dsh-agy-link 0.4.57 → 0.4.65

package/dist/index.js

@@ -8,6 +8,7 @@ import { LlmAdapter, LlmError } from "@deepseek-ai/dsh-llm";
 import { createHash, randomBytes, randomUUID } from "node:crypto";
 import { defineTool } from "@deepseek-ai/dsh-tools";
 import { chmod, copyFile, mkdir, mkdtemp, readFile, readdir, rm, stat, unlink, writeFile } from "node:fs/promises";
+import { EventEmitter } from "node:events";
 import { createServer } from "node:http";
 import { promisify } from "node:util";
 import { fileURLToPath } from "node:url";
@@ -54,6 +55,15 @@ const DEFAULT_FALLBACK_MODELS = [
 			"high"
 		]
 	},
+	{
+		id: "gemini-4-argon",
+		name: "Gemini 4 Argon",
+		efforts: [
+			"low",
+			"medium",
+			"high"
+		]
+	},
 	{
 		id: "claude-sonnet-4-6",
 		name: "Claude Sonnet 4.6 (Thinking)"
@@ -77,7 +87,32 @@ function defaultConfig() {
 		defaultEffort: "",
 		timeoutMs: 6e5,
 		longToolIdleMinutes: 240,
-		maxConcurrent: 3,
+		/**
+		* Hard cap (minutes) on waiting for the Windows credential slot before the
+		* dispatch releases, backs off and retries (dispatchRetries). Each attempt
+		* waits up to this long, so persistence ≈ (1 + dispatchRetries) × N
+		* minutes before the turn fails visibly. 0 = wait indefinitely (the wait
+		* stays abort-aware, poll-healed and heartbeat-logged).
+		*/
+		dispatchTimeoutMinutes: 15,
+		/** Extra dispatch attempts after a credential-slot hard-cap timeout. */
+		dispatchRetries: 1,
+		/**
+		* Same-account credential-slot fast path (default true): sessions running
+		* on the account whose credential already sits in the Windows slot start
+		* immediately WITHOUT exclusivity — agy is a stateless CLI and handles
+		* concurrent processes natively. Only account SWITCHES serialize.
+		* false restores full-run slot exclusivity (one agy process at a time).
+		*/
+		parallelSameAccount: true,
+		/**
+		* Cross-session cap on concurrent agy request streams. 0 = UNLIMITED
+		* (default): native agy concurrency — agy is a stateless CLI and runs
+		* concurrent processes natively; Google rate limits and the account
+		* pool's cooldowns are the natural regulators. Set a positive number to
+		* re-introduce an admission bound.
+		*/
+		maxConcurrent: 0,
 		contextWindowDefault: 1048576,
 		maxTokensDefault: 65536,
 		forwardSystemPrompt: false,
@@ -167,8 +202,25 @@ function shouldMarkAuthRequired(code, message) {
 	if (code === "AUTH") return true;
 	return isAuthoritativeAuthError(message);
 }
+/**
+* Recognize context-overflow and token limit exceeded errors from Google Antigravity / agy CLI.
+* Aligns with DSH's CONTEXT_WINDOW_EXCEEDED_CODE contract so the agent loop triggers context
+* auto-compaction instead of terminating the turn with a fatal process exit.
+*/
+function looksLikeContextWindowExceeded(message) {
+	if (!message) return false;
+	if (/prompt is too long:\s*\d+\s*tokens\s*>\s*\d+\s*maximum/i.test(message)) return true;
+	if (/context[\s_-]*(?:length|window)[\s_-]*(?:exceeded|overflow|limit[\s_-]*exceeded)/i.test(message)) return true;
+	if (/\b(?:maximum|max)(?:\s+(?:allowed|supported))?\s+context\s+(?:length|window)\b/i.test(message)) return true;
+	if (/\b(?:request|prompt|input|messages?)\s+(?:is\s+|are\s+)?too\s+(?:large|long)\s+for\s+(?:(?:this|the)\s+)?(?:model(?:'s)?\s+)?context(?:\s+window)?\b/i.test(message)) return true;
+	if (/\btoken[\s_-]*limit[\s_-]*exceeded\b/i.test(message)) return true;
+	if (/\bexceed(?:s|ed|ing)?\b.{0,40}\b(?:model(?:'s)?\s+)?context(?:\s+(?:length|window))?\b/i.test(message)) return true;
+	if (/\b(?:model(?:'s)?\s+)?context(?:\s+(?:length|window))?\b.{0,40}\bexceed(?:s|ed|ing)?\b/i.test(message)) return true;
+	return false;
+}
 const Err = {
 	AUTH: "AUTH",
+	INVALID_CREDENTIAL: "INVALID_CREDENTIAL",
 	AGY_NOT_INSTALLED: "AGY_NOT_INSTALLED",
 	AGY_VERSION_UNSUPPORTED: "AGY_VERSION_UNSUPPORTED",
 	AGY_ERROR: "AGY_ERROR",
@@ -179,6 +231,7 @@ const Err = {
 	* deterministic AGY_ERRORs (bad region, empty request, dead pool).
 	*/
 	RATE_LIMIT: "RATE_LIMIT",
+	QUOTA: "QUOTA",
 	/**
 	* Google-side region / account eligibility refusal ("User location is not
 	* supported for the API use"). Account-level, so it is retryable: the
@@ -207,7 +260,12 @@ const Err = {
 	UNKNOWN_MODEL: "UNKNOWN_MODEL",
 	UNSUPPORTED_REASONING_EFFORT: "UNSUPPORTED_REASONING_EFFORT",
 	AUX_DISABLED: "AUX_DISABLED",
-	BUSY: "BUSY"
+	BUSY: "BUSY",
+	/**
+	* Canonical provider-neutral code for context window overflow.
+	* Enables DSH agent loop to trigger context auto-compaction rather than aborting.
+	*/
+	CONTEXT_WINDOW_EXCEEDED: "CONTEXT_WINDOW_EXCEEDED"
 };
 function looksLikeAuthFailure(text) {
 	return /authentication required|authentication failed|please sign in|not signed in|timed out waiting for authentication/i.test(text);
@@ -252,14 +310,22 @@ function isAccountScopedFailure(code) {
 	return code === "RATE_LIMIT" || code === "ELIGIBILITY" || code === "NETWORK" || code === "OVERLOADED" || code === "AUTH";
 }
 /**
+* Capacity exhaustion / server-side pressure signals (model overloaded / 503 / 529 / high traffic).
+* Distinct from account-level quota exhaustion (429): Google's backend capacity is shared across
+* accounts, so rotating accounts on a server capacity refusal burns every healthy account's turn
+* for nothing. The scheduler should STAY on the current account with backoff retry rather than rotating.
+*/
+function looksLikeCapacityExhaustion(text) {
+	if (!text) return false;
+	return /model (?:is )?overloaded|experiencing high traffic|is overloaded|capacity (?:exhausted|unavailable)|temporarily (?:overloaded|unavailable)|server (?:is )?busy|overloaded and unable to|503\s+Service\s+Unavailable|529\s+Overloaded/i.test(text);
+}
+/**
 * Soft heuristic adds capacity signals (model overloaded / high traffic).
 * Shapes the user-facing error message only — NEVER cools an account down.
-* The adapter still ROTATES on these: nothing was spent locally, and ending a
-* turn while an idle account could serve it is the interruption users report.
 */
 function looksLikeRateLimit(text) {
 	if (!text) return false;
-	return looksLikeHardRateLimit(text) || /model overloaded|experiencing high traffic|is overloaded|capacity (?:exhausted|unavailable)|temporarily overloaded/i.test(text);
+	return looksLikeHardRateLimit(text) || looksLikeCapacityExhaustion(text);
 }
 /**
 * Parse reset duration in milliseconds from rate-limit / quota-exhausted error strings.
@@ -363,6 +429,9 @@ function resolveConfig(entry, env = process.env, overrides = readOverrides()) {
 		defaultEffort: asString(get("defaultEffort")) ?? base.defaultEffort,
 		timeoutMs: asNum(get("timeoutMs")) ?? base.timeoutMs,
 		longToolIdleMinutes: asNum(get("longToolIdleMinutes")) ?? base.longToolIdleMinutes,
+		dispatchTimeoutMinutes: asNum(get("dispatchTimeoutMinutes")) ?? base.dispatchTimeoutMinutes,
+		dispatchRetries: asNum(get("dispatchRetries")) ?? base.dispatchRetries,
+		parallelSameAccount: asBool(get("parallelSameAccount")) ?? base.parallelSameAccount,
 		maxConcurrent: asNum(get("maxConcurrent")) ?? base.maxConcurrent,
 		contextWindowDefault: asNum(get("contextWindowDefault")) ?? base.contextWindowDefault,
 		maxTokensDefault: asNum(get("maxTokensDefault")) ?? base.maxTokensDefault,
@@ -813,10 +882,12 @@ function mirrorCallId(runId, eventIndex) {
 function parseMirrorCallId(callId) {
 	if (!callId.startsWith("agytc-")) return null;
 	const rest = callId.slice(6);
-	const idx = rest.lastIndexOf("-");
+	const hashIdx = rest.indexOf("#");
+	const baseRest = hashIdx >= 0 ? rest.slice(0, hashIdx) : rest;
+	const idx = baseRest.lastIndexOf("-");
 	if (idx <= 0) return null;
-	const runId = rest.slice(0, idx);
-	const n = Number(rest.slice(idx + 1));
+	const runId = baseRest.slice(0, idx);
+	const n = Number(baseRest.slice(idx + 1));
 	if (!Number.isSafeInteger(n) || n < 0) return null;
 	return {
 		runId,
@@ -1408,9 +1479,9 @@ function parseGoalRoundText(text) {
 	const maxRounds = roundMatch && roundMatch[2] ? parseInt(roundMatch[2], 10) : void 0;
 	const objMatch = text.match(/Objective:\s*(?:"([^"]*)"|'([^']*)'|([^\n]+))/);
 	const objective = objMatch ? (objMatch[1] || objMatch[2] || objMatch[3])?.trim() : void 0;
-	const idMatch = text.match(/goal-[a-zA-Z0-9_-]+/);
+	const idMatch = text.match(/goal-[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12}/) ?? text.match(/\bid:\s*["']?([a-zA-Z0-9_-]+)["']?/);
 	return {
-		goalId: idMatch ? idMatch[0] : void 0,
+		goalId: idMatch ? idMatch[1] ?? idMatch[0] : void 0,
 		round,
 		maxRounds,
 		objective
@@ -1472,14 +1543,39 @@ function isPlanMode(messages) {
 	return false;
 }
 /**
-* Check if the trailing message is the tool result of a bridge-emitted `update_goal` call.
+* Harness-injected user-role texts (turn-preparation time samples, system
+* reminders, runtime context) are NOT user instructions: they must not break
+* the completion-hop scan, while a genuine instruction must.
+*/
+function isHarnessInjectedUserText(text) {
+	const t = text.trimStart();
+	return t.startsWith("Time sampled while preparing") || t.startsWith("Current runtime context") || t.includes("<system-reminder>");
+}
+/**
+* Check if the trailing span represents completion of a bridge-emitted `update_goal` call.
+* This covers both the direct tool-result message and DSH's deferred `<goal_complete>` notice.
+*
+* The markers only mean "synthetic completion hop" while they are the TRAILING
+* content. A genuine user message appearing before any marker is a fresh
+* instruction that must reach agy — scanning a fixed window for markers
+* "anywhere" swallowed exactly that: a message sent right after a goal
+* completed was finished as an empty turn without spawning agy
+* (2026-10-17, "把相关的经验整理到agents.md" × 2).
