witbitz-code 1.9.0__tar.gz → 1.9.2__tar.gz

{witbitz_code-1.9.0/src/witbitz_code.egg-info → witbitz_code-1.9.2}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: witbitz-code
-Version: 1.9.0
+Version: 1.9.2
 Summary: Reach OpenCode on this computer from the Witbitz Spaces Code section, through an end-to-end sealed relay.
 Author: Witbitz
 License-Expression: MIT
@@ -67,8 +67,8 @@ opened (a one-time key traded for a private cookie; no other website can drive i
 **No key to paste.** Pairing asks your Spaces account for this computer's own TrustedRouter and Tinfoil keys, capped by the
 providers (today up to $50 of models and $5 of tools a month per computer). They are sent sealed to this computer, kept in
 `~/.witbitz/code/account-keys.json` (0600) and never given to OpenCode: the local proxy puts them on each call. Model calls
-still go from this computer straight to TrustedRouter and Tinfoil. Coding is by invitation for now — an account that is not
-invited gets no keys, and the pairing stops with a sentence saying so. A computer paired before 1.3 has no account keys:
+still go from this computer straight to TrustedRouter and Tinfoil. An account that is not invited gets the free allowance —
+one computer, $1 of models and $0.25 of tools a month; when it is used up, Code says so and when it comes back. A computer paired before 1.3 has no account keys:
 pair it once more (`witbitz-code pair`).
 
 **Several accounts on one computer:** each pays for its own prompts. OpenCode names the conversation on every call it

{witbitz_code-1.9.0 → witbitz_code-1.9.2}/README.md

@@ -40,8 +40,8 @@ opened (a one-time key traded for a private cookie; no other website can drive i
 **No key to paste.** Pairing asks your Spaces account for this computer's own TrustedRouter and Tinfoil keys, capped by the
 providers (today up to $50 of models and $5 of tools a month per computer). They are sent sealed to this computer, kept in
 `~/.witbitz/code/account-keys.json` (0600) and never given to OpenCode: the local proxy puts them on each call. Model calls
-still go from this computer straight to TrustedRouter and Tinfoil. Coding is by invitation for now — an account that is not
-invited gets no keys, and the pairing stops with a sentence saying so. A computer paired before 1.3 has no account keys:
+still go from this computer straight to TrustedRouter and Tinfoil. An account that is not invited gets the free allowance —
+one computer, $1 of models and $0.25 of tools a month; when it is used up, Code says so and when it comes back. A computer paired before 1.3 has no account keys:
 pair it once more (`witbitz-code pair`).
 
 **Several accounts on one computer:** each pays for its own prompts. OpenCode names the conversation on every call it

{witbitz_code-1.9.0 → witbitz_code-1.9.2}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "witbitz-code"
-version = "1.9.0"
+version = "1.9.2"
 description = "Reach OpenCode on this computer from the Witbitz Spaces Code section, through an end-to-end sealed relay."
 readme = "README.md"
 requires-python = ">=3.10"

{witbitz_code-1.9.0 → witbitz_code-1.9.2}/src/witbitz_code/__init__.py

@@ -4,4 +4,4 @@ The Python implementation of tools/witbitz-code.mjs (docs/opencode-relay.md phas
 vectors and cross-implementation tests.
 """
 
-__version__ = "1.9.0"
+__version__ = "1.9.2"

{witbitz_code-1.9.0 → witbitz_code-1.9.2}/src/witbitz_code/confidential.py

@@ -45,6 +45,22 @@ _SUBJECT = re.compile(r'"(filePath|path|command|pattern|url)"\s*:\s*"((?:[^"\\]|
 _DATA_URL = re.compile(r"^data:([^;,]+)?(?:;[^,]*)?;base64,(.*)$", re.S)
 
