@askalf/dario 3.4.4 → 3.4.5

package/README.md

@@ -37,7 +37,7 @@ export ANTHROPIC_API_KEY=dario                    # or OPENAI_API_KEY=dario
 
 Opus, Sonnet, Haiku — all models, streaming, tool use. **Zero dependencies.** ~2,000 lines of TypeScript. Works with Cursor, Continue, Aider, LiteLLM, Hermes, OpenClaw, or any tool that speaks the Anthropic or OpenAI API. Auto-launches under [Bun](https://bun.sh) when available for TLS fingerprint fidelity. **Auto-detects OAuth config from your installed CC binary** so dario stays in sync forever — Anthropic can rotate client IDs and dario picks them up on the next run.
 
-dario is built and maintained by [askalf](https://askalf.org) — the open-source foundation of the askalf agent platform. If you need more than a proxy, [see below](#askalf).
+dario is the **per-request layer** — one account, one workload, every request indistinguishable from CC on the wire. Session-level and account-level concerns (multi-account pooling, behavioral-classifier shaping, 24/7 fleets) live a layer above dario, in [askalf](https://askalf.org) — [see below](#askalf). Both are built by the same team on the same OAuth and billing infrastructure.
 
 <table>
 <tr>
@@ -91,7 +91,7 @@ dario is the only proxy that solves this. Instead of transforming your requests
 | **Approach** | Template replay — sends CC's actual request | Signal matching or none |
 | **Tools** | CC's exact tool definitions sent upstream | Client tools (detected) |
 | **Max plan limits** | Used correctly | Bypassed — billed separately |
-| **Detection resistance** | Undetectable without flagging CC itself | Detected by tool names, field order, effort level, etc. |
+| **Detection resistance** | Undetectable at the per-request level without flagging CC itself | Detected by tool names, field order, effort level, etc. |
 | **Dependencies** | 0 | Many |
 
 <details>
@@ -521,11 +521,11 @@ curl http://localhost:3456/health
 
 ## askalf
 
-dario solves the API access problem — your $200/mo subscription, usable everywhere, billed correctly.
+**dario and askalf solve different layers of the same problem.**
 
-But a proxy has a ceiling. Every request still runs on your single account, with your subscription's rate limits, on your machine. When you need to scale beyond that — multiple accounts, persistent browser sessions, desktop control, scheduled workflows, a fleet of agents that can run while you sleep — that's what [askalf](https://askalf.org) is built for.
+dario is the per-request layer: one account, one workload, every request on the wire indistinguishable from Claude Code. It's what you reach for when you want your Max/Pro subscription usable from any tool that speaks the Anthropic or OpenAI API. It does not pool accounts, shape sessions, distribute load, or care about cumulative behavioral signals — those are not per-request concerns, and solving them at the per-request layer is a category error.
 
-**askalf** is the agent platform built on top of the same OAuth and billing infrastructure that powers dario:
+**askalf** is the layer above that: multi-account pooling behind one endpoint, session and workload shaping to stay under Anthropic's session-level classifiers, persistent browser and desktop sessions, scheduling, and a hosted fleet that runs 24/7. Built on the same OAuth and billing infrastructure as dario.
 
 | | dario | askalf |
 |---|---|---|
@@ -578,6 +578,9 @@ Dario auto-detects OAuth config from your installed Claude Code binary. When CC
 **I'm hitting rate limits. What do I do?**
 Claude subscriptions have rolling 5-hour and 7-day usage windows. Check your utilization with Claude Code's `/usage` command or the [statusline](https://code.claude.com/docs/en/statusline). Rate limit errors from dario include utilization percentages and reset times so you can see exactly when capacity returns.
 
+**My multi-agent workload is getting reclassified to overage even though dario template-replays per request. Why?**
+Because reclassification at high agent volume is not a per-request problem. Anthropic's classifier operates on cumulative per-OAuth-session behavioral aggregates — token throughput, conversation depth, streaming duration, inter-arrival timing, thinking-block volume. Dario can make each individual request indistinguishable from Claude Code and still hit this wall on a long-running agent session, because the wall isn't at the request level. Thorough diagnostic work on this was contributed by [@belangertrading](https://github.com/belangertrading) in [#23](https://github.com/askalf/dario/issues/23), including the per-request v3.4.3 hardening that landed as a result. For the session-layer shaping itself — multi-account pooling, session rotation, workload distribution that keeps any single account from concentrating the behavioral signal — that's what [askalf](https://askalf.org) is built for. Different layer, different tool.
+
 If you're running a multi-agent workload and consistently hitting limits, [askalf](https://askalf.org) distributes load across multiple accounts automatically.
 
