@rynfar/meridian 1.37.3 → 1.37.5

package/README.md

@@ -49,6 +49,95 @@ ANTHROPIC_API_KEY=x ANTHROPIC_BASE_URL=http://127.0.0.1:3456 opencode
 
 The API key value is a placeholder — Meridian authenticates through the Claude Code SDK, not API keys. Most Anthropic-compatible tools require this field to be set, but any value works.
 
+### NixOS / Nix Flake
+
+Meridian provides a Nix flake for declarative installation.
+
+**Add to your flake inputs:**
+
+```nix
+{
+  inputs.meridian.url = "github:rynfar/meridian";
+}
+```
+
+**Install the package** (via overlay or directly):
+
+```nix
+# Option A: overlay
+nixpkgs.overlays = [ meridian.overlays.default ];
+environment.systemPackages = [ pkgs.meridian ];
+
+# Option B: direct reference
+environment.systemPackages = [ meridian.packages.${system}.meridian ];
+```
+
+**OpenCode plugin** -- the plugin file is included at `${pkgs.meridian}/lib/meridian/plugin/meridian.ts`. Since this path lives in the Nix store, you need to make it available to OpenCode:
+
+If you generate your OpenCode config from Nix (e.g. via Home Manager), interpolate the path directly:
+
+```nix
+# home-manager example
+xdg.configFile."opencode/opencode.json".text = builtins.toJSON {
+  plugin = [ "${pkgs.meridian}/lib/meridian/plugin/meridian.ts" ];
+};
+```
+
+If you don't manage your OpenCode config through Nix, symlink the plugin to a stable path and reference that instead:
+
+```nix
+# configuration.nix or home-manager
+environment.etc."meridian/plugin/meridian.ts".source =
+  "${pkgs.meridian}/lib/meridian/plugin/meridian.ts";
+```
+
+Then in `~/.config/opencode/opencode.json`:
+
+```json
+{ "plugin": ["/etc/meridian/plugin/meridian.ts"] }
+```
+
+> **Important:** Do not use `meridian setup` on NixOS. It writes an absolute Nix store path (e.g. `/nix/store/...-meridian-1.x.x/lib/...`) into your OpenCode config, which will break on the next `nixos-rebuild switch` or `home-manager switch` when the store path changes. Use one of the approaches above instead.
+
+**Home Manager service** -- run Meridian as a user systemd service:
+
+```nix
+# flake.nix
+{
+  inputs.meridian.url = "github:rynfar/meridian";
+}
+
+# home-manager config
+{
+  imports = [ meridian.homeManagerModules.default ];
+
+  services.meridian = {
+    enable = true;
+    settings = {
+      port = 3456;
+      host = "127.0.0.1";
+      # passthrough = true;
+      # defaultAgent = "opencode";
+      # sonnetModel = "sonnet";
+    };
+    # Extra env vars not covered by settings
+    # environment = {
+    #   MERIDIAN_MAX_CONCURRENT = "20";
+    # };
+  };
+}
+```
+
+The service starts automatically on login. Manage it with `systemctl --user {start,stop,restart,status} meridian`.
+
+The plugin path is also available as `config.services.meridian.opencode.pluginPath` for use in your OpenCode config:
+
+```nix
+xdg.configFile."opencode/opencode.json".text = builtins.toJSON {
+  plugin = [ config.services.meridian.opencode.pluginPath ];
+};
+```
+
 ## Why Meridian?
 
 The Claude Code SDK provides programmatic access to Claude. But your favorite coding tools expect an Anthropic API endpoint. Meridian bridges that gap — it runs locally, accepts standard API requests, and routes them through the SDK. Claude Code does the heavy lifting; Meridian translates the output.

package/dist/{cli-76s66ede.js → cli-yahkdc3h.js}

@@ -7782,6 +7782,23 @@ function shouldAlwaysLoad(tool, coreSet) {
     return coreSet.has(tool.name.toLowerCase());
   return true;
 }
+function computeToolSetKey(tools) {
+  const entries = tools.map((t) => ({
+    name: t.name,
+    defer: t.defer_loading === true,
+    schema: stableStringify(t.input_schema ?? null)
+  })).sort((a, b) => a.name.localeCompare(b.name));
+  return JSON.stringify(entries);
+}
+function stableStringify(value) {
+  if (value === null || typeof value !== "object")
+    return JSON.stringify(value);
+  if (Array.isArray(value))
+    return `[${value.map(stableStringify).join(",")}]`;
+  const keys = Object.keys(value).sort();
+  const parts = keys.map((k) => `${JSON.stringify(k)}:${stableStringify(value[k])}`);
+  return `{${parts.join(",")}}`;
+}
 function stripMcpPrefix(toolName) {
   if (toolName.startsWith(PASSTHROUGH_MCP_PREFIX)) {
     return toolName.slice(PASSTHROUGH_MCP_PREFIX.length);
@@ -7789,6 +7806,71 @@ function stripMcpPrefix(toolName) {
   return toolName;
 }
 
