omnigateway 0.10.1 → 0.10.3

package/bin/omni.js

@@ -23656,13 +23656,13 @@ var antigravityDescriptor = {
   writeOverInput: { fiveMinute: 0, oneHour: 0 },
   catalog: ANTIGRAVITY_MODELS,
   modelPrefixes: ["gemini-"],
-  callback: { uri: "http://127.0.0.1:51121/callback", label: "Antigravity" },
+  callback: { uri: "https://antigravity.google/oauth-callback", label: "Antigravity" },
   presentation: {
     label: "Antigravity",
     order: 6,
     tone: "violet",
     colour: { light: "oklch(0.52 0.14 277)", dark: "oklch(0.74 0.14 277)" },
-    pasteHint: "Approve in a browser on the gateway's own machine \u2014 or SSH-forward port 51121 first. When it redirects to 127.0.0.1, paste the whole URL."
+    pasteHint: "Approve in any browser, then paste the whole URL it lands on. A code shown on its own works too."
   }
 };
 
@@ -26505,6 +26505,17 @@ function closingTurn(contents, note2) {
 }
 var hasCacheControl = (block) => ("cacheControl" in block) && block.cacheControl !== undefined;
 var PRUNED = "antigravity:tool-schema-pruned";
+var AGENT_PREAMBLE_DROPPED = "antigravity:agent-preamble-dropped";
+function dropAgentPreamble(system, note2) {
+  const paragraphs = system.split(/(?:\r?\n){2,}/);
+  const kept = paragraphs.filter((p) => p.trim() !== AGENT_PREAMBLE);
+  if (kept.length === paragraphs.length)
+    return system;
+  note2(AGENT_PREAMBLE_DROPPED);
+  return kept.join(`
+
+`);
+}
 var MAX_STOP_SEQUENCES = 5;
 var MAX_THINKING_BUDGET = 65535;
 function scalarValue(kind, value) {
@@ -26797,8 +26808,9 @@ function toAntigravityWire(req, model, identity) {
   const request2 = {
     contents: closingTurn(openingTurn(mergeSameRole(contents), note2), note2)
   };
-  const system = systemText(req.system, "antigravity", note2);
-  if (system !== undefined && system.length > 0) {
+  const joined = systemText(req.system, "antigravity", note2);
+  const system = joined === undefined ? undefined : dropAgentPreamble(joined, note2);
+  if (system !== undefined && system.trim().length > 0) {
     request2.systemInstruction = { parts: [{ text: system }] };
   }
   const generationConfig = {};
@@ -27254,8 +27266,9 @@ function parseAntigravityQuota(value, now) {
 var antigravityOAuthFlow = {
   kind: "pkce",
   supportsManualPaste: true,
-  async* start({ redirectUri, randomState }) {
+  async* start({ redirectUri, randomState, pkce }) {
     const state = randomState();
+    const { verifier, challenge } = pkce();
     const url2 = new URL(AUTHORIZE_URL2);
     url2.searchParams.set("client_id", CLIENT_ID2);
     url2.searchParams.set("response_type", "code");
@@ -27264,9 +27277,11 @@ var antigravityOAuthFlow = {
     url2.searchParams.set("state", state);
     url2.searchParams.set("access_type", "offline");
     url2.searchParams.set("prompt", "consent");
+    url2.searchParams.set("code_challenge", challenge);
+    url2.searchParams.set("code_challenge_method", "S256");
     return {
       authorizeUrl: url2.toString(),
-      pending: { verifier: "", challenge: "", state, redirectUri }
+      pending: { verifier, challenge, state, redirectUri }
     };
   },
   async* exchange({ code, pending, fail, now }) {
@@ -27279,7 +27294,8 @@ var antigravityOAuthFlow = {
       client_id: CLIENT_ID2,
       client_secret: CLIENT_SECRET,
       code: (rawCode ?? "").trim(),
-      redirect_uri: pending.redirectUri
+      redirect_uri: pending.redirectUri,
+      code_verifier: pending.verifier
     }, fail);
     const email3 = yield* readEmail(token.accessToken);
     const { projectId, tier } = yield* bootstrapProject(token.accessToken);
@@ -35739,7 +35755,7 @@ function createServiceDeps(input2) {
 }
 
 // apps/cli/src/version.ts
-var VERSION = "0.10.1";
+var VERSION = "0.10.3";
 
