@stage-labs/metro 0.1.0-beta.28 → 0.1.0-beta.280

package/runtime/node_modules/@metro-labs/daemon/src/gateway/gemini.ts

@@ -0,0 +1,208 @@
+import type { IncomingMessage, ServerResponse } from 'node:http';
+import { isRecord } from '@metro-labs/core/is-record';
+import { errMsg, log } from '@metro-labs/core/log';
+import { refreshTokens, tokensStale, type GeminiTokens } from './gemini-auth.js';
+import { API, clientHeaders, generateBases, machineSessionId, type Bases } from './gemini-client.js';
+import { GeminiStreamTranslator } from './gemini-stream.js';
+import { toGeminiRequest } from './gemini-translate.js';
+import { ToolNames } from './codex-translate.js';
+import { GatewayError, providerStatus, sendError, upstreamMessage, type Watch } from './forward.js';
+import type { Connection } from './model-config.js';
+import { answerWhole, currentOf, errorKind, reach, refreshed, relayTranslated, sessionHeader, type TokenSource, type TokenState } from './subscription.js';
+import { effortToApply, withoutEffort } from './effort.js';
+
+export interface GeminiDeps {
+  base?: Bases;
+  tokenBase?: string;
+  fetchImpl?: typeof fetch;
+  save: (id: string, tokens: GeminiTokens) => void;
+}
+
+export type GeminiState = TokenState<GeminiTokens>;
+
+export const sharedGeminiState: GeminiState = new Map();
+
+const sourceOf = (deps: GeminiDeps): TokenSource<GeminiTokens> => ({
+  label: 'Google',
+  stale: (tokens) => tokensStale(tokens),
+  refresh: (tokens) => refreshTokens(tokens, deps.tokenBase, deps.fetchImpl),
+  save: deps.save,
+});
+
+export const currentGeminiTokens = (conn: Connection, deps: GeminiDeps, state: GeminiState): Promise<GeminiTokens> =>
+  currentOf(state, conn.id, conn.gemini, sourceOf(deps), 'Gemini is not connected: sign in with Google on the Model page.');
+
+interface Call {
+  body: Record<string, unknown>;
+  model: string;
+  promptId: string;
+  watch: Watch;
+  deps: GeminiDeps;
+  names: ToolNames;
+  conn: Connection;
+}
+
+const headersFor = (token: string, stream: boolean): Record<string, string> => ({
+  authorization: `Bearer ${token}`,
+  'content-type': 'application/json',
+  ...clientHeaders(),
+  'x-machine-session-id': machineSessionId(),
+  ...(stream ? { accept: 'text/event-stream' } : {}),
+});
+
+async function sendTo(base: string, call: Call, tokens: GeminiTokens, stream: boolean): Promise<Response> {
+  const request = toGeminiRequest(call.body, call.model, tokens.project, call.promptId, call.names);
+  const method = stream ? 'streamGenerateContent?alt=sse' : 'generateContent';
+  return (call.deps.fetchImpl ?? fetch)(`${base}/${API}:${method}`, {
+    method: 'POST',
+    headers: headersFor(tokens.accessToken, stream),
+    body: JSON.stringify(request),
+    signal: call.watch.signal,
+    redirect: 'manual',
+  });
+}
+
+async function send(call: Call, tokens: GeminiTokens, stream: boolean): Promise<Response> {
+  const bases = generateBases(call.deps.base);
+  let last: Response | null = null;
+  for (const base of bases) {
+    if (last !== null) await last.body?.cancel();
+    try {
+      last = await sendTo(base, call, tokens, stream);
+    } catch (err) {
+      if (base === bases.at(-1) || call.watch.signal.aborted) throw err;
+      continue;
+    }
+    if (last.status < 500 && last.status !== 429) return last;
+  }
+  if (last === null) throw new GatewayError(502, 'api_error', 'no Code Assist endpoint to call');
+  return last;
+}
+
+const REFUSAL_LOG_MAX = 2000;
+
