dsh-agy 0.1.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 dsh-agy contributors
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,174 @@
+# dsh-agy
+
+Google Antigravity (agy) access for [DeepSeek Harness](https://github.com/deepseek-ai/deepseek-harness):
+OAuth authentication, a multi-account pool with automatic 429 rotation, device
+fingerprinting, and both CLI and web management.
+
+> 中文文档：[docs/README_zh.md](docs/README_zh.md)
+
+## Features
+
+- **OAuth login**: one-click sign-in via browser OAuth callback, with headless
+  paste-URL mode and a remote paste-credential blob channel.
+- **Two management surfaces**: web and CLI, either one works, core features are
+  the same.
+- **Multi-account pool**: encrypted account store, automatic rotation on rate
+  limits, per-account cooldown with tiered backoff, per-account device
+  fingerprints.
+- **Quota dashboard**: only active when DSH Web is running; append `/agy` to
+  your dsh web address: login, account management, per-model quota bars, model
+  testing, credential export/import, fingerprint management.
+- **CLI**: `dsh-agy login|status|import|verify|logout` works standalone, with or
+  without a harness.
+
+## Quickstart
+
+### Path A: DSH Web GUI Users (Recommended — 100% Web UI, zero CLI commands)
+
+For users using DeepSeek Harness browser workspace / Web GUI:
+
+```sh
+# 1. Install plugin into DSH web profile (via dsh CLI, or pnpx/npx if dsh is not in PATH)
+dsh plugin --profile web add dsh-agy
+# or: npx @deepseek-ai/dsh plugin --profile web add dsh-agy
+
+# 2. Launch DSH Web
+dsh web
+
+# 3. Open dashboard at http://127.0.0.1:3080/agy
+# Click "Login with Google", complete OAuth authorization, and start using the agy provider
+```
+
+### Path B: Headless / Terminal Only (Standalone CLI)
+
+For Linux VPS, SSH remote servers, or headless CI environments:
+
+```sh
+# Run directly without global install (npx / pnpx)
+npx dsh-agy login
+npx dsh-agy status
+
+# Or install globally
+npm install -g dsh-agy
+dsh-agy login          # interactive OAuth (browser, --headless paste, or --blob)
+dsh-agy status         # list accounts + quota summary
+dsh-agy verify         # refresh + health check
+dsh-agy import <file>  # import agy auth.json or credential blob (--blob)
+dsh-agy logout         # remove account
+```
+
+### Path C: Local Development & Link
+
+```sh
+git clone https://github.com/chaos-03x/dsh-agy.git
+cd dsh-agy && pnpm install && pnpm run build
+dsh plugin --profile web link .
+```
+
+Requires Node >= 20.
+
+## Uninstall
+
+```sh
+# 1. Remove the DSH plugin from a profile
+dsh plugin --profile web remove dsh-agy
+
+# 2. Uninstall the CLI
+npm uninstall -g dsh-agy
+
+# 3. Optional: delete local account data (accounts + master key + fingerprint override)
+dsh-agy logout              # remove accounts first (or skip)
+rm -f ~/.dsh/agy-accounts.json
+# remove only the AGY_MASTER_KEY line from ~/.dsh/.credentials.yaml — keep other keys!
+rm -f ~/.dsh/agy-fingerprint-data.json   # only if you created an override
+
+# 4. Optional: revoke the Google-side authorization
+#    Google account security → Third-party access → revoke "Antigravity"
+```
+
+Deleting local files does **not** revoke Google-side tokens; the refresh token stays
+valid until it expires or you revoke it in your Google account security settings.
+
+## Other things you may care about
+
+### Rotation mechanics
+
+429 (Too Many Requests) responses:
+
+| Category | Behavior |
+|---|---|
+| `soft_rate_limit` (Retry-After < 3s) | immediate retry on the same account, no cooldown |
+| `rate_limited` | 5-minute cooldown + switch to the next account (same account when single) |
+| `quota_exhausted` ("quota reached", "individual quota", RESOURCE_EXHAUSTED…) | 24-hour cooldown — no further calls to that account for the day |
+| `unknown` | exponential backoff |
+
+401/403 → account revoked (marked for re-authentication). Success resets the failure
+counter.
+
+### About cache hits: why not 99% like DeepSeek V4?
+
+Bottom line: the cache hit strategy is decided by the model provider's cache
+mechanics (for us, Antigravity's); agy's mechanics differ from DeepSeek's in
+two ways, so its hit rate is naturally a notch below DeepSeek's.
