opencode-auth-load-balancer 0.9.0 → 0.9.1

package/README.md

@@ -287,6 +287,14 @@ Pending turns
 
 `▶` marks the in-use account; `#` is the rank the scheduler would pick next.
 
+While OpenCode is running, stale usage is checked every five minutes even without inference traffic or a status-tool call. Periodic checks share a machine-wide lock and a next-attempt timestamp in `auth-load-balancer.json.usage-poll.json`, so multiple windows do not multiply periodic requests, including failed attempts. The file contains scheduling metadata only, never credentials.
+
+A fresh usage measurement during re-login or a periodic check clears an obsolete, long quota cooldown when both usage windows have headroom. A successful re-login alone is not enough: exhausted or malformed usage, authentication/transient backoffs, and a newer rejection received during a usage check retain their cooldowns. Provider-side resets are picked up on the next successful check; a failed endpoint request never assumes recovery.
+
+If a usage endpoint rejects an OAuth access token with HTTP 401, the poll uses the same refresh lock and rejected-token recovery as inference, then retries the usage lookup once, even when the advertised access expiry is still in the future. A concurrently refreshed credential is adopted instead of spending its predecessor again. Static API keys are never sent to OAuth refresh, and 403/429 failures do not trigger authentication retries.
+
+A 403 caused by a missing `user:profile` scope requires a fresh OAuth login with browser approval. Restarting OpenCode or refreshing the same grant cannot restore that missing permission; an authoritative usage result is still required before clearing the old quota cooldown.
+
 ### Persistent bottom status bar (TUI)
 
 A SolidJS TUI plugin renders a persistent bottom status bar (opencode's always-visible `app_bottom` slot) showing both the in-use account(s) per provider (polled from the pool, e.g. `Claude anthropic-1 58% · 5h 12%`) **and** the current session usage — tokens, % of the model context window, and `$` cost — computed the same way opencode's own footer does. It is **four files**:

package/dist/index.js

@@ -13385,6 +13385,14 @@ var init_score_core = __esm(() => {
 });
 
 // src/usage-merge.ts
+function reconcileQuotaCooldown(account, cfg, now) {
+  if (account.cooldownKind === "auth" || account.cooldownKind === "transient")
+    return;
+  if (account.cooldownUntil > now + MAX_TRANSIENT_COOLDOWN_MS && !isExhausted(account, cfg, now)) {
+    account.cooldownUntil = 0;
+    delete account.cooldownKind;
+  }
+}
 function rollWeeklyAnchorForward(anchor, now) {
   if (!Number.isFinite(anchor) || anchor <= 0)
     return 0;
@@ -13401,8 +13409,10 @@ function preserveWeeklyAnchor(incoming, stored, now) {
     return incoming;
   return { utilization: incoming.utilization, resetAt: anchor };
 }
+var MAX_TRANSIENT_COOLDOWN_MS;
 var init_usage_merge = __esm(() => {
   init_score_core();
+  MAX_TRANSIENT_COOLDOWN_MS = 5 * 60 * 1000;
 });
 
 // src/accounts.ts
@@ -13454,6 +13464,8 @@ function mergeLoginUsage(row, usage) {
     weekly: usage.weekly ? preserveWeeklyAnchor(usage.weekly, row.usage.weekly, usage.capturedAt) : row.usage.weekly,
     capturedAt: usage.weekly ? usage.capturedAt : row.usage.capturedAt
   };
+  if (usage.weekly)
+    reconcileQuotaCooldown(row, loadScoreConfig(), usage.capturedAt);
 }
 function applyTokens(row, tokens) {
   if (tokens.refresh) {
@@ -13547,6 +13559,7 @@ async function bootstrapFromOpencodeAuth(providerID, getAuth, tokensFromApiKey)
 var init_accounts = __esm(() => {
   init_pairing();
   init_store();
+  init_score_core();
   init_types();
   init_usage_merge();
 });
@@ -14488,24 +14501,46 @@ var init_usage_headers = __esm(() => {
 });
 
 // src/providers/usage-http.ts
-async function fetchJson(url, headers, timeoutMs) {
-  let response;
+async function request(url, headers, timeoutMs) {
   try {
-    response = await fetch(url, {
+    return await fetch(url, {
       headers,
       signal: AbortSignal.timeout(timeoutMs)
     });
   } catch {
     return null;
   }
+}
+async function readJson(response) {
+  if (!response)
+    return null;
   if (!response.ok) {
     await response.body?.cancel().catch(ignore);
     return null;
   }
   return await response.json().catch(() => null);
 }
+async function fetchJson(url, headers, timeoutMs) {
+  return readJson(await request(url, headers, timeoutMs));
+}
+async function fetchUsageJson(url, headers, timeoutMs) {
+  const response = await request(url, headers, timeoutMs);
+  if (response?.status === 401) {
+    await response.body?.cancel().catch(ignore);
+    throw new UsageAuthenticationError;
+  }
+  return readJson(response);
+}
+var UsageAuthenticationError;
 var init_usage_http = __esm(() => {
   init_util2();
+  UsageAuthenticationError = class UsageAuthenticationError extends Error {
+    status = 401;
+    constructor() {
+      super("Usage endpoint rejected the access token (401)");
+      this.name = "UsageAuthenticationError";
+    }
+  };
 });
 
