@cortexkit/pi-antigravity-auth 2.2.0 → 3.0.0

package/README.md

@@ -17,16 +17,34 @@ pi install npm:@cortexkit/pi-antigravity-auth
 ## Login
 
 ```
-/login google-antigravity
+/login google
 ```
 
 A browser URL is shown. Complete the Google OAuth flow and paste the resulting
 callback URL (or authorization code) back into the prompt.
 
+The extension replaces Pi's built-in `google` catalog with Antigravity models.
+Use Antigravity OAuth for this provider, not a Google AI Studio API key. If upgrading
+from the old provider ID, change model selections to `google/antigravity-…` and
+run `/login google`. Credentials saved under `google-antigravity` are not migrated
+to `google` automatically.
+
+Use `/antigravity` to request vault access and select a vault account. Local and
+vault modes use the same `google/antigravity-…` model IDs. After the operator
+approves access, the extension backs up Pi's native Google login and temporarily
+replaces its slot with a non-secret marker before the first model request.
+Requests then use only vault credentials; an empty or unreachable vault does not
+fall back to the local login. Disconnecting vault enrollment attempts to restore
+the saved Google login only when the native slot still matches the non-secret
+marker installed for that enrollment.
+If another process changed the slot, the extension keeps the backup and refuses
+to overwrite that change; re-login may be needed. This is not a promise to restore
+every native auth record when changing plugin versions.
+
 ## Models
 
 The extension registers the Antigravity model catalog under the
-`google-antigravity` provider, including:
+`google` provider, including:
 
 - `antigravity-gemini-3.8-flash`
 - `antigravity-gemini-3.7-flash`
@@ -40,22 +58,40 @@ The extension registers the Antigravity model catalog under the
 The image-generation model is currently OpenCode-only because Pi's provider event
 protocol does not expose image-output stream events.
 
-Select a model with `/model` or `pi -m google-antigravity/antigravity-gemini-3.8-flash`.
+Select a model with `/model` or `pi -m google/antigravity-gemini-3.8-flash`.
 
 ## Configuration
 
 | Environment variable | Description |
 | --- | --- |
 | `PI_AGENT_DIR` | Override the pi agent directory (default `~/.pi/agent`). |
-| `PI_ANTIGRAVITY_AUTH_FILE` | Override the account storage file path. |
+| `PI_ANTIGRAVITY_AUTH_FILE` | Relocate the base path used to place `antigravity-auth-vault/` beside it; does not relocate Pi's native `auth.json` Google slot or create an OpenCode pool. |
 
 ## Notes
 
 This package shares its transport, OAuth, fingerprint, and request-transform
-logic with the OpenCode plugin via
-[`@cortexkit/antigravity-auth-core`](../core). The current pi release targets a
-single authenticated account; multi-account rotation and quota gating are
-provided by the OpenCode plugin and are planned for pi in a later release.
+logic with the unified OpenCode V1/GA plugin via
+[`@cortexkit/antigravity-auth-core`](../core). Local mode uses one account in Pi's
+native `google` OAuth slot (`auth.json` in Pi's agent directory). Vault mode can
+list/select approved vault accounts, but serves one at a time; Pi has no local
+pool rotation, recorded quota gating, killswitch, or operator settings.
+
+### Major upgrades and downgrade
+
+Pi's native auth file is **not** the legacy OpenCode pool. Pi-only users must not
+run `antigravity-auth migrate` or `rollback` against it. When upgrading from the
+old `google-antigravity` provider, update model IDs to `google/antigravity-…` and
+run `/login google`: credentials in the `google-antigravity` auth slot are not
+automatically moved or overwritten.
+
+Before changing builds while enrolled in a vault, disconnect via `/antigravity` →
+Vault in the currently installed extension, then re-login if safe native-slot
+restoration is not possible. An older build may expect a different provider slot;
+do not copy tokens between slots or assume disconnect restores all native records.
+If you also use an OpenCode legacy pool, follow its separate
+[offline migration/rollback guide](../../README.md#major-upgrades-migration-and-rollback).
+The provider and custody behavior is implemented in [`src/index.ts`](src/index.ts)
+and [`src/vault-setup.ts`](src/vault-setup.ts).
 
