dsh-agy-cli 0.0.0-stage → 0.12.1

package/lib/web/router.js

@@ -0,0 +1,994 @@
+import http from 'node:http';
+import https from 'node:https';
+import tls from 'node:tls';
+import { existsSync, readFileSync, renameSync, rmSync, writeFileSync } from 'node:fs';
+import { randomUUID } from 'node:crypto';
+import { homedir } from 'node:os';
+import { join } from 'node:path';
+import { configuredModels, normalizeModelId, readConfigFlag } from '../provider/config.js';
+import { isLoopback } from '../mcp/endpoint.js';
+import { readAgyRuntimeOverrides, saveAgyRuntimeOverrides } from '../agy/overrides.js';
+import { lastKeepaliveOutcome, readKeyringBlob, refreshAgyTokenIfDue } from '../agy/keepalive.js';
+import { resolveAgyExecutable } from '../agy/process.js';
+const CORDIS_PATCH_PATH = join(homedir(), '.dsh', 'profiles', 'desktop', 'cordis.patch.yml');
+/**
+ * Endpoint hosts for the Cloud Code Assist API. The split is not two accounts
+ * and not two subscriptions — it is the same consumer OAuth identity read
+ * through two hosts, and only `daily` carries real consumption:
+ *
+ * - `daily-cloudcode-pa.googleapis.com` — the host agy.exe hardcodes for every
+ *   `streamGenerateContent` call (verified in every cli-*.log), so it is the
+ *   only host whose quota numbers describe what we actually spend. Verified in
+ *   `docs/prod-generation-feasibility-20261020.md` §1-3.
+ * - `cloudcode-pa.googleapis.com` ("prod") — answers 200 for quota RPCs but
+ *   reports `remainingFraction: 1` forever with a resetTime that drifts to
+ *   "now + window" on every call (06:05→10-26T22:24Z, 06:40→10-26T22:39Z,
+ *   09:58→10-27T01:58Z). Generation against it returns 429 `Resource has been
+ *   exhausted` 24/24 in our probes and 0/4 in the A/B alternation, so it is an
+ *   empty ledger, not spare capacity. It is kept only as a catalog fallback:
+ *   its `fetchAvailableModels` lists 25 models vs daily's 19.
+ *
+ * Reading prod for display is what made the panel show a fake 100% while the
+ * account was actually at 1% and returning 429.
+ */
+const QUOTA_ENDPOINT_DAILY = 'https://daily-cloudcode-pa.googleapis.com';
+const QUOTA_ENDPOINT_PROD = 'https://cloudcode-pa.googleapis.com';
+const CLOUD_CODE_API_VERSION = '1.4.2';
+/**
+ * Identity headers. Google returns *different quota payloads* for the same
+ * endpoint depending on which client asks: with the terse UA below, daily's
+ * `retrieveUserQuotaSummary` omits the Gemini group entirely and returns only
+ * the third-party group; with the full CLI identity it returns both groups
+ * (probe_ua_identity.mjs: rf=0.008422057, reset 2026-10-23T22:00:21Z). Sending
+ * the terse UA is why the panel once read "Gemini 100%" from a host that had no
+ * Gemini numbers to give.
+ */
+const AGY_IDENTITY_HEADERS = {
+    'User-Agent': `antigravity/cli/${CLOUD_CODE_API_VERSION} (aidev_client; os_type=windows; arch=amd64; auth_method=consumer)`,
+    'X-Goog-Api-Client': 'antigravity/cli/1.4.2 aidev_client windows/amd64 consumer',
+};
+/** POST body ceiling for the panel routes; these carry only small JSON settings. */
+const PANEL_MAX_BODY_BYTES = 1024 * 1024;
+function readOverrides() {
+    return readAgyRuntimeOverrides() ?? { hiddenModels: [] };
+}
+function saveOverrides(updates) {
+    saveAgyRuntimeOverrides(updates);
+}
+/**
+ * Rewrite the plugin's own block in the host `cordis.patch.yml` after a panel
+ * change. Failures propagate to the caller so the panel reports them instead of
+ * answering `{ok:true}` over a write that never happened.
+ *
+ * Every interpolation goes through a replacer *function*: a model id or a
+ * visible-models line carrying `$&` / `$'` would otherwise be expanded by
+ * String.replace's special sequences, and a newline in the value would inject
+ * a YAML line into the host config. Values are validated against a model-id
+ * allowlist before they reach the file at all.
+ *
+ * The write is atomic (temp + rename in the same directory): the host parses
+ * this file at boot, and a torn write would break the next start, not just the
+ * panel.
+ */
+function updateCordisPatch(visibleModels, defaultModel) {
+    try {
+        if (!existsSync(CORDIS_PATCH_PATH))
+            return undefined;
+        if (defaultModel !== undefined && !/^[A-Za-z0-9._-]+$/.test(defaultModel)) {
+            return `refusing to write non-model-id defaultModel: ${defaultModel.slice(0, 64)}`;
+        }
+        if (visibleModels !== undefined
+            && !visibleModels.every(id => /^[A-Za-z0-9._-]+$/.test(id))) {
+            return 'refusing to write non-model-id visibleModels entry';
+        }
+        let content = readFileSync(CORDIS_PATCH_PATH, 'utf8');
+        // JS has no \Z anchor; the file-tail alternative is a plain `$`.
