@kaitranntt/ccs 8.4.0 → 8.5.0-dev.1

package/dist/cliproxy/quota/quota-fetcher-gemini-cli/managed-request.js

@@ -0,0 +1,263 @@
+"use strict";
+/**
+ * Managed and direct HTTP request machinery for the Gemini CLI quota fetcher.
+ *
+ * Wraps the two upstream call paths used when fetching Gemini CLI quota and
+ * supplementary metadata:
+ *   - managed: delegated through the CLIProxy management API (uses $TOKEN$
+ *       substitution so the local process never holds the live token)
+ *   - direct:  bearer-token fetch against the Google Cloud Code endpoint
+ *
+ * The preferred path is configurable per call. On a 401 from the direct path,
+ * the managed path is retried as a delegated-auth refresh fallback. A
+ * `GeminiManagedAuthUnavailableError` is thrown when managed auth is required
+ * but unreachable, so callers can surface a retryable failure result.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.performGeminiCliRequest = exports.performManagedGeminiRequest = exports.getManagedGeminiAuthIndex = exports.findManagedGeminiAuthIndex = exports.isGeminiAuthFileForAccount = exports.isGeminiAuthFile = exports.readManagedResponse = exports.GeminiManagedAuthUnavailableError = void 0;
+const proxy_target_resolver_1 = require("../../proxy/proxy-target-resolver");
+const provider_capabilities_1 = require("../../provider-capabilities");
+const auth_utils_1 = require("../../auth/auth-utils");
+const constants_1 = require("./constants");
+const shared_utils_1 = require("./shared-utils");
+/**
+ * Thrown when Gemini delegated auth refresh via the CLIProxy management API
+ * is required but temporarily unreachable. Callers translate this into a
+ * retryable failure result.
+ */
+class GeminiManagedAuthUnavailableError extends Error {
+    constructor() {
+        super('CLIProxy managed Gemini auth is temporarily unavailable');
+        this.name = 'GeminiManagedAuthUnavailableError';
+    }
+}
+exports.GeminiManagedAuthUnavailableError = GeminiManagedAuthUnavailableError;
+/**
+ * Read a fetch Response into the normalized {@link ManagedResponse} shape.
+ * `viaManagement` marks whether the response came through the managed API so
+ * downstream log messages can attribute the source correctly.
+ */
+async function readManagedResponse(response, viaManagement) {
+    const bodyText = await response.text();
+    return {
+        status: response.status,
+        bodyText,
+        json: (0, shared_utils_1.safeParseJson)(bodyText),
+        viaManagement,
+    };
+}
+exports.readManagedResponse = readManagedResponse;
+/**
+ * Check whether a filename matches the Gemini CLI auth file naming patterns.
+ * Recognizes three patterns:
+ *   - legacy:  gemini-*.json
+ *   - new:     *-gen-lang-client-*.json
+ *   - email:   contains "@" (verified against type inside the payload later)
+ */
+function isGeminiAuthFile(filename) {
+    if (!filename.endsWith('.json'))
+        return false;
+    // Legacy pattern: gemini-email.json
+    if (filename.startsWith('gemini-'))
+        return true;
+    // New pattern: email-gen-lang-client-projectId.json
+    if (filename.includes('-gen-lang-client-'))
+        return true;
+    // Check if contains @ (email pattern) - will verify type inside
+    if (filename.includes('@'))
+        return true;
+    return false;
+}
+exports.isGeminiAuthFile = isGeminiAuthFile;
+/**
+ * Determine whether a management-API auth-file descriptor belongs to the
+ * given Gemini account. Matches on provider/type normalized to "gemini",
+ * then on email, filename, or sanitized email substring.
+ */
+function isGeminiAuthFileForAccount(file, accountId) {
+    const rawProvider = (0, shared_utils_1.normalizeStringValue)(file.provider ?? file.type);
+    if (!rawProvider || (0, provider_capabilities_1.mapExternalProviderName)(rawProvider) !== 'gemini') {
+        return false;
+    }
+    const email = (0, shared_utils_1.normalizeStringValue)(file.email);
+    const normalizedAccountId = accountId.trim().toLowerCase();
+    if (email?.toLowerCase() === normalizedAccountId) {
+        return true;
+    }
+    const normalizedName = (0, shared_utils_1.normalizeStringValue)(file.name);
+    if (!normalizedName) {
+        return false;
+    }
+    const normalizedFileName = normalizedName.toLowerCase();
+    const sanitizedAccount = (0, auth_utils_1.sanitizeEmail)(accountId).toLowerCase();
+    return (normalizedFileName === `gemini-${sanitizedAccount}.json` ||
+        normalizedFileName.startsWith(`${normalizedAccountId}-gen-lang-client-`) ||
+        normalizedFileName.includes(sanitizedAccount));
+}
+exports.isGeminiAuthFileForAccount = isGeminiAuthFileForAccount;
+/**
+ * Look up the management-API auth index for a Gemini account.
+ * Hits `/v0/management/auth-files` and matches the entry for this account.
+ * Returns `{ unavailable: true }` if the management API is unreachable or
+ * returns a non-OK response, so callers can fall back to direct auth.
+ */
+async function findManagedGeminiAuthIndex(accountId, timeoutMs) {
+    const target = (0, proxy_target_resolver_1.getProxyTarget)();
+    const controller = new AbortController();
+    const timeoutId = setTimeout(() => controller.abort(), timeoutMs);
+    try {
+        const response = await fetch((0, proxy_target_resolver_1.buildProxyUrl)(target, '/v0/management/auth-files'), {
+            signal: controller.signal,
+            headers: (0, proxy_target_resolver_1.buildManagementHeaders)(target),
+        });
+        clearTimeout(timeoutId);
+        if (!response.ok) {
+            return { authIndex: null, unavailable: true };
+        }
+        const data = (await response.json());
+        const match = data.files?.find((file) => isGeminiAuthFileForAccount(file, accountId));
+        return { authIndex: match?.auth_index ?? null, unavailable: false };
+    }
+    catch {
+        clearTimeout(timeoutId);
+        return { authIndex: null, unavailable: true };
+    }
+}
+exports.findManagedGeminiAuthIndex = findManagedGeminiAuthIndex;
+/**
+ * Look up the management auth index for a Gemini account, deduping concurrent
