opencode-anthropic-fix 0.2.0 → 0.3.0-beta.0

package/index.mjs

@@ -3,7 +3,6 @@ import { stdin, stdout } from "node:process";
 import { randomBytes, randomUUID, createHash as createHashCrypto } from "node:crypto";
 import { existsSync, mkdirSync, readFileSync, writeFileSync } from "node:fs";
 import { join, resolve, basename } from "node:path";
-import xxhashInit from "xxhash-wasm";
 import { AccountManager, RATE_LIMIT_KEY_FAST } from "./lib/accounts.mjs";
 import {
   authorize as oauthAuthorize,
@@ -15,15 +14,10 @@ import {
   FALLBACK_CLAUDE_CLI_VERSION,
   CLAUDE_CODE_NPM_LATEST_URL,
   CLAUDE_CODE_BUILD_TIME,
-  EXPERIMENTAL_BETA_FLAGS,
-  BETA_SHORTCUTS,
   resolveBetaShortcut,
-  buildExtendedUserAgent,
 } from "./lib/request-headers.mjs";
-import { loadConfig, loadConfigFresh, saveConfig, CLIENT_ID, getConfigDir } from "./lib/config.mjs";
-import { loadContextHintDisabledFlag, saveContextHintDisabledFlag } from "./lib/context-hint-persist.mjs";
+import { loadConfig, loadConfigFresh, saveConfig, getConfigDir } from "./lib/config.mjs";
 import { loadAccounts, saveAccounts, clearAccounts, createDefaultStats } from "./lib/storage.mjs";
-import { applyOAuthCredentials, resetAccountTracking } from "./lib/account-state.mjs";
 import { acquireRefreshLock, releaseRefreshLock } from "./lib/refresh-lock.mjs";
 import {
   isAccountSpecificError,
@@ -51,7 +45,7 @@ import {
   stripMcpPrefixFromParsedEvent,
 } from "./lib/mimicry/response-stream.mjs";
 import { transformRequestBody, CORE_TOOL_NAMES } from "./lib/mimicry/request-body.mjs";
-import { isFalsyEnv, isTruthyEnv } from "./lib/env.mjs";
+import { isTruthyEnv } from "./lib/env.mjs";
 import { sessionMetrics, createInitialSessionMetrics, getAverageCacheHitRate } from "./lib/session-metrics.mjs";
 import { repairOrphanedToolUseBlocks } from "./lib/mimicry/request-helpers.mjs";
 import { resolveCacheTtl, shouldPlaceToolBreakpoint, updateBoundaryStability } from "./lib/mimicry/cache.mjs";
@@ -66,8 +60,8 @@ import {
   buildRequestHeaders,
   buildAnthropicBetaHeader,
   parseRequestBodyMetadata,
-  detectProvider,
   extractFileIds,
+  stripStainlessHelperMarkers,
 } from "./lib/mimicry/headers.mjs";
 import {
   buildSystemPromptBlocks,
@@ -82,14 +76,14 @@ import {
   CLAUDE_CODE_IDENTITY_STRING,
   SUBAGENT_CC_ANCHOR,
 } from "./lib/mimicry/system-prompt.mjs";
+import { buildAdapterTransport, resolveAdapterEnv } from "./lib/mimicry/adapter-input.mjs";
+import { buildWireCompatibleRequest } from "./lib/mimicry/wire-compat.mjs";
 import {
-  CLAUDE_3_MODEL_RE,
   hasOneMillionContext,
   isEligibleFor1MContext,
   isOpus46Model,
   isOpus47Model,
   isOpus48Model,
-  isSonnet46Model,
 } from "./lib/mimicry/models.mjs";
 
 export { isFable5Model, isMythos5Model, isAdaptiveThinkingModel } from "./lib/mimicry/models.mjs";
@@ -241,7 +235,7 @@ async function runHaikuSessionSummarize(
   }
 }
 
-export async function AnthropicAuthPlugin({ client, project, directory, worktree, serverUrl, $ }) {
+export async function AnthropicAuthPlugin({ client }) {
   const config = loadConfig();
   _pluginConfig = config; // expose to module-level functions (cache stats, response headers)
   // QA fix H6: read emulation settings live from config instead of stale const capture
@@ -325,34 +319,6 @@ export async function AnthropicAuthPlugin({ client, project, directory, worktree
   /** @type {Map<string, number>} canonical-beta to rejected-at epoch ms */
   const sessionRejectedBetas = new Map();
 
