dsh-agy-link 0.4.13 → 0.4.15

package/CHANGELOG.md

@@ -1,5 +1,30 @@
 # Changelog
 
+## 0.4.15 (2026-08-24)
+
+- **Quota Polling Risk-Exposure Minimization (root-cause follow-up).**
+  - **Poll Interval 5min → 15min (configurable)**: New `quotaPollIntervalMs` config (env `DSH_AGY_QUOTA_POLL_INTERVAL_MS`, clamped to >= 60s) cuts background `v1internal` polling volume by 3x — the poller was the last remaining high-frequency network surface after the CLI-level hardening.
+  - **Restricted-Account Poll Gating**: Automatic polling now skips disabled, auth-quarantined (`invalid_grant`) and 429-cooldown accounts (`shouldPollAccount`), so the poller never keeps probing Google endpoints for accounts already known to be limited. Manual UI force-refresh still refreshes everything.
+  - **Userinfo Endpoint Called Only When Email Unknown**: The primary account previously hit the OAuth userinfo endpoint on every poll cycle just to detect account switching; that detection now rides the local log scan (`detectEmailFromAgyLogs`, zero network), eliminating one network call per cycle.
+
+## 0.4.14 (2026-08-24)
+
+- **Hardened 429 Rate Limit Cooldown & Circuit Breaker (Anti-Risk Control).**
+  - **Accurate Reset Duration Parsing**: Added `parseResetDurationMs` to accurately extract server reset countdowns from strings like `"Resets in 21m25s"`, `"Resets in 2h26m6s"`, `"Resets in 45s"`, or verbose duration phrases.
+  - **Safety Cooldown Buffer**: Account failures on 429 now automatically apply the parsed reset duration + a 10s safety buffer (or a 15-minute minimum backoff), preventing accounts from re-triggering rate limiters at the exact millisecond of reset.
+  - **Non-Retryable 429 Classification**: Identified 429 / quota exhaustion errors from stderr / stdout and classified them as non-retryable `Err.AGY_ERROR` instead of `Err.PROCESS_EXIT`, stopping DSH from executing automatic rapid retries on exhausted accounts.
+- **Organic Spacing Jitter, In-Flight Debounce & Burst Protection.**
+  - **Human-like Timing Jitter**: Added randomized timing jitter (`+100ms ~ 400ms`) on top of the 500ms single-account throttle to produce natural non-periodic traffic distributions that evade automated queue detection.
+  - **In-Flight Session Debounce**: Rejects identical prompt submissions within a 3-second window while an existing request is active (`Err.BUSY`), preventing frontend repeat loops and double-clicks from hammering the backend.
+  - **Sliding-Window Rate Limiter**: Added configurable `rateLimitPerMinute` protection across all sessions to prevent runaway `/goal` autonomous loops from draining daily quotas.
+- **Account Health Quarantine & Self-Healing.**
+  - **Invalid Grant Quarantine**: Automatically detects `invalid_grant` / revoked OAuth tokens during refresh and flags the account as `auth_required`, immediately taking it out of pool selection and alerting the user in UI.
+  - **Visual Health Dashboard**: Added red alert badges (`需重新登录`) and health indicators on account cards.
+  - **Automatic Fallback Model**: Supports `autoFallbackModel` to smoothly route requests to available lower-tier models when high-tier models are exhausted.
+- **System Hygiene & Telemetry Minimization.**
+  - **Telemetry Opt-out**: Injected telemetry suppression flags (`DO_NOT_TRACK`, `DISABLE_TELEMETRY`) into child process environments to reduce unnecessary background event tracking to Google `cclog`.
+  - **Automated Old Log Purge**: Added `sweepOldLogs` on plugin boot to automatically sweep CLI log files older than 7 days across system and isolated account directories.
+
 ## 0.4.13 (2026-08-21)
 
