n9router 0.3.91 → 0.3.93

package/.next/standalone/AGENTS.md

@@ -0,0 +1,136 @@
+# AGENTS.md
+
+This file provides guidance to Codex (Codex.ai/code) when working with code in this repository.
+
+## Project Overview
+
+9Router is a self-hosted AI routing gateway built on Next.js 16 + React 19. It acts as a local proxy between AI coding tools (Codex, Cursor, Codex, Gemini CLI, etc.) and 40+ upstream AI providers. It provides format translation (OpenAI <-> Codex <-> Gemini <-> etc.), multi-account fallback, quota tracking, and usage monitoring. The app exposes an OpenAI-compatible endpoint at `/v1/*` and a web dashboard at `/dashboard`.
+
+## Common Commands
+
+```bash
+# Development
+cp .env.example .env          # first time only
+npm install
+PORT=20128 NEXT_PUBLIC_BASE_URL=http://localhost:20128 npm run dev
+
+# Production build
+npm run build
+PORT=20128 HOSTNAME=0.0.0.0 NEXT_PUBLIC_BASE_URL=http://localhost:20128 npm run start
+
+# Bun alternative
+npm run dev:bun
+npm run build:bun
+npm run start:bun
+
+# Linting
+npx eslint .
+
+# Tests (Vitest must be installed separately in /tmp)
+cd /tmp && npm install vitest    # one-time setup
+cd tests/ && npm test            # run all tests
+
+# Run a single test file
+cd tests/ && NODE_PATH=/tmp/node_modules /tmp/node_modules/.bin/vitest run unit/embeddingsCore.test.js --reporter=verbose
+
+# Docker
+docker build -t 9router .
+docker run -d --name 9router -p 20128:20128 --env-file .env -v 9router-data:/app/data 9router
+```
+
+## Architecture
+
+### Two-Layer Routing Core
+
+The system has a split routing architecture:
+
+- **`src/sse/`** — App-level SSE handlers. Entry point is `src/sse/handlers/chat.js`. Handles model/combo resolution, credential selection, and delegates to the core.
+- **`open-sse/`** — Shared, provider-agnostic routing engine (publishable as a separate package). Contains the core chat orchestration (`handlers/chatCore.js`), provider executors, format translators, and stream utilities.
+
+Request flow: `API route → src/sse/handlers/chat.js → open-sse/handlers/chatCore.js → executor → upstream provider → response translator → client`
+
+### Path Aliases
+
+Defined in `jsconfig.json`:
+- `@/*` → `./src/*`
+- `open-sse` / `open-sse/*` → `./open-sse/*`
+
+### API Routes (`src/app/api/`)
+
+Two categories of API routes:
+
+1. **Compatibility APIs** (consumed by CLI tools):
+   - `/v1/chat/completions` — OpenAI-format chat (main entry point)
+   - `/v1/messages` — Anthropic Codex format
+   - `/v1/responses` — OpenAI Responses API format
+   - `/v1/embeddings`, `/v1/models`, `/v1beta/models`
+   - URL rewrites in `next.config.mjs` map `/v1/*` → `/api/v1/*`
+
+2. **Management APIs** (consumed by the dashboard):
+   - `/api/providers*`, `/api/provider-nodes*` — provider CRUD
+   - `/api/oauth/*` — OAuth flows for provider connections
+   - `/api/keys*`, `/api/combos*`, `/api/models/alias` — API keys, model combos, aliases
+   - `/api/settings/*`, `/api/auth/*`, `/api/usage/*`, `/api/sync/*`
+
+### Format Translation System (`open-sse/translator/`)
+
