dsh-agy 0.2.11 → 0.3.0

package/lib/web/plugin.mjs

@@ -1,1201 +1,515 @@
-import { i as normalizeProxyUrl, n as isProxyReachable, o as proxyUrlForLogs, t as accountFetch } from "../proxy-DLvX8yxv.mjs";
-import { d as isAgyDisabled, f as generateFingerprint, h as resolveAntigravityVersionBounded, n as maskProxyUrl, p as recordFingerprintVersion } from "../accounts-C0Oj3tQA.mjs";
-import { t as createAgyRuntime } from "../plugin-common-DtF_PyxH.mjs";
-import { t as exchangeAntigravity } from "../exchange-dQm2mjJ5.mjs";
-import { n as upsertImportedAccount, r as authorizeAntigravity, t as importManySources } from "../import-D7R0GpRr.mjs";
-//#region src/web/i18n.ts
-const I18N_DICT = {
-	en: {
-		title: "Antigravity Account Pool",
-		subtitle: "Manage multi-account rotation, quota monitoring, and credentials.",
-		refresh: "Refresh",
-		loginWithGoogle: "Login with Google",
-		switchLang: "中文",
-		accountsList: "Accounts",
-		noAccounts: "No accounts configured",
-		noAccountsHint: "Click \"Login with Google\" or import credentials below to get started.",
-		activeBadge: "Active",
-		stateActive: "Healthy",
-		stateCooling: "Cooling Down",
-		stateRateLimited: "Rate Limited",
-		stateVerificationRequired: "Verification Required",
-		stateDisabled: "Disabled",
-		project: "Project",
-		defaultProject: "default",
-		activate: "Set Active",
-		verify: "Verify",
-		verifyCta: "Verify Now",
-		testAll: "Test All Models",
-		exportBlob: "Export Blob",
-		fingerprint: "Fingerprint",
-		deleteAccount: "Delete Account",
-		confirmDelete: "Are you sure you want to delete this account? This action cannot be undone.",
-		confirmTestAll: "Test All will execute real API calls on all models, consuming actual quota. Continue?",
-		confirmRegenerateFp: "Generate a fresh device fingerprint and user agent for this account?",
-		quotaTitle: "Model Quotas",
-		quotaUnavailable: "Quota information unavailable for this account",
-		noQuotaReported: "No quota reported by upstream",
-		testModel: "Test",
-		testing: "Testing...",
-		copied: "Copied to clipboard!",
-		importTitle: "Import Credentials",
-		importDesc: "Paste an agy auth.json token document, or a credential blob (from dsh-agy login --blob). Paste multiple blobs, one per line, for a batch import:",
-		importPlaceholder: "{\"token\":{\"access_token\":\"...\",\"refresh_token\":\"...\"}} or dsh-agy-cred-v1.... (one blob per line for batch)",
-		importJson: "Import JSON",
-		importBlobBtn: "Import Blob",
-		importSuccess: "Successfully imported account: ",
-		exportAll: "Export All",
-		importBatchResult: "Imported {imported}, replaced {replaced}",
-		copyAllMsg: "All credential blobs exported. Copied to clipboard!",
-		fingerprintTitle: "Device Fingerprint",
-		fingerprintDevice: "Device ID",
-		fingerprintUserAgent: "User Agent",
-		fingerprintCreated: "Generated At",
-		fingerprintHistory: "Fingerprint Versions",
-		regenerateFp: "Regenerate Fingerprint",
-		copyBlobMsg: "Credential blob exported. Copied to clipboard!",
-		copyFpMsg: "Device fingerprint details loaded.",
-		allModelsOk: "All model tests passed!",
-		modelsTestedSummary: "Completed testing {total} models: {ok} passed, {failed} failed.",
-		loginSuccessTitle: "Sign-in Successful",
-		loginSuccessDesc: "Your Antigravity account has been authorized and saved.",
-		loginFailedTitle: "Sign-in Failed",
-		loginFailedDesc: "Unable to complete authorization. Error details:",
-		windowClosing: "This window will close automatically in a moment...",
-		closeWindow: "Close Window",
-		retryLogin: "Return to Dashboard",
-		resetIn: "Resets in ",
-		resetAt: "Resets at "
-	},
-	zh: {
-		title: "Antigravity 账号池管理",
-		subtitle: "多账号智能轮换、配额实时监控与凭据指纹管理。",
-		refresh: "刷新",
-		loginWithGoogle: "Google 账号登录",
-		switchLang: "EN",
-		accountsList: "账号列表",
-		noAccounts: "暂无配置账号",
-		noAccountsHint: "点击上方“Google 账号登录”或在下方粘贴凭据以添加账号。",
-		activeBadge: "当前使用",
-		stateActive: "正常",
-		stateCooling: "冷却中",
-		stateRateLimited: "已限流",
-		stateVerificationRequired: "需要验证",
-		stateDisabled: "已禁用",
-		project: "项目 ID",
-		defaultProject: "默认项目",
-		activate: "设为默认",
-		verify: "验证账号",
-		verifyCta: "立即验证",
-		testAll: "测试全部模型",
-		exportBlob: "导出凭据 Blob",
-		fingerprint: "设备指纹",
-		deleteAccount: "删除账号",
-		confirmDelete: "确定要删除此账号吗？该操作不可撤销。",
-		confirmTestAll: "批量测试将对所有模型发起真实调用并消耗 API 配额，确认继续？",
-		confirmRegenerateFp: "确定要为该账号重新生成全新的设备指纹与 User-Agent 吗？",
-		quotaTitle: "模型配额池",
-		quotaUnavailable: "无法获取该账号的模型配额信息",
-		noQuotaReported: "上游未返回配额信息",
-		testModel: "测试",
-		testing: "测试中...",
-		copied: "已复制到剪贴板！",
-		importTitle: "导入凭据",
-		importDesc: "粘贴 agy auth.json 文件内容，或输入凭据 blob（来自 dsh-agy login --blob）。多个 blob 每行一个即可批量导入：",
-		importPlaceholder: "{\"token\":{\"access_token\":\"...\",\"refresh_token\":\"...\"}} 或 dsh-agy-cred-v1....（批量：每行一个 blob）",
-		importJson: "导入 JSON",
-		importBlobBtn: "导入 Blob",
-		importSuccess: "成功导入账号：",
-		exportAll: "导出全部",
-		importBatchResult: "导入 {imported} 个，替换 {replaced} 个",
-		copyAllMsg: "全部凭据 Blob 已导出并复制到剪贴板！",
-		fingerprintTitle: "设备指纹信息",
-		fingerprintDevice: "设备 ID (DeviceId)",
-		fingerprintUserAgent: "用户代理 (User-Agent)",
-		fingerprintCreated: "生成时间",
-		fingerprintHistory: "历史版本数",
-		regenerateFp: "重新生成指纹",
-		copyBlobMsg: "凭据 Blob 已成功导出并复制到剪贴板！",
-		copyFpMsg: "设备指纹信息已加载。",
-		allModelsOk: "所有模型可用性测试通过！",
-		modelsTestedSummary: "完成 {total} 个模型测试：{ok} 个可用，{failed} 个失败。",
-		loginSuccessTitle: "授权登录成功",
-		loginSuccessDesc: "Antigravity 账号已成功接入并保存。",
-		loginFailedTitle: "授权登录失败",
-		loginFailedDesc: "无法完成 OAuth 授权，错误详情：",
-		windowClosing: "此窗口即将在 2 秒内自动关闭...",
-		closeWindow: "立即关闭窗口",
-		retryLogin: "返回控制面板",
-		resetIn: "将在 ",
-		resetAt: "重置时间："
-	}
-};
-//#endregion
-//#region src/web/page.ts
+import { p as currentAgyVersion } from "../constants-Db4tmyfb.mjs";
+import { i as normalizeProxyUrl, n as isProxyReachable, s as proxyUrlForLogs } from "../proxy-DfaL73mL.mjs";
+import { a as generateFingerprint, i as isAgyDisabled, l as clearExpiredState, n as maskProxyUrl, o as recordFingerprintVersion } from "../accounts-CkaHhb5H.mjs";
+import "../models-BGuwl50d.mjs";
+import { a as THINKING_BUDGET_MAX, i as CLAUDE_BUDGET_MIN, n as foldWindowBreakdown, r as CLAUDE_BUDGET_MAX, t as createAgyRuntime } from "../plugin-common-B1MG00JT.mjs";
+import { t as exchangeAntigravity } from "../exchange-yZPIZumk.mjs";
+import { n as upsertImportedAccount, r as authorizeAntigravity, t as importManySources } from "../import-BaFULQnH.mjs";
+//#region src/web/management.ts
 /**
-* Web dashboard HTML/CSS/JS generator for dsh-agy.
-* Follows DeepSeek Harness (DSH) design system tokens and UX conventions.
+* agy management API: one method dispatcher shared by the RPC transport.
+*
+* Every method is a pure `(payload) => result` function so the transport stays
+* thin and the handlers stay testable without HTTP. Failures throw; the
+* transport converts a thrown error into the RPC failure envelope.
+*
+* This module owns the OAuth pending-authorization state because `auth.url`
+* issues it and the callback route consumes it — they must share one map, and
+* splitting them would let a verifier and its callback drift apart.
