@hashimkarim/usagestat-linux-x64-gnu 2.0.0-alpha.1 → 2.0.0-alpha.4

package/plugins/aixy/plugin.js

@@ -0,0 +1,261 @@
+// Generated by tools/vendor-codexbar-providers.cjs; see LICENSE.
+globalThis.__usagestat_bundled_options = {"labels":["Budget","Secondary budget","Additional"],"defaults":{"AIXY_BASE_URL":"https://api.aixy-gateway.com"},"autoMode":"api"};
+function _optionalChain(ops) {
+  let lastAccessLHS = undefined;
+  let value = ops[0];
+  let i = 1;
+  while (i < ops.length) {
+    const op = ops[i];
+    const fn = ops[i + 1];
+    i += 2;
+    if ((op === "optionalAccess" || op === "optionalCall") && value == null) {
+      return undefined;
+    }
+    if (op === "access" || op === "optionalAccess") {
+      lastAccessLHS = value;
+      value = fn(value);
+    } else if (op === "call" || op === "optionalCall") {
+      value = fn((...args) => value.call(lastAccessLHS, ...args));
+      lastAccessLHS = undefined;
+    }
+  }
+  return value;
+}
+defineProvider({
+  id: "aixy",
+  name: "Aixy",
+  endpoints: [{ setting: "AIXY_BASE_URL", policy: "https-or-private-network-http" }],
+  auth: { type: "bearer", secret: "AIXY_API_KEY" },
+  settings: [
+    { key: "AIXY_API_KEY", title: "API key", type: "secure" },
+    { key: "AIXY_BASE_URL", title: "Base URL", type: "plain" },
+  ],
+  capabilities: ["http-status"],
+  async fetchUsage(ctx) {
+    const fail = (message) => {
+      throw ctx.fail.parseFailure(`Aixy: ${message}`);
+    };
+    const object = (value) => {
+      if (!value || typeof value !== "object" || Array.isArray(value)) return fail("expected an object");
+      return value;
+    };
+    const text = (value) => {
+      if (typeof value !== "string" || !value.trim()) return fail("invalid text");
+      return value.trim();
+    };
+    const bounded = (value) => Array.from(value).slice(0, 120).join("");
+    const number = (value) => {
+      if (value == null) return undefined;
+      if (typeof value === "string" && /^\d+(?:\.\d+)?$/u.test(value)) value = Number(value);
+      if (typeof value !== "number" || !Number.isFinite(value) || value < 0) return fail("invalid amount");
+      return value;
+    };
+    const count = (value) => {
+      const parsed = number(value);
+      if (parsed === undefined || !Number.isSafeInteger(parsed)) return fail("invalid count");
+      return parsed;
+    };
+    const date = (value) => {
+      if (value == null) return undefined;
+      let parsed;
+      try {
+        parsed = ctx.date.iso(text(value));
+      } catch (error) {
+        void error;
+        return fail("invalid date");
+      }
+      if (!Number.isFinite(parsed.getTime())) return fail("invalid date");
+      return parsed;
+    };
+    const base = (ctx.settings.get("AIXY_BASE_URL") || "https://api.aixy-gateway.com").replace(/\/+$/u, "");
+    if (/[?#]/u.test(base)) throw ctx.fail.apiFailure("Aixy Base URL must not contain a query or fragment.");
+    const endpoint = `${base.replace(/\/v1$/u, "")}/v1/usage`;
+    const response = await ctx.http.get(endpoint);
+    const message = `Aixy usage request failed (HTTP ${response.status}).`;
+    if (response.status === 401)
+      throw ctx.fail.authenticationExpired("Aixy rejected the API key. Check its expiry or revocation.");
+    if (response.status === 403) throw ctx.fail.permissionDenied("Aixy denied access to this key's usage.");
+    if (response.status === 404)
+      throw ctx.fail.apiFailure(
+        "This Aixy installation does not provide the usage endpoint. Update the gateway or check its Base URL.",
+      );
+    if (response.status === 429) throw ctx.fail.rateLimited(message);
+    if (response.status >= 500) throw ctx.fail.providerUnavailable(message);
+    if (response.status < 200 || response.status >= 300) throw ctx.fail.apiFailure(message);
+    let decoded;
+    try {
+      decoded = JSON.parse(response.bodyText);
+    } catch (error) {
+      void error;
+      return fail("invalid usage JSON");
+    }
+    const root = object(decoded);
+    if (root.object !== "key.usage" || root.currency !== "USD") return fail("unsupported usage contract");
+    const asOf = date(root.as_of);
+    if (!asOf) return fail("missing observation time");
+    const key = object(root.key);
+    const keyID = text(key.id);
+    if (!Array.isArray(root.budgets)) return fail("invalid budgets");
+    const labels = {
+      organization: "Organization",
+      project: "Project",
+      team: "Team",
+      user: "User",
+      api_key: "Key",
+      daily: "Daily",
+      weekly: "Weekly",
+      monthly: "Monthly",
+      lifetime: "Lifetime",
+    };
+    if (root.budgets.length > 64) return fail("too many budgets");
+    const ids = new Set();
+    const budgets = root.budgets
+      .map((raw) => {
+        const budget = object(raw),
+          id = text(budget.id);
+        if (ids.has(id)) return fail("duplicate budget");
+        ids.add(id);
+        const scope = text(budget.scope),
+          interval = text(budget.interval);
+        if (
+          !["organization", "project", "team", "user", "api_key"].includes(scope) ||
+          !["daily", "weekly", "monthly", "lifetime"].includes(interval)
+        )
+          return fail("invalid budget scope or interval");
+        if (budget.enforcement !== "hard" && budget.enforcement !== "monitor") return fail("invalid enforcement");
+        if (typeof budget.shared !== "boolean") return fail("invalid shared scope");
+        const limit = number(budget.limit_usd);
+        if (limit === undefined || limit <= 0) return fail("invalid budget limit");
+        if (
+          !Array.isArray(budget.applies_to) ||
+          !budget.applies_to.length ||
+          budget.applies_to.some(