+Translates between provider-specific formats. Source format is auto-detected from the request endpoint and body shape (see `formats.js`). Supported formats: `openai`, `openai-responses`, `Codex`, `gemini`, `vertex`, `codex`, `antigravity`, `kiro`, `cursor`, `ollama`.
+
+- `translator/request/` — Inbound translation (e.g., `openai-to-Codex.js`)
+- `translator/response/` — Outbound translation (e.g., `Codex-to-openai.js`)
+
+### Provider Executors (`open-sse/executors/`)
+
+Each executor handles a specific provider's auth, API endpoint construction, and credential refresh. Examples: `codex.js`, `cursor.js`, `gemini-cli.js`, `kiro.js`, `iflow.js`, `antigravity.js`, `vertex.js`. The `default.js` executor handles standard OpenAI-compatible providers.
+
+### Combo + Account Fallback
+
+- **Combos**: Named sequences of models tried in order (e.g., subscription → cheap → free)
+- **Account fallback**: Multiple accounts per provider, round-robin with cooldown on failure
+- Logic in `open-sse/services/accountFallback.js` and `src/sse/handlers/chat.js` (combo orchestration)
+
+### Persistence
+
+- **State DB**: `src/lib/localDb.js` → `${DATA_DIR}/db.json` (or `~/.n9router/db.json`). Uses lowdb. Stores provider connections, nodes, aliases, combos, API keys, settings, pricing.
+- **Usage DB**: `src/lib/usageDb.js` → `~/.n9router/usage.json` + `~/.n9router/log.txt`. Independent from `DATA_DIR`.
+
+### Frontend
+
+- Next.js App Router with dashboard pages under `src/app/(dashboard)/dashboard/`
+- Zustand stores in `src/store/` (providerStore, userStore, themeStore, notificationStore)
+- UI components in `src/shared/components/`
+- Tailwind CSS v4 via PostCSS plugin
+
+### MITM Proxy (`src/mitm/`)
+
+Separate child process for intercepting HTTPS traffic from CLI tools. Has its own cert generation (`cert/`), DNS handling, and Express server.
+
+### Cloud Worker (`cloud/`)
+
+Cloudflare Workers deployment for optional cloud sync relay. Has its own `wrangler.toml`, `package.json`, and separate source in `cloud/src/`.
+
+## Key Environment Variables
+
+| Variable | Purpose |
+|----------|---------|
+| `JWT_SECRET` | Required. Signs dashboard auth tokens |
+| `INITIAL_PASSWORD` | Required. Dashboard login password |
+| `DATA_DIR` | Persistent storage directory (default: `~/.n9router`) |
+| `PORT` | Server port (default: 20128) |
+| `NEXT_PUBLIC_BASE_URL` | Public URL for the instance |
+| `REQUIRE_API_KEY` | Enforce API key on `/v1/*` routes |
+| `ENABLE_REQUEST_LOGS` | Log full request/response bodies |
+
+## Testing Notes
+
+- Tests live in `tests/unit/` and use Vitest v4
+- Vitest is installed in `/tmp/node_modules` to avoid conflicts with the root Next.js project's hoisting
+- Test config is at `tests/vitest.config.js` — it aliases `open-sse` to the local package
+- Current coverage: embeddings core, cloud worker handler, OAuth cursor auto-import, OpenAI-to-Codex translation, provider validation, translator request normalization
+
+## CI/CD
+
+- GitHub Actions workflow at `.github/workflows/docker-publish.yml`
+- Triggers on version tags (`v*`) and manual dispatch
+- Builds and pushes Docker image to `ghcr.io`
+- Docker uses multi-stage build with `node:20-alpine`, standalone Next.js output

