cartethyia 2.7.9 → 2.8.1

package/src/providers/operations/account-health-service.ts

@@ -196,6 +196,7 @@ export async function recordAccountFailure(
     //   1m limit must keep its short cooldown, not park the account for 24h).
     const autoDisableTarget =
       AUTO_DISABLE_TARGET_CATEGORIES.has(effective.category) &&
+      effective.modelScoped !== true &&
       effective.status === "cooldown" &&
       effective.mutatesAccount &&
       options?.origin === "upstream";
@@ -230,7 +231,10 @@ export async function recordAccountFailure(
     // D02: when the auto-disable intercept fired, the target category must not
     // sink into a model-scoped cooldown — the outcome is an account-wide
     // disable.
-    const shouldModelCooldown = !autoDisableActive && modelId !== undefined && isThrottle;
+    const shouldModelCooldown =
+      !autoDisableActive &&
+      modelId !== undefined &&
+      (isThrottle || effective.modelScoped === true);
     // The account-wide streak, escalated for a provider-stated window. Read once
     // so the model-scoped and account-wide paths below cannot disagree about it:
     // this is the count *before* this failure, which the UPDATE below increments.
@@ -694,6 +698,83 @@ async function writeHealthEvent(
   await client.insert(healthEvents).values({ id: randomUUID(), ...row });
 }
 
+/**
+ * The one internal seam that applies a health verdict to an account row.
+ *
+ * Every producer that persists account-state semantics — dispatch failure
+ * classification, OAuth refresh definitive failure, quota refresh parking —
+ * converges here instead of writing `status`/`cooldownUntil`/error fields
+ * independently. Producers may still classify differently; they may not
+ * persist account-state semantics separately.
+ *
+ * This writes the account-wide health state plus a health audit row, inside the
+ * caller's transaction (`client`). It returns `true` when the account row was
+ * actually updated (i.e. the account exists and is not operator-disabled with
+ * `preserveOperatorDisable`), so the caller knows whether routing must be
+ * invalidated (routesVisible) or the lease released.
+ */
+export async function applyAccountVerdict(
+  client: CartethyiaDatabase,
+  verdict: {
+    readonly accountId: string;
+    readonly status: "cooldown" | "disabled";
+    readonly reason: string;
+    readonly category: string | null;
+    readonly cooldownUntil?: Date | null;
+    /** When true, an operator-disable (status `disabled`, no deadline) is left untouched. */
+    readonly preserveOperatorDisable?: boolean;
+    /** Health event transition status (defaults to the verdict status). */
+    readonly fromStatus?: "active" | "cooldown" | "disabled" | null;
+    readonly modelId?: string | null;
+    readonly createdAt?: Date;
+  },
+): Promise<boolean> {
+  return withTransaction(
+    client,
+    async (tx) => {
+      const rows = await tx
+        .select({
+          status: providerAccounts.status,
+          cooldownUntil: providerAccounts.cooldownUntil,
+        })
+        .from(providerAccounts)
+        .where(eq(providerAccounts.id, verdict.accountId))
+        .limit(1);
+      const row = rows[0];
+      if (!row) return false;
+      if (verdict.preserveOperatorDisable === true) {
+        const isOperatorDisable = row.status === "disabled" && row.cooldownUntil == null;
+        if (isOperatorDisable) return false;
+      }
+      const now = verdict.createdAt ?? new Date();
+      await tx
+        .update(providerAccounts)
+        .set({
+          status: verdict.status,
+          lastError: (verdict.reason ?? "Account failed").slice(0, 500),
+          lastErrorCategory: verdict.category ?? "check_failed",
+          lastErrorAt: now,
+          ...(verdict.cooldownUntil === undefined
+            ? {}
+            : { cooldownUntil: verdict.cooldownUntil }),
+        })
+        .where(eq(providerAccounts.id, verdict.accountId));
+      await writeHealthEvent(tx, {
+        entityKind: "account",
+        accountId: verdict.accountId,
+        fromStatus: verdict.fromStatus ?? (row.status as "active" | "cooldown" | "disabled" | null),
+        toStatus: verdict.status,
+        reason: verdict.reason,
+        errorCategory: verdict.category,
+        modelId: verdict.modelId ?? null,
+        createdAt: now,
+      });
+      return true;
+    },
+    false,
+  );
+}
+
 export async function reportAttemptOutcome(
   db: CartethyiaDatabase,
   report: AttemptHealthReport,

