@kaitranntt/ccs 8.10.0-dev.2 → 8.10.0-dev.21

package/dist/utils/launch-settings.d.ts

@@ -0,0 +1,51 @@
+/// <reference types="node" />
+/// <reference types="bun-types" />
+import type { Settings } from '../types/config';
+/**
+ * Environment keys that control provider routing/model selection and are read
+ * by Claude CLI. Overlaid by default when an active proxy chain is resolved.
+ */
+export declare const LAUNCH_ROUTING_ENV_KEYS: readonly string[];
+export interface UnifiedLaunchSettingsOptions {
+    /**
+     * Key-value map of environment variables to overlay into the settings file's `env` block.
+     */
+    overlayEnv?: NodeJS.ProcessEnv | Record<string, string | undefined>;
+    /**
+     * Keys to explicitly strip/delete from the settings file's `env` block.
+     * Runs AFTER overlayEnv, guaranteeing these keys are completely absent from the output.
+     */
+    stripKeys?: readonly string[];
+    /**
+     * If true, also strip all default Anthropic routing keys via stripAnthropicRoutingEnv.
+     */
+    stripAnthropicRouting?: boolean;
+    /**
+     * When true, snapshot the isolated settings to a durable, profile-scoped
+     * cache directory (~/.ccs/cache/isolated-settings/<hash>/) using atomic temp-and-rename.
+     * Required for background fleet daemon respawns (Issue #1734).
+     */
+    durable?: boolean;
+    /**
+     * If false and no routing/strip changes occurred, ephemeral mode returns the original
+     * settingsPath without writing a temporary file. Defaults to false.
+     */
+    forceWrite?: boolean;
+}
+export interface UnifiedLaunchSettingsResult {
+    settingsPath: string;
+    cleanup: () => void;
+    changed: boolean;
+}
+/**
+ * Builds the modified settings JSON object by applying overlayEnv and stripKeys.
+ */
+export declare function buildUnifiedLaunchSettings(initialSettings: Settings | Record<string, unknown>, options?: UnifiedLaunchSettingsOptions): {
+    settings: Settings;
+    changed: boolean;
+};
+/**
+ * Prepares launch settings with unified overlay, strip, and durable/ephemeral isolation.
+ */
+export declare function createUnifiedLaunchSettings(sourceSettingsPath: string, initialSettings?: Settings | Record<string, unknown>, options?: UnifiedLaunchSettingsOptions): UnifiedLaunchSettingsResult;
+//# sourceMappingURL=launch-settings.d.ts.map

package/dist/utils/launch-settings.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"launch-settings.d.ts","sourceRoot":"","sources":["../../src/utils/launch-settings.ts"],"names":[],"mappings":";;AAKA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAShD;;;GAGG;AACH,eAAO,MAAM,uBAAuB,EAAE,SAAS,MAAM,EAIpD,CAAC;AAEF,MAAM,WAAW,4BAA4B;IAC3C;;OAEG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC,UAAU,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC;IACpE;;;OAGG;IACH,SAAS,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC9B;;OAEG;IACH,qBAAqB,CAAC,EAAE,OAAO,CAAC;IAChC;;;;OAIG;IACH,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB;;;OAGG;IACH,UAAU,CAAC,EAAE,OAAO,CAAC;CACtB;AAED,MAAM,WAAW,2BAA2B;IAC1C,YAAY,EAAE,MAAM,CAAC;IACrB,OAAO,EAAE,MAAM,IAAI,CAAC;IACpB,OAAO,EAAE,OAAO,CAAC;CAClB;AAMD;;GAEG;AACH,wBAAgB,0BAA0B,CACxC,eAAe,EAAE,QAAQ,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACnD,OAAO,CAAC,EAAE,4BAA4B,GACrC;IAAE,QAAQ,EAAE,QAAQ,CAAC;IAAC,OAAO,EAAE,OAAO,CAAA;CAAE,CAiD1C;AAED;;GAEG;AACH,wBAAgB,2BAA2B,CACzC,kBAAkB,EAAE,MAAM,EAC1B,eAAe,CAAC,EAAE,QAAQ,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACpD,OAAO,CAAC,EAAE,4BAA4B,GACrC,2BAA2B,CAoG7B"}