package/.next/standalone/docs/token_swap_guide.md

@@ -16,4 +16,6 @@ Toàn bộ việc quản lý cũng được gom vào một chỗ. Bạn có th
 
 Cách bật cũng khá đơn giản: khởi động MITM Server, bật DNS Redirect cho Antigravity, rồi bật Token Rotation trong dashboard. Sau đó chỉ cần thêm nhiều account Antigravity vào pool là dùng được.
 
+Nếu chưa muốn thêm account bằng tay, có thể dùng luôn nút import accounts từ Antigravity Management Tools trong phần provider Antigravity để đưa account vào pool nhanh hơn.
+
 Nói ngắn gọn, Antigravity Token Swap không phải là một tính năng kiểu “cho vui”. Nó là thứ giúp biến nhiều account Antigravity thành một lớp quota pool thực thụ, để công việc không bị phụ thuộc vào giới hạn của từng account riêng lẻ.

package/.next/standalone/package-lock.json

@@ -1,12 +1,12 @@
 {
   "name": "n9router",
-  "version": "0.3.91",
+  "version": "0.3.93",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "n9router",
-      "version": "0.3.91",
+      "version": "0.3.93",
       "license": "MIT",
       "dependencies": {
         "@monaco-editor/react": "^4.7.0",

package/.next/standalone/package.json

@@ -1,6 +1,6 @@
 {
   "name": "n9router",
-  "version": "0.3.91",
+  "version": "0.3.93",
   "description": "Self-hosted AI routing gateway — local proxy for Claude, Gemini, OpenAI and 40+ providers",
   "keywords": [
     "ai",

package/.next/standalone/src/app/(dashboard)/dashboard/providers/[id]/page.js

@@ -5,12 +5,18 @@ import PropTypes from "prop-types";
 import { useParams, useRouter } from "next/navigation";
 import Link from "next/link";
 import Image from "next/image";
-import { Card, Button, Badge, Input, Modal, CardSkeleton, OAuthModal, KiroOAuthWrapper, CursorAuthModal, IFlowCookieModal, GitLabAuthModal, Toggle, Select } from "@/shared/components";
+import { Card, Button, Badge, Input, Modal, CardSkeleton, OAuthModal, KiroOAuthWrapper, CursorAuthModal, IFlowCookieModal, GitLabAuthModal, Toggle, Select, Tooltip } from "@/shared/components";
 import { OAUTH_PROVIDERS, APIKEY_PROVIDERS, FREE_PROVIDERS, FREE_TIER_PROVIDERS, getProviderAlias, isOpenAICompatibleProvider, isAnthropicCompatibleProvider } from "@/shared/constants/providers";
 import { getModelsByProviderId } from "@/shared/constants/models";
 import { useCopyToClipboard } from "@/shared/hooks/useCopyToClipboard";
 import { fetchSuggestedModels } from "@/shared/utils/providerModelsFetcher";
 
+const ANTIGRAVITY_TOOLTIP_IMPORT_AGT =
+  "Imports accounts from ~/.antigravity_tools on this machine (Antigravity IDE local data). Requires that folder to exist and contain signed-in accounts.";
+
+const ANTIGRAVITY_TOOLTIP_IMPORT_REFRESH =
+  "Paste Google OAuth refresh tokens: one per line (1//…), a JSON array with refresh_token, or any text containing \"refresh_token\": \"…\". Each token is refreshed and accounts are added or updated by Google email.";
+
 export default function ProviderDetailPage() {
   const params = useParams();
   const router = useRouter();
@@ -26,6 +32,9 @@ export default function ProviderDetailPage() {
   const [showEditNodeModal, setShowEditNodeModal] = useState(false);
   const [showBulkProxyModal, setShowBulkProxyModal] = useState(false);
   const [importingAgt, setImportingAgt] = useState(false);
+  const [importingAgtRefresh, setImportingAgtRefresh] = useState(false);
+  const [showAgtRefreshModal, setShowAgtRefreshModal] = useState(false);
+  const [agtRefreshTokenInput, setAgtRefreshTokenInput] = useState("");
   const [importResult, setImportResult] = useState(null);
   const [selectedConnection, setSelectedConnection] = useState(null);
   const [modelAliases, setModelAliases] = useState({});
@@ -425,6 +434,8 @@ export default function ProviderDetailPage() {
   };
 
 
+  const agtImportBusy = importingAgt || importingAgtRefresh;
+
   const handleImportFromAgt = async () => {
     setImportingAgt(true);
     setImportResult(null);
@@ -443,6 +454,36 @@ export default function ProviderDetailPage() {
     setImportingAgt(false);
   };
 
+  const handleImportFromRefreshTokens = async () => {
+    if (!agtRefreshTokenInput.trim()) return;
+    setImportingAgtRefresh(true);
+    setImportResult(null);
+    try {
+      const res = await fetch("/api/antigravity-tools/import-refresh-tokens", {
+        method: "POST",
+        headers: { "Content-Type": "application/json" },
+        body: JSON.stringify({ text: agtRefreshTokenInput }),
+      });
+      const data = await res.json();
+      if (res.ok) {
+        setImportResult(data);
+        await fetchConnections();
+        setShowAgtRefreshModal(false);
+        setAgtRefreshTokenInput("");
+      } else {
+        setImportResult({ error: data.error || "Import failed" });
+      }
+    } catch (err) {
+      setImportResult({ error: err.message });
+    }
+    setImportingAgtRefresh(false);
+  };
+
+  const closeAgtRefreshModal = () => {
+    if (importingAgtRefresh) return;
+    setShowAgtRefreshModal(false);
+  };
+
   const isSelected = (connectionId) => selectedConnectionIds.includes(connectionId);
 
