nolo-cli 0.105.0-alpha.3 → 0.105.0

package/{appListCommands-PKRLSWRE.js → appListCommands-TSZDPIKJ.js}

@@ -5,70 +5,75 @@ import {
   pickDefined,
   printCliError,
   resolveCliContext
-} from "./chunk-NA35QHCF.js";
+} from "./chunk-AWVP7PPG.js";
 import {
   hasFlag,
   hasHelpArg
-} from "./chunk-ETI2NYVF.js";
-import "./chunk-AEOE4Z6Q.js";
-import "./chunk-Z77CRGTW.js";
+} from "./chunk-CNA27EMD.js";
+import "./chunk-AFSY3ZMB.js";
+import "./chunk-KA5O5KQL.js";
 import "./chunk-SV5IJK6K.js";
 import "./chunk-VF4K2QE6.js";
-import "./chunk-LC43IGO4.js";
-import "./chunk-ZCYXJSTU.js";
-import "./chunk-Q5FJJ6XI.js";
+import "./chunk-ZBHR642M.js";
+import "./chunk-YK5MHOWM.js";
 import "./chunk-ZNFJWEN4.js";
-import "./chunk-5H7KJX7J.js";
-import "./chunk-CQ3WA2NE.js";
+import "./chunk-54VPQTOA.js";
+import "./chunk-GMZLP5DV.js";
+import "./chunk-CHOZJMJS.js";
+import "./chunk-CFHWVEUJ.js";
 import "./chunk-5ZUL4CUO.js";
+import "./chunk-NKWIS6G2.js";
 import "./chunk-N7J63Q6C.js";
-import "./chunk-L5UXH3B2.js";
-import "./chunk-PUOC4YRO.js";
-import "./chunk-IIVGDG4I.js";
-import "./chunk-FDTR4QJ6.js";
-import "./chunk-UZGQNTVW.js";
-import "./chunk-6OZ36FXI.js";
+import "./chunk-AFH5QC6R.js";
+import "./chunk-M7VLQGQP.js";
+import "./chunk-SJKULPGX.js";
+import "./chunk-H6A6X4EK.js";
 import "./chunk-2MBTWINN.js";
-import "./chunk-4OEFYTWL.js";
-import "./chunk-DNCEALKX.js";
-import "./chunk-PSCNXBYA.js";
-import "./chunk-GQBOR3G6.js";
+import "./chunk-L5WOICCV.js";
+import "./chunk-IEJ5YDA4.js";
+import "./chunk-5MMAK75Q.js";
 import "./chunk-BYXBJQAS.js";
-import "./chunk-OIVSQH2O.js";
 import "./chunk-DWLEOOGR.js";
-import "./chunk-HVURBGF3.js";
-import "./chunk-ONXOABJR.js";
+import "./chunk-2U3NHADM.js";
+import "./chunk-KX6YBIHG.js";
+import "./chunk-PSCNXBYA.js";
+import "./chunk-3F424ASC.js";
+import "./chunk-UAD2WT54.js";
+import "./chunk-4WMMIL66.js";
+import "./chunk-EV235ILT.js";
+import "./chunk-HNGRBWYF.js";
+import "./chunk-HDLLCBRF.js";
+import "./chunk-4VJAC32I.js";
+import "./chunk-IHPDK6UD.js";
+import "./chunk-LWLNLZC5.js";
+import "./chunk-UA324D4O.js";
+import "./chunk-27ONFIEY.js";
+import "./chunk-7KVZ5LDQ.js";
+import "./chunk-3BXNTXYI.js";
 import "./chunk-W7XHHYWM.js";
 import "./chunk-HNMXYYJR.js";
-import "./chunk-DVINR3PL.js";
-import "./chunk-2GRGFCF6.js";
-import "./chunk-O6OSWFZQ.js";
-import "./chunk-X7HHHIOZ.js";
 import {
   readOption
 } from "./chunk-A7GB5UGH.js";
 import "./chunk-OLZBQWZU.js";
-import "./chunk-ACTMNVHM.js";
-import "./chunk-Q67DOFOO.js";
-import "./chunk-KX6YBIHG.js";
-import "./chunk-V4MJDUSR.js";
-import "./chunk-UAD2WT54.js";
-import "./chunk-H62HCIUP.js";
-import "./chunk-VMFTFOWF.js";
-import "./chunk-WWC7I6TA.js";
-import "./chunk-ABQYVJBJ.js";
+import "./chunk-Y6ROFCZO.js";
+import "./chunk-CYSYR67N.js";
+import "./chunk-Y3PMXGLH.js";
 import "./chunk-QSJ3HFEF.js";
-import "./chunk-WV42OMV7.js";
+import "./chunk-D2GQE6AF.js";
+import "./chunk-O7SVKKLY.js";
+import "./chunk-D2MDMY2M.js";
 import "./chunk-BNGW5ASC.js";
 import "./chunk-M2EJHDJP.js";
-import "./chunk-UKWGR5SS.js";
-import "./chunk-QOKAKDPE.js";
+import "./chunk-KUG52IAP.js";
+import "./chunk-OKGVNZTL.js";
+import "./chunk-WWC7I6TA.js";
+import "./chunk-VY6VFGKR.js";
+import "./chunk-HIM3FCLF.js";
 import "./chunk-OW765XBU.js";
 import "./chunk-SEJ5OS6F.js";
-import "./chunk-GBRG75BQ.js";
-import "./chunk-KUG52IAP.js";
-import "./chunk-3EUW3WEO.js";
 import "./chunk-U6VC4MU4.js";
+import "./chunk-3EUW3WEO.js";
 import "./chunk-LCBAMY2M.js";
 import "./chunk-4SN6J65J.js";
 import "./chunk-CF7PE763.js";

