@openlimiter/core 0.4.0 → 1.3.1

package/dist/acquire/antigravity-probe.d.ts

@@ -0,0 +1,139 @@
+/**
+ * The Antigravity loopback probe.
+ *
+ * Antigravity quota is served live by a running agy process on a loopback port.
+ * It speaks Connect protocol (POST with Connect-Protocol-Version: 1) and
+ * answers RetrieveUserQuotaSummary over loopback HTTPS with a self-signed
+ * certificate. When an agy process is alive on this machine, probing this
+ * loopback endpoint gives an honest, authoritative reading with zero cloud
+ * impersonation.
+ *
+ * When no agy process is running, this probe reports that fact plainly and
+ * never attempts to spawn agy.
+ */
+import type { ConnectorLabels, RawMeter } from "../types.js";
+import type { CredentialCommandRunner } from "./windows-credential.js";
+import type { CredentialLookupOptions } from "./credentials.js";
+export declare const AGY_QUOTA_PATH = "/exa.language_server_pb.LanguageServerService/RetrieveUserQuotaSummary";
+export declare const AGY_NOT_RUNNING_SENTENCE = "Open Antigravity once to refresh";
+export declare const AGY_PROBE_TIMEOUT_MILLISECONDS = 3000;
+export declare const MAX_AGY_RESPONSE_BYTES: number;
+export declare const TOTAL_AGY_PROBE_DEADLINE_MS = 5000;
+export declare const ANTIGRAVITY_PROBE_LABELS: ConnectorLabels;
+export interface AgyBucketPayload {
+    readonly bucketId?: string;
+    readonly displayName?: string;
+    readonly window?: string;
+    readonly remainingFraction?: number;
+    readonly resetTime?: string;
+}
+export interface AgyGroupPayload {
+    readonly buckets?: readonly AgyBucketPayload[];
+}
+export interface AgyQuotaSummaryPayload {
+    readonly response?: {
+        readonly groups?: readonly AgyGroupPayload[];
+    };
+    readonly groups?: readonly AgyGroupPayload[];
+}
+export interface AntigravityProbeSuccess {
+    readonly ok: true;
+    readonly meters: readonly RawMeter[];
+}
+export interface AntigravityProbeFailure {
+    readonly ok: false;
+    readonly reason: "not_running" | "unreachable" | "invalid_response";
+}
+export type AntigravityProbeResult = AntigravityProbeSuccess | AntigravityProbeFailure;
+export interface AntigravityProbeOptions {
+    readonly now?: string;
+    readonly lookup?: CredentialLookupOptions;
+    readonly runCommand?: CredentialCommandRunner;
+    readonly resolveExecutablePath?: (pid: string) => Promise<string | null>;
+    readonly enumeratePorts?: () => Promise<readonly number[]>;
+    readonly probePort?: (port: number) => Promise<unknown | null>;
+    readonly totalDeadlineMs?: number;
+}
+export interface EnumerateAgyPortsOptions {
+    readonly platform?: NodeJS.Platform;
+    readonly runCommand?: CredentialCommandRunner;
+    readonly resolveExecutablePath?: (pid: string) => Promise<string | null>;
+    readonly env?: NodeJS.ProcessEnv;
+}
+/**
+ * Parse the Connect protocol RetrieveUserQuotaSummary response.
+ *
+ * Maps gemini-5h to FIVE_HOUR (18,000s) and gemini-weekly to SEVEN_DAY (604,800s).
+ * Percentage is rounded to 1 decimal place: (1 - remainingFraction) * 100.
+ */
+export declare function parseAgyQuotaSummary(payload: unknown, now: string): readonly RawMeter[] | null;
+/**
+ * Resolve a pid to the absolute path of the executable running it, the one
+ * piece of proof `isTrustedAgyExecutable` actually checks.
+ *
+ * Windows' own `tasklist` names a process but never its path, so a caller
+ * stuck on that fallback (CIM itself already carries a path, see
+ * `enumerateAgyListeningPorts`) has nothing to verify a candidate against but
+ * the bare string "agy.exe", which is exactly the name an impostor process
+ * picks for itself. This asks Windows the same question CIM already answers,
+ * for one pid at a time; POSIX reads `/proc/<pid>/exe`'s own symlink on
+ * Linux, where the kernel itself is the source of truth, and asks `ps` on
+ * every other POSIX platform. A pid whose executable cannot be read this way
+ * answers null, which every caller here treats as "cannot be trusted", never
+ * as "trust it anyway".