+            (item) => object(item).api_key_id !== keyID || object(item).project_id !== key.project_id,
+          )
+        )
+          return fail("budget belongs to another key");
+        const availability = object(budget.availability);
+        const hard = budget.enforcement === "hard";
+        if (!["available", "unavailable", "not_enforced"].includes(text(availability.status)))
+          return fail("invalid availability");
+        if (!["available", "unavailable"].includes(text(budget.spend_status))) return fail("invalid spend status");
+        const known = hard ? availability.status === "available" : budget.spend_status === "available";
+        const spent = number(hard ? availability.spent_usd : budget.spend_usd);
+        const reserved = hard ? number(availability.reserved_usd) : 0;
+        const remaining = number(hard ? availability.remaining_usd : budget.remaining_usd);
+        if (known && (spent === undefined || reserved === undefined || remaining === undefined))
+          return fail("incomplete budget balance");
+        const used = known ? spent + reserved : undefined;
+        if (used !== undefined && !Number.isFinite(used)) return fail("budget amount overflow");
+        const startsAt = date(budget.starts_at),
+          resetsAt = date(budget.resets_at);
+        if (startsAt && resetsAt && resetsAt <= startsAt) return fail("invalid budget period");
+        const minutes = startsAt && resetsAt ? (resetsAt.getTime() - startsAt.getTime()) / 60000 : undefined;
+        const title = bounded(
+          `${labels[scope]} · ${labels[interval]} · ${budget.shared ? "Shared" : "Personal"} · ${hard ? "Hard" : "Monitor"}`,
+        );
+        return {
+          id: `aixy-${id}`,
+          title,
+          known,
+          hard,
+          spent,
+          reserved,
+          remaining,
+          limit,
+          used,
+          window: {
+            usedPercent: known ? ctx.pct(used, limit) : 0,
+            windowMinutes: minutes !== undefined && Number.isSafeInteger(minutes) && minutes > 0 ? minutes : undefined,
+            resetsAt,
+            resetDescription: `${title} · ${known ? `${ctx.format.usd(remaining)} remaining` : "Unavailable"}`,
+          },
+        };
+      })
+      .sort(
+        (a, b) =>
+          Number(b.hard) - Number(a.hard) ||
+          Number(b.known) - Number(a.known) ||
+          b.window.usedPercent - a.window.usedPercent ||
+          (a.id < b.id ? -1 : a.id > b.id ? 1 : 0),
+      );
+    const known = budgets.filter((budget) => budget.known);
+    const selected = known.slice(0, 2);
+    const details = [
+      {
+        title: "Aixy key",
+        rows: [
+          { label: "Key", value: bounded(key.name == null ? keyID : text(key.name)) },
+          {
+            label: "Project",
+            value: bounded(key.project_name == null ? text(key.project_id) : text(key.project_name)),
+          },
+          { label: "Observed", value: asOf.toISOString() },
+        ],
+      },
+    ];
+    for (let offset = 0; offset < budgets.length; offset += 24)
+      details.push({
+        title: "Applicable budgets",
+        rows: budgets.slice(offset, offset + 24).map((budget) => ({
+          label: budget.title,
+          value: budget.known
+            ? `${ctx.format.usd(budget.remaining)} / ${ctx.format.usd(budget.limit)} remaining`
+            : "Unavailable",
+          secondaryValue: budget.known
+            ? `${ctx.format.usd(budget.spent)} spent${budget.hard ? ` · ${ctx.format.usd(budget.reserved)} reserved` : ""}`
+            : undefined,
+          progress: budget.known ? budget.window.usedPercent / 100 : undefined,
+          usageValue: budget.used,
+        })),
+      });
+    let cost;
+    let confidence = "unknown";
+    if (root.usage != null) {
+      const usage = object(root.usage);
+      if (usage.window !== "7d") return fail("unsupported reporting period");
+      const requests = count(usage.requests),
+        tokens = count(usage.total_tokens);
+      const attributed = count(usage.attributed_requests),
+        partial = count(usage.partial_requests);
+      const spend = number(usage.spend_usd);
+      if (attributed > requests || partial > attributed || (spend !== undefined && spend > 0 && attributed === 0))
+        return fail("invalid attribution coverage");
+      if (spend !== undefined) {
+        cost = { used: spend, currency: "USD", period: "Last 7 days · attributed" };
+        confidence = "estimated";
+      }
+      details.push({
+        title: "Last 7 days · this key",
+        rows: [
+          { label: "Requests", value: ctx.format.number(requests) },
+          { label: "Tokens", value: ctx.format.number(tokens) },
+          { label: "Attributed spend", value: spend === undefined ? "Unavailable" : ctx.format.usd(spend) },
+          {
+            label: "Cost coverage",
+            value: `${attributed} / ${requests} requests`,
+            secondaryValue: `${partial} partial`,
+          },
+        ],
+      });
+    } else {
+      details.push({ title: "Last 7 days · this key", rows: [{ label: "Usage", value: "Unavailable" }] });
+    }
+    return {
+      primary: _optionalChain([selected, "access", (_) => _[0], "optionalAccess", (_2) => _2.window]),
+      secondary: _optionalChain([selected, "access", (_3) => _3[1], "optionalAccess", (_4) => _4.window]),
+      extraWindows: budgets
+        .filter((budget) => !selected.includes(budget))
+        .map((budget) => ({
+          id: budget.id,
+          title: budget.title,
+          usageKnown: budget.known,
+          window: budget.window,
+        })),
+      cost,
+      details,
+      dataConfidence: confidence,
+      identity: { accountID: keyID, loginMethod: "API key" },
+    };
+  },
+});

