@askalf/dario 4.8.114 → 4.8.115

package/README.md

@@ -223,7 +223,7 @@ Tune via `~/.dario/config.json` → `overageGuard`, or CLI flags: `--overage-beh
 
 ## Capabilities
 
-- **Multi-account pool.** Drop 2+ Claude accounts in `~/.dario/accounts/` and pool mode auto-activates: every request routes to the account with the most headroom, multi-turn sessions pin to one account so the prompt cache survives, in-flight 429s fail over to a peer before your client sees an error. → [`docs/multi-account-pool.md`](./docs/multi-account-pool.md)
+- **Multi-account pool.** Drop Claude accounts in `~/.dario/accounts/` and pool mode auto-activates — one is enough to serve, so `dario accounts add` alone bootstraps a proxy with no `dario login` step. With more, every request routes to the account with the most headroom, multi-turn sessions pin to one account so the prompt cache survives, in-flight 429s fail over to a peer before your client sees an error. → [`docs/multi-account-pool.md`](./docs/multi-account-pool.md)
 - **Behavioral stealth (`--stealth`).** Static wire fidelity covers *what* the request looks like; `--stealth` adds *when* it arrives — response-length-correlated think time and 1.2–4.2s session-start latency, the inter-arrival pattern real interactive sessions have and agent loops don't. → [`docs/wire-fidelity.md`](./docs/wire-fidelity.md)
 - **Runs any non-Claude-Code agent.** A 64-entry schema-verified `TOOL_MAP` pre-maps Cline, Roo, Kilo, Cursor, Windsurf, Continue, Copilot, OpenHands, OpenClaw, Hermes, [hands](https://github.com/askalf/hands) tool names to CC's native set. No flag, no validator errors. → [`docs/integrations/agent-compat.md`](./docs/integrations/agent-compat.md)
 - **Recover output capability.** `dario proxy --system-prompt=partial` strips CC's tone/verbosity/no-comments constraints for 1.2–2.8× more output on open-ended work — empirically without flipping billing (the classifier doesn't read that slot). [Discussion #183](https://github.com/askalf/dario/discussions/183) has the per-prompt receipts. → [`docs/system-prompt.md`](./docs/system-prompt.md)

package/dist/accounts.d.ts

@@ -103,20 +103,20 @@ export declare const MIGRATED_LOGIN_ALIAS = "login";
  * keychain — whichever `loadCredentials` finds) into the pool under a
  * reserved alias.
  *
- * Why: the pool activation threshold is 2+ accounts in `~/.dario/accounts/`.
- * A user with one `dario login` account + one `dario accounts add bar`
- * ends up with only one account in `accounts/` (bar), pool mode never
- * trips, and the login account is effectively orphaned while pool is off.
- * Calling this on the first `dario accounts add` back-fills the login
- * account into the pool so the second `add` crosses the threshold.
+ * Why: any entry in `~/.dario/accounts/` activates pool mode (dario#618),
+ * and the pool routes only across `accounts/` entries. A user with one
+ * `dario login` account who runs `dario accounts add bar` would otherwise
+ * end up with a pool that serves only `bar` — the login account silently
+ * dropped from routing. Calling this on the first `dario accounts add`
+ * back-fills the login account so both keep serving.
  *
  * Idempotent: no-op if `accounts/` already has any entry, no-op if no
  * credentials are reachable anywhere. Returns the alias written to, or
  * `null` when nothing happened.
  *
  * The source `credentials.json` (if present) is left untouched — single-
- * account mode still reads it if the user later `accounts remove`s down
- * below the pool threshold. Migration is copy-only, never destructive.
+ * account mode still reads it if the user later `accounts remove`s the
+ * pool empty. Migration is copy-only, never destructive.
  *
  * @param preferredAlias caller may request a specific alias. If it's
  *   already the reserved `login` (or collides), falls back to `default`.
@@ -126,7 +126,7 @@ export declare function ensureLoginCredentialsInPool(alias?: string): Promise<st
  * Detect divergence between `accounts/login.json` and the current
  * `credentials.json` (or whichever store loadCredentials finds), and
  * re-sync if they differ. Returns one of:
- *   - 'no-pool'      : pool is single-account, nothing to do
+ *   - 'no-pool'      : accounts/ is empty (pool inactive), nothing to do
  *   - 'no-login'     : pool active but no `login` alias — back-fill
  *                       was never run, nothing to do
  *   - 'no-creds'     : login.json exists but no current credentials
@@ -142,5 +142,10 @@ export declare function ensureLoginCredentialsInPool(alias?: string): Promise<st
  * time — is now wrong on both fields, but its `expiresAt` metadata still
  * says "healthy" so the selector keeps picking it. Detect this at startup
  * and overwrite with the current canonical content. dario#235.
+ *
+ * Runs at any pool size ≥ 1: a lone `login` entry is a live pool member
+ * since pool-at-one (dario#618) and can go stale exactly the same way —
+ * e.g. after `accounts remove` shrinks a migrated pool back to just the
+ * back-filled snapshot.
  */
 export declare function resyncLoginFromCredentialsIfStale(): Promise<'no-pool' | 'no-login' | 'no-creds' | 'in-sync' | 'resynced'>;

