@anthonyhaussman/opencode-agy-auth 1.1.18 → 1.1.19-alpha.0

package/README.md

@@ -9,6 +9,16 @@ An [OpenCode](https://opencode.ai/) authentication plugin that enables seamless
 - **Quota Tracking**: Injects the `agy_quota` tool into OpenCode to check usage limits directly.
 - **Traffic Simulation**: Maintains background heartbeat with `agy` servers.
 
+## Prerequisites
+
+The plugin dynamically resolves Google OAuth credentials at runtime using one of the following methods:
+
+1. **Installed `agy` / `antigravity` CLI binary (recommended)**:
+   - Ensure `agy` or `antigravity` is installed and available in your `PATH`.
+   - Alternatively, specify the binary path using the `AGY_BIN_PATH` environment variable.
+2. **Environment variables (headless/CI or standalone environments)**:
+   - Set `AGY_CLIENT_ID` (or `GOOGLE_AGY_CLIENT_ID`) and `AGY_CLIENT_SECRET` (or `GOOGLE_AGY_CLIENT_SECRET`).
+
 ## Installation
 
 Install the plugin from npm (or directly using local file configurations if developing):
@@ -42,6 +52,9 @@ You can switch your active OpenCode provider to `agy` or let the plugin inject a
 
 If you are running OpenCode in environments with specific requirements for Antigravity, you can use the following environment variables:
 
+- `AGY_BIN_PATH`: Explicit path to the `agy` / `antigravity` CLI executable.
+- `AGY_CLIENT_ID` / `GOOGLE_AGY_CLIENT_ID`: Override or explicitly provide the Google OAuth Client ID.
+- `AGY_CLIENT_SECRET` / `GOOGLE_AGY_CLIENT_SECRET`: Override or explicitly provide the Google OAuth Client Secret.
 - `OPENCODE_AGY_PROJECT_ID`: Specify your Google Cloud Project ID manually.
 - `OPENCODE_AGY_AUTH_PROXY`: Define a proxy if accessing authentication endpoints behind a corporate firewall.
 - `OPENCODE_AGY_ENDPOINT`: Override the default internal `daily-cloudcode-pa.googleapis.com` API endpoint.

package/dist/index.js

@@ -102,10 +102,106 @@ function updateStaticModelsWithPricing(staticModels) {
   });
 }
 
