@rynfar/meridian 1.64.0 → 1.65.0

package/dist/proxy/sessionStore.d.ts

@@ -51,9 +51,37 @@ export interface StoredSession {
     previousTranscript?: TranscriptLocator;
 }
 export type StoredSessionGeneration = string;
+export interface DurablePriorityAssignment {
+    profileId: string;
+    lastHumanTurnDigest: string;
+    /** Monotonic signed issue-time high-water mark for replay suppression. */
+    lastHumanTurnIssuedAt: number;
+    mappingKey: string;
+    /** Exact mapping generation published atomically with this route. */
+    mappingGeneration: StoredSessionGeneration;
+    /** Unique route publication token. Replaced on every route mutation. */
+    generationId: string;
+    updatedAt: number;
+}
+export type PriorityAssignmentGeneration = string;
+export interface DurablePriorityAttempt {
+    /** A prior exposed or crashed attempt blocks untrusted/same-turn replay. */
+    blocked: boolean;
+    blockedTurnDigest: string | null;
+    blockedTurnIssuedAt: number | null;
+    /** One exact in-flight request owns publication/release for this route. */
+    pendingTurnDigest: string | null;
+    pendingTurnIssuedAt: number | null;
+    ownerToken: string | null;
+    generationId: string;
+    updatedAt: number;
+}
 /** Exact, key-bound durable generation used for compare-and-swap fencing. */
 export declare function getStoredSessionGeneration(session: StoredSession, key: string): StoredSessionGeneration;
+export declare function getPriorityAssignmentGeneration(assignment: DurablePriorityAssignment, routeKey: string): PriorityAssignmentGeneration;
 export declare function getMaxStoredSessionsLimit(): number;
+export declare function getMaxPriorityAssignmentsLimit(): number;
+export declare function getMaxPriorityAttemptsLimit(): number;
 /** Set an explicit session store directory. Takes priority over env var.
  *  Pass null to clear. For testing only. The legacy options parameter remains
  *  accepted for compatibility, but transactions are always locked. */
@@ -82,9 +110,114 @@ export type SharedSessionLookupResult = {
 /** Distinguish an authoritative absence from a transient/corrupt read. */
 export declare function lookupSharedSessionResult(key: string): SharedSessionLookupResult;
 export declare function lookupSharedSession(key: string): StoredSession | undefined;
+export type PriorityAssignmentLookupResult = {
+    status: "found";
+    assignment: DurablePriorityAssignment;
+    generation: PriorityAssignmentGeneration;
+    attempt?: DurablePriorityAttempt;
+} | {
+    status: "missing";
+    generation: PriorityAssignmentGeneration;
+    attempt?: DurablePriorityAttempt;
+} | {
+    status: "error";
+    error: Error;
+};
+/** Read one exact durable route. V1 documents authoritatively contain none. */
+export declare function lookupPriorityAssignmentResult(routeKey: string): PriorityAssignmentLookupResult;
 export declare function lookupSharedSessionByClaudeIdResult(claudeSessionId: string): SharedSessionLookupResult;
 export declare function lookupSharedSessionByClaudeId(claudeSessionId: string): StoredSession | undefined;
 export declare function storeSharedSession(key: string, claudeSessionId: string, messageCount?: number, lineageHash?: string, messageHashes?: string[], sdkMessageUuids?: Array<string | null>, contextUsage?: TokenUsage, messageBlockHashes?: string[][], passthroughToolCallAssistantUuid?: string | null, passthroughToolCallIds?: string[] | null, currentTranscript?: TranscriptLocator, sourceTranscript?: TranscriptLocator, expectedGeneration?: StoredSessionGeneration | null): StoredSessionGeneration | false;
+export interface PriorityAttemptTurn {
+    turnId: string;
+    issuedAt: number;
+}
+export interface PriorityAttemptClaim {
+    ownerToken: string;
+}
+/**
+ * Reserve one durable route attempt before any SDK work can become exposed.
+ * A blocked/crashed attempt can be superseded only by a strictly newer trusted
+ * human turn. The prior blocker remains until the newer turn publishes.
+ */
+export declare function claimPriorityAttempt(options: {
+    routeKey: string;
+    expectedAssignmentGeneration: PriorityAssignmentGeneration;
+    turn?: PriorityAttemptTurn;
+}): PriorityAttemptClaim | false;
+/** Release an unexposed attempt; an older blocker remains intact. */
+export declare function releasePriorityAttempt(routeKey: string, ownerToken: string): boolean;
+/** Persist exposure before returning an account-shaped error or cancellation. */
+export declare function blockPriorityAttempt(routeKey: string, ownerToken: string): boolean;
+export interface SharedSessionPriorityPublication {
+    routeKey: string;
+    profileId: string;
+    lastHumanTurnDigest: string;
+    lastHumanTurnIssuedAt: number;
+    expectedAssignmentGeneration: PriorityAssignmentGeneration;
+}
+export interface SharedSessionAndPriorityAssignmentOptions {
+    key: string;
+    claudeSessionId: string;
+    messageCount: number;
+    lineageHash: string;
+    messageHashes: string[];
+    sdkMessageUuids?: Array<string | null>;
+    contextUsage?: TokenUsage;
+    messageBlockHashes: string[][];
+    passthroughToolCallAssistantUuid?: string | null;
+    passthroughToolCallIds?: string[] | null;
+    currentTranscript?: TranscriptLocator;
+    sourceTranscript?: TranscriptLocator;
+    expectedMappingGeneration: StoredSessionGeneration;
+    /** Original routed mapping retained across chained publications for rollback. */
+    rollbackMappingKey?: string;
+    /** Exact pre-SDK durable claim cleared only by this winning publication. */
+    attemptOwnerToken?: string;
+    priority: SharedSessionPriorityPublication;
+}
+export interface SharedSessionAndPriorityAssignmentResult {
+    mappingGeneration: StoredSessionGeneration;
+    assignmentGeneration: PriorityAssignmentGeneration;
+    previousMapping: StoredSession | null;
+    previousAssignment: DurablePriorityAssignment | null;
+}
+/**
+ * Publish one session mapping and its selected priority route as one locked,
+ * durable compare-and-swap. A v1 document upgrades only when this transaction
+ * wins; all ordinary mapping writes preserve either input version.
+ */
+export declare function storeSharedSessionAndPriorityAssignment(options: SharedSessionAndPriorityAssignmentOptions): SharedSessionAndPriorityAssignmentResult | false;
+export interface FinalizeSharedSessionAndPriorityAssignmentOptions {
+    key: string;
+    routeKey: string;
+    expectedMappingGeneration: StoredSessionGeneration;
+    expectedAssignmentGeneration: PriorityAssignmentGeneration;
+    rollbackMappingKey?: string;
+    attemptOwnerToken?: string;
+}
+/**
+ * Make a successful publication irrevocable and prune its rollback backlog.
+ * Exact route+mapping CAS prevents a late finalizer from touching newer work.
+ */
+export declare function finalizeSharedSessionAndPriorityAssignment(options: FinalizeSharedSessionAndPriorityAssignmentOptions): boolean;
+export interface RollbackSharedSessionAndPriorityAssignmentOptions {
+    key: string;
+    routeKey: string;
+    expectedMappingGeneration: StoredSessionGeneration;
+    expectedAssignmentGeneration: PriorityAssignmentGeneration;
+    previousMapping: StoredSession | null;
+    previousAssignment: DurablePriorityAssignment | null;
+    attemptOwnerToken?: string;
+}
+export interface RollbackSharedSessionAndPriorityAssignmentResult {
+    mappingGeneration: StoredSessionGeneration;
+    assignmentGeneration: PriorityAssignmentGeneration;
+    restoredMapping: StoredSession | null;
+    restoredAssignment: DurablePriorityAssignment | null;
+}
+/** Restore the exact pre-request authorities after a canceled late publication. */
+export declare function rollbackSharedSessionAndPriorityAssignment(options: RollbackSharedSessionAndPriorityAssignmentOptions): RollbackSharedSessionAndPriorityAssignmentResult | false;
 /** Attach an exact transcript locator without changing lineage or SDK identity.
  * The durable revision advances so concurrent readers cannot miss the mutation. */
 export declare function attachSharedTranscriptLocator(key: string, expectedClaudeSessionId: string, locator: TranscriptLocator, expectedGeneration?: StoredSessionGeneration): StoredSessionGeneration | false;