+
+**First, the entry threshold.** DeepSeek's caching is on by default with no
+threshold — its very first request already hits a previously cached system
+prompt. agy's Gemini-tiered models only start caching once the request prefix
+reaches roughly 16k tokens, while DSH's default bare system prompt is only
+about 13k — below the line. So every new conversation's first 1-2 requests
+are 0%, until the accumulated messages pass 16k.
+
+**Second, how fast the cache updates.** DeepSeek refreshes its cache at the
+end of every request — only the newest message misses each round, giving
+near-100%. agy's cache updates lag: this round's additions are not hit in
+the next round — they enter the cache roughly two rounds later, and requests
+for the same content in between all count as misses. Every round wastes
+about 1.5-2× its additions; the long-conversation hit rate keeps rising as
+the context grows, bounded by the model's context window.
+
+**Practical tips**
+
+- Don't expect 99% from agy: the gap comes from upstream mechanics, with no
+  room to optimize.
+- If you have a weird number obsession, stuff some custom content into the
+  System Prompt (MCP / tool definitions / roleplay ...).
+
+### Storage & secrets
+
+- Accounts: `~/.dsh/agy-accounts.json` — AES-256-GCM encrypted; the master key lives
+  in `~/.dsh/.credentials.yaml` (`AGY_MASTER_KEY`, 0600). `$DSH_HOME` relocates both.
+- Fingerprint pools (version strings, SDK clients) are user-overridable via
+  `~/.dsh/agy-fingerprint-data.json` — no code release needed to keep them current.
+
+## ⚠️ Disclaimer
+
+This plugin authenticates with Google's consumer OAuth client that ships with the
+Antigravity desktop product and uses the Antigravity Cloud Code API outside of that
+product. This may violate Antigravity's terms of service. **Use at your own risk** —
+accounts can be rate-limited, throttled, or banned. Multi-account rotation, device
+fingerprinting, and the signature-bypass sentinel are enabled by default and are
+designed to work around upstream limits; you are responsible for how you use them and
+for any account consequences.
+
+## Credits
+
+This project references logic and data from the following MIT-licensed sources:
+
+| Source | Content |
+|---|---|
+| [opencode-antigravity-auth](https://github.com/NoeFabris/opencode-antigravity-auth) (archived) | OAuth flow shape, account-store schema & versioned migration, 429/backoff concepts, fingerprint design |
+| [antigravity-claude-proxy PR #170](https://github.com/badrisnarayanan/antigravity-claude-proxy/pull/170) | Device fingerprint generation (via opencode-antigravity-auth) |
+| [OmniRoute](https://github.com/diegosouzapw/OmniRoute) | Wire format (envelope, headers, SSE), endpoint order, `agy` token-file parsing, paste-credential blob codec, thoughtSignature replay, 429 category engine |
+| [DeepSeek Harness](https://github.com/deepseek-ai/deepseek-harness) | Plugin shell, `LlmAdapter` seam, DSH conventions |
+
+## Development
+
+```sh
+pnpm install
+pnpm test                      # vitest, fixture-driven, no network
+pnpm run record:fixtures       # re-record real-API fixtures (needs a real account)
+pnpm run e2e                   # real-account end-to-end (needs AGY_REFRESH_TOKEN)
+pnpm run debug:request         # endpoint/header bisection probe
+pnpm run verify:tools          # live two-turn tool-signature check
+npm pack --dry-run             # verify the publishable artifact
+```

package/bin/dsh-agy.js

@@ -0,0 +1,6 @@
+#!/usr/bin/env node
+// dsh-agy CLI launcher (built output).
+import { createProgram } from '../lib/cli/index.mjs'
+
+const program = createProgram()
+await program.parseAsync(process.argv)

package/cordis.patch.yml

@@ -0,0 +1,13 @@
+# dsh-agy bundle patch: mounts the dsh-agy plugins into a dsh profile.
+
+# Install with: dsh plugin --profile <name> add dsh-agy
+# The loader inserts these rows; the main plugin registers the agy LLM adapter
+# routes, the web entry registers the /agy UI once ctx.webServer activates
+# (it stays pending in profiles without a web server).
