@rynfar/meridian 1.53.0 → 1.54.0

package/dist/cli.js

@@ -1,13 +1,13 @@
 #!/usr/bin/env node
 import {
   startProxyServer
-} from "./cli-027as0fx.js";
+} from "./cli-mqht6rs9.js";
 import"./cli-f0yqy2d2.js";
 import"./cli-sry5aqdj.js";
 import"./cli-xmweegb1.js";
 import {
   resolveClaudeExecutableAsync
-} from "./cli-vjeftz4z.js";
+} from "./cli-jhm27q0x.js";
 import"./cli-340h1chz.js";
 import"./cli-je60fevk.js";
 import"./cli-aq5zz92m.js";
@@ -55,7 +55,7 @@ See https://github.com/rynfar/meridian for full documentation.`);
   process.exit(0);
 }
 if (args[0] === "profile") {
-  const { profileAdd, profileAddOauthToken, profileList, profileRemove, profileSwitch, profileLogin, profileHelp } = await import("./profileCli-s1h4vh8w.js");
+  const { profileAdd, profileAddOauthToken, profileList, profileRemove, profileSwitch, profileLogin, profileHelp } = await import("./profileCli-d9tcp916.js");
   const subcommand = args[1];
   const profileId = args[2];
   const headless = args.includes("--headless");

package/dist/grepTool.d.ts

@@ -0,0 +1,23 @@
+/**
+ * The MCP grep tool handler (registered in mcpTools.ts; lives here so it can
+ * be unit-tested directly). Uses execFile (no shell) so pattern/include/path
+ * can never be interpreted as shell syntax. From #543 by @sittitep.
+ */
+export declare function runGrepTool(args: {
+    pattern: string;
+    path?: string;
+    include?: string;
+}): Promise<{
+    content: {
+        type: "text";
+        text: string;
+    }[];
+    isError?: undefined;
+} | {
+    content: {
+        type: "text";
+        text: string;
+    }[];
+    isError: boolean;
+}>;
+//# sourceMappingURL=grepTool.d.ts.map

package/dist/grepTool.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"grepTool.d.ts","sourceRoot":"","sources":["../src/grepTool.ts"],"names":[],"mappings":"AAOA;;;;GAIG;AACH,wBAAsB,WAAW,CAAC,IAAI,EAAE;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAA;CAAE;;;;;;;;;;;;GAoB3F"}

package/dist/mcpTools.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"mcpTools.d.ts","sourceRoot":"","sources":["../src/mcpTools.ts"],"names":[],"mappings":"AAYA;;;;;;;;;;;;GAYG;AACH,wBAAgB,uBAAuB,4EA8KtC"}
+{"version":3,"file":"mcpTools.d.ts","sourceRoot":"","sources":["../src/mcpTools.ts"],"names":[],"mappings":"AAaA;;;;;;;;;;;;GAYG;AACH,wBAAgB,uBAAuB,4EA6JtC"}

package/dist/profileCli-d9tcp916.js

@@ -0,0 +1,35 @@
+import {
+  OAUTH_CLIENT_ID,
+  OAUTH_REDIRECT_URI,
+  OAUTH_TOKEN_URL,
+  buildAuthLoginEnv,
+  createManualOAuthSession,
+  dirsToRemoveOnProfileRemove,
+  parseAuthorizationCodeInput,
+  profileAdd,
+  profileAddOauthToken,
+  profileHelp,
+  profileList,
+  profileLogin,
+  profileRemove,
+  profileSwitch
+} from "./cli-jhm27q0x.js";
+import"./cli-340h1chz.js";
+import"./cli-aq5zz92m.js";
+import"./cli-p9swy5t3.js";
+export {
+  profileSwitch,
+  profileRemove,
+  profileLogin,
+  profileList,
+  profileHelp,
+  profileAddOauthToken,
+  profileAdd,
+  parseAuthorizationCodeInput,
+  dirsToRemoveOnProfileRemove,
+  createManualOAuthSession,
+  buildAuthLoginEnv,
+  OAUTH_TOKEN_URL,
+  OAUTH_REDIRECT_URI,
+  OAUTH_CLIENT_ID
+};