+const detailText = (detail: Record<string, unknown>): string[] => {
+  const out: string[] = [];
+  if (typeof detail.reason === 'string') out.push(detail.reason);
+  if (isRecord(detail.metadata)) out.push(...Object.entries(detail.metadata).map(([k, v]) => `${k}=${String(v)}`));
+  if (typeof detail.retryDelay === 'string') out.push(`retry after ${detail.retryDelay}`);
+  if (Array.isArray(detail.violations))
+    out.push(...detail.violations.filter(isRecord).map((v) => [v.subject, v.description].filter((x) => typeof x === 'string').join(': ')));
+  return out.filter((x) => x !== '');
+};
+
+function refusalMessage(text: string, status: number): string {
+  const message = upstreamMessage(text, `Gemini answered ${String(status)}`);
+  let details: unknown = null;
+  try {
+    const parsed: unknown = JSON.parse(text);
+    details = isRecord(parsed) && isRecord(parsed.error) ? parsed.error.details : null;
+  } catch {
+    return message;
+  }
+  const notes = Array.isArray(details) ? details.filter(isRecord).flatMap(detailText) : [];
+  return notes.length === 0 ? message : `${message} (${notes.join('; ')})`;
+}
+
+const reachWith = (call: Call, state: GeminiState, stream: boolean): Promise<Response> =>
+  reach(
+    () => currentGeminiTokens(call.conn, call.deps, state),
+    (tokens) => refreshed(state, call.conn.id, tokens, sourceOf(call.deps)),
+    (tokens) => send(call, tokens, stream),
+  );
+
+export interface GeminiModel {
+  id: string;
+  name: string;
+  remaining: number | null;
+  resetAt: string | null;
+}
+
+const modelOf = (id: string, raw: unknown): GeminiModel => {
+  const entry = isRecord(raw) ? raw : {};
+  const quota = isRecord(entry.quotaInfo) ? entry.quotaInfo : null;
+  const fraction = quota !== null && typeof quota.remainingFraction === 'number' ? quota.remainingFraction : null;
+  const resetAt = quota !== null && typeof quota.resetTime === 'string' ? quota.resetTime : null;
+  return { id, name: typeof entry.displayName === 'string' ? entry.displayName : id, remaining: fraction ?? (resetAt === null ? null : 0), resetAt };
+};
+
+export async function listGeminiModels(tokens: GeminiTokens, deps: GeminiDeps): Promise<GeminiModel[]> {
+  let last = 'no Code Assist endpoint to call';
+  for (const base of generateBases(deps.base)) {
+    try {
+      const res = await (deps.fetchImpl ?? fetch)(`${base}/${API}:fetchAvailableModels`, {
+        method: 'POST',
+        headers: headersFor(tokens.accessToken, false),
+        body: JSON.stringify({ project: tokens.project }),
+        signal: AbortSignal.timeout(30_000),
+      });
+      const body: unknown = await res.json().catch(() => null);
+      if (!res.ok) {
+        last = upstreamMessage(JSON.stringify(body), `Google answered ${String(res.status)}`);
+        continue;
+      }
+      const models = isRecord(body) && isRecord(body.models) ? body.models : {};
+      return Object.entries(models)
+        .filter(([id]) => id.startsWith('gemini'))
+        .map(([id, raw]) => modelOf(id, raw));
+    } catch (err) {
+      last = errMsg(err);
+    }
+  }
+  throw new GatewayError(502, 'api_error', `could not list the Gemini models: ${last}`);
+}
+
+const parseData = (raw: string): Record<string, unknown> | null => {
+  try {
+    const parsed: unknown = JSON.parse(raw);
+    return isRecord(parsed) ? parsed : null;
+  } catch {
+    return null;
+  }
+};
+
+const NAMES_THINKING = /thinking|thought/i;
+
