9router-proxy 0.6.10 → 0.6.11

package/app/src/mitm/server.js

@@ -22,7 +22,7 @@ ${f}`;qt.writeFileSync(n,v)}catch{}},file:n}}Zn.exports={log:Uu,err:Pu,dumpReque
 Private-Lines: `+u+`\r
 `,s+=c;var S=va("putty-private-key-file-mac-key",t),A=Ce.util.createBuffer();mr(A,r),mr(A,n),mr(A,a),A.putInt32(i.length()),A.putBuffer(i),A.putInt32(l.length()),A.putBuffer(l);var B=Ce.hmac.create();return B.start("sha1",S),B.update(A.bytes()),s+=`\r
 Private-MAC: `+B.digest().toHex()+`\r
-`,s};ma.publicKeyToOpenSSH=function(e,t){var a="ssh-rsa";t=t||"";var r=Ce.util.createBuffer();return mr(r,a),xt(r,e.e),xt(r,e.n),a+" "+Ce.util.encode64(r.bytes())+" "+t};ma.privateKeyToOpenSSH=function(e,t){return t?Ce.pki.encryptRsaPrivateKey(e,t,{legacy:!0,algorithm:"aes128"}):Ce.pki.privateKeyToPem(e)};ma.getPublicKeyFingerprint=function(e,t){t=t||{};var a=t.md||Ce.md.md5.create(),r="ssh-rsa",n=Ce.util.createBuffer();mr(n,r),xt(n,e.e),xt(n,e.n),a.start(),a.update(n.getBytes());var s=a.digest();if(t.encoding==="hex"){var i=s.toHex();return t.delimiter?i.match(/.{2}/g).join(t.delimiter):i}else{if(t.encoding==="binary")return s.getBytes();if(t.encoding)throw new Error('Unknown encoding "'+t.encoding+'".')}return s};function xt(e,t){var a=t.toString(16);a[0]>="8"&&(a="00"+a);var r=Ce.util.hexToBytes(a);e.putInt32(r.length),e.putBytes(r)}function mr(e,t){e.putInt32(t.length),e.putString(t)}function va(){for(var e=Ce.md.sha1.create(),t=arguments.length,a=0;a<t;++a)e.update(arguments[a]);return e.digest()}});var yo=F((Zh,go)=>{go.exports=$();Nt();Ds();lt();qr();Ir();Js();sr();ro();so();uo();on();Zr();Qt();en();cn();fo();dn();rn();Qa();sa();tt();ja();po();mn();re()});var Eo=F((ep,Co)=>{var vo=require("path"),Xe=require("fs"),Je=yo(),{MITM_DIR:Ca}=ar(),Ft=vo.join(Ca,"rootCA.key"),Bt=vo.join(Ca,"rootCA.crt");function mo(e){try{let t=Je.pki.certificateFromPem(Xe.readFileSync(e,"utf8")),a=new Date(Date.now()+720*60*60*1e3);return t.validity.notAfter<a}catch{return!0}}function bf(){let e=Xe.existsSync(Ft)&&Xe.existsSync(Bt);if(e&&!mo(Bt))return console.log("\u2705 Root CA already exists"),{key:Ft,cert:Bt};if(e){console.log("\u{1F510} Root CA expired or expiring soon \u2014 regenerating...");try{Xe.unlinkSync(Ft)}catch{}try{Xe.unlinkSync(Bt)}catch{}}Xe.existsSync(Ca)||Xe.mkdirSync(Ca,{recursive:!0}),console.log("\u{1F510} Generating Root CA certificate...");let t=Je.pki.rsa.generateKeyPair(2048),a=Je.pki.createCertificate();a.publicKey=t.publicKey,a.serialNumber="01",a.validity.notBefore=new Date,a.validity.notAfter=new Date,a.validity.notAfter.setFullYear(a.validity.notBefore.getFullYear()+10);let r=[{name:"commonName",value:"9Router MITM Root