@omnicross/core 0.4.3 → 0.4.5

package/dist/{chunk-J5XMB5KY.cjs → chunk-NCCEWVWY.cjs}

@@ -11,7 +11,7 @@ var _chunkVGBJPHHDcjs = require('./chunk-VGBJPHHD.cjs');
 
 
 
-var _chunkCGEZQC2Gcjs = require('./chunk-CGEZQC2G.cjs');
+var _chunkF3TT5XPVcjs = require('./chunk-F3TT5XPV.cjs');
 
 
 var _chunkBTSADEX4cjs = require('./chunk-BTSADEX4.cjs');
@@ -43,7 +43,7 @@ var _chunkHQP3K7PUcjs = require('./chunk-HQP3K7PU.cjs');
 
 
 
-var _chunkAFH5CEMFcjs = require('./chunk-AFH5CEMF.cjs');
+var _chunkSQU2FGXIcjs = require('./chunk-SQU2FGXI.cjs');
 
 
 var _chunkRPII3E6Zcjs = require('./chunk-RPII3E6Z.cjs');
@@ -53,7 +53,7 @@ var _chunkRPII3E6Zcjs = require('./chunk-RPII3E6Z.cjs');
 var _chunk6RPZADX3cjs = require('./chunk-6RPZADX3.cjs');
 
 
-var _chunkWYECWQ3Jcjs = require('./chunk-WYECWQ3J.cjs');
+var _chunk2DMOOZ4Fcjs = require('./chunk-2DMOOZ4F.cjs');
 
 
 
@@ -147,19 +147,20 @@ var _chunkA2YMUCBTcjs = require('./chunk-A2YMUCBT.cjs');
 var _chunkGDIXXKF2cjs = require('./chunk-GDIXXKF2.cjs');
 
 
-var _chunkNDIBVTBZcjs = require('./chunk-NDIBVTBZ.cjs');
+var _chunkXYFCNDJKcjs = require('./chunk-XYFCNDJK.cjs');
+
 
 
 var _chunkIUL4VWNUcjs = require('./chunk-IUL4VWNU.cjs');
 
 
-var _chunkVFFCV4J6cjs = require('./chunk-VFFCV4J6.cjs');
+var _chunkCXRJMNJJcjs = require('./chunk-CXRJMNJJ.cjs');
 
 
 var _chunkVYOBVPNBcjs = require('./chunk-VYOBVPNB.cjs');
 
 
-var _chunkNKVZ6Z3Ycjs = require('./chunk-NKVZ6Z3Y.cjs');
+var _chunk4HMAS74Xcjs = require('./chunk-4HMAS74X.cjs');
 
 
 
@@ -953,6 +954,21 @@ async function resolvePoolBoundKey(deps, providerId, provider, sessionId, prefer
   }
   return resolveApiKey(_chunkA2YMUCBTcjs.resolveProviderEndpoint.call(void 0, provider).apiKey);
 }
+function buildByoRouteActivityMeta(deps, providerId, sessionId) {
+  return {
+    providerId,
+    resolveKeyId: () => {
+      if (!sessionId) return void 0;
+      const pool = deps.apiKeyPool;
+      if (!pool || typeof pool.getKeyIdForSession !== "function") return void 0;
+      try {
+        return _nullishCoalesce(pool.getKeyIdForSession(providerId, sessionId), () => ( void 0));
+      } catch (e11) {
+        return void 0;
+      }
+    }
+  };
+}
 
 // src/provider-proxy/providerProxyRouteMap.ts
 var _crypto = require('crypto');
@@ -996,7 +1012,7 @@ var ProviderProxyRouteMap = (_class = class {
     if (!entry) return void 0;
     try {
       _optionalChain([entry, 'access', _43 => _43.onActivity, 'optionalCall', _44 => _44(Date.now())]);
-    } catch (e11) {
+    } catch (e12) {
     }
     this.armIdleTimer(token, entry);
     return entry.context;
@@ -1056,7 +1072,7 @@ var ProviderProxyRouteMap = (_class = class {
     this.clearIdleTimer(entry);
     try {
       _optionalChain([entry, 'access', _48 => _48.onEvicted, 'optionalCall', _49 => _49(reason)]);
-    } catch (e12) {
+    } catch (e13) {
     }
   }
 }, _class);
@@ -1525,13 +1541,13 @@ function recordAnthropicNonStreamUsage(recorder, bodyText, attribution) {
       parsed.usage,
       attribution
     );
-  } catch (e13) {
+  } catch (e14) {
   }
 }
 function recordAnthropicStreamUsage(recorder, rawUsage, attribution) {
   try {
     emitAnthropicUsageRecord(recorder, rawUsage, attribution);
-  } catch (e14) {
+  } catch (e15) {
   }
 }
 