+function refuse(res: ServerResponse, model: string, status: number, text: string): void {
+  log.warn({ provider: 'gemini', model, status, body: text.slice(0, REFUSAL_LOG_MAX) }, 'gateway: the provider refused the request');
+  sendError(res, providerStatus(status), errorKind(status), refusalMessage(text, status));
+}
+
+export async function geminiMessages(
+  req: IncomingMessage,
+  res: ServerResponse,
+  body: Record<string, unknown>,
+  model: string,
+  conn: Connection,
+  deps: GeminiDeps,
+  state: GeminiState,
+  watch: Watch,
+): Promise<void> {
+  const stream = body.stream === true;
+  let call: Call = { body, model, promptId: sessionHeader(req) || 'metro', watch, deps, names: new ToolNames(), conn };
+  let upstream = await reachWith(call, state, stream);
+  if (upstream.status === 400 && effortToApply(body) !== null) {
+    const text = await upstream.text();
+    if (!NAMES_THINKING.test(text)) {
+      refuse(res, model, 400, text);
+      return;
+    }
+    log.warn({ provider: 'gemini', model }, 'gateway: Gemini refused the thinking level, so metro asked again without it');
+    call = { ...call, body: withoutEffort(body) };
+    upstream = await reachWith(call, state, stream);
+  }
+  if (!upstream.ok) {
+    refuse(res, model, upstream.status, await upstream.text());
+    return;
+  }
+  const translator = new GeminiStreamTranslator(model, (name) => call.names.restore(name));
+  if (stream) {
+    await relayTranslated(upstream, res, watch, conn.id, translator, (raw) => {
+      const data = parseData(raw.data);
+      return data === null ? '' : translator.push(data);
+    });
+    return;
+  }
+  const data = parseData(await upstream.text());
+  answerWhole(res, (data === null ? '' : translator.push(data)) + translator.close(), conn.id);
+}

package/runtime/node_modules/@metro-labs/daemon/src/gateway/model-api.ts

@@ -0,0 +1,259 @@
+import type { IncomingMessage, ServerResponse } from 'node:http';
+import { ApiError } from '@metro-labs/http/api-error';
+import { apiFailure, apiSession, cors, readJsonBody, sendJson } from '@metro-labs/http/api-http';
+import { isRecord } from '@metro-labs/core/is-record';
+import { log } from '@metro-labs/core/log';
+import { openrouterModels, openrouterZdrModels } from './openrouter.js';
+import { anthropicModels, bedrockModels } from './provider-models.js';
+import { routeOf, syncAvailableModelsQuietly } from '../claude/setup.js';
+import { harnessRunner, runnerModel, sdkAllowed } from '../claude/runner.js';
+import { sessionLive, sessionRunning, stopSession } from '../claude/session.js';
+import { forgetOne, forgetReported } from './usage.js';
+import {
+  addConnection,
+  connectionOf,
+  parseModelConfig,
+  readModelConfig,
+  readModelSnapshot,
+  removeConnection,
+  setFallbacks,
+  setRoute,
+  updateConnection,
+  writeModelConfig,
+  type ModelConfig,
+} from './model-config.js';
+import { asApiError, BODY_MAX, claudeLoginDeps, connectionFor, settingsBody, type ModelApiDeps, type Route, type Store } from './model-store.js';
+import { dropUnusedClaudeLogins } from './claude-logins.js';
+import { CODEX_ROUTES, codexDeviceRoute, GEMINI_ROUTES } from './model-signin.js';
+import { refreshUsage } from './usage-refresh.js';
+import { handleOpenRouterSignIn } from './openrouter-signin.js';
+
+const PATH = '/api/model';
+const SNAPSHOT = '/api/model/snapshot';
+const CONNECTIONS = '/api/model/connections';
+const FALLBACKS = '/api/model/fallbacks';
+const CODEX = '/api/model/codex/';