+// src/sdk/credentials.ts
+import { execSync } from "child_process";
+import { existsSync as existsSync2, readFileSync as readFileSync2, realpathSync } from "fs";
+import { homedir } from "os";
+import { join as join2 } from "path";
+var cachedCredentials = null;
+function findAgyBinary() {
+  if (process.env.AGY_BIN_PATH && existsSync2(process.env.AGY_BIN_PATH)) {
+    try {
+      return realpathSync(process.env.AGY_BIN_PATH);
+    } catch {
+      return process.env.AGY_BIN_PATH;
+    }
+  }
+  try {
+    const which = execSync("which agy 2>/dev/null || which antigravity 2>/dev/null", {
+      encoding: "utf8",
+      stdio: ["pipe", "pipe", "ignore"]
+    }).trim();
+    if (which && existsSync2(which)) {
+      return realpathSync(which);
+    }
+  } catch {
+  }
+  const home = homedir();
+  const candidatePaths = [
+    join2(home, ".local/share/mise/installs/antigravity-cli/latest/agy"),
+    join2(home, ".local/share/mise/installs/antigravity-cli/latest/antigravity"),
+    join2(home, ".local/bin/agy"),
+    join2(home, ".local/bin/antigravity"),
+    join2(home, "bin/agy"),
+    join2(home, "bin/antigravity"),
+    "/usr/local/bin/agy",
+    "/usr/local/bin/antigravity",
+    "/usr/bin/agy",
+    "/usr/bin/antigravity"
+  ];
+  for (const candidate of candidatePaths) {
+    if (existsSync2(candidate)) {
+      try {
+        return realpathSync(candidate);
+      } catch {
+        return candidate;
+      }
+    }
+  }
+  return null;
+}
+function extractAgyCredentialsFromBinary(binaryPath) {
+  try {
+    const buffer = readFileSync2(binaryPath);
+    const content = buffer.toString("latin1");
+    const clientIds = [...new Set(content.match(/[0-9]+-[a-z0-9_]+\.apps\.googleusercontent\.com/g) || [])];
+    const clientSecrets = [...new Set(content.match(/GOCSPX-[A-Za-z0-9_-]{28}/g) || [])];
+    if (clientIds.length === 0 || clientSecrets.length === 0) {
+      return null;
+    }
+    const preferredClientId = clientIds.find((id) => id.startsWith("1071")) || clientIds[clientIds.length - 1];
+    const preferredClientSecret = clientSecrets[0];
+    if (!preferredClientId || !preferredClientSecret) {
+      return null;
+    }
+    return {
+      clientId: preferredClientId,
+      clientSecret: preferredClientSecret
+    };
+  } catch {
+    return null;
+  }
+}
+function getAgyCredentials() {
+  const envClientId = process.env.AGY_CLIENT_ID || process.env.GOOGLE_AGY_CLIENT_ID;
+  const envClientSecret = process.env.AGY_CLIENT_SECRET || process.env.GOOGLE_AGY_CLIENT_SECRET;
+  if (envClientId && envClientSecret) {
+    return { clientId: envClientId, clientSecret: envClientSecret };
+  }
+  if (cachedCredentials) {
+    return cachedCredentials;
+  }
+  const binaryPath = findAgyBinary();
+  if (binaryPath) {
+    const extracted = extractAgyCredentialsFromBinary(binaryPath);
+    if (extracted) {
+      cachedCredentials = extracted;
+      return extracted;
+    }
+  }
+  throw new Error(
+    'Antigravity OAuth credentials not found. Ensure the "agy" CLI is installed and in PATH, or set the AGY_CLIENT_ID and AGY_CLIENT_SECRET environment variables.'
+  );
+}
+function getAgyClientId() {
+  return getAgyCredentials().clientId;
+}
+function getAgyClientSecret() {
+  return getAgyCredentials().clientSecret;
+}
+
 // src/constants.ts
 var AGY_PROVIDER_ID = "google-agy";
-var AGY_CLIENT_ID = "1071006060591-tmhssin2h21lcre235vtolojh4g403ep.apps.googleusercontent.com";
-var AGY_CLIENT_SECRET = "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";
 var AGY_SCOPES = [
   "openid",
   "https://www.googleapis.com/auth/cloud-platform",
@@ -194,7 +290,7 @@ async function authorizeAgy() {
   const pkce = await generatePKCE();
   const state = randomBytes(32).toString("hex");
   const url2 = new URL("https://accounts.google.com/o/oauth2/v2/auth");
-  url2.searchParams.set("client_id", AGY_CLIENT_ID);
+  url2.searchParams.set("client_id", getAgyClientId());
   url2.searchParams.set("response_type", "code");
   url2.searchParams.set("redirect_uri", AGY_REDIRECT_URI);
   url2.searchParams.set("scope", AGY_SCOPES.join(" "));
@@ -227,8 +323,8 @@ async function exchangeAgyWithVerifierInternal(code, verifier) {
       "Content-Type": "application/x-www-form-urlencoded"
     },
     body: new URLSearchParams({
-      client_id: AGY_CLIENT_ID,
-      client_secret: AGY_CLIENT_SECRET,
+      client_id: getAgyClientId(),
+      client_secret: getAgyClientSecret(),
       code,
       grant_type: "authorization_code",
       redirect_uri: AGY_REDIRECT_URI,
@@ -720,29 +816,29 @@ function clampDelay(delayMs) {
 }
 
