@dotobokuri/fleet-console 1.69.0 → 1.70.0

package/dist/fleet.mjs

@@ -10,7 +10,8 @@ import http from 'node:http';
 import { spawn, execFileSync, execFile as execFile$1 } from 'node:child_process';
 import { builtinModules, createRequire } from 'node:module';
 import { fileURLToPath, pathToFileURL } from 'node:url';
-import * as fs32 from 'fs';
+import { randomUUID, createHash } from 'crypto';
+import * as fs42 from 'fs';
 import { constants, mkdirSync as mkdirSync$1, rmSync, renameSync as renameSync$1, appendFileSync, statSync } from 'fs';
 import * as path32 from 'path';
 import path32__default, { dirname } from 'path';
@@ -18,7 +19,6 @@ import { execFile } from 'child_process';
 import fs22, { appendFile, chmod, mkdir as mkdir$1, stat as stat$1, unlink, rename as rename$1 } from 'fs/promises';
 import os4 from 'os';
 import { promisify } from 'util';
-import { randomUUID, createHash } from 'crypto';
 import http2 from 'http2';
 import { deflateRawSync, inflateRawSync } from 'zlib';
 import { mkdtemp, rm, mkdir, readdir, readFile, stat, writeFile, appendFile as appendFile$1, realpath, lstat, rename } from 'node:fs/promises';
@@ -1085,7 +1085,7 @@ function joinChunks(chunks, totalBytes) {
   return joined;
 }
 function parseVersion(version2) {
-  const match = VERSION_PATTERN.exec(version2.trim());
+  const match = VERSION_PATTERN2.exec(version2.trim());
   if (match === null) {
     return void 0;
   }
@@ -1137,13 +1137,13 @@ function parseNumericPart(value) {
 function compareNumbers(left, right) {
   return left === right ? 0 : left > right ? 1 : -1;
 }
-var NPM_REGISTRY_BASE_URL, REGISTRY_TIMEOUT_MS, MAX_REGISTRY_RESPONSE_BYTES, VERSION_PATTERN;
+var NPM_REGISTRY_BASE_URL, REGISTRY_TIMEOUT_MS, MAX_REGISTRY_RESPONSE_BYTES, VERSION_PATTERN2;
 var init_version_check = __esm({
   "../../packages/core-agent/src/update/version-check.ts"() {
     NPM_REGISTRY_BASE_URL = "https://registry.npmjs.org/";
     REGISTRY_TIMEOUT_MS = 3e3;
     MAX_REGISTRY_RESPONSE_BYTES = 1024 * 1024;
-    VERSION_PATTERN = /^v?(\d+)\.(\d+)\.(\d+)(?:-([0-9A-Za-z.-]+))?$/;
+    VERSION_PATTERN2 = /^v?(\d+)\.(\d+)\.(\d+)(?:-([0-9A-Za-z.-]+))?$/;
   }
 });
 function createGlobalPackageUpdater(deps) {
@@ -1517,9 +1517,9 @@ async function checkUpdateStatus(release, options = {}) {
   }
   const channel = resolveUpdateChannel(release.version);
   if (options.forceRefresh !== true) {
-    const cached2 = readCachedLatestVersion(channel);
-    if (cached2 !== void 0) {
-      return isVersionGreater(cached2, release.version) ? { status: "update", latest: cached2 } : { status: "current", latest: cached2 };
+    const cached3 = readCachedLatestVersion(channel);
+    if (cached3 !== void 0) {
+      return isVersionGreater(cached3, release.version) ? { status: "update", latest: cached3 } : { status: "current", latest: cached3 };
     }
   }
   const latest = await fetchLatestFleetCliVersion(channel);
@@ -17642,11 +17642,11 @@ function createZeroMessage(desc) {
       }
     }
   } else {
-    const cached2 = messagePrototypes.get(desc);
+    const cached3 = messagePrototypes.get(desc);
     let prototype;
     let members;
-    if (cached2) {
-      ({ prototype, members } = cached2);
+    if (cached3) {
+      ({ prototype, members } = cached3);
     } else {
       prototype = {};
       members = /* @__PURE__ */ new Set();
@@ -18417,9 +18417,9 @@ function reflect(messageDesc2, message, check2 = true) {
 var messageSortedFields = /* @__PURE__ */ new WeakMap();
 var ReflectMessageImpl = class {
   get sortedFields() {
-    const cached2 = messageSortedFields.get(this.desc);
-    if (cached2) {
-      return cached2;
+    const cached3 = messageSortedFields.get(this.desc);
+    if (cached3) {
+      return cached3;
     }
     const sortedFields = this.desc.fields.concat().sort((a, b) => a.number - b.number);
     messageSortedFields.set(this.desc, sortedFields);
@@ -21538,6 +21538,20 @@ function clampReasoningEffort(effort, supportedEfforts, modelId) {
   if (lower) return lower.supported;
   throw new UnsupportedReasoningEffortError(effort, supportedEfforts, modelId);
 }
+var REASONING_SIGNATURE_PREFIX = "fleet-reasoning:v1:";
+function encodeReasoningSignature(id, encrypted) {
+  return `${REASONING_SIGNATURE_PREFIX}${id}:${encrypted}`;
+}
+function decodeReasoningSignature(signature) {
+  if (typeof signature !== "string" || !signature.startsWith(REASONING_SIGNATURE_PREFIX)) {
+    return void 0;
+  }
+  const body2 = signature.slice(REASONING_SIGNATURE_PREFIX.length);
+  const separator = body2.indexOf(":");
+  if (separator === -1) return void 0;
+  const encrypted = body2.slice(separator + 1);
+  return encrypted.length > 0 ? { id: body2.slice(0, separator), encrypted } : void 0;
+}
 var ContextWindowExceededError = class extends Error {
   constructor(requestTokens, contextWindow) {
     super(`Prompt is too long: ${requestTokens} tokens > ${contextWindow} maximum context window`);
@@ -23867,11 +23881,21 @@ function translateMessage(message) {
   const items = [];
   const parts = [];
   let reasoningContent = "";
+  let reasoningBlob;
   const takeReasoningContent = () => {
-    if (role !== "assistant" || reasoningContent.length === 0) return {};
+    if (role !== "assistant") return {};
+    const blob = reasoningBlob;
     const reasoning = reasoningContent;
     reasoningContent = "";
-    return { reasoning_content: reasoning };
+    reasoningBlob = void 0;
+    if (reasoning.length === 0 && blob === void 0) return {};
+    return {
+      ...reasoning.length === 0 ? {} : { reasoning_content: reasoning },
+      ...blob === void 0 ? {} : {
+        reasoning_encrypted: blob.encrypted,
+        ...blob.id.length === 0 ? {} : { reasoning_id: blob.id }
+      }
+    };
   };
   const flushParts = (includeReasoning = true) => {
     if (parts.length === 0) {
@@ -23920,6 +23944,9 @@ function translateMessage(message) {
         if (role === "assistant" && typeof block.thinking === "string") {
           reasoningContent += block.thinking;
         }
+        if (role === "assistant") {
+          reasoningBlob = decodeReasoningSignature(block.signature) ?? reasoningBlob;
+        }
         break;
       case "redacted_thinking":
         break;
@@ -24075,6 +24102,7 @@ async function collectAnthropicMessage(events, fallbackModel, options = {}) {
   let model = fallbackModel;
   let text = "";
   const thinking = /* @__PURE__ */ new Map();
+  const reasoningBlobs = /* @__PURE__ */ new Map();
   let stopReason = "end_turn";
   let outputTokens = 0;
   let inputTokens = 0;
@@ -24116,6 +24144,16 @@ async function collectAnthropicMessage(events, fallbackModel, options = {}) {
         break;
       }
       case "response.output_item.done":
+        if (event.item.type === "reasoning") {
+          if (event.item.encrypted_content !== void 0) {
+            reasoningBlobs.set(
+              event.item.id,
+              encodeReasoningSignature(event.item.id, event.item.encrypted_content)
+            );
+            if (!thinking.has(event.item.id)) thinking.set(event.item.id, "");
+          }
+          break;
+        }
         if (event.item.type === "web_search_call") {
           const query = derivedWebSearchQuery(event.item.action);
           content.push({
@@ -24152,7 +24190,7 @@ async function collectAnthropicMessage(events, fallbackModel, options = {}) {
   content.unshift(...[...thinking].map(([itemId, value]) => ({
     type: "thinking",
     thinking: value,
-    signature: `gateway_${reasoningBlockKey(itemId)}`
+    signature: reasoningBlobs.get(itemId) ?? `gateway_${reasoningBlockKey(itemId)}`
   })));
   return {
     id,
@@ -24189,6 +24227,7 @@ async function* encodeAnthropicSse(events, options = {}) {
   let messageStopped = false;
   let sawToolUse = false;
   let activeContentKey;
+  const reasoningBlobs = /* @__PURE__ */ new Map();
   const encode3 = (event, data) => encoder2.encode(`event: ${event}
 data: ${JSON.stringify(data)}
 
@@ -24222,7 +24261,9 @@ data: ${JSON.stringify(data)}
       ...block.kind === "thinking" ? [encode3("content_block_delta", {
         type: "content_block_delta",
         index: block.index,
-        delta: { type: "signature_delta", signature: `gateway_${key}` }
+        // The blob is only known once the reasoning item closes, which is why the signature
+        // is emitted here at block close rather than at block start.
+        delta: { type: "signature_delta", signature: reasoningBlobs.get(key) ?? `gateway_${key}` }
       })] : [],
       encode3("content_block_stop", {
         type: "content_block_stop",
@@ -24348,6 +24389,19 @@ data: ${JSON.stringify(data)}
         break;
       }
       case "response.output_item.done":
+        if (event.item.type === "reasoning") {
+          if (event.item.encrypted_content !== void 0) {
+            const key = reasoningBlockKey(event.item.id);
+            reasoningBlobs.set(key, encodeReasoningSignature(event.item.id, event.item.encrypted_content));
+            if (!blocks2.has(key)) {
+              yield* closeActiveContent();
+              const start = startContentBlock(key, "thinking");
+              if (start !== void 0) yield start;
+            }
+            yield* closeBlock(key);
+          }
+          break;
+        }
         if (event.item.type === "function_call") {
           let block = blocks2.get(event.item.id);
           if (block === void 0) {
@@ -24952,6 +25006,13 @@ var OpenAIResponsesAdapter = class {
       "idleTimeoutMs"
     );
   }
+  /**
+   * Headers a subclass derives from the request itself, merged over the constructor's.
+   * The base Platform API surface derives none.
+   */
+  perRequestHeaders(_request) {
+    return {};
+  }
   async stream(request, options) {
     if (options.apiKey.length === 0) {
       throw new TypeError("apiKey must not be empty");
@@ -24968,7 +25029,8 @@ var OpenAIResponsesAdapter = class {
           accept: "text/event-stream",
           authorization: `Bearer ${options.apiKey}`,
           "content-type": "application/json",
-          ...this.extraHeaders
+          ...this.extraHeaders,
+          ...this.perRequestHeaders(request)
         },
         body: JSON.stringify(payload),
         signal: controller.signal
@@ -25029,6 +25091,10 @@ var CodexResponsesAdapter = class extends OpenAIResponsesAdapter {
     });
     this.isMarkedFetchFailure = fetchFailureTracker.isMarkedFailure;
   }
+  perRequestHeaders(request) {
+    const sessionId = codexSessionIdentity(request);
+    return sessionId === void 0 ? {} : { session_id: sessionId };
+  }
   async stream(request, options) {
     const callController = new AbortController();
     const unlinkCallAbort = linkAbortSignal(options.signal, callController);
@@ -25308,11 +25374,27 @@ function forOpenAIResponsesBackend(request, dropSamplingParams) {
   }
   return payload;
 }
+function codexSessionIdentity(request) {
+  const userId = request.metadata?.user_id?.trim();
+  if (!userId) return void 0;
+  const digest = createHash("sha256").update("fleet:codex:claude-session:").update(userId).digest("hex");
+  return [
+    digest.slice(0, 8),
+    digest.slice(8, 12),
+    digest.slice(12, 16),
+    digest.slice(16, 20),
+    digest.slice(20, 32)
+  ].join("-");
+}
 function forChatGptBackend(request) {
   const copy = { ...request };
   for (const field of CHATGPT_UNSUPPORTED_FIELDS) {
     delete copy[field];
   }
+  const sessionId = codexSessionIdentity(request);
+  if (sessionId !== void 0) {
+    copy.prompt_cache_key = sessionId;
+  }
   if (request.tool_choice === "none" || isClaudeCodeSuggestionMode(request)) {
     delete copy.tools;
     delete copy.tool_choice;
@@ -28191,10 +28273,10 @@ function createQuotaService(deps) {
     if (id === "claude" && !await deps.isClaudeConnected() || id === "cursor" && !await deps.isCursorConnected()) {
       return { status: "not_connected", method: (deps.platform ?? process.platform) === "darwin" ? "keychain" : "file" };
     }
-    const cached2 = cache.get(id);
-    if (!force && cached2 && cached2.expiresAt > now()) {
-      const staleStillValid = cached2.value.status !== "stale" || typeof cached2.value.fetchedAt === "number" && now() - cached2.value.fetchedAt <= STALE_TTL_MS;
-      if (staleStillValid) return cached2.value;
+    const cached22 = cache.get(id);
+    if (!force && cached22 && cached22.expiresAt > now()) {
+      const staleStillValid = cached22.value.status !== "stale" || typeof cached22.value.fetchedAt === "number" && now() - cached22.value.fetchedAt <= STALE_TTL_MS;
+      if (staleStillValid) return cached22.value;
       cache.delete(id);
     }
