@cortexkit/opencode-antigravity-auth 1.1.0 → 2.0.1

package/dist/src/plugin/auth-loader.js

@@ -0,0 +1,225 @@
+import { createHash } from 'node:crypto';
+import { getHealthTracker } from '@cortexkit/antigravity-auth-core';
+import { buildSidebarMachineStateFromAccounts, isAccountCurrent, setSidebarMachineState, toCapturedTier, } from '../sidebar-state';
+import { AccountManager } from './accounts';
+import { isOAuthAuth } from './auth';
+import { buildAuthFromStoredAccount, detectAuthStorageDrift, } from './auth-drift';
+import { getLogFilePath, isDebugEnabled } from './debug';
+import { createLogger } from './logger';
+import { createProactiveRefreshQueue, } from './refresh-queue';
+import { AccountStorageUnreadableError, clearAccounts, loadAccounts, } from './storage';
+const log = createLogger('auth-loader');
+/**
+ * Opaque identity derived from a refresh token. Mirrors the local
+ * helper in `account-manager.ts` and `command-data.ts` — the auth-loader
+ * stays independent because it ships in the plugin's import graph and
+ * can't reach into the core barrel for `quotaAccountIdentity`. The
+ * sidebar projection uses this hash to detect a stale quota snapshot
+ * captured for a different account after an index shift.
+ */
+function refreshTokenIdentity(refreshToken) {
+    return createHash('sha256').update(refreshToken).digest('hex').slice(0, 16);
+}
+export function createAuthLoader({ client, providerId, config, lifecycle, createFetch, onGetAuth, dependencies, }) {
+    const deps = {
+        loadAccounts: dependencies?.loadAccounts ?? loadAccounts,
+        clearAccounts: dependencies?.clearAccounts ?? clearAccounts,
+        loadAccountManager: dependencies?.loadAccountManager ??
+            ((auth) => AccountManager.loadFromDisk(auth)),
+        createRefreshQueue: dependencies?.createRefreshQueue ?? createProactiveRefreshQueue,
+        isDebugEnabled: dependencies?.isDebugEnabled ?? isDebugEnabled,
+        getLogFilePath: dependencies?.getLogFilePath ?? getLogFilePath,
+    };
+    let fetchRuntime = null;
+    // Reload chain — `installRuntime` swaps the fetch runtime and
+    // (previously) discarded the previous runtime's dispose with `void`,
+    // so two overlapping reloads could interleave teardown. Serialize
+    // reloads through a single shared promise so each new install waits
+    // for the previous one to fully settle (including its dispose)
+    // before tearing down the runtime it depends on.
+    let reloadChain = Promise.resolve();
+    lifecycle.register({
+        async dispose() {
+            const runtime = fetchRuntime;
+            fetchRuntime = null;
+            await runtime?.dispose();
+        },
+    }, 'producer');
+    // Reload hook: invoked after out-of-band storage mutations (e.g.
+    // OAuth add) so the live AccountManager + fetch interceptor see the
+    // newly-persisted account without waiting for a plugin restart. The
+    // handle returned below wires this through to the OAuth finish flow.
+    let reloadRuntime = async () => { };
+    const installRuntime = async (accountManager, getAuth) => {
+        if (accountManager.getAccountCount() > 0) {
+            accountManager.requestSaveToDisk();
+        }
+        let refreshQueue = null;
+        if (config.proactive_token_refresh &&
+            accountManager.getAccountCount() > 0) {
+            refreshQueue = deps.createRefreshQueue(client, providerId, {
+                enabled: config.proactive_token_refresh,
+                bufferSeconds: config.proactive_refresh_buffer_seconds,
+                checkIntervalSeconds: config.proactive_refresh_check_interval_seconds,
+            });
+            refreshQueue.setAccountManager(accountManager);
+        }
+        await lifecycle.replaceAccountRuntime(accountManager, refreshQueue);
+        refreshQueue?.start();
+        // Swap the fetch runtime FIRST so the host's captured fetch
+        // reference (a call-time delegating wrapper below) immediately
+        // routes through the new interceptor, then await the previous
+        // runtime's dispose. The swap-then-dispose order guarantees there
+        // is no fetch gap between the old and new runtimes.
+        const previousRuntime = fetchRuntime;
+        fetchRuntime = createFetch({ accountManager, getAuth });
+        await previousRuntime?.dispose();
+        // Push the freshly materialized account pool into the sidebar so the
+        // TUI's next poll renders the labels / health / cooldown it needs
+        // without waiting for the first fetch to complete.
