agy-cli-usage 0.3.0 → 0.4.0

package/dist/src/server.js

@@ -0,0 +1,43 @@
+#!/usr/bin/env node
+// Optional lightweight HTTP endpoint for dashboard integration.
+// Serves the normalized quota snapshot as JSON, going through the same 5-minute
+// cache as the CLI so polling clients never hammer the upstream API.
+//
+//   PORT=3007 node dist/src/server.js
+//   GET /quota   -> normalized snapshot JSON
+//   GET /healthz -> { ok: true }
+import { createServer } from 'node:http';
+import { getSnapshot } from './main.js';
+const PORT = Number(process.env.PORT) || 3007;
+const HOST = process.env.HOST || '127.0.0.1';
+const server = createServer(async (req, res) => {
+    const url = new URL(req.url ?? '/', `http://${req.headers.host ?? 'localhost'}`);
+    if (url.pathname === '/healthz') {
+        res.writeHead(200, { 'Content-Type': 'application/json' });
+        res.end(JSON.stringify({ ok: true }));
+        return;
+    }
+    if (url.pathname === '/quota') {
+        try {
+            const noCache = url.searchParams.get('refresh') === '1';
+            const snap = await getSnapshot({ source: 'auto', channel: 'auto', cache: !noCache });
+            res.writeHead(200, {
+                'Content-Type': 'application/json',
+                'Access-Control-Allow-Origin': '*',
+                'Cache-Control': 'public, max-age=300',
+            });
+            res.end(JSON.stringify(snap));
+        }
+        catch (err) {
+            res.writeHead(502, { 'Content-Type': 'application/json' });
+            res.end(JSON.stringify({ error: err instanceof Error ? err.message : String(err) }));
+        }
+        return;
+    }
+    res.writeHead(404, { 'Content-Type': 'application/json' });
+    res.end(JSON.stringify({ error: 'not found' }));
+});
+server.listen(PORT, HOST, () => {
+    process.stdout.write(`agy-usage server on http://${HOST}:${PORT}  (GET /quota)\n`);
+});
+//# sourceMappingURL=server.js.map

package/dist/src/server.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.js","sourceRoot":"","sources":["../../src/server.ts"],"names":[],"mappings":";AACA,gEAAgE;AAChE,gFAAgF;AAChF,qEAAqE;AACrE,EAAE;AACF,sCAAsC;AACtC,6CAA6C;AAC7C,iCAAiC;AAEjC,OAAO,EAAE,YAAY,EAAE,MAAM,WAAW,CAAC;AAEzC,OAAO,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AAExC,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC;AAC9C,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,WAAW,CAAC;AAE7C,MAAM,MAAM,GAAG,YAAY,CAAC,KAAK,EAAE,GAAoB,EAAE,GAAmB,EAAE,EAAE;IAC9E,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,GAAG,EAAE,UAAU,GAAG,CAAC,OAAO,CAAC,IAAI,IAAI,WAAW,EAAE,CAAC,CAAC;IAEjF,IAAI,GAAG,CAAC,QAAQ,KAAK,UAAU,EAAE,CAAC;QAChC,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;QAC3D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;QACtC,OAAO;IACT,CAAC;IAED,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAC9B,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,SAAS,CAAC,KAAK,GAAG,CAAC;YACxD,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;YACrF,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE;gBACjB,cAAc,EAAE,kBAAkB;gBAClC,6BAA6B,EAAE,GAAG;gBAClC,eAAe,EAAE,qBAAqB;aACvC,CAAC,CAAC;YACH,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;QAChC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;YAC3D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;QACvF,CAAC;QACD,OAAO;IACT,CAAC;IAED,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;IAC3D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC;AAClD,CAAC,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE;IAC7B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,8BAA8B,IAAI,IAAI,IAAI,kBAAkB,CAAC,CAAC;AACrF,CAAC,CAAC,CAAC"}

