dsh-agy 0.2.2 → 0.2.4

package/README.md

@@ -15,8 +15,9 @@ fingerprinting, and both CLI and web management.
   paste-URL mode and a remote paste-credential blob channel.
 - **Two management surfaces**: web and CLI, either one works, core features are
   the same.
-- **Multi-account pool**: encrypted account store, automatic rotation on rate
-  limits, per-account cooldown with tiered backoff, per-account device
+- **Multi-account pool**: encrypted account store, usage-aware account
+  selection (family-scoped quotas, OMP-aligned ranking), automatic rotation on
+  rate limits, per-account cooldown to the real reset time, per-account device
   fingerprints.
 - **Quota dashboard**: only active when DSH Web is running; append `/agy` to
   your dsh web address: login, account management, per-model quota bars, model
@@ -63,6 +64,7 @@ npm install -g dsh-agy
 dsh-agy login          # interactive OAuth (browser, --headless paste, or --blob)
 dsh-agy status         # list accounts + quota summary
 dsh-agy verify         # refresh + health check
+dsh-agy health         # batch health check (optionally on an interval)
 dsh-agy import <file>  # import agy auth.json or credential blob (--blob)
 dsh-agy logout         # remove account
 ```
@@ -76,8 +78,27 @@ dsh-agy logout         # remove account
 | `dsh-agy import <files...>` | `--blob` — the pasted value is a credential blob<br>`--email <email>` — set the account email (skips userinfo verification)<br>`--overwrite` — replace an existing account with the same email | Import agy auth.json files or credential blobs (multiple files / multi-line paste = batch import) |
 | `dsh-agy export` | `--index <n>` — export one account by index (default: all)<br>`--out <dir>` — write one `dsh-agy-<index>.blob` per account (default: print to stdout, one blob per line) | Export account credentials as paste blobs |
 | `dsh-agy verify` | `--index <n>` — verify one account by index (default: all) | Refresh + health check |
+| `dsh-agy health` | `--index <n...>` — check only these accounts (default: all enabled)<br>`--interval <ms>` — repeat on an interval instead of once | Batch health check (refresh + userinfo), re-enables accounts whose credentials are live again |
 | `dsh-agy logout` | `--index <n>` — account index (default: active)<br>`--email <email>` — account email | Remove an account |
 
+### Per-account proxy
+
+Each account can have its own proxy; credentials are encrypted at rest and displayed masked as `protocol//host:port`.
+
+```sh
+dsh-agy login --proxy socks5://user:pass@host:1080
+dsh-agy import --proxy <url> file.json
+dsh-agy proxy set --index 0 --proxy <url>   # set / update
+dsh-agy proxy clear --index 0               # clear (fall back to env)
+dsh-agy proxy test --index 0                # TCP 2s fast-fail probe
+dsh-agy proxy list                          # masked list
+dsh-agy status                              # shows proxy column (masked host:port)
+```
+
+Fallback: with no per-account proxy, requests use `EnvHttpProxyAgent` (`HTTP_PROXY`/`HTTPS_PROXY` with `NO_PROXY` honored). Per-account proxies ignore `NO_PROXY`, are fail-closed (unreachable proxy skips the account without cooldown and clears affinity), and loopback targets (`localhost`/`127.0.0.1`/`::1`) are always forced direct.
+
+Web dashboard (`/agy`): each account card shows an inline Proxy row `[input] [Save][Clear][Test]` with masked `host:port`; writes via `POST /agy/api/proxy`, probes via `POST /agy/api/proxy/test`.
+
 ### Path C: Local Development & Link
 
 ```sh
@@ -114,18 +135,34 @@ valid until it expires or you revoke it in your Google account security settings
 
 ### Rotation mechanics
 
+Usage-aware selection: when several accounts are available, requests rank them
+by the requested model's backend counter family (`gemini-*` → Google,
+`claude-*` → Anthropic, `gpt-*` → OpenAI): accounts whose quota is about to
+reset with headroom left are used first ("use it or lose it"), near-exhausted
+families are avoided, and exhausted families block the account until the real
+reset time.
+
 429 (Too Many Requests) responses:
 
 | Category | Behavior |
 |---|---|
 | `soft_rate_limit` (Retry-After < 3s) | immediate retry on the same account, no cooldown |
-| `rate_limited` | 5-minute cooldown + switch to the next account (same account when single) |
-| `quota_exhausted` ("quota reached", "individual quota", RESOURCE_EXHAUSTED…) | 24-hour cooldown — no further calls to that account for the day |
+| `rate_limited` | cooldown until the server-reported reset time (capped 30min, 5min fallback) + switch to the next account (same account when single) |
+| `quota_exhausted` ("quota reached", "individual quota", RESOURCE_EXHAUSTED…) | cooldown until the server-reported reset time (capped 24h) — no further calls to that account until then |
 | `unknown` | exponential backoff |
 
 401/403 → account revoked (marked for re-authentication). Success resets the failure
 counter.
 
+### Risk controls (environment switches)
+
+| Env | Effect |
+|---|---|
+| `DSH_AGY_DISABLE=1` | Kill switch: the plugin registers nothing (provider + `/agy` routes) and the CLI refuses to run. |
+| `DSH_AGY_FINGERPRINT_MODE=stable` | One fixed client identity per account — no per-request header randomization, no fingerprint regeneration (OMP-style fixed-client posture). Default `dynamic` keeps per-request randomization. |
+| `DSH_AGY_HEALTH_INTERVAL_MS=<ms>` | Background batch health probe inside the harness (refresh + userinfo on the configured interval); off by default. |
+| `AGY_CLIENT_ID` / `AGY_CLIENT_SECRET` | BYO OAuth app escape hatch: override the embedded public Antigravity client credentials. |
+
 ### About cache hits: why not 99% like DeepSeek V4?
 
 Bottom line: the cache hit strategy is decided by the model provider's cache