package/dist/proxy/sessionStore.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sessionStore.d.ts","sourceRoot":"","sources":["../../src/proxy/sessionStore.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AA2BH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAA;AAgBnD,MAAM,WAAW,iBAAiB;IAChC,SAAS,EAAE,MAAM,CAAA;IACjB,SAAS,EAAE,MAAM,CAAA;IACjB,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,wEAAwE;IACxE,mBAAmB,CAAC,EAAE,MAAM,CAAA;CAC7B;AAED,MAAM,WAAW,aAAa;IAC5B,eAAe,EAAE,MAAM,CAAA;IACvB,0EAA0E;IAC1E,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,4EAA4E;IAC5E,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,SAAS,EAAE,MAAM,CAAA;IACjB,UAAU,EAAE,MAAM,CAAA;IAClB,YAAY,EAAE,MAAM,CAAA;IACpB,gFAAgF;IAChF,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,6EAA6E;IAC7E,aAAa,CAAC,EAAE,MAAM,EAAE,CAAA;IACxB,mFAAmF;IACnF,kBAAkB,CAAC,EAAE,MAAM,EAAE,EAAE,CAAA;IAC/B,iFAAiF;IACjF,eAAe,CAAC,EAAE,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC,CAAA;IACtC;oFACgF;IAChF,gCAAgC,CAAC,EAAE,MAAM,CAAA;IACzC,qEAAqE;IACrE,sBAAsB,CAAC,EAAE,MAAM,EAAE,CAAA;IACjC,wDAAwD;IACxD,YAAY,CAAC,EAAE,UAAU,CAAA;IACzB;;kEAE8D;IAC9D,uBAAuB,CAAC,EAAE,MAAM,CAAA;IAChC,gEAAgE;IAChE,iBAAiB,CAAC,EAAE,iBAAiB,CAAA;IACrC,yEAAyE;IACzE,kBAAkB,CAAC,EAAE,iBAAiB,CAAA;CACvC;AAED,MAAM,MAAM,uBAAuB,GAAG,MAAM,CAAA;AA8B5C,6EAA6E;AAC7E,wBAAgB,0BAA0B,CACxC,OAAO,EAAE,aAAa,EACtB,GAAG,EAAE,MAAM,GACV,uBAAuB,CAIzB;AA4BD,wBAAgB,yBAAyB,IAAI,MAAM,CAMlD;AA4WD;;sEAEsE;AACtE,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,EAAE,KAAK,CAAC,EAAE;IAAE,WAAW,CAAC,EAAE,OAAO,CAAA;CAAE,GAAG,IAAI,CAE9F;AAED,uEAAuE;AACvE,wBAAgB,kBAAkB,IAAI,MAAM,CAK3C;AAyJD;2EAC2E;AAC3E,wBAAgB,wBAAwB,IAAI,MAAM,CAAC,MAAM,EAAE,aAAa,CAAC,CAExE;AAED,qFAAqF;AACrF,wBAAgB,kCAAkC,CAChD,gBAAgB,EAAE,MAAM,EACxB,UAAU,GAAE,SAAS,MAAM,EAAO,GACjC,MAAM,CAAC,MAAM,EAAE,uBAAuB,CAAC,CAezC;AAqED,MAAM,MAAM,yBAAyB,GACjC;IAAE,MAAM,EAAE,OAAO,CAAC;IAAC,OAAO,EAAE,aAAa,CAAC;IAAC,UAAU,CAAC,EAAE,uBAAuB,CAAA;CAAE,GACjF;IAAE,MAAM,EAAE,SAAS,CAAC;IAAC,QAAQ,CAAC,EAAE,aAAa,CAAC;IAAC,UAAU,CAAC,EAAE,uBAAuB,CAAA;CAAE,GACrF;IAAE,MAAM,EAAE,OAAO,CAAC;IAAC,KAAK,EAAE,KAAK,CAAA;CAAE,CAAA;AAErC,0EAA0E;AAC1E,wBAAgB,yBAAyB,CAAC,GAAG,EAAE,MAAM,GAAG,yBAAyB,CAgBhF;AAED,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,MAAM,GAAG,aAAa,GAAG,SAAS,CAG1E;AAED,wBAAgB,mCAAmC,CAAC,eAAe,EAAE,MAAM,GAAG,yBAAyB,CAoBtG;AAED,wBAAgB,6BAA6B,CAAC,eAAe,EAAE,MAAM,GAAG,aAAa,GAAG,SAAS,CAGhG;AAkBD,wBAAgB,kBAAkB,CAChC,GAAG,EAAE,MAAM,EACX,eAAe,EAAE,MAAM,EACvB,YAAY,CAAC,EAAE,MAAM,EACrB,WAAW,CAAC,EAAE,MAAM,EACpB,aAAa,CAAC,EAAE,MAAM,EAAE,EACxB,eAAe,CAAC,EAAE,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC,EACtC,YAAY,CAAC,EAAE,UAAU,EACzB,kBAAkB,CAAC,EAAE,MAAM,EAAE,EAAE,EAC/B,gCAAgC,CAAC,EAAE,MAAM,GAAG,IAAI,EAChD,sBAAsB,CAAC,EAAE,MAAM,EAAE,GAAG,IAAI,EACxC,iBAAiB,CAAC,EAAE,iBAAiB,EACrC,gBAAgB,CAAC,EAAE,iBAAiB,EACpC,kBAAkB,CAAC,EAAE,uBAAuB,GAAG,IAAI,GAClD,uBAAuB,GAAG,KAAK,CAiFjC;AASD;mFACmF;AACnF,wBAAgB,6BAA6B,CAC3C,GAAG,EAAE,MAAM,EACX,uBAAuB,EAAE,MAAM,EAC/B,OAAO,EAAE,iBAAiB,EAC1B,kBAAkB,CAAC,EAAE,uBAAuB,GAC3C,uBAAuB,GAAG,KAAK,CAiBjC;AAED;;;yDAGyD;AACzD,wBAAgB,kBAAkB,CAChC,GAAG,EAAE,MAAM,EACX,kBAAkB,CAAC,EAAE,uBAAuB,GAC3C,OAAO,CAeT;AAED;;6DAE6D;AAC7D,wBAAgB,qBAAqB,CAAC,GAAG,EAAE,MAAM,GAAG;IAClD,eAAe,EAAE,MAAM,CAAA;IACvB,uBAAuB,CAAC,EAAE,MAAM,CAAA;IAChC,SAAS,EAAE,MAAM,CAAA;IACjB,UAAU,EAAE,MAAM,CAAA;IAClB,YAAY,EAAE,MAAM,CAAA;CACrB,GAAG,SAAS,CAWZ;AAED;uEACuE;AACvE,wBAAgB,kBAAkB,IAAI,KAAK,CAAC;IAC1C,GAAG,EAAE,MAAM,CAAA;IACX,eAAe,EAAE,MAAM,CAAA;IACvB,uBAAuB,CAAC,EAAE,MAAM,CAAA;IAChC,SAAS,EAAE,MAAM,CAAA;IACjB,UAAU,EAAE,MAAM,CAAA;IAClB,YAAY,EAAE,MAAM,CAAA;CACrB,CAAC,CAUD;AAED,wBAAgB,mBAAmB,IAAI,IAAI,CAQ1C"}
