dsh-agy-link 0.1.2

package/docs/AUTH.md

@@ -0,0 +1,19 @@
+# Authentication notes
+
+The plugin never stores credentials. Login is the official agy CLI flow:
+
+1. `/agy auth` spawns an agy probe that prints the Google consent URL.
+2. You open the URL, approve, and get an authorization code.
+3. `/agy auth-code <code>` (or the GUI paste box) feeds the code to the
+   still-running probe on stdin; agy completes the exchange itself.
+
+The token lands wherever agy itself puts it
+(`~/.gemini/antigravity-cli/antigravity-oauth-token`). The plugin:
+
+- never reads, copies, moves, or deletes that file;
+- never logs authorization codes (the `/agy doctor` report redacts auth
+  URLs, `4/...` codes, and bearer tokens before writing);
+- kills the login probe (process group) on cancel/dispose.
+
+Expiry: when the token expires mid-session, calls fail fast with an
+`AUTH` error pointing at `/agy auth`; no retries burn your quota.

package/docs/KNOWN-GAPS.md

@@ -0,0 +1,41 @@
+# Known gaps
+
+Deliberate v1 boundaries and upstream-behavior notes.
+
+## Not forwarded to agy
+
+- **Images / attachments** — agy print mode (`-p`) accepts text only.
+  Image blocks in DSH messages are skipped silently.
+- **DSH tools** — agy runs its own closed tool loop; DSH tool schemas are
+  not exported to it. The reverse direction (agy calling DSH tools over MCP)
+  is tracked as future work.
+- **Structured outputs** — `--json-schema` exists on agy but is not wired
+  through DSH tool-call generation in v1.
+
+## Mapping choices
+
+- agy tool activity becomes **reasoning-block annotations**
+  (`[agy tool: name] ... -> output`), not DSH tool-call blocks — there is no
+  DSH-side tool round-trip to honor.
+- Gemini effort suffixes fold into one base model with selectable efforts
+  (`gemini-3-6-flash` + `--effort`); Claude / GPT-OSS slugs stay verbatim
+  (agy rejects `--effort` for them).
+- Compaction / session-title auxiliary calls run as one-shot agy turns in
+  forced `plan` mode, capped at 800K chars of history.
+
+## Upstream behaviors observed
+
+- Permission prompts hang print mode (upstream issue #318) — hence the
+  permission-mode design.
+- `--sandbox` must not combine with `--dangerously-skip-permissions`
+  (upstream issue #36).
+- First unauthenticated call takes ~60-70s to fail (agy waits for a pasted
+  code); later failures are faster.
+
+## Fallbacks
+
+- If `agy models` fails (signed out, old CLI), a bundled fallback catalog is
+  served so the model picker is never empty; unknown ids are still accepted.
+- Conversation-id discovery prefers stream-embedded ids and falls back to a
+  conversations-directory snapshot diff (newest file wins; ambiguity is
+  tolerated).

package/docs/SECURITY-NOTES.md

@@ -0,0 +1,29 @@
+# Security notes
+
+Threat model and boundaries for dsh-agy-link.
+
+## What the plugin executes
+
+- Only the agy binary resolved from config (`agyBin`) or `PATH` /
+  `~/.local/bin`. No shell interpolation: argv is passed as an array.
+- Prompt text is passed as a single `-p` argument, never through a shell.
+- Every spawn is its own detached process group; watchdog + abort signal
+  kill the whole tree (no orphaned agy processes).
+
+## What it can do to your machine
+
+Whatever agy itself may do under the configured permission mode. **skip**
+(`--dangerously-skip-permissions`) grants unattended file writes and shell
+execution inside agy's workspace — treat it like giving any other agent
+skip-permissions. The GUI marks this mode red for a reason.
+
+## What it never touches
+
+- The OAuth token file (see [AUTH.md](AUTH.md)).
+- DSH-side secrets, API keys, or other providers' configuration.
+
+## Report hygiene
+
+`/agy doctor` writes its report with redaction: Google auth URLs,
+`4/...` authorization codes, `ya29.*` tokens, and `Bearer` headers are
+stripped before the file hits disk. Still read it before attaching.

