pi-antigravity-rotator 1.9.1 → 1.9.2

package/CHANGELOG.md

@@ -1,5 +1,12 @@
 # Changelog
 
+## [1.9.2] - 2026-04-29
+
+### Fixed
+- **Project Discovery Without Shared Fallback**: Login now fails if Google does not return a companion project ID. No more shared `rising-fact-p41fc` fallback.
+- **Activation Hint**: Login/discovery errors now tell you to open the account in Antigravity IDE and send one message first.
+- **Activation Docs**: README now documents the first-use activation rule for new accounts.
+
 ## [1.9.1] - 2026-04-29
 
 ### Fixed

package/README.md

@@ -9,7 +9,7 @@ Multi-account rotation proxy for Google Antigravity. Distributes API usage acros
 - **Per-model timer tracking** -- Timer classification (`fresh`/`7d`/`5h`) is evaluated per model using each model's actual `resetTime` from the quota API, not a per-account estimate
 - **Smart rotation** -- Rotates only the specific model whose quota dropped, leaving other models on their current accounts
 - **Infringement detection** -- On 403 with infringement/abuse/suspension keywords, the account is immediately flagged and excluded from routing
-- **Automatic failover** -- On 429 rate limits, instantly switches the affected model to the next available account
+- **Safer 429 handling** -- On provider `429`, stops the current request and avoids cascade-burning sibling accounts
 - **Concurrency guardrails** -- Limits each account to one in-flight request by default to avoid bursty pressure
 - **Operator fresh-window controls** -- You can block new `fresh` window starts globally, then selectively allow specific accounts to override that policy
 - **Protective pause** -- Pauses all routing for several hours after serious ToS/abuse-style flags so the rest of the pool is not burned
@@ -57,6 +57,7 @@ Run `npm run login` once per Google account:
 2. Complete the sign-in and grant permissions
 3. The browser redirects to a `localhost` URL that won't load -- this is expected
 4. Copy the **full URL** from the browser's address bar and paste it into the terminal
+5. If project discovery fails, open that same account in Antigravity IDE, send one message, then rerun login
 
 The tool automatically:
 
@@ -66,6 +67,15 @@ The tool automatically:
 
 Re-running with the same email updates the existing entry.
 
+### Activation rule
+
+Some accounts do not expose a discoverable `projectId` until they are used once in the Antigravity IDE.
+If login fails at project discovery:
+
+1. Open that exact Google account in Antigravity IDE.
+2. Send one message.
+3. Rerun `npm run login`.
+
 ## Dashboard
 
 After starting the proxy, open `http://localhost:51200/dashboard` or `http://<your-server-ip>:51200/dashboard` from any machine on the same network (the proxy binds to `0.0.0.0`).
@@ -213,7 +223,8 @@ export PI_AI_ANTIGRAVITY_VERSION=1.107.0
 pi-antigravity-rotator start --config-dir /path/to/config
 ```
 
-`accounts.json` is created automatically by the login command:
+`accounts.json` is created automatically by the login command.
+Login now fails if Google does not return a project ID. No shared fallback.
 
 ```json
 {
@@ -273,7 +284,8 @@ pi-antigravity-rotator start --config-dir /path/to/config
 |-------|-------------|
 | `email` | Google account email (auto-filled by login) |
 | `refreshToken` | OAuth refresh token (auto-filled by login) |
-| `projectId` | Cloud project ID (auto-discovered during login) |
+| `projectId` | Cloud project ID discovered from Google during login |
+| `projectSource` | Optional metadata: `google` when discovered from Google, `manual` if edited by hand |
 | `label` | Display name on the dashboard (auto-filled, defaults to email username) |
 
 ## API Endpoints

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "pi-antigravity-rotator",
-  "version": "1.9.1",
+  "version": "1.9.2",
   "description": "Multi-account rotation proxy for Google Antigravity with per-model routing, real-time quota tracking, and infringement detection",
   "license": "MIT",
   "type": "module",

package/src/login.ts

@@ -79,19 +79,21 @@ export async function runLogin(): Promise<void> {
 	const email = await getUserEmail(tokenData.accessToken);
 
 	console.log("Discovering project...");
-	const projectId = await discoverProject(tokenData.accessToken);
+	const project = await discoverProject(tokenData.accessToken);
 
