@openlimiter/core 2.0.3 → 2.1.0

package/dist/acquire/antigravity-probe.js

@@ -1,655 +0,0 @@
-/**
- * The Antigravity loopback probe.
- *
- * Antigravity quota is served live by a running agy process on a loopback port.
- * It speaks Connect protocol (POST with Connect-Protocol-Version: 1) and
- * answers RetrieveUserQuotaSummary over loopback HTTPS with a self-signed
- * certificate. When an agy process is alive on this machine, probing this
- * loopback endpoint gives an honest, authoritative reading with zero cloud
- * impersonation.
- *
- * When no agy process is running, this probe reports that fact plainly and
- * never attempts to spawn agy.
- */
-import { execFile } from "node:child_process";
-import { realpath, stat } from "node:fs/promises";
-import https from "node:https";
-import http from "node:http";
-import path from "node:path";
-import { antigravityMeter } from "./antigravity-meters.js";
-import { OPENLIMITER_USER_AGENT } from "./identity.js";
-import { windowsSystemTool } from "../windows-system-tool.js";
-export const AGY_QUOTA_PATH = "/exa.language_server_pb.LanguageServerService/RetrieveUserQuotaSummary";
-export const AGY_NOT_RUNNING_SENTENCE = "Open Antigravity once to refresh";
-export const AGY_PROBE_TIMEOUT_MILLISECONDS = 3_000;
-export const MAX_AGY_RESPONSE_BYTES = 64 * 1024; // 64 KB
-export const TOTAL_AGY_PROBE_DEADLINE_MS = 5_000; // 5 seconds
-export const ANTIGRAVITY_PROBE_LABELS = {
-    credentialOrigin: "official-local-tool",
-    dataInterfaceStatus: "internal-endpoint",
-    automationRisk: "high",
-    verification: "UNVERIFIED"
-};
-/**
- * Parse the Connect protocol RetrieveUserQuotaSummary response.
- *
- * Preserves Gemini and third party identities through the shared desktop mapping.
- * Percentage is rounded to 1 decimal place: (1 - remainingFraction) * 100.
- */
-export function parseAgyQuotaSummary(payload, now) {
-    if (typeof payload !== "object" || payload === null)
-        return null;
-    const root = payload;
-    const unwrapped = typeof root["response"] === "object" && root["response"] !== null
-        ? root["response"]
-        : root;
-    const groups = unwrapped["groups"];
-    if (!Array.isArray(groups))
-        return null;
-    const meters = [];
-    for (const entry of groups) {
-        if (typeof entry !== "object" || entry === null)
-            continue;
-        const buckets = entry["buckets"];
-        if (!Array.isArray(buckets))
-            continue;
-        for (const item of buckets) {
-            if (typeof item !== "object" || item === null)
-                continue;
-            const b = item;
-            const bucketId = typeof b["bucketId"] === "string" ? b["bucketId"] :
-                typeof b["poolPrefix"] === "string" ? b["poolPrefix"] : "";
-            const windowName = typeof b["window"] === "string" ? b["window"].toLowerCase() : "";
-            const mapped = antigravityMeter(bucketId, windowName);
-            if (mapped === null)
-                continue;
-            const { meter: meterCode, durationSeconds } = mapped;
-            const remaining = typeof b["remainingFraction"] === "number" ? b["remainingFraction"] : null;
-            if (remaining === null || Number.isNaN(remaining))
-                continue;
-            const fraction = Math.max(0, Math.min(1, remaining));
-            const value = Math.round(Math.max(0, Math.min(100, (1 - fraction) * 100)) * 10) / 10;
-            const resetTime = typeof b["resetTime"] === "string" ? b["resetTime"] : null;
-            const resetSeconds = b["resetsInSeconds"];
-            const resetAt = resetTime !== null && !Number.isNaN(Date.parse(resetTime))
-                ? new Date(resetTime).toISOString()
-                : typeof resetSeconds === "number" && Number.isFinite(resetSeconds) && resetSeconds >= 0 && resetSeconds <= 604800
-                    ? new Date(Date.parse(now) + resetSeconds * 1000).toISOString() : undefined;
-            const expiresAt = new Date(new Date(now).getTime() + 300_000).toISOString();
-            meters.push({
-                provider: "ANTIGRAVITY",
-                meter: meterCode,
-                value,
-                unit: "PERCENT",
-                window: { kind: "rolling", durationSeconds },
-                resetAt,
-                source: "internal_payload",
-                precision: "estimated",
-                observedAt: now,
-                expiresAt,
-                labels: ANTIGRAVITY_PROBE_LABELS
-            });
-        }
-    }
-    return meters.length > 0 ? meters : null;
-}
-function execFilePromise(executable, args, timeout) {
-    return new Promise((resolve) => {
-        execFile(executable, [...args], {
-            timeout,
-            windowsHide: true,
-            ...(process.platform === "win32" && path.win32.isAbsolute(executable)
-                ? { cwd: path.win32.dirname(executable) }
-                : {})
-        }, (error, stdout) => {
-            if (error) {
-                resolve({ ok: false });
-            }
-            else {
-                resolve({ ok: true, stdout: stdout.toString() });
-            }
-        });
-    });
-}
-/**
- * Resolve a pid to the absolute path of the executable running it, the one
- * piece of proof `isTrustedAgyExecutable` actually checks.