package/docs/market-pr-draft.md

@@ -0,0 +1,41 @@
+# Market PR draft (awesome-dsh-plugin)
+
+Target: awesome-dsh-plugin repository, `data/plugins/<owner>__dsh-agy-link.yml`.
+Replace `<owner>` with the GitHub owner chosen at publish time. File the PR
+after: npm published, GitHub repo created, >= 10 commits, >= 1 day old,
+topic `dsh-plugin` set.
+
+---
+
+```yaml
+name: dsh-agy-link
+description: Google Antigravity (agy CLI) models for DSH — streaming chat, thinking, tool activity, usage, in-GUI Google OAuth login.
+npm: dsh-agy-link
+repository: https://github.com/<owner>/dsh-agy-link
+category: model
+tags:
+  - antigravity
+  - gemini
+  - agy
+  - model-provider
+```
+
+PR body draft:
+
+```markdown
+## Add dsh-agy-link (model)
+
+- **npm**: https://www.npmjs.com/package/dsh-agy-link
+- **repo**: https://github.com/<owner>/dsh-agy-link
+- **category**: model
+
+Brings Google Antigravity models (Gemini / Claude / GPT-OSS slugs exposed by
+the agy CLI) into DSH as a first-class provider route: full streaming with
+thinking and tool-activity annotation, token usage, session-conversation
+binding, model discovery with effort folding, in-GUI Google OAuth login with
+QR, an agy_ask delegation tool, and a /agy command family with a redacted
+doctor export. Dormant-safe when agy is missing or signed out.
+
+Checklist: dsh bundle manifest present; >= 10 commits; repo age >= 1 day;
+`dsh-plugin` topic set on the repository.
+```

package/package.json

@@ -0,0 +1,100 @@
+{
+  "name": "dsh-agy-link",
+  "version": "0.1.2",
+  "description": "Google Antigravity (agy CLI) models for DeepSeek Harness — stream Gemini/Claude/GPT-OSS subscriptions into DSH with thinking, tool activity, token usage and in-GUI Google OAuth login.",
+  "type": "module",
+  "license": "MIT",
+  "keywords": [
+    "dsh-plugin",
+    "dsh",
+    "deepseek-harness",
+    "antigravity",
+    "agy",
+    "gemini"
+  ],
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "default": "./dist/index.js"
+    },
+    "./client": "./dist/client.js",
+    "./cordis.patch.yml": "./cordis.patch.yml",
+    "./package.json": "./package.json"
+  },
+  "dependencies": {
+    "qrcode": "^1.5.4"
+  },
+  "peerDependencies": {
+    "@deepseek-ai/cordis": "*",
+    "@deepseek-ai/dsh-commands": "*",
+    "@deepseek-ai/dsh-llm": "*",
+    "@deepseek-ai/dsh-tools": "*",
+    "react": "^18.0.0"
+  },
+  "peerDependenciesMeta": {
+    "react": {
+      "optional": true
+    },
+    "@deepseek-ai/cordis": {
+      "optional": true
+    },
+    "@deepseek-ai/dsh-commands": {
+      "optional": true
+    },
+    "@deepseek-ai/dsh-llm": {
+      "optional": true
+    },
+    "@deepseek-ai/dsh-tools": {
+      "optional": true
+    }
+  },
+  "devDependencies": {
+    "@deepseek-ai/cordis": "^4.0.1",
+    "@deepseek-ai/dsh-commands": "^0.1.0-rc.6",
+    "@deepseek-ai/dsh-llm": "^0.1.0-rc.6",
+    "@deepseek-ai/dsh-tools": "^0.1.0-rc.6",
+    "@types/node": "^24.3.0",
+    "@types/qrcode": "^1.5.5",
+    "tsdown": "^0.22.14",
+    "typescript": "^5.9.2"
+  },
+  "dsh": {
+    "bundle": {
+      "patch": "./cordis.patch.yml"
+    },
+    "client": {
+      "inject": [
+        "slots"
+      ],
+      "platform": "web"
+    }
+  },
+  "files": [
+    "dist",
+    "cordis.patch.yml",
+    "README.md",
+    "README.zh.md",
+    "LICENSE",
+    "CHANGELOG.md",
+    "docs"
+  ],
+  "scripts": {
+    "build": "tsdown",
+    "check": "tsc --noEmit",
+    "test": "node --experimental-transform-types --test \"test/**/*.test.ts\"",
+    "prepack": "npm run build"
+  },
+  "engines": {
+    "node": ">=24.0.0"
+  },
+  "repository": {
+    "type": "git",
+    "url": "git+ssh://git@github.com/amlyczz/dsh-agy-link.git"
+  },
+  "bugs": {
+    "url": "https://github.com/amlyczz/dsh-agy-link/issues"
+  },
+  "homepage": "https://github.com/amlyczz/dsh-agy-link#readme"
+}