+
+- insert:
+    - id: dsh-agy
+      name: 'dsh-agy'
+
+    - id: dsh-agy-web
+      name: 'dsh-agy/web'

package/lib/blob-D1e7_uT1.mjs

@@ -0,0 +1,63 @@
+import { t as __exportAll } from "./rolldown-runtime-D7D4PA-g.mjs";
+//#region src/oauth/blob.ts
+var blob_exports = /* @__PURE__ */ __exportAll({
+	CREDENTIAL_BLOB_PREFIX: () => CREDENTIAL_BLOB_PREFIX,
+	CREDENTIAL_BLOB_PROVIDER: () => "agy",
+	decodeCredentialBlob: () => decodeCredentialBlob,
+	encodeCredentialBlob: () => encodeCredentialBlob
+});
+/**
+* Paste-safe credential blob codec for remote login.
+*
+* Google's `firstparty/nativeapp` consent for this embedded client only releases
+* the authorization code when the loopback redirect is reachable, which never
+* happens on a remote host. A local helper (the `dsh-agy login --remote` path)
+* runs the OAuth on the user's own machine, encodes the raw token response into
+* a single-line blob with this codec, and the remote harness decodes it.
+*
+* Format: `dsh-agy-cred-v1.` + base64url(JSON{v, provider, tokens}) — URL/shell
+* safe, survives copy-paste through terminals.
+*/
+const CREDENTIAL_BLOB_PREFIX = "dsh-agy-cred-v1.";
+const CREDENTIAL_BLOB_VERSION = 1;
+/** Encode a provider + raw OAuth token response into a single-line blob. */
+function encodeCredentialBlob(provider, tokens) {
+	if (!provider || !provider.trim()) throw new Error("encodeCredentialBlob: a non-empty provider is required");
+	if (!tokens || typeof tokens !== "object" || !tokens.access_token) throw new Error("encodeCredentialBlob: tokens with an access_token are required");
+	const payload = {
+		v: CREDENTIAL_BLOB_VERSION,
+		provider: provider.trim(),
+		tokens
+	};
+	const json = JSON.stringify(payload);
+	return `${CREDENTIAL_BLOB_PREFIX}${Buffer.from(json, "utf8").toString("base64url")}`;
+}
+/**
+* Decode and validate a credential blob. Throws on wrong prefix, malformed
+* payload, version mismatch, provider mismatch, or missing access_token.
+*/
+function decodeCredentialBlob(blob) {
+	if (typeof blob !== "string" || !blob.startsWith("dsh-agy-cred-v1.")) throw new Error(`decodeCredentialBlob: invalid format — must start with "${CREDENTIAL_BLOB_PREFIX}"`);
+	const b64 = blob.slice(16).trim();
+	if (!/^[A-Za-z0-9_-]+$/.test(b64)) throw new Error("decodeCredentialBlob: invalid payload — not base64url");
+	let parsed;
+	try {
+		parsed = JSON.parse(Buffer.from(b64, "base64url").toString("utf8"));
+	} catch {
+		throw new Error("decodeCredentialBlob: payload is not valid JSON");
+	}
+	if (!parsed || typeof parsed !== "object") throw new Error("decodeCredentialBlob: payload is not an object");
+	if (parsed.v !== CREDENTIAL_BLOB_VERSION) throw new Error(`decodeCredentialBlob: unsupported blob version ${String(parsed.v)}`);
+	if (parsed.provider !== "agy") throw new Error(`decodeCredentialBlob: provider mismatch — blob is for "${String(parsed.provider)}" but this plugin serves "agy"`);
+	const tokens = parsed.tokens;
+	if (!tokens || typeof tokens !== "object") throw new Error("decodeCredentialBlob: tokens are missing");
+	if (typeof tokens.access_token !== "string") throw new Error("decodeCredentialBlob: access_token is missing");
+	return {
+		provider: parsed.provider,
+		tokens
+	};
+}
+//#endregion
+export { decodeCredentialBlob as n, encodeCredentialBlob as r, blob_exports as t };
+
+//# sourceMappingURL=blob-D1e7_uT1.mjs.map

