dsh-antigravity-auth 0.1.0

package/CHANGELOG.md

@@ -0,0 +1,28 @@
+# Changelog
+
+## [Unreleased]
+
+- Removed callback-URL submission from browser RPC, added closed value-free RPC error validation, and made every settings action abort with component lifetime.
+- Replaced private-endpoint `fetch` dispatch with a plugin-owned TLS/raw HTTP/1.1 serializer that fixes ordered audited `agy` framing and mandatory truthful DSH secondary attribution.
+- Added credential-lineage-fenced, value-free Gate 0/L/S/I/V and independent atomically persisted Gemini/Claude/GPT-OSS outcomes; Auth/LLM is derived directly from all three rather than a separately writable aggregate pass.
+- Added an explicitly acknowledged, one-gate-at-a-time packed `live:gates` harness that remains outside default checks, does not construct credential/network services before opt-in, and persists Gate I outputs through an owner-only content-addressed AttachmentStore seam after bounded PNG chunk/CRC/zlib/pixel admission.
+- Exposed pinned snapshot, live-available, unavailable, refresh-failed, and protocol-drift model states while keeping exact pinned-model requests independent from advisory catalog absence; fixed call-id-correlated tool-result names and fragmented function-call assembly.
+- Changed multi-image generation to independent no-retry requests with partial-success warnings, validates declared MIME against admitted bytes, and rechecks workspace target identity/version around bounded image/video reads.
+- Made each Gate 0/L or selected family run one catalog-free request, distinguished generic forbidden failures from attribution rejection, made Gate V require an exact deterministic pixel-only fixture answer, and fenced replacement logins from prior-account gate evidence.
+- Added the public Antigravity `LlmAdapter` with pinned/live-intersected model discovery, bounded SSE/JSON translation, pre-delta auth replay, and bounded provider replay metadata.
+- Added grounded Web Search, AttachmentStore-backed image generation/edit/list tools, workspace media admission, quota/usage normalization, and the gated MP4 video understanding POC.
+- Added Host settings namespaces, client SettingsScope toggles, quota-safe usage UI, and shared single-account service lifecycle wiring.
+- Added offline transport, replay, quota, media, search, and adapter fixtures; package exports now include the bounded Host capability modules.
+- Added fixed, read-only `loadCodeAssist` project discovery through the centralized Wire Identity policy; only normalized project metadata can gate and replace a single-account credential.
+- Added distinct safe project discovery states for unavailable, authentication, forbidden, rate-limited, offline, malformed, and protocol-drift outcomes; no onboarding or fallback project is attempted.
+- Raised the minimum and tested DSH package baseline to `0.1.1-rc.1`, regenerated a coherent rc.1 lockfile, and added peer-graph verification before the full offline check.
+- Confirmed that the rc.1 credentials/authorization, session-projection, client boot, and sandbox changes require no current Antigravity behavior migration; plugin-owned auth and Wire Identity modules remain unchanged.
+
+## [0.1.0]
+
+- Added the offline-verifiable Host-only single-account PKCE S256 login path with a strict loopback callback listener.
+- Added one-shot state expiry/cancellation, fixed-port conflict handling, remote callback URL submission, and safe value-free login status RPC results.
+- Added injected project validation and versioned owner-only atomic persistence; access tokens remain Host memory and failed validation preserves the existing account.
+- Added pending, success, cancelled, expired, port-conflict, and safe failure settings states in English and Chinese.
+- Added independently addressable, gate-visible Auth/LLM, Search, Image, and Video rows.
+- Retained the plugin-owned Wire Identity seam and its fixed provider-attribution policy.

