@vibe-cafe/vibe-usage 0.7.14 → 0.7.15

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@vibe-cafe/vibe-usage",
-  "version": "0.7.14",
+  "version": "0.7.15",
   "description": "Track your AI coding tool token usage and sync to vibecafe.ai",
   "type": "module",
   "bin": {

package/src/daemon.js

@@ -22,16 +22,31 @@ export async function runDaemon() {
 
   log('daemon started (sync every 30m, Ctrl+C to stop)');
 
+  // Why we don't exit on the first 401: launchd KeepAlive / systemd
+  // Restart=on-failure relaunch in ~10s, which used to turn a single bad/
+  // revoked key into ~360 ingest-401s per hour per machine. Sleeping a full
+  // INTERVAL between auth retries collapses that storm to the daemon's normal
+  // 30m cadence; only after MAX_AUTH_FAILURES consecutive 401s do we hand
+  // off to the supervisor, which by then can't relaunch fast enough to matter.
+  const MAX_AUTH_FAILURES = 5;
+  let consecutiveAuthFailures = 0;
+
   // eslint-disable-next-line no-constant-condition
   while (true) {
     try {
       await runSync({ throws: true, quiet: true });
+      consecutiveAuthFailures = 0;
     } catch (err) {
       if (err.message === 'UNAUTHORIZED') {
-        log('API key invalid, exiting.');
-        process.exit(1);
+        consecutiveAuthFailures++;
+        if (consecutiveAuthFailures >= MAX_AUTH_FAILURES) {
+          log(`API key invalid for ${MAX_AUTH_FAILURES} consecutive syncs, exiting.`);
+          process.exit(1);
+        }
+        log(`API key invalid (attempt ${consecutiveAuthFailures}/${MAX_AUTH_FAILURES}), retrying in 30m.`);
+      } else {
+        log(`sync error: ${err.message}`);
       }
-      log(`sync error: ${err.message}`);
     }
     await sleep(INTERVAL);
   }