package/dist/accounts.js

@@ -3,14 +3,15 @@
  *
  * Accounts live at `~/.dario/accounts/<alias>.json`. Single-account dario
  * uses `~/.dario/credentials.json` (plus the CC file + OS keychain fallback
- * paths in oauth.ts). When `~/.dario/accounts/` contains 2+ files the proxy
- * activates pool mode (see pool.ts). Each account has its own independent
- * OAuth lifecycle and can refresh without affecting the others.
+ * paths in oauth.ts). Any file in `~/.dario/accounts/` activates the proxy's
+ * pool mode (one account is enough — dario#618; see pool.ts). Each account
+ * has its own independent OAuth lifecycle and can refresh without affecting
+ * the others.
  *
  * `ensureLoginCredentialsInPool` (below) bridges the two stores on the
  * first `dario accounts add` — it promotes the user's existing login
- * credentials into the pool under a reserved alias so that adding a
- * second account actually trips the 2+ threshold and activates pooling.
+ * credentials into the pool under a reserved alias so the login account
+ * keeps serving once pool routing takes over.
  *
  * OAuth config (client_id, scopes, authorize URL, token URL) comes from
  * dario's cc-oauth-detect scanner — the same source the single-account
@@ -503,20 +504,20 @@ export const MIGRATED_LOGIN_ALIAS = 'login';
  * keychain — whichever `loadCredentials` finds) into the pool under a
  * reserved alias.
  *
- * Why: the pool activation threshold is 2+ accounts in `~/.dario/accounts/`.
- * A user with one `dario login` account + one `dario accounts add bar`
- * ends up with only one account in `accounts/` (bar), pool mode never
- * trips, and the login account is effectively orphaned while pool is off.
- * Calling this on the first `dario accounts add` back-fills the login
- * account into the pool so the second `add` crosses the threshold.
+ * Why: any entry in `~/.dario/accounts/` activates pool mode (dario#618),
+ * and the pool routes only across `accounts/` entries. A user with one
+ * `dario login` account who runs `dario accounts add bar` would otherwise
+ * end up with a pool that serves only `bar` — the login account silently
+ * dropped from routing. Calling this on the first `dario accounts add`
+ * back-fills the login account so both keep serving.
  *
  * Idempotent: no-op if `accounts/` already has any entry, no-op if no
  * credentials are reachable anywhere. Returns the alias written to, or
  * `null` when nothing happened.
  *
  * The source `credentials.json` (if present) is left untouched — single-
- * account mode still reads it if the user later `accounts remove`s down
- * below the pool threshold. Migration is copy-only, never destructive.
+ * account mode still reads it if the user later `accounts remove`s the
+ * pool empty. Migration is copy-only, never destructive.
  *
  * @param preferredAlias caller may request a specific alias. If it's
  *   already the reserved `login` (or collides), falls back to `default`.
@@ -550,7 +551,7 @@ export async function ensureLoginCredentialsInPool(alias = MIGRATED_LOGIN_ALIAS)
  * Detect divergence between `accounts/login.json` and the current
  * `credentials.json` (or whichever store loadCredentials finds), and
  * re-sync if they differ. Returns one of:
- *   - 'no-pool'      : pool is single-account, nothing to do
+ *   - 'no-pool'      : accounts/ is empty (pool inactive), nothing to do
  *   - 'no-login'     : pool active but no `login` alias — back-fill
  *                       was never run, nothing to do
  *   - 'no-creds'     : login.json exists but no current credentials
@@ -566,10 +567,15 @@ export async function ensureLoginCredentialsInPool(alias = MIGRATED_LOGIN_ALIAS)
  * time — is now wrong on both fields, but its `expiresAt` metadata still
  * says "healthy" so the selector keeps picking it. Detect this at startup
  * and overwrite with the current canonical content. dario#235.
+ *
+ * Runs at any pool size ≥ 1: a lone `login` entry is a live pool member
+ * since pool-at-one (dario#618) and can go stale exactly the same way —
+ * e.g. after `accounts remove` shrinks a migrated pool back to just the
+ * back-filled snapshot.
  */
 export async function resyncLoginFromCredentialsIfStale() {
     const aliases = await listAccountAliases();
-    if (aliases.length < 2)
+    if (aliases.length === 0)
         return 'no-pool';
     if (!aliases.includes(MIGRATED_LOGIN_ALIAS))
         return 'no-login';

