@jmanuelcorral/openteam 0.24.0 → 0.25.0

package/dist/index.js

@@ -786,6 +786,9 @@ function migrateConfig(raw) {
 var consoleDetailMessages = {
   follow: "Follow new activity",
   metadataOnly: "Lifecycle and telemetry stay metadata-only.",
+  logsDescription: "Current recorded conversations load automatically. Lifecycle and telemetry remain metadata-only; credentials are masked.",
+  credentialMasked: "[credential masked]",
+  offscreen: "Messages load automatically when this conversation is visible.",
   filter: "Filter sessions",
   incoming: "New activity available — show updates",
   refreshError: "Live updates unavailable; retrying.",
@@ -806,7 +809,7 @@ var consoleDetailMessages = {
   partialMetadata: "Some current session titles are unavailable or outside the bounded batch; fallback labels remain.",
   rootCurrent: "Current whole orchestrator session; may contain multiple batches. Not a historical or batch-only transcript.",
   recovered: "Read-only association verified from current opencode history; not an immutable lifecycle event.",
-  rootUnlinked: "Orchestrator session not recorded. Reveal to try a bounded, read-only relationship search.",
+  rootUnlinked: "Orchestrator session not recorded. A bounded, read-only relationship search is attempted when visible.",
   rootUnavailable: "Orchestrator session unavailable: no unique, verifiable relationship was found in local history.",
   rootAmbiguous: "Orchestrator session unavailable: conflicting or copied relationships are ambiguous.",
   searchIncomplete: "Orchestrator association search incomplete or exceeded its bounded budget. No session was guessed.",
@@ -819,9 +822,9 @@ var consoleDetailMessages = {
   arguments: "Arguments",
   result: "Result",
   loading: "Loading local conversation…",
-  current: "Present-day session, not a timeline reconstruction. May include later messages and tools. Refresh explicitly for updates.",
-  historical: "Historical cursor: conversation content is hidden to avoid showing future mutable text. Return to live before revealing this operation.",
-  disabled: "Content is disabled. Set console.sessionHistory.contentEnabled to true in .opencode/openteam.json and restart the Console. Then reveal content here.",
+  current: "Present-day whole session, not a timeline reconstruction or per-attempt transcript. Visible messages update automatically while live.",
+  historical: "Historical cursor: conversation content is hidden to avoid showing future mutable text. Return to live to read current messages.",
+  disabled: "Content is disabled by console.sessionHistory.contentEnabled: false. Lifecycle and telemetry remain metadata-only.",
   unavailable: "Conversation unavailable. Start an operator-owned local opencode serve against the same workspace and user history, configure console.sessionHistory.endpoint, then retry. No inference was requested.",
   empty: "No readable user messages, assistant output or tool calls remain in this session.",
   invalid: "This attempt has no recorded session in the selected run, or its history is incomplete.",
@@ -831,7 +834,7 @@ var consoleDetailMessages = {
   invalidEndpoint: "Expected a loopback HTTP origin without credentials, path, query or fragment.",
   readFailed: "Local session history could not be read.",
   oversized: "Conversation exceeds the local size limit (4 MiB). No content was loaded.",
-  truncated: "Conversation display is truncated by local safety limits; omitted content is not empty history.",
+  truncated: "Conversation display is truncated by local safety limits. The newest bounded message window is shown; older messages or oversized fields may be omitted, not empty history.",
   truncatedMarker: `
 [truncated]`,
   terminalGap: "Live collection was interrupted; events during the gap are unavailable. This is not complete session history.",
@@ -908,7 +911,7 @@ var ConsoleConfigSchema = z3.object({
   openBrowser: z3.boolean().default(false),
   remoteStorage: z3.boolean().default(false),
   sessionHistory: z3.object({
-    contentEnabled: z3.boolean().default(false),
+    contentEnabled: z3.boolean().default(true),
     endpoint: z3.string().refine(isLocalHistoryEndpoint, consoleDetailMessages.invalidEndpoint).optional()
   }).strict().optional(),
   terminal: z3.object({
@@ -5743,7 +5746,7 @@ import { z as z15 } from "zod";
 // package.json
 var package_default = {
   name: "@jmanuelcorral/openteam",
-  version: "0.24.0",
+  version: "0.25.0",
   packageManager: "bun@1.3.14",
   description: "Cost-aware, local-first routing plugin for opencode with cheapest-capable frontier fallback and multi-agent orchestration.",
   license: "MIT",
@@ -6100,6 +6103,25 @@ var executionSetupMessages = {
 `),
   localOnlyTitle: "Local execution",
   localRequiredError: "local execution requires an enabled local runtime",
+  lemonadeDetectedHint: (loaded, advertised) => `detected - ${loaded} confirmed loaded of ${advertised} advertised text model(s)`,
+  lemonadeNoLoadedModels: "Lemonade has no text models verified as loaded and ready. Keep the intended model active in Lemonade and rerun setup; inactive or unknown models cannot be selected or entered manually.",
+  lemonadeModelNotLoaded: (model) => `Lemonade model "${model}" is not positively verified as loaded and ready. Keep that exact text model active and rerun setup; no substitute was selected and no implicit loading is allowed.`,
+  lemonadeProbeRequired: "Lemonade setup requires a fresh read-only residency probe before writing configuration. Use the CLI with its runtime probe enabled; manual model IDs cannot bypass this requirement.",
+  lemonadeProbeFailed: "Lemonade residency could not be verified at the configured endpoint. Check connectivity and the read-only /models, /health, and /internal/aliases responses, then rerun setup with the intended text models already active.",
+  lemonadeEndpointMismatch: "Lemonade endpoint/provider mapping differs from the selected runtime. Reconcile the configured base URL and provider before rerunning setup; no model was substituted.",
+  lemonadeModelIdentityUnknown: (model) => `Lemonade model "${model}" has no usable registered wire identity in the effective opencode configuration. Fix its model declaration before rerunning setup; setup will not replace or guess an alias.`,
+  lemonadeEffectiveConfigLabel: "effective setup configuration",
+  lemonadeEffectiveConfigAmbiguous: "Cannot establish one effective openteam configuration from the configured plugin loaders. Reconcile their options before rerunning setup; no provider identity was guessed.",
+  lemonadeRetainedProviderUnprotected: (providerID) => `Cannot safely keep retained Lemonade provider "${providerID}": the effective configuration must retain one matching Lemonade runtime, disabled when deselected. Reconcile the plugin options or machine overlay, or explicitly remove the provider registration before rerunning setup; no configuration was written.`,
+  lemonadeV2InvalidProvider: (providerID) => `Lemonade provider ${JSON.stringify(providerID)} cannot be represented as an exact native V2 policy resource. Choose a non-empty provider ID without wildcards, slashes, backslashes, or whitespace; setup will not broaden a deny rule.`,
+  lemonadeV2InvalidPolicies: "Cannot safely preserve experimental.policies: experimental must be an object and policies must be an array of provider.use statements with a string resource and allow/deny effect. Fix the project configuration before rerunning setup.",
+  lemonadeV2Title: "Lemonade transport compatibility",
+  lemonadeV2Restriction: (providers) => `Project policies disable native V2 Lemonade access for: ${providers.join(", ")}. Ordinary guarded V1 configuration remains supported; V2 is not an openteam-hook execution path. Higher-precedence or global policies can override this project restriction; it is not a server-atomic no-autoload guarantee.`,
+  lemonadeInventory: (instanceID, providerID, models) => {
+    const inventory = models.map((model) => `${model.modelID} (${model.loaded === true ? "loaded" : model.loaded === false ? "inactive" : "residency unknown"})`).join(", ");
+    return `Lemonade inventory ${instanceID} (provider ${providerID}): ${inventory || "no advertised text models"}. Only confirmed loaded text models count as ready.`;
+  },
+  lemonadeAgentResidency: (agent, model, state) => `Lemonade readiness: ${agent} (${model}): ${state === "not-loaded" ? "inactive (not ready)" : "residency unknown"}; advertised inventory is not loaded readiness. Keep this exact model active and verify residency before use; requests without verified readiness are blocked.`,
   mixedPrimaryQuestion: "Primary coordinator model",
   mixedPrimaryLocal: (model) => `Use local thinking model ${model}`,
   mixedPrimaryFrontier: "Choose a frontier model",
@@ -9931,6 +9953,243 @@ function ensureFoundryV1BaseURL(endpoint) {
   }
 }
 
