feat(dashboard): add Gemini CLI auth import/export UI + i18n (PR3)

src/app/(dashboard)/dashboard/providers/[id]/page.tsx

@@ -524,6 +524,7 @@ interface ConnectionRowProps {
   isOAuth: boolean;
   isClaude?: boolean;
   isCodex?: boolean;
+  isGeminiCli?: boolean;
   codexFastGlobalEnabled?: boolean;
   isFirst: boolean;
   isLast: boolean;
@@ -554,6 +555,10 @@ interface ConnectionRowProps {
   isApplyingCodexAuthLocal?: boolean;
   onExportCodexAuthFile?: () => void;
   isExportingCodexAuthFile?: boolean;
+  onApplyGeminiAuthLocal?: () => void;
+  isApplyingGeminiAuthLocal?: boolean;
+  onExportGeminiAuthFile?: () => void;
+  isExportingGeminiAuthFile?: boolean;
 }
 
 interface AddApiKeyModalProps {
@@ -1063,6 +1068,12 @@ export default function ProviderDetailPage() {
   );
   const [exportingCodexAuthId, setExportingCodexAuthId] = useState<string | null>(null);
   const [importCodexModalOpen, setImportCodexModalOpen] = useState(false);
+  const [applyingGeminiAuthId, setApplyingGeminiAuthId] = useState<string | null>(null);
+  const [applyGeminiModalConnectionId, setApplyGeminiModalConnectionId] = useState<string | null>(
+    null
+  );
+  const [exportingGeminiAuthId, setExportingGeminiAuthId] = useState<string | null>(null);
+  const [importGeminiModalOpen, setImportGeminiModalOpen] = useState(false);
   const [codexGlobalFastServiceTier, setCodexGlobalFastServiceTier] = useState(false);
   const [savingCodexGlobalFastServiceTier, setSavingCodexGlobalFastServiceTier] = useState(false);
   const [selectedIds, setSelectedIds] = useState<Set<string>>(new Set());
@@ -2271,6 +2282,83 @@ export default function ProviderDetailPage() {
     }
   };
 
+  const handleApplyGeminiAuthLocal = async (connectionId: string) => {
+    if (applyingGeminiAuthId) return;
+    setApplyingGeminiAuthId(connectionId);
+
+    const defaultSuccess =
+      typeof t.has === "function" && t.has("geminiAuthAppliedLocal")
+        ? t("geminiAuthAppliedLocal")
+        : "Gemini auth applied locally";
+    const defaultError =
+      typeof t.has === "function" && t.has("geminiAuthApplyFailed")
+        ? t("geminiAuthApplyFailed")
+        : "Failed to apply Gemini auth locally";
+
+    try {
+      const res = await fetch(`/api/providers/${connectionId}/gemini-cli-auth/apply-local`, {
+        method: "POST",
+      });
+
+      if (!res.ok) {
+        notify.error(await parseApiErrorMessage(res, defaultError));
+        return;
+      }
+
+      notify.success(defaultSuccess);
+      setApplyGeminiModalConnectionId(null);
+    } catch (error) {
+      console.error("Error applying Gemini auth locally:", error);
+      notify.error(defaultError);
+    } finally {
+      setApplyingGeminiAuthId(null);
+    }
+  };
+
+  const handleExportGeminiAuthFile = async (connectionId: string) => {
+    if (exportingGeminiAuthId) return;
+    setExportingGeminiAuthId(connectionId);
+
+    const defaultSuccess =
+      typeof t.has === "function" && t.has("geminiAuthExported")
+        ? t("geminiAuthExported")
+        : "Gemini auth file exported";
+    const defaultError =
+      typeof t.has === "function" && t.has("geminiAuthExportFailed")
+        ? t("geminiAuthExportFailed")
+        : "Failed to export Gemini auth file";
+
+    try {
+      const res = await fetch(`/api/providers/${connectionId}/gemini-cli-auth/export`, {
+        method: "POST",
+      });
+
+      if (!res.ok) {
+        notify.error(await parseApiErrorMessage(res, defaultError));
+        return;
+      }
+
+      const blob = await res.blob();
+      const filename = getAttachmentFilename(res, "gemini-auth.json");
+      const objectUrl = window.URL.createObjectURL(blob);
+      const link = document.createElement("a");
+
+      link.href = objectUrl;
+      link.download = filename;
+      document.body.appendChild(link);
+      link.click();
+      document.body.removeChild(link);
+      window.setTimeout(() => window.URL.revokeObjectURL(objectUrl), 1000);
+
+      notify.success(defaultSuccess);
+    } catch (error) {
+      console.error("Error exporting Gemini auth file:", error);
+      notify.error(defaultError);
+    } finally {
+      setExportingGeminiAuthId(null);
+    }
+  };
+
   const handleSwapPriority = async (conn1, conn2) => {
     if (!conn1 || !conn2) return;
     try {
@@ -3289,6 +3377,18 @@ export default function ProviderDetailPage() {
                           Experimental OAuth
                         </Button>
                       )}
+                      {providerId === "gemini-cli" && (
+                        <Button
+                          size="sm"
+                          variant="secondary"
+                          icon="upload_file"
+                          onClick={() => setImportGeminiModalOpen(true)}
+                        >
+                          {typeof t.has === "function" && t.has("importGeminiAuth")
+                            ? t("importGeminiAuth")
+                            : "Import auth"}
+                        </Button>
+                      )}
                     </>
                   )}
                 </>
@@ -3355,6 +3455,17 @@ export default function ProviderDetailPage() {
                             : "Import auth"}
                         </Button>
                       )}
+                      {providerId === "gemini-cli" && (
+                        <Button
+                          variant="secondary"
+                          icon="upload_file"
