dsh-agy-link 0.4.50 → 0.4.57

package/dist/index.js

@@ -129,6 +129,35 @@ function looksLikeNetworkError(message) {
 	return /dial tcp|fetch failed|econn(?:refused|reset|aborted)|enotfound|ehostunreach|enetunreach|socket hang up|getaddrinfo|bad gateway|service unavailable|unexpected eof|\beof\b|tls handshake timeout|i\/o timeout|network (?:error|is unreachable)|no route to host|connection reset|context deadline exceeded|temporary failure in name resolution|proxyconnect|token validation failed|validate (?:the )?token|silent auth failed/i.test(message);
 }
 /**
+* Evidence from agy's OWN per-run log that a stored credential was present but
+* could not be VALIDATED over the network — i.e. jitter wearing an auth costume.
+*
+* The stderr banner agy prints when silent auth fails is byte-identical for a
+* genuine sign-out and for a keyring validation that missed its hard 10s
+* window, so the banner cannot decide AUTH vs NETWORK. The log can:
+*
+*   real sign-out   printmode.go:403 not authenticated, trying silent auth
+*                   printmode.go:409 silent auth failed        ← 29 ms later,
+*                   (NO keyringAuth: line — nothing to validate)  no keyring line
+*   network blip    printmode.go:403 not authenticated, trying silent auth
+*                   keyring.go:64   keyringAuth: loaded token … expired=false
+*                   keyring.go:111  keyringAuth: timed out after 10s
+*                   printmode.go:409 silent auth failed
+*                   keyring.go:93   keyringAuth: failed to fetch user info:
+*                                   userinfo request failed: … i/o timeout
+*
+* `keyringAuth:` lines only exist when agy actually HAD a credential to
+* validate, and the timeout / userinfo markers are transport failures inside
+* that validation. Verified against real logs (2026-10-16): the sign-out log
+* contains 0 occurrences of every marker below, the blip log contains all of
+* them.
+*/
+function looksLikeAuthVerificationJitter(agyLogText) {
+	if (agyLogText === "") return false;
+	if (isAuthoritativeAuthError(agyLogText)) return false;
+	return /keyringAuth: timed out after|failed to fetch user info|userinfo request failed/i.test(agyLogText);
+}
+/**
 * Decide whether a failed call may flag an account as "needs re-login".
 * Genuine AUTH classification wins (unless the failure was transport-shaped),
 * and the message must name an authoritative token state otherwise.
@@ -421,10 +450,18 @@ function resolveConfig(entry, env = process.env, overrides = readOverrides()) {
 }
 //#endregion
 //#region src/common/pool-types.ts
-/** Map a model slug to its backend quota counter family. */
+/**
+* Map a model slug to its backend quota counter family.
+*
+* Gemini 4 Argon (Pro/Ultra-only) bills against its OWN weekly quota pool —
+* never the plain Gemini one. Its ids look like `gemini-4-argon-low/-medium`
+* and MUST be detected before the generic `gemini-` prefix below, otherwise
+* argon usage would silently drain/report the Gemini counter.
+*/
 function modelFamilyOf(modelId) {
 	if (!modelId) return "unknown";
 	const id = modelId.toLowerCase();
+	if (id.includes("argon")) return "argon";
 	if (id.startsWith("claude-") || id.includes("claude")) return "anthropic";
 	if (id.startsWith("gemini-") || id.startsWith("gemma-") || id.includes("gemini")) return "google";
 	if (id.startsWith("gpt-") || id.startsWith("openai/") || id.includes("gpt-oss")) return "openai";
@@ -457,6 +494,7 @@ const AUTH_REVERIFY_DELAY_MS = 6e5;
 * simply re-stamped.
 */
 function needsAuthReverify(account, now = Date.now()) {
+	if (!account.enabled) return false;
 	if (!account.authRequired) return false;
 	if (typeof account.authMarkedAt !== "number") return true;
 	return now - account.authMarkedAt > AUTH_REVERIFY_DELAY_MS;
@@ -1348,6 +1386,158 @@ function defineAgyMirrorTool(deps) {
 	});
 }
 //#endregion
+//#region src/host/dsh-goal.ts
+const toToolCallId$1 = dshLlm.ToolCallId ?? dshLlm.CallId ?? ((id) => id);
+function extractText$1(m) {
+	const content = m.content;
+	if (typeof content === "string") return content;
+	if (Array.isArray(content)) {
+		const parts = [];
+		for (const b of content) if (b && typeof b === "object") {
+			const blk = b;
+			if (blk.type === "text" && typeof blk.text === "string") parts.push(blk.text);
+		}
+		return parts.join("\n");
+	}
+	return "";
+}
+function parseGoalRoundText(text) {
+	if (!text.includes("<goal_round>")) return null;
+	const roundMatch = text.match(/Round:\s*(\d+)(?:\/(\d+))?/);
+	const round = roundMatch ? parseInt(roundMatch[1], 10) : void 0;
+	const maxRounds = roundMatch && roundMatch[2] ? parseInt(roundMatch[2], 10) : void 0;
+	const objMatch = text.match(/Objective:\s*(?:"([^"]*)"|'([^']*)'|([^\n]+))/);
+	const objective = objMatch ? (objMatch[1] || objMatch[2] || objMatch[3])?.trim() : void 0;
+	const idMatch = text.match(/goal-[a-zA-Z0-9_-]+/);
+	return {
+		goalId: idMatch ? idMatch[0] : void 0,
+		round,
+		maxRounds,
+		objective
+	};
+}
+/**
+* Detect whether the incoming request is part of a DSH <goal_round> continuation.
+* Extracts goalId, revision, round, and objective if available.
+*/
+function detectGoalContext(messages) {
+	let goalId;
+	let revision;
+	let round;
+	let maxRounds;
+	let objective;
+	let isGoal = false;
+	for (let i = messages.length - 1; i >= 0; i--) {
+		const m = messages[i];
+		if (!m) continue;
+		const src = m.source;
+		if (src && typeof src === "object" && src.kind === "goal") {
+			isGoal = true;
+			if (!goalId && typeof src.goalId === "string") goalId = src.goalId;
+			if (revision === void 0 && typeof src.revision === "number") revision = src.revision;
+			if (round === void 0 && typeof src.round === "number") round = src.round;
+		}
+		const text = extractText$1(m);
+		if (text.includes("<goal_round>")) {
+			isGoal = true;
+			const parsed = parseGoalRoundText(text);
+			if (parsed) {
+				if (!goalId && parsed.goalId) goalId = parsed.goalId;
+				if (revision === void 0 && parsed.revision !== void 0) revision = parsed.revision;
+				if (round === void 0 && parsed.round !== void 0) round = parsed.round;
+				if (maxRounds === void 0 && parsed.maxRounds !== void 0) maxRounds = parsed.maxRounds;
+				if (!objective && parsed.objective) objective = parsed.objective;
+			}
+		}
+	}
+	if (isGoal) return {
+		goalId,
+		revision: revision ?? 1,
+		round,
+		maxRounds,
+		objective
+	};
+	return null;
+}
+/**
+* Detect whether DSH is in Plan Mode.
+* DSH plan-mode injects "You are in plan mode" into the runtime context prompt.
+*/
+function isPlanMode(messages) {
+	for (let i = messages.length - 1; i >= 0; i--) {
+		const m = messages[i];
+		if (!m) continue;
+		if (extractText$1(m).includes("You are in plan mode")) return true;
+	}
+	return false;
+}
+/**
+* Check if the trailing message is the tool result of a bridge-emitted `update_goal` call.
+*/
+function isGoalToolContinuation(messages) {
+	if (messages.length === 0) return false;
+	const last = messages[messages.length - 1];
+	if (!last) return false;
+	const callId = last.toolCallId ?? last.source?.callId;
+	if (typeof callId === "string" && callId.startsWith("agytc-bridge-goal-")) return true;
+	return false;
+}
+/**
+* Check if the trailing message is the tool result of a bridge-emitted `exit_plan_mode` call.
+*/
+function isPlanToolContinuation(messages) {
+	if (messages.length === 0) return false;
+	const last = messages[messages.length - 1];
+	if (!last) return false;
+	const callId = last.toolCallId ?? last.source?.callId;
+	if (typeof callId === "string" && callId.startsWith("agytc-bridge-plan-")) return true;
+	return false;
+}
+/**
+* Build the synthetic `update_goal` tool-call chunk that marks the goal complete on DSH.
+*/
+function buildGoalCompleteToolCallBlock(goalContext, blockIdx) {
+	const goalId = goalContext.goalId || "active-goal";
+	const revision = goalContext.revision ?? 1;
+	return [{
+		type: "block-start",
+		index: blockIdx,
+		blockType: "tool-call"
+	}, {
+		type: "block-end",
+		index: blockIdx,
+		block: {
+			type: "tool-call",
+			id: toToolCallId$1(`agytc-bridge-goal-${goalId}-${revision}`),
+			name: "update_goal",
+			arguments: JSON.stringify({
+				goal_id: goalId,
+				revision,
+				action: "complete"
+			})
+		}
+	}];
+}
+/**
+* Build the synthetic `exit_plan_mode` tool-call chunk that presents the generated plan to DSH.
+*/
+function buildPlanExitToolCallBlock(planMarkdown, blockIdx) {
+	return [{
+		type: "block-start",
+		index: blockIdx,
+		blockType: "tool-call"
+	}, {
+		type: "block-end",
+		index: blockIdx,
+		block: {
+			type: "tool-call",
+			id: toToolCallId$1(`agytc-bridge-plan-${Date.now()}`),
+			name: "exit_plan_mode",
+			arguments: JSON.stringify({ plan: planMarkdown.trim() !== "" ? planMarkdown : "# Plan Completed\n\nPlan generated and ready for review." })
+		}
+	}];
+}
+//#endregion
 //#region src/host/mapper.ts
 const toToolCallId = dshLlm.ToolCallId ?? dshLlm.CallId ?? ((id) => id);
 function usageFromRaw(raw) {
@@ -1396,6 +1586,7 @@ var EventMapper = class {
 	bannerOnlyThinkingEmitted = false;
 	sawTextStep;
 	finished = false;
+	totalTextOutput = "";
 	constructor(opts) {
 		this.opts = opts;
 		this.sawTextStep = opts.initialSawText === true;
@@ -1438,6 +1629,7 @@ var EventMapper = class {
 	appendDelta(delta) {
 		if (delta === "") return null;
 		this.openAcc += delta;
+		if (this.openType === "text") this.totalTextOutput += delta;
 		return this.openType === "text" ? {
 			type: "text-delta",
 			index: this.blockIdx,
@@ -1449,10 +1641,10 @@ var EventMapper = class {
 		};
 	}
 	/**
-	* Emit thinking: always retain the [agy thinking turn · ... thinking tokens]
-	* banner. When real thought prose is present, place the banner and thought
+	* Emit thinking: always retain the [agy · ... tokens] banner.
