dsh-antigravity-auth 0.1.0

package/lib/types/media-admission.d.ts

@@ -0,0 +1,54 @@
+/** Shared Host-only media admission for image editing and the video POC. */
+import type { Agent } from '@deepseek-ai/dsh-agent';
+import type { AttachmentStore, ImageAttachmentRef, ImageMediaType, SaveImageAttachment, StoredImageAttachment } from '@deepseek-ai/dsh-attachment';
+import type { FileSystem } from '@deepseek-ai/dsh-fs';
+import { HarnessError } from '@deepseek-ai/dsh-llm';
+export declare const DEFAULT_VIDEO_BYTES: number;
+export declare const DEFAULT_INLINE_IMAGE_BYTES: number;
+export declare const IMAGE_HANDLE_PATTERN: RegExp;
+export type MediaKind = 'image' | 'video';
+export interface MediaAdmissionErrorOptions {
+    readonly cause?: unknown;
+}
+export declare class MediaAdmissionError extends HarnessError {
+    constructor(message: string, code: string, options?: MediaAdmissionErrorOptions);
+}
+export interface MediaAdmissionOptions {
+    readonly attachments: Pick<AttachmentStore, 'imageLimits' | 'validateImage' | 'saveImage' | 'readImage'>;
+    readonly fs: Pick<FileSystem, 'resolve' | 'contains' | 'readBytes' | 'lstat' | 'stat'>;
+    readonly maxVideoBytes?: number;
+}
+export interface AdmittedImage {
+    readonly kind: 'image';
+    readonly input: SaveImageAttachment;
+    readonly stored?: StoredImageAttachment;
+    readonly source: 'session' | 'workspace' | 'inline';
+}
+export interface AdmittedVideo {
+    readonly kind: 'video';
+    readonly data: Uint8Array;
+    readonly mediaType: 'video/mp4';
+}
+export declare function imageHandle(ref: ImageAttachmentRef): `image:${string}`;
+/** Admit bounded, canonical image bytes and let AttachmentStore perform full decode validation. */
+export declare function admitImageBytes(options: Pick<MediaAdmissionOptions, 'attachments'>, data: Uint8Array, source: AdmittedImage['source'], name?: string, signal?: AbortSignal): Promise<AdmittedImage>;
+export declare function admitBase64Image(options: Pick<MediaAdmissionOptions, 'attachments'>, encoded: string, source?: AdmittedImage['source'], name?: string, signal?: AbortSignal): Promise<AdmittedImage>;
+/** Resolve one explicit session handle from durable session history; handles are not bearer capabilities. */
+export declare function admitSessionImage(options: Pick<MediaAdmissionOptions, 'attachments'>, agent: Agent, handle: string, signal?: AbortSignal): Promise<AdmittedImage>;
+/** Resolve an image only after containment and regular-file checks, then admit its bytes. */
+export declare function admitWorkspaceImage(options: MediaAdmissionOptions, workspace: string, path: string, signal?: AbortSignal): Promise<AdmittedImage>;
+/** Admit an MP4 container without claiming native video attachment support. */
+export declare function admitWorkspaceVideo(options: Pick<MediaAdmissionOptions, 'fs'> & {
+    readonly maxVideoBytes?: number;
+}, workspace: string, path: string, signal?: AbortSignal): Promise<AdmittedVideo>;
+export declare function detectImageMediaType(data: Uint8Array): ImageMediaType | undefined;
+export declare function isMp4(data: Uint8Array): boolean;
+export interface SessionImageCatalogEntry {
+    readonly handle: `image:${string}`;
+    readonly attachment: ImageAttachmentRef;
+    readonly origin: 'user' | 'reference' | 'generated';
+    readonly sequence: number;
+}
+/** Traverse durable session history once for both authorization and image listing. */
+export declare function sessionImageCatalog(agent: Agent): readonly SessionImageCatalogEntry[];
+//# sourceMappingURL=media-admission.d.ts.map

package/lib/types/media-admission.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"media-admission.d.ts","sourceRoot":"","sources":["../../src/media-admission.ts"],"names":[],"mappings":"AAAA,4EAA4E;AAG5E,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,wBAAwB,CAAA;AACnD,OAAO,KAAK,EACV,eAAe,EACf,kBAAkB,EAClB,cAAc,EACd,mBAAmB,EACnB,qBAAqB,EACtB,MAAM,6BAA6B,CAAA;AACpC,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAA;AACrD,OAAO,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAA;AAGnD,eAAO,MAAM,mBAAmB,QAAmB,CAAA;AACnD,eAAO,MAAM,0BAA0B,QAAmB,CAAA;AAC1D,eAAO,MAAM,oBAAoB,QAA+B,CAAA;AAEhE,MAAM,MAAM,SAAS,GAAG,OAAO,GAAG,OAAO,CAAA;AAEzC,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,CAAA;CACzB;AAED,qBAAa,mBAAoB,SAAQ,YAAY;gBACvC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,GAAE,0BAA+B;CAGpF;AAED,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,WAAW,EAAE,IAAI,CAAC,eAAe,EAAE,aAAa,GAAG,eAAe,GAAG,WAAW,GAAG,WAAW,CAAC,CAAA;IACxG,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAC,UAAU,EAAE,SAAS,GAAG,UAAU,GAAG,WAAW,GAAG,OAAO,GAAG,MAAM,CAAC,CAAA;IACtF,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAA;CAChC;AAED,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAA;IACtB,QAAQ,CAAC,KAAK,EAAE,mBAAmB,CAAA;IACnC,QAAQ,CAAC,MAAM,CAAC,EAAE,qBAAqB,CAAA;IACvC,QAAQ,CAAC,MAAM,EAAE,SAAS,GAAG,WAAW,GAAG,QAAQ,CAAA;CACpD;AAED,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAA;IACtB,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAA;IACzB,QAAQ,CAAC,SAAS,EAAE,WAAW,CAAA;CAChC;AAED,wBAAgB,WAAW,CAAC,GAAG,EAAE,kBAAkB,GAAG,SAAS,MAAM,EAAE,CAEtE;AAED,mGAAmG;AACnG,wBAAsB,eAAe,CACnC,OAAO,EAAE,IAAI,CAAC,qBAAqB,EAAE,aAAa,CAAC,EACnD,IAAI,EAAE,UAAU,EAChB,MAAM,EAAE,aAAa,CAAC,QAAQ,CAAC,EAC/B,IAAI,SAAsB,EAC1B,MAAM,CAAC,EAAE,WAAW,GACnB,OAAO,CAAC,aAAa,CAAC,CAqBxB;AAED,wBAAsB,gBAAgB,CACpC,OAAO,EAAE,IAAI,CAAC,qBAAqB,EAAE,aAAa,CAAC,EACnD,OAAO,EAAE,MAAM,EACf,MAAM,GAAE,aAAa,CAAC,QAAQ,CAAY,EAC1C,IAAI,CAAC,EAAE,MAAM,EACb,MAAM,CAAC,EAAE,WAAW,GACnB,OAAO,CAAC,aAAa,CAAC,CAUxB;AAED,6GAA6G;AAC7G,wBAAsB,iBAAiB,CACrC,OAAO,EAAE,IAAI,CAAC,qBAAqB,EAAE,aAAa,CAAC,EACnD,KAAK,EAAE,KAAK,EACZ,MAAM,EAAE,MAAM,EACd,MAAM,CAAC,EAAE,WAAW,GACnB,OAAO,CAAC,aAAa,CAAC,CAYxB;AAED,6FAA6F;AAC7F,wBAAsB,mBAAmB,CACvC,OAAO,EAAE,qBAAqB,EAC9B,SAAS,EAAE,MAAM,EACjB,IAAI,EAAE,MAAM,EACZ,MAAM,CAAC,EAAE,WAAW,GACnB,OAAO,CAAC,aAAa,CAAC,CAcxB;AAED,+EAA+E;AAC/E,wBAAsB,mBAAmB,CACvC,OAAO,EAAE,IAAI,CAAC,qBAAqB,EAAE,IAAI,CAAC,GAAG;IAAE,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAA;CAAE,EAChF,SAAS,EAAE,MAAM,EACjB,IAAI,EAAE,MAAM,EACZ,MAAM,CAAC,EAAE,WAAW,GACnB,OAAO,CAAC,aAAa,CAAC,CAWxB;AAwCD,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,UAAU,GAAG,cAAc,GAAG,SAAS,CAOjF;AAED,wBAAgB,KAAK,CAAC,IAAI,EAAE,UAAU,GAAG,OAAO,CAE/C;AAED,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,CAAA;IAClC,QAAQ,CAAC,UAAU,EAAE,kBAAkB,CAAA;IACvC,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,WAAW,GAAG,WAAW,CAAA;IACnD,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;CAC1B;AAED,sFAAsF;AACtF,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,KAAK,GAAG,SAAS,wBAAwB,EAAE,CA0BrF"}