 // src/providers/anthropic/version.ts
@@ -14945,7 +14980,7 @@ async function probeUsage(access, now) {
 async function fetchUsage(account, now) {
   if (!account.refresh)
     return probeUsage(account.access, now);
-  const json = await fetchJson(USAGE_URL, {
+  const json = await fetchUsageJson(USAGE_URL, {
     authorization: `Bearer ${account.access}`,
     "anthropic-beta": "oauth-2025-04-20",
     "user-agent": usageUserAgent(),
@@ -15277,7 +15312,7 @@ function parseUsages(json, now) {
   return hourly || weekly ? { hourly, weekly, capturedAt: now } : null;
 }
 function getUsages(baseUrl, key) {
-  return fetchJson(`${baseUrl}/usages`, { authorization: `Bearer ${key}`, accept: "application/json" }, USAGE_HTTP_TIMEOUT_MS);
+  return fetchUsageJson(`${baseUrl}/usages`, { authorization: `Bearer ${key}`, accept: "application/json" }, USAGE_HTTP_TIMEOUT_MS);
 }
 function usageFetcher(baseUrl) {
   return async (account, now) => parseUsages(await getUsages(baseUrl, account.access), now);
@@ -15551,7 +15586,7 @@ async function fetchUsage2(account, now) {
   const accountId = resolveAccountId(account);
   if (accountId)
     headers["chatgpt-account-id"] = accountId;
-  const json = await fetchJson(USAGE_URL2, headers, USAGE_HTTP_TIMEOUT_MS);
+  const json = await fetchUsageJson(USAGE_URL2, headers, USAGE_HTTP_TIMEOUT_MS);
   const rateLimit = json?.rate_limit;
   if (!isPlainObject2(rateLimit))
     return null;
@@ -15640,7 +15675,7 @@ async function refreshUsage(adapters, now, poolSnapshot) {
     aliveIds?.add(account.id);
     if (account.disabledReason && account.disabledReason !== MANUAL_DISABLED_REASON)
       continue;
-    if (account.usage.capturedAt !== 0 && now - account.usage.capturedAt <= USAGE_REFRESH_TTL_MS)
+    if (account.usage.capturedAt !== 0 && now - account.usage.capturedAt < USAGE_REFRESH_TTL_MS)
       continue;
     const adapter = adapterFor(adapters, account.providerID);
     if (!adapter)
@@ -15662,7 +15697,16 @@ async function refreshUsage(adapters, now, poolSnapshot) {
   await Promise.all(stale.map(async ({ adapter, account }) => {
     try {
       await ensureAccessToken(adapter, account, now);
-      const snapshot = await adapter.fetchUsage(account, now);
+      const rejectedAccess = account.access;
+      let snapshot;
+      try {
+        snapshot = await adapter.fetchUsage(account, now);
+      } catch (error) {
+        if (!(error instanceof UsageAuthenticationError) || !account.refresh)
+          throw error;
+        await ensureAccessToken(adapter, account, now, rejectedAccess);
+        snapshot = await adapter.fetchUsage(account, now);
+      }
       if (snapshot) {
         await mutatePool((p) => {
           const stored = findAccount(p, account.id);
@@ -15672,10 +15716,8 @@ async function refreshUsage(adapters, now, poolSnapshot) {
               weekly: snapshot.weekly === null ? stored.usage.weekly : preserveWeeklyAnchor(snapshot.weekly, stored.usage.weekly, now),
               capturedAt: snapshot.weekly === null ? stored.usage.capturedAt : now
             };
-            if (snapshot.weekly !== null && stored.cooldownUntil > now + MAX_TRANSIENT_COOLDOWN_MS && !isExhausted(stored, scoreCfg, now)) {
-              stored.cooldownUntil = 0;
-              delete stored.cooldownKind;
-            }
+            if (snapshot.weekly !== null && stored.cooldownUntil === account.cooldownUntil && stored.cooldownKind === account.cooldownKind)
+              reconcileQuotaCooldown(stored, scoreCfg, now);
           }
         });
       }
@@ -15688,16 +15730,17 @@ function refreshUsageInBackground(adapter, now, poolSnapshot) {
 function refreshAllUsageInBackground(now, poolSnapshot) {
   return refreshUsage(ADAPTERS, now, poolSnapshot);
 }
-var USAGE_REFRESH_TTL_MS, MAX_TRANSIENT_COOLDOWN_MS, lastPoll;
+var USAGE_REFRESH_TTL_MS, lastPoll;
 var init_usage_refresh = __esm(() => {
   init_store();
   init_registry();
+  init_usage_http();
   init_refresh();
   init_score_core();
   init_types();
   init_usage_merge();
+  init_usage_merge();
   USAGE_REFRESH_TTL_MS = 5 * 60 * 1000;
-  MAX_TRANSIENT_COOLDOWN_MS = 5 * 60 * 1000;
   lastPoll = new Map;
 });
 
@@ -17329,7 +17372,7 @@ function backoffFrom(res, now) {
 function isRateLimited(res) {
   return res.status === 429 || res.status === 403 && (res.headers.get("x-ratelimit-remaining") === "0" || res.headers.has("retry-after"));
 }
-async function request(url, init, now) {
+async function request2(url, init, now) {
   let res;
   try {
     res = await globalThis.fetch(url, {
@@ -17381,7 +17424,7 @@ async function boundedText(res) {
   }
   return Buffer.concat(chunks).toString("utf8");
 }
-async function readJson(res) {
+async function readJson2(res) {
   if (!res.ok)
     throw new SyncError("http");
   const text = await boundedText(res);
@@ -17396,7 +17439,7 @@ async function readJson(res) {
   return json;
 }
 async function createGist(token, content, now = Date.now()) {
-  const res = await request(API, {
+  const res = await request2(API, {
     method: "POST",
     headers: { ...headers(token), "content-type": "application/json" },
     body: JSON.stringify({
@@ -17405,7 +17448,7 @@ async function createGist(token, content, now = Date.now()) {
       files: { [GIST_FILE]: { content } }
     })
   }, now);
-  const json = await readJson(res);
+  const json = await readJson2(res);
   const owner = isPlainObject2(json.owner) ? json.owner.login : undefined;
   if (typeof json.id !== "string" || !GIST_ID_RE.test(json.id))
     throw new SyncError("http");
@@ -17417,7 +17460,7 @@ async function createGist(token, content, now = Date.now()) {
 async function updateGist(token, id, content, now = Date.now()) {
   let res;
   try {
-    res = await request(`${API}/${id}`, {
+    res = await request2(`${API}/${id}`, {
       method: "PATCH",
       headers: { ...headers(token), "content-type": "application/json" },
       body: JSON.stringify({ files: { [GIST_FILE]: { content } } })
@@ -17429,10 +17472,10 @@ async function updateGist(token, id, content, now = Date.now()) {
   }
   if (res.status === 401 || res.status === 403)
     throw new SyncError("write-denied");
-  await readJson(res);
+  await readJson2(res);
 }
 async function readGist(id, etag, now = Date.now(), token) {
-  const ask = (auth) => request(`${API}/${id}`, {
+  const ask = (auth) => request2(`${API}/${id}`, {
     headers: {
       ...headers(auth),
       ...etag ? { "if-none-match": etag } : {}
@@ -17443,7 +17486,7 @@ async function readGist(id, etag, now = Date.now(), token) {
     res = await ask();
   if (res.status === 304)
     return { changed: false };
-  const json = await readJson(res);
+  const json = await readJson2(res);
   const file = isPlainObject2(json.files) ? json.files[GIST_FILE] : undefined;
   if (!isPlainObject2(file) || typeof file.content !== "string")
     throw new SyncError("bad-blob");
@@ -18585,6 +18628,71 @@ var init_start = __esm(() => {
   init_state();
 });
 
