nolo-cli 0.97.0-alpha.2 → 0.97.0

package/{authCommand-F4EFRRX6.js → authCommand-2YPMMIJN.js}

@@ -1,12 +1,9 @@
-import {
-  defaultOpenBrowser
-} from "./chunk-6D6VBVEW.js";
 import {
   generateCloudflareEmailRoutingToken,
   parseFlagWithOptionalValue,
   runCloudflareOAuthLogin,
   upsertEnvVariable
-} from "./chunk-GPCZ7UXG.js";
+} from "./chunk-AZRHIN5B.js";
 import {
   ANTHROPIC_OAUTH_AUTHORIZE_URL,
   ANTHROPIC_OAUTH_CALLBACK_PORT,
@@ -39,6 +36,7 @@ import {
   generatePkcePair,
   normalizeAnthropicTokenPayload,
   readJsonBody,
+  refreshAntigravityOAuthToken,
   renderDeviceCodeDisplay,
   runAntigravityOAuthLogin,
   runOpenAiCodexBrowserPkce,
@@ -46,43 +44,54 @@ import {
   startCallbackServer,
   validateXAIEndpoint,
   xaiOAuthDiscovery
-} from "./chunk-53HEEOTT.js";
+} from "./chunk-O26PCYLS.js";
+import {
+  defaultOpenBrowser
+} from "./chunk-OTEMQQZI.js";
+import "./chunk-TY3TIUJK.js";
 import "./chunk-ESHYE7WU.js";
-import "./chunk-JBTJAPUF.js";
-import "./chunk-2F7RJC6L.js";
+import {
+  extractGoogleValidationLink
+} from "./chunk-BMQ2MJUK.js";
+import "./chunk-ZOVKKMF6.js";
 import "./chunk-GLKOYSRU.js";
+import "./chunk-JBTJAPUF.js";
 import {
   buildDevinAuthUrl,
   buildDevinOAuthCredential,
   detectLocalDevinCredentials,
-  extractDevinToken
-} from "./chunk-Q5FJJ6XI.js";
+  extractDevinToken,
+  fetchAntigravityCloudCodeCompletion
+} from "./chunk-P6GMCCAT.js";
+import "./chunk-GMZLP5DV.js";
 import "./chunk-5ZUL4CUO.js";
-import "./chunk-UZGQNTVW.js";
-import "./chunk-6OZ36FXI.js";
-import "./chunk-GQBOR3G6.js";
-import "./chunk-OIVSQH2O.js";
-import {
-  createOAuthTokenStore
-} from "./chunk-ONXOABJR.js";
-import "./chunk-W7XHHYWM.js";
+import "./chunk-S5XGT6GB.js";
+import "./chunk-27ONFIEY.js";
+import "./chunk-7KVZ5LDQ.js";
 import {
   toErrorMessage
 } from "./chunk-HNMXYYJR.js";
+import "./chunk-3BXNTXYI.js";
+import "./chunk-W7XHHYWM.js";
+import {
+  createOAuthTokenStore,
+  resolveFreshAccessToken
+} from "./chunk-HNGRBWYF.js";
+import "./chunk-A7GB5UGH.js";
+import "./chunk-OLZBQWZU.js";
 import {
   buildEnvFromProfile,
   getProfileOAuthSync,
   loadProfileConfig,
   saveProfileOAuthSync
-} from "./chunk-BYMV6QZG.js";
-import "./chunk-A7GB5UGH.js";
-import "./chunk-OLZBQWZU.js";
-import "./chunk-Q67DOFOO.js";
-import "./chunk-VMFTFOWF.js";
+} from "./chunk-TNIX77YM.js";
+import "./chunk-Y3PMXGLH.js";
+import "./chunk-3AH7LNUB.js";
 import {
   asOptionalFiniteNumber
 } from "./chunk-WWC7I6TA.js";
 import "./chunk-QSJ3HFEF.js";
+import "./chunk-OW765XBU.js";
 import {
   isRecord
 } from "./chunk-KUG52IAP.js";
@@ -759,7 +768,7 @@ This authorizes model API access only. It does NOT log you into the Nolo platfor
 To manage agents, docs, spaces, and other Nolo resources, run "nolo login" first.
 
