@rynfar/meridian 1.72.0 → 1.74.0

package/dist/{cli-9e5cxp89.js → cli-2h3w5n6g.js}

@@ -1,39 +1,32 @@
 import {
-  createPlatformCredentialStore
-} from "./cli-khhjyk04.js";
+  authFieldPaths,
+  claudeLog,
+  createPlatformCredentialStore,
+  credentialsFilePathForProfile,
+  describeAuthFields,
+  fetchOAuthPlanFields,
+  isCredentialsReadOnly
+} from "./cli-chsp880k.js";
 import {
-  setSetting
-} from "./cli-vj9cv18n.js";
+  env,
+  envBool,
+  init_env
+} from "./cli-1jstkdj9.js";
 import {
-  __esm
-} from "./cli-p9swy5t3.js";
-
-// src/env.ts
-function env(suffix) {
-  return process.env[`MERIDIAN_${suffix}`] ?? process.env[`CLAUDE_PROXY_${suffix}`];
-}
-function envBool(suffix) {
-  const val = env(suffix);
-  return val === "1" || val === "true" || val === "yes";
-}
-function resolvePassthrough(defaultValue) {
-  const val = env("PASSTHROUGH");
-  if (val === "1" || val === "true" || val === "yes")
-    return true;
-  if (val === "0" || val === "false" || val === "no")
-    return false;
-  return defaultValue;
-}
-function envInt(suffix, defaultValue) {
-  const val = env(suffix);
-  if (!val)
-    return defaultValue;
-  const parsed = parseInt(val, 10);
-  return Number.isFinite(parsed) ? parsed : defaultValue;
-}
-var init_env = () => {};
+  applyProfileRename,
+  defaultProfilesConfigFile,
+  defaultProfilesDir,
+  reclaimAlias
+} from "./cli-qpfky8wy.js";
+import {
+  configPath,
+  getSetting,
+  init_configDir,
+  setSetting
+} from "./cli-eehk3052.js";
 
 // src/proxy/profileCli.ts
+init_configDir();
 import { execFileSync, spawnSync } from "node:child_process";
 import { createHash, randomBytes } from "node:crypto";
 import { mkdirSync, readFileSync, rmSync, writeFileSync, existsSync as existsSync2 } from "node:fs";
@@ -77,6 +70,16 @@ var lastKnownGoodAuthStatus = null;
 var cachedAuthStatusAt = 0;
 var cachedAuthStatusIsFailure = false;
 var cachedAuthStatusPromise = null;
+var cachedAuthStatusCredMtimeMs = 0;
+function credentialFileMtimeMs(envOverrides) {
+  if (!isCredentialsReadOnly())
+    return 0;
+  try {
+    return statSync(credentialsFilePathForProfile(envOverrides?.CLAUDE_CONFIG_DIR)).mtimeMs;
+  } catch {
+    return 0;
+  }
+}
 var warnedTierOverrides = new Set;
 function warnUnrecognizedTierOverride(varName, raw, tierBase) {
   if (warnedTierOverrides.has(varName))
@@ -226,7 +229,7 @@ function getAuthCacheInfo(profileId) {
 function getAuthCache(key) {
   let cache = profileAuthCaches.get(key);
   if (!cache) {
-    cache = { status: null, lastKnownGood: null, at: 0, isFailure: false, promise: null, lastSuccessAt: 0 };
+    cache = { status: null, lastKnownGood: null, at: 0, isFailure: false, promise: null, lastSuccessAt: 0, credMtimeMs: 0 };
     profileAuthCaches.set(key, cache);
   }
   return cache;
@@ -239,8 +242,10 @@ async function getClaudeAuthStatusAsync(profileId, envOverrides) {
   const c_at = cache ? cache.at : cachedAuthStatusAt;
   const c_isFailure = cache ? cache.isFailure : cachedAuthStatusIsFailure;
   let c_promise = cache ? cache.promise : cachedAuthStatusPromise;
+  const c_credMtime = cache ? cache.credMtimeMs : cachedAuthStatusCredMtimeMs;
   const ttl = c_isFailure ? AUTH_STATUS_FAILURE_TTL_MS : AUTH_STATUS_CACHE_TTL_MS;
-  if (c_at > 0 && Date.now() - c_at < ttl) {
+  const credMtime = credentialFileMtimeMs(envOverrides);