 // src/sdk/retry/cooldown-store.ts
-import { existsSync as existsSync2, mkdirSync, readFileSync as readFileSync2, writeFileSync as writeFileSync2, renameSync, unlinkSync } from "fs";
-import { join as join2, dirname } from "path";
-import { homedir, tmpdir as tmpdir2 } from "os";
+import { existsSync as existsSync3, mkdirSync, readFileSync as readFileSync3, writeFileSync as writeFileSync2, renameSync, unlinkSync } from "fs";
+import { join as join3, dirname } from "path";
+import { homedir as homedir2, tmpdir as tmpdir2 } from "os";
 var WRITE_THROTTLE_MS = 5e3;
 function getConfigDir() {
   const platform2 = process.platform;
   if (platform2 === "win32") {
-    return join2(process.env.APPDATA || join2(homedir(), "AppData", "Roaming"), "opencode");
+    return join3(process.env.APPDATA || join3(homedir2(), "AppData", "Roaming"), "opencode");
   }
-  const xdgConfig = process.env.XDG_CONFIG_HOME || join2(homedir(), ".config");
-  return join2(xdgConfig, "opencode");
+  const xdgConfig = process.env.XDG_CONFIG_HOME || join3(homedir2(), ".config");
+  return join3(xdgConfig, "opencode");
 }
 function getCooldownFilePath() {
-  return join2(getConfigDir(), "antigravity-retry-cooldowns.json");
+  return join3(getConfigDir(), "antigravity-retry-cooldowns.json");
 }
 function loadCooldowns() {
   const result = /* @__PURE__ */ new Map();
   try {
     const filePath = getCooldownFilePath();
-    if (!existsSync2(filePath)) {
+    if (!existsSync3(filePath)) {
       return result;
     }
-    const content = readFileSync2(filePath, "utf-8");
+    const content = readFileSync3(filePath, "utf-8");
     const data = JSON.parse(content);
     if (data.version !== "1.0") {
       return result;
@@ -761,7 +857,7 @@ function saveCooldowns(entries) {
   try {
     const filePath = getCooldownFilePath();
     const dir = dirname(filePath);
-    if (!existsSync2(dir)) {
+    if (!existsSync3(dir)) {
       mkdirSync(dir, { recursive: true });
     }
     const now = Date.now();
@@ -776,12 +872,12 @@ function saveCooldowns(entries) {
       entries: serializable,
       updatedAt: now
     };
-    const tmpPath = join2(tmpdir2(), `antigravity-cooldowns-${Date.now()}-${Math.random().toString(36).slice(2)}.tmp`);
+    const tmpPath = join3(tmpdir2(), `antigravity-cooldowns-${Date.now()}-${Math.random().toString(36).slice(2)}.tmp`);
     writeFileSync2(tmpPath, JSON.stringify(data), "utf-8");
     try {
       renameSync(tmpPath, filePath);
     } catch {
-      writeFileSync2(filePath, readFileSync2(tmpPath));
+      writeFileSync2(filePath, readFileSync3(tmpPath));
       try {
         unlinkSync(tmpPath);
       } catch {
@@ -1647,27 +1743,27 @@ function openBrowserUrl(url2) {
 import { createHash } from "crypto";
 