+                          onClick={() => setImportGeminiModalOpen(true)}
+                        >
+                          {typeof t.has === "function" && t.has("importGeminiAuth")
+                            ? t("importGeminiAuth")
+                            : "Import auth"}
+                        </Button>
+                      )}
                     </>
                   )}
                 </div>
@@ -3424,6 +3535,7 @@ export default function ProviderDetailPage() {
                             handleToggleClaudeExtraUsage(conn.id, enabled)
                           }
                           isCodex={providerId === "codex"}
+                          isGeminiCli={providerId === "gemini-cli"}
                           isCcCompatible={isCcCompatible}
                           cliproxyapiEnabled={cpaProviderEnabled}
                           onToggleCliproxyapiMode={(enabled) =>
@@ -3465,6 +3577,18 @@ export default function ProviderDetailPage() {
                               : undefined
                           }
                           isExportingCodexAuthFile={exportingCodexAuthId === conn.id}
+                          onApplyGeminiAuthLocal={
+                            providerId === "gemini-cli"
+                              ? () => setApplyGeminiModalConnectionId(conn.id)
+                              : undefined
+                          }
+                          isApplyingGeminiAuthLocal={applyingGeminiAuthId === conn.id}
+                          onExportGeminiAuthFile={
+                            providerId === "gemini-cli"
+                              ? () => handleExportGeminiAuthFile(conn.id)
+                              : undefined
+                          }
+                          isExportingGeminiAuthFile={exportingGeminiAuthId === conn.id}
                           onProxy={() =>
                             setProxyTarget({
                               level: "key",
@@ -3589,6 +3713,7 @@ export default function ProviderDetailPage() {
                                   handleToggleClaudeExtraUsage(conn.id, enabled)
                                 }
                                 isCodex={providerId === "codex"}
+                                isGeminiCli={providerId === "gemini-cli"}
                                 isCcCompatible={isCcCompatible}
                                 cliproxyapiEnabled={cpaProviderEnabled}
                                 onToggleCodex5h={(enabled) =>
@@ -3627,6 +3752,18 @@ export default function ProviderDetailPage() {
                                     : undefined
                                 }
                                 isExportingCodexAuthFile={exportingCodexAuthId === conn.id}
+                                onApplyGeminiAuthLocal={
+                                  providerId === "gemini-cli"
+                                    ? () => setApplyGeminiModalConnectionId(conn.id)
+                                    : undefined
+                                }
+                                isApplyingGeminiAuthLocal={applyingGeminiAuthId === conn.id}
+                                onExportGeminiAuthFile={
+                                  providerId === "gemini-cli"
+                                    ? () => handleExportGeminiAuthFile(conn.id)
+                                    : undefined
+                                }
+                                isExportingGeminiAuthFile={exportingGeminiAuthId === conn.id}
                                 onProxy={() =>
                                   setProxyTarget({
                                     level: "key",
@@ -3823,6 +3960,27 @@ export default function ProviderDetailPage() {
           }}
         />
       )}
+      {/* Gemini Apply Auth Modal */}
+      {providerId === "gemini-cli" && applyGeminiModalConnectionId && (
+        <ApplyGeminiAuthModal
+          key={applyGeminiModalConnectionId}
+          connectionId={applyGeminiModalConnectionId}
+          inProgress={!!applyingGeminiAuthId}
+          onConfirm={handleApplyGeminiAuthLocal}
+          onClose={() => setApplyGeminiModalConnectionId(null)}
+        />
+      )}
+      {/* Gemini Import Auth Modal */}
+      {providerId === "gemini-cli" && importGeminiModalOpen && (
+        <ImportGeminiAuthModal
+          key="import-gemini-modal"
+          onClose={() => setImportGeminiModalOpen(false)}
+          onSuccess={() => {
+            setImportGeminiModalOpen(false);
+            fetchData();
+          }}
+        />
+      )}
       {/* Batch Test Results Modal */}
       {batchTestResults && (
         <div
@@ -5650,6 +5808,7 @@ function ConnectionRow({
   isOAuth,
   isClaude,
   isCodex,
+  isGeminiCli,
   codexFastGlobalEnabled,
   isCcCompatible,
   cliproxyapiEnabled,
@@ -5680,6 +5839,10 @@ function ConnectionRow({
   isApplyingCodexAuthLocal,
   onExportCodexAuthFile,
   isExportingCodexAuthFile,
+  onApplyGeminiAuthLocal,
+  isApplyingGeminiAuthLocal,
+  onExportGeminiAuthFile,
+  isExportingGeminiAuthFile,
 }: ConnectionRowProps) {
   const t = useTranslations("providers");
   const emailsVisible = useEmailPrivacyStore((s) => s.emailsVisible);
@@ -5698,6 +5861,14 @@ function ConnectionRow({
     typeof t.has === "function" && t.has("exportCodexAuthFile")
       ? t("exportCodexAuthFile")
       : "Export auth";
+  const applyGeminiAuthLabel =
+    typeof t.has === "function" && t.has("applyGeminiAuthLocal")
+      ? t("applyGeminiAuthLocal")