package/dist/src/types.d.ts

@@ -0,0 +1,67 @@
+export type BucketKind = 'weekly' | '5h' | string;
+export interface RawBucket {
+    bucketId?: string;
+    displayName?: string;
+    window?: string;
+    resetTime?: string;
+    description?: string;
+    remainingFraction?: number;
+}
+export interface RawGroup {
+    displayName?: string;
+    description?: string;
+    buckets?: RawBucket[];
+}
+export interface RawQuotaResponse {
+    groups?: RawGroup[];
+    description?: string;
+}
+/** Result of api.fetchQuotaSummary. */
+export interface FetchResult {
+    raw: RawQuotaResponse;
+    host: string | null;
+    account: string | null;
+    tier: string | null;
+}
+export interface ParsedBucket {
+    kind: BucketKind;
+    label: string;
+    remainingFraction: number | null;
+    resetsInSeconds: number | null;
+    available: boolean;
+    description: string | null;
+}
+export interface ParsedGroup {
+    name: string;
+    models: string;
+    buckets: ParsedBucket[];
+}
+export interface ParsedPanel {
+    account: string | null;
+    groups: ParsedGroup[];
+    note?: string | null;
+}
+export interface Bucket {
+    kind: BucketKind;
+    label: string;
+    remainingFraction: number | null;
+    usedFraction: number | null;
+    resetAt: string | null;
+    resetsInSeconds: number | null;
+    available: boolean;
+    description: string | null;
+}
+export interface Group {
+    name: string;
+    models: string;
+    buckets: Bucket[];
+}
+export interface Snapshot {
+    account: string | null;
+    tier: string | null;
+    fetchedAt: string;
+    source: 'api' | 'pty';
+    host: string | null;
+    note: string | null;
+    groups: Group[];
+}

package/dist/src/types.js

@@ -0,0 +1,3 @@
+// Shared types for agy-cli-usage.
+export {};
+//# sourceMappingURL=types.js.map

package/dist/src/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/types.ts"],"names":[],"mappings":"AAAA,kCAAkC"}

package/dist/src/update.d.ts

@@ -0,0 +1,17 @@
+/**
+ * Installed version, read from this package's package.json.
+ * NOTE: this module compiles to dist/src/update.js, so package.json (at the
+ * package root) is two levels up.
+ */
+export declare function currentVersion(): string;
+/**
+ * Compare two dotted versions numerically (prerelease tags ignored).
+ * Returns negative if a<b, 0 if equal, positive if a>b.
+ */
+export declare function semverCompare(a: string, b: string): number;
+/** Latest published version: prefer the user's configured registry (npm view), fall back to public. */
+export declare function latestVersion(): Promise<string | null>;
+/** Run the update flow. Returns the intended process exit code. */
+export declare function runUpdate({ checkOnly }?: {
+    checkOnly?: boolean;
+}): Promise<number>;