package/dist/utils/launch-settings.js

@@ -0,0 +1,190 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || function (mod) {
+    if (mod && mod.__esModule) return mod;
+    var result = {};
+    if (mod != null) for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
+    __setModuleDefault(result, mod);
+    return result;
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createUnifiedLaunchSettings = exports.buildUnifiedLaunchSettings = exports.LAUNCH_ROUTING_ENV_KEYS = void 0;
+const fs = __importStar(require("fs"));
+const os = __importStar(require("os"));
+const path = __importStar(require("path"));
+const crypto_1 = require("crypto");
+const config_manager_1 = require("./config-manager");
+const shell_executor_1 = require("./shell-executor");
+const extended_context_utils_1 = require("../shared/extended-context-utils");
+/**
+ * Environment keys that control provider routing/model selection and are read
+ * by Claude CLI. Overlaid by default when an active proxy chain is resolved.
+ */
+exports.LAUNCH_ROUTING_ENV_KEYS = [
+    ...shell_executor_1.ANTHROPIC_ROUTING_ENV_KEYS,
+    ...shell_executor_1.ANTHROPIC_MODEL_ENV_KEYS,
+    ...extended_context_utils_1.EXTRA_EXTENDED_CONTEXT_MODEL_ENV_KEYS,
+];
+function isRecord(value) {
+    return typeof value === 'object' && value !== null && !Array.isArray(value);
+}
+/**
+ * Builds the modified settings JSON object by applying overlayEnv and stripKeys.
+ */
+function buildUnifiedLaunchSettings(initialSettings, options) {
+    const base = JSON.parse(JSON.stringify(initialSettings));
+    let mergedEnv = isRecord(base.env) ? { ...base.env } : {};
+    let changed = false;
+    // 1. Apply overlayEnv if provided
+    if (options?.overlayEnv) {
+        const keysToCheck = exports.LAUNCH_ROUTING_ENV_KEYS;
+        for (const key of keysToCheck) {
+            const resolved = options.overlayEnv[key];
+            if (typeof resolved === 'string' && mergedEnv[key] !== resolved) {
+                mergedEnv[key] = resolved;
+                changed = true;
+            }
+        }
+    }
+    // 2. Strip Anthropic routing keys if requested
+    if (options?.stripAnthropicRouting) {
+        const beforeCount = Object.keys(mergedEnv).length;
+        mergedEnv = Object.fromEntries(Object.entries((0, shell_executor_1.stripAnthropicRoutingEnv)(mergedEnv)).filter((entry) => typeof entry[1] === 'string'));
+        if (Object.keys(mergedEnv).length !== beforeCount) {
+            changed = true;
+        }
+    }
+    // 3. Apply explicit stripKeys (forced-absent keys, e.g. ANTHROPIC_API_KEY)
+    if (options?.stripKeys && options.stripKeys.length > 0) {
+        for (const key of options.stripKeys) {
+            if (key in mergedEnv) {
+                delete mergedEnv[key];
+                changed = true;
+            }
+        }
+    }
+    // Clean up empty env
+    if (Object.keys(mergedEnv).length > 0) {
+        base.env = mergedEnv;
+    }
+    else if ('env' in base) {
+        delete base.env;
+        changed = true;
+    }
+    return { settings: base, changed };
+}
+exports.buildUnifiedLaunchSettings = buildUnifiedLaunchSettings;
+/**
+ * Prepares launch settings with unified overlay, strip, and durable/ephemeral isolation.
+ */
+function createUnifiedLaunchSettings(sourceSettingsPath, initialSettings, options) {
+    const noopResult = (changed) => ({
+        settingsPath: sourceSettingsPath,
+        cleanup: () => { },
+        changed,
+    });
+    let baseSettings = initialSettings ?? {};
+    if (!initialSettings && fs.existsSync(sourceSettingsPath)) {
+        try {
+            const parsed = JSON.parse(fs.readFileSync(sourceSettingsPath, 'utf8'));
+            if (isRecord(parsed)) {
+                baseSettings = parsed;
+            }
+        }
+        catch {
+            baseSettings = {};
+        }
+    }
+    const { settings, changed } = buildUnifiedLaunchSettings(baseSettings, options);
+    // If no change and forceWrite is false and not durable, return original path
+    if (!changed && !options?.forceWrite && !options?.durable) {
+        return noopResult(false);
+    }
+    const contentStr = JSON.stringify(settings, null, 2) + '\n';
+    const fileName = path.basename(sourceSettingsPath) || 'settings.json';
+    // 1. Durable mode: stored in ~/.ccs/cache/isolated-settings/<hash>/
+    if (options?.durable) {
+        const pathHash = (0, crypto_1.createHash)('sha256')
+            .update(path.resolve(sourceSettingsPath))
+            .digest('hex')
+            .slice(0, 16);
+        const durableDir = path.join((0, config_manager_1.getCcsDir)(), 'cache', 'isolated-settings', pathHash);
+        fs.mkdirSync(durableDir, { recursive: true, mode: 0o700 });
+        fs.chmodSync(durableDir, 0o700);
+        const targetPath = path.join(durableDir, fileName);
+        const tempFile = path.join(durableDir, `.${fileName}.${(0, crypto_1.randomUUID)()}.tmp`);
+        let renamed = false;
+        try {
+            fs.writeFileSync(tempFile, contentStr, {
+                encoding: 'utf8',
+                mode: 0o600,
+                flag: 'wx',
+            });
+            fs.renameSync(tempFile, targetPath);
+            renamed = true;
+        }
+        finally {
+            if (!renamed) {
+                try {
+                    fs.unlinkSync(tempFile);
+                }
+                catch {
+                    // ignore
+                }
+            }
+        }
+        return {
+            settingsPath: targetPath,
+            cleanup: () => { },
+            changed,
+        };
+    }
+    // 2. Ephemeral mode: os.tmpdir() with 0o700 / 0o600
+    try {
+        const tempDir = fs.mkdtempSync(path.join(os.tmpdir(), 'ccs-launch-settings-'));
+        fs.chmodSync(tempDir, 0o700);
+        const runtimePath = path.join(tempDir, fileName);
+        fs.writeFileSync(runtimePath, contentStr, {
+            encoding: 'utf8',
+            mode: 0o600,
+        });
+        let cleanedUp = false;
+        const cleanup = () => {
+            if (cleanedUp) {
+                return;
+            }
+            cleanedUp = true;
+            try {
+                fs.rmSync(tempDir, { recursive: true, force: true });
+            }
+            catch {
+                // ignore
+            }
+        };
+        return {
+            settingsPath: runtimePath,
+            cleanup,
+            changed,
+        };
+    }
+    catch {
+        return noopResult(changed);
+    }
+}
+exports.createUnifiedLaunchSettings = createUnifiedLaunchSettings;
+//# sourceMappingURL=launch-settings.js.map

