@cortexkit/opencode-antigravity-auth 2.2.0 → 3.0.0

package/dist/src/plugin/token.js

@@ -1,7 +1,6 @@
-import { fetchWithActiveTimeout } from '@cortexkit/antigravity-auth-core';
+import { fetchWithActiveTimeout, } from '@cortexkit/antigravity-auth-core';
 import { ANTIGRAVITY_CLIENT_ID, ANTIGRAVITY_CLIENT_SECRET } from '../constants';
 import { calculateTokenExpiry, formatRefreshParts, parseRefreshParts, } from './auth';
-import { clearCachedAuth, storeCachedAuth } from './cache';
 import { createLogger } from './logger';
 import { invalidateProjectContextCache } from './project';
 const log = createLogger('token');
@@ -57,7 +56,111 @@ export class AntigravityTokenRefreshError extends Error {
     }
 }
 /**
- * Refreshes an Antigravity OAuth access token, updates persisted credentials, and handles revocation.
+ * Whether `error`, or an error it was caused by, is Google's `invalid_grant`
+ * answer: the refresh token is revoked and the account needs signing in
+ * again. Repository refresh failures wrap the exchange's error as their
+ * cause, so the chain is followed (a bounded number of steps).
+ */
+export function isInvalidGrantFailure(error) {
+    let current = error;
+    for (let depth = 0; depth < 8 && current instanceof Error; depth++) {
+        if (current instanceof AntigravityTokenRefreshError &&
+            current.code === 'invalid_grant') {
+            return true;
+        }
+        current = current.cause;
+    }
+    return false;
+}
+/**
+ * Exchanges a bare refresh token for a new access token. Throws
+ * `AntigravityTokenRefreshError` when Google answers with an error status;
+ * on `invalid_grant` the project-context cache entry of that token is
+ * dropped first, since the token can no longer reach its project. Any other
+ * failure (network, malformed body) is thrown as it arrived.
+ */
+async function exchangeRefreshToken(refreshToken, now) {
+    const startTime = now();
+    const response = await fetchWithActiveTimeout('https://oauth2.googleapis.com/token', {
+        method: 'POST',
+        headers: {
+            'Content-Type': 'application/x-www-form-urlencoded',
+        },
+        body: new URLSearchParams({
+            grant_type: 'refresh_token',
+            refresh_token: refreshToken,
+            client_id: ANTIGRAVITY_CLIENT_ID,
+            client_secret: ANTIGRAVITY_CLIENT_SECRET,
+        }),
+    });
+    if (!response.ok) {
+        let errorText;
+        try {
+            errorText = await response.text();
+        }
+        catch {
+            errorText = undefined;
+        }
+        const { code, description } = parseOAuthErrorPayload(errorText);
+        const details = [code, description ?? errorText].filter(Boolean).join(': ');
+        const baseMessage = `Antigravity token refresh failed (${response.status} ${response.statusText})`;
+        const message = details ? `${baseMessage} - ${details}` : baseMessage;
+        log.warn('Token refresh failed', {
+            status: response.status,
+            code,
+            details,
+        });
+        if (code === 'invalid_grant') {
+            log.warn('Google revoked the stored refresh token - reauthentication required');
+            invalidateProjectContextCache(refreshToken);
+        }
+        throw new AntigravityTokenRefreshError({
+            message,
+            code,
+            description: description ?? errorText,
+            status: response.status,
+            statusText: response.statusText,
+        });
+    }
+    const payload = (await response.json());
+    return {
+        accessToken: typeof payload.access_token === 'string' && payload.access_token
+            ? payload.access_token
+            : undefined,
+        refreshToken: typeof payload.refresh_token === 'string' && payload.refresh_token
+            ? payload.refresh_token
+            : refreshToken,
+        expiresAt: calculateTokenExpiry(startTime, payload.expires_in),
+    };
+}
+/**
+ * The token exchange an account repository refreshes rows with. It is
+ * handed the row's bare refresh token and performs only the HTTP grant;
+ * the repository commits the result under the row's credential fence, so
+ * this function never writes anything. Project ids are not touched here: a
+ * refresh keeps the row's stored projects.
+ */
+export function createAntigravityTokenExchange(options = {}) {
+    const now = options.now ?? (() => Date.now());
+    return async ({ refreshToken }) => {
+        const grant = await exchangeRefreshToken(refreshToken, now);
+        // The repository would commit the token; no bearer, no commit.
+        if (grant.accessToken === undefined) {
+            throw new Error('Antigravity token refresh returned no access token');
+        }
+        return {
+            accessToken: grant.accessToken,
+            refreshToken: grant.refreshToken,
+            expiresAt: grant.expiresAt,
+        };
+    };
+}
+/**
+ * Refreshes a host OAuth credential (refresh token packed with its project
+ * ids) and returns the updated credential without persisting it. Returns
+ * `undefined` for a credential without a refresh token and for failures
+ * other than an error answer from Google, which is thrown as
+ * `AntigravityTokenRefreshError`.
  */
 export async function refreshAccessToken(auth, _client, _providerId) {
     const parts = parseRefreshParts(auth.refresh);
@@ -65,68 +168,24 @@ export async function refreshAccessToken(auth, _client, _providerId) {
         return undefined;
     }
     try {
-        const startTime = Date.now();
-        const response = await fetchWithActiveTimeout('https://oauth2.googleapis.com/token', {
-            method: 'POST',
-            headers: {
-                'Content-Type': 'application/x-www-form-urlencoded',
-            },
-            body: new URLSearchParams({
-                grant_type: 'refresh_token',
-                refresh_token: parts.refreshToken,
-                client_id: ANTIGRAVITY_CLIENT_ID,
-                client_secret: ANTIGRAVITY_CLIENT_SECRET,
-            }),
-        });
-        if (!response.ok) {
-            let errorText;
-            try {
-                errorText = await response.text();
-            }
-            catch {
-                errorText = undefined;
-            }
-            const { code, description } = parseOAuthErrorPayload(errorText);
-            const details = [code, description ?? errorText]
-                .filter(Boolean)
-                .join(': ');
-            const baseMessage = `Antigravity token refresh failed (${response.status} ${response.statusText})`;
-            const message = details ? `${baseMessage} - ${details}` : baseMessage;
-            log.warn('Token refresh failed', {
-                status: response.status,
-                code,
-                details,
-            });
-            if (code === 'invalid_grant') {
-                log.warn('Google revoked the stored refresh token - reauthentication required');
-                invalidateProjectContextCache(auth.refresh);
-                clearCachedAuth(auth.refresh);
-            }
-            throw new AntigravityTokenRefreshError({
-                message,
-                code,
-                description: description ?? errorText,
-                status: response.status,
-                statusText: response.statusText,
-            });
-        }
-        const payload = (await response.json());
+        const grant = await exchangeRefreshToken(parts.refreshToken, Date.now);
         const refreshedParts = {
-            refreshToken: payload.refresh_token ?? parts.refreshToken,
+            refreshToken: grant.refreshToken,
             projectId: parts.projectId,
             managedProjectId: parts.managedProjectId,
         };
-        const updatedAuth = {
+        // Project context cache is intentionally not invalidated on successful token
+        // refresh: managedProjectId survives access-token rotation. Invalid grants
+        // still invalidate (in the exchange) because the refresh key is no longer
+        // usable.
+        // An answer without an access token is passed on as one: the request
+        // path reports it as the native authorization failure.
+        return {
             ...auth,
-            access: payload.access_token,
-            expires: calculateTokenExpiry(startTime, payload.expires_in),
+            access: grant.accessToken,
+            expires: grant.expiresAt,
             refresh: formatRefreshParts(refreshedParts),
         };
-        storeCachedAuth(updatedAuth);
-        // Project context cache is intentionally not invalidated on successful token
-        // refresh: managedProjectId survives access-token rotation. Invalid grants
-        // still invalidate above because the refresh key is no longer usable.
-        return updatedAuth;
     }
     catch (error) {
         if (error instanceof AntigravityTokenRefreshError) {