package/lib/types/model-catalog.d.ts

@@ -0,0 +1,19 @@
+/** Browser-safe advisory model-catalog state shared by Host RPC and settings. */
+export declare const ANTIGRAVITY_MODEL_CATALOG_STATES: readonly ["snapshot", "live-available", "refresh-failed", "protocol-drift"];
+export type AntigravityModelCatalogState = (typeof ANTIGRAVITY_MODEL_CATALOG_STATES)[number];
+export type AntigravityModelAvailability = 'snapshot' | 'live-available' | 'unavailable';
+export interface AntigravityModelCatalogEntry {
+    readonly id: string;
+    readonly name: string;
+    readonly state: AntigravityModelAvailability;
+}
+export interface AntigravityModelCatalogView {
+    readonly state: AntigravityModelCatalogState;
+    readonly models: readonly AntigravityModelCatalogEntry[];
+    readonly checkedAt?: string;
+}
+export interface AntigravityModelCatalogService {
+    catalogSnapshot(): AntigravityModelCatalogView;
+    modelCatalog(signal?: AbortSignal, forceRefresh?: boolean): Promise<AntigravityModelCatalogView>;
+}
+//# sourceMappingURL=model-catalog.d.ts.map

package/lib/types/model-catalog.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"model-catalog.d.ts","sourceRoot":"","sources":["../../src/model-catalog.ts"],"names":[],"mappings":"AAAA,iFAAiF;AAEjF,eAAO,MAAM,gCAAgC,6EAKnC,CAAA;AAEV,MAAM,MAAM,4BAA4B,GAAG,CAAC,OAAO,gCAAgC,CAAC,CAAC,MAAM,CAAC,CAAA;AAC5F,MAAM,MAAM,4BAA4B,GAAG,UAAU,GAAG,gBAAgB,GAAG,aAAa,CAAA;AAExF,MAAM,WAAW,4BAA4B;IAC3C,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;IACnB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,KAAK,EAAE,4BAA4B,CAAA;CAC7C;AAED,MAAM,WAAW,2BAA2B;IAC1C,QAAQ,CAAC,KAAK,EAAE,4BAA4B,CAAA;IAC5C,QAAQ,CAAC,MAAM,EAAE,SAAS,4BAA4B,EAAE,CAAA;IACxD,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAA;CAC5B;AAED,MAAM,WAAW,8BAA8B;IAC7C,eAAe,IAAI,2BAA2B,CAAA;IAC9C,YAAY,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,YAAY,CAAC,EAAE,OAAO,GAAG,OAAO,CAAC,2BAA2B,CAAC,CAAA;CACjG"}

package/lib/types/oauth-flow.d.ts

@@ -0,0 +1,87 @@
+/** Host-only PKCE, loopback callback, and token-exchange coordinator. */
+import type { LoginCompletionResult, LoginErrorCode, LoginPhase, LoginStartResult } from './login-types.ts';
+export declare const ANTIGRAVITY_CALLBACK_PORT: 51121;
+export declare const ANTIGRAVITY_CALLBACK_PATH: "/oauth-callback";
+export declare const ANTIGRAVITY_CALLBACK_HOSTS: readonly string[];
+export declare const OAUTH_FLOW_TTL_MS: number;
+export type OAuthErrorCode = LoginErrorCode;
+export declare class OAuthFlowError extends Error {
+    readonly code: OAuthErrorCode;
+    constructor(code: OAuthErrorCode, message: string);
+}
+export interface OAuthToken {
+    readonly accessToken: string;
+    readonly refreshToken: string;
+    readonly expiresAt: number;
+    readonly email?: string;
+}
+export interface ProjectValidation {
+    readonly projectId: string;
+    readonly email?: string;
+}
+export interface ExchangeCodeInput {
+    readonly code: string;
+    readonly verifier: string;
+    readonly signal: AbortSignal;
+}
+export type ExchangeCode = (input: ExchangeCodeInput) => Promise<OAuthToken>;
+export type ValidateProject = (accessToken: string, signal: AbortSignal) => Promise<ProjectValidation | undefined>;
+export type CommitCredential = (token: OAuthToken, project: ProjectValidation, signal: AbortSignal) => Promise<void>;
+export interface LoopbackCallbackRequest {
+    readonly method: string;
+    readonly host?: string | undefined;
+    /** A relative callback path/query for the loopback listener, or a full URL for tests. */
+    readonly url: string;
+}
+export interface LoopbackCallbackResponse {
+    readonly status: number;
+    readonly headers: Readonly<Record<string, string>>;
+    readonly body: string;
+}
+export type LoopbackCallbackHandler = (request: LoopbackCallbackRequest) => Promise<LoopbackCallbackResponse>;
+export interface LoopbackListener {
+    close(): Promise<void> | void;
+}
+export interface LoopbackListenerFactory {
+    listen(handler: LoopbackCallbackHandler): Promise<LoopbackListener>;
+}
+export interface OAuthClock {
+    now(): number;
+    setTimeout(handler: () => void, delayMs: number): ReturnType<typeof setTimeout>;
+    clearTimeout(handle: ReturnType<typeof setTimeout>): void;
+}
+export interface OAuthFlowOptions {
+    readonly randomBytes?: (size: number) => Uint8Array;
+    readonly clock?: OAuthClock;
+    readonly ttlMs?: number;
+    readonly listenerFactory?: LoopbackListenerFactory;
+    readonly exchangeCode?: ExchangeCode;
+    readonly validateProject?: ValidateProject;
+    readonly commit?: CommitCredential;
+    readonly fetchImpl?: typeof fetch;
+}
+export interface OAuthFlowStatus {
+    readonly phase: LoginPhase;
+    readonly authorizationUrl?: string;
+    readonly expiresAt?: string;
+    readonly errorCode?: OAuthErrorCode;
+}
+export type OAuthFlowCompletionResult = LoginCompletionResult;
+export interface OAuthFlow {
+    /** Current one-shot flow generation used to fence late commits. */
+    generation(): number;
+    start(): Promise<LoginStartResult>;
+    status(): OAuthFlowStatus;
+    completeCallbackUrl(callbackUrl: string): Promise<OAuthFlowCompletionResult>;
+    cancel(): Promise<OAuthFlowStatus>;
+    dispose(): Promise<void>;
+}
+/** Create one process-local, one-shot OAuth flow. */
+export declare function createOAuthFlow(options?: OAuthFlowOptions): OAuthFlow;
+/** Create the production loopback listener; it never binds a non-loopback address. */
+export declare function createNodeLoopbackListenerFactory(): LoopbackListenerFactory;
+/** Build the authorization URL without ever putting the verifier in browser state. */
+export declare function buildAuthorizationUrl(state: string, verifier: string): string;
+/** Testable Google token exchange; response bodies are parsed only in Host memory. */
+export declare function createGoogleTokenExchanger(fetchImpl: typeof fetch, clock?: OAuthClock): ExchangeCode;
+//# sourceMappingURL=oauth-flow.d.ts.map

