@askalf/dario 4.8.154 → 5.0.1

package/dist/runtime-fingerprint.d.ts

@@ -6,17 +6,11 @@
  * That ClientHello (JA3/JA4 hash) is what Anthropic's TLS-layer classifier
  * actually sees on the wire.
  *
- * Dario has two transports with different exposure to this axis:
- *
- *   - **Shim mode** runs inside CC's own process (NODE_OPTIONS=--require),
- *     so its outbound fetch rides on CC's TLS stack by construction.
- *     Nothing to reconcile — the shim is always TLS-matched to CC.
- *
- *   - **Proxy mode** is a separate process holding its own TLS sessions
- *     to api.anthropic.com. Anthropic sees the proxy's TLS fingerprint,
- *     not the consumer client's. If the proxy runs under Node, the
- *     ClientHello is OpenSSL-shaped — distinct from Bun's BoringSSL shape.
- *     That's the JA3 gap this module flags.
+ * The proxy is a separate process holding its own TLS sessions to
+ * api.anthropic.com. Anthropic sees the proxy's TLS fingerprint, not the
+ * consumer client's. If the proxy runs under Node, the ClientHello is
+ * OpenSSL-shaped — distinct from Bun's BoringSSL shape. That's the JA3
+ * gap this module flags.
  *
  * Mitigation today: dario auto-relaunches under Bun when Bun is on PATH
  * (see top of `src/cli.ts`). When Bun isn't available the auto-relaunch

package/dist/runtime-fingerprint.js

@@ -6,17 +6,11 @@
  * That ClientHello (JA3/JA4 hash) is what Anthropic's TLS-layer classifier
  * actually sees on the wire.
  *
- * Dario has two transports with different exposure to this axis:
- *
- *   - **Shim mode** runs inside CC's own process (NODE_OPTIONS=--require),
- *     so its outbound fetch rides on CC's TLS stack by construction.
- *     Nothing to reconcile — the shim is always TLS-matched to CC.
- *
- *   - **Proxy mode** is a separate process holding its own TLS sessions
- *     to api.anthropic.com. Anthropic sees the proxy's TLS fingerprint,
- *     not the consumer client's. If the proxy runs under Node, the
- *     ClientHello is OpenSSL-shaped — distinct from Bun's BoringSSL shape.
- *     That's the JA3 gap this module flags.
+ * The proxy is a separate process holding its own TLS sessions to
+ * api.anthropic.com. Anthropic sees the proxy's TLS fingerprint, not the
+ * consumer client's. If the proxy runs under Node, the ClientHello is
+ * OpenSSL-shaped — distinct from Bun's BoringSSL shape. That's the JA3
+ * gap this module flags.
  *
  * Mitigation today: dario auto-relaunches under Bun when Bun is on PATH
  * (see top of `src/cli.ts`). When Bun isn't available the auto-relaunch
@@ -97,8 +91,8 @@ export function classifyRuntimeFingerprint(runningUnderBun, availableBunVersion,
         runtime: 'node',
         runtimeVersion: nodeVersion,
         detail: `Node ${nodeVersion} — Bun not installed; proxy-mode TLS fingerprint diverges from Claude Code`,
-        hint: 'Install Bun (https://bun.sh) so dario can auto-relaunch under it, or use shim mode ' +
-            '(`dario shim -- claude …`) which runs inside CC\'s own process and inherits its TLS stack.',
+        hint: 'Install Bun (https://bun.sh) so dario can auto-relaunch under it and its TLS ClientHello ' +
+            'matches Claude Code\'s.',
     };
 }
 /**

package/dist/session-rotation.d.ts

@@ -39,9 +39,14 @@
  * timers, or UUID sources. The proxy injects a `() => string` id factory
  * (randomUUID) and `() => number` rng so both are swappable in tests.
  *
- * Pool mode is unaffected — each account carries a stable identity.sessionId
- * for its lifetime, and the caller doesn't consult this registry. This
- * module only governs the single-account SESSION_ID slot.
