v1.19.1

Changes

• Keep deterministic Opus 4.8 recovery available when Anthropic's server-side safety fallback still ends in a refusal, and ensure source-model prewarms cannot be routed back to the fallback model.
• Preserve completed tool calls when a served fallback later refuses, continuing with the existing tool result instead of replaying non-idempotent tools.
• Return explicit authentication or quota responses when sticky-balanced routing has no eligible account in OpenCode or Pi instead of falling through to an excluded main account.
• Clear stale, token-bound invalid_grant state immediately after the main OpenCode account is re-authenticated while retaining transient and rate-limit backoffs.
• Keep TUI preference live updates working when Bun cannot create a directory watcher (EBADF) by running the polling fallback independently, and prevent immediate updates from being absorbed during watcher initialization.

Thanks to @iceteaSA for the server-fallback recovery contribution.