package/lib/types/oauth-flow.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth-flow.d.ts","sourceRoot":"","sources":["../../src/oauth-flow.ts"],"names":[],"mappings":"AAAA,yEAAyE;AAazE,OAAO,KAAK,EAAE,qBAAqB,EAAE,cAAc,EAAE,UAAU,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAA;AAG3G,eAAO,MAAM,yBAAyB,EAAG,KAAc,CAAA;AACvD,eAAO,MAAM,yBAAyB,EAAG,iBAA0B,CAAA;AACnE,eAAO,MAAM,0BAA0B,mBAOrC,CAAA;AACF,eAAO,MAAM,iBAAiB,QAAgB,CAAA;AAa9C,MAAM,MAAM,cAAc,GAAG,cAAc,CAAA;AAE3C,qBAAa,cAAe,SAAQ,KAAK;IACvC,QAAQ,CAAC,IAAI,EAAE,cAAc,CAAA;gBAEjB,IAAI,EAAE,cAAc,EAAE,OAAO,EAAE,MAAM;CAKlD;AAED,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;IAC5B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAA;IAC7B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CACxB;AAED,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CACxB;AAED,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAA;CAC7B;AAED,MAAM,MAAM,YAAY,GAAG,CAAC,KAAK,EAAE,iBAAiB,KAAK,OAAO,CAAC,UAAU,CAAC,CAAA;AAC5E,MAAM,MAAM,eAAe,GAAG,CAAC,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,KAAK,OAAO,CAAC,iBAAiB,GAAG,SAAS,CAAC,CAAA;AAClH,MAAM,MAAM,gBAAgB,GAAG,CAAC,KAAK,EAAE,UAAU,EAAE,OAAO,EAAE,iBAAiB,EAAE,MAAM,EAAE,WAAW,KAAK,OAAO,CAAC,IAAI,CAAC,CAAA;AAEpH,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAClC,yFAAyF;IACzF,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;CACrB;AAED,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAA;IAClD,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;CACtB;AAED,MAAM,MAAM,uBAAuB,GAAG,CAAC,OAAO,EAAE,uBAAuB,KAAK,OAAO,CAAC,wBAAwB,CAAC,CAAA;AAE7G,MAAM,WAAW,gBAAgB;IAC/B,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAA;CAC9B;AAED,MAAM,WAAW,uBAAuB;IACtC,MAAM,CAAC,OAAO,EAAE,uBAAuB,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAA;CACpE;AAED,MAAM,WAAW,UAAU;IACzB,GAAG,IAAI,MAAM,CAAA;IACb,UAAU,CAAC,OAAO,EAAE,MAAM,IAAI,EAAE,OAAO,EAAE,MAAM,GAAG,UAAU,CAAC,OAAO,UAAU,CAAC,CAAA;IAC/E,YAAY,CAAC,MAAM,EAAE,UAAU,CAAC,OAAO,UAAU,CAAC,GAAG,IAAI,CAAA;CAC1D;AAED,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,UAAU,CAAA;IACnD,QAAQ,CAAC,KAAK,CAAC,EAAE,UAAU,CAAA;IAC3B,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,eAAe,CAAC,EAAE,uBAAuB,CAAA;IAClD,QAAQ,CAAC,YAAY,CAAC,EAAE,YAAY,CAAA;IACpC,QAAQ,CAAC,eAAe,CAAC,EAAE,eAAe,CAAA;IAC1C,QAAQ,CAAC,MAAM,CAAC,EAAE,gBAAgB,CAAA;IAClC,QAAQ,CAAC,SAAS,CAAC,EAAE,OAAO,KAAK,CAAA;CAClC;AAED,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAA;IAC1B,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAA;IAClC,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,SAAS,CAAC,EAAE,cAAc,CAAA;CACpC;AAED,MAAM,MAAM,yBAAyB,GAAG,qBAAqB,CAAA;AAE7D,MAAM,WAAW,SAAS;IACxB,mEAAmE;IACnE,UAAU,IAAI,MAAM,CAAA;IACpB,KAAK,IAAI,OAAO,CAAC,gBAAgB,CAAC,CAAA;IAClC,MAAM,IAAI,eAAe,CAAA;IACzB,mBAAmB,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,yBAAyB,CAAC,CAAA;IAC5E,MAAM,IAAI,OAAO,CAAC,eAAe,CAAC,CAAA;IAClC,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC,CAAA;CACzB;AAeD,qDAAqD;AACrD,wBAAgB,eAAe,CAAC,OAAO,GAAE,gBAAqB,GAAG,SAAS,CA0PzE;AAED,sFAAsF;AACtF,wBAAgB,iCAAiC,IAAI,uBAAuB,CA6B3E;AAED,sFAAsF;AACtF,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM,CAa7E;AAED,sFAAsF;AACtF,wBAAgB,0BAA0B,CAAC,SAAS,EAAE,OAAO,KAAK,EAAE,KAAK,GAAE,UAA0B,GAAG,YAAY,CAwCnH"}

package/lib/types/private-failure.d.ts

@@ -0,0 +1,6 @@
+/** One closed classifier shared by every capability's public error vocabulary. */
+import type { CapabilityGateOutcome } from './status.ts';
+export type PrivateFailureKind = 'authentication' | 'forbidden' | 'rate-limited' | 'cancelled' | 'timeout' | 'attribution-rejected' | 'protocol-drift' | 'response-limit' | 'request-limit' | 'upstream' | 'network' | 'failed';
+export declare function classifyPrivateFailure(error: unknown): PrivateFailureKind;
+export declare function capabilityOutcomeForError(error: unknown): Exclude<CapabilityGateOutcome, 'passed'>;
+//# sourceMappingURL=private-failure.d.ts.map

package/lib/types/private-failure.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"private-failure.d.ts","sourceRoot":"","sources":["../../src/private-failure.ts"],"names":[],"mappings":"AAAA,kFAAkF;AAGlF,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAA;AAExD,MAAM,MAAM,kBAAkB,GAC1B,gBAAgB,GAChB,WAAW,GACX,cAAc,GACd,WAAW,GACX,SAAS,GACT,sBAAsB,GACtB,gBAAgB,GAChB,gBAAgB,GAChB,eAAe,GACf,UAAU,GACV,SAAS,GACT,QAAQ,CAAA;AAEZ,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,OAAO,GAAG,kBAAkB,CAiBzE;AAED,wBAAgB,yBAAyB,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAAC,qBAAqB,EAAE,QAAQ,CAAC,CAQlG"}

package/lib/types/private-transport-error.d.ts

@@ -0,0 +1,13 @@
+/** Shared redacted error vocabulary for private HTTP transport boundaries. */
+export type PrivateTransportErrorCode = 'authentication' | 'forbidden' | 'rate-limited' | 'timeout' | 'offline' | 'cancelled' | 'response-too-large' | 'request-too-large' | 'frame-too-large' | 'invalid-response' | 'protocol-drift' | 'upstream' | 'attribution-rejected';
+export declare class PrivateTransportError extends Error {
+    readonly code: PrivateTransportErrorCode;
+    readonly status?: number;
+    /** Whether an upstream could have accepted the request before the failure. */
+    readonly accepted: boolean;
+    constructor(code: PrivateTransportErrorCode, message: string, options?: {
+        readonly status?: number;
+        readonly accepted?: boolean;
+    });
+}
+//# sourceMappingURL=private-transport-error.d.ts.map

package/lib/types/private-transport-error.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"private-transport-error.d.ts","sourceRoot":"","sources":["../../src/private-transport-error.ts"],"names":[],"mappings":"AAAA,8EAA8E;AAE9E,MAAM,MAAM,yBAAyB,GACjC,gBAAgB,GAChB,WAAW,GACX,cAAc,GACd,SAAS,GACT,SAAS,GACT,WAAW,GACX,oBAAoB,GACpB,mBAAmB,GACnB,iBAAiB,GACjB,kBAAkB,GAClB,gBAAgB,GAChB,UAAU,GACV,sBAAsB,CAAA;AAE1B,qBAAa,qBAAsB,SAAQ,KAAK;IAC9C,QAAQ,CAAC,IAAI,EAAE,yBAAyB,CAAA;IACxC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAA;IACxB,8EAA8E;IAC9E,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAA;gBAGxB,IAAI,EAAE,yBAAyB,EAC/B,OAAO,EAAE,MAAM,EACf,OAAO,GAAE;QAAE,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAA;KAAO;CAQ1E"}

package/lib/types/private-transport.d.ts

@@ -0,0 +1,48 @@
+/** Bounded Host-only transport primitives for the private Antigravity endpoints. */
+import { PrivateTransportError } from './private-transport-error.ts';
+export { PrivateTransportError } from './private-transport-error.ts';
+export type { PrivateTransportErrorCode } from './private-transport-error.ts';
+export declare const DEFAULT_PRIVATE_RESPONSE_HEADER_TIMEOUT_MS = 180000;
+export declare const DEFAULT_PRIVATE_IDLE_TIMEOUT_MS = 60000;
+export declare const DEFAULT_PRIVATE_TOTAL_TIMEOUT_MS = 300000;
+export declare const DEFAULT_PRIVATE_RESPONSE_BYTES: number;
+export declare const DEFAULT_PRIVATE_REQUEST_BYTES: number;
+export declare const MAX_PRIVATE_REQUEST_BYTES: number;
+export declare const DEFAULT_PRIVATE_FRAME_BYTES: number;
+export interface PrivateTransportRequest {
+    readonly url: string;
+    readonly accessToken: string;
+    readonly body: string | Uint8Array;
+    readonly signal?: AbortSignal;
+    readonly responseHeaderTimeoutMs?: number;
+}
+export interface PrivateTransportOptions {
+    readonly responseHeaderTimeoutMs?: number;
+    readonly maxRequestBytes?: number;
+}
+export interface PrivateTransport {
+    request(input: PrivateTransportRequest): Promise<Response>;
+}
+/** Build one fixed raw private transport. Callers cannot supply headers, identity, or origins. */
+export declare function createPrivateTransport(options?: PrivateTransportOptions): PrivateTransport;
+/** Convert a bounded response status to a safe provider error without exposing its body. */
+export declare function privateStatusError(status: number): PrivateTransportError | undefined;
+export interface BoundedReadOptions {
+    readonly signal?: AbortSignal;
+    readonly idleTimeoutMs?: number;
+    readonly totalTimeoutMs?: number;
+    readonly maxBytes?: number;
+}
+/** Read a response body with byte, idle, total, and cancellation bounds. */
+export declare function readPrivateBytes(response: Response, options?: BoundedReadOptions): Promise<Uint8Array>;
+export declare function readPrivateText(response: Response, options?: BoundedReadOptions): Promise<string>;
+export interface PrivateSseEvent {
+    readonly data: string;
+    readonly event?: string;
+}
+/** Parse SSE/JSON responses without retaining unbounded provider frames. */
+export declare function iteratePrivateSse(response: Response, options?: BoundedReadOptions & {
+    readonly maxFrameBytes?: number;
+}): AsyncGenerator<PrivateSseEvent>;
+export declare function assertPrivateEndpoint(url: string): void;
+//# sourceMappingURL=private-transport.d.ts.map

