switchroom 0.18.12 → 0.18.14

package/dist/agent-scheduler/index.js

@@ -11187,7 +11187,6 @@ var TelegramChannelSchema = exports_external.object({
   enabled: exports_external.boolean().default(true).describe("Master switch for the per-agent Telegram gateway sidecar. " + "When false, start.sh skips the gateway supervise loop and the " + "agent boots without bot-token requirements (smoke-test + " + "offline-dev use case)."),
   plugin: exports_external.enum(["switchroom", "official"]).optional().describe("Which Telegram MCP plugin to load. Default is 'switchroom' — the " + "enhanced fork with streaming edits, reactions, history, and " + "access control. Set to 'official' for the upstream marketplace " + "plugin (basic send/receive only)."),
   format: exports_external.enum(["html", "markdownv2", "text"]).optional().describe("Default reply format passed to the plugin"),
-  rate_limit_ms: exports_external.number().optional().describe("Minimum delay between outgoing messages in ms"),
   stream_mode: exports_external.enum(["pty", "checklist"]).optional().describe("How live progress is streamed to Telegram during a turn. " + "'pty' (default) surfaces text snapshots of Claude Code's TUI — " + "compatible but can flicker as Ink re-renders. 'checklist' drives " + "a structured progress card from session-tail events — stable " + "order, per-tool status emojis, fires only on semantic transitions."),
   stream_throttle_ms: exports_external.number().int().nonnegative().optional().describe("Throttle window in ms between successive in-place stream edits " + "during a turn. Lower = more responsive stream, higher = fewer API " + "calls. Floored at 250 by draft-stream itself. Default 400 ms for DMs " + "and 1000 ms for groups/forums (respects Telegram's ~1 edit/sec/message " + "practical ceiling). Override per-agent if a particular agent needs " + "snappier or quieter streaming."),
   clear_status_on_completion: exports_external.boolean().optional().describe("When true, the live activity/status feed (the in-place 'what it's " + "doing' message — Reading X, Searching the web for Y, …) is DELETED " + "when the turn's final answer lands, so only the reply remains. " + "Default false: the status message is left in the chat as a record " + "(its last step marked done) — no post-then-delete. Per-agent " + "override; cascades defaults → profile → agent (per-key)."),
@@ -13120,6 +13119,13 @@ var ApprovalLookupRequestSchema = exports_external.object({
   action: exports_external.string().min(1),
   current_approver_set: exports_external.array(exports_external.string())
 });
+var ApprovalLookupByRequestRequestSchema = exports_external.object({
+  v: exports_external.literal(1),
+  op: exports_external.literal("approval_lookup_by_request"),
+  agent_unit: exports_external.string().min(1),
+  request_id: exports_external.string().regex(/^[0-9a-f]{32}$/),
+  current_approver_set: exports_external.array(exports_external.string())
+});
 var ApprovalConsumeRequestSchema = exports_external.object({
   v: exports_external.literal(1),
   op: exports_external.literal("approval_consume"),
@@ -13174,6 +13180,7 @@ var RequestSchema = exports_external.discriminatedUnion("op", [
   RevokeGrantRequestSchema,
   ApprovalRequestRequestSchema,
   ApprovalLookupRequestSchema,
+  ApprovalLookupByRequestRequestSchema,
   ApprovalConsumeRequestSchema,
   ApprovalRevokeRequestSchema,
   ApprovalListRequestSchema,
@@ -13628,19 +13635,30 @@ class JsonlAuditSink {
 }
 
 // src/scheduler/quota-preflight.ts
-function decideQuotaPreflight(state) {
+function decideQuotaPreflight(state, opts = {}) {
+  const now = opts.now ?? Date.now();
   const accounts = state.accounts ?? [];
   if (accounts.length === 0) {
     return { defer: false, reason: "no accounts in broker state" };
   }
   const healthy = accounts.filter((a) => !a.exhausted);
-  if (healthy.length > 0) {
