antigravity-claude-proxy 2.7.1 → 2.7.3

package/public/index.html

@@ -9,8 +9,6 @@
 
     <!-- Libraries -->
     <script src="https://cdn.jsdelivr.net/npm/chart.js"></script>
-    <!-- Alpine.js Plugins -->
-    <script defer src="https://cdn.jsdelivr.net/npm/@alpinejs/collapse@3.x.x/dist/cdn.min.js"></script>
     <!-- Alpine.js must be deferred so stores register their listeners first -->
     <script defer src="https://cdn.jsdelivr.net/npm/alpinejs@3.x.x/dist/cdn.min.js"></script>
 

package/public/js/components/account-manager.js

@@ -118,6 +118,15 @@ window.Components.accountManager = () => ({
 
     async fixAccount(email) {
         const store = Alpine.store('global');
+        const dataStore = Alpine.store('data');
+        // If the account has a verification URL (403 VALIDATION_REQUIRED), open it directly
+        const account = (dataStore.accounts || []).find(a => a.email === email);
+        if (account?.verifyUrl) {
+            window.open(account.verifyUrl, '_blank');
+            store.showToast(store.t('verifyThenRefresh') || 'After completing verification, click the ↻ Refresh button to re-enable this account', 'info', 10000);
+            return;
+        }
+        // Otherwise fall back to OAuth re-auth
         store.showToast(store.t('reauthenticating', { email: Redact.email(email) }), 'info');
         const password = store.webuiPassword;
         try {
@@ -203,127 +212,6 @@ window.Components.accountManager = () => ({
         newModelThreshold: 10
     },
 
-    // Fingerprint Modal
-    fingerprintModal: {
-        email: '',
-        current: null,
-        history: [],
-        loading: false,
-        regenerating: false,
-        restoring: false
-    },
-
-    async openFingerprintModal(account) {
-        const store = Alpine.store('global');
-        this.fingerprintModal = {
-            email: account.email,
-            current: null,
-            history: [],
-            loading: true,
-            regenerating: false,
-            restoring: false
-        };
-
-        document.getElementById('fingerprint_modal').showModal();
-
-        try {
-            const { response, newPassword } = await window.utils.request(
-                `/api/accounts/${encodeURIComponent(account.email)}/fingerprint`,
-                {},
-                store.webuiPassword
-            );
-            if (newPassword) store.webuiPassword = newPassword;
-
-            const data = await response.json();
-            if (data.status === 'ok') {
-                this.fingerprintModal.current = data.fingerprint;
-                this.fingerprintModal.history = data.history;
-            } else {
-                store.showToast(data.error || 'Failed to fetch fingerprint', 'error');
-            }
-        } catch (e) {
-            store.showToast('Error fetching fingerprint: ' + e.message, 'error');
-        } finally {
-            this.fingerprintModal.loading = false;
-        }
-    },
-
-    async regenerateFingerprint() {
-        const store = Alpine.store('global');
-        const email = this.fingerprintModal.email;
-        this.fingerprintModal.regenerating = true;
-
-        try {
-            const { response, newPassword } = await window.utils.request(
-                `/api/accounts/${encodeURIComponent(email)}/fingerprint/regenerate`,
-                { method: 'POST' },
-                store.webuiPassword
-            );
-            if (newPassword) store.webuiPassword = newPassword;
-
-            const data = await response.json();
-            if (data.status === 'ok') {
-                store.showToast('Fingerprint regenerated', 'success');
-                // Refresh modal data
-                this.fingerprintModal.current = data.fingerprint;
-                // Fetch history again to show the old one moved to history
-                await this.refreshFingerprintData(email);
-            } else {
-                throw new Error(data.error || 'Failed to regenerate');
-            }
-        } catch (e) {
-            store.showToast('Regeneration failed: ' + e.message, 'error');
-        } finally {
-            this.fingerprintModal.regenerating = false;
-        }
-    },
-
-    async restoreFingerprint(index) {
-        const store = Alpine.store('global');
-        const email = this.fingerprintModal.email;
-        this.fingerprintModal.restoring = true;
-
-        try {
-            const { response, newPassword } = await window.utils.request(
-                `/api/accounts/${encodeURIComponent(email)}/fingerprint/restore`,
-                {
-                    method: 'POST',
-                    headers: { 'Content-Type': 'application/json' },
-                    body: JSON.stringify({ index })
-                },
-                store.webuiPassword
-            );
-            if (newPassword) store.webuiPassword = newPassword;
-
-            const data = await response.json();
-            if (data.status === 'ok') {
-                store.showToast('Fingerprint restored', 'success');
-                this.fingerprintModal.current = data.fingerprint;
-                await this.refreshFingerprintData(email);
-            } else {
-                throw new Error(data.error || 'Failed to restore');
-            }
-        } catch (e) {
-            store.showToast('Restore failed: ' + e.message, 'error');
-        } finally {
-            this.fingerprintModal.restoring = false;
-        }
-    },
-
-    async refreshFingerprintData(email) {
-        const store = Alpine.store('global');
-        const { response, newPassword } = await window.utils.request(
-            `/api/accounts/${encodeURIComponent(email)}/fingerprint`,
-            {},
-            store.webuiPassword
-        );
-        if (newPassword) store.webuiPassword = newPassword;
-        const data = await response.json();
-        if (data.status === 'ok') {
-            this.fingerprintModal.history = data.history;
-        }
-    },
-
     openThresholdModal(account) {
         this.thresholdDialog = {
             email: account.email,

