@vibesdotdev/integrations-gemini 0.0.0-stage → 1.0.0-rc.0

package/dist/ai/providers/gemini/antigravity-server/session.js

@@ -0,0 +1,153 @@
+/**
+ * One Antigravity turn over a connection: the user message goes out, the
+ * stream-json events come back as `ndjson-record` chunks the spec decodes.
+ *
+ * The turn is bounded: a deadline the caller declares (`options.timeoutMs`, else
+ * {@link ANTIGRAVITY_TURN_LIMITS}), the caller's abort signal, and a cap on the
+ * output. An event the session cannot place is a typed failure or a reported
+ * diagnostic, never a silent skip. Child text (a failed result's `error`) is only
+ * the bounded `cause` of the failure.
+ */
+import { boundedExcerpt } from '@vibesdotdev/external/jsonrpc';
+import * as z from 'zod/v4';
+import { antigravityFailure, childTextCause } from "./antigravity-failure.js";
+import { sessionRecordChunk } from "./session-records.js";
+/** The declared bounds of one turn. */
+export const ANTIGRAVITY_TURN_LIMITS = {
+    /** The whole turn, when the caller declares no `timeoutMs`. */
+    turnTimeoutMs: 120_000,
+    /** Characters of assistant text and thinking one turn may produce. */
+    maxOutputChars: 8 * 1024 * 1024
+};
+/** The longest unrecognized step type or tool state a diagnostic keeps, in characters. */
+const MAX_DIAGNOSTIC_CHARS = 64;
+const TurnTimeoutSchema = z.int().min(1).max(2_147_483_647);
+export function createAntigravityServerSessionProgram(body) {
+    return (connection, options) => runAntigravityServerSession(connection, body, options);
+}
+async function* runAntigravityServerSession(connection, body, options) {
+    const outputTooLarge = () => antigravityFailure('antigravity-output-too-large', { details: { bound: 'maxOutputChars' } });
+    let streamedText = '';
+    let produced = 0;
+    if (options.signal?.aborted)
+        throw antigravityFailure('generation-cancelled', { details: { stage: 'before-turn' } });
+    const declared = TurnTimeoutSchema.safeParse(options.timeoutMs ?? ANTIGRAVITY_TURN_LIMITS.turnTimeoutMs);
+    if (!declared.success)
+        throw antigravityFailure('unsupported-option', { details: { fields: ['timeoutMs'] } });
+    const timeoutMs = declared.data;
+    // Both stop the child (the connection fails typed), so a session blocked on the next event wakes with the failure.
+    const stopTimer = options.runtime.lifecycle.timeout(() => {
+        connection.abort(antigravityFailure('antigravity-turn-timeout', { details: { deadlineMs: timeoutMs } }));
+    }, timeoutMs);
+    const onAbort = () => connection.abort(antigravityFailure('generation-cancelled', { details: { stage: 'turn' } }));
+    options.signal?.addEventListener('abort', onAbort, { once: true });
+    try {
+        await connection.sendTurn(body.prompt);
+        for await (const event of connection.events()) {
+            if (event.event === 'result') {
+                const answer = resultOf(event, streamedText, body.model);
+                if (answer.lateText !== undefined) {
+                    yield sessionRecordChunk({ type: 'text-delta', delta: answer.lateText });
+                }
+                yield sessionRecordChunk({ type: 'result', result: answer.response });
+                yield { kind: 'end' };
+                return;
+            }
+            const update = event.step_update;
+            if (update.step_type === 'agent_response') {
+                if (update.text_delta) {
+                    produced += update.text_delta.length;
+                    if (produced > ANTIGRAVITY_TURN_LIMITS.maxOutputChars)
+                        throw outputTooLarge();
+                    streamedText += update.text_delta;
+                    yield sessionRecordChunk({ type: 'text-delta', delta: update.text_delta });
+                }
+                if (update.thinking_delta) {
+                    produced += update.thinking_delta.length;
+                    if (produced > ANTIGRAVITY_TURN_LIMITS.maxOutputChars)
+                        throw outputTooLarge();
+                    yield sessionRecordChunk({ type: 'thinking-delta', delta: update.thinking_delta });
+                }
+            }
+            else if (update.step_type === 'tool') {
+                const toolId = toolIdOf(update);
+                if (update.state === 'ACTIVE') {
+                    const name = update.tool_name ?? update.tool_info?.name ?? 'tool';
+                    yield sessionRecordChunk({ type: 'tool-call-start', id: toolId, name });
+                    if (update.tool_info?.parameters) {
+                        yield sessionRecordChunk({
+                            type: 'tool-call-arg-delta',
+                            id: toolId,
+                            delta: JSON.stringify(update.tool_info.parameters)
+                        });
+                    }
+                }
+                else if (update.state === 'DONE') {
+                    yield sessionRecordChunk({ type: 'tool-call-end', id: toolId });
+                }
+                else {
+                    connection.diagnose({ kind: 'unknown-tool-state', state: diagnosticText(update.state) });
+                }
+            }
+            else if (update.step_type !== 'user_input') {
+                // `user_input` is the child echoing the turn this session sent; any other step is reported.
+                connection.diagnose({ kind: 'unknown-step', stepType: diagnosticText(update.step_type) });
+            }
+        }
+        // The events ended without a result: the connection's own failure says why, else nothing came.
+        throw connection.failure ?? antigravityFailure('antigravity-no-result');
+    }
+    finally {
+        stopTimer();
+        options.signal?.removeEventListener('abort', onAbort);
+    }
+}
+/** Reads a result event into the final answer; a failed or empty turn is a typed failure. */
+function resultOf(event, streamedText, model) {
+    const result = event.result;
+    if (result.status === 'ERROR') {
+        // The child's words are the bounded cause, never the message.
+        const text = result.error || result.message;
+        throw antigravityFailure('antigravity-turn-failed', text ? { cause: childTextCause(text) } : {});
+    }
+    if (result.status !== 'SUCCESS') {
+        throw antigravityFailure('antigravity-protocol-invalid', {
+            details: { stage: 'result-status' },
+            cause: childTextCause(result.status)
+        });
+    }
+    const text = result.response ? result.response : streamedText;
+    if (text.length > ANTIGRAVITY_TURN_LIMITS.maxOutputChars) {
+        throw antigravityFailure('antigravity-output-too-large', { details: { bound: 'maxOutputChars' } });
+    }
+    if (text.trim() === '')
+        throw antigravityFailure('antigravity-empty-response');
+    return {
+        response: {
+            id: `antigravity.${model ?? 'default'}.${Date.now()}`,
+            timestamp: new Date(),
+            content: text,
+            metadata: {
+                modelVersion: model,
+                finishReason: 'stop',
+                tokensPrompt: result.usage?.input_tokens,
+                tokensCompletion: result.usage?.output_tokens,
+                tokensUsed: result.usage?.total_tokens,
+                conversationId: result.conversation_id
+            }
+        },
+        // A child that answered only in the result (no streamed deltas) still streams its answer once.
+        lateText: result.response && streamedText.length === 0 ? result.response : undefined
+    };
+}
+/** The tool id of a step: the child's own step index. A step without one cannot be told apart from another, so it is refused. */
+function toolIdOf(update) {
+    if (update.step_index === undefined) {
+        throw antigravityFailure('antigravity-protocol-invalid', { details: { stage: 'tool-step-index' } });
+    }
+    return String(update.step_index);
+}
+function diagnosticText(value) {
+    return value === undefined ? '(missing)' : boundedExcerpt(value).slice(0, MAX_DIAGNOSTIC_CHARS);
+}
+//# sourceMappingURL=session.js.map