- *
- * Windows' own `tasklist` names a process but never its path, so a caller
- * stuck on that fallback (CIM itself already carries a path, see
- * `enumerateAgyListeningPorts`) has nothing to verify a candidate against but
- * the bare string "agy.exe", which is exactly the name an impostor process
- * picks for itself. This asks Windows the same question CIM already answers,
- * for one pid at a time; POSIX reads `/proc/<pid>/exe`'s own symlink on
- * Linux, where the kernel itself is the source of truth, and asks `ps` on
- * every other POSIX platform. A pid whose executable cannot be read this way
- * answers null, which every caller here treats as "cannot be trusted", never
- * as "trust it anyway".
- */
-export async function resolveAgyExecutablePath(pid, platform = process.platform, runCommand = execFilePromise, env = process.env, resolvePath = realpath) {
-    if (!/^\d+$/u.test(pid))
-        return null;
-    if (platform === "win32") {
-        const script = "$ErrorActionPreference='SilentlyContinue';" +
-            `(Get-CimInstance Win32_Process -Filter "ProcessId=${pid}").ExecutablePath`;
-        const result = await runCommand(windowsSystemTool("WindowsPowerShell", "v1.0", "powershell.exe", env), ["-NoProfile", "-NonInteractive", "-Command", script], AGY_PROBE_TIMEOUT_MILLISECONDS);
-        if (!result.ok)
-            return null;
-        const trimmed = result.stdout.trim();
-        return trimmed.length > 0 ? trimmed : null;
-    }
-    if (platform === "linux") {
-        try {
-            return await resolvePath(`/proc/${pid}/exe`);
-        }
-        catch {
-            return null;
-        }
-    }
-    const result = await runCommand("ps", ["-o", "comm=", "-p", pid], AGY_PROBE_TIMEOUT_MILLISECONDS);
-    if (!result.ok)
-        return null;
-    const trimmed = result.stdout.trim();
-    if (trimmed.length === 0)
-        return null;
-    if (path.posix.isAbsolute(trimmed)) {
-        try {
-            return await resolvePath(trimmed);
-        }
-        catch {
-            return null;
-        }
-    }
-    const args = await runCommand("ps", ["-o", "args=", "-p", pid], AGY_PROBE_TIMEOUT_MILLISECONDS);
-    if (!args.ok)
-        return null;
-    const firstToken = args.stdout.trim().split(/\s+/u)[0];
-    if (firstToken === undefined || firstToken.length === 0)
-        return null;
-    if (path.posix.isAbsolute(firstToken)) {
-        try {
-            return await resolvePath(firstToken);
-        }
-        catch {
-            return null;
-        }
-    }
-    for (const directory of (env["PATH"] ?? "").split(":")) {
-        if (directory.length === 0)
-            continue;
-        try {
-            return await resolvePath(path.posix.join(directory, firstToken));
-        }
-        catch {
-            /* Try the next PATH entry. */
-        }
-    }
-    return null;
-}
-/**
- * Extract loopback port from an address string (e.g. "127.0.0.1:57737" or "[::1]:57737").