package/dist/src/plugin/token.js.map

@@ -1 +1 @@
-{"version":3,"file":"token.js","sourceRoot":"","sources":["../../../src/plugin/token.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,sBAAsB,EAAE,MAAM,kCAAkC,CAAA;AACzE,OAAO,EAAE,qBAAqB,EAAE,yBAAyB,EAAE,MAAM,cAAc,CAAA;AAC/E,OAAO,EACL,oBAAoB,EACpB,kBAAkB,EAClB,iBAAiB,GAClB,MAAM,QAAQ,CAAA;AACf,OAAO,EAAE,eAAe,EAAE,eAAe,EAAE,MAAM,SAAS,CAAA;AAC1D,OAAO,EAAE,YAAY,EAAE,MAAM,UAAU,CAAA;AACvC,OAAO,EAAE,6BAA6B,EAAE,MAAM,WAAW,CAAA;AAGzD,MAAM,GAAG,GAAG,YAAY,CAAC,OAAO,CAAC,CAAA;AAajC;;GAEG;AACH,SAAS,sBAAsB,CAAC,IAAwB;IAItD,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,OAAO,EAAE,CAAA;IACX,CAAC;IAED,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAsB,CAAA;QACrD,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;YAC5C,OAAO,EAAE,WAAW,EAAE,IAAI,EAAE,CAAA;QAC9B,CAAC;QAED,IAAI,IAAwB,CAAA;QAC5B,IAAI,OAAO,OAAO,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;YACtC,IAAI,GAAG,OAAO,CAAC,KAAK,CAAA;QACtB,CAAC;aAAM,IAAI,OAAO,CAAC,KAAK,IAAI,OAAO,OAAO,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC9D,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC,MAAM,IAAI,OAAO,CAAC,KAAK,CAAC,IAAI,CAAA;YACjD,IAAI,CAAC,OAAO,CAAC,iBAAiB,IAAI,OAAO,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;gBACxD,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,CAAC,KAAK,CAAC,OAAO,EAAE,CAAA;YACrD,CAAC;QACH,CAAC;QAED,MAAM,WAAW,GAAG,OAAO,CAAC,iBAAiB,CAAA;QAC7C,IAAI,WAAW,EAAE,CAAC;YAChB,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,CAAA;QAC9B,CAAC;QAED,IACE,OAAO,CAAC,KAAK;YACb,OAAO,OAAO,CAAC,KAAK,KAAK,QAAQ;YACjC,OAAO,CAAC,KAAK,CAAC,OAAO,EACrB,CAAC;YACD,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,CAAC,KAAK,CAAC,OAAO,EAAE,CAAA;QACrD,CAAC;QAED,OAAO,EAAE,IAAI,EAAE,CAAA;IACjB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,WAAW,EAAE,IAAI,EAAE,CAAA;IAC9B,CAAC;AACH,CAAC;AAED,MAAM,OAAO,4BAA6B,SAAQ,KAAK;IACrD,IAAI,CAAS;IACb,WAAW,CAAS;IACpB,MAAM,CAAQ;IACd,UAAU,CAAQ;IAElB,YAAY,OAMX;QACC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,CAAA;QACtB,IAAI,CAAC,IAAI,GAAG,8BAA8B,CAAA;QAC1C,IAAI,CAAC,IAAI,GAAG,OAAO,CAAC,IAAI,CAAA;QACxB,IAAI,CAAC,WAAW,GAAG,OAAO,CAAC,WAAW,CAAA;QACtC,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAA;QAC5B,IAAI,CAAC,UAAU,GAAG,OAAO,CAAC,UAAU,CAAA;IACtC,CAAC;CACF;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,IAAsB,EACtB,OAAqB,EACrB,WAAmB;IAEnB,MAAM,KAAK,GAAG,iBAAiB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;IAC7C,IAAI,CAAC,KAAK,CAAC,YAAY,EAAE,CAAC;QACxB,OAAO,SAAS,CAAA;IAClB,CAAC;IAED,IAAI,CAAC;QACH,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;QAC5B,MAAM,QAAQ,GAAG,MAAM,sBAAsB,CAC3C,qCAAqC,EACrC;YACE,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,cAAc,EAAE,mCAAmC;aACpD;YACD,IAAI,EAAE,IAAI,eAAe,CAAC;gBACxB,UAAU,EAAE,eAAe;gBAC3B,aAAa,EAAE,KAAK,CAAC,YAAY;gBACjC,SAAS,EAAE,qBAAqB;gBAChC,aAAa,EAAE,yBAAyB;aACzC,CAAC;SACH,CACF,CAAA;QAED,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,IAAI,SAA6B,CAAA;YACjC,IAAI,CAAC;gBACH,SAAS,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAA;YACnC,CAAC;YAAC,MAAM,CAAC;gBACP,SAAS,GAAG,SAAS,CAAA;YACvB,CAAC;YAED,MAAM,EAAE,IAAI,EAAE,WAAW,EAAE,GAAG,sBAAsB,CAAC,SAAS,CAAC,CAAA;YAC/D,MAAM,OAAO,GAAG,CAAC,IAAI,EAAE,WAAW,IAAI,SAAS,CAAC;iBAC7C,MAAM,CAAC,OAAO,CAAC;iBACf,IAAI,CAAC,IAAI,CAAC,CAAA;YACb,MAAM,WAAW,GAAG,qCAAqC,QAAQ,CAAC,MAAM,IAAI,QAAQ,CAAC,UAAU,GAAG,CAAA;YAClG,MAAM,OAAO,GAAG,OAAO,CAAC,CAAC,CAAC,GAAG,WAAW,MAAM,OAAO,EAAE,CAAC,CAAC,CAAC,WAAW,CAAA;YACrE,GAAG,CAAC,IAAI,CAAC,sBAAsB,EAAE;gBAC/B,MAAM,EAAE,QAAQ,CAAC,MAAM;gBACvB,IAAI;gBACJ,OAAO;aACR,CAAC,CAAA;YAEF,IAAI,IAAI,KAAK,eAAe,EAAE,CAAC;gBAC7B,GAAG,CAAC,IAAI,CACN,qEAAqE,CACtE,CAAA;gBACD,6BAA6B,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;gBAC3C,eAAe,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;YAC/B,CAAC;YAED,MAAM,IAAI,4BAA4B,CAAC;gBACrC,OAAO;gBACP,IAAI;gBACJ,WAAW,EAAE,WAAW,IAAI,SAAS;gBACrC,MAAM,EAAE,QAAQ,CAAC,MAAM;gBACvB,UAAU,EAAE,QAAQ,CAAC,UAAU;aAChC,CAAC,CAAA;QACJ,CAAC;QAED,MAAM,OAAO,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAIrC,CAAA;QAED,MAAM,cAAc,GAAiB;YACnC,YAAY,EAAE,OAAO,CAAC,aAAa,IAAI,KAAK,CAAC,YAAY;YACzD,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,gBAAgB,EAAE,KAAK,CAAC,gBAAgB;SACzC,CAAA;QAED,MAAM,WAAW,GAAqB;YACpC,GAAG,IAAI;YACP,MAAM,EAAE,OAAO,CAAC,YAAY;YAC5B,OAAO,EAAE,oBAAoB,CAAC,SAAS,EAAE,OAAO,CAAC,UAAU,CAAC;YAC5D,OAAO,EAAE,kBAAkB,CAAC,cAAc,CAAC;SAC5C,CAAA;QAED,eAAe,CAAC,WAAW,CAAC,CAAA;QAC5B,6EAA6E;QAC7E,2EAA2E;QAC3E,sEAAsE;QAEtE,OAAO,WAAW,CAAA;IACpB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,4BAA4B,EAAE,CAAC;YAClD,MAAM,KAAK,CAAA;QACb,CAAC;QACD,GAAG,CAAC,KAAK,CAAC,gCAAgC,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAA;QACrE,OAAO,SAAS,CAAA;IAClB,CAAC;AACH,CAAC"}
