@goodandready/dsh-subscriptions 0.1.0 → 0.1.1

package/README.md

@@ -59,7 +59,7 @@ Settings GET never returns access or refresh tokens — only
 | `codex` | ChatGPT / Codex | Vendor-public Codex CLI client id |
 | `claude` | Claude Pro/Max | Vendor-public Claude Code client id |
 | `grok` | xAI / SuperGrok | Vendor-public Grok CLI client id |
-| `antigravity` | Google Antigravity | Vendor-public Antigravity client id |
+| `antigravity` | Google Antigravity | Your OAuth client id + secret in Config |
 
 Override `codexClientId`, `claudeClientId`, and the other empty Config fields
 if you register your own OAuth app.
@@ -67,16 +67,16 @@ if you register your own OAuth app.
 Live requests use the vendor subscription surfaces, not API-key hosts:
 Codex `chatgpt.com/backend-api/codex/responses`, Claude Messages with the
 OAuth beta header, Grok `cli-chat-proxy.grok.com` with CLI identity headers,
-and Gemini/Antigravity Cloud Code Assist (`loadCodeAssist` then
+and Antigravity Cloud Code Assist (`loadCodeAssist` then
 `streamGenerateContent`). Usage endpoints, when they answer, feed the 100%
 skip. If a live model list fails, the built-in catalog is used.
- Installed-app Google client secrets are
-vendor-published (not user secrets); override `geminiClientSecret` /
-`antigravityClientSecret` when you use your own client.
+Antigravity uses a confidential Google OAuth client: set `antigravityClientId`
+and `antigravityClientSecret` in plugin Config (Settings) — nothing is baked
+into the repository.
 
 Default model catalogs are built-in lists you can replace with
-`codexModels`, `claudeModels`, `grokModels`, `geminiModels`,
-`antigravityModels` in the plugin Config.
+`codexModels`, `claudeModels`, `grokModels`, `antigravityModels`
+in the plugin Config.
 
 ## Rotation
 

package/lib/vendors/antigravity.js

@@ -3,7 +3,6 @@ import { buildAuthorizeUrl } from '../oauth.js'
 import { googleContents } from '../messages.js'
 import { formTokenRequest, googleStream, throwHttpError, tokenBlobFromOAuth } from '../wire.js'
 import { emailFromToken } from '../jwt.js'
-import { builtinAntigravityOAuth } from './antigravity-oauth.js'
 import {
   CODE_ASSIST_STREAM,
   antigravityMetadata,
@@ -32,11 +31,10 @@ export function providerInfo() {
 }
 
 export function defaults() {
-  const builtin = builtinAntigravityOAuth()
   return {
-    clientId: builtin.clientId,
-    clientSecret: builtin.clientSecret,
-    redirectUri: builtin.redirectUri,
+    clientId: '',
+    clientSecret: '',
+    redirectUri: 'https://antigravity.google/oauth-callback',
     models: ['gemini-3.5-flash-low', 'gemini-3-flash', 'gemini-2.5-flash'],
   }
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@goodandready/dsh-subscriptions",
-  "version": "0.1.0",
+  "version": "0.1.1",
   "description": "Use ChatGPT Codex, Claude, Grok, and Antigravity subscriptions as DeepSeek Harness LLM providers via OAuth.",
   "license": "MIT",
   "type": "module",

package/lib/vendors/antigravity-oauth.js

@@ -1,10 +0,0 @@
-export function builtinAntigravityOAuth() {
-  // Public Antigravity IDE OAuth app (same credentials as desktop IDE).
-  const clientId = String.fromCharCode(49,48,55,49,48,48,54,48,54,48,53,57,49,45,116,109,104,115,115,105,110,50,104,50,49,108,99,114,101,50,51,53,118,116,111,108,111,106,104,52,103,52,48,51,101,112,46,97,112,112,115,46,103,111,111,103,108,101,117,115,101,114,99,111,110,116,101,110,116,46,99,111,109)
-  const clientSecret = String.fromCharCode(71,79,67,83,80,88,45,75,53,56,70,87,82,52,56,54,76,100,76,74,49,109,76,66,56,115,88,67,52,122,54,113,68,65,102)
-  return {
-    clientId,
-    clientSecret,
-    redirectUri: 'https://antigravity.google/oauth-callback',
-  }
-}