@rynfar/meridian 1.63.0 → 1.65.0

package/dist/{cli-m0p2bc8v.js → cli-pdpry6q0.js}

@@ -18,6 +18,12 @@ function getRoutingMode(raw) {
     return "priority";
   return "active";
 }
+function getPriorityFailbackPolicy(raw) {
+  return raw?.toLowerCase() === "next-user-turn" ? "next-user-turn" : "new-conversation";
+}
+function shouldPromotePriorityAssignment(input) {
+  return input.policy === "next-user-turn" && input.requestKind === "human" && input.requestId !== undefined && input.requestId !== input.assignment.requestId;
+}
 function rendezvousScore(sessionKey, profileId) {
   const digest = createHash("sha256").update(`${sessionKey}\x00${profileId}`).digest();
   return digest.readBigUInt64BE(0);
@@ -54,13 +60,14 @@ function resolvePriorityOrder(configuredIds, orderSetting) {
   return { order, unknown };
 }
 function choosePriorityProfile(order, isExhausted) {
-  if (order.length === 0)
+  const preferred = order[0];
+  if (preferred === undefined)
     return;
   for (const id of order) {
     if (!isExhausted(id))
       return { id, allExhausted: false };
   }
-  return { id: order[0], allExhausted: true };
+  return { id: preferred, allExhausted: true };
 }
 
 class ProfileExhaustion {
@@ -121,6 +128,12 @@ class AssignmentStore {
         this.entries.delete(oldest);
     }
   }
+  compareAndSet(key, expected, value) {
+    if (this.entries.get(key) !== expected)
+      return false;
+    this.set(key, value);
+    return true;
+  }
   get size() {
     return this.entries.size;
   }
@@ -258,4 +271,4 @@ function listProfiles(profiles, defaultProfile) {
   }));
 }
 
-export { getRoutingMode, resolvePriorityOrder, choosePriorityProfile, ProfileExhaustion, AssignmentStore, resolveCooldownUntil, loadProfilesFromDisk, setActiveProfile, getActiveProfileId, resetActiveProfile, restoreActiveProfile, enableDiskProfileDiscovery, getEffectiveProfiles, hasProfiles, resolveProfile, listProfiles };
+export { getRoutingMode, getPriorityFailbackPolicy, shouldPromotePriorityAssignment, resolvePriorityOrder, choosePriorityProfile, ProfileExhaustion, AssignmentStore, resolveCooldownUntil, loadProfilesFromDisk, setActiveProfile, getActiveProfileId, resetActiveProfile, restoreActiveProfile, enableDiskProfileDiscovery, getEffectiveProfiles, hasProfiles, resolveProfile, listProfiles };

package/dist/cli.js

@@ -1,16 +1,16 @@
 #!/usr/bin/env node
 import {
   startProxyServer
-} from "./cli-hdyptm7z.js";
-import"./cli-m0p2bc8v.js";
+} from "./cli-7cts44b5.js";
+import"./cli-pdpry6q0.js";
 import"./cli-sry5aqdj.js";
 import"./cli-8yp89fan.js";
 import {
   resolveClaudeExecutableAsync
-} from "./cli-xfbhn15a.js";
-import"./cli-vj9cv18n.js";
-import"./cli-pc0mtjjv.js";
+} from "./cli-0ed6j0vk.js";
 import"./cli-khhjyk04.js";
+import"./cli-vj9cv18n.js";
+import"./cli-n8t34zmq.js";
 import {
   __require
 } from "./cli-p9swy5t3.js";
@@ -39,6 +39,11 @@ Commands:
   profile          Manage Claude account profiles (add, list, switch, remove)
   refresh-token    Refresh the Claude Code OAuth token
 
