@xiaoso/dsh-tool-plus 0.1.0-beta.3 → 0.1.0-beta.4

package/lib/gitlab-duo-workflow-BGAF6JDw.mjs

@@ -0,0 +1,91 @@
+import { installBunShim as __installBunShim } from "./bun-shim.mjs";
+__installBunShim();
+import { c as OAuthError } from "./error-Dd8DIqs-.mjs";
+import { t as OAuthCallbackFlow } from "./callback-server-CQ5Jo8F-.mjs";
+import { t as generatePKCE } from "./pkce-BlQikGPu.mjs";
+//#region node_modules/.pnpm/@oh-my-pi+pi-ai@17.3.5/node_modules/@oh-my-pi/pi-ai/src/registry/oauth/gitlab-duo-workflow.ts
+const GITLAB_COM_URL = "https://gitlab.com";
+const GITLAB_DUO_WORKFLOW_OAUTH_CLIENT_ID = "36f2a70cddeb5a0889d4fd8295c241b7e9848e89cf9e599d0eed2d8e5350fbf5";
+const GITLAB_DUO_WORKFLOW_OAUTH_REDIRECT_URI = "vscode://gitlab.gitlab-workflow/authentication";
+const OAUTH_SCOPES = ["api"];
+function mapTokenResponse(payload) {
+	if (!payload.access_token || !payload.refresh_token || typeof payload.expires_in !== "number") throw new OAuthError("GitLab Duo Workflow OAuth token response missing required fields", {
+		kind: "validation",
+		provider: "gitlab-duo-workflow"
+	});
+	const createdAtMs = typeof payload.created_at === "number" && Number.isFinite(payload.created_at) ? payload.created_at * 1e3 : Date.now();
+	return {
+		access: payload.access_token,
+		refresh: payload.refresh_token,
+		expires: createdAtMs + payload.expires_in * 1e3 - 3e5
+	};
+}
+var GitLabDuoWorkflowOAuthFlow = class extends OAuthCallbackFlow {
+	#pkce;
+	#fetch;
+	constructor(ctrl, pkce) {
+		super(ctrl, {
+			preferredPort: 0,
+			redirectUri: GITLAB_DUO_WORKFLOW_OAUTH_REDIRECT_URI
+		});
+		this.#pkce = pkce;
+		this.#fetch = ctrl.fetch ?? fetch;
+	}
+	async generateAuthUrl(state) {
+		const authParams = new URLSearchParams({
+			client_id: GITLAB_DUO_WORKFLOW_OAUTH_CLIENT_ID,
+			redirect_uri: GITLAB_DUO_WORKFLOW_OAUTH_REDIRECT_URI,
+			response_type: "code",
+			scope: OAUTH_SCOPES.join(" "),
+			code_challenge: this.#pkce.challenge,
+			code_challenge_method: "S256",
+			state
+		});
+		return {
+			url: `${GITLAB_COM_URL}/oauth/authorize?${authParams.toString()}`,
+			instructions: "Complete GitLab login in your browser. This uses GitLab's official VS Code OAuth application. If the redirect opens VS Code instead of returning to OMP, copy the full vscode://gitlab.gitlab-workflow/authentication?... callback URL from VS Code/browser and paste it back into OMP."