+        const providerRegex = /(- id: dsh-agy-cli[\s\S]*?)(?=\n- id:|\n[a-zA-Z]|$)/;
+        const match = content.match(providerRegex);
+        if (!match)
+            return undefined;
+        let block = match[1];
+        if (defaultModel !== undefined) {
+            block = block.replace(/(model:\s*)[^\r\n]+/, (_whole, prefix) => `${prefix}${defaultModel}`);
+        }
+        if (visibleModels !== undefined) {
+            const lines = visibleModels.map((m) => `      - ${m}`).join('\n');
+            const visibleRegex = /visibleModels:(\s*\n(\s+-[^\r\n]+\n*)*)/;
+            if (visibleRegex.test(block)) {
+                block = block.replace(visibleRegex, () => `visibleModels:\n${lines}\n`);
+            }
+        }
+        content = content.replace(providerRegex, () => block);
+        const temporary = `${CORDIS_PATCH_PATH}.tmp-${process.pid}-${randomUUID()}`;
+        try {
+            writeFileSync(temporary, content, 'utf8');
+            renameSync(temporary, CORDIS_PATCH_PATH);
+        }
+        catch (error) {
+            try {
+                rmSync(temporary, { force: true });
+            }
+            catch {
+                // Nothing to clean up, or the cleanup itself failed; the write error wins.
+            }
+            throw error;
+        }
+        return undefined;
+    }
+    catch (error) {
+        return error instanceof Error ? error.message : String(error);
+    }
+}
+// Why the async read matters: a keyring read used to be `execFileSync`, so each
+// one blocked the host's event loop for 0.2–3 s while Windows PowerShell
+// started. `/status` read it up to three times per request and the panel used to
+// poll, which is what made the Models page blank for 10–22 s (measured
+// 2026-10-23). `readKeyringBlob` in `../agy/keepalive.js` now owns the spawn:
+// async `execFile`, single-flight, and a 30 s freshness window — a renewal done
+// by anything else shows up within one window instead of costing a spawn per
+// panel open.
+/** Identity of the signed-in account, from the shared async keyring read. */
+async function readIdentityFromKeyring(options = {}) {
+    const blob = await readKeyringBlob(options);
+    return {
+        accessToken: blob.accessToken,
+        email: blob.email,
+        name: blob.name,
+        expiresAtMs: blob.expiresAtMs,
+    };
+}
+async function readAccessTokenFromKeyring(options = {}) {
+    return (await readIdentityFromKeyring(options)).accessToken;
+}
+// Proxy resolution for the quota RPCs. Was: a hardcoded default of
+// `http://127.0.0.1:12450` — the dev machine's tunnel. On any other host (CI,
+// users without that exact proxy) the CONNECT failed silently behind a
+// `.catch(() => null)`, so the quota panel showed nothing and the quota tests
+// only passed where the proxy happened to be listening.
+// Now: use the standard proxy environment (`HTTPS_PROXY`, checked case-first,
+// then lowercase — Node's own env handling accepts both) when it is set, and a
+// plain direct HTTPS request when it is not. Same behavior in production and
+// in tests: no ambient-network dependency left in the fetch path.
+// The panel shows which AGY binary it is talking to. `resolveAgyExecutable`
+// walks PATH, so running it on every `/status` poll (the panel polls) would do
+// a filesystem scan per request. The answer is stable for the life of the host
+// process, so memoize the auto-discovered one; an explicit `agyPath` is read
+// straight from config and stays reactive to settings changes.
+let memoAgyBin;
+function reportAgyBin(agyPath) {
+    const configured = agyPath?.trim();
+    if (configured)
+        return configured;
+    if (memoAgyBin === undefined)
+        memoAgyBin = resolveAgyExecutable();
+    return memoAgyBin;
+}
+function resolveQuotaProxyUrl() {
+    const raw = process.env.HTTPS_PROXY ?? process.env.https_proxy;
+    const trimmed = raw?.trim();
+    if (!trimmed)
+        return undefined;
+    try {
+        const url = new URL(trimmed);
+        // A CONNECT tunnel only makes sense for an http(s) proxy endpoint; socks://
+        // and friends need an agent we deliberately do not depend on.
+        if (url.protocol !== 'http:' && url.protocol !== 'https:')
+            return undefined;
+        return url.toString();
+    }
+    catch {
+        return undefined;
+    }
+}
+function fetchHttpsDirect(targetUrlStr, accessToken) {
+    return new Promise((resolve, reject) => {
+        try {
+            const targetUrl = new URL(targetUrlStr);
+            const body = JSON.stringify({});
+            const httpsReq = https.request({
+                host: targetUrl.hostname,
+                path: targetUrl.pathname + targetUrl.search,
+                method: 'POST',
+                headers: {
+                    Authorization: `Bearer ${accessToken}`,
+                    'Content-Type': 'application/json',
+                    ...AGY_IDENTITY_HEADERS,
+                    'Content-Length': Buffer.byteLength(body),
+                },
+                timeout: 10000,
+            }, (httpsRes) => {
+                const chunks = [];
+                httpsRes.on('data', (d) => chunks.push(d));
+                httpsRes.on('end', () => {
+                    try {
+                        resolve(JSON.parse(Buffer.concat(chunks).toString('utf8')));
+                    }
+                    catch (e) {
+                        reject(e);
+                    }
+                });
+            });
+            httpsReq.on('timeout', () => {
+                httpsReq.destroy(new Error('HTTPS pa.googleapis.com timed out after 10000ms'));
+            });
+            httpsReq.on('error', (err) => reject(err));
+            httpsReq.write(body);
+            httpsReq.end();
+        }
+        catch (e) {
+            reject(e);
+        }
+    });
+}
+function fetchHttpsThroughHttpProxy(targetUrlStr, accessToken, proxyUrl) {
+    const effectiveProxy = proxyUrl ?? resolveQuotaProxyUrl();
+    if (!effectiveProxy)
+        return fetchHttpsDirect(targetUrlStr, accessToken);
+    return new Promise((resolve, reject) => {
+        try {
+            const targetUrl = new URL(targetUrlStr);
+            const proxy = new URL(effectiveProxy);
+            const connectReq = http.request({
+                host: proxy.hostname,
+                port: proxy.port,
+                method: 'CONNECT',
+                path: `${targetUrl.hostname}:443`,
+                timeout: 10000,
+            });
+            connectReq.on('timeout', () => {
+                connectReq.destroy(new Error('Proxy CONNECT timed out after 10000ms'));
+            });
+            connectReq.on('connect', (res, socket) => {
+                if (res.statusCode !== 200) {
+                    socket.destroy();
+                    reject(new Error(`Proxy CONNECT failed with status: ${res.statusCode}`));
+                    return;
+                }
+                const tlsSocket = tls.connect({
+                    socket,
+                    servername: targetUrl.hostname,
+                    // A CONNECT that succeeds says nothing about the tunnel: the TLS
+                    // handshake beyond it can stall forever, and this promise used to
+                    // have no bound for that stage at all. `timeout` here is what keeps
+                    // a half-open proxy tunnel from hanging the whole quota chain.