 ## License
 

package/dist/commands.d.ts

@@ -0,0 +1,30 @@
+/**
+ * Pi's `/antigravity` command: the core's shared Antigravity menu in its
+ * host-sections mode, drawn with Pi's extension UI by the library's Pi
+ * renderer. Pi has one account at a time and no account rows, so it supplies
+ * all four account slots itself. The commands library loads on the first
+ * invocation, and every invocation builds a fresh menu.
+ */
+import { type AntigravityMenuSections, type CommonAuthCommandsModule } from '@cortexkit/antigravity-auth-core';
+import type { PluginExtraSection } from '@cortexkit/antigravity-auth-core/common-auth/commands';
+import type { ExtensionAPI } from '@earendil-works/pi-coding-agent';
+import { type PiVaultAccountsPort, type PiVaultSetup } from './vault-setup.ts';
+export interface PiAntigravityCommandOptions {
+    sections: AntigravityMenuSections;
+    extras: readonly PluginExtraSection[];
+    /** Loads the commands library; defaults to the core's lazy loader. */
+    loadCommands?: () => Promise<CommonAuthCommandsModule>;
+}
+export declare function registerPiAntigravityCommand(pi: Pick<ExtensionAPI, 'registerCommand'>, options: PiAntigravityCommandOptions): void;
+/**
+ * The menu's four account slots, built from what Pi actually has: one
+ * account at a time (its own login, or one vault account), no pool, no
+ * rotation and no recorded quota. Nothing here pretends to be a pool row.
+ */
+export type PiAntigravityAccountSections = AntigravityMenuSections;
+export interface PiAntigravityAccountSectionsOptions {
+    setup: () => Promise<PiVaultSetup>;
+    accounts: () => PiVaultAccountsPort;
+}
+export declare function createPiAntigravityAccountSections(options: PiAntigravityAccountSectionsOptions): PiAntigravityAccountSections;
+//# sourceMappingURL=commands.d.ts.map

package/dist/commands.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"commands.d.ts","sourceRoot":"","sources":["../src/commands.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAEL,KAAK,uBAAuB,EAC5B,KAAK,wBAAwB,EAG9B,MAAM,kCAAkC,CAAA;AACzC,OAAO,KAAK,EAEV,kBAAkB,EACnB,MAAM,uDAAuD,CAAA;AAC9D,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,iCAAiC,CAAA;AAEnE,OAAO,EAGL,KAAK,mBAAmB,EACxB,KAAK,YAAY,EAGlB,MAAM,kBAAkB,CAAA;AAEzB,MAAM,WAAW,2BAA2B;IAC1C,QAAQ,EAAE,uBAAuB,CAAA;IACjC,MAAM,EAAE,SAAS,kBAAkB,EAAE,CAAA;IACrC,sEAAsE;IACtE,YAAY,CAAC,EAAE,MAAM,OAAO,CAAC,wBAAwB,CAAC,CAAA;CACvD;AAED,wBAAgB,4BAA4B,CAC1C,EAAE,EAAE,IAAI,CAAC,YAAY,EAAE,iBAAiB,CAAC,EACzC,OAAO,EAAE,2BAA2B,GACnC,IAAI,CAkBN;AAMD;;;;GAIG;AACH,MAAM,MAAM,4BAA4B,GAAG,uBAAuB,CAAA;AAElE,MAAM,WAAW,mCAAmC;IAClD,KAAK,EAAE,MAAM,OAAO,CAAC,YAAY,CAAC,CAAA;IAClC,QAAQ,EAAE,MAAM,mBAAmB,CAAA;CACpC;AA4CD,wBAAgB,kCAAkC,CAChD,OAAO,EAAE,mCAAmC,GAC3C,4BAA4B,CAwF9B"}

package/dist/convert.d.ts

@@ -46,8 +46,10 @@ export interface BuildGeminiRequestOptions {
     model?: string;
 }
 /**
- * Convert a pi `Context` into a Gemini `generateContent` request body
- * (the inner `request` object of the Antigravity envelope).
+ * Convert a pi request context into a Gemini `generateContent` request body
+ * (the inner `request` object of the Antigravity envelope). Accepts both the
+ * transcript form Pi 0.86+ passes to providers and the flat `Context` of
+ * older runtimes.
  */
 export declare function buildGeminiRequest(context: Context, options?: BuildGeminiRequestOptions): GeminiRequest;
 export {};

