maxpool 1.24.12 → 1.24.14

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "maxpool",
-  "version": "1.24.12",
+  "version": "1.24.14",
   "description": "Multi-account Claude Code proxy with adaptive, rate-aware load balancing across Claude accounts",
   "type": "module",
   "main": "src/index.js",

package/src/claude-reset-grants.js

@@ -119,17 +119,26 @@ export async function listResetGrants(accessToken, { signal } = {}) {
  *  random per CALL (server treats already_used as success), so a caller retry is
  *  safe but the id is not reused across distinct decisions. Returns
  *  { ok:true } | { ok:false, error, code }. */
-export async function claimResetGrant(accessToken, grantId, { signal, requestId } = {}) {
+export async function claimResetGrant(accessToken, grantId, { signal, requestId, fetchImpl } = {}) {
   if (!accessToken || !grantId) return { ok: false, error: 'missing args' };
+  const doFetch = fetchImpl || ((u, o) => fetch(u, o));
   try {
-    const prof = await fetch(PROFILE_URL, { headers: headers(accessToken), signal });
+    const prof = await doFetch(PROFILE_URL, { headers: headers(accessToken), signal });
     if (!prof.ok) return { ok: false, error: `profile HTTP ${prof.status}` };
-    const orgs = (await prof.json())?.organizations;
-    const org = Array.isArray(orgs) && orgs.length ? orgs[0].uuid : null;
+    const body = await prof.json();
+    // The profile returns `organization` (SINGULAR object) — measured live on
+    // maxim.krasnykh@gmail.com 2026-10-09: {account, organization, application}.
+    // v1.24.0-12 read only the plural `organizations` array (null for personal
+    // accounts), so EVERY cedar_ember claim on a personal account failed with
+    // 'no oauth organization' while the account sat exhausted with a usable reset
+    // (owner report: 'this account is exhausted but the reset is not being used').
+    // Accept both shapes; singular wins when present.
+    const org = body?.organization?.uuid
+      ?? (Array.isArray(body?.organizations) && body.organizations.length ? body.organizations[0].uuid : null);
     if (!org) return { ok: false, error: 'no oauth organization' };
 
     const rid = requestId || randomUUID();
-    const res = await fetch(`https://api.anthropic.com${CLAIM_PATH}/${org}/reset_rate_limits`, {
+    const res = await doFetch(`https://api.anthropic.com${CLAIM_PATH}/${org}/reset_rate_limits`, {
       method: 'POST',
       headers: { ...headers(accessToken), 'Content-Type': 'application/json' },
       body: JSON.stringify({ program: 'cedar_ember', grant_id: grantId, request_id: rid }),

package/src/server.js

@@ -1745,9 +1745,12 @@ function computeQueueWindowMs({
   // (which survives outages natively) takes over after our fast error.
   // streamClientToleranceMs may be 3h from x-maxpool-client-stream-idle-ms, so it
   // cannot bound a NETWORK hold — only a capacity/quota hold with real content.
-  if (cause === 'network') {
-    windowMs = Math.min(windowMs, CLI_STREAM_CEILING_MS);
-  }
+  // EVERY streaming hold is bounded by the CLI's absolute 30-min stream ceiling —
+  // measured again 2026-10-09: five CAPACITY-cause holds (network-storm cooldowns)
+  // from the 05:30 network switch died client-side at 1820-1848s with only pings
+  // sent; the network-cause cap alone (2026-10-07) left this class behind. No
+  // client survives past the ceiling, so a longer hold is always an orphan.
+  windowMs = Math.min(windowMs, CLI_STREAM_CEILING_MS);
   return windowMs;
 }