package/dist/ai/providers/gemini/antigravity-server/session.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"session.js","sourceRoot":"","sources":["../../../../../src/ai/providers/gemini/antigravity-server/session.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAKH,OAAO,EAAE,cAAc,EAAE,MAAM,+BAA+B,CAAC;AAC/D,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAC5B,OAAO,EAAE,kBAAkB,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAG9E,OAAO,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAE1D,uCAAuC;AACvC,MAAM,CAAC,MAAM,uBAAuB,GAAG;IACtC,+DAA+D;IAC/D,aAAa,EAAE,OAAO;IACtB,sEAAsE;IACtE,cAAc,EAAE,CAAC,GAAG,IAAI,GAAG,IAAI;CACtB,CAAC;AAEX,0FAA0F;AAC1F,MAAM,oBAAoB,GAAG,EAAE,CAAC;AAEhC,MAAM,iBAAiB,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;AAgB5D,MAAM,UAAU,qCAAqC,CACpD,IAA+B;IAE/B,OAAO,CAAC,UAAU,EAAE,OAAO,EAAE,EAAE,CAAC,2BAA2B,CAAC,UAAU,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;AACxF,CAAC;AAED,KAAK,SAAS,CAAC,CAAC,2BAA2B,CAC1C,UAAiC,EACjC,IAA+B,EAC/B,OAA6B;IAE7B,MAAM,cAAc,GAAG,GAAG,EAAE,CAC3B,kBAAkB,CAAC,8BAA8B,EAAE,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,gBAAgB,EAAE,EAAE,CAAC,CAAC;IAC9F,IAAI,YAAY,GAAG,EAAE,CAAC;IACtB,IAAI,QAAQ,GAAG,CAAC,CAAC;IAEjB,IAAI,OAAO,CAAC,MAAM,EAAE,OAAO;QAAE,MAAM,kBAAkB,CAAC,sBAAsB,EAAE,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,aAAa,EAAE,EAAE,CAAC,CAAC;IACrH,MAAM,QAAQ,GAAG,iBAAiB,CAAC,SAAS,CAAC,OAAO,CAAC,SAAS,IAAI,uBAAuB,CAAC,aAAa,CAAC,CAAC;IACzG,IAAI,CAAC,QAAQ,CAAC,OAAO;QAAE,MAAM,kBAAkB,CAAC,oBAAoB,EAAE,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,CAAC,WAAW,CAAC,EAAE,EAAE,CAAC,CAAC;IAC9G,MAAM,SAAS,GAAG,QAAQ,CAAC,IAAI,CAAC;IAEhC,mHAAmH;IACnH,MAAM,SAAS,GAAG,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,OAAO,CAAC,GAAG,EAAE;QACxD,UAAU,CAAC,KAAK,CAAC,kBAAkB,CAAC,0BAA0B,EAAE,EAAE,OAAO,EAAE,EAAE,UAAU,EAAE,SAAS,EAAE,EAAE,CAAC,CAAC,CAAC;IAC1G,CAAC,EAAE,SAAS,CAAC,CAAC;IACd,MAAM,OAAO,GAAG,GAAS,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC,kBAAkB,CAAC,sBAAsB,EAAE,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC;IACzH,OAAO,CAAC,MAAM,EAAE,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IAEnE,IAAI,CAAC;QACJ,MAAM,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACvC,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,UAAU,CAAC,MAAM,EAAE,EAAE,CAAC;YAC/C,IAAI,KAAK,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;gBAC9B,MAAM,MAAM,GAAG,QAAQ,CAAC,KAAK,EAAE,YAAY,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;gBACzD,IAAI,MAAM,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;oBACnC,MAAM,kBAAkB,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC;gBAC1E,CAAC;gBACD,MAAM,kBAAkB,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC;gBACtE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;gBACtB,OAAO;YACR,CAAC;YACD,MAAM,MAAM,GAAG,KAAK,CAAC,WAAW,CAAC;YACjC,IAAI,MAAM,CAAC,SAAS,KAAK,gBAAgB,EAAE,CAAC;gBAC3C,IAAI,MAAM,CAAC,UAAU,EAAE,CAAC;oBACvB,QAAQ,IAAI,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC;oBACrC,IAAI,QAAQ,GAAG,uBAAuB,CAAC,cAAc;wBAAE,MAAM,cAAc,EAAE,CAAC;oBAC9E,YAAY,IAAI,MAAM,CAAC,UAAU,CAAC;oBAClC,MAAM,kBAAkB,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC;gBAC5E,CAAC;gBACD,IAAI,MAAM,CAAC,cAAc,EAAE,CAAC;oBAC3B,QAAQ,IAAI,MAAM,CAAC,cAAc,CAAC,MAAM,CAAC;oBACzC,IAAI,QAAQ,GAAG,uBAAuB,CAAC,cAAc;wBAAE,MAAM,cAAc,EAAE,CAAC;oBAC9E,MAAM,kBAAkB,CAAC,EAAE,IAAI,EAAE,gBAAgB,EAAE,KAAK,EAAE,MAAM,CAAC,cAAc,EAAE,CAAC,CAAC;gBACpF,CAAC;YACF,CAAC;iBAAM,IAAI,MAAM,CAAC,SAAS,KAAK,MAAM,EAAE,CAAC;gBACxC,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC;gBAChC,IAAI,MAAM,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;oBAC/B,MAAM,IAAI,GAAG,MAAM,CAAC,SAAS,IAAI,MAAM,CAAC,SAAS,EAAE,IAAI,IAAI,MAAM,CAAC;oBAClE,MAAM,kBAAkB,CAAC,EAAE,IAAI,EAAE,iBAAiB,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;oBACxE,IAAI,MAAM,CAAC,SAAS,EAAE,UAAU,EAAE,CAAC;wBAClC,MAAM,kBAAkB,CAAC;4BACxB,IAAI,EAAE,qBAAqB;4BAC3B,EAAE,EAAE,MAAM;4BACV,KAAK,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,SAAS,CAAC,UAAU,CAAC;yBAClD,CAAC,CAAC;oBACJ,CAAC;gBACF,CAAC;qBAAM,IAAI,MAAM,CAAC,KAAK,KAAK,MAAM,EAAE,CAAC;oBACpC,MAAM,kBAAkB,CAAC,EAAE,IAAI,EAAE,eAAe,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;gBACjE,CAAC;qBAAM,CAAC;oBACP,UAAU,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,oBAAoB,EAAE,KAAK,EAAE,cAAc,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;gBAC1F,CAAC;YACF,CAAC;iBAAM,IAAI,MAAM,CAAC,SAAS,KAAK,YAAY,EAAE,CAAC;gBAC9C,4FAA4F;gBAC5F,UAAU,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,QAAQ,EAAE,cAAc,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;YAC3F,CAAC;QACF,CAAC;QACD,+FAA+F;QAC/F,MAAM,UAAU,CAAC,OAAO,IAAI,kBAAkB,CAAC,uBAAuB,CAAC,CAAC;IACzE,CAAC;YAAS,CAAC;QACV,SAAS,EAAE,CAAC;QACZ,OAAO,CAAC,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IACvD,CAAC;AACF,CAAC;AAQD,6FAA6F;AAC7F,SAAS,QAAQ,CAAC,KAA6B,EAAE,YAAoB,EAAE,KAAyB;IAC/F,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC;IAC5B,IAAI,MAAM,CAAC,MAAM,KAAK,OAAO,EAAE,CAAC;QAC/B,8DAA8D;QAC9D,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,IAAI,MAAM,CAAC,OAAO,CAAC;QAC5C,MAAM,kBAAkB,CAAC,yBAAyB,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,cAAc,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IAClG,CAAC;IACD,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QACjC,MAAM,kBAAkB,CAAC,8BAA8B,EAAE;YACxD,OAAO,EAAE,EAAE,KAAK,EAAE,eAAe,EAAE;YACnC,KAAK,EAAE,cAAc,CAAC,MAAM,CAAC,MAAM,CAAC;SACpC,CAAC,CAAC;IACJ,CAAC;IACD,MAAM,IAAI,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,YAAY,CAAC;IAC9D,IAAI,IAAI,CAAC,MAAM,GAAG,uBAAuB,CAAC,cAAc,EAAE,CAAC;QAC1D,MAAM,kBAAkB,CAAC,8BAA8B,EAAE,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,gBAAgB,EAAE,EAAE,CAAC,CAAC;IACpG,CAAC;IACD,IAAI,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE;QAAE,MAAM,kBAAkB,CAAC,4BAA4B,CAAC,CAAC;IAC/E,OAAO;QACN,QAAQ,EAAE;YACT,EAAE,EAAE,eAAe,KAAK,IAAI,SAAS,IAAI,IAAI,CAAC,GAAG,EAAE,EAAE;YACrD,SAAS,EAAE,IAAI,IAAI,EAAE;YACrB,OAAO,EAAE,IAAI;YACb,QAAQ,EAAE;gBACT,YAAY,EAAE,KAAK;gBACnB,YAAY,EAAE,MAAM;gBACpB,YAAY,EAAE,MAAM,CAAC,KAAK,EAAE,YAAY;gBACxC,gBAAgB,EAAE,MAAM,CAAC,KAAK,EAAE,aAAa;gBAC7C,UAAU,EAAE,MAAM,CAAC,KAAK,EAAE,YAAY;gBACtC,cAAc,EAAE,MAAM,CAAC,eAAe;aACtC;SACD;QACD,+FAA+F;QAC/F,QAAQ,EAAE,MAAM,CAAC,QAAQ,IAAI,YAAY,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS;KACpF,CAAC;AACH,CAAC;AAED,iIAAiI;AACjI,SAAS,QAAQ,CAAC,MAA6B;IAC9C,IAAI,MAAM,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;QACrC,MAAM,kBAAkB,CAAC,8BAA8B,EAAE,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,iBAAiB,EAAE,EAAE,CAAC,CAAC;IACrG,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;AAClC,CAAC;AAED,SAAS,cAAc,CAAC,KAAyB;IAChD,OAAO,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,oBAAoB,CAAC,CAAC;AACjG,CAAC"}