+// src/local/lemonadeResidency.ts
+import { z as z19 } from "zod";
+
+// src/messages/modelResidency.ts
+var reasons = {
+  unknown: "fresh residency metadata is unavailable, malformed, or ambiguous",
+  inactive: "the requested model is not verified as resident and serving",
+  identity: "the requested model identity can be rewritten or is ambiguous",
+  destination: "the request destination does not match its configured runtime",
+  transport: "this provider execution path cannot enforce the residency guard",
+  request: "this is not a supported, explicit model inference request",
+  cancelled: "the request was cancelled before residency could be verified",
+  timeout: "the residency metadata deadline expired",
+  configuration: "the residency guard configuration is invalid"
+};
+var modelResidencyMessages = {
+  blocked: (reason) => `[openteam] Lemonade model request blocked: ${reasons[reason]}.`,
+  providerDisabled: (providerID) => `[openteam] Lemonade provider "${providerID}" is disabled because its configured transport or runtime mapping cannot enforce loaded-only requests.`,
+  extractionRuntimeUnavailable: "[openteam] Memory extraction requires one enabled local runtime matching the configured extraction provider."
+};
+
+// src/local/lemonadeResidency.ts
+class ModelResidencyError extends Error {
+  code;
+  statusCode = 400;
+  isRetryable = false;
+  constructor(code) {
+    super(modelResidencyMessages.blocked(code));
+    this.code = code;
+    this.name = "ModelResidencyError";
+  }
+}
+var modelName = z19.string().min(1).refine((name) => name === name.trim());
+var LoadedModelSchema = z19.object({
+  model_name: modelName,
+  loaded: z19.boolean().optional(),
+  status: z19.string().optional(),
+  backend_alive: z19.boolean().optional(),
+  backend_health: z19.string().optional(),
+  watchdog_reset: z19.boolean().optional(),
+  watchdog_reset_reason: z19.string().optional(),
+  residency_class: z19.string().optional(),
+  slot_pool: z19.string().optional(),
+  checkpoint: z19.string().optional(),
+  type: z19.string().optional(),
+  device: z19.string().optional(),
+  backend_url: z19.string().optional(),
+  pid: z19.number().int().optional(),
+  launch_command: z19.unknown().optional(),
+  pinned: z19.boolean().optional(),
+  recipe: z19.string().optional(),
+  recipe_options: z19.unknown().optional(),
+  is_busy: z19.boolean().optional(),
+  is_streaming: z19.boolean().optional(),
+  max_context_window: z19.number().optional(),
+  cost_input_per_million: z19.number().optional(),
+  cost_output_per_million: z19.number().optional(),
+  last_use: z19.number().optional()
+}).strict();
+var TelemetrySchema = z19.object({
+  enabled: z19.boolean(),
+  captures: z19.array(z19.string()).optional()
+}).strict();
+var HealthSchema = z19.object({
+  status: z19.literal("ok"),
+  all_models_loaded: z19.array(LoadedModelSchema),
+  version: z19.string().optional(),
+  model_loaded: z19.string().nullable().optional(),
+  telemetry: TelemetrySchema.optional(),
+  max_models: z19.record(z19.string(), z19.number().int()).optional(),
+  pinned_models: z19.record(z19.string(), z19.number().int()).optional(),
+  pinned_helper_models: z19.record(z19.string(), z19.number().int()).optional(),
+  websocket_port: z19.number().int().optional(),
+  update_check_done: z19.boolean().optional()
+}).strict();
+var AliasSchema = z19.object({
+  alias: modelName,
+  target: modelName,
+  downloaded: z19.boolean().optional(),
+  recipe: z19.string().optional()
+}).strict();
+var AliasesSchema = z19.object({
+  aliases: z19.array(AliasSchema)
+}).strict();
+var MetadataRecordSchema = z19.record(z19.string(), z19.unknown());
+var inactiveStates = new Set([
+  "loading",
+  "downsizing",
+  "downsized",
+  "evicting",
+  "unloaded"
+]);
+var inactiveHealth = new Set(["stopped", "exited", "watchdog_reset"]);
+var standardPools = new Set([
+  "standard/llm",
+  "standard/embedding",
+  "standard/reranking",
+  "standard/transcription",
+  "standard/image",
+  "standard/tts",
+  "standard/audio-generation",
+  "standard/classification",
+  "standard/mesh"
+]);
+function usableState(entry) {
+  if (entry.loaded === false || entry.backend_alive === false || entry.watchdog_reset === true || typeof entry.status === "string" && inactiveStates.has(entry.status) || typeof entry.backend_health === "string" && inactiveHealth.has(entry.backend_health) || entry.residency_class === "routing_helper" || typeof entry.slot_pool === "string" && entry.slot_pool.startsWith("routing_helper/")) {
+    return false;
+  }
+  if (entry.loaded !== true || entry.backend_alive !== true || entry.watchdog_reset !== false || entry.status !== "ready" && entry.status !== "in_use" || entry.backend_health !== "ready" && entry.backend_health !== "busy" || entry.watchdog_reset_reason !== undefined && entry.watchdog_reset_reason !== "" || entry.residency_class !== undefined && entry.residency_class !== "standard" || entry.slot_pool !== undefined && (typeof entry.slot_pool !== "string" || !standardPools.has(entry.slot_pool))) {
+    return;
+  }
+  return true;
+}
+function projectMetadataObject(payload, keys) {
+  const record = MetadataRecordSchema.safeParse(payload);
+  if (!record.success)
+    throw new ModelResidencyError("unknown");
+  return Object.fromEntries(keys.filter((key) => Object.hasOwn(record.data, key)).map((key) => [key, record.data[key]]));
+}
+function parseResidency(healthPayload, aliasPayload) {
+  const healthFields = projectMetadataObject(healthPayload, Object.keys(HealthSchema.shape));
+  if (Array.isArray(healthFields.all_models_loaded)) {
+    healthFields.all_models_loaded = healthFields.all_models_loaded.map((entry) => projectMetadataObject(entry, Object.keys(LoadedModelSchema.shape)));
+  }
+  if (healthFields.telemetry !== undefined) {
+    healthFields.telemetry = projectMetadataObject(healthFields.telemetry, Object.keys(TelemetrySchema.shape));
+  }
+  const aliasFields = projectMetadataObject(aliasPayload, Object.keys(AliasesSchema.shape));
+  if (Array.isArray(aliasFields.aliases)) {
+    aliasFields.aliases = aliasFields.aliases.map((entry) => projectMetadataObject(entry, Object.keys(AliasSchema.shape)));
+  }
+  const health = HealthSchema.safeParse(healthFields);
+  const aliases = AliasesSchema.safeParse(aliasFields);
+  if (!health.success || !aliases.success)
+    throw new ModelResidencyError("unknown");
+  const result = new Map;
+  for (const entry of health.data.all_models_loaded) {
+    if (result.has(entry.model_name))
+      throw new ModelResidencyError("unknown");
+    result.set(entry.model_name, {
+      loaded: entry.model_name.endsWith(":latest") ? undefined : usableState(entry),
+      metadata: entry
+    });
+  }
+  const seenAliases = new Set;
+  for (const entry of aliases.data.aliases) {
+    if (seenAliases.has(entry.alias))
+      throw new ModelResidencyError("unknown");
+    seenAliases.add(entry.alias);
+    result.set(entry.alias, {
+      loaded: undefined,
+      metadata: result.get(entry.alias)?.metadata ?? {}
+    });
+  }
+  return result;
+}
+function lemonadeBaseURL(value) {
+  let url;
+  try {
+    url = new URL(value);
+  } catch {
+    throw new ModelResidencyError("destination");
+  }
+  if (url.protocol !== "http:" && url.protocol !== "https:" || url.username !== "" || url.password !== "" || url.search !== "" || url.hash !== "" || !/^\/(?:api\/)?v[01]\/?$/.test(url.pathname)) {
+    throw new ModelResidencyError("destination");
+  }
+  return `${url.origin}${url.pathname.replace(/\/$/, "")}`;
+}
+async function withResidencyDeadline(operation, options) {
+  const timeoutMs = options.timeoutMs ?? 5000;
+  if (!Number.isFinite(timeoutMs) || timeoutMs <= 0) {
+    throw new ModelResidencyError("configuration");
+  }
+  const controller = new AbortController;
+  const cancel = () => controller.abort(new ModelResidencyError("cancelled"));
+  if (options.signal?.aborted)
+    throw new ModelResidencyError("cancelled");
+  options.signal?.addEventListener("abort", cancel, { once: true });
+  const schedule = options.scheduleTimeout ?? ((callback, ms) => {
+    const timer = setTimeout(callback, ms);
+    return () => clearTimeout(timer);
+  });
+  let onAbort = () => {};
+  const aborted = new Promise((_, reject) => {
+    onAbort = () => reject(controller.signal.reason);
+    controller.signal.addEventListener("abort", onAbort, { once: true });
+  });
+  const clearTimer = schedule(() => controller.abort(new ModelResidencyError("timeout")), timeoutMs);
+  try {
+    controller.signal.throwIfAborted();
+    return await Promise.race([operation(controller.signal), aborted]);
+  } finally {
+    clearTimer();
+    options.signal?.removeEventListener("abort", cancel);
+    controller.signal.removeEventListener("abort", onAbort);
+    controller.abort();
+  }
+}
+async function metadata(url, fetch, signal, headers) {
+  signal.throwIfAborted();
+  let payload;
+  try {
+    const response = await fetch(url, {
+      method: "GET",
+      headers,
+      signal,
+      redirect: "error",
+      cache: "no-store"
+    });
+    signal.throwIfAborted();
+    if (!response.ok || response.redirected || response.url !== "" && response.url !== url) {
+      throw new ModelResidencyError("unknown");
+    }
+    payload = await response.json();
+  } catch {
+    signal.throwIfAborted();
+    throw new ModelResidencyError("unknown");
+  }
+  signal.throwIfAborted();
+  return payload;
+}
+async function readLemonadeResidency(baseURL, fetch, options = {}) {
+  const base = lemonadeBaseURL(baseURL);
+  const headers = new Headers(options.headers);
+  headers.delete("content-type");
+  headers.delete("content-length");
+  headers.set("accept", "application/json");
+  headers.set("cache-control", "no-cache, no-store");
+  headers.delete("if-none-match");
+  headers.delete("if-modified-since");
+  return withResidencyDeadline(async (signal) => {
+    const aliases = await metadata(`${new URL(base).origin}/internal/aliases`, fetch, signal, headers);
+    const health = await metadata(`${base}/health`, fetch, signal, headers);
+    return parseResidency(health, aliases);
+  }, options);
+}
+
 // src/local/lemonade.ts
 var LEMONADE_DEFAULT_BASE_URL = "http://localhost:13305/api/v1";
 var NON_TEXT_LABELS = new Set([
@@ -10017,36 +10276,19 @@ function isNonTextModel(entry) {
   return entry.labels.some((label) => typeof label === "string" && NON_TEXT_LABELS.has(label));
 }
 async function readLoadedModels(baseURL, fetch) {
-  let payload;
   try {
-    const response = await fetch(`${baseURL}/health`, {
-      method: "GET",
-      headers: { accept: "application/json" }
-    });
-    if (!response.ok) {
-      return;
-    }
-    payload = await response.json();
+    const residency = await readLemonadeResidency(baseURL, fetch);
+    return new Map([...residency].map(([name, entry]) => [
+      name,
+      {
+        loaded: entry.loaded,
+        slots: entry.loaded === true ? readSlotCount(entry.metadata) : undefined,
+        totalContextWindow: entry.loaded === true ? readLoadedContextWindow(entry.metadata) : undefined
+      }
+    ]));
   } catch {
     return;
   }
-  if (!isObject2(payload) || !Array.isArray(payload.all_models_loaded)) {
-    return;
-  }
-  const loaded = new Map;
-  for (const entry of payload.all_models_loaded) {
-    if (!isObject2(entry) || typeof entry.model_name !== "string") {
-      continue;
-    }
-    if (entry.loaded === false) {
-      continue;
-    }
-    loaded.set(entry.model_name, {
-      slots: readSlotCount(entry),
-      totalContextWindow: readLoadedContextWindow(entry)
-    });
-  }
-  return loaded;
 }
 function readSlotCount(entry) {
   return slotsFromLlamacppArgs(entry) ?? slotsFromLaunchCommand(entry);
@@ -10193,6 +10435,9 @@ function enrichWithLoadState(models, loaded) {
     if (hit === undefined) {
       return { ...base, loaded: false };
     }
+    if (hit.loaded !== true) {
+      return hit.loaded === false ? { ...base, loaded: false } : base;
+    }
     const contextWindow = derivedConservativeContextWindow(model.contextWindow, hit);
     return {
       ...base,
@@ -10336,6 +10581,14 @@ function reportedModelSlotsByRuntime(snapshots) {
 }
 
 // src/local/slotPool.ts
+function localModelAliases(providerID, models) {
+  const aliases = new Map;
+  for (const model of models ?? []) {
+    if (model.kind === "local" && model.providerID === providerID && model.runtimeModelID !== undefined && model.runtimeModelID !== model.modelID)
+      aliases.set(model.modelID, model.runtimeModelID);
+  }
+  return aliases;
+}
 var POOL_SEPARATOR = "::";
 function slotPoolKey(runtime, modelID) {
   if (modelID === undefined) {
@@ -10365,13 +10618,20 @@ function slotPoolReservedInteractive(runtime, modelID) {
 function unknownPoolCapacity() {
   return DEFAULT_LOCAL_MAX_CONCURRENCY;
 }
-function withReportedModelSlots(runtime, reported) {
-  if (reported === undefined || Object.keys(reported).length === 0) {
+function withReportedModelSlots(runtime, reported, aliases) {
+  const configured = Object.entries(runtime.modelConcurrency ?? {});
+  const hasAliasLimits = configured.some(([modelID]) => aliases?.has(modelID) === true);
+  if (!hasAliasLimits && (reported === undefined || Object.keys(reported).length === 0)) {
     return runtime;
   }
+  const explicit = new Map;
+  for (const [modelID, limit] of configured) {
+    const physicalID = aliases?.get(modelID) ?? modelID;
+    explicit.set(physicalID, Math.min(explicit.get(physicalID) ?? limit, limit));
+  }
   return {
     ...runtime,
-    modelConcurrency: { ...reported, ...runtime.modelConcurrency }
+    modelConcurrency: { ...reported, ...Object.fromEntries(explicit) }
   };
 }
 
