gsd-pi 2.77.0-dev.eaa4973bc → 2.78.0

package/src/resources/extensions/voice/tests/linux-ready.test.ts

@@ -5,120 +5,136 @@
  *   - diagnoseSounddeviceError branch ordering (ModuleNotFoundError must NOT
  *     match the portaudio branch, even though it contains "sounddevice")
  *   - ensureVoiceVenv auto-creation
- *   - linuxPython venv detection
+ *
+ * Previous version used `createTestContext()` + a top-level `main()` call —
+ * those don't register with `node --test`, so the file ran at import time
+ * but the test runner saw zero tests. CI reporter showed no output for
+ * this file. Rewrite uses `node:test` so results are collected properly.
+ * See #4809 / #4784.
  */
 
-import { createTestContext } from "../../gsd/tests/test-helpers.ts";
-import { diagnoseSounddeviceError, ensureVoiceVenv } from "../linux-ready.ts";
-
-const { assertEq, assertTrue, report } = createTestContext();
-
-function main(): void {
-	// ── diagnoseSounddeviceError ──────────────────────────────────────────
-
-	// The critical regression: "ModuleNotFoundError: No module named 'sounddevice'"
-	// contains the word "sounddevice", so the old code matched the portaudio branch.
-	console.log("\n=== diagnoseSounddeviceError: ModuleNotFoundError must return missing-module ===");
-	{
-		const stderr = "Traceback (most recent call last):\n  File \"<string>\", line 1, in <module>\nModuleNotFoundError: No module named 'sounddevice'";
-		assertEq(diagnoseSounddeviceError(stderr), "missing-module",
-			"ModuleNotFoundError for sounddevice should be 'missing-module', not 'missing-portaudio'");
-	}
-
-	console.log("\n=== diagnoseSounddeviceError: 'No module named sounddevice' variant ===");
-	{
-		const stderr = "ImportError: No module named sounddevice";
-		assertEq(diagnoseSounddeviceError(stderr), "missing-module",
-			"'No module' substring should return missing-module");
-	}
-
-	console.log("\n=== diagnoseSounddeviceError: actual portaudio error ===");
-	{
-		const stderr = "OSError: PortAudio library not found";
-		assertEq(diagnoseSounddeviceError(stderr), "missing-portaudio",
-			"PortAudio library error should return missing-portaudio");
-	}
-
-	console.log("\n=== diagnoseSounddeviceError: lowercase portaudio error ===");
-	{
-		const stderr = "OSError: libportaudio.so.2: cannot open shared object file: No such file or directory";
-		assertEq(diagnoseSounddeviceError(stderr), "missing-portaudio",
-			"lowercase portaudio error should return missing-portaudio");
-	}
-
-	console.log("\n=== diagnoseSounddeviceError: unrelated error ===");
-	{
-		const stderr = "SyntaxError: invalid syntax";
-		assertEq(diagnoseSounddeviceError(stderr), "unknown",
-			"unrelated error should return unknown");
-	}
-
-	console.log("\n=== diagnoseSounddeviceError: empty stderr ===");
-	{
-		assertEq(diagnoseSounddeviceError(""), "unknown",
-			"empty stderr should return unknown");
-	}
+import { describe, test } from "node:test";
+import assert from "node:assert/strict";
 
-	// ── ensureVoiceVenv ──────────────────────────────────────────────────
-
-	console.log("\n=== ensureVoiceVenv: returns true when venv already exists ===");
-	{
-		const notifications: string[] = [];
-		const result = ensureVoiceVenv({
-			notify: (msg) => notifications.push(msg),
-			exists: () => true,
-			execFile: (() => Buffer.from("")) as any,
-		});
-		assertTrue(result, "should return true when venv exists");
-		assertEq(notifications.length, 0, "should not notify when venv exists");
-	}
-
-	console.log("\n=== ensureVoiceVenv: creates venv when missing ===");
-	{
-		const notifications: string[] = [];
-		const commands: string[][] = [];
-		let existsCalled = false;
-
-		const result = ensureVoiceVenv({
-			notify: (msg) => notifications.push(msg),
-			exists: () => { existsCalled = true; return false; },
-			execFile: ((cmd: string, args: string[]) => {
-				commands.push([cmd, ...args]);
-				return Buffer.from("");
-			}) as any,
-		});
-
-		assertTrue(result, "should return true after venv creation");
-		assertTrue(existsCalled, "should check if venv exists");
-		assertEq(commands.length, 2, "should run 2 commands (venv + pip)");
-		assertTrue(commands[0][0] === "python3", "first command is python3");
-		assertTrue(commands[0].includes("-m") && commands[0].includes("venv"),
-			"first command creates venv");
-		assertTrue(commands[1][0].endsWith("bin/pip"), "second command is pip");
-		assertTrue(commands[1].includes("sounddevice"), "pip installs sounddevice");
-		assertTrue(commands[1].includes("requests"), "pip installs requests");
-		assertTrue(notifications[0].includes("one-time setup"),
-			"notifies about one-time setup");
-	}
-
-	console.log("\n=== ensureVoiceVenv: returns false and notifies on failure ===");
-	{
-		const notifications: Array<{ msg: string; level: string }> = [];
-
-		const result = ensureVoiceVenv({
-			notify: (msg, level) => notifications.push({ msg, level }),
-			exists: () => false,
-			execFile: (() => { throw new Error("externally-managed-environment"); }) as any,
-		});
-
-		assertTrue(!result, "should return false on failure");
-		const errorNotif = notifications.find(n => n.level === "error");
-		assertTrue(errorNotif !== undefined, "should emit error notification");
-		assertTrue(errorNotif!.msg.includes("python3 -m venv"),
-			"error message should suggest manual venv creation");
-	}
-
-	report();
-}
+import { diagnoseSounddeviceError, ensureVoiceVenv } from "../linux-ready.ts";
 
-main();
+describe("diagnoseSounddeviceError (#2403 branch ordering)", () => {
+  test("ModuleNotFoundError with 'sounddevice' in message → missing-module", () => {
+    // The critical regression: the stderr string contains "sounddevice",
+    // so a naive branch-order check would match the portaudio branch
+    // first. Correct classification is missing-module.
+    const stderr =
+      "Traceback (most recent call last):\n" +
+      '  File "<string>", line 1, in <module>\n' +
+      "ModuleNotFoundError: No module named 'sounddevice'";
+    assert.equal(diagnoseSounddeviceError(stderr), "missing-module");
+  });
+
+  test("ImportError: No module named sounddevice → missing-module", () => {
+    assert.equal(
+      diagnoseSounddeviceError("ImportError: No module named sounddevice"),
+      "missing-module",
+    );
+  });
+
+  test("PortAudio library not found → missing-portaudio", () => {
+    assert.equal(
+      diagnoseSounddeviceError("OSError: PortAudio library not found"),
+      "missing-portaudio",
+    );
+  });
+
+  test("libportaudio.so.2 cannot open → missing-portaudio (lowercase variant)", () => {
+    assert.equal(
+      diagnoseSounddeviceError(
+        "OSError: libportaudio.so.2: cannot open shared object file: No such file or directory",
+      ),
+      "missing-portaudio",
+    );
+  });
+
+  test("unrelated SyntaxError → unknown", () => {
+    assert.equal(
+      diagnoseSounddeviceError("SyntaxError: invalid syntax"),
+      "unknown",
+    );
+  });
+
+  test("empty stderr → unknown", () => {
+    assert.equal(diagnoseSounddeviceError(""), "unknown");
+  });
+});
+
+describe("ensureVoiceVenv", () => {
+  test("returns true without notifying when venv already exists", () => {
+    const notifications: string[] = [];
+    const result = ensureVoiceVenv({
+      notify: (msg) => notifications.push(msg),
+      exists: () => true,
+      execFile: (() => Buffer.from("")) as never,
+    });
+    assert.equal(result, true);
+    assert.equal(
+      notifications.length,
+      0,
+      "should not notify when venv already exists",
+    );
+  });
+
+  test("creates venv and installs sounddevice+requests when venv missing", () => {
+    const notifications: string[] = [];
+    const commands: string[][] = [];
+    let existsCalled = false;
+
+    const result = ensureVoiceVenv({
+      notify: (msg) => notifications.push(msg),
+      exists: () => {
+        existsCalled = true;
+        return false;
+      },
+      execFile: ((cmd: string, args: string[]) => {
+        commands.push([cmd, ...args]);
+        return Buffer.from("");
+      }) as never,
+    });
+
+    assert.equal(result, true);
+    assert.ok(existsCalled, "should check if venv exists first");
+    assert.equal(commands.length, 2, "should run 2 commands (venv + pip)");
+    assert.equal(commands[0]![0], "python3", "first command is python3");
+    assert.ok(
+      commands[0]!.includes("-m") && commands[0]!.includes("venv"),
+      "first command creates the venv",
+    );
+    assert.ok(
+      commands[1]![0]!.endsWith("bin/pip"),
+      "second command is pip from the new venv",
+    );
+    assert.ok(commands[1]!.includes("sounddevice"), "pip installs sounddevice");
+    assert.ok(commands[1]!.includes("requests"), "pip installs requests");
+    assert.ok(
+      notifications[0]!.includes("one-time setup"),
+      "notifies user this is one-time setup",
+    );
+  });
+
+  test("returns false and emits an error notification when venv creation fails", () => {
+    const notifications: Array<{ msg: string; level?: string }> = [];
+
+    const result = ensureVoiceVenv({
+      notify: (msg, level) => notifications.push({ msg, level }),
+      exists: () => false,
+      execFile: (() => {
+        throw new Error("externally-managed-environment");
+      }) as never,
+    });
+
+    assert.equal(result, false);
+    const errorNotif = notifications.find((n) => n.level === "error");
+    assert.ok(errorNotif, "must emit an error notification on failure");
+    assert.ok(
+      errorNotif!.msg.includes("python3 -m venv"),
+      "error notification suggests manual venv creation",
+    );
+  });
+});