package/lib/blob-D1e7_uT1.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"blob-D1e7_uT1.mjs","names":[],"sources":["../src/oauth/blob.ts"],"sourcesContent":["/**\n * Paste-safe credential blob codec for remote login.\n *\n * Google's `firstparty/nativeapp` consent for this embedded client only releases\n * the authorization code when the loopback redirect is reachable, which never\n * happens on a remote host. A local helper (the `dsh-agy login --remote` path)\n * runs the OAuth on the user's own machine, encodes the raw token response into\n * a single-line blob with this codec, and the remote harness decodes it.\n *\n * Format: `dsh-agy-cred-v1.` + base64url(JSON{v, provider, tokens}) — URL/shell\n * safe, survives copy-paste through terminals.\n */\n\nexport const CREDENTIAL_BLOB_PREFIX = 'dsh-agy-cred-v1.'\n\nconst CREDENTIAL_BLOB_VERSION = 1\n\n/** Provider this blob codec accepts (bound at decode time to prevent replay across providers). */\nexport const CREDENTIAL_BLOB_PROVIDER = 'agy'\n\nexport interface CredentialBlobTokens {\n  access_token?: string\n  refresh_token?: string\n  id_token?: string\n  expires_in?: number\n  scope?: string\n  [key: string]: unknown\n}\n\nexport interface CredentialBlob {\n  provider: string\n  tokens: CredentialBlobTokens\n}\n\n/** Encode a provider + raw OAuth token response into a single-line blob. */\nexport function encodeCredentialBlob(provider: string, tokens: CredentialBlobTokens): string {\n  if (!provider || !provider.trim()) {\n    throw new Error('encodeCredentialBlob: a non-empty provider is required')\n  }\n  if (!tokens || typeof tokens !== 'object' || !tokens.access_token) {\n    throw new Error('encodeCredentialBlob: tokens with an access_token are required')\n  }\n  const payload = { v: CREDENTIAL_BLOB_VERSION, provider: provider.trim(), tokens }\n  const json = JSON.stringify(payload)\n  return `${CREDENTIAL_BLOB_PREFIX}${Buffer.from(json, 'utf8').toString('base64url')}`\n}\n\n/**\n * Decode and validate a credential blob. Throws on wrong prefix, malformed\n * payload, version mismatch, provider mismatch, or missing access_token.\n */\nexport function decodeCredentialBlob(blob: string): CredentialBlob {\n  if (typeof blob !== 'string' || !blob.startsWith(CREDENTIAL_BLOB_PREFIX)) {\n    throw new Error(`decodeCredentialBlob: invalid format — must start with \"${CREDENTIAL_BLOB_PREFIX}\"`)\n  }\n  const b64 = blob.slice(CREDENTIAL_BLOB_PREFIX.length).trim()\n  if (!/^[A-Za-z0-9_-]+$/.test(b64)) {\n    throw new Error('decodeCredentialBlob: invalid payload — not base64url')\n  }\n\n  let parsed: { v?: unknown; provider?: unknown; tokens?: unknown }\n  try {\n    parsed = JSON.parse(Buffer.from(b64, 'base64url').toString('utf8')) as typeof parsed\n  } catch {\n    throw new Error('decodeCredentialBlob: payload is not valid JSON')\n  }\n\n  if (!parsed || typeof parsed !== 'object') {\n    throw new Error('decodeCredentialBlob: payload is not an object')\n  }\n  if (parsed.v !== CREDENTIAL_BLOB_VERSION) {\n    throw new Error(`decodeCredentialBlob: unsupported blob version ${String(parsed.v)}`)\n  }\n  if (parsed.provider !== CREDENTIAL_BLOB_PROVIDER) {\n    throw new Error(\n      `decodeCredentialBlob: provider mismatch — blob is for \"${String(parsed.provider)}\" but this plugin serves \"${CREDENTIAL_BLOB_PROVIDER}\"`,\n    )\n  }\n  const tokens = parsed.tokens\n  if (!tokens || typeof tokens !== 'object') {\n    throw new Error('decodeCredentialBlob: tokens are missing')\n  }\n  if (typeof (tokens as CredentialBlobTokens).access_token !== 'string') {\n    throw new Error('decodeCredentialBlob: access_token is missing')\n  }\n\n  return { provider: parsed.provider, tokens: tokens as CredentialBlobTokens }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAaA,MAAa,yBAAyB;AAEtC,MAAM,0BAA0B;;AAoBhC,SAAgB,qBAAqB,UAAkB,QAAsC;CAC3F,IAAI,CAAC,YAAY,CAAC,SAAS,KAAK,GAC9B,MAAM,IAAI,MAAM,wDAAwD;CAE1E,IAAI,CAAC,UAAU,OAAO,WAAW,YAAY,CAAC,OAAO,cACnD,MAAM,IAAI,MAAM,gEAAgE;CAElF,MAAM,UAAU;EAAE,GAAG;EAAyB,UAAU,SAAS,KAAK;EAAG;CAAO;CAChF,MAAM,OAAO,KAAK,UAAU,OAAO;CACnC,OAAO,GAAG,yBAAyB,OAAO,KAAK,MAAM,MAAM,CAAC,CAAC,SAAS,WAAW;AACnF;;;;;AAMA,SAAgB,qBAAqB,MAA8B;CACjE,IAAI,OAAO,SAAS,YAAY,CAAC,KAAK,WAAA,kBAAiC,GACrE,MAAM,IAAI,MAAM,2DAA2D,uBAAuB,EAAE;CAEtG,MAAM,MAAM,KAAK,MAAM,EAA6B,CAAC,CAAC,KAAK;CAC3D,IAAI,CAAC,mBAAmB,KAAK,GAAG,GAC9B,MAAM,IAAI,MAAM,uDAAuD;CAGzE,IAAI;CACJ,IAAI;EACF,SAAS,KAAK,MAAM,OAAO,KAAK,KAAK,WAAW,CAAC,CAAC,SAAS,MAAM,CAAC;CACpE,QAAQ;EACN,MAAM,IAAI,MAAM,iDAAiD;CACnE;CAEA,IAAI,CAAC,UAAU,OAAO,WAAW,UAC/B,MAAM,IAAI,MAAM,gDAAgD;CAElE,IAAI,OAAO,MAAM,yBACf,MAAM,IAAI,MAAM,kDAAkD,OAAO,OAAO,CAAC,GAAG;CAEtF,IAAI,OAAO,aAAA,OACT,MAAM,IAAI,MACR,0DAA0D,OAAO,OAAO,QAAQ,EAAE,+BACpF;CAEF,MAAM,SAAS,OAAO;CACtB,IAAI,CAAC,UAAU,OAAO,WAAW,UAC/B,MAAM,IAAI,MAAM,0CAA0C;CAE5D,IAAI,OAAQ,OAAgC,iBAAiB,UAC3D,MAAM,IAAI,MAAM,+CAA+C;CAGjE,OAAO;EAAE,UAAU,OAAO;EAAkB;CAA+B;AAC7E"}

package/lib/cli/index.d.mts

@@ -0,0 +1,10 @@
+import { Command } from "commander";
+//#region src/oauth/constants.d.ts
+/** Default loopback callback used by the standalone CLI listener (fixed port, like opencode). */
+declare const AGY_DEFAULT_REDIRECT_URI = "http://localhost:51121/oauth-callback";
+//#endregion
+//#region src/cli/index.d.ts
+declare function createProgram(): Command;
+//#endregion
+export { AGY_DEFAULT_REDIRECT_URI, createProgram };
+//# sourceMappingURL=index.d.mts.map

package/lib/cli/index.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.mts","names":[],"sources":["../../src/oauth/constants.ts","../../src/cli/index.ts"],"mappings":";;;cA6Ba;;;iBC8NG,iBAAiB"}

package/lib/cli/index.mjs

@@ -0,0 +1,317 @@
+import { c as loadMasterKey, d as resolveMasterKeyCodec, i as JsonAccountStore, o as createAesGcmCodec, s as deriveKey, t as AgySessionManager, u as resolveDshHome, y as AGY_DEFAULT_REDIRECT_URI } from "../session-tawi2_uh.mjs";
+import { t as exchangeAntigravity } from "../exchange-MhFUiBAm.mjs";
+import { n as upsertImportedAccount, r as authorizeAntigravity, t as parseImportSource } from "../import-DnKzgr-0.mjs";
+import { r as encodeCredentialBlob } from "../blob-D1e7_uT1.mjs";
+import { readFileSync } from "node:fs";
+import { Command } from "commander";
+import { createInterface } from "node:readline/promises";
+import { stdin, stdout } from "node:process";
+import { createServer } from "node:http";
+//#region src/cli/callback-server.ts
+/** Loopback OAuth callback server for the standalone CLI login flow. */
+const SUCCESS_HTML = `<!doctype html><html><head><meta charset="utf-8"><title>Login successful</title></head>
+<body style="font-family:system-ui;text-align:center;padding:3rem">
+<h2>✓ Authentication successful</h2>
+<p>You can close this tab and return to the terminal.</p>
+</body></html>`;
+/** Listen on 127.0.0.1:<port>/oauth-callback and resolve with the code+state. */
+function startCallbackServer(options = {}) {
+	const port = options.port ?? 51121;
+	const timeoutMs = options.timeoutMs ?? 3e5;
+	let resolveResult;
+	let rejectResult;
+	const result = new Promise((resolve, reject) => {
+		resolveResult = resolve;
+		rejectResult = reject;
+	});
+	let resolveReady;
+	let rejectReady;
+	const ready = new Promise((resolve, reject) => {
+		resolveReady = resolve;
+		rejectReady = reject;
+	});
+	const server = createServer((req, res) => {
+		const url = new URL(req.url ?? "/", "http://localhost");
+		if (url.pathname === "/oauth-callback") {
+			const code = url.searchParams.get("code");
+			const state = url.searchParams.get("state");
+			if (!code || !state) {
+				res.writeHead(400, { "Content-Type": "text/html" });
+				res.end("<h2>Missing code or state</h2>");
+				return;
+			}
+			res.writeHead(200, {
+				"Content-Type": "text/html",
+				connection: "close"
+			});
+			res.end(SUCCESS_HTML);
+			resolveResult({
+				code,
+				state,
+				url: url.toString()
+			});
+			setTimeout(() => server.close(), 1500);
+			return;
+		}
+		res.writeHead(404);
+		res.end("Not found");
+	});
+	server.on("error", (error) => {