 */
-function renderDashboardHtml() {
-	return `<!doctype html>
-<html lang="en">
-<head>
-  <meta charset="utf-8">
-  <meta name="viewport" content="width=device-width, initial-scale=1">
-  <title>agy — Antigravity Accounts</title>
-  <style>
-    /* DSH Design System Tokens snapshot (ui-theme / design-platform) */
-    :root {
-      color-scheme: light dark;
-      --dsw-font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', 'PingFang SC', 'Hiragino Sans GB', 'Microsoft YaHei', 'Helvetica Neue', Helvetica, Arial, sans-serif;
-      --ds-font-family-code: 'SF Mono', 'JetBrains Mono', 'Fira Code', Consolas, 'Liberation Mono', Menlo, Courier, monospace;
-      --ds-ease-in-out: cubic-bezier(0.4, 0, 0.2, 1);
-      --ds-transition-fast: 0.12s var(--ds-ease-in-out);
-      --ds-transition-normal: 0.2s var(--ds-ease-in-out);
-
-      /* Light Theme Defaults */
-      --bg-page: #f8fafc;
-      --bg-surface: #ffffff;
-      --bg-surface-elevated: #f1f5f9;
-      --bg-surface-hover: #f1f5f9;
-      --bg-input: #ffffff;
-      --border-l1: rgba(0, 0, 0, 0.06);
-      --border-l2: rgba(0, 0, 0, 0.12);
-      --border-l3: rgba(0, 0, 0, 0.2);
-      --text-primary: #0f172a;
-      --text-secondary: #475569;
-      --text-tertiary: #94a3b8;
-      --text-dimmed: #cbd5e1;
-
-      --brand-primary: #4176e6;
-      --brand-hover: #3362c4;
-      --brand-surface: rgba(65, 118, 230, 0.1);
-      
-      --state-success: #22c55e;
-      --state-success-bg: rgba(34, 197, 94, 0.12);
-      --state-warn: #f59e0b;
-      --state-warn-bg: rgba(245, 158, 11, 0.12);
-      --state-error: #ef4444;
-      --state-error-bg: rgba(239, 68, 68, 0.12);
-      
-      --shadow-sm: 0 1px 2px 0 rgba(0, 0, 0, 0.05);
-      --shadow-md: 0 4px 6px -1px rgba(0, 0, 0, 0.1), 0 2px 4px -2px rgba(0, 0, 0, 0.1);
-      --shadow-lg: 0 10px 15px -3px rgba(0, 0, 0, 0.1), 0 4px 6px -4px rgba(0, 0, 0, 0.1);
-    }
-
-    @media (prefers-color-scheme: dark) {
-      :root {
-        --bg-page: #0f1115;
-        --bg-surface: #171a21;
-        --bg-surface-elevated: #20242e;
-        --bg-surface-hover: #262b37;
-        --bg-input: #12141a;
-        --border-l1: rgba(255, 255, 255, 0.06);
-        --border-l2: rgba(255, 255, 255, 0.12);
-        --border-l3: rgba(255, 255, 255, 0.22);
-        --text-primary: #f8fafc;
-        --text-secondary: #94a3b8;
-        --text-tertiary: #64748b;
-        --text-dimmed: #475569;
-
-        --brand-primary: #5686fe;
-        --brand-hover: #4176e6;
-        --brand-surface: rgba(86, 134, 254, 0.15);
-
-        --state-success: #34d399;
-        --state-success-bg: rgba(52, 211, 153, 0.15);
-        --state-warn: #fbbf24;
-        --state-warn-bg: rgba(251, 191, 36, 0.15);
-        --state-error: #f87171;
-        --state-error-bg: rgba(248, 113, 113, 0.15);
-
-        --shadow-sm: 0 1px 3px 0 rgba(0, 0, 0, 0.4);
-        --shadow-md: 0 4px 6px -1px rgba(0, 0, 0, 0.5);
-        --shadow-lg: 0 10px 15px -3px rgba(0, 0, 0, 0.6);
-      }
-    }
-
-    * { box-sizing: border-box; margin: 0; padding: 0; }
-    body {
-      font-family: var(--dsw-font-family);
-      background-color: var(--bg-page);
-      color: var(--text-primary);
-      line-height: 1.5;
-      font-size: 14px;
-      padding: 24px 16px;
-      -webkit-font-smoothing: antialiased;
-    }
-    .container {
-      max-width: 1080px;
-      margin: 0 auto;
-      display: flex;
-      flex-direction: column;
-      gap: 20px;
-    }
-
-    /* Header */
-    .header {
-      display: flex;
-      justify-content: space-between;
-      align-items: center;
-      flex-wrap: wrap;
-      gap: 12px;
-      padding-bottom: 16px;
-      border-bottom: 1px solid var(--border-l1);
-    }
-    .header-title-group h1 {
-      font-size: 20px;
-      font-weight: 600;
-      letter-spacing: -0.01em;
-      color: var(--text-primary);
-      display: flex;
-      align-items: center;
-      gap: 8px;
-    }
-    .header-title-group p {
-      font-size: 13px;
-      color: var(--text-secondary);
-      margin-top: 2px;
-    }
-    .header-actions {
-      display: flex;
-      align-items: center;
-      gap: 8px;
-    }
-
-    /* Buttons (DSH Capsule Geometry) */
-    .btn {
-      display: inline-flex;
-      align-items: center;
-      justify-content: center;
-      gap: 6px;
-      font-family: inherit;
-      font-size: 13px;
-      font-weight: 500;
-      line-height: 20px;
-      height: 32px;
-      padding: 0 12px;
-      border-radius: 16px;
-      border: 1px solid transparent;
-      cursor: pointer;
-      transition: background-color var(--ds-transition-fast), border-color var(--ds-transition-fast), color var(--ds-transition-fast), opacity var(--ds-transition-fast);
-      white-space: nowrap;
-      user-select: none;
-    }
-    .btn:disabled {
-      cursor: not-allowed;
-      opacity: 0.45 !important;
-    }
-    .btn-sm {
-      height: 26px;
-      font-size: 12px;
-      padding: 0 9px;
-      border-radius: 13px;
-    }
-    .btn-primary {
-      background: var(--brand-primary);
-      color: #ffffff;
-    }
-    .btn-primary:hover:not(:disabled) {
-      background: var(--brand-hover);
-    }
-    .btn-secondary {
-      background: transparent;
-      border-color: var(--border-l2);
-      color: var(--text-primary);
-    }
-    .btn-secondary:hover:not(:disabled) {
-      background: var(--bg-surface-hover);
-      border-color: var(--border-l3);
-    }
-    .btn-cta {
-      background: var(--state-warn-bg);
-      border-color: var(--state-warn);
-      color: var(--state-warn);
-      font-weight: 600;
-      animation: pulse-border 2s infinite;
-    }
-    .btn-cta:hover:not(:disabled) {
-      background: var(--state-warn);
-      color: #ffffff;
-    }
-    @keyframes pulse-border {
-      0%, 100% { box-shadow: 0 0 0 0 rgba(245, 158, 11, 0.4); }
-      50% { box-shadow: 0 0 0 4px rgba(245, 158, 11, 0.15); }
-    }
-    .btn-danger {
-      background: transparent;
-      border-color: var(--border-l2);
-      color: var(--state-error);
-    }
-    .btn-danger:hover:not(:disabled) {
-      background: var(--state-error-bg);
-      border-color: var(--state-error);
-    }
-
-    /* Master-Detail Layout */
-    .main-grid {
-      display: grid;
-      grid-template-columns: 290px 1fr;
-      gap: 20px;
-      align-items: start;
-    }
-    @media (max-width: 780px) {
-      .main-grid {
-        grid-template-columns: 1fr;
-      }
-    }
-
-    /* Cards */
-    .card {
-      background: var(--bg-surface);
-      border: 1px solid var(--border-l2);
-      border-radius: 12px;
-      padding: 16px;
-      box-shadow: var(--shadow-sm);
-    }
-    .card-title {
-      font-size: 14px;
-      font-weight: 600;
-      color: var(--text-primary);
-      margin-bottom: 12px;
-      display: flex;
-      align-items: center;
-      justify-content: space-between;
-    }
-
-    /* Account List (Master) */
-    .account-list {
-      display: flex;
-      flex-direction: column;
-      gap: 8px;
-      list-style: none;
-    }
-    .account-item {
-      padding: 10px 12px;
-      border-radius: 8px;
-      border: 1px solid var(--border-l1);
-      background: var(--bg-surface);
-      cursor: pointer;
-      transition: all var(--ds-transition-fast);
-      display: flex;
-      flex-direction: column;
-      gap: 6px;
-    }
-    .account-item:hover {
-      background: var(--bg-surface-hover);
-      border-color: var(--border-l2);
-    }
-    .account-item.active-item {
-      background: var(--brand-surface);
-      border-color: var(--brand-primary);
-    }
-    .account-item-top {
-      display: flex;
-      align-items: center;
-      justify-content: space-between;
-      gap: 6px;
-    }
-    .account-email {
-      font-weight: 500;
-      font-size: 13px;
-      color: var(--text-primary);
-      overflow: hidden;
-      text-overflow: ellipsis;
-      white-space: nowrap;
-    }
-    .account-item-bottom {
-      display: flex;
-      align-items: center;
-      gap: 6px;
-      flex-wrap: wrap;
-    }
-
-    /* Badges & Pills */
-    .badge {
-      display: inline-flex;
-      align-items: center;
-      gap: 4px;
-      font-size: 11px;
-      font-weight: 500;
-      line-height: 16px;
-      padding: 1px 7px;
-      border-radius: 10px;
-    }
-    .badge-primary { background: var(--brand-surface); color: var(--brand-primary); }
-    .badge-success { background: var(--state-success-bg); color: var(--state-success); }
-    .badge-warn { background: var(--state-warn-bg); color: var(--state-warn); }
-    .badge-error { background: var(--state-error-bg); color: var(--state-error); }
-    .badge-neutral { background: var(--bg-surface-elevated); color: var(--text-secondary); }
-
-    .dot {
-      width: 7px;
-      height: 7px;
-      border-radius: 50%;
-      display: inline-block;
-      flex-shrink: 0;
-    }
-
-    /* Account Detail View */
-    .detail-head {
-      display: flex;
-      justify-content: space-between;
-      align-items: flex-start;
-      gap: 12px;
-      flex-wrap: wrap;
-      padding-bottom: 14px;
-      margin-bottom: 14px;
-      border-bottom: 1px solid var(--border-l1);
-    }
-    .detail-meta h2 {
-      font-size: 16px;
-      font-weight: 600;
-      display: flex;
-      align-items: center;
-      gap: 8px;
-    }
-    .detail-meta p {
-      font-size: 12px;
-      color: var(--text-secondary);
-      margin-top: 4px;
-    }
-    .detail-actions {
-      display: flex;
-      gap: 6px;
-      flex-wrap: wrap;
-    }
-
-    /* Quota Section */
-    .quota-table-wrap {
-      overflow-x: auto;
-      margin-top: 8px;
-    }
-    .quota-table {
-      width: 100%;
-      border-collapse: collapse;
-      font-size: 13px;
-    }
-    .quota-table th, .quota-table td {
-      padding: 8px 10px;
-      text-align: left;
-      border-bottom: 1px solid var(--border-l1);
-    }
-    .quota-table th {
-      font-size: 12px;
-      font-weight: 500;
-      color: var(--text-tertiary);
-      text-transform: uppercase;
-      letter-spacing: 0.03em;
-    }
-    .model-name {
-      font-family: var(--ds-font-family-code);
-      font-weight: 500;
-      font-size: 12.5px;
-      color: var(--text-primary);
-      cursor: pointer;
-      display: inline-flex;
-      align-items: center;
-      gap: 4px;
-    }
-    .model-name:hover {
-      color: var(--brand-primary);
-      text-decoration: underline;
-    }
-    .progress-bar {
-      background: var(--bg-surface-elevated);
-      border-radius: 4px;
-      height: 8px;
-      width: 110px;
-      overflow: hidden;
-      display: inline-block;
-      vertical-align: middle;
-      margin-right: 8px;
-    }
-    .progress-fill {
-      height: 100%;
-      border-radius: 4px;
-      transition: width var(--ds-transition-normal);
-    }
-    .reset-time {
-      font-size: 12px;
-      color: var(--text-tertiary);
-      white-space: nowrap;
-    }
-
-    /* Collapsible diagnostics */
-    details.diagnostics {
-      margin-top: 14px;
-      border: 1px solid var(--border-l1);
-      border-radius: 8px;
-      background: var(--bg-surface-elevated);
-      overflow: hidden;
-    }
-    details.diagnostics summary {
-      padding: 8px 12px;
-      font-size: 12.5px;
-      font-weight: 500;
-      color: var(--text-secondary);
-      cursor: pointer;
-      user-select: none;
-      display: flex;
-      align-items: center;
-      justify-content: space-between;
-    }
-    details.diagnostics summary:hover {
-      color: var(--text-primary);
-    }
-    .diagnostics-body {
-      padding: 12px;
-      border-top: 1px solid var(--border-l1);
-      display: flex;
-      flex-direction: column;
-      gap: 8px;
-    }
-    pre.code-view {
-      font-family: var(--ds-font-family-code);
-      font-size: 12px;
-      background: var(--bg-input);
-      border: 1px solid var(--border-l1);
-      border-radius: 6px;
-      padding: 10px;
-      overflow-x: auto;
-      word-break: break-all;
-      white-space: pre-wrap;