+		};
+	}
+	async exchangeToken(code) {
+		const response = await this.#fetch(`${GITLAB_COM_URL}/oauth/token`, {
+			method: "POST",
+			headers: { "Content-Type": "application/x-www-form-urlencoded" },
+			body: new URLSearchParams({
+				client_id: GITLAB_DUO_WORKFLOW_OAUTH_CLIENT_ID,
+				redirect_uri: GITLAB_DUO_WORKFLOW_OAUTH_REDIRECT_URI,
+				grant_type: "authorization_code",
+				code,
+				code_verifier: this.#pkce.verifier
+			}).toString()
+		});
+		if (!response.ok) throw new OAuthError(`GitLab Duo Workflow OAuth token exchange failed: ${response.status} ${await response.text()}`, {
+			kind: "token-exchange",
+			provider: "gitlab-duo-workflow",
+			status: response.status
+		});
+		return mapTokenResponse(await response.json());
+	}
+};
+async function loginGitLabDuoWorkflow(callbacks) {
+	return new GitLabDuoWorkflowOAuthFlow(callbacks, await generatePKCE()).login();
+}
+async function refreshGitLabDuoWorkflowToken(credentials, fetchImpl = fetch) {
+	const response = await fetchImpl(`${GITLAB_COM_URL}/oauth/token`, {
+		method: "POST",
+		headers: { "Content-Type": "application/x-www-form-urlencoded" },
+		body: new URLSearchParams({
+			client_id: GITLAB_DUO_WORKFLOW_OAUTH_CLIENT_ID,
+			redirect_uri: GITLAB_DUO_WORKFLOW_OAUTH_REDIRECT_URI,
+			grant_type: "refresh_token",
+			refresh_token: credentials.refresh
+		}).toString()
+	});
+	if (!response.ok) throw new OAuthError(`GitLab Duo Workflow OAuth refresh failed: ${response.status} ${await response.text()}`, {
+		kind: "token-refresh",
+		provider: "gitlab-duo-workflow",
+		status: response.status
+	});
+	return mapTokenResponse(await response.json());
+}
+//#endregion
+export { loginGitLabDuoWorkflow, refreshGitLabDuoWorkflowToken };

package/lib/gitlab-duo-workflow-D78tdn8E.mjs

@@ -0,0 +1,91 @@
+import { installBunShim as __installBunShim } from "./bun-shim.mjs";
+__installBunShim();
+import { c as OAuthError } from "./error-yCSG0mGC.mjs";
+import { t as OAuthCallbackFlow } from "./callback-server-DDSrZ6l_.mjs";
+import { t as generatePKCE } from "./pkce-BlQikGPu.mjs";
+//#region node_modules/.pnpm/@oh-my-pi+pi-ai@17.3.5/node_modules/@oh-my-pi/pi-ai/src/registry/oauth/gitlab-duo-workflow.ts
+const GITLAB_COM_URL = "https://gitlab.com";
+const GITLAB_DUO_WORKFLOW_OAUTH_CLIENT_ID = "36f2a70cddeb5a0889d4fd8295c241b7e9848e89cf9e599d0eed2d8e5350fbf5";
+const GITLAB_DUO_WORKFLOW_OAUTH_REDIRECT_URI = "vscode://gitlab.gitlab-workflow/authentication";
+const OAUTH_SCOPES = ["api"];
+function mapTokenResponse(payload) {
+	if (!payload.access_token || !payload.refresh_token || typeof payload.expires_in !== "number") throw new OAuthError("GitLab Duo Workflow OAuth token response missing required fields", {
+		kind: "validation",
+		provider: "gitlab-duo-workflow"
+	});
+	const createdAtMs = typeof payload.created_at === "number" && Number.isFinite(payload.created_at) ? payload.created_at * 1e3 : Date.now();
+	return {
+		access: payload.access_token,
+		refresh: payload.refresh_token,
+		expires: createdAtMs + payload.expires_in * 1e3 - 3e5
+	};
+}
+var GitLabDuoWorkflowOAuthFlow = class extends OAuthCallbackFlow {
+	#pkce;
+	#fetch;
+	constructor(ctrl, pkce) {
+		super(ctrl, {
+			preferredPort: 0,
+			redirectUri: GITLAB_DUO_WORKFLOW_OAUTH_REDIRECT_URI
+		});
+		this.#pkce = pkce;
+		this.#fetch = ctrl.fetch ?? fetch;
+	}
+	async generateAuthUrl(state) {
+		const authParams = new URLSearchParams({
+			client_id: GITLAB_DUO_WORKFLOW_OAUTH_CLIENT_ID,
+			redirect_uri: GITLAB_DUO_WORKFLOW_OAUTH_REDIRECT_URI,
+			response_type: "code",
+			scope: OAUTH_SCOPES.join(" "),
+			code_challenge: this.#pkce.challenge,
+			code_challenge_method: "S256",
+			state
+		});
+		return {
+			url: `${GITLAB_COM_URL}/oauth/authorize?${authParams.toString()}`,
+			instructions: "Complete GitLab login in your browser. This uses GitLab's official VS Code OAuth application. If the redirect opens VS Code instead of returning to OMP, copy the full vscode://gitlab.gitlab-workflow/authentication?... callback URL from VS Code/browser and paste it back into OMP."
