dsh-antigravity-auth 0.1.4-rc.5 → 0.1.4

package/CHANGELOG.md

@@ -1,5 +1,23 @@
 # Changelog
 
+## [Unreleased]
+
+## [0.1.4] - 2026-10-30
+
+- Verify the plugin against the coherent DSH `0.2.1-rc.5` graph and forward the admitted request peer for account RPC.
+- Respect DSH WebRuntime provider selection without mutating its private selection state.
+- Remove the DSH version range restriction from published peers and retire the unused `dsh-invariants` peer.
+
+## [0.1.4-rc.6] - 2026-10-13
+
+- Adapt the plugin to DSH `0.2.0-rc.2` and keep the tested dependency graph coherent.
+- Preserve the existing credential isolation, V4 tool history, signed replay, and concurrent search cancellation behavior.
+- Update the matching official source verification target and remove obsolete prerelease age exceptions.
+- Fix Windows test isolation so test fixtures do not overwrite live user credentials or capability gates in `%LOCALAPPDATA%\dsh-antigravity-auth`.
+- Register `google` as an alias provider route alongside `google-antigravity` so sessions and configurations specifying `google` seamlessly route to `AntigravityAdapter`.
+- Robustify project ID normalization to handle resource name prefixes and alphanumeric IDs.
+- Keep Host test fixtures isolated from live profile data and preserve explicit Web Search provider selections.
+
 ## [0.1.4-rc.5] - 2026-09-28
 
 - Align the plugin and its dependency graph with DSH `0.2.0-rc.1`, Cordis `4.0.4`, and Schemastery `3.18.4`.

package/README.md

@@ -1,13 +1,13 @@
 # dsh-antigravity-auth
 
-> **DSH compatibility:** `0.1.4-rc.5` targets DSH `0.2.0-rc.1` as its minimum and tested development baseline. Use compatible older plugin versions for older DSH Hosts. See [verification](docs/dsh-source-verification.md).
+> **DSH compatibility:** Version `0.1.4` declares no DSH version range restriction. Its tested development baseline is DSH `0.2.1-rc.5`; other versions have not been verified by these checks. See [verification](docs/dsh-source-verification.md).
 
 [![npm rc version](https://img.shields.io/npm/v/dsh-antigravity-auth/rc.svg?label=npm%20rc)](https://www.npmjs.com/package/dsh-antigravity-auth)
 [![awesome · DSH plugin](https://awesome-dsh-plugin.com/badge.svg)](https://awesome-dsh-plugin.com)
 
 English | [中文](README.zh.md)
 
-Release: **v0.1.4-rc.5** (npm tag: `rc`).
+Release: **v0.1.4** (npm tag: `latest`).
 
 A self-contained [DeepSeek Harness](https://github.com/deepseek-ai/deepseek-harness)
 **Antigravity Capability Bundle**. It integrates Antigravity's private OAuth session
@@ -27,6 +27,14 @@ The settings section follows the DSH interface language (English or Chinese), in
 > may be rate-limited or changed without notice. Do not rely on it for
 > production workloads.
 
+## 0.1.4: DSH 0.2.1 compatibility
+
+Updates the tested DSH graph to `0.2.1-rc.5`, forwards the request's admitted peer to account RPC, and respects the Host's Web Search provider selection. DSH peers are unrestricted so installation is not rejected solely by the Host version; this does not imply untested versions will work. The full package and fixed-source checks pass. The disposable Web Host and logged-out account status route were exercised without live OAuth or private endpoint calls.
+
+## 0.1.4-rc.6: DSH 0.2.0-rc.2 adaptation and selection fixes
+
+This release raises the minimum and tested DSH dependency graph to `0.2.0-rc.2`, while preserving the existing credential, replay, and cancellation behavior. It also isolates Host test fixtures from live profile data, adds the `google` provider alias, normalizes Antigravity project IDs, and preserves an explicit `deepseek-official` Web Search selection instead of overriding it during automatic registration. The complete package and tagged-source checks pass; live account and private transport behavior remain unverified.
+
 ## 0.1.4-rc.5: DSH 0.2.0-rc.1 adaptation
 
 This release updates the DSH dependency graph, registers capability controls through Config Forms and volatile settings, forwards the current Connection RPC operator, and maps V4 role `tool` messages into provider history. The account route keeps its Host-side loopback guard. The complete package and tagged-source checks pass; live account and private transport behavior remain unverified.
@@ -86,6 +94,10 @@ The `antigravity-search` Host row registers provider ID `antigravity` through
 the audited Wire Identity dispatcher. Results include the generated output and deduplicated,
 validated HTTP(S) source references.
 