+// src/usage-poll.ts
+import { readFile as readFile8 } from "node:fs/promises";
+async function nextPollAt(path) {
+  try {
+    const value = JSON.parse(await readFile8(path, "utf8"));
+    return isPlainObject2(value) && isFiniteNumber(value.nextPollAt) ? value.nextPollAt : 0;
+  } catch (error) {
+    if (error instanceof SyntaxError || error instanceof Error && "code" in error && error.code === "ENOENT")
+      return 0;
+    throw error;
+  }
+}
+function startUsagePoll(deps = {}) {
+  const now = deps.now ?? Date.now;
+  const refresh = deps.refresh ?? refreshAllUsageInBackground;
+  const timers = deps.timers ?? realTimers;
+  let disposed = false;
+  let inflight;
+  async function poll() {
+    const path = `${poolFilePath()}.usage-poll.json`;
+    try {
+      await withLock(`${path}.lock`, {
+        staleMs: 120000,
+        timeoutMs: 0,
+        retryMs: 25,
+        heartbeatMs: 5000
+      }, async () => {
+        const at = now();
+        if (at < await nextPollAt(path))
+          return;
+        await writeJsonAtomic(path, JSON.stringify({ nextPollAt: at + USAGE_REFRESH_TTL_MS }));
+        await refresh(at);
+      });
+    } catch (error) {
+      if (!(error instanceof LockTimeoutError))
+        throw error;
+    }
+  }
+  function tick() {
+    if (disposed)
+      return Promise.resolve();
+    inflight ??= poll().finally(() => {
+      inflight = undefined;
+    });
+    return inflight;
+  }
+  const timer = timers.set(() => void tick().catch(ignore), USAGE_REFRESH_TTL_MS);
+  return {
+    tick,
+    async dispose() {
+      disposed = true;
+      timers.clear(timer);
+      await inflight;
+    }
+  };
+}
+var init_usage_poll = __esm(() => {
+  init_lock();
+  init_paths();
+  init_store();
+  init_loop();
+  init_usage_refresh();
+  init_util2();
+});
+
 // src/legacy.ts
 function zeroOutCost(provider) {
   for (const model of Object.values(provider.models)) {
@@ -18739,8 +18847,12 @@ function createProviderPlugin(adapter) {
 }
 var PROVIDER_LABELS, AnthropicLoadBalancerPlugin, OpenAILoadBalancerPlugin, KimiCodeLoadBalancerPlugin, KimiCodeGlobalLoadBalancerPlugin, lbResult = (output) => ({ title: "Auth Load Balancer", output }), AuthLoadBalancerStatusPlugin = async (input) => {
   const sync = startSync();
+  const usage = startUsagePoll();
   return {
-    dispose: async () => sync?.dispose(),
+    dispose: async () => {
+      await usage.dispose();
+      await sync?.dispose();
+    },
     tool: {
       auth_lb_status: tool({
         description: "Show the auth load-balancer pool: the in-use account per provider, each account's weekly and 5h usage, cooldowns, and the ranked next-candidate accounts. Refreshes stale usage from the provider usage endpoints (throttled) before rendering.",
@@ -18829,6 +18941,7 @@ var init_legacy = __esm(() => {
   init_start();
   init_token_mint();
   init_types();
+  init_usage_poll();
   init_usage_refresh();
   init_util2();
   PROVIDER_LABELS = {

package/dist/providers/anthropic/usage.d.ts

@@ -17,8 +17,8 @@ export declare function sendUsageProbe(access: string): Promise<Response>;
 export declare function probeSnapshot(headers: Headers, now: number): UsageSnapshot | null;
 /**
  * Poll the dedicated usage endpoint for authoritative 5h + 7d utilization without
- * consuming inference quota. Returns null on any failure — including a 200 whose
- * body is not the usage shape — so the caller keeps the last-known snapshot.
+ * consuming inference quota. A 401 is surfaced for bounded OAuth recovery;
+ * other failures, including an invalid 200 body, keep the last-known snapshot.
  *
  * A row without a refresh token is a `claude setup-token` bearer, scoped to
  * `user:inference` alone; the endpoint demands `user:profile` and answers it

package/dist/providers/kimi/usage.d.ts

@@ -6,7 +6,7 @@ import type { PoolAccount, UsageSnapshot } from '../../types';
  * broken body keeps the last-known snapshot instead of reading as 0% used.
  */
 export declare function parseUsages(json: unknown, now: number): UsageSnapshot | null;
-/** `GET {baseUrl}/usages` — free, spends no quota. Null on any failure. */
+/** `GET {baseUrl}/usages`: surface 401 for OAuth recovery; other failures return null. */
 export declare function getUsages(baseUrl: string, key: string): Promise<unknown>;
 /** The adapter's `fetchUsage` for one deployment. */
 export declare function usageFetcher(baseUrl: string): (account: PoolAccount, now: number) => Promise<UsageSnapshot | null>;

package/dist/providers/openai/usage.d.ts

@@ -14,7 +14,8 @@ export declare function parseUsageHeaders(headers: Headers): Partial<UsageSnapsh
 /**
  * Poll GET /wham/usage for authoritative 5h + weekly utilization without
  * consuming inference quota, assigning each returned window to its role BY
- * DURATION (see `isWeeklyMinutes`) rather than by position. Null on failure.
+ * DURATION (see `isWeeklyMinutes`) rather than by position. A 401 is surfaced
+ * for bounded OAuth recovery; other failures return null.
  * Sends the Codex CLI's `codex-cli` UA and the `chatgpt-account-id` (from the
  * stored id or, as a fallback, decoded from the access-token JWT) — required
  * for team/workspace accounts.

