dsh-agy-link 0.4.14 → 0.4.16

package/CHANGELOG.md

@@ -1,5 +1,22 @@
 # Changelog
 
+## 0.4.16 (2026-08-24)
+
+- **External Re-Login Sync (换号自动/手动同步).**
+  - **Root cause fixed**: after `agy logout` + re-login as a DIFFERENT account, the pool slot kept the old account's email, cooldowns, quotas and `auth_required` quarantine — and poll gating (0.4.15) then skipped the flagged slot forever, freezing the UI on the stale account.
+  - **`resetAccountIdentity`**: detecting a changed email (from local CLI logs, zero network) now resets all identity-bound state (cooldowns / quotas / auth quarantine) while keeping slot config — the new account starts clean instead of inheriting the old one's restrictions.
+  - **Zero-network reconciliation before poll gating**: the background poller pre-checks flagged slots via local log scan, so an external re-login self-heals within one poll cycle (≤15 min) without any extra request to Google. Manual click is instant.
+  - **Auth self-heal on success**: a successful authenticated quota fetch clears a stale `auth_required` flag (the old token's invalid_grant no longer condemns the new login).
+  - **Manual refresh upgrades**: the 刷新 button now also re-reads the model catalog (one `agy models` spawn per explicit click only — new subscription tier may expose different models), and every account card gains a 同步 button for single-account refresh.
+  - **Primary slot always re-bootstrapped (real root cause of "UI stuck on old account")**: the primary slot was only created for an EMPTY pool, so once deleted it never came back while other accounts remained — the system-HOME login (e.g. after `agy logout` + re-login) had no slot to attach to and the UI kept showing an isolated account as 主账号. The slot is now recreated at the front on every load; deleting it no longer promotes an isolated account to primary. Disable the slot instead of deleting if unwanted.
+
+## 0.4.15 (2026-08-24)
+
+- **Quota Polling Risk-Exposure Minimization (root-cause follow-up).**
+  - **Poll Interval 5min → 15min (configurable)**: New `quotaPollIntervalMs` config (env `DSH_AGY_QUOTA_POLL_INTERVAL_MS`, clamped to >= 60s) cuts background `v1internal` polling volume by 3x — the poller was the last remaining high-frequency network surface after the CLI-level hardening.
+  - **Restricted-Account Poll Gating**: Automatic polling now skips disabled, auth-quarantined (`invalid_grant`) and 429-cooldown accounts (`shouldPollAccount`), so the poller never keeps probing Google endpoints for accounts already known to be limited. Manual UI force-refresh still refreshes everything.
+  - **Userinfo Endpoint Called Only When Email Unknown**: The primary account previously hit the OAuth userinfo endpoint on every poll cycle just to detect account switching; that detection now rides the local log scan (`detectEmailFromAgyLogs`, zero network), eliminating one network call per cycle.
+
 ## 0.4.14 (2026-08-24)
 
 - **Hardened 429 Rate Limit Cooldown & Circuit Breaker (Anti-Risk Control).**

package/dist/client.js

@@ -1140,7 +1140,17 @@ body.dark,
 							gap: "3px"
 						},
 						onClick: () => toggleExpand(acc.id)
-					}, isExpanded ? [uiIcon("chevronUp", 11), " 收起"] : [uiIcon("chevronDown", 11), " 明细"]) : null, !isPrimary ? h("button", {
+					}, isExpanded ? [uiIcon("chevronUp", 11), " 收起"] : [uiIcon("chevronDown", 11), " 明细"]) : null, h("button", {
+						type: "button",
+						className: "agy-btn",
+						style: {
+							...S.btnSm,
+							gap: "4px"
+						},
+						title: "刷新此账号（换号后点这里立即同步 email / 额度 / 模型）",
+						disabled: isBusy,
+						onClick: () => void refreshQuota(acc.id)
+					}, loadingAction === `refresh:${acc.id}` ? [renderSpinner(), "同步中"] : [uiIcon("refresh", 11), " 同步"]), !isPrimary ? h("button", {
 						type: "button",
 						className: "agy-btn",
 						style: {