+ */
+export declare function resolveAgyExecutablePath(pid: string, platform?: NodeJS.Platform, runCommand?: (executable: string, args: readonly string[], timeout: number) => Promise<{
+    ok: true;
+    stdout: string;
+} | {
+    ok: false;
+}>): Promise<string | null>;
+/**
+ * Extract loopback port from an address string (e.g. "127.0.0.1:57737" or "[::1]:57737").
+ */
+export declare function parseLoopbackPort(address: string): number | null;
+/**
+ * Language-agnostic Windows netstat parser.
+ *
+ * Windows netstat lines have 5 whitespace-delimited tokens:
+ * Protocol, Local Address, Foreign Address, State, PID.
+ * A listening socket always has a wildcard foreign address (0.0.0.0:0, [::]:0, *:*).
+ * Matching this wildcard avoids relying on English "LISTENING" or "TCP".
+ */
+export declare function parseNetstatPorts(report: string, pids: ReadonlySet<string> | readonly string[]): readonly number[];
+/**
+ * Parse output from lsof, handling both standard tabular output and "-F pn" output.
+ */
+export declare function parseLsofOutput(output: string): Array<{
+    pid: string;
+    port: number;
+}>;
+/**
+ * Valid install roots where legitimate software binaries are located.
+ */
+export declare function getAgyInstallRoots(platform?: NodeJS.Platform, env?: NodeJS.ProcessEnv): readonly string[];
+/**
+ * Validate that an executable path is trusted:
+ * 1. Absolute path, no parent traversal ("..")
+ * 2. Named agy.exe (Windows) or agy (non-Windows)
+ * 3. Resides under one of the legitimate install roots
+ */
+export declare function isTrustedAgyExecutable(executablePath: string, platform?: NodeJS.Platform, roots?: readonly string[]): boolean;
+/**
+ * Enumerate listening loopback ports belonging to running agy processes.
+ */
+export declare function enumerateAgyListeningPorts(options?: EnumerateAgyPortsOptions): Promise<readonly number[]>;
+/**
+ * Probe an agy loopback port for quota summary.
+ * Attempts HTTPS with self-signed certificate acceptance first, then plain HTTP.
+ */
+export declare function probeAgyLoopback(port: number, timeoutMs?: number, signal?: AbortSignal): Promise<unknown | null>;
+/**
+ * Run the Antigravity probe:
+ * 1. Discover listening ports for running agy processes.
+ * 2. If no processes found, report "not_running".
+ * 3. Probe loopback ports and parse quota summary.
+ * Enforces a hard total deadline across all ports probed.
+ */
+export declare function probeAntigravity(options?: AntigravityProbeOptions): Promise<AntigravityProbeResult>;
+//# sourceMappingURL=antigravity-probe.d.ts.map

package/dist/acquire/antigravity-probe.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"antigravity-probe.d.ts","sourceRoot":"","sources":["../../src/acquire/antigravity-probe.