package/dist/proxy/design.d.ts

@@ -0,0 +1,82 @@
+import type { CredentialStore } from "./tokenRefresh";
+export type FetchLike = (input: string | URL | Request, init?: RequestInit) => Promise<Response>;
+export declare const DESIGN_SCOPES: string[];
+export declare const DESIGN_UPSTREAM_ORIGIN = "https://api.anthropic.com";
+export interface DesignTokenData {
+    accessToken: string;
+    refreshToken?: string;
+    expiresAt: number;
+    scopes?: string[];
+}
+export interface DesignTokenStore {
+    read(): Promise<DesignTokenData | null>;
+    write(data: DesignTokenData): Promise<void>;
+}
+export declare function defaultDesignTokenPath(): string;
+export declare function createFileDesignTokenStore(path?: string): DesignTokenStore;
+export declare function isDesignTokenFresh(data: DesignTokenData, now?: number): boolean;
+/**
+ * Returns a usable design access token: the stored one if fresh, otherwise
+ * the result of a refresh_token grant (persisted back to the store). Null
+ * when there is no token or the refresh fails — callers fall back to
+ * profile credentials and the upstream tells the user to /design-login.
+ */
+export declare function getDesignAccessToken(opts: {
+    store: DesignTokenStore;
+    fetchFn?: FetchLike;
+    now?: number;
+}): Promise<string | null>;
+/**
+ * Auth precedence for upstream Design API requests:
+ * design token → profile API key → profile OAuth token → Max credential
+ * store. The design token comes first because it is the only credential
+ * guaranteed to carry the design scopes.
+ */
+export declare function resolveDesignAuthHeaders(opts: {
+    designToken: string | null;
+    profile: {
+        type: string;
+        env: Record<string, string | undefined>;
+    };
+    credentialStore?: CredentialStore;
+    ensureFresh?: (store: CredentialStore) => Promise<unknown>;
+}): Promise<Record<string, string>>;
+/**
+ * Headers forwarded upstream. accept-encoding is pinned to identity:
+ * Node's fetch auto-decompresses gzip but keeps the content-encoding
+ * header, so MCP SDK clients receiving the re-served body would try to
+ * decompress it a second time and fail to parse.
+ */
+export declare function buildDesignForwardHeaders(getHeader: (name: string) => string | undefined, authHeaders: Record<string, string>): Record<string, string>;
+/** Forward all upstream headers (including mcp-session-id) minus hop-by-hop. */
+export declare function filterUpstreamResponseHeaders(headers: Iterable<[string, string]>): Record<string, string>;
+export declare function isDesignAuthFailure(status: number): boolean;
+export interface DesignLoginResult {
+    status: number;
+    body: unknown;
+}
+export interface DesignLogin {
+    /** Start a login session; returns the JSON body for GET /design-login. */
+    start(): {
+        authorizeUrl: string;
+        instructions: string;
+    };
+    /** Like start() but also exposes the state, for tests. */
+    startRaw(): {
+        authorizeUrl: string;
+        state: string;
+    };
+    /** Handle POST /design-login: exchange the pasted code for a token. */
+    exchange(body: unknown): Promise<DesignLoginResult>;
+}
+export declare function createDesignLogin(deps: {
+    store: DesignTokenStore;
+    createSession?: (scopes: string[]) => {
+        authorizeUrl: string;
+        codeVerifier: string;
+        state: string;
+    };
+    fetchFn?: FetchLike;
+    now?: () => number;
+}): DesignLogin;
+//# sourceMappingURL=design.d.ts.map