+		};
+	}
+	async exchangeToken(code) {
+		const response = await this.#fetch(`${GITLAB_COM_URL}/oauth/token`, {
+			method: "POST",
+			headers: { "Content-Type": "application/x-www-form-urlencoded" },
+			body: new URLSearchParams({
+				client_id: GITLAB_DUO_WORKFLOW_OAUTH_CLIENT_ID,
+				redirect_uri: GITLAB_DUO_WORKFLOW_OAUTH_REDIRECT_URI,
+				grant_type: "authorization_code",
+				code,
+				code_verifier: this.#pkce.verifier
+			}).toString()
+		});
+		if (!response.ok) throw new OAuthError(`GitLab Duo Workflow OAuth token exchange failed: ${response.status} ${await response.text()}`, {
+			kind: "token-exchange",
+			provider: "gitlab-duo-workflow",
+			status: response.status
+		});
+		return mapTokenResponse(await response.json());
+	}
+};
+async function loginGitLabDuoWorkflow(callbacks) {
+	return new GitLabDuoWorkflowOAuthFlow(callbacks, await generatePKCE()).login();
+}
+async function refreshGitLabDuoWorkflowToken(credentials, fetchImpl = fetch) {
+	const response = await fetchImpl(`${GITLAB_COM_URL}/oauth/token`, {
+		method: "POST",
+		headers: { "Content-Type": "application/x-www-form-urlencoded" },
+		body: new URLSearchParams({
+			client_id: GITLAB_DUO_WORKFLOW_OAUTH_CLIENT_ID,
+			redirect_uri: GITLAB_DUO_WORKFLOW_OAUTH_REDIRECT_URI,
+			grant_type: "refresh_token",
+			refresh_token: credentials.refresh
+		}).toString()
+	});
+	if (!response.ok) throw new OAuthError(`GitLab Duo Workflow OAuth refresh failed: ${response.status} ${await response.text()}`, {
+		kind: "token-refresh",
+		provider: "gitlab-duo-workflow",
+		status: response.status
+	});
+	return mapTokenResponse(await response.json());
+}
+//#endregion
+export { loginGitLabDuoWorkflow, refreshGitLabDuoWorkflowToken };

package/lib/google-BS4T25Pn.mjs

@@ -0,0 +1,30 @@
+import { installBunShim as __installBunShim } from "./bun-shim.mjs";
+__installBunShim();
+import { g as MissingApiKeyError } from "./error-Dd8DIqs-.mjs";
+import { n as getEnvApiKey } from "./stream-CRtexYLe.mjs";
+import { p as streamGoogleGenAI, t as buildGoogleGenerateContentParams } from "./google-shared-Dr-VG-ap.mjs";
+//#region node_modules/.pnpm/@oh-my-pi+pi-ai@17.3.5/node_modules/@oh-my-pi/pi-ai/src/providers/google.ts
+const DEFAULT_GENERATIVE_LANGUAGE_BASE = "https://generativelanguage.googleapis.com/v1beta";
+const streamGoogle = (model, context, options) => {
+	const apiKey = options?.apiKey || getEnvApiKey(model.provider);
+	if (!apiKey) throw new MissingApiKeyError(void 0, "Google Generative AI requires an API key (GEMINI_API_KEY or options.apiKey).");
+	return streamGoogleGenAI({
+		model,
+		options,
+		api: "google-generative-ai",
+		prepare: () => {
+			return {
+				params: buildGoogleGenerateContentParams(model, context, options ?? {}),
+				url: `${model.baseUrl?.trim() || DEFAULT_GENERATIVE_LANGUAGE_BASE}/models/${model.id}:streamGenerateContent?alt=sse`,
+				headers: {
+					"x-goog-api-key": apiKey,
+					...model.headers ?? {},
+					...options?.headers ?? {}
+				},
+				fetch: options?.fetch
+			};
+		}
+	});
+};
+//#endregion
+export { streamGoogle };

package/lib/google-TFe-7-of.mjs

@@ -0,0 +1,30 @@
+import { installBunShim as __installBunShim } from "./bun-shim.mjs";
+__installBunShim();
