@askalf/dario - npm Package Compare versions

Comparing version 5.4.0 to 5.4.1

dist/cc-template.d.ts

@@ -174,2 +174,11 @@ /**
 /**
+ * Overlay a captured template's `header_values` onto the outbound header record,
+ * skipping the keys that must never be replayed.
+ *
+ * Extracted as a pure function (like `orderHeadersForOutbound`) so the skip
+ * behaviour is unit-testable without spinning up the proxy. Mutates and returns
+ * `headers` for call-site convenience.
+ */
+export declare function overlayTemplateHeaderValues(headers: Record<string, string>, headerValues: Record<string, string> | undefined): Record<string, string>;
+/**
  * Apply the live template's captured header_order to an outbound header
@@ -176,0 +185,0 @@ * record. Returns a HeadersInit in one of two forms:

dist/live-fingerprint.js

@@ -695,2 +695,19 @@ /**
     'x-anthropic-billing-header',
+    // HOST-SPECIFIC (dario#854 fallout). These describe the machine that ran the
+    // capture, not CC's wire shape, so replaying them makes every consumer of a
+    // baked template announce the BAKE host's platform instead of its own. The
+    // proxy already computes both correctly per-process (OS_NAME / arch), and the
+    // overlay used to clobber those with the captured values.
+    //
+    // Found 2026-07-25: the bundled template had been baked on Windows for
+    // several releases (#820/#828/#840/#849/#851 -> x-stainless-os: Windows,
+    // 30 tools incl. PowerShell), while cc-drift-template-watch runs its live
+    // capture every 30 min on the Linux Hetzner runner. So the Linux box served
+    // `x-stainless-os: Windows`, and the watch saw permanent drift against a
+    // bundle it could never match -- auto-rebaking to Linux (#852), which the next
+    // Windows-side bake (#854) would flip straight back. Excluding these ends
+    // both the fidelity bug and the rebake ping-pong: the bake host stops
+    // mattering for these keys.
+    'x-stainless-os',
+    'x-stainless-arch',
 ]);
@@ -697,0 +714,0 @@ function extractStaticHeaderValues(headers) {

package.json

 {
   "name": "@askalf/dario",
-  "version": "5.4.0",
+  "version": "5.4.1",
   "description": "Use your Claude Pro/Max subscription in any tool — Cursor, Cline, Aider, the Agent SDK, your scripts — at subscription pricing, not per-token API bills. One local Anthropic + OpenAI-compatible endpoint.",
@@ -5,0 +5,0 @@ "type": "module",

New alerts

AI-detected potential code anomaly

Supply chain risk

AI has identified unusual behaviors that may pose a security risk.

URL strings

Supply chain risk

Package contains fragments of external URLs or IP addresses, which the package may be accessing at runtime.

Fixed alerts

AI-detected potential code anomaly

Supply chain risk

AI has identified unusual behaviors that may pose a security risk.

URL strings

Supply chain risk

Package contains fragments of external URLs or IP addresses, which the package may be accessing at runtime.

Improved metrics

Total package byte prevSize

1472954

0.26%

Lines of code

28056

0.25%

No dependency changes