package/plugins/aixy/plugin.json

@@ -0,0 +1,24 @@
+{
+  "schemaVersion": 1,
+  "id": "aixy",
+  "name": "Aixy",
+  "version": "0.1.0",
+  "entry": "plugin.js",
+  "enabledByDefault": false,
+  "supportedModes": [
+    "api"
+  ],
+  "autoMode": "api",
+  "usageDashboardUrl": "https://dash.aixy-gateway.com",
+  "envVars": [
+    "AIXY_API_KEY",
+    "AIXY_BASE_URL"
+  ],
+  "upstream": {
+    "repository": "https://github.com/steipete/CodexBar",
+    "revision": "78ba5a1e65e6859da59a21b799df95ab91bc0b89",
+    "path": "Sources/CodexBarCore/Resources/Plugins/aixy.js",
+    "sha256": "975d98525503e286f9425c2a1d64fe00da8e2fdc0b00890e15c2cbcb9a37c125",
+    "license": "MIT"
+  }
+}

package/plugins/antigravity/plugin.js

@@ -155,6 +155,13 @@
       ctx.host.log.warn("refresh skipped: no refresh token")
       return null
     }
+    var retryPath = ctx.app.pluginDataDir + "/oauth-retry-" + ctx.host.crypto.sha256Hex(refreshTokenValue) + ".json"
+    try {
+      if (ctx.host.fs.exists(retryPath)) {
+        var rejection = ctx.util.tryParseJson(ctx.host.fs.readText(retryPath))
+        if (rejection && rejection.retryAfterMs > Date.now()) return null
+      }
+    } catch (_) { /* A missing/corrupt cooldown must not prevent login. */ }
     ctx.host.log.info("attempting Google OAuth token refresh")
     try {
       var resp = ctx.host.http.request({
@@ -169,6 +176,12 @@
         timeoutMs: 15000,
       })
       if (resp.status < 200 || resp.status >= 300) {
+        var failure = ctx.util.tryParseJson(resp.bodyText)
+        if (resp.status === 400 && failure && failure.error === "invalid_grant") {
+          // A revoked token will not recover on the next dashboard poll. Store
+          // only a deadline under its hash; a new login bypasses this cooldown.
+          try { ctx.host.fs.writeText(retryPath, JSON.stringify({ retryAfterMs: Date.now() + 60 * 60 * 1000 })) } catch (_) {}
+        }
         ctx.host.log.warn("Google OAuth refresh returned status: " + resp.status)
         return null
       }
@@ -188,22 +201,34 @@
 
