dsh-agy-link 0.1.2

package/CHANGELOG.md

@@ -0,0 +1,36 @@
+# Changelog
+
+## 0.1.2 (2026-08-18)
+
+- Fixed prompt assembly for returning sessions: the last-assistant scan now
+  stops at the newest assistant message, and the history digest covers exactly
+  the foreign turns since the watermark (previously it could re-send stale
+  history or swallow intermediate turns into the trailing prompt).
+- Hardened the stream loop: spawn failures release the concurrency slot and
+  surface as `PROCESS_EXIT` instead of hanging; the collector is fail-safe.
+- `/agy doctor` now exports the real last-run stdout ring (parser wiring).
+- `agy_ask` one-shot runs pass `--print-timeout` consistent with the watchdog.
+
+## 0.1.1 (2026-08-18)
+
+- Fixed cordis activation in app-less profiles (optional services are now
+  resolved via `ctx.get`, not `?`-suffixed inject entries).
+- Added `providerRetryPolicy`: AUTH failures fail fast (no quota-burning
+  retries); transient process failures retry once.
+
+## 0.1.0 (2026-08-18)
+
+Initial release.
+
+- `antigravity` LLM provider route over `agy -p --output-format stream-json`.
+- Streaming text / thinking / tool-activity mapping with token usage.
+- Session ↔ conversation binding with history digest on first contact.
+- Model discovery (`agy models`) with Gemini effort folding and fallback
+  catalog.
+- Google login: `/agy auth` + `/agy auth-code` + GUI panel (QR + paste).
+- `/agy` command family: status / auth / auth-code / models / mode /
+  effort / clear / doctor / help.
+- `agy_ask` delegation tool (optional).
+- Permission modes: plan / accept-edits / skip with red-flag UI on skip.
+- `/agy doctor` diagnostics export with auth redaction.
+- Auxiliary calls (compaction / session-title) via one-shot plan-mode turns.