package/dist/src/update.js

@@ -0,0 +1,87 @@
+// Self-update + version helpers for the CLI.
+//
+// `agy-cli-usage update`        check the registry and `npm install -g` if newer
+// `agy-cli-usage update --check` report only, don't install
+// `agy-cli-usage --version`     print the installed version
+import { execFileSync, spawnSync } from 'node:child_process';
+import { readFileSync } from 'node:fs';
+const PKG_NAME = 'agy-cli-usage';
+/**
+ * Installed version, read from this package's package.json.
+ * NOTE: this module compiles to dist/src/update.js, so package.json (at the
+ * package root) is two levels up.
+ */
+export function currentVersion() {
+    const pkg = JSON.parse(readFileSync(new URL('../../package.json', import.meta.url), 'utf8'));
+    return pkg.version;
+}
+/**
+ * Compare two dotted versions numerically (prerelease tags ignored).
+ * Returns negative if a<b, 0 if equal, positive if a>b.
+ */
+export function semverCompare(a, b) {
+    const norm = (v) => String(v)
+        .replace(/^v/, '')
+        .split('-')[0]
+        .split('.')
+        .map((n) => parseInt(n, 10) || 0);
+    const pa = norm(a);
+    const pb = norm(b);
+    for (let i = 0; i < Math.max(pa.length, pb.length); i++) {
+        const d = (pa[i] || 0) - (pb[i] || 0);
+        if (d !== 0)
+            return d;
+    }
+    return 0;
+}
+/** Latest published version: prefer the user's configured registry (npm view), fall back to public. */
+export async function latestVersion() {
+    try {
+        const out = execFileSync('npm', ['view', PKG_NAME, 'version'], {
+            encoding: 'utf8',
+            stdio: ['ignore', 'pipe', 'ignore'],
+        }).trim();
+        if (out)
+            return out;
+    }
+    catch {
+        // npm missing or offline — try the public registry directly
+    }
+    try {
+        const res = await fetch(`https://registry.npmjs.org/${PKG_NAME}/latest`);
+        if (res.ok)
+            return (await res.json()).version;
+    }
+    catch {
+        // offline
+    }
+    return null;
+}
+/** Run the update flow. Returns the intended process exit code. */
+export async function runUpdate({ checkOnly = false } = {}) {
+    const current = currentVersion();
+    const latest = await latestVersion();
+    if (!latest) {
+        process.stderr.write('Could not determine the latest version (offline or npm unavailable).\n');
+        return 1;
+    }
+    if (semverCompare(latest, current) <= 0) {
+        process.stdout.write(`agy-cli-usage is up to date (${current}).\n`);
+        return 0;
+    }
+    process.stdout.write(`Update available: ${current} -> ${latest}\n`);
+    if (checkOnly) {
+        process.stdout.write('Run `agy-cli-usage update` to install it.\n');
+        return 0;
+    }
+    process.stdout.write(`Installing ${PKG_NAME}@${latest} globally…\n`);
+    const r = spawnSync('npm', ['install', '-g', `${PKG_NAME}@${latest}`], { stdio: 'inherit' });
+    if (r.error) {
+        process.stderr.write(`Failed to run npm: ${r.error.message}\nInstall manually: npm install -g ${PKG_NAME}@latest\n`);
+        return 1;
+    }
+    if (r.status === 0)
+        process.stdout.write(`Updated to ${latest}.\n`);
+    return r.status ?? 0;
+}
+//# sourceMappingURL=update.js.map

