npm - @kaitranntt/ccs - Versions diffs - 8.4.0 → 8.5.0-dev.1 - Mend

@kaitranntt/ccs 8.4.0 → 8.5.0-dev.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (749) hide show

package/dist/cliproxy/quota/quota-fetcher-gemini-cli/error-parsing.js ADDED Viewed

@@ -0,0 +1,259 @@
+"use strict";
+/**
+ * Error parsing and failure-result builders for the Gemini CLI quota fetcher.
+ *
+ * Translates non-200 upstream responses into structured {@link GeminiCliQuotaResult}
+ * failure payloads with sanitized error details, recovery hints, and provider
+ * entitlement evidence. Token values in error bodies are always redacted before
+ * being surfaced (see {@link sanitizeGeminiCliErrorDetail}).
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.buildGeminiCliHttpFailureResult = exports.buildGeminiCliForbiddenActionHint = exports.parseGeminiCliErrorBody = exports.extractGeminiCliNestedMessage = exports.sanitizeGeminiCliErrorDetail = exports.buildGeminiCliFailureResult = void 0;
+const provider_entitlement_evidence_1 = require("../../auth/provider-entitlement-evidence");
+const constants_1 = require("./constants");
+/**
+ * Build a structured failure {@link GeminiCliQuotaResult} with empty buckets.
+ * Centralizes the common failure shape so each HTTP-status branch only needs
+ * to supply its specific error/hint/entitlement fields.
+ */
+function buildGeminiCliFailureResult(accountId, projectId, options) {
+    return {
+        success: false,
+        buckets: [],
+        projectId,
+        tierLabel: null,
+        tierId: null,
+        creditBalance: null,
+        lastUpdated: Date.now(),
+        accountId,
+        error: options.error,
+        httpStatus: options.httpStatus,
+        errorCode: options.errorCode,
+        errorDetail: options.errorDetail,
+        actionHint: options.actionHint,
+        retryable: options.retryable,
+        needsReauth: options.needsReauth,
+        isForbidden: options.isForbidden,
+        entitlement: options.entitlement,
+    };
+}
+exports.buildGeminiCliFailureResult = buildGeminiCliFailureResult;
+/**
+ * Sanitize an upstream error body for safe inclusion in a quota result.
+ *
+ * - Collapses HTML responses to a placeholder (never leaks provider HTML).
+ * - Redacts common token/credential/secret field names and `Bearer <token>`.
+ * - Collapses internal whitespace to single spaces.
+ * - Truncates to {@link GEMINI_CLI_ERROR_DETAIL_MAX_LENGTH} with a sentinel suffix.
+ *
+ * Returns undefined for empty input. Token values are never preserved.
+ */
+function sanitizeGeminiCliErrorDetail(bodyText) {
+    const trimmed = bodyText.trim();
+    if (!trimmed) {
+        return undefined;
+    }
+    if (/^<!doctype html/i.test(trimmed) || /^<html/i.test(trimmed) || /^<[^>]+>/.test(trimmed)) {
+        return '[HTML error response omitted]';
+    }
+    let sanitized = trimmed
+        .replace(/"(access[_-]?token|refresh[_-]?token|authorization|cookie|set-cookie|api[_-]?key|session[_-]?token|token)"\s*:\s*"[^"]*"/gi, '"$1":"[redacted]"')
+        .replace(/Bearer\s+[A-Za-z0-9._-]+/g, 'Bearer [redacted]')
+        .replace(/\s+/g, ' ');
+    if (sanitized.length > constants_1.GEMINI_CLI_ERROR_DETAIL_MAX_LENGTH) {
+        sanitized = `${sanitized.slice(0, constants_1.GEMINI_CLI_ERROR_DETAIL_MAX_LENGTH - constants_1.GEMINI_CLI_ERROR_DETAIL_TRUNCATION_SUFFIX.length)}${constants_1.GEMINI_CLI_ERROR_DETAIL_TRUNCATION_SUFFIX}`;
+    }
+    return sanitized;
+}
+exports.sanitizeGeminiCliErrorDetail = sanitizeGeminiCliErrorDetail;
+/**
+ * Recursively extract the first non-empty message-like field from a nested
+ * error `details` array/object. Looks for `message`, `localizedMessage`,
+ * `description`, `reason`, and `error` keys at any level.
+ */
+function extractGeminiCliNestedMessage(value) {
+    if (Array.isArray(value)) {
+        for (const entry of value) {
+            const nested = extractGeminiCliNestedMessage(entry);
+            if (nested)
+                return nested;
+        }
+        return undefined;
+    }
+    if (!value || typeof value !== 'object') {
+        return undefined;
+    }
+    const record = value;
+    const directMessage = [
+        record.message,
+        record.localizedMessage,
+        record.description,
+        record.reason,
+        record.error,
+    ].find((candidate) => typeof candidate === 'string' && candidate.trim().length > 0);
+    if (directMessage) {
+        return directMessage;
+    }
+    return undefined;
+}
+exports.extractGeminiCliNestedMessage = extractGeminiCliNestedMessage;
+/**
+ * Parse an upstream error body into a structured {@link ParsedGeminiCliErrorBody}.
+ *
+ * Extracts a top-level code/status, a message (looking inside `error` objects
+ * and nested `details`), and a sanitized error detail. Non-JSON bodies fall
+ * back to the raw (sanitized) trimmed text as the message. HTML bodies surface
+ * only as the sanitized detail placeholder, never as the message.
+ */
+function parseGeminiCliErrorBody(bodyText) {
+    const trimmed = bodyText.trim();
+    if (!trimmed) {
+        return {};
+    }
+    const sanitizedDetail = sanitizeGeminiCliErrorDetail(trimmed);
+    try {
+        const parsed = JSON.parse(trimmed);
+        const topLevelMessage = [parsed.message, parsed.error].find((candidate) => typeof candidate === 'string' && candidate.trim().length > 0);
+        const topLevelCode = [parsed.code, parsed.status].find((candidate) => typeof candidate === 'string' && candidate.trim().length > 0);
+        if (parsed.error && typeof parsed.error === 'object') {
+            const error = parsed.error;
+            return {
+                errorCode: [error.status, error.code, topLevelCode].find((candidate) => typeof candidate === 'string' && candidate.trim().length > 0) || undefined,
+                errorDetail: sanitizedDetail,
+                message: [
+                    error.message,
+                    error.error,
+                    extractGeminiCliNestedMessage(error.details),
+                    topLevelMessage,
+                ].find((candidate) => typeof candidate === 'string' && candidate.trim().length > 0) || undefined,
+            };
+        }
+        return {
