dsh-agy 0.2.1 → 0.2.3

package/lib/web/plugin.mjs

@@ -1,7 +1,7 @@
-import { m as resolveAntigravityVersionBounded, n as generateFingerprint, r as recordFingerprintVersion } from "../session-CyoQxOqv.mjs";
-import { t as createAgyRuntime } from "../plugin-common-BDQB_5km.mjs";
-import { t as exchangeAntigravity } from "../exchange-BkQRoBzy.mjs";
-import { n as upsertImportedAccount, r as authorizeAntigravity, t as importManySources } from "../import-KAAtJXZP.mjs";
+import { d as generateFingerprint, f as recordFingerprintVersion, h as resolveAntigravityVersionBounded, u as isAgyDisabled } from "../accounts-BvX5zmPa.mjs";
+import { t as createAgyRuntime } from "../plugin-common-Bmz4Ife-.mjs";
+import { t as exchangeAntigravity } from "../exchange-CteHnRzO.mjs";
+import { n as upsertImportedAccount, r as authorizeAntigravity, t as importManySources } from "../import-C7EV_tne.mjs";
 //#region src/web/i18n.ts
 const I18N_DICT = {
 	en: {
@@ -1084,7 +1084,7 @@ function renderDashboardHtml() {
       } catch (e) { toast(String(e), 'error'); }
     };
 
-    const importLines = () => $('input-import').value.split('\n')
+    const importLines = () => $('input-import').value.split('\\n')
       .map((s) => s.trim())
       .filter(Boolean);
 
@@ -1108,7 +1108,7 @@ function renderDashboardHtml() {
       try {
         const r = await api('/export-all', { method: 'POST' });
         if (!r.blobs || r.blobs.length === 0) { toast('No accounts to export', 'info'); return; }
-        const text = r.blobs.map((b) => b.blob).join('\n');
+        const text = r.blobs.map((b) => b.blob).join('\\n');
         copyToClipboard(text, t('copyAllMsg'));
         $('diagnostics-panel').open = true;
         $('diagnostics-output').textContent = text;
@@ -1318,7 +1318,7 @@ function createAgyWebRoutes(options) {
 			const session = await sessions.getSession().catch(() => void 0);
 			if (!session || session.index !== entry.index) continue;
 			try {
-				const { fetchAvailableModels } = await import("../models-BpIXp4vx.mjs").then((n) => n.n);
+				const { fetchAvailableModels } = await import("../models-I1UAEk9x.mjs").then((n) => n.r);
 				const discovered = await fetchAvailableModels(session.auth.access, session.account.projectId);
 				const models = Object.entries(discovered.models ?? {});
 				if (models.length > 0) {
@@ -1388,7 +1388,8 @@ function createAgyWebRoutes(options) {
 			expiresAt: new Date(result.expires).toISOString(),
 			authMethod: "oauth",
 			email: result.email ?? null,
-			projectId: result.projectId || null
+			projectId: result.projectId || null,
+			clientId: result.clientId || null
 		}, { overwriteExisting: true });
 		res.writeHead(200, { "content-type": "text/html; charset=utf-8" });
 		res.end(renderCallbackHtml({
@@ -1437,6 +1438,15 @@ function createAgyWebRoutes(options) {
 			sendJson(res, 400, { error: error instanceof Error ? error.message : String(error) });
 		}
 	};
+	const handleHealth = async (req, res) => {
+		try {
+			const body = await readJson(req);
+			const indices = Array.isArray(body.indices) ? body.indices.map((value) => Number(value)) : void 0;
+			sendJson(res, 200, { results: await sessions.checkAccounts(indices) });
+		} catch (error) {
+			sendJson(res, 400, { error: error instanceof Error ? error.message : String(error) });
+		}
+	};
 	const handleDelete = async (req, res) => {
 		try {
 			const body = await readJson(req);
@@ -1474,7 +1484,7 @@ function createAgyWebRoutes(options) {
 			return;
 		}
 		try {
-			const { listAgyModels } = await import("../models-BpIXp4vx.mjs").then((n) => n.n);
+			const { listAgyModels } = await import("../models-I1UAEk9x.mjs").then((n) => n.r);
 			const models = await listAgyModels(session.auth.access, session.account.projectId);
 			sendJson(res, 200, {
 				account: session.account.email ?? null,
@@ -1590,6 +1600,11 @@ function createAgyWebRoutes(options) {
 			path: "/agy/api/verify",
 			handler: handleVerify
 		},
+		{
+			kind: "exact",
+			path: "/agy/api/health",
+			handler: handleHealth
+		},
 		{
 			kind: "exact",
 			path: "/agy/api/delete",
@@ -1627,6 +1642,10 @@ function createAgyWebRoutes(options) {
 const name = "dsh-agy-web";
 const inject = ["llm", "webServer"];
 function apply(ctx) {
+	if (isAgyDisabled()) {
+		ctx.logger.warn("[dsh-agy] disabled by DSH_AGY_DISABLE=1 — skipping /agy registration");
+		return;
+	}
 	ctx.effect(async () => {
 		const webServer = ctx.get("webServer");
 		if (!webServer) return () => {};

package/lib/web/plugin.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"plugin.mjs","names":[],"sources":["../../src/web/i18n.ts","../../src/web/page.ts","../../src/web/routes.ts","../../src/web/plugin.ts"],"sourcesContent":["/**\n * Bilingual UI dictionary for the dsh-agy web dashboard and OAuth callbacks.\n */\n\nexport interface I18nStrings {\n  title: string\n  subtitle: string\n  refresh: string\n  loginWithGoogle: string\n  switchLang: string\n  accountsList: string\n  noAccounts: string\n  noAccountsHint: string\n  activeBadge: string\n  stateActive: string\n  stateCooling: string\n  stateRateLimited: string\n  stateVerificationRequired: string\n  stateDisabled: string\n  project: string\n  defaultProject: string\n  activate: string\n  verify: string\n  verifyCta: string\n  testAll: string\n  exportBlob: string\n  fingerprint: string\n  deleteAccount: string\n  confirmDelete: string\n  confirmTestAll: string\n  confirmRegenerateFp: string\n  quotaTitle: string\n  quotaUnavailable: string\n  noQuotaReported: string\n  testModel: string\n  testing: string\n  copied: string\n  importTitle: string\n  importDesc: string\n  importPlaceholder: string\n  importJson: string\n  importBlobBtn: string\n  importSuccess: string\n  exportAll: string\n  importBatchResult: string\n  copyAllMsg: string\n  fingerprintTitle: string\n  fingerprintDevice: string\n  fingerprintUserAgent: string\n  fingerprintCreated: string\n  fingerprintHistory: string\n  regenerateFp: string\n  copyBlobMsg: string\n  copyFpMsg: string\n  allModelsOk: string\n  modelsTestedSummary: string\n  loginSuccessTitle: string\n  loginSuccessDesc: string\n  loginFailedTitle: string\n  loginFailedDesc: string\n  windowClosing: string\n  closeWindow: string\n  retryLogin: string\n  resetIn: string\n  resetAt: string\n}\n\nexport const I18N_DICT: { en: I18nStrings; zh: I18nStrings } = {\n  en: {\n    title: 'Antigravity Account Pool',\n    subtitle: 'Manage multi-account rotation, quota monitoring, and credentials.',\n    refresh: 'Refresh',\n    loginWithGoogle: 'Login with Google',\n    switchLang: '中文',\n    accountsList: 'Accounts',\n    noAccounts: 'No accounts configured',\n    noAccountsHint: 'Click \"Login with Google\" or import credentials below to get started.',\n    activeBadge: 'Active',\n    stateActive: 'Healthy',\n    stateCooling: 'Cooling Down',\n    stateRateLimited: 'Rate Limited',\n    stateVerificationRequired: 'Verification Required',\n    stateDisabled: 'Disabled',\n    project: 'Project',\n    defaultProject: 'default',\n    activate: 'Set Active',\n    verify: 'Verify',\n    verifyCta: 'Verify Now',\n    testAll: 'Test All Models',\n    exportBlob: 'Export Blob',\n    fingerprint: 'Fingerprint',\n    deleteAccount: 'Delete Account',\n    confirmDelete: 'Are you sure you want to delete this account? This action cannot be undone.',\n    confirmTestAll: 'Test All will execute real API calls on all models, consuming actual quota. Continue?',\n    confirmRegenerateFp: 'Generate a fresh device fingerprint and user agent for this account?',\n    quotaTitle: 'Model Quotas',\n    quotaUnavailable: 'Quota information unavailable for this account',\n    noQuotaReported: 'No quota reported by upstream',\n    testModel: 'Test',\n    testing: 'Testing...',\n    copied: 'Copied to clipboard!',\n    importTitle: 'Import Credentials',\n    importDesc: 'Paste an agy auth.json token document, or a credential blob (from dsh-agy login --blob). Paste multiple blobs, one per line, for a batch import:',\n    importPlaceholder: '{\"token\":{\"access_token\":\"...\",\"refresh_token\":\"...\"}} or dsh-agy-cred-v1.... (one blob per line for batch)',\n    importJson: 'Import JSON',\n    importBlobBtn: 'Import Blob',\n    importSuccess: 'Successfully imported account: ',\n    exportAll: 'Export All',\n    importBatchResult: 'Imported {imported}, replaced {replaced}',\n    copyAllMsg: 'All credential blobs exported. Copied to clipboard!',\n    fingerprintTitle: 'Device Fingerprint',\n    fingerprintDevice: 'Device ID',\n    fingerprintUserAgent: 'User Agent',\n    fingerprintCreated: 'Generated At',\n    fingerprintHistory: 'Fingerprint Versions',\n    regenerateFp: 'Regenerate Fingerprint',\n    copyBlobMsg: 'Credential blob exported. Copied to clipboard!',\n    copyFpMsg: 'Device fingerprint details loaded.',\n    allModelsOk: 'All model tests passed!',\n    modelsTestedSummary: 'Completed testing {total} models: {ok} passed, {failed} failed.',\n    loginSuccessTitle: 'Sign-in Successful',\n    loginSuccessDesc: 'Your Antigravity account has been authorized and saved.',\n    loginFailedTitle: 'Sign-in Failed',\n    loginFailedDesc: 'Unable to complete authorization. Error details:',\n    windowClosing: 'This window will close automatically in a moment...',\n    closeWindow: 'Close Window',\n    retryLogin: 'Return to Dashboard',\n    resetIn: 'Resets in ',\n    resetAt: 'Resets at ',\n  },\n  zh: {\n    title: 'Antigravity 账号池管理',\n    subtitle: '多账号智能轮换、配额实时监控与凭据指纹管理。',\n    refresh: '刷新',\n    loginWithGoogle: 'Google 账号登录',\n    switchLang: 'EN',\n    accountsList: '账号列表',\n    noAccounts: '暂无配置账号',\n    noAccountsHint: '点击上方“Google 账号登录”或在下方粘贴凭据以添加账号。',\n    activeBadge: '当前使用',\n    stateActive: '正常',\n    stateCooling: '冷却中',\n    stateRateLimited: '已限流',\n    stateVerificationRequired: '需要验证',\n    stateDisabled: '已禁用',\n    project: '项目 ID',\n    defaultProject: '默认项目',\n    activate: '设为默认',\n    verify: '验证账号',\n    verifyCta: '立即验证',\n    testAll: '测试全部模型',\n    exportBlob: '导出凭据 Blob',\n    fingerprint: '设备指纹',\n    deleteAccount: '删除账号',\n    confirmDelete: '确定要删除此账号吗？该操作不可撤销。',\n    confirmTestAll: '批量测试将对所有模型发起真实调用并消耗 API 配额，确认继续？',\n    confirmRegenerateFp: '确定要为该账号重新生成全新的设备指纹与 User-Agent 吗？',\n    quotaTitle: '模型配额池',\n    quotaUnavailable: '无法获取该账号的模型配额信息',\n    noQuotaReported: '上游未返回配额信息',\n    testModel: '测试',\n    testing: '测试中...',\n    copied: '已复制到剪贴板！',\n    importTitle: '导入凭据',\n    importDesc: '粘贴 agy auth.json 文件内容，或输入凭据 blob（来自 dsh-agy login --blob）。多个 blob 每行一个即可批量导入：',\n    importPlaceholder: '{\"token\":{\"access_token\":\"...\",\"refresh_token\":\"...\"}} 或 dsh-agy-cred-v1....（批量：每行一个 blob）',\n    importJson: '导入 JSON',\n    importBlobBtn: '导入 Blob',\n    importSuccess: '成功导入账号：',\n    exportAll: '导出全部',\n    importBatchResult: '导入 {imported} 个，替换 {replaced} 个',\n    copyAllMsg: '全部凭据 Blob 已导出并复制到剪贴板！',\n    fingerprintTitle: '设备指纹信息',\n    fingerprintDevice: '设备 ID (DeviceId)',\n    fingerprintUserAgent: '用户代理 (User-Agent)',\n    fingerprintCreated: '生成时间',\n    fingerprintHistory: '历史版本数',\n    regenerateFp: '重新生成指纹',\n    copyBlobMsg: '凭据 Blob 已成功导出并复制到剪贴板！',\n    copyFpMsg: '设备指纹信息已加载。',\n    allModelsOk: '所有模型可用性测试通过！',\n    modelsTestedSummary: '完成 {total} 个模型测试：{ok} 个可用，{failed} 个失败。',\n    loginSuccessTitle: '授权登录成功',\n    loginSuccessDesc: 'Antigravity 账号已成功接入并保存。',\n    loginFailedTitle: '授权登录失败',\n    loginFailedDesc: '无法完成 OAuth 授权，错误详情：',\n    windowClosing: '此窗口即将在 2 秒内自动关闭...',\n    closeWindow: '立即关闭窗口',\n    retryLogin: '返回控制面板',\n    resetIn: '将在 ',\n    resetAt: '重置时间：',\n  },\n}\n","/**\n * Web dashboard HTML/CSS/JS generator for dsh-agy.\n * Follows DeepSeek Harness (DSH) design system tokens and UX conventions.\n */\n\nimport { I18N_DICT } from './i18n.ts'\n\nexport function renderDashboardHtml(): string {\n  const i18nJson = JSON.stringify(I18N_DICT)\n\n  return `<!doctype html>\n<html lang=\"en\">\n<head>\n  <meta charset=\"utf-8\">\n  <meta name=\"viewport\" content=\"width=device-width, initial-scale=1\">\n  <title>agy — Antigravity Accounts</title>\n  <style>\n    /* DSH Design System Tokens snapshot (ui-theme / design-platform) */\n    :root {\n      color-scheme: light dark;\n      --dsw-font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', 'PingFang SC', 'Hiragino Sans GB', 'Microsoft YaHei', 'Helvetica Neue', Helvetica, Arial, sans-serif;\n      --ds-font-family-code: 'SF Mono', 'JetBrains Mono', 'Fira Code', Consolas, 'Liberation Mono', Menlo, Courier, monospace;\n      --ds-ease-in-out: cubic-bezier(0.4, 0, 0.2, 1);\n      --ds-transition-fast: 0.12s var(--ds-ease-in-out);\n      --ds-transition-normal: 0.2s var(--ds-ease-in-out);\n\n      /* Light Theme Defaults */\n      --bg-page: #f8fafc;\n      --bg-surface: #ffffff;\n      --bg-surface-elevated: #f1f5f9;\n      --bg-surface-hover: #f1f5f9;\n      --bg-input: #ffffff;\n      --border-l1: rgba(0, 0, 0, 0.06);\n      --border-l2: rgba(0, 0, 0, 0.12);\n      --border-l3: rgba(0, 0, 0, 0.2);\n      --text-primary: #0f172a;\n      --text-secondary: #475569;\n      --text-tertiary: #94a3b8;\n      --text-dimmed: #cbd5e1;\n\n      --brand-primary: #4176e6;\n      --brand-hover: #3362c4;\n      --brand-surface: rgba(65, 118, 230, 0.1);\n      \n      --state-success: #22c55e;\n      --state-success-bg: rgba(34, 197, 94, 0.12);\n      --state-warn: #f59e0b;\n      --state-warn-bg: rgba(245, 158, 11, 0.12);\n      --state-error: #ef4444;\n      --state-error-bg: rgba(239, 68, 68, 0.12);\n      \n      --shadow-sm: 0 1px 2px 0 rgba(0, 0, 0, 0.05);\n      --shadow-md: 0 4px 6px -1px rgba(0, 0, 0, 0.1), 0 2px 4px -2px rgba(0, 0, 0, 0.1);\n      --shadow-lg: 0 10px 15px -3px rgba(0, 0, 0, 0.1), 0 4px 6px -4px rgba(0, 0, 0, 0.1);\n    }\n\n    @media (prefers-color-scheme: dark) {\n      :root {\n        --bg-page: #0f1115;\n        --bg-surface: #171a21;\n        --bg-surface-elevated: #20242e;\n        --bg-surface-hover: #262b37;\n        --bg-input: #12141a;\n        --border-l1: rgba(255, 255, 255, 0.06);\n        --border-l2: rgba(255, 255, 255, 0.12);\n        --border-l3: rgba(255, 255, 255, 0.22);\n        --text-primary: #f8fafc;\n        --text-secondary: #94a3b8;\n        --text-tertiary: #64748b;\n        --text-dimmed: #475569;\n\n        --brand-primary: #5686fe;\n        --brand-hover: #4176e6;\n        --brand-surface: rgba(86, 134, 254, 0.15);\n\n        --state-success: #34d399;\n        --state-success-bg: rgba(52, 211, 153, 0.15);\n        --state-warn: #fbbf24;\n        --state-warn-bg: rgba(251, 191, 36, 0.15);\n        --state-error: #f87171;\n        --state-error-bg: rgba(248, 113, 113, 0.15);\n\n        --shadow-sm: 0 1px 3px 0 rgba(0, 0, 0, 0.4);\n        --shadow-md: 0 4px 6px -1px rgba(0, 0, 0, 0.5);\n        --shadow-lg: 0 10px 15px -3px rgba(0, 0, 0, 0.6);\n      }\n    }\n\n    * { box-sizing: border-box; margin: 0; padding: 0; }\n    body {\n      font-family: var(--dsw-font-family);\n      background-color: var(--bg-page);\n      color: var(--text-primary);\n      line-height: 1.5;\n      font-size: 14px;\n      padding: 24px 16px;\n      -webkit-font-smoothing: antialiased;\n    }\n    .container {\n      max-width: 1080px;\n      margin: 0 auto;\n      display: flex;\n      flex-direction: column;\n      gap: 20px;\n    }\n\n    /* Header */\n    .header {\n      display: flex;\n      justify-content: space-between;\n      align-items: center;\n      flex-wrap: wrap;\n      gap: 12px;\n      padding-bottom: 16px;\n      border-bottom: 1px solid var(--border-l1);\n    }\n    .header-title-group h1 {\n      font-size: 20px;\n      font-weight: 600;\n      letter-spacing: -0.01em;\n      color: var(--text-primary);\n      display: flex;\n      align-items: center;\n      gap: 8px;\n    }\n    .header-title-group p {\n      font-size: 13px;\n      color: var(--text-secondary);\n      margin-top: 2px;\n    }\n    .header-actions {\n      display: flex;\n      align-items: center;\n      gap: 8px;\n    }\n\n    /* Buttons (DSH Capsule Geometry) */\n    .btn {\n      display: inline-flex;\n      align-items: center;\n      justify-content: center;\n      gap: 6px;\n      font-family: inherit;\n      font-size: 13px;\n      font-weight: 500;\n      line-height: 20px;\n      height: 32px;\n      padding: 0 12px;\n      border-radius: 16px;\n      border: 1px solid transparent;\n      cursor: pointer;\n      transition: background-color var(--ds-transition-fast), border-color var(--ds-transition-fast), color var(--ds-transition-fast), opacity var(--ds-transition-fast);\n      white-space: nowrap;\n      user-select: none;\n    }\n    .btn:disabled {\n      cursor: not-allowed;\n      opacity: 0.45 !important;\n    }\n    .btn-sm {\n      height: 26px;\n      font-size: 12px;\n      padding: 0 9px;\n      border-radius: 13px;\n    }\n    .btn-primary {\n      background: var(--brand-primary);\n      color: #ffffff;\n    }\n    .btn-primary:hover:not(:disabled) {\n      background: var(--brand-hover);\n    }\n    .btn-secondary {\n      background: transparent;\n      border-color: var(--border-l2);\n      color: var(--text-primary);\n    }\n    .btn-secondary:hover:not(:disabled) {\n      background: var(--bg-surface-hover);\n      border-color: var(--border-l3);\n    }\n    .btn-cta {\n      background: var(--state-warn-bg);\n      border-color: var(--state-warn);\n      color: var(--state-warn);\n      font-weight: 600;\n      animation: pulse-border 2s infinite;\n    }\n    .btn-cta:hover:not(:disabled) {\n      background: var(--state-warn);\n      color: #ffffff;\n    }\n    @keyframes pulse-border {\n      0%, 100% { box-shadow: 0 0 0 0 rgba(245, 158, 11, 0.4); }\n      50% { box-shadow: 0 0 0 4px rgba(245, 158, 11, 0.15); }\n    }\n    .btn-danger {\n      background: transparent;\n      border-color: var(--border-l2);\n      color: var(--state-error);\n    }\n    .btn-danger:hover:not(:disabled) {\n      background: var(--state-error-bg);\n      border-color: var(--state-error);\n    }\n\n    /* Master-Detail Layout */\n    .main-grid {\n      display: grid;\n      grid-template-columns: 290px 1fr;\n      gap: 20px;\n      align-items: start;\n    }\n    @media (max-width: 780px) {\n      .main-grid {\n        grid-template-columns: 1fr;\n      }\n    }\n\n    /* Cards */\n    .card {\n      background: var(--bg-surface);\n      border: 1px solid var(--border-l2);\n      border-radius: 12px;\n      padding: 16px;\n      box-shadow: var(--shadow-sm);\n    }\n    .card-title {\n      font-size: 14px;\n      font-weight: 600;\n      color: var(--text-primary);\n      margin-bottom: 12px;\n      display: flex;\n      align-items: center;\n      justify-content: space-between;\n    }\n\n    /* Account List (Master) */\n    .account-list {\n      display: flex;\n      flex-direction: column;\n      gap: 8px;\n      list-style: none;\n    }\n    .account-item {\n      padding: 10px 12px;\n      border-radius: 8px;\n      border: 1px solid var(--border-l1);\n      background: var(--bg-surface);\n      cursor: pointer;\n      transition: all var(--ds-transition-fast);\n      display: flex;\n      flex-direction: column;\n      gap: 6px;\n    }\n    .account-item:hover {\n      background: var(--bg-surface-hover);\n      border-color: var(--border-l2);\n    }\n    .account-item.active-item {\n      background: var(--brand-surface);\n      border-color: var(--brand-primary);\n    }\n    .account-item-top {\n      display: flex;\n      align-items: center;\n      justify-content: space-between;\n      gap: 6px;\n    }\n    .account-email {\n      font-weight: 500;\n      font-size: 13px;\n      color: var(--text-primary);\n      overflow: hidden;\n      text-overflow: ellipsis;\n      white-space: nowrap;\n    }\n    .account-item-bottom {\n      display: flex;\n      align-items: center;\n      gap: 6px;\n      flex-wrap: wrap;\n    }\n\n    /* Badges & Pills */\n    .badge {\n      display: inline-flex;\n      align-items: center;\n      gap: 4px;\n      font-size: 11px;\n      font-weight: 500;\n      line-height: 16px;\n      padding: 1px 7px;\n      border-radius: 10px;\n    }\n    .badge-primary { background: var(--brand-surface); color: var(--brand-primary); }\n    .badge-success { background: var(--state-success-bg); color: var(--state-success); }\n    .badge-warn { background: var(--state-warn-bg); color: var(--state-warn); }\n    .badge-error { background: var(--state-error-bg); color: var(--state-error); }\n    .badge-neutral { background: var(--bg-surface-elevated); color: var(--text-secondary); }\n\n    .dot {\n      width: 7px;\n      height: 7px;\n      border-radius: 50%;\n      display: inline-block;\n      flex-shrink: 0;\n    }\n\n    /* Account Detail View */\n    .detail-head {\n      display: flex;\n      justify-content: space-between;\n      align-items: flex-start;\n      gap: 12px;\n      flex-wrap: wrap;\n      padding-bottom: 14px;\n      margin-bottom: 14px;\n      border-bottom: 1px solid var(--border-l1);\n    }\n    .detail-meta h2 {\n      font-size: 16px;\n      font-weight: 600;\n      display: flex;\n      align-items: center;\n      gap: 8px;\n    }\n    .detail-meta p {\n      font-size: 12px;\n      color: var(--text-secondary);\n      margin-top: 4px;\n    }\n    .detail-actions {\n      display: flex;\n      gap: 6px;\n      flex-wrap: wrap;\n    }\n\n    /* Quota Section */\n    .quota-table-wrap {\n      overflow-x: auto;\n      margin-top: 8px;\n    }\n    .quota-table {\n      width: 100%;\n      border-collapse: collapse;\n      font-size: 13px;\n    }\n    .quota-table th, .quota-table td {\n      padding: 8px 10px;\n      text-align: left;\n      border-bottom: 1px solid var(--border-l1);\n    }\n    .quota-table th {\n      font-size: 12px;\n      font-weight: 500;\n      color: var(--text-tertiary);\n      text-transform: uppercase;\n      letter-spacing: 0.03em;\n    }\n    .model-name {\n      font-family: var(--ds-font-family-code);\n      font-weight: 500;\n      font-size: 12.5px;\n      color: var(--text-primary);\n      cursor: pointer;\n      display: inline-flex;\n      align-items: center;\n      gap: 4px;\n    }\n    .model-name:hover {\n      color: var(--brand-primary);\n      text-decoration: underline;\n    }\n    .progress-bar {\n      background: var(--bg-surface-elevated);\n      border-radius: 4px;\n      height: 8px;\n      width: 110px;\n      overflow: hidden;\n      display: inline-block;\n      vertical-align: middle;\n      margin-right: 8px;\n    }\n    .progress-fill {\n      height: 100%;\n      border-radius: 4px;\n      transition: width var(--ds-transition-normal);\n    }\n    .reset-time {\n      font-size: 12px;\n      color: var(--text-tertiary);\n      white-space: nowrap;\n    }\n\n    /* Collapsible diagnostics */\n    details.diagnostics {\n      margin-top: 14px;\n      border: 1px solid var(--border-l1);\n      border-radius: 8px;\n      background: var(--bg-surface-elevated);\n      overflow: hidden;\n    }\n    details.diagnostics summary {\n      padding: 8px 12px;\n      font-size: 12.5px;\n      font-weight: 500;\n      color: var(--text-secondary);\n      cursor: pointer;\n      user-select: none;\n      display: flex;\n      align-items: center;\n      justify-content: space-between;\n    }\n    details.diagnostics summary:hover {\n      color: var(--text-primary);\n    }\n    .diagnostics-body {\n      padding: 12px;\n      border-top: 1px solid var(--border-l1);\n      display: flex;\n      flex-direction: column;\n      gap: 8px;\n    }\n    pre.code-view {\n      font-family: var(--ds-font-family-code);\n      font-size: 12px;\n      background: var(--bg-input);\n      border: 1px solid var(--border-l1);\n      border-radius: 6px;\n      padding: 10px;\n      overflow-x: auto;\n      word-break: break-all;\n      white-space: pre-wrap;\n      color: var(--text-secondary);\n    }\n\n    /* Import Form */\n    .import-section {\n      margin-top: 4px;\n    }\n    .import-textarea {\n      width: 100%;\n      font-family: var(--ds-font-family-code);\n      font-size: 12.5px;\n      padding: 10px 12px;\n      background: var(--bg-input);\n      border: 1px solid var(--border-l2);\n      border-radius: 8px;\n      color: var(--text-primary);\n      resize: vertical;\n      min-height: 70px;\n      outline: none;\n      transition: border-color var(--ds-transition-fast);\n      margin-bottom: 8px;\n    }\n    .import-textarea:focus {\n      border-color: var(--brand-primary);\n      box-shadow: 0 0 0 2px var(--brand-surface);\n    }\n\n    /* Toast Notification System */\n    #toast-container {\n      position: fixed;\n      bottom: 20px;\n      right: 20px;\n      z-index: 1000;\n      display: flex;\n      flex-direction: column;\n      gap: 8px;\n      max-width: 380px;\n      pointer-events: none;\n    }\n    .toast {\n      background: var(--bg-surface);\n      color: var(--text-primary);\n      border: 1px solid var(--border-l2);\n      border-radius: 8px;\n      padding: 10px 14px;\n      font-size: 13px;\n      box-shadow: var(--shadow-lg);\n      display: flex;\n      align-items: center;\n      justify-content: space-between;\n      gap: 10px;\n      pointer-events: auto;\n      animation: toast-in 0.2s var(--ds-ease-in-out);\n      transition: opacity 0.2s, transform 0.2s;\n    }\n    .toast-success { border-left: 4px solid var(--state-success); }\n    .toast-error { border-left: 4px solid var(--state-error); }\n    .toast-info { border-left: 4px solid var(--brand-primary); }\n    @keyframes toast-in {\n      from { transform: translateY(12px); opacity: 0; }\n      to { transform: translateY(0); opacity: 1; }\n    }\n  </style>\n</head>\n<body>\n  <div class=\"container\">\n    <!-- Header -->\n    <header class=\"header\">\n      <div class=\"header-title-group\">\n        <h1>\n          <svg width=\"20\" height=\"20\" viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"2\" stroke-linecap=\"round\" stroke-linejoin=\"round\" style=\"color:var(--brand-primary)\"><circle cx=\"12\" cy=\"12\" r=\"10\"></circle><path d=\"M12 2a14.5 14.5 0 0 0 0 20 14.5 14.5 0 0 0 0-20\"></path><path d=\"M2 12h20\"></path></svg>\n          <span id=\"txt-title\">Antigravity Account Pool</span>\n        </h1>\n        <p id=\"txt-subtitle\">Manage multi-account rotation, quota monitoring, and credentials.</p>\n      </div>\n      <div class=\"header-actions\">\n        <button id=\"btn-lang\" class=\"btn btn-secondary btn-sm\" title=\"Toggle Language\">中文</button>\n        <button id=\"btn-refresh\" class=\"btn btn-secondary\" title=\"Refresh accounts\">\n          <svg width=\"14\" height=\"14\" viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"2\" stroke-linecap=\"round\" stroke-linejoin=\"round\"><path d=\"M3 12a9 9 0 0 1 9-9 9.75 9.75 0 0 1 6.74 2.74L21 8\"></path><path d=\"M21 3v5h-5\"></path><path d=\"M21 12a9 9 0 0 1-9 9 9.75 9.75 0 0 1-6.74-2.74L3 16\"></path><path d=\"M8 16H3v5\"></path></svg>\n          <span id=\"txt-refresh\">Refresh</span>\n        </button>\n        <button id=\"btn-login\" class=\"btn btn-primary\">\n          <svg width=\"14\" height=\"14\" viewBox=\"0 0 24 24\" fill=\"currentColor\"><path d=\"M22.56 12.25c0-.78-.07-1.53-.2-2.25H12v4.26h5.92c-.26 1.37-1.04 2.53-2.21 3.31v2.77h3.57c2.08-1.92 3.28-4.74 3.28-8.09z\" fill=\"#4285F4\"/><path d=\"M12 23c2.97 0 5.46-.98 7.28-2.66l-3.57-2.77c-.98.66-2.23 1.06-3.71 1.06-2.86 0-5.29-1.93-6.16-4.53H2.18v2.84C3.99 20.53 7.7 23 12 23z\" fill=\"#34A853\"/><path d=\"M5.84 14.09c-.22-.66-.35-1.36-.35-2.09s.13-1.43.35-2.09V7.06H2.18C1.43 8.55 1 10.22 1 12s.43 3.45 1.18 4.94l2.85-2.22.81-.63z\" fill=\"#FBBC05\"/><path d=\"M12 5.38c1.62 0 3.06.56 4.21 1.64l3.15-3.15C17.45 2.09 14.97 1 12 1 7.7 1 3.99 3.47 2.18 7.06l3.66 2.84c.87-2.6 3.3-4.52 6.16-4.52z\" fill=\"#EA4335\"/></svg>\n          <span id=\"txt-login\">Login with Google</span>\n        </button>\n      </div>\n    </header>\n\n    <!-- Main Workspace -->\n    <main class=\"main-grid\">\n      <!-- Master: Account List -->\n      <section class=\"card\">\n        <div class=\"card-title\">\n          <span id=\"txt-accounts-list\">Accounts</span>\n          <span id=\"account-total-badge\" class=\"badge badge-neutral\">0</span>\n        </div>\n        <ul id=\"account-list\" class=\"account-list\">\n          <li style=\"color:var(--text-tertiary);font-size:13px;padding:8px 0;\" id=\"txt-loading\">Loading accounts...</li>\n        </ul>\n      </section>\n\n      <!-- Detail: Selected Account Details -->\n      <section class=\"card\" id=\"detail-card\">\n        <div id=\"detail-content\">\n          <p style=\"color:var(--text-tertiary);\" id=\"txt-no-accounts-hint\">Select or add an account to view details.</p>\n        </div>\n      </section>\n    </main>\n\n    <!-- Bottom: Import Section -->\n    <section class=\"card import-section\">\n      <div class=\"card-title\">\n        <span id=\"txt-import-title\">Import Credentials</span>\n      </div>\n      <p style=\"font-size:12.5px;color:var(--text-secondary);margin-bottom:8px;\" id=\"txt-import-desc\">\n        Paste an agy auth.json token document, or a credential blob (from dsh-agy login --blob). Paste multiple blobs, one per line, for a batch import:\n      </p>\n      <textarea id=\"input-import\" class=\"import-textarea\" placeholder='{\"token\":{\"access_token\":\"...\",\"refresh_token\":\"...\"}} or dsh-agy-cred-v1.... (one blob per line for batch)'></textarea>\n      <div style=\"display:flex;gap:8px;\">\n        <button id=\"btn-import-json\" class=\"btn btn-secondary\">\n          <span id=\"txt-import-json\">Import JSON</span>\n        </button>\n        <button id=\"btn-import-blob\" class=\"btn btn-secondary\">\n          <span id=\"txt-import-blob\">Import Blob</span>\n        </button>\n        <span style=\"flex:1\"></span>\n        <button id=\"btn-export-all\" class=\"btn btn-secondary\">\n          <span id=\"txt-export-all\">Export All</span>\n        </button>\n      </div>\n    </section>\n  </div>\n\n  <div id=\"toast-container\"></div>\n\n  <script>\n    const I18N = ${i18nJson};\n    let currentLang = localStorage.getItem('agy_lang') || (navigator.language.startsWith('zh') ? 'zh' : 'en');\n    let accountData = [];\n    let selectedIndex = 0;\n    let isBusy = false;\n\n    function t(key) {\n      const dict = I18N[currentLang] || I18N.en;\n      return dict[key] || I18N.en[key] || key;\n    }\n\n    const $ = (id) => document.getElementById(id);\n\n    function esc(s) {\n      if (s == null) return '';\n      return String(s).replace(/[&<>\"']/g, (c) => ({ '&': '&amp;', '<': '&lt;', '>': '&gt;', '\"': '&quot;', \"'\": '&#39;' }[c]));\n    }\n\n    function toast(text, type = 'info') {\n      const container = $('toast-container');\n      const el = document.createElement('div');\n      el.className = 'toast toast-' + type;\n      el.innerHTML = '<span>' + esc(text) + '</span><span style=\"cursor:pointer;opacity:0.6;font-weight:600;\" onclick=\"this.parentElement.remove()\">✕</span>';\n      container.appendChild(el);\n      setTimeout(() => {\n        el.style.opacity = '0';\n        el.style.transform = 'translateY(8px)';\n        setTimeout(() => el.remove(), 200);\n      }, 3500);\n    }\n\n    function copyToClipboard(text, msg) {\n      if (navigator.clipboard && window.isSecureContext) {\n        navigator.clipboard.writeText(text).then(() => toast(msg || t('copied'), 'success')).catch(() => fallbackCopy(text, msg));\n      } else {\n        fallbackCopy(text, msg);\n      }\n    }\n\n    function fallbackCopy(text, msg) {\n      const ta = document.createElement('textarea');\n      ta.value = text;\n      ta.style.position = 'fixed';\n      ta.style.left = '-9999px';\n      document.body.appendChild(ta);\n      ta.select();\n      try {\n        document.execCommand('copy');\n        toast(msg || t('copied'), 'success');\n      } catch {\n        toast('Failed to copy', 'error');\n      }\n      document.body.removeChild(ta);\n    }\n\n    function formatRelativeTime(dateStr) {\n      if (!dateStr) return '';\n      const target = new Date(dateStr).getTime();\n      const diffMs = target - Date.now();\n      if (diffMs <= 0) return '';\n      const diffMin = Math.round(diffMs / 60000);\n      if (diffMin < 60) return t('resetIn') + diffMin + 'm';\n      const diffHours = (diffMs / 3600000).toFixed(1);\n      if (diffHours < 24) return t('resetIn') + diffHours + 'h';\n      return t('resetAt') + new Date(target).toLocaleTimeString([], { hour: '2-digit', minute: '2-digit' });\n    }\n\n    function quotaColor(fraction) {\n      if (fraction == null) return 'var(--text-dimmed)';\n      return fraction > 0.7 ? 'var(--state-success)' : fraction >= 0.3 ? 'var(--state-warn)' : 'var(--state-error)';\n    }\n\n    function getWorstQuotaFraction(acc) {\n      const models = (acc.quota && acc.quota.models) || [];\n      let worst = 1;\n      let hasQuota = false;\n      for (const m of models) {\n        if (m.remainingFraction != null) {\n          worst = Math.min(worst, m.remainingFraction);\n          hasQuota = true;\n        }\n      }\n      return hasQuota ? worst : null;\n    }\n\n    function applyI18nLabels() {\n      $('txt-title').textContent = t('title');\n      $('txt-subtitle').textContent = t('subtitle');\n      $('txt-refresh').textContent = t('refresh');\n      $('txt-login').textContent = t('loginWithGoogle');\n      $('btn-lang').textContent = t('switchLang');\n      $('txt-accounts-list').textContent = t('accountsList');\n      $('txt-import-title').textContent = t('importTitle');\n      $('txt-import-desc').textContent = t('importDesc');\n      $('txt-import-json').textContent = t('importJson');\n      $('txt-import-blob').textContent = t('importBlobBtn');\n      $('txt-export-all').textContent = t('exportAll');\n      $('input-import').placeholder = t('importPlaceholder');\n    }\n\n    async function api(path, init) {\n      const res = await fetch('/agy/api' + path, {\n        headers: { 'content-type': 'application/json' },\n        ...init\n      });\n      const data = await res.json().catch(() => ({}));\n      if (!res.ok) throw new Error(data.error || res.statusText || 'Request failed');\n      return data;\n    }\n\n    function renderMasterList() {\n      const listEl = $('account-list');\n      $('account-total-badge').textContent = String(accountData.length);\n\n      if (accountData.length === 0) {\n        listEl.innerHTML = '<li style=\"color:var(--text-tertiary);font-size:13px;padding:12px 0;\">' + esc(t('noAccounts')) + '</li>';\n        return;\n      }\n\n      listEl.innerHTML = accountData.map((a, i) => {\n        const isSelected = i === selectedIndex;\n        const worstFrac = getWorstQuotaFraction(a);\n        const dotColor = quotaColor(worstFrac);\n\n        let stateBadge = '';\n        if (a.state === 'disabled') {\n          stateBadge = '<span class=\"badge badge-error\">' + esc(t('stateDisabled')) + '</span>';\n        } else if (a.state === 'verification-required') {\n          stateBadge = '<span class=\"badge badge-warn\">' + esc(t('stateVerificationRequired')) + '</span>';\n        } else if (a.state === 'cooling') {\n          stateBadge = '<span class=\"badge badge-warn\">' + esc(t('stateCooling')) + '</span>';\n        } else if (a.rateLimits && Object.values(a.rateLimits).some((t) => t > Date.now())) {\n          stateBadge = '<span class=\"badge badge-warn\">' + esc(t('stateRateLimited')) + '</span>';\n        } else {\n          stateBadge = '<span class=\"badge badge-success\">' + esc(t('stateActive')) + '</span>';\n        }\n\n        const activeMark = a.active ? '<span class=\"badge badge-primary\">★ ' + esc(t('activeBadge')) + '</span>' : '';\n\n        return '<li class=\"account-item ' + (isSelected ? 'active-item' : '') + '\" onclick=\"selectAccount(' + i + ')\">' +\n          '<div class=\"account-item-top\">' +\n            '<span class=\"account-email\" title=\"' + esc(a.email || '(no email)') + '\">' + esc(a.email || '(no email)') + '</span>' +\n            '<span class=\"dot\" style=\"background:' + dotColor + '\" title=\"Quota Health\"></span>' +\n          '</div>' +\n          '<div class=\"account-item-bottom\">' + activeMark + stateBadge + '</div>' +\n        '</li>';\n      }).join('');\n    }\n\n    function renderDetailView() {\n      const container = $('detail-content');\n      if (accountData.length === 0) {\n        container.innerHTML = '<div style=\"text-align:center;padding:32px 12px;color:var(--text-tertiary);\">' +\n          '<p style=\"font-size:15px;font-weight:500;margin-bottom:4px;\">' + esc(t('noAccounts')) + '</p>' +\n          '<p style=\"font-size:13px;\">' + esc(t('noAccountsHint')) + '</p>' +\n        '</div>';\n        return;\n      }\n\n      const a = accountData[selectedIndex] || accountData[0];\n      const isVerificationRequired = a.state === 'verification-required';\n      const isCooling = a.state === 'cooling' && a.cooldownUntil;\n      const coolInfo = isCooling ? ' (' + formatRelativeTime(a.cooldownUntil) + ')' : '';\n\n      const models = (a.quota && a.quota.models) || [];\n      const quotaRows = models.map((m) => {\n        const pct = m.remainingFraction != null ? Math.round(m.remainingFraction * 100) : null;\n        const color = quotaColor(m.remainingFraction);\n        const resetText = m.resetTime ? formatRelativeTime(m.resetTime) : '';\n        const exactReset = m.resetTime ? new Date(m.resetTime).toLocaleString() : '';\n\n        return '<tr>' +\n          '<td><span class=\"model-name\" onclick=\"copyToClipboard(\\\\'' + esc(m.id) + '\\\\')\" title=\"Click to copy ID\">' + esc(m.id) + '</span></td>' +\n          '<td>' +\n            (pct != null\n              ? '<div class=\"progress-bar\"><div class=\"progress-fill\" style=\"width:' + pct + '%;background:' + color + '\"></div></div><span style=\"font-weight:500;font-size:12px;\">' + pct + '%</span>'\n              : '<span style=\"color:var(--text-tertiary);font-size:12px;\">' + esc(t('noQuotaReported')) + '</span>') +\n          '</td>' +\n          '<td><span class=\"reset-time\" title=\"' + esc(exactReset) + '\">' + esc(resetText) + '</span></td>' +\n          '<td style=\"text-align:right;\">' +\n            '<button class=\"btn btn-secondary btn-sm\" data-test-model=\"' + esc(m.id) + '\">' + esc(t('testModel')) + '</button>' +\n          '</td>' +\n        '</tr>';\n      }).join('');\n\n      container.innerHTML = \n        '<div class=\"detail-head\">' +\n          '<div class=\"detail-meta\">' +\n            '<h2>' + esc(a.email || '(no email)') + (a.active ? ' <span class=\"badge badge-primary\">★ ' + esc(t('activeBadge')) + '</span>' : '') + '</h2>' +\n            '<p>' + esc(t('project')) + ': <code>' + esc(a.projectId || t('defaultProject')) + '</code>' + esc(coolInfo) + '</p>' +\n          '</div>' +\n          '<div class=\"detail-actions\">' +\n            (isVerificationRequired ? '<button class=\"btn btn-cta btn-sm\" id=\"btn-action-verify\">⚡ ' + esc(t('verifyCta')) + '</button>' : '') +\n            (!a.active ? '<button class=\"btn btn-secondary btn-sm\" id=\"btn-action-activate\">' + esc(t('activate')) + '</button>' : '') +\n            (!isVerificationRequired ? '<button class=\"btn btn-secondary btn-sm\" id=\"btn-action-verify\">' + esc(t('verify')) + '</button>' : '') +\n            '<button class=\"btn btn-secondary btn-sm\" id=\"btn-action-export\">' + esc(t('exportBlob')) + '</button>' +\n            '<button class=\"btn btn-secondary btn-sm\" id=\"btn-action-fp\">' + esc(t('fingerprint')) + '</button>' +\n            '<button class=\"btn btn-danger btn-sm\" id=\"btn-action-delete\">' + esc(t('deleteAccount')) + '</button>' +\n          '</div>' +\n        '</div>' +\n\n        '<div style=\"margin-top:16px;\">' +\n          '<div style=\"display:flex;justify-content:space-between;align-items:center;margin-bottom:8px;\">' +\n            '<h3 style=\"font-size:13.5px;font-weight:600;\">' + esc(t('quotaTitle')) + ' (' + models.length + ')</h3>' +\n            (models.length > 0 ? '<button class=\"btn btn-secondary btn-sm\" id=\"btn-action-test-all\">⚡ ' + esc(t('testAll')) + '</button>' : '') +\n          '</div>' +\n          '<div class=\"quota-table-wrap\">' +\n            '<table class=\"quota-table\">' +\n              '<thead><tr><th>Model</th><th>Remaining</th><th>Reset</th><th style=\"text-align:right;\">Action</th></tr></thead>' +\n              '<tbody>' + (quotaRows || '<tr><td colspan=\"4\" style=\"color:var(--text-tertiary);text-align:center;padding:16px 0;\">' + esc(t('quotaUnavailable')) + '</td></tr>') + '</tbody>' +\n            '</table>' +\n          '</div>' +\n        '</div>' +\n\n        '<details class=\"diagnostics\" id=\"diagnostics-panel\">' +\n          '<summary><span>' + esc(t('fingerprintTitle')) + ' & Output</span><span>▼</span></summary>' +\n          '<div class=\"diagnostics-body\">' +\n            '<div style=\"display:flex;justify-content:space-between;align-items:center;\">' +\n              '<span style=\"font-size:12px;color:var(--text-secondary);\">' + esc(t('fingerprintHistory')) + ': ' + (a.fingerprintHistory || 0) + '</span>' +\n              '<button class=\"btn btn-secondary btn-sm\" id=\"btn-action-regen-fp\">' + esc(t('regenerateFp')) + '</button>' +\n            '</div>' +\n            '<pre class=\"code-view\" id=\"diagnostics-output\">' + (a.fingerprint ? esc(JSON.stringify(a.fingerprint, null, 2)) : 'No diagnostics generated yet.') + '</pre>' +\n          '</div>' +\n        '</details>';\n\n      bindDetailActions(selectedIndex);\n    }\n\n    function selectAccount(index) {\n      selectedIndex = index;\n      renderMasterList();\n      renderDetailView();\n    }\n\n    function bindDetailActions(index) {\n      const btnActivate = $('btn-action-activate');\n      if (btnActivate) btnActivate.onclick = async () => {\n        try {\n          await api('/activate', { method: 'POST', body: JSON.stringify({ index }) });\n          toast(t('activeBadge') + ' -> #' + (index + 1), 'success');\n          render();\n        } catch (e) { toast(String(e), 'error'); }\n      };\n\n      const btnVerify = $('btn-action-verify');\n      if (btnVerify) btnVerify.onclick = async () => {\n        btnVerify.disabled = true;\n        try {\n          await api('/verify', { method: 'POST', body: JSON.stringify({ index }) });\n          toast('Account #' + (index + 1) + ' verified successfully', 'success');\n          render();\n        } catch (e) { toast(String(e), 'error'); }\n        finally { btnVerify.disabled = false; }\n      };\n\n      const btnDelete = $('btn-action-delete');\n      if (btnDelete) btnDelete.onclick = async () => {\n        if (!confirm(t('confirmDelete'))) return;\n        try {\n          await api('/delete', { method: 'POST', body: JSON.stringify({ index }) });\n          toast('Account deleted', 'success');\n          if (selectedIndex >= accountData.length - 1) selectedIndex = Math.max(0, accountData.length - 2);\n          render();\n        } catch (e) { toast(String(e), 'error'); }\n      };\n\n      const btnExport = $('btn-action-export');\n      if (btnExport) btnExport.onclick = async () => {\n        try {\n          const r = await api('/export', { method: 'POST', body: JSON.stringify({ index }) });\n          copyToClipboard(r.blob, t('copyBlobMsg'));\n          $('diagnostics-panel').open = true;\n          $('diagnostics-output').textContent = r.blob;\n        } catch (e) { toast(String(e), 'error'); }\n      };\n\n      const btnFp = $('btn-action-fp');\n      if (btnFp) btnFp.onclick = async () => {\n        try {\n          const r = await api('/fingerprint', { method: 'POST', body: JSON.stringify({ index }) });\n          $('diagnostics-panel').open = true;\n          $('diagnostics-output').textContent = JSON.stringify(r.fingerprint, null, 2);\n          toast(t('copyFpMsg'), 'info');\n        } catch (e) { toast(String(e), 'error'); }\n      };\n\n      const btnRegenFp = $('btn-action-regen-fp');\n      if (btnRegenFp) btnRegenFp.onclick = async () => {\n        if (!confirm(t('confirmRegenerateFp'))) return;\n        try {\n          const r = await api('/fingerprint', { method: 'POST', body: JSON.stringify({ index, action: 'regenerate' }) });\n          $('diagnostics-panel').open = true;\n          $('diagnostics-output').textContent = JSON.stringify(r.fingerprint, null, 2);\n          toast('Fingerprint regenerated', 'success');\n          render();\n        } catch (e) { toast(String(e), 'error'); }\n      };\n\n      const btnTestAll = $('btn-action-test-all');\n      if (btnTestAll) btnTestAll.onclick = async () => {\n        if (!confirm(t('confirmTestAll'))) return;\n        btnTestAll.disabled = true;\n        const a = accountData[index];\n        const models = ((a.quota && a.quota.models) || []).map((m) => m.id);\n        toast(t('testing') + ' (' + models.length + ')', 'info');\n        let okCount = 0;\n        let failCount = 0;\n        const lines = [];\n\n        for (const model of models) {\n          try {\n            const r = await api('/test', { method: 'POST', body: JSON.stringify({ model }) });\n            if (r.ok) {\n              okCount++;\n              lines.push('OK   ' + model);\n            } else {\n              failCount++;\n              lines.push('FAIL ' + model + ' - ' + r.error);\n            }\n          } catch (err) {\n            failCount++;\n            lines.push('ERR  ' + model + ' - ' + String(err));\n          }\n        }\n        $('diagnostics-panel').open = true;\n        $('diagnostics-output').textContent = lines.join('\\\\n');\n        toast(t('modelsTestedSummary').replace('{total}', String(models.length)).replace('{ok}', String(okCount)).replace('{failed}', String(failCount)), failCount === 0 ? 