+                    timeout: 10000,
+                }, () => {
+                    const body = JSON.stringify({});
+                    const httpsReq = https.request({
+                        host: targetUrl.hostname,
+                        path: targetUrl.pathname + targetUrl.search,
+                        method: 'POST',
+                        headers: {
+                            Authorization: `Bearer ${accessToken}`,
+                            'Content-Type': 'application/json',
+                            ...AGY_IDENTITY_HEADERS,
+                            'Content-Length': Buffer.byteLength(body),
+                        },
+                        createConnection: () => tlsSocket,
+                        timeout: 10000,
+                    }, (httpsRes) => {
+                        const chunks = [];
+                        httpsRes.on('data', (d) => chunks.push(d));
+                        httpsRes.on('end', () => {
+                            try {
+                                const parsed = JSON.parse(Buffer.concat(chunks).toString('utf8'));
+                                resolve(parsed);
+                            }
+                            catch (e) {
+                                reject(e);
+                            }
+                        });
+                    });
+                    httpsReq.on('timeout', () => {
+                        httpsReq.destroy(new Error('HTTPS pa.googleapis.com timed out after 10000ms'));
+                    });
+                    httpsReq.on('error', (err) => reject(err));
+                    httpsReq.write(body);
+                    httpsReq.end();
+                });
+                tlsSocket.on('error', (err) => reject(err));
+                tlsSocket.on('timeout', () => {
+                    tlsSocket.destroy(new Error('TLS handshake with the quota host timed out after 10000ms'));
+                });
+            });
+            connectReq.on('error', (err) => reject(err));
+            connectReq.end();
+        }
+        catch (e) {
+            reject(e);
+        }
+    });
+}
+let cachedQuotas = {};
+let lastQuotaFetchTime = 0;
+// The access token the cached snapshot was measured with. Comparing it against
+// the live keyring is how a renewed credential invalidates the 30 s cache.
+let lastQuotaToken;
+// Why this exists: the panel needs to tell "credentials expired" apart from
+// "no quota data yet". Google answers 401 UNAUTHENTICATED when the OAuth token
+// in the Windows keyring has lapsed (agy.exe refreshes it on its next run).
+// A silent catch used to turn that into an empty quota card with no hint.
+let lastQuotaError = null;
+// Serving deadline for the quota paths.
+//
+// Every stage inside `fetchQuotas` has its own timeout, yet the endpoint still
+// managed to hang for minutes: the single-flight promise below is module state,
+// so one run that never settled was handed to every later `/status` and
+// `/refresh-quota` request. The panel then waits forever and only a host restart
+// clears it. A deadline turns that class of failure into "this answer is stale"
+// instead of "this endpoint is dead": the caller always gets an answer, and a
+// run that outlives the deadline stops being the shared one.
+const QUOTA_SERVE_DEADLINE_MS = 12_000;
+// A renewal spawn is allowed to hold the fetch only this long. The spawn has its
+// own 45 s budget and keeps running in the background, but the panel must not
+// pay for it: the token is still valid inside the keep-alive lead window, so
+// answering with it is correct, and the next open sees the rotated one.
+const RENEWAL_AWAIT_MS = 8_000;
+// Model discovery is a sidebar concern, not a quota one. It gets a short leash
+// and falls back to the built-in catalog.
+const DISCOVERY_AWAIT_MS = 4_000;
+/**
+ * Resolve with `work`'s value, or with `undefined` if it has not settled within
+ * `ms`. Used only on serving paths, where "no answer" must never mean "no
+ * response": callers fall back to the last good snapshot.
+ */
+async function withDeadline(work, ms) {
+    let timer;
+    try {
+        return await Promise.race([
+            work,
+            new Promise((resolve) => {
+                timer = setTimeout(() => resolve(undefined), ms);
+            }),
+        ]);
+    }
+    catch {
+        return undefined;
+    }
+    finally {
+        if (timer !== undefined)
+            clearTimeout(timer);
+    }
+}
+// `refreshQuotas` sits outside `setupWebRoutes` (it is module-level state), but
+// renewal needs the live config. setupWebRoutes installs the current one here
+// on every call; an unset value simply skips renewal instead of guessing.
+let quotaConfig;
+// ---- attach diagnostics (Models page) ----
+// The host renders `settings.models.provider-card` only for the directory row
+// whose `settingsNs` equals the key the client registered, and the plugin's
+// three boot registrations are best-effort (a duplicate mount throws and used to
+// be swallowed). From outside the browser that made four different failures look
+// identical: no directory row, a refused registration, a card the host never
+// dispatched, and a card that rendered empty. `/plugins/agy-cli/diagnose`
+// reports the first two from the host side and the fourth from the browser.