 // src/sdk/cache/signature-cache.ts
-import { existsSync as existsSync3, mkdirSync as mkdirSync2, readFileSync as readFileSync3, writeFileSync as writeFileSync3, renameSync as renameSync2, unlinkSync as unlinkSync2, appendFileSync } from "fs";
-import { join as join3, dirname as dirname2 } from "path";
-import { homedir as homedir2, tmpdir as tmpdir3 } from "os";
+import { existsSync as existsSync4, mkdirSync as mkdirSync2, readFileSync as readFileSync4, writeFileSync as writeFileSync3, renameSync as renameSync2, unlinkSync as unlinkSync2, appendFileSync } from "fs";
+import { join as join4, dirname as dirname2 } from "path";
+import { homedir as homedir3, tmpdir as tmpdir3 } from "os";
 function getConfigDir2() {
   const platform2 = process.platform;
   if (platform2 === "win32") {
-    return join3(process.env.APPDATA || join3(homedir2(), "AppData", "Roaming"), "opencode");
+    return join4(process.env.APPDATA || join4(homedir3(), "AppData", "Roaming"), "opencode");
   }
-  const xdgConfig = process.env.XDG_CONFIG_HOME || join3(homedir2(), ".config");
-  return join3(xdgConfig, "opencode");
+  const xdgConfig = process.env.XDG_CONFIG_HOME || join4(homedir3(), ".config");
+  return join4(xdgConfig, "opencode");
 }
 function getCacheFilePath() {
-  return join3(getConfigDir2(), "antigravity-signature-cache.json");
+  return join4(getConfigDir2(), "antigravity-signature-cache.json");
 }
 function ensureGitignoreSync(configDir) {
-  const gitignorePath = join3(configDir, ".gitignore");
+  const gitignorePath = join4(configDir, ".gitignore");
   const entries = [".gitignore", "antigravity-signature-cache.json"];
   try {
     let content = "";
-    if (existsSync3(gitignorePath)) {
-      content = readFileSync3(gitignorePath, "utf-8");
+    if (existsSync4(gitignorePath)) {
+      content = readFileSync4(gitignorePath, "utf-8");
     }
     const existingLines = content.split("\n").map((line) => line.trim());
     const missing = entries.filter((e) => !existingLines.includes(e));
@@ -1849,10 +1945,10 @@ var SignatureCache = class {
    */
   loadFromDisk() {
     try {
-      if (!existsSync3(this.cacheFilePath)) {
+      if (!existsSync4(this.cacheFilePath)) {
         return;
       }
-      const content = readFileSync3(this.cacheFilePath, "utf-8");
+      const content = readFileSync4(this.cacheFilePath, "utf-8");
       const data = JSON.parse(content);
       if (data.version !== "1.0") {
         return;
@@ -1880,15 +1976,15 @@ var SignatureCache = class {
   saveToDisk() {
     try {
       const dir = dirname2(this.cacheFilePath);
-      if (!existsSync3(dir)) {
+      if (!existsSync4(dir)) {
         mkdirSync2(dir, { recursive: true });
       }
       ensureGitignoreSync(dir);
       const now = Date.now();
       let existingEntries = {};
-      if (existsSync3(this.cacheFilePath)) {
+      if (existsSync4(this.cacheFilePath)) {
         try {
-          const content = readFileSync3(this.cacheFilePath, "utf-8");
+          const content = readFileSync4(this.cacheFilePath, "utf-8");
           const data = JSON.parse(content);
           existingEntries = data.entries || {};
         } catch {
@@ -1924,12 +2020,12 @@ var SignatureCache = class {
           last_write: now
         }
       };
-      const tmpPath = join3(tmpdir3(), `antigravity-cache-${Date.now()}-${Math.random().toString(36).slice(2)}.tmp`);
+      const tmpPath = join4(tmpdir3(), `antigravity-cache-${Date.now()}-${Math.random().toString(36).slice(2)}.tmp`);
       writeFileSync3(tmpPath, JSON.stringify(cacheData, null, 2), "utf-8");
       try {
         renameSync2(tmpPath, this.cacheFilePath);
       } catch {
-        writeFileSync3(this.cacheFilePath, readFileSync3(tmpPath));
+        writeFileSync3(this.cacheFilePath, readFileSync4(tmpPath));
         try {
           unlinkSync2(tmpPath);
         } catch {
@@ -2083,9 +2179,9 @@ function getLatestSignature(sessionId) {
 }
 
 // src/sdk/request/turn-state-tracker.ts
-import { existsSync as existsSync4, mkdirSync as mkdirSync3, readFileSync as readFileSync4, writeFileSync as writeFileSync4, renameSync as renameSync3, unlinkSync as unlinkSync3 } from "fs";
-import { join as join4, dirname as dirname3 } from "path";
-import { homedir as homedir3, tmpdir as tmpdir4 } from "os";
+import { existsSync as existsSync5, mkdirSync as mkdirSync3, readFileSync as readFileSync5, writeFileSync as writeFileSync4, renameSync as renameSync3, unlinkSync as unlinkSync3 } from "fs";
+import { join as join5, dirname as dirname3 } from "path";
+import { homedir as homedir4, tmpdir as tmpdir4 } from "os";
 