 */
 function isGoalToolContinuation(messages) {
 	if (messages.length === 0) return false;
-	const last = messages[messages.length - 1];
-	if (!last) return false;
-	const callId = last.toolCallId ?? last.source?.callId;
-	if (typeof callId === "string" && callId.startsWith("agytc-bridge-goal-")) return true;
+	const spanStart = Math.max(0, messages.length - 8);
+	for (let i = messages.length - 1; i >= spanStart; i--) {
+		const m = messages[i];
+		if (!m) continue;
+		const callId = m.toolCallId ?? m.source?.callId;
+		if (typeof callId === "string" && callId.startsWith("agytc-bridge-goal-")) return true;
+		const src = m.source;
+		if (src && typeof src === "object" && src.kind === "tool-goal") return true;
+		const text = extractText$1(m);
+		if (text.includes("<goal_complete>")) return true;
+		if (m.role === "user" && text.trim() !== "" && !isHarnessInjectedUserText(text)) return false;
+	}
 	return false;
 }
 /**
@@ -1540,6 +1636,24 @@ function buildPlanExitToolCallBlock(planMarkdown, blockIdx) {
 //#endregion
 //#region src/host/mapper.ts
 const toToolCallId = dshLlm.ToolCallId ?? dshLlm.CallId ?? ((id) => id);
+/**
+* Disambiguate duplicate tool-call IDs across turns or multiple calls in a session.
+* Reusing a call ID across different tool names triggers INVALID_ARGS in DSH; suffixing
+* with #${name} keeps each call uniquely addressable and self-healing.
+*/
+function rememberToolCallId(toolNames, rawCallId, name) {
+	const state = toolNames.get(rawCallId);
+	const assigned = state === void 0 ? rawCallId : state.last.name === name ? state.last.id : `${rawCallId}#${name}`;
+	const binding = {
+		id: assigned,
+		name
+	};
+	toolNames.set(rawCallId, {
+		last: binding,
+		pending: [...state?.pending ?? [], binding]
+	});
+	return assigned;
+}
 function usageFromRaw(raw) {
 	const usage = {
 		inputTokens: raw.input_tokens ?? 0,
@@ -1548,6 +1662,7 @@ function usageFromRaw(raw) {
 	if (raw.cache_read_tokens !== void 0) usage.cacheReadTokens = raw.cache_read_tokens;
 	if (raw.cache_write_tokens !== void 0) usage.cacheWriteTokens = raw.cache_write_tokens;
 	if (raw.thinking_tokens !== void 0) usage.reasoningTokens = raw.thinking_tokens;
+	if (raw.total_tokens !== void 0) usage.totalTokens = raw.total_tokens;
 	return usage;
 }
 /** Suffix-delta: emit only what grew; fall back to a newline + full text. */
@@ -1587,6 +1702,7 @@ var EventMapper = class {
 	sawTextStep;
 	finished = false;
 	totalTextOutput = "";
+	toolCallStates = /* @__PURE__ */ new Map();
 	constructor(opts) {
 		this.opts = opts;
 		this.sawTextStep = opts.initialSawText === true;
@@ -1772,6 +1888,8 @@ var EventMapper = class {
 					tool: ev.tool.name,
 					...effectiveArgs !== void 0 ? { input: effectiveArgs } : {}
 				});
+				const rawCallId = mirrorCallId(this.opts.runId, absIndex);
+				const assignedCallId = rememberToolCallId(this.toolCallStates, rawCallId, toolName);
 				yield {
 					type: "block-start",
 					index: idx,
@@ -1782,7 +1900,7 @@ var EventMapper = class {
 					index: idx,
 					block: {
 						type: "tool-call",
-						id: toToolCallId(mirrorCallId(this.opts.runId, absIndex)),
+						id: toToolCallId(assignedCallId),
 						name: toolName,
 						arguments: argumentsJson
 					}
@@ -1817,21 +1935,7 @@ var EventMapper = class {
 				const d = this.appendDelta("[agy finished with error] " + ev.error + "\n");
 				if (d) yield d;
 			}
-			const closeErr = this.closeOpen();
-			if (closeErr) yield closeErr;
-			yield {
-				type: "usage",
-				usage: usageFromRaw(this.opts.usage?.finalUsage(ev.usage) ?? ev.usage)
-			};
-			yield {
-				type: "finish",
-				reason: { kind: "stop" },
-				...ev.conversationId !== "" ? { replayState: { response: { conversationId: ev.conversationId } } } : {}
-			};
-			this.finished = true;
-			return;
-		}
-		if (!this.sawTextStep && ev.response !== "") {
+		} else if (!this.sawTextStep && ev.response !== "") {
 			yield* this.ensureBlock("text");
 			const d = this.appendDelta(ev.response);
 			if (d) yield d;
@@ -1842,7 +1946,7 @@ var EventMapper = class {
 			type: "usage",
 			usage: usageFromRaw(this.opts.usage?.finalUsage(ev.usage) ?? ev.usage)
 		};
-		if (this.opts.supportsGoalUpdate && this.opts.goalContext?.goalId) {
+		if (this.opts.supportsGoalUpdate && this.opts.goalContext) {
 			for (const ch of buildGoalCompleteToolCallBlock(this.opts.goalContext, this.blockIdx)) yield ch;
 			this.blockIdx++;
 			yield {
@@ -1999,7 +2103,7 @@ function foldEfforts(raw) {
 	const verbatim = [];
 	const slugSet = new Set(raw.map((r) => r.slug));
 	for (const r of raw) {
-		if (!r.slug.startsWith("gemini")) {
+		if (!r.slug.startsWith("gemini") && !r.slug.startsWith("argon")) {
 			verbatim.push({
 				id: r.slug,
 				name: r.label,
@@ -2342,17 +2446,17 @@ function parseUsage(v) {
 	const o = v;
 	const num = (x) => typeof x === "number" && Number.isFinite(x) ? x : void 0;
 	const out = {};
-	const inT = num(o.input_tokens);
-	const outT = num(o.output_tokens);
+	const inT = num(o.input_tokens) ?? num(o.inputTokens) ?? num(o.prompt_tokens);
+	const outT = num(o.output_tokens) ?? num(o.outputTokens) ?? num(o.completion_tokens);
 	if (inT !== void 0) out.input_tokens = inT;
 	if (outT !== void 0) out.output_tokens = outT;
-	const t = num(o.thinking_tokens);
+	const t = num(o.thinking_tokens) ?? num(o.thinkingTokens) ?? num(o.reasoning_tokens);
 	if (t !== void 0) out.thinking_tokens = t;
-	const cr = num(o.cache_read_tokens);
+	const cr = num(o.cache_read_tokens) ?? num(o.cacheReadTokens) ?? num(o.cached_tokens) ?? num(o.cache_read_input_tokens);
 	if (cr !== void 0) out.cache_read_tokens = cr;
-	const cw = num(o.cache_write_tokens);
+	const cw = num(o.cache_write_tokens) ?? num(o.cacheWriteTokens) ?? num(o.cache_creation_input_tokens);
 	if (cw !== void 0) out.cache_write_tokens = cw;
-	const tot = num(o.total_tokens);
+	const tot = num(o.total_tokens) ?? num(o.totalTokens);
 	if (tot !== void 0) out.total_tokens = tot;
 	return out;
 }
@@ -2787,9 +2891,12 @@ function windowsQuote(arg) {
 * platforms for its .gemini dir.
 */
 function isolatedHomeEnv(dir) {
+	const geminiDir = join(dir, ".gemini");
 	const env = {
 		HOME: dir,
-		GEMINI_CLI_HOME: join(dir, ".gemini")
+		GEMINI_CLI_HOME: geminiDir,
+		ANTIGRAVITY_GEMINI_DIR: geminiDir,
+		ANTIGRAVITY_APP_DATA_DIR: join(geminiDir, "antigravity-cli")
 	};
 	if (IS_WIN$2) {
 		env.USERPROFILE = dir;
@@ -3188,7 +3295,10 @@ function withAgyQuietEnv(env = process.env) {
 	return {
 		...env,
 		AGY_CLI_DISABLE_AUTO_UPDATE: env.AGY_CLI_DISABLE_AUTO_UPDATE ?? "1",
-		AGY_CLI_INTERACTIVE_HEADLESS: env.AGY_CLI_INTERACTIVE_HEADLESS ?? "1"
+		AGY_CLI_INTERACTIVE_HEADLESS: env.AGY_CLI_INTERACTIVE_HEADLESS ?? "1",
+		AGY_CLI_NONINTERACTIVE_HEADLESS: env.AGY_CLI_NONINTERACTIVE_HEADLESS ?? "1",
+		BROWSER: env.BROWSER ?? "none",
+		CI: env.CI ?? "1"
 	};
 }
 const escalating = /* @__PURE__ */ new WeakSet();
@@ -3510,13 +3620,21 @@ function runWinCredPs(target, user, action, payload = "") {
 		]
 	}).trim();
 }
-/** Read raw UTF-8 credential blob from Windows Credential Manager. */
-function readWindowsCredentialRaw(target = "gemini:antigravity") {
+let cachedWinCredRaw = null;
+/** Read raw UTF-8 credential blob from Windows Credential Manager (with short-lived in-memory caching). */
+function readWindowsCredentialRaw(target = "gemini:antigravity", maxAgeMs = 2500) {
 	if (!IS_WIN$1) return null;
+	const now = Date.now();
+	if (cachedWinCredRaw && cachedWinCredRaw.target === target && now - cachedWinCredRaw.time < maxAgeMs) return cachedWinCredRaw.val;
 	try {
 		const out = runWinCredPs(target, "antigravity", "read");
-		if (!out) return null;
-		return Buffer.from(out, "base64").toString("utf8");
+		const val = out ? Buffer.from(out, "base64").toString("utf8") : null;
+		cachedWinCredRaw = {
+			target,
+			val,
+			time: now
+		};
+		return val;
 	} catch {
 		return null;
 	}
@@ -3525,7 +3643,13 @@ function readWindowsCredentialRaw(target = "gemini:antigravity") {
 function writeWindowsCredentialRaw(secret, target = "gemini:antigravity", userName = "antigravity") {
 	if (!IS_WIN$1) return false;
 	try {
-		return runWinCredPs(target, userName, "write", Buffer.from(secret, "utf8").toString("base64")).toLowerCase() === "true";
+		const ok = runWinCredPs(target, userName, "write", Buffer.from(secret, "utf8").toString("base64")).toLowerCase() === "true";
+		if (ok) cachedWinCredRaw = {
+			target,
+			val: secret,
+			time: Date.now()
+		};
+		return ok;
 	} catch {
 		return false;
 	}
@@ -3693,8 +3817,6 @@ function detectSystemProxy(platform = process.platform) {
 		expiresAt: now + 3e5
 	};
 }
-//#endregion
-//#region src/host/pool.ts
 function defaultPoolDir() {
 	const dshState = process.env.DSH_STATE_DIR || join(homedir(), ".dsh");
 	return join(dshState, "agy-accounts");
@@ -3815,12 +3937,14 @@ var AccountPoolManager = class {
 	*/
 	bootstrapDefaultAccount() {
 		if (this.data.accounts.some((a) => a.systemHome)) return;
+		const sysProxy = detectSystemProxy();
 		const primary = {
 			id: "acc_primary",
 			alias: "Primary account (system sign-in)",
 			defaultAlias: true,
 			dir: "",
 			systemHome: true,
+			...sysProxy ? { proxyUrl: sysProxy } : {},
 			enabled: true,
 			createdAt: Date.now(),
 			cooldowns: {},
@@ -3837,20 +3961,35 @@ var AccountPoolManager = class {
 	* The stale directory is left untouched (never deletes user data).