package/dist/index.js

@@ -90,7 +90,8 @@ function defaultConfig() {
 		rateLimitPerMinute: 0,
 		autoFallbackModel: false,
 		logRetentionDays: 7,
-		disableTelemetry: true
+		disableTelemetry: true,
+		quotaPollIntervalMs: 9e5
 	};
 }
 const Err = {
@@ -225,7 +226,8 @@ function resolveConfig(entry, env = process.env, overrides = readOverrides()) {
 		rateLimitPerMinute: asNum(get("rateLimitPerMinute")) ?? base.rateLimitPerMinute,
 		autoFallbackModel: asBool(get("autoFallbackModel")) ?? base.autoFallbackModel,
 		logRetentionDays: asNum(get("logRetentionDays")) ?? base.logRetentionDays,
-		disableTelemetry: asBool(get("disableTelemetry")) ?? base.disableTelemetry
+		disableTelemetry: asBool(get("disableTelemetry")) ?? base.disableTelemetry,
+		quotaPollIntervalMs: asNum(get("quotaPollIntervalMs")) ?? base.quotaPollIntervalMs
 	};
 	if (env.DSH_AGY_ENABLED !== void 0) cfg.enabled = asBool(env.DSH_AGY_ENABLED) ?? cfg.enabled;
 	if (env.DSH_AGY_BIN) cfg.agyBin = env.DSH_AGY_BIN;
@@ -271,6 +273,10 @@ function resolveConfig(entry, env = process.env, overrides = readOverrides()) {
 		const dt = asBool(env.DSH_AGY_DISABLE_TELEMETRY);
 		if (dt !== void 0) cfg.disableTelemetry = dt;
 	}
+	if (env.DSH_AGY_QUOTA_POLL_INTERVAL_MS) {
+		const q = asNum(env.DSH_AGY_QUOTA_POLL_INTERVAL_MS);
+		if (q && q >= 6e4) cfg.quotaPollIntervalMs = q;
+	}
 	return cfg;
 }
 //#endregion
@@ -284,6 +290,20 @@ function modelFamilyOf(modelId) {
 	if (id.startsWith("gpt-") || id.startsWith("openai/") || id.includes("gpt-oss")) return "openai";
 	return "unknown";
 }
+/**
+* Whether the background quota poller should touch this account at all.
+* Disabled, auth-quarantined and cooldown accounts are skipped so automatic
+* polling never hammers Google endpoints for accounts already known to be
+* restricted (risk-control exposure minimization). Manual force refresh
+* from the UI bypasses this gate.
+*/
+function shouldPollAccount(account) {
+	if (!account.enabled) return false;
+	if (account.authRequired) return false;
+	const now = Date.now();
+	for (const cd of Object.values(account.cooldowns)) if (cd && cd.cooldownUntil > now) return false;
+	return true;
+}
 function defaultPoolData() {
 	return {
 		version: 1,
@@ -27062,7 +27082,7 @@ var AccountPoolManager = class {
 	* and signed in via /agy add-account.
 	*/
 	bootstrapDefaultAccount() {
-		if (this.data.accounts.length > 0) return;
+		if (this.data.accounts.some((a) => a.systemHome)) return;
 		const primary = {
 			id: "acc_primary",
 			alias: "主账号 (系统登录)",
@@ -27073,7 +27093,7 @@ var AccountPoolManager = class {
 			cooldowns: {},
 			quotas: {}
 		};
-		this.data.accounts.push(primary);
+		this.data.accounts.unshift(primary);
 		this.data.primaryAccountId = primary.id;
 		this.persist();
 	}
@@ -27223,7 +27243,7 @@ var AccountPoolManager = class {
 				force: true
 			});
 		} catch {}
-		if (this.data.primaryAccountId === id) this.data.primaryAccountId = this.data.accounts[0]?.id;
+		if (this.data.primaryAccountId === id) this.data.primaryAccountId = void 0;
 		if (this.data.activeAccountIds) {
 			for (const [fam, accId] of Object.entries(this.data.activeAccountIds)) if (accId === id) delete this.data.activeAccountIds[fam];
 		}
@@ -27264,6 +27284,22 @@ var AccountPoolManager = class {
 		}
 		this.persist();
 	}
+	/**
+	* External re-login detected (agy logout + new login): identity-bound
+	* state from the PREVIOUS account (cooldowns, quotas, auth quarantine)
+	* must not leak onto the new one. Resets everything email-bound while
+	* keeping slot config (alias, dir, proxy, enabled).
+	*/
+	resetAccountIdentity(id, newEmail) {
+		const acc = this.getAccount(id);
+		if (!acc) return;
+		acc.email = newEmail;
+		acc.cooldowns = {};
+		acc.quotas = {};
+		delete acc.authRequired;
+		delete acc.authError;
+		this.persist();
+	}
 	clearAuthRequired(id) {
 		const acc = this.getAccount(id);