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAMH,OAAO,KAAK,EAAE,eAAe,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAE7D,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,yBAAyB,CAAC;AACvE,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,kBAAkB,CAAC;AAEhE,eAAO,MAAM,cAAc,2EAC+C,CAAC;AAE3E,eAAO,MAAM,wBAAwB,qCAAqC,CAAC;AAE3E,eAAO,MAAM,8BAA8B,OAAQ,CAAC;AAEpD,eAAO,MAAM,sBAAsB,QAAY,CAAC;AAEhD,eAAO,MAAM,2BAA2B,OAAQ,CAAC;AAEjD,eAAO,MAAM,wBAAwB,EAAE,eAKtC,CAAC;AAEF,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,iBAAiB,CAAC,EAAE,MAAM,CAAC;IACpC,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;CAC7B;AAED,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,OAAO,CAAC,EAAE,SAAS,gBAAgB,EAAE,CAAC;CAChD;AAED,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,QAAQ,CAAC,EAAE;QAClB,QAAQ,CAAC,MAAM,CAAC,EAAE,SAAS,eAAe,EAAE,CAAC;KAC9C,CAAC;IACF,QAAQ,CAAC,MAAM,CAAC,EAAE,SAAS,eAAe,EAAE,CAAC;CAC9C;AAED,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAC;IAClB,QAAQ,CAAC,MAAM,EAAE,SAAS,QAAQ,EAAE,CAAC;CACtC;AAED,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,EAAE,EAAE,KAAK,CAAC;IACnB,QAAQ,CAAC,MAAM,EAAE,aAAa,GAAG,aAAa,GAAG,kBAAkB,CAAC;CACrE;AAED,MAAM,MAAM,sBAAsB,GAC9B,uBAAuB,GACvB,uBAAuB,CAAC;AAE5B,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,MAAM,CAAC,EAAE,uBAAuB,CAAC;IAC1C,QAAQ,CAAC,UAAU,CAAC,EAAE,uBAAuB,CAAC;IAC9C,QAAQ,CAAC,qBAAqB,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IACzE,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,OAAO,CAAC,SAAS,MAAM,EAAE,CAAC,CAAC;IAC3D,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC,CAAC;IAC/D,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;CACnC;AAED,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,QAAQ,CAAC;IACpC,QAAQ,CAAC,UAAU,CAAC,EAAE,uBAAuB,CAAC;IAC9C,QAAQ,CAAC,qBAAqB,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IACzE,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;CAClC;AAED;;;;;GAKG;AACH,wBAAgB,oBAAoB,CAClC,OAAO,EAAE,OAAO,EAChB,GAAG,EAAE,MAAM,GACV,SAAS,QAAQ,EAAE,GAAG,IAAI,CAmE5B;AAuBD;;;;;;;;;;;;;;GAcG;AACH,wBAAsB,wBAAwB,CAC5C,GAAG,EAAE,MAAM,EACX,QAAQ,GAAE,MAAM,CAAC,QAA2B,EAC5C,UAAU,GAAE,CACV,UAAU,EAAE,MAAM,EAClB,IAAI,EAAE,SAAS,MAAM,EAAE,EACvB,OAAO,EAAE,MAAM,KACZ,OAAO,CAAC;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAA;CAAE,CAAmB,GAC3E,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CA2BxB;AAED;;GAEG;AACH,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAgBhE;AAED;;;;;;;GAOG;AACH,wBAAgB,iBAAiB,CAC/B,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,WAAW,CAAC,MAAM,CAAC,GAAG,SAAS,MAAM,EAAE,GAC5C,SAAS,MAAM,EAAE,CA0BnB;AAED;;GAEG;AACH,wBAAgB,eAAe,CAAC,MAAM,EAAE,MAAM,GAAG,KAAK,CAAC;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC,CAmCpF;AAED;;GAEG;AACH,wBAAgB,kBAAkB,CAChC,QAAQ,GAAE,MAAM,CAAC,QAA2B,EAC5C,GAAG,GAAE,MAAM,CAAC,UAAwB,GACnC,SAAS,MAAM,EAAE,CA4BnB;AAED;;;;;GAKG;AACH,wBAAgB,sBAAsB,CACpC,cAAc,EAAE,MAAM,EACtB,QAAQ,GAAE,MAAM,CAAC,QAA2B,EAC5C,KAAK,GAAE,SAAS,MAAM,EAAiC,GACtD,OAAO,CA8BT;AAED;;GAEG;AACH,wBAAsB,0BAA0B,CAC9C,OAAO,CAAC,EAAE,wBAAwB,GACjC,OAAO,CAAC,SAAS,MAAM,EAAE,CAAC,CAmI5B;AAgHD;;;GAGG;AACH,wBAAsB,gBAAgB,CACpC,IAAI,EAAE,MAAM,EACZ,SAAS,SAAiC,EAC1C,MAAM,CAAC,EAAE,WAAW,GACnB,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC,CAIzB;AAED;;;;;;GAMG;AACH,wBAAsB,gBAAgB,CACpC,OAAO,CAAC,EAAE,uBAAuB,GAChC,OAAO,CAAC,sBAAsB,CAAC,CAkEjC"}