 // src/sdk/request/thinking.ts
 import { createHash as createHash2 } from "crypto";
@@ -2508,22 +2604,22 @@ var WRITE_THROTTLE_MS2 = 5e3;
 function getConfigDir3() {
   const platform2 = process.platform;
   if (platform2 === "win32") {
-    return join4(process.env.APPDATA || join4(homedir3(), "AppData", "Roaming"), "opencode");
+    return join5(process.env.APPDATA || join5(homedir4(), "AppData", "Roaming"), "opencode");
   }
-  const xdgConfig = process.env.XDG_CONFIG_HOME || join4(homedir3(), ".config");
-  return join4(xdgConfig, "opencode");
+  const xdgConfig = process.env.XDG_CONFIG_HOME || join5(homedir4(), ".config");
+  return join5(xdgConfig, "opencode");
 }
 function getTurnStateFilePath() {
-  return join4(getConfigDir3(), "antigravity-turn-states.json");
+  return join5(getConfigDir3(), "antigravity-turn-states.json");
 }
 function loadTurnStatesFromDisk() {
   const result = /* @__PURE__ */ new Map();
   try {
     const filePath = getTurnStateFilePath();
-    if (!existsSync4(filePath)) {
+    if (!existsSync5(filePath)) {
       return result;
     }
-    const content = readFileSync4(filePath, "utf-8");
+    const content = readFileSync5(filePath, "utf-8");
     const data = JSON.parse(content);
     if (data.version !== "1.0") {
       return result;
@@ -2543,7 +2639,7 @@ function saveTurnStatesToDisk(entries) {
   try {
     const filePath = getTurnStateFilePath();
     const dir = dirname3(filePath);
-    if (!existsSync4(dir)) {
+    if (!existsSync5(dir)) {
       mkdirSync3(dir, { recursive: true });
     }
     const now = Date.now();
@@ -2559,12 +2655,12 @@ function saveTurnStatesToDisk(entries) {
       entries: serializable,
       updatedAt: now
     };
-    const tmpPath = join4(tmpdir4(), `antigravity-turn-states-${Date.now()}-${Math.random().toString(36).slice(2)}.tmp`);
+    const tmpPath = join5(tmpdir4(), `antigravity-turn-states-${Date.now()}-${Math.random().toString(36).slice(2)}.tmp`);
     writeFileSync4(tmpPath, JSON.stringify(data), "utf-8");
     try {
       renameSync3(tmpPath, filePath);
     } catch {
-      writeFileSync4(filePath, readFileSync4(tmpPath));
+      writeFileSync4(filePath, readFileSync5(tmpPath));
       try {
         unlinkSync3(tmpPath);
       } catch {
@@ -15221,8 +15317,8 @@ async function refreshAccessTokenInternal(auth, client, parts) {
 }
 async function fetchTokenRefresh(refreshToken) {
   const tokenUrl = "https://oauth2.googleapis.com/token";
-  const clientId = AGY_CLIENT_ID;
-  const clientSecret = AGY_CLIENT_SECRET;
+  const clientId = getAgyClientId();
+  const clientSecret = getAgyClientSecret();
   const init = {
     method: "POST",
     headers: {
@@ -18942,20 +19038,20 @@ function transformStreamingPayloadStream(stream, sessionId, chatLogger) {
 }
 
 // src/sdk/chat-logger.ts
-import { createWriteStream, existsSync as existsSync5, mkdirSync as mkdirSync4 } from "fs";
-import { join as join5 } from "path";
+import { createWriteStream, existsSync as existsSync6, mkdirSync as mkdirSync4 } from "fs";
+import { join as join6 } from "path";
 import { cwd } from "process";
 function createChatLogger() {
   if (process.env.AGY_LOG !== "1") {
     return null;
   }
   try {
-    const logDir = join5(cwd(), "agy_chat_log");
-    if (!existsSync5(logDir)) {
+    const logDir = join6(cwd(), "agy_chat_log");
+    if (!existsSync6(logDir)) {
       mkdirSync4(logDir, { recursive: true });
     }
     const timestamp = Date.now();
-    const logFile = join5(logDir, `${timestamp}.log`);
+    const logFile = join6(logDir, `${timestamp}.log`);
     const stream = createWriteStream(logFile, { flags: "w", encoding: "utf8" });
     return new ChatLoggerImpl(stream);
   } catch (error45) {