@cortexkit/opencode-antigravity-auth 1.1.0 → 2.0.1

package/dist/src/plugin/logging-utils.js

@@ -1,24 +1,25 @@
 export function isTruthyFlag(flag) {
-    return flag === "1" || flag?.toLowerCase() === "true";
+    return flag === '1' || flag?.toLowerCase() === 'true';
 }
 export function parseDebugLevel(flag) {
     const trimmed = flag.trim();
-    if (trimmed === "2" || trimmed === "verbose")
+    if (trimmed === '2' || trimmed === 'verbose')
         return 2;
-    if (trimmed === "1" || trimmed === "true")
+    if (trimmed === '1' || trimmed === 'true')
         return 1;
     return 0;
 }
 export function deriveDebugPolicy(input) {
-    const envDebugFlag = input.envDebugFlag ?? "";
+    const envDebugFlag = input.envDebugFlag ?? '';
     const debugLevel = input.configDebug
-        ? envDebugFlag === "2" || envDebugFlag === "verbose"
+        ? envDebugFlag === '2' || envDebugFlag === 'verbose'
             ? 2
             : 1
         : parseDebugLevel(envDebugFlag);
     const debugEnabled = debugLevel >= 1;
     const verboseEnabled = debugLevel >= 2;
-    const debugTuiEnabled = debugEnabled && (input.configDebugTui || isTruthyFlag(input.envDebugTuiFlag));
+    const debugTuiEnabled = debugEnabled &&
+        (input.configDebugTui || isTruthyFlag(input.envDebugTuiFlag));
     return {
         debugLevel,
         debugEnabled,
@@ -36,7 +37,7 @@ export function formatAccountContextLabel(email, accountIndex) {
     if (accountIndex >= 0) {
         return `Account ${accountIndex + 1}`;
     }
-    return "All accounts";
+    return 'All accounts';
 }
 export function formatErrorForLog(error) {
     if (error instanceof Error) {
@@ -59,34 +60,116 @@ export function formatBodyPreviewForLog(body, maxChars) {
     if (body == null) {
         return undefined;
     }
-    if (typeof body === "string") {
+    if (typeof body === 'string') {
         return truncateTextForLog(body, maxChars);
     }
     if (body instanceof URLSearchParams) {
         return truncateTextForLog(body.toString(), maxChars);
     }
-    if (typeof Blob !== "undefined" && body instanceof Blob) {
+    if (typeof Blob !== 'undefined' && body instanceof Blob) {
         return `[Blob size=${body.size}]`;
     }
-    if (typeof FormData !== "undefined" && body instanceof FormData) {
-        return "[FormData payload omitted]";
+    if (typeof FormData !== 'undefined' && body instanceof FormData) {
+        return '[FormData payload omitted]';
     }
     return `[${body.constructor?.name ?? typeof body} payload omitted]`;
 }
 export function writeConsoleLog(level, ...args) {
     switch (level) {
-        case "debug":
+        case 'debug':
             console.debug(...args);
             break;
-        case "info":
+        case 'info':
             console.info(...args);
             break;
-        case "warn":
+        case 'warn':
             console.warn(...args);
             break;
-        case "error":
+        case 'error':
             console.error(...args);
             break;
     }
 }
+/**
+ * Mask all but the first 4 and last 4 characters of `value`. A short