+{"version":3,"file":"sessionStore.d.ts","sourceRoot":"","sources":["../../src/proxy/sessionStore.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AA2BH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAA;AAgBnD,MAAM,WAAW,iBAAiB;IAChC,SAAS,EAAE,MAAM,CAAA;IACjB,SAAS,EAAE,MAAM,CAAA;IACjB,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,wEAAwE;IACxE,mBAAmB,CAAC,EAAE,MAAM,CAAA;CAC7B;AAED,MAAM,WAAW,aAAa;IAC5B,eAAe,EAAE,MAAM,CAAA;IACvB,0EAA0E;IAC1E,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,4EAA4E;IAC5E,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,SAAS,EAAE,MAAM,CAAA;IACjB,UAAU,EAAE,MAAM,CAAA;IAClB,YAAY,EAAE,MAAM,CAAA;IACpB,gFAAgF;IAChF,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,6EAA6E;IAC7E,aAAa,CAAC,EAAE,MAAM,EAAE,CAAA;IACxB,mFAAmF;IACnF,kBAAkB,CAAC,EAAE,MAAM,EAAE,EAAE,CAAA;IAC/B,iFAAiF;IACjF,eAAe,CAAC,EAAE,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC,CAAA;IACtC;oFACgF;IAChF,gCAAgC,CAAC,EAAE,MAAM,CAAA;IACzC,qEAAqE;IACrE,sBAAsB,CAAC,EAAE,MAAM,EAAE,CAAA;IACjC,wDAAwD;IACxD,YAAY,CAAC,EAAE,UAAU,CAAA;IACzB;;kEAE8D;IAC9D,uBAAuB,CAAC,EAAE,MAAM,CAAA;IAChC,gEAAgE;IAChE,iBAAiB,CAAC,EAAE,iBAAiB,CAAA;IACrC,yEAAyE;IACzE,kBAAkB,CAAC,EAAE,iBAAiB,CAAA;CACvC;AAED,MAAM,MAAM,uBAAuB,GAAG,MAAM,CAAA;AAM5C,MAAM,WAAW,yBAAyB;IACxC,SAAS,EAAE,MAAM,CAAA;IACjB,mBAAmB,EAAE,MAAM,CAAA;IAC3B,0EAA0E;IAC1E,qBAAqB,EAAE,MAAM,CAAA;IAC7B,UAAU,EAAE,MAAM,CAAA;IAClB,qEAAqE;IACrE,iBAAiB,EAAE,uBAAuB,CAAA;IAC1C,wEAAwE;IACxE,YAAY,EAAE,MAAM,CAAA;IACpB,SAAS,EAAE,MAAM,CAAA;CAClB;AAED,MAAM,MAAM,4BAA4B,GAAG,MAAM,CAAA;AAEjD,MAAM,WAAW,sBAAsB;IACrC,4EAA4E;IAC5E,OAAO,EAAE,OAAO,CAAA;IAChB,iBAAiB,EAAE,MAAM,GAAG,IAAI,CAAA;IAChC,mBAAmB,EAAE,MAAM,GAAG,IAAI,CAAA;IAClC,2EAA2E;IAC3E,iBAAiB,EAAE,MAAM,GAAG,IAAI,CAAA;IAChC,mBAAmB,EAAE,MAAM,GAAG,IAAI,CAAA;IAClC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAA;IACzB,YAAY,EAAE,MAAM,CAAA;IACpB,SAAS,EAAE,MAAM,CAAA;CAClB;AA8CD,6EAA6E;AAC7E,wBAAgB,0BAA0B,CACxC,OAAO,EAAE,aAAa,EACtB,GAAG,EAAE,MAAM,GACV,uBAAuB,CAIzB;AAqBD,wBAAgB,+BAA+B,CAC7C,UAAU,EAAE,yBAAyB,EACrC,QAAQ,EAAE,MAAM,GACf,4BAA4B,CAE9B;AAgCD,wBAAgB,yBAAyB,IAAI,MAAM,CAMlD;AAED,wBAAgB,8BAA8B,IAAI,MAAM,CAMvD;AAED,wBAAgB,2BAA2B,IAAI,MAAM,CAMpD;AA4WD;;sEAEsE;AACtE,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,EAAE,KAAK,CAAC,EAAE;IAAE,WAAW,CAAC,EAAE,OAAO,CAAA;CAAE,GAAG,IAAI,CAE9F;AAED,uEAAuE;AACvE,wBAAgB,kBAAkB,IAAI,MAAM,CAK3C;AA+WD;2EAC2E;AAC3E,wBAAgB,wBAAwB,IAAI,MAAM,CAAC,MAAM,EAAE,aAAa,CAAC,CAExE;AAED,qFAAqF;AACrF,wBAAgB,kCAAkC,CAChD,gBAAgB,EAAE,MAAM,EACxB,UAAU,GAAE,SAAS,MAAM,EAAO,GACjC,MAAM,CAAC,MAAM,EAAE,uBAAuB,CAAC,CAezC;AAqED,MAAM,MAAM,yBAAyB,GACjC;IAAE,MAAM,EAAE,OAAO,CAAC;IAAC,OAAO,EAAE,aAAa,CAAC;IAAC,UAAU,CAAC,EAAE,uBAAuB,CAAA;CAAE,GACjF;IAAE,MAAM,EAAE,SAAS,CAAC;IAAC,QAAQ,CAAC,EAAE,aAAa,CAAC;IAAC,UAAU,CAAC,EAAE,uBAAuB,CAAA;CAAE,GACrF;IAAE,MAAM,EAAE,OAAO,CAAC;IAAC,KAAK,EAAE,KAAK,CAAA;CAAE,CAAA;AAErC,0EAA0E;AAC1E,wBAAgB,yBAAyB,CAAC,GAAG,EAAE,MAAM,GAAG,yBAAyB,CAgBhF;AAED,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,MAAM,GAAG,aAAa,GAAG,SAAS,CAG1E;AAED,MAAM,MAAM,8BAA8B,GACtC;IACE,MAAM,EAAE,OAAO,CAAA;IACf,UAAU,EAAE,yBAAyB,CAAA;IACrC,UAAU,EAAE,4BAA4B,CAAA;IACxC,OAAO,CAAC,EAAE,sBAAsB,CAAA;CACjC,GACD;IAAE,MAAM,EAAE,SAAS,CAAC;IAAC,UAAU,EAAE,4BAA4B,CAAC;IAAC,OAAO,CAAC,EAAE,sBAAsB,CAAA;CAAE,GACjG;IAAE,MAAM,EAAE,OAAO,CAAC;IAAC,KAAK,EAAE,KAAK,CAAA;CAAE,CAAA;AAErC,+EAA+E;AAC/E,wBAAgB,8BAA8B,CAAC,QAAQ,EAAE,MAAM,GAAG,8BAA8B,CAkB/F;AAED,wBAAgB,mCAAmC,CAAC,eAAe,EAAE,MAAM,GAAG,yBAAyB,CAoBtG;AAED,wBAAgB,6BAA6B,CAAC,eAAe,EAAE,MAAM,GAAG,aAAa,GAAG,SAAS,CAGhG;AAuBD,wBAAgB,kBAAkB,CAChC,GAAG,EAAE,MAAM,EACX,eAAe,EAAE,MAAM,EACvB,YAAY,CAAC,EAAE,MAAM,EACrB,WAAW,CAAC,EAAE,MAAM,EACpB,aAAa,CAAC,EAAE,MAAM,EAAE,EACxB,eAAe,CAAC,EAAE,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC,EACtC,YAAY,CAAC,EAAE,UAAU,EACzB,kBAAkB,CAAC,EAAE,MAAM,EAAE,EAAE,EAC/B,gCAAgC,CAAC,EAAE,MAAM,GAAG,IAAI,EAChD,sBAAsB,CAAC,EAAE,MAAM,EAAE,GAAG,IAAI,EACxC,iBAAiB,CAAC,EAAE,iBAAiB,EACrC,gBAAgB,CAAC,EAAE,iBAAiB,EACpC,kBAAkB,CAAC,EAAE,uBAAuB,GAAG,IAAI,GAClD,uBAAuB,GAAG,KAAK,CAqGjC;AAED,MAAM,WAAW,mBAAmB;IAClC,MAAM,EAAE,MAAM,CAAA;IACd,QAAQ,EAAE,MAAM,CAAA;CACjB;AAED,MAAM,WAAW,oBAAoB;IACnC,UAAU,EAAE,MAAM,CAAA;CACnB;AAWD;;;;GAIG;AACH,wBAAgB,oBAAoB,CAAC,OAAO,EAAE;IAC5C,QAAQ,EAAE,MAAM,CAAA;IAChB,4BAA4B,EAAE,4BAA4B,CAAA;IAC1D,IAAI,CAAC,EAAE,mBAAmB,CAAA;CAC3B,GAAG,oBAAoB,GAAG,KAAK,CAiE/B;AAyCD,qEAAqE;AACrE,wBAAgB,sBAAsB,CAAC,QAAQ,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAEpF;AAED,iFAAiF;AACjF,wBAAgB,oBAAoB,CAAC,QAAQ,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAElF;AAED,MAAM,WAAW,gCAAgC;IAC/C,QAAQ,EAAE,MAAM,CAAA;IAChB,SAAS,EAAE,MAAM,CAAA;IACjB,mBAAmB,EAAE,MAAM,CAAA;IAC3B,qBAAqB,EAAE,MAAM,CAAA;IAC7B,4BAA4B,EAAE,4BAA4B,CAAA;CAC3D;AAED,MAAM,WAAW,yCAAyC;IACxD,GAAG,EAAE,MAAM,CAAA;IACX,eAAe,EAAE,MAAM,CAAA;IACvB,YAAY,EAAE,MAAM,CAAA;IACpB,WAAW,EAAE,MAAM,CAAA;IACnB,aAAa,EAAE,MAAM,EAAE,CAAA;IACvB,eAAe,CAAC,EAAE,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC,CAAA;IACtC,YAAY,CAAC,EAAE,UAAU,CAAA;IACzB,kBAAkB,EAAE,MAAM,EAAE,EAAE,CAAA;IAC9B,gCAAgC,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAChD,sBAAsB,CAAC,EAAE,MAAM,EAAE,GAAG,IAAI,CAAA;IACxC,iBAAiB,CAAC,EAAE,iBAAiB,CAAA;IACrC,gBAAgB,CAAC,EAAE,iBAAiB,CAAA;IACpC,yBAAyB,EAAE,uBAAuB,CAAA;IAClD,iFAAiF;IACjF,kBAAkB,CAAC,EAAE,MAAM,CAAA;IAC3B,4EAA4E;IAC5E,iBAAiB,CAAC,EAAE,MAAM,CAAA;IAC1B,QAAQ,EAAE,gCAAgC,CAAA;CAC3C;AAED,MAAM,WAAW,wCAAwC;IACvD,iBAAiB,EAAE,uBAAuB,CAAA;IAC1C,oBAAoB,EAAE,4BAA4B,CAAA;IAClD,eAAe,EAAE,aAAa,GAAG,IAAI,CAAA;IACrC,kBAAkB,EAAE,yBAAyB,GAAG,IAAI,CAAA;CACrD;AAmCD;;;;GAIG;AACH,wBAAgB,uCAAuC,CACrD,OAAO,EAAE,yCAAyC,GACjD,wCAAwC,GAAG,KAAK,CA4KlD;AAED,MAAM,WAAW,iDAAiD;IAChE,GAAG,EAAE,MAAM,CAAA;IACX,QAAQ,EAAE,MAAM,CAAA;IAChB,yBAAyB,EAAE,uBAAuB,CAAA;IAClD,4BAA4B,EAAE,4BAA4B,CAAA;IAC1D,kBAAkB,CAAC,EAAE,MAAM,CAAA;IAC3B,iBAAiB,CAAC,EAAE,MAAM,CAAA;CAC3B;AAED;;;GAGG;AACH,wBAAgB,0CAA0C,CACxD,OAAO,EAAE,iDAAiD,GACzD,OAAO,CAiDT;AAED,MAAM,WAAW,iDAAiD;IAChE,GAAG,EAAE,MAAM,CAAA;IACX,QAAQ,EAAE,MAAM,CAAA;IAChB,yBAAyB,EAAE,uBAAuB,CAAA;IAClD,4BAA4B,EAAE,4BAA4B,CAAA;IAC1D,eAAe,EAAE,aAAa,GAAG,IAAI,CAAA;IACrC,kBAAkB,EAAE,yBAAyB,GAAG,IAAI,CAAA;IACpD,iBAAiB,CAAC,EAAE,MAAM,CAAA;CAC3B;AAED,MAAM,WAAW,gDAAgD;IAC/D,iBAAiB,EAAE,uBAAuB,CAAA;IAC1C,oBAAoB,EAAE,4BAA4B,CAAA;IAClD,eAAe,EAAE,aAAa,GAAG,IAAI,CAAA;IACrC,kBAAkB,EAAE,yBAAyB,GAAG,IAAI,CAAA;CACrD;AAED,mFAAmF;AACnF,wBAAgB,0CAA0C,CACxD,OAAO,EAAE,iDAAiD,GACzD,gDAAgD,GAAG,KAAK,CAwE1D;AASD;mFACmF;AACnF,wBAAgB,6BAA6B,CAC3C,GAAG,EAAE,MAAM,EACX,uBAAuB,EAAE,MAAM,EAC/B,OAAO,EAAE,iBAAiB,EAC1B,kBAAkB,CAAC,EAAE,uBAAuB,GAC3C,uBAAuB,GAAG,KAAK,CA6BjC;AAED;;;yDAGyD;AACzD,wBAAgB,kBAAkB,CAChC,GAAG,EAAE,MAAM,EACX,kBAAkB,CAAC,EAAE,uBAAuB,GAC3C,OAAO,CAgBT;AAED;;6DAE6D;AAC7D,wBAAgB,qBAAqB,CAAC,GAAG,EAAE,MAAM,GAAG;IAClD,eAAe,EAAE,MAAM,CAAA;IACvB,uBAAuB,CAAC,EAAE,MAAM,CAAA;IAChC,SAAS,EAAE,MAAM,CAAA;IACjB,UAAU,EAAE,MAAM,CAAA;IAClB,YAAY,EAAE,MAAM,CAAA;CACrB,GAAG,SAAS,CAWZ;AAED;uEACuE;AACvE,wBAAgB,kBAAkB,IAAI,KAAK,CAAC;IAC1C,GAAG,EAAE,MAAM,CAAA;IACX,eAAe,EAAE,MAAM,CAAA;IACvB,uBAAuB,CAAC,EAAE,MAAM,CAAA;IAChC,SAAS,EAAE,MAAM,CAAA;IACjB,UAAU,EAAE,MAAM,CAAA;IAClB,YAAY,EAAE,MAAM,CAAA;CACrB,CAAC,CAUD;AAED,wBAAgB,mBAAmB,IAAI,IAAI,CAmB1C"}