+const bootNotes = new Map();
+/** Record the outcome of one boot registration step (called from apply()). */
+export function noteRegistration(step, detail) {
+    bootNotes.set(step, detail);
+}
+const cardPings = [];
+/** Record one card mount reported by the browser half. */
+export function noteCardPing(props) {
+    cardPings.push({ at: Date.now(), props });
+    if (cardPings.length > 20)
+        cardPings.shift();
+}
+/** Snapshot for `/plugins/agy-cli/diagnose`. */
+export function getAttachDiagnostics() {
+    return { notes: Object.fromEntries(bootNotes), cardPings: [...cardPings] };
+}
+// The 30 s TTL used to be checked only *after* a refresh finished, so every
+// concurrent request ran the whole chain anyway: the panel's poll and each
+// settings/model write piled two HTTPS round-trips onto the same quota endpoint.
+// Single-flight collapses them onto one in-flight promise. `force` (the manual
+// refresh button) is never handed a snapshot that started before it was
+// pressed — it queues behind the current run, then starts its own.
+let quotaInFlight;
+let quotaInFlightStartedAt = 0;
+async function refreshQuotas(force = false) {
+    if (quotaInFlight !== undefined) {
+        // A run older than the serving deadline is treated as abandoned: the caller
+        // gets a fresh attempt instead of a promise we already know cannot answer in
+        // time. It is not cancelled (its stages have their own timeouts); it simply
+        // stops being the shared answer, so a stall can never wedge the endpoint.
+        const abandoned = Date.now() - quotaInFlightStartedAt > QUOTA_SERVE_DEADLINE_MS;
+        if (!abandoned) {
+            const shared = quotaInFlight;
+            if (!force)
+                return shared;
+            await shared.catch(() => undefined);
+        }
+    }
+    const run = fetchQuotas(force);
+    quotaInFlight = run;
+    quotaInFlightStartedAt = Date.now();
+    try {
+        return await run;
+    }
+    finally {
+        if (quotaInFlight === run) {
+            quotaInFlight = undefined;
+            quotaInFlightStartedAt = 0;
+        }
+    }
+}
+async function fetchQuotas(force) {
+    const now = Date.now();
+    const cacheFresh = !force && now - lastQuotaFetchTime < 30_000 && Object.keys(cachedQuotas).length > 0;
+    if (cacheFresh) {
+        // A cached snapshot is only valid while the credential it describes is
+        // still in the keyring unchanged. That is how a renewal done by anything
+        // else (the timer, or this plugin's own keep-alive) shows up on the panel
+        // without waiting out the 30 s window. The read is async + cached, so this
+        // costs a PowerShell spawn at most once per freshness window.
+        try {
+            if ((await readAccessTokenFromKeyring()) === lastQuotaToken)
+                return cachedQuotas;
+        }
+        catch {
+            // Keyring read failed: treat the cache as stale and let the full fetch
+            // below report its own error instead of rejecting out of the cache path.
+        }
+        lastQuotaFetchTime = 0;
+    }
+    try {
+        // Renewal is decided before the fetch, because the token we are about to
+        // send may already be past the lead window. `refreshAgyTokenIfDue` is cheap
+        // when nothing is due and refuses to loop on a failing keyring, so it can
+        // sit on every refresh path (status poll, timer, manual refresh). A lead of
+        // 0 means the operator disabled renewal in one place instead of two.
+        let renewalRan = false;
+        if (quotaConfig !== undefined) {
+            const keepaliveCwd = quotaConfig.tokenKeepaliveCwd?.trim()
+                || process.env.USERPROFILE?.trim()
+                || process.env.HOME?.trim();
+            const renewal = await withDeadline(refreshAgyTokenIfDue({
+                executable: quotaConfig.agyPath?.trim() || undefined,
+                model: quotaConfig.model,
+                leadMs: quotaConfig.tokenKeepaliveLeadMs ?? 0,
+                ...(keepaliveCwd === undefined || keepaliveCwd.length === 0 ? {} : { cwd: keepaliveCwd }),
+            }), RENEWAL_AWAIT_MS);
+            // Only a run that actually happened can have replaced the credential. When
+            // nothing was due, the cached token is by definition still valid, and
+            // paying another ~1.2 s keyring spawn here would undo the whole point of
+            // the freshness window. A renewal that misses its window is not a failed
+            // renewal: it keeps running in the background and the next open sees the
+            // rotated credential.
+            renewalRan = renewal?.refreshed === true;
+        }
+        // Read after the renewal attempt, never before: sending a token that was
+        // just replaced would guarantee a 401 for this very fetch. Forced fresh —
+        // a cached token from before the renewal would be exactly the stale one.
+        const liveToken = await readAccessTokenFromKeyring({ force: renewalRan });
+        if (!liveToken) {
+            lastQuotaError = 'unauthorized';
+            return cachedQuotas;
+        }
+        lastQuotaToken = liveToken;
+        // Read the host that actually serves our generation traffic. prod is only a
+        // catalog fallback: its quota numbers are an empty ledger (see the comment
+        // on QUOTA_ENDPOINT_DAILY), so falling back to it would reintroduce the
+        // fake-100% panel.
+        // Two endpoints, but the second one is only a fallback. The model catalog is
+        // 132,811 B and ~2.1 s against the summary's 2,388 B / ~1.8 s (measured
+        // 2026-10-23), and it carries no data the panel renders while the summary
+        // reports buckets: the fallback below is the only consumer that turns it
+        // into family totals. Fetching it up front charged every cold panel open a
+        // round trip whose answer had already arrived, so ask for it only when the
+        // summary came back without groups.
