@xiaoso/dsh-tool-plus 0.1.0-beta.2 → 0.1.0-beta.4

package/lib/google-gemini-cli-CWu8HvXW.mjs

@@ -0,0 +1,211 @@
+import { installBunShim as __installBunShim } from "./bun-shim.mjs";
+__installBunShim();
+import { P as $env } from "./src-lDmkSRbm.mjs";
+import { c as OAuthError } from "./error-yCSG0mGC.mjs";
+import { i as getGeminiCliHeaders } from "./gemini-headers-DKUShltF.mjs";
+import { n as runGoogleOAuthLogin, r as throwIfLoginCancelled, t as oauthFetch } from "./google-oauth-shared-yqlyqPPC.mjs";
+//#region node_modules/.pnpm/@oh-my-pi+pi-ai@17.3.5/node_modules/@oh-my-pi/pi-ai/src/registry/oauth/google-gemini-cli.ts
+/**
+* Gemini CLI OAuth flow (Google Cloud Code Assist)
+* Standard Gemini models only (gemini-2.0-flash, gemini-2.5-*)
+*/
+const decode = (s) => atob(s);
+const CLIENT_ID = decode("NjgxMjU1ODA5Mzk1LW9vOGZ0Mm9wcmRybnA5ZTNhcWY2YXYzaG1kaWIxMzVqLmFwcHMuZ29vZ2xldXNlcmNvbnRlbnQuY29t");
+const CLIENT_SECRET = decode("R09DU1BYLTR1SGdNUG0tMW83U2stZ2VWNkN1NWNsWEZzeGw=");
+const CALLBACK_PORT = 8085;
+const CALLBACK_PATH = "/oauth2callback";
+const SCOPES = [
+	"https://www.googleapis.com/auth/cloud-platform",
+	"https://www.googleapis.com/auth/userinfo.email",
+	"https://www.googleapis.com/auth/userinfo.profile"
+];
+const AUTH_URL = "https://accounts.google.com/o/oauth2/v2/auth";
+const TOKEN_URL = "https://oauth2.googleapis.com/token";
+const CODE_ASSIST_ENDPOINT = "https://cloudcode-pa.googleapis.com";
+const TIER_FREE = "free-tier";
+const TIER_LEGACY = "legacy-tier";
+const TIER_STANDARD = "standard-tier";
+function getDefaultTier(allowedTiers) {
+	if (!allowedTiers || allowedTiers.length === 0) return { id: TIER_LEGACY };
+	return allowedTiers.find((t) => t.isDefault) ?? { id: TIER_LEGACY };
+}
+function isVpcScAffectedUser(payload) {
+	if (!payload || typeof payload !== "object") return false;
+	if (!("error" in payload)) return false;
+	const error = payload.error;
+	if (!error?.details || !Array.isArray(error.details)) return false;
+	return error.details.some((detail) => detail.reason === "SECURITY_POLICY_VIOLATED");
+}
+/**
+* LRO poll cadence and bound. Cloud Code Assist project provisioning normally
+* completes within a handful of polls; the attempt cap converts a stuck
+* `done: false` operation (or a service incident) into a bounded login error
+* instead of the previous unbounded loop.
+*/
+const POLL_INTERVAL_MS = 5e3;
+async function pollOperation(operationName, headers, signal, onProgress) {
+	for (let attempt = 0; attempt < 24; attempt += 1) {
+		if (attempt > 0) {
+			onProgress?.(`Waiting for project provisioning (attempt ${attempt + 1}/24)...`);
+			throwIfLoginCancelled(signal);
+			await Bun.sleep(POLL_INTERVAL_MS);
+		}
+		throwIfLoginCancelled(signal);
+		const response = await oauthFetch(`${CODE_ASSIST_ENDPOINT}/v1internal/${operationName}`, {
+			method: "GET",
+			headers
+		}, {
+			provider: "google-gemini-cli",
+			signal
+		});
+		if (!response.ok) throw new OAuthError(`Failed to poll operation: ${response.status} ${response.statusText}`, {
+			kind: "polling",
+			provider: "google-gemini-cli",
+			status: response.status
+		});
+		const data = await response.json();
+		if (data.done) return data;
+	}
+	throw new OAuthError(`Project provisioning did not complete after 24 attempts`, {
+		kind: "timeout",
+		provider: "google-gemini-cli"
+	});
+}
+async function discoverProject(accessToken, onProgress, signal) {
+	const envProjectId = $env.GOOGLE_CLOUD_PROJECT || $env.GOOGLE_CLOUD_PROJECT_ID;
+	const headers = {
+		Authorization: `Bearer ${accessToken}`,
+		"Content-Type": "application/json",
+		...getGeminiCliHeaders()
+	};
+	onProgress?.("Checking for existing Cloud Code Assist project...");
+	const loadResponse = await oauthFetch(`${CODE_ASSIST_ENDPOINT}/v1internal:loadCodeAssist`, {
+		method: "POST",
+		headers,
+		body: JSON.stringify({
+			cloudaicompanionProject: envProjectId,
+			metadata: {
+				ideType: "IDE_UNSPECIFIED",
+				platform: "PLATFORM_UNSPECIFIED",
+				pluginType: "GEMINI",
+				duetProject: envProjectId
+			}
+		})
+	}, {
+		provider: "google-gemini-cli",
