dsh-agy

dsh-agy

Google Antigravity (agy) access for DeepSeek Harness: OAuth authentication, a multi-account pool with automatic 429 rotation, device fingerprinting, and both CLI and web management. 中文文档：docs/README_zh.md Features OAuth login: one-click sign-in via browser OAuth callback, with headless paste-URL mode and a remote paste-credential blob channel. Two management surfaces: web and CLI, either one works, core features are the same. Multi-account pool: encrypted account store, usage-aware account selection (family-scoped quotas, OMP-aligned ranking), automatic rotation on rate limits, per-account cooldown to the real reset time, per-account device fingerprints. Inline Settings UI: an Antigravity section inside DSH Settings with five tabs — accounts (login, activation, grouped 5-hour/weekly quota windows, test calls, fingerprint and proxy management), models (per-model visibility), config (thinking budgets, multimodal inline limit), usage (cumulative token and request statistics), and credentials (import/export). No separate page: the surface only exists where DSH Settings does. Quota badge in the session header: the tightest of the active account's tracked window

The Antigravity section inside DSH Settings. Account emails and project names are redacted. Quickstart Path A: DSH Web GUI Users (Recommended — 100% Web UI, zero CLI commands)

For users using DeepSeek Harness browser workspace / Web GUI:

The section lives in Settings → Antigravity (top-level, alongside General and Models). There is no separate dashboard page: the old /agy URL is gone. Path B: Headless / Terminal Only (Standalone CLI)

For Linux VPS, SSH remote servers, or headless CI environments:

CLI reference Per-account proxy

Each account can have its own proxy; credentials are encrypted at rest and displayed masked as protocol//host:port.

Fallback: with no per-account proxy, requests use EnvHttpProxyAgent (HTTP_PROXY/HTTPS_PROXY with NO_PROXY honored). Per-account proxies ignore NO_PROXY, are fail-closed (unreachable proxy skips the account without cooldown and clears affinity), and loopback targets (localhost/127.0.0.1/::1) are always forced direct.

Settings → Antigravity → account detail shows a Proxy row [input] [Save][Clear][Test] with the masked host:port; writes and probes go over the management RPC (account.proxy / account.proxyTest). Save requires a non-empty value — clearing an existing proxy is the explicit Clear action, never an accidental empty Save. Test probes whatever is in the box, so an UNSAVED proxy can be checked before it is written; it reports reachable/unreachable in the notice line, and is disabled (with the reason on its tooltip) when there is nothing to probe.

The toolbar's Refresh reloads the account list and usage ledger, and additionally re-measures the 5h/weekly quota windows past their 10-minute TTL cache — that forced probe reports how many accounts it refreshed, so a click is never silent. Automatic reloads respect the TTL and spend no upstream call. Path C: Local Development & Link