-  // Context-hint controller (CC v2.1.110+). Mirrors real CC's `createContextHintController`:
-  // sticky on across requests until the server responds with a specific error family.
-  //   - 422/424 → apply hint compaction (clear thinking + microcompact) and retry
-  //   - 400 "Unexpected value" + "anthropic-beta" → disable for session (beta unsupported)
-  //   - 409      → disable for session (conflict)
-  //   - 529 / overloaded → disable for session (temporary overload)
-  // When disabled, we strip context-hint from betas + body on subsequent requests so
-  // we don't keep triggering the same rejection and churning the cache.
-  // Persisted disable: if a prior session saw a 400 rejecting the context-hint
-  // beta (account lacks access), skip the beta from turn 1 of every subsequent
-  // session. Delete ~/.config/opencode/context-hint-disabled.flag (or the
-  // %APPDATA%\opencode equivalent on Windows) to re-enable once access is
-  // granted. See lib/context-hint-persist.mjs.
-  const _persistedCtxHint = loadContextHintDisabledFlag();
-  const contextHintState = {
-    /** Permanently disabled for this session after a server rejection. */
-    disabled: _persistedCtxHint.disabled === true,
-    /** Number of 422/424 compactions applied this session (for telemetry). */
-    compactionsApplied: 0,
-  };
-  if (contextHintState.disabled) {
-    debugLog(
-      "context-hint: loaded persisted disable flag",
-      _persistedCtxHint.status ? `status=${_persistedCtxHint.status}` : "",
-      _persistedCtxHint.timestamp ? `ts=${new Date(_persistedCtxHint.timestamp).toISOString()}` : "",
-    );
-  }
-
   // Token economy — session state for layered compaction strategies.
   const tokenEconomySession = {
     /** When thinking was last stripped (TTL-based strategy). 0 = never. */
@@ -842,7 +808,7 @@ export async function AnthropicAuthPlugin({ client, project, directory, worktree
         `telemetry-emulation: ${fresh.telemetry?.emulate_minimal ? "on (silent observer)" : "off"}`,
         `usage-toast: ${fresh.usage_toast ? "on" : "off"}`,
         `adaptive-context: ${fresh.adaptive_context?.enabled ? `on (↑${Math.round((fresh.adaptive_context.escalation_threshold || 150000) / 1000)}K ↓${Math.round((fresh.adaptive_context.deescalation_threshold || 100000) / 1000)}K)${adaptiveContextState.active ? " [ACTIVE]" : ""}` : "off"}`,
-        `anti-verbosity: ${fresh.anti_verbosity?.enabled !== false ? "on" : "off"} (length-anchors: ${fresh.anti_verbosity?.length_anchors !== false ? "on" : "off"})`,
+        `anti-verbosity: ${fresh.anti_verbosity?.enabled !== false ? "on" : "off"}`,
       ];
       await sendCommandMessage(input.sessionID, lines.join("\n"));
       return;
@@ -1191,7 +1157,7 @@ export async function AnthropicAuthPlugin({ client, project, directory, worktree
           config.toasts.quiet = enabled;
         },
         strategy: () => {
-          const valid = ["sticky", "round-robin", "hybrid"];
+          const valid = ["sticky", "round-robin", "hybrid", "single"];
           if (valid.includes(value)) {
             saveConfig({ account_selection_strategy: value });
             strategyState.manualOverride = true;
@@ -2881,7 +2847,6 @@ export async function AnthropicAuthPlugin({ client, project, directory, worktree
                   requestInit.body,
                   _parsedBodyOnce,
                 );
-                const _reqProvider = detectProvider(requestUrl);
 
                 // --- Adaptive 1M context decision (once per logical request, not per retry) ---
                 if (!_adaptiveDecisionMade) {
@@ -2916,12 +2881,7 @@ export async function AnthropicAuthPlugin({ client, project, directory, worktree
                 const _adaptiveOverride = _adaptiveOverrideForRequest;
 