- */
-export function parseLoopbackPort(address) {
-    const lastColon = address.lastIndexOf(":");
-    if (lastColon === -1)
-        return null;
-    let host = address.slice(0, lastColon);
-    const portStr = address.slice(lastColon + 1);
-    if (host.startsWith("[") && host.endsWith("]")) {
-        host = host.slice(1, -1);
-    }
-    if (host !== "127.0.0.1" && host !== "::1") {
-        return null;
-    }
-    const port = Number.parseInt(portStr, 10);
-    if (Number.isNaN(port) || port <= 0 || port > 65535) {
-        return null;
-    }
-    return port;
-}
-/**
- * Language-agnostic Windows netstat parser.
- *
- * Windows netstat lines have 5 whitespace-delimited tokens:
- * Protocol, Local Address, Foreign Address, State, PID.
- * A listening socket always has a wildcard foreign address (0.0.0.0:0, [::]:0, *:*).
- * Matching this wildcard avoids relying on English "LISTENING" or "TCP".
- */
-export function parseNetstatPorts(report, pids) {
-    const pidSet = pids instanceof Set ? pids : new Set(pids);
-    const ports = [];
-    for (const line of report.split(/\r?\n/)) {
-        const fields = line.trim().split(/\s+/);
-        if (fields.length !== 5) {
-            continue;
-        }
-        const owner = fields[4];
-        if (!pidSet.has(owner)) {
-            continue;
-        }
-        const foreign = fields[2];
-        if (foreign !== "0.0.0.0:0" && foreign !== "[::]:0" && foreign !== "*:*") {
-            continue;
-        }
-        const localAddress = fields[1];
-        if (localAddress === undefined) {
-            continue;
-        }
-        const port = parseLoopbackPort(localAddress);
-        if (port !== null && !ports.includes(port)) {
-            ports.push(port);
-        }
-    }
-    return ports;
-}
-/**
- * Parse output from lsof, handling both standard tabular output and "-F pn" output.
- */
-export function parseLsofOutput(output) {
-    const results = [];
-    let currentPid = null;
-    for (const line of output.split(/\r?\n/)) {
-        const trimmed = line.trim();
-        if (trimmed.startsWith("p")) {
-            currentPid = trimmed.slice(1).trim();
-            continue;
-        }
-        if (trimmed.startsWith("n")) {
-            if (currentPid) {
-                const port = parseLoopbackPort(trimmed.slice(1).trim());
-                if (port !== null) {
-                    results.push({ pid: currentPid, port });
-                }
-            }
-            continue;
-        }
-        const parts = trimmed.split(/\s+/);
-        if (parts.length >= 8) {
-            const pid = parts[1];
-            if (pid === undefined) {
-                continue;
-            }
-            for (const part of parts) {
-                const port = parseLoopbackPort(part);
-                if (port !== null) {
-                    results.push({ pid, port });
-                    break;
-                }
-            }
-        }
-    }
-    return results;
-}
-/**
- * Canonical install directories, never broad download or application data roots.
- */
-export function getAgyInstallRoots(platform = process.platform, env = process.env) {
-    const roots = [];
-    const hostPath = platform === "win32" ? path.win32 : path.posix;
-    if (platform === "win32") {
-        const keys = ["ProgramFiles", "ProgramFiles(x86)", "ProgramW6432"];
-        for (const key of keys) {
-            const val = env[key];
-            if (val && val.trim().length > 0) {
-                roots.push(hostPath.join(val.trim(), "Antigravity"));
-            }
-        }
-        const local = env["LOCALAPPDATA"];
-        if (local)
-            roots.push(hostPath.join(local, "Programs", "Antigravity"));
-        const userProfile = env["USERPROFILE"];
-        if (userProfile && userProfile.trim().length > 0) {
-            roots.push(hostPath.join(userProfile.trim(), "AppData", "Local", "Programs", "Antigravity"));
-        }
-    }
-    else {
-        for (const fixed of ["/usr/bin", "/usr/local/bin", "/opt/google", "/Applications/Antigravity.app/Contents/MacOS"]) {
-            roots.push(fixed);
-        }
-        const home = env["HOME"];
-        if (home && home.trim().length > 0) {
-            roots.push(path.join(home.trim(), ".local", "bin"));
-            roots.push(path.join(home.trim(), "Applications", "Antigravity.app", "Contents", "MacOS"));
-        }
-    }
-    return roots;
-}
-/**
- * Validate that an executable path is trusted:
- * 1. Absolute path, no parent traversal ("..")