package/dist/proxy/settings.d.ts

@@ -7,6 +7,7 @@
  *
  * This is a leaf module — no imports from server.ts or session/.
  */
+import type { PriorityFailbackPolicy } from "./routing";
 export interface MeridianSettings {
     /** Last active profile ID — restored on proxy startup */
     activeProfile?: string;
@@ -16,6 +17,7 @@ export interface MeridianSettings {
     /** Priority-mode pool order (highest priority first). Falls back to
      *  profiles.json order. MERIDIAN_PROFILE_ORDER env var takes precedence. */
     profileOrder?: string[];
+    priorityFailback?: PriorityFailbackPolicy;
 }
 /** Read settings from disk. Returns empty object if file doesn't exist or is invalid. */
 export declare function loadSettings(): MeridianSettings;

package/dist/proxy/settings.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"settings.d.ts","sourceRoot":"","sources":["../../src/proxy/settings.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAyBH,MAAM,WAAW,gBAAgB;IAC/B,yDAAyD;IACzD,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB;8EAC0E;IAC1E,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB;gFAC4E;IAC5E,YAAY,CAAC,EAAE,MAAM,EAAE,CAAA;CACxB;AAED,yFAAyF;AACzF,wBAAgB,YAAY,IAAI,gBAAgB,CAQ/C;AAED,4FAA4F;AAC5F,wBAAgB,YAAY,CAAC,OAAO,EAAE,OAAO,CAAC,gBAAgB,CAAC,GAAG,IAAI,CAUrE;AAED,iCAAiC;AACjC,wBAAgB,UAAU,CAAC,CAAC,SAAS,MAAM,gBAAgB,EAAE,GAAG,EAAE,CAAC,GAAG,gBAAgB,CAAC,CAAC,CAAC,CAExF;AAED,6CAA6C;AAC7C,wBAAgB,UAAU,CAAC,CAAC,SAAS,MAAM,gBAAgB,EAAE,GAAG,EAAE,CAAC,EAAE,KAAK,EAAE,gBAAgB,CAAC,CAAC,CAAC,GAAG,IAAI,CAErG"}
+{"version":3,"file":"settings.d.ts","sourceRoot":"","sources":["../../src/proxy/settings.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAKH,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,WAAW,CAAA;AAqBvD,MAAM,WAAW,gBAAgB;IAC/B,yDAAyD;IACzD,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB;8EAC0E;IAC1E,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB;gFAC4E;IAC5E,YAAY,CAAC,EAAE,MAAM,EAAE,CAAA;IACvB,gBAAgB,CAAC,EAAE,sBAAsB,CAAA;CAC1C;AAED,yFAAyF;AACzF,wBAAgB,YAAY,IAAI,gBAAgB,CAQ/C;AAED,4FAA4F;AAC5F,wBAAgB,YAAY,CAAC,OAAO,EAAE,OAAO,CAAC,gBAAgB,CAAC,GAAG,IAAI,CAUrE;AAED,iCAAiC;AACjC,wBAAgB,UAAU,CAAC,CAAC,SAAS,MAAM,gBAAgB,EAAE,GAAG,EAAE,CAAC,GAAG,gBAAgB,CAAC,CAAC,CAAC,CAExF;AAED,6CAA6C;AAC7C,wBAAgB,UAAU,CAAC,CAAC,SAAS,MAAM,gBAAgB,EAAE,GAAG,EAAE,CAAC,EAAE,KAAK,EAAE,gBAAgB,CAAC,CAAC,CAAC,GAAG,IAAI,CAErG"}