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 dsh-agy-link contributors
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,113 @@
+# dsh-agy-link
+
+[![CI](https://img.shields.io/badge/CI-github--actions-blue)](.github/workflows/ci.yml) [![npm](https://img.shields.io/badge/npm-dsh--agy--link-red)](https://www.npmjs.com/package/dsh-agy-link)
+
+Bring **Google Antigravity models into [DeepSeek Harness (DSH)]** — chat,
+thinking, tool activity, and token usage from your Antigravity subscription,
+driven by the official `agy` CLI.
+
+English | [简体中文](README.zh.md)
+
+## What you get
+
+- **A model route, not a proxy** — registers the `antigravity` provider in
+  DSH's model config; pick any Antigravity model from the `/model` picker.
+- **Full streaming** — text, thinking (reasoning), and agy tool activity
+  (annotated as reasoning blocks), mapped onto DSH's native chunk protocol.
+- **Session continuity** — each DSH session binds to a native agy
+  conversation (`--conversation`), so multi-turn context rides agy history
+  instead of re-sending everything.
+- **Token usage** — input/output/thinking/cache tokens surface in DSH
+  usage accounting.
+- **In-GUI Google login** — `/agy auth` prints the consent URL; the sidebar
+  panel adds a QR code and a paste box for the authorization code.
+- **`agy_ask` tool** — let any DSH model delegate a one-shot task to an
+  Antigravity model (the AskAntigravity pattern).
+- **`/agy` commands** — `status`, `auth`, `auth-code`, `models`, `mode`,
+  `effort`, `clear`, `doctor`, `help`.
+- **Dormant-safe** — no agy binary? Not signed in? The plugin loads anyway
+  and tells you what to fix.
+
+## Requirements
+
+- DSH (DeepSeek Harness) with a web profile
+- Node.js >= 24
+- The official `agy` CLI >= 1.1.8, installed and on `PATH`
+
+## Install
+
+```bash
+dsh plugin --profile web add dsh-agy-link
+```
+
+Restart DSH, then run `/agy status` in the GUI.
+
+## Login (one time)
+
+1. `/agy auth` — prints a Google consent URL.
+2. Open it, approve access, copy the authorization code.
+3. `/agy auth-code <code>` — or use the sidebar panel (QR + paste box).
+
+The plugin never reads, copies, or moves
+`~/.gemini/antigravity-cli/antigravity-oauth-token`; login is driven
+entirely through the official CLI's own flow.
+
+## Configuration
+
+Config lives in the `agy-link` plugin entry (edit via `/plugin` or the
+profile patch layer). Environment variables override the file:
+
+| Key | Env | Default | Meaning |
+| --- | --- | --- | --- |
+| enabled | `DSH_AGY_ENABLED` | `true` | master switch |
+| agyBin | `DSH_AGY_BIN` | auto | explicit agy binary path |
+| permissionMode | `DSH_AGY_MODE` | `skip` | `skip` / `plan` / `accept-edits` (below) |
+| defaultModel | `DSH_AGY_DEFAULT_MODEL` | `(agy default)` | model slug |
+| defaultEffort | `DSH_AGY_DEFAULT_EFFORT` | `(model default)` | `low` / `medium` / `high` |
+| timeoutMs | `DSH_AGY_TIMEOUT_MS` | `600000` | per-turn watchdog |
+| extraArgs | `DSH_AGY_EXTRA_ARGS` | — | extra agy flags, space-separated |
+
+### Permission modes — read this
+
+agy runs its **own** tool loop with its own file edits and shell commands.
+The bridge maps that to one of three modes:
+
+- **plan** — read-only; the safe default for trying the bridge.
+- **accept-edits** — agy may edit files without asking.
+- **skip** — `--dangerously-skip-permissions`: agy runs **every** tool
+  without approval. Non-interactive DSH turns need this (or plan) because
+agy permission prompts hang print mode, but it means real unattended
+  write/exec access. The settings panel shows this button in red.
+
+DSH-side tools and permissions are unaffected — this only governs what the
+spawned agy process may do in its workspace.
+
+## How it works
+
+One DSH model call = one short-lived `agy -p --output-format stream-json`
+process. The NDJSON event stream is parsed, normalized, and mapped to
+DSH StreamChunks: thinking → reasoning blocks, text → text blocks, tool
+activity → annotated reasoning blocks, and the result envelope → usage +
+finish. Conversation ids are discovered from the stream itself with a
+conversations-directory snapshot diff as fallback. No reverse-engineered
+database scraping, no protobuf decoding, no token file access.
+
+## Known gaps
+
+See [docs/KNOWN-GAPS.md](docs/KNOWN-GAPS.md). Notably: images are not
+forwarded (agy print mode is text-only), and DSH tools are not exposed to
+agy (its MCP reverse bridge is future work).
+
+## Disclaimer & risk note
+
+This plugin spawns the **official, unmodified** `agy` binary and consumes
+its public print-mode output. It does not decode internal databases or
+touch OAuth tokens. Automating a subscription CLI may still conflict with
+the provider's terms of service (Google Antigravity ToS §6 context); use
+it at your own risk, and stop if asked to.
+
+## License
+
+MIT
+
+[DeepSeek Harness (DSH)]: https://npmjs.com/package/@deepseek-ai/dsh