package/public/js/components/server-config.js

@@ -323,6 +323,38 @@ window.Components.serverConfig = () => ({
         }, window.AppConstants.INTERVALS.CONFIG_DEBOUNCE);
     },
 
+    async toggleRequestThrottling(enabled) {
+        const store = Alpine.store('global');
+        const previousValue = this.serverConfig.requestThrottlingEnabled;
+        this.serverConfig.requestThrottlingEnabled = enabled;
+
+        try {
+            const { response, newPassword } = await window.utils.request('/api/config', {
+                method: 'POST',
+                headers: { 'Content-Type': 'application/json' },
+                body: JSON.stringify({ requestThrottlingEnabled: enabled })
+            }, store.webuiPassword);
+
+            if (newPassword) store.webuiPassword = newPassword;
+
+            const data = await response.json();
+            if (data.status === 'ok') {
+                store.showToast(`Request Throttling ${enabled ? 'enabled' : 'disabled'}`, 'success');
+            } else {
+                throw new Error(data.error || 'Failed to update');
+            }
+        } catch (e) {
+            this.serverConfig.requestThrottlingEnabled = previousValue;
+            store.showToast('Failed to update Request Throttling: ' + e.message, 'error');
+        }
+    },
+
+    toggleRequestDelayMs(value) {
+        const { REQUEST_DELAY_MIN, REQUEST_DELAY_MAX } = window.AppConstants.VALIDATION;
+        this.saveConfigField('requestDelayMs', value, 'Request Delay',
+            (v) => window.Validators.validateRange(v, REQUEST_DELAY_MIN, REQUEST_DELAY_MAX, 'Request Delay'));
+    },
+
     toggleMaxAccounts(value) {
         const { MAX_ACCOUNTS_MIN, MAX_ACCOUNTS_MAX } = window.AppConstants.VALIDATION;
         this.saveConfigField('maxAccounts', value, 'Max Accounts',

package/public/js/config/constants.js

@@ -96,6 +96,10 @@ window.AppConstants.VALIDATION = {
     GLOBAL_QUOTA_THRESHOLD_MIN: 0,
     GLOBAL_QUOTA_THRESHOLD_MAX: 99,
 
