audit-tools 0.28.0

package/dist/shared/providers/subprocessTemplateProvider.d.ts

@@ -0,0 +1,19 @@
+import type { FreshSessionProvider, LaunchFreshSessionInput } from "./types.js";
+import type { SubprocessTemplateConfig } from "../types/sessionConfig.js";
+import { spawnLoggedCommand } from "./spawnLoggedCommand.js";
+import { type WorkerTaskWithCommand } from "./workerTaskLaunch.js";
+import { RunLogger } from "../observability/runLog.js";
+export declare function applyTemplate(template: string, input: LaunchFreshSessionInput, task: WorkerTaskWithCommand, context: {
+    providerName: string;
+    entryIndex: number;
+    log: RunLogger;
+}): string;
+export declare class SubprocessTemplateProvider implements FreshSessionProvider {
+    name: string;
+    private readonly config;
+    private readonly launchCommand;
+    private readonly log;
+    constructor(config: SubprocessTemplateConfig, name?: string, launchCommand?: typeof spawnLoggedCommand, runLogger?: RunLogger);
+    launch(input: LaunchFreshSessionInput): Promise<import("./types.js").LaunchFreshSessionResult>;
+}
+//# sourceMappingURL=subprocessTemplateProvider.d.ts.map

package/dist/shared/providers/subprocessTemplateProvider.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"subprocessTemplateProvider.d.ts","sourceRoot":"","sources":["../../../src/shared/providers/subprocessTemplateProvider.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EACV,oBAAoB,EACpB,uBAAuB,EACxB,MAAM,YAAY,CAAC;AACpB,OAAO,KAAK,EACV,wBAAwB,EACzB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAC7D,OAAO,EAEL,KAAK,qBAAqB,EAC3B,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,SAAS,EAAE,MAAM,4BAA4B,CAAC;AAEvD,wBAAgB,aAAa,CAC3B,QAAQ,EAAE,MAAM,EAChB,KAAK,EAAE,uBAAuB,EAC9B,IAAI,EAAE,qBAAqB,EAC3B,OAAO,EAAE;IAAE,YAAY,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,SAAS,CAAA;CAAE,GACpE,MAAM,CA2DR;AAED,qBAAa,0BAA2B,YAAW,oBAAoB;IACrE,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,CAAC,QAAQ,CAAC,MAAM,CAA2B;IAClD,OAAO,CAAC,QAAQ,CAAC,aAAa,CAA4B;IAC1D,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAY;gBAG9B,MAAM,EAAE,wBAAwB,EAChC,IAAI,SAAwB,EAC5B,aAAa,GAAE,OAAO,kBAAuC,EAC7D,SAAS,CAAC,EAAE,SAAS;IAQjB,MAAM,CAAC,KAAK,EAAE,uBAAuB;CAkB5C"}

