@omnicross/core 0.1.0

package/dist/auth/GeminiCodeAssistProjectResolver.cjs

@@ -0,0 +1,218 @@
+"use strict";
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+
+// src/auth/GeminiCodeAssistProjectResolver.ts
+var GeminiCodeAssistProjectResolver_exports = {};
+__export(GeminiCodeAssistProjectResolver_exports, {
+  GeminiCodeAssistHandshakeError: () => GeminiCodeAssistHandshakeError,
+  GeminiCodeAssistProjectResolver: () => GeminiCodeAssistProjectResolver,
+  getGeminiCodeAssistProjectResolver: () => getGeminiCodeAssistProjectResolver
+});
+module.exports = __toCommonJS(GeminiCodeAssistProjectResolver_exports);
+
+// src/transformer/transformers/GeminiCodeAssistTransformer.ts
+var DEFAULT_CODE_ASSIST_ENDPOINT = "https://cloudcode-pa.googleapis.com";
+var DEFAULT_CODE_ASSIST_API_VERSION = "v1internal";
+function resolveCodeAssistEndpoint() {
+  return (process.env.CODE_ASSIST_ENDPOINT || DEFAULT_CODE_ASSIST_ENDPOINT).replace(/\/+$/, "");
+}
+function resolveCodeAssistApiVersion() {
+  return process.env.CODE_ASSIST_API_VERSION || DEFAULT_CODE_ASSIST_API_VERSION;
+}
+
+// src/auth/GeminiCodeAssistProjectResolver.ts
+var FREE_TIER_ID = "free-tier";
+var LEGACY_TIER_ID = "legacy-tier";
+var ONBOARD_POLL_INTERVAL_MS = 5e3;
+var ONBOARD_MAX_POLLS = 24;
+var GeminiCodeAssistHandshakeError = class extends Error {
+  constructor(message, status, code) {
+    super(message);
+    this.status = status;
+    this.code = code;
+    this.name = "GeminiCodeAssistHandshakeError";
+  }
+  status;
+  code;
+};
+var GeminiCodeAssistProjectResolver = class {
+  constructor(fetchImpl = (url, init) => fetch(url, init)) {
+    this.fetchImpl = fetchImpl;
+  }
+  fetchImpl;
+  /** account access token → resolved project id (undefined = free-tier, no project). */
+  cache = /* @__PURE__ */ new Map();
+  /** In-flight handshakes so concurrent callers share one round-trip. */
+  inflight = /* @__PURE__ */ new Map();
+  /** Test/diagnostic helper — clear the cached resolution for an account. */
+  clearCache() {
+    this.cache.clear();
+    this.inflight.clear();
+  }
+  /**
+   * Resolve (and cache) the Code Assist project for the given access token.
+   * Runs the handshake at most once per token. Returns `undefined` for a
+   * brand-new free-tier account (valid — the envelope sends no project).
