dsh-coding-subscription-oauth 0.5.0

package/lib/provider.d.ts

@@ -0,0 +1,38 @@
+/**
+ * Grok Build provider: a pi-ai provider pointed at the official Grok CLI
+ * coding backend (`cli-chat-proxy.grok.com`) carrying the CLI fingerprint
+ * headers the risk-control middleware requires.
+ * @module dsh-coding-subscription-oauth/provider
+ */
+import type { Api, Model, Provider, ThinkingLevelMap } from "@earendil-works/pi-ai";
+/**
+ * Grok Build cannot disable reasoning (`reasoning_effort: "none"` is 400).
+ * pi-ai treats an absent `xhigh`/`max` key as unsupported, so those levels
+ * must be declared explicitly when the model offers them.
+ */
+export declare function grokBuildReasoningMap(levels: readonly ("low" | "medium" | "high" | "xhigh")[]): ThinkingLevelMap;
+/** Inference backend base URL (Responses API lives under `${baseUrl}/responses`). */
+export declare const GROK_BUILD_BASE_URL = "https://cli-chat-proxy.grok.com/v1";
+/** Account model catalog endpoint fetched by the official CLI. */
+export declare const GROK_BUILD_MODELS_URL = "https://cli-chat-proxy.grok.com/v1/models-v2";
+/**
+ * Official Grok CLI version this plugin fingerprints as.
+ * Track the `@xai-official/grok` npm release stream; make overridable via
+ * GROK_BUILD_CLIENT_VERSION for urgent drift fixes without a release.
+ */
+export declare const GROK_CLIENT_VERSION: string;
+/**
+ * Fingerprint headers required by the Grok Build middleware. Missing headers
+ * are a known 403 trigger (codex-app-transfer field notes, 2026-07).
+ */
+export declare function grokBuildFingerprintHeaders(): Record<string, string>;
+/** Static baseline catalog, used until a live `/models-v2` listing succeeds. */
+export declare function grokBuildBaselineModels(): Model<"openai-responses">[];
+/**
+ * Build the Grok Build pi-ai provider. Auth is apiKey-shaped: the OAuth
+ * access token is injected as the bearer key by the surrounding adapter
+ * (`Models.getAuth` on the login provider performs refresh under the store
+ * lock before the key ever reaches here).
+ */
+export declare function grokBuildProvider(models: readonly Model<Api>[]): Provider;
+//# sourceMappingURL=provider.d.ts.map

package/lib/provider.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"provider.d.ts","sourceRoot":"","sources":["../../src/provider.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,QAAQ,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AAKpF;;;;GAIG;AACH,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,SAAS,CAAC,KAAK,GAAG,QAAQ,GAAG,MAAM,GAAG,OAAO,CAAC,EAAE,GAAG,gBAAgB,CAWhH;AAED,qFAAqF;AACrF,eAAO,MAAM,mBAAmB,uCAAuC,CAAC;AAExE,kEAAkE;AAClE,eAAO,MAAM,qBAAqB,iDAAqC,CAAC;AAExE;;;;GAIG;AACH,eAAO,MAAM,mBAAmB,EAAE,MAA8D,CAAC;AAEjG;;;GAGG;AACH,wBAAgB,2BAA2B,IAAI,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAOpE;AAED,gFAAgF;AAChF,wBAAgB,uBAAuB,IAAI,KAAK,CAAC,kBAAkB,CAAC,EAAE,CA4CrE;AAED;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,SAAS,KAAK,CAAC,GAAG,CAAC,EAAE,GAAG,QAAQ,CAkBzE"}

package/lib/proxy.d.ts

@@ -0,0 +1,17 @@
+/**
+ * Scoped egress proxy for coding-subscription OAuth and inference traffic.
+ * @module dsh-coding-subscription-oauth/proxy
+ */
+export interface CodingOAuthProxyOptions {
+    proxyKimi?: boolean;
+}
+/** Install one process-wide dispatcher that proxies only the audited host list. */
+export declare function ensureCodingOAuthProxy(explicit?: string, options?: CodingOAuthProxyOptions): string | undefined;
+/** Backward-compatible name retained for existing callers. */
+export declare function ensureGrokBuildProxy(explicit?: string): string | undefined;
+export declare function codingOAuthProxyInEffect(): string | undefined;
+/** Appended to Grok discovery/token/catalog transport errors when a scoped proxy is installed. */
+export declare function codingOAuthProxyUnreachableHint(): string;
+/** Backward-compatible status accessor. */
+export declare function grokBuildProxyInEffect(): string | undefined;
+//# sourceMappingURL=proxy.d.ts.map