+  if (healthy.length === 0) {
+    return { defer: true, reason: `all ${accounts.length} account(s) exhausted` };
+  }
+  const effectiveLabel = (opts.agent !== undefined ? (state.agents ?? []).find((a) => a.name === opts.agent)?.account : undefined) ?? state.active;
+  const effective = accounts.find((a) => a.label === effectiveLabel);
+  if (effective !== undefined && !effective.exhausted && effective.throttled_until !== undefined && effective.throttled_until > now) {
+    const inS = Math.ceil((effective.throttled_until - now) / 1000);
     return {
-      defer: false,
-      reason: `${healthy.length}/${accounts.length} account(s) healthy`
+      defer: true,
+      reason: `account '${effective.label}' rate-throttled (clears in ${inS}s)`,
+      retryAtMs: effective.throttled_until
     };
   }
-  return { defer: true, reason: `all ${accounts.length} account(s) exhausted` };
+  return {
+    defer: false,
+    reason: `${healthy.length}/${accounts.length} account(s) healthy`
+  };
 }
 
 // src/auth/broker/client.ts
@@ -13677,6 +13695,12 @@ var MarkExhaustedRequestSchema = exports_external.object({
   id: exports_external.string().min(1),
   until: exports_external.number().int().positive().optional()
 });
+var MarkThrottledRequestSchema = exports_external.object({
+  v: exports_external.literal(PROTOCOL_VERSION),
+  op: exports_external.literal("mark-throttled"),
+  id: exports_external.string().min(1),
+  until: exports_external.number().int().positive()
+});
 var RefreshAccountRequestSchema = exports_external.object({
   v: exports_external.literal(PROTOCOL_VERSION),
   op: exports_external.literal("refresh-account"),
@@ -13777,6 +13801,7 @@ var RequestSchema2 = exports_external.discriminatedUnion("op", [
   ListStateRequestSchema,
   SetActiveRequestSchema,
   MarkExhaustedRequestSchema,
+  MarkThrottledRequestSchema,
   RefreshAccountRequestSchema,
   AddAccountRequestSchema,
   RmAccountRequestSchema,
@@ -13796,6 +13821,7 @@ var AccountStateSchema = exports_external.object({
   expiresAt: exports_external.number().optional(),
   exhausted: exports_external.boolean(),
   exhausted_until: exports_external.number().optional(),
+  throttled_until: exports_external.number().optional(),
   threshold_violations: exports_external.number().int().nonnegative().optional(),
   last_refreshed_at: exports_external.number().optional()
 });
@@ -13826,6 +13852,12 @@ var MarkExhaustedDataSchema = exports_external.object({
   rolled: exports_external.array(exports_external.string()),
   rolledTo: exports_external.string().nullable().optional()
 });
+var MarkThrottledDataSchema = exports_external.object({
+  account: exports_external.string(),
+  throttled_until: exports_external.number(),
+  escalated: exports_external.boolean(),
+  rolledTo: exports_external.string().nullable().optional()
+});
 var RefreshAccountDataSchema = exports_external.object({
   account: exports_external.string(),
   expiresAt: exports_external.number().optional()
@@ -14051,6 +14083,15 @@ class AuthBrokerClient {
     const data = await this.send(req);
     return data;
   }
+  async markThrottled(until) {
+    const data = await this.send({
+      v: PROTOCOL_VERSION,
+      id: randomUUID(),
+      op: "mark-throttled",
+      until
+    });
+    return data;
+  }
   async claimNotification(key, windowMs) {
     const data = await this.send({
       v: PROTOCOL_VERSION,
@@ -14721,6 +14762,12 @@ var DEFAULT_MAX_QUOTA_DEFER_ATTEMPTS = 3;
 function defaultQuotaDeferBackoffMs(attempt) {
   return [60000, 180000, 300000][attempt] ?? 300000;
 }
+function resolveQuotaDeferDelayMs(decision, fallbackMs, nowMs) {
+  if (decision.retryAtMs === undefined)
+    return fallbackMs;
+  const target = decision.retryAtMs - nowMs + 2000;
+  return Math.min(Math.max(target, 5000), 10 * 60000);
+}
 function registerAgentSchedule(opts) {
   const tasks = [];
   const now = opts.now ?? Date.now;