 	*/
 	normalizeLegacyPrimary() {
-		const primary = this.data.accounts.find((a) => a.id === "acc_primary");
+		const primary = this.data.accounts.find((a) => a.id === "acc_primary" || a.systemHome);
 		if (!primary) return;
-		if (primary.systemHome) return;
-		primary.dir = "";
-		primary.systemHome = true;
-		primary.alias = "Primary account (system sign-in)";
-		primary.defaultAlias = true;
-		this.data.primaryAccountId = primary.id;
-		this.persist();
+		let changed = false;
+		if (!primary.systemHome || primary.dir) {
+			primary.dir = "";
+			primary.systemHome = true;
+			primary.alias = "Primary account (system sign-in)";
+			primary.defaultAlias = true;
+			this.data.primaryAccountId = primary.id;
+			changed = true;
+		}
+		if (process.platform === "win32") try {
+			const credFile = join(this.baseDir, ".primary-credential.json");
+			if (existsSync(credFile)) {
+				const parsed = JSON.parse(readFileSync(credFile, "utf8"));
+				if (parsed && typeof parsed.email === "string" && parsed.email && primary.email !== parsed.email) {
+					primary.email = parsed.email;
+					changed = true;
+				}
+			}
+		} catch {}
+		if (changed) this.persist();
 	}
-	getPoolData() {
+	getPoolData(defaultProxy) {
+		const sysProxy = defaultProxy || detectSystemProxy();
 		return {
 			...this.data,
-			activeAccountId: this.getActiveAccountId("google")
+			activeAccountId: this.getActiveAccountId("google"),
+			...sysProxy ? { systemProxy: sysProxy } : {}
 		};
 	}
 	getAccounts() {
@@ -4169,13 +4308,13 @@ var AccountPoolManager = class {
 		const cd = acc.cooldowns?.[family];
 		if (cd && cd.cooldownUntil > now) return false;
 		const quota = acc.quotas?.[family];
-		if (quota && typeof quota.remainingFraction === "number" && quota.remainingFraction <= .02) {
+		if (quota && typeof quota.remainingFraction === "number" && quota.remainingFraction <= .1) {
 			if (quota.resetTime) {
 				const resetMs = Date.parse(quota.resetTime);
 				if (Number.isNaN(resetMs) || resetMs > now) return false;
 			} else return false;
 		}
-		if (quota && typeof quota.weeklyFraction === "number" && quota.weeklyFraction <= .01) {
+		if (quota && typeof quota.weeklyFraction === "number" && quota.weeklyFraction <= .05) {
 			if (quota.weeklyResetTime) {
 				const resetMs = Date.parse(quota.weeklyResetTime);
 				if (Number.isNaN(resetMs) || resetMs > now) return false;
@@ -4281,8 +4420,8 @@ var AccountPoolManager = class {
 		const now = Date.now();
 		for (const [famKey, info] of Object.entries(quotas)) {
 			if (!info) continue;
-			const isExhausted5h = typeof info.remainingFraction === "number" && info.remainingFraction <= .02 && (!info.resetTime || Number.isNaN(Date.parse(info.resetTime)) || Date.parse(info.resetTime) > now);
-			const isExhaustedWeekly = typeof info.weeklyFraction === "number" && info.weeklyFraction <= .01 && (!info.weeklyResetTime || Number.isNaN(Date.parse(info.weeklyResetTime)) || Date.parse(info.weeklyResetTime) > now);
+			const isExhausted5h = typeof info.remainingFraction === "number" && info.remainingFraction <= .1 && (!info.resetTime || Number.isNaN(Date.parse(info.resetTime)) || Date.parse(info.resetTime) > now);
+			const isExhaustedWeekly = typeof info.weeklyFraction === "number" && info.weeklyFraction <= .05 && (!info.weeklyResetTime || Number.isNaN(Date.parse(info.weeklyResetTime)) || Date.parse(info.weeklyResetTime) > now);
 			if (isExhausted5h || isExhaustedWeekly) {
 				if (this.data.activeAccountIds?.[famKey] === id || this.data.lastActiveAccountId === id) this.advanceAccount(id, famKey);
 			}
@@ -4418,8 +4557,8 @@ var AccountPoolManager = class {
 			if (cd && cd.cooldownUntil > now) bump(cd.cooldownUntil);
 			const quota = acc.quotas?.[family];
 			if (quota === void 0) continue;
-			const drained5h = typeof quota.remainingFraction === "number" && quota.remainingFraction <= .02 && typeof quota.resetTime === "string" && Date.parse(quota.resetTime) > now;
-			const drainedWeekly = typeof quota.weeklyFraction === "number" && quota.weeklyFraction <= .01 && typeof quota.weeklyResetTime === "string" && Date.parse(quota.weeklyResetTime) > now;
+			const drained5h = typeof quota.remainingFraction === "number" && quota.remainingFraction <= .1 && typeof quota.resetTime === "string" && Date.parse(quota.resetTime) > now;
+			const drainedWeekly = typeof quota.weeklyFraction === "number" && quota.weeklyFraction <= .05 && typeof quota.weeklyResetTime === "string" && Date.parse(quota.weeklyResetTime) > now;
 			if (drained5h || drainedWeekly) bump(this.nextQuotaResetAt(acc, family));
 		}
 		return earliest !== null ? Math.max(0, earliest - now) : null;
@@ -6919,8 +7058,8 @@ var require_request$1 = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 //#endregion
 //#region node_modules/undici/lib/dispatcher/dispatcher.js
 var require_dispatcher = /* @__PURE__ */ __commonJSMin(((exports, module) => {
-	const EventEmitter$2 = __require("node:events");
-	var Dispatcher = class extends EventEmitter$2 {
+	const EventEmitter$3 = __require("node:events");
+	var Dispatcher = class extends EventEmitter$3 {
 		dispatch() {
 			throw new Error("not implemented");
 		}
@@ -13852,7 +13991,7 @@ var require_socks5_utils = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 //#endregion
 //#region node_modules/undici/lib/core/socks5-client.js
 var require_socks5_client = /* @__PURE__ */ __commonJSMin(((exports, module) => {
-	const { EventEmitter: EventEmitter$1 } = __require("node:events");
+	const { EventEmitter: EventEmitter$2 } = __require("node:events");
 	const { Buffer: Buffer$1 } = __require("node:buffer");
 	const { InvalidArgumentError, Socks5ProxyError } = require_errors();
 	const { debuglog: debuglog$1 } = __require("node:util");
@@ -13901,7 +14040,7 @@ var require_socks5_client = /* @__PURE__ */ __commonJSMin(((exports, module) =>
 	* SOCKS5 client implementation
 	* Handles SOCKS5 protocol negotiation and connection establishment
 	*/
-	var Socks5Client = class extends EventEmitter$1 {
+	var Socks5Client = class extends EventEmitter$2 {
 		constructor(socket, options = {}) {
 			super();
 			if (!socket) throw new InvalidArgumentError("socket is required");
@@ -20093,7 +20232,7 @@ var require_cache_handler = /* @__PURE__ */ __commonJSMin(((exports, module) =>
 //#region node_modules/undici/lib/cache/memory-cache-store.js
 var require_memory_cache_store = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 	const { Writable: Writable$2 } = __require("node:stream");
-	const { EventEmitter } = __require("node:events");
+	const { EventEmitter: EventEmitter$1 } = __require("node:events");
 	const { assertCacheKey, assertCacheValue } = require_cache$2();
 	/**
 	* @typedef {import('../../types/cache-interceptor.d.ts').default.CacheKey} CacheKey
@@ -20105,7 +20244,7 @@ var require_memory_cache_store = /* @__PURE__ */ __commonJSMin(((exports, module
 	* @implements {CacheStore}
 	* @extends {EventEmitter}
 	*/
-	var MemoryCacheStore = class extends EventEmitter {
+	var MemoryCacheStore = class extends EventEmitter$1 {
 		#maxCount = 1024;
 		#maxSize = 104857600;
 		#maxEntrySize = 5242880;
@@ -27916,10 +28055,10 @@ const OAUTH_USERINFO_URL$1 = "https://www.googleapis.com/oauth2/v1/userinfo";
 /** Fixed loopback callback registered for the Antigravity client (like opencode). */
 const OAUTH_CALLBACK_PORT = 51121;
 const OAUTH_REDIRECT_URI = `http://localhost:${OAUTH_CALLBACK_PORT}/oauth-callback`;
-/** Runtime endpoint fallback order (official production first, then staging/daily fallbacks). */
+/** Runtime endpoint fallback order (Antigravity endpoint first, then Cloud Code PA fallbacks). */
 const AGY_ENDPOINTS = [
-	"https://cloudcode-pa.googleapis.com",
 	"https://daily-cloudcode-pa.googleapis.com",
+	"https://cloudcode-pa.googleapis.com",
 	"https://daily-cloudcode-pa.sandbox.googleapis.com",
 	"https://autopush-cloudcode-pa.sandbox.googleapis.com"
 ];
@@ -28260,33 +28399,234 @@ function accountTokenFilePath(account, homeDir) {
 /**
 * FIFO async mutex. One instance guards the single Windows credential slot;
 * holding it across an entire agy run is what makes the handoff safe.
+*
+* The original implementation chained promises (`tail.then(gate)`), which is
+* FIFO but structurally unable to remove a waiter: a turn abandoned or aborted
+* while queued stayed in the chain forever, and if its gate was never resolved
+* every later waiter wedged with it (the 2026-10-16 cardboard-empire zombie
+* turn: queued 30+ minutes past the slot's release, immune to Stop, because
+* nothing observed the wait). This rewrite keeps an explicit queue so a
+* cancelled or timed-out waiter is REMOVED and the next waiter is woken in its
+* place, and the wait is guarded by a short poll that re-checks liveness — a
+* lost wakeup can no longer park a turn silently.
 */
 var AsyncMutex = class {
-	tail = Promise.resolve();
-	depth = 0;
+	holders = 0;
+	queue = [];
 	/** Number of holders plus waiters; 0 means the mutex is free. */
 	get pending() {
-		return this.depth;
+		return this.holders + this.queue.length;
 	}
-	async acquire() {
-		this.depth += 1;
-		let release;
-		const gate = new Promise((resolve) => {
-			release = resolve;
+	/** Waiters currently queued behind the holder(s). */
+	get waiting() {
+		return this.queue.length;
+	}
+	/**
+	* Acquire the mutex.
+	*
+	* @param opts.signal  cancel the wait (the waiter is removed and the next
+	*   one is woken); rejects with `AbortedWaitError`
+	* @param opts.timeoutMs  bound the wait; rejects with `WaitTimeoutError`
+	* @param opts.pollMs  liveness self-check interval while queued (0 = off).
+	*   The poll re-checks `shouldProceed` — a hook that lets the caller verify
+	*   the wait is still legitimate (e.g. the queue actually advanced). If it
+	*   returns true while the mutex appears free, the waiter takes the mutex
+	*   directly, healing a lost wakeup within one poll interval instead of
+	*   hanging forever.
