mirror of
https://github.com/Nezumi-2711/9router.git
synced 2026-09-22 20:00:47 +00:00
Cherry-picked from decolua/9router#141 (author: LinearSakana / zx <me@char.moe>) - Implement client identity spoofing with numeric enums (ideType: 9, pluginType: 2) - Add runtime platform detection for User-Agent and metadata - Implement per-connection session ID caching (binary-compatible format) - Add ANTIGRAVITY_HEADERS (X-Client-Name, X-Client-Version, x-goog-api-client) - Add X-Machine-Session-Id header injection - Align metadata/mode parameters across all Antigravity API calls - Implement double injection for system prompt (raw + [ignore] wrapped) - Rename internal anti-loop header to x-request-source for anonymity Skipped: commit 6 (signature side-channel caching) — kept DEFAULT_THINKING_GEMINI_SIGNATURE Co-authored-by: Cursor <cursoragent@cursor.com>
339 lines
9.6 KiB
JavaScript
339 lines
9.6 KiB
JavaScript
import crypto from "crypto";
|
|
import { platform, arch } from "os";
|
|
import open from "open";
|
|
import { ANTIGRAVITY_CONFIG } from "../constants/oauth.js";
|
|
import { getServerCredentials } from "../config/index.js";
|
|
import { startLocalServer } from "../utils/server.js";
|
|
import { spinner as createSpinner } from "../utils/ui.js";
|
|
|
|
/**
|
|
* Antigravity OAuth Service
|
|
* Uses standard OAuth2 Authorization Code flow (similar to Gemini)
|
|
*/
|
|
export class AntigravityService {
|
|
constructor() {
|
|
this.config = ANTIGRAVITY_CONFIG;
|
|
}
|
|
|
|
/**
|
|
* Build Antigravity authorization URL
|
|
*/
|
|
buildAuthUrl(redirectUri, state) {
|
|
const params = new URLSearchParams({
|
|
client_id: this.config.clientId,
|
|
response_type: "code",
|
|
redirect_uri: redirectUri,
|
|
scope: this.config.scopes.join(" "),
|
|
state: state,
|
|
access_type: "offline",
|
|
prompt: "consent",
|
|
});
|
|
|
|
return `${this.config.authorizeUrl}?${params.toString()}`;
|
|
}
|
|
|
|
/**
|
|
* Exchange authorization code for tokens
|
|
*/
|
|
async exchangeCode(code, redirectUri) {
|
|
const response = await fetch(this.config.tokenUrl, {
|
|
method: "POST",
|
|
headers: {
|
|
"Content-Type": "application/x-www-form-urlencoded",
|
|
Accept: "application/json",
|
|
},
|
|
body: new URLSearchParams({
|
|
grant_type: "authorization_code",
|
|
client_id: this.config.clientId,
|
|
client_secret: this.config.clientSecret,
|
|
code: code,
|
|
redirect_uri: redirectUri,
|
|
}),
|
|
});
|
|
|
|
if (!response.ok) {
|
|
const error = await response.text();
|
|
throw new Error(`Token exchange failed: ${error}`);
|
|
}
|
|
|
|
return await response.json();
|
|
}
|
|
|
|
/**
|
|
* Get user info from Google
|
|
*/
|
|
async getUserInfo(accessToken) {
|
|
const response = await fetch(`${this.config.userInfoUrl}?alt=json`, {
|
|
headers: {
|
|
Authorization: `Bearer ${accessToken}`,
|
|
Accept: "application/json",
|
|
},
|
|
});
|
|
|
|
if (!response.ok) {
|
|
const error = await response.text();
|
|
throw new Error(`Failed to get user info: ${error}`);
|
|
}
|
|
|
|
return await response.json();
|
|
}
|
|
|
|
/**
|
|
* Get common headers for Antigravity API calls
|
|
*/
|
|
getApiHeaders(accessToken) {
|
|
return {
|
|
"Authorization": `Bearer ${accessToken}`,
|
|
"Content-Type": "application/json",
|
|
"User-Agent": this.config.loadCodeAssistUserAgent,
|
|
"X-Goog-Api-Client": this.config.loadCodeAssistApiClient,
|
|
"Client-Metadata": this.config.loadCodeAssistClientMetadata,
|
|
};
|
|
}
|
|
|
|
/**
|
|
* Get metadata object for API calls
|
|
* Uses numeric enum values matching Antigravity binary specifications