   // --- Token cache ---
 
+  function tokenCachePath(ctx, profileKey) {
+    // Include another hash so the filename remains bounded even on older hosts
+    // or test callers with an opaque profile key.
+    return ctx.app.pluginDataDir + "/auth-" + ctx.host.crypto.sha256Hex(profileKey) + ".json"
+  }
+
   function loadCachedToken(ctx, profileKey) {
-    var path = ctx.app.pluginDataDir + "/auth.json"
-    try {
-      if (!ctx.host.fs.exists(path)) return null
-      var data = ctx.util.tryParseJson(ctx.host.fs.readText(path))
-      if (!data || !profileKey || data.profileKey !== profileKey || !data.accessToken || !data.expiresAtMs) return null
-      if (data.expiresAtMs <= Date.now()) return null
-      return data.accessToken
-    } catch (e) {
-      ctx.host.log.warn("failed to read cached token: " + String(e))
-      return null
+    if (!profileKey) return null
+    // Read the old single-slot cache for compatibility, but write only the
+    // per-profile file so the IDE and agy cannot evict each other's token.
+    var paths = [tokenCachePath(ctx, profileKey), ctx.app.pluginDataDir + "/auth.json"]
+    for (var i = 0; i < paths.length; i++) {
+      try {
+        if (!ctx.host.fs.exists(paths[i])) continue
+        var data = ctx.util.tryParseJson(ctx.host.fs.readText(paths[i]))
+        if (!data || data.profileKey !== profileKey || !data.accessToken || !data.expiresAtMs) continue
+        if (data.expiresAtMs <= Date.now()) continue
+        return data.accessToken
+      } catch (e) {
+        ctx.host.log.warn("failed to read cached token: " + String(e))
+      }
     }
+    return null
   }
 
   function cacheToken(ctx, accessToken, expiresInSeconds, profileKey) {
-    var path = ctx.app.pluginDataDir + "/auth.json"
+    if (!profileKey) return
+    var path = tokenCachePath(ctx, profileKey)
     try {
       ctx.host.fs.writeText(path, JSON.stringify({
         accessToken: accessToken,
@@ -238,58 +263,125 @@
     return text || null
   }
 
-  function extractTokenFromObject(obj) {
-    if (!obj || typeof obj !== "object") return null
+  // agy stores {"token":{"access_token","refresh_token","expiry"},"id_token":...}.
+  // Search the whole payload for a bearer token before falling back to an ID
+  // token: Cloud Code rejects ID tokens, so a top-level id_token must not win.
+  var ACCESS_KEYS = ["access_token", "accessToken", "bearerToken", "auth_token", "authToken"]
+  var NESTED_KEYS = ["token", "tokens", "oauth", "oauth2", "credentials", "auth"]
 
-    var directKeys = [
-      "access_token",
-      "accessToken",
-      "token",
-      "id_token",
-      "idToken",
-      "bearerToken",
-      "auth_token",
-      "authToken",
-    ]
-    for (var i = 0; i < directKeys.length; i++) {
-      var value = obj[directKeys[i]]
+  function findStringDeep(obj, keys, depth) {
+    if (!obj || typeof obj !== "object" || depth > 4) return null
+    for (var i = 0; i < keys.length; i++) {
+      var value = obj[keys[i]]
       if (typeof value === "string" && value.trim()) return value.trim()
     }
-
-    var nestedKeys = ["token", "tokens", "oauth", "oauth2", "credentials", "auth"]
-    for (var j = 0; j < nestedKeys.length; j++) {
-      var nested = extractTokenFromObject(obj[nestedKeys[j]])
+    for (var j = 0; j < NESTED_KEYS.length; j++) {
+      var nested = findStringDeep(obj[NESTED_KEYS[j]], keys, depth + 1)
       if (nested) return nested
     }
+    return null
+  }
+
+  function extractTokenFromObject(obj) {
+    if (!obj || typeof obj !== "object") return null
+    return findStringDeep(obj, ACCESS_KEYS, 0) || findStringDeep(obj, ["token"], 0) ||
+      findStringDeep(obj, ["id_token", "idToken"], 0)
+  }
 
+  function parseExpiryMs(value) {
+    if (typeof value === "number" && isFinite(value)) return value < 1e12 ? value * 1000 : value
+    if (typeof value === "string" && value.trim()) {
+      var ms = Date.parse(value.trim())
+      return isFinite(ms) ? ms : null
+    }
     return null
   }
 