+	*/
+	async acquire(opts = {}) {
+		const signal = opts.signal;
+		if (signal?.aborted) throw new AbortedWaitError("aborted before mutex acquisition");
+		if (this.holders < 1) {
+			this.holders += 1;
+			return () => this.releaseOne();
+		}
+		const pollMs = opts.pollMs ?? 0;
+		const timeoutMs = opts.timeoutMs;
+		let onAbort = null;
+		let timer = null;
+		let pollTimer = null;
+		return new Promise((resolve, reject) => {
+			let settled = false;
+			let entry = null;
+			let takenDirectly = false;
+			const cleanup = () => {
+				if (onAbort) {
+					signal?.removeEventListener("abort", onAbort);
+					onAbort = null;
+				}
+				if (timer) {
+					clearTimeout(timer);
+					timer = null;
+				}
+				if (pollTimer) {
+					clearInterval(pollTimer);
+					pollTimer = null;
+				}
+			};
+			const take = () => {
+				this.holders += 1;
+				return () => this.releaseOne();
+			};
+			const grant = () => {
+				if (settled) return;
+				settled = true;
+				cleanup();
+				resolve(take());
+			};
+			const fail = (err) => {
+				if (settled) return;
+				settled = true;
+				cleanup();
+				if (entry !== null) {
+					const idx = this.queue.indexOf(entry);
+					if (idx >= 0) this.queue.splice(idx, 1);
+					entry = null;
+				} else if (takenDirectly) this.releaseOne();
+				reject(err);
+			};
+			entry = () => grant();
+			this.queue.push(entry);
+			onAbort = () => {
+				fail(new AbortedWaitError("aborted while waiting for the mutex"));
+			};
+			signal?.addEventListener("abort", onAbort, { once: true });
+			if (timeoutMs !== void 0 && timeoutMs > 0) {
+				timer = setTimeout(() => fail(new WaitTimeoutError("timed out waiting for the mutex")), timeoutMs);
+				timer.unref?.();
+			}
+			if (pollMs > 0 && opts.shouldProceed !== void 0) {
+				pollTimer = setInterval(() => {
+					if (settled) return;
+					if (this.holders < 1 && this.queue[0] === entry && opts.shouldProceed?.()) {
+						const idx = this.queue.indexOf(entry);
+						if (idx >= 0) this.queue.splice(idx, 1);
+						entry = null;
+						takenDirectly = true;
+						grant();
+					}
+				}, pollMs);
+				pollTimer.unref?.();
+			}
 		});
-		const previous = this.tail;
-		this.tail = previous.then(() => gate, () => gate);
-		await previous;
-		let released = false;
-		return () => {
-			if (released) return;
-			released = true;
-			this.depth -= 1;
-			release();
-		};
+	}
+	releaseOne() {
+		this.holders -= 1;
+		this.wakeNext();
+	}
+	wakeNext() {
+		const next = this.queue.shift();
+		if (next) queueMicrotask(next);
+	}
+};
+/** The caller's abort signal fired while queued on the mutex. */
+var AbortedWaitError = class extends Error {
+	constructor(message) {
+		super(message);
+		this.name = "AbortedWaitError";
+	}
+};
+/** The bounded wait elapsed before the mutex became available. */
+var WaitTimeoutError = class extends Error {
+	constructor(message) {
+		super(message);
+		this.name = "WaitTimeoutError";
 	}
 };
 const credentialSlotMutex = new AsyncMutex();
+/**
+* Detect whether an external process by PID is currently running.
+* Uses process.kill(pid, 0) which tests for process existence without sending a signal.
+* - Returns true if the process exists (including EPERM when owned by another user).
+* - Returns false if ESRCH (process does not exist / exited), or if the PID is invalid.
+*/
+function isProcessAlive(pid) {
+	if (typeof pid !== "number" || !Number.isInteger(pid) || pid <= 0) return false;
+	try {
+		process.kill(pid, 0);
+		return true;
+	} catch (err) {
+		if (err?.code === "EPERM") return true;
+		return false;
+	}
+}
+const SLOT_LOCK_NAME = ".credential-slot.lock";
+const SLOT_LOCK_STALE_MS = 45e3;
+function slotLockFilePath(baseDir) {
+	return join(baseDir, SLOT_LOCK_NAME);
+}
+/**
+* Acquire a cross-process lock for the Windows credential slot.
+* Inspects any existing lock's PID via `process.kill(pid, 0)`.
+* If the recorded holder process has crashed/exited, the dead lock is reclaimed
+* immediately instead of stalling for timeout.
+*/
+async function acquireCrossProcessSlotLock(baseDir, options = {}) {
+	const lockFile = slotLockFilePath(baseDir);
+	const timeoutMs = options.timeoutMs ?? 15e3;
+	const pollMs = options.pollIntervalMs ?? 50;
+	const log = options.log ?? (() => {});
+	const deadline = timeoutMs > 0 ? Date.now() + timeoutMs : 0;
+	try {
+		mkdirSync(baseDir, { recursive: true });
+	} catch {}
+	for (;;) {
+		if (options.signal?.aborted) throw new AbortedWaitError("aborted while waiting for cross-process slot lock");
+		if (existsSync(lockFile)) {
+			let isStale = false;
+			let holderPid;
+			try {
+				const content = readFileSync(lockFile, "utf8");
+				const parsed = JSON.parse(content);
+				holderPid = parsed.pid;
+				if (typeof holderPid === "number") {
+					if (!isProcessAlive(holderPid)) {
+						isStale = true;
+						log(`[agy-link] removing stale slot lock from dead process ${holderPid} (instant self-heal)`);
+					} else if (Date.now() - (parsed.acquiredAt || 0) > 45e3) {
+						isStale = true;
+						log(`[agy-link] removing stale slot lock exceeding ${SLOT_LOCK_STALE_MS}ms timeout`);
+					}
+				} else isStale = true;
+			} catch {
+				isStale = true;
+			}
+			if (isStale) try {
+				unlinkSync(lockFile);
+			} catch {}
+		}
+		const payload = {
+			pid: process.pid,
+			acquiredAt: Date.now(),
+			holder: options.holder
+		};
+		const tempFile = lockFile + ".tmp-" + process.pid + "-" + Date.now();
+		try {
+			writeFileSync(tempFile, JSON.stringify(payload), {
+				flag: "wx",
+				encoding: "utf8"
+			});
+			renameSync(tempFile, lockFile);
+			let released = false;
+			return () => {
+				if (released) return;
+				released = true;
+				try {
+					if (existsSync(lockFile)) {
+						const raw = readFileSync(lockFile, "utf8");
+						if (JSON.parse(raw).pid === process.pid) unlinkSync(lockFile);
+					}
+				} catch {}
+			};
+		} catch {
+			try {
+				unlinkSync(tempFile);
+			} catch {}
+		}
+		if (deadline > 0 && Date.now() >= deadline) throw new WaitTimeoutError("timed out waiting for cross-process slot lock");
+		await new Promise((r) => setTimeout(r, pollMs));
+	}
+}
 function defaultSlotIo() {
 	return {
 		platform: process.platform,
@@ -28414,16 +28754,74 @@ var SlotUnavailableError = class extends Error {
 		this.name = "SlotUnavailableError";
 	}
 };
+let primaryFastRuns = 0;
+/** The secondary identity currently installed in the slot, if any. */
+let installedIdentity = null;
+/** Event bus to immediately wake queued same-identity runs when an identity is installed. */
+const slotEvents = new EventEmitter();
+slotEvents.setMaxListeners(500);
 /**
-* Take exclusive ownership of the credential slot for a run and arrange its
-* guaranteed restoration.
+* Identities that waiting runs want installed, keyed by grant fingerprint
+* (`'primary'` for the system account). Same-identity peers may still join
+* while a key for their OWN grant is pending; joins are refused as soon as a
+* DIFFERENT identity waits, so a switcher can never be postponed forever.
+*/
+const pendingSwitchTargets = /* @__PURE__ */ new Map();
+function claimSwitchTarget(key) {
+	pendingSwitchTargets.set(key, (pendingSwitchTargets.get(key) ?? 0) + 1);
+}
+function releaseSwitchTarget(key) {
+	const left = (pendingSwitchTargets.get(key) ?? 0) - 1;
+	if (left > 0) pendingSwitchTargets.set(key, left);
+	else pendingSwitchTargets.delete(key);
+}
+/** Live same-identity run count — exported for diagnostics. */
+function fastPathRunCount() {
+	return primaryFastRuns + (installedIdentity?.holders ?? 0);
+}
+/** True while a run is waiting for (or performing) a slot identity switch. */
+function isSlotSwitchPending() {
+	return pendingSwitchTargets.size > 0;
+}
+/**
+* Leave a reference-counted secondary identity. The last holder completes the
+* handoff: persist a rotated token, restore the primary, release the mutex.
+*/
+function leaveInstalledIdentity(state) {
+	if (state.holders <= 0) return;
+	state.holders -= 1;
+	if (state.holders > 0) return;
+	if (installedIdentity === state) installedIdentity = null;
+	state.finish();
+}
+/**
+* Take ownership of the credential slot for a run and arrange its guaranteed
+* restoration.
 *
 * Non-Windows platforms have no shared slot (per-account Keychain isolation
 * works), so this is a no-op there.
 *
+* Same-identity runs take a FAST PATH: when the slot provably holds THIS
+* account's credential and no switch is pending, the run starts IMMEDIATELY
+* without the mutex, so multiple sessions on one account run truly in parallel
+* (agy is a stateless CLI and handles concurrent processes natively). For a
+* secondary account the first run performs the handoff and later runs on the
+* same grant join it — including runs that were already QUEUED for the slot,
+* which poll and join as soon as their own grant is installed. The last holder
+* restores the primary. Only identity SWITCHES serialize.
+*
+* @param options.signal  cancels the wait for the slot — without it a turn
+*   queued behind another session's long run ignored Stop entirely (the
+*   cardboard-empire zombie turn, 2026-10-16).
+* @param options.dispatchTimeoutMs  bounds the wait; 0/undefined waits
+*   indefinitely (the wait stays observable and cancellable either way).
+* @param options.parallel  same-account fast path (default true). false
+*   restores full-run exclusivity.
 * @throws SlotUnavailableError when the slot cannot be handed over safely.
-* The caller must abort the run instead of silently signing in as the wrong
-* account (which would spend that account's quota).
+*   The caller must abort the run instead of silently signing in as the wrong
+*   account (which would spend that account's quota).
+* @throws AbortedWaitError when the signal aborted while queued.
+* @throws WaitTimeoutError when the bounded wait elapsed.