+  if (c_at > 0 && Date.now() - c_at < ttl && credMtime === c_credMtime) {
     return c_status ?? c_lastKnownGood;
   }
   if (c_promise)
@@ -253,29 +258,45 @@ async function getClaudeAuthStatusAsync(profileId, envOverrides) {
         ...envOverrides ? { env: { ...process.env, ...envOverrides } } : {}
       });
       const parsed = JSON.parse(stdout);
+      claudeLog("auth.status_discovered", {
+        source: "cli_async",
+        profile: profileId ?? "default",
+        fields: authFieldPaths(parsed),
+        payload: describeAuthFields(parsed)
+      });
       if (cache) {
         cache.status = parsed;
         cache.lastKnownGood = parsed;
         cache.at = Date.now();
         cache.isFailure = false;
         cache.lastSuccessAt = Date.now();
+        cache.credMtimeMs = credMtime;
       } else {
         cachedAuthStatus = parsed;
         lastKnownGoodAuthStatus = parsed;
         cachedAuthStatusAt = Date.now();
         cachedAuthStatusIsFailure = false;
+        cachedAuthStatusCredMtimeMs = credMtime;
       }
       return parsed;
-    } catch {
+    } catch (err) {
+      claudeLog("auth.status_failed", {
+        source: "cli_async",
+        profile: profileId ?? "default",
+        error: String(err),
+        servingLastKnownGood: Boolean(cache ? cache.lastKnownGood : lastKnownGoodAuthStatus)
+      });
       if (cache) {
         cache.isFailure = true;
         cache.at = Date.now();
         cache.status = null;
+        cache.credMtimeMs = credMtime;
         return cache.lastKnownGood;
       } else {
         cachedAuthStatusIsFailure = true;
         cachedAuthStatusAt = Date.now();
         cachedAuthStatus = null;
+        cachedAuthStatusCredMtimeMs = credMtime;
         return lastKnownGoodAuthStatus;
       }
     }
@@ -425,8 +446,7 @@ function isClosedControllerError(error) {
 }
 
 // src/proxy/profileCli.ts
-var PROFILES_DIR = join2(homedir(), ".config", "meridian", "profiles");
-var CONFIG_FILE = join2(homedir(), ".config", "meridian", "profiles.json");
+init_env();
 var OAUTH_AUTHORIZE_URL = "https://claude.com/cai/oauth/authorize";
 var OAUTH_TOKEN_URL = "https://platform.claude.com/v1/oauth/token";
 var OAUTH_CLIENT_ID = "9d1c250a-e61b-44d9-88ed-5944d1962f5e";
@@ -439,11 +459,20 @@ var OAUTH_SCOPES = [
   "user:mcp_servers",
   "user:file_upload"
 ];
+function profilesConfigFile() {
+  return configPath("profiles.json");
+}
 function ensureProfilesDir() {
-  mkdirSync(PROFILES_DIR, { recursive: true });
+  mkdirSync(configPath("profiles"), { recursive: true });
 }
 function getProfileDir(id) {
-  return join2(PROFILES_DIR, id);
+  return configPath("profiles", id);
+}
+function isValidProfileId(id) {
+  return Boolean(id) && !/[^a-zA-Z0-9_-]/.test(id);
+}
+function yellow(text) {
+  return process.stdout.isTTY ? `\x1B[33m${text}\x1B[0m` : text;
 }
 function buildAuthLoginEnv(configDir, _options = {}, baseEnv = process.env) {
   const env2 = { ...baseEnv };
@@ -489,18 +518,19 @@ function parseAuthorizationCodeInput(input) {
   return code ? { code, state } : null;
 }
 function loadProfileConfig() {
-  if (!existsSync2(CONFIG_FILE))
+  const file = profilesConfigFile();
+  if (!existsSync2(file))
     return [];
   try {
-    return JSON.parse(readFileSync(CONFIG_FILE, "utf-8"));
+    return JSON.parse(readFileSync(file, "utf-8"));
   } catch (err) {