package/dist/shared/providers/subprocessTemplateProvider.js

@@ -0,0 +1,91 @@
+import { readJsonFile } from "../io/json.js";
+import { shellQuote } from "../tooling/exec.js";
+import { spawnLoggedCommand } from "./spawnLoggedCommand.js";
+import { applyWorkerTaskLaunchSettings, } from "./workerTaskLaunch.js";
+import { RunLogger } from "../observability/runLog.js";
+export function applyTemplate(template, input, task, context) {
+    // worker_command is optional: remediation tasks dispatch via the template's
+    // own placeholders and omit it entirely. Default to an empty argv so a
+    // template that never references {workerCommandShell}/{workerCommandJson}
+    // launches cleanly, and one that does gets a well-defined empty value.
+    const workerCommand = task.worker_command ?? [];
+    const workerCommandShell = workerCommand
+        .map((arg) => shellQuote(arg))
+        .join(" ");
+    const workerCommandJson = JSON.stringify(workerCommand);
+    const values = {
+        repoRoot: input.repoRoot,
+        runId: input.runId,
+        obligationId: input.obligationId ?? "",
+        promptPath: input.promptPath,
+        taskPath: input.taskPath,
+        resultPath: input.resultPath,
+        stdoutPath: input.stdoutPath,
+        stderrPath: input.stderrPath,
+        workerCommandShell,
+        workerCommandJson,
+        uiMode: input.uiMode,
+        timeoutMs: String(input.timeoutMs),
+    };
+    // When the entire template entry is a single placeholder token with no
+    // surrounding text (e.g. "{promptPath}" with nothing else), the rendered
+    // value becomes the whole argv element on its own.  In that case we must
+    // NOT additionally shell-quote it: the value already occupies a discrete
+    // argument slot, and wrapping it in quotes would corrupt it (e.g. turning
+    // /path/to/file into '/path/to/file' as a literal string).
+    const wholePlaceholder = template.match(/^\{([A-Za-z0-9_]+)\}$/);
+    return template.replace(/\{([A-Za-z0-9_]+)\}/g, (match, key) => {
+        if (!(key in values)) {
+            context.log.event({
+                kind: "error",
+                provider: context.providerName,
+                note: `applyTemplate: unknown placeholder ${match} ` +
+                    `runId=${input.runId} ` +
+                    `obligationId=${input.obligationId ?? ""} taskPath=${input.taskPath} ` +
+                    `entryIndex=${context.entryIndex}`,
+                obligation: input.obligationId ?? undefined,
+            });
+            // Unknown placeholder resolves to nothing: emit an empty (unquoted) string
+            // so it disappears from the rendered argv rather than leaving the spurious
+            // '' token that shellQuote("") would otherwise produce.
+            return "";
+        }
+        const value = values[key] ?? "";
+        // Two conditions skip shell-quoting:
+        //   1. wholePlaceholder: the entry is exactly "{key}" with nothing else —
+        //      the value IS the entire argv element; quoting would double-wrap it.
+        //   2. key.endsWith("Shell"): the value (e.g. workerCommandShell) is already
+        //      a pre-assembled shell string and must not be quoted again.
+        // All other cases: the placeholder is embedded inside a larger string that
+        // will become one argv token, so the substituted value must be shell-quoted
+        // to prevent word-splitting or glob expansion.
+        return wholePlaceholder || key.endsWith("Shell") ? value : shellQuote(value);
+    });
+}
+export class SubprocessTemplateProvider {
+    name;
+    config;
+    launchCommand;
+    log;
+    constructor(config, name = "subprocess-template", launchCommand = spawnLoggedCommand, runLogger) {
+        this.config = config;
+        this.name = name;
+        this.launchCommand = launchCommand;
+        this.log = runLogger ?? RunLogger.disabled();
+    }
+    async launch(input) {
+        const task = await readJsonFile(input.taskPath);
+        if (!this.config.command_template.length) {
+            throw new Error(`${this.name} provider requires a non-empty command_template.`);
+        }
+        const launchInput = applyWorkerTaskLaunchSettings(input, task);
+        const rendered = this.config.command_template.map((entry, entryIndex) => applyTemplate(entry, launchInput, task, {
+            providerName: this.name,
+            entryIndex,
+            log: this.log,
+        }));
+        const [command, ...args] = rendered;
+        return await this.launchCommand(command, args, launchInput, this.config.env);
+    }
+}
+//# sourceMappingURL=subprocessTemplateProvider.js.map