 
+# THE MONTH'S ALLOWANCE IS USED (the owner, 2026-10-20: the free Code allowance — "treat it like any other end of budget"). At a
+# key's monthly cap TrustedRouter answers 429 "API key monthly spend limit exceeded; resets at 2026-11-01T00:00:00Z" (measured
+# 2026-10-20). Passed on as a 429, OpenCode reads "rate limited" and RETRIES — the turn hangs. So it becomes a 402 with a
+# sentence a person can act on. tools/code-confidential.mjs allowanceUsed says the same words.
+PLAN_URL = "https://getspaces.witbitz.chat/account"
+_MONTHS = ("January", "February", "March", "April", "May", "June", "July", "August", "September", "October", "November", "December")
+
+
+def allowance_used(status: int, text: str) -> "Refusal | None":
+    if status != 429 or not re.search(r"monthly spend limit exceeded", text or "", re.I):
+        return None
+    m = re.search(r"resets at (\d{4})-(\d{2})-(\d{2})", text or "")
+    day = f"{int(m.group(3))} {_MONTHS[int(m.group(2)) - 1]}" if m and 1 <= int(m.group(2)) <= 12 else "the 1st of next month"
+    return Refusal(402, f"This computer's Code allowance for the month is used up — it comes back on {day}. Your plan and use: {PLAN_URL}", "allowance_used")
+
+
 class Refusal(Exception):
     def __init__(self, status: int, message: str, kind: str = "confidential_refused") -> None:
         super().__init__(message)
@@ -117,9 +133,14 @@ async def convert_unreadable(body: dict, label: str, to_text: Callable | None) -
     return {**body, "messages": messages}
 
 
+# Only the providers whose enclaves we verify (2026-10-20, ⇄ agent/providers/trustedrouter.mjs CONFIDENTIAL_PROVIDERS):
+# TrustedRouter's min_privacy=confidential alone began answering some models from an ordinary server (receipt `tls-webpki`).
+CONFIDENTIAL_PROVIDERS = ("tinfoil",)
+
+
 def stamp_floor(req: dict) -> dict:
     """The confidential floor, as a confidential room stamps it. Key ORDER matters — the receipt signs these exact bytes."""
-    return {**req, "stream": True, "stream_options": {"include_usage": True}, "provider": {**(req.get("provider") or {}), "min_privacy": "confidential"}}
+    return {**req, "stream": True, "stream_options": {"include_usage": True}, "provider": {**(req.get("provider") or {}), "min_privacy": "confidential", "only": list(CONFIDENTIAL_PROVIDERS)}}
 
 
 # ── the answer ───────────────────────────────────────────────────────────────────────────────────────────────────────
@@ -596,6 +617,15 @@ class ConfidentialProxy:
             async with self.client.stream(req.method, target, headers=_forward_headers(req.headers), content=None if req.method in ("GET", "HEAD") else out) as up:
                 headers = {k: v for k, v in up.headers.items() if k.lower() not in ("content-encoding", "content-length", "transfer-encoding", "connection")}
                 self._key_refused(up.status_code)
+                if up.status_code == 429:  # the month's allowance, said plainly — never a "rate limit" OpenCode would retry
+                    text = (await up.aread()).decode("utf-8", "replace")
+                    used = allowance_used(up.status_code, text)
+                    if used:
+                        await self._fail(res, used, False)
+                        return
+                    await res.head(up.status_code, headers)
+                    await res.end(text)
+                    return
                 await res.head(up.status_code, headers)
                 async for c in up.aiter_bytes():
                     await res.write(c)
@@ -637,6 +667,9 @@ class ConfidentialProxy:
                 if not up.is_success:
                     self._key_refused(up.status_code)
                     text = (await up.aread()).decode("utf-8", "replace")
+                    used = allowance_used(up.status_code, text)
+                    if used:
+                        raise used
                     if res.headers_sent:
                         raise Refusal(502, f"{label}: TrustedRouter answered {up.status_code} when asked again ({text[:160]})", "upstream_error")
                     await res.head(up.status_code, {"content-type": up.headers.get("content-type", "application/json")})

