maxpool 1.21.0 → 1.21.2

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "maxpool",
-  "version": "1.21.0",
+  "version": "1.21.2",
   "description": "Multi-account Claude Code proxy with adaptive, rate-aware load balancing across Claude accounts",
   "type": "module",
   "main": "src/index.js",

package/src/index.js

@@ -29,7 +29,7 @@ net.setDefaultAutoSelectFamilyAttemptTimeout(
 );
 import { Prober } from './prober.js';
 import { CapacityLedger } from './capacity-ledger.js';
-import { loginOAuth, fetchProfile, refreshAccessToken, isTokenExpiringSoon, tokenFingerprint } from './oauth.js';
+import { loginOAuth, fetchProfile, refreshAccessToken, isTokenExpiringSoon, tokenFingerprint, isLoginCancelled } from './oauth.js';
 import { TUI } from './tui.js';
 import { RestartController } from './restart-controller.js';
 import { resolveAccounts } from './account-config.js';
@@ -1637,6 +1637,10 @@ async function loginOAuthCommand() {
   try {
     creds = await loginOAuth();
   } catch (err) {
+    if (isLoginCancelled(err)) {
+      console.error('Login cancelled.');
+      process.exit(0);
+    }
     console.error(`OAuth login failed: ${err.message}`);
     console.error('');
     console.error('Alternatives:');

package/src/oauth.js

@@ -520,6 +520,17 @@ export async function loginOAuth() {
  * Race the callback server promise against manual code entry from stdin.
  * The user can paste the full callback URL or just the authorization code.
  */
+// Rejection sentinel for a user-cancelled login — `err === LOGIN_CANCELLED` (or
+// isLoginCancelled(err)) distinguishes "changed my mind" from a real failure so the
+// UI can say 'cancelled' instead of 'failed' and CLI flows can exit 0 quietly.
+export const LOGIN_CANCELLED = Symbol.for('maxpool.login.cancelled');
+export function isLoginCancelled(err) { return err === LOGIN_CANCELLED; }
+
+export function isLoginCancelAnswer(answer) {
+  const t = String(answer || '').trim().toLowerCase();
+  return t === 'q' || t === 'quit' || t === 'cancel' || t === 'abort' || t === ':q';
+}
+
 function raceWithStdinCode(callbackPromise, expectedState) {
   if (!process.stdin.isTTY) return callbackPromise;
 
@@ -534,9 +545,20 @@ function raceWithStdinCode(callbackPromise, expectedState) {
       fn(val);
     };
 
-    rl.question('Paste authorization code here (or wait for browser callback): ', answer => {
+    // ESCAPE HATCH (2026-09-20). The login prompt had NO way out: a free-plan account
+    // can't complete the OAuth consent, the callback never arrives, and Ctrl+C — with
+    // no SIGINT listener on the readline — killed the whole maxpool process (measured:
+    // the owner was stuck on this exact screen and had to be told to kill the app).
+    // Now: Ctrl+C (first press) and typing q/quit/cancel/abort/:q both reject with a
+    // Cancelled sentinel the callers translate into "login cancelled", leaving the
+    // app alive. The TUI restarts itself from _doLogin's finally block.
+    const cancel = () => settle(reject, LOGIN_CANCELLED);
+    rl.on('SIGINT', cancel);
+
+    rl.question('Paste authorization code here (q or Ctrl+C to cancel): ', answer => {
       const trimmed = answer.trim();
       if (!trimmed) return; // empty input, keep waiting for callback
+      if (isLoginCancelAnswer(trimmed)) return cancel();
 
       // Try to parse as a URL with ?code= parameter
       try {

package/src/tui.js

@@ -1,5 +1,5 @@
 import { createInterface } from 'node:readline';
-import { fetchProfile, loginOAuth, tokenFingerprint } from './oauth.js';
+import { fetchProfile, loginOAuth, tokenFingerprint, isLoginCancelled } from './oauth.js';
 import { appendEventLog, setConsoleStdoutSuppressed } from './event-log.js';
 
 // ── ANSI helpers ─────────────────────────────────────────────
@@ -1335,7 +1335,11 @@ export class TUI {
         ? `\nRe-authenticated "${name}". Returning to maxpool…\n`
         : `\nAdded new account "${name}". Returning to maxpool…\n`);
     } catch (e) {
-      process.stdout.write(`\nLogin failed: ${e.message}\n`);
+      if (isLoginCancelled(e)) {
+        process.stdout.write('\nLogin cancelled.\n');
+      } else {
+        process.stdout.write(`\nLogin failed: ${e.message}\n`);
+      }
     } finally {
       setConsoleStdoutSuppressed(false);   // restore on every path (incl. the catch)
       if (wasRunning) this.start();
@@ -2380,7 +2384,7 @@ export class TUI {
         return ` ${bold('c')} Check & apply now  ${bold('t')} Automatic updates: ${state} ↻  ${bold('Esc')} Back`;
       }
       case 'accounts':
-        return ` ${bold('a')} Add account  ${bold('l')} Re-auth (browser)  ${bold('n')} Rename  ${bold('t')} Enable/disable  ${bold('d')} Delete  ${bold('Esc')} Back`;
+        return ` ${bold('a')} Add account  ${bold('l')} Re-auth (browser)  ${bold('n')} Rename  ${bold('t')} Enable/disable  ${bold('u')} Usage cap  ${bold('d')} Delete  ${bold('Esc')} Back`;
       case 'addtype':
         return ` ${bold('1')}-${bold('4')} pick a type  ${bold('Esc')} Back`;
       case 'routing': {