package/src/providers/operations/account-refresh-status.ts

@@ -9,10 +9,10 @@
  * report `"active"` just because a refresh succeeded.
  */
 import { randomUUID } from "node:crypto";
-import { eq } from "drizzle-orm";
 import type { CartethyiaDatabase } from "../../persistence/db-handle";
-import { healthEvents, providerAccounts, providerOauthStates } from "../../persistence/schema";
+import { healthEvents } from "../../persistence/schema";
 import { pushStructuredConsoleLog } from "../../observability/log-ring";
+import { loadAccountWithOauthState } from "./provider-credential-service";
 import type { OAuthRefreshService, OAuthTokenRefresher } from "../authentication/oauth-refresh-service";
 
 export type RefreshAccountStatusCode =
@@ -21,6 +21,7 @@ export type RefreshAccountStatusCode =
   | "not_oauth"
   | "static_token"
   | "no_refresher"
+  | "auth_invalidated"
   | "refresh_failed";
 
 export interface RefreshAccountStatusOutcome {
@@ -54,6 +55,7 @@ interface LoadedAccount {
   readonly credentialKind: string;
   readonly status: string;
   readonly staticToken: boolean;
+  readonly lastErrorCategory: string | null;
   readonly refreshCiphertext: Buffer | null;
   readonly expiresAt: Date | null;
 }
@@ -62,47 +64,34 @@ async function loadAccount(
   db: CartethyiaDatabase,
   accountId: string,
 ): Promise<LoadedAccount | undefined> {
-  const selectBuilder = db
-    .select({
-      id: providerAccounts.id,
-      providerId: providerAccounts.providerId,
-      credentialKind: providerAccounts.credentialKind,
-      status: providerAccounts.status,
-      staticToken: providerAccounts.staticToken,
-      refreshCiphertext: providerOauthStates.refreshCiphertext,
-      expiresAt: providerOauthStates.expiresAt,
-    })
-    .from(providerAccounts);
-  const query =
-    "leftJoin" in selectBuilder
-      ? selectBuilder.leftJoin(
-          providerOauthStates,
-          eq(providerOauthStates.providerAccountId, providerAccounts.id),
-        )
-      : selectBuilder;
-  const rows = await query.where(eq(providerAccounts.id, accountId)).limit(1);
-  return rows[0];
+  const loaded = await loadAccountWithOauthState(db, accountId, {
+    includeStatus: true,
+    includeLastErrorCategory: true,
+    includeExpiry: true,
+  });
+  if (!loaded || loaded.status === undefined || loaded.expiresAt === undefined) return undefined;
+  return {
+    id: loaded.id,
+    providerId: loaded.providerId,
+    credentialKind: loaded.credentialKind,
+    status: loaded.status,
+    staticToken: loaded.staticToken,
+    lastErrorCategory: loaded.lastErrorCategory ?? null,
+    refreshCiphertext: loaded.refreshCiphertext,
+    expiresAt: loaded.expiresAt,
+  };
 }
 
 async function readStatusAfter(
   db: CartethyiaDatabase,
   accountId: string,
 ): Promise<{ status: string; expiresAt: Date | null } | undefined> {
-  const selectBuilder = db
-    .select({
-      status: providerAccounts.status,
-      expiresAt: providerOauthStates.expiresAt,
-    })
-    .from(providerAccounts);
-  const query =
-    "leftJoin" in selectBuilder
-      ? selectBuilder.leftJoin(
-          providerOauthStates,
-          eq(providerOauthStates.providerAccountId, providerAccounts.id),
-        )
-      : selectBuilder;
-  const rows = await query.where(eq(providerAccounts.id, accountId)).limit(1);
-  return rows[0];
+  const loaded = await loadAccountWithOauthState(db, accountId, {
+    includeStatus: true,
+    includeExpiry: true,
+  });
+  if (!loaded || loaded.status === undefined || loaded.expiresAt === undefined) return undefined;
+  return { status: loaded.status, expiresAt: loaded.expiresAt };
 }
 
 /** Non-mutating health event: records the attempt, never changes status. */
@@ -152,6 +141,16 @@ export async function refreshAccountStatus(
   }
   const statusBefore = account.status;
 