package/dist/proxy/setup.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"setup.d.ts","sourceRoot":"","sources":["../../src/proxy/setup.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAUH;;;;GAIG;AACH,qBAAa,sBAAuB,SAAQ,KAAK;aACnB,UAAU,EAAE,MAAM;gBAAlB,UAAU,EAAE,MAAM;CAI/C;AAED,qBAAa,oBAAqB,SAAQ,KAAK;aACjB,YAAY,EAAE,MAAM;gBAApB,YAAY,EAAE,MAAM;CAIjD;AAED,qBAAa,4BAA6B,SAAQ,KAAK;aAEnC,UAAU,EAAE,MAAM;aAClB,WAAW,EAAE,MAAM;gBADnB,UAAU,EAAE,MAAM,EAClB,WAAW,EAAE,MAAM;CAKtC;AA+BD,wBAAgB,sBAAsB,IAAI,MAAM,CAK/C;AASD;;;GAGG;AACH,wBAAgB,cAAc,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAGtD;AAED,MAAM,MAAM,kBAAkB,GAAG,IAAI,GAAG,IAAI,CAAA;AAE5C,MAAM,WAAW,iBAAiB;IAChC,UAAU,EAAE,kBAAkB,CAAA;IAC9B,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,OAAO,CAAC,EAAE,MAAM,CAAA;CACjB;AAED,eAAO,MAAM,6BAA6B,qBAAqB,CAAA;AAE/D,6EAA6E;AAC7E,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAgBxD;AAED,wEAAwE;AACxE,wBAAgB,uBAAuB,CAAC,MAAM,EAAE,MAAM,GAAG,iBAAiB,GAAG,SAAS,CAYrF;AAED,KAAK,YAAY,GAAG,CAAC,OAAO,EAAE,MAAM,KAAK,MAAM,GAAG,SAAS,CAAA;AAE3D;;;;GAIG;AACH,wBAAgB,wBAAwB,CACtC,QAAQ,GAAE,SAAS,MAAM,EAEI,EAC7B,KAAK,GAAE,YASN,GACA,iBAAiB,CAQnB;AAED,wBAAgB,uBAAuB,CAAC,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,kBAAkB,GAAG,MAAM,CAE/F;AA4BD;;;;GAIG;AACH,wBAAgB,qBAAqB,CAAC,UAAU,CAAC,EAAE,MAAM,EAAE,kBAAkB,CAAC,EAAE,MAAM,GAAG,OAAO,CAgB/F;AAaD,sDAAsD;AACtD,wBAAgB,uBAAuB,IAAI,IAAI,CAE9C;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AACH,wBAAgB,6BAA6B,CAAC,KAAK,EAAE;IACnD,SAAS,EAAE,MAAM,GAAG,SAAS,CAAA;IAC7B,mEAAmE;IACnE,eAAe,EAAE,MAAM,GAAG,SAAS,CAAA;IACnC,mEAAmE;IACnE,SAAS,EAAE,MAAM,GAAG,SAAS,CAAA;CAC9B,GAAG,MAAM,GAAG,SAAS,CAkBrB;AAMD,MAAM,WAAW,WAAW;IAC1B,UAAU,EAAE,MAAM,CAAA;IAClB,UAAU,EAAE,MAAM,CAAA;IAClB,iBAAiB,EAAE,OAAO,CAAA;IAC1B,YAAY,EAAE,MAAM,EAAE,CAAA;IACtB,OAAO,EAAE,OAAO,CAAA;CACjB;AAED;;;;;;;GAOG;AACH,wBAAgB,QAAQ,CACtB,UAAU,EAAE,MAAM,EAClB,UAAU,CAAC,EAAE,MAAM,EACnB,UAAU,GAAE,kBAAyB,GACpC,WAAW,CA2Eb"}
+{"version":3,"file":"setup.d.ts","sourceRoot":"","sources":["../../src/proxy/setup.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAWH;;;;GAIG;AACH,qBAAa,sBAAuB,SAAQ,KAAK;aACnB,UAAU,EAAE,MAAM;gBAAlB,UAAU,EAAE,MAAM;CAI/C;AAED,qBAAa,oBAAqB,SAAQ,KAAK;aACjB,YAAY,EAAE,MAAM;gBAApB,YAAY,EAAE,MAAM;CAIjD;AAED,qBAAa,4BAA6B,SAAQ,KAAK;aAEnC,UAAU,EAAE,MAAM;aAClB,WAAW,EAAE,MAAM;gBADnB,UAAU,EAAE,MAAM,EAClB,WAAW,EAAE,MAAM;CAKtC;AA+BD,wBAAgB,sBAAsB,IAAI,MAAM,CAK/C;AASD;;;GAGG;AACH,wBAAgB,cAAc,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAGtD;AAED,MAAM,MAAM,kBAAkB,GAAG,IAAI,GAAG,IAAI,CAAA;AAE5C,MAAM,WAAW,iBAAiB;IAChC,UAAU,EAAE,kBAAkB,CAAA;IAC9B,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,OAAO,CAAC,EAAE,MAAM,CAAA;CACjB;AAED,eAAO,MAAM,6BAA6B,qBAAqB,CAAA;AAE/D,6EAA6E;AAC7E,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAgBxD;AAED,wEAAwE;AACxE,wBAAgB,uBAAuB,CAAC,MAAM,EAAE,MAAM,GAAG,iBAAiB,GAAG,SAAS,CAYrF;AAED,KAAK,YAAY,GAAG,CAAC,OAAO,EAAE,MAAM,KAAK,MAAM,GAAG,SAAS,CAAA;AAE3D;;;;GAIG;AACH,wBAAgB,wBAAwB,CACtC,QAAQ,GAAE,SAAS,MAAM,EAEI,EAC7B,KAAK,GAAE,YASN,GACA,iBAAiB,CAQnB;AAED,wBAAgB,uBAAuB,CAAC,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,kBAAkB,GAAG,MAAM,CAE/F;AA4BD;;;;GAIG;AACH,wBAAgB,qBAAqB,CAAC,UAAU,CAAC,EAAE,MAAM,EAAE,kBAAkB,CAAC,EAAE,MAAM,GAAG,OAAO,CAgB/F;AAaD,sDAAsD;AACtD,wBAAgB,uBAAuB,IAAI,IAAI,CAE9C;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AACH,wBAAgB,6BAA6B,CAAC,KAAK,EAAE;IACnD,SAAS,EAAE,MAAM,GAAG,SAAS,CAAA;IAC7B,mEAAmE;IACnE,eAAe,EAAE,MAAM,GAAG,SAAS,CAAA;IACnC,mEAAmE;IACnE,SAAS,EAAE,MAAM,GAAG,SAAS,CAAA;CAC9B,GAAG,MAAM,GAAG,SAAS,CAkBrB;AAMD,MAAM,WAAW,WAAW;IAC1B,UAAU,EAAE,MAAM,CAAA;IAClB,UAAU,EAAE,MAAM,CAAA;IAClB,iBAAiB,EAAE,OAAO,CAAA;IAC1B,YAAY,EAAE,MAAM,EAAE,CAAA;IACtB,OAAO,EAAE,OAAO,CAAA;CACjB;AAED;;;;;;;GAOG;AACH,wBAAgB,QAAQ,CACtB,UAAU,EAAE,MAAM,EAClB,UAAU,CAAC,EAAE,MAAM,EACnB,UAAU,GAAE,kBAAyB,GACpC,WAAW,CAiFb"}

package/dist/server.js

@@ -11,14 +11,14 @@ import {
   runObserveHook,
   runTransformHook,
   startProxyServer
-} from "./cli-4ghkaajs.js";
-import"./cli-m0p2bc8v.js";
+} from "./cli-7cts44b5.js";
+import"./cli-pdpry6q0.js";
 import"./cli-sry5aqdj.js";
 import"./cli-8yp89fan.js";
 import"./cli-0ed6j0vk.js";
 import"./cli-khhjyk04.js";
 import"./cli-vj9cv18n.js";
-import"./cli-pbvm9kc2.js";
+import"./cli-n8t34zmq.js";
 import"./cli-p9swy5t3.js";
 export {
   startProxyServer,

