opencode-anthropic-multi-account 0.2.104 → 0.2.105

package/dist/{chunk-R4DIX7J7.js → chunk-HTND2R24.js}

@@ -7,6 +7,7 @@ import { spawn } from "child_process";
 import { createServer } from "http";
 import { basename, dirname as dirname2, join as join2 } from "path";
 import {
+  chmodSync,
   existsSync as existsSync2,
   readFileSync,
   renameSync
@@ -2297,6 +2298,18 @@ function getOsName() {
   return "Linux";
 }
 
+// ../providers/claude-code/src/capture-provenance.ts
+import { randomUUID as randomUUID2 } from "crypto";
+function createClaudeCodeCaptureNonce() {
+  return `kyoli-capture-${randomUUID2()}`;
+}
+function isClaudeCodeCaptureRequest(request, nonce) {
+  if (request.method !== "POST" || !request.url || !nonce) {
+    return false;
+  }
+  return request.url.split("?", 1)[0] === `/${nonce}/v1/messages`;
+}
+
 // ../providers/claude-code/src/fingerprint-capture.ts
 var CURRENT_SCHEMA_VERSION = 2;
 var LIVE_TTL_MS = 24 * 60 * 60 * 1e3;
@@ -2419,6 +2432,13 @@ function quarantineCorruptCache(cachePath) {
 }
 function readLiveCacheSync(sourceOverride = "cached") {
   const cachePath = getCachePath();
+  if (process.platform !== "win32") {
+    try {
+      chmodSync(cachePath, 384);
+    } catch {
+      return null;
+    }
+  }
   try {
     const parsed = JSON.parse(readFileSync(cachePath, "utf8"));
     if (!isTemplateData(parsed)) {
@@ -2461,7 +2481,7 @@ async function atomicWriteJson(targetPath, payload) {
   );
   await mkdir2(dirname2(targetPath), { recursive: true });
   await writeFile2(tmpPath, `${JSON.stringify(payload, null, 2)}
-`, "utf8");
+`, { encoding: "utf8", mode: 384 });
   await rename(tmpPath, targetPath);
 }
 async function writeLiveCache(template2) {
@@ -2664,8 +2684,14 @@ async function captureLiveTemplateAsync(timeoutMs = DEFAULT_CAPTURE_TIMEOUT_MS,
     return null;
   }
   let capturedRequest = null;
+  const captureNonce = createClaudeCodeCaptureNonce();
   const responseBody = createSseResponseBody();
   const server = createServer(async (req, res) => {
+    if (!isClaudeCodeCaptureRequest(req, captureNonce)) {
+      res.writeHead(404, { "content-type": "application/json" });
+      res.end('{"error":"not_found"}');
+      return;
+    }
     try {
       const bodyText = await captureRequestBody(req);
       const parsedBody = JSON.parse(bodyText);
@@ -2698,7 +2724,7 @@ async function captureLiveTemplateAsync(timeoutMs = DEFAULT_CAPTURE_TIMEOUT_MS,
         reject(new Error("capture server failed to bind"));
       });
     });
-    const baseUrl = `http://${LOOPBACK_HOST}:${address.port}`;
+    const baseUrl = `http://${LOOPBACK_HOST}:${address.port}/${captureNonce}`;
     await runClaudeCapture({
       binaryPath,
       baseUrl,
@@ -2900,4 +2926,4 @@ export {
   setFingerprintCaptureTestOverridesForTest,
   resetFingerprintCaptureForTest
 };
-//# sourceMappingURL=chunk-R4DIX7J7.js.map
+//# sourceMappingURL=chunk-HTND2R24.js.map