+ * lookups for the same account via the shared {@link ManagedGeminiAuthContext}.
+ * The first caller wins; subsequent callers await the same promise.
+ */
+async function getManagedGeminiAuthIndex(accountId, timeoutMs, context) {
+    if (!context) {
+        return await findManagedGeminiAuthIndex(accountId, timeoutMs);
+    }
+    context.authIndexLookupPromise ?? (context.authIndexLookupPromise = findManagedGeminiAuthIndex(accountId, timeoutMs));
+    return await context.authIndexLookupPromise;
+}
+exports.getManagedGeminiAuthIndex = getManagedGeminiAuthIndex;
+/**
+ * Perform a single upstream request to the Gemini CLI API via the CLIProxy
+ * management `/v0/management/api-call` endpoint. Uses `$TOKEN$` substitution
+ * so the live token never leaves the management API. Returns
+ * `{ unavailable: true }` if the management path is unreachable; returns
+ * `{ response: null, unavailable: false }` if the request succeeded but no
+ * matching auth file was found.
+ */
+async function performManagedGeminiRequest(accountId, url, body, timeoutMs, authContext) {
+    const deadlineMs = Date.now() + timeoutMs;
+    const lookupResult = await getManagedGeminiAuthIndex(accountId, (0, shared_utils_1.getRemainingTimeoutMs)(deadlineMs), authContext);
+    if (lookupResult.unavailable) {
+        return { response: null, unavailable: true };
+    }
+    const authIndex = lookupResult.authIndex;
+    if (authIndex === null || authIndex === undefined) {
+        return { response: null, unavailable: false };
+    }
+    const target = (0, proxy_target_resolver_1.getProxyTarget)();
+    const controller = new AbortController();
+    const timeoutId = setTimeout(() => controller.abort(), (0, shared_utils_1.getRemainingTimeoutMs)(deadlineMs));
+    try {
+        const response = await fetch((0, proxy_target_resolver_1.buildProxyUrl)(target, '/v0/management/api-call'), {
+            method: 'POST',
+            signal: controller.signal,
+            headers: (0, proxy_target_resolver_1.buildManagementHeaders)(target, {
+                'Content-Type': 'application/json',
+            }),
+            body: JSON.stringify({
+                auth_index: authIndex,
+                method: 'POST',
+                url,
+                header: {
+                    Authorization: 'Bearer $TOKEN$',
+                    'Content-Type': 'application/json',
+                },
+                data: body,
+            }),
+        });
+        clearTimeout(timeoutId);
+        if (!response.ok) {
+            return { response: null, unavailable: true };
+        }
+        const apiResponse = (await response.json());
+        const bodyText = typeof apiResponse.body === 'string' ? apiResponse.body : '';
+        return {
+            response: {
+                status: typeof apiResponse.status_code === 'number' ? apiResponse.status_code : 500,
+                bodyText,
+                json: (0, shared_utils_1.safeParseJson)(bodyText),
+                viaManagement: true,
+            },
+            unavailable: false,
+        };
+    }
+    catch {
+        clearTimeout(timeoutId);
+        return { response: null, unavailable: true };
+    }
+}
+exports.performManagedGeminiRequest = performManagedGeminiRequest;
+/**
+ * Perform a Gemini CLI upstream request, preferring the managed path when
+ * requested and falling back to direct bearer-token auth. On a 401 from the
+ * direct path, retries via managed auth as a delegated-auth refresh; throws
+ * {@link GeminiManagedAuthUnavailableError} if that retry is unreachable.
+ *
+ * @param accountId     Account identifier (email), used for managed auth lookup.
+ * @param accessToken   Bearer token for the direct path. Never logged.
+ * @param url           Target Gemini CLI API URL.
+ * @param body          JSON request body string.
+ * @param preferManagement When true, try the managed path first.
+ * @param authContext   Optional shared context to dedupe auth-index lookups.
+ */
+async function performGeminiCliRequest(accountId, accessToken, url, body, preferManagement = false, authContext) {
+    let managementAttempted = false;
+    let managementUnavailable = false;
+    if (preferManagement) {
+        managementAttempted = true;
+        const managedResult = await performManagedGeminiRequest(accountId, url, body, constants_1.MANAGEMENT_API_TIMEOUT_MS, authContext);
+        managementUnavailable = managedResult.unavailable;
+        if (managedResult.response) {
+            return managedResult.response;
+        }
+    }
+    const controller = new AbortController();
+    const timeoutId = setTimeout(() => controller.abort(), managementAttempted ? constants_1.SECONDARY_REQUEST_TIMEOUT_MS : constants_1.MANAGEMENT_API_TIMEOUT_MS);
+    try {
+        const response = await fetch(url, {
+            method: 'POST',
+            signal: controller.signal,
+            headers: {
+                Authorization: `Bearer ${accessToken}`,
+                'Content-Type': 'application/json',
+            },
+            body,
+        });
+        clearTimeout(timeoutId);
+        const directResult = await readManagedResponse(response, false);
+        if (directResult.status !== 401) {
+            return directResult;
+        }
+        if (managementAttempted) {
+            if (managementUnavailable) {
+                throw new GeminiManagedAuthUnavailableError();
+            }
+            return directResult;
+        }
+        const managedResult = await performManagedGeminiRequest(accountId, url, body, constants_1.SECONDARY_REQUEST_TIMEOUT_MS, authContext);
+        if (managedResult.response) {
+            return managedResult.response;
+        }
+        if (managedResult.unavailable) {
+            throw new GeminiManagedAuthUnavailableError();
+        }
+        return directResult;
+    }
+    catch (error) {
+        clearTimeout(timeoutId);
+        throw error;
+    }
+}
+exports.performGeminiCliRequest = performGeminiCliRequest;
+//# sourceMappingURL=managed-request.js.map