- * 2. Named agy.exe (Windows) or agy (non-Windows)
- * 3. Matches the executable directly inside a canonical install directory
- */
-export function isTrustedAgyExecutable(executablePath, platform = process.platform, roots = getAgyInstallRoots(platform)) {
-    if (!executablePath || typeof executablePath !== "string")
-        return false;
-    const p = platform === "win32" ? path.win32 : path.posix;
-    const normalized = p.normalize(executablePath);
-    if (executablePath.includes("..") || normalized.split(p.sep).includes("..")) {
-        return false;
-    }
-    if (!p.isAbsolute(executablePath)) {
-        return false;
-    }
-    const baseName = p.basename(normalized);
-    const expectedName = platform === "win32" ? "agy.exe" : "agy";
-    if (platform === "win32") {
-        if (baseName.toLowerCase() !== expectedName.toLowerCase()) {
-            return false;
-        }
-    }
-    else {
-        if (baseName !== expectedName) {
-            return false;
-        }
-    }
-    const normPath = platform === "win32" ? normalized.toLowerCase() : normalized;
-    return roots.some((root) => {
-        const normRoot = platform === "win32" ? p.normalize(root).toLowerCase() : p.normalize(root);
-        const relative = p.relative(normRoot, normPath);
-        return relative.length > 0 &&
-            !relative.startsWith(".." + p.sep) &&
-            relative !== ".." &&
-            !p.isAbsolute(relative);
-    });
-}
-/**
- * Enumerate listening loopback ports belonging to running agy processes.
- */
-export async function enumerateAgyListeningPorts(options) {
-    const platform = options?.platform ?? process.platform;
-    const runner = options?.runCommand ?? execFilePromise;
-    if (platform === "win32") {
-        const roots = getAgyInstallRoots("win32", options?.env ?? process.env);
-        const trustedPids = new Set();
-        const cimScript = "$ErrorActionPreference='SilentlyContinue';" +
-            "$me=[System.Security.Principal.WindowsIdentity]::GetCurrent().Name;" +
-            "Get-CimInstance Win32_Process -Filter \"Name='agy.exe'\" | ForEach-Object {" +
-            "$owner=(Invoke-CimMethod -InputObject $_ -MethodName GetOwner);" +
-            "if ($owner -and $owner.User -and (\"$($owner.Domain)\\$($owner.User)\" -eq $me)) {" +
-            "\"$($_.ProcessId)|$($_.ExecutablePath)\" } }";
-        const cimRes = await runner(windowsSystemTool("WindowsPowerShell", "v1.0", "powershell.exe", options?.env ?? process.env), ["-NoProfile", "-NonInteractive", "-Command", cimScript], AGY_PROBE_TIMEOUT_MILLISECONDS);
-        if (cimRes.ok && cimRes.stdout.trim().length > 0) {
-            for (const line of cimRes.stdout.split(/\r?\n/)) {
-                const parts = line.trim().split("|");
-                if (parts.length >= 2) {
-                    const rawPid = parts[0];
-                    if (rawPid === undefined) {
-                        continue;
-                    }
-                    const pid = rawPid.trim();
-                    const exePath = parts.slice(1).join("|").trim();
-                    if (isTrustedAgyExecutable(exePath, "win32", roots)) {
-                        trustedPids.add(pid);
-                    }
-                }
-            }
-        }
-        else {
-            // A name and executable resolver cannot establish a process owner.
-            // Fail closed if the owner filtered enumeration is unavailable.
