squidclaw 3.0.33 → 3.0.34

package/dist/plugin-sdk/api-key-rotation-k1ZNheUH.js

@@ -0,0 +1,181 @@
+import { jn as normalizeProviderId } from "./config-B16xKqSo.js";
+import { r as formatErrorMessage } from "./errors-B8oJXuCF.js";
+
+//#region src/infra/gemini-auth.ts
+/**
+* Shared Gemini authentication utilities.
+*
+* Supports both traditional API keys and OAuth JSON format.
+*/
+/**
+* Parse Gemini API key and return appropriate auth headers.
+*
+* OAuth format: `{"token": "...", "projectId": "..."}`
+*
+* @param apiKey - Either a traditional API key string or OAuth JSON
+* @returns Headers object with appropriate authentication
+*/
+function parseGeminiAuth(apiKey) {
+	if (apiKey.startsWith("{")) try {
+		const parsed = JSON.parse(apiKey);
+		if (typeof parsed.token === "string" && parsed.token) return { headers: {
+			Authorization: `Bearer ${parsed.token}`,
+			"Content-Type": "application/json"
+		} };
+	} catch {}
+	return { headers: {
+		"x-goog-api-key": apiKey,
+		"Content-Type": "application/json"
+	} };
+}
+
+//#endregion
+//#region src/agents/live-auth-keys.ts
+const KEY_SPLIT_RE = /[\s,;]+/g;
+const GOOGLE_LIVE_SINGLE_KEY = "SQUIDCLAW_LIVE_GEMINI_KEY";
+const PROVIDER_PREFIX_OVERRIDES = {
+	google: "GEMINI",
+	"google-vertex": "GEMINI"
+};
+const PROVIDER_API_KEY_CONFIG = {
+	anthropic: {
+		liveSingle: "SQUIDCLAW_LIVE_ANTHROPIC_KEY",
+		listVar: "SQUIDCLAW_LIVE_ANTHROPIC_KEYS",
+		primaryVar: "ANTHROPIC_API_KEY",
+		prefixedVar: "ANTHROPIC_API_KEY_"
+	},
+	google: {
+		liveSingle: GOOGLE_LIVE_SINGLE_KEY,
+		listVar: "GEMINI_API_KEYS",
+		primaryVar: "GEMINI_API_KEY",
+		prefixedVar: "GEMINI_API_KEY_"
+	},
+	"google-vertex": {
+		liveSingle: GOOGLE_LIVE_SINGLE_KEY,
+		listVar: "GEMINI_API_KEYS",
+		primaryVar: "GEMINI_API_KEY",
+		prefixedVar: "GEMINI_API_KEY_"
+	},
+	openai: {
+		liveSingle: "SQUIDCLAW_LIVE_OPENAI_KEY",
+		listVar: "OPENAI_API_KEYS",
+		primaryVar: "OPENAI_API_KEY",
+		prefixedVar: "OPENAI_API_KEY_"
+	}
+};
+function parseKeyList(raw) {
+	if (!raw) return [];
+	return raw.split(KEY_SPLIT_RE).map((value) => value.trim()).filter(Boolean);
+}
+function collectEnvPrefixedKeys(prefix) {
+	const keys = [];
+	for (const [name, value] of Object.entries(process.env)) {
+		if (!name.startsWith(prefix)) continue;
+		const trimmed = value?.trim();
+		if (!trimmed) continue;
+		keys.push(trimmed);
+	}
+	return keys;
+}
+function resolveProviderApiKeyConfig(provider) {
+	const normalized = normalizeProviderId(provider);
+	const custom = PROVIDER_API_KEY_CONFIG[normalized];
+	const base = PROVIDER_PREFIX_OVERRIDES[normalized] ?? normalized.toUpperCase().replace(/-/g, "_");
+	const liveSingle = custom?.liveSingle ?? `SQUIDCLAW_LIVE_${base}_KEY`;
+	const listVar = custom?.listVar ?? `${base}_API_KEYS`;
+	const primaryVar = custom?.primaryVar ?? `${base}_API_KEY`;
+	const prefixedVar = custom?.prefixedVar ?? `${base}_API_KEY_`;
+	if (normalized === "google" || normalized === "google-vertex") return {
+		liveSingle,
+		listVar,
+		primaryVar,
+		prefixedVar,
+		fallbackVars: ["GOOGLE_API_KEY"]
+	};
+	return {
+		liveSingle,
+		listVar,
+		primaryVar,
+		prefixedVar,
+		fallbackVars: []
+	};
+}
+function collectProviderApiKeys(provider) {
+	const config = resolveProviderApiKeyConfig(provider);
+	const forcedSingle = config.liveSingle ? process.env[config.liveSingle]?.trim() : void 0;
+	if (forcedSingle) return [forcedSingle];
+	const fromList = parseKeyList(config.listVar ? process.env[config.listVar] : void 0);
+	const primary = config.primaryVar ? process.env[config.primaryVar]?.trim() : void 0;
+	const fromPrefixed = config.prefixedVar ? collectEnvPrefixedKeys(config.prefixedVar) : [];
+	const fallback = config.fallbackVars.map((envVar) => process.env[envVar]?.trim()).filter(Boolean);
+	const seen = /* @__PURE__ */ new Set();
+	const add = (value) => {
+		if (!value) return;
+		if (seen.has(value)) return;
+		seen.add(value);
+	};
+	for (const value of fromList) add(value);
+	add(primary);
+	for (const value of fromPrefixed) add(value);
+	for (const value of fallback) add(value);
+	return Array.from(seen);
+}
+function isApiKeyRateLimitError(message) {
+	const lower = message.toLowerCase();
+	if (lower.includes("rate_limit")) return true;
+	if (lower.includes("rate limit")) return true;
+	if (lower.includes("429")) return true;
+	if (lower.includes("quota exceeded") || lower.includes("quota_exceeded")) return true;
+	if (lower.includes("resource exhausted") || lower.includes("resource_exhausted")) return true;
+	if (lower.includes("too many requests")) return true;
+	return false;
+}
+
+//#endregion
+//#region src/agents/api-key-rotation.ts
+function dedupeApiKeys(raw) {
+	const seen = /* @__PURE__ */ new Set();
+	const keys = [];
+	for (const value of raw) {
+		const apiKey = value.trim();
+		if (!apiKey || seen.has(apiKey)) continue;
+		seen.add(apiKey);
+		keys.push(apiKey);
+	}
+	return keys;
+}
+function collectProviderApiKeysForExecution(params) {
+	const { primaryApiKey, provider } = params;
+	return dedupeApiKeys([primaryApiKey?.trim() ?? "", ...collectProviderApiKeys(provider)]);
+}
+async function executeWithApiKeyRotation(params) {
+	const keys = dedupeApiKeys(params.apiKeys);
+	if (keys.length === 0) throw new Error(`No API keys configured for provider "${params.provider}".`);
+	let lastError;
+	for (let attempt = 0; attempt < keys.length; attempt += 1) {
+		const apiKey = keys[attempt];
+		try {
+			return await params.execute(apiKey);
+		} catch (error) {
+			lastError = error;
+			const message = formatErrorMessage(error);
+			if (!(params.shouldRetry ? params.shouldRetry({
+				apiKey,
+				error,
+				attempt,
+				message
+			}) : isApiKeyRateLimitError(message)) || attempt + 1 >= keys.length) break;
+			params.onRetry?.({
+				apiKey,
+				error,
+				attempt,
+				message
+			});
+		}
+	}
+	if (lastError === void 0) throw new Error(`Failed to run API request for ${params.provider}.`);
+	throw lastError;
+}
+
+//#endregion
+export { executeWithApiKeyRotation as n, parseGeminiAuth as r, collectProviderApiKeysForExecution as t };