-      color: var(--text-secondary);
-    }
-
-    /* Import Form */
-    .import-section {
-      margin-top: 4px;
-    }
-    .import-textarea {
-      width: 100%;
-      font-family: var(--ds-font-family-code);
-      font-size: 12.5px;
-      padding: 10px 12px;
-      background: var(--bg-input);
-      border: 1px solid var(--border-l2);
-      border-radius: 8px;
-      color: var(--text-primary);
-      resize: vertical;
-      min-height: 70px;
-      outline: none;
-      transition: border-color var(--ds-transition-fast);
-      margin-bottom: 8px;
-    }
-    .import-textarea:focus {
-      border-color: var(--brand-primary);
-      box-shadow: 0 0 0 2px var(--brand-surface);
-    }
-
-    /* Toast Notification System */
-    #toast-container {
-      position: fixed;
-      bottom: 20px;
-      right: 20px;
-      z-index: 1000;
-      display: flex;
-      flex-direction: column;
-      gap: 8px;
-      max-width: 380px;
-      pointer-events: none;
-    }
-    .toast {
-      background: var(--bg-surface);
-      color: var(--text-primary);
-      border: 1px solid var(--border-l2);
-      border-radius: 8px;
-      padding: 10px 14px;
-      font-size: 13px;
-      box-shadow: var(--shadow-lg);
-      display: flex;
-      align-items: center;
-      justify-content: space-between;
-      gap: 10px;
-      pointer-events: auto;
-      animation: toast-in 0.2s var(--ds-ease-in-out);
-      transition: opacity 0.2s, transform 0.2s;
-    }
-    .toast-success { border-left: 4px solid var(--state-success); }
-    .toast-error { border-left: 4px solid var(--state-error); }
-    .toast-info { border-left: 4px solid var(--brand-primary); }
-    @keyframes toast-in {
-      from { transform: translateY(12px); opacity: 0; }
-      to { transform: translateY(0); opacity: 1; }
-    }
-  </style>
-</head>
-<body>
-  <div class="container">
-    <!-- Header -->
-    <header class="header">
-      <div class="header-title-group">
-        <h1>
-          <svg width="20" height="20" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" style="color:var(--brand-primary)"><circle cx="12" cy="12" r="10"></circle><path d="M12 2a14.5 14.5 0 0 0 0 20 14.5 14.5 0 0 0 0-20"></path><path d="M2 12h20"></path></svg>
-          <span id="txt-title">Antigravity Account Pool</span>
-        </h1>
-        <p id="txt-subtitle">Manage multi-account rotation, quota monitoring, and credentials.</p>
-      </div>
-      <div class="header-actions">
-        <button id="btn-lang" class="btn btn-secondary btn-sm" title="Toggle Language">中文</button>
-        <button id="btn-refresh" class="btn btn-secondary" title="Refresh accounts">
-          <svg width="14" height="14" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round"><path d="M3 12a9 9 0 0 1 9-9 9.75 9.75 0 0 1 6.74 2.74L21 8"></path><path d="M21 3v5h-5"></path><path d="M21 12a9 9 0 0 1-9 9 9.75 9.75 0 0 1-6.74-2.74L3 16"></path><path d="M8 16H3v5"></path></svg>
-          <span id="txt-refresh">Refresh</span>
-        </button>
-        <button id="btn-login" class="btn btn-primary">
-          <svg width="14" height="14" viewBox="0 0 24 24" fill="currentColor"><path d="M22.56 12.25c0-.78-.07-1.53-.2-2.25H12v4.26h5.92c-.26 1.37-1.04 2.53-2.21 3.31v2.77h3.57c2.08-1.92 3.28-4.74 3.28-8.09z" fill="#4285F4"/><path d="M12 23c2.97 0 5.46-.98 7.28-2.66l-3.57-2.77c-.98.66-2.23 1.06-3.71 1.06-2.86 0-5.29-1.93-6.16-4.53H2.18v2.84C3.99 20.53 7.7 23 12 23z" fill="#34A853"/><path d="M5.84 14.09c-.22-.66-.35-1.36-.35-2.09s.13-1.43.35-2.09V7.06H2.18C1.43 8.55 1 10.22 1 12s.43 3.45 1.18 4.94l2.85-2.22.81-.63z" fill="#FBBC05"/><path d="M12 5.38c1.62 0 3.06.56 4.21 1.64l3.15-3.15C17.45 2.09 14.97 1 12 1 7.7 1 3.99 3.47 2.18 7.06l3.66 2.84c.87-2.6 3.3-4.52 6.16-4.52z" fill="#EA4335"/></svg>
-          <span id="txt-login">Login with Google</span>
-        </button>
-      </div>
-    </header>
-
-    <!-- Main Workspace -->
-    <main class="main-grid">
-      <!-- Master: Account List -->
-      <section class="card">
-        <div class="card-title">
-          <span id="txt-accounts-list">Accounts</span>
-          <span id="account-total-badge" class="badge badge-neutral">0</span>
-        </div>
-        <ul id="account-list" class="account-list">
-          <li style="color:var(--text-tertiary);font-size:13px;padding:8px 0;" id="txt-loading">Loading accounts...</li>
-        </ul>
-      </section>
-
-      <!-- Detail: Selected Account Details -->
-      <section class="card" id="detail-card">
-        <div id="detail-content">
-          <p style="color:var(--text-tertiary);" id="txt-no-accounts-hint">Select or add an account to view details.</p>
-        </div>
-      </section>
-    </main>
-
-    <!-- Bottom: Import Section -->
-    <section class="card import-section">
-      <div class="card-title">
-        <span id="txt-import-title">Import Credentials</span>
-      </div>
-      <p style="font-size:12.5px;color:var(--text-secondary);margin-bottom:8px;" id="txt-import-desc">
-        Paste an agy auth.json token document, or a credential blob (from dsh-agy login --blob). Paste multiple blobs, one per line, for a batch import:
-      </p>
-      <textarea id="input-import" class="import-textarea" placeholder='{"token":{"access_token":"...","refresh_token":"..."}} or dsh-agy-cred-v1.... (one blob per line for batch)'></textarea>
-      <div style="display:flex;gap:8px;">
-        <button id="btn-import-json" class="btn btn-secondary">
-          <span id="txt-import-json">Import JSON</span>
-        </button>
-        <button id="btn-import-blob" class="btn btn-secondary">
-          <span id="txt-import-blob">Import Blob</span>
-        </button>
-        <span style="flex:1"></span>
-        <button id="btn-export-all" class="btn btn-secondary">
-          <span id="txt-export-all">Export All</span>
-        </button>
-      </div>
-    </section>
-  </div>
-
-  <div id="toast-container"></div>
-
-  <script>
-    const I18N = ${JSON.stringify(I18N_DICT)};
-    let currentLang = localStorage.getItem('agy_lang') || (navigator.language.startsWith('zh') ? 'zh' : 'en');
-    let accountData = [];
-    let selectedIndex = 0;
-    let isBusy = false;
-
-    function t(key) {
-      const dict = I18N[currentLang] || I18N.en;
-      return dict[key] || I18N.en[key] || key;
-    }
-
-    const $ = (id) => document.getElementById(id);
-
-    function esc(s) {
-      if (s == null) return '';
-      return String(s).replace(/[&<>"']/g, (c) => ({ '&': '&amp;', '<': '&lt;', '>': '&gt;', '"': '&quot;', "'": '&#39;' }[c]));
-    }
-
-    function toast(text, type = 'info') {
-      const container = $('toast-container');
-      const el = document.createElement('div');
-      el.className = 'toast toast-' + type;
-      el.innerHTML = '<span>' + esc(text) + '</span><span style="cursor:pointer;opacity:0.6;font-weight:600;" onclick="this.parentElement.remove()">✕</span>';
-      container.appendChild(el);
-      setTimeout(() => {
-        el.style.opacity = '0';
-        el.style.transform = 'translateY(8px)';
-        setTimeout(() => el.remove(), 200);
-      }, 3500);
-    }
-
-    function copyToClipboard(text, msg) {
-      if (navigator.clipboard && window.isSecureContext) {
-        navigator.clipboard.writeText(text).then(() => toast(msg || t('copied'), 'success')).catch(() => fallbackCopy(text, msg));
-      } else {
-        fallbackCopy(text, msg);
-      }
-    }
-
-    function fallbackCopy(text, msg) {
-      const ta = document.createElement('textarea');
-      ta.value = text;
-      ta.style.position = 'fixed';
-      ta.style.left = '-9999px';
-      document.body.appendChild(ta);
-      ta.select();
-      try {
-        document.execCommand('copy');
-        toast(msg || t('copied'), 'success');
-      } catch {
-        toast('Failed to copy', 'error');
-      }
-      document.body.removeChild(ta);
-    }
-
-    function formatRelativeTime(dateStr) {
-      if (!dateStr) return '';
-      const target = new Date(dateStr).getTime();
-      const diffMs = target - Date.now();
-      if (diffMs <= 0) return '';
-      const diffMin = Math.round(diffMs / 60000);
-      if (diffMin < 60) return t('resetIn') + diffMin + 'm';
-      const diffHours = (diffMs / 3600000).toFixed(1);
-      if (diffHours < 24) return t('resetIn') + diffHours + 'h';
-      return t('resetAt') + new Date(target).toLocaleTimeString([], { hour: '2-digit', minute: '2-digit' });
-    }
-
-    function quotaColor(fraction) {
-      if (fraction == null) return 'var(--text-dimmed)';
-      return fraction > 0.7 ? 'var(--state-success)' : fraction >= 0.3 ? 'var(--state-warn)' : 'var(--state-error)';
-    }
-
-    function getWorstQuotaFraction(acc) {
-      const models = (acc.quota && acc.quota.models) || [];
-      let worst = 1;
-      let hasQuota = false;
-      for (const m of models) {
-        if (m.remainingFraction != null) {
-          worst = Math.min(worst, m.remainingFraction);
-          hasQuota = true;
-        }
-      }
-      return hasQuota ? worst : null;
-    }
-
-    function applyI18nLabels() {
-      $('txt-title').textContent = t('title');
-      $('txt-subtitle').textContent = t('subtitle');
-      $('txt-refresh').textContent = t('refresh');
-      $('txt-login').textContent = t('loginWithGoogle');
-      $('btn-lang').textContent = t('switchLang');
-      $('txt-accounts-list').textContent = t('accountsList');
-      $('txt-import-title').textContent = t('importTitle');
-      $('txt-import-desc').textContent = t('importDesc');
-      $('txt-import-json').textContent = t('importJson');
-      $('txt-import-blob').textContent = t('importBlobBtn');
-      $('txt-export-all').textContent = t('exportAll');
-      $('input-import').placeholder = t('importPlaceholder');
-    }
-
-    async function api(path, init) {
-      const res = await fetch('/agy/api' + path, {
-        headers: { 'content-type': 'application/json' },
-        ...init
-      });
-      const data = await res.json().catch(() => ({}));
-      if (!res.ok) throw new Error(data.error || res.statusText || 'Request failed');
-      return data;
-    }
-
-    function renderMasterList() {
-      const listEl = $('account-list');
-      $('account-total-badge').textContent = String(accountData.length);
-
-      if (accountData.length === 0) {
-        listEl.innerHTML = '<li style="color:var(--text-tertiary);font-size:13px;padding:12px 0;">' + esc(t('noAccounts')) + '</li>';
-        return;
-      }
-
-      listEl.innerHTML = accountData.map((a, i) => {
-        const isSelected = i === selectedIndex;
-        const worstFrac = getWorstQuotaFraction(a);
-        const dotColor = quotaColor(worstFrac);
-
-        let stateBadge = '';
-        if (a.state === 'disabled') {
-          stateBadge = '<span class="badge badge-error">' + esc(t('stateDisabled')) + '</span>';
-        } else if (a.state === 'verification-required') {
-          stateBadge = '<span class="badge badge-warn">' + esc(t('stateVerificationRequired')) + '</span>';
-        } else if (a.state === 'cooling') {
-          stateBadge = '<span class="badge badge-warn">' + esc(t('stateCooling')) + '</span>';
-        } else if (a.rateLimits && Object.values(a.rateLimits).some((t) => t > Date.now())) {
-          stateBadge = '<span class="badge badge-warn">' + esc(t('stateRateLimited')) + '</span>';
-        } else {
-          stateBadge = '<span class="badge badge-success">' + esc(t('stateActive')) + '</span>';
-        }
-
-        const activeMark = a.active ? '<span class="badge badge-primary">★ ' + esc(t('activeBadge')) + '</span>' : '';
-
-        return '<li class="account-item ' + (isSelected ? 'active-item' : '') + '" onclick="selectAccount(' + i + ')">' +
-          '<div class="account-item-top">' +
-            '<span class="account-email" title="' + esc(a.email || '(no email)') + '">' + esc(a.email || '(no email)') + '</span>' +
-            '<span class="dot" style="background:' + dotColor + '" title="Quota Health"></span>' +