package/dist/src/update.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"update.js","sourceRoot":"","sources":["../../src/update.ts"],"names":[],"mappings":"AAAA,6CAA6C;AAC7C,EAAE;AACF,iFAAiF;AACjF,4DAA4D;AAC5D,4DAA4D;AAE5D,OAAO,EAAE,YAAY,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAC7D,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAEvC,MAAM,QAAQ,GAAG,eAAe,CAAC;AAEjC;;;;GAIG;AACH,MAAM,UAAU,cAAc;IAC5B,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,GAAG,CAAC,oBAAoB,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,CAE1F,CAAC;IACF,OAAO,GAAG,CAAC,OAAO,CAAC;AACrB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,aAAa,CAAC,CAAS,EAAE,CAAS;IAChD,MAAM,IAAI,GAAG,CAAC,CAAS,EAAY,EAAE,CACnC,MAAM,CAAC,CAAC,CAAC;SACN,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC;SACjB,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;SACb,KAAK,CAAC,GAAG,CAAC;SACV,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC;IACtC,MAAM,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;IACnB,MAAM,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;IACnB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QACxD,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;QACtC,IAAI,CAAC,KAAK,CAAC;YAAE,OAAO,CAAC,CAAC;IACxB,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC;AAED,uGAAuG;AACvG,MAAM,CAAC,KAAK,UAAU,aAAa;IACjC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,YAAY,CAAC,KAAK,EAAE,CAAC,MAAM,EAAE,QAAQ,EAAE,SAAS,CAAC,EAAE;YAC7D,QAAQ,EAAE,MAAM;YAChB,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC;SACpC,CAAC,CAAC,IAAI,EAAE,CAAC;QACV,IAAI,GAAG;YAAE,OAAO,GAAG,CAAC;IACtB,CAAC;IAAC,MAAM,CAAC;QACP,4DAA4D;IAC9D,CAAC;IACD,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,8BAA8B,QAAQ,SAAS,CAAC,CAAC;QACzE,IAAI,GAAG,CAAC,EAAE;YAAE,OAAQ,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAyB,CAAC,OAAO,CAAC;IACzE,CAAC;IAAC,MAAM,CAAC;QACP,UAAU;IACZ,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,mEAAmE;AACnE,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,EAAE,SAAS,GAAG,KAAK,KAA8B,EAAE;IACjF,MAAM,OAAO,GAAG,cAAc,EAAE,CAAC;IACjC,MAAM,MAAM,GAAG,MAAM,aAAa,EAAE,CAAC;IACrC,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,wEAAwE,CAAC,CAAC;QAC/F,OAAO,CAAC,CAAC;IACX,CAAC;IACD,IAAI,aAAa,CAAC,MAAM,EAAE,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QACxC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,gCAAgC,OAAO,MAAM,CAAC,CAAC;QACpE,OAAO,CAAC,CAAC;IACX,CAAC;IACD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,qBAAqB,OAAO,OAAO,MAAM,IAAI,CAAC,CAAC;IACpE,IAAI,SAAS,EAAE,CAAC;QACd,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,6CAA6C,CAAC,CAAC;QACpE,OAAO,CAAC,CAAC;IACX,CAAC;IACD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,cAAc,QAAQ,IAAI,MAAM,cAAc,CAAC,CAAC;IACrE,MAAM,CAAC,GAAG,SAAS,CAAC,KAAK,EAAE,CAAC,SAAS,EAAE,IAAI,EAAE,GAAG,QAAQ,IAAI,MAAM,EAAE,CAAC,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC;IAC7F,IAAI,CAAC,CAAC,KAAK,EAAE,CAAC;QACZ,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,sBAAsB,CAAC,CAAC,KAAK,CAAC,OAAO,sCAAsC,QAAQ,WAAW,CAAC,CAAC;QACrH,OAAO,CAAC,CAAC;IACX,CAAC;IACD,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,cAAc,MAAM,KAAK,CAAC,CAAC;IACpE,OAAO,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC;AACvB,CAAC"}

