@goodandready/dsh-key-rotation 0.7.38 → 0.7.39

package/README.md

@@ -253,6 +253,11 @@ All management routes require loopback authentication (`127.0.0.1` / `::1`) with
 
 MIT © [GooDAnDReaDY](https://github.com/GooDAnDReaDY)
 
+### v0.7.39
+- **Self-Healing & lastUsedAt Accuracy**: Fixed key timestamp lookup in `healIdleCooldowns` to read from the modern `pool.state.lastUsedAt` map (with backwards-compatible fallback). `credentials.resolve` now properly records each key invocation timestamp in `lastUsedAt`, surfacing accurate "last used" indicators in the status dashboard and enabling background idle cooldown restoration.
+- **Hotpath & Runtime Memoization**: Eliminated redundant `buildRuntime()` calls across periodic sweeps, provider exhaustion handling, and `/status` query processing.
+- **Test Suite & CI Hardening**: Periodic interval sweep timers and debounce timers unref'ed to allow Node.js event loop natural exit without stalling CI runners. Purged obsolete incident test artifacts.
+
 ### v0.7.38
 - **Hot-Path Stream Optimization**: Eliminated 4 redundant `buildRuntime()` calls inside the `rotate()` finish chunk handler by reusing the request-scoped `runtime0` snapshot.
 - **Allocation-Free Rate Limit Header Parsing**: Optimized `extractRateLimit()` with single-pass header inspection and length guards, completely removing dynamic lowercase/uppercase string allocations on every response chunk.

package/README.ru.md

@@ -253,6 +253,11 @@ dsh-key-rotation:
 
 MIT © [GooDAnDReaDY](https://github.com/GooDAnDReaDY)
 
+### v0.7.39
+- **Самоисцеление ключей и фиксация lastUsedAt**: Исправлено чтение меток времени в `healIdleCooldowns`, использующее теперь карту `pool.state.lastUsedAt`. В `credentials.resolve` добавлено сохранение точного времени каждого обращения к ключу, что активирует вывод времени использования в панели мониторинга и корректное самоисцеление ключей после простоя.
+- **Оптимизация обращений к buildRuntime**: Устранены повторные вызовы `buildRuntime()` в процедурах периодической очистки, маршруте `/status` и блоке обработки исчерпания пула.
+- **Стабилизация CI и устранение утечек таймеров**: Фоновые таймеры дебаунса и очистки теперь отвязываются (`unref`) от цикла событий Node.js, предотвращая зависание раннера. Удалены тесты устаревшего модуля инцидентов.
+
 ### v0.7.38
 - **Оптимизация горячего пути стриминга**: Устранены 4 избыточных вызова `buildRuntime()` при обработке завершающего чанка в `rotate()` за счёт повторного использования снимка `runtime0`.
 - **Парсинг заголовков лимитов без лишних аллокаций**: Оптимизирована функция `extractRateLimit()` — однократный проход по объекту с проверкой длины ключей без постоянных аллокаций строк `.toLowerCase()` и `.toUpperCase()`.

package/README.zh.md

@@ -214,6 +214,11 @@ dsh-key-rotation:
 
 MIT © [GooDAnDReaDY](https://github.com/GooDAnDReaDY)
 
+### v0.7.39
+- **自动恢复与 lastUsedAt 修复**：修复了 `healIdleCooldowns` 中对密钥调用时间戳的读取逻辑，直接从 `lastUsedAt` 映射读取。在 `credentials.resolve` 中补充记录每次密钥调用的时间戳，使状态面板的最近使用时间生效并正确支持空闲密钥恢复。
+- **运行期快照缓存优化**：消除了定时维护清理、`/status` 路由及密钥池耗尽处理中重复调用 `buildRuntime()` 的开销。
+- **CI 测试稳定性提升**：对维护定时器与通知防抖定时器执行 `unref`，确保 Node.js 事件循环在测试完成后干净退出，彻底解决 CI 运行器假死问题。
+
 ### v0.7.38
 - **热路径流处理优化**：在 `rotate()` 结束块处理中消除 4 次多余的 `buildRuntime()` 重复调用，直接复用请求作用域内的 `runtime0` 快照。
 - **零额外字符串分配的限流头解析**：重构 `extractRateLimit()`，采用单次遍历结合键长度检查，彻底消除对每个响应头执行 `.toLowerCase()` / `.toUpperCase()` 的内存碎片分配。

package/lib/heal.js

@@ -11,13 +11,13 @@ export function healIdleCooldowns(pools, idleMs, now = Date.now()) {
   for (const pool of pools) {
     if (!pool || !pool.state || !pool.base) continue;
     const fu = pool.state.failedUntil;
-    const lu = pool.state.lastUsed;
+    const lua = pool.state.lastUsedAt ?? pool.state.lastUsed;
     if (!fu || fu.size === 0) continue;
     const expiredRefs = [];
     for (const [ref, until] of fu.entries()) {
       if (!Number.isFinite(until)) continue;
       if (until > now) continue; // cooldown still active
-      const last = lu ? lu.get(ref) : undefined;
+      const last = typeof lua?.get === 'function' ? lua.get(ref) : undefined;
       if (!Number.isFinite(last)) continue; // never used → no signal, skip
       if (now - last < idleMs) continue; // used recently → don't heal
       expiredRefs.push(ref);

package/lib/index.js

@@ -38,7 +38,7 @@ import { keyTail, isLoopbackAddress, isTrustedBridgeRequest, SWITCHABLE_MESSAGE_
 
 export const name = 'dsh-key-rotation';
 export const inject = ['llm', 'webServer', 'settings', 'credentials'];
-export { keyTail, isLoopbackAddress, isTrustedBridgeRequest, DEFAULT_SWITCH_CODES, isSwitchableError, formatExhaustionMessage };
+export { keyTail, isLoopbackAddress, isTrustedBridgeRequest, DEFAULT_SWITCH_CODES, isSwitchableError, formatExhaustionMessage, getRuntime };
 