 Usage:
-  nolo auth antigravity [--browser] [--no-browser] [--sync-to-server] [--help]
+  nolo auth antigravity [--browser] [--no-browser] [--verify] [--sync-to-server] [--help]
 
 Opens a browser to https://accounts.google.com (OIDC PKCE loopback on 127.0.0.1:51121).
 After approval, the flow provisions a Cloud Code Assist project and stores the
@@ -771,6 +780,8 @@ oh-my-pi; Google does not publish a public Cloud Code Assist client registration
 Options:
   --browser         Use the browser PKCE flow (default for antigravity).
   --no-browser      Print the authorization URL only.
+  --verify          Check the current Google one-time verification challenge
+                    and open the validation link in a browser (no re-auth).
 ${SYNC_HELP_LINE}
   --help, -h        Show this help and exit.
 
@@ -975,6 +986,7 @@ async function runAuthProviderCommand(provider, args, _ctx, deps = {}) {
   const useBrowser = args.includes("--browser");
   const noBrowser = args.includes("--no-browser") || deps.noBrowserByDefault;
   const syncOnly = args.includes("--sync-only");
+  const verify = args.includes("--verify");
   const generateToken = args.includes("--generate-token");
   const writeToEnvRaw = parseFlagWithOptionalValue(args, "--write-to-env");
   const writeToEnvPath = typeof writeToEnvRaw === "string" ? writeToEnvRaw : writeToEnvRaw === true ? ".env" : void 0;
@@ -990,6 +1002,88 @@ async function runAuthProviderCommand(provider, args, _ctx, deps = {}) {
     await syncCredentialToServer(provider, credential, deps);
     return 0;
   }
+  if (verify) {
+    if (provider !== "antigravity") {
+      error.error(`[nolo] --verify is only supported for "nolo auth antigravity".`);
+      return 1;
+    }
+    const credential = tokenStore.read(provider);
+    if (!credential?.accessToken) {
+      error.error(
+        `[nolo] No local antigravity credential. Run: nolo auth antigravity`
+      );
+      return 1;
+    }
+    output.log(
+      `[nolo] Checking the current verification challenge (one lightweight request)...`
+    );
+    let accessToken = null;
+    let refreshError;
+    try {
+      accessToken = await resolveFreshAccessToken({
+        provider,
+        store: tokenStore,
+        refresh: deps.refreshAntigravityToken ?? refreshAntigravityOAuthToken
+      });
+    } catch (err) {
+      refreshError = toErrorMessage(err);
+      if (/invalid_grant|unauthorized_client|revoked|invalid_token|refresh[_ ]token[^.]*(expired|invalid|revoked)|expired[^.]*refresh/i.test(
+        refreshError
+      )) {
+        error.error(
+          `[nolo] The antigravity refresh token is no longer valid (${refreshError}). Re-run \`nolo auth antigravity\` to re-authorize this account.`
+        );
+        return 1;
+      }
+    }
+    let result;
+    try {
+      result = await fetchAntigravityCloudCodeCompletion({
+        agentConfig: { model: "gemini-3.1-pro" },
+        accessToken: accessToken ?? credential.accessToken,
+        metadata: credential.metadata ?? null,
+        openAiBody: { messages: [{ role: "user", content: "hi" }] },
+        fetchImpl: deps.fetchImpl ?? fetch
+      });
+    } catch (err) {
+      const msg = toErrorMessage(err);
+      if (/projectId|metadata\.projectId|Re-run `nolo auth/i.test(msg)) {
+        error.error(
+          `[nolo] The stored antigravity credential is incomplete (${msg}). Re-run \`nolo auth antigravity\` to re-authorize.`
+        );
+      } else {
+        error.error(
+          `[nolo] Could not reach the antigravity provider: ${msg}. Check your network and retry.`
+        );
+      }
+      return 1;
+    }
+    if (result.status >= 200 && result.status < 300) {
+      output.log(
+        `[nolo] \u2713 The credential is working \u2014 no verification is required right now. You can retry your agent.`
+      );
+      return 0;
+    }
+    const { url: validationUrl } = extractGoogleValidationLink(
+      JSON.stringify(result.body ?? {})
+    );
+    if (result.status === 403 && validationUrl) {
+      output.log(
+        `[nolo] Google requires a one-time account verification for ${credential.accountId ?? "this account"}.`
+      );
+      output.log(`[nolo]   ${validationUrl}`);
+      const opener = noBrowser ? void 0 : deps.openBrowser ?? defaultOpenBrowser;
+      const opened = opener ? await opener(validationUrl) : false;
+      output.log(
+        opened ? `[nolo] \u2713 Opened it in your browser \u2014 complete the verification there (sign in with the same Google account), then retry your agent.` : `[nolo] Copy the URL above into a browser signed into ${credential.accountId ?? "that account"}, complete the verification, then retry your agent.`
+      );
+      return 0;
+    }
+    error.error(
+      `[nolo] The provider returned HTTP ${result.status} without a verification link \u2014 this is not the one-time-verification case --verify handles.` + (refreshError ? ` (token refresh also failed earlier: ${refreshError})` : "") + ` Response detail: ${JSON.stringify(result.body ?? {}).slice(0, 400)}`
+    );
+    return 1;
+  }
   const flowDeps = {
     ...deps.fetchImpl ? { fetchImpl: deps.fetchImpl } : {},
     ...deps.sleep ? { sleep: deps.sleep } : {},