package/dist/cliproxy/quota/quota-fetcher-gemini-cli/managed-request.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"managed-request.js","sourceRoot":"","sources":["../../../../src/cliproxy/quota/quota-fetcher-gemini-cli/managed-request.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;GAaG;;;AAEH,6EAI2C;AAC3C,uEAAsE;AACtE,sDAAsD;AACtD,2CAAsF;AACtF,iDAA4F;AAU5F;;;;GAIG;AACH,MAAa,iCAAkC,SAAQ,KAAK;IAC1D;QACE,KAAK,CAAC,yDAAyD,CAAC,CAAC;QACjE,IAAI,CAAC,IAAI,GAAG,mCAAmC,CAAC;IAClD,CAAC;CACF;AALD,8EAKC;AAED;;;;GAIG;AACI,KAAK,UAAU,mBAAmB,CACvC,QAAkB,EAClB,aAAsB;IAEtB,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;IACvC,OAAO;QACL,MAAM,EAAE,QAAQ,CAAC,MAAM;QACvB,QAAQ;QACR,IAAI,EAAE,IAAA,4BAAa,EAAC,QAAQ,CAAC;QAC7B,aAAa;KACd,CAAC;AACJ,CAAC;AAXD,kDAWC;AAED;;;;;;GAMG;AACH,SAAgB,gBAAgB,CAAC,QAAgB;IAC/C,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC;QAAE,OAAO,KAAK,CAAC;IAC9C,oCAAoC;IACpC,IAAI,QAAQ,CAAC,UAAU,CAAC,SAAS,CAAC;QAAE,OAAO,IAAI,CAAC;IAChD,oDAAoD;IACpD,IAAI,QAAQ,CAAC,QAAQ,CAAC,mBAAmB,CAAC;QAAE,OAAO,IAAI,CAAC;IACxD,gEAAgE;IAChE,IAAI,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IACxC,OAAO,KAAK,CAAC;AACf,CAAC;AATD,4CASC;AAED;;;;GAIG;AACH,SAAgB,0BAA0B,CAAC,IAAwB,EAAE,SAAiB;IACpF,MAAM,WAAW,GAAG,IAAA,mCAAoB,EAAC,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC;IACrE,IAAI,CAAC,WAAW,IAAI,IAAA,+CAAuB,EAAC,WAAW,CAAC,KAAK,QAAQ,EAAE,CAAC;QACtE,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,KAAK,GAAG,IAAA,mCAAoB,EAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC/C,MAAM,mBAAmB,GAAG,SAAS,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC3D,IAAI,KAAK,EAAE,WAAW,EAAE,KAAK,mBAAmB,EAAE,CAAC;QACjD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,cAAc,GAAG,IAAA,mCAAoB,EAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACvD,IAAI,CAAC,cAAc,EAAE,CAAC;QACpB,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,kBAAkB,GAAG,cAAc,CAAC,WAAW,EAAE,CAAC;IACxD,MAAM,gBAAgB,GAAG,IAAA,0BAAa,EAAC,SAAS,CAAC,CAAC,WAAW,EAAE,CAAC;IAChE,OAAO,CACL,kBAAkB,KAAK,UAAU,gBAAgB,OAAO;QACxD,kBAAkB,CAAC,UAAU,CAAC,GAAG,mBAAmB,mBAAmB,CAAC;QACxE,kBAAkB,CAAC,QAAQ,CAAC,gBAAgB,CAAC,CAC9C,CAAC;AACJ,CAAC;AAxBD,gEAwBC;AAED;;;;;GAKG;AACI,KAAK,UAAU,0BAA0B,CAC9C,SAAiB,EACjB,SAAiB;IAEjB,MAAM,MAAM,GAAG,IAAA,sCAAc,GAAE,CAAC;IAChC,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;IACzC,MAAM,SAAS,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,SAAS,CAAC,CAAC;IAElE,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,IAAA,qCAAa,EAAC,MAAM,EAAE,2BAA2B,CAAC,EAAE;YAC/E,MAAM,EAAE,UAAU,CAAC,MAAM;YACzB,OAAO,EAAE,IAAA,8CAAsB,EAAC,MAAM,CAAC;SACxC,CAAC,CAAC;QACH,YAAY,CAAC,SAAS,CAAC,CAAC;QAExB,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC;QAChD,CAAC;QAED,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAqC,CAAC;QACzE,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,0BAA0B,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC,CAAC;QACtF,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,UAAU,IAAI,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC;IACtE,CAAC;IAAC,MAAM,CAAC;QACP,YAAY,CAAC,SAAS,CAAC,CAAC;QACxB,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC;IAChD,CAAC;AACH,CAAC;AA1BD,gEA0BC;AAED;;;;GAIG;AACI,KAAK,UAAU,yBAAyB,CAC7C,SAAiB,EACjB,SAAiB,EACjB,OAAkC;IAElC,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,MAAM,0BAA0B,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;IAChE,CAAC;IAED,OAAO,CAAC,sBAAsB,KAA9B,OAAO,CAAC,sBAAsB,GAAK,0BAA0B,CAAC,SAAS,EAAE,SAAS,CAAC,EAAC;IACpF,OAAO,MAAM,OAAO,CAAC,sBAAsB,CAAC;AAC9C,CAAC;AAXD,8DAWC;AAED;;;;;;;GAOG;AACI,KAAK,UAAU,2BAA2B,CAC/C,SAAiB,EACjB,GAAW,EACX,IAAY,EACZ,SAAiB,EACjB,WAAsC;IAEtC,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;IAC1C,MAAM,YAAY,GAAG,MAAM,yBAAyB,CAClD,SAAS,EACT,IAAA,oCAAqB,EAAC,UAAU,CAAC,EACjC,WAAW,CACZ,CAAC;IACF,IAAI,YAAY,CAAC,WAAW,EAAE,CAAC;QAC7B,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC;IAC/C,CAAC;IAED,MAAM,SAAS,GAAG,YAAY,CAAC,SAAS,CAAC;IACzC,IAAI,SAAS,KAAK,IAAI,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;QAClD,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC;IAChD,CAAC;IAED,MAAM,MAAM,GAAG,IAAA,sCAAc,GAAE,CAAC;IAChC,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;IACzC,MAAM,SAAS,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,IAAA,oCAAqB,EAAC,UAAU,CAAC,CAAC,CAAC;IAE1F,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,IAAA,qCAAa,EAAC,MAAM,EAAE,yBAAyB,CAAC,EAAE;YAC7E,MAAM,EAAE,MAAM;YACd,MAAM,EAAE,UAAU,CAAC,MAAM;YACzB,OAAO,EAAE,IAAA,8CAAsB,EAAC,MAAM,EAAE;gBACtC,cAAc,EAAE,kBAAkB;aACnC,CAAC;YACF,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;gBACnB,UAAU,EAAE,SAAS;gBACrB,MAAM,EAAE,MAAM;gBACd,GAAG;gBACH,MAAM,EAAE;oBACN,aAAa,EAAE,gBAAgB;oBAC/B,cAAc,EAAE,kBAAkB;iBACnC;gBACD,IAAI,EAAE,IAAI;aACX,CAAC;SACH,CAAC,CAAC;QACH,YAAY,CAAC,SAAS,CAAC,CAAC;QAExB,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC;QAC/C,CAAC;QAED,MAAM,WAAW,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAA8B,CAAC;QACzE,MAAM,QAAQ,GAAG,OAAO,WAAW,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;QAC9E,OAAO;YACL,QAAQ,EAAE;gBACR,MAAM,EAAE,OAAO,WAAW,CAAC,WAAW,KAAK,QAAQ,CAAC,CAAC,CAAC,WAAW,CAAC,WAAW,CAAC,CAAC,CAAC,GAAG;gBACnF,QAAQ;gBACR,IAAI,EAAE,IAAA,4BAAa,EAAC,QAAQ,CAAC;gBAC7B,aAAa,EAAE,IAAI;aACpB;YACD,WAAW,EAAE,KAAK;SACnB,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,YAAY,CAAC,SAAS,CAAC,CAAC;QACxB,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC;IAC/C,CAAC;AACH,CAAC;AAjED,kEAiEC;AAED;;;;;;;;;;;;GAYG;AACI,KAAK,UAAU,uBAAuB,CAC3C,SAAiB,EACjB,WAAmB,EACnB,GAAW,EACX,IAAY,EACZ,gBAAgB,GAAG,KAAK,EACxB,WAAsC;IAEtC,IAAI,mBAAmB,GAAG,KAAK,CAAC;IAChC,IAAI,qBAAqB,GAAG,KAAK,CAAC;IAElC,IAAI,gBAAgB,EAAE,CAAC;QACrB,mBAAmB,GAAG,IAAI,CAAC;QAC3B,MAAM,aAAa,GAAG,MAAM,2BAA2B,CACrD,SAAS,EACT,GAAG,EACH,IAAI,EACJ,qCAAyB,EACzB,WAAW,CACZ,CAAC;QACF,qBAAqB,GAAG,aAAa,CAAC,WAAW,CAAC;QAClD,IAAI,aAAa,CAAC,QAAQ,EAAE,CAAC;YAC3B,OAAO,aAAa,CAAC,QAAQ,CAAC;QAChC,CAAC;IACH,CAAC;IAED,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;IACzC,MAAM,SAAS,GAAG,UAAU,CAC1B,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EACxB,mBAAmB,CAAC,CAAC,CAAC,wCAA4B,CAAC,CAAC,CAAC,qCAAyB,CAC/E,CAAC;IAEF,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;YAChC,MAAM,EAAE,MAAM;YACd,MAAM,EAAE,UAAU,CAAC,MAAM;YACzB,OAAO,EAAE;gBACP,aAAa,EAAE,UAAU,WAAW,EAAE;gBACtC,cAAc,EAAE,kBAAkB;aACnC;YACD,IAAI;SACL,CAAC,CAAC;QACH,YAAY,CAAC,SAAS,CAAC,CAAC;QAExB,MAAM,YAAY,GAAG,MAAM,mBAAmB,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;QAChE,IAAI,YAAY,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;YAChC,OAAO,YAAY,CAAC;QACtB,CAAC;QAED,IAAI,mBAAmB,EAAE,CAAC;YACxB,IAAI,qBAAqB,EAAE,CAAC;gBAC1B,MAAM,IAAI,iCAAiC,EAAE,CAAC;YAChD,CAAC;YACD,OAAO,YAAY,CAAC;QACtB,CAAC;QAED,MAAM,aAAa,GAAG,MAAM,2BAA2B,CACrD,SAAS,EACT,GAAG,EACH,IAAI,EACJ,wCAA4B,EAC5B,WAAW,CACZ,CAAC;QACF,IAAI,aAAa,CAAC,QAAQ,EAAE,CAAC;YAC3B,OAAO,aAAa,CAAC,QAAQ,CAAC;QAChC,CAAC;QACD,IAAI,aAAa,CAAC,WAAW,EAAE,CAAC;YAC9B,MAAM,IAAI,iCAAiC,EAAE,CAAC;QAChD,CAAC;QACD,OAAO,YAAY,CAAC;IACtB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,YAAY,CAAC,SAAS,CAAC,CAAC;QACxB,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AA1ED,0DA0EC"}