package/dist/utils/launch-settings.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"launch-settings.js","sourceRoot":"","sources":["../../src/utils/launch-settings.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,uCAAyB;AACzB,uCAAyB;AACzB,2CAA6B;AAC7B,mCAAgD;AAGhD,qDAA6C;AAC7C,qDAI0B;AAC1B,6EAAyF;AAEzF;;;GAGG;AACU,QAAA,uBAAuB,GAAsB;IACxD,GAAG,2CAA0B;IAC7B,GAAG,yCAAwB;IAC3B,GAAG,8DAAqC;CACzC,CAAC;AAmCF,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC;AAED;;GAEG;AACH,SAAgB,0BAA0B,CACxC,eAAmD,EACnD,OAAsC;IAEtC,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,eAAe,CAAC,CAAa,CAAC;IACrE,IAAI,SAAS,GAA4B,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IACnF,IAAI,OAAO,GAAG,KAAK,CAAC;IAEpB,kCAAkC;IAClC,IAAI,OAAO,EAAE,UAAU,EAAE,CAAC;QACxB,MAAM,WAAW,GAAG,+BAAuB,CAAC;QAC5C,KAAK,MAAM,GAAG,IAAI,WAAW,EAAE,CAAC;YAC9B,MAAM,QAAQ,GAAG,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;YACzC,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,SAAS,CAAC,GAAG,CAAC,KAAK,QAAQ,EAAE,CAAC;gBAChE,SAAS,CAAC,GAAG,CAAC,GAAG,QAAQ,CAAC;gBAC1B,OAAO,GAAG,IAAI,CAAC;YACjB,CAAC;QACH,CAAC;IACH,CAAC;IAED,+CAA+C;IAC/C,IAAI,OAAO,EAAE,qBAAqB,EAAE,CAAC;QACnC,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC;QAClD,SAAS,GAAG,MAAM,CAAC,WAAW,CAC5B,MAAM,CAAC,OAAO,CAAC,IAAA,yCAAwB,EAAC,SAAmC,CAAC,CAAC,CAAC,MAAM,CAClF,CAAC,KAAK,EAA6B,EAAE,CAAC,OAAO,KAAK,CAAC,CAAC,CAAC,KAAK,QAAQ,CACnE,CACF,CAAC;QACF,IAAI,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;YAClD,OAAO,GAAG,IAAI,CAAC;QACjB,CAAC;IACH,CAAC;IAED,2EAA2E;IAC3E,IAAI,OAAO,EAAE,SAAS,IAAI,OAAO,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvD,KAAK,MAAM,GAAG,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC;YACpC,IAAI,GAAG,IAAI,SAAS,EAAE,CAAC;gBACrB,OAAO,SAAS,CAAC,GAAG,CAAC,CAAC;gBACtB,OAAO,GAAG,IAAI,CAAC;YACjB,CAAC;QACH,CAAC;IACH,CAAC;IAED,qBAAqB;IACrB,IAAI,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACtC,IAAI,CAAC,GAAG,GAAG,SAAmC,CAAC;IACjD,CAAC;SAAM,IAAI,KAAK,IAAI,IAAI,EAAE,CAAC;QACzB,OAAO,IAAI,CAAC,GAAG,CAAC;QAChB,OAAO,GAAG,IAAI,CAAC;IACjB,CAAC;IAED,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;AACrC,CAAC;AApDD,gEAoDC;AAED;;GAEG;AACH,SAAgB,2BAA2B,CACzC,kBAA0B,EAC1B,eAAoD,EACpD,OAAsC;IAEtC,MAAM,UAAU,GAAG,CAAC,OAAgB,EAA+B,EAAE,CAAC,CAAC;QACrE,YAAY,EAAE,kBAAkB;QAChC,OAAO,EAAE,GAAG,EAAE,GAAE,CAAC;QACjB,OAAO;KACR,CAAC,CAAC;IAEH,IAAI,YAAY,GAAuC,eAAe,IAAI,EAAE,CAAC;IAC7E,IAAI,CAAC,eAAe,IAAI,EAAE,CAAC,UAAU,CAAC,kBAAkB,CAAC,EAAE,CAAC;QAC1D,IAAI,CAAC;YACH,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,kBAAkB,EAAE,MAAM,CAAC,CAAC,CAAC;YAChF,IAAI,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;gBACrB,YAAY,GAAG,MAAM,CAAC;YACxB,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,YAAY,GAAG,EAAE,CAAC;QACpB,CAAC;IACH,CAAC;IAED,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,0BAA0B,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC;IAEhF,6EAA6E;IAC7E,IAAI,CAAC,OAAO,IAAI,CAAC,OAAO,EAAE,UAAU,IAAI,CAAC,OAAO,EAAE,OAAO,EAAE,CAAC;QAC1D,OAAO,UAAU,CAAC,KAAK,CAAC,CAAC;IAC3B,CAAC;IAED,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC;IAC5D,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,kBAAkB,CAAC,IAAI,eAAe,CAAC;IAEtE,oEAAoE;IACpE,IAAI,OAAO,EAAE,OAAO,EAAE,CAAC;QACrB,MAAM,QAAQ,GAAG,IAAA,mBAAU,EAAC,QAAQ,CAAC;aAClC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAC;aACxC,MAAM,CAAC,KAAK,CAAC;aACb,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAChB,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,IAAA,0BAAS,GAAE,EAAE,OAAO,EAAE,mBAAmB,EAAE,QAAQ,CAAC,CAAC;QAClF,EAAE,CAAC,SAAS,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAC3D,EAAE,CAAC,SAAS,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;QAEhC,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;QACnD,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,QAAQ,IAAI,IAAA,mBAAU,GAAE,MAAM,CAAC,CAAC;QAE3E,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,IAAI,CAAC;YACH,EAAE,CAAC,aAAa,CAAC,QAAQ,EAAE,UAAU,EAAE;gBACrC,QAAQ,EAAE,MAAM;gBAChB,IAAI,EAAE,KAAK;gBACX,IAAI,EAAE,IAAI;aACX,CAAC,CAAC;YACH,EAAE,CAAC,UAAU,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;YACpC,OAAO,GAAG,IAAI,CAAC;QACjB,CAAC;gBAAS,CAAC;YACT,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,IAAI,CAAC;oBACH,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;gBAC1B,CAAC;gBAAC,MAAM,CAAC;oBACP,SAAS;gBACX,CAAC;YACH,CAAC;QACH,CAAC;QAED,OAAO;YACL,YAAY,EAAE,UAAU;YACxB,OAAO,EAAE,GAAG,EAAE,GAAE,CAAC;YACjB,OAAO;SACR,CAAC;IACJ,CAAC;IAED,oDAAoD;IACpD,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,sBAAsB,CAAC,CAAC,CAAC;QAC/E,EAAE,CAAC,SAAS,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QAE7B,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QACjD,EAAE,CAAC,aAAa,CAAC,WAAW,EAAE,UAAU,EAAE;YACxC,QAAQ,EAAE,MAAM;YAChB,IAAI,EAAE,KAAK;SACZ,CAAC,CAAC;QAEH,IAAI,SAAS,GAAG,KAAK,CAAC;QACtB,MAAM,OAAO,GAAG,GAAS,EAAE;YACzB,IAAI,SAAS,EAAE,CAAC;gBACd,OAAO;YACT,CAAC;YACD,SAAS,GAAG,IAAI,CAAC;YACjB,IAAI,CAAC;gBACH,EAAE,CAAC,MAAM,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YACvD,CAAC;YAAC,MAAM,CAAC;gBACP,SAAS;YACX,CAAC;QACH,CAAC,CAAC;QAEF,OAAO;YACL,YAAY,EAAE,WAAW;YACzB,OAAO;YACP,OAAO;SACR,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,UAAU,CAAC,OAAO,CAAC,CAAC;IAC7B,CAAC;AACH,CAAC;AAxGD,kEAwGC"}

