@rynfar/meridian 1.66.0 → 1.68.0

package/dist/{cli-m9wqgk1q.js → cli-9e5cxp89.js}

@@ -50,7 +50,7 @@ import { promisify } from "util";
 var exec = promisify(execCallback);
 var execFile = promisify(execFileCallback);
 var STUB_SIZE_THRESHOLD = 4096;
-var CANONICAL_FABLE_MODEL = "claude-fable-5";
+var CANONICAL_FABLE_MODEL = "claude-fable-5-1";
 var CANONICAL_OPUS_MODEL = "claude-opus-5";
 var CANONICAL_SONNET_MODEL = "claude-sonnet-5";
 var CANONICAL_HAIKU_MODEL = "claude-haiku-4-5";

package/dist/{cli-n8t34zmq.js → cli-sh8bzdwe.js}

@@ -637,7 +637,7 @@ var init_priorityAttestation = __esm(() => {
 
 // src/proxy/setup.ts
 var import_cross_spawn = __toESM(require_cross_spawn(), 1);
-import { existsSync, mkdirSync as mkdirSync2, readFileSync as readFileSync2, writeFileSync as writeFileSync2 } from "fs";
+import { existsSync, mkdirSync as mkdirSync2, readFileSync as readFileSync2, statSync, writeFileSync as writeFileSync2 } from "fs";
 import { homedir as homedir2, platform as platform2 } from "os";
 import { basename, dirname as dirname2, join as join2 } from "path";
 import { fileURLToPath } from "url";
@@ -774,18 +774,34 @@ function findPluginPath(fromUrl) {
   const dir = dirname2(fileURLToPath(fromUrl));
   return join2(dir, "..", "plugin", "meridian.ts");
 }
-var SUPPORTED_OPENCODE_V2_VERSION = "0.0.0-beta-18314";
+var SUPPORTED_OPENCODE_V2_VERSIONS = new Set([
+  "0.0.0-beta-18314",
+  "0.0.0-beta-18866"
+]);
+function hasV2PluginEntry(path) {
+  try {
+    if (!statSync(join2(path, "index.js"), { throwIfNoEntry: false })?.isFile())
+      return false;
+    const manifest = JSON.parse(readFileSync2(join2(path, "package.json"), "utf8"));
+    if (!manifest || typeof manifest !== "object" || Array.isArray(manifest))
+      return false;
+    const fields = manifest;
+    return fields.type === "module" && fields.main === "./index.js";
+  } catch {
+    return false;
+  }
+}
 function findV2PluginPath(fromUrl) {
   const entryPath = fileURLToPath(fromUrl);
   const dir = dirname2(entryPath);
   if (entryPath.endsWith(".ts")) {
-    const sourcePlugin = join2(dir, "..", "plugin", "meridian-v2.ts");
-    if (existsSync(sourcePlugin))
+    const sourcePlugin = join2(dir, "..", "plugin", "meridian-v2");
+    if (hasV2PluginEntry(sourcePlugin))
       return sourcePlugin;
     throw new MissingV2PluginError(sourcePlugin);
   }
-  const bundledPlugin = join2(dir, "meridian-v2.js");
-  if (existsSync(bundledPlugin))
+  const bundledPlugin = join2(dir, "meridian-v2");
+  if (hasV2PluginEntry(bundledPlugin))
     return bundledPlugin;
   throw new MissingV2PluginError(bundledPlugin);
 }
@@ -840,7 +856,7 @@ function isMeridianEntry(entry) {
   const packageName = pluginEntryPackage(entry);
   if (!packageName)
     return false;
-  return STALE_PATTERNS.some((pattern) => packageName.includes(pattern)) || packageName.includes("meridian.ts") || packageName.includes("meridian-v2.") || packageName.includes("@rynfar/meridian");
+  return STALE_PATTERNS.some((pattern) => packageName.includes(pattern)) || packageName.includes("meridian.ts") || packageName.includes("meridian-v2.") || packageName.endsWith("/meridian-v2") || packageName.includes("@rynfar/meridian");
 }
 function checkPluginConfigured(configPath, expectedPluginPath) {
   const selectedPath = configPath ?? findOpencodeConfigPath();
@@ -936,4 +952,4 @@ function runSetup(pluginPath, configPath, generation = "v1") {
   return { configPath: path, pluginPath, alreadyConfigured, removedStale, created: false };
 }
 
-export { LRUMap, PRIORITY_ATTESTATION_HEADER, verifyPriorityAttestation, init_priorityAttestation, UnparseableConfigError, MissingV2PluginError, DuplicateMeridianConfigError, findOpencodeConfigPath, findPluginPath, SUPPORTED_OPENCODE_V2_VERSION, findV2PluginPath, classifyOpenCodeVersion, detectOpenCodeGeneration, pluginPathForGeneration, checkPluginConfigured, clearPluginlessWarnings, notePluginlessOpenCodeRequest, runSetup };
+export { LRUMap, PRIORITY_ATTESTATION_HEADER, verifyPriorityAttestation, init_priorityAttestation, UnparseableConfigError, MissingV2PluginError, DuplicateMeridianConfigError, findOpencodeConfigPath, findPluginPath, SUPPORTED_OPENCODE_V2_VERSIONS, findV2PluginPath, classifyOpenCodeVersion, detectOpenCodeGeneration, pluginPathForGeneration, checkPluginConfigured, clearPluginlessWarnings, notePluginlessOpenCodeRequest, runSetup };

