@askalf/dario 4.8.146 → 4.8.148

package/dist/cc-template.d.ts

@@ -501,15 +501,6 @@ export declare function applyCcPromptCaching(ccRequest: Record<string, unknown>,
 export declare function dedupeToolsByName<T extends {
     name?: unknown;
 }>(tools: T[]): T[];
-/**
- * A genuine Claude Code client is identified by TWO markers together:
- * the `x-anthropic-billing-header:` system block at [0] (the discriminator
- * extractSystemText and extractTemplate key on) AND CC's own identity block
- * at [1] ("You are Claude Code…" / the Claude Agent SDK variant). Requiring
- * both keeps a non-CC framework that replays a billing-tagged body (e.g. a
- * Kilo client behind a second proxy hop) on the detector path instead of
- * passthrough. Exported for tests.
- */
 export declare function isGenuineCCClient(clientBody: Record<string, unknown>): boolean;
 export declare function buildCCRequest(clientBody: Record<string, unknown>, billingTag: string, cacheControl: CacheControl, identity: {
     deviceId: string;

package/dist/cc-template.js

@@ -1332,12 +1332,37 @@ export function dedupeToolsByName(tools) {
 /**
  * A genuine Claude Code client is identified by TWO markers together:
  * the `x-anthropic-billing-header:` system block at [0] (the discriminator
- * extractSystemText and extractTemplate key on) AND CC's own identity block
- * at [1] ("You are Claude Code…" / the Claude Agent SDK variant). Requiring
- * both keeps a non-CC framework that replays a billing-tagged body (e.g. a
- * Kilo client behind a second proxy hop) on the detector path instead of
- * passthrough. Exported for tests.
+ * extractSystemText and extractTemplate key on) AND a CC-origin block at [1].
+ * Requiring both keeps a non-CC framework that replays a billing-tagged body
+ * (e.g. a Kilo client behind a second proxy hop) on the detector path instead
+ * of passthrough. Exported for tests.
+ *
+ * CC is not one request shape. Besides the main loop ("You are Claude Code…" /
+ * the Claude Agent SDK variant), a single CC session also emits:
+ *  - sub-agent (Task/Agent tool) requests — system[1] is the agent prompt,
+ *    "You are an agent for Claude Code, Anthropic's official CLI for
+ *    Claude.…" (exact bytes in the CC v2.1.205 bundle; it neither starts
+ *    with "You are Claude Code" nor mentions the Agent SDK), and
+ *  - auto-mode permission-classifier requests — system[1] is the ~106KB
+ *    "You are a security monitor for autonomous AI coding agents" prompt,
+ *    fired once per gated tool call (live-captured via loopback MITM).
+ * Both missed the v4.8.146 detector and fell onto the template path, where
+ * the ~25KB template prepend re-billed per request shape per cache window —
+ * the #678 remote re-test burned +19% vs +2% direct on exactly the run where
+ * CC fanned out parallel sub-agents. Openers are matched with startsWith,
+ * same anti-replay posture as the main-loop marker: none of them appear at
+ * system[1] in any known non-CC framework's wire shape.
+ *
+ * Known gap: named/custom agents (~/.claude/agents, Explore/Plan) put their
+ * operator-authored definition text at system[1] with no stable CC marker —
+ * those still ride the template path until a live capture pins a reliable
+ * discriminator.
  */
+const CC_ORIGIN_SYSTEM_OPENERS = [
+    'You are Claude Code', // main loop, cli entrypoint
+    'You are an agent for Claude Code', // sub-agents (Task/Agent tool)
+    'You are a security monitor for autonomous AI coding agents', // auto-mode permission classifier
+];
 export function isGenuineCCClient(clientBody) {
     const sys = clientBody.system;
     if (!Array.isArray(sys) || sys.length < 2)
@@ -1348,7 +1373,8 @@ export function isGenuineCCClient(clientBody) {
     const second = sys[1];
     if (typeof second?.text !== 'string')
         return false;
-    return second.text.startsWith('You are Claude Code') || second.text.includes('Claude Agent SDK');
+    const text = second.text;
+    return CC_ORIGIN_SYSTEM_OPENERS.some((opener) => text.startsWith(opener)) || text.includes('Claude Agent SDK');
 }
 export function buildCCRequest(clientBody, billingTag, cacheControl, identity, opts = {}) {
     const model = clientBody.model || 'claude-sonnet-5';

package/dist/live-fingerprint.d.ts

@@ -282,7 +282,7 @@ export declare function _resetInstalledVersionProbeForTest(): void;
  */
 export declare const SUPPORTED_CC_RANGE: {
     readonly min: "1.0.0";
-    readonly maxTested: "2.1.204";
+    readonly maxTested: "2.1.205";
 };
 /**
  * Compare two dotted-numeric version strings. Returns negative if `a<b`,

package/dist/live-fingerprint.js

@@ -806,7 +806,7 @@ export function _resetInstalledVersionProbeForTest() {
  */
 export const SUPPORTED_CC_RANGE = {
     min: '1.0.0',
-    maxTested: '2.1.204',
+    maxTested: '2.1.205',
 };
 /**
  * Compare two dotted-numeric version strings. Returns negative if `a<b`,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@askalf/dario",
-  "version": "4.8.146",
+  "version": "4.8.148",
   "description": "Use your Claude Pro/Max subscription in any tool — Cursor, Cline, Aider, the Agent SDK, your scripts — at subscription pricing, not per-token API bills. One local Anthropic + OpenAI-compatible endpoint.",
   "type": "module",
   "bin": {