+Setup options:
+  --v1                         Install the OpenCode V1 plugin
+  --v2                         Install the pinned OpenCode V2 beta plugin
+  --opencode-bin <executable>  Probe this OpenCode executable
+
 Options:
   -v, --version   Show version
   -h, --help      Show this help
@@ -55,7 +60,7 @@ See https://github.com/rynfar/meridian for full documentation.`);
   process.exit(0);
 }
 if (args[0] === "profile") {
-  const { profileAdd, profileAddOauthToken, profileList, profileRemove, profileSwitch, profileLogin, profileHelp } = await import("./profileCli-39vshwdn.js");
+  const { profileAdd, profileAddOauthToken, profileList, profileRemove, profileSwitch, profileLogin, profileHelp } = await import("./profileCli-ap7eg985.js");
   const subcommand = args[1];
   const profileId = args[2];
   const headless = args.includes("--headless");
@@ -80,11 +85,57 @@ if (args[0] === "profile") {
   process.exit(0);
 }
 if (args[0] === "setup") {
-  const { findPluginPath, runSetup, UnparseableConfigError } = await import("./setup-0x573t61.js");
-  const pluginPath = findPluginPath(import.meta.url);
+  const {
+    detectOpenCodeGeneration,
+    DuplicateMeridianConfigError,
+    MissingV2PluginError,
+    pluginPathForGeneration,
+    runSetup,
+    SUPPORTED_OPENCODE_V2_VERSION,
+    UnparseableConfigError
+  } = await import("./setup-8fwgwhqh.js");
+  const forceV1 = args.includes("--v1");
+  const forceV2 = args.includes("--v2");
+  if (forceV1 && forceV2) {
+    console.error("Choose only one OpenCode generation: --v1 or --v2");
+    process.exit(1);
+  }
+  const binaryIndex = args.indexOf("--opencode-bin");
+  const binary = binaryIndex >= 0 ? args[binaryIndex + 1] : undefined;
+  if (binaryIndex >= 0 && (!binary || binary.startsWith("--"))) {
+    console.error("--opencode-bin requires an executable path");
+    process.exit(1);
+  }
+  const environmentBinary = process.env.OPENCODE_BIN;
+  const commands = binary ? [binary] : environmentBinary ? [environmentBinary] : forceV2 ? ["opencode2", "opencode"] : undefined;
+  const detected = forceV1 ? { generation: "v1" } : detectOpenCodeGeneration(commands);
+  if (!forceV1 && (binary || environmentBinary) && !detected.version) {
+    console.error(`Could not read a supported OpenCode version from ${binary ?? environmentBinary}.`);
+    process.exit(1);
+  }
+  if (forceV2 && detected.generation !== "v2") {
+    console.error("Could not find an OpenCode V2 beta. Install the pinned beta or pass --opencode-bin <path>.");
+    process.exit(1);
+  }
+  if (detected.generation === "v2" && detected.version !== SUPPORTED_OPENCODE_V2_VERSION) {
+    console.error(`OpenCode V2 ${detected.version ?? "unknown"} is not supported by this Meridian build.`);
+    console.error(`Install @opencode-ai/cli@${SUPPORTED_OPENCODE_V2_VERSION}, then re-run meridian setup --v2.`);
+    process.exit(1);
+  }
+  let pluginPath;
+  try {
+    pluginPath = pluginPathForGeneration(import.meta.url, detected.generation);
+  } catch (err) {
+    if (err instanceof MissingV2PluginError) {
+      console.error(`OpenCode V2 plugin bundle is missing: ${err.expectedPath}`);
+      console.error("Reinstall Meridian, then re-run meridian setup --v2.");
+      process.exit(1);
+    }
+    throw err;
+  }
   let result;
   try {
-    result = runSetup(pluginPath);
+    result = runSetup(pluginPath, undefined, detected.generation);
   } catch (err) {
     if (err instanceof UnparseableConfigError) {
       console.error(`\x1B[31m✗ Could not parse ${err.configPath}\x1B[0m`);
@@ -93,16 +144,24 @@ if (args[0] === "setup") {
       console.error(`    "plugin": ["${pluginPath}"]`);
       process.exit(1);
     }
+    if (err instanceof DuplicateMeridianConfigError) {
+      console.error("\x1B[31m✗ Meridian is already present in the other OpenCode config file\x1B[0m");
+      console.error(`  OpenCode loads both ${err.configPath} and ${err.siblingPath}.`);
+      console.error(`  Remove the Meridian entry from ${err.siblingPath}, then re-run 'meridian setup'.`);
+      console.error("  Both files were left untouched.");
+      process.exit(1);
+    }
     throw err;
   }
+  const generationLabel = detected.generation === "v2" ? "OpenCode V2" : "OpenCode V1";
   if (result.alreadyConfigured) {
-    console.log(`\x1B[32m✓ Meridian plugin already configured\x1B[0m`);
+    console.log(`\x1B[32m✓ Meridian plugin already configured for ${generationLabel}\x1B[0m`);
     console.log(`  ${result.configPath}`);
   } else {
     if (result.removedStale.length > 0) {
       console.log(`  Removed ${result.removedStale.length} stale plugin entr${result.removedStale.length === 1 ? "y" : "ies"}`);
     }
-    console.log(`\x1B[32m✓ Meridian plugin configured\x1B[0m`);
+    console.log(`\x1B[32m✓ Meridian plugin configured for ${generationLabel}\x1B[0m`);
     console.log(`  Config: ${result.configPath}`);
     console.log(`  Plugin: ${result.pluginPath}`);
     if (!result.created) {
@@ -146,7 +205,7 @@ async function runCli(start = startProxyServer, runAuthCheck = async () => {
   return execFile(claudePath, ["auth", "status"], { timeout: 5000 });
 }) {
   try {
-    const { findOpencodeConfigPath, checkPluginConfigured, findPluginPath } = await import("./setup-0x573t61.js");
+    const { findOpencodeConfigPath, checkPluginConfigured, findPluginPath } = await import("./setup-8fwgwhqh.js");
     const configPath = findOpencodeConfigPath();
     const { existsSync } = await import("fs");
     if (existsSync(configPath) && !checkPluginConfigured(configPath)) {
@@ -171,7 +230,7 @@ async function runCli(start = startProxyServer, runAuthCheck = async () => {
     console.error("\x1B[33m⚠ Could not verify Claude auth status. If requests fail, run: claude login\x1B[0m");
   }
   if (!profiles) {
-    const { enableDiskProfileDiscovery } = await import("./profiles-0pyeqayw.js");
+    const { enableDiskProfileDiscovery } = await import("./profiles-4ajzjqhm.js");
     enableDiskProfileDiscovery();
   }
   const proxy = await start({ port, host, idleTimeoutSeconds, pluginDir, pluginConfigPath, profiles, defaultProfile, version, installProcessErrorHandlers: true });