-          '</div>' +
-          '<div class="account-item-bottom">' + activeMark + stateBadge + '</div>' +
-        '</li>';
-      }).join('');
-    }
-
-    function renderDetailView() {
-      const container = $('detail-content');
-      if (accountData.length === 0) {
-        container.innerHTML = '<div style="text-align:center;padding:32px 12px;color:var(--text-tertiary);">' +
-          '<p style="font-size:15px;font-weight:500;margin-bottom:4px;">' + esc(t('noAccounts')) + '</p>' +
-          '<p style="font-size:13px;">' + esc(t('noAccountsHint')) + '</p>' +
-        '</div>';
-        return;
-      }
-
-      const a = accountData[selectedIndex] || accountData[0];
-      const isVerificationRequired = a.state === 'verification-required';
-      const isCooling = a.state === 'cooling' && a.cooldownUntil;
-      const coolInfo = isCooling ? ' (' + formatRelativeTime(a.cooldownUntil) + ')' : '';
-
-      const models = (a.quota && a.quota.models) || [];
-      const quotaRows = models.map((m) => {
-        const pct = m.remainingFraction != null ? Math.round(m.remainingFraction * 100) : null;
-        const color = quotaColor(m.remainingFraction);
-        const resetText = m.resetTime ? formatRelativeTime(m.resetTime) : '';
-        const exactReset = m.resetTime ? new Date(m.resetTime).toLocaleString() : '';
-
-        return '<tr>' +
-          '<td><span class="model-name" onclick="copyToClipboard(\\'' + esc(m.id) + '\\')" title="Click to copy ID">' + esc(m.id) + '</span></td>' +
-          '<td>' +
-            (pct != null
-              ? '<div class="progress-bar"><div class="progress-fill" style="width:' + pct + '%;background:' + color + '"></div></div><span style="font-weight:500;font-size:12px;">' + pct + '%</span>'
-              : '<span style="color:var(--text-tertiary);font-size:12px;">' + esc(t('noQuotaReported')) + '</span>') +
-          '</td>' +
-          '<td><span class="reset-time" title="' + esc(exactReset) + '">' + esc(resetText) + '</span></td>' +
-          '<td style="text-align:right;">' +
-            '<button class="btn btn-secondary btn-sm" data-test-model="' + esc(m.id) + '">' + esc(t('testModel')) + '</button>' +
-          '</td>' +
-        '</tr>';
-      }).join('');
-
-      container.innerHTML = 
-        '<div class="detail-head">' +
-          '<div class="detail-meta">' +
-            '<h2>' + esc(a.email || '(no email)') + (a.active ? ' <span class="badge badge-primary">★ ' + esc(t('activeBadge')) + '</span>' : '') + '</h2>' +
-            '<p>' + esc(t('project')) + ': <code>' + esc(a.projectId || t('defaultProject')) + '</code>' + esc(coolInfo) + '</p>' +
-          '</div>' +
-          '<div class="detail-actions">' +
-            (isVerificationRequired ? '<button class="btn btn-cta btn-sm" id="btn-action-verify">⚡ ' + esc(t('verifyCta')) + '</button>' : '') +
-            (!a.active ? '<button class="btn btn-secondary btn-sm" id="btn-action-activate">' + esc(t('activate')) + '</button>' : '') +
-            (!isVerificationRequired ? '<button class="btn btn-secondary btn-sm" id="btn-action-verify">' + esc(t('verify')) + '</button>' : '') +
-            '<button class="btn btn-secondary btn-sm" id="btn-action-export">' + esc(t('exportBlob')) + '</button>' +
-            '<button class="btn btn-secondary btn-sm" id="btn-action-fp">' + esc(t('fingerprint')) + '</button>' +
-            '<button class="btn btn-danger btn-sm" id="btn-action-delete">' + esc(t('deleteAccount')) + '</button>' +
-          '</div>' +
-          '</div>' +
-
-        '<div style="margin-top:14px;padding:10px 12px;border:1px solid var(--border-l1);border-radius:8px;background:var(--bg-surface-elevated);display:flex;flex-wrap:wrap;gap:8px;align-items:center;">' +
-          '<span style="font-size:13px;font-weight:500;white-space:nowrap;">Proxy:</span>' +
-          '<input id="proxy-input-' + selectedIndex + '" placeholder="socks5://user:pass@host:1080" style="flex:1;min-width:220px;font-family:var(--ds-font-family-code);font-size:12.5px;padding:6px 10px;background:var(--bg-input);border:1px solid var(--border-l2);border-radius:6px;color:var(--text-primary);outline:none;">' +
-          '<button class="btn btn-primary btn-sm" id="btn-proxy-save">Save</button>' +
-          '<button class="btn btn-secondary btn-sm" id="btn-proxy-clear">Clear</button>' +
-          '<button class="btn btn-secondary btn-sm" id="btn-proxy-test">Test</button>' +
-          '<span id="proxy-status" style="font-size:12px;color:var(--text-secondary);">' + ((a.proxy || a.proxyMasked) ? 'Current: ' + esc(a.proxy || a.proxyMasked) : 'No proxy (using env)') + '</span>' +
-        '</div>' +
-
-        '<div style="margin-top:16px;">' +
-          '<div style="display:flex;justify-content:space-between;align-items:center;margin-bottom:8px;">' +
-            '<h3 style="font-size:13.5px;font-weight:600;">' + esc(t('quotaTitle')) + ' (' + models.length + ')</h3>' +
-            (models.length > 0 ? '<button class="btn btn-secondary btn-sm" id="btn-action-test-all">⚡ ' + esc(t('testAll')) + '</button>' : '') +
-          '</div>' +
-          '<div class="quota-table-wrap">' +
-            '<table class="quota-table">' +
-              '<thead><tr><th>Model</th><th>Remaining</th><th>Reset</th><th style="text-align:right;">Action</th></tr></thead>' +
-              '<tbody>' + (quotaRows || '<tr><td colspan="4" style="color:var(--text-tertiary);text-align:center;padding:16px 0;">' + esc(t('quotaUnavailable')) + '</td></tr>') + '</tbody>' +
-            '</table>' +
-          '</div>' +
-        '</div>' +
-
-        '<details class="diagnostics" id="diagnostics-panel">' +
-          '<summary><span>' + esc(t('fingerprintTitle')) + ' & Output</span><span>▼</span></summary>' +
-          '<div class="diagnostics-body">' +
-            '<div style="display:flex;justify-content:space-between;align-items:center;">' +
-              '<span style="font-size:12px;color:var(--text-secondary);">' + esc(t('fingerprintHistory')) + ': ' + (a.fingerprintHistory || 0) + '</span>' +
-              '<button class="btn btn-secondary btn-sm" id="btn-action-regen-fp">' + esc(t('regenerateFp')) + '</button>' +
-            '</div>' +
-            '<pre class="code-view" id="diagnostics-output">' + (a.fingerprint ? esc(JSON.stringify(a.fingerprint, null, 2)) : 'No diagnostics generated yet.') + '</pre>' +
-          '</div>' +
-        '</details>';
-
-      bindDetailActions(selectedIndex);
-    }
-
-    function selectAccount(index) {
-      selectedIndex = index;
-      renderMasterList();
-      renderDetailView();
-    }
-
-    function bindDetailActions(index) {
-      const btnActivate = $('btn-action-activate');
-      if (btnActivate) btnActivate.onclick = async () => {
-        try {
-          await api('/activate', { method: 'POST', body: JSON.stringify({ index }) });
-          toast(t('activeBadge') + ' -> #' + (index + 1), 'success');
-          render();
-        } catch (e) { toast(String(e), 'error'); }
-      };
-
-      const btnVerify = $('btn-action-verify');
-      if (btnVerify) btnVerify.onclick = async () => {
-        btnVerify.disabled = true;
-        try {
-          await api('/verify', { method: 'POST', body: JSON.stringify({ index }) });
-          toast('Account #' + (index + 1) + ' verified successfully', 'success');
-          render();
-        } catch (e) { toast(String(e), 'error'); }
-        finally { btnVerify.disabled = false; }
-      };
-
-      const btnDelete = $('btn-action-delete');
-      if (btnDelete) btnDelete.onclick = async () => {
-        if (!confirm(t('confirmDelete'))) return;
-        try {
-          await api('/delete', { method: 'POST', body: JSON.stringify({ index }) });
-          toast('Account deleted', 'success');
-          if (selectedIndex >= accountData.length - 1) selectedIndex = Math.max(0, accountData.length - 2);
-          render();
-        } catch (e) { toast(String(e), 'error'); }
-      };
-
-      const btnExport = $('btn-action-export');
-      if (btnExport) btnExport.onclick = async () => {
-        try {
-          const r = await api('/export', { method: 'POST', body: JSON.stringify({ index }) });
-          copyToClipboard(r.blob, t('copyBlobMsg'));
-          $('diagnostics-panel').open = true;
-          $('diagnostics-output').textContent = r.blob;
-        } catch (e) { toast(String(e), 'error'); }
-      };
-
-      const btnFp = $('btn-action-fp');
-      if (btnFp) btnFp.onclick = async () => {
-        try {
-          const r = await api('/fingerprint', { method: 'POST', body: JSON.stringify({ index }) });
-          $('diagnostics-panel').open = true;
-          $('diagnostics-output').textContent = JSON.stringify(r.fingerprint, null, 2);
-          toast(t('copyFpMsg'), 'info');
-        } catch (e) { toast(String(e), 'error'); }
-      };
-
-      const btnRegenFp = $('btn-action-regen-fp');
-      if (btnRegenFp) btnRegenFp.onclick = async () => {
-        if (!confirm(t('confirmRegenerateFp'))) return;
-        try {
-          const r = await api('/fingerprint', { method: 'POST', body: JSON.stringify({ index, action: 'regenerate' }) });
-          $('diagnostics-panel').open = true;
-          $('diagnostics-output').textContent = JSON.stringify(r.fingerprint, null, 2);
-          toast('Fingerprint regenerated', 'success');
-          render();
-        } catch (e) { toast(String(e), 'error'); }
-      };
-
-      const btnTestAll = $('btn-action-test-all');
-      if (btnTestAll) btnTestAll.onclick = async () => {
-        if (!confirm(t('confirmTestAll'))) return;
-        btnTestAll.disabled = true;
-        const a = accountData[index];
-        const models = ((a.quota && a.quota.models) || []).map((m) => m.id);
-        toast(t('testing') + ' (' + models.length + ')', 'info');
-        let okCount = 0;
-        let failCount = 0;
-        const lines = [];
-
-        for (const model of models) {
-          try {
-            const r = await api('/test', { method: 'POST', body: JSON.stringify({ model }) });
-            if (r.ok) {
-              okCount++;
-              lines.push('OK   ' + model);
-            } else {
-              failCount++;
-              lines.push('FAIL ' + model + ' - ' + r.error);
-            }
-          } catch (err) {
-            failCount++;
-            lines.push('ERR  ' + model + ' - ' + String(err));
-          }
-        }
-        $('diagnostics-panel').open = true;
-        $('diagnostics-output').textContent = lines.join('\\n');
-        toast(t('modelsTestedSummary').replace('{total}', String(models.length)).replace('{ok}', String(okCount)).replace('{failed}', String(failCount)), failCount === 0 ? 'success' : 'warn');
-        btnTestAll.disabled = false;
-      };
-
-      // Proxy actions
-      const btnProxySave = $('btn-proxy-save');
-      if (btnProxySave) btnProxySave.onclick = async () => {
-        const input = $('proxy-input-' + index);
-        const proxy = input ? input.value.trim() : '';
-        btnProxySave.disabled = true;
-        try {
-          const r = await api('/proxy', { method: 'POST', body: JSON.stringify({ index, proxy }) });
-          const masked = r.proxy || r.proxyMasked || '';
-          const statusEl = $('proxy-status');
-          if (statusEl) statusEl.textContent = masked ? 'Current: ' + masked : 'No proxy (using env)';
-          toast(masked ? 'Proxy saved: ' + masked : 'Proxy cleared (using env)', 'success');
-          render();
-        } catch (e) { toast(String(e), 'error'); }
-        finally { btnProxySave.disabled = false; }
-      };
-      const btnProxyClear = $('btn-proxy-clear');
-      if (btnProxyClear) btnProxyClear.onclick = async () => {
-        btnProxyClear.disabled = true;
-        try {
-          await api('/proxy', { method: 'POST', body: JSON.stringify({ index, proxy: '' }) });
-          const statusEl = $('proxy-status');
-          if (statusEl) statusEl.textContent = 'No proxy (using env)';