@@ -14761,7 +14808,7 @@ function registerAgentSchedule(opts) {
             handle = scheduleRetry(() => {
               pendingRetries.delete(handle);
               attemptFire(attempt + 1);
-            }, backoff(attempt));
+            }, resolveQuotaDeferDelayMs(decision, backoff(attempt), now()));
             pendingRetries.add(handle);
           }
           return;
@@ -15116,10 +15163,10 @@ Briefly and plainly tell the user these scheduled runs did not ` + "happen so th
   }
   const cronLib = __require("node-cron");
   const quotaPreflightEnabled = process.env.SWITCHROOM_DISABLE_CRON_QUOTA_PREFLIGHT !== "1";
-  const quotaGate = quotaPreflightEnabled ? async () => {
+  const quotaGate = quotaPreflightEnabled ? async (agent) => {
     const client = new AuthBrokerClient;
     try {
-      return decideQuotaPreflight(await client.listState());
+      return decideQuotaPreflight(await client.listState(), { agent });
     } finally {
       await client.close().catch(() => {});
     }
@@ -15198,6 +15245,7 @@ if (import.meta.url === `file://${process.argv[1]}` && /(?:^|[/\\])agent-schedul
 export {
   scheduleSignature,
   resolveReloadPollMs,
+  resolveQuotaDeferDelayMs,
   resolveEntryThreadId,
   resolveChannelTarget,
   registerAgentSchedule,

package/dist/auth-broker/index.js

@@ -7010,6 +7010,41 @@ var require_dist = __commonJS((exports) => {
   exports.visitAsync = visit.visitAsync;
 });
 
+// src/util/atomic.ts
+import { randomBytes } from "node:crypto";
+import { closeSync, constants, fsyncSync, openSync, renameSync, rmSync, writeSync } from "node:fs";
+function atomicWriteFileSync(destPath, contents, mode = 384) {
+  const tmp = `${destPath}.tmp-${process.pid}-${randomBytes(4).toString("hex")}`;
+  const buf = typeof contents === "string" ? Buffer.from(contents, "utf-8") : contents;
+  let fd = null;
+  try {
+    fd = openSync(tmp, TMP_OPEN_FLAGS, mode);
+    writeSync(fd, buf, 0, buf.length, 0);
+    fsyncSync(fd);
+    closeSync(fd);
+    fd = null;
+    renameSync(tmp, destPath);
+  } catch (err) {
+    if (fd !== null) {
+      try {
+        closeSync(fd);
+      } catch {}
+    }
+    try {
+      rmSync(tmp, { force: true });
+    } catch {}
+    throw err;
+  }
+}
+function atomicWriteJsonSync(destPath, value, mode = 384) {
+  atomicWriteFileSync(destPath, JSON.stringify(value, null, 2) + `
+`, mode);
+}
+var TMP_OPEN_FLAGS;
+var init_atomic = __esm(() => {
+  TMP_OPEN_FLAGS = constants.O_WRONLY | constants.O_CREAT | constants.O_EXCL | (constants.O_NOFOLLOW ?? 0);
+});
+
 // node_modules/.bun/handlebars@4.7.9/node_modules/handlebars/dist/cjs/handlebars/utils.js
 var require_utils = __commonJS((exports) => {
   exports.__esModule = true;
@@ -12570,41 +12605,6 @@ var require_lib = __commonJS((exports, module) => {
   }
 });
 
-// src/util/atomic.ts
-import { randomBytes } from "node:crypto";
-import { closeSync, constants, fsyncSync, openSync, renameSync, rmSync, writeSync } from "node:fs";
-function atomicWriteFileSync(destPath, contents, mode = 384) {
-  const tmp = `${destPath}.tmp-${process.pid}-${randomBytes(4).toString("hex")}`;
-  const buf = typeof contents === "string" ? Buffer.from(contents, "utf-8") : contents;
-  let fd = null;
-  try {
-    fd = openSync(tmp, TMP_OPEN_FLAGS, mode);
-    writeSync(fd, buf, 0, buf.length, 0);
-    fsyncSync(fd);
-    closeSync(fd);
-    fd = null;
-    renameSync(tmp, destPath);
-  } catch (err) {
-    if (fd !== null) {
-      try {
-        closeSync(fd);
-      } catch {}
-    }
-    try {
-      rmSync(tmp, { force: true });
-    } catch {}
-    throw err;
-  }
-}
-function atomicWriteJsonSync(destPath, value, mode = 384) {
-  atomicWriteFileSync(destPath, JSON.stringify(value, null, 2) + `
-`, mode);
-}
-var TMP_OPEN_FLAGS;
-var init_atomic = __esm(() => {
-  TMP_OPEN_FLAGS = constants.O_WRONLY | constants.O_CREAT | constants.O_EXCL | (constants.O_NOFOLLOW ?? 0);