package/dist/shared/providers/subprocessTemplateProvider.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"subprocessTemplateProvider.js","sourceRoot":"","sources":["../../../src/shared/providers/subprocessTemplateProvider.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAC7C,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAQhD,OAAO,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAC7D,OAAO,EACL,6BAA6B,GAE9B,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,SAAS,EAAE,MAAM,4BAA4B,CAAC;AAEvD,MAAM,UAAU,aAAa,CAC3B,QAAgB,EAChB,KAA8B,EAC9B,IAA2B,EAC3B,OAAqE;IAErE,4EAA4E;IAC5E,uEAAuE;IACvE,0EAA0E;IAC1E,uEAAuE;IACvE,MAAM,aAAa,GAAG,IAAI,CAAC,cAAc,IAAI,EAAE,CAAC;IAChD,MAAM,kBAAkB,GAAG,aAAa;SACrC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;SAC7B,IAAI,CAAC,GAAG,CAAC,CAAC;IACb,MAAM,iBAAiB,GAAG,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC;IACxD,MAAM,MAAM,GAA2B;QACrC,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,YAAY,EAAE,KAAK,CAAC,YAAY,IAAI,EAAE;QACtC,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,kBAAkB;QAClB,iBAAiB;QACjB,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,SAAS,EAAE,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC;KACnC,CAAC;IACF,uEAAuE;IACvE,yEAAyE;IACzE,yEAAyE;IACzE,yEAAyE;IACzE,0EAA0E;IAC1E,2DAA2D;IAC3D,MAAM,gBAAgB,GAAG,QAAQ,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC;IACjE,OAAO,QAAQ,CAAC,OAAO,CAAC,sBAAsB,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;QAC7D,IAAI,CAAC,CAAC,GAAG,IAAI,MAAM,CAAC,EAAE,CAAC;YACrB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC;gBAChB,IAAI,EAAE,OAAO;gBACb,QAAQ,EAAE,OAAO,CAAC,YAAY;gBAC9B,IAAI,EACF,sCAAsC,KAAK,GAAG;oBAC9C,SAAS,KAAK,CAAC,KAAK,GAAG;oBACvB,gBAAgB,KAAK,CAAC,YAAY,IAAI,EAAE,aAAa,KAAK,CAAC,QAAQ,GAAG;oBACtE,cAAc,OAAO,CAAC,UAAU,EAAE;gBACpC,UAAU,EAAE,KAAK,CAAC,YAAY,IAAI,SAAS;aAC5C,CAAC,CAAC;YACH,2EAA2E;YAC3E,2EAA2E;YAC3E,wDAAwD;YACxD,OAAO,EAAE,CAAC;QACZ,CAAC;QACD,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;QAChC,qCAAqC;QACrC,0EAA0E;QAC1E,2EAA2E;QAC3E,6EAA6E;QAC7E,kEAAkE;QAClE,2EAA2E;QAC3E,4EAA4E;QAC5E,+CAA+C;QAC/C,OAAO,gBAAgB,IAAI,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;IAC/E,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,OAAO,0BAA0B;IACrC,IAAI,CAAS;IACI,MAAM,CAA2B;IACjC,aAAa,CAA4B;IACzC,GAAG,CAAY;IAEhC,YACE,MAAgC,EAChC,IAAI,GAAG,qBAAqB,EAC5B,gBAA2C,kBAAkB,EAC7D,SAAqB;QAErB,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,aAAa,GAAG,aAAa,CAAC;QACnC,IAAI,CAAC,GAAG,GAAG,SAAS,IAAI,SAAS,CAAC,QAAQ,EAAE,CAAC;IAC/C,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,KAA8B;QACzC,MAAM,IAAI,GAAG,MAAM,YAAY,CAAwB,KAAK,CAAC,QAAQ,CAAC,CAAC;QACvE,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,gBAAgB,CAAC,MAAM,EAAE,CAAC;YACzC,MAAM,IAAI,KAAK,CACb,GAAG,IAAI,CAAC,IAAI,kDAAkD,CAC/D,CAAC;QACJ,CAAC;QACD,MAAM,WAAW,GAAG,6BAA6B,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QAC/D,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,UAAU,EAAE,EAAE,CACtE,aAAa,CAAC,KAAK,EAAE,WAAW,EAAE,IAAI,EAAE;YACtC,YAAY,EAAE,IAAI,CAAC,IAAI;YACvB,UAAU;YACV,GAAG,EAAE,IAAI,CAAC,GAAG;SACd,CAAC,CACH,CAAC;QACF,MAAM,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,GAAG,QAAQ,CAAC;QACpC,OAAO,MAAM,IAAI,CAAC,aAAa,CAAC,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IAC/E,CAAC;CACF"}