@@ -1595,7 +1611,7 @@ async function buildSubscriptionIterationPlan(profile, route, deps, resolvedMode
     });
     const bearer = (_nullishCoalesce(_nullishCoalesce(headers.Authorization, () => ( headers.authorization)), () => ( ""))).replace(/^Bearer\s+/i, "").trim();
     if (bearer) {
-      transformerProvider.geminiProject = await _chunkNDIBVTBZcjs.getAntigravityProjectResolver.call(void 0, ).resolveProject(bearer);
+      transformerProvider.geminiProject = await _chunkXYFCNDJKcjs.getAntigravityProjectResolver.call(void 0, ).resolveProject(bearer);
     }
   }
   return {
@@ -1666,6 +1682,31 @@ function collectText(value) {
 function proxyProviderId(plan) {
   return plan.isSubscription ? plan.transformerProvider.name : "byo";
 }
+function buildAnthropicRouteActivity(plan, proxyAccountId, model, onRecorded) {
+  if (!plan.isSubscription) {
+    const routeSessionId = plan.byoSessionId || void 0;
+    return {
+      providerId: _nullishCoalesce(_optionalChain([plan, 'access', _107 => _107.byoActivity, 'optionalAccess', _108 => _108.providerId]), () => ( plan.transformerProvider.name)),
+      credentialKind: "provider-key",
+      keyId: _optionalChain([plan, 'access', _109 => _109.byoActivity, 'optionalAccess', _110 => _110.resolveKeyId, 'call', _111 => _111()]),
+      endpoint: "messages",
+      sessionKey: routeSessionId,
+      sessionSource: routeSessionId ? "route-session-id" : "none",
+      model,
+      onRecorded
+    };
+  }
+  return {
+    providerId: proxyProviderId(plan),
+    credentialKind: "subscription-account",
+    accountId: proxyAccountId,
+    endpoint: "messages",
+    sessionKey: plan.sessionKey,
+    sessionSource: plan.sessionKey ? "content-fingerprint" : "none",
+    model,
+    onRecorded
+  };
+}
 async function runPipeline(anthropicBody, plan, reportSelection, signal, callerOpenCodeSession) {
   const executor = getSharedExecutor();
   const endpointTransformer = getAnthropicEndpointTransformer();
@@ -1682,12 +1723,12 @@ async function runPipeline(anthropicBody, plan, reportSelection, signal, callerO
     boundAccountFallbackPolicy: plan.boundAccountFallbackPolicy,
     reportSelection: (accountId, isActive) => {
       proxyAccountId = accountId;
-      _optionalChain([reportSelection, 'optionalCall', _107 => _107(accountId, isActive)]);
+      _optionalChain([reportSelection, 'optionalCall', _112 => _112(accountId, isActive)]);
     }
   });
   if (plan.transformerProvider.name === "antigravity") {
     const bearer = (_nullishCoalesce(_nullishCoalesce(authHeaders.Authorization, () => ( authHeaders.authorization)), () => ( ""))).replace(/^Bearer\s+/i, "").trim();
-    if (bearer) transformerProvider.geminiProject = await _chunkNDIBVTBZcjs.getAntigravityProjectResolver.call(void 0, ).resolveProject(bearer);
+    if (bearer) transformerProvider.geminiProject = await _chunkXYFCNDJKcjs.getAntigravityProjectResolver.call(void 0, ).resolveProject(bearer);
   }
   let rawStatus = null;
   let activityRecordId;
@@ -1709,21 +1750,20 @@ async function runPipeline(anthropicBody, plan, reportSelection, signal, callerO
     },
     fetchFn: (url, headers, body) => {
       console.info(`[ProviderProxy:anthropic] -> ${url} model=${resolvedModel} stream=${isStream}`);
-      return _chunkVFFCV4J6cjs.fetchUpstream.call(void 0, 
+      return _chunkCXRJMNJJcjs.fetchUpstream.call(void 0, 
         url,
         { method: "POST", headers, body: JSON.stringify(body), signal },
         {
           providerId: proxyProviderId(plan),
           accountId: proxyAccountId,
-          routeActivity: plan.isSubscription ? {
-            endpoint: "messages",
-            sessionKey: plan.sessionKey,
-            sessionSource: plan.sessionKey ? "content-fingerprint" : "none",
-            model: resolvedModel,
-            onRecorded: (record5) => {
+          routeActivity: buildAnthropicRouteActivity(
+            plan,
+            proxyAccountId,
+            resolvedModel,
+            (record5) => {
               activityRecordId = record5.id;
             }
-          } : void 0
+          )
         }
       ).then((r) => {
         rawStatus = r.status;
@@ -1749,7 +1789,7 @@ async function runSubscriptionSameFormatFetch(rawBody, plan, reportSelection, op
     reportSelection: (accountId, isActive, remapped) => {
       proxyAccountId = accountId;
       remappedModel = remapped;
-      _optionalChain([reportSelection, 'optionalCall', _108 => _108(accountId, isActive, remapped)]);
+      _optionalChain([reportSelection, 'optionalCall', _113 => _113(accountId, isActive, remapped)]);
     }
   });
   const isClaudeSubscription = plan.isSubscription && plan.transformerProvider.name === "claude";
@@ -1780,21 +1820,20 @@ async function runSubscriptionSameFormatFetch(rawBody, plan, reportSelection, op
     `[ProviderProxy:anthropic] (subscription same-format) -> ${_nullishCoalesce(urlOverride, () => ( plan.upstreamUrl))} model=${outboundModel} stream=${plan.isStream}`
   );
   let activityRecordId;
-  const response = await _chunkVFFCV4J6cjs.fetchUpstream.call(void 0, 
+  const response = await _chunkCXRJMNJJcjs.fetchUpstream.call(void 0, 
     _nullishCoalesce(urlOverride, () => ( plan.upstreamUrl)),
     { method: "POST", headers, body: outboundBody, signal: options.signal },
     {
       providerId: proxyProviderId(plan),
       accountId: proxyAccountId,
-      routeActivity: plan.isSubscription ? {
-        endpoint: "messages",
-        sessionKey: plan.sessionKey,
-        sessionSource: plan.sessionKey ? "content-fingerprint" : "none",
-        model: outboundModel,
-        onRecorded: (record5) => {
+      routeActivity: buildAnthropicRouteActivity(
+        plan,
+        proxyAccountId,
+        outboundModel,
+        (record5) => {
           activityRecordId = record5.id;
         }
-      } : void 0
+      )
     }
   );
   return {
@@ -1814,7 +1853,7 @@ function rewriteBodyModel(rawBody, model) {
     if (!parsed || typeof parsed !== "object" || Array.isArray(parsed)) return rawBody;
     parsed.model = model;
     return JSON.stringify(parsed);
-  } catch (e15) {
+  } catch (e16) {
     return rawBody;
   }
 }
@@ -1833,7 +1872,7 @@ async function runSubscriptionAttemptWith401Retry(anthropicBody, relayBody, plan
   const first = await runOnce();
   let result = first;
   if (first.rawStatus === 401) {
-    const refreshed = await _optionalChain([plan, 'access', _109 => _109.auth, 'access', _110 => _110.onUnauthorized, 'optionalCall', _111 => _111(plan.sessionKey)]);
+    const refreshed = await _optionalChain([plan, 'access', _114 => _114.auth, 'access', _115 => _115.onUnauthorized, 'optionalCall', _116 => _116(plan.sessionKey)]);
     if (refreshed) {
       console.info("[ProviderProxy:anthropic] 401 \u2192 token refreshed; retrying once");
       await cancelDiscardedResponse(first.response);
@@ -1849,7 +1888,7 @@ async function readBoundedBody(response, max = 2048) {
   try {
     const text = await response.clone().text();
     return text.slice(0, max);
-  } catch (e16) {
+  } catch (e17) {
     return void 0;
   }
 }
@@ -1865,8 +1904,8 @@ async function markSubscriptionHealth(plan, selectedAccountId, result) {
     if (errorBody) {
       try {
         const parsed = JSON.parse(errorBody);
-        if (typeof _optionalChain([parsed, 'access', _112 => _112.error, 'optionalAccess', _113 => _113.type]) === "string") upstreamErrorType = parsed.error.type;
-      } catch (e17) {
+        if (typeof _optionalChain([parsed, 'access', _117 => _117.error, 'optionalAccess', _118 => _118.type]) === "string") upstreamErrorType = parsed.error.type;
+      } catch (e18) {
       }
     }
   }
@@ -1889,7 +1928,7 @@ function breakerOutcome(rawStatus) {
 function recordBreakerOutcome(profile, modelId, rawStatus) {
   const outcome = breakerOutcome(rawStatus);
   if (outcome === "neutral") return;
-  _optionalChain([profile, 'optionalAccess', _114 => _114.recordModelOutcome, 'optionalCall', _115 => _115(modelId, outcome === "success")]);
+  _optionalChain([profile, 'optionalAccess', _119 => _119.recordModelOutcome, 'optionalCall', _120 => _120(modelId, outcome === "success")]);
 }
 async function runSubscriptionAttemptOutcome(anthropicBody, relayBody, plan, options = {}) {
   try {
@@ -1908,20 +1947,20 @@ function settleOutcome(outcome) {
 async function runPipelineWithSubscriptionRetry(anthropicBody, rawBody, initialPlan, route, deps, options = {}, prepareTranslateBody) {
   const profile = route.subscriptionProfile;
   const scenario = initialPlan.scenario;
-  const clientGone = () => _optionalChain([options, 'access', _116 => _116.signal, 'optionalAccess', _117 => _117.aborted]) === true;
+  const clientGone = () => _optionalChain([options, 'access', _121 => _121.signal, 'optionalAccess', _122 => _122.aborted]) === true;
   const prepareTranslateAttempt = async (body) => {
     if (!prepareTranslateBody) return body;
     const clone = JSON.parse(JSON.stringify(body));
     await prepareTranslateBody(clone);
     return clone;
   };
-  if (!_optionalChain([profile, 'optionalAccess', _118 => _118.nextFallback]) || scenario === void 0) {
+  if (!_optionalChain([profile, 'optionalAccess', _123 => _123.nextFallback]) || scenario === void 0) {
     const loneBody = initialPlan.sameFormat ? anthropicBody : await prepareTranslateAttempt(anthropicBody);
     let loneOutcome = await runSubscriptionAttemptOutcome(loneBody, rawBody, initialPlan, options);
     if (!clientGone()) recordBreakerOutcome(profile, initialPlan.resolvedModel, outcomeStatus(loneOutcome));
     if (initialPlan.transformerProvider.name === "antigravity" && !clientGone() && outcomeStatus(loneOutcome) !== null && !is2xxStatus(outcomeStatus(loneOutcome))) {
       const bodyText = loneOutcome.kind === "result" ? await readBoundedBody(loneOutcome.result.response) : void 0;
-      const failoverUrl = _chunkCGEZQC2Gcjs.maybeAntigravityFailoverUrl.call(void 0, 
+      const failoverUrl = _chunkF3TT5XPVcjs.maybeAntigravityFailoverUrl.call(void 0, 
         initialPlan.upstreamUrl,
         outcomeStatus(loneOutcome),
         bodyText
@@ -2011,7 +2050,7 @@ function withUpstreamUrl(plan, url) {
           const original = new URL(resolved);
           const target = new URL(url);
           return `${target.origin}${original.pathname}${original.search}`;
-        } catch (e18) {
+        } catch (e19) {
           return url;
         }
       }
@@ -2031,7 +2070,7 @@ var MAX_CMAP_ENTRIES = 65536;
 function extractPdfText(base64, budgetMs = DEFAULT_PDF_TEXT_BUDGET_MS) {
   try {
     return extract(Buffer.from(base64, "base64"), budgetMs);
-  } catch (e19) {
+  } catch (e20) {
     return { reason: "no-text-layer" };
   }
 }
@@ -2307,8 +2346,8 @@ async function prepareAnthropicTranslateBody(body, pdfBudgetMs) {
 }
 async function prepareDocumentBlock(block, pdfBudgetMs) {
   const source = block["source"];
-  const mediaType = _optionalChain([source, 'optionalAccess', _119 => _119["media_type"]]);
-  const data = _optionalChain([source, 'optionalAccess', _120 => _120["data"]]);
+  const mediaType = _optionalChain([source, 'optionalAccess', _124 => _124["media_type"]]);
+  const data = _optionalChain([source, 'optionalAccess', _125 => _125["data"]]);
   if (!source || source["type"] !== "base64" || mediaType !== "application/pdf" || typeof data !== "string") {
     throw new DocumentNotSupportedError(
       "no-text-layer",
@@ -2355,10 +2394,10 @@ function emitResponsesUsageRecord(recorder, rawUsage, attribution) {
     providerId: attribution.providerId,
     model: attribution.model,
     apiKeyId: attribution.apiKeyId,
-    runId: _nullishCoalesce(_optionalChain([attribution, 'access', _121 => _121.routeLease, 'optionalAccess', _122 => _122.runId]), () => ( null)),
-    routeLeaseId: _nullishCoalesce(_optionalChain([attribution, 'access', _123 => _123.routeLease, 'optionalAccess', _124 => _124.leaseId]), () => ( null)),
-    routeLeaseConsumer: _nullishCoalesce(_optionalChain([attribution, 'access', _125 => _125.routeLease, 'optionalAccess', _126 => _126.consumer]), () => ( null)),
-    routeLeaseStageId: _nullishCoalesce(_optionalChain([attribution, 'access', _127 => _127.routeLease, 'optionalAccess', _128 => _128.stageId]), () => ( null)),
+    runId: _nullishCoalesce(_optionalChain([attribution, 'access', _126 => _126.routeLease, 'optionalAccess', _127 => _127.runId]), () => ( null)),
+    routeLeaseId: _nullishCoalesce(_optionalChain([attribution, 'access', _128 => _128.routeLease, 'optionalAccess', _129 => _129.leaseId]), () => ( null)),
+    routeLeaseConsumer: _nullishCoalesce(_optionalChain([attribution, 'access', _130 => _130.routeLease, 'optionalAccess', _131 => _131.consumer]), () => ( null)),
+    routeLeaseStageId: _nullishCoalesce(_optionalChain([attribution, 'access', _132 => _132.routeLease, 'optionalAccess', _133 => _133.stageId]), () => ( null)),
     cacheKeySource: attribution.cacheKeySource,
     cacheKeyInjected: attribution.cacheKeyInjected,
     auditResponse: attribution.auditResponse,
@@ -2375,13 +2414,13 @@ function recordResponsesNonStreamUsage(recorder, bodyText, attribution) {
       parsed.usage,
       attribution
     );
-  } catch (e20) {
+  } catch (e21) {
   }
 }
 function recordResponsesStreamUsage(recorder, rawUsage, attribution) {
   try {
     emitResponsesUsageRecord(recorder, rawUsage, attribution);
-  } catch (e21) {
+  } catch (e22) {
   }
 }
 