+    // Request delay (100 - 5000ms)
+    REQUEST_DELAY_MIN: 100,
+    REQUEST_DELAY_MAX: 5000,
+
     // Switch account delay (1s - 60s)
     SWITCH_ACCOUNT_DELAY_MIN: 1000,
     SWITCH_ACCOUNT_DELAY_MAX: 60000,

package/public/views/accounts.html

@@ -88,7 +88,6 @@
                     <th class="pl-6 py-3 text-left text-[10px] font-bold text-gray-500 uppercase tracking-wider w-16" x-text="$store.global.t('enabled')">Enabled</th>
                     <th class="py-3 text-left text-[10px] font-bold text-gray-500 uppercase tracking-wider flex-1 min-w-[200px]" x-text="$store.global.t('accountEmail')">Account (Email)</th>
                     <th class="py-3 text-left text-[10px] font-bold text-gray-500 uppercase tracking-wider w-20" x-text="$store.global.t('source')">Source</th>
-                    <th class="py-3 text-left text-[10px] font-bold text-gray-500 uppercase tracking-wider w-24">Fingerprint</th>
                     <th class="py-3 text-left text-[10px] font-bold text-gray-500 uppercase tracking-wider w-16" x-text="$store.global.t('tier')">Tier</th>
                     <th class="py-3 text-left text-[10px] font-bold text-gray-500 uppercase tracking-wider w-32" x-text="$store.global.t('quota')">Quota</th>
                     <th class="py-3 text-left text-[10px] font-bold text-gray-500 uppercase tracking-wider w-24" x-text="$store.global.t('health')">Health</th>
@@ -152,15 +151,6 @@
                                   x-text="acc.source || 'oauth'">
                             </span>
                         </td>
-                        <td class="py-4">
-                            <button class="p-2 rounded-lg hover:bg-space-800 text-gray-500 hover:text-neon-cyan transition-colors"
-                                    @click="openFingerprintModal(acc)"
-                                    :title="'View Fingerprint for ' + formatEmail(acc.email)">
-                                <svg class="w-5 h-5" fill="none" stroke="currentColor" viewBox="0 0 24 24">
-                                    <path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M12 11c0 3.517-1.009 6.799-2.753 9.571m-3.44-2.04l.054-.09A13.916 13.916 0 008 11a4 4 0 118 0c0 1.017-.07 2.019-.203 3m-2.118 6.844A21.88 21.88 0 0015.171 17m3.839 1.132c.645-2.266.99-4.659.99-7.132A8 8 0 008 4.07M3 15.364c.64-1.319 1-2.8 1-4.364 0-1.457.2-2.873.571-4.241m2.823 10.36c.682-1.365 1.178-2.791 1.406-4.117m8.406 5.828a5.74 5.74 0 00-1.552-1.433" />
-                                </svg>
-                            </button>
-                        </td>
                         <td class="py-4">
                             <span :class="{
                                       'status-pill-ultra': acc.subscription?.tier === 'ultra',
@@ -647,143 +637,4 @@
             <button>close</button>
         </form>
     </dialog>
-
-    <!-- Fingerprint Details Modal -->
-    <dialog id="fingerprint_modal" class="modal backdrop-blur-sm">
-        <div class="modal-box max-w-2xl w-full bg-space-900 border border-space-border text-gray-300 shadow-2xl p-6 relative">
-            <!-- Close Button (Top Right) -->
-            <form method="dialog" class="absolute top-4 right-4">
-                <button class="btn btn-sm btn-circle btn-ghost text-gray-500 hover:text-white">
-                    <svg class="w-5 h-5" fill="none" stroke="currentColor" viewBox="0 0 24 24">
-                        <path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M6 18L18 6M6 6l12 12" />
-                    </svg>
-                </button>
-            </form>
-
-            <h3 class="font-bold text-xl text-white mb-2 flex items-center gap-2">
-                <svg class="w-6 h-6 text-neon-cyan" fill="none" stroke="currentColor" viewBox="0 0 24 24">
-                    <path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M12 11c0 3.517-1.009 6.799-2.753 9.571m-3.44-2.04l.054-.09A13.916 13.916 0 008 11a4 4 0 118 0c0 1.017-.07 2.019-.203 3m-2.118 6.844A21.88 21.88 0 0015.171 17m3.839 1.132c.645-2.266.99-4.659.99-7.132A8 8 0 008 4.07M3 15.364c.64-1.319 1-2.8 1-4.364 0-1.457.2-2.873.571-4.241m2.823 10.36c.682-1.365 1.178-2.791 1.406-4.117m8.406 5.828a5.74 5.74 0 00-1.552-1.433" />
-                </svg>
-                <span>Device Fingerprint</span>
-            </h3>
-            <p class="text-sm text-gray-500 font-mono mb-6" x-text="Redact.email(fingerprintModal.email)"></p>
-
-            <div x-show="fingerprintModal.loading" class="flex justify-center py-8">
-                <span class="loading loading-spinner text-neon-cyan"></span>