+	* When real thought prose is present, place the banner and thought
 	* text on the same initial line so DSH's collapsed summary renders:
-	*   [agy thinking turn · *** thinking tokens] [Chain-of-Thought body]
+	*   [agy · *** tokens] [Chain-of-Thought body]
 	*
 	* With `allowBannerOnly` the bare banner is emitted when the DB prose never
 	* arrived (desktop hosts without any sqlite reader, issue #43): the user
@@ -1466,7 +1658,7 @@ var EventMapper = class {
 		const bannerAlreadyShown = this.bannerOnlyShown.has(stepKey);
 		if (hasText) this.bannerOnlyShown.delete(stepKey);
 		yield* this.ensureBlock("reasoning");
-		const banner = thoughtTokens > 0 ? "[agy thinking turn · " + thoughtTokens + " thinking tokens]" : "[agy thinking turn]";
+		const banner = thoughtTokens > 0 ? "[agy · " + thoughtTokens + " tokens]" : "[agy]";
 		const combined = !hasText ? `${banner}\n` : bannerAlreadyShown ? `${text.trim()}\n` : `${banner} ${text.trim()}\n`;
 		const d = this.appendDelta(combined);
 		if (d) yield d;
@@ -1650,6 +1842,28 @@ var EventMapper = class {
 			type: "usage",
 			usage: usageFromRaw(this.opts.usage?.finalUsage(ev.usage) ?? ev.usage)
 		};
+		if (this.opts.supportsGoalUpdate && this.opts.goalContext?.goalId) {
+			for (const ch of buildGoalCompleteToolCallBlock(this.opts.goalContext, this.blockIdx)) yield ch;
+			this.blockIdx++;
+			yield {
+				type: "finish",
+				reason: { kind: "tool-calls" },
+				...ev.conversationId !== "" ? { replayState: { response: { conversationId: ev.conversationId } } } : {}
+			};
+			this.finished = true;
+			return;
+		}
+		if (this.opts.supportsPlanExit && this.totalTextOutput.trim() !== "") {
+			for (const ch of buildPlanExitToolCallBlock(this.totalTextOutput, this.blockIdx)) yield ch;
+			this.blockIdx++;
+			yield {
+				type: "finish",
+				reason: { kind: "tool-calls" },
+				...ev.conversationId !== "" ? { replayState: { response: { conversationId: ev.conversationId } } } : {}
+			};
+			this.finished = true;
+			return;
+		}
 		yield {
 			type: "finish",
 			reason: { kind: "stop" },
@@ -2291,24 +2505,25 @@ var StreamJsonParser = class {
 		const ev = this.takeLine(rest);
 		return ev ? [ev] : [];
 	}
+	recordAuthFailure(text) {
+		this.stats.sawAuthFailure = true;
+		const prev = this.stats.authFailureText ?? "";
+		if (prev.length < 600) this.stats.authFailureText = (prev === "" ? "" : prev + " ") + text.trim().slice(0, 300);
+	}
 	takeLine(line) {
 		if (line.trim() === "") return void 0;
 		this.stats.lines++;
 		this.recentLines.push(line);
 		if (this.recentLines.length > this.maxRecent) this.recentLines.splice(0, this.recentLines.length - this.maxRecent);
-		if (looksLikeAuthFailure(line)) {
-			this.stats.sawAuthFailure = true;
-			const prev = this.stats.authFailureText ?? "";
-			if (prev.length < 600) this.stats.authFailureText = (prev === "" ? "" : prev + " ") + line.trim().slice(0, 300);
-		}
-		if (this.stats.authUrl === void 0) {
-			const u = extractAuthUrl(line);
-			if (u) this.stats.authUrl = u;
-		}
 		let obj;
 		try {
 			obj = JSON.parse(line);
 		} catch {
+			if (looksLikeAuthFailure(line)) this.recordAuthFailure(line);
+			if (this.stats.authUrl === void 0) {
+				const u = extractAuthUrl(line);
+				if (u) this.stats.authUrl = u;
+			}
 			this.stats.garbage++;
 			this.stats.consecutiveGarbage++;
 			return {
@@ -2325,7 +2540,10 @@ var StreamJsonParser = class {
 				line
 			};
 		}
-		if (ev.kind === "result") this.stats.lastResultError = ev.error ?? void 0;
+		if (ev.kind === "result") {
+			this.stats.lastResultError = ev.error ?? void 0;
+			if (!ev.ok && ev.error && looksLikeAuthFailure(ev.error)) this.recordAuthFailure(ev.error);
+		}
 		this.stats.consecutiveGarbage = 0;
 		return ev;
 	}
@@ -2643,6 +2861,209 @@ function ensureIsolatedKeychain(dir, platform = process.platform, run = (file, a
 		return false;
 	}
 }
+/**
+* Purge any stale locked keychain from an isolated account HOME directory.
+* Keychains from older versions (v0.4.41-v0.4.44) were provisioned with
+* ephemeral random passwords that cannot be unlocked with an empty password,
+* causing repeated modal password dialogs from macOS SecurityAgent.
+* If unlocking with `-p ""` fails, the file and its registration in securityd
+* are purged so that ensureIsolatedKeychain can cleanly re-provision it.
+*/
+function purgeStaleIsolatedKeychain(dir, platform = process.platform, run = (file, args, env) => execFileSync(file, args, {
+	stdio: "ignore",
+	env,
+	timeout: 5e3
+})) {
+	if (platform !== "darwin") return false;
+	if (dir === "") return false;
+	const kc = join(dir, "Library", "Keychains", "login.keychain-db");
+	if (!existsSync(kc)) return false;
+	const env = {
+		...process.env,
+		HOME: dir
+	};
+	try {
+		run("security", [
+			"unlock-keychain",
+			"-p",
+			"",
+			kc
+		], env);
+		return false;
+	} catch {
+		try {
+			run("security", ["delete-keychain", kc], env);
+		} catch {}
+		try {
+			rmSync(kc, { force: true });
+		} catch {}
+		return true;
+	}
+}
+/**
+* macOS: Repair hijacked user-level keychain configuration.
+*
+* Versions prior to v0.4.49 set `security default-keychain -s <isolated-kc>`,
+* redirecting the user's desktop session default and login keychain into an
+* account-specific folder under ~/.dsh/agy-accounts/.
+*
+* This function detects if default-keychain, login-keychain, or the search list
+* (`list-keychains -d user`) point to any path containing `agy-accounts` or `.dsh`,
+* and restores them to the user's real login keychain (`~/Library/Keychains/login.keychain-db`).
+*/
+function repairMacSystemKeychain(userHome = homedir(), platform = process.platform, run = (file, args, env) => execFileSync(file, args, {
+	encoding: "utf8",
+	env: env ?? process.env,
+	timeout: 5e3
+})) {
+	if (platform !== "darwin") return false;
+	if (!userHome) return false;
+	let repaired = false;
+	const realKc = [join(userHome, "Library", "Keychains", "login.keychain-db"), join(userHome, "Library", "Keychains", "login.keychain")].find((p) => existsSync(p));
+	if (!realKc) return false;
+	const isIsolatedPath = (p) => /[\\/]\.dsh[\\/]agy-accounts[\\/]/i.test(p);
+	const env = {
+		...process.env,
+		HOME: userHome
+	};
+	try {
+		if (isIsolatedPath(run("security", ["default-keychain"], env).trim().replace(/^"|"$/g, ""))) {
+			run("security", [
+				"default-keychain",
+				"-s",
+				realKc
+			], env);
+			repaired = true;
+		}
+	} catch {}
+	try {
+		if (isIsolatedPath(run("security", ["login-keychain"], env).trim().replace(/^"|"$/g, ""))) {
+			run("security", [
+				"login-keychain",
+				"-s",
+				realKc
+			], env);
+			repaired = true;
+		}
+	} catch {}
+	try {
+		const entries = run("security", [
+			"list-keychains",
+			"-d",
+			"user"
+		], env).split("\n").map((l) => l.trim().replace(/^"|"$/g, "")).filter(Boolean);
+		const hasTainted = entries.some(isIsolatedPath);
+		const hasReal = entries.includes(realKc);
+		if (hasTainted || !hasReal) {
+			const cleaned = entries.filter((p) => !isIsolatedPath(p));
+			if (!cleaned.includes(realKc)) cleaned.unshift(realKc);
+			const sysKc = "/Library/Keychains/System.keychain";
+			if (!cleaned.includes(sysKc) && existsSync(sysKc)) cleaned.push(sysKc);
+			run("security", [
+				"list-keychains",
+				"-d",
+				"user",
+				"-s",
+				...cleaned
+			], env);
+			repaired = true;
+		}
+	} catch {}
+	return repaired;
+}
+/**
+* Open an interactive terminal session inside the given account directory.
+* Supports macOS (Terminal.app via AppleScript), Windows (cmd.exe start),
+* and Linux (xdg-terminal-exec, x-terminal-emulator, gnome-terminal, konsole,
+* xfce4-terminal, alacritty, xterm across distributions).
+* Safe, non-blocking and non-throwing.
+*/
+function openAccountTerminal(accDir, platform = process.platform, run = (file, args, opts) => execFile(file, [...args], { windowsHide: opts?.windowsHide }, () => {})) {
+	if (!accDir) return false;
+	if (platform === "darwin") {
+		const script = `tell application "Terminal" to activate\ntell application "Terminal" to do script "export HOME='${accDir}'; agy"`;
+		try {
+			run("osascript", ["-e", script]);
+			return true;
+		} catch {
+			return false;
+		}
+	}
+	if (platform === "win32") try {
+		run("cmd.exe", [
+			"/c",
+			"start",
+			"cmd.exe",
+			"/k",
+			`set "HOME=${accDir}" && set "USERPROFILE=${accDir}" && agy`
+		], { windowsHide: true });
+		return true;
+	} catch {
+		return false;
+	}
+	const cmd = `export HOME='${accDir}'; agy; exec bash`;
+	const candidates = [
+		{
+			bin: "xdg-terminal-exec",
+			args: [
+				"bash",
+				"-c",
+				cmd
+			]
+		},
+		{
+			bin: "x-terminal-emulator",
+			args: ["-e", `sh -c "export HOME='${accDir}'; agy; exec sh"`]
+		},
+		{
+			bin: "gnome-terminal",
+			args: [
+				"--",
+				"bash",
+				"-c",
+				cmd
+			]
+		},
+		{
+			bin: "konsole",
+			args: [
+				"-e",
+				"bash",
+				"-c",
+				cmd
+			]
+		},
+		{
+			bin: "xfce4-terminal",
+			args: ["-e", `bash -c "${cmd}"`]
+		},
+		{
+			bin: "alacritty",
+			args: [
+				"-e",
+				"bash",
+				"-c",
+				cmd
+			]
+		},
+		{
+			bin: "xterm",
+			args: [
+				"-e",
+				"bash",
+				"-c",
+				cmd
+			]
+		}
+	];
+	for (const c of candidates) try {
+		run(c.bin, c.args);
+		return true;
+	} catch {
+		continue;
+	}
+	return false;
+}
 function resolveAgyBin(cfg) {
 	const candidates = [];
 	if (cfg.agyBin !== "") candidates.push(cfg.agyBin);
@@ -2735,6 +3156,20 @@ function buildStreamInputLine(prompt) {
 		}
 	}) + "\n";
 }
+/**
+* Remove NUL characters from text destined for a child process.