CA"},{name:"organizationName",value:"9Router"},{name:"countryName",value:"US"}];a.setSubject(r),a.setIssuer(r),a.setExtensions([{name:"basicConstraints",cA:!0,critical:!0},{name:"keyUsage",keyCertSign:!0,cRLSign:!0,critical:!0},{name:"subjectKeyIdentifier"}]),a.sign(t.privateKey,Je.md.sha256.create());let n=Je.pki.privateKeyToPem(t.privateKey),s=Je.pki.certificateToPem(a);return Xe.writeFileSync(Ft,n),Xe.writeFileSync(Bt,s),console.log("\u2705 Root CA generated successfully"),{key:Ft,cert:Bt}}function _f(){if(!Xe.existsSync(Ft)||!Xe.existsSync(Bt))throw new Error("Root CA not found. Generate it first.");let e=Xe.readFileSync(Ft,"utf8"),t=Xe.readFileSync(Bt,"utf8");return{key:Je.pki.privateKeyFromPem(e),cert:Je.pki.certificateFromPem(t)}}function wf(e,t){let a=Je.pki.rsa.generateKeyPair(2048),r=Je.pki.createCertificate();return r.publicKey=a.publicKey,r.serialNumber=Math.floor(Math.random()*1e6).toString(),r.validity.notBefore=new Date,r.validity.notAfter=new Date,r.validity.notAfter.setFullYear(r.validity.notBefore.getFullYear()+1),r.setSubject([{name:"commonName",value:e}]),r.setIssuer(t.cert.subject.attributes),r.setExtensions([{name:"basicConstraints",cA:!1},{name:"keyUsage",digitalSignature:!0,keyEncipherment:!0},{name:"extKeyUsage",serverAuth:!0,clientAuth:!0},{name:"subjectAltName",altNames:[{type:2,value:e},{type:2,value:`*.${e}`}]}]),r.sign(t.key,Je.md.sha256.create()),{key:Je.pki.privateKeyToPem(a.privateKey),cert:Je.pki.certificateToPem(r)}}Co.exports={generateRootCA:bf,loadRootCA:_f,generateLeafCert:wf,isCertExpired:mo,ROOT_CA_CERT_PATH:Bt,ROOT_CA_KEY_PATH:Ft}});var So=F((np,xo)=>{var tp=require("path"),rp=require("fs"),{MITM_DIR:ap}=ar(),{generateRootCA:Nf,loadRootCA:Rf,generateLeafCert:Lf}=Eo();function kf(){return Nf()}function Df(e){try{let t=Rf(),a=Lf(e,t);return{key:a.key,cert:a.cert}}catch(t){return console.error(`Failed to generate cert for ${e}:`,t.message),null}}xo.exports={generateCert:kf,getCertForDomain:Df}});var Bo=F((ip,Io)=>{var To=require("fs"),Uf=require("path"),{DATA_DIR:Pf}=ar(),Ao=Uf.join(Pf,"mitm","aliases.json");function Of(){try{return To.existsSync(Ao)?JSON.parse(To.readFileSync(Ao,"utf-8")):null}catch{return null}}function Vf(e){return Of()?.[e]||null}Io.exports={getMitmAlias:Vf}});var wo=F((sp,_o)=>{"use strict";var er="2.11.0";function Ff(e){return!e||typeof e!="object"||Array.isArray(e)?!1:String(e.ideName||"").toLowerCase()==="antigravity"||String(e.ideType||"").toUpperCase()==="ANTIGRAVITY"?!0:Object.prototype.hasOwnProperty.call(e,"ideVersion")}function bo(e,t){return typeof e!="string"||!e.includes("antigravity/")?e:e.replace(/antigravity\/[^\s]+/,`antigravity/${t}`)}function Kf(e,t,a){if(!(a?.includes(":generateContent")||a?.includes(":streamGenerateContent")))return{bodyBuffer:e,headers:t,applied:!1,version:er};let n={...t},s=bo(n["user-agent"],er),i=s!