 /** Settings namespace owning the GUI-editable section (settingsNamespace-valid). */
 const NS = 'dsh-key-rotation';
@@ -452,13 +452,13 @@ export function apply(ctx, config = {}) {
       }
       const n = sweepExpired(poolState, now);
       if (n > 0) console.warn(`[dsh-key-rotation] sweep: cleared ${n} expired cooldown(s)`);
-      for (const pool of buildRuntime().poolByRef.values()) {
+      const runtime = buildRuntime();
+      for (const pool of runtime.poolByRef.values()) {
         compactUsage(pool, 30, now);
       }
       // #207 expiry pre-warning + #208 cost budget - piggybacked on this timer,
       // deduped to one notification per key/window per day (shouldNotifyDaily).
       try {
-        const runtime = buildRuntime();
         const seen = new Set();
         for (const pool of runtime.poolByRef.values()) {
           if (seen.has(pool.base)) continue;
@@ -563,6 +563,7 @@ export function apply(ctx, config = {}) {
         }
       } catch (_) { /* maintenance must never crash the sweep */ }
     }, 30000);
+    if (typeof id.unref === 'function') id.unref();
     return () => clearInterval(id);
   }, 'dsh-key-rotation: sweep expired cooldowns');
 
@@ -771,6 +772,8 @@ export function apply(ctx, config = {}) {
         let hit = await original(candidate);
         if (hit && typeof hit.value === 'string' && hit.value.length > 0) {
           pool.state.lastUsed = candidate;
+          if (!pool.state.lastUsedAt) pool.state.lastUsedAt = new Map();
+          pool.state.lastUsedAt.set(candidate, now);
           const store = dispatchStorage.getStore();
           if (store && store.pool === pool) store.pickedRef = candidate;
           if (pool.state.failCounts) pool.state.failCounts.delete(candidate);
@@ -792,6 +795,8 @@ export function apply(ctx, config = {}) {
         const envVal = envValue(candidate);
         if (envVal !== undefined) {
           pool.state.lastUsed = candidate;
+          if (!pool.state.lastUsedAt) pool.state.lastUsedAt = new Map();
+          pool.state.lastUsedAt.set(candidate, now);
           const store = dispatchStorage.getStore();
           if (store && store.pool === pool) store.pickedRef = candidate;
           if (pool.state.failCounts) pool.state.failCounts.delete(candidate);
@@ -1034,11 +1039,11 @@ export function apply(ctx, config = {}) {
       pool.state.lastExhaustionAt = Date.now();
       pool.state.exhaustionCount = (pool.state.exhaustionCount ?? 0) + 1;
       console.warn(`[dsh-key-rotation] ${options.provider}: pool exhausted — all ${pool.refs.length} keys cooling`);
+      const runtime = buildRuntime();
       // notify via extracted helper (see notifyExhaustion above)
-      notifyExhaustion(buildRuntime(), pool, { provider: options.provider });
+      notifyExhaustion(runtime, pool, { provider: options.provider });
 
       // #194: cross-provider cascade failover (guarded against infinite recursion)
-      const runtime = buildRuntime();
       if (!options.__isCascade && Array.isArray(runtime.cascade) && runtime.cascade.length > 0) {
         const pools = runtime.providerToPool;
         const fb = pickCascadeFallback(options.provider, runtime, pools);
@@ -1079,10 +1084,10 @@ export function apply(ctx, config = {}) {
         json(res, 403, { error: { code: 'forbidden', message: 'dsh-key-rotation: status is local-only' } });
         return;
       }
-      const { poolByRef, providerTags, providerBudgets } = buildRuntime();
+      const runtime = buildRuntime();
+      const { poolByRef, providerTags, providerBudgets, latencySloMs } = runtime;
       const base = ctx.get('credentials');
       const now = Date.now();
-      const latencySloMs = buildRuntime().latencySloMs;
       const seen = new Set();
       const providers = [];
       for (const pool of poolByRef.values()) {

package/lib/webhook.js

@@ -157,6 +157,7 @@ export class AlertDebouncer {
     }
     if (!entry.timer) {
       entry.timer = setTimeout(() => this.flush(url), this._debounceMs);
+      if (typeof entry.timer.unref === 'function') entry.timer.unref();
     }
   }
 

package/package.json

@@ -1,7 +1,6 @@
 {
   "name": "@goodandready/dsh-key-rotation",
-  "version": "0.7.38",
-  "packageManager": "pnpm@10.33.2",
+  "version": "0.7.39",
   "description": "Per-provider API key rotation for DeepSeek Harness: a key pool per provider, auto-created clone routes, and switching to the next key on quota/rate-limit errors. Includes a Settings section (Key Rotation) to edit the key pools, cooldown and switch codes.",
   "keywords": [
     "deepseek-harness",
@@ -54,6 +53,6 @@
     "@deepseek-ai/dsh-llm": "^0.1.0-rc.6"
   },
   "scripts": {
-    "test": "node --test test/*.test.js test/*.test.mjs"
+    "test": "node --test --test-timeout=10000 test/*.test.js test/*.test.mjs"
   }
-}
+}