+  if (account.status === "disabled" && account.lastErrorCategory === "auth_invalidated") {
+    return {
+      ok: false,
+      tokenRefreshed: false,
+      statusAfter: statusBefore,
+      code: "auth_invalidated",
+      error: "auth_invalidated",
+      category: "This account was rejected by the provider and requires re-authentication; automatic refresh is disabled.",
+    };
+  }
   if (account.credentialKind !== "oauth") {
     return {
       ok: false,

package/src/providers/operations/account-tier.ts

@@ -8,24 +8,22 @@
  *
  * The mapping is deliberately conservative, following the same posture as
  * `plan-gate.ts`: a tier is only claimed when the string proves it. "free"
- * requires a free marker in the string, "pro" requires a team/enterprise/org
- * signal, and "paid" is only assigned for providers whose plan strings are
- * evidenced (Trae, the buddy family, Cursor). Everything else — an unknown
- * provider, an unrecognized plan, a `null` plan — resolves to `null`, which
- * keeps the legacy behavior intact (unknown tier ⇒ no rule applies ⇒ the old
- * constants drive the cooldown).
+ * requires the shared free marker set (exported there), "pro" requires a
+ * team/enterprise/org signal, and "paid" is only assigned for providers whose
+ * plan strings are evidenced (Trae, the buddy family, Cursor). Everything else
+ * — an unknown provider, an unrecognized plan, a `null` plan — resolves to
+ * `null`, which keeps the legacy behavior intact (unknown tier ⇒ no rule
+ * applies ⇒ the old constants drive the cooldown).
  */
 
+import { FREE_PLAN_MARKERS } from "../../transport/routing/plan-gate";
+import { BUDDY_PROVIDER_IDS } from "../provider-metadata";
+import { QODER_CHECKIN_PROVIDER_IDS } from "../integrations/qoder/qoder-checkin";
+import { TRAE_PROVIDER_IDS } from "../integrations/trae/trae-realm";
+
 /** The three-tier taxonomy for cooldown rules. `null` = unknown. */
 export type AccountTier = "free" | "paid" | "pro" | null;
 
-const TRAE_PROVIDER_IDS: ReadonlySet<string> = new Set(["trae", "traecn"]);
-const BUDDY_PROVIDER_IDS: ReadonlySet<string> = new Set([
-  "cb",
-  "cbcn",
-]);
-const QODER_PROVIDER_IDS: ReadonlySet<string> = new Set(["qoder", "qodercn"]);
-
 /** Team/enterprise/org signals that prove a "pro" tier. */
 const PRO_PLAN_MARKERS: readonly string[] = ["team", "enterprise", "org", "pro"];
 
@@ -41,10 +39,11 @@ export function mapPlanToTier(providerId: string, plan: string | null): AccountT
   const lower = (plan ?? "").trim().toLowerCase();
   if (lower.length === 0) return null;
   // Free is only claimed when the string proves it — the same marker set the
-  // routing plan-gate uses, so the two cannot disagree about an account.
-  if (lower.includes("free")) return "free";
+  // routing plan-gate uses (imported, not copied), so the two cannot disagree
+  // about an account.
+  if (FREE_PLAN_MARKERS.some((marker) => lower.includes(marker))) return "free";
 
-  if (QODER_PROVIDER_IDS.has(providerId.toLowerCase())) {
+  if ((QODER_CHECKIN_PROVIDER_IDS as readonly string[]).includes(providerId.toLowerCase())) {
     // Qoder's `userType` is `personal_standard` by default; team/enterprise/
     // org suffixes prove a higher tier. `personal_standard` itself is not
     // verified against the taxonomy, so it stays unknown rather than guessed.

package/src/providers/operations/client-version-resolver.ts

@@ -11,7 +11,7 @@
  * Discovery is owned by the background client-version monitor. Request paths
  * only call the synchronous `get`/`snapshot` accessors and never fetch.
  */
-import { getCachedVersion, resetVersionCacheForTesting } from "./provider-version-cache";
+import { getCachedVersion, resetVersionCacheForTesting } from "./provider-caches";
 import type { OutboundFetch } from "../provider-contracts";
 import { composeAbortSignal } from "../authentication/oauth-flow-store";
 

package/src/providers/operations/client-versions.ts

@@ -16,28 +16,19 @@ import {
   buildGrokShellUserAgent,
 } from "./cli-platform";
 