     const pending = inFlight.get(id);
@@ -28246,25 +28328,150 @@ function createQuotaService(deps) {
     }
   };
 }
+var XAI_CLI_FALLBACK_CLIENT_VERSION = "1.0.5";
+var VERSION_PATTERN = /\b(\d+\.\d+\.\d+(?:-[0-9A-Za-z.-]+)?)\b/;
+var VERSION_EXEC_TIMEOUT_MS = 2e3;
+var MAX_VERSION_FILE_BYTES = 256;
+function grokHomeDir(deps) {
+  return optionalTrimmedString(deps.env.GROK_HOME) ?? path32__default.join(deps.homedir(), ".grok");
+}
+function versionFrom(value) {
+  if (typeof value !== "string") return void 0;
+  return VERSION_PATTERN.exec(value)?.[1];
+}
+async function fromInstallerSymlink(home, readLink) {
+  try {
+    return versionFrom(path32__default.basename(await readLink(path32__default.join(home, "bin", "grok"))));
+  } catch {
+    return void 0;
+  }
+}
+async function fromMetadataMarker(home, deps) {
+  try {
+    return versionFrom(await deps.readBounded(path32__default.join(home, ".metadata_version"), MAX_VERSION_FILE_BYTES));
+  } catch {
+    return void 0;
+  }
+}
+function grokExecutablePath(home, deps) {
+  return path32__default.join(home, "bin", deps.platform === "win32" ? "grok.exe" : "grok");
+}
+async function fromCommand(deps, file2) {
+  try {
+    return versionFrom(await deps.execFile(file2, ["--version"], { timeout: VERSION_EXEC_TIMEOUT_MS }));
+  } catch {
+    return void 0;
+  }
+}
+async function resolveXaiCliClientVersion(options = {}) {
+  const deps = options.deps ?? defaultCredentialDeps;
+  const readLink = options.readLink ?? ((filePath) => fs22.readlink(filePath));
+  const override = versionFrom(optionalTrimmedString(deps.env.FLEET_XAI_CLI_VERSION));
+  if (override) return override;
+  const home = grokHomeDir(deps);
+  return await fromInstallerSymlink(home, readLink) ?? await fromMetadataMarker(home, deps) ?? await fromCommand(deps, grokExecutablePath(home, deps)) ?? await fromCommand(deps, "grok") ?? XAI_CLI_FALLBACK_CLIENT_VERSION;
+}
+var cached2;
+function xaiCliClientVersion(options = {}) {
+  cached2 ??= resolveXaiCliClientVersion(options).catch(() => XAI_CLI_FALLBACK_CLIENT_VERSION);
+  return cached2;
+}
+var XAI_ENDPOINT_PREFERENCES = ["direct", "cli-proxy"];
+var DEFAULT_XAI_ENDPOINT_PREFERENCE = "cli-proxy";
+function sanitizeXaiEndpoint(value) {
+  return typeof value === "string" && XAI_ENDPOINT_PREFERENCES.includes(value) ? value : void 0;
+}
+function normalizeAiGatewaySettings(value) {
+  if (!isRecord7(value) || value.version !== 1) return { version: 1 };
+  const models = Array.isArray(value.models) ? value.models.filter((entry) => isRecord7(entry) && typeof entry.id === "string" && entry.id.length > 0).flatMap((entry) => {
+    const model = findGatewayModel(entry.id);
+    if (!model) return [];
+    const efforts = Array.isArray(entry.efforts) ? entry.efforts.filter((level) => typeof level === "string" && level.length > 0) : [];
+    const exposed = efforts.length > 0 ? narrowEffortLadder(model, efforts) : void 0;
+    return [{
+      id: entry.id,
+      ...exposed ? { efforts: [...exposed] } : {},
+      ...entry.hostOnly === true ? { hostOnly: true } : {}
+    }];
+  }) : [];
+  const providerPriority = sanitizeProviderPriority(value.providerPriority);
+  const compactCeiling = normalizeCompactCeiling(value.compactCeiling);
+  const xaiEndpoint = sanitizeXaiEndpoint(value.xaiEndpoint);
+  return {
+    version: 1,
+    ...models.length > 0 ? { models } : {},
+    ...value.cursorDiagnosticsEnabled === true ? { cursorDiagnosticsEnabled: true } : {},
+    ...typeof value.wireLogEnabled === "boolean" ? { wireLogEnabled: value.wireLogEnabled } : {},
+    ...providerPriority ? { providerPriority: [...providerPriority] } : {},
+    ...compactCeiling !== void 0 ? { compactCeiling } : {},
+    ...xaiEndpoint !== void 0 ? { xaiEndpoint } : {}
+  };
+}
+function sanitizeProviderPriority(value) {
+  if (!Array.isArray(value)) return void 0;
+  const seen = /* @__PURE__ */ new Set();
+  const cleaned = [];
+  for (const entry of value) {
+    if (typeof entry !== "string") continue;
+    if (!GATEWAY_PROVIDERS.includes(entry)) continue;
+    const provider = entry;
+    if (seen.has(provider)) continue;
+    seen.add(provider);
+    cleaned.push(provider);
+  }
+  return cleaned.length > 0 ? cleaned : void 0;
+}
+function isRecord7(value) {
+  return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+function resolveAiGatewaySelection(settings2) {
+  const enabled = [];
+  const hostOnlyIds = /* @__PURE__ */ new Set();
+  const effortExposure = {};
+  for (const entry of settings2?.models ?? []) {
+    const model = findGatewayModel(entry.id);
+    if (!model) continue;
+    if (entry.hostOnly === true) hostOnlyIds.add(model.id);
+    if (enabled.includes(model)) continue;
+    enabled.push(model);
+    const exposed = narrowEffortLadder(model, entry.efforts);
+    if (exposed) effortExposure[model.id] = exposed;
+  }
+  const models = sortGatewayModelsByProvider(enabled);
+  const delegationModels = models.filter((model) => !hostOnlyIds.has(model.id));
+  return { models, delegationModels, effortExposure, providerPriority: settings2?.providerPriority };
+}
+function narrowEffortLadder(model, efforts) {
+  if (!efforts || efforts.length === 0) return void 0;
+  const ladder = buildGatewayModelConstraints(model).effortLadder;
+  const narrowed = ladder.filter((rung) => efforts.includes(rung));
+  if (narrowed.length === 0 || narrowed.length === ladder.length) return void 0;
+  return narrowed;
+}
+function sortGatewayModelsByProvider(models) {
+  return [...models].sort((left, right) => {
+    const providerDelta = GATEWAY_PROVIDERS.indexOf(left.provider) - GATEWAY_PROVIDERS.indexOf(right.provider);
+    if (providerDelta !== 0) return providerDelta;
+    return GATEWAY_MODELS.indexOf(left) - GATEWAY_MODELS.indexOf(right);
+  });
+}
 var XAI_RESPONSES_URL = "https://api.x.ai/v1/responses";
 var XAI_CLI_RESPONSES_URL = "https://cli-chat-proxy.grok.com/v1/responses";
-var XAI_CLI_CLIENT_VERSION = "1.0.3";
-var XAI_PROXY_FALLBACK_STATUSES = /* @__PURE__ */ new Set([402, 426]);
 var DEFAULT_XAI_RESPONSES_MAX_UPSTREAM_BODY_BYTES = 64 * 1024 * 1024;
 var DEFAULT_XAI_RESPONSES_UPSTREAM_IDLE_TIMEOUT_MS = 3e4;
 var DEFAULT_XAI_RESPONSES_FUNCTION_CALL_TIMEOUT_MS = 3e4;
 var DEFAULT_XAI_RESPONSES_SEMANTIC_STALL_TIMEOUT_MS = 6e4;
 var XAI_RETRY_DELAY_MS = 200;
-var xaiProxyOnlyAccount = false;
+var XAI_REASONING_INCLUDE = "reasoning.encrypted_content";
 function directXaiEndpoint() {
   return { url: XAI_RESPONSES_URL, headers: {} };
 }
-function proxyXaiEndpoint(model) {
+function proxyXaiEndpoint(model, clientVersion) {
   return {
     url: XAI_CLI_RESPONSES_URL,
     headers: {
       "x-xai-token-auth": "xai-grok-cli",
-      "x-grok-client-version": XAI_CLI_CLIENT_VERSION,
+      "x-grok-client-version": clientVersion,
       "x-grok-model-override": model
     }
   };
@@ -28277,6 +28484,8 @@ var XaiResponsesAdapter = class {
   idleTimeoutMs;
   functionCallTimeoutMs;
   semanticStallTimeoutMs;
+  endpointPreference;
+  clientVersion;
   extraHeaders;
   constructor(options = {}) {
     this.extraHeaders = options.headers ?? {};
@@ -28299,6 +28508,8 @@ var XaiResponsesAdapter = class {
       options.semanticStallTimeoutMs ?? DEFAULT_XAI_RESPONSES_SEMANTIC_STALL_TIMEOUT_MS,
       "semanticStallTimeoutMs"
     );
+    this.endpointPreference = options.endpoint ?? DEFAULT_XAI_ENDPOINT_PREFERENCE;
+    this.clientVersion = options.clientVersion ?? (() => xaiCliClientVersion());
   }
   async stream(request, options) {
     if (options.apiKey.length === 0) {
@@ -28306,22 +28517,14 @@ var XaiResponsesAdapter = class {
     }
     const controller = new AbortController();
     const unlinkAbort = linkAbortSignal(options.signal, controller);
-    const payload = forXaiResponsesBackend(request, xaiWireTools(request));
+    const tools = xaiWireTools(request);
+    let payload = forXaiResponsesBackend(request, tools);
+    let replayAvailable = replaysXaiReasoning(request);
     let retryAvailable = true;
     let response;
-    let endpoint = xaiProxyOnlyAccount ? proxyXaiEndpoint(payload.model) : directXaiEndpoint();
+    const endpoint = this.endpointPreference === "cli-proxy" ? await this.proxyEndpoint(payload.model) : directXaiEndpoint();
     try {
       response = await this.fetchResponse(options.apiKey, payload, controller, endpoint);
-      if (!response.ok && endpoint.url === XAI_RESPONSES_URL && XAI_PROXY_FALLBACK_STATUSES.has(response.status)) {
-        wireLog("xai-responses.endpoint.fallback", {
-          status: response.status,
-          from: XAI_RESPONSES_URL,
-          to: XAI_CLI_RESPONSES_URL
-        });
-        xaiProxyOnlyAccount = true;
-        endpoint = proxyXaiEndpoint(payload.model);
-        response = await this.fetchResponse(options.apiKey, payload, controller, endpoint);
-      }
     } catch (error51) {
       if (!isRetryableXaiFetchSocket(error51, controller.signal, this.isMarkedFetchFailure)) {
         unlinkAbort();
@@ -28344,17 +28547,40 @@ var XaiResponsesAdapter = class {
       unlinkAbort();
       return response;
     }
-    return {
-      ...response,
-      events: retryXaiEvents(response.events, async (signal) => {
+    const reopen = async (signal, reason) => {
+      if (reason === "empty_stream" && replayAvailable) {
+        replayAvailable = false;
+        payload = forXaiResponsesBackend(request, tools, false);
+        wireLog("xai-responses.reasoning.replay_dropped", { reason });
         await abortableXaiDelay(XAI_RETRY_DELAY_MS, signal);
-        const retried = await this.fetchResponse(options.apiKey, payload, controller, endpoint);
-        if (!retried.ok) {
-          throw new UpstreamProtocolError(`xAI retry failed with status ${retried.status}`);
+        const withoutReplay = await this.fetchResponse(options.apiKey, payload, controller, endpoint);
+        if (!withoutReplay.ok) {
+          throw new UpstreamProtocolError(`xAI retry failed with status ${withoutReplay.status}`);
         }
-        return retried.events;
-      }, controller, unlinkAbort, retryAvailable)
+        return withoutReplay.events;
+      }
+      await abortableXaiDelay(XAI_RETRY_DELAY_MS, signal);
+      const retried = await this.fetchResponse(options.apiKey, payload, controller, endpoint);
+      if (!retried.ok) {
+        throw new UpstreamProtocolError(`xAI retry failed with status ${retried.status}`);
+      }
+      return retried.events;
     };
+    return {
+      ...response,
+      events: retryXaiEvents(
+        response.events,
+        reopen,
+        controller,
+        unlinkAbort,
+        retryAvailable,
+        () => replayAvailable
+      )
+    };
+  }
+  /** The proxy endpoint, with the installed CLI's version resolved for its gate. */
+  async proxyEndpoint(model) {
+    return proxyXaiEndpoint(model, await this.clientVersion());
   }
   async fetchResponse(apiKey, payload, controller, endpoint) {
     wireLog("xai-responses.wire.request", { url: endpoint.url, payload });
@@ -28405,21 +28631,43 @@ var XaiResponsesAdapter = class {
     return xaiWireTools(request) ?? [];
   }
 };
-function forXaiResponsesBackend(request, tools = xaiWireTools(request)) {
+function forXaiResponsesBackend(request, tools = xaiWireTools(request), replayReasoning = true) {
   const { metadata: _metadata, native_tools: _nativeTools, ...rest } = request;
+  const input = [];
+  for (const item of request.input) {
+    if (item.type === "function_call_output") {
+      const { is_error: _isError, tool_references: _toolReferences, ...wireItem2 } = item;
+      input.push(wireItem2);
+      continue;
+    }
+    const {
+      reasoning_content: _reasoningContent,
+      reasoning_encrypted: encrypted,
+      reasoning_id: reasoningId,
+      ...wireItem
+    } = item;
+    if (replayReasoning && encrypted !== void 0 && encrypted.length > 0) {
+      input.push({
+        type: "reasoning",
+        ...reasoningId === void 0 ? {} : { id: reasoningId },
+        summary: [],
+        encrypted_content: encrypted
+      });
+    }
+    input.push(wireItem);
+  }
   return {
     ...rest,
-    input: request.input.map((item) => {
-      if (item.type === "function_call_output") {
-        const { is_error: _isError, tool_references: _toolReferences, ...wireItem2 } = item;
-        return wireItem2;
-      }
-      const { reasoning_content: _reasoningContent, ...wireItem } = item;
-      return wireItem;
-    }),
+    input,
+    // Only asked for when a reply could carry one: on a turn that replays nothing the include
+    // is inert, and on a retry that dropped the replay it must not invite a fresh blob back.
