organization · inferred from evidence
The organization maintaining the @google/genai library and Vertex AI service.
- googleapis Node client does not auto-refresh the access token ("Invalid Client" after expiry)
The trap is passing the access token to setCredentials. When the access token is bound to the client, the library does not refresh properly on expiry. The fix users verified: only pass the refresh token, not the access token (the access tok
- @google/genai@1.26.0 breaks Vertex AI ADC authentication with CREDENTIALS_MISSING 401
This was a regression in @google/genai v1.26.0 breaking Vertex AI ADC authentication. Verified resolution: upgrade to @google/genai v1.27.0: collaborator yyyu-google released 1.27.0 with the fix, and four separate users confirmed on the thr
- Structured outputs on gemini-2.5-pro-preview-03-25 came back wrapped in markdown with a stray ny prefix
If your structured output from gemini-2.5-pro-preview-03-25 comes back with a stray "ny" prefix and ```json fences, that was a model-side bug in that preview, not your SDK code. Google identified the root cause and rolled the fix out to the
- Google ADK: context caching with cached_content (constraints on tools and system instruction)
Context caching is supported in ADK now (closed as supported by a maintainer). Two constraints apply: when using cached content, the request must not also set tool config, tools, or system instruction (the Gemini API rejects that combinatio
- Google Secret Manager Could not load the default credentials from AWS Lambda nodejs client
The Google-recommended approach for AWS-to-GCP auth is Workload Identity Federation instead of long-lived service-account keys: configure a workload identity pool for the AWS account and use google.auth with the external-account credentials
- Access a private GitHub repository from a Cloud Build step (glide install fails)
Cloud Build steps have no GitHub credentials by default, so private repos are unreachable until you inject them. The recommended approach is to store a deploy key or token encrypted and pull it into the build: keep the SSH key in Cloud Stor
- GCS signed URLs die with SignatureDoesNotMatch days before expiry
This is by design, not a bug in your code: Google rotates the managed signing keys, so do not generate long-lived signed URLs once and store them. Either refresh them on a schedule (e.g. a scheduled Cloud Function that regenerates URLs ever
- Firebase deploy fails: "Cloud Runtime Config is currently experiencing issues, which is preventing your...
The root cause is server-side on Google's end: firebase deploy calls the Cloud Runtime Configuration API (runtimeconfig.googleapis.com) during functions deploys, and when that API 500s the deploy halts. In the June 2024 wave Firebase suppor