+{"version":3,"file":"token.js","sourceRoot":"","sources":["../../../src/plugin/token.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,sBAAsB,GACvB,MAAM,kCAAkC,CAAA;AACzC,OAAO,EAAE,qBAAqB,EAAE,yBAAyB,EAAE,MAAM,cAAc,CAAA;AAC/E,OAAO,EACL,oBAAoB,EACpB,kBAAkB,EAClB,iBAAiB,GAClB,MAAM,QAAQ,CAAA;AACf,OAAO,EAAE,YAAY,EAAE,MAAM,UAAU,CAAA;AACvC,OAAO,EAAE,6BAA6B,EAAE,MAAM,WAAW,CAAA;AAGzD,MAAM,GAAG,GAAG,YAAY,CAAC,OAAO,CAAC,CAAA;AAajC;;GAEG;AACH,SAAS,sBAAsB,CAAC,IAAwB;IAItD,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,OAAO,EAAE,CAAA;IACX,CAAC;IAED,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAsB,CAAA;QACrD,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;YAC5C,OAAO,EAAE,WAAW,EAAE,IAAI,EAAE,CAAA;QAC9B,CAAC;QAED,IAAI,IAAwB,CAAA;QAC5B,IAAI,OAAO,OAAO,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;YACtC,IAAI,GAAG,OAAO,CAAC,KAAK,CAAA;QACtB,CAAC;aAAM,IAAI,OAAO,CAAC,KAAK,IAAI,OAAO,OAAO,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC9D,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC,MAAM,IAAI,OAAO,CAAC,KAAK,CAAC,IAAI,CAAA;YACjD,IAAI,CAAC,OAAO,CAAC,iBAAiB,IAAI,OAAO,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;gBACxD,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,CAAC,KAAK,CAAC,OAAO,EAAE,CAAA;YACrD,CAAC;QACH,CAAC;QAED,MAAM,WAAW,GAAG,OAAO,CAAC,iBAAiB,CAAA;QAC7C,IAAI,WAAW,EAAE,CAAC;YAChB,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,CAAA;QAC9B,CAAC;QAED,IACE,OAAO,CAAC,KAAK;YACb,OAAO,OAAO,CAAC,KAAK,KAAK,QAAQ;YACjC,OAAO,CAAC,KAAK,CAAC,OAAO,EACrB,CAAC;YACD,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,CAAC,KAAK,CAAC,OAAO,EAAE,CAAA;QACrD,CAAC;QAED,OAAO,EAAE,IAAI,EAAE,CAAA;IACjB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,WAAW,EAAE,IAAI,EAAE,CAAA;IAC9B,CAAC;AACH,CAAC;AAED,MAAM,OAAO,4BAA6B,SAAQ,KAAK;IACrD,IAAI,CAAS;IACb,WAAW,CAAS;IACpB,MAAM,CAAQ;IACd,UAAU,CAAQ;IAElB,YAAY,OAMX;QACC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,CAAA;QACtB,IAAI,CAAC,IAAI,GAAG,8BAA8B,CAAA;QAC1C,IAAI,CAAC,IAAI,GAAG,OAAO,CAAC,IAAI,CAAA;QACxB,IAAI,CAAC,WAAW,GAAG,OAAO,CAAC,WAAW,CAAA;QACtC,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAA;QAC5B,IAAI,CAAC,UAAU,GAAG,OAAO,CAAC,UAAU,CAAA;IACtC,CAAC;CACF;AAED;;;;;GAKG;AACH,MAAM,UAAU,qBAAqB,CAAC,KAAc;IAClD,IAAI,OAAO,GAAY,KAAK,CAAA;IAC5B,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,CAAC,IAAI,OAAO,YAAY,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC;QACnE,IACE,OAAO,YAAY,4BAA4B;YAC/C,OAAO,CAAC,IAAI,KAAK,eAAe,EAChC,CAAC;YACD,OAAO,IAAI,CAAA;QACb,CAAC;QACD,OAAO,GAAG,OAAO,CAAC,KAAK,CAAA;IACzB,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC;AAWD;;;;;;GAMG;AACH,KAAK,UAAU,oBAAoB,CACjC,YAAoB,EACpB,GAAiB;IAEjB,MAAM,SAAS,GAAG,GAAG,EAAE,CAAA;IACvB,MAAM,QAAQ,GAAG,MAAM,sBAAsB,CAC3C,qCAAqC,EACrC;QACE,MAAM,EAAE,MAAM;QACd,OAAO,EAAE;YACP,cAAc,EAAE,mCAAmC;SACpD;QACD,IAAI,EAAE,IAAI,eAAe,CAAC;YACxB,UAAU,EAAE,eAAe;YAC3B,aAAa,EAAE,YAAY;YAC3B,SAAS,EAAE,qBAAqB;YAChC,aAAa,EAAE,yBAAyB;SACzC,CAAC;KACH,CACF,CAAA;IAED,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,IAAI,SAA6B,CAAA;QACjC,IAAI,CAAC;YACH,SAAS,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAA;QACnC,CAAC;QAAC,MAAM,CAAC;YACP,SAAS,GAAG,SAAS,CAAA;QACvB,CAAC;QAED,MAAM,EAAE,IAAI,EAAE,WAAW,EAAE,GAAG,sBAAsB,CAAC,SAAS,CAAC,CAAA;QAC/D,MAAM,OAAO,GAAG,CAAC,IAAI,EAAE,WAAW,IAAI,SAAS,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QAC3E,MAAM,WAAW,GAAG,qCAAqC,QAAQ,CAAC,MAAM,IAAI,QAAQ,CAAC,UAAU,GAAG,CAAA;QAClG,MAAM,OAAO,GAAG,OAAO,CAAC,CAAC,CAAC,GAAG,WAAW,MAAM,OAAO,EAAE,CAAC,CAAC,CAAC,WAAW,CAAA;QACrE,GAAG,CAAC,IAAI,CAAC,sBAAsB,EAAE;YAC/B,MAAM,EAAE,QAAQ,CAAC,MAAM;YACvB,IAAI;YACJ,OAAO;SACR,CAAC,CAAA;QAEF,IAAI,IAAI,KAAK,eAAe,EAAE,CAAC;YAC7B,GAAG,CAAC,IAAI,CACN,qEAAqE,CACtE,CAAA;YACD,6BAA6B,CAAC,YAAY,CAAC,CAAA;QAC7C,CAAC;QAED,MAAM,IAAI,4BAA4B,CAAC;YACrC,OAAO;YACP,IAAI;YACJ,WAAW,EAAE,WAAW,IAAI,SAAS;YACrC,MAAM,EAAE,QAAQ,CAAC,MAAM;YACvB,UAAU,EAAE,QAAQ,CAAC,UAAU;SAChC,CAAC,CAAA;IACJ,CAAC;IAED,MAAM,OAAO,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAIrC,CAAA;IACD,OAAO;QACL,WAAW,EACT,OAAO,OAAO,CAAC,YAAY,KAAK,QAAQ,IAAI,OAAO,CAAC,YAAY;YAC9D,CAAC,CAAC,OAAO,CAAC,YAAY;YACtB,CAAC,CAAC,SAAS;QACf,YAAY,EACV,OAAO,OAAO,CAAC,aAAa,KAAK,QAAQ,IAAI,OAAO,CAAC,aAAa;YAChE,CAAC,CAAC,OAAO,CAAC,aAAa;YACvB,CAAC,CAAC,YAAY;QAClB,SAAS,EAAE,oBAAoB,CAAC,SAAS,EAAE,OAAO,CAAC,UAAU,CAAC;KAC/D,CAAA;AACH,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,8BAA8B,CAC5C,UAAkC,EAAE;IAEpC,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAA;IAC7C,OAAO,KAAK,EAAE,EAAE,YAAY,EAAE,EAAE,EAAE;QAChC,MAAM,KAAK,GAAG,MAAM,oBAAoB,CAAC,YAAY,EAAE,GAAG,CAAC,CAAA;QAC3D,+DAA+D;QAC/D,IAAI,KAAK,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;YACpC,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAA;QACvE,CAAC;QACD,OAAO;YACL,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,YAAY,EAAE,KAAK,CAAC,YAAY;YAChC,SAAS,EAAE,KAAK,CAAC,SAAS;SAC3B,CAAA;IACH,CAAC,CAAA;AACH,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,IAAsB,EACtB,OAAqB,EACrB,WAAmB;IAEnB,MAAM,KAAK,GAAG,iBAAiB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;IAC7C,IAAI,CAAC,KAAK,CAAC,YAAY,EAAE,CAAC;QACxB,OAAO,SAAS,CAAA;IAClB,CAAC;IAED,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,MAAM,oBAAoB,CAAC,KAAK,CAAC,YAAY,EAAE,IAAI,CAAC,GAAG,CAAC,CAAA;QACtE,MAAM,cAAc,GAAiB;YACnC,YAAY,EAAE,KAAK,CAAC,YAAY;YAChC,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,gBAAgB,EAAE,KAAK,CAAC,gBAAgB;SACzC,CAAA;QAED,6EAA6E;QAC7E,2EAA2E;QAC3E,0EAA0E;QAC1E,UAAU;QACV,qEAAqE;QACrE,uDAAuD;QACvD,OAAO;YACL,GAAG,IAAI;YACP,MAAM,EAAE,KAAK,CAAC,WAAqB;YACnC,OAAO,EAAE,KAAK,CAAC,SAAS;YACxB,OAAO,EAAE,kBAAkB,CAAC,cAAc,CAAC;SAC5C,CAAA;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,4BAA4B,EAAE,CAAC;YAClD,MAAM,KAAK,CAAA;QACb,CAAC;QACD,GAAG,CAAC,KAAK,CAAC,gCAAgC,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAA;QACrE,OAAO,SAAS,CAAA;IAClB,CAAC;AACH,CAAC"}

