@hienlh/ppm 0.8.46 → 0.8.47

package/CHANGELOG.md

@@ -1,5 +1,12 @@
 # Changelog
 
+## [0.8.47] - 2026-03-25
+
+### Fixed
+- **Usage polling**: Use `ensureFreshToken()` in background usage poll — prevents 401 from expired tokens causing auto-fetch to always fail
+- **Temp accounts**: Don't auto-disable temporary accounts (no refresh token) when token expires — they now expire naturally and get cleaned up after 7 days
+- **Account export**: `refreshBeforeExport` no longer disables accounts as a side effect on refresh failure
+
 ## [0.8.46] - 2026-03-25
 
 ### Fixed

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@hienlh/ppm",
-  "version": "0.8.46",
+  "version": "0.8.47",
   "description": "Personal Project Manager — mobile-first web IDE with AI assistance",
   "author": "hienlh",
   "license": "MIT",

package/src/providers/claude-agent-sdk.ts

@@ -628,7 +628,10 @@ export class ClaudeAgentSdkProvider implements AIProvider {
                 }
               } catch (refreshErr) {
                 console.error(`[sdk] session=${sessionId} OAuth refresh failed:`, refreshErr);
-                accountSelector.onAuthError(account.id);
+                // Don't disable temp accounts (no refresh token) — they just expire naturally
+                if (accountService.hasRefreshToken(account.id)) {
+                  accountSelector.onAuthError(account.id);
+                }
               }
             }
 
@@ -702,7 +705,10 @@ export class ClaudeAgentSdkProvider implements AIProvider {
                 await accountService.refreshAccessToken(account.id);
                 console.log(`[sdk] 401 on account ${account.id} — token refreshed`);
               } catch {
-                accountSelector.onAuthError(account.id);
+                // Don't disable temp accounts (no refresh token) — they just expire naturally
+                if (accountService.hasRefreshToken(account.id)) {
+                  accountSelector.onAuthError(account.id);
+                }
               }
             } else {
               accountSelector.onSuccess(account.id);

package/src/services/account.service.ts

@@ -571,7 +571,7 @@ class AccountService {
       if (!acc.accessToken.startsWith("sk-ant-oat")) continue;
       if (!acc.expiresAt) continue;
       try {
-        await this.refreshAccessToken(acc.id);
+        await this.refreshAccessToken(acc.id, false);
       } catch {
         // Best-effort — skip accounts whose refresh token is already invalid
       }

package/src/services/claude-usage.service.ts

@@ -174,7 +174,8 @@ async function fetchAllAccountUsages(): Promise<void> {
     if (acc.status === "disabled") continue;
     // Skip expired temporary accounts (no refresh token)
     if (!accountService.hasRefreshToken(acc.id) && acc.expiresAt && acc.expiresAt < nowS) continue;
-    const withTokens = accountService.getWithTokens(acc.id);
+    // Ensure token is fresh before calling usage API (prevents 401 from expired tokens)
+    const withTokens = await accountService.ensureFreshToken(acc.id);
     if (!withTokens) continue;
     const token = withTokens.accessToken;
     // Only OAuth tokens have usage endpoint