+    ...replayReasoning ? { include: [XAI_REASONING_INCLUDE] } : {},
     ...tools === void 0 ? {} : { tools: [...tools] }
   };
 }
+function replaysXaiReasoning(request) {
+  return request.input.some((item) => item.type !== "function_call_output" && typeof item.reasoning_encrypted === "string" && item.reasoning_encrypted.length > 0);
+}
 function xaiWireTools(request) {
   if (request.tools === void 0) return void 0;
   const tools = request.tools;
@@ -28440,11 +28688,18 @@ function isToolSearchName(name) {
 function toolNameMatches(declaredName, selectedName) {
   return declaredName === selectedName || toolLeafName(declaredName) === toolLeafName(selectedName);
 }
-function retryXaiEvents(events, retry, controller, unlinkAbort, retryAvailable) {
+function retryXaiEvents(events, retry, controller, unlinkAbort, retryAvailable, replayAvailable) {
   return {
     [Symbol.asyncIterator]() {
       const source = events[Symbol.asyncIterator]();
-      const iterator = generateXaiRetryEvents(source, retry, controller, unlinkAbort, retryAvailable);
+      const iterator = generateXaiRetryEvents(
+        source,
+        retry,
+        controller,
+        unlinkAbort,
+        retryAvailable,
+        replayAvailable
+      );
       return {
         next: () => iterator.next(),
         return: async () => {
@@ -28459,7 +28714,7 @@ function retryXaiEvents(events, retry, controller, unlinkAbort, retryAvailable)
     }
   };
 }
-async function* generateXaiRetryEvents(source, retry, controller, unlinkAbort, retryAvailable) {
+async function* generateXaiRetryEvents(source, retry, controller, unlinkAbort, retryAvailable, replayAvailable) {
   const lead = [];
   let committed = false;
   let normalCompletion = false;
@@ -28483,14 +28738,26 @@ async function* generateXaiRetryEvents(source, retry, controller, unlinkAbort, r
         });
         await source.return?.();
         lead.length = 0;
-        yield* await retry(controller.signal);
+        yield* await retry(controller.signal, "retryable_failure");
         return;
       }
       if (result.done) {
-        yield* lead;
         if (pendingError !== void 0) {
-          yield pendingError;
+          wireLog("xai-responses.retry.discarded", {
+            reason: "error_stream_end",
+            errorTypes: [pendingError.error.type]
+          });
+          lead.length = 0;
+          yield* await retry(controller.signal, "retryable_failure");
+          return;
+        }
+        if (!committed && replayAvailable()) {
+          wireLog("xai-responses.retry.discarded", { reason: "empty_stream" });
+          lead.length = 0;
+          yield* await retry(controller.signal, "empty_stream");
+          return;
         }
+        yield* lead;
         normalCompletion = true;
         return;
       }
@@ -28501,7 +28768,7 @@ async function* generateXaiRetryEvents(source, retry, controller, unlinkAbort, r
           wireLog("xai-responses.retry.discarded", pendingError === void 0 ? { reason: "response.failed", errorTypes } : { reason: "error_failed_pair", errorTypes });
           await source.return?.();
           lead.length = 0;
-          yield* await retry(controller.signal);
+          yield* await retry(controller.signal, "retryable_failure");
           return;
         }
         pendingError = event;
@@ -28535,7 +28802,7 @@ function isRetryableXaiFailure(event) {
   return event.type === "response.failed" && isRetryableXaiErrorType(event.response.error.type) || event.type === "error" && isRetryableXaiErrorType(event.error.type);
 }
 function isRetryableXaiErrorType(type) {
-  return type === "server_error" || type === "server_is_overloaded" || type === "service_unavailable_error";
+  return type === "server_error" || type === "server_is_overloaded" || type === "service_unavailable_error" || type === XAI_OVERLOADED_ERROR_TYPE;
 }
 function commitsXaiOutput(event) {
   if (event.type === "response.created" || event.type === "response.reasoning_summary_text.delta") {
@@ -28840,7 +29107,7 @@ function parseEventFrame3(frame) {
     );
   }
   logRawWireEvent("xai-responses.wire.event", eventName, parsed);
-  if (isRecord7(parsed) && typeof parsed.type !== "string" && eventName !== void 0) {
+  if (isRecord8(parsed) && typeof parsed.type !== "string" && eventName !== void 0) {
     parsed = { ...parsed, type: eventName };
   }
   return canonicalEvent3(parsed);
@@ -28850,7 +29117,7 @@ function withoutXaiSentinel(text) {
   return text.includes(XAI_EOS_SENTINEL) ? text.split(XAI_EOS_SENTINEL).join("") : text;
 }
 function canonicalEvent3(value) {
-  if (!isRecord7(value) || typeof value.type !== "string") {
+  if (!isRecord8(value) || typeof value.type !== "string") {
     throw new UpstreamProtocolError("Grok CLI SSE event was not an object with a type");
   }
   switch (value.type) {
@@ -28995,19 +29262,34 @@ function outputItem3(value) {
       arguments: typeof item.arguments === "string" ? item.arguments : ""
     };
   }
+  if (item.type === "reasoning") {
+    const encrypted = typeof item.encrypted_content === "string" && item.encrypted_content.length > 0 ? item.encrypted_content : void 0;
+    if (encrypted === void 0) return void 0;
+    return {
+      id: typeof item.id === "string" ? item.id : "",
+      type: "reasoning",
+      encrypted_content: encrypted
+    };
+  }
   return void 0;
 }
+var XAI_OVERLOADED_ERROR_TYPE = "overloaded_error";
+var XAI_CAPACITY_MESSAGE = /\bat capacity\b|\boverloaded\b/i;
 function canonicalError3(value) {
   const error51 = record3(value, "error");
   const message = string32(error51.message, "error.message");
-  const type = typeof error51.type === "string" && error51.type !== "error" ? error51.type : typeof error51.code === "string" ? error51.code : "api_error";
-  return { type, message };
+  return { type: xaiErrorType(error51, message), message };
 }
-function isRecord7(value) {
+function xaiErrorType(error51, message) {
+  if (typeof error51.type === "string" && error51.type !== "error") return error51.type;
+  if (typeof error51.code === "string") return error51.code;
+  return XAI_CAPACITY_MESSAGE.test(message) ? XAI_OVERLOADED_ERROR_TYPE : "api_error";
+}
+function isRecord8(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 function record3(value, name) {
-  if (!isRecord7(value)) {
+  if (!isRecord8(value)) {
     throw new UpstreamProtocolError(`${name} must be an object`);
   }
   return value;
@@ -29079,38 +29361,38 @@ function cursorNativeExecPolicyReplies(exec2, clientTools) {
     "shell_command",
     "exec_command"
   ]);
-  if (isRecord8(exec2.readArgs)) {
+  if (isRecord9(exec2.readArgs)) {
     return [execReply(exec2, "readResult", {
       error: { path: stringValue(exec2.readArgs.path), error: readMessage3 }
     })];
   }
-  if (isRecord8(exec2.writeArgs)) {
+  if (isRecord9(exec2.writeArgs)) {
     return [execReply(exec2, "writeResult", {
       rejected: { path: stringValue(exec2.writeArgs.path), reason: mutationMessage }
     })];
   }
-  if (isRecord8(exec2.deleteArgs)) {
+  if (isRecord9(exec2.deleteArgs)) {
     return [execReply(exec2, "deleteResult", {
       rejected: { path: stringValue(exec2.deleteArgs.path), reason: mutationMessage }
     })];
   }
-  if (isRecord8(exec2.lsArgs)) {
+  if (isRecord9(exec2.lsArgs)) {
     return [execReply(exec2, "lsResult", {
       error: { path: stringValue(exec2.lsArgs.path), error: listMessage }
     })];
   }
-  if (isRecord8(exec2.grepArgs)) {
+  if (isRecord9(exec2.grepArgs)) {
     return [execReply(exec2, "grepResult", { error: { error: grepMessage } })];
   }
-  if (isRecord8(exec2.shellArgs)) {
+  if (isRecord9(exec2.shellArgs)) {
     return [execReply(exec2, "shellResult", shellFailure(exec2.shellArgs, shellMessage))];
   }
-  if (isRecord8(exec2.shellStreamArgs)) {
+  if (isRecord9(exec2.shellStreamArgs)) {
     const args = exec2.shellStreamArgs;
     const cwd = stringValue(args.workingDirectory);
     return [
       execReply(exec2, "shellStream", {
-        start: isRecord8(args.requestedSandboxPolicy) ? { sandboxPolicy: args.requestedSandboxPolicy } : {}
+        start: isRecord9(args.requestedSandboxPolicy) ? { sandboxPolicy: args.requestedSandboxPolicy } : {}
       }),
       execReply(exec2, "shellStream", { stderr: { data: shellMessage } }),
       execReply(exec2, "shellStream", { exit: { code: 1, cwd, aborted: true } }),
@@ -29118,7 +29400,7 @@ function cursorNativeExecPolicyReplies(exec2, clientTools) {
       { execClientControlMessage: { streamClose: { id: numberValue(exec2.id) } } }
     ];
   }
-  if (isRecord8(exec2.backgroundShellSpawnArgs)) {
+  if (isRecord9(exec2.backgroundShellSpawnArgs)) {
     const args = exec2.backgroundShellSpawnArgs;
     return [execReply(exec2, "backgroundShellSpawnResult", {
       error: {
@@ -29128,15 +29410,15 @@ function cursorNativeExecPolicyReplies(exec2, clientTools) {
       }
     })];
   }
-  if (isRecord8(exec2.writeShellStdinArgs)) {
+  if (isRecord9(exec2.writeShellStdinArgs)) {
     return [execReply(exec2, "writeShellStdinResult", { error: { error: shellMessage } })];
   }
-  if (isRecord8(exec2.fetchArgs)) {
+  if (isRecord9(exec2.fetchArgs)) {
     return [execReply(exec2, "fetchResult", {
       error: { url: stringValue(exec2.fetchArgs.url), error: networkMessage }
     })];
   }
-  if (isRecord8(exec2.diagnosticsArgs)) {
+  if (isRecord9(exec2.diagnosticsArgs)) {
     return [execReply(exec2, "diagnosticsResult", {
       error: {
         path: stringValue(exec2.diagnosticsArgs.path),
@@ -29144,12 +29426,12 @@ function cursorNativeExecPolicyReplies(exec2, clientTools) {
       }
     })];
   }
-  if (isRecord8(exec2.listMcpResourcesExecArgs)) {
+  if (isRecord9(exec2.listMcpResourcesExecArgs)) {
     return [execReply(exec2, "listMcpResourcesExecResult", {
       error: { error: retryMessage(clientTools, ["ListMcpResources", "list_mcp_resources"]) }
     })];
   }
-  if (isRecord8(exec2.readMcpResourceExecArgs)) {
+  if (isRecord9(exec2.readMcpResourceExecArgs)) {
     return [execReply(exec2, "readMcpResourceExecResult", {
       error: {
         uri: stringValue(exec2.readMcpResourceExecArgs.uri),
@@ -29157,12 +29439,12 @@ function cursorNativeExecPolicyReplies(exec2, clientTools) {
       }
     })];
   }
-  if (isRecord8(exec2.recordScreenArgs)) {
+  if (isRecord9(exec2.recordScreenArgs)) {
     return [execReply(exec2, "recordScreenResult", {
       failure: { error: retryMessage(clientTools, ["record_screen", "computer_use"]) }
     })];
   }
-  if (isRecord8(exec2.computerUseArgs)) {
+  if (isRecord9(exec2.computerUseArgs)) {
     return [execReply(exec2, "computerUseResult", {
       error: {
         error: retryMessage(clientTools, ["computer_use"]),
@@ -29172,7 +29454,7 @@ function cursorNativeExecPolicyReplies(exec2, clientTools) {
       }
     })];
   }
-  if (isRecord8(exec2.mcpArgs)) {
+  if (isRecord9(exec2.mcpArgs)) {
     return [execReply(exec2, "mcpResult", {
       error: { error: retryMessage(clientTools, []) }
     })];
@@ -29244,7 +29526,7 @@ function numberValue(value) {
 function stringValue(value) {
   return typeof value === "string" ? value : "";
 }
-function isRecord8(value) {
+function isRecord9(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 var EXECUTE_HOOK_FIELD_NUMBER = 27;
@@ -29400,14 +29682,14 @@ function isCursorWithheldToolName(name) {
 function cursorNativeExecRedirect(exec2, tools, providerIdentifier) {
   const messageId = numberValue2(exec2.id ?? 0);
   const execId = stringValue2(exec2.execId) || `redirect-${messageId}`;
-  if (isRecord9(exec2.readArgs)) {
-    const path72 = stringValue2(exec2.readArgs.path);
-    if (!path72) return null;
+  if (isRecord10(exec2.readArgs)) {
+    const path82 = stringValue2(exec2.readArgs.path);
+    if (!path82) return null;
     if ([exec2.readArgs.offset, exec2.readArgs.limit].some((value) => typeof value === "number" && value < 0)) return null;
     const offset = positiveNumber(exec2.readArgs.offset);
     const limit = positiveNumber(exec2.readArgs.limit);
     if (offset !== void 0 || limit !== void 0) return null;
-    const mapped = tools.filter((tool) => matchesLeaf(tool, READ_CANDIDATES)).map((tool) => ({ tool, args: readArguments(tool.inputSchemaValue, path72) })).find((candidate) => candidate.args !== null);
+    const mapped = tools.filter((tool) => matchesLeaf(tool, READ_CANDIDATES)).map((tool) => ({ tool, args: readArguments(tool.inputSchemaValue, path82) })).find((candidate) => candidate.args !== null);
     if (!mapped?.args) return null;
     return redirect(
       exec2,
@@ -29419,14 +29701,14 @@ function cursorNativeExecRedirect(exec2, tools, providerIdentifier) {
       "readResult",
       "read-direct",
       mapped.args,
-      { path: path72 }
+      { path: path82 }
     );
   }
-  if (isRecord9(exec2.grepArgs)) {
+  if (isRecord10(exec2.grepArgs)) {
     const grepArgs = exec2.grepArgs;
     const pattern = stringValue2(grepArgs.pattern);
     if (!pattern.trim()) return null;
-    const path72 = stringValue2(grepArgs.path) || ".";
+    const path82 = stringValue2(grepArgs.path) || ".";
     const glob = stringValue2(grepArgs.glob);
     const outputMode = normalizedGrepOutputMode(stringValue2(grepArgs.outputMode));
     if (!outputMode) return null;
@@ -29442,7 +29724,7 @@ function cursorNativeExecRedirect(exec2, tools, providerIdentifier) {
     if (numericOptions.some((value) => typeof value === "number" && value < 0)) return null;
     const mappingInput = {
       pattern,
-      path: path72,
+      path: path82,
       glob,
       outputMode,
       caseInsensitive: grepArgs.caseInsensitive === true,
@@ -29459,7 +29741,7 @@ function cursorNativeExecRedirect(exec2, tools, providerIdentifier) {
     const mapped = tools.filter((tool) => matchesLeaf(tool, GREP_CANDIDATES)).map((tool) => ({ tool, args: grepArguments(tool, mappingInput) })).find((candidate) => candidate.args !== null);
     const nativeArgs = {
       pattern,
-      path: path72,
+      path: path82,
       outputMode,
       ...glob ? { glob } : {},
       ...positiveNumber(grepArgs.offset) === void 0 ? {} : { offset: String(positiveNumber(grepArgs.offset)) }
@@ -29496,15 +29778,15 @@ function cursorNativeExecRedirect(exec2, tools, providerIdentifier) {