package/dist/meridian-v2.js

@@ -0,0 +1,347 @@
+import"./cli-p9swy5t3.js";
+
+// node_modules/@opencode-ai/plugin/dist/promise/plugin.js
+function define(plugin) {
+  return plugin;
+}
+
+// plugin/priority-attestation.ts
+import { createHash, createHmac } from "node:crypto";
+import { readFileSync } from "node:fs";
+import { homedir } from "node:os";
+import { join } from "node:path";
+var PRIORITY_ATTESTATION_HEADER = "x-meridian-opencode-turn";
+var PRIORITY_ATTESTATION_KEY_ENV = "MERIDIAN_OPENCODE_ATTESTATION_KEY";
+var PRIORITY_ATTESTATION_KEY_FILE = "opencode-turn.key";
+var TOKEN_PREFIX = "v1";
+var MAC_DOMAIN = "meridian.opencode.turn.v1\x00";
+var TURN_DOMAIN = "meridian.opencode.human.v1\x00";
+var MAX_HEADER_BYTES = 768;
+var MAX_PAYLOAD_BYTES = 384;
+var TURN_DIGEST_PATTERN = /^[A-Za-z0-9_-]{43}$/;
+var SAFE_ID_PATTERN = /^[A-Za-z0-9._:-]{1,128}$/;
+function configDirectory() {
+  return process.env.MERIDIAN_CONFIG_DIR ?? join(homedir(), ".config", "meridian");
+}
+function priorityAttestationKeyPath() {
+  return join(configDirectory(), PRIORITY_ATTESTATION_KEY_FILE);
+}
+function isSafeAgentId(value) {
+  return value.length >= 1 && value.length <= 64 && value.trim() === value && /^[\x20-\x7E]+$/.test(value);
+}
+function decodeCanonicalBase64Url(raw) {
+  if (!/^[A-Za-z0-9_-]+$/.test(raw))
+    return;
+  const decoded = Buffer.from(raw, "base64url");
+  return decoded.toString("base64url") === raw ? decoded : undefined;
+}
+function decodePriorityAttestationKey(raw) {
+  if (raw === undefined)
+    return;
+  const normalized = raw.trim();
+  const decoded = decodeCanonicalBase64Url(normalized);
+  return decoded?.length === 32 ? decoded : undefined;
+}
+function loadPriorityAttestationKey() {
+  const fromEnv = process.env[PRIORITY_ATTESTATION_KEY_ENV];
+  if (fromEnv !== undefined)
+    return decodePriorityAttestationKey(fromEnv);
+  try {
+    return decodePriorityAttestationKey(readFileSync(priorityAttestationKeyPath(), "utf8"));
+  } catch {
+    return;
+  }
+}
+function computePriorityTurnDigest(input) {
+  if (!SAFE_ID_PATTERN.test(input.sessionId) || !SAFE_ID_PATTERN.test(input.humanMessageId)) {
+    return;
+  }
+  return createHash("sha256").update(TURN_DOMAIN).update(input.generation).update("\x00").update(input.sessionId).update("\x00").update(input.humanMessageId).digest("base64url");
+}
+function createPriorityAttestation(input, key = loadPriorityAttestationKey() ?? Buffer.alloc(0)) {
+  if (key.length !== 32)
+    return;
+  if (!SAFE_ID_PATTERN.test(input.sessionId) || !isSafeAgentId(input.agentId))
+    return;
+  const turnDigest = computePriorityTurnDigest(input);
+  if (!turnDigest || !TURN_DIGEST_PATTERN.test(turnDigest))
+    return;
+  const issuedAt = input.issuedAt;
+  if (!Number.isSafeInteger(issuedAt) || issuedAt < 0)
+    return;
+  const payload = JSON.stringify({
+    v: 1,
+    g: input.generation,
+    s: input.sessionId,
+    a: input.agentId,
+    t: turnDigest,
+    iat: issuedAt
+  });
+  if (Buffer.byteLength(payload) > MAX_PAYLOAD_BYTES)
+    return;
+  const encodedPayload = Buffer.from(payload).toString("base64url");
+  const mac = createHmac("sha256", key).update(MAC_DOMAIN).update(payload).digest("base64url");
+  const token = `${TOKEN_PREFIX}.${encodedPayload}.${mac}`;
+  return Buffer.byteLength(token) <= MAX_HEADER_BYTES ? token : undefined;
+}
+function deleteHeader(headers, name) {
+  if (headers instanceof Headers) {
+    headers.delete(name);
+    return;
+  }
+  const lower = name.toLowerCase();
+  for (const key of Object.keys(headers)) {
+    if (key.toLowerCase() === lower)
+      delete headers[key];
+  }
+}
+function getHeader(headers, name) {
+  if (headers instanceof Headers)
+    return headers.get(name) ?? undefined;
+  const lower = name.toLowerCase();
+  for (const [key, value] of Object.entries(headers)) {
+    if (key.toLowerCase() === lower)
+      return value;
+  }
+  return;
+}
+function setHeader(headers, name, value) {
+  deleteHeader(headers, name);
+  if (headers instanceof Headers)
+    headers.set(name, value);
+  else
+    headers[name] = value;
+}
+
+// plugin/meridian-v2.ts
+var SUPPORTED_OPENCODE_V2_VERSION = "0.0.0-beta-18314";
+var MERIDIAN_PROVIDERS = new Set(["anthropic", "meridian"]);
+var PARENT_SESSION_ONE_SHOTS = new Set(["title", "summary"]);
+var ATTACHED_COMPACTION_AGENT = "compaction";
+var SESSION_AFFINITY_HEADERS = [
+  "x-opencode-session",
+  "x-session-affinity",
+  "x-session-id",
+  "x-parent-session-id"
+];
+var MERIDIAN_CONTROL_HEADERS = [
+  "x-meridian-source",
+  "x-opencode-agent-name",
+  "x-opencode-agent-mode",
+  PRIORITY_ATTESTATION_HEADER
+];
+var BUILTIN_AGENT_TRAITS = {
+  build: { mode: "primary", hidden: false },
+  plan: { mode: "primary", hidden: false },
+  general: { mode: "subagent", hidden: false },
+  explore: { mode: "subagent", hidden: false },
+  title: { mode: "primary", hidden: true },
+  summary: { mode: "primary", hidden: true },
+  compaction: { mode: "primary", hidden: true }
+};
+function fallbackAgentTraits(agent) {
+  return BUILTIN_AGENT_TRAITS[agent] ?? { mode: "primary", hidden: false };
+}
+function safeAgentName(agent) {
+  return agent.replace(/[^\x20-\x7E]/g, "").trim() || "unknown";
+}
+function shouldDetachFromParentSession(agent, _traits) {
+  return PARENT_SESSION_ONE_SHOTS.has(agent);
+}
+function applyMeridianV2Headers(headers, input) {
+  for (const name2 of SESSION_AFFINITY_HEADERS)
+    deleteHeader(headers, name2);
+  for (const name2 of MERIDIAN_CONTROL_HEADERS)
+    deleteHeader(headers, name2);
+  const name = safeAgentName(input.agent);
+  const detached = shouldDetachFromParentSession(input.agent, input.traits);
+  if (detached) {
+    setHeader(headers, "x-meridian-source", `subagent-${name}`);
+  } else {
+    setHeader(headers, "x-opencode-session", input.sessionID);
+    setHeader(headers, "x-session-affinity", input.sessionID);
+    setHeader(headers, "x-session-id", input.sessionID);
+    if (input.agent === ATTACHED_COMPACTION_AGENT) {
+      setHeader(headers, "x-meridian-source", "subagent-compaction");
+    }
+  }
+  const internalMode = PARENT_SESSION_ONE_SHOTS.has(input.agent) ? "subagent" : input.agent === ATTACHED_COMPACTION_AGENT ? "primary" : input.traits.mode;
+  setHeader(headers, "x-opencode-agent-name", name);
+  setHeader(headers, "x-opencode-agent-mode", internalMode);
+}
+var INTERNAL_ROUTING_AGENT_IDS = new Set(["title", "summary", "compaction"]);
+var AGENT_CACHE_MAX = 256;
+var AGENT_CACHE_TTL_MS = 5000;
+var LOOKUP_TIMEOUT_MS = 250;
+var MAX_CONTEXT_ENTRIES = 2048;
+var SAFE_ID_PATTERN2 = /^[A-Za-z0-9._:-]{1,128}$/;
+function isRecord(value) {
+  return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+async function withTimeout(pending, timeoutMs) {