package/{authCommand-F4EFRRX6.js → authCommand-5PB3YRVV.js}

@@ -1,12 +1,12 @@
-import {
-  defaultOpenBrowser
-} from "./chunk-6D6VBVEW.js";
 import {
   generateCloudflareEmailRoutingToken,
   parseFlagWithOptionalValue,
   runCloudflareOAuthLogin,
   upsertEnvVariable
-} from "./chunk-GPCZ7UXG.js";
+} from "./chunk-K6U4NKFJ.js";
+import {
+  defaultOpenBrowser
+} from "./chunk-4W24JM32.js";
 import {
   ANTHROPIC_OAUTH_AUTHORIZE_URL,
   ANTHROPIC_OAUTH_CALLBACK_PORT,
@@ -39,6 +39,7 @@ import {
   generatePkcePair,
   normalizeAnthropicTokenPayload,
   readJsonBody,
+  refreshAntigravityOAuthToken,
   renderDeviceCodeDisplay,
   runAntigravityOAuthLogin,
   runOpenAiCodexBrowserPkce,
@@ -46,50 +47,58 @@ import {
   startCallbackServer,
   validateXAIEndpoint,
   xaiOAuthDiscovery
-} from "./chunk-53HEEOTT.js";
+} from "./chunk-2WJ57RJA.js";
+import "./chunk-TY3TIUJK.js";
 import "./chunk-ESHYE7WU.js";
 import "./chunk-JBTJAPUF.js";
-import "./chunk-2F7RJC6L.js";
+import {
+  extractGoogleValidationLink
+} from "./chunk-BMQ2MJUK.js";
+import "./chunk-FOXQ7BAB.js";
 import "./chunk-GLKOYSRU.js";
 import {
   buildDevinAuthUrl,
   buildDevinOAuthCredential,
   detectLocalDevinCredentials,
-  extractDevinToken
-} from "./chunk-Q5FJJ6XI.js";
+  extractDevinToken,
+  fetchAntigravityCloudCodeCompletion
+} from "./chunk-YK5MHOWM.js";
+import "./chunk-GMZLP5DV.js";
 import "./chunk-5ZUL4CUO.js";
-import "./chunk-UZGQNTVW.js";
-import "./chunk-6OZ36FXI.js";
-import "./chunk-GQBOR3G6.js";
-import "./chunk-OIVSQH2O.js";
 import {
-  createOAuthTokenStore
-} from "./chunk-ONXOABJR.js";
+  createOAuthTokenStore,
+  resolveFreshAccessToken
+} from "./chunk-HNGRBWYF.js";
+import "./chunk-UA324D4O.js";
+import "./chunk-27ONFIEY.js";
+import "./chunk-7KVZ5LDQ.js";
+import "./chunk-3BXNTXYI.js";
 import "./chunk-W7XHHYWM.js";
 import {
   toErrorMessage
 } from "./chunk-HNMXYYJR.js";
+import "./chunk-A7GB5UGH.js";
+import "./chunk-OLZBQWZU.js";
 import {
   buildEnvFromProfile,
   getProfileOAuthSync,
   loadProfileConfig,
   saveProfileOAuthSync
-} from "./chunk-BYMV6QZG.js";
-import "./chunk-A7GB5UGH.js";
-import "./chunk-OLZBQWZU.js";
-import "./chunk-Q67DOFOO.js";
-import "./chunk-VMFTFOWF.js";
-import {
-  asOptionalFiniteNumber
-} from "./chunk-WWC7I6TA.js";
+} from "./chunk-TNIX77YM.js";
+import "./chunk-Y3PMXGLH.js";
 import "./chunk-QSJ3HFEF.js";
 import {
   isRecord
 } from "./chunk-KUG52IAP.js";
+import "./chunk-OKGVNZTL.js";
+import {
+  asOptionalFiniteNumber
+} from "./chunk-WWC7I6TA.js";
+import "./chunk-OW765XBU.js";
+import "./chunk-U6VC4MU4.js";
 import {
   asTrimmedString
 } from "./chunk-3EUW3WEO.js";
-import "./chunk-U6VC4MU4.js";
 import "./chunk-LCBAMY2M.js";
 import "./chunk-4SN6J65J.js";
 import "./chunk-CF7PE763.js";
@@ -759,7 +768,7 @@ This authorizes model API access only. It does NOT log you into the Nolo platfor
 To manage agents, docs, spaces, and other Nolo resources, run "nolo login" first.
 