'success' : 'warn');\n        btnTestAll.disabled = false;\n      };\n\n      // Single model tests\n      document.querySelectorAll('[data-test-model]').forEach((btn) => {\n        btn.onclick = async () => {\n          const model = btn.getAttribute('data-test-model');\n          btn.disabled = true;\n          btn.textContent = '...';\n          try {\n            const r = await api('/test', { method: 'POST', body: JSON.stringify({ model }) });\n            if (r.ok) {\n              toast('OK: ' + model, 'success');\n            } else {\n              toast('FAIL: ' + model + ' - ' + r.error, 'error');\n            }\n          } catch (err) {\n            toast('ERR: ' + model + ' - ' + String(err), 'error');\n          } finally {\n            btn.disabled = false;\n            btn.textContent = t('testModel');\n          }\n        };\n      });\n    }\n\n    async function render() {\n      if (isBusy) return;\n      isBusy = true;\n      try {\n        const data = await api('/accounts');\n        accountData = data.accounts || [];\n        if (selectedIndex >= accountData.length) selectedIndex = Math.max(0, accountData.length - 1);\n        renderMasterList();\n        renderDetailView();\n      } catch (e) {\n        toast(String(e), 'error');\n      } finally {\n        isBusy = false;\n      }\n    }\n\n    // Event Handlers\n    $('btn-refresh').onclick = render;\n\n    $('btn-lang').onclick = () => {\n      currentLang = currentLang === 'zh' ? 'en' : 'zh';\n      localStorage.setItem('agy_lang', currentLang);\n      applyI18nLabels();\n      renderMasterList();\n      renderDetailView();\n    };\n\n    $('btn-login').onclick = async () => {\n      try {\n        const { url } = await api('/auth-url', { method: 'POST' });\n        window.open(url, '_blank');\n        toast(t('windowClosing'), 'info');\n      } catch (e) { toast(String(e), 'error'); }\n    };\n\n    const importLines = () => $('input-import').value.split('\\n')\n      .map((s) => s.trim())\n      .filter(Boolean);\n\n    const doImport = async (kind) => {\n      const sources = importLines();\n      if (sources.length === 0) return;\n      try {\n        const r = await api('/import', { method: 'POST', body: JSON.stringify({ kind, sources }) });\n        if (r.errors && r.errors.length > 0) toast(r.errors[0], 'error');\n        toast(t('importBatchResult').replace('{imported}', r.imported).replace('{replaced}', r.replaced), 'success');\n        $('input-import').value = '';\n        render();\n      } catch (e) { toast(String(e), 'error'); }\n    };\n\n    $('btn-import-json').onclick = () => doImport('json');\n    $('btn-import-blob').onclick = () => doImport('blob');\n\n    const btnExportAll = $('btn-export-all');\n    if (btnExportAll) btnExportAll.onclick = async () => {\n      try {\n        const r = await api('/export-all', { method: 'POST' });\n        if (!r.blobs || r.blobs.length === 0) { toast('No accounts to export', 'info'); return; }\n        const text = r.blobs.map((b) => b.blob).join('\\n');\n        copyToClipboard(text, t('copyAllMsg'));\n        $('diagnostics-panel').open = true;\n        $('diagnostics-output').textContent = text;\n      } catch (e) { toast(String(e), 'error'); }\n    };\n\n    // Auto-refresh when tab receives focus or receives postMessage from login popup\n    window.addEventListener('focus', render);\n    window.addEventListener('message', (ev) => {\n      if (ev.data && ev.data.type === 'agy_login_success') {\n        toast(t('loginSuccessTitle'), 'success');\n        render();\n      }\n    });\n\n    // Init\n    applyI18nLabels();\n    render();\n  </script>\n</body>\n</html>`\n}\n\nexport function renderCallbackHtml(options: { ok: boolean; error?: string; email?: string | null; baseUrl: string }): string {\n  const { ok, error, email, baseUrl } = options\n  const i18nJson = JSON.stringify(I18N_DICT)\n\n  return `<!doctype html>\n<html lang=\"en\">\n<head>\n  <meta charset=\"utf-8\">\n  <meta name=\"viewport\" content=\"width=device-width, initial-scale=1\">\n  <title>Antigravity Sign-in</title>\n  <style>\n    :root {\n      color-scheme: light dark;\n      --dsw-font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', 'PingFang SC', 'Hiragino Sans GB', 'Microsoft YaHei', sans-serif;\n      --bg-page: #0f1115;\n      --bg-surface: #171a21;\n      --border-l2: rgba(255, 255, 255, 0.12);\n      --text-primary: #f8fafc;\n      --text-secondary: #94a3b8;\n      --brand-primary: #5686fe;\n      --state-success: #34d399;\n      --state-error: #f87171;\n    }\n    @media (prefers-color-scheme: light) {\n      :root {\n        --bg-page: #f8fafc;\n        --bg-surface: #ffffff;\n        --border-l2: rgba(0, 0, 0, 0.12);\n        --text-primary: #0f172a;\n        --text-secondary: #475569;\n        --brand-primary: #4176e6;\n        --state-success: #22c55e;\n        --state-error: #ef4444;\n      }\n    }\n    * { box-sizing: border-box; margin: 0; padding: 0; }\n    body {\n      font-family: var(--dsw-font-family);\n      background-color: var(--bg-page);\n      color: var(--text-primary);\n      display: flex;\n      align-items: center;\n      justify-content: center;\n      min-height: 100vh;\n      padding: 16px;\n    }\n    .card {\n      background: var(--bg-surface);\n      border: 1px solid var(--border-l2);\n      border-radius: 12px;\n      padding: 24px;\n      max-width: 440px;\n      width: 100%;\n      text-align: center;\n      box-shadow: 0 10px 25px -5px rgba(0, 0, 0, 0.3);\n    }\n    .icon-wrap {\n      width: 48px;\n      height: 48px;\n      border-radius: 50%;\n      display: flex;\n      align-items: center;\n      justify-content: center;\n      margin: 0 auto 16px;\n      font-size: 24px;\n    }\n    .icon-success { background: rgba(52, 211, 153, 0.15); color: var(--state-success); }\n    .icon-error { background: rgba(248, 113, 113, 0.15); color: var(--state-error); }\n    h1 { font-size: 18px; font-weight: 600; margin-bottom: 8px; }\n    p { font-size: 13.5px; color: var(--text-secondary); margin-bottom: 16px; line-height: 1.5; }\n    .btn {\n      display: inline-flex;\n      align-items: center;\n      justify-content: center;\n      font-family: inherit;\n      font-size: 13px;\n      font-weight: 500;\n      height: 34px;\n      padding: 0 16px;\n      border-radius: 17px;\n      border: 1px solid var(--border-l2);\n      background: transparent;\n      color: var(--text-primary);\n      cursor: pointer;\n      text-decoration: none;\n    }\n    .btn:hover { background: rgba(128, 128, 128, 0.1); }\n    .btn-primary { background: var(--brand-primary); color: #ffffff; border-color: transparent; }\n  </style>\n</head>\n<body>\n  <div class=\"card\">\n    ${ok ? `\n      <div class=\"icon-wrap icon-success\">✓</div>\n      <h1 id=\"title\">Sign-in Successful</h1>\n      <p id=\"desc\">Your Antigravity account ${email ? '<strong>' + email + '</strong> ' : ''}has been authorized and saved.</p>\n      <p style=\"font-size:12px;opacity:0.8;\" id=\"closing\">This window will close automatically...</p>\n      <button class=\"btn\" onclick=\"window.close()\">Close Window</button>\n    ` : `\n      <div class=\"icon-wrap icon-error\">✕</div>\n      <h1 id=\"title\">Sign-in Failed</h1>\n      <p id=\"desc\">Error details: ${error || 'Unknown error'}</p>\n      <a class=\"btn btn-primary\" href=\"${baseUrl}/agy\">Return to Dashboard</a>\n    `}\n  </div>\n  <script>\n    const I18N = ${i18nJson};\n    const lang = localStorage.getItem('agy_lang') || (navigator.language.startsWith('zh') ? 'zh' : 'en');\n    const dict = I18N[lang] || I18N.en;\n\n    if (${ok ? 'true' : 'false'}) {\n      document.getElementById('title').textContent = dict.loginSuccessTitle;\n      document.getElementById('desc').innerHTML = dict.loginSuccessDesc + (${JSON.stringify(email ? ' (' + email + ')' : '')});\n      document.getElementById('closing').textContent = dict.windowClosing;\n      \n      // Notify parent window & close\n      try {\n        if (window.opener) {\n          window.opener.postMessage({ type: 'agy_login_success' }, '*');\n        }\n      } catch (e) {}\n      setTimeout(() => {\n        window.close();\n      }, 1800);\n    } else {\n      document.getElementById('title').textContent = dict.loginFailedTitle;\n    }\n  </script>\n</body>\n</html>`\n}\n","/**\n * In-harness web UI for agy: routes registered on ctx.webServer at /agy.\n * Serves a self-contained HTML dashboard with account management, OAuth login\n * via a popup, paste-blob import, and account verification.\n *\n * The OAuth callback is a webServer route on the same loopback origin, so the\n * firstparty/nativeapp consent can complete locally; remote hosts use the\n * paste-blob form instead.\n */\n\nimport type { IncomingMessage, ServerResponse } from 'node:http'\nimport type { AccountStore } from '../store/accounts.ts'\nimport type { AgySessionManager } from '../session.ts'\nimport { authorizeAntigravity } from '../oauth/authorize.ts'\nimport { exchangeAntigravity } from '../oauth/exchange.ts'\nimport { decodeCredentialBlob } from '../oauth/blob.ts'\nimport { importManySources, upsertImportedAccount } from '../cli/import.ts'\nimport { generateFingerprint, recordFingerprintVersion } from '../runtime/fingerprint.ts'\nimport { resolveAntigravityVersionBounded } from '../runtime/version.ts'\nimport { renderDashboardHtml, renderCallbackHtml } from './page.ts'\n\nexport interface WebRoute {\n  kind: 'exact' | 'prefix'\n  path: string\n  handler: (req: IncomingMessage, res: ServerResponse) => void | Promise<void>\n}\n\nexport interface AgyWebOptions {\n  store: AccountStore\n  sessions: AgySessionManager\n  /** Base URL of the harness web server, e.g. http://127.0.0.1:3080 */\n  baseUrl: string\n}\n\nfunction sendJson(res: ServerResponse, status: number, data: unknown): void {\n  res.writeHead(status, { 'content-type': 'application/json' })\n  res.end(JSON.stringify(data))\n}\n\nasync function readJson(req: IncomingMessage): Promise<Record<string, unknown>> {\n  const chunks: Buffer[] = []\n  for await (const chunk of req) chunks.push(chunk as Buffer)\n  const text = Buffer.concat(chunks).toString('utf8')\n  return text ? (JSON.parse(text) as Record<string, unknown>) : {}\n}\n\nexport function createAgyWebRoutes(options: AgyWebOptions): WebRoute[] {\n  const { store, sessions, baseUrl } = options\n\n  // Authorizations issued by /auth-url, keyed by their raw state so the\n  // callback can bind the exchange to the verifier we actually issued.\n  const pendingAuth = new Map<string, { verifier: string; expiresAt: number }>()\n  const PENDING_AUTH_TTL_MS = 10 * 60 * 1000\n  const prunePendingAuth = (now = Date.now()) => {\n    for (const [key, entry] of pendingAuth) {\n      if (entry.expiresAt <= now) pendingAuth.delete(key)\n    }\n    while (pendingAuth.size > 100) {\n      let oldestKey: string | null = null\n      let oldestExpiry = Infinity\n      for (const [key, entry] of pendingAuth) {\n        if (entry.expiresAt < oldestExpiry) {\n          oldestExpiry = entry.expiresAt\n          oldestKey = key\n        }\n      }\n      if (oldestKey) pendingAuth.delete(oldestKey)\n      else break\n    }\n  }\n\n  const accountsList = async () => {\n    const storage = await store.load()\n    const now = Date.now()\n    const list = []\n    for (const [index, account] of storage.accounts.entries()) {\n      const entry: Record<string, unknown> = {\n        index,\n        email: account.email ?? null,\n        projectId: account.projectId ?? null,\n        active: index === storage.activeIndex && account.enabled !== false,\n        state: account.enabled === false ? 'disabled'\n          : account.verificationRequired ? 'verification-required'\n          : account.coolingDownUntil && account.coolingDownUntil > now ? 'cooling'\n          : 'active',\n        cooldownUntil: account.coolingDownUntil && account.coolingDownUntil > now ? new Date(account.coolingDownUntil).toISOString() : null,\n        cooldownReason: account.cooldownReason ?? null,\n        rateLimits: account.rateLimitResetTimes ?? null,\n        fingerprint: account.fingerprint\n          ? { userAgent: account.fingerprint.userAgent, deviceId: account.fingerprint.deviceId, createdAt: account.fingerprint.createdAt }\n          : null,\n        fingerprintHistory: (account.fingerprintHistory ?? []).length,\n        quota: null as Record<string, unknown> | null,\n      }\n      list.push(entry)\n    }\n    // Best-effort per-account quota via fetchAvailableModels (fresh token).\n    for (const entry of list) {\n      const session = await sessions.getSession().catch(() => undefined)\n      if (!session || session.index !== entry.index) continue\n      try {\n        const { fetchAvailableModels } = await import('../adapter/models.ts')\n        const discovered = await fetchAvailableModels(session.auth.access, session.account.projectId)\n        const models = Object.entries(discovered.models ?? {})\n        if (models.length > 0) {\n          const quotaRows = models\n            .map(([id, m]) => ({\n              id,\n              remainingFraction: typeof m.quotaInfo?.remainingFraction === 'number'\n                ? Math.max(0, Math.min(1, m.quotaInfo.remainingFraction))\n                : null,\n              resetTime: m.quotaInfo?.resetTime ?? null,\n            }))\n            .sort((a, b) => (a.remainingFraction ?? -1) - (b.remainingFraction ?? -1))\n          entry.quota = {\n            modelCount: models.length,\n            models: quotaRows,\n          }\n        }\n      } catch {\n        // quota stays null\n      }\n    }\n    return list\n  }\n\n  const handleAuthUrl = async (res: ServerResponse) => {\n    const redirectUri = `${baseUrl}/agy/oauth-callback`\n    const authorization = await authorizeAntigravity(redirectUri)\n    prunePendingAuth()\n    pendingAuth.set(authorization.state, {\n      verifier: authorization.verifier,\n      expiresAt: Date.now() + PENDING_AUTH_TTL_MS,\n    })\n    sendJson(res, 200, { url: authorization.url })\n  }\n\n  const handleCallback = async (req: IncomingMessage, res: ServerResponse) => {\n    const url = new URL(req.url ?? '/', baseUrl)\n    const code = url.searchParams.get('code')\n    const state = url.searchParams.get('state')\n    if (!code || !state) {\n      res.writeHead(400, { 'content-type': 'text/html; charset=utf-8' })\n      res.end(renderCallbackHtml({ ok: false, error: 'Missing code or state parameter', baseUrl }))\n      return\n    }\n    const expected = pendingAuth.get(state)\n    if (!expected) {\n      res.writeHead(400, { 'content-type': 'text/html; charset=utf-8' })\n      res.end(renderCallbackHtml({ ok: false, error: 'Unknown or expired authorization — please start a new login.', baseUrl }))\n      return\n    }\n    // One-time use: consume the issued state regardless of the exchange result.\n    pendingAuth.delete(state)\n    const redirectUri = `${baseUrl}/agy/oauth-callback`\n    const result = await exchangeAntigravity(code, state, redirectUri, expected.verifier)\n    if (result.type === 'failed') {\n      res.writeHead(400, { 'content-type': 'text/html; charset=utf-8' })\n      res.end(renderCallbackHtml({ ok: false, error: result.error, baseUrl }))\n      return\n    }\n    await upsertImportedAccount(store, {\n      accessToken: result.access,\n      refreshToken: result.refresh.split('|')[0]!,\n      tokenType: 'Bearer',\n      expiresAt: new Date(result.expires).toISOString(),\n      authMethod: 'oauth',\n      email: result.email ?? null,\n      projectId: result.projectId || null,\n    }, { overwriteExisting: true })\n\n    res.writeHead(200, { 'content-type': 'text/html; charset=utf-8' })\n    res.end(renderCallbackHtml({ ok: true, email: result.email ?? null, baseUrl }))\n  }\n\n  const handleImport = async (req: IncomingMessage, res: ServerResponse) => {\n    try {\n      const body = await readJson(req)\n      const kind = body.kind === 'blob' ? 'blob' : 'json'\n      // Batch mode: `sources` is an array of strings (multi-line paste / bulk files);\n      // single mode: `source` (backwards compatible).\n      const sources: unknown[] = Array.isArray(body.sources)\n        ? body.sources\n        : body.source !== undefined ? [body.source] : []\n      if (sources.length === 0) throw new Error('nothing to import')\n      const result = await importManySources(\n        sources.map((source) => ({ source, kind })),\n        store,\n        { overwriteExisting: true },\n      )\n      sendJson(res, 200, result)\n    } catch (error) {\n      sendJson(res, 400, { error: error instanceof Error ? error.message : String(error) })\n    }\n  }\n\n  const handleExportAll = async (_req: IncomingMessage, res: ServerResponse) => {\n    try {\n      const storage = await store.load()\n      const blobs: Array<{ index: number; blob: string }> = []\n      for (let index = 0; index < storage.accounts.length; index++) {\n        const result = await sessions.exportBlob(index)\n        if (result.blob) blobs.push({ index, blob: result.blob })\n      }\n      sendJson(res, 200, { blobs })\n    } catch (error) {\n      sendJson(res, 400, { error: error instanceof Error ? error.message : String(error) })\n    }\n  }\n\n  const handleVerify = async (req: IncomingMessage, res: ServerResponse) => {\n    try {\n      const body = await readJson(req)\n      const index = Number(body.index)\n      const result = await sessions.verifyAccount(index)\n      sendJson(res, result.ok ? 200 : 400, result)\n    } catch (error) {\n      sendJson(res, 400, { error: error instanceof Error ? error.message : String(error) })\n    }\n  }\n\n  const handleDelete = async (req: IncomingMessage, res: ServerResponse) => {\n    try {\n      const body = await readJson(req)\n      const index = Number(body.index)\n      await store.mutate((storage) => {\n        if (index < 0 || index >= storage.accounts.length) throw new Error('account not found')\n        storage.accounts.splice(index, 1)\n        if (storage.activeIndex >= storage.accounts.length) storage.activeIndex = 0\n      })\n      sendJson(res, 200, { ok: true })\n    } catch (error) {\n      sendJson(res, 400, { error: error instanceof Error ? error.message : String(error) })\n    }\n  }\n\n  const handleActivate = async (req: IncomingMessage, res: ServerResponse) => {\n    try {\n      const body = await readJson(req)\n      const index = Number(body.index)\n      await store.mutate((storage) => {\n        if (index < 0 || index >= storage.accounts.length) throw new Error('account not found')\n        storage.activeIndex = index\n      })\n      sendJson(res, 200, { ok: true, index })\n    } catch (error) {\n      sendJson(res, 400, { error: error instanceof Error ? error.message : String(error) })\n    }\n  }\n\n  const handleModels = async (_req: IncomingMessage, res: ServerResponse) => {\n    const session = await sessions.getSession().catch(() => undefined)\n    if (!session) {\n      sendJson(res, 400, { error: 'No agy account configured — run `dsh-agy login` first.' })\n      return\n    }\n    try {\n      const { listAgyModels } = await import('../adapter/models.ts')\n      const models = await listAgyModels(session.auth.access, session.account.projectId)\n      sendJson(res, 200, { account: session.account.email ?? null, models: models.map((m) => ({\n        id: m.id,\n        name: m.name,\n      })) })\n    } catch (error) {\n      sendJson(res, 400, { error: error instanceof Error ? error.message : String(error) })\n    }\n  }\n\n  const handleTest = async (req: IncomingMessage, res: ServerResponse) => {\n    try {\n      const body = await readJson(req)\n      const model = typeof body.model === 'string' ? body.model : ''\n      if (!model) {\n        sendJson(res, 400, { error: 'model is required' })\n        return\n      }\n      const result = await sessions.testCall(model)\n      sendJson(res, result.ok ? 200 : 400, result)\n    } catch (error) {\n      sendJson(res, 400, { error: error instanceof Error ? error.message : String(error) })\n    }\n  }\n\n  const handleExport = async (req: IncomingMessage, res: ServerResponse) => {\n    try {\n      const body = await readJson(req)\n      const index = Number(body.index)\n      const result = await sessions.exportBlob(index)\n      if (result.error) {\n        sendJson(res, 400, result)\n        return\n      }\n      sendJson(res, 200, { blob: result.blob })\n    } catch (error) {\n      sendJson(res, 400, { error: error instanceof Error ? error.message : String(error) })\n    }\n  }\n\n  const handleFingerprint = async (req: IncomingMessage, res: ServerResponse) => {\n    try {\n      const body = await readJson(req)\n      const index = Number(body.index)\n      const action = body.action === 'regenerate' ? 