 	const label = email ? email.split("@")[0] : "Account";
 	const entry: AccountConfig = {
 		email: email || "unknown@gmail.com",
 		refreshToken: tokenData.refreshToken,
-		projectId,
+		projectId: project.projectId,
+		projectSource: project.source,
 		label,
 	};
 
 	console.log();
 	const { isNew } = addAccountToConfig(entry);
 	console.log(`  ${isNew ? "Added" : "Updated"} ${entry.email} in ${ACCOUNTS_FILE}`);
+	console.log(`  projectId=${project.projectId} (source=${project.source})`);
 
 	ensurePiModelsConfig();
 	ensurePiAuthConfig();

package/src/oauth.ts

@@ -11,7 +11,6 @@ export const SCOPES = [
 	"https://www.googleapis.com/auth/experimentsandconfigs",
 ];
 export const AUTH_URL = "https://accounts.google.com/o/oauth2/v2/auth";
-export const DEFAULT_PROJECT_ID = "rising-fact-p41fc";
 
 export interface OAuthClientConfig {
 	clientId: string;
@@ -107,7 +106,13 @@ export async function exchangeAuthorizationCode(code: string, verifier: string):
 	};
 }
 
-export async function discoverProject(accessToken: string): Promise<string> {
+export interface ProjectDiscoveryResult {
+	projectId: string;
+	source: "google";
+	endpoint: string;
+}
+
+export async function discoverProject(accessToken: string): Promise<ProjectDiscoveryResult> {
 	const headers: Record<string, string> = {
 		Authorization: `Bearer ${accessToken}`,
 		"Content-Type": "application/json",
@@ -138,14 +143,14 @@ export async function discoverProject(accessToken: string): Promise<string> {
 					cloudaicompanionProject?: string | { id?: string };
 				};
 				if (typeof data.cloudaicompanionProject === "string" && data.cloudaicompanionProject) {
-					return data.cloudaicompanionProject;
+					return { projectId: data.cloudaicompanionProject, source: "google", endpoint };
 				}
 				if (
 					data.cloudaicompanionProject &&
 					typeof data.cloudaicompanionProject === "object" &&
 					data.cloudaicompanionProject.id
 				) {
-					return data.cloudaicompanionProject.id;
+					return { projectId: data.cloudaicompanionProject.id, source: "google", endpoint };
 				}
 			}
 		} catch {
@@ -153,7 +158,7 @@ export async function discoverProject(accessToken: string): Promise<string> {
 		}
 	}
 
-	return DEFAULT_PROJECT_ID;
+	throw new Error("Could not discover Cloud Code companion project ID from Google. If this account is new, open it in Antigravity IDE and send one message first, then retry login. Login failed instead of falling back to a shared projectId.");
 }
 
 export async function getUserEmail(accessToken: string): Promise<string | undefined> {

package/src/onboarding.ts

@@ -203,12 +203,13 @@ export async function handleHostedCallback(
 	try {
 		const tokenData = await exchangeAuthorizationCode(code, session.verifier);
 		const email = await getUserEmail(tokenData.accessToken);
-		const projectId = await discoverProject(tokenData.accessToken);
+		const project = await discoverProject(tokenData.accessToken);
 		const label = email ? email.split("@")[0] : "Account";
 		const entry = {
 			email: email || "unknown@gmail.com",
 			refreshToken: tokenData.refreshToken,
-			projectId,
+			projectId: project.projectId,
+			projectSource: project.source,
 			label,
 		};
 
@@ -221,6 +222,7 @@ export async function handleHostedCallback(
 				"Account Connected",
 				`<h1>Account Connected</h1>
 <p><strong>${entry.email}</strong> was ${isNew ? "added" : "updated"} successfully.</p>
+<p>Project: <span class="mono">${project.projectId}</span> via ${project.source}.</p>
 <p>The rotator can start using this account immediately.</p>
 <div class="note">If you ever want to stop sharing access, revoke this app's access from the Google account security settings.</div>`,
 			),

package/src/types.ts

@@ -6,6 +6,8 @@ export interface AccountConfig {
 	email: string;
 	refreshToken: string;
 	projectId: string;
+	// How the projectId was obtained.
+	projectSource?: "google" | "manual";
 	label?: string;
 	// Optional - pro/free is detected dynamically from quota API reset times
 	type?: AccountType;