package/dist/cli.js

@@ -1,16 +1,16 @@
 #!/usr/bin/env node
 import {
   startProxyServer
-} from "./cli-nzvbaqjp.js";
+} from "./cli-0zhb8ss4.js";
 import"./cli-5jxyma6z.js";
 import"./cli-sry5aqdj.js";
 import"./cli-8yp89fan.js";
 import {
   resolveClaudeExecutableAsync
-} from "./cli-m9wqgk1q.js";
+} from "./cli-9e5cxp89.js";
 import"./cli-khhjyk04.js";
 import"./cli-vj9cv18n.js";
-import"./cli-n8t34zmq.js";
+import"./cli-sh8bzdwe.js";
 import {
   __require
 } from "./cli-p9swy5t3.js";
@@ -60,7 +60,7 @@ See https://github.com/rynfar/meridian for full documentation.`);
   process.exit(0);
 }
 if (args[0] === "profile") {
-  const { profileAdd, profileAddOauthToken, profileList, profileRemove, profileSwitch, profileLogin, profileHelp } = await import("./profileCli-qhcr87tm.js");
+  const { profileAdd, profileAddOauthToken, profileList, profileRemove, profileSwitch, profileLogin, profileHelp } = await import("./profileCli-1eecbmgk.js");
   const subcommand = args[1];
   const profileId = args[2];
   const headless = args.includes("--headless");
@@ -91,9 +91,9 @@ if (args[0] === "setup") {
     MissingV2PluginError,
     pluginPathForGeneration,
     runSetup,
-    SUPPORTED_OPENCODE_V2_VERSION,
+    SUPPORTED_OPENCODE_V2_VERSIONS,
     UnparseableConfigError
-  } = await import("./setup-8fwgwhqh.js");
+  } = await import("./setup-knvctar4.js");
   const forceV1 = args.includes("--v1");
   const forceV2 = args.includes("--v2");
   if (forceV1 && forceV2) {
@@ -117,9 +117,9 @@ if (args[0] === "setup") {
     console.error("Could not find an OpenCode V2 beta. Install the pinned beta or pass --opencode-bin <path>.");
     process.exit(1);
   }
-  if (detected.generation === "v2" && detected.version !== SUPPORTED_OPENCODE_V2_VERSION) {
+  if (detected.generation === "v2" && !SUPPORTED_OPENCODE_V2_VERSIONS.has(detected.version ?? "")) {
     console.error(`OpenCode V2 ${detected.version ?? "unknown"} is not supported by this Meridian build.`);
-    console.error(`Install @opencode-ai/cli@${SUPPORTED_OPENCODE_V2_VERSION}, then re-run meridian setup --v2.`);
+    console.error(`Install a supported OpenCode beta (${[...SUPPORTED_OPENCODE_V2_VERSIONS].join(", ")}), then re-run meridian setup --v2.`);
     process.exit(1);
   }
   let pluginPath;
@@ -205,7 +205,7 @@ async function runCli(start = startProxyServer, runAuthCheck = async () => {
   return execFile(claudePath, ["auth", "status"], { timeout: 5000 });
 }) {
   try {
-    const { findOpencodeConfigPath, checkPluginConfigured, findPluginPath } = await import("./setup-8fwgwhqh.js");
+    const { findOpencodeConfigPath, checkPluginConfigured, findPluginPath } = await import("./setup-knvctar4.js");
     const configPath = findOpencodeConfigPath();
     const { existsSync } = await import("fs");
     if (existsSync(configPath) && !checkPluginConfigured(configPath)) {