 - **Fixed Multimodal Image Attachment Staging & Direct Disk Fallback.**

package/README.md

@@ -21,10 +21,14 @@
 
 # 中文
 
-> 全网统一昵称：**小斯syzs** · B站 [@小斯syzs](https://space.bilibili.com/390211071) · 抖音 · 小红书 · 快手（全网同名）
-
 把 **Google Antigravity 模型接入 DeepSeek Harness（DSH）** —— 支持**多账号智能池化轮换**、**官方双 Bucket 配额监控（5小时滚动 + 7天周额度）**、**浏览器免粘贴一键登录**与**浅色/深色主题高对比度自适应**，由官方未修改的 `agy` CLI 驱动，完整支持流式输出、思考折叠（thinking）、原生工具卡片与精确 token 用量。
 
+<p align="center">
+  <img src="./docs/assets/dashboard.png" alt="Antigravity 管理控制台 - 多账号池化与配额监控" width="460" />
+  &nbsp;&nbsp;
+  <img src="./docs/assets/model-picker.png" alt="DSH 模型选择器中的 Antigravity 模型列表" width="220" />
+</p>
+
 ---
 
 > 🚨 **【国内用户核心前置：必须开启系统代理 / TUN 模式！】**
@@ -161,10 +165,14 @@ MIT License.
 
 # English
 
-> Known online as **小斯syzs** — Bilibili [@小斯syzs](https://space.bilibili.com/390211071) · Douyin · Xiaohongshu · Kuaishou (same handle across all platforms).
-
 Bring **Google Antigravity models into DeepSeek Harness (DSH)** — featuring **Multi-Account Pooling & Automatic Rotation**, **Official Dual-Bucket Quota Tracking (5h Rolling + 7d Weekly)**, **Zero-Paste In-GUI OAuth Login**, and **Theme-Adaptive High-Contrast UI**, powered by the official unmodified `agy` CLI.
 
+<p align="center">
+  <img src="./docs/assets/dashboard.png" alt="Antigravity Management Console - Multi-Account Pool & Quota Monitor" width="460" />
+  &nbsp;&nbsp;
+  <img src="./docs/assets/model-picker.png" alt="Antigravity Model Lineup in DSH Model Picker" width="220" />
+</p>
+
 ---
 
 > 🚨 **【Important: System Proxy / VPN / TUN Mode Required in Restricted Regions】**

package/dist/client.js

@@ -1057,7 +1057,8 @@ body.dark,
 				const renderedAccountCards = accounts.map((acc) => {
 					const isPrimary = acc.id === pool?.primaryAccountId;
 					const hasCooldown = Object.entries(acc.cooldowns).some(([, cd]) => cd && cd.cooldownUntil > Date.now());
-					const dotColor = !acc.enabled ? "#64748b" : hasCooldown ? "#f59e0b" : "#10b981";
+					const isAuthRequired = acc.authRequired;
+					const dotColor = !acc.enabled ? "#64748b" : isAuthRequired ? "#ef4444" : hasCooldown ? "#f59e0b" : "#10b981";
 					const isEditingProxy = editingProxyId === acc.id;
 					const isExpanded = expandedModels[acc.id] ?? false;
 					const cardStyle = isPrimary ? { ...S.cardPrimary } : { ...S.card };
@@ -1102,7 +1103,14 @@ body.dark,
 						fontWeight: 700,
 						fontSize: "13.5px",
 						color: "var(--agy-text-primary)"
-					} }, acc.alias), acc.email ? h("span", { style: {
+					} }, acc.alias), isAuthRequired ? h("span", { style: {
+						...S.badgeTag,
+						background: "var(--agy-badge-email-bg)",
+						color: "#ef4444",
+						borderColor: "#fca5a5",
+						gap: "4px",
+						fontWeight: 700
+					} }, uiIcon("alert", 11, "#ef4444"), "需重新登录") : null, acc.email ? h("span", { style: {
 						...S.badgeTag,
 						background: "var(--agy-badge-email-bg)",
 						color: "var(--agy-badge-email-text)",