package/dist/cliproxy/quota/quota-fetcher-gemini-cli/quota-fetcher.d.ts

@@ -0,0 +1,46 @@
+/**
+ * Top-level quota fetch orchestration for Gemini CLI accounts.
+ *
+ * Coordinates auth-file discovery, the managed/direct upstream quota request,
+ * supplementary tier/credit metadata, and structured failure-result building.
+ * Preserves the structured logging from the original god file (events:
+ * gemini_cli.fetch_start, gemini_cli.auth_file_missing, gemini_cli.token_expired,
+ * gemini_cli.missing_project_id, gemini_cli.api_status, gemini_cli.buckets_found,
+ * gemini_cli.quota_fetch_error). Token values are never logged.
+ */
+import type { GeminiCliQuotaResult } from '../quota-types';
+import type { GeminiCliAuthData } from './types';
+/**
+ * Internal helper: fetch quota with already-validated auth data.
+ *
+ * Extracted to support the auto-refresh retry path: the caller resolves auth
+ * data once (legacy file or managed), then this function performs the upstream
+ * quota request and supplementary metadata fetch in parallel. On success it
+ * persists the resolved tier back to the account via `setAccountTier`.
+ */
+export declare function fetchWithAuthData(authData: GeminiCliAuthData, accountId: string, verbose: boolean): Promise<GeminiCliQuotaResult>;
+/**
+ * Fetch quota for a single Gemini CLI account.
+ *
+ * Reads the on-disk auth file, emits the structured `gemini_cli.fetch_start`
+ * and `gemini_cli.auth_file_missing` / `gemini_cli.token_expired` log events
+ * (gated on `verbose`), and delegates to {@link fetchWithAuthData}. Token
+ * values are never logged; only the expiry label is surfaced.
+ *
+ * @param accountId - Account identifier (email)
+ * @param verbose   - Show detailed diagnostics
+ * @returns Quota result with buckets, percentages, tier, and entitlement evidence
+ */
+export declare function fetchGeminiCliQuota(accountId: string, verbose?: boolean): Promise<GeminiCliQuotaResult>;
+/**
+ * Fetch quota for all configured Gemini CLI accounts in parallel.
+ *
+ * @param verbose - Show detailed diagnostics (forwarded to each per-account fetch)
+ * @returns Array of `{ account, quota }` entries, one per active Gemini account.
+ *          Returns an empty array when there are no Gemini accounts configured.
+ */
+export declare function fetchAllGeminiCliQuotas(verbose?: boolean): Promise<{
+    account: string;
+    quota: GeminiCliQuotaResult;
+}[]>;
+//# sourceMappingURL=quota-fetcher.d.ts.map

package/dist/cliproxy/quota/quota-fetcher-gemini-cli/quota-fetcher.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"quota-fetcher.d.ts","sourceRoot":"","sources":["../../../../src/cliproxy/quota/quota-fetcher-gemini-cli/quota-fetcher.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAKH,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,gBAAgB,CAAC;AAQ3D,OAAO,KAAK,EAAE,iBAAiB,EAAoD,MAAM,SAAS,CAAC;AAEnG;;;;;;;GAOG;AACH,wBAAsB,iBAAiB,CACrC,QAAQ,EAAE,iBAAiB,EAC3B,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,OAAO,GACf,OAAO,CAAC,oBAAoB,CAAC,CA8H/B;AAED;;;;;;;;;;;GAWG;AACH,wBAAsB,mBAAmB,CACvC,SAAS,EAAE,MAAM,EACjB,OAAO,UAAQ,GACd,OAAO,CAAC,oBAAoB,CAAC,CAoC/B;AAED;;;;;;GAMG;AACH,wBAAsB,uBAAuB,CAC3C,OAAO,UAAQ,GACd,OAAO,CAAC;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,oBAAoB,CAAA;CAAE,EAAE,CAAC,CAe7D"}