-    console.warn(`[meridian] Failed to read ${CONFIG_FILE}: ${err instanceof Error ? err.message : err}`);
+    console.warn(`[meridian] Failed to read ${file}: ${err instanceof Error ? err.message : err}`);
     return [];
   }
 }
 function saveProfileConfig(profiles) {
   ensureProfilesDir();
-  writeFileSync(CONFIG_FILE, `${JSON.stringify(profiles, null, 2)}
+  writeFileSync(profilesConfigFile(), `${JSON.stringify(profiles, null, 2)}
 `, { mode: 384 });
 }
 function getAuthStatus(configDir) {
@@ -515,12 +545,33 @@ function getAuthStatus(configDir) {
       env: { ...process.env, CLAUDE_CONFIG_DIR: configDir },
       stdio: ["pipe", "pipe", "pipe"]
     });
-    return JSON.parse(result.toString());
+    const status = JSON.parse(result.toString());
+    claudeLog("auth.status_discovered", {
+      source: "cli_sync",
+      fields: authFieldPaths(status),
+      payload: describeAuthFields(status)
+    });
+    return status;
   } catch (err) {
+    claudeLog("auth.status_failed", { source: "cli_sync", error: String(err) });
     console.warn(`[meridian] Auth check failed for ${configDir}: ${err instanceof Error ? err.message : err}`);
     return { loggedIn: false };
   }
 }
+function hasRequiredTokens(tokenData) {
+  return Boolean(tokenData.access_token && tokenData.refresh_token);
+}
+function buildLoginCredentials(tokenData, plan, now = Date.now()) {
+  return {
+    claudeAiOauth: {
+      accessToken: tokenData.access_token,
+      refreshToken: tokenData.refresh_token,
+      expiresAt: tokenData.expires_at ?? now + (tokenData.expires_in ?? 8 * 60 * 60) * 1000,
+      scopes: tokenData.scope?.split(" ").filter(Boolean) ?? OAUTH_SCOPES,
+      ...plan
+    }
+  };
+}
 async function completeManualOAuthLogin(configDir) {
   const session = createManualOAuthSession();
   console.log("\x1B[33m⚠ Headless OAuth login: open this URL in a browser:\x1B[0m");
@@ -554,11 +605,13 @@ async function completeManualOAuthLogin(configDir) {
       signal: AbortSignal.timeout(30000)
     });
   } catch (err) {
+    claudeLog("auth.token_request_failed", { error: String(err) });
     console.error(`\x1B[31m✗ OAuth token exchange failed: ${err instanceof Error ? err.message : err}\x1B[0m`);
     return false;
   }
   if (!response.ok) {
     const body = await response.text().catch(() => "");
+    claudeLog("auth.token_bad_response", { status: response.status, bodyLength: body.length });
     console.error(`\x1B[31m✗ OAuth token exchange failed (${response.status}).\x1B[0m`);
     if (body)
       console.error(`  ${body.slice(0, 300)}`);
@@ -568,35 +621,39 @@ async function completeManualOAuthLogin(configDir) {
   try {
     tokenData = await response.json();
   } catch (err) {
+    claudeLog("auth.token_parse_failed", { error: String(err) });
     console.error(`\x1B[31m✗ OAuth token response was invalid: ${err instanceof Error ? err.message : err}\x1B[0m`);
     return false;
   }
-  if (!tokenData.access_token || !tokenData.refresh_token) {
+  claudeLog("auth.token_discovered", {
+    fields: authFieldPaths(tokenData),
+    payload: describeAuthFields(tokenData)
+  });
+  if (!hasRequiredTokens(tokenData)) {
     console.error("\x1B[31m✗ OAuth token response did not include the required tokens.\x1B[0m");
     return false;
   }
-  const expiresAt = tokenData.expires_at ?? Date.now() + (tokenData.expires_in ?? 8 * 60 * 60) * 1000;