'regenerate' : 'show'\n      const result = await store.mutate(async (storage) => {\n        const account = storage.accounts[index]\n        if (!account) throw new Error('account not found')\n        if (action === 'regenerate') {\n          const fresh = generateFingerprint(undefined, await resolveAntigravityVersionBounded())\n          account.fingerprint = fresh\n          account.fingerprintHistory = recordFingerprintVersion(account.fingerprintHistory, fresh, 'regenerated')\n        }\n        return {\n          action,\n          fingerprint: account.fingerprint\n            ? { userAgent: account.fingerprint.userAgent, deviceId: account.fingerprint.deviceId, createdAt: account.fingerprint.createdAt }\n            : null,\n          history: account.fingerprintHistory?.length ?? 0,\n        }\n      })\n      sendJson(res, 200, result)\n    } catch (error) {\n      sendJson(res, 400, { error: error instanceof Error ? error.message : String(error) })\n    }\n  }\n\n  return [\n    { kind: 'exact', path: '/agy', handler: (req, res) => {\n      if (req.method === 'GET') {\n        res.writeHead(200, { 'content-type': 'text/html; charset=utf-8' })\n        res.end(renderDashboardHtml())\n        return\n      }\n      res.writeHead(405)\n      res.end()\n    } },\n    { kind: 'exact', path: '/agy/oauth-callback', handler: handleCallback },\n    { kind: 'exact', path: '/agy/api/accounts', handler: async (_req, res) => {\n      sendJson(res, 200, { accounts: await accountsList() })\n    } },\n    { kind: 'exact', path: '/agy/api/auth-url', handler: async (_req, res) => { await handleAuthUrl(res) } },\n    { kind: 'exact', path: '/agy/api/import', handler: handleImport },\n    { kind: 'exact', path: '/agy/api/export-all', handler: handleExportAll },\n    { kind: 'exact', path: '/agy/api/verify', handler: handleVerify },\n    { kind: 'exact', path: '/agy/api/delete', handler: handleDelete },\n    { kind: 'exact', path: '/agy/api/activate', handler: handleActivate },\n    { kind: 'exact', path: '/agy/api/models', handler: handleModels },\n    { kind: 'exact', path: '/agy/api/test', handler: handleTest },\n    { kind: 'exact', path: '/agy/api/export', handler: handleExport },\n    { kind: 'exact', path: '/agy/api/fingerprint', handler: handleFingerprint },\n  ]\n}\n\nexport { decodeCredentialBlob }\n","/**\n * dsh-agy web entry: registers the /agy routes on ctx.webServer. Declared as a\n * separate plugin (inject: ['webServer']) because the web server activates\n * after the llm service (it waits on webStartup); a strict ctx.get in the main\n * plugin's apply would return undefined. In profiles without a web server this\n * entry simply stays pending.\n */\n\nimport type { Context } from '@deepseek-ai/cordis'\nimport { createAgyRuntime } from '../plugin-common.ts'\nimport { createAgyWebRoutes, type WebRoute } from './routes.ts'\n\nexport const name = 'dsh-agy-web'\n\nexport const inject = ['llm', 'webServer']\n\nexport function apply(ctx: Context): void {\n  ctx.effect(async () => {\n    const webServer = ctx.get('webServer') as\n      | { register(route: WebRoute): () => void; host?: string }\n      | undefined\n    if (!webServer) return () => {}\n\n    // Host/port come from the webStartup provider (CLI args); the fallbacks are\n    // DSH's own web-app defaults (loopback + 3080), never a user override.\n    const webStartup = ctx.get('webStartup') as { host?: string; port?: number } | undefined\n    const host = webStartup?.host ?? '127.0.0.1'\n    const port = webStartup?.port ?? 3080\n\n    // The /agy routes manage account credentials with no authentication of\n    // their own; they must never be reachable from the network. When the web\n    // server binds a non-loopback interface, refuse to register them at all\n    // (the loopback-only OAuth redirect would be unusable there anyway).\n    const bindHost = webServer.host ?? host\n    if (!['127.0.0.1', 'localhost', '::1'].includes(bindHost)) {\n      ctx.logger.warn(\n        '[dsh-agy] web server bound to \"' + bindHost + '\" (non-loopback): not registering the /agy routes ' +\n        '(they manage account credentials and must stay loopback-only). Bind the web server to 127.0.0.1 to enable them.',\n      )\n      return () => {}\n    }\n\n    const { store, sessions } = await createAgyRuntime(ctx)\n    const baseUrl = `http://${host}:${port}`\n\n    const disposers = createAgyWebRoutes({ store, sessions, baseUrl }).map((route) =>\n      webServer.register(route),\n    )\n    return () => {\n      for (const dispose of disposers) dispose()\n    }\n  })\n}\n"],"mappings":";;;;;AAmEA,MAAa,YAAkD;CAC7D,IAAI;EACF,OAAO;EACP,UAAU;EACV,SAAS;EACT,iBAAiB;EACjB,YAAY;EACZ,cAAc;EACd,YAAY;EACZ,gBAAgB;EAChB,aAAa;EACb,aAAa;EACb,cAAc;EACd,kBAAkB;EAClB,2BAA2B;EAC3B,eAAe;EACf,SAAS;EACT,gBAAgB;EAChB,UAAU;EACV,QAAQ;EACR,WAAW;EACX,SAAS;EACT,YAAY;EACZ,aAAa;EACb,eAAe;EACf,eAAe;EACf,gBAAgB;EAChB,qBAAqB;EACrB,YAAY;EACZ,kBAAkB;EAClB,iBAAiB;EACjB,WAAW;EACX,SAAS;EACT,QAAQ;EACR,aAAa;EACb,YAAY;EACZ,mBAAmB;EACnB,YAAY;EACZ,eAAe;EACf,eAAe;EACf,WAAW;EACX,mBAAmB;EACnB,YAAY;EACZ,kBAAkB;EAClB,mBAAmB;EACnB,sBAAsB;EACtB,oBAAoB;EACpB,oBAAoB;EACpB,cAAc;EACd,aAAa;EACb,WAAW;EACX,aAAa;EACb,qBAAqB;EACrB,mBAAmB;EACnB,kBAAkB;EAClB,kBAAkB;EAClB,iBAAiB;EACjB,eAAe;EACf,aAAa;EACb,YAAY;EACZ,SAAS;EACT,SAAS;CACX;CACA,IAAI;EACF,OAAO;EACP,UAAU;EACV,SAAS;EACT,iBAAiB;EACjB,YAAY;EACZ,cAAc;EACd,YAAY;EACZ,gBAAgB;EAChB,aAAa;EACb,aAAa;EACb,cAAc;EACd,kBAAkB;EAClB,2BAA2B;EAC3B,eAAe;EACf,SAAS;EACT,gBAAgB;EAChB,UAAU;EACV,QAAQ;EACR,WAAW;EACX,SAAS;EACT,YAAY;EACZ,aAAa;EACb,eAAe;EACf,eAAe;EACf,gBAAgB;EAChB,qBAAqB;EACrB,YAAY;EACZ,kBAAkB;EAClB,iBAAiB;EACjB,WAAW;EACX,SAAS;EACT,QAAQ;EACR,aAAa;EACb,YAAY;EACZ,mBAAmB;EACnB,YAAY;EACZ,eAAe;EACf,eAAe;EACf,WAAW;EACX,mBAAmB;EACnB,YAAY;EACZ,kBAAkB;EAClB,mBAAmB;EACnB,sBAAsB;EACtB,oBAAoB;EACpB,oBAAoB;EACpB,cAAc;EACd,aAAa;EACb,WAAW;EACX,aAAa;EACb,qBAAqB;EACrB,mBAAmB;EACnB,kBAAkB;EAClB,kBAAkB;EAClB,iBAAiB;EACjB,eAAe;EACf,aAAa;EACb,YAAY;EACZ,SAAS;EACT,SAAS;CACX;AACF;;;;;;;ACzLA,SAAgB,sBAA8B;CAG5C,OAAO;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;mBAFU,KAAK,UAAU,SAkjBR,EAAE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAkb5B;AAEA,SAAgB,mBAAmB,SAA0F;CAC3H,MAAM,EAAE,IAAI,OAAO,OAAO,YAAY;CACtC,MAAM,WAAW,KAAK,UAAU,SAAS;CAEzC,OAAO;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;MAwFH,KAAK;;;8CAGmC,QAAQ,aAAa,QAAQ,eAAe,GAAG;;;QAGrF;;;oCAG4B,SAAS,gBAAgB;yCACpB,QAAQ;MAC3C;;;mBAGa,SAAS;;;;UAIlB,KAAK,SAAS,QAAQ;;6EAE6C,KAAK,UAAU,QAAQ,OAAO,QAAQ,MAAM,EAAE,EAAE;;;;;;;;;;;;;;;;;;AAkB7H;;;AC9kCA,SAAS,SAAS,KAAqB,QAAgB,MAAqB;CAC1E,IAAI,UAAU,QAAQ,EAAE,gBAAgB,mBAAmB,CAAC;CAC5D,IAAI,IAAI,KAAK,UAAU,IAAI,CAAC;AAC9B;AAEA,eAAe,SAAS,KAAwD;CAC9E,MAAM,SAAmB,CAAC;CAC1B,WAAW,MAAM,SAAS,KAAK,OAAO,KAAK,KAAe;CAC1D,MAAM,OAAO,OAAO,OAAO,MAAM,CAAC,CAAC,SAAS,MAAM;CAClD,OAAO,OAAQ,KAAK,MAAM,IAAI,IAAgC,CAAC;AACjE;AAEA,SAAgB,mBAAmB,SAAoC;CACrE,MAAM,EAAE,OAAO,UAAU,YAAY;CAIrC,MAAM,8BAAc,IAAI,IAAqD;CAC7E,MAAM,sBAAsB;CAC5B,MAAM,oBAAoB,MAAM,KAAK,IAAI,MAAM;EAC7C,KAAK,MAAM,CAAC,KAAK,UAAU,aACzB,IAAI,MAAM,aAAa,KAAK,YAAY,OAAO,GAAG;EAEpD,OAAO,YAAY,OAAO,KAAK;GAC7B,IAAI,YAA2B;GAC/B,IAAI,eAAe;GACnB,KAAK,MAAM,CAAC,KAAK,UAAU,aACzB,IAAI,MAAM,YAAY,cAAc;IAClC,eAAe,MAAM;IACrB,YAAY;GACd;GAEF,IAAI,WAAW,YAAY,OAAO,SAAS;QACtC;EACP;CACF;CAEA,MAAM,eAAe,YAAY;EAC/B,MAAM,UAAU,MAAM,MAAM,KAAK;EACjC,MAAM,MAAM,KAAK,IAAI;EACrB,MAAM,OAAO,CAAC;EACd,KAAK,MAAM,CAAC,OAAO,YAAY,QAAQ,SAAS,QAAQ,GAAG;GACzD,MAAM,QAAiC;IACrC;IACA,OAAO,QAAQ,SAAS;IACxB,WAAW,QAAQ,aAAa;IAChC,QAAQ,UAAU,QAAQ,eAAe,QAAQ,YAAY;IAC7D,OAAO,QAAQ,YAAY,QAAQ,aAC/B,QAAQ,uBAAuB,0BAC/B,QAAQ,oBAAoB,QAAQ,mBAAmB,MAAM,YAC7D;IACJ,eAAe,QAAQ,oBAAoB,QAAQ,mBAAmB,MAAM,IAAI,KAAK,QAAQ,gBAAgB,CAAC,CAAC,YAAY,IAAI;IAC/H,gBAAgB,QAAQ,kBAAkB;IAC1C,YAAY,QAAQ,uBAAuB;IAC3C,aAAa,QAAQ,cACjB;KAAE,WAAW,QAAQ,YAAY;KAAW,UAAU,QAAQ,YAAY;KAAU,WAAW,QAAQ,YAAY;IAAU,IAC7H;IACJ,qBAAqB,QAAQ,sBAAsB,CAAC,EAAA,CAAG;IACvD,OAAO;GACT;GACA,KAAK,KAAK,KAAK;EACjB;EAEA,KAAK,MAAM,SAAS,MAAM;GACxB,MAAM,UAAU,MAAM,SAAS,WAAW,CAAC,CAAC,YAAY,KAAA,CAAS;GACjE,IAAI,CAAC,WAAW,QAAQ,UAAU,MAAM,OAAO;GAC/C,IAAI;IACF,MAAM,EAAE,yBAAyB,MAAM,OAAO,yBAAuB,CAAA,MAAA,MAAA,EAAA,CAAA;IACrE,MAAM,aAAa,MAAM,qBAAqB,QAAQ,KAAK,QAAQ,QAAQ,QAAQ,SAAS;IAC5F,MAAM,SAAS,OAAO,QAAQ,WAAW,UAAU,CAAC,CAAC;IACrD,IAAI,OAAO,SAAS,GAAG;KACrB,MAAM,YAAY,OACf,KAAK,CAAC,IAAI,QAAQ;MACjB;MACA,mBAAmB,OAAO,EAAE,WAAW,sBAAsB,WACzD,KAAK,IAAI,GAAG,KAAK,IAAI,GAAG,EAAE,UAAU,iBAAiB,CAAC,IACtD;MACJ,WAAW,EAAE,WAAW,aAAa;KACvC,EAAE,CAAC,CACF,MAAM,GAAG,OAAO,EAAE,qBAAqB,OAAO,EAAE,qBAAqB,GAAG;KAC3E,MAAM,QAAQ;MACZ,YAAY,OAAO;MACnB,QAAQ;KACV;IACF;GACF,QAAQ,CAER;EACF;EACA,OAAO;CACT;CAEA,MAAM,gBAAgB,OAAO,QAAwB;EACnD,MAAM,cAAc,GAAG,QAAQ;EAC/B,MAAM,gBAAgB,MAAM,qBAAqB,WAAW;EAC5D,iBAAiB;EACjB,YAAY,IAAI,cAAc,OAAO;GACnC,UAAU,cAAc;GACxB,WAAW,KAAK,IAAI,IAAI;EAC1B,CAAC;EACD,SAAS,KAAK,KAAK,EAAE,KAAK,cAAc,IAAI,CAAC;CAC/C;CAEA,MAAM,iBAAiB,OAAO,KAAsB,QAAwB;EAC1E,MAAM,MAAM,IAAI,IAAI,IAAI,OAAO,KAAK,OAAO;EAC3C,MAAM,OAAO,IAAI,aAAa,IAAI,MAAM;EACxC,MAAM,QAAQ,IAAI,aAAa,IAAI,OAAO;EAC1C,IAAI,CAAC,QAAQ,CAAC,OAAO;GACnB,IAAI,UAAU,KAAK,EAAE,gBAAgB,2BAA2B,CAAC;GACjE,IAAI,IAAI,mBAAmB;IAAE,IAAI;IAAO,OAAO;IAAmC;GAAQ,CAAC,CAAC;GAC5F;EACF;EACA,MAAM,WAAW,YAAY,IAAI,KAAK;EACtC,IAAI,CAAC,UAAU;GACb,IAAI,UAAU,KAAK,EAAE,gBAAgB,2BAA2B,CAAC;GACjE,IAAI,IAAI,mBAAmB;IAAE,IAAI;IAAO,OAAO;IAAgE;GAAQ,CAAC,CAAC;GACzH;EACF;EAEA,YAAY,OAAO,KAAK;EACxB,MAAM,cAAc,GAAG,QAAQ;EAC/B,MAAM,SAAS,MAAM,oBAAoB,MAAM,OAAO,aAAa,SAAS,QAAQ;EACpF,IAAI,OAAO,SAAS,UAAU;GAC5B,IAAI,UAAU,KAAK,EAAE,gBAAgB,2BAA2B,CAAC;GACjE,IAAI,IAAI,mBAAmB;IAAE,IAAI;IAAO,OAAO,OAAO;IAAO;GAAQ,CAAC,CAAC;GACvE;EACF;EACA,MAAM,sBAAsB,OAAO;GACjC,aAAa,OAAO;GACpB,cAAc,OAAO,QAAQ,MAAM,GAAG,CAAC,CAAC;GACxC,WAAW;GACX,WAAW,IAAI,KAAK,OAAO,OAAO,CAAC,CAAC,YAAY;GAChD,YAAY;GACZ,OAAO,OAAO,SAAS;GACvB,WAAW,OAAO,aAAa;EACjC,GAAG,EAAE,mBAAmB,KAAK,CAAC;EAE9B,IAAI,UAAU,KAAK,EAAE,gBAAgB,2BAA2B,CAAC;EACjE,IAAI,IAAI,mBAAmB;GAAE,IAAI;GAAM,OAAO,OAAO,SAAS;GAAM;EAAQ,CAAC,CAAC;CAChF;CAEA,MAAM,eAAe,OAAO,KAAsB,QAAwB;EACxE,IAAI;GACF,MAAM,OAAO,MAAM,SAAS,GAAG;GAC/B,MAAM,OAAO,KAAK,SAAS,SAAS,SAAS;GAG7C,MAAM,UAAqB,MAAM,QAAQ,KAAK,OAAO,IACjD,KAAK,UACL,KAAK,WAAW,KAAA,IAAY,CAAC,KAAK,MAAM,IAAI,CAAC;GACjD,IAAI,QAAQ,WAAW,GAAG,MAAM,IAAI,MAAM,mBAAmB;GAM7D,SAAS,KAAK,KAAK,MALE,kBACnB,QAAQ,KAAK,YAAY;IAAE;IAAQ;GAAK,EAAE,GAC1C,OACA,EAAE,mBAAmB,KAAK,CAC5B,CACyB;EAC3B,SAAS,OAAO;GACd,SAAS,KAAK,KAAK,EAAE,OAAO,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,EAAE,CAAC;EACtF;CACF;CAEA,MAAM,kBAAkB,OAAO,MAAuB,QAAwB;EAC5E,IAAI;GACF,MAAM,UAAU,MAAM,MAAM,KAAK;GACjC,MAAM,QAAgD,CAAC;GACvD,KAAK,IAAI,QAAQ,GAAG,QAAQ,QAAQ,SAAS,QAAQ,SAAS;IAC5D,MAAM,SAAS,MAAM,SAAS,WAAW,KAAK;IAC9C,IAAI,OAAO,MAAM,MAAM,KAAK;KAAE;KAAO,MAAM,OAAO;IAAK,CAAC;GAC1D;GACA,SAAS,KAAK,KAAK,EAAE,MAAM,CAAC;EAC9B,SAAS,OAAO;GACd,SAAS,KAAK,KAAK,EAAE,OAAO,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,EAAE,CAAC;EACtF;CACF;CAEA,MAAM,eAAe,OAAO,KAAsB,QAAwB;EACxE,IAAI;GACF,MAAM,OAAO,MAAM,SAAS,GAAG;GAC/B,MAAM,QAAQ,OAAO,KAAK,KAAK;GAC/B,MAAM,SAAS,MAAM,SAAS,cAAc,KAAK;GACjD,SAAS,KAAK,OAAO,KAAK,MAAM,KAAK,MAAM;EAC7C,SAAS,OAAO;GACd,SAAS,KAAK,KAAK,EAAE,OAAO,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,EAAE,CAAC;EACtF;CACF;CAEA,MAAM,eAAe,OAAO,KAAsB,QAAwB;EACxE,IAAI;GACF,MAAM,OAAO,MAAM,SAAS,GAAG;GAC/B,MAAM,QAAQ,OAAO,KAAK,KAAK;GAC/B,MAAM,MAAM,QAAQ,YAAY;IAC9B,IAAI,QAAQ,KAAK,SAAS,QAAQ,SAAS,QAAQ,MAAM,IAAI,MAAM,mBAAmB;IACtF,QAAQ,SAAS,OAAO,OAAO,CAAC;IAChC,IAAI,QAAQ,eAAe,QAAQ,SAAS,QAAQ,QAAQ,cAAc;GAC5E,CAAC;GACD,SAAS,KAAK,KAAK,EAAE,IAAI,KAAK,CAAC;EACjC,SAAS,OAAO;GACd,SAAS,KAAK,KAAK,EAAE,OAAO,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,EAAE,CAAC;EACtF;CACF;CAEA,MAAM,iBAAiB,OAAO,KAAsB,QAAwB;EAC1E,IAAI;GACF,MAAM,OAAO,MAAM,SAAS,GAAG;GAC/B,MAAM,QAAQ,OAAO,KAAK,KAAK;GAC/B,MAAM,MAAM,QAAQ,YAAY;IAC9B,IAAI,QAAQ,KAAK,SAAS,QAAQ,SAAS,QAAQ,MAAM,IAAI,MAAM,mBAAmB;IACtF,QAAQ,cAAc;GACxB,CAAC;GACD,SAAS,KAAK,KAAK;IAAE,IAAI;IAAM;GAAM,CAAC;EACxC,SAAS,OAAO;GACd,SAAS,KAAK,KAAK,EAAE,OAAO,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,EAAE,CAAC;EACtF;CACF;CAEA,MAAM,eAAe,OAAO,MAAuB,QAAwB;EACzE,MAAM,UAAU,MAAM,SAAS,WAAW,CAAC,CAAC,YAAY,KAAA,CAAS;EACjE,IAAI,CAAC,SAAS;GACZ,SAAS,KAAK,KAAK,EAAE,OAAO,yDAAyD,CAAC;GACtF;EACF;EACA,IAAI;GACF,MAAM,EAAE,kBAAkB,MAAM,OAAO,yBAAuB,CAAA,MAAA,MAAA,EAAA,CAAA;GAC9D,MAAM,SAAS,MAAM,cAAc,QAAQ,KAAK,QAAQ,QAAQ,QAAQ,SAAS;GACjF,SAAS,KAAK,KAAK;IAAE,SAAS,QAAQ,QAAQ,SAAS;IAAM,QAAQ,OAAO,KAAK,OAAO;KACtF,IAAI,EAAE;KACN,MAAM,EAAE;IACV,EAAE;GAAE,CAAC;EACP,SAAS,OAAO;GACd,SAAS,KAAK,KAAK,EAAE,OAAO,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,EAAE,CAAC;EACtF;CACF;CAEA,MAAM,aAAa,OAAO,KAAsB,QAAwB;EACtE,IAAI;GACF,MAAM,OAAO,MAAM,SAAS,GAAG;GAC/B,MAAM,QAAQ,OAAO,KAAK,UAAU,WAAW,KAAK,QAAQ;GAC5D,IAAI,CAAC,OAAO;IACV,SAAS,KAAK,KAAK,EAAE,OAAO,oBAAoB,CAAC;IACjD;GACF;GACA,MAAM,SAAS,MAAM,SAAS,SAAS,KAAK;GAC5C,SAAS,KAAK,OAAO,KAAK,MAAM,KAAK,MAAM;EAC7C,SAAS,OAAO;GACd,SAAS,KAAK,KAAK,EAAE,OAAO,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,EAAE,CAAC;EACtF;CACF;CAEA,MAAM,eAAe,OAAO,KAAsB,QAAwB;EACxE,IAAI;GACF,MAAM,OAAO,MAAM,SAAS,GAAG;GAC/B,MAAM,QAAQ,OAAO,KAAK,KAAK;GAC/B,MAAM,SAAS,MAAM,SAAS,WAAW,KAAK;GAC9C,IAAI,OAAO,OAAO;IAChB,SAAS,KAAK,KAAK,MAAM;IACzB;GACF;GACA,SAAS,KAAK,KAAK,EAAE,MAAM,OAAO,KAAK,CAAC;EAC1C,SAAS,OAAO;GACd,SAAS,KAAK,KAAK,EAAE,OAAO,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,EAAE,CAAC;EACtF;CACF;CAEA,MAAM,oBAAoB,OAAO,KAAsB,QAAwB;EAC7E,IAAI;GACF,MAAM,OAAO,MAAM,SAAS,GAAG;GAC/B,MAAM,QAAQ,OAAO,KAAK,KAAK;GAC/B,MAAM,SAAS,KAAK,WAAW,eAAe,eAAe;GAiB7D,SAAS,KAAK,KAAK,MAhBE,MAAM,OAAO,OAAO,YAAY;IACnD,MAAM,UAAU,QAAQ,SAAS;IACjC,IAAI,CAAC,SAAS,MAAM,IAAI,MAAM,mBAAmB;IACjD,IAAI,WAAW,cAAc;KAC3B,MAAM,QAAQ,oBAAoB,KAAA,GAAW,MAAM,iCAAiC,CAAC;KACrF,QAAQ,cAAc;KACtB,QAAQ,qBAAqB,yBAAyB,QAAQ,oBAAoB,OAAO,aAAa;IACxG;IACA,OAAO;KACL;KACA,aAAa,QAAQ,cACjB;MAAE,WAAW,QAAQ,YAAY;MAAW,UAAU,QAAQ,YAAY;MAAU,WAAW,QAAQ,YAAY;KAAU,IAC7H;KACJ,SAAS,QAAQ,oBAAoB,UAAU;IACjD;GACF,CAAC,CACwB;EAC3B,SAAS,OAAO;GACd,SAAS,KAAK,KAAK,EAAE,OAAO,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,EAAE,CAAC;EACtF;CACF;CAEA,OAAO;EACL;GAAE,MAAM;GAAS,MAAM;GAAQ,UAAU,KAAK,QAAQ;IACpD,IAAI,IAAI,WAAW,OAAO;KACxB,IAAI,UAAU,KAAK,EAAE,gBAAgB,2BAA2B,CAAC;KACjE,IAAI,IAAI,oBAAoB,CAAC;KAC7B;IACF;IACA,IAAI,UAAU,GAAG;IACjB,IAAI,IAAI;GACV;EAAE;EACF;GAAE,MAAM;GAAS,MAAM;GAAuB,SAAS;EAAe;EACtE;GAAE,MAAM;GAAS,MAAM;GAAqB,SAAS,OAAO,MAAM,QAAQ;IACxE,SAAS,KAAK,KAAK,EAAE,UAAU,MAAM,aAAa,EAAE,CAAC;GACvD;EAAE;EACF;GAAE,MAAM;GAAS,MAAM;GAAqB,SAAS,OAAO,MAAM,QAAQ;IAAE,MAAM,cAAc,GAAG;GAAE;EAAE;EACvG;GAAE,MAAM;GAAS,MAAM;GAAmB,SAAS;EAAa;EAChE;GAAE,MAAM;GAAS,MAAM;GAAuB,SAAS;EAAgB;EACvE;GAAE,MAAM;GAAS,MAAM;GAAmB,SAAS;EAAa;EAChE;GAAE,MAAM;GAAS,MAAM;GAAmB,SAAS;EAAa;EAChE;GAAE,MAAM;GAAS,MAAM;GAAqB,SAAS;EAAe;EACpE;GAAE,MAAM;GAAS,MAAM;GAAmB,SAAS;EAAa;EAChE;GAAE,MAAM;GAAS,MAAM;GAAiB,SAAS;EAAW;EAC5D;GAAE,MAAM;GAAS,MAAM;GAAmB,SAAS;EAAa;EAChE;GAAE,MAAM;GAAS,MAAM;GAAwB,SAAS;EAAkB;CAC5E;AACF;;;AClVA,MAAa,OAAO;AAEpB,MAAa,SAAS,CAAC,OAAO,WAAW;AAEzC,SAAgB,MAAM,KAAoB;CACxC,IAAI,OAAO,YAAY;EACrB,MAAM,YAAY,IAAI,IAAI,WAAW;EAGrC,IAAI,CAAC,WAAW,aAAa,CAAC;EAI9B,MAAM,aAAa,IAAI,IAAI,YAAY;EACvC,MAAM,OAAO,YAAY,QAAQ;EACjC,MAAM,OAAO,YAAY,QAAQ;EAMjC,MAAM,WAAW,UAAU,QAAQ;EACnC,IAAI,CAAC;GAAC;GAAa;GAAa;EAAK,CAAC,CAAC,SAAS,QAAQ,GAAG;GACzD,IAAI,OAAO,KACT,qCAAoC,WAAW,oKAEjD;GACA,aAAa,CAAC;EAChB;EAEA,MAAM,EAAE,OAAO,aAAa,MAAM,iBAAiB,GAAG;EAGtD,MAAM,YAAY,mBAAmB;GAAE;GAAO;GAAU,mBAF9B,KAAK,GAAG;EAE8B,CAAC,CAAC,CAAC,KAAK,UACtE,UAAU,SAAS,KAAK,CAC1B;EACA,aAAa;GACX,KAAK,MAAM,WAAW,WAAW,QAAQ;EAC3C;CACF,CAAC;AACH"}
+{"version":3,"file":"plugin.mjs","names":[],"sources":["../../src/web/i18n.ts","../../src/web/page.ts","../../src/web/routes.ts","../../src/web/plugin.ts"],"sourcesContent":["/**\n * Bilingual UI dictionary for the dsh-agy web dashboard and OAuth callbacks.\n */\n\nexport interface I18nStrings {\n  title: string\n  subtitle: string\n  refresh: string\n  loginWithGoogle: string\n  switchLang: string\n  accountsList: string\n  noAccounts: string\n  noAccountsHint: string\n  activeBadge: string\n  stateActive: string\n  stateCooling: string\n  stateRateLimited: string\n  stateVerificationRequired: string\n  stateDisabled: string\n  project: string\n  defaultProject: string\n  activate: string\n  verify: string\n  verifyCta: string\n  testAll: string\n  exportBlob: string\n  fingerprint: string\n  deleteAccount: string\n  confirmDelete: string\n  confirmTestAll: string\n  confirmRegenerateFp: string\n  quotaTitle: string\n  quotaUnavailable: string\n  noQuotaReported: string\n  testModel: string\n  testing: string\n  copied: string\n  importTitle: string\n  importDesc: string\n  importPlaceholder: string\n  importJson: string\n  importBlobBtn: string\n  importSuccess: string\n  exportAll: string\n  importBatchResult: string\n  copyAllMsg: string\n  fingerprintTitle: string\n  fingerprintDevice: string\n  fingerprintUserAgent: string\n  fingerprintCreated: string\n  fingerprintHistory: string\n  regenerateFp: string\n  copyBlobMsg: string\n  copyFpMsg: string\n  allModelsOk: string\n  modelsTestedSummary: string\n  loginSuccessTitle: string\n  loginSuccessDesc: string\n  loginFailedTitle: string\n  loginFailedDesc: string\n  windowClosing: string\n  closeWindow: string\n  retryLogin: string\n  resetIn: string\n  resetAt: string\n}\n\nexport const I18N_DICT: { en: I18nStrings; zh: I18nStrings } = {\n  en: {\n    title: 'Antigravity Account Pool',\n    subtitle: 'Manage multi-account rotation, quota monitoring, and credentials.',\n    refresh: 'Refresh',\n    loginWithGoogle: 'Login with Google',\n    switchLang: '中文',\n    accountsList: 'Accounts',\n    noAccounts: 'No accounts configured',\n    noAccountsHint: 'Click \"Login with Google\" or import credentials below to get started.',\n    activeBadge: 'Active',\n    stateActive: 'Healthy',\n    stateCooling: 'Cooling Down',\n    stateRateLimited: 'Rate Limited',\n    stateVerificationRequired: 'Verification Required',\n    stateDisabled: 'Disabled',\n    project: 'Project',\n    defaultProject: 'default',\n    activate: 'Set Active',\n    verify: 'Verify',\n    verifyCta: 'Verify Now',\n    testAll: 'Test All Models',\n    exportBlob: 'Export Blob',\n    fingerprint: 'Fingerprint',\n    deleteAccount: 'Delete Account',\n    confirmDelete: 'Are you sure you want to delete this account? This action cannot be undone.',\n    confirmTestAll: 'Test All will execute real API calls on all models, consuming actual quota. Continue?',\n    confirmRegenerateFp: 'Generate a fresh device fingerprint and user agent for this account?',\n    quotaTitle: 'Model Quotas',\n    quotaUnavailable: 'Quota information unavailable for this account',\n    noQuotaReported: 'No quota reported by upstream',\n    testModel: 'Test',\n    testing: 'Testing...',\n    copied: 'Copied to clipboard!',\n    importTitle: 'Import Credentials',\n    importDesc: 'Paste an agy auth.json token document, or a credential blob (from dsh-agy login --blob). Paste multiple blobs, one per line, for a batch import:',\n    importPlaceholder: '{\"token\":{\"access_token\":\"...\",\"refresh_token\":\"...\"}} or dsh-agy-cred-v1.... (one blob per line for batch)',\n    importJson: 'Import JSON',\n    importBlobBtn: 'Import Blob',\n    importSuccess: 'Successfully imported account: ',\n    exportAll: 'Export All',\n    importBatchResult: 'Imported {imported}, replaced {replaced}',\n    copyAllMsg: 'All credential blobs exported. Copied to clipboard!',\n    fingerprintTitle: 'Device Fingerprint',\n    fingerprintDevice: 'Device ID',\n    fingerprintUserAgent: 'User Agent',\n    fingerprintCreated: 'Generated At',\n    fingerprintHistory: 'Fingerprint Versions',\n    regenerateFp: 'Regenerate Fingerprint',\n    copyBlobMsg: 'Credential blob exported. Copied to clipboard!',\n    copyFpMsg: 'Device fingerprint details loaded.',\n    allModelsOk: 'All model tests passed!',\n    modelsTestedSummary: 'Completed testing {total} models: {ok} passed, {failed} failed.',\n    loginSuccessTitle: 'Sign-in Successful',\n    loginSuccessDesc: 'Your Antigravity account has been authorized and saved.',\n    loginFailedTitle: 'Sign-in Failed',\n    loginFailedDesc: 'Unable to complete authorization. Error details:',\n    windowClosing: 'This window will close automatically in a moment...',\n    closeWindow: 'Close Window',\n    retryLogin: 'Return to Dashboard',\n    resetIn: 'Resets in ',\n    resetAt: 'Resets at ',\n  },\n  zh: {\n    title: 'Antigravity 账号池管理',\n    subtitle: '多账号智能轮换、配额实时监控与凭据指纹管理。',\n    refresh: '刷新',\n    loginWithGoogle: 'Google 账号登录',\n    switchLang: 'EN',\n    accountsList: '账号列表',\n    noAccounts: '暂无配置账号',\n    noAccountsHint: '点击上方“Google 账号登录”或在下方粘贴凭据以添加账号。',\n    activeBadge: '当前使用',\n    stateActive: '正常',\n    stateCooling: '冷却中',\n    stateRateLimited: '已限流',\n    stateVerificationRequired: '需要验证',\n    stateDisabled: '已禁用',\n    project: '项目 ID',\n    defaultProject: '默认项目',\n    activate: '设为默认',\n    verify: '验证账号',\n    verifyCta: '立即验证',\n    testAll: '测试全部模型',\n    exportBlob: '导出凭据 Blob',\n    fingerprint: '设备指纹',\n    deleteAccount: '删除账号',\n    confirmDelete: '确定要删除此账号吗？该操作不可撤销。',\n    confirmTestAll: '批量测试将对所有模型发起真实调用并消耗 API 配额，确认继续？',\n    confirmRegenerateFp: '确定要为该账号重新生成全新的设备指纹与 User-Agent 吗？',\n    quotaTitle: '模型配额池',\n    quotaUnavailable: '无法获取该账号的模型配额信息',\n    noQuotaReported: '上游未返回配额信息',\n    testModel: '测试',\n    testing: '测试中...',\n    copied: '已复制到剪贴板！',\n    importTitle: '导入凭据',\n    importDesc: '粘贴 agy auth.json 文件内容，或输入凭据 blob（来自 dsh-agy login --blob）。多个 blob 每行一个即可批量导入：',\n    importPlaceholder: '{\"token\":{\"access_token\":\"...\",\"refresh_token\":\"...\"}} 或 dsh-agy-cred-v1....（批量：每行一个 blob）',\n    importJson: '导入 JSON',\n    importBlobBtn: '导入 Blob',\n    importSuccess: '成功导入账号：',\n    exportAll: '导出全部',\n    importBatchResult: '导入 {imported} 个，替换 {replaced} 个',\n    copyAllMsg: '全部凭据 Blob 已导出并复制到剪贴板！',\n    fingerprintTitle: '设备指纹信息',\n    fingerprintDevice: '设备 ID (DeviceId)',\n    fingerprintUserAgent: '用户代理 (User-Agent)',\n    fingerprintCreated: '生成时间',\n    fingerprintHistory: '历史版本数',\n    regenerateFp: '重新生成指纹',\n    copyBlobMsg: '凭据 Blob 已成功导出并复制到剪贴板！',\n    copyFpMsg: '设备指纹信息已加载。',\n    allModelsOk: '所有模型可用性测试通过！',\n    modelsTestedSummary: '完成 {total} 个模型测试：{ok} 个可用，{failed} 个失败。',\n    loginSuccessTitle: '授权登录成功',\n    loginSuccessDesc: 'Antigravity 账号已成功接入并保存。',\n    loginFailedTitle: '授权登录失败',\n    loginFailedDesc: '无法完成 OAuth 授权，错误详情：',\n    windowClosing: '此窗口即将在 2 秒内自动关闭...',\n    closeWindow: '立即关闭窗口',\n    retryLogin: '返回控制面板',\n    resetIn: '将在 ',\n    resetAt: '重置时间：',\n  },\n}\n","/**\n * Web dashboard HTML/CSS/JS generator for dsh-agy.