-});
-
 // src/auth/broker/index.ts
 import { existsSync as existsSync9, readFileSync as readFileSync8 } from "node:fs";
 
@@ -16816,7 +16816,6 @@ var TelegramChannelSchema = exports_external.object({
   enabled: exports_external.boolean().default(true).describe("Master switch for the per-agent Telegram gateway sidecar. " + "When false, start.sh skips the gateway supervise loop and the " + "agent boots without bot-token requirements (smoke-test + " + "offline-dev use case)."),
   plugin: exports_external.enum(["switchroom", "official"]).optional().describe("Which Telegram MCP plugin to load. Default is 'switchroom' — the " + "enhanced fork with streaming edits, reactions, history, and " + "access control. Set to 'official' for the upstream marketplace " + "plugin (basic send/receive only)."),
   format: exports_external.enum(["html", "markdownv2", "text"]).optional().describe("Default reply format passed to the plugin"),
-  rate_limit_ms: exports_external.number().optional().describe("Minimum delay between outgoing messages in ms"),
   stream_mode: exports_external.enum(["pty", "checklist"]).optional().describe("How live progress is streamed to Telegram during a turn. " + "'pty' (default) surfaces text snapshots of Claude Code's TUI — " + "compatible but can flicker as Ink re-renders. 'checklist' drives " + "a structured progress card from session-tail events — stable " + "order, per-tool status emojis, fires only on semantic transitions."),
   stream_throttle_ms: exports_external.number().int().nonnegative().optional().describe("Throttle window in ms between successive in-place stream edits " + "during a turn. Lower = more responsive stream, higher = fewer API " + "calls. Floored at 250 by draft-stream itself. Default 400 ms for DMs " + "and 1000 ms for groups/forums (respects Telegram's ~1 edit/sec/message " + "practical ceiling). Override per-agent if a particular agent needs " + "snappier or quieter streaming."),
   clear_status_on_completion: exports_external.boolean().optional().describe("When true, the live activity/status feed (the in-place 'what it's " + "doing' message — Reading X, Searching the web for Y, …) is DELETED " + "when the turn's final answer lands, so only the reply remains. " + "Default false: the status message is left in the chat as a record " + "(its last step marked done) — no post-then-delete. Per-agent " + "override; cascades defaults → profile → agent (per-key)."),
@@ -18112,7 +18111,7 @@ import {
   rmSync as rmSync5,
   statSync as statSync6,
   unlinkSync,
-  writeFileSync as writeFileSync3
+  writeFileSync as writeFileSync2
 } from "node:fs";
 import { closeSync as closeSync2, openSync as openSync2, writeSync as writeSync2 } from "node:fs";
 import * as constants2 from "node:constants";
@@ -18124,6 +18123,7 @@ import { createHash } from "node:crypto";
 
 // src/agents/scaffold.ts
 import { join as join4, resolve as resolve5 } from "node:path";
+init_atomic();
 
 // src/config/timezone.ts
 var CONTAINER_DEFAULT_UTC_ZONES = new Set([
@@ -18390,6 +18390,13 @@ var ApprovalLookupRequestSchema = exports_external.object({
   action: exports_external.string().min(1),
   current_approver_set: exports_external.array(exports_external.string())
 });
+var ApprovalLookupByRequestRequestSchema = exports_external.object({
+  v: exports_external.literal(1),
+  op: exports_external.literal("approval_lookup_by_request"),
+  agent_unit: exports_external.string().min(1),
+  request_id: exports_external.string().regex(/^[0-9a-f]{32}$/),
+  current_approver_set: exports_external.array(exports_external.string())
+});
 var ApprovalConsumeRequestSchema = exports_external.object({
   v: exports_external.literal(1),
   op: exports_external.literal("approval_consume"),
@@ -18444,6 +18451,7 @@ var RequestSchema = exports_external.discriminatedUnion("op", [
   RevokeGrantRequestSchema,