+		if (error.code === "EADDRINUSE") rejectResult(/* @__PURE__ */ new Error(`Port ${port} is already in use — pass --port to pick another.`));
+		else rejectResult(error);
+		rejectReady(error);
+	});
+	server.listen(port, "127.0.0.1", () => {
+		resolveReady();
+	});
+	const timeout = setTimeout(() => {
+		rejectResult(/* @__PURE__ */ new Error("Authentication timed out — no callback received."));
+		server.close();
+	}, timeoutMs);
+	return {
+		result,
+		ready,
+		async close() {
+			clearTimeout(timeout);
+			if (server.listening) {
+				server.closeAllConnections();
+				await new Promise((resolve) => server.close(() => resolve()));
+			}
+		}
+	};
+}
+/** Open a URL in the system browser (best effort). */
+async function openBrowser(url) {
+	const { spawn } = await import("node:child_process");
+	const platform = process.platform;
+	const command = platform === "darwin" ? ["open", url] : platform === "win32" ? [
+		"cmd",
+		"/c",
+		"start",
+		"",
+		url
+	] : ["xdg-open", url];
+	return new Promise((resolve) => {
+		const child = spawn(command[0], command.slice(1), { stdio: "ignore" });
+		child.on("error", () => resolve(false));
+		child.on("spawn", () => resolve(true));
+	});
+}
+//#endregion
+//#region src/cli/index.ts
+/**
+* dsh-agy CLI: login / status / import / verify / logout.
+* Standalone bin — the dsh launcher has no plugin subcommand slot, and the
+* remote paste-blob flow must run on machines without a harness.
+*/
+/** Package version, read from the shipped package.json — never hard-coded twice. */
+const { version: PACKAGE_VERSION } = JSON.parse(readFileSync(new URL("../../package.json", import.meta.url), "utf8"));
+function createStore(options = {}) {
+	const dshHome = resolveDshHome();
+	let codec;
+	if (options.readOnly) {
+		const masterKey = loadMasterKey(dshHome);
+		if (!masterKey) throw new Error("No agy account store found — run `dsh-agy login` first.");
+		codec = createAesGcmCodec(deriveKey(masterKey));
+	} else codec = resolveMasterKeyCodec(dshHome).codec;
+	return new JsonAccountStore({
+		file: `${dshHome}/agy-accounts.json`,
+		codec
+	});
+}
+/** Read-only store with a friendly error when no credentials exist yet. */
+function createReadOnlyStoreOrExit() {
+	try {
+		return createStore({ readOnly: true });
+	} catch (error) {
+		console.error(error instanceof Error ? error.message : String(error));
+		process.exit(1);
+	}
+}
+async function ask(question) {
+	const rl = createInterface({
+		input: stdin,
+		output: stdout
+	});
+	try {
+		return (await rl.question(question)).trim();
+	} finally {
+		rl.close();
+	}
+}
+/** Remote/SSH sessions cannot reach a local browser; auto-select headless paste. */
+function isRemoteSession() {
+	return !!(process.env.SSH_CONNECTION || process.env.SSH_CLIENT || process.env.SSH_TTY);
+}
+async function loginCommand(options) {
+	const store = createStore();
+	const redirectUri = `http://localhost:${options.port}/oauth-callback`;
+	if (!options.headless && isRemoteSession()) {
+		console.log("(SSH session detected — using headless paste flow; pass --headless explicitly to force)");
+		options.headless = true;
+	}
+	let callback;
+	if (!options.headless) {
+		callback = startCallbackServer({
+			port: options.port,
+			timeoutMs: Number(options.timeout) || 3e5
+		});
+		try {
+			await callback.ready;
+		} catch (error) {
+			console.error(error instanceof Error ? error.message : String(error));
+			process.exit(1);
+		}
+	}
+	const { url, verifier } = await authorizeAntigravity(redirectUri, options.project ?? "");
+	console.log(`\nOpen this URL in a browser to authorize:\n\n  ${url}\n`);
+	let code;
+	let state;
+	if (options.headless) {
+		const pasted = await ask("After approving, paste the full redirected URL here: ");
+		const parsed = new URL(pasted);