-            </div>
-
-            <div x-show="!fingerprintModal.loading && fingerprintModal.current">
-                <!-- Current Fingerprint -->
-                <div class="bg-space-800/50 border border-space-border/30 rounded-lg p-4 mb-6 relative overflow-hidden">
-                    <div class="absolute top-0 right-0 p-2 opacity-10">
-                        <svg class="w-24 h-24 text-neon-cyan" fill="none" stroke="currentColor" viewBox="0 0 24 24">
-                            <path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M12 11c0 3.517-1.009 6.799-2.753 9.571m-3.44-2.04l.054-.09A13.916 13.916 0 008 11a4 4 0 118 0c0 1.017-.07 2.019-.203 3m-2.118 6.844A21.88 21.88 0 0015.171 17m3.839 1.132c.645-2.266.99-4.659.99-7.132A8 8 0 008 4.07M3 15.364c.64-1.319 1-2.8 1-4.364 0-1.457.2-2.873.571-4.241m2.823 10.36c.682-1.365 1.178-2.791 1.406-4.117m8.406 5.828a5.74 5.74 0 00-1.552-1.433" />
-                        </svg>
-                    </div>
-
-                    <div class="grid grid-cols-1 gap-3 relative z-10">
-                        <div>
-                            <span class="text-[10px] uppercase text-gray-500 font-bold tracking-wider">Device ID</span>
-                            <div class="font-mono text-sm text-neon-cyan break-all" x-text="fingerprintModal.current?.deviceId"></div>
-                        </div>
-                        <div>
-                            <span class="text-[10px] uppercase text-gray-500 font-bold tracking-wider">User Agent</span>
-                            <div class="font-mono text-xs text-gray-300 break-words bg-space-900/50 p-2 rounded border border-space-border/20 w-fit max-w-full"
-                                 x-text="fingerprintModal.current?.userAgent"></div>
-                        </div>
-                        <div class="grid grid-cols-2 gap-4">
-                            <div>
-                                <span class="text-[10px] uppercase text-gray-500 font-bold tracking-wider">Platform</span>
-                                <div class="font-mono text-xs text-gray-300"
-                                     x-text="fingerprintModal.current?.clientMetadata?.platform || 'UNK'"></div>
-                            </div>
-                            <div>
-                                <span class="text-[10px] uppercase text-gray-500 font-bold tracking-wider">Created</span>
-                                <div class="font-mono text-xs text-gray-400"
-                                     x-text="new Date(fingerprintModal.current?.createdAt).toLocaleString()"></div>
-                            </div>
-                        </div>
-                    </div>
-
-                    <!-- Advanced Details (Collapsible) -->
-                    <div class="mt-4 pt-4 border-t border-space-border/20" x-data="{ expanded: false }">
-                        <button @click="expanded = !expanded"
-                                class="flex items-center gap-2 text-[10px] uppercase text-gray-500 font-bold tracking-wider hover:text-neon-cyan transition-colors w-full">
-                            <svg class="w-3 h-3 transition-transform" :class="{ 'rotate-90': expanded }" fill="none" stroke="currentColor" viewBox="0 0 24 24">
-                                <path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M9 5l7 7-7 7" />
-                            </svg>
-                            Advanced Details
-                        </button>
-
-                        <div x-show="expanded" x-collapse class="mt-3 grid grid-cols-1 gap-3 relative z-10">
-                            <div>
-                                <span class="text-[10px] uppercase text-gray-500 font-bold tracking-wider">API Client</span>
-                                <div class="font-mono text-xs text-gray-300 break-words" x-text="fingerprintModal.current?.apiClient"></div>
-                            </div>
-                            <div>
-                                <span class="text-[10px] uppercase text-gray-500 font-bold tracking-wider">Quota User</span>
-                                <div class="font-mono text-xs text-gray-300 break-all" x-text="fingerprintModal.current?.quotaUser"></div>
-                            </div>
-                            <div>
-                                <span class="text-[10px] uppercase text-gray-500 font-bold tracking-wider">Session Token</span>
-                                <div class="font-mono text-xs text-gray-300 break-all" x-text="fingerprintModal.current?.sessionToken"></div>