@@ -10468,14 +10728,14 @@ var readReportArtifact = async (reportPath) => {
 };
 
 // src/orchestrator/roster.ts
-import { z as z19 } from "zod";
-var RosterEntrySchema = z19.object({
-  roleID: z19.string().min(1),
-  agentName: z19.string().min(1)
+import { z as z20 } from "zod";
+var RosterEntrySchema = z20.object({
+  roleID: z20.string().min(1),
+  agentName: z20.string().min(1)
 }).strict();
-var RosterSchema = z19.object({
-  universe: z19.string().min(1),
-  entries: z19.array(RosterEntrySchema)
+var RosterSchema = z20.object({
+  universe: z20.string().min(1),
+  entries: z20.array(RosterEntrySchema)
 }).strict();
 var ROSTER_JSON_FENCE = /```json\s*([\s\S]*?)```/;
 
@@ -11120,10 +11380,21 @@ async function runSubsession(client, req, deps) {
   }
 }
 
+// src/local/modelResidency.ts
+function hasRequiredModelResidency(kind, model) {
+  return kind !== "lemonade" || model?.loaded === true;
+}
+
 // src/plugin/availability.ts
 function modelKey2(model) {
   return `${model.providerID}/${model.modelID}`;
 }
+function availabilityMetadata({
+  apiModelID: _apiModelID,
+  ...metadata2
+}) {
+  return metadata2;
+}
 function compareAvailableModels(left, right) {
   const kindOrder = Number(left.kind === "frontier") - Number(right.kind === "frontier");
   if (kindOrder !== 0) {
@@ -11141,6 +11412,9 @@ function uniqueSelections(models) {
 function isConfiguredLocalModel(config, model) {
   return config.local.runtimes.some((runtime) => runtime.defaultModel.providerID === model.providerID);
 }
+function requiresModelResidency(config, model) {
+  return config.local.runtimes.some((runtime) => runtime.defaultModel.providerID === model.providerID && !hasRequiredModelResidency(localRuntimeKind(runtime), undefined));
+}
 function configuredFrontierProviderIDs(config) {
   const providerIDs = new Set([config.baseline.hardDefault.providerID]);
   if (config.baseline.mode === "pinned" && config.baseline.pinnedModel !== null) {
@@ -11235,7 +11509,7 @@ function frontierAvailableModels(config, configuredModels) {
   for (const model of configuredModels ?? frontierBaselines(config)) {
     if (!isConfiguredLocalModel(config, model)) {
       frontierByKey.set(modelKey2(model), {
-        ...model,
+        ...availabilityMetadata(model),
         kind: "frontier",
         available: true
       });
@@ -11251,7 +11525,7 @@ function defaultAvailableModels(config, configuredModels) {
     ...defaultLocalModels(config).map((model) => ({
       ...model,
       kind: "local",
-      available: true
+      available: !requiresModelResidency(config, model)
     })),
     ...frontierAvailableModels(config, configuredModels)
   ].sort(compareAvailableModels);
@@ -11265,7 +11539,8 @@ function toAvailableModels(snapshots, config, configuredModels) {
       continue;
     }
     localByKey.set(modelKey2(model), {
-      ...model,
+      ...availabilityMetadata(model),
+      ...model.apiModelID !== undefined && model.apiModelID !== model.modelID ? { runtimeModelID: model.apiModelID } : {},
       kind: "local",
       available: false
     });
@@ -11276,27 +11551,25 @@ function toAvailableModels(snapshots, config, configuredModels) {
       continue;
     }
     for (const model of snapshot.models) {
-      const ref = {
-        providerID: runtime.defaultModel.providerID,
-        modelID: model.modelID
-      };
-      if (registeredKeys !== undefined && !registeredKeys.has(modelKey2(ref))) {
-        continue;
-      }
-      const existing = localByKey.get(modelKey2(ref));
-      const availableModel = {
-        ...existing,
-        ...ref,
-        kind: "local",
-        available: snapshot.reachable || existing?.available === true
-      };
-      if (model.supportsTools !== "unknown") {
-        availableModel.supportsTools = model.supportsTools;
-      }
-      if (model.contextWindow !== undefined) {
-        availableModel.contextWindow = model.contextWindow;
+      const providerID = runtime.defaultModel.providerID;
+      const refs = configuredModels === undefined ? [{ providerID, modelID: model.modelID }] : configuredModels.filter((registered) => registered.providerID === providerID && (registered.apiModelID ?? registered.modelID) === model.modelID);
+      for (const ref of refs) {
+        const existing = localByKey.get(modelKey2(ref));
+        const availableModel = {
+          ...existing,
+          providerID: ref.providerID,
+          modelID: ref.modelID,
+          kind: "local",
+          available: snapshot.reachable && hasRequiredModelResidency(localRuntimeKind(runtime), model) || existing?.available === true
+        };
+        if (model.supportsTools !== "unknown") {
+          availableModel.supportsTools = model.supportsTools;
+        }
+        if (model.contextWindow !== undefined) {
+          availableModel.contextWindow = model.contextWindow;
+        }
+        localByKey.set(modelKey2(ref), availableModel);
       }
-      localByKey.set(modelKey2(ref), availableModel);
     }
   }
   return [
@@ -11305,7 +11578,7 @@ function toAvailableModels(snapshots, config, configuredModels) {
   ].sort(compareAvailableModels);
 }
 function createAvailabilityCache(options) {
-  let configuredModels = options.initialConfiguredModels === undefined ? undefined : [...options.initialConfiguredModels];
+  let configuredModels = options.initialConfiguredModels === undefined ? undefined : options.initialConfiguredModels.map((model) => ({ ...model }));
   let configuredProfiles = (options.initialConfiguredProfiles ?? []).map((profile) => profileForConfiguredDomain(options.config, profile));
   let cached = defaultAvailableModels(options.config, configuredModels);
   let inFlight;
@@ -11315,7 +11588,9 @@ function createAvailabilityCache(options) {
       if (options.listConfiguredInventory !== undefined) {
         const inventory = await options.listConfiguredInventory().then((value) => ({ kind: "models", value }), (error) => ({ kind: "error", error }));
         if (inventory.kind === "models") {
-          configuredModels = inventory.value.models;
+          configuredModels = inventory.value.models.map((model) => ({
+            ...model
+          }));
           configuredProfiles = inventory.value.profiles.map((profile) => profileForConfiguredDomain(options.config, profile));
         } else {
           options.onRefreshError?.(inventory.error);
@@ -11328,15 +11603,22 @@ function createAvailabilityCache(options) {
   }
   return {
     get: () => cloneAvailableModels(cached),
+    resolveApiModelID: (ref) => {
+      const registered = configuredModels?.find((model) => model.providerID === ref.providerID && model.modelID === ref.modelID);
+      return registered?.apiModelID ?? registered?.modelID;
+    },
     getProfiles: () => configuredProfiles.map((profile) => ({
       ...profile,
       ref: { ...profile.ref },
       costPer1M: { ...profile.costPer1M }
     })),
     refresh: () => {
-      inFlight ??= refreshNow().finally(() => {
-        inFlight = undefined;
-      });
+      if (inFlight === undefined) {
+        cached = cached.map((model) => requiresModelResidency(options.config, model) ? { ...model, available: false } : model);
+        inFlight = refreshNow().finally(() => {
+          inFlight = undefined;
+        });
+      }
       return inFlight;
     }
   };
@@ -11504,7 +11786,7 @@ function planWorktreeReconciliation(input) {
 }
 
 // src/telemetry/otelConfig.ts
-import { z as z20 } from "zod";
+import { z as z21 } from "zod";
 
 // src/telemetry/fanout.ts
 function createFanOutSink(deps) {
@@ -11582,10 +11864,10 @@ function createOtelSink(deps) {
 }
 