+		code = parsed.searchParams.get("code") ?? "";
+		state = parsed.searchParams.get("state") ?? "";
+		if (!code || !state) {
+			console.error("Error: pasted URL is missing code or state.");
+			process.exit(1);
+		}
+	} else {
+		if (!await openBrowser(url)) console.log("(Could not open a browser automatically — open the URL manually.)");
+		let callbackResult;
+		try {
+			callbackResult = await callback.result;
+		} catch (error) {
+			console.error(error instanceof Error ? error.message : String(error));
+			process.exit(1);
+		}
+		code = callbackResult.code;
+		state = callbackResult.state;
+	}
+	const result = await exchangeAntigravity(code, state, redirectUri, verifier);
+	if (result.type === "failed") {
+		console.error(`Login failed: ${result.error}`);
+		process.exit(1);
+	}
+	if (options.blob) {
+		const blob = encodeCredentialBlob("agy", {
+			access_token: result.access,
+			refresh_token: result.refresh.split("|")[0],
+			expires_in: Math.max(0, Math.round((result.expires - Date.now()) / 1e3))
+		});
+		console.log(`\nPaste this blob into the remote dashboard/CLI:\n\n${blob}\n`);
+	} else {
+		const { account, created } = await upsertImportedAccount(store, {
+			accessToken: result.access,
+			refreshToken: result.refresh.split("|")[0],
+			tokenType: "Bearer",
+			expiresAt: new Date(result.expires).toISOString(),
+			authMethod: "oauth",
+			email: result.email ?? null,
+			projectId: result.projectId || null
+		}, { overwriteExisting: true });
+		console.log(`${created ? "Added" : "Updated"} account: ${account.email ?? "(no email)"} (project: ${result.projectId || "default"})`);
+	}
+	await callback?.close();
+}
+async function statusCommand() {
+	const store = createReadOnlyStoreOrExit();
+	const storage = await store.load();
+	if (storage.accounts.length === 0) {
+		console.log("No agy accounts. Run `dsh-agy login` first.");
+		return;
+	}
+	console.log(`\n${storage.accounts.length} account(s), active index ${storage.activeIndex}:\n`);
+	const sessions = new AgySessionManager({ store });
+	for (const [index, account] of storage.accounts.entries()) {
+		const marker = index === storage.activeIndex ? "★" : " ";
+		const state = account.enabled === false ? "disabled" : account.verificationRequired ? "verification-required" : account.coolingDownUntil && account.coolingDownUntil > Date.now() ? "cooling" : "active";
+		console.log(` ${marker} [${index}] ${account.email ?? "(no email)"} — ${state}${account.projectId ? ` (project: ${account.projectId})` : ""}`);
+		const session = await sessions.getSession().catch(() => void 0);
+		if (session && session.index === index) try {
+			const { fetchAvailableModels } = await import("../models-Cu1g7AXV.mjs").then((n) => n.n);
+			const discovered = await fetchAvailableModels(session.auth.access, session.account.projectId);
+			const entries = Object.entries(discovered.models ?? {});
+			if (entries.length > 0) {
+				const withQuota = entries.map(([id, entry]) => ({
+					id,
+					...entry.quotaInfo
+				})).filter((e) => typeof e.remainingFraction === "number").sort((a, b) => (a.remainingFraction ?? 0) - (b.remainingFraction ?? 0));
+				if (withQuota.length > 0) {
+					const lowest = withQuota[0];
+					console.log(`       models: ${entries.length}, lowest quota: ${Math.round((lowest.remainingFraction ?? 0) * 100)}% (${lowest.id})${lowest.resetTime ? `, resets ${new Date(lowest.resetTime).toISOString()}` : ""}`);
+				} else console.log(`       models: ${entries.length} (no per-model quota reported)`);
+			}
+		} catch (error) {
+			console.log(`       quota: unavailable (${error instanceof Error ? error.message : String(error)})`);
+		}
+	}
+}
+async function importCommand(options) {
+	const store = createStore();
+	let source;