package/dist/cli.js

@@ -778,7 +778,7 @@ async function accounts() {
             console.log('  No multi-account pool configured.');
             console.log('');
             console.log('  Pool mode activates automatically when ~/.dario/accounts/');
-            console.log('  has 2+ entries. Add the first with:');
+            console.log('  has any entry. Add the first with:');
             console.log('    dario accounts add <alias>');
             console.log('');
             console.log('  Single-account dario (the default) keeps working as-is');
@@ -791,7 +791,7 @@ async function accounts() {
         const now = Date.now();
         console.log(`  ${aliases.length} account${aliases.length === 1 ? '' : 's'} configured`);
         if (aliases.length === 1) {
-            console.log('  (Pool mode needs 2+ accounts — single-account mode until another is added.)');
+            console.log('  (Pool routing serves this account — add another to load-balance across subscriptions.)');
         }
         console.log('');
         for (const a of loaded) {
@@ -825,9 +825,9 @@ async function accounts() {
         }
         // If the user has `dario login` credentials on disk or in the keychain
         // and the pool is empty, migrate those credentials into the pool first.
-        // Otherwise the new account lives alone in accounts/, pool mode never
-        // trips the 2+ threshold, and the login account is orphaned from the
-        // pool until the user figures out they have to re-`accounts add` it.
+        // Otherwise the new account alone activates pool routing (#618) and the
+        // login account is orphaned from it until the user figures out they
+        // have to re-`accounts add` it.
         // Skip silently when the user explicitly picks the reserved alias —
         // their intent wins, they can run `accounts add` again for the login
         // migration under a different alias.
@@ -836,7 +836,7 @@ async function accounts() {
             if (migrated) {
                 console.log('');
                 console.log(`  Migrated your existing \`dario login\` account into the pool as "${migrated}".`);
-                console.log(`  (Pool mode activates on 2+ accounts — this back-fill plus "${alias}" crosses that.)`);
+                console.log(`  (It keeps serving alongside "${alias}" once pool routing takes over.)`);
             }
         }
         const manualAccountFlag = args.includes('--manual') || args.includes('--headless');
@@ -882,13 +882,15 @@ async function accounts() {
             console.log(`  Account "${alias}" added.`);
             console.log(`  Token expires in ${minutes} minutes (auto-refreshes in the background).`);
             const total = (await listAccountAliases()).length;
+            console.log('');
             if (total >= 2) {
-                console.log('');
                 console.log('  Pool mode is now active. Restart `dario proxy` to pick up the new account.');
             }
             else {
+                console.log('  `dario proxy` serves this account directly — no `dario login` needed.');
+                console.log('  (Restart the proxy if it is already running.)');
                 console.log('');
-                console.log('  Add at least one more account to activate pool routing:');
+                console.log('  Add more accounts to load-balance across subscriptions:');
                 console.log('    dario accounts add <another-alias>');
             }
             console.log('');