 // src/telemetry/otelConfig.ts
-var OtelBackendConfigSchema = z20.object({
-  backend: z20.literal("opentelemetry"),
-  connectionEnv: z20.string().min(1),
-  serviceName: z20.string().min(1).optional()
+var OtelBackendConfigSchema = z21.object({
+  backend: z21.literal("opentelemetry"),
+  connectionEnv: z21.string().min(1),
+  serviceName: z21.string().min(1).optional()
 }).strict();
 function parseConnectionString(raw) {
   const pairs = new Map;
@@ -12010,7 +12292,7 @@ function parseOpencodeProviders(opencodeConfig) {
 function localRuntimeStates(config) {
   const map = new Map;
   for (const runtime of config.local.runtimes) {
-    map.set(runtime.id, { enabled: runtime.enabled });
+    map.set(runtime.defaultModel.providerID, { enabled: runtime.enabled });
   }
   return map;
 }
@@ -12018,7 +12300,7 @@ function disabledLocalProviderIDs(config) {
   const ids = new Set;
   for (const runtime of config.local.runtimes) {
     if (!runtime.enabled) {
-      ids.add(runtime.id);
+      ids.add(runtime.defaultModel.providerID);
     }
   }
   return ids;
@@ -12034,7 +12316,11 @@ function computeLive(model, isLocalProvider, liveModels) {
   if (!snapshot.reachable) {
     return "unreachable";
   }
-  return snapshot.modelIDs.has(model.modelID) ? "confirmed" : "not-advertised";
+  if (snapshot.modelIDs.has(model.modelID))
+    return "confirmed";
+  if (snapshot.residency?.has(model.modelID))
+    return snapshot.residency.get(model.modelID) === false ? "not-loaded" : "residency-unknown";
+  return "not-advertised";
 }
 function resolveAgentModel(model, context) {
   const isLocalProvider = KNOWN_LOCAL_PROVIDER_IDS.has(model.providerID) || context.localRuntimes.has(model.providerID);
@@ -14365,12 +14651,19 @@ function defaultModelFromOpencode(opencodeConfig) {
   }
   return;
 }
-function liveModelsFromSnapshots(snapshots) {
+function liveModelsFromSnapshots(snapshots, config) {
   const map = new Map;
   for (const snapshot of snapshots) {
-    map.set(snapshot.id, {
+    const runtime = config.local.runtimes.find((runtime2) => runtime2.id === snapshot.id);
+    if (runtime === undefined || !runtime.enabled)
+      continue;
+    const kind = localRuntimeKind(runtime);
+    map.set(runtime.defaultModel.providerID, {
       reachable: snapshot.reachable,
-      modelIDs: new Set(snapshot.models.map((model) => model.modelID))
+      modelIDs: new Set(snapshot.models.filter((model) => hasRequiredModelResidency(kind, model)).map((model) => model.modelID)),
+      ...kind === "lemonade" ? {
+        residency: new Map(snapshot.models.map((model) => [model.modelID, model.loaded]))
+      } : {}
     });
   }
   return map;
@@ -14656,7 +14949,7 @@ async function runCli(argv, deps) {
       const agentModels = diagnoseAgentModels(agentFiles, {
         opencodeProviders: parseOpencodeProviders(opencodeConfig),
         localRuntimes: localRuntimeStates(config),
-        liveModels: liveModelsFromSnapshots(snapshots),
+        liveModels: liveModelsFromSnapshots(snapshots, config),
         sourceDir: deps.agentDir,
         ...defaultModel !== undefined ? { defaultModel } : {}
       });
@@ -14695,29 +14988,53 @@ async function runCli(argv, deps) {
       const rosterMissing = deps.loadRosterForDoctor !== undefined && roster === undefined && rosterLoadError === undefined;
       const orchestratorAgentName = ORCHESTRATOR_AGENT_PATH.slice(ORCHESTRATOR_AGENT_PATH.lastIndexOf("/") + 1).replace(/\.md$/, "");
       const orchestratorAgentMissing = !agentFiles.some((file) => file.name === orchestratorAgentName);
+      const inventoryNotes = [];
+      const readySnapshots = snapshots.map((snapshot) => {
+        const runtime = config.local.runtimes.find((runtime2) => runtime2.id === snapshot.id);
+        if (runtime === undefined || localRuntimeKind(runtime) !== "lemonade")
+          return snapshot;
+        inventoryNotes.push(executionSetupMessages.lemonadeInventory(runtime.id, runtime.defaultModel.providerID, snapshot.models));
+        return {
+          ...snapshot,
+          models: snapshot.models.filter((model) => hasRequiredModelResidency(localRuntimeKind(runtime), model))
+        };
+      });
+      const residencyNotes = agentModels.flatMap((agent) => {
+        const live = agent.resolution?.live;
+        if (agent.model === undefined || live !== "not-loaded" && live !== "residency-unknown")
+          return [];
+        return [
+          executionSetupMessages.lemonadeAgentResidency(agent.name, `${agent.model.providerID}/${agent.model.modelID}`, live)
+        ];
+      });
       return {
         exitCode: 0,
-        stdout: renderDoctor({
-          config,
-          snapshots,
-          telemetryPath,
-          telemetryRecords: records.length,
-          agentModels,
-          opencodeConfigPaths,
-          ...opencodeConfig !== undefined ? { opencodeConfig } : {},
-          ...queueWait !== undefined ? { queueWait } : {},
-          ...rosterAudit !== undefined ? { rosterAudit } : {},
-          ...rosterRoleCount !== undefined ? { rosterRoleCount } : {},
-          ...rosterLoadError !== undefined ? { rosterLoadError } : {},
-          ...rosterMissing ? { rosterMissing } : {},
-          ...orchestratorAgentMissing ? { orchestratorAgentMissing } : {},
-          ...diagnostics !== undefined && diagnostics.length > 0 ? { diagnostics } : {},
-          ...opencodeConfigError !== undefined ? { opencodeConfigError } : {},
-          ...cacheEntries !== undefined ? { cacheEntries, cliVersion: deps.version } : {},
-          ...legacyLayout !== undefined && legacyLayout.length > 0 ? { legacyLayout } : {},
-          ...otelBackend !== undefined ? { otelBackend } : {},
-          ...gitignoreCoverage !== undefined ? { gitignore: gitignoreCoverage } : {}
-        })
+        stdout: [
+          renderDoctor({
+            config,
+            snapshots: readySnapshots,
+            telemetryPath,
+            telemetryRecords: records.length,
+            agentModels,
+            opencodeConfigPaths,
+            ...opencodeConfig !== undefined ? { opencodeConfig } : {},
+            ...queueWait !== undefined ? { queueWait } : {},
+            ...rosterAudit !== undefined ? { rosterAudit } : {},
+            ...rosterRoleCount !== undefined ? { rosterRoleCount } : {},
+            ...rosterLoadError !== undefined ? { rosterLoadError } : {},
+            ...rosterMissing ? { rosterMissing } : {},
+            ...orchestratorAgentMissing ? { orchestratorAgentMissing } : {},
+            ...diagnostics !== undefined && diagnostics.length > 0 ? { diagnostics } : {},
+            ...opencodeConfigError !== undefined ? { opencodeConfigError } : {},
+            ...cacheEntries !== undefined ? { cacheEntries, cliVersion: deps.version } : {},
+            ...legacyLayout !== undefined && legacyLayout.length > 0 ? { legacyLayout } : {},
+            ...otelBackend !== undefined ? { otelBackend } : {},
+            ...gitignoreCoverage !== undefined ? { gitignore: gitignoreCoverage } : {}
+          }),
+          ...inventoryNotes,
+          ...residencyNotes
+        ].join(`
+`)
       };
     }
     if (command === "migrate") {
@@ -14901,29 +15218,29 @@ import {
   writeFile as writeFile2
 } from "node:fs/promises";
 import { dirname as dirname5, join as join12, resolve as resolve7 } from "node:path";
-import { z as z21 } from "zod";
+import { z as z22 } from "zod";
 var CONSOLE_RUNTIME_SCHEMA_VERSION = 1;
 var CONSOLE_RUNTIME_DIRECTORY = ".opencode/openteam-local/console";
 var CONSOLE_RUNTIME_FILE = "runtime.json";
 var CONSOLE_LAUNCH_LOCK_FILE = "launch.lock";
 var CONSOLE_LOG_FILE = "console.log";
-var ConsoleRuntimeStateSchema = z21.object({
-  schemaVersion: z21.literal(CONSOLE_RUNTIME_SCHEMA_VERSION),
-  pid: z21.number().int().positive(),
-  workspaceRoot: z21.string().min(1),
-  host: z21.string().min(1),
-  port: z21.number().int().min(1).max(65535),
-  url: z21.url(),
-  startedAt: z21.iso.datetime({ offset: true }),
-  launchId: z21.uuid(),
-  logPath: z21.string().min(1)
+var ConsoleRuntimeStateSchema = z22.object({
+  schemaVersion: z22.literal(CONSOLE_RUNTIME_SCHEMA_VERSION),
+  pid: z22.number().int().positive(),
+  workspaceRoot: z22.string().min(1),
+  host: z22.string().min(1),
+  port: z22.number().int().min(1).max(65535),
+  url: z22.url(),
+  startedAt: z22.iso.datetime({ offset: true }),
+  launchId: z22.uuid(),
+  logPath: z22.string().min(1)
 }).strict();
-var ConsoleLaunchLockSchema = z21.object({
-  schemaVersion: z21.literal(CONSOLE_RUNTIME_SCHEMA_VERSION),
-  workspaceRoot: z21.string().min(1),
-  launchId: z21.uuid(),
-  ownerPid: z21.number().int().positive(),
-  createdAt: z21.iso.datetime({ offset: true })
+var ConsoleLaunchLockSchema = z22.object({
+  schemaVersion: z22.literal(CONSOLE_RUNTIME_SCHEMA_VERSION),
+  workspaceRoot: z22.string().min(1),
+  launchId: z22.uuid(),
+  ownerPid: z22.number().int().positive(),
+  createdAt: z22.iso.datetime({ offset: true })
 }).strict();
 
 class ConsoleRuntimeStateFileError extends Error {
@@ -15622,36 +15939,36 @@ function formatResponse(response) {
 }
 
 // src/plugin/reportRunSchema.ts
-import { z as z23 } from "zod";
+import { z as z24 } from "zod";
 
 // src/plugin/graphShadowIngress.ts
-import { z as z22 } from "zod";
+import { z as z23 } from "zod";
 var LEGACY_EXECUTION_TRACE_VERSION = 1;
-var LegacyExecutionStatusSchema = z22.enum([
+var LegacyExecutionStatusSchema = z23.enum([
   "completed",
   "failed",
   "cancelled"
 ]);
-var LegacyReviewOutcomeSchema = z22.enum([
+var LegacyReviewOutcomeSchema = z23.enum([
   "approved",
   "rejected",
   "inconclusive"
 ]);
-var LegacyTraceNodeV1Schema = z22.object({
+var LegacyTraceNodeV1Schema = z23.object({
   id: NodeIDSchema,
   role: NodeRoleSchema,
-  model: z22.string().min(1),
-  sessionRef: z22.string().min(1).optional(),
+  model: z23.string().min(1),
+  sessionRef: z23.string().min(1).optional(),
   errorClass: ErrorClassSchema.optional()
 }).strict();
-var LegacyExecutionTraceV1Schema = z22.object({
-  version: z22.literal(LEGACY_EXECUTION_TRACE_VERSION),
+var LegacyExecutionTraceV1Schema = z23.object({
+  version: z23.literal(LEGACY_EXECUTION_TRACE_VERSION),
   runID: NodeIDSchema,
   status: LegacyExecutionStatusSchema,
   outcome: LegacyReviewOutcomeSchema,
-  fixes: z22.number().int().nonnegative(),
-  nodes: z22.array(LegacyTraceNodeV1Schema).min(1),
-  parentSessionRef: z22.string().min(1).optional()
+  fixes: z23.number().int().nonnegative(),
+  nodes: z23.array(LegacyTraceNodeV1Schema).min(1),
+  parentSessionRef: z23.string().min(1).optional()
 }).strict();
 function gateReason2(gate) {
   if (gate === undefined || gate.mode === "off") {
@@ -15722,20 +16039,20 @@ function parseLegacyExecutionTrace(input) {
 }
 
 // src/plugin/reportRunSchema.ts
-var ReportRunNodeSchema = z23.object({
+var ReportRunNodeSchema = z24.object({
   id: NodeIDSchema,
   role: NodeRoleSchema,
-  model: z23.string().min(1),
-  ok: z23.boolean(),
-  sessionRef: z23.string().min(1).optional(),
+  model: z24.string().min(1),
+  ok: z24.boolean(),
+  sessionRef: z24.string().min(1).optional(),
   errorClass: ErrorClassSchema.optional()
 }).strict();
-var ReportRunPayloadSchema = z23.object({
+var ReportRunPayloadSchema = z24.object({
   runID: NodeIDSchema,
   status: LegacyExecutionStatusSchema,
-  fixes: z23.number().int().nonnegative(),
-  nodes: z23.array(ReportRunNodeSchema).min(1),
-  parentSessionRef: z23.string().min(1).optional()
+  fixes: z24.number().int().nonnegative(),
+  nodes: z24.array(ReportRunNodeSchema).min(1),
+  parentSessionRef: z24.string().min(1).optional()
 }).strict();
 
 // src/orchestrator/graphShadow.ts
@@ -16839,6 +17156,309 @@ function hashPrompt(prompt) {
   return `fnv1a32:${(hash >>> 0).toString(16).padStart(8, "0")}`;
 }
 