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 UE-DND
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,168 @@
+# dsh-antigravity-auth
+
+[![npm version](https://img.shields.io/npm/v/dsh-antigravity-auth.svg)](https://www.npmjs.com/package/dsh-antigravity-auth)
+[![awesome · DSH plugin](https://awesome-dsh-plugin.com/badge.svg)](https://awesome-dsh-plugin.com)
+
+English | [中文](README.zh.md)
+
+Current release: **v0.1.0**
+
+A self-contained [DeepSeek Harness](https://github.com/deepseek-ai/deepseek-harness)
+**Antigravity Capability Bundle**. It integrates Antigravity's private OAuth session
+and Wire Identity for:
+
+- the `google-antigravity` LLM route (Gemini Flash, Gemini Pro, Claude Opus, Claude Sonnet, GPT-OSS);
+- a Global Antigravity Search Provider behind DSH's stock `web_search` tool;
+- durable image generation and editing through `generate_image`, plus the model-facing `list_images` catalog;
+- multimodal workspace MP4 video understanding through `analyze_video`;
+- resilient five-hour and weekly usage/quota visualization dashboard;
+- one native **Antigravity Auth** Settings section with Login, Search, Image Creation, and Video cards.
+
+> **⚠️ Unofficial channel — personal development only.** The private,
+> account-gated Antigravity backend surface is unsupported, revocable, and
+> may be rate-limited or changed without notice. Do not rely on it for
+> production workloads.
+
+## Features
+
+### Shared Antigravity Login State
+
+- Uses one Host-only auth coordinator for LLM, Search, Image, Video, and Quota operations.
+- Direct OAuth 2.0 with PKCE S256: Host memory generates verifier and state handle; the browser receives only the authorization URL.
+- The callback listener binds only `127.0.0.1:51121`, accepting only the registered one-shot code/state pair.
+- Resolves credentials through versioned owner-only storage (`0600`), short-lived in-memory cache, and proactive refresh before expiry.
+- Coalesces concurrent refreshes in-process and enforces account/lineage consistency before persisting refreshed tokens.
+- Shows connection state plus real-time visual progress bars for 5-hour and weekly quotas across Gemini and Claude/GPT model families.
+- Sends no token value over the loopback-only `/antigravity-auth` Connection RPC channel.
+
+### LLM Routing & Models
+
+- Registers the `google-antigravity` provider through DSH's public `LlmAdapter` seam.
+- Intersects the pinned community model catalog with live account discovery.
+- Supports streaming with pre-delta authentication replay and preserve-by-id function call correlation across fragmented provider names.
+
+### Web Search
+
+The `antigravity-search` Host row registers provider ID `antigravity` through
+`@deepseek-ai/dsh-web`. Grounded web search requests are formatted and dispatched through
+the audited Wire Identity dispatcher. Results include the generated output and deduplicated,
+validated HTTP(S) source references.
+
+### Image Creation & Editing
+
+`generate_image` presents a unified operation dispatching to Antigravity image endpoints:
+
+- Supports prompts, up to five explicit references (session handle `image:<id>` or workspace path), and size/aspect controls.
+- Generated image bytes are validated, decoded, signature-checked, and persisted via `AttachmentStore`.
+- `list_images` provides paginated session image catalogs for image-capable models.
+
+### Video Understanding
+
+Multimodal `analyze_video` tool accepts workspace MP4 videos, performing bounded frame sampling and textual comprehension.
+
+### Usage & Quota Visual Dashboard
+
+- Renders real-time progress bars for 5-Hour and Weekly limit windows.
+- Clear status tiers: Normal (>60%, emerald green), Warning (30%–60%, amber), and Low (<30%, coral red).
+- Elegant loading shimmer tracks and querying spinner animations.
+
+## Requirements
+
+- DeepSeek Harness `0.1.1-rc.1` or a compatible later `0.1.x` release.
+- Node.js `^22.19.0` or `>=24.0.0`.
+- A Google account with Antigravity access.
+
+## Install from npm (recommended)
+
+The npm package includes prebuilt Host and browser bundles:
+
+```sh
+dsh plugin --profile web add dsh-antigravity-auth
+```
+
+Restart `dsh web`, open Settings, and select **Antigravity Auth**.