                 // Token economy config (resolved once, passed to beta builder).
-                // If the server has rejected context-hint this session, reflect it here
-                // so buildAnthropicBetaHeader (called again inside buildRequestHeaders)
-                // drops the beta on subsequent requests.
-                // Also classify the request role (CC's querySource analog) and
-                // suppress context-hint for non-main-thread requests so we don't
-                // opt subagent/title/tool one-shots into a server retry loop.
+                // Also classify the request role (CC's querySource analog).
                 const _requestRole = classifyRequestRole(_parsedBodyOnce);
                 // opencode tags subagent requests with the x-parent-session-id header
                 // (set in its request builder only when a parent session exists).
@@ -2930,10 +2890,7 @@ export async function AnthropicAuthPlugin({ client, project, directory, worktree
                 // only to pick the cheaper 5m cache tier for one-shot subagents.
                 const _isSubagent = getIncomingHeader(input, requestInit, "x-parent-session-id") != null;
                 const _baseTE = config.token_economy || {};
-                const _disableCtxHint = contextHintState.disabled || _requestRole !== "main";
-                const _tokenEconomy = _disableCtxHint
-                  ? { ..._baseTE, context_hint: false, __requestRole: _requestRole }
-                  : { ..._baseTE, __requestRole: _requestRole };
+                const _tokenEconomy = { ..._baseTE, __requestRole: _requestRole };
 
                 // Microcompact: inject clear betas at high context utilization
                 let _microcompactBetas = null;
@@ -2975,7 +2932,6 @@ export async function AnthropicAuthPlugin({ client, project, directory, worktree
                   "",
                   getSignatureEmulationEnabled(),
                   _reqModel,
-                  _reqProvider,
                   _sessionFilteredCustomBetas,
                   getEffectiveStrategy(),
                   requestUrl?.pathname,
@@ -3004,12 +2960,6 @@ export async function AnthropicAuthPlugin({ client, project, directory, worktree
                   // Merge latched betas that aren't in the current set
                   const merged = new Set(currentBetas);
                   for (const b of betaLatchState.sent) merged.add(b);
-                  // Context-hint kill switch: once server rejected it this session,
-                  // stop sending the beta (body field is gated on header, so it drops too).
-                  if (contextHintState.disabled) {
-                    merged.delete("context-hint-2026-04-09");
-                    betaLatchState.sent.delete("context-hint-2026-04-09");
-                  }
                   // Custom-beta strip kill switch: when the server rejected our custom
                   // betas (customBetasStripped latch fired), evict them from the latch so
                   // they do not re-appear on the retry attempt.
@@ -3052,13 +3002,38 @@ export async function AnthropicAuthPlugin({ client, project, directory, worktree
                 const effectiveCachePolicy = latchedCachePolicy ||
                   config.cache_policy || { ttl: "1h", ttl_supported: true };
 
+                // Single decision point for the whole request: does this turn go
+                // through the shared wire package, or through the legacy
+                // buildRequestHeaders path?
+                //
+                // Two conditions remain now that multi-provider support is gone:
+                //  1. signature emulation on — with it off the plugin emits only
+                //     3 headers and a minimal beta set, while the package always
+                //     emits the full Claude Code set;
+                //  2. the /v1/messages endpoint — the package pins
+                //     `https://api.anthropic.com/v1/messages?beta=true`, so a
+                //     /v1/messages/count_tokens turn sent through it would be
+                //     silently rewritten to the wrong endpoint.
+                //
+                // The former first-party check is now structural: the plugin only
+                // speaks to first-party Anthropic, so it is always satisfied.
+                //  3. a JSON body is actually present — the package requires
+                //     `model` and `max_tokens`, so a bodiless request must keep
+                //     using the legacy path rather than throwing INVALID_INPUT.
+                const _adapterPathname = requestUrl?.pathname;
+                const _useAdapter =
+                  getSignatureEmulationEnabled() &&
+                  (_adapterPathname === "/v1/messages" || _adapterPathname === "/messages") &&
+                  typeof requestInit.body === "string" &&
+                  requestInit.body.length > 0;
+
                 const body = transformRequestBody(
                   requestInit.body,
                   {
                     enabled: getSignatureEmulationEnabled(),
                     claudeCliVersion,
                     promptCompactionMode: getPromptCompactionMode(),
-                    provider: _reqProvider,
+                    useAdapter: _useAdapter,
                     cachePolicy: effectiveCachePolicy,
                     fastMode: config.fast_mode || false,
                     // When the account's fast pool is cooling down, suppress
@@ -3127,29 +3102,107 @@ export async function AnthropicAuthPlugin({ client, project, directory, worktree
                   }
                 }
 