   ApprovalRequestRequestSchema,
   ApprovalLookupRequestSchema,
+  ApprovalLookupByRequestRequestSchema,
   ApprovalConsumeRequestSchema,
   ApprovalRevokeRequestSchema,
   ApprovalListRequestSchema,
@@ -18643,9 +18651,6 @@ var BIND_MOUNT_EXACT_SOURCE_DENY = new Set(["/var/run/docker.sock"]);
 var OAUTH_BETA = "oauth-2025-04-20";
 var DEFAULT_USER_AGENT = "claude-cli/1.0.0 (external, cli)";
 var DEFAULT_PROBE_MODEL = "claude-haiku-4-5-20251001";
-function isProbeThin(q) {
-  return q.fiveHourUtilPresent === false && q.sevenDayUtilPresent === false;
-}
 function parseFloatHeader(headers, name) {
   const v = headers.get(name);
   if (v == null || v.trim().length === 0)
@@ -18742,6 +18747,9 @@ function snapshotFresh(s, now, maxAgeMs = SNAPSHOT_STALE_AGE_MS) {
 function snapshotWalled(s) {
   return s.fiveHourUtilizationPct >= WALL_PCT || s.sevenDayUtilizationPct >= WALL_PCT;
 }
+function snapshotComplete(s) {
+  return s.fiveHourUtilPresent !== false && s.sevenDayUtilPresent !== false;
+}
 function overageLiftsWall(snapshot, inAllowList) {
   if (!inAllowList)
     return false;
@@ -18757,16 +18765,19 @@ function snapshotClearlyHealthy(s) {
 }
 function accountEligibility(opts) {
   const { mark, snapshot, now, allowOverage = false } = opts;
+  if (snapshotFresh(snapshot, now) && snapshotWalled(snapshot) && !overageLiftsWall(snapshot, allowOverage)) {
+    return "blocked";
+  }
   if (snapshotFresh(snapshot, now)) {
     const markedAt = mark?.marked_at ?? 0;
     if (snapshot.capturedAt >= markedAt) {
       if (snapshotWalled(snapshot)) {
-        if (overageLiftsWall(snapshot, allowOverage)) {
+        if (overageLiftsWall(snapshot, allowOverage))
           return "eligible";
-        }
         return "blocked";
       }
-      return "eligible";
+      if (snapshotComplete(snapshot))
+        return "eligible";
     }
   }
   if (mark !== undefined && mark.exhausted_until > now)
@@ -18783,7 +18794,7 @@ function snapshotShouldClearMark(snapshot, mark, now) {
     return false;
   if (snapshot.capturedAt < (mark.marked_at ?? 0))
     return false;
-  if (isProbeThin(snapshot))
+  if (!snapshotComplete(snapshot))
     return false;
   return snapshotClearlyHealthy(snapshot);
 }
@@ -18792,7 +18803,7 @@ function clampMarkExpiry(opts) {
   const shortCeil = now + shortMs;
   if (proposedUntil <= shortCeil)
     return proposedUntil;
-  const liveContradictsWeeklyWall = snapshotFresh(snapshot, now) && snapshot.sevenDayUtilizationPct < WALL_PCT;
+  const liveContradictsWeeklyWall = snapshotFresh(snapshot, now) && snapshot.sevenDayUtilPresent !== false && snapshot.sevenDayUtilizationPct < WALL_PCT;
   return liveContradictsWeeklyWall ? shortCeil : proposedUntil;
 }
 var SOFT_AVOID_FIVE_HOUR_CAP = 98;
@@ -18885,6 +18896,7 @@ function resolveConsumerProbeIntervalMs(env) {
 init_atomic();
 
 // src/auth/account-store.ts
+init_atomic();
 import {
   chownSync,
   existsSync as existsSync5,
@@ -18893,10 +18905,8 @@ import {
   readdirSync as readdirSync3,
   renameSync as renameSync2,
   rmSync as rmSync2,
-  statSync as statSync3,
-  writeFileSync as writeFileSync2
+  statSync as statSync3
 } from "node:fs";
-import { randomBytes as randomBytes2 } from "node:crypto";
 import { homedir as homedir4 } from "node:os";
 import { join as join5, resolve as resolve6 } from "node:path";
 var LABEL_MAX = 64;
@@ -18980,8 +18990,8 @@ function enrichClaudeCreds(value) {
 }
 function writeAccountCredentials(label, value, home2 = homedir4()) {
   validateAccountLabel(label);
-  mkdirSync2(accountDir(label, home2), { recursive: true });
-  atomicWriteJson(accountCredentialsPath(label, home2), enrichClaudeCreds(value));
+  mkdirSync2(accountDir(label, home2), { recursive: true, mode: 448 });
+  atomicWriteJsonSync(accountCredentialsPath(label, home2), enrichClaudeCreds(value));
 }
 function chownAccountFiles(label, uid, home2 = homedir4()) {