+ * v5.0 (pool-as-primitive): this registry is now the ONE session-id mechanism.
+ * Every request carries an `accountKey` — the selected pool account's alias
+ * (or a synthetic key in upstream-api-key mode) — so each account keeps its
+ * own idle/jitter/max-age lifecycle. The caller passes the account's minted
+ * `identity.sessionId` as a `seedId`, used only for that account's first
+ * session so the first request stays byte-identical to the pre-v5 stable id;
+ * idle/age rotation then mints fresh ids via `newId()`. `perClient` still
+ * sub-partitions each account's sessions by the caller's session header.
  */
 export interface SessionRotationConfig {
     /** Idle threshold in ms: if no traffic for this long, the session rotates on the next request. */
@@ -106,19 +111,26 @@ export declare class SessionRegistry {
     private readonly entries;
     constructor(cfg: SessionRotationConfig, newId: () => string, rng?: () => number, maxEntries?: number);
     /**
-     * Resolve the outbound session id for a given client key at time `now`.
+     * Resolve the outbound session id for a given account + client key at `now`.
      *
-     * `clientKey` is the caller-side session header when cfg.perClient is
-     * true, and ignored (replaced with 'default') when perClient is false.
-     * Callers pass the raw header value and let the registry decide —
-     * otherwise flipping perClient at runtime would require threading
+     * `accountKey` partitions sessions by the selected pool account so each
+     * account rotates on its own idle timer. `clientKey` is the caller-side
+     * session header, added as a sub-partition only when cfg.perClient is true
+     * (ignored otherwise). Callers pass the raw header value and let the registry
+     * decide — otherwise flipping perClient at runtime would require threading
      * the decision to every call site.
      *
+     * `seedId`, when provided, is used as the session id only on the FIRST
+     * creation for a key (decision === 'rotate-new'): it lets the caller carry a
+     * pre-minted id (the account's identity.sessionId) into the registry so the
+     * account's first request is byte-identical to the pre-v5 stable id. Idle /
+     * age rotations ignore the seed and mint a fresh id via newId().
+     *
      * Updates lastUsedAt on the entry (whether kept or freshly minted),
      * and nudges the entry to the end of the insertion-order map so
      * eviction under maxEntries pressure is LRU.
      */
-    getOrCreate(clientKey: string | undefined, now: number): RegistryResult;
+    getOrCreate(accountKey: string, clientKey: string | undefined, now: number, seedId?: string): RegistryResult;
     /**
      * Read the current id for a client key without touching lastUsedAt.
      *
@@ -126,7 +138,7 @@ export declare class SessionRegistry {
      * reflect the most recently assigned session id but must not count
      * as activity for rotation purposes. Returns undefined if no entry.
      */
-    peek(clientKey: string | undefined): string | undefined;
+    peek(accountKey: string, clientKey: string | undefined): string | undefined;
     size(): number;
     clear(): void;
     private evictIfOverCap;

package/dist/session-rotation.js

@@ -39,9 +39,14 @@
  * timers, or UUID sources. The proxy injects a `() => string` id factory
  * (randomUUID) and `() => number` rng so both are swappable in tests.
  *
- * Pool mode is unaffected — each account carries a stable identity.sessionId
- * for its lifetime, and the caller doesn't consult this registry. This
- * module only governs the single-account SESSION_ID slot.
+ * v5.0 (pool-as-primitive): this registry is now the ONE session-id mechanism.
+ * Every request carries an `accountKey` — the selected pool account's alias
+ * (or a synthetic key in upstream-api-key mode) — so each account keeps its
+ * own idle/jitter/max-age lifecycle. The caller passes the account's minted
+ * `identity.sessionId` as a `seedId`, used only for that account's first
+ * session so the first request stays byte-identical to the pre-v5 stable id;
+ * idle/age rotation then mints fresh ids via `newId()`. `perClient` still
+ * sub-partitions each account's sessions by the caller's session header.