+        await setSidebarMachineState(buildSidebarMachineStateFromAccounts(accountManager.getAccounts().map((entry) => {
+            const activeByFamily = accountManager.getActiveIndexByFamily();
+            return {
+                index: entry.index,
+                label: entry.label,
+                enabled: entry.enabled,
+                current: isAccountCurrent(entry.index, activeByFamily),
+                coolingDownUntil: entry.coolingDownUntil,
+                healthScore: getHealthTracker().getScore(entry.index),
+                cachedQuota: entry.cachedQuota,
+                // Stamp the sidebar snapshot so the projection can detect a
+                // stale cache that landed on the wrong account (the manager's
+                // `cachedQuotaAccountId` is keyed to whatever account actually
+                // produced the snapshot — the live refresh-token hash is the
+                // expected identity at this slot).
+                cachedQuotaAccountId: entry.cachedQuotaAccountId,
+                currentQuotaAccountId: refreshTokenIdentity(entry.parts.refreshToken),
+                tier: toCapturedTier(entry),
+            };
+        })));
+    };
+    async function runLoader(getAuth, provider) {
+        onGetAuth?.(getAuth);
+        let auth = await getAuth();
+        if (!isOAuthAuth(auth)) {
+            let storedAccounts;
+            try {
+                storedAccounts = await deps.loadAccounts();
+            }
+            catch (error) {
+                // Fail closed: do NOT proceed with `clearAccounts()` (which
+                // would destroy a recoverable corrupt file) and do NOT
+                // fabricate an empty pool. Surface the unreadable error so
+                // the caller can prompt the user to repair or remove the
+                // file. Backup path + reason are carried in `error.details`.
+                if (error instanceof AccountStorageUnreadableError) {
+                    log.error('Refusing to start: account storage is unreadable', {
+                        path: error.details.path,
+                        reason: error.details.reason,
+                        backupPath: error.details.backupPath,
+                    });
+                    try {
+                        await client.tui.showToast({
+                            body: {
+                                message: `Account storage at ${error.details.path} is unreadable (${error.details.reason}). The plugin will not start until the file is repaired or removed.${error.details.backupPath ? ` A backup was written to ${error.details.backupPath}.` : ''}`,
+                                variant: 'error',
+                                duration: 30_000,
+                            },
+                        });
+                    }
+                    catch { }
+                }
+                throw error;
+            }
+            const drift = detectAuthStorageDrift(auth, storedAccounts);
+            if (drift.status === 'restorable' && drift.account) {
+                auth = buildAuthFromStoredAccount(drift.account);
+                try {
+                    await client.auth.set({
+                        path: { id: providerId },
+                        body: {
+                            type: 'oauth',
+                            refresh: auth.refresh,
+                            access: auth.access ?? '',
+                            expires: auth.expires ?? 0,
+                        },
+                    });
+                    log.info('Restored Antigravity OAuth auth from account storage', {
+                        reason: drift.reason,
+                        email: drift.account.email,
+                    });
+                }
+                catch (error) {
+                    log.warn('Failed to restore Antigravity OAuth auth from account storage', { error: String(error) });
+                }
+            }
+        }
+        if (!isOAuthAuth(auth)) {
+            try {
+                await deps.clearAccounts();
+            }
+            catch { }
+            return {};
+        }
+        const accountManager = await deps.loadAccountManager(auth);
+        await installRuntime(accountManager, getAuth);
+        if (deps.isDebugEnabled()) {
+            const logPath = deps.getLogFilePath();
+            if (logPath) {
+                try {
+                    await client.tui.showToast({
+                        body: { message: `Debug log: ${logPath}`, variant: 'info' },
+                    });
+                }
+                catch { }
+            }
+        }
+        if (provider.models) {
+            for (const model of Object.values(provider.models)) {
+                if (model)
+                    model.cost = { input: 0, output: 0 };
+            }
+        }
+        return {
+            apiKey: '',
+            // Return a stable delegating wrapper that reads `fetchRuntime`
+            // at CALL time. A direct `fetchRuntime!.fetch` reference would
+            // capture the current runtime; the host keeps that reference
+            // across `reload()` calls, so a captured fetch would still route
+            // through the OLD interceptor after an OAuth add. The wrapper
+            // matches the host's `LoaderResult.fetch` signature exactly
+            // (no `this` binding) so behavior is preserved.
