@claudexor/harness-agy 3.5.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Anton Razzhigaev
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,13 @@
+# @claudexor/harness-agy
+
+Adapter for Google's Antigravity CLI (`agy`): translates
+`agy -p --output-format stream-json` into typed `HarnessEvent`s.
+
+Accounts are NAMED credential profiles only (there is no engine-default agy
+credential): each profile is a Claudexor-owned HOME whose vendor config root
+(`$HOME/.gemini/...`) holds a file-based OAuth token. See
+`src/profile.ts` for the mechanism and its constraints (never create a
+keychain inside a profile HOME).
+
+Fixtures under `fixtures/` pin the recorded 1.1.13 stream shapes; see
+`fixtures/manifest.yaml` for provenance and stream-semantics expectations.

package/dist/index.d.ts

@@ -0,0 +1,12 @@
+import type { HarnessAdapter } from "@claudexor/core";
+export { AGY_BIN, agyProfileRunEnv, agyTokenFilePresent, canonicalAgyProfileHome, } from "./profile.js";
+/**
+ * The vendor's two quota GROUPS map onto disjoint halves of the same
+ * inventory: "Gemini Models" and "Claude and GPT models" (PLAN §1.2 F8). The
+ * split is DERIVED from the one model list so a slug the vendor adds cannot
+ * land in neither half and silently escape window scoping (INV-138).
+ */
+export declare const AGY_GEMINI_MODELS: ("claude-opus-4-6-thinking" | "claude-sonnet-4-6" | "gemini-3.1-pro-high" | "gemini-3.1-pro-low" | "gemini-3.5-flash-high" | "gemini-3.5-flash-low" | "gemini-3.5-flash-medium" | "gemini-3.6-flash-high" | "gemini-3.6-flash-low" | "gemini-3.6-flash-medium" | "gemini-3.7-flash-high" | "gemini-3.7-flash-low" | "gemini-3.7-flash-medium" | "gpt-oss-120b-medium")[];
+export declare const AGY_THIRD_PARTY_MODELS: ("claude-opus-4-6-thinking" | "claude-sonnet-4-6" | "gemini-3.1-pro-high" | "gemini-3.1-pro-low" | "gemini-3.5-flash-high" | "gemini-3.5-flash-low" | "gemini-3.5-flash-medium" | "gemini-3.6-flash-high" | "gemini-3.6-flash-low" | "gemini-3.6-flash-medium" | "gemini-3.7-flash-high" | "gemini-3.7-flash-low" | "gemini-3.7-flash-medium" | "gpt-oss-120b-medium")[];
+export declare function createAgyAdapter(): HarnessAdapter;
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAWA,OAAO,KAAK,EAAc,cAAc,EAAE,MAAM,iBAAiB,CAAC;AAclE,OAAO,EACL,OAAO,EACP,gBAAgB,EAChB,mBAAmB,EACnB,uBAAuB,GACxB,MAAM,cAAc,CAAC;AA2DtB;;;;;GAKG;AACH,eAAO,MAAM,iBAAiB,0WAA0D,CAAC;AACzF,eAAO,MAAM,sBAAsB,0WAA2D,CAAC;AAe/F,wBAAgB,gBAAgB,IAAI,cAAc,CA4LjD"}