package/dist/meridian-v2/index.js

@@ -0,0 +1,334 @@
+// node_modules/@opencode-ai/plugin/dist/promise/plugin.js
+function define(plugin) {
+  return plugin;
+}
+
+// plugin/priority-attestation.ts
+import { createHash, createHmac } from "node:crypto";
+import { readFileSync } from "node:fs";
+import { homedir } from "node:os";
+import { join } from "node:path";
+var PRIORITY_ATTESTATION_HEADER = "x-meridian-opencode-turn";
+var PRIORITY_ATTESTATION_KEY_ENV = "MERIDIAN_OPENCODE_ATTESTATION_KEY";
+var PRIORITY_ATTESTATION_KEY_FILE = "opencode-turn.key";
+var TOKEN_PREFIX = "v1";
+var MAC_DOMAIN = "meridian.opencode.turn.v1\x00";
+var TURN_DOMAIN = "meridian.opencode.human.v1\x00";
+var MAX_HEADER_BYTES = 768;
+var MAX_PAYLOAD_BYTES = 384;
+var TURN_DIGEST_PATTERN = /^[A-Za-z0-9_-]{43}$/;
+var SAFE_ID_PATTERN = /^[A-Za-z0-9._:-]{1,128}$/;
+function configDirectory() {
+  return process.env.MERIDIAN_CONFIG_DIR ?? join(homedir(), ".config", "meridian");
+}
+function priorityAttestationKeyPath() {
+  return join(configDirectory(), PRIORITY_ATTESTATION_KEY_FILE);
+}
+function isSafeAgentId(value) {
+  return value.length >= 1 && value.length <= 64 && value.trim() === value && /^[\x20-\x7E]+$/.test(value);
+}
+function decodeCanonicalBase64Url(raw) {
+  if (!/^[A-Za-z0-9_-]+$/.test(raw))
+    return;
+  const decoded = Buffer.from(raw, "base64url");
+  return decoded.toString("base64url") === raw ? decoded : undefined;
+}
+function decodePriorityAttestationKey(raw) {
+  if (raw === undefined)
+    return;
+  const normalized = raw.trim();
+  const decoded = decodeCanonicalBase64Url(normalized);
+  return decoded?.length === 32 ? decoded : undefined;
+}
+function loadPriorityAttestationKey() {
+  const fromEnv = process.env[PRIORITY_ATTESTATION_KEY_ENV];
+  if (fromEnv !== undefined)
+    return decodePriorityAttestationKey(fromEnv);
+  try {
+    return decodePriorityAttestationKey(readFileSync(priorityAttestationKeyPath(), "utf8"));
+  } catch {
+    return;
+  }
+}
+function computePriorityTurnDigest(input) {
+  if (!SAFE_ID_PATTERN.test(input.sessionId) || !SAFE_ID_PATTERN.test(input.humanMessageId)) {
+    return;
+  }
+  return createHash("sha256").update(TURN_DOMAIN).update(input.generation).update("\x00").update(input.sessionId).update("\x00").update(input.humanMessageId).digest("base64url");
+}
+function createPriorityAttestation(input, key = loadPriorityAttestationKey() ?? Buffer.alloc(0)) {
+  if (key.length !== 32)
+    return;
+  if (!SAFE_ID_PATTERN.test(input.sessionId) || !isSafeAgentId(input.agentId))
+    return;
+  const turnDigest = computePriorityTurnDigest(input);
+  if (!turnDigest || !TURN_DIGEST_PATTERN.test(turnDigest))
+    return;
+  const issuedAt = input.issuedAt;
+  if (!Number.isSafeInteger(issuedAt) || issuedAt < 0)
+    return;
+  const payload = JSON.stringify({
+    v: 1,
+    g: input.generation,
+    s: input.sessionId,
+    a: input.agentId,
+    t: turnDigest,
+    iat: issuedAt
+  });
+  if (Buffer.byteLength(payload) > MAX_PAYLOAD_BYTES)
+    return;
+  const encodedPayload = Buffer.from(payload).toString("base64url");
+  const mac = createHmac("sha256", key).update(MAC_DOMAIN).update(payload).digest("base64url");
+  const token = `${TOKEN_PREFIX}.${encodedPayload}.${mac}`;
+  return Buffer.byteLength(token) <= MAX_HEADER_BYTES ? token : undefined;
+}
+function deleteHeader(headers, name) {
+  if (headers instanceof Headers) {
+    headers.delete(name);
+    return;
+  }
+  const lower = name.toLowerCase();
+  for (const key of Object.keys(headers)) {
+    if (key.toLowerCase() === lower)
+      delete headers[key];
+  }
+}
+function getHeader(headers, name) {
+  if (headers instanceof Headers)
+    return headers.get(name) ?? undefined;
+  const lower = name.toLowerCase();
+  for (const [key, value] of Object.entries(headers)) {
+    if (key.toLowerCase() === lower)
+      return value;
+  }
+  return;
+}
+function setHeader(headers, name, value) {
+  deleteHeader(headers, name);
+  if (headers instanceof Headers)
+    headers.set(name, value);
+  else
+    headers[name] = value;
+}
+
+// plugin/meridian-v2.ts
+var MERIDIAN_PROVIDERS = new Set(["anthropic", "meridian"]);
+var PARENT_SESSION_ONE_SHOTS = new Set(["title", "summary"]);
+var ATTACHED_COMPACTION_AGENT = "compaction";
+var SESSION_AFFINITY_HEADERS = [
+  "x-opencode-session",
+  "x-session-affinity",
+  "x-session-id",
+  "x-parent-session-id"
+];
+var MERIDIAN_CONTROL_HEADERS = [
+  "x-meridian-source",
+  "x-opencode-agent-name",
+  "x-opencode-agent-mode",
+  PRIORITY_ATTESTATION_HEADER
+];
+var BUILTIN_AGENT_TRAITS = {
+  build: { mode: "primary", hidden: false },
+  plan: { mode: "primary", hidden: false },
+  general: { mode: "subagent", hidden: false },
+  explore: { mode: "subagent", hidden: false },
+  title: { mode: "primary", hidden: true },
+  summary: { mode: "primary", hidden: true },
+  compaction: { mode: "primary", hidden: true }
+};
+function fallbackAgentTraits(agent) {
+  return BUILTIN_AGENT_TRAITS[agent] ?? { mode: "primary", hidden: false };
+}
+function safeAgentName(agent) {
+  return agent.replace(/[^\x20-\x7E]/g, "").trim() || "unknown";
+}
+function shouldDetachFromParentSession(agent, _traits) {
+  return PARENT_SESSION_ONE_SHOTS.has(agent);
+}
+function applyMeridianV2Headers(headers, input) {
+  for (const name2 of SESSION_AFFINITY_HEADERS)
+    deleteHeader(headers, name2);
+  for (const name2 of MERIDIAN_CONTROL_HEADERS)
+    deleteHeader(headers, name2);
+  const name = safeAgentName(input.agent);
+  const detached = shouldDetachFromParentSession(input.agent, input.traits);
+  if (detached) {
+    setHeader(headers, "x-meridian-source", `subagent-${name}`);
+  } else {
+    setHeader(headers, "x-opencode-session", input.sessionID);
+    setHeader(headers, "x-session-affinity", input.sessionID);
+    setHeader(headers, "x-session-id", input.sessionID);
+    if (input.agent === ATTACHED_COMPACTION_AGENT) {
+      setHeader(headers, "x-meridian-source", "subagent-compaction");
+    }
+  }
+  const internalMode = PARENT_SESSION_ONE_SHOTS.has(input.agent) ? "subagent" : input.agent === ATTACHED_COMPACTION_AGENT ? "primary" : input.traits.mode;
+  setHeader(headers, "x-opencode-agent-name", name);
+  setHeader(headers, "x-opencode-agent-mode", internalMode);
+}
+var INTERNAL_ROUTING_AGENT_IDS = new Set(["title", "summary", "compaction"]);
+var AGENT_CACHE_MAX = 256;
+var AGENT_CACHE_TTL_MS = 5000;
+var LOOKUP_TIMEOUT_MS = 250;
+var MAX_CONTEXT_ENTRIES = 2048;
+var SAFE_ID_PATTERN2 = /^[A-Za-z0-9._:-]{1,128}$/;
+function isRecord(value) {
+  return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+async function withTimeout(pending, timeoutMs) {
+  let timer;
+  const timedOut = new Promise((resolve) => {
+    timer = setTimeout(() => resolve(undefined), timeoutMs);
+    timer.unref?.();
+  });
+  try {
+    return await Promise.race([pending, timedOut]);
+  } finally {
+    if (timer)
+      clearTimeout(timer);
+  }
+}
+function isRootV2Session(value, sessionID) {
+  return isRecord(value) && value.id === sessionID && value.parentID === undefined && value.fork === undefined;
+}
+function findLatestV2HumanTurn(value) {
+  if (!Array.isArray(value) || value.length === 0 || value.length > MAX_CONTEXT_ENTRIES)
+    return;
+  for (let index = value.length - 1;index >= 0; index -= 1) {
+    const message = value[index];
+    if (!isRecord(message) || typeof message.type !== "string")
+      return;
+    if (message.type === "assistant" || message.type === "agent-switched" || message.type === "model-switched" || message.type === "location-switched") {
+      continue;
+    }
+    if (message.type !== "user" || typeof message.id !== "string" || !SAFE_ID_PATTERN2.test(message.id)) {
+      return;
+    }
+    const time = isRecord(message.time) ? message.time : undefined;
+    const createdAt = time?.created;
+    if (typeof createdAt !== "number" || !Number.isSafeInteger(createdAt) || createdAt < 0)
+      return;
+    return { id: message.id, issuedAt: Math.floor(createdAt / 1000) };
+  }
+  return;
+}
+var MeridianV2Plugin = define({
+  id: "meridian",
+  setup: async (context) => {
+    const traitsByAgent = new Map;
+    const registered = [];
+    const resolveAgentTraits = (agent, refresh = false) => {
+      const cached = traitsByAgent.get(agent);
+      if (!refresh && cached && cached.expiresAt > Date.now())
+        return cached.pending;
+      if (refresh)
+        traitsByAgent.delete(agent);
+      const request = Symbol(agent);
+      const pending = (async () => {
+        const controller = new AbortController;
+        try {
+          const result = await withTimeout(context.agent.get({ agentID: agent }, { signal: controller.signal }), LOOKUP_TIMEOUT_MS);
+          const data = result?.data;
+          if (!data || data.mode !== "primary" && data.mode !== "subagent" && data.mode !== "all" || typeof data.hidden !== "boolean") {
+            if (traitsByAgent.get(agent)?.request === request)
+              traitsByAgent.delete(agent);
+            return { traits: fallbackAgentTraits(agent), exactMode: undefined, authoritative: false };
+          }
+          return {
+            traits: {
+              mode: data.mode === "subagent" ? "subagent" : "primary",
+              hidden: data.hidden
+            },
+            exactMode: data.mode,
+            authoritative: true
+          };
+        } catch {
+          if (traitsByAgent.get(agent)?.request === request)
+            traitsByAgent.delete(agent);
+          return { traits: fallbackAgentTraits(agent), exactMode: undefined, authoritative: false };
+        } finally {
+          controller.abort();
+        }
+      })();
+      traitsByAgent.delete(agent);
+      traitsByAgent.set(agent, { request, expiresAt: Date.now() + AGENT_CACHE_TTL_MS, pending });
+      while (traitsByAgent.size > AGENT_CACHE_MAX) {
+        const oldest = traitsByAgent.keys().next().value;
+        if (oldest === undefined)
+          break;
+        traitsByAgent.delete(oldest);
+      }
+      return pending;
+    };
+    const apply = async (input, headers, refreshTraits = false) => {
+      if (!MERIDIAN_PROVIDERS.has(String(input.model.providerID)))
+        return;
+      const agent = String(input.agent);
+      const metadata = await resolveAgentTraits(agent, refreshTraits);
+      applyMeridianV2Headers(headers, {
+        sessionID: String(input.sessionID),
+        agent,
+        traits: metadata.traits
+      });
+      return metadata;
+    };
+    const resolveHumanTurn = async (input, headers, metadata) => {
+      const sessionID = String(input.sessionID);
+      const agent = String(input.agent);
+      if (!metadata.authoritative || metadata.exactMode !== "primary" || metadata.traits.hidden || INTERNAL_ROUTING_AGENT_IDS.has(agent) || safeAgentName(agent) !== agent || getHeader(headers, "x-meridian-profile") !== undefined) {
+        return;
+      }
+      const controller = new AbortController;
+      try {
+        const result = await withTimeout(Promise.all([
+          context.session.get({ sessionID }, { signal: controller.signal }),
+          context.session.context({ sessionID }, { signal: controller.signal })
+        ]), LOOKUP_TIMEOUT_MS);
+        if (!result || !isRootV2Session(result[0], sessionID))
+          return;
+        return findLatestV2HumanTurn(result[1]);
+      } catch {
+        return;
+      } finally {
+        controller.abort();
+      }
+    };
+    try {
+      for (const providerID of MERIDIAN_PROVIDERS) {
+        registered.push(await context.session.hook("model.request", async (input) => {
+          await apply(input, input.headers);
+        }, { providerID }));
+        registered.push(await context.session.hook("http.request", async (input) => {
+          const metadata = await apply(input, input.request.headers, true);
+          if (!metadata)
+            return;
+          const humanTurn = await resolveHumanTurn(input, input.request.headers, metadata);
+          if (!humanTurn)
+            return;
+          const token = createPriorityAttestation({
+            generation: "oc2b18314",
+            sessionId: String(input.sessionID),
+            agentId: String(input.agent),
+            humanMessageId: humanTurn.id,
+            issuedAt: humanTurn.issuedAt
+          });
+          if (token)
+            setHeader(input.request.headers, PRIORITY_ATTESTATION_HEADER, token);
+        }, { providerID }));
+      }
+    } catch (error) {
+      await Promise.allSettled(registered.map(({ dispose }) => dispose()));
+      throw error;
+    }
+    return async () => {
+      const results = await Promise.allSettled(registered.map(({ dispose }) => dispose()));
+      const failures = results.flatMap((result) => result.status === "rejected" ? [result.reason] : []);
+      if (failures.length > 0)
+        throw new AggregateError(failures, "Failed to dispose Meridian V2 hooks");
+    };
+  }
+});
+var meridian_v2_default = MeridianV2Plugin;
+export {
+  meridian_v2_default as default
+};