package/dist/utils/openai-compat-launch-settings.d.ts

@@ -3,5 +3,17 @@ export interface OpenAICompatLaunchSettings {
     settingsPath: string;
     cleanup: () => void;
 }
-export declare function createOpenAICompatLaunchSettings(settingsPath: string, settings: Settings): OpenAICompatLaunchSettings;
+export interface OpenAICompatLaunchSettingsOptions {
+    /**
+     * When true, snapshot the isolated settings to a durable, profile-scoped
+     * cache directory (~/.ccs/cache/isolated-settings/<hash>/) using atomic temp-and-rename.
+     */
+    durable?: boolean;
+}
+/**
+ * Creates isolated launch settings for OpenAI-compatible profiles.
+ * Strips Anthropic routing variables and guarantees ANTHROPIC_API_KEY is absent
+ * so spawned processes route exclusively through proxyEnv without auth bypass.
+ */
+export declare function createOpenAICompatLaunchSettings(settingsPath: string, settings: Settings, options?: OpenAICompatLaunchSettingsOptions): OpenAICompatLaunchSettings;
 //# sourceMappingURL=openai-compat-launch-settings.d.ts.map

package/dist/utils/openai-compat-launch-settings.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"openai-compat-launch-settings.d.ts","sourceRoot":"","sources":["../../src/utils/openai-compat-launch-settings.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAGhD,MAAM,WAAW,0BAA0B;IACzC,YAAY,EAAE,MAAM,CAAC;IACrB,OAAO,EAAE,MAAM,IAAI,CAAC;CACrB;AAQD,wBAAgB,gCAAgC,CAC9C,YAAY,EAAE,MAAM,EACpB,QAAQ,EAAE,QAAQ,GACjB,0BAA0B,CAoC5B"}
+{"version":3,"file":"openai-compat-launch-settings.d.ts","sourceRoot":"","sources":["../../src/utils/openai-compat-launch-settings.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAOhD,MAAM,WAAW,0BAA0B;IACzC,YAAY,EAAE,MAAM,CAAC;IACrB,OAAO,EAAE,MAAM,IAAI,CAAC;CACrB;AAED,MAAM,WAAW,iCAAiC;IAChD;;;OAGG;IACH,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAED;;;;GAIG;AACH,wBAAgB,gCAAgC,CAC9C,YAAY,EAAE,MAAM,EACpB,QAAQ,EAAE,QAAQ,EAClB,OAAO,CAAC,EAAE,iCAAiC,GAC1C,0BAA0B,CAkB5B"}

package/dist/utils/openai-compat-launch-settings.js

@@ -1,66 +1,23 @@
 "use strict";
-var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    var desc = Object.getOwnPropertyDescriptor(m, k);
-    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
-      desc = { enumerable: true, get: function() { return m[k]; } };
-    }
-    Object.defineProperty(o, k2, desc);
-}) : (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    o[k2] = m[k];
-}));
-var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
-    Object.defineProperty(o, "default", { enumerable: true, value: v });
-}) : function(o, v) {
-    o["default"] = v;
-});
-var __importStar = (this && this.__importStar) || function (mod) {
-    if (mod && mod.__esModule) return mod;
-    var result = {};
-    if (mod != null) for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
-    __setModuleDefault(result, mod);
-    return result;
-};
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.createOpenAICompatLaunchSettings = void 0;
-const fs = __importStar(require("fs"));
-const os = __importStar(require("os"));
-const path = __importStar(require("path"));
-const shell_executor_1 = require("./shell-executor");
-// SIBLING HELPER: src/cliproxy/executor/launch-settings.ts (prepareLaunchSettings)
-// solves the same problem by OVERLAYING resolved routing values instead of
-// stripping them. This strip-based variant is required where callers deliberately
-// delete a routing key (e.g. ANTHROPIC_API_KEY in settings-flow) and need it
-// ABSENT from the launch settings. Do not unify without an explicit force-absent
-// key list — see issue #1609.
-function createOpenAICompatLaunchSettings(settingsPath, settings) {
-    const tempDir = fs.mkdtempSync(path.join(os.tmpdir(), 'ccs-openai-compat-settings-'));
-    fs.chmodSync(tempDir, 0o700);
-    const launchSettings = JSON.parse(JSON.stringify(settings));
-    const sanitizedEnv = Object.fromEntries(Object.entries((0, shell_executor_1.stripAnthropicRoutingEnv)({ ...(launchSettings.env ?? {}) })).filter((entry) => typeof entry[1] === 'string'));
-    if (Object.keys(sanitizedEnv).length > 0) {
-        launchSettings.env = sanitizedEnv;
-    }
-    else {
-        delete launchSettings.env;
-    }
-    const launchSettingsPath = path.join(tempDir, path.basename(settingsPath));
-    fs.writeFileSync(launchSettingsPath, JSON.stringify(launchSettings, null, 2) + '\n', {
-        encoding: 'utf8',
-        mode: 0o600,
-    });
-    let cleanedUp = false;
-    const cleanup = () => {
-        if (cleanedUp) {
-            return;
-        }
-        cleanedUp = true;
-        fs.rmSync(tempDir, { recursive: true, force: true });
+const launch_settings_1 = require("./launch-settings");
+/**
+ * Creates isolated launch settings for OpenAI-compatible profiles.
+ * Strips Anthropic routing variables and guarantees ANTHROPIC_API_KEY is absent
+ * so spawned processes route exclusively through proxyEnv without auth bypass.
+ */
+function createOpenAICompatLaunchSettings(settingsPath, settings, options) {
+    const unifiedOptions = {
+        stripAnthropicRouting: true,
+        stripKeys: ['ANTHROPIC_API_KEY'],
+        durable: options?.durable,
+        forceWrite: true,
     };
+    const result = (0, launch_settings_1.createUnifiedLaunchSettings)(settingsPath, settings, unifiedOptions);
     return {
-        settingsPath: launchSettingsPath,
-        cleanup,
+        settingsPath: result.settingsPath,
+        cleanup: result.cleanup,
     };
 }
 exports.createOpenAICompatLaunchSettings = createOpenAICompatLaunchSettings;