+      : "Apply auth";
+  const exportGeminiAuthLabel =
+    typeof t.has === "function" && t.has("exportGeminiAuthFile")
+      ? t("exportGeminiAuthFile")
+      : "Export auth";
 
   // Use useState + useEffect for impure Date.now() to avoid calling during render
   const [isCooldown, setIsCooldown] = useState(false);
@@ -6038,6 +6209,34 @@ function ConnectionRow({
             {exportCodexAuthLabel}
           </Button>
         )}
+        {isGeminiCli && onApplyGeminiAuthLocal && (
+          <Button
+            size="sm"
+            variant="ghost"
+            icon="install_desktop"
+            loading={isApplyingGeminiAuthLocal}
+            disabled={isApplyingGeminiAuthLocal}
+            onClick={onApplyGeminiAuthLocal}
+            className="!h-7 !px-2 text-xs text-emerald-500 hover:text-emerald-400"
+            title={applyGeminiAuthLabel}
+          >
+            {applyGeminiAuthLabel}
+          </Button>
+        )}
+        {isGeminiCli && onExportGeminiAuthFile && (
+          <Button
+            size="sm"
+            variant="ghost"
+            icon="download"
+            loading={isExportingGeminiAuthFile}
+            disabled={isExportingGeminiAuthFile}
+            onClick={onExportGeminiAuthFile}
+            className="!h-7 !px-2 text-xs text-sky-500 hover:text-sky-400"
+            title={exportGeminiAuthLabel}
+          >
+            {exportGeminiAuthLabel}
+          </Button>
+        )}
         <Toggle
           size="sm"
           checked={connection.isActive ?? true}
@@ -8809,3 +9008,710 @@ function EditCompatibleNodeModal({
     </Modal>
   );
 }
+
+// ──── ImportGeminiAuthModal ────────────────────────────────────────────────────
+
+interface ImportGeminiAuthModalProps {
+  onClose: () => void;
+  onSuccess: () => void;
+}
+
+type GeminiImportTopTab = "single" | "bulk";
+type GeminiBulkSubMode = "upload" | "paste" | "zip";
+
+interface GeminiBulkEntry {
+  name: string;
+  json: unknown;
+  parseError: string | null;
+  email: string | null;
+}
+
+function extractEmailFromGeminiJwt(idToken: string): string | null {
+  try {
+    const parts = idToken.split(".");
+    if (parts.length !== 3) return null;
+    const payload = JSON.parse(Buffer.from(parts[1], "base64url").toString("utf8"));
+    return typeof payload.email === "string" ? payload.email : null;
+  } catch {
+    return null;
+  }
+}
+
+function previewGeminiJson(json: unknown): { valid: boolean; email: string | null } {
+  try {
+    const doc = json && typeof json === "object" ? (json as Record<string, unknown>) : null;
+    if (!doc) return { valid: false, email: null };
+    if (!doc.access_token || !doc.refresh_token || !doc.id_token)
+      return { valid: false, email: null };
+    const email =
+      typeof doc.id_token === "string" ? extractEmailFromGeminiJwt(doc.id_token) : null;
+    return { valid: true, email };
+  } catch {
+    return { valid: false, email: null };
+  }
+}
+
+function ImportGeminiAuthModal({ onClose, onSuccess }: ImportGeminiAuthModalProps) {
+  const t = useTranslations("providers");
+  const notify = useNotificationStore();
+
+  const [topTab, setTopTab] = useState<GeminiImportTopTab>("single");
+  const [singleSubTab, setSingleSubTab] = useState<"upload" | "paste">("upload");
+  const [bulkSubMode, setBulkSubMode] = useState<GeminiBulkSubMode>("upload");
+
+  // Single
+  const [singleJson, setSingleJson] = useState<unknown>(null);
+  const [singlePasteText, setSinglePasteText] = useState("");
+  const [singleName, setSingleName] = useState("");
+  const [singleEmail, setSingleEmail] = useState("");
+  const [overwriteExisting, setOverwriteExisting] = useState(false);
+  const [submitting, setSubmitting] = useState(false);
+
+  // Bulk
+  const [bulkEntries, setBulkEntries] = useState<GeminiBulkEntry[]>([]);
+  const [bulkPasteText, setBulkPasteText] = useState("");
+  const [bulkSubmitting, setBulkSubmitting] = useState(false);
+  const [bulkErrors, setBulkErrors] = useState<
+    { index: number; name: string; message: string }[]
+  >([]);
+  const [bulkResult, setBulkResult] = useState<{
+    success: number;
+    failed: number;
+    total: number;
+  } | null>(null);
+  const [zipExtracting, setZipExtracting] = useState(false);
+
+  const handleSingleFileChange = (e: React.ChangeEvent<HTMLInputElement>) => {
+    const file = e.target.files?.[0];
+    if (!file) return;
+    const reader = new FileReader();
+    reader.onload = (ev) => {
+      try {
+        const json = JSON.parse(ev.target?.result as string);
+        setSingleJson(json);
+      } catch {
+        notify.error(
+          typeof t.has === "function" && t.has("geminiImportInvalidJson")
+            ? t("geminiImportInvalidJson")
+            : "Could not parse the file as JSON"
+        );
+      }
+    };
+    reader.readAsText(file);
+  };
+
+  const handleSingleSubmit = async () => {
+    if (submitting) return;
+    setSubmitting(true);
+    try {
+      const body =
+        singleSubTab === "paste"
+          ? {
+              source: { kind: "text", text: singlePasteText },
+              name: singleName || undefined,
+              email: singleEmail || undefined,
+              overwriteExisting,
+            }
+          : {
+              source: { kind: "json", json: singleJson },
+              name: singleName || undefined,
+              email: singleEmail || undefined,
+              overwriteExisting,
+            };
+
