omnigateway 0.10.1 → 0.10.2

package/bin/omni.js

@@ -23656,13 +23656,13 @@ var antigravityDescriptor = {
   writeOverInput: { fiveMinute: 0, oneHour: 0 },
   catalog: ANTIGRAVITY_MODELS,
   modelPrefixes: ["gemini-"],
-  callback: { uri: "http://127.0.0.1:51121/callback", label: "Antigravity" },
+  callback: { uri: "https://antigravity.google/oauth-callback", label: "Antigravity" },
   presentation: {
     label: "Antigravity",
     order: 6,
     tone: "violet",
     colour: { light: "oklch(0.52 0.14 277)", dark: "oklch(0.74 0.14 277)" },
-    pasteHint: "Approve in a browser on the gateway's own machine \u2014 or SSH-forward port 51121 first. When it redirects to 127.0.0.1, paste the whole URL."
+    pasteHint: "Approve in any browser, then paste the whole URL it lands on. A code shown on its own works too."
   }
 };
 
@@ -27254,8 +27254,9 @@ function parseAntigravityQuota(value, now) {
 var antigravityOAuthFlow = {
   kind: "pkce",
   supportsManualPaste: true,
-  async* start({ redirectUri, randomState }) {
+  async* start({ redirectUri, randomState, pkce }) {
     const state = randomState();
+    const { verifier, challenge } = pkce();
     const url2 = new URL(AUTHORIZE_URL2);
     url2.searchParams.set("client_id", CLIENT_ID2);
     url2.searchParams.set("response_type", "code");
@@ -27264,9 +27265,11 @@ var antigravityOAuthFlow = {
     url2.searchParams.set("state", state);
     url2.searchParams.set("access_type", "offline");
     url2.searchParams.set("prompt", "consent");
+    url2.searchParams.set("code_challenge", challenge);
+    url2.searchParams.set("code_challenge_method", "S256");
     return {
       authorizeUrl: url2.toString(),
-      pending: { verifier: "", challenge: "", state, redirectUri }
+      pending: { verifier, challenge, state, redirectUri }
     };
   },
   async* exchange({ code, pending, fail, now }) {
@@ -27279,7 +27282,8 @@ var antigravityOAuthFlow = {
       client_id: CLIENT_ID2,
       client_secret: CLIENT_SECRET,
       code: (rawCode ?? "").trim(),
-      redirect_uri: pending.redirectUri
+      redirect_uri: pending.redirectUri,
+      code_verifier: pending.verifier
     }, fail);
     const email3 = yield* readEmail(token.accessToken);
     const { projectId, tier } = yield* bootstrapProject(token.accessToken);
@@ -35739,7 +35743,7 @@ function createServiceDeps(input2) {
 }
 
 // apps/cli/src/version.ts
-var VERSION = "0.10.1";
+var VERSION = "0.10.2";
 
 // apps/cli/src/commands/service.ts
 function gatewayArgv(root) {

package/gateway.js

@@ -29099,13 +29099,13 @@ var antigravityDescriptor = {
   writeOverInput: { fiveMinute: 0, oneHour: 0 },
   catalog: ANTIGRAVITY_MODELS,
   modelPrefixes: ["gemini-"],
-  callback: { uri: "http://127.0.0.1:51121/callback", label: "Antigravity" },
+  callback: { uri: "https://antigravity.google/oauth-callback", label: "Antigravity" },
   presentation: {
     label: "Antigravity",
     order: 6,
     tone: "violet",
     colour: { light: "oklch(0.52 0.14 277)", dark: "oklch(0.74 0.14 277)" },
-    pasteHint: "Approve in a browser on the gateway's own machine \u2014 or SSH-forward port 51121 first. When it redirects to 127.0.0.1, paste the whole URL."
+    pasteHint: "Approve in any browser, then paste the whole URL it lands on. A code shown on its own works too."
   }
 };
 
@@ -32821,8 +32821,9 @@ function parseAntigravityQuota(value, now) {
 var antigravityOAuthFlow = {
   kind: "pkce",
   supportsManualPaste: true,
-  async* start({ redirectUri, randomState }) {
+  async* start({ redirectUri, randomState, pkce }) {
     const state = randomState();
+    const { verifier, challenge } = pkce();
     const url2 = new URL(AUTHORIZE_URL2);
     url2.searchParams.set("client_id", CLIENT_ID2);
     url2.searchParams.set("response_type", "code");
@@ -32831,9 +32832,11 @@ var antigravityOAuthFlow = {
     url2.searchParams.set("state", state);
     url2.searchParams.set("access_type", "offline");
     url2.searchParams.set("prompt", "consent");
+    url2.searchParams.set("code_challenge", challenge);
+    url2.searchParams.set("code_challenge_method", "S256");
     return {
       authorizeUrl: url2.toString(),
-      pending: { verifier: "", challenge: "", state, redirectUri }
+      pending: { verifier, challenge, state, redirectUri }
     };
   },
   async* exchange({ code, pending, fail, now }) {
@@ -32846,7 +32849,8 @@ var antigravityOAuthFlow = {
       client_id: CLIENT_ID2,
       client_secret: CLIENT_SECRET,
       code: (rawCode ?? "").trim(),
-      redirect_uri: pending.redirectUri
+      redirect_uri: pending.redirectUri,
+      code_verifier: pending.verifier
     }, fail);
     const email3 = yield* readEmail(token.accessToken);
     const { projectId, tier } = yield* bootstrapProject(token.accessToken);
@@ -60644,7 +60648,7 @@ function createRing(limits) {
 }
 
 // apps/gateway/src/version.ts
-var VERSION = "0.10.1";
+var VERSION = "0.10.2";
 
 // apps/gateway/src/app.ts
 var ADMIN_SESSION_TTL_MS = 12 * 60 * 60 * 1000;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "omnigateway",
-  "version": "0.10.1",
+  "version": "0.10.2",
   "description": "Self-hosted AI gateway with Anthropic- and OpenAI-compatible APIs, an admin console, and a CLI",
   "license": "MIT",
   "author": "Harismawan <mail@harismawan.com>",