package/dist/providers/usage-http.d.ts

@@ -1,9 +1,6 @@
-/**
- * Shared HTTP shell for the plugin's read-only JSON GETs — the provider usage
- * endpoints (Anthropic `/usage`, OpenAI `/wham/usage`) and the npm dist-tags
- * lookup behind `providers/anthropic/version.ts`. GET with a timeout, null on
- * ANY failure — network throw/timeout, non-ok status (body cancelled so the
- * connection is released), or a 200 whose body is not JSON. Callers keep only
- * their own headers and shape guards; the transport contract lives here ONCE.
- */
 export declare function fetchJson<T>(url: string, headers: Record<string, string>, timeoutMs: number): Promise<T | null>;
+export declare class UsageAuthenticationError extends Error {
+    readonly status = 401;
+    constructor();
+}
+export declare function fetchUsageJson<T>(url: string, headers: Record<string, string>, timeoutMs: number): Promise<T | null>;

package/dist/usage-merge.d.ts

@@ -1,4 +1,8 @@
-import type { UsageWindow } from './types';
+import { type ScoreConfig } from './scheduler/score-core';
+import type { PoolAccount, UsageWindow } from './types';
+export declare const MAX_TRANSIENT_COOLDOWN_MS: number;
+/** Call only after fresh usage was measured; cached headroom cannot disprove a later 429. */
+export declare function reconcileQuotaCooldown(account: PoolAccount, cfg: ScoreConfig, now: number): void;
 /**
  * Roll a FIXED weekly reset anchor forward to its next occurrence strictly after
  * `now`. Weekly windows are anchored per account (verified live: Anthropic's

package/dist/usage-poll.d.ts

@@ -0,0 +1,11 @@
+import { type LoopTimers } from './sync/loop';
+interface UsagePollDeps {
+    now?: () => number;
+    refresh?: (now: number) => Promise<void>;
+    timers?: LoopTimers;
+}
+export declare function startUsagePoll(deps?: UsagePollDeps): {
+    tick: () => Promise<void>;
+    dispose(): Promise<void>;
+};
+export {};

package/dist/usage-refresh.d.ts

@@ -1,18 +1,7 @@
 import type { ProviderAdapter } from './providers/types';
 import { type PoolFile } from './types';
 export declare const USAGE_REFRESH_TTL_MS: number;
-/**
- * Max lifetime of a TRANSIENT (non-quota) cooldown. fetch.ts cools a thrown
- * network error or a header-less 429/402 for at most `ACCOUNT_COOLDOWN_MS`
- * (5min) and an auth 401/403 for `AUTH_COOLDOWN_MS` (2min); ONLY a quota 429's
- * `Retry-After` writes a cooldown beyond this. So a cooldown whose remainder
- * still exceeds this bound is necessarily quota-derived — the one class that can
- * outlive its own usage window after an out-of-band reset (see the stale-cooldown
- * reconciliation below). Kept `=== ACCOUNT_COOLDOWN_MS` by a drift-guard test;
- * defined locally because importing it from fetch.ts (which imports THIS module)
- * would form a cycle.
- */
-export declare const MAX_TRANSIENT_COOLDOWN_MS: number;
+export { MAX_TRANSIENT_COOLDOWN_MS } from './usage-merge';
 /**
  * Test-only window into the module-private `lastPoll` throttle map. Never
  * imported by production code — only by usage-refresh tests that need to

package/dist/v1.js

@@ -13385,6 +13385,14 @@ var init_score_core = __esm(() => {
 });
 
 // src/usage-merge.ts
+function reconcileQuotaCooldown(account, cfg, now) {
+  if (account.cooldownKind === "auth" || account.cooldownKind === "transient")
+    return;
+  if (account.cooldownUntil > now + MAX_TRANSIENT_COOLDOWN_MS && !isExhausted(account, cfg, now)) {
+    account.cooldownUntil = 0;
+    delete account.cooldownKind;
+  }
+}
 function rollWeeklyAnchorForward(anchor, now) {
   if (!Number.isFinite(anchor) || anchor <= 0)
     return 0;
@@ -13401,8 +13409,10 @@ function preserveWeeklyAnchor(incoming, stored, now) {
     return incoming;
   return { utilization: incoming.utilization, resetAt: anchor };
 }
+var MAX_TRANSIENT_COOLDOWN_MS;
 var init_usage_merge = __esm(() => {
   init_score_core();
+  MAX_TRANSIENT_COOLDOWN_MS = 5 * 60 * 1000;
 });
 
 // src/accounts.ts
@@ -13454,6 +13464,8 @@ function mergeLoginUsage(row, usage) {
     weekly: usage.weekly ? preserveWeeklyAnchor(usage.weekly, row.usage.weekly, usage.capturedAt) : row.usage.weekly,
     capturedAt: usage.weekly ? usage.capturedAt : row.usage.capturedAt
   };
+  if (usage.weekly)
+    reconcileQuotaCooldown(row, loadScoreConfig(), usage.capturedAt);
 }
 function applyTokens(row, tokens) {
   if (tokens.refresh) {
@@ -13547,6 +13559,7 @@ async function bootstrapFromOpencodeAuth(providerID, getAuth, tokensFromApiKey)
 var init_accounts = __esm(() => {
   init_pairing();
   init_store();
+  init_score_core();
   init_types();
   init_usage_merge();
 });
@@ -14488,24 +14501,46 @@ var init_usage_headers = __esm(() => {
 });
 
 // src/providers/usage-http.ts
-async function fetchJson(url, headers, timeoutMs) {
-  let response;
+async function request(url, headers, timeoutMs) {
   try {
-    response = await fetch(url, {
+    return await fetch(url, {
       headers,
       signal: AbortSignal.timeout(timeoutMs)
     });
   } catch {
     return null;
   }
+}
+async function readJson(response) {
+  if (!response)
+    return null;
   if (!response.ok) {
     await response.body?.cancel().catch(ignore);
     return null;
   }
   return await response.json().catch(() => null);
 }
+async function fetchJson(url, headers, timeoutMs) {
+  return readJson(await request(url, headers, timeoutMs));
+}
+async function fetchUsageJson(url, headers, timeoutMs) {
+  const response = await request(url, headers, timeoutMs);
+  if (response?.status === 401) {
+    await response.body?.cancel().catch(ignore);
+    throw new UsageAuthenticationError;
+  }
+  return readJson(response);
+}
+var UsageAuthenticationError;
 var init_usage_http = __esm(() => {
   init_util2();
+  UsageAuthenticationError = class UsageAuthenticationError extends Error {
+    status = 401;
+    constructor() {
+      super("Usage endpoint rejected the access token (401)");
+      this.name = "UsageAuthenticationError";
+    }
+  };
 });
 