package/package.json

@@ -1,24 +1,27 @@
 {
   "name": "agy-cli-usage",
-  "version": "0.3.0",
+  "version": "0.4.0",
   "description": "Headless usage/quota monitor for the Antigravity CLI (agy) — reads Cloud Code quota directly, with a PTY fallback. No IDE required.",
   "type": "module",
+  "types": "dist/src/main.d.ts",
   "bin": {
-    "agy-cli-usage": "src/main.js",
-    "agy-usage": "src/main.js"
+    "agy-cli-usage": "dist/src/main.js",
+    "agy-usage": "dist/src/main.js"
   },
   "scripts": {
-    "start": "node src/main.js",
-    "serve": "node server.js",
-    "test": "node --test",
-    "check": "node --check src/main.js && node --check server.js"
+    "build": "tsc",
+    "check": "tsc --noEmit",
+    "pretest": "tsc",
+    "test": "node --test dist/test/unit.test.js",
+    "start": "tsc && node dist/src/main.js",
+    "serve": "tsc && node dist/src/server.js",
+    "prepack": "tsc"
   },
   "engines": {
     "node": ">=18"
   },
   "files": [
-    "src/",
-    "server.js",
+    "dist/src/",
     "README.md",
     "CHANGELOG.md",
     "LICENSE"
@@ -49,5 +52,9 @@
   "optionalDependencies": {
     "node-pty": "^1.0.0"
   },
-  "license": "MIT"
+  "license": "MIT",
+  "devDependencies": {
+    "@types/node": "^26.0.0",
+    "typescript": "^6.0.3"
+  }
 }