|
|
*/
|
|
getMetadata() {
|
|
const os = platform();
|
|
const architecture = arch();
|
|
let platformEnum = 0; // UNSPECIFIED
|
|
if (os === "darwin") platformEnum = architecture === "arm64" ? 2 : 1;
|
|
else if (os === "linux") platformEnum = architecture === "arm64" ? 4 : 3;
|
|
else if (os === "win32") platformEnum = 5;
|
|
|
|
return {
|
|
ideType: 9, // ANTIGRAVITY
|
|
platform: platformEnum,
|
|
pluginType: 2, // GEMINI
|
|
};
|
|
}
|
|
|
|
/**
|
|
* Fetch Project ID and Tier from loadCodeAssist API
|
|
*/
|
|
async loadCodeAssist(accessToken) {
|
|
const response = await fetch(this.config.loadCodeAssistEndpoint, {
|
|
method: "POST",
|
|
headers: this.getApiHeaders(accessToken),
|
|
body: JSON.stringify({ metadata: this.getMetadata(), mode: 1 }),
|
|
});
|
|
|
|
if (!response.ok) {
|
|
const errorText = await response.text();
|
|
throw new Error(`Failed to load code assist: ${errorText}`);
|
|
}
|
|
|
|
const data = await response.json();
|
|
|
|
// Extract project ID
|
|
let projectId = data.cloudaicompanionProject;
|
|
if (typeof projectId === 'object' && projectId !== null && projectId.id) {
|
|
projectId = projectId.id;
|
|
}
|
|
|
|
// Extract tier ID (default to legacy-tier)
|
|
let tierId = "legacy-tier";
|
|
if (Array.isArray(data.allowedTiers)) {
|
|
for (const tier of data.allowedTiers) {
|
|
if (tier.isDefault && tier.id) {
|
|
tierId = tier.id.trim();
|
|
break;
|
|
}
|
|
}
|
|
}
|
|
|
|
return { projectId, tierId, raw: data };
|
|
}
|
|
|
|
/**
|
|
* Onboard user to enable Gemini Code Assist for the project
|
|
*/
|
|
async onboardUser(accessToken, projectId, tierId) {
|
|
const response = await fetch(this.config.onboardUserEndpoint, {
|
|
method: "POST",
|
|
headers: this.getApiHeaders(accessToken),
|
|
body: JSON.stringify({
|
|
tierId,
|
|
metadata: this.getMetadata(),
|
|
cloudaicompanionProject: projectId,
|
|
mode: 1,
|
|
}),
|
|
});
|
|
|
|
if (!response.ok) {
|
|
const errorText = await response.text();
|
|
throw new Error(`Failed to onboard user: ${errorText}`);
|
|
}
|
|
|
|
return await response.json();
|
|
}
|
|
|
|
/**
|
|
* Complete onboarding flow with retry
|
|
*/
|
|
async completeOnboarding(accessToken, projectId, tierId, maxRetries = 10) {
|
|
for (let i = 0; i < maxRetries; i++) {
|
|
const result = await this.onboardUser(accessToken, projectId, tierId);
|
|
|
|
if (result.done === true) {
|
|
// Extract final project ID from response
|
|
let finalProjectId = projectId;
|
|
if (result.response?.cloudaicompanionProject) {
|
|
const respProject = result.response.cloudaicompanionProject;
|
|
if (typeof respProject === 'string') {
|
|
finalProjectId = respProject.trim();
|
|
} else if (respProject.id) {
|
|
finalProjectId = respProject.id.trim();
|
|
}
|
|
}
|
|
return { success: true, projectId: finalProjectId };
|
|
}
|
|
|
|
// Wait 5 seconds before retry
|
|
await new Promise(resolve => setTimeout(resolve, 5000));
|
|
}
|
|
|
|
throw new Error("Onboarding timeout - please try again");
|
|
}
|
|
|
|
/**
|
|
* Fetch Project ID from loadCodeAssist API (legacy method for compatibility)
|
|
*/
|
|
async fetchProjectId(accessToken) {
|
|
const { projectId } = await this.loadCodeAssist(accessToken);
|
|
if (!projectId) {
|
|
throw new Error("No cloudaicompanionProject found in response");
|
|
}
|
|
return projectId;
|
|
}
|
|
|
|
/**
|
|
* Save Antigravity tokens to server
|
|
*/
|
|
async saveTokens(tokens, userInfo, projectId) {
|
|
const { server, token, userId } = getServerCredentials();
|
|
|
|