+// src/utils/lruMap.ts
+class LRUMap {
+  maxSize;
+  onEvict;
+  map = new Map;
+  constructor(maxSize, onEvict) {
+    this.maxSize = maxSize;
+    this.onEvict = onEvict;
+  }
+  get size() {
+    return this.map.size;
+  }
+  get(key) {
+    const value = this.map.get(key);
+    if (value === undefined)
+      return;
+    this.map.delete(key);
+    this.map.set(key, value);
+    return value;
+  }
+  set(key, value) {
+    if (this.map.has(key)) {
+      this.map.delete(key);
+    } else if (this.map.size >= this.maxSize) {
+      this.evictOldest();
+    }
+    this.map.set(key, value);
+    return this;
+  }
+  has(key) {
+    return this.map.has(key);
+  }
+  delete(key) {
+    return this.map.delete(key);
+  }
+  clear() {
+    this.map.clear();
+  }
+  entries() {
+    return this.map.entries();
+  }
+  keys() {
+    return this.map.keys();
+  }
+  values() {
+    return this.map.values();
+  }
+  forEach(callbackfn) {
+    this.map.forEach((value, key) => callbackfn(value, key, this));
+  }
+  [Symbol.iterator]() {
+    return this.map[Symbol.iterator]();
+  }
+  evictOldest() {
+    const oldestKey = this.map.keys().next().value;
+    if (oldestKey === undefined)
+      return;
+    const oldestValue = this.map.get(oldestKey);
+    if (oldestValue === undefined)
+      return;
+    this.map.delete(oldestKey);
+    this.onEvict?.(oldestKey, oldestValue);
+  }
+}
+
 // src/telemetry/index.ts
 import { join } from "node:path";
 import { homedir } from "node:os";
@@ -9325,7 +9407,7 @@ function fuzzyMatchAgentName(input, validAgents) {
 var openCodeAdapter = {
   name: "opencode",
   getSessionId(c) {
-    return c.req.header("x-opencode-session");
+    return c.req.header("x-opencode-session") ?? c.req.header("x-session-affinity");
   },
   extractWorkingDirectory(body) {
     return extractClientCwd(body);
@@ -9452,6 +9534,9 @@ var droidAdapter = {
   normalizeContent(content) {
     return normalizeContent(content);
   },
+  leaksCwdViaSystemReminder() {
+    return true;
+  },
   getBlockedBuiltinTools() {
     return BLOCKED_BUILTIN_TOOLS;
   },
@@ -15725,7 +15810,6 @@ function formatUsageSummary(usage) {
 
 // src/proxy/sanitize.ts
 var ORCHESTRATION_TAGS = [
-  "system-reminder",
   "env",
   "system_information",
   "current_working_directory",
@@ -15754,9 +15838,14 @@ var ALL_PATTERNS = [
   ...SELF_CLOSING_TAG_PATTERNS,
   ...NON_XML_PATTERNS
 ];
-function sanitizeTextContent(text) {
+var SYSTEM_REMINDER_PATTERNS = [
+  /<system-reminder\b[^>]*>[\s\S]*?<\/system-reminder>/gi,
+  /<system-reminder\b[^>]*\/>/gi
+];
+function sanitizeTextContent(text, opts = {}) {
   let result = text;
-  for (const pattern of ALL_PATTERNS) {
+  const patterns = opts.stripSystemReminder ? [...ALL_PATTERNS, ...SYSTEM_REMINDER_PATTERNS] : ALL_PATTERNS;
+  for (const pattern of patterns) {
     pattern.lastIndex = 0;
     result = result.replace(pattern, "");
   }
@@ -15896,71 +15985,6 @@ function verifyLineage(cached, messages, cacheKey2, cache) {
   return { type: "diverged" };
 }
 