package/dist/shared/providers/types.d.ts

@@ -0,0 +1,43 @@
+export interface WorkerProgress {
+    type: "heartbeat" | "output";
+    runId: string;
+    obligationId: string | null;
+    elapsedMs: number;
+    message?: string;
+}
+export interface LaunchFreshSessionInput {
+    repoRoot: string;
+    runId: string;
+    obligationId: string | null;
+    promptPath: string;
+    taskPath: string;
+    resultPath: string;
+    stdoutPath: string;
+    stderrPath: string;
+    uiMode: "visible" | "headless";
+    timeoutMs: number;
+    stdinText?: string;
+    onProgress?: (update: WorkerProgress) => void;
+}
+export interface LaunchFreshSessionResult {
+    accepted: boolean;
+    processId?: number;
+    exitCode?: number | null;
+    signal?: string | null;
+    command?: string;
+    args?: string[];
+    stdoutPath?: string;
+    stderrPath?: string;
+    error?: string;
+}
+export interface ProviderRateLimits {
+    requests_per_minute?: number | null;
+    input_tokens_per_minute?: number | null;
+    output_tokens_per_minute?: number | null;
+}
+export interface FreshSessionProvider {
+    name: string;
+    launch(input: LaunchFreshSessionInput): Promise<LaunchFreshSessionResult>;
+    queryLimits?(model: string | null): Promise<ProviderRateLimits | null>;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/shared/providers/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/shared/providers/types.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,WAAW,GAAG,QAAQ,CAAC;IAC7B,KAAK,EAAE,MAAM,CAAC;IACd,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,uBAAuB;IACtC,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,SAAS,GAAG,UAAU,CAAC;IAC/B,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,CAAC,MAAM,EAAE,cAAc,KAAK,IAAI,CAAC;CAC/C;AAED,MAAM,WAAW,wBAAwB;IACvC,QAAQ,EAAE,OAAO,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,kBAAkB;IACjC,mBAAmB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACpC,uBAAuB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACxC,wBAAwB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC1C;AAED,MAAM,WAAW,oBAAoB;IACnC,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,CAAC,KAAK,EAAE,uBAAuB,GAAG,OAAO,CAAC,wBAAwB,CAAC,CAAC;IAC1E,WAAW,CAAC,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAC,CAAC;CACxE"}

package/dist/shared/providers/types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.js.map

package/dist/shared/providers/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../src/shared/providers/types.ts"],"names":[],"mappings":""}

package/dist/shared/providers/workerTaskLaunch.d.ts

@@ -0,0 +1,32 @@
+import type { LaunchFreshSessionInput } from "./types.js";
+/** Minimal worker-task shape needed to resolve a per-task launch timeout. */
+export interface WorkerTaskTimeout {
+    timeout_ms?: number;
+}
+/**
+ * Minimal worker-task shape the shared provider classes need: an optional
+ * `worker_command` argv plus an optional per-task `timeout_ms`. Both
+ * orchestrators' richer `WorkerTask` types structurally satisfy this, so the
+ * shared providers depend on this narrow interface rather than importing either
+ * package's full task type. `worker_command` is optional because remediation
+ * tasks dispatch through a provider template and omit it; consumers that require
+ * it (e.g. LocalSubprocessProvider) guard for its absence explicitly.
+ */
+export interface WorkerTaskWithCommand extends WorkerTaskTimeout {
+    worker_command?: string[];
+}
+/**
+ * Resolve the effective subprocess timeout for a worker task: the task's own
+ * `timeout_ms` when it is a positive, finite number, otherwise the caller's
+ * fallback. Centralized so both orchestrators honor per-task timeouts
+ * identically rather than each provider applying its own (or no) policy.
+ */
+export declare function resolveWorkerTaskTimeoutMs(task: WorkerTaskTimeout, fallbackMs: number): number;
+/**
+ * Return a launch input with its `timeoutMs` overridden by the worker task's
+ * per-task `timeout_ms` when present. Providers call this on the input before
+ * spawning so a task can carry a tighter (or looser) timeout than the session
+ * default.
+ */
+export declare function applyWorkerTaskLaunchSettings(input: LaunchFreshSessionInput, task: WorkerTaskTimeout): LaunchFreshSessionInput;
+//# sourceMappingURL=workerTaskLaunch.d.ts.map

package/dist/shared/providers/workerTaskLaunch.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"workerTaskLaunch.d.ts","sourceRoot":"","sources":["../../../src/shared/providers/workerTaskLaunch.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,YAAY,CAAC;AAE1D,6EAA6E;AAC7E,MAAM,WAAW,iBAAiB;IAChC,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED;;;;;;;;GAQG;AACH,MAAM,WAAW,qBAAsB,SAAQ,iBAAiB;IAC9D,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;CAC3B;AAED;;;;;GAKG;AACH,wBAAgB,0BAA0B,CACxC,IAAI,EAAE,iBAAiB,EACvB,UAAU,EAAE,MAAM,GACjB,MAAM,CASR;AAED;;;;;GAKG;AACH,wBAAgB,6BAA6B,CAC3C,KAAK,EAAE,uBAAuB,EAC9B,IAAI,EAAE,iBAAiB,GACtB,uBAAuB,CAKzB"}