package/README.zh.md

@@ -0,0 +1,101 @@
+# dsh-agy-link（简体中文）
+
+把 **Google Antigravity 模型接入 [DeepSeek Harness (DSH)]** —— 由官方
+`agy` CLI 驱动，完整支持对话输出、思考（thinking）、工具活动与 token
+用量，全部走你的 Antigravity 订阅。
+
+[English](README.md) | 简体中文
+
+## 你能得到什么
+
+- **模型路由而非代理** —— 在 DSH 模型配置里注册 `antigravity` 提供方，
+  `/model` 选择器里直接挑任意 Antigravity 模型。
+- **完整流式输出** —— 文本、思考、agy 工具活动（注记为 reasoning 块），
+  全部映射到 DSH 原生流协议。
+- **会话连续性** —— 每个 DSH 会话绑定原生 agy 会话（`--conversation`），
+  多轮上下文由 agy 自己的历史承载，不重发全量。
+- **token 用量** —— 输入/输出/思考/缓存 token 全部进入 DSH 用量统计。
+- **GUI 内 Google 登录** —— `/agy auth` 打印授权 URL；侧栏面板提供
+  二维码 + 授权码粘贴框。
+- **`agy_ask` 工具** —— 任何 DSH 模型都可以把一次性任务委托给
+  Antigravity 模型（AskAntigravity 模式）。
+- **`/agy` 命令族** —— `status` / `auth` / `auth-code` / `models` /
+  `mode` / `effort` / `clear` / `doctor` / `help`。
+- **休眠安全** —— 没装 agy？没登录？插件照常加载并告诉你怎么修。
+
+## 环境要求
+
+- DSH（DeepSeek Harness）web profile
+- Node.js >= 24
+- 官方 `agy` CLI >= 1.1.8，已安装并在 `PATH` 上
+
+## 安装
+
+```bash
+dsh plugin --profile web add dsh-agy-link
+```
+
+重启 DSH，在 GUI 里执行 `/agy status`。
+
+## 登录（一次性）
+
+1. `/agy auth` —— 打印 Google 授权 URL。
+2. 打开链接、批准访问、复制授权码。
+3. `/agy auth-code <授权码>` —— 或用侧栏面板（二维码 + 粘贴框）。
+
+插件绝不读取/复制/移动
+`~/.gemini/antigravity-cli/antigravity-oauth-token`；登录完全通过官方
+CLI 自己的流程完成。
+
+## 配置
+
+配置在 `agy-link` 插件条目里（`/plugin` 或 profile patch 层编辑）。
+环境变量优先于文件：
+
+| 键 | 环境变量 | 默认值 | 含义 |
+| --- | --- | --- | --- |
+| enabled | `DSH_AGY_ENABLED` | `true` | 总开关 |
+| agyBin | `DSH_AGY_BIN` | 自动 | 显式 agy 路径 |
+| permissionMode | `DSH_AGY_MODE` | `skip` | `skip` / `plan` / `accept-edits`（见下） |
+| defaultModel | `DSH_AGY_DEFAULT_MODEL` | `(agy 默认)` | 模型 slug |
+| defaultEffort | `DSH_AGY_DEFAULT_EFFORT` | `(模型默认)` | `low` / `medium` / `high` |
+| timeoutMs | `DSH_AGY_TIMEOUT_MS` | `600000` | 单轮看门狗 |
+| extraArgs | `DSH_AGY_EXTRA_ARGS` | — | 附加 agy 参数（空格分隔） |
+
+### 权限模式 —— 必读
+
+agy 有**自己的**工具循环，会自己做文件编辑和 shell 执行。桥接层映射为
+三种模式：
+
+- **plan** —— 只读，体验桥接的安全默认。
+- **accept-edits** —— agy 可以不经询问改文件。
+- **skip** —— `--dangerously-skip-permissions`：agy **所有**工具免审批。
+  非交互 DSH 轮次需要它（或 plan），因为 agy 的权限提示会卡死 print
+  模式；但这意味着真实的无人值守 写/执行 权限。设置面板里这个按钮是
+  红色的。
+
+DSH 侧的工具与权限不受影响 —— 这里只约束 agy 子进程在自己工作区能做什么。
+
+## 工作原理
+
+一次 DSH 模型调用 = 一个短生命周期 `agy -p --output-format stream-json`
+进程。NDJSON 事件流被解析、归一化并映射为 DSH StreamChunk：思考 →
+reasoning 块，文本 → text 块，工具活动 → 注记 reasoning 块，结果信封 →
+usage + finish。会话 id 优先取自流本身，conversations 目录快照对比作为
+兜底。不逆向数据库、不解码 protobuf、不碰 token 文件。
+
+## 已知差距
+
+见 [docs/KNOWN-GAPS.md](docs/KNOWN-GAPS.md)。要点：图片不转发（agy print
+模式纯文本）；DSH 工具不暴露给 agy（MCP 反向桥接是后续工作）。
+
+## 免责与风险提示
+
+本插件只启动**官方未修改**的 `agy` 二进制并消费其公开 print 输出，
+不解码内部数据库、不触碰 OAuth token。自动化订阅 CLI 仍可能与提供方
+服务条款冲突（Google Antigravity ToS §6 语境）；风险自负，被要求停止时
+请停止。
+
+## 许可证
+
+MIT