+		signal
+	});
+	let data;
+	if (!loadResponse.ok) {
+		let errorPayload;
+		try {
+			errorPayload = await loadResponse.clone().json();
+		} catch {
+			errorPayload = void 0;
+		}
+		if (isVpcScAffectedUser(errorPayload)) data = { currentTier: { id: TIER_STANDARD } };
+		else {
+			const errorText = await loadResponse.text();
+			throw new OAuthError(`loadCodeAssist failed: ${loadResponse.status} ${loadResponse.statusText}: ${errorText}`, {
+				kind: "discovery",
+				provider: "google-gemini-cli",
+				status: loadResponse.status
+			});
+		}
+	} else data = await loadResponse.json();
+	if (data.currentTier) {
+		if (data.cloudaicompanionProject) return data.cloudaicompanionProject;
+		if (envProjectId) return envProjectId;
+		throw new OAuthError("This account requires setting the GOOGLE_CLOUD_PROJECT or GOOGLE_CLOUD_PROJECT_ID environment variable. See https://goo.gle/gemini-cli-auth-docs#workspace-gca", {
+			kind: "configuration",
+			provider: "google-gemini-cli"
+		});
+	}
+	const tierId = getDefaultTier(data.allowedTiers)?.id ?? TIER_FREE;
+	if (tierId !== TIER_FREE && !envProjectId) throw new OAuthError("This account requires setting the GOOGLE_CLOUD_PROJECT or GOOGLE_CLOUD_PROJECT_ID environment variable. See https://goo.gle/gemini-cli-auth-docs#workspace-gca", {
+		kind: "configuration",
+		provider: "google-gemini-cli"
+	});
+	onProgress?.("Provisioning Cloud Code Assist project (this may take a moment)...");
+	const onboardBody = {
+		tierId,
+		metadata: {
+			ideType: "IDE_UNSPECIFIED",
+			platform: "PLATFORM_UNSPECIFIED",
+			pluginType: "GEMINI"
+		}
+	};
+	if (tierId !== TIER_FREE && envProjectId) {
+		onboardBody.cloudaicompanionProject = envProjectId;
+		onboardBody.metadata.duetProject = envProjectId;
+	}
+	const onboardResponse = await oauthFetch(`${CODE_ASSIST_ENDPOINT}/v1internal:onboardUser`, {
+		method: "POST",
+		headers,
+		body: JSON.stringify(onboardBody)
+	}, {
+		provider: "google-gemini-cli",
+		signal
+	});
+	if (!onboardResponse.ok) {
+		const errorText = await onboardResponse.text();
+		throw new OAuthError(`onboardUser failed: ${onboardResponse.status} ${onboardResponse.statusText}: ${errorText}`, {
+			kind: "provisioning",
+			provider: "google-gemini-cli",
+			status: onboardResponse.status
+		});
+	}
+	let lroData = await onboardResponse.json();
+	if (!lroData.done && lroData.name) lroData = await pollOperation(lroData.name, headers, signal, onProgress);
+	const projectId = lroData.response?.cloudaicompanionProject?.id;
+	if (projectId) return projectId;
+	if (envProjectId) return envProjectId;
+	throw new OAuthError("Could not discover or provision a Google Cloud project. Try setting the GOOGLE_CLOUD_PROJECT or GOOGLE_CLOUD_PROJECT_ID environment variable. See https://goo.gle/gemini-cli-auth-docs#workspace-gca", {
+		kind: "validation",
+		provider: "google-gemini-cli"
+	});
+}
+async function loginGeminiCli(ctrl) {
+	return runGoogleOAuthLogin(ctrl, {
+		provider: "google-gemini-cli",
+		clientId: CLIENT_ID,
+		clientSecret: CLIENT_SECRET,
+		authUrl: AUTH_URL,
+		tokenUrl: TOKEN_URL,
+		scopes: SCOPES,
+		callbackPort: CALLBACK_PORT,
+		callbackPath: CALLBACK_PATH,
+		discoverProject
+	});
+}
+/**
+* Refresh Google Cloud Code Assist token
+*/
+async function refreshGoogleCloudToken(refreshToken, projectId) {
+	const response = await fetch(TOKEN_URL, {
+		method: "POST",
+		headers: { "Content-Type": "application/x-www-form-urlencoded" },
+		body: new URLSearchParams({
+			client_id: CLIENT_ID,
+			client_secret: CLIENT_SECRET,
+			refresh_token: refreshToken,
+			grant_type: "refresh_token"
+		})
+	});
+	if (!response.ok) {
+		const error = await response.text();
+		throw new OAuthError(`Google Cloud token refresh failed: ${error}`, {
+			kind: "token-refresh",
+			provider: "google-gemini-cli"
+		});
+	}
+	const data = await response.json();
+	return {
+		refresh: data.refresh_token || refreshToken,
+		access: data.access_token,
+		expires: Date.now() + data.expires_in * 1e3 - 3e5,
+		projectId
+	};
+}
+//#endregion
+export { loginGeminiCli, refreshGoogleCloudToken };