package/lib/proxy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"proxy.d.ts","sourceRoot":"","sources":["../../src/proxy.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAwDH,MAAM,WAAW,uBAAuB;IACvC,SAAS,CAAC,EAAE,OAAO,CAAC;CACpB;AAED,mFAAmF;AACnF,wBAAgB,sBAAsB,CAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,OAAO,GAAE,uBAA4B,GAAG,MAAM,GAAG,SAAS,CAenH;AAED,8DAA8D;AAC9D,wBAAgB,oBAAoB,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAE1E;AAED,wBAAgB,wBAAwB,IAAI,MAAM,GAAG,SAAS,CAE7D;AAED,kGAAkG;AAClG,wBAAgB,+BAA+B,IAAI,MAAM,CAExD;AAED,2CAA2C;AAC3C,wBAAgB,sBAAsB,IAAI,MAAM,GAAG,SAAS,CAE3D"}

package/lib/redact.d.ts

@@ -0,0 +1,5 @@
+/** Remove token-like strings from an external OAuth diagnostic. */
+/** Strip userinfo from a proxy URL so CLI/logs never print `user:pass@`. */
+export declare function redactProxyUrl(value: string): string;
+export declare function safeMessage(error: unknown): string;
+//# sourceMappingURL=redact.d.ts.map

package/lib/redact.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"redact.d.ts","sourceRoot":"","sources":["../../src/redact.ts"],"names":[],"mappings":"AAAA,mEAAmE;AA0CnE,4EAA4E;AAC5E,wBAAgB,cAAc,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAYpD;AAED,wBAAgB,WAAW,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAclD"}

package/lib/session.d.ts

@@ -0,0 +1,40 @@
+/**
+ * Shared OAuth store + live catalog for the host plugin and CLI.
+ * @module dsh-coding-subscription-oauth/session
+ */
+import type { Api, Model, MutableModels, Provider } from "@earendil-works/pi-ai";
+import { type CatalogSource } from "./catalog.js";
+import { GrokBuildCredentialStore } from "./store.js";
+/** One process-local owner of the credential and the account model list. */
+export declare class GrokBuildSession {
+    readonly store: GrokBuildCredentialStore;
+    readonly models: MutableModels;
+    private readonly baselineCatalog;
+    private liveIds;
+    private liveModels;
+    private selectedIds;
+    private source;
+    private listingError;
+    private readonly cacheFile;
+    private onCatalogChange;
+    constructor(store?: GrokBuildCredentialStore, onCatalogChange?: () => void);
+    /** Secret-free listing diagnostic from the last refresh. */
+    get catalogError(): string | undefined;
+    get catalogSource(): CatalogSource;
+    availableModels(): Model<Api>[];
+    selectedModelIds(): string[] | undefined;
+    visibleModels(): Model<Api>[];
+    /** Provider whose id matches the harness route so PiAiAdapter can list models. */
+    provider(): Provider;
+    loadCachedCatalog(): Promise<void>;
+    refreshLiveCatalog(signal?: AbortSignal): Promise<void>;
+    setSelectedModels(ids: readonly string[]): Promise<void>;
+    /**
+     * Backdate the stored token's expiry so the next `getAuth()` refreshes.
+     * Called after an upstream 401 rejected a locally-valid token.
+     */
+    invalidateAccessToken(): Promise<void>;
+    logout(): Promise<void>;
+    private writeCache;
+}
+//# sourceMappingURL=session.d.ts.map