package/cordis.patch.yml

@@ -0,0 +1,14 @@
+# dsh-agy-link bundle patch — inserts the antigravity (agy CLI) provider
+# plugin entry into the composition. Users install via:
+#   dsh plugin --profile web add dsh-agy-link
+- insert:
+    - id: agy-link
+      name: 'dsh-agy-link'
+      config:
+        enabled: !!js "process.env.DSH_AGY_ENABLED ?? 'true'"
+        agyBin: !!js "process.env.DSH_AGY_BIN ?? ''"
+        # permissionMode: skip | plan | accept-edits  (skip passes
+        # --dangerously-skip-permissions; see README security notes)
+        permissionMode: !!js "process.env.DSH_AGY_MODE ?? 'skip'"
+        defaultModel: !!js "process.env.DSH_AGY_DEFAULT_MODEL ?? ''"
+        defaultEffort: !!js "process.env.DSH_AGY_DEFAULT_EFFORT ?? ''"

package/dist/client.js

@@ -0,0 +1,262 @@
+window.__ModuleLoader__.load({
+	id: "dsh-agy-link",
+	factory: (require) => {
+		var module = { exports: {} };
+		var exports = module.exports;
+		Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+		//#region src/client/index.ts
+		const { createElement: h, useState, useEffect } = require("react");
+		const reactDom = require("react-dom");
+		const win = globalThis;
+		const bodyEl = win.document?.body;
+		const portalToBody = bodyEl != null && reactDom.createPortal ? (node) => reactDom.createPortal(node, bodyEl) : (node) => node;
+		const name = "dsh-agy-link-client";
+		const inject = ["slots"];
+		const base = win.location?.origin ?? "";
+		async function getStatus() {
+			try {
+				const res = await win.fetch?.(base + "/plugins/agy-link/status");
+				if (!res || !res.ok) return null;
+				return await res.json();
+			} catch {
+				return null;
+			}
+		}
+		async function postJson(path, body) {
+			try {
+				return await win.fetch?.(base + path, {
+					method: "POST",
+					headers: { "Content-Type": "application/json" },
+					body: JSON.stringify(body)
+				}) ?? null;
+			} catch {
+				return null;
+			}
+		}
+		const S = {
+			row: {
+				display: "flex",
+				alignItems: "center",
+				gap: "8px",
+				marginBottom: "8px"
+			},
+			btn: {
+				padding: "4px 10px",
+				borderRadius: "6px",
+				border: "1px solid rgba(128,128,128,0.4)",
+				background: "rgba(128,128,128,0.12)",
+				color: "inherit",
+				cursor: "pointer",
+				fontSize: "12px"
+			},
+			btnPrimary: {
+				padding: "6px 12px",
+				borderRadius: "6px",
+				border: "1px solid rgba(64,140,255,0.6)",
+				background: "rgba(64,140,255,0.25)",
+				color: "inherit",
+				cursor: "pointer",
+				fontSize: "13px"
+			},
+			input: {
+				flex: "1",
+				padding: "6px 8px",
+				borderRadius: "6px",
+				border: "1px solid rgba(128,128,128,0.4)",
+				background: "transparent",
+				color: "inherit",
+				fontSize: "12px"
+			},
+			muted: {
+				color: "#9aa0a6",
+				fontSize: "12px"
+			}
+		};
+		function apply(ctx) {
+			const AgyPanel = () => {
+				const [open, setOpen] = useState(false);
+				const [status, setStatus] = useState(null);
+				const [code, setCode] = useState("");
+				const [busy, setBusy] = useState(false);
+				const [notice, setNotice] = useState("");
+				useEffect(() => {
+					if (!open) return;
+					let alive = true;
+					const tick = async () => {
+						const st = await getStatus();
+						if (alive) setStatus(st);
+					};
+					tick();
+					const timer = setInterval(tick, 3e3);
+					return () => {
+						alive = false;
+						clearInterval(timer);