   validateAccountLabel(label);
@@ -19007,8 +19017,8 @@ function readAccountMeta(label, home2 = homedir4()) {
 }
 function writeAccountMeta(label, value, home2 = homedir4()) {
   validateAccountLabel(label);
-  mkdirSync2(accountDir(label, home2), { recursive: true });
-  atomicWriteJson(accountMetaPath(label, home2), value);
+  mkdirSync2(accountDir(label, home2), { recursive: true, mode: 448 });
+  atomicWriteJsonSync(accountMetaPath(label, home2), value);
 }
 function patchAccountMeta(label, patch, home2 = homedir4()) {
   const existing = readAccountMeta(label, home2) ?? { createdAt: Date.now() };
@@ -19016,19 +19026,6 @@ function patchAccountMeta(label, patch, home2 = homedir4()) {
   writeAccountMeta(label, merged, home2);
   return merged;
 }
-function atomicWriteJson(destPath, value, mode = 384) {
-  const tmp = `${destPath}.tmp-${process.pid}-${randomBytes2(4).toString("hex")}`;
-  try {
-    writeFileSync2(tmp, JSON.stringify(value, null, 2) + `
-`, { mode });
-    renameSync2(tmp, destPath);
-  } catch (err) {
-    try {
-      rmSync2(tmp, { force: true });
-    } catch {}
-    throw err;
-  }
-}
 
 // src/auth/account-refresh.ts
 var REFRESH_THRESHOLD_MS = 60 * 60 * 1000;
@@ -19767,6 +19764,12 @@ var MarkExhaustedRequestSchema = exports_external.object({
   id: exports_external.string().min(1),
   until: exports_external.number().int().positive().optional()
 });
+var MarkThrottledRequestSchema = exports_external.object({
+  v: exports_external.literal(PROTOCOL_VERSION),
+  op: exports_external.literal("mark-throttled"),
+  id: exports_external.string().min(1),
+  until: exports_external.number().int().positive()
+});
 var RefreshAccountRequestSchema = exports_external.object({
   v: exports_external.literal(PROTOCOL_VERSION),
   op: exports_external.literal("refresh-account"),
@@ -19867,6 +19870,7 @@ var RequestSchema2 = exports_external.discriminatedUnion("op", [
   ListStateRequestSchema,
   SetActiveRequestSchema,
   MarkExhaustedRequestSchema,
+  MarkThrottledRequestSchema,
   RefreshAccountRequestSchema,
   AddAccountRequestSchema,
   RmAccountRequestSchema,
@@ -19886,6 +19890,7 @@ var AccountStateSchema = exports_external.object({
   expiresAt: exports_external.number().optional(),
   exhausted: exports_external.boolean(),
   exhausted_until: exports_external.number().optional(),
+  throttled_until: exports_external.number().optional(),
   threshold_violations: exports_external.number().int().nonnegative().optional(),
   last_refreshed_at: exports_external.number().optional()
 });
@@ -19916,6 +19921,12 @@ var MarkExhaustedDataSchema = exports_external.object({
   rolled: exports_external.array(exports_external.string()),
   rolledTo: exports_external.string().nullable().optional()
 });
+var MarkThrottledDataSchema = exports_external.object({
+  account: exports_external.string(),
+  throttled_until: exports_external.number(),
+  escalated: exports_external.boolean(),
+  rolledTo: exports_external.string().nullable().optional()
+});
 var RefreshAccountDataSchema = exports_external.object({
   account: exports_external.string(),
   expiresAt: exports_external.number().optional()
@@ -20017,6 +20028,10 @@ function encodeError(id, code, message) {
 var AUTH_BROKER_ROOT = "/run/switchroom/auth-broker";
 var REFRESH_TICK_INTERVAL_MS = 60 * 1000;
 var MARK_EXHAUSTED_DEFAULT_MS = 5 * 60 * 60 * 1000;
+var MARK_THROTTLED_MAX_MS = 30 * 60 * 1000;
+var THROTTLE_ESCALATION_HITS = 3;
+var THROTTLE_ESCALATION_WINDOW_MS = 10 * 60 * 1000;
+var MARK_THROTTLED_MIN_INTERVAL_MS = 5 * 1000;
 var AUDIT_ROTATE_BYTES = 10 * 1024 * 1024;
 var AUDIT_KEEP = 5;
 var AUDIT_LINE_MAX = 4000;
@@ -20195,7 +20210,7 @@ class AuthBroker {
     if (!this.opts.skipHealthyMarker) {
       try {
         const healthyPath = join8(this.stateDir, "healthy");
-        writeFileSync3(healthyPath, String(this.now()) + `
+        writeFileSync2(healthyPath, String(this.now()) + `