==n["user-agent"];i&&(n["user-agent"]=s);try{let o=JSON.parse(e.toString());return Ff(o?.metadata)?(o.metadata.ideVersion=er,{bodyBuffer:Buffer.from(JSON.stringify(o)),headers:n,applied:!0,version:er}):{bodyBuffer:e,headers:n,applied:i,version:er}}catch{return{bodyBuffer:e,headers:n,applied:i,version:er}}}_o.exports={ANTIGRAVITY_IDE_VERSION:er,applyAntigravityIdeVersionOverride:Kf,rewriteAntigravityUserAgent:bo}});var xa=F((up,Lo)=>{var{log:Ea,err:op}=Gt(),No="http://localhost:20128",Mf=String(process.env.MITM_ROUTER_BASE||No).trim().replace(/\/+$/,"")||No,Ro=process.env.ROUTER_API_KEY,qf=new Set(["host","content-length","connection","transfer-encoding","content-type","authorization"]);async function Hf(e,t="/v1/chat/completions",a={}){let r={};for(let[s,i]of Object.entries(a))qf.has(s.toLowerCase())||(r[s]=i);return await fetch(`${Mf}${t}`,{method:"POST",headers:{...r,"Content-Type":"application/json",...Ro&&{Authorization:`Bearer ${Ro}`}},body:JSON.stringify(e)})}async function Gf(e,t,a){let r=e.headers.get("content-type")||"application/json",n=e.status||200,s={"Content-Type":r,"Cache-Control":"no-cache",Connection:"keep-alive"};if(r.includes("text/event-stream")&&(s["X-Accel-Buffering"]="no"),t.writeHead(n,s),a&&a.writeHeader(e.status,Object.fromEntries(e.headers)),!e.body){let u=await e.text().catch(()=>"");a&&(a.writeChunk(u),a.end()),t.end(u);return}let i=e.body.getReader(),o=new TextDecoder;for(;;){let{done:u,value:l}=await i.read();if(u){a&&a.end(),t.end();break}a&&a.writeChunk(l),t.write(o.decode(l,{stream:!0}))}}async function zf(e,t,a,r){let n=e.headers.get("content-type")||"application/json",s={"Content-Type":n,"Cache-Control":"no-cache",Connection:"keep-alive"};if(n.includes("text/event-stream")&&(s["X-Accel-Buffering"]="no"),t.writeHead(200,s),!e.body){t.end(await e.text().catch(()=>""));return}let i=e.body.getReader(),o=new TextDecoder("utf-8",{fatal:!1}),u="";for(;;){let{done:l,value:c}=await i.read();if(l)break;u+=o.decode(c,{stream:!0});let f=u.split(`
+`,s};ma.publicKeyToOpenSSH=function(e,t){var a="ssh-rsa";t=t||"";var r=Ce.util.createBuffer();return mr(r,a),xt(r,e.e),xt(r,e.n),a+" "+Ce.util.encode64(r.bytes())+" "+t};ma.privateKeyToOpenSSH=function(e,t){return t?Ce.pki.encryptRsaPrivateKey(e,t,{legacy:!0,algorithm:"aes128"}):Ce.pki.privateKeyToPem(e)};ma.getPublicKeyFingerprint=function(e,t){t=t||{};var a=t.md||Ce.md.md5.create(),r="ssh-rsa",n=Ce.util.createBuffer();mr(n,r),xt(n,e.e),xt(n,e.n),a.start(),a.update(n.getBytes());var s=a.digest();if(t.encoding==="hex"){var i=s.toHex();return t.delimiter?i.match(/.{2}/g).join(t.delimiter):i}else{if(t.encoding==="binary")return s.getBytes();if(t.encoding)throw new Error('Unknown encoding "'+t.encoding+'".')