+// src/plugin/modelResidency.ts
+import { z as z25 } from "zod";
+
+// src/local/lemonadeRequestGuard.ts
+var inferencePaths = new Set([
+  "/chat/completions",
+  "/completions",
+  "/embeddings",
+  "/responses"
+]);
+function modelID(payload) {
+  if (typeof payload !== "object" || payload === null || !("model" in payload) || typeof payload.model !== "string" || payload.model.length === 0 || payload.model !== payload.model.trim()) {
+    throw new ModelResidencyError("request");
+  }
+  if (payload.model.endsWith(":latest"))
+    throw new ModelResidencyError("identity");
+  return payload.model;
+}
+function createLemonadeGuardedFetch(options) {
+  const base = lemonadeBaseURL(options.baseURL);
+  const upstream = options.fetch;
+  const healthFetch = options.healthFetch ?? upstream;
+  return Object.assign(async (input, init) => {
+    const request = new Request(input, init);
+    const url = new URL(request.url);
+    if (url.username !== "" || url.password !== "" || url.search !== "" || url.hash !== "" || !request.url.startsWith(`${base}/`)) {
+      throw new ModelResidencyError("destination");
+    }
+    const path4 = request.url.slice(base.length);
+    const metadataOnly = request.method === "GET" && (path4 === "/health" || /^\/models(?:\/[^/]+)?$/.test(path4));
+    if (!metadataOnly && (request.method !== "POST" || !inferencePaths.has(path4))) {
+      throw new ModelResidencyError("request");
+    }
+    if (!metadataOnly) {
+      await withResidencyDeadline(async (signal) => {
+        signal.throwIfAborted();
+        let payload;
+        try {
+          payload = await request.clone().json();
+        } catch {
+          signal.throwIfAborted();
+          throw new ModelResidencyError("request");
+        }
+        signal.throwIfAborted();
+        const model = modelID(payload);
+        const modelIDs = typeof options.modelIDs === "function" ? await options.modelIDs() : options.modelIDs;
+        signal.throwIfAborted();
+        if (modelIDs !== undefined && !modelIDs.has(model)) {
+          throw new ModelResidencyError("identity");
+        }
+        const residency = await readLemonadeResidency(base, healthFetch, {
+          ...options,
+          signal,
+          headers: request.headers
+        });
+        signal.throwIfAborted();
+        const entry = residency.get(model);
+        if (entry?.loaded !== true) {
+          throw new ModelResidencyError(entry?.loaded === undefined && entry !== undefined ? "unknown" : "inactive");
+        }
+      }, { ...options, signal: request.signal });
+    }
+    if (request.signal.aborted)
+      throw new ModelResidencyError("cancelled");
+    const {
+      body: _body,
+      headers: _headers,
+      method: _method,
+      signal: _signal,
+      redirect: _redirect,
+      ...transportOptions
+    } = init ?? {};
+    return upstream(request, { ...transportOptions, redirect: "error" });
+  }, {
+    preconnect: (...args) => upstream.preconnect?.(...args)
+  });
+}
+
+// src/plugin/modelResidency.ts
+function isFetch(value) {
+  return typeof value === "function";
+}
+function origin(value) {
+  return typeof value === "string" && URL.canParse(value) ? new URL(value).origin : undefined;
+}
+var TEMPLATE_REFERENCE = /\$\{[^}]+\}/;
+function resolveTemplateReferences(value, readEnv) {
+  let unresolved = false;
+  const resolved = value.replace(/\$\{([^}]+)\}/g, (match, key) => {
+    const resolvedValue = readEnv(key);
+    if (resolvedValue === undefined) {
+      unresolved = true;
+      return match;
+    }
+    return resolvedValue;
+  });
+  return unresolved ? undefined : resolved;
+}
+function endpointBinding(value, readEnv) {
+  if (!TEMPLATE_REFERENCE.test(value))
+    return { ambiguous: false, origin: origin(value) };
+  const resolved = resolveTemplateReferences(value, readEnv);
+  return resolved === undefined ? { ambiguous: true } : { ambiguous: false, origin: origin(resolved) };
+}
+function optionBaseURL(value) {
+  return typeof value === "string" && value !== "" ? value : undefined;
+}
+function providerBase(provider, model) {
+  return optionBaseURL(provider.options?.baseURL) ?? model?.provider?.api ?? provider.api;
+}
+function providerRoutes(provider) {
+  const models = Object.values(provider.models ?? {});
+  return (models.length === 0 ? [undefined] : models).map((model) => ({
+    baseURL: providerBase(provider, model),
+    npm: model?.provider?.npm ?? provider.npm
+  }));
+}
+function wireID(key, model) {
+  const id = model?.id ?? key;
+  if (id.length === 0 || id !== id.trim())
+    throw new ModelResidencyError("identity");
+  return id;
+}
+function nativeEligibleID(id) {
+  return id === "openai" || id === "anthropic" || id.startsWith("opencode");
+}
+function configuredRuntime(config, providerID) {
+  const runtimes = config.local.runtimes.filter((runtime2) => runtime2.defaultModel.providerID === providerID);
+  const runtime = runtimes[0];
+  if (runtimes.length !== 1 || runtime === undefined || !runtime.enabled) {
+    throw new ModelResidencyError("destination");
+  }
+  return runtime;
+}
+function createModelResidencyGuard(config, options) {
+  const guarded = new Map;
+  const blocked = new Set;
+  let hostConfig;
+  const readEnv = options.readEnv ?? ((name) => process.env[name]);
+  const lemonadeRuntimes = () => config.local.runtimes.filter((runtime) => localRuntimeKind(runtime) === "lemonade");
+  const protects = (providerID, baseURL) => lemonadeRuntimes().some((runtime) => {
+    if (runtime.defaultModel.providerID === providerID)
+      return true;
+    if (baseURL === undefined)
+      return false;
+    const binding = endpointBinding(baseURL, readEnv);
+    if (binding.ambiguous)
+      return true;
+    return binding.origin !== undefined && binding.origin === origin(runtime.baseURL ?? LEMONADE_DEFAULT_BASE_URL);
+  });
+  const resolvedWireID = (model, declaredID) => {
+    const id = options.resolveApiModelID === undefined ? declaredID : options.resolveApiModelID(model);
+    if (id === undefined)
+      throw new ModelResidencyError("identity");
+    return wireID(id, undefined);
+  };
+  const configHook = async (host) => {
+    hostConfig = host;
+    const previousGuards = new Map(guarded);
+    guarded.clear();
+    blocked.clear();
+    for (const [providerID, provider] of Object.entries(host.provider ?? {})) {
+      const routes = providerRoutes(provider);
+      if (!routes.some((route) => protects(providerID, route.baseURL)))
+        continue;
+      const previous = previousGuards.get(providerID);
+      const configuredFetch = provider.options?.fetch;
+      const originalFetch = previous !== undefined && configuredFetch === previous.fetch ? previous.originalFetch : configuredFetch ?? options.fetch;
+      blocked.add(providerID);
+      const wasDisabled = host.disabled_providers?.includes(providerID) ?? false;
+      host.disabled_providers = [
+        ...new Set([...host.disabled_providers ?? [], providerID])
+      ];
+      const reject = Object.assign(async () => {
+        throw new ModelResidencyError("transport");
+      }, { preconnect: () => {} });
+      provider.options = { ...provider.options, fetch: reject };
+      try {
+        const runtime = configuredRuntime(config, providerID);
+        const baseURL = lemonadeBaseURL(runtime.baseURL ?? LEMONADE_DEFAULT_BASE_URL);
+        if (localRuntimeKind(runtime) !== "lemonade" || routes.some((route) => route.baseURL === undefined || lemonadeBaseURL(route.baseURL) !== baseURL))
+          throw new ModelResidencyError("destination");
+        if (routes.some((route) => route.npm !== "@ai-sdk/openai-compatible") || nativeEligibleID(providerID) || !isFetch(originalFetch))
+          throw new ModelResidencyError("transport");
+        const modelKeys = new Map;
+        for (const [key, model] of Object.entries(provider.models ?? {})) {
+          if (model.options?.fetch !== undefined || model.options?.baseURL !== undefined && (typeof model.options.baseURL !== "string" || lemonadeBaseURL(model.options.baseURL) !== baseURL))
+            throw new ModelResidencyError("transport");
+          modelKeys.set(key, wireID(key, model));
+        }
+        if (!modelKeys.has(runtime.defaultModel.modelID))
+          modelKeys.set(runtime.defaultModel.modelID, undefined);
+        const modelIDs = () => {
+          const ids = new Set;
+          for (const [modelID2, declaredID] of modelKeys) {
+            const id = options.resolveApiModelID === undefined ? declaredID : options.resolveApiModelID({ providerID, modelID: modelID2 });
+            if (id !== undefined)
+              ids.add(wireID(id, undefined));
+          }
+          return ids;
+        };
+        const fetch = createLemonadeGuardedFetch({
+          ...options,
+          baseURL,
+          modelIDs: async () => {
+            await options.modelInventoryReady?.();
+            return modelIDs();
+          },
+          fetch: originalFetch,
+          healthFetch: options.fetch
+        });
+        provider.options.fetch = fetch;
+        guarded.set(providerID, {
+          baseURL,
+          fetch,
+          originalFetch,
+          modelIDs,
+          modelKeys
+        });
+        blocked.delete(providerID);
+        if (!wasDisabled) {
+          host.disabled_providers = host.disabled_providers.filter((id) => id !== providerID);
+        }
+      } catch (error) {
+        if (!(error instanceof ModelResidencyError))
+          throw error;
+        (options.warn ?? console.warn)(modelResidencyMessages.providerDisabled(providerID));
+      }
+    }
+  };
+  const beforeInference = async (input) => {
+    const base = optionBaseURL(input.provider.options.baseURL) ?? input.model.api.url;
+    if (!protects(input.model.providerID, base))
+      return;
+    const provider = guarded.get(input.model.providerID);
+    if (provider === undefined || blocked.has(input.model.providerID) || input.provider.options.fetch !== provider.fetch || input.model.api.npm !== "@ai-sdk/openai-compatible" || nativeEligibleID(input.model.providerID))
+      throw new ModelResidencyError("transport");
+    if (lemonadeBaseURL(base) !== provider.baseURL) {
+      throw new ModelResidencyError("destination");
+    }
+    const id = resolvedWireID({ providerID: input.model.providerID, modelID: input.model.id }, provider.modelKeys.get(input.model.id));
+    if (id !== input.model.api.id)
+      throw new ModelResidencyError("identity");
+    if (!provider.modelKeys.has(input.model.id))
+      provider.modelKeys.set(input.model.id, undefined);
+  };
+  const localTarget = (model) => {
+    const runtime = configuredRuntime(config, model.providerID);
+    if (hostConfig?.disabled_providers?.includes(model.providerID)) {
+      throw new ModelResidencyError("transport");
+    }
+    if (runtime.baseURL === undefined)
+      throw new ModelResidencyError("destination");
+    const provider = hostConfig?.provider?.[model.providerID];
+    const entry = Object.hasOwn(provider?.models ?? {}, model.modelID) ? provider?.models?.[model.modelID] : undefined;
+    const configuredURL = provider === undefined ? undefined : providerBase(provider, entry);
+    if (configuredURL !== undefined && new URL(configuredURL).href.replace(/\/$/, "") !== new URL(runtime.baseURL).href.replace(/\/$/, "")) {
+      throw new ModelResidencyError("destination");
+    }
+    const modelID2 = resolvedWireID(model, entry === undefined && localRuntimeKind(runtime) === "lemonade" ? undefined : wireID(model.modelID, entry));
+    let fetch = options.fetch;
+    if (localRuntimeKind(runtime) === "lemonade") {
+      const installed = guarded.get(model.providerID);
+      if (installed === undefined || blocked.has(model.providerID)) {
+        throw new ModelResidencyError("transport");
+      }
+      if (installed.baseURL !== lemonadeBaseURL(runtime.baseURL)) {
+        throw new ModelResidencyError("destination");
+      }
+      if (!installed.modelKeys.has(model.modelID))
+        installed.modelKeys.set(model.modelID, undefined);
+      if (!installed.modelIDs().has(modelID2))
+        throw new ModelResidencyError("identity");
+      fetch = installed.fetch;
+    }
+    const configuredHeaders = z25.record(z25.string(), z25.string()).safeParse(provider?.options?.headers ?? {});
+    if (!configuredHeaders.success)
+      throw new ModelResidencyError("configuration");
+    const headers = new Headers(configuredHeaders.data);
+    if (typeof provider?.options?.apiKey === "string" && !headers.has("authorization")) {
+      headers.set("authorization", `Bearer ${provider.options.apiKey}`);
+    }
+    for (const [name, value] of Object.entries(entry?.headers ?? {}))
+      headers.set(name, value);
+    const upstream = fetch;
+    return {
+      baseURL: runtime.baseURL,
+      modelID: modelID2,
+      fetch: [...headers].length === 0 ? fetch : Object.assign(async (input, init) => {
+        const request = new Request(input, init);
+        for (const [name, value] of headers) {
+          if (!request.headers.has(name))
+            request.headers.set(name, value);
+        }
+        return upstream(request);
+      }, {
+        preconnect: (...args) => upstream.preconnect?.(...args)
+      })
+    };
+  };
+  return { config: configHook, beforeInference, localTarget };
+}
+
 // src/plugin/hooks.ts
 var codeSignals = [
   "```",
@@ -16982,7 +17602,10 @@ function createChatMessageHook(config, getAvailable, options = {}) {
   };
 }
 function createHooks(config, getAvailable, options = {}) {
+  const residency = options.modelResidency ?? createModelResidencyGuard(config, { fetch: globalThis.fetch });
   return {
+    config: residency.config,
+    "chat.params": residency.beforeInference,
     "chat.message": createChatMessageHook(config, getAvailable, options)
   };
 }
@@ -17036,62 +17659,62 @@ ${lines.join(`
 }
 