+            fetch: (input, init) => fetchRuntime.fetch(input, init),
+        };
+    }
+    reloadRuntime = async (getAuth) => {
+        const auth = await getAuth();
+        if (!isOAuthAuth(auth))
+            return;
+        const nextManager = await deps.loadAccountManager(auth);
+        await installRuntime(nextManager, getAuth);
+    };
+    // Return a callable object: `plugin.auth.loader` is invoked with
+    // `(getAuth, provider)` (host contract), and `authLoader.reload(...)`
+    // rebuilds the runtime after out-of-band storage mutations (OAuth add).
+    // The callable closes over `runLoader` directly so the `this`-context
+    // binding stays unbound.
+    async function authLoaderCallable(getAuth, provider) {
+        return runLoader(getAuth, provider);
+    }
+    async function reload(getAuth) {
+        const next = reloadChain.then(() => reloadRuntime(getAuth));
+        reloadChain = next.catch(() => { });
+        return next;
+    }
+    // `load` mirrors the authLoaderCallable so the public handle
+    // (`AuthLoaderHandle.load`) exposes the same entry point the host
+    // invokes. Without this assignment, contract consumers read
+    // `.load` as undefined and the documented type would lie.
+    const authLoader = Object.assign(authLoaderCallable, {
+        reload,
+        load: authLoaderCallable,
+    });
+    return authLoader;
+}
+//# sourceMappingURL=auth-loader.js.map

package/dist/src/plugin/auth-loader.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-loader.js","sourceRoot":"","sources":["../../../src/plugin/auth-loader.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACxC,OAAO,EAAE,gBAAgB,EAAE,MAAM,kCAAkC,CAAA;AACnE,OAAO,EACL,oCAAoC,EACpC,gBAAgB,EAChB,sBAAsB,EACtB,cAAc,GACf,MAAM,kBAAkB,CAAA;AACzB,OAAO,EAAE,cAAc,EAAE,MAAM,YAAY,CAAA;AAC3C,OAAO,EAAE,WAAW,EAAE,MAAM,QAAQ,CAAA;AACpC,OAAO,EACL,0BAA0B,EAC1B,sBAAsB,GACvB,MAAM,cAAc,CAAA;AAErB,OAAO,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,SAAS,CAAA;AAExD,OAAO,EAAE,YAAY,EAAE,MAAM,UAAU,CAAA;AACvC,OAAO,EACL,2BAA2B,GAE5B,MAAM,iBAAiB,CAAA;AACxB,OAAO,EACL,6BAA6B,EAC7B,aAAa,EACb,YAAY,GACb,MAAM,WAAW,CAAA;AASlB,MAAM,GAAG,GAAG,YAAY,CAAC,aAAa,CAAC,CAAA;AAEvC;;;;;;;GAOG;AACH,SAAS,oBAAoB,CAAC,YAAoB;IAChD,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAA;AAC7E,CAAC;AAsDD,MAAM,UAAU,gBAAgB,CAAC,EAC/B,MAAM,EACN,UAAU,EACV,MAAM,EACN,SAAS,EACT,WAAW,EACX,SAAS,EACT,YAAY,GACY;IACxB,MAAM,IAAI,GAA2B;QACnC,YAAY,EAAE,YAAY,EAAE,YAAY,IAAI,YAAY;QACxD,aAAa,EAAE,YAAY,EAAE,aAAa,IAAI,aAAa;QAC3D,kBAAkB,EAChB,YAAY,EAAE,kBAAkB;YAChC,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,cAAc,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;QAC/C,kBAAkB,EAChB,YAAY,EAAE,kBAAkB,IAAI,2BAA2B;QACjE,cAAc,EAAE,YAAY,EAAE,cAAc,IAAI,cAAc;QAC9D,cAAc,EAAE,YAAY,EAAE,cAAc,IAAI,cAAc;KAC/D,CAAA;IACD,IAAI,YAAY,GAA4B,IAAI,CAAA;IAChD,8DAA8D;IAC9D,qEAAqE;IACrE,kEAAkE;IAClE,oEAAoE;IACpE,+DAA+D;IAC/D,iDAAiD;IACjD,IAAI,WAAW,GAAkB,OAAO,CAAC,OAAO,EAAE,CAAA;IAElD,SAAS,CAAC,QAAQ,CAChB;QACE,KAAK,CAAC,OAAO;YACX,MAAM,OAAO,GAAG,YAAY,CAAA;YAC5B,YAAY,GAAG,IAAI,CAAA;YACnB,MAAM,OAAO,EAAE,OAAO,EAAE,CAAA;QAC1B,CAAC;KACF,EACD,UAAU,CACX,CAAA;IAED,iEAAiE;IACjE,oEAAoE;IACpE,oEAAoE;IACpE,qEAAqE;IACrE,IAAI,aAAa,GAAyB,KAAK,IAAI,EAAE,GAAE,CAAC,CAAA;IAExD,MAAM,cAAc,GAAG,KAAK,EAC1B,cAA8B,EAC9B,OAAgB,EACD,EAAE;QACjB,IAAI,cAAc,CAAC,eAAe,EAAE,GAAG,CAAC,EAAE,CAAC;YACzC,cAAc,CAAC,iBAAiB,EAAE,CAAA;QACpC,CAAC;QAED,IAAI,YAAY,GAAiC,IAAI,CAAA;QACrD,IACE,MAAM,CAAC,uBAAuB;YAC9B,cAAc,CAAC,eAAe,EAAE,GAAG,CAAC,EACpC,CAAC;YACD,YAAY,GAAG,IAAI,CAAC,kBAAkB,CAAC,MAAM,EAAE,UAAU,EAAE;gBACzD,OAAO,EAAE,MAAM,CAAC,uBAAuB;gBACvC,aAAa,EAAE,MAAM,CAAC,gCAAgC;gBACtD,oBAAoB,EAAE,MAAM,CAAC,wCAAwC;aACtE,CAAC,CAAA;YACF,YAAY,CAAC,iBAAiB,CAAC,cAAc,CAAC,CAAA;QAChD,CAAC;QAED,MAAM,SAAS,CAAC,qBAAqB,CAAC,cAAc,EAAE,YAAY,CAAC,CAAA;QACnE,YAAY,EAAE,KAAK,EAAE,CAAA;QAErB,4DAA4D;QAC5D,+DAA+D;QAC/D,8DAA8D;QAC9D,kEAAkE;QAClE,oDAAoD;QACpD,MAAM,eAAe,GAAG,YAAY,CAAA;QACpC,YAAY,GAAG,WAAW,CAAC,EAAE,cAAc,EAAE,OAAO,EAAE,CAAC,CAAA;QACvD,MAAM,eAAe,EAAE,OAAO,EAAE,CAAA;QAEhC,qEAAqE;QACrE,kEAAkE;QAClE,mDAAmD;QACnD,MAAM,sBAAsB,CAC1B,oCAAoC,CAClC,cAAc,CAAC,WAAW,EAAE,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;YACzC,MAAM,cAAc,GAAG,cAAc,CAAC,sBAAsB,EAAE,CAAA;YAC9D,OAAO;gBACL,KAAK,EAAE,KAAK,CAAC,KAAK;gBAClB,KAAK,EAAE,KAAK,CAAC,KAAK;gBAClB,OAAO,EAAE,KAAK,CAAC,OAAO;gBACtB,OAAO,EAAE,gBAAgB,CAAC,KAAK,CAAC,KAAK,EAAE,cAAc,CAAC;gBACtD,gBAAgB,EAAE,KAAK,CAAC,gBAAgB;gBACxC,WAAW,EAAE,gBAAgB,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC;gBACrD,WAAW,EAAE,KAAK,CAAC,WAAW;gBAC9B,4DAA4D;gBAC5D,8DAA8D;gBAC9D,+DAA+D;gBAC/D,6DAA6D;gBAC7D,mCAAmC;gBACnC,oBAAoB,EAAE,KAAK,CAAC,oBAAoB;gBAChD,qBAAqB,EAAE,oBAAoB,CACzC,KAAK,CAAC,KAAK,CAAC,YAAY,CACzB;gBACD,IAAI,EAAE,cAAc,CAAC,KAAK,CAAC;aAC5B,CAAA;QACH,CAAC,CAAC,CACH,CACF,CAAA;IACH,CAAC,CAAA;IAED,KAAK,UAAU,SAAS,CACtB,OAAgB,EAChB,QAAkB;QAElB,SAAS,EAAE,CAAC,OAAO,CAAC,CAAA;QACpB,IAAI,IAAI,GAAG,MAAM,OAAO,EAAE,CAAA;QAE1B,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC;YACvB,IAAI,cAAwD,CAAA;YAC5D,IAAI,CAAC;gBACH,cAAc,GAAG,MAAM,IAAI,CAAC,YAAY,EAAE,CAAA;YAC5C,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,4DAA4D;gBAC5D,uDAAuD;gBACvD,2DAA2D;gBAC3D,yDAAyD;gBACzD,6DAA6D;gBAC7D,IAAI,KAAK,YAAY,6BAA6B,EAAE,CAAC;oBACnD,GAAG,CAAC,KAAK,CAAC,kDAAkD,EAAE;wBAC5D,IAAI,EAAE,KAAK,CAAC,OAAO,CAAC,IAAI;wBACxB,MAAM,EAAE,KAAK,CAAC,OAAO,CAAC,MAAM;wBAC5B,UAAU,EAAE,KAAK,CAAC,OAAO,CAAC,UAAU;qBACrC,CAAC,CAAA;oBACF,IAAI,CAAC;wBACH,MAAM,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC;4BACzB,IAAI,EAAE;gCACJ,OAAO,EAAE,sBAAsB,KAAK,CAAC,OAAO,CAAC,IAAI,mBAAmB,KAAK,CAAC,OAAO,CAAC,MAAM,sEAAsE,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,4BAA4B,KAAK,CAAC,OAAO,CAAC,UAAU,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;gCACvP,OAAO,EAAE,OAAO;gCAChB,QAAQ,EAAE,MAAM;6BACjB;yBACF,CAAC,CAAA;oBACJ,CAAC;oBAAC,MAAM,CAAC,CAAA,CAAC;gBACZ,CAAC;gBACD,MAAM,KAAK,CAAA;YACb,CAAC;YACD,MAAM,KAAK,GAAG,sBAAsB,CAAC,IAAI,EAAE,cAAc,CAAC,CAAA;YAC1D,IAAI,KAAK,CAAC,MAAM,KAAK,YAAY,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;gBACnD,IAAI,GAAG,0BAA0B,CAAC,KAAK,CAAC,OAAO,CAAC,CAAA;gBAChD,IAAI,CAAC;oBACH,MAAM,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC;wBACpB,IAAI,EAAE,EAAE,EAAE,EAAE,UAAU,EAAE;wBACxB,IAAI,EAAE;4BACJ,IAAI,EAAE,OAAO;4BACb,OAAO,EAAE,IAAI,CAAC,OAAO;4BACrB,MAAM,EAAE,IAAI,CAAC,MAAM,IAAI,EAAE;4BACzB,OAAO,EAAE,IAAI,CAAC,OAAO,IAAI,CAAC;yBAC3B;qBACF,CAAC,CAAA;oBACF,GAAG,CAAC,IAAI,CAAC,sDAAsD,EAAE;wBAC/D,MAAM,EAAE,KAAK,CAAC,MAAM;wBACpB,KAAK,EAAE,KAAK,CAAC,OAAO,CAAC,KAAK;qBAC3B,CAAC,CAAA;gBACJ,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,GAAG,CAAC,IAAI,CACN,+DAA+D,EAC/D,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,CACzB,CAAA;gBACH,CAAC;YACH,CAAC;QACH,CAAC;QAED,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC;YACvB,IAAI,CAAC;gBACH,MAAM,IAAI,CAAC,aAAa,EAAE,CAAA;YAC5B,CAAC;YAAC,MAAM,CAAC,CAAA,CAAC;YACV,OAAO,EAAE,CAAA;QACX,CAAC;QAED,MAAM,cAAc,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAA;QAC1D,MAAM,cAAc,CAAC,cAAc,EAAE,OAAO,CAAC,CAAA;QAE7C,IAAI,IAAI,CAAC,cAAc,EAAE,EAAE,CAAC;YAC1B,MAAM,OAAO,GAAG,IAAI,CAAC,cAAc,EAAE,CAAA;YACrC,IAAI,OAAO,EAAE,CAAC;gBACZ,IAAI,CAAC;oBACH,MAAM,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC;wBACzB,IAAI,EAAE,EAAE,OAAO,EAAE,cAAc,OAAO,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE;qBAC5D,CAAC,CAAA;gBACJ,CAAC;gBAAC,MAAM,CAAC,CAAA,CAAC;YACZ,CAAC;QACH,CAAC;QAED,IAAI,QAAQ,CAAC,MAAM,EAAE,CAAC;YACpB,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;gBACnD,IAAI,KAAK;oBAAG,KAAuB,CAAC,IAAI,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,CAAA;YACpE,CAAC;QACH,CAAC;QAED,OAAO;YACL,MAAM,EAAE,EAAE;YACV,+DAA+D;YAC/D,+DAA+D;YAC/D,6DAA6D;YAC7D,iEAAiE;YACjE,8DAA8D;YAC9D,4DAA4D;YAC5D,gDAAgD;YAChD,KAAK,EAAE,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,YAAa,CAAC,KAAK,CAAC,KAAK,EAAE,IAAI,CAAC;SACzD,CAAA;IACH,CAAC;IAED,aAAa,GAAG,KAAK,EAAE,OAAgB,EAAiB,EAAE;QACxD,MAAM,IAAI,GAAG,MAAM,OAAO,EAAE,CAAA;QAC5B,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC;YAAE,OAAM;QAC9B,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAA;QACvD,MAAM,cAAc,CAAC,WAAW,EAAE,OAAO,CAAC,CAAA;IAC5C,CAAC,CAAA;IAED,iEAAiE;IACjE,sEAAsE;IACtE,wEAAwE;IACxE,sEAAsE;IACtE,yBAAyB;IACzB,KAAK,UAAU,kBAAkB,CAC/B,OAAgB,EAChB,QAAkB;QAElB,OAAO,SAAS,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAA;IACrC,CAAC;IACD,KAAK,UAAU,MAAM,CAAC,OAAgB;QACpC,MAAM,IAAI,GAAG,WAAW,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC,CAAA;QAC3D,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAA;QAClC,OAAO,IAAI,CAAA;IACb,CAAC;IACD,6DAA6D;IAC7D,kEAAkE;IAClE,4DAA4D;IAC5D,0DAA0D;IAC1D,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC,kBAAkB,EAAE;QACnD,MAAM;QACN,IAAI,EAAE,kBAAkB;KACzB,CAAC,CAAA;IACF,OAAO,UAAsD,CAAA;AAC/D,CAAC"}