+            errorCode: topLevelCode,
+            errorDetail: sanitizedDetail,
+            message: [topLevelMessage, extractGeminiCliNestedMessage(parsed.details)].find((candidate) => typeof candidate === 'string' && candidate.trim().length > 0) || undefined,
+        };
+    }
+    catch {
+        return {
+            errorDetail: sanitizedDetail,
+            message: sanitizedDetail === '[HTML error response omitted]' ? undefined : trimmed,
+        };
+    }
+}
+exports.parseGeminiCliErrorBody = parseGeminiCliErrorBody;
+/**
+ * Build a user-facing recovery hint for a 403 (forbidden) upstream response.
+ * Inspects the parsed message/detail for verification, project, or generic
+ * access signals and returns the matching recovery instruction.
+ */
+function buildGeminiCliForbiddenActionHint(parsed) {
+    const combined = `${parsed.message || ''} ${parsed.errorDetail || ''}`.toLowerCase();
+    if (combined.includes('verify') || combined.includes('verification')) {
+        return 'Complete the Google account verification mentioned above, then retry quota refresh.';
+    }
+    if (combined.includes('project')) {
+        return 'Confirm this Google project still has Gemini CLI quota access, then retry.';
+    }
+    return 'Check the Google account or workspace access shown above, then retry quota refresh.';
+}
+exports.buildGeminiCliForbiddenActionHint = buildGeminiCliForbiddenActionHint;
+/**
+ * Build a structured failure result from an HTTP non-200 upstream response.
+ *
+ * Status-specific behavior:
+ *   - 401: marks the result as needsReauth (user must re-run `ccs gemini --auth`)
+ *   - 403: marks forbidden with runtime-inferred not_entitled evidence and a
+ *          context-aware action hint
+ *   - 429: distinguishes MODEL_CAPACITY_EXHAUSTED (entitled but capacity-stressed)
+ *          from generic rate limiting
+ *   - >=500: retryable provider-unavailable result
+ *   - other: generic non-retryable quota_request_failed
+ */
+function buildGeminiCliHttpFailureResult(accountId, projectId, status, bodyText) {
+    const parsed = parseGeminiCliErrorBody(bodyText);
+    if (status === 401) {
+        return buildGeminiCliFailureResult(accountId, projectId, {
+            error: parsed.message || 'Token expired or invalid',
+            httpStatus: 401,
+            errorCode: parsed.errorCode || 'reauth_required',
+            errorDetail: parsed.errorDetail,
+            actionHint: 'Run ccs gemini --auth to reconnect this account.',
+            needsReauth: true,
+            retryable: false,
+        });
+    }
+    if (status === 403) {
+        return buildGeminiCliFailureResult(accountId, projectId, {
+            error: parsed.message || 'Quota access forbidden for this account',
+            httpStatus: 403,
+            errorCode: parsed.errorCode || 'quota_api_forbidden',
+            errorDetail: parsed.errorDetail,
+            actionHint: buildGeminiCliForbiddenActionHint(parsed),
+            isForbidden: true,
+            retryable: false,
+            entitlement: (0, provider_entitlement_evidence_1.buildProviderEntitlementEvidence)({
+                normalizedTier: 'unknown',
+                source: 'runtime_inference',
+                confidence: 'medium',
+                accessState: 'not_entitled',
+                capacityState: 'unknown',
+            }),
+        });
+    }
+    if (status === 429) {
+        if ((0, provider_entitlement_evidence_1.isModelCapacityExhausted)(parsed.message, parsed.errorDetail, parsed.errorCode)) {
+            return buildGeminiCliFailureResult(accountId, projectId, {
+                error: parsed.message || 'Model capacity exhausted for this account right now',
+                httpStatus: 429,
+                errorCode: 'capacity_exhausted',
+                errorDetail: parsed.errorDetail,
+                actionHint: 'Retry later or switch to another Gemini model. This indicates temporary model capacity, not an authentication failure.',
+                retryable: true,
+                entitlement: (0, provider_entitlement_evidence_1.buildProviderEntitlementEvidence)({
+                    normalizedTier: 'unknown',
+                    source: 'runtime_inference',
+                    confidence: 'medium',
+                    accessState: 'entitled',
+                    capacityState: 'capacity_exhausted',
+                    notes: 'Upstream returned MODEL_CAPACITY_EXHAUSTED for this model.',
+                }),
+            });
+        }
+        return buildGeminiCliFailureResult(accountId, projectId, {
+            error: parsed.message || 'Rate limited - try again later',
+            httpStatus: 429,
+            errorCode: parsed.errorCode || 'rate_limited',
+            errorDetail: parsed.errorDetail,
+            actionHint: 'Retry after a short delay.',
+            retryable: true,
+            entitlement: (0, provider_entitlement_evidence_1.buildProviderEntitlementEvidence)({
+                normalizedTier: 'unknown',
+                source: 'runtime_inference',
+                confidence: 'low',
+                accessState: 'unknown',
+                capacityState: 'rate_limited',
+            }),
+        });
+    }
+    if (status >= 500) {
+        return buildGeminiCliFailureResult(accountId, projectId, {
+            error: parsed.message || `Gemini quota service unavailable (HTTP ${status})`,
+            httpStatus: status,
+            errorCode: parsed.errorCode || 'provider_unavailable',
+            errorDetail: parsed.errorDetail,
+            actionHint: 'Retry later. This looks like a temporary Google upstream problem.',
+            retryable: true,
+        });
+    }
+    return buildGeminiCliFailureResult(accountId, projectId, {
+        error: parsed.message || `Gemini quota request failed (HTTP ${status})`,
+        httpStatus: status,
+        errorCode: parsed.errorCode || 'quota_request_failed',
+        errorDetail: parsed.errorDetail,
+        actionHint: 'Inspect the upstream response details and retry if appropriate.',
+        retryable: false,
+    });
+}
+exports.buildGeminiCliHttpFailureResult = buildGeminiCliHttpFailureResult;
+//# sourceMappingURL=error-parsing.js.map