@@ -2407,21 +2446,21 @@ function parseCodexUsageLimitErrorPayload(bodyText) {
   if (!raw.startsWith("{")) return null;
   try {
     const parsed = JSON.parse(raw);
-    const error = _optionalChain([parsed, 'optionalAccess', _129 => _129.error]);
-    const code = _optionalChain([error, 'optionalAccess', _130 => _130.code]);
+    const error = _optionalChain([parsed, 'optionalAccess', _134 => _134.error]);
+    const code = _optionalChain([error, 'optionalAccess', _135 => _135.code]);
     if (typeof code !== "string" || !CODEX_USAGE_LIMIT_ERROR_CODES.has(code)) return null;
-    const resetsAt = _optionalChain([error, 'optionalAccess', _131 => _131.resets_at]);
+    const resetsAt = _optionalChain([error, 'optionalAccess', _136 => _136.resets_at]);
     let resetsAtMs;
     if (typeof resetsAt === "number" && Number.isFinite(resetsAt) && resetsAt > 0) {
       resetsAtMs = resetsAt > 1e11 ? resetsAt : resetsAt * 1e3;
     }
-    const planType = _optionalChain([error, 'optionalAccess', _132 => _132.plan_type]);
+    const planType = _optionalChain([error, 'optionalAccess', _137 => _137.plan_type]);
     return {
       code,
       ...resetsAtMs !== void 0 ? { resetsAtMs } : {},
       ...typeof planType === "string" && planType ? { planType } : {}
     };
-  } catch (e22) {
+  } catch (e23) {
     return null;
   }
 }
@@ -2431,11 +2470,11 @@ function deadlineFromAllowanceSnapshot(accountId, now) {
   const candidates = snapshot.windows.filter(
     (w) => typeof w.usedPercent === "number" && w.usedPercent >= QUOTA_EXHAUSTED_PERCENT && typeof w.resetsAt === "string"
   ).map((w) => ({ ms: Date.parse(w.resetsAt), usedPercent: w.usedPercent })).filter((x) => Number.isFinite(x.ms) && x.ms > now).sort((a, b) => b.usedPercent - a.usedPercent);
-  return _optionalChain([candidates, 'access', _133 => _133[0], 'optionalAccess', _134 => _134.ms]);
+  return _optionalChain([candidates, 'access', _138 => _138[0], 'optionalAccess', _139 => _139.ms]);
 }
 function resolveCodexQuotaDeadline(accountId, bodyText, now = Date.now()) {
   const structured = parseCodexUsageLimitErrorPayload(bodyText);
-  const structuredDeadline = _optionalChain([structured, 'optionalAccess', _135 => _135.resetsAtMs]) !== void 0 && structured.resetsAtMs > now ? structured.resetsAtMs : void 0;
+  const structuredDeadline = _optionalChain([structured, 'optionalAccess', _140 => _140.resetsAtMs]) !== void 0 && structured.resetsAtMs > now ? structured.resetsAtMs : void 0;
   const parsed = parseTryAgainDeadline(bodyText);
   const parsedDeadline = parsed !== void 0 && parsed > now ? parsed : void 0;
   return _nullishCoalesce(_nullishCoalesce(_nullishCoalesce(deadlineFromAllowanceSnapshot(accountId, now), () => ( structuredDeadline)), () => ( parsedDeadline)), () => ( now + DEFAULT_QUOTA_COOLDOWN_MS));
@@ -2487,7 +2526,7 @@ function normalizeHostedImageState(value) {
       hasImageContext: value.hasImageContext,
       pendingReceipts: Object.freeze(pendingReceipts)
     });
-  } catch (e23) {
+  } catch (e24) {
     throw new TypeError(INVALID_HOSTED_IMAGE_METADATA);
   }
 }
@@ -2531,7 +2570,7 @@ var ResponsesAffinityStore = (_class6 = class {
     const entry = this.entries.get(responseId);
     const now = this.now();
     if (!entry || entry.expiresAt <= now || entry.providerId !== scope.providerId || entry.clientScope !== scope.clientScope || entry.sessionKey !== scope.sessionKey) {
-      if (_optionalChain([entry, 'optionalAccess', _136 => _136.expiresAt]) !== void 0 && entry.expiresAt <= now) {
+      if (_optionalChain([entry, 'optionalAccess', _141 => _141.expiresAt]) !== void 0 && entry.expiresAt <= now) {
         this.entries.delete(responseId);
       }
       throw previousResponseNotFound();
@@ -2566,7 +2605,7 @@ function classifyResponsesProfile(declaration) {
   if (declaration.authMode === "byo") {
     return declaration.providerApiFormat === "openai-response" ? "native" : "reduced";
   }
-  if (declaration.subscriptionProviderId === "codex" && _optionalChain([declaration, 'access', _137 => _137.subscriptionTransformerNames, 'optionalAccess', _138 => _138.includes, 'call', _139 => _139("openai-response")]) && isResponsesCreateUrl(declaration.upstreamUrl)) {
+  if (declaration.subscriptionProviderId === "codex" && _optionalChain([declaration, 'access', _142 => _142.subscriptionTransformerNames, 'optionalAccess', _143 => _143.includes, 'call', _144 => _144("openai-response")]) && isResponsesCreateUrl(declaration.upstreamUrl)) {
     return "native";
   }
   return "reduced";
@@ -2586,7 +2625,7 @@ function isResponsesCreateUrl(value) {
   if (!value) return false;
   try {
     return new URL(value).pathname.replace(/\/+$/, "").endsWith("/responses");
-  } catch (e24) {
+  } catch (e25) {
     return false;
   }
 }
@@ -2756,7 +2795,7 @@ function deriveResponsesCompactUrl(createUrl) {
   let url;
   try {
     url = new URL(createUrl);
-  } catch (e25) {
+  } catch (e26) {
     throw new (0, _chunkG4CZIUIBcjs.OpenAIOperationError)({
       status: 502,
       code: "invalid_upstream_url",
@@ -2798,7 +2837,7 @@ async function resolveResponsesRouteProfile(route, deps, resolvedModel) {
   if (!subscriptionProfile) {
     throw new (0, _chunkG4CZIUIBcjs.OpenAIOperationError)({ status: 502, code: "provider_configuration_error", message: "Subscription route is missing its profile" });
   }
-  const upstreamUrl = _optionalChain([subscriptionProfile, 'access', _140 => _140.resolveUpstreamUrl, 'optionalCall', _141 => _141(resolvedModel)]);
+  const upstreamUrl = _optionalChain([subscriptionProfile, 'access', _145 => _145.resolveUpstreamUrl, 'optionalCall', _146 => _146(resolvedModel)]);
   if (!upstreamUrl) {
     throw new (0, _chunkG4CZIUIBcjs.OpenAIOperationError)({ status: 502, code: "provider_configuration_error", message: "Subscription profile is missing its Responses URL" });
   }
@@ -2818,7 +2857,7 @@ async function resolveResponsesRouteProfile(route, deps, resolvedModel) {
 }
 async function buildResponsesCallPlan(route, deps, resolved, resolvedModel, isStream, sessionKey, sessionSource, requestHeaders, affinity) {
   if (route.authMode === "byo") {
-    return buildByoPlan(route, deps, resolved, resolvedModel, isStream, affinity);
+    return buildByoPlan(route, deps, resolved, resolvedModel, isStream, sessionKey, sessionSource, affinity);
   }
   return buildSubscriptionPlan2(
     route,
@@ -2832,10 +2871,10 @@ async function buildResponsesCallPlan(route, deps, resolved, resolvedModel, isSt
     affinity
   );
 }
-async function buildByoPlan(route, deps, resolved, resolvedModel, isStream, affinity) {
+async function buildByoPlan(route, deps, resolved, resolvedModel, isStream, sessionKey, sessionSource, affinity) {
   const providerId = route.providerId;
   const provider = resolved.provider;
-  const affinityKeyId = _optionalChain([affinity, 'optionalAccess', _142 => _142.credential, 'access', _143 => _143.kind]) === "byo-key" ? affinity.credential.id : void 0;
+  const affinityKeyId = _optionalChain([affinity, 'optionalAccess', _147 => _147.credential, 'access', _148 => _148.kind]) === "byo-key" ? affinity.credential.id : void 0;
   const preferredKeyId = _nullishCoalesce(affinityKeyId, () => ( route.preferredKeyId));
   const apiKey = await resolvePoolBoundKey(
     deps,
@@ -2849,7 +2888,7 @@ async function buildByoPlan(route, deps, resolved, resolvedModel, isStream, affi
     if (affinity) throw previousResponseNotFound();
     throw new (0, _chunkG4CZIUIBcjs.OpenAIOperationError)({ status: 502, code: "provider_configuration_error", message: "Provider credential is unavailable" });
   }
-  const selectedKeyId = _nullishCoalesce(preferredKeyId, () => ( (route.sessionId && typeof _optionalChain([deps, 'access', _144 => _144.apiKeyPool, 'optionalAccess', _145 => _145.getKeyIdForSession]) === "function" ? _nullishCoalesce(deps.apiKeyPool.getKeyIdForSession(providerId, route.sessionId), () => ( void 0)) : void 0)));
+  const selectedKeyId = _nullishCoalesce(preferredKeyId, () => ( (route.sessionId && typeof _optionalChain([deps, 'access', _149 => _149.apiKeyPool, 'optionalAccess', _150 => _150.getKeyIdForSession]) === "function" ? _nullishCoalesce(deps.apiKeyPool.getKeyIdForSession(providerId, route.sessionId), () => ( void 0)) : void 0)));
   const credential = selectedKeyId ? { kind: "byo-key", id: selectedKeyId } : { kind: "provider-key", id: providerId };
   const auth = affinityKeyId ? new (0, _chunkTX4UCSOPcjs.LlmConfigProviderAuth)({ provider, apiKey, apiKeyPool: null, providerId, sessionId: route.sessionId }) : _nullishCoalesce(route.auth, () => ( new (0, _chunkTX4UCSOPcjs.LlmConfigProviderAuth)({
     provider,
@@ -2881,15 +2920,19 @@ async function buildByoPlan(route, deps, resolved, resolvedModel, isStream, affi
     statefulContinuation: !!affinity,
     credential,
     resolveCredential: () => {
-      const keyId = route.sessionId && typeof _optionalChain([deps, 'access', _146 => _146.apiKeyPool, 'optionalAccess', _147 => _147.getKeyIdForSession]) === "function" ? deps.apiKeyPool.getKeyIdForSession(providerId, route.sessionId) : null;
+      const keyId = route.sessionId && typeof _optionalChain([deps, 'access', _151 => _151.apiKeyPool, 'optionalAccess', _152 => _152.getKeyIdForSession]) === "function" ? deps.apiKeyPool.getKeyIdForSession(providerId, route.sessionId) : null;
       return keyId ? { kind: "byo-key", id: keyId } : credential;
-    }
+    },
+    byoActivity: buildByoRouteActivityMeta(deps, providerId, route.sessionId),
+    byoSessionId: _nullishCoalesce(route.sessionId, () => ( null)),
+    sessionKey,
+    sessionSource
   };
 }
 async function buildSubscriptionPlan2(route, deps, resolved, resolvedModel, isStream, sessionKey, sessionSource, requestHeaders, affinity) {
   const profile = route.subscriptionProfile;
   const upstreamUrl = resolved.upstreamUrl;
-  const affinityAccountId = _optionalChain([affinity, 'optionalAccess', _148 => _148.credential, 'access', _149 => _149.kind]) === "subscription-account" ? affinity.credential.id : void 0;
+  const affinityAccountId = _optionalChain([affinity, 'optionalAccess', _153 => _153.credential, 'access', _154 => _154.kind]) === "subscription-account" ? affinity.credential.id : void 0;
   const auth = _nullishCoalesce(route.auth, () => ( new (0, _chunkRXMF7GNFcjs.SubscriptionAuthSource)(profile)));
   const chain = resolved.profile === "native" ? { providerTransformers: [], modelTransformers: [] } : _chunkNYUNU75Acjs.resolveSubscriptionChain.call(void 0, 
     profile,
@@ -2939,10 +2982,10 @@ async function buildSubscriptionPlan2(route, deps, resolved, resolvedModel, isSt
     upstreamUrl,