package/dist/shared/providers/workerTaskLaunch.js

@@ -0,0 +1,27 @@
+/**
+ * Resolve the effective subprocess timeout for a worker task: the task's own
+ * `timeout_ms` when it is a positive, finite number, otherwise the caller's
+ * fallback. Centralized so both orchestrators honor per-task timeouts
+ * identically rather than each provider applying its own (or no) policy.
+ */
+export function resolveWorkerTaskTimeoutMs(task, fallbackMs) {
+    if (typeof task.timeout_ms === "number" &&
+        Number.isFinite(task.timeout_ms) &&
+        task.timeout_ms > 0) {
+        return Math.floor(task.timeout_ms);
+    }
+    return fallbackMs;
+}
+/**
+ * Return a launch input with its `timeoutMs` overridden by the worker task's
+ * per-task `timeout_ms` when present. Providers call this on the input before
+ * spawning so a task can carry a tighter (or looser) timeout than the session
+ * default.
+ */
+export function applyWorkerTaskLaunchSettings(input, task) {
+    return {
+        ...input,
+        timeoutMs: resolveWorkerTaskTimeoutMs(task, input.timeoutMs),
+    };
+}
+//# sourceMappingURL=workerTaskLaunch.js.map

package/dist/shared/providers/workerTaskLaunch.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"workerTaskLaunch.js","sourceRoot":"","sources":["../../../src/shared/providers/workerTaskLaunch.ts"],"names":[],"mappings":"AAoBA;;;;;GAKG;AACH,MAAM,UAAU,0BAA0B,CACxC,IAAuB,EACvB,UAAkB;IAElB,IACE,OAAO,IAAI,CAAC,UAAU,KAAK,QAAQ;QACnC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,UAAU,CAAC;QAChC,IAAI,CAAC,UAAU,GAAG,CAAC,EACnB,CAAC;QACD,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IACrC,CAAC;IACD,OAAO,UAAU,CAAC;AACpB,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,6BAA6B,CAC3C,KAA8B,EAC9B,IAAuB;IAEvB,OAAO;QACL,GAAG,KAAK;QACR,SAAS,EAAE,0BAA0B,CAAC,IAAI,EAAE,KAAK,CAAC,SAAS,CAAC;KAC7D,CAAC;AACJ,CAAC"}

package/dist/shared/quota/antigravityQuotaSource.d.ts

@@ -0,0 +1,44 @@
+import type { QuotaUsageSnapshot } from "./quotaSource.js";
+import { BaseHttpQuotaSource, type HttpQuotaSourceOptions, type UsageFetchContext } from "./httpQuotaSource.js";
+interface AntigravityModel {
+    quotaInfo?: {
+        remainingFraction?: number | null;
+        resetTime?: string | null;
+    } | null;
+}
+interface AntigravityResponse {
+    models?: AntigravityModel[] | null;
+    userTier?: {
+        name?: string;
+    } | null;
+}
+export interface AntigravityQuotaSourceOptions extends HttpQuotaSourceOptions {
+    /** Resolve the Google access token (overrides the default env/sqlite chain). */
+    readAccessToken?: () => string | null;
+    /** Antigravity `state.vscdb` path (defaults to the Windows globalStorage location). */
+    stateDbPath?: string;
+    /** Optional Google project id for the request body. */
+    project?: string;
+    /** Injectable env (mainly for tests). */
+    env?: NodeJS.ProcessEnv;
+    /** Override the provider-name gate (mainly for tests). */
+    antigravityProviderNames?: Iterable<string>;
+}
+export declare class AntigravityQuotaSource extends BaseHttpQuotaSource {
+    readonly name = "antigravity";
+    private readonly readToken;
+    private readonly project?;
+    private readonly providerNames;
+    constructor(options?: AntigravityQuotaSourceOptions);
+    protected handlesProvider(provider: string): boolean;
+    protected fetchSnapshot(): Promise<QuotaUsageSnapshot | null>;
+}
+/** Reusable Antigravity usage probe (no token read, no guard). */
+export declare function fetchAntigravityUsage(creds: {
+    accessToken: string;
+    project?: string;
+}, ctx: UsageFetchContext): Promise<QuotaUsageSnapshot | null>;
+/** Maps `fetchAvailableModels` → least-remaining model's fraction + its reset. */
+export declare function mapAntigravityUsage(body: AntigravityResponse, nowMs: number): QuotaUsageSnapshot | null;
+export {};
+//# sourceMappingURL=antigravityQuotaSource.d.ts.map