+ * value (≤ 8 chars) is masked entirely so the caller never leaks a
+ * full identifier. Empty / non-string inputs collapse to an empty
+ * marker so a debug line that ran the helper cannot accidentally
+ * surface the original value.
+ *
+ * Pattern matches the `${start}****${end}` shape used by metrics teams
+ * for opaque resource IDs; the implementation is intentionally simple
+ * so a quick visual scan of a debug log still tells operators what
+ * class of identifier they are looking at.
+ */
+export function redactSensitive(value) {
+    if (typeof value !== 'string' || value.length === 0)
+        return '';
+    if (value.length <= 8)
+        return '****';
+    return `${value.slice(0, 4)}****${value.slice(-4)}`;
+}
+/**
+ * Field-name pattern that flags a key as carrying a credential or
+ * identifier. Matched case-insensitively against any JSON-like object
+ * key the debug sink walks. `project` (not just `projectId`) so bare
+ * `project` / `managedProjectId` request-body fields are masked too —
+ * project IDs are account-correlating identifiers.
+ */
+const SENSITIVE_FIELD_PATTERN = /token|refresh|access|project|fingerprint|deviceId|sessionId|sessionToken|secret|password|apiKey|clientSecret/i;
+/**
+ * Walk a JSON-like value and redact every credential-shaped field.
+ * Returns a NEW value — the original is never mutated. Strings inside
+ * arrays are left untouched; only object keys whose name matches the
+ * sensitive pattern have their string values masked.
+ */
+export function redactSensitiveFields(value) {
+    if (value == null)
+        return value;
+    if (Array.isArray(value))
+        return value.map(redactSensitiveFields);
+    if (typeof value === 'object') {
+        const record = value;
+        const redacted = {};
+        for (const [key, entry] of Object.entries(record)) {
+            if (SENSITIVE_FIELD_PATTERN.test(key) && typeof entry === 'string') {
+                redacted[key] = redactSensitive(entry);
+            }
+            else {
+                redacted[key] = redactSensitiveFields(entry);
+            }
+        }
+        return redacted;
+    }
+    return value;
+}
+/**
+ * Redact credential-shaped fields (project IDs, tokens, …) out of a
+ * serialized JSON request body. Returns the input untouched when it is
+ * not parseable JSON or not an object/array — unstructured bodies have
+ * no field names to key redaction off.
+ */
+export function redactJsonBodyString(body) {
+    let parsed;
+    try {
+        parsed = JSON.parse(body);
+    }
+    catch {
+        return body;
+    }
+    if (parsed == null || typeof parsed !== 'object')
+        return body;
+    return JSON.stringify(redactSensitiveFields(parsed));
+}
+/**
+ * Redact a request body before it reaches a debug log or dump file.
+ * String bodies are treated as JSON and field-redacted; every other
+ * `BodyInit` shape passes through (those are summarized, not printed
+ * verbatim, by the log formatters).
+ */
+export function redactBodyForLog(body) {
+    if (typeof body === 'string')
+        return redactJsonBodyString(body);
+    return body;
+}
 //# sourceMappingURL=logging-utils.js.map