package/dist/web/standalone/.next/static/chunks/app/page-5b113fd32bc2a1c3.js

@@ -1 +0,0 @@
-(self.webpackChunk_N_E=self.webpackChunk_N_E||[]).push([[8974],{2600:(e,t,n)=>{Promise.resolve().then(n.bind(n,66919))},5214:(e,t,n)=>{"use strict";Object.defineProperty(t,"__esModule",{value:!0}),Object.defineProperty(t,"workAsyncStorage",{enumerable:!0,get:function(){return r.workAsyncStorageInstance}});let r=n(17828)},17828:(e,t,n)=>{"use strict";Object.defineProperty(t,"__esModule",{value:!0}),Object.defineProperty(t,"workAsyncStorageInstance",{enumerable:!0,get:function(){return r}});let r=(0,n(64054).createAsyncLocalStorage)()},21957:(e,t,n)=>{"use strict";function r({moduleIds:e}){return null}Object.defineProperty(t,"__esModule",{value:!0}),Object.defineProperty(t,"PreloadChunks",{enumerable:!0,get:function(){return r}}),n(95155),n(47650),n(5214),n(2451),n(53887)},37206:(e,t,n)=>{"use strict";n.d(t,{default:()=>u.a});var r=n(75707),u=n.n(r)},41112:(e,t,n)=>{"use strict";function r({reason:e,children:t}){return t}Object.defineProperty(t,"__esModule",{value:!0}),Object.defineProperty(t,"BailoutToCSR",{enumerable:!0,get:function(){return r}}),n(1980)},64054:(e,t)=>{"use strict";Object.defineProperty(t,"__esModule",{value:!0});var n={bindSnapshot:function(){return s},createAsyncLocalStorage:function(){return a},createSnapshot:function(){return i}};for(var r in n)Object.defineProperty(t,r,{enumerable:!0,get:n[r]});let u=Object.defineProperty(Error("Invariant: AsyncLocalStorage accessed in runtime where it is not available"),"__NEXT_ERROR_CODE",{value:"E504",enumerable:!1,configurable:!0});class l{disable(){throw u}getStore(){}run(){throw u}exit(){throw u}enterWith(){throw u}static bind(e){return e}}let o="u">typeof globalThis&&globalThis.AsyncLocalStorage;function a(){return o?new o:new l}function s(e){return o?o.bind(e):l.bind(e)}function i(){return o?o.snapshot():function(e,...t){return e(...t)}}},66919:(e,t,n)=>{"use strict";n.r(t),n.d(t,{default:()=>l});var r=n(95155);let u=(0,n(37206).default)(()=>Promise.all([n.e(1838),n.e(6079),n.e(4986),n.e(3621),n.e(2826)]).then(n.bind(n,62826)).then(e=>e.GSDAppShell),{loadableGenerated:{webpack:()=>[62826]},ssr:!1,loading:()=>(0,r.jsx)("div",{className:"flex h-screen items-center justify-center bg-background text-sm text-muted-foreground",children:"Loading workspace…"})});function l(){return(0,r.jsx)(u,{})}},68635:(e,t,n)=>{"use strict";Object.defineProperty(t,"__esModule",{value:!0}),Object.defineProperty(t,"default",{enumerable:!0,get:function(){return s}});let r=n(95155),u=n(12115),l=n(41112);function o(e){return{default:e&&"default"in e?e.default:e}}n(21957);let a={loader:()=>Promise.resolve(o(()=>null)),loading:null,ssr:!0},s=function(e){let t={...a,...e},n=(0,u.lazy)(()=>t.loader().then(o)),s=t.loading;function i(e){let o=s?(0,r.jsx)(s,{isLoading:!0,pastDelay:!0,error:null}):null,a=!t.ssr||!!t.loading,i=a?u.Suspense:u.Fragment,c=t.ssr?(0,r.jsxs)(r.Fragment,{children:[null,(0,r.jsx)(n,{...e})]}):(0,r.jsx)(l.BailoutToCSR,{reason:"next/dynamic",children:(0,r.jsx)(n,{...e})});return(0,r.jsx)(i,{...a?{fallback:o}:{},children:c})}return i.displayName="LoadableComponent",i}},75707:(e,t,n)=>{"use strict";Object.defineProperty(t,"__esModule",{value:!0}),Object.defineProperty(t,"default",{enumerable:!0,get:function(){return u}});let r=n(73623)._(n(68635));function u(e,t){let n={};"function"==typeof e&&(n.loader=e);let u={...n,...t};return(0,r.default)({...u,modules:u.loadableGenerated?.modules})}("function"==typeof t.default||"object"==typeof t.default&&null!==t.default)&&void 0===t.default.__esModule&&(Object.defineProperty(t.default,"__esModule",{value:!0}),Object.assign(t.default,t),e.exports=t.default)}},e=>{e.O(0,[8441,3794,7358],()=>e(e.s=2600)),_N_E=e.O()}]);

package/dist/web/standalone/.next/static/chunks/main-app-fdab67f7802d7832.js

@@ -1 +0,0 @@
-(self.webpackChunk_N_E=self.webpackChunk_N_E||[]).push([[7358],{19393:()=>{},55548:(e,s,n)=>{Promise.resolve().then(n.t.bind(n,27123,23)),Promise.resolve().then(n.t.bind(n,61304,23)),Promise.resolve().then(n.t.bind(n,78616,23)),Promise.resolve().then(n.t.bind(n,64777,23)),Promise.resolve().then(n.t.bind(n,57121,23)),Promise.resolve().then(n.t.bind(n,74581,23)),Promise.resolve().then(n.t.bind(n,90484,23)),Promise.resolve().then(n.bind(n,86869))}},e=>{var s=s=>e(e.s=s);e.O(0,[8441,3794],()=>(s(83861),s(55548))),_N_E=e.O()}]);

package/dist/web/standalone/.next/static/chunks/next/dist/client/components/builtin/global-error-459824ffb8c323dd.js