package/dist/shared/quota/antigravityQuotaSource.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"antigravityQuotaSource.d.ts","sourceRoot":"","sources":["../../../src/shared/quota/antigravityQuotaSource.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AAC3D,OAAO,EACL,mBAAmB,EAGnB,KAAK,sBAAsB,EAC3B,KAAK,iBAAiB,EACvB,MAAM,sBAAsB,CAAC;AAuB9B,UAAU,gBAAgB;IACxB,SAAS,CAAC,EAAE;QAAE,iBAAiB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,GAAG,IAAI,CAAC;CACrF;AACD,UAAU,mBAAmB;IAC3B,MAAM,CAAC,EAAE,gBAAgB,EAAE,GAAG,IAAI,CAAC;IACnC,QAAQ,CAAC,EAAE;QAAE,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;CACrC;AAED,MAAM,WAAW,6BAA8B,SAAQ,sBAAsB;IAC3E,gFAAgF;IAChF,eAAe,CAAC,EAAE,MAAM,MAAM,GAAG,IAAI,CAAC;IACtC,uFAAuF;IACvF,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,uDAAuD;IACvD,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,yCAAyC;IACzC,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;IACxB,0DAA0D;IAC1D,wBAAwB,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;CAC7C;AAED,qBAAa,sBAAuB,SAAQ,mBAAmB;IAC7D,QAAQ,CAAC,IAAI,iBAAiB;IAC9B,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAsB;IAChD,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAS;IAClC,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAc;gBAEhC,OAAO,GAAE,6BAAkC;IAiBvD,SAAS,CAAC,eAAe,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO;cAIpC,aAAa,IAAI,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAC;CAKpE;AAED,kEAAkE;AAClE,wBAAsB,qBAAqB,CACzC,KAAK,EAAE;IAAE,WAAW,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAA;CAAE,EAChD,GAAG,EAAE,iBAAiB,GACrB,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAC,CAapC;AAED,kFAAkF;AAClF,wBAAgB,mBAAmB,CACjC,IAAI,EAAE,mBAAmB,EACzB,KAAK,EAAE,MAAM,GACZ,kBAAkB,GAAG,IAAI,CAgB3B"}