 // src/memory/types.ts
-import { z as z24 } from "zod";
+import { z as z26 } from "zod";
 var SHARED_OWNER_KEY = "*";
-var OwnerKeySchema = z24.string().min(1);
-var MemoryKindSchema = z24.enum(["fact", "preference", "entity"]);
-var MemoryBaseSchema = z24.object({
-  id: z24.string().min(1),
+var OwnerKeySchema = z26.string().min(1);
+var MemoryKindSchema = z26.enum(["fact", "preference", "entity"]);
+var MemoryBaseSchema = z26.object({
+  id: z26.string().min(1),
   ownerKey: OwnerKeySchema,
-  confidence: z24.number().min(0).max(1),
-  validFrom: z24.number().finite(),
-  validUntil: z24.number().finite().nullable().default(null),
-  createdAt: z24.number().finite(),
-  invalidatedAt: z24.number().finite().nullable().default(null),
-  sourceHash: z24.string().min(1),
-  supersededBy: z24.string().min(1).nullable().default(null)
+  confidence: z26.number().min(0).max(1),
+  validFrom: z26.number().finite(),
+  validUntil: z26.number().finite().nullable().default(null),
+  createdAt: z26.number().finite(),
+  invalidatedAt: z26.number().finite().nullable().default(null),
+  sourceHash: z26.string().min(1),
+  supersededBy: z26.string().min(1).nullable().default(null)
 }).strict();
 var FactSchema = MemoryBaseSchema.extend({
-  kind: z24.literal("fact"),
-  subject: z24.string().min(1),
-  predicate: z24.string().min(1),
-  object: z24.string().min(1),
-  category: z24.string().min(1).nullable().default(null)
+  kind: z26.literal("fact"),
+  subject: z26.string().min(1),
+  predicate: z26.string().min(1),
+  object: z26.string().min(1),
+  category: z26.string().min(1).nullable().default(null)
 });
 var PreferenceSchema = MemoryBaseSchema.extend({
-  kind: z24.literal("preference"),
-  category: z24.string().min(1),
-  preference: z24.string().min(1),
-  context: z24.string().min(1).nullable().default(null),
-  lastAccessedAt: z24.number().finite().nullable().default(null),
-  accessCount: z24.number().int().min(0).default(0)
+  kind: z26.literal("preference"),
+  category: z26.string().min(1),
+  preference: z26.string().min(1),
+  context: z26.string().min(1).nullable().default(null),
+  lastAccessedAt: z26.number().finite().nullable().default(null),
+  accessCount: z26.number().int().min(0).default(0)
 });
 var EntitySchema = MemoryBaseSchema.extend({
-  kind: z24.literal("entity"),
-  canonicalName: z24.string().min(1),
-  type: z24.string().min(1),
-  aliases: z24.array(z24.string().min(1)).default([])
+  kind: z26.literal("entity"),
+  canonicalName: z26.string().min(1),
+  type: z26.string().min(1),
+  aliases: z26.array(z26.string().min(1)).default([])
 });
 var RelationSchema = MemoryBaseSchema.extend({
-  kind: z24.literal("relation"),
-  from: z24.string().min(1),
-  to: z24.string().min(1),
-  predicate: z24.string().min(1),
-  annotation: z24.string().min(1).nullable().default(null)
+  kind: z26.literal("relation"),
+  from: z26.string().min(1),
+  to: z26.string().min(1),
+  predicate: z26.string().min(1),
+  annotation: z26.string().min(1).nullable().default(null)
 });
-var MemoryRecordSchema = z24.discriminatedUnion("kind", [
+var MemoryRecordSchema = z26.discriminatedUnion("kind", [
   FactSchema,
   PreferenceSchema,
   EntitySchema,
   RelationSchema
 ]);
-var RecallQuerySchema = z24.object({
+var RecallQuerySchema = z26.object({
   ownerKey: OwnerKeySchema,
-  kinds: z24.array(MemoryKindSchema).default(["fact", "preference", "entity"]),
-  asOf: z24.number().finite().nullable().default(null),
-  limit: z24.number().int().positive().default(8),
-  minSimilarity: z24.number().min(0).max(1).default(0.2),
-  includeShared: z24.boolean().default(true)
+  kinds: z26.array(MemoryKindSchema).default(["fact", "preference", "entity"]),
+  asOf: z26.number().finite().nullable().default(null),
+  limit: z26.number().int().positive().default(8),
+  minSimilarity: z26.number().min(0).max(1).default(0.2),
+  includeShared: z26.boolean().default(true)
 }).strict();
 
 // src/memory/rank.ts
@@ -17662,42 +18285,42 @@ function buildMemoryInjector(deps, policy) {
 
 // src/plugin/memoryTool.ts
 import { tool as tool4 } from "@opencode-ai/plugin";
-import { z as z26 } from "zod";
+import { z as z28 } from "zod";
 
 // src/memory/extract.ts
-import { z as z25 } from "zod";
+import { z as z27 } from "zod";
 var REDACTED = "[redacted]";
-var RawFactSchema = z25.object({
-  subject: z25.string().min(1),
-  predicate: z25.string().min(1),
-  object: z25.string().min(1),
-  category: z25.string().min(1).nullable().optional(),
-  confidence: z25.number().min(0).max(1).optional()
+var RawFactSchema = z27.object({
+  subject: z27.string().min(1),
+  predicate: z27.string().min(1),
+  object: z27.string().min(1),
+  category: z27.string().min(1).nullable().optional(),
+  confidence: z27.number().min(0).max(1).optional()
 });
-var RawPreferenceSchema = z25.object({
-  category: z25.string().min(1),
-  preference: z25.string().min(1),
-  context: z25.string().min(1).nullable().optional(),
-  confidence: z25.number().min(0).max(1).optional()
+var RawPreferenceSchema = z27.object({
+  category: z27.string().min(1),
+  preference: z27.string().min(1),
+  context: z27.string().min(1).nullable().optional(),
+  confidence: z27.number().min(0).max(1).optional()
 });
-var RawEntitySchema = z25.object({
-  canonicalName: z25.string().min(1),
-  type: z25.string().min(1),
-  aliases: z25.array(z25.string().min(1)).optional(),
-  confidence: z25.number().min(0).max(1).optional()
+var RawEntitySchema = z27.object({
+  canonicalName: z27.string().min(1),
+  type: z27.string().min(1),
+  aliases: z27.array(z27.string().min(1)).optional(),
+  confidence: z27.number().min(0).max(1).optional()
 });
-var RawRelationSchema = z25.object({
-  from: z25.string().min(1),
-  to: z25.string().min(1),
-  predicate: z25.string().min(1),
-  annotation: z25.string().min(1).nullable().optional(),
-  confidence: z25.number().min(0).max(1).optional()
+var RawRelationSchema = z27.object({
+  from: z27.string().min(1),
+  to: z27.string().min(1),
+  predicate: z27.string().min(1),
+  annotation: z27.string().min(1).nullable().optional(),
+  confidence: z27.number().min(0).max(1).optional()
 }).strict();
-var RawExtractionSchema = z25.object({
-  facts: z25.array(RawFactSchema).default([]),
-  preferences: z25.array(RawPreferenceSchema).default([]),
-  entities: z25.array(RawEntitySchema).default([]),
-  relations: z25.array(RawRelationSchema).default([])
+var RawExtractionSchema = z27.object({
+  facts: z27.array(RawFactSchema).default([]),
+  preferences: z27.array(RawPreferenceSchema).default([]),
+  entities: z27.array(RawEntitySchema).default([]),
+  relations: z27.array(RawRelationSchema).default([])
 });
 var DEFAULT_CONFIDENCE = 0.6;
 var SYSTEM_PROMPT = [
@@ -17951,13 +18574,13 @@ var memoryToolMessages = {
 