-          const input = $('proxy-input-' + index);
-          if (input) input.value = '';
-          toast('Proxy cleared (using env)', 'success');
-          render();
-        } catch (e) { toast(String(e), 'error'); }
-        finally { btnProxyClear.disabled = false; }
-      };
-      const btnProxyTest = $('btn-proxy-test');
-      if (btnProxyTest) btnProxyTest.onclick = async () => {
-        const input = $('proxy-input-' + index);
-        const val = input ? input.value.trim() : '';
-        const body = val ? { index, proxy: val } : { index };
-        btnProxyTest.disabled = true;
-        btnProxyTest.textContent = '...';
-        try {
-          const r = await api('/proxy/test', { method: 'POST', body: JSON.stringify(body) });
-          const masked = r.masked ? esc(r.masked) : '';
-          const statusEl = $('proxy-status');
-          if (r.ok) {
-            toast('Proxy reachable: ' + (r.masked || ''), 'success');
-            if (statusEl) statusEl.textContent = 'Reachable: ' + (r.masked || '');
-          } else {
-            toast('Proxy unreachable: ' + (r.masked || '') + (r.error ? ' - ' + r.error : ''), 'error');
-            if (statusEl) statusEl.textContent = 'Unreachable: ' + (r.masked || '') + (r.error ? ' (' + r.error + ')' : '');
-          }
-        } catch (e) { toast(String(e), 'error'); }
-        finally { btnProxyTest.disabled = false; btnProxyTest.textContent = 'Test'; }
-      };
-
-      // Single model tests
-      document.querySelectorAll('[data-test-model]').forEach((btn) => {
-        btn.onclick = async () => {
-          const model = btn.getAttribute('data-test-model');
-          btn.disabled = true;
-          btn.textContent = '...';
-          try {
-            const r = await api('/test', { method: 'POST', body: JSON.stringify({ model }) });
-            if (r.ok) {
-              toast('OK: ' + model, 'success');
-            } else {
-              toast('FAIL: ' + model + ' - ' + r.error, 'error');
-            }
-          } catch (err) {
-            toast('ERR: ' + model + ' - ' + String(err), 'error');
-          } finally {
-            btn.disabled = false;
-            btn.textContent = t('testModel');
-          }
-        };
-      });
-    }
-
-    async function render() {
-      if (isBusy) return;
-      isBusy = true;
-      try {
-        const data = await api('/accounts');
-        accountData = data.accounts || [];
-        if (selectedIndex >= accountData.length) selectedIndex = Math.max(0, accountData.length - 1);
-        renderMasterList();
-        renderDetailView();
-      } catch (e) {
-        toast(String(e), 'error');
-      } finally {
-        isBusy = false;
-      }
-    }
-
-    // Event Handlers
-    $('btn-refresh').onclick = render;
-
-    $('btn-lang').onclick = () => {
-      currentLang = currentLang === 'zh' ? 'en' : 'zh';
-      localStorage.setItem('agy_lang', currentLang);
-      applyI18nLabels();
-      renderMasterList();
-      renderDetailView();
-    };
-
-    $('btn-login').onclick = async () => {
-      try {
-        const { url } = await api('/auth-url', { method: 'POST' });
-        window.open(url, '_blank');
-        toast(t('windowClosing'), 'info');
-      } catch (e) { toast(String(e), 'error'); }
-    };
-
-    const importLines = () => $('input-import').value.split('\\n')
-      .map((s) => s.trim())
-      .filter(Boolean);
-
-    const doImport = async (kind) => {
-      const sources = importLines();
-      if (sources.length === 0) return;
-      try {
-        const r = await api('/import', { method: 'POST', body: JSON.stringify({ kind, sources }) });
-        if (r.errors && r.errors.length > 0) toast(r.errors[0], 'error');
-        toast(t('importBatchResult').replace('{imported}', r.imported).replace('{replaced}', r.replaced), 'success');
-        $('input-import').value = '';
-        render();
-      } catch (e) { toast(String(e), 'error'); }
-    };
-
-    $('btn-import-json').onclick = () => doImport('json');
-    $('btn-import-blob').onclick = () => doImport('blob');
-
-    const btnExportAll = $('btn-export-all');
-    if (btnExportAll) btnExportAll.onclick = async () => {
-      try {
-        const r = await api('/export-all', { method: 'POST' });
-        if (!r.blobs || r.blobs.length === 0) { toast('No accounts to export', 'info'); return; }
-        const text = r.blobs.map((b) => b.blob).join('\\n');
-        copyToClipboard(text, t('copyAllMsg'));
-        $('diagnostics-panel').open = true;
-        $('diagnostics-output').textContent = text;
-      } catch (e) { toast(String(e), 'error'); }
-    };
-
-    // Auto-refresh when tab receives focus or receives postMessage from login popup
-    window.addEventListener('focus', render);
-    window.addEventListener('message', (ev) => {
-      if (ev.data && ev.data.type === 'agy_login_success') {
-        toast(t('loginSuccessTitle'), 'success');
-        render();
-      }
-    });
-
-    // Init
-    applyI18nLabels();
-    render();
-  <\/script>
-</body>
-</html>`;
+/** Fail one RPC with a message the UI can show verbatim. */
+function fail(message) {
+	throw new Error(message);
+}
+function asIndex(payload) {
+	const index = Number(payload?.index);
+	if (!Number.isInteger(index) || index < 0) fail("invalid index");
+	return index;
+}
+/**
+* Flatten one account's ledger entry for transport.
+*
+* `models` and `lastUsedAt` are deliberately NOT carried: the per-model table
+* that read `models` was removed (the cumulative metric strip states the same
+* figures better), and the `lastUsedAt` ordering rule went with it. Sending
+* fields no client reads is a wire surface with no consumer, which reads as
+* intentional to the next person and invites a stale assumption.
+*/
+function toAccountUsageView(usage) {
+	if (usage === void 0) return null;
+	return {
+		totals: usage.totals,
+		sources: usage.sources
+	};
+}
+function createAgyManagement(options) {
+	const { store, sessions, stats, modelVisibility, listAllModels, baseUrl, notifyModelsChanged } = options;
+	const thinkingBudget = options.thinkingBudget;
+	/** Authorizations issued by `auth.url`, keyed by raw state. */
+	const pendingAuth = /* @__PURE__ */ new Map();
+	const PENDING_AUTH_TTL_MS = 6e5;
+	const prunePendingAuth = (now = Date.now()) => {
+		for (const [key, entry] of pendingAuth) if (entry.expiresAt <= now) pendingAuth.delete(key);
+		while (pendingAuth.size > 100) {
+			let oldestKey = null;
+			let oldestExpiry = Infinity;
+			for (const [key, entry] of pendingAuth) if (entry.expiresAt < oldestExpiry) {
+				oldestExpiry = entry.expiresAt;
+				oldestKey = key;
+			}
+			if (oldestKey === null) break;
+			pendingAuth.delete(oldestKey);
+		}
+	};
+	const listAccounts = async () => {
+		const storage = await store.load();
+		const now = Date.now();
+		for (const account of storage.accounts) clearExpiredState(account, now);
+		const ledger = stats.snapshot();
+		const rows = [];
+		for (const [index, account] of storage.accounts.entries()) {
+			const state = account.enabled === false ? "disabled" : account.verificationRequired === true ? "verification-required" : account.coolingDownUntil !== void 0 && account.coolingDownUntil > now ? "cooling" : "active";
+			const key = account.email ?? account.id;
+			rows.push({
+				index,
+				email: account.email ?? null,
+				projectId: account.projectId ?? null,
+				active: index === storage.activeIndex && account.enabled !== false,
+				state,
+				cooldownUntil: account.coolingDownUntil !== void 0 && account.coolingDownUntil > now ? new Date(account.coolingDownUntil).toISOString() : null,
+				cooldownReason: account.cooldownReason ?? null,
+				cooldownSetAt: account.cooldownSetAt === void 0 ? null : new Date(account.cooldownSetAt).toISOString(),
+				/**
+				* Appeal link from an upstream verification challenge. Surfaced, never
+				* followed automatically: only the account owner can complete it, and the
+				* account returns to service on its own once the wall clears.
+				*/
+				verificationUrl: account.verificationUrl ?? null,
+				verificationRequired: account.verificationRequired === true && account.enabled !== false,
+				rateLimits: account.rateLimitResetTimes ?? null,
+				fingerprint: account.fingerprint ? {
+					userAgent: account.fingerprint.userAgent,
+					deviceId: account.fingerprint.deviceId,
+					createdAt: account.fingerprint.createdAt
+				} : null,
+				fingerprintHistory: (account.fingerprintHistory ?? []).length,
+				proxy: account.proxy ? maskProxyUrl(account.proxy) : null,
+				limits: account.cachedLimits?.groups ?? null,
+				limitsUpdatedAt: account.cachedLimits?.updatedAt ?? null,
+				usage: key === void 0 ? null : toAccountUsageView(ledger.accounts[key])
+			});
+		}
+		return rows;
+	};
+	/** Fold the ledger into the Usage tab's view. */
+	const statsView = () => {
+		const doc = stats.snapshot();
+		const now = Date.now();
+		const byModel = /* @__PURE__ */ new Map();
+		for (const usage of Object.values(doc.accounts)) for (const [model, counters] of Object.entries(usage.models)) {
+			const current = byModel.get(model);
+			if (current === void 0) byModel.set(model, { ...counters });
+			else for (const key of Object.keys(current)) current[key] += counters[key];
+		}
+		const allModels = [...byModel.entries()].map(([model, counters]) => ({
+			model,
+			counters
+		})).sort((a, b) => b.counters.requests - a.counters.requests);
+		const allAccounts = Object.entries(doc.accounts).map(([account, usage]) => ({
+			account,
+			counters: usage.totals
+		})).sort((a, b) => b.counters.requests - a.counters.requests);
+		const breakdown = (days) => {
+			const { totals, models, accounts } = foldWindowBreakdown(doc, days, now);
+			return {
+				counters: totals,
+				models,
+				accounts
+			};
+		};
+		return {
+			since: doc.totals.requests > 0 ? doc.since : null,
+			all: {
+				counters: doc.totals,
+				models: allModels,
+				accounts: allAccounts
+			},
+			today: breakdown(1),
+			week: breakdown(7),
+			month: breakdown(30)
+		};
+	};
+	const methods = {
+		"account.list": async () => ({ accounts: await listAccounts() }),
+		"account.activate": async (payload) => {
+			const index = asIndex(payload);
+			await store.mutate((storage) => {
+				if (index >= storage.accounts.length) fail("account not found");
+				storage.activeIndex = index;
+			});
+			return {
+				ok: true,
+				index
+			};
+		},
+		"account.delete": async (payload) => {
+			const index = asIndex(payload);
+			await store.mutate((storage) => {
+				if (index >= storage.accounts.length) fail("account not found");
+				storage.accounts.splice(index, 1);
+				if (storage.activeIndex >= storage.accounts.length) storage.activeIndex = 0;
+			});
+			return { ok: true };
+		},
+		"account.verify": async (payload) => sessions.verifyAccount(asIndex(payload)),
+		"account.health": async (payload) => {
+			const raw = payload?.indices;
+			const indices = Array.isArray(raw) ? raw.map((value) => Number(value)) : void 0;
+			return { results: await sessions.checkAccounts(indices) };
+		},
+		/**
+		* Refresh and return the 5h/weekly windows for every enabled account.
+		*
+		* A SEPARATE call rather than a field on `account.list`, because that reply
+		* is deliberately probe-free (see the note above its return): folding an
+		* upstream call into it made the whole accounts+usage view wait on the
+		* network and show "no accounts" behind a spinner. Here the client renders
+		* the list from `account.list` immediately and merges these in when they
+		* arrive, so a slow probe costs a placeholder, not the page.
+		*
+		* Server-side this is TTL-gated, so the upstream call happens at most once
+		* per window rather than once per view. `force` bypasses that gate for an
+		* EXPLICIT refresh — without it the toolbar's Refresh button could not
+		* deliver "the latest numbers now", which is the only reason to click it
+		* while the snapshot is still inside its TTL.