-                            </div>
-                            <div>
-                                <span class="text-[10px] uppercase text-gray-500 font-bold tracking-wider">Metadata</span>
-                                <div class="font-mono text-[10px] text-gray-400 bg-space-900/50 p-2 rounded border border-space-border/20 mt-1">
-                                    <div class="grid grid-cols-2 gap-x-4 gap-y-1">
-                                        <div><span class="text-gray-600">OS Version:</span> <span class="text-gray-300" x-text="fingerprintModal.current?.clientMetadata?.osVersion"></span></div>
-                                        <div><span class="text-gray-600">Arch:</span> <span class="text-gray-300" x-text="fingerprintModal.current?.clientMetadata?.arch"></span></div>
-                                        <div><span class="text-gray-600">IDE:</span> <span class="text-gray-300" x-text="fingerprintModal.current?.clientMetadata?.ideType"></span></div>
-                                        <div><span class="text-gray-600">Plugin:</span> <span class="text-gray-300" x-text="fingerprintModal.current?.clientMetadata?.pluginType"></span></div>
-                                    </div>
-                                </div>
-                            </div>
-                        </div>
-                    </div>
-                </div>
-
-                <!-- Actions -->
-                <div class="flex justify-end mb-6">
-                    <button class="btn btn-sm btn-outline border-neon-cyan text-neon-cyan hover:bg-neon-cyan hover:text-black gap-2"
-                            @click="regenerateFingerprint()"
-                            :disabled="fingerprintModal.regenerating">
-                        <svg class="w-4 h-4" :class="{ 'animate-spin': fingerprintModal.regenerating }" fill="none" stroke="currentColor" viewBox="0 0 24 24">
-                            <path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M4 4v5h.582m15.356 2A8.001 8.001 0 004.582 9m0 0H9m11 11v-5h-.581m0 0a8.003 8.003 0 01-15.357-2m15.357 2H15" />
-                        </svg>
-                        <span x-text="fingerprintModal.regenerating ? 'Regenerating...' : 'Regenerate Fingerprint'"></span>
-                    </button>
-                </div>
-
-                <!-- History -->
-                <div x-show="fingerprintModal.history.length > 0">
-                    <h4 class="text-sm font-bold text-gray-400 mb-3 uppercase tracking-wider">History</h4>
-                    <div class="space-y-2 max-h-40 overflow-y-auto custom-scrollbar">
-                        <template x-for="(entry, index) in fingerprintModal.history" :key="entry.timestamp">
-                            <div class="flex items-center justify-between p-3 bg-space-800/30 border border-space-border/20 rounded hover:bg-space-800/50 transition-colors">
-                                <div class="flex-1 min-w-0 mr-4">
-                                    <div class="flex items-center gap-2 mb-1">
-                                        <span class="text-xs font-mono text-gray-400 truncate" x-text="entry.fingerprint.deviceId"></span>
-                                        <span class="text-[10px] px-1.5 py-0.5 rounded bg-space-700 text-gray-500" x-text="entry.reason"></span>
-                                    </div>
-                                    <div class="text-[10px] text-gray-600 font-mono" x-text="new Date(entry.timestamp).toLocaleString()"></div>
-                                </div>
-                                <button class="btn btn-xs btn-ghost text-gray-500 hover:text-white"
-                                        @click="restoreFingerprint(index)"
-                                        :disabled="fingerprintModal.restoring"
-                                        title="Restore this fingerprint">
-                                    <svg class="w-4 h-4" fill="none" stroke="currentColor" viewBox="0 0 24 24">
-                                        <path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M3 10h10a8 8 0 018 8v2M3 10l6 6m-6-6l6-6" />
-                                    </svg>
-                                </button>
-                            </div>
-                        </template>
-                    </div>
-                </div>
-            </div>
-        </div>
-        <form method="dialog" class="modal-backdrop">
-            <button>close</button>
-        </form>
-    </dialog>
 </div>