+import { g as MissingApiKeyError } from "./error-yCSG0mGC.mjs";
+import { n as getEnvApiKey } from "./stream-BlldLkVq.mjs";
+import { p as streamGoogleGenAI, t as buildGoogleGenerateContentParams } from "./google-shared-CgKmmdO3.mjs";
+//#region node_modules/.pnpm/@oh-my-pi+pi-ai@17.3.5/node_modules/@oh-my-pi/pi-ai/src/providers/google.ts
+const DEFAULT_GENERATIVE_LANGUAGE_BASE = "https://generativelanguage.googleapis.com/v1beta";
+const streamGoogle = (model, context, options) => {
+	const apiKey = options?.apiKey || getEnvApiKey(model.provider);
+	if (!apiKey) throw new MissingApiKeyError(void 0, "Google Generative AI requires an API key (GEMINI_API_KEY or options.apiKey).");
+	return streamGoogleGenAI({
+		model,
+		options,
+		api: "google-generative-ai",
+		prepare: () => {
+			return {
+				params: buildGoogleGenerateContentParams(model, context, options ?? {}),
+				url: `${model.baseUrl?.trim() || DEFAULT_GENERATIVE_LANGUAGE_BASE}/models/${model.id}:streamGenerateContent?alt=sse`,
+				headers: {
+					"x-goog-api-key": apiKey,
+					...model.headers ?? {},
+					...options?.headers ?? {}
+				},
+				fetch: options?.fetch
+			};
+		}
+	});
+};
+//#endregion
+export { streamGoogle };

package/lib/google-antigravity-DGmwC2KV.mjs

@@ -0,0 +1,198 @@
+import { installBunShim as __installBunShim } from "./bun-shim.mjs";
+__installBunShim();
+import { c as OAuthError, h as LoginCancelledError } from "./error-Dd8DIqs-.mjs";
+import { n as getAntigravityUserAgent, r as getAntigravityVersion } from "./gemini-headers-DKUShltF.mjs";
+import { n as runGoogleOAuthLogin, r as throwIfLoginCancelled, t as oauthFetch } from "./google-oauth-shared-CuEHaDDj.mjs";
+//#region node_modules/.pnpm/@oh-my-pi+pi-ai@17.3.5/node_modules/@oh-my-pi/pi-ai/src/registry/oauth/google-antigravity.ts
+/**
+* Antigravity OAuth flow (Gemini 3, Claude, GPT-OSS via Google Cloud)
+* Uses different OAuth credentials than google-gemini-cli for access to additional models.
+*/
+const decode = (s) => atob(s);
+const CLIENT_ID = decode("MTA3MTAwNjA2MDU5MS10bWhzc2luMmgyMWxjcmUyMzV2dG9sb2poNGc0MDNlcC5hcHBzLmdvb2dsZXVzZXJjb250ZW50LmNvbQ==");
+const CLIENT_SECRET = decode("R09DU1BYLUs1OEZXUjQ4NkxkTEoxbUxCOHNYQzR6NnFEQWY=");
+const CALLBACK_PORT = 51121;
+const CALLBACK_PATH = "/oauth-callback";
+const SCOPES = [
+	"https://www.googleapis.com/auth/cloud-platform",
+	"https://www.googleapis.com/auth/userinfo.email",
+	"https://www.googleapis.com/auth/userinfo.profile",
+	"https://www.googleapis.com/auth/cclog",
+	"https://www.googleapis.com/auth/experimentsandconfigs"
+];
+const AUTH_URL = "https://accounts.google.com/o/oauth2/v2/auth";
+const TOKEN_URL = "https://oauth2.googleapis.com/token";
+const CLOUD_CODE_ENDPOINT = "https://cloudcode-pa.googleapis.com";
+const DAILY_CLOUD_CODE_ENDPOINT = "https://daily-cloudcode-pa.googleapis.com";
+const NODE_API_CLIENT_USER_AGENT = "google-api-nodejs-client/10.3.0";
+const GOOG_API_CLIENT_HEADER = "gl-node/22.21.1";
+const TIER_FREE = "free-tier";
+const PROJECT_ONBOARD_MAX_ATTEMPTS = 5;
+const PROJECT_ONBOARD_INTERVAL_MS = 2e3;
+const ANTIGRAVITY_LOAD_CODE_ASSIST_METADATA = Object.freeze({ ideType: "ANTIGRAVITY" });
+function getAntigravityOnboardMetadata() {
+	return {
+		ide_type: "ANTIGRAVITY",