+*
+* `spawn()` rejects any argv element containing U+0000 with
+* `ERR_INVALID_ARG_VALUE: The argument 'args[N]' must be a string without null
+* bytes`, which aborts the whole turn before agy is even started. NULs reach the
+* assembled prompt through binary tool output (a tool result that quoted a
+* binary file — `.git` objects, packed refs, images, …), so every prompt that
+* can carry tool text passes through here. Other control characters are legal in
+* argv and are left untouched.
+*/
+function stripNulBytes(text) {
+	return text.includes("\0") ? text.split("\0").join("") : text;
+}
 /** Whether the assembled argv (including a trailing `-p <prompt>`) risks ENAMETOOLONG. */
 function shouldUsePromptStdin(argsWithPrompt) {
 	let size = 0;
@@ -3112,15 +3547,42 @@ function parseWindowsProxyServer(raw) {
 	}
 	return /^https?:\/\//i.test(s) ? s : `http://${s}`;
 }
+/**
+* Parse macOS `scutil --proxy` dictionary output.
+* Keys of interest:
+*   HTTPEnable : 1
+*   HTTPPort : 7890
+*   HTTPProxy : 127.0.0.1
+*   HTTPSEnable : 1
+*   HTTPSPort : 7890
+*   HTTPSProxy : 127.0.0.1
+*   SOCKSEnable : 1
+*   SOCKSPort : 7890
+*   SOCKSProxy : 127.0.0.1
+*/
+function parseMacScutilProxy(raw) {
+	if (!raw.trim()) return void 0;
+	const lines = raw.split("\n");
+	const dict = {};
+	for (const line of lines) {
+		const m = /^\s*([A-Za-z0-9_]+)\s*:\s*(.+)$/.exec(line);
+		if (m && m[1] && m[2]) dict[m[1]] = m[2].trim();
+	}
+	if (dict.HTTPSEnable === "1" && dict.HTTPSProxy && dict.HTTPSPort) return `http://${dict.HTTPSProxy}:${dict.HTTPSPort}`;
+	if (dict.HTTPEnable === "1" && dict.HTTPProxy && dict.HTTPPort) return `http://${dict.HTTPProxy}:${dict.HTTPPort}`;
+	if (dict.SOCKSEnable === "1" && dict.SOCKSProxy && dict.SOCKSPort) return `socks5://${dict.SOCKSProxy}:${dict.SOCKSPort}`;
+}
 let cachedProxy = null;
 /**
-* Detect system proxy configuration.
+* Detect system proxy configuration across Windows, macOS, and Linux.
 * Priority:
-* 1. Standard environment variables (HTTPS_PROXY, HTTP_PROXY, ALL_PROXY)
+* 1. Standard environment variables (HTTPS_PROXY, HTTP_PROXY, ALL_PROXY, and lowercase)
 * 2. Windows Registry (HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings)
-* Results are cached for 5 seconds to minimize registry queries.
+* 3. macOS scutil (--proxy)
+* 4. Linux desktop system proxy (GNOME gsettings)
+* Results are cached for 5 minutes (300s) to minimize subprocess and registry queries.
 */
-function detectSystemProxy() {
+function detectSystemProxy(platform = process.platform) {
 	const now = Date.now();
 	if (cachedProxy && cachedProxy.expiresAt > now) return cachedProxy.value;
 	const envProxy = process.env.HTTPS_PROXY || process.env.https_proxy || process.env.HTTP_PROXY || process.env.http_proxy || process.env.ALL_PROXY || process.env.all_proxy;
@@ -3132,7 +3594,7 @@ function detectSystemProxy() {
 		};
 		return val;
 	}
-	if (IS_WIN$1) try {
+	if (platform === "win32") try {
 		const out = execFileSync("reg", ["query", "HKCU\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings"], {
 			encoding: "utf8",
 			timeout: 2e3,
@@ -3158,6 +3620,74 @@ function detectSystemProxy() {
 			}
 		}
 	} catch {}
+	if (platform === "darwin") try {
+		const val = parseMacScutilProxy(execFileSync("scutil", ["--proxy"], {
+			encoding: "utf8",
+			timeout: 2e3,
+			stdio: [
+				"ignore",
+				"pipe",
+				"ignore"
+			]
+		}));
+		if (val) {
+			cachedProxy = {
+				value: val,
+				expiresAt: now + 3e5
+			};
+			return val;
+		}
+	} catch {}
+	if (platform === "linux") try {
+		if (execFileSync("gsettings", [
+			"get",
+			"org.gnome.system.proxy",
+			"mode"
+		], {
+			encoding: "utf8",
+			timeout: 1e3,
+			stdio: [
+				"ignore",
+				"pipe",
+				"ignore"
+			]
+		}).trim().replace(/^'|'$/g, "") === "manual") {
+			const host = execFileSync("gsettings", [
+				"get",
+				"org.gnome.system.proxy.https",
+				"host"
+			], {
+				encoding: "utf8",
+				timeout: 1e3,
+				stdio: [
+					"ignore",
+					"pipe",
+					"ignore"
+				]
+			}).trim().replace(/^'|'$/g, "");
+			const port = execFileSync("gsettings", [
+				"get",
+				"org.gnome.system.proxy.https",
+				"port"
+			], {
+				encoding: "utf8",
+				timeout: 1e3,
+				stdio: [
+					"ignore",
+					"pipe",
+					"ignore"
+				]
+			}).trim();
+			if (host && port && port !== "0") {
+				const val = `http://${host}:${port}`;
+				cachedProxy = {
+					value: val,
+					expiresAt: now + 3e5
+				};
+				return val;
+			}
+		}
+	} catch {}
 	cachedProxy = {
 		value: void 0,
 		expiresAt: now + 3e5
@@ -3180,6 +3710,13 @@ var AccountPoolManager = class {
 	* sessions.json: web + headless share this file).
 	*/
 	knownIds = /* @__PURE__ */ new Set();
+	/**
+	* Consecutive non-authoritative auth failures per account id (noteAuthFailure).
+	* Deliberately in-memory: losing the streak on restart only costs one extra
+	* confirmation round, while persisting it could quarantine an account for a
+	* blip that healed while the process was down.
+	*/
+	authStrikes = /* @__PURE__ */ new Map();
 	/** Serialized snapshot of the last successful persist/load; skips no-op writes. */
 	persistedJson = "";
 	constructor(baseDir = defaultPoolDir()) {
@@ -3497,6 +4034,21 @@ var AccountPoolManager = class {
 		this.data.lastActiveAccountId = id;
 		this.persist();
 	}
+	/**
+	* Manually pin the active slot for one family (console "设为当前使用").
+	* The pin survives until the scheduler legitimately rotates away (quota
+	* exhaustion / cooldown / auth flag) — getActiveAccountId still enforces
+	* eligibility, so pinning an ineligible slot simply does not stick.
+	*/
+	setActiveAccount(id, family = "google") {
+		const acc = this.getAccount(id);
+		if (!acc || !acc.enabled || acc.authRequired) return false;
+		if (!this.data.activeAccountIds) this.data.activeAccountIds = {};
+		this.data.activeAccountIds[family] = id;
+		this.data.lastActiveAccountId = id;
+		this.persist();
+		return true;
+	}
 	markAuthRequired(id, reason) {
 		const acc = this.getAccount(id);
 		if (!acc) return;
@@ -3507,9 +4059,34 @@ var AccountPoolManager = class {
 		if (this.data.activeAccountIds) {
 			for (const [fam, accId] of Object.entries(this.data.activeAccountIds)) if (accId === id) delete this.data.activeAccountIds[fam];
 		}
+		this.authStrikes.delete(id);
 		this.persist();
 	}
 	/**
+	* Confirmation-gated quarantine for auth-classified failures that carry NO
+	* authoritative evidence (no invalid_grant / revoked / unauthorized_client).
+	*
+	* agy prints the same "not signed in" banner whether the login is really
+	* dead or its keyring validation merely missed a 10s window on a flaky
+	* network, so one banner used to sticky-quarantine healthy accounts — the
+	* user then saw a red 需重新登录 and could not even 设为当前使用. A single
+	* strike now only rotates the account away for the current retry; the flag
+	* hardens into a real quarantine only when the failure repeats with no
+	* success in between. Authoritative OAuth paths keep calling
+	* markAuthRequired directly and quarantine on first sight.
+	*
+	* Returns true when the account is now hard-quarantined.
+	*/
+	noteAuthFailure(id, reason) {
+		const strikes = (this.authStrikes.get(id) ?? 0) + 1;
+		if (strikes < 2) {
+			this.authStrikes.set(id, strikes);
+			return false;
+		}
+		this.markAuthRequired(id, reason);
+		return true;
+	}
+	/**
 	* External re-login detected (agy logout + new login): identity-bound
 	* state from the PREVIOUS account (cooldowns, quotas, auth quarantine)
 	* must not leak onto the new one. Resets everything email-bound while
@@ -3532,6 +4109,7 @@ var AccountPoolManager = class {
 		delete acc.authRequired;
 		delete acc.authError;
 		delete acc.authMarkedAt;
+		this.authStrikes.delete(id);
 		this.persist();
 	}
 	/**
@@ -3548,9 +4126,11 @@ var AccountPoolManager = class {
 	setPrimaryAccount(id) {
 		const idx = this.data.accounts.findIndex((a) => a.id === id);
 		if (idx === -1) return false;
-		this.data.primaryAccountId = id;
 		const [acc] = this.data.accounts.splice(idx, 1);
-		if (acc) this.data.accounts.unshift(acc);
+		if (!acc) return false;
+		acc.enabled = true;
+		this.data.primaryAccountId = id;
+		this.data.accounts.unshift(acc);
 		this.data.activeAccountIds = {
 			google: id,
 			anthropic: id,
@@ -3598,7 +4178,7 @@ var AccountPoolManager = class {
 		if (quota && typeof quota.weeklyFraction === "number" && quota.weeklyFraction <= .01) {
 			if (quota.weeklyResetTime) {
 				const resetMs = Date.parse(quota.weeklyResetTime);
-				if (!Number.isNaN(resetMs) && resetMs > now) return false;
+				if (Number.isNaN(resetMs) || resetMs > now) return false;
 			} else return false;
 		}
 		return true;
@@ -3617,7 +4197,7 @@ var AccountPoolManager = class {
 		}
 		const next = this.selectAccount(family);
 		if (next) return next.id;
-		return this.data.primaryAccountId ?? this.data.accounts[0]?.id;
+		return this.data.accounts.find((a) => a.id === this.data.primaryAccountId && a.enabled)?.id ?? this.data.accounts.find((a) => a.enabled)?.id;
 	}
 	/**
 	* Next moment this account's quota state refreshes for one family: the
@@ -3639,23 +4219,34 @@ var AccountPoolManager = class {
 		return (idx - start + total) % total;
 	}
 	/**
-	* "Use it or lose it" rotation order. When the sticky account is drained we
-	* prefer the eligible account whose quota window refreshes SOONEST: residual
-	* quota disappears at that reset, so draining it first is free capacity the
-	* pool would otherwise throw away. Accounts with no quota metadata yet keep
-	* the legacy cyclic order (which also keeps a drained slot from bouncing
-	* straight back to the primary).