-async function qoderVersion(response: Response): Promise<string | null> {
-  try {
-    const parsed = (await response.json()) as { version?: unknown };
-    return isSemverish(parsed.version) ? parsed.version.trim() : null;
-  } catch {
-    return null;
-  }
-}
-
 /**
  * Newest Trae IDE version from the official changelog.
  *
- * Trae publishes no npm package and no release API, so the changelog is the
+ * Trae publishes no npm package and no release API, so the changelog was the
  * only machine-readable source of the current client version. It matters
  * upstream: intl `llm_raw_chat` answers `4015` unless the request carries the
  * *current* client version, so a stale pin is an outage, not a cosmetic drift.
  *
- * The page embeds its content as JSON, and its newest entry is the first dated
- * heading — not the highest semver, because this vendor's hotfix line numbers
- * past its feature line (3.5.104 shipped after 3.5.97). Taking `max(semver)`
- * would report an old build as current, so this walks the document in order and
- * returns the first version following a dated release heading.
+ * The page is now an SPA (2026-11-11): its HTML no longer embeds the release
+ * data, so this parser returns null and the pinned fallback carries the wire
+ * identity until a machine-readable feed exists again (see
+ * `VERSION_SOURCES.trae`). The parser is kept for when the page re-exposes
+ * its entries.
  */
 async function traeVersion(response: Response): Promise<string | null> {
   try {
@@ -67,11 +58,6 @@ async function traeVersion(response: Response): Promise<string | null> {
   }
 }
 
-async function clineClientVersion(response: Response): Promise<string | null> {
-  const data = (await response.json()) as { version?: unknown };
-  return isSemverish(data.version) ? data.version.trim() : null;
-}
-
 /**
  * Newest Cursor build from the official download API, as the IDE's own header
  * spells it.
@@ -95,29 +81,6 @@ async function cursorVersion(response: Response): Promise<string | null> {
   }
 }
 
-async function clineSdkVersion(response: Response): Promise<string | null> {
-  const data = (await response.json()) as {
-    version?: unknown;
-    "dist-tags"?: { latest?: unknown };
-  };
-  const candidate = data.version ?? data["dist-tags"]?.latest;
-  return isSemverish(candidate) ? candidate.trim() : null;
-}
-
-async function kimiVersion(response: Response): Promise<string | null> {
-  const data = (await response.json()) as { info?: { version?: unknown } };
-  return isSemverish(data.info?.version) ? data.info.version.trim() : null;
-}
-
-async function kiroCaskVersion(response: Response): Promise<string | null> {
-  try {
-    const data = (await response.json()) as { version?: unknown };
-    return isSemverish(data.version) ? data.version.trim() : null;
-  } catch {
-    return null;
-  }
-}
-
 async function codeBuddyCnVersion(response: Response): Promise<string | null> {
   try {
     const data = (await response.json()) as { version?: unknown };
@@ -216,11 +179,24 @@ const KIRO_SYSTEM_VERSION = "win32#10.0.22631";
 /** Node version the observed Kiro client reports (Electron's bundled Node). */
 const KIRO_NODE_VERSION = "24.18.0";
 