package/dist/{setup-4v3zg3c0.js → setup-8fwgwhqh.js}

@@ -13,7 +13,7 @@ import {
   notePluginlessOpenCodeRequest,
   pluginPathForGeneration,
   runSetup
-} from "./cli-pbvm9kc2.js";
+} from "./cli-n8t34zmq.js";
 import"./cli-p9swy5t3.js";
 export {
   runSetup,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@rynfar/meridian",
-  "version": "1.64.0",
+  "version": "1.65.0",
   "description": "Local Anthropic API powered by your Claude Max subscription. One subscription, every agent.",
   "type": "module",
   "main": "./dist/server.js",
@@ -25,7 +25,7 @@
     "postbuild": "node scripts/fix-bun-exports.mjs && node --check dist/cli.js && node --check dist/server.js && node --check dist/meridian-v2.js && node -e \"if(!require('fs').existsSync('dist/proxy/server.d.ts'))process.exit(1)\"",
     "postinstall": "node -e \"try{require('child_process').spawnSync(process.execPath,[require.resolve('@anthropic-ai/claude-code/install.cjs')],{stdio:'inherit'})}catch(e){console.error('[meridian] claude-code postinstall skipped:',e.message)}\"",
     "prepublishOnly": "bun run build",
-    "test": "bun test --path-ignore-patterns '**/*session-store*' --path-ignore-patterns '**/*proxy-async-ops*' --path-ignore-patterns '**/*models-auth-status*' --path-ignore-patterns '**/*proxy-context-usage-store*' --path-ignore-patterns '**/*proxy-passthrough-thinking*' --path-ignore-patterns '**/*proxy-thinking-setting*' --path-ignore-patterns '**/*session-recovery*' --path-ignore-patterns '**/*models.test*' --path-ignore-patterns '**/*proxy-health-build*' && bun test src/__tests__/proxy-async-ops.test.ts && bun test src/__tests__/proxy-session-store.test.ts && bun test src/__tests__/session-store-pruning.test.ts && bun test src/__tests__/proxy-session-store-locking.test.ts && bun test src/__tests__/proxy-context-usage-store.test.ts && bun test src/__tests__/models-auth-status.test.ts && bun test src/__tests__/proxy-passthrough-thinking.test.ts && bun test src/__tests__/proxy-session-recovery.test.ts && bun test src/__tests__/proxy-thinking-setting.test.ts && bun test src/__tests__/models.test.ts && bun test src/__tests__/proxy-health-build.test.ts",
+    "test": "bun test --path-ignore-patterns '**/*session-store*' --path-ignore-patterns '**/*priority-routing-integration*' --path-ignore-patterns '**/*proxy-async-ops*' --path-ignore-patterns '**/*models-auth-status*' --path-ignore-patterns '**/*proxy-context-usage-store*' --path-ignore-patterns '**/*proxy-passthrough-thinking*' --path-ignore-patterns '**/*proxy-thinking-setting*' --path-ignore-patterns '**/*session-recovery*' --path-ignore-patterns '**/*models.test*' --path-ignore-patterns '**/*proxy-health-build*' && bun test src/__tests__/proxy-async-ops.test.ts && bun test src/__tests__/proxy-session-store.test.ts && bun test src/__tests__/session-store-pruning.test.ts && bun test src/__tests__/proxy-session-store-locking.test.ts && bun test src/__tests__/proxy-context-usage-store.test.ts && bun test src/__tests__/models-auth-status.test.ts && bun test src/__tests__/proxy-passthrough-thinking.test.ts && bun test src/__tests__/proxy-session-recovery.test.ts && bun test src/__tests__/proxy-thinking-setting.test.ts && bun test src/__tests__/models.test.ts && bun test src/__tests__/proxy-health-build.test.ts && bun test src/__tests__/priority-routing-integration.test.ts",
     "nix:lock": "bun2nix -o bun.nix",
     "typecheck": "tsc --noEmit",
     "proxy:direct": "bun run ./bin/cli.ts"

package/plugin/meridian-v2.ts

@@ -16,6 +16,14 @@
  */
 
 import * as Plugin from "@opencode-ai/plugin/promise/plugin"
+import {
+  PRIORITY_ATTESTATION_HEADER,
+  createPriorityAttestation,
+  deleteHeader,
+  getHeader,
+  setHeader,
+  type MutableHeaders,
+} from "./priority-attestation"
 
 /** Exact V2 host used to compile and validate this beta-only integration. */
 export const SUPPORTED_OPENCODE_V2_VERSION = "0.0.0-beta-18314"
@@ -35,6 +43,7 @@ const MERIDIAN_CONTROL_HEADERS = [
   "x-meridian-source",
   "x-opencode-agent-name",
   "x-opencode-agent-mode",
+  PRIORITY_ATTESTATION_HEADER,
 ] as const
 
 export interface AgentTraits {
@@ -57,25 +66,6 @@ export function fallbackAgentTraits(agent: string): AgentTraits {
   return BUILTIN_AGENT_TRAITS[agent] ?? { mode: "primary", hidden: false }
 }
 
-type MutableHeaders = Record<string, string> | Headers
-
-function deleteHeader(headers: MutableHeaders, name: string): void {
-  if (headers instanceof Headers) {
-    headers.delete(name)
-    return
-  }
-  const lower = name.toLowerCase()
-  for (const key of Object.keys(headers)) {
-    if (key.toLowerCase() === lower) delete headers[key]
-  }
-}
-
-function setHeader(headers: MutableHeaders, name: string, value: string): void {
-  deleteHeader(headers, name)
-  if (headers instanceof Headers) headers.set(name, value)
-  else headers[name] = value
-}
-
 function safeAgentName(agent: string): string {
   return agent.replace(/[^\x20-\x7E]/g, "").trim() || "unknown"
 }
@@ -123,55 +113,210 @@ export function applyMeridianV2Headers(
   setHeader(headers, "x-opencode-agent-mode", internalMode)
 }
 
+const INTERNAL_ROUTING_AGENT_IDS = new Set(["title", "summary", "compaction"])
+const AGENT_CACHE_MAX = 256
+const AGENT_CACHE_TTL_MS = 5_000
+const LOOKUP_TIMEOUT_MS = 250
+const MAX_CONTEXT_ENTRIES = 2_048
+const SAFE_ID_PATTERN = /^[A-Za-z0-9._:-]{1,128}$/
+
+type ExactAgentMode = "primary" | "subagent" | "all"
+type ResolvedAgentMetadata = {
+  readonly traits: AgentTraits
+  readonly exactMode: ExactAgentMode | undefined
+  readonly authoritative: boolean
+}
+
+function isRecord(value: unknown): value is Record<string, unknown> {
+  return typeof value === "object" && value !== null && !Array.isArray(value)
+}
+
+async function withTimeout<T>(pending: Promise<T>, timeoutMs: number): Promise<T | undefined> {
+  let timer: ReturnType<typeof setTimeout> | undefined
+  const timedOut = new Promise<undefined>((resolve) => {
+    timer = setTimeout(() => resolve(undefined), timeoutMs)
+    timer.unref?.()
+  })
+  try {
+    return await Promise.race([pending, timedOut])
+  } finally {
+    if (timer) clearTimeout(timer)
+  }
+}
+
+export function isRootV2Session(value: unknown, sessionID: string): boolean {
+  return isRecord(value)
+    && value.id === sessionID
+    && value.parentID === undefined
+    && value.fork === undefined
+}
+
+/**
+ * Find the exact host message ID that initiated the active model loop.
+ * Assistant/tool steps and selection records belong to the current loop and
+ * are skipped. A synthetic/compaction/shell/skill/system or unknown initiator
+ * fails closed instead of reusing an older human ID.
+ */
+type V2HumanTurn = { readonly id: string; readonly issuedAt: number }
+
+export function findLatestV2HumanTurn(value: unknown): V2HumanTurn | undefined {
+  if (!Array.isArray(value) || value.length === 0 || value.length > MAX_CONTEXT_ENTRIES) return undefined
+  for (let index = value.length - 1; index >= 0; index -= 1) {
+    const message = value[index]
+    if (!isRecord(message) || typeof message.type !== "string") return undefined
+    if (
+      message.type === "assistant"
+      || message.type === "agent-switched"
+      || message.type === "model-switched"
+      || message.type === "location-switched"
+    ) {
+      continue
+    }
+    if (message.type !== "user" || typeof message.id !== "string" || !SAFE_ID_PATTERN.test(message.id)) {
+      return undefined
+    }
+    const time = isRecord(message.time) ? message.time : undefined
+    const createdAt = time?.created
+    if (typeof createdAt !== "number" || !Number.isSafeInteger(createdAt) || createdAt < 0) return undefined
+    return { id: message.id, issuedAt: Math.floor(createdAt / 1000) }
+  }
+  return undefined
+}
+
+export function findLatestV2HumanMessageId(value: unknown): string | undefined {
+  return findLatestV2HumanTurn(value)?.id
+}
+
 const MeridianV2Plugin = Plugin.define({
   id: "meridian",
   setup: async (context) => {
     const traitsByAgent = new Map<string, {
       expiresAt: number
-      pending: Promise<AgentTraits>
+      request: symbol
+      pending: Promise<ResolvedAgentMetadata>
     }>()
     const registered: Array<{ dispose: () => Promise<void> }> = []
 