+	* "Use it or lose it" rotation order.
+	* Priority 1: Weekly quota expiring soonest (least remaining time until weeklyResetTime).
+	* Priority 2: 5-hour quota expiring soonest (least remaining time until resetTime).
+	* Priority 3: Cyclic distance from `fromId` (or pool order).
 	*/
 	orderByExpiry(candidates, family, fromId) {
-		return candidates.map((acc, index) => ({
-			acc,
-			index,
-			at: this.nextQuotaResetAt(acc, family)
-		})).sort((a, b) => {
-			const aKnown = !Number.isNaN(a.at);
-			const bKnown = !Number.isNaN(b.at);
-			if (aKnown !== bKnown) return aKnown ? -1 : 1;
-			if (aKnown && bKnown && a.at !== b.at) return a.at - b.at;
+		const now = Date.now();
+		return candidates.map((acc, index) => {
+			const q = acc.quotas?.[family];
+			const weeklyMs = q?.weeklyResetTime ? Date.parse(q.weeklyResetTime) : NaN;
+			const fiveHourMs = q?.resetTime ? Date.parse(q.resetTime) : NaN;
+			const weeklyRemaining = !Number.isNaN(weeklyMs) ? Math.max(0, weeklyMs - now) : Number.POSITIVE_INFINITY;
+			const fiveHourRemaining = !Number.isNaN(fiveHourMs) ? Math.max(0, fiveHourMs - now) : Number.POSITIVE_INFINITY;
+			return {
+				acc,
+				index,
+				weeklyRemaining,
+				fiveHourRemaining,
+				weeklyKnown: Number.isFinite(weeklyRemaining),
+				fiveHourKnown: Number.isFinite(fiveHourRemaining)
+			};
+		}).sort((a, b) => {
+			if (a.weeklyKnown && b.weeklyKnown) {
+				if (a.weeklyRemaining !== b.weeklyRemaining) return a.weeklyRemaining - b.weeklyRemaining;
+			} else if (a.weeklyKnown !== b.weeklyKnown) return a.weeklyKnown ? -1 : 1;
+			if (a.fiveHourKnown && b.fiveHourKnown) {
+				if (a.fiveHourRemaining !== b.fiveHourRemaining) return a.fiveHourRemaining - b.fiveHourRemaining;
+			} else if (a.fiveHourKnown !== b.fiveHourKnown) return a.fiveHourKnown ? -1 : 1;
 			const da = this.cyclicDistance(fromId, a.acc.id);
 			const db = this.cyclicDistance(fromId, b.acc.id);
 			return da !== db ? da - db : a.index - b.index;
@@ -3735,6 +4326,7 @@ var AccountPoolManager = class {
 			delete acc.authMarkedAt;
 		}
 		if (acc.cooldowns?.[family]) delete acc.cooldowns[family];
+		this.authStrikes.delete(id);
 		this.persist();
 	}
 	clearCooldown(id, family) {
@@ -3781,7 +4373,7 @@ var AccountPoolManager = class {
 				return activeCandidate;
 			}
 		}
-		const nextAccount = activeId !== void 0 ? this.orderByExpiry(candidates, family, activeId)[0] : candidates[0];
+		const nextAccount = this.orderByExpiry(candidates, family, activeId)[0];
 		if (!this.data.activeAccountIds) this.data.activeAccountIds = {};
 		this.data.activeAccountIds[family] = nextAccount.id;
 		this.data.lastActiveAccountId = nextAccount.id;
@@ -27324,10 +27916,10 @@ const OAUTH_USERINFO_URL$1 = "https://www.googleapis.com/oauth2/v1/userinfo";
 /** Fixed loopback callback registered for the Antigravity client (like opencode). */
 const OAUTH_CALLBACK_PORT = 51121;
 const OAUTH_REDIRECT_URI = `http://localhost:${OAUTH_CALLBACK_PORT}/oauth-callback`;
-/** Runtime endpoint fallback order (daily first, mirroring OmniRoute). */
+/** Runtime endpoint fallback order (official production first, then staging/daily fallbacks). */
 const AGY_ENDPOINTS = [
-	"https://daily-cloudcode-pa.googleapis.com",
 	"https://cloudcode-pa.googleapis.com",
+	"https://daily-cloudcode-pa.googleapis.com",
 	"https://daily-cloudcode-pa.sandbox.googleapis.com",
 	"https://autopush-cloudcode-pa.sandbox.googleapis.com"
 ];
@@ -27943,6 +28535,58 @@ function findDuplicateCredentialIdentities(accounts, homeDir) {
 	return reports;
 }
 //#endregion
+//#region src/host/agy-log.ts
+/** Same home resolution quota.ts uses for per-account credential access. */
+function agyHomeDirFor(account) {
+	return account?.systemHome || !account?.dir ? homedir() : account.dir;
+}
+function agyLogDir(homeDir) {
+	return join(homeDir, ".gemini", "antigravity-cli", "log");
+}
+/** Names of the cli-*.log files present right now (cheap readdir). */
+function snapshotAgyLogs(homeDir) {
+	const dir = agyLogDir(homeDir);
+	try {
+		return new Set(readdirSync(dir).filter((f) => f.startsWith("cli-") && f.endsWith(".log")));
+	} catch {
+		return /* @__PURE__ */ new Set();
+	}
+}
+/** Upper bound so one pathological log cannot balloon the failure path. */
+const MAX_LOG_BYTES = 262144;
+const MAX_LOG_FILES = 3;
+/**
+* Concatenated text of the log files THIS run created (present now, absent
+* from the pre-spawn snapshot), newest first. Returns '' when the run wrote no
+* readable log — callers must treat that as "no evidence", never as proof
+* either way.
+*/
+function readAgyRunLogText(homeDir, before) {
+	const dir = agyLogDir(homeDir);
+	let names;
+	try {
+		if (!existsSync(dir)) return "";
+		names = readdirSync(dir).filter((f) => f.startsWith("cli-") && f.endsWith(".log") && !before.has(f)).map((f) => ({
+			f,
+			m: statSync(join(dir, f)).mtimeMs
+		})).sort((a, b) => b.m - a.m).slice(0, MAX_LOG_FILES).map((e) => e.f);
+	} catch {
+		return "";
+	}
+	const parts = [];
+	let budget = MAX_LOG_BYTES;
+	for (const name of names) {
+		if (budget <= 0) break;
+		try {
+			const text = readFileSync(join(dir, name), "utf8");
+			const slice = text.length > budget ? text.slice(-budget) : text;
+			parts.push(slice);
+			budget -= slice.length;
+		} catch {}
+	}
+	return parts.join("\n");
+}
+//#endregion
 //#region src/host/sessions.ts
 var SessionStore = class {
 	file;
@@ -28739,14 +29383,14 @@ function mergeSentImageIds(existing, added, max = 64) {
 * budget is filled from the newest other turns.
 */
 function buildDigest(messages, fromIdx, maxChars) {
-	const taskText = latestUserTaskText(messages.slice(fromIdx));
+	const taskText = stripNulBytes(latestUserTaskText(messages.slice(fromIdx)));
 	const taskLine = taskText !== "" ? "User: " + taskText : "";
 	const otherLines = [];
 	for (let i = fromIdx; i < messages.length; i++) {
 		const m = messages[i];
 		if (m === void 0 || m.role === "system") continue;
 		if (isSyntheticHarnessMessage(m)) continue;
-		const text = textOf(m);
+		const text = stripNulBytes(textOf(m));
 		if (text === "") continue;
 		if (taskLine !== "" && !isToolResultMessage(m) && m.role === "user" && text === taskText) continue;
 		otherLines.push(digestLabel(m) + text);
@@ -28809,7 +29453,9 @@ function brief(s) {
 }
 function sawAuthFailure(parser, outcome) {
 	if (parser.stats.sawAuthFailure) return true;
-	return looksLikeAuthFailure(outcome.stderrTail) || looksLikeAuthFailure(outcome.stdout.slice(0, 4e3));
+	if (looksLikeAuthFailure(outcome.stderrTail)) return true;
+	if (parser.stats.lastResultError && looksLikeAuthFailure(parser.stats.lastResultError)) return true;
+	return false;
 }
 /**
 * Bounded wait for an aborted run to settle, so a steer replacement never
@@ -29023,9 +29669,13 @@ var AgyAdapter = class AgyAdapter extends LlmAdapter {
 	* { model: LlmResolvedModelInfo; stream(options): AsyncIterable<StreamChunk> }.