package/dist/src/plugin/auth.d.ts

@@ -1,2 +1,2 @@
-export * from "@cortexkit/antigravity-auth-core";
+export * from '@cortexkit/antigravity-auth-core';
 //# sourceMappingURL=auth.d.ts.map

package/dist/src/plugin/auth.js

@@ -1,3 +1,3 @@
 // Re-export shim: auth helpers moved to @cortexkit/antigravity-auth-core.
-export * from "@cortexkit/antigravity-auth-core";
+export * from '@cortexkit/antigravity-auth-core';
 //# sourceMappingURL=auth.js.map

package/dist/src/plugin/background-quota-refresh.d.ts

@@ -0,0 +1,146 @@
+/**
+ * Background quota poller.
+ *
+ * Runs a jittered, `unref()`'d timer that periodically refreshes quota for
+ * all accounts and pushes ONE sidebar snapshot per tick. Three-layer
+ * cross-process dedup:
+ *
+ *   1. Freshness gate — the only hard correctness bound for quota snapshots.
+ *      Reads `checkedAt` from the on-disk sidebar state; skips quota work when
+ *      it is fresher than
+ *      `max(intervalMs − 60_000, floor(intervalMs / 2))`. The /2 floor
+ *      ensures the gate still fires at the 1-minute minimum interval.
+ *
+ *   2. Advisory fenced lock — an optimization that lets a single process do
+ *      the network work when several wake up simultaneously. Held → skip.
+ *
+ *   3. Lock throws → FAIL CLOSED (skip this tick, add jitter to next). A
+ *      fallback mutex is NOT used here. The correct reasoning is: the
+ *      freshness gate (layer 1) already bounds how many refreshes can land;
+ *      a secondary "claim marker" file is just a worse re-implementation of
+ *      the fenced lock we just failed to acquire — it replicates the same
+ *      ownership problem without the protocol guarantees, and any transient
+ *      I/O error that made the lock throw will likely affect a claim file
+ *      too. The previous poller attempt fell into this trap across three
+ *      review rounds; this comment exists so a future reviewer stops
+ *      re-litigating it.
+ */
+import type { AccountMetadataV3, QuotaGroup, QuotaGroupSummary } from '@cortexkit/antigravity-auth-core';
+import { acquireFencedFileLock } from '@cortexkit/antigravity-auth-core/file-lock';
+import type { QuotaManager } from './quota';
+/**
+ * The subset of AccountManager that the poller needs. Using a narrow
+ * interface keeps the module decoupled from the large concrete class and
+ * lets tests pass minimal stubs without satisfying 90+ methods.
