dsh-agy-link 0.4.40 → 0.4.42

package/CHANGELOG.md

@@ -1,6 +1,27 @@
 # Changelog
 
-## 0.4.40 (unreleased)
+## 0.4.42 (2026-09-30)
+
+### English
+
+- **Fix: provisioned pool keychains are now set to never auto-lock.** A created keychain can lock later (system sleep / lock policy); a locked keychain turns every agy keyring save into an unanswerable password dialog — the keychain password is random and only the plugin knows it, so the user's login password is always rejected. `ensureIsolatedKeychain` now applies never-auto-lock settings on every boot/spawn/login (idempotent), not just at creation.
+
+### 中文 (Chinese)
+
+- **修复：预置的池账号钥匙串现在设置为永不自动锁。** 新建的钥匙串之后可能被系统上锁（系统睡眠/锁定策略）；一旦上锁，agy 的每次 keyring 保存都会弹一个**无法回答**的密码框——钥匙串密码是随机的、只有插件自己知道，用户输登录密码永远不对。`ensureIsolatedKeychain` 现在在每次启动/拉起/登录时都会幂等地套用"永不自动锁"设置，而不仅仅在创建时。
+
+## 0.4.41 (2026-09-30)
+
+### English
+
+- **Fix: the UI Stop button could not kill an offline wedged run.** `killTree` sent a single SIGTERM to the process group; agy's graceful-shutdown path ignores it while the process is wedged in offline dial retries (verified live: the run survived `kill <pid>` and only died on `kill -9`). The runner now escalates to SIGKILL for the whole group 3s after SIGTERM, so Stop always wins.
+- **Fix: offline runs spun on "thinking" forever.** The idle watchdog treated stderr chatter as activity — agy logs a dial-retry line to stderr every ~35s when it cannot reach Google, so a run that never emitted one stdout event stayed "active" until the 240m print-timeout. The watchdog is now **stdout-only**; login flows opt back in via the new `stderrKeepalive` run option (a browser login is legitimately stdout-silent for minutes). A timeout with zero stdout events now reports the likely cause: the run cannot reach Google (check proxy/network).
+- **Add: global `proxyUrl` config (`DSH_AGY_PROXY_URL` env works too).** GUI hosts don't inherit shell proxy env — the #1 reason plugin runs time out while the same command in a terminal works. An account's dedicated `proxyUrl` wins, then the global config; the effective proxy is injected into every agy spawn (`ALL_PROXY`/`HTTP(S)_PROXY`) and used by the quota / OAuth fetches. `/agy pool` now shows the effective proxy per account.
+- **Fix (macOS): recurring "create login keychain" password popup.** Pool accounts run with an isolated HOME, and macOS has **no login keychain inside it** (`security default-keychain` → "A default keychain could not be found"), so agy's keyring save triggered the `system.keychain.create.loginkc` password dialog on every ~hourly token refresh; denying it fell back to the on-disk token (auth kept working — exit status 45/154 in agy logs). The plugin now provisions a throwaway per-account keychain and sets it as the default under that HOME — idempotently at boot, before every spawn and before every login — so keyring writes are silent and truly per-account.
+- **Fix: transient network errors no longer flag accounts as "needs re-login".** Both flagging paths were too eager: the run-failure path matched any message containing `/auth/i` (e.g. `oauth2.googleapis.com … i/o timeout` transport noise) and the token-refresh path flagged **any** `token endpoint 400` — including captive-portal / proxy error pages. Both now require an authoritative OAuth state (`invalid_grant` / `invalid_client` / `revoked` / `disabled` / `unauthorized_client`) and transport-shaped failures are exempt — even a genuine AUTH classification is not trusted when the message is transport-shaped. A false flag also **removed the account from pool rotation** (`selectAccount` skips authRequired), so this was silent capacity loss plus a scary badge that the next manual quota refresh would immediately disprove.
+- **Add: flagged accounts self-heal in the background.** `markAuthRequired` now stamps `authMarkedAt`; after 10 minutes the background poll includes the flagged account for one token verification — if the stored refresh token still works the flag clears itself (previously this required a manual 刷新额度 click); if it is truly dead the flag is re-stamped. Risk-control exposure: at most one token-endpoint call per 10 minutes per flagged account.
+- **Add: "In use" badge in the Antigravity console.** Each account card now shows a green zap badge when the sticky scheduler is currently routing runs to it (per model family, from the pool's `activeAccountIds`), answering "which account is agy using right now" at a glance. Localized (zh/en/pt-BR/es).