+  const plan = await fetchOAuthPlanFields(tokenData.access_token);
   const store = createPlatformCredentialStore({ claudeConfigDir: configDir });
-  return store.write({
-    claudeAiOauth: {
-      accessToken: tokenData.access_token,
-      refreshToken: tokenData.refresh_token,
-      expiresAt,
-      scopes: tokenData.scope?.split(" ").filter(Boolean) ?? OAUTH_SCOPES
-    }
+  const credentials = buildLoginCredentials(tokenData, plan);
+  claudeLog("auth.credentials_built", {
+    fields: authFieldPaths(credentials.claudeAiOauth),
+    payload: describeAuthFields(credentials.claudeAiOauth)
   });
+  return store.write(credentials);
 }
 async function profileAdd(id, options = {}) {
-  if (!id || /[^a-zA-Z0-9_-]/.test(id)) {
+  if (!isValidProfileId(id)) {
     console.error("\x1B[31m✗ Invalid profile ID.\x1B[0m Use only letters, numbers, hyphens, underscores.");
     process.exit(1);
   }
-  const profiles = loadProfileConfig();
+  let profiles = loadProfileConfig();
   if (profiles.find((p) => p.id === id)) {
     console.error(`\x1B[31m✗ Profile "${id}" already exists.\x1B[0m`);
     console.error(`  Run: meridian profile list`);
     process.exit(1);
   }
+  profiles = reclaimAlias(profiles, id);
   const defaultClaudeDir = join2(homedir(), ".claude");
   const alreadyImported = profiles.some((p) => p.claudeConfigDir === defaultClaudeDir);
   if (!alreadyImported) {
@@ -675,16 +732,17 @@ async function profileAdd(id, options = {}) {
   printEnvHint(profiles);
 }
 async function profileAddOauthToken(id, tokenArg) {
-  if (!id || /[^a-zA-Z0-9_-]/.test(id)) {
+  if (!isValidProfileId(id)) {
     console.error("\x1B[31m✗ Invalid profile ID.\x1B[0m Use only letters, numbers, hyphens, underscores.");
     process.exit(1);
   }
-  const profiles = loadProfileConfig();
+  let profiles = loadProfileConfig();
   if (profiles.find((p) => p.id === id)) {
     console.error(`\x1B[31m✗ Profile "${id}" already exists.\x1B[0m`);
     console.error(`  Run: meridian profile list`);
     process.exit(1);
   }
+  profiles = reclaimAlias(profiles, id);
   let token = tokenArg?.trim() ?? "";
   if (!token) {
     console.log(`\x1B[36mAdding profile: ${id} (OAuth token)\x1B[0m`);
@@ -718,6 +776,9 @@ function profileList() {
     const auth = getAuthStatus(p.claudeConfigDir ?? "");
     const status = auth.loggedIn ? `\x1B[32m✓ ${auth.email} (${auth.subscriptionType || "unknown"})\x1B[0m` : "\x1B[31m✗ not logged in\x1B[0m";
     console.log(`  ${p.id.padEnd(20)} ${status}`);
+    if (p.aliases && p.aliases.length > 0) {
+      console.log(`  ${"".padEnd(20)} \x1B[90malso answers to: ${p.aliases.join(", ")}\x1B[0m`);
+    }
   }
   console.log();
   printEnvHint(profiles);
@@ -746,7 +807,7 @@ function profileRemove(id) {
     console.error(`\x1B[31m✗ Profile "${id}" not found.\x1B[0m`);
     process.exit(1);
   }
-  const dirsToRemove = dirsToRemoveOnProfileRemove(removed, PROFILES_DIR);
+  const dirsToRemove = dirsToRemoveOnProfileRemove(removed, configPath("profiles"));
   profiles.splice(idx, 1);
   saveProfileConfig(profiles);
   for (const dir of dirsToRemove) {
@@ -758,6 +819,26 @@ function profileRemove(id) {
     printEnvHint(profiles);
   }
 }
+function profileRename(from, to) {
+  if (envBool("CREDENTIALS_READONLY")) {
+    console.error("\x1B[31m✗ MERIDIAN_CREDENTIALS_READONLY=1 — this instance may not modify credentials.\x1B[0m");