package/dist/utils/openai-compat-launch-settings.js.map

@@ -1 +1 @@
-{"version":3,"file":"openai-compat-launch-settings.js","sourceRoot":"","sources":["../../src/utils/openai-compat-launch-settings.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,uCAAyB;AACzB,uCAAyB;AACzB,2CAA6B;AAG7B,qDAA4D;AAO5D,mFAAmF;AACnF,2EAA2E;AAC3E,kFAAkF;AAClF,6EAA6E;AAC7E,iFAAiF;AACjF,8BAA8B;AAC9B,SAAgB,gCAAgC,CAC9C,YAAoB,EACpB,QAAkB;IAElB,MAAM,OAAO,GAAG,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,6BAA6B,CAAC,CAAC,CAAC;IACtF,EAAE,CAAC,SAAS,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IAE7B,MAAM,cAAc,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAa,CAAC;IACxE,MAAM,YAAY,GAAG,MAAM,CAAC,WAAW,CACrC,MAAM,CAAC,OAAO,CAAC,IAAA,yCAAwB,EAAC,EAAE,GAAG,CAAC,cAAc,CAAC,GAAG,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAChF,CAAC,KAAK,EAA6B,EAAE,CAAC,OAAO,KAAK,CAAC,CAAC,CAAC,KAAK,QAAQ,CACnE,CACF,CAAC;IAEF,IAAI,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACzC,cAAc,CAAC,GAAG,GAAG,YAAY,CAAC;IACpC,CAAC;SAAM,CAAC;QACN,OAAO,cAAc,CAAC,GAAG,CAAC;IAC5B,CAAC;IAED,MAAM,kBAAkB,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC,CAAC;IAC3E,EAAE,CAAC,aAAa,CAAC,kBAAkB,EAAE,IAAI,CAAC,SAAS,CAAC,cAAc,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE;QACnF,QAAQ,EAAE,MAAM;QAChB,IAAI,EAAE,KAAK;KACZ,CAAC,CAAC;IAEH,IAAI,SAAS,GAAG,KAAK,CAAC;IACtB,MAAM,OAAO,GAAG,GAAS,EAAE;QACzB,IAAI,SAAS,EAAE,CAAC;YACd,OAAO;QACT,CAAC;QACD,SAAS,GAAG,IAAI,CAAC;QACjB,EAAE,CAAC,MAAM,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACvD,CAAC,CAAC;IAEF,OAAO;QACL,YAAY,EAAE,kBAAkB;QAChC,OAAO;KACR,CAAC;AACJ,CAAC;AAvCD,4EAuCC"}
+{"version":3,"file":"openai-compat-launch-settings.js","sourceRoot":"","sources":["../../src/utils/openai-compat-launch-settings.ts"],"names":[],"mappings":";;;AACA,uDAI2B;AAe3B;;;;GAIG;AACH,SAAgB,gCAAgC,CAC9C,YAAoB,EACpB,QAAkB,EAClB,OAA2C;IAE3C,MAAM,cAAc,GAAiC;QACnD,qBAAqB,EAAE,IAAI;QAC3B,SAAS,EAAE,CAAC,mBAAmB,CAAC;QAChC,OAAO,EAAE,OAAO,EAAE,OAAO;QACzB,UAAU,EAAE,IAAI;KACjB,CAAC;IAEF,MAAM,MAAM,GAAgC,IAAA,6CAA2B,EACrE,YAAY,EACZ,QAAQ,EACR,cAAc,CACf,CAAC;IAEF,OAAO;QACL,YAAY,EAAE,MAAM,CAAC,YAAY;QACjC,OAAO,EAAE,MAAM,CAAC,OAAO;KACxB,CAAC;AACJ,CAAC;AAtBD,4EAsBC"}

package/dist/utils/request-body.d.ts

@@ -0,0 +1,40 @@
+/**
+ * Bounded request-body reader shared by the local CCS proxies.
+ *
+ * An oversized body must end in an HTTP 413, never a reset socket. A reset
+ * reaches Claude Code as a bare ECONNRESET that it retries silently for
+ * minutes. So past the limit we stop buffering but keep draining the body,
+ * and only give up on the connection once it passes DRAIN_CAP_MULTIPLIER
+ * times the limit.
+ */
+/// <reference types="node" />
+/// <reference types="bun-types" />
+/// <reference types="node" />
+import type * as http from 'http';
+import { type Logger } from '../services/logging';
+export declare const MAX_BODY_ENV_VAR = "CCS_PROXY_MAX_BODY_MB";
+/** Matches the Anthropic Messages API request size limit (32 MB). */
+export declare const DEFAULT_MAX_BODY_MB = 32;
+export declare const REQUEST_TOO_LARGE_ERROR_TYPE = "request_too_large";
+export declare class RequestBodyTooLargeError extends Error {
+    readonly receivedBytes: number;
+    readonly limitBytes: number;
+    /** True when the whole body was read, so the connection can stay open. */
+    readonly drained: boolean;
+    constructor(receivedBytes: number, limitBytes: number, drained: boolean);
+}
+/**
+ * Resolve the body limit from CCS_PROXY_MAX_BODY_MB (MiB, 0 < n <= 1024).
+ * Invalid values fall back to the default and log one warning per value.
+ */
+export declare function resolveMaxBodyBytes(env?: NodeJS.ProcessEnv): number;
+/**
+ * Read the request body as UTF-8. Rejects with RequestBodyTooLargeError when
+ * it exceeds `limitBytes`; the socket is never destroyed here.
+ */
+export declare function readRequestBody(req: http.IncomingMessage, limitBytes?: number): Promise<string>;
+/** Log an oversized request at warn level: size, limit and path, never the body. */
+export declare function logRequestTooLarge(log: Logger, req: http.IncomingMessage, error: RequestBodyTooLargeError): void;
+/** Log the oversized request and answer it with an Anthropic-shaped 413. */
+export declare function respondRequestTooLarge(req: http.IncomingMessage, res: http.ServerResponse, error: RequestBodyTooLargeError, log: Logger): void;
+//# sourceMappingURL=request-body.d.ts.map