-                // Build headers with the selected account's token
-                const requestHeaders = buildRequestHeaders(
-                  input,
-                  requestInit,
-                  accessToken,
-                  body,
-                  requestUrl,
-                  {
-                    enabled: getSignatureEmulationEnabled(),
-                    claudeCliVersion,
-                    customBetas: _sessionFilteredCustomBetas,
-                    strategy: getEffectiveStrategy(),
-                    sessionId: signatureSessionId,
-                  },
-                  _adaptiveOverride,
-                  _tokenEconomy,
-                );
+                // Build headers with the selected account's token.
+                //
+                // Adapter path: the shared package composes the headers AND
+                // rebuilds the body (canonical system prefix, metadata, beta
+                // header). Legacy path: unchanged, byte for byte.
+                //
+                // The URL deliberately stays whatever transformRequestUrl already
+                // produced. `built.url` is the package's pinned
+                // `https://api.anthropic.com/v1/messages?beta=true`, which would
+                // override a custom ANTHROPIC_BASE_URL or proxy endpoint.
+                const _adapterSignature = {
+                  enabled: getSignatureEmulationEnabled(),
+                  claudeCliVersion,
+                  customBetas: _sessionFilteredCustomBetas,
+                  strategy: getEffectiveStrategy(),
+                  sessionId: signatureSessionId,
+                };
+
+                let requestHeaders;
+                let adapterBody;
+                let legacyStrippedBody;
+                if (_useAdapter) {
+                  const _adapterResult = buildAdapterTransport({
+                    input,
+                    requestInit,
+                    accessToken,
+                    requestUrl,
+                    provider: "anthropic",
+                    clientRequestId: randomUUID(),
+                    signature: _adapterSignature,
+                    identity: {
+                      persistentUserId: signatureUserId,
+                      accountId: getAccountIdentifier(account),
+                    },
+                    adaptiveOverride: _adaptiveOverride,
+                    tokenEconomy: _tokenEconomy,
+                    // Role inputs for the identity-block cache ttl: the adapter
+                    // re-runs the same resolveCacheTtl the body transform used,
+                    // so system[1] cannot carry a ttl the rest of the request
+                    // does not.
+                    cachePolicy: effectiveCachePolicy,
+                    requestRole: _requestRole,
+                    isSubagent: _isSubagent,
+                    // Derived from the PRE-transform body on purpose: the lean
+                    // gate in buildSystemPromptBlocks tests the incoming system
+                    // blocks, and by now the title-generator swap has already
+                    // rewritten them in `body`.
+                    isTitleGenerator: _parsedBodyOnce
+                      ? isTitleGeneratorSystemBlocks(normalizeSystemTextBlocks(_parsedBodyOnce.system))
+                      : false,
+                    body,
+                    env: resolveAdapterEnv(process.env),
+                    platform: process.platform,
+                    arch: process.arch,
+                    nodeVersion: process.version,
+                  });
+                  if (_adapterResult.applicable) {
+                    const built = await buildWireCompatibleRequest(body, _adapterResult.transport);
+                    requestHeaders = built.headers;
+                    adapterBody = built.body;
+                  } else {
+                    debugLog(`adapter not applicable (${_adapterResult.reason}); using the legacy request path`);
+                  }
+                }
+
+                if (!requestHeaders) {
+                  // Legacy path, and the fallback whenever the adapter declined:
+                  // a bodiless request, or a transport the translation refused.
+                  requestHeaders = buildRequestHeaders(
+                    input,
+                    requestInit,
+                    accessToken,
+                    body,
+                    requestUrl,
+                    _adapterSignature,
+                    _adaptiveOverride,
+                    _tokenEconomy,
+                  );
+                  // buildRequestHeaders just derived x-stainless-helper from the
+                  // markers. They are an internal signal — the Anthropic API has
+                  // never known those keys — so they are dropped from the body now
+                  // that the header exists. The adapter path does the same strip in
+                  // buildWireCompatibleRequest; this is the legacy half of it.
+                  if (typeof body === "string" && body.length > 0) {
+                    try {
+                      const _strippable = JSON.parse(body);
+                      if (stripStainlessHelperMarkers(_strippable?.tools, _strippable?.messages) > 0) {
+                        legacyStrippedBody = JSON.stringify(_strippable);
+                      }
+                    } catch (error) {
+                      // A non-JSON body carries no markers to strip; forward it untouched.
+                      debugLog(`stainless-helper strip skipped (unparsable body): ${error.message}`);
+                    }
+                  }
+                }
                 // cch stays as the static "00000" placeholder — cc-107 and cc-108
                 // JS bundles both emit `cch=00000;` unconditionally in the billing
                 // header. The Bun-binary Attestation.zig xxHash64 mechanism lives in
                 // a SEPARATE header path, not in this body field. Re-hashing here
                 // mutates system[0] each turn, invalidating the prompt cache.
-                const finalBody = body;
+                const finalBody = adapterBody ?? legacyStrippedBody ?? body;
 