   const connectionsList = (
@@ -863,7 +904,15 @@ export default function ProviderDetailPage() {
             <span>
               {importResult.error
                 ? `✗ ${importResult.error}`
-                : `✓ Imported ${importResult.imported}, updated ${importResult.updated}, skipped ${importResult.skipped}`}
+                : (() => {
+                    const parts = [
+                      `imported ${importResult.imported}`,
+                      `updated ${importResult.updated}`,
+                    ];
+                    if (importResult.skipped > 0) parts.push(`skipped ${importResult.skipped}`);
+                    if (importResult.failed > 0) parts.push(`failed ${importResult.failed}`);
+                    return `✓ ${parts.join(", ")}`;
+                  })()}
             </span>
             <button onClick={() => setImportResult(null)} className="text-current opacity-60 hover:opacity-100">✕</button>
           </div>
@@ -887,9 +936,23 @@ export default function ProviderDetailPage() {
                   {providerId === "iflow" ? "OAuth" : "Add Connection"}
                 </Button>
                 {providerId === "antigravity" && (
-                  <Button icon="download" variant="secondary" onClick={handleImportFromAgt} disabled={importingAgt}>
-                    {importingAgt ? "Importing…" : "Import from AGT"}
-                  </Button>
+                  <>
+                    <Tooltip text={ANTIGRAVITY_TOOLTIP_IMPORT_AGT} position="bottom">
+                      <Button icon="download" variant="secondary" onClick={handleImportFromAgt} disabled={agtImportBusy}>
+                        {importingAgt ? "Importing…" : "Import from AGT"}
+                      </Button>
+                    </Tooltip>
+                    <Tooltip text={ANTIGRAVITY_TOOLTIP_IMPORT_REFRESH} position="bottom">
+                      <Button
+                        icon="key"
+                        variant="secondary"
+                        onClick={() => setShowAgtRefreshModal(true)}
+                        disabled={agtImportBusy}
+                      >
+                        Import refresh tokens
+                      </Button>
+                    </Tooltip>
+                  </>
                 )}
               </div>
             )}
@@ -918,9 +981,24 @@ export default function ProviderDetailPage() {
                   Add
                 </Button>
                 {providerId === "antigravity" && (
-                  <Button size="sm" icon="download" variant="secondary" onClick={handleImportFromAgt} disabled={importingAgt}>
-                    {importingAgt ? "Importing…" : "Import from AGT"}
-                  </Button>
+                  <>
+                    <Tooltip text={ANTIGRAVITY_TOOLTIP_IMPORT_AGT} position="bottom">
+                      <Button size="sm" icon="download" variant="secondary" onClick={handleImportFromAgt} disabled={agtImportBusy}>
+                        {importingAgt ? "Importing…" : "Import from AGT"}
+                      </Button>
+                    </Tooltip>
+                    <Tooltip text={ANTIGRAVITY_TOOLTIP_IMPORT_REFRESH} position="bottom">
+                      <Button
+                        size="sm"
+                        icon="key"
+                        variant="secondary"
+                        onClick={() => setShowAgtRefreshModal(true)}
+                        disabled={agtImportBusy}
+                      >
+                        Refresh tokens
+                      </Button>
+                    </Tooltip>
+                  </>
                 )}
               </div>
             )}
@@ -943,6 +1021,43 @@ export default function ProviderDetailPage() {
 