+/** Clixad gateway's own CLI version: `cli_latest` on `/v1/models`. */
+async function clixadVersion(response: Response): Promise<string | null> {
+  const body = await response.text().catch(() => "");
+  if (body.length === 0) return null;
+  try {
+    const parsed = JSON.parse(body) as { cli_latest?: unknown };
+    const candidate = parsed.cli_latest;
+    return typeof candidate === "string" && isSemverish(candidate) ? candidate.trim() : null;
+  } catch {
+    return null;
+  }
+}
+
 /** Ordered upstream sources and pinned fallbacks for every client version. */
 export const VERSION_SOURCES = {
   antigravity: {
     key: "antigravity",
-    fallback: "2.29.0",
+    fallback: "2.31.0",
     sources: [
       {
         url: "https://antigravity-hub-auto-updater-974169037036.us-central1.run.app/manifest/latest-arm64-mac.yml",
@@ -236,12 +212,7 @@ export const VERSION_SOURCES = {
     // `@qoder-ai/qodercli/latest`) may report a newer CLI, but the CLI and
     // IDE are different products — the chat surface identity is the IDE's.
     fallback: "1.1.80",
-    sources: [
-      {
-        url: "https://registry.npmjs.org/@qoder-ai/qodercli/latest",
-        extract: qoderVersion,
-      },
-    ],
+    sources: [{ url: "https://registry.npmjs.org/@qoder-ai/qodercli/latest" }],
   },
   opencode: {
     key: "opencode",
@@ -249,7 +220,7 @@ export const VERSION_SOURCES = {
     // under `@opencode/cli`, and this feed is what its own installer reads.
     // Fallback = the current latest release; raise it whenever the package
     // moves so a cold process does not present a stale client build.
-    fallback: "2.2.6",
+    fallback: "2.2.7",
     minVersion: "2.0.0",
     sources: [{ url: "https://opencode.ai/update/api/latest/cli/npm" }],
   },
@@ -274,49 +245,45 @@ export const VERSION_SOURCES = {
     fallback: "4.1.26",
     minVersion: "4.1.23",
     sources: [
-      {
-        url: "https://raw.githubusercontent.com/cline/cline/main/apps/vscode/package.json",
-        extract: clineClientVersion,
-      },
+      { url: "https://raw.githubusercontent.com/cline/cline/main/apps/vscode/package.json" },
     ],
   },
   clineSdk: {
     key: "cline-sdk",
     fallback: "0.2.0",
-    sources: [{ url: "https://registry.npmjs.org/@cline/sdk/latest", extract: clineSdkVersion }],
+    sources: [{ url: "https://registry.npmjs.org/@cline/sdk/latest" }],
   },
   clineCli: {
     key: "cline-cli",
     fallback: "3.0.74",
-    sources: [{ url: "https://registry.npmjs.org/cline/latest", extract: clineSdkVersion }],
+    sources: [{ url: "https://registry.npmjs.org/cline/latest" }],
   },
   codex: {
     key: "codex",
-    fallback: "0.167.0",
+    fallback: "0.167.1",
     sources: [{ url: "https://registry.npmjs.org/@openai/codex/latest" }],
   },
   kimiCli: {
     key: "kimi-cli",
     fallback: "1.52.0",
-    sources: [{ url: "https://pypi.org/pypi/kimi-cli/json", extract: kimiVersion }],
+    sources: [{ url: "https://pypi.org/pypi/kimi-cli/json" }],
   },
   kiro: {
     key: "kiro",
-    fallback: "1.4.121",
+    fallback: "1.4.154",
     sources: [
       {
         // Kiro's downloads page exposes no stable version string. Homebrew
         // tracks the official installer URL and exposes its version as JSON;
         // keep the product page parser as a fallback.
         url: "https://formulae.brew.sh/api/cask/kiro.json",
-        extract: kiroCaskVersion,
       },
       { url: "https://kiro.dev/downloads/", extract: kiroVersion },
     ],
   },
   codebuddy: {
     key: "codebuddy",
-    fallback: "2.181.0",
+    fallback: "2.183.0",
     sources: [
       { url: "https://registry.npmjs.org/@tencent-ai/codebuddy-code/latest" },
       { url: "https://registry.npmmirror.com/@tencent-ai/codebuddy-code/latest" },
@@ -324,7 +291,7 @@ export const VERSION_SOURCES = {
   },
   codebuddyCn: {
     key: "codebuddy-cn",
-    fallback: "4.12.3.42658816",
+    fallback: "4.12.4.43368774",
     sources: [
       {
         // Official CN builds are listed by Homebrew's maintained cask feed;
@@ -339,7 +306,7 @@ export const VERSION_SOURCES = {
     // Current `@anthropic-ai/claude-code` release, so the billing
     // `cc_version=` suffix and the `claude-cli/` User-Agent stay on what
     // upstream ships.
-    fallback: "2.1.319",
+    fallback: "2.1.322",
     sources: [{ url: "https://registry.npmjs.org/@anthropic-ai/claude-code/latest" }],
   },
   claudeSdk: {
@@ -366,21 +333,22 @@ export const VERSION_SOURCES = {
   },
   kilo: {
     key: "kilo-code",
-    fallback: "7.8.27",
+    fallback: "7.8.28",
     sources: [{ url: "https://open-vsx.org/api/kilocode/kilo-code" }],
   },
   muse: {
     key: "muse-code",
-    fallback: "1.4.14-R7309.1",
+    fallback: "1.4.15-R8339.1",
     sources: [{ url: "https://api.meta.ai/muse-code/channels/muse-stable" }],
   },
   trae: {
     key: "trae",
-    // Fallback = the newest release the changelog names, which is the *high*
-    // end of its newest line ("TRAE v3.6.1 ~ 3.6.4"). Discovery replaces it
-    // within one monitor tick; it is only what a cold process sends before
-    // the first successful fetch.
-    fallback: "3.6.4",
+    // Fallback = the current desktop release per the official winget manifest
+    // (ByteDance.Trae 3.6.13). The docs changelog renders as an SPA and no
+    // longer exposes its newest entries to the parser below, so it is not a
+    // reliable discovery source right now — raise this pin when the desktop
+    // build moves.
+    fallback: "3.6.13",
     sources: [
       {
         url: "https://docs.trae.ai/ide/changelog?_lang=en",