package/dist/index.js

@@ -0,0 +1,316 @@
+import { ConformanceReport as ConformanceReportSchema, HarnessManifest as HarnessManifestSchema, } from "@claudexor/schema";
+import { HarnessUnavailableError, promptWithInstructions, runCapture, runCliHarness, } from "@claudexor/core";
+import { CLAUDEXOR_VERSION, nowIso, redactSecrets } from "@claudexor/util";
+import { parseAgyEvent } from "./parse.js";
+import { AGY_BIN, probeAgyCredentialProfile, resolveAgyProfileRoute } from "./profile.js";
+import { AGY_VENDOR_CLI_VERSION } from "./vendor-cli-version.js";
+// The package publishes only what other packages consume. The profile probe,
+// the route resolver and the stream parser are reached through the adapter
+// this file returns, so re-exporting them would be a dead public surface.
+export { AGY_BIN, agyProfileRunEnv, agyTokenFilePresent, canonicalAgyProfileHome, } from "./profile.js";
+/**
+ * Access mapping, each leg LIVE-PROVEN on agy 1.1.13 (PLAN §1.2 F11, §1.2d):
+ * plan mode answered read-only prompts and withheld a requested write;
+ * accept-edits wrote into the workspace; --dangerously-skip-permissions wrote
+ * and ran commands. Owner decision Л-7 admits full access explicitly.
+ */
+function accessArgs(access) {
+    switch (access) {
+        case "readonly":
+            return ["--mode", "plan"];
+        case "workspace_write":
+            return ["--mode", "accept-edits"];
+        case "full":
+        case "external_sandbox_full":
+            return ["--dangerously-skip-permissions"];
+        case "inherit_native":
+            return [];
+    }
+}
+async function detectVersion() {
+    try {
+        const r = await runCapture(AGY_BIN(), ["--version"], { timeoutMs: 10_000 });
+        return r.stdout.trim() || `${AGY_BIN()} (version unknown)`;
+    }
+    catch {
+        return null;
+    }
+}
+/**
+ * Manifest model truth (INV-104): the vendor's own list, captured live from
+ * `agy models` on the pinned version (evidence: PLAN §1.2 F9 and the sprint
+ * evidence dir; the vendor emits TSV, not JSON, in 1.1.13). Slugs
+ * carry the reasoning effort (`-high`/`-medium`/`-low`) exactly like Cursor's
+ * inventory, so the effort ladder is deliberately empty and an effort hint is
+ * disclosed as ignored rather than mapped (Л-21). No live `models()`:
+ * `agy models --output-format json` is rejected by 1.1.13 (upstream #777) and
+ * the unauthenticated plain listing fails — an empty live list would refuse
+ * every explicit model (PLAN §2.6).
+ */
+const AGY_KNOWN_MODELS = [
+    "gemini-3.7-flash-high",
+    "gemini-3.7-flash-medium",
+    "gemini-3.7-flash-low",
+    "gemini-3.6-flash-high",
+    "gemini-3.6-flash-medium",
+    "gemini-3.6-flash-low",
+    "gemini-3.5-flash-high",
+    "gemini-3.5-flash-medium",
+    "gemini-3.5-flash-low",
+    "gemini-3.1-pro-high",
+    "gemini-3.1-pro-low",
+    "claude-sonnet-4-6",
+    "claude-opus-4-6-thinking",
+    "gpt-oss-120b-medium",
+];
+/**
+ * The vendor's two quota GROUPS map onto disjoint halves of the same
+ * inventory: "Gemini Models" and "Claude and GPT models" (PLAN §1.2 F8). The
+ * split is DERIVED from the one model list so a slug the vendor adds cannot
+ * land in neither half and silently escape window scoping (INV-138).
+ */
+export const AGY_GEMINI_MODELS = AGY_KNOWN_MODELS.filter((m) => m.startsWith("gemini-"));
+export const AGY_THIRD_PARTY_MODELS = AGY_KNOWN_MODELS.filter((m) => !m.startsWith("gemini-"));
+const AGY_ENABLED_INTENTS = [
+    "explain",
+    "plan",
+    "spec",
+    "implement",
+    "repair",
+    "create_from_scratch",
+    "review",
+    "verify",
+    "synthesize",
+    "audit",
+];
+export function createAgyAdapter() {
+    return {
+        id: "agy",
+        async discover() {
+            const version = await detectVersion();
+            if (version === null) {
+                throw new HarnessUnavailableError("agy not found on PATH (install Antigravity CLI or set CLAUDEXOR_AGY_BIN)");
+            }
+            return HarnessManifestSchema.parse({
+                id: "agy",
+                display_name: "Antigravity",
+                kind: "local_cli",
+                version,
+                adapter_version: CLAUDEXOR_VERSION,
+                provider_family: "google",
+                capabilities: {
+                    plan: true,
+                    implement: true,
+                    create_from_scratch: true,
+                    review: true,
+                    verify: true,
+                    synthesize: true,
+                    read_files: true,
+                    // No MCP flag path exists (config is file-only), so no browser
+                    // injector is wired — honest false (INV-066).
+                    browser_tool: false,
+                    // Built-in web tools with no enforceable off switch (cursor parity).
+                    web_policy: "uncontrolled",
+                    // D-16 default recommendation (В-10): the fenced-block tier costs
+                    // zero extra vendor turns; the schema-constrained tier is proven to
+                    // force a SECOND turn per run (PLAN §1.2e) and stays off until the
+                    // owner opts in.
+                    work_report_transport: "validated",
+                    // Effort rides the model slug (`-high`), not a flag (Л-21).
+                    effort_levels: [],
+                    known_models: [...AGY_KNOWN_MODELS],
+                    known_models_verified_against: AGY_VENDOR_CLI_VERSION,
+                },
+                capability_profile: {
+                    auth: {
+                        supported_sources: ["native_session"],
+                        preferred_source: "native_session",
+                        credential_transports: [
+                            // The profile HOME relocates the vendor's whole config root and
+                            // its file-based OAuth token (Л-15/Л-16): config_file, HOME.
+                            { source: "native_session", kind: "config_file", relocatable_by: ["HOME"] },
+                        ],
+                    },
+                    // readonly = vendor plan mode: write tools are withheld
+                    // (permission-denied), reads and answers flow (live-proven F11).
+                    access_control: { readonly_mechanism: "permission_deny" },
+                    isolation: { supported_containment: ["env_or_file_injection"] },
+                    // No proven attachment path yet — honest empty set (INV-064/065).
+                    attachment_inputs: [],
+                },
+                auth_modes: ["local_session"],
+                access_profiles_supported: [
+                    "readonly",
+                    "workspace_write",
+                    "full",
+                    "external_sandbox_full",
+                    "inherit_native",
+                ],
+            });
+        },
+        async doctor(spec) {
+            const version = await detectVersion();
+            const installedSemver = version === null ? null : (/\d+\.\d+\.\d+/.exec(version)?.[0] ?? null);
+            const versionDrift = version !== null && installedSemver !== AGY_VENDOR_CLI_VERSION
+                ? `installed agy "${version}" differs from the verified ${AGY_VENDOR_CLI_VERSION}; the file-token profile mechanism is re-proven per version (R-2')`
+                : null;
+            // Л-24: the account isolation mechanism — one Claudexor-owned HOME per
+            // identity, with the vendor keeping its token in a file inside it — was
+            // proven on macOS across three live Google accounts. The same HOME lever
+            // exists on every platform the vendor supports, but nobody has run it
+            // there, so the platform says so instead of implying a proof it lacks.
+            const platformProof = process.platform === "darwin"
+                ? null
+                : `named-account isolation is unverified on ${process.platform}: the mechanism is the same profile HOME proven on macOS, but no live multi-account run has been recorded here`;
+            const requestedSource = spec.authSource;
+            if (requestedSource !== undefined && requestedSource !== "native_session") {
+                return ConformanceReportSchema.parse({
+                    harness_id: "agy",
+                    status: "unavailable",
+                    checks: [
+                        version === null
+                            ? { id: "installed", status: "fail", detail: "agy not found" }
+                            : { id: "installed", status: "pass", detail: redactSecrets(version) },
+                        {
+                            id: "auth_source",
+                            status: "fail",
+                            detail: `agy does not support ${requestedSource}`,
+                        },
+                    ],
+                    enabled_intents: [],
+                    disabled_intents: AGY_ENABLED_INTENTS,
+                    reasons: [`agy does not support auth source ${requestedSource}`],
+                    auth_sources: [
+                        {
+                            source: requestedSource,
+                            availability: "unavailable",
+                            verification: "not_run",
+                            detail: `agy does not support ${requestedSource}`,
+                        },
+                    ],
+                });
+            }
+            if (version === null) {
+                return ConformanceReportSchema.parse({
+                    harness_id: "agy",
+                    status: "unavailable",
+                    checks: [{ id: "installed", status: "fail", detail: "agy not found" }],
+                    enabled_intents: [],
+                    disabled_intents: AGY_ENABLED_INTENTS,
+                    reasons: ["agy not found (install Antigravity CLI or set CLAUDEXOR_AGY_BIN)"],
+                    auth_sources: [
+                        {
+                            source: "native_session",
+                            availability: "unknown",
+                            verification: "not_run",
+                            detail: "agy binary not installed",
+                        },
+                    ],
+                });
+            }
+            // Owner decision Л-4: agy has NO engine-default credential store — every
+            // account is a named profile. The harness-level doctor therefore reports
+            // the default subject honestly unavailable with the remedy; PINNED
+            // routing is admitted by the per-profile probe (INV-135 round-15 #1),
+            // exactly like a logged-out cursor default with valid named profiles.
+            return ConformanceReportSchema.parse({
+                harness_id: "agy",
+                status: "unavailable",
+                checks: [
+                    { id: "installed", status: "pass", detail: redactSecrets(version) },
+                    {
+                        id: "default_credential",
+                        status: "fail",
+                        detail: "agy has no engine-default credential by design; accounts are named profiles",
+                    },
+                    ...(versionDrift
+                        ? [{ id: "version_pin", status: "fail", detail: versionDrift }]
+                        : [{ id: "version_pin", status: "pass", detail: AGY_VENDOR_CLI_VERSION }]),
+                    ...(platformProof
+                        ? [{ id: "platform_isolation", status: "warn", detail: platformProof }]
+                        : []),
+                ],
+                enabled_intents: [],