+      const res = await fetch("/api/providers/gemini-cli-auth/import", {
+        method: "POST",
+        headers: { "Content-Type": "application/json" },
+        body: JSON.stringify(body),
+      });
+
+      const data = await res.json().catch(() => ({}));
+
+      if (!res.ok) {
+        if (data.code === "duplicate_account") {
+          notify.error(
+            typeof t.has === "function" && t.has("geminiImportDuplicate")
+              ? t("geminiImportDuplicate")
+              : "Account already exists — enable \"Replace existing\" to overwrite"
+          );
+        } else if (data.code === "identity_unverified") {
+          notify.error(
+            typeof t.has === "function" && t.has("geminiImportIdentityUnverified")
+              ? t("geminiImportIdentityUnverified")
+              : "Could not verify identity from id_token. Enable \"Replace existing\" or provide an email."
+          );
+        } else {
+          notify.error(
+            data.error ||
+              (typeof t.has === "function" && t.has("geminiImportFailed")
+                ? t("geminiImportFailed")
+                : "Failed to import Gemini auth")
+          );
+        }
+        return;
+      }
+
+      const preview = previewGeminiJson(singleJson);
+      notify.success(
+        typeof t.has === "function" && t.has("geminiImportSuccess")
+          ? t("geminiImportSuccess")
+          : `Gemini connection imported successfully${preview.email ? ` (${preview.email})` : ""}`
+      );
+      onSuccess();
+    } catch {
+      notify.error(
+        typeof t.has === "function" && t.has("geminiImportFailed")
+          ? t("geminiImportFailed")
+          : "Failed to import Gemini auth"
+      );
+    } finally {
+      setSubmitting(false);
+    }
+  };
+
+  const handleBulkFilesChange = (e: React.ChangeEvent<HTMLInputElement>) => {
+    const files = Array.from(e.target.files || []);
+    const newEntries: GeminiBulkEntry[] = [];
+    let pending = files.length;
+    if (!pending) return;
+    files.forEach((file) => {
+      const reader = new FileReader();
+      reader.onload = (ev) => {
+        try {
+          const json = JSON.parse(ev.target?.result as string);
+          const { email } = previewGeminiJson(json);
+          newEntries.push({
+            name: file.name.replace(/\.json$/, ""),
+            json,
+            parseError: null,
+            email,
+          });
+        } catch {
+          newEntries.push({
+            name: file.name,
+            json: null,
+            parseError: "Not valid JSON",
+            email: null,
+          });
+        }
+        pending--;
+        if (pending === 0) setBulkEntries((prev) => [...prev, ...newEntries]);
+      };
+      reader.readAsText(file);
+    });
+  };
+
+  const handleBulkPasteChange = (text: string) => {
+    setBulkPasteText(text);
+    const trimmed = text.trim();
+    if (!trimmed) {
+      setBulkEntries([]);
+      return;
+    }
+    try {
+      const arr = JSON.parse(trimmed);
+      if (Array.isArray(arr)) {
+        setBulkEntries(
+          arr.map((item, i) => {
+            const { email } = previewGeminiJson(item);
+            return { name: email || `entry ${i + 1}`, json: item, parseError: null, email };
+          })
+        );
+      } else {
+        const { email } = previewGeminiJson(arr);
+        setBulkEntries([{ name: email || "entry 1", json: arr, parseError: null, email }]);
+      }
+    } catch {
+      setBulkEntries([
+        { name: "parse error", json: null, parseError: "Invalid JSON", email: null },
+      ]);
+    }
+  };
+
+  const handleZipUpload = async (e: React.ChangeEvent<HTMLInputElement>) => {
+    const file = e.target.files?.[0];
+    if (!file) return;
+    setZipExtracting(true);
+    try {
+      const res = await fetch("/api/providers/gemini-cli-auth/zip-extract", {
+        method: "POST",
+        headers: { "Content-Type": "application/zip" },
+        body: file,
+      });
+      const data = await res.json().catch(() => ({}));
+      if (!res.ok) {
+        notify.error(
+          data.error ||
+            (typeof t.has === "function" && t.has("geminiImportBulkZipError")
+              ? t("geminiImportBulkZipError")
+              : "Failed to extract ZIP")
+        );
+        return;
+      }
+      const entries: GeminiBulkEntry[] = (data.entries || []).map(
+        (e: { name: string; json: unknown; parseError: string | null }) => {
+          const { email } = previewGeminiJson(e.json);
+          return { name: e.name, json: e.json, parseError: e.parseError, email };
+        }
+      );
+      setBulkEntries(entries);
+    } catch {
+      notify.error(
+        typeof t.has === "function" && t.has("geminiImportBulkZipError")
+          ? t("geminiImportBulkZipError")
+          : "Failed to extract ZIP"
+      );
+    } finally {
+      setZipExtracting(false);
+    }
+  };
+
+  const handleBulkSubmit = async () => {
+    if (bulkSubmitting) return;
+    setBulkSubmitting(true);
+    setBulkErrors([]);
+    setBulkResult(null);
+    try {
+      const validEntries = bulkEntries.filter((e) => e.json !== null);
+      if (validEntries.length === 0) {
+        notify.error("No valid entries to import");
+        return;
+      }
+      const res = await fetch("/api/providers/gemini-cli-auth/import-bulk", {
+        method: "POST",
+        headers: { "Content-Type": "application/json" },
+        body: JSON.stringify({
+          entries: validEntries.map((e) => ({
