@askalf/dario 5.4.13 → 5.4.14

package/README.md

@@ -186,7 +186,7 @@ Guarded by a PR-time compat gate that runs the full suite against a live proxy b
 |---|---|---|
 | `context-1m` dropped from the default beta set on the OAuth path | Subscription requests default to the 200K window on Sonnet/Opus | v3.38.3–4 |
 | `thinking: {type:"adaptive"}` gated per-model server-side | Sonnet/Opus 4-5 400 every request through any proxy | [v3.38.5](https://github.com/askalf/dario/pull/273) |
-| Per-model `anthropic-beta` sets (opus 9, sonnet 8, haiku 6) | Proxies sending one set diverge for non-opus models | [v4.8.53](https://github.com/askalf/dario/pull/478) |
+| Per-model `anthropic-beta` sets (opus 10, sonnet 9, haiku 6 — they track the baked base, so counts shift when CC's set does) | Proxies sending one set diverge for non-opus models | [v4.8.53](https://github.com/askalf/dario/pull/478) |
 
 The full ledger lives in the [CHANGELOG](CHANGELOG.md). Setup + walkthrough: [`docs/drift-monitor.md`](./docs/drift-monitor.md). Residual manual cases — OAuth rotation, runner re-registration — are in the [recovery runbook](./docs/recovery.md).
 
@@ -218,11 +218,11 @@ The split isn't live, but it was announced once on short notice and could return
 
 | Signal | Status |
 |---|---|
-| Source | **~22k** lines of TypeScript across **49** files — auditable in a weekend (v5 removed shim; the pool is the one code path) |
+| Source | **~24k** lines of TypeScript across **52** files — auditable in a weekend (v5 removed shim; the pool is the one code path) |
 | Dependencies | **0 runtime.** Verify: `npm ls --production` |
 | Provenance | Every release [SLSA-attested](https://www.npmjs.com/package/@askalf/dario) via GitHub Actions + Sigstore |
 | Scanning | [CodeQL](https://github.com/askalf/dario/actions/workflows/codeql.yml) on every push and weekly |
-| Tests | **113 test files** run in parallel by `test/all.test.mjs` — green on every release |
+| Tests | **132 test files**, 125 run in parallel by `test/all.test.mjs` (e2e / compat / stealth opt out and have their own entry points) — green on every release |
 | Credentials | Your own subscription tokens, never logged, redacted from errors, `0600` on disk in `0700` dirs |
 | Network | Binds `127.0.0.1` by default; upstream only to configured backends over HTTPS; hardcoded SSRF allow-list |
 | Telemetry | **None.** No analytics, no tracking, nothing phones home |
@@ -253,7 +253,7 @@ dario uses your own subscription credentials, authenticates you as you, and impe
 
 `dario` (TUI) · `login` · `proxy` · `doctor` · `accounts {list,add,remove}` · `backend {list,add,remove}` · `mcp` · `subagent {install,status,remove}` · `usage` · `config` · `upgrade` · `status` · `refresh` · `resume` · `logout` · `help`
 
-Full flag/env reference: [`docs/commands.md`](./docs/commands.md) · SDK examples + per-tool setup: [`docs/usage.md`](./docs/usage.md)
+Per-flag reference: [`docs/commands.md`](./docs/commands.md) · env vars grouped by task, for Docker / k8s / systemd: [`docs/configuration.md`](./docs/configuration.md) · SDK examples + per-tool setup: [`docs/usage.md`](./docs/usage.md)
 