     proxyProviderId: profile.authStrategy.providerId,
     providerIdentity: resolved.providerIdentity,
-    callerClientHeaders: profile.authStrategy.providerId === "codex" ? _chunkAFH5CEMFcjs.extractCodexClientHeaders.call(void 0, requestHeaders) : void 0,
+    callerClientHeaders: profile.authStrategy.providerId === "codex" ? _chunkSQU2FGXIcjs.extractCodexClientHeaders.call(void 0, requestHeaders) : void 0,
     // opencodego-egress-identity: the caller's own session id, forwarded
     // verbatim to opencode.ai (the codex callerClientHeaders precedent).
-    callerOpenCodeSession: profile.authStrategy.providerId === "opencodego" ? _chunkWYECWQ3Jcjs.extractOpenCodeSessionHeader.call(void 0, requestHeaders) : void 0,
+    callerOpenCodeSession: profile.authStrategy.providerId === "opencodego" ? _chunk2DMOOZ4Fcjs.extractOpenCodeSessionHeader.call(void 0, requestHeaders) : void 0,
     statefulContinuation: !!affinity,
     credential: affinityAccountId ? { kind: "subscription-account", id: affinityAccountId } : { kind: "subscription-account", id: "pending-selection" }
   };
@@ -2952,14 +2995,14 @@ async function resolveGeminiProject(profile, hints) {
   await profile.authStrategy.applyHeaders(headers, hints);
   const accessToken = (_nullishCoalesce(_nullishCoalesce(headers.Authorization, () => ( headers.authorization)), () => ( ""))).replace(/^Bearer\s+/i, "").trim();
   if (!accessToken) return void 0;
-  return _optionalChain([_chunkR3HK6R4Bcjs.getGeminiCodeAssistResolver.call(void 0, ), 'optionalAccess', _150 => _150.resolveProject, 'call', _151 => _151(accessToken)]);
+  return _optionalChain([_chunkR3HK6R4Bcjs.getGeminiCodeAssistResolver.call(void 0, ), 'optionalAccess', _155 => _155.resolveProject, 'call', _156 => _156(accessToken)]);
 }
 async function resolveAntigravityProjectThreaded(profile, hints) {
   const headers = {};
   await profile.authStrategy.applyHeaders(headers, hints);
   const accessToken = (_nullishCoalesce(_nullishCoalesce(headers.Authorization, () => ( headers.authorization)), () => ( ""))).replace(/^Bearer\s+/i, "").trim();
   if (!accessToken) return void 0;
-  return _chunkNDIBVTBZcjs.getAntigravityProjectResolver.call(void 0, ).resolveProject(accessToken);
+  return _chunkXYFCNDJKcjs.getAntigravityProjectResolver.call(void 0, ).resolveProject(accessToken);
 }
 async function executeResponsesUpstream(body, plan, operation, signal) {
   const run = () => plan.profile === "native" ? runNative(body, plan, operation, signal) : runReduced(body, plan, signal);
@@ -2967,16 +3010,16 @@ async function executeResponsesUpstream(body, plan, operation, signal) {
   throwIfResponsesAborted(signal);
   if (!plan.statefulContinuation) {
     if (plan.proxyProviderId === "byo") {
-      const outcome = await _optionalChain([plan, 'access', _152 => _152.auth, 'access', _153 => _153.onResult, 'optionalCall', _154 => _154(result.rawStatus)]);
-      if (_optionalChain([outcome, 'optionalAccess', _155 => _155.rebound])) {
-        await _optionalChain([result, 'access', _156 => _156.response, 'access', _157 => _157.body, 'optionalAccess', _158 => _158.cancel, 'call', _159 => _159(), 'access', _160 => _160.catch, 'call', _161 => _161(() => void 0)]);
+      const outcome = await _optionalChain([plan, 'access', _157 => _157.auth, 'access', _158 => _158.onResult, 'optionalCall', _159 => _159(result.rawStatus)]);
+      if (_optionalChain([outcome, 'optionalAccess', _160 => _160.rebound])) {
+        await _optionalChain([result, 'access', _161 => _161.response, 'access', _162 => _162.body, 'optionalAccess', _163 => _163.cancel, 'call', _164 => _164(), 'access', _165 => _165.catch, 'call', _166 => _166(() => void 0)]);
         throwIfResponsesAborted(signal);
         result = await run();
       }
     } else if (result.rawStatus === 401) {
-      const refreshed = await _optionalChain([plan, 'access', _162 => _162.auth, 'access', _163 => _163.onUnauthorized, 'optionalCall', _164 => _164(plan.sessionKey)]);
+      const refreshed = await _optionalChain([plan, 'access', _167 => _167.auth, 'access', _168 => _168.onUnauthorized, 'optionalCall', _169 => _169(plan.sessionKey)]);
       if (refreshed) {
-        await _optionalChain([result, 'access', _165 => _165.response, 'access', _166 => _166.body, 'optionalAccess', _167 => _167.cancel, 'call', _168 => _168(), 'access', _169 => _169.catch, 'call', _170 => _170(() => void 0)]);
+        await _optionalChain([result, 'access', _170 => _170.response, 'access', _171 => _171.body, 'optionalAccess', _172 => _172.cancel, 'call', _173 => _173(), 'access', _174 => _174.catch, 'call', _175 => _175(() => void 0)]);
         throwIfResponsesAborted(signal);
         result = await run();
       }
@@ -2985,6 +3028,32 @@ async function executeResponsesUpstream(body, plan, operation, signal) {
   }
   return result;
 }
+function buildResponsesRouteActivity(plan, accountId, actualModel, onRecorded) {
+  if (plan.proxyProviderId === "byo") {
+    const contentKey = _optionalChain([plan, 'access', _176 => _176.sessionKey, 'optionalAccess', _177 => _177.trim, 'call', _178 => _178()]) || void 0;
+    const routeSessionId = plan.byoSessionId || void 0;
+    return {
+      providerId: _nullishCoalesce(_optionalChain([plan, 'access', _179 => _179.byoActivity, 'optionalAccess', _180 => _180.providerId]), () => ( plan.providerIdentity)),
+      credentialKind: "provider-key",
+      keyId: _optionalChain([plan, 'access', _181 => _181.byoActivity, 'optionalAccess', _182 => _182.resolveKeyId, 'call', _183 => _183()]),
+      endpoint: "responses",
+      sessionKey: _nullishCoalesce(contentKey, () => ( routeSessionId)),
+      sessionSource: contentKey ? _nullishCoalesce(plan.sessionSource, () => ( "none")) : routeSessionId ? "route-session-id" : "none",
+      model: actualModel,
+      onRecorded
+    };
+  }
+  return {
+    providerId: plan.proxyProviderId,
+    credentialKind: "subscription-account",
+    accountId,
+    endpoint: "responses",
+    sessionKey: plan.sessionKey,
+    sessionSource: _nullishCoalesce(plan.sessionSource, () => ( "none")),
+    model: actualModel,
+    onRecorded
+  };
+}
 async function applyPlanAuth(body, plan) {
   let accountId;
   let actualModel = plan.resolvedModel;
@@ -3004,13 +3073,14 @@ async function applyPlanAuth(body, plan) {
   });
   body.model = actualModel;
   plan.transformerProvider.models = [actualModel];
+  if (plan.proxyProviderId === "codex") body.store = false;
   return { headers, accountId, actualModel };
 }
 function decorateCodexHeaders(headers, plan) {
   if (plan.proxyProviderId !== "codex") return;
   _chunkUKQHBK4Qcjs.fillMissingHeaders.call(void 0, headers, _nullishCoalesce(plan.callerClientHeaders, () => ( {})));
-  _chunkUKQHBK4Qcjs.fillMissingHeaders.call(void 0, headers, _chunkAFH5CEMFcjs.DEFAULT_CODEX_CLI_HEADERS);
-  _chunkUKQHBK4Qcjs.fillMissingHeaders.call(void 0, headers, { accept: _chunkAFH5CEMFcjs.codexAcceptHeader.call(void 0, plan.isStream) });
+  _chunkUKQHBK4Qcjs.fillMissingHeaders.call(void 0, headers, { accept: _chunkSQU2FGXIcjs.codexAcceptHeader.call(void 0, plan.isStream) });
+  _chunkSQU2FGXIcjs.fillMissingCodexCliIdentity.call(void 0, headers);
 }
 async function runNative(body, plan, operation, signal) {
   throwIfResponsesAborted(signal);
@@ -3019,21 +3089,15 @@ async function runNative(body, plan, operation, signal) {
   decorateCodexHeaders(headers, plan);
   const url = operation === "compact" ? deriveResponsesCompactUrl(plan.upstreamUrl) : plan.upstreamUrl;
   let activityRecordId;
-  const response = await _chunkVFFCV4J6cjs.fetchUpstream.call(void 0, 
+  const response = await _chunkCXRJMNJJcjs.fetchUpstream.call(void 0, 
     url,
     { method: "POST", headers, body: JSON.stringify(body), signal },
     {
       providerId: plan.proxyProviderId,
       accountId,
-      routeActivity: plan.proxyProviderId === "byo" ? void 0 : {
-        endpoint: "responses",
-        sessionKey: plan.sessionKey,
-        sessionSource: _nullishCoalesce(plan.sessionSource, () => ( "none")),
-        model: actualModel,
-        onRecorded: (record5) => {
-          activityRecordId = record5.id;
-        }
-      }
+      routeActivity: buildResponsesRouteActivity(plan, accountId, actualModel, (record5) => {
+        activityRecordId = record5.id;
+      })
     }
   );
   return {
@@ -3042,7 +3106,7 @@ async function runNative(body, plan, operation, signal) {
     accountId,
     actualModel,
     activityRecordId,
-    credential: accountId ? { kind: "subscription-account", id: accountId } : _nullishCoalesce(_optionalChain([plan, 'access', _171 => _171.resolveCredential, 'optionalCall', _172 => _172()]), () => ( plan.credential))
+    credential: accountId ? { kind: "subscription-account", id: accountId } : _nullishCoalesce(_optionalChain([plan, 'access', _184 => _184.resolveCredential, 'optionalCall', _185 => _185()]), () => ( plan.credential))
   };
 }
 async function runReduced(body, plan, signal) {
@@ -3050,7 +3114,7 @@ async function runReduced(body, plan, signal) {
   const { headers: authHeaders, accountId, actualModel } = await applyPlanAuth(body, plan);
   if (plan.proxyProviderId === "antigravity") {
     const bearer = (_nullishCoalesce(_nullishCoalesce(authHeaders.Authorization, () => ( authHeaders.authorization)), () => ( ""))).replace(/^Bearer\s+/i, "").trim();
-    if (bearer) plan.transformerProvider.geminiProject = await _chunkNDIBVTBZcjs.getAntigravityProjectResolver.call(void 0, ).resolveProject(bearer);
+    if (bearer) plan.transformerProvider.geminiProject = await _chunkXYFCNDJKcjs.getAntigravityProjectResolver.call(void 0, ).resolveProject(bearer);
   }
   let rawStatus = null;
   let activityRecordId;
@@ -3072,24 +3136,18 @@ async function runReduced(body, plan, signal) {
       return headers;
     },
     fetchFn: async (url, headers, requestBody) => {
-      const send = (target) => _chunkVFFCV4J6cjs.fetchUpstream.call(void 0, 
+      const send = (target) => _chunkCXRJMNJJcjs.fetchUpstream.call(void 0, 
         target,
         { method: "POST", headers, body: JSON.stringify(requestBody), signal },
         {
           providerId: plan.proxyProviderId,
           accountId,
-          routeActivity: plan.proxyProviderId === "byo" ? void 0 : {
-            endpoint: "responses",
-            sessionKey: plan.sessionKey,
-            sessionSource: _nullishCoalesce(plan.sessionSource, () => ( "none")),
-            model: actualModel,
-            onRecorded: (record5) => {
-              activityRecordId = record5.id;
-            }
-          }
+          routeActivity: buildResponsesRouteActivity(plan, accountId, actualModel, (record5) => {