+    console.error("  Rename the profile from the instance that owns them.");
+    process.exit(1);
+  }
+  const wasActive = getSetting("activeProfile") === from;
+  const result = applyProfileRename(from, to, { profilesDir: defaultProfilesDir(), configFile: defaultProfilesConfigFile() });
+  if (!result.ok) {
+    console.error(`\x1B[31m✗ ${result.error}\x1B[0m`);
+    if (result.hint)
+      console.error(`  ${result.hint}`);
+    process.exit(1);
+  }
+  console.log(`\x1B[32m✓ Profile "${from}" renamed to "${to}".\x1B[0m`);
+  console.log(`  Requests naming ${result.aliases.map((a) => `"${a}"`).join(", ")} are served by "${to}" until the name is added again.`);
+  if (wasActive)
+    console.log(`  Active profile is now "${to}".`);
+  printEnvHint(result.profiles);
+}
 async function profileSwitch(id) {
   const port = process.env.MERIDIAN_PORT ?? process.env.CLAUDE_PROXY_PORT ?? "3456";
   const host = process.env.MERIDIAN_HOST ?? process.env.CLAUDE_PROXY_HOST ?? "127.0.0.1";
@@ -781,18 +862,32 @@ async function profileSwitch(id) {
     process.exit(1);
   }
 }
-async function profileLogin(id, options = {}) {
-  const profiles = loadProfileConfig();
+function planProfileLogin(id, profiles) {
   const profile = profiles.find((p) => p.id === id);
-  if (!profile) {
-    console.error(`\x1B[31m✗ Profile "${id}" not found.\x1B[0m Run: meridian profile add ${id}`);
+  if (!profile)
+    return isValidProfileId(id) ? { action: "create" } : { action: "reject-invalid-id" };
+  if (profile.oauthToken || profile.type === "oauth-token")
+    return { action: "reject-oauth-token" };
+  return { action: "login", profile };
+}
+async function profileLogin(id, options = {}) {
+  const plan = planProfileLogin(id, loadProfileConfig());
+  if (plan.action === "reject-invalid-id") {
+    console.error("\x1B[31m✗ Invalid profile ID.\x1B[0m Use only letters, numbers, hyphens, underscores.");
     process.exit(1);
   }
-  if (profile.oauthToken || profile.type === "oauth-token") {
+  if (plan.action === "reject-oauth-token") {
     console.error(`\x1B[31m✗ Profile "${id}" uses an OAuth token; \`claude auth login\` does not apply.\x1B[0m`);
     console.error(`  To replace the token: meridian profile remove ${id} && meridian profile add ${id} --oauth-token`);
     process.exit(1);
   }
+  if (plan.action === "create") {
+    console.log(yellow(`⚠ Profile "${id}" does not exist yet — adding it first.`));
+    console.log();
+    await profileAdd(id, options);
+    return;
+  }
+  const profile = plan.profile;
   console.log(`\x1B[36mRe-authenticating profile: ${id}\x1B[0m`);
   console.log();
   if (!options.headless) {
@@ -883,7 +978,7 @@ function promptToken(question) {
   return (result.stdout?.toString() ?? "").trim();
 }
 function printEnvHint(_profiles) {
-  console.log(`\x1B[90mConfig: ${CONFIG_FILE}\x1B[0m`);
+  console.log(`\x1B[90mConfig: ${profilesConfigFile()}\x1B[0m`);
   console.log("\x1B[90mProfiles are picked up automatically — no restart needed.\x1B[0m");
 }
 function profileHelp() {
@@ -894,9 +989,11 @@ Commands:
   meridian profile add <name> --oauth-token [TOKEN] Add a profile from a \`claude setup-token\` value
                                                     (if TOKEN is omitted, you will be prompted; input is hidden)
   meridian profile list                             List profiles and auth status