+## 0.4.40 (2026-09-28)
 
 ### English
 
@@ -11,6 +32,17 @@
 
 ### 中文 (Chinese)
 
+- **修复：UI 的 Stop 按钮杀不掉离线卡死的 run。** `killTree` 只对进程组发一次 SIGTERM；而 agy 困在离线拨号重试里时会无视 SIGTERM（实测 `kill <pid>` 无效、只有 `kill -9` 能杀掉）。现在 runner 在 SIGTERM 3 秒后对整组升级 SIGKILL，Stop 按钮必定生效。
+- **修复：连不上 Google 时 run 永远转圈。** 旧看门狗把 stderr 输出当作活动——agy 连不上 Google 时每 ~35 秒往 stderr 写一条拨号重试日志，于是一个连一条 stdout 事件都没有的 run 一直“活着”，直到 240 分钟的 print-timeout。看门狗现在**只认 stdout**；登录流程通过新的 `stderrKeepalive` 选项继续保活（浏览器登录本来就会长时间没有 stdout）。零 stdout 事件的超时现在会直接说明原因：无法连接 Google（检查代理/网络）。
+- **新增：全局 `proxyUrl` 配置（也支持 `DSH_AGY_PROXY_URL` 环境变量）。** GUI 应用不继承 shell 的代理环境变量——这是“终端里没问题、插件里必超时”的头号原因。账号专属 `proxyUrl` 优先，其次全局配置；生效代理会注入每个 agy 进程（`ALL_PROXY`/`HTTP(S)_PROXY`），额度 / OAuth 请求同样走代理。`/agy pool` 现在会显示每个账号的生效代理。
+- **修复（macOS）：反复弹出“创建登录钥匙串”密码框。** 池账号使用隔离 HOME，而隔离 HOME 里**没有登录钥匙串**（`security default-keychain` → "A default keychain could not be found"），agy 每次约每小时的 token 续期写入都会触发 `system.keychain.create.loginkc` 密码弹窗；取消后回退磁盘 token（认证不受影响——agy 日志里的 exit status 45/154 即此）。插件现在会为每个池账号预置一个专属的一次性钥匙串并设为该 HOME 的默认——在启动时、每次拉起前、每次登录前幂等执行——钥匙串写入从此静默，且真正做到按账号隔离。
+- **修复：瞬时网络错误不再把账号标记为「需重新登录」（误判修复）。** 两条标记路径都过于激进：run 失败路径会匹配任何包含 `/auth/i` 的报错（比如 `oauth2.googleapis.com … i/o timeout` 这种纯传输噪音）；token 刷新路径会把**任何** `token endpoint 400` 都当成认证死亡——包括代理/门户返回的错误页。现在两条路径都要求出现权威的 OAuth 状态（`invalid_grant` / `invalid_client` / `revoked` / `disabled` / `unauthorized_client`），传输型失败一律豁免——即使带 AUTH 分类，只要报错文本是传输形态也不标记。误判的代价不只是吓人的徽标：被标记的账号会被调度器**排除出轮换**，等于静默损失一个账号，直到手动「刷新额度」把它证伪。
+- **新增：被标记的账号后台自动复验。** `markAuthRequired` 现在会记录 `authMarkedAt`；10 分钟后后台轮询会把该账号放进来做一次 token 验证——刷新令牌若仍可用，标记自动清除（以前必须手动点「刷新额度」）；若真的失效则重新盖章。风控代价：每个被标记账号至多每 10 分钟一次 token endpoint 调用。
+- **新增：控制台「当前使用」标识。** 账号卡片现在会显示绿色 ⚡「当前使用」徽标（基于号池调度器的 `activeAccountIds`，按模型族标注），一眼看出 agy 当前正在用哪个账号。四种语言（zh/en/pt-BR/es）均已本地化。
+## 0.4.40 (2026-09-28)
+
+### 中文 (Chinese)
+
 - **修复 #34：工具往返之后任务文本和图片丢失。** dsh-llm 0.1.7 把工具结果提升为 `role: 'tool'`（0.1.x 是 `role: 'user'` + `source.callId`）。`detectContinuation` 与尾部消息提取只认 0.1.x 形态，于是第一次工具往返之后的每一跳都丢掉镜像续跑，拼出空 prompt 或纯 digest（`request carries no user text`，或 agy 反问「接下来做什么」），图片附件也一并丢失。现在两种 schema 都识别（`message.toolCallId` / `source.callId` / 嵌套 `tool-result`），嵌套工具结果文本与图片会一并转发。
 - **修复 #35：续跑提示词必须保住任务。** 旧 `buildDigest` 允许大段工具结果吃掉 8K 预算，把用户的问题截掉。现在最新一条真实用户消息固定保留在 digest 开头；只要尾部只有工具结果，组装出的 prompt 也会重申该任务。「反复读自己日志、没有题目」的死循环不会再出现。
 - **修复 #35：aborted 路径也会落库 conversationId。** 旧逻辑只在 `failure === null` 时写 binding，而工具切断 / 调用方中止 / 超时恰恰是最容易丢 id 的路径——下一跳于是每次都开全新 agy 会话（`conversationID=""`）+ 纯 digest。现在会在 steer 抢占前从 live run 收割 id，并在 abort/timeout/process-exit 时落库（auth / 限流 / 会话失效仍会删除 binding）。

package/dist/client.js

@@ -48,6 +48,7 @@ window.__ModuleLoader__.load({
 			"status.authRequired": "需重新登录",
 			"status.primary": "主用",
 			"status.proxy": "代理",
+			"status.inUse": "当前使用",
 			"account.add": "添加 Google 账号",
 			"account.aliasDefault": "备用 Google 账号 {number}",
 			"account.defaultAlias": "主账号（系统登录）",
@@ -138,6 +139,7 @@ window.__ModuleLoader__.load({
 			"status.authRequired": "Sign in again required",
