@askalf/dario 4.8.69 → 4.8.71

package/dist/cc-template-data.json

@@ -1,5 +1,5 @@
 {
-  "_version": "2.1.175",
+  "_version": "2.1.177",
   "_captured": "2026-06-11T20:43:54.573Z",
   "_source": "bundled",
   "_schemaVersion": 3,
@@ -1294,7 +1294,7 @@
   "anthropic_beta": "claude-code-20250219,interleaved-thinking-2025-05-14,thinking-token-count-2026-05-13,context-management-2025-06-27,prompt-caching-scope-2026-01-05,mid-conversation-system-2026-04-07,advisor-tool-2026-03-01,effort-2025-11-24",
   "header_values": {
     "accept": "application/json",
-    "user-agent": "claude-cli/2.1.175 (external, sdk-cli)",
+    "user-agent": "claude-cli/2.1.177 (external, sdk-cli)",
     "x-stainless-arch": "x64",
     "x-stainless-lang": "js",
     "x-stainless-os": "Linux",
@@ -1319,5 +1319,5 @@
     "output_config",
     "stream"
   ],
-  "_supportedMaxTested": "2.1.175"
+  "_supportedMaxTested": "2.1.177"
 }

package/dist/model-catalog.d.ts

@@ -32,6 +32,12 @@
  * — the same ordering normalizeUpstreamIds() produces for live data.
  */
 export declare const BAKED_BASE_MODELS: readonly string[];
+/** The set of suspended families, resolved from env at call time. */
+export declare function suspendedFamilies(): Set<string>;
+/** True when `model` (any spelling) belongs to a suspended family. */
+export declare function isSuspendedModel(model: string): boolean;
+/** Drop suspended families from an advertised base list. */
+export declare function dropSuspendedModels(bases: readonly string[]): string[];
 /**
  * THE long-context rule — applied identically to every family. A base id
  * takes a `[1m]` variant unless it's the haiku family (CC's picker never

package/dist/model-catalog.js

@@ -43,6 +43,45 @@ export const BAKED_BASE_MODELS = [
     'claude-sonnet-4-6',
     'claude-haiku-4-5',
 ];
+/**
+ * Globally-suspended model families — dario neither advertises nor proxies
+ * them, even when upstream still lists the id, because api.anthropic.com
+ * returns `not_found` for every request to them.
+ *
+ * Claude Fable 5 AND Mythos 5 were disabled for ALL Anthropic customers by a
+ * US-government legal directive on 2026-06-12 (all plans/tiers; other models
+ * unaffected) — https://www.anthropic.com/news/fable-mythos-access. dario's
+ * baked fallback still carries `claude-fable-5`, and upstream may still list
+ * it, so without this filter dario keeps advertising a model that 404s.
+ *
+ * TEMP — reversible without a code change: `DARIO_SUSPENDED_MODELS` overrides
+ * the default (comma-separated families or model ids; each is normalized to
+ * its family). Set `DARIO_SUSPENDED_MODELS=` (empty) to re-enable everything
+ * once access is restored. Matching is by FAMILY, so every spelling is caught:
+ * `fable`, `fable1m`, `claude-fable-5`, `claude-fable-5[1m]`, `claude:fable`.
+ */
+const DEFAULT_SUSPENDED_MODELS = 'fable';
+/** The set of suspended families, resolved from env at call time. */
+export function suspendedFamilies() {
+    const raw = process.env.DARIO_SUSPENDED_MODELS ?? DEFAULT_SUSPENDED_MODELS;
+    return new Set(raw
+        .split(',')
+        .map((s) => s.trim())
+        .filter((s) => s.length > 0)
+        .map((s) => modelFamily(s) ?? s.toLowerCase()));
+}
+/** True when `model` (any spelling) belongs to a suspended family. */
+export function isSuspendedModel(model) {
+    const fams = suspendedFamilies();
+    if (fams.size === 0)
+        return false;
+    const fam = modelFamily(model);
+    return fam !== null && fams.has(fam);
+}
+/** Drop suspended families from an advertised base list. */
+export function dropSuspendedModels(bases) {
+    return bases.filter((b) => !isSuspendedModel(b));
+}
 /**
  * THE long-context rule — applied identically to every family. A base id
  * takes a `[1m]` variant unless it's the haiku family (CC's picker never
@@ -201,7 +240,7 @@ async function fetchUpstreamBases(deps) {
 async function refresh(deps) {
     const now = deps.now ?? Date.now;
     lastAttempt = now();
-    const bases = await fetchUpstreamBases(deps);
+    const bases = dropSuspendedModels(await fetchUpstreamBases(deps));
     cache = { bases, source: 'upstream', fetchedAt: now() };
     deps.log?.(`[dario] model catalog: autodetected ${bases.length} base models upstream`);
 }
@@ -242,7 +281,7 @@ export async function getModelCatalog(deps = {}) {
         }
     }
     if (cache === null)
-        cache = { bases: [...BAKED_BASE_MODELS], source: 'baked', fetchedAt: 0 };
+        cache = { bases: dropSuspendedModels(BAKED_BASE_MODELS), source: 'baked', fetchedAt: 0 };
     return cache;
 }
 /**
@@ -251,7 +290,7 @@ export async function getModelCatalog(deps = {}) {
  * Never blocks the hot path on the network.
  */
 export function getCachedBases() {
-    return cache?.bases ?? BAKED_BASE_MODELS;
+    return cache?.bases ?? dropSuspendedModels(BAKED_BASE_MODELS);
 }
 /** Fire-and-forget warmup so the first client /v1/models call is served warm. */
 export function prewarmModelCatalog(deps = {}) {