package/dist/proxy/design.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"design.d.ts","sourceRoot":"","sources":["../../src/proxy/design.ts"],"names":[],"mappings":"AAkBA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAA;AASrD,MAAM,MAAM,SAAS,GAAG,CAAC,KAAK,EAAE,MAAM,GAAG,GAAG,GAAG,OAAO,EAAE,IAAI,CAAC,EAAE,WAAW,KAAK,OAAO,CAAC,QAAQ,CAAC,CAAA;AAEhG,eAAO,MAAM,aAAa,UAA4C,CAAA;AACtE,eAAO,MAAM,sBAAsB,8BAA8B,CAAA;AAMjE,MAAM,WAAW,eAAe;IAC9B,WAAW,EAAE,MAAM,CAAA;IACnB,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,SAAS,EAAE,MAAM,CAAA;IACjB,MAAM,CAAC,EAAE,MAAM,EAAE,CAAA;CAClB;AAED,MAAM,WAAW,gBAAgB;IAC/B,IAAI,IAAI,OAAO,CAAC,eAAe,GAAG,IAAI,CAAC,CAAA;IACvC,KAAK,CAAC,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;CAC5C;AAED,wBAAgB,sBAAsB,IAAI,MAAM,CAE/C;AAED,wBAAgB,0BAA0B,CAAC,IAAI,GAAE,MAAiC,GAAG,gBAAgB,CAmBpG;AAED,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,eAAe,EAAE,GAAG,GAAE,MAAmB,GAAG,OAAO,CAE3F;AAED;;;;;GAKG;AACH,wBAAsB,oBAAoB,CAAC,IAAI,EAAE;IAC/C,KAAK,EAAE,gBAAgB,CAAA;IACvB,OAAO,CAAC,EAAE,SAAS,CAAA;IACnB,GAAG,CAAC,EAAE,MAAM,CAAA;CACb,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAyCzB;AAED;;;;;GAKG;AACH,wBAAsB,wBAAwB,CAAC,IAAI,EAAE;IACnD,WAAW,EAAE,MAAM,GAAG,IAAI,CAAA;IAC1B,OAAO,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAA;KAAE,CAAA;IAClE,eAAe,CAAC,EAAE,eAAe,CAAA;IACjC,WAAW,CAAC,EAAE,CAAC,KAAK,EAAE,eAAe,KAAK,OAAO,CAAC,OAAO,CAAC,CAAA;CAC3D,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAgBlC;AAED;;;;;GAKG;AACH,wBAAgB,yBAAyB,CACvC,SAAS,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,MAAM,GAAG,SAAS,EAC/C,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAClC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAWxB;AAaD,gFAAgF;AAChF,wBAAgB,6BAA6B,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAMzG;AAKD,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAE3D;AAED,MAAM,WAAW,iBAAiB;IAChC,MAAM,EAAE,MAAM,CAAA;IACd,IAAI,EAAE,OAAO,CAAA;CACd;AAED,MAAM,WAAW,WAAW;IAC1B,0EAA0E;IAC1E,KAAK,IAAI;QAAE,YAAY,EAAE,MAAM,CAAC;QAAC,YAAY,EAAE,MAAM,CAAA;KAAE,CAAA;IACvD,0DAA0D;IAC1D,QAAQ,IAAI;QAAE,YAAY,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAA;IACnD,uEAAuE;IACvE,QAAQ,CAAC,IAAI,EAAE,OAAO,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAAA;CACpD;AAED,wBAAgB,iBAAiB,CAAC,IAAI,EAAE;IACtC,KAAK,EAAE,gBAAgB,CAAA;IACvB,aAAa,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK;QAAE,YAAY,EAAE,MAAM,CAAC;QAAC,YAAY,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAA;IACnG,OAAO,CAAC,EAAE,SAAS,CAAA;IACnB,GAAG,CAAC,EAAE,MAAM,MAAM,CAAA;CACnB,GAAG,WAAW,CAwFd"}

package/dist/proxy/profileCli.d.ts

@@ -0,0 +1,48 @@
+/**
+ * CLI commands for profile management.
+ *
+ * Browser-login profiles are stored under ~/.config/meridian/profiles/{id}/
+ * — each directory is a standalone CLAUDE_CONFIG_DIR with its own OAuth
+ * tokens. OAuth-token profiles (added via `--oauth-token`) live entirely in
+ * profiles.json — no per-profile config dir.
+ *
+ * This is a leaf module — no imports from server.ts or session/.
+ */
+import type { ProfileConfig } from "./profiles";
+export declare const OAUTH_TOKEN_URL = "https://platform.claude.com/v1/oauth/token";
+export declare const OAUTH_CLIENT_ID = "9d1c250a-e61b-44d9-88ed-5944d1962f5e";
+export declare const OAUTH_REDIRECT_URI = "https://platform.claude.com/oauth/code/callback";
+interface AuthLoginOptions {
+    headless?: boolean;
+}
+interface ManualOAuthSession {
+    authorizeUrl: string;
+    codeVerifier: string;
+    state: string;
+}
+interface ParsedAuthorizationCode {
+    code: string;
+    state?: string;
+}
+export declare function buildAuthLoginEnv(configDir: string | undefined, _options?: AuthLoginOptions, baseEnv?: NodeJS.ProcessEnv): NodeJS.ProcessEnv;
+export declare function createManualOAuthSession(scopes?: string[]): ManualOAuthSession;
+export declare function parseAuthorizationCodeInput(input: string): ParsedAuthorizationCode | null;
+export declare function profileAdd(id: string, options?: AuthLoginOptions): Promise<void>;
+export declare function profileAddOauthToken(id: string, tokenArg: string | undefined): Promise<void>;
+export declare function profileList(): void;
+/**
+ * Pure: resolve which on-disk directories should be removed when this profile
+ * is deleted. Browser-login profiles drop their explicit `claudeConfigDir`
+ * (provided it lives under `profilesDir`); oauth-token profiles drop the
+ * pinned isolation dir at `profilesDir/<id>` (created by the SDK during use,
+ * not stored on the profile itself).
+ *
+ * Caller is responsible for the actual `rmSync` — this returns paths only.
+ */
+export declare function dirsToRemoveOnProfileRemove(profile: ProfileConfig, profilesDir: string): string[];
+export declare function profileRemove(id: string): void;
+export declare function profileSwitch(id: string): Promise<void>;
+export declare function profileLogin(id: string, options?: AuthLoginOptions): Promise<void>;
+export declare function profileHelp(): void;
+export {};
+//# sourceMappingURL=profileCli.d.ts.map

