dsh-agy-link 0.4.15 → 0.4.16

package/CHANGELOG.md

@@ -1,5 +1,15 @@
 # Changelog
 
+## 0.4.16 (2026-08-24)
+
+- **External Re-Login Sync (换号自动/手动同步).**
+  - **Root cause fixed**: after `agy logout` + re-login as a DIFFERENT account, the pool slot kept the old account's email, cooldowns, quotas and `auth_required` quarantine — and poll gating (0.4.15) then skipped the flagged slot forever, freezing the UI on the stale account.
+  - **`resetAccountIdentity`**: detecting a changed email (from local CLI logs, zero network) now resets all identity-bound state (cooldowns / quotas / auth quarantine) while keeping slot config — the new account starts clean instead of inheriting the old one's restrictions.
+  - **Zero-network reconciliation before poll gating**: the background poller pre-checks flagged slots via local log scan, so an external re-login self-heals within one poll cycle (≤15 min) without any extra request to Google. Manual click is instant.
+  - **Auth self-heal on success**: a successful authenticated quota fetch clears a stale `auth_required` flag (the old token's invalid_grant no longer condemns the new login).
+  - **Manual refresh upgrades**: the 刷新 button now also re-reads the model catalog (one `agy models` spawn per explicit click only — new subscription tier may expose different models), and every account card gains a 同步 button for single-account refresh.
+  - **Primary slot always re-bootstrapped (real root cause of "UI stuck on old account")**: the primary slot was only created for an EMPTY pool, so once deleted it never came back while other accounts remained — the system-HOME login (e.g. after `agy logout` + re-login) had no slot to attach to and the UI kept showing an isolated account as 主账号. The slot is now recreated at the front on every load; deleting it no longer promotes an isolated account to primary. Disable the slot instead of deleting if unwanted.
+
 ## 0.4.15 (2026-08-24)
 
 - **Quota Polling Risk-Exposure Minimization (root-cause follow-up).**

package/dist/client.js

@@ -1140,7 +1140,17 @@ body.dark,
 							gap: "3px"
 						},
 						onClick: () => toggleExpand(acc.id)
-					}, isExpanded ? [uiIcon("chevronUp", 11), " 收起"] : [uiIcon("chevronDown", 11), " 明细"]) : null, !isPrimary ? h("button", {
+					}, isExpanded ? [uiIcon("chevronUp", 11), " 收起"] : [uiIcon("chevronDown", 11), " 明细"]) : null, h("button", {
+						type: "button",
+						className: "agy-btn",
+						style: {
+							...S.btnSm,
+							gap: "4px"
+						},
+						title: "刷新此账号（换号后点这里立即同步 email / 额度 / 模型）",
+						disabled: isBusy,
+						onClick: () => void refreshQuota(acc.id)
+					}, loadingAction === `refresh:${acc.id}` ? [renderSpinner(), "同步中"] : [uiIcon("refresh", 11), " 同步"]), !isPrimary ? h("button", {
 						type: "button",
 						className: "agy-btn",
 						style: {