  */
 /**
  * Pure decision: should the given entry be rotated at `now`?
@@ -95,20 +100,29 @@ export class SessionRegistry {
         this.maxEntries = maxEntries;
     }
     /**
-     * Resolve the outbound session id for a given client key at time `now`.
+     * Resolve the outbound session id for a given account + client key at `now`.
      *
-     * `clientKey` is the caller-side session header when cfg.perClient is
-     * true, and ignored (replaced with 'default') when perClient is false.
-     * Callers pass the raw header value and let the registry decide —
-     * otherwise flipping perClient at runtime would require threading
+     * `accountKey` partitions sessions by the selected pool account so each
+     * account rotates on its own idle timer. `clientKey` is the caller-side
+     * session header, added as a sub-partition only when cfg.perClient is true
+     * (ignored otherwise). Callers pass the raw header value and let the registry
+     * decide — otherwise flipping perClient at runtime would require threading
      * the decision to every call site.
      *
+     * `seedId`, when provided, is used as the session id only on the FIRST
+     * creation for a key (decision === 'rotate-new'): it lets the caller carry a
+     * pre-minted id (the account's identity.sessionId) into the registry so the
+     * account's first request is byte-identical to the pre-v5 stable id. Idle /
+     * age rotations ignore the seed and mint a fresh id via newId().
+     *
      * Updates lastUsedAt on the entry (whether kept or freshly minted),
      * and nudges the entry to the end of the insertion-order map so
      * eviction under maxEntries pressure is LRU.
      */
-    getOrCreate(clientKey, now) {
-        const key = this.cfg.perClient ? (clientKey && clientKey.length > 0 ? clientKey : 'default') : 'default';
+    getOrCreate(accountKey, clientKey, now, seedId) {
+        const key = this.cfg.perClient
+            ? `${accountKey}\u0000${clientKey && clientKey.length > 0 ? clientKey : 'default'}`
+            : accountKey;
         const existing = this.entries.get(key);
         const decision = decideSessionRotation(existing, now, this.cfg);
         if (decision === 'keep' && existing) {
@@ -120,7 +134,8 @@ export class SessionRegistry {
         }
         const jitterOffset = this.cfg.jitterMs > 0 ? Math.floor(this.rng() * this.cfg.jitterMs) : 0;
         const entry = {
-            upstreamSessionId: this.newId(),
+            // Seed only a brand-new key; a rotation (idle/age) always mints fresh.
+            upstreamSessionId: decision === 'rotate-new' && seedId ? seedId : this.newId(),
             createdAt: now,
             lastUsedAt: now,
             idleJitterOffsetMs: jitterOffset,
@@ -136,8 +151,10 @@ export class SessionRegistry {
      * reflect the most recently assigned session id but must not count
      * as activity for rotation purposes. Returns undefined if no entry.