package/dist/shared/quota/antigravityQuotaSource.js

@@ -0,0 +1,101 @@
+import { spawnSync } from "node:child_process";
+import { homedir } from "node:os";
+import path from "node:path";
+import { BaseHttpQuotaSource, fetchJsonOrNull, clampFraction, } from "./httpQuotaSource.js";
+/**
+ * Antigravity (Google's agentic IDE) quota source. POSTs the internal
+ * `cloudcode-pa.googleapis.com/v1internal:fetchAvailableModels` endpoint →
+ * per-model `quotaInfo.{remainingFraction, resetTime}`, binding on the
+ * least-remaining model.
+ *
+ * This is the LOWEST-confidence source (MED): the endpoint is internal, and
+ * Antigravity's Google token lives in an SQLite `state.vscdb` (no clean cred
+ * file). Token sourcing is therefore degrade-heavy and opt-in: an explicit
+ * `ANTIGRAVITY_ACCESS_TOKEN` env, or an injected `readAccessToken` hook (e.g. the
+ * local Antigravity Language Server — the lower-ToS-risk route), or a best-effort
+ * `sqlite3` CLI read of `state.vscdb`. Absent all three → null (degrade to
+ * reactive). NOTE: Google discourages reverse-proxy use of its AI services;
+ * prefer the LS hook over replaying the cloud endpoint with a scraped token.
+ */
+const ANTIGRAVITY_PROVIDER_NAMES = new Set(["antigravity"]);
+const USAGE_ENDPOINT = "https://cloudcode-pa.googleapis.com/v1internal:fetchAvailableModels";
+const DEFAULT_USER_AGENT = "antigravity";
+export class AntigravityQuotaSource extends BaseHttpQuotaSource {
+    name = "antigravity";
+    readToken;
+    project;
+    providerNames;
+    constructor(options = {}) {
+        super(options, DEFAULT_USER_AGENT);
+        const env = options.env ?? process.env;
+        const stateDbPath = options.stateDbPath ??
+            path.join(env.APPDATA ?? path.join(homedir(), "AppData", "Roaming"), "Antigravity", "User", "globalStorage", "state.vscdb");
+        this.readToken = options.readAccessToken ?? (() => readAntigravityToken(env, stateDbPath));
+        this.project = options.project ?? env.ANTIGRAVITY_PROJECT;
+        this.providerNames = new Set(options.antigravityProviderNames ?? ANTIGRAVITY_PROVIDER_NAMES);
+    }
+    handlesProvider(provider) {
+        return this.providerNames.has(provider);
+    }
+    async fetchSnapshot() {
+        const accessToken = this.readToken();
+        if (!accessToken)
+            return null;
+        return fetchAntigravityUsage({ accessToken, project: this.project }, this.fetchContext());
+    }
+}
+/** Reusable Antigravity usage probe (no token read, no guard). */
+export async function fetchAntigravityUsage(creds, ctx) {
+    const body = await fetchJsonOrNull(ctx.fetchImpl, USAGE_ENDPOINT, {
+        method: "POST",
+        headers: {
+            Authorization: `Bearer ${creds.accessToken}`,
+            "User-Agent": ctx.userAgent,
+            "Content-Type": "application/json",
+            Accept: "application/json",
+        },
+        body: JSON.stringify(creds.project ? { project: creds.project } : {}),
+    });
+    if (body == null)
+        return null;
+    return mapAntigravityUsage(body, ctx.now());
+}
+/** Maps `fetchAvailableModels` → least-remaining model's fraction + its reset. */
+export function mapAntigravityUsage(body, nowMs) {
+    const infos = (body.models ?? [])
+        .map((m) => m.quotaInfo)
+        .filter((q) => !!q && typeof q.remainingFraction === "number");
+    if (infos.length === 0)
+        return null;
+    const binding = infos.reduce((a, b) => (b.remainingFraction < a.remainingFraction ? b : a));
+    return {
+        remaining_pct: clampFraction(binding.remainingFraction),
+        reset_at: normalizeIso(binding.resetTime),
+        requests_remaining: null,
+        tokens_remaining: null,
+        captured_at: new Date(nowMs).toISOString(),
+        source: "antigravity",
+    };
+}
+/** Best-effort token read: env → `sqlite3` CLI on `state.vscdb` (`antigravityAuthStatus`). */
+function readAntigravityToken(env, stateDbPath) {
+    if (env.ANTIGRAVITY_ACCESS_TOKEN)
+        return env.ANTIGRAVITY_ACCESS_TOKEN;
+    try {
+        const r = spawnSync("sqlite3", [stateDbPath, "SELECT value FROM ItemTable WHERE key='antigravityAuthStatus'"], { encoding: "utf8", shell: false });
+        if (r.status !== 0 || !r.stdout)
+            return null;
+        const apiKey = JSON.parse(r.stdout.trim()).apiKey;
+        return apiKey ?? null;
+    }
+    catch {
+        return null; // sqlite3 absent / parse failure → degrade
+    }
+}
+function normalizeIso(value) {
+    if (!value)
+        return null;
+    const ms = Date.parse(value);
+    return Number.isFinite(ms) ? new Date(ms).toISOString() : null;
+}
+//# sourceMappingURL=antigravityQuotaSource.js.map