 	*/
 	async prepareCall(provider, model, signal) {
+		if (signal?.aborted) throw signal.reason ?? new LlmError("aborted", "ABORTED");
 		return {
 			model: await this.resolveModel(provider, model, signal),
-			stream: (options) => this.stream(options)
+			stream: (options) => this.stream({
+				...options,
+				signal: options.signal ?? signal
+			})
 		};
 	}
 	/** Build the agy argv for one call. Exported for tests. */
@@ -29068,12 +29718,29 @@ var AgyAdapter = class AgyAdapter extends LlmAdapter {
 				this.warnOnce("cwd:" + (sessionKey || "anon"), "session workspace unresolved (sessionId=" + (sessionKey || "none") + ") — running agy in the DSH process cwd: " + workspaceRoot);
 			}
 		}
+		if (isGoalToolContinuation(options.messages) || isPlanToolContinuation(options.messages)) {
+			yield {
+				type: "finish",
+				reason: { kind: "stop" }
+			};
+			return;
+		}
+		const goalContext = detectGoalContext(options.messages);
+		if (goalContext && (!goalContext.goalId || goalContext.revision === void 0) && sessionKey && this.deps.sessionGoal) {
+			const sg = this.deps.sessionGoal(sessionKey);
+			if (sg) {
+				if (!goalContext.goalId) goalContext.goalId = sg.goalId;
+				if (goalContext.revision === void 0) goalContext.revision = sg.revision;
+			}
+		}
+		const supportsGoalUpdate = Boolean(options.tools?.some((t) => t.name === "update_goal"));
+		const supportsPlanExit = Boolean(options.tools?.some((t) => t.name === "exit_plan_mode")) && isPlanMode(options.messages);
 		const continuation = detectContinuation(options.messages);
 		if (continuation !== null) {
 			const rec = this.deps.runs.get(continuation.runId);
 			const deadFailure = rec !== void 0 && rec.isSettled ? rec.failureInfo : null;
 			if (rec !== void 0 && !(deadFailure !== null && this.claimFailover(sessionKey, deadFailure.code))) {
-				yield* this.driveSpan(rec, continuation.eventIndex + 1, hasToolSupport, isCodeMode);
+				yield* this.driveSpan(rec, continuation.eventIndex + 1, hasToolSupport, isCodeMode, goalContext, supportsGoalUpdate, supportsPlanExit, options.signal);
 				return;
 			}
 			if (rec !== void 0) {
@@ -29163,7 +29830,9 @@ var AgyAdapter = class AgyAdapter extends LlmAdapter {
 			}
 			if (!account) {
 				const pool = this.deps.pool;
-				const accounts = pool.getAccounts().filter((a) => a.enabled);
+				const allAccounts = pool.getAccounts();
+				const accounts = allAccounts.filter((a) => a.enabled);
+				const disabled = allAccounts.length - accounts.length;
 				const cooling = accounts.filter((a) => pool.isAccountEligible(a, family) === false && !a.authRequired).length;
 				const signedOut = accounts.filter((a) => a.authRequired === true).length;
 				const countdown = pool.getEarliestAvailableCountdown?.(family) ?? pool.getEarliestResetCountdown(family);
@@ -29172,7 +29841,17 @@ var AgyAdapter = class AgyAdapter extends LlmAdapter {
 					account = pool.selectAccount(family) ?? void 0;
 				}
 				if (!account) {
-					const why = signedOut > 0 && signedOut === accounts.length ? "every account needs a re-login (run /agy auth)" : `no account can serve ${family} right now (${cooling} in cooldown, ${signedOut} signed out)`;
+					let why;
+					if (accounts.length === 0 && allAccounts.length > 0) why = "all accounts are disabled (enable an account in the console or run /agy enable-account)";
+					else if (signedOut > 0 && signedOut === accounts.length) why = "every account needs a re-login (run /agy auth)";
+					else {
+						const details = [];
+						if (cooling > 0) details.push(`${cooling} in cooldown`);
+						if (signedOut > 0) details.push(`${signedOut} signed out`);
+						if (disabled > 0) details.push(`${disabled} disabled`);
+						const detailStr = details.length > 0 ? ` (${details.join(", ")})` : "";
+						why = `no account can serve ${family} right now${detailStr}`;
+					}
 					const waitStr = countdown !== null && countdown > 0 ? ` (earliest reset in ${Math.ceil(countdown / 1e3)}s)` : "";
 					throw new LlmError(`All Antigravity accounts are unavailable: ${why}${waitStr}. Add an account, wait for reset, or run /agy clear-cooldown.`, Err.AGY_ERROR);
 				}
@@ -29294,7 +29973,7 @@ var AgyAdapter = class AgyAdapter extends LlmAdapter {
 						startedAt: now,
 						inFlight: true
 					});
-					yield* this.driveSpan(liveRun, rescueFrom, hasToolSupport, isCodeMode);
+					yield* this.driveSpan(liveRun, rescueFrom, hasToolSupport, isCodeMode, goalContext, supportsGoalUpdate, supportsPlanExit, options.signal);
 					return;
 				}
 				throw new LlmError("Duplicate request ignored: an identical request is already running for this session.", Err.BUSY);
@@ -29379,6 +30058,7 @@ var AgyAdapter = class AgyAdapter extends LlmAdapter {
 		};
 		const activeModelForArgs = activeModel === "" ? cfg.defaultModel : activeModel;
 		const effectiveAddDirs = workspaceRoot !== "" ? stagedDirs.includes(workspaceRoot) ? stagedDirs : [workspaceRoot, ...stagedDirs] : stagedDirs;
+		prompt = stripNulBytes(prompt);
 		const argsBase = this.buildArgs({
 			prompt,
 			model: activeModelForArgs,
@@ -29404,7 +30084,7 @@ var AgyAdapter = class AgyAdapter extends LlmAdapter {
 			promptViaStdin: true
 		}) : argsBase;
 		const stdinPayload = promptViaStdin ? buildStreamInputLine(prompt) : void 0;
-		const release = await this.deps.acquire();
+		const release = await this.deps.acquire(options.signal);
 		let released = false;
 		let slotLease;
 		try {
@@ -29432,6 +30112,8 @@ var AgyAdapter = class AgyAdapter extends LlmAdapter {
 			throw new LlmError("request aborted before the agy process was spawned", Err.AGY_ERROR);
 		}
 		if (account && account.dir) ensureIsolatedKeychain(account.dir);
+		const runLogHome = agyHomeDirFor(account);
+		const runLogsBefore = snapshotAgyLogs(runLogHome);
 		const effectiveProxy = account?.proxyUrl || cfg.proxyUrl || detectSystemProxy() || void 0;
 		const env = {
 			...process.env,
@@ -29452,7 +30134,20 @@ var AgyAdapter = class AgyAdapter extends LlmAdapter {
 				const elapsed = Date.now() - lastSpawn;
 				const jitter = Math.floor(Math.random() * 300);
 				const targetInterval = this.minSpawnIntervalMs + jitter;
-				if (elapsed < targetInterval) await new Promise((r) => setTimeout(r, targetInterval - elapsed));
+				if (elapsed < targetInterval) {
+					if (options.signal?.aborted) throw new LlmError("request aborted before the agy process was spawned", Err.AGY_ERROR);
+					await new Promise((r, reject) => {
+						const timer = setTimeout(() => {
+							options.signal?.removeEventListener("abort", onAbort);
+							r();
+						}, targetInterval - elapsed);
+						const onAbort = () => {
+							clearTimeout(timer);
+							reject(new LlmError("request aborted before the agy process was spawned", Err.AGY_ERROR));
+						};
+						options.signal?.addEventListener("abort", onAbort, { once: true });
+					});
+				}
 				this.lastAccountSpawnTime.set(account.id, Date.now());
 			}
 			proc = startAgyProcess({
@@ -29526,7 +30221,9 @@ var AgyAdapter = class AgyAdapter extends LlmAdapter {
 			const consumable = r !== null && (r.ok || r.response !== "");
 			const rawErrText = [outcome.stderrTail, parser.stats.lastResultError].filter(Boolean).join(" ");
 			const isRateLimit = looksLikeRateLimit(rawErrText);
-			const transportFailure = looksLikeNetworkError([
+			const runLogText = readAgyRunLogText(runLogHome, runLogsBefore);
+			const keyringJitter = looksLikeAuthVerificationJitter(runLogText);
+			const transportFailure = keyringJitter || looksLikeNetworkError([
 				rawErrText,
 				parser.stats.authFailureText ?? "",
 				outcome.stderrTail,
@@ -29544,31 +30241,31 @@ var AgyAdapter = class AgyAdapter extends LlmAdapter {
 				code: Err.TIMEOUT,
 				message: "agy run was idle for " + cfg.timeoutMs + "ms without output" + (silentTimeout ? " — agy never emitted a single event; it is likely unable to reach Google (check proxy/network). 无法连接 Google，请检查代理或网络配置" : "")
 			};
-			else if (sawAuthFailure(parser, outcome)) failure = transportFailure ? {
-				kind: "error",
-				code: Err.NETWORK,
-				message: "agy could not validate its Google login over the network (transport failure, not a sign-out) — retrying on another account. " + (rawErrText !== "" ? brief(rawErrText) : "")
-			} : {
-				kind: "error",
-				code: Err.AUTH,
-				message: "agy is not signed in — run /agy auth (or run agy once in a terminal) to login"
-			};
-			else if (isRateLimit) {
-				const bestMsg = parser.stats.lastResultError || (outcome.stderrTail ? brief(outcome.stderrTail) : "Rate limit or quota reached");
-				failure = {
+			else if (!consumable) {
+				if (sawAuthFailure(parser, outcome)) failure = transportFailure ? {
 					kind: "error",
-					code: looksLikeHardRateLimit(rawErrText) ? Err.RATE_LIMIT : Err.OVERLOADED,
-					message: "Google Antigravity quota / rate limit reached: " + bestMsg
-				};
-			} else if (!transportFailure && (looksLikeEligibilityFailure(rawErrText) || looksLikeEligibilityFailure(parser.stats.lastResultError ?? ""))) {
-				const detail = parser.stats.lastResultError ?? (outcome.stderrTail !== "" ? brief(outcome.stderrTail) : "");
-				failure = {
+					code: Err.NETWORK,
+					message: "agy could not validate its Google login over the network (transport failure" + (keyringJitter ? "; its own log shows keyring auth timing out on the network, not a sign-out" : "") + ", not a sign-out) — retrying on another account. " + (rawErrText !== "" ? brief(rawErrText) : "")
+				} : {
 					kind: "error",
-					code: Err.ELIGIBILITY,
-					message: ELIGIBILITY_ERROR_HINT + (detail !== "" ? " (" + detail + ")" : "")
+					code: Err.AUTH,
+					message: "agy is not signed in — run /agy auth (or run agy once in a terminal) to login"
 				};
-			} else if (!consumable) {
-				if (outcome.code !== 0) {
+				else if (isRateLimit) {
+					const bestMsg = parser.stats.lastResultError || (outcome.stderrTail ? brief(outcome.stderrTail) : "Rate limit or quota reached");
+					failure = {
+						kind: "error",
+						code: looksLikeHardRateLimit(rawErrText) ? Err.RATE_LIMIT : Err.OVERLOADED,
+						message: "Google Antigravity quota / rate limit reached: " + bestMsg
+					};
+				} else if (!transportFailure && (looksLikeEligibilityFailure(rawErrText) || looksLikeEligibilityFailure(parser.stats.lastResultError ?? ""))) {
+					const detail = parser.stats.lastResultError ?? (outcome.stderrTail !== "" ? brief(outcome.stderrTail) : "");
+					failure = {
+						kind: "error",
+						code: Err.ELIGIBILITY,
+						message: ELIGIBILITY_ERROR_HINT + (detail !== "" ? " (" + detail + ")" : "")
+					};
+				} else if (outcome.code !== 0) {
 					const detail = parser.stats.lastResultError ?? (outcome.stderrTail !== "" ? brief(outcome.stderrTail) : "");
 					failure = transportFailure ? {
 						kind: "error",
@@ -29616,7 +30313,11 @@ var AgyAdapter = class AgyAdapter extends LlmAdapter {
 				if (account && silentTimeout) this.deps.pool?.advanceAccount(account.id, family);
 				if (account && failure.code === Err.ELIGIBILITY) this.deps.pool?.advanceAccount(account.id, family);
 				if (!outcome.aborted && failure.code !== Err.RATE_LIMIT && (failure.code === Err.NETWORK || failure.code === Err.OVERLOADED || failure.code === Err.AUTH) && account) this.deps.pool?.advanceAccount(account.id, family);
-				if (account && shouldMarkAuthRequired(failure.code, failure.message)) this.deps.pool?.markAuthRequired(account.id, failure.message);
+				if (account && shouldMarkAuthRequired(failure.code, failure.message)) {
+					const authoritative = isAuthoritativeAuthError(rawErrText + " " + runLogText);
+					if (failure.code === Err.AUTH && !authoritative) this.deps.pool?.noteAuthFailure(account.id, failure.message);
+					else this.deps.pool?.markAuthRequired(account.id, failure.message);
+				}
 				const staleConversation = failure.code === Err.AUTH || failure.message !== "" && /conversation.*(not found|invalid|not recognized|expired|does not exist)|session.*(expired|invalid)/i.test(failure.message);
 				const interruptedTurn = failure.kind === "aborted" || outcome.timedOut === true;
 				if (!isAux && sessionAccountKey !== "" && staleConversation) this.deps.store.delete(sessionAccountKey);
@@ -29648,7 +30349,7 @@ var AgyAdapter = class AgyAdapter extends LlmAdapter {
 				message: "internal error: " + brief(String(err))
 			});
 		});
-		yield* this.driveSpan(rec, 0, !isAux && hasToolSupport, isCodeMode);
+		yield* this.driveSpan(rec, 0, !isAux && hasToolSupport, isCodeMode, goalContext, supportsGoalUpdate, supportsPlanExit, options.signal);
 	}
 	/**
 	* Stream one span of a recording: map events from `from` until the mapper
@@ -29657,19 +30358,50 @@ var AgyAdapter = class AgyAdapter extends LlmAdapter {
 	* as this span's terminal chunk — the turn ends exactly like a native
 	* provider error.