{witbitz_code-1.9.0 → witbitz_code-1.9.2}/src/witbitz_code/confidential_models.json

@@ -11,17 +11,6 @@
     ],
     "maxTokens": 24000
   },
-  {
-    "model": "z-ai/glm-5.3-flash",
-    "label": "GLM 5.3 Flash",
-    "vision": true,
-    "efforts": [
-      "low",
-      "high",
-      "max"
-    ],
-    "maxTokens": 16000
-  },
   {
     "model": "z-ai/glm-5.3",
     "label": "GLM 5.3",

{witbitz_code-1.9.0 → witbitz_code-1.9.2}/src/witbitz_code/opencode_plugins/witbitz-browse-publisher.mjs

@@ -258,16 +258,28 @@ function createCast({ cdpHttp, onFrame, onState = () => {
       const sh = c.h + BARS(c.h);
       await onPage("Emulation.setDeviceMetricsOverride", { width: c.w, height: pageFull ? sh : c.h, deviceScaleFactor: c.dpr, mobile, screenWidth: c.w, screenHeight: sh });
       await onPage("Emulation.setTouchEmulationEnabled", mobile ? { enabled: true, maxTouchPoints: 5 } : { enabled: false });
-      if (desktopUA) await onPage("Emulation.setUserAgentOverride", { userAgent: mobile ? phoneUA(desktopUA) : desktopUA });
+      if (desktopUA) await onPage("Emulation.setUserAgentOverride", uaOverride(desktopUA, await realHints(), mobile));
     } else {
       await onPage("Emulation.clearDeviceMetricsOverride").catch(() => {
       });
       await onPage("Emulation.setTouchEmulationEnabled", { enabled: false }).catch(() => {
       });
-      if (desktopUA) await onPage("Emulation.setUserAgentOverride", { userAgent: desktopUA }).catch(() => {
+      if (desktopUA) await onPage("Emulation.setUserAgentOverride", uaOverride(desktopUA, await realHints(), false)).catch(() => {
       });
     }
   }
+  let hintsOf = null;
+  async function realHints() {
+    if (hintsOf) return hintsOf;
+    const r = await onPage("Runtime.evaluate", { expression: HINTS_NOW, returnByValue: true, awaitPromise: true }).catch(() => null);
+    const v = r && r.result && r.result.value;
+    if (v && Array.isArray(v.brands) && v.brands.length) hintsOf = v;
+    if (!hintsOf) {
+      const b = await send("Browser.getVersion").catch(() => null);
+      hintsOf = hintsFromVersion(b && b.product, desktopUA);
+    }
+    return hintsOf;
+  }
   async function hookFullscreen() {
     await onPage("Runtime.enable");
     await onPage("Runtime.addBinding", { name: FS_BINDING });
@@ -467,6 +479,20 @@ function norm(v) {
   return { w, h, dpr: dpr >= 1 && dpr <= 4 ? dpr : 1, mobile: !!v.mobile };
 }
 var PHONE = { w: 412, h: 915, dpr: 2, mobile: true };
+var HINTS_NOW = `(async () => { const d = navigator.userAgentData; if (!d) return null; let h = {}; try { h = await d.getHighEntropyValues(['platformVersion', 'architecture', 'bitness', 'model', 'fullVersionList', 'wow64']) } catch (e) {} return { brands: d.brands, fullVersionList: h.fullVersionList || d.brands, platform: d.platform, platformVersion: h.platformVersion || '', architecture: h.architecture || '', bitness: h.bitness || '', model: h.model || '', wow64: !!h.wow64 } })()`;
+function hintsFromVersion(product, ua = "") {
+  const full = (/\/(\d+(?:\.\d+){1,3})/.exec(String(product || "")) || [])[1];
+  if (!full) return null;
+  const major = full.split(".")[0];
+  const platform = /Windows/.test(ua) ? "Windows" : /Mac OS X/.test(ua) ? "macOS" : /CrOS/.test(ua) ? "Chrome OS" : "Linux";
+  return { brands: [{ brand: "Chromium", version: major }, { brand: "Not)A;Brand", version: "99" }], fullVersionList: [{ brand: "Chromium", version: full }, { brand: "Not)A;Brand", version: "99.0.0.0" }], platform, platformVersion: "", architecture: /arm|aarch64/i.test(ua) ? "arm" : "x86", bitness: "64", model: "", wow64: false };
+}
+function uaOverride(desktop, real, mobile) {
+  const userAgent = mobile ? phoneUA(desktop) : desktop;
+  if (!real || !Array.isArray(real.brands) || !real.brands.length) return { userAgent };
+  const meta = { brands: real.brands, fullVersionList: real.fullVersionList || real.brands, platform: real.platform || "", platformVersion: real.platformVersion || "", architecture: real.architecture || "", model: real.model || "", mobile: false, bitness: real.bitness || "", wow64: !!real.wow64 };
+  return mobile ? { userAgent, platform: "Linux armv8l", userAgentMetadata: { ...meta, platform: "Android", platformVersion: "14.0.0", architecture: "", bitness: "", model: "Pixel 8", mobile: true, wow64: false } } : { userAgent, userAgentMetadata: meta };
+}
 function phoneUA(desktop) {
   return desktop.replace(/\([^)]*\)/, "(Linux; Android 14; Pixel 8)").replace(/ Safari\//, " Mobile Safari/");
 }
@@ -476,6 +502,7 @@ var BINDING = "__wbm";
 var MAX_BATCH = 8 << 20;