package/lib/session.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"session.d.ts","sourceRoot":"","sources":["../../src/session.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAMH,OAAO,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,aAAa,EAAE,QAAQ,EAAE,MAAM,uBAAuB,CAAC;AAGjF,OAAO,EACN,KAAK,aAAa,EAKlB,MAAM,cAAc,CAAC;AAItB,OAAO,EAAE,wBAAwB,EAAE,MAAM,YAAY,CAAC;AAsDtD,4EAA4E;AAC5E,qBAAa,gBAAgB;IAC5B,QAAQ,CAAC,KAAK,EAAE,wBAAwB,CAAC;IACzC,QAAQ,CAAC,MAAM,EAAE,aAAa,CAAC;IAC/B,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAwB;IACxD,OAAO,CAAC,OAAO,CAAuB;IACtC,OAAO,CAAC,UAAU,CAA6C;IAC/D,OAAO,CAAC,WAAW,CAAuB;IAC1C,OAAO,CAAC,MAAM,CAA6B;IAC3C,OAAO,CAAC,YAAY,CAAqB;IACzC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAS;IACnC,OAAO,CAAC,eAAe,CAA2B;gBAEtC,KAAK,GAAE,wBAAyD,EAAE,eAAe,CAAC,EAAE,MAAM,IAAI;IAW1G,4DAA4D;IAC5D,IAAI,YAAY,IAAI,MAAM,GAAG,SAAS,CAErC;IAED,IAAI,aAAa,IAAI,aAAa,CAEjC;IAED,eAAe,IAAI,KAAK,CAAC,GAAG,CAAC,EAAE;IAI/B,gBAAgB,IAAI,MAAM,EAAE,GAAG,SAAS;IAIxC,aAAa,IAAI,KAAK,CAAC,GAAG,CAAC,EAAE;IAO7B,kFAAkF;IAClF,QAAQ,IAAI,QAAQ;IASd,iBAAiB,IAAI,OAAO,CAAC,IAAI,CAAC;IAelC,kBAAkB,CAAC,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC;IAuBvD,iBAAiB,CAAC,GAAG,EAAE,SAAS,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC;IAO9D;;;OAGG;IACG,qBAAqB,IAAI,OAAO,CAAC,IAAI,CAAC;IAItC,MAAM,IAAI,OAAO,CAAC,IAAI,CAAC;YAiBf,UAAU;CAaxB"}

package/lib/store.d.ts

@@ -0,0 +1,46 @@
+/**
+ * Owner-only persistent OAuth credential storage for coding-subscription routes.
+ * @module dsh-coding-subscription-oauth/store
+ */
+import type { Credential, CredentialInfo, CredentialStore } from "@earendil-works/pi-ai";
+/** Resolve one private OAuth document path beneath DSH_HOME. */
+export declare function oauthCredentialPath(basename: string, dshHome?: string): string;
+/** Resolve the legacy Grok Build OAuth document path. */
+export declare function grokBuildAuthPath(dshHome?: string): string;
+/**
+ * File-backed pi-ai store scoped to exactly one provider id. Separate provider
+ * files prevent one corrupted or rotated credential from affecting another.
+ */
+export declare class OAuthCredentialFileStore implements CredentialStore {
+    readonly providerId: string;
+    private readonly label;
+    readonly filename: string;
+    constructor(providerId: string, filename: string, label: string);
+    private readCurrent;
+    /**
+     * Hardened load. `read`/`list` keep parse failures loud. `modify` treats a
+     * safe-but-unparseable document as absent so a confirmed replace can proceed.
+     * Unsafe/symlink/wrong-owner/too-large files still throw.
+     */
+    private loadCurrent;
+    /** Refuse a dest that became unsafe after the lock was taken and before rename. */
+    private assertDestinationReplaceable;
+    read(providerId: string): Promise<Credential | undefined>;
+    list(): Promise<readonly CredentialInfo[]>;
+    modify(providerId: string, fn: (current: Credential | undefined) => Promise<Credential | undefined>): Promise<Credential | undefined>;
+    /**
+     * Force the next `getAuth()` to refresh by backdating `expires` into the past.
+     * Used after an upstream 401: the stored access token was rejected even though
+     * the local expiry had not yet passed (server-side revocation or skew). The
+     * access/refresh pair is preserved — only the freshness marker moves — so the
+     * refresh token can still mint a replacement. Returns true when a credential
+     * was actually backdated; false when nothing is stored.
+     */
+    invalidate(providerId: string): Promise<boolean>;
+    delete(providerId: string): Promise<void>;
+}
+/** Legacy-named store retained for existing imports and credential migration. */
+export declare class GrokBuildCredentialStore extends OAuthCredentialFileStore {
+    constructor(filename?: string);
+}
+//# sourceMappingURL=store.d.ts.map