-  function extractAgyAccessToken(ctx, raw) {
+  // Returns {accessToken, refreshToken, expiryMs} from agy's keyring payload.
+  function parseAgyCredentials(ctx, raw) {
     var text = unwrapAgyKeychainText(ctx, raw)
     if (!text) return null
-
     var parsed = ctx.util.tryParseJson(text)
-    if (typeof parsed === "string" && parsed.trim()) return parsed.trim()
-    if (parsed) return extractTokenFromObject(parsed)
+    if (typeof parsed === "string" && parsed.trim()) return { accessToken: parsed.trim(), refreshToken: null, expiryMs: null }
+    if (parsed && typeof parsed === "object") {
+      var expiry = findStringDeep(parsed, ["expiry", "expires_at", "expiresAt"], 0)
+      var numericExpiry = parsed.token && typeof parsed.token === "object" ? parsed.token.expiry_date : null
+      return {
+        accessToken: extractTokenFromObject(parsed),
+        refreshToken: findStringDeep(parsed, ["refresh_token", "refreshToken"], 0),
+        expiryMs: parseExpiryMs(expiry) || parseExpiryMs(numericExpiry),
+      }
+    }
+    if (text.indexOf("Bearer ") === 0) return { accessToken: text.slice("Bearer ".length).trim() || null, refreshToken: null, expiryMs: null }
+    return { accessToken: text, refreshToken: null, expiryMs: null }
+  }
 
-    if (text.indexOf("Bearer ") === 0) return text.slice("Bearer ".length).trim() || null
-    return text
+  function extractAgyAccessToken(ctx, raw) {
+    var creds = parseAgyCredentials(ctx, raw)
+    return creds ? creds.accessToken : null
   }
 
-  function loadAgyKeychainToken(ctx) {
+  function loadAgyCredentials(ctx) {
     if (!ctx.host.keychain || typeof ctx.host.keychain.readGenericPassword !== "function") {
       return null
     }
     try {
-      var raw = ctx.host.keychain.readGenericPassword(AGY_KEYCHAIN_SERVICE, AGY_KEYCHAIN_ACCOUNT)
-      return extractAgyAccessToken(ctx, raw)
+      return parseAgyCredentials(ctx, ctx.host.keychain.readGenericPassword(AGY_KEYCHAIN_SERVICE, AGY_KEYCHAIN_ACCOUNT))
     } catch (e) {
       ctx.host.log.info("agy keychain read failed: " + String(e))
       return null
     }
   }
 
+  function loadAgyKeychainToken(ctx) {
+    var creds = loadAgyCredentials(ctx)
+    return creds ? creds.accessToken : null
+  }
+
+  // Probe Cloud Code with agy's credentials, refreshing an expired or rejected
+  // access token with agy's refresh token (same Google OAuth client).
+  function probeAgyCredentials(ctx) {
+    var creds = loadAgyCredentials(ctx)
+    if (!creds || (!creds.accessToken && !creds.refreshToken)) return null
+    var profileKey = creds.refreshToken ? ctx.host.crypto.sha256Hex("agy\n" + creds.refreshToken) : null
+    var candidates = []
+    var cached = loadCachedToken(ctx, profileKey)
+    if (cached) candidates.push(cached)
+    var expired = creds.expiryMs != null && creds.expiryMs <= Date.now() + 60000
+    if (creds.accessToken && !expired && candidates.indexOf(creds.accessToken) === -1) candidates.push(creds.accessToken)
+    var last = null
+    for (var i = 0; i < candidates.length; i++) {
+      var result = probeAgyToken(ctx, candidates[i])
+      if (result && !result._authFailed) return result
+      if (result) last = result
+    }
+    if (creds.refreshToken && (last || !candidates.length)) {
+      var refreshed = refreshAccessToken(ctx, creds.refreshToken, profileKey)
+      if (refreshed) {
+        var refreshedResult = probeAgyToken(ctx, refreshed)
+        if (refreshedResult) return refreshedResult
+      }
+    }
+    return last
+  }
+
+  // Consumer agy accounts have no Cloud project, so retrieveUserQuota answers
+  // 403 "no valid license" even with a valid token. fetchAvailableModels still
+  // reports per-model quota, so use it before treating the token as rejected.
+  function probeAgyToken(ctx, token) {
+    var quota = probeAgyCloudCode(ctx, token)
+    if (quota && !quota._authFailed) return quota
+    var models = probeCloudCode(ctx, token)
+    if (models && !models._authFailed) {
+      var lines = buildModelLines(ctx, parseCloudCodeModels(models))
+      if (lines.length > 0) return { plan: null, lines: lines }
+      return null
+    }
+    // A quota 403 can mean "no license", not an invalid bearer. If the model
+    // endpoint is temporarily unavailable, don't turn that into a token refresh.
+    return models
+  }
+
   // --- LS discovery ---
 
   function discoverNative(ctx, options) {
@@ -682,7 +774,7 @@
 
     var profileKey = dbTokenCandidates.length ? dbTokenCandidates[0].profileKey : null
     var cached = loadCachedToken(ctx, profileKey)
-    if (cached && tokens.indexOf(cached) === -1) tokens.push(cached)
+    if (cached && tokens.indexOf(cached) === -1) tokens.unshift(cached)
 
     var ccData = null
     var sawAuthFailure = false
@@ -717,13 +809,11 @@
       }
     }
 