 			"status.primary": "Primary",
 			"status.proxy": "Proxy",
+			"status.inUse": "In use",
 			"account.add": "Add Google account",
 			"account.aliasDefault": "Backup Google account {number}",
 			"account.defaultAlias": "Primary account (system sign-in)",
@@ -228,6 +230,7 @@ window.__ModuleLoader__.load({
 			"status.authRequired": "É necessário entrar novamente",
 			"status.primary": "Principal",
 			"status.proxy": "Proxy",
+			"status.inUse": "Em uso",
 			"account.add": "Adicionar conta Google",
 			"account.aliasDefault": "Conta Google reserva {number}",
 			"account.defaultAlias": "Conta principal (login do sistema)",
@@ -318,6 +321,7 @@ window.__ModuleLoader__.load({
 			"status.authRequired": "Debe iniciar sesión de nuevo",
 			"status.primary": "Principal",
 			"status.proxy": "Proxy",
+			"status.inUse": "En uso",
 			"account.add": "Añadir cuenta de Google",
 			"account.aliasDefault": "Cuenta de Google de respaldo {number}",
 			"account.defaultAlias": "Cuenta principal (inicio de sesión del sistema)",
@@ -2725,8 +2729,10 @@ body.dark,
 						color: "var(--agy-text-primary)"
 					} }, brandIcon(FAMILY_BRAND[familyKey], 14), h("span", null, label)), renderLine(t("quota.fiveHour"), pct5h, c5h, w5h.resetText ? w5h.resetText + cdNote : cdNote.replace(/^ · /, "")), renderLine(t("quota.weekly"), pctWeekly, cWeekly, wWeekly.resetText));
 				};
+				const inUseIds = new Set(Object.values(pool?.activeAccountIds ?? {}));
 				const renderedAccountCards = accounts.map((acc) => {
 					const isPrimary = acc.id === pool?.primaryAccountId;
+					const isInUse = inUseIds.has(acc.id);
 					const hasCooldown = Object.entries(acc.cooldowns).some(([, cd]) => cd && cd.cooldownUntil > Date.now());
 					const isAuthRequired = acc.authRequired;
 					const dotColor = !acc.enabled ? "#64748b" : isAuthRequired ? "#ef4444" : hasCooldown ? "#f59e0b" : "#10b981";
@@ -2792,7 +2798,14 @@ body.dark,
 					} }, uiIcon("mail", 11, "var(--agy-badge-email-text)"), acc.email) : null, isPrimary ? h("span", { style: {
 						...S.badgePrimary,
 						gap: "4px"
-					} }, uiIcon("star", 10, "var(--agy-badge-primary-text)"), t("status.primary")) : null, acc.proxyUrl ? h("span", { style: {
+					} }, uiIcon("star", 10, "var(--agy-badge-primary-text)"), t("status.primary")) : null, isInUse ? h("span", { style: {
+						...S.badgeTag,
+						background: "rgba(16, 185, 129, 0.12)",
+						color: "#10b981",
+						borderColor: "rgba(16, 185, 129, 0.45)",
+						gap: "4px",
+						fontWeight: 700
+					} }, uiIcon("zap", 11, "#10b981"), t("status.inUse")) : null, acc.proxyUrl ? h("span", { style: {
 						...S.badgeTag,
 						background: "var(--agy-badge-proxy-bg)",
 						color: "var(--agy-badge-proxy-text)",

package/dist/index.js

@@ -102,9 +102,34 @@ function defaultConfig() {
 		autoFallbackModel: false,
 		logRetentionDays: 7,
 		disableTelemetry: true,
-		quotaPollIntervalMs: 9e5
+		quotaPollIntervalMs: 9e5,
+		proxyUrl: ""
 	};
 }
+/**
+* Authoritative OAuth/token states that genuinely prove a login is dead.