package/lib/store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"store.d.ts","sourceRoot":"","sources":["../../src/store.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAMH,OAAO,KAAK,EAAE,UAAU,EAAE,cAAc,EAAE,eAAe,EAAmB,MAAM,uBAAuB,CAAC;AAgE1G,gEAAgE;AAChE,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,MAAM,CAW9E;AAED,yDAAyD;AACzD,wBAAgB,iBAAiB,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,MAAM,CAE1D;AAED;;;GAGG;AACH,qBAAa,wBAAyB,YAAW,eAAe;IAI9D,QAAQ,CAAC,UAAU,EAAE,MAAM;IAE3B,OAAO,CAAC,QAAQ,CAAC,KAAK;IALvB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;gBAGhB,UAAU,EAAE,MAAM,EAC3B,QAAQ,EAAE,MAAM,EACC,KAAK,EAAE,MAAM;YAKjB,WAAW;IAIzB;;;;OAIG;YACW,WAAW;IAmBzB,mFAAmF;YACrE,4BAA4B;IAYpC,IAAI,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,GAAG,SAAS,CAAC;IAIzD,IAAI,IAAI,OAAO,CAAC,SAAS,cAAc,EAAE,CAAC;IAI1C,MAAM,CACX,UAAU,EAAE,MAAM,EAClB,EAAE,EAAE,CAAC,OAAO,EAAE,UAAU,GAAG,SAAS,KAAK,OAAO,CAAC,UAAU,GAAG,SAAS,CAAC,GACtE,OAAO,CAAC,UAAU,GAAG,SAAS,CAAC;IA0BlC;;;;;;;OAOG;IACG,UAAU,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAWhD,MAAM,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;CAK/C;AAED,iFAAiF;AACjF,qBAAa,wBAAyB,SAAQ,wBAAwB;gBACzD,QAAQ,GAAE,MAA4B;CAGlD"}

package/lib/web-origin.d.ts

@@ -0,0 +1,10 @@
+/**
+ * Loopback + same-origin authorization shared by private plugin Web routes.
+ * Rejecting non-loopback Host values closes DNS-rebinding access even when the
+ * TCP peer itself is 127.0.0.1 or ::1.
+ * @module dsh-coding-subscription-oauth/web-origin
+ */
+import type { IncomingMessage } from "node:http";
+/** Authorize one browser request for owner-local exact/settings routes. */
+export declare function isTrustedLoopbackWebRequest(req: IncomingMessage): boolean;
+//# sourceMappingURL=web-origin.d.ts.map

package/lib/web-origin.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"web-origin.d.ts","sourceRoot":"","sources":["../../src/web-origin.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,WAAW,CAAC;AAEjD,2EAA2E;AAC3E,wBAAgB,2BAA2B,CAAC,GAAG,EAAE,eAAe,GAAG,OAAO,CAezE"}

package/lib/web-routes.d.ts

@@ -0,0 +1,20 @@
+/**
+ * Atomic registration helper for plugin-owned Web routes.
+ * `webServer.register()` is not fiber-scoped, so a later registration failure
+ * must release every earlier route before the setup error escapes.
+ * @module dsh-coding-subscription-oauth/web-routes
+ */
+import type { IncomingMessage, ServerResponse } from "node:http";
+export interface PluginWebRoute {
+    readonly kind: "exact" | "prefix";
+    readonly path: string;
+    readonly handler: (req: IncomingMessage, res: ServerResponse) => void | Promise<void>;
+}
+export interface PluginWebRouteRegistry {
+    register(route: PluginWebRoute): () => void;
+}
+/** Run imperative route setup or roll every successful registration back. */
+export declare function registerWebRouteSetupAtomically(registry: PluginWebRouteRegistry, setup: (tracked: PluginWebRouteRegistry) => unknown): () => void;
+/** Register all routes or leave the registry exactly as it was. */
+export declare function registerWebRoutesAtomically(registry: PluginWebRouteRegistry, routes: readonly PluginWebRoute[]): () => void;
+//# sourceMappingURL=web-routes.d.ts.map

package/lib/web-routes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"web-routes.d.ts","sourceRoot":"","sources":["../../src/web-routes.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAEjE,MAAM,WAAW,cAAc;IAC9B,QAAQ,CAAC,IAAI,EAAE,OAAO,GAAG,QAAQ,CAAC;IAClC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,eAAe,EAAE,GAAG,EAAE,cAAc,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACtF;AAED,MAAM,WAAW,sBAAsB;IACtC,QAAQ,CAAC,KAAK,EAAE,cAAc,GAAG,MAAM,IAAI,CAAC;CAC5C;AAED,6EAA6E;AAC7E,wBAAgB,+BAA+B,CAC9C,QAAQ,EAAE,sBAAsB,EAChC,KAAK,EAAE,CAAC,OAAO,EAAE,sBAAsB,KAAK,OAAO,GACjD,MAAM,IAAI,CAqBZ;AAED,mEAAmE;AACnE,wBAAgB,2BAA2B,CAC1C,QAAQ,EAAE,sBAAsB,EAChC,MAAM,EAAE,SAAS,cAAc,EAAE,GAC/B,MAAM,IAAI,CAcZ"}