+DSH owns the active search-provider selection. Select `antigravity` in the
+Host's Web Search configuration when multiple providers are available; the
+plugin does not overwrite an existing selection.
+
 ### Image Creation & Editing
 
 `generate_image` presents a unified operation dispatching to Antigravity image endpoints:
@@ -105,24 +117,24 @@ Multimodal `analyze_video` tool accepts workspace MP4 videos, performing bounded
 - Clear status tiers: Normal (>60%, emerald green), Warning (30%–60%, amber), and Low (<30%, coral red).
 - Elegant loading shimmer tracks and querying spinner animations.
 
-## Requirements
+## Requirements (current checkout)
 
-- DeepSeek Harness `0.2.0-rc.1` (tested coherent dependency graph).
+- DeepSeek Harness `0.2.1-rc.5` (tested coherent dependency graph).
 - Node.js `^22.19.0` or `>=24.0.0`.
 - `pnpm` available on `PATH` (`11.7.0` is the tested project package manager).
 - A Google account with Antigravity access.
 
-## Install
+## Install (published release)
 
-Stop `dsh web`, ensure the target Host uses a coherent DSH `0.2.0-rc.1` graph, then install this exact prerelease into the intended profile:
+Stop `dsh web`, then install the latest release into the intended profile:
 
 ```sh
 dsh --version
-dsh plugin --profile web add --save-exact dsh-antigravity-auth@0.1.4-rc.5
+dsh plugin --profile web add dsh-antigravity-auth
 dsh plugin --profile web list
 ```
 
-Verify the entry, restart `dsh web`, and refresh the browser. This version uses the npm `rc` tag. An install without a version or tag selects `latest`, which does not include this DSH 0.2 adaptation. Older DSH Hosts should retain a compatible older plugin release.
+Verify the entry, restart `dsh web`, and refresh the browser. The example uses the `web` profile; replace it with the intended profile, such as `desktop`.
 
 ## Terminal login command
 

package/README.zh.md

@@ -1,13 +1,13 @@
 # dsh-antigravity-auth
 
-> **DSH 兼容性：** `0.1.4-rc.5` 以 DSH `0.2.0-rc.1` 为最低且已测试的开发基线；旧版 DSH 请使用兼容的插件版本。见[验证说明](docs/dsh-source-verification.md)。
+> **DSH 兼容性：** `0.1.4` 不限制 DSH 版本范围，开发测试基线为 DSH `0.2.1-rc.5`；这些检查未验证其他版本。见[验证说明](docs/dsh-source-verification.md)。
 
 [![npm rc version](https://img.shields.io/npm/v/dsh-antigravity-auth/rc.svg?label=npm%20rc)](https://www.npmjs.com/package/dsh-antigravity-auth)
 [![awesome · DSH plugin](https://awesome-dsh-plugin.com/badge.svg)](https://awesome-dsh-plugin.com)
 
 [English](README.md) | 中文
 
-发布版本：**v0.1.4-rc.5**（npm 标签：`rc`）。
+发布版本：**v0.1.4**（npm 标签：`latest`）。
 
 这是一个自包含的 [DeepSeek Harness](https://github.com/deepseek-ai/deepseek-harness)
 **Antigravity 能力包**。它集成了 Antigravity 的私有 OAuth 登录态与 Wire Identity 线路身份，提供：
@@ -24,6 +24,14 @@
 > **⚠️ 非官方通道——仅限个人开发。** 私有、受账户权限控制的 Antigravity
 > 后端服务未获官方支持、可随时撤销，也可能在没有通知的情况下被限流或变更。请勿依赖它承载生产任务。
 