const response = await fetch(`${server}/api/cli/providers/antigravity`, {
|
|
method: "POST",
|
|
headers: {
|
|
"Content-Type": "application/json",
|
|
Authorization: `Bearer ${token}`,
|
|
"X-User-Id": userId,
|
|
},
|
|
body: JSON.stringify({
|
|
accessToken: tokens.access_token,
|
|
refreshToken: tokens.refresh_token,
|
|
expiresIn: tokens.expires_in,
|
|
scope: tokens.scope,
|
|
email: userInfo.email,
|
|
projectId: projectId, // Send projectId to server
|
|
}),
|
|
});
|
|
|
|
if (!response.ok) {
|
|
const error = await response.json();
|
|
throw new Error(error.error || "Failed to save tokens");
|
|
}
|
|
|
|
return await response.json();
|
|
}
|
|
|
|
/**
|
|
* Complete Antigravity OAuth flow
|
|
*/
|
|
async connect() {
|
|
const spinner = createSpinner("Starting Antigravity OAuth...").start();
|
|
|
|
try {
|
|
spinner.text = "Starting local server...";
|
|
|
|
// Start local server for callback
|
|
let callbackParams = null;
|
|
const { port, close } = await startLocalServer((params) => {
|
|
callbackParams = params;
|
|
});
|
|
|
|
const redirectUri = `http://localhost:${port}/callback`;
|
|
spinner.succeed(`Local server started on port ${port}`);
|
|
|
|
// Generate state
|
|
const state = crypto.randomBytes(32).toString("base64url");
|
|
|
|
// Build authorization URL
|
|
const authUrl = this.buildAuthUrl(redirectUri, state);
|
|
|
|
console.log("\nOpening browser for Antigravity authentication...");
|
|
console.log(`If browser doesn't open, visit:\n${authUrl}\n`);
|
|
|
|
// Open browser
|
|
await open(authUrl);
|
|
|
|
// Wait for callback
|
|
spinner.start("Waiting for Antigravity authorization...");
|
|
|
|
await new Promise((resolve, reject) => {
|
|
const timeout = setTimeout(() => {
|
|
reject(new Error("Authentication timeout (5 minutes)"));
|
|
}, 300000);
|
|
|
|
const checkInterval = setInterval(() => {
|
|
if (callbackParams) {
|
|
clearInterval(checkInterval);
|
|
clearTimeout(timeout);
|
|
resolve();
|
|
}
|
|
}, 100);
|
|
});
|
|
|
|
close();
|
|
|
|
if (callbackParams.error) {
|
|
throw new Error(callbackParams.error_description || callbackParams.error);
|
|
}
|
|
|
|
if (!callbackParams.code) {
|
|
throw new Error("No authorization code received");
|
|
}
|
|
|
|
spinner.start("Exchanging code for tokens...");
|
|
|
|
// Exchange code for tokens
|
|
const tokens = await this.exchangeCode(callbackParams.code, redirectUri);
|
|
|
|
spinner.text = "Fetching user info...";
|
|
|
|
// Get user info
|
|
const userInfo = await this.getUserInfo(tokens.access_token);
|
|
|
|
spinner.text = "Loading Code Assist configuration...";
|
|
|
|
// Load Code Assist to get project ID and tier
|
|
const { projectId, tierId } = await this.loadCodeAssist(tokens.access_token);
|
|
|
|
if (!projectId) {
|
|
throw new Error("No Google Cloud Project found. Please ensure you have a GCP project with Gemini Code Assist enabled.");
|
|
}
|
|
|
|
spinner.text = "Onboarding to Gemini Code Assist...";
|
|
|
|
// Complete onboarding to enable Gemini Code Assist
|
|
const onboardResult = await this.completeOnboarding(tokens.access_token, projectId, tierId);
|
|
const finalProjectId = onboardResult.projectId || projectId;
|
|
|
|
spinner.text = "Saving tokens to server...";
|
|
|
|
// Save tokens to server
|
|
await this.saveTokens(tokens, userInfo, finalProjectId);
|
|
|
|
spinner.succeed(`Antigravity connected successfully! (${userInfo.email}, Project: ${finalProjectId})`);
|
|
return true;
|
|
} catch (error) {
|
|
spinner.fail(`Failed: ${error.message}`);
|
|
throw error;
|
|
}
|
|
}
|
|
}
|
|
|