+  let timer;
+  const timedOut = new Promise((resolve) => {
+    timer = setTimeout(() => resolve(undefined), timeoutMs);
+    timer.unref?.();
+  });
+  try {
+    return await Promise.race([pending, timedOut]);
+  } finally {
+    if (timer)
+      clearTimeout(timer);
+  }
+}
+function isRootV2Session(value, sessionID) {
+  return isRecord(value) && value.id === sessionID && value.parentID === undefined && value.fork === undefined;
+}
+function findLatestV2HumanTurn(value) {
+  if (!Array.isArray(value) || value.length === 0 || value.length > MAX_CONTEXT_ENTRIES)
+    return;
+  for (let index = value.length - 1;index >= 0; index -= 1) {
+    const message = value[index];
+    if (!isRecord(message) || typeof message.type !== "string")
+      return;
+    if (message.type === "assistant" || message.type === "agent-switched" || message.type === "model-switched" || message.type === "location-switched") {
+      continue;
+    }
+    if (message.type !== "user" || typeof message.id !== "string" || !SAFE_ID_PATTERN2.test(message.id)) {
+      return;
+    }
+    const time = isRecord(message.time) ? message.time : undefined;
+    const createdAt = time?.created;
+    if (typeof createdAt !== "number" || !Number.isSafeInteger(createdAt) || createdAt < 0)
+      return;
+    return { id: message.id, issuedAt: Math.floor(createdAt / 1000) };
+  }
+  return;
+}
+function findLatestV2HumanMessageId(value) {
+  return findLatestV2HumanTurn(value)?.id;
+}
+var MeridianV2Plugin = define({
+  id: "meridian",
+  setup: async (context) => {
+    const traitsByAgent = new Map;
+    const registered = [];
+    const resolveAgentTraits = (agent, refresh = false) => {
+      const cached = traitsByAgent.get(agent);
+      if (!refresh && cached && cached.expiresAt > Date.now())
+        return cached.pending;
+      if (refresh)
+        traitsByAgent.delete(agent);
+      const request = Symbol(agent);
+      const pending = (async () => {
+        const controller = new AbortController;
+        try {
+          const result = await withTimeout(context.agent.get({ agentID: agent }, { signal: controller.signal }), LOOKUP_TIMEOUT_MS);
+          const data = result?.data;
+          if (!data || data.mode !== "primary" && data.mode !== "subagent" && data.mode !== "all" || typeof data.hidden !== "boolean") {
+            if (traitsByAgent.get(agent)?.request === request)
+              traitsByAgent.delete(agent);
+            return { traits: fallbackAgentTraits(agent), exactMode: undefined, authoritative: false };
+          }
+          return {
+            traits: {
+              mode: data.mode === "subagent" ? "subagent" : "primary",
+              hidden: data.hidden
+            },
+            exactMode: data.mode,
+            authoritative: true
+          };
+        } catch {
+          if (traitsByAgent.get(agent)?.request === request)
+            traitsByAgent.delete(agent);
+          return { traits: fallbackAgentTraits(agent), exactMode: undefined, authoritative: false };
+        } finally {
+          controller.abort();
+        }
+      })();
+      traitsByAgent.delete(agent);
+      traitsByAgent.set(agent, { request, expiresAt: Date.now() + AGENT_CACHE_TTL_MS, pending });
+      while (traitsByAgent.size > AGENT_CACHE_MAX) {
+        const oldest = traitsByAgent.keys().next().value;
+        if (oldest === undefined)
+          break;
+        traitsByAgent.delete(oldest);
+      }
+      return pending;
+    };
+    const apply = async (input, headers, refreshTraits = false) => {
+      if (!MERIDIAN_PROVIDERS.has(String(input.model.providerID)))
+        return;
+      const agent = String(input.agent);
+      const metadata = await resolveAgentTraits(agent, refreshTraits);
+      applyMeridianV2Headers(headers, {
+        sessionID: String(input.sessionID),
+        agent,
+        traits: metadata.traits
+      });
+      return metadata;
+    };
+    const resolveHumanTurn = async (input, headers, metadata) => {
+      const sessionID = String(input.sessionID);
+      const agent = String(input.agent);
+      if (!metadata.authoritative || metadata.exactMode !== "primary" || metadata.traits.hidden || INTERNAL_ROUTING_AGENT_IDS.has(agent) || safeAgentName(agent) !== agent || getHeader(headers, "x-meridian-profile") !== undefined) {
+        return;
+      }
+      const controller = new AbortController;
+      try {
+        const result = await withTimeout(Promise.all([
+          context.session.get({ sessionID }, { signal: controller.signal }),
+          context.session.context({ sessionID }, { signal: controller.signal })
+        ]), LOOKUP_TIMEOUT_MS);
+        if (!result || !isRootV2Session(result[0], sessionID))
+          return;
+        return findLatestV2HumanTurn(result[1]);
+      } catch {
+        return;
+      } finally {
+        controller.abort();
+      }
+    };
+    try {
+      for (const providerID of MERIDIAN_PROVIDERS) {
+        registered.push(await context.session.hook("model.request", async (input) => {
+          await apply(input, input.headers);
+        }, { providerID }));
+        registered.push(await context.session.hook("http.request", async (input) => {
+          const metadata = await apply(input, input.request.headers, true);
+          if (!metadata)
+            return;
+          const humanTurn = await resolveHumanTurn(input, input.request.headers, metadata);
+          if (!humanTurn)
+            return;
+          const token = createPriorityAttestation({
+            generation: "oc2b18314",
+            sessionId: String(input.sessionID),
+            agentId: String(input.agent),
+            humanMessageId: humanTurn.id,
+            issuedAt: humanTurn.issuedAt
+          });
+          if (token)
+            setHeader(input.request.headers, PRIORITY_ATTESTATION_HEADER, token);
+        }, { providerID }));
+      }
+    } catch (error) {
+      await Promise.allSettled(registered.map(({ dispose }) => dispose()));
+      throw error;
+    }
+    return async () => {
+      const results = await Promise.allSettled(registered.map(({ dispose }) => dispose()));
+      const failures = results.flatMap((result) => result.status === "rejected" ? [result.reason] : []);
+      if (failures.length > 0)
+        throw new AggregateError(failures, "Failed to dispose Meridian V2 hooks");
+    };
+  }
+});
+var meridian_v2_default = MeridianV2Plugin;
+export {
+  shouldDetachFromParentSession,
+  isRootV2Session,
+  findLatestV2HumanTurn,
+  findLatestV2HumanMessageId,
+  fallbackAgentTraits,
+  meridian_v2_default as default,
+  applyMeridianV2Headers,
+  SUPPORTED_OPENCODE_V2_VERSION
+};