package/dist/convert.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"convert.d.ts","sourceRoot":"","sources":["../src/convert.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAEV,OAAO,EAMR,MAAM,uBAAuB,CAAA;AAE9B,qCAAqC;AACrC,KAAK,UAAU,GACX;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,OAAO,CAAC;IAAC,gBAAgB,CAAC,EAAE,MAAM,CAAA;CAAE,GAC9D;IAAE,UAAU,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAA;CAAE,GAClD;IACE,YAAY,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAAC,EAAE,EAAE,MAAM,CAAA;KAAE,CAAA;IACzE,gBAAgB,CAAC,EAAE,MAAM,CAAA;CAC1B,GACD;IACE,gBAAgB,EAAE;QAChB,IAAI,EAAE,MAAM,CAAA;QACZ,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;QACjC,EAAE,EAAE,MAAM,CAAA;KACX,CAAA;CACF,CAAA;AAEL,UAAU,aAAa;IACrB,IAAI,EAAE,MAAM,GAAG,OAAO,CAAA;IACtB,KAAK,EAAE,UAAU,EAAE,CAAA;CACpB;AAED,UAAU,UAAU;IAClB,oBAAoB,EAAE,KAAK,CAAC;QAC1B,IAAI,EAAE,MAAM,CAAA;QACZ,WAAW,EAAE,MAAM,CAAA;QACnB,UAAU,CAAC,EAAE,OAAO,CAAA;KACrB,CAAC,CAAA;CACH;AAED,MAAM,WAAW,aAAa;IAC5B,QAAQ,EAAE,aAAa,EAAE,CAAA;IACzB,KAAK,CAAC,EAAE,UAAU,EAAE,CAAA;IACpB,iBAAiB,CAAC,EAAE;QAAE,KAAK,EAAE,UAAU,EAAE,CAAA;KAAE,CAAA;CAC5C;AAwED,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,KAAK,CAAC,EAAE,MAAM,CAAA;CACf;AAiGD;;;GAGG;AACH,wBAAgB,kBAAkB,CAChC,OAAO,EAAE,OAAO,EAChB,OAAO,CAAC,EAAE,yBAAyB,GAClC,aAAa,CAef"}
+{"version":3,"file":"convert.d.ts","sourceRoot":"","sources":["../src/convert.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAEV,OAAO,EAMR,MAAM,uBAAuB,CAAA;AAM9B,qCAAqC;AACrC,KAAK,UAAU,GACX;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,OAAO,CAAC;IAAC,gBAAgB,CAAC,EAAE,MAAM,CAAA;CAAE,GAC9D;IAAE,UAAU,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAA;CAAE,GAClD;IACE,YAAY,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAAC,EAAE,EAAE,MAAM,CAAA;KAAE,CAAA;IACzE,gBAAgB,CAAC,EAAE,MAAM,CAAA;CAC1B,GACD;IACE,gBAAgB,EAAE;QAChB,IAAI,EAAE,MAAM,CAAA;QACZ,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;QACjC,EAAE,EAAE,MAAM,CAAA;KACX,CAAA;CACF,CAAA;AAEL,UAAU,aAAa;IACrB,IAAI,EAAE,MAAM,GAAG,OAAO,CAAA;IACtB,KAAK,EAAE,UAAU,EAAE,CAAA;CACpB;AAED,UAAU,UAAU;IAClB,oBAAoB,EAAE,KAAK,CAAC;QAC1B,IAAI,EAAE,MAAM,CAAA;QACZ,WAAW,EAAE,MAAM,CAAA;QACnB,UAAU,CAAC,EAAE,OAAO,CAAA;KACrB,CAAC,CAAA;CACH;AAED,MAAM,WAAW,aAAa;IAC5B,QAAQ,EAAE,aAAa,EAAE,CAAA;IACzB,KAAK,CAAC,EAAE,UAAU,EAAE,CAAA;IACpB,iBAAiB,CAAC,EAAE;QAAE,KAAK,EAAE,UAAU,EAAE,CAAA;KAAE,CAAA;CAC5C;AAwED,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,KAAK,CAAC,EAAE,MAAM,CAAA;CACf;AA8ID;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAChC,OAAO,EAAE,OAAO,EAChB,OAAO,CAAC,EAAE,yBAAyB,GAClC,aAAa,CAiBf"}