+   */
+  async resolveProject(accessToken) {
+    if (this.cache.has(accessToken)) {
+      return this.cache.get(accessToken);
+    }
+    const existing = this.inflight.get(accessToken);
+    if (existing) return existing;
+    const run = this.runHandshake(accessToken).then((project) => {
+      this.cache.set(accessToken, project);
+      return project;
+    }).finally(() => {
+      this.inflight.delete(accessToken);
+    });
+    this.inflight.set(accessToken, run);
+    return run;
+  }
+  codeAssistUrl(method) {
+    return `${resolveCodeAssistEndpoint()}/${resolveCodeAssistApiVersion()}:${method}`;
+  }
+  /** Seed project id from env; reject a purely-numeric value (project NUMBER). */
+  seedProjectId() {
+    const seed = process.env.GOOGLE_CLOUD_PROJECT || process.env.GOOGLE_CLOUD_PROJECT_ID || "";
+    if (seed && /^\d+$/.test(seed.trim())) return "";
+    return seed.trim();
+  }
+  async runHandshake(accessToken) {
+    const seededProject = this.seedProjectId();
+    const load = await this.postCodeAssist("loadCodeAssist", accessToken, {
+      cloudaicompanionProject: seededProject || void 0,
+      metadata: {
+        ideType: "IDE_UNSPECIFIED",
+        platform: "PLATFORM_UNSPECIFIED",
+        pluginType: "GEMINI",
+        duetProject: seededProject || void 0
+      }
+    });
+    if (load.currentTier?.id) {
+      return load.cloudaicompanionProject || void 0;
+    }
+    const defaultTier = load.allowedTiers?.find((t) => t.isDefault);
+    const tierId = defaultTier?.id ?? LEGACY_TIER_ID;
+    const isFreeish = tierId === FREE_TIER_ID || tierId === LEGACY_TIER_ID;
+    const onboardProject = isFreeish ? void 0 : seededProject || void 0;
+    let lro = await this.postCodeAssist("onboardUser", accessToken, {
+      tierId,
+      cloudaicompanionProject: onboardProject,
+      metadata: {
+        ideType: "IDE_UNSPECIFIED",
+        platform: "PLATFORM_UNSPECIFIED",
+        pluginType: "GEMINI",
+        duetProject: onboardProject
+      }
+    });
+    let polls = 0;
+    while (!lro.done && polls < ONBOARD_MAX_POLLS) {
+      await delay(ONBOARD_POLL_INTERVAL_MS);
+      polls++;
+      lro = await this.getOperation(accessToken, lro.name);
+    }
+    if (lro.error) {
+      throw new GeminiCodeAssistHandshakeError(
+        `Code Assist onboardUser failed: ${lro.error.message ?? "unknown"}`,
+        lro.error.code ?? 500
+      );
+    }
+    return lro.response?.cloudaicompanionProject?.id || void 0;
+  }
+  /** POST a Code Assist method, surfacing the documented hard failures clearly. */
+  async postCodeAssist(method, accessToken, body) {
+    const url = this.codeAssistUrl(method);
+    const res = await this.fetchImpl(url, {
+      method: "POST",
+      headers: {
+        Authorization: `Bearer ${accessToken}`,
+        "Content-Type": "application/json"
+      },
+      body: JSON.stringify(body)
+    });
+    if (!res.ok) {
+      await this.throwForStatus(res, method);
+    }
+    return await res.json();
+  }
+  async getOperation(accessToken, name) {
+    const url = this.codeAssistUrl("getOperation");
+    const res = await this.fetchImpl(url, {
+      method: "POST",
+      headers: {
+        Authorization: `Bearer ${accessToken}`,
+        "Content-Type": "application/json"
+      },
+      body: JSON.stringify({ name })
+    });
+    if (!res.ok) {
+      await this.throwForStatus(res, "getOperation");
+    }
+    return await res.json();
+  }
+  /** Map a non-2xx Code Assist response to a clear, surfaced error. */
+  async throwForStatus(res, method) {
+    let detailCode;
+    let detailMessage = "";
+    try {
+      const errBody = await res.json();
+      detailCode = errBody.error?.status;
+      detailMessage = errBody.error?.message ?? "";
+    } catch {
+    }
+    if (res.status === 403) {
+      throw new GeminiCodeAssistHandshakeError(
+        `Code Assist ${method} denied (403 ${detailCode ?? "PERMISSION_DENIED"}): ${detailMessage || "enable the Cloud AI Companion API and grant the required role"}`,
+        403,
+        detailCode
+      );
+    }
+    if (res.status === 429) {
+      throw new GeminiCodeAssistHandshakeError(
+        `Code Assist ${method} rate-limited (429): ${detailMessage || "quota exceeded, retry later"}`,
+        429,
+        detailCode
+      );
+    }
+    throw new GeminiCodeAssistHandshakeError(
+      `Code Assist ${method} failed (${res.status}): ${detailMessage || res.statusText}`,
+      res.status,
+      detailCode
+    );
+  }
+};
+function delay(ms) {
+  return new Promise((resolve) => {
+    setTimeout(resolve, ms);
+  });
+}
+var _resolverSingleton = null;
+function getGeminiCodeAssistProjectResolver() {
+  if (!_resolverSingleton) {
+    _resolverSingleton = new GeminiCodeAssistProjectResolver();
+  }
+  return _resolverSingleton;
+}
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  GeminiCodeAssistHandshakeError,
+  GeminiCodeAssistProjectResolver,
+  getGeminiCodeAssistProjectResolver
+});

package/dist/auth/GeminiCodeAssistProjectResolver.d.cts

@@ -0,0 +1,68 @@
+/**
+ * GeminiCodeAssistProjectResolver — runs the Google Code Assist project
+ * handshake ONCE per account and caches the resolved Cloud AI Companion
+ * project id.