-// src/utils/lruMap.ts
-class LRUMap {
-  maxSize;
-  onEvict;
-  map = new Map;
-  constructor(maxSize, onEvict) {
-    this.maxSize = maxSize;
-    this.onEvict = onEvict;
-  }
-  get size() {
-    return this.map.size;
-  }
-  get(key) {
-    const value = this.map.get(key);
-    if (value === undefined)
-      return;
-    this.map.delete(key);
-    this.map.set(key, value);
-    return value;
-  }
-  set(key, value) {
-    if (this.map.has(key)) {
-      this.map.delete(key);
-    } else if (this.map.size >= this.maxSize) {
-      this.evictOldest();
-    }
-    this.map.set(key, value);
-    return this;
-  }
-  has(key) {
-    return this.map.has(key);
-  }
-  delete(key) {
-    return this.map.delete(key);
-  }
-  clear() {
-    this.map.clear();
-  }
-  entries() {
-    return this.map.entries();
-  }
-  keys() {
-    return this.map.keys();
-  }
-  values() {
-    return this.map.values();
-  }
-  forEach(callbackfn) {
-    this.map.forEach((value, key) => callbackfn(value, key, this));
-  }
-  [Symbol.iterator]() {
-    return this.map[Symbol.iterator]();
-  }
-  evictOldest() {
-    const oldestKey = this.map.keys().next().value;
-    if (oldestKey === undefined)
-      return;
-    const oldestValue = this.map.get(oldestKey);
-    if (oldestValue === undefined)
-      return;
-    this.map.delete(oldestKey);
-    this.onEvict?.(oldestKey, oldestValue);
-  }
-}
-
 // src/proxy/sessionStore.ts
 import {
   closeSync,
@@ -16360,7 +16384,7 @@ function storeSession(sessionId, messages, claudeSessionId, workingDirectory, sd
   if (sessionId)
     sessionCache.set(sessionId, state);
   const fp = getConversationFingerprint(messages, workingDirectory);
-  if (fp)
+  if (fp && !sessionId)
     fingerprintCache.set(fp, state);
   const key = sessionId || fp;
   if (key) {
@@ -16371,7 +16395,43 @@ function storeSession(sessionId, messages, claudeSessionId, workingDirectory, sd
 // src/proxy/server.ts
 var exec3 = promisify3(execCallback2);
 var claudeExecutable = "";
-function buildFreshPrompt(messages, stripCacheControl) {
+function flattenAssistantContent(content) {
+  if (typeof content === "string")
+    return content;
+  if (!Array.isArray(content))
+    return String(content ?? "");
+  return content.map((b) => b?.type === "text" && b.text ? b.text : "").filter(Boolean).join(`
+`);
+}
+function flattenUserContent(content, sanitizeOpts = {}) {
+  if (typeof content === "string")
+    return sanitizeTextContent(content, sanitizeOpts);
+  if (!Array.isArray(content))
+    return String(content ?? "");
+  return content.map((b) => {
+    if (b?.type === "text" && b.text)
+      return sanitizeTextContent(b.text, sanitizeOpts);
+    if (b?.type === "tool_result") {
+      const inner = b.content;
+      if (typeof inner === "string")
+        return inner;
+      if (Array.isArray(inner)) {
+        return inner.map((ib) => ib?.type === "text" && ib.text ? ib.text : "").filter(Boolean).join(`
+`);
+      }
+      return "";
+    }
+    if (b?.type === "image")
+      return "[Image attached]";
+    if (b?.type === "document")
+      return "[Document attached]";
+    if (b?.type === "file")
+      return "[File attached]";
+    return "";
+  }).filter(Boolean).join(`
+`);
+}
+function buildFreshPrompt(messages, stripCacheControl, sanitizeOpts = {}) {
   const MULTIMODAL_TYPES = new Set(["image", "document", "file"]);
   const hasMultimodal = messages.some((m) => Array.isArray(m.content) && m.content.some((b) => MULTIMODAL_TYPES.has(b.type)));
   if (hasMultimodal) {
@@ -16384,28 +16444,14 @@ function buildFreshPrompt(messages, stripCacheControl) {
           parent_tool_use_id: null
         });
       } else {
-        let text;
-        if (typeof m.content === "string") {
-          text = `[Assistant: ${m.content}]`;
-        } else if (Array.isArray(m.content)) {
-          text = m.content.map((b) => {
-            if (b.type === "text" && b.text)
-              return `[Assistant: ${b.text}]`;
-            if (b.type === "tool_use")
-              return `[Tool Use: ${b.name}(${JSON.stringify(b.input)})]`;
-            if (b.type === "tool_result")
-              return `[Tool Result: ${typeof b.content === "string" ? b.content : JSON.stringify(b.content)}]`;
-            return "";
-          }).filter(Boolean).join(`
-`);
-        } else {
-          text = `[Assistant: ${String(m.content)}]`;
+        const assistantText = flattenAssistantContent(m.content);
+        if (assistantText) {
+          structured.push({
+            type: "user",
+            message: { role: "user", content: `[Assistant: ${assistantText}]` },
+            parent_tool_use_id: null
+          });
         }
-        structured.push({
-          type: "user",
-          message: { role: "user", content: text },
-          parent_tool_use_id: null
-        });
       }
     }
     return async function* () {
@@ -16415,31 +16461,9 @@ function buildFreshPrompt(messages, stripCacheControl) {
   }
   return messages.map((m) => {
     const role = m.role === "assistant" ? "Assistant" : "Human";
-    let content;
-    if (typeof m.content === "string") {
-      content = sanitizeTextContent(m.content);
-    } else if (Array.isArray(m.content)) {
-      content = m.content.map((block) => {
-        if (block.type === "text" && block.text)
-          return sanitizeTextContent(block.text);
-        if (block.type === "tool_use")
-          return `[Tool Use: ${block.name}(${JSON.stringify(block.input)})]`;
-        if (block.type === "tool_result")
-          return `[Tool Result for ${block.tool_use_id}: ${typeof block.content === "string" ? block.content : JSON.stringify(block.content)}]`;
-        if (block.type === "image")
-          return "[Image attached]";
-        if (block.type === "document")
-          return "[Document attached]";
-        if (block.type === "file")
-          return "[File attached]";
-        return "";
-      }).filter(Boolean).join(`
-`);
-    } else {
-      content = String(m.content);
-    }
-    return `${role}: ${content}`;
-  }).join(`
+    const content = m.role === "assistant" ? flattenAssistantContent(m.content) : flattenUserContent(m.content, sanitizeOpts);
+    return content ? `${role}: ${content}` : "";
+  }).filter(Boolean).join(`
 