+            activityRecordId = record5.id;
+          })
         }
       );
-      const upstream = plan.proxyProviderId === "antigravity" ? await _chunkCGEZQC2Gcjs.fetchWithAntigravityFailover.call(void 0, url, send, signal) : await send(url);
+      const upstream = plan.proxyProviderId === "antigravity" ? await _chunkF3TT5XPVcjs.fetchWithAntigravityFailover.call(void 0, url, send, signal) : await send(url);
       rawStatus = upstream.status;
       return upstream;
     },
@@ -3102,7 +3160,7 @@ async function runReduced(body, plan, signal) {
     accountId,
     actualModel,
     activityRecordId,
-    credential: accountId ? { kind: "subscription-account", id: accountId } : _nullishCoalesce(_optionalChain([plan, 'access', _173 => _173.resolveCredential, 'optionalCall', _174 => _174()]), () => ( plan.credential))
+    credential: accountId ? { kind: "subscription-account", id: accountId } : _nullishCoalesce(_optionalChain([plan, 'access', _186 => _186.resolveCredential, 'optionalCall', _187 => _187()]), () => ( plan.credential))
   };
 }
 var MAX_QUOTA_RETRIES = 3;
@@ -3125,7 +3183,7 @@ function record(value) {
   return !!value && typeof value === "object" && !Array.isArray(value);
 }
 function hasResponsesHostedImageWork(body, previousState) {
-  if (_optionalChain([previousState, 'optionalAccess', _175 => _175.hasImageContext]) || _optionalChain([previousState, 'optionalAccess', _176 => _176.pendingReceipts, 'access', _177 => _177.length])) return true;
+  if (_optionalChain([previousState, 'optionalAccess', _188 => _188.hasImageContext]) || _optionalChain([previousState, 'optionalAccess', _189 => _189.pendingReceipts, 'access', _190 => _190.length])) return true;
   if (Array.isArray(body.tools) && body.tools.some((tool) => record(tool) && tool.type === "image_generation")) {
     return true;
   }
@@ -3309,7 +3367,7 @@ function createNonCollidingSelectorName(tools, createName) {
     let candidate;
     try {
       candidate = createName();
-    } catch (e26) {
+    } catch (e27) {
       throw new (0, _chunkINY54AYXcjs.ImageGenerationError)("image_generation_failed");
     }
     if (typeof candidate === "string" && SELECTOR_NAME_PATTERN.test(candidate) && !declaredNames.has(candidate)) {
@@ -3328,7 +3386,7 @@ function parseSelectorPrompt(value) {
   let parsed;
   try {
     parsed = JSON.parse(value);
-  } catch (e27) {
+  } catch (e28) {
     protocolFailure();
   }
   if (!isRecord4(parsed) || Object.keys(parsed).some((key) => key !== "prompt") || typeof parsed.prompt !== "string" || !parsed.prompt.trim() || parsed.prompt.length > 32e3) {
@@ -3545,7 +3603,7 @@ function parseSelectorArguments(value) {
   let parsed;
   try {
     parsed = JSON.parse(value);
-  } catch (e28) {
+  } catch (e29) {
     return void 0;
   }
   if (!isRecord5(parsed) || typeof parsed.query !== "string") return void 0;
@@ -3673,7 +3731,7 @@ var NativeResponsesSearchLease = class {
     let parsed;
     try {
       parsed = JSON.parse(text);
-    } catch (e29) {
+    } catch (e30) {
       return responseWithBody(input.response, text, false);
     }
     if (!isRecord6(parsed)) return responseWithBody(input.response, text, false);
@@ -3774,18 +3832,18 @@ function responsesSearchDisabledError() {
 var SERVER_OVERLOADED_CODES = /* @__PURE__ */ new Set(["server_is_overloaded", "slow_down"]);
 function isCodexServerOverloadEvent(event) {
   const error = codexResponseFailedError(event);
-  const code = _optionalChain([error, 'optionalAccess', _178 => _178["code"]]);
+  const code = _optionalChain([error, 'optionalAccess', _191 => _191["code"]]);
   return typeof code === "string" && SERVER_OVERLOADED_CODES.has(code);
 }
 function codexResponseFailedError(event) {
   if (event["type"] !== "response.failed") return void 0;
-  const error = _optionalChain([event, 'access', _179 => _179["response"], 'optionalAccess', _180 => _180["error"]]);
+  const error = _optionalChain([event, 'access', _192 => _192["response"], 'optionalAccess', _193 => _193["error"]]);
   return error && typeof error === "object" ? error : void 0;
 }
 var USAGE_LIMIT_CODES = /* @__PURE__ */ new Set(["usage_limit_reached", "usage_not_included"]);
 function isCodexUsageLimitEvent(event) {
   const error = codexResponseFailedError(event);
-  const code = _optionalChain([error, 'optionalAccess', _181 => _181["code"]]);
+  const code = _optionalChain([error, 'optionalAccess', _194 => _194["code"]]);
   return typeof code === "string" && USAGE_LIMIT_CODES.has(code);
 }
 function codexUsageLimitEventBody(event) {
@@ -3819,7 +3877,7 @@ async function handleOpenAIResponsesRequest(res, rawBody, route, deps, requestHe
   let parsedBody;
   try {
     parsedBody = JSON.parse(rawBody);
-  } catch (e30) {
+  } catch (e31) {
     writeError(res, 400, "Invalid JSON in request body");
     return;
   }
@@ -3832,7 +3890,7 @@ async function handleOpenAIResponsesRequest(res, rawBody, route, deps, requestHe
     return;
   }
   const responsesBody = parsedBody;
-  _optionalChain([onStreamModeResolved, 'optionalCall', _182 => _182(responsesBody.stream === true)]);
+  _optionalChain([onStreamModeResolved, 'optionalCall', _195 => _195(responsesBody.stream === true)]);
   try {
     await handleResponsesOperation(
       res,
@@ -3912,7 +3970,7 @@ async function handleResponsesOperation(res, responsesBody, route, deps, request
     throw error;
   }
   const cacheKeyAttribution = operation === "create" ? ensureCodexPromptCacheKey(responsesBody, plan.proxyProviderId, derivedSession) : { cacheKeySource: "none", cacheKeyInjected: false };
-  const previousHostedImageState = _optionalChain([affinity, 'optionalAccess', _183 => _183.hostedImage]);
+  const previousHostedImageState = _optionalChain([affinity, 'optionalAccess', _196 => _196.hostedImage]);
   const hasHostedImageWork = operation === "create" && hasResponsesHostedImageWork(
     responsesBody,
     previousHostedImageState
@@ -3942,7 +4000,7 @@ async function handleResponsesOperation(res, responsesBody, route, deps, request
       message: "Hosted image generation requires an authenticated outbound key"
     });
   }
-  const searchMode = operation === "create" ? _nullishCoalesce(_optionalChain([deps, 'access', _184 => _184.searchFrontendModes, 'optionalAccess', _185 => _185.responses]), () => ( _chunkE4QHVXV5cjs.DEFAULT_SEARCH_FRONTEND_MODES.responses)) : "native";
+  const searchMode = operation === "create" ? _nullishCoalesce(_optionalChain([deps, 'access', _197 => _197.searchFrontendModes, 'optionalAccess', _198 => _198.responses]), () => ( _chunkE4QHVXV5cjs.DEFAULT_SEARCH_FRONTEND_MODES.responses)) : "native";
   const wantsHostedSearch = operation === "create" && hasResponsesHostedSearchWork(responsesBody);
   if (wantsHostedSearch && searchMode === "off") {
     throw responsesSearchDisabledError();
@@ -3997,16 +4055,16 @@ async function handleResponsesOperation(res, responsesBody, route, deps, request
   let providerResponse;
   try {
     if (hostedImageRequest) {
-      _optionalChain([route, 'access', _186 => _186.suppressAuditBodies, 'optionalCall', _187 => _187()]);
+      _optionalChain([route, 'access', _199 => _199.suppressAuditBodies, 'optionalCall', _200 => _200()]);
     }
     providerResponse = await executeResponsesUpstream(
-      _nullishCoalesce(_nullishCoalesce(_optionalChain([searchRequest, 'optionalAccess', _188 => _188.upstreamBody]), () => ( _optionalChain([hostedImageRequest, 'optionalAccess', _189 => _189.upstreamBody]))), () => ( responsesBody)),
+      _nullishCoalesce(_nullishCoalesce(_optionalChain([searchRequest, 'optionalAccess', _201 => _201.upstreamBody]), () => ( _optionalChain([hostedImageRequest, 'optionalAccess', _202 => _202.upstreamBody]))), () => ( responsesBody)),
       plan,
       operation,
       signal
     );
   } catch (error) {
-    await _optionalChain([hostedImageRequest, 'optionalAccess', _190 => _190.dispose, 'call', _191 => _191()]);
+    await _optionalChain([hostedImageRequest, 'optionalAccess', _203 => _203.dispose, 'call', _204 => _204()]);
     if (affinity && _chunk25GXJCEZcjs.isBoundAccountSelectionError.call(void 0, error)) {
       throw previousResponseNotFound();
     }
@@ -4027,7 +4085,7 @@ async function handleResponsesOperation(res, responsesBody, route, deps, request
     extractUsage(event) {
       if (event.type !== "response.completed") return null;
       const response = event.response;
-      return _optionalChain([response, 'optionalAccess', _192 => _192.usage]);
+      return _optionalChain([response, 'optionalAccess', _205 => _205.usage]);
     },
     onUsage(rawUsage) {
       recordResponsesStreamUsage(usageRecorder, rawUsage, usageAttribution);
@@ -4074,7 +4132,7 @@ async function handleResponsesOperation(res, responsesBody, route, deps, request
   let usageLimitRecorded = false;
   const observeSse = (event) => {
     if (event.type === "response.completed") {
-      recordAffinity(_optionalChain([event, 'access', _193 => _193.response, 'optionalAccess', _194 => _194.id]));
+      recordAffinity(_optionalChain([event, 'access', _206 => _206.response, 'optionalAccess', _207 => _207.id]));
     }
     if (!usageLimitRecorded && isCodexUsageLimitEvent(event)) {
       usageLimitRecorded = true;
@@ -4089,7 +4147,7 @@ async function handleResponsesOperation(res, responsesBody, route, deps, request
     if (overloadRecorded || !isCodexServerOverloadEvent(event)) return;
     overloadRecorded = true;
     if (providerResponse.activityRecordId) {
-      _chunkNKVZ6Z3Ycjs.getSharedAccountRouteActivity.call(void 0, ).amend(providerResponse.activityRecordId, { streamError: "server_overloaded" });
+      _chunk4HMAS74Xcjs.getSharedAccountRouteActivity.call(void 0, ).amend(providerResponse.activityRecordId, { streamError: "server_overloaded" });
     }
     if (providerResponse.accountId) {
       _chunkOTZC4TNHcjs.getSharedOverloadCounter.call(void 0, ).recordOverload({
@@ -4111,14 +4169,14 @@ async function handleResponsesOperation(res, responsesBody, route, deps, request
       signal
     );
   } finally {
-    await _optionalChain([hostedImageRequest, 'optionalAccess', _195 => _195.dispose, 'call', _196 => _196()]);
+    await _optionalChain([hostedImageRequest, 'optionalAccess', _208 => _208.dispose, 'call', _209 => _209()]);
   }
   if (!bodyText) return;
   if (usageRecorder) recordResponsesNonStreamUsage(usageRecorder, bodyText, usageAttribution);
   try {
     const body = JSON.parse(bodyText);
     if (body.status !== "failed" && body.status !== "incomplete") recordAffinity(body.id);
-  } catch (e31) {
+  } catch (e32) {
   }
 }
 