package/dist/cliproxy/quota/quota-fetcher-gemini-cli/error-parsing.js.map ADDED Viewed

@@ -0,0 +1 @@

+ {"version":3,"file":"error-parsing.js","sourceRoot":"","sources":["../../../../src/cliproxy/quota/quota-fetcher-gemini-cli/error-parsing.ts"],"names":[],"mappings":";AAAA;;;;;;;GAOG;;;AAEH,4FAGkD;AAMlD,2CAGqB;AAErB;;;;GAIG;AACH,SAAgB,2BAA2B,CACzC,SAAiB,EACjB,SAAwB,EACxB,OAAsC;IAEtC,OAAO;QACL,OAAO,EAAE,KAAK;QACd,OAAO,EAAE,EAAE;QACX,SAAS;QACT,SAAS,EAAE,IAAI;QACf,MAAM,EAAE,IAAI;QACZ,aAAa,EAAE,IAAI;QACnB,WAAW,EAAE,IAAI,CAAC,GAAG,EAAE;QACvB,SAAS;QACT,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,UAAU,EAAE,OAAO,CAAC,UAAU;QAC9B,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,WAAW,EAAE,OAAO,CAAC,WAAW;QAChC,UAAU,EAAE,OAAO,CAAC,UAAU;QAC9B,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,WAAW,EAAE,OAAO,CAAC,WAAW;QAChC,WAAW,EAAE,OAAO,CAAC,WAAW;QAChC,WAAW,EAAE,OAAO,CAAC,WAAW;KACjC,CAAC;AACJ,CAAC;AAxBD,kEAwBC;AAED;;;;;;;;;GASG;AACH,SAAgB,4BAA4B,CAAC,QAAgB;IAC3D,MAAM,OAAO,GAAG,QAAQ,CAAC,IAAI,EAAE,CAAC;IAChC,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,IAAI,kBAAkB,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QAC5F,OAAO,+BAA+B,CAAC;IACzC,CAAC;IAED,IAAI,SAAS,GAAG,OAAO;SACpB,OAAO,CACN,4HAA4H,EAC5H,mBAAmB,CACpB;SACA,OAAO,CAAC,2BAA2B,EAAE,mBAAmB,CAAC;SACzD,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAExB,IAAI,SAAS,CAAC,MAAM,GAAG,8CAAkC,EAAE,CAAC;QAC1D,SAAS,GAAG,GAAG,SAAS,CAAC,KAAK,CAC5B,CAAC,EACD,8CAAkC,GAAG,qDAAyC,CAAC,MAAM,CACtF,GAAG,qDAAyC,EAAE,CAAC;IAClD,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC;AA1BD,oEA0BC;AAED;;;;GAIG;AACH,SAAgB,6BAA6B,CAAC,KAAc;IAC1D,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,KAAK,MAAM,KAAK,IAAI,KAAK,EAAE,CAAC;YAC1B,MAAM,MAAM,GAAG,6BAA6B,CAAC,KAAK,CAAC,CAAC;YACpD,IAAI,MAAM;gBAAE,OAAO,MAAM,CAAC;QAC5B,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACxC,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,MAAM,MAAM,GAAG,KAAgC,CAAC;IAChD,MAAM,aAAa,GAAG;QACpB,MAAM,CAAC,OAAO;QACd,MAAM,CAAC,gBAAgB;QACvB,MAAM,CAAC,WAAW;QAClB,MAAM,CAAC,MAAM;QACb,MAAM,CAAC,KAAK;KACb,CAAC,IAAI,CACJ,CAAC,SAAS,EAAuB,EAAE,CAAC,OAAO,SAAS,KAAK,QAAQ,IAAI,SAAS,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CACjG,CAAC;IACF,IAAI,aAAa,EAAE,CAAC;QAClB,OAAO,aAAa,CAAC;IACvB,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC;AA5BD,sEA4BC;AAED;;;;;;;GAOG;AACH,SAAgB,uBAAuB,CAAC,QAAgB