package/{authCommands-RGOGCPP6.js → authCommands-FFDS4FVX.js}

@@ -7,16 +7,18 @@ import {
   runLogoutCommand,
   runWhoamiCommand,
   saveTokenLogin
-} from "./chunk-6D6VBVEW.js";
+} from "./chunk-OTEMQQZI.js";
+import "./chunk-TY3TIUJK.js";
 import "./chunk-ESHYE7WU.js";
-import "./chunk-JBTJAPUF.js";
-import "./chunk-2F7RJC6L.js";
+import "./chunk-ZOVKKMF6.js";
 import "./chunk-GLKOYSRU.js";
-import "./chunk-BYMV6QZG.js";
+import "./chunk-JBTJAPUF.js";
 import "./chunk-A7GB5UGH.js";
 import "./chunk-OLZBQWZU.js";
-import "./chunk-VMFTFOWF.js";
+import "./chunk-TNIX77YM.js";
+import "./chunk-3AH7LNUB.js";
 import "./chunk-WWC7I6TA.js";
+import "./chunk-OW765XBU.js";
 import "./chunk-3EUW3WEO.js";
 import "./chunk-U6VC4MU4.js";
 import "./chunk-LCBAMY2M.js";

package/{builtinSkillRegistry-FUAVTRVZ.js → builtinSkillRegistry-CALVIJTX.js}

@@ -7,13 +7,14 @@ import {
   resolveBuiltinSkillEntry,
   resolveBuiltinSkillPage,
   resolveBuiltinSkillSlug
-} from "./chunk-JRQFUXY7.js";
-import "./chunk-DHDMC6FO.js";
-import "./chunk-Q554LLSI.js";
+} from "./chunk-KCDUTE5V.js";
+import "./chunk-QKUMVP3O.js";
+import "./chunk-AUDNYVRC.js";
 import "./chunk-KHCLMKZZ.js";
-import "./chunk-O6OSWFZQ.js";
+import "./chunk-XUWRURDF.js";
+import "./chunk-5J3PYNUP.js";
 import "./chunk-QDSINZM3.js";
-import "./chunk-VMFTFOWF.js";
+import "./chunk-3AH7LNUB.js";
 import "./chunk-WWC7I6TA.js";
 import "./chunk-BNGW5ASC.js";
 import "./chunk-M2EJHDJP.js";