@@ -1 +0,0 @@
-(self.webpackChunk_N_E=self.webpackChunk_N_E||[]).push([[9337],{43946:(e,s,_)=>{Promise.resolve().then(_.t.bind(_,27123,23))}},e=>{e.O(0,[8441,3794,7358],()=>e(e.s=43946)),_N_E=e.O()}]);

package/packages/pi-ai/dist/utils/oauth/oauth-providers.test.d.ts

@@ -1,2 +0,0 @@
-export {};
-//# sourceMappingURL=oauth-providers.test.d.ts.map

package/packages/pi-ai/dist/utils/oauth/oauth-providers.test.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"oauth-providers.test.d.ts","sourceRoot":"","sources":["../../../src/utils/oauth/oauth-providers.test.ts"],"names":[],"mappings":""}

package/packages/pi-ai/dist/utils/oauth/oauth-providers.test.js

@@ -1,289 +0,0 @@
-import { describe, test } from "node:test";
-import assert from "node:assert/strict";
-import { readFileSync } from "node:fs";
-import { join } from "node:path";
-import { fileURLToPath } from "node:url";
-// Test files that need to import from the OAuth modules
-import { githubCopilotOAuthProvider, normalizeDomain, getGitHubCopilotBaseUrl, } from "./github-copilot.js";
-import { antigravityOAuthProvider } from "./google-antigravity.js";
-import { geminiCliOAuthProvider } from "./google-gemini-cli.js";
-const __dirname = fileURLToPath(new URL(".", import.meta.url));
-// Helper to create a minimal model for testing
-function createModel(overrides = {}) {
-    return {
-        id: "test-model",
-        name: "Test Model",
-        api: "openai-completions",
-        provider: "test-provider",
-        baseUrl: "https://example.com",
-        reasoning: false,
-        input: ["text"],
-        cost: { input: 0, output: 0, cacheRead: 0, cacheWrite: 0 },
-        contextWindow: 128000,
-        maxTokens: 8192,
-        ...overrides,
-    };
-}
-// ═══════════════════════════════════════════════════════════════════════════
-// GitHub Copilot OAuth Provider Tests
-// ═══════════════════════════════════════════════════════════════════════════
-describe("GitHub Copilot OAuth — normalizeDomain", () => {
-    test("returns null for empty input", () => {
-        assert.equal(normalizeDomain(""), null);
-        assert.equal(normalizeDomain("   "), null);
-    });
-    test("returns null for invalid domain", () => {
-        assert.equal(normalizeDomain("not a domain!@#"), null);
-    });
-    test("extracts hostname from full URL", () => {
-        assert.equal(normalizeDomain("https://github.com"), "github.com");
-        assert.equal(normalizeDomain("https://company.ghe.com"), "company.ghe.com");
-        assert.equal(normalizeDomain("http://example.com/path"), "example.com");
-    });
-    test("returns domain as-is when no protocol", () => {
-        assert.equal(normalizeDomain("github.com"), "github.com");
-        assert.equal(normalizeDomain("company.ghe.com"), "company.ghe.com");
-    });
-    test("trims whitespace", () => {
-        assert.equal(normalizeDomain("  github.com  "), "github.com");
-    });
-});
-describe("GitHub Copilot OAuth — getBaseUrlFromToken", () => {
-    test("extracts API URL from token with proxy-ep", () => {
-        // Token format: tid=...;exp=...;proxy-ep=proxy.individual.githubcopilot.com;...
-        const token = "tid=123;exp=1234567890;proxy-ep=proxy.individual.githubcopilot.com;other=value";
-        const baseUrl = getGitHubCopilotBaseUrl(token);
-        assert.equal(baseUrl, "https://api.individual.githubcopilot.com");
-    });
-    test("extracts API URL from enterprise proxy-ep", () => {
-        const token = "tid=123;exp=1234567890;proxy-ep=proxy.company.ghe.com;other=value";
-        const baseUrl = getGitHubCopilotBaseUrl(token);
-        assert.equal(baseUrl, "https://api.company.ghe.com");
-    });
-    test("falls back to default when no token provided", () => {
-        const baseUrl = getGitHubCopilotBaseUrl();
-        assert.equal(baseUrl, "https://api.individual.githubcopilot.com");
-    });
-    test("falls back to default when token has no proxy-ep", () => {
-        const token = "tid=123;exp=1234567890;other=value";
-        const baseUrl = getGitHubCopilotBaseUrl(token);
-        assert.equal(baseUrl, "https://api.individual.githubcopilot.com");
-    });
-    test("uses enterprise domain when provided", () => {
-        const baseUrl = getGitHubCopilotBaseUrl(undefined, "company.ghe.com");
-        assert.equal(baseUrl, "https://copilot-api.company.ghe.com");
-    });
-    test("prioritizes token proxy-ep over enterprise domain", () => {
-        const token = "tid=123;exp=1234567890;proxy-ep=proxy.individual.githubcopilot.com;other=value";
-        const baseUrl = getGitHubCopilotBaseUrl(token, "company.ghe.com");
-        assert.equal(baseUrl, "https://api.individual.githubcopilot.com");
-    });
-});
-describe("GitHub Copilot OAuth — provider structure", () => {
-    test("has correct id and name", () => {
-        assert.equal(githubCopilotOAuthProvider.id, "github-copilot");
-        assert.equal(githubCopilotOAuthProvider.name, "GitHub Copilot");
-    });
-    test("has required methods", () => {
-        assert.equal(typeof githubCopilotOAuthProvider.login, "function");
-        assert.equal(typeof githubCopilotOAuthProvider.refreshToken, "function");
-        assert.equal(typeof githubCopilotOAuthProvider.getApiKey, "function");
-    });
-    test("getApiKey returns access token", () => {
-        const credentials = {
-            access: "test-access-token",
-            refresh: "test-refresh-token",
-            expires: Date.now() + 3600000,
-        };
-        const apiKey = githubCopilotOAuthProvider.getApiKey(credentials);
-        assert.equal(apiKey, "test-access-token");
-    });
-    test("modifyModels preserves non-Copilot models", () => {
-        if (!githubCopilotOAuthProvider.modifyModels)
-            return;
-        const models = [createModel({ id: "gpt-4", provider: "openai" })];
-        const credentials = {
-            access: "test-token",
-            refresh: "test-refresh",
-            expires: Date.now() + 3600000,
-        };
-        const result = githubCopilotOAuthProvider.modifyModels(models, credentials);
-        assert.deepEqual(result, models);
-    });
-    test("modifyModels updates Copilot model baseUrl when token has proxy-ep", () => {
-        if (!githubCopilotOAuthProvider.modifyModels)
-            return;
-        const models = [
-            createModel({
-                id: "claude-3.5-sonnet",
-                provider: "github-copilot",
-                baseUrl: "https://api.default.com",
-            }),
-        ];
-        const credentials = {
-            access: "tid=123;exp=1234567890;proxy-ep=proxy.individual.githubcopilot.com;",
-            refresh: "test-refresh",
-            expires: Date.now() + 3600000,
-        };
-        const result = githubCopilotOAuthProvider.modifyModels(models, credentials);
-        assert.equal(result[0].baseUrl, "https://api.individual.githubcopilot.com");
-    });
-    test("modifyModels applies model limits when available", () => {
-        if (!githubCopilotOAuthProvider.modifyModels)
-            return;
-        const models = [
-            createModel({
-                id: "claude-3.5-sonnet",
-                provider: "github-copilot",
-                baseUrl: "https://api.default.com",
-            }),
-        ];
-        const credentials = {
-            access: "test-token",
-            refresh: "test-refresh",
-            expires: Date.now() + 3600000,