package/dist/ai/providers/gemini/cli-probes.d.ts

@@ -0,0 +1,75 @@
+/**
+ * Consumer-host probes for the two Google subscription CLIs. Raw CLI
+ * diagnostics never leave this module except as classified failures;
+ * no credential files are read.
+ */
+import { composeChildEnv } from '@vibesdotdev/kernel';
+import { type GeminiCliFailure } from './gemini-cli-status.ts';
+/** Minimal `runtime/execution` surface the probes rely on. */
+export interface CliExecution {
+    resolveCommand(command: string): Promise<string | null>;
+    execute(options: {
+        command: string;
+        args?: string[];
+        cwd?: string;
+        env?: Record<string, string>;
+        envMode?: 'inherit' | 'replace';
+        timeout?: number;
+    }): Promise<{
+        exitCode: number | null;
+        stdout: string;
+        stderr: string;
+        timedOut: boolean;
+    }>;
+}
+/** The runtime a probe child's environment is composed from (`composeChildEnv`). */
+export type CliProbeRuntime = Parameters<typeof composeChildEnv>[0];
+/**
+ * Every probe runs with `envMode: 'replace'` and the kernel's composed
+ * environment (rc02-rc03 C22): the host base set (each CLI's sign-in lives
+ * under HOME) plus the names declared here. A probe checks the subscription
+ * sign-in, so `GEMINI_API_KEY` is not among its names: an inherited one
+ * would make the Gemini CLI authenticate by key and report a healthy
+ * subscription that is not there. The Gemini CLI's Code Assist tier check reads the selected Cloud
+ * project; both CLIs honour the proxy and CA settings.
+ */
+export declare const GEMINI_CLI_INHERIT_ENV: readonly ["GOOGLE_CLOUD_PROJECT", "HTTPS_PROXY", "HTTP_PROXY", "NO_PROXY", "SSL_CERT_FILE"];
+/**
+ * Measured 2026-09-06: Gemini CLI 0.58.0 needs ~4.9s to reach its auth
+ * decision and `agy models` ~3.4s, so the 5s default health timeout would
+ * report every probe as a timeout. Callers may ask for longer, never shorter.
+ */
+export declare const CLI_PROBE_TIMEOUT_MS = 15000;
+export declare function probeTimeout(requested?: number): number;
+export type GeminiCliProbe = {
+    kind: 'unavailable';
+} | {
+    kind: 'timeout';
+} | {
+    kind: 'healthy';
+} | {
+    kind: 'failure';
+    failure: GeminiCliFailure;
+};
+/**
+ * Headless Gemini CLI probe. The CLI performs its Code Assist tier check
+ * before the prompt runs, so an ineligible client fails here without
+ * generating; an eligible one answers a one-token prompt.
+ */
+export declare function probeGeminiCli(runtime: CliProbeRuntime, execution: CliExecution | null, timeout: number): Promise<GeminiCliProbe>;
+export type AntigravityCliProbe = {
+    kind: 'unavailable';
+} | {
+    kind: 'timeout';
+} | {
+    kind: 'healthy';
+    models: string[];
+} | {
+    kind: 'failure';
+    message: string;
+};
+/** Parse `agy models` output (`<id>\t<label>` per line) into wire model ids. */
+export declare function parseAntigravityModels(stdout: string): string[];
+/** `agy models` needs a signed-in account and lists the subscription's models without generating. */
+export declare function probeAntigravityCli(runtime: CliProbeRuntime, execution: CliExecution | null, timeout: number): Promise<AntigravityCliProbe>;
+//# sourceMappingURL=cli-probes.d.ts.map