package/dist/meridian-v2/package.json

@@ -0,0 +1,6 @@
+{
+  "name": "@rynfar/meridian-opencode-v2-plugin",
+  "private": true,
+  "type": "module",
+  "main": "./index.js"
+}

package/dist/{profileCli-qhcr87tm.js → profileCli-1eecbmgk.js}

@@ -13,7 +13,7 @@ import {
   profileLogin,
   profileRemove,
   profileSwitch
-} from "./cli-m9wqgk1q.js";
+} from "./cli-9e5cxp89.js";
 import"./cli-khhjyk04.js";
 import"./cli-vj9cv18n.js";
 import"./cli-p9swy5t3.js";

package/dist/proxy/adapter.d.ts

@@ -46,6 +46,18 @@ export interface AgentIdentity {
      * details; the proxy uses the normalized value for model-tier selection.
      */
     getAgentMode?(c: Context, body?: unknown): string | undefined;
+    /**
+     * True when the client is known to run several turns concurrently under one
+     * session key. Turn coordination still serializes them; what changes is the
+     * loser of a commit race. It is reclassified (`diverged`) and answered from
+     * its own body instead of refused with a 400 (#870). The pattern predates
+     * turn coordination and the upstream API answers both turns.
+     *
+     * Set this only for clients whose protocol makes the sharing unavoidable.
+     * For everyone else, a key that advanced under a waiting request carries a
+     * stale branch, and refusing it is what stops two histories from merging.
+     */
+    readonly runsConcurrentTurnsPerSessionKey?: boolean;
     /**
      * Optional trusted identity for a visible human turn.
      *
@@ -85,6 +97,13 @@ export interface AgentIdentity {
      * the client's own "working directory" hint from the request body.
      */
     extractClientWorkingDirectory?(body: any): string | undefined;
+    /**
+     * Whether the client's environment may be independent of the proxy-side SDK
+     * subprocess even when both report the same path text. When true, query
+     * construction keeps the client/proxy environment distinction explicit
+     * instead of treating lexical path equality as proof of one execution locus.
+     */
+    readonly clientEnvironmentMayDifferFromProxy?: boolean;
     /**
      * Content normalization — convert message content to a stable string
      * for hashing. Agents may send content in different formats.