 */
 async function acquireCredentialSlot(account, pool, options = {}) {
 	const io = resolveIo(options);
@@ -28431,13 +28829,147 @@ async function acquireCredentialSlot(account, pool, options = {}) {
 	const baseDir = options.baseDir ?? defaultPoolDir();
 	const homeDir = options.homeDir ?? process.env.HOME ?? process.env.USERPROFILE ?? "";
 	const log = options.log ?? (() => {});
-	const releaseMutex = await credentialSlotMutex.acquire();
+	const parallel = options.parallel !== false;
+	const isPrimarySlot = Boolean(account.systemHome) || !account.dir;
+	if (parallel && isPrimarySlot && !isSlotSwitchPending() && !options.signal?.aborted) {
+		const stored = readPrimaryCredential(baseDir);
+		if (stored && sameCredentialGrant(io.readSlot(), stored.raw)) {
+			primaryFastRuns += 1;
+			log("[agy-link] same-account fast path: slot already holds the primary credential — running without exclusivity");
+			return {
+				identity: stored.email,
+				release: () => {
+					primaryFastRuns = Math.max(0, primaryFastRuns - 1);
+					try {
+						const afterRaw = io.readSlot();
+						if (afterRaw && afterRaw !== stored.raw && sameCredentialGrant(afterRaw, stored.raw)) writePrimaryCredential({
+							raw: afterRaw,
+							email: stored.email,
+							savedAt: Date.now()
+						}, baseDir);
+					} catch {}
+				}
+			};
+		}
+	}
+	const requestedFile = isPrimarySlot ? null : accountTokenFilePath(account, homeDir);
+	const requestedRaw = requestedFile === null ? null : readTokenFileRaw(requestedFile);
+	const requestedFingerprint = isPrimarySlot ? null : credentialFingerprint(requestedRaw);
+	const switchKey = isPrimarySlot ? "primary" : requestedFingerprint ?? "unknown";
+	const joinInstalled = () => {
+		if (!parallel || isPrimarySlot || requestedRaw === null || requestedFingerprint === null) return null;
+		if (options.signal?.aborted) return null;
+		const state = installedIdentity;
+		if (state === null || state.fingerprint !== requestedFingerprint) return null;
+		for (const key of pendingSwitchTargets.keys()) if (key !== switchKey) return null;
+		if (!sameCredentialGrant(io.readSlot(), requestedRaw)) return null;
+		state.holders += 1;
+		return {
+			identity: account.email,
+			release: () => leaveInstalledIdentity(state)
+		};
+	};
+	const immediate = joinInstalled();
+	if (immediate) {
+		log("[agy-link] same-identity fast path: slot already holds this account's credential — running without exclusivity");
+		return immediate;
+	}
+	let claimSwitch = false;
+	const claim = () => {
+		if (claimSwitch || !parallel) return;
+		claimSwitch = true;
+		claimSwitchTarget(switchKey);
+	};
+	const releaseClaim = () => {
+		if (!claimSwitch) return;
+		claimSwitch = false;
+		releaseSwitchTarget(switchKey);
+	};
+	claim();
+	const joinAbort = new AbortController();
+	const waitSignal = options.signal ? AbortSignal.any([options.signal, joinAbort.signal]) : joinAbort.signal;
+	let joinLease = null;
+	const onSlotInstalled = (fp) => {
+		if ((fp === switchKey || fp === "any") && joinLease === null) {
+			const lease = joinInstalled();
+			if (lease !== null) {
+				joinLease = lease;
+				joinAbort.abort();
+			}
+		}
+	};
+	slotEvents.on("installed", onSlotInstalled);
+	const joinPoll = setInterval(() => {
+		if (joinLease !== null) return;
+		const lease = joinInstalled();
+		if (lease !== null) {
+			joinLease = lease;
+			joinAbort.abort();
+		}
+	}, 100);
+	joinPoll.unref?.();
+	let releaseMutex = null;
+	try {
+		releaseMutex = await credentialSlotMutex.acquire({
+			signal: waitSignal,
+			timeoutMs: options.dispatchTimeoutMs,
+			pollMs: 5e3,
+			shouldProceed: () => true
+		});
+	} catch (err) {
+		clearInterval(joinPoll);
+		slotEvents.off("installed", onSlotInstalled);
+		if (joinLease !== null) {
+			const lease = joinLease;
+			releaseClaim();
+			log("[agy-link] queued run joined an installed same-identity slot lease — running in parallel");
+			return lease;
+		}
+		releaseClaim();
+		throw err;
+	}
+	clearInterval(joinPoll);
+	slotEvents.off("installed", onSlotInstalled);
+	if (joinLease !== null) {
+		const lease = joinLease;
+		joinLease = null;
+		releaseMutex();
+		releaseClaim();
+		log("[agy-link] queued run joined an installed same-identity slot lease — running in parallel");
+		return lease;
+	}
+	const releaseMutexSlot = releaseMutex;
+	let releaseFileLock = null;
+	if (io.platform === "win32") try {
+		releaseFileLock = await acquireCrossProcessSlotLock(baseDir, {
+			timeoutMs: options.dispatchTimeoutMs,
+			signal: options.signal,
+			log,
+			holder: account.alias || account.id
+		});
+	} catch (err) {
+		releaseClaim();
+		releaseMutexSlot();
+		throw err;
+	}
+	const releaseLockFileNow = () => {
+		try {
+			releaseFileLock?.();
+			releaseFileLock = null;
+		} catch {}
+	};
 	let released = false;
 	const done = () => {
 		if (released) return;
 		released = true;
-		releaseMutex();
+		releaseLockFileNow();
+		releaseClaim();
+		releaseMutexSlot();
 	};
+	if (options.signal?.aborted) {
+		done();
+		throw new AbortedWaitError("aborted after acquiring the credential slot");
+	}
 	try {
 		const primary = await resolvePrimaryCredential(pool, {
 			...options,
@@ -28446,7 +28978,6 @@ async function acquireCredentialSlot(account, pool, options = {}) {
 		});
 		const accountFile = accountTokenFilePath(account, homeDir);
 		const accountRaw = readTokenFileRaw(accountFile);
-		const isPrimarySlot = Boolean(account.systemHome) || !account.dir;
 		if (!primary) {
 			done();
 			throw new SlotUnavailableError("Cannot verify the primary Antigravity credential, so the Windows credential slot cannot be handed over safely. Sign the primary account in again, then retry.");
@@ -28456,6 +28987,9 @@ async function acquireCredentialSlot(account, pool, options = {}) {
 				log("[agy-link] re-asserting the primary credential into the Windows credential slot");
 				io.writeSlot(primary.raw);
 			}
+			releaseLockFileNow();
+			releaseClaim();
+			slotEvents.emit("installed", "primary");
 			return {
 				identity: primary.email,
 				release: () => {
@@ -28478,11 +29012,21 @@ async function acquireCredentialSlot(account, pool, options = {}) {
 				}
 			};
 		}
+		if (parallel && primaryFastRuns > 0) {
+			const deadline = options.dispatchTimeoutMs !== void 0 && options.dispatchTimeoutMs > 0 ? Date.now() + options.dispatchTimeoutMs : 0;
+			log(`[agy-link] waiting for ${primaryFastRuns} same-account run(s) to finish before switching the credential slot to ${account.alias || account.id}`);
+			while (primaryFastRuns > 0) {
+				if (options.signal?.aborted) throw new AbortedWaitError("aborted while waiting for same-account runs to finish");
+				if (deadline !== 0 && Date.now() > deadline) throw new WaitTimeoutError(`timed out waiting for ${primaryFastRuns} same-account run(s) to finish before switching the credential slot`);
+				await new Promise((r) => setTimeout(r, 200));
+			}
+		}
 		if (!accountRaw) {
 			done();
 			throw new SlotUnavailableError(`Account ${account.alias || account.id} has no stored credential. Sign it in again before using it.`);
 		}
-		if (!credentialFingerprint(accountRaw)) {
+		const accountFingerprint = credentialFingerprint(accountRaw);
+		if (!accountFingerprint) {
 			done();
 			throw new SlotUnavailableError(`Account ${account.alias || account.id} has an unreadable credential file. Sign it in again.`);
 		}
@@ -28491,9 +29035,11 @@ async function acquireCredentialSlot(account, pool, options = {}) {
 			throw new SlotUnavailableError(`Account ${account.alias || account.id} holds the SAME credential as the primary account — its login was overwritten. Sign this account in again to restore its own token.`);
 		}
 		io.writeSlot(accountRaw);
-		return {
-			identity: account.email,
-			release: () => {
+		releaseLockFileNow();
+		const state = {
+			fingerprint: accountFingerprint,
+			holders: 1,
+			finish: () => {
 				try {
 					const afterRaw = io.readSlot();
 					const afterFingerprint = credentialFingerprint(afterRaw);
@@ -28509,6 +29055,13 @@ async function acquireCredentialSlot(account, pool, options = {}) {
 				}
 			}
 		};
+		installedIdentity = state;
+		releaseClaim();
+		slotEvents.emit("installed", accountFingerprint);
+		return {
+			identity: account.email,
+			release: () => leaveInstalledIdentity(state)
+		};
 	} catch (err) {
 		done();
 		throw err;
@@ -28631,6 +29184,26 @@ var SessionStore = class {
 		return this.data;
 	}
 	/**
+	* Purge bindings associated with accounts that no longer exist in the pool.
+	* Prevents deleted account ids from lingering in sessions.json.
+	*/
+	cleanupStaleAccounts(validAccountIds) {
+		let changed = false;
+		for (const key of Object.keys(this.data)) {
+			const colon = key.indexOf(":");
+			if (colon >= 0) {
+				const accId = key.slice(colon + 1);
+				if (accId && !validAccountIds.has(accId)) {
+					delete this.data[key];
+					this.dirty.delete(key);
+					this.removed.add(key);
+					changed = true;
+				}
+			}
+		}
+		if (changed) this.persist();
+	}
+	/**
 	* Atomic write: tmp file + rename, MERGING with whatever another host
 	* process wrote in the meantime (web + headless share this file). Only the
 	* keys this process touched are overwritten and only the keys it deleted are
@@ -29263,11 +29836,11 @@ function isSyntheticHarnessMessage(m) {
 	const src = m.source;
 	const kind = src?.kind;
 	if (kind !== void 0 && kind !== "" && kind !== "user") {
-		if (kind === "time-context" || kind === "skill-catalog" || kind === "runtime-context" || kind === "model-selection" || kind === "system-reminder" || kind === "dsh-session-title-llm" || kind === "synthetic") return true;
+		if (kind === "time-context" || kind === "skill-catalog" || kind === "runtime-context" || kind === "model-selection" || kind === "system-reminder" || kind === "dsh-session-title-llm" || kind === "tool-goal" || kind === "synthetic") return true;
 		if (kind === "plugin" && src.form === "snapshot") return true;
 	}
 	const text = textOf(m).trim();
-	if (text.startsWith("Time sampled while preparing") || text.startsWith("<system-reminder>") || text.startsWith("Current runtime context") || text.startsWith("[model changed:") || text.startsWith("[conversation so far]") || text.startsWith("A skill is a reusable set of task-specific instructions")) return true;
+	if (text.startsWith("Time sampled while preparing") || text.startsWith("<system-reminder>") || text.startsWith("Current runtime context") || text.startsWith("[model changed:") || text.startsWith("[conversation so far]") || text.startsWith("<goal_complete>") || text.startsWith("A skill is a reusable set of task-specific instructions")) return true;
 	return false;
 }
 /**
@@ -29690,7 +30263,7 @@ var AgyAdapter = class AgyAdapter extends LlmAdapter {
 		else args.push("--mode", opts.permissionMode);
 		const effectiveModel = resolveModelSlug(opts.model);
 		if (effectiveModel !== "") args.push("--model", effectiveModel);
-		if ((effectiveModel === "" || effectiveModel.toLowerCase().startsWith("gemini")) && opts.effort && opts.effort !== "") args.push("--effort", opts.effort);
+		if ((effectiveModel === "" || effectiveModel.toLowerCase().startsWith("gemini") || effectiveModel.toLowerCase().startsWith("argon")) && opts.effort && opts.effort !== "") args.push("--effort", opts.effort);
 		if (opts.conversationId) args.push("--conversation", opts.conversationId);
 		for (const d of opts.addDirs ?? []) args.push("--add-dir", d);
 		args.push(...opts.extraArgs);
@@ -29725,12 +30298,18 @@ var AgyAdapter = class AgyAdapter extends LlmAdapter {
 			};
 			return;
 		}
-		const goalContext = detectGoalContext(options.messages);
-		if (goalContext && (!goalContext.goalId || goalContext.revision === void 0) && sessionKey && this.deps.sessionGoal) {
+		let goalContext = detectGoalContext(options.messages);
+		if ((!goalContext || !goalContext.goalId || goalContext.revision === void 0) && sessionKey && this.deps.sessionGoal) {
 			const sg = this.deps.sessionGoal(sessionKey);
 			if (sg) {
-				if (!goalContext.goalId) goalContext.goalId = sg.goalId;
-				if (goalContext.revision === void 0) goalContext.revision = sg.revision;
+				if (!goalContext) goalContext = {
+					goalId: sg.goalId,
+					revision: sg.revision
+				};
+				else {
+					if (!goalContext.goalId) goalContext.goalId = sg.goalId;
+					if (goalContext.revision === void 0) goalContext.revision = sg.revision;
+				}
 			}
 		}
 		const supportsGoalUpdate = Boolean(options.tools?.some((t) => t.name === "update_goal"));
@@ -29782,7 +30361,17 @@ var AgyAdapter = class AgyAdapter extends LlmAdapter {
 			while (this.requestTimestamps.length > 0 && this.requestTimestamps[0] < windowStart) this.requestTimestamps.shift();
 			if (this.requestTimestamps.length >= cfg.rateLimitPerMinute) {
 				const delayMs = this.requestTimestamps[0] + 6e4 - now;
-				if (delayMs > 0) await new Promise((r) => setTimeout(r, delayMs));
+				if (delayMs > 0) await new Promise((resolve, reject) => {
+					const timer = setTimeout(() => {
+						options.signal?.removeEventListener("abort", onAbort);
+						resolve();
+					}, delayMs);
+					const onAbort = () => {
+						clearTimeout(timer);
+						reject(new LlmError("aborted during rate-limit spacing", Err.AGY_ERROR));
+					};
+					options.signal?.addEventListener("abort", onAbort, { once: true });
+				});
 			}
 			this.requestTimestamps.push(Date.now());
 		}
@@ -29800,7 +30389,7 @@ var AgyAdapter = class AgyAdapter extends LlmAdapter {
 				if (boundAcc) {
 					mostRecentAccount = boundAcc;
 					latestUpdated = b.updatedAt;
-				}
+				} else this.deps.store.delete(k);
 			}
 			if (mostRecentAccount && this.deps.pool.isAccountEligible(mostRecentAccount, family)) account = mostRecentAccount;
 		}
@@ -30030,8 +30619,18 @@ var AgyAdapter = class AgyAdapter extends LlmAdapter {
 		let sawAnyEvent = false;
 		/** Timestamp of the most recent stdout line — drives the silence heartbeat. */
 		let lastOutputAt = 0;
+		/**
+		* Generation-phase silence budget: after the first event but with NO open
+		* tool step, a hung SSE stream (quota-wall stalls hang instead of
+		* returning a 429 — observed 2026-10-17 01:17: the last
+		* streamGenerateContent simply never answered) used to sit for the full
+		* 240-minute long-tool budget because "sawAnyEvent" upgraded it. Long
+		* silence is only legitimate while a TOOL is running; bare generation
+		* gets a bounded floor so the turn can fail, classify and rotate.
