maxpool 1.8.2 → 1.8.4

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "maxpool",
-  "version": "1.8.2",
+  "version": "1.8.4",
   "description": "Multi-account Claude Code proxy with adaptive, rate-aware load balancing across Claude accounts",
   "type": "module",
   "main": "src/index.js",

package/src/capacity-ledger.js

@@ -15,11 +15,18 @@
  * Pre-mortem (2026-08-22) blockers B1/B2 + majors M3-M7 are the load-bearing comments.
  */
 
+// v3 (2026-08-23): every v2 row was written before the joined-mid-window fix, so each
+// account's first cycle is a TAIL-only observation recorded as `complete` (measured on
+// the live ledger: 14.6, 64.3, 64.4 and 74.4 minutes for 5h windows — all four rows it
+// held). Rather than drop history a second time, v3 MIGRATES: closed v2 rows are kept
+// and shown, marked partial with a reason, so they never reach an average and never
+// re-alert. Forward rows are correct by construction.
+//
 // v2 (2026-08-23): v1 histories are POISONED and are deliberately dropped on load.
 // The OAuth reset-stamp jitter (see AccountManager.noteCapacityWindowAdvance) shredded
 // real windows into slivers and recorded future-dated weekly cycles, so a v1 payload's
 // averages are wrong for weeks. Starting empty costs one window; keeping it costs trust.
-const SCHEMA_VERSION = 2;
+const SCHEMA_VERSION = 3;
 
 // Two closes this far apart are the SAME boundary observed twice (a clock-close and a
 // stamp-advance racing across the boundary second), not two windows.
@@ -32,13 +39,39 @@ export class CapacityLedger {
     this._now = now;
     // accountName → { ses: {open?, closed: []}, wk: {open?, closed: []}, days: {utcDay: {tokens, partial}} }
     this._accounts = new Map();
+    // True only for a ledger restored with no usable history — see fromSerialized.
+    // Cleared per account+window once that window's first boundary is behind us.
+    this._joinedMidWindow = false;
   }
 
   /** Restore from a serialized payload (state.json). Tolerant: unknown schemaVersion →
    *  start empty and KEEP the file (the caller preserves it); a corrupt shape → empty. */
   static fromSerialized(payload, { now = () => Date.now() } = {}) {
     const l = new CapacityLedger({ now });
-    if (!payload || payload.schemaVersion !== SCHEMA_VERSION) return l;
+    // v2 → v3: keep the rows, demote them. They were all written before the
+    // joined-mid-window fix, so each is a partial observation mislabelled complete.
+    if (payload?.schemaVersion === 2) {
+      const migrated = { schemaVersion: SCHEMA_VERSION, accounts: {} };
+      for (const [name, rec] of Object.entries(payload.accounts || {})) {
+        migrated.accounts[name] = {
+          ses: { open: rec.ses?.open || null,
+                 closed: (rec.ses?.closed || []).map(c => ({ ...c, complete: false, partialReason: 'pre-v3-unverified' })) },
+          wk: { open: rec.wk?.open || null,
+                closed: (rec.wk?.closed || []).map(c => ({ ...c, complete: false, partialReason: 'pre-v3-unverified' })) },
+          days: rec.days || {},
+        };
+      }
+      return CapacityLedger.fromSerialized(migrated, { now });
+    }
+    if (!payload || payload.schemaVersion !== SCHEMA_VERSION) {
+      // No history to continue: whatever window each account is in RIGHT NOW is
+      // already in progress, so the next cycle we close saw only its tail. Flag it so
+      // it is shown but never averaged (live 2026-08-23: the first GLM cycle after the
+      // v1.8.1 migration read 21,192 tokens for a 5h window it had watched 14.6 min —
+      // and with one cycle recorded, that sliver WAS every column).
+      l._joinedMidWindow = true;
+      return l;
+    }
     try {
       for (const [name, rec] of Object.entries(payload.accounts || {})) {
         const a = { ses: { open: null, closed: [] }, wk: { open: null, closed: [] }, days: {} };
@@ -91,7 +124,12 @@ export class CapacityLedger {
       // reset stamp was never learned). startedAt is the accrual time then — the cycle
       // will be flagged partial by the caller if the boot gap warrants it (B1/B2).
       if (!rec[w].open) {
-        rec[w].open = { startedAt: at, tokensSoFar: 0, lastAccrualAt: at, complete: true, disabledDuring: false };
+        const joined = this._joinedMidWindow && rec[w].closed.length === 0;
+        rec[w].open = {
+          startedAt: at, tokensSoFar: 0, lastAccrualAt: at,
+          complete: !joined, disabledDuring: false,
+          ...(joined ? { partialReason: 'joined-mid-window' } : {}),
+        };
       }
       rec[w].open.tokensSoFar += input + output;
       rec[w].open.lastAccrualAt = at;
@@ -162,6 +200,7 @@ export class CapacityLedger {
       tokens: open.tokensSoFar,
       complete: open.complete,
       disabledDuring: open.disabledDuring,
+      ...(open.partialReason ? { partialReason: open.partialReason } : {}),
       resetAt,
     });
     if (rec[window].closed.length > MAX_CYCLES_PER_WINDOW) rec[window].closed.shift();