+                disabled_intents: AGY_ENABLED_INTENTS,
+                reasons: [
+                    "agy routes only through named accounts: add one (`claudexor profiles add agy <id>` + `claudexor profiles login agy <id>`) and pin it (--profile)",
+                    ...(versionDrift ? [versionDrift] : []),
+                    ...(platformProof ? [platformProof] : []),
+                ],
+                auth_sources: [
+                    {
+                        source: "native_session",
+                        availability: "unavailable",
+                        verification: "not_run",
+                        detail: "no default store by design (accounts are named profiles)",
+                    },
+                ],
+            });
+        },
+        run(spec) {
+            return runAgy(spec);
+        },
+        review(spec) {
+            return runAgy(spec);
+        },
+        // INV-135: pinned routing is admitted by THIS probe (there is no default
+        // store for the harness doctor to credit).
+        async probeCredentialProfile(profile, abortSignal) {
+            // The signal must reach the live probe: dropping it left an aborted
+            // doctor sweep waiting out the probe's own 30s timeout.
+            return probeAgyCredentialProfile(profile, undefined, abortSignal);
+        },
+    };
+}
+async function* runAgy(spec) {
+    const profile = spec.credential_profile;
+    // Л-4: no engine-default credential — an unpinned agy run has nothing to
+    // route. Typed stream refusal (error then completed), the one refusal
+    // mechanism every adapter's profile gate uses.
+    if (!profile) {
+        yield {
+            type: "error",
+            session_id: spec.session_id,
+            ts: nowIso(),
+            error: "agy has no engine-default credential; pin a named account (--profile, or `claudexor profiles add agy <id>`)",
+        };
+        yield { type: "completed", session_id: spec.session_id, ts: nowIso() };
+        return;
+    }
+    const route = resolveAgyProfileRoute(profile, spec.env);
+    if ("refusal" in route) {
+        yield { type: "error", session_id: spec.session_id, ts: nowIso(), error: route.refusal };
+        yield { type: "completed", session_id: spec.session_id, ts: nowIso() };
+        return;
+    }
+    const args = ["-p", promptWithInstructions(spec), "--output-format", "stream-json"];
+    // Л-18: without --add-dir agy resolves relative paths against its own app
+    // data dir instead of the workspace (live-proven §1.2d).
+    args.push("--add-dir", spec.cwd);
+    args.push(...accessArgs(spec.access));
+    if (spec.model_hint)
+        args.push("--model", spec.model_hint);
+    // INV-137: the vendor conversation id is the resumable native session.
+    if (spec.resume_session_id)
+        args.push("--conversation", spec.resume_session_id);
+    yield* runCliHarness({
+        bin: AGY_BIN(),
+        args,
+        spec,
+        env: route.env,
+        label: "agy",
+        redact: redactSecrets,
+        parseEvent: (obj, sessionId) => {
+            const out = parseAgyEvent(obj, sessionId);
+            if (out) {
+                for (const ev of out) {
+                    ev.credential_route = "vendor_native";
+                    ev.credential_source = "native_session";
+                    ev.credential_profile_id = profile.profile_id;
+                }
+            }
+            return out;
+        },
+    });
+}
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAOA,OAAO,EACL,iBAAiB,IAAI,uBAAuB,EAC5C,eAAe,IAAI,qBAAqB,GACzC,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EACL,uBAAuB,EACvB,sBAAsB,EACtB,UAAU,EACV,aAAa,GACd,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAE,iBAAiB,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAC3E,OAAO,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAC3C,OAAO,EAAE,OAAO,EAAE,yBAAyB,EAAE,sBAAsB,EAAE,MAAM,cAAc,CAAC;AAC1F,OAAO,EAAE,sBAAsB,EAAE,MAAM,yBAAyB,CAAC;AACjE,6EAA6E;AAC7E,2EAA2E;AAC3E,0EAA0E;AAC1E,OAAO,EACL,OAAO,EACP,gBAAgB,EAChB,mBAAmB,EACnB,uBAAuB,GACxB,MAAM,cAAc,CAAC;AAEtB;;;;;GAKG;AACH,SAAS,UAAU,CAAC,MAAqB;IACvC,QAAQ,MAAM,EAAE,CAAC;QACf,KAAK,UAAU;YACb,OAAO,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QAC5B,KAAK,iBAAiB;YACpB,OAAO,CAAC,QAAQ,EAAE,cAAc,CAAC,CAAC;QACpC,KAAK,MAAM,CAAC;QACZ,KAAK,uBAAuB;YAC1B,OAAO,CAAC,gCAAgC,CAAC,CAAC;QAC5C,KAAK,gBAAgB;YACnB,OAAO,EAAE,CAAC;IACd,CAAC;AACH,CAAC;AAED,KAAK,UAAU,aAAa;IAC1B,IAAI,CAAC;QACH,MAAM,CAAC,GAAG,MAAM,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,WAAW,CAAC,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,CAAC;QAC5E,OAAO,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,GAAG,OAAO,EAAE,oBAAoB,CAAC;IAC7D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,gBAAgB,GAAG;IACvB,uBAAuB;IACvB,yBAAyB;IACzB,sBAAsB;IACtB,uBAAuB;IACvB,yBAAyB;IACzB,sBAAsB;IACtB,uBAAuB;IACvB,yBAAyB;IACzB,sBAAsB;IACtB,qBAAqB;IACrB,oBAAoB;IACpB,mBAAmB;IACnB,0BAA0B;IAC1B,qBAAqB;CACb,CAAC;AAEX;;;;;GAKG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,gBAAgB,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC;AACzF,MAAM,CAAC,MAAM,sBAAsB,GAAG,gBAAgB,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC;AAE/F,MAAM,mBAAmB,GAAG;IAC1B,SAAS;IACT,MAAM;IACN,MAAM;IACN,WAAW;IACX,QAAQ;IACR,qBAAqB;IACrB,QAAQ;IACR,QAAQ;IACR,YAAY;IACZ,OAAO;CACC,CAAC;AAEX,MAAM,UAAU,gBAAgB;IAC9B,OAAO;QACL,EAAE,EAAE,KAAK;QAET,KAAK,CAAC,QAAQ;YACZ,MAAM,OAAO,GAAG,MAAM,aAAa,EAAE,CAAC;YACtC,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;gBACrB,MAAM,IAAI,uBAAuB,CAC/B,0EAA0E,CAC3E,CAAC;YACJ,CAAC;YACD,OAAO,qBAAqB,CAAC,KAAK,CAAC;gBACjC,EAAE,EAAE,KAAK;gBACT,YAAY,EAAE,aAAa;gBAC3B,IAAI,EAAE,WAAW;gBACjB,OAAO;gBACP,eAAe,EAAE,iBAAiB;gBAClC,eAAe,EAAE,QAAQ;gBACzB,YAAY,EAAE;oBACZ,IAAI,EAAE,IAAI;oBACV,SAAS,EAAE,IAAI;oBACf,mBAAmB,EAAE,IAAI;oBACzB,MAAM,EAAE,IAAI;oBACZ,MAAM,EAAE,IAAI;oBACZ,UAAU,EAAE,IAAI;oBAChB,UAAU,EAAE,IAAI;oBAChB,+DAA+D;oBAC/D,8CAA8C;oBAC9C,YAAY,EAAE,KAAK;oBACnB,qEAAqE;oBACrE,UAAU,EAAE,cAAc;oBAC1B,kEAAkE;oBAClE,oEAAoE;oBACpE,mEAAmE;oBACnE,iBAAiB;oBACjB,qBAAqB,EAAE,WAAW;oBAClC,4DAA4D;oBAC5D,aAAa,EAAE,EAAE;oBACjB,YAAY,EAAE,CAAC,GAAG,gBAAgB,CAAC;oBACnC,6BAA6B,EAAE,sBAAsB;iBACtD;gBACD,kBAAkB,EAAE;oBAClB,IAAI,EAAE;wBACJ,iBAAiB,EAAE,CAAC,gBAAgB,CAAC;wBACrC,gBAAgB,EAAE,gBAAgB;wBAClC,qBAAqB,EAAE;4BACrB,gEAAgE;4BAChE,6DAA6D;4BAC7D,EAAE,MAAM,EAAE,gBAAgB,EAAE,IAAI,EAAE,aAAa,EAAE,cAAc,EAAE,CAAC,MAAM,CAAC,EAAE;yBAC5E;qBACF;oBACD,wDAAwD;oBACxD,iEAAiE;oBACjE,cAAc,EAAE,EAAE,kBAAkB,EAAE,iBAAiB,EAAE;oBACzD,SAAS,EAAE,EAAE,qBAAqB,EAAE,CAAC,uBAAuB,CAAC,EAAE;oBAC/D,kEAAkE;oBAClE,iBAAiB,EAAE,EAAE;iBACtB;gBACD,UAAU,EAAE,CAAC,eAAe,CAAC;gBAC7B,yBAAyB,EAAE;oBACzB,UAAU;oBACV,iBAAiB;oBACjB,MAAM;oBACN,uBAAuB;oBACvB,gBAAgB;iBACjB;aACF,CAAC,CAAC;QACL,CAAC;QAED,KAAK,CAAC,MAAM,CAAC,IAAgB;YAC3B,MAAM,OAAO,GAAG,MAAM,aAAa,EAAE,CAAC;YACtC,MAAM,eAAe,GACnB,OAAO,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC;YACzE,MAAM,YAAY,GAChB,OAAO,KAAK,IAAI,IAAI,eAAe,KAAK,sBAAsB;gBAC5D,CAAC,CAAC,kBAAkB,OAAO,+BAA+B,sBAAsB,oEAAoE;gBACpJ,CAAC,CAAC,IAAI,CAAC;YACX,uEAAuE;YACvE,wEAAwE;YACxE,yEAAyE;YACzE,sEAAsE;YACtE,uEAAuE;YACvE,MAAM,aAAa,GACjB,OAAO,CAAC,QAAQ,KAAK,QAAQ;gBAC3B,CAAC,CAAC,IAAI;gBACN,CAAC,CAAC,4CAA4C,OAAO,CAAC,QAAQ,gHAAgH,CAAC;YACnL,MAAM,eAAe,GAAG,IAAI,CAAC,UAAU,CAAC;YACxC,IAAI,eAAe,KAAK,SAAS,IAAI,eAAe,KAAK,gBAAgB,EAAE,CAAC;gBAC1E,OAAO,uBAAuB,CAAC,KAAK,CAAC;oBACnC,UAAU,EAAE,KAAK;oBACjB,MAAM,EAAE,aAAa;oBACrB,MAAM,EAAE;wBACN,OAAO,KAAK,IAAI;4BACd,CAAC,CAAC,EAAE,EAAE,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,eAAe,EAAE;4BAC9D,CAAC,CAAC,EAAE,EAAE,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,aAAa,CAAC,OAAO,CAAC,EAAE;wBACvE;4BACE,EAAE,EAAE,aAAa;4BACjB,MAAM,EAAE,MAAM;4BACd,MAAM,EAAE,wBAAwB,eAAe,EAAE;yBAClD;qBACF;oBACD,eAAe,EAAE,EAAE;oBACnB,gBAAgB,EAAE,mBAAmB;oBACrC,OAAO,EAAE,CAAC,oCAAoC,eAAe,EAAE,CAAC;oBAChE,YAAY,EAAE;wBACZ;4BACE,MAAM,EAAE,eAAe;4BACvB,YAAY,EAAE,aAAa;4BAC3B,YAAY,EAAE,SAAS;4BACvB,MAAM,EAAE,wBAAwB,eAAe,EAAE;yBAClD;qBACF;iBACF,CAAC,CAAC;YACL,CAAC;YACD,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;gBACrB,OAAO,uBAAuB,CAAC,KAAK,CAAC;oBACnC,UAAU,EAAE,KAAK;oBACjB,MAAM,EAAE,aAAa;oBACrB,MAAM,EAAE,CAAC,EAAE,EAAE,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC;oBACtE,eAAe,EAAE,EAAE;oBACnB,gBAAgB,EAAE,mBAAmB;oBACrC,OAAO,EAAE,CAAC,kEAAkE,CAAC;oBAC7E,YAAY,EAAE;wBACZ;4BACE,MAAM,EAAE,gBAAgB;4BACxB,YAAY,EAAE,SAAS;4BACvB,YAAY,EAAE,SAAS;4BACvB,MAAM,EAAE,0BAA0B;yBACnC;qBACF;iBACF,CAAC,CAAC;YACL,CAAC;YACD,yEAAyE;YACzE,yEAAyE;YACzE,mEAAmE;YACnE,sEAAsE;YACtE,sEAAsE;YACtE,OAAO,uBAAuB,CAAC,KAAK,CAAC;gBACnC,UAAU,EAAE,KAAK;gBACjB,MAAM,EAAE,aAAa;gBACrB,MAAM,EAAE;oBACN,EAAE,EAAE,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,aAAa,CAAC,OAAO,CAAC,EAAE;oBACnE;wBACE,EAAE,EAAE,oBAAoB;wBACxB,MAAM,EAAE,MAAM;wBACd,MAAM,EAAE,6EAA6E;qBACtF;oBACD,GAAG,CAAC,YAAY;wBACd,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,aAAa,EAAE,MAAM,EAAE,MAAe,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC;wBACxE,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,aAAa,EAAE,MAAM,EAAE,MAAe,EAAE,MAAM,EAAE,sBAAsB,EAAE,CAAC,CAAC;oBACrF,GAAG,CAAC,aAAa;wBACf,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,oBAAoB,EAAE,MAAM,EAAE,MAAe,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC;wBAChF,CAAC,CAAC,EAAE,CAAC;iBACR;gBACD,eAAe,EAAE,EAAE;gBACnB,gBAAgB,EAAE,mBAAmB;gBACrC,OAAO,EAAE;oBACP,kJAAkJ;oBAClJ,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;oBACvC,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;iBAC1C;gBACD,YAAY,EAAE;oBACZ;wBACE,MAAM,EAAE,gBAAgB;wBACxB,YAAY,EAAE,aAAa;wBAC3B,YAAY,EAAE,SAAS;wBACvB,MAAM,EAAE,0DAA0D;qBACnE;iBACF;aACF,CAAC,CAAC;QACL,CAAC;QAED,GAAG,CAAC,IAAoB;YACtB,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC;QACtB,CAAC;QAED,MAAM,CAAC,IAAoB;YACzB,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC;QACtB,CAAC;QAED,yEAAyE;QACzE,2CAA2C;QAC3C,KAAK,CAAC,sBAAsB,CAAC,OAAO,EAAE,WAAW;YAC/C,oEAAoE;YACpE,wDAAwD;YACxD,OAAO,yBAAyB,CAAC,OAAO,EAAE,SAAS,EAAE,WAAW,CAAC,CAAC;QACpE,CAAC;KACF,CAAC;AACJ,CAAC;AAED,KAAK,SAAS,CAAC,CAAC,MAAM,CAAC,IAAoB;IACzC,MAAM,OAAO,GAAG,IAAI,CAAC,kBAAkB,CAAC;IACxC,yEAAyE;IACzE,sEAAsE;IACtE,+CAA+C;IAC/C,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM;YACJ,IAAI,EAAE,OAAO;YACb,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,EAAE,EAAE,MAAM,EAAE;YACZ,KAAK,EACH,6GAA6G;SAChH,CAAC;QACF,MAAM,EAAE,IAAI,EAAE,WAAW,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,CAAC;QACvE,OAAO;IACT,CAAC;IACD,MAAM,KAAK,GAAG,sBAAsB,CAAC,OAAO,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;IACxD,IAAI,SAAS,IAAI,KAAK,EAAE,CAAC;QACvB,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,KAAK,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC;QACzF,MAAM,EAAE,IAAI,EAAE,WAAW,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,CAAC;QACvE,OAAO;IACT,CAAC;IAED,MAAM,IAAI,GAAG,CAAC,IAAI,EAAE,sBAAsB,CAAC,IAAI,CAAC,EAAE,iBAAiB,EAAE,aAAa,CAAC,CAAC;IACpF,0EAA0E;IAC1E,yDAAyD;IACzD,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;IACjC,IAAI,CAAC,IAAI,CAAC,GAAG,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;IACtC,IAAI,IAAI,CAAC,UAAU;QAAE,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;IAC3D,uEAAuE;IACvE,IAAI,IAAI,CAAC,iBAAiB;QAAE,IAAI,CAAC,IAAI,CAAC,gBAAgB,EAAE,IAAI,CAAC,iBAAiB,CAAC,CAAC;IAEhF,KAAK,CAAC,CAAC,aAAa,CAAC;QACnB,GAAG,EAAE,OAAO,EAAE;QACd,IAAI;QACJ,IAAI;QACJ,GAAG,EAAE,KAAK,CAAC,GAAG;QACd,KAAK,EAAE,KAAK;QACZ,MAAM,EAAE,aAAa;QACrB,UAAU,EAAE,CAAC,GAAG,EAAE,SAAS,EAAE,EAAE;YAC7B,MAAM,GAAG,GAAG,aAAa,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;YAC1C,IAAI,GAAG,EAAE,CAAC;gBACR,KAAK,MAAM,EAAE,IAAI,GAAG,EAAE,CAAC;oBACrB,EAAE,CAAC,gBAAgB,GAAG,eAAe,CAAC;oBACtC,EAAE,CAAC,iBAAiB,GAAG,gBAAgB,CAAC;oBACxC,EAAE,CAAC,qBAAqB,GAAG,OAAO,CAAC,UAAU,CAAC;gBAChD,CAAC;YACH,CAAC;YACD,OAAO,GAAG,CAAC;QACb,CAAC;KACF,CAAC,CAAC;AACL,CAAC"}