+		*/
+		const generationIdleMs = Math.max(cfg.timeoutMs, 9e5);
 		const applyToolIdleBudget = () => {
-			runningProc?.noteActivity(openToolKeys.size > 0 || sawAnyEvent ? longToolIdleMs : cfg.timeoutMs);
+			runningProc?.noteActivity(openToolKeys.size > 0 ? longToolIdleMs : generationIdleMs);
 		};
 		const TOOL_HEARTBEAT_MS = 3e5;
 		let toolHeartbeat = null;
@@ -30084,28 +30683,89 @@ var AgyAdapter = class AgyAdapter extends LlmAdapter {
 			promptViaStdin: true
 		}) : argsBase;
 		const stdinPayload = promptViaStdin ? buildStreamInputLine(prompt) : void 0;
-		const release = await this.deps.acquire(options.signal);
+		const dispatchHardCapMs = cfg.dispatchTimeoutMinutes > 0 ? cfg.dispatchTimeoutMinutes * 6e4 : 0;
+		const dispatchStartedAt = Date.now();
+		const DISPATCH_HEARTBEAT_MS = 12e4;
+		let dispatchHeartbeat = null;
+		const stopDispatchHeartbeat = () => {
+			if (dispatchHeartbeat !== null) {
+				clearInterval(dispatchHeartbeat);
+				dispatchHeartbeat = null;
+			}
+		};
+		const startDispatchHeartbeat = () => {
+			if (dispatchHeartbeat !== null) return;
+			dispatchHeartbeat = setInterval(() => {
+				const mins = Math.max(1, Math.round((Date.now() - dispatchStartedAt) / 6e4));
+				const mutex = credentialSlotMutex;
+				this.deps.log?.("agy dispatch still waiting: " + mins + "m — credential slot queue: " + mutex.waiting + " waiter(s), " + (mutex.pending - mutex.waiting) + " holder(s) (another session may be running a long agy tool) — the turn is waiting for the slot; press Stop to cancel");
+			}, DISPATCH_HEARTBEAT_MS);
+			dispatchHeartbeat.unref?.();
+		};
+		const dispatchSleep = async (ms) => {
+			if (options.signal?.aborted) throw new LlmError("request aborted during dispatch backoff", Err.AGY_ERROR);
+			await new Promise((resolve, reject) => {
+				const timer = setTimeout(() => {
+					options.signal?.removeEventListener("abort", onAbort);
+					resolve();
+				}, ms);
+				const onAbort = () => {
+					clearTimeout(timer);
+					reject(new LlmError("request aborted during dispatch backoff", Err.AGY_ERROR));
+				};
+				options.signal?.addEventListener("abort", onAbort, { once: true });
+			});
+		};
+		let release = null;
 		let released = false;
 		let slotLease;
+		let granted = false;
+		let dispatchBackoffMs = 2e3;
+		const maxDispatchAttempts = 1 + Math.max(0, cfg.dispatchRetries);
 		try {
-			slotLease = process.env.NODE_TEST_CONTEXT === void 0 ? await acquireCredentialSlot(account ?? void 0, this.deps.pool, {
-				baseDir: this.deps.pool?.dir,
-				proxyUrl: account?.proxyUrl || cfg.proxyUrl || detectSystemProxy() || void 0,
-				log: (msg) => this.deps.log?.(msg)
-			}) : void 0;
+			for (let attempt = 1; attempt <= maxDispatchAttempts && !granted; attempt++) try {
+				release = await this.deps.acquire(options.signal);
+				startDispatchHeartbeat();
+				slotLease = process.env.NODE_TEST_CONTEXT === void 0 ? await acquireCredentialSlot(account ?? void 0, this.deps.pool, {
+					baseDir: this.deps.pool?.dir,
+					proxyUrl: account?.proxyUrl || cfg.proxyUrl || detectSystemProxy() || void 0,
+					log: (msg) => this.deps.log?.(msg),
+					signal: options.signal,
+					dispatchTimeoutMs: dispatchHardCapMs,
+					parallel: cfg.parallelSameAccount
+				}) : void 0;
+				granted = true;
+			} catch (e) {
+				release?.();
+				release = null;
+				if (e instanceof AbortedWaitError) throw new LlmError("request aborted while waiting for the agy credential slot", Err.AGY_ERROR);
+				if (e instanceof WaitTimeoutError) {
+					if (attempt < maxDispatchAttempts) {
+						this.deps.log?.("agy dispatch attempt " + attempt + "/" + maxDispatchAttempts + " timed out after " + cfg.dispatchTimeoutMinutes + "m waiting for the credential slot — releasing and retrying in " + Math.round(dispatchBackoffMs / 1e3) + "s");
+						stopDispatchHeartbeat();
+						await dispatchSleep(dispatchBackoffMs);
+						dispatchBackoffMs = Math.min(dispatchBackoffMs * 2, 15e3);
+						continue;
+					}
+					throw new LlmError("could not take the agy credential slot within " + cfg.dispatchTimeoutMinutes + "m (another run may be wedged holding it). Check the console for the dispatch heartbeat, restart DSH if a run is truly stuck.", Err.TIMEOUT);
+				}
+				const detail = e instanceof SlotUnavailableError ? e.message : brief(String(e));
+				throw new LlmError(detail, Err.AGY_ERROR);
+			}
 		} catch (e) {
-			release();
+			stopDispatchHeartbeat();
 			this.clearInFlightPrompt(sessionKey, prompt);
-			const detail = e instanceof SlotUnavailableError ? e.message : brief(String(e));
-			throw new LlmError(detail, Err.AGY_ERROR);
+			throw e;
 		}
+		stopDispatchHeartbeat();
 		const releaseOnce = () => {
 			if (released) return;
 			released = true;
 			try {
 				slotLease?.release();
 			} catch {}
-			release();
+			release?.();
+			release = null;
 		};
 		if (options.signal?.aborted) {
 			releaseOnce();
@@ -30253,10 +30913,18 @@ var AgyAdapter = class AgyAdapter extends LlmAdapter {
 				};
 				else if (isRateLimit) {
 					const bestMsg = parser.stats.lastResultError || (outcome.stderrTail ? brief(outcome.stderrTail) : "Rate limit or quota reached");
+					const hard = looksLikeHardRateLimit(rawErrText);
+					failure = {
+						kind: "error",
+						code: hard ? Err.RATE_LIMIT : Err.OVERLOADED,
+						message: hard ? "Google Antigravity quota / rate limit reached: " + bestMsg : "Google Antigravity quota / rate limit reached (server capacity overloaded): " + bestMsg
+					};
+				} else if (looksLikeContextWindowExceeded(rawErrText) || looksLikeContextWindowExceeded(parser.stats.lastResultError ?? "")) {
+					const detail = parser.stats.lastResultError || (outcome.stderrTail !== "" ? brief(outcome.stderrTail) : "Prompt exceeds context window limit");
 					failure = {
 						kind: "error",
-						code: looksLikeHardRateLimit(rawErrText) ? Err.RATE_LIMIT : Err.OVERLOADED,
-						message: "Google Antigravity quota / rate limit reached: " + bestMsg
+						code: Err.CONTEXT_WINDOW_EXCEEDED,
+						message: "Google Antigravity context window exceeded: " + detail
 					};
 				} else if (!transportFailure && (looksLikeEligibilityFailure(rawErrText) || looksLikeEligibilityFailure(parser.stats.lastResultError ?? ""))) {
 					const detail = parser.stats.lastResultError ?? (outcome.stderrTail !== "" ? brief(outcome.stderrTail) : "");
@@ -30312,7 +30980,7 @@ var AgyAdapter = class AgyAdapter extends LlmAdapter {
 				if (account && !outcome.aborted && looksLikeHardRateLimit(rawErrText)) this.deps.pool?.recordFailure(account.id, family, failure.message);
 				if (account && silentTimeout) this.deps.pool?.advanceAccount(account.id, family);
 				if (account && failure.code === Err.ELIGIBILITY) this.deps.pool?.advanceAccount(account.id, family);
-				if (!outcome.aborted && failure.code !== Err.RATE_LIMIT && (failure.code === Err.NETWORK || failure.code === Err.OVERLOADED || failure.code === Err.AUTH) && account) this.deps.pool?.advanceAccount(account.id, family);
+				if (!outcome.aborted && failure.code !== Err.RATE_LIMIT && failure.code !== Err.OVERLOADED && (failure.code === Err.NETWORK || failure.code === Err.AUTH) && account) this.deps.pool?.advanceAccount(account.id, family);
 				if (account && shouldMarkAuthRequired(failure.code, failure.message)) {
 					const authoritative = isAuthoritativeAuthError(rawErrText + " " + runLogText);
 					if (failure.code === Err.AUTH && !authoritative) this.deps.pool?.noteAuthFailure(account.id, failure.message);
@@ -31171,6 +31839,10 @@ const HELP = [
 	"- `/agy models` — refresh and list discovered models",
 	"- `/agy mode <skip|plan|accept-edits>` — permission mode (next turn)",
 	"- `/agy effort <low|medium|high|default>` — default reasoning effort",
+	"- `/agy dispatch [minutes|off]` — credential-slot wait cap per attempt (omit to inspect; `off` = unlimited)",
+	"- `/agy dispatch-retries <n>` — extra dispatch attempts after the cap",
+	"- `/agy parallel <on|off>` — same-account parallel agy runs (Windows slot fast path)",
+	"- `/agy max-concurrent <n|off>` — cap on concurrent agy request streams (off = unlimited, native)",
 	"- `/agy workspace [path]` — set the agy working directory (absolute path; omit to show)",
 	"- `/agy clear` — drop the most recent conversation binding",
 	"- `/agy doctor` — write a diagnostic report and return its path",
@@ -31180,7 +31852,7 @@ function agyCommandDefinition(deps) {
 	return {
 		name: "agy",