 var MAX_SINCE_SNAPSHOT = 48 << 20;
 var ASSET_CACHE = 96 << 20;
+var MAX_ANSWER = 2900 << 10;
 var MAX_SIDE2 = 1600;
 var STILL_MS = 500;
 var STILL_SIDE = 480;
@@ -607,12 +634,19 @@ function createMirrors({ liveHttp, mirrorHttp, rrwebUmd, onFrame, log: log2 = ()
       for (const h of c.handlers) h(m);
     };
     ws.onclose = () => {
+      c.closed = true;
+      log2("mirror: the CDP connection to", http, "closed");
       for (const p of c.pending.values()) p.reject(new Error("cdp: closed"));
       c.pending.clear();
     };
     return c;
   }
   async function attachLive() {
+    if (live && live.closed) {
+      live = null;
+      liveSid = null;
+      liveTargetId = null;
+    }
     const t = liveTarget();
     if (!t || t === liveTargetId) return;
     if (!live) {
@@ -698,8 +732,14 @@ function createMirrors({ liveHttp, mirrorHttp, rrwebUmd, onFrame, log: log2 = ()
       body: body ? Buffer.from(body).toString("base64") : ""
     }, tab.sid).catch(() => {
     });
+    const tooBig = (b) => b && Buffer.byteLength(b) > MAX_ANSWER;
+    const send = (status, headers, body) => tooBig(body) ? (tab.refused++, log2("mirror: not sent,", Math.round(Buffer.byteLength(body) / 1024), "KB \u2014", url.slice(0, 100)), done(404, {}, "")) : done(status, headers, body);
     if (url === "http://mirror.invalid/") return done(200, { "content-type": "text/html; charset=utf-8" }, shell);
     if (p.request.method !== "GET" || !/^https?:\/\//.test(url)) return done(404, {}, "");
+    if (p.resourceType === "Media") {
+      tab.refused++;
+      return done(404, {}, "");
+    }
     if (p.resourceType === "Document") {
       let host = "";
       try {
@@ -714,14 +754,14 @@ function createMirrors({ liveHttp, mirrorHttp, rrwebUmd, onFrame, log: log2 = ()
       try {
         const r = await live.send("Network.getResponseBody", { requestId: known.requestId }, liveSid);
         tab.served++;
-        return done(known.status || 200, { "content-type": known.mime || "application/octet-stream" }, r.base64Encoded ? Buffer.from(r.body, "base64") : r.body);
+        return send(known.status || 200, { "content-type": known.mime || "application/octet-stream" }, r.base64Encoded ? Buffer.from(r.body, "base64") : r.body);
       } catch {
       }
     }
     if (assets.has(url)) {
       tab.served++;
       const a = assets.get(url);
-      return done(a.status, a.headers, a.body);
+      return send(a.status, a.headers, a.body);
     }
     if (!STATIC.has(p.resourceType) || !liveSid) {
       tab.refused++;
@@ -730,7 +770,7 @@ function createMirrors({ liveHttp, mirrorHttp, rrwebUmd, onFrame, log: log2 = ()
     try {
       const a = await loadCredentialless(url);
       tab.loaded++;
-      return done(a.status, a.headers, a.body);
+      return send(a.status, a.headers, a.body);
     } catch (e) {
       tab.refused++;
       log2("mirror: could not load", url.slice(0, 100), "\u2014", String(e.message || e).slice(0, 120));
@@ -816,7 +856,7 @@ function createMirrors({ liveHttp, mirrorHttp, rrwebUmd, onFrame, log: log2 = ()
     });
   }
   async function open2(stream, shape) {
-    if (!mirror) {
+    if (!mirror || mirror.closed) {
       mirror = await connect(mirrorHttp);
       mirror.handlers.push(onMirror);
     }
@@ -881,6 +921,10 @@ function createMirrors({ liveHttp, mirrorHttp, rrwebUmd, onFrame, log: log2 = ()
     /** Make the set of mirrors equal `wanted` (stream → shape). Opens, reshapes and closes as needed. */
     async set(wanted) {
       await attachLive();
+      if (mirror && mirror.closed) {
+        mirror = null;
+        tabs.clear();
+      }
       for (const [stream] of tabs) if (!wanted.has(stream)) await close(stream);
       for (const [stream, shape] of wanted) {
         const tab = tabs.get(stream);
@@ -1225,7 +1269,22 @@ async function assignNow() {
     } catch {
     }
   }
-  if (mirrors) await mirrors.set(wanted);
+  if (!mirrors) return;
+  try {
+    await mirrors.set(wanted);
+  } catch (e) {
+    const why = "mirror could not open: " + String(e.message || e).slice(0, 80);
+    for (const [vid, s] of assigned) {
+      if (!wanted.has(s)) continue;
+      assigned.set(vid, "live");
+      if (relay && relay.readyState === 1) relay.send(await sealCtl(key, { wb: "stream", vid, stream: "live", why }));
+    }
+    const l = cast && cast.last();
+    if (l) outOrder(async () => {
+      if (relay && relay.readyState === 1) relay.send(await seal(key, KIND_FRAME, packFrame(l.header, l.jpeg)));
+    });
+    throw e;
+  }
 }
 async function startCast() {
   const c = ensureCast();