@@ -4127,7 +4185,7 @@ async function handleAnthropicMessagesByo(res, rawBody, route, deps, options = {
   let anthropicBody;
   try {
     anthropicBody = JSON.parse(rawBody);
-  } catch (e32) {
+  } catch (e33) {
     writeError(res, 400, "Invalid JSON in request body");
     return;
   }
@@ -4165,7 +4223,7 @@ async function handleAnthropicMessagesByo(res, rawBody, route, deps, options = {
       extractUsage(event) {
         if (event["type"] === "message_start") {
           const msg = event["message"];
-          const u = _optionalChain([msg, 'optionalAccess', _197 => _197["usage"]]);
+          const u = _optionalChain([msg, 'optionalAccess', _210 => _210["usage"]]);
           if (u) anthropicInputUsage = u;
           return null;
         }
@@ -4188,7 +4246,7 @@ async function handleAnthropicMessagesByo(res, rawBody, route, deps, options = {
       if (!usageLimitRecorded) {
         let limitHit = isCodexUsageLimitEvent(event);
         if (!limitHit && event["type"] === "error") {
-          const message = _optionalChain([event, 'access', _198 => _198["error"], 'optionalAccess', _199 => _199["message"]]);
+          const message = _optionalChain([event, 'access', _211 => _211["error"], 'optionalAccess', _212 => _212["message"]]);
           limitHit = typeof message === "string" && (message.includes("usage_limit_reached") || message.includes("usage_not_included"));
         }
         if (limitHit) {
@@ -4205,13 +4263,13 @@ async function handleAnthropicMessagesByo(res, rawBody, route, deps, options = {
       if (overloadRecorded) return;
       let hit = isCodexServerOverloadEvent(event);
       if (!hit && event["type"] === "error") {
-        const message = _optionalChain([event, 'access', _200 => _200["error"], 'optionalAccess', _201 => _201["message"]]);
+        const message = _optionalChain([event, 'access', _213 => _213["error"], 'optionalAccess', _214 => _214["message"]]);
         hit = typeof message === "string" && (message.includes("server_is_overloaded") || message.includes("slow_down"));
       }
       if (!hit) return;
       overloadRecorded = true;
       if (overloadActivityId) {
-        _chunkNKVZ6Z3Ycjs.getSharedAccountRouteActivity.call(void 0, ).amend(overloadActivityId, {
+        _chunk4HMAS74Xcjs.getSharedAccountRouteActivity.call(void 0, ).amend(overloadActivityId, {
           streamError: "server_overloaded"
         });
       }
@@ -4226,7 +4284,7 @@ async function handleAnthropicMessagesByo(res, rawBody, route, deps, options = {
     let inbandOverloadRecorded = false;
     const inbandOverloadObserver = plan.isSubscription && plan.sameFormat && overloadAccountId ? (event) => {
       if (inbandOverloadRecorded || event["type"] !== "error") return;
-      const errorType = _optionalChain([event, 'access', _202 => _202["error"], 'optionalAccess', _203 => _203["type"]]);
+      const errorType = _optionalChain([event, 'access', _215 => _215["error"], 'optionalAccess', _216 => _216["type"]]);
       if (errorType !== "overloaded_error") return;
       inbandOverloadRecorded = true;
       _chunk7LRTPNFLcjs.getSharedAccountHealth.call(void 0, ).recordUpstreamOutcome(
@@ -4263,7 +4321,7 @@ async function handleAnthropicMessagesByo(res, rawBody, route, deps, options = {
       recordAnthropicNonStreamUsage(deps.usageRecorder, bodyText, usageAttribution);
     }
   } catch (err) {
-    if (_optionalChain([options, 'access', _204 => _204.signal, 'optionalAccess', _205 => _205.aborted])) return;
+    if (_optionalChain([options, 'access', _217 => _217.signal, 'optionalAccess', _218 => _218.aborted])) return;
     if (err instanceof DocumentNotSupportedError || err instanceof UnsupportedContentBlockError) {
       writeError(res, 400, `${err.message} [code: ${err.code}]`);
       return;
@@ -4329,7 +4387,9 @@ async function buildByoPlan2(res, route, deps, resolvedModel, isStream) {
     isSubscription: false,
     provider,
     apiKey,
-    extendedContextEnabled: _nullishCoalesce(_optionalChain([route, 'access', _206 => _206.anthropicSdkHints, 'optionalAccess', _207 => _207.extendedContext, 'optionalAccess', _208 => _208.enabled]), () => ( false))
+    extendedContextEnabled: _nullishCoalesce(_optionalChain([route, 'access', _219 => _219.anthropicSdkHints, 'optionalAccess', _220 => _220.extendedContext, 'optionalAccess', _221 => _221.enabled]), () => ( false)),
+    byoActivity: buildByoRouteActivityMeta(deps, providerId, route.sessionId),
+    byoSessionId: _nullishCoalesce(route.sessionId, () => ( null))
   };
 }
 async function runSameFormatFetch(bodyToSend, plan, options, keyOverride, urlOverride) {
@@ -4339,7 +4399,7 @@ async function runSameFormatFetch(bodyToSend, plan, options, keyOverride, urlOve
   }
   const effectiveKey = _nullishCoalesce(_nullishCoalesce(keyOverride, () => ( apiKey)), () => ( ""));
   const headers = _chunkTX4UCSOPcjs.getProviderHeaders.call(void 0, provider, effectiveKey);
-  const callerBeta = _optionalChain([options, 'access', _209 => _209.callerAnthropicBeta, 'optionalAccess', _210 => _210.trim, 'call', _211 => _211()]);
+  const callerBeta = _optionalChain([options, 'access', _222 => _222.callerAnthropicBeta, 'optionalAccess', _223 => _223.trim, 'call', _224 => _224()]);
   if (callerBeta) {
     const existing = _nullishCoalesce(headers["anthropic-beta"], () => ( headers["Anthropic-Beta"]));
     const parts = new Set(
@@ -4351,23 +4411,41 @@ async function runSameFormatFetch(bodyToSend, plan, options, keyOverride, urlOve
     }
   }
   _chunkGBHYAGX3cjs.injectExtendedContextBeta.call(void 0, headers, resolvedModel, _nullishCoalesce(extendedContextEnabled, () => ( false)));
-  const callerVersion = _optionalChain([options, 'access', _212 => _212.callerAnthropicVersion, 'optionalAccess', _213 => _213.trim, 'call', _214 => _214()]);
+  const callerVersion = _optionalChain([options, 'access', _225 => _225.callerAnthropicVersion, 'optionalAccess', _226 => _226.trim, 'call', _227 => _227()]);
   headers["anthropic-version"] = callerVersion || DEFAULT_ANTHROPIC_VERSION;
   const url = _nullishCoalesce(urlOverride, () => ( _chunkA2YMUCBTcjs.buildProviderApiUrl.call(void 0, provider, { model: resolvedModel, stream: isStream })));
   console.info(`[ProviderProxy:anthropic] (same-format) -> ${url} model=${resolvedModel} stream=${isStream}`);
-  const response = await _chunkVFFCV4J6cjs.fetchUpstream.call(void 0, 
+  let activityRecordId;
+  const response = await _chunkCXRJMNJJcjs.fetchUpstream.call(void 0, 
     url,
     { method: "POST", headers, body: bodyToSend, signal: options.signal },
-    { providerId: "byo" }
+    {
+      providerId: "byo",
+      routeActivity: {
+        providerId: _nullishCoalesce(_optionalChain([plan, 'access', _228 => _228.byoActivity, 'optionalAccess', _229 => _229.providerId]), () => ( provider.name)),
+        credentialKind: "provider-key",
+        // LIVE resolution: a pool rebind retry re-invokes this fetch, and the
+        // binding has already rotated, so the retried attempt attributes the
+        // NEW key. `keyOverride` is a key STRING (never recorded).
+        keyId: _optionalChain([plan, 'access', _230 => _230.byoActivity, 'optionalAccess', _231 => _231.resolveKeyId, 'call', _232 => _232()]),
+        endpoint: "messages",
+        sessionKey: plan.byoSessionId || void 0,
+        sessionSource: plan.byoSessionId ? "route-session-id" : "none",
+        model: resolvedModel,
+        onRecorded: (record5) => {
+          activityRecordId = record5.id;
+        }
+      }
+    }
   );
-  return { response, rawStatus: response.status };
+  return { response, rawStatus: response.status, activityRecordId };
 }
 function resolveSameFormatBody(anthropicBody, rawBody, plan) {
   let originalModel;
   try {
     const m = JSON.parse(rawBody).model;
     originalModel = typeof m === "string" ? m : void 0;
-  } catch (e33) {
+  } catch (e34) {
     originalModel = void 0;
   }
   return plan.resolvedModel !== originalModel ? JSON.stringify(anthropicBody) : rawBody;
@@ -4376,8 +4454,8 @@ async function runPipelineWithPoolReporting(anthropicBody, rawBody, plan, option
   const sameFormatBody = plan.sameFormat ? resolveSameFormatBody(anthropicBody, rawBody, plan) : rawBody;
   const runOnce = (keyOverride) => plan.sameFormat ? runSameFormatFetch(sameFormatBody, plan, options, keyOverride) : runPipeline(anthropicBody, plan, void 0, options.signal);
   const first = await runOnce();
-  const outcome = await _optionalChain([plan, 'access', _215 => _215.auth, 'access', _216 => _216.onResult, 'optionalCall', _217 => _217(first.rawStatus)]);
-  if (_optionalChain([outcome, 'optionalAccess', _218 => _218.rebound])) {
+  const outcome = await _optionalChain([plan, 'access', _233 => _233.auth, 'access', _234 => _234.onResult, 'optionalCall', _235 => _235(first.rawStatus)]);
+  if (_optionalChain([outcome, 'optionalAccess', _236 => _236.rebound])) {
     console.info(
       "[ProviderProxy:anthropic] pool re-bound key after status",
       first.rawStatus,
@@ -4463,7 +4541,7 @@ function countTools(tools, budget) {
     let serialized;
     try {
       serialized = _nullishCoalesce(JSON.stringify(tool), () => ( ""));
-    } catch (e34) {
+    } catch (e35) {
       serialized = "";
     }
     if (!budget.addChars(serialized.length)) return;
@@ -4508,7 +4586,7 @@ async function handleAnthropicCountTokens(res, rawBody, route, deps, options = {
   let body;
   try {
     body = JSON.parse(rawBody);
-  } catch (e35) {
+  } catch (e36) {
     writeError(res, 400, "Invalid JSON in request body");
     return;
   }
@@ -4540,7 +4618,7 @@ async function handleAnthropicCountTokens(res, rawBody, route, deps, options = {
     const providerResponse = plan.isSubscription ? await runSubscriptionCountTokensFetch(bodyToSend, plan, options, countTokensUrl) : await runByoCountTokensFetch(bodyToSend, plan, options, countTokensUrl);
     await relayResponse(res, providerResponse.response, false, void 0, void 0, void 0, options.signal);
   } catch (err) {
-    if (_optionalChain([options, 'access', _219 => _219.signal, 'optionalAccess', _220 => _220.aborted])) return;
+    if (_optionalChain([options, 'access', _237 => _237.signal, 'optionalAccess', _238 => _238.aborted])) return;
     if (_chunk25GXJCEZcjs.isBoundAccountSelectionError.call(void 0, err)) {
       writeBoundAccountError(res, err);
       return;
@@ -4562,8 +4640,8 @@ function writeCountTokensEstimate(res, body, budgetMs) {
 async function runByoCountTokensFetch(bodyToSend, plan, options, url) {
   const runOnce = (keyOverride) => runSameFormatFetch(bodyToSend, plan, options, keyOverride, url);
   const first = await runOnce();
-  const outcome = await _optionalChain([plan, 'access', _221 => _221.auth, 'access', _222 => _222.onResult, 'optionalCall', _223 => _223(first.rawStatus)]);
-  if (_optionalChain([outcome, 'optionalAccess', _224 => _224.rebound])) {
+  const outcome = await _optionalChain([plan, 'access', _239 => _239.auth, 'access', _240 => _240.onResult, 'optionalCall', _241 => _241(first.rawStatus)]);
+  if (_optionalChain([outcome, 'optionalAccess', _242 => _242.rebound])) {
     await cancelDiscardedResponse(first.response);
     console.info(
       "[ProviderProxy:anthropic] pool re-bound key after status",
@@ -4581,7 +4659,7 @@ async function runSubscriptionCountTokensFetch(bodyToSend, plan, options, url) {
 // src/provider-proxy/ingress/anthropicPathMatch.ts
 function classifyAnthropicMessagesPath(url) {
   if (!url) return null;
-  const path = _nullishCoalesce(_optionalChain([url, 'access', _225 => _225.split, 'call', _226 => _226("?"), 'access', _227 => _227[0], 'optionalAccess', _228 => _228.replace, 'call', _229 => _229(/\/+$/, "")]), () => ( ""));
+  const path = _nullishCoalesce(_optionalChain([url, 'access', _243 => _243.split, 'call', _244 => _244("?"), 'access', _245 => _245[0], 'optionalAccess', _246 => _246.replace, 'call', _247 => _247(/\/+$/, "")]), () => ( ""));
   if (path.endsWith("/v1/messages/count_tokens")) return "count_tokens";
   if (path.endsWith("/v1/messages")) return "messages";
   if (/\/v1\/messages\/.+/.test(path)) return "unsupported-subpath";
@@ -4609,7 +4687,7 @@ async function handleAnthropicMessagesRequest(req, res, route, deps) {
       const callerAnthropicVersion = Array.isArray(callerVersionRaw) ? callerVersionRaw.join(",") : callerVersionRaw;
       const callerIdentity = _chunk6RPZADX3cjs.captureCallerIdentity.call(void 0, _chunkRPII3E6Zcjs.getSharedIdentityStore.call(void 0, ), request.headers);
       const callerClientHeaders = extractClaudeClientHeaders(request.headers);
-      const callerOpenCodeSession = _chunkWYECWQ3Jcjs.extractOpenCodeSessionHeader.call(void 0, request.headers);
+      const callerOpenCodeSession = _chunk2DMOOZ4Fcjs.extractOpenCodeSessionHeader.call(void 0, request.headers);
       await handleAnthropicCountTokens(res, rawBody, route, deps, {
         callerAnthropicBeta,
         callerAnthropicVersion,
@@ -4625,14 +4703,14 @@ async function handleAnthropicMessagesRequest(req, res, route, deps) {
     }
     return;
   }
-  const searchMode = _nullishCoalesce(_optionalChain([deps, 'access', _230 => _230.searchFrontendModes, 'optionalAccess', _231 => _231.anthropic]), () => ( _chunkE4QHVXV5cjs.DEFAULT_SEARCH_FRONTEND_MODES.anthropic));
-  const routeSuppliedSearchBackend = _nullishCoalesce(_optionalChain([route, 'access', _232 => _232.anthropicSdkHints, 'optionalAccess', _233 => _233.webSearchService]), () => ( null));
+  const searchMode = _nullishCoalesce(_optionalChain([deps, 'access', _248 => _248.searchFrontendModes, 'optionalAccess', _249 => _249.anthropic]), () => ( _chunkE4QHVXV5cjs.DEFAULT_SEARCH_FRONTEND_MODES.anthropic));
+  const routeSuppliedSearchBackend = _nullishCoalesce(_optionalChain([route, 'access', _250 => _250.anthropicSdkHints, 'optionalAccess', _251 => _251.webSearchService]), () => ( null));
   if (searchMode !== "native" && !routeSuppliedSearchBackend) {
     const preReadBody = await readBody(req);
     let parsedForSearch;
     try {
       parsedForSearch = preReadBody ? JSON.parse(preReadBody) : {};
-    } catch (e36) {
+    } catch (e37) {
       parsedForSearch = void 0;
     }
     const handled = await handleAnthropicManagedSearch(res, parsedForSearch, {
@@ -4654,7 +4732,7 @@ async function handleAnthropicMessagesRequest(req, res, route, deps) {
       const callerAnthropicVersion = Array.isArray(callerVersionRaw) ? callerVersionRaw.join(",") : callerVersionRaw;
       const callerIdentity = _chunk6RPZADX3cjs.captureCallerIdentity.call(void 0, _chunkRPII3E6Zcjs.getSharedIdentityStore.call(void 0, ), request.headers);
       const callerClientHeaders = extractClaudeClientHeaders(request.headers);
-      const callerOpenCodeSession = _chunkWYECWQ3Jcjs.extractOpenCodeSessionHeader.call(void 0, request.headers);
+      const callerOpenCodeSession = _chunk2DMOOZ4Fcjs.extractOpenCodeSessionHeader.call(void 0, request.headers);
       await handleAnthropicMessagesByo(res, rawBody, route, deps, {
         callerAnthropicBeta,
         callerAnthropicVersion,
@@ -4759,10 +4837,10 @@ function emitGeminiUsageRecord(recorder, rawUsageMetadata, attribution) {
     providerId: attribution.providerId,
     model: attribution.model,
     apiKeyId: attribution.apiKeyId,
-    runId: _nullishCoalesce(_optionalChain([attribution, 'access', _234 => _234.routeLease, 'optionalAccess', _235 => _235.runId]), () => ( null)),
-    routeLeaseId: _nullishCoalesce(_optionalChain([attribution, 'access', _236 => _236.routeLease, 'optionalAccess', _237 => _237.leaseId]), () => ( null)),
-    routeLeaseConsumer: _nullishCoalesce(_optionalChain([attribution, 'access', _238 => _238.routeLease, 'optionalAccess', _239 => _239.consumer]), () => ( null)),
-    routeLeaseStageId: _nullishCoalesce(_optionalChain([attribution, 'access', _240 => _240.routeLease, 'optionalAccess', _241 => _241.stageId]), () => ( null)),
+    runId: _nullishCoalesce(_optionalChain([attribution, 'access', _252 => _252.routeLease, 'optionalAccess', _253 => _253.runId]), () => ( null)),
+    routeLeaseId: _nullishCoalesce(_optionalChain([attribution, 'access', _254 => _254.routeLease, 'optionalAccess', _255 => _255.leaseId]), () => ( null)),
+    routeLeaseConsumer: _nullishCoalesce(_optionalChain([attribution, 'access', _256 => _256.routeLease, 'optionalAccess', _257 => _257.consumer]), () => ( null)),
+    routeLeaseStageId: _nullishCoalesce(_optionalChain([attribution, 'access', _258 => _258.routeLease, 'optionalAccess', _259 => _259.stageId]), () => ( null)),
     auditResponse: attribution.auditResponse,
     engineOrigin: "codex-ingress",
     usage: tapped,
@@ -4777,13 +4855,13 @@ function recordGeminiNonStreamUsage(recorder, bodyText, attribution) {
       parsed.usageMetadata,
       attribution
     );
-  } catch (e37) {
+  } catch (e38) {
   }
 }
 function recordGeminiStreamUsage(recorder, rawUsageMetadata, attribution) {
   try {
     emitGeminiUsageRecord(recorder, rawUsageMetadata, attribution);
-  } catch (e38) {
+  } catch (e39) {
   }
 }
 