+		ide_version: getAntigravityVersion(),
+		ide_name: "antigravity"
+	};
+}
+function readProjectId(value) {
+	if (typeof value === "string" && value.length > 0) return value.trim();
+	if (value && typeof value === "object" && "id" in value && typeof value.id === "string") {
+		const id = value.id.trim();
+		if (id.length > 0) return id;
+	}
+}
+function extractProjectId(payload) {
+	if (!payload || typeof payload !== "object") return void 0;
+	const record = payload;
+	for (const key of [
+		"cloudaicompanionProject",
+		"projectId",
+		"project"
+	]) {
+		const id = readProjectId(record[key]);
+		if (id) return id;
+	}
+}
+function getDefaultTierId(allowedTiers, currentTier) {
+	if (allowedTiers && allowedTiers.length > 0) {
+		const defaultTier = allowedTiers.find((tier) => tier.isDefault && typeof tier.id === "string" && tier.id.trim().length > 0);
+		if (defaultTier?.id) return defaultTier.id.trim();
+	}
+	if (currentTier && typeof currentTier.id === "string" && currentTier.id.trim().length > 0) return currentTier.id.trim();
+	return TIER_FREE;
+}
+async function onboardProjectWithRetries(endpoint, headers, onboardBody, signal, onProgress) {
+	for (let attempt = 1; attempt <= PROJECT_ONBOARD_MAX_ATTEMPTS; attempt += 1) {
+		if (attempt > 1) {
+			onProgress?.(`Waiting for project provisioning (attempt ${attempt}/${PROJECT_ONBOARD_MAX_ATTEMPTS})...`);
+			throwIfLoginCancelled(signal);
+			await Bun.sleep(PROJECT_ONBOARD_INTERVAL_MS);
+		}
+		throwIfLoginCancelled(signal);
+		const onboardResponse = await oauthFetch(`${endpoint}/v1internal:onboardUser`, {
+			method: "POST",
+			headers,
+			body: JSON.stringify(onboardBody)
+		}, {
+			provider: "google-antigravity",
+			signal
+		});
+		if (!onboardResponse.ok) {
+			const errorText = await onboardResponse.text();
+			throw new OAuthError(`onboardUser failed: ${onboardResponse.status} ${onboardResponse.statusText}: ${errorText}`, {
+				kind: "provisioning",
+				provider: "google-antigravity",
+				status: onboardResponse.status
+			});
+		}
+		const operation = await onboardResponse.json();
+		if (!operation.done) continue;
+		const projectId = extractProjectId(operation.response);
+		if (projectId) return projectId;
+	}
+	throw new OAuthError(`onboardUser did not return a provisioned project id after ${PROJECT_ONBOARD_MAX_ATTEMPTS} attempts`, {
+		kind: "provisioning",
+		provider: "google-antigravity"
+	});
+}
+async function discoverProject(accessToken, onProgress, signal) {
+	const headers = {
+		Authorization: `Bearer ${accessToken}`,
+		"Content-Type": "application/json",
+		"User-Agent": getAntigravityUserAgent()
+	};
+	onProgress?.("Checking for existing project...");
+	try {
+		let lastErrorText;
+		let lastStatus;
+		let fallbackTierId = TIER_FREE;
+		let loadedSuccessfully = false;
+		for (const endpoint of [DAILY_CLOUD_CODE_ENDPOINT, CLOUD_CODE_ENDPOINT]) {
+			throwIfLoginCancelled(signal);
+			const loadResponse = await oauthFetch(`${endpoint}/v1internal:loadCodeAssist`, {
+				method: "POST",
+				headers,
+				body: JSON.stringify({ metadata: ANTIGRAVITY_LOAD_CODE_ASSIST_METADATA })
+			}, {
+				provider: "google-antigravity",
+				signal
+			});
+			if (!loadResponse.ok) {
+				lastStatus = loadResponse.status;