package/dist/cliproxy/quota/quota-fetcher-gemini-cli/quota-fetcher.js

@@ -0,0 +1,188 @@
+"use strict";
+/**
+ * Top-level quota fetch orchestration for Gemini CLI accounts.
+ *
+ * Coordinates auth-file discovery, the managed/direct upstream quota request,
+ * supplementary tier/credit metadata, and structured failure-result building.
+ * Preserves the structured logging from the original god file (events:
+ * gemini_cli.fetch_start, gemini_cli.auth_file_missing, gemini_cli.token_expired,
+ * gemini_cli.missing_project_id, gemini_cli.api_status, gemini_cli.buckets_found,
+ * gemini_cli.quota_fetch_error). Token values are never logged.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.fetchAllGeminiCliQuotas = exports.fetchGeminiCliQuota = exports.fetchWithAuthData = void 0;
+const account_manager_1 = require("../../accounts/account-manager");
+const auth_utils_1 = require("../../auth/auth-utils");
+const provider_entitlement_evidence_1 = require("../../auth/provider-entitlement-evidence");
+const auth_file_discovery_1 = require("./auth-file-discovery");
+const bucket_building_1 = require("./bucket-building");
+const error_parsing_1 = require("./error-parsing");
+const managed_request_1 = require("./managed-request");
+const supplementary_metadata_1 = require("./supplementary-metadata");
+const shared_utils_1 = require("./shared-utils");
+const constants_1 = require("./constants");
+/**
+ * Internal helper: fetch quota with already-validated auth data.
+ *
+ * Extracted to support the auto-refresh retry path: the caller resolves auth
+ * data once (legacy file or managed), then this function performs the upstream
+ * quota request and supplementary metadata fetch in parallel. On success it
+ * persists the resolved tier back to the account via `setAccountTier`.
+ */
+async function fetchWithAuthData(authData, accountId, verbose) {
+    if (!authData.projectId) {
+        const error = 'Cannot resolve project ID from auth file';
+        if (verbose) {
+            shared_utils_1.logger.error('gemini_cli.missing_project_id', `Error: ${error}`, {
+                provider: 'gemini',
+                accountId,
+            });
+        }
+        return (0, error_parsing_1.buildGeminiCliFailureResult)(accountId, null, {
+            error,
+            errorCode: 'missing_project_id',
+            actionHint: 'Run ccs gemini --auth to reconnect this account and recover the project ID.',
+            retryable: false,
+        });
+    }
+    const authContext = {};
+    const supplementaryPromise = (0, supplementary_metadata_1.fetchGeminiCliSupplementary)(accountId, authData.accessToken, authData.projectId, verbose, authContext);
+    const requestBody = JSON.stringify({ project: authData.projectId });
+    try {
+        const response = await (0, managed_request_1.performGeminiCliRequest)(accountId, authData.accessToken, constants_1.GEMINI_CLI_QUOTA_URL, requestBody, authData.isExpired, authContext);
+        if (verbose) {
+            const source = response.viaManagement ? 'managed' : 'direct';
+            shared_utils_1.logger.info('gemini_cli.api_status', `Gemini CLI API status via ${source}: ${response.status}`, { provider: 'gemini', accountId, httpStatus: response.status, source });
+        }
+        if (response.status !== 200) {
+            return (0, error_parsing_1.buildGeminiCliHttpFailureResult)(accountId, authData.projectId, response.status, response.bodyText);
+        }
+        const data = response.json;
+        const rawBuckets = data?.buckets || [];
+        const buckets = (0, bucket_building_1.buildGeminiCliBuckets)(rawBuckets);
+        const supplementary = await supplementaryPromise;
+        if (verbose) {
+            shared_utils_1.logger.info('gemini_cli.buckets_found', `Gemini CLI buckets found: ${buckets.length}`, {
+                provider: 'gemini',
+                accountId,
+                bucketCount: buckets.length,
+            });
+        }
+        if (supplementary.normalizedTier !== 'unknown') {
+            (0, account_manager_1.setAccountTier)('gemini', accountId, supplementary.normalizedTier);
+        }
+        return {
+            success: true,
+            buckets,
+            projectId: authData.projectId,
+            tierLabel: supplementary.tierLabel,
+            tierId: supplementary.tierId,
+            creditBalance: supplementary.creditBalance,
+            entitlement: (0, provider_entitlement_evidence_1.buildProviderEntitlementEvidence)({
+                normalizedTier: supplementary.normalizedTier,
+                rawTierId: supplementary.tierId,
+                rawTierLabel: supplementary.tierLabel,
+                source: supplementary.tierId ? 'runtime_api' : 'runtime_inference',
+                confidence: supplementary.tierId ? 'high' : 'medium',
+                accessState: 'entitled',
+                capacityState: 'available',
+            }),
+            lastUpdated: Date.now(),
+            accountId,
+        };
+    }
+    catch (err) {
+        if (err instanceof managed_request_1.GeminiManagedAuthUnavailableError) {
+            return (0, error_parsing_1.buildGeminiCliFailureResult)(accountId, authData.projectId, {
+                error: 'Gemini delegated auth refresh is temporarily unavailable',
+                errorCode: 'managed_auth_unavailable',
+                errorDetail: err.message,
+                actionHint: 'Retry later. CLIProxy management could not refresh this Gemini account.',
+                retryable: true,
+            });
+        }
+        const errorMsg = err instanceof Error && err.name === 'AbortError'
+            ? 'Request timeout'
+            : err instanceof Error
+                ? err.message
+                : 'Unknown error';
+        if (verbose) {
+            shared_utils_1.logger.error('gemini_cli.quota_fetch_error', `Gemini CLI quota error: ${errorMsg}`, {
+                provider: 'gemini',
+                accountId,
+                err: err instanceof Error ? { name: err.name, message: errorMsg } : { message: errorMsg },
+            });
+        }
+        return (0, error_parsing_1.buildGeminiCliFailureResult)(accountId, authData.projectId, {
+            error: errorMsg,
+            errorCode: err instanceof Error && err.name === 'AbortError' ? 'network_timeout' : 'network_error',
+            actionHint: 'Retry later. This looks temporary.',
+            retryable: true,
+            httpStatus: err instanceof Error && err.name === 'AbortError' ? 408 : undefined,
+        });
+    }
+}
+exports.fetchWithAuthData = fetchWithAuthData;
+/**
+ * Fetch quota for a single Gemini CLI account.
+ *
+ * Reads the on-disk auth file, emits the structured `gemini_cli.fetch_start`
+ * and `gemini_cli.auth_file_missing` / `gemini_cli.token_expired` log events
+ * (gated on `verbose`), and delegates to {@link fetchWithAuthData}. Token
+ * values are never logged; only the expiry label is surfaced.
+ *
+ * @param accountId - Account identifier (email)
+ * @param verbose   - Show detailed diagnostics
+ * @returns Quota result with buckets, percentages, tier, and entitlement evidence
+ */
+async function fetchGeminiCliQuota(accountId, verbose = false) {
+    if (verbose) {
+        shared_utils_1.logger.info('gemini_cli.fetch_start', `Fetching Gemini CLI quota for ${accountId}...`, {
+            provider: 'gemini',
+            accountId,
+        });
+    }
+    const authData = (0, auth_file_discovery_1.readGeminiCliAuthData)(accountId);
+    if (!authData) {
+        const error = 'Auth file not found for Gemini account';
+        if (verbose) {
+            shared_utils_1.logger.error('gemini_cli.auth_file_missing', `Error: ${error}`, {
+                provider: 'gemini',
+                accountId,
+            });
+        }
+        return (0, error_parsing_1.buildGeminiCliFailureResult)(accountId, null, {
+            error,
+            errorCode: 'auth_file_missing',
+            actionHint: 'Run ccs gemini --auth to reconnect this account.',
+            retryable: false,
+        });
+    }
+    if (authData.isExpired && verbose) {
+        const expiresAt = (0, auth_utils_1.getTokenExpiryTimestamp)(authData.expiresAt);
+        const expiryLabel = expiresAt ? new Date(expiresAt).toISOString() : 'unknown';
+        shared_utils_1.logger.info('gemini_cli.token_expired', `Gemini access token is expired (${expiryLabel}); quota requests will defer to managed auth when available.`, { provider: 'gemini', accountId, tokenExpired: true, expiresAt: expiryLabel });
+    }
+    return await fetchWithAuthData(authData, accountId, verbose);
+}
+exports.fetchGeminiCliQuota = fetchGeminiCliQuota;
+/**
+ * Fetch quota for all configured Gemini CLI accounts in parallel.
+ *
+ * @param verbose - Show detailed diagnostics (forwarded to each per-account fetch)
+ * @returns Array of `{ account, quota }` entries, one per active Gemini account.
+ *          Returns an empty array when there are no Gemini accounts configured.
+ */
+async function fetchAllGeminiCliQuotas(verbose = false) {
+    const accounts = (0, account_manager_1.getProviderAccounts)('gemini');
+    if (accounts.length === 0) {
+        return [];
+    }
+    const results = await Promise.all(accounts.map(async (account) => ({
+        account: account.id,
+        quota: await fetchGeminiCliQuota(account.id, verbose),
+    })));
+    return results;
+}
+exports.fetchAllGeminiCliQuotas = fetchAllGeminiCliQuotas;
+//# sourceMappingURL=quota-fetcher.js.map

