dsh-agy-link 0.4.59 → 0.4.66

package/docs/KNOWN-GAPS.md

@@ -8,17 +8,59 @@ Deliberate v1 boundaries and upstream-behavior notes.
   slot over (issue #45)** — agy on Windows resolves its Google credential from
   ONE process-global Credential Manager slot `gemini:antigravity`
   (go-keyring); `HOME`/`USERPROFILE`/`GEMINI_CLI_HOME` move files only. Rather
-  than pretending the pool is isolated, the plugin now owns the slot: the
-  primary credential is kept in a durable, identity-verified store
+  than pretending the pool is isolated, the plugin owns the slot: the primary
+  credential is kept in a durable, identity-verified store
   (`agy-accounts/.primary-credential.json`), and every run acquires the slot
-  through `acquireCredentialSlot` — a process-wide FIFO mutex that writes the
-  target account's verified credential into the slot, then restores the
-  primary's on release. `SlotUnavailableError` aborts a run instead of letting
-  it silently spend the wrong account when the primary cannot be verified.
-  Remaining boundary: the mutex is **per process**, so two DSH hosts (web +
-  headless) running agy at the same moment can still interleave slot writes;
-  keep `maxConcurrent` at 1 on Windows and avoid driving two hosts at once.
-  A cleaner upstream fix would be per-HOME keyring namespacing in agy.
+  through `acquireCredentialSlot`.
+  - **Same-identity runs are parallel (v0.4.60).** The installed identity is
+    reference-counted: the first run on an account performs the handoff and
+    keeps the mutex, later runs on the same grant join as fast leases (each
+    verifies the slot still carries that grant), and runs already QUEUED for
+    the slot join too — they poll every 100ms and take a lease as soon as their
+    own grant is installed, so a backlog drains in parallel. The LAST holder
+    persists a rotated access token and restores the primary. Only identity
+    SWITCHES serialize — a switcher registers its claim BEFORE queueing, and
+    new same-identity joins are refused while a different identity waits.
+  - `SlotUnavailableError` aborts a run instead of letting it silently spend
+    the wrong account when the primary cannot be verified.
+  - Remaining boundary: the mutex is **per process**, so two DSH hosts (web +
+    headless) running agy at the same moment can still interleave slot writes;
+    avoid driving two hosts at once.
+
+## Credential injection: what agy actually supports (verified 2026-10-17)
+
+The clean fix for the Windows boundary above would be per-process credential
+injection (each account's HOME carries its own credential, no global slot, no
+mutex, identical on macOS/Linux/Windows). It is NOT available in the current
+agy build — measured, not assumed:
+
+- **The per-HOME token file is a BACKUP, not the source.** A fresh isolated
+  HOME containing a deliberately bogus
+  `.gemini/antigravity-cli/antigravity-oauth-token` still authenticated from the
+  machine keyring and completed a prompt (exit 0, `OK`), and the bogus file was
+  left untouched. With the keyring present, writing per-account token files
+  does not isolate identities. (`fileTokenStorage` exists but is only a
+  fallback when keyring save/load times out or is unavailable.)
+- **No credential CLI flag**: `agy --help` exposes no `--api-key` /
+  `--credential*` / `--token*` option.
+- **Documented env routes are different auth products**: `AGY_ADC_AUTH`
+  (Application Default Credentials / Agent Platform), and
+  `GEMINI_API_KEY` + `"modelProvider": "gemini"` in `settings.json` (the Gemini
+  API, not Antigravity subscription quota).
+- `AGY_ACCOUNT` selects among *plugin/manager* accounts, not CLI sign-ins.
+
+Therefore a true fix must come from agy itself, either of:
+
+1. **Namespace the keyring entry by HOME** — derive the go-keyring
+   service/user from the resolved home (e.g. `gemini:antigravity:<hash>`), so
+   an isolated HOME really is an isolated credential space. Needs a migration
+   path for the existing single entry.
+2. **Accept a per-process credential** — a `--credential-file` flag (or a
+   documented env var) that points at the account's token document, bypassing
+   the keyring entirely.
+
+Either one retires `credential-slot.ts` and the dispatch queue; until then the
+reference-counted slot is the strongest isolation the plugin can provide.
 