{witbitz_code-1.9.0 → witbitz_code-1.9.2}/src/witbitz_code/opencode_plugins/witbitz-browse-tree.mjs

@@ -4,14 +4,14 @@
 // tools/browse-tree/pin.json
 var pin_default = {
   _: "THE CLOUD COMPUTER'S BROWSER FOR LINUX that this release installs (tools/browse-tree; make.sh writes it). The files are public at <base><tag>/; both sha256s are checked before anything is unpacked.",
-  tag: "p2v",
+  tag: "p2x",
   base: "https://drwev5vxt2t2e.cloudfront.net/browse-tree/",
-  pcr0: "87162d8648af94daec37f9d022c43546f6dc5c9018b7225ee5ccaf3cecd1c7924c7681f0ca48fddb84f5d0a2f987f719",
-  commit: "e303d54e2295c148c5177b2216eca21de6b6f3a3",
+  pcr0: "050541844610fd5ed4b586259906d9219edbabc4445ed7943885ac737ee4918e144af2e49838a8313f5823184bc503cf",
+  commit: "235ef2b815ef74b46e954f48f860197d8d2b612c",
   tree: {
     file: "tree.tar.zst",
-    sha256: "1fceee1d2ddbda8a6ec9f792755a960a877af6342645b8a29fbbf94b28b9536e",
-    size: 664712218
+    sha256: "839b7cc06c70946a4912578115e6cd053cb6b2811cc458457e012ece885b36b6",
+    size: 664701891
   },
   lab: {
     file: "ccvm-lab.bin",

