@hienlh/ppm 0.8.48 → 0.8.49

package/CHANGELOG.md

@@ -1,5 +1,11 @@
 # Changelog
 
+## [0.8.49] - 2026-03-25
+
+### Fixed
+- **Auth error backoff**: `onAuthError` now uses 5-minute base cooldown (exponential up to 30min) instead of 1s rate-limit backoff — prevents rapid retry loops on dead/rejected accounts
+- **No permanent disable**: Auth errors never permanently disable accounts — cooldown allows recovery from transient issues (subscription lapse, org changes, API hiccups)
+
 ## [0.8.48] - 2026-03-25
 
 ### Fixed

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@hienlh/ppm",
-  "version": "0.8.48",
+  "version": "0.8.49",
   "description": "Personal Project Manager — mobile-first web IDE with AI assistance",
   "author": "hienlh",
   "license": "MIT",

package/src/providers/claude-agent-sdk.ts

@@ -628,9 +628,7 @@ export class ClaudeAgentSdkProvider implements AIProvider {
                 }
               } catch (refreshErr) {
                 console.error(`[sdk] session=${sessionId} OAuth refresh failed:`, refreshErr);
-                // Cooldown instead of permanent disable — auth issues can be transient
-                // (subscription lapse, org changes, API hiccups)
-                accountSelector.onRateLimit(account.id);
+                accountSelector.onAuthError(account.id);
               }
             }
 
@@ -704,8 +702,7 @@ export class ClaudeAgentSdkProvider implements AIProvider {
                 await accountService.refreshAccessToken(account.id, false);
                 console.log(`[sdk] 401 on account ${account.id} — token refreshed`);
               } catch {
-                // Cooldown instead of permanent disable — auth issues can be transient
-                accountSelector.onRateLimit(account.id);
+                accountSelector.onAuthError(account.id);
               }
             } else {
               accountSelector.onSuccess(account.id);

package/src/services/account-selector.service.ts

@@ -8,6 +8,7 @@ const MAX_RETRY_CONFIG_KEY = "account_max_retry";
 
 const BACKOFF_BASE_MS = 1_000;
 const BACKOFF_MAX_MS = 30 * 60_000;
+const AUTH_BACKOFF_BASE_MS = 5 * 60_000; // 5min base for auth errors (longer than rate limits)
 
 class AccountSelectorService {
   private cursor = 0;
@@ -125,11 +126,13 @@ class AccountSelectorService {
     console.log(`[accounts] ${accountId} rate limited — cooldown ${Math.round(backoffMs / 1000)}s (retry #${retries})`);
   }
 
-  /** Called when 401 Unauthorized — disable account */
+  /** Called when auth error (401 / authentication_failed) — cooldown with longer backoff */
   onAuthError(accountId: string): void {
-    console.log(`[accounts] ${accountId} auth error — disabling account`);
-    accountService.setDisabled(accountId);
-    this.retryCounts.delete(accountId);
+    const retries = (this.retryCounts.get(accountId) ?? 0) + 1;
+    this.retryCounts.set(accountId, retries);
+    const backoffMs = Math.min(AUTH_BACKOFF_BASE_MS * Math.pow(2, retries - 1), BACKOFF_MAX_MS);
+    accountService.setCooldown(accountId, Date.now() + backoffMs);
+    console.log(`[accounts] ${accountId} auth error — cooldown ${Math.round(backoffMs / 1000)}s (retry #${retries})`);
   }
 
   /** Called on successful request — reset retry count + track usage */