package/dist/{profileCli-39vshwdn.js → profileCli-ap7eg985.js}

@@ -13,9 +13,9 @@ import {
   profileLogin,
   profileRemove,
   profileSwitch
-} from "./cli-xfbhn15a.js";
-import"./cli-vj9cv18n.js";
+} from "./cli-0ed6j0vk.js";
 import"./cli-khhjyk04.js";
+import"./cli-vj9cv18n.js";
 import"./cli-p9swy5t3.js";
 export {
   profileSwitch,

package/dist/{profiles-0pyeqayw.js → profiles-4ajzjqhm.js}

@@ -9,7 +9,7 @@ import {
   resolveProfile,
   restoreActiveProfile,
   setActiveProfile
-} from "./cli-m0p2bc8v.js";
+} from "./cli-pdpry6q0.js";
 import"./cli-vj9cv18n.js";
 import"./cli-p9swy5t3.js";
 export {

package/dist/proxy/adapter.d.ts

@@ -6,6 +6,14 @@
  */
 import type { Context } from "hono";
 import type { SettingSource } from "@anthropic-ai/claude-agent-sdk";
+export type RoutingTurnIdentity = Readonly<{
+    readonly kind: "human";
+    /** Fixed-width, session-bound digest of the host's genuine human message ID. */
+    readonly turnId: string;
+    /** Signed wall-clock issue time used as a durable anti-replay high-water mark. */
+    readonly issuedAt: number;
+    readonly generation: "opencode-v1" | "opencode-v2-beta-18314";
+}>;
 /**
  * Core identity of an agent — detection, session tracking, CWD extraction.
  * This is the minimal interface for agent recognition. Behavioral customization
@@ -24,6 +32,14 @@ export interface AgentIdentity {
      * details; the proxy uses the normalized value for model-tier selection.
      */
     getAgentMode?(c: Context, body?: unknown): string | undefined;
+    /**
+     * Optional trusted identity for a visible human turn.
+     *
+     * This is deliberately a positive, normalized assertion. Callers must treat
+     * undefined as ineligible for user-turn routing changes. An adapter must not
+     * return raw client-declared kind/ID headers without authenticating them.
+     */
+    getRoutingTurnIdentity?(c: Context, body?: unknown): RoutingTurnIdentity | undefined;
     /**
      * Extract the SDK subprocess working directory from the request body.
      *

