nolo-cli 0.108.0-alpha.1 → 0.108.0-alpha.2

package/{appListCommands-BSMPTWKC.js → appListCommands-EEOSI6RC.js}

@@ -5,18 +5,19 @@ import {
   pickDefined,
   printCliError,
   resolveCliContext
-} from "./chunk-NA35QHCF.js";
+} from "./chunk-HSSRGGXJ.js";
 import {
   hasFlag,
   hasHelpArg
-} from "./chunk-ETI2NYVF.js";
-import "./chunk-AEOE4Z6Q.js";
+} from "./chunk-PHXD6JTX.js";
+import "./chunk-LWKP7AWH.js";
 import "./chunk-Z77CRGTW.js";
 import "./chunk-SV5IJK6K.js";
 import "./chunk-VF4K2QE6.js";
-import "./chunk-62CATUYY.js";
-import "./chunk-GO3Z72MT.js";
-import "./chunk-Q5FJJ6XI.js";
+import "./chunk-4NNTATRH.js";
+import "./chunk-H4AHY5BU.js";
+import "./chunk-FV3JEYR3.js";
+import "./chunk-GMZLP5DV.js";
 import "./chunk-ZNFJWEN4.js";
 import "./chunk-4MK3I7Y4.js";
 import "./chunk-CQ3WA2NE.js";
@@ -26,7 +27,7 @@ import "./chunk-MRIHM22T.js";
 import "./chunk-PUOC4YRO.js";
 import "./chunk-IIVGDG4I.js";
 import "./chunk-FDTR4QJ6.js";
-import "./chunk-UZGQNTVW.js";
+import "./chunk-GNCCNNZD.js";
 import "./chunk-6OZ36FXI.js";
 import "./chunk-2MBTWINN.js";
 import "./chunk-HKNXJGEC.js";

package/{authCommand-YW42YZA4.js → authCommand-HGP2XTKC.js}

@@ -6,7 +6,7 @@ import {
   parseFlagWithOptionalValue,
   runCloudflareOAuthLogin,
   upsertEnvVariable
-} from "./chunk-GPCZ7UXG.js";
+} from "./chunk-LJ5VW2UJ.js";
 import "./chunk-ESHYE7WU.js";
 import {
   ANTHROPIC_OAUTH_AUTHORIZE_URL,
@@ -40,6 +40,7 @@ import {
   generatePkcePair,
   normalizeAnthropicTokenPayload,
   readJsonBody,
+  refreshAntigravityOAuthToken,
   renderDeviceCodeDisplay,
   runAntigravityOAuthLogin,
   runOpenAiCodexBrowserPkce,
@@ -47,23 +48,29 @@ import {
   startCallbackServer,
   validateXAIEndpoint,
   xaiOAuthDiscovery
-} from "./chunk-53HEEOTT.js";
+} from "./chunk-Z5625XML.js";
 import "./chunk-JBTJAPUF.js";
+import {
+  extractGoogleValidationLink
+} from "./chunk-BMQ2MJUK.js";
 import "./chunk-2F7RJC6L.js";
 import "./chunk-GLKOYSRU.js";
 import {
   buildDevinAuthUrl,
   buildDevinOAuthCredential,
   detectLocalDevinCredentials,
-  extractDevinToken
-} from "./chunk-Q5FJJ6XI.js";
+  extractDevinToken,
+  fetchAntigravityCloudCodeCompletion
+} from "./chunk-FV3JEYR3.js";
+import "./chunk-GMZLP5DV.js";
 import "./chunk-5ZUL4CUO.js";
-import "./chunk-UZGQNTVW.js";
+import "./chunk-GNCCNNZD.js";
 import "./chunk-6OZ36FXI.js";
 import "./chunk-GQBOR3G6.js";
 import "./chunk-OIVSQH2O.js";
 import {
-  createOAuthTokenStore
+  createOAuthTokenStore,
+  resolveFreshAccessToken
 } from "./chunk-ONXOABJR.js";
 import "./chunk-W7XHHYWM.js";
 import {
@@ -759,7 +766,7 @@ This authorizes model API access only. It does NOT log you into the Nolo platfor
 To manage agents, docs, spaces, and other Nolo resources, run "nolo login" first.
 
 Usage:
-  nolo auth antigravity [--browser] [--no-browser] [--sync-to-server] [--help]
+  nolo auth antigravity [--browser] [--no-browser] [--verify] [--sync-to-server] [--help]
 
 Opens a browser to https://accounts.google.com (OIDC PKCE loopback on 127.0.0.1:51121).
 After approval, the flow provisions a Cloud Code Assist project and stores the
@@ -771,6 +778,8 @@ oh-my-pi; Google does not publish a public Cloud Code Assist client registration
 Options:
   --browser         Use the browser PKCE flow (default for antigravity).
   --no-browser      Print the authorization URL only.
+  --verify          Check the current Google one-time verification challenge
+                    and open the validation link in a browser (no re-auth).
 ${SYNC_HELP_LINE}
   --help, -h        Show this help and exit.
 