+* A bare 400 (captive portal, proxy error page) or a body without an OAuth
+* error code must NOT flag an account — that used to produce "needs
+* re-login" false positives which a manual quota refresh immediately
+* disproved.
+*/
+function isAuthoritativeAuthError(message) {
+	return /invalid_grant|invalid_client|revoked|disabled|unauthorized_client/i.test(message);
+}
+/** Transient transport failures — never proof that a login is dead. */
+function looksLikeNetworkError(message) {
+	return /dial tcp|fetch failed|econn(?:refused|reset|aborted)|enotfound|ehostunreach|enetunreach|socket hang up|getaddrinfo|bad gateway|service unavailable/i.test(message);
+}
+/**
+* Decide whether a failed call may flag an account as "needs re-login".
+* Genuine AUTH classification wins (unless the failure was transport-shaped),
+* and the message must name an authoritative token state otherwise.
+*/
+function shouldMarkAuthRequired(code, message) {
+	if (looksLikeNetworkError(message)) return false;
+	if (code === "AUTH") return true;
+	return isAuthoritativeAuthError(message);
+}
 const Err = {
 	AUTH: "AUTH",
 	AGY_NOT_INSTALLED: "AGY_NOT_INSTALLED",
@@ -264,7 +289,8 @@ function resolveConfig(entry, env = process.env, overrides = readOverrides()) {
 		autoFallbackModel: asBool(get("autoFallbackModel")) ?? base.autoFallbackModel,
 		logRetentionDays: asNum(get("logRetentionDays")) ?? base.logRetentionDays,
 		disableTelemetry: asBool(get("disableTelemetry")) ?? base.disableTelemetry,
-		quotaPollIntervalMs: asNum(get("quotaPollIntervalMs")) ?? base.quotaPollIntervalMs
+		quotaPollIntervalMs: asNum(get("quotaPollIntervalMs")) ?? base.quotaPollIntervalMs,
+		proxyUrl: asString(get("proxyUrl")) ?? base.proxyUrl
 	};
 	if (env.DSH_AGY_ENABLED !== void 0) cfg.enabled = asBool(env.DSH_AGY_ENABLED) ?? cfg.enabled;
 	if (env.DSH_AGY_BIN) cfg.agyBin = env.DSH_AGY_BIN;
@@ -314,6 +340,7 @@ function resolveConfig(entry, env = process.env, overrides = readOverrides()) {
 		const q = asNum(env.DSH_AGY_QUOTA_POLL_INTERVAL_MS);
 		if (q && q >= 6e4) cfg.quotaPollIntervalMs = q;
 	}
+	if (env.DSH_AGY_PROXY_URL) cfg.proxyUrl = env.DSH_AGY_PROXY_URL;
 	return cfg;
 }
 //#endregion
@@ -341,6 +368,23 @@ function shouldPollAccount(account) {
 	for (const cd of Object.values(account.cooldowns)) if (cd && cd.cooldownUntil > now) return false;
 	return true;
 }
+/**
+* After this long, an authRequired flag becomes eligible for ONE background
+* re-verification per poll cycle: a single transient failure used to
+* quarantine an account until a manual quota refresh cleared it.
+*/
+const AUTH_REVERIFY_DELAY_MS = 6e5;
+/**
+* A flagged account whose flag is old enough (or whose flag predates the
+* authMarkedAt bookkeeping) may be re-verified in the background. If the
+* stored token still works the flag clears itself; if not, the flag is
+* simply re-stamped.
+*/
+function needsAuthReverify(account, now = Date.now()) {
+	if (!account.authRequired) return false;
+	if (typeof account.authMarkedAt !== "number") return true;
+	return now - account.authMarkedAt > AUTH_REVERIFY_DELAY_MS;
+}
 function defaultPoolData() {
 	return {
 		version: 1,
@@ -1988,6 +2032,68 @@ function isolatedHomeEnv(dir) {
 	}
 	return env;
 }
+/**
+* Standard proxy env block for one proxy URL. agy is a Go binary and only
+* honors HTTP(S)_PROXY / ALL_PROXY; GUI hosts don't inherit shell proxy
+* env, so the plugin injects this explicitly (global config or per-account).