      */
-    peek(clientKey) {
-        const key = this.cfg.perClient ? (clientKey && clientKey.length > 0 ? clientKey : 'default') : 'default';
+    peek(accountKey, clientKey) {
+        const key = this.cfg.perClient
+            ? `${accountKey}\u0000${clientKey && clientKey.length > 0 ? clientKey : 'default'}`
+            : accountKey;
         return this.entries.get(key)?.upstreamSessionId;
     }
     size() {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@askalf/dario",
-  "version": "4.8.154",
+  "version": "5.0.1",
   "description": "Use your Claude Pro/Max subscription in any tool — Cursor, Cline, Aider, the Agent SDK, your scripts — at subscription pricing, not per-token API bills. One local Anthropic + OpenAI-compatible endpoint.",
   "type": "module",
   "bin": {
@@ -20,9 +20,9 @@
     "LICENSE"
   ],
   "scripts": {
-    "build": "tsc && cp src/cc-template-data.json dist/ && node -e \"require('fs').mkdirSync('dist/shim',{recursive:true})\" && cp src/shim/runtime.cjs dist/shim/",
+    "build": "tsc && cp src/cc-template-data.json dist/",
     "test": "node --test --test-concurrency=8 test/all.test.mjs",
-    "test:serial": "node test/issue-29-tool-translation.mjs && node test/hybrid-tools.mjs && node test/tool-schema-contract.mjs && node test/scrub-paths.mjs && node test/provider-prefix.mjs && node test/analytics-recording.mjs && node test/analytics-billing-bucket.mjs && node test/failover-429.mjs && node test/pool-sticky.mjs && node test/live-fingerprint.mjs && node test/shim-runtime.mjs && node test/shim-e2e.mjs && node test/proxy-header-order.mjs && node test/proxy-body-order.mjs && node test/runtime-fingerprint.mjs && node test/pacing.mjs && node test/stream-drain.mjs && node test/subagent.mjs && node test/mcp-protocol.mjs && node test/mcp-tools.mjs && node test/mcp-e2e.mjs && node test/session-rotation.mjs && node test/drift-detection.mjs && node test/cc-authorize-probe-classifier.mjs && node test/compat-range.mjs && node test/doctor-formatter.mjs && node test/doctor-identity-drift.mjs && node test/atomic-write.mjs && node test/account-refresh-singleflight.mjs && node test/streaming-edge-cases.mjs && node test/client-detection.mjs && node test/manual-oauth-flow.mjs && node test/scrub-template.mjs && node test/sanitize-messages.mjs && node test/platform-tools.mjs && node test/strict-template-flags.mjs && node test/request-queue.mjs && node test/effort-flag.mjs && node test/template-invariants.mjs",
+    "test:serial": "node test/issue-29-tool-translation.mjs && node test/hybrid-tools.mjs && node test/tool-schema-contract.mjs && node test/scrub-paths.mjs && node test/provider-prefix.mjs && node test/analytics-recording.mjs && node test/analytics-billing-bucket.mjs && node test/failover-429.mjs && node test/pool-sticky.mjs && node test/live-fingerprint.mjs && node test/proxy-header-order.mjs && node test/proxy-body-order.mjs && node test/runtime-fingerprint.mjs && node test/pacing.mjs && node test/stream-drain.mjs && node test/subagent.mjs && node test/mcp-protocol.mjs && node test/mcp-tools.mjs && node test/mcp-e2e.mjs && node test/session-rotation.mjs && node test/drift-detection.mjs && node test/cc-authorize-probe-classifier.mjs && node test/compat-range.mjs && node test/doctor-formatter.mjs && node test/doctor-identity-drift.mjs && node test/atomic-write.mjs && node test/account-refresh-singleflight.mjs && node test/streaming-edge-cases.mjs && node test/client-detection.mjs && node test/manual-oauth-flow.mjs && node test/scrub-template.mjs && node test/sanitize-messages.mjs && node test/platform-tools.mjs && node test/strict-template-flags.mjs && node test/request-queue.mjs && node test/effort-flag.mjs && node test/template-invariants.mjs",
     "audit": "npm audit --production --audit-level=high",
     "prepublishOnly": "npm run build",
     "start": "node dist/cli.js",

package/dist/shim/host.d.ts

@@ -1,86 +0,0 @@
-/**
- * Shim host — dario-side of the shim transport.
- *
- * Runs `dario shim -- <cmd> [args...]`. Spawns the child with NODE_OPTIONS
- * pointing at the shim runtime, listens on a unix socket (or named pipe on
- * Windows) for billing relay events from the runtime, feeds them into the
- * Analytics class, and forwards the child's stdio to the host TTY so the
- * user experience is identical to running the command directly.
- *
- * Why a socket and not a file or stdout: the runtime patches `globalThis.fetch`
- * inside the *child*'s process — that child still owns its own stdout (the
- * user's TTY), and we don't want shim relay traffic interleaved with CC's
- * normal output. A unix socket gives us a clean side-channel, lets the host
- * keep accumulating analytics across the child's lifetime, and stays open if
- * the child re-execs (rare but possible with claude wrappers).