 Usage:
-  nolo auth antigravity [--browser] [--no-browser] [--sync-to-server] [--help]
+  nolo auth antigravity [--browser] [--no-browser] [--verify] [--sync-to-server] [--help]
 
 Opens a browser to https://accounts.google.com (OIDC PKCE loopback on 127.0.0.1:51121).
 After approval, the flow provisions a Cloud Code Assist project and stores the
@@ -771,6 +780,8 @@ oh-my-pi; Google does not publish a public Cloud Code Assist client registration
 Options:
   --browser         Use the browser PKCE flow (default for antigravity).
   --no-browser      Print the authorization URL only.
+  --verify          Check the current Google one-time verification challenge
+                    and open the validation link in a browser (no re-auth).
 ${SYNC_HELP_LINE}
   --help, -h        Show this help and exit.
 
@@ -975,6 +986,7 @@ async function runAuthProviderCommand(provider, args, _ctx, deps = {}) {
   const useBrowser = args.includes("--browser");
   const noBrowser = args.includes("--no-browser") || deps.noBrowserByDefault;
   const syncOnly = args.includes("--sync-only");
+  const verify = args.includes("--verify");
   const generateToken = args.includes("--generate-token");
   const writeToEnvRaw = parseFlagWithOptionalValue(args, "--write-to-env");
   const writeToEnvPath = typeof writeToEnvRaw === "string" ? writeToEnvRaw : writeToEnvRaw === true ? ".env" : void 0;
@@ -990,6 +1002,88 @@ async function runAuthProviderCommand(provider, args, _ctx, deps = {}) {
     await syncCredentialToServer(provider, credential, deps);
     return 0;
   }
+  if (verify) {
+    if (provider !== "antigravity") {
+      error.error(`[nolo] --verify is only supported for "nolo auth antigravity".`);
+      return 1;
+    }
+    const credential = tokenStore.read(provider);
+    if (!credential?.accessToken) {
+      error.error(
+        `[nolo] No local antigravity credential. Run: nolo auth antigravity`
+      );
+      return 1;
+    }
+    output.log(
+      `[nolo] Checking the current verification challenge (one lightweight request)...`
+    );
+    let accessToken = null;
+    let refreshError;
+    try {
+      accessToken = await resolveFreshAccessToken({
+        provider,
+        store: tokenStore,
+        refresh: deps.refreshAntigravityToken ?? refreshAntigravityOAuthToken
+      });
+    } catch (err) {
+      refreshError = toErrorMessage(err);
+      if (/invalid_grant|unauthorized_client|revoked|invalid_token|refresh[_ ]token[^.]*(expired|invalid|revoked)|expired[^.]*refresh/i.test(
+        refreshError
+      )) {
+        error.error(
+          `[nolo] The antigravity refresh token is no longer valid (${refreshError}). Re-run \`nolo auth antigravity\` to re-authorize this account.`
+        );
+        return 1;
+      }
+    }
+    let result;
+    try {
+      result = await fetchAntigravityCloudCodeCompletion({
+        agentConfig: { model: "gemini-3.1-pro" },
+        accessToken: accessToken ?? credential.accessToken,
+        metadata: credential.metadata ?? null,
+        openAiBody: { messages: [{ role: "user", content: "hi" }] },
+        fetchImpl: deps.fetchImpl ?? fetch
+      });
+    } catch (err) {
+      const msg = toErrorMessage(err);
+      if (/projectId|metadata\.projectId|Re-run `nolo auth/i.test(msg)) {
+        error.error(
+          `[nolo] The stored antigravity credential is incomplete (${msg}). Re-run \`nolo auth antigravity\` to re-authorize.`
+        );
+      } else {
+        error.error(
+          `[nolo] Could not reach the antigravity provider: ${msg}. Check your network and retry.`
+        );
+      }
+      return 1;
+    }
+    if (result.status >= 200 && result.status < 300) {
+      output.log(
+        `[nolo] \u2713 The credential is working \u2014 no verification is required right now. You can retry your agent.`
+      );
+      return 0;
+    }
+    const { url: validationUrl } = extractGoogleValidationLink(
+      JSON.stringify(result.body ?? {})
+    );
+    if (result.status === 403 && validationUrl) {
+      output.log(
+        `[nolo] Google requires a one-time account verification for ${credential.accountId ?? "this account"}.`
+      );
+      output.log(`[nolo]   ${validationUrl}`);
+      const opener = noBrowser ? void 0 : deps.openBrowser ?? defaultOpenBrowser;
+      const opened = opener ? await opener(validationUrl) : false;
+      output.log(
+        opened ? `[nolo] \u2713 Opened it in your browser \u2014 complete the verification there (sign in with the same Google account), then retry your agent.` : `[nolo] Copy the URL above into a browser signed into ${credential.accountId ?? "that account"}, complete the verification, then retry your agent.`
+      );
+      return 0;
+    }
+    error.error(
+      `[nolo] The provider returned HTTP ${result.status} without a verification link \u2014 this is not the one-time-verification case --verify handles.` + (refreshError ? ` (token refresh also failed earlier: ${refreshError})` : "") + ` Response detail: ${JSON.stringify(result.body ?? {}).slice(0, 400)}`
+    );
+    return 1;
+  }
   const flowDeps = {
     ...deps.fetchImpl ? { fetchImpl: deps.fetchImpl } : {},
     ...deps.sleep ? { sleep: deps.sleep } : {},