}return s};function xt(e,t){var a=t.toString(16);a[0]>="8"&&(a="00"+a);var r=Ce.util.hexToBytes(a);e.putInt32(r.length),e.putBytes(r)}function mr(e,t){e.putInt32(t.length),e.putString(t)}function va(){for(var e=Ce.md.sha1.create(),t=arguments.length,a=0;a<t;++a)e.update(arguments[a]);return e.digest()}});var yo=F((Zh,go)=>{go.exports=$();Nt();Ds();lt();qr();Ir();Js();sr();ro();so();uo();on();Zr();Qt();en();cn();fo();dn();rn();Qa();sa();tt();ja();po();mn();re()});var Eo=F((ep,Co)=>{var vo=require("path"),Xe=require("fs"),Je=yo(),{MITM_DIR:Ca}=ar(),Ft=vo.join(Ca,"rootCA.key"),Bt=vo.join(Ca,"rootCA.crt");function mo(e){try{let t=Je.pki.certificateFromPem(Xe.readFileSync(e,"utf8")),a=new Date(Date.now()+720*60*60*1e3);return t.validity.notAfter<a}catch{return!0}}function bf(){let e=Xe.existsSync(Ft)&&Xe.existsSync(Bt);if(e&&!mo(Bt))return console.log("\u2705 Root CA already exists"),{key:Ft,cert:Bt};if(e){console.log("\u{1F510} Root CA expired or expiring soon \u2014 regenerating...");try{Xe.unlinkSync(Ft)}catch{}try{Xe.unlinkSync(Bt)}catch{}}Xe.existsSync(Ca)||Xe.mkdirSync(Ca,{recursive:!0}),console.log("\u{1F510} Generating Root CA certificate...");let t=Je.pki.rsa.generateKeyPair(2048),a=Je.pki.createCertificate();a.publicKey=t.publicKey,a.serialNumber="01",a.validity.notBefore=new Date,a.validity.notAfter=new Date,a.validity.notAfter.setFullYear(a.validity.notBefore.getFullYear()+10);let r=[{name:"commonName",value:"9Router MITM Root CA"},{name:"organizationName",value:"9Router"},{name:"countryName",value:"US"}];a.setSubject(r),a.setIssuer(r),a.setExtensions([{name:"basicConstraints",cA:!0,critical:!0},{name:"keyUsage",keyCertSign:!0,cRLSign:!0,critical:!0},{name:"subjectKeyIdentifier"}]),a.sign(t.privateKey,Je.md.sha256.create());let n=Je.pki.privateKeyToPem(t.privateKey),s=Je.pki.certificateToPem(a);return Xe.writeFileSync(Ft,n),Xe.writeFileSync(Bt,s),console.log("\u2705 Root CA generated successfully"),{key:Ft,cert:Bt}}function _f(){if(!Xe.existsSync(Ft)||!Xe.existsSync(Bt))throw new Error("Root CA not found. Generate it first.");let e=Xe.readFileSync(Ft,"utf8"),t=Xe.readFileSync(Bt,"utf8");return{key:Je.pki.privateKeyFromPem(e),cert:Je.pki.certificateFromPem(t)}}function wf(e,t){let a=Je.pki.rsa.generateKeyPair(2048),r=Je.pki.createCertificate();return r.publicKey=a.publicKey,r.serialNumber=Math.floor(Math.random()*1e6).toString(),r.validity.notBefore=new Date,r.validity.notAfter=new Date,r.validity.notAfter.setFullYear(r.validity.notBefore.getFullYear()+1),r.setSubject([{name:"commonName",value:e}]),r.setIssuer(t.cert.subject.attributes),r.setExtensions([{name:"basicConstraints",cA:!1},{name:"keyUsage",digitalSignature:!0,keyEncipherment:!0},{name:"extKeyUsage",serverAuth:!0,clientAuth:!0},{name:"subjectAltName",altNames:[{type:2,value:e},{type:2,value:`*.