+            json: e.json,
+            name: e.name,
+            email: e.email || undefined,
+          })),
+          overwriteExisting,
+        }),
+      });
+      const data = await res.json().catch(() => ({}));
+      if (!res.ok) {
+        notify.error(
+          data.error ||
+            (typeof t.has === "function" && t.has("geminiImportBulkFailed")
+              ? t("geminiImportBulkFailed")
+              : "Some entries failed to import")
+        );
+        return;
+      }
+      setBulkResult({ success: data.success, failed: data.failed, total: data.total });
+      if (data.errors?.length > 0) setBulkErrors(data.errors);
+      if (data.success > 0) {
+        notify.success(
+          typeof t.has === "function" && t.has("geminiImportBulkSuccess")
+            ? t("geminiImportBulkSuccess", { count: data.success })
+            : `Imported ${data.success} Gemini connections`
+        );
+        if (data.failed === 0) onSuccess();
+      }
+    } catch {
+      notify.error(
+        typeof t.has === "function" && t.has("geminiImportBulkFailed")
+          ? t("geminiImportBulkFailed")
+          : "Some entries failed to import"
+      );
+    } finally {
+      setBulkSubmitting(false);
+    }
+  };
+
+  const tabLabels: Record<GeminiImportTopTab, string> = {
+    single:
+      typeof t.has === "function" && t.has("geminiImportTabSingle")
+        ? t("geminiImportTabSingle")
+        : "Single",
+    bulk:
+      typeof t.has === "function" && t.has("geminiImportTabBulk")
+        ? t("geminiImportTabBulk")
+        : "Bulk",
+  };
+
+  const modalTitle =
+    typeof t.has === "function" && t.has("geminiImportModalTitle")
+      ? t("geminiImportModalTitle")
+      : "Import Gemini Auth";
+
+  return (
+    <Modal isOpen onClose={onClose} title={modalTitle}>
+      <div className="flex flex-col gap-4">
+        <div className="flex gap-1 border-b border-border pb-0">
+          {(["single", "bulk"] as GeminiImportTopTab[]).map((tab) => (
+            <button
+              key={tab}
+              onClick={() => setTopTab(tab)}
+              className={`px-3 py-1.5 text-sm rounded-t-md transition-colors ${
+                topTab === tab
+                  ? "bg-primary/10 text-primary border-b-2 border-primary"
+                  : "text-text-muted hover:text-text-primary"
+              }`}
+            >
+              {tabLabels[tab]}
+            </button>
+          ))}
+        </div>
+
+        {topTab === "single" && (
+          <div className="flex flex-col gap-3">
+            <div className="flex gap-1">
+              {(["upload", "paste"] as const).map((sub) => (
+                <button
+                  key={sub}
+                  onClick={() => setSingleSubTab(sub)}
+                  className={`px-2 py-1 text-xs rounded transition-colors ${
+                    singleSubTab === sub
+                      ? "bg-bg-subtle text-text-primary"
+                      : "text-text-muted hover:text-text-primary"
+                  }`}
+                >
+                  {sub === "upload"
+                    ? typeof t.has === "function" && t.has("geminiImportTabUpload")
+                      ? t("geminiImportTabUpload")
+                      : "Upload file"
+                    : typeof t.has === "function" && t.has("geminiImportTabPaste")
+                      ? t("geminiImportTabPaste")
+                      : "Paste JSON"}
+                </button>
+              ))}
+            </div>
+            {singleSubTab === "upload" ? (
+              <div>
+                <label className="block text-xs text-text-muted mb-1">
+                  {typeof t.has === "function" && t.has("geminiImportFileLabel")
+                    ? t("geminiImportFileLabel")
+                    : "Choose oauth_creds.json"}
+                </label>
+                <input
+                  type="file"
+                  accept=".json"
+                  onChange={handleSingleFileChange}
+                  className="block w-full text-sm"
+                />
+                {singleJson && previewGeminiJson(singleJson).valid && (
+                  <p className="mt-1 text-xs text-emerald-500">
+                    Valid Gemini OAuth credentials
+                    {previewGeminiJson(singleJson).email
+                      ? ` (${previewGeminiJson(singleJson).email})`
+                      : ""}
+                  </p>
+                )}
+                {singleJson && !previewGeminiJson(singleJson).valid && (
+                  <p className="mt-1 text-xs text-red-500">
+                    {typeof t.has === "function" && t.has("geminiImportInvalidShape")
+                      ? t("geminiImportInvalidShape")
+                      : "The file is not a valid oauth_creds.json"}
+                  </p>
+                )}
+              </div>
+            ) : (
+              <div>
+                <label className="block text-xs text-text-muted mb-1">
+                  {typeof t.has === "function" && t.has("geminiImportPasteLabel")
+                    ? t("geminiImportPasteLabel")
+                    : "Paste the JSON content"}
+                </label>
+                <textarea
+                  value={singlePasteText}
+                  onChange={(e) => setSinglePasteText(e.target.value)}
+                  rows={6}
+                  className="w-full rounded border border-border bg-bg-subtle px-2 py-1.5 text-xs font-mono text-text-main"