package/public/views/settings.html

@@ -1750,6 +1750,64 @@
                             </div>
                         </div>
 
+                        <!-- Request Throttling -->
+                        <div class="space-y-4 pt-2 border-t border-space-border/10">
+                            <div class="flex items-center gap-2 mb-2">
+                                <span class="text-[10px] text-gray-500 font-bold uppercase tracking-widest">Request Throttling</span>
+                                <span class="px-1.5 py-0.5 text-[9px] font-semibold uppercase tracking-wide rounded bg-amber-500/20 text-amber-400 border border-amber-500/40">Experimental</span>
+                            </div>
+
+                            <!-- Request Throttling Card -->
+                            <div class="form-control bg-space-900/50 rounded-lg border transition-all duration-300 hover:border-amber-500/50"
+                                :class="serverConfig.requestThrottlingEnabled ? 'border-amber-500 bg-amber-500/10 shadow-[0_0_25px_rgba(245,158,11,0.2)] ring-1 ring-amber-500/30' : 'border-space-border/50'">
+
+                                <!-- Toggle Row -->
+                                <div class="flex items-center justify-between p-4">
+                                    <div class="flex flex-col gap-1">
+                                        <span class="label-text font-medium transition-colors"
+                                            :class="serverConfig.requestThrottlingEnabled ? 'text-amber-300' : 'text-gray-300'">Enable Request Throttling</span>
+                                        <span class="text-xs transition-colors"
+                                            :class="serverConfig.requestThrottlingEnabled ? 'text-amber-100/50' : 'text-gray-500'">Add delay before each Google API request to avoid rate limits.</span>
+                                    </div>
+                                    <label class="relative inline-flex items-center cursor-pointer">
+                                        <input type="checkbox" class="sr-only peer"
+                                            :checked="serverConfig.requestThrottlingEnabled"
+                                            @change="toggleRequestThrottling($event.target.checked)"
+                                            aria-label="Request throttling toggle">
+                                        <div
+                                            class="w-9 h-5 bg-space-800 peer-focus:outline-none rounded-full peer peer-checked:after:translate-x-full rtl:peer-checked:after:-translate-x-full peer-checked:after:border-white after:content-[''] after:absolute after:top-[2px] after:start-[2px] after:bg-gray-600 after:rounded-full after:h-4 after:w-4 after:transition-all peer-checked:bg-neon-green peer-checked:after:bg-white">
+                                        </div>
+                                    </label>
+                                </div>
+
+                                <!-- Delay Slider (only shown when enabled) -->
+                                <div x-show="serverConfig.requestThrottlingEnabled" x-transition x-collapse>
+                                    <div class="border-t border-amber-500/20 px-4 pb-4 pt-3">
+                                        <label class="flex justify-between items-center mb-2">
+                                            <span class="text-xs text-amber-200/70">Delay per Request</span>
+                                            <span class="font-mono text-amber-400 text-xs font-semibold"
+                                                x-text="(serverConfig.requestDelayMs || 200) + 'ms'"></span>
+                                        </label>
+                                        <div class="flex gap-3 items-center">
+                                            <input type="range" min="100" max="5000" step="100"
+                                                class="custom-range custom-range-yellow flex-1"
+                                                :value="serverConfig.requestDelayMs || 200"
+                                                :style="`background-size: ${((serverConfig.requestDelayMs || 200) - 100) / 49}% 100%`"
+                                                @input="toggleRequestDelayMs($event.target.value)"
+                                                aria-label="Request delay slider">
+                                            <input type="number" min="100" max="5000" step="100"
+                                                class="input input-xs input-bordered w-20 bg-space-800/50 border-amber-500/30 text-white font-mono text-center"
+                                                :value="serverConfig.requestDelayMs || 200"
+                                                @change="toggleRequestDelayMs($event.target.value)"
+                                                aria-label="Request delay value">
+                                        </div>
+                                        <p class="text-[9px] text-amber-100/40 mt-2 leading-tight">
+                                            Milliseconds to wait before each API call (token refresh, quota check, messages, etc).</p>
+                                    </div>
+                                </div>
+                            </div>
+                        </div>
+
                         <!-- Error Handling Tuning -->
                         <div class="space-y-4 pt-2 border-t border-space-border/10">
                             <div class="flex items-center gap-2 mb-2">

