pi-antigravity-rotator 2.3.0 → 2.3.2

package/src/telemetry.ts

@@ -9,8 +9,10 @@
 //   - Flag events: HTTP status, matched patterns, model, pool state,
 //     request velocity — everything needed to improve the anti-flag algorithm
 //
-// What we NEVER collect:
-//   - Emails, tokens, IPs, project IDs, request bodies, error message text
+// What we NEVER include in telemetry payloads or event files:
+//   - Emails, tokens, project IDs, request bodies, error message text
+// Source IPs are not part of the JSON telemetry payload, but the receiver and
+// network path can observe them for transport and rate limiting.
 //
 // Docs: https://github.com/tuxevil/pi-antigravity-rotator#telemetry
 
@@ -129,8 +131,8 @@ function printTelemetryNotice(): void {
 	console.log();
 	console.log("  ╭──────────────────────────────────────────────────────────╮");
 	console.log("  │  Anonymous telemetry is enabled to help improve the      │");
-	console.log("  │  rotator. No emails, tokens, IPs, or personal data is   │");
-	console.log("  │  collected — only aggregate usage stats.                 │");
+	console.log("  │  rotator. No emails, tokens, project IDs, request bodies │");
+	console.log("  │  or error text are sent — only aggregate usage stats.    │");
 	console.log("  │                                                          │");
 	console.log("  │  Flag events help us improve the anti-flag algorithm     │");
 	console.log("  │  for everyone. Consider keeping telemetry on!            │");
@@ -182,7 +184,7 @@ export interface TelemetryPayload {
 // This is the most important telemetry signal — it drives anti-flag
 // algorithm improvements that benefit all users.
 //
-// NO PII: no email, no error text, no IP, no projectId.
+// NO PII in the payload: no email, no error text, no projectId, no request body.
 // Only structured, anonymous context about what happened.
 export interface FlagEventData {
 	// What triggered it

package/src/types.ts

@@ -150,14 +150,6 @@ export interface ModelSpecConfig {
   isThinking: boolean;
 }
 
-// Per-model thinking/output spec used by the compat layer.
-// Operators can override defaults via the `modelSpecs` field in accounts.json.
-export interface ModelSpecConfig {
-  maxOutputTokens: number;
-  thinkingBudget: number; // -1 = adaptive (model decides), >=0 = fixed
-  isThinking: boolean;
-}
-
 // Per-model quota info for an account
 export interface ModelQuota {
   modelKey: string;
@@ -345,6 +337,7 @@ export interface PersistedState {
   protectivePauseUntil?: number;
   protectivePauseReason?: string | null;
   allowFreshWindowStarts?: boolean;
+  autoWarmupEnabled?: boolean;
   safety?: PersistedSafetyState;
   accounts: Record<
     string,
@@ -396,6 +389,7 @@ export interface StatusResponse {
   protectivePauseReason: string | null;
   operatorControls: {
     allowFreshWindowStarts: boolean;
+    autoWarmupEnabled: boolean;
   };
   security: {
     adminTokenConfigured: boolean;
@@ -617,9 +611,10 @@ export const CLIENT_SECRET = atob(
 );
 export const TOKEN_URL = "https://oauth2.googleapis.com/token";
 
+// Production default: use the daily Cloud Code Assist endpoint. The proxy
+// forwarder supports cascading if additional verified endpoints are added here.
 export const ANTIGRAVITY_ENDPOINTS = [
   "https://daily-cloudcode-pa.googleapis.com",
-  // "https://cloudcode-pa.googleapis.com",
 ] as const;
 
 export const QUOTA_API_URL =

package/src/version-check.ts

@@ -26,6 +26,7 @@ let cachedInfo: UpdateInfo = {
 	updateAvailable: false,
 	checkedAt: 0,
 };
+let initialCheckTimer: ReturnType<typeof setTimeout> | null = null;
 let checkTimer: ReturnType<typeof setInterval> | null = null;
 
 /**
@@ -123,18 +124,26 @@ export function getUpdateInfo(): UpdateInfo {
  */
 export function startVersionChecker(): void {
 	// Initial delayed check
-	setTimeout(() => {
-		void checkForUpdate();
-	}, 10_000);
+	if (!initialCheckTimer) {
+		initialCheckTimer = setTimeout(() => {
+			initialCheckTimer = null;
+			void checkForUpdate();
+		}, 10_000);
+		if (initialCheckTimer.unref) {
+			initialCheckTimer.unref();
+		}
+	}
 
 	// Periodic check
-	checkTimer = setInterval(() => {
-		void checkForUpdate();
-	}, CHECK_INTERVAL_MS);
-
-	// Don't keep process alive just for version checking
-	if (checkTimer.unref) {
-		checkTimer.unref();
+	if (!checkTimer) {
+		checkTimer = setInterval(() => {
+			void checkForUpdate();
+		}, CHECK_INTERVAL_MS);
+
+		// Don't keep process alive just for version checking
+		if (checkTimer.unref) {
+			checkTimer.unref();
+		}
 	}
 }
 
@@ -142,6 +151,10 @@ export function startVersionChecker(): void {
  * Stop periodic version checking.
  */
 export function stopVersionChecker(): void {
+	if (initialCheckTimer) {
+		clearTimeout(initialCheckTimer);
+		initialCheckTimer = null;
+	}
 	if (checkTimer) {
 		clearInterval(checkTimer);
 		checkTimer = null;

package/tools/telemetry-receiver/README.md

@@ -113,7 +113,8 @@ curl -H "Authorization: Bearer YOUR_STATS_TOKEN" https://telemetry.yourdomain.co
 
 ## Security
 
-- **No PII is stored**: no emails, tokens, IPs, project IDs
+- **No PII is stored in telemetry event files**: no emails, tokens, project IDs, request bodies, or error text
+- Source IPs are used transiently for in-memory rate limiting and may be visible to your network, host, or reverse-proxy logs. The receiver does not write IPs into telemetry JSONL event files.
 - Email-pattern detection in validation: payloads containing `@` email patterns are rejected
 - Payloads capped at 4KB
 - Rate limited: 12 req/min per IP

package/tools/telemetry-receiver/receiver.js

@@ -269,6 +269,11 @@ const MODEL_PRICING = {
 	"gemini-3.1-pro-low":       { inputPer1M: 2.00,  outputPer1M: 12.00 },
 	"gemini-3.1-pro-high":      { inputPer1M: 2.00,  outputPer1M: 12.00 },
 	"gemini-3-flash":           { inputPer1M: 0.50,  outputPer1M: 3.00 },
+	"gemini-3.5-flash":         { inputPer1M: 1.50,  outputPer1M: 9.00 },
+	"gemini-3.5-flash-low":     { inputPer1M: 1.50,  outputPer1M: 9.00 },
+	"gemini-3.5-flash-medium":  { inputPer1M: 1.50,  outputPer1M: 9.00 },
+	"gemini-3.5-flash-high":    { inputPer1M: 1.50,  outputPer1M: 9.00 },
+	"gpt-oss-120b-medium":      { inputPer1M: 2.00,  outputPer1M: 10.00 },
 };
 
 function calculateSavings(tokensByModel) {