       nativeArgs
     );
   }
-  if (isRecord9(exec2.shellArgs) || isRecord9(exec2.shellStreamArgs)) {
-    const argsRecord = isRecord9(exec2.shellArgs) ? exec2.shellArgs : exec2.shellStreamArgs;
+  if (isRecord10(exec2.shellArgs) || isRecord10(exec2.shellStreamArgs)) {
+    const argsRecord = isRecord10(exec2.shellArgs) ? exec2.shellArgs : exec2.shellStreamArgs;
     const command2 = stringValue2(argsRecord.command);
     if (!command2) return null;
     const cwd = stringValue2(argsRecord.workingDirectory);
     const timeout = positiveNumber(argsRecord.timeout) ?? positiveNumber(argsRecord.hardTimeout);
     const mapped = tools.filter((tool) => matchesLeaf(tool, SHELL_CANDIDATES)).map((tool) => ({ tool, args: shellArguments(tool.inputSchemaValue, command2, cwd || void 0, timeout) })).find((candidate) => candidate.args !== null);
     if (!mapped?.args) return null;
-    const stream = isRecord9(exec2.shellStreamArgs);
+    const stream = isRecord10(exec2.shellStreamArgs);
     return redirect(
       exec2,
       mapped.tool,
@@ -29594,9 +29876,9 @@ function cursorNativeRedirectErrorReplies(correlation, error51) {
     }
   }
 }
-function readArguments(schema, path72) {
+function readArguments(schema, path82) {
   const pathKey = firstSchemaProperty(schema, ["file_path", "path"]);
-  return pathKey ? { [pathKey]: path72 } : null;
+  return pathKey ? { [pathKey]: path82 } : null;
 }
 function grepArguments(tool, input) {
   const leaf = normalizedLeaf(tool.clientName);
@@ -29763,7 +30045,7 @@ function parseGrepShellReceipt(output, expectedOutputMode) {
     const decoded = JSON.parse(inflateRawSync(compressed, {
       maxOutputLength: CURSOR_GREP_RECEIPT_MAX_BYTES
     }).toString("utf8"));
-    if (!isRecord9(decoded)) throw new Error("receipt is not an object");
+    if (!isRecord10(decoded)) throw new Error("receipt is not an object");
     if (decoded.ok === false && typeof decoded.error === "string") {
       return { ok: false, error: decoded.error };
     }
@@ -29776,7 +30058,7 @@ function parseGrepShellReceipt(output, expectedOutputMode) {
     if (!Array.isArray(decoded.counts) || !decoded.counts.every((entry) => Array.isArray(entry) && entry.length === 2 && typeof entry[0] === "string" && typeof entry[1] === "number" && Number.isSafeInteger(entry[1]) && entry[1] >= 0)) {
       throw new Error("receipt counts are invalid");
     }
-    if (!Array.isArray(decoded.matches) || !decoded.matches.every((entry) => isRecord9(entry) && typeof entry.file === "string" && typeof entry.lineNumber === "number" && Number.isSafeInteger(entry.lineNumber) && entry.lineNumber > 0 && typeof entry.content === "string" && typeof entry.contentTruncated === "boolean" && typeof entry.isContextLine === "boolean")) {
+    if (!Array.isArray(decoded.matches) || !decoded.matches.every((entry) => isRecord10(entry) && typeof entry.file === "string" && typeof entry.lineNumber === "number" && Number.isSafeInteger(entry.lineNumber) && entry.lineNumber > 0 && typeof entry.content === "string" && typeof entry.contentTruncated === "boolean" && typeof entry.isContextLine === "boolean")) {
       throw new Error("receipt matches are invalid");
     }
     for (const key of ["totalFiles", "totalLines", "totalMatchedLines"]) {
@@ -29794,7 +30076,7 @@ function parseGrepShellReceipt(output, expectedOutputMode) {
   }
 }
 function buildGrepReceiptSuccess(args, receipt) {
-  const path72 = args.path || ".";
+  const path82 = args.path || ".";
   let result;
   if (receipt.outputMode === "files_with_matches") {
     result = {
@@ -29840,15 +30122,15 @@ function buildGrepReceiptSuccess(args, receipt) {
   }
   return {
     pattern: args.pattern ?? "",
-    path: path72,
+    path: path82,
     outputMode: receipt.outputMode,
-    workspaceResults: { [path72]: result }
+    workspaceResults: { [path82]: result }
   };
 }
 function buildGrepSuccess(args, output) {
   const outputMode = normalizedGrepOutputMode(args.outputMode) ?? "content";
   const lines = output.split(/\r?\n/).map((line) => line.trimEnd()).filter((line) => line.length > 0 && !line.startsWith("[") && !/^no matches/i.test(line));
-  const path72 = args.path || ".";
+  const path82 = args.path || ".";
   let result;
   if (outputMode === "files_with_matches") {
     result = {
@@ -29911,9 +30193,9 @@ function buildGrepSuccess(args, output) {
   }
   return {
     pattern: args.pattern ?? "",
-    path: path72,
+    path: path82,
     outputMode,
-    workspaceResults: { [path72]: result }
+    workspaceResults: { [path82]: result }
   };
 }
 function parseCallerShellOutput(output, isError) {
@@ -29975,7 +30257,7 @@ function redirect(exec2, tool, providerIdentifier, messageId, execId, execCase,
 }
 function execArgsToolCallId(exec2) {
   for (const value of Object.values(exec2)) {
-    if (!isRecord9(value)) continue;
+    if (!isRecord10(value)) continue;
     const toolCallId = stringValue2(value.toolCallId);
     if (toolCallId) return toolCallId;
   }
@@ -29996,7 +30278,7 @@ function firstSchemaProperty(schema, candidates) {
   return candidates.find((candidate) => schemaHasProperty(schema, candidate));
 }
 function schemaHasProperty(schema, name) {
-  return isRecord9(schema.properties) && Object.prototype.hasOwnProperty.call(schema.properties, name);
+  return isRecord10(schema.properties) && Object.prototype.hasOwnProperty.call(schema.properties, name);
 }
 function execReply2(exec2, resultName, result) {
   return {
@@ -30023,7 +30305,7 @@ function positiveNumber(value) {
 function stringValue2(value) {
   return typeof value === "string" ? value : "";
 }
-function isRecord9(value) {
+function isRecord10(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 var cursorAgentDescriptor = [
@@ -30854,18 +31136,18 @@ function decodeCursorServerMessage(payload) {
   const message = fromBinary(AgentServerMessageSchema, payload);
   const unknownExecFields = extractCursorUnknownExecFields(message);
   const json3 = toJson(AgentServerMessageSchema, message);
-  if (!isRecord10(json3)) throw new TypeError("Cursor server frame was not a message object");
+  if (!isRecord11(json3)) throw new TypeError("Cursor server frame was not a message object");
   if (unknownExecFields.length > 0) {
     Object.defineProperty(json3, CURSOR_UNKNOWN_EXEC_FIELDS, { value: unknownExecFields });
   }
   return json3;
 }
 function extractCursorUnknownExecFields(message) {
-  if (!isRecord10(message) || !isRecord10(message.message)) return [];
-  if (message.message.case !== "execServerMessage" || !isRecord10(message.message.value)) return [];
+  if (!isRecord11(message) || !isRecord11(message.message)) return [];
+  if (message.message.case !== "execServerMessage" || !isRecord11(message.message.value)) return [];
   const fields = message.message.value.$unknown;
   if (!Array.isArray(fields)) return [];
-  return fields.filter((field) => isRecord10(field) && typeof field.no === "number" && typeof field.wireType === "number" && field.data instanceof Uint8Array);
+  return fields.filter((field) => isRecord11(field) && typeof field.no === "number" && typeof field.wireType === "number" && field.data instanceof Uint8Array);
 }
 function parseConnectEndStreamError(payload) {
   try {
@@ -31187,7 +31469,7 @@ function cursorToolArgumentBytes(argumentsText) {
   } catch {
     return {};
   }
-  if (!isRecord10(parsed)) return {};
+  if (!isRecord11(parsed)) return {};
   return Object.fromEntries(Object.entries(parsed).map(([name, value]) => [
     name,
     Buffer.from(toBinary(ValueSchema, fromJson(ValueSchema, value))).toString("base64")
@@ -32472,7 +32754,7 @@ ${argumentsText}`;
   const handleFrame = (frame, replayed = false) => {
     const unknownExecFields = frame[CURSOR_UNKNOWN_EXEC_FIELDS] ?? [];
     lastFrame = describeCursorServerFrame(frame, unknownExecFields);
-    const tokenDetails = isRecord10(frame.conversationCheckpointUpdate) && isRecord10(frame.conversationCheckpointUpdate.tokenDetails) ? frame.conversationCheckpointUpdate.tokenDetails : void 0;
+    const tokenDetails = isRecord11(frame.conversationCheckpointUpdate) && isRecord11(frame.conversationCheckpointUpdate.tokenDetails) ? frame.conversationCheckpointUpdate.tokenDetails : void 0;
     const checkpointContextTokens = positiveTokenCount(tokenDetails?.usedTokens);
     const checkpointContextWindow = positiveTokenCount(tokenDetails?.maxTokens);
     if (!replayed) {
@@ -32485,7 +32767,7 @@ ${argumentsText}`;
         ...checkpointContextWindow === void 0 ? {} : { contextWindow: checkpointContextWindow }
       });
     }
-    if (isRecord10(frame.conversationCheckpointUpdate)) {
+    if (isRecord11(frame.conversationCheckpointUpdate)) {
       if (checkpointContextTokens !== void 0) {
         wireLog("cursor.wire.checkpoint", {
           model: diagnosticModel,
@@ -32508,7 +32790,7 @@ ${argumentsText}`;
       }
       return;
     }
-    if (isRecord10(frame.kvServerMessage)) {
+    if (isRecord11(frame.kvServerMessage)) {
       const kv = kvReply(frame.kvServerMessage, blobs);
       stream.write(encodeCursorClientMessage(kv.message));
       if (kv.fetch) {
@@ -32529,7 +32811,7 @@ ${argumentsText}`;
       });
       return;
     }
-    if (isRecord10(frame.interactionQuery)) {
+    if (isRecord11(frame.interactionQuery)) {
       const reply = cursorInteractionQueryReply(frame.interactionQuery);
       stream.write(encodeCursorClientMessage(reply.message));
       report("client.reply", { model: diagnosticModel, reply: reply.replyKind });
@@ -32545,7 +32827,7 @@ ${argumentsText}`;
       }
       return;
     }
-    if (isRecord10(frame.error)) {
+    if (isRecord11(frame.error)) {
       if (state === "attached") {
         emit({ type: "error", error: cursorError(frame.error) });
         completeRun("server_error");
@@ -32574,8 +32856,8 @@ ${argumentsText}`;
       return;
     }
     if (state !== "attached") return;
-    if (isRecord10(frame.execServerMessage)) {
-      if (isRecord10(frame.execServerMessage.requestContextArgs)) {
+    if (isRecord11(frame.execServerMessage)) {
+      if (isRecord11(frame.execServerMessage.requestContextArgs)) {
         stream.write(encodeCursorClientMessage(cursorRequestContextReply(frame.execServerMessage, tools)));
         report("client.reply", { model: diagnosticModel, reply: "exec.requestContext" });
         return;
@@ -32664,10 +32946,10 @@ ${argumentsText}`;
       }
       return;
     }
-    const update = isRecord10(frame.interactionUpdate) ? frame.interactionUpdate : void 0;
+    const update = isRecord11(frame.interactionUpdate) ? frame.interactionUpdate : void 0;
     if (update === void 0) return;
     if (isSettledToolUpdate(update)) return;
-    if (isRecord10(update.textDelta) && typeof update.textDelta.text === "string") {
+    if (isRecord11(update.textDelta) && typeof update.textDelta.text === "string") {
       activeSegment.outputText += update.textDelta.text;
       emit({
         type: "response.output_text.delta",
@@ -32678,7 +32960,7 @@ ${argumentsText}`;
       });
       return;
     }
-    if (isRecord10(update.thinkingDelta) && typeof update.thinkingDelta.text === "string") {
+    if (isRecord11(update.thinkingDelta) && typeof update.thinkingDelta.text === "string") {
       activeSegment.outputText += update.thinkingDelta.text;
       emit({
         type: "response.reasoning_summary_text.delta",
@@ -32688,12 +32970,12 @@ ${argumentsText}`;
       });
       return;
     }
-    if (isRecord10(update.tokenDelta)) {
+    if (isRecord11(update.tokenDelta)) {
       const tokens = positiveTokenCount(update.tokenDelta.tokens);
       if (tokens !== void 0) activeSegment.contextOutputTokens += tokens;
       return;
     }
-    if (isRecord10(update.toolCallStarted)) {
+    if (isRecord11(update.toolCallStarted)) {
       const wireCall = mcpCallFromToolUpdate(update.toolCallStarted);
       const call = wireCall ? cursorClientMcpCall(wireCall, tools) : null;
       if (call) {
@@ -32703,7 +32985,7 @@ ${argumentsText}`;
       }
       return;
     }
-    if (isRecord10(update.partialToolCall)) {
+    if (isRecord11(update.partialToolCall)) {
       const wireCall = mcpCallFromToolUpdate(update.partialToolCall);
       const call = wireCall ? cursorClientMcpCall(wireCall, tools) : null;
       if (!call) return;
@@ -32714,7 +32996,7 @@ ${argumentsText}`;
       rescheduleToolTurnFinish();
       return;
     }
-    if (isRecord10(update.toolCallCompleted)) {
+    if (isRecord11(update.toolCallCompleted)) {
       const wireCall = mcpCallFromToolUpdate(update.toolCallCompleted);
       const call = wireCall ? cursorClientMcpCall(wireCall, tools) : null;
       if (!call) return;
@@ -32727,7 +33009,7 @@ ${argumentsText}`;
       rescheduleToolTurnFinish();
       return;
     }
-    if (isRecord10(update.turnEnded)) completeRun("turn_ended");
+    if (isRecord11(update.turnEnded)) completeRun("turn_ended");
   };
   const eventsFor = (segment) => (async function* () {
     try {
@@ -32938,34 +33220,34 @@ var CURSOR_INTERACTION_QUERY_CASES = [
 ];
 var CURSOR_KV_CASES = ["getBlobArgs", "setBlobArgs"];
 function describeCursorServerFrame(frame, unknownExecFields = []) {
-  if (isRecord10(frame.interactionUpdate)) {
+  if (isRecord11(frame.interactionUpdate)) {
     return `interactionUpdate.${cursorNestedRecordCase(
       frame.interactionUpdate,
       CURSOR_INTERACTION_UPDATE_CASES
     )}`;
   }
-  if (isRecord10(frame.execServerMessage)) {
+  if (isRecord11(frame.execServerMessage)) {
     const knownCase = cursorNestedRecordCase(frame.execServerMessage, CURSOR_EXEC_CASES);
     return `execServerMessage.${knownCase === "unknown" ? cursorUnknownExecCaseName(unknownExecFields) : knownCase}`;
   }
-  if (isRecord10(frame.interactionQuery)) {
+  if (isRecord11(frame.interactionQuery)) {
     return `interactionQuery.${cursorNestedRecordCase(
       frame.interactionQuery,
       CURSOR_INTERACTION_QUERY_CASES
     )}`;
   }
-  if (isRecord10(frame.kvServerMessage)) {
+  if (isRecord11(frame.kvServerMessage)) {
     return `kvServerMessage.${cursorNestedRecordCase(frame.kvServerMessage, CURSOR_KV_CASES)}`;
   }
-  if (isRecord10(frame.conversationCheckpointUpdate)) return "conversationCheckpointUpdate";
-  if (isRecord10(frame.error)) return "error";
