Something went wrong. Try again.
fork of prime agent with changes i want but are not upstreamable probqbly (and some fixes)
Something went wrong. Try again.
8.0 kB · 221 lines
TypeScript
at main
123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222import type { existsSync, readFileSync } from "node:fs";import type { homedir } from "node:os";import type { join } from "node:path";import type { KnownProvider } from "./types.js";
// NEVER convert to top-level runtime imports - breaks browser/Vite buildslet _existsSync: typeof existsSync | null = null;let _readFileSync: typeof readFileSync | null = null;let _homedir: typeof homedir | null = null;let _join: typeof join | null = null;
type DynamicImport = (specifier: string) => Promise<unknown>;
const dynamicImport: DynamicImport = (specifier) => import(specifier);const NODE_FS_SPECIFIER = "node:" + "fs";const NODE_OS_SPECIFIER = "node:" + "os";const NODE_PATH_SPECIFIER = "node:" + "path";
if (typeof process !== "undefined" && (process.versions?.node || process.versions?.bun)) { dynamicImport(NODE_FS_SPECIFIER).then((m) => { _existsSync = (m as { existsSync: typeof existsSync }).existsSync; _readFileSync = (m as { readFileSync: typeof readFileSync }).readFileSync; }); dynamicImport(NODE_OS_SPECIFIER).then((m) => { _homedir = (m as { homedir: typeof homedir }).homedir; }); dynamicImport(NODE_PATH_SPECIFIER).then((m) => { _join = (m as { join: typeof join }).join; });}
let _procEnvCache: Map<string, string> | null = null;
/** * Fallback for https://github.com/oven-sh/bun/issues/27802 * Bun compiled binaries have an empty `process.env` inside sandbox * environments on Linux. We can recover the env from `/proc/self/environ`. */function getProcEnv(key: string): string | undefined { if (typeof process === "undefined" || !process.versions?.bun) return undefined;
// If process.env already has entries, the bug is not triggered. if (Object.keys(process.env).length > 0) return undefined;
if (_procEnvCache === null) { _procEnvCache = new Map(); try { const { readFileSync: readProcEnvFile } = require("node:fs") as { readFileSync: typeof readFileSync }; const data = readProcEnvFile("/proc/self/environ", "utf-8"); for (const entry of data.split("\0")) { const idx = entry.indexOf("="); if (idx > 0) { _procEnvCache.set(entry.slice(0, idx), entry.slice(idx + 1)); } } } catch { // /proc/self/environ may not be readable. } }
return _procEnvCache.get(key);}
let cachedVertexAdcCredentialsExists: boolean | null = null;
function hasVertexAdcCredentials(): boolean { if (cachedVertexAdcCredentialsExists === null) { // If node modules haven't loaded yet (async import race at startup), // return false WITHOUT caching so the next call retries once they're ready. // Only cache false permanently in a browser environment where fs is never available. if (!_existsSync || !_homedir || !_join) { const isNode = typeof process !== "undefined" && (process.versions?.node || process.versions?.bun); if (!isNode) { // Definitively in a browser — safe to cache false permanently cachedVertexAdcCredentialsExists = false; } return false; }
const gacPath = process.env.GOOGLE_APPLICATION_CREDENTIALS || getProcEnv("GOOGLE_APPLICATION_CREDENTIALS"); if (gacPath) { cachedVertexAdcCredentialsExists = _existsSync(gacPath); } else { cachedVertexAdcCredentialsExists = _existsSync( _join(_homedir(), ".config", "gcloud", "application_default_credentials.json"), ); } } return cachedVertexAdcCredentialsExists;}
function getApiKeyEnvVars(provider: string): readonly string[] | undefined { if (provider === "github-copilot") { return ["COPILOT_GITHUB_TOKEN", "GH_TOKEN", "GITHUB_TOKEN"]; }
// ANTHROPIC_OAUTH_TOKEN takes precedence over ANTHROPIC_API_KEY if (provider === "anthropic") { return ["ANTHROPIC_OAUTH_TOKEN", "ANTHROPIC_API_KEY"]; }