                 const correlationId = createDebugCorrelationId();
 
@@ -3520,76 +3573,35 @@ export async function AnthropicAuthPlugin({ client, project, directory, worktree
                     // Ignore read errors in debug logging path.
                   }
 
-                  // Context-hint protocol (CC v2.1.110+): detect server rejections and
-                  // apply the same disable/compact semantics as real Claude Code.
-                  //   - 400 w/ "Unexpected value" + "anthropic-beta" → beta unsupported, disable
-                  //   - 409 / 529 / overloaded                      → temporary, disable
-                  //   - 422 / 424                                    → compact messages (strip
-                  //     thinking blocks + old tool_result content) and retry ONCE.
-                  // Disable is permanent for the session; the beta latch strips it from future
-                  // requests so we don't keep triggering the same rejection.
-                  if (!contextHintState.disabled) {
-                    if (
-                      response.status === 400 &&
-                      errorBody &&
-                      errorBody.includes("Unexpected value") &&
-                      errorBody.includes("anthropic-beta") &&
-                      errorBody.includes("context-hint")
-                    ) {
-                      contextHintState.disabled = true;
-                      betaLatchState.dirty = true;
-                      // Persist across sessions: a 400 "Unexpected value" on the
-                      // context-hint beta means the account lacks access to the
-                      // beta entirely. Re-attempting next session would burn
-                      // another turn to the same rejection.
-                      saveContextHintDisabledFlag({
-                        reason: "beta_unsupported_400",
-                        status: 400,
-                      });
-                      debugLog("context-hint: beta rejected by server (400), disabling + persisting");
-                      // Retry without the beta. The latch above drops the header
-                      // and the body field on the rebuilt request.
-                      attempt--;
-                      continue;
-                    } else if (response.status === 409) {
-                      contextHintState.disabled = true;
-                      betaLatchState.dirty = true;
-                      debugLog("context-hint: 409 conflict, disabling for session");
-                      attempt--;
-                      continue;
-                    } else if (response.status === 529 && errorBody && errorBody.includes("context_hint")) {
-                      contextHintState.disabled = true;
-                      betaLatchState.dirty = true;
-                      debugLog("context-hint: 529 overloaded referencing hint, disabling for session");
-                      attempt--;
-                      continue;
-                    } else if (
-                      (response.status === 422 || response.status === 424) &&
-                      !requestInit._contextHintCompactAttempted
-                    ) {
-                      try {
-                        const hintBody = JSON.parse(requestInit.body);
-                        if (Array.isArray(hintBody.messages)) {
-                          const compacted = applyContextHintCompaction(hintBody.messages);
-                          if (compacted.changed) {
-                            hintBody.messages = compacted.messages;
-                            requestInit.body = JSON.stringify(hintBody);
-                            _parsedBodyOnce = null;
-                            requestInit._contextHintCompactAttempted = true;
-                            contextHintState.compactionsApplied += 1;
-                            attempt--;
-                            toast(
-                              `⚙ Context hint compaction (${response.status}) — cleared ${compacted.stats.thinkingCleared} thinking / ${compacted.stats.toolResultsCleared} tool results`,
-                              "info",
-                              { debounceKey: "context-hint-compact" },
-                            ).catch(() => {});
-                            debugLog("context-hint: applied compaction on status", response.status, compacted.stats);
-                            continue;
-                          }
+                  // Compact-and-retry on 422/424: strip thinking blocks + old tool_result
+                  // content and retry ONCE. This reacts to the response status alone, so it
+                  // stays live even though the plugin no longer announces the
+                  // context-hint-2026-04-09 beta nor the paired body field.
+                  if (
+                    (response.status === 422 || response.status === 424) &&
+                    !requestInit._contextHintCompactAttempted
+                  ) {
+                    try {
+                      const hintBody = JSON.parse(requestInit.body);
+                      if (Array.isArray(hintBody.messages)) {
+                        const compacted = applyContextHintCompaction(hintBody.messages);
+                        if (compacted.changed) {
+                          hintBody.messages = compacted.messages;
+                          requestInit.body = JSON.stringify(hintBody);
+                          _parsedBodyOnce = null;
+                          requestInit._contextHintCompactAttempted = true;
+                          attempt--;
+                          toast(
+                            `⚙ Context hint compaction (${response.status}) — cleared ${compacted.stats.thinkingCleared} thinking / ${compacted.stats.toolResultsCleared} tool results`,
+                            "info",
+                            { debounceKey: "context-hint-compact" },
+                          ).catch(() => {});
+                          debugLog("context-hint: applied compaction on status", response.status, compacted.stats);
+                          continue;
                         }
-                      } catch {
-                        // fall through to normal error handling
                       }
+                    } catch {
+                      // fall through to normal error handling
                     }
                   }
 