\n * Follows DeepSeek Harness (DSH) design system tokens and UX conventions.\n */\n\nimport { I18N_DICT } from './i18n.ts'\n\nexport function renderDashboardHtml(): string {\n  const i18nJson = JSON.stringify(I18N_DICT)\n\n  return `<!doctype html>\n<html lang=\"en\">\n<head>\n  <meta charset=\"utf-8\">\n  <meta name=\"viewport\" content=\"width=device-width, initial-scale=1\">\n  <title>agy — Antigravity Accounts</title>\n  <style>\n    /* DSH Design System Tokens snapshot (ui-theme / design-platform) */\n    :root {\n      color-scheme: light dark;\n      --dsw-font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', 'PingFang SC', 'Hiragino Sans GB', 'Microsoft YaHei', 'Helvetica Neue', Helvetica, Arial, sans-serif;\n      --ds-font-family-code: 'SF Mono', 'JetBrains Mono', 'Fira Code', Consolas, 'Liberation Mono', Menlo, Courier, monospace;\n      --ds-ease-in-out: cubic-bezier(0.4, 0, 0.2, 1);\n      --ds-transition-fast: 0.12s var(--ds-ease-in-out);\n      --ds-transition-normal: 0.2s var(--ds-ease-in-out);\n\n      /* Light Theme Defaults */\n      --bg-page: #f8fafc;\n      --bg-surface: #ffffff;\n      --bg-surface-elevated: #f1f5f9;\n      --bg-surface-hover: #f1f5f9;\n      --bg-input: #ffffff;\n      --border-l1: rgba(0, 0, 0, 0.06);\n      --border-l2: rgba(0, 0, 0, 0.12);\n      --border-l3: rgba(0, 0, 0, 0.2);\n      --text-primary: #0f172a;\n      --text-secondary: #475569;\n      --text-tertiary: #94a3b8;\n      --text-dimmed: #cbd5e1;\n\n      --brand-primary: #4176e6;\n      --brand-hover: #3362c4;\n      --brand-surface: rgba(65, 118, 230, 0.1);\n      \n      --state-success: #22c55e;\n      --state-success-bg: rgba(34, 197, 94, 0.12);\n      --state-warn: #f59e0b;\n      --state-warn-bg: rgba(245, 158, 11, 0.12);\n      --state-error: #ef4444;\n      --state-error-bg: rgba(239, 68, 68, 0.12);\n      \n      --shadow-sm: 0 1px 2px 0 rgba(0, 0, 0, 0.05);\n      --shadow-md: 0 4px 6px -1px rgba(0, 0, 0, 0.1), 0 2px 4px -2px rgba(0, 0, 0, 0.1);\n      --shadow-lg: 0 10px 15px -3px rgba(0, 0, 0, 0.1), 0 4px 6px -4px rgba(0, 0, 0, 0.1);\n    }\n\n    @media (prefers-color-scheme: dark) {\n      :root {\n        --bg-page: #0f1115;\n        --bg-surface: #171a21;\n        --bg-surface-elevated: #20242e;\n        --bg-surface-hover: #262b37;\n        --bg-input: #12141a;\n        --border-l1: rgba(255, 255, 255, 0.06);\n        --border-l2: rgba(255, 255, 255, 0.12);\n        --border-l3: rgba(255, 255, 255, 0.22);\n        --text-primary: #f8fafc;\n        --text-secondary: #94a3b8;\n        --text-tertiary: #64748b;\n        --text-dimmed: #475569;\n\n        --brand-primary: #5686fe;\n        --brand-hover: #4176e6;\n        --brand-surface: rgba(86, 134, 254, 0.15);\n\n        --state-success: #34d399;\n        --state-success-bg: rgba(52, 211, 153, 0.15);\n        --state-warn: #fbbf24;\n        --state-warn-bg: rgba(251, 191, 36, 0.15);\n        --state-error: #f87171;\n        --state-error-bg: rgba(248, 113, 113, 0.15);\n\n        --shadow-sm: 0 1px 3px 0 rgba(0, 0, 0, 0.4);\n        --shadow-md: 0 4px 6px -1px rgba(0, 0, 0, 0.5);\n        --shadow-lg: 0 10px 15px -3px rgba(0, 0, 0, 0.6);\n      }\n    }\n\n    * { box-sizing: border-box; margin: 0; padding: 0; }\n    body {\n      font-family: var(--dsw-font-family);\n      background-color: var(--bg-page);\n      color: var(--text-primary);\n      line-height: 1.5;\n      font-size: 14px;\n      padding: 24px 16px;\n      -webkit-font-smoothing: antialiased;\n    }\n    .container {\n      max-width: 1080px;\n      margin: 0 auto;\n      display: flex;\n      flex-direction: column;\n      gap: 20px;\n    }\n\n    /* Header */\n    .header {\n      display: flex;\n      justify-content: space-between;\n      align-items: center;\n      flex-wrap: wrap;\n      gap: 12px;\n      padding-bottom: 16px;\n      border-bottom: 1px solid var(--border-l1);\n    }\n    .header-title-group h1 {\n      font-size: 20px;\n      font-weight: 600;\n      letter-spacing: -0.01em;\n      color: var(--text-primary);\n      display: flex;\n      align-items: center;\n      gap: 8px;\n    }\n    .header-title-group p {\n      font-size: 13px;\n      color: var(--text-secondary);\n      margin-top: 2px;\n    }\n    .header-actions {\n      display: flex;\n      align-items: center;\n      gap: 8px;\n    }\n\n    /* Buttons (DSH Capsule Geometry) */\n    .btn {\n      display: inline-flex;\n      align-items: center;\n      justify-content: center;\n      gap: 6px;\n      font-family: inherit;\n      font-size: 13px;\n      font-weight: 500;\n      line-height: 20px;\n      height: 32px;\n      padding: 0 12px;\n      border-radius: 16px;\n      border: 1px solid transparent;\n      cursor: pointer;\n      transition: background-color var(--ds-transition-fast), border-color var(--ds-transition-fast), color var(--ds-transition-fast), opacity var(--ds-transition-fast);\n      white-space: nowrap;\n      user-select: none;\n    }\n    .btn:disabled {\n      cursor: not-allowed;\n      opacity: 0.45 !important;\n    }\n    .btn-sm {\n      height: 26px;\n      font-size: 12px;\n      padding: 0 9px;\n      border-radius: 13px;\n    }\n    .btn-primary {\n      background: var(--brand-primary);\n      color: #ffffff;\n    }\n    .btn-primary:hover:not(:disabled) {\n      background: var(--brand-hover);\n    }\n    .btn-secondary {\n      background: transparent;\n      border-color: var(--border-l2);\n      color: var(--text-primary);\n    }\n    .btn-secondary:hover:not(:disabled) {\n      background: var(--bg-surface-hover);\n      border-color: var(--border-l3);\n    }\n    .btn-cta {\n      background: var(--state-warn-bg);\n      border-color: var(--state-warn);\n      color: var(--state-warn);\n      font-weight: 600;\n      animation: pulse-border 2s infinite;\n    }\n    .btn-cta:hover:not(:disabled) {\n      background: var(--state-warn);\n      color: #ffffff;\n    }\n    @keyframes pulse-border {\n      0%, 100% { box-shadow: 0 0 0 0 rgba(245, 158, 11, 0.4); }\n      50% { box-shadow: 0 0 0 4px rgba(245, 158, 11, 0.15); }\n    }\n    .btn-danger {\n      background: transparent;\n      border-color: var(--border-l2);\n      color: var(--state-error);\n    }\n    .btn-danger:hover:not(:disabled) {\n      background: var(--state-error-bg);\n      border-color: var(--state-error);\n    }\n\n    /* Master-Detail Layout */\n    .main-grid {\n      display: grid;\n      grid-template-columns: 290px 1fr;\n      gap: 20px;\n      align-items: start;\n    }\n    @media (max-width: 780px) {\n      .main-grid {\n        grid-template-columns: 1fr;\n      }\n    }\n\n    /* Cards */\n    .card {\n      background: var(--bg-surface);\n      border: 1px solid var(--border-l2);\n      border-radius: 12px;\n      padding: 16px;\n      box-shadow: var(--shadow-sm);\n    }\n    .card-title {\n      font-size: 14px;\n      font-weight: 600;\n      color: var(--text-primary);\n      margin-bottom: 12px;\n      display: flex;\n      align-items: center;\n      justify-content: space-between;\n    }\n\n    /* Account List (Master) */\n    .account-list {\n      display: flex;\n      flex-direction: column;\n      gap: 8px;\n      list-style: none;\n    }\n    .account-item {\n      padding: 10px 12px;\n      border-radius: 8px;\n      border: 1px solid var(--border-l1);\n      background: var(--bg-surface);\n      cursor: pointer;\n      transition: all var(--ds-transition-fast);\n      display: flex;\n      flex-direction: column;\n      gap: 6px;\n    }\n    .account-item:hover {\n      background: var(--bg-surface-hover);\n      border-color: var(--border-l2);\n    }\n    .account-item.active-item {\n      background: var(--brand-surface);\n      border-color: var(--brand-primary);\n    }\n    .account-item-top {\n      display: flex;\n      align-items: center;\n      justify-content: space-between;\n      gap: 6px;\n    }\n    .account-email {\n      font-weight: 500;\n      font-size: 13px;\n      color: var(--text-primary);\n      overflow: hidden;\n      text-overflow: ellipsis;\n      white-space: nowrap;\n    }\n    .account-item-bottom {\n      display: flex;\n      align-items: center;\n      gap: 6px;\n      flex-wrap: wrap;\n    }\n\n    /* Badges & Pills */\n    .badge {\n      display: inline-flex;\n      align-items: center;\n      gap: 4px;\n      font-size: 11px;\n      font-weight: 500;\n      line-height: 16px;\n      padding: 1px 7px;\n      border-radius: 10px;\n    }\n    .badge-primary { background: var(--brand-surface); color: var(--brand-primary); }\n    .badge-success { background: var(--state-success-bg); color: var(--state-success); }\n    .badge-warn { background: var(--state-warn-bg); color: var(--state-warn); }\n    .badge-error { background: var(--state-error-bg); color: var(--state-error); }\n    .badge-neutral { background: var(--bg-surface-elevated); color: var(--text-secondary); }\n\n    .dot {\n      width: 7px;\n      height: 7px;\n      border-radius: 50%;\n      display: inline-block;\n      flex-shrink: 0;\n    }\n\n    /* Account Detail View */\n    .detail-head {\n      display: flex;\n      justify-content: space-between;\n      align-items: flex-start;\n      gap: 12px;\n      flex-wrap: wrap;\n      padding-bottom: 14px;\n      margin-bottom: 14px;\n      border-bottom: 1px solid var(--border-l1);\n    }\n    .detail-meta h2 {\n      font-size: 16px;\n      font-weight: 600;\n      display: flex;\n      align-items: center;\n      gap: 8px;\n    }\n    .detail-meta p {\n      font-size: 12px;\n      color: var(--text-secondary);\n      margin-top: 4px;\n    }\n    .detail-actions {\n      display: flex;\n      gap: 6px;\n      flex-wrap: wrap;\n    }\n\n    /* Quota Section */\n    .quota-table-wrap {\n      overflow-x: auto;\n      margin-top: 8px;\n    }\n    .quota-table {\n      width: 100%;\n      border-collapse: collapse;\n      font-size: 13px;\n    }\n    .quota-table th, .quota-table td {\n      padding: 8px 10px;\n      text-align: left;\n      border-bottom: 1px solid var(--border-l1);\n    }\n    .quota-table th {\n      font-size: 12px;\n      font-weight: 500;\n      color: var(--text-tertiary);\n      text-transform: uppercase;\n      letter-spacing: 0.03em;\n    }\n    .model-name {\n      font-family: var(--ds-font-family-code);\n      font-weight: 500;\n      font-size: 12.5px;\n      color: var(--text-primary);\n      cursor: pointer;\n      display: inline-flex;\n      align-items: center;\n      gap: 4px;\n    }\n    .model-name:hover {\n      color: var(--brand-primary);\n      text-decoration: underline;\n    }\n    .progress-bar {\n      background: var(--bg-surface-elevated);\n      border-radius: 4px;\n      height: 8px;\n      width: 110px;\n      overflow: hidden;\n      display: inline-block;\n      vertical-align: middle;\n      margin-right: 8px;\n    }\n    .progress-fill {\n      height: 100%;\n      border-radius: 4px;\n      transition: width var(--ds-transition-normal);\n    }\n    .reset-time {\n      font-size: 12px;\n      color: var(--text-tertiary);\n      white-space: nowrap;\n    }\n\n    /* Collapsible diagnostics */\n    details.diagnostics {\n      margin-top: 14px;\n      border: 1px solid var(--border-l1);\n      border-radius: 8px;\n      background: var(--bg-surface-elevated);\n      overflow: hidden;\n    }\n    details.diagnostics summary {\n      padding: 8px 12px;\n      font-size: 12.5px;\n      font-weight: 500;\n      color: var(--text-secondary);\n      cursor: pointer;\n      user-select: none;\n      display: flex;\n      align-items: center;\n      justify-content: space-between;\n    }\n    details.diagnostics summary:hover {\n      color: var(--text-primary);\n    }\n    .diagnostics-body {\n      padding: 12px;\n      border-top: 1px solid var(--border-l1);\n      display: flex;\n      flex-direction: column;\n      gap: 8px;\n    }\n    pre.code-view {\n      font-family: var(--ds-font-family-code);\n      font-size: 12px;\n      background: var(--bg-input);\n      border: 1px solid var(--border-l1);\n      border-radius: 6px;\n      padding: 10px;\n      overflow-x: auto;\n      word-break: break-all;\n      white-space: pre-wrap;\n      color: var(--text-secondary);\n    }\n\n    /* Import Form */\n    .import-section {\n      margin-top: 4px;\n    }\n    .import-textarea {\n      width: 100%;\n      font-family: var(--ds-font-family-code);\n      font-size: 12.5px;\n      padding: 10px 12px;\n      background: var(--bg-input);\n      border: 1px solid var(--border-l2);\n      border-radius: 8px;\n      color: var(--text-primary);\n      resize: vertical;\n      min-height: 70px;\n      outline: none;\n      transition: border-color var(--ds-transition-fast);\n      margin-bottom: 8px;\n    }\n    .import-textarea:focus {\n      border-color: var(--brand-primary);\n      box-shadow: 0 0 0 2px var(--brand-surface);\n    }\n\n    /* Toast Notification System */\n    #toast-container {\n      position: fixed;\n      bottom: 20px;\n      right: 20px;\n      z-index: 1000;\n      display: flex;\n      flex-direction: column;\n      gap: 8px;\n      max-width: 380px;\n      pointer-events: none;\n    }\n    .toast {\n      background: var(--bg-surface);\n      color: var(--text-primary);\n      border: 1px solid var(--border-l2);\n      border-radius: 8px;\n      padding: 10px 14px;\n      font-size: 13px;\n      box-shadow: var(--shadow-lg);\n      display: flex;\n      align-items: center;\n      justify-content: space-between;\n      gap: 10px;\n      pointer-events: auto;\n      animation: toast-in 0.2s var(--ds-ease-in-out);\n      transition: opacity 0.2s, transform 0.2s;\n    }\n    .toast-success { border-left: 4px solid var(--state-success); }\n    .toast-error { border-left: 4px solid var(--state-error); }\n    .toast-info { border-left: 4px solid var(--brand-primary); }\n    @keyframes toast-in {\n      from { transform: translateY(12px); opacity: 0; }\n      to { transform: translateY(0); opacity: 1; }\n    }\n  </style>\n</head>\n<body>\n  <div class=\"container\">\n    <!-- Header -->\n    <header class=\"header\">\n      <div class=\"header-title-group\">\n        <h1>\n          <svg width=\"20\" height=\"20\" viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"2\" stroke-linecap=\"round\" stroke-linejoin=\"round\" style=\"color:var(--brand-primary)\"><circle cx=\"12\" cy=\"12\" r=\"10\"></circle><path d=\"M12 2a14.5 14.5 0 0 0 0 20 14.5 14.5 0 0 0 0-20\"></path><path d=\"M2 12h20\"></path></svg>\n          <span id=\"txt-title\">Antigravity Account Pool</span>\n        </h1>\n        <p id=\"txt-subtitle\">Manage multi-account rotation, quota monitoring, and credentials.</p>\n      </div>\n      <div class=\"header-actions\">\n        <button id=\"btn-lang\" class=\"btn btn-secondary btn-sm\" title=\"Toggle Language\">中文</button>\n        <button id=\"btn-refresh\" class=\"btn btn-secondary\" title=\"Refresh accounts\">\n          <svg width=\"14\" height=\"14\" viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"2\" stroke-linecap=\"round\" stroke-linejoin=\"round\"><path d=\"M3 12a9 9 0 0 1 9-9 9.75 9.75 0 0 1 6.74 2.74L21 8\"></path><path d=\"M21 3v5h-5\"></path><path d=\"M21 12a9 9 0 0 1-9 9 9.75 9.75 0 0 1-6.74-2.74L3 16\"></path><path d=\"M8 16H3v5\"></path></svg>\n          <span id=\"txt-refresh\">Refresh</span>\n        </button>\n        <button id=\"btn-login\" class=\"btn btn-primary\">\n          <svg width=\"14\" height=\"14\" viewBox=\"0 0 24 24\" fill=\"currentColor\"><path d=\"M22.56 12.25c0-.78-.07-1.53-.2-2.25H12v4.26h5.92c-.26 1.37-1.04 2.53-2.21 3.31v2.77h3.57c2.08-1.92 3.28-4.74 3.28-8.09z\" fill=\"#4285F4\"/><path d=\"M12 23c2.97 0 5.46-.98 7.28-2.66l-3.57-2.77c-.98.66-2.23 1.06-3.71 1.06-2.86 0-5.29-1.93-6.16-4.53H2.18v2.84C3.99 20.53 7.7 23 12 23z\" fill=\"#34A853\"/><path d=\"M5.84 14.09c-.22-.66-.35-1.36-.35-2.09s.13-1.43.35-2.09V7.06H2.18C1.43 8.55 1 10.22 1 12s.43 3.45 1.18 4.94l2.85-2.22.81-.63z\" fill=\"#FBBC05\"/><path d=\"M12 5.38c1.62 0 3.06.56 4.21 1.64l3.15-3.15C17.45 2.09 14.97 1 12 1 7.7 1 3.99 3.47 2.18 7.06l3.66 2.84c.87-2.6 3.3-4.52 6.16-4.52z\" fill=\"#EA4335\"/></svg>\n          <span id=\"txt-login\">Login with Google</span>\n        </button>\n      </div>\n    </header>\n\n    <!-- Main Workspace -->\n    <main class=\"main-grid\">\n      <!-- Master: Account List -->\n      <section class=\"card\">\n        <div class=\"card-title\">\n          <span id=\"txt-accounts-list\">Accounts</span>\n          <span id=\"account-total-badge\" class=\"badge badge-neutral\">0</span>\n        </div>\n        <ul id=\"account-list\" class=\"account-list\">\n          <li style=\"color:var(--text-tertiary);font-size:13px;padding:8px 0;\" id=\"txt-loading\">Loading accounts...</li>\n        </ul>\n      </section>\n\n      <!-- Detail: Selected Account Details -->\n      <section class=\"card\" id=\"detail-card\">\n        <div id=\"detail-content\">\n          <p style=\"color:var(--text-tertiary);\" id=\"txt-no-accounts-hint\">Select or add an account to view details.</p>\n        </div>\n      </section>\n    </main>\n\n    <!-- Bottom: Import Section -->\n    <section class=\"card import-section\">\n      <div class=\"card-title\">\n        <span id=\"txt-import-title\">Import Credentials</span>\n      </div>\n      <p style=\"font-size:12.5px;color:var(--text-secondary);margin-bottom:8px;\" id=\"txt-import-desc\">\n        Paste an agy auth.json token document, or a credential blob (from dsh-agy login --blob). Paste multiple blobs, one per line, for a batch import:\n      </p>\n      <textarea id=\"input-import\" class=\"import-textarea\" placeholder='{\"token\":{\"access_token\":\"...\",\"refresh_token\":\"...\"}} or dsh-agy-cred-v1.... (one blob per line for batch)'></textarea>\n      <div style=\"display:flex;gap:8px;\">\n        <button id=\"btn-import-json\" class=\"btn btn-secondary\">\n          <span id=\"txt-import-json\">Import JSON</span>\n        </button>\n        <button id=\"btn-import-blob\" class=\"btn btn-secondary\">\n          <span id=\"txt-import-blob\">Import Blob</span>\n        </button>\n        <span style=\"flex:1\"></span>\n        <button id=\"btn-export-all\" class=\"btn btn-secondary\">\n          <span id=\"txt-export-all\">Export All</span>\n        </button>\n      </div>\n    </section>\n  </div>\n\n  <div id=\"toast-container\"></div>\n\n  <script>\n    const I18N = ${i18nJson};\n    let currentLang = localStorage.getItem('agy_lang') || (navigator.language.startsWith('zh') ? 'zh' : 'en');\n    let accountData = [];\n    let selectedIndex = 0;\n    let isBusy = false;\n\n    function t(key) {\n      const dict = I18N[currentLang] || I18N.en;\n      return dict[key] || I18N.en[key] || key;\n    }\n\n    const $ = (id) => document.getElementById(id);\n\n    function esc(s) {\n      if (s == null) return '';\n      return String(s).replace(/[&<>\"']/g, (c) => ({ '&': '&amp;', '<': '&lt;', '>': '&gt;', '\"': '&quot;', \"'\": '&#39;' }[c]));\n    }\n\n    function toast(text, type = 'info') {\n      const container = $('toast-container');\n      const el = document.createElement('div');\n      el.className = 'toast toast-' + type;\n      el.innerHTML = '<span>' + esc(text) + '</span><span style=\"cursor:pointer;opacity:0.6;font-weight:600;\" onclick=\"this.parentElement.remove()\">✕</span>';\n      container.appendChild(el);\n      setTimeout(() => {\n        el.style.opacity = '0';\n        el.style.transform = 'translateY(8px)';\n        setTimeout(() => el.remove(), 200);\n      }, 3500);\n    }\n\n    function copyToClipboard(text, msg) {\n      if (navigator.clipboard && window.isSecureContext) {\n        navigator.clipboard.writeText(text).then(() => toast(msg || t('copied'), 'success')).catch(() => fallbackCopy(text, msg));\n      } else {\n        fallbackCopy(text, msg);\n      }\n    }\n\n    function fallbackCopy(text, msg) {\n      const ta = document.createElement('textarea');\n      ta.value = text;\n      ta.style.position = 'fixed';\n      ta.style.left = '-9999px';\n      document.body.appendChild(ta);\n      ta.select();\n      try {\n        document.execCommand('copy');\n        toast(msg || t('copied'), 'success');\n      } catch {\n        toast('Failed to copy', 'error');\n      }\n      document.body.removeChild(ta);\n    }\n\n    function formatRelativeTime(dateStr) {\n      if (!dateStr) return '';\n      const target = new Date(dateStr).getTime();\n      const diffMs = target - Date.now();\n      if (diffMs <= 0) return '';\n      const diffMin = Math.round(diffMs / 60000);\n      if (diffMin < 60) return t('resetIn') + diffMin + 'm';\n      const diffHours = (diffMs / 3600000).toFixed(1);\n      if (diffHours < 24) return t('resetIn') + diffHours + 'h';\n      return t('resetAt') + new Date(target).toLocaleTimeString([], { hour: '2-digit', minute: '2-digit' });\n    }\n\n    function quotaColor(fraction) {\n      if (fraction == null) return 'var(--text-dimmed)';\n      return fraction > 0.7 ? 'var(--state-success)' : fraction >= 0.3 ? 