claude-multiacc 1.0.20 → 1.0.21

package/README.md

@@ -122,7 +122,7 @@ and backs off on **every** non-2xx, not just a 429 — honoring `Retry-After`, a
 for 6 h on a refusal the server marks `x-should-retry: false`. `limits --force` overrides
 all of it. The cadence is deliberately unhurried: several machines polling the same
 accounts every minute earns a 429 with `Retry-After: 3600`, and telemetry then goes stale
-for an hour at a time — which is exactly when every account starts scoring *neutral* and
+for an hour at a time — which is exactly when every account starts scoring *unknown* and
 the picker loses its ability to tell them apart.
 
 > **The usage endpoint needs an OAuth login, not a setup token.** A portable
@@ -131,7 +131,7 @@ the picker loses its ability to tell them apart.
 > user:profile`: setup tokens are minted without that scope. So an account whose
 > `.credentials.json` grant has lapsed keeps working perfectly while going **permanently
 > dark for telemetry**, and a pool where that happens to every account ranks everything
-> neutral and picks at random. `claude-accounts status` says `RANKING IS BLIND` when the
+> unknown and picks at random. `claude-accounts status` says `RANKING IS BLIND` when the
 > pool is in that state, and the shim prints an hourly warning on a terminal. The fix is
 > a real sign-in on the machine that polls (`claude-accounts login <acct-NN>`); since
 > `limits.json` is one of the things `sync` pushes, only the **source** machine needs it —
@@ -145,7 +145,7 @@ working accounts, while the cutoff declares one unusable, and an account reading
 hour ago may be well past 90% now. When nothing is in-window at all, a stale weekly
 reading is still used **if its bucket has not reset yet** (a weekly bucket only rises
 until then, so the number remains a true lower bound) — logged as `ranking=DEGRADED`.
-Only when even that is unavailable does selection fall back to neutral, logged as
+Only when even that is unavailable does selection rank the account last, logged as
 `ranking=BLIND`.
 
 If an account's OAuth access token has been expired for a while (idle account,

package/bin/claude

@@ -214,17 +214,17 @@ age_human() { # $1 = seconds
 # confirm this reset asymmetry — an account whose only near-full bucket is the cheap
 # session one must NOT rank behind one burning durable weekly headroom.)
 #   score = weekly%*1000 + session%      weekly,session in [0,100]
-# Stale/unreadable telemetry ranks NEUTRAL (weekly 50, session 50), never "free" —
+# Stale/unreadable telemetry ranks LAST (weekly 100, session 100), never "free" —
 # EXCEPT in a blind pool (SEL_DEGRADED=1), where a still-valid stale weekly reading is
-# used instead. Neutral is only the right answer while some other account HAS fresh
-# data to be neutral against; when no account does, neutral is just a coin flip.
+# used instead. Unknown data must never beat a truthful usage reading; when every
+# candidate is unknown, the equal worst-case scores still preserve fail-open selection.
 SEL_DEGRADED=0
 sel_score_of() { # $1 = acct dir
   local w s
   if ! w="$(fresh_field "$1" weekly_percent)" && ! w="$(fresh_field "$1" max_percent)"; then
-    if [ "$SEL_DEGRADED" = 1 ]; then w="$(stale_weekly "$1")" || w=50; else w=50; fi
+    if [ "$SEL_DEGRADED" = 1 ]; then w="$(stale_weekly "$1")" || w=100; else w=100; fi
   fi
-  s="$(fresh_field "$1" session_percent)" || s=50
+  s="$(fresh_field "$1" session_percent)" || s=100
   printf '%s\n' $((w * 1000 + s))
 }
 

package/bin/codex

@@ -144,11 +144,13 @@ fresh_field() { # fresh_field <acct dir> <json key> -> integer if telemetry fres
 # window only refills on its multi-day reset, while the ~5h window self-heals, so
 # session is a mild tiebreaker only (same reset asymmetry as the claude pool).
 #   score = weekly%*1000 + session%      weekly,session in [0,100]
-# Stale/unreadable telemetry ranks NEUTRAL (weekly 50, session 50), never "free".
+# Stale/unreadable telemetry ranks LAST (weekly 100, session 100), never "free".
+# Equal worst-case scores keep an entirely unknown pool selectable, but an unknown
+# account can never beat a candidate with truthful usage telemetry.
 sel_score_of() { # $1 = acct dir
   local w s
-  w="$(fresh_field "$1" weekly_percent)" || w="$(fresh_field "$1" max_percent)" || w=50
-  s="$(fresh_field "$1" session_percent)" || s=50
+  w="$(fresh_field "$1" weekly_percent)" || w="$(fresh_field "$1" max_percent)" || w=100
+  s="$(fresh_field "$1" session_percent)" || s=100
   printf '%s\n' $((w * 1000 + s))
 }
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "claude-multiacc",
-  "version": "1.0.20",
+  "version": "1.0.21",
   "description": "Multi-account addon for Claude Code and OpenAI Codex CLI: every claude / claude -p and every codex / codex exec runs under a randomly-picked subscription account with the most usage headroom. Mirrors to a deploy server. No API keys.",
   "type": "module",
   "bin": {