package/dist/index.js

@@ -27082,7 +27082,7 @@ var AccountPoolManager = class {
 	* and signed in via /agy add-account.
 	*/
 	bootstrapDefaultAccount() {
-		if (this.data.accounts.length > 0) return;
+		if (this.data.accounts.some((a) => a.systemHome)) return;
 		const primary = {
 			id: "acc_primary",
 			alias: "主账号 (系统登录)",
@@ -27093,7 +27093,7 @@ var AccountPoolManager = class {
 			cooldowns: {},
 			quotas: {}
 		};
-		this.data.accounts.push(primary);
+		this.data.accounts.unshift(primary);
 		this.data.primaryAccountId = primary.id;
 		this.persist();
 	}
@@ -27243,7 +27243,7 @@ var AccountPoolManager = class {
 				force: true
 			});
 		} catch {}
-		if (this.data.primaryAccountId === id) this.data.primaryAccountId = this.data.accounts[0]?.id;
+		if (this.data.primaryAccountId === id) this.data.primaryAccountId = void 0;
 		if (this.data.activeAccountIds) {
 			for (const [fam, accId] of Object.entries(this.data.activeAccountIds)) if (accId === id) delete this.data.activeAccountIds[fam];
 		}
@@ -27284,6 +27284,22 @@ var AccountPoolManager = class {
 		}
 		this.persist();
 	}
+	/**
+	* External re-login detected (agy logout + new login): identity-bound
+	* state from the PREVIOUS account (cooldowns, quotas, auth quarantine)
+	* must not leak onto the new one. Resets everything email-bound while
+	* keeping slot config (alias, dir, proxy, enabled).
+	*/
+	resetAccountIdentity(id, newEmail) {
+		const acc = this.getAccount(id);
+		if (!acc) return;
+		acc.email = newEmail;
+		acc.cooldowns = {};
+		acc.quotas = {};
+		delete acc.authRequired;
+		delete acc.authError;
+		this.persist();
+	}
 	clearAuthRequired(id) {
 		const acc = this.getAccount(id);
 		if (!acc) return;
@@ -27902,20 +27918,16 @@ var QuotaService = class {
 			const detected = detectEmailFromAgyLogs(home);
 			if (detected) email = detected;
 		}
+		if (email && email !== account.email) this.pool.resetAccountIdentity(account.id, email);
 		const accessToken = await this.getValidAccessToken(account);
-		if (!accessToken) {
-			if (email && email !== account.email) this.pool.updateAccountQuotas(account.id, account.quotas, email);
-			return null;
-		}
+		if (!accessToken) return null;
 		const [summary, discovered] = await Promise.all([this.fetchQuotaSummary(accessToken, account.proxyUrl), this.fetchAvailableModels(accessToken, account.proxyUrl)]);
 		if (!email) {
 			const info = await this.fetchUserInfo(accessToken, account.proxyUrl);
 			if (info?.email) email = info.email;
 		}
-		if (!summary && (!discovered || !discovered.models)) {
-			if (email && email !== account.email) this.pool.updateAccountQuotas(account.id, account.quotas, email);
-			return null;
-		}
+		if (!summary && (!discovered || !discovered.models)) return null;
+		if (account.authRequired) this.pool.clearAuthRequired(account.id);
 		const familyQuotas = {};
 		if (summary && Array.isArray(summary.groups)) for (const group of summary.groups) {
 			const dName = (group.displayName || "").toLowerCase();
@@ -27988,9 +28000,25 @@ var QuotaService = class {
 	* auth-quarantined / in cooldown) so the poller never keeps knocking on
 	* Google endpoints for accounts already known to be limited. Manual force
 	* refresh from the UI refreshes everything.
+	*
+	* Before gating, a ZERO-NETWORK identity reconciliation runs for flagged
+	* slots: an external `agy logout` + re-login writes the new email into the
+	* newest CLI logs, and detecting that locally lets us reset the stale
+	* quarantine/cooldowns so the slot rejoins polling — no extra request to
+	* Google is made for this check (risk-control neutral).
 	*/
 	async refreshAllQuotas(force = false) {
-		const accounts = force ? this.pool.getAccounts() : this.pool.getAccounts().filter(shouldPollAccount);
+		let accounts = this.pool.getAccounts();
+		if (!force) {
+			const now = Date.now();
+			for (const acc of accounts) {
+				const flagged = acc.authRequired || Object.values(acc.cooldowns).some((cd) => cd && cd.cooldownUntil > now);
+				if (!acc.systemHome || !flagged) continue;
+				const detected = detectEmailFromAgyLogs(acc.systemHome || !acc.dir ? homedir() : acc.dir);
+				if (detected && detected !== acc.email) this.pool.resetAccountIdentity(acc.id, detected);
+			}
+			accounts = accounts.filter(shouldPollAccount);
+		}
 		await Promise.allSettled(accounts.map((acc) => this.refreshAccountQuota(acc, force)));
 	}
 };
@@ -28737,6 +28765,7 @@ function apply(ctx, entryConfig = {}) {
 						const acc = pool.getAccount(id);
 						if (acc) await quota.refreshAccountQuota(acc, true);
 					} else await quota.refreshAllQuotas(true);
+					catalog.forceRefresh().catch(() => void 0);
 					sendJson(res, 200, {
 						ok: true,
 						pool: pool.getPoolData()

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dsh-agy-link",
-  "version": "0.4.15",
+  "version": "0.4.16",
   "description": "Google Antigravity (agy CLI) models for DeepSeek Harness — stream Gemini/Claude/GPT-OSS subscriptions into DSH with thinking, tool activity, token usage and in-GUI Google OAuth login.",
   "type": "module",
   "license": "MIT",