 **What are the usage limits?**
@@ -675,7 +678,7 @@ npm run dev   # runs with tsx (no build needed)
 | Who | Contributions |
 |-----|---------------|
 | [@GodsBoy](https://github.com/GodsBoy) | Proxy authentication, token redaction, error sanitization ([#2](https://github.com/askalf/dario/pull/2)) |
-| [@belangertrading](https://github.com/belangertrading) | Billing classification investigation ([#4](https://github.com/askalf/dario/issues/4)), billing reclassification root cause ([#7](https://github.com/askalf/dario/issues/7)) |
+| [@belangertrading](https://github.com/belangertrading) | Billing classification investigation ([#4](https://github.com/askalf/dario/issues/4)), cache_control fingerprinting ([#6](https://github.com/askalf/dario/issues/6)), billing reclassification root cause ([#7](https://github.com/askalf/dario/issues/7)), OAuth client_id discovery ([#12](https://github.com/askalf/dario/issues/12)), multi-agent session-level billing analysis ([#23](https://github.com/askalf/dario/issues/23)) |
 
 ## License
 

package/dist/cc-template.d.ts

@@ -15,6 +15,7 @@ export declare const CC_TOOL_DEFINITIONS: {
 export declare const CC_SYSTEM_PROMPT: string;
 /** CC's agent identity string. */
 export declare const CC_AGENT_IDENTITY: string;
+export declare function scrubFrameworkIdentifiers(text: string): string;
 /** Client tool name → CC tool mapping with parameter translation. */
 interface ToolMapping {
     ccTool: string;

package/dist/cc-template.js

@@ -17,6 +17,28 @@ export const CC_TOOL_DEFINITIONS = TEMPLATE.tools;
 export const CC_SYSTEM_PROMPT = TEMPLATE.system_prompt;
 /** CC's agent identity string. */
 export const CC_AGENT_IDENTITY = TEMPLATE.agent_identity;
+// Framework identifiers that would flag non-CC usage. Stripped from the system
+// prompt and from message content text blocks before the request goes upstream.
+const FRAMEWORK_PATTERNS = [
+    // Compound/hyphenated patterns run first so their halves can't be eaten
+    // by the simpler word-level patterns below.
+    /\b(roo[- ]?cline|big[- ]?agi|claude[- ]?bridge)\b/gi,
+    /\b(openclaw|hermes|aider|cursor|windsurf|cline|continue|copilot|cody)\b/gi,
+    /\b(librechat|typingmind)\b/gi,
+    /\b(openai|gpt-4|gpt-3\.5)\b/gi,
+    /powered by [a-z]+/gi,
+    /\bgateway\b/gi,
+    // OC's sessions_* tool-name prefix — flagged as a fingerprint in dario#23.
+    /\bsessions_[a-z_]+\b/gi,
+];
+export function scrubFrameworkIdentifiers(text) {
+    let result = text;
+    for (const pattern of FRAMEWORK_PATTERNS) {
+        pattern.lastIndex = 0;
+        result = result.replace(pattern, '');
+    }
+    return result;
+}
 const TOOL_MAP = {
     // Direct maps
     bash: { ccTool: 'Bash', translateArgs: (a) => ({ command: a.cmd || a.command || a.c || '' }) },
@@ -194,15 +216,31 @@ export function buildCCRequest(clientBody, billingTag, cache1h, identity, opts =
             .map(b => b.text)
             .join('\n\n');
     }
-    // Strip framework identifiers from system prompt that would flag non-CC usage
-    const FRAMEWORK_PATTERNS = [
-        /\b(openclaw|hermes|aider|cursor|windsurf|cline|continue|copilot|cody)\b/gi,
-        /\b(openai|gpt-4|gpt-3\.5)\b/gi,
-        /powered by [a-z]+/gi,
-        /\bgateway\b/gi,
-    ];
-    for (const pattern of FRAMEWORK_PATTERNS) {
-        systemText = systemText.replace(pattern, '');
+    systemText = scrubFrameworkIdentifiers(systemText);
+    // Also scrub framework identifiers from message content text blocks.
+    // Clients often inject their product name into user/tool messages as well,
+    // and the system-prompt-only scrub used to miss those.
+    for (const msg of messages) {
+        if (typeof msg.content === 'string') {
+            msg.content = scrubFrameworkIdentifiers(msg.content);
+        }
+        else if (Array.isArray(msg.content)) {
+            for (const block of msg.content) {
+                if (block.type === 'text' && typeof block.text === 'string') {
+                    block.text = scrubFrameworkIdentifiers(block.text);
+                }
+                if (block.type === 'tool_result' && typeof block.content === 'string') {
+                    block.content = scrubFrameworkIdentifiers(block.content);
+                }
+                if (block.type === 'tool_result' && Array.isArray(block.content)) {
+                    for (const sub of block.content) {
+                        if (sub.type === 'text' && typeof sub.text === 'string') {
+                            sub.text = scrubFrameworkIdentifiers(sub.text);
+                        }
+                    }
+                }
+            }
+        }
     }
     // ── Build the CC request from template ──
     // Key order matches CC v2.1.104 exactly:

package/dist/proxy.js

@@ -147,6 +147,7 @@ const ORCHESTRATION_TAG_NAMES = [
     'system-reminder', 'env', 'system_information', 'current_working_directory',
     'operating_system', 'default_shell', 'home_directory', 'task_metadata',
     'directories', 'thinking',
+    'agent_persona', 'agent_context', 'tool_context', 'persona', 'tool_call',
 ];
 const ORCHESTRATION_PATTERNS = ORCHESTRATION_TAG_NAMES.flatMap(tag => [
     new RegExp(`<${tag}\\b[^>]*>[\\s\\S]*?<\\/${tag}>`, 'gi'),

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@askalf/dario",
-  "version": "3.4.4",
+  "version": "3.4.5",
   "description": "Use your Claude subscription as an API. No API key needed. Local proxy for Claude Max/Pro subscriptions.",
   "type": "module",
   "bin": {