;IACtD,MAAM,OAAO,GAAG,QAAQ,CAAC,IAAI,EAAE,CAAC;IAChC,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,MAAM,eAAe,GAAG,4BAA4B,CAAC,OAAO,CAAC,CAAC;IAE9D,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAA4B,CAAC;QAC9D,MAAM,eAAe,GAAG,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CACzD,CAAC,SAAS,EAAuB,EAAE,CACjC,OAAO,SAAS,KAAK,QAAQ,IAAI,SAAS,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAC/D,CAAC;QACF,MAAM,YAAY,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CACpD,CAAC,SAAS,EAAuB,EAAE,CACjC,OAAO,SAAS,KAAK,QAAQ,IAAI,SAAS,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAC/D,CAAC;QAEF,IAAI,MAAM,CAAC,KAAK,IAAI,OAAO,MAAM,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;YACrD,MAAM,KAAK,GAAG,MAAM,CAAC,KAAgC,CAAC;YACtD,OAAO;gBACL,SAAS,EACP,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC,IAAI,CAC3C,CAAC,SAAS,EAAuB,EAAE,CACjC,OAAO,SAAS,KAAK,QAAQ,IAAI,SAAS,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAC/D,IAAI,SAAS;gBAChB,WAAW,EAAE,eAAe;gBAC5B,OAAO,EACL;oBACE,KAAK,CAAC,OAAO;oBACb,KAAK,CAAC,KAAK;oBACX,6BAA6B,CAAC,KAAK,CAAC,OAAO,CAAC;oBAC5C,eAAe;iBAChB,CAAC,IAAI,CACJ,CAAC,SAAS,EAAuB,EAAE,CACjC,OAAO,SAAS,KAAK,QAAQ,IAAI,SAAS,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAC/D,IAAI,SAAS;aACjB,CAAC;QACJ,CAAC;QAED,OAAO;YACL,SAAS,EAAE,YAAY;YACvB,WAAW,EAAE,eAAe;YAC5B,OAAO,EACL,CAAC,eAAe,EAAE,6BAA6B,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CACnE,CAAC,SAAS,EAAuB,EAAE,CACjC,OAAO,SAAS,KAAK,QAAQ,IAAI,SAAS,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAC/D,IAAI,SAAS;SACjB,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO;YACL,WAAW,EAAE,eAAe;YAC5B,OAAO,EAAE,eAAe,KAAK,+BAA+B,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO;SACnF,CAAC;IACJ,CAAC;AACH,CAAC;AAxDD,0DAwDC;AAED;;;;GAIG;AACH,SAAgB,iCAAiC,CAAC,MAAgC;IAChF,MAAM,QAAQ,GAAG,GAAG,MAAM,CAAC,OAAO,IAAI,EAAE,IAAI,MAAM,CAAC,WAAW,IAAI,EAAE,EAAE,CAAC,WAAW,EAAE,CAAC;IACrF,IAAI,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,cAAc,CAAC,EAAE,CAAC;QACrE,OAAO,qFAAqF,CAAC;IAC/F,CAAC;IACD,IAAI,QAAQ,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;QACjC,OAAO,4EAA4E,CAAC;IACtF,CAAC;IACD,OAAO,qFAAqF,CAAC;AAC/F,CAAC;AATD,8EASC;AAED;;;;;;;;;;;GAWG;AACH,SAAgB,+BAA+B,CAC7C,SAAiB,EACjB,SAAwB,EACxB,MAAc,EACd,QAAgB;IAEhB,MAAM,MAAM,GAAG,uBAAuB,CAAC,QAAQ,CAAC,CAAC;IAEjD,IAAI,MAAM,KAAK,GAAG,EAAE,CAAC;QACnB,OAAO,2BAA2B,CAAC,SAAS,EAAE,SAAS,EAAE;YACvD,KAAK,EAAE,MAAM,CAAC,OAAO,IAAI,0BAA0B;YACnD,UAAU,EAAE,GAAG;YACf,SAAS,EAAE,MAAM,CAAC,SAAS,IAAI,iBAAiB;YAChD,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,UAAU,EAAE,kDAAkD;YAC9D,WAAW,EAAE,IAAI;YACjB,SAAS,EAAE,KAAK;SACjB,CAAC,CAAC;IACL,CAAC;IAED,IAAI,MAAM,KAAK,GAAG,EAAE,CAAC;QACnB,OAAO,2BAA2B,CAAC,SAAS,EAAE,SAAS,EAAE;YACvD,KAAK,EAAE,MAAM,CAAC,OAAO,IAAI,yCAAyC;YAClE,UAAU,EAAE,GAAG;YACf,SAAS,EAAE,MAAM,CAAC,SAAS,IAAI,qBAAqB;YACpD,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,UAAU,EAAE,iCAAiC,CAAC,MAAM,CAAC;YACrD,WAAW,EAAE,IAAI;YACjB,SAAS,EAAE,KAAK;YAChB,WAAW,EAAE,IAAA,gEAAgC,EAAC;gBAC5C,cAAc,EAAE,SAAS;gBACzB,MAAM,EAAE,mBAAmB;gBAC3B,UAAU,EAAE,QAAQ;gBACpB,WAAW,EAAE,cAAc;gBAC3B,aAAa,EAAE,SAAS;aACzB,CAAC;SACH,CAAC,CAAC;IACL,CAAC;IAED,IAAI,MAAM,KAAK,GAAG,EAAE,CAAC;QACnB,IAAI,IAAA,wDAAwB,EAAC,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,WAAW,EAAE,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC;YACnF,OAAO,2BAA2B,CAAC,SAAS,EAAE,SAAS,EAAE;gBACvD,KAAK,EAAE,MAAM,CAAC,OAAO,IAAI,qDAAqD;gBAC9E,UAAU,EAAE,GAAG;gBACf,SAAS,EAAE,oBAAoB;gBAC/B,WAAW,EAAE,MAAM,CAAC,WAAW;gBAC/B,UAAU,EACR,wHAAwH;gBAC1H,SAAS,EAAE,IAAI;gBACf,WAAW,EAAE,IAAA,gEAAgC,EAAC;oBAC5C,cAAc,EAAE,SAAS;oBACzB,MAAM,EAAE,mBAAmB;oBAC3B,UAAU,EAAE,QAAQ;oBACpB,WAAW,EAAE,UAAU;oBACvB,aAAa,EAAE,oBAAoB;oBACnC,KAAK,EAAE,4DAA4D;iBACpE,CAAC;aACH,CAAC,CAAC;QACL,CAAC;QAED,OAAO,2BAA2B,CAAC,SAAS,EAAE,SAAS,EAAE;YACvD,KAAK,EAAE,MAAM,CAAC,OAAO,IAAI,gCAAgC;YACzD,UAAU,EAAE,GAAG;YACf,SAAS,EAAE,MAAM,CAAC,SAAS,IAAI,cAAc;YAC7C,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,UAAU,EAAE,4BAA4B;YACxC,SAAS,EAAE,IAAI;YACf,WAAW,EAAE,IAAA,gEAAgC,EAAC;gBAC5C,cAAc,EAAE,SAAS;gBACzB,MAAM,EAAE,mBAAmB;gBAC3B,UAAU,EAAE,KAAK;gBACjB,WAAW,EAAE,SAAS;gBACtB,aAAa,EAAE,cAAc;aAC9B,CAAC;SACH,CAAC,CAAC;IACL,CAAC;IAED,IAAI,MAAM,IAAI,GAAG,EAAE,CAAC;QAClB,OAAO,2BAA2B,CAAC,SAAS,EAAE,SAAS,EAAE;YACvD,KAAK,EAAE,MAAM,CAAC,OAAO,IAAI,0CAA0C,MAAM,GAAG;YAC5E,UAAU,EAAE,MAAM;YAClB,SAAS,EAAE,MAAM,CAAC,SAAS,IAAI,sBAAsB;YACrD,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,UAAU,EAAE,mEAAmE;YAC/E,SAAS,EAAE,IAAI;SAChB,CAAC,CAAC;IACL,CAAC;IAED,OAAO,2BAA2B,CAAC,SAAS,EAAE,SAAS,EAAE;QACvD,KAAK,EAAE,MAAM,CAAC,OAAO,IAAI,qCAAqC,MAAM,GAAG;QACvE,UAAU,EAAE,MAAM;QAClB,SAAS,EAAE,MAAM,CAAC,SAAS,IAAI,sBAAsB;QACrD,WAAW,EAAE,MAAM,CAAC,WAAW;QAC/B,UAAU,EAAE,iEAAiE;QAC7E,SAAS,EAAE,KAAK;KACjB,CAAC,CAAC;AACL,CAAC;AAhGD,0EAgGC"}

