@north-light/api 0.3.505 → 0.3.506

package/dist/core/subscription-state.d.ts

@@ -3,6 +3,8 @@ export declare const ANTHROPIC_PROVIDER_ID = "anthropic";
 export declare const OPENAI_CODEX_PROVIDER_ID = "openai-codex";
 /** pi's built-in `openai` provider signed in with a ChatGPT account (dynamic OAuth client). Distinct from Codex: its own pool, credential file and sign-in. */
 export declare const OPENAI_CHATGPT_PROVIDER_ID = "openai";
+/** Longest a recorded 429 keeps an account or model family cooling, whatever the provider's Retry-After or window reset says: after this the next real call probes the provider, and a success clears the row. */
+export declare const MAX_RATE_LIMIT_COOLDOWN_MS: number;
 export declare const INVALID_REFRESH_TOKEN_BACKOFF_MS: number;
 export type ManagedProviderId = typeof ANTHROPIC_PROVIDER_ID | typeof OPENAI_CODEX_PROVIDER_ID | typeof OPENAI_CHATGPT_PROVIDER_ID;
 export declare const MANAGED_PROVIDER_IDS: readonly ManagedProviderId[];

package/dist/core/subscription-state.js

@@ -13,6 +13,8 @@ export const ANTHROPIC_PROVIDER_ID = 'anthropic';
 export const OPENAI_CODEX_PROVIDER_ID = 'openai-codex';
 /** pi's built-in `openai` provider signed in with a ChatGPT account (dynamic OAuth client). Distinct from Codex: its own pool, credential file and sign-in. */
 export const OPENAI_CHATGPT_PROVIDER_ID = 'openai';
+/** Longest a recorded 429 keeps an account or model family cooling, whatever the provider's Retry-After or window reset says: after this the next real call probes the provider, and a success clears the row. */
+export const MAX_RATE_LIMIT_COOLDOWN_MS = 10 * 60 * 1000;
 export const INVALID_REFRESH_TOKEN_BACKOFF_MS = 30 * 24 * 60 * 60 * 1000;
 export const MANAGED_PROVIDER_IDS = [ANTHROPIC_PROVIDER_ID, OPENAI_CODEX_PROVIDER_ID, OPENAI_CHATGPT_PROVIDER_ID];
 const DEFAULT_FALLBACK_STRENGTH = 'strong';
@@ -158,8 +160,9 @@ export async function markSubscriptionAuthenticationFailed(provider, ref, attemp
     return publicPool(provider, file); providerWrite(agentDir(), (db) => update(db, { ...current.row, authFailure: 'invalid_grant', lastAttemptAt: Math.max(current.row.lastAttemptAt, attemptAt), rateLimitedUntil: Math.max(current.row.rateLimitedUntil, attemptAt + Math.max(0, retryAfterMs)) })); return publicPool(provider, file); }); }
 /** Record a 429 on an account. `scope` defaults to the whole account; a model scope cools only that family on this account, and a 429 older than the newest one already recorded for the same scope is ignored. */
 export async function markSubscriptionRateLimited(provider, ref, retryAfterMs, attemptAt = Date.now(), rateLimitedAt = Date.now(), scope = { kind: 'account' }) {
+    retryAfterMs = Math.min(Math.max(0, retryAfterMs), MAX_RATE_LIMIT_COOLDOWN_MS);
     if (scope.kind === 'account')
-        return mutateHealth(provider, ref, (row) => rateLimitedAt < row.lastRateLimitedAt ? null : { ...row, lastAttemptAt: Math.max(row.lastAttemptAt, attemptAt), lastRateLimitedAt: rateLimitedAt, rateLimitedUntil: rateLimitedAt + Math.max(0, retryAfterMs) });
+        return mutateHealth(provider, ref, (row) => rateLimitedAt < row.lastRateLimitedAt ? null : { ...row, lastAttemptAt: Math.max(row.lastAttemptAt, attemptAt), lastRateLimitedAt: rateLimitedAt, rateLimitedUntil: rateLimitedAt + retryAfterMs });
     providerWrite(agentDir(), (db) => {
         const row = providerRowByReference(db, provider, ref);
         if (!row)
@@ -168,7 +171,7 @@ export async function markSubscriptionRateLimited(provider, ref, retryAfterMs, a
         const current = providerModelCooldowns(db, provider).get(row.id)?.find((cooldown) => cooldown.family === scope.family);
         if (current && rateLimitedAt < current.lastRateLimitedAt)
             return;
-        upsertModelCooldown(db, provider, row.id, scope.family, rateLimitedAt + Math.max(0, retryAfterMs), rateLimitedAt);
+        upsertModelCooldown(db, provider, row.id, scope.family, rateLimitedAt + retryAfterMs, rateLimitedAt);
     });
     return readSubscriptionPool(provider);
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@north-light/api",
-  "version": "0.3.505",
+  "version": "0.3.506",
   "description": "Typed crtrd /v1 API contract — DTOs, route builders, the error contract, the CrtrClient, and the command-plugin manifest format. Zero runtime dependencies.",
   "type": "module",
   "main": "./dist/api/index.js",