package/lib/types/private-transport.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"private-transport.d.ts","sourceRoot":"","sources":["../../src/private-transport.ts"],"names":[],"mappings":"AAAA,oFAAoF;AAGpF,OAAO,EAAE,qBAAqB,EAAE,MAAM,8BAA8B,CAAA;AAEpE,OAAO,EAAE,qBAAqB,EAAE,MAAM,8BAA8B,CAAA;AACpE,YAAY,EAAE,yBAAyB,EAAE,MAAM,8BAA8B,CAAA;AAE7E,eAAO,MAAM,0CAA0C,SAAU,CAAA;AACjE,eAAO,MAAM,+BAA+B,QAAS,CAAA;AACrD,eAAO,MAAM,gCAAgC,SAAU,CAAA;AACvD,eAAO,MAAM,8BAA8B,QAAkB,CAAA;AAC7D,eAAO,MAAM,6BAA6B,QAAmB,CAAA;AAC7D,eAAO,MAAM,yBAAyB,QAAmB,CAAA;AACzD,eAAO,MAAM,2BAA2B,QAAa,CAAA;AAErD,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;IACpB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;IAC5B,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,UAAU,CAAA;IAClC,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAA;IAC7B,QAAQ,CAAC,uBAAuB,CAAC,EAAE,MAAM,CAAA;CAC1C;AAED,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,uBAAuB,CAAC,EAAE,MAAM,CAAA;IACzC,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAA;CAClC;AAED,MAAM,WAAW,gBAAgB;IAC/B,OAAO,CAAC,KAAK,EAAE,uBAAuB,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAA;CAC3D;AAED,kGAAkG;AAClG,wBAAgB,sBAAsB,CAAC,OAAO,GAAE,uBAA4B,GAAG,gBAAgB,CA0B9F;AAED,4FAA4F;AAC5F,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,MAAM,GAAG,qBAAqB,GAAG,SAAS,CAOpF;AAED,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAA;IAC7B,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAA;IAC/B,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAA;IAChC,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;CAC3B;AAED,4EAA4E;AAC5E,wBAAsB,gBAAgB,CAAC,QAAQ,EAAE,QAAQ,EAAE,OAAO,GAAE,kBAAuB,GAAG,OAAO,CAAC,UAAU,CAAC,CA4ChH;AAED,wBAAsB,eAAe,CAAC,QAAQ,EAAE,QAAQ,EAAE,OAAO,GAAE,kBAAuB,GAAG,OAAO,CAAC,MAAM,CAAC,CAO3G;AAED,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CACxB;AAED,4EAA4E;AAC5E,wBAAuB,iBAAiB,CACtC,QAAQ,EAAE,QAAQ,EAClB,OAAO,GAAE,kBAAkB,GAAG;IAAE,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAA;CAAO,GACrE,cAAc,CAAC,eAAe,CAAC,CAuFjC;AAED,wBAAgB,qBAAqB,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAMvD"}

package/lib/types/project-context.d.ts

@@ -0,0 +1,30 @@
+/** Host-only, read-only project discovery and safe project normalization. */
+import type { ProjectValidation } from './oauth-flow.ts';
+import { type PrivateTransport, type PrivateTransportOptions } from './private-transport.ts';
+export declare const PROJECT_DISCOVERY_PATH: "/v1internal:loadCodeAssist";
+export declare const PROJECT_DISCOVERY_ENDPOINT: `${string}/v1internal:loadCodeAssist`;
+export type ProjectDiscoveryErrorCode = 'authentication' | 'forbidden' | 'rate-limited' | 'offline' | 'malformed' | 'protocol-drift' | 'cancelled';
+export declare class ProjectDiscoveryError extends Error {
+    readonly code: ProjectDiscoveryErrorCode;
+    constructor(code: ProjectDiscoveryErrorCode, message?: string);
+}
+export interface ProjectDiscoveryOptions {
+    /** Inject a complete deterministic transport for offline tests; identity is never injectable. */
+    readonly transport?: PrivateTransport;
+    readonly transportOptions?: PrivateTransportOptions;
+    readonly operationTimeoutMs?: number;
+}
+export interface ProjectDiscovery {
+    /** Discover only a project returned for the supplied access token. */
+    discover(accessToken: string, signal?: AbortSignal): Promise<ProjectValidation | undefined>;
+}
+/** Project Context is the parent-spec name for the discovery seam. */
+export type ProjectContext = ProjectDiscovery;
+export type { ProjectValidation };
+/** Create the fixed, read-only loadCodeAssist project probe. */
+export declare function createProjectDiscovery(options?: ProjectDiscoveryOptions): ProjectDiscovery;
+/** Compatibility name used by the parent capability design. */
+export declare const createProjectContext: typeof createProjectDiscovery;
+/** Normalize the only project field that may cross into the credential store. */
+export declare function normalizeProjectId(value: unknown): string | undefined;
+//# sourceMappingURL=project-context.d.ts.map

package/lib/types/project-context.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"project-context.d.ts","sourceRoot":"","sources":["../../src/project-context.ts"],"names":[],"mappings":"AAAA,6EAA6E;AAG7E,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAA;AACxD,OAAO,EAQL,KAAK,gBAAgB,EACrB,KAAK,uBAAuB,EAC7B,MAAM,wBAAwB,CAAA;AAI/B,eAAO,MAAM,sBAAsB,EAAG,4BAAqC,CAAA;AAC3E,eAAO,MAAM,0BAA0B,uCAAiE,CAAA;AAQxG,MAAM,MAAM,yBAAyB,GACjC,gBAAgB,GAChB,WAAW,GACX,cAAc,GACd,SAAS,GACT,WAAW,GACX,gBAAgB,GAChB,WAAW,CAAA;AAEf,qBAAa,qBAAsB,SAAQ,KAAK;IAC9C,QAAQ,CAAC,IAAI,EAAE,yBAAyB,CAAA;gBAE5B,IAAI,EAAE,yBAAyB,EAAE,OAAO,SAAqC;CAK1F;AAED,MAAM,WAAW,uBAAuB;IACtC,iGAAiG;IACjG,QAAQ,CAAC,SAAS,CAAC,EAAE,gBAAgB,CAAA;IACrC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,uBAAuB,CAAA;IACnD,QAAQ,CAAC,kBAAkB,CAAC,EAAE,MAAM,CAAA;CACrC;AAED,MAAM,WAAW,gBAAgB;IAC/B,sEAAsE;IACtE,QAAQ,CAAC,WAAW,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,iBAAiB,GAAG,SAAS,CAAC,CAAA;CAC5F;AAED,sEAAsE;AACtE,MAAM,MAAM,cAAc,GAAG,gBAAgB,CAAA;AAC7C,YAAY,EAAE,iBAAiB,EAAE,CAAA;AAEjC,gEAAgE;AAChE,wBAAgB,sBAAsB,CAAC,OAAO,GAAE,uBAA4B,GAAG,gBAAgB,CA4C9F;AAED,+DAA+D;AAC/D,eAAO,MAAM,oBAAoB,+BAAyB,CAAA;AAE1D,iFAAiF;AACjF,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,GAAG,SAAS,CAKrE"}

package/lib/types/quota.d.ts

@@ -0,0 +1,43 @@
+/** Single-account Antigravity quota normalization and bounded Host service. */
+import type { CredentialCoordinator, HostCredential } from './credential-coordinator.ts';
+import { type PrivateTransport, type PrivateTransportOptions } from './private-transport.ts';
+export declare const ANTIGRAVITY_QUOTA_ENDPOINT: `${string}/v1internal:retrieveUserQuotaSummary`;
+export declare const QUOTA_REFRESH_MIN_INTERVAL_MS = 30000;
+export type QuotaState = 'available' | 'unauthenticated' | 'forbidden' | 'rate-limited' | 'offline' | 'timeout' | 'protocol-drift';
+export type QuotaWindowKind = '5h' | 'weekly';
+export interface QuotaWindowView {
+    readonly window: QuotaWindowKind;
+    readonly remainingFraction: number;
+    readonly resetTime: string;
+}
+export interface QuotaGroupView {
+    readonly group: 'gemini' | 'non-gemini';
+    readonly modelCount: number;
+    readonly windows: readonly QuotaWindowView[];
+}
+export interface QuotaStatusView {
+    readonly state: QuotaState;
+    readonly checkedAt?: string;
+    readonly groups?: readonly QuotaGroupView[];
+}
+export interface QuotaService {
+    refresh(signal?: AbortSignal, force?: boolean): Promise<QuotaStatusView>;
+    status(): QuotaStatusView;
+    dispose(): Promise<void>;
+}
+export interface QuotaServiceOptions {
+    readonly auth: Pick<CredentialCoordinator, 'credential'> | {
+        credential(signal?: AbortSignal): Promise<HostCredential | undefined>;
+    };
+    readonly transport?: PrivateTransport;
+    readonly transportOptions?: PrivateTransportOptions;
+    readonly now?: () => number;
+    readonly minIntervalMs?: number;
+}
+/** Normalize only validated, display-safe quota facts from a provider response. */
+export declare function normalizeQuotaResponse(value: unknown, now?: number): QuotaStatusView;
+export declare class QuotaNormalizationError extends Error {
+    constructor(message: string);
+}
+export declare function createQuotaService(options: QuotaServiceOptions): QuotaService;
+//# sourceMappingURL=quota.d.ts.map