@@ -391,24 +359,63 @@ export const VERSION_SOURCES = {
   freepi: {
     key: "freepi",
     // The free-pi CLI version — the `x-client-version` the gateway reports.
-    // Fallback = the unpacked 0.6.14 bundle; npm discovery replaces it.
-    fallback: "0.6.14",
+    // Fallback = the current npm latest (0.6.19 as of 2026-11-12); a cold
+    // process sends it until the monitor's first successful discovery.
+    fallback: "0.6.19",
     sources: [{ url: "https://registry.npmjs.org/free-pi-cli/latest" }],
   },
   perch: {
     key: "perch",
     // The official Perch CLI, spawned by the adapter for hosted inference.
-    fallback: "2.4.125",
+    // Fallback = the current npm latest (2.4.128 as of 2026-11-11); a cold
+    // process sends it until the monitor's first successful discovery.
+    fallback: "2.4.128",
     sources: [{ url: "https://registry.npmjs.org/perchai-cli/latest" }],
   },
+  clixad: {
+    key: "clixad",
+    // The Clixad gateway publishes the CLI build it is paired with as
+    // `cli_latest` on `/v1/models` (unauthenticated). Fallback = the version
+    // the 0.0.1-beta.50 bundle shipped (verified live 2026-11-11); a cold
+    // process sends it until the monitor's first successful discovery.
+    fallback: "0.0.1-beta.50",
+    sources: [
+      {
+        url: "https://clixad.onrender.com/v1/models",
+        extract: clixadVersion,
+      },
+    ],
+  },
+  freebuff: {
+    key: "freebuff",
+    // No machine-readable public feed exists for Freebuff Desktop. GitHub
+    // releases only publish Codecane (a separate CLI line) staging builds,
+    // npm `freebuff` is the CLI (a different product), and the site's
+    // download links are client-rendered with no stable asset path.
+    // Fallback = the version unpacked from the official Windows installer
+    // during the wire audit (2026-11-09, Freebuff Desktop 0.0.201). Raise it
+    // when the next installer bundle is audited.
+    fallback: "0.0.201",
+    sources: [],
+  },
+  deepai: {
+    key: "deepai",
+    // No machine-readable public feed exists for the DeepAI Code desktop app
+    // (macOS/Windows only, no npm/CLI line). Fallback = the version unpacked
+    // from the audited bundle (2026-11-11, DeepAI Code 0.3.35). Raise it
+    // when the next bundle is audited. Pinned-only by design for the same
+    // reason as `freebuff`.
+    fallback: "0.3.35",
+    sources: [],
+  },
   cursor: {
     key: "cursor",
-    // Fallback = the last observed wire version (CLI ~2026.11.07-306d153).
-    // Discovery replaces it within one monitor tick; it is only what a cold
-    // process sends before the first successful fetch. Kept equal to
-    // `FALLBACK_CLIENT_VERSION` in the cursor adapter so the badge and the
-    // request header always send one identity.
-    fallback: "cli-3.29.9-306d153",
+    // Fallback = the newest stable build from the official download API
+    // (cli-3.29.15-86776fc). Discovery replaces it within one monitor tick; it
+    // is only what a cold process sends before the first successful fetch.
+    // Kept equal to `FALLBACK_CLIENT_VERSION` in the cursor adapter so the
+    // badge and the request header always send one identity.
+    fallback: "cli-3.29.15-86776fc",
     sources: [
       {
         url: "https://cursor.com/api/download?platform=win32-x64-user&releaseTrack=stable",
@@ -422,7 +429,7 @@ export const VERSION_SOURCES = {
     // comment this replaced claimed no semver existed and pinned a date tag
     // (`v2026.9.24`) as the version — a tag, not a release, and not the
     // identity the client sends.
-    fallback: "0.23.0",
+    fallback: "0.23.1",
     sources: [
       {
         url: "https://api.github.com/repos/NousResearch/hermes-agent/releases/latest",
@@ -449,6 +456,9 @@ const resolvers = {
   trae: createClientVersionResolver({ ...VERSION_SOURCES.trae, client: "trae" }),
   freepi: createClientVersionResolver({ ...VERSION_SOURCES.freepi, client: "freepi" }),
   perch: createClientVersionResolver({ ...VERSION_SOURCES.perch, client: "perch" }),
+  clixad: createClientVersionResolver({ ...VERSION_SOURCES.clixad, client: "clixad" }),
+  freebuff: createClientVersionResolver({ ...VERSION_SOURCES.freebuff, client: "freebuff" }),
+  deepai: createClientVersionResolver({ ...VERSION_SOURCES.deepai, client: "deepai" }),
   cursor: createClientVersionResolver({ ...VERSION_SOURCES.cursor, client: "cursor" }),
   opencode: createClientVersionResolver({ ...VERSION_SOURCES.opencode, client: "opencode" }),
   commandcode: createClientVersionResolver({ ...VERSION_SOURCES.commandcode, client: "command-code" }),
@@ -470,6 +480,11 @@ const resolvers = {
 } satisfies Record<keyof typeof VERSION_SOURCES, ClientVersionResolver>;
 const PROVIDER_VERSION_RESOLVERS: Readonly<Record<string, ClientVersionResolver>> = {
   antigravity: resolvers.antigravity,
+  freepi: resolvers.freepi,
+  perch: resolvers.perch,
+  clixad: resolvers.clixad,
+  freebuff: resolvers.freebuff,
+  deepai: resolvers.deepai,
   grok: resolvers.grok,
   xai: resolvers.grok,
   opencode: resolvers.opencode,
@@ -583,6 +598,10 @@ export const getQoderVersion = accessor("qoder").get;
 export const getHermesVersion = accessor("hermes").get;
 export const getTraeVersion = accessor("trae").get;
 export const getAntigravityVersion = accessor("antigravity").get;
+export const getFreepiVersion = accessor("freepi").get;
+export const getPerchVersion = accessor("perch").get;
+export const getFreebuffVersion = accessor("freebuff").get;
+export const getDeepAIVersion = accessor("deepai").get;
 