package/src/account-manager/credentials.js

@@ -15,7 +15,7 @@ import {
 import { refreshAccessToken, parseRefreshParts, formatRefreshParts } from '../auth/oauth.js';
 import { getAuthStatus } from '../auth/database.js';
 import { logger } from '../utils/logger.js';
-import { isNetworkError } from '../utils/helpers.js';
+import { isNetworkError, throttledFetch } from '../utils/helpers.js';
 import { onboardUser, getDefaultTierId } from './onboarding.js';
 import { parseTierId } from '../cloudcode/model-api.js';
 
@@ -228,7 +228,7 @@ export async function discoverProject(token, projectId = undefined) {
 
     for (const endpoint of LOAD_CODE_ASSIST_ENDPOINTS) {
         try {
-            const response = await fetch(`${endpoint}/v1internal:loadCodeAssist`, {
+            const response = await throttledFetch(`${endpoint}/v1internal:loadCodeAssist`, {
                 method: 'POST',
                 headers: {
                     'Authorization': `Bearer ${token}`,

package/src/account-manager/index.js

@@ -15,6 +15,7 @@ import {
     resetAllRateLimits as resetLimits,
     markRateLimited as markLimited,
     markInvalid as markAccountInvalid,
+    clearInvalid as clearAccountInvalid,
     getMinWaitTimeMs as getMinWait,
     getRateLimitInfo as getLimitInfo,
     getConsecutiveFailures as getFailures,
@@ -34,7 +35,6 @@ import {
 } from './credentials.js';
 import { createStrategy, getStrategyLabel, DEFAULT_STRATEGY } from './strategies/index.js';
 import { logger } from '../utils/logger.js';
-import { generateFingerprint, MAX_FINGERPRINT_HISTORY } from '../utils/fingerprint.js';
 
 export class AccountManager {
     #accounts = [];
@@ -138,6 +138,16 @@ export class AccountManager {
         return getInvalid(this.#accounts);
     }
 
+    /**
+     * Check if all enabled accounts are invalid (need user intervention).
+     * Unlike rate limits, invalid accounts won't self-recover — waiting is pointless.
+     * @returns {boolean} True if every enabled account is invalid
+     */
+    isAllAccountsInvalid() {
+        const enabled = this.#accounts.filter(a => a.enabled !== false);
+        return enabled.length > 0 && enabled.every(a => a.isInvalid);
+    }
+
     /**
      * Clear expired rate limits
      * @returns {number} Number of rate limits cleared
@@ -283,9 +293,19 @@ export class AccountManager {
      * Mark an account as invalid (credentials need re-authentication)
      * @param {string} email - Email of the account to mark
      * @param {string} reason - Reason for marking as invalid
+     * @param {string|null} verifyUrl - Optional verification URL (for 403 VALIDATION_REQUIRED)
+     */
+    markInvalid(email, reason = 'Unknown error', verifyUrl = null) {
+        markAccountInvalid(this.#accounts, email, reason, verifyUrl);
+        this.saveToDisk();
+    }
+
+    /**
+     * Clear invalid status for an account (after user completes verification)
+     * @param {string} email - Email of the account to clear
      */
-    markInvalid(email, reason = 'Unknown error') {
-        markAccountInvalid(this.#accounts, email, reason);
+    clearInvalid(email) {
+        clearAccountInvalid(this.#accounts, email);
         this.saveToDisk();
     }
 
