dsh-agy-link 0.4.14 → 0.4.15

package/CHANGELOG.md

@@ -1,5 +1,12 @@
 # Changelog
 
+## 0.4.15 (2026-08-24)
+
+- **Quota Polling Risk-Exposure Minimization (root-cause follow-up).**
+  - **Poll Interval 5min → 15min (configurable)**: New `quotaPollIntervalMs` config (env `DSH_AGY_QUOTA_POLL_INTERVAL_MS`, clamped to >= 60s) cuts background `v1internal` polling volume by 3x — the poller was the last remaining high-frequency network surface after the CLI-level hardening.
+  - **Restricted-Account Poll Gating**: Automatic polling now skips disabled, auth-quarantined (`invalid_grant`) and 429-cooldown accounts (`shouldPollAccount`), so the poller never keeps probing Google endpoints for accounts already known to be limited. Manual UI force-refresh still refreshes everything.
+  - **Userinfo Endpoint Called Only When Email Unknown**: The primary account previously hit the OAuth userinfo endpoint on every poll cycle just to detect account switching; that detection now rides the local log scan (`detectEmailFromAgyLogs`, zero network), eliminating one network call per cycle.
+
 ## 0.4.14 (2026-08-24)
 
 - **Hardened 429 Rate Limit Cooldown & Circuit Breaker (Anti-Risk Control).**

package/dist/index.js

@@ -90,7 +90,8 @@ function defaultConfig() {
 		rateLimitPerMinute: 0,
 		autoFallbackModel: false,
 		logRetentionDays: 7,
-		disableTelemetry: true
+		disableTelemetry: true,
+		quotaPollIntervalMs: 9e5
 	};
 }
 const Err = {
@@ -225,7 +226,8 @@ function resolveConfig(entry, env = process.env, overrides = readOverrides()) {
 		rateLimitPerMinute: asNum(get("rateLimitPerMinute")) ?? base.rateLimitPerMinute,
 		autoFallbackModel: asBool(get("autoFallbackModel")) ?? base.autoFallbackModel,
 		logRetentionDays: asNum(get("logRetentionDays")) ?? base.logRetentionDays,
-		disableTelemetry: asBool(get("disableTelemetry")) ?? base.disableTelemetry
+		disableTelemetry: asBool(get("disableTelemetry")) ?? base.disableTelemetry,
+		quotaPollIntervalMs: asNum(get("quotaPollIntervalMs")) ?? base.quotaPollIntervalMs
 	};
 	if (env.DSH_AGY_ENABLED !== void 0) cfg.enabled = asBool(env.DSH_AGY_ENABLED) ?? cfg.enabled;
 	if (env.DSH_AGY_BIN) cfg.agyBin = env.DSH_AGY_BIN;
@@ -271,6 +273,10 @@ function resolveConfig(entry, env = process.env, overrides = readOverrides()) {
 		const dt = asBool(env.DSH_AGY_DISABLE_TELEMETRY);
 		if (dt !== void 0) cfg.disableTelemetry = dt;
 	}
+	if (env.DSH_AGY_QUOTA_POLL_INTERVAL_MS) {
+		const q = asNum(env.DSH_AGY_QUOTA_POLL_INTERVAL_MS);
+		if (q && q >= 6e4) cfg.quotaPollIntervalMs = q;
+	}
 	return cfg;
 }
 //#endregion
@@ -284,6 +290,20 @@ function modelFamilyOf(modelId) {
 	if (id.startsWith("gpt-") || id.startsWith("openai/") || id.includes("gpt-oss")) return "openai";
 	return "unknown";
 }
+/**
+* Whether the background quota poller should touch this account at all.
+* Disabled, auth-quarantined and cooldown accounts are skipped so automatic
+* polling never hammers Google endpoints for accounts already known to be
+* restricted (risk-control exposure minimization). Manual force refresh
+* from the UI bypasses this gate.
+*/
+function shouldPollAccount(account) {
+	if (!account.enabled) return false;
+	if (account.authRequired) return false;
+	const now = Date.now();
+	for (const cd of Object.values(account.cooldowns)) if (cd && cd.cooldownUntil > now) return false;
+	return true;
+}
 function defaultPoolData() {
 	return {
 		version: 1,
@@ -27888,7 +27908,7 @@ var QuotaService = class {
 			return null;
 		}
 		const [summary, discovered] = await Promise.all([this.fetchQuotaSummary(accessToken, account.proxyUrl), this.fetchAvailableModels(accessToken, account.proxyUrl)]);
-		if (account.systemHome || !email) {
+		if (!email) {
 			const info = await this.fetchUserInfo(accessToken, account.proxyUrl);
 			if (info?.email) email = info.email;
 		}
@@ -27964,9 +27984,13 @@ var QuotaService = class {
 	}
 	/**
 	* Refresh quota statistics for all accounts in the pool.
+	* Automatic polling (force=false) skips restricted accounts (disabled /
+	* auth-quarantined / in cooldown) so the poller never keeps knocking on
+	* Google endpoints for accounts already known to be limited. Manual force
+	* refresh from the UI refreshes everything.
 	*/
 	async refreshAllQuotas(force = false) {
-		const accounts = this.pool.getAccounts();
+		const accounts = force ? this.pool.getAccounts() : this.pool.getAccounts().filter(shouldPollAccount);
 		await Promise.allSettled(accounts.map((acc) => this.refreshAccountQuota(acc, force)));
 	}
 };
@@ -28830,7 +28854,7 @@ function apply(ctx, entryConfig = {}) {
 			quota.refreshAllQuotas().catch(() => void 0);
 		};
 		const boot = setTimeout(refresh, 5e3);
-		const timer = setInterval(refresh, 3e5);
+		const timer = setInterval(refresh, Math.max(6e4, getConfig().quotaPollIntervalMs));
 		return () => {
 			clearTimeout(boot);
 			clearInterval(timer);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dsh-agy-link",
-  "version": "0.4.14",
+  "version": "0.4.15",
   "description": "Google Antigravity (agy CLI) models for DeepSeek Harness — stream Gemini/Claude/GPT-OSS subscriptions into DSH with thinking, tool activity, token usage and in-GUI Google OAuth login.",
   "type": "module",
   "license": "MIT",