-    if (!dbTokenCandidates.length && (!ccData || ccData._authFailed)) {
-      var agyToken = loadAgyKeychainToken(ctx)
-      if (agyToken) {
-        var agyResult = probeAgyCloudCode(ctx, agyToken)
-        if (agyResult && !agyResult._authFailed) return agyResult
-        if (agyResult && agyResult._authFailed) ccData = agyResult
-      }
+    // agy's own login also covers users whose IDE database is stale or absent.
+    if (!explicitDb && (!ccData || ccData._authFailed)) {
+      var agyResult = probeAgyCredentials(ctx)
+      if (agyResult && !agyResult._authFailed) return agyResult
+      if (agyResult && agyResult._authFailed) ccData = agyResult
     }
 
     if (ccData && !ccData._authFailed) {

package/plugins/antigravity-cli/icon-color.svg

@@ -0,0 +1 @@
+<svg height="1em" style="flex:none;line-height:1" viewBox="0 0 24 24" width="1em" xmlns="http://www.w3.org/2000/svg"><title>Antigravity</title><mask height="23" id="lobe-icons-antigravity-0-_R_0_" maskUnits="userSpaceOnUse" width="24" x="0" y="1"><path d="M21.751 22.607c1.34 1.005 3.35.335 1.508-1.508C17.73 15.74 18.904 1 12.037 1 5.17 1 6.342 15.74.815 21.1c-2.01 2.009.167 2.511 1.507 1.506 5.192-3.517 4.857-9.714 9.715-9.714 4.857 0 4.522 6.197 9.714 9.715z" fill="#fff"></path></mask><g mask="url(#lobe-icons-antigravity-0-_R_0_)"><g filter="url(#lobe-icons-antigravity-1-_R_0_)"><path d="M-1.018-3.992c-.408 3.591 2.686 6.89 6.91 7.37 4.225.48 7.98-2.043 8.387-5.633.408-3.59-2.686-6.89-6.91-7.37-4.225-.479-7.98 2.043-8.387 5.633z" fill="#FFE432"></path></g><g filter="url(#lobe-icons-antigravity-2-_R_0_)"><path d="M15.269 7.747c1.058 4.557 5.691 7.374 10.348 6.293 4.657-1.082 7.575-5.653 6.516-10.21-1.058-4.556-5.691-7.374-10.348-6.292-4.657 1.082-7.575 5.653-6.516 10.21z" fill="#FC413D"></path></g><g filter="url(#lobe-icons-antigravity-3-_R_0_)"><path d="M-12.443 10.804c1.338 4.703 7.36 7.11 13.453 5.378 6.092-1.733 9.947-6.95 8.61-11.652C8.282-.173 2.26-2.58-3.833-.848-9.925.884-13.78 6.1-12.443 10.804z" fill="#00B95C"></path></g><g filter="url(#lobe-icons-antigravity-4-_R_0_)"><path d="M-12.443 10.804c1.338 4.703 7.36 7.11 13.453 5.378 6.092-1.733 9.947-6.95 8.61-11.652C8.282-.173 2.26-2.58-3.833-.848-9.925.884-13.78 6.1-12.443 10.804z" fill="#00B95C"></path></g><g filter="url(#lobe-icons-antigravity-5-_R_0_)"><path d="M-7.608 14.703c3.352 3.424 9.126 3.208 12.896-.483 3.77-3.69 4.108-9.459.756-12.883C2.69-2.087-3.083-1.871-6.853 1.82c-3.77 3.69-4.108 9.458-.755 12.883z" fill="#00B95C"></path></g><g filter="url(#lobe-icons-antigravity-6-_R_0_)"><path d="M9.932 27.617c1.04 4.482 5.384 7.303 9.7 6.3 4.316-1.002 6.971-5.448 5.93-9.93-1.04-4.483-5.384-7.304-9.7-6.301-4.316 1.002-6.971 5.448-5.93 9.93z" fill="#3186FF"></path></g><g filter="url(#lobe-icons-antigravity-7-_R_0_)"><path d="M2.572-8.185C.392-3.329 2.778 2.472 7.9 4.771c5.122 2.3 11.042.227 13.222-4.63 2.18-4.855-.205-10.656-5.327-12.955-5.122-2.3-11.042-.227-13.222 4.63z" fill="#FBBC04"></path></g><g filter="url(#lobe-icons-antigravity-8-_R_0_)"><path d="M-3.267 38.686c-5.277-2.072 3.742-19.117 5.984-24.83 2.243-5.712 8.34-8.664 13.616-6.592 5.278 2.071 11.533 13.482 9.29 19.195-2.242 5.713-23.613 14.298-28.89 12.227z" fill="#3186FF"></path></g><g filter="url(#lobe-icons-antigravity-9-_R_0_)"><path d="M28.71 17.471c-1.413 1.649-5.1.808-8.236-1.878-3.135-2.687-4.531-6.201-3.118-7.85 1.412-1.649 5.1-.808 8.235 1.878s4.532 6.2 3.119 7.85z" fill="#749BFF"></path></g><g filter="url(#lobe-icons-antigravity-10-_R_0_)"><path d="M18.163 9.077c5.81 3.93 12.502 4.19 14.946.577 2.443-3.612-.287-9.727-6.098-13.658-5.81-3.931-12.502-4.19-14.946-.577-2.443 3.612.287 9.727 6.098 13.658z" fill="#FC413D"></path></g><g filter="url(#lobe-icons-antigravity-11-_R_0_)"><path d="M-.915 2.684c-1.44 3.473-.97 6.967 1.05 7.804 2.02.837 4.824-1.3 6.264-4.772 1.44-3.473.97-6.967-1.05-7.804-2.02-.837-4.824 1.3-6.264 4.772z" fill="#FFEE48"></path></g></g><defs><filter color-interpolation-filters="sRGB" filterUnits="userSpaceOnUse" height="17.587" id="lobe-icons-antigravity-1-_R_0_" width="19.838" x="-3.288" y="-11.917"><feFlood flood-opacity="0" result="BackgroundImageFix"></feFlood><feBlend in="SourceGraphic" in2="BackgroundImageFix" result="shape"></feBlend><feGaussianBlur