-            return [];
-        }
-        if (trustedPids.size === 0)
-            return [];
-        const netstatRes = await runner(windowsSystemTool("netstat.exe", options?.env ?? process.env), ["-ano", "-p", "tcp"], AGY_PROBE_TIMEOUT_MILLISECONDS);
-        if (!netstatRes.ok)
-            return [];
-        return parseNetstatPorts(netstatRes.stdout, trustedPids);
-    }
-    const roots = getAgyInstallRoots(platform, options?.env ?? process.env);
-    const lsofRes = await runner("lsof", ["-nP", "-iTCP", "-sTCP:LISTEN", "-a", "-c", "agy"], AGY_PROBE_TIMEOUT_MILLISECONDS);
-    if (!lsofRes.ok)
-        return [];
-    const pidPorts = parseLsofOutput(lsofRes.stdout);
-    if (pidPorts.length === 0)
-        return [];
-    const verifiedPids = new Map();
-    const ports = [];
-    for (const { pid, port } of pidPorts) {
-        let trusted = verifiedPids.get(pid);
-        if (trusted === undefined) {
-            if (!/^\d+$/u.test(pid))
-                continue;
-            const owner = await runner("ps", ["-o", "uid=", "-p", pid], AGY_PROBE_TIMEOUT_MILLISECONDS);
-            const currentUid = options?.currentUserId ?? process.getuid?.();
-            if (!owner.ok || currentUid === undefined || owner.stdout.trim() !== String(currentUid)) {
-                verifiedPids.set(pid, false);
-                continue;
-            }
-            if (options?.resolveExecutablePath) {
-                const exePath = await options.resolveExecutablePath(pid);
-                const ownerUid = exePath === null
-                    ? null
-                    : await (options.resolveExecutableOwner ?? (async (candidate) => {
-                        try {
-                            return (await stat(candidate)).uid ?? null;
-                        }
-                        catch {
-                            return null;
-                        }
-                    }))(exePath);
-                const mode = exePath === null
-                    ? null
-                    : await (options.resolveExecutableMode ?? (async (candidate) => {
-                        try {
-                            return (await stat(candidate)).mode ?? null;
-                        }
-                        catch {
-                            return null;
-                        }
-                    }))(exePath);
-                trusted = exePath !== null &&
-                    (ownerUid === currentUid || ownerUid === 0) &&
-                    (mode === null || (mode & 0o002) === 0) &&
-                    isTrustedAgyExecutable(exePath, platform, roots);
-            }
-            else {
-                const exePath = await resolveAgyExecutablePath(pid, platform, runner, options?.env ?? process.env);
-                if (exePath !== null) {
-                    const ownerUid = await (options?.resolveExecutableOwner ?? (async (candidate) => {
-                        try {
-                            return (await stat(candidate)).uid ?? null;
-                        }
-                        catch {
-                            return null;
-                        }
-                    }))(exePath);
-                    const mode = await (options?.resolveExecutableMode ?? (async (candidate) => {
-                        try {
-                            return (await stat(candidate)).mode ?? null;
-                        }
-                        catch {
-                            return null;
-                        }
-                    }))(exePath);
-                    trusted = (ownerUid === currentUid || ownerUid === 0) &&
-                        (mode === null || (mode & 0o002) === 0) &&
-                        isTrustedAgyExecutable(exePath, platform, roots);
-                }
-                else {
-                    /* The executable this pid runs could not be read at all, on the
-                       one platform this file resolves it without an injected
-                       resolver. That is a reason to skip the port, not to trust it: a
-                       `lsof` name match is exactly what an impostor process names
-                       itself to get. */
-                    trusted = false;
-                }
-            }
-            verifiedPids.set(pid, trusted);
-        }
-        if (trusted && !ports.includes(port)) {
-            ports.push(port);
-        }
-    }
-    return ports;
-}
-function httpPost(isHttps, port, path, timeoutMs, signal) {
-    return new Promise((resolve) => {
-        if (signal?.aborted) {
-            resolve(null);
-            return;
-        }
-        const transport = isHttps ? https : http;
-        const body = "{}";
-        let settled = false;
-        const onAbort = () => {
-            if (!settled) {
-                settled = true;
-                req.destroy();
-                resolve(null);
-            }
-        };
-        if (signal) {
-            signal.addEventListener("abort", onAbort, { once: true });
-        }
-        const req = transport.request({
-            hostname: "127.0.0.1",
-            port,
-            path,
-            method: "POST",
-            headers: {
-                "Content-Type": "application/json",
-                "Connect-Protocol-Version": "1",
-                "User-Agent": OPENLIMITER_USER_AGENT,
-                "Content-Length": Buffer.byteLength(body)
-            },
-            rejectUnauthorized: false,
-            timeout: timeoutMs
-        }, (res) => {
-            if (res.statusCode !== 200) {
-                res.resume();
-                if (!settled) {
-                    settled = true;
-                    resolve(null);
-                }
-                return;
-            }
-            let totalBytes = 0;
-            let data = "";
-            res.on("data", (chunk) => {
-                totalBytes += typeof chunk === "string" ? Buffer.byteLength(chunk) : chunk.length;
-                if (totalBytes > MAX_AGY_RESPONSE_BYTES) {
-                    req.destroy();
-                    res.destroy();
-                    if (!settled) {
-                        settled = true;
-                        resolve(null);
-                    }
-                    return;
-                }
-                data += chunk;
-            });
-            res.on("end", () => {
-                if (settled)
-                    return;
-                settled = true;
-                try {
-                    resolve(JSON.parse(data));
-                }
-                catch {
-                    resolve(null);
-                }
-            });
-            res.on("error", () => {
-                if (!settled) {
-                    settled = true;
-                    resolve(null);
-                }
-            });
-        });
-        req.on("error", () => {
-            if (!settled) {
-                settled = true;
-                resolve(null);
-            }
-        });
-        req.on("timeout", () => {
-            req.destroy();
-            if (!settled) {
-                settled = true;
-                resolve(null);
-            }
-        });
-        req.write(body);
-        req.end();
-    });
-}
-/**
- * Probe an agy loopback port for quota summary.