+                  placeholder='{ "access_token": "...", "refresh_token": "...", "id_token": "..." }'
+                />
+              </div>
+            )}
+            <div className="grid grid-cols-2 gap-2">
+              <div>
+                <label className="block text-xs text-text-muted mb-1">
+                  {typeof t.has === "function" && t.has("geminiImportEmailLabel")
+                    ? t("geminiImportEmailLabel")
+                    : "Account email"}
+                </label>
+                <input
+                  type="email"
+                  value={singleEmail}
+                  onChange={(e) => setSingleEmail(e.target.value)}
+                  placeholder="auto-detected from id_token"
+                  className="w-full rounded border border-border bg-bg-subtle px-2 py-1.5 text-xs text-text-main"
+                />
+              </div>
+              <div>
+                <label className="block text-xs text-text-muted mb-1">
+                  {typeof t.has === "function" && t.has("geminiImportNameLabel")
+                    ? t("geminiImportNameLabel")
+                    : "Connection name (optional)"}
+                </label>
+                <input
+                  type="text"
+                  value={singleName}
+                  onChange={(e) => setSingleName(e.target.value)}
+                  placeholder="My Gemini account"
+                  className="w-full rounded border border-border bg-bg-subtle px-2 py-1.5 text-xs text-text-main"
+                />
+              </div>
+            </div>
+            <label className="flex items-center gap-2 text-xs text-text-muted">
+              <input
+                type="checkbox"
+                checked={overwriteExisting}
+                onChange={(e) => setOverwriteExisting(e.target.checked)}
+              />
+              {typeof t.has === "function" && t.has("geminiImportOverwriteLabel")
+                ? t("geminiImportOverwriteLabel")
+                : "Replace existing connection if account already exists"}
+            </label>
+            <Button
+              loading={submitting}
+              onClick={handleSingleSubmit}
+              disabled={singleSubTab === "upload" ? !singleJson : !singlePasteText.trim()}
+            >
+              {typeof t.has === "function" && t.has("geminiImportSubmit")
+                ? t("geminiImportSubmit")
+                : "Import"}
+            </Button>
+          </div>
+        )}
+
+        {topTab === "bulk" && (
+          <div className="flex flex-col gap-3">
+            <div className="flex gap-1">
+              {(["upload", "paste", "zip"] as GeminiBulkSubMode[]).map((mode) => (
+                <button
+                  key={mode}
+                  onClick={() => {
+                    setBulkSubMode(mode);
+                    setBulkEntries([]);
+                  }}
+                  className={`px-2 py-1 text-xs rounded transition-colors ${
+                    bulkSubMode === mode
+                      ? "bg-bg-subtle text-text-primary"
+                      : "text-text-muted hover:text-text-primary"
+                  }`}
+                >
+                  {mode === "upload"
+                    ? typeof t.has === "function" && t.has("geminiImportBulkModeUpload")
+                      ? t("geminiImportBulkModeUpload")
+                      : "Upload files"
+                    : mode === "paste"
+                      ? typeof t.has === "function" && t.has("geminiImportBulkModePaste")
+                        ? t("geminiImportBulkModePaste")
+                        : "Paste JSON array"
+                      : typeof t.has === "function" && t.has("geminiImportBulkModeZip")
+                        ? t("geminiImportBulkModeZip")
+                        : "Upload ZIP"}
+                </button>
+              ))}
+            </div>
+
+            {bulkSubMode === "upload" && (
+              <div>
+                <p className="text-xs text-text-muted mb-1">
+                  {typeof t.has === "function" && t.has("geminiImportBulkUploadHint")
+                    ? t("geminiImportBulkUploadHint")
+                    : "Drop or pick up to 50 oauth_creds.json files (256KB each, 10MB total)."}
+                </p>
+                <input
+                  type="file"
+                  accept=".json"
+                  multiple
+                  onChange={handleBulkFilesChange}
+                  className="block w-full text-sm"
+                />
+              </div>
+            )}
+            {bulkSubMode === "paste" && (
+              <div>
+                <p className="text-xs text-text-muted mb-1">
+                  {typeof t.has === "function" && t.has("geminiImportBulkPasteHint")
+                    ? t("geminiImportBulkPasteHint")
+                    : "Paste an array of objects: [{ json, name?, email? }, ...]"}
+                </p>
+                <textarea
+                  value={bulkPasteText}
+                  onChange={(e) => handleBulkPasteChange(e.target.value)}
+                  rows={6}
+                  className="w-full rounded border border-border bg-bg-subtle px-2 py-1.5 text-xs font-mono text-text-main"
+                  placeholder="[{ ... }, { ... }]"
+                />
+              </div>
+            )}
+            {bulkSubMode === "zip" && (
+              <div>
+                <p className="text-xs text-text-muted mb-1">
