@askalf/dario - npm Package Compare versions

Comparing version 5.1.1 to 5.2.0

dist/cc-template.d.ts

@@ -459,2 +459,24 @@ /**
 /**
+ * The cache control the CLIENT asked for, read from its own stamps — or
+ * CC_CACHE_CONTROL when it stamped nothing.
+ *
+ * Real CC implements the subscription-vs-overage TTL selection itself:
+ * on included subscription usage it sends `ttl:'1h'` on every breakpoint
+ * plus `extended-cache-ttl-2025-04-11` in `anthropic-beta`, and drops to
+ * bare 5m stamps when drawing on usage credits (loopback capture of CC
+ * v2.1.209 under subscription OAuth, 2026-07-14 — dario#678; docs:
+ * code.claude.com/docs/en/prompt-caching#cache-lifetime). The client's
+ * stamps are therefore the billing-correct answer, and dario mirrors them
+ * instead of overwriting with the 5m default — deleting them forced every
+ * proxied subscription session onto a 5m cache, so any >5-minute pause
+ * re-paid cache creation on the full prefix.
+ *
+ * The ttl is mirrored only when the client's `anthropic-beta` also carries
+ * `extended-cache-ttl-` (CC always sends the pair together); a ttl stamp
+ * without the enabling beta is not a shape real CC produces, and forwarding
+ * half of it risks an upstream 400. DARIO_CACHE_TTL_5M=1 restores the
+ * pre-fix behavior (always bare 5m) as the operator escape hatch.
+ */
+export declare function effectiveCacheControl(clientBody: Record<string, unknown>, clientBeta?: string): CacheControl;
+/**
  * Place CC-style prompt-cache breakpoints on the conversation. The system
@@ -461,0 +483,0 @@ * prompt is already cached at build time (2 system breakpoints); this adds a

package.json

 {
   "name": "@askalf/dario",
-  "version": "5.1.1",
+  "version": "5.2.0",
   "description": "Use your Claude Pro/Max subscription in any tool — Cursor, Cline, Aider, the Agent SDK, your scripts — at subscription pricing, not per-token API bills. One local Anthropic + OpenAI-compatible endpoint.",
@@ -5,0 +5,0 @@ "type": "module",

New alerts

AI-detected potential malware

Supply chain risk

AI has identified this package as malware. This is a strong signal that the package may be malicious.

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

AI-detected potential code anomaly

Supply chain risk

AI has identified unusual behaviors that may pose a security risk.

URL strings

Supply chain risk

Package contains fragments of external URLs or IP addresses, which the package may be accessing at runtime.

Fixed alerts

AI-detected potential malware

Supply chain risk

AI has identified this package as malware. This is a strong signal that the package may be malicious.

AI-detected potential code anomaly

Supply chain risk

AI has identified unusual behaviors that may pose a security risk.

URL strings

Supply chain risk

Package contains fragments of external URLs or IP addresses, which the package may be accessing at runtime.

Improved metrics

Total package byte prevSize

1372797

0.42%

Lines of code

26595

0.37%

Worsened metrics

Number of low supply chain risk alerts

115

0.88%

No dependency changes