package/dist/shared/quota/antigravityQuotaSource.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"antigravityQuotaSource.js","sourceRoot":"","sources":["../../../src/shared/quota/antigravityQuotaSource.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAC/C,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EACL,mBAAmB,EACnB,eAAe,EACf,aAAa,GAGd,MAAM,sBAAsB,CAAC;AAE9B;;;;;;;;;;;;;;GAcG;AAEH,MAAM,0BAA0B,GAAG,IAAI,GAAG,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC;AAC5D,MAAM,cAAc,GAClB,qEAAqE,CAAC;AACxE,MAAM,kBAAkB,GAAG,aAAa,CAAC;AAuBzC,MAAM,OAAO,sBAAuB,SAAQ,mBAAmB;IACpD,IAAI,GAAG,aAAa,CAAC;IACb,SAAS,CAAsB;IAC/B,OAAO,CAAU;IACjB,aAAa,CAAc;IAE5C,YAAY,UAAyC,EAAE;QACrD,KAAK,CAAC,OAAO,EAAE,kBAAkB,CAAC,CAAC;QACnC,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC;QACvC,MAAM,WAAW,GACf,OAAO,CAAC,WAAW;YACnB,IAAI,CAAC,IAAI,CACP,GAAG,CAAC,OAAO,IAAI,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,SAAS,CAAC,EACzD,aAAa,EACb,MAAM,EACN,eAAe,EACf,aAAa,CACd,CAAC;QACJ,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,eAAe,IAAI,CAAC,GAAG,EAAE,CAAC,oBAAoB,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC,CAAC;QAC3F,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,GAAG,CAAC,mBAAmB,CAAC;QAC1D,IAAI,CAAC,aAAa,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,wBAAwB,IAAI,0BAA0B,CAAC,CAAC;IAC/F,CAAC;IAES,eAAe,CAAC,QAAgB;QACxC,OAAO,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAC1C,CAAC;IAES,KAAK,CAAC,aAAa;QAC3B,MAAM,WAAW,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;QACrC,IAAI,CAAC,WAAW;YAAE,OAAO,IAAI,CAAC;QAC9B,OAAO,qBAAqB,CAAC,EAAE,WAAW,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,EAAE,IAAI,CAAC,YAAY,EAAE,CAAC,CAAC;IAC5F,CAAC;CACF;AAED,kEAAkE;AAClE,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,KAAgD,EAChD,GAAsB;IAEtB,MAAM,IAAI,GAAG,MAAM,eAAe,CAAC,GAAG,CAAC,SAAS,EAAE,cAAc,EAAE;QAChE,MAAM,EAAE,MAAM;QACd,OAAO,EAAE;YACP,aAAa,EAAE,UAAU,KAAK,CAAC,WAAW,EAAE;YAC5C,YAAY,EAAE,GAAG,CAAC,SAAS;YAC3B,cAAc,EAAE,kBAAkB;YAClC,MAAM,EAAE,kBAAkB;SAC3B;QACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACtE,CAAC,CAAC;IACH,IAAI,IAAI,IAAI,IAAI;QAAE,OAAO,IAAI,CAAC;IAC9B,OAAO,mBAAmB,CAAC,IAA2B,EAAE,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC;AACrE,CAAC;AAED,kFAAkF;AAClF,MAAM,UAAU,mBAAmB,CACjC,IAAyB,EACzB,KAAa;IAEb,MAAM,KAAK,GAAG,CAAC,IAAI,CAAC,MAAM,IAAI,EAAE,CAAC;SAC9B,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;SACvB,MAAM,CAAC,CAAC,CAAC,EAAiE,EAAE,CAC3E,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,CAAC,iBAAiB,KAAK,QAAQ,CAC/C,CAAC;IACJ,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACpC,MAAM,OAAO,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,iBAAiB,GAAG,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC5F,OAAO;QACL,aAAa,EAAE,aAAa,CAAC,OAAO,CAAC,iBAAiB,CAAC;QACvD,QAAQ,EAAE,YAAY,CAAC,OAAO,CAAC,SAAS,CAAC;QACzC,kBAAkB,EAAE,IAAI;QACxB,gBAAgB,EAAE,IAAI;QACtB,WAAW,EAAE,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE;QAC1C,MAAM,EAAE,aAAa;KACtB,CAAC;AACJ,CAAC;AAED,8FAA8F;AAC9F,SAAS,oBAAoB,CAAC,GAAsB,EAAE,WAAmB;IACvE,IAAI,GAAG,CAAC,wBAAwB;QAAE,OAAO,GAAG,CAAC,wBAAwB,CAAC;IACtE,IAAI,CAAC;QACH,MAAM,CAAC,GAAG,SAAS,CACjB,SAAS,EACT,CAAC,WAAW,EAAE,+DAA+D,CAAC,EAC9E,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,CACnC,CAAC;QACF,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM;YAAE,OAAO,IAAI,CAAC;QAC7C,MAAM,MAAM,GAAI,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,CAAyB,CAAC,MAAM,CAAC;QAC3E,OAAO,MAAM,IAAI,IAAI,CAAC;IACxB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC,CAAC,2CAA2C;IAC1D,CAAC;AACH,CAAC;AAED,SAAS,YAAY,CAAC,KAAgC;IACpD,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IACxB,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAC7B,OAAO,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AACjE,CAAC"}