+const GEMINI = '/api/model/gemini/';
+const OPENROUTER = '/api/model/openrouter/';
+const ANTHROPIC = '/api/model/anthropic/';
+const BEDROCK = '/api/model/bedrock/';
+const BUNDLE = '/api/model/bundle';
+const RESTORE = '/api/model/restore';
+const RESTORE_MAX = 64 * 1024;
+const DEVICE_PREFIX = 'device/';
+const DEVICE_ID_RE = /^[A-Za-z0-9_-]{16,64}$/;
+
+export type { ModelApiDeps } from './model-store.js';
+
+function restartRunningSession(): boolean {
+  if (!sessionRunning()) return false;
+  stopSession();
+  return true;
+}
+
+function switchLive(before: ModelConfig, next: ModelConfig, deps: ModelApiDeps): void {
+  const [was, now] = [runnerModel(before), runnerModel(next)];
+  if (was === now) return;
+  if (deps.switchModel?.(now) === true) log.info({ was, now }, 'model-api: the model changed, so the Agent SDK session switches to it live, with no restart');
+  else if (runnerIsLive(deps)) throw new ApiError('The running Agent SDK could not be told about this model change. Nothing was saved. Let its work finish, stop it, then save and start it again.', 409);
+}
+
+function followModel(before: ModelConfig, next: ModelConfig, deps: ModelApiDeps): void {
+  const restart = deps.restartSession ?? restartRunningSession;
+  const agents = deps.setup?.agents;
+  if (harnessRunner(agents) === 'sdk') {
+    if (sdkAllowed(agents, next)) switchLive(before, next, deps);
+    return;
+  }
+  if (routeOf(next) !== routeOf(before) && restart())
+    log.info({ was: routeOf(before), now: routeOf(next) }, 'model-api: the model changed, so the Claude session restarts on it');
+}
+
+function kept(store: Store, next: ModelConfig, deps: ModelApiDeps, note: string, fields: Record<string, unknown>): unknown {
+  const before = store.read();
+  store.write(next);
+  try {
+    followModel(before, next, deps);
+  } catch (err) {
+    store.write(before);
+    throw err;
+  }
+  syncAvailableModelsQuietly(deps.setup ?? {}, next);
+  log.info(fields, note);
+  return settingsBody(next);
+}
+
+async function withBody(req: IncomingMessage, run: (body: Record<string, unknown>) => ModelConfig): Promise<ModelConfig> {
+  const body = await readJsonBody(req, BODY_MAX);
+  if (!isRecord(body)) throw new ApiError('body must be a JSON object', 400);
+  try {
+    return run(body);
+  } catch (err) {
+    return asApiError(err);
+  }
+}
+
+async function chooseRoute(req: IncomingMessage, deps: ModelApiDeps, store: Store): Promise<unknown> {
+  const next = await withBody(req, (body) => setRoute(store.read(), typeof body.route === 'string' ? body.route : ''));
+  return kept(store, next, deps, 'model-api: route changed', { route: next.route });
+}
+
+async function chooseFallbacks(req: IncomingMessage, deps: ModelApiDeps, store: Store): Promise<unknown> {
+  const next = await withBody(req, (body) => setFallbacks(store.read(), body.fallbacks));
+  return kept(store, next, deps, 'model-api: fallback models changed', { fallbacks: (next.fallbacks ?? []).map((f) => `${f.connection}:${f.model}`) });
+}
+
+async function create(req: IncomingMessage, deps: ModelApiDeps, store: Store): Promise<unknown> {
+  const next = await withBody(req, (body) => addConnection(store.read(), body));
+  return kept(store, next, deps, 'model-api: connection added', { connection: next.connections.at(-1)?.id ?? '' });
+}
+
+async function change(req: IncomingMessage, deps: ModelApiDeps, store: Store, id: string): Promise<unknown> {
+  const before = connectionOf(store.read(), id)?.apiKey;