@@ -975,6 +984,7 @@ async function runAuthProviderCommand(provider, args, _ctx, deps = {}) {
   const useBrowser = args.includes("--browser");
   const noBrowser = args.includes("--no-browser") || deps.noBrowserByDefault;
   const syncOnly = args.includes("--sync-only");
+  const verify = args.includes("--verify");
   const generateToken = args.includes("--generate-token");
   const writeToEnvRaw = parseFlagWithOptionalValue(args, "--write-to-env");
   const writeToEnvPath = typeof writeToEnvRaw === "string" ? writeToEnvRaw : writeToEnvRaw === true ? ".env" : void 0;
@@ -990,6 +1000,88 @@ async function runAuthProviderCommand(provider, args, _ctx, deps = {}) {
     await syncCredentialToServer(provider, credential, deps);
     return 0;
   }
+  if (verify) {
+    if (provider !== "antigravity") {
+      error.error(`[nolo] --verify is only supported for "nolo auth antigravity".`);
+      return 1;
+    }
+    const credential = tokenStore.read(provider);
+    if (!credential?.accessToken) {
+      error.error(
+        `[nolo] No local antigravity credential. Run: nolo auth antigravity`
+      );
+      return 1;
+    }
+    output.log(
+      `[nolo] Checking the current verification challenge (one lightweight request)...`
+    );
+    let accessToken = null;
+    let refreshError;
+    try {
+      accessToken = await resolveFreshAccessToken({
+        provider,
+        store: tokenStore,
+        refresh: deps.refreshAntigravityToken ?? refreshAntigravityOAuthToken
+      });
+    } catch (err) {
+      refreshError = toErrorMessage(err);
+      if (/invalid_grant|unauthorized_client|revoked|invalid_token|refresh[_ ]token[^.]*(expired|invalid|revoked)|expired[^.]*refresh/i.test(
+        refreshError
+      )) {
+        error.error(
+          `[nolo] The antigravity refresh token is no longer valid (${refreshError}). Re-run \`nolo auth antigravity\` to re-authorize this account.`
+        );
+        return 1;
+      }
+    }
+    let result;
+    try {
+      result = await fetchAntigravityCloudCodeCompletion({
+        agentConfig: { model: "gemini-3.1-pro" },
+        accessToken: accessToken ?? credential.accessToken,
+        metadata: credential.metadata ?? null,
+        openAiBody: { messages: [{ role: "user", content: "hi" }] },
+        fetchImpl: deps.fetchImpl ?? fetch
+      });
+    } catch (err) {
+      const msg = toErrorMessage(err);
+      if (/projectId|metadata\.projectId|Re-run `nolo auth/i.test(msg)) {
+        error.error(
+          `[nolo] The stored antigravity credential is incomplete (${msg}). Re-run \`nolo auth antigravity\` to re-authorize.`
+        );
+      } else {
+        error.error(
+          `[nolo] Could not reach the antigravity provider: ${msg}. Check your network and retry.`
+        );
+      }
+      return 1;
+    }
+    if (result.status >= 200 && result.status < 300) {
+      output.log(
+        `[nolo] \u2713 The credential is working \u2014 no verification is required right now. You can retry your agent.`
+      );
+      return 0;
+    }
+    const { url: validationUrl } = extractGoogleValidationLink(
+      JSON.stringify(result.body ?? {})
+    );
+    if (result.status === 403 && validationUrl) {
+      output.log(
+        `[nolo] Google requires a one-time account verification for ${credential.accountId ?? "this account"}.`
+      );
+      output.log(`[nolo]   ${validationUrl}`);
+      const opener = noBrowser ? void 0 : deps.openBrowser ?? defaultOpenBrowser;
+      const opened = opener ? await opener(validationUrl) : false;
+      output.log(
+        opened ? `[nolo] \u2713 Opened it in your browser \u2014 complete the verification there (sign in with the same Google account), then retry your agent.` : `[nolo] Copy the URL above into a browser signed into ${credential.accountId ?? "that account"}, complete the verification, then retry your agent.`
+      );
+      return 0;
+    }
+    error.error(
+      `[nolo] The provider returned HTTP ${result.status} without a verification link \u2014 this is not the one-time-verification case --verify handles.` + (refreshError ? ` (token refresh also failed earlier: ${refreshError})` : "") + ` Response detail: ${JSON.stringify(result.body ?? {}).slice(0, 400)}`
+    );
+    return 1;
+  }
   const flowDeps = {
     ...deps.fetchImpl ? { fetchImpl: deps.fetchImpl } : {},
     ...deps.sleep ? { sleep: deps.sleep } : {},

package/{chatQueueReduxAdapter-XMFWRG3P.js → chatQueueReduxAdapter-DKLWTT3G.js}

@@ -4,12 +4,12 @@ import {
 } from "./chunk-YPREESF4.js";
 import {
   handleSendMessage
-} from "./chunk-TWQWYIMJ.js";
+} from "./chunk-YWIEQS6H.js";
 import "./chunk-MC4XLIJ7.js";
 import "./chunk-3BMYXEUW.js";
 import "./chunk-YYLHWIW6.js";
 import "./chunk-AGGIDPCZ.js";
-import "./chunk-PVZT43MU.js";
+import "./chunk-YTLRHRH3.js";
 import "./chunk-BFDFRLLQ.js";
 import "./chunk-5RGU3J7P.js";
 import {

package/{chunk-PQFHGD77.js → chunk-2OASQKU2.js}

@@ -6,7 +6,7 @@ import {
 } from "./chunk-IIVGDG4I.js";
 import {
   isAntigravityOAuthAgent
-} from "./chunk-UZGQNTVW.js";
+} from "./chunk-GNCCNNZD.js";
 import {
   getModelAbility
 } from "./chunk-ACTMNVHM.js";