package/package.json

@@ -0,0 +1,185 @@
+{
+  "name": "dsh-coding-subscription-oauth",
+  "description": "DeepSeek Harness coding-subscription OAuth: SuperGrok/Grok Build, ChatGPT Plus Codex, Kimi Code, Claude Code. Fixes AUTH API key is invalid, INVALID_REPLAY_STATE, grok-4.6 xhigh, Kimi Bearer vs x-api-key.",
+  "version": "0.5.0",
+  "publishConfig": {
+    "access": "public",
+    "registry": "https://registry.npmjs.org/"
+  },
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/lninghaha/dsh-coding-subscription-oauth.git"
+  },
+  "bugs": "https://github.com/lninghaha/dsh-coding-subscription-oauth/issues",
+  "homepage": "https://github.com/lninghaha/dsh-coding-subscription-oauth#readme",
+  "keywords": [
+    "deepseek-harness",
+    "dsh-plugin",
+    "oauth",
+    "grok-build",
+    "super-grok",
+    "grok-4.6",
+    "cli-chat-proxy",
+    "openai-codex",
+    "chatgpt-plus",
+    "kimi-code",
+    "claude-code",
+    "google-antigravity",
+    "xhigh",
+    "device-code"
+  ],
+  "type": "module",
+  "packageManager": "pnpm@11.21.0",
+  "engines": {
+    "node": "^22.19.0 || >=24.0.0"
+  },
+  "main": "lib/index.js",
+  "types": "lib/index.d.ts",
+  "bin": {
+    "dsh-coding-oauth": "lib/bin.js",
+    "dsh-grok-build": "lib/bin.js"
+  },
+  "scripts": {
+    "clean": "node build/clean.mjs",
+    "typecheck": "tsc -b tsconfig.host.json tsconfig.client.json",
+    "build:server": "tsc -p tsconfig.build.json && tsc -p tsconfig.dts-bin.json && node build/build-server.mjs",
+    "build:client": "node build/build-client.mjs",
+    "build:artifacts": "pnpm run clean && pnpm run typecheck && pnpm run build:server && pnpm run build:client",
+    "build": "pnpm run release:build",
+    "test": "vitest run",
+    "test:watch": "vitest",
+    "lint": "biome check",
+    "check:next": "pnpm run lint && pnpm run typecheck && pnpm run test",
+    "check": "pnpm run lint && pnpm run release:build && pnpm run test",
+    "release:promote": "node build/promote-release.mjs",
+    "release:verify": "node build/verify-release.mjs",
+    "release:build": "pnpm run build:artifacts && pnpm run release:promote",
+    "release:dry": "node scripts/release.mjs --dry-run",
+    "release:pack": "node scripts/release.mjs --pack",
+    "verify:deployed": "node scripts/verify-deployed-catalog.mjs",
+    "smoke:deployed": "node scripts/smoke-deployed-routes.mjs",
+    "prepack": "pnpm run release:build"
+  },
+  "exports": {
+    ".": {
+      "types": "./lib/index.d.ts",
+      "default": "./lib/index.js"
+    },
+    "./invariant": {
+      "types": "./lib/invariant.d.ts",
+      "default": "./lib/invariant.js"
+    },
+    "./client": "./lib/client.js",
+    "./cordis.patch.yml": "./cordis.patch.yml",
+    "./package.json": "./package.json"
+  },
+  "files": [
+    "lib",
+    "src",
+    "cordis.patch.yml",
+    "INSTALL.md",
+    "CHANGELOG.md",
+    "CONTRIBUTING.md",
+    "docs/00-project-rules.md",
+    "docs/02-architecture.md",