+ *
+ * The gemini SUBSCRIPTION upstream (`cloudcode-pa.googleapis.com`) requires a
+ * project id in its generateContent envelope for paid tiers. Brand-new
+ * free-tier accounts have NO project (and sending one → Precondition Failed),
+ * so `undefined` is a VALID resolved value. The resolution dance mirrors
+ * gemini-cli `packages/core/src/code_assist/setup.ts`:
+ *
+ *   1. seed `projectId = GOOGLE_CLOUD_PROJECT || GOOGLE_CLOUD_PROJECT_ID`
+ *      (may be empty; a purely-numeric value is rejected — Code Assist wants
+ *      the human-readable project id, not the number).
+ *   2. POST `:loadCodeAssist` with `{ cloudaicompanionProject, metadata }`.
+ *      - If the response carries `currentTier` → already onboarded; use the
+ *        response's `cloudaicompanionProject` (may be undefined for free-tier).
+ *      - Else pick the onboarding tier (first `allowedTiers` with `isDefault`,
+ *        default `legacy-tier`) and POST `:onboardUser`. For free-tier /
+ *        legacy-tier the `cloudaicompanionProject` MUST be undefined; for
+ *        standard-tier include it. `:onboardUser` returns an LRO — poll
+ *        `:getOperation` until `done`, then read
+ *        `response.cloudaicompanionProject.id`.
+ *
+ * Resolution result is cached in-memory keyed by access token (1:1 with the
+ * account) so the handshake runs at most once per token. On a documented hard
+ * failure (403 SERVICE_DISABLED / PERMISSION_DENIED, 429) we throw a clear
+ * error WITHOUT caching, so a transient/permission issue can be retried after
+ * the user fixes it.
+ *
+ * @module @omnicross/core/auth/GeminiCodeAssistProjectResolver
+ */
+/** A clear, surfaced error for the documented hard-failure modes. */
+declare class GeminiCodeAssistHandshakeError extends Error {
+    readonly status: number;
+    readonly code?: string | undefined;
+    constructor(message: string, status: number, code?: string | undefined);
+}
+/** Injectable fetch so tests can mock the network without a live endpoint. */
+type FetchLike = (url: string, init: RequestInit) => Promise<Response>;
+declare class GeminiCodeAssistProjectResolver {
+    private readonly fetchImpl;
+    /** account access token → resolved project id (undefined = free-tier, no project). */
+    private readonly cache;
+    /** In-flight handshakes so concurrent callers share one round-trip. */
+    private readonly inflight;
+    constructor(fetchImpl?: FetchLike);
+    /** Test/diagnostic helper — clear the cached resolution for an account. */
+    clearCache(): void;
+    /**
+     * Resolve (and cache) the Code Assist project for the given access token.
+     * Runs the handshake at most once per token. Returns `undefined` for a
+     * brand-new free-tier account (valid — the envelope sends no project).
