@hienlh/ppm 0.8.26 → 0.8.28

package/CHANGELOG.md

@@ -1,6 +1,6 @@
 # Changelog
 
-## [0.8.26] - 2026-03-24
+## [0.8.27] - 2026-03-24
 
 ### Changed
 - **Temporary export/import**: Exported accounts no longer include refresh tokens — imported accounts are temporary (~1h access-only). Prevents token rotation conflicts between machines.
@@ -8,6 +8,7 @@
 - **Auto-cleanup**: Expired temporary accounts (no refresh token) are automatically deleted after 7 days.
 - **Export warning**: Export dialog now explains that exported accounts are temporary and the importing machine should login directly for permanent access.
 - **Invalid refresh token cleanup**: When refresh fails with `invalid_grant`, clears the refresh token so the account becomes temporary (same lifecycle rules apply: can't re-enable when expired, auto-deleted after 7 days)
+- **Skip expired accounts in usage**: Expired temporary accounts are excluded from usage polling and usage panel — no wasted API calls or UI clutter
 
 ## [0.8.24] - 2026-03-24
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@hienlh/ppm",
-  "version": "0.8.26",
+  "version": "0.8.28",
   "description": "Personal Project Manager — mobile-first web IDE with AI assistance",
   "author": "hienlh",
   "license": "MIT",

package/src/services/account.service.ts

@@ -518,6 +518,10 @@ class AccountService {
   async refreshAccessToken(accountId: string, disableOnFail = true): Promise<void> {
     const account = this.getWithTokens(accountId);
     if (!account) throw new Error(`Account ${accountId} not found`);
+    // Skip refresh for temporary accounts (no refresh token)
+    if (!account.refreshToken || account.refreshToken === "") {
+      throw new Error(`Account ${accountId} has no refresh token (temporary account)`);
+    }
     const res = await fetch(OAUTH_TOKEN_URL, {
       method: "POST",
       headers: { "Content-Type": "application/json" },
@@ -530,8 +534,8 @@ class AccountService {
     if (!res.ok) {
       const errorBody = await res.text().catch(() => "");
       console.error(`[accounts] Refresh failed for ${accountId}: ${res.status} ${errorBody}`);
-      // invalid_grant = refresh token permanently dead → clear it so account becomes temporary
-      if (errorBody.includes("invalid_grant")) {
+      // invalid_grant or invalid_request = refresh token permanently dead → clear it so account becomes temporary
+      if (errorBody.includes("invalid_grant") || errorBody.includes("invalid_request")) {
         console.log(`[accounts] Clearing invalid refresh token for ${account.email ?? accountId} — account is now temporary`);
         updateAccount(accountId, { refresh_token: encrypt("") });
       }

package/src/services/claude-usage.service.ts

@@ -169,8 +169,11 @@ function persistIfChanged(data: ClaudeUsage, accountId: string | null): void {
 
 async function fetchAllAccountUsages(): Promise<void> {
   const accounts = accountService.list();
+  const nowS = Math.floor(Date.now() / 1000);
   for (const acc of accounts) {
     if (acc.status === "disabled") continue;
+    // Skip expired temporary accounts (no refresh token)
+    if (!accountService.hasRefreshToken(acc.id) && acc.expiresAt && acc.expiresAt < nowS) continue;
     const withTokens = accountService.getWithTokens(acc.id);
     if (!withTokens) continue;
     const token = withTokens.accessToken;
@@ -247,9 +250,14 @@ export function getUsageForAccount(accountId: string): ClaudeUsage {
   return row ? snapshotToUsage(row) : {};
 }
 
-/** Get usage for all accounts */
+/** Get usage for all accounts (excludes expired temporary accounts) */
 export function getAllAccountUsages(): AccountUsageEntry[] {
-  const accounts = accountService.list();
+  const nowS = Math.floor(Date.now() / 1000);
+  const accounts = accountService.list().filter(acc => {
+    // Exclude expired accounts without refresh token (temporary/invalid)
+    if (!accountService.hasRefreshToken(acc.id) && acc.expiresAt && acc.expiresAt < nowS) return false;
+    return true;
+  });
   const snapshots = getAllLatestSnapshots();
   const snapshotMap = new Map(snapshots.map(s => [s.account_id, s]));
   return accounts.map(acc => {