+    "docs/02-architecture.zh-CN.md",
+    "README.zh-CN.md",
+    "README.ja.md",
+    "README.ko.md",
+    "README.pt-BR.md",
+    "README.es.md",
+    "README.fr.md",
+    "README.de.md",
+    "README.ru.md",
+    "patches/dsh-agy@0.1.2.patch",
+    "scripts/verify-deployed-catalog.mjs",
+    "scripts/smoke-deployed-routes.mjs",
+    "scripts/release.mjs",
+    "LICENSE",
+    "NOTICE"
+  ],
+  "license": "Apache-2.0",
+  "dsh": {
+    "bundle": {
+      "patch": "./cordis.patch.yml"
+    },
+    "client": {
+      "inject": [
+        "@deepseek-ai/dsh-client-runtime",
+        "@deepseek-ai/dsh-client-ui-settings",
+        "@deepseek-ai/dsh-client-locale"
+      ],
+      "platform": "web"
+    }
+  },
+  "dependencies": {
+    "undici": "^7.24.8"
+  },
+  "peerDependencies": {
+    "@deepseek-ai/cordis": "^4.0.1-rc.1",
+    "@deepseek-ai/dsh-atomic-write": "0.1.0-rc.6",
+    "@deepseek-ai/dsh-attachment": "*",
+    "@deepseek-ai/dsh-credentials": "*",
+    "@deepseek-ai/dsh-home-paths": "0.1.0-rc.6",
+    "@deepseek-ai/dsh-host-webserver": "*",
+    "@deepseek-ai/dsh-invariants": "*",
+    "@deepseek-ai/dsh-llm": "0.1.0-rc.6",
+    "@deepseek-ai/dsh-llm-pi-ai": "0.1.0-rc.6",
+    "@deepseek-ai/dsh-tools": "*",
+    "@deepseek-ai/schemastery": "3.18.1",
+    "@earendil-works/pi-ai": "0.84.2",
+    "react": "^18.2.0"
+  },
+  "peerDependenciesMeta": {
+    "@deepseek-ai/cordis": {
+      "optional": true
+    },
+    "@deepseek-ai/dsh-attachment": {
+      "optional": true
+    },
+    "@deepseek-ai/dsh-credentials": {
+      "optional": true
+    },
+    "@deepseek-ai/dsh-host-webserver": {
+      "optional": true
+    },
+    "@deepseek-ai/dsh-invariants": {
+      "optional": true
+    },
+    "@deepseek-ai/dsh-tools": {
+      "optional": true
+    },
+    "react": {
+      "optional": true
+    }
+  },
+  "devDependencies": {
+    "@biomejs/biome": "^2.5.8",
+    "@deepseek-ai/cordis": "^4.0.1",
+    "@deepseek-ai/dsh-atomic-write": "0.1.0-rc.6",
+    "@deepseek-ai/dsh-attachment": "0.1.0-rc.6",
+    "@deepseek-ai/dsh-client-locale": "0.1.0-rc.6",
+    "@deepseek-ai/dsh-client-runtime": "0.1.0-rc.6",
+    "@deepseek-ai/dsh-client-ui-settings": "0.1.0-rc.6",
+    "@deepseek-ai/dsh-client-ui-slots": "0.1.0-rc.6",
+    "@deepseek-ai/dsh-credentials": "0.1.0-rc.6",
+    "@deepseek-ai/dsh-home-paths": "0.1.0-rc.6",
+    "@deepseek-ai/dsh-host-webserver": "0.1.0-rc.6",
+    "@deepseek-ai/dsh-invariants": "0.1.0-rc.6",
+    "@deepseek-ai/dsh-llm": "0.1.0-rc.6",
+    "@deepseek-ai/dsh-llm-pi-ai": "0.1.0-rc.6",
+    "@deepseek-ai/dsh-tools": "0.1.0-rc.6",
+    "@deepseek-ai/schemastery": "3.18.1",
+    "@earendil-works/pi-ai": "0.84.2",
+    "@types/node": "^22.20.0",
+    "@types/react": "~18.3.1",
+    "esbuild": "^0.28.2",
+    "react": "^18.2.0",
+    "typescript": "^6.0.3",
+    "undici": "^7.24.8",
+    "vitest": "^4.1.8"
+  },
+  "overrides": {
+    "@earendil-works/pi-ai": "0.84.2"
+  }
+}