+     */
+    resolveProject(accessToken: string): Promise<string | undefined>;
+    private codeAssistUrl;
+    /** Seed project id from env; reject a purely-numeric value (project NUMBER). */
+    private seedProjectId;
+    private runHandshake;
+    /** POST a Code Assist method, surfacing the documented hard failures clearly. */
+    private postCodeAssist;
+    private getOperation;
+    /** Map a non-2xx Code Assist response to a clear, surfaced error. */
+    private throwForStatus;
+}
+declare function getGeminiCodeAssistProjectResolver(): GeminiCodeAssistProjectResolver;
+
+export { type FetchLike, GeminiCodeAssistHandshakeError, GeminiCodeAssistProjectResolver, getGeminiCodeAssistProjectResolver };

package/dist/auth/GeminiCodeAssistProjectResolver.d.ts

@@ -0,0 +1,68 @@
+/**
+ * GeminiCodeAssistProjectResolver — runs the Google Code Assist project
+ * handshake ONCE per account and caches the resolved Cloud AI Companion
+ * project id.
+ *
+ * The gemini SUBSCRIPTION upstream (`cloudcode-pa.googleapis.com`) requires a
+ * project id in its generateContent envelope for paid tiers. Brand-new
+ * free-tier accounts have NO project (and sending one → Precondition Failed),
+ * so `undefined` is a VALID resolved value. The resolution dance mirrors
+ * gemini-cli `packages/core/src/code_assist/setup.ts`:
+ *
+ *   1. seed `projectId = GOOGLE_CLOUD_PROJECT || GOOGLE_CLOUD_PROJECT_ID`
+ *      (may be empty; a purely-numeric value is rejected — Code Assist wants
+ *      the human-readable project id, not the number).
+ *   2. POST `:loadCodeAssist` with `{ cloudaicompanionProject, metadata }`.
+ *      - If the response carries `currentTier` → already onboarded; use the
+ *        response's `cloudaicompanionProject` (may be undefined for free-tier).
+ *      - Else pick the onboarding tier (first `allowedTiers` with `isDefault`,
+ *        default `legacy-tier`) and POST `:onboardUser`. For free-tier /
+ *        legacy-tier the `cloudaicompanionProject` MUST be undefined; for
+ *        standard-tier include it. `:onboardUser` returns an LRO — poll
+ *        `:getOperation` until `done`, then read
+ *        `response.cloudaicompanionProject.id`.
+ *
+ * Resolution result is cached in-memory keyed by access token (1:1 with the
+ * account) so the handshake runs at most once per token. On a documented hard
+ * failure (403 SERVICE_DISABLED / PERMISSION_DENIED, 429) we throw a clear
+ * error WITHOUT caching, so a transient/permission issue can be retried after
+ * the user fixes it.
+ *
+ * @module @omnicross/core/auth/GeminiCodeAssistProjectResolver
+ */
+/** A clear, surfaced error for the documented hard-failure modes. */
+declare class GeminiCodeAssistHandshakeError extends Error {
+    readonly status: number;
+    readonly code?: string | undefined;
+    constructor(message: string, status: number, code?: string | undefined);
+}
+/** Injectable fetch so tests can mock the network without a live endpoint. */
+type FetchLike = (url: string, init: RequestInit) => Promise<Response>;
+declare class GeminiCodeAssistProjectResolver {
+    private readonly fetchImpl;
+    /** account access token → resolved project id (undefined = free-tier, no project). */
+    private readonly cache;
+    /** In-flight handshakes so concurrent callers share one round-trip. */
+    private readonly inflight;
+    constructor(fetchImpl?: FetchLike);
+    /** Test/diagnostic helper — clear the cached resolution for an account. */
+    clearCache(): void;
+    /**
+     * Resolve (and cache) the Code Assist project for the given access token.
+     * Runs the handshake at most once per token. Returns `undefined` for a
+     * brand-new free-tier account (valid — the envelope sends no project).