+				lastErrorText = await loadResponse.text();
+				continue;
+			}
+			loadedSuccessfully = true;
+			const loadPayload = await loadResponse.json();
+			const existingProject = extractProjectId(loadPayload);
+			if (existingProject) return existingProject;
+			fallbackTierId = getDefaultTierId(loadPayload.allowedTiers, loadPayload.currentTier);
+		}
+		if (!loadedSuccessfully && lastStatus !== void 0) throw new OAuthError(`loadCodeAssist failed: ${lastStatus}: ${lastErrorText || "unknown error"}`, {
+			kind: "discovery",
+			status: lastStatus
+		});
+		onProgress?.("Provisioning project...");
+		const onboardBody = {
+			tier_id: fallbackTierId,
+			metadata: getAntigravityOnboardMetadata()
+		};
+		const onboardHeaders = {
+			...headers,
+			"User-Agent": `${headers["User-Agent"]} ${NODE_API_CLIENT_USER_AGENT}`,
+			"X-Goog-Api-Client": GOOG_API_CLIENT_HEADER
+		};
+		return await onboardProjectWithRetries(DAILY_CLOUD_CODE_ENDPOINT, onboardHeaders, onboardBody, signal, onProgress);
+	} catch (error) {
+		if (error instanceof LoginCancelledError || error instanceof OAuthError) throw error;
+		throw new OAuthError(`Could not discover or provision an Antigravity project. ${error instanceof Error ? error.message : String(error)}`, {
+			kind: "discovery",
+			provider: "google-antigravity",
+			cause: error
+		});
+	}
+}
+async function loginAntigravity(ctrl) {
+	return runGoogleOAuthLogin(ctrl, {
+		provider: "google-antigravity",
+		clientId: CLIENT_ID,
+		clientSecret: CLIENT_SECRET,
+		authUrl: AUTH_URL,
+		tokenUrl: TOKEN_URL,
+		scopes: SCOPES,
+		callbackPort: CALLBACK_PORT,
+		callbackPath: CALLBACK_PATH,
+		discoverProject
+	});
+}
+/**
+* Refresh Antigravity token
+*/
+async function refreshAntigravityToken(refreshToken, projectId) {
+	const response = await fetch(TOKEN_URL, {
+		method: "POST",
+		headers: { "Content-Type": "application/x-www-form-urlencoded" },
+		body: new URLSearchParams({
+			client_id: CLIENT_ID,
+			client_secret: CLIENT_SECRET,
+			refresh_token: refreshToken,
+			grant_type: "refresh_token"
+		})
+	});
+	if (!response.ok) {
+		const error = await response.text();
+		throw new OAuthError(`Antigravity token refresh failed: ${error}`, { kind: "token-refresh" });
+	}
+	const data = await response.json();
+	return {
+		refresh: data.refresh_token || refreshToken,
+		access: data.access_token,
+		expires: Date.now() + data.expires_in * 1e3 - 3e5,
+		projectId
+	};
+}
+//#endregion
+export { loginAntigravity, refreshAntigravityToken };

package/lib/google-antigravity-DNYhgTpA.mjs

@@ -0,0 +1,198 @@
+import { installBunShim as __installBunShim } from "./bun-shim.mjs";
+__installBunShim();
+import { c as OAuthError, h as LoginCancelledError } from "./error-yCSG0mGC.mjs";
+import { n as getAntigravityUserAgent, r as getAntigravityVersion } from "./gemini-headers-DKUShltF.mjs";
+import { n as runGoogleOAuthLogin, r as throwIfLoginCancelled, t as oauthFetch } from "./google-oauth-shared-yqlyqPPC.mjs";
+//#region node_modules/.pnpm/@oh-my-pi+pi-ai@17.3.5/node_modules/@oh-my-pi/pi-ai/src/registry/oauth/google-antigravity.ts
+/**
+* Antigravity OAuth flow (Gemini 3, Claude, GPT-OSS via Google Cloud)
+* Uses different OAuth credentials than google-gemini-cli for access to additional models.