       {bulkActionModal}
 
+      {providerId === "antigravity" && (
+        <Modal isOpen={showAgtRefreshModal} onClose={closeAgtRefreshModal} title="Import accounts (refresh tokens)">
+          <div className="flex flex-col gap-4">
+            <p className="text-sm text-text-muted">
+              Paste one or more Google OAuth refresh tokens. Supported formats: a single token (lines starting with{" "}
+              <code className="text-xs bg-surface-secondary px-1 rounded">1//…</code>
+              ), a JSON array with{" "}
+              <code className="text-xs bg-surface-secondary px-1 rounded">refresh_token</code>
+              , or any text containing{" "}
+              <code className="text-xs bg-surface-secondary px-1 rounded">&quot;refresh_token&quot;: &quot;…&quot;</code>{" "}
+              (values are extracted automatically).
+            </p>
+            <div className="space-y-2">
+              <label className="block text-sm font-medium text-text-primary">Refresh tokens</label>
+              <textarea
+                value={agtRefreshTokenInput}
+                onChange={(e) => setAgtRefreshTokenInput(e.target.value)}
+                placeholder={`Paste your refresh token(s) here (batch supported)\n\nExample:\n"refresh_token": "example_refresh_token"`}
+                className="w-full min-h-[160px] px-3 py-2 bg-surface-secondary border border-border rounded-lg text-sm text-text-primary placeholder:text-text-muted/80 focus:outline-none focus:ring-2 focus:ring-primary resize-y font-mono"
+                disabled={importingAgtRefresh}
+              />
+              <p className="text-xs text-text-muted">
+                Tip: You can paste multiple tokens or a JSON array to import in batch.
+              </p>
+            </div>
+            <div className="flex gap-2">
+              <Button variant="secondary" fullWidth onClick={closeAgtRefreshModal} disabled={importingAgtRefresh}>
+                Cancel
+              </Button>
+              <Button fullWidth onClick={handleImportFromRefreshTokens} disabled={importingAgtRefresh || !agtRefreshTokenInput.trim()}>
+                {importingAgtRefresh ? "Importing…" : "Import"}
+              </Button>
+            </div>
+          </div>
+        </Modal>
+      )}
+
       {/* Modals */}
       {providerId === "kiro" ? (
         <KiroOAuthWrapper

package/.next/standalone/src/app/api/antigravity-tools/import-refresh-tokens/route.js