package/dist/ai/providers/gemini/cli-probes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli-probes.d.ts","sourceRoot":"","sources":["../../../../src/ai/providers/gemini/cli-probes.ts"],"names":[],"mappings":"AAGA;;;;GAIG;AACH,OAAO,EAAE,eAAe,EAAU,MAAM,qBAAqB,CAAC;AAE9D,OAAO,EAKN,KAAK,gBAAgB,EACrB,MAAM,wBAAwB,CAAC;AAEhC,8DAA8D;AAC9D,MAAM,WAAW,YAAY;IAC5B,cAAc,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IACxD,OAAO,CAAC,OAAO,EAAE;QAChB,OAAO,EAAE,MAAM,CAAC;QAChB,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;QAChB,GAAG,CAAC,EAAE,MAAM,CAAC;QACb,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAC7B,OAAO,CAAC,EAAE,SAAS,GAAG,SAAS,CAAC;QAChC,OAAO,CAAC,EAAE,MAAM,CAAC;KACjB,GAAG,OAAO,CAAC;QAAE,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,OAAO,CAAA;KAAE,CAAC,CAAC;CAC5F;AAED,oFAAoF;AACpF,MAAM,MAAM,eAAe,GAAG,UAAU,CAAC,OAAO,eAAe,CAAC,CAAC,CAAC,CAAC,CAAC;AAEpE;;;;;;;;GAQG;AACH,eAAO,MAAM,sBAAsB,6FAMzB,CAAC;AAEX;;;;GAIG;AACH,eAAO,MAAM,oBAAoB,QAAS,CAAC;AAE3C,wBAAgB,YAAY,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,MAAM,CAEvD;AAED,MAAM,MAAM,cAAc,GACvB;IAAE,IAAI,EAAE,aAAa,CAAA;CAAE,GACvB;IAAE,IAAI,EAAE,SAAS,CAAA;CAAE,GACnB;IAAE,IAAI,EAAE,SAAS,CAAA;CAAE,GACnB;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,OAAO,EAAE,gBAAgB,CAAA;CAAE,CAAC;AAElD;;;;GAIG;AACH,wBAAsB,cAAc,CACnC,OAAO,EAAE,eAAe,EACxB,SAAS,EAAE,YAAY,GAAG,IAAI,EAC9B,OAAO,EAAE,MAAM,GACb,OAAO,CAAC,cAAc,CAAC,CAgCzB;AAED,MAAM,MAAM,mBAAmB,GAC5B;IAAE,IAAI,EAAE,aAAa,CAAA;CAAE,GACvB;IAAE,IAAI,EAAE,SAAS,CAAA;CAAE,GACnB;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,MAAM,EAAE,MAAM,EAAE,CAAA;CAAE,GACrC;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC;AAExC,gFAAgF;AAChF,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,CAO/D;AAED,qGAAqG;AACrG,wBAAsB,mBAAmB,CACxC,OAAO,EAAE,eAAe,EACxB,SAAS,EAAE,YAAY,GAAG,IAAI,EAC9B,OAAO,EAAE,MAAM,GACb,OAAO,CAAC,mBAAmB,CAAC,CAwB9B"}

package/dist/ai/providers/gemini/cli-probes.js

@@ -0,0 +1,121 @@
+import { GeminiCliResponseSchema } from "../../../schemas/cli.js";
+import { readCliResponse } from "../../specs/cli-response.js";
+import { geminiFailure } from "../../failure.js";
+/**
+ * Consumer-host probes for the two Google subscription CLIs. Raw CLI
+ * diagnostics never leave this module except as classified failures;
+ * no credential files are read.
+ */
+import { composeChildEnv, settle } from '@vibesdotdev/kernel';
+import { ANTIGRAVITY_INHERIT_ENV } from "./antigravity-server/runtime-execution.js";
+import { ANTIGRAVITY_CLI_BINARY, GEMINI_CLI_BINARY, classifyGeminiCliOutput, geminiCliRemedy } from "./gemini-cli-status.js";
+/**
+ * Every probe runs with `envMode: 'replace'` and the kernel's composed
+ * environment (rc02-rc03 C22): the host base set (each CLI's sign-in lives
+ * under HOME) plus the names declared here. A probe checks the subscription
+ * sign-in, so `GEMINI_API_KEY` is not among its names: an inherited one
+ * would make the Gemini CLI authenticate by key and report a healthy
+ * subscription that is not there. The Gemini CLI's Code Assist tier check reads the selected Cloud
+ * project; both CLIs honour the proxy and CA settings.
+ */
+export const GEMINI_CLI_INHERIT_ENV = [
+    'GOOGLE_CLOUD_PROJECT',
+    'HTTPS_PROXY',
+    'HTTP_PROXY',
+    'NO_PROXY',
+    'SSL_CERT_FILE'
+];
+/**
+ * Measured 2026-09-06: Gemini CLI 0.58.0 needs ~4.9s to reach its auth
+ * decision and `agy models` ~3.4s, so the 5s default health timeout would
+ * report every probe as a timeout. Callers may ask for longer, never shorter.
+ */
+export const CLI_PROBE_TIMEOUT_MS = 15_000;
+export function probeTimeout(requested) {
+    return Math.max(requested ?? 0, CLI_PROBE_TIMEOUT_MS);
+}
+/**
+ * Headless Gemini CLI probe. The CLI performs its Code Assist tier check
+ * before the prompt runs, so an ineligible client fails here without
+ * generating; an eligible one answers a one-token prompt.
+ */
+export async function probeGeminiCli(runtime, execution, timeout) {
+    if (!execution)
+        return { kind: 'unavailable' };
+    const located = await settle(() => execution.resolveCommand(GEMINI_CLI_BINARY));
+    if (!located.ok)
+        throw geminiFailure('gemini-execution-unavailable', located.cause);
+    if (!located.value)
+        return { kind: 'unavailable' };
+    const executed = await settle(() => execution.execute({
+        command: GEMINI_CLI_BINARY,
+        args: ['--output-format', 'json', '--approval-mode', 'plan', '--prompt', 'Reply with OK'],
+        env: composeChildEnv(runtime, {
+            env: { GEMINI_CLI_TRUST_WORKSPACE: 'true' },
+            inheritEnv: GEMINI_CLI_INHERIT_ENV
+        }),
+        envMode: 'replace',
+        timeout
+    }));
+    if (!executed.ok)
+        throw geminiFailure('gemini-execution-unavailable', executed.cause);
+    const result = executed.value;
+    if (result.timedOut)
+        return { kind: 'timeout' };
+    const failure = classifyGeminiCliOutput(`${result.stderr}\n${result.stdout}`);
+    if (failure)
+        return { kind: 'failure', failure };
+    if (result.exitCode === 0) {
+        readCliResponse(result.stdout, GeminiCliResponseSchema);
+        return { kind: 'healthy' };
+    }
+    return {
+        kind: 'failure',
+        failure: {
+            code: 'CLI_ERROR',
+            message: `Gemini CLI exited with code ${String(result.exitCode)}.`,
+            remedy: geminiCliRemedy('CLI_ERROR')
+        }
+    };
+}
+/** Parse `agy models` output (`<id>\t<label>` per line) into wire model ids. */
+export function parseAntigravityModels(stdout) {
+    return stdout
+        .split(/\r?\n/)
+        .map((line) => line.trim())
+        .filter((line) => line.length > 0 && !/^Fetching/i.test(line))
+        .map((line) => line.split(/\t|\s{2,}/)[0]?.trim() ?? '')
+        .filter((id) => /^[A-Za-z0-9][A-Za-z0-9._-]*$/.test(id));
+}
+/** `agy models` needs a signed-in account and lists the subscription's models without generating. */
+export async function probeAntigravityCli(runtime, execution, timeout) {
+    if (!execution)
+        return { kind: 'unavailable' };
+    const located = await settle(() => execution.resolveCommand(ANTIGRAVITY_CLI_BINARY));
+    if (!located.ok)
+        throw geminiFailure('gemini-execution-unavailable', located.cause);
+    if (!located.value)
+        return { kind: 'unavailable' };
+    const executed = await settle(() => execution.execute({
+        command: ANTIGRAVITY_CLI_BINARY,
+        args: ['models'],
+        env: composeChildEnv(runtime, { inheritEnv: ANTIGRAVITY_INHERIT_ENV }),
+        envMode: 'replace',
+        timeout
+    }));
+    if (!executed.ok)
+        throw geminiFailure('gemini-execution-unavailable', executed.cause);
+    const result = executed.value;
+    if (result.timedOut)
+        return { kind: 'timeout' };
+    const models = parseAntigravityModels(result.stdout);
+    if (result.exitCode === 0 && models.length > 0)
+        return { kind: 'healthy', models };
+    return {
+        kind: 'failure',
+        message: result.exitCode === 0
+            ? 'Antigravity CLI listed no models'
+            : `Antigravity CLI exited with code ${String(result.exitCode)}`
+    };
+}
+//# sourceMappingURL=cli-probes.js.map