${e}`}]}]),r.sign(t.key,Je.md.sha256.create()),{key:Je.pki.privateKeyToPem(a.privateKey),cert:Je.pki.certificateToPem(r)}}Co.exports={generateRootCA:bf,loadRootCA:_f,generateLeafCert:wf,isCertExpired:mo,ROOT_CA_CERT_PATH:Bt,ROOT_CA_KEY_PATH:Ft}});var So=F((np,xo)=>{var tp=require("path"),rp=require("fs"),{MITM_DIR:ap}=ar(),{generateRootCA:Nf,loadRootCA:Rf,generateLeafCert:Lf}=Eo();function kf(){return Nf()}function Df(e){try{let t=Rf(),a=Lf(e,t);return{key:a.key,cert:a.cert}}catch(t){return console.error(`Failed to generate cert for ${e}:`,t.message),null}}xo.exports={generateCert:kf,getCertForDomain:Df}});var Bo=F((ip,Io)=>{var To=require("fs"),Uf=require("path"),{DATA_DIR:Pf}=ar(),Ao=Uf.join(Pf,"mitm","aliases.json");function Of(){try{return To.existsSync(Ao)?JSON.parse(To.readFileSync(Ao,"utf-8")):null}catch{return null}}function Vf(e){return Of()?.[e]||null}Io.exports={getMitmAlias:Vf}});var wo=F((sp,_o)=>{"use strict";var er="2.22.0";function Ff(e){return!e||typeof e!="object"||Array.isArray(e)?!1:String(e.ideName||"").toLowerCase()==="antigravity"||String(e.ideType||"").toUpperCase()==="ANTIGRAVITY"?!0:Object.prototype.hasOwnProperty.call(e,"ideVersion")}function bo(e,t){return typeof e!="string"||!e.includes("antigravity/")?e:e.replace(/antigravity\/[^\s]+/,`antigravity/${t}`)}function Kf(e,t,a){if(!(a?.includes(":generateContent")||a?.includes(":streamGenerateContent")))return{bodyBuffer:e,headers:t,applied:!1,version:er};let n={...t},s=bo(n["user-agent"],er),i=s!==n["user-agent"];i&&(n["user-agent"]=s);try{let o=JSON.parse(e.toString());return Ff(o?.metadata)?(o.metadata.ideVersion=er,{bodyBuffer:Buffer.from(JSON.stringify(o)),headers:n,applied:!0,version:er}):{bodyBuffer:e,headers:n,applied:i,version:er}}catch{return{bodyBuffer:e,headers:n,applied:i,version:er}}}_o.exports={ANTIGRAVITY_IDE_VERSION:er,applyAntigravityIdeVersionOverride:Kf,rewriteAntigravityUserAgent:bo}});var xa=F((up,Lo)=>{var{log:Ea,err:op}=Gt(),No="http://localhost:20128",Mf=String(process.env.MITM_ROUTER_BASE||No).trim().replace(/\/+$/,"")||No,Ro=process.env.ROUTER_API_KEY,qf=new Set(["host","content-length","connection","transfer-encoding","content-type","authorization"]);async function Hf(e,t="/v1/chat/completions",a={}){let r={};for(let[s,i]of Object.entries(a))qf.has(s.toLowerCase())||(r[s]=i);return await fetch(`${Mf}${t}`,{method:"POST",headers:{...r,"Content-Type":"application/json",...Ro&&{Authorization:`Bearer ${Ro}`}},body:JSON.stringify(e)})}async function Gf(e,t,a){let r=e.headers.get("content-type")||"application/json",n=e.status||200,s={"Content-Type":r,"Cache-Control":"no-cache",Connection:"keep-alive"};if(r.includes("text/event-stream")&&(s["X-Accel-Buffering"]="no"),t.writeHead(n,s),a&&a.writeHeader(e.status,Object.fromEntries(e.headers)),!e.body){let