package/dist/proxy/adapter.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"adapter.d.ts","sourceRoot":"","sources":["../../src/proxy/adapter.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,MAAM,CAAA;AACnC,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,gCAAgC,CAAA;AAEnE;;;;GAIG;AACH,MAAM,WAAW,aAAa;IAC5B,4DAA4D;IAC5D,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IAErB;;;OAGG;IACH,YAAY,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,OAAO,GAAG,MAAM,GAAG,SAAS,CAAA;IAE5D;;;OAGG;IACH,YAAY,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,OAAO,GAAG,MAAM,GAAG,SAAS,CAAA;IAE7D;;;;;;;;;;;;;;;;OAgBG;IACH,uBAAuB,CAAC,IAAI,EAAE,GAAG,GAAG,MAAM,GAAG,SAAS,CAAA;IAEtD;;;;;;;;;;;OAWG;IACH,6BAA6B,CAAC,CAAC,IAAI,EAAE,GAAG,GAAG,MAAM,GAAG,SAAS,CAAA;IAE7D;;;OAGG;IACH,gBAAgB,CAAC,OAAO,EAAE,GAAG,GAAG,MAAM,CAAA;IAEtC;;;;;OAKG;IACH,8BAA8B,CAAC,CAC7B,QAAQ,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,OAAO,CAAA;KAAE,CAAC,GAClD,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,OAAO,CAAA;KAAE,CAAC,CAAA;IAE5C;;;OAGG;IACH,gBAAgB,IAAI,MAAM,CAAA;CAC3B;AAED;;;;GAIG;AACH,MAAM,WAAW,YAAa,SAAQ,aAAa;IACjD;;;;;;OAMG;IACH,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;IAE1B,6EAA6E;IAC7E,QAAQ,CAAC,gBAAgB,CAAC,EAAE,OAAO,CAAC,OAAO,eAAe,EAAE,eAAe,CAAC,CAAA;IAE5E,6EAA6E;IAC7E,QAAQ,CAAC,mBAAmB,CAAC,EAAE,OAAO,CAAA;IAEtC;;;OAGG;IACH,sBAAsB,IAAI,SAAS,MAAM,EAAE,CAAA;IAE3C;;;;OAIG;IACH,yBAAyB,IAAI,SAAS,MAAM,EAAE,CAAA;IAE9C;;OAEG;IACH,kBAAkB,IAAI,SAAS,MAAM,EAAE,CAAA;IAEvC;;;;OAIG;IACH,cAAc,CAAC,CAAC,IAAI,EAAE,GAAG,EAAE,YAAY,EAAE,SAAS,MAAM,EAAE,GAAG,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IAEhF;;;OAGG;IACH,aAAa,CAAC,CAAC,IAAI,EAAE,GAAG,EAAE,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,GAAG,CAAA;IAE9D;;;OAGG;IACH,0BAA0B,CAAC,CAAC,IAAI,EAAE,GAAG,EAAE,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,MAAM,CAAA;IAE9E;;;;;;OAMG;IACH,gBAAgB,CAAC,CAAC,IAAI,EAAE,GAAG,GAAG,OAAO,CAAA;IAErC;;;;;;;;OAQG;IACH,eAAe,CAAC,IAAI,OAAO,CAAA;IAE3B;;;;;;;OAOG;IACH,gBAAgB,CAAC,IAAI,SAAS,MAAM,EAAE,CAAA;IAEtC;;;;;;;;;;;;;;OAcG;IACH,iBAAiB,CAAC,IAAI,aAAa,EAAE,CAAA;IAErC;;;;;;;OAOG;IACH,gBAAgB,CAAC,IAAI,OAAO,CAAA;IAE5B;;;;;;OAMG;IACH,sBAAsB,CAAC,IAAI,OAAO,CAAA;IAElC;;;;;;;;OAQG;IACH,yBAAyB,CAAC,IAAI,OAAO,CAAA;IAErC;;;;;;;;;;;;;;;OAeG;IACH,6BAA6B,CAAC,CAAC,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,GAAG,OAAO,eAAe,EAAE,UAAU,EAAE,CAAA;CAC3G"}
+{"version":3,"file":"adapter.d.ts","sourceRoot":"","sources":["../../src/proxy/adapter.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,MAAM,CAAA;AACnC,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,gCAAgC,CAAA;AAEnE,MAAM,MAAM,mBAAmB,GAAG,QAAQ,CAAC;IACzC,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAA;IACtB,gFAAgF;IAChF,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,kFAAkF;IAClF,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,UAAU,EAAE,aAAa,GAAG,wBAAwB,CAAA;CAC9D,CAAC,CAAA;AAEF;;;;GAIG;AACH,MAAM,WAAW,aAAa;IAC5B,4DAA4D;IAC5D,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IAErB;;;OAGG;IACH,YAAY,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,OAAO,GAAG,MAAM,GAAG,SAAS,CAAA;IAE5D;;;OAGG;IACH,YAAY,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,OAAO,GAAG,MAAM,GAAG,SAAS,CAAA;IAE7D;;;;;;OAMG;IACH,sBAAsB,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,OAAO,GAAG,mBAAmB,GAAG,SAAS,CAAA;IAEpF;;;;;;;;;;;;;;;;OAgBG;IACH,uBAAuB,CAAC,IAAI,EAAE,GAAG,GAAG,MAAM,GAAG,SAAS,CAAA;IAEtD;;;;;;;;;;;OAWG;IACH,6BAA6B,CAAC,CAAC,IAAI,EAAE,GAAG,GAAG,MAAM,GAAG,SAAS,CAAA;IAE7D;;;OAGG;IACH,gBAAgB,CAAC,OAAO,EAAE,GAAG,GAAG,MAAM,CAAA;IAEtC;;;;;OAKG;IACH,8BAA8B,CAAC,CAC7B,QAAQ,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,OAAO,CAAA;KAAE,CAAC,GAClD,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,OAAO,CAAA;KAAE,CAAC,CAAA;IAE5C;;;OAGG;IACH,gBAAgB,IAAI,MAAM,CAAA;CAC3B;AAED;;;;GAIG;AACH,MAAM,WAAW,YAAa,SAAQ,aAAa;IACjD;;;;;;OAMG;IACH,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;IAE1B,6EAA6E;IAC7E,QAAQ,CAAC,gBAAgB,CAAC,EAAE,OAAO,CAAC,OAAO,eAAe,EAAE,eAAe,CAAC,CAAA;IAE5E,6EAA6E;IAC7E,QAAQ,CAAC,mBAAmB,CAAC,EAAE,OAAO,CAAA;IAEtC;;;OAGG;IACH,sBAAsB,IAAI,SAAS,MAAM,EAAE,CAAA;IAE3C;;;;OAIG;IACH,yBAAyB,IAAI,SAAS,MAAM,EAAE,CAAA;IAE9C;;OAEG;IACH,kBAAkB,IAAI,SAAS,MAAM,EAAE,CAAA;IAEvC;;;;OAIG;IACH,cAAc,CAAC,CAAC,IAAI,EAAE,GAAG,EAAE,YAAY,EAAE,SAAS,MAAM,EAAE,GAAG,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IAEhF;;;OAGG;IACH,aAAa,CAAC,CAAC,IAAI,EAAE,GAAG,EAAE,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,GAAG,CAAA;IAE9D;;;OAGG;IACH,0BAA0B,CAAC,CAAC,IAAI,EAAE,GAAG,EAAE,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,MAAM,CAAA;IAE9E;;;;;;OAMG;IACH,gBAAgB,CAAC,CAAC,IAAI,EAAE,GAAG,GAAG,OAAO,CAAA;IAErC;;;;;;;;OAQG;IACH,eAAe,CAAC,IAAI,OAAO,CAAA;IAE3B;;;;;;;OAOG;IACH,gBAAgB,CAAC,IAAI,SAAS,MAAM,EAAE,CAAA;IAEtC;;;;;;;;;;;;;;OAcG;IACH,iBAAiB,CAAC,IAAI,aAAa,EAAE,CAAA;IAErC;;;;;;;OAOG;IACH,gBAAgB,CAAC,IAAI,OAAO,CAAA;IAE5B;;;;;;OAMG;IACH,sBAAsB,CAAC,IAAI,OAAO,CAAA;IAElC;;;;;;;;OAQG;IACH,yBAAyB,CAAC,IAAI,OAAO,CAAA;IAErC;;;;;;;;;;;;;;;OAeG;IACH,6BAA6B,CAAC,CAAC,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,GAAG,OAAO,eAAe,EAAE,UAAU,EAAE,CAAA;CAC3G"}

