@crvouga/dev-fleet 0.0.0-stage → 0.1.0

package/.mise/locks/npm-wrangler/4.156.0/package.json

@@ -0,0 +1,7 @@
+{
+  "name": "mise-npm-install",
+  "private": true,
+  "dependencies": {
+    "wrangler": "4.156.0"
+  }
+}

package/.mise/locks/npm-yarnpkg-cli-dist/4.18.1/aube-lock.yaml

@@ -0,0 +1,24 @@
+lockfileVersion: '9.0'
+
+settings:
+  autoInstallPeers: true
+  excludeLinksFromLockfile: false
+
+importers:
+
+  .:
+    dependencies:
+      '@yarnpkg/cli-dist':
+        specifier: 4.18.1
+        version: 4.18.1
+
+packages:
+
+  '@yarnpkg/cli-dist@4.18.1':
+    resolution: {integrity: sha512-EH+A4TxAtBWXKE0DGQxW9Bo9crXHLJ73mfxjTQJuv8XonNWWTpei8BQ5JjczHJNU9GROTycwMFn8iOvRIZXUcA==}
+    engines: {node: '>=18.12.0'}
+    hasBin: true
+
+snapshots:
+
+  '@yarnpkg/cli-dist@4.18.1': {}

package/.mise/locks/npm-yarnpkg-cli-dist/4.18.1/package.json

@@ -0,0 +1,7 @@
+{
+  "name": "mise-npm-install",
+  "private": true,
+  "dependencies": {
+    "@yarnpkg/cli-dist": "4.18.1"
+  }
+}

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 dev-fleet contributors
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -1,3 +1,158 @@
-# Temporary Holding Version
+# dev-fleet
 