package/dist/cliproxy/quota/quota-fetcher-gemini-cli/index.d.ts ADDED Viewed

@@ -0,0 +1,20 @@
+/**
+ * Barrel for the Gemini CLI quota fetcher submodule.
+ *
+ * Re-exports the original public surface of `quota-fetcher-gemini-cli.ts`
+ * so the file at the original path can be reduced to a thin re-export
+ * (preserving import paths and signatures). Submodules are private
+ * implementation detail; only the symbols below are part of the contract.
+ */
+export { fetchGeminiCliQuota, fetchAllGeminiCliQuotas } from './quota-fetcher';
+export { resolveGeminiCliProjectId } from './token-parsing';
+export { buildGeminiCliBuckets } from './bucket-building';
+export { sanitizeGeminiCliErrorDetail, extractGeminiCliNestedMessage, parseGeminiCliErrorBody, buildGeminiCliForbiddenActionHint, } from './error-parsing';
+import { sanitizeGeminiCliErrorDetail, extractGeminiCliNestedMessage, parseGeminiCliErrorBody, buildGeminiCliForbiddenActionHint } from './error-parsing';
+export declare const __testExports: {
+    sanitizeGeminiCliErrorDetail: typeof sanitizeGeminiCliErrorDetail;
+    extractGeminiCliNestedMessage: typeof extractGeminiCliNestedMessage;
+    parseGeminiCliErrorBody: typeof parseGeminiCliErrorBody;
+    buildGeminiCliForbiddenActionHint: typeof buildGeminiCliForbiddenActionHint;
+};
+//# sourceMappingURL=index.d.ts.map

package/dist/cliproxy/quota/quota-fetcher-gemini-cli/index.d.ts.map ADDED Viewed

@@ -0,0 +1 @@

+ {"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/cliproxy/quota/quota-fetcher-gemini-cli/index.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAGH,OAAO,EAAE,mBAAmB,EAAE,uBAAuB,EAAE,MAAM,iBAAiB,CAAC;AAI/E,OAAO,EAAE,yBAAyB,EAAE,MAAM,iBAAiB,CAAC;AAC5D,OAAO,EAAE,qBAAqB,EAAE,MAAM,mBAAmB,CAAC;AAI1D,OAAO,EACL,4BAA4B,EAC5B,6BAA6B,EAC7B,uBAAuB,EACvB,iCAAiC,GAClC,MAAM,iBAAiB,CAAC;AAIzB,OAAO,EACL,4BAA4B,EAC5B,6BAA6B,EAC7B,uBAAuB,EACvB,iCAAiC,EAClC,MAAM,iBAAiB,CAAC;AAEzB,eAAO,MAAM,aAAa;;;;;CAKzB,CAAC"}

package/dist/cliproxy/quota/quota-fetcher-gemini-cli/index.js ADDED Viewed

@@ -0,0 +1,38 @@
+"use strict";
+/**
+ * Barrel for the Gemini CLI quota fetcher submodule.
+ *
+ * Re-exports the original public surface of `quota-fetcher-gemini-cli.ts`
+ * so the file at the original path can be reduced to a thin re-export
+ * (preserving import paths and signatures). Submodules are private
+ * implementation detail; only the symbols below are part of the contract.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.__testExports = exports.buildGeminiCliForbiddenActionHint = exports.parseGeminiCliErrorBody = exports.extractGeminiCliNestedMessage = exports.sanitizeGeminiCliErrorDetail = exports.buildGeminiCliBuckets = exports.resolveGeminiCliProjectId = exports.fetchAllGeminiCliQuotas = exports.fetchGeminiCliQuota = void 0;
+// Public API
+var quota_fetcher_1 = require("./quota-fetcher");
+Object.defineProperty(exports, "fetchGeminiCliQuota", { enumerable: true, get: function () { return quota_fetcher_1.fetchGeminiCliQuota; } });
+Object.defineProperty(exports, "fetchAllGeminiCliQuotas", { enumerable: true, get: function () { return quota_fetcher_1.fetchAllGeminiCliQuotas; } });
+// Exported helpers (also part of the public surface - used by tests and
+// the bucket/grouping normalization tests).
+var token_parsing_1 = require("./token-parsing");
+Object.defineProperty(exports, "resolveGeminiCliProjectId", { enumerable: true, get: function () { return token_parsing_1.resolveGeminiCliProjectId; } });
+var bucket_building_1 = require("./bucket-building");
+Object.defineProperty(exports, "buildGeminiCliBuckets", { enumerable: true, get: function () { return bucket_building_1.buildGeminiCliBuckets; } });
+// Test exports: keep the original `__testExports` bag shape stable so the
+// existing test suite (which destructures `__testExports`) keeps working.
+var error_parsing_1 = require("./error-parsing");
+Object.defineProperty(exports, "sanitizeGeminiCliErrorDetail", { enumerable: true, get: function () { return error_parsing_1.sanitizeGeminiCliErrorDetail; } });
+Object.defineProperty(exports, "extractGeminiCliNestedMessage", { enumerable: true, get: function () { return error_parsing_1.extractGeminiCliNestedMessage; } });
+Object.defineProperty(exports, "parseGeminiCliErrorBody", { enumerable: true, get: function () { return error_parsing_1.parseGeminiCliErrorBody; } });
+Object.defineProperty(exports, "buildGeminiCliForbiddenActionHint", { enumerable: true, get: function () { return error_parsing_1.buildGeminiCliForbiddenActionHint; } });
+// Re-export `__testExports` as a single object to preserve the original
+// named-const export shape (`__testExports`).
+const error_parsing_2 = require("./error-parsing");
+exports.__testExports = {
+    sanitizeGeminiCliErrorDetail: error_parsing_2.sanitizeGeminiCliErrorDetail,
+    extractGeminiCliNestedMessage: error_parsing_2.extractGeminiCliNestedMessage,
+    parseGeminiCliErrorBody: error_parsing_2.parseGeminiCliErrorBody,
+    buildGeminiCliForbiddenActionHint: error_parsing_2.buildGeminiCliForbiddenActionHint,
+};
+//# sourceMappingURL=index.js.map