+        const summaryRaw = await fetchHttpsThroughHttpProxy(`${QUOTA_ENDPOINT_DAILY}/v1internal:retrieveUserQuotaSummary`, liveToken).catch(() => null);
+        const modelsRaw = Array.isArray(summaryRaw?.groups)
+            ? null
+            : await fetchHttpsThroughHttpProxy(`${QUOTA_ENDPOINT_DAILY}/v1internal:fetchAvailableModels`, liveToken).catch(() => null);
+        // "Unauthenticated" is the only failure worth surfacing in the UI: it means
+        // the OAuth token in the keyring lapsed and a fresh agy.exe run (or a
+        // message through the provider) will refresh it. Network/upstream failures
+        // are transient and self-heal on the next poll.
+        const summaryErr = summaryRaw?.error?.code;
+        const modelsErr = modelsRaw?.error?.code;
+        if (summaryErr === 401 || modelsErr === 401) {
+            lastQuotaError = 'unauthorized';
+        }
+        else if (summaryRaw === null && modelsRaw === null) {
+            lastQuotaError = 'network';
+        }
+        else {
+            lastQuotaError = null;
+        }
+        const familyQuotas = {
+            google: { updatedAt: now, models: [] },
+            anthropic: { updatedAt: now, models: [] },
+            openai: { updatedAt: now, models: [] },
+        };
+        if (summaryRaw && Array.isArray(summaryRaw.groups)) {
+            for (const group of summaryRaw.groups) {
+                const dName = (group.displayName || '').toLowerCase();
+                const desc = (group.description || '').toLowerCase();
+                const isGoogle = dName.includes('gemini') || desc.includes('gemini');
+                const is3P = dName.includes('claude') || dName.includes('gpt') || desc.includes('claude') || desc.includes('gpt');
+                const targetFamilies = isGoogle
+                    ? ['google']
+                    : is3P
+                        ? ['anthropic', 'openai']
+                        : [];
+                let fiveHourFrac;
+                let fiveHourReset;
+                let weeklyFrac;
+                let weeklyReset;
+                for (const b of group.buckets || []) {
+                    // A disabled window is "does not currently apply" (Google's own wording
+                    // in the bucket description, e.g. "You have hit your weekly limit, the
+                    // 5-hour limit does not currently apply"). It is not a reading: skip it
+                    // so the 5-hour row stays unknown instead of inheriting a stale value.
+                    if (b.disabled === true)
+                        continue;
+                    const w = (b.window || b.bucketId || '').toLowerCase();
+                    const frac = typeof b.remainingFraction === 'number' && Number.isFinite(b.remainingFraction)
+                        ? Math.min(1, Math.max(0, b.remainingFraction))
+                        : undefined;
+                    if (w.includes('5h') || w.includes('five_hour') || w.includes('5-hour')) {
+                        fiveHourFrac = frac;
+                        fiveHourReset = b.resetTime;
+                    }
+                    else if (w.includes('weekly') || w.includes('week')) {
+                        weeklyFrac = frac;
+                        weeklyReset = b.resetTime;
+                    }
+                }
+                for (const fam of targetFamilies) {
+                    // No fraction for a window means upstream did not report it — record
+                    // that as unknown. Filling in 1 (the old behaviour) is what made a
+                    // drained account render as "100% remaining".
+                    familyQuotas[fam].remainingFraction = fiveHourFrac;
+                    familyQuotas[fam].resetTime = fiveHourReset;
+                    familyQuotas[fam].fiveHourUnknown = fiveHourFrac === undefined;
+                    familyQuotas[fam].weeklyFraction = weeklyFrac;
+                    familyQuotas[fam].weeklyResetTime = weeklyReset;
+                    familyQuotas[fam].weeklyUnknown = weeklyFrac === undefined;
+                    familyQuotas[fam].description = group.description;
+                }
+            }
+        }
+        if (modelsRaw && typeof modelsRaw === 'object' && modelsRaw.models) {
+            // The upstream catalog response names ~19 models. The panel only ever
+            // shows DEFAULT_CATALOG_MODELS, so keep the per-model quota detail for
+            // those ids and drop the rest instead of shipping every upstream entry
+            // over the wire on each status poll.
+            const catalogIds = new Set(DEFAULT_CATALOG_MODELS.map((m) => m.id));
+            for (const [id, m] of Object.entries(modelsRaw.models)) {
+                if (!catalogIds.has(id))
+                    continue;
+                const info = m?.quotaInfo;
+                const displayName = m?.displayName || id;
+                const entry = {
+                    modelId: id,
+                    displayName,
+                    remainingFraction: typeof info?.remainingFraction === 'number' && Number.isFinite(info.remainingFraction)
+                        ? Math.min(1, Math.max(0, info.remainingFraction))
+                        : undefined,
+                    ...(info?.resetTime ? { resetTime: info.resetTime } : {}),
+                };
+                const lower = id.toLowerCase();
+                const targetFam = lower.includes('claude')
+                    ? 'anthropic'
+                    : lower.includes('gpt')
+                        ? 'openai'
+                        : 'google';
+                familyQuotas[targetFam].models.push(entry);
+            }
+        }
+        if (!summaryRaw?.groups && modelsRaw?.models) {
+            for (const fam of DISPLAY_FAMILIES) {
+                const list = familyQuotas[fam]?.models || [];
+                // Only models that actually reported a fraction take part in the
+                // aggregate. A model whose `quotaInfo` has no `remainingFraction` is a
+                // model upstream declined to meter — treating it as 1 (the old
+                // behaviour) silently turns "not reported" into "full".
