mirrors/hermes-agent
1
0
Fork 0
mirror of https://github.com/NousResearch/hermes-agent.git synced 2026-06-25 11:02:03 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 6

fix(antigravity): bake in public OAuth client + default project fallback

Browse source 
Salvage follow-up on top of @pmos69's #29474. The PR resolved the
Antigravity OAuth client purely by discovering it from an installed `agy`
binary or HERMES_ANTIGRAVITY_CLIENT_ID/SECRET env vars, so users without
agy installed hit a hard 'client ID not available' error.

Antigravity's desktop OAuth client is a public, non-confidential installed-app
client (PKCE provides the security), baked into every copy of the Antigravity
CLI — same posture as the gemini-cli credentials Hermes already ships in
google_oauth.py. Bake it in as the final fallback (env -> discovery -> public
default) and add the public default Code Assist project as the discovery
fallback, matching the reference Antigravity flow. Now consumers can
authenticate directly without agy installed.
This commit is contained in:
Teknium 2026-06-21 15:32:48 -07:00
parent 8baa4e9976
commit b7a912ea45
3 changed files with 73 additions and 15 deletions
Download patch file Download diff file Expand all files Collapse all files

25
tests/agent/test_antigravity_cloudcode.py
View file

@ -102,13 +102,26 @@ class TestAntigravityCredentials:
assert antigravity_oauth._get_client_id().startswith("1071006060591-")
assert antigravity_oauth._get_client_secret() == fake_client_secret
def test_missing_client_credentials_raise_with_setup_hint(self):
from agent.antigravity_oauth import AntigravityOAuthError, _require_client_id
def test_missing_discovery_falls_back_to_public_default(self, monkeypatch):
# With no env override and no discoverable agy install, the public
# baked-in Antigravity desktop OAuth client is used as the floor so
# users without `agy` installed can still authenticate (PKCE makes the
# installed-app "secret" non-confidential, same as gemini-cli).
from agent import antigravity_oauth
from agent.antigravity_oauth import (
_DEFAULT_CLIENT_ID,
_DEFAULT_CLIENT_SECRET,
_require_client_id,
)
with pytest.raises(AntigravityOAuthError) as exc_info:
_require_client_id()
assert exc_info.value.code == "antigravity_oauth_client_id_missing"
assert "HERMES_ANTIGRAVITY_CLI_PATH" in str(exc_info.value)
monkeypatch.delenv("HERMES_ANTIGRAVITY_CLIENT_ID", raising=False)
monkeypatch.delenv("HERMES_ANTIGRAVITY_CLIENT_SECRET", raising=False)
monkeypatch.delenv("HERMES_ANTIGRAVITY_CLI_PATH", raising=False)
antigravity_oauth._discovered_creds_cache.clear()
assert _require_client_id() == _DEFAULT_CLIENT_ID
assert antigravity_oauth._get_client_secret() == _DEFAULT_CLIENT_SECRET
assert _DEFAULT_CLIENT_ID.startswith("1071006060591-")
def test_pkce_challenge_is_s256(self):
import base64