const envMap: Record<string, string> = { openai: "OPENAI_API_KEY", "azure-openai-responses": "AZURE_OPENAI_API_KEY", "prime-inference": "PRIME_API_KEY", deepseek: "DEEPSEEK_API_KEY", google: "GEMINI_API_KEY", "google-vertex": "GOOGLE_CLOUD_API_KEY", groq: "GROQ_API_KEY", cerebras: "CEREBRAS_API_KEY", xai: "XAI_API_KEY", openrouter: "OPENROUTER_API_KEY", "vercel-ai-gateway": "AI_GATEWAY_API_KEY", zai: "ZAI_API_KEY", mistral: "MISTRAL_API_KEY", minimax: "MINIMAX_API_KEY", "minimax-cn": "MINIMAX_CN_API_KEY", moonshotai: "MOONSHOT_API_KEY", "moonshotai-cn": "MOONSHOT_API_KEY", huggingface: "HF_TOKEN", fireworks: "FIREWORKS_API_KEY", opencode: "OPENCODE_API_KEY", "opencode-go": "OPENCODE_API_KEY", "kimi-coding": "KIMI_API_KEY", "cloudflare-workers-ai": "CLOUDFLARE_API_KEY", "cloudflare-ai-gateway": "CLOUDFLARE_API_KEY", xiaomi: "XIAOMI_API_KEY", "xiaomi-token-plan-cn": "XIAOMI_TOKEN_PLAN_CN_API_KEY", "xiaomi-token-plan-ams": "XIAOMI_TOKEN_PLAN_AMS_API_KEY", "xiaomi-token-plan-sgp": "XIAOMI_TOKEN_PLAN_SGP_API_KEY", };
const envVar = envMap[provider]; return envVar ? [envVar] : undefined;}
/** * Find configured environment variables that can provide an API key for a provider. * * This only reports actual API key variables. It intentionally excludes ambient * credential sources such as AWS profiles, AWS IAM credentials, and Google * Application Default Credentials. */export function findEnvKeys(provider: KnownProvider): string[] | undefined;export function findEnvKeys(provider: string): string[] | undefined;export function findEnvKeys(provider: string): string[] | undefined { const envVars = getApiKeyEnvVars(provider); if (!envVars) return undefined;
const found = envVars.filter((envVar) => !!process.env[envVar] || !!getProcEnv(envVar)); return found.length > 0 ? found : undefined;}
/** * Get API key for provider from known environment variables, e.g. OPENAI_API_KEY. * * Will not return API keys for providers that require OAuth tokens. */export function getEnvApiKey(provider: KnownProvider): string | undefined;export function getEnvApiKey(provider: string): string | undefined;export function getEnvApiKey(provider: string): string | undefined { const envKeys = findEnvKeys(provider); if (envKeys?.[0]) { return process.env[envKeys[0]] || getProcEnv(envKeys[0]); }
if (provider === "google-vertex") { const hasCredentials = hasVertexAdcCredentials(); const hasProject = !!( process.env.GOOGLE_CLOUD_PROJECT || process.env.GCLOUD_PROJECT || getProcEnv("GOOGLE_CLOUD_PROJECT") || getProcEnv("GCLOUD_PROJECT") ); const hasLocation = !!(process.env.GOOGLE_CLOUD_LOCATION || getProcEnv("GOOGLE_CLOUD_LOCATION"));
if (hasCredentials && hasProject && hasLocation) { return "<authenticated>"; } }
if (provider === "amazon-bedrock") { if ( process.env.AWS_PROFILE || (process.env.AWS_ACCESS_KEY_ID && process.env.AWS_SECRET_ACCESS_KEY) || process.env.AWS_BEARER_TOKEN_BEDROCK || process.env.AWS_CONTAINER_CREDENTIALS_RELATIVE_URI || process.env.AWS_CONTAINER_CREDENTIALS_FULL_URI || process.env.AWS_WEB_IDENTITY_TOKEN_FILE || getProcEnv("AWS_PROFILE") || (getProcEnv("AWS_ACCESS_KEY_ID") && getProcEnv("AWS_SECRET_ACCESS_KEY")) || getProcEnv("AWS_BEARER_TOKEN_BEDROCK") || getProcEnv("AWS_CONTAINER_CREDENTIALS_RELATIVE_URI") || getProcEnv("AWS_CONTAINER_CREDENTIALS_FULL_URI") || getProcEnv("AWS_WEB_IDENTITY_TOKEN_FILE") ) { return "<authenticated>"; } }
return undefined;}
export function getPrimeTeamId(): string | undefined { const fromEnv = process.env.PRIME_TEAM_ID || getProcEnv("PRIME_TEAM_ID"); if (fromEnv?.trim()) return fromEnv.trim();
if (!_existsSync || !_readFileSync || !_homedir || !_join) return undefined; const configPath = _join(_homedir(), ".prime", "config.json"); if (!_existsSync(configPath)) return undefined; try { const parsed = JSON.parse(_readFileSync(configPath, "utf-8")) as unknown; if (parsed && typeof parsed === "object" && !Array.isArray(parsed)) { const teamId = (parsed as Record<string, unknown>).team_id; if (typeof teamId === "string" && teamId.trim()) return teamId.trim(); } } catch { // Treat unreadable or malformed config as no configured team. } return undefined;}