+  meridian profile rename <old> <new>               Rename a profile; <old> keeps routing to it until reused
   meridian profile remove <name>                    Remove a profile
   meridian profile switch <name>                    Switch the active profile (requires running proxy)
-  meridian profile login <name> [--headless]        Re-authenticate an existing profile (claude-max only)
+  meridian profile login <name> [--headless]        Re-authenticate a profile, adding it first if it does not
+                                                    exist yet (claude-max only)
 
 Examples:
   meridian profile add personal                     # Add personal account (browser login)
@@ -907,7 +1004,8 @@ Examples:
                                                     # Add headless CI profile (token from CLI argument)
   meridian profile login work --headless            # Re-authenticate via OAuth URL/code prompt
   meridian profile switch work                      # Switch to work account
+  meridian profile rename work employer             # Rename; "work" still routes to it
   meridian profile list                             # Show all profiles`);
 }
 
-export { env, envBool, resolvePassthrough, envInt, init_env, CANONICAL_SONNET_MODEL, resolveSdkModelDefaults, explicitModelPin, mapModelToClaudeModel, recordExtendedContextUnavailable, recordExtendedContextRateLimited, stripExtendedContext, hasExtendedContext, subscriptionIncludesExtendedContext, getAuthCacheInfo, getClaudeAuthStatusAsync, getResolvedClaudeExecutableInfo, resolveClaudeExecutableAsync, isClosedControllerError, OAUTH_TOKEN_URL, OAUTH_CLIENT_ID, OAUTH_REDIRECT_URI, buildAuthLoginEnv, createManualOAuthSession, parseAuthorizationCodeInput, profileAdd, profileAddOauthToken, profileList, dirsToRemoveOnProfileRemove, profileRemove, profileSwitch, profileLogin, profileHelp };
+export { CANONICAL_SONNET_MODEL, resolveSdkModelDefaults, explicitModelPin, mapModelToClaudeModel, recordExtendedContextUnavailable, recordExtendedContextRateLimited, stripExtendedContext, hasExtendedContext, subscriptionIncludesExtendedContext, getAuthCacheInfo, getClaudeAuthStatusAsync, resolveClaudeExecutableSync, getResolvedClaudeExecutableInfo, resolveClaudeExecutableAsync, isClosedControllerError, OAUTH_TOKEN_URL, OAUTH_CLIENT_ID, OAUTH_REDIRECT_URI, isValidProfileId, buildAuthLoginEnv, createManualOAuthSession, parseAuthorizationCodeInput, buildLoginCredentials, profileAdd, profileAddOauthToken, profileList, dirsToRemoveOnProfileRemove, profileRemove, profileRename, profileSwitch, planProfileLogin, profileLogin, profileHelp };

package/dist/cli-3zwfvexc.js

@@ -0,0 +1,56 @@
+// src/telemetry/profileUsage.ts
+var WINDOW_LABELS = {
+  five_hour: "5h",
+  seven_day: "7d",
+  seven_day_opus: "7d Opus",
+  seven_day_sonnet: "7d Sonnet",
+  seven_day_fable: "7d Fable",
+  seven_day_oauth_apps: "7d Apps",
+  seven_day_cowork: "7d Cowork",
+  seven_day_omelette: "7d Omelette"
+};
+function classifyUtilization(utilization) {
+  if (utilization == null || !Number.isFinite(utilization))
+    return "ok";
+  if (utilization >= 0.85)
+    return "high";
+  if (utilization >= 0.6)
+    return "warn";
+  return "ok";
+}
+function formatResetCountdown(resetsAt, now = Date.now()) {
+  if (resetsAt == null || !Number.isFinite(resetsAt))
+    return "";
+  const ms = resetsAt - now;
+  if (ms <= 0)
+    return "resetting…";