+ */
+export interface PollerAccountView {
+    getAccounts(): Array<{
+        index: number;
+        label?: string;
+        enabled?: boolean;
+        parts: {
+            refreshToken: string;
+        };
+        cachedQuota?: Partial<Record<QuotaGroup, QuotaGroupSummary>>;
+        cachedQuotaAccountId?: string;
+        coolingDownUntil?: number;
+        /** Captured plan tier ID (raw upstream string). */
+        capturedTierId?: string;
+        /** Captured paid-tier ID (raw upstream string). */
+        capturedPaidTierId?: string;
+        /** Epoch ms when capturedTierId was last recorded. */
+        capturedTierAt?: number;
+        /** Schema version of the most recent tier capture. */
+        capturedTierSchemaVersion?: number;
+    }>;
+    /** Must return the full AccountMetadataV3 shape so the quota manager
+     *  can use token-refresh and project-context fields inside each fetch. */
+    getAccountsForQuotaCheck(): AccountMetadataV3[];
+    updateQuotaCache(accountIndex: number, quotaGroups: Partial<Record<QuotaGroup, QuotaGroupSummary>>, expectedRefreshToken?: string): void;
+    /**
+     * Apply a subset of quota-result fields (e.g. captured tier) onto the
+     * in-memory account record without touching the quota cache itself.
+     */
+    applyUpdatedAccount(accountIndex: number, patch: {
+        capturedTierId?: string;
+        capturedPaidTierId?: string;
+        capturedTierAt?: number;
+        capturedTierSchemaVersion?: number;
+    }, expectedRefreshToken?: string): void;
+    requestSaveToDisk(): void;
+    /**
+     * Returns the active account index per model family so the sidebar
+     * snapshot can stamp the `current` flag on the right account.
+     */
+    getActiveIndexByFamily(): {
+        claude: number;
+        gemini: number;
+    };
+}
+export interface BackgroundQuotaRefreshOptions {
+    intervalMs: number;
+    sidebarStateFile: string;
+    /**
+     * Supplier for the live account pool. Called inside each locked phase, so it
+     * observes any concurrent add/remove that completed while waiting for the
+     * lock.
+     */
+    getAccountManager: () => PollerAccountView | null;
+    quotaManager: QuotaManager;
+    /**
+     * Optional tier-refresh callback. When provided, the poller calls this
+     * once per tick for the account whose capturedTierAt is missing or older
+     * than TIER_STALENESS_TTL_MS. The callback handles its own token-refresh
+     * and must resolve to a tier object (or null on failure / nothing to
+     * report) -- failure must never reject, since tier is best-effort.
+     *
+     * Wired in index.ts through the same agyTransport seam the quota manager
+     * uses, so e2e tests can inject a mock alongside the mock quota fetch.
+     */
+    loadAccountTier?: (account: AccountMetadataV3) => Promise<{
+        id: string;
+        paidId?: string;
+        capturedAt: number;
+    } | null>;
+    /**
+     * Clock / randomness seam. Defaults to the system clock.
+     */
+    now?: () => number;
+    random?: () => number;
+    /** Lock acquisition seam used by deterministic concurrency tests. */
+    acquireLock?: typeof acquireFencedFileLock;
+}
+/**
+ * Per-loader-instance background quota poller.
+ *
+ * Must be created after the plugin has initialised (so `getAccountManager()`
+ * is populated) and disposed via the producer lifecycle phase.
+ */
+export declare class BackgroundQuotaRefresh {
+    private readonly intervalMs;
+    private readonly sidebarStateFile;
+    private readonly getAccountManager;
+    private readonly quotaManager;
+    private readonly loadAccountTier?;