package/lib/types/quota.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"quota.d.ts","sourceRoot":"","sources":["../../src/quota.ts"],"names":[],"mappings":"AAAA,+EAA+E;AAK/E,OAAO,KAAK,EAAE,qBAAqB,EAAE,cAAc,EAAE,MAAM,6BAA6B,CAAA;AACxF,OAAO,EAML,KAAK,gBAAgB,EACrB,KAAK,uBAAuB,EAC7B,MAAM,wBAAwB,CAAA;AAG/B,eAAO,MAAM,0BAA0B,iDAA4E,CAAA;AACnH,eAAO,MAAM,6BAA6B,QAAS,CAAA;AAEnD,MAAM,MAAM,UAAU,GAAG,WAAW,GAAG,iBAAiB,GAAG,WAAW,GAAG,cAAc,GAAG,SAAS,GAAG,SAAS,GAAG,gBAAgB,CAAA;AAClI,MAAM,MAAM,eAAe,GAAG,IAAI,GAAG,QAAQ,CAAA;AAE7C,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,MAAM,EAAE,eAAe,CAAA;IAChC,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAA;IAClC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;CAC3B;AAED,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,KAAK,EAAE,QAAQ,GAAG,YAAY,CAAA;IACvC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,OAAO,EAAE,SAAS,eAAe,EAAE,CAAA;CAC7C;AAED,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAA;IAC1B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,MAAM,CAAC,EAAE,SAAS,cAAc,EAAE,CAAA;CAC5C;AAED,MAAM,WAAW,YAAY;IAC3B,OAAO,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,KAAK,CAAC,EAAE,OAAO,GAAG,OAAO,CAAC,eAAe,CAAC,CAAA;IACxE,MAAM,IAAI,eAAe,CAAA;IACzB,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC,CAAA;CACzB;AAED,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,qBAAqB,EAAE,YAAY,CAAC,GAAG;QAAE,UAAU,CAAC,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,cAAc,GAAG,SAAS,CAAC,CAAA;KAAE,CAAA;IACpI,QAAQ,CAAC,SAAS,CAAC,EAAE,gBAAgB,CAAA;IACrC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,uBAAuB,CAAA;IACnD,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,MAAM,CAAA;IAC3B,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAA;CAChC;AAED,mFAAmF;AACnF,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,OAAO,EAAE,GAAG,SAAa,GAAG,eAAe,CA2DxF;AAED,qBAAa,uBAAwB,SAAQ,KAAK;gBACpC,OAAO,EAAE,MAAM;CAI5B;AAED,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,mBAAmB,GAAG,YAAY,CAwC7E"}

package/lib/types/raw-http.d.ts

@@ -0,0 +1,11 @@
+/** Literal HTTP/1.1 dispatcher for the fixed Antigravity wire profile. */
+export interface RawPrivateRequest {
+    readonly url: string;
+    readonly accessToken: string;
+    readonly body: string | Uint8Array;
+    readonly signal?: AbortSignal;
+    readonly responseHeaderTimeoutMs: number;
+}
+/** Dispatch one request using the immutable plugin-owned Wire Identity. */
+export declare function createRawPrivateDispatcher(): (input: RawPrivateRequest) => Promise<Response>;
+//# sourceMappingURL=raw-http.d.ts.map

package/lib/types/raw-http.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"raw-http.d.ts","sourceRoot":"","sources":["../../src/raw-http.ts"],"names":[],"mappings":"AAAA,0EAA0E;AAe1E,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;IACpB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;IAC5B,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,UAAU,CAAA;IAClC,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAA;IAC7B,QAAQ,CAAC,uBAAuB,EAAE,MAAM,CAAA;CACzC;AAWD,2EAA2E;AAC3E,wBAAgB,0BAA0B,IAAI,CAAC,KAAK,EAAE,iBAAiB,KAAK,OAAO,CAAC,QAAQ,CAAC,CAiC5F"}

package/lib/types/replay.d.ts

@@ -0,0 +1,30 @@
+/** Bounded, block-aligned replay metadata for Antigravity model turns. */
+import type { ReplayEnvelope, ToolSchema } from '@deepseek-ai/dsh-llm';
+import type { Message } from '@deepseek-ai/dsh-llm';
+export declare const ANTIGRAVITY_REPLAY_VERSION: 1;
+export type ReplayBlockKind = 'text' | 'reasoning' | 'tool-call';
+export interface AntigravityReplayBlock {
+    readonly kind: ReplayBlockKind;
+    readonly signature?: string;
+}
+export interface AntigravityReplayResponse {
+    readonly version: typeof ANTIGRAVITY_REPLAY_VERSION;
+    readonly provider: 'google-antigravity';
+    readonly model: string;
+    readonly family: 'gemini' | 'claude' | 'gpt-oss' | 'unknown';
+    readonly finish?: string;
+}
+export interface AntigravityReplayState extends ReplayEnvelope {
+    readonly response: AntigravityReplayResponse;
+    readonly blocks: readonly AntigravityReplayBlock[];
+}
+/** Keep only provider-issued signatures and bounded response facts. */
+export declare function createReplayState(model: string, family: AntigravityReplayResponse['family'], finish: string | undefined, blocks: readonly AntigravityReplayBlock[]): AntigravityReplayState;
+/** Validate replay metadata before it can affect a later private request. */
+export declare function compatibleReplayState(message: Message, provider: string, model: string, _blockKinds?: readonly ReplayBlockKind[]): AntigravityReplayState | undefined;
+/** Return the block family without allowing a model alias to cross families. */
+export declare function antigravityModelFamily(model: string): AntigravityReplayResponse['family'];
+/** Convert DSH schemas to the small function-declaration subset accepted privately. */
+export declare function sanitizeToolSchemas(tools: readonly ToolSchema[] | undefined): readonly Record<string, unknown>[];
+export declare function buildFunctionDeclarations(tools: readonly ToolSchema[] | undefined): readonly Record<string, unknown>[];
+//# sourceMappingURL=replay.d.ts.map

package/lib/types/replay.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"replay.d.ts","sourceRoot":"","sources":["../../src/replay.ts"],"names":[],"mappings":"AAAA,0EAA0E;AAE1E,OAAO,KAAK,EAAE,cAAc,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAA;AACtE,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,sBAAsB,CAAA;AAEnD,eAAO,MAAM,0BAA0B,EAAG,CAAU,CAAA;AAIpD,MAAM,MAAM,eAAe,GAAG,MAAM,GAAG,WAAW,GAAG,WAAW,CAAA;AAEhE,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,IAAI,EAAE,eAAe,CAAA;IAC9B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAA;CAC5B;AAED,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,OAAO,EAAE,OAAO,0BAA0B,CAAA;IACnD,QAAQ,CAAC,QAAQ,EAAE,oBAAoB,CAAA;IACvC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,MAAM,EAAE,QAAQ,GAAG,QAAQ,GAAG,SAAS,GAAG,SAAS,CAAA;IAC5D,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CACzB;AAED,MAAM,WAAW,sBAAuB,SAAQ,cAAc;IAC5D,QAAQ,CAAC,QAAQ,EAAE,yBAAyB,CAAA;IAC5C,QAAQ,CAAC,MAAM,EAAE,SAAS,sBAAsB,EAAE,CAAA;CACnD;AAED,uEAAuE;AACvE,wBAAgB,iBAAiB,CAC/B,KAAK,EAAE,MAAM,EACb,MAAM,EAAE,yBAAyB,CAAC,QAAQ,CAAC,EAC3C,MAAM,EAAE,MAAM,GAAG,SAAS,EAC1B,MAAM,EAAE,SAAS,sBAAsB,EAAE,GACxC,sBAAsB,CAgBxB;AAED,6EAA6E;AAC7E,wBAAgB,qBAAqB,CACnC,OAAO,EAAE,OAAO,EAChB,QAAQ,EAAE,MAAM,EAChB,KAAK,EAAE,MAAM,EACb,WAAW,CAAC,EAAE,SAAS,eAAe,EAAE,GACvC,sBAAsB,GAAG,SAAS,CAmCpC;AAED,gFAAgF;AAChF,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,MAAM,GAAG,yBAAyB,CAAC,QAAQ,CAAC,CAMzF;AAED,uFAAuF;AACvF,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,SAAS,UAAU,EAAE,GAAG,SAAS,GAAG,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,CAOhH;AAED,wBAAgB,yBAAyB,CAAC,KAAK,EAAE,SAAS,UAAU,EAAE,GAAG,SAAS,GAAG,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,CAMtH"}