+     */
+    resolveProject(accessToken: string): Promise<string | undefined>;
+    private codeAssistUrl;
+    /** Seed project id from env; reject a purely-numeric value (project NUMBER). */
+    private seedProjectId;
+    private runHandshake;
+    /** POST a Code Assist method, surfacing the documented hard failures clearly. */
+    private postCodeAssist;
+    private getOperation;
+    /** Map a non-2xx Code Assist response to a clear, surfaced error. */
+    private throwForStatus;
+}
+declare function getGeminiCodeAssistProjectResolver(): GeminiCodeAssistProjectResolver;
+
+export { type FetchLike, GeminiCodeAssistHandshakeError, GeminiCodeAssistProjectResolver, getGeminiCodeAssistProjectResolver };

package/dist/auth/GeminiCodeAssistProjectResolver.js

@@ -0,0 +1,189 @@
+// src/transformer/transformers/GeminiCodeAssistTransformer.ts
+var DEFAULT_CODE_ASSIST_ENDPOINT = "https://cloudcode-pa.googleapis.com";
+var DEFAULT_CODE_ASSIST_API_VERSION = "v1internal";
+function resolveCodeAssistEndpoint() {
+  return (process.env.CODE_ASSIST_ENDPOINT || DEFAULT_CODE_ASSIST_ENDPOINT).replace(/\/+$/, "");
+}
+function resolveCodeAssistApiVersion() {
+  return process.env.CODE_ASSIST_API_VERSION || DEFAULT_CODE_ASSIST_API_VERSION;
+}
+
+// src/auth/GeminiCodeAssistProjectResolver.ts
+var FREE_TIER_ID = "free-tier";
+var LEGACY_TIER_ID = "legacy-tier";
+var ONBOARD_POLL_INTERVAL_MS = 5e3;
+var ONBOARD_MAX_POLLS = 24;
+var GeminiCodeAssistHandshakeError = class extends Error {
+  constructor(message, status, code) {
+    super(message);
+    this.status = status;
+    this.code = code;
+    this.name = "GeminiCodeAssistHandshakeError";
+  }
+  status;
+  code;
+};
+var GeminiCodeAssistProjectResolver = class {
+  constructor(fetchImpl = (url, init) => fetch(url, init)) {
+    this.fetchImpl = fetchImpl;
+  }
+  fetchImpl;
+  /** account access token → resolved project id (undefined = free-tier, no project). */
+  cache = /* @__PURE__ */ new Map();
+  /** In-flight handshakes so concurrent callers share one round-trip. */
+  inflight = /* @__PURE__ */ new Map();
+  /** Test/diagnostic helper — clear the cached resolution for an account. */
+  clearCache() {
+    this.cache.clear();
+    this.inflight.clear();
+  }
+  /**
+   * Resolve (and cache) the Code Assist project for the given access token.
+   * Runs the handshake at most once per token. Returns `undefined` for a
+   * brand-new free-tier account (valid — the envelope sends no project).
+   */
+  async resolveProject(accessToken) {
+    if (this.cache.has(accessToken)) {
+      return this.cache.get(accessToken);
+    }
+    const existing = this.inflight.get(accessToken);
+    if (existing) return existing;
+    const run = this.runHandshake(accessToken).then((project) => {
+      this.cache.set(accessToken, project);
+      return project;
+    }).finally(() => {
+      this.inflight.delete(accessToken);
+    });
+    this.inflight.set(accessToken, run);
+    return run;
+  }
+  codeAssistUrl(method) {
+    return `${resolveCodeAssistEndpoint()}/${resolveCodeAssistApiVersion()}:${method}`;
+  }
+  /** Seed project id from env; reject a purely-numeric value (project NUMBER). */
+  seedProjectId() {
+    const seed = process.env.GOOGLE_CLOUD_PROJECT || process.env.GOOGLE_CLOUD_PROJECT_ID || "";
+    if (seed && /^\d+$/.test(seed.trim())) return "";
+    return seed.trim();
+  }
+  async runHandshake(accessToken) {
+    const seededProject = this.seedProjectId();
+    const load = await this.postCodeAssist("loadCodeAssist", accessToken, {
+      cloudaicompanionProject: seededProject || void 0,
+      metadata: {
+        ideType: "IDE_UNSPECIFIED",
+        platform: "PLATFORM_UNSPECIFIED",