 `) || "";
 }
@@ -16495,6 +16519,7 @@ function createProxyServer(config = {}) {
   restoreActiveProfile(finalConfig.profiles);
   const sessionDiscoveredTools = new Map;
   const sessionToolCache = new Map;
+  const sessionMcpCache = new LRUMap(getMaxSessionsLimit());
   const app = new Hono2;
   app.use("*", cors());
   app.use("/v1/*", requireAuth);
@@ -16569,6 +16594,7 @@ function createProxyServer(config = {}) {
         const profile = resolveProfile(finalConfig.profiles, finalConfig.defaultProfile, c.req.header("x-meridian-profile") || undefined);
         const authStatus = await getClaudeAuthStatusAsync(profile.id !== "default" ? profile.id : undefined, Object.keys(profile.env).length > 0 ? profile.env : undefined);
         const agentMode = c.req.header("x-opencode-agent-mode") ?? null;
+        const requestSource = c.req.header("x-meridian-source")?.slice(0, 64) || undefined;
         let model = mapModelToClaudeModel(body.model || "sonnet", authStatus?.subscriptionType, agentMode);
         const adapterStreamPref = adapter.prefersStreaming?.(body);
         const stream2 = adapterStreamPref !== undefined ? adapterStreamPref : body.stream ?? false;
@@ -16628,7 +16654,11 @@ function createProxyServer(config = {}) {
         const agentSessionId = adapter.getSessionId(c);
         const profileSessionId = profile.id !== "default" && agentSessionId ? `${profile.id}:${agentSessionId}` : agentSessionId;
         const profileScopedCwd = profile.id !== "default" ? `${workingDirectory}::profile=${profile.id}` : workingDirectory;
-        const lineageResult = lookupSession(profileSessionId, body.messages || [], profileScopedCwd);
+        const isIndependentSession = requestSource?.startsWith("fork-") || requestSource?.startsWith("subagent-") || false;
+        let lineageResult = isIndependentSession ? { type: "diverged" } : lookupSession(profileSessionId, body.messages || [], profileScopedCwd);
+        if (lineageResult.type === "undo" && adapter.name === "opencode" && !agentSessionId) {
+          lineageResult = { type: "diverged" };
+        }
         const isResume = lineageResult.type === "continuation" || lineageResult.type === "compaction";
         const isUndo = lineageResult.type === "undo";
         const cachedSession = lineageResult.type !== "diverged" ? lineageResult.session : undefined;
@@ -16641,10 +16671,10 @@ function createProxyServer(config = {}) {
         const lineageType = lineageResult.type === "diverged" && !cachedSession ? "new" : lineageResult.type;
         const msgCount = Array.isArray(body.messages) ? body.messages.length : 0;
         const toolCount = body.tools?.length ?? 0;
-        const requestLogLine = `${requestMeta.requestId} adapter=${adapter.name} model=${model} stream=${stream2} tools=${toolCount} lineage=${lineageType} session=${resumeSessionId?.slice(0, 8) || "new"}${isUndo && undoRollbackUuid ? ` rollback=${undoRollbackUuid.slice(0, 8)}` : ""}${agentMode ? ` agent=${agentMode}` : ""} active=${activeSessions}/${MAX_CONCURRENT_SESSIONS} msgCount=${msgCount}`;
+        const requestLogLine = `${requestMeta.requestId} adapter=${adapter.name}${requestSource ? ` source=${requestSource}` : ""} model=${model} stream=${stream2} tools=${toolCount} lineage=${lineageType} session=${resumeSessionId?.slice(0, 8) || "new"}${isUndo && undoRollbackUuid ? ` rollback=${undoRollbackUuid.slice(0, 8)}` : ""}${agentMode ? ` agent=${agentMode}` : ""} active=${activeSessions}/${MAX_CONCURRENT_SESSIONS} msgCount=${msgCount}`;
         console.error(`[PROXY] ${requestLogLine} msgs=${msgSummary}`);
         diagnosticLog2.session(`${requestLogLine}`, requestMeta.requestId);
-        if (lineageResult.type === "diverged" && profileSessionId) {
+        if (lineageResult.type === "diverged" && profileSessionId && !isIndependentSession) {
           const recovery = lookupSessionRecovery(profileSessionId);
           if (recovery) {
             const prevId = recovery.previousClaudeSessionId || recovery.claudeSessionId;
@@ -16666,6 +16696,9 @@ function createProxyServer(config = {}) {
           claudeLog("debug.agents", { names: validAgentNames, count: validAgentNames.length });
         }
         systemContext += adapter.buildSystemContextAddendum?.(body, sdkAgents) ?? "";
+        const sanitizeOpts = {
+          stripSystemReminder: adapter.leaksCwdViaSystemReminder?.() ?? false
+        };
         const allMessages = body.messages || [];
         let messagesToConvert;
         if ((isResume || isUndo) && cachedSession) {
@@ -16709,59 +16742,23 @@ function createProxyServer(config = {}) {
                   parent_tool_use_id: null
                 });
               } else {
-                let text;
-                if (typeof m.content === "string") {
-                  text = `[Assistant: ${m.content}]`;
-                } else if (Array.isArray(m.content)) {
-                  text = m.content.map((b) => {
-                    if (b.type === "text" && b.text)
-                      return `[Assistant: ${b.text}]`;
-                    if (b.type === "tool_use")
-                      return `[Tool Use: ${b.name}(${JSON.stringify(b.input)})]`;
-                    if (b.type === "tool_result")
-                      return `[Tool Result: ${typeof b.content === "string" ? b.content : JSON.stringify(b.content)}]`;
-                    return "";
-                  }).filter(Boolean).join(`
-`);
-                } else {
-                  text = `[Assistant: ${String(m.content)}]`;
+                const assistantText = flattenAssistantContent(m.content);
+                if (assistantText) {
+                  structuredMessages.push({
+                    type: "user",
+                    message: { role: "user", content: `[Assistant: ${assistantText}]` },
+                    parent_tool_use_id: null
+                  });
                 }
-                structuredMessages.push({
-                  type: "user",
-                  message: { role: "user", content: text },
-                  parent_tool_use_id: null
-                });
               }
             }
           }
         } else {
           textPrompt = messagesToConvert?.map((m) => {
             const role = m.role === "assistant" ? "Assistant" : "Human";
-            let content;
-            if (typeof m.content === "string") {
-              content = sanitizeTextContent(m.content);
-            } else if (Array.isArray(m.content)) {
-              content = m.content.map((block) => {
-                if (block.type === "text" && block.text)
-                  return sanitizeTextContent(block.text);
-                if (block.type === "tool_use")
-                  return `[Tool Use: ${block.name}(${JSON.stringify(block.input)})]`;
-                if (block.type === "tool_result")
-                  return `[Tool Result for ${block.tool_use_id}: ${typeof block.content === "string" ? block.content : JSON.stringify(block.content)}]`;
-                if (block.type === "image")
-                  return "[Image attached]";
-                if (block.type === "document")
-                  return "[Document attached]";
-                if (block.type === "file")
-                  return "[File attached]";
-                return "";
-              }).filter(Boolean).join(`
-`);
-            } else {
-              content = String(m.content);
-            }
-            return `${role}: ${content}`;
-          }).join(`
+            const content = m.role === "assistant" ? flattenAssistantContent(m.content) : flattenUserContent(m.content, sanitizeOpts);
+            return content ? `${role}: ${content}` : "";
+          }).filter(Boolean).join(`
 