 // src/providers/anthropic/version.ts
@@ -14945,7 +14980,7 @@ async function probeUsage(access, now) {
 async function fetchUsage(account, now) {
   if (!account.refresh)
     return probeUsage(account.access, now);
-  const json = await fetchJson(USAGE_URL, {
+  const json = await fetchUsageJson(USAGE_URL, {
     authorization: `Bearer ${account.access}`,
     "anthropic-beta": "oauth-2025-04-20",
     "user-agent": usageUserAgent(),
@@ -15277,7 +15312,7 @@ function parseUsages(json, now) {
   return hourly || weekly ? { hourly, weekly, capturedAt: now } : null;
 }
 function getUsages(baseUrl, key) {
-  return fetchJson(`${baseUrl}/usages`, { authorization: `Bearer ${key}`, accept: "application/json" }, USAGE_HTTP_TIMEOUT_MS);
+  return fetchUsageJson(`${baseUrl}/usages`, { authorization: `Bearer ${key}`, accept: "application/json" }, USAGE_HTTP_TIMEOUT_MS);
 }
 function usageFetcher(baseUrl) {
   return async (account, now) => parseUsages(await getUsages(baseUrl, account.access), now);
@@ -15551,7 +15586,7 @@ async function fetchUsage2(account, now) {
   const accountId = resolveAccountId(account);
   if (accountId)
     headers["chatgpt-account-id"] = accountId;
-  const json = await fetchJson(USAGE_URL2, headers, USAGE_HTTP_TIMEOUT_MS);
+  const json = await fetchUsageJson(USAGE_URL2, headers, USAGE_HTTP_TIMEOUT_MS);
   const rateLimit = json?.rate_limit;
   if (!isPlainObject2(rateLimit))
     return null;
@@ -15640,7 +15675,7 @@ async function refreshUsage(adapters, now, poolSnapshot) {
     aliveIds?.add(account.id);
     if (account.disabledReason && account.disabledReason !== MANUAL_DISABLED_REASON)
       continue;
-    if (account.usage.capturedAt !== 0 && now - account.usage.capturedAt <= USAGE_REFRESH_TTL_MS)
+    if (account.usage.capturedAt !== 0 && now - account.usage.capturedAt < USAGE_REFRESH_TTL_MS)
       continue;
     const adapter = adapterFor(adapters, account.providerID);
     if (!adapter)
@@ -15662,7 +15697,16 @@ async function refreshUsage(adapters, now, poolSnapshot) {
   await Promise.all(stale.map(async ({ adapter, account }) => {
     try {
       await ensureAccessToken(adapter, account, now);
-      const snapshot = await adapter.fetchUsage(account, now);
+      const rejectedAccess = account.access;
+      let snapshot;
+      try {
+        snapshot = await adapter.fetchUsage(account, now);
+      } catch (error) {
+        if (!(error instanceof UsageAuthenticationError) || !account.refresh)
+          throw error;
+        await ensureAccessToken(adapter, account, now, rejectedAccess);
+        snapshot = await adapter.fetchUsage(account, now);
+      }
       if (snapshot) {
         await mutatePool((p) => {
           const stored = findAccount(p, account.id);
@@ -15672,10 +15716,8 @@ async function refreshUsage(adapters, now, poolSnapshot) {
               weekly: snapshot.weekly === null ? stored.usage.weekly : preserveWeeklyAnchor(snapshot.weekly, stored.usage.weekly, now),
               capturedAt: snapshot.weekly === null ? stored.usage.capturedAt : now
             };
-            if (snapshot.weekly !== null && stored.cooldownUntil > now + MAX_TRANSIENT_COOLDOWN_MS && !isExhausted(stored, scoreCfg, now)) {
-              stored.cooldownUntil = 0;
-              delete stored.cooldownKind;
-            }
+            if (snapshot.weekly !== null && stored.cooldownUntil === account.cooldownUntil && stored.cooldownKind === account.cooldownKind)
+              reconcileQuotaCooldown(stored, scoreCfg, now);
           }
         });
       }
@@ -15688,16 +15730,17 @@ function refreshUsageInBackground(adapter, now, poolSnapshot) {
 function refreshAllUsageInBackground(now, poolSnapshot) {
   return refreshUsage(ADAPTERS, now, poolSnapshot);
 }
-var USAGE_REFRESH_TTL_MS, MAX_TRANSIENT_COOLDOWN_MS, lastPoll;
+var USAGE_REFRESH_TTL_MS, lastPoll;
 var init_usage_refresh = __esm(() => {
   init_store();
   init_registry();
+  init_usage_http();
   init_refresh();
   init_score_core();
   init_types();
   init_usage_merge();
+  init_usage_merge();
   USAGE_REFRESH_TTL_MS = 5 * 60 * 1000;
-  MAX_TRANSIENT_COOLDOWN_MS = 5 * 60 * 1000;
   lastPoll = new Map;
 });
 
@@ -17329,7 +17372,7 @@ function backoffFrom(res, now) {
 function isRateLimited(res) {
   return res.status === 429 || res.status === 403 && (res.headers.get("x-ratelimit-remaining") === "0" || res.headers.has("retry-after"));
 }
-async function request(url, init, now) {
+async function request2(url, init, now) {
   let res;
   try {
     res = await globalThis.fetch(url, {
@@ -17381,7 +17424,7 @@ async function boundedText(res) {
   }
   return Buffer.concat(chunks).toString("utf8");
 }
-async function readJson(res) {
+async function readJson2(res) {
   if (!res.ok)
     throw new SyncError("http");
   const text = await boundedText(res);
@@ -17396,7 +17439,7 @@ async function readJson(res) {
   return json;
 }
 async function createGist(token, content, now = Date.now()) {
-  const res = await request(API, {
+  const res = await request2(API, {
     method: "POST",
     headers: { ...headers(token), "content-type": "application/json" },
     body: JSON.stringify({
@@ -17405,7 +17448,7 @@ async function createGist(token, content, now = Date.now()) {
       files: { [GIST_FILE]: { content } }
     })
   }, now);
-  const json = await readJson(res);
+  const json = await readJson2(res);
   const owner = isPlainObject2(json.owner) ? json.owner.login : undefined;
   if (typeof json.id !== "string" || !GIST_ID_RE.test(json.id))
     throw new SyncError("http");
@@ -17417,7 +17460,7 @@ async function createGist(token, content, now = Date.now()) {
 async function updateGist(token, id, content, now = Date.now()) {
   let res;
   try {
-    res = await request(`${API}/${id}`, {
+    res = await request2(`${API}/${id}`, {
       method: "PATCH",
       headers: { ...headers(token), "content-type": "application/json" },
       body: JSON.stringify({ files: { [GIST_FILE]: { content } } })
@@ -17429,10 +17472,10 @@ async function updateGist(token, id, content, now = Date.now()) {
   }
   if (res.status === 401 || res.status === 403)
     throw new SyncError("write-denied");
-  await readJson(res);
+  await readJson2(res);
 }
 async function readGist(id, etag, now = Date.now(), token) {
-  const ask = (auth) => request(`${API}/${id}`, {
+  const ask = (auth) => request2(`${API}/${id}`, {
     headers: {
       ...headers(auth),
       ...etag ? { "if-none-match": etag } : {}
@@ -17443,7 +17486,7 @@ async function readGist(id, etag, now = Date.now(), token) {
     res = await ask();
   if (res.status === 304)
     return { changed: false };
-  const json = await readJson(res);
+  const json = await readJson2(res);
   const file = isPlainObject2(json.files) ? json.files[GIST_FILE] : undefined;
   if (!isPlainObject2(file) || typeof file.content !== "string")
     throw new SyncError("bad-blob");
@@ -18585,6 +18628,71 @@ var init_start = __esm(() => {
   init_state();
 });
 
