maxpool 1.5.67 → 1.5.68

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "maxpool",
-  "version": "1.5.67",
+  "version": "1.5.68",
   "description": "Multi-account Claude Code proxy with adaptive, rate-aware load balancing across Claude accounts",
   "type": "module",
   "main": "src/index.js",

package/src/account-manager.js

@@ -2692,6 +2692,17 @@ export class AccountManager {
     // ~60s forever (hammering Anthropic's OAuth endpoint). Cleared on re-login.
     if (account.refreshDead) return false;
 
+    // A DISABLED account never spends its single-use refresh token. The prober still
+    // READS its quota by design (you disable an exhausted account and still want to
+    // watch it recover — prober.js:73), but rotation is a WRITE that can permanently
+    // brick the account: each rotation invalidates the previous token, so a refresh
+    // that races a restart (or another writer) loses the new token and the account
+    // dies with invalid_grant. Spending that risk on an account the user has
+    // explicitly benched is never worth it — it serves its existing access token for
+    // read-only probing, and re-enabling refreshes on the next real request.
+    // `force` still wins: an explicit re-auth/enable path may need the rotation.
+    if (!force && account.enabled === false) return true;
+
     if (!force && !isTokenExpiringSoon(account.expiresAt)) return true;
 
     // Coalesce concurrent refreshes
@@ -3000,6 +3011,9 @@ export class AccountManager {
         model: entry.model || defaultModel,
         stripBetaHeaders: true,
         configSourced: true,
+        // An explicitly-disabled provider in config stays benched across restarts —
+        // a second GLM account you keep configured but off (a teammate's, a spare).
+        enabled: entry.enabled !== false,
       });
       if (!entry.token) {
         const a = this.accounts.find(a => a.name === entry.name);

package/src/index.js

@@ -537,16 +537,23 @@ async function serverWorkerCommand() {
   const logTo = argValue('--log-to');
   if (logTo) config.logDir = logTo;
 
-  if (config.accounts.length === 0) {
+  // A provider-only fleet is valid: a teammate may have a GLM/Kimi key and no Claude
+  // account at all. Counting only `accounts` refused to start for them — the exact
+  // onboarding case this config-provider feature exists to serve.
+  if (config.accounts.length === 0 && !(Array.isArray(config.providers) && config.providers.length > 0)) {
     console.error('No accounts configured.\n');
     console.error('Add an account first:');
     console.error('  maxpool login            OAuth login via browser');
     console.error('  maxpool login --api      Add an API key');
+    console.error('  (or add a GLM/Kimi provider from the TUI: press p → a)');
     process.exit(1);
   }
 
   const accounts = await resolveAccounts(config);
-  if (accounts.length === 0) {
+  // Config providers are loaded further below (they need an AccountManager first), so
+  // a provider-only fleet legitimately has zero accounts HERE. Only bail when there is
+  // nothing to load at all.
+  if (accounts.length === 0 && !(Array.isArray(config.providers) && config.providers.length > 0)) {
     console.error('No valid accounts after initialization');
     process.exit(1);
   }