Dependency: Requires #35 (killswitch) to be merged first. Rebased onto upstream/main (v1.5.0) now that #37 (TUI sidebar) is merged.

Adds killswitch awareness to the TUI sidebar widget (the integration of #35 + the merged sidebar):

• blocked (red) state for killswitch-killed main and fallback accounts.
• Quota-backoff and refresh-backoff state display.
• A Killswitch row in the Health section and inclusion in the LIMITED badge.
• writeSidebarState() computes killswitch policy for every account using fresh, token-aware QuotaManager reads (never the stale request-start snapshot).

Files:

• packages/opencode/src/sidebar-state.ts — adds killed + backoff fields
• packages/opencode/src/tui.tsx — blocked indicator + kill status section
• packages/opencode/src/index.ts — killswitch-aware sidebar state

Summary by cubic

Adds a killswitch that hard-blocks accounts when quota drops below configured thresholds and integrates it into routing and the TUI; /claude-killswitch manages thresholds. Killed accounts never route, and when none are routable we return a synthetic 429 with retry-after from the earliest reset.

• New Features

  • Killswitch: eager main/fallback quota refresh before evaluation, unified getRoutableFallbackAccounts filter across all routes, non‑replayable bodies never fall through, and a hard 429 with retry-after from the earliest reset (+60s buffer).
  • Sidebar: blocked status word and red ⊘ indicator, Health row listing killswitch‑blocked accounts, killed flags for main/fallbacks, resolveActiveAccount() correction, and background fallback storage changes re‑render via onFallbackStorageChanged.
  • Commands: /claude-killswitch (status, on, off, set main|all|<id>:<5h>,<1w>); changes persist via @cortexkit/anthropic-auth-core.

• Bug Fixes

  • Token‑aware reads for fail‑closed and killswitch checks prevent stale quota from previous accounts from affecting decisions.
  • Restored process‑scoped request counter so every‑N quota refreshes trigger correctly; keep active fallback selection after async refresh and keep the sidebar visible when data clears while collapsed.

^{Written for commit 5eb08e5. Summary will update on new commits.}

Confidence Score: 4/5

The killswitch gate is safe to merge — the three routing bugs identified in earlier review threads are addressed and backed by targeted integration tests.

The routing logic in index.ts is complex and the fixes look correct. The one remaining finding — the Killswitch StatRow placed outside the Health Show block — is purely structural and does not change the visual output today, but is a latent maintainability concern.

packages/opencode/src/tui.tsx — Killswitch StatRow placement outside the degraded Show block.

%%{init: {'theme': 'neutral'}}%%
flowchart TD
    A[Fetch request arrives] --> B{failClosedOnUnknownQuota\n+ no quota + backed off?}
    B -- Yes --> C[Return synthetic 429\nwith quota backoff retry-after]
    B -- No --> D{killswitch enabled?}
    D -- No --> K[Normal routing]
    D -- Yes --> E{needsRefresh?}
    E -- Yes --> F[Eager refresh:\nrefreshMain + refreshAllFallbacks]
    F --> G[Re-read mainQuota\ntoken-aware]
    E -- No --> G
    G --> H{killswitchPassesPolicy\nmainQuota?}
    H -- Pass --> K
    H -- Fail: main killed --> I{isReplayableRequest?}
    I -- Yes --> J[getRoutableFallbackAccounts\nusable ∩ killswitch-pass]
    I -- No --> N[survivingFallbacks = empty]
    J --> L{surviving\nfallbacks > 0?}
    N --> M
    L -- Yes --> M2[tryUsableFallbackAccounts\nhard block: never fall through to main]
    M2 --> M2r{fallbackResponse?}
    M2r -- Yes --> M2s[Return fallback response]
    M2r -- No --> M[Return synthetic 429\nkillswitchRetryAfterSeconds]
    L -- No --> M

_{Reviews (11): Last reviewed commit: "docs(opencode): clarify version path lay..." | Re-trigger Greptile}