package/dist/parse.d.ts

@@ -0,0 +1,14 @@
+import type { HarnessEvent } from "@claudexor/schema";
+type Json = any;
+/**
+ * Map an Antigravity CLI (`agy -p --output-format stream-json`) ND-JSON event
+ * to normalized events. Field shapes are pinned by RECORDED fixtures captured
+ * on agy 1.1.13 (fixtures/manifest.yaml): `init` / `step_update` / `result`,
+ * with `step_update.step_type` an OPEN vocabulary
+ * (user_input | agent_response | tool | checkpoint | finish | unknown | …).
+ * Unknown step types are recognized no-ops (empty array, never a drop);
+ * unknown TOP-LEVEL events return `null` so the run loop counts them.
+ */
+export declare function parseAgyEvent(obj: Json, sessionId: string): HarnessEvent[] | null;
+export {};
+//# sourceMappingURL=parse.d.ts.map

package/dist/parse.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"parse.d.ts","sourceRoot":"","sources":["../src/parse.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAqB,MAAM,mBAAmB,CAAC;AAGzE,KAAK,IAAI,GAAG,GAAG,CAAC;AAEhB;;;;;;;;GAQG;AACH,wBAAgB,aAAa,CAAC,GAAG,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,GAAG,YAAY,EAAE,GAAG,IAAI,CAqJjF"}

package/dist/parse.js

@@ -0,0 +1,240 @@
+import { nowIso, redactSecrets } from "@claudexor/util";
+/**
+ * Map an Antigravity CLI (`agy -p --output-format stream-json`) ND-JSON event
+ * to normalized events. Field shapes are pinned by RECORDED fixtures captured
+ * on agy 1.1.13 (fixtures/manifest.yaml): `init` / `step_update` / `result`,
+ * with `step_update.step_type` an OPEN vocabulary
+ * (user_input | agent_response | tool | checkpoint | finish | unknown | …).
+ * Unknown step types are recognized no-ops (empty array, never a drop);
+ * unknown TOP-LEVEL events return `null` so the run loop counts them.
+ */
+export function parseAgyEvent(obj, sessionId) {
+    const ts = nowIso();
+    // A non-string `event` must not be COERCED: an object whose `toString` is
+    // not callable throws, and the run loop would report a mid-stream parse
+    // failure as "the harness failed to start" and drop the rest of the run.
+    const event = typeof obj?.event === "string" ? obj.event : "";
+    if (event === "init") {
+        const nativeId = stringOrUndef(obj.conversation_id);
+        const model = stringOrUndef(obj.init?.model);
+        return [
+            {
+                type: "started",
+                session_id: sessionId,
+                ts,
+                ...(model ? { observed_model: model } : {}),
+                // The vendor conversation id IS the resumable native session
+                // (`agy --conversation <id>`); surface it for INV-137 lane resume.
+                ...(nativeId ? { payload: { native_session_id: nativeId } } : {}),
+            },
+        ];
+    }
+    if (event === "step_update") {
+        const step = obj.step_update ?? {};
+        const stepType = typeof step.step_type === "string" ? step.step_type : "";
+        const events = [];
+        if (stepType === "tool") {
+            const info = step.tool_info ?? {};
+            const name = typeof info.name === "string" && info.name
+                ? info.name
+                : typeof step.tool_name === "string" && step.tool_name
+                    ? step.tool_name
+                    : "tool";
+            const target = boundedTarget(primaryToolTarget(info.parameters));
+            const tool = { name, kind: toolKindFor(name), target };
+            const state = typeof step.state === "string" ? step.state : "";
+            if (state === "ACTIVE") {
+                // ACTIVE/DONE arrive as a pair per call (fixture-pinned): ACTIVE is
+                // the call, DONE the result.
+                events.push({ type: "tool_call", session_id: sessionId, ts, text: name, tool });
+            }
+            else if (state === "DONE") {
+                const errorDetail = summarize(info.error);
+                if (errorDetail) {
+                    events.push({
+                        type: "tool_result",
+                        session_id: sessionId,
+                        ts,
+                        text: `tool_result: error: ${errorDetail}`,
+                        tool: { ...tool, status: "error", error_summary: errorDetail },
+                    });
+                }
+                else {
+                    const output = summarize(info.output);
+                    events.push({
+                        type: "tool_result",
+                        session_id: sessionId,
+                        ts,
+                        text: "tool_result",
+                        tool: { ...tool, status: "ok", content_summary: output || undefined },
+                    });
+                    if (isWriteTool(name)) {
+                        events.push({
+                            type: "file_change",
+                            session_id: sessionId,
+                            ts,
+                            tool: { name, kind: "file" },
+                            payload: { path: boundedTarget(primaryToolTarget(info.parameters)), tool: name },
+                        });
+                    }
+                }
+            }
+            // Any OTHER state (PENDING/CANCELLED/ERROR/absent, or a future value) is
+            // a recognized lifecycle no-op: claiming success for it would fabricate
+            // a completed tool call — and, for a write-named tool, a file change
+            // that never happened (Ф0 review #1).
+        }
+        else if (typeof step.text_delta === "string" && step.text_delta) {
+            // agent_response chunks: completed narration segments (not display
+            // deltas — no payload.delta). The typed final comes from `result`.
+            events.push({ type: "message", session_id: sessionId, ts, text: step.text_delta });
+        }
+        // user_input / checkpoint / finish / unknown / future types: recognized
+        // lifecycle no-ops. Step usage is deliberately NOT emitted: the recorded
+        // fixtures prove the per-step usages sum EXACTLY to the terminal
+        // aggregate, so emitting both counted every token twice (sol review).
+        // The one authoritative usage event rides `result`.
+        return events;
+    }
+    if (event === "result") {
+        const r = obj.result ?? {};
+        const status = typeof r.status === "string" ? r.status : "";
+        const events = [];
+        const usage = stepUsage(r.usage);
+        if (status === "SUCCESS") {
+            // Л-20: with a schema envelope the parsed object rides
+            // `structured_output` while `response` concatenates prose AND the JSON;
+            // serialize the parsed object as the typed final (codex model) instead
+            // of parsing mixed text. Without a schema the final is `response`.
+            // Only an OBJECT envelope is a structured final: `false`/`0`/`""` are
+            // not envelopes and must fall through to the prose response (review #7).
+            const structured = r.structured_output !== null && typeof r.structured_output === "object"
+                ? r.structured_output
+                : null;
+            const finalText = structured !== null
+                ? JSON.stringify(structured)
+                : typeof r.response === "string"
+                    ? r.response
+                    : "";
+            if (finalText.trim()) {
+                events.push({
+                    type: "message",
+                    session_id: sessionId,
+                    ts,
+                    text: finalText,
+                    final: true,
+                    payload: {
+                        final_source: structured !== null ? "structured_output" : "result",
+                    },
+                });
+            }
+            else {
+                // Vendor soft-deny class (upstream #794): SUCCESS with an empty
+                // response means a permission-denied turn that did nothing. Honest
+                // typed error, never a silent empty success.
+                events.push({
+                    type: "error",
+                    session_id: sessionId,
+                    ts,
+                    error: "agy reported SUCCESS with an empty response (no output produced; commonly a vendor soft-deny of a required tool permission)",
+                });
+            }
+        }
+        else {
+            events.push({
+                type: "error",
+                session_id: sessionId,
+                ts,
+                error: summarize(r.error) || `agy terminal status ${status || "unknown"}`,
+            });
+        }
+        if (usage)
+            events.push({ type: "usage", session_id: sessionId, ts, usage });
+        return events;
+    }
+    return null;
+}
+/** Tools that MUTATE the workspace. The regex catches the vendor's naming
+ * convention; the allowlist covers proven writers whose names do not match
+ * (`generate_image` writes an image file — Ф0 review #5). `sed_file` is
+ * deliberately absent: whether it mutates on 1.1.13 is unverified, and
+ * claiming a file change we cannot prove is the same defect class as #1. */
+const WRITE_TOOL_NAMES = new Set(["generate_image"]);
+const WRITE_TOOLS_RE = /write|edit|replace|apply|patch/i;
+function isWriteTool(name) {
+    return WRITE_TOOL_NAMES.has(name) || WRITE_TOOLS_RE.test(name);
+}
+function toolKindFor(name) {
+    const n = name.toLowerCase();
+    if (n.includes("command") || n.includes("shell") || n.includes("bash"))
+        return "command";
+    if (n.includes("search") || n.includes("grep") || n.includes("glob") || n.includes("list_dir"))
+        return "search";
+    if (n.includes("browser") || n.includes("url") || n.includes("web"))
+        return "web";
+    if (isWriteTool(n) || n.includes("read") || n.includes("file") || n.includes("view"))
+        return "file";
+    if (n.includes("mcp"))
+        return "mcp";
+    return "other";
+}
+/** The one human-meaningful target among agy's PascalCase tool parameters. */
+function primaryToolTarget(parameters) {
+    if (!parameters || typeof parameters !== "object")
+        return undefined;
+    const p = parameters;
+    for (const key of [
+        "TargetFile",
+        "AbsolutePath",
+        "DirectoryPath",
+        "CommandLine",
+        "Query",
+        "Url",
+    ]) {
+        const v = p[key];
+        if (typeof v === "string" && v)
+            return v;
+    }
+    return undefined;
+}
+/**
+ * agy usage: {input_tokens, output_tokens, thinking_tokens, cache_read_tokens,
+ * total_tokens}. `thinking_tokens` has no schema home and is deliberately
+ * DROPPED (disclosed absence), never folded into output (PLAN R-9).
+ */
+function stepUsage(raw) {
+    if (!raw || typeof raw !== "object")
+        return null;
+    const u = raw;
+    const usage = {};
+    if (typeof u.input_tokens === "number")
+        usage.input_tokens = u.input_tokens;
+    if (typeof u.output_tokens === "number")
+        usage.output_tokens = u.output_tokens;
+    if (typeof u.cache_read_tokens === "number")
+        usage.cached_input_tokens = u.cache_read_tokens;
+    return Object.keys(usage).length ? usage : null;
+}
+function summarize(value) {
+    if (typeof value === "string")
+        return value.trim() ? redactSecrets(value).trim().replace(/\s+/g, " ").slice(0, 1000) : "";
+    // A non-string detail (the vendor sometimes nests an object) must not be
+    // silently dropped into a generic message (Ф0 review #7).
+    if (value === null || value === undefined)
+        return "";
+    try {
+        return redactSecrets(JSON.stringify(value)).trim().slice(0, 1000);
+    }
+    catch {
+        return "";
+    }
+}
+function boundedTarget(value) {
+    if (typeof value !== "string" || !value.trim())
+        return undefined;
+    return redactSecrets(value).slice(0, 500);
+}
+function stringOrUndef(v) {
+    return typeof v === "string" && v ? v : undefined;
+}
+//# sourceMappingURL=parse.js.map