u=await e.text().catch(()=>"");a&&(a.writeChunk(u),a.end()),t.end(u);return}let i=e.body.getReader(),o=new TextDecoder;for(;;){let{done:u,value:l}=await i.read();if(u){a&&a.end(),t.end();break}a&&a.writeChunk(l),t.write(o.decode(l,{stream:!0}))}}async function zf(e,t,a,r){let n=e.headers.get("content-type")||"application/json",s={"Content-Type":n,"Cache-Control":"no-cache",Connection:"keep-alive"};if(n.includes("text/event-stream")&&(s["X-Accel-Buffering"]="no"),t.writeHead(200,s),!e.body){t.end(await e.text().catch(()=>""));return}let i=e.body.getReader(),o=new TextDecoder("utf-8",{fatal:!1}),u="";for(;;){let{done:l,value:c}=await i.read();if(l)break;u+=o.decode(c,{stream:!0});let f=u.split(`
 `);u=f.pop()||"";for(let g of f){let v=g.trim();if(!v||!v.startsWith("data:"))continue;let y=v.slice(5).trim();if(y!=="[DONE]"){process.env.DEBUG_MITM&&Ea(`[SSE in] ${y.slice(0,200)}`);try{let x=JSON.parse(y),S=a(x,r);if(S!=null){let A=Array.isArray(S)?S:[S];for(let B of A){if(process.env.DEBUG_MITM){let b=B.length||B.byteLength||0;Ea(`[write binary frame] (${b}B) first 20B: ${Array.from(B.slice(0,20)).join(",")}`)}t.write(Buffer.from(B))}}}catch{}}}}try{let l=a(null,r);if(l!=null){let c=Array.isArray(l)?l:[l];for(let f of c)t.write(f)}}catch{}t.end()}async function Qf(e,t,a,r){let n={"Content-Type":"application/vnd.amazon.eventstream","Cache-Control":"no-cache",Connection:"keep-alive"};if(t.writeHead(200,n),!e.body){t.end(await e.text().catch(()=>""));return}let s=e.body.getReader(),i=new TextDecoder("utf-8",{fatal:!1}),o="";for(;;){let{done:u,value:l}=await s.read();if(u)break;o+=i.decode(l,{stream:!0});let c=o.split(`
 `);o=c.pop()||"";for(let f of c){let g=f.trim();if(!g||!g.startsWith("data:"))continue;let v=g.slice(5).trim();if(v!=="[DONE]"){process.env.DEBUG_MITM&&Ea(`[SSE in] ${v.slice(0,200)}`);try{let y=JSON.parse(v),x=a(y,r);if(x!=null){let S=Array.isArray(x)?x:[x];for(let A of S){if(process.env.DEBUG_MITM){let B=A.length||A.byteLength||0;Ea(`[write binary frame] (${B}B) first 20B: ${Array.from(A.slice(0,20)).join(",")}`)}t.write(Buffer.from(A))}}}catch{}}}}try{let u=a(null,r);if(u!=null){let l=Array.isArray(u)?u:[u];for(let c of l)t.write(c)}}catch{}t.end()}Lo.exports={fetchRouter:Hf,pipeSSE:Gf,pipeTransformedSSE:zf,pipeTransformedEventStream:Qf}});var Do=F((lp,ko)=>{var{err:$f,createResponseDumper:Yf}=Gt(),{IS_DEV:jf}=Er(),{fetchRouter:Wf,pipeSSE:Xf}=xa();async function Jf(e,t,a,r){let n=jf?Yf(e,"intercept-antigravity"):null,s=e.url.includes(":streamGenerateContent");try{let i=JSON.parse(a.toString());i.model&&(i.model=r);let o=await Wf(i,"/v1/chat/completions",e.headers);await Xf(o,t,n)}catch(i){$f(`[antigravity] ${i.message}`),n&&(n.writeChunk(`
 [ERROR] ${i.message}