package/patches/dsh-agy@0.1.2.patch

@@ -0,0 +1,25 @@
+diff --git a/lib/plugin-common-YSDKp1DG.mjs b/lib/plugin-common-YSDKp1DG.mjs
+index 3bd4405d9010705cdbfb675e62538645c4af5321..aeb9dd8375ac4dfc0376b525f44e4cf8eba67719 100644
+--- a/lib/plugin-common-YSDKp1DG.mjs
++++ b/lib/plugin-common-YSDKp1DG.mjs
+@@ -135,12 +135,17 @@ var AgyAdapter = class extends LlmAdapter {
+ 	providerInfo(_provider) {
+ 		return {
+ 			id: "agy",
+-			name: "Antigravity (agy)"
++			name: "Google Antigravity (OAuth)"
+ 		};
+ 	}
+ 	async listModels(_provider) {
+-		const session = await this.options.getSession();
+-		return listAgyModels(session?.auth.access, session?.account.projectId);
++		try {
++			const session = await this.options.getSession();
++			if (!session) return [];
++			return listAgyModels(session.auth.access, session.account.projectId);
++		} catch {
++			return [];
++		}
+ 	}
+ 	async resolveModel(provider, model) {
+ 		return resolveAgyModel(provider, model);

package/scripts/release.mjs

@@ -0,0 +1,166 @@
+#!/usr/bin/env node
+/**
+ * Local release verifier/packer.
+ *
+ * This helper never bumps versions, commits, tags, pushes, or publishes. Those
+ * operations require an explicit human decision outside this script.
+ */
+import { spawnSync } from "node:child_process";
+import { access, mkdir, readFile, rename, rm } from "node:fs/promises";
+import { dirname, join, resolve } from "node:path";
+import { fileURLToPath } from "node:url";
+
+const root = resolve(dirname(fileURLToPath(import.meta.url)), "..");
+const output = join(root, "output");
+const knownFlags = new Set(["--dry-run", "--pack", "--help"]);
+const args = new Set(process.argv.slice(2));
+for (const argument of args) {
+	if (!knownFlags.has(argument)) {
+		console.error(`Unknown option: ${argument}`);
+		process.exit(2);
+	}
+}
+if (args.has("--dry-run") && args.has("--pack")) {
+	console.error("Choose either --dry-run or --pack, not both.");
+	process.exit(2);
+}
+if (args.has("--help")) {
+	console.log(`dsh-coding-subscription-oauth release helper
+
+Usage:
+  node scripts/release.mjs --dry-run   Verify current release artifacts and packed file list
+  node scripts/release.mjs --pack      Rebuild, verify, and write a local tarball under output/
+
+This command never changes versions, commits, tags, pushes, or publishes.`);
+	process.exit(0);
+}
+
+const mode = args.has("--pack") ? "pack" : "dry-run";
+const manifest = JSON.parse(await readFile(join(root, "package.json"), "utf8"));
+const changelog = await readFile(join(root, "CHANGELOG.md"), "utf8");
+const readme = await readFile(join(root, "README.md"), "utf8");
+const expectedName = "dsh-coding-subscription-oauth";
+const semver = /^\d+\.\d+\.\d+(?:[-+][0-9A-Za-z.-]+)?$/u;
+
+function fail(message) {
+	throw new Error(message);
+}
+
+function run(command, commandArgs, options = {}) {
+	const result = spawnSync(command, commandArgs, {
+		cwd: root,
+		encoding: "utf8",
+		stdio: options.capture === true ? ["ignore", "pipe", "pipe"] : "inherit",
+	});
+	if (result.error !== undefined) throw result.error;
+	if (result.status !== 0) {
+		const details = options.capture === true ? `${result.stderr ?? ""}${result.stdout ?? ""}`.trim() : "";
+		fail(`${command} ${commandArgs.join(" ")} failed${details === "" ? "" : `:\n${details}`}`);
+	}
+	return result.stdout ?? "";
+}
+
+if (manifest.name !== expectedName) fail(`package name must be ${expectedName}; found ${String(manifest.name)}`);
+if (typeof manifest.version !== "string" || !semver.test(manifest.version)) {
+	fail(`package version is not valid semver: ${String(manifest.version)}`);
+}
+if (manifest.private === true) fail("release package must not be private");
+
+const releaseVersions = [
+	...changelog.matchAll(/^##\s+v?(\d+\.\d+\.\d+(?:[-+][0-9A-Za-z.-]+)?)(?:\s+-\s+\d{4}-\d{2}-\d{2})?\s*$/gmu),
+].map((match) => match[1]);
+if (releaseVersions[0] !== manifest.version) {