+					};
+				}, [open]);
+				const dot = status === null ? "#9aa0a6" : status.dormantReason ? "#f5a623" : status.auth?.phase === "pending" || status.auth?.phase === "failed" || status.auth?.phase === "submitting" ? "#f5a623" : status.lastRun && !status.lastRun.ok ? "#e5484d" : "#30a46c";
+				const startAuth = async () => {
+					setBusy(true);
+					setNotice("");
+					await postJson("/plugins/agy-link/auth", {});
+					const st = await getStatus();
+					setStatus(st);
+					setBusy(false);
+				};
+				const submitCode = async () => {
+					if (code.trim() === "") return;
+					setBusy(true);
+					await postJson("/plugins/agy-link/auth-code", { code: code.trim() });
+					setCode("");
+					const st = await getStatus();
+					setStatus(st);
+					setNotice(st?.auth?.message ?? "");
+					setBusy(false);
+				};
+				const setCfg = async (key, value) => {
+					setBusy(true);
+					await postJson("/plugins/agy-link/config", {
+						key,
+						value
+					});
+					const st = await getStatus();
+					setStatus(st);
+					setBusy(false);
+				};
+				const badge = h("button", {
+					type: "button",
+					onClick: () => setOpen(!open),
+					style: {
+						background: "transparent",
+						border: "none",
+						cursor: "pointer",
+						padding: "2px 6px",
+						fontSize: "14px",
+						lineHeight: 1
+					},
+					title: "Antigravity (agy) bridge"
+				}, h("span", { style: {
+					display: "inline-block",
+					width: "9px",
+					height: "9px",
+					borderRadius: "50%",
+					background: dot
+				} }));
+				if (!open) return badge;
+				const needsAuth = status !== null && !status.dormantReason && status.auth !== void 0 && status.auth.phase !== "ok";
+				const dormantLine = h("div", null, "Bridge dormant: ", status?.dormantReason ?? "");
+				const infoBlock = h("div", { style: {
+					...S.muted,
+					lineHeight: 1.5
+				} }, h("div", null, "agy: ", status?.bin ?? "not found", " — v", status?.version ?? "?"), h("div", null, "auth: ", status?.auth?.phase ?? "unknown"), h("div", null, "models: ", String(status?.catalog?.count ?? 0), " — ", status?.catalog?.source ?? ""), h("div", null, "bindings: ", String(status?.bindings ?? 0)), h("div", null, "last run: ", status?.lastRun ? (status.lastRun.ok ? "ok" : status.lastRun.code) + " — " + status.lastRun.model : "none"));
+				const modeRow = h("div", { style: {
+					...S.row,
+					marginTop: "8px"
+				} }, h("span", { style: S.muted }, "mode:"), h("button", {
+					type: "button",
+					style: status?.permissionMode === "plan" ? S.btnPrimary : S.btn,
+					onClick: () => void setCfg("permissionMode", "plan")
+				}, "plan"), h("button", {
+					type: "button",
+					style: status?.permissionMode === "accept-edits" ? S.btnPrimary : S.btn,
+					onClick: () => void setCfg("permissionMode", "accept-edits")
+				}, "accept-edits"), h("button", {
+					type: "button",
+					style: status?.permissionMode === "skip" ? {
+						...S.btn,
+						color: "#e5484d",
+						borderColor: "rgba(229,72,77,0.6)"
+					} : S.btn,
+					onClick: () => void setCfg("permissionMode", "skip")
+				}, "skip"));
+				const effortRow = h("div", { style: S.row }, h("span", { style: S.muted }, "effort:"), h("button", {
+					type: "button",
+					style: status?.defaultEffort === "low" ? S.btnPrimary : S.btn,
+					onClick: () => void setCfg("defaultEffort", "low")
+				}, "low"), h("button", {
+					type: "button",