+		*/
+		"account.limits": async (payload) => {
+			const force = payload?.force === true;
+			const storage = await store.load();
+			const result = await sessions.refreshLimits(storage, { force }).catch(() => ({
+				measured: [],
+				failed: [],
+				skipped: 0
+			}));
+			return {
+				limits: (await store.load()).accounts.map((account, index) => ({
+					index,
+					groups: account.cachedLimits?.groups ?? null,
+					updatedAt: account.cachedLimits?.updatedAt ?? null
+				})),
+				measured: result.measured.length,
+				failed: result.failed.length,
+				skipped: result.skipped
+			};
+		},
+		"account.test": async (payload) => {
+			const model = payload?.model;
+			if (typeof model !== "string" || model === "") fail("model is required");
+			const rawIndex = payload?.index;
+			return sessions.testCall(model, { ...rawIndex === void 0 ? {} : { accountIndex: asIndex(payload) } });
+		},
+		"account.export": async (payload) => sessions.exportBlob(asIndex(payload)),
+		"account.exportAll": async () => {
+			const storage = await store.load();
+			const blobs = [];
+			for (let index = 0; index < storage.accounts.length; index++) {
+				const result = await sessions.exportBlob(index);
+				if (result.blob !== void 0) blobs.push({
+					index,
+					blob: result.blob
+				});
+			}
+			return { blobs };
+		},
+		"account.import": async (payload) => {
+			const body = payload;
+			const kind = body?.kind === "blob" ? "blob" : "json";
+			const sources = Array.isArray(body?.sources) ? body.sources : [];
+			if (sources.length === 0) fail("nothing to import");
+			const result = await importManySources(sources.map((source) => ({
+				source,
+				kind
+			})), store, { overwriteExisting: true });
+			return {
+				imported: result.imported,
+				replaced: result.replaced,
+				errors: result.errors.map((error) => String(error))
+			};
+		},
+		"account.fingerprint": async (payload) => {
+			const index = asIndex(payload);
+			const action = payload?.action === "regenerate" ? "regenerate" : "show";
+			return store.mutate(async (storage) => {
+				const account = storage.accounts[index];
+				if (!account) fail("account not found");
+				if (action === "regenerate") {
+					const fresh = generateFingerprint(void 0, currentAgyVersion());
+					account.fingerprint = fresh;
+					account.fingerprintHistory = recordFingerprintVersion(account.fingerprintHistory, fresh, "regenerated");
+				}
+				return {
+					action,
+					fingerprint: account.fingerprint ? {
+						userAgent: account.fingerprint.userAgent,
+						deviceId: account.fingerprint.deviceId,
+						createdAt: account.fingerprint.createdAt
+					} : null,
+					history: account.fingerprintHistory?.length ?? 0
+				};
+			});
+		},
+		"account.proxy": async (payload) => {
+			const index = asIndex(payload);
+			const raw = payload?.proxy;
+			const proxy = typeof raw === "string" ? raw : "";
+			if (proxy.trim() === "") {
+				await store.mutate((storage) => {
+					const account = storage.accounts[index];
+					if (!account) fail("account not found");
+					delete account.proxy;
+				});
+				return {
+					ok: true,
+					proxy: null,
+					proxyMasked: null,
+					rawLogs: null
+				};
+			}
+			let normalized;
+			try {
+				normalized = normalizeProxyUrl(proxy);
+			} catch (error) {
+				fail(error instanceof Error ? error.message : String(error));
+			}
+			await store.mutate((storage) => {
+				const account = storage.accounts[index];
+				if (!account) fail("account not found");
+				account.proxy = normalized;
+			});
+			return {
+				ok: true,
+				proxy: maskProxyUrl(normalized),
+				proxyMasked: maskProxyUrl(normalized),
+				rawLogs: proxyUrlForLogs(normalized)
+			};
+		},
+		"account.proxyTest": async (payload) => {
+			const body = payload;
+			const hasExplicit = typeof body?.proxy === "string" && body.proxy.trim() !== "";
+			let target;
+			if (hasExplicit) try {
+				target = normalizeProxyUrl(body.proxy);
+			} catch (error) {
+				fail(error instanceof Error ? error.message : String(error));
+			}
+			else {
+				const index = asIndex(payload);
+				const account = (await store.load()).accounts[index];
+				if (!account) fail("account not found");
+				if (!account.proxy) fail("no proxy configured for this account");
+				target = account.proxy;
+			}
+			const masked = maskProxyUrl(target) ?? proxyUrlForLogs(target);
+			try {
+				const ok = await isProxyReachable(target, 2e3);
+				return ok ? {
+					ok,
+					masked
+				} : {
+					ok,
+					masked,
+					error: `proxy unreachable: ${masked}`
+				};
+			} catch (error) {
+				return {
+					ok: false,
+					masked,
+					error: error instanceof Error ? error.message : String(error)
+				};
+			}
+		},
+		"auth.url": async () => {
+			const authorization = await authorizeAntigravity(`${baseUrl}/agy/oauth-callback`);
+			prunePendingAuth();
+			pendingAuth.set(authorization.state, {
+				verifier: authorization.verifier,
+				expiresAt: Date.now() + PENDING_AUTH_TTL_MS
+			});
+			return { url: authorization.url };
+		},
+		"model.list": async () => {
+			const session = await sessions.getSession().catch(() => void 0);
+			if (session === void 0) fail("No agy account configured — run `dsh-agy login` first.");
+			const models = await listAllModels();
+			const hidden = modelVisibility.disabledFor("agy");
+			const rows = models.map((model) => ({
+				id: model.id,
+				name: model.name,
+				disabled: hidden.has(model.id)
+			}));
+			return {
+				account: session.account.email ?? null,
+				models: rows
+			};
+		},
+		"model.setDisabled": async (payload) => {
+			const body = payload;
+			const modelId = body?.modelId;
+			if (typeof modelId !== "string" || modelId === "") fail("modelId is required");
+			const disabled = body?.disabled === true;
+			modelVisibility.setDisabled("agy", modelId, disabled);
+			notifyModelsChanged();
+			return {
+				modelId,
+				disabled
+			};
+		},
+		"thinking.get": async () => ({
+			budgets: thinkingBudget.all(),
+			min: -1,
+			max: THINKING_BUDGET_MAX,
+			tieredBudget: thinkingBudget.tiered() ?? null,
+			claudeBudget: thinkingBudget.claude() ?? null,
+			claudeMin: CLAUDE_BUDGET_MIN,
+			claudeMax: CLAUDE_BUDGET_MAX
+		}),
+		"thinking.setTiered": async (payload) => {
+			const raw = payload?.budget;
+			if (raw !== void 0 && raw !== null && typeof raw !== "number") fail("budget must be a number");
+			try {
+				return { tieredBudget: thinkingBudget.setTiered(raw === void 0 || raw === null ? void 0 : raw) ?? null };
+			} catch (error) {
+				fail(error instanceof Error ? error.message : String(error));
+			}
+		},
+		"thinking.setClaude": async (payload) => {
+			const raw = payload?.budget;
+			if (raw !== void 0 && raw !== null && typeof raw !== "number") fail("budget must be a number");
+			try {
+				return { claudeBudget: thinkingBudget.setClaude(raw === void 0 || raw === null ? void 0 : raw) ?? null };
+			} catch (error) {
+				fail(error instanceof Error ? error.message : String(error));
+			}
+		},
+		"thinking.set": async (payload) => {
+			const body = payload;
+			const level = body?.level;
+			if (typeof level !== "string" || level === "") fail("level is required");
+			const raw = body?.budget;
+			if (raw !== void 0 && raw !== null && typeof raw !== "number") fail("budget must be a number");
+			const value = raw === void 0 || raw === null ? void 0 : raw;
+			try {
+				return { budgets: thinkingBudget.set(level, value) };
+			} catch (error) {
+				fail(error instanceof Error ? error.message : String(error));
+			}
+		},
+		"stats.get": async () => statsView()
+	};
+	return {
+		async call(method, payload) {
+			const handler = methods[method];
+			if (handler === void 0) fail(`unknown method: ${method}`);
+			return handler(payload);
+		},
+		async handleCallback(params) {
+			const code = params.get("code");
+			const state = params.get("state");
+			if (!code || !state) return {
+				ok: false,
+				error: "Missing code or state parameter"
+			};
+			const expected = pendingAuth.get(state);
+			if (expected === void 0) return {
+				ok: false,
+				error: "Unknown or expired authorization — please start a new login."
+			};
+			pendingAuth.delete(state);
+			const redirectUri = `${baseUrl}/agy/oauth-callback`;
+			const result = await exchangeAntigravity(code, state, redirectUri, expected.verifier);
+			if (result.type === "failed") return {
+				ok: false,
+				error: result.error
+			};
+			await upsertImportedAccount(store, {
+				accessToken: result.access,
+				refreshToken: result.refresh.split("|")[0],
+				tokenType: "Bearer",
+				expiresAt: new Date(result.expires).toISOString(),
+				authMethod: "oauth",
+				email: result.email ?? null,
+				projectId: result.projectId || null,
+				clientId: result.clientId || null
+			}, { overwriteExisting: true });
+			return {
+				ok: true,
+				email: result.email ?? null
+			};
+		}
+	};
+}
+//#endregion
+//#region src/web/i18n.ts
+const I18N_DICT = {
+	en: {
+		loginSuccessTitle: "Sign-in Successful",
+		loginSuccessDesc: "Your Antigravity account has been authorized and saved.",
+		loginFailedTitle: "Sign-in Failed",
+		windowClosing: "This window will close automatically in a moment..."
+	},
+	zh: {
+		loginSuccessTitle: "授权登录成功",
+		loginSuccessDesc: "Antigravity 账号已成功接入并保存。",
+		loginFailedTitle: "授权登录失败",
+		windowClosing: "此窗口即将在 2 秒内自动关闭..."
+	}
+};
+//#endregion
+//#region src/web/page.ts
+/**
+* Browser-facing HTML for the agy OAuth callback.
+*
+* This is the only page agy serves. The account/statistics dashboard that used
+* to live at `/agy` is gone: that surface is now the Settings section rendered
+* by `src/client/` over the `/api/agy` RPC, so there is no longer a second UI to
+* keep in step with it.
+*
+* The callback stays a real page because Google redirects the browser here.
+*/
+/**
+* Escape text for an HTML text/attribute position.
+*
+* Every interpolation below except the static markup is attacker-influenced or
+* upstream-influenced: `error` is the token endpoint's raw response body, and
+* `email` comes from Google's userinfo. This page is served by the SAME web
+* server, and therefore the same origin, as the DSH GUI — so injected script
+* here would run with the GUI's session and could reach `/api/agy`
+* (`account.exportAll` returns live credential blobs). That chain is why the
+* escaping matters more than the narrow trigger suggests.
+*
+* Text in markup goes through {@link escapeHtml}; text inside the inline
+* `<script>` goes through {@link jsonForInlineScript}. Neither is optional.
+*/
+function escapeHtml(value) {
+	return value.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;").replace(/"/g, "&quot;").replace(/'/g, "&#39;");
+}
+/**
+* Serialize a value for interpolation into the inline `<script>`.
+*
+* `JSON.stringify` escapes for a JS string context only, NOT for the HTML script
+* data state: it leaves `<` alone, so an email or error body containing
+* `<\/script>` terminates the element early and everything after it is parsed as
+* markup. Escaping the three HTML-significant characters as `\uXXXX` keeps the
+* JSON value identical while making the byte sequence unrepresentable in the
+* source. (The `JSON.stringify` output above is a valid JS string either way,
+* because a `\u003c` escape and a literal `<` denote the same character.)
+*/
+function jsonForInlineScript(value) {
+	return JSON.stringify(value).replace(/</g, "\\u003c").replace(/>/g, "\\u003e").replace(/&/g, "\\u0026");
 }
 function renderCallbackHtml(options) {
 	const { ok, error, email, baseUrl } = options;
-	const i18nJson = JSON.stringify(I18N_DICT);
+	const i18nJson = jsonForInlineScript(I18N_DICT);
 	return `<!doctype html>
 <html lang="en">
 <head>
@@ -1287,14 +601,14 @@ function renderCallbackHtml(options) {
     ${ok ? `
       <div class="icon-wrap icon-success">✓</div>
       <h1 id="title">Sign-in Successful</h1>
-      <p id="desc">Your Antigravity account ${email ? "<strong>" + email + "</strong> " : ""}has been authorized and saved.</p>
+      <p id="desc">Your Antigravity account ${email ? "<strong>" + escapeHtml(email) + "</strong> " : ""}has been authorized and saved.</p>
       <p style="font-size:12px;opacity:0.8;" id="closing">This window will close automatically...</p>
       <button class="btn" onclick="window.close()">Close Window</button>
     ` : `
       <div class="icon-wrap icon-error">✕</div>
       <h1 id="title">Sign-in Failed</h1>
-      <p id="desc">Error details: ${error || "Unknown error"}</p>
-      <a class="btn btn-primary" href="${baseUrl}/agy">Return to Dashboard</a>
+      <p id="desc">Error details: ${escapeHtml(error || "Unknown error")}</p>
+      <a class="btn btn-primary" href="${escapeHtml(baseUrl)}/">Return to Settings</a>
     `}
   </div>
   <script>
@@ -1304,13 +618,18 @@ function renderCallbackHtml(options) {
 
     if (${ok ? "true" : "false"}) {
       document.getElementById('title').textContent = dict.loginSuccessTitle;
-      document.getElementById('desc').innerHTML = dict.loginSuccessDesc + (${JSON.stringify(email ? " (" + email + ")" : "")});
+      // textContent, not innerHTML: an email containing markup must never be
+      // parsed as HTML. The string itself is serialized for the script data
+      // state by jsonForInlineScript, so it cannot terminate this element.