package/dist/utils/request-body.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"request-body.d.ts","sourceRoot":"","sources":["../../src/utils/request-body.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;;;;AAEH,OAAO,KAAK,KAAK,IAAI,MAAM,MAAM,CAAC;AAClC,OAAO,EAAgB,KAAK,MAAM,EAAE,MAAM,qBAAqB,CAAC;AAEhE,eAAO,MAAM,gBAAgB,0BAA0B,CAAC;AACxD,qEAAqE;AACrE,eAAO,MAAM,mBAAmB,KAAK,CAAC;AACtC,eAAO,MAAM,4BAA4B,sBAAsB,CAAC;AAchE,qBAAa,wBAAyB,SAAQ,KAAK;IACjD,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,0EAA0E;IAC1E,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;gBAEd,aAAa,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO;CAaxE;AAED;;;GAGG;AACH,wBAAgB,mBAAmB,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,MAAM,CAoBhF;AAED;;;GAGG;AACH,wBAAgB,eAAe,CAC7B,GAAG,EAAE,IAAI,CAAC,eAAe,EACzB,UAAU,GAAE,MAA8B,GACzC,OAAO,CAAC,MAAM,CAAC,CAsDjB;AAED,oFAAoF;AACpF,wBAAgB,kBAAkB,CAChC,GAAG,EAAE,MAAM,EACX,GAAG,EAAE,IAAI,CAAC,eAAe,EACzB,KAAK,EAAE,wBAAwB,GAC9B,IAAI,CAQN;AAED,4EAA4E;AAC5E,wBAAgB,sBAAsB,CACpC,GAAG,EAAE,IAAI,CAAC,eAAe,EACzB,GAAG,EAAE,IAAI,CAAC,cAAc,EACxB,KAAK,EAAE,wBAAwB,EAC/B,GAAG,EAAE,MAAM,GACV,IAAI,CAaN"}

package/dist/utils/request-body.js

@@ -0,0 +1,142 @@
+"use strict";
+/**
+ * Bounded request-body reader shared by the local CCS proxies.
+ *
+ * An oversized body must end in an HTTP 413, never a reset socket. A reset
+ * reaches Claude Code as a bare ECONNRESET that it retries silently for
+ * minutes. So past the limit we stop buffering but keep draining the body,
+ * and only give up on the connection once it passes DRAIN_CAP_MULTIPLIER
+ * times the limit.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.respondRequestTooLarge = exports.logRequestTooLarge = exports.readRequestBody = exports.resolveMaxBodyBytes = exports.RequestBodyTooLargeError = exports.REQUEST_TOO_LARGE_ERROR_TYPE = exports.DEFAULT_MAX_BODY_MB = exports.MAX_BODY_ENV_VAR = void 0;
+const logging_1 = require("../services/logging");
+exports.MAX_BODY_ENV_VAR = 'CCS_PROXY_MAX_BODY_MB';
+/** Matches the Anthropic Messages API request size limit (32 MB). */
+exports.DEFAULT_MAX_BODY_MB = 32;
+exports.REQUEST_TOO_LARGE_ERROR_TYPE = 'request_too_large';
+const MAX_ALLOWED_BODY_MB = 1024;
+const DRAIN_CAP_MULTIPLIER = 4;
+const BYTES_PER_MB = 1024 * 1024;
+const logger = (0, logging_1.createLogger)('proxy:request-body');
+let lastInvalidLimitValue;
+function formatMb(bytes) {
+    const mb = bytes / BYTES_PER_MB;
+    return Number.isInteger(mb) ? String(mb) : mb.toFixed(1);
+}
+class RequestBodyTooLargeError extends Error {
+    constructor(receivedBytes, limitBytes, drained) {
+        const size = drained
+            ? `Request is ${formatMb(receivedBytes)} MB`
+            : `Request is over ${formatMb(receivedBytes)} MB`;
+        super(`${size}, over the ${formatMb(limitBytes)} MB limit of the local ccs proxy ` +
+            `(${exports.MAX_BODY_ENV_VAR}). Run /compact or start a new session.`);
+        this.name = 'RequestBodyTooLargeError';
+        this.receivedBytes = receivedBytes;
+        this.limitBytes = limitBytes;
+        this.drained = drained;
+    }
+}
+exports.RequestBodyTooLargeError = RequestBodyTooLargeError;
+/**
+ * Resolve the body limit from CCS_PROXY_MAX_BODY_MB (MiB, 0 < n <= 1024).
+ * Invalid values fall back to the default and log one warning per value.
+ */
+function resolveMaxBodyBytes(env = process.env) {
+    const defaultBytes = exports.DEFAULT_MAX_BODY_MB * BYTES_PER_MB;
+    const raw = env[exports.MAX_BODY_ENV_VAR]?.trim();
+    if (!raw)
+        return defaultBytes;
+    const mb = Number(raw);
+    if (Number.isFinite(mb) && mb > 0 && mb <= MAX_ALLOWED_BODY_MB) {
+        return Math.floor(mb * BYTES_PER_MB);
+    }
+    if (lastInvalidLimitValue !== raw) {
+        lastInvalidLimitValue = raw;
+        logger.warn('request-body.invalid-limit', `Ignoring ${exports.MAX_BODY_ENV_VAR}="${raw}": expected a number of MB above 0 and at most ` +
+            `${MAX_ALLOWED_BODY_MB}. Using ${exports.DEFAULT_MAX_BODY_MB} MB.`, { value: raw, defaultMb: exports.DEFAULT_MAX_BODY_MB });
+    }
+    return defaultBytes;
+}
+exports.resolveMaxBodyBytes = resolveMaxBodyBytes;
+/**
+ * Read the request body as UTF-8. Rejects with RequestBodyTooLargeError when
+ * it exceeds `limitBytes`; the socket is never destroyed here.
+ */
+function readRequestBody(req, limitBytes = resolveMaxBodyBytes()) {
+    const drainCapBytes = limitBytes * DRAIN_CAP_MULTIPLIER;
+    return new Promise((resolve, reject) => {
+        let chunks = [];
+        let total = 0;
+        const cleanup = () => {
+            req.off('data', onData);
+            req.off('end', onEnd);
+            req.off('error', onError);
+            req.off('close', onClose);
+        };
+        const onData = (chunk) => {
+            total += chunk.length;
+            if (total <= limitBytes) {
+                chunks.push(chunk);
+                return;
+            }
+            // Over the limit: free the buffer and keep draining so we can answer 413.
+            chunks = [];
+            if (total > drainCapBytes) {
+                cleanup();
+                // Keep the stream flowing so leftover bytes are discarded, not stalled.
+                req.resume();
+                reject(new RequestBodyTooLargeError(total, limitBytes, false));
+            }
+        };
+        const onEnd = () => {
+            cleanup();
+            if (total > limitBytes) {
+                reject(new RequestBodyTooLargeError(total, limitBytes, true));
+                return;
+            }
+            resolve(Buffer.concat(chunks, total).toString('utf8'));
+        };
+        const onError = (error) => {
+            cleanup();
+            reject(error instanceof Error ? error : new Error(String(error)));
+        };
+        const onClose = () => {
+            cleanup();
+            reject(new Error('Request closed before the body was fully received'));
+        };
+        req.on('data', onData);
+        req.on('end', onEnd);
+        req.on('error', onError);
+        req.on('close', onClose);
+    });
+}
+exports.readRequestBody = readRequestBody;
+/** Log an oversized request at warn level: size, limit and path, never the body. */
+function logRequestTooLarge(log, req, error) {
+    log.warn('request.body-too-large', error.message, {
+        method: req.method,
+        path: req.url,
+        receivedBytes: error.receivedBytes,
+        limitBytes: error.limitBytes,
+        drained: error.drained,
+    });
+}
+exports.logRequestTooLarge = logRequestTooLarge;
+/** Log the oversized request and answer it with an Anthropic-shaped 413. */
+function respondRequestTooLarge(req, res, error, log) {
+    logRequestTooLarge(log, req, error);
+    if (res.headersSent || res.writableEnded || res.destroyed)
+        return;
+    const headers = { 'Content-Type': 'application/json' };
+    // The rest of the body is still on the wire; ask the client to drop the connection.
+    if (!error.drained)
+        headers.Connection = 'close';
+    res.writeHead(413, headers);
+    res.end(JSON.stringify({
+        type: 'error',
+        error: { type: exports.REQUEST_TOO_LARGE_ERROR_TYPE, message: error.message },
+    }));
+}
+exports.respondRequestTooLarge = respondRequestTooLarge;
+//# sourceMappingURL=request-body.js.map