package/dist/parse.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"parse.js","sourceRoot":"","sources":["../src/parse.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAIxD;;;;;;;;GAQG;AACH,MAAM,UAAU,aAAa,CAAC,GAAS,EAAE,SAAiB;IACxD,MAAM,EAAE,GAAG,MAAM,EAAE,CAAC;IACpB,0EAA0E;IAC1E,wEAAwE;IACxE,yEAAyE;IACzE,MAAM,KAAK,GAAG,OAAO,GAAG,EAAE,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;IAE9D,IAAI,KAAK,KAAK,MAAM,EAAE,CAAC;QACrB,MAAM,QAAQ,GAAG,aAAa,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;QACpD,MAAM,KAAK,GAAG,aAAa,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QAC7C,OAAO;YACL;gBACE,IAAI,EAAE,SAAS;gBACf,UAAU,EAAE,SAAS;gBACrB,EAAE;gBACF,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC3C,6DAA6D;gBAC7D,mEAAmE;gBACnE,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE,iBAAiB,EAAE,QAAQ,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAClE;SACF,CAAC;IACJ,CAAC;IAED,IAAI,KAAK,KAAK,aAAa,EAAE,CAAC;QAC5B,MAAM,IAAI,GAAG,GAAG,CAAC,WAAW,IAAI,EAAE,CAAC;QACnC,MAAM,QAAQ,GAAG,OAAO,IAAI,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1E,MAAM,MAAM,GAAmB,EAAE,CAAC;QAElC,IAAI,QAAQ,KAAK,MAAM,EAAE,CAAC;YACxB,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,IAAI,EAAE,CAAC;YAClC,MAAM,IAAI,GACR,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,IAAI;gBACxC,CAAC,CAAC,IAAI,CAAC,IAAI;gBACX,CAAC,CAAC,OAAO,IAAI,CAAC,SAAS,KAAK,QAAQ,IAAI,IAAI,CAAC,SAAS;oBACpD,CAAC,CAAC,IAAI,CAAC,SAAS;oBAChB,CAAC,CAAC,MAAM,CAAC;YACf,MAAM,MAAM,GAAG,aAAa,CAAC,iBAAiB,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC;YACjE,MAAM,IAAI,GAAY,EAAE,IAAI,EAAE,IAAI,EAAE,WAAW,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;YAChE,MAAM,KAAK,GAAG,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;YAC/D,IAAI,KAAK,KAAK,QAAQ,EAAE,CAAC;gBACvB,oEAAoE;gBACpE,6BAA6B;gBAC7B,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,UAAU,EAAE,SAAS,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;YAClF,CAAC;iBAAM,IAAI,KAAK,KAAK,MAAM,EAAE,CAAC;gBAC5B,MAAM,WAAW,GAAG,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;gBAC1C,IAAI,WAAW,EAAE,CAAC;oBAChB,MAAM,CAAC,IAAI,CAAC;wBACV,IAAI,EAAE,aAAa;wBACnB,UAAU,EAAE,SAAS;wBACrB,EAAE;wBACF,IAAI,EAAE,uBAAuB,WAAW,EAAE;wBAC1C,IAAI,EAAE,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,aAAa,EAAE,WAAW,EAAE;qBAC/D,CAAC,CAAC;gBACL,CAAC;qBAAM,CAAC;oBACN,MAAM,MAAM,GAAG,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;oBACtC,MAAM,CAAC,IAAI,CAAC;wBACV,IAAI,EAAE,aAAa;wBACnB,UAAU,EAAE,SAAS;wBACrB,EAAE;wBACF,IAAI,EAAE,aAAa;wBACnB,IAAI,EAAE,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,eAAe,EAAE,MAAM,IAAI,SAAS,EAAE;qBACtE,CAAC,CAAC;oBACH,IAAI,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC;wBACtB,MAAM,CAAC,IAAI,CAAC;4BACV,IAAI,EAAE,aAAa;4BACnB,UAAU,EAAE,SAAS;4BACrB,EAAE;4BACF,IAAI,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE;4BAC5B,OAAO,EAAE,EAAE,IAAI,EAAE,aAAa,CAAC,iBAAiB,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE;yBACjF,CAAC,CAAC;oBACL,CAAC;gBACH,CAAC;YACH,CAAC;YACD,yEAAyE;YACzE,wEAAwE;YACxE,qEAAqE;YACrE,sCAAsC;QACxC,CAAC;aAAM,IAAI,OAAO,IAAI,CAAC,UAAU,KAAK,QAAQ,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;YAClE,mEAAmE;YACnE,mEAAmE;YACnE,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,UAAU,EAAE,SAAS,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC;QACrF,CAAC;QACD,wEAAwE;QACxE,yEAAyE;QACzE,iEAAiE;QACjE,sEAAsE;QACtE,oDAAoD;QACpD,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,IAAI,KAAK,KAAK,QAAQ,EAAE,CAAC;QACvB,MAAM,CAAC,GAAG,GAAG,CAAC,MAAM,IAAI,EAAE,CAAC;QAC3B,MAAM,MAAM,GAAG,OAAO,CAAC,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5D,MAAM,MAAM,GAAmB,EAAE,CAAC;QAClC,MAAM,KAAK,GAAG,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;QAEjC,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,uDAAuD;YACvD,wEAAwE;YACxE,uEAAuE;YACvE,mEAAmE;YACnE,sEAAsE;YACtE,yEAAyE;YACzE,MAAM,UAAU,GACd,CAAC,CAAC,iBAAiB,KAAK,IAAI,IAAI,OAAO,CAAC,CAAC,iBAAiB,KAAK,QAAQ;gBACrE,CAAC,CAAC,CAAC,CAAC,iBAAiB;gBACrB,CAAC,CAAC,IAAI,CAAC;YACX,MAAM,SAAS,GACb,UAAU,KAAK,IAAI;gBACjB,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC;gBAC5B,CAAC,CAAC,OAAO,CAAC,CAAC,QAAQ,KAAK,QAAQ;oBAC9B,CAAC,CAAC,CAAC,CAAC,QAAQ;oBACZ,CAAC,CAAC,EAAE,CAAC;YACX,IAAI,SAAS,CAAC,IAAI,EAAE,EAAE,CAAC;gBACrB,MAAM,CAAC,IAAI,CAAC;oBACV,IAAI,EAAE,SAAS;oBACf,UAAU,EAAE,SAAS;oBACrB,EAAE;oBACF,IAAI,EAAE,SAAS;oBACf,KAAK,EAAE,IAAI;oBACX,OAAO,EAAE;wBACP,YAAY,EAAE,UAAU,KAAK,IAAI,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,QAAQ;qBACnE;iBACF,CAAC,CAAC;YACL,CAAC;iBAAM,CAAC;gBACN,gEAAgE;gBAChE,mEAAmE;gBACnE,6CAA6C;gBAC7C,MAAM,CAAC,IAAI,CAAC;oBACV,IAAI,EAAE,OAAO;oBACb,UAAU,EAAE,SAAS;oBACrB,EAAE;oBACF,KAAK,EACH,6HAA6H;iBAChI,CAAC,CAAC;YACL,CAAC;QACH,CAAC;aAAM,CAAC;YACN,MAAM,CAAC,IAAI,CAAC;gBACV,IAAI,EAAE,OAAO;gBACb,UAAU,EAAE,SAAS;gBACrB,EAAE;gBACF,KAAK,EAAE,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,uBAAuB,MAAM,IAAI,SAAS,EAAE;aAC1E,CAAC,CAAC;QACL,CAAC;QACD,IAAI,KAAK;YAAE,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;QAC5E,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;4EAI4E;AAC5E,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC;AACrD,MAAM,cAAc,GAAG,iCAAiC,CAAC;AACzD,SAAS,WAAW,CAAC,IAAY;IAC/B,OAAO,gBAAgB,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACjE,CAAC;AAED,SAAS,WAAW,CAAC,IAAY;IAC/B,MAAM,CAAC,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;IAC7B,IAAI,CAAC,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC;QAAE,OAAO,SAAS,CAAC;IACzF,IAAI,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC;QAC5F,OAAO,QAAQ,CAAC;IAClB,IAAI,CAAC,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAClF,IAAI,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC;QAClF,OAAO,MAAM,CAAC;IAChB,IAAI,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACpC,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,8EAA8E;AAC9E,SAAS,iBAAiB,CAAC,UAAmB;IAC5C,IAAI,CAAC,UAAU,IAAI,OAAO,UAAU,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IACpE,MAAM,CAAC,GAAG,UAAqC,CAAC;IAChD,KAAK,MAAM,GAAG,IAAI;QAChB,YAAY;QACZ,cAAc;QACd,eAAe;QACf,aAAa;QACb,OAAO;QACP,KAAK;KACN,EAAE,CAAC;QACF,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC;QACjB,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC;YAAE,OAAO,CAAC,CAAC;IAC3C,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;;GAIG;AACH,SAAS,SAAS,CAAC,GAAY;IAC7B,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IACjD,MAAM,CAAC,GAAG,GAA8B,CAAC;IACzC,MAAM,KAAK,GAAuC,EAAE,CAAC;IACrD,IAAI,OAAO,CAAC,CAAC,YAAY,KAAK,QAAQ;QAAE,KAAK,CAAC,YAAY,GAAG,CAAC,CAAC,YAAY,CAAC;IAC5E,IAAI,OAAO,CAAC,CAAC,aAAa,KAAK,QAAQ;QAAE,KAAK,CAAC,aAAa,GAAG,CAAC,CAAC,aAAa,CAAC;IAC/E,IAAI,OAAO,CAAC,CAAC,iBAAiB,KAAK,QAAQ;QAAE,KAAK,CAAC,mBAAmB,GAAG,CAAC,CAAC,iBAAiB,CAAC;IAC7F,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;AAClD,CAAC;AAED,SAAS,SAAS,CAAC,KAAc;IAC/B,IAAI,OAAO,KAAK,KAAK,QAAQ;QAC3B,OAAO,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAC7F,yEAAyE;IACzE,0DAA0D;IAC1D,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,EAAE,CAAC;IACrD,IAAI,CAAC;QACH,OAAO,aAAa,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;IACpE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,SAAS,aAAa,CAAC,KAAc;IACnC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE;QAAE,OAAO,SAAS,CAAC;IACjE,OAAO,aAAa,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;AAC5C,CAAC;AAED,SAAS,aAAa,CAAC,CAAU;IAC/B,OAAO,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AACpD,CAAC"}