+
+## Install from GitHub source
+
+```sh
+dsh plugin --profile web add github:suntianc/dsh-antigravity-auth
+```
+
+Git dependencies are built by the package's `prepare` script. If prompted by pnpm,
+add the printed `allowBuilds` key to `~/.dsh/profiles/web/pnpm-workspace.yaml`,
+then run the command again.
+
+## Install a tarball
+
+```sh
+git clone https://github.com/suntianc/dsh-antigravity-auth.git
+cd dsh-antigravity-auth
+pnpm install
+pnpm pack
+dsh plugin --profile web add ./dsh-antigravity-auth-0.1.0.tgz
+```
+
+## Upgrade
+
+Stop the running `dsh web` process and update the Web profile:
+
+```sh
+dsh plugin --profile web add dsh-antigravity-auth@0.1.0
+dsh plugin --profile web list
+```
+
+Restart `dsh web` and refresh the browser.
+
+## Host configuration
+
+The bundle patch activates independent Host rows in dependency order:
+
+| Row | Export | Purpose |
+|---|---|---|
+| `llm-antigravity-auth` | `dsh-antigravity-auth` | Shared auth coordinator and LLM route |
+| `antigravity-search` | `dsh-antigravity-auth/search` | Global Search Provider |
+| `antigravity-image` | `dsh-antigravity-auth/image` | Image generation & editing tools |
+| `antigravity-video` | `dsh-antigravity-auth/video` | Video understanding tools |
+
+## Wire Identity
+
+The Wire Identity module keeps the audited Antigravity headers and adds the truthful DSH identity
+returned by DSH's public `attributionHeaders()` formatter as the secondary carrier:
+
+```text
+X-DeepSeek-Harness-Attribution: deepseek-harness/<version> (+repository-url)
+```
+
+Requests are code-owned: only fixed HTTPS Antigravity origins and enumerated `v1internal:` operation paths are accepted.
+
+## Security and limitations
+
+- Token values never enter the browser, settings, logs, session events, or tool metadata. Only Host-side requests receive authorization headers.
+- Single-account only: no account arrays, switching, rotation, quota pools, or identity fallback.
+- Local logout clears local storage and in-memory caches immediately.
+- The status/login RPC channel is restricted to loopback authorities.
+- Raw media base64 never enters session text or browser RPC.
+
+## Development
+
+```sh
+pnpm install
+pnpm peers check
+pnpm test
+pnpm run check
+```
+
+`pnpm run build` emits:
+
+- `lib/index.js` — Auth / LLM Host plugin;
+- `lib/search.js` — Search Host plugin;
+- `lib/image.js` — Image Host plugin;
+- `lib/video.js` — Video Host plugin;
+- `lib/quota.js` — Quota Host plugin;
+- `lib/wire-identity.js` — Wire Identity Host module;
+- `lib/client.cjs` — Loader-compatible browser settings plugin;
+- `lib/types/**` — TypeScript declarations.