-This version is a temporary placeholder for this package. An operational version to replace this has been submitted for review and is awaiting a staged release.
+Keeps a set of development machines in sync: one **manager** and many
+**workers**. One command, `fleet-sync`, brings every machine to the same
+pinned tools, the same coding agents signed in through one proxy, the same
+uptime policy and the same monitoring. Adding or removing a machine is one
+entry in `fleet.json`.
+
+Status: extracted from a working three-machine fleet and in daily use there.
+It has not yet been set up from nothing by a second person; expect rough edges
+and read [what is assumed](#what-it-assumes) first.
+
+## What it assumes
+
+dev-fleet is opinionated. These are part of it, not options:
+
+- The **manager** is a macOS machine. It runs `fleet-sync` and hosts the
+  shared services (the CLI proxy and the monitoring hub) in Docker Desktop.
+- **Workers** are Ubuntu 26.04 machines reached over SSH. They are stateless:
+  everything on them is rebuilt from Git and your secrets.
+- Machines reach each other over **Tailscale**.
+- Coding agents (Claude Code, Codex, Grok, OpenCode, Antigravity) run through
+  **CLIProxyAPI** on the manager, and **T3 Code** lists one provider per
+  account signed in on the proxy.
+- Machine policy is **Ansible** (`ansible/`), tool versions are **mise** pins
+  (`mise.toml`, `mise.lock`), monitoring is **Beszel**.
+
+What it does not assume is anything about you: no account, hostname, domain,
+tailnet or repository is written in this code. They live in your `fleet.json`.
+
+## Quickstart
+
+On the manager (macOS, with Git, Docker Desktop and Tailscale signed in):
+
+```sh
+git clone https://github.com/crvouga/dev-fleet.git ~/.local/share/dev-fleet/source
+cd ~/.local/share/dev-fleet/source
+bash bootstrap/bootstrap.sh          # installs the pinned toolchain with mise
+
+mkdir -p ~/.config/dev-fleet
+cp examples/fleet.json ~/.config/dev-fleet/fleet.json
+$EDITOR ~/.config/dev-fleet/fleet.json   # your machines, endpoints and secrets
+
+export DEVFLEET_REPO=$PWD
+sh bootstrap/fleet-manager-run.sh "$(git rev-parse HEAD)" --dry-run   # preview
+sh bootstrap/fleet-manager-run.sh "$(git rev-parse HEAD)"             # apply
+```
+
+`fleet-sync` converges the manager first, then every worker over SSH: it sends
+the pinned revision and your configuration, installs the toolchain, applies
+the Ansible policy and verifies the result. It prints one table and writes a
+full JSON report.
+
+Most people keep `fleet.json` in their own repository and point at it:
+
+```sh
+DEVFLEET_CONFIG=/path/to/your/fleet.json sh bootstrap/fleet-manager-run.sh REVISION
+```
+
+Pin `REVISION` to a full commit SHA of this repository; that is your version.
+
+## Run it from npm
+
+The CLI is also published as `@crvouga/dev-fleet`, for any machine or project
+that has Node:
+
+```sh
+npx @crvouga/dev-fleet commands --json
+npx @crvouga/dev-fleet fleet-status --local
+```
+
+`fleet-sync` still runs from a clone, because it pins a git revision. See
+[releasing](docs/releasing.md) for how versions are published.
+
+## Add or remove a machine
+
+1. Set up SSH from the manager to the new Ubuntu box (a non-root user with
+   sudo) and join it to your tailnet.
+2. Add it under `workers` in `fleet.json`:
+
+   ```json
+   {
+     "id": "worker-three",
+     "ssh": "worker-three",
+     "os": "linux",
+     "network": {
+       "tailscaleName": "worker-three.tail0a1b2c.ts.net",
+       "sshPort": 22,
+       "user": "dev",
+       "t3Port": 3773
+     }
+   }
+   ```
+
+3. Run `fleet-sync`. A box that has only sudo is enough: the opt-in test
+   `bun ansible/ubuntu/tests/fresh-box.ts` proves that against a bare
+   container.
+
+Remove a machine by deleting its entry.
+
+## Configuration
+
+`fleet.json` is validated by [`schema/fleet.schema.json`](schema/fleet.schema.json);
+[`examples/fleet.json`](examples/fleet.json) is a complete example.
+
+| Block      | What it declares                                                    |
+| ---------- | ------------------------------------------------------------------- |
+| `source`   | The Git repository nodes accept code from (this one, or your fork)  |
+| `secrets`  | Where secrets are kept: `env`, `file`, `sops` or `vault`            |
+| `manager`  | The one macOS manager                                               |
+| `workers`  | The Ubuntu workers                                                  |
+| `services` | The proxy's public origin and the monitoring dashboard and accounts |
+| `worker`   | Policy every worker must meet                                       |
+
+Secrets are asked for by purpose (`proxy-client-key`,
+`monitoring-account-password`, `monitoring-tunnel-token`,
+`proxy-tunnel-token`); see [`src/secrets.ts`](src/secrets.ts).
+
+## Known limits
+
+- Each worker's own login and renewal, and the proxy's backup and recovery,
+  are implemented for the **`vault`** secrets provider only. With `env`, `file`
+  or `sops` the fleet's three shared secrets are read, but those two features
+  are not available yet.
+- State on machines still uses the historical `personal` prefix
+  (`~/.local/share/personal/fleet`, `/etc/personal-fleet`, unit names). It
+  works, and renaming it needs a migration.
+- The manager is a Mac host. There is no container image of the manager.
+- The reference documents under `docs/` were written for the fleet this came
+  from and are being revised.
+
+## Repository layout
+
+| Path         | What                                                              |
+| ------------ | ----------------------------------------------------------------- |
+| `src/`       | Inventory, orchestration, verification, the report; `src/cli` CLI |
+| `ansible/`   | Machine policy: `ubuntu/`, `macos/`, `monitoring/`                |
+| `agents/`    | Agent launchers T3 runs, and their registry                       |
+| `cliproxy/`  | The CLIProxyAPI service: install, audit, backup, model health     |
+| `bootstrap/` | Toolchain bootstrap and the manager and worker entry scripts      |
+| `schema/`    | JSON schemas for `fleet.json` and the private roster              |
+| `examples/`  | A complete example configuration                                  |
+
+## Develop
+
+```sh
+bash bootstrap/bootstrap.sh
+bun install --frozen-lockfile
+bun run check
+```
+
+`bun run check` runs formatting, typecheck, lint, the TypeScript tests and the
+proxy package's Python tests. Tests run against `examples/fleet.json` and
+never contact a real machine.
+
+## License
+
+MIT. See [LICENSE](LICENSE).