package/dist/proxy/adapters/opencode.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"opencode.d.ts","sourceRoot":"","sources":["../../../src/proxy/adapters/opencode.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,YAAY,CAAA;AAqC9C,wBAAgB,sCAAsC,CACpD,QAAQ,EAAE,KAAK,CAAC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,OAAO,CAAA;CAAE,CAAC,GAClD,KAAK,CAAC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,OAAO,CAAA;CAAE,CAAC,CAU3C;AAED,eAAO,MAAM,eAAe,EAAE,YAwK7B,CAAA;AAED,OAAO,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAA;AAC3D,OAAO,EAAE,kBAAkB,EAAE,CAAA"}
+{"version":3,"file":"opencode.d.ts","sourceRoot":"","sources":["../../../src/proxy/adapters/opencode.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,OAAO,KAAK,EAAE,YAAY,EAAuB,MAAM,YAAY,CAAA;AAsCnE,wBAAgB,sCAAsC,CACpD,QAAQ,EAAE,KAAK,CAAC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,OAAO,CAAA;CAAE,CAAC,GAClD,KAAK,CAAC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,OAAO,CAAA;CAAE,CAAC,CAU3C;AAED,eAAO,MAAM,eAAe,EAAE,YAqM7B,CAAA;AAED,OAAO,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAA;AAC3D,OAAO,EAAE,kBAAkB,EAAE,CAAA"}

package/dist/proxy/errors.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../../src/proxy/errors.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,MAAM,WAAW,eAAe;IAC9B,MAAM,EAAE,MAAM,CAAA;IACd,IAAI,EAAE,MAAM,CAAA;IACZ,OAAO,EAAE,MAAM,CAAA;CAChB;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,mBAAmB,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,MAAM,CAc1D;AAiCD;;;;;;GAMG;AACH,wBAAgB,aAAa,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,eAAe,CAiI7E;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAM3D;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,MAAM,aAAa,GAAG,MAAM,GAAG,aAAa,GAAG,iBAAiB,CAAA;AAEtE;;;;;;;GAOG;AACH,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,OAAO,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,aAAa,GAAG,SAAS,CAahG;AAED;;;;;;;GAOG;AACH,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,OAAO,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,OAAO,CAI3E;AAED;;;GAGG;AACH,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAGxD;AAuBD;;;GAGG;AACH,wBAAgB,sBAAsB,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,SAAS,IAAI,MAAM,CAEhG;AAED;;;;;;;GAOG;AACH,wBAAgB,cAAc,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,OAAO,CAE5E;AAED;;;;GAIG;AACH,wBAAgB,yBAAyB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAGjE;AAED;;;;;GAKG;AACH,MAAM,WAAW,cAAc;IAC7B,MAAM,EAAE,WAAW,GAAG,cAAc,GAAG,SAAS,GAAG,eAAe,GAAG,SAAS,CAAA;IAC9E,sDAAsD;IACtD,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,wDAAwD;IACxD,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,uEAAuE;IACvE,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,wDAAwD;IACxD,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB;;wCAEoC;IACpC,OAAO,CAAC,EAAE,MAAM,CAAA;CACjB;AAuBD;;;;;;GAMG;AACH;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAgB,0BAA0B,CAAC,KAAK,EAAE;IAChD,MAAM,EAAE,cAAc,CAAC,QAAQ,CAAC,CAAA;IAChC,WAAW,EAAE,OAAO,CAAA;IACpB,gBAAgB,EAAE,MAAM,CAAA;IACxB,WAAW,EAAE,OAAO,CAAA;CACrB,GAAG,OAAO,CAYV;AAED,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,MAAM,GAAG,cAAc,CAuDpE;AAED;;;;;;;GAOG;AACH,wBAAgB,oBAAoB,CAClC,CAAC,EAAE,cAAc,EACjB,GAAG,EAAE;IACH,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,EAAE,OAAO,CAAA;IAClB,gBAAgB,CAAC,EAAE,OAAO,CAAA;IAC1B,YAAY,CAAC,EAAE,MAAM,CAAA;CACtB,GACA,MAAM,CAYR"}
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../../src/proxy/errors.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,MAAM,WAAW,eAAe;IAC9B,MAAM,EAAE,MAAM,CAAA;IACd,IAAI,EAAE,MAAM,CAAA;IACZ,OAAO,EAAE,MAAM,CAAA;CAChB;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,mBAAmB,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,MAAM,CAc1D;AAsCD;;;;;;GAMG;AACH,wBAAgB,aAAa,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,eAAe,CAkI7E;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAM3D;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,MAAM,aAAa,GAAG,MAAM,GAAG,aAAa,GAAG,iBAAiB,CAAA;AAEtE;;;;;;;GAOG;AACH,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,OAAO,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,aAAa,GAAG,SAAS,CAahG;AAED;;;;;;;GAOG;AACH,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,OAAO,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,OAAO,CAI3E;AAED;;;GAGG;AACH,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAGxD;AAuBD;;;GAGG;AACH,wBAAgB,sBAAsB,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,SAAS,IAAI,MAAM,CAEhG;AAED;;;;;;;GAOG;AACH,wBAAgB,cAAc,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,OAAO,CAE5E;AAED;;;;GAIG;AACH,wBAAgB,yBAAyB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAGjE;AAED;;;;;GAKG;AACH,MAAM,WAAW,cAAc;IAC7B,MAAM,EAAE,WAAW,GAAG,cAAc,GAAG,SAAS,GAAG,eAAe,GAAG,SAAS,CAAA;IAC9E,sDAAsD;IACtD,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,wDAAwD;IACxD,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,uEAAuE;IACvE,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,wDAAwD;IACxD,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB;;wCAEoC;IACpC,OAAO,CAAC,EAAE,MAAM,CAAA;CACjB;AAuBD;;;;;;GAMG;AACH;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAgB,0BAA0B,CAAC,KAAK,EAAE;IAChD,MAAM,EAAE,cAAc,CAAC,QAAQ,CAAC,CAAA;IAChC,WAAW,EAAE,OAAO,CAAA;IACpB,gBAAgB,EAAE,MAAM,CAAA;IACxB,WAAW,EAAE,OAAO,CAAA;CACrB,GAAG,OAAO,CAYV;AAED,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,MAAM,GAAG,cAAc,CAuDpE;AAED;;;;;;;GAOG;AACH,wBAAgB,oBAAoB,CAClC,CAAC,EAAE,cAAc,EACjB,GAAG,EAAE;IACH,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,EAAE,OAAO,CAAA;IAClB,gBAAgB,CAAC,EAAE,OAAO,CAAA;IAC1B,YAAY,CAAC,EAAE,MAAM,CAAA;CACtB,GACA,MAAM,CAYR"}