package/dist/cliproxy/quota/quota-fetcher-gemini-cli/quota-fetcher.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"quota-fetcher.js","sourceRoot":"","sources":["../../../../src/cliproxy/quota/quota-fetcher-gemini-cli/quota-fetcher.ts"],"names":[],"mappings":";AAAA;;;;;;;;;GASG;;;AAEH,oEAAqF;AACrF,sDAAgE;AAChE,4FAA4F;AAE5F,+DAA8D;AAC9D,uDAA0D;AAC1D,mDAA+F;AAC/F,uDAA+F;AAC/F,qEAAuE;AACvE,iDAAwC;AACxC,2CAAmD;AAGnD;;;;;;;GAOG;AACI,KAAK,UAAU,iBAAiB,CACrC,QAA2B,EAC3B,SAAiB,EACjB,OAAgB;IAEhB,IAAI,CAAC,QAAQ,CAAC,SAAS,EAAE,CAAC;QACxB,MAAM,KAAK,GAAG,0CAA0C,CAAC;QACzD,IAAI,OAAO,EAAE,CAAC;YACZ,qBAAM,CAAC,KAAK,CAAC,+BAA+B,EAAE,UAAU,KAAK,EAAE,EAAE;gBAC/D,QAAQ,EAAE,QAAQ;gBAClB,SAAS;aACV,CAAC,CAAC;QACL,CAAC;QACD,OAAO,IAAA,2CAA2B,EAAC,SAAS,EAAE,IAAI,EAAE;YAClD,KAAK;YACL,SAAS,EAAE,oBAAoB;YAC/B,UAAU,EAAE,6EAA6E;YACzF,SAAS,EAAE,KAAK;SACjB,CAAC,CAAC;IACL,CAAC;IAED,MAAM,WAAW,GAA6B,EAAE,CAAC;IACjD,MAAM,oBAAoB,GAAG,IAAA,oDAA2B,EACtD,SAAS,EACT,QAAQ,CAAC,WAAW,EACpB,QAAQ,CAAC,SAAS,EAClB,OAAO,EACP,WAAW,CACZ,CAAC;IACF,MAAM,WAAW,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,QAAQ,CAAC,SAAS,EAAE,CAAC,CAAC;IAEpE,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,IAAA,yCAAuB,EAC5C,SAAS,EACT,QAAQ,CAAC,WAAW,EACpB,gCAAoB,EACpB,WAAW,EACX,QAAQ,CAAC,SAAS,EAClB,WAAW,CACZ,CAAC;QAEF,IAAI,OAAO,EAAE,CAAC;YACZ,MAAM,MAAM,GAAG,QAAQ,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC;YAC7D,qBAAM,CAAC,IAAI,CACT,uBAAuB,EACvB,6BAA6B,MAAM,KAAK,QAAQ,CAAC,MAAM,EAAE,EACzD,EAAE,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE,UAAU,EAAE,QAAQ,CAAC,MAAM,EAAE,MAAM,EAAE,CACvE,CAAC;QACJ,CAAC;QAED,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;YAC5B,OAAO,IAAA,+CAA+B,EACpC,SAAS,EACT,QAAQ,CAAC,SAAS,EAClB,QAAQ,CAAC,MAAM,EACf,QAAQ,CAAC,QAAQ,CAClB,CAAC;QACJ,CAAC;QAED,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAqC,CAAC;QAC5D,MAAM,UAAU,GAAG,IAAI,EAAE,OAAO,IAAI,EAAE,CAAC;QACvC,MAAM,OAAO,GAAG,IAAA,uCAAqB,EAAC,UAAU,CAAC,CAAC;QAClD,MAAM,aAAa,GAAG,MAAM,oBAAoB,CAAC;QAEjD,IAAI,OAAO,EAAE,CAAC;YACZ,qBAAM,CAAC,IAAI,CAAC,0BAA0B,EAAE,6BAA6B,OAAO,CAAC,MAAM,EAAE,EAAE;gBACrF,QAAQ,EAAE,QAAQ;gBAClB,SAAS;gBACT,WAAW,EAAE,OAAO,CAAC,MAAM;aAC5B,CAAC,CAAC;QACL,CAAC;QAED,IAAI,aAAa,CAAC,cAAc,KAAK,SAAS,EAAE,CAAC;YAC/C,IAAA,gCAAc,EAAC,QAAQ,EAAE,SAAS,EAAE,aAAa,CAAC,cAAc,CAAC,CAAC;QACpE,CAAC;QAED,OAAO;YACL,OAAO,EAAE,IAAI;YACb,OAAO;YACP,SAAS,EAAE,QAAQ,CAAC,SAAS;YAC7B,SAAS,EAAE,aAAa,CAAC,SAAS;YAClC,MAAM,EAAE,aAAa,CAAC,MAAM;YAC5B,aAAa,EAAE,aAAa,CAAC,aAAa;YAC1C,WAAW,EAAE,IAAA,gEAAgC,EAAC;gBAC5C,cAAc,EAAE,aAAa,CAAC,cAAc;gBAC5C,SAAS,EAAE,aAAa,CAAC,MAAM;gBAC/B,YAAY,EAAE,aAAa,CAAC,SAAS;gBACrC,MAAM,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,mBAAmB;gBAClE,UAAU,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ;gBACpD,WAAW,EAAE,UAAU;gBACvB,aAAa,EAAE,WAAW;aAC3B,CAAC;YACF,WAAW,EAAE,IAAI,CAAC,GAAG,EAAE;YACvB,SAAS;SACV,CAAC;IACJ,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,GAAG,YAAY,mDAAiC,EAAE,CAAC;YACrD,OAAO,IAAA,2CAA2B,EAAC,SAAS,EAAE,QAAQ,CAAC,SAAS,EAAE;gBAChE,KAAK,EAAE,0DAA0D;gBACjE,SAAS,EAAE,0BAA0B;gBACrC,WAAW,EAAE,GAAG,CAAC,OAAO;gBACxB,UAAU,EAAE,yEAAyE;gBACrF,SAAS,EAAE,IAAI;aAChB,CAAC,CAAC;QACL,CAAC;QAED,MAAM,QAAQ,GACZ,GAAG,YAAY,KAAK,IAAI,GAAG,CAAC,IAAI,KAAK,YAAY;YAC/C,CAAC,CAAC,iBAAiB;YACnB,CAAC,CAAC,GAAG,YAAY,KAAK;gBACpB,CAAC,CAAC,GAAG,CAAC,OAAO;gBACb,CAAC,CAAC,eAAe,CAAC;QAExB,IAAI,OAAO,EAAE,CAAC;YACZ,qBAAM,CAAC,KAAK,CAAC,8BAA8B,EAAE,2BAA2B,QAAQ,EAAE,EAAE;gBAClF,QAAQ,EAAE,QAAQ;gBAClB,SAAS;gBACT,GAAG,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,QAAQ,EAAE;aAC1F,CAAC,CAAC;QACL,CAAC;QAED,OAAO,IAAA,2CAA2B,EAAC,SAAS,EAAE,QAAQ,CAAC,SAAS,EAAE;YAChE,KAAK,EAAE,QAAQ;YACf,SAAS,EACP,GAAG,YAAY,KAAK,IAAI,GAAG,CAAC,IAAI,KAAK,YAAY,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,eAAe;YACzF,UAAU,EAAE,oCAAoC;YAChD,SAAS,EAAE,IAAI;YACf,UAAU,EAAE,GAAG,YAAY,KAAK,IAAI,GAAG,CAAC,IAAI,KAAK,YAAY,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS;SAChF,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAlID,8CAkIC;AAED;;;;;;;;;;;GAWG;AACI,KAAK,UAAU,mBAAmB,CACvC,SAAiB,EACjB,OAAO,GAAG,KAAK;IAEf,IAAI,OAAO,EAAE,CAAC;QACZ,qBAAM,CAAC,IAAI,CAAC,wBAAwB,EAAE,iCAAiC,SAAS,KAAK,EAAE;YACrF,QAAQ,EAAE,QAAQ;YAClB,SAAS;SACV,CAAC,CAAC;IACL,CAAC;IAED,MAAM,QAAQ,GAAG,IAAA,2CAAqB,EAAC,SAAS,CAAC,CAAC;IAClD,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,MAAM,KAAK,GAAG,wCAAwC,CAAC;QACvD,IAAI,OAAO,EAAE,CAAC;YACZ,qBAAM,CAAC,KAAK,CAAC,8BAA8B,EAAE,UAAU,KAAK,EAAE,EAAE;gBAC9D,QAAQ,EAAE,QAAQ;gBAClB,SAAS;aACV,CAAC,CAAC;QACL,CAAC;QACD,OAAO,IAAA,2CAA2B,EAAC,SAAS,EAAE,IAAI,EAAE;YAClD,KAAK;YACL,SAAS,EAAE,mBAAmB;YAC9B,UAAU,EAAE,kDAAkD;YAC9D,SAAS,EAAE,KAAK;SACjB,CAAC,CAAC;IACL,CAAC;IAED,IAAI,QAAQ,CAAC,SAAS,IAAI,OAAO,EAAE,CAAC;QAClC,MAAM,SAAS,GAAG,IAAA,oCAAuB,EAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;QAC9D,MAAM,WAAW,GAAG,SAAS,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,SAAS,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;QAC9E,qBAAM,CAAC,IAAI,CACT,0BAA0B,EAC1B,mCAAmC,WAAW,8DAA8D,EAC5G,EAAE,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE,YAAY,EAAE,IAAI,EAAE,SAAS,EAAE,WAAW,EAAE,CAC9E,CAAC;IACJ,CAAC;IAED,OAAO,MAAM,iBAAiB,CAAC,QAAQ,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;AAC/D,CAAC;AAvCD,kDAuCC;AAED;;;;;;GAMG;AACI,KAAK,UAAU,uBAAuB,CAC3C,OAAO,GAAG,KAAK;IAEf,MAAM,QAAQ,GAAG,IAAA,qCAAmB,EAAC,QAAQ,CAAC,CAAC;IAE/C,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1B,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,GAAG,CAC/B,QAAQ,CAAC,GAAG,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC;QAC/B,OAAO,EAAE,OAAO,CAAC,EAAE;QACnB,KAAK,EAAE,MAAM,mBAAmB,CAAC,OAAO,CAAC,EAAE,EAAE,OAAO,CAAC;KACtD,CAAC,CAAC,CACJ,CAAC;IAEF,OAAO,OAAO,CAAC;AACjB,CAAC;AAjBD,0DAiBC"}