 export const getOpenCodeVersion = accessor("opencode").get;
 

package/src/providers/operations/cooldown-rules.ts

@@ -28,24 +28,19 @@ type ProviderRules = Record<string, CategoryRules>;
 const DAY = 24 * 60 * 60 * 1000;
 const MINUTE = 60 * 1000;
 
-const COOLDOWN_RULES: ProviderRules = {
-  trae: {
-    model_unreachable: {
-      free: DAY,
-      paid: 15 * MINUTE,
-      pro: 15 * MINUTE,
-    },
+const TRAE_RULES: CategoryRules = {
+  model_unreachable: {
+    free: DAY,
+    paid: 15 * MINUTE,
+    pro: 15 * MINUTE,
   },
+};
+
+const COOLDOWN_RULES: ProviderRules = {
+  trae: TRAE_RULES,
   // Trae CN is the same upstream product under a second realm id — the
-  // classifier already treats the two identically (trae-region-unavailable,
-  // trae-quota-exhausted), so the rules mirror.
-  traecn: {
-    model_unreachable: {
-      free: DAY,
-      paid: 15 * MINUTE,
-      pro: 15 * MINUTE,
-    },
-  },
+  // classifier already treats the two identically, so the rules alias.
+  traecn: TRAE_RULES,
 };
 
 /**