 		description: "Antigravity (agy CLI) bridge: status, login, models, mode, diagnostics, goal",
-		input: { hint: "<status|pool|goal|session|enable-account|disable-account|models|mode|effort|workspace|clear|doctor|help>" },
+		input: { hint: "<status|pool|goal|session|enable-account|disable-account|models|mode|effort|dispatch|dispatch-retries|parallel|max-concurrent|workspace|clear|doctor|help>" },
 		handler: (invocation) => handle(deps, invocation.rawInput, invocation)
 	};
 }
@@ -31203,8 +31875,8 @@ async function handle(deps, raw, invocation) {
 				const qG = a.quotas.google?.remainingFraction !== void 0 ? `${Math.round(a.quotas.google.remainingFraction * 100)}%` : "unknown";
 				const qC = a.quotas.anthropic?.remainingFraction !== void 0 ? `${Math.round(a.quotas.anthropic.remainingFraction * 100)}%` : "unknown";
 				const qO = a.quotas.openai?.remainingFraction !== void 0 ? `${Math.round(a.quotas.openai.remainingFraction * 100)}%` : "unknown";
-				const qA = a.quotas.argon?.weeklyFraction;
-				const quotaLine = `   - Quota: Gemini ${qG} | Claude ${qC} | GPT-OSS ${qO}` + (qA !== void 0 ? ` | Argon ${Math.round(qA * 100)}% (weekly)` : "");
+				const qA = a.quotas.argon?.weeklyFraction ?? a.quotas.argon?.remainingFraction;
+				const quotaLine = `   - Quota: Gemini ${qG} | Claude ${qC} | GPT-OSS ${qO}` + (qA !== void 0 ? ` | Argon ${Math.round(qA * 100)}%` : "");
 				const cds = [];
 				for (const [fam, cd] of Object.entries(a.cooldowns)) if (cd && cd.cooldownUntil > Date.now()) {
 					const sec = Math.ceil((cd.cooldownUntil - Date.now()) / 1e3);
@@ -31463,6 +32135,49 @@ async function handle(deps, raw, invocation) {
 			deps.setOverride("defaultEffort", arg === "default" ? "" : arg);
 			return ok("Default effort set to **" + (arg === "default" ? "model default" : arg) + "**.");
 		}
+		if (sub === "dispatch" || sub === "dispatch-retries") {
+			const cfg = deps.cfg();
+			const mutex = credentialSlotMutex;
+			if (arg === "") return ok([
+				"**Agy 派发守护（dispatch guards）**",
+				`- 硬超时：**${cfg.dispatchTimeoutMinutes > 0 ? `${cfg.dispatchTimeoutMinutes} 分钟/次` : "不限时（无限等待）"}**（重试次数 ${cfg.dispatchRetries}${cfg.dispatchTimeoutMinutes > 0 ? `，总坚持 ≈ ${(1 + cfg.dispatchRetries) * cfg.dispatchTimeoutMinutes} 分钟` : ""}）`,
+				"- 同账号并行：**" + (cfg.parallelSameAccount ? "开（快路径，多会话并行跑同一账号）" : "关（同一时刻仅 1 个 agy 进程）") + "**",
+				`- 并发上限：**${cfg.maxConcurrent > 0 ? cfg.maxConcurrent + " 个流" : "不限制（原生并发）"}**`,
+				`- 当前凭据槽位队列：**${mutex.waiting} 个等待者 / ${mutex.pending - mutex.waiting} 个持有者**，同身份并行活跃 **${fastPathRunCount()}** 个（主账号快路径 + 次级同授权租约）`,
+				`- 排队期间：Stop 随时可停；丢失唤醒 5 秒内自愈；每 2 分钟心跳日志`,
+				`- 修改：/agy dispatch <分钟|off>　/agy dispatch-retries <次数>　/agy parallel <on|off>`
+			].join("\n"));
+			if (sub === "dispatch") {
+				if (arg === "off" || arg === "0") {
+					deps.setOverride("dispatchTimeoutMinutes", 0);
+					return ok("派发硬超时已关闭：排队将无限等待（仍然 Stop 可停、轮询自愈、心跳可见）。");
+				}
+				const minutes = Number(arg);
+				if (!Number.isFinite(minutes) || minutes <= 0 || !Number.isInteger(minutes)) return err("usage: /agy dispatch <分钟数|off>");
+				deps.setOverride("dispatchTimeoutMinutes", minutes);
+				return ok(`派发硬超时设为 **${minutes} 分钟/次**（含 ${cfg.dispatchRetries} 次重试，总坚持 ≈ ${(1 + cfg.dispatchRetries) * minutes} 分钟）— 下一个回合生效。`);
+			}
+			const retries = Number(arg);
+			if (!Number.isFinite(retries) || retries < 0 || !Number.isInteger(retries) || retries > 10) return err("usage: /agy dispatch-retries <0-10>");
+			deps.setOverride("dispatchRetries", retries);
+			return ok(`派发重试次数设为 **${retries}**${cfg.dispatchTimeoutMinutes > 0 ? `，总坚持 ≈ ${(1 + retries) * cfg.dispatchTimeoutMinutes} 分钟` : ""} — 下一个回合生效。`);
+		}
+		if (sub === "parallel") {
+			if (arg !== "on" && arg !== "off") return err("usage: /agy parallel <on|off>");
+			const on = arg === "on";
+			deps.setOverride("parallelSameAccount", on);
+			return ok(on ? "同账号并行已**开启**：同一账号的多个会话立即并行跑 agy（无需独占凭据槽位），仅账号切换时串行 — 下一个回合生效。" : "同账号并行已**关闭**：恢复同一时刻仅 1 个 agy 进程（全串行）— 下一个回合生效。");
+		}
+		if (sub === "max-concurrent") {
+			if (arg === "off" || arg === "0") {
+				deps.setOverride("maxConcurrent", 0);
+				return ok("并发上限已移除：**不限制**（原生 agy 并发，Google 速率与账号冷却为天然调节）— 下一个回合生效。");
+			}
+			const n = Number(arg);
+			if (!Number.isFinite(n) || !Number.isInteger(n) || n < 1 || n > 64) return err("usage: /agy max-concurrent <1-64|off>");
+			deps.setOverride("maxConcurrent", n);
+			return ok(`并发上限设为 **${n}** 个请求流 — 下一个回合生效。`);
+		}
 		if (sub === "workspace") {
 			if (arg === "") return ok("Current workspace: " + (deps.cfg().workspaceRoot !== "" ? deps.cfg().workspaceRoot : "(session cwd / process cwd)"));
 			if (arg === "default" || arg === "clear") {
@@ -31717,6 +32432,7 @@ var PoolAuthFlow = class {
 			if (flow.primary) {
 				const primary = this.pool.getAccount("acc_primary") ?? this.pool.getAccounts().find((a) => a.systemHome) ?? this.pool.getAccounts()[0];
 				if (primary) {
+					if (flow.proxyUrl && !primary.proxyUrl) this.pool.setAccountProxy(primary.id, flow.proxyUrl);
 					this.pool.updateAccountQuotas(primary.id, primary.quotas, email);
 					this.quota.refreshAccountQuota(primary).catch(() => void 0);
 				}
@@ -31806,7 +32522,7 @@ function detectEmailFromAgyLogs(homeDir) {
 }
 const OAUTH_USERINFO_URL = "https://www.googleapis.com/oauth2/v1/userinfo";
 /** Platform-faithful agy User-Agent (hardcoding darwin/arm64 on Windows is a bad fingerprint). */
-function agyUserAgent(version = "1.1.15") {
+function agyUserAgent(version = "2.24.0") {
 	return `antigravity/${version} ${process.platform === "win32" ? "windows" : process.platform}/${process.arch === "x64" ? "amd64" : process.arch}`;
 }
 /** Coerce an expiry value (ISO string, epoch millis, or epoch seconds) to ms. */
@@ -31842,6 +32558,17 @@ function normalizeStoredToken(raw) {
 	};
 }
 /**
+* Detects whether a 5-hour quota bucket from retrieveUserQuotaSummary is an
+* unmetered placeholder (remainingFraction = 1.0 and resetTime = now + ~5h).
+* In unmetered environments (e.g. Cloud Code PA prod for free tier), the window
+* never starts billing and stays frozen at 100% forever.
+*/
+function isStale5hBucket(remainingFraction, resetTime, now = Date.now()) {
+	if (remainingFraction !== 1 || !resetTime) return false;
+	const resetMs = Date.parse(resetTime) - now;
+	return resetMs > 162e5 && resetMs < 1872e4;
+}
+/**
 * Parse a go-keyring payload (optionally "go-keyring-base64:" prefixed) into
 * a normalized StoredToken. Shared by the macOS and Linux keyring readers.
 */
@@ -32204,7 +32931,18 @@ var QuotaService = class {
 						const desc = (g.description || "").toLowerCase();
 						return name.includes("gemini") || desc.includes("gemini");
 					})) {
-						this.preferredEndpointIndex = AGY_ENDPOINTS.indexOf(endpoint);
+						if (partialSummary && Array.isArray(partialSummary.groups)) {
+							const existingNames = new Set(partialSummary.groups.map((g) => (g.displayName || "").toLowerCase()));
+							for (const g of summary.groups || []) {
+								const name = (g.displayName || "").toLowerCase();
+								if (!existingNames.has(name)) {
+									partialSummary.groups.push(g);
+									existingNames.add(name);
+								}
+							}
+							return partialSummary;
+						}
+						if (i > 0 && !partialSummary) this.preferredEndpointIndex = AGY_ENDPOINTS.indexOf(endpoint);
 						return summary;
 					}
 					if (!partialSummary && summary && Array.isArray(summary.groups) && summary.groups.length > 0) partialSummary = summary;
@@ -32214,6 +32952,32 @@ var QuotaService = class {
 		}
 		return partialSummary;
 	}
+	async fetchUserQuotaEndpoint(endpoint, accessToken, proxyUrl) {
+		return agyFetch(`${endpoint}/v1internal:retrieveUserQuota`, {
+			method: "POST",
+			headers: {
+				Authorization: `Bearer ${accessToken}`,
+				"Content-Type": "application/json",
+				"User-Agent": agyUserAgent()
+			},
+			body: JSON.stringify({})
+		}, proxyUrl);
+	}
+	/**
+	* Fetch per-model live user quota via v1internal:retrieveUserQuota.
+	*/
+	async fetchUserQuota(accessToken, proxyUrl) {
+		const endpoints = this.getOrderedEndpoints();
+		for (let i = 0; i < endpoints.length; i++) {
+			const endpoint = endpoints[i];
+			try {
+				const res = await this.fetchUserQuotaEndpoint(endpoint, accessToken, proxyUrl);
+				if (res.ok) return await res.json();
+				if (res.status === 401 || res.status === 403) break;
+			} catch {}
+		}
+		return null;
+	}
 	/**
 	* Fetch available models and model-level quotas via v1internal:fetchAvailableModels.