package/{chatQueueReduxAdapter-ZJ555AT2.js → chatQueueReduxAdapter-NMEZRYC2.js}

@@ -4,57 +4,58 @@ import {
 } from "./chunk-YPREESF4.js";
 import {
   handleSendMessage
-} from "./chunk-WRFW73PB.js";
-import "./chunk-MC4XLIJ7.js";
-import "./chunk-3BMYXEUW.js";
+} from "./chunk-UEGYKNHO.js";
+import "./chunk-523DITKR.js";
 import "./chunk-YYLHWIW6.js";
-import "./chunk-AGGIDPCZ.js";
-import "./chunk-RSJECD7I.js";
-import "./chunk-TOP2VXOR.js";
+import "./chunk-6O4IK4V2.js";
+import "./chunk-YJKDTJ2X.js";
+import "./chunk-Z4CSIXYP.js";
 import "./chunk-5RGU3J7P.js";
+import "./chunk-4LCOCOR5.js";
 import {
   clearPendingUserInputQueue,
   dequeueUserInput,
   enqueueUserInput,
   getLoopStopReason,
   getPendingUserInputQueue
-} from "./chunk-6YTOJY35.js";
-import "./chunk-M76ECQRD.js";
+} from "./chunk-6D2JFXLY.js";
 import "./chunk-YDH3FDFQ.js";
-import "./chunk-NEDZDG3M.js";
-import "./chunk-ASQYTZTR.js";
+import "./chunk-MX574M24.js";
+import "./chunk-AGGIDPCZ.js";
+import "./chunk-WILHZY7K.js";
+import "./chunk-6ZWMH6TJ.js";
+import "./chunk-5MMAK75Q.js";
 import "./chunk-PSCNXBYA.js";
-import "./chunk-GQBOR3G6.js";
+import "./chunk-ESRMFY7G.js";
 import "./chunk-BYXBJQAS.js";
-import "./chunk-OIVSQH2O.js";
 import "./chunk-DWLEOOGR.js";
-import "./chunk-HVURBGF3.js";
-import "./chunk-ONXOABJR.js";
-import "./chunk-W7XHHYWM.js";
+import "./chunk-7KVZ5LDQ.js";
 import "./chunk-HNMXYYJR.js";
-import "./chunk-7S4YWN7P.js";
-import "./chunk-ACTMNVHM.js";
-import "./chunk-Q67DOFOO.js";
-import "./chunk-AFUORTY4.js";
+import "./chunk-3BXNTXYI.js";
+import "./chunk-W7XHHYWM.js";
+import "./chunk-RSEEDUMS.js";
+import "./chunk-UAD2WT54.js";
+import "./chunk-HNGRBWYF.js";
+import "./chunk-CYSYR67N.js";
+import "./chunk-Y3PMXGLH.js";
+import "./chunk-SONWNI3L.js";
 import "./chunk-Y5GCAMGP.js";
 import "./chunk-QDSINZM3.js";
 import "./chunk-KX6YBIHG.js";
-import "./chunk-V4MJDUSR.js";
-import "./chunk-UAD2WT54.js";
-import "./chunk-H62HCIUP.js";
-import "./chunk-VMFTFOWF.js";
+import "./chunk-HYZIYH2H.js";
+import "./chunk-7CHC4W22.js";
+import "./chunk-3AH7LNUB.js";
 import "./chunk-WWC7I6TA.js";
-import "./chunk-ABQYVJBJ.js";
 import "./chunk-QSJ3HFEF.js";
-import "./chunk-WV42OMV7.js";
-import "./chunk-BNGW5ASC.js";
-import "./chunk-M2EJHDJP.js";
-import "./chunk-UKWGR5SS.js";
+import "./chunk-IAESIMK7.js";
+import "./chunk-WIWM4FE3.js";
 import "./chunk-QOKAKDPE.js";
-import "./chunk-OW765XBU.js";
 import "./chunk-SEJ5OS6F.js";
+import "./chunk-OW765XBU.js";
 import "./chunk-GBRG75BQ.js";
 import "./chunk-KUG52IAP.js";
+import "./chunk-BNGW5ASC.js";
+import "./chunk-M2EJHDJP.js";
 import "./chunk-3EUW3WEO.js";
 import "./chunk-U6VC4MU4.js";
 import "./chunk-LCBAMY2M.js";