+                  {typeof t.has === "function" && t.has("geminiImportBulkZipHint")
+                    ? t("geminiImportBulkZipHint")
+                    : "ZIP containing oauth_creds.json entries. Max 50 entries, 10MB unpacked."}
+                </p>
+                {zipExtracting ? (
+                  <p className="text-xs text-primary animate-pulse">
+                    {typeof t.has === "function" && t.has("geminiImportBulkZipExtracting")
+                      ? t("geminiImportBulkZipExtracting")
+                      : "Extracting ZIP…"}
+                  </p>
+                ) : (
+                  <input
+                    type="file"
+                    accept=".zip"
+                    onChange={handleZipUpload}
+                    className="block w-full text-sm"
+                  />
+                )}
+              </div>
+            )}
+
+            {bulkEntries.length > 0 && (
+              <div className="rounded border border-border bg-bg-subtle px-2 py-1.5 max-h-36 overflow-y-auto">
+                {bulkEntries.map((e, i) => (
+                  <div
+                    key={i}
+                    className={`text-xs py-0.5 flex items-center gap-1 ${e.parseError ? "text-red-500" : "text-text-main"}`}
+                  >
+                    <span className="material-symbols-outlined text-[12px]">
+                      {e.parseError ? "error" : "check_circle"}
+                    </span>
+                    {e.name}
+                    {e.email ? ` (${e.email})` : ""}
+                    {e.parseError ? ` — ${e.parseError}` : ""}
+                  </div>
+                ))}
+              </div>
+            )}
+
+            <label className="flex items-center gap-2 text-xs text-text-muted">
+              <input
+                type="checkbox"
+                checked={overwriteExisting}
+                onChange={(e) => setOverwriteExisting(e.target.checked)}
+              />
+              {typeof t.has === "function" && t.has("geminiImportOverwriteLabel")
+                ? t("geminiImportOverwriteLabel")
+                : "Replace existing connection if account already exists"}
+            </label>
+
+            {bulkResult && (
+              <div className="rounded bg-bg-subtle px-2 py-1.5 text-xs">
+                {bulkResult.success}/{bulkResult.total} imported
+                {bulkResult.failed > 0 ? `, ${bulkResult.failed} failed` : ""}
+              </div>
+            )}
+            {bulkErrors.length > 0 && (
+              <div className="rounded border border-red-500/30 bg-red-500/5 px-2 py-1.5 max-h-28 overflow-y-auto">
+                {bulkErrors.map((e) => (
+                  <div key={e.index} className="text-xs text-red-500 py-0.5">
+                    {e.name}: {e.message}
+                  </div>
+                ))}
+              </div>
+            )}
+
+            <Button
+              loading={bulkSubmitting}
+              onClick={handleBulkSubmit}
+              disabled={bulkEntries.filter((e) => e.json !== null).length === 0}
+            >
+              {typeof t.has === "function" && t.has("geminiImportBulkSubmit")
+                ? t("geminiImportBulkSubmit")
+                : "Import all"}
+            </Button>
+          </div>
+        )}
+      </div>
+    </Modal>
+  );
+}
+
+// ──── ApplyGeminiAuthModal ────────────────────────────────────────────────────
+
+function ApplyGeminiAuthModal({
+  connectionId,
+  inProgress,
+  onConfirm,
+  onClose,
+}: {
+  connectionId: string | null;
+  inProgress: boolean;
+  onConfirm: (id: string) => Promise<void>;
+  onClose: () => void;
+}) {
+  const t = useTranslations("providers");
+  const [confirmed, setConfirmed] = useState(false);
+  const isOpen = !!connectionId;
+
+  if (!connectionId) return null;
+
+  const title =
+    typeof t.has === "function" && t.has("geminiApplyModalTitle")
+      ? t("geminiApplyModalTitle")
+      : "Apply to Local Gemini CLI";
+  const targetLabel =
+    typeof t.has === "function" && t.has("geminiApplyTargetLabel")
+      ? t("geminiApplyTargetLabel")
+      : "Target path";
+  const backupLabel =
+    typeof t.has === "function" && t.has("geminiApplyBackupLabel")
+      ? t("geminiApplyBackupLabel")
+      : "Backups";
+  const warning =
+    typeof t.has === "function" && t.has("geminiApplyWarning")
+      ? t("geminiApplyWarning")
+      : "This will replace the existing oauth_creds.json and update google_accounts.json. Continue?";
+  const confirmText =
+    typeof t.has === "function" && t.has("geminiApplyConfirmCheckbox")
+      ? t("geminiApplyConfirmCheckbox")
+      : "I confirm I want to replace the existing oauth_creds.json";
+  const applyText =
+    typeof t.has === "function" && t.has("geminiApply") ? t("geminiApply") : "Apply";
+  const accountsHint =
+    typeof t.has === "function" && t.has("geminiApplyAccountsHint")
+      ? t("geminiApplyAccountsHint")
+      : "The google_accounts.json active account will be updated to match this connection.";
+
+  return (
+    <Modal isOpen={isOpen} title={title} onClose={onClose}>
+      <div className="flex flex-col gap-4">
+        <div>
+          <div className="text-xs uppercase text-text-muted mb-1">{targetLabel}</div>
+          <code className="block rounded bg-sidebar px-2 py-1.5 text-xs font-mono text-text-main">
+            ~/.gemini/oauth_creds.json
+          </code>
+          <p className="mt-1 text-xs text-text-muted">
+            Path is auto-detected per OS (Linux/Mac).