+      document.getElementById('desc').textContent = dict.loginSuccessDesc + (${jsonForInlineScript(email ? " (" + email + ")" : "")});
       document.getElementById('closing').textContent = dict.windowClosing;
       
       // Notify parent window & close
       try {
         if (window.opener) {
-          window.opener.postMessage({ type: 'agy_login_success' }, '*');
+          // Target this page's own origin rather than '*', so the message cannot
+          // be delivered to an unrelated opener.
+          window.opener.postMessage({ type: 'agy_login_success' }, window.location.origin);
         }
       } catch (e) {}
       setTimeout(() => {
@@ -1324,529 +643,160 @@ function renderCallbackHtml(options) {
 </html>`;
 }
 //#endregion
-//#region src/web/routes.ts
-function sendJson(res, status, data) {
-	res.writeHead(status, { "content-type": "application/json" });
-	res.end(JSON.stringify(data));
-}
-async function readJson(req) {
-	const chunks = [];
-	for await (const chunk of req) chunks.push(chunk);
-	const text = Buffer.concat(chunks).toString("utf8");
-	return text ? JSON.parse(text) : {};
+//#region src/web/plugin.ts
+const name = "dsh-agy-web";
+/** The one service every composition provides; the rest are resolved lazily. */
+const inject = ["llm"];
+function apply(ctx) {
+	if (isAgyDisabled()) {
+		ctx.logger.warn("[dsh-agy] disabled by DSH_AGY_DISABLE=1 — skipping web registration");
+		return;
+	}
+	ctx.inject(["webServer"], (webCtx) => {
+		const webServer = webCtx.get("webServer");
+		if (!webServer) return;
+		webCtx.effect(() => registerAgyWeb(webCtx, webServer));
+	});
 }
-function createAgyWebRoutes(options) {
-	const { store, sessions, baseUrl } = options;
-	const pendingAuth = /* @__PURE__ */ new Map();
-	const PENDING_AUTH_TTL_MS = 6e5;
-	const prunePendingAuth = (now = Date.now()) => {
-		for (const [key, entry] of pendingAuth) if (entry.expiresAt <= now) pendingAuth.delete(key);
-		while (pendingAuth.size > 100) {
-			let oldestKey = null;
-			let oldestExpiry = Infinity;
-			for (const [key, entry] of pendingAuth) if (entry.expiresAt < oldestExpiry) {
-				oldestExpiry = entry.expiresAt;
-				oldestKey = key;
-			}
-			if (oldestKey) pendingAuth.delete(oldestKey);
-			else break;
-		}
-	};
-	const accountsList = async () => {
-		const storage = await store.load();
-		const now = Date.now();
-		const list = [];
-		for (const [index, account] of storage.accounts.entries()) {
-			const entry = {
-				index,
-				email: account.email ?? null,
-				projectId: account.projectId ?? null,
-				active: index === storage.activeIndex && account.enabled !== false,
-				state: account.enabled === false ? "disabled" : account.verificationRequired ? "verification-required" : account.coolingDownUntil && account.coolingDownUntil > now ? "cooling" : "active",
-				cooldownUntil: account.coolingDownUntil && account.coolingDownUntil > now ? new Date(account.coolingDownUntil).toISOString() : null,
-				cooldownReason: account.cooldownReason ?? null,
-				rateLimits: account.rateLimitResetTimes ?? null,
-				fingerprint: account.fingerprint ? {
-					userAgent: account.fingerprint.userAgent,
-					deviceId: account.fingerprint.deviceId,
-					createdAt: account.fingerprint.createdAt
-				} : null,
-				fingerprintHistory: (account.fingerprintHistory ?? []).length,
-				quota: null,
-				proxy: account.proxy ? maskProxyUrl(account.proxy) : null,
-				proxyMasked: account.proxy ? maskProxyUrl(account.proxy) : null
-			};
-			list.push(entry);
-		}
-		for (const entry of list) {
-			const session = await sessions.getSession().catch(() => void 0);
-			if (!session || session.index !== entry.index) continue;
-			try {
-				const { fetchAvailableModels } = await import("../models-ClGTQBLY.mjs").then((n) => n.r);
-				const discovered = await fetchAvailableModels(session.auth.access, session.account.projectId, accountFetch({ proxyUrl: session.account.proxy }));
-				const models = Object.entries(discovered.models ?? {});
-				if (models.length > 0) {
-					const quotaRows = models.map(([id, m]) => ({
-						id,
-						remainingFraction: typeof m.quotaInfo?.remainingFraction === "number" ? Math.max(0, Math.min(1, m.quotaInfo.remainingFraction)) : null,
-						resetTime: m.quotaInfo?.resetTime ?? null
-					})).sort((a, b) => (a.remainingFraction ?? -1) - (b.remainingFraction ?? -1));
-					entry.quota = {
-						modelCount: models.length,
-						models: quotaRows
-					};
-				}
-			} catch {}
+/**
+* Register the OAuth callback route, and the management RPC once `connection`
+* appears.
+* @param ctx - the web-server-bearing context (owns both registrations).
+* @param webServer - the host web server.
+* @returns disposer for every registration this function made.
+*/
+async function registerAgyWeb(ctx, webServer) {
+	const webStartup = ctx.get("webStartup");
+	const host = webStartup?.host ?? "127.0.0.1";
+	const port = webStartup?.port ?? 3080;
+	const bindHost = webServer.host ?? host;
+	if (![
+		"127.0.0.1",
+		"localhost",
+		"::1"
+	].includes(bindHost)) {
+		ctx.logger.warn("[dsh-agy] web server bound to \"" + bindHost + "\" (non-loopback): not registering the agy routes (they manage account credentials and must stay loopback-only). Bind the web server to 127.0.0.1 to enable them.");
+		return () => {};
+	}
+	const { store, sessions, adapter, stats, modelVisibility, thinkingBudget } = await createAgyRuntime(ctx);
+	const baseUrl = `http://${host}:${port}`;
+	const management = createAgyManagement({
+		store,
+		sessions,
+		stats,
+		modelVisibility,
+		thinkingBudget: {
+			all: () => thinkingBudget.all(),
+			set: (level, value) => thinkingBudget.setBudget(level, value),
+			claude: () => thinkingBudget.claudeBudget(),
+			setClaude: (value) => thinkingBudget.setClaudeBudget(value).claudeBudget,
+			tiered: () => thinkingBudget.tieredBudget(),
+			setTiered: (value) => thinkingBudget.setTieredBudget(value).tieredBudget
+		},
+		listAllModels: () => adapter.listAllModels(),
+		baseUrl,
+		notifyModelsChanged: () => {
+			ctx.emit("llm/adapters-updated");
 		}
-		return list;
-	};
-	const handleAuthUrl = async (res) => {
-		const redirectUri = `${baseUrl}/agy/oauth-callback`;
-		const authorization = await authorizeAntigravity(redirectUri);
-		prunePendingAuth();
-		pendingAuth.set(authorization.state, {
-			verifier: authorization.verifier,
-			expiresAt: Date.now() + PENDING_AUTH_TTL_MS
-		});
-		sendJson(res, 200, { url: authorization.url });
-	};
-	const handleCallback = async (req, res) => {
-		const url = new URL(req.url ?? "/", baseUrl);
-		const code = url.searchParams.get("code");
-		const state = url.searchParams.get("state");
-		if (!code || !state) {
-			res.writeHead(400, { "content-type": "text/html; charset=utf-8" });
-			res.end(renderCallbackHtml({
+	});
+	const disposers = [];
+	disposers.push(webServer.register({
+		kind: "exact",
+		path: "/agy/oauth-callback",
+		handler: async (req, res) => {
+			const url = new URL(req.url ?? "/", baseUrl);
+			const result = await management.handleCallback(url.searchParams).catch((error) => ({
 				ok: false,
-				error: "Missing code or state parameter",
-				baseUrl
+				error: error instanceof Error ? error.message : String(error)
 			}));
-			return;
-		}
-		const expected = pendingAuth.get(state);
-		if (!expected) {
-			res.writeHead(400, { "content-type": "text/html; charset=utf-8" });
-			res.end(renderCallbackHtml({
-				ok: false,
-				error: "Unknown or expired authorization — please start a new login.",
+			res.writeHead(result.ok ? 200 : 400, { "content-type": "text/html; charset=utf-8" });
+			res.end(result.ok ? renderCallbackHtml({
+				ok: true,
+				email: result.email ?? null,
 				baseUrl
-			}));
-			return;
-		}
-		pendingAuth.delete(state);
-		const redirectUri = `${baseUrl}/agy/oauth-callback`;
-		const result = await exchangeAntigravity(code, state, redirectUri, expected.verifier);
-		if (result.type === "failed") {
-			res.writeHead(400, { "content-type": "text/html; charset=utf-8" });
-			res.end(renderCallbackHtml({
+			}) : renderCallbackHtml({
 				ok: false,
-				error: result.error,
+				error: result.error ?? "Unknown error",
 				baseUrl
 			}));
-			return;
-		}
-		await upsertImportedAccount(store, {
-			accessToken: result.access,
-			refreshToken: result.refresh.split("|")[0],
-			tokenType: "Bearer",
-			expiresAt: new Date(result.expires).toISOString(),
-			authMethod: "oauth",
-			email: result.email ?? null,
-			projectId: result.projectId || null,
-			clientId: result.clientId || null
-		}, { overwriteExisting: true });
-		res.writeHead(200, { "content-type": "text/html; charset=utf-8" });
-		res.end(renderCallbackHtml({
-			ok: true,
-			email: result.email ?? null,
-			baseUrl
-		}));
-	};
-	const handleImport = async (req, res) => {
-		try {
-			const body = await readJson(req);
-			const kind = body.kind === "blob" ? "blob" : "json";
-			const sources = Array.isArray(body.sources) ? body.sources : body.source !== void 0 ? [body.source] : [];
-			if (sources.length === 0) throw new Error("nothing to import");
-			sendJson(res, 200, await importManySources(sources.map((source) => ({
-				source,
-				kind
-			})), store, { overwriteExisting: true }));
-		} catch (error) {
-			sendJson(res, 400, { error: error instanceof Error ? error.message : String(error) });
-		}
-	};
-	const handleExportAll = async (_req, res) => {
-		try {
-			const storage = await store.load();
-			const blobs = [];
-			for (let index = 0; index < storage.accounts.length; index++) {
-				const result = await sessions.exportBlob(index);
-				if (result.blob) blobs.push({
-					index,
-					blob: result.blob
-				});
-			}
-			sendJson(res, 200, { blobs });
-		} catch (error) {
-			sendJson(res, 400, { error: error instanceof Error ? error.message : String(error) });
-		}
-	};
-	const handleVerify = async (req, res) => {
-		try {
-			const body = await readJson(req);
-			const index = Number(body.index);
-			const result = await sessions.verifyAccount(index);
-			sendJson(res, result.ok ? 200 : 400, result);
-		} catch (error) {
-			sendJson(res, 400, { error: error instanceof Error ? error.message : String(error) });
-		}
-	};
-	const handleHealth = async (req, res) => {
-		try {
-			const body = await readJson(req);
-			const indices = Array.isArray(body.indices) ? body.indices.map((value) => Number(value)) : void 0;
-			sendJson(res, 200, { results: await sessions.checkAccounts(indices) });
-		} catch (error) {
-			sendJson(res, 400, { error: error instanceof Error ? error.message : String(error) });
 		}
-	};
-	const handleDelete = async (req, res) => {
-		try {
-			const body = await readJson(req);
-			const index = Number(body.index);
-			await store.mutate((storage) => {
-				if (index < 0 || index >= storage.accounts.length) throw new Error("account not found");
-				storage.accounts.splice(index, 1);
-				if (storage.activeIndex >= storage.accounts.length) storage.activeIndex = 0;
-			});
-			sendJson(res, 200, { ok: true });
-		} catch (error) {
-			sendJson(res, 400, { error: error instanceof Error ? error.message : String(error) });
-		}
-	};
-	const handleActivate = async (req, res) => {
-		try {
-			const body = await readJson(req);
-			const index = Number(body.index);
-			await store.mutate((storage) => {
-				if (index < 0 || index >= storage.accounts.length) throw new Error("account not found");
-				storage.activeIndex = index;
-			});
-			sendJson(res, 200, {
-				ok: true,
-				index
-			});
-		} catch (error) {