 	*/
@@ -32232,7 +32996,7 @@ var QuotaService = class {
 					body: JSON.stringify({})
 				}, proxyUrl);
 				if (res.ok) {
-					this.preferredEndpointIndex = AGY_ENDPOINTS.indexOf(endpoint);
+					if (AGY_ENDPOINTS.indexOf(endpoint) === 0) this.preferredEndpointIndex = 0;
 					return await res.json();
 				}
 				if (res.status === 401 || res.status === 403) break;
@@ -32263,15 +33027,30 @@ var QuotaService = class {
 			}
 		}
 		let email = account.email;
-		if (account.systemHome || !email) {
+		if ((account.systemHome || !account.dir) && process.platform === "win32") {
+			const stored = readPrimaryCredential(this.pool.dir);
+			if (stored?.email) email = stored.email;
+		}
+		if (!email) {
 			const detected = detectEmailFromAgyLogs(home);
-			if (detected) email = detected;
+			const siblingEmails = new Set(this.pool.getAccounts().filter((a) => a.id !== account.id && a.email).map((a) => a.email));
+			if (detected && !siblingEmails.has(detected)) email = detected;
 		}
 		const accessToken = await this.getValidAccessToken(account);
 		if (!accessToken) return null;
 		if (force) {
 			const info = await this.fetchUserInfo(accessToken, this.proxyFor(account));
-			if (info?.email) email = info.email;
+			if (info?.email) {
+				email = info.email;
+				if ((account.systemHome || !account.dir) && process.platform === "win32") {
+					const stored = readPrimaryCredential(this.pool.dir);
+					if (stored && stored.email !== info.email) writePrimaryCredential({
+						...stored,
+						email: info.email,
+						savedAt: Date.now()
+					}, this.pool.dir);
+				}
+			}
 		}
 		if (email && email !== account.email) {
 			if (Boolean(account.dir) && this.pool.getAccounts().some((other) => other.id !== account.id && other.email !== void 0 && other.email === email && other.dir !== account.dir)) {
@@ -32280,18 +33059,47 @@ var QuotaService = class {
 			}
 			this.pool.resetAccountIdentity(account.id, email);
 		}
-		const [summary, discovered] = await Promise.all([this.fetchQuotaSummary(accessToken, this.proxyFor(account)), this.fetchAvailableModels(accessToken, this.proxyFor(account))]);
+		const [summary, discovered, userQuota] = await Promise.all([
+			this.fetchQuotaSummary(accessToken, this.proxyFor(account)),
+			this.fetchAvailableModels(accessToken, this.proxyFor(account)),
+			this.fetchUserQuota(accessToken, this.proxyFor(account)).catch(() => null)
+		]);
 		if (!email) {
 			const info = await this.fetchUserInfo(accessToken, this.proxyFor(account));
 			if (info?.email) email = info.email;
 		}
-		if (!summary && (!discovered || !discovered.models)) return null;
+		const modelsCatalog = { ...discovered?.models || {} };
+		if (userQuota && Array.isArray(userQuota.buckets)) for (const b of userQuota.buckets) {
+			if (!b.modelId) continue;
+			const frac = typeof b.remainingFraction === "number" && Number.isFinite(b.remainingFraction) ? Math.min(1, Math.max(0, b.remainingFraction)) : void 0;
+			if (frac !== void 0) {
+				const existing = modelsCatalog[b.modelId];
+				modelsCatalog[b.modelId] = {
+					...existing,
+					quotaInfo: {
+						remainingFraction: frac,
+						resetTime: b.resetTime || existing?.quotaInfo?.resetTime
+					}
+				};
+			}
+		}
+		if (!summary && Object.keys(modelsCatalog).length === 0) return null;
 		if (account.authRequired) this.pool.clearAuthRequired(account.id);
 		const familyQuotas = {};
-		if (summary && Array.isArray(summary.groups)) for (const group of summary.groups) {
+		const stale5hFamilies = /* @__PURE__ */ new Set();
+		const summaryGroups = [];
+		if (summary) {
+			if (Array.isArray(summary.groups)) summaryGroups.push(...summary.groups);
+			if (Array.isArray(summary.buckets) && summary.buckets.length > 0) summaryGroups.push({
+				displayName: summary.description || "Quota",
+				buckets: summary.buckets
+			});
+		}
+		if (summaryGroups.length > 0) for (const group of summaryGroups) {
 			const dName = (group.displayName || "").toLowerCase();
 			const desc = (group.description || "").toLowerCase();
-			const isArgon = dName.includes("argon") || desc.includes("argon");
+			const hasArgonBucket = Array.isArray(group.buckets) && group.buckets.some((b) => (b.bucketId || "").toLowerCase().includes("argon") || (b.displayName || "").toLowerCase().includes("argon"));
+			const isArgon = dName.includes("argon") || desc.includes("argon") || hasArgonBucket;
 			const isGoogle = !isArgon && (dName.includes("gemini") || desc.includes("gemini"));
 			const is3P = dName.includes("claude") || dName.includes("gpt") || desc.includes("claude") || desc.includes("gpt");
 			const targetFamilies = isArgon ? ["argon"] : isGoogle ? ["google"] : is3P ? ["anthropic", "openai"] : [];
@@ -32310,17 +33118,20 @@ var QuotaService = class {
 					weeklyReset = b.resetTime;
 				}
 			}
-			for (const fam of targetFamilies) familyQuotas[fam] = {
-				remainingFraction: fiveHourFrac,
-				resetTime: fiveHourReset,
-				weeklyFraction: weeklyFrac,
-				weeklyResetTime: weeklyReset,
-				description: group.description,
-				updatedAt: now
-			};
+			for (const fam of targetFamilies) {
+				if (isStale5hBucket(fiveHourFrac, fiveHourReset, now)) stale5hFamilies.add(fam);
+				familyQuotas[fam] = {
+					remainingFraction: fiveHourFrac,
+					resetTime: fiveHourReset,
+					weeklyFraction: weeklyFrac,
+					weeklyResetTime: weeklyReset,
+					description: group.description,
+					updatedAt: now
+				};
+			}
 		}
 		const familyModels = {};
-		if (discovered && discovered.models) for (const [modelId, entry] of Object.entries(discovered.models)) {
+		if (Object.keys(modelsCatalog).length > 0) for (const [modelId, entry] of Object.entries(modelsCatalog)) {
 			const fam = modelFamilyOf(modelId);
 			if (fam === "unknown") continue;
 			const rawRemaining = entry.quotaInfo?.remainingFraction;
@@ -32334,18 +33145,26 @@ var QuotaService = class {
 				remainingFraction: remaining,
 				resetTime
 			});
-			if (!familyQuotas[fam]) familyQuotas[fam] = mergeFallbackFamilyQuota(account.quotas[fam], {
-				remainingFraction: remaining,
-				resetTime,
-				updatedAt: now
-			});
-			else if (familyQuotas[fam].remainingFraction === void 0) {
-				const curRemaining = familyQuotas[fam].remainingFraction ?? 1;
-				if (remaining < curRemaining) {
+			const isStale = stale5hFamilies.has(fam);
+			if (!familyQuotas[fam]) {
+				familyQuotas[fam] = mergeFallbackFamilyQuota(account.quotas[fam], {
+					remainingFraction: remaining,
+					resetTime,
+					updatedAt: now
+				});
+				if (fam === "argon" && familyQuotas[fam].weeklyFraction === void 0) {
+					familyQuotas[fam].weeklyFraction = remaining;
+					familyQuotas[fam].weeklyResetTime = resetTime;
+				}
+			} else {
+				if (remaining < (familyQuotas[fam].remainingFraction ?? 1) || isStale) {
 					familyQuotas[fam].remainingFraction = remaining;
 					familyQuotas[fam].resetTime = resetTime;
-				} else if (remaining === curRemaining) {
-					if (resetTime && (!familyQuotas[fam].resetTime || Date.parse(resetTime) > Date.parse(familyQuotas[fam].resetTime))) familyQuotas[fam].resetTime = resetTime;
+					stale5hFamilies.delete(fam);
+				}
+				if (fam === "argon" && familyQuotas[fam].weeklyFraction === void 0) {
+					familyQuotas[fam].weeklyFraction = remaining;
+					familyQuotas[fam].weeklyResetTime = resetTime;
 				}
 			}
 		}
@@ -32376,7 +33195,17 @@ var QuotaService = class {
 			for (const acc of accounts) {
 				const flagged = acc.authRequired || Object.values(acc.cooldowns ?? {}).some((cd) => cd && cd.cooldownUntil > now);
 				if (!acc.systemHome || !flagged) continue;
-				const detected = detectEmailFromAgyLogs(acc.systemHome || !acc.dir ? homedir() : acc.dir);
+				const home = acc.systemHome || !acc.dir ? homedir() : acc.dir;
+				let detected;
+				if (process.platform === "win32") {
+					const stored = readPrimaryCredential(this.pool.dir);
+					if (stored?.email) detected = stored.email;
+				}
+				if (!detected) {
+					const fromLogs = detectEmailFromAgyLogs(home);
+					const siblingEmails = new Set(this.pool.getAccounts().filter((a) => a.id !== acc.id && a.email).map((a) => a.email));
+					if (fromLogs && !siblingEmails.has(fromLogs)) detected = fromLogs;
+				}
 				if (detected && detected !== acc.email) this.pool.resetAccountIdentity(acc.id, detected);
 			}
 			accounts = accounts.filter((acc) => shouldPollAccount(acc) || needsAuthReverify(acc));
@@ -32760,7 +33589,7 @@ function resolveAssetDir() {
 	for (const c of candidates) if (existsSync(c)) return c;
 	return join(currentDir, "assets");
 }
-/** Cross-session concurrency limiter (ADR-12). */
+/** Cross-session concurrency limiter (ADR-12). max() <= 0 means unlimited. */
 var Semaphore = class {
 	max;
 	active = 0;
@@ -32770,7 +33599,12 @@ var Semaphore = class {
 	}
 	async acquire(signal) {
 		if (signal?.aborted) throw new Error("aborted before semaphore acquisition");
-		if (this.active < Math.max(1, this.max())) {
+		const limit = this.max();
+		if (limit <= 0) {
+			this.active++;
+			return () => this.releaseOne();
+		}
+		if (this.active < limit) {
 			this.active++;
 			return () => this.releaseOne();
 		}
@@ -32854,10 +33688,14 @@ function apply(ctx, entryConfig = {}) {
 			stdout: out.stdout,
 			stderr: out.stderrTail
 		};
-	}, getConfig().fallbackModels, 3e5, notifyPicker);
+	}, getConfig().fallbackModels, getConfig().modelsCacheTtlMs, notifyPicker);
 	const auth = new AuthHelper(bin);
 	const poolAuth = new PoolAuthFlow(pool, quota, log);
 	const runs = new RunRegistry();
+	try {
+		const validAccIds = new Set(pool.getAccounts().map((a) => a.id));
+		store.cleanupStaleAccounts(validAccIds);
+	} catch {}
 	const swept = pool.sweepStaleStaging();
 	if (swept > 0) log("swept " + swept + " stale staging dir(s)");
 	const logsSwept = pool.sweepOldLogs(getConfig().logRetentionDays);
@@ -32896,10 +33734,23 @@ function apply(ctx, entryConfig = {}) {
 			return ctx.get("sessions")?.get(sessionId)?.header?.cwd;
 		},
 		sessionGoal: (sessionId) => {
+			try {
+				const agents = ctx.get("agents") ?? ctx.agents;
+				const goals = ctx.get("goals") ?? ctx.goals;
+				const agent = agents?.get(sessionId);
+				if (agent && goals) {
+					const g = goals.get(agent);
+					if (g?.id && g.phase === "active" && (g.activation === void 0 || g.activation === "armed")) return {
+						goalId: g.id,
+						revision: typeof g.revision === "number" ? g.revision : 1
+					};
+				}
+			} catch {}
 			const session = (ctx.get("sessions") ?? ctx.sessions)?.get(sessionId);
-			if (!session?.events) return null;
-			for (let i = session.events.length - 1; i >= 0; i--) {
-				const ev = session.events[i];
+			const evs = session?.snapshotEvents?.() ?? session?.ownEvents?.() ?? session?.log ?? session?.events;
+			if (!evs) return null;
+			for (let i = evs.length - 1; i >= 0; i--) {
+				const ev = evs[i];
 				if (ev?.type === "goal/change" && ev.data && typeof ev.data === "object") {
 					const d = ev.data;
 					if (d.operation === "clear") return null;
@@ -33128,7 +33979,7 @@ function apply(ctx, entryConfig = {}) {
 						askTool: cfg.askTool,
 						auth: auth.status(),
 						poolAuth: poolAuth.status(),
-						pool: pool.getPoolData(),
+						pool: pool.getPoolData(cfg.proxyUrl?.trim() || void 0),
 						catalog: {
 							source: cat.source,
 							count: cat.models.length,
@@ -33232,7 +34083,7 @@ function apply(ctx, entryConfig = {}) {
 			kind: "exact",
 			path: "/plugins/agy-link/pool",
 			handler: (_req, res) => {
-				sendJson(res, 200, pool.getPoolData());
+				sendJson(res, 200, pool.getPoolData(getConfig().proxyUrl.trim() || void 0));
 			}
 		});
 		reg({
@@ -33633,7 +34484,6 @@ function apply(ctx, entryConfig = {}) {
 		if (!getConfig().enabled) return () => void 0;
 		const refresh = () => {
 			quota.refreshAllQuotas().catch(() => void 0);
-			catalog.refreshIfNeeded().catch(() => void 0);
 		};
 		const boot = setTimeout(refresh, 5e3);
 		boot.unref?.();