 		if (!acc) return;
@@ -27882,20 +27918,16 @@ var QuotaService = class {
 			const detected = detectEmailFromAgyLogs(home);
 			if (detected) email = detected;
 		}
+		if (email && email !== account.email) this.pool.resetAccountIdentity(account.id, email);
 		const accessToken = await this.getValidAccessToken(account);
-		if (!accessToken) {
-			if (email && email !== account.email) this.pool.updateAccountQuotas(account.id, account.quotas, email);
-			return null;
-		}
+		if (!accessToken) return null;
 		const [summary, discovered] = await Promise.all([this.fetchQuotaSummary(accessToken, account.proxyUrl), this.fetchAvailableModels(accessToken, account.proxyUrl)]);
-		if (account.systemHome || !email) {
+		if (!email) {
 			const info = await this.fetchUserInfo(accessToken, account.proxyUrl);
 			if (info?.email) email = info.email;
 		}
-		if (!summary && (!discovered || !discovered.models)) {
-			if (email && email !== account.email) this.pool.updateAccountQuotas(account.id, account.quotas, email);
-			return null;
-		}
+		if (!summary && (!discovered || !discovered.models)) return null;
+		if (account.authRequired) this.pool.clearAuthRequired(account.id);
 		const familyQuotas = {};
 		if (summary && Array.isArray(summary.groups)) for (const group of summary.groups) {
 			const dName = (group.displayName || "").toLowerCase();
@@ -27964,9 +27996,29 @@ var QuotaService = class {
 	}
 	/**
 	* Refresh quota statistics for all accounts in the pool.
+	* Automatic polling (force=false) skips restricted accounts (disabled /
+	* auth-quarantined / in cooldown) so the poller never keeps knocking on
+	* Google endpoints for accounts already known to be limited. Manual force
+	* refresh from the UI refreshes everything.
+	*
+	* Before gating, a ZERO-NETWORK identity reconciliation runs for flagged
+	* slots: an external `agy logout` + re-login writes the new email into the
+	* newest CLI logs, and detecting that locally lets us reset the stale
+	* quarantine/cooldowns so the slot rejoins polling — no extra request to
+	* Google is made for this check (risk-control neutral).
 	*/
 	async refreshAllQuotas(force = false) {
-		const accounts = this.pool.getAccounts();
+		let accounts = this.pool.getAccounts();
+		if (!force) {
+			const now = Date.now();
+			for (const acc of accounts) {
+				const flagged = acc.authRequired || Object.values(acc.cooldowns).some((cd) => cd && cd.cooldownUntil > now);
+				if (!acc.systemHome || !flagged) continue;
+				const detected = detectEmailFromAgyLogs(acc.systemHome || !acc.dir ? homedir() : acc.dir);
+				if (detected && detected !== acc.email) this.pool.resetAccountIdentity(acc.id, detected);
+			}
+			accounts = accounts.filter(shouldPollAccount);
+		}
 		await Promise.allSettled(accounts.map((acc) => this.refreshAccountQuota(acc, force)));
 	}
 };
@@ -28713,6 +28765,7 @@ function apply(ctx, entryConfig = {}) {
 						const acc = pool.getAccount(id);
 						if (acc) await quota.refreshAccountQuota(acc, true);
 					} else await quota.refreshAllQuotas(true);
+					catalog.forceRefresh().catch(() => void 0);
 					sendJson(res, 200, {
 						ok: true,
 						pool: pool.getPoolData()
@@ -28830,7 +28883,7 @@ function apply(ctx, entryConfig = {}) {
 			quota.refreshAllQuotas().catch(() => void 0);
 		};
 		const boot = setTimeout(refresh, 5e3);
-		const timer = setInterval(refresh, 3e5);
+		const timer = setInterval(refresh, Math.max(6e4, getConfig().quotaPollIntervalMs));
 		return () => {
 			clearTimeout(boot);
 			clearInterval(timer);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dsh-agy-link",
-  "version": "0.4.14",
+  "version": "0.4.16",
   "description": "Google Antigravity (agy CLI) models for DeepSeek Harness — stream Gemini/Claude/GPT-OSS subscriptions into DSH with thinking, tool activity, token usage and in-GUI Google OAuth login.",
   "type": "module",
   "license": "MIT",