package/app/src/shared/services/quotaAutoPing.js

@@ -10,6 +10,7 @@ import { proxyAwareFetch } from "open-sse/utils/proxyFetch.js";
 import { resolveConnectionProxyConfig } from "@/lib/network/connectionProxy";
 import { refreshAndUpdateCredentials } from "@/app/api/usage/[connectionId]/route.js";
 import { QUOTA_AUTOPING_CONFIG } from "@/shared/constants/config";
+import { getDuePingSlot, normalizePingSchedule } from "@/shared/services/quotaPingSchedule";
 
 const C = QUOTA_AUTOPING_CONFIG;
 const CLAUDE_PING_URL = "https://api.anthropic.com/v1/messages?beta=true";
@@ -93,6 +94,11 @@ function shouldPingForReset(providerConfig, cachedReset, resetAt, now) {
   return Number.isFinite(resetMs) && now >= resetMs - C.pingLeadMs;
 }
 
+function getConnectionSchedule(settings, providerConfig, connectionId) {
+  const schedules = settings?.[providerConfig.settingsKey]?.schedules || {};
+  return normalizePingSchedule(schedules[connectionId]);
+}
+
 function buildProxyOptions(cfg) {
   return {
     connectionProxyEnabled: cfg.connectionProxyEnabled === true,
@@ -185,12 +191,13 @@ function shouldSkipAfterFailure(state, key, nowMs = Date.now()) {
   return failedAt && nowMs - failedAt < C.failureCooldownMs;
 }
 
-async function pingConnection(conn, provider, providerConfig, handler, deps, state = g) {
+async function pingConnection(conn, provider, providerConfig, handler, deps, state = g, schedule = null, reactive = true) {
   const key = cacheKey(provider, conn.id);
 
   // resetAt is stable for time-based windows; Codex polls every tick because inactive windows slide forward.
+  // A schedule needs a fresh look every tick, since its slots do not depend on resetAt.
   const cachedReset = state.resetCache[key];
-  if (!providerConfig.pingWhenResetAtSlides && cachedReset && Date.now() < new Date(cachedReset).getTime() - C.refreshAheadMs) return;
+  if (!schedule && !providerConfig.pingWhenResetAtSlides && cachedReset && Date.now() < new Date(cachedReset).getTime() - C.refreshAheadMs) return;
 
   // Avoid hammering provider auth/quota endpoints if a ping failed recently.
   if (shouldSkipAfterFailure(state, key)) return;
@@ -212,38 +219,49 @@ async function pingConnection(conn, provider, providerConfig, handler, deps, sta
   const quotas = usage?.quotas || {};
   const quota = quotas?.[providerConfig.quotaKey];
   const resetAt = quota?.resetAt;
-  if (!resetAt) return;
-
-  state.resetCache[key] = resetAt;
+  if (resetAt) state.resetCache[key] = resetAt;
 
   if (providerConfig.skipWhenBlockingQuotaExhausted && hasExhaustedBlockingQuota(quotas, providerConfig.quotaKey)) return;
   if (isQuotaExhausted(quota)) return;
 
   const now = Date.now();
-  const resetKey = normalizeResetKey(resetAt);
-  const lastPingedResetKey = connection.lastPingedResetKey || normalizeResetKey(connection.lastPingedResetAt);
+  const resetKey = resetAt ? normalizeResetKey(resetAt) : null;
+
+  // Anchored schedule runs alongside the reactive path: it fires on its own wall-clock
+  // slots, whether or not the provider reported a reset.
+  const dueSlot = schedule ? getDuePingSlot(schedule, now) : null;
+  const slotPending = Boolean(dueSlot) && connection.lastPingedSlotKey !== dueSlot.key;
+
+  if (slotPending) {
+    if (wasPingedRecently(connection, providerConfig.minPingIntervalMs, now)) return;
+  } else {
+    if (!reactive || !resetAt) return;
 
-  // Claude waits for reset. Codex pings only when resetAt slides, which means the 5h window is inactive.
-  if (!shouldPingForReset(providerConfig, cachedReset, resetAt, now)) return;
-  if (wasPingedRecently(connection, providerConfig.minPingIntervalMs, now)) return;
-  if (lastPingedResetKey === resetKey) return;
+    const lastPingedResetKey = connection.lastPingedResetKey || normalizeResetKey(connection.lastPingedResetAt);
+
+    // Claude waits for reset. Codex pings only when resetAt slides, which means the 5h window is inactive.
+    if (!shouldPingForReset(providerConfig, cachedReset, resetAt, now)) return;
+    if (wasPingedRecently(connection, providerConfig.minPingIntervalMs, now)) return;
+    if (lastPingedResetKey === resetKey) return;
+  }
 