@@ -0,0 +1,218 @@
+import { createProviderConnection, getProviderConnections, updateProviderConnection } from "@/lib/localDb";
+import { testSingleConnection } from "@/app/api/providers/[id]/test/testUtils";
+import { ANTIGRAVITY_CONFIG } from "@/lib/oauth/constants/oauth";
+import { refreshGoogleToken } from "open-sse/services/tokenRefresh.js";
+import { getProjectIdForConnection } from "open-sse/services/projectId.js";
+
+const noopLog = {
+  warn: () => {},
+  error: () => {},
+  info: () => {},
+};
+
+function maskToken(t) {
+  if (!t || typeof t !== "string") return "";
+  if (t.length <= 16) return `${t.slice(0, 6)}…`;
+  return `${t.slice(0, 10)}…${t.slice(-4)}`;
+}
+
+/**
+ * Extract Google OAuth refresh tokens from pasted text:
+ * - JSON array of objects with refresh_token or raw strings
+ * - Single JSON object with refresh_token
+ * - "refresh_token": "..." patterns (e.g. from config dumps)
+ * - Lines starting with 1// (typical Google refresh token prefix)
+ * - Any 1//… token embedded in free text
+ */
+function extractRefreshTokensFromText(text) {
+  if (!text || typeof text !== "string") return [];
+  const trimmed = text.trim();
+  const out = new Set();
+
+  const add = (raw) => {
+    if (raw == null) return;
+    const s = String(raw).trim();
+    if (!s) return;
+    out.add(s);
+  };
+
+  if (trimmed.startsWith("[")) {
+    try {
+      const arr = JSON.parse(trimmed);
+      if (Array.isArray(arr)) {
+        for (const item of arr) {
+          if (typeof item === "string") add(item);
+          else if (item && typeof item === "object" && item.refresh_token) add(item.refresh_token);
+        }
+        if (out.size) return [...out];
+      }
+    } catch {
+      /* fall through */
+    }
+  }
+
+  if (trimmed.startsWith("{")) {
+    try {
+      const obj = JSON.parse(trimmed);
+      if (obj && typeof obj === "object" && obj.refresh_token) add(obj.refresh_token);
+      if (out.size) return [...out];
+    } catch {
+      /* fall through */
+    }
+  }
+
+  const keyPat = /"refresh_token"\s*:\s*"([^"]+)"/g;
+  let m;
+  while ((m = keyPat.exec(text)) !== null) {
+    add(m[1]);
+  }
+  if (out.size) return [...out];
+
+  for (const line of text.split(/\r?\n/)) {
+    const lt = line.trim();
+    if (/^1\/\//.test(lt)) {
+      const mm = lt.match(/^(1\/\/[^\s"']+)/);
+      if (mm) add(mm[1]);
+    }
+  }
+  if (out.size) return [...out];
+
+  const anyPat = /\b(1\/\/[A-Za-z0-9_\-+/=]+)/g;
+  while ((m = anyPat.exec(text)) !== null) {
+    add(m[1]);
+  }
+
+  return [...out];
+}
+
+async function fetchGoogleUserEmail(accessToken) {
+  const url = `${ANTIGRAVITY_CONFIG.userInfoUrl}?alt=json`;
+  const res = await fetch(url, {
+    headers: { Authorization: `Bearer ${accessToken}` },
+  });
+  if (!res.ok) {
+    const errText = await res.text().catch(() => "");
+    throw new Error(`userinfo failed: HTTP ${res.status} ${errText.slice(0, 120)}`);
+  }
+  return res.json();
+}
+
+/**
+ * POST /api/antigravity-tools/import-refresh-tokens
+ * Body: { text: string }
+ */
+export async function POST(request) {
+  try {
+    let body = {};
+    try {
+      body = await request.json();
+    } catch {
+      return Response.json({ error: "Invalid JSON body" }, { status: 400 });
+    }
+
+    const text = typeof body.text === "string" ? body.text : "";
+    const tokens = extractRefreshTokensFromText(text);
+
+    if (tokens.length === 0) {
+      return Response.json(
+        { error: "No refresh tokens found. Paste one token per line, a JSON array, or text containing \"refresh_token\": \"…\"." },
+        { status: 400 }
+      );
+    }
+
+    const existingConnections = await getProviderConnections({ provider: "antigravity" });
+    const existingEmails = new Set(existingConnections.map((c) => c.email).filter(Boolean));
+
+    let imported = 0;
+    let updated = 0;
+    const errors = [];
+
+    for (const refreshToken of tokens) {
+      try {
+        const refreshed = await refreshGoogleToken(
+          refreshToken,
+          ANTIGRAVITY_CONFIG.clientId,
+          ANTIGRAVITY_CONFIG.clientSecret,
+          noopLog
+        );
+
+        if (!refreshed?.accessToken) {
+          errors.push({ token: maskToken(refreshToken), error: "Token refresh failed (invalid or revoked refresh token)" });
+          continue;
+        }
+
+        const { accessToken, refreshToken: newRefresh, expiresIn } = refreshed;
+        const effectiveRefresh = newRefresh || refreshToken;
+
+        let expiresAt = null;
+        if (expiresIn) {
+          expiresAt = new Date(Date.now() + expiresIn * 1000).toISOString();
+        }
+
+        const userInfo = await fetchGoogleUserEmail(accessToken);
+        const email =
+          userInfo.email ||
+          (userInfo.id ? `google-${userInfo.id}@google.local` : null);
+
+        if (!email) {
+          errors.push({ token: maskToken(refreshToken), error: "Could not determine account email from Google userinfo" });
+          continue;
+        }
+
+        const isExisting = existingEmails.has(email);
+
+        const connectionData = {
+          provider: "antigravity",
+          authType: "oauth",
+          email,
+          name: userInfo.name || email,
+          accessToken,
+          refreshToken: effectiveRefresh,
+          expiresAt,
+          projectId: null,
+          isActive: true,
+        };
+
+        const connection = await createProviderConnection(connectionData);
+
+        const projectId = await getProjectIdForConnection(connection.id, accessToken);
+        if (projectId) {
+          await updateProviderConnection(connection.id, { projectId });
+        }
+
+        try {
+          await testSingleConnection(connection.id);
+        } catch (testErr) {
+          console.log(`[antigravity-tools/import-refresh-tokens] Test failed for ${email}: ${testErr.message}`);
+        }
+
+        if (isExisting) {
+          updated++;
+        } else {
+          imported++;
+          existingEmails.add(email);
+        }
+      } catch (err) {
+        errors.push({ token: maskToken(refreshToken), error: err.message || String(err) });
+      }
+    }
+
+    const failed = errors.length;
+
+    console.log(
+      `[antigravity-tools/import-refresh-tokens] Done: imported=${imported}, updated=${updated}, failed=${failed}, total=${tokens.length}`
+    );
+
+    return Response.json({
+      imported,
+      updated,
+      skipped: 0,
+      failed,
+      errors,
+      total: tokens.length,
+    });
+  } catch (error) {
+    console.error("[antigravity-tools/import-refresh-tokens] Error:", error);
+    return Response.json({ error: error.message }, { status: 500 });
+  }
+}