+// src/usage-poll.ts
+import { readFile as readFile8 } from "node:fs/promises";
+async function nextPollAt(path) {
+  try {
+    const value = JSON.parse(await readFile8(path, "utf8"));
+    return isPlainObject2(value) && isFiniteNumber(value.nextPollAt) ? value.nextPollAt : 0;
+  } catch (error) {
+    if (error instanceof SyntaxError || error instanceof Error && "code" in error && error.code === "ENOENT")
+      return 0;
+    throw error;
+  }
+}
+function startUsagePoll(deps = {}) {
+  const now = deps.now ?? Date.now;
+  const refresh = deps.refresh ?? refreshAllUsageInBackground;
+  const timers = deps.timers ?? realTimers;
+  let disposed = false;
+  let inflight;
+  async function poll() {
+    const path = `${poolFilePath()}.usage-poll.json`;
+    try {
+      await withLock(`${path}.lock`, {
+        staleMs: 120000,
+        timeoutMs: 0,
+        retryMs: 25,
+        heartbeatMs: 5000
+      }, async () => {
+        const at = now();
+        if (at < await nextPollAt(path))
+          return;
+        await writeJsonAtomic(path, JSON.stringify({ nextPollAt: at + USAGE_REFRESH_TTL_MS }));
+        await refresh(at);
+      });
+    } catch (error) {
+      if (!(error instanceof LockTimeoutError))
+        throw error;
+    }
+  }
+  function tick() {
+    if (disposed)
+      return Promise.resolve();
+    inflight ??= poll().finally(() => {
+      inflight = undefined;
+    });
+    return inflight;
+  }
+  const timer = timers.set(() => void tick().catch(ignore), USAGE_REFRESH_TTL_MS);
+  return {
+    tick,
+    async dispose() {
+      disposed = true;
+      timers.clear(timer);
+      await inflight;
+    }
+  };
+}
+var init_usage_poll = __esm(() => {
+  init_lock();
+  init_paths();
+  init_store();
+  init_loop();
+  init_usage_refresh();
+  init_util2();
+});
+
 // src/legacy.ts
 function zeroOutCost(provider) {
   for (const model of Object.values(provider.models)) {
@@ -18739,8 +18847,12 @@ function createProviderPlugin(adapter) {
 }
 var PROVIDER_LABELS, AnthropicLoadBalancerPlugin, OpenAILoadBalancerPlugin, KimiCodeLoadBalancerPlugin, KimiCodeGlobalLoadBalancerPlugin, lbResult = (output) => ({ title: "Auth Load Balancer", output }), AuthLoadBalancerStatusPlugin = async (input) => {
   const sync = startSync();
+  const usage = startUsagePoll();
   return {
-    dispose: async () => sync?.dispose(),
+    dispose: async () => {
+      await usage.dispose();
+      await sync?.dispose();
+    },
     tool: {
       auth_lb_status: tool({
         description: "Show the auth load-balancer pool: the in-use account per provider, each account's weekly and 5h usage, cooldowns, and the ranked next-candidate accounts. Refreshes stale usage from the provider usage endpoints (throttled) before rendering.",
@@ -18829,6 +18941,7 @@ var init_legacy = __esm(() => {
   init_start();
   init_token_mint();
   init_types();
+  init_usage_poll();
   init_usage_refresh();
   init_util2();
   PROVIDER_LABELS = {

package/dist/v2-entry.js

@@ -42143,6 +42143,14 @@ var init_score_core = __esm(() => {
 });
 
 // src/usage-merge.ts
+function reconcileQuotaCooldown(account, cfg, now) {
+  if (account.cooldownKind === "auth" || account.cooldownKind === "transient")
+    return;
+  if (account.cooldownUntil > now + MAX_TRANSIENT_COOLDOWN_MS && !isExhausted(account, cfg, now)) {
+    account.cooldownUntil = 0;
+    delete account.cooldownKind;
+  }
+}
 function rollWeeklyAnchorForward(anchor, now) {
   if (!Number.isFinite(anchor) || anchor <= 0)
     return 0;
@@ -42159,8 +42167,10 @@ function preserveWeeklyAnchor(incoming, stored, now) {
     return incoming;
   return { utilization: incoming.utilization, resetAt: anchor };
 }
+var MAX_TRANSIENT_COOLDOWN_MS;
 var init_usage_merge = __esm(() => {
   init_score_core();
+  MAX_TRANSIENT_COOLDOWN_MS = 5 * 60 * 1000;
 });
 
 // src/accounts.ts
@@ -42212,6 +42222,8 @@ function mergeLoginUsage(row, usage) {
     weekly: usage.weekly ? preserveWeeklyAnchor(usage.weekly, row.usage.weekly, usage.capturedAt) : row.usage.weekly,
     capturedAt: usage.weekly ? usage.capturedAt : row.usage.capturedAt
   };
+  if (usage.weekly)
+    reconcileQuotaCooldown(row, loadScoreConfig(), usage.capturedAt);
 }
 function applyTokens(row, tokens) {
   if (tokens.refresh) {
@@ -42305,6 +42317,7 @@ async function bootstrapFromOpencodeAuth(providerID, getAuth, tokensFromApiKey)
 var init_accounts = __esm(() => {
   init_pairing();
   init_store();
+  init_score_core();
   init_types2();
   init_usage_merge();
 });
@@ -43246,24 +43259,46 @@ var init_usage_headers = __esm(() => {
 });
 