{witbitz_code-1.9.0 → witbitz_code-1.9.2/src/witbitz_code.egg-info}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: witbitz-code
-Version: 1.9.0
+Version: 1.9.2
 Summary: Reach OpenCode on this computer from the Witbitz Spaces Code section, through an end-to-end sealed relay.
 Author: Witbitz
 License-Expression: MIT
@@ -67,8 +67,8 @@ opened (a one-time key traded for a private cookie; no other website can drive i
 **No key to paste.** Pairing asks your Spaces account for this computer's own TrustedRouter and Tinfoil keys, capped by the
 providers (today up to $50 of models and $5 of tools a month per computer). They are sent sealed to this computer, kept in
 `~/.witbitz/code/account-keys.json` (0600) and never given to OpenCode: the local proxy puts them on each call. Model calls
-still go from this computer straight to TrustedRouter and Tinfoil. Coding is by invitation for now — an account that is not
-invited gets no keys, and the pairing stops with a sentence saying so. A computer paired before 1.3 has no account keys:
+still go from this computer straight to TrustedRouter and Tinfoil. An account that is not invited gets the free allowance —
+one computer, $1 of models and $0.25 of tools a month; when it is used up, Code says so and when it comes back. A computer paired before 1.3 has no account keys:
 pair it once more (`witbitz-code pair`).
 
 **Several accounts on one computer:** each pays for its own prompts. OpenCode names the conversation on every call it

{witbitz_code-1.9.0 → witbitz_code-1.9.2}/tests/test_confidential.py

@@ -61,7 +61,8 @@ def test_any_change_to_what_was_sent_or_received_is_refused():
     assert v(request_body=request + b" ")["error"] == "receipt_req_hash"
     assert v(nonce="someone-elses-nonce")["error"] == "receipt_nonce_mismatch"
     tampered = capture_of(stream)
-    tampered.datas[1] = tampered.datas[1].replace(b'"OK"', b'"NO"')
+    at = next(i for i, d in enumerate(tampered.datas) if b'"OK"' in d)  # wherever the captured answer says OK
+    tampered.datas[at] = tampered.datas[at].replace(b'"OK"', b'"NO"')
     assert v(capture=tampered)["error"] == "receipt_resp_hash"
     dropped = capture_of(stream)
     dropped.datas.pop()
@@ -91,14 +92,14 @@ from conftest import requires_node, run_node  # noqa: E402
 
 from witbitz_code import confidential as cf, models as mdl  # noqa: E402
 
-SAY_OK = {"model": "deepseek/deepseek-v4-flash", "messages": [{"role": "user", "content": "Say OK."}], "max_tokens": 5, "stream": True}
+SAY_OK = {"model": "deepseek/deepseek-v4.1-flash", "messages": [{"role": "user", "content": "Say OK."}], "max_tokens": 200, "stream": True}
 PNG = "data:image/png;base64,bm90IHJlYWxseSBhIHBuZw=="
 
 
 def replay_models():
-    # The captured exchange is deepseek-v4-flash's (retired from the confidential tier since), and its receipt signs those
+    # The captured exchange is deepseek-v4.1-flash's (recaptured 2026-10-20 with the Tinfoil-only floor), and its receipt signs those
     # exact bytes — so the replay hands the proxy that model, as the Node test does.
-    return {**mdl.confidential_models(), "deepseek/deepseek-v4-flash": {"vision": False, "label": "DeepSeek V4 Flash"}}
+    return {**mdl.confidential_models()}
 