package/agents/antigravity-proxy.ts

@@ -0,0 +1,3 @@
+#!/usr/bin/env bun
+import { runManagedProxy } from './managed-proxy';
+await runManagedProxy('antigravity');

package/agents/audit.md

@@ -0,0 +1,89 @@
+# Agent configuration audit and ownership
+
+Audited against the checked-in tool pins and client source, installed T3 source
+`322f6544dfad0a3c8a0c8cbecf2c7f7874b14268`, and linked vendor documentation.
+This is a compatibility inventory, not a claim that all desktop apps or fleet
+nodes were inspected or authenticated. The execution host exposes Codex, Claude
+and T3 on PATH; the mise catalog additionally includes Gemini, Copilot and OpenCode.
+Cursor and Antigravity are desktop prerequisites, not mise-managed binaries.
+
+| Source/owner                                                           | Installed destination                                                   | Scope                                                                                            |
+| ---------------------------------------------------------------------- | ----------------------------------------------------------------------- | ------------------------------------------------------------------------------------------------ |
+| `mise.toml`, `mise.lock`, `.mise/locks/`; bootstrap                    | Global mise config, shims and installed tools                           | Versions; no authentication                                                                      |
+| `agents/registry.json`; dev-fleet                                      | Dedicated profile outputs described below                               | Endpoint, models, secret references, node model overrides                                        |
+| `cli/lib/agents/render.ts`; dev-fleet                                  | `ROOT/NODE/codex/{direct,proxy}/config.toml`                            | Separate CODEX_HOME, Responses HTTP/SSE provider declaration                                     |
+| same                                                                   | `ROOT/NODE/claude/{direct,proxy}/settings.json`                         | Passed using native --settings; process environment routes proxy                                 |
+| same                                                                   | `ROOT/NODE/opencode/{direct,proxy}/opencode.json`                       | OPENCODE_CONFIG, environment key placeholder                                                     |
+| same                                                                   | `ROOT/NODE/gemini/direct/.gemini/settings.json`                         | GEMINI_CLI_HOME is the profile root; independent native login                                    |
+| `cli/lib/agents/converge.ts`; dev-fleet                                | Each profile's receipt.json; ROOT/backups                               | Nonsecret fingerprints/revision; private migration backups                                       |
+| Existing `opencode/provider-secrets.ts`, OpenRouter package; dev-fleet | Platform OpenCode directory/opencode.json                               | Vault provider catalog, OpenRouter auto policy; existing sync embeds private keys with mode 0600 |
+| Existing OpenCode plugins/bin and cli/lib/links.ts; dev-fleet          | Platform OpenCode plugins/bin, tui.json, notifier files                 | Notification plugins, sounds, platform-derived app paths                                         |
+| `agents/codex-proxy.ts`; dev-fleet                                     | T3 binaryPath points directly into reviewed Git checkout                | Runtime Vault injection; WS_AGENT_NODE is a declared machine value                               |
+| `agents/t3.json`; personal T3 reconciler                               | T3CODE_HOME/userdata/settings.json                                      | Owned provider instances only; plan/apply/import/cleanup and private ownership state             |
+| `../fleet/definition.json`, cli/lib/net; dev-fleet                     | Managed SSH block and VS Code Remote-SSH settings                       | Existing machine aliases, OS/user/identity public paths and T3 ports; no private keys            |
+| `.agents/commands/*.md`; agents:sync                                   | Harness command symlinks                                                | Canonical agent commands; do not edit copies                                                     |
+| Root AGENTS.md, CLAUDE.md, GEMINI.md, .github/copilot-instructions.md  | Repository instruction discovery                                        | Same canonical repository rules                                                                  |
+| Existing cliproxy clients/bootstrap.py and launcher.py                 | ~/.config/cliproxy-fleet; ~/.local/bin/*-fleet                          | Legacy opt-in migration boundary; native settings preserved                                      |