+					style: status?.defaultEffort === "medium" ? S.btnPrimary : S.btn,
+					onClick: () => void setCfg("defaultEffort", "medium")
+				}, "medium"), h("button", {
+					type: "button",
+					style: status?.defaultEffort === "high" ? S.btnPrimary : S.btn,
+					onClick: () => void setCfg("defaultEffort", "high")
+				}, "high"), h("button", {
+					type: "button",
+					style: status?.defaultEffort === "" ? S.btnPrimary : S.btn,
+					onClick: () => void setCfg("defaultEffort", "")
+				}, "auto"));
+				const skipWarn = h("div", { style: S.muted }, "skip runs agy tools with --dangerously-skip-permissions (no approval prompts). plan is the safe read-only default.");
+				const authBlock = h("div", null, h("div", { style: {
+					fontWeight: 600,
+					marginBottom: "4px"
+				} }, "Google login required"), h("div", null, "agy is not signed in. Start the login flow, scan the QR or open the URL, then paste the authorization code below."), h("img", {
+					src: base + "/plugins/agy-link/qr",
+					alt: "auth QR",
+					width: 200,
+					height: 200,
+					style: {
+						display: "block",
+						margin: "8px auto"
+					}
+				}), h("div", { style: { wordBreak: "break-all" } }, status?.auth?.url ?? ""), h("div", { style: S.row }, h("input", {
+					style: S.input,
+					value: code,
+					placeholder: "authorization code",
+					onChange: (e) => setCode(e.target.value)
+				}), h("button", {
+					type: "button",
+					style: S.btnPrimary,
+					disabled: busy,
+					onClick: () => void submitCode()
+				}, "Submit code"), h("button", {
+					type: "button",
+					style: S.btn,
+					disabled: busy,
+					onClick: () => void startAuth()
+				}, "Restart login")), notice !== "" ? h("div", null, notice) : null);
+				const body = status?.dormantReason ? dormantLine : needsAuth ? authBlock : h("div", null, infoBlock, modeRow, effortRow, skipWarn);
+				const header = h("div", { style: {
+					display: "flex",
+					justifyContent: "space-between",
+					alignItems: "center",
+					marginBottom: "8px"
+				} }, h("span", { style: {
+					fontWeight: 600,
+					fontSize: "13px"
+				} }, "Antigravity bridge"), h("button", {
+					type: "button",
+					style: S.btn,
+					onClick: () => setOpen(false)
+				}, "close"));
+				const popover = h("div", { style: {
+					position: "fixed",
+					bottom: "56px",
+					left: "16px",
+					width: "300px",
+					maxHeight: "70vh",
+					overflowY: "auto",
+					padding: "12px 14px",
+					borderRadius: "10px",
+					border: "1px solid rgba(128,128,128,0.35)",
+					background: "rgba(28,28,32,0.98)",
+					boxShadow: "0 8px 32px rgba(0,0,0,0.5)",
+					zIndex: 1e3
+				} }, header, body);
+				return h("div", { style: { display: "contents" } }, badge, portalToBody(popover));
+			};
+			ctx.slots.inject("sidebar.footer.action", () => {
+				return ctx.slots.register({
+					name: "ui-sidebar",
+					id: "agy-link",
+					order: 30,
+					label: "Antigravity"
+				}, AgyPanel);
+			});
+		}
+		//#endregion
+		exports.apply = apply;
+		exports.inject = inject;
+		exports.name = name;
+		return module.exports;
+	}
+});

package/dist/index.d.ts

@@ -0,0 +1,7 @@
+import { Context } from "@deepseek-ai/cordis";
+//#region src/index.d.ts
+declare const name = "dsh-agy-link";
+declare const inject: string[];
+declare function apply(ctx: Context, entryConfig?: Record<string, unknown>): void;
+//#endregion
+export { apply, inject, name };