 // src/plugin/memoryTool.ts
 var SCRIBE_ROLE_ID = "scribe";
-var MemoryMessageSchema = z26.object({
-  role: z26.enum(["system", "user", "assistant"]).describe(memoryToolMessages.messageRoleDescription),
-  content: z26.string().min(1).describe(memoryToolMessages.messageContentDescription)
+var MemoryMessageSchema = z28.object({
+  role: z28.enum(["system", "user", "assistant"]).describe(memoryToolMessages.messageRoleDescription),
+  content: z28.string().min(1).describe(memoryToolMessages.messageContentDescription)
 }).strict();
-var MemoryWritePayloadSchema = z26.object({
-  messages: z26.array(MemoryMessageSchema).min(1).describe(memoryToolMessages.messagesDescription),
-  roleID: z26.string().min(1).default(SCRIBE_ROLE_ID).describe(memoryToolMessages.roleIDDescription)
+var MemoryWritePayloadSchema = z28.object({
+  messages: z28.array(MemoryMessageSchema).min(1).describe(memoryToolMessages.messagesDescription),
+  roleID: z28.string().min(1).default(SCRIBE_ROLE_ID).describe(memoryToolMessages.roleIDDescription)
 }).strict();
 function createMemoryTool(deps) {
   return tool4({
@@ -17969,7 +18592,7 @@ function createMemoryTool(deps) {
       })).describe(memoryToolMessages.messagesDescription),
       roleID: tool4.schema.string().optional().describe(memoryToolMessages.roleIDDescription)
     },
-    async execute(args) {
+    async execute(args, toolContext) {
       const parsed = MemoryWritePayloadSchema.safeParse(args);
       if (!parsed.success) {
         return memoryToolMessages.validationError(parsed.error.message);
@@ -17990,33 +18613,83 @@ function createMemoryTool(deps) {
       if (executionMode2 === "frontier") {
         return memoryToolMessages.frontierDomainRefusal;
       }
-      if (!await deps.localRuntimeReachable()) {
-        return memoryToolMessages.localRuntimeUnavailable;
-      }
-      const runtime = deps.config.local.runtimes.find((rt) => rt.enabled && typeof rt.baseURL === "string" && rt.baseURL.length > 0);
-      if (runtime?.baseURL === undefined) {
-        return memoryToolMessages.localRuntimeBaseURLMissing;
-      }
-      const modelID = semantic.extraction.model?.modelID ?? runtime.defaultModel.modelID;
-      const transcript = messages.map((m) => `${m.role}: ${m.content}`).join(`
-`);
-      const sourceHash = sha256Hex(transcript);
-      const now = deps.now();
-      const context = {
-        ownerKey: semantic.scope === "user" ? "user" : "project",
-        now,
-        sourceHash,
-        storeContent: semantic.storeContent,
-        idPrefix: `${sourceHash.slice(0, 12)}:${now}`
-      };
       let records;
       try {
+        const signal = toolContext.abort;
+        const throwIfAborted = () => {
+          if (signal?.aborted)
+            throw new ModelResidencyError("cancelled");
+        };
+        throwIfAborted();
+        const configuredModel = semantic.extraction.model;
+        let runtime;
+        if (configuredModel != null) {
+          const matches = deps.config.local.runtimes.filter((candidate) => candidate.defaultModel.providerID === configuredModel.providerID);
+          runtime = matches[0];
+          if (matches.length !== 1 || runtime === undefined || !runtime.enabled) {
+            return modelResidencyMessages.extractionRuntimeUnavailable;
+          }
+        } else {
+          runtime = deps.config.local.runtimes.find((candidate) => candidate.enabled && typeof candidate.baseURL === "string" && candidate.baseURL.length > 0);
+        }
+        if (runtime?.baseURL === undefined || runtime.baseURL.length === 0) {
+          return memoryToolMessages.localRuntimeBaseURLMissing;
+        }
+        const baseURL = runtime.baseURL;
+        const model = configuredModel ?? runtime.defaultModel;
+        const selectedRuntime = runtime;
+        const deadline = {
+          ...deps.residencyOptions,
+          ...signal === undefined ? {} : { signal }
+        };
+        const reachable = localRuntimeKind(runtime) === "lemonade" ? await withResidencyDeadline((signal2) => deps.localRuntimeReachable(selectedRuntime, signal2), deadline) : await deps.localRuntimeReachable(runtime);
+        throwIfAborted();
+        if (!reachable)
+          return memoryToolMessages.localRuntimeUnavailable;
+        const resolveTarget = deps.resolveExtractionTarget;
+        const target = resolveTarget ? await withResidencyDeadline(async () => resolveTarget(model), deadline) : {
+          baseURL,
+          modelID: model.modelID,
+          fetch: localRuntimeKind(runtime) === "lemonade" ? createLemonadeGuardedFetch({
+            baseURL,
+            fetch: deps.fetch,
+            modelIDs: new Set([model.modelID]),
+            ...deps.residencyOptions
+          }) : deps.fetch
+        };
+        throwIfAborted();
+        if (target === undefined || target.baseURL !== baseURL) {
+          throw new ModelResidencyError("destination");
+        }
+        const fetch = signal === undefined ? target.fetch : Object.assign(async (input, init) => {
+          throwIfAborted();
+          const response = await target.fetch(input, {
+            ...init,
+            signal
+          });
+          throwIfAborted();
+          return response;
+        }, {
+          preconnect: (...args2) => target.fetch.preconnect?.(...args2)
+        });
+        const transcript = messages.map((m) => `${m.role}: ${m.content}`).join(`
+`);
+        const sourceHash = sha256Hex(transcript);
+        const now = deps.now();
+        const context = {
+          ownerKey: semantic.scope === "user" ? "user" : "project",
+          now,
+          sourceHash,
+          storeContent: semantic.storeContent,
+          idPrefix: `${sourceHash.slice(0, 12)}:${now}`
+        };
         records = await extractMemory({
-          baseURL: runtime.baseURL,
-          modelID,
+          baseURL: target.baseURL,
+          modelID: target.modelID,
           messages,
           context
-        }, { fetch: deps.fetch, ...deps.warn ? { warn: deps.warn } : {} });
+        }, { fetch, ...deps.warn ? { warn: deps.warn } : {} });
+        throwIfAborted();
       } catch (error) {
         const reason = error instanceof Error ? error.message : String(error);
         return memoryToolMessages.extractionFailure(reason);
@@ -18082,10 +18755,10 @@ function createOrchestratedModelOwnership() {
 
 // src/plugin/orchestrateTool.ts
 import { tool as tool5 } from "@opencode-ai/plugin";
-import { z as z28 } from "zod";
+import { z as z30 } from "zod";
 
 // src/orchestrator/coordinator.ts
-import { z as z27 } from "zod";
+import { z as z29 } from "zod";
 
 // src/orchestrator/nodeIteration.ts
 var DEFAULT_MAX_RETRIES = 2;
@@ -18295,12 +18968,15 @@ async function applyReportDurabilityGate(results, probe) {
 }
 
 // src/orchestrator/runtimeSelection.ts
-function configuredRuntime(runtimeId, config) {
+function configuredRuntime2(runtimeId, config) {
   return config.local.runtimes.find((runtime) => runtime.id === runtimeId);
 }
 function runtimeIdOfModel(model, config) {
   return config.local.runtimes.find((runtime) => sameModel(runtime.defaultModel, model))?.id;
 }
+function enabledRuntimeForProvider(providerID, config) {
+  return config.local.runtimes.find((runtime) => runtime.enabled && runtime.defaultModel.providerID === providerID)?.id;
+}
 function roleLocalModel(role, runtimeId, fallback, runtime) {
   const pinned = role.localModels?.[runtimeId];
   if (pinned !== undefined) {
@@ -18315,7 +18991,7 @@ function runtimeClassModel(modelClass, runtime) {
   }
   return modelClass === "thinking" ? runtime.thinkingModel : runtime.coderModel;
 }
-function selectDispatchRuntime(role, decision2, reachable, config) {
+function selectDispatchRuntime(role, decision2, reachable, config, availableModels2) {
   if (decision2.routeKind !== "local") {
     return { runtimeId: undefined, decision: decision2 };
   }
@@ -18326,7 +19002,7 @@ function selectDispatchRuntime(role, decision2, reachable, config) {
         if (!reachable.has(runtimeId)) {
           continue;
         }
-        const runtime = configuredRuntime(runtimeId, config);
+        const runtime = configuredRuntime2(runtimeId, config);
         if (runtime?.defaultModel.providerID === decision2.selected.providerID) {
           return { runtimeId, decision: decision2 };
         }
@@ -18336,15 +19012,17 @@ function selectDispatchRuntime(role, decision2, reachable, config) {
     if (exactRuntimeId !== undefined) {
       return { runtimeId: exactRuntimeId, decision: decision2 };
     }
-    const providerRuntime = config.local.runtimes.find((runtime) => runtime.enabled && runtime.defaultModel.providerID === decision2.selected.providerID);
-    return { runtimeId: providerRuntime?.id, decision: decision2 };
+    return {
+      runtimeId: enabledRuntimeForProvider(decision2.selected.providerID, config),
+      decision: decision2
+    };
   }
   if (listed !== undefined && listed.length > 0 && reachable !== undefined) {
     for (const runtimeId of listed) {
       if (!reachable.has(runtimeId)) {
         continue;
       }
-      const runtime = configuredRuntime(runtimeId, config);
+      const runtime = configuredRuntime2(runtimeId, config);
       if (runtime === undefined) {
         continue;
       }
@@ -18357,7 +19035,7 @@ function selectDispatchRuntime(role, decision2, reachable, config) {
   }
   const resolvedRuntimeId = runtimeIdOfModel(decision2.selected, config);
   if (resolvedRuntimeId !== undefined) {
-    const pinned = roleLocalModel(role, resolvedRuntimeId, decision2.selected, configuredRuntime(resolvedRuntimeId, config));
+    const pinned = roleLocalModel(role, resolvedRuntimeId, decision2.selected, configuredRuntime2(resolvedRuntimeId, config));
     if (pinned !== decision2.selected) {
       return {
         runtimeId: resolvedRuntimeId,
@@ -18365,8 +19043,9 @@ function selectDispatchRuntime(role, decision2, reachable, config) {
       };
     }
   }
+  const knownAlias = localModelAliases(decision2.selected.providerID, availableModels2).has(decision2.selected.modelID);
   return {
-    runtimeId: resolvedRuntimeId,
+    runtimeId: resolvedRuntimeId ?? (knownAlias ? enabledRuntimeForProvider(decision2.selected.providerID, config) : undefined),
     decision: decision2
   };
 }
@@ -18553,7 +19232,7 @@ function buildRecord(input, decision2, subsession, deps, decisionID, batchID) {
   }
   return record;
 }
-var TelemetryFailureClassSchema = z27.enum([
+var TelemetryFailureClassSchema = z29.enum([
   "create-rejected",
   "create-no-id",
   "prompt-rejected",
@@ -18812,7 +19491,7 @@ async function runRoleTaskWithCorrelation(input, deps, correlation, batch, route
   if (routed.routeKind === "blocked") {
     throw new Error(coordinatorRoutingBlocked(input.roleID, routed.blockReason));
   }
-  const selection = selectDispatchRuntime(role, routed, batch.set, input.config);
+  const selection = selectDispatchRuntime(role, routed, batch.set, input.config, input.availableModels);
   const decision2 = selection.decision;
   const composed = composeSubsessionPrompt({
     prompt: input.prompt,
@@ -18894,8 +19573,9 @@ async function runRoleTaskWithCorrelation(input, deps, correlation, batch, route
   if (runtimeId !== undefined && deps.runtimeLimiter !== undefined) {
     const limiter = deps.runtimeLimiter;
     const priority = priorityForRole(role);
-    const dispatchRuntime = configuredRuntime(runtimeId, input.config) ?? { id: runtimeId };
-    const poolKey = slotPoolKey(withReportedModelSlots(dispatchRuntime, deps.reportedModelSlots?.(runtimeId)), decision2.selected.modelID);
+    const dispatchRuntime = configuredRuntime2(runtimeId, input.config) ?? { id: runtimeId };
+    const aliases = localModelAliases(decision2.selected.providerID, input.availableModels);
+    const poolKey = slotPoolKey(withReportedModelSlots(dispatchRuntime, deps.reportedModelSlots?.(runtimeId), aliases), aliases.get(decision2.selected.modelID) ?? decision2.selected.modelID);
     release = limiter.tryAcquire(poolKey, priority);
     let waitedMs = 0;
     if (release === undefined) {
@@ -19369,7 +20049,7 @@ async function runRoleTasks(inputs, deps, options = {}) {
 var _pluginWarnedRoles = new Set;
 var EMPTY_ROLE_ID_SET = new Set;
 var SAFE_ROLE_ID = /^[A-Za-z0-9][A-Za-z0-9_-]*$/;
-var RoleIDSchema = z28.string().min(1).superRefine((roleID, ctx) => {
+var RoleIDSchema = z30.string().min(1).superRefine((roleID, ctx) => {
   if (!SAFE_ROLE_ID.test(roleID)) {
     ctx.addIssue({
       code: "custom",
@@ -19377,16 +20057,16 @@ var RoleIDSchema = z28.string().min(1).superRefine((roleID, ctx) => {
     });
   }
 });
-var RoleAssignmentSchema = z28.object({
+var RoleAssignmentSchema = z30.object({
   roleID: RoleIDSchema.describe("Role identifier from the roster"),
-  prompt: z28.string().min(1).describe("Work prompt for this role"),
-  title: z28.string().min(1).optional().describe("Human-readable title"),
-  dependsOn: z28.array(RoleIDSchema).optional().describe("Role IDs this assignment depends on (DAG edges)")
+  prompt: z30.string().min(1).describe("Work prompt for this role"),
+  title: z30.string().min(1).optional().describe("Human-readable title"),
+  dependsOn: z30.array(RoleIDSchema).optional().describe("Role IDs this assignment depends on (DAG edges)")
 }).strict();
-var OrchestratePayloadSchema = z28.object({
-  assignments: z28.array(RoleAssignmentSchema).min(1).describe("Role assignments to distribute"),
-  parentSessionID: z28.string().min(1).optional().describe(PARENT_SESSION_DESCRIPTION),
-  directory: z28.string().min(1).optional().describe("Working directory override")
+var OrchestratePayloadSchema = z30.object({
+  assignments: z30.array(RoleAssignmentSchema).min(1).describe("Role assignments to distribute"),
+  parentSessionID: z30.string().min(1).optional().describe(PARENT_SESSION_DESCRIPTION),
+  directory: z30.string().min(1).optional().describe("Working directory override")
 }).strict();
 function validateAssignmentDependencies(assignments) {
   const ids = new Set;
@@ -20122,7 +20802,7 @@ ${advisory}`;
 
