9router/open-sse/handlers/videoProviders/vertex.js

// Vertex AI (Veo) video jobs.
//
// Vertex does NOT speak the OpenAI-ish /v1/videos shape, so unlike OpenRouter
// this adapter translates both directions:
//   create → POST {model}:predictLongRunning  { instances[], parameters{} } → { name }
//   poll   → POST {model}:fetchPredictOperation { operationName } → { done, response }
// Docs: https://cloud.google.com/vertex-ai/generative-ai/docs/model-reference/veo-video-generation
//
// The operation name is a resource path (contains "/"), so it is base64url-encoded
// into the job id returned to the client — GET /v1/videos/{id} stays a flat path.
import { parseVertexSaJson, refreshVertexToken } from "../../services/tokenRefresh.js";

const DEFAULT_LOCATION = "us-central1";

const encodeJobId = (name) => Buffer.from(name, "utf8").toString("base64url");

// Operation name shape: projects/{p}/locations/{l}/publishers/{pub}/models/{m}/operations/{op}.
// Anchored and single-segment-per-field so a decoded path can never carry `..` or a
// host-changing prefix into the request URL.
const OPERATION_NAME_RE = /^projects\/[^/]+\/locations\/[^/]+\/publishers\/[^/]+\/models\/[^/]+\/operations\/[^/]+$/;

function modelPathOf(operationName) {
  return operationName.slice(0, operationName.indexOf("/operations/"));
}

function decodeJobId(id) {
  const raw = String(id ?? "");
  // Buffer.from(x, "base64url") silently drops invalid characters instead of
  // throwing, so only ids that re-encode byte-for-byte are accepted.
  if (!raw || raw.length > 1024 || !/^[A-Za-z0-9_-]+$/.test(raw)) return null;
  const decoded = Buffer.from(raw, "base64url").toString("utf8");
  if (Buffer.from(decoded, "utf8").toString("base64url") !== raw) return null;
  return OPERATION_NAME_RE.test(decoded) ? decoded : null;
}

async function resolveAuth(credentials, log) {
  const saJson = parseVertexSaJson(credentials?.apiKey);
  const projectId =
    saJson?.project_id ||
    credentials?.projectId ||
    credentials?.providerSpecificData?.projectId;
  const location = credentials?.providerSpecificData?.location || DEFAULT_LOCATION;

  if (!projectId) {
    return { error: "Vertex video requires a project_id — use Service Account JSON or set providerSpecificData.projectId" };
  }

  let token = credentials?.accessToken;
  if (saJson) {
    const minted = await refreshVertexToken(saJson, log);
    if (!minted?.accessToken) return { error: "Vertex video: failed to mint access token from service account JSON" };
    token = minted.accessToken;
  }
  if (!token) return { error: "Vertex video requires Service Account JSON or an OAuth access token (raw API keys are not supported)" };

  return { token, projectId, location };
}

/** OpenAI-ish video body → Vertex predictLongRunning body. */
function toVertexBody(body) {
  const instance = { prompt: body.prompt };
  // Image-to-video: accept the Vertex-native shape or a bare data URL / base64 string.
  const image = body.image ?? body.image_url;
  if (image && typeof image === "object") {
    instance.image = image;
  } else if (typeof image === "string") {
    const match = image.match(/^data:([^;]+);base64,(.*)$/s);
    instance.image = match
      ? { bytesBase64Encoded: match[2], mimeType: match[1] }
      : { gcsUri: image };
  }
  if (body.video && typeof body.video === "object") instance.video = body.video;

  const parameters = {};
  if (body.n != null) parameters.sampleCount = Number(body.n);
  if (body.duration != null) parameters.durationSeconds = Number(body.duration);
  if (body.aspect_ratio) parameters.aspectRatio = body.aspect_ratio;
  if (body.resolution) parameters.resolution = body.resolution;
  if (body.seed != null) parameters.seed = body.seed;
  if (body.negative_prompt) parameters.negativePrompt = body.negative_prompt;
  // Without storageUri Vertex returns inline base64 bytes; a GCS bucket keeps
  // the poll response small and is what production callers want.
  if (body.storage_uri) parameters.storageUri = body.storage_uri;
  if (body.generate_audio != null) parameters.generateAudio = !!body.generate_audio;

  return { instances: [instance], ...(Object.keys(parameters).length ? { parameters } : {}) };
}

/** Vertex operation → the async-job shape 9Router clients already poll for. */
function fromVertexOperation(json) {
  if (!json?.name) return json;
  const id = encodeJobId(json.name);
  if (json.error) {
    return { id, request_id: id, status: "failed", error: json.error };
  }
  if (!json.done) {
    return { id, request_id: id, status: "pending" };
  }
  const samples =
    json.response?.videos ||
    json.response?.generateVideoResponse?.generatedSamples ||
    [];
  const videos = samples.map((s) => ({
    url: s.gcsUri || s.video?.uri || s.uri || null,
    b64_json: s.bytesBase64Encoded || s.video?.bytesBase64Encoded || null,
    mime_type: s.mimeType || s.video?.mimeType || "video/mp4",
  }));
  return { id, request_id: id, status: "completed", video: videos[0] || null, videos };
}

export default {
  async buildRequest({ config, action, requestId, rawBody, contentType, credentials, log }) {
    if (contentType && !contentType.includes("application/json")) {
      return { error: "Vertex video requires an application/json body" };
    }

    const auth = await resolveAuth(credentials, log);
    if (auth.error) return { error: auth.error };
    const { token, projectId, location } = auth;
    const base = (config.baseUrl || "https://aiplatform.googleapis.com").replace(/\/$/, "");
    const headers = { Accept: "application/json", "Content-Type": "application/json", Authorization: `Bearer ${token}` };

    if (requestId) {
      const operationName = decodeJobId(requestId);
      if (!operationName) return { error: "Invalid Vertex video job id" };
      return {
        method: "POST",
        url: `${base}/v1/${modelPathOf(operationName)}:fetchPredictOperation`,
        headers,
        body: JSON.stringify({ operationName }),
      };
    }

    if (action !== "generations") {
      // ponytail: Veo extend/edit go through generations with `video`/`image` in the body.
      return { error: `Vertex video supports 'generations' only (got '${action}')` };
    }

    let body;
    try {
      body = JSON.parse(typeof rawBody === "string" ? rawBody : rawBody.toString("utf8"));
    } catch {
      return { error: "Invalid JSON body" };
    }
    if (!body.model) return { error: "Vertex video requires a model (e.g. vertex/veo-3.1-generate-preview)" };
    // Plain model id only — a path segment carrying "/" or ".." would rewrite the URL.
    if (!/^[A-Za-z0-9._-]+$/.test(body.model)) return { error: "Invalid Vertex video model id" };
    if (!body.prompt && !body.image && !body.image_url) return { error: "Vertex video requires a prompt or an image" };

    return {
      method: "POST",
      url: `${base}/v1/projects/${projectId}/locations/${location}/publishers/google/models/${body.model}:predictLongRunning`,
      headers,
      body: JSON.stringify(toVertexBody(body)),
    };
  },

  transformResponse: fromVertexOperation,
};