-            modelLimits: {
-                "claude-3.5-sonnet": { contextWindow: 123456, maxTokens: 4096 },
-            },
-        };
-        const result = githubCopilotOAuthProvider.modifyModels(models, credentials);
-        assert.equal(result[0].contextWindow, 123456);
-        assert.equal(result[0].maxTokens, 4096);
-    });
-});
-// ═══════════════════════════════════════════════════════════════════════════
-// Antigravity OAuth Provider Tests
-// ═══════════════════════════════════════════════════════════════════════════
-describe("Antigravity OAuth — provider structure", () => {
-    test("has correct id and name", () => {
-        assert.equal(antigravityOAuthProvider.id, "google-antigravity");
-        assert.equal(antigravityOAuthProvider.name, "Antigravity (Gemini 3, Claude, GPT-OSS)");
-    });
-    test("uses callback server", () => {
-        assert.equal(antigravityOAuthProvider.usesCallbackServer, true);
-    });
-    test("has required methods", () => {
-        assert.equal(typeof antigravityOAuthProvider.login, "function");
-        assert.equal(typeof antigravityOAuthProvider.refreshToken, "function");
-        assert.equal(typeof antigravityOAuthProvider.getApiKey, "function");
-    });
-    test("getApiKey returns JSON with token and projectId", () => {
-        const credentials = {
-            access: "test-access-token",
-            refresh: "test-refresh-token",
-            expires: Date.now() + 3600000,
-            projectId: "test-project-123",
-            email: "test@example.com",
-        };
-        const apiKey = antigravityOAuthProvider.getApiKey(credentials);
-        assert.equal(typeof apiKey, "string");
-        const parsed = JSON.parse(apiKey);
-        assert.equal(parsed.token, "test-access-token");
-        assert.equal(parsed.projectId, "test-project-123");
-    });
-    test("refreshToken throws when projectId is missing", async () => {
-        const credentials = {
-            access: "test-access-token",
-            refresh: "test-refresh-token",
-            expires: Date.now() + 3600000,
-        };
-        await assert.rejects(antigravityOAuthProvider.refreshToken(credentials), /Antigravity credentials missing projectId/);
-    });
-});
-// ═══════════════════════════════════════════════════════════════════════════
-// Gemini CLI OAuth Provider Tests
-// ═══════════════════════════════════════════════════════════════════════════
-describe("Gemini CLI OAuth — provider structure", () => {
-    test("has correct id and name", () => {
-        assert.equal(geminiCliOAuthProvider.id, "google-gemini-cli");
-        assert.equal(geminiCliOAuthProvider.name, "Google Cloud Code Assist (Gemini CLI)");
-    });
-    test("uses callback server", () => {
-        assert.equal(geminiCliOAuthProvider.usesCallbackServer, true);
-    });
-    test("has required methods", () => {
-        assert.equal(typeof geminiCliOAuthProvider.login, "function");
-        assert.equal(typeof geminiCliOAuthProvider.refreshToken, "function");
-        assert.equal(typeof geminiCliOAuthProvider.getApiKey, "function");
-    });
-    test("getApiKey returns JSON with token and projectId", () => {
-        const credentials = {
-            access: "test-access-token",
-            refresh: "test-refresh-token",
-            expires: Date.now() + 3600000,
-            projectId: "test-project-456",
-            email: "test@example.com",
-        };
-        const apiKey = geminiCliOAuthProvider.getApiKey(credentials);
-        assert.equal(typeof apiKey, "string");
-        const parsed = JSON.parse(apiKey);
-        assert.equal(parsed.token, "test-access-token");
-        assert.equal(parsed.projectId, "test-project-456");
-    });
-    test("refreshToken throws when projectId is missing", async () => {
-        const credentials = {
-            access: "test-access-token",
-            refresh: "test-refresh-token",
-            expires: Date.now() + 3600000,
-        };
-        await assert.rejects(geminiCliOAuthProvider.refreshToken(credentials), /Google Cloud credentials missing projectId/);
-    });
-});
-// ═══════════════════════════════════════════════════════════════════════════
-// Regression tests for credential de-obfuscation
-//
-// These tests verify that OAuth credentials are stored in plaintext
-// (not base64-encoded) after the refactor in commit 289bb325c.
-// ═══════════════════════════════════════════════════════════════════════════
-describe("OAuth credentials — de-obfuscated regression", () => {
-    // Verify we can import the modules without decoding errors
-    test("GitHub Copilot module imports successfully", () => {
-        // If the module imports, the CLIENT_ID is valid plaintext
-        assert.ok(githubCopilotOAuthProvider);
-    });
-    test("Antigravity module imports successfully", () => {
-        assert.ok(antigravityOAuthProvider);
-    });
-    test("Gemini CLI module imports successfully", () => {
-        assert.ok(geminiCliOAuthProvider);
-    });
-    test("GitHub Copilot CLIENT_ID is plaintext (not base64)", () => {
-        const content = readFileSync(join(__dirname, "github-copilot.ts"), "utf-8");
-        // Should contain plaintext CLIENT_ID
-        assert.ok(content.includes('CLIENT_ID = "Iv1.b507a08c87ecfe98"'));
-        // Should NOT contain atob calls for de-obfuscation
-        assert.ok(!content.includes("atob("));
-    });
-    test("Antigravity CLIENT_ID and CLIENT_SECRET are plaintext", () => {
-        const content = readFileSync(join(__dirname, "google-antigravity.ts"), "utf-8");
-        // Should contain plaintext credentials
-        assert.ok(content.includes('CLIENT_ID = "1071006060591-tmhssin2h21lcre235vtolojh4g403ep.apps.googleusercontent.com"'));
-        assert.ok(content.includes('CLIENT_SECRET = "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"'));
-        // Should NOT contain atob calls for de-obfuscation
-        assert.ok(!content.includes("atob("));
-    });
-    test("Gemini CLI CLIENT_ID and CLIENT_SECRET are plaintext", () => {
-        const content = readFileSync(join(__dirname, "google-gemini-cli.ts"), "utf-8");
-        // Should contain plaintext credentials
-        assert.ok(content.includes('CLIENT_ID = "681255809395-oo8ft2oprdrnp9e3aqf6av3hmdib135j.apps.googleusercontent.com"'));
-        assert.ok(content.includes('CLIENT_SECRET = "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"'));
-        // Should NOT contain atob calls for de-obfuscation
-        assert.ok(!content.includes("atob("));
-    });
-    test("all OAuth files include security explanation comments", () => {
-        const files = [
-            "github-copilot.ts",
-            "google-antigravity.ts",
-            "google-gemini-cli.ts",
-        ];
-        for (const file of files) {
-            const content = readFileSync(join(__dirname, file), "utf-8");
-            // Should include explanation of why credentials are public
-            assert.ok(content.includes("NOTE: This credential is public") ||
-                content.includes("NOTE: These credentials are public"), `${file} should explain why credentials are public`);
-            assert.ok(content.includes("obfuscated") ||
-                content.includes("security scanners"), `${file} should reference the security scanner issue`);
-        }
-    });
-});
-//# sourceMappingURL=oauth-providers.test.js.map