+* Exported for tests.
+*/
+function proxyEnvFor(proxyUrl) {
+	const url = proxyUrl?.trim();
+	if (!url) return {};
+	return {
+		ALL_PROXY: url,
+		HTTPS_PROXY: url,
+		HTTP_PROXY: url,
+		all_proxy: url,
+		https_proxy: url,
+		http_proxy: url
+	};
+}
+/**
+* macOS: an isolated HOME has no login keychain, so the first keyring write
+* makes the Security framework pop the "create login keychain" password
+* dialog (right system.keychain.create.loginkc) on every token refresh.
+* Provisioning a throwaway per-account keychain and making it the default
+* under that HOME keeps keyring writes silent and fully per-account.
+* No-op on other platforms or when already provisioned. Never throws.
+* Exported for tests.
+*/
+function ensureIsolatedKeychain(dir, platform = process.platform, run = (file, args, env) => execFileSync(file, args, {
+	stdio: "ignore",
+	env,
+	timeout: 1e4
+})) {
+	if (platform !== "darwin") return false;
+	if (dir === "") return false;
+	const kc = join(dir, "Library", "Keychains", "login.keychain-db");
+	try {
+		const env = {
+			...process.env,
+			HOME: dir
+		};
+		if (existsSync(kc)) {
+			run("security", ["set-keychain-settings", kc], env);
+			return false;
+		}
+		mkdirSync(join(dir, "Library", "Keychains"), { recursive: true });
+		run("security", [
+			"create-keychain",
+			"-p",
+			randomBytes(18).toString("base64url"),
+			kc
+		], env);
+		run("security", [
+			"default-keychain",
+			"-s",
+			kc
+		], env);
+		run("security", ["set-keychain-settings", kc], env);
+		return true;
+	} catch {
+		return false;
+	}
+}
 function resolveAgyBin(cfg) {
 	const candidates = [];
 	if (cfg.agyBin !== "") candidates.push(cfg.agyBin);
@@ -2101,6 +2207,7 @@ function withAgyQuietEnv(env = process.env) {
 		AGY_CLI_INTERACTIVE_HEADLESS: env.AGY_CLI_INTERACTIVE_HEADLESS ?? "1"
 	};
 }
+const escalating = /* @__PURE__ */ new WeakSet();
 function killTree(child) {
 	if (child.pid === void 0) return;
 	if (IS_WIN) {
@@ -2127,7 +2234,24 @@ function killTree(child) {
 		try {
 			child.kill("SIGTERM");
 		} catch {}
+		return;
 	}
+	if (escalating.has(child)) return;
+	escalating.add(child);
+	const pid = child.pid;
+	const escalate = setTimeout(() => {
+		try {
+			process.kill(-pid, "SIGKILL");
+		} catch {}
+		try {
+			child.kill("SIGKILL");
+		} catch {}
+	}, 3e3);
+	escalate.unref?.();
+	child.once("exit", () => {
+		clearTimeout(escalate);
+		escalating.delete(child);
+	});
 }
 function startAgyProcess(opts) {
 	const started = Date.now();
@@ -2203,7 +2327,7 @@ function startAgyProcess(opts) {
 		}
 	});
 	child.stderr?.on("data", (chunk) => {
-		refreshWatchdog();
+		if (opts.stderrKeepalive) refreshWatchdog();
 		stderr = (stderr + chunk).slice(-4096);
 	});
 	return {
@@ -3253,6 +3377,7 @@ var AgyAdapter = class extends LlmAdapter {
 			released = true;
 			release();
 		};
+		if (account && account.dir) ensureIsolatedKeychain(account.dir);
 		const env = {
 			...process.env,
 			...cfg.disableTelemetry ? {
@@ -3262,14 +3387,7 @@ var AgyAdapter = class extends LlmAdapter {
 				ANTIGRAVITY_DISABLE_TELEMETRY: "1"
 			} : {},
 			...account && account.dir ? isolatedHomeEnv(account.dir) : {},
-			...account?.proxyUrl ? {
-				ALL_PROXY: account.proxyUrl,
-				HTTPS_PROXY: account.proxyUrl,
-				HTTP_PROXY: account.proxyUrl,
-				all_proxy: account.proxyUrl,
-				https_proxy: account.proxyUrl,
-				http_proxy: account.proxyUrl
-			} : {}
+			...proxyEnvFor(account?.proxyUrl || cfg.proxyUrl || void 0)
 		};
 		if (account) {
 			const lastSpawn = this.lastAccountSpawnTime.get(account.id) ?? 0;