-    const resolveAgentTraits = (agent: string): Promise<AgentTraits> => {
+    const resolveAgentTraits = (agent: string, refresh = false): Promise<ResolvedAgentMetadata> => {
       const cached = traitsByAgent.get(agent)
-      if (cached && cached.expiresAt > Date.now()) return cached.pending
-
-      const pending = Promise.resolve()
-        .then(() => context.agent.get({ agentID: agent }))
-        .then(({ data }) => ({
-          mode: data.mode === "subagent" ? "subagent" as const : "primary" as const,
-          hidden: data.hidden,
-        }))
-        .catch(() => {
-          // A transient lookup failure must not permanently promote a custom
-          // child to primary. Retry at the final HTTP boundary or next turn.
-          if (traitsByAgent.get(agent)?.pending === pending) traitsByAgent.delete(agent)
-          return fallbackAgentTraits(agent)
-        })
-      traitsByAgent.set(agent, { expiresAt: Date.now() + 5_000, pending })
+      if (!refresh && cached && cached.expiresAt > Date.now()) return cached.pending
+      if (refresh) traitsByAgent.delete(agent)
+
+      const request = Symbol(agent)
+      const pending = (async (): Promise<ResolvedAgentMetadata> => {
+        const controller = new AbortController()
+        try {
+          const result = await withTimeout(
+            context.agent.get({ agentID: agent }, { signal: controller.signal }),
+            LOOKUP_TIMEOUT_MS,
+          )
+          const data = result?.data
+          if (
+            !data
+            || (data.mode !== "primary" && data.mode !== "subagent" && data.mode !== "all")
+            || typeof data.hidden !== "boolean"
+          ) {
+            if (traitsByAgent.get(agent)?.request === request) traitsByAgent.delete(agent)
+            return { traits: fallbackAgentTraits(agent), exactMode: undefined, authoritative: false }
+          }
+          return {
+            traits: {
+              mode: data.mode === "subagent" ? "subagent" : "primary",
+              hidden: data.hidden,
+            },
+            exactMode: data.mode,
+            authoritative: true,
+          }
+        } catch {
+          // Retry a transient failure at the final HTTP boundary or next turn.
+          if (traitsByAgent.get(agent)?.request === request) traitsByAgent.delete(agent)
+          return { traits: fallbackAgentTraits(agent), exactMode: undefined, authoritative: false }
+        } finally {
+          controller.abort()
+        }
+      })()
+      traitsByAgent.delete(agent)
+      traitsByAgent.set(agent, { request, expiresAt: Date.now() + AGENT_CACHE_TTL_MS, pending })
+      while (traitsByAgent.size > AGENT_CACHE_MAX) {
+        const oldest = traitsByAgent.keys().next().value
+        if (oldest === undefined) break
+        traitsByAgent.delete(oldest)
+      }
       return pending
     }
 
     const apply = async (
       input: { sessionID: string; agent: string; model: { providerID: string } },
       headers: MutableHeaders,
-    ): Promise<void> => {
-      if (!MERIDIAN_PROVIDERS.has(String(input.model.providerID))) return
+      refreshTraits = false,
+    ): Promise<ResolvedAgentMetadata | undefined> => {
+      if (!MERIDIAN_PROVIDERS.has(String(input.model.providerID))) return undefined
       const agent = String(input.agent)
+      const metadata = await resolveAgentTraits(agent, refreshTraits)
       applyMeridianV2Headers(headers, {
         sessionID: String(input.sessionID),
         agent,
-        traits: await resolveAgentTraits(agent),
+        traits: metadata.traits,
       })
+      return metadata
+    }
+
+    const resolveHumanTurn = async (
+      input: { sessionID: string; agent: string },
+      headers: MutableHeaders,
+      metadata: ResolvedAgentMetadata,
+    ): Promise<V2HumanTurn | undefined> => {
+      const sessionID = String(input.sessionID)
+      const agent = String(input.agent)
+      if (
+        !metadata.authoritative
+        || metadata.exactMode !== "primary"
+        || metadata.traits.hidden
+        || INTERNAL_ROUTING_AGENT_IDS.has(agent)
+        || safeAgentName(agent) !== agent
+        || getHeader(headers, "x-meridian-profile") !== undefined
+      ) {
+        return undefined
+      }
+
+      const controller = new AbortController()
+      try {
+        const result = await withTimeout(Promise.all([
+          context.session.get({ sessionID }, { signal: controller.signal }),
+          context.session.context({ sessionID }, { signal: controller.signal }),
+        ]), LOOKUP_TIMEOUT_MS)
+        if (!result || !isRootV2Session(result[0], sessionID)) return undefined
+        return findLatestV2HumanTurn(result[1])
+      } catch {
+        return undefined
+      } finally {
+        controller.abort()
+      }
     }
 
     try {
       for (const providerID of MERIDIAN_PROVIDERS) {
         registered.push(await context.session.hook("model.request", async (input) => {
+          // Apply lineage/tier identity early, but never emit the routing
+          // attestation before the final HTTP boundary.
           await apply(input, input.headers)
         }, { providerID }))
         registered.push(await context.session.hook("http.request", async (input) => {
-          await apply(input, input.request.headers)
+          // Re-read exact visibility/mode at the final boundary. The model-hook
+          // cache is capability-only and must never authorize a stale visible
+          // primary after a config reload.
+          const metadata = await apply(input, input.request.headers, true)
+          if (!metadata) return
+          const humanTurn = await resolveHumanTurn(input, input.request.headers, metadata)
+          if (!humanTurn) return
+          const token = createPriorityAttestation({
+            generation: "oc2b18314",
+            sessionId: String(input.sessionID),
+            agentId: String(input.agent),
+            humanMessageId: humanTurn.id,
+            issuedAt: humanTurn.issuedAt,
+          })
+          if (token) setHeader(input.request.headers, PRIORITY_ATTESTATION_HEADER, token)
         }, { providerID }))
       }
     } catch (error) {