 // src/plugin/registerCastTool.ts
 import { tool as tool6 } from "@opencode-ai/plugin";
-import { z as z29 } from "zod";
+import { z as z31 } from "zod";
 
 // src/messages/rosterSummary.ts
 var ROSTER_SUMMARY_HEADING = "Registered team model policies";
@@ -20351,13 +21031,13 @@ async function persistPreparedTeam(storage, files) {
 }
 
 // src/plugin/registerCastTool.ts
-var CastEntrySchema = z29.object({
-  roleID: z29.string().min(1).describe("Stable role identifier, e.g. scribe or guardian"),
-  agentName: z29.string().min(1).describe("Themed character name assigned to the role")
+var CastEntrySchema = z31.object({
+  roleID: z31.string().min(1).describe("Stable role identifier, e.g. scribe or guardian"),
+  agentName: z31.string().min(1).describe("Themed character name assigned to the role")
 }).strict();
-var RegisterCastPayloadSchema = z29.object({
-  universe: z29.string().min(1).describe("Casting universe for this roster"),
-  entries: z29.array(CastEntrySchema).min(1).describe("Role-to-name mappings")
+var RegisterCastPayloadSchema = z31.object({
+  universe: z31.string().min(1).describe("Casting universe for this roster"),
+  entries: z31.array(CastEntrySchema).min(1).describe("Role-to-name mappings")
 }).strict();
 function offendingFields(error) {
   const fields = error.issues.flatMap((issue) => {
@@ -20976,7 +21656,7 @@ async function buildMemoryRuntimeFromConfig(config, deps, options = {}) {
   if (runtime?.baseURL === undefined) {
     return;
   }
-  const modelID = semantic.embeddings.model?.modelID ?? runtime.defaultModel.modelID;
+  const modelID2 = semantic.embeddings.model?.modelID ?? runtime.defaultModel.modelID;
   const openDatabase = deps.openDatabase ?? createBunSqliteDatabase;
   const makeEmbedder = deps.createEmbedder ?? createLocalEmbedder;
   const fetchImpl = deps.fetch ?? globalThis.fetch;
@@ -20989,8 +21669,8 @@ async function buildMemoryRuntimeFromConfig(config, deps, options = {}) {
     if (rebuildResult.rejectedLines > 0) {
       warn(`[openteam] memory log rejected ${rebuildResult.rejectedLines} line(s); semantic memory may be incomplete.`);
     }
-    const embedder = makeEmbedder({ baseURL: runtime.baseURL, modelID }, { fetch: fetchImpl });
-    await ensureMemoryEmbeddings({ index, embedder, model: modelID, warn });
+    const embedder = makeEmbedder({ baseURL: runtime.baseURL, modelID: modelID2 }, { fetch: fetchImpl });
+    await ensureMemoryEmbeddings({ index, embedder, model: modelID2, warn });
     return {
       index,
       embedder,
@@ -21018,18 +21698,18 @@ import { join as join15, resolve as resolve11 } from "node:path";
 import { ZodError } from "zod";
 
 // src/storage/lifecycle/codec.ts
-import { z as z30 } from "zod";
+import { z as z32 } from "zod";
 var LIFECYCLE_CODEC_VERSION = 1;
 var LIFECYCLE_GENESIS_DIGEST = sha256Hex("openteam/lifecycle-journal/genesis/v1");
 var NUL5 = "\x00";
 var NEWLINE2 = `
 `;
-var frameSchema = z30.object({
-  v: z30.literal(LIFECYCLE_CODEC_VERSION),
-  seq: z30.number().int().nonnegative(),
-  prev: z30.string().min(1),
-  sum: z30.string().min(1),
-  event: z30.unknown()
+var frameSchema = z32.object({
+  v: z32.literal(LIFECYCLE_CODEC_VERSION),
+  seq: z32.number().int().nonnegative(),
+  prev: z32.string().min(1),
+  sum: z32.string().min(1),
+  event: z32.unknown()
 }).strict();
 function canonical2(value) {
   if (Array.isArray(value)) {
@@ -21369,8 +22049,8 @@ function readRun(runDir, runID) {
   if (metadataText === undefined || eventsText === undefined) {
     throw new LifecycleFsError("corrupt");
   }
-  const metadata = parseJson(metadataText, parseLifecycleRunMetadata);
-  if (metadata.runID !== runID) {
+  const metadata2 = parseJson(metadataText, parseLifecycleRunMetadata);
+  if (metadata2.runID !== runID) {
     throw new LifecycleFsError("corrupt");
   }
   let decoded;
@@ -21385,10 +22065,10 @@ function readRun(runDir, runID) {
     }
   }
   const first = decoded.events[0];
-  if (first === undefined || first.type !== "run.started" || first.source !== metadata.source || first.executionAuthority !== metadata.executionAuthority || first.root.operationID !== metadata.root.operationID || first.root.taskID !== metadata.root.taskID) {
+  if (first === undefined || first.type !== "run.started" || first.source !== metadata2.source || first.executionAuthority !== metadata2.executionAuthority || first.root.operationID !== metadata2.root.operationID || first.root.taskID !== metadata2.root.taskID) {
     throw new LifecycleFsError("corrupt");
   }
-  return { metadata, decoded };
+  return { metadata: metadata2, decoded };
 }
 function terminalOutcome(events) {
   const last = events.at(-1);
@@ -21466,7 +22146,7 @@ var createFsLifecycleJournal = (options) => {
         mkdirSync3(stagingPath);
         const writerToken = issueWriterToken();
         const eventAt = now();
-        const metadata = parseLifecycleRunMetadata({
+        const metadata2 = parseLifecycleRunMetadata({
           ...parsedInput,
           version: 1,
           createdAt: eventAt
@@ -21482,7 +22162,7 @@ var createFsLifecycleJournal = (options) => {
           executionAuthority: parsedInput.executionAuthority,
           root: parsedInput.root
         });
-        writeDurable2(join15(stagingPath, METADATA_FILE), `${JSON.stringify(metadata)}
+        writeDurable2(join15(stagingPath, METADATA_FILE), `${JSON.stringify(metadata2)}
 `);
         writeDurable2(join15(stagingPath, EVENTS_FILE), encodeLifecycleJournal([event]));
         writeDurable2(join15(stagingPath, OWNER_FILE2), `${JSON.stringify(lease)}
@@ -21498,7 +22178,7 @@ var createFsLifecycleJournal = (options) => {
         stagingPath = undefined;
         return ok({
           handle: { runID, writerToken },
-          metadata,
+          metadata: metadata2,
           event,
           lease,
           head: 1
@@ -22359,6 +23039,9 @@ async function listConfiguredOpencodeInventory(ctx) {
         providerID: model.providerID,
         modelID: model.id
       };
+      if (typeof model.api?.id === "string" && model.api.id.length > 0 && model.api.id === model.api.id.trim() && model.api.id !== model.id) {
+        configuredModel.apiModelID = model.api.id;
+      }
       if (typeof model.capabilities?.toolcall === "boolean") {
         configuredModel.supportsTools = model.capabilities.toolcall;
       }
@@ -22428,12 +23111,20 @@ var server = async (ctx, rawOptions) => {
   const injectMemory = await buildMemoryInjectorFromConfig(config, storage, diagnostics.warn("memory-runtime-warning", { toast: false }));
   const sessionTracker = createSessionTracker();
   const orchestratedModelOwnership = createOrchestratedModelOwnership();
+  const modelResidency = createModelResidencyGuard(config, {
+    fetch: globalThis.fetch,
+    ...ctx.client.config?.providers === undefined ? {} : {
+      resolveApiModelID: cache.resolveApiModelID,
+      modelInventoryReady: ensureAvailability
+    }
+  });
   const resolveAgentRole = async (agentName) => {
     const entry = (await readRoutingRosterEntries(storage)).find((candidate) => candidate.agentName === agentName);
     return entry?.roleID;
   };
   const hooks = createHooks(config, cache.get, injectMemory === undefined ? {
     sink,
+    modelResidency,
     beforeRoute: ensureAvailability,
     capabilityProfiles,
     orchestratedModelOwnership,
@@ -22441,6 +23132,7 @@ var server = async (ctx, rawOptions) => {
     onRoute: (sid, model) => sessionTracker.trackRoutedModel(sid, model)
   } : {
     sink,
+    modelResidency,
     beforeRoute: ensureAvailability,
     capabilityProfiles,
     injectMemory,
@@ -22561,7 +23253,7 @@ var server = async (ctx, rawOptions) => {
     if (runtime === undefined) {
       return;
     }
-    return withReportedModelSlots(runtime, reportedSlotsByRuntime.get(runtimeId));
+    return withReportedModelSlots(runtime, reportedSlotsByRuntime.get(runtimeId), localModelAliases(runtime.defaultModel.providerID, cache.get()));
   };
   const runtimeLimiter = createRuntimeConcurrencyLimiter({
     capacityFor: (key2) => {
@@ -22606,7 +23298,27 @@ var server = async (ctx, rawOptions) => {
     config,
     storage,
     now,
-    localRuntimeReachable,
+    localRuntimeReachable: async (runtime, signal) => {
+      if (localRuntimeKind(runtime) === "lemonade") {
+        if (ctx.client.config?.providers !== undefined)
+          await ensureAvailability();
+        signal?.throwIfAborted();
+        const target = modelResidency.localTarget(resolveMemorySemantic(config).extraction.model ?? runtime.defaultModel);
+        const response = await target.fetch(`${target.baseURL}/health`, {
+          method: "GET",
+          ...signal === undefined ? {} : { signal }
+        });
+        return response.ok;
+      }
+      const snapshots = await registry.probe([runtime]);
+      rememberReportedSlots(snapshots);
+      return anyRuntimeReachable(snapshots);
+    },
+    resolveExtractionTarget: async (model) => {
+      if (ctx.client.config?.providers !== undefined)
+        await ensureAvailability();
+      return modelResidency.localTarget(model);
+    },
     fetch: globalThis.fetch,
     warn: diagnostics.warn("memory-extraction-warning", { toast: false })
   });