 // apps/cli/src/commands/service.ts
 function gatewayArgv(root) {

package/gateway.js

@@ -29099,13 +29099,13 @@ var antigravityDescriptor = {
   writeOverInput: { fiveMinute: 0, oneHour: 0 },
   catalog: ANTIGRAVITY_MODELS,
   modelPrefixes: ["gemini-"],
-  callback: { uri: "http://127.0.0.1:51121/callback", label: "Antigravity" },
+  callback: { uri: "https://antigravity.google/oauth-callback", label: "Antigravity" },
   presentation: {
     label: "Antigravity",
     order: 6,
     tone: "violet",
     colour: { light: "oklch(0.52 0.14 277)", dark: "oklch(0.74 0.14 277)" },
-    pasteHint: "Approve in a browser on the gateway's own machine \u2014 or SSH-forward port 51121 first. When it redirects to 127.0.0.1, paste the whole URL."
+    pasteHint: "Approve in any browser, then paste the whole URL it lands on. A code shown on its own works too."
   }
 };
 
@@ -32072,6 +32072,17 @@ function closingTurn(contents, note) {
 }
 var hasCacheControl = (block) => ("cacheControl" in block) && block.cacheControl !== undefined;
 var PRUNED = "antigravity:tool-schema-pruned";
+var AGENT_PREAMBLE_DROPPED = "antigravity:agent-preamble-dropped";
+function dropAgentPreamble(system, note) {
+  const paragraphs = system.split(/(?:\r?\n){2,}/);
+  const kept = paragraphs.filter((p) => p.trim() !== AGENT_PREAMBLE);
+  if (kept.length === paragraphs.length)
+    return system;
+  note(AGENT_PREAMBLE_DROPPED);
+  return kept.join(`
+
+`);
+}
 var MAX_STOP_SEQUENCES = 5;
 var MAX_THINKING_BUDGET = 65535;
 function scalarValue(kind, value) {
@@ -32364,8 +32375,9 @@ function toAntigravityWire(req, model, identity) {
   const request2 = {
     contents: closingTurn(openingTurn(mergeSameRole(contents), note), note)
   };
-  const system = systemText(req.system, "antigravity", note);
-  if (system !== undefined && system.length > 0) {
+  const joined = systemText(req.system, "antigravity", note);
+  const system = joined === undefined ? undefined : dropAgentPreamble(joined, note);
+  if (system !== undefined && system.trim().length > 0) {
     request2.systemInstruction = { parts: [{ text: system }] };
   }
   const generationConfig = {};
@@ -32821,8 +32833,9 @@ function parseAntigravityQuota(value, now) {
 var antigravityOAuthFlow = {
   kind: "pkce",
   supportsManualPaste: true,
-  async* start({ redirectUri, randomState }) {
+  async* start({ redirectUri, randomState, pkce }) {
     const state = randomState();
+    const { verifier, challenge } = pkce();
     const url2 = new URL(AUTHORIZE_URL2);
     url2.searchParams.set("client_id", CLIENT_ID2);
     url2.searchParams.set("response_type", "code");
@@ -32831,9 +32844,11 @@ var antigravityOAuthFlow = {
     url2.searchParams.set("state", state);
     url2.searchParams.set("access_type", "offline");
     url2.searchParams.set("prompt", "consent");
+    url2.searchParams.set("code_challenge", challenge);
+    url2.searchParams.set("code_challenge_method", "S256");
     return {
       authorizeUrl: url2.toString(),
-      pending: { verifier: "", challenge: "", state, redirectUri }
+      pending: { verifier, challenge, state, redirectUri }
     };
   },
   async* exchange({ code, pending, fail, now }) {
@@ -32846,7 +32861,8 @@ var antigravityOAuthFlow = {
       client_id: CLIENT_ID2,
       client_secret: CLIENT_SECRET,
       code: (rawCode ?? "").trim(),
-      redirect_uri: pending.redirectUri
+      redirect_uri: pending.redirectUri,
+      code_verifier: pending.verifier
     }, fail);
     const email3 = yield* readEmail(token.accessToken);
     const { projectId, tier } = yield* bootstrapProject(token.accessToken);
@@ -60644,7 +60660,7 @@ function createRing(limits) {
 }
 
 // apps/gateway/src/version.ts
-var VERSION = "0.10.1";
+var VERSION = "0.10.3";
 
 // apps/gateway/src/app.ts
 var ADMIN_SESSION_TTL_MS = 12 * 60 * 60 * 1000;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "omnigateway",
-  "version": "0.10.1",
+  "version": "0.10.3",
   "description": "Self-hosted AI gateway with Anthropic- and OpenAI-compatible APIs, an admin console, and a CLI",
   "license": "MIT",
   "author": "Harismawan <mail@harismawan.com>",