 `) || "";
         }
@@ -16780,7 +16777,19 @@ function createProxyServer(config = {}) {
           }
         }
         if (passthrough && requestTools.length > 0) {
-          passthroughMcp = createPassthroughMcpServer(requestTools, adapter.getCoreToolNames?.());
+          const toolSetKey = computeToolSetKey(requestTools);
+          const cachedMcp = profileSessionId ? sessionMcpCache.get(profileSessionId) : undefined;
+          if (cachedMcp && cachedMcp.key === toolSetKey) {
+            passthroughMcp = cachedMcp.mcp;
+          } else {
+            passthroughMcp = createPassthroughMcpServer(requestTools, adapter.getCoreToolNames?.());
+            if (profileSessionId) {
+              sessionMcpCache.set(profileSessionId, { key: toolSetKey, mcp: passthroughMcp });
+              if (cachedMcp) {
+                console.error(`[PROXY] ${requestMeta.requestId} tools_changed: MCP server recreated (prompt cache likely invalidates)`);
+              }
+            }
+          }
           if (profileSessionId)
             sessionToolCache.set(profileSessionId, requestTools);
         }
@@ -16903,7 +16912,7 @@ function createProxyServer(config = {}) {
                     for (let i = 0;i < allMessages.length; i++)
                       sdkUuidMap.push(null);
                     yield* query(buildQueryOptions({
-                      prompt: buildFreshPrompt(allMessages, stripCacheControl),
+                      prompt: buildFreshPrompt(allMessages, stripCacheControl, sanitizeOpts),
                       model,
                       workingDirectory,
                       systemContext,
@@ -17146,7 +17155,7 @@ Subprocess stderr: ${stderrOutput}`;
             cacheCreationInputTokens: lastUsage?.cache_creation_input_tokens,
             cacheHitRate: computeCacheHitRate(lastUsage)
           });
-          if (currentSessionId) {
+          if (currentSessionId && !isIndependentSession) {
             storeSession(profileSessionId, body.messages || [], currentSessionId, profileScopedCwd, sdkUuidMap, lastUsage);
           }
           const responseSessionId = currentSessionId || resumeSessionId || `session_${Date.now()}`;
@@ -17272,7 +17281,7 @@ Subprocess stderr: ${stderrOutput}`;
                       for (let i = 0;i < allMessages.length; i++)
                         sdkUuidMap.push(null);
                       yield* query(buildQueryOptions({
-                        prompt: buildFreshPrompt(allMessages, stripCacheControl),
+                        prompt: buildFreshPrompt(allMessages, stripCacheControl, sanitizeOpts),
                         model,
                         workingDirectory,
                         systemContext,
@@ -17530,7 +17539,7 @@ data: ${JSON.stringify({ type: "message_stop" })}
                 const allNames = [...sessionDiscoveredTools.get(sessId)];
                 console.error(`[PROXY] ${requestMeta.requestId} discovered=${discoveredTools.size} (${newNames}) session_total=${allNames.length}`);
               }
-              if (currentSessionId) {
+              if (currentSessionId && !isIndependentSession) {
                 storeSession(profileSessionId, body.messages || [], currentSessionId, profileScopedCwd, sdkUuidMap, lastUsage);
               }
               if (!streamClosed) {

package/dist/cli.js

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import {
   startProxyServer
-} from "./cli-76s66ede.js";
+} from "./cli-yahkdc3h.js";
 import"./cli-pr79d7nw.js";
 import"./cli-rtab0qa6.js";
 import"./cli-m9pfb7h9.js";

package/dist/proxy/adapter.d.ts

@@ -125,6 +125,16 @@ export interface AgentAdapter {
      * the extra block is noisy. When undefined, the proxy defaults to true.
      */
     shouldTrackFileChanges?(): boolean;
+    /**
+     * Whether this agent leaks CWD/env info through `<system-reminder>` blocks
+     * in user messages (Droid). When true, the proxy strips those blocks before
+     * flattening to a text prompt so they don't echo back to the model.
+     *
+     * Most agents (OpenCode, Crush, ForgeCode) use `<system-reminder>` to surface
+     * harness state the model needs to see (e.g. oh-my-opencode background task
+     * IDs), so the default is false — preserve them.
+     */
+    leaksCwdViaSystemReminder?(): boolean;
     /**
      * Map a client-side tool_use block to file changes (passthrough mode).
      *