 	*/
-	async *driveSpan(rec, from, cutOnTool, useCodeWrapper) {
+	async *driveSpan(rec, from, cutOnTool, useCodeWrapper, goalContext, supportsGoalUpdate, supportsPlanExit, signal) {
+		if (signal?.aborted) {
+			rec.requestAbort?.();
+			yield {
+				type: "finish",
+				reason: {
+					kind: "aborted",
+					failure: {
+						code: "ABORTED",
+						message: "aborted by caller"
+					}
+				}
+			};
+			return;
+		}
 		this.deps.runs.remember(rec);
 		this.deps.runs.pin(rec.runId);
 		try {
-			yield* this.driveSpanBody(rec, from, cutOnTool, useCodeWrapper);
+			yield* this.driveSpanBody(rec, from, cutOnTool, useCodeWrapper, goalContext, supportsGoalUpdate, supportsPlanExit, signal);
 		} finally {
 			this.deps.runs.unpin(rec.runId);
 			this.deps.runs.remember(rec);
 		}
 	}
 	/** Body of {@link driveSpan}: map recorded events until the span finishes. */
-	async *driveSpanBody(rec, from, cutOnTool, useCodeWrapper) {
+	async *driveSpanBody(rec, from, cutOnTool, useCodeWrapper, goalContext, supportsGoalUpdate, supportsPlanExit, signal) {
 		const queue = new ChunkQueue();
+		let abortedLocally = false;
+		const onAbort = () => {
+			abortedLocally = true;
+			rec.requestAbort?.();
+			queue.push({
+				type: "finish",
+				reason: {
+					kind: "aborted",
+					failure: {
+						code: "ABORTED",
+						message: "aborted by caller"
+					}
+				}
+			});
+			queue.close();
+		};
+		signal?.addEventListener("abort", onAbort, { once: true });
 		(async () => {
 			const resolved = /* @__PURE__ */ new Map();
 			const resolvedThoughts = /* @__PURE__ */ new Map();
@@ -29682,11 +30414,15 @@ var AgyAdapter = class AgyAdapter extends LlmAdapter {
 				usage: rec,
 				resolvedFullArgs: resolved,
 				resolvedThoughts,
-				mediaBaseUrl: this.deps.getMediaBaseUrl?.() ?? void 0
+				mediaBaseUrl: this.deps.getMediaBaseUrl?.() ?? void 0,
+				goalContext,
+				supportsGoalUpdate,
+				supportsPlanExit
 			});
 			let i = from;
 			try {
 				for await (const ev of rec.eventsFrom(from)) {
+					if (abortedLocally || signal?.aborted) break;
 					const recordedThought = rec.getThoughts(i);
 					if (recordedThought !== void 0) resolvedThoughts.set(i, recordedThought);
 					else if (ev.kind === "step") {
@@ -29750,17 +30486,21 @@ var AgyAdapter = class AgyAdapter extends LlmAdapter {
 						break;
 					}
 				}
-				if (!mapper.isFinished) {
+				if (!mapper.isFinished && !abortedLocally && !signal?.aborted) {
 					const f = rec.failureInfo;
 					if (f !== null) for (const ch of mapper.emitFailure(f.kind, f.code, f.message)) queue.push(ch);
 					else for (const ch of mapper.emitFailure("error", Err.INVALID_OUTPUT, "agy stream ended without a result event")) queue.push(ch);
 				}
 			} catch (err) {
-				for (const ch of mapper.emitFailure("error", Err.PROCESS_EXIT, "internal error: " + brief(String(err)))) queue.push(ch);
+				if (!abortedLocally && !signal?.aborted) for (const ch of mapper.emitFailure("error", Err.PROCESS_EXIT, "internal error: " + brief(String(err)))) queue.push(ch);
 			}
 			queue.close();
 		})();
-		yield* queue.drain();
+		try {
+			yield* queue.drain();
+		} finally {
+			signal?.removeEventListener("abort", onAbort);
+		}
 	}
 };
 /**
@@ -29868,6 +30608,7 @@ async function runAgyOnce(deps, req) {
 	if (req.effort) args.push("--effort", req.effort);
 	let prompt = req.prompt;
 	if (req.readPaths && req.readPaths.length > 0) prompt = await inlineFiles(prompt, req.readPaths, cfg.workspaceRoot !== "" ? cfg.workspaceRoot : process.cwd());
+	prompt = stripNulBytes(prompt);
 	let cleanup = null;
 	if (req.schema !== void 0 && req.schema !== null) {
 		const sa = await schemaArgs(req.schema);
@@ -29922,15 +30663,15 @@ async function runAgyOnce(deps, req) {
 		error: "timed out after " + timeoutMs + "ms",
 		durationMs: outcome.durationMs
 	};
-	if (looksLikeAuthFailure(outcome.stderrTail) || looksLikeAuthFailure(outcome.stdout.slice(0, 4e3))) return {
+	const joined = textParts.join("\n").trim();
+	const text = joined !== "" ? joined : resultText;
+	if (text === "" && (looksLikeAuthFailure(outcome.stderrTail) || parser.stats.sawAuthFailure)) return {
 		ok: false,
 		text: "",
 		conversationId,
 		error: "agy is not signed in — run /agy auth",
 		durationMs: outcome.durationMs
 	};
-	const joined = textParts.join("\n").trim();
-	const text = joined !== "" ? joined : resultText;
 	if (outcome.code !== 0 && text === "") return {
 		ok: false,
 		text: "",
@@ -30417,7 +31158,11 @@ const HELP = [
 	"**/agy** — Antigravity (agy CLI) bridge",
 	"- `/agy status` — binary, version, auth, mode, catalog, bindings",
 	"- `/agy pool` / `/agy accounts` — account pool, live quota %, cooldowns",
+	"- `/agy goal [status|complete|clear|pause]` — inspect or control the current DSH goal",
+	"- `/agy session [info|clear]` — view or drop the current session agy binding",
 	"- `/agy add-account [alias]` — start OAuth login for a new account slot",
+	"- `/agy enable-account <id>` — enable an account slot",
+	"- `/agy disable-account <id>` — disable an account slot (skips in rotation)",
 	"- `/agy refresh-quota` — query Google backend for fresh quota %",
 	"- `/agy clear-cooldown` — reset cooldown timers across all accounts",
 	"- `/agy remove-account <id>` — delete an account slot",
@@ -30434,12 +31179,12 @@ const HELP = [
 function agyCommandDefinition(deps) {
 	return {
 		name: "agy",
-		description: "Antigravity (agy CLI) bridge: status, login, models, mode, diagnostics",
-		input: { hint: "<status|pool|models|mode|effort|workspace|clear|doctor|help>" },
-		handler: (invocation) => handle(deps, invocation.rawInput)
+		description: "Antigravity (agy CLI) bridge: status, login, models, mode, diagnostics, goal",
+		input: { hint: "<status|pool|goal|session|enable-account|disable-account|models|mode|effort|workspace|clear|doctor|help>" },
+		handler: (invocation) => handle(deps, invocation.rawInput, invocation)
 	};
 }
-async function handle(deps, raw) {
+async function handle(deps, raw, invocation) {
 	const parts = raw.trim().split(/\s+/).filter(Boolean);
 	const sub = parts[0] ?? "help";
 	const arg = parts[1] ?? "";
@@ -30458,15 +31203,28 @@ async function handle(deps, raw) {
 				const qG = a.quotas.google?.remainingFraction !== void 0 ? `${Math.round(a.quotas.google.remainingFraction * 100)}%` : "unknown";
 				const qC = a.quotas.anthropic?.remainingFraction !== void 0 ? `${Math.round(a.quotas.anthropic.remainingFraction * 100)}%` : "unknown";
 				const qO = a.quotas.openai?.remainingFraction !== void 0 ? `${Math.round(a.quotas.openai.remainingFraction * 100)}%` : "unknown";
+				const qA = a.quotas.argon?.weeklyFraction;
+				const quotaLine = `   - Quota: Gemini ${qG} | Claude ${qC} | GPT-OSS ${qO}` + (qA !== void 0 ? ` | Argon ${Math.round(qA * 100)}% (weekly)` : "");
 				const cds = [];
 				for (const [fam, cd] of Object.entries(a.cooldowns)) if (cd && cd.cooldownUntil > Date.now()) {
 					const sec = Math.ceil((cd.cooldownUntil - Date.now()) / 1e3);
 					cds.push(`${fam} cooldown: ${sec}s left (${cd.reason})`);
 				}
-				lines.push(`${i + 1}. **${a.alias}** (${a.email || a.id})${isPrimary ? " ⭐ primary" : ""}`, `   - Proxy: ${a.proxyUrl ? redactProxyUrl(a.proxyUrl) : deps.cfg().proxyUrl ? redactProxyUrl(deps.cfg().proxyUrl) : "system default"}`, `   - Quota: Gemini ${qG} | Claude ${qC} | GPT-OSS ${qO}`, cds.length > 0 ? `   - ⚠️ ${cds.join("; ")}` : "   - Status: 🟢 Ready");
+				let statusText = "   - Status: 🟢 Ready";
+				if (!a.enabled) statusText = "   - Status: ⏸️ Disabled";
+				else if (a.authRequired) statusText = `   - Status: 🔴 Auth required (${a.authError || "sign in again"})`;
+				else if (cds.length > 0) statusText = `   - ⚠️ ${cds.join("; ")}`;
+				lines.push(`${i + 1}. **${a.alias}** (${a.email || a.id})${isPrimary ? " ⭐ primary" : ""}`, `   - Proxy: ${a.proxyUrl ? redactProxyUrl(a.proxyUrl) : deps.cfg().proxyUrl ? redactProxyUrl(deps.cfg().proxyUrl) : "system default"}`, quotaLine, statusText);
 			}
 			return ok(lines.join("\n"));
 		}
+		if (sub === "enable-account" || sub === "disable-account") {
+			if (!arg) return err(`usage: /agy ${sub} <id>`);
+			const pool = deps.pool?.();
+			if (!pool) return err("Account pool not available");
+			const enabled = sub === "enable-account";
+			return pool.setAccountEnabled(arg, enabled) ? ok(`${enabled ? "Enabled" : "Disabled"} account ${arg}`) : err(`Account ${arg} not found`);
+		}
 		if (sub === "add-account") {
 			const pool = deps.pool?.();
 			if (!pool) return err("Account pool not available");
@@ -30498,6 +31256,164 @@ async function handle(deps, raw) {