+
+## Friendship links
+
+- [LINUX DO (L 站)](https://linux.do/)

package/README.zh.md

@@ -0,0 +1,159 @@
+# dsh-antigravity-auth
+
+[![npm version](https://img.shields.io/npm/v/dsh-antigravity-auth.svg)](https://www.npmjs.com/package/dsh-antigravity-auth)
+[![awesome · DSH plugin](https://awesome-dsh-plugin.com/badge.svg)](https://awesome-dsh-plugin.com)
+
+[English](README.md) | 中文
+
+当前版本：**v0.1.0**
+
+这是一个自包含的 [DeepSeek Harness](https://github.com/deepseek-ai/deepseek-harness)
+**Antigravity 能力包**。它集成了 Antigravity 的私有 OAuth 登录态与 Wire Identity 线路身份，提供：
+
+- `google-antigravity` LLM 路由（Gemini Flash、Gemini Pro、Claude Opus、Claude Sonnet、GPT-OSS）；
+- 接入 DSH 内置 `web_search` 工具的全局 Antigravity 搜索提供方；
+- 通过 `generate_image` 实现持久图片生成与编辑，并提供供模型使用的 `list_images` 目录；
+- 支持本地工作区 MP4 文件的多模态 `analyze_video` 视频理解；
+- 具备优雅动效的 5 小时与每周用量/配额可视化仪表盘；
+- 一个原生 **Antigravity Auth** 设置分区，内含「登录」「网页搜索」「图片创作」「视频理解」四张卡片。
+
+> **⚠️ 非官方通道——仅限个人开发。** 私有、受账户权限控制的 Antigravity
+> 后端服务未获官方支持、可随时撤销，也可能在没有通知的情况下被限流或变更。请勿依赖它承载生产任务。
+
+## 功能特性
+
+### 共享 Antigravity 登录态
+
+- LLM、搜索、图片、视频与配额操作共用一个仅运行于 Host 的认证协调器。
+- 直连 OAuth 2.0 PKCE S256 流程：Host 内存生成 verifier 与 state 句柄，浏览器仅接收授权链接，密钥绝不跨越 Host 边界。
+- 回调监听器仅绑定 `127.0.0.1:51121`，只接受一次性的已注册 code/state 凭据对。
+- 通过属主权限文件存储（`0600`）、短时内存缓存解析凭证，并在到期前主动刷新。
+- 进程内合并并发刷新请求；仅在账号与 lineage 未变化时原子提交新 token。
+- 仪表盘实时显示连接状态以及 Gemini 与 Claude/GPT 模型家族的 5 小时和每周额度进度条。
+- 插件自有、仅允许 loopback 的 `/antigravity-auth` Connection RPC 绝不向前端泄露任何 token 敏感值。
+
+### LLM 路由与模型发现
+
+- 通过 DSH 公开的 `LlmAdapter` 接口注册 `google-antigravity` 提供方。
+- 将已审计的固定社区模型快照与真实登录账号的可用模型取交集。
+- 流式传输支持首个数据块前的一次认证重放，并支持跨分片提供方函数名的 call-id 稳定关联。
+
+### 网页搜索
+
+`antigravity-search` Host 行通过 `@deepseek-ai/dsh-web` 注册 ID 为 `antigravity` 的全局搜索提供方。基于审计过的 Wire Identity 线路分发请求，返回真实 grounding 来源与去重检验过的 HTTP(S) 链接。
+
+### 图片创作与编辑
+
+`generate_image` 为模型提供统一操作接口，分发至 Antigravity 图片端点：
+
+- 支持提示词、最多 5 个显式参考图（会话句柄 `image:<id>` 或工作区路径）及尺寸/比例选项。
+- 返回的图片字节经过格式校验、解码、Magic bytes 签名验证并通过 `AttachmentStore` 持久保存。
+- `list_images` 提供会话持久图片分页目录，供多模态模型查看。
+
+### 视频理解
+
+多模态 `analyze_video` 工具支持本地工作区 MP4 视频的帧采样与内容文本理解。
+
+### 用量与配额可视化仪表盘
+
+- 直观展示 5 小时窗口与每周窗口的剩余配额比例与刷新倒计时。
+- 状态三档配色：充足（>60%，翡翠绿）、预警（30%–60%，警示橙）、紧急（<30%，警示红）。
+- 配备 Shimmer 微光流动轨道、微型 Spinner 与平滑展开动画。
+
+## 环境要求
+
+- DeepSeek Harness `0.1.1-rc.1` 或兼容的后续 `0.1.x` 版本。
+- Node.js `^22.19.0` 或 `>=24.0.0`。
+- 具有 Antigravity 权限的 Google 账号。
+
+## 从 npm 安装（推荐）
+
+npm 包包含预构建的 Host 与浏览器 bundle，无需安装期构建权限：
+
+```sh
+dsh plugin --profile web add dsh-antigravity-auth
+```
+