@@ -3337,12 +3455,14 @@ var AgyAdapter = class extends LlmAdapter {
 				code: "ABORTED",
 				message: "agy run aborted by caller"
 			};
-			else if (outcome.timedOut) failure = {
-				kind: "error",
-				code: Err.TIMEOUT,
-				message: "agy run was idle for " + cfg.timeoutMs + "ms without output"
-			};
-			else if (sawAuthFailure(parser, outcome)) failure = {
+			else if (outcome.timedOut) {
+				const neverSpoke = outcome.stdout.trim() === "";
+				failure = {
+					kind: "error",
+					code: Err.TIMEOUT,
+					message: "agy run was idle for " + cfg.timeoutMs + "ms without output" + (neverSpoke ? " — agy never emitted a single event; it is likely unable to reach Google (check proxy/network). 无法连接 Google，请检查代理或网络配置" : "")
+				};
+			} else if (sawAuthFailure(parser, outcome)) failure = {
 				kind: "error",
 				code: Err.AUTH,
 				message: "agy is not signed in — run /agy auth (or run agy once in a terminal) to login"
@@ -3395,7 +3515,7 @@ var AgyAdapter = class extends LlmAdapter {
 			} else {
 				const effectiveRateLimit = isRateLimit || looksLikeRateLimit(failure.message);
 				if (account && looksLikeHardRateLimit(rawErrText)) this.deps.pool?.recordFailure(account.id, family, failure.message);
-				if (account && (failure.code === Err.AUTH || /invalid_grant|not signed in|auth/i.test(failure.message))) this.deps.pool?.markAuthRequired(account.id, failure.message);
+				if (account && shouldMarkAuthRequired(failure.code, failure.message)) this.deps.pool?.markAuthRequired(account.id, failure.message);
 				const staleConversation = failure.code === Err.AUTH || effectiveRateLimit || failure.message && /conversation.*(not found|invalid|not recognized|expired|does not exist)|session.*(expired|invalid)/i.test(failure.message);
 				if (!isAux && sessionAccountKey !== "" && staleConversation) this.deps.store.delete(sessionAccountKey);
 				else if (!isAux && sessionAccountKey !== "" && !staleConversation) {
@@ -27617,6 +27737,7 @@ var AuthHelper = class {
 		if (!bin) return null;
 		this.cancel();
 		this.capturedUrl = null;
+		if (homeDir) ensureIsolatedKeychain(homeDir);
 		const proc = startAgyProcess({
 			bin,
 			args: [
@@ -27629,17 +27750,11 @@ var AuthHelper = class {
 			],
 			timeoutMs: 3e5,
 			keepStdin: true,
+			stderrKeepalive: true,
 			env: {
 				...process.env,
 				...homeDir ? isolatedHomeEnv(homeDir) : {},
-				...proxyUrl ? {
-					ALL_PROXY: proxyUrl,
-					HTTPS_PROXY: proxyUrl,
-					HTTP_PROXY: proxyUrl,
-					all_proxy: proxyUrl,
-					https_proxy: proxyUrl,
-					http_proxy: proxyUrl
-				} : {}
+				...proxyEnvFor(proxyUrl)
 			},
 			onLine: (line) => {
 				if (this.capturedUrl) return;
@@ -27860,7 +27975,7 @@ async function handle(deps, raw) {
 					const sec = Math.ceil((cd.cooldownUntil - Date.now()) / 1e3);
 					cds.push(`${fam} cooldown: ${sec}s left (${cd.reason})`);
 				}
-				lines.push(`${i + 1}. **${a.alias}** (${a.email || a.id})${isPrimary ? " ⭐ primary" : ""}`, `   - Proxy: ${a.proxyUrl || "system default"}`, `   - Quota: Gemini ${qG} | Claude ${qC} | GPT-OSS ${qO}`, cds.length > 0 ? `   - ⚠️ ${cds.join("; ")}` : "   - Status: 🟢 Ready");
+				lines.push(`${i + 1}. **${a.alias}** (${a.email || a.id})${isPrimary ? " ⭐ primary" : ""}`, `   - Proxy: ${a.proxyUrl || deps.cfg().proxyUrl || "system default"}`, `   - Quota: Gemini ${qG} | Claude ${qC} | GPT-OSS ${qO}`, cds.length > 0 ? `   - ⚠️ ${cds.join("; ")}` : "   - Status: 🟢 Ready");
 			}
 			return ok(lines.join("\n"));
 		}
@@ -28354,6 +28469,7 @@ var AccountPoolManager = class {
 		const acc = this.getAccount(id);
 		if (!acc) return;
 		acc.authRequired = true;