+  const minutes = Math.floor(ms / 60000);
+  if (minutes < 60)
+    return `in ${Math.max(1, minutes)}m`;
+  const hours = Math.floor(minutes / 60);
+  const remMin = minutes % 60;
+  if (hours < 24)
+    return remMin > 0 ? `in ${hours}h ${remMin}m` : `in ${hours}h`;
+  const days = Math.floor(hours / 24);
+  const remHr = hours % 24;
+  return remHr > 0 ? `in ${days}d ${remHr}h` : `in ${days}d`;
+}
+var SEVEN_DAYS_MS = 7 * 86400000;
+var PACE_ON_BAND = 7;
+var PROJECT_MIN_ELAPSED = 0.1;
+function computeWeeklyPace(utilization, resetsAt, now = Date.now()) {
+  if (utilization == null || !Number.isFinite(utilization))
+    return null;
+  if (resetsAt == null || !Number.isFinite(resetsAt))
+    return null;
+  const windowStart = resetsAt - SEVEN_DAYS_MS;
+  const elapsedFraction = Math.max(0, Math.min(1, (now - windowStart) / SEVEN_DAYS_MS));
+  const actualPct = Math.round(Math.max(0, utilization) * 100);
+  const expectedPct = Math.round(elapsedFraction * 100);
+  const deltaPct = actualPct - expectedPct;
+  const status = deltaPct > PACE_ON_BAND ? "ahead" : deltaPct < -PACE_ON_BAND ? "under" : "on";
+  const projectedPct = elapsedFraction >= PROJECT_MIN_ELAPSED ? Math.round(Math.max(0, utilization) / elapsedFraction * 100) : null;
+  return { actualPct, expectedPct, deltaPct, projectedPct, status, elapsedFraction };
+}
+
+export { WINDOW_LABELS, classifyUtilization, formatResetCountdown, computeWeeklyPace };

package/dist/{cli-hxxy0m1z.js → cli-82e2m44k.js}

@@ -795,7 +795,8 @@ function findPluginPath(fromUrl) {
 }
 var SUPPORTED_OPENCODE_V2_VERSIONS = new Set([
   "0.0.0-beta-18314",
-  "0.0.0-beta-18866"
+  "0.0.0-beta-18866",
+  "0.0.0-beta-19271"
 ]);
 function hasPluginPackageEntry(path) {
   try {

package/dist/cli-8sw5wr9j.js

@@ -0,0 +1,136 @@
+import {
+  claudeLog,
+  createPlatformCredentialStore
+} from "./cli-chsp880k.js";
+
+// src/proxy/organizationName.ts
+import { existsSync, readFileSync, writeFileSync, mkdirSync } from "node:fs";
+import { join, dirname } from "node:path";
+import { homedir } from "node:os";
+var OAUTH_PROFILE_URL = "https://api.anthropic.com/api/oauth/profile";
+var ORGANIZATION_REFRESH_AFTER_MS = 24 * 60 * 60 * 1000;
+var ORGANIZATION_RETRY_AFTER_MS = 5 * 60 * 1000;
+var MAX_ORGANIZATION_NAME_LENGTH = 200;
+function organizationsFile() {
+  const override = process.env.MERIDIAN_CONFIG_DIR;
+  return override ? join(override, "organizations.json") : join(homedir(), ".config", "meridian", "organizations.json");
+}
+function readOrganizations(raw) {
+  if (typeof raw !== "object" || raw === null || Array.isArray(raw))
+    return {};
+  const out = {};
+  for (const [id, value] of Object.entries(raw)) {
+    if (!id || typeof value !== "object" || value === null)
+      continue;
+    const record = value;
+    if (typeof record.name !== "string")
+      continue;
+    const name = record.name.trim();
+    if (!name || name.length > MAX_ORGANIZATION_NAME_LENGTH)
+      continue;
+    const fetchedAt = typeof record.fetchedAt === "number" && isFinite(record.fetchedAt) ? record.fetchedAt : 0;
+    out[id] = { name, fetchedAt };
+  }
+  return out;
+}
+function extractOrganizationName(body) {
+  if (typeof body !== "object" || body === null)
+    return null;
+  const organization = body.organization;
+  if (typeof organization !== "object" || organization === null)