package/server.js

@@ -1,48 +0,0 @@
-#!/usr/bin/env node
-// Optional lightweight HTTP endpoint for dashboard integration (e.g. ontology).
-// Serves the normalized quota snapshot as JSON, going through the same 5-minute
-// cache as the CLI so polling clients never hammer the upstream API.
-//
-//   PORT=3007 node server.js
-//   GET /quota   -> normalized snapshot JSON
-//   GET /healthz -> { ok: true }
-
-import { createServer } from 'node:http';
-import { getSnapshot } from './src/main.js';
-
-const PORT = Number(process.env.PORT) || 3007;
-const HOST = process.env.HOST || '127.0.0.1';
-
-const server = createServer(async (req, res) => {
-  const url = new URL(req.url, `http://${req.headers.host}`);
-
-  if (url.pathname === '/healthz') {
-    res.writeHead(200, { 'Content-Type': 'application/json' });
-    res.end(JSON.stringify({ ok: true }));
-    return;
-  }
-
-  if (url.pathname === '/quota') {
-    try {
-      const noCache = url.searchParams.get('refresh') === '1';
-      const snap = await getSnapshot({ source: 'auto', channel: 'auto', cache: !noCache });
-      res.writeHead(200, {
-        'Content-Type': 'application/json',
-        'Access-Control-Allow-Origin': '*',
-        'Cache-Control': 'public, max-age=300',
-      });
-      res.end(JSON.stringify(snap));
-    } catch (err) {
-      res.writeHead(502, { 'Content-Type': 'application/json' });
-      res.end(JSON.stringify({ error: err.message }));
-    }
-    return;
-  }
-
-  res.writeHead(404, { 'Content-Type': 'application/json' });
-  res.end(JSON.stringify({ error: 'not found' }));
-});
-
-server.listen(PORT, HOST, () => {
-  process.stdout.write(`agy-usage server on http://${HOST}:${PORT}  (GET /quota)\n`);
-});

package/src/api.js

@@ -1,92 +0,0 @@
-// Direct client for the Antigravity / Gemini Code Assist "Cloud Code" internal API.
-//
-// Reproduces exactly what `agy` does on startup to populate its /usage panel:
-//   1. POST /v1internal:loadCodeAssist  {metadata:{ideType:"ANTIGRAVITY"}}
-//        -> { cloudaicompanionProject, currentTier, ... }
-//   2. POST /v1internal:retrieveUserQuotaSummary  {project:<cloudaicompanionProject>}
-//        -> { groups:[ { displayName, description, buckets:[ {bucketId, displayName,
-//             window, resetTime, description?, remainingFraction} ] } ], description }
-//
-// Captured from live agy traffic (mitmproxy). The internal endpoint is undocumented;
-// the PTY fallback exists for when it changes.
-
-const UA = `antigravity-usage-monitor/0.1 ${process.platform}/${process.arch}`;
-
-// Antigravity ships against the "daily" Cloud Code host; stable builds use the
-// plain host. Try daily first (matches current CLI), fall back to prod.
-const HOSTS = ['daily-cloudcode-pa.googleapis.com', 'cloudcode-pa.googleapis.com'];
-
-class ApiError extends Error {
-  constructor(message, status) {
-    super(message);
-    this.status = status;
-  }
-}
-
-function extractEmail(uri) {
-  const m = uri?.match(/[?&]Email=([^&]+)/);
-  if (!m) return null;
-  try {
-    return decodeURIComponent(m[1]);
-  } catch {
-    return m[1];
-  }
-}
-
-async function postInternal(host, accessToken, method, body) {
-  const res = await fetch(`https://${host}/v1internal:${method}`, {
-    method: 'POST',
-    headers: {
-      Authorization: `Bearer ${accessToken}`,
-      'Content-Type': 'application/json',
-      'User-Agent': UA,
-    },
-    body: JSON.stringify(body),
-  });
-  if (!res.ok) {
-    throw new ApiError(`${method} -> HTTP ${res.status}: ${(await res.text()).slice(0, 300)}`, res.status);
-  }
-  return res.json();
-}
-
-/**
- * Fetch the raw quota summary from the Cloud Code API.
- * @param {string} accessToken
- * @param {{ host?: string, channel?: 'daily'|'prod' }} [opts]
- * @returns {Promise<{ raw: object, host: string, account: string|null, tier: string|null }>}
- */
-export async function fetchQuotaSummary(accessToken, opts = {}) {
-  const candidates = opts.host
-    ? [opts.host]
-    : opts.channel === 'prod'
-      ? ['cloudcode-pa.googleapis.com']
-      : opts.channel === 'daily'
-        ? ['daily-cloudcode-pa.googleapis.com']
-        : HOSTS;
-
-  let lastErr;
-  for (const host of candidates) {
-    try {
-      const lca = await postInternal(host, accessToken, 'loadCodeAssist', {
-        metadata: { ideType: 'ANTIGRAVITY' },
-      });
-      const project = lca.cloudaicompanionProject;
-      if (!project) throw new ApiError('loadCodeAssist returned no cloudaicompanionProject', 0);
-
-      const raw = await postInternal(host, accessToken, 'retrieveUserQuotaSummary', { project });
-      return {
-        raw,
-        host,
-        tier: lca.currentTier?.id ?? null,
-        account: extractEmail(lca.currentTier?.upgradeSubscriptionUri),
-      };
-    } catch (err) {
-      lastErr = err;
-      // 404 / wrong-host -> try next candidate; auth errors -> stop early.
-      if (err instanceof ApiError && (err.status === 401 || err.status === 403)) throw err;
-    }
-  }
-  throw lastErr ?? new ApiError('No Cloud Code host responded', 0);
-}
-
-export { ApiError };