+| Fleet configure                                                        | checkout/node_modules/.fleet-revisions/SHA; .fleet-configuration/*.json | Pinned Git deployment worktrees and per-selection rollout receipts                               |
+
+ROOT is `~/.config/personal/agents` on macOS/Linux and
+`%USERPROFILE%\AppData\Local\personal\agents` on native Windows. Home and platform
+are documented machine-derived inputs. The explicit `--node` ID selects checked-in
+`nodes[ID][TOOL].direct` or `.proxy` model overrides over shared defaults. The local
+fleet roster contains connection aliases/paths, not configuration values or secrets.
+
+The registry is the portable profile source. Native project settings, organization
+policies, MCP servers, skills and plugins can still affect tools through their
+vendor precedence. These are not silently imported from a home directory. Existing
+home MCP definitions, user skills, marketplace caches and desktop settings remain
+unmanaged until reviewed and added to an appropriate canonical repository source.
+Do not treat the registry as a complete export of arbitrary installed applications.
+Usage tracking in CLIProxyAPI/T3 is independent from the inference route.
+
+## Compatibility and authentication evidence
+
+- [Codex configuration](https://learn.chatgpt.com/docs/config-file/config-reference):
+  CODEX_HOME, model_providers, env_key and wire_api. Direct profiles have separate
+  login state. T3 source confirms homePath and binaryPath per provider instance.
+- [Claude gateway](https://code.claude.com/docs/en/llm-gateway-connect) and
+  [settings](https://code.claude.com/docs/en/settings): native settings-file override
+  plus ANTHROPIC_BASE_URL/AUTH_TOKEN. The registry declares `claude-sonnet-4-6`; availability and authentication are checked separately.
+- [OpenCode](https://opencode.ai/docs/config/): OPENCODE_CONFIG merges with native
+  configuration; environment placeholders avoid persisting the proxy key. Direct
+  OpenRouter defaults remain owned by the existing provider sync.
+- [Gemini CLI](https://geminicli.com/docs/reference/configuration/): native settings,
+  GEMINI_CLI_HOME and Google/API-key/Vertex authentication are distinct. Pinned 0.66.0 also supports `gateway` authentication, `GOOGLE_GEMINI_BASE_URL` and a runtime `GEMINI_API_KEY`; the managed proxy adapter uses those native interfaces. Live native-client acceptance remains unverified.
+- [Cursor](https://prod.cursor.com/help/models-and-usage/api-keys): supported API-key
+  setup uses Settings > Models; some features continue through Cursor. No supported
+  unattended portable credential/settings adapter was established; no SQLite edits.
+- [Antigravity](https://antigravity.google/docs/settings): native Google identity and
+  settings are distinct from Gemini CLI. No verified arbitrary proxy-routing adapter.
+- [Copilot](https://docs.github.com/en/copilot/how-tos/copilot-cli): native independent
+  GitHub authentication. No proxy integration is claimed.
+
+Runtime OAuth, auth.json, keychains, T3 pairing/control-plane tokens, SSH private
+keys, session databases, conversations, histories, caches and plugin downloaded
+state are never profile source. Never export or copy them between nodes. Backups
+may preserve preexisting local contents and therefore stay private, outside Git.
+New proxy profiles read only Vault `secret/data/personal/prd` field
+`CLIPROXY_FLEET_CLIENT_API_KEY`; neither generated configs nor receipts contain it.
+Missing access fails without retaining Vault responses. No secret is seeded here.
+
+## Fleet provider routes
+
+The registry’s `proxy.routes` declares the shared accounts (Claude, Codex,
+Gemini, Grok, Muse, Antigravity). Grok Build and the Antigravity CLI are pinned
+native clients with proxy profiles (Grok: `GROK_HOME/config.toml` custom model
+with `env_key`; Antigravity: Gemini API-key mode with `GOOGLE_GEMINI_BASE_URL`).
+Muse runs through the OpenCode harness: native Muse Code only talks to Meta's
+own catalog endpoint. Cursor is not managed (it cannot use the proxy). T3's
+Antigravity instance uses T3's own runtime with the proxy key in T3's per-host
+secret store. See the fleet guide's "Agents on every node".
+Version-specific source evidence:
+[Gemini 0.66.0 gateway interface](https://github.com/google-gemini/gemini-cli/blob/v0.66.0/packages/core/src/core/contentGenerator.ts),
+[CLIProxyAPI 8.0.55 catalog](https://github.com/router-for-me/CLIProxyAPI/blob/v8.0.55/internal/registry/models/models.json).
+A catalog entry is only a supported identifier, not proof that Chris has an
+active account for it. Fleet verifies authenticated availability, inference,
+stream completion and a harmless echo-tool round trip. Native application/T3
+acceptance is recorded separately. Runtime Vault access must work without an
+interactive shell; missing renewal authorization remains action required.