package/dist/proxy/adapter.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"adapter.d.ts","sourceRoot":"","sources":["../../src/proxy/adapter.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,MAAM,CAAA;AACnC,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,gCAAgC,CAAA;AAEnE;;;;GAIG;AACH,MAAM,WAAW,YAAY;IAC3B,sCAAsC;IACtC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IAErB;;;OAGG;IACH,YAAY,CAAC,CAAC,EAAE,OAAO,GAAG,MAAM,GAAG,SAAS,CAAA;IAE5C;;;OAGG;IACH,uBAAuB,CAAC,IAAI,EAAE,GAAG,GAAG,MAAM,GAAG,SAAS,CAAA;IAEtD;;;OAGG;IACH,gBAAgB,CAAC,OAAO,EAAE,GAAG,GAAG,MAAM,CAAA;IAEtC;;;OAGG;IACH,sBAAsB,IAAI,SAAS,MAAM,EAAE,CAAA;IAE3C;;;;OAIG;IACH,yBAAyB,IAAI,SAAS,MAAM,EAAE,CAAA;IAE9C;;;OAGG;IACH,gBAAgB,IAAI,MAAM,CAAA;IAE1B;;OAEG;IACH,kBAAkB,IAAI,SAAS,MAAM,EAAE,CAAA;IAEvC;;;;OAIG;IACH,cAAc,CAAC,CAAC,IAAI,EAAE,GAAG,EAAE,YAAY,EAAE,SAAS,MAAM,EAAE,GAAG,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IAEhF;;;OAGG;IACH,aAAa,CAAC,CAAC,IAAI,EAAE,GAAG,EAAE,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,GAAG,CAAA;IAE9D;;;OAGG;IACH,0BAA0B,CAAC,CAAC,IAAI,EAAE,GAAG,EAAE,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,MAAM,CAAA;IAE9E;;;;;;OAMG;IACH,gBAAgB,CAAC,CAAC,IAAI,EAAE,GAAG,GAAG,OAAO,CAAA;IAErC;;;;;;;;OAQG;IACH,eAAe,CAAC,IAAI,OAAO,CAAA;IAE3B;;;;;;;OAOG;IACH,gBAAgB,CAAC,IAAI,SAAS,MAAM,EAAE,CAAA;IAEtC;;;;;;;;;;;;;;OAcG;IACH,iBAAiB,CAAC,IAAI,aAAa,EAAE,CAAA;IAErC;;;;;;;OAOG;IACH,gBAAgB,CAAC,IAAI,OAAO,CAAA;IAE5B;;;;;;OAMG;IACH,sBAAsB,CAAC,IAAI,OAAO,CAAA;IAElC;;;;;;;;;;;;;;;OAeG;IACH,6BAA6B,CAAC,CAAC,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,GAAG,OAAO,eAAe,EAAE,UAAU,EAAE,CAAA;CAC3G"}
+{"version":3,"file":"adapter.d.ts","sourceRoot":"","sources":["../../src/proxy/adapter.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,MAAM,CAAA;AACnC,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,gCAAgC,CAAA;AAEnE;;;;GAIG;AACH,MAAM,WAAW,YAAY;IAC3B,sCAAsC;IACtC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IAErB;;;OAGG;IACH,YAAY,CAAC,CAAC,EAAE,OAAO,GAAG,MAAM,GAAG,SAAS,CAAA;IAE5C;;;OAGG;IACH,uBAAuB,CAAC,IAAI,EAAE,GAAG,GAAG,MAAM,GAAG,SAAS,CAAA;IAEtD;;;OAGG;IACH,gBAAgB,CAAC,OAAO,EAAE,GAAG,GAAG,MAAM,CAAA;IAEtC;;;OAGG;IACH,sBAAsB,IAAI,SAAS,MAAM,EAAE,CAAA;IAE3C;;;;OAIG;IACH,yBAAyB,IAAI,SAAS,MAAM,EAAE,CAAA;IAE9C;;;OAGG;IACH,gBAAgB,IAAI,MAAM,CAAA;IAE1B;;OAEG;IACH,kBAAkB,IAAI,SAAS,MAAM,EAAE,CAAA;IAEvC;;;;OAIG;IACH,cAAc,CAAC,CAAC,IAAI,EAAE,GAAG,EAAE,YAAY,EAAE,SAAS,MAAM,EAAE,GAAG,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IAEhF;;;OAGG;IACH,aAAa,CAAC,CAAC,IAAI,EAAE,GAAG,EAAE,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,GAAG,CAAA;IAE9D;;;OAGG;IACH,0BAA0B,CAAC,CAAC,IAAI,EAAE,GAAG,EAAE,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,MAAM,CAAA;IAE9E;;;;;;OAMG;IACH,gBAAgB,CAAC,CAAC,IAAI,EAAE,GAAG,GAAG,OAAO,CAAA;IAErC;;;;;;;;OAQG;IACH,eAAe,CAAC,IAAI,OAAO,CAAA;IAE3B;;;;;;;OAOG;IACH,gBAAgB,CAAC,IAAI,SAAS,MAAM,EAAE,CAAA;IAEtC;;;;;;;;;;;;;;OAcG;IACH,iBAAiB,CAAC,IAAI,aAAa,EAAE,CAAA;IAErC;;;;;;;OAOG;IACH,gBAAgB,CAAC,IAAI,OAAO,CAAA;IAE5B;;;;;;OAMG;IACH,sBAAsB,CAAC,IAAI,OAAO,CAAA;IAElC;;;;;;;;OAQG;IACH,yBAAyB,CAAC,IAAI,OAAO,CAAA;IAErC;;;;;;;;;;;;;;;OAeG;IACH,6BAA6B,CAAC,CAAC,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,GAAG,OAAO,eAAe,EAAE,UAAU,EAAE,CAAA;CAC3G"}

package/dist/proxy/adapters/droid.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"droid.d.ts","sourceRoot":"","sources":["../../../src/proxy/adapters/droid.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAGH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,YAAY,CAAA;AAwC9C,eAAO,MAAM,YAAY,EAAE,YAuE1B,CAAA"}
+{"version":3,"file":"droid.d.ts","sourceRoot":"","sources":["../../../src/proxy/adapters/droid.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAGH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,YAAY,CAAA;AAwC9C,eAAO,MAAM,YAAY,EAAE,YA8E1B,CAAA"}

package/dist/proxy/passthroughTools.d.ts

@@ -30,6 +30,16 @@ export declare function createPassthroughMcpServer(tools: Array<{
     toolNames: string[];
     hasDeferredTools: boolean;
 };
+/**
+ * Stable cache key for a tool set — name + input schema, sorted.
+ * Schema is included so silently-updated tool definitions force a rebuild
+ * of the cached MCP server.
+ */
+export declare function computeToolSetKey(tools: Array<{
+    name: string;
+    input_schema?: unknown;
+    defer_loading?: boolean;
+}>): string;
 /**
  * Strip the MCP prefix from a tool name to get the OpenCode tool name.
  * e.g., "mcp__oc__todowrite" → "todowrite"

package/dist/proxy/passthroughTools.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"passthroughTools.d.ts","sourceRoot":"","sources":["../../src/proxy/passthroughTools.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAKH,eAAO,MAAM,oBAAoB,OAAO,CAAA;AACxC,eAAO,MAAM,sBAAsB,cAAmC,CAAA;AA0CtE,wBAAgB,qBAAqB,IAAI,MAAM,CAM9C;AAED;;;;;;;GAOG;AACH,wBAAgB,0BAA0B,CACxC,KAAK,EAAE,KAAK,CAAC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAAC,YAAY,CAAC,EAAE,GAAG,CAAC;IAAC,aAAa,CAAC,EAAE,OAAO,CAAA;CAAE,CAAC,EACjG,aAAa,CAAC,EAAE,SAAS,MAAM,EAAE;;;;EA4DlC;AAqBD;;;GAGG;AACH,wBAAgB,cAAc,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAKvD"}
+{"version":3,"file":"passthroughTools.d.ts","sourceRoot":"","sources":["../../src/proxy/passthroughTools.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAKH,eAAO,MAAM,oBAAoB,OAAO,CAAA;AACxC,eAAO,MAAM,sBAAsB,cAAmC,CAAA;AA0CtE,wBAAgB,qBAAqB,IAAI,MAAM,CAM9C;AAED;;;;;;;GAOG;AACH,wBAAgB,0BAA0B,CACxC,KAAK,EAAE,KAAK,CAAC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAAC,YAAY,CAAC,EAAE,GAAG,CAAC;IAAC,aAAa,CAAC,EAAE,OAAO,CAAA;CAAE,CAAC,EACjG,aAAa,CAAC,EAAE,SAAS,MAAM,EAAE;;;;EA4DlC;AAqBD;;;;GAIG;AACH,wBAAgB,iBAAiB,CAC/B,KAAK,EAAE,KAAK,CAAC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,YAAY,CAAC,EAAE,OAAO,CAAC;IAAC,aAAa,CAAC,EAAE,OAAO,CAAA;CAAE,CAAC,GAC9E,MAAM,CASR;AAUD;;;GAGG;AACH,wBAAgB,cAAc,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAKvD"}