+  if (isRecord11(frame.conversationCheckpointUpdate)) return "conversationCheckpointUpdate";
+  if (isRecord11(frame.error)) return "error";
   return "unknown";
 }
 function isCursorHeartbeatFrame(frame) {
-  return isRecord10(frame.interactionUpdate) && isRecord10(frame.interactionUpdate.heartbeat);
+  return isRecord11(frame.interactionUpdate) && isRecord11(frame.interactionUpdate.heartbeat);
 }
 function cursorNestedRecordCase(value, cases) {
-  return cases.find((candidate) => isRecord10(value[candidate])) ?? "unknown";
+  return cases.find((candidate) => isRecord11(value[candidate])) ?? "unknown";
 }
 function positiveTokenCount(value) {
   if (typeof value !== "number" || !Number.isSafeInteger(value) || value <= 0) return void 0;
@@ -32977,8 +33259,8 @@ function cursorInteractionQueryReply(query) {
   const response = (result = {}) => ({
     interactionResponse: { id, ...result }
   });
-  if (isRecord10(query.createPlanRequestQuery)) {
-    const args = isRecord10(query.createPlanRequestQuery.args) ? query.createPlanRequestQuery.args : void 0;
+  if (isRecord11(query.createPlanRequestQuery)) {
+    const args = isRecord11(query.createPlanRequestQuery.args) ? query.createPlanRequestQuery.args : void 0;
     const name = stringValue3(args?.name)?.trim();
     const overview = stringValue3(args?.overview)?.trim();
     const plan = stringValue3(args?.plan)?.trim();
@@ -32994,7 +33276,7 @@ function cursorInteractionQueryReply(query) {
 ` } : {}
     };
   }
-  if (isRecord10(query.askQuestionInteractionQuery)) {
+  if (isRecord11(query.askQuestionInteractionQuery)) {
     return {
       message: response({
         askQuestionInteractionResponse: {
@@ -33004,7 +33286,7 @@ function cursorInteractionQueryReply(query) {
       replyKind: "interaction.askQuestion.rejected"
     };
   }
-  if (isRecord10(query.switchModeRequestQuery)) {
+  if (isRecord11(query.switchModeRequestQuery)) {
     return {
       message: response({
         switchModeRequestResponse: {
@@ -33014,19 +33296,19 @@ function cursorInteractionQueryReply(query) {
       replyKind: "interaction.switchMode.rejected"
     };
   }
-  if (isRecord10(query.webSearchRequestQuery)) {
+  if (isRecord11(query.webSearchRequestQuery)) {
     return {
       message: response({ webSearchRequestResponse: { approved: {} } }),
       replyKind: "interaction.webSearch.approved"
     };
   }
-  if (isRecord10(query.exaSearchRequestQuery)) {
+  if (isRecord11(query.exaSearchRequestQuery)) {
     return {
       message: response({ exaSearchRequestResponse: { approved: {} } }),
       replyKind: "interaction.exaSearch.approved"
     };
   }
-  if (isRecord10(query.exaFetchRequestQuery)) {
+  if (isRecord11(query.exaFetchRequestQuery)) {
     return {
       message: response({ exaFetchRequestResponse: { approved: {} } }),
       replyKind: "interaction.exaFetch.approved"
@@ -33036,7 +33318,7 @@ function cursorInteractionQueryReply(query) {
 }
 function kvReply(kv, blobs) {
   const id = kv.id ?? 0;
-  if (isRecord10(kv.getBlobArgs)) {
+  if (isRecord11(kv.getBlobArgs)) {
     const blobId = typeof kv.getBlobArgs.blobId === "string" ? kv.getBlobArgs.blobId : "";
     const blobData = blobs.get(blobId);
     return {
@@ -33048,7 +33330,7 @@ function kvReply(kv, blobs) {
       }
     };
   }
-  if (isRecord10(kv.setBlobArgs)) {
+  if (isRecord11(kv.setBlobArgs)) {
     const blobId = typeof kv.setBlobArgs.blobId === "string" ? kv.setBlobArgs.blobId : "";
     const blobData = typeof kv.setBlobArgs.blobData === "string" ? kv.setBlobArgs.blobData : "";
     if (blobId) blobs.set(blobId, blobData);
@@ -33099,7 +33381,7 @@ function repairCursorArgumentValue(value, schema) {
     return { value: String(value), count: 1 };
   }
   if (Array.isArray(value)) {
-    const itemSchema = isRecord10(schema) ? schema.items : void 0;
+    const itemSchema = isRecord11(schema) ? schema.items : void 0;
     if (itemSchema === void 0) return { value, count: 0 };
     let repairedValues;
     let count2 = 0;
@@ -33112,7 +33394,7 @@ function repairCursorArgumentValue(value, schema) {
     });
     return { value: repairedValues ?? value, count: count2 };
   }
-  if (!isRecord10(value) || !isRecord10(schema) || !isRecord10(schema.properties)) {
+  if (!isRecord11(value) || !isRecord11(schema) || !isRecord11(schema.properties)) {
     return { value, count: 0 };
   }
   let repairedValue;
@@ -33128,12 +33410,12 @@ function repairCursorArgumentValue(value, schema) {
   return { value: repairedValue ?? value, count };
 }
 function cursorSchemaRequiresString(schema) {
-  if (!isRecord10(schema)) return false;
+  if (!isRecord11(schema)) return false;
   if (schema.type === "string") return true;
   return Array.isArray(schema.type) && schema.type.includes("string") && schema.type.every((type) => type === "string" || type === "null");
 }
 function mcpCallFromToolUpdate(value) {
-  const toolCall = isRecord10(value.toolCall) ? value.toolCall : void 0;
+  const toolCall = isRecord11(value.toolCall) ? value.toolCall : void 0;
   const args = toolCall ? mcpArgsFromToolCall(toolCall) : void 0;
   if (!args) return null;
   const publicCallId = stringValue3(value.callId);
@@ -33158,7 +33440,7 @@ var CURSOR_TOOL_UPDATE_CASES = [
 function cursorToolUpdateIdentifiers(update) {
   for (const key of CURSOR_TOOL_UPDATE_CASES) {
     const value = update[key];
-    if (!isRecord10(value)) continue;
+    if (!isRecord11(value)) continue;
     const call = mcpCallFromToolUpdate(value);
     if (!call) return [];
     return [...new Set(
@@ -33168,9 +33450,9 @@ function cursorToolUpdateIdentifiers(update) {
   return void 0;
 }
 function isCursorClientToolFrame(frame, tools, redirectTools) {
-  const update = isRecord10(frame.interactionUpdate) ? frame.interactionUpdate : void 0;
+  const update = isRecord11(frame.interactionUpdate) ? frame.interactionUpdate : void 0;
   if (update !== void 0) return cursorToolUpdateIdentifiers(update) !== void 0;
-  const exec2 = isRecord10(frame.execServerMessage) ? frame.execServerMessage : void 0;
+  const exec2 = isRecord11(frame.execServerMessage) ? frame.execServerMessage : void 0;
   if (exec2 === void 0) return false;
   const wireCall = mcpCallFromExecMessage(exec2);
   const call = wireCall ? cursorClientMcpCall(wireCall, tools) : null;
@@ -33186,16 +33468,16 @@ function isCursorClientToolFrame(frame, tools, redirectTools) {
   ) !== null;
 }
 function isCursorParkedResidueFrame(frame, parked) {
-  const update = isRecord10(frame.interactionUpdate) ? frame.interactionUpdate : void 0;
+  const update = isRecord11(frame.interactionUpdate) ? frame.interactionUpdate : void 0;
   if (update === void 0) return false;
-  if (isRecord10(update.tokenDelta)) return true;
+  if (isRecord11(update.tokenDelta)) return true;
   const identifiers = cursorToolUpdateIdentifiers(update);
   if (identifiers === void 0 || identifiers.length === 0 || parked === void 0) return false;
   const sealed = new Set(parked.flatMap((call) => [call.callId, call.toolCallId]));
   return identifiers.some((identifier) => sealed.has(identifier));
 }
 function mcpCallFromExecMessage(value) {
-  const args = isRecord10(value.mcpArgs) ? value.mcpArgs : void 0;
+  const args = isRecord11(value.mcpArgs) ? value.mcpArgs : void 0;
   if (!args) return null;
   const toolCallId = stringValue3(args.toolCallId);
   if (!toolCallId) return null;
@@ -33213,14 +33495,14 @@ function mcpCallFromExecMessage(value) {
   };
 }
 function mcpArgsFromToolCall(toolCall) {
-  const direct = isRecord10(toolCall.mcpToolCall) ? toolCall.mcpToolCall : void 0;
-  if (direct && isRecord10(direct.args)) return direct.args;
-  const tool = isRecord10(toolCall.tool) ? toolCall.tool : void 0;
-  const nested = tool && isRecord10(tool.mcpToolCall) ? tool.mcpToolCall : void 0;
-  return nested && isRecord10(nested.args) ? nested.args : void 0;
+  const direct = isRecord11(toolCall.mcpToolCall) ? toolCall.mcpToolCall : void 0;
+  if (direct && isRecord11(direct.args)) return direct.args;
+  const tool = isRecord11(toolCall.tool) ? toolCall.tool : void 0;
+  const nested = tool && isRecord11(tool.mcpToolCall) ? tool.mcpToolCall : void 0;
+  return nested && isRecord11(nested.args) ? nested.args : void 0;
 }
 function cursorMcpArguments(args) {
-  if (!isRecord10(args.args) || Object.keys(args.args).length === 0) return {};
+  if (!isRecord11(args.args) || Object.keys(args.args).length === 0) return {};
   const decoded = {};
   for (const [name, value] of Object.entries(args.args)) {
     if (typeof value !== "string") {
@@ -33295,7 +33577,7 @@ function cursorError(value) {
     message: typeof value.message === "string" ? value.message : "Cursor request failed"
   };
 }
-function isRecord10(value) {
+function isRecord11(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 var DEFAULT_CURSOR_DIAGNOSTIC_MAX_BYTES = 4 * 1024 * 1024;
@@ -33472,78 +33754,6 @@ function kimiAnthropicHeaders(requestHeaders, apiKey) {
   }
   return headers;
 }
-function normalizeAiGatewaySettings(value) {
-  if (!isRecord11(value) || value.version !== 1) return { version: 1 };
-  const models = Array.isArray(value.models) ? value.models.filter((entry) => isRecord11(entry) && typeof entry.id === "string" && entry.id.length > 0).flatMap((entry) => {
-    const model = findGatewayModel(entry.id);
-    if (!model) return [];
-    const efforts = Array.isArray(entry.efforts) ? entry.efforts.filter((level) => typeof level === "string" && level.length > 0) : [];
-    const exposed = efforts.length > 0 ? narrowEffortLadder(model, efforts) : void 0;
-    return [{
-      id: entry.id,
-      ...exposed ? { efforts: [...exposed] } : {},
-      ...entry.hostOnly === true ? { hostOnly: true } : {}
-    }];
-  }) : [];
-  const providerPriority = sanitizeProviderPriority(value.providerPriority);
-  const compactCeiling = normalizeCompactCeiling(value.compactCeiling);
-  return {
-    version: 1,
-    ...models.length > 0 ? { models } : {},
-    ...value.cursorDiagnosticsEnabled === true ? { cursorDiagnosticsEnabled: true } : {},
-    ...typeof value.wireLogEnabled === "boolean" ? { wireLogEnabled: value.wireLogEnabled } : {},
-    ...providerPriority ? { providerPriority: [...providerPriority] } : {},
-    ...compactCeiling !== void 0 ? { compactCeiling } : {}
-  };
-}
-function sanitizeProviderPriority(value) {
-  if (!Array.isArray(value)) return void 0;
-  const seen = /* @__PURE__ */ new Set();
-  const cleaned = [];
-  for (const entry of value) {
-    if (typeof entry !== "string") continue;
-    if (!GATEWAY_PROVIDERS.includes(entry)) continue;
-    const provider = entry;
-    if (seen.has(provider)) continue;
-    seen.add(provider);
-    cleaned.push(provider);
-  }
-  return cleaned.length > 0 ? cleaned : void 0;
-}
-function isRecord11(value) {
-  return typeof value === "object" && value !== null && !Array.isArray(value);
-}
-function resolveAiGatewaySelection(settings2) {
-  const enabled = [];
-  const hostOnlyIds = /* @__PURE__ */ new Set();
-  const effortExposure = {};
-  for (const entry of settings2?.models ?? []) {
-    const model = findGatewayModel(entry.id);
-    if (!model) continue;
-    if (entry.hostOnly === true) hostOnlyIds.add(model.id);
-    if (enabled.includes(model)) continue;
-    enabled.push(model);
-    const exposed = narrowEffortLadder(model, entry.efforts);
-    if (exposed) effortExposure[model.id] = exposed;
-  }
-  const models = sortGatewayModelsByProvider(enabled);
-  const delegationModels = models.filter((model) => !hostOnlyIds.has(model.id));
-  return { models, delegationModels, effortExposure, providerPriority: settings2?.providerPriority };
-}
-function narrowEffortLadder(model, efforts) {
-  if (!efforts || efforts.length === 0) return void 0;
-  const ladder = buildGatewayModelConstraints(model).effortLadder;
-  const narrowed = ladder.filter((rung) => efforts.includes(rung));
-  if (narrowed.length === 0 || narrowed.length === ladder.length) return void 0;
-  return narrowed;
-}
-function sortGatewayModelsByProvider(models) {
-  return [...models].sort((left, right) => {
-    const providerDelta = GATEWAY_PROVIDERS.indexOf(left.provider) - GATEWAY_PROVIDERS.indexOf(right.provider);
-    if (providerDelta !== 0) return providerDelta;
-    return GATEWAY_MODELS.indexOf(left) - GATEWAY_MODELS.indexOf(right);
-  });
-}
 var codexRequestPolicy = {
   provider: "codex",
   shapeRequest: (request, steps) => steps.withholdWebSearchTools(steps.pruneSkillPayloads(request))
@@ -33754,6 +33964,14 @@ function createAiGatewayRouter(deps) {
       return false;
     }
   };
+  const xaiEndpoint = () => {
+    if (!deps.readAiGatewaySettings) return DEFAULT_XAI_ENDPOINT_PREFERENCE;
+    try {
+      return deps.readAiGatewaySettings().xaiEndpoint ?? DEFAULT_XAI_ENDPOINT_PREFERENCE;
+    } catch {
+      return DEFAULT_XAI_ENDPOINT_PREFERENCE;
+    }
+  };
   const compactCeiling = () => {
     try {
       return gatewaySettings()?.compactCeiling;
@@ -33901,7 +34119,10 @@ function createAiGatewayRouter(deps) {
         );
         return true;
       }
-      const gateway = deps.gateway ?? (target2.provider === "cursor" ? ownedCursorGateway : target2.provider === "opencode" ? createOpencodeGateway(opencodeGoWire(target2)) : target2.provider === "xai" ? new AnthropicMessagesGateway(new XaiResponsesAdapter({ fetch: fetchImpl })) : createGatewayFor(target2, chatgptAccountId, deps.originator));
+      const gateway = deps.gateway ?? (target2.provider === "cursor" ? ownedCursorGateway : target2.provider === "opencode" ? createOpencodeGateway(opencodeGoWire(target2)) : target2.provider === "xai" ? new AnthropicMessagesGateway(new XaiResponsesAdapter({
+        fetch: fetchImpl,
+        endpoint: xaiEndpoint()
+      })) : createGatewayFor(target2, chatgptAccountId, deps.originator));
       const diagnosticsEnabled = target2.provider === "cursor" ? cursorDiagnosticsEnabled() : void 0;
       const modelContextWindow = typeof target2.contextWindow === "number" && Number.isFinite(target2.contextWindow) && target2.contextWindow > 0 ? target2.contextWindow : void 0;
       const upstream = await gateway.stream(body2, {
@@ -34063,6 +34284,7 @@ function createAiGatewaySettingsStore(deps = {}) {
       // 무관한 모델 노출 저장 한 번이 사용자의 소진 순서를 지운다.