+	if (options.file) source = JSON.parse(readFileSync(options.file, "utf8"));
+	else source = await ask("Paste the agy token JSON (or blob with --blob): ");
+	const kind = options.blob ? "blob" : "json";
+	const enriched = await parseImportSource(source, kind);
+	const { account, created } = await upsertImportedAccount(store, enriched, {
+		email: options.email,
+		overwriteExisting: options.overwrite
+	});
+	console.log(`${created ? "Imported" : "Replaced"} account: ${account.email ?? "(no email)"}${enriched.projectId ? ` (project: ${enriched.projectId})` : ""}`);
+}
+async function verifyCommand(options) {
+	const store = createReadOnlyStoreOrExit();
+	const sessions = new AgySessionManager({ store });
+	const storage = await store.load();
+	const indices = options.index !== void 0 ? [Number(options.index)] : storage.accounts.map((_, i) => i);
+	for (const index of indices) {
+		const account = storage.accounts[index];
+		if (!account) {
+			console.log(`[${index}] not found`);
+			continue;
+		}
+		const result = await sessions.verifyAccount(index);
+		if (result.ok) console.log(`[${index}] ${account.email ?? ""} — OK${result.email && result.email !== account.email ? ` (userinfo: ${result.email})` : ""}`);
+		else console.log(`[${index}] ${account.email ?? ""} — FAILED: ${result.error}`);
+	}
+}
+async function logoutCommand(options) {
+	await createReadOnlyStoreOrExit().mutate((storage) => {
+		const index = options.index !== void 0 ? Number(options.index) : options.email ? storage.accounts.findIndex((a) => a.email?.toLowerCase() === options.email.toLowerCase()) : storage.activeIndex;
+		if (index < 0 || index >= storage.accounts.length) throw new Error(`account not found (index ${index})`);
+		const [removed] = storage.accounts.splice(index, 1);
+		if (storage.activeIndex >= storage.accounts.length) storage.activeIndex = 0;
+		console.log(`Removed account: ${removed?.email ?? `[${index}]`}`);
+	});
+}
+function createProgram() {
+	const program = new Command();
+	program.name("dsh-agy").description("Google Antigravity (agy) account management for DeepSeek Harness").version(PACKAGE_VERSION);
+	program.command("login").description("OAuth login (browser, or headless paste)").option("--headless", "print the URL and wait for a pasted redirect URL", false).option("--blob", "print a paste-credential blob instead of storing the account", false).option("--port <n>", "loopback callback port", "51121").option("--project <id>", "bind the login to a specific project").option("--timeout <ms>", "callback timeout", "300000").action(async (options) => {
+		await loginCommand({
+			...options,
+			timeout: options.timeout
+		});
+	});
+	program.command("status").description("List accounts and their health").action(async () => {
+		await statusCommand();
+	});
+	program.command("import").description("Import an agy token file or paste credentials").argument("[file]", "path to an agy auth.json token file").option("--blob", "the pasted value is a credential blob", false).option("--email <email>", "account email (skips userinfo verification)").option("--overwrite", "replace an existing account with the same email", false).action(async (file, options) => {
+		await importCommand({
+			...options,
+			file
+		});
+	});
+	program.command("verify").description("Verify account credentials (refresh + userinfo)").option("--index <n>", "verify one account by index; default all").action(async (options) => {
+		await verifyCommand(options);
+	});
+	program.command("logout").description("Remove an account").option("--index <n>", "account index (default: active)").option("--email <email>", "account email").action(async (options) => {
+		await logoutCommand(options);
+	});
+	return program;
+}
+//#endregion
+export { AGY_DEFAULT_REDIRECT_URI, createProgram };
+
+//# sourceMappingURL=index.mjs.map