   const ok = await handler.sendPing(connection, providerConfig, proxyOptions, deps);
   if (!ok) {
-    // Do not mark reset as pinged unless upstream accepted the tiny request.
+    // Do not mark reset/slot as pinged unless upstream accepted the tiny request.
     state.failureCache[key] = Date.now();
-    console.warn(`[AutoPing] ${provider}:${connection.id}: ping failed (reset ${resetAt})`);
+    console.warn(`[AutoPing] ${provider}:${connection.id}: ping failed (${slotPending ? `slot ${dueSlot.key}` : `reset ${resetAt}`})`);
     return;
   }
 
   delete state.failureCache[key];
+  const pingedAt = new Date().toISOString();
   await deps.updateProviderConnection(connection.id, {
-    lastPingedResetAt: resetAt,
-    lastPingedResetKey: resetKey,
-    lastPingAt: new Date().toISOString(),
-    updatedAt: new Date().toISOString(),
+    ...(resetAt ? { lastPingedResetAt: resetAt, lastPingedResetKey: resetKey } : {}),
+    ...(slotPending ? { lastPingedSlotKey: dueSlot.key } : {}),
+    lastPingAt: pingedAt,
+    updatedAt: pingedAt,
   });
-  console.log(`[AutoPing] ${provider}:${connection.id}: ping sent (reset ${resetAt})`);
+  console.log(`[AutoPing] ${provider}:${connection.id}: ping sent (${slotPending ? `slot ${dueSlot.key}` : `reset ${resetAt}`})`);
 }
 
 function createDefaultDeps() {
@@ -269,13 +287,21 @@ export async function runQuotaAutoPingTick(deps = createDefaultDeps(), state = g
       if (!handler) continue;
 
       const enabledMap = settings?.[providerConfig.settingsKey]?.connections || {};
-      if (Object.keys(enabledMap).length === 0) continue;
+      const scheduleMap = settings?.[providerConfig.settingsKey]?.schedules || {};
+      if (Object.keys(enabledMap).length === 0 && Object.keys(scheduleMap).length === 0) continue;
 
       const conns = await deps.getProviderConnections({ provider, isActive: true });
-      const targets = conns.filter((conn) => conn.authType === "oauth" && enabledMap[conn.id] === true);
+      // A schedule stands on its own: an account can run only on its slots, with the
+      // reactive ping left off.
+      const targets = conns.filter((conn) => (
+        conn.authType === "oauth"
+        && (enabledMap[conn.id] === true || normalizePingSchedule(scheduleMap[conn.id]) !== null)
+      ));
       for (const conn of targets) {
         try {
-          await pingConnection(conn, provider, providerConfig, handler, deps, state);
+          const schedule = getConnectionSchedule(settings, providerConfig, conn.id);
+          const reactive = enabledMap[conn.id] === true;
+          await pingConnection(conn, provider, providerConfig, handler, deps, state, schedule, reactive);
         } catch (e) {
           state.failureCache[cacheKey(provider, conn.id)] = Date.now();
           console.warn(`[AutoPing] ${provider}:${conn.id}: ${e.message}`);
@@ -304,10 +330,16 @@ export function stopQuotaAutoPing() {
   console.log("[AutoPing] scheduler stopped");
 }
 
+// An opted-in account or a single enabled schedule is enough to need the scheduler.
+export function hasAnyAutoPingEnabled(settings) {
+  return Object.values(C.providers).some((providerConfig) => {
+    const config = settings?.[providerConfig.settingsKey];
+    return Object.values(config?.connections || {}).some(Boolean)
+      || Object.values(config?.schedules || {}).some((schedule) => normalizePingSchedule(schedule) !== null);
+  });
+}
+
 export function configureQuotaAutoPing(settings) {
-  const enabled = Object.values(C.providers).some((providerConfig) =>
-    Object.values(settings?.[providerConfig.settingsKey]?.connections || {}).some(Boolean)
-  );
-  if (enabled) startQuotaAutoPing();
+  if (hasAnyAutoPingEnabled(settings)) startQuotaAutoPing();
   else stopQuotaAutoPing();
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "9router-proxy",
-  "version": "0.6.10",
+  "version": "0.6.11",
   "description": "9Router CLI - Start and manage 9Router server",
   "bin": {
     "9router-proxy": "./cli.js"