+	fail(`top CHANGELOG release (${releaseVersions[0] ?? "missing"}) does not match package version ${manifest.version}`);
+}
+if (!readme.includes(manifest.version)) fail(`README.md does not mention ${manifest.version}`);
+
+if (mode === "pack") run("pnpm", ["run", "release:build"]);
+else run("pnpm", ["run", "release:verify"]);
+
+const packOutput = run("npm", ["pack", "--dry-run", "--json", "--ignore-scripts"], { capture: true });
+let packReport;
+try {
+	packReport = JSON.parse(packOutput);
+} catch (error) {
+	throw new Error("npm pack --dry-run returned invalid JSON", { cause: error });
+}
+const report = Array.isArray(packReport) ? packReport[0] : undefined;
+if (report === undefined || !Array.isArray(report.files)) fail("npm pack did not return a file manifest");
+const packedFiles = report.files.map((entry) => entry.path).sort();
+const packed = new Set(packedFiles);
+const missingModes = report.files.filter((entry) => typeof entry.mode !== "number").map((entry) => entry.path);
+if (missingModes.length > 0) fail(`npm pack omitted file modes:\n${missingModes.sort().join("\n")}`);
+const privateModes = report.files
+	.filter((entry) => typeof entry.mode === "number" && (entry.mode & 0o044) !== 0o044)
+	.map((entry) => `${entry.path} (${entry.mode.toString(8)})`)
+	.sort();
+if (privateModes.length > 0)
+	fail(`packed release contains files unreadable outside their owner:\n${privateModes.join("\n")}`);
+const writableModes = report.files
+	.filter((entry) => typeof entry.mode === "number" && (entry.mode & 0o022) !== 0)
+	.map((entry) => `${entry.path} (${entry.mode.toString(8)})`)
+	.sort();
+if (writableModes.length > 0) fail(`packed release contains group/world-writable files:\n${writableModes.join("\n")}`);
+for (const required of [
+	"package.json",
+	"README.md",
+	"LICENSE",
+	"cordis.patch.yml",
+	"lib/index.js",
+	"lib/index.d.ts",
+	"lib/client.js",
+	"lib/bin.js",
+	"lib/invariant.js",
+]) {
+	if (!packed.has(required)) fail(`packed release is missing ${required}`);
+}
+const packedBin = report.files.find((entry) => entry.path === "lib/bin.js");
+if (typeof packedBin?.mode === "number" && (packedBin.mode & 0o111) === 0) {
+	fail(`packed CLI is not executable: lib/bin.js (${packedBin.mode.toString(8)})`);
+}
+const forbiddenFragments = [
+	"docs/local",
+	"reference/",
+	".env",
+	".secrets",
+	"package-lock.json",
+	"tsdown.config",
+	"lib/client.cjs",
+	"docs/MIGRATION.md",
+];
+const leaked = packedFiles.filter((path) => forbiddenFragments.some((fragment) => path.includes(fragment)));
+if (leaked.length > 0) fail(`packed release contains forbidden files:\n${leaked.join("\n")}`);
+
+console.log(`Verified ${manifest.name}@${manifest.version}`);
+console.log(`Packed files: ${packedFiles.length}`);
+
+if (mode === "dry-run") {
+	console.log("Dry-run complete. No version, Git, registry, or tarball changes were made.");
+	process.exit(0);
+}
+
+const staging = join(output, `.pack-${process.pid}`);
+await rm(staging, { recursive: true, force: true });
+await mkdir(staging, { recursive: true });
+try {
+	const actualOutput = run("npm", ["pack", "--json", "--ignore-scripts", "--pack-destination", staging], {
+		capture: true,
+	});
+	let actualReport;
+	try {
+		actualReport = JSON.parse(actualOutput);
+	} catch (error) {
+		throw new Error("npm pack returned invalid JSON", { cause: error });
+	}
+	const filename = Array.isArray(actualReport) ? actualReport[0]?.filename : undefined;
+	if (typeof filename !== "string" || filename.length === 0) fail("npm pack did not report a tarball filename");
+	const source = join(staging, filename);
+	await access(source);
+	await mkdir(output, { recursive: true });
+	const target = join(output, `${manifest.name}-${manifest.version}.tgz`);
+	await rm(target, { force: true });
+	await rename(source, target);
+	console.log(`Wrote ${target}`);
+} finally {
+	await rm(staging, { recursive: true, force: true });
+}