+## 0.1.4：适配 DSH 0.2.1
+
+开发测试依赖图升级至 DSH `0.2.1-rc.5`，账号 RPC 转发当前请求通过认证的身份，网页搜索保留 Host 的提供方选择。DSH peer 不设版本范围，安装不会仅因 Host 版本被拦截；这不代表未经验证的版本一定可用。完整包检查和固定源码检查已通过，并在隔离 Web Host 中验证未登录状态接口；没有发起真实 OAuth 或私有接口请求。
+
+## 0.1.4-rc.6：适配 DSH 0.2.0-rc.2 与选择保持修复
+
+此版本将最低及已测试的 DSH 依赖图升级到 `0.2.0-rc.2`，并保留既有凭据隔离、历史重放与取消行为。同时隔离 Host 测试 fixture 与真实 profile 数据，增加 `google` 提供方别名，规范化 Antigravity project ID，并在自动注册时保留用户明确选择的 `deepseek-official` 网页搜索提供方。完整包检查与固定源码检查已通过；真实账号和私有传输尚未验证。
+
 ## 0.1.4-rc.5：适配 DSH 0.2.0-rc.1
 
 此版本更新 DSH 依赖图，使用 Config Forms 与 volatile 配置注册功能控制项，向 Connection RPC 传入新版 operator，并将 V4 `tool` 角色消息映射到提供商历史。账号路由保留 Host 侧回环限制。完整包检查与固定源码检查已通过；真实账号和私有传输尚未验证。
@@ -80,6 +88,8 @@
 
 `antigravity-search` Host 行通过 `@deepseek-ai/dsh-web` 注册 ID 为 `antigravity` 的全局搜索提供方。基于审计过的 Wire Identity 线路分发请求，返回真实 grounding 来源与去重检验过的 HTTP(S) 链接。
 
+搜索提供方由 DSH 选择。存在多个可用提供方时，请在 Host 的网页搜索配置中选择 `antigravity`；插件不会覆盖已有选择。
+
 ### 图片创作与编辑
 
 `generate_image` 为模型提供统一操作接口，分发至 Antigravity 图片端点：
@@ -99,24 +109,24 @@
 - 状态三档配色：充足（>60%，翡翠绿）、预警（30%–60%，警示橙）、紧急（<30%，警示红）。
 - 配备 Shimmer 微光流动轨道、微型 Spinner 与平滑展开动画。
 
-## 环境要求
+## 环境要求（当前源码）
 
-- DeepSeek Harness `0.2.0-rc.1`（统一依赖图；npm 与对应源码制品分别验证）。
+- DeepSeek Harness `0.2.1-rc.5`（统一依赖图；npm 与对应源码制品分别验证）。
 - Node.js `^22.19.0` 或 `>=24.0.0`。
 - `PATH` 中可用 `pnpm`（本项目测试版本为 `11.7.0`）。
 - 具有 Antigravity 权限的 Google 账号。
 
-## 安装
+## 安装（已发布版本）
 
-先停止 `dsh web`，确认目标 Host 使用统一的 DSH `0.2.0-rc.1` 依赖图，再将此准确预发布版本安装到目标 profile：
+先停止 `dsh web`，再将最新发布版安装到目标 profile：
 
 ```sh
 dsh --version
-dsh plugin --profile web add --save-exact dsh-antigravity-auth@0.1.4-rc.5
+dsh plugin --profile web add dsh-antigravity-auth
 dsh plugin --profile web list
 ```
 
-核对条目后重启 `dsh web` 并刷新浏览器。此版本通过 npm 的 `rc` 标签发布；不指定版本或标签会使用 `latest`，它不包含本次 DSH 0.2 适配。旧 DSH Host 应保留兼容的旧插件版本。
+核对条目后重启 `dsh web` 并刷新浏览器。示例使用 `web` profile；请按实际情况替换为 `desktop` 等目标 profile。
 