package/dist/proxy/profileCli.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"profileCli.d.ts","sourceRoot":"","sources":["../../src/proxy/profileCli.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAQH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,YAAY,CAAA;AAO/C,eAAO,MAAM,eAAe,+CAA+C,CAAA;AAC3E,eAAO,MAAM,eAAe,yCAAyC,CAAA;AACrE,eAAO,MAAM,kBAAkB,oDAAoD,CAAA;AAkBnF,UAAU,gBAAgB;IACxB,QAAQ,CAAC,EAAE,OAAO,CAAA;CACnB;AAED,UAAU,kBAAkB;IAC1B,YAAY,EAAE,MAAM,CAAA;IACpB,YAAY,EAAE,MAAM,CAAA;IACpB,KAAK,EAAE,MAAM,CAAA;CACd;AAED,UAAU,uBAAuB;IAC/B,IAAI,EAAE,MAAM,CAAA;IACZ,KAAK,CAAC,EAAE,MAAM,CAAA;CACf;AAUD,wBAAgB,iBAAiB,CAC/B,SAAS,EAAE,MAAM,GAAG,SAAS,EAC7B,QAAQ,GAAE,gBAAqB,EAC/B,OAAO,GAAE,MAAM,CAAC,UAAwB,GACvC,MAAM,CAAC,UAAU,CAInB;AAMD,wBAAgB,wBAAwB,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,GAAG,kBAAkB,CAe9E;AAED,wBAAgB,2BAA2B,CAAC,KAAK,EAAE,MAAM,GAAG,uBAAuB,GAAG,IAAI,CAiBzF;AAiHD,wBAAsB,UAAU,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,GAAE,gBAAqB,GAAG,OAAO,CAAC,IAAI,CAAC,CAwG1F;AAED,wBAAsB,oBAAoB,CAAC,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC,CA8BlG;AAED,wBAAgB,WAAW,IAAI,IAAI,CAsBlC;AAED;;;;;;;;GAQG;AACH,wBAAgB,2BAA2B,CAAC,OAAO,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,GAAG,MAAM,EAAE,CAUjG;AAED,wBAAgB,aAAa,CAAC,EAAE,EAAE,MAAM,GAAG,IAAI,CAyB9C;AAED,wBAAsB,aAAa,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAwB7D;AAED,wBAAsB,YAAY,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,GAAE,gBAAqB,GAAG,OAAO,CAAC,IAAI,CAAC,CAkD5F;AAoED,wBAAgB,WAAW,IAAI,IAAI,CAsBlC"}