package/dist/proxy.js

@@ -17,7 +17,7 @@ import { loadAllAccounts, loadAccount, refreshAccountToken, resyncLoginFromCrede
 import { getOpenAIBackend, isOpenAIModel, forwardToOpenAI } from './openai-backend.js';
 import { RequestQueue, QueueFullError, QueueTimeoutError, DEFAULT_MAX_CONCURRENT, DEFAULT_MAX_QUEUED, DEFAULT_QUEUE_TIMEOUT_MS } from './request-queue.js';
 import { redactSecrets } from './redact.js';
-import { BAKED_BASE_MODELS, withLongContextVariants, buildOpenAIModelsList, getModelCatalog, getCachedBases, resolveAliasAgainst, prewarmModelCatalog } from './model-catalog.js';
+import { BAKED_BASE_MODELS, withLongContextVariants, buildOpenAIModelsList, getModelCatalog, getCachedBases, resolveAliasAgainst, prewarmModelCatalog, isSuspendedModel } from './model-catalog.js';
 const ANTHROPIC_API = 'https://api.anthropic.com';
 const DEFAULT_PORT = 3456;
 const MAX_BODY_BYTES = 10 * 1024 * 1024; // 10 MB — generous for large prompts, prevents abuse
@@ -1587,6 +1587,26 @@ export async function startProxy(opts = {}) {
                     const result = isOpenAI ? openaiToAnthropic(parsed, modelOverride) : (modelOverride ? { ...parsed, model: modelOverride } : parsed);
                     const r = result;
                     requestModel = (r.model || '').toLowerCase();
+                    // Suspended-model guard. Fable 5 / Mythos 5 are disabled for ALL
+                    // Anthropic customers (US-gov directive 2026-06-12); forwarding any
+                    // spelling of them 404s upstream with a confusing not_found. Reject
+                    // up front with an actionable error instead — runs before the
+                    // template build / account lease / forwarding, so nothing to unwind.
+                    // TEMP + reversible: governed by DARIO_SUSPENDED_MODELS (default
+                    // 'fable'); set it empty to re-enable when access is restored.
+                    if (requestModel && isSuspendedModel(requestModel)) {
+                        if (verbose)
+                            console.log(`[dario] suspended model rejected: ${requestModel} (${urlPath})`);
+                        res.writeHead(404, JSON_HEADERS);
+                        res.end(JSON.stringify({
+                            type: 'error',
+                            error: {
+                                type: 'not_found_error',
+                                message: `Model "${requestModel}" is suspended in this dario instance. Claude Fable 5 and Mythos 5 are disabled for all Anthropic customers (US government directive 2026-06-12 — https://www.anthropic.com/news/fable-mythos-access). Use claude-opus-4-8 or claude-sonnet-4-6 instead. To re-enable when access is restored, set DARIO_SUSPENDED_MODELS= (empty) on the dario instance.`,
+                            },
+                        }));
+                        return;
+                    }
                     // In passthrough mode, skip all Claude-specific injection — OAuth swap only.
                     // count_tokens also forwards thin (see resolveProxyTarget) — the endpoint
                     // counts the CLIENT's own prompt, so template injection would distort it.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@askalf/dario",
-  "version": "4.8.69",
+  "version": "4.8.71",
   "description": "Use your Claude Pro/Max subscription in any tool — Cursor, Cline, Aider, the Agent SDK, your scripts — at subscription pricing, not per-token API bills. One local Anthropic + OpenAI-compatible endpoint.",
   "type": "module",
   "bin": {