package/agents/claude-proxy

@@ -0,0 +1,5 @@
+#!/bin/sh
+# T3 binaryPath for Claude. The Claude Agent SDK runs any path ending in .ts
+# with node, so T3 needs an extension-less executable; this runs the tracked
+# Bun launcher beside it. No generated copy: this file lives in Git.
+exec bun "${0%/*}/claude-proxy.ts" "$@"

package/agents/claude-proxy.ts

@@ -0,0 +1,3 @@
+#!/usr/bin/env bun
+import { runManagedProxy } from './managed-proxy';
+await runManagedProxy('claude');

package/agents/codex-proxy.ts

@@ -0,0 +1,3 @@
+#!/usr/bin/env bun
+import { runManagedProxy } from './managed-proxy';
+await runManagedProxy('codex');

package/agents/grok-proxy.ts

@@ -0,0 +1,3 @@
+#!/usr/bin/env bun
+import { runManagedProxy } from './managed-proxy';
+await runManagedProxy('grok');

package/agents/managed-proxy.ts

@@ -0,0 +1,55 @@
+/** T3 binaryPath adapter. This file remains in Git; no generated executable copies. */
+import { homedir } from 'node:os';
+import { currentPlatform } from '../src/platform';
+import { agentRoot } from '../src/agents/render';
+import { select } from '../src/agents/registry';
+import { plan } from '../src/agents/converge';
+import { launchProfile } from '../src/agents/launch';
+import { AgentConfigurationError } from '../src/agents/errors';
+import { pinnedPath } from '../src/agents/toolchain';
+
+const SYNC_HINT =
+  'Run devfleet fleet-sync from a terminal to repair this machine.';
+
+export async function runManagedProxy(
+  tool: 'codex' | 'opencode' | 'claude' | 'grok' | 'antigravity'
+): Promise<void> {
+  const args = process.argv.slice(2);
+  // Version probes need no credentials; answering them lets T3 report the real
+  // launch error instead of "unable to determine version".
+  if (args.length === 1 && ['--version', '-v'].includes(args[0]!)) {
+    process.exitCode = await Bun.spawn([tool, ...args], {
+      env: { ...process.env, PATH: pinnedPath() },
+      stdio: ['inherit', 'inherit', 'inherit'],
+    }).exited;
+    return;
+  }
+  try {
+    const selection = select(process.env['WS_AGENT_NODE'] ?? '', tool, 'proxy');
+    const root = agentRoot(homedir(), currentPlatform().name);
+    const result = await plan({ root, selection, revision: 'unverified' });
+    if (
+      !result.previous ||
+      result.previous.fingerprint !== result.fingerprint ||
+      result.files.some((file) => file.state !== 'unchanged')
+    )
+      throw new AgentConfigurationError(
+        `The ${tool} proxy profile for node ${selection.node} is missing or out of date.`
+      );
+    // T3 sets WS_AGENT_ACCOUNT on a provider that is pinned to one account.
+    process.exitCode = await launchProfile(
+      root,
+      selection,
+      args,
+      process.env['WS_AGENT_ACCOUNT'] || undefined
+    );
+  } catch (error) {
+    // Configuration errors carry curated, secret-free messages; others do not.
+    const reason =
+      error instanceof AgentConfigurationError
+        ? error.message
+        : 'Managed provider proxy unavailable.';
+    process.stderr.write(`${reason} ${SYNC_HINT}\n`);
+    process.exitCode = 1;
+  }
+}