       ...current.providerPriority ? { providerPriority: current.providerPriority } : {},
       ...current.compactCeiling !== void 0 ? { compactCeiling: current.compactCeiling } : {},
+      ...current.xaiEndpoint !== void 0 ? { xaiEndpoint: current.xaiEndpoint } : {},
       ...value ?? {}
     })),
     writeCursorDiagnosticsEnabled: (enabled) => update((current) => normalizeAiGatewaySettings({
@@ -34088,12 +34310,22 @@ function createAiGatewaySettingsStore(deps = {}) {
       const withoutCeiling = { ...next };
       delete withoutCeiling.compactCeiling;
       return withoutCeiling;
+    }),
+    writeXaiEndpoint: (endpoint) => update((current) => {
+      const next = normalizeAiGatewaySettings({
+        ...current,
+        ...endpoint === void 0 ? {} : { xaiEndpoint: endpoint }
+      });
+      if (endpoint !== void 0) return next;
+      const withoutEndpoint = { ...next };
+      delete withoutEndpoint.xaiEndpoint;
+      return withoutEndpoint;
     })
   };
 }
 function fileExists(filePath) {
   try {
-    return fs32.lstatSync(filePath).isFile();
+    return fs42.lstatSync(filePath).isFile();
   } catch {
     return false;
   }
@@ -34102,7 +34334,7 @@ var CONCLUSIVE_LEGACY_READ_ERRORS = /* @__PURE__ */ new Set(["ENOENT", "EISDIR",
 function readLegacySettings(legacyPath) {
   let raw;
   try {
-    raw = fs32.readFileSync(legacyPath, "utf-8");
+    raw = fs42.readFileSync(legacyPath, "utf-8");
   } catch (error51) {
     return CONCLUSIVE_LEGACY_READ_ERRORS.has(error51.code ?? "") ? { kind: "nothing" } : { kind: "unavailable" };
   }
@@ -34495,7 +34727,7 @@ var GATEWAY_MODELS_DOCTRINE = {
   // usageGuidelines에 적은 문장은 모델에 도달하지 않으므로, 틀리면 조용히 실패하는 두 규칙은
   // 여기에 둔다. 나머지 판정 규칙은 응답 본문을 보면 알 수 있어 싣지 않는다 — 길어질수록
   // 읽히지 않고, 읽히지 않으면 없는 것과 같다.
-  description: `Report the gateway models currently available to this session, each model's routing constraints, capability class, and benchmark evidence, and the current provider allowances and the user's provider spend priority. The roster is the models the user exposed in the Console minus the ones reserved for the host session, and it is editable while this session runs, so it is resolved at call time rather than remembered. Two spellings, never interchangeable: agentTypes names an identity for the Agent tool's subagent_type, while modelId is the model as a value for a workflow stage's opts.model \u2014 each is refused where the other belongs. Names are registered once at session start while this roster is re-read live, so a model or reasoning rung exposed mid-session appears here under a name that will not resolve until a new session.`,
+  description: `Report the gateway models currently available to this session, each model's routing constraints, capability class, and benchmark evidence, and the current provider allowances and the user's provider spend priority. The roster is the models the user exposed in the Console minus the ones reserved for the host session, and it is editable while this session runs, so it is resolved at call time rather than remembered. Two spellings, never interchangeable: agentTypes names an identity \u2014 the Agent tool's subagent_type, or a workflow stage's opts.agentType \u2014 while modelId is the model as a value for a workflow stage's opts.model, and each is refused where the other belongs. Names are registered once at session start while this roster is re-read live, so a model or reasoning rung exposed mid-session appears here under a name that will not resolve until a new session.`,
   promptSnippet: `gateway_models \u2014 Live roster of assignable gateway models: constraints, capability class, benchmark evidence, provider allowances, and the user's provider priority.`,
   whenToUse: [],
   whenNotToUse: [],
@@ -34749,7 +34981,7 @@ init_paths();
 
 // ../../packages/fleet-admiral/src/agent-cli/assets.generated.ts
 var EMBEDDED_AGENT_CLI_HOOK_ASSETS = [
-  { relativePath: "fleet-gateway-model-guard.mjs", content: '#!/usr/bin/env node\n// Fleet gateway model guard \u2014 \uAC8C\uC774\uD2B8\uC6E8\uC774 \uC138\uC158\uC758 \uC704\uC784 \uC815\uCC45\uC744 \uCF54\uB4DC\uB85C \uAC15\uC81C\uD558\uB294 \uB2E8\uC77C \uD6C5.\n//\n// \uC774 \uC800\uC7A5\uC18C\uB294 Admiral \uC2DC\uC2A4\uD15C \uD504\uB86C\uD504\uD2B8\uB97C \uC2E3\uC9C0 \uC54A\uB294\uB2E4. \uC704\uC784 \uC804\uC5D0 \uB85C\uC2A4\uD130\uB97C \uC77D\uACE0 \uC815\uCCB4\uC131\uC744\n// \uD540\uD558\uB77C\uB294 \uC9C0\uCE68\uC774 \uC0C1\uC8FC \uD14D\uC2A4\uD2B8\uB85C \uC874\uC7AC\uD558\uC9C0 \uC54A\uC73C\uBBC0\uB85C, \uADF8 \uC5ED\uD560 \uC804\uBD80\uAC00 \uC774 \uC2A4\uD06C\uB9BD\uD2B8\uC5D0 \uC788\uB2E4.\n//\n// \uCCAB \uC778\uC790\uAC00 \uC11C\uBE0C\uCEE4\uB9E8\uB4DC\uB2E4. \uD6C5 \uC774\uBCA4\uD2B8\uB9C8\uB2E4 \uBCC4\uB3C4 \uD30C\uC77C\uC744 \uB450\uC9C0 \uC54A\uB294 \uC774\uC720\uB294 \uC138 \uD310\uC815\uC774 \uAC19\uC740\n// \uC5B4\uD718(\uC815\uCCB4\uC131 \uC774\uB984 / modelId / \uC811\uC218\uC99D)\uB97C \uACF5\uC720\uD558\uAE30 \uB54C\uBB38\uC774\uB2E4 \u2014 \uD30C\uC77C\uC744 \uCABC\uAC1C\uBA74 \uADF8 \uC5B4\uD718\uAC00\n// \uC138 \uACF3\uC5D0\uC11C \uB530\uB85C \uB299\uB294\uB2E4.\n//\n//   remind            UserPromptSubmit          \uB9E4 \uD134 \uADDC\uC57D \uC8FC\uC785 (\uBB34\uC870\uAC74)\n//   gate-delegation   PreToolUse  Agent|Workflow  \uD540\uB418\uC9C0 \uC54A\uC740 \uC704\uC784\uC744 \uCC28\uB2E8\n//   workflow-receipt  PostToolUse Workflow        \uC811\uC218\uC99D\uC744 \uACB0\uACFC\uB85C \uC77D\uB294 \uC0AC\uACE0\uB97C \uCC28\uB2E8\n//\n// \uC0C1\uD0DC\uB97C \uB0A8\uAE30\uC9C0 \uC54A\uB294\uB2E4. \uD6C5\uC740 \uD638\uCD9C\uB9C8\uB2E4 \uC0C8 \uD504\uB85C\uC138\uC2A4\uB85C \uB728\uBBC0\uB85C \uD504\uB85C\uC138\uC2A4 \uAC04 \uAE30\uC5B5\uC740 \uD30C\uC77C\uB85C\uB9CC\n// \uAC00\uB2A5\uD55C\uB370, \uADF8 \uD30C\uC77C\uC740 \uACE7 \uC2E0\uC120\uB3C4\xB7\uC815\uB9AC\xB7\uACBD\uD569\uC744 \uB5A0\uC548\uB294 \uB450 \uBC88\uC9F8 \uC9C4\uC2E4\uC774 \uB41C\uB2E4. \uC138 \uD310\uC815 \uBAA8\uB450\n// stdin \uD55C \uBC88\uC73C\uB85C \uB05D\uB098\uB3C4\uB85D \uC9F0\uB2E4 \u2014 \uADF8\uB798\uC11C \uD0C0\uC784\uC544\uC6C3\uC73C\uB85C \uAC8C\uC774\uD2B8\uAC00 \uC870\uC6A9\uD788 \uC5F4\uB9B4 \uC5EC\uC9C0\uB3C4 \uC791\uB2E4.\nimport { readFileSync } from "node:fs";\n\n// \uBAA8\uB378\uC5D0\uAC8C \uC8FC\uB294 \uC9C0\uC2DC\uC774\uBBC0\uB85C \uC601\uC5B4\uB85C \uC4F4\uB2E4.\nconst TURN_REMINDER = [\n  "Before any Agent or Workflow run leaves the host, call gateway_models and pin an identity from what it",\n  "reports \u2014 allowances move while work is in flight.",\n  "Agent: subagent_type = the fleet:* name. Workflow: opts.model = the modelId, the claude-gateway-- prefix",\n  "included. The two spellings are never interchangeable.",\n].join(" ");\n\nconst IN_FLIGHT_CONTRACT = [\n  "This Workflow call returned a receipt, not a result. The run is still in flight and its result arrives later.",\n  "End this turn with one status line: which surface, how many stages, and what you are waiting for.",\n  "Do not review, conclude, summarize, or predict what the run will find \u2014 a reading written before the result is",\n  "indistinguishable from the result to the reader, and it is still there after the real one lands.",\n  "Report the finding once, in the turn the result arrives. If asked before then, say it is still running.",\n].join(" ");\n\nconst PIN_INSTRUCTION = [\n  "Call gateway_models first, then pin the identity it reports:",\n  "Agent \u2014 subagent_type = the fleet:* name;",\n  "Workflow \u2014 opts.model = the modelId with the claude-gateway-- prefix, written as a literal.",\n].join(" ");\n\n/**\n * \uC815\uCCB4\uC131\uC774 \uD540\uB418\uC9C0 \uC54A\uC740 \uC704\uC784\uC73C\uB85C \uCDE8\uAE09\uD558\uB294 Agent \uD0C0\uC785.\n *\n * \uB0B4\uC7A5 \uC804\uBB38 \uC5D0\uC774\uC804\uD2B8(Explore/Plan/\u2026)\uC640 fork\uB294 \uD1B5\uACFC\uC2DC\uD0A8\uB2E4. fork\uB294 \uBD80\uBAA8 \uCEE8\uD14D\uC2A4\uD2B8\uB97C \uC787\uB294 \uAC83\uC774\n * \uBAA9\uC801\uC774\uB77C \uB2E4\uB978 \uBAA8\uB378\uB85C \uC62E\uAE30\uB294 \uAC83 \uC790\uCCB4\uAC00 \uADF8 \uD45C\uBA74\uC758 \uC758\uBBF8\uB97C \uC5C6\uC560\uACE0, \uB098\uBA38\uC9C0\uB294 \uADF8 \uB3C4\uAD6C\uB97C \uC4F0\uB824\uACE0\n * \uACE0\uB978 \uC774\uB984\uC774\uC9C0 \uC704\uC784\uC744 \uBBF8\uB8EC \uACB0\uACFC\uAC00 \uC544\uB2C8\uB2E4. \uC544\uB798 \uB458\uB9CC\uC774 "\uC544\uBB34\uAC83\uB3C4 \uACE0\uB974\uC9C0 \uC54A\uC558\uB2E4"\uC758 \uCCA0\uC790\uB2E4.\n */\nconst UNPINNED_AGENT_TYPES = new Set(["general-purpose", "claude"]);\n\nconst GATEWAY_AGENT_PREFIX = "fleet:";\nconst MODEL_ALIASES = /^(fable|opus|sonnet|haiku)$/;\nconst PREFIXED_ALIAS_RE = /^claude-gateway--(fable|opus|sonnet|haiku)$/;\nconst GATEWAY_MODEL_PREFIX = "claude-gateway--";\nconst AGENT_TYPE_RE = /agentType\\s*:/;\nconst MODEL_VALUE_RE = /model:\\s*[\'"]([^\'"]+)[\'"]/g;\nconst AGENT_CALL_RE = /\\bagent\\s*\\(/g;\n\nfunction block(message) {\n  process.stderr.write(`[fleet-gateway-model-guard] ${message}\\n`);\n  process.exit(2);\n}\n\nfunction emitContext(hookEventName, additionalContext) {\n  process.stdout.write(JSON.stringify({ hookSpecificOutput: { hookEventName, additionalContext } }));\n  process.exit(0);\n}\n\nfunction readHookInput() {\n  try {\n    return JSON.parse(readFileSync(0, "utf8"));\n  } catch {\n    // \uC785\uB825\uC744 \uC77D\uC9C0 \uBABB\uD558\uBA74 \uD310\uC815\uD560 \uADFC\uAC70\uAC00 \uC5C6\uB2E4. \uCC28\uB2E8\uC740 \uADFC\uAC70\uAC00 \uC788\uC744 \uB54C\uB9CC \uD55C\uB2E4.\n    process.exit(0);\n  }\n}\n\n/**\n * `agent(` \uD638\uCD9C \uD558\uB098\uAC00 \uCC28\uC9C0\uD558\uB294 \uC6D0\uBB38 \uBC94\uC704. \uAD04\uD638 \uADE0\uD615\uC73C\uB85C \uB05D\uC744 \uCC3E\uB418 \uBB38\uC790\uC5F4\xB7\uC8FC\uC11D \uC548\uC758 \uAD04\uD638\uB294\n * \uC138\uC9C0 \uC54A\uB294\uB2E4 \u2014 \uD504\uB86C\uD504\uD2B8 \uD14D\uC2A4\uD2B8\uC5D0 \uAD04\uD638\uAC00 \uD754\uD574\uC11C, \uC138\uB294 \uC21C\uAC04 \uD638\uCD9C \uACBD\uACC4\uAC00 \uC5C9\uB6B1\uD55C \uACF3\uC5D0\uC11C \uB2EB\uD78C\uB2E4.\n *\n * \uB05D\uC744 \uCC3E\uC9C0 \uBABB\uD558\uBA74 undefined\uB97C \uB3CC\uB824\uC8FC\uACE0 \uD638\uCD9C\uC790\uB294 \uADF8 \uD638\uCD9C\uC744 \uAC80\uC0AC\uD558\uC9C0 \uC54A\uB294\uB2E4. \uC774 \uC2A4\uCE90\uB108\uB294\n * \uD30C\uC11C\uAC00 \uC544\uB2C8\uBBC0\uB85C, \uD310\uC815\uD560 \uC218 \uC5C6\uB294 \uD615\uD0DC\uB97C "\uD540 \uC5C6\uC74C"\uC73C\uB85C \uBAB0\uC544 \uBA40\uCA61\uD55C \uC2A4\uD06C\uB9BD\uD2B8\uB97C \uB9C9\uB294 \uCABD\uC774\n * \uAC80\uC0AC \uD55C \uAC74\uC744 \uB193\uCE58\uB294 \uCABD\uBCF4\uB2E4 \uB098\uC058\uB2E4.