package/dist/src/plugin/ui/quota-status.d.ts

@@ -61,19 +61,10 @@ export declare function classifyOverallQuotaHealth(cachedQuota: Partial<Record<s
     health: 'available' | 'partial' | 'exhausted' | 'unknown';
     maxResetMs?: number;
 };
-/**
- * Build a quota summary string with status labels for cached quota data.
- * Used in auth menu account hints.
- *
- * When all groups are exhausted, returns a single condensed "resets in Xh Ym"
- * instead of listing each model separately.
- *
- * Example: "Claude 80%, Gemini Flash LOW 15%"
- */
 export declare function formatCachedQuotaWithStatus(cachedQuota: Partial<Record<string, {
     remainingFraction?: number;
     resetTime?: string;
-}>> | undefined): string | undefined;
+}>> | undefined, checkedAt?: number, now?: number): string | undefined;
 /**
  * Format a per-group quota status badge for the "Check quotas" output.
  * Combines the progress bar with a status label.

package/dist/src/plugin/ui/quota-status.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"quota-status.d.ts","sourceRoot":"","sources":["../../../../src/plugin/ui/quota-status.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,aAAa,CAAA;AACjD,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,UAAU,CAAA;AAGjD;;;;;;;;;GASG;AAEH,MAAM,MAAM,UAAU,GAAG,OAAO,GAAG,MAAM,GAAG,WAAW,GAAG,UAAU,GAAG,KAAK,CAAA;AAE5E,MAAM,WAAW,eAAe;IAC9B,KAAK,EAAE,UAAU,CAAA;IACjB,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,cAAc,CAAC,EAAE,cAAc,CAAA;CAChC;AAED;;;GAGG;AACH,wBAAgB,kBAAkB,CAAC,EAAE,EAAE,MAAM,GAAG,MAAM,CAcrD;AAED;;GAEG;AACH,wBAAgB,mBAAmB,CACjC,KAAK,EAAE,iBAAiB,GAAG,SAAS,GACnC,eAAe,CA6BjB;AAcD;;GAEG;AACH,wBAAgB,mBAAmB,CACjC,UAAU,EAAE,MAAM,EAClB,MAAM,CAAC,EAAE,cAAc,GACtB,eAAe,CAMjB;AAED;;GAEG;AACH,wBAAgB,eAAe,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,eAAe,CAKhE;AAED;;;;;;;;;GASG;AACH,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,eAAe,GAAG,MAAM,CAiCtE;AAED;;;GAGG;AACH,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,eAAe,GAAG,MAAM,CAiCtE;AAED;;;;GAIG;AACH,wBAAgB,0BAA0B,CACxC,WAAW,EACP,OAAO,CACL,MAAM,CAAC,MAAM,EAAE;IAAE,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CACnE,GACD,SAAS,GACZ;IACD,MAAM,EAAE,WAAW,GAAG,SAAS,GAAG,WAAW,GAAG,SAAS,CAAA;IACzD,UAAU,CAAC,EAAE,MAAM,CAAA;CACpB,CAgCA;AAED;;;;;;;;GAQG;AACH,wBAAgB,2BAA2B,CACzC,WAAW,EACP,OAAO,CACL,MAAM,CAAC,MAAM,EAAE;IAAE,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CACnE,GACD,SAAS,GACZ,MAAM,GAAG,SAAS,CAqCpB;AAED;;;GAGG;AACH,wBAAgB,qBAAqB,CACnC,SAAS,CAAC,EAAE,MAAM,EAClB,SAAS,CAAC,EAAE,MAAM,GACjB,MAAM,CAQR"}
+{"version":3,"file":"quota-status.d.ts","sourceRoot":"","sources":["../../../../src/plugin/ui/quota-status.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,aAAa,CAAA;AACjD,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,UAAU,CAAA;AAGjD;;;;;;;;;GASG;AAEH,MAAM,MAAM,UAAU,GAAG,OAAO,GAAG,MAAM,GAAG,WAAW,GAAG,UAAU,GAAG,KAAK,CAAA;AAE5E,MAAM,WAAW,eAAe;IAC9B,KAAK,EAAE,UAAU,CAAA;IACjB,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,cAAc,CAAC,EAAE,cAAc,CAAA;CAChC;AAED;;;GAGG;AACH,wBAAgB,kBAAkB,CAAC,EAAE,EAAE,MAAM,GAAG,MAAM,CAcrD;AAED;;GAEG;AACH,wBAAgB,mBAAmB,CACjC,KAAK,EAAE,iBAAiB,GAAG,SAAS,GACnC,eAAe,CA6BjB;AAcD;;GAEG;AACH,wBAAgB,mBAAmB,CACjC,UAAU,EAAE,MAAM,EAClB,MAAM,CAAC,EAAE,cAAc,GACtB,eAAe,CAMjB;AAED;;GAEG;AACH,wBAAgB,eAAe,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,eAAe,CAKhE;AAED;;;;;;;;;GASG;AACH,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,eAAe,GAAG,MAAM,CAiCtE;AAED;;;GAGG;AACH,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,eAAe,GAAG,MAAM,CAiCtE;AAED;;;;GAIG;AACH,wBAAgB,0BAA0B,CACxC,WAAW,EACP,OAAO,CACL,MAAM,CAAC,MAAM,EAAE;IAAE,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CACnE,GACD,SAAS,GACZ;IACD,MAAM,EAAE,WAAW,GAAG,SAAS,GAAG,WAAW,GAAG,SAAS,CAAA;IACzD,UAAU,CAAC,EAAE,MAAM,CAAA;CACpB,CAgCA;AAED,wBAAgB,2BAA2B,CACzC,WAAW,EACP,OAAO,CACL,MAAM,CAAC,MAAM,EAAE;IAAE,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CACnE,GACD,SAAS,EACb,SAAS,CAAC,EAAE,MAAM,EAClB,GAAG,SAAa,GACf,MAAM,GAAG,SAAS,CAkBpB;AAED;;;GAGG;AACH,wBAAgB,qBAAqB,CACnC,SAAS,CAAC,EAAE,MAAM,EAClB,SAAS,CAAC,EAAE,MAAM,GACjB,MAAM,CAQR"}

package/dist/src/plugin/ui/quota-status.js

@@ -1,3 +1,4 @@
+import { formatAntigravityQuota } from '@cortexkit/antigravity-auth-core';
 import { ANSI } from './ansi';
 /**
  * Format a duration in milliseconds to a compact human-readable string.
@@ -192,49 +193,12 @@ export function classifyOverallQuotaHealth(cachedQuota) {
         return { health: 'partial', maxResetMs };
     return { health: 'available' };
 }
-/**
- * Build a quota summary string with status labels for cached quota data.
- * Used in auth menu account hints.
- *
- * When all groups are exhausted, returns a single condensed "resets in Xh Ym"
- * instead of listing each model separately.
- *
- * Example: "Claude 80%, Gemini Flash LOW 15%"
- */
-export function formatCachedQuotaWithStatus(cachedQuota) {
-    if (!cachedQuota) {
-        return undefined;
-    }
-    // When all groups are exhausted, don't list each model — the badge handles it
-    const overall = classifyOverallQuotaHealth(cachedQuota);
-    if (overall.health === 'exhausted') {
+export function formatCachedQuotaWithStatus(cachedQuota, checkedAt, now = Date.now()) {
+    if (!cachedQuota)
         return undefined;
-    }
-    const entries = [
-        { key: 'gemini', label: 'Gemini' },
-        { key: 'non-gemini', label: 'Non-Gemini' },
-    ].flatMap(({ key, label }) => {
-        const value = cachedQuota[key]?.remainingFraction;
-        if (typeof value !== 'number' || !Number.isFinite(value)) {
-            return [];
-        }
-        const pct = Math.round(Math.max(0, Math.min(1, value)) * 100);
-        const status = classifyGroupStatus(cachedQuota[key]);
-        // Hide groups at 100% READY — they're noise
-        if (status.label === 'READY' && pct >= 100) {
-            return [];
-        }
-        if (status.label === 'READY') {
-            return [`${label} ${pct}%`];
-        }
-        // Skip pct% for EXHAUSTED — the status label already conveys 0%
-        // Use lowercase labels in hints to match account badge style ([active], [exhausted])
-        if (status.label === 'EXHAUSTED') {
-            return [`${label} ${formatQuotaStatusPlain(status).toLowerCase()}`];
-        }
-        return [`${label} ${formatQuotaStatusPlain(status).toLowerCase()} ${pct}%`];
-    });
-    return entries.length > 0 ? entries.join(', ') : undefined;
+    const groups = Object.fromEntries(Object.entries(cachedQuota).filter((entry) => (entry[0] === 'gemini' || entry[0] === 'non-gemini') &&
+        entry[1] !== undefined));
+    return formatAntigravityQuota({ cachedQuota: groups, cachedQuotaUpdatedAt: checkedAt }, { now });
 }
 /**
  * Format a per-group quota status badge for the "Check quotas" output.