package/lib/types/rpc-contract.d.ts

@@ -0,0 +1,33 @@
+/** Browser-safe, value-free RPC contract for the Antigravity login flow. */
+import type { RpcResult } from '@deepseek-ai/dsh-host-apiproxy/api';
+import type { AntigravityStatusView, LoginActionResult, LoginStartResult, RiskAcknowledgementResult } from './status.ts';
+import type { RevokeActionResult } from './credential-coordinator.ts';
+import type { QuotaStatusView } from './quota.ts';
+import { type AntigravityModelCatalogView } from './model-catalog.ts';
+export declare const ANTIGRAVITY_AUTH_RPC_CHANNEL: "/antigravity-auth";
+export interface AntigravityAuthRpcClient {
+    status(signal?: AbortSignal): Promise<RpcResult<{
+        status: AntigravityStatusView;
+    }>>;
+    acknowledgeRisk(signal?: AbortSignal): Promise<RpcResult<RiskAcknowledgementResult>>;
+    login(signal?: AbortSignal): Promise<RpcResult<LoginStartResult>>;
+    cancelLogin(signal?: AbortSignal): Promise<RpcResult<LoginActionResult>>;
+    logout(signal?: AbortSignal): Promise<RpcResult<{
+        state: 'logged-out';
+    }>>;
+    revoke(signal?: AbortSignal): Promise<RpcResult<RevokeActionResult>>;
+    models(signal?: AbortSignal, force?: boolean): Promise<RpcResult<AntigravityModelCatalogView>>;
+    usage?(signal?: AbortSignal, force?: boolean): Promise<RpcResult<QuotaStatusView>>;
+}
+export interface AntigravityAuthConnectionRpc {
+    call(channel: string, endpoint: string, payload: unknown, signal?: AbortSignal): Promise<RpcResult<unknown>>;
+}
+/** Build the browser face over the plugin-owned loopback channel. */
+export declare function createAntigravityAuthRpcClient(rpc: AntigravityAuthConnectionRpc): AntigravityAuthRpcClient;
+/** Parse a closed, value-safe advisory model catalog received by the browser. */
+export declare function parseModelCatalogResult(value: unknown): AntigravityModelCatalogView | undefined;
+/** Parse a value-safe, normalized quota envelope received by the browser. */
+export declare function parseUsageResult(value: unknown): QuotaStatusView | undefined;
+/** Parse the closed status envelope received by the browser. */
+export declare function parseStatusResult(value: unknown): AntigravityStatusView | undefined;
+//# sourceMappingURL=rpc-contract.d.ts.map

package/lib/types/rpc-contract.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rpc-contract.d.ts","sourceRoot":"","sources":["../../src/rpc-contract.ts"],"names":[],"mappings":"AAAA,4EAA4E;AAE5E,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,oCAAoC,CAAA;AAEnE,OAAO,KAAK,EACV,qBAAqB,EAIrB,iBAAiB,EAEjB,gBAAgB,EAEhB,yBAAyB,EAC1B,MAAM,aAAa,CAAA;AAEpB,OAAO,KAAK,EAA8D,kBAAkB,EAAkD,MAAM,6BAA6B,CAAA;AACjL,OAAO,KAAK,EAA8B,eAAe,EAAmB,MAAM,YAAY,CAAA;AAC9F,OAAO,EAGL,KAAK,2BAA2B,EACjC,MAAM,oBAAoB,CAAA;AAI3B,eAAO,MAAM,4BAA4B,EAAG,mBAA4B,CAAA;AAExE,MAAM,WAAW,wBAAwB;IACvC,MAAM,CAAC,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,SAAS,CAAC;QAAE,MAAM,EAAE,qBAAqB,CAAA;KAAE,CAAC,CAAC,CAAA;IACnF,eAAe,CAAC,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,SAAS,CAAC,yBAAyB,CAAC,CAAC,CAAA;IACpF,KAAK,CAAC,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,SAAS,CAAC,gBAAgB,CAAC,CAAC,CAAA;IACjE,WAAW,CAAC,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,SAAS,CAAC,iBAAiB,CAAC,CAAC,CAAA;IACxE,MAAM,CAAC,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,SAAS,CAAC;QAAE,KAAK,EAAE,YAAY,CAAA;KAAE,CAAC,CAAC,CAAA;IACzE,MAAM,CAAC,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,SAAS,CAAC,kBAAkB,CAAC,CAAC,CAAA;IACpE,MAAM,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,KAAK,CAAC,EAAE,OAAO,GAAG,OAAO,CAAC,SAAS,CAAC,2BAA2B,CAAC,CAAC,CAAA;IAC9F,KAAK,CAAC,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,KAAK,CAAC,EAAE,OAAO,GAAG,OAAO,CAAC,SAAS,CAAC,eAAe,CAAC,CAAC,CAAA;CACnF;AAED,MAAM,WAAW,4BAA4B;IAC3C,IAAI,CACF,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,OAAO,EAChB,MAAM,CAAC,EAAE,WAAW,GACnB,OAAO,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAA;CAC/B;AAED,qEAAqE;AACrE,wBAAgB,8BAA8B,CAAC,GAAG,EAAE,4BAA4B,GAAG,wBAAwB,CAc1G;AA4CD,iFAAiF;AACjF,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,OAAO,GAAG,2BAA2B,GAAG,SAAS,CA0B/F;AAED,6EAA6E;AAC7E,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,OAAO,GAAG,eAAe,GAAG,SAAS,CA2B5E;AAED,gEAAgE;AAChE,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,OAAO,GAAG,qBAAqB,GAAG,SAAS,CAGnF"}

package/lib/types/rpc-vocabulary.d.ts

@@ -0,0 +1,7 @@
+/** Closed, browser-safe RPC error vocabulary shared by Host and client. */
+import { type LoginErrorCode } from './login-types.ts';
+export declare const SAFE_RPC_ERROR_CODES: readonly ["bad-request", "invalid-method", "invalid-path", "invalid-host", "duplicate-parameter", "invalid-parameters", "missing-state", "state-mismatch", "missing-code", "oauth-error", "no-pending-flow", "expired", "cancelled", "port-conflict", "token-exchange-failed", "project-unavailable", "project-authentication-failed", "project-forbidden", "project-rate-limited", "project-offline", "project-malformed", "project-protocol-drift", "project-validation-failed", "persistence-failed", "credential-conflict", "invalid-callback-url", "risk-acknowledgement-required", "internal", "invalid-grant", "network", "timeout", "rate-limited", "server-error", "http-error", "invalid-response", "conflict", "storage"];
+export type SafeRpcErrorCode = (typeof SAFE_RPC_ERROR_CODES)[number];
+export declare function isSafeRpcErrorCode(value: unknown): value is SafeRpcErrorCode;
+export declare function safeRpcErrorMessage(code: SafeRpcErrorCode | LoginErrorCode): string;
+//# sourceMappingURL=rpc-vocabulary.d.ts.map

package/lib/types/rpc-vocabulary.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rpc-vocabulary.d.ts","sourceRoot":"","sources":["../../src/rpc-vocabulary.ts"],"names":[],"mappings":"AAAA,2EAA2E;AAE3E,OAAO,EAAqB,KAAK,cAAc,EAAE,MAAM,kBAAkB,CAAA;AAczE,eAAO,MAAM,oBAAoB,ssBAIvB,CAAA;AAEV,MAAM,MAAM,gBAAgB,GAAG,CAAC,OAAO,oBAAoB,CAAC,CAAC,MAAM,CAAC,CAAA;AAyCpE,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,gBAAgB,CAE5E;AAED,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,gBAAgB,GAAG,cAAc,GAAG,MAAM,CAEnF"}