\n */\nfunction sliceCall(script, openParenIndex) {\n  let depth = 0;\n  let quote;\n  let escaped = false;\n  for (let i = openParenIndex; i < script.length; i += 1) {\n    const char = script[i];\n    if (quote !== undefined) {\n      if (escaped) escaped = false;\n      else if (char === "\\\\") escaped = true;\n      else if (char === quote) quote = undefined;\n      continue;\n    }\n    if (char === "\'" || char === \'"\' || char === "`") {\n      quote = char;\n      continue;\n    }\n    if (char === "/" && script[i + 1] === "/") {\n      const lineEnd = script.indexOf("\\n", i);\n      if (lineEnd === -1) return undefined;\n      i = lineEnd;\n      continue;\n    }\n    if (char === "/" && script[i + 1] === "*") {\n      const blockEnd = script.indexOf("*/", i + 2);\n      if (blockEnd === -1) return undefined;\n      i = blockEnd + 1;\n      continue;\n    }\n    if (char === "(") depth += 1;\n    else if (char === ")") {\n      depth -= 1;\n      if (depth === 0) return script.slice(openParenIndex, i + 1);\n    }\n  }\n  return undefined;\n}\n\n/** model \uC635\uC158\uC774 \uC5C6\uB294 `agent(` \uD638\uCD9C\uC758 \uAC1C\uC218. \uACBD\uACC4\uB97C \uBABB \uC77D\uC740 \uD638\uCD9C\uC740 \uC138\uC9C0 \uC54A\uB294\uB2E4. */\nfunction countUnpinnedAgentCalls(script) {\n  let unpinned = 0;\n  for (const match of script.matchAll(AGENT_CALL_RE)) {\n    const call = sliceCall(script, match.index + match[0].length - 1);\n    if (call === undefined) continue;\n    if (!/\\bmodel\\s*:/.test(call)) unpinned += 1;\n  }\n  return unpinned;\n}\n\nfunction assertWorkflowModelValues(script) {\n  for (const match of script.matchAll(MODEL_VALUE_RE)) {\n    const value = match[1];\n    if (MODEL_ALIASES.test(value)) continue;\n    if (PREFIXED_ALIAS_RE.test(value)) {\n      block(\n        `lineage alias\uC5D0\uB294 claude-gateway-- prefix\uB97C \uBD99\uC774\uBA74 \uC548 \uB429\uB2C8\uB2E4: "${value}". ` +\n          "alias\uB294 \uADF8\uB300\uB85C(fable|opus|sonnet|haiku) \uC0AC\uC6A9\uD558\uC138\uC694."\n      );\n    }\n    if (value.startsWith(GATEWAY_MODEL_PREFIX)) continue;\n    block(\n      `opts.model \uAC12\uC774 \uC62C\uBC14\uB974\uC9C0 \uC54A\uC2B5\uB2C8\uB2E4: "${value}". gateway_models\uC758 modelId(claude-gateway-- prefix \uD3EC\uD568)\uB97C ` +\n        "\uADF8\uB300\uB85C \uBCF5\uC0AC\uD558\uAC70\uB098 lineage alias(fable|opus|sonnet|haiku)\uB97C \uC0AC\uC6A9\uD558\uC138\uC694."\n    );\n  }\n}\n\n/** \uAC80\uC0AC \uB300\uC0C1 \uC2A4\uD06C\uB9BD\uD2B8 \uC6D0\uBB38. \uBCFC \uC218 \uC5C6\uB294 \uD638\uCD9C \uD615\uD0DC\uB294 undefined\uB97C \uB3CC\uB824\uC900\uB2E4. */\nfunction resolveWorkflowScript(toolInput) {\n  if (typeof toolInput.script === "string" && toolInput.script.length > 0) return toolInput.script;\n  // resumeFromRunId \uC7AC\uC2E4\uD589\uC740 scriptPath\uB85C \uB4E4\uC5B4\uC628\uB2E4. \uD30C\uC77C\uC744 \uC77D\uC5B4 \uB3D9\uC77C\uD558\uAC8C \uAC80\uC99D\uD55C\uB2E4.\n  if (typeof toolInput.scriptPath === "string" && toolInput.scriptPath.length > 0) {\n    try {\n      return readFileSync(toolInput.scriptPath, "utf8");\n    } catch {\n      // \uD30C\uC77C\uC744 \uC77D\uC744 \uC218 \uC5C6\uC73C\uBA74 \uC2E4\uD589 \uB2E8\uACC4\uC5D0\uC11C \uB4DC\uB7EC\uB098\uB294 \uC624\uB958\uB2E4. \uC5EC\uAE30\uC11C\uB294 \uD310\uC815\uD558\uC9C0 \uC54A\uB294\uB2E4.\n      return undefined;\n    }\n  }\n  // name(\uC800\uC7A5 \uC6CC\uD06C\uD50C\uB85C\uC6B0)\uC740 \uB0B4\uC6A9\uC744 \uBCFC \uC218 \uC5C6\uB2E4. \uC0AC\uC804 \uAC80\uC99D\uB41C \uAC83\uC73C\uB85C \uC2E0\uB8B0\uD55C\uB2E4.\n  return undefined;\n}\n\nfunction gateAgentDelegation(toolInput) {\n  const agentType = typeof toolInput.subagent_type === "string" ? toolInput.subagent_type : undefined;\n  if (agentType !== undefined && agentType.startsWith(GATEWAY_AGENT_PREFIX)) process.exit(0);\n  if (agentType !== undefined && !UNPINNED_AGENT_TYPES.has(agentType)) process.exit(0);\n  block(\n    `\uC774 \uC704\uC784\uC740 \uC815\uCCB4\uC131\uC774 \uD540\uB418\uC9C0 \uC54A\uC558\uC2B5\uB2C8\uB2E4(subagent_type: ${agentType ?? "\uBBF8\uC9C0\uC815"}). ` +\n      PIN_INSTRUCTION\n  );\n}\n\nfunction gateWorkflowDelegation(toolInput) {\n  const script = resolveWorkflowScript(toolInput);\n  if (script === undefined) process.exit(0);\n  if (AGENT_TYPE_RE.test(script)) {\n    block(\n      "dynamic workflow \uC2A4\uD06C\uB9BD\uD2B8\uC5D0 agentType\uC774 \uAE08\uC9C0\uB429\uB2C8\uB2E4. agentType\uC740 \uD300\uBA54\uC774\uD2B8/\uC11C\uBE0C\uC5D0\uC774\uC804\uD2B8 \uD45C\uBA74 \uC804\uC6A9\uC774\uACE0, " +\n        "\uC6CC\uD06C\uD50C\uB85C\uC6B0\uB294 opts.model\uB85C\uB9CC \uD32C\uC544\uC6C3\uD574\uC57C \uD569\uB2C8\uB2E4."\n    );\n  }\n  const unpinned = countUnpinnedAgentCalls(script);\n  if (unpinned > 0) {\n    block(\n      `model\uC774 \uC9C0\uC815\uB418\uC9C0 \uC54A\uC740 agent() \uD638\uCD9C\uC774 ${unpinned}\uAC74 \uC788\uC2B5\uB2C8\uB2E4. ` +\n        PIN_INSTRUCTION +\n        " \uC2A4\uD14C\uC774\uC9C0\uB9C8\uB2E4 \uBAA8\uB378\uC744 \uB098\uB204\uB294 \uAC83\uC774 \uC774 \uD45C\uBA74\uC758 \uBAA9\uC801\uC774\uBBC0\uB85C, \uD55C \uAC12\uC73C\uB85C \uCC44\uC6B0\uC9C0 \uB9D0\uACE0 \uC5ED\uD560\uBCC4\uB85C \uBC30\uBD84\uD558\uC138\uC694."\n    );\n  }\n  assertWorkflowModelValues(script);\n  process.exit(0);\n}\n\nconst subcommand = process.argv[2];\n\nif (subcommand === "remind") {\n  emitContext("UserPromptSubmit", TURN_REMINDER);\n}\n\nconst input = readHookInput();\nconst toolName = input?.tool_name;\nconst toolInput = input?.tool_input ?? {};\n\nif (subcommand === "workflow-receipt") {\n  if (toolName !== "Workflow") process.exit(0);\n  emitContext("PostToolUse", IN_FLIGHT_CONTRACT);\n}\n\nif (subcommand === "gate-delegation") {\n  if (toolName === "Agent") gateAgentDelegation(toolInput);\n  if (toolName === "Workflow") gateWorkflowDelegation(toolInput);\n  process.exit(0);\n}\n\nprocess.exit(0);\n' }
+  { relativePath: "fleet-gateway-model-guard.mjs", content: '#!/usr/bin/env node\n// Fleet gateway model guard \u2014 \uAC8C\uC774\uD2B8\uC6E8\uC774 \uC138\uC158\uC758 \uC704\uC784 \uC815\uCC45\uC744 \uCF54\uB4DC\uB85C \uAC15\uC81C\uD558\uB294 \uB2E8\uC77C \uD6C5.\n//\n// \uC774 \uC800\uC7A5\uC18C\uB294 Admiral \uC2DC\uC2A4\uD15C \uD504\uB86C\uD504\uD2B8\uB97C \uC2E3\uC9C0 \uC54A\uB294\uB2E4. \uC704\uC784 \uC804\uC5D0 \uB85C\uC2A4\uD130\uB97C \uC77D\uACE0 \uC815\uCCB4\uC131\uC744\n// \uD540\uD558\uB77C\uB294 \uC9C0\uCE68\uC774 \uC0C1\uC8FC \uD14D\uC2A4\uD2B8\uB85C \uC874\uC7AC\uD558\uC9C0 \uC54A\uC73C\uBBC0\uB85C, \uADF8 \uC5ED\uD560 \uC804\uBD80\uAC00 \uC774 \uC2A4\uD06C\uB9BD\uD2B8\uC5D0 \uC788\uB2E4.\n//\n// \uCCAB \uC778\uC790\uAC00 \uC11C\uBE0C\uCEE4\uB9E8\uB4DC\uB2E4. \uD6C5 \uC774\uBCA4\uD2B8\uB9C8\uB2E4 \uBCC4\uB3C4 \uD30C\uC77C\uC744 \uB450\uC9C0 \uC54A\uB294 \uC774\uC720\uB294 \uC138 \uD310\uC815\uC774 \uAC19\uC740\n// \uC5B4\uD718(\uC815\uCCB4\uC131 \uC774\uB984 / modelId / \uC811\uC218\uC99D)\uB97C \uACF5\uC720\uD558\uAE30 \uB54C\uBB38\uC774\uB2E4 \u2014 \uD30C\uC77C\uC744 \uCABC\uAC1C\uBA74 \uADF8 \uC5B4\uD718\uAC00\n// \uC138 \uACF3\uC5D0\uC11C \uB530\uB85C \uB299\uB294\uB2E4.\n//\n//   remind            UserPromptSubmit          \uB9E4 \uD134 \uADDC\uC57D \uC8FC\uC785 (\uBB34\uC870\uAC74)\n//   gate-delegation   PreToolUse  Agent|Workflow  Agent\uC758 \uD540 \uB204\uB77D\uACFC workflow\uC758 \uD2C0\uB9B0 \uBAA8\uB378 \uCCA0\uC790\uB97C \uCC28\uB2E8\n//   workflow-receipt  PostToolUse Workflow        \uC811\uC218\uC99D\uC744 \uACB0\uACFC\uB85C \uC77D\uB294 \uC0AC\uACE0\uB97C \uCC28\uB2E8\n//\n// \uC0C1\uD0DC\uB97C \uB0A8\uAE30\uC9C0 \uC54A\uB294\uB2E4. \uD6C5\uC740 \uD638\uCD9C\uB9C8\uB2E4 \uC0C8 \uD504\uB85C\uC138\uC2A4\uB85C \uB728\uBBC0\uB85C \uD504\uB85C\uC138\uC2A4 \uAC04 \uAE30\uC5B5\uC740 \uD30C\uC77C\uB85C\uB9CC\n// \uAC00\uB2A5\uD55C\uB370, \uADF8 \uD30C\uC77C\uC740 \uACE7 \uC2E0\uC120\uB3C4\xB7\uC815\uB9AC\xB7\uACBD\uD569\uC744 \uB5A0\uC548\uB294 \uB450 \uBC88\uC9F8 \uC9C4\uC2E4\uC774 \uB41C\uB2E4. \uC138 \uD310\uC815 \uBAA8\uB450\n// stdin \uD55C \uBC88\uC73C\uB85C \uB05D\uB098\uB3C4\uB85D \uC9F0\uB2E4 \u2014 \uADF8\uB798\uC11C \uD0C0\uC784\uC544\uC6C3\uC73C\uB85C \uAC8C\uC774\uD2B8\uAC00 \uC870\uC6A9\uD788 \uC5F4\uB9B4 \uC5EC\uC9C0\uB3C4 \uC791\uB2E4.\nimport { readFileSync } from "node:fs";\n\n// \uBAA8\uB378\uC5D0\uAC8C \uC8FC\uB294 \uC9C0\uC2DC\uC774\uBBC0\uB85C \uC601\uC5B4\uB85C \uC4F4\uB2E4.\nconst TURN_REMINDER = [\n  "Call gateway_models before a run leaves the host and pin from what that call reports \u2014 allowances and the",\n  "roster itself move while work is in flight, so a remembered name is not evidence that it still resolves.",\n  "Agent: subagent_type = the fleet:* name, always.",\n  "A Workflow stage may stay on the host model; when you do move one, pin it from that same lookup \u2014",\n  "opts.model takes the modelId with the claude-gateway-- prefix, opts.agentType takes the fleet:* name.",\n  "The spellings are never interchangeable.",\n].join(" ");\n\nconst IN_FLIGHT_CONTRACT = [\n  "This Workflow call returned a receipt, not a result. The run is still in flight and its result arrives later.",\n  "End this turn with one status line: which surface, how many stages, and what you are waiting for.",\n  "Do not review, conclude, summarize, or predict what the run will find \u2014 a reading written before the result is",\n  "indistinguishable from the result to the reader, and it is still there after the real one lands.",\n  "Report the finding once, in the turn the result arrives. If asked before then, say it is still running.",\n].join(" ");\n\nconst PIN_INSTRUCTION =\n  "Call gateway_models first, then pin the identity it reports: subagent_type = the fleet:* name.";\n\n/**\n * \uC815\uCCB4\uC131\uC774 \uD540\uB418\uC9C0 \uC54A\uC740 \uC704\uC784\uC73C\uB85C \uCDE8\uAE09\uD558\uB294 Agent \uD0C0\uC785.\n *\n * \uB0B4\uC7A5 \uC804\uBB38 \uC5D0\uC774\uC804\uD2B8(Explore/Plan/\u2026)\uC640 fork\uB294 \uD1B5\uACFC\uC2DC\uD0A8\uB2E4. fork\uB294 \uBD80\uBAA8 \uCEE8\uD14D\uC2A4\uD2B8\uB97C \uC787\uB294 \uAC83\uC774\n * \uBAA9\uC801\uC774\uB77C \uB2E4\uB978 \uBAA8\uB378\uB85C \uC62E\uAE30\uB294 \uAC83 \uC790\uCCB4\uAC00 \uADF8 \uD45C\uBA74\uC758 \uC758\uBBF8\uB97C \uC5C6\uC560\uACE0, \uB098\uBA38\uC9C0\uB294 \uADF8 \uB3C4\uAD6C\uB97C \uC4F0\uB824\uACE0\n * \uACE0\uB978 \uC774\uB984\uC774\uC9C0 \uC704\uC784\uC744 \uBBF8\uB8EC \uACB0\uACFC\uAC00 \uC544\uB2C8\uB2E4. \uC544\uB798 \uB458\uB9CC\uC774 "\uC544\uBB34\uAC83\uB3C4 \uACE0\uB974\uC9C0 \uC54A\uC558\uB2E4"\uC758 \uCCA0\uC790\uB2E4.