package/dist/proxy/adapter.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"adapter.d.ts","sourceRoot":"","sources":["../../src/proxy/adapter.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,MAAM,CAAA;AACnC,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,gCAAgC,CAAA;AAEnE,MAAM,MAAM,mBAAmB,GAAG,QAAQ,CAAC;IACzC,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAA;IACtB,gFAAgF;IAChF,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,kFAAkF;IAClF,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,UAAU,EAAE,aAAa,GAAG,wBAAwB,CAAA;CAC9D,CAAC,CAAA;AAEF;;;;GAIG;AACH,MAAM,WAAW,aAAa;IAC5B,4DAA4D;IAC5D,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IAErB;;;OAGG;IACH,YAAY,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,OAAO,GAAG,MAAM,GAAG,SAAS,CAAA;IAE5D;;;;;;;;;;;;OAYG;IACH,kBAAkB,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,OAAO,GAAG,MAAM,GAAG,SAAS,CAAA;IAEnE;;;OAGG;IACH,YAAY,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,OAAO,GAAG,MAAM,GAAG,SAAS,CAAA;IAE7D;;;;;;OAMG;IACH,sBAAsB,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,OAAO,GAAG,mBAAmB,GAAG,SAAS,CAAA;IAEpF;;;;;;;;;;;;;;;;OAgBG;IACH,uBAAuB,CAAC,IAAI,EAAE,GAAG,GAAG,MAAM,GAAG,SAAS,CAAA;IAEtD;;;;;;;;;;;OAWG;IACH,6BAA6B,CAAC,CAAC,IAAI,EAAE,GAAG,GAAG,MAAM,GAAG,SAAS,CAAA;IAE7D;;;OAGG;IACH,gBAAgB,CAAC,OAAO,EAAE,GAAG,GAAG,MAAM,CAAA;IAEtC;;;;;OAKG;IACH,8BAA8B,CAAC,CAC7B,QAAQ,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,OAAO,CAAA;KAAE,CAAC,GAClD,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,OAAO,CAAA;KAAE,CAAC,CAAA;IAE5C;;;OAGG;IACH,gBAAgB,IAAI,MAAM,CAAA;CAC3B;AAED;;;;GAIG;AACH,MAAM,WAAW,YAAa,SAAQ,aAAa;IACjD;;;;;;OAMG;IACH,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;IAE1B,6EAA6E;IAC7E,QAAQ,CAAC,gBAAgB,CAAC,EAAE,OAAO,CAAC,OAAO,eAAe,EAAE,eAAe,CAAC,CAAA;IAE5E,6EAA6E;IAC7E,QAAQ,CAAC,mBAAmB,CAAC,EAAE,OAAO,CAAA;IAEtC;;;OAGG;IACH,sBAAsB,IAAI,SAAS,MAAM,EAAE,CAAA;IAE3C;;;;OAIG;IACH,yBAAyB,IAAI,SAAS,MAAM,EAAE,CAAA;IAE9C;;OAEG;IACH,kBAAkB,IAAI,SAAS,MAAM,EAAE,CAAA;IAEvC;;;;OAIG;IACH,cAAc,CAAC,CAAC,IAAI,EAAE,GAAG,EAAE,YAAY,EAAE,SAAS,MAAM,EAAE,GAAG,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IAEhF;;;OAGG;IACH,aAAa,CAAC,CAAC,IAAI,EAAE,GAAG,EAAE,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,GAAG,CAAA;IAE9D;;;OAGG;IACH,0BAA0B,CAAC,CAAC,IAAI,EAAE,GAAG,EAAE,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,MAAM,CAAA;IAE9E;;;;;;OAMG;IACH,gBAAgB,CAAC,CAAC,IAAI,EAAE,GAAG,GAAG,OAAO,CAAA;IAErC;;;;;;;;OAQG;IACH,eAAe,CAAC,IAAI,OAAO,CAAA;IAE3B;;;;;;;OAOG;IACH,gBAAgB,CAAC,IAAI,SAAS,MAAM,EAAE,CAAA;IAEtC;;;;;;;;;;;;;;OAcG;IACH,iBAAiB,CAAC,IAAI,aAAa,EAAE,CAAA;IAErC;;;;;;;OAOG;IACH,gBAAgB,CAAC,IAAI,OAAO,CAAA;IAE5B;;;;;;OAMG;IACH,sBAAsB,CAAC,IAAI,OAAO,CAAA;IAElC;;;;;;;;OAQG;IACH,yBAAyB,CAAC,IAAI,OAAO,CAAA;IAErC;;;;;;;;;;;;;;;OAeG;IACH,6BAA6B,CAAC,CAAC,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,GAAG,OAAO,eAAe,EAAE,UAAU,EAAE,CAAA;CAC3G"}
+{"version":3,"file":"adapter.d.ts","sourceRoot":"","sources":["../../src/proxy/adapter.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,MAAM,CAAA;AACnC,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,gCAAgC,CAAA;AAEnE,MAAM,MAAM,mBAAmB,GAAG,QAAQ,CAAC;IACzC,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAA;IACtB,gFAAgF;IAChF,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,kFAAkF;IAClF,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,UAAU,EAAE,aAAa,GAAG,wBAAwB,CAAA;CAC9D,CAAC,CAAA;AAEF;;;;GAIG;AACH,MAAM,WAAW,aAAa;IAC5B,4DAA4D;IAC5D,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IAErB;;;OAGG;IACH,YAAY,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,OAAO,GAAG,MAAM,GAAG,SAAS,CAAA;IAE5D;;;;;;;;;;;;OAYG;IACH,kBAAkB,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,OAAO,GAAG,MAAM,GAAG,SAAS,CAAA;IAEnE;;;OAGG;IACH,YAAY,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,OAAO,GAAG,MAAM,GAAG,SAAS,CAAA;IAE7D;;;;;;;;;;OAUG;IACH,QAAQ,CAAC,gCAAgC,CAAC,EAAE,OAAO,CAAA;IAEnD;;;;;;OAMG;IACH,sBAAsB,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,OAAO,GAAG,mBAAmB,GAAG,SAAS,CAAA;IAEpF;;;;;;;;;;;;;;;;OAgBG;IACH,uBAAuB,CAAC,IAAI,EAAE,GAAG,GAAG,MAAM,GAAG,SAAS,CAAA;IAEtD;;;;;;;;;;;OAWG;IACH,6BAA6B,CAAC,CAAC,IAAI,EAAE,GAAG,GAAG,MAAM,GAAG,SAAS,CAAA;IAE7D;;;;;OAKG;IACH,QAAQ,CAAC,mCAAmC,CAAC,EAAE,OAAO,CAAA;IAEtD;;;OAGG;IACH,gBAAgB,CAAC,OAAO,EAAE,GAAG,GAAG,MAAM,CAAA;IAEtC;;;;;OAKG;IACH,8BAA8B,CAAC,CAC7B,QAAQ,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,OAAO,CAAA;KAAE,CAAC,GAClD,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,OAAO,CAAA;KAAE,CAAC,CAAA;IAE5C;;;OAGG;IACH,gBAAgB,IAAI,MAAM,CAAA;CAC3B;AAED;;;;GAIG;AACH,MAAM,WAAW,YAAa,SAAQ,aAAa;IACjD;;;;;;OAMG;IACH,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;IAE1B,6EAA6E;IAC7E,QAAQ,CAAC,gBAAgB,CAAC,EAAE,OAAO,CAAC,OAAO,eAAe,EAAE,eAAe,CAAC,CAAA;IAE5E,6EAA6E;IAC7E,QAAQ,CAAC,mBAAmB,CAAC,EAAE,OAAO,CAAA;IAEtC;;;OAGG;IACH,sBAAsB,IAAI,SAAS,MAAM,EAAE,CAAA;IAE3C;;;;OAIG;IACH,yBAAyB,IAAI,SAAS,MAAM,EAAE,CAAA;IAE9C;;OAEG;IACH,kBAAkB,IAAI,SAAS,MAAM,EAAE,CAAA;IAEvC;;;;OAIG;IACH,cAAc,CAAC,CAAC,IAAI,EAAE,GAAG,EAAE,YAAY,EAAE,SAAS,MAAM,EAAE,GAAG,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IAEhF;;;OAGG;IACH,aAAa,CAAC,CAAC,IAAI,EAAE,GAAG,EAAE,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,GAAG,CAAA;IAE9D;;;OAGG;IACH,0BAA0B,CAAC,CAAC,IAAI,EAAE,GAAG,EAAE,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,MAAM,CAAA;IAE9E;;;;;;OAMG;IACH,gBAAgB,CAAC,CAAC,IAAI,EAAE,GAAG,GAAG,OAAO,CAAA;IAErC;;;;;;;;OAQG;IACH,eAAe,CAAC,IAAI,OAAO,CAAA;IAE3B;;;;;;;OAOG;IACH,gBAAgB,CAAC,IAAI,SAAS,MAAM,EAAE,CAAA;IAEtC;;;;;;;;;;;;;;OAcG;IACH,iBAAiB,CAAC,IAAI,aAAa,EAAE,CAAA;IAErC;;;;;;;OAOG;IACH,gBAAgB,CAAC,IAAI,OAAO,CAAA;IAE5B;;;;;;OAMG;IACH,sBAAsB,CAAC,IAAI,OAAO,CAAA;IAElC;;;;;;;;OAQG;IACH,yBAAyB,CAAC,IAAI,OAAO,CAAA;IAErC;;;;;;;;;;;;;;;OAeG;IACH,6BAA6B,CAAC,CAAC,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,GAAG,OAAO,eAAe,EAAE,UAAU,EAAE,CAAA;CAC3G"}