+    private readonly now;
+    private readonly random;
+    private readonly acquireLock;
+    private timer;
+    /** Resolves when the currently-running tick completes (or immediately if none). */
+    private inFlight;
+    private disposed;
+    constructor(options: BackgroundQuotaRefreshOptions);
+    /** Start the background timer. Idempotent: a second call is a no-op. */
+    start(): void;
+    /** Stop the timer and await any in-flight tick. */
+    dispose(): Promise<void>;
+    private jitteredStartDelay;
+    private jitteredInterval;
+    private scheduleNext;
+    private runTick;
+    private refresh;
+    private refreshQuota;
+    private refreshTierSlot;
+    private pushSnapshot;
+}
+//# sourceMappingURL=background-quota-refresh.d.ts.map

package/dist/src/plugin/background-quota-refresh.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"background-quota-refresh.d.ts","sourceRoot":"","sources":["../../../src/plugin/background-quota-refresh.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAGH,OAAO,KAAK,EACV,iBAAiB,EACjB,UAAU,EACV,iBAAiB,EAClB,MAAM,kCAAkC,CAAA;AACzC,OAAO,EACL,qBAAqB,EAEtB,MAAM,4CAA4C,CAAA;AAGnD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,SAAS,CAAA;AAG3C;;;;GAIG;AACH,MAAM,WAAW,iBAAiB;IAChC,WAAW,IAAI,KAAK,CAAC;QACnB,KAAK,EAAE,MAAM,CAAA;QACb,KAAK,CAAC,EAAE,MAAM,CAAA;QACd,OAAO,CAAC,EAAE,OAAO,CAAA;QACjB,KAAK,EAAE;YAAE,YAAY,EAAE,MAAM,CAAA;SAAE,CAAA;QAC/B,WAAW,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,UAAU,EAAE,iBAAiB,CAAC,CAAC,CAAA;QAC5D,oBAAoB,CAAC,EAAE,MAAM,CAAA;QAC7B,gBAAgB,CAAC,EAAE,MAAM,CAAA;QACzB,mDAAmD;QACnD,cAAc,CAAC,EAAE,MAAM,CAAA;QACvB,mDAAmD;QACnD,kBAAkB,CAAC,EAAE,MAAM,CAAA;QAC3B,sDAAsD;QACtD,cAAc,CAAC,EAAE,MAAM,CAAA;QACvB,sDAAsD;QACtD,yBAAyB,CAAC,EAAE,MAAM,CAAA;KACnC,CAAC,CAAA;IACF;8EAC0E;IAC1E,wBAAwB,IAAI,iBAAiB,EAAE,CAAA;IAC/C,gBAAgB,CACd,YAAY,EAAE,MAAM,EACpB,WAAW,EAAE,OAAO,CAAC,MAAM,CAAC,UAAU,EAAE,iBAAiB,CAAC,CAAC,EAC3D,oBAAoB,CAAC,EAAE,MAAM,GAC5B,IAAI,CAAA;IACP;;;OAGG;IACH,mBAAmB,CACjB,YAAY,EAAE,MAAM,EACpB,KAAK,EAAE;QACL,cAAc,CAAC,EAAE,MAAM,CAAA;QACvB,kBAAkB,CAAC,EAAE,MAAM,CAAA;QAC3B,cAAc,CAAC,EAAE,MAAM,CAAA;QACvB,yBAAyB,CAAC,EAAE,MAAM,CAAA;KACnC,EACD,oBAAoB,CAAC,EAAE,MAAM,GAC5B,IAAI,CAAA;IACP,iBAAiB,IAAI,IAAI,CAAA;IACzB;;;OAGG;IACH,sBAAsB,IAAI;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAA;CAC7D;AA8BD,MAAM,WAAW,6BAA6B;IAC5C,UAAU,EAAE,MAAM,CAAA;IAClB,gBAAgB,EAAE,MAAM,CAAA;IACxB;;;;OAIG;IACH,iBAAiB,EAAE,MAAM,iBAAiB,GAAG,IAAI,CAAA;IACjD,YAAY,EAAE,YAAY,CAAA;IAC1B;;;;;;;;;OASG;IACH,eAAe,CAAC,EAAE,CAChB,OAAO,EAAE,iBAAiB,KACvB,OAAO,CAAC;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC,CAAA;IACxE;;OAEG;IACH,GAAG,CAAC,EAAE,MAAM,MAAM,CAAA;IAClB,MAAM,CAAC,EAAE,MAAM,MAAM,CAAA;IACrB,qEAAqE;IACrE,WAAW,CAAC,EAAE,OAAO,qBAAqB,CAAA;CAC3C;AAED;;;;;GAKG;AACH,qBAAa,sBAAsB;IACjC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAQ;IACnC,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAQ;IACzC,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAgC;IAClE,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAc;IAC3C,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAC,CAEuC;IACxE,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAc;IAClC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAc;IACrC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAA8B;IAE1D,OAAO,CAAC,KAAK,CAA6C;IAC1D,mFAAmF;IACnF,OAAO,CAAC,QAAQ,CAA6B;IAC7C,OAAO,CAAC,QAAQ,CAAQ;gBAEZ,OAAO,EAAE,6BAA6B;IAWlD,wEAAwE;IACxE,KAAK,IAAI,IAAI;IAKb,mDAAmD;IAC7C,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC;IAY9B,OAAO,CAAC,kBAAkB;IAI1B,OAAO,CAAC,gBAAgB;IAMxB,OAAO,CAAC,YAAY;YA2BN,OAAO;YAqDP,OAAO;YAMP,YAAY;YAyEZ,eAAe;YA6Df,YAAY;CAoC3B"}