 ## 终端登录命令
 

package/docs/dsh-source-verification.md

@@ -1,19 +1,19 @@
 # DSH source compatibility verification
 
-This checkout targets the published DSH `0.2.0-rc.1` graph and its matching
-source tag at `4878cdabd87d4041bdaff61d04c966883b9fd07a`. Development dependencies,
-the lockfile, peer ranges, and package smoke checks use this baseline. Older plugin releases retain the earlier DSH support;
-the current checkout does not test or advertise that older graph.
+This checkout tests the published DSH `0.2.1-rc.5` graph and its matching
+source tag at `b830ec950faba0a46dda564be3e2d854afed94f1`. Development dependencies,
+the lockfile, and package smoke checks use this baseline. This check does not
+prove behavior on other DSH versions.
 
 ## Build the official artifacts once
 
 Use a separate scratch directory, outside any plugin or live DSH installation:
 
 ```sh
-git clone --depth 1 --branch dsh-v0.2.0-rc.1 https://github.com/deepseek-ai/deepseek-harness.git harness
+git clone --depth 1 --branch dsh-v0.2.1-rc.5 https://github.com/deepseek-ai/deepseek-harness.git harness
 cd harness
 git rev-parse HEAD
-# Must be 4878cdabd87d4041bdaff61d04c966883b9fd07a.
+# Must be b830ec950faba0a46dda564be3e2d854afed94f1.
 PNPM_CONFIG_MINIMUM_RELEASE_AGE=0 pnpm install --frozen-lockfile --ignore-scripts
 pnpm run build:lib
 pnpm --filter './packages/**' --filter './vendor/*' -r pack --pack-destination ../dsh-packages
@@ -51,12 +51,12 @@ repository, an installed package, or a user profile.
 
 Package smoke checks accept both registry and source-artifact lock identities
 while continuing to verify the selected version. Both registry and source
-checks target `0.2.0-rc.1`; source checks use `DSH_VERIFY_VERSION` explicitly.
+checks target `0.2.1-rc.5`; source checks use `DSH_VERIFY_VERSION` explicitly.
 
 ## 中文说明
 
-当前检出版本以已发布的 DSH `0.2.0-rc.1` 为开发与最低支持基线，
-锁文件、peer 与打包检查使用同一套依赖图；旧 DSH 请保留旧插件版本。
+当前检出版本以已发布的 DSH `0.2.1-rc.5` 为开发和验证基线，
+锁文件与打包检查使用同一套依赖图；此检查不能证明其他 DSH 版本的运行结果。
 
 按上面的固定 tag 构建、打包一次，然后在本插件目录运行
 `pnpm run check:dsh-source -- /绝对路径/dsh-packages`。脚本在临时目录内安装

package/lib/client.cjs

@@ -1198,8 +1198,7 @@ window.__ModuleLoader__.load({
 			base: void 0,
 			user: void 0,
 			revision: void 0,
-			writable: false,
-			mode: "memory"
+			writable: false
 		};
 		function useCapabilitySettings(scope) {
 			const subscribe = (0, react.useCallback)((listener) => scope?.subscribe(listener) ?? (() => {}), [scope]);
@@ -1323,6 +1322,9 @@ window.__ModuleLoader__.load({
 						await load(signal);
 						return;
 					}
+					try {
+						if (typeof window !== "undefined" && typeof window.open === "function" && result.value?.authorizationUrl && !window.navigator?.userAgent?.includes("jsdom")) window.open(result.value.authorizationUrl, "_blank");
+					} catch {}
 					setStatus((previous) => {
 						if (previous === null) return previous;
 						const { errorCode: _ignoredErrorCode, ...login } = previous.login;
@@ -1487,7 +1489,7 @@ window.__ModuleLoader__.load({
 											},
 											children: loginBusy ? t("startingLogin") : isConfigured ? t("relogin") : t("login")
 										}),
-										status?.credential?.configured ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
+										isConfigured ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
 											className: "agy-btn agy-btn-outline",
 											type: "button",
 											disabled: actionBusy,