package/lib/types/rpc.d.ts

@@ -0,0 +1,11 @@
+/** Host dispatcher for the Antigravity OAuth loopback RPC channel. */
+import type { RpcResult } from '@deepseek-ai/dsh-host-apiproxy/api';
+import type { BootstrapStatusService } from './status.ts';
+import type { QuotaStatusView } from './quota.ts';
+import type { AntigravityModelCatalogService } from './model-catalog.ts';
+export { ANTIGRAVITY_AUTH_RPC_CHANNEL } from './rpc-contract.ts';
+/** Dispatch closed, value-safe requests; callback URLs are never echoed. */
+export declare function handleAntigravityAuthRpc(service: Pick<BootstrapStatusService, 'status' | 'acknowledgeRisk' | 'startLogin' | 'cancelLogin' | 'logout' | 'revoke'> & {
+    usage?: (signal?: AbortSignal, force?: boolean) => Promise<QuotaStatusView>;
+}, endpoint: string, payload: unknown, signal?: AbortSignal, modelCatalog?: AntigravityModelCatalogService): Promise<RpcResult<unknown>>;
+//# sourceMappingURL=rpc.d.ts.map

package/lib/types/rpc.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rpc.d.ts","sourceRoot":"","sources":["../../src/rpc.ts"],"names":[],"mappings":"AAAA,sEAAsE;AAEtE,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,oCAAoC,CAAA;AAGnE,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,aAAa,CAAA;AACzD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,YAAY,CAAA;AAEjD,OAAO,KAAK,EAAE,8BAA8B,EAAE,MAAM,oBAAoB,CAAA;AAExE,OAAO,EAAE,4BAA4B,EAAE,MAAM,mBAAmB,CAAA;AAEhE,4EAA4E;AAC5E,wBAAsB,wBAAwB,CAC5C,OAAO,EAAE,IAAI,CAAC,sBAAsB,EAAE,QAAQ,GAAG,iBAAiB,GAAG,YAAY,GAAG,aAAa,GAAG,QAAQ,GAAG,QAAQ,CAAC,GAAG;IAAE,KAAK,CAAC,EAAE,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,KAAK,CAAC,EAAE,OAAO,KAAK,OAAO,CAAC,eAAe,CAAC,CAAA;CAAE,EAC1M,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,OAAO,EAChB,MAAM,CAAC,EAAE,WAAW,EACpB,YAAY,CAAC,EAAE,8BAA8B,GAC5C,OAAO,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CA+C7B"}

package/lib/types/safe-text.d.ts

@@ -0,0 +1,3 @@
+/** Shared bounded text predicate for Host trust-boundary values. */
+export declare function isBoundedSafeText(value: unknown, maxLength: number, minLength?: number): value is string;
+//# sourceMappingURL=safe-text.d.ts.map

package/lib/types/safe-text.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"safe-text.d.ts","sourceRoot":"","sources":["../../src/safe-text.ts"],"names":[],"mappings":"AAAA,oEAAoE;AAEpE,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,SAAI,GAAG,KAAK,IAAI,MAAM,CAanG"}

package/lib/types/search.d.ts

@@ -0,0 +1,42 @@
+/** Dedicated grounded Web Search provider and independently mounted Search row. */
+import type { Context } from '@deepseek-ai/cordis';
+import z from '@deepseek-ai/schemastery';
+import type { WebSearchProvider, WebSearchRequest, WebSearchResult } from '@deepseek-ai/dsh-web';
+import type { CredentialCoordinator, HostCredential } from './credential-coordinator.ts';
+import { type PrivateTransport } from './private-transport.ts';
+export declare const name = "antigravity-search";
+export declare const inject: string[];
+export declare const ANTIGRAVITY_SEARCH_PROVIDER_ID = "antigravity";
+export declare const ANTIGRAVITY_SEARCH_ENDPOINT: `${string}/v1internal:generateContent`;
+export declare const ANTIGRAVITY_SEARCH_MODEL = "antigravity-gemini-3.7-flash";
+export declare const ANTIGRAVITY_SEARCH_SETTINGS_NAMESPACE: import("@deepseek-ai/dsh-settings").SettingsNamespace;
+export interface AntigravitySearchSettings {
+    enabled: boolean;
+    model: string;
+    maxResults: number;
+}
+export interface Config extends AntigravitySearchSettings {
+}
+export declare const Config: z<Config>;
+export interface AntigravitySearchProviderOptions {
+    readonly auth: Pick<CredentialCoordinator, 'credential'> | {
+        credential(signal?: AbortSignal): Promise<HostCredential | undefined>;
+    };
+    readonly enabled?: () => boolean;
+    readonly settings?: () => AntigravitySearchSettings;
+    readonly transport?: PrivateTransport;
+    readonly maxResponseBytes?: number;
+}
+export declare class AntigravitySearchProvider implements WebSearchProvider {
+    private readonly options;
+    readonly id = "antigravity";
+    private readonly enabled;
+    private readonly transport;
+    constructor(options: AntigravitySearchProviderOptions);
+    available(): boolean;
+    search(request: WebSearchRequest, signal?: AbortSignal): Promise<WebSearchResult>;
+}
+export declare function buildGroundedSearchPayload(query: string, credential: Pick<HostCredential, 'projectId'>, model?: string): Record<string, unknown>;
+/** Mount only the public Web Search seam; no fetch provider is registered. */
+export declare function apply(ctx?: Context, config?: Config): void;
+//# sourceMappingURL=search.d.ts.map

package/lib/types/search.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"search.d.ts","sourceRoot":"","sources":["../../src/search.ts"],"names":[],"mappings":"AAAA,mFAAmF;AAEnF,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAA;AAElD,OAAO,CAAC,MAAM,0BAA0B,CAAA;AAGxC,OAAO,KAAK,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,eAAe,EAAmB,MAAM,sBAAsB,CAAA;AAGjH,OAAO,KAAK,EAAE,qBAAqB,EAAE,cAAc,EAAE,MAAM,6BAA6B,CAAA;AACxF,OAAO,EASL,KAAK,gBAAgB,EACtB,MAAM,wBAAwB,CAAA;AAK/B,eAAO,MAAM,IAAI,uBAAuB,CAAA;AACxC,eAAO,MAAM,MAAM,UAA6B,CAAA;AAChD,eAAO,MAAM,8BAA8B,gBAAgB,CAAA;AAC3D,eAAO,MAAM,2BAA2B,wCAAmE,CAAA;AAC3G,eAAO,MAAM,wBAAwB,iCAAiC,CAAA;AACtE,eAAO,MAAM,qCAAqC,uDAA0C,CAAA;AAE5F,MAAM,WAAW,yBAAyB;IACxC,OAAO,EAAE,OAAO,CAAA;IAChB,KAAK,EAAE,MAAM,CAAA;IACb,UAAU,EAAE,MAAM,CAAA;CACnB;AAED,MAAM,WAAW,MAAO,SAAQ,yBAAyB;CAAG;AAE5D,eAAO,MAAM,MAAM,EAAE,CAAC,CAAC,MAAM,CAI3B,CAAA;AAEF,MAAM,WAAW,gCAAgC;IAC/C,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,qBAAqB,EAAE,YAAY,CAAC,GAAG;QAAE,UAAU,CAAC,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,cAAc,GAAG,SAAS,CAAC,CAAA;KAAE,CAAA;IACpI,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,OAAO,CAAA;IAChC,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,yBAAyB,CAAA;IACnD,QAAQ,CAAC,SAAS,CAAC,EAAE,gBAAgB,CAAA;IACrC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAA;CACnC;AAED,qBAAa,yBAA0B,YAAW,iBAAiB;IAKrD,OAAO,CAAC,QAAQ,CAAC,OAAO;IAJpC,QAAQ,CAAC,EAAE,iBAAiC;IAC5C,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAe;IACvC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAkB;gBAEf,OAAO,EAAE,gCAAgC;IAKtE,SAAS,IAAI,OAAO;IAId,MAAM,CAAC,OAAO,EAAE,gBAAgB,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,eAAe,CAAC;CAiDxF;AAED,wBAAgB,0BAA0B,CAAC,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,IAAI,CAAC,cAAc,EAAE,WAAW,CAAC,EAAE,KAAK,SAA2B,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAUlK;AAED,8EAA8E;AAC9E,wBAAgB,KAAK,CAAC,GAAG,CAAC,EAAE,OAAO,EAAE,MAAM,GAAE,MAA2E,GAAG,IAAI,CAqB9H"}