package/dist/src/plugin/ui/quota-status.js.map

@@ -1 +1 @@
-{"version":3,"file":"quota-status.js","sourceRoot":"","sources":["../../../../src/plugin/ui/quota-status.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,IAAI,EAAE,MAAM,QAAQ,CAAA;AAqB7B;;;GAGG;AACH,MAAM,UAAU,kBAAkB,CAAC,EAAU;IAC3C,IAAI,EAAE,GAAG,IAAI;QAAE,OAAO,GAAG,EAAE,IAAI,CAAA;IAC/B,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,GAAG,IAAI,CAAC,CAAA;IACpC,IAAI,OAAO,GAAG,EAAE;QAAE,OAAO,GAAG,OAAO,GAAG,CAAA;IACtC,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,GAAG,EAAE,CAAC,CAAA;IACxC,MAAM,gBAAgB,GAAG,OAAO,GAAG,EAAE,CAAA;IACrC,IAAI,OAAO,GAAG,EAAE,EAAE,CAAC;QACjB,OAAO,gBAAgB,GAAG,CAAC;YACzB,CAAC,CAAC,GAAG,OAAO,KAAK,gBAAgB,GAAG;YACpC,CAAC,CAAC,GAAG,OAAO,GAAG,CAAA;IACnB,CAAC;IACD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,GAAG,EAAE,CAAC,CAAA;IACtC,MAAM,gBAAgB,GAAG,OAAO,GAAG,EAAE,CAAA;IACrC,OAAO,gBAAgB,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,KAAK,KAAK,gBAAgB,GAAG,CAAC,CAAC,CAAC,GAAG,KAAK,GAAG,CAAA;AAC9E,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,mBAAmB,CACjC,KAAoC;IAEpC,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,CAAA;IAC3B,CAAC;IAED,MAAM,SAAS,GAAG,KAAK,CAAC,iBAAiB,CAAA;IAEzC,0DAA0D;IAC1D,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;QACjE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,CAAA;IAC3B,CAAC;IAED,0BAA0B;IAC1B,IAAI,SAAS,IAAI,CAAC,EAAE,CAAC;QACnB,MAAM,MAAM,GAAG,kBAAkB,CAAC,KAAK,CAAC,SAAS,CAAC,CAAA;QAClD,IAAI,MAAM,KAAK,IAAI,IAAI,MAAM,GAAG,CAAC,EAAE,CAAC;YAClC,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,MAAM,EAAE,CAAA;QACvC,CAAC;QACD,qFAAqF;QACrF,gEAAgE;QAChE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,CAAA;IAC3B,CAAC;IAED,iBAAiB;IACjB,IAAI,SAAS,GAAG,GAAG,EAAE,CAAC;QACpB,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,CAAA;IACzB,CAAC;IAED,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,CAAA;AAC3B,CAAC;AAED;;;GAGG;AACH,SAAS,kBAAkB,CAAC,SAAkB;IAC5C,IAAI,CAAC,SAAS;QAAE,OAAO,IAAI,CAAA;IAC3B,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAA;IACvC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC;QAAE,OAAO,IAAI,CAAA;IAC5C,MAAM,EAAE,GAAG,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;IACjC,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAA;AAC3B,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,mBAAmB,CACjC,UAAkB,EAClB,MAAuB;IAEvB,OAAO;QACL,KAAK,EAAE,UAAU;QACjB,MAAM,EAAE,UAAU,GAAG,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS;QAC/C,cAAc,EAAE,MAAM;KACvB,CAAA;AACH,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,eAAe,CAAC,MAAe;IAC7C,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,GAAG,CAAC,EAAE,CAAC;QACvC,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,CAAA;IAClC,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,CAAA;AAC1B,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,sBAAsB,CAAC,MAAuB;IAC5D,QAAQ,MAAM,CAAC,KAAK,EAAE,CAAC;QACrB,KAAK,OAAO;YACV,OAAO,GAAG,IAAI,CAAC,KAAK,UAAU,IAAI,CAAC,KAAK,EAAE,CAAA;QAE5C,KAAK,KAAK;YACR,OAAO,GAAG,IAAI,CAAC,MAAM,QAAQ,IAAI,CAAC,KAAK,EAAE,CAAA;QAE3C,KAAK,MAAM,CAAC,CAAC,CAAC;YACZ,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM;gBAC1B,CAAC,CAAC,IAAI,kBAAkB,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE;gBACzC,CAAC,CAAC,EAAE,CAAA;YACN,OAAO,GAAG,IAAI,CAAC,MAAM,QAAQ,MAAM,IAAI,IAAI,CAAC,KAAK,EAAE,CAAA;QACrD,CAAC;QAED,KAAK,WAAW,CAAC,CAAC,CAAC;YACjB,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM;gBAC1B,CAAC,CAAC,cAAc,kBAAkB,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE;gBACnD,CAAC,CAAC,EAAE,CAAA;YACN,OAAO,GAAG,IAAI,CAAC,GAAG,aAAa,MAAM,IAAI,IAAI,CAAC,KAAK,EAAE,CAAA;QACvD,CAAC;QAED,KAAK,UAAU,CAAC,CAAC,CAAC;YAChB,MAAM,KAAK,GAAG,CAAC,UAAU,CAAC,CAAA;YAC1B,IAAI,MAAM,CAAC,cAAc,EAAE,CAAC;gBAC1B,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,CAAA;YACnC,CAAC;YACD,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;gBAClB,KAAK,CAAC,IAAI,CAAC,kBAAkB,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAA;YAC/C,CAAC;YACD,OAAO,GAAG,IAAI,CAAC,GAAG,IAAI,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,KAAK,EAAE,CAAA;QACvD,CAAC;IACH,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,sBAAsB,CAAC,MAAuB;IAC5D,QAAQ,MAAM,CAAC,KAAK,EAAE,CAAC;QACrB,KAAK,OAAO;YACV,OAAO,OAAO,CAAA;QAEhB,KAAK,KAAK;YACR,OAAO,KAAK,CAAA;QAEd,KAAK,MAAM,CAAC,CAAC,CAAC;YACZ,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM;gBAC1B,CAAC,CAAC,IAAI,kBAAkB,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE;gBACzC,CAAC,CAAC,EAAE,CAAA;YACN,OAAO,OAAO,MAAM,EAAE,CAAA;QACxB,CAAC;QAED,KAAK,WAAW,CAAC,CAAC,CAAC;YACjB,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM;gBAC1B,CAAC,CAAC,cAAc,kBAAkB,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE;gBACnD,CAAC,CAAC,EAAE,CAAA;YACN,OAAO,YAAY,MAAM,EAAE,CAAA;QAC7B,CAAC;QAED,KAAK,UAAU,CAAC,CAAC,CAAC;YAChB,MAAM,KAAK,GAAG,CAAC,UAAU,CAAC,CAAA;YAC1B,IAAI,MAAM,CAAC,cAAc,EAAE,CAAC;gBAC1B,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,CAAA;YACnC,CAAC;YACD,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;gBAClB,KAAK,CAAC,IAAI,CAAC,kBAAkB,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAA;YAC/C,CAAC;YACD,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;QACxB,CAAC;IACH,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,0BAA0B,CACxC,WAIa;IAKb,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,CAAA;IAC9B,CAAC;IAED,MAAM,UAAU,GAAG,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAA;IAC3C,IAAI,cAAc,GAAG,CAAC,CAAA;IACtB,IAAI,cAAc,GAAG,CAAC,CAAA;IACtB,IAAI,UAA8B,CAAA;IAElC,KAAK,MAAM,GAAG,IAAI,UAAU,EAAE,CAAC;QAC7B,MAAM,KAAK,GAAG,WAAW,CAAC,GAAG,CAAC,EAAE,iBAAiB,CAAA;QACjD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;YAAE,SAAQ;QAClE,cAAc,EAAE,CAAA;QAChB,IAAI,KAAK,IAAI,CAAC,EAAE,CAAC;YACf,iEAAiE;YACjE,uEAAuE;YACvE,MAAM,OAAO,GAAG,kBAAkB,CAAC,WAAW,CAAC,GAAG,CAAC,EAAE,SAAS,CAAC,CAAA;YAC/D,IAAI,OAAO,KAAK,IAAI,IAAI,OAAO,GAAG,CAAC,EAAE,CAAC;gBACpC,cAAc,EAAE,CAAA;gBAChB,IAAI,UAAU,KAAK,SAAS,IAAI,OAAO,GAAG,UAAU,EAAE,CAAC;oBACrD,UAAU,GAAG,OAAO,CAAA;gBACtB,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED,IAAI,cAAc,KAAK,CAAC;QAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,CAAA;IACtD,IAAI,cAAc,KAAK,cAAc;QACnC,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,UAAU,EAAE,CAAA;IAC5C,IAAI,cAAc,GAAG,CAAC;QAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,CAAA;IAChE,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,CAAA;AAChC,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,2BAA2B,CACzC,WAIa;IAEb,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,OAAO,SAAS,CAAA;IAClB,CAAC;IAED,8EAA8E;IAC9E,MAAM,OAAO,GAAG,0BAA0B,CAAC,WAAW,CAAC,CAAA;IACvD,IAAI,OAAO,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;QACnC,OAAO,SAAS,CAAA;IAClB,CAAC;IAED,MAAM,OAAO,GAAG;QACd,EAAE,GAAG,EAAE,QAAQ,EAAE,KAAK,EAAE,QAAQ,EAAE;QAClC,EAAE,GAAG,EAAE,YAAY,EAAE,KAAK,EAAE,YAAY,EAAE;KAC3C,CAAC,OAAO,CAAC,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE,EAAE;QAC3B,MAAM,KAAK,GAAG,WAAW,CAAC,GAAG,CAAC,EAAE,iBAAiB,CAAA;QACjD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YACzD,OAAO,EAAE,CAAA;QACX,CAAC;QACD,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,GAAG,GAAG,CAAC,CAAA;QAC7D,MAAM,MAAM,GAAG,mBAAmB,CAAC,WAAW,CAAC,GAAG,CAAsB,CAAC,CAAA;QACzE,4CAA4C;QAC5C,IAAI,MAAM,CAAC,KAAK,KAAK,OAAO,IAAI,GAAG,IAAI,GAAG,EAAE,CAAC;YAC3C,OAAO,EAAE,CAAA;QACX,CAAC;QACD,IAAI,MAAM,CAAC,KAAK,KAAK,OAAO,EAAE,CAAC;YAC7B,OAAO,CAAC,GAAG,KAAK,IAAI,GAAG,GAAG,CAAC,CAAA;QAC7B,CAAC;QACD,gEAAgE;QAChE,qFAAqF;QACrF,IAAI,MAAM,CAAC,KAAK,KAAK,WAAW,EAAE,CAAC;YACjC,OAAO,CAAC,GAAG,KAAK,IAAI,sBAAsB,CAAC,MAAM,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,CAAA;QACrE,CAAC;QACD,OAAO,CAAC,GAAG,KAAK,IAAI,sBAAsB,CAAC,MAAM,CAAC,CAAC,WAAW,EAAE,IAAI,GAAG,GAAG,CAAC,CAAA;IAC7E,CAAC,CAAC,CAAA;IAEF,OAAO,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;AAC5D,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,qBAAqB,CACnC,SAAkB,EAClB,SAAkB;IAElB,MAAM,KAAK,GAAsB;QAC/B,iBAAiB,EAAE,SAAS;QAC5B,SAAS;QACT,UAAU,EAAE,CAAC;KACd,CAAA;IACD,MAAM,MAAM,GAAG,mBAAmB,CAAC,KAAK,CAAC,CAAA;IACzC,OAAO,sBAAsB,CAAC,MAAM,CAAC,CAAA;AACvC,CAAC"}