- *
- * See v3.12.0 CHANGELOG for the design rationale.
- */
-import { Analytics } from './../analytics.js';
-/**
- * Locate the shim runtime CJS file. In the published package it lives at
- * `dist/shim/runtime.cjs` next to this module's compiled output. In dev
- * (running via tsx from src/) it lives at `src/shim/runtime.cjs`.
- */
-export declare function locateShimRuntime(): string;
-interface RelayEvent {
-    kind: 'request' | 'response';
-    timestamp: number;
-    bytes?: number;
-    status?: number;
-    claim?: string | null;
-    overageUtil?: number | null;
-}
-/**
- * Process-priority levels accepted by the shim. Cross-platform via Node's
- * os.setPriority — same name on every OS, different underlying class:
- *   - 'normal'       : default, no change
- *   - 'below-normal' : BELOW_NORMAL_PRIORITY_CLASS on Windows, nice +7 on POSIX
- *   - 'low'          : IDLE_PRIORITY_CLASS on Windows, nice +19 on POSIX
- *
- * Use case: when the dario user is RDP'd into the same machine that hosts
- * the claude CLI, claude can saturate ~4 cores during heavy tool work and
- * starve the kernel network IO threads. The result is a Windows-specific
- * cascade — RDP TCP socket writes return ERROR_SEM_TIMEOUT, sessions drop,
- * Defender notices the disruption and writes a config-change event ~12s
- * later. Lowering claude's scheduling priority lets the kernel preempt it
- * for IO threads without changing claude's behavior or throughput. Same
- * sustained CPU usage, no more drops. Documented in faq.md.
- *
- * (See dario#xxx — this lands as part of the same investigation that
- * turned up the wider Defender / vmswitch / NIC offload cleanup work.)
- */
-export type ShimPriority = 'normal' | 'below-normal' | 'low';
-export interface ShimHostOptions {
-    /** Command to spawn (the user's claude binary, or any node-based CC wrapper). */
-    command: string;
-    /** Args passed through to the child. */
-    args: string[];
-    /** Override the template path the runtime reads. Defaults to ~/.dario/cc-template.live.json. */
-    templatePath?: string;
-    /** Print per-event lines to stderr. */
-    verbose?: boolean;
-    /**
-     * Process priority for the spawned child. Defaults to 'normal' (no change).
-     * Set to 'below-normal' when running claude on a machine you're RDP'd into,
-     * so kernel network IO threads can preempt the heavy claude workload and
-     * the RDP session doesn't drop on every tool burst. See ShimPriority.
-     */
-    priority?: ShimPriority;
-    /** Optional Analytics sink. If omitted, a fresh instance is created. */
-    analytics?: Analytics;
-}
-export interface ShimHostResult {
-    exitCode: number;
-    events: RelayEvent[];
-    analytics: Analytics;
-}
-/**
- * Spawn the child command with the shim runtime injected, relay billing
- * events to Analytics, return when the child exits.
- *
- * Stdio is inherited so the user sees the child's output exactly as if they
- * had run it without the shim.
- */
-export declare function runShim(opts: ShimHostOptions): Promise<ShimHostResult>;
-export {};

package/dist/shim/host.js

@@ -1,196 +0,0 @@
-/**
- * Shim host — dario-side of the shim transport.
- *
- * Runs `dario shim -- <cmd> [args...]`. Spawns the child with NODE_OPTIONS
- * pointing at the shim runtime, listens on a unix socket (or named pipe on
- * Windows) for billing relay events from the runtime, feeds them into the
- * Analytics class, and forwards the child's stdio to the host TTY so the
- * user experience is identical to running the command directly.