+*/
+const decode = (s) => atob(s);
+const CLIENT_ID = decode("MTA3MTAwNjA2MDU5MS10bWhzc2luMmgyMWxjcmUyMzV2dG9sb2poNGc0MDNlcC5hcHBzLmdvb2dsZXVzZXJjb250ZW50LmNvbQ==");
+const CLIENT_SECRET = decode("R09DU1BYLUs1OEZXUjQ4NkxkTEoxbUxCOHNYQzR6NnFEQWY=");
+const CALLBACK_PORT = 51121;
+const CALLBACK_PATH = "/oauth-callback";
+const SCOPES = [
+	"https://www.googleapis.com/auth/cloud-platform",
+	"https://www.googleapis.com/auth/userinfo.email",
+	"https://www.googleapis.com/auth/userinfo.profile",
+	"https://www.googleapis.com/auth/cclog",
+	"https://www.googleapis.com/auth/experimentsandconfigs"
+];
+const AUTH_URL = "https://accounts.google.com/o/oauth2/v2/auth";
+const TOKEN_URL = "https://oauth2.googleapis.com/token";
+const CLOUD_CODE_ENDPOINT = "https://cloudcode-pa.googleapis.com";
+const DAILY_CLOUD_CODE_ENDPOINT = "https://daily-cloudcode-pa.googleapis.com";
+const NODE_API_CLIENT_USER_AGENT = "google-api-nodejs-client/10.3.0";
+const GOOG_API_CLIENT_HEADER = "gl-node/22.21.1";
+const TIER_FREE = "free-tier";
+const PROJECT_ONBOARD_MAX_ATTEMPTS = 5;
+const PROJECT_ONBOARD_INTERVAL_MS = 2e3;
+const ANTIGRAVITY_LOAD_CODE_ASSIST_METADATA = Object.freeze({ ideType: "ANTIGRAVITY" });
+function getAntigravityOnboardMetadata() {
+	return {
+		ide_type: "ANTIGRAVITY",
+		ide_version: getAntigravityVersion(),
+		ide_name: "antigravity"
+	};
+}
+function readProjectId(value) {
+	if (typeof value === "string" && value.length > 0) return value.trim();
+	if (value && typeof value === "object" && "id" in value && typeof value.id === "string") {
+		const id = value.id.trim();
+		if (id.length > 0) return id;
+	}
+}
+function extractProjectId(payload) {
+	if (!payload || typeof payload !== "object") return void 0;
+	const record = payload;
+	for (const key of [
+		"cloudaicompanionProject",
+		"projectId",
+		"project"
+	]) {
+		const id = readProjectId(record[key]);
+		if (id) return id;
+	}
+}
+function getDefaultTierId(allowedTiers, currentTier) {
+	if (allowedTiers && allowedTiers.length > 0) {
+		const defaultTier = allowedTiers.find((tier) => tier.isDefault && typeof tier.id === "string" && tier.id.trim().length > 0);
+		if (defaultTier?.id) return defaultTier.id.trim();
+	}
+	if (currentTier && typeof currentTier.id === "string" && currentTier.id.trim().length > 0) return currentTier.id.trim();
+	return TIER_FREE;
+}
+async function onboardProjectWithRetries(endpoint, headers, onboardBody, signal, onProgress) {
+	for (let attempt = 1; attempt <= PROJECT_ONBOARD_MAX_ATTEMPTS; attempt += 1) {
+		if (attempt > 1) {
+			onProgress?.(`Waiting for project provisioning (attempt ${attempt}/${PROJECT_ONBOARD_MAX_ATTEMPTS})...`);
+			throwIfLoginCancelled(signal);
+			await Bun.sleep(PROJECT_ONBOARD_INTERVAL_MS);
+		}
+		throwIfLoginCancelled(signal);
+		const onboardResponse = await oauthFetch(`${endpoint}/v1internal:onboardUser`, {
+			method: "POST",
+			headers,
+			body: JSON.stringify(onboardBody)
+		}, {
+			provider: "google-antigravity",
+			signal
+		});
+		if (!onboardResponse.ok) {
+			const errorText = await onboardResponse.text();
+			throw new OAuthError(`onboardUser failed: ${onboardResponse.status} ${onboardResponse.statusText}: ${errorText}`, {
+				kind: "provisioning",
+				provider: "google-antigravity",
+				status: onboardResponse.status
+			});
+		}
+		const operation = await onboardResponse.json();
+		if (!operation.done) continue;
+		const projectId = extractProjectId(operation.response);
+		if (projectId) return projectId;
+	}