package/tests/run-tests.sh

@@ -253,11 +253,30 @@ done
   && t_ok "CLAUDE_SHIM_SELECT=random restores uniform spread" \
   || t_fail "random opt-out" "acct-01=$hits1 acct-02=$hits2"
 
-# stale telemetry is neutral, never assumed free
+# Unknown telemetry ranks behind every truthful reading, never as neutral or free.
 printf '{"fetched_at":1,"weekly_percent":1,"session_percent":1,"max_percent":1,"buckets":[]}' > "$ACC/acct-01/limits.json"
 lj 30 30 30 > "$ACC/acct-02/limits.json"
 out="$(claude 2>&1)"
 check "stale 1% loses to fresh 30% (stale is not trusted)" "CFG=acct-02" "$out"
+lj 88 88 88 > "$ACC/acct-01/limits.json"
+rm -f "$ACC/acct-02/limits.json" "$ACC/.last-pick"
+all1=1
+for _ in $(seq 1 15); do
+  case "$(claude 2>&1)" in *CFG=acct-01*) ;; *) all1=0 ;; esac
+done
+[ "$all1" = "1" ] && t_ok "unknown telemetry never beats a known account at 88%" \
+  || t_fail "unknown telemetry ranking" "the unknown account beat truthful 88% usage"
+rm -f "$ACC/acct-01/limits.json" "$ACC/.last-pick"
+hits1=0; hits2=0
+for _ in $(seq 1 40); do
+  case "$(claude 2>&1)" in
+    *CFG=acct-01*) hits1=$((hits1+1)) ;;
+    *CFG=acct-02*) hits2=$((hits2+1)) ;;
+  esac
+done
+{ [ "$hits1" -gt 0 ] && [ "$hits2" -gt 0 ]; } \
+  && t_ok "an entirely unknown Claude pool still fails open" \
+  || t_fail "unknown Claude pool fail-open" "acct-01=$hits1 acct-02=$hits2"
 rm -f "$ACC"/acct-*/limits.json
 
 # ---- 6. explicit pin -------------------------------------------------------
@@ -2525,11 +2544,30 @@ done
 { [ "$hits1" -gt 0 ] && [ "$hits2" -gt 0 ] && [ $((hits1+hits2)) -eq 40 ]; } \
   && t_ok "codex: equal scores spread randomly (acct-01=$hits1 acct-02=$hits2)" \
   || t_fail "codex tie spreading" "acct-01=$hits1 acct-02=$hits2 (want both >0, total 40)"
-# stale telemetry ranks neutral, never free
+# Unknown telemetry ranks behind every truthful reading, never as neutral or free.
 printf '{"fetched_at":1,"weekly_percent":1,"session_percent":1,"max_percent":1,"buckets":[]}' > "$CX/acct-01/limits.json"
 cxlj 30 30 30 > "$CX/acct-02/limits.json"
 out="$(codex 2>&1)"
 check "codex: stale 1% loses to fresh 30%" "CFG=acct-02" "$out"
+cxlj 88 88 88 > "$CX/acct-01/limits.json"
+rm -f "$CX/acct-02/limits.json" "$CX/.last-pick"
+all1=1
+for _ in $(seq 1 15); do
+  case "$(codex 2>&1)" in *CFG=acct-01*) ;; *) all1=0 ;; esac
+done
+[ "$all1" = "1" ] && t_ok "codex: unknown telemetry never beats known 88%" \
+  || t_fail "codex unknown telemetry ranking" "the unknown account beat truthful 88% usage"
+rm -f "$CX/acct-01/limits.json" "$CX/.last-pick"
+hits1=0; hits2=0
+for _ in $(seq 1 40); do
+  case "$(codex 2>&1)" in
+    *CFG=acct-01*) hits1=$((hits1+1)) ;;
+    *CFG=acct-02*) hits2=$((hits2+1)) ;;
+  esac
+done
+{ [ "$hits1" -gt 0 ] && [ "$hits2" -gt 0 ]; } \
+  && t_ok "codex: an entirely unknown pool still fails open" \
+  || t_fail "codex unknown pool fail-open" "acct-01=$hits1 acct-02=$hits2"
 rm -f "$CX"/acct-*/limits.json
 
 # ---- C4. pin -----------------------------------------------------------------------