package/dist/doctor.js

@@ -747,11 +747,11 @@ export async function runChecks(opts = {}) {
             const now = Date.now();
             const expired = loaded.filter((a) => a.expiresAt <= now).length;
             checks.push({
-                status: expired > 0 ? 'warn' : aliases.length >= 2 ? 'ok' : 'info',
+                status: expired > 0 ? 'warn' : 'ok',
                 label: 'Pool',
                 detail: `${aliases.length} account${aliases.length === 1 ? '' : 's'}` +
                     (expired > 0 ? `, ${expired} expired` : '') +
-                    (aliases.length < 2 ? ' (pool activates at 2+)' : ''),
+                    (aliases.length === 1 ? ' (pool active — add more to load-balance)' : ''),
             });
             // Next-account-in-rotation surfacing. The proxy's per-request
             // selector picks by max headroom (with 7d_<family> per-model

package/dist/index.js

@@ -7,7 +7,7 @@
 export { startAutoOAuthFlow, refreshTokens, getAccessToken, getStatus, loadCredentials } from './oauth.js';
 export { startProxy, sanitizeError } from './proxy.js';
 // Multi-account pool API (pool activates automatically when ~/.dario/accounts/
-// contains 2+ accounts; see README for the progression from single-account
+// contains any account; see README for the progression from single-account
 // mode to pool mode).
 export { AccountPool, parseRateLimits } from './pool.js';
 export { listAccountAliases, loadAccount, loadAllAccounts, saveAccount, removeAccount, refreshAccountToken, addAccountViaOAuth, ensureLoginCredentialsInPool, MIGRATED_LOGIN_ALIAS, getAccountsDir, } from './accounts.js';

package/dist/mcp/tools.js

@@ -77,8 +77,8 @@ export function buildToolRegistry(data) {
                     const expiry = msLeft > 0 ? `${hours}h ${mins}m` : 'expired';
                     return `  ${a.alias.padEnd(20)} token expires in ${expiry}`;
                 });
-                const note = accounts.length < 2
-                    ? '\n\nPool mode activates at 2+ accounts — currently single-account.'
+                const note = accounts.length === 1
+                    ? '\n\nPool routing serves this account — add another to load-balance across subscriptions.'
                     : '';
                 return textResult(`${accounts.length} account${accounts.length === 1 ? '' : 's'}:\n${lines.join('\n')}${note}`);
             },
@@ -151,7 +151,7 @@ export function buildToolRegistry(data) {
                     return textResult([
                         'Mode: single-account',
                         '',
-                        'Analytics history is collected only in pool mode (2+ accounts in ~/.dario/accounts/).',
+                        'Analytics history is collected only in pool mode (any account in ~/.dario/accounts/).',
                         'For a one-off rate-limit snapshot from Anthropic, run `dario doctor --usage`.',
                     ].join('\n'));
                 }

package/dist/pool.js

@@ -1,10 +1,9 @@
 /**
  * Account pool — rate limit tracking, headroom routing, failover.
  *
- * Activated automatically when `~/.dario/accounts/` contains 2+ accounts.
- * Single-account dario (`~/.dario/credentials.json`) keeps the same code
- * path it has always had; the pool only runs when there are multiple
- * accounts to distribute against.
+ * Activated automatically when `~/.dario/accounts/` contains any account
+ * (one is enough — dario#618). Login-only dario (`~/.dario/credentials.json`,
+ * no accounts/ entries) keeps the same code path it has always had.
  */
 import { createHash, randomUUID } from 'node:crypto';
 /**

package/dist/proxy.d.ts

@@ -436,5 +436,15 @@ export declare function describeAuthReject(headers: IncomingMessage['headers']):
  * Pro/Max OAuth bearer. Pure + exported for unit testing.
  */
 export declare function upstreamAuthHeaders(upstreamApiKey: string, accessToken: string): Record<string, string>;
+/**
+ * Whether the proxy routes through the account pool. Any entry in
+ * `~/.dario/accounts/` activates the pool (#618) — so a cold
+ * `dario accounts add` bootstraps a servable proxy with no `dario login`
+ * step — and admin mode always does (#599), where the pool may start empty
+ * and be populated over HTTP. Login-only setups (no accounts/ entries) keep
+ * the single-account credentials.json path. Pure + exported for unit
+ * testing.
+ */
+export declare function shouldUsePool(accountCount: number, adminEnabled: boolean): boolean;
 export declare function startProxy(opts?: ProxyOptions): Promise<void>;
 export {};