package/dist/proxy/server.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../../src/proxy/server.ts"],"names":[],"mappings":"AAeA,OAAO,KAAK,EAAE,WAAW,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,SAAS,CAAA;AACtE,YAAY,EAAE,WAAW,EAAE,aAAa,EAAE,WAAW,EAAE,CAAA;AAGvD,YAAY,EACV,SAAS,EACT,cAAc,EACd,eAAe,EACf,gBAAgB,EAChB,cAAc,EACd,cAAc,EACd,iBAAiB,EACjB,YAAY,EACZ,aAAa,EACb,WAAW,GACZ,MAAM,aAAa,CAAA;AAKpB,OAAO,EAAE,gBAAgB,EAAE,cAAc,EAAE,aAAa,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAA;AAwCnG,OAAO,EACL,kBAAkB,EAClB,WAAW,EACX,oBAAoB,EAEpB,KAAK,aAAa,EAGnB,MAAM,mBAAmB,CAAA;AAG1B,OAAO,EAA+B,iBAAiB,EAAE,mBAAmB,EAAsC,MAAM,iBAAiB,CAAA;AAGzI,OAAO,EAAE,kBAAkB,EAAE,WAAW,EAAE,oBAAoB,EAAE,CAAA;AAChE,OAAO,EAAE,iBAAiB,EAAE,mBAAmB,EAAE,CAAA;AACjD,YAAY,EAAE,aAAa,EAAE,CAAA;AAgR7B,wBAAgB,iBAAiB,CAAC,MAAM,GAAE,OAAO,CAAC,WAAW,CAAM,GAAG,WAAW,CAkmHhF;AAWD,wBAAgB,gCAAgC,IAAI,IAAI,CAavD;AAED,wBAAsB,gBAAgB,CAAC,MAAM,GAAE,OAAO,CAAC,WAAW,CAAM,GAAG,OAAO,CAAC,aAAa,CAAC,CAmGhG"}
+{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../../src/proxy/server.ts"],"names":[],"mappings":"AAgBA,OAAO,KAAK,EAAE,WAAW,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,SAAS,CAAA;AACtE,YAAY,EAAE,WAAW,EAAE,aAAa,EAAE,WAAW,EAAE,CAAA;AAGvD,YAAY,EACV,SAAS,EACT,cAAc,EACd,eAAe,EACf,gBAAgB,EAChB,cAAc,EACd,cAAc,EACd,iBAAiB,EACjB,YAAY,EACZ,aAAa,EACb,WAAW,GACZ,MAAM,aAAa,CAAA;AAKpB,OAAO,EAAE,gBAAgB,EAAE,cAAc,EAAE,aAAa,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAA;AAkDnG,OAAO,EACL,kBAAkB,EAClB,WAAW,EACX,oBAAoB,EAEpB,KAAK,aAAa,EAGnB,MAAM,mBAAmB,CAAA;AAG1B,OAAO,EAA+B,iBAAiB,EAAE,mBAAmB,EAAsC,MAAM,iBAAiB,CAAA;AAGzI,OAAO,EAAE,kBAAkB,EAAE,WAAW,EAAE,oBAAoB,EAAE,CAAA;AAChE,OAAO,EAAE,iBAAiB,EAAE,mBAAmB,EAAE,CAAA;AACjD,YAAY,EAAE,aAAa,EAAE,CAAA;AAgR7B,wBAAgB,iBAAiB,CAAC,MAAM,GAAE,OAAO,CAAC,WAAW,CAAM,GAAG,WAAW,CAwrHhF;AAWD,wBAAgB,gCAAgC,IAAI,IAAI,CAavD;AAED,wBAAsB,gBAAgB,CAAC,MAAM,GAAE,OAAO,CAAC,WAAW,CAAM,GAAG,OAAO,CAAC,aAAa,CAAC,CAmGhG"}

package/dist/server.js

@@ -11,11 +11,11 @@ import {
   runObserveHook,
   runTransformHook,
   startProxyServer
-} from "./cli-027as0fx.js";
+} from "./cli-mqht6rs9.js";
 import"./cli-f0yqy2d2.js";
 import"./cli-sry5aqdj.js";
 import"./cli-xmweegb1.js";
-import"./cli-vjeftz4z.js";
+import"./cli-jhm27q0x.js";
 import"./cli-340h1chz.js";
 import"./cli-je60fevk.js";
 import"./cli-aq5zz92m.js";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@rynfar/meridian",
-  "version": "1.53.0",
+  "version": "1.54.0",
   "description": "Local Anthropic API powered by your Claude Max subscription. One subscription, every agent.",
   "type": "module",
   "main": "./dist/server.js",