package/lib/types/status.d.ts

@@ -0,0 +1,62 @@
+/** Value-free login and capability status shared by Host and browser code. */
+import type { LoginActionResult, LoginCompletionResult, LoginErrorCode, LoginPhase, LoginStartResult, LoginStatusView } from './login-types.ts';
+import type { CredentialStatusView, LogoutResult, RevokeActionResult, RevokeStatusView } from './credential-coordinator.ts';
+import type { QuotaStatusView } from './quota.ts';
+export declare const ANTIGRAVITY_PLUGIN_ID: "dsh-antigravity-auth";
+export declare const CAPABILITY_ROW_IDS: readonly ["auth-llm", "search", "image", "video"];
+export declare const LLM_FAMILY_IDS: readonly ["gemini", "claude", "gpt-oss"];
+export type CapabilityRowId = (typeof CAPABILITY_ROW_IDS)[number];
+export type LlmFamilyId = (typeof LLM_FAMILY_IDS)[number];
+export type CapabilityGateState = 'available' | 'disabled' | 'poc-pending' | 'protocol-drift';
+export type CapabilityGateReasonCode = 'gate-not-run' | 'project-unavailable' | 'capability-ready' | 'unauthenticated' | 'rate-limited' | 'cancelled' | 'gate-0-failed' | 'gate-failed' | 'unsupported-video' | 'protocol-drift';
+export declare const CAPABILITY_GATE_OUTCOMES: readonly ["passed", "unauthenticated", "rate-limited", "cancelled", "attribution-rejected", "protocol-drift", "unsupported-video", "failed"];
+export type CapabilityGateOutcome = (typeof CAPABILITY_GATE_OUTCOMES)[number];
+export interface CapabilityGateResult {
+    readonly outcome: CapabilityGateOutcome;
+    readonly checkedAt: string;
+}
+export interface CapabilityGateEvidence {
+    /** Credential-lineage fence; evidence from another account is ignored. */
+    readonly subject?: string;
+    readonly gate0?: CapabilityGateResult;
+    readonly llmFamilies?: Readonly<Partial<Record<LlmFamilyId, CapabilityGateResult>>>;
+    readonly capabilities?: Readonly<Partial<Record<CapabilityRowId, CapabilityGateResult>>>;
+}
+export type { LoginActionResult, LoginErrorCode, LoginPhase, LoginStartResult, LoginStatusView };
+export interface CapabilityGateStatus {
+    readonly id: CapabilityRowId;
+    readonly state: CapabilityGateState;
+    readonly reasonCode: CapabilityGateReasonCode;
+}
+export interface AntigravityStatusView {
+    readonly pluginId: typeof ANTIGRAVITY_PLUGIN_ID;
+    readonly phase: 'bootstrap';
+    readonly privateSelfUse: true;
+    readonly singleAccount: true;
+    readonly riskAcknowledgementRequired: true;
+    readonly riskAcknowledged: boolean;
+    readonly login: LoginStatusView;
+    /** Credential state is value-safe; tokens and grant errors never cross this boundary. */
+    readonly credential?: CredentialStatusView;
+    readonly revoke?: RevokeStatusView;
+    readonly capabilities: readonly CapabilityGateStatus[];
+}
+export interface RiskAcknowledgementResult {
+    readonly acknowledged: true;
+}
+export interface BootstrapStatusService {
+    status(): Promise<AntigravityStatusView>;
+    acknowledgeRisk(): Promise<RiskAcknowledgementResult>;
+    startLogin(): Promise<LoginStartResult>;
+    completeCallback(callbackUrl: string): Promise<LoginCompletionResult>;
+    cancelLogin(): Promise<{
+        readonly phase: LoginPhase;
+        readonly errorCode?: LoginErrorCode;
+    }>;
+    logout(): Promise<LogoutResult>;
+    revoke(confirmed: boolean, signal?: AbortSignal): Promise<RevokeActionResult>;
+    usage?(signal?: AbortSignal, force?: boolean): Promise<QuotaStatusView>;
+    dispose(): Promise<void>;
+}
+export declare function createStatusView(riskAcknowledged: boolean, login: LoginStatusView, credential?: CredentialStatusView, revoke?: RevokeStatusView, gates?: CapabilityGateEvidence): AntigravityStatusView;
+//# sourceMappingURL=status.d.ts.map

package/lib/types/status.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"status.d.ts","sourceRoot":"","sources":["../../src/status.ts"],"names":[],"mappings":"AAAA,8EAA8E;AAE9E,OAAO,KAAK,EAAE,iBAAiB,EAAE,qBAAqB,EAAE,cAAc,EAAE,UAAU,EAAE,gBAAgB,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAA;AAC/I,OAAO,KAAK,EAAE,oBAAoB,EAAE,YAAY,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,MAAM,6BAA6B,CAAA;AAC3H,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,YAAY,CAAA;AAEjD,eAAO,MAAM,qBAAqB,EAAG,sBAA+B,CAAA;AACpE,eAAO,MAAM,kBAAkB,mDAAoD,CAAA;AACnF,eAAO,MAAM,cAAc,0CAA2C,CAAA;AAEtE,MAAM,MAAM,eAAe,GAAG,CAAC,OAAO,kBAAkB,CAAC,CAAC,MAAM,CAAC,CAAA;AACjE,MAAM,MAAM,WAAW,GAAG,CAAC,OAAO,cAAc,CAAC,CAAC,MAAM,CAAC,CAAA;AACzD,MAAM,MAAM,mBAAmB,GAAG,WAAW,GAAG,UAAU,GAAG,aAAa,GAAG,gBAAgB,CAAA;AAC7F,MAAM,MAAM,wBAAwB,GAChC,cAAc,GACd,qBAAqB,GACrB,kBAAkB,GAClB,iBAAiB,GACjB,cAAc,GACd,WAAW,GACX,eAAe,GACf,aAAa,GACb,mBAAmB,GACnB,gBAAgB,CAAA;AAEpB,eAAO,MAAM,wBAAwB,8IAS3B,CAAA;AAEV,MAAM,MAAM,qBAAqB,GAAG,CAAC,OAAO,wBAAwB,CAAC,CAAC,MAAM,CAAC,CAAA;AAE7E,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,OAAO,EAAE,qBAAqB,CAAA;IACvC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;CAC3B;AAED,MAAM,WAAW,sBAAsB;IACrC,0EAA0E;IAC1E,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,KAAK,CAAC,EAAE,oBAAoB,CAAA;IACrC,QAAQ,CAAC,WAAW,CAAC,EAAE,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,WAAW,EAAE,oBAAoB,CAAC,CAAC,CAAC,CAAA;IACnF,QAAQ,CAAC,YAAY,CAAC,EAAE,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,eAAe,EAAE,oBAAoB,CAAC,CAAC,CAAC,CAAA;CACzF;AACD,YAAY,EAAE,iBAAiB,EAAE,cAAc,EAAE,UAAU,EAAE,gBAAgB,EAAE,eAAe,EAAE,CAAA;AAEhG,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,EAAE,EAAE,eAAe,CAAA;IAC5B,QAAQ,CAAC,KAAK,EAAE,mBAAmB,CAAA;IACnC,QAAQ,CAAC,UAAU,EAAE,wBAAwB,CAAA;CAC9C;AAED,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,QAAQ,EAAE,OAAO,qBAAqB,CAAA;IAC/C,QAAQ,CAAC,KAAK,EAAE,WAAW,CAAA;IAC3B,QAAQ,CAAC,cAAc,EAAE,IAAI,CAAA;IAC7B,QAAQ,CAAC,aAAa,EAAE,IAAI,CAAA;IAC5B,QAAQ,CAAC,2BAA2B,EAAE,IAAI,CAAA;IAC1C,QAAQ,CAAC,gBAAgB,EAAE,OAAO,CAAA;IAClC,QAAQ,CAAC,KAAK,EAAE,eAAe,CAAA;IAC/B,yFAAyF;IACzF,QAAQ,CAAC,UAAU,CAAC,EAAE,oBAAoB,CAAA;IAC1C,QAAQ,CAAC,MAAM,CAAC,EAAE,gBAAgB,CAAA;IAClC,QAAQ,CAAC,YAAY,EAAE,SAAS,oBAAoB,EAAE,CAAA;CACvD;AAED,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,YAAY,EAAE,IAAI,CAAA;CAC5B;AAED,MAAM,WAAW,sBAAsB;IACrC,MAAM,IAAI,OAAO,CAAC,qBAAqB,CAAC,CAAA;IACxC,eAAe,IAAI,OAAO,CAAC,yBAAyB,CAAC,CAAA;IACrD,UAAU,IAAI,OAAO,CAAC,gBAAgB,CAAC,CAAA;IACvC,gBAAgB,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,qBAAqB,CAAC,CAAA;IACrE,WAAW,IAAI,OAAO,CAAC;QAAE,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAC;QAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,cAAc,CAAA;KAAE,CAAC,CAAA;IAC3F,MAAM,IAAI,OAAO,CAAC,YAAY,CAAC,CAAA;IAC/B,MAAM,CAAC,SAAS,EAAE,OAAO,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAAA;IAC7E,KAAK,CAAC,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,KAAK,CAAC,EAAE,OAAO,GAAG,OAAO,CAAC,eAAe,CAAC,CAAA;IACvE,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC,CAAA;CACzB;AAgBD,wBAAgB,gBAAgB,CAC9B,gBAAgB,EAAE,OAAO,EACzB,KAAK,EAAE,eAAe,EACtB,UAAU,CAAC,EAAE,oBAAoB,EACjC,MAAM,CAAC,EAAE,gBAAgB,EACzB,KAAK,GAAE,sBAA2B,GACjC,qBAAqB,CAavB"}