+{"version":3,"file":"quota-status.js","sourceRoot":"","sources":["../../../../src/plugin/ui/quota-status.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,sBAAsB,EAAE,MAAM,kCAAkC,CAAA;AAIzE,OAAO,EAAE,IAAI,EAAE,MAAM,QAAQ,CAAA;AAqB7B;;;GAGG;AACH,MAAM,UAAU,kBAAkB,CAAC,EAAU;IAC3C,IAAI,EAAE,GAAG,IAAI;QAAE,OAAO,GAAG,EAAE,IAAI,CAAA;IAC/B,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,GAAG,IAAI,CAAC,CAAA;IACpC,IAAI,OAAO,GAAG,EAAE;QAAE,OAAO,GAAG,OAAO,GAAG,CAAA;IACtC,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,GAAG,EAAE,CAAC,CAAA;IACxC,MAAM,gBAAgB,GAAG,OAAO,GAAG,EAAE,CAAA;IACrC,IAAI,OAAO,GAAG,EAAE,EAAE,CAAC;QACjB,OAAO,gBAAgB,GAAG,CAAC;YACzB,CAAC,CAAC,GAAG,OAAO,KAAK,gBAAgB,GAAG;YACpC,CAAC,CAAC,GAAG,OAAO,GAAG,CAAA;IACnB,CAAC;IACD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,GAAG,EAAE,CAAC,CAAA;IACtC,MAAM,gBAAgB,GAAG,OAAO,GAAG,EAAE,CAAA;IACrC,OAAO,gBAAgB,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,KAAK,KAAK,gBAAgB,GAAG,CAAC,CAAC,CAAC,GAAG,KAAK,GAAG,CAAA;AAC9E,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,mBAAmB,CACjC,KAAoC;IAEpC,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,CAAA;IAC3B,CAAC;IAED,MAAM,SAAS,GAAG,KAAK,CAAC,iBAAiB,CAAA;IAEzC,0DAA0D;IAC1D,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;QACjE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,CAAA;IAC3B,CAAC;IAED,0BAA0B;IAC1B,IAAI,SAAS,IAAI,CAAC,EAAE,CAAC;QACnB,MAAM,MAAM,GAAG,kBAAkB,CAAC,KAAK,CAAC,SAAS,CAAC,CAAA;QAClD,IAAI,MAAM,KAAK,IAAI,IAAI,MAAM,GAAG,CAAC,EAAE,CAAC;YAClC,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,MAAM,EAAE,CAAA;QACvC,CAAC;QACD,qFAAqF;QACrF,gEAAgE;QAChE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,CAAA;IAC3B,CAAC;IAED,iBAAiB;IACjB,IAAI,SAAS,GAAG,GAAG,EAAE,CAAC;QACpB,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,CAAA;IACzB,CAAC;IAED,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,CAAA;AAC3B,CAAC;AAED;;;GAGG;AACH,SAAS,kBAAkB,CAAC,SAAkB;IAC5C,IAAI,CAAC,SAAS;QAAE,OAAO,IAAI,CAAA;IAC3B,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAA;IACvC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC;QAAE,OAAO,IAAI,CAAA;IAC5C,MAAM,EAAE,GAAG,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;IACjC,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAA;AAC3B,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,mBAAmB,CACjC,UAAkB,EAClB,MAAuB;IAEvB,OAAO;QACL,KAAK,EAAE,UAAU;QACjB,MAAM,EAAE,UAAU,GAAG,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS;QAC/C,cAAc,EAAE,MAAM;KACvB,CAAA;AACH,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,eAAe,CAAC,MAAe;IAC7C,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,GAAG,CAAC,EAAE,CAAC;QACvC,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,CAAA;IAClC,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,CAAA;AAC1B,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,sBAAsB,CAAC,MAAuB;IAC5D,QAAQ,MAAM,CAAC,KAAK,EAAE,CAAC;QACrB,KAAK,OAAO;YACV,OAAO,GAAG,IAAI,CAAC,KAAK,UAAU,IAAI,CAAC,KAAK,EAAE,CAAA;QAE5C,KAAK,KAAK;YACR,OAAO,GAAG,IAAI,CAAC,MAAM,QAAQ,IAAI,CAAC,KAAK,EAAE,CAAA;QAE3C,KAAK,MAAM,CAAC,CAAC,CAAC;YACZ,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM;gBAC1B,CAAC,CAAC,IAAI,kBAAkB,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE;gBACzC,CAAC,CAAC,EAAE,CAAA;YACN,OAAO,GAAG,IAAI,CAAC,MAAM,QAAQ,MAAM,IAAI,IAAI,CAAC,KAAK,EAAE,CAAA;QACrD,CAAC;QAED,KAAK,WAAW,CAAC,CAAC,CAAC;YACjB,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM;gBAC1B,CAAC,CAAC,cAAc,kBAAkB,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE;gBACnD,CAAC,CAAC,EAAE,CAAA;YACN,OAAO,GAAG,IAAI,CAAC,GAAG,aAAa,MAAM,IAAI,IAAI,CAAC,KAAK,EAAE,CAAA;QACvD,CAAC;QAED,KAAK,UAAU,CAAC,CAAC,CAAC;YAChB,MAAM,KAAK,GAAG,CAAC,UAAU,CAAC,CAAA;YAC1B,IAAI,MAAM,CAAC,cAAc,EAAE,CAAC;gBAC1B,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,CAAA;YACnC,CAAC;YACD,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;gBAClB,KAAK,CAAC,IAAI,CAAC,kBAAkB,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAA;YAC/C,CAAC;YACD,OAAO,GAAG,IAAI,CAAC,GAAG,IAAI,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,KAAK,EAAE,CAAA;QACvD,CAAC;IACH,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,sBAAsB,CAAC,MAAuB;IAC5D,QAAQ,MAAM,CAAC,KAAK,EAAE,CAAC;QACrB,KAAK,OAAO;YACV,OAAO,OAAO,CAAA;QAEhB,KAAK,KAAK;YACR,OAAO,KAAK,CAAA;QAEd,KAAK,MAAM,CAAC,CAAC,CAAC;YACZ,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM;gBAC1B,CAAC,CAAC,IAAI,kBAAkB,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE;gBACzC,CAAC,CAAC,EAAE,CAAA;YACN,OAAO,OAAO,MAAM,EAAE,CAAA;QACxB,CAAC;QAED,KAAK,WAAW,CAAC,CAAC,CAAC;YACjB,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM;gBAC1B,CAAC,CAAC,cAAc,kBAAkB,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE;gBACnD,CAAC,CAAC,EAAE,CAAA;YACN,OAAO,YAAY,MAAM,EAAE,CAAA;QAC7B,CAAC;QAED,KAAK,UAAU,CAAC,CAAC,CAAC;YAChB,MAAM,KAAK,GAAG,CAAC,UAAU,CAAC,CAAA;YAC1B,IAAI,MAAM,CAAC,cAAc,EAAE,CAAC;gBAC1B,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,CAAA;YACnC,CAAC;YACD,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;gBAClB,KAAK,CAAC,IAAI,CAAC,kBAAkB,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAA;YAC/C,CAAC;YACD,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;QACxB,CAAC;IACH,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,0BAA0B,CACxC,WAIa;IAKb,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,CAAA;IAC9B,CAAC;IAED,MAAM,UAAU,GAAG,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAA;IAC3C,IAAI,cAAc,GAAG,CAAC,CAAA;IACtB,IAAI,cAAc,GAAG,CAAC,CAAA;IACtB,IAAI,UAA8B,CAAA;IAElC,KAAK,MAAM,GAAG,IAAI,UAAU,EAAE,CAAC;QAC7B,MAAM,KAAK,GAAG,WAAW,CAAC,GAAG,CAAC,EAAE,iBAAiB,CAAA;QACjD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;YAAE,SAAQ;QAClE,cAAc,EAAE,CAAA;QAChB,IAAI,KAAK,IAAI,CAAC,EAAE,CAAC;YACf,iEAAiE;YACjE,uEAAuE;YACvE,MAAM,OAAO,GAAG,kBAAkB,CAAC,WAAW,CAAC,GAAG,CAAC,EAAE,SAAS,CAAC,CAAA;YAC/D,IAAI,OAAO,KAAK,IAAI,IAAI,OAAO,GAAG,CAAC,EAAE,CAAC;gBACpC,cAAc,EAAE,CAAA;gBAChB,IAAI,UAAU,KAAK,SAAS,IAAI,OAAO,GAAG,UAAU,EAAE,CAAC;oBACrD,UAAU,GAAG,OAAO,CAAA;gBACtB,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED,IAAI,cAAc,KAAK,CAAC;QAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,CAAA;IACtD,IAAI,cAAc,KAAK,cAAc;QACnC,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,UAAU,EAAE,CAAA;IAC5C,IAAI,cAAc,GAAG,CAAC;QAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,CAAA;IAChE,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,CAAA;AAChC,CAAC;AAED,MAAM,UAAU,2BAA2B,CACzC,WAIa,EACb,SAAkB,EAClB,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE;IAEhB,IAAI,CAAC,WAAW;QAAE,OAAO,SAAS,CAAA;IAClC,MAAM,MAAM,GAAG,MAAM,CAAC,WAAW,CAC/B,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,MAAM,CAChC,CACE,KAAK,EAIL,EAAE,CACF,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,QAAQ,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,YAAY,CAAC;QACpD,KAAK,CAAC,CAAC,CAAC,KAAK,SAAS,CACzB,CACF,CAAA;IACD,OAAO,sBAAsB,CAC3B,EAAE,WAAW,EAAE,MAAM,EAAE,oBAAoB,EAAE,SAAS,EAAE,EACxD,EAAE,GAAG,EAAE,CACR,CAAA;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,qBAAqB,CACnC,SAAkB,EAClB,SAAkB;IAElB,MAAM,KAAK,GAAsB;QAC/B,iBAAiB,EAAE,SAAS;QAC5B,SAAS;QACT,UAAU,EAAE,CAAC;KACd,CAAA;IACD,MAAM,MAAM,GAAG,mBAAmB,CAAC,KAAK,CAAC,CAAA;IACzC,OAAO,sBAAsB,CAAC,MAAM,CAAC,CAAA;AACvC,CAAC"}