@@ -434,11 +454,11 @@ export class AccountManager {
                 modelRateLimits: a.modelRateLimits || {},
                 isInvalid: a.isInvalid || false,
                 invalidReason: a.invalidReason || null,
+                verifyUrl: a.verifyUrl || null,
                 lastUsed: a.lastUsed,
                 // Include quota threshold settings
                 quotaThreshold: a.quotaThreshold,
-                modelQuotaThresholds: a.modelQuotaThresholds || {},
-                hasFingerprint: !!a.fingerprint
+                modelQuotaThresholds: a.modelQuotaThresholds || {}
             }))
         };
     }
@@ -503,88 +523,6 @@ export class AccountManager {
     getAllAccounts() {
         return this.#accounts;
     }
-
-    /**
-     * Regenerate fingerprint for an account
-     * @param {string} email - Email of the account
-     * @returns {Object|null} New fingerprint or null if account not found
-     */
-    regenerateFingerprint(email) {
-        const account = this.#accounts.find(a => a.email === email);
-        if (!account) return null;
-
-        if (account.fingerprint) {
-            const historyEntry = {
-                fingerprint: account.fingerprint,
-                timestamp: Date.now(),
-                reason: 'regenerated'
-            };
-
-            if (!account.fingerprintHistory) {
-                account.fingerprintHistory = [];
-            }
-
-            account.fingerprintHistory.unshift(historyEntry);
-            if (account.fingerprintHistory.length > MAX_FINGERPRINT_HISTORY) {
-                account.fingerprintHistory = account.fingerprintHistory.slice(0, MAX_FINGERPRINT_HISTORY);
-            }
-        }
-
-        account.fingerprint = generateFingerprint();
-        this.saveToDisk();
-        return account.fingerprint;
-    }
-
-    /**
-     * Restore fingerprint from history
-     * @param {string} email - Email of the account
-     * @param {number} historyIndex - Index in history array (0 is most recent)
-     * @returns {Object|null} Restored fingerprint or null
-     */
-    restoreFingerprint(email, historyIndex) {
-        const account = this.#accounts.find(a => a.email === email);
-        if (!account || !account.fingerprintHistory || !account.fingerprintHistory[historyIndex]) {
-            return null;
-        }
-
-        const restoredEntry = account.fingerprintHistory[historyIndex];
-
-        // Save current to history before restoring
-        if (account.fingerprint) {
-            const historyEntry = {
-                fingerprint: account.fingerprint,
-                timestamp: Date.now(),
-                reason: 'restored'
-            };
-            // account.fingerprintHistory is guaranteed to exist if we are here
-            account.fingerprintHistory.unshift(historyEntry);
-        }
-
-        // Remove the restored entry from history (shifted by 1 if we just unshifted)
-        const removeIndex = account.fingerprint ? historyIndex + 1 : historyIndex;
-        account.fingerprintHistory.splice(removeIndex, 1);
-
-        // Restore
-        account.fingerprint = { ...restoredEntry.fingerprint, createdAt: Date.now() };
-
-        // Trim history again (since we added one)
-        if (account.fingerprintHistory.length > MAX_FINGERPRINT_HISTORY) {
-            account.fingerprintHistory = account.fingerprintHistory.slice(0, MAX_FINGERPRINT_HISTORY);
-        }
-
-        this.saveToDisk();
-        return account.fingerprint;
-    }
-
-    /**
-     * Get fingerprint history
-     * @param {string} email - Email of the account
-     * @returns {Array} Array of fingerprint history entries
-     */
-    getFingerprintHistory(email) {
-        const account = this.#accounts.find(a => a.email === email);
-        return account ? (account.fingerprintHistory || []) : [];
-    }
 }
 
 // Re-export CooldownReason for use by handlers

package/src/account-manager/onboarding.js

@@ -10,7 +10,7 @@ import {
     CLIENT_METADATA
 } from '../constants.js';
 import { logger } from '../utils/logger.js';
-import { sleep } from '../utils/helpers.js';
+import { sleep, throttledFetch } from '../utils/helpers.js';
 
 /**
  * Get the default tier ID from allowed tiers list
@@ -64,7 +64,7 @@ export async function onboardUser(token, tierId, projectId = undefined, maxAttem
     for (const endpoint of ONBOARD_USER_ENDPOINTS) {
         for (let attempt = 0; attempt < maxAttempts; attempt++) {
             try {
-                const response = await fetch(`${endpoint}/v1internal:onboardUser`, {
+                const response = await throttledFetch(`${endpoint}/v1internal:onboardUser`, {
                     method: 'POST',
                     headers: {
                         'Authorization': `Bearer ${token}`,