+  const next = await withBody(req, (body) => updateConnection(store.read(), id, body));
+  if (connectionOf(next, id)?.apiKey !== before) forgetReported(id);
+  return kept(store, next, deps, 'model-api: connection changed', { connection: id });
+}
+
+function drop(deps: ModelApiDeps, store: Store, id: string): unknown {
+  const before = store.read();
+  let next: ModelConfig;
+  try {
+    next = removeConnection(before, id);
+  } catch (err) {
+    asApiError(err);
+  }
+  forgetOne(id);
+  const body = kept(store, next, deps, 'model-api: connection removed', { connection: id });
+  dropUnusedClaudeLogins(before, next, claudeLoginDeps(deps));
+  return body;
+}
+
+async function settingsWithUsage(deps: ModelApiDeps, store: Store): Promise<Record<string, unknown>> {
+  await refreshUsage(deps, store);
+  return settingsBody(store.read());
+}
+
+const OPENROUTER_ROUTES: Record<string, Route> = {
+  models: { method: 'GET', run: async (_req, deps) => ({ models: await openrouterModels(deps.openrouterBase, deps.fetchImpl).catch(asApiError) }) },
+  zdr: { method: 'GET', run: async (_req, deps) => ({ models: await openrouterZdrModels(deps.openrouterBase, deps.fetchImpl).catch(asApiError) }) },
+};
+
+const ANTHROPIC_ROUTES: Record<string, Route> = {
+  models: {
+    method: 'GET',
+    run: async (req, deps, store) => ({ models: await anthropicModels(connectionFor(store.read(), req, 'anthropic'), deps.anthropicBase, deps.fetchImpl).catch(asApiError) }),
+  },
+};
+
+const BEDROCK_ROUTES: Record<string, Route> = {
+  models: {
+    method: 'GET',
+    run: async (req, deps, store) => ({ models: await bedrockModels(connectionFor(store.read(), req, 'bedrock'), deps.bedrockControlBase, deps.fetchImpl).catch(asApiError) }),
+  },
+};
+
+const named = (table: Record<string, Route>, name: string, method: string | undefined): Route | number => {
+  const route = table[name];
+  if (route === undefined) return 404;
+  return route.method === method ? route : 405;
+};
+
+async function restore(req: IncomingMessage, store: Store, deps: ModelApiDeps): Promise<unknown> {
+  const body = await readJsonBody(req, RESTORE_MAX);
+  if (!isRecord(body)) throw new ApiError('body must be a JSON object', 400);
+  const before = store.read();
+  const next = parseModelConfig(body);
+  const answer = kept(store, next, deps, 'model-api: model setup restored from a file', {});
+  dropUnusedClaudeLogins(before, next, claudeLoginDeps(deps));
+  return answer;
+}
+
+function bundleRoute(path: string, method: string | undefined): Route | number {
+  if (path === BUNDLE) return method === 'GET' ? { method: 'GET', run: (_req, _deps, store) => Promise.resolve(store.read()) } : 405;
+  return method === 'POST' ? { method: 'POST', run: (req, deps, store) => restore(req, store, deps) } : 405;
+}
+
+function settingsRoute(path: string, method: string | undefined): Route | number {
+  if (path === FALLBACKS) return method === 'PUT' ? { method: 'POST', run: chooseFallbacks } : 405;
+  if (method === 'GET') return { method: 'GET', run: (_req, deps, store) => settingsWithUsage(deps, store) };
+  if (method === 'PUT') return { method: 'POST', run: chooseRoute };
+  return 405;
+}
+
+function connectionsRoute(path: string, method: string | undefined): Route | number {
+  if (path === CONNECTIONS) return method === 'POST' ? { method: 'POST', run: create } : 405;
+  const id = path.slice(CONNECTIONS.length + 1);
+  if (id === '' || id.includes('/')) return 404;
