maxpool 1.24.4 → 1.24.6

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "maxpool",
-  "version": "1.24.4",
+  "version": "1.24.6",
   "description": "Multi-account Claude Code proxy with adaptive, rate-aware load balancing across Claude accounts",
   "type": "module",
   "main": "src/index.js",

package/src/index.js

@@ -748,6 +748,33 @@ async function serverWorkerCommand() {
   // background probe has gone stale (> 3× interval since last success).
   accountManager.quotaProbeIntervalMs = probeSeconds * 1000;
 
+  // SECRET RE-RESOLVE LOOP (2026-10-05). Provider keys resolve ONCE at startup; a
+  // transient gcloud/ADC failure at that moment benched all four z.ai providers as
+  // "secret-unresolved" permanently (measured 2026-10-05 20:18 startup: cache had
+  // been rewritten without the RESTRICTED_* entries, the gcloud path failed, and
+  // nothing retried — every GLM request 429'd "no_eligible_route" until restart).
+  // Re-attempt unresolved providers every 5 min until they resolve; a resolved
+  // provider is never touched again.
+  const unresolvedProviders = () =>
+    accountManager.accounts.filter(a => a.configSourced && a.type === 'provider' && a.secretName && !a.authToken);
+  if (unresolvedProviders().length) {
+    const secretTimer = setInterval(async () => {
+      const pending = unresolvedProviders();
+      if (!pending.length) { clearInterval(secretTimer); return; }
+      try {
+        const { resolveSecrets } = await import('./secret-resolver.js');
+        const resolved = await resolveSecrets(pending.map(a => a.secretName));
+        let fixed = 0;
+        for (const a of pending) {
+          const tok = resolved[a.secretName];
+          if (tok) { a.authToken = tok; a.status = 'unknown'; a.lastError = null; fixed++; }
+        }
+        if (fixed) console.log(`[Maxpool] Secret re-resolve: ${fixed} provider(s) recovered`);
+      } catch { /* next tick */ }
+    }, 5 * 60_000);
+    secretTimer.unref?.();
+  }
+
   // Seed the running version immediately so the TUI header always shows it, even
   // before (or without) the npm update check. The cold worker's update check below
   // fills in latest/hasUpdate.

package/src/tui.js

@@ -32,8 +32,8 @@ const vw = s => strip(s).length;
 const NAME_W = 20;         // a.name.slice(0, NAME_W).padEnd(NAME_W) — fits a full email like 2solarmax@gmail.com (19)
 const PROVIDER_W = 9;      // providerLabel(a).padEnd(PROVIDER_W) — fits "Anthropic"
 const STATUS_W = 13;       // rpad(status, STATUS_W) — fits "throttled 59s"
-const RESETS_W = 3;        // 'Rst' column — banked limit resets (cards/grants) the
-                           // pool can auto-redeem; '0' when none, count when some.
+const RESETS_W = 6;        // 'Rst' column — FIXED width (fits '2~21d'); a variable
+                           // width ('0' vs '1~21d') shifted every quota bar per row.
 const ROW_PREFIX = '    '; // ' ' + sel(1) + cur(1) + ' ' — 4 cols before the name
 
 // Human provider name for the accounts-table "Provider" column. account.provider
@@ -2174,7 +2174,7 @@ export class TUI {
                             : '~' + Math.max(1, Math.round(days)) + 'd';
         }
       }
-      resetsCell = rpad(n > 0 ? green(String(n) + suffix) : gray('0'), RESETS_W + (suffix ? 2 : 0));
+      resetsCell = rpad(n > 0 ? green(String(n) + suffix) : gray('0'), RESETS_W);
     }
 
     if (a.type === 'provider') {