package/dist/plugin-sdk/audio-preflight-Be1sKsob.js

@@ -0,0 +1,69 @@
+import "./run-with-concurrency-vfuRiXdY.js";
+import "./accounts-BXFDqY90.js";
+import "./paths-8xF5kDne.js";
+import "./github-copilot-token-Dy-0-Kh3.js";
+import "./config-B16xKqSo.js";
+import { L as logVerbose, z as shouldLogVerbose } from "./logger-DDdrdbDu.js";
+import "./thinking-DT2ZR60x.js";
+import "./image-ops-BBY2fn9x.js";
+import "./pi-embedded-helpers-BeYjP1MW.js";
+import "./plugins-rivB8KaQ.js";
+import "./accounts-DxiB_4z4.js";
+import "./accounts-DU7Js54-.js";
+import "./paths-CjFcHB_C.js";
+import "./redact-BoNEjbpF.js";
+import "./errors-B8oJXuCF.js";
+import "./path-alias-guards-BX-3FprC.js";
+import "./fs-safe-BW1ypSDS.js";
+import "./ssrf-DvsjfpC2.js";
+import "./fetch-guard-Cgyq6Jv9.js";
+import "./local-roots-C1ETRlaC.js";
+import "./tool-images-DroS1EaM.js";
+import { f as isAudioAttachment, i as normalizeMediaAttachments, o as resolveMediaAttachmentLocalRoots, t as runAudioTranscription } from "./audio-transcription-runner-jhHyCc_7.js";
+import "./skills-DSbDUvmU.js";
+import "./chrome-DOnBMnlx.js";
+import "./store-DG90hxe6.js";
+import "./image-BPXnvxYL.js";
+import "./api-key-rotation-k1ZNheUH.js";
+import "./proxy-fetch-ZPEvp58f.js";
+
+//#region src/media-understanding/audio-preflight.ts
+/**
+* Transcribes the first audio attachment BEFORE mention checking.
+* This allows voice notes to be processed in group chats with requireMention: true.
+* Returns the transcript or undefined if transcription fails or no audio is found.
+*/
+async function transcribeFirstAudio(params) {
+	const { ctx, cfg } = params;
+	const audioConfig = cfg.tools?.media?.audio;
+	if (!audioConfig || audioConfig.enabled === false) return;
+	const attachments = normalizeMediaAttachments(ctx);
+	if (!attachments || attachments.length === 0) return;
+	const firstAudio = attachments.find((att) => att && isAudioAttachment(att) && !att.alreadyTranscribed);
+	if (!firstAudio) return;
+	if (shouldLogVerbose()) logVerbose(`audio-preflight: transcribing attachment ${firstAudio.index} for mention check`);
+	try {
+		const { transcript } = await runAudioTranscription({
+			ctx,
+			cfg,
+			attachments,
+			agentDir: params.agentDir,
+			providers: params.providers,
+			activeModel: params.activeModel,
+			localPathRoots: resolveMediaAttachmentLocalRoots({
+				cfg,
+				ctx
+			})
+		});
+		if (!transcript) return;
+		firstAudio.alreadyTranscribed = true;
+		if (shouldLogVerbose()) logVerbose(`audio-preflight: transcribed ${transcript.length} chars from attachment ${firstAudio.index}`);
+		return transcript;
+	} catch (err) {
+		if (shouldLogVerbose()) logVerbose(`audio-preflight: transcription failed: ${String(err)}`);
+		return;
+	}
+}
+
+//#endregion
+export { transcribeFirstAudio };