@@ -5375,7 +5387,6 @@ function writeCacheStatsFile(usage, model, hitRate) {
         cache_ttl: _pluginConfig?.cache_policy?.ttl ?? "1h",
         boundary_marker: _pluginConfig?.cache_policy?.boundary_marker ?? false,
         anti_verbosity: _pluginConfig?.anti_verbosity?.enabled !== false,
-        length_anchors: _pluginConfig?.anti_verbosity?.length_anchors !== false,
       },
       timestamp: new Date().toISOString(),
     };
@@ -5572,34 +5583,6 @@ process.once("beforeExit", _beforeExitHandler);
 // Request building helpers (extracted from original fetch interceptor)
 // ---------------------------------------------------------------------------
 
-// cch attestation: RE-ENABLED with xxHash64 (matching Bun binary's Attestation.zig).
-// The compiled Bun binary computes cch dynamically: xxHash64(body, seed) & 0xFFFFF.
-// Captured real CC v2.1.107 request shows cch=6d00f (5-hex-char, 20-bit masked hash).
-// Seed extracted from binary: 0x6E52736AC806831E (unchanged since v2.1.96).
-const CCH_SEED = 0x6e52736ac806831en; // BigInt — Attestation.zig seed
-
-/** @type {null | ((buf: Uint8Array, seed: bigint) => bigint)} */
-let _xxh64Raw = null;
-const _xxhashReady = xxhashInit().then((h) => {
-  _xxh64Raw = h.h64Raw;
-});
-
-/**
- * Compute and replace the cch=00000 placeholder in the serialized body with
- * xxHash64(body, seed) & 0xFFFFF, matching the Bun binary's native attestation.
- * @param {string} body - Serialized JSON body
- * @returns {Promise<string>} Body with cch replaced
- */
-async function computeAndReplaceCCH(body) {
-  if (typeof body !== "string" || !body.includes("cch=00000")) return body;
-  await _xxhashReady;
-  if (!_xxh64Raw) return body; // fallback: send as-is if wasm failed to load
-  const bodyBytes = Buffer.from(body, "utf-8");
-  const hash = _xxh64Raw(bodyBytes, CCH_SEED);
-  const cch = (hash & 0xfffffn).toString(16).padStart(5, "0");
-  return body.replace("cch=00000", `cch=${cch}`);
-}
-
 /**
  * Extract the text content of the first user message for billing hash computation.
  * @param {any[] | undefined} messages
@@ -5700,13 +5683,6 @@ function shouldDebugSystemPrompt() {
  * @returns {Record<string, string>}
  */
 