 `, { mode: 384 });
       } catch (err) {
         this.logErr(`failed to write healthy marker: ${err.message}`);
@@ -20432,6 +20447,9 @@ class AuthBroker {
         case "mark-exhausted":
           await this.opMarkExhausted(socket, reqId, identity, req.until);
           break;
+        case "mark-throttled":
+          await this.opMarkThrottled(socket, reqId, identity, req.until);
+          break;
         case "refresh-account": {
           const provider = req.provider ?? "anthropic";
           if (!this.providers.has(provider)) {
@@ -20552,9 +20570,15 @@ class AuthBroker {
   isOverageAllowed(account) {
     return (this.config.auth?.allow_overage_accounts ?? []).includes(account);
   }
+  exhaustionMarkOf(account) {
+    const q = this.quota[account];
+    if (!q || q.exhausted_until === undefined)
+      return;
+    return { exhausted_until: q.exhausted_until, marked_at: q.marked_at };
+  }
   isAccountExhausted(account) {
     return isAccountBlocked({
-      mark: this.quota[account],
+      mark: this.exhaustionMarkOf(account),
       snapshot: this.lastQuotaCache[account],
       now: this.now(),
       allowOverage: this.isOverageAllowed(account)
@@ -20607,7 +20631,7 @@ class AuthBroker {
     if (!overageLiftsWall(snapshot, true))
       return false;
     return accountEligibility({
-      mark: this.quota[account],
+      mark: this.exhaustionMarkOf(account),
       snapshot,
       now,
       allowOverage: true
@@ -20617,7 +20641,7 @@ class AuthBroker {
     const snapshot = this.lastQuotaCache[account];
     const allowOverage = this.isOverageAllowed(account);
     const verdict = accountEligibility({
-      mark: this.quota[account],
+      mark: this.exhaustionMarkOf(account),
       snapshot,
       now: this.now(),
       allowOverage
@@ -20735,6 +20759,7 @@ class AuthBroker {
         expiresAt: creds?.claudeAiOauth?.expiresAt,
         exhausted,
         exhausted_until: q?.exhausted_until,
+        throttled_until: q?.throttled_until,
         threshold_violations: this.thresholdViolations[label] ?? 0,
         last_refreshed_at: meta?.lastRefreshedAt,
         last_quota: lq ?? null
@@ -20845,7 +20870,7 @@ class AuthBroker {
     };
     this.lastQuotaCache[label] = snapshot;
     this.persistLastQuotaCache();
-    if (snapshotShouldClearMark(snapshot, this.quota[label], this.now())) {
+    if (snapshotShouldClearMark(snapshot, this.exhaustionMarkOf(label), this.now())) {
       delete this.quota[label];
       this.persistQuota();
       process.stdout.write(`auth-broker: live probe shows ${label} healthy (5h=${snapshot.fiveHourUtilizationPct}% 7d=${snapshot.sevenDayUtilizationPct}%) — cleared stale exhaustion mark
@@ -20963,7 +20988,7 @@ class AuthBroker {
       const existing = this.quota[label]?.exhausted_until;
       if (existing !== undefined && existing >= exhaustedUntil)
         continue;
-      this.quota[label] = { exhausted_until: exhaustedUntil, marked_at: now };
+      this.quota[label] = { ...this.quota[label], exhausted_until: exhaustedUntil, marked_at: now };
       this.persistQuota();
       this.audit({ op: "mark-exhausted", identity: { kind: "operator" }, account: label, accountKind: "claude", ok: true });
       process.stdout.write(`auth-broker: consumer-quota-sensor marked ${label} exhausted until ${new Date(exhaustedUntil).toISOString()} — consumer(s) fail over
@@ -21004,6 +21029,83 @@ class AuthBroker {
     this.audit({ op: "mark-exhausted", identity, account, accountKind: "claude", ok: true });
     socket.write(encodeSuccess(id, { account, rolled, rolledTo }));
   }
+  async opMarkThrottled(socket, id, identity, until) {
+    const account = this.callerAccount(identity);
+    if (!account) {
+      this.audit({ op: "mark-throttled", identity, accountKind: "claude", ok: false, error: "no-active-account" });