+                const metered = list.filter((x) => typeof x.remainingFraction === 'number');
+                const remaining = metered.length > 0 ? Math.min(...metered.map((x) => x.remainingFraction)) : undefined;
+                const resetEntry = list.find((x) => x.resetTime);
+                const isWeekly = resetEntry?.resetTime
+                    ? (new Date(resetEntry.resetTime).getTime() - now) >= 24 * 3600 * 1000
+                    : false;
+                familyQuotas[fam] = {
+                    ...familyQuotas[fam],
+                    remainingFraction: remaining,
+                    ...(!isWeekly && resetEntry?.resetTime ? { resetTime: resetEntry.resetTime } : {}),
+                    fiveHourUnknown: remaining === undefined,
+                    weeklyFraction: remaining,
+                    ...(isWeekly && resetEntry?.resetTime ? { weeklyResetTime: resetEntry.resetTime } : {}),
+                    updatedAt: now,
+                    models: list,
+                };
+            }
+        }
+        cachedQuotas = familyQuotas;
+        lastQuotaFetchTime = now;
+    }
+    catch {
+        // A throw past the in-function classification (a parse failure, a shape
+        // change) must not leave the previous error on display: surface it as a
+        // network-class failure so the panel shows a live problem, not a stale
+        // snapshot with no explanation.
+        lastQuotaError = 'network';
+    }
+    return cachedQuotas;
+}
+/**
+ * The catalog the panel shows. Gemini 3.8 Flash is the only model this account
+ * can actually reach: `agy models` lists it (plus effort variants of the same
+ * id), and the third-party families are drained — the 3p weekly bucket has read
+ * remainingFraction 0 since 2026-10-20, and Google removes Claude/GPT from
+ * promotional plans on 2026-11-02. Listing drained models only produces entries
+ * that fail on send.
+ *
+ * The retired entries and a switch-back procedure are parked in
+ * `docs/archived-model-catalog-20261020.md` — restoring any of them is a
+ * config edit (`models` + `visibleModels` in the profile patch), not a code
+ * change.
+ */
+const DEFAULT_CATALOG_MODELS = [
+    { id: 'gemini-3.8-flash', name: 'Gemini 3.8 Flash' },
+    { id: 'gemini-3.1-pro', name: 'Gemini 3.1 Pro' },
+];
+/** Quota families the panel renders. Same reasoning as above; see the doc. */
+const DISPLAY_FAMILIES = ['google'];
+export function setupWebRoutes(ctx, activeConfig, modelDiscovery) {
+    const disposers = [];
+    quotaConfig = activeConfig;
+    disposers.push(() => {
+        if (quotaConfig === activeConfig)
+            quotaConfig = undefined;
+    });
+    ctx.inject(['webServer'], (innerCtx) => {
+        const webServer = innerCtx.webServer;
+        if (!webServer || typeof webServer.register !== 'function')
+            return;
+        const sendJson = (res, status, body) => {
+            res.writeHead(status, { 'Content-Type': 'application/json; charset=utf-8' });
+            res.end(JSON.stringify(body));
+        };
+        const readBody = (req) => {
+            return new Promise((resolve) => {
+                const chunks = [];
+                let total = 0;
+                // Without this listener an aborted POST surfaces as an unhandled
+                // 'error' on the stream — an uncaught exception in the host process.
+                req.on('error', () => resolve({}));
+                req.on('data', (c) => {
+                    total += c.length;
+                    if (total > PANEL_MAX_BODY_BYTES) {
+                        req.destroy();
+                        resolve({});
+                        return;
+                    }
+                    chunks.push(c);
+                });
+                req.on('end', () => {
+                    try {
+                        const v = JSON.parse(Buffer.concat(chunks).toString('utf8'));
+                        resolve(v && typeof v === 'object' ? v : {});
+                    }
+                    catch {
+                        resolve({});
+                    }
+                });
+            });
+        };
+        const reg = (path, handler) => {
+            // The panel routes answer with account identity and drive quota fetches;
+            // they are loopback-only exactly like the MCP endpoint.
+            const d = webServer.register({
+                kind: 'exact',
+                path,
+                handler: async (req, res) => {
+                    if (!isLoopback(req.socket?.remoteAddress)) {
+                        sendJson(res, 403, { ok: false, error: 'loopback only' });
+                        return;
+                    }
+                    await handler(req, res);
+                },
+            });
+            if (typeof d === 'function')
+                disposers.push(d);
+        };
+        // Automatic renewal. The actual decision lives in `refreshQuotas` (it runs
+        // right before the quota fetch, which is the only moment a lapsed token
+        // actually costs something). This timer only exists so renewal also happens
+        // while nobody is looking at the panel — a status poll alone is not a
+        // dependable clock. See `src/agy/keepalive.ts`.
+        const keepaliveMs = activeConfig.tokenKeepaliveMs ?? 0;
+        if (keepaliveMs > 0) {
+            let stopped = false;
+            const keepaliveTimer = setInterval(() => {
+                if (stopped)
+                    return;
+                // force=false: refreshQuotas still renews when due; it just will not
+                // refetch quota numbers that are younger than the 30 s cache.
+                void refreshQuotas(false).catch(() => { });
+            }, keepaliveMs);
+            // The host must be able to exit without waiting for this timer.
+            if (typeof keepaliveTimer.unref === 'function')
+                keepaliveTimer.unref();
+            disposers.push(() => {
+                stopped = true;
+                clearInterval(keepaliveTimer);
+            });
+        }
+        // 0. GET /plugins/agy-cli/diagnose — the Models-page attach path as the
+        // host sees it. `configurable` must contain one entry whose settingsNs is
+        // the card key; when it does and `cardPings` is still empty, the host never
+        // dispatched the entry (a directory/namespace problem) rather than the card
+        // rendering nothing (a card problem). Read-only; safe to poll.
+        reg('/plugins/agy-cli/diagnose', (_req, res) => {
+            // The host turns any throwing handler into a bare 400 with an empty body.
+            // For a *diagnostic* endpoint that is the worst possible outcome: the one
+            // thing it exists to prevent is a failure nobody can read. So this handler
+            // never throws — it reads each service defensively and reports every
+            // problem inside the JSON.