+		acc.authMarkedAt = Date.now();
 		acc.authError = reason || "Authentication expired or revoked (invalid_grant)";
 		if (this.data.activeAccountIds) {
 			for (const [fam, accId] of Object.entries(this.data.activeAccountIds)) if (accId === id) delete this.data.activeAccountIds[fam];
@@ -28374,6 +28490,7 @@ var AccountPoolManager = class {
 		acc.quotas = {};
 		delete acc.authRequired;
 		delete acc.authError;
+		delete acc.authMarkedAt;
 		this.persist();
 	}
 	clearAuthRequired(id) {
@@ -28381,6 +28498,7 @@ var AccountPoolManager = class {
 		if (!acc) return;
 		delete acc.authRequired;
 		delete acc.authError;
+		delete acc.authMarkedAt;
 		this.persist();
 	}
 	setPrimaryAccount(id) {
@@ -28458,6 +28576,7 @@ var AccountPoolManager = class {
 		if (acc.authRequired) {
 			delete acc.authRequired;
 			delete acc.authError;
+			delete acc.authMarkedAt;
 		}
 		if (acc.cooldowns[family]) delete acc.cooldowns[family];
 		this.persist();
@@ -28987,9 +29106,19 @@ function readWindowsCredentialToken() {
 }
 var QuotaService = class {
 	pool;
+	globalProxy;
 	preferredEndpointIndex = 0;
-	constructor(pool) {
+	/**
+	* @param globalProxy resolves the plugin-wide proxy URL; used when the
+	* account has no dedicated proxyUrl. Injected so tests stay network-free.
+	*/
+	constructor(pool, globalProxy = () => "") {
 		this.pool = pool;
+		this.globalProxy = globalProxy;
+	}
+	/** Dedicated account proxy wins, then the global config proxy. */
+	proxyFor(account) {
+		return account.proxyUrl || this.globalProxy() || void 0;
 	}
 	getTokenFilePath(account) {
 		const home = account.systemHome || !account.dir ? homedir() : account.dir;
@@ -29066,7 +29195,7 @@ var QuotaService = class {
 		if (!tok) return null;
 		if (tok.accessToken && (!tok.expiryMs || tok.expiryMs > Date.now() + 6e4)) return tok.accessToken;
 		if (tok.refreshToken) try {
-			const refreshed = await refreshTokens(tok.refreshToken, account.proxyUrl);
+			const refreshed = await refreshTokens(tok.refreshToken, this.proxyFor(account));
 			if (refreshed?.access_token) {
 				this.persistRefreshedToken(account, {
 					access_token: refreshed.access_token,
@@ -29077,7 +29206,7 @@ var QuotaService = class {
 			}
 		} catch (err) {
 			const errMsg = String(err);
-			if (/invalid_grant|revoked|disabled|unauthorized_client|token endpoint 400/i.test(errMsg)) this.pool.markAuthRequired(account.id, errMsg);
+			if (shouldMarkAuthRequired(void 0, errMsg)) this.pool.markAuthRequired(account.id, errMsg);
 		}
 		return tok.accessToken || null;
 	}
@@ -29173,13 +29302,13 @@ var QuotaService = class {
 		const accessToken = await this.getValidAccessToken(account);
 		if (!accessToken) return null;
 		if (force) {
-			const info = await this.fetchUserInfo(accessToken, account.proxyUrl);
+			const info = await this.fetchUserInfo(accessToken, this.proxyFor(account));
 			if (info?.email) email = info.email;
 		}
 		if (email && email !== account.email) this.pool.resetAccountIdentity(account.id, email);
-		const [summary, discovered] = await Promise.all([this.fetchQuotaSummary(accessToken, account.proxyUrl), this.fetchAvailableModels(accessToken, account.proxyUrl)]);
+		const [summary, discovered] = await Promise.all([this.fetchQuotaSummary(accessToken, this.proxyFor(account)), this.fetchAvailableModels(accessToken, this.proxyFor(account))]);
 		if (!email) {
-			const info = await this.fetchUserInfo(accessToken, account.proxyUrl);
+			const info = await this.fetchUserInfo(accessToken, this.proxyFor(account));
 			if (info?.email) email = info.email;
 		}