package/dist/ai/providers/gemini/cli-probes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli-probes.js","sourceRoot":"","sources":["../../../../src/ai/providers/gemini/cli-probes.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,uBAAuB,EAAE,MAAM,yBAAyB,CAAC;AAClE,OAAO,EAAE,eAAe,EAAE,MAAM,6BAA6B,CAAC;AAC9D,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AACjD;;;;GAIG;AACH,OAAO,EAAE,eAAe,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAC;AAC9D,OAAO,EAAE,uBAAuB,EAAE,MAAM,2CAA2C,CAAC;AACpF,OAAO,EACN,sBAAsB,EACtB,iBAAiB,EACjB,uBAAuB,EACvB,eAAe,EAEf,MAAM,wBAAwB,CAAC;AAkBhC;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG;IACrC,sBAAsB;IACtB,aAAa;IACb,YAAY;IACZ,UAAU;IACV,eAAe;CACN,CAAC;AAEX;;;;GAIG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,MAAM,CAAC;AAE3C,MAAM,UAAU,YAAY,CAAC,SAAkB;IAC9C,OAAO,IAAI,CAAC,GAAG,CAAC,SAAS,IAAI,CAAC,EAAE,oBAAoB,CAAC,CAAC;AACvD,CAAC;AAQD;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CACnC,OAAwB,EACxB,SAA8B,EAC9B,OAAe;IAEf,IAAI,CAAC,SAAS;QAAE,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC;IAC/C,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,cAAc,CAAC,iBAAiB,CAAC,CAAC,CAAC;IAChF,IAAI,CAAC,OAAO,CAAC,EAAE;QAAE,MAAM,aAAa,CAAC,8BAA8B,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;IACpF,IAAI,CAAC,OAAO,CAAC,KAAK;QAAE,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC;IACnD,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,OAAO,CAAC;QACrD,OAAO,EAAE,iBAAiB;QAC1B,IAAI,EAAE,CAAC,iBAAiB,EAAE,MAAM,EAAE,iBAAiB,EAAE,MAAM,EAAE,UAAU,EAAE,eAAe,CAAC;QACzF,GAAG,EAAE,eAAe,CAAC,OAAO,EAAE;YAC7B,GAAG,EAAE,EAAE,0BAA0B,EAAE,MAAM,EAAE;YAC3C,UAAU,EAAE,sBAAsB;SAClC,CAAC;QACF,OAAO,EAAE,SAAS;QAClB,OAAO;KACP,CAAC,CAAC,CAAC;IACJ,IAAI,CAAC,QAAQ,CAAC,EAAE;QAAE,MAAM,aAAa,CAAC,8BAA8B,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC;IACtF,MAAM,MAAM,GAAG,QAAQ,CAAC,KAAK,CAAC;IAC9B,IAAI,MAAM,CAAC,QAAQ;QAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;IAChD,MAAM,OAAO,GAAG,uBAAuB,CAAC,GAAG,MAAM,CAAC,MAAM,KAAK,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;IAC9E,IAAI,OAAO;QAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC;IACjD,IAAI,MAAM,CAAC,QAAQ,KAAK,CAAC,EAAE,CAAC;QAC3B,eAAe,CAAC,MAAM,CAAC,MAAM,EAAE,uBAAuB,CAAC,CAAC;QACxD,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;IAC5B,CAAC;IACD,OAAO;QACN,IAAI,EAAE,SAAS;QACf,OAAO,EAAE;YACR,IAAI,EAAE,WAAW;YACjB,OAAO,EAAE,+BAA+B,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG;YAClE,MAAM,EAAE,eAAe,CAAC,WAAW,CAAC;SACpC;KACD,CAAC;AACH,CAAC;AAQD,gFAAgF;AAChF,MAAM,UAAU,sBAAsB,CAAC,MAAc;IACpD,OAAO,MAAM;SACX,KAAK,CAAC,OAAO,CAAC;SACd,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;SAC1B,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;SAC7D,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;SACvD,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,8BAA8B,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;AAC3D,CAAC;AAED,qGAAqG;AACrG,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACxC,OAAwB,EACxB,SAA8B,EAC9B,OAAe;IAEf,IAAI,CAAC,SAAS;QAAE,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC;IAC/C,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,cAAc,CAAC,sBAAsB,CAAC,CAAC,CAAC;IACrF,IAAI,CAAC,OAAO,CAAC,EAAE;QAAE,MAAM,aAAa,CAAC,8BAA8B,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;IACpF,IAAI,CAAC,OAAO,CAAC,KAAK;QAAE,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC;IACnD,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,OAAO,CAAC;QACrD,OAAO,EAAE,sBAAsB;QAC/B,IAAI,EAAE,CAAC,QAAQ,CAAC;QAChB,GAAG,EAAE,eAAe,CAAC,OAAO,EAAE,EAAE,UAAU,EAAE,uBAAuB,EAAE,CAAC;QACtE,OAAO,EAAE,SAAS;QAClB,OAAO;KACP,CAAC,CAAC,CAAC;IACJ,IAAI,CAAC,QAAQ,CAAC,EAAE;QAAE,MAAM,aAAa,CAAC,8BAA8B,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC;IACtF,MAAM,MAAM,GAAG,QAAQ,CAAC,KAAK,CAAC;IAC9B,IAAI,MAAM,CAAC,QAAQ;QAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;IAChD,MAAM,MAAM,GAAG,sBAAsB,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACrD,IAAI,MAAM,CAAC,QAAQ,KAAK,CAAC,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC;IACnF,OAAO;QACN,IAAI,EAAE,SAAS;QACf,OAAO,EACN,MAAM,CAAC,QAAQ,KAAK,CAAC;YACpB,CAAC,CAAC,kCAAkC;YACpC,CAAC,CAAC,oCAAoC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE;KACjE,CAAC;AACH,CAAC"}

package/dist/ai/providers/gemini/detection/index.d.ts

@@ -0,0 +1,2 @@
+export { detectGeminiSystem } from './system.ts';
+//# sourceMappingURL=index.d.ts.map

package/dist/ai/providers/gemini/detection/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/ai/providers/gemini/detection/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC"}