package/dist/src/plugin/vault-activation.d.ts

@@ -0,0 +1,11 @@
+import { type EnrollmentAuthority } from '@cortexkit/antigravity-auth-core';
+import type { AuthMethod } from './types';
+export declare const V1_VAULT_ACTIVATION_LABEL = "Activate approved Antigravity vault";
+export declare function nativeOpenCodeAuthPath(env?: NodeJS.ProcessEnv, home?: string): string;
+/** Activate a fresh host slot without a Google login or a local account write. */
+export declare function createV1VaultActivationMethod(input: {
+    providerId: string;
+    readAuthority: () => Promise<EnrollmentAuthority>;
+    authFile?: () => string;
+}): AuthMethod;
+//# sourceMappingURL=vault-activation.d.ts.map

package/dist/src/plugin/vault-activation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"vault-activation.d.ts","sourceRoot":"","sources":["../../../src/plugin/vault-activation.ts"],"names":[],"mappings":"AAGA,OAAO,EACL,KAAK,mBAAmB,EAEzB,MAAM,kCAAkC,CAAA;AACzC,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,SAAS,CAAA;AAEzC,eAAO,MAAM,yBAAyB,wCAAwC,CAAA;AAE9E,wBAAgB,sBAAsB,CACpC,GAAG,GAAE,MAAM,CAAC,UAAwB,EACpC,IAAI,SAAY,GACf,MAAM,CAMR;AAED,kFAAkF;AAClF,wBAAgB,6BAA6B,CAAC,KAAK,EAAE;IACnD,UAAU,EAAE,MAAM,CAAA;IAClB,aAAa,EAAE,MAAM,OAAO,CAAC,mBAAmB,CAAC,CAAA;IACjD,QAAQ,CAAC,EAAE,MAAM,MAAM,CAAA;CACxB,GAAG,UAAU,CAkDb"}

package/dist/src/plugin/vault-activation.js

@@ -0,0 +1,53 @@
+import { readFile } from 'node:fs/promises';
+import { homedir } from 'node:os';
+import { join } from 'node:path';
+import { loadCommonAuthClaustrum, } from '@cortexkit/antigravity-auth-core';
+export const V1_VAULT_ACTIVATION_LABEL = 'Activate approved Antigravity vault';
+export function nativeOpenCodeAuthPath(env = process.env, home = homedir()) {
+    return join(env.XDG_DATA_HOME || join(home, '.local', 'share'), 'opencode', 'auth.json');
+}
+/** Activate a fresh host slot without a Google login or a local account write. */
+export function createV1VaultActivationMethod(input) {
+    return {
+        type: 'oauth',
+        label: V1_VAULT_ACTIVATION_LABEL,
+        authorize: async () => ({
+            url: '',
+            method: 'auto',
+            instructions: 'Vault access is approved. Activate it without signing in to Google.',
+            callback: async () => {
+                try {
+                    if ((await input.readAuthority()) !== 'vault')
+                        return { type: 'failed' };
+                    try {
+                        const value = JSON.parse(await readFile((input.authFile ?? nativeOpenCodeAuthPath)(), 'utf8'));
+                        if (!value ||
+                            typeof value !== 'object' ||
+                            Array.isArray(value) ||
+                            Object.hasOwn(value, input.providerId))
+                            return { type: 'failed' };
+                    }
+                    catch (error) {
+                        if (!(error instanceof Error) ||
+                            !('code' in error) ||
+                            error.code !== 'ENOENT')
+                            return { type: 'failed' };
+                    }
+                    // Only explicit setup reads the host slot. OpenCode persists this
+                    // non-secret result; serving never reads or replaces an existing login.
+                    const claustrum = await loadCommonAuthClaustrum();
+                    if ((await input.readAuthority()) !== 'vault')
+                        return { type: 'failed' };
+                    return {
+                        ...claustrum.custodyPlaceholder(input.providerId),
+                        type: 'success',
+                    };
+                }
+                catch {
+                    return { type: 'failed' };
+                }
+            },
+        }),
+    };
+}
+//# sourceMappingURL=vault-activation.js.map

package/dist/src/plugin/vault-activation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"vault-activation.js","sourceRoot":"","sources":["../../../src/plugin/vault-activation.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAA;AAC3C,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAA;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAChC,OAAO,EAEL,uBAAuB,GACxB,MAAM,kCAAkC,CAAA;AAGzC,MAAM,CAAC,MAAM,yBAAyB,GAAG,qCAAqC,CAAA;AAE9E,MAAM,UAAU,sBAAsB,CACpC,MAAyB,OAAO,CAAC,GAAG,EACpC,IAAI,GAAG,OAAO,EAAE;IAEhB,OAAO,IAAI,CACT,GAAG,CAAC,aAAa,IAAI,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,OAAO,CAAC,EAClD,UAAU,EACV,WAAW,CACZ,CAAA;AACH,CAAC;AAED,kFAAkF;AAClF,MAAM,UAAU,6BAA6B,CAAC,KAI7C;IACC,OAAO;QACL,IAAI,EAAE,OAAO;QACb,KAAK,EAAE,yBAAyB;QAChC,SAAS,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC;YACtB,GAAG,EAAE,EAAE;YACP,MAAM,EAAE,MAAM;YACd,YAAY,EACV,qEAAqE;YACvE,QAAQ,EAAE,KAAK,IAAI,EAAE;gBACnB,IAAI,CAAC;oBACH,IAAI,CAAC,MAAM,KAAK,CAAC,aAAa,EAAE,CAAC,KAAK,OAAO;wBAC3C,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAA;oBAC3B,IAAI,CAAC;wBACH,MAAM,KAAK,GAAY,IAAI,CAAC,KAAK,CAC/B,MAAM,QAAQ,CACZ,CAAC,KAAK,CAAC,QAAQ,IAAI,sBAAsB,CAAC,EAAE,EAC5C,MAAM,CACP,CACF,CAAA;wBACD,IACE,CAAC,KAAK;4BACN,OAAO,KAAK,KAAK,QAAQ;4BACzB,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;4BACpB,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,UAAU,CAAC;4BAEtC,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAA;oBAC7B,CAAC;oBAAC,OAAO,KAAK,EAAE,CAAC;wBACf,IACE,CAAC,CAAC,KAAK,YAAY,KAAK,CAAC;4BACzB,CAAC,CAAC,MAAM,IAAI,KAAK,CAAC;4BAClB,KAAK,CAAC,IAAI,KAAK,QAAQ;4BAEvB,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAA;oBAC7B,CAAC;oBACD,kEAAkE;oBAClE,wEAAwE;oBACxE,MAAM,SAAS,GAAG,MAAM,uBAAuB,EAAE,CAAA;oBACjD,IAAI,CAAC,MAAM,KAAK,CAAC,aAAa,EAAE,CAAC,KAAK,OAAO;wBAC3C,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAA;oBAC3B,OAAO;wBACL,GAAG,SAAS,CAAC,kBAAkB,CAAC,KAAK,CAAC,UAAU,CAAC;wBACjD,IAAI,EAAE,SAAS;qBAChB,CAAA;gBACH,CAAC;gBAAC,MAAM,CAAC;oBACP,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAA;gBAC3B,CAAC;YACH,CAAC;SACF,CAAC;KACH,CAAA;AACH,CAAC"}