package/dist/cli-vjeftz4z.js

@@ -1,329 +0,0 @@
-import {
-  __esm
-} from "./cli-p9swy5t3.js";
-
-// src/env.ts
-function env(suffix) {
-  return process.env[`MERIDIAN_${suffix}`] ?? process.env[`CLAUDE_PROXY_${suffix}`];
-}
-function envBool(suffix) {
-  const val = env(suffix);
-  return val === "1" || val === "true" || val === "yes";
-}
-function resolvePassthrough(defaultValue) {
-  const val = env("PASSTHROUGH");
-  if (val === "1" || val === "true" || val === "yes")
-    return true;
-  if (val === "0" || val === "false" || val === "no")
-    return false;
-  return defaultValue;
-}
-function envInt(suffix, defaultValue) {
-  const val = env(suffix);
-  if (!val)
-    return defaultValue;
-  const parsed = parseInt(val, 10);
-  return Number.isFinite(parsed) ? parsed : defaultValue;
-}
-var init_env = () => {};
-
-// src/proxy/models.ts
-init_env();
-import { exec as execCallback, execFile as execFileCallback } from "child_process";
-import { existsSync, statSync } from "fs";
-import { fileURLToPath } from "url";
-import { join, dirname } from "path";
-import { promisify } from "util";
-var exec = promisify(execCallback);
-var execFile = promisify(execFileCallback);
-var STUB_SIZE_THRESHOLD = 4096;
-var CANONICAL_FABLE_MODEL = "claude-fable-5";
-var CANONICAL_OPUS_MODEL = "claude-opus-4-8";
-var CANONICAL_SONNET_MODEL = "claude-sonnet-5";
-var CANONICAL_HAIKU_MODEL = "claude-haiku-4-5";
-function resolveSdkModelDefaults(env2 = process.env) {
-  return {
-    ANTHROPIC_DEFAULT_FABLE_MODEL: env2.MERIDIAN_DEFAULT_FABLE_MODEL ?? CANONICAL_FABLE_MODEL,
-    ANTHROPIC_DEFAULT_OPUS_MODEL: env2.MERIDIAN_DEFAULT_OPUS_MODEL ?? CANONICAL_OPUS_MODEL,
-    ANTHROPIC_DEFAULT_SONNET_MODEL: env2.MERIDIAN_DEFAULT_SONNET_MODEL ?? CANONICAL_SONNET_MODEL,
-    ANTHROPIC_DEFAULT_HAIKU_MODEL: env2.MERIDIAN_DEFAULT_HAIKU_MODEL ?? CANONICAL_HAIKU_MODEL
-  };
-}
-function explicitModelPin(requestedModel) {
-  const base = requestedModel.trim().toLowerCase().replace(/\[1m\]$/, "");
-  const match = /^claude-(sonnet|opus|haiku|fable|mythos)-\d[\w.-]*$/.exec(base);
-  if (!match)
-    return;
-  const tier = match[1] === "mythos" ? "FABLE" : match[1].toUpperCase();
-  return { [`ANTHROPIC_DEFAULT_${tier}_MODEL`]: base };
-}
-var AUTH_STATUS_CACHE_TTL_MS = 60000;
-var AUTH_STATUS_FAILURE_TTL_MS = 5000;
-var cachedAuthStatus = null;
-var lastKnownGoodAuthStatus = null;
-var cachedAuthStatusAt = 0;
-var cachedAuthStatusIsFailure = false;
-var cachedAuthStatusPromise = null;
-function supports1mContext(model) {
-  const override = env("1M_CONTEXT_SUPPORT");
-  if (override === "0" || override === "false" || override === "no")
-    return false;
-  if (model.includes("4-5") || model.includes("4.5"))
-    return false;
-  return true;
-}
-function mapModelToClaudeModel(model, subscriptionType, agentMode) {
-  if (model.includes("haiku"))
-    return "haiku";
-  const use1m = supports1mContext(model);
-  const isSubagent = agentMode === "subagent";
-  if (model.includes("fable") || model.includes("mythos")) {
-    if (use1m && !isSubagent && !isExtendedContextKnownUnavailable())
-      return "fable[1m]";
-    return "fable";
-  }
-  if (model.includes("opus")) {
-    if (use1m && !isSubagent && !isExtendedContextKnownUnavailable())
-      return "opus[1m]";
-    return "opus";
-  }
-  const sonnetOverride = process.env.MERIDIAN_SONNET_MODEL ?? process.env.CLAUDE_PROXY_SONNET_MODEL;
-  if (sonnetOverride === "sonnet[1m]") {
-    if (!use1m || isSubagent || isExtendedContextKnownUnavailable())
-      return "sonnet";
-    return "sonnet[1m]";
-  }
-  return "sonnet";
-}
-var EXTRA_USAGE_RETRY_MS = 60 * 60 * 1000;
-var extraUsageUnavailableAt = 0;
-function recordExtendedContextUnavailable() {
-  extraUsageUnavailableAt = Date.now();
-}
-function isExtendedContextKnownUnavailable() {
-  return extraUsageUnavailableAt > 0 && Date.now() - extraUsageUnavailableAt < EXTRA_USAGE_RETRY_MS;
-}