package/dist/proxy/adapters/claudecode.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"claudecode.d.ts","sourceRoot":"","sources":["../../../src/proxy/adapters/claudecode.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAGH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,YAAY,CAAA;AAiC9C;;;;;;;GAOG;AACH,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B;;;;OAIG;IACH,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAA;CAClC;AAED;;;;;;;;GAQG;AACH,wBAAgB,gCAAgC,CAAC,IAAI,EAAE,OAAO,GAAG,yBAAyB,GAAG,SAAS,CA+BrG;AAED,sFAAsF;AACtF,wBAAgB,0BAA0B,CAAC,IAAI,EAAE,OAAO,GAAG,MAAM,GAAG,SAAS,CAE5E;AAED,kFAAkF;AAClF,wBAAgB,gCAAgC,CAAC,IAAI,EAAE,OAAO,GAAG,MAAM,GAAG,SAAS,CAElF;AAED,eAAO,MAAM,iBAAiB,EAAE,YAkG/B,CAAA"}
+{"version":3,"file":"claudecode.d.ts","sourceRoot":"","sources":["../../../src/proxy/adapters/claudecode.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAGH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,YAAY,CAAA;AAiC9C;;;;;;;GAOG;AACH,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B;;;;OAIG;IACH,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAA;CAClC;AAED;;;;;;;;GAQG;AACH,wBAAgB,gCAAgC,CAAC,IAAI,EAAE,OAAO,GAAG,yBAAyB,GAAG,SAAS,CA+BrG;AAED,sFAAsF;AACtF,wBAAgB,0BAA0B,CAAC,IAAI,EAAE,OAAO,GAAG,MAAM,GAAG,SAAS,CAE5E;AAED,kFAAkF;AAClF,wBAAgB,gCAAgC,CAAC,IAAI,EAAE,OAAO,GAAG,MAAM,GAAG,SAAS,CAElF;AAED,eAAO,MAAM,iBAAiB,EAAE,YAqG/B,CAAA"}

package/dist/proxy/adapters/opencode.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"opencode.d.ts","sourceRoot":"","sources":["../../../src/proxy/adapters/opencode.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,OAAO,KAAK,EAAE,YAAY,EAAuB,MAAM,YAAY,CAAA;AAsCnE,wBAAgB,sCAAsC,CACpD,QAAQ,EAAE,KAAK,CAAC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,OAAO,CAAA;CAAE,CAAC,GAClD,KAAK,CAAC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,OAAO,CAAA;CAAE,CAAC,CAU3C;AAED,eAAO,MAAM,eAAe,EAAE,YAqM7B,CAAA;AAED,OAAO,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAA;AAC3D,OAAO,EAAE,kBAAkB,EAAE,CAAA"}
+{"version":3,"file":"opencode.d.ts","sourceRoot":"","sources":["../../../src/proxy/adapters/opencode.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,OAAO,KAAK,EAAE,YAAY,EAAuB,MAAM,YAAY,CAAA;AAuDnE,wBAAgB,sCAAsC,CACpD,QAAQ,EAAE,KAAK,CAAC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,OAAO,CAAA;CAAE,CAAC,GAClD,KAAK,CAAC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,OAAO,CAAA;CAAE,CAAC,CAU3C;AAED,eAAO,MAAM,eAAe,EAAE,YAqN7B,CAAA;AAED,OAAO,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAA;AAC3D,OAAO,EAAE,kBAAkB,EAAE,CAAA"}