 			if (!pool) return err("Account pool not available");
 			return pool.deleteAccount(arg) ? ok(`Removed account ${arg}`) : err(`Account ${arg} not found`);
 		}
+		if (sub === "goal") {
+			const action = arg || "status";
+			const session = invocation?.agent?.session ?? (deps.sessions?.() && invocation?.agent?.id ? deps.sessions().get(invocation.agent.id) : void 0);
+			if (!session) return err("No active DSH session available for goal command.");
+			const events = session.events;
+			let latestGoalChange = null;
+			if (events) for (let i = events.length - 1; i >= 0; i--) {
+				const ev = events[i];
+				if (ev?.type === "goal/change" && ev.data && typeof ev.data === "object") {
+					const d = ev.data;
+					if (d.kind === "goal/change") {
+						latestGoalChange = d;
+						break;
+					}
+				}
+			}
+			const activeGoal = latestGoalChange && latestGoalChange.operation !== "clear" ? latestGoalChange.goal : null;
+			if (action === "status") {
+				if (!activeGoal || !latestGoalChange) return ok("**DSH Goal Status**: No active goal in this session.");
+				return ok([
+					`**DSH Goal Status** (${{
+						active: "🟢",
+						paused: "⏸️",
+						blocked: "🚫",
+						complete: "✅"
+					}[activeGoal.phase] ?? "⚪"} \`${activeGoal.phase}\`)`,
+					`- **Goal ID**: \`${activeGoal.id}\` (rev ${activeGoal.revision})`,
+					`- **Objective**: ${activeGoal.objective}`,
+					`- **Rounds**: ${latestGoalChange.roundsStarted ?? 1} / ${activeGoal.maxGoalRounds ?? 256}`,
+					...activeGoal.blockedReason ? [`- **Blocked Reason**: ${activeGoal.blockedReason.message}`] : []
+				].join("\n"));
+			}
+			if (action === "complete") {
+				if (!activeGoal || !latestGoalChange) return err("No active goal to complete.");
+				if (typeof session.append === "function") {
+					session.append("goal/change", {
+						kind: "goal/change",
+						version: 1,
+						operation: "complete",
+						goal: {
+							id: activeGoal.id,
+							revision: activeGoal.revision + 1,
+							objective: activeGoal.objective,
+							phase: "complete",
+							maxGoalRounds: activeGoal.maxGoalRounds
+						},
+						roundsStarted: latestGoalChange.roundsStarted ?? 1,
+						createdAt: latestGoalChange.createdAt ?? Date.now(),
+						updatedAt: Date.now()
+					});
+					return ok(`✅ Marked goal \`${activeGoal.id}\` as complete. Automatic continuation rounds stopped.`);
+				}
+				return err("Session cannot append events.");
+			}
+			if (action === "pause") {
+				if (!activeGoal || !latestGoalChange) return err("No active goal to pause.");
+				if (typeof session.append === "function") {
+					session.append("goal/change", {
+						kind: "goal/change",
+						version: 1,
+						operation: "pause",
+						goal: {
+							id: activeGoal.id,
+							revision: activeGoal.revision + 1,
+							objective: activeGoal.objective,
+							phase: "paused",
+							maxGoalRounds: activeGoal.maxGoalRounds
+						},
+						roundsStarted: latestGoalChange.roundsStarted ?? 1,
+						createdAt: latestGoalChange.createdAt ?? Date.now(),
+						updatedAt: Date.now()
+					});
+					return ok(`⏸️ Paused goal \`${activeGoal.id}\`.`);
+				}
+				return err("Session cannot append events.");
+			}
+			if (action === "resume") {
+				if (!activeGoal || !latestGoalChange) return err("No active goal to resume.");
+				if (typeof session.append === "function") {
+					session.append("goal/change", {
+						kind: "goal/change",
+						version: 1,
+						operation: "resume",
+						goal: {
+							id: activeGoal.id,
+							revision: activeGoal.revision + 1,
+							objective: activeGoal.objective,
+							phase: "active",
+							maxGoalRounds: activeGoal.maxGoalRounds
+						},
+						roundsStarted: latestGoalChange.roundsStarted ?? 1,
+						createdAt: latestGoalChange.createdAt ?? Date.now(),
+						updatedAt: Date.now()
+					});
+					return ok(`▶️ Resumed goal \`${activeGoal.id}\`.`);
+				}
+				return err("Session cannot append events.");
+			}
+			if (action === "clear") {
+				if (!activeGoal) return ok("No active goal to clear.");
+				if (typeof session.append === "function") {
+					session.append("goal/change", {
+						kind: "goal/change",
+						version: 1,
+						operation: "clear",
+						cleared: {
+							id: activeGoal.id,
+							revision: activeGoal.revision + 1
+						},
+						clearedAt: Date.now()
+					});
+					return ok(`Cleared goal \`${activeGoal.id}\`.`);
+				}
+				return err("Session cannot append events.");
+			}
+			return err(`Unknown goal action \`${action}\`. Usage: /agy goal [status|complete|pause|resume|clear]`);
+		}
+		if (sub === "session") {
+			const action = arg || "info";
+			const sessionId = invocation?.agent?.id ? String(invocation.agent.id) : void 0;
+			const session = invocation?.agent?.session ?? (deps.sessions?.() && sessionId ? deps.sessions().get(sessionId) : void 0);
+			if (action === "info") {
+				const lines = ["**DSH Session & agy Bridge Info**"];
+				if (sessionId) {
+					lines.push(`- **Session ID**: \`${sessionId}\``);
+					const cwd = session?.header?.cwd;
+					if (cwd) lines.push(`- **Workspace CWD**: \`${cwd}\``);
+					const bindings = deps.store().all();
+					const matchedKey = Object.keys(bindings).find((k) => k === sessionId || k.startsWith(`${sessionId}:`));
+					if (matchedKey && bindings[matchedKey]) {
+						const b = bindings[matchedKey];
+						lines.push(`- **Bound agy Conversation**: \`${b.conversationId}\``, `- **Bound Model**: \`${b.model || "default"}\``, `- **Last Message Count**: ${b.lastMessageCount}`, `- **Last Updated**: ${new Date(b.updatedAt).toLocaleTimeString()}`);
+					} else lines.push("- **Bound agy Conversation**: *(none - next turn starts fresh)*");
+					if (session?.events) lines.push(`- **Total Session Events**: ${session.events.length}`);
+				} else lines.push("- Current session ID could not be identified from invocation context.");
+				return ok(lines.join("\n"));
+			}
+			if (action === "clear") {
+				if (!sessionId) {
+					const all = deps.store().all();
+					const keys = Object.keys(all);
+					if (keys.length === 0) return ok("No conversation bindings yet.");
+					const key = keys.reduce((a, b) => (all[a]?.updatedAt ?? 0) >= (all[b]?.updatedAt ?? 0) ? a : b);
+					const dropped = all[key];
+					if (dropped === void 0) return ok("No conversation bindings yet.");
+					deps.store().delete(key);
+					return ok(`Dropped binding for session \`${key}\` (agy conversation \`${dropped.conversationId}\`). Next turn starts fresh.`);
+				}
+				const bindings = deps.store().all();
+				let count = 0;
+				for (const k of Object.keys(bindings)) if (k === sessionId || k.startsWith(`${sessionId}:`)) {
+					deps.store().delete(k);
+					count++;
+				}
+				return ok(`Dropped ${count > 0 ? count : "any"} agy conversation binding(s) for session \`${sessionId}\`. Next turn will start a fresh agy conversation.`);
+			}
+			return err(`Unknown session action \`${action}\`. Usage: /agy session [info|clear]`);
+		}
 		if (sub === "auth") {
 			const flow = deps.poolAuth?.();
 			if (!flow) return err("auth flow not available");
@@ -30558,6 +31474,15 @@ async function handle(deps, raw) {
 			return ok("Workspace set to **" + arg + "** — effective next turn.");
 		}
 		if (sub === "clear") {
+			const sessionId = invocation?.agent?.id ? String(invocation.agent.id) : void 0;
+			if (sessionId) {
+				const bindings = deps.store().all();
+				const keys = Object.keys(bindings).filter((k) => k === sessionId || k.startsWith(`${sessionId}:`));
+				if (keys.length > 0) {
+					for (const k of keys) deps.store().delete(k);
+					return ok(`Dropped binding for session \`${sessionId}\`. The next turn starts a fresh agy conversation.`);
+				}
+			}
 			const all = deps.store().all();
 			const keys = Object.keys(all);
 			if (keys.length === 0) return ok("No conversation bindings yet.");
@@ -31250,32 +32175,44 @@ var QuotaService = class {
 		for (let i = 0; i < total; i++) ordered.push(AGY_ENDPOINTS[(this.preferredEndpointIndex + i) % total]);
 		return ordered;
 	}
+	async fetchSummaryEndpoint(endpoint, accessToken, proxyUrl) {
+		return agyFetch(`${endpoint}/v1internal:retrieveUserQuotaSummary`, {
+			method: "POST",
+			headers: {
+				Authorization: `Bearer ${accessToken}`,
+				"Content-Type": "application/json",
+				"User-Agent": agyUserAgent()
+			},
+			body: JSON.stringify({})
+		}, proxyUrl);
+	}
 	/**
 	* Fetch official multi-bucket quota summary (both weekly and 5h limit windows)
 	* via v1internal:retrieveUserQuotaSummary.