result="effect1_foregroundBlur_977_115" stdDeviation="1.117"></feGaussianBlur></filter><filter color-interpolation-filters="sRGB" filterUnits="userSpaceOnUse" height="38.565" id="lobe-icons-antigravity-2-_R_0_" width="38.9" x="4.251" y="-13.493"><feFlood flood-opacity="0" result="BackgroundImageFix"></feFlood><feBlend in="SourceGraphic" in2="BackgroundImageFix" result="shape"></feBlend><feGaussianBlur result="effect1_foregroundBlur_977_115" stdDeviation="5.4"></feGaussianBlur></filter><filter color-interpolation-filters="sRGB" filterUnits="userSpaceOnUse" height="36.517" id="lobe-icons-antigravity-3-_R_0_" width="40.955" x="-21.889" y="-10.592"><feFlood flood-opacity="0" result="BackgroundImageFix"></feFlood><feBlend in="SourceGraphic" in2="BackgroundImageFix" result="shape"></feBlend><feGaussianBlur result="effect1_foregroundBlur_977_115" stdDeviation="4.591"></feGaussianBlur></filter><filter color-interpolation-filters="sRGB" filterUnits="userSpaceOnUse" height="36.517" id="lobe-icons-antigravity-4-_R_0_" width="40.955" x="-21.889" y="-10.592"><feFlood flood-opacity="0" result="BackgroundImageFix"></feFlood><feBlend in="SourceGraphic" in2="BackgroundImageFix" result="shape"></feBlend><feGaussianBlur result="effect1_foregroundBlur_977_115" stdDeviation="4.591"></feGaussianBlur></filter><filter color-interpolation-filters="sRGB" filterUnits="userSpaceOnUse" height="36.595" id="lobe-icons-antigravity-5-_R_0_" width="36.632" x="-19.099" y="-10.278"><feFlood flood-opacity="0" result="BackgroundImageFix"></feFlood><feBlend in="SourceGraphic" in2="BackgroundImageFix" result="shape"></feBlend><feGaussianBlur result="effect1_foregroundBlur_977_115" stdDeviation="4.591"></feGaussianBlur></filter><filter color-interpolation-filters="sRGB" filterUnits="userSpaceOnUse" height="34.087" id="lobe-icons-antigravity-6-_R_0_" width="33.533" x=".981" y="8.758"><feFlood flood-opacity="0" result="BackgroundImageFix"></feFlood><feBlend in="SourceGraphic" in2="BackgroundImageFix" result="shape"></feBlend><feGaussianBlur result="effect1_foregroundBlur_977_115" stdDeviation="4.363"></feGaussianBlur></filter><filter color-interpolation-filters="sRGB" filterUnits="userSpaceOnUse" height="35.276" id="lobe-icons-antigravity-7-_R_0_" width="35.978" x="-6.143" y="-21.659"><feFlood flood-opacity="0" result="BackgroundImageFix"></feFlood><feBlend in="SourceGraphic" in2="BackgroundImageFix" result="shape"></feBlend><feGaussianBlur result="effect1_foregroundBlur_977_115" stdDeviation="3.954"></feGaussianBlur></filter><filter color-interpolation-filters="sRGB" filterUnits="userSpaceOnUse" height="46.523" id="lobe-icons-antigravity-8-_R_0_" width="45.114" x="-11.96" y="-.46"><feFlood flood-opacity="0" result="BackgroundImageFix"></feFlood><feBlend in="SourceGraphic" in2="BackgroundImageFix" result="shape"></feBlend><feGaussianBlur result="effect1_foregroundBlur_977_115" stdDeviation="3.531"></feGaussianBlur></filter><filter color-interpolation-filters="sRGB" filterUnits="userSpaceOnUse" height="24.054" id="lobe-icons-antigravity-9-_R_0_" width="25.094" x="10.485" y=".58"><feFlood flood-opacity="0" result="BackgroundImageFix"></feFlood><feBlend in="SourceGraphic" in2="BackgroundImageFix" result="shape"></feBlend><feGaussianBlur result="effect1_foregroundBlur_977_115" stdDeviation="3.159"></feGaussianBlur></filter><filter color-interpolation-filters="sRGB" filterUnits="userSpaceOnUse" height="30.007" id="lobe-icons-antigravity-10-_R_0_" width="33.508" x="5.833" y="-12.467"><feFlood flood-opacity="0" result="BackgroundImageFix"></feFlood><feBlend in="SourceGraphic" in2="BackgroundImageFix" result="shape"></feBlend><feGaussianBlur result="effect1_foregroundBlur_977_115" stdDeviation="2.669"></feGaussianBlur></filter><filter color-interpolation-filters="sRGB" filterUnits="userSpaceOnUse" height="26.151" id="lobe-icons-antigravity-11-_R_0_" width="22.194" x="-8.355" y="-8.876"><feFlood flood-opacity="0" result="BackgroundImageFix"></feFlood><feBlend in="SourceGraphic" in2="BackgroundImageFix" result="shape"></feBlend><feGaussianBlur result="effect1_foregroundBlur_977_115" stdDeviation="3.303"></feGaussianBlur></filter></defs></svg>