package/dist/utils/request-body.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"request-body.js","sourceRoot":"","sources":["../../src/utils/request-body.ts"],"names":[],"mappings":";AAAA;;;;;;;;GAQG;;;AAGH,iDAAgE;AAEnD,QAAA,gBAAgB,GAAG,uBAAuB,CAAC;AACxD,qEAAqE;AACxD,QAAA,mBAAmB,GAAG,EAAE,CAAC;AACzB,QAAA,4BAA4B,GAAG,mBAAmB,CAAC;AAEhE,MAAM,mBAAmB,GAAG,IAAI,CAAC;AACjC,MAAM,oBAAoB,GAAG,CAAC,CAAC;AAC/B,MAAM,YAAY,GAAG,IAAI,GAAG,IAAI,CAAC;AAEjC,MAAM,MAAM,GAAG,IAAA,sBAAY,EAAC,oBAAoB,CAAC,CAAC;AAClD,IAAI,qBAAyC,CAAC;AAE9C,SAAS,QAAQ,CAAC,KAAa;IAC7B,MAAM,EAAE,GAAG,KAAK,GAAG,YAAY,CAAC;IAChC,OAAO,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;AAC3D,CAAC;AAED,MAAa,wBAAyB,SAAQ,KAAK;IAMjD,YAAY,aAAqB,EAAE,UAAkB,EAAE,OAAgB;QACrE,MAAM,IAAI,GAAG,OAAO;YAClB,CAAC,CAAC,cAAc,QAAQ,CAAC,aAAa,CAAC,KAAK;YAC5C,CAAC,CAAC,mBAAmB,QAAQ,CAAC,aAAa,CAAC,KAAK,CAAC;QACpD,KAAK,CACH,GAAG,IAAI,cAAc,QAAQ,CAAC,UAAU,CAAC,mCAAmC;YAC1E,IAAI,wBAAgB,yCAAyC,CAChE,CAAC;QACF,IAAI,CAAC,IAAI,GAAG,0BAA0B,CAAC;QACvC,IAAI,CAAC,aAAa,GAAG,aAAa,CAAC;QACnC,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;QAC7B,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;IACzB,CAAC;CACF;AAnBD,4DAmBC;AAED;;;GAGG;AACH,SAAgB,mBAAmB,CAAC,MAAyB,OAAO,CAAC,GAAG;IACtE,MAAM,YAAY,GAAG,2BAAmB,GAAG,YAAY,CAAC;IACxD,MAAM,GAAG,GAAG,GAAG,CAAC,wBAAgB,CAAC,EAAE,IAAI,EAAE,CAAC;IAC1C,IAAI,CAAC,GAAG;QAAE,OAAO,YAAY,CAAC;IAE9B,MAAM,EAAE,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;IACvB,IAAI,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,IAAI,mBAAmB,EAAE,CAAC;QAC/D,OAAO,IAAI,CAAC,KAAK,CAAC,EAAE,GAAG,YAAY,CAAC,CAAC;IACvC,CAAC;IAED,IAAI,qBAAqB,KAAK,GAAG,EAAE,CAAC;QAClC,qBAAqB,GAAG,GAAG,CAAC;QAC5B,MAAM,CAAC,IAAI,CACT,4BAA4B,EAC5B,YAAY,wBAAgB,KAAK,GAAG,iDAAiD;YACnF,GAAG,mBAAmB,WAAW,2BAAmB,MAAM,EAC5D,EAAE,KAAK,EAAE,GAAG,EAAE,SAAS,EAAE,2BAAmB,EAAE,CAC/C,CAAC;IACJ,CAAC;IACD,OAAO,YAAY,CAAC;AACtB,CAAC;AApBD,kDAoBC;AAED;;;GAGG;AACH,SAAgB,eAAe,CAC7B,GAAyB,EACzB,aAAqB,mBAAmB,EAAE;IAE1C,MAAM,aAAa,GAAG,UAAU,GAAG,oBAAoB,CAAC;IAExD,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,IAAI,MAAM,GAAa,EAAE,CAAC;QAC1B,IAAI,KAAK,GAAG,CAAC,CAAC;QAEd,MAAM,OAAO,GAAG,GAAG,EAAE;YACnB,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;YACxB,GAAG,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;YACtB,GAAG,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YAC1B,GAAG,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAC5B,CAAC,CAAC;QAEF,MAAM,MAAM,GAAG,CAAC,KAAa,EAAE,EAAE;YAC/B,KAAK,IAAI,KAAK,CAAC,MAAM,CAAC;YACtB,IAAI,KAAK,IAAI,UAAU,EAAE,CAAC;gBACxB,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;gBACnB,OAAO;YACT,CAAC;YACD,0EAA0E;YAC1E,MAAM,GAAG,EAAE,CAAC;YACZ,IAAI,KAAK,GAAG,aAAa,EAAE,CAAC;gBAC1B,OAAO,EAAE,CAAC;gBACV,wEAAwE;gBACxE,GAAG,CAAC,MAAM,EAAE,CAAC;gBACb,MAAM,CAAC,IAAI,wBAAwB,CAAC,KAAK,EAAE,UAAU,EAAE,KAAK,CAAC,CAAC,CAAC;YACjE,CAAC;QACH,CAAC,CAAC;QAEF,MAAM,KAAK,GAAG,GAAG,EAAE;YACjB,OAAO,EAAE,CAAC;YACV,IAAI,KAAK,GAAG,UAAU,EAAE,CAAC;gBACvB,MAAM,CAAC,IAAI,wBAAwB,CAAC,KAAK,EAAE,UAAU,EAAE,IAAI,CAAC,CAAC,CAAC;gBAC9D,OAAO;YACT,CAAC;YACD,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;QACzD,CAAC,CAAC;QAEF,MAAM,OAAO,GAAG,CAAC,KAAc,EAAE,EAAE;YACjC,OAAO,EAAE,CAAC;YACV,MAAM,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QACpE,CAAC,CAAC;QAEF,MAAM,OAAO,GAAG,GAAG,EAAE;YACnB,OAAO,EAAE,CAAC;YACV,MAAM,CAAC,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC,CAAC;QACzE,CAAC,CAAC;QAEF,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QACvB,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;QACrB,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACzB,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAC3B,CAAC,CAAC,CAAC;AACL,CAAC;AAzDD,0CAyDC;AAED,oFAAoF;AACpF,SAAgB,kBAAkB,CAChC,GAAW,EACX,GAAyB,EACzB,KAA+B;IAE/B,GAAG,CAAC,IAAI,CAAC,wBAAwB,EAAE,KAAK,CAAC,OAAO,EAAE;QAChD,MAAM,EAAE,GAAG,CAAC,MAAM;QAClB,IAAI,EAAE,GAAG,CAAC,GAAG;QACb,aAAa,EAAE,KAAK,CAAC,aAAa;QAClC,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,OAAO,EAAE,KAAK,CAAC,OAAO;KACvB,CAAC,CAAC;AACL,CAAC;AAZD,gDAYC;AAED,4EAA4E;AAC5E,SAAgB,sBAAsB,CACpC,GAAyB,EACzB,GAAwB,EACxB,KAA+B,EAC/B,GAAW;IAEX,kBAAkB,CAAC,GAAG,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC;IACpC,IAAI,GAAG,CAAC,WAAW,IAAI,GAAG,CAAC,aAAa,IAAI,GAAG,CAAC,SAAS;QAAE,OAAO;IAClE,MAAM,OAAO,GAA2B,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC;IAC/E,oFAAoF;IACpF,IAAI,CAAC,KAAK,CAAC,OAAO;QAAE,OAAO,CAAC,UAAU,GAAG,OAAO,CAAC;IACjD,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;IAC5B,GAAG,CAAC,GAAG,CACL,IAAI,CAAC,SAAS,CAAC;QACb,IAAI,EAAE,OAAO;QACb,KAAK,EAAE,EAAE,IAAI,EAAE,oCAA4B,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE;KACtE,CAAC,CACH,CAAC;AACJ,CAAC;AAlBD,wDAkBC"}