+    return null;
+  const name = organization.name;
+  if (typeof name !== "string")
+    return null;
+  const trimmed = name.trim();
+  if (!trimmed || trimmed.length > MAX_ORGANIZATION_NAME_LENGTH)
+    return null;
+  return trimmed;
+}
+function organizationNeedsRefresh(record, now, refreshAfterMs = ORGANIZATION_REFRESH_AFTER_MS) {
+  if (!record)
+    return true;
+  return now - record.fetchedAt >= refreshAfterMs;
+}
+function organizationNames() {
+  const file = organizationsFile();
+  try {
+    if (!existsSync(file))
+      return {};
+    return readOrganizations(JSON.parse(readFileSync(file, "utf-8")));
+  } catch {
+    return {};
+  }
+}
+function rememberOrganizationName(profileId, name) {
+  const file = organizationsFile();
+  const merged = { ...organizationNames(), [profileId]: { name, fetchedAt: Date.now() } };
+  try {
+    mkdirSync(dirname(file), { recursive: true });
+    writeFileSync(file, JSON.stringify(merged, null, 2) + `
+`, { mode: 384 });
+  } catch (err) {
+    console.warn(`[meridian] Failed to write ${file}: ${err instanceof Error ? err.message : err}`);
+  }
+}
+async function fetchOrganizationName(store, fetchImpl = globalThis.fetch) {
+  try {
+    const credentials = await store.read();
+    const token = credentials?.claudeAiOauth?.accessToken;
+    if (!token)
+      return null;
+    const response = await fetchImpl(OAUTH_PROFILE_URL, {
+      headers: {
+        Authorization: `Bearer ${token}`,
+        Accept: "application/json",
+        "Cache-Control": "no-cache"
+      },
+      signal: AbortSignal.timeout(1e4)
+    });
+    if (!response.ok) {
+      claudeLog("organization.bad_response", { status: response.status });
+      return null;
+    }
+    return extractOrganizationName(await response.json());
+  } catch (err) {
+    claudeLog("organization.lookup_failed", { error: err instanceof Error ? err.message : String(err) });
+    return null;
+  }
+}
+var lookupEnabled = false;
+function enableOrganizationLookup() {
+  lookupEnabled = true;
+}
+var lastAttemptAt = new Map;
+var inflight = new Set;
+function refreshOrganizationNameSoon(profileId, opts = {}) {
+  if (!lookupEnabled && !opts.store)
+    return;
+  if (inflight.has(profileId))
+    return;
+  const now = Date.now();
+  const last = lastAttemptAt.get(profileId);
+  if (last !== undefined && now - last < (opts.retryAfterMs ?? ORGANIZATION_RETRY_AFTER_MS))
+    return;
+  lastAttemptAt.set(profileId, now);
+  inflight.add(profileId);
+  (async () => {
+    try {
+      const store = opts.store ?? createPlatformCredentialStore({ claudeConfigDir: opts.claudeConfigDir });
+      const name = await fetchOrganizationName(store, opts.fetchImpl);
+      if (name) {
+        rememberOrganizationName(profileId, name);
+        claudeLog("organization.discovered", { profile: profileId, nameLength: name.length });
+      }
+    } finally {
+      inflight.delete(profileId);
+    }
+  })();
+}
+function resetOrganizationLookupForTesting() {
+  lookupEnabled = false;
+  lastAttemptAt.clear();
+  inflight.clear();
+}
+
+export { ORGANIZATION_REFRESH_AFTER_MS, ORGANIZATION_RETRY_AFTER_MS, readOrganizations, extractOrganizationName, organizationNeedsRefresh, organizationNames, rememberOrganizationName, fetchOrganizationName, enableOrganizationLookup, refreshOrganizationNameSoon, resetOrganizationLookupForTesting };