package/dist/src/plugin/logging-utils.js.map

@@ -1 +1 @@
-{"version":3,"file":"logging-utils.js","sourceRoot":"","sources":["../../../src/plugin/logging-utils.ts"],"names":[],"mappings":"AAgBA,MAAM,UAAU,YAAY,CAAC,IAAa;IACxC,OAAO,IAAI,KAAK,GAAG,IAAI,IAAI,EAAE,WAAW,EAAE,KAAK,MAAM,CAAA;AACvD,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,IAAY;IAC1C,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAA;IAC3B,IAAI,OAAO,KAAK,GAAG,IAAI,OAAO,KAAK,SAAS;QAAE,OAAO,CAAC,CAAA;IACtD,IAAI,OAAO,KAAK,GAAG,IAAI,OAAO,KAAK,MAAM;QAAE,OAAO,CAAC,CAAA;IACnD,OAAO,CAAC,CAAA;AACV,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,KAAuB;IACvD,MAAM,YAAY,GAAG,KAAK,CAAC,YAAY,IAAI,EAAE,CAAA;IAC7C,MAAM,UAAU,GAAG,KAAK,CAAC,WAAW;QAClC,CAAC,CAAC,YAAY,KAAK,GAAG,IAAI,YAAY,KAAK,SAAS;YAClD,CAAC,CAAC,CAAC;YACH,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,eAAe,CAAC,YAAY,CAAC,CAAA;IACjC,MAAM,YAAY,GAAG,UAAU,IAAI,CAAC,CAAA;IACpC,MAAM,cAAc,GAAG,UAAU,IAAI,CAAC,CAAA;IACtC,MAAM,eAAe,GAAG,YAAY,IAAI,CAAC,KAAK,CAAC,cAAc,IAAI,YAAY,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC,CAAA;IAErG,OAAO;QACL,UAAU;QACV,YAAY;QACZ,eAAe;QACf,cAAc;KACf,CAAA;AACH,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,KAAyB,EAAE,YAAoB;IAChF,OAAO,KAAK,IAAI,WAAW,YAAY,GAAG,CAAC,EAAE,CAAA;AAC/C,CAAC;AAED,MAAM,UAAU,yBAAyB,CAAC,KAAyB,EAAE,YAAoB;IACvF,IAAI,KAAK,EAAE,CAAC;QACV,OAAO,KAAK,CAAA;IACd,CAAC;IACD,IAAI,YAAY,IAAI,CAAC,EAAE,CAAC;QACtB,OAAO,WAAW,YAAY,GAAG,CAAC,EAAE,CAAA;IACtC,CAAC;IACD,OAAO,cAAc,CAAA;AACvB,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,KAAc;IAC9C,IAAI,KAAK,YAAY,KAAK,EAAE,CAAC;QAC3B,OAAO,KAAK,CAAC,KAAK,IAAI,KAAK,CAAC,OAAO,CAAA;IACrC,CAAC;IACD,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAA;IAC9B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,MAAM,CAAC,KAAK,CAAC,CAAA;IACtB,CAAC;AACH,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,IAAY,EAAE,QAAgB;IAC/D,IAAI,IAAI,CAAC,MAAM,IAAI,QAAQ,EAAE,CAAC;QAC5B,OAAO,IAAI,CAAA;IACb,CAAC;IACD,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC,kBAAkB,IAAI,CAAC,MAAM,GAAG,QAAQ,SAAS,CAAA;AACpF,CAAC;AAED,MAAM,UAAU,uBAAuB,CACrC,IAAiC,EACjC,QAAgB;IAEhB,IAAI,IAAI,IAAI,IAAI,EAAE,CAAC;QACjB,OAAO,SAAS,CAAA;IAClB,CAAC;IAED,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC7B,OAAO,kBAAkB,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAA;IAC3C,CAAC;IAED,IAAI,IAAI,YAAY,eAAe,EAAE,CAAC;QACpC,OAAO,kBAAkB,CAAC,IAAI,CAAC,QAAQ,EAAE,EAAE,QAAQ,CAAC,CAAA;IACtD,CAAC;IAED,IAAI,OAAO,IAAI,KAAK,WAAW,IAAI,IAAI,YAAY,IAAI,EAAE,CAAC;QACxD,OAAO,cAAc,IAAI,CAAC,IAAI,GAAG,CAAA;IACnC,CAAC;IAED,IAAI,OAAO,QAAQ,KAAK,WAAW,IAAI,IAAI,YAAY,QAAQ,EAAE,CAAC;QAChE,OAAO,4