-			sendJson(res, 400, { error: error instanceof Error ? error.message : String(error) });
-		}
-	};
-	const handleModels = async (_req, res) => {
-		const session = await sessions.getSession().catch(() => void 0);
-		if (!session) {
-			sendJson(res, 400, { error: "No agy account configured — run `dsh-agy login` first." });
+	}));
+	ctx.inject(["connection"], (connectionCtx) => {
+		const connection = connectionCtx.get("connection");
+		if (!connection || typeof connection.fetch?.register !== "function") {
+			connectionCtx.logger.warn("[dsh-agy] connection.fetch unavailable — management RPC not registered");
 			return;
 		}
-		try {
-			const { listAgyModels } = await import("../models-ClGTQBLY.mjs").then((n) => n.r);
-			const models = await listAgyModels(session.auth.access, session.account.projectId, accountFetch({ proxyUrl: session.account.proxy }));
-			sendJson(res, 200, {
-				account: session.account.email ?? null,
-				models: models.map((m) => ({
-					id: m.id,
-					name: m.name
-				}))
-			});
-		} catch (error) {
-			sendJson(res, 400, { error: error instanceof Error ? error.message : String(error) });
-		}
-	};
-	const handleTest = async (req, res) => {
-		try {
-			const body = await readJson(req);
-			const model = typeof body.model === "string" ? body.model : "";
-			if (!model) {
-				sendJson(res, 400, { error: "model is required" });
-				return;
-			}
-			const result = await sessions.testCall(model);
-			sendJson(res, result.ok ? 200 : 400, result);
-		} catch (error) {
-			sendJson(res, 400, { error: error instanceof Error ? error.message : String(error) });
-		}
-	};
-	const handleExport = async (req, res) => {
-		try {
-			const body = await readJson(req);
-			const index = Number(body.index);
-			const result = await sessions.exportBlob(index);
-			if (result.error) {
-				sendJson(res, 400, result);
-				return;
-			}
-			sendJson(res, 200, { blob: result.blob });
-		} catch (error) {
-			sendJson(res, 400, { error: error instanceof Error ? error.message : String(error) });
-		}
-	};
-	const handleFingerprint = async (req, res) => {
-		try {
-			const body = await readJson(req);
-			const index = Number(body.index);
-			const action = body.action === "regenerate" ? "regenerate" : "show";
-			sendJson(res, 200, await store.mutate(async (storage) => {
-				const account = storage.accounts[index];
-				if (!account) throw new Error("account not found");
-				if (action === "regenerate") {
-					const fresh = generateFingerprint(void 0, await resolveAntigravityVersionBounded());
-					account.fingerprint = fresh;
-					account.fingerprintHistory = recordFingerprintVersion(account.fingerprintHistory, fresh, "regenerated");
+		connectionCtx.effect(() => connection.fetch.register({
+			path: "/api/agy",
+			methods: ["POST"],
+			requestBody: "buffered",
+			async fetch(request) {
+				if (request.method !== "POST") return new Response("method not allowed", { status: 405 });
+				if (request.headers.get("content-type")?.split(";", 1)[0]?.trim().toLowerCase() !== "application/json") return new Response("content type must be application/json", { status: 415 });
+				let message;
+				try {
+					message = await request.json();
+				} catch {
+					return new Response("body is not JSON", { status: 400 });
 				}
-				return {
-					action,
-					fingerprint: account.fingerprint ? {
-						userAgent: account.fingerprint.userAgent,
-						deviceId: account.fingerprint.deviceId,
-						createdAt: account.fingerprint.createdAt
-					} : null,
-					history: account.fingerprintHistory?.length ?? 0
-				};
-			}));
-		} catch (error) {
-			sendJson(res, 400, { error: error instanceof Error ? error.message : String(error) });
-		}
-	};
-	const handleProxy = async (req, res) => {
-		try {
-			const body = await readJson(req);
-			const rawIdx = Number(body.index);
-			if (!Number.isInteger(rawIdx) || !Number.isFinite(rawIdx) || rawIdx < 0) {
-				sendJson(res, 400, { error: "invalid index" });
-				return;
-			}
-			const index = rawIdx;
-			const raw = typeof body.proxy === "string" ? body.proxy : "";
-			if (!raw.trim()) {
-				await store.mutate((storage) => {
-					const account = storage.accounts[index];
-					if (!account) throw new Error("account not found");
-					delete account.proxy;
-				});
-				sendJson(res, 200, {
-					ok: true,
-					proxy: null,
-					proxyMasked: null,
-					rawLogs: null
+				const rpcId = typeof message.rpcId === "string" ? message.rpcId : "invalid-request";
+				const call = message.payload;
+				if (message.type !== "client-request" || typeof message.rpcId !== "string" || typeof call?.method !== "string") return reply(rpcId, {
+					ok: false,
+					error: {
+						code: "agy/bad-request",
+						message: "Invalid agy management request."
+					}
 				});
-				return;
-			}
-			let normalized;
-			try {
-				normalized = normalizeProxyUrl(raw);
-			} catch (e) {
-				sendJson(res, 400, { error: e instanceof Error ? e.message : String(e) });
-				return;
-			}
-			await store.mutate((storage) => {
-				const account = storage.accounts[index];
-				if (!account) throw new Error("account not found");
-				account.proxy = normalized;
-			});
-			sendJson(res, 200, {
-				ok: true,
-				proxy: maskProxyUrl(normalized),
-				proxyMasked: maskProxyUrl(normalized),
-				rawLogs: proxyUrlForLogs(normalized)
-			});
-		} catch (error) {
-			sendJson(res, 400, { error: error instanceof Error ? error.message : String(error) });
-		}
-	};
-	const handleProxyTest = async (req, res) => {
-		try {
-			const body = await readJson(req);
-			const rawIdx2 = body.index !== void 0 ? Number(body.index) : NaN;
-			const hasExplicitProxy = typeof body.proxy === "string" && body.proxy.trim() !== "";
-			if (!hasExplicitProxy) {
-				if (!Number.isInteger(rawIdx2) || !Number.isFinite(rawIdx2) || rawIdx2 < 0) {
-					sendJson(res, 400, { error: "invalid index" });
-					return;
-				}
-			} else if (body.index !== void 0) {
-				if (!Number.isInteger(rawIdx2) || !Number.isFinite(rawIdx2) || rawIdx2 < 0) {
-					sendJson(res, 400, { error: "invalid index" });
-					return;
-				}
-			}
-			const index = hasExplicitProxy && body.index === void 0 ? -1 : rawIdx2;
-			let target;
-			if (hasExplicitProxy) try {
-				target = normalizeProxyUrl(body.proxy);
-			} catch (e) {
-				sendJson(res, 400, { error: e instanceof Error ? e.message : String(e) });
-				return;
-			}
-			else {
-				const account = (await store.load()).accounts[index];
-				if (!account) {
-					sendJson(res, 400, { error: "account not found" });
-					return;
-				}
-				if (!account.proxy) {
-					sendJson(res, 400, { error: "no proxy configured for this account" });
-					return;
+				try {
+					return reply(rpcId, {
+						ok: true,
+						value: await management.call(call.method, call.payload)
+					});
+				} catch (error) {
+					const text = error instanceof Error ? error.message : String(error);
+					connectionCtx.logger.warn(`[dsh-agy] ${call.method} failed: ${text}`);
+					return reply(rpcId, {
+						ok: false,
+						error: {
+							code: "agy/handler-failed",
+							message: text
+						}
+					});
 				}
-				target = account.proxy;
-			}
-			const masked = maskProxyUrl(target) ?? proxyUrlForLogs(target);
-			let ok = false;
-			let errMsg;
-			try {
-				ok = await isProxyReachable(target, 2e3);
-				if (!ok) errMsg = "proxy unreachable: " + masked;
-			} catch (e) {
-				ok = false;
-				errMsg = e instanceof Error ? e.message : String(e);
 			}
-			sendJson(res, 200, {
-				ok,
-				masked,
-				...errMsg ? { error: errMsg } : {}
-			});
-		} catch (error) {
-			sendJson(res, 400, { error: error instanceof Error ? error.message : String(error) });
-		}
+		}), "dsh-agy: /api/agy management RPC");
+	});
+	return () => {
+		for (const dispose of disposers) dispose();
 	};
-	return [
-		{
-			kind: "exact",
-			path: "/agy",
-			handler: (req, res) => {
-				if (req.method === "GET") {
-					res.writeHead(200, { "content-type": "text/html; charset=utf-8" });
-					res.end(renderDashboardHtml());
-					return;
-				}
-				res.writeHead(405);
-				res.end();
-			}
-		},
-		{
-			kind: "exact",
-			path: "/agy/oauth-callback",
-			handler: handleCallback
-		},
-		{
-			kind: "exact",
-			path: "/agy/api/accounts",
-			handler: async (_req, res) => {
-				sendJson(res, 200, { accounts: await accountsList() });
-			}
-		},
-		{
-			kind: "exact",
-			path: "/agy/api/auth-url",
-			handler: async (_req, res) => {
-				await handleAuthUrl(res);
-			}
-		},
-		{
-			kind: "exact",
-			path: "/agy/api/import",
-			handler: handleImport
-		},
-		{
-			kind: "exact",
-			path: "/agy/api/export-all",
-			handler: handleExportAll
-		},
-		{
-			kind: "exact",
-			path: "/agy/api/verify",
-			handler: handleVerify
-		},
-		{
-			kind: "exact",
-			path: "/agy/api/health",
-			handler: handleHealth
-		},
-		{
-			kind: "exact",
-			path: "/agy/api/delete",
-			handler: handleDelete
-		},
-		{
-			kind: "exact",
-			path: "/agy/api/activate",
-			handler: handleActivate
-		},
-		{
-			kind: "exact",
-			path: "/agy/api/models",
-			handler: handleModels
-		},
-		{
-			kind: "exact",
-			path: "/agy/api/test",
-			handler: handleTest
-		},
-		{
-			kind: "exact",
-			path: "/agy/api/export",
-			handler: handleExport
-		},
-		{
-			kind: "exact",
-			path: "/agy/api/fingerprint",
-			handler: handleFingerprint
-		},
-		{
-			kind: "exact",
-			path: "/agy/api/proxy",
-			handler: handleProxy
-		},
-		{
-			kind: "exact",
-			path: "/agy/api/proxy/test",
-			handler: handleProxyTest
-		}
-	];
 }
-//#endregion
-//#region src/web/plugin.ts
-const name = "dsh-agy-web";
-const inject = ["llm", "webServer"];
-function apply(ctx) {
-	if (isAgyDisabled()) {
-		ctx.logger.warn("[dsh-agy] disabled by DSH_AGY_DISABLE=1 — skipping /agy registration");
-		return;
-	}
-	ctx.effect(async () => {
-		const webServer = ctx.get("webServer");
-		if (!webServer) return () => {};
-		const webStartup = ctx.get("webStartup");
-		const host = webStartup?.host ?? "127.0.0.1";
-		const port = webStartup?.port ?? 3080;
-		const bindHost = webServer.host ?? host;
-		if (![
-			"127.0.0.1",
-			"localhost",
-			"::1"
-		].includes(bindHost)) {
-			ctx.logger.warn("[dsh-agy] web server bound to \"" + bindHost + "\" (non-loopback): not registering the /agy routes (they manage account credentials and must stay loopback-only). Bind the web server to 127.0.0.1 to enable them.");
-			return () => {};
+/**
+* Wrap one result in the Connection RPC response envelope.
+*
+* A failure MUST carry `error.details` as an object: the client's envelope
+* parser rejects a failure without it as "invalid server-response", which hides
+* the real message behind a transport-sounding error.
+*/
+function reply(rpcId, result) {
+	const normalized = isFailure(result) ? {
+		...result,
+		error: {
+			details: {},
+			...result.error
 		}
-		const { store, sessions } = await createAgyRuntime(ctx);
-		const disposers = createAgyWebRoutes({
-			store,
-			sessions,
-			baseUrl: `http://${host}:${port}`
-		}).map((route) => webServer.register(route));
-		return () => {
-			for (const dispose of disposers) dispose();
-		};
+	} : result;
+	return Response.json({
+		type: "server-response",
+		rpcId,
+		result: normalized
 	});
 }
+/** Whether one result is an RPC failure envelope. */
+function isFailure(value) {
+	return typeof value === "object" && value !== null && value.ok === false && typeof value.error === "object" && value.error !== null;
+}
 //#endregion
 export { apply, inject, name };