maxpool 1.5.60 → 1.5.62

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "maxpool",
-  "version": "1.5.60",
+  "version": "1.5.62",
   "description": "Multi-account Claude Code proxy with adaptive, rate-aware load balancing across Claude accounts",
   "type": "module",
   "main": "src/index.js",

package/src/account-manager.js

@@ -176,6 +176,10 @@ const LOAD_EVENT_MAX_AGE_MS = 60 * 60 * 1000;
 // fall back to per-account handling. Bounds any future "poisoned probe" from becoming
 // an indefinite fleet-wide outage (2026-07-25 incident).
 const MAX_FAILED_PROBES = 4;
+// Consecutive quota-probe failures before we say so. High enough that a network blip or a
+// single 429 never trips it; low enough that a permanently dead endpoint surfaces the same
+// day rather than never.
+const PROBE_FAILURE_ALERT_AT = 20;
 const WEEK_MS = 7 * 24 * 60 * 60 * 1000;
 const FIVE_HOUR_MS = 5 * 60 * 60 * 1000;
 
@@ -2183,6 +2187,8 @@ export class AccountManager {
    * Same effect as learning quota from a live response, but for idle accounts.
    */
   applyUsageData(accountIndex, usage) {
+    // A successful probe ends any escalation streak.
+    if (this.accounts[accountIndex]?.quota) this.accounts[accountIndex].quota.consecutiveProbeFailures = 0;
     const account = this.accounts[accountIndex];
     if (!account || !usage) return;
     const q = account.quota;
@@ -2257,6 +2263,22 @@ export class AccountManager {
     q.lastProbeError = message ? String(message).slice(0, 160) : 'probe failed';
     q.lastProbeErrorAt = Date.now();
     q.lastProbeErrorStatus = Number.isFinite(status) ? status : null;
+    // ESCALATE A SYSTEMIC PROBE FAILURE. These fields were written and never read by
+    // anything, so a probe that fails on EVERY call did so in total silence — measured
+    // 2026-08-06: both quota endpoints (/v1/usages and /v1/usage) return 404, so weekly
+    // quota was only ever learned from upstream 429 headers, and an account that had not
+    // yet hit a 429 showed a blank weekly forever with no indication why.
+    // A fail-open probe that never says it is failing is a log line, not a detector.
+    q.consecutiveProbeFailures = (q.consecutiveProbeFailures || 0) + 1;
+    const n = q.consecutiveProbeFailures;
+    // Once, at a threshold that cannot be a blip, then every 100th so it stays visible
+    // without walling the log.
+    if (n === PROBE_FAILURE_ALERT_AT || (n > PROBE_FAILURE_ALERT_AT && n % 100 === 0)) {
+      console.error(`[Maxpool] Quota probe has failed ${n}x in a row for "${account.name}"`
+        + `${status ? ` (HTTP ${status})` : ''}: ${q.lastProbeError}. `
+        + 'Weekly quota can only be learned from upstream 429 headers until this recovers, '
+        + 'so an account that has not hit a 429 will show a blank weekly.');
+    }
   }
 
   /**

package/src/tui.js

@@ -480,6 +480,38 @@ export class TUI {
 
   /** The visible Updates panel. Answers, at a glance: what am I running, is anything
    *  newer, is it automatic, and what is happening right now. */
+  /** The Routing header line. Split out so a test can assert the RENDERED string —
+   *  matching source text is how a header that contradicted routing survived review. */
+  /** The "Cross-provider: …" fragment. Its own method so a test can assert what the user
+   *  actually sees without needing a TTY — the previous version read a superseded global
+   *  and contradicted routing, and only a source-text test would have "passed" on it. */
+  _crossProviderText() {
+    // Show the EFFECTIVE policy, i.e. what actually governs routing. Since per-provider
+    // settings were added, `_claudeFallbackFor(provider)` decides — and the legacy global
+    // knob this used to read is only its fallback when a provider has no entry of its own.
+    // Reading the global made the header contradict both the footer and reality: it said
+    // "when-exhausted" while GLM and Kimi were each set to "always" and routing agreed
+    // with the footer, not the header.
+    const provs = this.am.accounts.filter(a => a.type === 'provider');
+    if (!provs.length) return '';   // no GLM/Kimi in this pool — the whole line is meaningless
+    const eff = [...new Set(provs.map(a => this.am._claudeFallbackFor?.(a.provider)
+      || this.am._crossProviderFallbackPolicy?.() || 'when-exhausted'))];
+    const colour = v => (v === 'never' ? yellow(v) : v === 'always' ? green(v) : cyan(v));
+    if (eff.length === 1) {
+      return `  ${dim('·')}  ${dim('Cross-provider:')} ${colour(eff[0])}`;
+    } else {
+      // Providers disagree — naming each is the only honest summary; a single word here
+      // would misdescribe at least one of them.
+      const parts = provs.map(a => `${a.provider === 'zai' ? 'GLM' : a.provider === 'kimi' ? 'Kimi' : a.provider}: `
+        + colour(this.am._claudeFallbackFor?.(a.provider) || 'never'));
+      return `  ${dim('·')}  ${dim('Cross-provider:')} ${parts.join(dim(' / '))}`;
+    }
+  }
+
+  _routingLine(routing, xpText) {
+    return ` Routing  ${cyan(routing)}${xpText}`;
+  }
+
   _renderUpdatesDetail() {
     const v = this.am.versionInfo;
     const running = v?.current ? `v${v.current}` : 'unknown';
@@ -1137,9 +1169,7 @@ export class TUI {
     const hasProviders = this.am.accounts.some(a => a.type === 'provider');
     let xpText = '';
     if (hasProviders) {
-      const p = this.am._crossProviderFallbackPolicy?.() || 'when-exhausted';
-      const pc = p === 'never' ? yellow(p) : p === 'always' ? green(p) : cyan(p);
-      xpText = `  ${dim('·')}  ${dim('Cross-provider:')} ${pc}`;
+      xpText = this._crossProviderText();
       // Overflow visibility: when GLM/Kimi actually served requests recently, surface the
       // volume so provider traffic isn't a mystery — it's overflow that spilled here while
       // OAuth was saturated. Reuses the SAME 15m load window as the per-row "15m Nr" column.
@@ -1150,7 +1180,7 @@ export class TUI {
       }
       if (provReq > 0) xpText += `  ${dim('·')}  ${yellow(`providers: ${provReq} req/15m`)}`;
     }
-    lines.push(` Routing  ${cyan(routing)}${xpText}`);
+    lines.push(this._routingLine(routing, xpText));
     const queuedCount = this.am.queueState?.waiting?.length || 0;
     // Throttle and WAITING are different things and used to share one line labelled
     // "Anthropic upstream throttled" — so a request parked purely because every account