'var(--state-warn)' : 'var(--state-error)';\n    }\n\n    function getWorstQuotaFraction(acc) {\n      const models = (acc.quota && acc.quota.models) || [];\n      let worst = 1;\n      let hasQuota = false;\n      for (const m of models) {\n        if (m.remainingFraction != null) {\n          worst = Math.min(worst, m.remainingFraction);\n          hasQuota = true;\n        }\n      }\n      return hasQuota ? worst : null;\n    }\n\n    function applyI18nLabels() {\n      $('txt-title').textContent = t('title');\n      $('txt-subtitle').textContent = t('subtitle');\n      $('txt-refresh').textContent = t('refresh');\n      $('txt-login').textContent = t('loginWithGoogle');\n      $('btn-lang').textContent = t('switchLang');\n      $('txt-accounts-list').textContent = t('accountsList');\n      $('txt-import-title').textContent = t('importTitle');\n      $('txt-import-desc').textContent = t('importDesc');\n      $('txt-import-json').textContent = t('importJson');\n      $('txt-import-blob').textContent = t('importBlobBtn');\n      $('txt-export-all').textContent = t('exportAll');\n      $('input-import').placeholder = t('importPlaceholder');\n    }\n\n    async function api(path, init) {\n      const res = await fetch('/agy/api' + path, {\n        headers: { 'content-type': 'application/json' },\n        ...init\n      });\n      const data = await res.json().catch(() => ({}));\n      if (!res.ok) throw new Error(data.error || res.statusText || 'Request failed');\n      return data;\n    }\n\n    function renderMasterList() {\n      const listEl = $('account-list');\n      $('account-total-badge').textContent = String(accountData.length);\n\n      if (accountData.length === 0) {\n        listEl.innerHTML = '<li style=\"color:var(--text-tertiary);font-size:13px;padding:12px 0;\">' + esc(t('noAccounts')) + '</li>';\n        return;\n      }\n\n      listEl.innerHTML = accountData.map((a, i) => {\n        const isSelected = i === selectedIndex;\n        const worstFrac = getWorstQuotaFraction(a);\n        const dotColor = quotaColor(worstFrac);\n\n        let stateBadge = '';\n        if (a.state === 'disabled') {\n          stateBadge = '<span class=\"badge badge-error\">' + esc(t('stateDisabled')) + '</span>';\n        } else if (a.state === 'verification-required') {\n          stateBadge = '<span class=\"badge badge-warn\">' + esc(t('stateVerificationRequired')) + '</span>';\n        } else if (a.state === 'cooling') {\n          stateBadge = '<span class=\"badge badge-warn\">' + esc(t('stateCooling')) + '</span>';\n        } else if (a.rateLimits && Object.values(a.rateLimits).some((t) => t > Date.now())) {\n          stateBadge = '<span class=\"badge badge-warn\">' + esc(t('stateRateLimited')) + '</span>';\n        } else {\n          stateBadge = '<span class=\"badge badge-success\">' + esc(t('stateActive')) + '</span>';\n        }\n\n        const activeMark = a.active ? '<span class=\"badge badge-primary\">★ ' + esc(t('activeBadge')) + '</span>' : '';\n\n        return '<li class=\"account-item ' + (isSelected ? 'active-item' : '') + '\" onclick=\"selectAccount(' + i + ')\">' +\n          '<div class=\"account-item-top\">' +\n            '<span class=\"account-email\" title=\"' + esc(a.email || '(no email)') + '\">' + esc(a.email || '(no email)') + '</span>' +\n            '<span class=\"dot\" style=\"background:' + dotColor + '\" title=\"Quota Health\"></span>' +\n          '</div>' +\n          '<div class=\"account-item-bottom\">' + activeMark + stateBadge + '</div>' +\n        '</li>';\n      }).join('');\n    }\n\n    function renderDetailView() {\n      const container = $('detail-content');\n      if (accountData.length === 0) {\n        container.innerHTML = '<div style=\"text-align:center;padding:32px 12px;color:var(--text-tertiary);\">' +\n          '<p style=\"font-size:15px;font-weight:500;margin-bottom:4px;\">' + esc(t('noAccounts')) + '</p>' +\n          '<p style=\"font-size:13px;\">' + esc(t('noAccountsHint')) + '</p>' +\n        '</div>';\n        return;\n      }\n\n      const a = accountData[selectedIndex] || accountData[0];\n      const isVerificationRequired = a.state === 'verification-required';\n      const isCooling = a.state === 'cooling' && a.cooldownUntil;\n      const coolInfo = isCooling ? ' (' + formatRelativeTime(a.cooldownUntil) + ')' : '';\n\n      const models = (a.quota && a.quota.models) || [];\n      const quotaRows = models.map((m) => {\n        const pct = m.remainingFraction != null ? Math.round(m.remainingFraction * 100) : null;\n        const color = quotaColor(m.remainingFraction);\n        const resetText = m.resetTime ? formatRelativeTime(m.resetTime) : '';\n        const exactReset = m.resetTime ? new Date(m.resetTime).toLocaleString() : '';\n\n        return '<tr>' +\n          '<td><span class=\"model-name\" onclick=\"copyToClipboard(\\\\'' + esc(m.id) + '\\\\')\" title=\"Click to copy ID\">' + esc(m.id) + '</span></td>' +\n          '<td>' +\n            (pct != null\n              ? '<div class=\"progress-bar\"><div class=\"progress-fill\" style=\"width:' + pct + '%;background:' + color + '\"></div></div><span style=\"font-weight:500;font-size:12px;\">' + pct + '%</span>'\n              : '<span style=\"color:var(--text-tertiary);font-size:12px;\">' + esc(t('noQuotaReported')) + '</span>') +\n          '</td>' +\n          '<td><span class=\"reset-time\" title=\"' + esc(exactReset) + '\">' + esc(resetText) + '</span></td>' +\n          '<td style=\"text-align:right;\">' +\n            '<button class=\"btn btn-secondary btn-sm\" data-test-model=\"' + esc(m.id) + '\">' + esc(t('testModel')) + '</button>' +\n          '</td>' +\n        '</tr>';\n      }).join('');\n\n      container.innerHTML = \n        '<div class=\"detail-head\">' +\n          '<div class=\"detail-meta\">' +\n            '<h2>' + esc(a.email || '(no email)') + (a.active ? ' <span class=\"badge badge-primary\">★ ' + esc(t('activeBadge')) + '</span>' : '') + '</h2>' +\n            '<p>' + esc(t('project')) + ': <code>' + esc(a.projectId || t('defaultProject')) + '</code>' + esc(coolInfo) + '</p>' +\n          '</div>' +\n          '<div class=\"detail-actions\">' +\n            (isVerificationRequired ? '<button class=\"btn btn-cta btn-sm\" id=\"btn-action-verify\">⚡ ' + esc(t('verifyCta')) + '</button>' : '') +\n            (!a.active ? '<button class=\"btn btn-secondary btn-sm\" id=\"btn-action-activate\">' + esc(t('activate')) + '</button>' : '') +\n            (!isVerificationRequired ? '<button class=\"btn btn-secondary btn-sm\" id=\"btn-action-verify\">' + esc(t('verify')) + '</button>' : '') +\n            '<button class=\"btn btn-secondary btn-sm\" id=\"btn-action-export\">' + esc(t('exportBlob')) + '</button>' +\n            '<button class=\"btn btn-secondary btn-sm\" id=\"btn-action-fp\">' + esc(t('fingerprint')) + '</button>' +\n            '<button class=\"btn btn-danger btn-sm\" id=\"btn-action-delete\">' + esc(t('deleteAccount')) + '</button>' +\n          '</div>' +\n        '</div>' +\n\n        '<div style=\"margin-top:16px;\">' +\n          '<div style=\"display:flex;justify-content:space-between;align-items:center;margin-bottom:8px;\">' +\n            '<h3 style=\"font-size:13.5px;font-weight:600;\">' + esc(t('quotaTitle')) + ' (' + models.length + ')</h3>' +\n            (models.length > 0 ? '<button class=\"btn btn-secondary btn-sm\" id=\"btn-action-test-all\">⚡ ' + esc(t('testAll')) + '</button>' : '') +\n          '</div>' +\n          '<div class=\"quota-table-wrap\">' +\n            '<table class=\"quota-table\">' +\n              '<thead><tr><th>Model</th><th>Remaining</th><th>Reset</th><th style=\"text-align:right;\">Action</th></tr></thead>' +\n              '<tbody>' + (quotaRows || '<tr><td colspan=\"4\" style=\"color:var(--text-tertiary);text-align:center;padding:16px 0;\">' + esc(t('quotaUnavailable')) + '</td></tr>') + '</tbody>' +\n            '</table>' +\n          '</div>' +\n        '</div>' +\n\n        '<details class=\"diagnostics\" id=\"diagnostics-panel\">' +\n          '<summary><span>' + esc(t('fingerprintTitle')) + ' & Output</span><span>▼</span></summary>' +\n          '<div class=\"diagnostics-body\">' +\n            '<div style=\"display:flex;justify-content:space-between;align-items:center;\">' +\n              '<span style=\"font-size:12px;color:var(--text-secondary);\">' + esc(t('fingerprintHistory')) + ': ' + (a.fingerprintHistory || 0) + '</span>' +\n              '<button class=\"btn btn-secondary btn-sm\" id=\"btn-action-regen-fp\">' + esc(t('regenerateFp')) + '</button>' +\n            '</div>' +\n            '<pre class=\"code-view\" id=\"diagnostics-output\">' + (a.fingerprint ? esc(JSON.stringify(a.fingerprint, null, 2)) : 'No diagnostics generated yet.') + '</pre>' +\n          '</div>' +\n        '</details>';\n\n      bindDetailActions(selectedIndex);\n    }\n\n    function selectAccount(index) {\n      selectedIndex = index;\n      renderMasterList();\n      renderDetailView();\n    }\n\n    function bindDetailActions(index) {\n      const btnActivate = $('btn-action-activate');\n      if (btnActivate) btnActivate.onclick = async () => {\n        try {\n          await api('/activate', { method: 'POST', body: JSON.stringify({ index }) });\n          toast(t('activeBadge') + ' -> #' + (index + 1), 'success');\n          render();\n        } catch (e) { toast(String(e), 'error'); }\n      };\n\n      const btnVerify = $('btn-action-verify');\n      if (btnVerify) btnVerify.onclick = async () => {\n        btnVerify.disabled = true;\n        try {\n          await api('/verify', { method: 'POST', body: JSON.stringify({ index }) });\n          toast('Account #' + (index + 1) + ' verified successfully', 'success');\n          render();\n        } catch (e) { toast(String(e), 'error'); }\n        finally { btnVerify.disabled = false; }\n      };\n\n      const btnDelete = $('btn-action-delete');\n      if (btnDelete) btnDelete.onclick = async () => {\n        if (!confirm(t('confirmDelete'))) return;\n        try {\n          await api('/delete', { method: 'POST', body: JSON.stringify({ index }) });\n          toast('Account deleted', 'success');\n          if (selectedIndex >= accountData.length - 1) selectedIndex = Math.max(0, accountData.length - 2);\n          render();\n        } catch (e) { toast(String(e), 'error'); }\n      };\n\n      const btnExport = $('btn-action-export');\n      if (btnExport) btnExport.onclick = async () => {\n        try {\n          const r = await api('/export', { method: 'POST', body: JSON.stringify({ index }) });\n          copyToClipboard(r.blob, t('copyBlobMsg'));\n          $('diagnostics-panel').open = true;\n          $('diagnostics-output').textContent = r.blob;\n        } catch (e) { toast(String(e), 'error'); }\n      };\n\n      const btnFp = $('btn-action-fp');\n      if (btnFp) btnFp.onclick = async () => {\n        try {\n          const r = await api('/fingerprint', { method: 'POST', body: JSON.stringify({ index }) });\n          $('diagnostics-panel').open = true;\n          $('diagnostics-output').textContent = JSON.stringify(r.fingerprint, null, 2);\n          toast(t('copyFpMsg'), 'info');\n        } catch (e) { toast(String(e), 'error'); }\n      };\n\n      const btnRegenFp = $('btn-action-regen-fp');\n      if (btnRegenFp) btnRegenFp.onclick = async () => {\n        if (!confirm(t('confirmRegenerateFp'))) return;\n        try {\n          const r = await api('/fingerprint', { method: 'POST', body: JSON.stringify({ index, action: 'regenerate' }) });\n          $('diagnostics-panel').open = true;\n          $('diagnostics-output').textContent = JSON.stringify(r.fingerprint, null, 2);\n          toast('Fingerprint regenerated', 'success');\n          render();\n        } catch (e) { toast(String(e), 'error'); }\n      };\n\n      const btnTestAll = $('btn-action-test-all');\n      if (btnTestAll) btnTestAll.onclick = async () => {\n        if (!confirm(t('confirmTestAll'))) return;\n        btnTestAll.disabled = true;\n        const a = accountData[index];\n        const models = ((a.quota && a.quota.models) || []).map((m) => m.id);\n        toast(t('testing') + ' (' + models.length + ')', 'info');\n        let okCount = 0;\n        let failCount = 0;\n        const lines = [];\n\n        for (const model of models) {\n          try {\n            const r = await api('/test', { method: 'POST', body: JSON.stringify({ model }) });\n            if (r.ok) {\n              okCount++;\n              lines.push('OK   ' + model);\n            } else {\n              failCount++;\n              lines.push('FAIL ' + model + ' - ' + r.error);\n            }\n          } catch (err) {\n            failCount++;\n            lines.push('ERR  ' + model + ' - ' + String(err));\n          }\n        }\n        $('diagnostics-panel').open = true;\n        $('diagnostics-output').textContent = lines.join('\\\\n');\n        toast(t('modelsTestedSummary').replace('{total}', String(models.length)).replace('{ok}', String(okCount)).replace('{failed}', String(failCount)), failCount === 0 ? 'success' : 'warn');\n        btnTestAll.disabled = false;\n      };\n\n      // Single model tests\n      document.querySelectorAll('[data-test-model]').forEach((btn) => {\n        btn.onclick = async () => {\n          const model = btn.getAttribute('data-test-model');\n          btn.disabled = true;\n          btn.textContent = '...';\n          try {\n            const r = await api('/test', { method: 'POST', body: JSON.stringify({ model }) });\n            if (r.ok) {\n              toast('OK: ' + model, 'success');\n            } else {\n              toast('FAIL: ' + model + ' - ' + r.error, 'error');\n            }\n          } catch (err) {\n            toast('ERR: ' + model + ' - ' + String(err), 'error');\n          } finally {\n            btn.disabled = false;\n            btn.textContent = t('testModel');\n          }\n        };\n      });\n    }\n\n    async function render() {\n      if (isBusy) return;\n      isBusy = true;\n      try {\n        const data = await api('/accounts');\n        accountData = data.accounts || [];\n        if (selectedIndex >= accountData.length) selectedIndex = Math.max(0, accountData.length - 1);\n        renderMasterList();\n        renderDetailView();\n      } catch (e) {\n        toast(String(e), 'error');\n      } finally {\n        isBusy = false;\n      }\n    }\n\n    // Event Handlers\n    $('btn-refresh').onclick = render;\n\n    $('btn-lang').onclick = () => {\n      currentLang = currentLang === 'zh' ? 'en' : 'zh';\n      localStorage.setItem('agy_lang', currentLang);\n      applyI18nLabels();\n      renderMasterList();\n      renderDetailView();\n    };\n\n    $('btn-login').onclick = async () => {\n      try {\n        const { url } = await api('/auth-url', { method: 'POST' });\n        window.open(url, '_blank');\n        toast(t('windowClosing'), 'info');\n      } catch (e) { toast(String(e), 'error'); }\n    };\n\n    const importLines = () => $('input-import').value.split('\\\\n')\n      .map((s) => s.trim())\n      .filter(Boolean);\n\n    const doImport = async (kind) => {\n      const sources = importLines();\n      if (sources.length === 0) return;\n      try {\n        const r = await api('/import', { method: 'POST', body: JSON.stringify({ kind, sources }) });\n        if (r.errors && r.errors.length > 0) toast(r.errors[0], 'error');\n        toast(t('importBatchResult').replace('{imported}', r.imported).replace('{replaced}', r.replaced), 'success');\n        $('input-import').value = '';\n        render();\n      } catch (e) { toast(String(e), 'error'); }\n    };\n\n    $('btn-import-json').onclick = () => doImport('json');\n    $('btn-import-blob').onclick = () => doImport('blob');\n\n    const btnExportAll = $('btn-export-all');\n    if (btnExportAll) btnExportAll.onclick = async () => {\n      try {\n        const r = await api('/export-all', { method: 'POST' });\n        if (!r.blobs || r.blobs.length === 0) { toast('No accounts to export', 'info'); return; }\n        const text = r.blobs.map((b) => b.blob).join('\\\\n');\n        copyToClipboard(text, t('copyAllMsg'));\n        $('diagnostics-panel').open = true;\n        $('diagnostics-output').textContent = text;\n      } catch (e) { toast(String(e), 'error'); }\n    };\n\n    // Auto-refresh when tab receives focus or receives postMessage from login popup\n    window.addEventListener('focus', render);\n    window.addEventListener('message', (ev) => {\n      if (ev.data && ev.data.type === 'agy_login_success') {\n        toast(t('loginSuccessTitle'), 'success');\n        render();\n      }\n    });\n\n    // Init\n    applyI18nLabels();\n    render();\n  </script>\n</body>\n</html>`\n}\n\nexport function renderCallbackHtml(options: { ok: boolean; error?: string; email?: string | null; baseUrl: string }): string {\n  const { ok, error, email, baseUrl } = options\n  const i18nJson = JSON.stringify(I18N_DICT)\n\n  return `<!doctype html>\n<html lang=\"en\">\n<head>\n  <meta charset=\"utf-8\">\n  <meta name=\"viewport\" content=\"width=device-width, initial-scale=1\">\n  <title>Antigravity Sign-in</title>\n  <style>\n    :root {\n      color-scheme: light dark;\n      --dsw-font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', 'PingFang SC', 'Hiragino Sans GB', 'Microsoft YaHei', sans-serif;\n      --bg-page: #0f1115;\n      --bg-surface: #171a21;\n      --border-l2: rgba(255, 255, 255, 0.12);\n      --text-primary: #f8fafc;\n      --text-secondary: #94a3b8;\n      --brand-primary: #5686fe;\n      --state-success: #34d399;\n      --state-error: #f87171;\n    }\n    @media (prefers-color-scheme: light) {\n      :root {\n        --bg-page: #f8fafc;\n        --bg-surface: #ffffff;\n        --border-l2: rgba(0, 0, 0, 0.12);\n        --text-primary: #0f172a;\n        --text-secondary: #475569;\n        --brand-primary: #4176e6;\n        --state-success: #22c55e;\n        --state-error: #ef4444;\n      }\n    }\n    * { box-sizing: border-box; margin: 0; padding: 0; }\n    body {\n      font-family: var(--dsw-font-family);\n      background-color: var(--bg-page);\n      color: var(--text-primary);\n      display: flex;\n      align-items: center;\n      justify-content: center;\n      min-height: 100vh;\n      padding: 16px;\n    }\n    .card {\n      background: var(--bg-surface);\n      border: 1px solid var(--border-l2);\n      border-radius: 12px;\n      padding: 24px;\n      max-width: 440px;\n      width: 100%;\n      text-align: center;\n      box-shadow: 0 10px 25px -5px rgba(0, 0, 0, 0.3);\n    }\n    .icon-wrap {\n      width: 48px;\n      height: 48px;\n      border-radius: 50%;\n      display: flex;\n      align-items: center;\n      justify-content: center;\n      margin: 0 auto 16px;\n      font-size: 24px;\n    }\n    .icon-success { background: rgba(52, 211, 153, 0.15); color: var(--state-success); }\n    .icon-error { background: rgba(248, 113, 113, 0.15); color: var(--state-error); }\n    h1 { font-size: 18px; font-weight: 600; margin-bottom: 8px; }\n    p { font-size: 13.5px; color: var(--text-secondary); margin-bottom: 16px; line-height: 1.5; }\n    .btn {\n      display: inline-flex;\n      align-items: center;\n      justify-content: center;\n      font-family: inherit;\n      font-size: 13px;\n      font-weight: 500;\n      height: 34px;\n      padding: 0 16px;\n      border-radius: 17px;\n      border: 1px solid var(--border-l2);\n      background: transparent;\n      color: var(--text-primary);\n      cursor: pointer;\n      text-decoration: none;\n    }\n    .btn:hover { background: rgba(128, 128, 128, 0.1); }\n    .btn-primary { background: var(--brand-primary); color: #ffffff; border-color: transparent; }\n  </style>\n</head>\n<body>\n  <div class=\"card\">\n    ${ok ? `\n      <div class=\"icon-wrap icon-success\">✓</div>\n      <h1 id=\"title\">Sign-in Successful</h1>\n      <p id=\"desc\">Your Antigravity account ${email ? '<strong>' + email + '</strong> ' : ''}has been authorized and saved.</p>\n      <p style=\"font-size:12px;opacity:0.8;\" id=\"closing\">This window will close automatically...</p>\n      <button class=\"btn\" onclick=\"window.close()\">Close Window</button>\n    ` : `\n      <div class=\"icon-wrap icon-error\">✕</div>\n      <h1 id=\"title\">Sign-in Failed</h1>\n      <p id=\"desc\">Error details: ${error || 'Unknown error'}</p>\n      <a class=\"btn btn-primary\" href=\"${baseUrl}/agy\">Return to Dashboard</a>\n    `}\n  </div>\n  <script>\n    const I18N = ${i18nJson};\n    const lang = localStorage.getItem('agy_lang') || (navigator.language.startsWith('zh') ? 'zh' : 'en');\n    const dict = I18N[lang] || I18N.en;\n\n    if (${ok ? 'true' : 'false'}) {\n      document.getElementById('title').textContent = dict.loginSuccessTitle;\n      document.getElementById('desc').innerHTML = dict.loginSuccessDesc + (${JSON.stringify(email ? ' (' + email + ')' : '')});\n      document.getElementById('closing').textContent = dict.windowClosing;\n      \n      // Notify parent window & close\n      try {\n        if (window.opener) {\n          window.opener.postMessage({ type: 'agy_login_success' }, '*');\n        }\n      } catch (e) {}\n      setTimeout(() => {\n        window.close();\n      }, 1800);\n    } else {\n      document.getElementById('title').textContent = dict.loginFailedTitle;\n    }\n  </script>\n</body>\n</html>`\n}\n","/**\n * In-harness web UI for agy: routes registered on ctx.webServer at /agy.\n * Serves a self-contained HTML dashboard with account management, OAuth login\n * via a popup, paste-blob import, and account verification.\n *\n * The OAuth callback is a webServer route on the same loopback origin, so the\n * firstparty/nativeapp consent can complete locally; remote hosts use the\n * paste-blob form instead.\n */\n\nimport type { IncomingMessage, ServerResponse } from 'node:http'\nimport type { AccountStore } from '../store/accounts.ts'\nimport type { AgySessionManager } from '../session.ts'\nimport { authorizeAntigravity } from '../oauth/authorize.ts'\nimport { exchangeAntigravity } from '../oauth/exchange.ts'\nimport { decodeCredentialBlob } from '../oauth/blob.ts'\nimport { importManySources, upsertImportedAccount } from '../cli/import.ts'\nimport { generateFingerprint, recordFingerprintVersion } from '../runtime/fingerprint.ts'\nimport { resolveAntigravityVersionBounded } from '../runtime/version.ts'\nimport { renderDashboardHtml, renderCallbackHtml } from './page.ts'\n\nexport interface WebRoute {\n  kind: 'exact' | 'prefix'\n  path: string\n  handler: (req: IncomingMessage, res: ServerResponse) => void | Promise<void>\n}\n\nexport interface AgyWebOptions {\n  store: AccountStore\n  sessions: AgySessionManager\n  /** Base URL of the harness web server, e.g. http://127.0.0.1:3080 */\n  baseUrl: string\n}\n\nfunction sendJson(res: ServerResponse, status: number, data: unknown): void {\n  res.writeHead(status, { 'content-type': 'application/json' })\n  res.end(JSON.stringify(data))\n}\n\nasync function readJson(req: IncomingMessage): Promise<Record<string, unknown>> {\n  const chunks: Buffer[] = []\n  for await (const chunk of req) chunks.push(chunk as Buffer)\n  const text = Buffer.concat(chunks).toString('utf8')\n  return text ? (JSON.parse(text) as Record<string, unknown>) : {}\n}\n\nexport function createAgyWebRoutes(options: AgyWebOptions): WebRoute[] {\n  const { store, sessions, baseUrl } = options\n\n  // Authorizations issued by /auth-url, keyed by their raw state so the\n  // callback can bind the exchange to the verifier we actually issued.