package/dist/ai/providers/gemini/detection/index.js

@@ -0,0 +1,2 @@
+export { detectGeminiSystem } from "./system.js";
+//# sourceMappingURL=index.js.map

package/dist/ai/providers/gemini/detection/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../src/ai/providers/gemini/detection/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC"}

package/dist/ai/providers/gemini/detection/system.d.ts

@@ -0,0 +1,25 @@
+import type { DetectedProvider } from '@vibesdotdev/ai/providers-runtime/client/types';
+import type { RuntimeRef } from '@vibesdotdev/kernel';
+import { type CliExecution, type CliProbeRuntime } from '../cli-probes.ts';
+/** Test seam: detection normally resolves the host execution from the active runtime. */
+export interface GeminiDetectionDependencies {
+    execution?: CliExecution | null;
+    /** The runtime the probes compose their environment from; defaults to the host's. */
+    runtime?: CliProbeRuntime;
+    hardware?: string;
+    timeout?: number;
+}
+/**
+ * Detect Gemini credentials without returning secret material.
+ *
+ * An environment API key reports `available`. Otherwise the consumer host's
+ * Gemini CLI is probed: a client Google has retired from Gemini Code Assist
+ * for individuals reports `stopped` under the name
+ * "Gemini CLI: subscription moved to Antigravity" with the upstream reason
+ * and remedy in its description, so `vibes ai recommend` names the cause
+ * instead of omitting the provider. Subscription CLIs that are healthy are
+ * not reported as system detections: discovery would materialise them as a
+ * system-custodied connection that cannot certify user billing.
+ */
+export declare function detectGeminiSystem(runtime: RuntimeRef, dependencies?: GeminiDetectionDependencies): Promise<DetectedProvider | null>;
+//# sourceMappingURL=system.d.ts.map

package/dist/ai/providers/gemini/detection/system.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"system.d.ts","sourceRoot":"","sources":["../../../../../src/ai/providers/gemini/detection/system.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,gDAAgD,CAAC;AACvF,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AAGtD,OAAO,EAIN,KAAK,YAAY,EACjB,KAAK,eAAe,EACpB,MAAM,kBAAkB,CAAC;AAE1B,yFAAyF;AACzF,MAAM,WAAW,2BAA2B;IAC3C,SAAS,CAAC,EAAE,YAAY,GAAG,IAAI,CAAC;IAChC,qFAAqF;IACrF,OAAO,CAAC,EAAE,eAAe,CAAC;IAC1B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,CAAC;CACjB;AAQD;;;;;;;;;;;GAWG;AACH,wBAAsB,kBAAkB,CACvC,OAAO,EAAE,UAAU,EACnB,YAAY,CAAC,EAAE,2BAA2B,GACxC,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAAC,CAsDlC"}

package/dist/ai/providers/gemini/detection/system.js

@@ -0,0 +1,81 @@
+import { getRuntimeExecution } from '@vibesdotdev/kernel/execution';
+import { GEMINI_CLI_MIGRATION_SUMMARY, describeGeminiCliFailure } from "../gemini-cli-status.js";
+import { probeAntigravityCli, probeGeminiCli, probeTimeout } from "../cli-probes.js";
+async function resolveHostExecution(runtime) {
+    const hardware = runtime.scope.hardware;
+    if (hardware === 'cloud' || !runtime.hasKind('runtime/execution'))
+        return { execution: null, hardware };
+    return { execution: await getRuntimeExecution(runtime), hardware, runtime };
+}
+/**
+ * Detect Gemini credentials without returning secret material.
+ *
+ * An environment API key reports `available`. Otherwise the consumer host's
+ * Gemini CLI is probed: a client Google has retired from Gemini Code Assist
+ * for individuals reports `stopped` under the name
+ * "Gemini CLI: subscription moved to Antigravity" with the upstream reason
+ * and remedy in its description, so `vibes ai recommend` names the cause
+ * instead of omitting the provider. Subscription CLIs that are healthy are
+ * not reported as system detections: discovery would materialise them as a
+ * system-custodied connection that cannot certify user billing.
+ */
+export async function detectGeminiSystem(runtime, dependencies) {
+    let envKey;
+    for (const key of ["GEMINI_API_KEY", "GOOGLE_API_KEY", "GOOGLE_GENERATIVE_AI_API_KEY"]) {
+        const credential = await runtime.resolveCredential({ source: 'secret', key });
+        if (!credential.ok) {
+            if (credential.error.reason === 'credential-not-set')
+                continue;
+            throw credential.error;
+        }
+        if (credential.value.trim()) {
+            envKey = key;
+            break;
+        }
+    }
+    if (envKey)
+        return {
+            providerType: 'gemini', name: 'Google Gemini',
+            description: `Credential reference available from ${envKey}`, status: 'available', models: [],
+            configuration: {
+                authMethod: 'api-key', tokenSource: 'credential',
+                apiKey: { source: 'secret', key: envKey },
+                baseUrl: 'https://generativelanguage.googleapis.com/v1beta/openai', timeout: 60000
+            }
+        };
+    const host = dependencies?.execution === undefined
+        ? await resolveHostExecution(runtime)
+        : {
+            execution: dependencies.execution,
+            hardware: dependencies.hardware,
+            runtime: dependencies.runtime ?? runtime
+        };
+    if ((dependencies?.hardware ?? host.hardware) === 'cloud' || !host.execution || !host.runtime)
+        return null;
+    const timeout = probeTimeout(dependencies?.timeout);
+    const probe = await probeGeminiCli(host.runtime, host.execution, timeout);
+    if (probe.kind !== 'failure')
+        return null;
+    const failure = probe.failure;
+    if (failure.code === 'UNSUPPORTED_CLIENT') {
+        const antigravity = await probeAntigravityCli(host.runtime, host.execution, timeout);
+        const next = antigravity.kind === 'healthy'
+            ? ` Antigravity CLI (agy) is installed and signed in with ${antigravity.models.length} models: set this connection's authMethod to 'antigravity'.`
+            : '';
+        return {
+            providerType: 'gemini',
+            name: GEMINI_CLI_MIGRATION_SUMMARY,
+            description: `${describeGeminiCliFailure(failure)}${next}`,
+            status: 'stopped',
+            models: []
+        };
+    }
+    return {
+        providerType: 'gemini',
+        name: 'Google Gemini CLI',
+        description: describeGeminiCliFailure(failure),
+        status: 'stopped',
+        models: []
+    };
+}
+//# sourceMappingURL=system.js.map