-function stripExtendedContext(model) {
-  if (model === "opus[1m]")
-    return "opus";
-  if (model === "sonnet[1m]")
-    return "sonnet";
-  if (model === "fable[1m]")
-    return "fable";
-  return model;
-}
-function hasExtendedContext(model) {
-  return model.endsWith("[1m]");
-}
-var profileAuthCaches = new Map;
-function getAuthCacheInfo(profileId) {
-  if (!profileId) {
-    return { lastCheckedAt: cachedAuthStatusAt, lastSuccessAt: cachedAuthStatusIsFailure ? 0 : cachedAuthStatusAt, isFailure: cachedAuthStatusIsFailure };
-  }
-  const cache = profileAuthCaches.get(profileId);
-  if (!cache)
-    return { lastCheckedAt: 0, lastSuccessAt: 0, isFailure: false };
-  return { lastCheckedAt: cache.at, lastSuccessAt: cache.lastSuccessAt, isFailure: cache.isFailure };
-}
-function getAuthCache(key) {
-  let cache = profileAuthCaches.get(key);
-  if (!cache) {
-    cache = { status: null, lastKnownGood: null, at: 0, isFailure: false, promise: null, lastSuccessAt: 0 };
-    profileAuthCaches.set(key, cache);
-  }
-  return cache;
-}
-async function getClaudeAuthStatusAsync(profileId, envOverrides) {
-  const isDefault = !profileId;
-  const cache = isDefault ? null : getAuthCache(profileId);
-  const c_status = cache ? cache.status : cachedAuthStatus;
-  const c_lastKnownGood = cache ? cache.lastKnownGood : lastKnownGoodAuthStatus;
-  const c_at = cache ? cache.at : cachedAuthStatusAt;
-  const c_isFailure = cache ? cache.isFailure : cachedAuthStatusIsFailure;
-  let c_promise = cache ? cache.promise : cachedAuthStatusPromise;
-  const ttl = c_isFailure ? AUTH_STATUS_FAILURE_TTL_MS : AUTH_STATUS_CACHE_TTL_MS;
-  if (c_at > 0 && Date.now() - c_at < ttl) {
-    return c_status ?? c_lastKnownGood;
-  }
-  if (c_promise)
-    return c_promise;
-  c_promise = (async () => {
-    try {
-      const claudePath = await resolveClaudeExecutableAsync();
-      const { stdout } = await execFile(claudePath, ["auth", "status"], {
-        timeout: 5000,
-        ...envOverrides ? { env: { ...process.env, ...envOverrides } } : {}
-      });
-      const parsed = JSON.parse(stdout);
-      if (cache) {
-        cache.status = parsed;
-        cache.lastKnownGood = parsed;
-        cache.at = Date.now();
-        cache.isFailure = false;
-        cache.lastSuccessAt = Date.now();
-      } else {
-        cachedAuthStatus = parsed;
-        lastKnownGoodAuthStatus = parsed;
-        cachedAuthStatusAt = Date.now();
-        cachedAuthStatusIsFailure = false;
-      }
-      return parsed;
-    } catch {
-      if (cache) {
-        cache.isFailure = true;
-        cache.at = Date.now();
-        cache.status = null;
-        return cache.lastKnownGood;
-      } else {
-        cachedAuthStatusIsFailure = true;
-        cachedAuthStatusAt = Date.now();
-        cachedAuthStatus = null;
-        return lastKnownGoodAuthStatus;
-      }
-    }
-  })();
-  if (cache)
-    cache.promise = c_promise;
-  else
-    cachedAuthStatusPromise = c_promise;
-  try {
-    return await c_promise;
-  } finally {
-    if (cache)
-      cache.promise = null;
-    else
-      cachedAuthStatusPromise = null;
-  }
-}
-var cachedClaudeInfo = null;
-var cachedClaudePathPromise = null;
-var DEFAULT_DEPS = {
-  existsSync,
-  statSync: (p) => statSync(p),
-  exec,
-  resolvePackage: (specifier) => fileURLToPath(import.meta.resolve(specifier)),
-  envGet: (name) => process.env[name],
-  platform: process.platform,
-  arch: process.arch,
-  isBun: typeof process.versions.bun !== "undefined"
-};
-function tryEnvOverride(deps) {
-  const explicit = deps.envGet("MERIDIAN_CLAUDE_PATH");
-  if (!explicit)
-    return null;
-  return deps.existsSync(explicit) ? explicit : null;
-}
-function tryBundledBinary(deps) {
-  try {
-    const pkgPath = deps.resolvePackage("@anthropic-ai/claude-code/package.json");
-    const bundled = join(dirname(pkgPath), "bin", "claude.exe");
-    if (!deps.existsSync(bundled))
-      return null;