- * Attempts HTTPS with self-signed certificate acceptance first, then plain HTTP.
- */
-export async function probeAgyLoopback(port, timeoutMs = AGY_PROBE_TIMEOUT_MILLISECONDS, signal) {
-    const httpsRes = await httpPost(true, port, AGY_QUOTA_PATH, timeoutMs, signal);
-    if (httpsRes !== null)
-        return httpsRes;
-    return await httpPost(false, port, AGY_QUOTA_PATH, timeoutMs, signal);
-}
-/**
- * Run the Antigravity probe:
- * 1. Discover listening ports for running agy processes.
- * 2. If no processes found, report "not_running".
- * 3. Probe loopback ports and parse quota summary.
- * Enforces a hard total deadline across all ports probed.
- */
-export async function probeAntigravity(options) {
-    const now = options?.now ?? new Date().toISOString();
-    const totalTimeoutMs = options?.totalDeadlineMs ?? TOTAL_AGY_PROBE_DEADLINE_MS;
-    const abortController = new AbortController();
-    const timeoutId = setTimeout(() => {
-        abortController.abort();
-    }, totalTimeoutMs);
-    try {
-        const enumeratePorts = options?.enumeratePorts ??
-            (() => enumerateAgyListeningPorts({
-                ...(options?.lookup?.platform !== undefined ? { platform: options.lookup.platform } : {}),
-                ...(options?.runCommand !== undefined ? { runCommand: options.runCommand } : {}),
-                ...(options?.resolveExecutablePath !== undefined
-                    ? { resolveExecutablePath: options.resolveExecutablePath }
-                    : {})
-            }));
-        const probePort = options?.probePort ??
-            ((port) => probeAgyLoopback(port, AGY_PROBE_TIMEOUT_MILLISECONDS, abortController.signal));
-        if (abortController.signal.aborted) {
-            return { ok: false, reason: "unreachable" };
-        }
-        const ports = await enumeratePorts();
-        if (abortController.signal.aborted) {
-            return { ok: false, reason: "unreachable" };
-        }
-        if (ports.length === 0) {
-            return { ok: false, reason: "not_running" };
-        }
-        for (const port of ports) {
-            if (abortController.signal.aborted) {
-                return { ok: false, reason: "unreachable" };
-            }
-            const probePromise = probePort(port);
-            const payload = await Promise.race([
-                probePromise,
-                new Promise((resolve) => {
-                    if (abortController.signal.aborted) {
-                        resolve(null);
-                    }
-                    else {
-                        abortController.signal.addEventListener("abort", () => resolve(null), { once: true });
-                    }
-                })
-            ]);
-            if (abortController.signal.aborted) {
-                return { ok: false, reason: "unreachable" };
-            }
-            if (payload !== null) {
-                const meters = parseAgyQuotaSummary(payload, now);
-                if (meters !== null && meters.length > 0) {
-                    return { ok: true, meters };
-                }
-            }
-        }
-        return { ok: false, reason: "unreachable" };
-    }
-    finally {
-        clearTimeout(timeoutId);
-    }
-}
-//# sourceMappingURL=antigravity-probe.js.map