package/dist/cliproxy/quota/quota-fetcher-gemini-cli/shared-utils.d.ts

@@ -0,0 +1,35 @@
+/**
+ * Shared utilities for the Gemini CLI quota fetcher submodule.
+ *
+ * Includes the diagnostic logger (provider context = cliproxy:quota:gemini-cli)
+ * and small value-normalization helpers used by multiple submodules. Token
+ * values are never logged here; accountId is attached as provider context
+ * only.
+ */
+/**
+ * Diagnostic-only logger for Gemini CLI quota fetch progress, upstream HTTP
+ * status, and recovery hints. Token values live in auth files and are never
+ * read into log messages.
+ */
+export declare const logger: import("../../../services/logging").Logger;
+/**
+ * Normalize a raw value into a trimmed non-empty string, or null.
+ * Returns null for empty strings, non-strings, or whitespace-only input.
+ */
+export declare function normalizeStringValue(value: unknown): string | null;
+/**
+ * Normalize a raw value into a finite number, or null.
+ * Accepts actual numbers and numeric strings; rejects NaN/Infinity.
+ */
+export declare function normalizeNumberValue(value: unknown): number | null;
+/**
+ * Best-effort JSON.parse that returns null on failure instead of throwing.
+ * Used when normalizing upstream response bodies into a `json` field.
+ */
+export declare function safeParseJson(bodyText: string): unknown;
+/**
+ * Compute the remaining milliseconds available before a deadline, clamped
+ * to a minimum of 1ms so AbortController timeouts are always positive.
+ */
+export declare function getRemainingTimeoutMs(deadlineMs: number): number;
+//# sourceMappingURL=shared-utils.d.ts.map

package/dist/cliproxy/quota/quota-fetcher-gemini-cli/shared-utils.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"shared-utils.d.ts","sourceRoot":"","sources":["../../../../src/cliproxy/quota/quota-fetcher-gemini-cli/shared-utils.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAIH;;;;GAIG;AACH,eAAO,MAAM,MAAM,4CAA4C,CAAC;AAEhE;;;GAGG;AACH,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,GAAG,IAAI,CAElE;AAED;;;GAGG;AACH,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,GAAG,IAAI,CAWlE;AAED;;;GAGG;AACH,wBAAgB,aAAa,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAMvD;AAED;;;GAGG;AACH,wBAAgB,qBAAqB,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,CAEhE"}

package/dist/cliproxy/quota/quota-fetcher-gemini-cli/shared-utils.js

@@ -0,0 +1,65 @@
+"use strict";
+/**
+ * Shared utilities for the Gemini CLI quota fetcher submodule.
+ *
+ * Includes the diagnostic logger (provider context = cliproxy:quota:gemini-cli)
+ * and small value-normalization helpers used by multiple submodules. Token
+ * values are never logged here; accountId is attached as provider context
+ * only.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.getRemainingTimeoutMs = exports.safeParseJson = exports.normalizeNumberValue = exports.normalizeStringValue = exports.logger = void 0;
+const logging_1 = require("../../../services/logging");
+/**
+ * Diagnostic-only logger for Gemini CLI quota fetch progress, upstream HTTP
+ * status, and recovery hints. Token values live in auth files and are never
+ * read into log messages.
+ */
+exports.logger = (0, logging_1.createLogger)('cliproxy:quota:gemini-cli');
+/**
+ * Normalize a raw value into a trimmed non-empty string, or null.
+ * Returns null for empty strings, non-strings, or whitespace-only input.
+ */
+function normalizeStringValue(value) {
+    return typeof value === 'string' && value.trim().length > 0 ? value.trim() : null;
+}
+exports.normalizeStringValue = normalizeStringValue;
+/**
+ * Normalize a raw value into a finite number, or null.
+ * Accepts actual numbers and numeric strings; rejects NaN/Infinity.
+ */
+function normalizeNumberValue(value) {
+    if (typeof value === 'number' && Number.isFinite(value)) {
+        return value;
+    }
+    if (typeof value === 'string' && value.trim().length > 0) {
+        const parsed = Number(value);
+        if (Number.isFinite(parsed)) {
+            return parsed;
+        }
+    }
+    return null;
+}
+exports.normalizeNumberValue = normalizeNumberValue;
+/**
+ * Best-effort JSON.parse that returns null on failure instead of throwing.
+ * Used when normalizing upstream response bodies into a `json` field.
+ */
+function safeParseJson(bodyText) {
+    try {
+        return JSON.parse(bodyText);
+    }
+    catch {
+        return null;
+    }
+}
+exports.safeParseJson = safeParseJson;
+/**
+ * Compute the remaining milliseconds available before a deadline, clamped
+ * to a minimum of 1ms so AbortController timeouts are always positive.
+ */
+function getRemainingTimeoutMs(deadlineMs) {
+    return Math.max(1, deadlineMs - Date.now());
+}
+exports.getRemainingTimeoutMs = getRemainingTimeoutMs;
+//# sourceMappingURL=shared-utils.js.map

package/dist/cliproxy/quota/quota-fetcher-gemini-cli/shared-utils.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"shared-utils.js","sourceRoot":"","sources":["../../../../src/cliproxy/quota/quota-fetcher-gemini-cli/shared-utils.ts"],"names":[],"mappings":";AAAA;;;;;;;GAOG;;;AAEH,uDAAyD;AAEzD;;;;GAIG;AACU,QAAA,MAAM,GAAG,IAAA,sBAAY,EAAC,2BAA2B,CAAC,CAAC;AAEhE;;;GAGG;AACH,SAAgB,oBAAoB,CAAC,KAAc;IACjD,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AACpF,CAAC;AAFD,oDAEC;AAED;;;GAGG;AACH,SAAgB,oBAAoB,CAAC,KAAc;IACjD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACxD,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACzD,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;QAC7B,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;YAC5B,OAAO,MAAM,CAAC;QAChB,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAXD,oDAWC;AAED;;;GAGG;AACH,SAAgB,aAAa,CAAC,QAAgB;IAC5C,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IAC9B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAND,sCAMC;AAED;;;GAGG;AACH,SAAgB,qBAAqB,CAAC,UAAkB;IACtD,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;AAC9C,CAAC;AAFD,sDAEC"}