package/dist/cliproxy/quota/quota-fetcher-gemini-cli/index.js.map ADDED Viewed

@@ -0,0 +1 @@

+ {"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/cliproxy/quota/quota-fetcher-gemini-cli/index.ts"],"names":[],"mappings":";AAAA;;;;;;;GAOG;;;AAEH,aAAa;AACb,iDAA+E;AAAtE,oHAAA,mBAAmB,OAAA;AAAE,wHAAA,uBAAuB,OAAA;AAErD,wEAAwE;AACxE,4CAA4C;AAC5C,iDAA4D;AAAnD,0HAAA,yBAAyB,OAAA;AAClC,qDAA0D;AAAjD,wHAAA,qBAAqB,OAAA;AAE9B,0EAA0E;AAC1E,0EAA0E;AAC1E,iDAKyB;AAJvB,6HAAA,4BAA4B,OAAA;AAC5B,8HAAA,6BAA6B,OAAA;AAC7B,wHAAA,uBAAuB,OAAA;AACvB,kIAAA,iCAAiC,OAAA;AAGnC,wEAAwE;AACxE,8CAA8C;AAC9C,mDAKyB;AAEZ,QAAA,aAAa,GAAG;IAC3B,4BAA4B,EAA5B,4CAA4B;IAC5B,6BAA6B,EAA7B,6CAA6B;IAC7B,uBAAuB,EAAvB,uCAAuB;IACvB,iCAAiC,EAAjC,iDAAiC;CAClC,CAAC"}

package/dist/cliproxy/quota/quota-fetcher-gemini-cli/managed-request.d.ts ADDED Viewed