package/dist/src/plugin/vault-custody.d.ts

@@ -0,0 +1,131 @@
+/**
+ * Vault custody for the OpenCode host (OpenCode 1 and OpenCode 2 locations
+ * alike): whether Antigravity accounts are served from the plugin's own
+ * account store ("local") or from the Claustrum vault ("custody"), the
+ * setup steps that switch between them, and the vault account source the
+ * custody request path uses.
+ *
+ * Everything lives in an owner-only `antigravity-auth-vault` directory
+ * beside the resolved account file: the non-secret mode file, the vault
+ * roster and this host's enrollment files (written by the vault library).
+ * The mode file holds only the mode; no token, project or account data is
+ * written here. A missing mode file is local mode, so nothing connects to
+ * the vault and no source starts while local custody is in force.
+ *
+ * Every custody entry re-reads the mode and checks the host's own auth slot
+ * against it through the vault library: a real host login while the vault
+ * holds the accounts refuses custody instead of silently picking one of the
+ * two. The host supplies a reader for its slot; a slot that cannot be read
+ * refuses custody rather than being treated as empty.
+ */
+import { type AntigravityVaultAccountSource, type CommonAuthClaustrumModule, type CommonAuthCommandsModule, type EnrollmentAuthority, type VaultLogger, type VaultProviderStateFile, type VaultReporterSource, type VaultScopedClient } from '@cortexkit/antigravity-auth-core';
+/** The host auth slot this plugin's provider lives in on OpenCode. */
+export declare const OPENCODE_VAULT_PROVIDER = "google";
+/** The vault host name; one enrollment per host. */
+export declare const OPENCODE_VAULT_HOST = "opencode";
+/** The enrollment name the vault operator sees and approves. */
+export declare const OPENCODE_VAULT_ENROLLMENT_NAME: "antigravity-auth-opencode" | "antigravity-auth-pi";
+/** The vault directory's name, beside the resolved account file. */
+export declare const OPENCODE_VAULT_DIR_NAME = "antigravity-auth-vault";
+type Claustrum = CommonAuthClaustrumModule;
+type EnrollmentStatus = Awaited<ReturnType<Claustrum['readClaustrumEnrollmentStatus']>>;
+type EnrollmentConnection = Awaited<ReturnType<Claustrum['connectClaustrumEnrollmentClient']>>;
+type HostSlotContent = ReturnType<Claustrum['classifyHostSlot']>;
+type MenuOptions = Parameters<CommonAuthCommandsModule['createCommandMenu']>[0];
+type MenuExtraSection = NonNullable<MenuOptions['extras']>[number];
+export interface OpenCodeVaultPaths {
+    readonly dir: string;
+    readonly modeFile: string;
+    readonly rosterFile: string;
+    /** The vault accounts' credential-free provider state. */
+    readonly stateFile: string;
+}
+/** The vault paths for one resolved account file. */
+export declare function openCodeVaultPaths(accountFile: string): OpenCodeVaultPaths;
+export type OpenCodeVaultMode = 'local' | 'custody';
+export interface OpenCodeVaultModeRecord {
+    readonly version: 1;
+    readonly mode: OpenCodeVaultMode;
+}
+export type OpenCodeVaultModeRead = {
+    readonly ok: true;
+    readonly record: OpenCodeVaultModeRecord;
+} | {
+    readonly ok: false;
+    readonly reason: string;
+};
+/**
+ * Reads the mode file. A missing file is local mode. A file that exists but
+ * cannot be read or understood is reported, never guessed: custody is then
+ * refused, because the user's choice is unknown.
+ */
+export declare function readOpenCodeVaultMode(modeFile: string): Promise<OpenCodeVaultModeRead>;
+/** A custody step refused before anything changed, with a message for the user. */
+export declare class OpenCodeVaultCustodyError extends Error {
+    constructor(message: string);
+}
+export interface OpenCodeVaultStatus {
+    readonly mode: OpenCodeVaultMode | 'unreadable';
+    readonly modeProblem?: string;
+    readonly enrollment: EnrollmentStatus;
+    /** `unreadable` when the host's slot reader failed. */
+    readonly hostSlot: HostSlotContent | 'unreadable' | 'not-used';
+}
+export interface OpenCodeVaultCustodyOptions {
+    readonly onAuthorityChanged?: (authority: EnrollmentAuthority) => void;
+    readonly onRosterChanged?: () => void;
+    /** The resolved account file the vault directory sits beside. */
+    readonly accountFile: string;
+    /**
+     * The host's own auth slot for `google`, read through the host's public
+     * API and shaped as the vault library classifies it (`oauth` or `api`).
+     * It must reject when the slot cannot be read.
+     */
+    readonly readHostSlot: () => Promise<unknown>;
+    /** Which side reads a send's HTTP status for 401 reports. */
+    readonly reporterSource: VaultReporterSource;
+    /**
+     * The vault's connection file; defaults to the vault client library's own
+     * resolution of it (core `resolveClaustrumConnectionPath`). Read only when
+     * a vault client is opened.
+     */
+    readonly connectionFile?: () => string | Promise<string>;
+    readonly loadClaustrum?: () => Promise<Claustrum>;
+    /** Opens the request-path vault client; defaults to the connection file. */
+    readonly connect?: () => Promise<VaultScopedClient>;
+    /** Opens the setup-only enrollment client; defaults to the connection file. */
+    readonly connectEnrollment?: () => Promise<EnrollmentConnection>;
+    readonly logger?: VaultLogger;
+    readonly now?: () => number;
+}
+export interface OpenCodeVaultCustody {
+    /** Detect approval and disconnect with the existing enrollment-status poll, without another timer. Local mode opens no vault connection. */
+    startObservation(): Promise<void>;
+    readonly paths: OpenCodeVaultPaths;
+    readMode(): Promise<OpenCodeVaultModeRead>;
+    /**
+     * The vault account source for a custody send path. Refused unless the
+     * mode is custody, this host's enrollment is approved and the host slot
+     * holds no real login. The source is created once and reused until
+     * custody ends.
+     */
+    custodySource(): Promise<AntigravityVaultAccountSource>;
+    status(): Promise<OpenCodeVaultStatus>;
+    /** One enrollment step: propose this host to the vault, or poll the proposal. */
+    requestAccess(): Promise<EnrollmentStatus>;
+    /** Serve accounts from the vault from now on. */
+    useVault(): Promise<void>;
+    /** Serve accounts from the local account store again; ends the vault source. */
+    useLocal(): Promise<void>;
+    /** The Vault section of the `/antigravity` menu. */
+    menuSection(): MenuExtraSection;
+    /** The vault accounts' stored provider state (missing file: none). */
+    readState(): Promise<VaultProviderStateFile>;
+    /** Closes the vault source, if one was created. */
+    dispose(): Promise<void>;
+}
+export declare function createOpenCodeVaultCustody(options: OpenCodeVaultCustodyOptions): OpenCodeVaultCustody;
+/** Non-secret status lines: never a token, project or account address. */
+export declare function statusLines(status: OpenCodeVaultStatus): string[];
+export {};
+//# sourceMappingURL=vault-custody.d.ts.map

package/dist/src/plugin/vault-custody.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"vault-custody.d.ts","sourceRoot":"","sources":["../../../src/plugin/vault-custody.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAKH,OAAO,EACL,KAAK,6BAA6B,EAClC,KAAK,yBAAyB,EAC9B,KAAK,wBAAwB,EAE7B,KAAK,mBAAmB,EAQxB,KAAK,WAAW,EAChB,KAAK,sBAAsB,EAC3B,KAAK,mBAAmB,EACxB,KAAK,iBAAiB,EACvB,MAAM,kCAAkC,CAAA;AAGzC,sEAAsE;AACtE,eAAO,MAAM,uBAAuB,WAAW,CAAA;AAC/C,oDAAoD;AACpD,eAAO,MAAM,mBAAmB,aAAa,CAAA;AAC7C,gEAAgE;AAChE,eAAO,MAAM,8BAA8B,qDACa,CAAA;AACxD,oEAAoE;AACpE,eAAO,MAAM,uBAAuB,2BAA2B,CAAA;AAE/D,KAAK,SAAS,GAAG,yBAAyB,CAAA;AAC1C,KAAK,gBAAgB,GAAG,OAAO,CAC7B,UAAU,CAAC,SAAS,CAAC,+BAA+B,CAAC,CAAC,CACvD,CAAA;AACD,KAAK,oBAAoB,GAAG,OAAO,CACjC,UAAU,CAAC,SAAS,CAAC,kCAAkC,CAAC,CAAC,CAC1D,CAAA;AAED,KAAK,eAAe,GAAG,UAAU,CAAC,SAAS,CAAC,kBAAkB,CAAC,CAAC,CAAA;AAChE,KAAK,WAAW,GAAG,UAAU,CAAC,wBAAwB,CAAC,mBAAmB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;AAC/E,KAAK,gBAAgB,GAAG,WAAW,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAA;AAgBlE,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;IACpB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,0DAA0D;IAC1D,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;CAC3B;AAED,qDAAqD;AACrD,wBAAgB,kBAAkB,CAAC,WAAW,EAAE,MAAM,GAAG,kBAAkB,CAQ1E;AAYD,MAAM,MAAM,iBAAiB,GAAG,OAAO,GAAG,SAAS,CAAA;AAEnD,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAA;IACnB,QAAQ,CAAC,IAAI,EAAE,iBAAiB,CAAA;CACjC;AAED,MAAM,MAAM,qBAAqB,GAC7B;IAAE,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,uBAAuB,CAAA;CAAE,GAC/D;IAAE,QAAQ,CAAC,EAAE,EAAE,KAAK,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAA;AAwBnD;;;;GAIG;AACH,wBAAsB,qBAAqB,CACzC,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,qBAAqB,CAAC,CAwBhC;AAMD,mFAAmF;AACnF,qBAAa,yBAA0B,SAAQ,KAAK;gBACtC,OAAO,EAAE,MAAM;CAI5B;AAED,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,IAAI,EAAE,iBAAiB,GAAG,YAAY,CAAA;IAC/C,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAA;IAC7B,QAAQ,CAAC,UAAU,EAAE,gBAAgB,CAAA;IACrC,uDAAuD;IACvD,QAAQ,CAAC,QAAQ,EAAE,eAAe,GAAG,YAAY,GAAG,UAAU,CAAA;CAC/D;AAED,MAAM,WAAW,2BAA2B;IAC1C,QAAQ,CAAC,kBAAkB,CAAC,EAAE,CAAC,SAAS,EAAE,mBAAmB,KAAK,IAAI,CAAA;IACtE,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,IAAI,CAAA;IACrC,iEAAiE;IACjE,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;IAC5B;;;;OAIG;IACH,QAAQ,CAAC,YAAY,EAAE,MAAM,OAAO,CAAC,OAAO,CAAC,CAAA;IAC7C,6DAA6D;IAC7D,QAAQ,CAAC,cAAc,EAAE,mBAAmB,CAAA;IAC5C;;;;OAIG;IACH,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAA;IACxD,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,OAAO,CAAC,SAAS,CAAC,CAAA;IACjD,4EAA4E;IAC5E,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,OAAO,CAAC,iBAAiB,CAAC,CAAA;IACnD,+EAA+E;IAC/E,QAAQ,CAAC,iBAAiB,CAAC,EAAE,MAAM,OAAO,CAAC,oBAAoB,CAAC,CAAA;IAChE,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAA;IAC7B,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,MAAM,CAAA;CAC5B;AAED,MAAM,WAAW,oBAAoB;IACnC,4IAA4I;IAC5I,gBAAgB,IAAI,OAAO,CAAC,IAAI,CAAC,CAAA;IACjC,QAAQ,CAAC,KAAK,EAAE,kBAAkB,CAAA;IAClC,QAAQ,IAAI,OAAO,CAAC,qBAAqB,CAAC,CAAA;IAC1C;;;;;OAKG;IACH,aAAa,IAAI,OAAO,CAAC,6BAA6B,CAAC,CAAA;IACvD,MAAM,IAAI,OAAO,CAAC,mBAAmB,CAAC,CAAA;IACtC,iFAAiF;IACjF,aAAa,IAAI,OAAO,CAAC,gBAAgB,CAAC,CAAA;IAC1C,iDAAiD;IACjD,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC,CAAA;IACzB,gFAAgF;IAChF,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC,CAAA;IACzB,oDAAoD;IACpD,WAAW,IAAI,gBAAgB,CAAA;IAC/B,sEAAsE;IACtE,SAAS,IAAI,OAAO,CAAC,sBAAsB,CAAC,CAAA;IAC5C,mDAAmD;IACnD,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC,CAAA;CACzB;AAED,wBAAgB,0BAA0B,CACxC,OAAO,EAAE,2BAA2B,GACnC,oBAAoB,CAsPtB;AAmDD,0EAA0E;AAC1E,wBAAgB,WAAW,CAAC,MAAM,EAAE,mBAAmB,GAAG,MAAM,EAAE,CAcjE"}