 ## Not forwarded to agy
 

package/icon.svg

@@ -0,0 +1,54 @@
+<svg width="36" height="36" viewBox="0 0 36 36" fill="none" xmlns="http://www.w3.org/2000/svg">
+  <defs>
+    <!-- Core Orb Gradient -->
+    <linearGradient id="agy-orb-gradient" x1="12" y1="11" x2="25" y2="25" gradientUnits="userSpaceOnUse">
+      <stop offset="0%" stop-color="#38BDF8"/>
+      <stop offset="45%" stop-color="#6366F1"/>
+      <stop offset="85%" stop-color="#9333EA"/>
+      <stop offset="100%" stop-color="#C026D3"/>
+    </linearGradient>
+
+    <!-- Front Orbit Ring Gradient (Glowing Vibrant Gradient) -->
+    <linearGradient id="agy-ring-front" x1="6" y1="24" x2="31" y2="12" gradientUnits="userSpaceOnUse">
+      <stop offset="0%" stop-color="#00D2FF"/>
+      <stop offset="40%" stop-color="#38BDF8"/>
+      <stop offset="70%" stop-color="#818CF8"/>
+      <stop offset="100%" stop-color="#F43F5E"/>
+    </linearGradient>
+
+    <!-- Back Orbit Ring Gradient (Subtle Occluded Depth) -->
+    <linearGradient id="agy-ring-back" x1="7" y1="12" x2="29" y2="24" gradientUnits="userSpaceOnUse">
+      <stop offset="0%" stop-color="#38BDF8" stop-opacity="0.35"/>
+      <stop offset="100%" stop-color="#A855F7" stop-opacity="0.35"/>
+    </linearGradient>
+
+    <!-- Specular Highlight Curve -->
+    <linearGradient id="agy-highlight-grad" x1="14" y1="12" x2="19" y2="18" gradientUnits="userSpaceOnUse">
+      <stop offset="0%" stop-color="#FFFFFF" stop-opacity="0.6"/>
+      <stop offset="100%" stop-color="#FFFFFF" stop-opacity="0.05"/>
+    </linearGradient>
+  </defs>
+
+  <!-- Back Segment of Orbit Ring (passes behind central sphere) -->
+  <path d="M 6.8 14.2 C 8.2 9.6 17.8 7.2 26.2 10.8 C 28.0 11.6 29.3 12.6 30.2 13.8" 
+        stroke="url(#agy-ring-back)" stroke-width="2.4" stroke-linecap="round"/>
+
+  <!-- Central Antigravity Sphere -->
+  <circle cx="18" cy="18" r="7.5" fill="url(#agy-orb-gradient)"/>
+
+  <!-- Elegant Crescent Specular Highlight (adds glass/liquid depth) -->
+  <path d="M 13.2 15.2 A 5.5 5.5 0 0 1 21.0 13.0 A 6.2 6.2 0 0 0 14.0 18.0 Z" 
+        fill="url(#agy-highlight-grad)"/>
+
+  <!-- Front Segment of Orbit Ring (sweeps in front with vibrant glow) -->
+  <path d="M 30.2 13.8 C 31.4 18.2 21.8 26.2 12.8 24.2 C 9.4 23.4 7.4 21.8 6.6 19.6" 
+        stroke="url(#agy-ring-front)" stroke-width="2.6" stroke-linecap="round"/>
+
+  <!-- Left Satellite Node (DSH Cyan Anchor) -->
+  <circle cx="8.2" cy="18.2" r="2.2" fill="#00D2FF"/>
+  <circle cx="8.2" cy="18.2" r="1.0" fill="#FFFFFF"/>
+
+  <!-- Right Satellite Node (Antigravity Magenta Particle) -->
+  <circle cx="28.4" cy="20.4" r="1.8" fill="#F43F5E"/>
+  <circle cx="28.4" cy="20.4" r="0.8" fill="#FFFFFF"/>
+</svg>

package/locale/en.json

@@ -0,0 +1,6 @@
+{
+  "meta": {
+    "title": "Antigravity Link",
+    "description": "Stream Gemini / Claude / GPT-OSS subscriptions from Google Antigravity (agy CLI) into DSH — multi-account pool, live quota dashboards, thinking, tool activity and in-GUI Google OAuth."
+  }
+}

package/locale/es.json

@@ -0,0 +1,6 @@
+{
+  "meta": {
+    "title": "Antigravity Link",
+    "description": "Conecta las suscripciones Gemini / Claude / GPT-OSS de Google Antigravity (agy CLI) en DSH: pool multiejecución, panel de cuotas en vivo, razonamiento, actividad de herramientas y OAuth de Google en la GUI."
+  }
+}

package/locale/pt-BR.json

@@ -0,0 +1,6 @@
+{
+  "meta": {
+    "title": "Antigravity Link",
+    "description": "Traz as assinaturas Gemini / Claude / GPT-OSS do Google Antigravity (agy CLI) para o DSH: pool multi-conta, painel de cotas ao vivo, raciocínio, atividade de ferramentas e OAuth do Google na GUI."
+  }
+}

package/locale/zh.json

@@ -0,0 +1,6 @@
+{
+  "meta": {
+    "title": "Antigravity 桥接",
+    "description": "把 Google Antigravity（agy CLI）的 Gemini / Claude / GPT-OSS 订阅接入 DSH：多账号池、实时额度大盘、思考流、工具活动与 GUI 内 Google 登录。"
+  }
+}

package/package.json

@@ -1,9 +1,10 @@
 {
   "name": "dsh-agy-link",
-  "version": "0.4.59",
+  "version": "0.4.66",
   "description": "Google Antigravity (agy CLI) models for DeepSeek Harness — stream Gemini/Claude/GPT-OSS subscriptions into DSH with thinking, tool activity, token usage and in-GUI Google OAuth login.",
   "type": "module",
   "license": "MIT",
+  "icon": "./assets/icon.svg",
   "keywords": [
     "dsh-plugin",
     "dsh",
@@ -21,7 +22,10 @@
     },
     "./client": "./dist/client.js",
     "./cordis.patch.yml": "./cordis.patch.yml",
-    "./package.json": "./package.json"
+    "./package.json": "./package.json",
+    "./locale/*.json": "./locale/*.json",
+    "./icon": "./assets/icon.svg",
+    "./icon.svg": "./icon.svg"
   },
   "dependencies": {
     "qrcode": "^1.5.4"
@@ -81,6 +85,8 @@
   "files": [
     "dist",
     "assets",
+    "locale",
+    "icon.svg",
     "cordis.patch.yml",
     "README.md",
     "LICENSE",