+	throw new OAuthError(`onboardUser did not return a provisioned project id after ${PROJECT_ONBOARD_MAX_ATTEMPTS} attempts`, {
+		kind: "provisioning",
+		provider: "google-antigravity"
+	});
+}
+async function discoverProject(accessToken, onProgress, signal) {
+	const headers = {
+		Authorization: `Bearer ${accessToken}`,
+		"Content-Type": "application/json",
+		"User-Agent": getAntigravityUserAgent()
+	};
+	onProgress?.("Checking for existing project...");
+	try {
+		let lastErrorText;
+		let lastStatus;
+		let fallbackTierId = TIER_FREE;
+		let loadedSuccessfully = false;
+		for (const endpoint of [DAILY_CLOUD_CODE_ENDPOINT, CLOUD_CODE_ENDPOINT]) {
+			throwIfLoginCancelled(signal);
+			const loadResponse = await oauthFetch(`${endpoint}/v1internal:loadCodeAssist`, {
+				method: "POST",
+				headers,
+				body: JSON.stringify({ metadata: ANTIGRAVITY_LOAD_CODE_ASSIST_METADATA })
+			}, {
+				provider: "google-antigravity",
+				signal
+			});
+			if (!loadResponse.ok) {
+				lastStatus = loadResponse.status;
+				lastErrorText = await loadResponse.text();
+				continue;
+			}
+			loadedSuccessfully = true;
+			const loadPayload = await loadResponse.json();
+			const existingProject = extractProjectId(loadPayload);
+			if (existingProject) return existingProject;
+			fallbackTierId = getDefaultTierId(loadPayload.allowedTiers, loadPayload.currentTier);
+		}
+		if (!loadedSuccessfully && lastStatus !== void 0) throw new OAuthError(`loadCodeAssist failed: ${lastStatus}: ${lastErrorText || "unknown error"}`, {
+			kind: "discovery",
+			status: lastStatus
+		});
+		onProgress?.("Provisioning project...");
+		const onboardBody = {
+			tier_id: fallbackTierId,
+			metadata: getAntigravityOnboardMetadata()
+		};
+		const onboardHeaders = {
+			...headers,
+			"User-Agent": `${headers["User-Agent"]} ${NODE_API_CLIENT_USER_AGENT}`,
+			"X-Goog-Api-Client": GOOG_API_CLIENT_HEADER
+		};
+		return await onboardProjectWithRetries(DAILY_CLOUD_CODE_ENDPOINT, onboardHeaders, onboardBody, signal, onProgress);
+	} catch (error) {
+		if (error instanceof LoginCancelledError || error instanceof OAuthError) throw error;
+		throw new OAuthError(`Could not discover or provision an Antigravity project. ${error instanceof Error ? error.message : String(error)}`, {
+			kind: "discovery",
+			provider: "google-antigravity",
+			cause: error
+		});
+	}
+}
+async function loginAntigravity(ctrl) {
+	return runGoogleOAuthLogin(ctrl, {
+		provider: "google-antigravity",
+		clientId: CLIENT_ID,
+		clientSecret: CLIENT_SECRET,
+		authUrl: AUTH_URL,
+		tokenUrl: TOKEN_URL,
+		scopes: SCOPES,
+		callbackPort: CALLBACK_PORT,
+		callbackPath: CALLBACK_PATH,
+		discoverProject
+	});
+}
+/**
+* Refresh Antigravity token
+*/
+async function refreshAntigravityToken(refreshToken, projectId) {
+	const response = await fetch(TOKEN_URL, {
+		method: "POST",
+		headers: { "Content-Type": "application/x-www-form-urlencoded" },
+		body: new URLSearchParams({
+			client_id: CLIENT_ID,
+			client_secret: CLIENT_SECRET,
+			refresh_token: refreshToken,
+			grant_type: "refresh_token"
+		})
+	});
+	if (!response.ok) {
+		const error = await response.text();
+		throw new OAuthError(`Antigravity token refresh failed: ${error}`, { kind: "token-refresh" });
+	}
+	const data = await response.json();
+	return {
+		refresh: data.refresh_token || refreshToken,
+		access: data.access_token,
+		expires: Date.now() + data.expires_in * 1e3 - 3e5,
+		projectId
+	};
+}
+//#endregion
+export { loginAntigravity, refreshAntigravityToken };