- *
- * Why a socket and not a file or stdout: the runtime patches `globalThis.fetch`
- * inside the *child*'s process — that child still owns its own stdout (the
- * user's TTY), and we don't want shim relay traffic interleaved with CC's
- * normal output. A unix socket gives us a clean side-channel, lets the host
- * keep accumulating analytics across the child's lifetime, and stays open if
- * the child re-execs (rare but possible with claude wrappers).
- *
- * See v3.12.0 CHANGELOG for the design rationale.
- */
-import { createServer } from 'node:net';
-import { spawn } from 'node:child_process';
-import { mkdtempSync, existsSync } from 'node:fs';
-import { tmpdir, homedir, setPriority, constants as osConstants } from 'node:os';
-import { join, dirname } from 'node:path';
-import { fileURLToPath } from 'node:url';
-import { Analytics } from './../analytics.js';
-const __filename = fileURLToPath(import.meta.url);
-const __dirname = dirname(__filename);
-/**
- * Locate the shim runtime CJS file. In the published package it lives at
- * `dist/shim/runtime.cjs` next to this module's compiled output. In dev
- * (running via tsx from src/) it lives at `src/shim/runtime.cjs`.
- */
-export function locateShimRuntime() {
-    const candidates = [
-        join(__dirname, 'runtime.cjs'), // dist/shim/runtime.cjs (production)
-        join(__dirname, '..', '..', 'src', 'shim', 'runtime.cjs'), // dev: from dist/shim → ../../src/shim
-        join(__dirname, '..', 'src', 'shim', 'runtime.cjs'), // dev: from src/shim → ../src/shim (rare)
-    ];
-    for (const c of candidates) {
-        if (existsSync(c))
-            return c;
-    }
-    throw new Error(`shim runtime not found; checked: ${candidates.join(', ')}`);
-}
-function priorityValue(p) {
-    switch (p) {
-        case 'normal': return osConstants.priority.PRIORITY_NORMAL;
-        case 'below-normal': return osConstants.priority.PRIORITY_BELOW_NORMAL;
-        case 'low': return osConstants.priority.PRIORITY_LOW;
-    }
-}
-/**
- * Pick a socket path: unix domain socket on POSIX, named pipe on Windows.
- * Both forms are accepted directly by net.createServer / net.connect.
- */
-function makeSockPath() {
-    if (process.platform === 'win32') {
-        return `\\\\.\\pipe\\dario-shim-${process.pid}-${Date.now()}`;
-    }
-    const dir = mkdtempSync(join(tmpdir(), 'dario-shim-'));
-    return join(dir, 'sock');
-}
-/**
- * Build the child env. We *prepend* our --require to NODE_OPTIONS rather than
- * overwrite, so existing user NODE_OPTIONS (debuggers, source maps, tracers)
- * still apply. Quoting paths defends against spaces in the dario install dir.
- */
-function buildChildEnv(parentEnv, runtimePath, sockPath, templatePath, verbose) {
-    const requireFlag = `--require=${JSON.stringify(runtimePath)}`;
-    const existing = parentEnv.NODE_OPTIONS ?? '';
-    const NODE_OPTIONS = existing ? `${requireFlag} ${existing}` : requireFlag;
-    return {
-        ...parentEnv,
-        NODE_OPTIONS,
-        DARIO_SHIM: '1',
-        DARIO_SHIM_SOCK: sockPath,
-        DARIO_SHIM_TEMPLATE: templatePath,
-        ...(verbose ? { DARIO_SHIM_VERBOSE: '1' } : {}),
-    };
-}
-/** Stream parser: relay events arrive as newline-delimited JSON over the socket. */
-function makeSocketHandler(events, analytics, verbose) {
-    return (sock) => {
-        let buf = '';
-        sock.setEncoding('utf-8');
-        sock.on('data', (chunk) => {
-            buf += chunk;
-            let nl;
-            while ((nl = buf.indexOf('\n')) !== -1) {
-                const line = buf.slice(0, nl);
-                buf = buf.slice(nl + 1);
-                if (!line)
-                    continue;
-                try {
-                    const event = JSON.parse(line);
-                    events.push(event);
-                    if (event.kind === 'response') {
-                        // Synthesize a minimal RequestRecord so this surfaces in /analytics.