package/dist/proxy/passthroughTools.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"passthroughTools.d.ts","sourceRoot":"","sources":["../../src/proxy/passthroughTools.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAKH,eAAO,MAAM,oBAAoB,OAAO,CAAA;AACxC,eAAO,MAAM,sBAAsB,cAAmC,CAAA;AA0CtE,wBAAgB,qBAAqB,IAAI,MAAM,CAM9C;AAED;;;;;;;GAOG;AACH,wBAAgB,0BAA0B,CACxC,KAAK,EAAE,KAAK,CAAC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAAC,YAAY,CAAC,EAAE,GAAG,CAAC;IAAC,aAAa,CAAC,EAAE,OAAO,CAAA;CAAE,CAAC,EACjG,aAAa,CAAC,EAAE,SAAS,MAAM,EAAE;;;;EA4DlC;AAqBD;;;;GAIG;AACH,wBAAgB,iBAAiB,CAC/B,KAAK,EAAE,KAAK,CAAC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,YAAY,CAAC,EAAE,OAAO,CAAC;IAAC,aAAa,CAAC,EAAE,OAAO,CAAA;CAAE,CAAC,GAC9E,MAAM,CASR;AAUD;;;;;;;;;;GAUG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,GAAG,MAAM,CAErE;AAED;;;GAGG;AACH,wBAAgB,cAAc,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAKvD;AAUD;;;;;;;;;;;;;GAaG;AACH,wBAAgB,kBAAkB,CAChC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,EAC1C,YAAY,EAAE;IAAE,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAA;CAAE,GAAG,SAAS,GACtF,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,CAgCrC"}
+{"version":3,"file":"passthroughTools.d.ts","sourceRoot":"","sources":["../../src/proxy/passthroughTools.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAKH,eAAO,MAAM,oBAAoB,OAAO,CAAA;AACxC,eAAO,MAAM,sBAAsB,cAAmC,CAAA;AA0CtE,wBAAgB,qBAAqB,IAAI,MAAM,CAM9C;AAED;;;;;;;GAOG;AACH,wBAAgB,0BAA0B,CACxC,KAAK,EAAE,KAAK,CAAC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAAC,YAAY,CAAC,EAAE,GAAG,CAAC;IAAC,aAAa,CAAC,EAAE,OAAO,CAAA;CAAE,CAAC,EACjG,aAAa,CAAC,EAAE,SAAS,MAAM,EAAE;;;;EA8ClC;AAqBD;;;;GAIG;AACH,wBAAgB,iBAAiB,CAC/B,KAAK,EAAE,KAAK,CAAC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,YAAY,CAAC,EAAE,OAAO,CAAC;IAAC,aAAa,CAAC,EAAE,OAAO,CAAA;CAAE,CAAC,GAC9E,MAAM,CASR;AAUD;;;;;;;;;;GAUG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,GAAG,MAAM,CAErE;AAED;;;GAGG;AACH,wBAAgB,cAAc,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAKvD;AAUD;;;;;;;;;;;;;GAaG;AACH,wBAAgB,kBAAkB,CAChC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,EAC1C,YAAY,EAAE;IAAE,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAA;CAAE,GAAG,SAAS,GACtF,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,CAgCrC"}

package/dist/proxy/priorityAttestation.d.ts

@@ -0,0 +1,35 @@
+/**
+ * Verify and provision OpenCode priority-failback attestations.
+ *
+ * The OpenCode plugin signs a bounded positive assertion at its final outbound
+ * hook. Meridian verifies it before treating a request as a new human turn.
+ * Missing or invalid attestations fail closed to normal profile affinity.
+ */
+export declare const PRIORITY_ATTESTATION_HEADER = "x-meridian-opencode-turn";
+export declare const PRIORITY_ATTESTATION_KEY_ENV = "MERIDIAN_OPENCODE_ATTESTATION_KEY";
+export declare const PRIORITY_ATTESTATION_KEY_FILE = "opencode-turn.key";
+export type OpenCodeAttestationGeneration = "oc1" | "oc2b18314";
+export interface VerifiedPriorityAttestation {
+    readonly generation: OpenCodeAttestationGeneration;
+    readonly sessionId: string;
+    readonly agentId: string;
+    readonly turnId: string;
+    readonly issuedAt: number;
+}
+export declare class InvalidPriorityAttestationKeyError extends Error {
+    readonly keyPath: string;
+    constructor(keyPath: string);
+}
+export declare function priorityAttestationKeyPath(): string;
+export declare function decodePriorityAttestationKey(raw: string | undefined): Buffer | undefined;
+export declare function loadPriorityAttestationKey(): Buffer | undefined;
+/**
+ * Ensure setup has a durable 32-byte signing key without ever rotating an
+ * existing valid key. An environment key wins and avoids touching disk.
+ */
+export declare function ensurePriorityAttestationKey(): {
+    readonly key: Buffer;
+    readonly path?: string;
+};
+export declare function verifyPriorityAttestation(token: string | undefined, key?: Buffer, nowSeconds?: number): VerifiedPriorityAttestation | undefined;
+//# sourceMappingURL=priorityAttestation.d.ts.map