+        pluginType: "GEMINI",
+        duetProject: seededProject || void 0
+      }
+    });
+    if (load.currentTier?.id) {
+      return load.cloudaicompanionProject || void 0;
+    }
+    const defaultTier = load.allowedTiers?.find((t) => t.isDefault);
+    const tierId = defaultTier?.id ?? LEGACY_TIER_ID;
+    const isFreeish = tierId === FREE_TIER_ID || tierId === LEGACY_TIER_ID;
+    const onboardProject = isFreeish ? void 0 : seededProject || void 0;
+    let lro = await this.postCodeAssist("onboardUser", accessToken, {
+      tierId,
+      cloudaicompanionProject: onboardProject,
+      metadata: {
+        ideType: "IDE_UNSPECIFIED",
+        platform: "PLATFORM_UNSPECIFIED",
+        pluginType: "GEMINI",
+        duetProject: onboardProject
+      }
+    });
+    let polls = 0;
+    while (!lro.done && polls < ONBOARD_MAX_POLLS) {
+      await delay(ONBOARD_POLL_INTERVAL_MS);
+      polls++;
+      lro = await this.getOperation(accessToken, lro.name);
+    }
+    if (lro.error) {
+      throw new GeminiCodeAssistHandshakeError(
+        `Code Assist onboardUser failed: ${lro.error.message ?? "unknown"}`,
+        lro.error.code ?? 500
+      );
+    }
+    return lro.response?.cloudaicompanionProject?.id || void 0;
+  }
+  /** POST a Code Assist method, surfacing the documented hard failures clearly. */
+  async postCodeAssist(method, accessToken, body) {
+    const url = this.codeAssistUrl(method);
+    const res = await this.fetchImpl(url, {
+      method: "POST",
+      headers: {
+        Authorization: `Bearer ${accessToken}`,
+        "Content-Type": "application/json"
+      },
+      body: JSON.stringify(body)
+    });
+    if (!res.ok) {
+      await this.throwForStatus(res, method);
+    }
+    return await res.json();
+  }
+  async getOperation(accessToken, name) {
+    const url = this.codeAssistUrl("getOperation");
+    const res = await this.fetchImpl(url, {
+      method: "POST",
+      headers: {
+        Authorization: `Bearer ${accessToken}`,
+        "Content-Type": "application/json"
+      },
+      body: JSON.stringify({ name })
+    });
+    if (!res.ok) {
+      await this.throwForStatus(res, "getOperation");
+    }
+    return await res.json();
+  }
+  /** Map a non-2xx Code Assist response to a clear, surfaced error. */
+  async throwForStatus(res, method) {
+    let detailCode;
+    let detailMessage = "";
+    try {
+      const errBody = await res.json();
+      detailCode = errBody.error?.status;
+      detailMessage = errBody.error?.message ?? "";
+    } catch {
+    }
+    if (res.status === 403) {
+      throw new GeminiCodeAssistHandshakeError(
+        `Code Assist ${method} denied (403 ${detailCode ?? "PERMISSION_DENIED"}): ${detailMessage || "enable the Cloud AI Companion API and grant the required role"}`,
+        403,
+        detailCode
+      );
+    }
+    if (res.status === 429) {
+      throw new GeminiCodeAssistHandshakeError(
+        `Code Assist ${method} rate-limited (429): ${detailMessage || "quota exceeded, retry later"}`,
+        429,
+        detailCode
+      );
+    }
+    throw new GeminiCodeAssistHandshakeError(
+      `Code Assist ${method} failed (${res.status}): ${detailMessage || res.statusText}`,
+      res.status,
+      detailCode
+    );
+  }
+};
+function delay(ms) {
+  return new Promise((resolve) => {
+    setTimeout(resolve, ms);
+  });
+}
+var _resolverSingleton = null;
+function getGeminiCodeAssistProjectResolver() {
+  if (!_resolverSingleton) {
+    _resolverSingleton = new GeminiCodeAssistProjectResolver();
+  }
+  return _resolverSingleton;
+}
+export {
+  GeminiCodeAssistHandshakeError,
+  GeminiCodeAssistProjectResolver,
+  getGeminiCodeAssistProjectResolver
+};