BAA4B,CAAA;IACrC,CAAC;IAED,OAAO,IAAI,IAAI,CAAC,WAAW,EAAE,IAAI,IAAI,OAAO,IAAI,mBAAmB,CAAA;AACrE,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,KAAe,EAAE,GAAG,IAAe;IACjE,QAAQ,KAAK,EAAE,CAAC;QACd,KAAK,OAAO;YACV,OAAO,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,CAAA;YACtB,MAAK;QACP,KAAK,MAAM;YACT,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,CAAA;YACrB,MAAK;QACP,KAAK,MAAM;YACT,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,CAAA;YACrB,MAAK;QACP,KAAK,OAAO;YACV,OAAO,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,CAAA;YACtB,MAAK;IACT,CAAC;AACH,CAAC"}
+{"version":3,"file":"logging-utils.js","sourceRoot":"","sources":["../../../src/plugin/logging-utils.ts"],"names":[],"mappings":"AAgBA,MAAM,UAAU,YAAY,CAAC,IAAa;IACxC,OAAO,IAAI,KAAK,GAAG,IAAI,IAAI,EAAE,WAAW,EAAE,KAAK,MAAM,CAAA;AACvD,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,IAAY;IAC1C,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAA;IAC3B,IAAI,OAAO,KAAK,GAAG,IAAI,OAAO,KAAK,SAAS;QAAE,OAAO,CAAC,CAAA;IACtD,IAAI,OAAO,KAAK,GAAG,IAAI,OAAO,KAAK,MAAM;QAAE,OAAO,CAAC,CAAA;IACnD,OAAO,CAAC,CAAA;AACV,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,KAAuB;IACvD,MAAM,YAAY,GAAG,KAAK,CAAC,YAAY,IAAI,EAAE,CAAA;IAC7C,MAAM,UAAU,GAAG,KAAK,CAAC,WAAW;QAClC,CAAC,CAAC,YAAY,KAAK,GAAG,IAAI,YAAY,KAAK,SAAS;YAClD,CAAC,CAAC,CAAC;YACH,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,eAAe,CAAC,YAAY,CAAC,CAAA;IACjC,MAAM,YAAY,GAAG,UAAU,IAAI,CAAC,CAAA;IACpC,MAAM,cAAc,GAAG,UAAU,IAAI,CAAC,CAAA;IACtC,MAAM,eAAe,GACnB,YAAY;QACZ,CAAC,KAAK,CAAC,cAAc,IAAI,YAAY,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC,CAAA;IAE/D,OAAO;QACL,UAAU;QACV,YAAY;QACZ,eAAe;QACf,cAAc;KACf,CAAA;AACH,CAAC;AAED,MAAM,UAAU,kBAAkB,CAChC,KAAyB,EACzB,YAAoB;IAEpB,OAAO,KAAK,IAAI,WAAW,YAAY,GAAG,CAAC,EAAE,CAAA;AAC/C,CAAC;AAED,MAAM,UAAU,yBAAyB,CACvC,KAAyB,EACzB,YAAoB;IAEpB,IAAI,KAAK,EAAE,CAAC;QACV,OAAO,KAAK,CAAA;IACd,CAAC;IACD,IAAI,YAAY,IAAI,CAAC,EAAE,CAAC;QACtB,OAAO,WAAW,YAAY,GAAG,CAAC,EAAE,CAAA;IACtC,CAAC;IACD,OAAO,cAAc,CAAA;AACvB,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,KAAc;IAC9C,IAAI,KAAK,YAAY,KAAK,EAAE,CAAC;QAC3B,OAAO,KAAK,CAAC,KAAK,IAAI,KAAK,CAAC,OAAO,CAAA;IACrC,CAAC;IACD,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAA;IAC9B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,MAAM,CAAC,KAAK,CAAC,CAAA;IACtB,CAAC;AACH,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,IAAY,EAAE,QAAgB;IAC/D,IAAI,IAAI,CAAC,MAAM,IAAI,QAAQ,EAAE,CAAC;QAC5B,OAAO,IAAI,CAAA;IACb,CAAC;IACD,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC,kBAAkB,IAAI,CAAC,MAAM,GAAG,QAAQ,SAAS,CAAA;AACpF,CAAC;AAED,MAAM,UAAU,uBAAuB,CACrC,IAAiC,EACjC,QAAgB;IAEhB,IAAI,IAAI,IAAI,IAAI,EAAE,CAAC;QACjB,OAAO,SAAS,CAAA;IAClB,CAAC;IAED,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC7B,OAAO,kBAAkB,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAA;IAC3C,CAAC;IAED,IAAI,IAAI,YAAY,eAAe,EAAE,CAAC;QACpC,OAAO,kBAAkB,CAAC,IAAI,CAAC,QAAQ,EAAE,EAAE,QAAQ,CAAC,CAAA;IACtD,CAAC;IAED,IAAI,OAAO,IAAI,KAAK,WAAW,IAAI,IAAI,YAAY,IAAI,EAAE,CAAC;QACxD,OAAO,cAAc,IAAI,CAAC,IAAI,GAAG,CAAA;IACnC,CAAC;IAED,IAAI,OAAO,QAAQ,KAAK,WAAW,IAAI,IAAI,YAAY,QAAQ,EAAE,CAAC;QAChE,OAAO,4BAA4B,CAAA;IACrC,CAAC;IAED,OAAO,IAAI,IAAI,CAAC,WAAW,EAAE,IAAI,IAAI,OAAO,IAAI,mBAAmB,CAAA;AACrE,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,KAAe,EAAE,GAAG,IAAe;IACjE,QAAQ,KAAK,EAAE,CAAC;QACd,KAAK,OAAO;YACV,OAAO,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,CAAA;YACtB,MAAK;QACP,KAAK,MAAM;YACT,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,CAAA;YACrB,MAAK;QACP,KAAK,MAAM;YACT,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,CAAA;YACrB,MAAK;QACP,KAAK,OAAO;YACV,OAAO,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,CAAA;YACtB,MAAK;IACT,CAAC;AACH,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,eAAe,CAAC,KAAgC;IAC9D,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAA;IAC9D,IAAI,KAAK,CAAC,MAAM,IAAI,CAAC;QAAE,OAAO,MAAM,CAAA;IACpC,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,OAAO,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAA;AACrD,CAAC;AAED;;;;;;GAMG;AACH,MAAM,uBAAuB,GAC3B,+GAA+G,CAAA;AAEjH;;;;;GAKG;AACH,MAAM,UAAU,qBAAqB,CAAC,KAAc;IAClD,IAAI,KAAK,IAAI,IAAI;QAAE,OAAO,KAAK,CAAA;IAC/B,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAA;IACjE,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,MAAM,MAAM,GAAG,KAAgC,CAAA;QAC/C,MAAM,QAAQ,GAA4B,EAAE,CAAA;QAC5C,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;YAClD,IAAI,uBAAuB,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;gBACnE,QAAQ,CAAC,GAAG,CAAC,GAAG,eAAe,CAAC,KAAK,CAAC,CAAA;YACxC,CAAC;iBAAM,CAAC;gBACN,QAAQ,CAAC,GAAG,CAAC,GAAG,qBAAqB,CAAC,KAAK,CAAC,CAAA;YAC9C,CAAC;QACH,CAAC;QACD,OAAO,QAAQ,CAAA;IACjB,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,oBAAoB,CAAC,IAAY;IAC/C,IAAI,MAAe,CAAA;IACnB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;IAC3B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAA;IACb,CAAC;IACD,IAAI,MAAM,IAAI,IAAI,IAAI,OAAO,MAAM,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAA;IAC7D,OAAO,IAAI,CAAC,SAAS,CAAC,qBAAqB,CAAC,MAAM,CAAC,CAAC,CAAA;AACtD,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,gBAAgB,CAC9B,IAAiC;IAEjC,IAAI,OAAO,IAAI,KAAK,QAAQ;QAAE,OAAO,oBAAoB,CAAC,IAAI,CAAC,CAAA;IAC/D,OAAO,IAAI,CAAA;AACb,CAAC"}