 // src/providers/usage-http.ts
-async function fetchJson(url, headers, timeoutMs) {
-  let response;
+async function request(url, headers, timeoutMs) {
   try {
-    response = await fetch(url, {
+    return await fetch(url, {
       headers,
       signal: AbortSignal.timeout(timeoutMs)
     });
   } catch {
     return null;
   }
+}
+async function readJson(response) {
+  if (!response)
+    return null;
   if (!response.ok) {
     await response.body?.cancel().catch(ignore);
     return null;
   }
   return await response.json().catch(() => null);
 }
+async function fetchJson(url, headers, timeoutMs) {
+  return readJson(await request(url, headers, timeoutMs));
+}
+async function fetchUsageJson(url, headers, timeoutMs) {
+  const response = await request(url, headers, timeoutMs);
+  if (response?.status === 401) {
+    await response.body?.cancel().catch(ignore);
+    throw new UsageAuthenticationError;
+  }
+  return readJson(response);
+}
+var UsageAuthenticationError;
 var init_usage_http = __esm(() => {
   init_util4();
+  UsageAuthenticationError = class UsageAuthenticationError extends Error {
+    status = 401;
+    constructor() {
+      super("Usage endpoint rejected the access token (401)");
+      this.name = "UsageAuthenticationError";
+    }
+  };
 });
 
 // src/providers/anthropic/version.ts
@@ -43703,7 +43738,7 @@ async function probeUsage(access, now) {
 async function fetchUsage(account, now) {
   if (!account.refresh)
     return probeUsage(account.access, now);
-  const json = await fetchJson(USAGE_URL, {
+  const json = await fetchUsageJson(USAGE_URL, {
     authorization: `Bearer ${account.access}`,
     "anthropic-beta": "oauth-2025-04-20",
     "user-agent": usageUserAgent(),
@@ -44035,7 +44070,7 @@ function parseUsages(json, now) {
   return hourly || weekly ? { hourly, weekly, capturedAt: now } : null;
 }
 function getUsages(baseUrl, key) {
-  return fetchJson(`${baseUrl}/usages`, { authorization: `Bearer ${key}`, accept: "application/json" }, USAGE_HTTP_TIMEOUT_MS);
+  return fetchUsageJson(`${baseUrl}/usages`, { authorization: `Bearer ${key}`, accept: "application/json" }, USAGE_HTTP_TIMEOUT_MS);
 }
 function usageFetcher(baseUrl) {
   return async (account, now) => parseUsages(await getUsages(baseUrl, account.access), now);
@@ -44309,7 +44344,7 @@ async function fetchUsage2(account, now) {
   const accountId = resolveAccountId(account);
   if (accountId)
     headers["chatgpt-account-id"] = accountId;
-  const json = await fetchJson(USAGE_URL2, headers, USAGE_HTTP_TIMEOUT_MS);
+  const json = await fetchUsageJson(USAGE_URL2, headers, USAGE_HTTP_TIMEOUT_MS);
   const rateLimit = json?.rate_limit;
   if (!isPlainObject4(rateLimit))
     return null;
@@ -44398,7 +44433,7 @@ async function refreshUsage(adapters, now, poolSnapshot) {
     aliveIds?.add(account.id);
     if (account.disabledReason && account.disabledReason !== MANUAL_DISABLED_REASON)
       continue;
-    if (account.usage.capturedAt !== 0 && now - account.usage.capturedAt <= USAGE_REFRESH_TTL_MS)
+    if (account.usage.capturedAt !== 0 && now - account.usage.capturedAt < USAGE_REFRESH_TTL_MS)
       continue;
     const adapter = adapterFor(adapters, account.providerID);
     if (!adapter)
@@ -44420,7 +44455,16 @@ async function refreshUsage(adapters, now, poolSnapshot) {
   await Promise.all(stale.map(async ({ adapter, account }) => {
     try {
       await ensureAccessToken(adapter, account, now);
-      const snapshot = await adapter.fetchUsage(account, now);
+      const rejectedAccess = account.access;
+      let snapshot;
+      try {
+        snapshot = await adapter.fetchUsage(account, now);
+      } catch (error) {
+        if (!(error instanceof UsageAuthenticationError) || !account.refresh)
+          throw error;
+        await ensureAccessToken(adapter, account, now, rejectedAccess);
+        snapshot = await adapter.fetchUsage(account, now);
+      }
       if (snapshot) {
         await mutatePool((p) => {
           const stored = findAccount(p, account.id);
@@ -44430,10 +44474,8 @@ async function refreshUsage(adapters, now, poolSnapshot) {
               weekly: snapshot.weekly === null ? stored.usage.weekly : preserveWeeklyAnchor(snapshot.weekly, stored.usage.weekly, now),
               capturedAt: snapshot.weekly === null ? stored.usage.capturedAt : now
             };
-            if (snapshot.weekly !== null && stored.cooldownUntil > now + MAX_TRANSIENT_COOLDOWN_MS && !isExhausted(stored, scoreCfg, now)) {
-              stored.cooldownUntil = 0;
-              delete stored.cooldownKind;
-            }
+            if (snapshot.weekly !== null && stored.cooldownUntil === account.cooldownUntil && stored.cooldownKind === account.cooldownKind)
+              reconcileQuotaCooldown(stored, scoreCfg, now);
           }
         });
       }
@@ -44446,16 +44488,17 @@ function refreshUsageInBackground(adapter, now, poolSnapshot) {
 function refreshAllUsageInBackground(now, poolSnapshot) {
   return refreshUsage(ADAPTERS, now, poolSnapshot);
 }
-var USAGE_REFRESH_TTL_MS, MAX_TRANSIENT_COOLDOWN_MS, lastPoll;
+var USAGE_REFRESH_TTL_MS, lastPoll;
 var init_usage_refresh = __esm(() => {
   init_store();
   init_registry();
+  init_usage_http();
   init_refresh();
   init_score_core();
   init_types2();
   init_usage_merge();
+  init_usage_merge();
   USAGE_REFRESH_TTL_MS = 5 * 60 * 1000;
-  MAX_TRANSIENT_COOLDOWN_MS = 5 * 60 * 1000;
   lastPoll = new Map;
 });
 
