@hienlh/ppm 0.8.47 → 0.8.49

package/CHANGELOG.md

@@ -1,5 +1,17 @@
 # Changelog
 
+## [0.8.49] - 2026-03-25
+
+### Fixed
+- **Auth error backoff**: `onAuthError` now uses 5-minute base cooldown (exponential up to 30min) instead of 1s rate-limit backoff — prevents rapid retry loops on dead/rejected accounts
+- **No permanent disable**: Auth errors never permanently disable accounts — cooldown allows recovery from transient issues (subscription lapse, org changes, API hiccups)
+
+## [0.8.48] - 2026-03-25
+
+### Fixed
+- **Account auth errors**: Use cooldown instead of permanent disable on `authentication_failed` / 401 — auth issues can be transient (subscription lapse, org changes, API hiccups)
+- **SDK refresh safety**: Pass `disableOnFail=false` in SDK error handlers — prevents `refreshAccessToken` from disabling accounts as side effect during auto-retry
+
 ## [0.8.47] - 2026-03-25
 
 ### Fixed

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@hienlh/ppm",
-  "version": "0.8.47",
+  "version": "0.8.49",
   "description": "Personal Project Manager — mobile-first web IDE with AI assistance",
   "author": "hienlh",
   "license": "MIT",

package/src/providers/claude-agent-sdk.ts

@@ -611,7 +611,7 @@ export class ClaudeAgentSdkProvider implements AIProvider {
             if (assistantError === "authentication_failed" && account && !authRetried) {
               authRetried = true;
               try {
-                await accountService.refreshAccessToken(account.id);
+                await accountService.refreshAccessToken(account.id, false);
                 console.log(`[sdk] session=${sessionId} OAuth token refreshed for ${account.id} — retrying`);
                 // Re-build env with refreshed token
                 const refreshedAccount = accountService.getWithTokens(account.id);
@@ -628,10 +628,7 @@ export class ClaudeAgentSdkProvider implements AIProvider {
                 }
               } catch (refreshErr) {
                 console.error(`[sdk] session=${sessionId} OAuth refresh failed:`, refreshErr);
-                // Don't disable temp accounts (no refresh token) — they just expire naturally
-                if (accountService.hasRefreshToken(account.id)) {
-                  accountSelector.onAuthError(account.id);
-                }
+                accountSelector.onAuthError(account.id);
               }
             }
 
@@ -702,13 +699,10 @@ export class ClaudeAgentSdkProvider implements AIProvider {
             } else if (errCode === 401) {
               // Try refresh once
               try {
-                await accountService.refreshAccessToken(account.id);
+                await accountService.refreshAccessToken(account.id, false);
                 console.log(`[sdk] 401 on account ${account.id} — token refreshed`);
               } catch {
-                // Don't disable temp accounts (no refresh token) — they just expire naturally
-                if (accountService.hasRefreshToken(account.id)) {
-                  accountSelector.onAuthError(account.id);
-                }
+                accountSelector.onAuthError(account.id);
               }
             } else {
               accountSelector.onSuccess(account.id);

package/src/services/account-selector.service.ts

@@ -8,6 +8,7 @@ const MAX_RETRY_CONFIG_KEY = "account_max_retry";
 
 const BACKOFF_BASE_MS = 1_000;
 const BACKOFF_MAX_MS = 30 * 60_000;
+const AUTH_BACKOFF_BASE_MS = 5 * 60_000; // 5min base for auth errors (longer than rate limits)
 
 class AccountSelectorService {
   private cursor = 0;
@@ -125,11 +126,13 @@ class AccountSelectorService {
     console.log(`[accounts] ${accountId} rate limited — cooldown ${Math.round(backoffMs / 1000)}s (retry #${retries})`);
   }
 
-  /** Called when 401 Unauthorized — disable account */
+  /** Called when auth error (401 / authentication_failed) — cooldown with longer backoff */
   onAuthError(accountId: string): void {
-    console.log(`[accounts] ${accountId} auth error — disabling account`);
-    accountService.setDisabled(accountId);
-    this.retryCounts.delete(accountId);
+    const retries = (this.retryCounts.get(accountId) ?? 0) + 1;
+    this.retryCounts.set(accountId, retries);
+    const backoffMs = Math.min(AUTH_BACKOFF_BASE_MS * Math.pow(2, retries - 1), BACKOFF_MAX_MS);
+    accountService.setCooldown(accountId, Date.now() + backoffMs);
+    console.log(`[accounts] ${accountId} auth error — cooldown ${Math.round(backoffMs / 1000)}s (retry #${retries})`);
   }
 
   /** Called on successful request — reset retry count + track usage */