-    const size = deps.statSync(bundled).size;
-    if (size <= STUB_SIZE_THRESHOLD)
-      return null;
-    return bundled;
-  } catch {
-    return null;
-  }
-}
-function tryPlatformPackage(deps) {
-  const binName = deps.platform === "win32" ? "claude.exe" : "claude";
-  const candidates = [`@anthropic-ai/claude-code-${deps.platform}-${deps.arch}`];
-  if (deps.platform === "linux") {
-    candidates.push(`@anthropic-ai/claude-code-${deps.platform}-${deps.arch}-musl`);
-  }
-  for (const pkg of candidates) {
-    try {
-      const pkgJson = deps.resolvePackage(`${pkg}/package.json`);
-      const candidate = join(dirname(pkgJson), binName);
-      if (deps.existsSync(candidate))
-        return candidate;
-    } catch {}
-  }
-  return null;
-}
-async function tryPathLookup(deps) {
-  const cmd = deps.platform === "win32" ? "where claude" : "which claude";
-  try {
-    const { stdout } = await deps.exec(cmd);
-    const candidates = stdout.split(/\r?\n/).map((s) => s.trim()).filter(Boolean);
-    for (const candidate of candidates) {
-      if (deps.platform === "win32" && candidate.startsWith("/"))
-        continue;
-      if (deps.existsSync(candidate))
-        return candidate;
-    }
-  } catch {}
-  return null;
-}
-function tryLegacySdkCliJs(deps) {
-  if (!deps.isBun)
-    return null;
-  try {
-    const sdkPath = deps.resolvePackage("@anthropic-ai/claude-agent-sdk");
-    const cliJs = join(dirname(sdkPath), "cli.js");
-    return deps.existsSync(cliJs) ? cliJs : null;
-  } catch {
-    return null;
-  }
-}
-async function resolveClaudeExecutableWithSource(deps = DEFAULT_DEPS) {
-  const env2 = tryEnvOverride(deps);
-  if (env2)
-    return { path: env2, source: "env" };
-  const bundled = tryBundledBinary(deps);
-  if (bundled)
-    return { path: bundled, source: "bundled" };
-  const platformPkg = tryPlatformPackage(deps);
-  if (platformPkg)
-    return { path: platformPkg, source: "platform-package" };
-  const pathLookup = await tryPathLookup(deps);
-  if (pathLookup)
-    return { path: pathLookup, source: "path-lookup" };
-  const legacy = tryLegacySdkCliJs(deps);
-  if (legacy)
-    return { path: legacy, source: "legacy-cli-js" };
-  return null;
-}
-function resolveClaudeExecutableSync(deps = DEFAULT_DEPS) {
-  const env2 = tryEnvOverride(deps);
-  if (env2)
-    return { path: env2, source: "env" };
-  const bundled = tryBundledBinary(deps);
-  if (bundled)
-    return { path: bundled, source: "bundled" };
-  const platformPkg = tryPlatformPackage(deps);
-  if (platformPkg)
-    return { path: platformPkg, source: "platform-package" };
-  return null;
-}
-function getResolvedClaudeExecutableInfo() {
-  return cachedClaudeInfo;
-}
-async function resolveClaudeExecutableAsync() {
-  if (cachedClaudeInfo)
-    return cachedClaudeInfo.path;
-  if (cachedClaudePathPromise)
-    return cachedClaudePathPromise;
-  cachedClaudePathPromise = (async () => {
-    const resolved = await resolveClaudeExecutableWithSource();
-    if (resolved) {
-      cachedClaudeInfo = resolved;
-      return resolved.path;
-    }
-    throw new Error("Could not find Claude Code executable. Install via: npm install -g @anthropic-ai/claude-code, " + "or set MERIDIAN_CLAUDE_PATH=/path/to/claude to point at an existing binary.");
-  })();
-  try {
-    return await cachedClaudePathPromise;
-  } finally {
-    cachedClaudePathPromise = null;
-  }
-}
-function isClosedControllerError(error) {
-  if (!(error instanceof Error))
-    return false;
-  return error.message.includes("Controller is already closed");
-}
-
-export { env, envBool, resolvePassthrough, envInt, init_env, CANONICAL_SONNET_MODEL, resolveSdkModelDefaults, explicitModelPin, mapModelToClaudeModel, recordExtendedContextUnavailable, stripExtendedContext, hasExtendedContext, getAuthCacheInfo, getClaudeAuthStatusAsync, resolveClaudeExecutableSync, getResolvedClaudeExecutableInfo, resolveClaudeExecutableAsync, isClosedControllerError };