\n  const pendingAuth = new Map<string, { verifier: string; expiresAt: number }>()\n  const PENDING_AUTH_TTL_MS = 10 * 60 * 1000\n  const prunePendingAuth = (now = Date.now()) => {\n    for (const [key, entry] of pendingAuth) {\n      if (entry.expiresAt <= now) pendingAuth.delete(key)\n    }\n    while (pendingAuth.size > 100) {\n      let oldestKey: string | null = null\n      let oldestExpiry = Infinity\n      for (const [key, entry] of pendingAuth) {\n        if (entry.expiresAt < oldestExpiry) {\n          oldestExpiry = entry.expiresAt\n          oldestKey = key\n        }\n      }\n      if (oldestKey) pendingAuth.delete(oldestKey)\n      else break\n    }\n  }\n\n  const accountsList = async () => {\n    const storage = await store.load()\n    const now = Date.now()\n    const list = []\n    for (const [index, account] of storage.accounts.entries()) {\n      const entry: Record<string, unknown> = {\n        index,\n        email: account.email ?? null,\n        projectId: account.projectId ?? null,\n        active: index === storage.activeIndex && account.enabled !== false,\n        state: account.enabled === false ? 'disabled'\n          : account.verificationRequired ? 'verification-required'\n          : account.coolingDownUntil && account.coolingDownUntil > now ? 'cooling'\n          : 'active',\n        cooldownUntil: account.coolingDownUntil && account.coolingDownUntil > now ? new Date(account.coolingDownUntil).toISOString() : null,\n        cooldownReason: account.cooldownReason ?? null,\n        rateLimits: account.rateLimitResetTimes ?? null,\n        fingerprint: account.fingerprint\n          ? { userAgent: account.fingerprint.userAgent, deviceId: account.fingerprint.deviceId, createdAt: account.fingerprint.createdAt }\n          : null,\n        fingerprintHistory: (account.fingerprintHistory ?? []).length,\n        quota: null as Record<string, unknown> | null,\n      }\n      list.push(entry)\n    }\n    // Best-effort per-account quota via fetchAvailableModels (fresh token).\n    for (const entry of list) {\n      const session = await sessions.getSession().catch(() => undefined)\n      if (!session || session.index !== entry.index) continue\n      try {\n        const { fetchAvailableModels } = await import('../adapter/models.ts')\n        const discovered = await fetchAvailableModels(session.auth.access, session.account.projectId)\n        const models = Object.entries(discovered.models ?? {})\n        if (models.length > 0) {\n          const quotaRows = models\n            .map(([id, m]) => ({\n              id,\n              remainingFraction: typeof m.quotaInfo?.remainingFraction === 'number'\n                ? Math.max(0, Math.min(1, m.quotaInfo.remainingFraction))\n                : null,\n              resetTime: m.quotaInfo?.resetTime ?? null,\n            }))\n            .sort((a, b) => (a.remainingFraction ?? -1) - (b.remainingFraction ?? -1))\n          entry.quota = {\n            modelCount: models.length,\n            models: quotaRows,\n          }\n        }\n      } catch {\n        // quota stays null\n      }\n    }\n    return list\n  }\n\n  const handleAuthUrl = async (res: ServerResponse) => {\n    const redirectUri = `${baseUrl}/agy/oauth-callback`\n    const authorization = await authorizeAntigravity(redirectUri)\n    prunePendingAuth()\n    pendingAuth.set(authorization.state, {\n      verifier: authorization.verifier,\n      expiresAt: Date.now() + PENDING_AUTH_TTL_MS,\n    })\n    sendJson(res, 200, { url: authorization.url })\n  }\n\n  const handleCallback = async (req: IncomingMessage, res: ServerResponse) => {\n    const url = new URL(req.url ?? '/', baseUrl)\n    const code = url.searchParams.get('code')\n    const state = url.searchParams.get('state')\n    if (!code || !state) {\n      res.writeHead(400, { 'content-type': 'text/html; charset=utf-8' })\n      res.end(renderCallbackHtml({ ok: false, error: 'Missing code or state parameter', baseUrl }))\n      return\n    }\n    const expected = pendingAuth.get(state)\n    if (!expected) {\n      res.writeHead(400, { 'content-type': 'text/html; charset=utf-8' })\n      res.end(renderCallbackHtml({ ok: false, error: 'Unknown or expired authorization — please start a new login.', baseUrl }))\n      return\n    }\n    // One-time use: consume the issued state regardless of the exchange result.\n    pendingAuth.delete(state)\n    const redirectUri = `${baseUrl}/agy/oauth-callback`\n    const result = await exchangeAntigravity(code, state, redirectUri, expected.verifier)\n    if (result.type === 'failed') {\n      res.writeHead(400, { 'content-type': 'text/html; charset=utf-8' })\n      res.end(renderCallbackHtml({ ok: false, error: result.error, baseUrl }))\n      return\n    }\n    await upsertImportedAccount(store, {\n      accessToken: result.access,\n      refreshToken: result.refresh.split('|')[0]!,\n      tokenType: 'Bearer',\n      expiresAt: new Date(result.expires).toISOString(),\n      authMethod: 'oauth',\n      email: result.email ?? null,\n      projectId: result.projectId || null,\n      clientId: result.clientId || null,\n    }, { overwriteExisting: true })\n\n    res.writeHead(200, { 'content-type': 'text/html; charset=utf-8' })\n    res.end(renderCallbackHtml({ ok: true, email: result.email ?? null, baseUrl }))\n  }\n\n  const handleImport = async (req: IncomingMessage, res: ServerResponse) => {\n    try {\n      const body = await readJson(req)\n      const kind = body.kind === 'blob' ? 'blob' : 'json'\n      // Batch mode: `sources` is an array of strings (multi-line paste / bulk files);\n      // single mode: `source` (backwards compatible).\n      const sources: unknown[] = Array.isArray(body.sources)\n        ? body.sources\n        : body.source !== undefined ? [body.source] : []\n      if (sources.length === 0) throw new Error('nothing to import')\n      const result = await importManySources(\n        sources.map((source) => ({ source, kind })),\n        store,\n        { overwriteExisting: true },\n      )\n      sendJson(res, 200, result)\n    } catch (error) {\n      sendJson(res, 400, { error: error instanceof Error ? error.message : String(error) })\n    }\n  }\n\n  const handleExportAll = async (_req: IncomingMessage, res: ServerResponse) => {\n    try {\n      const storage = await store.load()\n      const blobs: Array<{ index: number; blob: string }> = []\n      for (let index = 0; index < storage.accounts.length; index++) {\n        const result = await sessions.exportBlob(index)\n        if (result.blob) blobs.push({ index, blob: result.blob })\n      }\n      sendJson(res, 200, { blobs })\n    } catch (error) {\n      sendJson(res, 400, { error: error instanceof Error ? error.message : String(error) })\n    }\n  }\n\n  const handleVerify = async (req: IncomingMessage, res: ServerResponse) => {\n    try {\n      const body = await readJson(req)\n      const index = Number(body.index)\n      const result = await sessions.verifyAccount(index)\n      sendJson(res, result.ok ? 200 : 400, result)\n    } catch (error) {\n      sendJson(res, 400, { error: error instanceof Error ? error.message : String(error) })\n    }\n  }\n\n  const handleHealth = async (req: IncomingMessage, res: ServerResponse) => {\n    try {\n      const body = await readJson(req)\n      const indices = Array.isArray(body.indices)\n        ? (body.indices as unknown[]).map((value) => Number(value))\n        : undefined\n      const results = await sessions.checkAccounts(indices)\n      sendJson(res, 200, { results })\n    } catch (error) {\n      sendJson(res, 400, { error: error instanceof Error ? error.message : String(error) })\n    }\n  }\n\n  const handleDelete = async (req: IncomingMessage, res: ServerResponse) => {\n    try {\n      const body = await readJson(req)\n      const index = Number(body.index)\n      await store.mutate((storage) => {\n        if (index < 0 || index >= storage.accounts.length) throw new Error('account not found')\n        storage.accounts.splice(index, 1)\n        if (storage.activeIndex >= storage.accounts.length) storage.activeIndex = 0\n      })\n      sendJson(res, 200, { ok: true })\n    } catch (error) {\n      sendJson(res, 400, { error: error instanceof Error ? error.message : String(error) })\n    }\n  }\n\n  const handleActivate = async (req: IncomingMessage, res: ServerResponse) => {\n    try {\n      const body = await readJson(req)\n      const index = Number(body.index)\n      await store.mutate((storage) => {\n        if (index < 0 || index >= storage.accounts.length) throw new Error('account not found')\n        storage.activeIndex = index\n      })\n      sendJson(res, 200, { ok: true, index })\n    } catch (error) {\n      sendJson(res, 400, { error: error instanceof Error ? error.message : String(error) })\n    }\n  }\n\n  const handleModels = async (_req: IncomingMessage, res: ServerResponse) => {\n    const session = await sessions.getSession().catch(() => undefined)\n    if (!session) {\n      sendJson(res, 400, { error: 'No agy account configured — run `dsh-agy login` first.' })\n      return\n    }\n    try {\n      const { listAgyModels } = await import('../adapter/models.ts')\n      const models = await listAgyModels(session.auth.access, session.account.projectId)\n      sendJson(res, 200, { account: session.account.email ?? null, models: models.map((m) => ({\n        id: m.id,\n        name: m.name,\n      })) })\n    } catch (error) {\n      sendJson(res, 400, { error: error instanceof Error ? error.message : String(error) })\n    }\n  }\n\n  const handleTest = async (req: IncomingMessage, res: ServerResponse) => {\n    try {\n      const body = await readJson(req)\n      const model = typeof body.model === 'string' ? body.model : ''\n      if (!model) {\n        sendJson(res, 400, { error: 'model is required' })\n        return\n      }\n      const result = await sessions.testCall(model)\n      sendJson(res, result.ok ? 200 : 400, result)\n    } catch (error) {\n      sendJson(res, 400, { error: error instanceof Error ? error.message : String(error) })\n    }\n  }\n\n  const handleExport = async (req: IncomingMessage, res: ServerResponse) => {\n    try {\n      const body = await readJson(req)\n      const index = Number(body.index)\n      const result = await sessions.exportBlob(index)\n      if (result.error) {\n        sendJson(res, 400, result)\n        return\n      }\n      sendJson(res, 200, { blob: result.blob })\n    } catch (error) {\n      sendJson(res, 400, { error: error instanceof Error ? error.message : String(error) })\n    }\n  }\n\n  const handleFingerprint = async (req: IncomingMessage, res: ServerResponse) => {\n    try {\n      const body = await readJson(req)\n      const index = Number(body.index)\n      const action = body.action === 'regenerate' ? 'regenerate' : 'show'\n      const result = await store.mutate(async (storage) => {\n        const account = storage.accounts[index]\n        if (!account) throw new Error('account not found')\n        if (action === 'regenerate') {\n          const fresh = generateFingerprint(undefined, await resolveAntigravityVersionBounded())\n          account.fingerprint = fresh\n          account.fingerprintHistory = recordFingerprintVersion(account.fingerprintHistory, fresh, 'regenerated')\n        }\n        return {\n          action,\n          fingerprint: account.fingerprint\n            ? { userAgent: account.fingerprint.userAgent, deviceId: account.fingerprint.deviceId, createdAt: account.fingerprint.createdAt }\n            : null,\n          history: account.fingerprintHistory?.length ?? 0,\n        }\n      })\n      sendJson(res, 200, result)\n    } catch (error) {\n      sendJson(res, 400, { error: error instanceof Error ? error.message : String(error) })\n    }\n  }\n\n  return [\n    { kind: 'exact', path: '/agy', handler: (req, res) => {\n      if (req.method === 'GET') {\n        res.writeHead(200, { 'content-type': 'text/html; charset=utf-8' })\n        res.end(renderDashboardHtml())\n        return\n      }\n      res.writeHead(405)\n      res.end()\n    } },\n    { kind: 'exact', path: '/agy/oauth-callback', handler: handleCallback },\n    { kind: 'exact', path: '/agy/api/accounts', handler: async (_req, res) => {\n      sendJson(res, 200, { accounts: await accountsList() })\n    } },\n    { kind: 'exact', path: '/agy/api/auth-url', handler: async (_req, res) => { await handleAuthUrl(res) } },\n    { kind: 'exact', path: '/agy/api/import', handler: handleImport },\n    { kind: 'exact', path: '/agy/api/export-all', handler: handleExportAll },\n    { kind: 'exact', path: '/agy/api/verify', handler: handleVerify },\n    { kind: 'exact', path: '/agy/api/health', handler: handleHealth },\n    { kind: 'exact', path: '/agy/api/delete', handler: handleDelete },\n    { kind: 'exact', path: '/agy/api/activate', handler: handleActivate },\n    { kind: 'exact', path: '/agy/api/models', handler: handleModels },\n    { kind: 'exact', path: '/agy/api/test', handler: handleTest },\n    { kind: 'exact', path: '/agy/api/export', handler: handleExport },\n    { kind: 'exact', path: '/agy/api/fingerprint', handler: handleFingerprint },\n  ]\n}\n\nexport { decodeCredentialBlob }\n","/**\n * dsh-agy web entry: registers the /agy routes on ctx.webServer. Declared as a\n * separate plugin (inject: ['webServer']) because the web server activates\n * after the llm service (it waits on webStartup); a strict ctx.get in the main\n * plugin's apply would return undefined. In profiles without a web server this\n * entry simply stays pending.\n */\n\nimport type { Context } from '@deepseek-ai/cordis'\nimport { createAgyRuntime } from '../plugin-common.ts'\nimport { isAgyDisabled } from '../runtime/risk.ts'\nimport { createAgyWebRoutes, type WebRoute } from './routes.ts'\n\nexport const name = 'dsh-agy-web'\n\nexport const inject = ['llm', 'webServer']\n\nexport function apply(ctx: Context): void {\n  if (isAgyDisabled()) {\n    ctx.logger.warn('[dsh-agy] disabled by DSH_AGY_DISABLE=1 — skipping /agy registration')\n    return\n  }\n  ctx.effect(async () => {\n    const webServer = ctx.get('webServer') as\n      | { register(route: WebRoute): () => void; host?: string }\n      | undefined\n    if (!webServer) return () => {}\n\n    // Host/port come from the webStartup provider (CLI args); the fallbacks are\n    // DSH's own web-app defaults (loopback + 3080), never a user override.\n    const webStartup = ctx.get('webStartup') as { host?: string; port?: number } | undefined\n    const host = webStartup?.host ?? '127.0.0.1'\n    const port = webStartup?.port ?? 3080\n\n    // The /agy routes manage account credentials with no authentication of\n    // their own; they must never be reachable from the network. When the web\n    // server binds a non-loopback interface, refuse to register them at all\n    // (the loopback-only OAuth redirect would be unusable there anyway).\n    const bindHost = webServer.host ?? host\n    if (!['127.0.0.1', 'localhost', '::1'].includes(bindHost)) {\n      ctx.logger.warn(\n        '[dsh-agy] web server bound to \"' + bindHost + '\" (non-loopback): not registering the /agy routes ' +\n        '(they manage account credentials and must stay loopback-only). Bind the web server to 127.0.0.1 to enable them.',\n      )\n      return () => {}\n    }\n\n    const { store, sessions } = await createAgyRuntime(ctx)\n    const baseUrl = `http://${host}:${port}`\n\n    const disposers = createAgyWebRoutes({ store, sessions, baseUrl }).map((route) =>\n      webServer.register(route),\n    )\n    return () => {\n      for (const dispose of disposers) dispose()\n    }\n  })\n}\n"],"mappings":";;;;;AAmEA,MAAa,YAAkD;CAC7D,IAAI;EACF,OAAO;EACP,UAAU;EACV,SAAS;EACT,iBAAiB;EACjB,YAAY;EACZ,cAAc;EACd,YAAY;EACZ,gBAAgB;EAChB,aAAa;EACb,aAAa;EACb,cAAc;EACd,kBAAkB;EAClB,2BAA2B;EAC3B,eAAe;EACf,SAAS;EACT,gBAAgB;EAChB,UAAU;EACV,QAAQ;EACR,WAAW;EACX,SAAS;EACT,YAAY;EACZ,aAAa;EACb,eAAe;EACf,eAAe;EACf,gBAAgB;EAChB,qBAAqB;EACrB,YAAY;EACZ,kBAAkB;EAClB,iBAAiB;EACjB,WAAW;EACX,SAAS;EACT,QAAQ;EACR,aAAa;EACb,YAAY;EACZ,mBAAmB;EACnB,YAAY;EACZ,eAAe;EACf,eAAe;EACf,WAAW;EACX,mBAAmB;EACnB,YAAY;EACZ,kBAAkB;EAClB,mBAAmB;EACnB,sBAAsB;EACtB,oBAAoB;EACpB,oBAAoB;EACpB,cAAc;EACd,aAAa;EACb,WAAW;EACX,aAAa;EACb,qBAAqB;EACrB,mBAAmB;EACnB,kBAAkB;EAClB,kBAAkB;EAClB,iBAAiB;EACjB,eAAe;EACf,aAAa;EACb,YAAY;EACZ,SAAS;EACT,SAAS;CACX;CACA,IAAI;EACF,OAAO;EACP,UAAU;EACV,SAAS;EACT,iBAAiB;EACjB,YAAY;EACZ,cAAc;EACd,YAAY;EACZ,gBAAgB;EAChB,aAAa;EACb,aAAa;EACb,cAAc;EACd,kBAAkB;EAClB,2BAA2B;EAC3B,eAAe;EACf,SAAS;EACT,gBAAgB;EAChB,UAAU;EACV,QAAQ;EACR,WAAW;EACX,SAAS;EACT,YAAY;EACZ,aAAa;EACb,eAAe;EACf,eAAe;EACf,gBAAgB;EAChB,qBAAqB;EACrB,YAAY;EACZ,kBAAkB;EAClB,iBAAiB;EACjB,WAAW;EACX,SAAS;EACT,QAAQ;EACR,aAAa;EACb,YAAY;EACZ,mBAAmB;EACnB,YAAY;EACZ,eAAe;EACf,eAAe;EACf,WAAW;EACX,mBAAmB;EACnB,YAAY;EACZ,kBAAkB;EAClB,mBAAmB;EACnB,sBAAsB;EACtB,oBAAoB;EACpB,oBAAoB;EACpB,cAAc;EACd,aAAa;EACb,WAAW;EACX,aAAa;EACb,qBAAqB;EACrB,mBAAmB;EACnB,kBAAkB;EAClB,kBAAkB;EAClB,iBAAiB;EACjB,eAAe;EACf,aAAa;EACb,YAAY;EACZ,SAAS;EACT,SAAS;CACX;AACF;;;;;;;ACzLA,SAAgB,sBAA8B;CAG5C,OAAO;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;mBAFU,KAAK,UAAU,SAkjBR,EAAE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAkb5B;AAEA,SAAgB,mBAAmB,SAA0F;CAC3H,MAAM,EAAE,IAAI,OAAO,OAAO,YAAY;CACtC,MAAM,WAAW,KAAK,UAAU,SAAS;CAEzC,OAAO;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;MAwFH,KAAK;;;8CAGmC,QAAQ,aAAa,QAAQ,eAAe,GAAG;;;QAGrF;;;oCAG4B,SAAS,gBAAgB;yCACpB,QAAQ;MAC3C;;;mBAGa,SAAS;;;;UAIlB,KAAK,SAAS,QAAQ;;6EAE6C,KAAK,UAAU,QAAQ,OAAO,QAAQ,MAAM,EAAE,EAAE;;;;;;;;;;;;;;;;;;AAkB7H;;;AC9kCA,SAAS,SAAS,KAAqB,QAAgB,MAAqB;CAC1E,IAAI,UAAU,QAAQ,EAAE,gBAAgB,mBAAmB,CAAC;CAC5D,IAAI,IAAI,KAAK,UAAU,IAAI,CAAC;AAC9B;AAEA,eAAe,SAAS,KAAwD;CAC9E,MAAM,SAAmB,CAAC;CAC1B,WAAW,MAAM,SAAS,KAAK,OAAO,KAAK,KAAe;CAC1D,MAAM,OAAO,OAAO,OAAO,MAAM,CAAC,CAAC,SAAS,MAAM;CAClD,OAAO,OAAQ,KAAK,MAAM,IAAI,IAAgC,CAAC;AACjE;AAEA,SAAgB,mBAAmB,SAAoC;CACrE,MAAM,EAAE,OAAO,UAAU,YAAY;CAIrC,MAAM,8BAAc,IAAI,IAAqD;CAC7E,MAAM,sBAAsB;CAC5B,MAAM,oBAAoB,MAAM,KAAK,IAAI,MAAM;EAC7C,KAAK,MAAM,CAAC,KAAK,UAAU,aACzB,IAAI,MAAM,aAAa,KAAK,YAAY,OAAO,GAAG;EAEpD,OAAO,YAAY,OAAO,KAAK;GAC7B,IAAI,YAA2B;GAC/B,IAAI,eAAe;GACnB,KAAK,MAAM,CAAC,KAAK,UAAU,aACzB,IAAI,MAAM,YAAY,cAAc;IAClC,eAAe,MAAM;IACrB,YAAY;GACd;GAEF,IAAI,WAAW,YAAY,OAAO,SAAS;QACtC;EACP;CACF;CAEA,MAAM,eAAe,YAAY;EAC/B,MAAM,UAAU,MAAM,MAAM,KAAK;EACjC,MAAM,MAAM,KAAK,IAAI;EACrB,MAAM,OAAO,CAAC;EACd,KAAK,MAAM,CAAC,OAAO,YAAY,QAAQ,SAAS,QAAQ,GAAG;GACzD,MAAM,QAAiC;IACrC;IACA,OAAO,QAAQ,SAAS;IACxB,WAAW,QAAQ,aAAa;IAChC,QAAQ,UAAU,QAAQ,eAAe,QAAQ,YAAY;IAC7D,OAAO,QAAQ,YAAY,QAAQ,aAC/B,QAAQ,uBAAuB,0BAC/B,QAAQ,oBAAoB,QAAQ,mBAAmB,MAAM,YAC7D;IACJ,eAAe,QAAQ,oBAAoB,QAAQ,mBAAmB,MAAM,IAAI,KAAK,QAAQ,gBAAgB,CAAC,CAAC,YAAY,IAAI;IAC/H,gBAAgB,QAAQ,kBAAkB;IAC1C,YAAY,QAAQ,uBAAuB;IAC3C,aAAa,QAAQ,cACjB;KAAE,WAAW,QAAQ,YAAY;KAAW,UAAU,QAAQ,YAAY;KAAU,WAAW,QAAQ,YAAY;IAAU,IAC7H;IACJ,qBAAqB,QAAQ,sBAAsB,CAAC,EAAA,CAAG;IACvD,OAAO;GACT;GACA,KAAK,KAAK,KAAK;EACjB;EAEA,KAAK,MAAM,SAAS,MAAM;GACxB,MAAM,UAAU,MAAM,SAAS,WAAW,CAAC,CAAC,YAAY,KAAA,CAAS;GACjE,IAAI,CAAC,WAAW,QAAQ,UAAU,MAAM,OAAO;GAC/C,IAAI;IACF,MAAM,EAAE,yBAAyB,MAAM,OAAO,yBAAuB,CAAA,MAAA,MAAA,EAAA,CAAA;IACrE,MAAM,aAAa,MAAM,qBAAqB,QAAQ,KAAK,QAAQ,QAAQ,QAAQ,SAAS;IAC5F,MAAM,SAAS,OAAO,QAAQ,WAAW,UAAU,CAAC,CAAC;IACrD,IAAI,OAAO,SAAS,GAAG;KACrB,MAAM,YAAY,OACf,KAAK,CAAC,IAAI,QAAQ;MACjB;MACA,mBAAmB,OAAO,EAAE,WAAW,sBAAsB,WACzD,KAAK,IAAI,GAAG,KAAK,IAAI,GAAG,EAAE,UAAU,iBAAiB,CAAC,IACtD;MACJ,WAAW,EAAE,WAAW,aAAa;KACvC,EAAE,CAAC,CACF,MAAM,GAAG,OAAO,EAAE,qBAAqB,OAAO,EAAE,qBAAqB,GAAG;KAC3E,MAAM,QAAQ;MACZ,YAAY,OAAO;MACnB,QAAQ;KACV;IACF;GACF,QAAQ,CAER;EACF;EACA,OAAO;CACT;CAEA,MAAM,gBAAgB,OAAO,QAAwB;EACnD,MAAM,cAAc,GAAG,QAAQ;EAC/B,MAAM,gBAAgB,MAAM,qBAAqB,WAAW;EAC5D,iBAAiB;EACjB,YAAY,IAAI,cAAc,OAAO;GACnC,UAAU,cAAc;GACxB,WAAW,KAAK,IAAI,IAAI;EAC1B,CAAC;EACD,SAAS,KAAK,KAAK,EAAE,KAAK,cAAc,IAAI,CAAC;CAC/C;CAEA,MAAM,iBAAiB,OAAO,KAAsB,QAAwB;EAC1E,MAAM,MAAM,IAAI,IAAI,IAAI,OAAO,KAAK,OAAO;EAC3C,MAAM,OAAO,IAAI,aAAa,IAAI,MAAM;EACxC,MAAM,QAAQ,IAAI,aAAa,IAAI,OAAO;EAC1C,IAAI,CAAC,QAAQ,CAAC,OAAO;GACnB,IAAI,UAAU,KAAK,EAAE,gBAAgB,2BAA2B,CAAC;GACjE,IAAI,IAAI,mBAAmB;IAAE,IAAI;IAAO,OAAO;IAAmC;GAAQ,CAAC,CAAC;GAC5F;EACF;EACA,MAAM,WAAW,YAAY,IAAI,KAAK;EACtC,IAAI,CAAC,UAAU;GACb,IAAI,UAAU,KAAK,EAAE,gBAAgB,2BAA2B,CAAC;GACjE,IAAI,IAAI,mBAAmB;IAAE,IAAI;IAAO,OAAO;IAAgE;GAAQ,CAAC,CAAC;GACzH;EACF;EAEA,YAAY,OAAO,KAAK;EACxB,MAAM,cAAc,GAAG,QAAQ;EAC/B,MAAM,SAAS,MAAM,oBAAoB,MAAM,OAAO,aAAa,SAAS,QAAQ;EACpF,IAAI,OAAO,SAAS,UAAU;GAC5B,IAAI,UAAU,KAAK,EAAE,gBAAgB,2BAA2B,CAAC;GACjE,IAAI,IAAI,mBAAmB;IAAE,IAAI;IAAO,OAAO,OAAO;IAAO;GAAQ,CAAC,CAAC;GACvE;EACF;EACA,MAAM,sBAAsB,OAAO;GACjC,aAAa,OAAO;GACpB,cAAc,OAAO,QAAQ,MAAM,GAAG,CAAC,CAAC;GACxC,WAAW;GACX,WAAW,IAAI,KAAK,OAAO,OAAO,CAAC,CAAC,YAAY;GAChD,YAAY;GACZ,OAAO,OAAO,SAAS;GACvB,WAAW,OAAO,aAAa;GAC/B,UAAU,OAAO,YAAY;EAC/B,GAAG,EAAE,mBAAmB,KAAK,CAAC;EAE9B,IAAI,UAAU,KAAK,EAAE,gBAAgB,2BAA2B,CAAC;EACjE,IAAI,IAAI,mBAAmB;GAAE,IAAI;GAAM,OAAO,OAAO,SAAS;GAAM;EAAQ,CAAC,CAAC;CAChF;CAEA,MAAM,eAAe,OAAO,KAAsB,QAAwB;EACxE,IAAI;GACF,MAAM,OAAO,MAAM,SAAS,GAAG;GAC/B,MAAM,OAAO,KAAK,SAAS,SAAS,SAAS;GAG7C,MAAM,UAAqB,MAAM,QAAQ,KAAK,OAAO,IACjD,KAAK,UACL,KAAK,WAAW,KAAA,IAAY,CAAC,KAAK,MAAM,IAAI,CAAC;GACjD,IAAI,QAAQ,WAAW,GAAG,MAAM,IAAI,MAAM,mBAAmB;GAM7D,SAAS,KAAK,KAAK,MALE,kBACnB,QAAQ,KAAK,YAAY;IAAE;IAAQ;GAAK,EAAE,GAC1C,OACA,EAAE,mBAAmB,KAAK,CAC5B,CACyB;EAC3B,SAAS,OAAO;GACd,SAAS,KAAK,KAAK,EAAE,OAAO,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,EAAE,CAAC;EACtF;CACF