package/dist/profile.d.ts

@@ -0,0 +1,85 @@
+import type { CredentialProfile, CredentialProfileStatus } from "@claudexor/schema";
+type EnvMap = Record<string, string | null | undefined>;
+export declare const AGY_BIN: () => string;
+/** Canonical, Claudexor-owned HOME for one named Antigravity identity. */
+export declare function canonicalAgyProfileHome(locator: string): string;
+/**
+ * The vendor's file-based OAuth token inside a profile HOME. agy lands on
+ * file storage because its keyring lookup FAILS in a scoped HOME (macOS: no
+ * login keychain in `$HOME/Library/Keychains` → `falling back to file`); the
+ * profile mechanism therefore REQUIRES that no keychain ever be created
+ * inside the profile HOME. Live-proven on three separate Google accounts
+ * (PLAN §1.2a-1.2c); re-proven per AGY_VENDOR_CLI_VERSION bump because the
+ * fallback is a vendor error path, not a documented mode (R-2').
+ */
+export declare function agyTokenPath(profileHome: string): string;
+/** The token must be a regular FILE: a directory at that path is a malformed
+ * profile, not a login, and must refuse rather than route (Ф0 review #11). */
+export declare function agyTokenFilePresent(profileHome: string): boolean;
+/**
+ * Exact strict-profile env: the profile HOME selects the vendor's whole
+ * config root (`$HOME/.gemini/...`) — agy has no config-dir env var, HOME is
+ * the single lever. `USERPROFILE` mirrors HOME for the win32 resolver, the
+ * auto-updater is pinned off so the closed vendor binary cannot replace
+ * itself mid-run, and the provider scrub drops every API-key route
+ * (`GEMINI_API_KEY` included) so a native subscription run can never silently
+ * turn metered (INV-061).
+ *
+ * Unlike Cursor — whose mutable state is separately relocatable via
+ * `CURSOR_CONFIG_DIR`, so a run keeps state in its LANE home and reads auth
+ * from the profile — agy has exactly one lever. Overriding HOME therefore
+ * moves the vendor's conversations/brain/cache into the profile HOME too, and
+ * the per-lane home is unused for agy runs. Deliberate, not an oversight: a
+ * lane-scoped `.gemini` would be a dead directory the vendor never reads.
+ * What holds today is per-lane RESUME: a lane replays its own vendor
+ * conversation by id (`--conversation`, INV-137). Nothing scopes those
+ * conversations to a lane yet — the vendor's project mechanism
+ * (`--new-project`/`--project`, Л-19) is not wired here — so one profile HOME
+ * accumulates every thread's vendor state, and conversations are NOT scoped per
+ * chat thread.
+ */
+export declare function agyProfileRunEnv(profileHome: string, specEnv?: EnvMap): EnvMap;
+export type AgyResolvedProfileRoute = {
+    home: string;
+    env: EnvMap;
+} | {
+    refusal: string;
+};
+/**
+ * INV-135 strict profile routing: an agy profile is exactly its
+ * `config_dir_login` HOME with a present vendor token file, or a typed
+ * refusal. There is NO engine-default agy credential (owner decision Л-4),
+ * so no fallback ladder exists to fall into.
+ */
+export declare function resolveAgyProfileRoute(profile: Pick<CredentialProfile, "profile_id" | "credential_kind" | "isolation_locator">, specEnv?: EnvMap): AgyResolvedProfileRoute;
+export interface AgyProfileProbeDeps {
+    /** Injectable live probe (tests): print-mode `/model` under the profile env. */
+    runModelProbe: (env: EnvMap, abortSignal?: AbortSignal) => Promise<AgyModelProbe>;
+}
+export type AgyModelProbe = {
+    kind: "authenticated";
+    modelId: string | null;
+} | {
+    kind: "unauthenticated";
+    detail: string;
+} | {
+    kind: "probe_failed";
+    detail: string;
+};
+/**
+ * Quota-free liveness probe: `agy -p "/model" --output-format json` answers
+ * from the CLI without spending a turn (vendor 1.1.11+ print-mode
+ * slash-commands). SUCCESS proves the profile's token authenticates in the
+ * exact env its runs will spawn with (INV-067); an auth error is an honest
+ * logged-out/revoked verdict, and a spawn/parse failure stays `unknown`.
+ */
+export declare function defaultAgyModelProbe(env: EnvMap, abortSignal?: AbortSignal): Promise<AgyModelProbe>;
+/**
+ * Doctor projection for one agy profile (INV-135): the SAME route resolution
+ * the run uses, then the quota-free live probe. A valid profile must admit
+ * the route even though agy has no default store at all — the orchestrator
+ * consults THIS probe for pinned routing.
+ */
+export declare function probeAgyCredentialProfile(profile: CredentialProfile, deps?: AgyProfileProbeDeps, abortSignal?: AbortSignal): Promise<CredentialProfileStatus>;
+export {};
+//# sourceMappingURL=profile.d.ts.map