package/dist/proxy/adapters/pi.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"pi.d.ts","sourceRoot":"","sources":["../../../src/proxy/adapters/pi.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAGH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,YAAY,CAAA;AA0C9C,eAAO,MAAM,SAAS,EAAE,YAoJvB,CAAA;AAED,OAAO,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAA;AAC/C,OAAO,EAAE,YAAY,EAAE,CAAA"}
+{"version":3,"file":"pi.d.ts","sourceRoot":"","sources":["../../../src/proxy/adapters/pi.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAGH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,YAAY,CAAA;AA0C9C,eAAO,MAAM,SAAS,EAAE,YA+JvB,CAAA;AAED,OAAO,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAA;AAC/C,OAAO,EAAE,YAAY,EAAE,CAAA"}

package/dist/proxy/errors.d.ts

@@ -119,7 +119,7 @@ export declare function isExtraUsageRequiredError(errMsg: string): boolean;
  * collapses into a generic api_error.
  */
 export interface SdkTermination {
-    reason: "max_turns" | "process_exit" | "aborted" | "upstream_idle" | "unknown";
+    reason: "max_turns" | "process_exit" | "aborted" | "upstream_idle" | "context_overflow" | "unknown";
     /** Turn count when reason=max_turns and parseable. */
     turns?: number;
     /** Exit code when reason=process_exit and parseable. */

package/dist/proxy/errors.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../../src/proxy/errors.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,MAAM,WAAW,eAAe;IAC9B,MAAM,EAAE,MAAM,CAAA;IACd,IAAI,EAAE,MAAM,CAAA;IACZ,OAAO,EAAE,MAAM,CAAA;CAChB;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,mBAAmB,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,MAAM,CAc1D;AA2ED;;;;;;GAMG;AACH,wBAAgB,aAAa,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,eAAe,CAmI7E;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAM3D;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,MAAM,aAAa,GAAG,MAAM,GAAG,aAAa,GAAG,iBAAiB,CAAA;AAEtE;;;;;;;GAOG;AACH,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,OAAO,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,aAAa,GAAG,SAAS,CAahG;AAED;;;;;;;GAOG;AACH,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,OAAO,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,OAAO,CAI3E;AAED;;;GAGG;AACH,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAGxD;AAuBD;;;GAGG;AACH,wBAAgB,sBAAsB,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,SAAS,IAAI,MAAM,CAEhG;AAED;;;;;;;GAOG;AACH,wBAAgB,cAAc,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,OAAO,CAE5E;AAED;;;;GAIG;AACH,wBAAgB,yBAAyB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAGjE;AAED;;;;;GAKG;AACH,MAAM,WAAW,cAAc;IAC7B,MAAM,EAAE,WAAW,GAAG,cAAc,GAAG,SAAS,GAAG,eAAe,GAAG,SAAS,CAAA;IAC9E,sDAAsD;IACtD,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,wDAAwD;IACxD,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,uEAAuE;IACvE,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,wDAAwD;IACxD,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB;;wCAEoC;IACpC,OAAO,CAAC,EAAE,MAAM,CAAA;CACjB;AAuBD;;;;;;GAMG;AACH;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAgB,0BAA0B,CAAC,KAAK,EAAE;IAChD,MAAM,EAAE,cAAc,CAAC,QAAQ,CAAC,CAAA;IAChC,WAAW,EAAE,OAAO,CAAA;IACpB,gBAAgB,EAAE,MAAM,CAAA;IACxB,WAAW,EAAE,OAAO,CAAA;CACrB,GAAG,OAAO,CAYV;AAED,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,MAAM,GAAG,cAAc,CAuDpE;AAED;;;;;;;GAOG;AACH,wBAAgB,oBAAoB,CAClC,CAAC,EAAE,cAAc,EACjB,GAAG,EAAE;IACH,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,EAAE,OAAO,CAAA;IAClB,gBAAgB,CAAC,EAAE,OAAO,CAAA;IAC1B,YAAY,CAAC,EAAE,MAAM,CAAA;CACtB,GACA,MAAM,CAYR"}
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../../src/proxy/errors.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,MAAM,WAAW,eAAe;IAC9B,MAAM,EAAE,MAAM,CAAA;IACd,IAAI,EAAE,MAAM,CAAA;IACZ,OAAO,EAAE,MAAM,CAAA;CAChB;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,mBAAmB,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,MAAM,CAc1D;AAqLD;;;;;;GAMG;AACH,wBAAgB,aAAa,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,eAAe,CA2K7E;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAM3D;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,MAAM,aAAa,GAAG,MAAM,GAAG,aAAa,GAAG,iBAAiB,CAAA;AAEtE;;;;;;;GAOG;AACH,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,OAAO,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,aAAa,GAAG,SAAS,CAahG;AAED;;;;;;;GAOG;AACH,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,OAAO,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,OAAO,CAI3E;AAED;;;GAGG;AACH,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAGxD;AAuBD;;;GAGG;AACH,wBAAgB,sBAAsB,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,SAAS,IAAI,MAAM,CAEhG;AAED;;;;;;;GAOG;AACH,wBAAgB,cAAc,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,OAAO,CAE5E;AAED;;;;GAIG;AACH,wBAAgB,yBAAyB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAGjE;AAED;;;;;GAKG;AACH,MAAM,WAAW,cAAc;IAC7B,MAAM,EAAE,WAAW,GAAG,cAAc,GAAG,SAAS,GAAG,eAAe,GAAG,kBAAkB,GAAG,SAAS,CAAA;IACnG,sDAAsD;IACtD,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,wDAAwD;IACxD,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,uEAAuE;IACvE,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,wDAAwD;IACxD,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB;;wCAEoC;IACpC,OAAO,CAAC,EAAE,MAAM,CAAA;CACjB;AAuBD;;;;;;GAMG;AACH;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAgB,0BAA0B,CAAC,KAAK,EAAE;IAChD,MAAM,EAAE,cAAc,CAAC,QAAQ,CAAC,CAAA;IAChC,WAAW,EAAE,OAAO,CAAA;IACpB,gBAAgB,EAAE,MAAM,CAAA;IACxB,WAAW,EAAE,OAAO,CAAA;CACrB,GAAG,OAAO,CAYV;AAED,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,MAAM,GAAG,cAAc,CAiEpE;AAED;;;;;;;GAOG;AACH,wBAAgB,oBAAoB,CAClC,CAAC,EAAE,cAAc,EACjB,GAAG,EAAE;IACH,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,EAAE,OAAO,CAAA;IAClB,gBAAgB,CAAC,EAAE,OAAO,CAAA;IAC1B,YAAY,CAAC,EAAE,MAAM,CAAA;CACtB,GACA,MAAM,CAYR"}

package/dist/proxy/idleStallCeiling.d.ts

@@ -0,0 +1,74 @@
+/**
+ * Consecutive upstream-idle ceiling.
+ *
+ * guardUpstreamIdle turns a stalled model stream into a 504, which is the right
+ * answer for a one-off stall: a retry usually clears it. What a 504 cannot say
+ * is that the SAME session has now stalled the same way several turns running.
+ * "Transient, try again" is what every client retry policy reads in a 5xx, so a
+ * session that stalls deterministically gets replayed forever at full upstream
+ * cost — on 2026-08-16 that ran twenty turns into a half-hour loop, each killed
+ * at exactly the idle limit, each retried, none ever completing.
+ *
+ * The proxy does not retry; the client does. Past the ceiling it emits a
+ * terminal error and briefly rejects identical retries before opening another
+ * stream. A changed request can try immediately.
+ *
+ * Counts are scoped to the session and exact request. Changed requests and
+ * completed turns clear the streak. A terminal verdict is checked before the
+ * next HTTP response opens because some clients retry terminal SSE errors.
+ * The pause expires after one idle window (at least 60 seconds), so a transient
+ * outage cannot permanently lock the request out. All times are caller-supplied.
+ */
+/** Exact request identity: changes must never inherit another turn's retry block. */
+export declare function idleStallRequestKey(body: unknown): string;
+export declare function idleStallPauseMs(idleMs: number): number;
+export interface IdleStallRequestContext {
+    key: string;
+    now: number;
+}
+export interface IdleStallVerdict {
+    status: number;
+    type: string;
+    message: string;
+    /** Consecutive stalls on this session, including the one being judged. */
+    consecutive: number;
+    /** True when the ceiling fired and the client is being told to stop. */
+    terminal: boolean;
+}
+/** Carries a classified idle-stall response through the non-stream error path. */
+export declare class IdleStallCeilingError extends Error {
+    readonly verdict: IdleStallVerdict;
+    constructor(verdict: IdleStallVerdict);
+}
+/** Tracks consecutive idle stalls per session and rules on each one.
+ *
+ *  Bounded by construction. The session maps in server.ts that predate this are
+ *  plain unbounded Maps; a tracker keyed by session id would leak the same way,
+ *  so capacity is required rather than optional. */
+export declare class IdleStallTracker {
+    private readonly ceiling;
+    private readonly capacity;
+    private readonly counts;
+    /** @param ceiling Consecutive stalls tolerated before the verdict turns
+     *                 terminal. 0 disables the ceiling — every stall stays a 504,
+     *                 which is the pre-ceiling behaviour.
+     *  @param capacity Maximum sessions tracked; the oldest entry is evicted
+     *                  first. */
+    constructor(ceiling: number, capacity: number);
+    /** Clear a session's streak. Call on any completed turn — a turn that
+     *  finished is proof the session can still make progress. */
+    clear(sessionKey: string): void;
+    /** Check before opening HTTP/SSE. Time is supplied by the caller, not read here. */
+    preflight(sessionKey: string, requestKey: string, idleMs: number, now: number): IdleStallVerdict | undefined;
+    /** Record a stall and rule on it.
+     *
+     *  An empty session key means the turn carries no session identity to
+     *  correlate against (a first turn that stalled before the SDK reported its
+     *  session id). Those are counted as one-offs rather than pooled under a
+     *  shared "" key, which would let unrelated sessions trip each other's
+     *  ceiling. */
+    record(sessionKey: string, idleMs: number, sinceLastMs: number, request?: IdleStallRequestContext): IdleStallVerdict;
+    /** Test/telemetry accessor. */
+    streak(sessionKey: string): number;
+}
+//# sourceMappingURL=idleStallCeiling.d.ts.map

package/dist/proxy/idleStallCeiling.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"idleStallCeiling.d.ts","sourceRoot":"","sources":["../../src/proxy/idleStallCeiling.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAIH,qFAAqF;AACrF,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,OAAO,GAAG,MAAM,CAEzD;AAED,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAGvD;AAED,MAAM,WAAW,uBAAuB;IACtC,GAAG,EAAE,MAAM,CAAA;IACX,GAAG,EAAE,MAAM,CAAA;CACZ;AAQD,MAAM,WAAW,gBAAgB;IAC/B,MAAM,EAAE,MAAM,CAAA;IACd,IAAI,EAAE,MAAM,CAAA;IACZ,OAAO,EAAE,MAAM,CAAA;IACf,0EAA0E;IAC1E,WAAW,EAAE,MAAM,CAAA;IACnB,wEAAwE;IACxE,QAAQ,EAAE,OAAO,CAAA;CAClB;AAED,kFAAkF;AAClF,qBAAa,qBAAsB,SAAQ,KAAK;IAClC,QAAQ,CAAC,OAAO,EAAE,gBAAgB;gBAAzB,OAAO,EAAE,gBAAgB;CAI/C;AAED;;;;oDAIoD;AACpD,qBAAa,gBAAgB;IASzB,OAAO,CAAC,QAAQ,CAAC,OAAO;IACxB,OAAO,CAAC,QAAQ,CAAC,QAAQ;IAT3B,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAyC;IAEhE;;;;iCAI6B;gBAEV,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,MAAM;IAGnC;iEAC6D;IAC7D,KAAK,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI;IAI/B,oFAAoF;IACpF,SAAS,CAAC,UAAU,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,gBAAgB,GAAG,SAAS;IAW5G;;;;;;mBAMe;IACf,MAAM,CAAC,UAAU,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,uBAAuB,GAAG,gBAAgB;IAoCpH,+BAA+B;IAC/B,MAAM,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM;CAGnC"}