package/dist/src/plugin/model-registry.d.ts

@@ -1,2 +1,2 @@
-export * from "@cortexkit/antigravity-auth-core";
+export * from '@cortexkit/antigravity-auth-core';
 //# sourceMappingURL=model-registry.d.ts.map

package/dist/src/plugin/model-registry.js

@@ -1,3 +1,3 @@
 // Re-export shim: model registry moved to @cortexkit/antigravity-auth-core.
-export * from "@cortexkit/antigravity-auth-core";
+export * from '@cortexkit/antigravity-auth-core';
 //# sourceMappingURL=model-registry.js.map

package/dist/src/plugin/oauth-login.d.ts

@@ -0,0 +1,22 @@
+import type { AntigravityTokenExchangeResult, authorizeAntigravity, exchangeAntigravity } from '@cortexkit/antigravity-auth-core';
+import type { startOAuthListener } from './server';
+export type AntigravityTokenExchangeSuccess = Extract<AntigravityTokenExchangeResult, {
+    type: 'success';
+}>;
+export interface OAuthLoginRequest {
+    projectId?: string;
+    noBrowser: boolean;
+    isHeadless: boolean;
+    refreshAccountIndex?: number;
+    accounts: AntigravityTokenExchangeSuccess[];
+    startFresh: boolean;
+}
+export interface OAuthLoginDependencies {
+    authorize: typeof authorizeAntigravity;
+    exchange: typeof exchangeAntigravity;
+    startListener: typeof startOAuthListener;
+    openBrowser(url: string): Promise<void>;
+    upsert(result: AntigravityTokenExchangeSuccess): Promise<void>;
+}
+export declare function performOAuthLogin(request: OAuthLoginRequest, deps: OAuthLoginDependencies): Promise<AntigravityTokenExchangeSuccess>;
+//# sourceMappingURL=oauth-login.d.ts.map

package/dist/src/plugin/oauth-login.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth-login.d.ts","sourceRoot":"","sources":["../../../src/plugin/oauth-login.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,8BAA8B,EAC9B,oBAAoB,EACpB,mBAAmB,EACpB,MAAM,kCAAkC,CAAA;AAEzC,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,UAAU,CAAA;AAElD,MAAM,MAAM,+BAA+B,GAAG,OAAO,CACnD,8BAA8B,EAC9B;IAAE,IAAI,EAAE,SAAS,CAAA;CAAE,CACpB,CAAA;AAED,MAAM,WAAW,iBAAiB;IAChC,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,SAAS,EAAE,OAAO,CAAA;IAClB,UAAU,EAAE,OAAO,CAAA;IACnB,mBAAmB,CAAC,EAAE,MAAM,CAAA;IAC5B,QAAQ,EAAE,+BAA+B,EAAE,CAAA;IAC3C,UAAU,EAAE,OAAO,CAAA;CACpB;AAED,MAAM,WAAW,sBAAsB;IACrC,SAAS,EAAE,OAAO,oBAAoB,CAAA;IACtC,QAAQ,EAAE,OAAO,mBAAmB,CAAA;IACpC,aAAa,EAAE,OAAO,kBAAkB,CAAA;IACxC,WAAW,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IACvC,MAAM,CAAC,MAAM,EAAE,+BAA+B,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;CAC/D;AAqBD,wBAAsB,iBAAiB,CACrC,OAAO,EAAE,iBAAiB,EAC1B,IAAI,EAAE,sBAAsB,GAC3B,OAAO,CAAC,+BAA+B,CAAC,CAqB1C"}

package/dist/src/plugin/oauth-login.js

@@ -0,0 +1,37 @@
+function expectedState(authorizationUrl) {
+    try {
+        return new URL(authorizationUrl).searchParams.get('state') ?? '';
+    }
+    catch {
+        return '';
+    }
+}
+function callbackParams(callbackUrl, expected) {
+    const code = callbackUrl.searchParams.get('code');
+    const state = callbackUrl.searchParams.get('state');
+    if (!code || !state)
+        throw new Error('Missing code or state in callback URL');
+    if (expected && state !== expected)
+        throw new Error('OAuth state mismatch');
+    return { code, state };
+}
+export async function performOAuthLogin(request, deps) {
+    const listener = await deps.startListener();
+    try {
+        const authorization = await deps.authorize(request.projectId ?? '');
+        if (!request.noBrowser && !request.isHeadless) {
+            await deps.openBrowser(authorization.url);
+        }
+        const params = callbackParams(await listener.waitForCallback(), expectedState(authorization.url));
+        const result = await deps.exchange(params.code, params.state);
+        if (result.type === 'failed')
+            throw new Error(result.error);
+        await deps.upsert(result);
+        request.accounts.push(result);
+        return result;
+    }
+    finally {
+        await listener.close().catch(() => { });
+    }
+}
+//# sourceMappingURL=oauth-login.js.map