package/dist/profile.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"profile.d.ts","sourceRoot":"","sources":["../src/profile.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,iBAAiB,EAAE,uBAAuB,EAAE,MAAM,mBAAmB,CAAC;AAIpF,KAAK,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,CAAC,CAAC;AAExD,eAAO,MAAM,OAAO,cAA+C,CAAC;AAEpE,0EAA0E;AAC1E,wBAAgB,uBAAuB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAE/D;AAED;;;;;;;;GAQG;AACH,wBAAgB,YAAY,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,CAExD;AAED;8EAC8E;AAC9E,wBAAgB,mBAAmB,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAMhE;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,wBAAgB,gBAAgB,CAAC,WAAW,EAAE,MAAM,EAAE,OAAO,GAAE,MAAW,GAAG,MAAM,CASlF;AAED,MAAM,MAAM,uBAAuB,GAAG;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,GAAG;IAAE,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC;AAE1F;;;;;GAKG;AACH,wBAAgB,sBAAsB,CACpC,OAAO,EAAE,IAAI,CAAC,iBAAiB,EAAE,YAAY,GAAG,iBAAiB,GAAG,mBAAmB,CAAC,EACxF,OAAO,GAAE,MAAW,GACnB,uBAAuB,CAezB;AAED,MAAM,WAAW,mBAAmB;IAClC,gFAAgF;IAChF,aAAa,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,WAAW,CAAC,EAAE,WAAW,KAAK,OAAO,CAAC,aAAa,CAAC,CAAC;CACnF;AAED,MAAM,MAAM,aAAa,GACrB;IAAE,IAAI,EAAE,eAAe,CAAC;IAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,GACjD;IAAE,IAAI,EAAE,iBAAiB,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GAC3C;IAAE,IAAI,EAAE,cAAc,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAE7C;;;;;;GAMG;AACH,wBAAsB,oBAAoB,CACxC,GAAG,EAAE,MAAM,EACX,WAAW,CAAC,EAAE,WAAW,GACxB,OAAO,CAAC,aAAa,CAAC,CAwBxB;AAED;;;;;GAKG;AACH,wBAAsB,yBAAyB,CAC7C,OAAO,EAAE,iBAAiB,EAC1B,IAAI,GAAE,mBAA6D,EACnE,WAAW,CAAC,EAAE,WAAW,GACxB,OAAO,CAAC,uBAAuB,CAAC,CAgClC"}

package/dist/profile.js

@@ -0,0 +1,160 @@
+import { statSync } from "node:fs";
+import { join } from "node:path";
+import { canonicalIsolationLocator, providerScrubEnv, runCapture } from "@claudexor/core";
+import { CredentialProfileStatus as CredentialProfileStatusSchema } from "@claudexor/schema";
+import { nowIso, redactSecrets } from "@claudexor/util";
+export const AGY_BIN = () => process.env.CLAUDEXOR_AGY_BIN || "agy";
+/** Canonical, Claudexor-owned HOME for one named Antigravity identity. */
+export function canonicalAgyProfileHome(locator) {
+    return canonicalIsolationLocator(locator, "credential profile Antigravity HOME");
+}
+/**
+ * The vendor's file-based OAuth token inside a profile HOME. agy lands on
+ * file storage because its keyring lookup FAILS in a scoped HOME (macOS: no
+ * login keychain in `$HOME/Library/Keychains` → `falling back to file`); the
+ * profile mechanism therefore REQUIRES that no keychain ever be created
+ * inside the profile HOME. Live-proven on three separate Google accounts
+ * (PLAN §1.2a-1.2c); re-proven per AGY_VENDOR_CLI_VERSION bump because the
+ * fallback is a vendor error path, not a documented mode (R-2').
+ */
+export function agyTokenPath(profileHome) {
+    return join(profileHome, ".gemini", "antigravity-cli", "antigravity-oauth-token");
+}
+/** The token must be a regular FILE: a directory at that path is a malformed
+ * profile, not a login, and must refuse rather than route (Ф0 review #11). */
+export function agyTokenFilePresent(profileHome) {
+    try {
+        return statSync(agyTokenPath(profileHome)).isFile();
+    }
+    catch {
+        return false;
+    }
+}
+/**
+ * Exact strict-profile env: the profile HOME selects the vendor's whole
+ * config root (`$HOME/.gemini/...`) — agy has no config-dir env var, HOME is
+ * the single lever. `USERPROFILE` mirrors HOME for the win32 resolver, the
+ * auto-updater is pinned off so the closed vendor binary cannot replace
+ * itself mid-run, and the provider scrub drops every API-key route
+ * (`GEMINI_API_KEY` included) so a native subscription run can never silently
+ * turn metered (INV-061).
+ *
+ * Unlike Cursor — whose mutable state is separately relocatable via
+ * `CURSOR_CONFIG_DIR`, so a run keeps state in its LANE home and reads auth
+ * from the profile — agy has exactly one lever. Overriding HOME therefore
+ * moves the vendor's conversations/brain/cache into the profile HOME too, and
+ * the per-lane home is unused for agy runs. Deliberate, not an oversight: a
+ * lane-scoped `.gemini` would be a dead directory the vendor never reads.
+ * What holds today is per-lane RESUME: a lane replays its own vendor
+ * conversation by id (`--conversation`, INV-137). Nothing scopes those
+ * conversations to a lane yet — the vendor's project mechanism
+ * (`--new-project`/`--project`, Л-19) is not wired here — so one profile HOME
+ * accumulates every thread's vendor state, and conversations are NOT scoped per
+ * chat thread.
+ */
+export function agyProfileRunEnv(profileHome, specEnv = {}) {
+    const home = canonicalAgyProfileHome(profileHome);
+    return {
+        ...specEnv,
+        ...providerScrubEnv(),
+        HOME: home,
+        USERPROFILE: home,
+        AGY_CLI_DISABLE_AUTO_UPDATE: "true",
+    };
+}
+/**
+ * INV-135 strict profile routing: an agy profile is exactly its
+ * `config_dir_login` HOME with a present vendor token file, or a typed
+ * refusal. There is NO engine-default agy credential (owner decision Л-4),
+ * so no fallback ladder exists to fall into.
+ */
+export function resolveAgyProfileRoute(profile, specEnv = {}) {
+    if (profile.credential_kind !== "config_dir_login")
+        return {
+            refusal: `credential profile "${profile.profile_id}": agy supports only the config_dir_login transport (a named profile HOME)`,
+        };
+    try {
+        const home = canonicalAgyProfileHome(profile.isolation_locator ?? "");
+        if (!agyTokenFilePresent(home))
+            return {
+                refusal: `credential profile "${profile.profile_id}" has no Antigravity login in its profile HOME (run \`claudexor profiles login agy ${profile.profile_id}\` first)`,
+            };
+        return { home, env: agyProfileRunEnv(home, specEnv) };
+    }
+    catch (err) {
+        return { refusal: err instanceof Error ? err.message : String(err) };
+    }
+}
+/**
+ * Quota-free liveness probe: `agy -p "/model" --output-format json` answers
+ * from the CLI without spending a turn (vendor 1.1.11+ print-mode
+ * slash-commands). SUCCESS proves the profile's token authenticates in the
+ * exact env its runs will spawn with (INV-067); an auth error is an honest
+ * logged-out/revoked verdict, and a spawn/parse failure stays `unknown`.
+ */
+export async function defaultAgyModelProbe(env, abortSignal) {
+    try {
+        const r = await runCapture(AGY_BIN(), ["-p", "/model", "--output-format", "json"], {
+            timeoutMs: 30_000,
+            env,
+            abortSignal,
+            cancelSignal: "SIGTERM",
+        });
+        const parsed = JSON.parse(r.stdout.trim() || "{}");
+        if (parsed?.status === "SUCCESS")
+            return {
+                kind: "authenticated",
+                modelId: typeof parsed?.command?.data?.id === "string" ? parsed.command.data.id : null,
+            };
+        return {
+            kind: "unauthenticated",
+            detail: redactSecrets(String(parsed?.error ?? "authentication required")).slice(0, 300),
+        };
+    }
+    catch (err) {
+        return {
+            kind: "probe_failed",
+            detail: redactSecrets(err instanceof Error ? err.message : String(err)).slice(0, 300),
+        };
+    }
+}
+/**
+ * Doctor projection for one agy profile (INV-135): the SAME route resolution
+ * the run uses, then the quota-free live probe. A valid profile must admit
+ * the route even though agy has no default store at all — the orchestrator
+ * consults THIS probe for pinned routing.
+ */
+export async function probeAgyCredentialProfile(profile, deps = { runModelProbe: defaultAgyModelProbe }, abortSignal) {
+    const base = { profile_id: profile.profile_id, harness_id: "agy" };
+    const route = resolveAgyProfileRoute(profile);
+    if ("refusal" in route)
+        return CredentialProfileStatusSchema.parse({
+            ...base,
+            availability: "unavailable",
+            verification: "not_run",
+            detail: route.refusal,
+        });
+    const probe = await deps.runModelProbe(route.env, abortSignal);
+    if (probe.kind === "authenticated")
+        return CredentialProfileStatusSchema.parse({
+            ...base,
+            availability: "available",
+            verification: "passed",
+            detail: `Antigravity login verified in the profile HOME${probe.modelId ? ` (model ${probe.modelId})` : ""}`,
+            last_verified_at: nowIso(),
+        });
+    if (probe.kind === "unauthenticated")
+        return CredentialProfileStatusSchema.parse({
+            ...base,
+            availability: "unavailable",
+            verification: "failed",
+            detail: `Antigravity token present but not accepted: ${probe.detail}`,
+        });
+    return CredentialProfileStatusSchema.parse({
+        ...base,
+        availability: "unknown",
+        verification: "not_run",
+        detail: probe.detail,
+    });
+}
+//# sourceMappingURL=profile.js.map