@@ -4792,14 +4870,14 @@ var GENERATE_CONTENT_ACTION = ":generateContent";
 var STREAM_GENERATE_CONTENT_ACTION = ":streamGenerateContent";
 function isGeminiGenerateContentRequest(method, url) {
   if (method !== "POST" || !url) return false;
-  const path = _nullishCoalesce(_optionalChain([url, 'access', _242 => _242.split, 'call', _243 => _243("?"), 'access', _244 => _244[0], 'optionalAccess', _245 => _245.replace, 'call', _246 => _246(/\/+$/, "")]), () => ( ""));
+  const path = _nullishCoalesce(_optionalChain([url, 'access', _260 => _260.split, 'call', _261 => _261("?"), 'access', _262 => _262[0], 'optionalAccess', _263 => _263.replace, 'call', _264 => _264(/\/+$/, "")]), () => ( ""));
   const lastSegment = _nullishCoalesce(path.split("/").pop(), () => ( ""));
   return lastSegment.includes(STREAM_GENERATE_CONTENT_ACTION) || lastSegment.includes(GENERATE_CONTENT_ACTION);
 }
 function isGeminiStreamRequest(url) {
   if (!url) return false;
   const [path, query = ""] = url.split("?");
-  const lastSegment = _nullishCoalesce((_nullishCoalesce(_optionalChain([path, 'optionalAccess', _247 => _247.replace, 'call', _248 => _248(/\/+$/, "")]), () => ( ""))).split("/").pop(), () => ( ""));
+  const lastSegment = _nullishCoalesce((_nullishCoalesce(_optionalChain([path, 'optionalAccess', _265 => _265.replace, 'call', _266 => _266(/\/+$/, "")]), () => ( ""))).split("/").pop(), () => ( ""));
   if (lastSegment.includes(STREAM_GENERATE_CONTENT_ACTION)) return true;
   return /(^|&)alt=sse(&|$)/.test(query);
 }
@@ -4807,7 +4885,7 @@ async function handleGeminiGenerateContentRequest(res, rawBody, url, route, deps
   let geminiBody;
   try {
     geminiBody = JSON.parse(rawBody);
-  } catch (e39) {
+  } catch (e40) {
     writeError(res, 400, "Invalid JSON in request body");
     return;
   }
@@ -4903,7 +4981,9 @@ async function buildByoPlan3(res, route, deps, resolvedModel, isStream) {
     resolvedModel,
     isStream,
     resolveUrl: (config) => config.url instanceof URL ? config.url.toString() : byoUrl,
-    upstreamUrl: byoUrl
+    upstreamUrl: byoUrl,
+    byoActivity: buildByoRouteActivityMeta(deps, providerId, route.sessionId),
+    byoSessionId: _nullishCoalesce(route.sessionId, () => ( null))
   };
 }
 async function runPipeline2(geminiBody, plan) {
@@ -4931,10 +5011,21 @@ async function runPipeline2(geminiBody, plan) {
     },
     fetchFn: (url, headers, body) => {
       console.log(`[ProviderProxy:gemini] -> ${url} model=${resolvedModel} stream=${isStream}`);
-      return _chunkVFFCV4J6cjs.fetchUpstream.call(void 0, 
+      return _chunkCXRJMNJJcjs.fetchUpstream.call(void 0, 
         url,
         { method: "POST", headers, body: JSON.stringify(body) },
-        { providerId: "byo" }
+        {
+          providerId: "byo",
+          routeActivity: {
+            providerId: _nullishCoalesce(_optionalChain([plan, 'access', _267 => _267.byoActivity, 'optionalAccess', _268 => _268.providerId]), () => ( transformerProvider.name)),
+            credentialKind: "provider-key",
+            keyId: _optionalChain([plan, 'access', _269 => _269.byoActivity, 'optionalAccess', _270 => _270.resolveKeyId, 'call', _271 => _271()]),
+            endpoint: "generateContent",
+            sessionKey: plan.byoSessionId || void 0,
+            sessionSource: plan.byoSessionId ? "route-session-id" : "none",
+            model: resolvedModel
+          }
+        }
       ).then((r) => {
         rawStatus = r.status;
         return r;
@@ -4946,8 +5037,8 @@ async function runPipeline2(geminiBody, plan) {
 }
 async function runPipelineWithPoolReporting2(geminiBody, plan) {
   const first = await runPipeline2(geminiBody, plan);
-  const outcome = await _optionalChain([plan, 'access', _249 => _249.auth, 'access', _250 => _250.onResult, 'optionalCall', _251 => _251(first.rawStatus)]);
-  if (_optionalChain([outcome, 'optionalAccess', _252 => _252.rebound])) {
+  const outcome = await _optionalChain([plan, 'access', _272 => _272.auth, 'access', _273 => _273.onResult, 'optionalCall', _274 => _274(first.rawStatus)]);
+  if (_optionalChain([outcome, 'optionalAccess', _275 => _275.rebound])) {
     console.log(
       "[ProviderProxy:gemini] pool re-bound key after status",
       first.rawStatus,
@@ -4986,10 +5077,10 @@ function emitChatCompletionsUsageRecord(recorder, rawUsage, attribution) {
     providerId: attribution.providerId,
     model: attribution.model,
     apiKeyId: attribution.apiKeyId,
-    runId: _nullishCoalesce(_optionalChain([attribution, 'access', _253 => _253.routeLease, 'optionalAccess', _254 => _254.runId]), () => ( null)),
-    routeLeaseId: _nullishCoalesce(_optionalChain([attribution, 'access', _255 => _255.routeLease, 'optionalAccess', _256 => _256.leaseId]), () => ( null)),
-    routeLeaseConsumer: _nullishCoalesce(_optionalChain([attribution, 'access', _257 => _257.routeLease, 'optionalAccess', _258 => _258.consumer]), () => ( null)),
-    routeLeaseStageId: _nullishCoalesce(_optionalChain([attribution, 'access', _259 => _259.routeLease, 'optionalAccess', _260 => _260.stageId]), () => ( null)),
+    runId: _nullishCoalesce(_optionalChain([attribution, 'access', _276 => _276.routeLease, 'optionalAccess', _277 => _277.runId]), () => ( null)),
+    routeLeaseId: _nullishCoalesce(_optionalChain([attribution, 'access', _278 => _278.routeLease, 'optionalAccess', _279 => _279.leaseId]), () => ( null)),
+    routeLeaseConsumer: _nullishCoalesce(_optionalChain([attribution, 'access', _280 => _280.routeLease, 'optionalAccess', _281 => _281.consumer]), () => ( null)),
+    routeLeaseStageId: _nullishCoalesce(_optionalChain([attribution, 'access', _282 => _282.routeLease, 'optionalAccess', _283 => _283.stageId]), () => ( null)),
     auditResponse: attribution.auditResponse,
     engineOrigin: "codex-ingress",
     usage: tapped,
@@ -5004,13 +5095,13 @@ function recordChatCompletionsNonStreamUsage(recorder, bodyText, attribution) {
       parsed.usage,
       attribution
     );
-  } catch (e40) {
+  } catch (e41) {
   }
 }
 function recordChatCompletionsStreamUsage(recorder, rawUsage, attribution) {
   try {
     emitChatCompletionsUsageRecord(recorder, rawUsage, attribution);
-  } catch (e41) {
+  } catch (e42) {
   }
 }
 
