maxpool 1.8.4 → 1.8.6

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "maxpool",
-  "version": "1.8.4",
+  "version": "1.8.6",
   "description": "Multi-account Claude Code proxy with adaptive, rate-aware load balancing across Claude accounts",
   "type": "module",
   "main": "src/index.js",

package/src/account-manager.js

@@ -3066,7 +3066,13 @@ export class AccountManager {
     //    window (>=5h) — the 60s epsilon separates it by three orders of magnitude.
     //    Provider stamps (z.ai/Kimi probe) are absolute and never jitter.
     const nowMs = Date.now();
-    const boundary = nextResetAt <= nowMs ? nowMs : nextResetAt;
+    // A close can never be dated in the FUTURE. An advance stamp legitimately points
+    // at the NEW window's reset (a fresh 5h away) — that is evidence the OLD window
+    // rolled, not the moment it rolled. Close at NOW (live 2026-08-23: a 3,658-token
+    // cycle was recorded as endedAt 4.9h in the future; the invariant checker caught
+    // it minutes later). `min` also floors the late-probe case (a stamp already
+    // expired) — endedAt is always within [start, now].
+    const boundary = Math.min(nextResetAt, nowMs);
     if (boundary - prevResetAt < WINDOW_ADVANCE_EPSILON_MS) return;
     this.capacity.closeCycle(accountName, window, boundary, { resetAt: prevResetAt });
   }

package/src/capacity-ledger.js

@@ -34,6 +34,17 @@ const SAME_BOUNDARY_MS = 5_000;
 const MAX_CYCLES_PER_WINDOW = 50;
 const MAX_DAY_BUCKETS = 10;
 
+// Demote a pre-v3 closed cycle: unverifiable (every one predates the joined-mid-window
+// fix) AND untrustworthy in its timestamps (the v1.8.4 advance-close could date a row
+// hours into the future — live: a row ending 19:54 while the clock read 15:02). Also
+// CLAMPS a future endedAt to startedAt so the stored row itself stops violating
+// invariants after migration, not just the averages.
+function demote(c) {
+  const fixed = { ...c, complete: false, partialReason: 'pre-v3-unverified' };
+  if (fixed.endedAt > Date.now() + 60_000) fixed.endedAt = fixed.startedAt;
+  return fixed;
+}
+
 export class CapacityLedger {
   constructor({ now = () => Date.now() } = {}) {
     this._now = now;
@@ -55,9 +66,9 @@ export class CapacityLedger {
       for (const [name, rec] of Object.entries(payload.accounts || {})) {
         migrated.accounts[name] = {
           ses: { open: rec.ses?.open || null,
-                 closed: (rec.ses?.closed || []).map(c => ({ ...c, complete: false, partialReason: 'pre-v3-unverified' })) },
+                 closed: (rec.ses?.closed || []).map(c => demote(c)) },
           wk: { open: rec.wk?.open || null,
-                closed: (rec.wk?.closed || []).map(c => ({ ...c, complete: false, partialReason: 'pre-v3-unverified' })) },
+                closed: (rec.wk?.closed || []).map(c => demote(c)) },
           days: rec.days || {},
         };
       }