package/dist/web-server/index.d.ts

@@ -17,7 +17,7 @@ export interface ServerOptions {
 export interface ServerInstance {
     server: http.Server;
     wss: WebSocketServer;
-    cleanup: () => void;
+    cleanup: () => Promise<void>;
 }
 /**
  * Start Express server with WebSocket support

package/dist/web-server/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/web-server/index.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;;AAGH,OAAO,IAAI,MAAM,MAAM,CAAC;AAGxB,OAAO,EAAE,eAAe,EAAE,MAAM,IAAI,CAAC;AAcrC,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,GAAG,CAAC,EAAE,OAAO,CAAC;CACf;AAED,MAAM,WAAW,cAAc;IAC7B,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC;IACpB,GAAG,EAAE,eAAe,CAAC;IACrB,OAAO,EAAE,MAAM,IAAI,CAAC;CACrB;AAQD;;GAEG;AACH,wBAAsB,WAAW,CAAC,OAAO,EAAE,aAAa,GAAG,OAAO,CAAC,cAAc,CAAC,CAiLjF"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/web-server/index.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;;AAGH,OAAO,IAAI,MAAM,MAAM,CAAC;AAGxB,OAAO,EAAE,eAAe,EAAE,MAAM,IAAI,CAAC;AAerC,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,GAAG,CAAC,EAAE,OAAO,CAAC;CACf;AAED,MAAM,WAAW,cAAc;IAC7B,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC;IACpB,GAAG,EAAE,eAAe,CAAC;IACrB,OAAO,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;CAC9B;AAQD;;GAEG;AACH,wBAAsB,WAAW,CAAC,OAAO,EAAE,aAAa,GAAG,OAAO,CAAC,cAAc,CAAC,CAmLjF"}

package/dist/web-server/index.js

@@ -45,6 +45,7 @@ const sync_1 = require("../cliproxy/sync");
 const aggregator_1 = require("./usage/aggregator");
 const logging_1 = require("../services/logging");
 const config_dashboard_host_1 = require("../commands/config-dashboard-host");
+const claude_pool_policy_1 = require("../cliproxy/accounts/claude-pool-policy");
 function getListenHost(options) {
     return options.host || config_dashboard_host_1.DEFAULT_DASHBOARD_HOST;
 }
@@ -144,11 +145,13 @@ async function startServer(options) {
     const { cleanup: wsCleanup } = (0, websocket_1.setupWebSocket)(wss);
     // Start auto-sync watcher (if enabled in config)
     (0, sync_1.startAutoSyncWatcher)();
+    const stopClaudePoolPolicy = (0, claude_pool_policy_1.startClaudePoolPolicyController)();
     // Combined cleanup function
-    const cleanup = () => {
+    const cleanup = async () => {
         wsCleanup();
         (0, sync_1.stopAutoSyncWatcher)().catch(() => { });
         (0, aggregator_1.shutdownUsageAggregator)();
+        await stopClaudePoolPolicy();
     };
     // Start listening
     return new Promise((resolve, reject) => {