 
 class FakeNet:
@@ -217,9 +218,9 @@ def test_a_lapsed_proof_before_anything_reached_opencode_is_asked_again_with_a_f
 
     async def t(post, net, _p):
         r = await post({**SAY_OK, "stream": False})
-        assert r.status_code == 200 and r.json()["choices"][0]["message"]["content"] == "OK."
+        assert r.status_code == 200 and r.json()["choices"][0]["message"]["content"] == "OK"
         assert len(net.calls) == 2 and seen == {"verify": 2, "nonce": 2}
-        assert "REFUSED deepseek/deepseek-v4-flash — receipt_verification_window" in "\n".join(logs) and "↻" in "\n".join(logs)
+        assert "REFUSED deepseek/deepseek-v4.1-flash — receipt_verification_window" in "\n".join(logs) and "↻" in "\n".join(logs)
     with_proxy(t, verify=lapsing, nonce=nonce, log=logs.append)
 
 
@@ -246,7 +247,7 @@ def test_the_gateway_must_prove_its_attestation_before_anything_leaves():
 
 @needs_fixture
 def test_an_image_for_a_text_only_model_is_refused_without_a_tinfoil_key_and_read_with_one():
-    img = {**SAY_OK, "messages": [{"role": "user", "content": [{"type": "text", "text": "what is this?"}, {"type": "image_url", "image_url": {"url": PNG}}]}]}
+    img = {**SAY_OK, "model": "z-ai/glm-5.3", "messages": [{"role": "user", "content": [{"type": "text", "text": "what is this?"}, {"type": "image_url", "image_url": {"url": PNG}}]}]}  # a TEXT-ONLY confidential model (as the Node test)
 
     async def no_key(post, net, _p):
         r = await post(img)
@@ -380,3 +381,32 @@ def test_opencode_starts_on_the_catalog_s_confidential_default():
     entry = next(m for m in models.catalog() if m["model"] == models.DEFAULT_MODEL)
     assert want in (entry.get("id"), entry["model"].split("/")[-1]), f"catalog default {want!r} vs {models.DEFAULT_MODEL!r}"
     assert models.default_model_config() == {"model": "trustedrouter/deepseek/deepseek-v4.1-flash"}
+
+
+# THE MONTH'S ALLOWANCE IS USED (the free Code allowance, 2026-10-20): TrustedRouter's answer at a key's cap, as measured.
+SPEND_LIMIT = {"error": {"message": "API key monthly spend limit exceeded; resets at 2026-11-01T00:00:00Z", "source": "router", "status": 429}}
+
+
+class LimitNet(FakeNet):
+    def handler(self, req: httpx.Request):
+        if "googleapis.com/service_accounts" in str(req.url):
+            return httpx.Response(200, json=self.meta["googleJwks"])
+        self.calls.append({"url": str(req.url)})
+        return httpx.Response(429, json=SPEND_LIMIT)
+
+
+@needs_fixture
+def test_the_months_allowance_used_is_a_402_that_says_so_never_a_429_opencode_would_retry():
+    meta, stream, _ = fixture()
+    models = replay_models()
+    for model in ["openai/gpt-6-sol", next(iter(models))]:  # pass-through, and a confidential model
+        async def t(post, _net, _p, model=model):
+            r = await post({"model": model, "messages": [{"role": "user", "content": "hi"}], "stream": True})
+            assert r.status_code == 402, model
+            e = r.json()["error"]
+            assert e["type"] == "allowance_used", model
+            assert "allowance for the month is used up — it comes back on 1 November" in e["message"], e["message"]
+            assert "getspaces.witbitz.chat/account" in e["message"]
+        with_proxy(t, net=LimitNet(meta, stream.decode("utf-8")), models=models)
+    assert cf.allowance_used(429, '{"error":{"message":"rate limited"}}') is None, "a real rate limit stays a rate limit"
+    assert cf.allowance_used(400, json.dumps(SPEND_LIMIT)) is None