+      socket.write(encodeError(id, "ACCOUNT_NOT_FOUND", "no active account configured"));
+      return;
+    }
+    const now = this.now();
+    const throttledUntil = Math.min(Math.max(until, now + 1000), now + MARK_THROTTLED_MAX_MS);
+    const entry = this.quota[account] ?? {};
+    const priorHits = entry.throttle_hits ?? [];
+    const lastHit = priorHits.length > 0 ? priorHits[priorHits.length - 1] : undefined;
+    if (lastHit !== undefined && now - lastHit < MARK_THROTTLED_MIN_INTERVAL_MS) {
+      const refreshed = Math.max(entry.throttled_until ?? 0, throttledUntil);
+      this.quota[account] = { ...entry, throttled_until: refreshed };
+      this.persistQuota();
+      this.audit({ op: "mark-throttled", identity, account, accountKind: "claude", ok: true });
+      process.stdout.write(`auth-broker: mark-throttled ${account} deduped (re-mark within ${MARK_THROTTLED_MIN_INTERVAL_MS / 1000}s) — expiry refreshed, no new hit
+`);
+      socket.write(encodeSuccess(id, {
+        account,
+        throttled_until: refreshed,
+        escalated: false,
+        rolledTo: null
+      }));
+      return;
+    }
+    const hits = priorHits.filter((t) => now - t < THROTTLE_ESCALATION_WINDOW_MS);
+    hits.push(now);
+    const escalate = hits.length >= THROTTLE_ESCALATION_HITS;
+    this.quota[account] = {
+      ...entry,
+      throttled_until: throttledUntil,
+      throttle_hits: escalate ? [] : hits
+    };
+    this.persistQuota();
+    this.audit({ op: "mark-throttled", identity, account, accountKind: "claude", ok: true });
+    process.stdout.write(`auth-broker: mark-throttled ${account} until ${new Date(throttledUntil).toISOString()} ` + `(hit ${hits.length}/${THROTTLE_ESCALATION_HITS} in window)
+`);
+    let escalated = false;
+    let rolledTo = null;
+    if (escalate) {
+      const probe = await this.probeThrottleEscalation(account);
+      if (probe.exhausted) {
+        escalated = true;
+        process.stdout.write(`auth-broker: throttle-escalation probe corroborates wall on ${account} — mark-exhausted + roll
+`);
+        this.audit({ op: "mark-exhausted", identity, account, accountKind: "claude", ok: true, reason: "throttle-escalation" });
+        const roll = await this.markExhaustedAndRoll(account, probe.until ?? undefined, identity);
+        rolledTo = roll.rolledTo;
+      } else {
+        process.stdout.write(`auth-broker: throttle-escalation probe on ${account} did NOT corroborate a wall — staying throttled
+`);
+      }
+    }
+    socket.write(encodeSuccess(id, {
+      account,
+      throttled_until: throttledUntil,
+      escalated,
+      rolledTo: escalated ? rolledTo : null
+    }));
+  }
+  async probeThrottleEscalation(account) {
+    const creds = readAccountCredentials(account, this.home);
+    const token = creds?.claudeAiOauth?.accessToken;
+    if (!token)
+      return { exhausted: false, until: null };
+    let result;
+    try {
+      result = await this.fetchQuotaImpl({ accessToken: token });
+    } catch (err) {
+      this.logErr(`throttle-escalation probe ${account}: ${err.message}`);
+      return { exhausted: false, until: null };
+    }
+    this.cacheQuotaSnapshot(account, result);
+    return quotaIndicatesExhaustion(result, this.isOverageAllowed(account));
+  }
   async markExhaustedAndRoll(account, until, identity) {
     const now = this.now();
     const exhaustedUntil = clampMarkExpiry({
@@ -21012,7 +21114,7 @@ class AuthBroker {
       shortMs: MARK_EXHAUSTED_DEFAULT_MS,
       snapshot: this.lastQuotaCache[account]
     });
-    this.quota[account] = { exhausted_until: exhaustedUntil, marked_at: now };
+    this.quota[account] = { ...this.quota[account], exhausted_until: exhaustedUntil, marked_at: now };
     this.persistQuota();
     const rolledTo = await this.nextHealthyAccountLive(account, this.config.auth?.fallback_order ?? []);
     const rolled = this.fanoutFailoverTo(account, rolledTo);