+  if (method === 'PUT') return { method: 'POST', run: (req, deps, store) => change(req, deps, store, id) };
+  if (method === 'DELETE') return { method: 'GET', run: (_req, deps, store) => Promise.resolve(drop(deps, store, id)) };
+  return 405;
+}
+
+function codexRoute(rest: string, method: string | undefined): Route | number {
+  if (rest in CODEX_ROUTES) return named(CODEX_ROUTES, rest, method);
+  const id = rest.startsWith(DEVICE_PREFIX) ? rest.slice(DEVICE_PREFIX.length) : '';
+  if (!DEVICE_ID_RE.test(id)) return 404;
+  return codexDeviceRoute(id, method);
+}
+
+const TABLES: [string, Record<string, Route>][] = [
+  [OPENROUTER, OPENROUTER_ROUTES],
+  [ANTHROPIC, ANTHROPIC_ROUTES],
+  [BEDROCK, BEDROCK_ROUTES],
+  [GEMINI, GEMINI_ROUTES],
+];
+const EXACT = new Set([PATH, SNAPSHOT, FALLBACKS, BUNDLE, RESTORE, CONNECTIONS]);
+const PREFIXES = [`${CONNECTIONS}/`, CODEX, ...TABLES.map(([prefix]) => prefix)];
+
+const mine = (path: string): boolean => EXACT.has(path) || PREFIXES.some((prefix) => path.startsWith(prefix));
+
+function routeFor(path: string, method: string | undefined): Route | number {
+  if (path === SNAPSHOT) return method === 'GET' ? { method: 'GET', run: (_req, _deps, store) => Promise.resolve().then(() => settingsBody(store.read())).catch(asApiError) } : 405;
+  if (path === PATH || path === FALLBACKS) return settingsRoute(path, method);
+  if (path === BUNDLE || path === RESTORE) return bundleRoute(path, method);
+  if (path === CONNECTIONS || path.startsWith(`${CONNECTIONS}/`)) return connectionsRoute(path, method);
+  const table = TABLES.find(([prefix]) => path.startsWith(prefix));
+  if (table !== undefined) return named(table[1], path.slice(table[0].length), method);
+  return codexRoute(path.slice(CODEX.length), method);
+}
+
+const runnerIsLive = (deps: ModelApiDeps): boolean => (deps.sessionRunning ?? (() => sessionLive({ agents: deps.setup?.agents })))();
+
+function checkRunnerRoute(before: ModelConfig, next: ModelConfig, deps: ModelApiDeps): void {
+  const agents = deps.setup?.agents;
+  if (harnessRunner(agents) !== 'sdk' || !sdkAllowed(agents, before) || sdkAllowed(agents, next)) return;
+  if (runnerIsLive(deps))
+    throw new ApiError('The Agent SDK session is running, and this change would leave a model or fallback it may not use. Let it finish its work, stop it, then save the change.', 409);
+}
+
+export function handleModelRequest(req: IncomingMessage, res: ServerResponse, deps: ModelApiDeps): boolean {
+  const path = (req.url ?? '').split('?')[0] ?? '';
+  if (!mine(path)) return false;
+  if (req.method === 'OPTIONS') {
+    res.writeHead(204, cors(req)).end();
+    return true;
+  }
+  const store: Store = {
+    read: deps.read ?? (path === SNAPSHOT ? readModelSnapshot : readModelConfig),
+    write: (cfg) => {
+      checkRunnerRoute(store.read(), cfg, deps);
+      (deps.write ?? writeModelConfig)(cfg);
+    },
+  };
+  if (handleOpenRouterSignIn(req, res, deps, store)) return true;
+  const route = routeFor(path, req.method);
+  if (typeof route === 'number') {
+    sendJson(req, res, route, { error: route === 404 ? 'not found' : 'method not allowed' });
+    return true;
+  }
+  apiSession(req)
+    .then(async (session) => {
+      if (!session) throw new ApiError('unauthorized', 401);
+      sendJson(req, res, 200, await route.run(req, deps, store));
+    })
+    .catch((err: unknown) => {
+      apiFailure(req, res, err, 'model-api');
+    });
+  return true;
+}