-                        // Token counts aren't available from the shim transport — the runtime
-                        // would need to parse the SSE stream to extract them, which we
-                        // explicitly chose not to do (it's expensive and intrusive). So this
-                        // is a request-count + claim-tracking record, not a token-cost record.
-                        analytics.record({
-                            timestamp: event.timestamp ?? Date.now(),
-                            account: 'shim',
-                            model: 'unknown',
-                            inputTokens: 0, outputTokens: 0,
-                            cacheReadTokens: 0, cacheCreateTokens: 0, thinkingTokens: 0,
-                            claim: event.claim ?? '',
-                            util5h: 0, util7d: 0,
-                            overageUtil: event.overageUtil ?? 0,
-                            latencyMs: 0,
-                            status: event.status ?? 0,
-                            isStream: false,
-                            isOpenAI: false,
-                        });
-                    }
-                    if (verbose) {
-                        process.stderr.write(`[dario shim] ${JSON.stringify(event)}\n`);
-                    }
-                }
-                catch {
-                    // Malformed line — drop silently. The runtime is best-effort.
-                }
-            }
-        });
-    };
-}
-/** Internal: stand up the socket server and resolve when it's listening. */
-function startSocketServer(sockPath, events, analytics, verbose) {
-    return new Promise((resolve, reject) => {
-        const server = createServer(makeSocketHandler(events, analytics, verbose));
-        server.once('error', reject);
-        server.listen(sockPath, () => resolve(server));
-    });
-}
-/**
- * Spawn the child command with the shim runtime injected, relay billing
- * events to Analytics, return when the child exits.
- *
- * Stdio is inherited so the user sees the child's output exactly as if they
- * had run it without the shim.
- */
-export async function runShim(opts) {
-    const runtimePath = locateShimRuntime();
-    const sockPath = makeSockPath();
-    const templatePath = opts.templatePath ?? join(homedir(), '.dario', 'cc-template.live.json');
-    const verbose = opts.verbose ?? false;
-    const analytics = opts.analytics ?? new Analytics();
-    const events = [];
-    const server = await startSocketServer(sockPath, events, analytics, verbose);
-    let child;
-    try {
-        child = spawn(opts.command, opts.args, {
-            stdio: 'inherit',
-            env: buildChildEnv(process.env, runtimePath, sockPath, templatePath, verbose),
-        });
-    }
-    catch (e) {
-        server.close();
-        throw e;
-    }
-    // Apply priority best-effort. setPriority can fail if the user lacks the
-    // privilege to lower priorities below normal (rare on Windows / Linux for
-    // the same user's process, but reported on locked-down corporate setups).
-    // We log and continue — priority is a perf optimization, not a correctness
-    // requirement. The child runs at default priority if the call fails.
-    if (opts.priority && opts.priority !== 'normal') {
-        try {
-            if (child.pid !== undefined) {
-                setPriority(child.pid, priorityValue(opts.priority));
-                if (verbose) {
-                    process.stderr.write(`[dario shim] child PID ${child.pid} priority → ${opts.priority}\n`);
-                }
-            }
-        }
-        catch (err) {
-            if (verbose) {
-                process.stderr.write(`[dario shim] priority set failed (continuing at default): ${err.message}\n`);
-            }
-        }
-    }
-    const exitCode = await new Promise((resolve) => {
-        child.on('exit', (code, signal) => {
-            if (signal)
-                resolve(128 + (signal === 'SIGTERM' ? 15 : 1));
-            else
-                resolve(code ?? 0);
-        });
-        child.on('error', () => resolve(1));
-    });
-    // Give any in-flight relay writes a brief window to land before tearing down.
-    await new Promise((r) => setTimeout(r, 50));
-    server.close();
-    return { exitCode, events, analytics };
-}