package/dist/proxy/sanitize.d.ts

@@ -16,11 +16,16 @@
  *
  * Fixes: https://github.com/rynfar/meridian/issues/167
  */
+export interface SanitizeOptions {
+    /** Strip `<system-reminder>` blocks. Enable for adapters (Droid) that leak
+     *  CWD/env through this tag. */
+    stripSystemReminder?: boolean;
+}
 /**
  * Strip orchestration wrappers from a single text string.
  *
  * Designed to be called on individual content blocks (not concatenated
  * prompt strings) to eliminate cross-block regex matching risk.
  */
-export declare function sanitizeTextContent(text: string): string;
+export declare function sanitizeTextContent(text: string, opts?: SanitizeOptions): string;
 //# sourceMappingURL=sanitize.d.ts.map

package/dist/proxy/sanitize.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sanitize.d.ts","sourceRoot":"","sources":["../../src/proxy/sanitize.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AA6DH;;;;;GAKG;AACH,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAUxD"}
+{"version":3,"file":"sanitize.d.ts","sourceRoot":"","sources":["../../src/proxy/sanitize.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAwEH,MAAM,WAAW,eAAe;IAC9B;oCACgC;IAChC,mBAAmB,CAAC,EAAE,OAAO,CAAA;CAC9B;AAED;;;;;GAKG;AACH,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,GAAE,eAAoB,GAAG,MAAM,CAapF"}

package/dist/proxy/server.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../../src/proxy/server.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAE,WAAW,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,SAAS,CAAA;AACtE,YAAY,EAAE,WAAW,EAAE,aAAa,EAAE,WAAW,EAAE,CAAA;AAyBvD,OAAO,EACL,kBAAkB,EAClB,WAAW,EACX,oBAAoB,EACpB,KAAK,aAAa,EAEnB,MAAM,mBAAmB,CAAA;AAG1B,OAAO,EAA+B,iBAAiB,EAAE,mBAAmB,EAAsC,MAAM,iBAAiB,CAAA;AAGzI,OAAO,EAAE,kBAAkB,EAAE,WAAW,EAAE,oBAAoB,EAAE,CAAA;AAChE,OAAO,EAAE,iBAAiB,EAAE,mBAAmB,EAAE,CAAA;AACjD,YAAY,EAAE,aAAa,EAAE,CAAA;AAkJ7B,wBAAgB,iBAAiB,CAAC,MAAM,GAAE,OAAO,CAAC,WAAW,CAAM,GAAG,WAAW,CAq4DhF;AAED,wBAAsB,gBAAgB,CAAC,MAAM,GAAE,OAAO,CAAC,WAAW,CAAM,GAAG,OAAO,CAAC,aAAa,CAAC,CAiEhG"}
+{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../../src/proxy/server.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAE,WAAW,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,SAAS,CAAA;AACtE,YAAY,EAAE,WAAW,EAAE,aAAa,EAAE,WAAW,EAAE,CAAA;AA0BvD,OAAO,EACL,kBAAkB,EAClB,WAAW,EACX,oBAAoB,EACpB,KAAK,aAAa,EAEnB,MAAM,mBAAmB,CAAA;AAG1B,OAAO,EAA+B,iBAAiB,EAAE,mBAAmB,EAAsC,MAAM,iBAAiB,CAAA;AAGzI,OAAO,EAAE,kBAAkB,EAAE,WAAW,EAAE,oBAAoB,EAAE,CAAA;AAChE,OAAO,EAAE,iBAAiB,EAAE,mBAAmB,EAAE,CAAA;AACjD,YAAY,EAAE,aAAa,EAAE,CAAA;AAgL7B,wBAAgB,iBAAiB,CAAC,MAAM,GAAE,OAAO,CAAC,WAAW,CAAM,GAAG,WAAW,CAy6DhF;AAED,wBAAsB,gBAAgB,CAAC,MAAM,GAAE,OAAO,CAAC,WAAW,CAAM,GAAG,OAAO,CAAC,aAAa,CAAC,CAiEhG"}