package/plugins/antigravity-cli/icon.svg

@@ -1,3 +1 @@
-<svg width="100" height="100" viewBox="0 0 100 100" fill="none" xmlns="http://www.w3.org/2000/svg">
-<path d="M85.2843 88.0301C90.1329 91.6664 97.4057 89.2422 90.7389 82.5755C70.7389 63.1816 74.9813 9.84827 50.1329 9.84827C25.2843 9.84827 29.5267 63.1816 9.52673 82.5755C2.25402 89.8483 10.1328 91.6664 14.9813 88.0301C33.7692 75.3028 32.5571 52.8786 50.1329 52.8786C67.7086 52.8786 66.4965 75.3028 85.2843 88.0301Z" fill="currentColor"/>
-</svg>
+<svg fill="currentColor" fill-rule="evenodd" height="1em" style="flex:none;line-height:1" viewBox="0 0 24 24" width="1em" xmlns="http://www.w3.org/2000/svg"><title>Antigravity</title><path d="M21.751 22.607c1.34 1.005 3.35.335 1.508-1.508C17.73 15.74 18.904 1 12.037 1 5.17 1 6.342 15.74.815 21.1c-2.01 2.009.167 2.511 1.507 1.506 5.192-3.517 4.857-9.714 9.715-9.714 4.857 0 4.522 6.197 9.714 9.715z"></path></svg>

package/plugins/antigravity-cli/plugin.js

@@ -67,27 +67,23 @@
   function extractTokenFromObject(obj) {
     if (!obj || typeof obj !== "object") return null
 
-    var directKeys = [
-      "access_token",
-      "accessToken",
-      "token",
-      "id_token",
-      "idToken",
-      "bearerToken",
-      "auth_token",
-      "authToken",
-    ]
-    for (var i = 0; i < directKeys.length; i += 1) {
-      var value = obj[directKeys[i]]
+    // Prefer a bearer token anywhere in the payload; an ID token is a last resort
+    // (agy stores {"token":{"access_token":...},"id_token":...}).
+    return findTokenDeep(obj, ["access_token", "accessToken", "bearerToken", "auth_token", "authToken"], 0) ||
+      findTokenDeep(obj, ["token"], 0) || findTokenDeep(obj, ["id_token", "idToken"], 0)
+  }
+
+  function findTokenDeep(obj, keys, depth) {
+    if (!obj || typeof obj !== "object" || depth > 4) return null
+    for (var i = 0; i < keys.length; i += 1) {
+      var value = obj[keys[i]]
       if (typeof value === "string" && value.trim()) return value.trim()
     }
-
     var nestedKeys = ["token", "tokens", "oauth", "oauth2", "credentials", "auth"]
     for (var j = 0; j < nestedKeys.length; j += 1) {
-      var nested = extractTokenFromObject(obj[nestedKeys[j]])
+      var nested = findTokenDeep(obj[nestedKeys[j]], keys, depth + 1)
       if (nested) return nested
     }
-
     return null
   }