package/agents/opencode-proxy.ts

@@ -0,0 +1,3 @@
+#!/usr/bin/env bun
+import { runManagedProxy } from './managed-proxy';
+await runManagedProxy('opencode');

package/agents/registry.json

@@ -0,0 +1,209 @@
+{
+  "$schema": "./registry.schema.json",
+  "version": 1,
+  "defaults": {
+    "codex": {
+      "model": "gpt-6.1-sol"
+    },
+    "claude": {
+      "model": "sonnet"
+    },
+    "opencode": {
+      "model": "openrouter/auto"
+    },
+    "gemini": {
+      "model": "auto"
+    },
+    "grok": {
+      "model": "grok-4.7"
+    },
+    "antigravity": {
+      "model": "gemini-3.8-flash"
+    }
+  },
+  "proxy": {
+    "models": {
+      "codex": "gpt-6.1-sol",
+      "claude": "claude-sonnet-4-6",
+      "opencode": "gpt-6.1-sol",
+      "gemini": "gemini-3-flash",
+      "grok": "grok-4.7",
+      "antigravity": "gemini-3.8-flash"
+    },
+    "accounts": {
+      "claude": {
+        "provider": "claude",
+        "models": ["claude-opus-5-5", "claude-sonnet-5-5", "claude-haiku-5-5"]
+      },
+      "codex": {
+        "provider": "codex",
+        "models": ["gpt-6.1-sol"]
+      },
+      "opencode": {
+        "provider": "antigravity",
+        "models": ["gemini-3.8-flash"]
+      }
+    },
+    "routes": {
+      "claude": {
+        "model": "claude-sonnet-4-6",
+        "native": "claude",
+        "harness": "opencode"
+      },
+      "codex": {
+        "model": "gpt-6.1-sol",
+        "native": "codex",
+        "harness": "opencode"
+      },
+      "gemini": {
+        "model": "gemini-3-flash",
+        "native": "gemini",
+        "harness": "opencode"
+      },
+      "grok": {
+        "model": "grok-4.7",
+        "native": "grok",
+        "harness": "opencode"
+      },
+      "muse": {
+        "model": "devin/muse-wonder-1-0",
+        "native": null,
+        "harness": "opencode"
+      },
+      "antigravity": {
+        "model": "gemini-3.8-flash",
+        "native": "antigravity",
+        "harness": "opencode"
+      }
+    }
+  },
+  "nodes": {},
+  "tools": {
+    "codex": {
+      "binary": "codex",
+      "config": "CODEX_HOME/config.toml",
+      "authentication": "Independent codex login for direct; Vault environment key for proxy",
+      "proxy": "responses",
+      "source": "https://learn.chatgpt.com/docs/config-file/config-reference",
+      "directEndpoint": "Native vendor/account configuration; no portable endpoint override is applied",
+      "capabilities": {
+        "streaming": "unverified on fleet nodes",
+        "toolCalls": "unverified on fleet nodes",
+        "usageTracking": "independent native/runtime state",
+        "unattendedProfile": true
+      }
+    },
+    "claude": {
+      "binary": "claude",
+      "config": "--settings FILE",
+      "authentication": "Independent claude auth login for direct; ANTHROPIC_AUTH_TOKEN for proxy",
+      "proxy": "messages",
+      "source": "https://code.claude.com/docs/en/llm-gateway-connect",
+      "directEndpoint": "Native vendor/account configuration; no portable endpoint override is applied",
+      "capabilities": {
+        "streaming": "unverified on fleet nodes",
+        "toolCalls": "unverified on fleet nodes",
+        "usageTracking": "independent native/runtime state",
+        "unattendedProfile": true
+      }
+    },
+    "opencode": {
+      "binary": "opencode",
+      "config": "OPENCODE_CONFIG",
+      "authentication": "Existing dev-fleet opencode sync/Vault; runtime environment key for proxy",
+      "proxy": "responses",
+      "source": "https://opencode.ai/docs/config/",
+      "directEndpoint": "Existing dev-fleet OpenCode provider catalog and OpenRouter auto policy",
+      "capabilities": {
+        "streaming": "unverified on fleet nodes",
+        "toolCalls": "unverified on fleet nodes",
+        "usageTracking": "independent native/runtime state",
+        "unattendedProfile": true
+      }
+    },
+    "gemini": {
+      "binary": "gemini",