+            let llm;
+            let llmError = null;
+            try {
+                llm = ctx.llm;
+            }
+            catch (error) {
+                // Cordis throws on property access when a declared service is not
+                // currently mounted. That is exactly the state worth reporting here.
+                llmError = error instanceof Error ? error.message : String(error);
+            }
+            const readOrNull = (fn) => {
+                try {
+                    return fn();
+                }
+                catch (error) {
+                    return error instanceof Error ? error.message : String(error);
+                }
+            };
+            const providers = llmError !== null
+                ? `unavailable: ${llmError}`
+                : readOrNull(() => (llm?.listProviders?.() ?? []).map((provider) => provider.id));
+            const configurable = llmError !== null
+                ? `unavailable: ${llmError}`
+                : readOrNull(() => (llm?.listConfigurableProviders?.() ?? [])
+                    .map((entry) => ({ provider: entry.provider, displayName: entry.displayName, settingsNs: entry.settingsNs })));
+            const diagnostics = getAttachDiagnostics();
+            const body = {
+                cardSlot: 'settings.models.provider-card',
+                cardKey: 'dsh-agy-cli',
+                ...diagnostics,
+                llmError,
+                providers,
+                configurable,
+                rowCarriesCardKey: Array.isArray(configurable)
+                    ? configurable.some((entry) => entry.settingsNs === 'dsh-agy-cli')
+                    : null,
+            };
+            try {
+                sendJson(res, 200, body);
+            }
+            catch (error) {
+                // A body that cannot be serialized must still say so.
+                res.writeHead(200, { 'Content-Type': 'application/json; charset=utf-8' });
+                res.end(JSON.stringify({
+                    cardSlot: body.cardSlot,
+                    cardKey: body.cardKey,
+                    notes: diagnostics.notes,
+                    serializeError: error instanceof Error ? error.message : String(error),
+                    rowCarriesCardKey: null,
+                }));
+            }
+        });
+        // The browser half reports every mount of the card here. A dispatch that
+        // never happens never arrives, which is what separates "no row" from "card
+        // rendered empty"; the prop names prove which owner props the host passed.
+        reg('/plugins/agy-cli/card-ping', async (req, res) => {
+            const body = await readBody(req);
+            const raw = body.props;
+            const props = Array.isArray(raw) ? raw.filter((item) => typeof item === 'string') : [];
+            noteCardPing(props);
+            sendJson(res, 200, { ok: true });
+        });
+        // 1. GET /plugins/agy-cli/status
+        reg('/plugins/agy-cli/status', async (_req, res) => {
+            const overrides = readAgyRuntimeOverrides() ?? { hiddenModels: [], defaultEffort: undefined, defaultModel: undefined };
+            // Never let the panel wait on the quota chain indefinitely: a timeout
+            // answers with the last good snapshot and says so in `quotaError`.
+            const quotaAnswer = await withDeadline(refreshQuotas(false), QUOTA_SERVE_DEADLINE_MS);
+            if (quotaAnswer === undefined)
+                lastQuotaError = 'timeout';
+            const quotas = quotaAnswer ?? cachedQuotas;
+            let discovered = [...DEFAULT_CATALOG_MODELS];
+            let catalogError = null;
+            if (modelDiscovery) {
+                try {
+                    const configured = configuredModels(activeConfig);
+                    const disc = await withDeadline(modelDiscovery.discover(configured), DISCOVERY_AWAIT_MS);
+                    if (disc?.models && disc.models.length > 0) {
+                        const set = new Set(discovered.map((m) => m.id));
+                        for (const dm of disc.models) {
+                            if (!set.has(dm.id)) {
+                                discovered.push({ id: dm.id, name: dm.name ?? dm.id });
+                            }
+                        }
+                    }
+                }
+                catch (error) {
+                    catalogError = error instanceof Error ? error.message : String(error);
+                }
+            }
+            let hidden = overrides.hiddenModels;
+            if (hidden.length === 0 && Array.isArray(activeConfig.visibleModels) && activeConfig.visibleModels.length > 0) {
+                hidden = discovered.map((m) => m.id).filter((id) => !activeConfig.visibleModels.includes(id));
+            }
+            const defaultModel = overrides.defaultModel ?? (activeConfig.model ? normalizeModelId(activeConfig.model) : 'gemini-3.8-flash');
+            const defaultEffort = overrides.defaultEffort ?? 'high';
+            const identity = await readIdentityFromKeyring();
+            const accountAlias = identity.email
+                ? `${identity.name ? `${identity.name} ` : ''}(${identity.email})`
+                : '本机主账号 (gemini:antigravity)';
+            sendJson(res, 200, {
+                plugin: 'dsh-agy-cli',
+                // Never fall back to a developer's absolute path: this value ships to
+                // every panel and used to leak `F:\AgentData\antigravity\cli\agy.exe`
+                // into every user's settings page. Empty agyPath means "auto-discover",
+                // so report what the spawn path actually resolves to.
+                bin: reportAgyBin(activeConfig.agyPath),
+                version: CLOUD_CODE_API_VERSION,
+                enabled: readConfigFlag(activeConfig.enabled),
+                permissionMode: 'dsh-owned',
+                workspaceRoot: '',
+                defaultModel,
+                defaultEffort,
+                auth: {
+                    phase: lastQuotaError === 'unauthorized' ? 'expired' : 'signed_in',
+                    // The panel needs the real expiry, not just a boolean: with automatic
+                    // renewal in place the useful question became "how long is left", and
+                    // a refresh that silently fails must still be visible.