package/dist/src/plugin/oauth-login.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth-login.js","sourceRoot":"","sources":["../../../src/plugin/oauth-login.ts"],"names":[],"mappings":"AA8BA,SAAS,aAAa,CAAC,gBAAwB;IAC7C,IAAI,CAAC;QACH,OAAO,IAAI,GAAG,CAAC,gBAAgB,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,CAAA;IAClE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAA;IACX,CAAC;AACH,CAAC;AAED,SAAS,cAAc,CACrB,WAAgB,EAChB,QAAgB;IAEhB,MAAM,IAAI,GAAG,WAAW,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;IACjD,MAAM,KAAK,GAAG,WAAW,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAA;IACnD,IAAI,CAAC,IAAI,IAAI,CAAC,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAA;IAC7E,IAAI,QAAQ,IAAI,KAAK,KAAK,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAA;IAC3E,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,CAAA;AACxB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,OAA0B,EAC1B,IAA4B;IAE5B,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,aAAa,EAAE,CAAA;IAC3C,IAAI,CAAC;QACH,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,SAAS,IAAI,EAAE,CAAC,CAAA;QACnE,IAAI,CAAC,OAAO,CAAC,SAAS,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC;YAC9C,MAAM,IAAI,CAAC,WAAW,CAAC,aAAa,CAAC,GAAG,CAAC,CAAA;QAC3C,CAAC;QAED,MAAM,MAAM,GAAG,cAAc,CAC3B,MAAM,QAAQ,CAAC,eAAe,EAAE,EAChC,aAAa,CAAC,aAAa,CAAC,GAAG,CAAC,CACjC,CAAA;QACD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,CAAA;QAC7D,IAAI,MAAM,CAAC,IAAI,KAAK,QAAQ;YAAE,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;QAE3D,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;QACzB,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;QAC7B,OAAO,MAAM,CAAA;IACf,CAAC;YAAS,CAAC;QACT,MAAM,QAAQ,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAA;IACxC,CAAC;AACH,CAAC"}

package/dist/src/plugin/oauth-methods.d.ts

@@ -0,0 +1,42 @@
+import { authorizeAntigravity as defaultAuthorizeAntigravity, exchangeAntigravity as defaultExchangeAntigravity } from '../antigravity/oauth';
+import type { AccountAccessService } from './account-access';
+import { promptAddAnotherAccount as defaultPromptAddAnotherAccount, promptLoginMode as defaultPromptLoginMode, promptProjectId as defaultPromptProjectId } from './cli';
+import type { AntigravityConfig } from './config';
+import type { PluginLifecycle } from './lifecycle';
+import { type QuotaManager } from './quota';
+import { startOAuthListener as defaultStartOAuthListener } from './server';
+import type { AuthDetails, AuthMethod, PluginClient } from './types';
+export { type AntigravityTokenExchangeSuccess, type OAuthLoginDependencies, type OAuthLoginRequest, performOAuthLogin, } from './oauth-login';
+export interface OAuthMethodDependencies {
+    authorize: typeof defaultAuthorizeAntigravity;
+    exchange: typeof defaultExchangeAntigravity;
+    startListener: typeof defaultStartOAuthListener;
+    promptProjectId: typeof defaultPromptProjectId;
+    promptAddAnotherAccount: typeof defaultPromptAddAnotherAccount;
+    promptLoginMode: typeof defaultPromptLoginMode;
+    promptCallback(message: string): Promise<string>;
+    openBrowser(url: string): Promise<boolean>;
+    shouldSkipLocalServer(): boolean;
+    isHeadless(): boolean;
+    confirmOpenVerificationUrl(): Promise<boolean>;
+}
+interface CreateOAuthMethodsOptions {
+    client: PluginClient;
+    providerId: string;
+    config: AntigravityConfig;
+    lifecycle: PluginLifecycle;
+    accountAccess: AccountAccessService;
+    quotaManager?: QuotaManager;
+    getAuth?: (() => Promise<AuthDetails | undefined>) | null;
+    dependencies?: Partial<OAuthMethodDependencies>;
+}
+type OAuthCallbackParams = {
+    code: string;
+    state: string;
+};
+export declare function openBrowserWithSystem(url: string): Promise<boolean>;
+export declare function parseOAuthCallbackInput(value: string, fallbackState: string): OAuthCallbackParams | {
+    error: string;
+};
+export declare function createOAuthMethods({ client, providerId, config: _config, lifecycle, accountAccess, quotaManager: injectedQuotaManager, getAuth, dependencies, }: CreateOAuthMethodsOptions): AuthMethod[];
+//# sourceMappingURL=oauth-methods.d.ts.map