package/packages/pi-ai/dist/utils/oauth/oauth-providers.test.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"oauth-providers.test.js","sourceRoot":"","sources":["../../../src/utils/oauth/oauth-providers.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC3C,OAAO,MAAM,MAAM,oBAAoB,CAAC;AACxC,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAIzC,wDAAwD;AACxD,OAAO,EACN,0BAA0B,EAC1B,eAAe,EACf,uBAAuB,GACvB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,wBAAwB,EAAE,MAAM,yBAAyB,CAAC;AACnE,OAAO,EAAE,sBAAsB,EAAE,MAAM,wBAAwB,CAAC;AAEhE,MAAM,SAAS,GAAG,aAAa,CAAC,IAAI,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;AAQ/D,+CAA+C;AAC/C,SAAS,WAAW,CAAC,YAAiC,EAAE;IACvD,OAAO;QACN,EAAE,EAAE,YAAY;QAChB,IAAI,EAAE,YAAY;QAClB,GAAG,EAAE,oBAAoB;QACzB,QAAQ,EAAE,eAAe;QACzB,OAAO,EAAE,qBAAqB;QAC9B,SAAS,EAAE,KAAK;QAChB,KAAK,EAAE,CAAC,MAAM,CAAC;QACf,IAAI,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,UAAU,EAAE,CAAC,EAAE;QAC1D,aAAa,EAAE,MAAM;QACrB,SAAS,EAAE,IAAI;QACf,GAAG,SAAS;KACE,CAAC;AACjB,CAAC;AAED,8EAA8E;AAC9E,sCAAsC;AACtC,8EAA8E;AAE9E,QAAQ,CAAC,wCAAwC,EAAE,GAAG,EAAE;IACvD,IAAI,CAAC,8BAA8B,EAAE,GAAG,EAAE;QACzC,MAAM,CAAC,KAAK,CAAC,eAAe,CAAC,EAAE,CAAC,EAAE,IAAI,CAAC,CAAC;QACxC,MAAM,CAAC,KAAK,CAAC,eAAe,CAAC,KAAK,CAAC,EAAE,IAAI,CAAC,CAAC;IAC5C,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,iCAAiC,EAAE,GAAG,EAAE;QAC5C,MAAM,CAAC,KAAK,CAAC,eAAe,CAAC,iBAAiB,CAAC,EAAE,IAAI,CAAC,CAAC;IACxD,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,iCAAiC,EAAE,GAAG,EAAE;QAC5C,MAAM,CAAC,KAAK,CAAC,eAAe,CAAC,oBAAoB,CAAC,EAAE,YAAY,CAAC,CAAC;QAClE,MAAM,CAAC,KAAK,CAAC,eAAe,CAAC,yBAAyB,CAAC,EAAE,iBAAiB,CAAC,CAAC;QAC5E,MAAM,CAAC,KAAK,CAAC,eAAe,CAAC,yBAAyB,CAAC,EAAE,aAAa,CAAC,CAAC;IACzE,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,uCAAuC,EAAE,GAAG,EAAE;QAClD,MAAM,CAAC,KAAK,CAAC,eAAe,CAAC,YAAY,CAAC,EAAE,YAAY,CAAC,CAAC;QAC1D,MAAM,CAAC,KAAK,CAAC,eAAe,CAAC,iBAAiB,CAAC,EAAE,iBAAiB,CAAC,CAAC;IACrE,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,kBAAkB,EAAE,GAAG,EAAE;QAC7B,MAAM,CAAC,KAAK,CAAC,eAAe,CAAC,gBAAgB,CAAC,EAAE,YAAY,CAAC,CAAC;IAC/D,CAAC,CAAC,CAAC;AACJ,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,4CAA4C,EAAE,GAAG,EAAE;IAC3D,IAAI,CAAC,2CAA2C,EAAE,GAAG,EAAE;QACtD,gFAAgF;QAChF,MAAM,KAAK,GAAG,gFAAgF,CAAC;QAC/F,MAAM,OAAO,GAAG,uBAAuB,CAAC,KAAK,CAAC,CAAC;QAC/C,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,0CAA0C,CAAC,CAAC;IACnE,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,2CAA2C,EAAE,GAAG,EAAE;QACtD,MAAM,KAAK,GAAG,mEAAmE,CAAC;QAClF,MAAM,OAAO,GAAG,uBAAuB,CAAC,KAAK,CAAC,CAAC;QAC/C,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,6BAA6B,CAAC,CAAC;IACtD,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,8CAA8C,EAAE,GAAG,EAAE;QACzD,MAAM,OAAO,GAAG,uBAAuB,EAAE,CAAC;QAC1C,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,0CAA0C,CAAC,CAAC;IACnE,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,kDAAkD,EAAE,GAAG,EAAE;QAC7D,MAAM,KAAK,GAAG,oCAAoC,CAAC;QACnD,MAAM,OAAO,GAAG,uBAAuB,CAAC,KAAK,CAAC,CAAC;QAC/C,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,0CAA0C,CAAC,CAAC;IACnE,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,sCAAsC,EAAE,GAAG,EAAE;QACjD,MAAM,OAAO,GAAG,uBAAuB,CAAC,SAAS,EAAE,iBAAiB,CAAC,CAAC;QACtE,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,qCAAqC,CAAC,CAAC;IAC9D,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,mDAAmD,EAAE,GAAG,EAAE;QAC9D,MAAM,KAAK,GAAG,gFAAgF,CAAC;QAC/F,MAAM,OAAO,GAAG,uBAAuB,CAAC,KAAK,EAAE,iBAAiB,CAAC,CAAC;QAClE,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,0CAA0C,CAAC,CAAC;IACnE,CAAC,CAAC,CAAC;AACJ,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,2CAA2C,EAAE,GAAG,EAAE;IAC1D,IAAI,CAAC,yBAAyB,EAAE,GAAG,EAAE;QACpC,MAAM,CAAC,KAAK,CAAC,0BAA0B,CAAC,EAAE,EAAE,gBAAgB,CAAC,CAAC;QAC9D,MAAM,CAAC,KAAK,CAAC,0BAA0B,CAAC,IAAI,EAAE,gBAAgB,CAAC,CAAC;IACjE,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,sBAAsB,EAAE,GAAG,EAAE;QACjC,MAAM,CAAC,KAAK,CAAC,OAAO,0BAA0B,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC;QAClE,MAAM,CAAC,KAAK,CAAC,OAAO,0BAA0B,CAAC,YAAY,EAAE,UAAU,CAAC,CAAC;QACzE,MAAM,CAAC,KAAK,CAAC,OAAO,0BAA0B,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC;IACvE,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,gCAAgC,EAAE,GAAG,EAAE;QAC3C,MAAM,WAAW,GAAqB;YACrC,MAAM,EAAE,mBAAmB;YAC3B,OAAO,EAAE,oBAAoB;YAC7B,OAAO,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO;SAC7B,CAAC;QACF,MAAM,MAAM,GAAG,0BAA0B,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;QACjE,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,mBAAmB,CAAC,CAAC;IAC3C,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,2CAA2C,EAAE,GAAG,EAAE;QACtD,IAAI,CAAC,0BAA0B,CAAC,YAAY;YAAE,OAAO;QACrD,MAAM,MAAM,GAAG,CAAC,WAAW,CAAC,EAAE,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC;QAClE,MAAM,WAAW,GAAqB;YACrC,MAAM,EAAE,YAAY;YACpB,OAAO,EAAE,cAAc;YACvB,OAAO,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO;SAC7B,CAAC;QACF,MAAM,MAAM,GAAG,0BAA0B,CAAC,YAAY,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;QAC5E,MAAM,CAAC,SAAS,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAClC,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,oEAAoE,EAAE,GAAG,EAAE;QAC/E,IAAI,CAAC,0BAA0B,CAAC,YAAY;YAAE,OAAO;QACrD,MAAM,MAAM,GAAG;YACd,WAAW,CAAC;gBACX,EAAE,EAAE,mBAAmB;gBACvB,QAAQ,EAAE,gBAAgB;gBAC1B,OAAO,EAAE,yBAAyB;aAClC,CAAC;SACF,CAAC;QACF,MAAM,WAAW,GAAuB;YACvC,MAAM,EAAE,qEAAqE;YAC7E,OAAO,EAAE,cAAc;YACvB,OAAO,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO;SAC7B,CAAC;QACF,MAAM,MAAM,GAAG,0BAA0B,CAAC,YAAY,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;QAC5E,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,0CAA0C,CAAC,CAAC;IAC7E,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,kDAAkD,EAAE,GAAG,EAAE;QAC7D,IAAI,CAAC,0BAA0B,CAAC,YAAY;YAAE,OAAO;QACrD,MAAM,MAAM,GAAG;YACd,WAAW,CAAC;gBACX,EAAE,EAAE,mBAAmB;gBACvB,QAAQ,EAAE,gBAAgB;gBAC1B,OAAO,EAAE,yBAAyB;aAClC,CAAC;SACF,CAAC;QACF,MAAM,WAAW,GAAuB;YACvC,MAAM,EAAE,YAAY;YACpB,OAAO,EAAE,cAAc;YACvB,OAAO,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO;YAC7B,WAAW,EAAE;gBACZ,mBAAmB,EAAE,EAAE,aAAa,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE;aAC/D;SACD,CAAC;QACF,MAAM,MAAM,GAAG,0BAA0B,CAAC,YAAY,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;QAC5E,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,aAAa,EAAE,MAAM,CAAC,CAAC;QAC9C,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;IACzC,CAAC,CAAC,CAAC;AACJ,CAAC,CAAC,CAAC;AAEH,8EAA8E;AAC9E,mCAAmC;AACnC,8EAA8E;AAE9E,QAAQ,CAAC,wCAAwC,EAAE,GAAG,EAAE;IACvD,IAAI,CAAC,yBAAyB,EAAE,GAAG,EAAE;QACpC,MAAM,CAAC,KAAK,CAAC,wBAAwB,CAAC,EAAE,EAAE,oBAAoB,CAAC,CAAC;QAChE,MAAM,CAAC,KAAK,CAAC,wBAAwB,CAAC,IAAI,EAAE,yCAAyC,CAAC,CAAC;IACxF,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,sBAAsB,EAAE,GAAG,EAAE;QACjC,MAAM,CAAC,KAAK,CAAC,wBAAwB,CAAC,kBAAkB,EAAE,IAAI,CAAC,CAAC;IACjE,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,sBAAsB,EAAE,GAAG,EAAE;QACjC,MAAM,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC;QAChE,MAAM,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,YAAY,EAAE,UAAU,CAAC,CAAC;QACvE,MAAM,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC;IACrE,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,iDAAiD,EAAE,GAAG,EAAE;QAC5D,MAAM,WAAW,GAAqB;YACrC,MAAM,EAAE,mBAAmB;YAC3B,OAAO,EAAE,oBAAoB;YAC7B,OAAO,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO;YAC7B,SAAS,EAAE,kBAAkB;YAC7B,KAAK,EAAE,kBAAkB;SACzB,CAAC;QACF,MAAM,MAAM,GAAG,wBAAwB,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;QAC/D,MAAM,CAAC,KAAK,CAAC,OAAO,MAAM,EAAE,QAAQ,CAAC,CAAC;QACtC,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAClC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,EAAE,mBAAmB,CAAC,CAAC;QAChD,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,EAAE,kBAAkB,CAAC,CAAC;IACpD,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,+CAA+C,EAAE,KAAK,IAAI,EAAE;QAChE,MAAM,WAAW,GAAqB;YACrC,MAAM,EAAE,mBAAmB;YAC3B,OAAO,EAAE,oBAAoB;YAC7B,OAAO,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO;SAC7B,CAAC;QACF,MAAM,MAAM,CAAC,OAAO,CACnB,wBAAwB,CAAC,YAAY,CAAC,WAAW,CAAC,EAClD,2CAA2C,CAC3C,CAAC;IACH,CAAC,CAAC,CAAC;AACJ,CAAC,CAAC,CAAC;AAEH,8EAA8E;AAC9E,kCAAkC;AAClC,8EAA8E;AAE9E,QAAQ,CAAC,uCAAuC,EAAE,GAAG,EAAE;IACtD,IAAI,CAAC,yBAAyB,EAAE,GAAG,EAAE;QACpC,MAAM,CAAC,KAAK,CAAC,sBAAsB,CAAC,EAAE,EAAE,mBAAmB,CAAC,CAAC;QAC7D,MAAM,CAAC,KAAK,CAAC,sBAAsB,CAAC,IAAI,EAAE,uCAAuC,CAAC,CAAC;IACpF,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,sBAAsB,EAAE,GAAG,EAAE;QACjC,MAAM,CAAC,KAAK,CAAC,sBAAsB,CAAC,kBAAkB,EAAE,IAAI,CAAC,CAAC;IAC/D,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,sBAAsB,EAAE,GAAG,EAAE;QACjC,MAAM,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC;QAC9D,MAAM,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,YAAY,EAAE,UAAU,CAAC,CAAC;QACrE,MAAM,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC;IACnE,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,iDAAiD,EAAE,GAAG,EAAE;QAC5D,MAAM,WAAW,GAAqB;YACrC,MAAM,EAAE,mBAAmB;YAC3B,OAAO,EAAE,oBAAoB;YAC7B,OAAO,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO;YAC7B,SAAS,EAAE,kBAAkB;YAC7B,KAAK,EAAE,kBAAkB;SACzB,CAAC;QACF,MAAM,MAAM,GAAG,sBAAsB,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;QAC7D,MAAM,CAAC,KAAK,CAAC,OAAO,MAAM,EAAE,QAAQ,CAAC,CAAC;QACtC,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAClC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,EAAE,mBAAmB,CAAC,CAAC;QAChD,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,EAAE,kBAAkB,CAAC,CAAC;IACpD,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,+CAA+C,EAAE,KAAK,IAAI,EAAE;QAChE,MAAM,WAAW,GAAqB;YACrC,MAAM,EAAE,mBAAmB;YAC3B,OAAO,EAAE,oBAAoB;YAC7B,OAAO,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO;SAC7B,CAAC;QACF,MAAM,MAAM,CAAC,OAAO,CACnB,sBAAsB,CAAC,YAAY,CAAC,WAAW,CAAC,EAChD,4CAA4C,CAC5C,CAAC;IACH,CAAC,CAAC,CAAC;AACJ,CAAC,CAAC,CAAC;AAEH,8EAA8E;AAC9E,iDAAiD;AACjD,EAAE;AACF,oEAAoE;AACpE,+DAA+D;AAC/D,8EAA8E;AAE9E,QAAQ,CAAC,8CAA8C,EAAE,GAAG,EAAE;IAC7D,2DAA2D;IAC3D,IAAI,CAAC,4CAA4C,EAAE,GAAG,EAAE;QACvD,0DAA0D;QAC1D,MAAM,CAAC,EAAE,CAAC,0BAA0B,CAAC,CAAC;IACvC,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,yCAAyC,EAAE,GAAG,EAAE;QACpD,MAAM,CAAC,EAAE,CAAC,wBAAwB,CAAC,CAAC;IACrC,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,wCAAwC,EAAE,GAAG,EAAE;QACnD,MAAM,CAAC,EAAE,CAAC,sBAAsB,CAAC,CAAC;IACnC,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,oDAAoD,EAAE,GAAG,EAAE;QAC/D,MAAM,OAAO,GAAG,YAAY,CAAC,IAAI,CAAC,SAAS,EAAE,mBAAmB,CAAC,EAAE,OAAO,CAAC,CAAC;QAC5E,qCAAqC;QACrC,MAAM,CAAC,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,oCAAoC,CAAC,CAAC,CAAC;QAClE,mDAAmD;QACnD,MAAM,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;IACvC,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,uDAAuD,EAAE,GAAG,EAAE;QAClE,MAAM,OAAO,GAAG,YAAY,CAAC,IAAI,CAAC,SAAS,EAAE,uBAAuB,CAAC,EAAE,OAAO,CAAC,CAAC;QAChF,uCAAuC;QACvC,MAAM,CAAC,EAAE,CACR,OAAO,CAAC,QAAQ,CACf,yFAAyF,CACzF,CACD,CAAC;QACF,MAAM,CAAC,EAAE,CACR,OAAO,CAAC,QAAQ,CAAC,uDAAuD,CAAC,CACzE,CAAC;QACF,mDAAmD;QACnD,MAAM,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;IACvC,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,sDAAsD,EAAE,GAAG,EAAE;QACjE,MAAM,OAAO,GAAG,YAAY,CAAC,IAAI,CAAC,SAAS,EAAE,sBAAsB,CAAC,EAAE,OAAO,CAAC,CAAC;QAC/E,uCAAuC;QACvC,MAAM,CAAC,EAAE,CACR,OAAO,CAAC,QAAQ,CACf,wFAAwF,CACxF,CACD,CAAC;QACF,MAAM,CAAC,EAAE,CACR,OAAO,CAAC,QAAQ,CAAC,uDAAuD,CAAC,CACzE,CAAC;QACF,mDAAmD;QACnD,MAAM,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;IACvC,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,uDAAuD,EAAE,GAAG,EAAE;QAClE,MAAM,KAAK,GAAG;YACb,mBAAmB;YACnB,uBAAuB;YACvB,sBAAsB;SACtB,CAAC;QAEF,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YAC1B,MAAM,OAAO,GAAG,YAAY,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,EAAE,OAAO,CAAC,CAAC;YAC7D,2DAA2D;YAC3D,MAAM,CAAC,EAAE,CACR,OAAO,CAAC,QAAQ,CAAC,iCAAiC,CAAC;gBAClD,OAAO,CAAC,QAAQ,CAAC,oCAAoC,CAAC,EACvD,GAAG,IAAI,4CAA4C,CACnD,CAAC;YACF,MAAM,CAAC,EAAE,CACR,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAC;gBAC7B,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAAC,EACtC,GAAG,IAAI,8CAA8C,CACrD,CAAC;QACH,CAAC;IACF,CAAC,CAAC,CAAC;AACJ,CAAC,CAAC,CAAC","sourcesContent":["import { describe, test } from \"node:test\";\nimport assert from \"node:assert/strict\";\nimport { readFileSync } from \"node:fs\";\nimport { join } from \"node:path\";\nimport { fileURLToPath } from \"node:url\";\nimport type { Model, Api } from \"../../types.js\";\nimport type { OAuthCredentials } from \"./types.js\";\n\n// Test files that need to import from the OAuth modules\nimport {\n\tgithubCopilotOAuthProvider,\n\tnormalizeDomain,\n\tgetGitHubCopilotBaseUrl,\n} from \"./github-copilot.js\";\nimport { antigravityOAuthProvider } from \"./google-antigravity.js\";\nimport { geminiCliOAuthProvider } from \"./google-gemini-cli.js\";\n\nconst __dirname = fileURLToPath(new URL(\".