package/dist/proxy/session/cache.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"cache.d.ts","sourceRoot":"","sources":["../../../src/proxy/session/cache.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAWH,OAAO,EAIL,KAAK,YAAY,EACjB,KAAK,UAAU,EACf,KAAK,aAAa,EACnB,MAAM,WAAW,CAAA;AAMlB,wBAAgB,mBAAmB,IAAI,MAAM,CAW5C;AAqCD;kGACkG;AAClG,wBAAgB,iBAAiB,SAYhC;AAED;iFACiF;AACjF,wBAAgB,YAAY,CAC1B,SAAS,EAAE,MAAM,GAAG,SAAS,EAC7B,gBAAgB,CAAC,EAAE,MAAM,EACzB,QAAQ,CAAC,EAAE,KAAK,CAAC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,GAAG,CAAA;CAAE,CAAC,GAC/C,IAAI,CAoBN;AAUD;;uDAEuD;AACvD,wBAAgB,aAAa,CAC3B,SAAS,EAAE,MAAM,GAAG,SAAS,EAC7B,QAAQ,EAAE,KAAK,CAAC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,GAAG,CAAA;CAAE,CAAC,EAC/C,gBAAgB,CAAC,EAAE,MAAM,GACxB,aAAa,CAuDf;AAED;;uFAEuF;AACvF,wBAAgB,oBAAoB,CAAC,eAAe,EAAE,MAAM,GAAG,YAAY,GAAG,SAAS,CA2BtF;AAED;;;yFAGyF;AACzF,wBAAgB,YAAY,CAC1B,SAAS,EAAE,MAAM,GAAG,SAAS,EAC7B,QAAQ,EAAE,KAAK,CAAC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,OAAO,CAAA;CAAE,CAAC,EACnD,eAAe,EAAE,MAAM,EACvB,gBAAgB,CAAC,EAAE,MAAM,EACzB,eAAe,CAAC,EAAE,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC,EACtC,YAAY,CAAC,EAAE,UAAU,QA+B1B"}
+{"version":3,"file":"cache.d.ts","sourceRoot":"","sources":["../../../src/proxy/session/cache.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAWH,OAAO,EAIL,KAAK,YAAY,EACjB,KAAK,UAAU,EACf,KAAK,aAAa,EACnB,MAAM,WAAW,CAAA;AAMlB,wBAAgB,mBAAmB,IAAI,MAAM,CAW5C;AAqCD;kGACkG;AAClG,wBAAgB,iBAAiB,SAYhC;AAED;iFACiF;AACjF,wBAAgB,YAAY,CAC1B,SAAS,EAAE,MAAM,GAAG,SAAS,EAC7B,gBAAgB,CAAC,EAAE,MAAM,EACzB,QAAQ,CAAC,EAAE,KAAK,CAAC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,GAAG,CAAA;CAAE,CAAC,GAC/C,IAAI,CAoBN;AAUD;;uDAEuD;AACvD,wBAAgB,aAAa,CAC3B,SAAS,EAAE,MAAM,GAAG,SAAS,EAC7B,QAAQ,EAAE,KAAK,CAAC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,GAAG,CAAA;CAAE,CAAC,EAC/C,gBAAgB,CAAC,EAAE,MAAM,GACxB,aAAa,CAuDf;AAED;;uFAEuF;AACvF,wBAAgB,oBAAoB,CAAC,eAAe,EAAE,MAAM,GAAG,YAAY,GAAG,SAAS,CA2BtF;AAED;;;yFAGyF;AACzF,wBAAgB,YAAY,CAC1B,SAAS,EAAE,MAAM,GAAG,SAAS,EAC7B,QAAQ,EAAE,KAAK,CAAC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,OAAO,CAAA;CAAE,CAAC,EACnD,eAAe,EAAE,MAAM,EACvB,gBAAgB,CAAC,EAAE,MAAM,EACzB,eAAe,CAAC,EAAE,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC,EACtC,YAAY,CAAC,EAAE,UAAU,QAoC1B"}

package/dist/server.js

@@ -6,7 +6,7 @@ import {
   getMaxSessionsLimit,
   hashMessage,
   startProxyServer
-} from "./cli-76s66ede.js";
+} from "./cli-yahkdc3h.js";
 import"./cli-pr79d7nw.js";
 import"./cli-rtab0qa6.js";
 import"./cli-m9pfb7h9.js";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@rynfar/meridian",
-  "version": "1.37.3",
+  "version": "1.37.5",
   "description": "Local Anthropic API powered by your Claude Max subscription. One subscription, every agent.",
   "type": "module",
   "main": "./dist/server.js",
@@ -25,6 +25,7 @@
     "postbuild": "node --check dist/cli.js && node --check dist/server.js && test -f dist/proxy/server.d.ts",
     "prepublishOnly": "bun run build",
     "test": "bun test --path-ignore-patterns '**/*session-store*' --path-ignore-patterns '**/*proxy-async-ops*' --path-ignore-patterns '**/*proxy-extra-usage-fallback*' --path-ignore-patterns '**/*models-auth-status*' --path-ignore-patterns '**/*proxy-context-usage-store*' --path-ignore-patterns '**/*proxy-passthrough-thinking*' --path-ignore-patterns '**/*profile-switch-integration*' --path-ignore-patterns '**/*session-recovery*' --path-ignore-patterns '**/*models.test*' --path-ignore-patterns '**/*proxy-health-degraded*' --path-ignore-patterns '**/*proxy-subagent-model-selection*' && bun test src/__tests__/profile-switch-integration.test.ts && bun test src/__tests__/proxy-extra-usage-fallback.test.ts && bun test src/__tests__/proxy-async-ops.test.ts && bun test src/__tests__/proxy-session-store.test.ts && bun test src/__tests__/session-store-pruning.test.ts && bun test src/__tests__/proxy-session-store-locking.test.ts && bun test src/__tests__/proxy-context-usage-store.test.ts && bun test src/__tests__/models-auth-status.test.ts && bun test src/__tests__/proxy-passthrough-thinking.test.ts && bun test src/__tests__/proxy-session-recovery.test.ts && bun test src/__tests__/models.test.ts && bun test src/__tests__/proxy-health-degraded.test.ts && bun test src/__tests__/proxy-subagent-model-selection.test.ts",
+    "nix:lock": "bun2nix -o bun.nix",
     "typecheck": "tsc --noEmit",
     "proxy:direct": "bun run ./bin/cli.ts"
   },
@@ -36,6 +37,7 @@
     "@hono/node-server": "^1.19.11",
     "@types/bun": "^1.3.11",
     "@types/node": "^22.0.0",
+    "bun2nix": "^2.0.8",
     "glob": "^13.0.0",
     "hono": "^4.11.4",
     "typescript": "^5.8.2"