package/src/credentials.js

@@ -1,186 +0,0 @@
-// Cross-platform reader for the Antigravity CLI (`agy`) OAuth credential.
-//
-// `agy` stores its token in the OS keyring using the zalando/go-keyring
-// convention: service="gemini", account="antigravity". Long/binary values are
-// stored with a `go-keyring-base64:` prefix followed by base64(JSON). The
-// decoded JSON looks like:
-//   { "token": { "access_token", "token_type", "refresh_token", "expiry" },
-//     "auth_method": "consumer" }
-//
-// Read backends, tried in order:
-//   1. @napi-rs/keyring native module  (macOS / Windows / Linux Secret Service)
-//   2. OS CLI fallback                  (`security` on macOS, `secret-tool` on Linux)
-//   3. File fallback                    (headless Linux: agy can't reach a keyring
-//                                        and writes the token to a plain-JSON file)
-// If every backend fails, the caller falls back to the PTY path which drives
-// `agy` itself.
-
-import { execFileSync } from 'node:child_process';
-import { readFileSync, existsSync } from 'node:fs';
-import { homedir } from 'node:os';
-import { join } from 'node:path';
-
-// OAuth client for the Antigravity CLI. This is an installed/desktop ("public")
-// OAuth client: per Google's own docs the client secret of an installed app is
-// "obviously not treated as a secret" — it ships inside the agy binary and is
-// identical for every user (the per-user identity is the keyring token, not
-// this). Verified: the same client_id appears in agy's browser consent URL
-// regardless of account, and the flow uses PKCE (code_challenge/S256), the
-// mechanism that secures public clients precisely because the secret is public.
-// Same pattern as Google's open-source gemini-cli.
-const OAUTH_CLIENT_ID = '1071006060591-tmhssin2h21lcre235vtolojh4g403ep.apps.googleusercontent.com';
-const OAUTH_CLIENT_SECRET = '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';
-const TOKEN_URL = 'https://oauth2.googleapis.com/token';
-
-const KEYRING_SERVICE = 'gemini';
-const KEYRING_ACCOUNT = 'antigravity';
-const B64_PREFIX = 'go-keyring-base64:';
-
-class CredentialError extends Error {}
-
-// --- raw keyring read --------------------------------------------------------
-
-async function readViaNapiEsm() {
-  try {
-    const mod = await import('@napi-rs/keyring');
-    const Entry = mod.Entry ?? mod.default?.Entry;
-    if (!Entry) return null;
-    return new Entry(KEYRING_SERVICE, KEYRING_ACCOUNT).getPassword();
-  } catch {
-    return null;
-  }
-}
-
-function readViaCli() {
-  try {
-    if (process.platform === 'darwin') {
-      return execFileSync(
-        'security',
-        ['find-generic-password', '-s', KEYRING_SERVICE, '-a', KEYRING_ACCOUNT, '-w'],
-        { encoding: 'utf8' },
-      ).trim();
-    }
-    if (process.platform === 'linux') {
-      return execFileSync(
-        'secret-tool',
-        ['lookup', 'service', KEYRING_SERVICE, 'account', KEYRING_ACCOUNT],
-        { encoding: 'utf8' },
-      ).trim();
-    }
-  } catch {
-    return null;
-  }
-  return null;
-}
-
-// On headless Linux (no Secret Service) agy persists the token to a plain-JSON
-// file instead of the keyring. Same payload shape, no `go-keyring-base64:` prefix.
-function readViaFile() {
-  const candidates = [
-    process.env.AGY_OAUTH_TOKEN_FILE,
-    join(homedir(), '.gemini', 'antigravity-cli', 'antigravity-oauth-token'),
-  ].filter(Boolean);
-  for (const path of candidates) {
-    try {
-      if (existsSync(path)) {
-        const content = readFileSync(path, 'utf8').trim();
-        if (content) return content;
-      }
-    } catch {
-      // unreadable (perms) — try next candidate
-    }
-  }
-  return null;
-}
-
-async function readRawSecret() {
-  const fromNapi = await readViaNapiEsm();
-  if (fromNapi) return fromNapi;
-  const fromCli = readViaCli();
-  if (fromCli) return fromCli;
-  const fromFile = readViaFile();
-  if (fromFile) return fromFile;
-  return null;
-}
-
-// --- decode ------------------------------------------------------------------
-
-export function decodeSecret(raw) {
-  const payload = raw.startsWith(B64_PREFIX)
-    ? Buffer.from(raw.slice(B64_PREFIX.length), 'base64').toString('utf8')
-    : raw;
-  let parsed;
-  try {
-    parsed = JSON.parse(payload);
-  } catch {
-    throw new CredentialError('Stored agy credential is not valid JSON');
-  }
-  const token = parsed.token ?? parsed;
-  if (!token?.access_token) {
-    throw new CredentialError('Stored agy credential has no access_token');
-  }
-  return {
-    accessToken: token.access_token,
-    refreshToken: token.refresh_token,
-    expiry: token.expiry ? new Date(token.expiry) : null,
-    authMethod: parsed.auth_method ?? null,
-  };
-}
-
-// --- refresh -----------------------------------------------------------------
-
-function isExpired(cred, skewMs = 60_000) {
-  if (!cred.expiry) return false;
-  return cred.expiry.getTime() - Date.now() < skewMs;
-}
-
-async function refreshAccessToken(refreshToken) {
-  const body = new URLSearchParams({
-    grant_type: 'refresh_token',
-    refresh_token: refreshToken,
-    client_id: OAUTH_CLIENT_ID,
-    client_secret: OAUTH_CLIENT_SECRET,
-  });
-  const res = await fetch(TOKEN_URL, {
-    method: 'POST',
-    headers: { 'Content-Type': 'application/x-www-form-urlencoded' },
-    body: body.toString(),
-  });
-  if (!res.ok) {
-    throw new CredentialError(`Token refresh failed: HTTP ${res.status} ${await res.text()}`);
-  }
-  const json = await res.json();
-  return json.access_token;
-}
-
-// --- public API --------------------------------------------------------------
-
-/**
- * Returns a valid access token for the Cloud Code API, refreshing if needed.
- * Throws CredentialError if no credential can be read from any keyring backend
- * (the caller should then consider the PTY fallback).
- * @returns {Promise<{ accessToken: string, authMethod: string|null }>}
- */
-export async function getAccessToken() {
-  const raw = await readRawSecret();
-  if (!raw) {
-    throw new CredentialError(
-      'Could not read agy credential from the OS keyring or token file. ' +
-        'Is agy logged in on this machine? (set AGY_OAUTH_TOKEN_FILE to override the path, ' +
-        'or use --source pty)',
-    );
-  }
-  const cred = decodeSecret(raw);
-  if (isExpired(cred) && cred.refreshToken) {
-    const fresh = await refreshAccessToken(cred.refreshToken);
-    return { accessToken: fresh, authMethod: cred.authMethod };
-  }
-  return { accessToken: cred.accessToken, authMethod: cred.authMethod };
-}
-
-/** Whether a keyring-based credential is readable at all (no refresh attempted). */
-export async function hasCredential() {
-  return (await readRawSecret()) != null;
-}
-
-export { CredentialError };