package/dist/proxy.js

@@ -673,6 +673,18 @@ export function upstreamAuthHeaders(upstreamApiKey, accessToken) {
         ? { 'x-api-key': upstreamApiKey }
         : { 'Authorization': `Bearer ${accessToken}` };
 }
+/**
+ * Whether the proxy routes through the account pool. Any entry in
+ * `~/.dario/accounts/` activates the pool (#618) — so a cold
+ * `dario accounts add` bootstraps a servable proxy with no `dario login`
+ * step — and admin mode always does (#599), where the pool may start empty
+ * and be populated over HTTP. Login-only setups (no accounts/ entries) keep
+ * the single-account credentials.json path. Pure + exported for unit
+ * testing.
+ */
+export function shouldUsePool(accountCount, adminEnabled) {
+    return accountCount >= 1 || adminEnabled;
+}
 export async function startProxy(opts = {}) {
     const port = opts.port ?? DEFAULT_PORT;
     const host = opts.host ?? process.env.DARIO_HOST ?? DEFAULT_HOST;
@@ -828,9 +840,9 @@ export async function startProxy(opts = {}) {
     if (openaiBackend) {
         console.log(`  OpenAI-compat backend: ${openaiBackend.name} → ${openaiBackend.baseUrl}`);
     }
-    // Multi-account pool — activated when ~/.dario/accounts/ has 2+ entries (or
-    // whenever admin mode is on; see the #599 block below). Single-account dario
-    // keeps its existing code path unchanged.
+    // Multi-account pool — activated whenever ~/.dario/accounts/ has any entry
+    // (#618; or admin mode is on, see the #599 block below). Login-only dario
+    // (no accounts/ entries) keeps its existing credentials.json code path.
     //
     // Before loading the pool, check whether the back-filled `login` snapshot
     // has gone stale relative to credentials.json (dario#235). The single-
@@ -858,7 +870,7 @@ export async function startProxy(opts = {}) {
         catch { /* non-fatal — pool just starts empty */ }
     }
     const accountsList = await loadAllAccounts();
-    const pool = (accountsList.length >= 2 || adminEnabled) ? new AccountPool() : null;
+    const pool = shouldUsePool(accountsList.length, adminEnabled) ? new AccountPool() : null;
     // Per-model rate-limit bucket families seen during this proxy run. First-
     // sight is logged once when verbose so a new Anthropic bucket (e.g. an
     // eventual `7d_opus`) doesn't slip past unnoticed. Pure observability —
@@ -951,9 +963,10 @@ export async function startProxy(opts = {}) {
         }
     }
     else {
-        // Single-account mode — the classic `dario login` path. Admin mode never
-        // lands here: it always routes through the pool above (#599), which starts
-        // even with zero accounts and returns a clean 503 until one is added.
+        // Single-account mode — the classic `dario login` path, reached only when
+        // ~/.dario/accounts/ is empty. Any accounts/ entry routes through the pool
+        // above (#618), and admin mode always does (#599) — it starts even with
+        // zero accounts and returns a clean 503 until one is added.
         status = await getStatus();
         if (!status.authenticated) {
             console.error('[dario] Not authenticated. Run `dario login` first.');
@@ -3073,7 +3086,9 @@ export async function startProxy(opts = {}) {
         // feature is visible to single-account users (was previously only
         // logged when pool mode was active).
         const poolLine = pool
-            ? `Pool: ${accountsList.length} accounts loaded — headroom-routed, sticky for multi-turn`
+            ? accountsList.length === 1
+                ? 'Pool: 1 account loaded — add more with `dario accounts add <alias>` to load-balance'
+                : `Pool: ${accountsList.length} accounts loaded — headroom-routed, sticky for multi-turn`
             : 'Pool: single-account (run `dario accounts add <alias>` to pool multiple subscriptions)';
         // Display URL uses `localhost` for loopback binds and the literal host
         // for exposed binds, so the printed URL is the one a client would

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@askalf/dario",
-  "version": "4.8.114",
+  "version": "4.8.115",
   "description": "Use your Claude Pro/Max subscription in any tool — Cursor, Cline, Aider, the Agent SDK, your scripts — at subscription pricing, not per-token API bills. One local Anthropic + OpenAI-compatible endpoint.",
   "type": "module",
   "bin": {