package/dist/src/plugin/oauth-methods.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth-methods.d.ts","sourceRoot":"","sources":["../../../src/plugin/oauth-methods.ts"],"names":[],"mappings":"AAIA,OAAO,EACL,oBAAoB,IAAI,2BAA2B,EACnD,mBAAmB,IAAI,0BAA0B,EAClD,MAAM,sBAAsB,CAAA;AAC7B,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,kBAAkB,CAAA;AAQ5D,OAAO,EACL,uBAAuB,IAAI,8BAA8B,EACzD,eAAe,IAAI,sBAAsB,EACzC,eAAe,IAAI,sBAAsB,EAC1C,MAAM,OAAO,CAAA;AACd,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,UAAU,CAAA;AACjD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,aAAa,CAAA;AAIlD,OAAO,EAA8B,KAAK,YAAY,EAAE,MAAM,SAAS,CAAA;AACvE,OAAO,EACL,kBAAkB,IAAI,yBAAyB,EAEhD,MAAM,UAAU,CAAA;AAGjB,OAAO,KAAK,EAAE,WAAW,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAA;AA6BpE,OAAO,EACL,KAAK,+BAA+B,EACpC,KAAK,sBAAsB,EAC3B,KAAK,iBAAiB,EACtB,iBAAiB,GAClB,MAAM,eAAe,CAAA;AAEtB,MAAM,WAAW,uBAAuB;IACtC,SAAS,EAAE,OAAO,2BAA2B,CAAA;IAC7C,QAAQ,EAAE,OAAO,0BAA0B,CAAA;IAC3C,aAAa,EAAE,OAAO,yBAAyB,CAAA;IAC/C,eAAe,EAAE,OAAO,sBAAsB,CAAA;IAC9C,uBAAuB,EAAE,OAAO,8BAA8B,CAAA;IAC9D,eAAe,EAAE,OAAO,sBAAsB,CAAA;IAC9C,cAAc,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAA;IAChD,WAAW,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;IAC1C,qBAAqB,IAAI,OAAO,CAAA;IAChC,UAAU,IAAI,OAAO,CAAA;IACrB,0BAA0B,IAAI,OAAO,CAAC,OAAO,CAAC,CAAA;CAC/C;AAED,UAAU,yBAAyB;IACjC,MAAM,EAAE,YAAY,CAAA;IACpB,UAAU,EAAE,MAAM,CAAA;IAClB,MAAM,EAAE,iBAAiB,CAAA;IACzB,SAAS,EAAE,eAAe,CAAA;IAC1B,aAAa,EAAE,oBAAoB,CAAA;IACnC,YAAY,CAAC,EAAE,YAAY,CAAA;IAC3B,OAAO,CAAC,EAAE,CAAC,MAAM,OAAO,CAAC,WAAW,GAAG,SAAS,CAAC,CAAC,GAAG,IAAI,CAAA;IACzD,YAAY,CAAC,EAAE,OAAO,CAAC,uBAAuB,CAAC,CAAA;CAChD;AAED,KAAK,mBAAmB,GAAG;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAA;AA2F1D,wBAAsB,qBAAqB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAoBzE;AAkCD,wBAAgB,uBAAuB,CACrC,KAAK,EAAE,MAAM,EACb,aAAa,EAAE,MAAM,GACpB,mBAAmB,GAAG;IAAE,KAAK,EAAE,MAAM,CAAA;CAAE,CAuBzC;AAmDD,wBAAgB,kBAAkB,CAAC,EACjC,MAAM,EACN,UAAU,EACV,MAAM,EAAE,OAAO,EACf,SAAS,EACT,aAAa,EACb,YAAY,EAAE,oBAAoB,EAClC,OAAc,EACd,YAAY,GACb,EAAE,yBAAyB,GAAG,UAAU,EAAE,CAu2C1C"}