\", import.meta.url));\n\n// Local type for Copilot credentials (includes optional fields)\ntype CopilotCredentials = OAuthCredentials & {\n\tenterpriseUrl?: string;\n\tmodelLimits?: Record<string, { contextWindow: number; maxTokens: number }>;\n};\n\n// Helper to create a minimal model for testing\nfunction createModel(overrides: Partial<Model<Api>> = {}): Model<Api> {\n\treturn {\n\t\tid: \"test-model\",\n\t\tname: \"Test Model\",\n\t\tapi: \"openai-completions\",\n\t\tprovider: \"test-provider\",\n\t\tbaseUrl: \"https://example.com\",\n\t\treasoning: false,\n\t\tinput: [\"text\"],\n\t\tcost: { input: 0, output: 0, cacheRead: 0, cacheWrite: 0 },\n\t\tcontextWindow: 128000,\n\t\tmaxTokens: 8192,\n\t\t...overrides,\n\t} as Model<Api>;\n}\n\n// ═══════════════════════════════════════════════════════════════════════════\n// GitHub Copilot OAuth Provider Tests\n// ═══════════════════════════════════════════════════════════════════════════\n\ndescribe(\"GitHub Copilot OAuth — normalizeDomain\", () => {\n\ttest(\"returns null for empty input\", () => {\n\t\tassert.equal(normalizeDomain(\"\"), null);\n\t\tassert.equal(normalizeDomain(\"   \"), null);\n\t});\n\n\ttest(\"returns null for invalid domain\", () => {\n\t\tassert.equal(normalizeDomain(\"not a domain!@#\"), null);\n\t});\n\n\ttest(\"extracts hostname from full URL\", () => {\n\t\tassert.equal(normalizeDomain(\"https://github.com\"), \"github.com\");\n\t\tassert.equal(normalizeDomain(\"https://company.ghe.com\"), \"company.ghe.com\");\n\t\tassert.equal(normalizeDomain(\"http://example.com/path\"), \"example.com\");\n\t});\n\n\ttest(\"returns domain as-is when no protocol\", () => {\n\t\tassert.equal(normalizeDomain(\"github.com\"), \"github.com\");\n\t\tassert.equal(normalizeDomain(\"company.ghe.com\"), \"company.ghe.com\");\n\t});\n\n\ttest(\"trims whitespace\", () => {\n\t\tassert.equal(normalizeDomain(\"  github.com  \"), \"github.com\");\n\t});\n});\n\ndescribe(\"GitHub Copilot OAuth — getBaseUrlFromToken\", () => {\n\ttest(\"extracts API URL from token with proxy-ep\", () => {\n\t\t// Token format: tid=...;exp=...;proxy-ep=proxy.individual.githubcopilot.com;...\n\t\tconst token = \"tid=123;exp=1234567890;proxy-ep=proxy.individual.githubcopilot.com;other=value\";\n\t\tconst baseUrl = getGitHubCopilotBaseUrl(token);\n\t\tassert.equal(baseUrl, \"https://api.individual.githubcopilot.com\");\n\t});\n\n\ttest(\"extracts API URL from enterprise proxy-ep\", () => {\n\t\tconst token = \"tid=123;exp=1234567890;proxy-ep=proxy.company.ghe.com;other=value\";\n\t\tconst baseUrl = getGitHubCopilotBaseUrl(token);\n\t\tassert.equal(baseUrl, \"https://api.company.ghe.com\");\n\t});\n\n\ttest(\"falls back to default when no token provided\", () => {\n\t\tconst baseUrl = getGitHubCopilotBaseUrl();\n\t\tassert.equal(baseUrl, \"https://api.individual.githubcopilot.com\");\n\t});\n\n\ttest(\"falls back to default when token has no proxy-ep\", () => {\n\t\tconst token = \"tid=123;exp=1234567890;other=value\";\n\t\tconst baseUrl = getGitHubCopilotBaseUrl(token);\n\t\tassert.equal(baseUrl, \"https://api.individual.githubcopilot.com\");\n\t});\n\n\ttest(\"uses enterprise domain when provided\", () => {\n\t\tconst baseUrl = getGitHubCopilotBaseUrl(undefined, \"company.ghe.com\");\n\t\tassert.equal(baseUrl, \"https://copilot-api.company.ghe.com\");\n\t});\n\n\ttest(\"prioritizes token proxy-ep over enterprise domain\", () => {\n\t\tconst token = \"tid=123;exp=1234567890;proxy-ep=proxy.individual.githubcopilot.com;other=value\";\n\t\tconst baseUrl = getGitHubCopilotBaseUrl(token, \"company.ghe.com\");\n\t\tassert.equal(baseUrl, \"https://api.individual.githubcopilot.com\");\n\t});\n});\n\ndescribe(\"GitHub Copilot OAuth — provider structure\", () => {\n\ttest(\"has correct id and name\", () => {\n\t\tassert.equal(githubCopilotOAuthProvider.id, \"github-copilot\");\n\t\tassert.equal(githubCopilotOAuthProvider.name, \"GitHub Copilot\");\n\t});\n\n\ttest(\"has required methods\", () => {\n\t\tassert.equal(typeof githubCopilotOAuthProvider.login, \"function\");\n\t\tassert.equal(typeof githubCopilotOAuthProvider.refreshToken, \"function\");\n\t\tassert.equal(typeof githubCopilotOAuthProvider.getApiKey, \"function\");\n\t});\n\n\ttest(\"getApiKey returns access token\", () => {\n\t\tconst credentials: OAuthCredentials = {\n\t\t\taccess: \"test-access-token\",\n\t\t\trefresh: \"test-refresh-token\",\n\t\t\texpires: Date.now() + 3600000,\n\t\t};\n\t\tconst apiKey = githubCopilotOAuthProvider.getApiKey(credentials);\n\t\tassert.equal(apiKey, \"test-access-token\");\n\t});\n\n\ttest(\"modifyModels preserves non-Copilot models\", () => {\n\t\tif (!githubCopilotOAuthProvider.modifyModels) return;\n\t\tconst models = [createModel({ id: \"gpt-4\", provider: \"openai\" })];\n\t\tconst credentials: OAuthCredentials = {\n\t\t\taccess: \"test-token\",\n\t\t\trefresh: \"test-refresh\",\n\t\t\texpires: Date.now() + 3600000,\n\t\t};\n\t\tconst result = githubCopilotOAuthProvider.modifyModels(models, credentials);\n\t\tassert.deepEqual(result, models);\n\t});\n\n\ttest(\"modifyModels updates Copilot model baseUrl when token has proxy-ep\", () => {\n\t\tif (!githubCopilotOAuthProvider.modifyModels) return;\n\t\tconst models = [\n\t\t\tcreateModel({\n\t\t\t\tid: \"claude-3.5-sonnet\",\n\t\t\t\tprovider: \"github-copilot\",\n\t\t\t\tbaseUrl: \"https://api.default.com\",\n\t\t\t}),\n\t\t];\n\t\tconst credentials: CopilotCredentials = {\n\t\t\taccess: \"tid=123;exp=1234567890;proxy-ep=proxy.individual.githubcopilot.com;\",\n\t\t\trefresh: \"test-refresh\",\n\t\t\texpires: Date.now() + 3600000,\n\t\t};\n\t\tconst result = githubCopilotOAuthProvider.modifyModels(models, credentials);\n\t\tassert.equal(result[0].baseUrl, \"https://api.individual.githubcopilot.com\");\n\t});\n\n\ttest(\"modifyModels applies model limits when available\", () => {\n\t\tif (!githubCopilotOAuthProvider.modifyModels) return;\n\t\tconst models = [\n\t\t\tcreateModel({\n\t\t\t\tid: \"claude-3.5-sonnet\",\n\t\t\t\tprovider: \"github-copilot\",\n\t\t\t\tbaseUrl: \"https://api.default.com\",\n\t\t\t}),\n\t\t];\n\t\tconst credentials: CopilotCredentials = {\n\t\t\taccess: \"test-token\",\n\t\t\trefresh: \"test-refresh\",\n\t\t\texpires: Date.now() + 3600000,\n\t\t\tmodelLimits: {\n\t\t\t\t\"claude-3.5-sonnet\": { contextWindow: 123456, maxTokens: 4096 },\n\t\t\t},\n\t\t};\n\t\tconst result = githubCopilotOAuthProvider.modifyModels(models, credentials);\n\t\tassert.equal(result[0].contextWindow, 123456);\n\t\tassert.equal(result[0].maxTokens, 4096);\n\t});\n});\n\n// ═══════════════════════════════════════════════════════════════════════════\n// Antigravity OAuth Provider Tests\n// ═══════════════════════════════════════════════════════════════════════════\n\ndescribe(\"Antigravity OAuth — provider structure\", () => {\n\ttest(\"has correct id and name\", () => {\n\t\tassert.equal(antigravityOAuthProvider.id, \"google-antigravity\");\n\t\tassert.equal(antigravityOAuthProvider.name, \"Antigravity (Gemini 