pi-antigravity-rotator 2.3.1 → 2.3.2

package/src/rotator.ts

@@ -44,6 +44,7 @@ import { logger } from "./logger.js";
 import { getUpdateInfo } from "./version-check.js";
 import { getNotifications } from "./notification-poller.js";
 import { getConfiguredAdminToken } from "./admin-auth.js";
+import { getProxyExposureWarning } from "./exposure.js";
 import {
   getCachedState,
   setCachedState,
@@ -876,7 +877,7 @@ export class AccountRotator {
     const state = this.modelState.get(modelKey);
     if (state) {
       state.requestsOnActiveAccount++;
-      this.saveState();
+      this.scheduleStateSave();
     }
   }
 
@@ -2165,7 +2166,7 @@ export class AccountRotator {
     account.dailyRequestCount++;
     this.projectRequests[account.config.projectId] =
       (this.projectRequests[account.config.projectId] ?? 0) + 1;
-    this.saveState();
+    this.scheduleStateSave();
   }
 
   getSafetyJitterMs(account: AccountRuntime): number {
@@ -2655,6 +2656,11 @@ export class AccountRotator {
       }
     }
 
+    const adminWarning = getConfiguredAdminToken()
+      ? null
+      : `Admin routes are exposed on ${this.config.bindHost}:${this.config.proxyPort} because PI_ROTATOR_ADMIN_TOKEN is not configured.`;
+    const proxyWarning = getProxyExposureWarning(this.config);
+
     return {
       version: updateInfo.currentVersion,
       proxyPort: this.config.proxyPort,
@@ -2676,9 +2682,7 @@ export class AccountRotator {
       },
       security: {
         adminTokenConfigured: !!getConfiguredAdminToken(),
-        warning: getConfiguredAdminToken()
-          ? null
-          : `Admin routes are exposed on ${this.config.bindHost}:${this.config.proxyPort} because PI_ROTATOR_ADMIN_TOKEN is not configured.`,
+        warning: [adminWarning, proxyWarning].filter(Boolean).join(" ") || null,
         bindHost: this.config.bindHost || "0.0.0.0",
       },
       routingDiagnostics,
@@ -2905,7 +2909,7 @@ export class AccountRotator {
   }
 
   setAccountTier(email: string, tier: string): boolean {
-    const validTiers = ["unknown", "free", "pro", "ultra"];
+    const validTiers = ["unknown", "free", "plus", "pro", "ultra"];
     if (!validTiers.includes(tier)) return false;
     const account = this.accounts.find((a) => a.config.email === email);
     if (!account) return false;

package/src/static/dashboard.js

@@ -370,6 +370,10 @@ function renderAccounts(data) {
         "FREE</div>" +
         '<div class="tier-option" onclick="setAccountTier(\'' +
         jsString(a.email) +
+        "', 'plus')\">" +
+        "PLUS</div>" +
+        '<div class="tier-option" onclick="setAccountTier(\'' +
+        jsString(a.email) +
         "', 'pro')\">" +
         "PRO</div>" +
         '<div class="tier-option" onclick="setAccountTier(\'' +
@@ -836,8 +840,9 @@ function renderAttentionPanel(data) {
         "Security warning",
         security.warning,
         [
-          "Set PI_ROTATOR_ADMIN_TOKEN to protect dashboard and admin APIs.",
-          "For local-only usage, prefer bindHost 127.0.0.1.",
+          "Dashboard and admin APIs require the admin token.",
+          "Native and /v1 proxy routes do not require a token.",
+          "For local-only usage, set bindHost to 127.0.0.1 or bind the Docker port to 127.0.0.1.",
         ],
         "warning",
       ),

package/src/telemetry.ts

@@ -9,8 +9,10 @@
 //   - Flag events: HTTP status, matched patterns, model, pool state,
 //     request velocity — everything needed to improve the anti-flag algorithm
 //
-// What we NEVER collect:
-//   - Emails, tokens, IPs, project IDs, request bodies, error message text
+// What we NEVER include in telemetry payloads or event files:
+//   - Emails, tokens, project IDs, request bodies, error message text
+// Source IPs are not part of the JSON telemetry payload, but the receiver and
+// network path can observe them for transport and rate limiting.
 //
 // Docs: https://github.com/tuxevil/pi-antigravity-rotator#telemetry
 