@@ -0,0 +1,82 @@
+/**
+ * Managed and direct HTTP request machinery for the Gemini CLI quota fetcher.
+ *
+ * Wraps the two upstream call paths used when fetching Gemini CLI quota and
+ * supplementary metadata:
+ *   - managed: delegated through the CLIProxy management API (uses $TOKEN$
+ *       substitution so the local process never holds the live token)
+ *   - direct:  bearer-token fetch against the Google Cloud Code endpoint
+ *
+ * The preferred path is configurable per call. On a 401 from the direct path,
+ * the managed path is retried as a delegated-auth refresh fallback. A
+ * `GeminiManagedAuthUnavailableError` is thrown when managed auth is required
+ * but unreachable, so callers can surface a retryable failure result.
+ */
+/// <reference types="bun-types" />
+/// <reference types="node" />
+import type { ManagedGeminiAuthContext, ManagedGeminiAuthLookupResult, ManagedGeminiRequestResult, ManagedResponse, ManagementAuthFile } from './types';
+/**
+ * Thrown when Gemini delegated auth refresh via the CLIProxy management API
+ * is required but temporarily unreachable. Callers translate this into a
+ * retryable failure result.
+ */
+export declare class GeminiManagedAuthUnavailableError extends Error {
+    constructor();
+}
+/**
+ * Read a fetch Response into the normalized {@link ManagedResponse} shape.
+ * `viaManagement` marks whether the response came through the managed API so
+ * downstream log messages can attribute the source correctly.
+ */
+export declare function readManagedResponse(response: Response, viaManagement: boolean): Promise<ManagedResponse>;
+/**
+ * Check whether a filename matches the Gemini CLI auth file naming patterns.
+ * Recognizes three patterns:
+ *   - legacy:  gemini-*.json
+ *   - new:     *-gen-lang-client-*.json
+ *   - email:   contains "@" (verified against type inside the payload later)
+ */
+export declare function isGeminiAuthFile(filename: string): boolean;
+/**
+ * Determine whether a management-API auth-file descriptor belongs to the
+ * given Gemini account. Matches on provider/type normalized to "gemini",
+ * then on email, filename, or sanitized email substring.
+ */
+export declare function isGeminiAuthFileForAccount(file: ManagementAuthFile, accountId: string): boolean;
+/**
+ * Look up the management-API auth index for a Gemini account.
+ * Hits `/v0/management/auth-files` and matches the entry for this account.
+ * Returns `{ unavailable: true }` if the management API is unreachable or
+ * returns a non-OK response, so callers can fall back to direct auth.
+ */
+export declare function findManagedGeminiAuthIndex(accountId: string, timeoutMs: number): Promise<ManagedGeminiAuthLookupResult>;
+/**
+ * Look up the management auth index for a Gemini account, deduping concurrent
+ * lookups for the same account via the shared {@link ManagedGeminiAuthContext}.
+ * The first caller wins; subsequent callers await the same promise.
+ */
+export declare function getManagedGeminiAuthIndex(accountId: string, timeoutMs: number, context?: ManagedGeminiAuthContext): Promise<ManagedGeminiAuthLookupResult>;
+/**
+ * Perform a single upstream request to the Gemini CLI API via the CLIProxy
+ * management `/v0/management/api-call` endpoint. Uses `$TOKEN$` substitution
+ * so the live token never leaves the management API. Returns
+ * `{ unavailable: true }` if the management path is unreachable; returns
+ * `{ response: null, unavailable: false }` if the request succeeded but no
+ * matching auth file was found.
+ */
+export declare function performManagedGeminiRequest(accountId: string, url: string, body: string, timeoutMs: number, authContext?: ManagedGeminiAuthContext): Promise<ManagedGeminiRequestResult>;
+/**
+ * Perform a Gemini CLI upstream request, preferring the managed path when
+ * requested and falling back to direct bearer-token auth. On a 401 from the
+ * direct path, retries via managed auth as a delegated-auth refresh; throws
+ * {@link GeminiManagedAuthUnavailableError} if that retry is unreachable.
+ *
+ * @param accountId     Account identifier (email), used for managed auth lookup.
+ * @param accessToken   Bearer token for the direct path. Never logged.
+ * @param url           Target Gemini CLI API URL.
+ * @param body          JSON request body string.
+ * @param preferManagement When true, try the managed path first.
+ * @param authContext   Optional shared context to dedupe auth-index lookups.
+ */
+export declare function performGeminiCliRequest(accountId: string, accessToken: string, url: string, body: string, preferManagement?: boolean, authContext?: ManagedGeminiAuthContext): Promise<ManagedResponse>;
+//# sourceMappingURL=managed-request.d.ts.map

package/dist/cliproxy/quota/quota-fetcher-gemini-cli/managed-request.d.ts.map ADDED Viewed

@@ -0,0 +1 @@

+ {"version":3,"file":"managed-request.d.ts","sourceRoot":"","sources":["../../../../src/cliproxy/quota/quota-fetcher-gemini-cli/managed-request.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;;;AAWH,OAAO,KAAK,EACV,wBAAwB,EACxB,6BAA6B,EAC7B,0BAA0B,EAC1B,eAAe,EAEf,kBAAkB,EACnB,MAAM,SAAS,CAAC;AAEjB;;;;GAIG;AACH,qBAAa,iCAAkC,SAAQ,KAAK;;CAK3D;AAED;;;;GAIG;AACH,wBAAsB,mBAAmB,CACvC,QAAQ,EAAE,QAAQ,EAClB,aAAa,EAAE,OAAO,GACrB,OAAO,CAAC,eAAe,CAAC,CAQ1B;AAED;;;;;;GAMG;AACH,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAS1D;AAED;;;;GAIG;AACH,wBAAgB,0BAA0B,CAAC,IAAI,EAAE,kBAAkB,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAwB/F;AAED;;;;;GAKG;AACH,wBAAsB,0BAA0B,CAC9C,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,6BAA6B,CAAC,CAuBxC;AAED;;;;GAIG;AACH,wBAAsB,yBAAyB,CAC7C,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE,MAAM,EACjB,OAAO,CAAC,EAAE,wBAAwB,GACjC,OAAO,CAAC,6BAA6B,CAAC,CAOxC;AAED;;;;;;;GAOG;AACH,wBAAsB,2BAA2B,CAC/C,SAAS,EAAE,MAAM,EACjB,GAAG,EAAE,MAAM,EACX,IAAI,EAAE,MAAM,EACZ,SAAS,EAAE,MAAM,EACjB,WAAW,CAAC,EAAE,wBAAwB,GACrC,OAAO,CAAC,0BAA0B,CAAC,CA2DrC;AAED;;;;;;;;;;;;GAYG;AACH,wBAAsB,uBAAuB,CAC3C,SAAS,EAAE,MAAM,EACjB,WAAW,EAAE,MAAM,EACnB,GAAG,EAAE,MAAM,EACX,IAAI,EAAE,MAAM,EACZ,gBAAgB,UAAQ,EACxB,WAAW,CAAC,EAAE,wBAAwB,GACrC,OAAO,CAAC,eAAe,CAAC,CAmE1B"}