 	*/
 	async fetchQuotaSummary(accessToken, proxyUrl) {
 		const endpoints = this.getOrderedEndpoints();
+		let partialSummary = null;
 		for (let i = 0; i < endpoints.length; i++) {
 			const endpoint = endpoints[i];
 			try {
-				const res = await agyFetch(`${endpoint}/v1internal:retrieveUserQuotaSummary`, {
-					method: "POST",
-					headers: {
-						Authorization: `Bearer ${accessToken}`,
-						"Content-Type": "application/json",
-						"User-Agent": agyUserAgent()
-					},
-					body: JSON.stringify({})
-				}, proxyUrl);
+				const res = await this.fetchSummaryEndpoint(endpoint, accessToken, proxyUrl);
 				if (res.ok) {
-					this.preferredEndpointIndex = AGY_ENDPOINTS.indexOf(endpoint);
-					return await res.json();
+					const summary = await res.json();
+					if (summary?.groups?.some((g) => {
+						const name = (g.displayName || "").toLowerCase();
+						const desc = (g.description || "").toLowerCase();
+						return name.includes("gemini") || desc.includes("gemini");
+					})) {
+						this.preferredEndpointIndex = AGY_ENDPOINTS.indexOf(endpoint);
+						return summary;
+					}
+					if (!partialSummary && summary && Array.isArray(summary.groups) && summary.groups.length > 0) partialSummary = summary;
 				}
 				if (res.status === 401 || res.status === 403) break;
 			} catch {}
 		}
-		return null;
+		return partialSummary;
 	}
 	/**
 	* Fetch available models and model-level quotas via v1internal:fetchAvailableModels.
@@ -31354,9 +32291,10 @@ var QuotaService = class {
 		if (summary && Array.isArray(summary.groups)) for (const group of summary.groups) {
 			const dName = (group.displayName || "").toLowerCase();
 			const desc = (group.description || "").toLowerCase();
-			const isGoogle = dName.includes("gemini") || desc.includes("gemini");
+			const isArgon = dName.includes("argon") || desc.includes("argon");
+			const isGoogle = !isArgon && (dName.includes("gemini") || desc.includes("gemini"));
 			const is3P = dName.includes("claude") || dName.includes("gpt") || desc.includes("claude") || desc.includes("gpt");
-			const targetFamilies = isGoogle ? ["google"] : is3P ? ["anthropic", "openai"] : [];
+			const targetFamilies = isArgon ? ["argon"] : isGoogle ? ["google"] : is3P ? ["anthropic", "openai"] : [];
 			let fiveHourFrac;
 			let fiveHourReset;
 			let weeklyFrac;
@@ -31830,16 +32768,26 @@ var Semaphore = class {
 	constructor(max) {
 		this.max = max;
 	}
-	async acquire() {
+	async acquire(signal) {
+		if (signal?.aborted) throw new Error("aborted before semaphore acquisition");
 		if (this.active < Math.max(1, this.max())) {
 			this.active++;
 			return () => this.releaseOne();
 		}
-		return new Promise((resolve) => {
-			this.queue.push(() => {
+		return new Promise((resolve, reject) => {
+			let entry;
+			const onAbort = () => {
+				const idx = this.queue.indexOf(entry);
+				if (idx >= 0) this.queue.splice(idx, 1);
+				reject(/* @__PURE__ */ new Error("aborted while waiting for semaphore slot"));
+			};
+			entry = () => {
+				signal?.removeEventListener("abort", onAbort);
 				this.active++;
 				resolve(() => this.releaseOne());
-			});
+			};
+			signal?.addEventListener("abort", onAbort, { once: true });
+			this.queue.push(entry);
 		});
 	}
 	releaseOne() {
@@ -31914,8 +32862,14 @@ function apply(ctx, entryConfig = {}) {
 	if (swept > 0) log("swept " + swept + " stale staging dir(s)");
 	const logsSwept = pool.sweepOldLogs(getConfig().logRetentionDays);
 	if (logsSwept > 0) log("swept " + logsSwept + " old log file(s)");
+	if (process.platform === "darwin") try {
+		if (repairMacSystemKeychain()) log("repaired macOS system keychain settings (restored real login keychain)");
+	} catch {}
 	let kcProvisioned = 0;
-	for (const acc of pool.getAccounts()) if (acc.dir && ensureIsolatedKeychain(acc.dir)) kcProvisioned++;
+	for (const acc of pool.getAccounts()) if (acc.dir) {
+		purgeStaleIsolatedKeychain(acc.dir);
+		if (ensureIsolatedKeychain(acc.dir)) kcProvisioned++;
+	}
 	if (kcProvisioned > 0) log("provisioned isolated keychains for " + kcProvisioned + " pool account(s)");
 	if (process.platform === "win32") {
 		resolvePrimaryCredential(pool, {
@@ -31934,13 +32888,29 @@ function apply(ctx, entryConfig = {}) {
 		store,
 		pool,
 		bin,
-		acquire: () => semaphore.acquire(),
+		acquire: (signal) => semaphore.acquire(signal),
 		log,
 		runs,
 		getMediaBaseUrl: () => webServerPort.current ? `http://127.0.0.1:${webServerPort.current}/plugins/agy-link/media` : null,
 		sessionCwd: (sessionId) => {
 			return ctx.get("sessions")?.get(sessionId)?.header?.cwd;
 		},
+		sessionGoal: (sessionId) => {
+			const session = (ctx.get("sessions") ?? ctx.sessions)?.get(sessionId);
+			if (!session?.events) return null;
+			for (let i = session.events.length - 1; i >= 0; i--) {
+				const ev = session.events[i];
+				if (ev?.type === "goal/change" && ev.data && typeof ev.data === "object") {
+					const d = ev.data;
+					if (d.operation === "clear") return null;
+					if (d.goal?.id) return {
+						goalId: d.goal.id,
+						revision: typeof d.goal.revision === "number" ? d.goal.revision : 1
+					};
+				}
+			}
+			return null;
+		},
 		syncSessionModel: (sessionId, model, effort) => {
 			if (!sessionId) return;
 			try {
@@ -32046,6 +33016,7 @@ function apply(ctx, entryConfig = {}) {
 		quota: () => quota,
 		lastRun: () => lastRun,
 		setOverride,
+		sessions: () => ctx.get("sessions") ?? ctx.sessions,
 		runDoctor: async () => {
 			return writeDoctorReport({
 				cfg: getConfig,
@@ -32341,19 +33312,7 @@ function apply(ctx, entryConfig = {}) {
 					const alias = typeof body.alias === "string" ? body.alias : void 0;
 					const acc = pool.createAccountSlot(alias);
 					pool.markAuthRequired(acc.id, "not signed in yet — complete the terminal login");
-					if (body.autoOpenTerminal !== false && acc.dir) {
-						if (process.platform === "darwin") {
-							const script = `tell application "Terminal" to activate\ntell application "Terminal" to do script "export HOME='${acc.dir}'; agy"`;
-							execFile("osascript", ["-e", script], () => {});
-						} else if (process.platform === "win32") execFile("cmd.exe", [
-							"/c",
-							"start",
-							"cmd.exe",
-							"/k",
-							`set "HOME=${acc.dir}" && set "USERPROFILE=${acc.dir}" && agy`
-						], { windowsHide: true }, () => {});
-						else execFile("x-terminal-emulator", ["-e", `sh -c "export HOME='${acc.dir}'; agy; exec sh"`], () => {});
-					}
+					if (body.autoOpenTerminal !== false && acc.dir) openAccountTerminal(acc.dir);
 					sendJson(res, 200, {
 						ok: true,
 						account: acc,
@@ -32378,17 +33337,7 @@ function apply(ctx, entryConfig = {}) {
 						sendJson(res, 400, { error: "account has no isolated directory" });
 						return;
 					}
-					if (process.platform === "darwin") {
-						const script = `tell application "Terminal" to activate\ntell application "Terminal" to do script "export HOME='${acc.dir}'; agy"`;
-						execFile("osascript", ["-e", script], () => {});
-					} else if (process.platform === "win32") execFile("cmd.exe", [
-						"/c",
-						"start",
-						"cmd.exe",
-						"/k",
-						`set "HOME=${acc.dir}" && set "USERPROFILE=${acc.dir}" && agy`
-					], { windowsHide: true }, () => {});
-					else execFile("x-terminal-emulator", ["-e", `sh -c "export HOME='${acc.dir}'; agy; exec sh"`], () => {});
+					openAccountTerminal(acc.dir);
 					sendJson(res, 200, {
 						ok: true,
 						dir: acc.dir
@@ -32415,6 +33364,26 @@ function apply(ctx, entryConfig = {}) {
 				})();
 			}
 		});
+		reg({
+			kind: "exact",
+			path: "/plugins/agy-link/pool/enable",
+			handler: (req, res) => {
+				(async () => {
+					if (methodOf(req) !== "POST") {
+						sendJson(res, 405, { error: "POST only" });
+						return;
+					}
+					const body = await readBody(req);
+					const id = typeof body.id === "string" ? body.id : "";
+					const enabled = typeof body.enabled === "boolean" ? body.enabled : true;
+					const ok = pool.setAccountEnabled(id, enabled);
+					sendJson(res, ok ? 200 : 400, {
+						ok,
+						pool: pool.getPoolData()
+					});
+				})();
+			}
+		});
 		reg({
 			kind: "exact",
 			path: "/plugins/agy-link/pool/proxy",
@@ -32515,6 +33484,25 @@ function apply(ctx, entryConfig = {}) {
 				})();
 			}
 		});
+		reg({
+			kind: "exact",
+			path: "/plugins/agy-link/pool/set-active",
+			handler: (req, res) => {
+				(async () => {
+					if (methodOf(req) !== "POST") {
+						sendJson(res, 405, { error: "POST only" });
+						return;
+					}
+					const body = await readBody(req);
+					const id = typeof body.id === "string" ? body.id : "";
+					const ok = id !== "" && pool.setActiveAccount(id);
+					sendJson(res, ok ? 200 : 400, {
+						ok,
+						pool: pool.getPoolData()
+					});
+				})();
+			}
+		});
 		reg({
 			kind: "exact",
 			path: "/plugins/agy-link/pool/reorder",