maxpool 1.24.11 → 1.24.13

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "maxpool",
-  "version": "1.24.11",
+  "version": "1.24.13",
   "description": "Multi-account Claude Code proxy with adaptive, rate-aware load balancing across Claude accounts",
   "type": "module",
   "main": "src/index.js",

package/src/claude-reset-grants.js

@@ -119,17 +119,26 @@ export async function listResetGrants(accessToken, { signal } = {}) {
  *  random per CALL (server treats already_used as success), so a caller retry is
  *  safe but the id is not reused across distinct decisions. Returns
  *  { ok:true } | { ok:false, error, code }. */
-export async function claimResetGrant(accessToken, grantId, { signal, requestId } = {}) {
+export async function claimResetGrant(accessToken, grantId, { signal, requestId, fetchImpl } = {}) {
   if (!accessToken || !grantId) return { ok: false, error: 'missing args' };
+  const doFetch = fetchImpl || ((u, o) => fetch(u, o));
   try {
-    const prof = await fetch(PROFILE_URL, { headers: headers(accessToken), signal });
+    const prof = await doFetch(PROFILE_URL, { headers: headers(accessToken), signal });
     if (!prof.ok) return { ok: false, error: `profile HTTP ${prof.status}` };
-    const orgs = (await prof.json())?.organizations;
-    const org = Array.isArray(orgs) && orgs.length ? orgs[0].uuid : null;
+    const body = await prof.json();
+    // The profile returns `organization` (SINGULAR object) — measured live on
+    // maxim.krasnykh@gmail.com 2026-10-09: {account, organization, application}.
+    // v1.24.0-12 read only the plural `organizations` array (null for personal
+    // accounts), so EVERY cedar_ember claim on a personal account failed with
+    // 'no oauth organization' while the account sat exhausted with a usable reset
+    // (owner report: 'this account is exhausted but the reset is not being used').
+    // Accept both shapes; singular wins when present.
+    const org = body?.organization?.uuid
+      ?? (Array.isArray(body?.organizations) && body.organizations.length ? body.organizations[0].uuid : null);
     if (!org) return { ok: false, error: 'no oauth organization' };
 
     const rid = requestId || randomUUID();
-    const res = await fetch(`https://api.anthropic.com${CLAIM_PATH}/${org}/reset_rate_limits`, {
+    const res = await doFetch(`https://api.anthropic.com${CLAIM_PATH}/${org}/reset_rate_limits`, {
       method: 'POST',
       headers: { ...headers(accessToken), 'Content-Type': 'application/json' },
       body: JSON.stringify({ program: 'cedar_ember', grant_id: grantId, request_id: rid }),

package/src/index.js

@@ -1,6 +1,16 @@
 #!/usr/bin/env node
 
 import net from 'node:net';
+
+// DUAL-STACK TUNING (2026-10-08). Node ≥20 enables happy-eyeballs with a 250ms
+// per-family attempt timeout. On networks where IPv6 is degraded-but-not-dead and the
+// IPv4 path needs >250ms to establish (measured today: every pool upstream call failed
+// ETIMEDOUT in ~270ms while IPv4 alone answered in 3s — the whole fleet saw
+// "connection dropped on every account (UPSTREAM_TTFB)"), 250ms aborts the fallback
+// before IPv4 can win. 2000ms covers a slow IPv4 start; a healthy IPv6 still wins
+// immediately, so well-connected networks are unaffected. Must run BEFORE any
+// connection is opened, hence here at module top.
+net.setDefaultAutoSelectFamilyAttemptTimeout(Number(process.env.MAXPOOL_FAMILY_ATTEMPT_MS) || 2000);
 import { stat } from 'node:fs/promises';
 import { spawn, spawnSync } from 'node:child_process';
 import { createInterface } from 'node:readline';