package/dist/ai/providers/gemini/detection/system.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"system.js","sourceRoot":"","sources":["../../../../../src/ai/providers/gemini/detection/system.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,mBAAmB,EAAE,MAAM,+BAA+B,CAAC;AACpE,OAAO,EAAE,4BAA4B,EAAE,wBAAwB,EAAE,MAAM,yBAAyB,CAAC;AACjG,OAAO,EACN,mBAAmB,EACnB,cAAc,EACd,YAAY,EAGZ,MAAM,kBAAkB,CAAC;AAW1B,KAAK,UAAU,oBAAoB,CAAC,OAAmB;IACtD,MAAM,QAAQ,GAAG,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC;IACxC,IAAI,QAAQ,KAAK,OAAO,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,mBAAmB,CAAC;QAAE,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;IACxG,OAAO,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC,OAAO,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC;AAC7E,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACvC,OAAmB,EACnB,YAA0C;IAE1C,IAAI,MAA0B,CAAC;IAC/B,KAAK,MAAM,GAAG,IAAI,CAAC,gBAAgB,EAAC,gBAAgB,EAAC,8BAA8B,CAAC,EAAE,CAAC;QACtF,MAAM,UAAU,GAAG,MAAM,OAAO,CAAC,iBAAiB,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC,CAAC;QAC9E,IAAI,CAAC,UAAU,CAAC,EAAE,EAAE,CAAC;YACpB,IAAI,UAAU,CAAC,KAAK,CAAC,MAAM,KAAK,oBAAoB;gBAAE,SAAS;YAC/D,MAAM,UAAU,CAAC,KAAK,CAAC;QACxB,CAAC;QACD,IAAI,UAAU,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,CAAC;YAAC,MAAM,GAAG,GAAG,CAAC;YAAC,MAAM;QAAC,CAAC;IACtD,CAAC;IACD,IAAI,MAAM;QACT,OAAO;YACN,YAAY,EAAE,QAAQ,EAAE,IAAI,EAAE,eAAe;YAC7C,WAAW,EAAE,uCAAuC,MAAM,EAAE,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,EAAE;YAC7F,aAAa,EAAE;gBACd,UAAU,EAAE,SAAS,EAAE,WAAW,EAAE,YAAY;gBAChD,MAAM,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,EAAE,MAAM,EAAE;gBACzC,OAAO,EAAE,yDAAyD,EAAE,OAAO,EAAE,KAAK;aAClF;SACD,CAAC;IACH,MAAM,IAAI,GACT,YAAY,EAAE,SAAS,KAAK,SAAS;QACpC,CAAC,CAAC,MAAM,oBAAoB,CAAC,OAAO,CAAC;QACrC,CAAC,CAAC;YACA,SAAS,EAAE,YAAY,CAAC,SAAS;YACjC,QAAQ,EAAE,YAAY,CAAC,QAAQ;YAC/B,OAAO,EAAE,YAAY,CAAC,OAAO,IAAI,OAAO;SACxC,CAAC;IACL,IAAI,CAAC,YAAY,EAAE,QAAQ,IAAI,IAAI,CAAC,QAAQ,CAAC,KAAK,OAAO,IAAI,CAAC,IAAI,CAAC,SAAS,IAAI,CAAC,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IAC3G,MAAM,OAAO,GAAG,YAAY,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC;IACpD,MAAM,KAAK,GAAG,MAAM,cAAc,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;IAC1E,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IAC1C,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC;IAC9B,IAAI,OAAO,CAAC,IAAI,KAAK,oBAAoB,EAAE,CAAC;QAC3C,MAAM,WAAW,GAAG,MAAM,mBAAmB,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;QACrF,MAAM,IAAI,GACT,WAAW,CAAC,IAAI,KAAK,SAAS;YAC7B,CAAC,CAAC,0DAA0D,WAAW,CAAC,MAAM,CAAC,MAAM,6DAA6D;YAClJ,CAAC,CAAC,EAAE,CAAC;QACP,OAAO;YACN,YAAY,EAAE,QAAQ;YACtB,IAAI,EAAE,4BAA4B;YAClC,WAAW,EAAE,GAAG,wBAAwB,CAAC,OAAO,CAAC,GAAG,IAAI,EAAE;YAC1D,MAAM,EAAE,SAAS;YACjB,MAAM,EAAE,EAAE;SACV,CAAC;IACH,CAAC;IACD,OAAO;QACN,YAAY,EAAE,QAAQ;QACtB,IAAI,EAAE,mBAAmB;QACzB,WAAW,EAAE,wBAAwB,CAAC,OAAO,CAAC;QAC9C,MAAM,EAAE,SAAS;QACjB,MAAM,EAAE,EAAE;KACV,CAAC;AACH,CAAC"}

package/dist/ai/providers/gemini/docs/ai.providers.gemini.docs.descriptor.d.ts

@@ -0,0 +1,4 @@
+import type { DocsTopicDescriptor } from '@vibesdotdev/docs-contracts';
+declare const descriptor: DocsTopicDescriptor;
+export default descriptor;
+//# sourceMappingURL=ai.providers.gemini.docs.descriptor.d.ts.map

package/dist/ai/providers/gemini/docs/ai.providers.gemini.docs.descriptor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ai.providers.gemini.docs.descriptor.d.ts","sourceRoot":"","sources":["../../../../../src/ai/providers/gemini/docs/ai.providers.gemini.docs.descriptor.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,6BAA6B,CAAC;AAEvE,QAAA,MAAM,UAAU,EAAE,mBAoDjB,CAAC;AAEF,eAAe,UAAU,CAAC"}

package/dist/ai/providers/gemini/docs/ai.providers.gemini.docs.descriptor.js

@@ -0,0 +1,55 @@
+const descriptor = {
+    kind: 'docs/topic', id: 'ai.providers.gemini', title: 'Google Gemini provider',
+    summary: 'Use Gemini through the Antigravity CLI, the legacy Gemini CLI, or runtime-resolved API credentials.',
+    body: {
+        type: 'markdown', sourceType: 'raw',
+        source: `# Google Gemini provider
+
+\`@vibesdotdev/integrations-gemini\` owns Gemini provider identity, configuration,
+detection, recommendation policy, and Gemini-specific protocol specs. Framework
+retains only provider-neutral AI kinds.
+
+The consumer-only CLI variants reuse a local Google sign-in without exposing
+Google account tokens. Cloud runtimes use a \`GEMINI_API_KEY\` credential
+reference. Generation resolves \`ai/generation\`; callers do not construct a
+Google client or import provider internals.
+
+## Runtime composition
+
+Use \`/ai/cloud.plugin\` for API-key hosts and \`/ai/consumer.plugin\` for CLI
+hosts (\`/ai/plugin\` is the consumer alias). The root exposes connection schemas
+and semantic client helpers. \`getVibesGeminiClient(runtime)\` resolves
+\`runtime/client:gemini\`; each consumer runtime owns and closes its own lazy
+Antigravity transport. Malformed or incomplete responses are typed refusals.
+Antigravity skips approval prompts only for a call declaring both
+\`danger-full-access\` and \`never\`; other policies keep child review.
+
+## Auth methods
+
+| authMethod | Binary | Status |
+| --- | --- | --- |
+| \`antigravity\` | \`agy\` (Google Antigravity CLI) | Current subscription path. \`agy --print\` runs headlessly; Gemini model ids take a \`-low\`/\`-medium\`/\`-high\` suffix or the request's reasoning effort. |
+| \`gemini-cli\` | \`gemini\` (@google/gemini-cli) | Legacy. Google retired Gemini Code Assist for individuals from this client; it reports \`UNSUPPORTED_CLIENT\` and points at https://antigravity.google. |
+| \`api-key\` | none | Works on every host and is the fallback when neither CLI is usable. |
+
+## Gemini CLI: subscription moved to Antigravity
+
+When the Gemini CLI answers \`IneligibleTierError\` with
+\`reasonCode: 'UNSUPPORTED_CLIENT'\`, health, detection, and generation all
+report the stable typed refusal \`gemini-cli-retired\` with fixed migration guidance,
+never the upstream response text. The remedy is to install the
+Antigravity CLI (\`agy\`), sign in with \`vibes dev external antigravity login\`, and set the connection's
+\`authMethod\` to \`antigravity\`; or set \`authMethod\` to \`api-key\` with a
+\`GEMINI_API_KEY\` credential reference. Antigravity's desktop app exposes no
+generation surface Vibes can use (its language server listens on loopback
+behind a CSRF token and speaks a private protocol); only the CLI is wired.
+
+Current model recommendations are maintained from Google's model lifecycle docs:
+https://ai.google.dev/gemini-api/docs/models
+`
+    },
+    tags: ['ai', 'providers', 'gemini', 'google', 'antigravity'], parent: 'ai.providers', order: 3,
+    surfaces: ['cli', 'web', 'in-app'], hardware: ['consumer', 'cloud'], enabled: true
+};
+export default descriptor;
+//# sourceMappingURL=ai.providers.gemini.docs.descriptor.js.map