-/**
- * @returns {string}
- */
-function getClaudeEntrypoint() {
-  return process.env.CLAUDE_CODE_ENTRYPOINT || "cli";
-}
-
 /**
  * @param {string | undefined} model
  * @returns {string | undefined}
@@ -5733,15 +5709,6 @@ function logTransformedSystemPrompt(body) {
  * @returns {boolean}
  */
 
-/**
- * @param {string | undefined} body
- * @returns {boolean}
- */
-function supportsThinking(model) {
-  if (!model) return true;
-  return /claude|sonnet|opus|haiku/i.test(model);
-}
-
 /**
  * @param {string | undefined} body
  * @returns {boolean}
@@ -5830,19 +5797,6 @@ function getAccountIdentifier(account) {
  * @returns {{user_id: string}}
  */
 
-/**
- * Return the cache_control object appropriate for the given cache policy.
- * @param {{ttl: string, ttl_supported: boolean, boundary_marker?: boolean} | undefined} cachePolicy
- * @returns {{type: string, ttl?: string}}
- */
-function getCacheControlForPolicy(cachePolicy) {
-  if (!cachePolicy) return { type: "ephemeral" };
-  if (cachePolicy.ttl === "off" || cachePolicy.ttl_supported === false) {
-    return { type: "ephemeral" };
-  }
-  return { type: "ephemeral", ttl: cachePolicy.ttl };
-}
-
 /**
  * @param {string} incomingBeta
  * @param {boolean} signatureEnabled
@@ -5866,18 +5820,6 @@ function getCacheControlForPolicy(cachePolicy) {
 
 /** @typedef {'low' | 'medium' | 'high'} ThinkingEffort */
 
-/**
- * Map budgetTokens to an effort level.
- * Used when an Opus 4.6 request arrives with the legacy budgetTokens shape.
- * @param {number} budgetTokens
- * @returns {ThinkingEffort}
- */
-function budgetTokensToEffort(budgetTokens) {
-  if (budgetTokens <= 1024) return "low";
-  if (budgetTokens <= 8000) return "medium";
-  return "high";
-}
-
 // QA fix L3: budgetTokensToEffort() removed — dead code, never called
 // QA fix L4: isValidEffort() removed — dead code, never called
 
@@ -6068,19 +6010,6 @@ function isEventStreamResponse(response) {
   return contentType.toLowerCase().includes("text/event-stream");
 }
 
-/**
- * Build user-facing switch reason text for account-specific errors.
- * @param {number} status
- * @param {import('./lib/backoff.mjs').RateLimitReason} reason
- * @returns {string}
- */
-function formatSwitchReason(status, reason) {
-  if (reason === "AUTH_FAILED") return "auth failed";
-  if (status === 403 && reason === "QUOTA_EXHAUSTED") return "permission denied";
-  if (reason === "QUOTA_EXHAUSTED") return "quota exhausted";
-  return "rate-limited";
-}
-
 // ---------------------------------------------------------------------------
 // Token refresh (per-account)
 // ---------------------------------------------------------------------------
@@ -6153,7 +6082,7 @@ function applyDiskAuthIfFresher(account, diskAuth, options = {}) {
  * @returns {Promise<string>} The new access token
  * @throws {Error} If refresh fails
  */
-async function refreshAccountToken(account, client, source = "foreground", { onTokensUpdated } = {}) {
+async function refreshAccountToken(account, client, _source = "foreground", { onTokensUpdated } = {}) {
   // CC-sourced accounts must NEVER enter the OAuth HTTP refresh flow.
   // Instead, re-read credentials from the CC source.  If they're still
   // expired, let the caller handle it (the account will be skipped).

package/lib/backoff.mjs

@@ -134,7 +134,7 @@ function extractErrorSignals(body) {
  * @returns {boolean}
  */
 function bodyHasAccountError(body) {
-  const { errorType, message, text } = extractErrorSignals(body);
+  const { errorType, message } = extractErrorSignals(body);
 
   const typeSignals = [
     "rate_limit",

package/lib/cc-credentials.mjs

@@ -84,7 +84,7 @@ function readKeychainService(service) {
     }).trim();
 
     return parseCCCredentialData(raw, "cc-keychain", `keychain:${service}`);
-  } catch (err) {
+  } catch {
     // Exit code 36 = user denied, 44 = not found, 128 = killed
     return null;
   }