3, Claude, GPT-OSS)\");\n\t});\n\n\ttest(\"uses callback server\", () => {\n\t\tassert.equal(antigravityOAuthProvider.usesCallbackServer, true);\n\t});\n\n\ttest(\"has required methods\", () => {\n\t\tassert.equal(typeof antigravityOAuthProvider.login, \"function\");\n\t\tassert.equal(typeof antigravityOAuthProvider.refreshToken, \"function\");\n\t\tassert.equal(typeof antigravityOAuthProvider.getApiKey, \"function\");\n\t});\n\n\ttest(\"getApiKey returns JSON with token and projectId\", () => {\n\t\tconst credentials: OAuthCredentials = {\n\t\t\taccess: \"test-access-token\",\n\t\t\trefresh: \"test-refresh-token\",\n\t\t\texpires: Date.now() + 3600000,\n\t\t\tprojectId: \"test-project-123\",\n\t\t\temail: \"test@example.com\",\n\t\t};\n\t\tconst apiKey = antigravityOAuthProvider.getApiKey(credentials);\n\t\tassert.equal(typeof apiKey, \"string\");\n\t\tconst parsed = JSON.parse(apiKey);\n\t\tassert.equal(parsed.token, \"test-access-token\");\n\t\tassert.equal(parsed.projectId, \"test-project-123\");\n\t});\n\n\ttest(\"refreshToken throws when projectId is missing\", async () => {\n\t\tconst credentials: OAuthCredentials = {\n\t\t\taccess: \"test-access-token\",\n\t\t\trefresh: \"test-refresh-token\",\n\t\t\texpires: Date.now() + 3600000,\n\t\t};\n\t\tawait assert.rejects(\n\t\t\tantigravityOAuthProvider.refreshToken(credentials),\n\t\t\t/Antigravity credentials missing projectId/,\n\t\t);\n\t});\n});\n\n// ═══════════════════════════════════════════════════════════════════════════\n// Gemini CLI OAuth Provider Tests\n// ═══════════════════════════════════════════════════════════════════════════\n\ndescribe(\"Gemini CLI OAuth — provider structure\", () => {\n\ttest(\"has correct id and name\", () => {\n\t\tassert.equal(geminiCliOAuthProvider.id, \"google-gemini-cli\");\n\t\tassert.equal(geminiCliOAuthProvider.name, \"Google Cloud Code Assist (Gemini CLI)\");\n\t});\n\n\ttest(\"uses callback server\", () => {\n\t\tassert.equal(geminiCliOAuthProvider.usesCallbackServer, true);\n\t});\n\n\ttest(\"has required methods\", () => {\n\t\tassert.equal(typeof geminiCliOAuthProvider.login, \"function\");\n\t\tassert.equal(typeof geminiCliOAuthProvider.refreshToken, \"function\");\n\t\tassert.equal(typeof geminiCliOAuthProvider.getApiKey, \"function\");\n\t});\n\n\ttest(\"getApiKey returns JSON with token and projectId\", () => {\n\t\tconst credentials: OAuthCredentials = {\n\t\t\taccess: \"test-access-token\",\n\t\t\trefresh: \"test-refresh-token\",\n\t\t\texpires: Date.now() + 3600000,\n\t\t\tprojectId: \"test-project-456\",\n\t\t\temail: \"test@example.com\",\n\t\t};\n\t\tconst apiKey = geminiCliOAuthProvider.getApiKey(credentials);\n\t\tassert.equal(typeof apiKey, \"string\");\n\t\tconst parsed = JSON.parse(apiKey);\n\t\tassert.equal(parsed.token, \"test-access-token\");\n\t\tassert.equal(parsed.projectId, \"test-project-456\");\n\t});\n\n\ttest(\"refreshToken throws when projectId is missing\", async () => {\n\t\tconst credentials: OAuthCredentials = {\n\t\t\taccess: \"test-access-token\",\n\t\t\trefresh: \"test-refresh-token\",\n\t\t\texpires: Date.now() + 3600000,\n\t\t};\n\t\tawait assert.rejects(\n\t\t\tgeminiCliOAuthProvider.refreshToken(credentials),\n\t\t\t/Google Cloud credentials missing projectId/,\n\t\t);\n\t});\n});\n\n// ═══════════════════════════════════════════════════════════════════════════\n// Regression tests for credential de-obfuscation\n//\n// These tests verify that OAuth credentials are stored in plaintext\n// (not base64-encoded) after the refactor in commit 289bb325c.\n// ═══════════════════════════════════════════════════════════════════════════\n\ndescribe(\"OAuth credentials — de-obfuscated regression\", () => {\n\t// Verify we can import the modules without decoding errors\n\ttest(\"GitHub Copilot module imports successfully\", () => {\n\t\t// If the module imports, the CLIENT_ID is valid plaintext\n\t\tassert.ok(githubCopilotOAuthProvider);\n\t});\n\n\ttest(\"Antigravity module imports successfully\", () => {\n\t\tassert.ok(antigravityOAuthProvider);\n\t});\n\n\ttest(\"Gemini CLI module imports successfully\", () => {\n\t\tassert.ok(geminiCliOAuthProvider);\n\t});\n\n\ttest(\"GitHub Copilot CLIENT_ID is plaintext (not base64)\", () => {\n\t\tconst content = readFileSync(join(__dirname, \"github-copilot.ts\"), \"utf-8\");\n\t\t// Should contain plaintext CLIENT_ID\n\t\tassert.ok(content.includes('CLIENT_ID = \"Iv1.b507a08c87ecfe98\"'));\n\t\t// Should NOT contain atob calls for de-obfuscation\n\t\tassert.ok(!content.includes(\"atob(\"));\n\t});\n\n\ttest(\"Antigravity CLIENT_ID and CLIENT_SECRET are plaintext\", () => {\n\t\tconst content = readFileSync(join(__dirname, \"google-antigravity.ts\"), \"utf-8\");\n\t\t// Should contain plaintext credentials\n\t\tassert.ok(\n\t\t\tcontent.includes(\n\t\t\t\t'CLIENT_ID = \"1071006060591-tmhssin2h21lcre235vtolojh4g403ep.apps.googleusercontent.com\"',\n\t\t\t),\n\t\t);\n\t\tassert.ok(\n\t\t\tcontent.includes('CLIENT_SECRET = \"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\"'),\n\t\t);\n\t\t// Should NOT contain atob calls for de-obfuscation\n\t\tassert.ok(!content.includes(\"atob(\"));\n\t});\n\n\ttest(\"Gemini CLI CLIENT_ID and CLIENT_SECRET are plaintext\", () => {\n\t\tconst content = readFileSync(join(__dirname, \"google-gemini-cli.ts\"), \"utf-8\");\n\t\t// Should contain plaintext credentials\n\t\tassert.ok(\n\t\t\tcontent.includes(\n\t\t\t\t'CLIENT_ID = \"681255809395-oo8ft2oprdrnp9e3aqf6av3hmdib135j.apps.googleusercontent.com\"',\n\t\t\t),\n\t\t);\n\t\tassert.ok(\n\t\t\tcontent.includes('CLIENT_SECRET = \"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\"'),\n\t\t);\n\t\t// Should NOT contain atob calls for de-obfuscation\n\t\tassert.ok(!content.includes(\"atob(\"));\n\t});\n\n\ttest(\"all OAuth files include security explanation comments\", () => {\n\t\tconst files = [\n\t\t\t\"github-copilot.ts\",\n\t\t\t\"google-antigravity.ts\",\n\t\t\t\"google-gemini-cli.ts\",\n\t\t];\n\n\t\tfor (const file of files) {\n\t\t\tconst content = readFileSync(join(__dirname, file), \"utf-8\");\n\t\t\t// Should include explanation of why credentials are public\n\t\t\tassert.ok(\n\t\t\t\tcontent.includes(\"NOTE: This credential is public\") ||\n\t\t\t\t\tcontent.includes(\"NOTE: These credentials are public\"),\n\t\t\t\t`${file} should explain why credentials are public`,\n\t\t\t);\n\t\t\tassert.ok(\n\t\t\t\tcontent.includes(\"obfuscated\") ||\n\t\t\t\t\tcontent.includes(\"security scanners\"),\n\t\t\t\t`${file} should reference the security scanner issue`,\n\t\t\t);\n\t\t}\n\t});\n});\n"]}