 ---
 
@@ -299,10 +299,21 @@ PRs welcome. Small TypeScript codebase, zero runtime deps. Architecture + file-b
 git clone https://github.com/askalf/dario && cd dario
 npm install
 npm run dev    # tsx, no build step
-npm test       # 113 test files via test/all.test.mjs
+npm test       # 125 suites in parallel via test/all.test.mjs
 npm run e2e    # live proxy + OAuth (needs a working Claude backend)
 ```
 
+Drift and audit runners, none of them part of `npm test`:
+
+```bash
+npm run drift:wire    # compare a live CC capture against the baked template
+npm run drift:sdk     # Agent-SDK / Stainless pin drift
+npm run audit:tui     # drives the real TUI through a fake TTY at 12 geometries
+npm run check:overage # overage-classifier check against live headers
+npm run stress        # concurrency / queue behaviour under load
+npm run cch:calibrate # re-derive the billing-tag cch seed for a new CC build
+```
+
 Two easy ways to help beyond code: **star the repo** (the clearest signal this is useful), and **file drift** — open an issue when a rate-limit header flips or a tool that worked yesterday breaks today, and it gets documented in public alongside the fix. Follow [@ask_alf](https://x.com/ask_alf) for drift bulletins as they land.
 
 ### Contributors

package/dist/cli.d.ts

@@ -69,6 +69,25 @@ export declare function resolveEffortFlag(args: string[], env: string | undefine
  * dario#80 queue env mirrors.
  */
 export declare function parsePositiveIntEnv(value: string | undefined): number | undefined;
+/**
+ * Parse a boolean env var that has to be able to say NO.
+ *
+ * `parseBooleanEnv` returns true|undefined and never false. That is correct
+ * for a knob whose default is off and whose env mirror is read with `||` --
+ * false and undefined behave identically there, and its truthy-only contract
+ * is pinned by test/strict-template-flags.mjs.
+ *
+ * It is wrong for a knob that defaults ON and is read with
+ * `flag ?? env ?? fileCfg ?? true`: undefined falls straight through to the
+ * default, so `DARIO_OVERAGE_GUARD=off` left the guard enabled while the
+ * comment above claimed it was the equivalent of --no-overage-guard. Silent,
+ * and worst for the container users who have no flag to pass instead.
+ *
+ * Returns false for off/0/false/no, true for on/1/true/yes, undefined for
+ * unset or unrecognised — so an unreadable value still defers to the config
+ * file and the default rather than guessing.
+ */
+export declare function parseTriStateEnv(value: string | undefined): boolean | undefined;
 /**
  * Parse a boolean env var. Accepts "1", "true", "yes", "on" (case-insensitive)
  * as truthy; everything else (including unset) is undefined/false. Exported

package/dist/cli.js

@@ -569,13 +569,15 @@ async function proxy() {
     //   --overage-behavior=halt|warn       → halt (default) or warn-only (no 503)
     //   --overage-cooldown=<MS>            → auto-resume after this delay (default 30 min)
     //   --no-overage-notify                → suppress OS-level desktop notification
-    //   DARIO_OVERAGE_GUARD=off            → env equivalent of --no-overage-guard
+    //   DARIO_OVERAGE_GUARD=off|0|false|no → env equivalent of --no-overage-guard
     //   DARIO_OVERAGE_BEHAVIOR=halt|warn   → env equivalent of --overage-behavior
     //   DARIO_OVERAGE_COOLDOWN=<MS>        → env equivalent of --overage-cooldown
-    //   DARIO_OVERAGE_NOTIFY=off           → env equivalent of --no-overage-notify
+    //   DARIO_OVERAGE_NOTIFY=off|0|false|no → env equivalent of --no-overage-notify
     const overageGuardEnabledFromFlag = args.includes('--no-overage-guard') ? false
         : args.includes('--overage-guard') ? true : undefined;
-    const overageGuardEnabledFromEnv = parseBooleanEnv(process.env['DARIO_OVERAGE_GUARD']);
+    // Tri-state: this chain defaults to true, so `=off` must yield false rather
+    // than undefined or it is silently ignored.
+    const overageGuardEnabledFromEnv = parseTriStateEnv(process.env['DARIO_OVERAGE_GUARD']);
     const overageGuardEnabled = overageGuardEnabledFromFlag
         ?? overageGuardEnabledFromEnv
         ?? fileCfg.overageGuard?.enabled
@@ -591,7 +593,7 @@ async function proxy() {
         ?? fileCfg.overageGuard?.cooldownMs
         ?? 30 * 60 * 1000;
     const overageNotifyFromFlag = args.includes('--no-overage-notify') ? false : undefined;
-    const overageNotifyFromEnv = parseBooleanEnv(process.env['DARIO_OVERAGE_NOTIFY']);
+    const overageNotifyFromEnv = parseTriStateEnv(process.env['DARIO_OVERAGE_NOTIFY']);
     const overageGuardNotifyOs = overageNotifyFromFlag
         ?? overageNotifyFromEnv
         ?? fileCfg.overageGuard?.notifyOs
@@ -795,6 +797,34 @@ export function parsePositiveIntEnv(value) {
         return undefined;
     return n;
 }
+/**
+ * Parse a boolean env var that has to be able to say NO.
+ *
+ * `parseBooleanEnv` returns true|undefined and never false. That is correct
+ * for a knob whose default is off and whose env mirror is read with `||` --
+ * false and undefined behave identically there, and its truthy-only contract
+ * is pinned by test/strict-template-flags.mjs.
+ *
+ * It is wrong for a knob that defaults ON and is read with
+ * `flag ?? env ?? fileCfg ?? true`: undefined falls straight through to the
+ * default, so `DARIO_OVERAGE_GUARD=off` left the guard enabled while the
+ * comment above claimed it was the equivalent of --no-overage-guard. Silent,
+ * and worst for the container users who have no flag to pass instead.
+ *
+ * Returns false for off/0/false/no, true for on/1/true/yes, undefined for
+ * unset or unrecognised — so an unreadable value still defers to the config
+ * file and the default rather than guessing.
+ */
+export function parseTriStateEnv(value) {
+    if (value === undefined)
+        return undefined;
+    const normalized = value.trim().toLowerCase();
+    if (normalized === '1' || normalized === 'true' || normalized === 'yes' || normalized === 'on')
+        return true;
+    if (normalized === '0' || normalized === 'false' || normalized === 'no' || normalized === 'off')
+        return false;
+    return undefined;
+}
 /**
  * Parse a boolean env var. Accepts "1", "true", "yes", "on" (case-insensitive)
  * as truthy; everything else (including unset) is undefined/false. Exported

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@askalf/dario",
-  "version": "5.4.13",
+  "version": "5.4.14",
   "description": "Use your Claude Pro/Max subscription in any tool — Cursor, Cline, Aider, the Agent SDK, your scripts — at subscription pricing, not per-token API bills. One local Anthropic + OpenAI-compatible endpoint.",
   "type": "module",
   "bin": {