package/dist/profile.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"profile.js","sourceRoot":"","sources":["../src/profile.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AACnC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,yBAAyB,EAAE,gBAAgB,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAE1F,OAAO,EAAE,uBAAuB,IAAI,6BAA6B,EAAE,MAAM,mBAAmB,CAAC;AAC7F,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAIxD,MAAM,CAAC,MAAM,OAAO,GAAG,GAAG,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,iBAAiB,IAAI,KAAK,CAAC;AAEpE,0EAA0E;AAC1E,MAAM,UAAU,uBAAuB,CAAC,OAAe;IACrD,OAAO,yBAAyB,CAAC,OAAO,EAAE,qCAAqC,CAAC,CAAC;AACnF,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,YAAY,CAAC,WAAmB;IAC9C,OAAO,IAAI,CAAC,WAAW,EAAE,SAAS,EAAE,iBAAiB,EAAE,yBAAyB,CAAC,CAAC;AACpF,CAAC;AAED;8EAC8E;AAC9E,MAAM,UAAU,mBAAmB,CAAC,WAAmB;IACrD,IAAI,CAAC;QACH,OAAO,QAAQ,CAAC,YAAY,CAAC,WAAW,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;IACtD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,MAAM,UAAU,gBAAgB,CAAC,WAAmB,EAAE,OAAO,GAAW,EAAE;IACxE,MAAM,IAAI,GAAG,uBAAuB,CAAC,WAAW,CAAC,CAAC;IAClD,OAAO;QACL,GAAG,OAAO;QACV,GAAG,gBAAgB,EAAE;QACrB,IAAI,EAAE,IAAI;QACV,WAAW,EAAE,IAAI;QACjB,2BAA2B,EAAE,MAAM;KACpC,CAAC;AACJ,CAAC;AAID;;;;;GAKG;AACH,MAAM,UAAU,sBAAsB,CACpC,OAAwF,EACxF,OAAO,GAAW,EAAE;IAEpB,IAAI,OAAO,CAAC,eAAe,KAAK,kBAAkB;QAChD,OAAO;YACL,OAAO,EAAE,uBAAuB,OAAO,CAAC,UAAU,4EAA4E;SAC/H,CAAC;IACJ,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,uBAAuB,CAAC,OAAO,CAAC,iBAAiB,IAAI,EAAE,CAAC,CAAC;QACtE,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC;YAC5B,OAAO;gBACL,OAAO,EAAE,uBAAuB,OAAO,CAAC,UAAU,sFAAsF,OAAO,CAAC,UAAU,WAAW;aACtK,CAAC;QACJ,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,gBAAgB,CAAC,IAAI,EAAE,OAAO,CAAC,EAAE,CAAC;IACxD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,EAAE,OAAO,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;IACvE,CAAC;AACH,CAAC;AAYD;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,GAAW,EACX,WAAyB;IAEzB,IAAI,CAAC;QACH,MAAM,CAAC,GAAG,MAAM,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,IAAI,EAAE,QAAQ,EAAE,iBAAiB,EAAE,MAAM,CAAC,EAAE;YACjF,SAAS,EAAE,MAAM;YACjB,GAAG;YACH,WAAW;YACX,YAAY,EAAE,SAAS;SACxB,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,IAAI,CAAC,CAAC;QACnD,IAAI,MAAM,EAAE,MAAM,KAAK,SAAS;YAC9B,OAAO;gBACL,IAAI,EAAE,eAAe;gBACrB,OAAO,EAAE,OAAO,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI;aACvF,CAAC;QACJ,OAAO;YACL,IAAI,EAAE,iBAAiB;YACvB,MAAM,EAAE,aAAa,CAAC,MAAM,CAAC,MAAM,EAAE,KAAK,IAAI,yBAAyB,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;SACxF,CAAC;IACJ,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO;YACL,IAAI,EAAE,cAAc;YACpB,MAAM,EAAE,aAAa,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;SACtF,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC7C,OAA0B,EAC1B,IAAI,GAAwB,EAAE,aAAa,EAAE,oBAAoB,EAAE,EACnE,WAAyB;IAEzB,MAAM,IAAI,GAAG,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC;IACnE,MAAM,KAAK,GAAG,sBAAsB,CAAC,OAAO,CAAC,CAAC;IAC9C,IAAI,SAAS,IAAI,KAAK;QACpB,OAAO,6BAA6B,CAAC,KAAK,CAAC;YACzC,GAAG,IAAI;YACP,YAAY,EAAE,aAAa;YAC3B,YAAY,EAAE,SAAS;YACvB,MAAM,EAAE,KAAK,CAAC,OAAO;SACtB,CAAC,CAAC;IACL,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;IAC/D,IAAI,KAAK,CAAC,IAAI,KAAK,eAAe;QAChC,OAAO,6BAA6B,CAAC,KAAK,CAAC;YACzC,GAAG,IAAI;YACP,YAAY,EAAE,WAAW;YACzB,YAAY,EAAE,QAAQ;YACtB,MAAM,EAAE,iDAAiD,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,WAAW,KAAK,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;YAC3G,gBAAgB,EAAE,MAAM,EAAE;SAC3B,CAAC,CAAC;IACL,IAAI,KAAK,CAAC,IAAI,KAAK,iBAAiB;QAClC,OAAO,6BAA6B,CAAC,KAAK,CAAC;YACzC,GAAG,IAAI;YACP,YAAY,EAAE,aAAa;YAC3B,YAAY,EAAE,QAAQ;YACtB,MAAM,EAAE,+CAA+C,KAAK,CAAC,MAAM,EAAE;SACtE,CAAC,CAAC;IACL,OAAO,6BAA6B,CAAC,KAAK,CAAC;QACzC,GAAG,IAAI;QACP,YAAY,EAAE,SAAS;QACvB,YAAY,EAAE,SAAS;QACvB,MAAM,EAAE,KAAK,CAAC,MAAM;KACrB,CAAC,CAAC;AACL,CAAC"}

package/dist/vendor-cli-version.d.ts

@@ -0,0 +1,15 @@
+import type { PinnedVendorCliVersion } from "@claudexor/util";
+/**
+ * The Antigravity CLI (`agy`) version this adapter's recorded fixtures,
+ * manifest `known_models` list, and file-token-fallback proof were captured
+ * against. Unlike the claude/codex constants this is NOT an npm install pin —
+ * agy ships as a closed Google binary with no npm artifact (the installer
+ * uses the vendor's official script, cursor-style, `human_observed`). It IS
+ * the verification stamp: `known_models_verified_against` reads it, fixture
+ * provenance records it, and the doctor discloses drift when the installed
+ * binary self-updates past it. The profile file-token fallback (the whole
+ * multi-account mechanism) is re-proven per bump of this constant — it is a
+ * vendor ERROR path, not a documented mode (PLAN Л-15/R-2').
+ */
+export declare const AGY_VENDOR_CLI_VERSION: PinnedVendorCliVersion;
+//# sourceMappingURL=vendor-cli-version.d.ts.map

package/dist/vendor-cli-version.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"vendor-cli-version.d.ts","sourceRoot":"","sources":["../src/vendor-cli-version.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,iBAAiB,CAAC;AAE9D;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,sBAAsB,EAAE,sBAAiC,CAAC"}

package/dist/vendor-cli-version.js

@@ -0,0 +1,14 @@
+/**
+ * The Antigravity CLI (`agy`) version this adapter's recorded fixtures,
+ * manifest `known_models` list, and file-token-fallback proof were captured
+ * against. Unlike the claude/codex constants this is NOT an npm install pin —
+ * agy ships as a closed Google binary with no npm artifact (the installer
+ * uses the vendor's official script, cursor-style, `human_observed`). It IS
+ * the verification stamp: `known_models_verified_against` reads it, fixture
+ * provenance records it, and the doctor discloses drift when the installed
+ * binary self-updates past it. The profile file-token fallback (the whole
+ * multi-account mechanism) is re-proven per bump of this constant — it is a
+ * vendor ERROR path, not a documented mode (PLAN Л-15/R-2').
+ */
+export const AGY_VENDOR_CLI_VERSION = "1.1.13";
+//# sourceMappingURL=vendor-cli-version.js.map

package/dist/vendor-cli-version.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"vendor-cli-version.js","sourceRoot":"","sources":["../src/vendor-cli-version.ts"],"names":[],"mappings":"AAEA;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAA2B,QAAQ,CAAC"}

package/package.json

@@ -0,0 +1,45 @@
+{
+  "name": "@claudexor/harness-agy",
+  "version": "3.5.0",
+  "license": "MIT",
+  "description": "Google Antigravity CLI adapter (agy -p --output-format stream-json).",
+  "type": "module",
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "default": "./dist/index.js"
+    }
+  },
+  "files": [
+    "dist"
+  ],
+  "dependencies": {
+    "@claudexor/util": "3.5.0",
+    "@claudexor/schema": "3.5.0",
+    "@claudexor/core": "3.5.0"
+  },
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/razzant/claudexor.git",
+    "directory": "packages/harness-agy"
+  },
+  "homepage": "https://github.com/razzant/claudexor#readme",
+  "bugs": {
+    "url": "https://github.com/razzant/claudexor/issues"
+  },
+  "engines": {
+    "node": ">=20.19"
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "devDependencies": {
+    "yaml": "^2.6.1"
+  },
+  "scripts": {
+    "build": "tsc",
+    "typecheck": "tsc --noEmit"
+  }
+}