+      "config": "GEMINI_CLI_HOME/.gemini/settings.json",
+      "authentication": "Native Google login for direct; supported gateway authentication with runtime Vault key for proxy",
+      "proxy": "generateContent",
+      "source": "https://github.com/google-gemini/gemini-cli/blob/v0.66.0/packages/core/src/core/contentGenerator.ts",
+      "directEndpoint": "Native vendor/account configuration; no portable endpoint override is applied",
+      "capabilities": {
+        "streaming": "unverified on fleet nodes",
+        "toolCalls": "unverified on fleet nodes",
+        "usageTracking": "independent native/runtime state",
+        "unattendedProfile": true
+      }
+    },
+    "t3": {
+      "binary": "t3",
+      "config": "T3CODE_HOME/userdata/settings.json providerInstances",
+      "authentication": "Independent t3 up --connect and peer pairing",
+      "proxy": null,
+      "source": "Installed T3 contracts/settings.ts and providerInstance.ts; see audit.md",
+      "directEndpoint": "Native vendor/account configuration; no portable endpoint override is applied",
+      "capabilities": {
+        "streaming": "unverified on fleet nodes",
+        "toolCalls": "unverified on fleet nodes",
+        "usageTracking": "independent native/runtime state",
+        "unattendedProfile": false
+      }
+    },
+    "cursor": {
+      "binary": "cursor",
+      "config": "OS-specific Cursor User/settings.json and .cursor/mcp.json",
+      "authentication": "Interactive Cursor Settings > Models; credentials stay in application storage",
+      "proxy": null,
+      "source": "https://prod.cursor.com/help/models-and-usage/api-keys",
+      "directEndpoint": "Native vendor/account configuration; no portable endpoint override is applied",
+      "capabilities": {
+        "streaming": "unverified on fleet nodes",
+        "toolCalls": "unverified on fleet nodes",
+        "usageTracking": "independent native/runtime state",
+        "unattendedProfile": false
+      }
+    },
+    "antigravity": {
+      "binary": "antigravity",
+      "config": "Profile --gemini-dir (antigravity-cli/settings.json, modelProvider gemini)",
+      "authentication": "Shared CLI proxy: GEMINI_API_KEY (Vault) with GOOGLE_GEMINI_BASE_URL; no Google sign-in",
+      "proxy": "generateContent",
+      "source": "https://antigravity.google/docs/install/",
+      "directEndpoint": "Native vendor/account configuration; no portable endpoint override is applied",
+      "capabilities": {
+        "streaming": "unverified on fleet nodes",
+        "toolCalls": "unverified on fleet nodes",
+        "usageTracking": "independent native/runtime state",
+        "unattendedProfile": true
+      }
+    },
+    "copilot": {
+      "binary": "copilot",
+      "config": "Native config and repository .github/copilot-instructions.md",
+      "authentication": "Independent native GitHub login",
+      "proxy": null,
+      "source": "https://docs.github.com/en/copilot/how-tos/copilot-cli",
+      "directEndpoint": "Native vendor/account configuration; no portable endpoint override is applied",
+      "capabilities": {
+        "streaming": "unverified on fleet nodes",
+        "toolCalls": "unverified on fleet nodes",
+        "usageTracking": "independent native/runtime state",
+        "unattendedProfile": false
+      }
+    },
+    "grok": {
+      "binary": "grok",
+      "config": "GROK_HOME/config.toml",
+      "authentication": "Shared CLI proxy: custom [model.*] entry with env_key CLIPROXY_API_KEY (Vault); no grok login",
+      "proxy": "chat_completions",
+      "source": "https://docs.x.ai/build/settings/reference",
+      "directEndpoint": "Native vendor/account configuration; no portable endpoint override is applied",
+      "capabilities": {
+        "streaming": "unverified on fleet nodes",
+        "toolCalls": "unverified on fleet nodes",
+        "usageTracking": "independent native/runtime state",
+        "unattendedProfile": true
+      }
+    }
+  }
+}