+                    tokenExpiresAt: identity.expiresAtMs === undefined ? null : new Date(identity.expiresAtMs).toISOString(),
+                    tokenExpiresInSeconds: identity.expiresAtMs === undefined
+                        ? null
+                        : Math.round((identity.expiresAtMs - Date.now()) / 1000),
+                    keepalive: keepaliveMs > 0,
+                    // Report the last renewal verdict so a failed renew is visible in the
+                    // panel instead of masquerading as "still renewing".
+                    keepaliveLastReason: lastKeepaliveOutcome()?.reason ?? null,
+                    keepaliveLastDetail: lastKeepaliveOutcome()?.detail ?? null,
+                    message: lastQuotaError === 'unauthorized'
+                        ? '登录已过期：发一条 AGY 消息即可自动刷新凭据'
+                        : 'Windows Credential Manager (gemini:antigravity) 就绪',
+                },
+                quotaError: lastQuotaError,
+                pool: {
+                    version: 1,
+                    mode: 'sequential',
+                    defaultCooldownMs: 900000,
+                    maxCooldownMs: 3600000,
+                    primaryAccountId: 'primary',
+                    activeAccountId: 'primary',
+                    accounts: [
+                        {
+                            id: 'primary',
+                            alias: accountAlias,
+                            email: identity.email,
+                            defaultAlias: false,
+                            dir: '',
+                            systemHome: true,
+                            enabled: true,
+                            createdAt: Date.now(),
+                            cooldowns: {},
+                            quotas,
+                        },
+                    ],
+                },
+                catalog: { source: 'agy models', count: discovered.length, lastError: catalogError },
+                catalogModels: discovered,
+                hiddenModels: hidden,
+                bindings: 1,
+                lastRun: null,
+            });
+        });
+        // 2. POST /plugins/agy-cli/config
+        reg('/plugins/agy-cli/config', async (req, res) => {
+            if (req.method !== 'POST') {
+                sendJson(res, 405, { error: 'POST only' });
+                return;
+            }
+            const body = await readBody(req);
+            const key = typeof body.key === 'string' ? body.key : '';
+            const value = body.value;
+            if (key === 'hiddenModels' && Array.isArray(value)) {
+                saveOverrides({ hiddenModels: value });
+                const discovered = DEFAULT_CATALOG_MODELS.map((m) => m.id);
+                const visible = discovered.filter((id) => !value.includes(id));
+                const patchError = updateCordisPatch(visible);
+                if (patchError !== undefined) {
+                    sendJson(res, 500, { ok: false, key, error: patchError });
+                    return;
+                }
+                sendJson(res, 200, { ok: true, key, value });
+                return;
+            }
+            if (key === 'defaultEffort' && typeof value === 'string') {
+                saveOverrides({ defaultEffort: value });
+                sendJson(res, 200, { ok: true, key, value });
+                return;
+            }
+            if (key === 'defaultModel' && typeof value === 'string') {
+                saveOverrides({ defaultModel: value });
+                const patchError = updateCordisPatch(undefined, value);
+                if (patchError !== undefined) {
+                    sendJson(res, 500, { ok: false, key, error: patchError });
+                    return;
+                }
+                sendJson(res, 200, { ok: true, key, value });
+                return;
+            }
+            sendJson(res, 200, { ok: true, key, value });
+        });
+        // 3. POST /plugins/agy-cli/pool/refresh-quota
+        reg('/plugins/agy-cli/pool/refresh-quota', async (req, res) => {
+            // The manual button is the one caller that may legitimately wait for a new
+            // number, but not forever: past the deadline it reports the cached
+            // snapshot plus `quotaError: 'timeout'` instead of hanging the panel.
+            const quotaAnswer = await withDeadline(refreshQuotas(true), QUOTA_SERVE_DEADLINE_MS);
+            if (quotaAnswer === undefined)
+                lastQuotaError = 'timeout';
+            const quotas = quotaAnswer ?? cachedQuotas;
+            const identity = await readIdentityFromKeyring();
+            const accountAlias = identity.email
+                ? `${identity.name ? `${identity.name} ` : ''}(${identity.email})`
+                : '本机主账号 (gemini:antigravity)';
+            sendJson(res, 200, {
+                ok: true,
+                pool: {
+                    version: 1,
+                    mode: 'sequential',
+                    defaultCooldownMs: 900000,
+                    maxCooldownMs: 3600000,
+                    primaryAccountId: 'primary',
+                    activeAccountId: 'primary',
+                    accounts: [
+                        {
+                            id: 'primary',
+                            alias: accountAlias,
+                            email: identity.email,
+                            defaultAlias: false,
+                            dir: '',
+                            systemHome: true,
+                            enabled: true,
+                            createdAt: Date.now(),
+                            cooldowns: {},
+                            quotas,
+                        },
+                    ],
+                },
+            });
+        });
+        // 4. GET & POST /plugins/agy-cli/auth
+        reg('/plugins/agy-cli/auth', async (_req, res) => {
+            // Report what the keyring actually says, not an unconditional
+            // "signed in": an empty or expired credential shows up as exactly that.
+            const identity = await readIdentityFromKeyring();
+            const expired = identity.expiresAtMs !== undefined && identity.expiresAtMs <= Date.now();
+            const phase = identity.accessToken === null
+                ? 'signed_out'
+                : expired ? 'expired' : 'signed_in';
+            const message = phase === 'signed_in'
+                ? '已通过 Windows 凭据管理器授权'
+                : phase === 'expired'
+                    ? '凭据已过期，等待自动续期或重新登录'
+                    : '凭据管理器中没有 AGY 凭据（gemini:antigravity）';
+            sendJson(res, 200, { phase, message });
+        });
+    });
+    return () => {
+        for (const d of disposers) {
+            try {
+                d();
+            }
+            catch { }
+        }
+    };
+}
+//# sourceMappingURL=router.js.map