+          </p>
+        </div>
+        <div>
+          <div className="text-xs uppercase text-text-muted mb-1">{backupLabel}</div>
+          <code className="block rounded bg-sidebar px-2 py-1.5 text-xs font-mono text-text-main">
+            ~/.gemini/oauth_creds-&#123;timestamp&#125;.bak
+          </code>
+        </div>
+        <div className="rounded bg-amber-500/10 border border-amber-500/20 px-3 py-2 text-xs text-amber-400">
+          {accountsHint}
+        </div>
+        <p className="text-sm text-text-muted">{warning}</p>
+        <label className="flex items-center gap-2 text-sm">
+          <input
+            type="checkbox"
+            checked={confirmed}
+            onChange={(e) => setConfirmed(e.target.checked)}
+          />
+          {confirmText}
+        </label>
+        <div className="flex justify-end gap-2">
+          <Button variant="secondary" onClick={onClose} disabled={inProgress}>
+            Cancel
+          </Button>
+          <Button
+            loading={inProgress}
+            disabled={!confirmed || inProgress}
+            onClick={() => void onConfirm(connectionId)}
+          >
+            {applyText}
+          </Button>
+        </div>
+      </div>
+    </Modal>
+  );
+}

src/i18n/messages/en.json

@@ -3111,6 +3111,48 @@
     "tokenRefreshFailed": "Token refresh failed",
     "applyCodexAuthLocal": "Apply auth",
     "exportCodexAuthFile": "Export auth",
+    "applyGeminiAuthLocal": "Apply auth",
+    "exportGeminiAuthFile": "Export auth",
+    "importGeminiAuth": "Import auth",
+    "geminiApplyModalTitle": "Apply to Local Gemini CLI",
+    "geminiApplyTargetLabel": "Target path",
+    "geminiApplyBackupLabel": "Backups",
+    "geminiApplyAccountsHint": "The google_accounts.json active account will be updated to match this connection.",
+    "geminiApplyWarning": "This will replace the existing oauth_creds.json and update google_accounts.json. Continue?",
+    "geminiApplyConfirmCheckbox": "I confirm I want to replace the existing oauth_creds.json",
+    "geminiApply": "Apply",
+    "geminiAuthAppliedLocal": "Gemini auth applied locally",
+    "geminiAuthApplyFailed": "Failed to apply Gemini auth locally",
+    "geminiAuthExported": "Gemini auth file exported",
+    "geminiAuthExportFailed": "Failed to export Gemini auth file",
+    "geminiImportModalTitle": "Import Gemini Auth",
+    "geminiImportTabSingle": "Single",
+    "geminiImportTabBulk": "Bulk",
+    "geminiImportTabUpload": "Upload file",
+    "geminiImportTabPaste": "Paste JSON",
+    "geminiImportFileLabel": "Choose oauth_creds.json",
+    "geminiImportPasteLabel": "Paste the JSON content",
+    "geminiImportEmailLabel": "Account email",
+    "geminiImportNameLabel": "Connection name (optional)",
+    "geminiImportOverwriteLabel": "Replace existing connection if account already exists",
+    "geminiImportSubmit": "Import",
+    "geminiImportSuccess": "Gemini connection imported successfully",
+    "geminiImportInvalidJson": "Could not parse the file as JSON",
+    "geminiImportInvalidShape": "The file is not a valid oauth_creds.json",
+    "geminiImportDuplicate": "Account already exists — enable \"Replace existing\" to overwrite",
+    "geminiImportIdentityUnverified": "Could not verify identity from id_token. Enable \"Replace existing\" or provide an email.",
+    "geminiImportFailed": "Failed to import Gemini auth",
+    "geminiImportBulkModeUpload": "Upload files",
+    "geminiImportBulkModePaste": "Paste JSON array",
+    "geminiImportBulkModeZip": "Upload ZIP",
+    "geminiImportBulkUploadHint": "Drop or pick up to 50 oauth_creds.json files (256KB each, 10MB total).",
+    "geminiImportBulkPasteHint": "Paste an array of objects: [{ json, name?, email? }, ...]",
+    "geminiImportBulkZipHint": "ZIP containing oauth_creds.json entries. Max 50 entries, 10MB unpacked.",
+    "geminiImportBulkSubmit": "Import all",
+    "geminiImportBulkSuccess": "Imported {count} Gemini connections",
+    "geminiImportBulkFailed": "Some entries failed to import",
+    "geminiImportBulkZipExtracting": "Extracting ZIP…",
+    "geminiImportBulkZipError": "Failed to extract ZIP"
     "codexAuthAppliedLocal": "Codex auth.json applied locally",
     "codexAuthApplyFailed": "Failed to apply Codex auth.json locally",
     "codexAuthExported": "Codex auth.json exported",