 		if (!summary && (!discovered || !discovered.models)) return null;
@@ -29273,7 +29402,7 @@ var QuotaService = class {
 				const detected = detectEmailFromAgyLogs(acc.systemHome || !acc.dir ? homedir() : acc.dir);
 				if (detected && detected !== acc.email) this.pool.resetAccountIdentity(acc.id, detected);
 			}
-			accounts = accounts.filter(shouldPollAccount);
+			accounts = accounts.filter((acc) => shouldPollAccount(acc) || needsAuthReverify(acc));
 		}
 		await Promise.allSettled(accounts.map((acc) => this.refreshAccountQuota(acc, force)));
 	}
@@ -29514,7 +29643,7 @@ function apply(ctx, entryConfig = {}) {
 	const version = () => versionCache;
 	const store = new SessionStore(join(stateDir(), "sessions.json"));
 	const pool = new AccountPoolManager();
-	const quota = new QuotaService(pool);
+	const quota = new QuotaService(pool, () => getConfig().proxyUrl);
 	const semaphore = new Semaphore(() => getConfig().maxConcurrent);
 	const getDiscoveryEnv = (account) => {
 		const cfg = getConfig();
@@ -29527,14 +29656,7 @@ function apply(ctx, entryConfig = {}) {
 				ANTIGRAVITY_DISABLE_TELEMETRY: "1"
 			} : {},
 			...account && account.dir ? isolatedHomeEnv(account.dir) : {},
-			...account?.proxyUrl ? {
-				ALL_PROXY: account.proxyUrl,
-				HTTPS_PROXY: account.proxyUrl,
-				HTTP_PROXY: account.proxyUrl,
-				all_proxy: account.proxyUrl,
-				https_proxy: account.proxyUrl,
-				http_proxy: account.proxyUrl
-			} : {}
+			...proxyEnvFor(account?.proxyUrl || cfg.proxyUrl || void 0)
 		};
 	};
 	const catalog = new ModelCatalog(async (signal) => {
@@ -29564,6 +29686,9 @@ function apply(ctx, entryConfig = {}) {
 	if (swept > 0) log("swept " + swept + " stale staging dir(s)");
 	const logsSwept = pool.sweepOldLogs(getConfig().logRetentionDays);
 	if (logsSwept > 0) log("swept " + logsSwept + " old log file(s)");
+	let kcProvisioned = 0;
+	for (const acc of pool.getAccounts()) if (acc.dir && ensureIsolatedKeychain(acc.dir)) kcProvisioned++;
+	if (kcProvisioned > 0) log("provisioned isolated keychains for " + kcProvisioned + " pool account(s)");
 	const adapter = new AgyAdapter({
 		getConfig,
 		catalog,
@@ -29784,7 +29909,8 @@ function apply(ctx, entryConfig = {}) {
 					const body = await readBody(req);
 					const homeDir = typeof body.homeDir === "string" ? body.homeDir : void 0;
 					const accountId = typeof body.accountId === "string" ? body.accountId : void 0;
-					const st = await auth.begin(homeDir, accountId);
+					const proxyUrl = typeof body.proxyUrl === "string" && body.proxyUrl.trim() !== "" ? body.proxyUrl.trim() : getConfig().proxyUrl.trim() || void 0;
+					const st = await auth.begin(homeDir, accountId, proxyUrl);
 					sendJson(res, 200, st);
 				})();
 			}
@@ -29850,7 +29976,7 @@ function apply(ctx, entryConfig = {}) {
 					}
 					const body = await readBody(req);
 					const alias = typeof body.alias === "string" ? body.alias : void 0;
-					const proxyUrl = typeof body.proxyUrl === "string" ? body.proxyUrl : void 0;
+					const proxyUrl = typeof body.proxyUrl === "string" && body.proxyUrl.trim() !== "" ? body.proxyUrl.trim() : getConfig().proxyUrl.trim() || void 0;
 					const st = await poolAuth.begin(alias, proxyUrl);
 					sendJson(res, st.ok ? 200 : 500, st);
 				})();

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dsh-agy-link",
-  "version": "0.4.40",
+  "version": "0.4.42",
   "description": "Google Antigravity (agy CLI) models for DeepSeek Harness — stream Gemini/Claude/GPT-OSS subscriptions into DSH with thinking, tool activity, token usage and in-GUI Google OAuth login.",
   "type": "module",
   "license": "MIT",