+重启 `dsh web`，打开设置并选择 **Antigravity Auth**。
+
+## 从 GitHub 源码安装
+
+```sh
+dsh plugin --profile web add github:suntianc/dsh-antigravity-auth
+```
+
+Git 依赖会通过包内 `prepare` 脚本从源码构建。如遇 pnpm 提示，将输出的 `allowBuilds` 键添加到 `~/.dsh/profiles/web/pnpm-workspace.yaml`，再重新执行安装。
+
+## 从 tarball 安装
+
+```sh
+git clone https://github.com/suntianc/dsh-antigravity-auth.git
+cd dsh-antigravity-auth
+pnpm install
+pnpm pack
+dsh plugin --profile web add ./dsh-antigravity-auth-0.1.0.tgz
+```
+
+## 升级
+
+先停止正在运行的 `dsh web`，再将 Web Profile 更新到当前版本：
+
+```sh
+dsh plugin --profile web add dsh-antigravity-auth@0.1.0
+dsh plugin --profile web list
+```
+
+重启 `dsh web` 并刷新浏览器。
+
+## Host 配置
+
+能力包 patch 按依赖顺序启用独立的 Host 行：
+
+| 行 | Export | 作用 |
+|---|---|---|
+| `llm-antigravity-auth` | `dsh-antigravity-auth` | 共享认证协调器与 LLM 路由 |
+| `antigravity-search` | `dsh-antigravity-auth/search` | 全局搜索提供方 |
+| `antigravity-image` | `dsh-antigravity-auth/image` | 图片生成与编辑工具 |
+| `antigravity-video` | `dsh-antigravity-auth/video` | 视频理解工具 |
+
+## Wire Identity（线路身份）
+
+Wire Identity 模块保留 Antigravity 专有 header，并调用 DSH 公开的 `attributionHeaders()` formatter，把真实 DSH 身份放入二级 carrier：
+
+```text
+X-DeepSeek-Harness-Attribution: deepseek-harness/<version> (+repository-url)
+```
+
+请求端点由代码固定：仅接受受信任的 HTTPS Antigravity origin 与枚举的 `v1internal:` 操作路径。
+
+## 安全与限制
+
+- token 值绝不进入前端、设置、日志、会话事件或工具 metadata，仅在 Host 侧发起私有请求时附带认证 header。
+- 严格单账号模式：不提供账号池、轮换、身份回退或账号切换。
+- 本地登出立即清除 Host 内存与本地存储。
+- RPC 状态与登录通道仅限本机 loopback 访问。
+- 原始多媒体 base64 绝不注入会话正文或前端 RPC。
+
+## 本地开发
+
+```sh
+pnpm install
+pnpm peers check
+pnpm test
+pnpm run check
+```
+
+`pnpm run build` 生成：
+
+- `lib/index.js`：认证 / LLM Host 插件；
+- `lib/search.js`：搜索 Host 插件；
+- `lib/image.js`：图片 Host 插件；
+- `lib/video.js`：视频 Host 插件；
+- `lib/quota.js`：配额 Host 插件；
+- `lib/wire-identity.js`：Wire Identity 线路身份模块；
+- `lib/client.cjs`：浏览器设置端插件；
+- `lib/types/**`：TypeScript 类型声明。
+
+## 友情链接
+
+- [LINUX DO (L 站)](https://linux.do/)

package/cordis.patch.yml

@@ -0,0 +1,12 @@
+# The bootstrap shell keeps the capability rows independently addressable.
+# OAuth and private I/O stay on Host; each row owns its public capability seam and
+# rechecks the single-account/project/live-evidence/settings gates before doing work.
+- insert:
+    - id: antigravity-auth
+      name: 'dsh-antigravity-auth'
+    - id: antigravity-search
+      name: 'dsh-antigravity-auth/search'
+    - id: antigravity-image
+      name: 'dsh-antigravity-auth/image'
+    - id: antigravity-video
+      name: 'dsh-antigravity-auth/video'