@@ -46087,7 +46130,7 @@ function backoffFrom(res, now) {
 function isRateLimited(res) {
   return res.status === 429 || res.status === 403 && (res.headers.get("x-ratelimit-remaining") === "0" || res.headers.has("retry-after"));
 }
-async function request(url, init, now) {
+async function request2(url, init, now) {
   let res;
   try {
     res = await globalThis.fetch(url, {
@@ -46139,7 +46182,7 @@ async function boundedText(res) {
   }
   return Buffer.concat(chunks).toString("utf8");
 }
-async function readJson(res) {
+async function readJson2(res) {
   if (!res.ok)
     throw new SyncError("http");
   const text = await boundedText(res);
@@ -46154,7 +46197,7 @@ async function readJson(res) {
   return json;
 }
 async function createGist(token, content, now = Date.now()) {
-  const res = await request(API, {
+  const res = await request2(API, {
     method: "POST",
     headers: { ...headers(token), "content-type": "application/json" },
     body: JSON.stringify({
@@ -46163,7 +46206,7 @@ async function createGist(token, content, now = Date.now()) {
       files: { [GIST_FILE]: { content } }
     })
   }, now);
-  const json = await readJson(res);
+  const json = await readJson2(res);
   const owner = isPlainObject4(json.owner) ? json.owner.login : undefined;
   if (typeof json.id !== "string" || !GIST_ID_RE.test(json.id))
     throw new SyncError("http");
@@ -46175,7 +46218,7 @@ async function createGist(token, content, now = Date.now()) {
 async function updateGist(token, id, content, now = Date.now()) {
   let res;
   try {
-    res = await request(`${API}/${id}`, {
+    res = await request2(`${API}/${id}`, {
       method: "PATCH",
       headers: { ...headers(token), "content-type": "application/json" },
       body: JSON.stringify({ files: { [GIST_FILE]: { content } } })
@@ -46187,10 +46230,10 @@ async function updateGist(token, id, content, now = Date.now()) {
   }
   if (res.status === 401 || res.status === 403)
     throw new SyncError("write-denied");
-  await readJson(res);
+  await readJson2(res);
 }
 async function readGist(id, etag, now = Date.now(), token) {
-  const ask = (auth) => request(`${API}/${id}`, {
+  const ask = (auth) => request2(`${API}/${id}`, {
     headers: {
       ...headers(auth),
       ...etag ? { "if-none-match": etag } : {}
@@ -46201,7 +46244,7 @@ async function readGist(id, etag, now = Date.now(), token) {
     res = await ask();
   if (res.status === 304)
     return { changed: false };
-  const json = await readJson(res);
+  const json = await readJson2(res);
   const file = isPlainObject4(json.files) ? json.files[GIST_FILE] : undefined;
   if (!isPlainObject4(file) || typeof file.content !== "string")
     throw new SyncError("bad-blob");
@@ -47343,6 +47386,71 @@ var init_start = __esm(() => {
   init_state();
 });
 
+// src/usage-poll.ts
+import { readFile as readFile8 } from "node:fs/promises";
+async function nextPollAt(path) {
+  try {
+    const value = JSON.parse(await readFile8(path, "utf8"));
+    return isPlainObject4(value) && isFiniteNumber(value.nextPollAt) ? value.nextPollAt : 0;
+  } catch (error) {
+    if (error instanceof SyntaxError || error instanceof Error && "code" in error && error.code === "ENOENT")
+      return 0;
+    throw error;
+  }
+}
+function startUsagePoll(deps = {}) {
+  const now = deps.now ?? Date.now;
+  const refresh = deps.refresh ?? refreshAllUsageInBackground;
+  const timers = deps.timers ?? realTimers;
+  let disposed = false;
+  let inflight;
+  async function poll() {
+    const path = `${poolFilePath()}.usage-poll.json`;
+    try {
+      await withLock(`${path}.lock`, {
+        staleMs: 120000,
+        timeoutMs: 0,
+        retryMs: 25,
+        heartbeatMs: 5000
+      }, async () => {
+        const at = now();
+        if (at < await nextPollAt(path))
+          return;
+        await writeJsonAtomic(path, JSON.stringify({ nextPollAt: at + USAGE_REFRESH_TTL_MS }));
+        await refresh(at);
+      });
+    } catch (error) {
+      if (!(error instanceof LockTimeoutError))
+        throw error;
+    }
+  }
+  function tick() {
+    if (disposed)
+      return Promise.resolve();
+    inflight ??= poll().finally(() => {
+      inflight = undefined;
+    });
+    return inflight;
+  }
+  const timer = timers.set(() => void tick().catch(ignore), USAGE_REFRESH_TTL_MS);
+  return {
+    tick,
+    async dispose() {
+      disposed = true;
+      timers.clear(timer);
+      await inflight;
+    }
+  };
+}
+var init_usage_poll = __esm(() => {
+  init_lock();
+  init_paths();
+  init_store();
+  init_loop();
+  init_usage_refresh();
+  init_util4();
+});
+
 // src/legacy.ts
 function zeroOutCost(provider) {
   for (const model of Object.values(provider.models)) {
@@ -47497,8 +47605,12 @@ function createProviderPlugin(adapter) {
 }
 var PROVIDER_LABELS, AnthropicLoadBalancerPlugin, OpenAILoadBalancerPlugin, KimiCodeLoadBalancerPlugin, KimiCodeGlobalLoadBalancerPlugin, lbResult = (output) => ({ title: "Auth Load Balancer", output }), AuthLoadBalancerStatusPlugin = async (input) => {
   const sync = startSync();
+  const usage = startUsagePoll();
   return {
-    dispose: async () => sync?.dispose(),
+    dispose: async () => {
+      await usage.dispose();
+      await sync?.dispose();
+    },
     tool: {
       auth_lb_status: tool2({
         description: "Show the auth load-balancer pool: the in-use account per provider, each account's weekly and 5h usage, cooldowns, and the ranked next-candidate accounts. Refreshes stale usage from the provider usage endpoints (throttled) before rendering.",
@@ -47587,6 +47699,7 @@ var init_legacy = __esm(() => {
   init_start();
   init_token_mint();
   init_types2();
+  init_usage_poll();
   init_usage_refresh();
   init_util4();
   PROVIDER_LABELS = {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "opencode-auth-load-balancer",
-  "version": "0.9.0",
+  "version": "0.9.1",
   "description": "Load-balance opencode requests across multiple Anthropic (Claude) and OpenAI (Codex) OAuth accounts and Kimi Code subscriptions, weighted primarily by weekly usage with drain-before-reset scheduling.",
   "type": "module",
   "license": "MIT",