package/dist/index.d.ts

@@ -1,3 +1,32 @@
-import type { ExtensionAPI } from '@earendil-works/pi-coding-agent';
-export default function cortexKitPiAntigravityAuth(pi: ExtensionAPI): void;
+import type { PluginExtraSection } from '@cortexkit/antigravity-auth-core/common-auth/commands';
+import { type ExtensionAPI } from '@earendil-works/pi-coding-agent';
+import { type PiAntigravityAccountSections } from './commands.ts';
+import { type PiVaultSeams } from './vault-source.ts';
+/** Refresh value of the vault placeholder login; local mode must never refresh it. */
+export declare const CUSTODY_PLACEHOLDER_REFRESH_PREFIX = "claustrum-tombstone:v1:";
+/** Non-secret key that lets Pi list custody models without a login; never sent. */
+export declare const CUSTODY_PROVIDER_KEY_MARKER = "antigravity-vault-custody";
+/**
+ * The vault runtime Pi composes custody from: the public `./claustrum` entry
+ * of `@cortexkit/common-auth`, the setup-only enrollment connection, and the
+ * shared Antigravity vault account source for the `pi` host.
+ */
+export interface PiAntigravityExtension {
+    /**
+     * The Vault section for the shared command menu, where enrollment, mode
+     * switching and account choice happen.
+     */
+    readonly vaultSection: PluginExtraSection;
+    /** Pi's own Accounts, Quota, Routing and Limits sections for the same menu. */
+    readonly accountSections: PiAntigravityAccountSections;
+}
+/**
+ * Register the Antigravity provider for the mode the user chose: Pi's own
+ * login (local, the default) or the vault (custody). Changing the mode in
+ * the Vault section re-registers the same provider id, so Pi never lists two.
+ * `seams` replaces only I/O (vault client transport, file paths, auth slot)
+ * for tests; Pi's default entry passes none.
+ */
+export declare function registerCortexKitPiAntigravity(pi: Pick<ExtensionAPI, 'registerProvider' | 'registerCommand'> & Partial<Pick<ExtensionAPI, 'on'>>, seams?: PiVaultSeams): Promise<PiAntigravityExtension>;
+export default function cortexKitPiAntigravityAuth(pi: ExtensionAPI): Promise<void>;
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAUA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,iCAAiC,CAAA;AAkEnE,MAAM,CAAC,OAAO,UAAU,0BAA0B,CAAC,EAAE,EAAE,YAAY,GAAG,IAAI,CAkCzE"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAUA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,uDAAuD,CAAA;AAK/F,OAAO,EACL,KAAK,YAAY,EAIlB,MAAM,iCAAiC,CAAA;AAExC,OAAO,EAEL,KAAK,4BAA4B,EAElC,MAAM,eAAe,CAAA;AActB,OAAO,EAIL,KAAK,YAAY,EAClB,MAAM,mBAAmB,CAAA;AAE1B,sFAAsF;AACtF,eAAO,MAAM,kCAAkC,4BAA4B,CAAA;AAE3E,mFAAmF;AACnF,eAAO,MAAM,2BAA2B,8BAA8B,CAAA;AAgKtE;;;;GAIG;AACH,MAAM,WAAW,sBAAsB;IACrC;;;OAGG;IACH,QAAQ,CAAC,YAAY,EAAE,kBAAkB,CAAA;IACzC,+EAA+E;IAC/E,QAAQ,CAAC,eAAe,EAAE,4BAA4B,CAAA;CACvD;AAED;;;;;;GAMG;AACH,wBAAsB,8BAA8B,CAClD,EAAE,EAAE,IAAI,CAAC,YAAY,EAAE,kBAAkB,GAAG,iBAAiB,CAAC,GAC5D,OAAO,CAAC,IAAI,CAAC,YAAY,EAAE,IAAI,CAAC,CAAC,EACnC,KAAK,GAAE,YAAiB,GACvB,OAAO,CAAC,sBAAsB,CAAC,CAwIjC;AAED,wBAA8B,0BAA0B,CACtD,EAAE,EAAE,YAAY,GACf,OAAO,CAAC,IAAI,CAAC,CAEf"}