;CAEA,MAAM,kBAAkB,OAAO,MAAuB,QAAwB;EAC5E,IAAI;GACF,MAAM,UAAU,MAAM,MAAM,KAAK;GACjC,MAAM,QAAgD,CAAC;GACvD,KAAK,IAAI,QAAQ,GAAG,QAAQ,QAAQ,SAAS,QAAQ,SAAS;IAC5D,MAAM,SAAS,MAAM,SAAS,WAAW,KAAK;IAC9C,IAAI,OAAO,MAAM,MAAM,KAAK;KAAE;KAAO,MAAM,OAAO;IAAK,CAAC;GAC1D;GACA,SAAS,KAAK,KAAK,EAAE,MAAM,CAAC;EAC9B,SAAS,OAAO;GACd,SAAS,KAAK,KAAK,EAAE,OAAO,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,EAAE,CAAC;EACtF;CACF;CAEA,MAAM,eAAe,OAAO,KAAsB,QAAwB;EACxE,IAAI;GACF,MAAM,OAAO,MAAM,SAAS,GAAG;GAC/B,MAAM,QAAQ,OAAO,KAAK,KAAK;GAC/B,MAAM,SAAS,MAAM,SAAS,cAAc,KAAK;GACjD,SAAS,KAAK,OAAO,KAAK,MAAM,KAAK,MAAM;EAC7C,SAAS,OAAO;GACd,SAAS,KAAK,KAAK,EAAE,OAAO,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,EAAE,CAAC;EACtF;CACF;CAEA,MAAM,eAAe,OAAO,KAAsB,QAAwB;EACxE,IAAI;GACF,MAAM,OAAO,MAAM,SAAS,GAAG;GAC/B,MAAM,UAAU,MAAM,QAAQ,KAAK,OAAO,IACrC,KAAK,QAAsB,KAAK,UAAU,OAAO,KAAK,CAAC,IACxD,KAAA;GAEJ,SAAS,KAAK,KAAK,EAAE,SAAA,MADC,SAAS,cAAc,OAAO,EACvB,CAAC;EAChC,SAAS,OAAO;GACd,SAAS,KAAK,KAAK,EAAE,OAAO,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,EAAE,CAAC;EACtF;CACF;CAEA,MAAM,eAAe,OAAO,KAAsB,QAAwB;EACxE,IAAI;GACF,MAAM,OAAO,MAAM,SAAS,GAAG;GAC/B,MAAM,QAAQ,OAAO,KAAK,KAAK;GAC/B,MAAM,MAAM,QAAQ,YAAY;IAC9B,IAAI,QAAQ,KAAK,SAAS,QAAQ,SAAS,QAAQ,MAAM,IAAI,MAAM,mBAAmB;IACtF,QAAQ,SAAS,OAAO,OAAO,CAAC;IAChC,IAAI,QAAQ,eAAe,QAAQ,SAAS,QAAQ,QAAQ,cAAc;GAC5E,CAAC;GACD,SAAS,KAAK,KAAK,EAAE,IAAI,KAAK,CAAC;EACjC,SAAS,OAAO;GACd,SAAS,KAAK,KAAK,EAAE,OAAO,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,EAAE,CAAC;EACtF;CACF;CAEA,MAAM,iBAAiB,OAAO,KAAsB,QAAwB;EAC1E,IAAI;GACF,MAAM,OAAO,MAAM,SAAS,GAAG;GAC/B,MAAM,QAAQ,OAAO,KAAK,KAAK;GAC/B,MAAM,MAAM,QAAQ,YAAY;IAC9B,IAAI,QAAQ,KAAK,SAAS,QAAQ,SAAS,QAAQ,MAAM,IAAI,MAAM,mBAAmB;IACtF,QAAQ,cAAc;GACxB,CAAC;GACD,SAAS,KAAK,KAAK;IAAE,IAAI;IAAM;GAAM,CAAC;EACxC,SAAS,OAAO;GACd,SAAS,KAAK,KAAK,EAAE,OAAO,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,EAAE,CAAC;EACtF;CACF;CAEA,MAAM,eAAe,OAAO,MAAuB,QAAwB;EACzE,MAAM,UAAU,MAAM,SAAS,WAAW,CAAC,CAAC,YAAY,KAAA,CAAS;EACjE,IAAI,CAAC,SAAS;GACZ,SAAS,KAAK,KAAK,EAAE,OAAO,yDAAyD,CAAC;GACtF;EACF;EACA,IAAI;GACF,MAAM,EAAE,kBAAkB,MAAM,OAAO,yBAAuB,CAAA,MAAA,MAAA,EAAA,CAAA;GAC9D,MAAM,SAAS,MAAM,cAAc,QAAQ,KAAK,QAAQ,QAAQ,QAAQ,SAAS;GACjF,SAAS,KAAK,KAAK;IAAE,SAAS,QAAQ,QAAQ,SAAS;IAAM,QAAQ,OAAO,KAAK,OAAO;KACtF,IAAI,EAAE;KACN,MAAM,EAAE;IACV,EAAE;GAAE,CAAC;EACP,SAAS,OAAO;GACd,SAAS,KAAK,KAAK,EAAE,OAAO,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,EAAE,CAAC;EACtF;CACF;CAEA,MAAM,aAAa,OAAO,KAAsB,QAAwB;EACtE,IAAI;GACF,MAAM,OAAO,MAAM,SAAS,GAAG;GAC/B,MAAM,QAAQ,OAAO,KAAK,UAAU,WAAW,KAAK,QAAQ;GAC5D,IAAI,CAAC,OAAO;IACV,SAAS,KAAK,KAAK,EAAE,OAAO,oBAAoB,CAAC;IACjD;GACF;GACA,MAAM,SAAS,MAAM,SAAS,SAAS,KAAK;GAC5C,SAAS,KAAK,OAAO,KAAK,MAAM,KAAK,MAAM;EAC7C,SAAS,OAAO;GACd,SAAS,KAAK,KAAK,EAAE,OAAO,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,EAAE,CAAC;EACtF;CACF;CAEA,MAAM,eAAe,OAAO,KAAsB,QAAwB;EACxE,IAAI;GACF,MAAM,OAAO,MAAM,SAAS,GAAG;GAC/B,MAAM,QAAQ,OAAO,KAAK,KAAK;GAC/B,MAAM,SAAS,MAAM,SAAS,WAAW,KAAK;GAC9C,IAAI,OAAO,OAAO;IAChB,SAAS,KAAK,KAAK,MAAM;IACzB;GACF;GACA,SAAS,KAAK,KAAK,EAAE,MAAM,OAAO,KAAK,CAAC;EAC1C,SAAS,OAAO;GACd,SAAS,KAAK,KAAK,EAAE,OAAO,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,EAAE,CAAC;EACtF;CACF;CAEA,MAAM,oBAAoB,OAAO,KAAsB,QAAwB;EAC7E,IAAI;GACF,MAAM,OAAO,MAAM,SAAS,GAAG;GAC/B,MAAM,QAAQ,OAAO,KAAK,KAAK;GAC/B,MAAM,SAAS,KAAK,WAAW,eAAe,eAAe;GAiB7D,SAAS,KAAK,KAAK,MAhBE,MAAM,OAAO,OAAO,YAAY;IACnD,MAAM,UAAU,QAAQ,SAAS;IACjC,IAAI,CAAC,SAAS,MAAM,IAAI,MAAM,mBAAmB;IACjD,IAAI,WAAW,cAAc;KAC3B,MAAM,QAAQ,oBAAoB,KAAA,GAAW,MAAM,iCAAiC,CAAC;KACrF,QAAQ,cAAc;KACtB,QAAQ,qBAAqB,yBAAyB,QAAQ,oBAAoB,OAAO,aAAa;IACxG;IACA,OAAO;KACL;KACA,aAAa,QAAQ,cACjB;MAAE,WAAW,QAAQ,YAAY;MAAW,UAAU,QAAQ,YAAY;MAAU,WAAW,QAAQ,YAAY;KAAU,IAC7H;KACJ,SAAS,QAAQ,oBAAoB,UAAU;IACjD;GACF,CAAC,CACwB;EAC3B,SAAS,OAAO;GACd,SAAS,KAAK,KAAK,EAAE,OAAO,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,EAAE,CAAC;EACtF;CACF;CAEA,OAAO;EACL;GAAE,MAAM;GAAS,MAAM;GAAQ,UAAU,KAAK,QAAQ;IACpD,IAAI,IAAI,WAAW,OAAO;KACxB,IAAI,UAAU,KAAK,EAAE,gBAAgB,2BAA2B,CAAC;KACjE,IAAI,IAAI,oBAAoB,CAAC;KAC7B;IACF;IACA,IAAI,UAAU,GAAG;IACjB,IAAI,IAAI;GACV;EAAE;EACF;GAAE,MAAM;GAAS,MAAM;GAAuB,SAAS;EAAe;EACtE;GAAE,MAAM;GAAS,MAAM;GAAqB,SAAS,OAAO,MAAM,QAAQ;IACxE,SAAS,KAAK,KAAK,EAAE,UAAU,MAAM,aAAa,EAAE,CAAC;GACvD;EAAE;EACF;GAAE,MAAM;GAAS,MAAM;GAAqB,SAAS,OAAO,MAAM,QAAQ;IAAE,MAAM,cAAc,GAAG;GAAE;EAAE;EACvG;GAAE,MAAM;GAAS,MAAM;GAAmB,SAAS;EAAa;EAChE;GAAE,MAAM;GAAS,MAAM;GAAuB,SAAS;EAAgB;EACvE;GAAE,MAAM;GAAS,MAAM;GAAmB,SAAS;EAAa;EAChE;GAAE,MAAM;GAAS,MAAM;GAAmB,SAAS;EAAa;EAChE;GAAE,MAAM;GAAS,MAAM;GAAmB,SAAS;EAAa;EAChE;GAAE,MAAM;GAAS,MAAM;GAAqB,SAAS;EAAe;EACpE;GAAE,MAAM;GAAS,MAAM;GAAmB,SAAS;EAAa;EAChE;GAAE,MAAM;GAAS,MAAM;GAAiB,SAAS;EAAW;EAC5D;GAAE,MAAM;GAAS,MAAM;GAAmB,SAAS;EAAa;EAChE;GAAE,MAAM;GAAS,MAAM;GAAwB,SAAS;EAAkB;CAC5E;AACF;;;AChWA,MAAa,OAAO;AAEpB,MAAa,SAAS,CAAC,OAAO,WAAW;AAEzC,SAAgB,MAAM,KAAoB;CACxC,IAAI,cAAc,GAAG;EACnB,IAAI,OAAO,KAAK,sEAAsE;EACtF;CACF;CACA,IAAI,OAAO,YAAY;EACrB,MAAM,YAAY,IAAI,IAAI,WAAW;EAGrC,IAAI,CAAC,WAAW,aAAa,CAAC;EAI9B,MAAM,aAAa,IAAI,IAAI,YAAY;EACvC,MAAM,OAAO,YAAY,QAAQ;EACjC,MAAM,OAAO,YAAY,QAAQ;EAMjC,MAAM,WAAW,UAAU,QAAQ;EACnC,IAAI,CAAC;GAAC;GAAa;GAAa;EAAK,CAAC,CAAC,SAAS,QAAQ,GAAG;GACzD,IAAI,OAAO,KACT,qCAAoC,WAAW,oKAEjD;GACA,aAAa,CAAC;EAChB;EAEA,MAAM,EAAE,OAAO,aAAa,MAAM,iBAAiB,GAAG;EAGtD,MAAM,YAAY,mBAAmB;GAAE;GAAO;GAAU,mBAF9B,KAAK,GAAG;EAE8B,CAAC,CAAC,CAAC,KAAK,UACtE,UAAU,SAAS,KAAK,CAC1B;EACA,aAAa;GACX,KAAK,MAAM,WAAW,WAAW,QAAQ;EAC3C;CACF,CAAC;AACH"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dsh-agy",
-  "version": "0.2.1",
+  "version": "0.2.3",
   "packageManager": "pnpm@11.10.0",
   "description": "Google Antigravity (agy) OAuth auth + model access plugin for DeepSeek Harness: multi-account pool, 429 rotation, device fingerprinting, CLI and web login.",
   "type": "module",
@@ -28,7 +28,7 @@
     }
   },
   "engines": {
-    "node": ">=20.0.0"
+    "node": ">=20.18.1"
   },
   "scripts": {
     "build": "tsdown",
@@ -57,7 +57,8 @@
   },
   "dependencies": {
     "commander": "^14.0.0",
-    "proper-lockfile": "^4.1.2"
+    "proper-lockfile": "^4.1.2",
+    "undici": "^7.29.0"
   },
   "devDependencies": {
     "@types/node": "^24.0.0",

package/lib/exchange-BkQRoBzy.mjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"exchange-BkQRoBzy.mjs","names":["record"],"sources":["../src/oauth/pkce.ts","../src/oauth/exchange.ts"],"sourcesContent":["/** Minimal PKCE (RFC 7636) with S256, hand-rolled on node:crypto (no extra dependency). */\n\nimport { createHash, randomBytes } from 'node:crypto'\n\nfunction base64url(input: Buffer): string {\n  return input.toString('base64url')\n}\n\n/** Generate a PKCE verifier (43-char URL-safe random) and its S256 challenge. */\nexport function generatePkcePair(): { verifier: string; challenge: string } {\n  const verifier = base64url(randomBytes(32))\n  const challenge = base64url(createHash('sha256').update(verifier).digest())\n  return { verifier, challenge }\n}\n\n/** Encode an object into a URL-safe base64 string (used for the OAuth state). */\nexport function encodeState(payload: unknown): string {\n  return Buffer.from(JSON.stringify(payload), 'utf8').toString('base64url')\n}\n\n/** Decode a URL-safe base64 OAuth state back into its structured representation. */\nexport function decodeState<T>(state: string): T {\n  const normalized = state.replace(/-/g, '+').replace(/_/g, '/')\n  const padded = normalized.padEnd(\n    normalized.length + (((4 - (normalized.length % 4)) % 4)),\n    '=',\n  )\n  const json = Buffer.from(padded, 'base64').toString('utf8')\n  return JSON.parse(json) as T\n}\n","/**\n * Exchange an authorization code for agy tokens, then resolve identity and\n * project via the Code Assist backend (userinfo + loadCodeAssist, multi-endpoint\n * fallback, best-effort).\n */\n\nimport type { TokenExchangeFailure, TokenExchangeResult } from '../types.ts'\nimport { calculateTokenExpiry } from './auth.ts'\nimport {\n  AGY_CLIENT_ID,\n  AGY_CLIENT_SECRET,\n  AGY_ENDPOINT_FALLBACKS,\n  OAUTH_TOKEN_URL,\n  OAUTH_USERINFO_URL,\n  getAgyBootstrapClientMetadata,\n  getAgyBootstrapUserAgent,\n} from './constants.ts'\nimport { decodeState } from './pkce.ts'\n\nconst FETCH_TIMEOUT_MS = 10_000\n\ninterface OAuthState {\n  verifier: string\n  projectId?: string\n}\n\ninterface TokenPayload {\n  access_token: string\n  expires_in?: number\n  refresh_token?: string\n}\n\ninterface UserInfo {\n  email?: string\n}\n\nasync function fetchWithTimeout(url: string, options: RequestInit, timeoutMs = FETCH_TIMEOUT_MS): Promise<Response> {\n  const controller = new AbortController()\n  const timeout = setTimeout(() => controller.abort(), timeoutMs)\n  try {\n    return await fetch(url, { ...options, signal: controller.signal })\n  } finally {\n    clearTimeout(timeout)\n  }\n}\n\ninterface LoadCodeAssistData {\n  cloudaicompanionProject?: unknown\n  subscriptionInfo?: unknown\n}\n\n/** Build the metadata payload shared by loadCodeAssist and onboardUser.\n * Only `ideType` is sent: `platform`/`pluginType` values are rejected by the\n * backend's enum validation (verified live: INVALID_ARGUMENT on \"MACOS\"), and\n * the official clients send ideType alone (OmniRoute capture). */\nfunction bootstrapMetadata(): Record<string, string> {\n  return { ideType: 'ANTIGRAVITY' }\n}\n\nfunction extractProjectId(data: LoadCodeAssistData): string {\n  const project = data.cloudaicompanionProject\n  if (typeof project === 'string' && project) return project\n  const record = project as { id?: string } | undefined\n  return record && typeof record.id === 'string' && record.id ? record.id : ''\n}\n\n/**\n * Extract the subscription tier id used for onboardUser, mirroring OmniRoute's\n * codeAssistSubscription: paid → current → default allowed → legacy-tier.\n */\nexport function extractOnboardTierId(subscriptionInfo: unknown): string {\n  const subscription = (subscriptionInfo ?? {}) as Record<string, unknown>\n  const tierOf = (value: unknown, field: 'name' | 'id'): string | null => {\n    const record = value as Record<string, unknown> | undefined\n    const picked = record?.[field]\n    return typeof picked === 'string' && picked.trim() ? picked.trim() : null\n  }\n\n  const paidId = tierOf(subscription.paidTier, 'id')\n  if (paidId) return paidId\n\n  const ineligible = Array.isArray(subscription.ineligibleTiers) && subscription.ineligibleTiers.length > 0\n  if (!ineligible) {\n    const currentId = tierOf(subscription.currentTier, 'id')\n    if (currentId) return currentId\n  }\n\n  if (Array.isArray(subscription.allowedTiers)) {\n    for (const tierValue of subscription.allowedTiers) {\n      const tier = tierValue as Record<string, unknown>\n      if (tier.isDefault) {\n        const defaultId = tierOf(tier, 'id')\n        if (defaultId) return defaultId\n      }\n    }\n  }\n\n  const currentId = tierOf(subscription.currentTier, 'id')\n  if (currentId) return currentId\n  return 'legacy-tier'\n}\n\n/** Resolve project id + tier id via loadCodeAssist across fallback endpoints. */\nexport async function loadCodeAssist(accessToken: string): Promise<{ projectId: string; tierId: string }> {\n  const errors: string[] = []\n  const loadHeaders: Record<string, string> = {\n    Authorization: `Bearer ${accessToken}`,\n    'Content-Type': 'application/json',\n    'User-Agent': getAgyBootstrapUserAgent(),\n    'Client-Metadata': getAgyBootstrapClientMetadata(),\n  }\n\n  for (const baseEndpoint of AGY_ENDPOINT_FALLBACKS) {\n    try {\n      const url = `${baseEndpoint}/v1internal:loadCodeAssist`\n      const response = await fetchWithTimeout(url, {\n        method: 'POST',\n        headers: loadHeaders,\n        body: JSON.stringify({ metadata: bootstrapMetadata() }),\n      })\n\n      if (!response.ok) {\n        const message = await response.text().catch(() => '')\n        errors.push(`loadCodeAssist ${response.status} at ${baseEndpoint}${message ? `: ${message}` : ''}`)\n        continue\n      }\n\n      const data = (await response.json()) as LoadCodeAssistData\n      const projectId = extractProjectId(data)\n      if (projectId) {\n        return { projectId, tierId: extractOnboardTierId(data.subscriptionInfo) }\n      }\n      errors.push(`loadCodeAssist missing project id at ${baseEndpoint}`)\n    } catch (error) {\n      errors.push(\n        `loadCodeAssist error at ${baseEndpoint}: ${error instanceof Error ? error.message : String(error)}`,\n      )\n    }\n  }\n\n  return { projectId: '', tierId: 'legacy-tier' }\n}\n\n/**\n * Onboard a new account (no Cloud Code project yet): POST onboardUser with the\n * tier id, then retry loadCodeAssist. Mirrors OmniRoute's postExchange flow\n * (bounded inline onboarding, 10 attempts × 5s).\n */\nexport async function onboardAndDiscoverProject(\n  accessToken: string,\n  tierId: string,\n  options: { maxAttempts?: number; retryDelayMs?: number } = {},\n): Promise<{ projectId: string; tierId: string }> {\n  // Bounded onboarding: 3 attempts with jittered delay (3-7s). Fixed-rhythm\n  // long retry loops read as scripted automation to the upstream (OmniRoute\n  // #9939 ban-safety hardening capped 10x5s to 3x3-7s).\n  const maxAttempts = options.maxAttempts ?? 3\n  const retryDelayMs = options.retryDelayMs ?? 3000 + Math.floor(Math.random() * 4000)\n  const headers: Record<string, string> = {\n    Authorization: `Bearer ${accessToken}`,\n    'Content-Type': 'application/json',\n    'User-Agent': getAgyBootstrapUserAgent(),\n    'Client-Metadata': getAgyBootstrapClientMetadata(),\n  }\n  const metadata = bootstrapMetadata()\n\n  for (let attempt = 0; attempt < maxAttempts; attempt++) {\n    try {\n      for (const baseEndpoint of AGY_ENDPOINT_FALLBACKS) {\n        const response = await fetchWithTimeout(`${baseEndpoint}/v1internal:onboardUser`, {\n          method: 'POST',\n          headers,\n          body: JSON.stringify({ tier_id: tierId, metadata }),\n        })\n        if (!response.ok) continue\n        const result = (await response.json()) as { done?: boolean }\n        if (result.done === true) {\n          const discovered = await loadCodeAssist(accessToken)\n          if (discovered.projectId) return discovered\n        }\n      }\n    } catch {\n      // transient — retry\n    }\n    await new Promise((resolve) => setTimeout(resolve, retryDelayMs))\n  }\n\n  return { projectId: '', tierId }\n}\n\n/** Full bootstrap for a fresh account: discover the project, onboarding if needed. */\nexport async function bootstrapAccount(\n  accessToken: string,\n  options: { maxAttempts?: number; retryDelayMs?: number } = {},\n): Promise<{ projectId: string; tierId: string }> {\n  const discovered = await loadCodeAssist(accessToken)\n  if (discovered.projectId) return discovered\n  return onboardAndDiscoverProject(accessToken, discovered.tierId, options)\n}\n\n/** Resolve the account's Cloud Code project id via loadCodeAssist across fallback endpoints. */\nexport async function fetchProjectID(accessToken: string): Promise<string> {\n  return (await loadCodeAssist(accessToken)).projectId\n}\n\n/**\n * Exchange the authorization code (from the loopback callback) for access/refresh\n * tokens, resolve the email, and discover the project id.\n * @param code - the `code` query parameter from the redirect.\n * @param state - the `state` query parameter (encodes verifier + projectId).\n * @param redirectUri - must match the authorize() redirectUri.\n */\nexport async function exchangeAntigravity(\n  code: string,\n  state: string,\n  redirectUri: string,\n  expectedVerifier?: string,\n): Promise<TokenExchangeResult> {\n  try {\n    const { verifier, projectId } = decodeState<OAuthState>(state)\n    if (!verifier) {\n      return { type: 'failed', error: 'Missing PKCE verifier in state' }\n    }\n    // The caller issued this authorization URL (the CLI holds the verifier;\n    // the web entry stores it per state). A state from a different login — or\n    // one fabricated by an attacker — must not be exchangeable into the store.\n    if (expectedVerifier && verifier !== expectedVerifier) {\n      return { type: 'failed', error: 'State does not match the issued authorization' }\n    }\n\n    const startTime = Date.now()\n    const tokenResponse = await fetch(OAUTH_TOKEN_URL, {\n      method: 'POST',\n      headers: {\n        'Content-Type': 'application/x-www-form-urlencoded;charset=UTF-8',\n        Accept: '*/*',\n        'User-Agent': getAgyBootstrapUserAgent(),\n      },\n      body: new URLSearchParams({\n        client_id: AGY_CLIENT_ID,\n        client_secret: AGY_CLIENT_SECRET,\n        code,\n        grant_type: 'authorization_code',\n        redirect_uri: redirectUri,\n        code_verifier: verifier,\n      }),\n    })\n\n    if (!tokenResponse.ok) {\n      const errorText = await tokenResponse.text()\n      return { type: 'failed', error: errorText }\n    }\n\n    const tokenPayload = (await tokenResponse.json()) as TokenPayload\n\n    const userInfoResponse = await fetch(`${OAUTH_USERINFO_URL}?alt=json`, {\n      headers: {\n        Authorization: `Bearer ${tokenPayload.access_token}`,\n        'User-Agent': getAgyBootstrapUserAgent(),\n      },\n    })\n    const userInfo: UserInfo = userInfoResponse.ok\n      ? ((await userInfoResponse.json()) as UserInfo)\n      : {}\n\n    const refreshToken = tokenPayload.refresh_token\n    if (!refreshToken) {\n      return { type: 'failed', error: 'Missing refresh token in response' }\n    }\n\n    const effectiveProjectId = projectId || (await bootstrapAccount(tokenPayload.access_token)).projectId\n\n    return {\n      type: 'success',\n      refresh: `${refreshToken}|${effectiveProjectId || ''}`,\n      access: tokenPayload.access_token,\n      expires: calculateTokenExpiry(startTime, tokenPayload.expires_in),\n      email: userInfo.email,\n      projectId: effectiveProjectId || '',\n    }\n  } catch (error) {\n    const failure: TokenExchangeFailure = {\n      type: 'failed',\n      error: error instanceof Error ? error.message : 'Unknown error',\n    }\n    return failure\n  }\n}\n"],"mappings":";;;;;AAIA,SAAS,UAAU,OAAuB;CACxC,OAAO,MAAM,SAAS,WAAW;AACnC;;AAGA,SAAgB,mBAA4D;CAC1E,MAAM,WAAW,UAAU,YAAY,EAAE,CAAC;CAE1C,OAAO;EAAE;EAAU,WADD,UAAU,WAAW,QAAQ,CAAC,CAAC,OAAO,QAAQ,CAAC,CAAC,OAAO,CAC9C;CAAE;AAC/B;;AAGA,SAAgB,YAAY,SAA0B;CACpD,OAAO,OAAO,KAAK,KAAK,UAAU,OAAO,GAAG,MAAM,CAAC,CAAC,SAAS,WAAW;AAC1E;;AAGA,SAAgB,YAAe,OAAkB;CAC/C,MAAM,aAAa,MAAM,QAAQ,MAAM,GAAG,CAAC,CAAC,QAAQ,MAAM,GAAG;CAC7D,MAAM,SAAS,WAAW,OACxB,WAAW,UAAY,IAAK,WAAW,SAAS,KAAM,GACtD,GACF;CACA,MAAM,OAAO,OAAO,KAAK,QAAQ,QAAQ,CAAC,CAAC,SAAS,MAAM;CAC1D,OAAO,KAAK,MAAM,IAAI;AACxB;;;;;;;;;;ACVA,MAAM,mBAAmB;AAiBzB,eAAe,iBAAiB,KAAa,SAAsB,YAAY,kBAAqC;CAClH,MAAM,aAAa,IAAI,gBAAgB;CACvC,MAAM,UAAU,iBAAiB,WAAW,MAAM,GAAG,SAAS;CAC9D,IAAI;EACF,OAAO,MAAM,MAAM,KAAK;GAAE,GAAG;GAAS,QAAQ,WAAW;EAAO,CAAC;CACnE,UAAU;EACR,aAAa,OAAO;CACtB;AACF;;;;;AAWA,SAAS,oBAA4C;CACnD,OAAO,EAAE,SAAS,cAAc;AAClC;AAEA,SAAS,iBAAiB,MAAkC;CAC1D,MAAM,UAAU,KAAK;CACrB,IAAI,OAAO,YAAY,YAAY,SAAS,OAAO;CACnD,MAAM,SAAS;CACf,OAAO,UAAU,OAAO,OAAO,OAAO,YAAY,OAAO,KAAK,OAAO,KAAK;AAC5E;;;;;AAMA,SAAgB,qBAAqB,kBAAmC;CACtE,MAAM,eAAgB,oBAAoB,CAAC;CAC3C,MAAM,UAAU,OAAgB,UAAwC;EAEtE,MAAM,SAASA,QAAS;EACxB,OAAO,OAAO,WAAW,YAAY,OAAO,KAAK,IAAI,OAAO,KAAK,IAAI;CACvE;CAEA,MAAM,SAAS,OAAO,aAAa,UAAU,IAAI;CACjD,IAAI,QAAQ,OAAO;CAGnB,IAAI,EADe,MAAM,QAAQ,aAAa,eAAe,KAAK,aAAa,gBAAgB,SAAS,IACvF;EACf,MAAM,YAAY,OAAO,aAAa,aAAa,IAAI;EACvD,IAAI,WAAW,OAAO;CACxB;CAEA,IAAI,MAAM,QAAQ,aAAa,YAAY,GACzC,KAAK,MAAM,aAAa,aAAa,cAAc;EACjD,MAAM,OAAO;EACb,IAAI,KAAK,WAAW;GAClB,MAAM,YAAY,OAAO,MAAM,IAAI;GACnC,IAAI,WAAW,OAAO;EACxB;CACF;CAGF,MAAM,YAAY,OAAO,aAAa,aAAa,IAAI;CACvD,IAAI,WAAW,OAAO;CACtB,OAAO;AACT;;AAGA,eAAsB,eAAe,aAAqE;CACxG,MAAM,SAAmB,CAAC;CAC1B,MAAM,cAAsC;EAC1C,eAAe,UAAU;EACzB,gBAAgB;EAChB,cAAc,yBAAyB;EACvC,mBAAmB,8BAA8B;CACnD;CAEA,KAAK,MAAM,gBAAgB,wBACzB,IAAI;EAEF,MAAM,WAAW,MAAM,iBAAiB,GADzB,aAAa,6BACiB;GAC3C,QAAQ;GACR,SAAS;GACT,MAAM,KAAK,UAAU,EAAE,UAAU,kBAAkB,EAAE,CAAC;EACxD,CAAC;EAED,IAAI,CAAC,SAAS,IAAI;GAChB,MAAM,UAAU,MAAM,SAAS,KAAK,CAAC,CAAC,YAAY,EAAE;GACpD,OAAO,KAAK,kBAAkB,SAAS,OAAO,MAAM,eAAe,UAAU,KAAK,YAAY,IAAI;GAClG;EACF;EAEA,MAAM,OAAQ,MAAM,SAAS,KAAK;EAClC,MAAM,YAAY,iBAAiB,IAAI;EACvC,IAAI,WACF,OAAO;GAAE;GAAW,QAAQ,qBAAqB,KAAK,gBAAgB;EAAE;EAE1E,OAAO,KAAK,wCAAwC,cAAc;CACpE,SAAS,OAAO;EACd,OAAO,KACL,2BAA2B,aAAa,IAAI,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,GACnG;CACF;CAGF,OAAO;EAAE,WAAW;EAAI,QAAQ;CAAc;AAChD;;;;;;AAOA,eAAsB,0BACpB,aACA,QACA,UAA2D,CAAC,GACZ;CAIhD,MAAM,cAAc,QAAQ,eAAe;CAC3C,MAAM,eAAe,QAAQ,gBAAgB,MAAO,KAAK,MAAM,KAAK,OAAO,IAAI,GAAI;CACnF,MAAM,UAAkC;EACtC,eAAe,UAAU;EACzB,gBAAgB;EAChB,cAAc,yBAAyB;EACvC,mBAAmB,8BAA8B;CACnD;CACA,MAAM,WAAW,kBAAkB;CAEnC,KAAK,IAAI,UAAU,GAAG,UAAU,aAAa,WAAW;EACtD,IAAI;GACF,KAAK,MAAM,gBAAgB,wBAAwB;IACjD,MAAM,WAAW,MAAM,iBAAiB,GAAG,aAAa,0BAA0B;KAChF,QAAQ;KACR;KACA,MAAM,KAAK,UAAU;MAAE,SAAS;MAAQ;KAAS,CAAC;IACpD,CAAC;IACD,IAAI,CAAC,SAAS,IAAI;IAElB,KAAI,MADkB,SAAS,KAAK,EAAA,CACzB,SAAS,MAAM;KACxB,MAAM,aAAa,MAAM,eAAe,WAAW;KACnD,IAAI,WAAW,WAAW,OAAO;IACnC;GACF;EACF,QAAQ,CAER;EACA,MAAM,IAAI,SAAS,YAAY,WAAW,SAAS,YAAY,CAAC;CAClE;CAEA,OAAO;EAAE,WAAW;EAAI;CAAO;AACjC;;AAGA,eAAsB,iBACpB,aACA,UAA2D,CAAC,GACZ;CAChD,MAAM,aAAa,MAAM,eAAe,WAAW;CACnD,IAAI,WAAW,WAAW,OAAO;CACjC,OAAO,0BAA0B,aAAa,WAAW,QAAQ,OAAO;AAC1E;;;;;;;;AAcA,eAAsB,oBACpB,MACA,OACA,aACA,kBAC8B;CAC9B,IAAI;EACF,MAAM,EAAE,UAAU,cAAc,YAAwB,KAAK;EAC7D,IAAI,CAAC,UACH,OAAO;GAAE,MAAM;GAAU,OAAO;EAAiC;EAKnE,IAAI,oBAAoB,aAAa,kBACnC,OAAO;GAAE,MAAM;GAAU,OAAO;EAAgD;EAGlF,MAAM,YAAY,KAAK,IAAI;EAC3B,MAAM,gBAAgB,MAAM,MAAM,iBAAiB;GACjD,QAAQ;GACR,SAAS;IACP,gBAAgB;IAChB,QAAQ;IACR,cAAc,yBAAyB;GACzC;GACA,MAAM,IAAI,gBAAgB;IACxB,WAAW;IACX,eAAe;IACf;IACA,YAAY;IACZ,cAAc;IACd,eAAe;GACjB,CAAC;EACH,CAAC;EAED,IAAI,CAAC,cAAc,IAEjB,OAAO;GAAE,MAAM;GAAU,OAAO,MADR,cAAc,KAAK;EACD;EAG5C,MAAM,eAAgB,MAAM,cAAc,KAAK;EAE/C,MAAM,mBAAmB,MAAM,MAAM,GAAG,mBAAmB,YAAY,EACrE,SAAS;GACP,eAAe,UAAU,aAAa;GACtC,cAAc,yBAAyB;EACzC,EACF,CAAC;EACD,MAAM,WAAqB,iBAAiB,KACtC,MAAM,iBAAiB,KAAK,IAC9B,CAAC;EAEL,MAAM,eAAe,aAAa;EAClC,IAAI,CAAC,cACH,OAAO;GAAE,MAAM;GAAU,OAAO;EAAoC;EAGtE,MAAM,qBAAqB,cAAc,MAAM,iBAAiB,aAAa,YAAY,EAAA,CAAG;EAE5F,OAAO;GACL,MAAM;GACN,SAAS,GAAG,aAAa,GAAG,sBAAsB;GAClD,QAAQ,aAAa;GACrB,SAAS,qBAAqB,WAAW,aAAa,UAAU;GAChE,OAAO,SAAS;GAChB,WAAW,sBAAsB;EACnC;CACF,SAAS,OAAO;EAKd,OAAO;GAHL,MAAM;GACN,OAAO,iBAAiB,QAAQ,MAAM,UAAU;EAErC;CACf;AACF"}