\n */\nconst UNPINNED_AGENT_TYPES = new Set(["general-purpose", "claude"]);\n\nconst GATEWAY_AGENT_PREFIX = "fleet:";\nconst MODEL_ALIASES = /^(fable|opus|sonnet|haiku)$/;\nconst PREFIXED_ALIAS_RE = /^claude-gateway--(fable|opus|sonnet|haiku)$/;\nconst GATEWAY_MODEL_PREFIX = "claude-gateway--";\n// \uCF5C\uB860 \uC55E \uACF5\uBC31\uC740 \uC720\uD6A8\uD55C \uD504\uB85C\uD37C\uD2F0 \uD45C\uAE30\uB2E4. \uC815\uADDC\uC2DD\uC774 \uC815\uADDC \uD45C\uAE30\uB9CC \uC54C\uBA74 \uADF8 \uD55C \uCE78\uC774 \uAC80\uC0AC\uB97C \uBE44\uCF1C\uAC04\uB2E4.\nconst MODEL_VALUE_RE = /model\\s*:\\s*[\'"]([^\'"]+)[\'"]/g;\nconst AGENT_TYPE_VALUE_RE = /agentType\\s*:\\s*[\'"]([^\'"]+)[\'"]/g;\n\nfunction block(message) {\n  process.stderr.write(`[fleet-gateway-model-guard] ${message}\\n`);\n  process.exit(2);\n}\n\nfunction emitContext(hookEventName, additionalContext) {\n  process.stdout.write(JSON.stringify({ hookSpecificOutput: { hookEventName, additionalContext } }));\n  process.exit(0);\n}\n\nfunction readHookInput() {\n  try {\n    return JSON.parse(readFileSync(0, "utf8"));\n  } catch {\n    // \uC785\uB825\uC744 \uC77D\uC9C0 \uBABB\uD558\uBA74 \uD310\uC815\uD560 \uADFC\uAC70\uAC00 \uC5C6\uB2E4. \uCC28\uB2E8\uC740 \uADFC\uAC70\uAC00 \uC788\uC744 \uB54C\uB9CC \uD55C\uB2E4.\n    process.exit(0);\n  }\n}\n\n/**\n * \uC6CC\uD06C\uD50C\uB85C\uC6B0\uAC00 \uC4F4 \uBAA8\uB378 \uAC12\uC758 \uCCA0\uC790 \uAC80\uC0AC.\n *\n * \uC2A4\uD14C\uC774\uC9C0\uB97C \uC62E\uAE38\uC9C0 \uB9D0\uC9C0\uB294 \uD638\uC2A4\uD2B8\uAC00 \uC815\uD55C\uB2E4 \u2014 \uD540\uD558\uC9C0 \uC54A\uC740 \uC2A4\uD14C\uC774\uC9C0\uB294 \uC138\uC158 \uBAA8\uB378\uB85C \uB3CC\uBA74 \uADF8\uB9CC\uC774\uB2E4.\n * \uC5EC\uAE30\uC11C \uB9C9\uB294 \uAC83\uC740 \uC62E\uAE30\uAE30\uB85C \uD574\uB193\uACE0 \uAC12\uC744 \uC798\uBABB \uC4F4 \uACBD\uC6B0\uBFD0\uC774\uB2E4. \uB85C\uC2A4\uD130 \uC774\uB984\uC774\uB098 prefix\uAC00 \uBE60\uC9C4\n * modelId\uAC00 `model` \uC790\uB9AC\uC5D0 \uB4E4\uC5B4\uAC00\uBA74 \uBAA8\uB4E0 \uBD84\uAE30\uAC00 \uC2DC\uC791 \uC989\uC2DC \uC8FD\uC73C\uBBC0\uB85C, \uADF8 \uC2E4\uD328\uB294 \uC2E4\uD589 \uC804\uC5D0 \uC7A1\uB294\n * \uD3B8\uC774 \uD6E8\uC52C \uC2F8\uB2E4.\n */\nfunction assertWorkflowModelValues(script) {\n  for (const match of script.matchAll(MODEL_VALUE_RE)) {\n    const value = match[1];\n    if (MODEL_ALIASES.test(value)) continue;\n    if (PREFIXED_ALIAS_RE.test(value)) {\n      block(\n        `lineage alias\uC5D0\uB294 claude-gateway-- prefix\uB97C \uBD99\uC774\uBA74 \uC548 \uB429\uB2C8\uB2E4: "${value}". ` +\n          "alias\uB294 \uADF8\uB300\uB85C(fable|opus|sonnet|haiku) \uC0AC\uC6A9\uD558\uC138\uC694."\n      );\n    }\n    if (value.startsWith(GATEWAY_MODEL_PREFIX)) continue;\n    block(\n      `opts.model \uAC12\uC774 \uC62C\uBC14\uB974\uC9C0 \uC54A\uC2B5\uB2C8\uB2E4: "${value}". gateway_models\uC758 modelId(claude-gateway-- prefix \uD3EC\uD568)\uB97C ` +\n        "\uADF8\uB300\uB85C \uBCF5\uC0AC\uD558\uAC70\uB098 lineage alias(fable|opus|sonnet|haiku)\uB97C \uC0AC\uC6A9\uD558\uC138\uC694. " +\n        "fleet:* \uC774\uB984\uC740 opts.agentType \uC790\uB9AC\uC785\uB2C8\uB2E4."\n    );\n  }\n}\n\n/**\n * \uC774\uB984 \uC790\uB9AC\uC5D0 \uB4E4\uC5B4\uAC04 modelId. \uB450 \uCCA0\uC790\uB97C \uB9DE\uBC14\uAFBC \uB098\uBA38\uC9C0 \uC808\uBC18\uC774\uB2E4.\n *\n * `fleet:` \uC811\uB450\uB9CC \uD1B5\uACFC\uC2DC\uD0A4\uC9C0\uB294 \uC54A\uB294\uB2E4 \u2014 `general-purpose`\uCC98\uB7FC \uC774 \uC800\uC7A5\uC18C\uAC00 \uC2E3\uC9C0 \uC54A\uC740 \uB0B4\uC7A5\n * agentType\uB3C4 \uADF8 \uC790\uB9AC\uC758 \uC815\uB2F9\uD55C \uAC12\uC774\uB77C, \uC811\uB450\uB85C \uAC70\uB974\uBA74 \uBA40\uCA61\uD55C \uC2A4\uD06C\uB9BD\uD2B8\uAC00 \uB9C9\uD78C\uB2E4. modelId\uB9CC\n * \uACE8\uB77C \uB9C9\uB294\uB2E4: \uADF8 \uAC12\uC740 \uC5B4\uB5A4 \uB808\uC9C0\uC2A4\uD2B8\uB9AC\uC5D0\uB3C4 \uC774\uB984\uC73C\uB85C \uB4F1\uB85D\uB418\uC5B4 \uC788\uC9C0 \uC54A\uC544 \uBC18\uB4DC\uC2DC \uC8FD\uB294\uB2E4.\n */\nfunction assertWorkflowAgentTypeValues(script) {\n  for (const match of script.matchAll(AGENT_TYPE_VALUE_RE)) {\n    const value = match[1];\n    if (!value.startsWith(GATEWAY_MODEL_PREFIX)) continue;\n    block(\n      `opts.agentType \uAC12\uC774 \uC62C\uBC14\uB974\uC9C0 \uC54A\uC2B5\uB2C8\uB2E4: "${value}". modelId\uB294 opts.model \uC790\uB9AC\uC774\uACE0, ` +\n        "agentType\uC5D0\uB294 gateway_models\uAC00 \uBCF4\uACE0\uD55C fleet:* \uC774\uB984\uC744 \uC501\uB2C8\uB2E4."\n    );\n  }\n}\n\n/** \uAC80\uC0AC \uB300\uC0C1 \uC2A4\uD06C\uB9BD\uD2B8 \uC6D0\uBB38. \uBCFC \uC218 \uC5C6\uB294 \uD638\uCD9C \uD615\uD0DC\uB294 undefined\uB97C \uB3CC\uB824\uC900\uB2E4. */\nfunction resolveWorkflowScript(toolInput) {\n  if (typeof toolInput.script === "string" && toolInput.script.length > 0) return toolInput.script;\n  // resumeFromRunId \uC7AC\uC2E4\uD589\uC740 scriptPath\uB85C \uB4E4\uC5B4\uC628\uB2E4. \uD30C\uC77C\uC744 \uC77D\uC5B4 \uB3D9\uC77C\uD558\uAC8C \uAC80\uC99D\uD55C\uB2E4.\n  if (typeof toolInput.scriptPath === "string" && toolInput.scriptPath.length > 0) {\n    try {\n      return readFileSync(toolInput.scriptPath, "utf8");\n    } catch {\n      // \uD30C\uC77C\uC744 \uC77D\uC744 \uC218 \uC5C6\uC73C\uBA74 \uC2E4\uD589 \uB2E8\uACC4\uC5D0\uC11C \uB4DC\uB7EC\uB098\uB294 \uC624\uB958\uB2E4. \uC5EC\uAE30\uC11C\uB294 \uD310\uC815\uD558\uC9C0 \uC54A\uB294\uB2E4.\n      return undefined;\n    }\n  }\n  // name(\uC800\uC7A5 \uC6CC\uD06C\uD50C\uB85C\uC6B0)\uC740 \uB0B4\uC6A9\uC744 \uBCFC \uC218 \uC5C6\uB2E4. \uC0AC\uC804 \uAC80\uC99D\uB41C \uAC83\uC73C\uB85C \uC2E0\uB8B0\uD55C\uB2E4.\n  return undefined;\n}\n\nfunction gateAgentDelegation(toolInput) {\n  const agentType = typeof toolInput.subagent_type === "string" ? toolInput.subagent_type : undefined;\n  if (agentType !== undefined && agentType.startsWith(GATEWAY_AGENT_PREFIX)) process.exit(0);\n  if (agentType !== undefined && !UNPINNED_AGENT_TYPES.has(agentType)) process.exit(0);\n  block(\n    `\uC774 \uC704\uC784\uC740 \uC815\uCCB4\uC131\uC774 \uD540\uB418\uC9C0 \uC54A\uC558\uC2B5\uB2C8\uB2E4(subagent_type: ${agentType ?? "\uBBF8\uC9C0\uC815"}). ` +\n      PIN_INSTRUCTION\n  );\n}\n\nfunction gateWorkflowDelegation(toolInput) {\n  const script = resolveWorkflowScript(toolInput);\n  if (script === undefined) process.exit(0);\n  assertWorkflowModelValues(script);\n  assertWorkflowAgentTypeValues(script);\n  process.exit(0);\n}\n\nconst subcommand = process.argv[2];\n\nif (subcommand === "remind") {\n  emitContext("UserPromptSubmit", TURN_REMINDER);\n}\n\nconst input = readHookInput();\nconst toolName = input?.tool_name;\nconst toolInput = input?.tool_input ?? {};\n\nif (subcommand === "workflow-receipt") {\n  if (toolName !== "Workflow") process.exit(0);\n  emitContext("PostToolUse", IN_FLIGHT_CONTRACT);\n}\n\nif (subcommand === "gate-delegation") {\n  if (toolName === "Agent") gateAgentDelegation(toolInput);\n  if (toolName === "Workflow") gateWorkflowDelegation(toolInput);\n  process.exit(0);\n}\n\nprocess.exit(0);\n' }
 ];
 var DIR_MODE = 448;
 var FILE_MODE = 384;
@@ -49040,17 +49272,17 @@ function createSystemFontsService(deps = {}) {
   const now = deps.now ?? Date.now;
   const successTtlMs = deps.successTtlMs ?? SUCCESS_TTL_MS;
   const failureTtlMs = deps.failureTtlMs ?? FAILURE_TTL_MS;
-  let cached2 = null;
+  let cached3 = null;
   let cachedFailure = null;
   let inFlight = null;
   const getFonts = () => {
-    if (cached2 && now() - cached2.cachedAt < successTtlMs) return Promise.resolve(cached2.fonts);
+    if (cached3 && now() - cached3.cachedAt < successTtlMs) return Promise.resolve(cached3.fonts);
     if (cachedFailure && now() - cachedFailure.cachedAt < failureTtlMs) return Promise.reject(cachedFailure.error);
     if (inFlight) return inFlight;
     inFlight = loadFonts().then((fonts) => {
       const normalized = normalizeSystemFonts(fonts);
       if (normalized.length === 0) throw EMPTY_SYSTEM_FONTS_ERROR;
-      cached2 = { fonts: normalized, cachedAt: now() };
+      cached3 = { fonts: normalized, cachedAt: now() };
       cachedFailure = null;
       return normalized;
     }).catch((error51) => {
@@ -52251,8 +52483,8 @@ function createCodexGateway(deps) {
     return cachedAccessSets(`listener|${listener.origin}`, () => buildListenerAccessSets(listener));
   }
   function cachedAccessSets(key, build) {
-    const cached2 = accessSetsByGate.get(key);
-    if (cached2) return cached2;
+    const cached3 = accessSetsByGate.get(key);
+    if (cached3) return cached3;
     const sets = build();
     accessSetsByGate.set(key, sets);
     return sets;
@@ -54190,8 +54422,8 @@ function filterDiscoveredPlugins(plugins) {
 }
 var pluginBundleModules = /* @__PURE__ */ new Map();
 function importPluginBundleOnce(digest, bundledPath) {
-  const cached2 = pluginBundleModules.get(digest);
-  if (cached2) return cached2;
+  const cached3 = pluginBundleModules.get(digest);
+  if (cached3) return cached3;
   const loading = import(pathToFileURL(bundledPath).href);
   pluginBundleModules.set(digest, loading);
   return loading;
@@ -55437,12 +55669,12 @@ function createConsoleUpdateCheckService(deps = {}) {
   const intervalMs = deps.intervalMs ?? UPDATE_CHECK_INTERVAL_MS;
   const startInterval = deps.setInterval ?? ((callback, delayMs) => setInterval(callback, delayMs));
   const stopInterval = deps.clearInterval ?? ((interval2) => clearInterval(interval2));
-  let cached2 = null;
+  let cached3 = null;
   let inFlight = null;
   let interval = null;
   const changeListeners = /* @__PURE__ */ new Set();
   const getStatus = () => {
-    const current = cached2;
+    const current = cached3;
     if (current && now() - current.checkedAt < current.ttlMs) {
       return current.status;
     }
@@ -55450,7 +55682,7 @@ function createConsoleUpdateCheckService(deps = {}) {
     return current?.status ?? NO_UPDATE_STATUS;
   };
   const refresh = async (options = {}) => {
-    const current = cached2;
+    const current = cached3;
     if (options.force !== true && current && now() - current.checkedAt < current.ttlMs) {
       return current.status;
     }
@@ -55458,12 +55690,12 @@ function createConsoleUpdateCheckService(deps = {}) {
       return inFlight;
     }
     inFlight = resolveUpdateStatus().then((status2) => {
-      const previousStatus = cached2?.status ?? NO_UPDATE_STATUS;
-      cached2 = { status: status2, checkedAt: now(), ttlMs };
+      const previousStatus = cached3?.status ?? NO_UPDATE_STATUS;
+      cached3 = { status: status2, checkedAt: now(), ttlMs };
       notifyIfChanged(previousStatus, status2);
       return status2;
     }).catch(() => {
-      cached2 = { status: NO_UPDATE_STATUS, checkedAt: now(), ttlMs: errorTtlMs };
+      cached3 = { status: NO_UPDATE_STATUS, checkedAt: now(), ttlMs: errorTtlMs };
       return NO_UPDATE_STATUS;
     }).finally(() => {
       inFlight = null;