@@ -129,8 +131,8 @@ function printTelemetryNotice(): void {
 	console.log();
 	console.log("  ╭──────────────────────────────────────────────────────────╮");
 	console.log("  │  Anonymous telemetry is enabled to help improve the      │");
-	console.log("  │  rotator. No emails, tokens, IPs, or personal data is   │");
-	console.log("  │  collected — only aggregate usage stats.                 │");
+	console.log("  │  rotator. No emails, tokens, project IDs, request bodies │");
+	console.log("  │  or error text are sent — only aggregate usage stats.    │");
 	console.log("  │                                                          │");
 	console.log("  │  Flag events help us improve the anti-flag algorithm     │");
 	console.log("  │  for everyone. Consider keeping telemetry on!            │");
@@ -182,7 +184,7 @@ export interface TelemetryPayload {
 // This is the most important telemetry signal — it drives anti-flag
 // algorithm improvements that benefit all users.
 //
-// NO PII: no email, no error text, no IP, no projectId.
+// NO PII in the payload: no email, no error text, no projectId, no request body.
 // Only structured, anonymous context about what happened.
 export interface FlagEventData {
 	// What triggered it

package/src/types.ts

@@ -150,14 +150,6 @@ export interface ModelSpecConfig {
   isThinking: boolean;
 }
 
-// Per-model thinking/output spec used by the compat layer.
-// Operators can override defaults via the `modelSpecs` field in accounts.json.
-export interface ModelSpecConfig {
-  maxOutputTokens: number;
-  thinkingBudget: number; // -1 = adaptive (model decides), >=0 = fixed
-  isThinking: boolean;
-}
-
 // Per-model quota info for an account
 export interface ModelQuota {
   modelKey: string;
@@ -619,9 +611,10 @@ export const CLIENT_SECRET = atob(
 );
 export const TOKEN_URL = "https://oauth2.googleapis.com/token";
 
+// Production default: use the daily Cloud Code Assist endpoint. The proxy
+// forwarder supports cascading if additional verified endpoints are added here.
 export const ANTIGRAVITY_ENDPOINTS = [
   "https://daily-cloudcode-pa.googleapis.com",
-  // "https://cloudcode-pa.googleapis.com",
 ] as const;
 
 export const QUOTA_API_URL =

package/src/version-check.ts

@@ -26,6 +26,7 @@ let cachedInfo: UpdateInfo = {
 	updateAvailable: false,
 	checkedAt: 0,
 };
+let initialCheckTimer: ReturnType<typeof setTimeout> | null = null;
 let checkTimer: ReturnType<typeof setInterval> | null = null;
 
 /**
@@ -123,18 +124,26 @@ export function getUpdateInfo(): UpdateInfo {
  */
 export function startVersionChecker(): void {
 	// Initial delayed check
-	setTimeout(() => {
-		void checkForUpdate();
-	}, 10_000);
+	if (!initialCheckTimer) {
+		initialCheckTimer = setTimeout(() => {
+			initialCheckTimer = null;
+			void checkForUpdate();
+		}, 10_000);
+		if (initialCheckTimer.unref) {
+			initialCheckTimer.unref();
+		}
+	}
 
 	// Periodic check
-	checkTimer = setInterval(() => {
-		void checkForUpdate();
-	}, CHECK_INTERVAL_MS);
-
-	// Don't keep process alive just for version checking
-	if (checkTimer.unref) {
-		checkTimer.unref();
+	if (!checkTimer) {
+		checkTimer = setInterval(() => {
+			void checkForUpdate();
+		}, CHECK_INTERVAL_MS);
+
+		// Don't keep process alive just for version checking
+		if (checkTimer.unref) {
+			checkTimer.unref();
+		}
 	}
 }
 
@@ -142,6 +151,10 @@ export function startVersionChecker(): void {
  * Stop periodic version checking.
  */
 export function stopVersionChecker(): void {
+	if (initialCheckTimer) {
+		clearTimeout(initialCheckTimer);
+		initialCheckTimer = null;
+	}
 	if (checkTimer) {
 		clearInterval(checkTimer);
 		checkTimer = null;

package/tools/telemetry-receiver/README.md

@@ -113,7 +113,8 @@ curl -H "Authorization: Bearer YOUR_STATS_TOKEN" https://telemetry.yourdomain.co
 
 ## Security
 
-- **No PII is stored**: no emails, tokens, IPs, project IDs
+- **No PII is stored in telemetry event files**: no emails, tokens, project IDs, request bodies, or error text
+- Source IPs are used transiently for in-memory rate limiting and may be visible to your network, host, or reverse-proxy logs. The receiver does not write IPs into telemetry JSONL event files.
 - Email-pattern detection in validation: payloads containing `@` email patterns are rejected
 - Payloads capped at 4KB
 - Rate limited: 12 req/min per IP