package/{authCommands-RGOGCPP6.js → authCommands-5RTUDYZW.js}

@@ -7,18 +7,20 @@ import {
   runLogoutCommand,
   runWhoamiCommand,
   saveTokenLogin
-} from "./chunk-6D6VBVEW.js";
+} from "./chunk-4W24JM32.js";
+import "./chunk-TY3TIUJK.js";
 import "./chunk-ESHYE7WU.js";
 import "./chunk-JBTJAPUF.js";
-import "./chunk-2F7RJC6L.js";
+import "./chunk-FOXQ7BAB.js";
 import "./chunk-GLKOYSRU.js";
-import "./chunk-BYMV6QZG.js";
 import "./chunk-A7GB5UGH.js";
 import "./chunk-OLZBQWZU.js";
-import "./chunk-VMFTFOWF.js";
+import "./chunk-TNIX77YM.js";
+import "./chunk-OKGVNZTL.js";
 import "./chunk-WWC7I6TA.js";
-import "./chunk-3EUW3WEO.js";
+import "./chunk-OW765XBU.js";
 import "./chunk-U6VC4MU4.js";
+import "./chunk-3EUW3WEO.js";
 import "./chunk-LCBAMY2M.js";
 import "./chunk-4SN6J65J.js";
 import "./chunk-CF7PE763.js";

package/{builtinSkillRegistry-FUAVTRVZ.js → builtinSkillRegistry-SBBWTANC.js}

@@ -7,18 +7,20 @@ import {
   resolveBuiltinSkillEntry,
   resolveBuiltinSkillPage,
   resolveBuiltinSkillSlug
-} from "./chunk-JRQFUXY7.js";
-import "./chunk-DHDMC6FO.js";
-import "./chunk-Q554LLSI.js";
+} from "./chunk-P5GCTVGV.js";
+import "./chunk-GSKPJIHY.js";
+import "./chunk-WJ3B6FX6.js";
+import "./chunk-DMXLXZKL.js";
+import "./chunk-A4SQRTZ6.js";
 import "./chunk-KHCLMKZZ.js";
-import "./chunk-O6OSWFZQ.js";
-import "./chunk-QDSINZM3.js";
-import "./chunk-VMFTFOWF.js";
-import "./chunk-WWC7I6TA.js";
+import "./chunk-IHPDK6UD.js";
+import "./chunk-LWLNLZC5.js";
 import "./chunk-BNGW5ASC.js";
 import "./chunk-M2EJHDJP.js";
-import "./chunk-3EUW3WEO.js";
+import "./chunk-OKGVNZTL.js";
+import "./chunk-WWC7I6TA.js";
 import "./chunk-U6VC4MU4.js";
+import "./chunk-3EUW3WEO.js";
 import "./chunk-G3SUCT4W.js";
 import "./chunk-4VNS5WPM.js";
 export {