package/dist/ai/providers/gemini/docs/ai.providers.gemini.docs.descriptor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ai.providers.gemini.docs.descriptor.js","sourceRoot":"","sources":["../../../../../src/ai/providers/gemini/docs/ai.providers.gemini.docs.descriptor.ts"],"names":[],"mappings":"AAEA,MAAM,UAAU,GAAwB;IACvC,IAAI,EAAE,YAAY,EAAE,EAAE,EAAE,qBAAqB,EAAE,KAAK,EAAE,wBAAwB;IAC9E,OAAO,EAAE,qGAAqG;IAC9G,IAAI,EAAE;QACL,IAAI,EAAE,UAAU,EAAE,UAAU,EAAE,KAAK;QACnC,MAAM,EAAE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA2CT;KACC;IACD,IAAI,EAAE,CAAC,IAAI,EAAE,WAAW,EAAE,QAAQ,EAAE,QAAQ,EAAE,aAAa,CAAC,EAAE,MAAM,EAAE,cAAc,EAAE,KAAK,EAAE,CAAC;IAC9F,QAAQ,EAAE,CAAC,KAAK,EAAE,KAAK,EAAE,QAAQ,CAAC,EAAE,QAAQ,EAAE,CAAC,UAAU,EAAE,OAAO,CAAC,EAAE,OAAO,EAAE,IAAI;CAClF,CAAC;AAEF,eAAe,UAAU,CAAC"}

package/dist/ai/providers/gemini/gemini-cli-status.d.ts

@@ -0,0 +1,42 @@
+/**
+ * Gemini CLI status classification.
+ *
+ * Google retired Gemini Code Assist for individuals from the Gemini CLI and
+ * moved the subscription to the Antigravity suite. The CLI reports that as an
+ * `IneligibleTierError` on stderr (Node `util.inspect` output, not JSON):
+ *
+ *   Error authenticating: IneligibleTierError: This client is no longer supported ...
+ *       at throwIneligibleOrProjectIdError (...)
+ *   {
+ *     ineligibleTiers: [
+ *       { reasonCode: 'UNSUPPORTED_CLIENT', reasonMessage: '...', tierId: 'free-tier', tierName: '...' }
+ *     ]
+ *   }
+ *
+ * This module turns that output into a structured failure (reason code,
+ * upstream message, migration URL, remedy) so health, detection, and the
+ * generation path all surface the same actionable diagnosis. It never reads
+ * credential files and never includes raw stack traces in user-facing text.
+ */
+export declare const ANTIGRAVITY_URL = "https://antigravity.google";
+export declare const GEMINI_CLI_BINARY = "gemini";
+export declare const ANTIGRAVITY_CLI_BINARY = "agy";
+export declare const GEMINI_CLI_MIGRATION_SUMMARY = "Gemini CLI: subscription moved to Antigravity";
+export declare const GEMINI_API_KEY_FALLBACK = "set authMethod to 'api-key' with a GEMINI_API_KEY credential reference";
+export declare const ANTIGRAVITY_LOGIN_COMMAND = "vibes dev external antigravity login";
+export declare const ANTIGRAVITY_STATUS_COMMAND = "vibes dev external antigravity status";
+export declare const ANTIGRAVITY_REMEDY = "install the Antigravity CLI (agy, https://antigravity.google), sign in with `vibes dev external antigravity login` (that runs `agy`), and set this connection's authMethod to 'antigravity'";
+import { CapabilityError } from '@vibesdotdev/kernel';
+import type { GeminiCliFailure, GeminiCliFailureCode, GeminiCliIneligibleTier } from '../../../schemas/cli.ts';
+export type { GeminiCliFailure, GeminiCliFailureCode, GeminiCliIneligibleTier } from '../../../schemas/cli.ts';
+/** Extract every `ineligibleTiers[]` entry the Gemini CLI printed. */
+export declare function parseGeminiCliIneligibleTiers(output: string): GeminiCliIneligibleTier[];
+export declare function geminiCliRemedy(code: GeminiCliFailureCode): string;
+/**
+ * Classify Gemini CLI stderr/stdout (or a transport error message that embeds
+ * it). Returns `null` when the output carries no recognisable failure.
+ */
+export declare function classifyGeminiCliOutput(output: string | undefined | null): GeminiCliFailure | null;
+export declare function geminiCliFailure(failure: GeminiCliFailure): CapabilityError;
+export declare function describeGeminiCliFailure(failure: GeminiCliFailure): string;
+//# sourceMappingURL=gemini-cli-status.d.ts.map

package/dist/ai/providers/gemini/gemini-cli-status.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"gemini-cli-status.d.ts","sourceRoot":"","sources":["../../../../src/ai/providers/gemini/gemini-cli-status.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,eAAO,MAAM,eAAe,+BAA+B,CAAC;AAC5D,eAAO,MAAM,iBAAiB,WAAW,CAAC;AAC1C,eAAO,MAAM,sBAAsB,QAAQ,CAAC;AAC5C,eAAO,MAAM,4BAA4B,kDAAkD,CAAC;AAC5F,eAAO,MAAM,uBAAuB,2EACqC,CAAC;AAC1E,eAAO,MAAM,yBAAyB,yCAAyC,CAAC;AAChF,eAAO,MAAM,0BAA0B,0CAA0C,CAAC;AAClF,eAAO,MAAM,kBAAkB,gMAC+L,CAAC;AAE/N,OAAO,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AACtD,OAAO,KAAK,EAAE,gBAAgB,EAAE,oBAAoB,EAAE,uBAAuB,EAAE,MAAM,yBAAyB,CAAC;AAE/G,YAAY,EAAE,gBAAgB,EAAE,oBAAoB,EAAE,uBAAuB,EAAE,MAAM,yBAAyB,CAAC;AAa/G,sEAAsE;AACtE,wBAAgB,6BAA6B,CAAC,MAAM,EAAE,MAAM,GAAG,uBAAuB,EAAE,CAcvF;AAED,wBAAgB,eAAe,CAAC,IAAI,EAAE,oBAAoB,GAAG,MAAM,CAclE;AAED;;;GAGG;AACH,wBAAgB,uBAAuB,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,GAAG,IAAI,GAAG,gBAAgB,GAAG,IAAI,CA2ClG;AAWD,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,gBAAgB,GAAG,eAAe,CAM3E;AAED,wBAAgB,wBAAwB,CAAC,OAAO,EAAE,gBAAgB,GAAG,MAAM,CAE1E"}