@@ -5021,7 +5112,7 @@ async function handleOpenAIChatRequest(res, rawBody, route, deps) {
   let chatBody;
   try {
     chatBody = JSON.parse(rawBody);
-  } catch (e42) {
+  } catch (e43) {
     writeError(res, 400, "Invalid JSON in request body");
     return;
   }
@@ -5118,7 +5209,9 @@ async function buildByoPlan4(res, route, deps, resolvedModel, isStream) {
     resolveUrl: (config) => config.url instanceof URL ? config.url.toString() : byoUrl,
     upstreamUrl: byoUrl,
     proxyProviderId: "byo",
-    isSubscription: false
+    isSubscription: false,
+    byoActivity: buildByoRouteActivityMeta(deps, providerId, route.sessionId),
+    routeSessionId: _nullishCoalesce(route.sessionId, () => ( null))
   };
 }
 async function buildSubscriptionPlan3(res, route, deps, resolvedModel, isStream) {
@@ -5136,7 +5229,7 @@ async function buildSubscriptionPlan3(res, route, deps, resolvedModel, isStream)
     );
     return null;
   }
-  const upstreamUrl = _optionalChain([profile, 'access', _261 => _261.resolveUpstreamUrl, 'optionalCall', _262 => _262(resolvedModel)]);
+  const upstreamUrl = _optionalChain([profile, 'access', _284 => _284.resolveUpstreamUrl, 'optionalCall', _285 => _285(resolvedModel)]);
   if (!upstreamUrl) {
     writeError(res, 502, "Subscription profile is missing resolveUpstreamUrl");
     return null;
@@ -5165,7 +5258,8 @@ async function buildSubscriptionPlan3(res, route, deps, resolvedModel, isStream)
     resolveUrl: (config) => config.url instanceof URL ? config.url.toString() : typeof config.url === "string" ? config.url : upstreamUrl,
     upstreamUrl,
     proxyProviderId: providerId,
-    isSubscription: true
+    isSubscription: true,
+    routeSessionId: _nullishCoalesce(route.sessionId, () => ( null))
   };
 }
 async function runPipeline3(chatBody, plan) {
@@ -5201,10 +5295,31 @@ async function runPipeline3(chatBody, plan) {
     },
     fetchFn: (url, headers, body) => {
       console.log(`[ProviderProxy:chat] -> ${url} model=${resolvedModel} stream=${isStream}`);
-      return _chunkVFFCV4J6cjs.fetchUpstream.call(void 0, 
+      const sessionKey = plan.routeSessionId || void 0;
+      return _chunkCXRJMNJJcjs.fetchUpstream.call(void 0, 
         url,
         { method: "POST", headers, body: JSON.stringify(body) },
-        { providerId: plan.proxyProviderId, accountId: proxyAccountId }
+        {
+          providerId: plan.proxyProviderId,
+          accountId: proxyAccountId,
+          routeActivity: plan.isSubscription ? {
+            providerId: plan.proxyProviderId,
+            credentialKind: "subscription-account",
+            accountId: proxyAccountId,
+            endpoint: "chat",
+            sessionKey,
+            sessionSource: sessionKey ? "route-session-id" : "none",
+            model: resolvedModel
+          } : {
+            providerId: _nullishCoalesce(_optionalChain([plan, 'access', _286 => _286.byoActivity, 'optionalAccess', _287 => _287.providerId]), () => ( transformerProvider.name)),
+            credentialKind: "provider-key",
+            keyId: _optionalChain([plan, 'access', _288 => _288.byoActivity, 'optionalAccess', _289 => _289.resolveKeyId, 'call', _290 => _290()]),
+            endpoint: "chat",
+            sessionKey,
+            sessionSource: sessionKey ? "route-session-id" : "none",
+            model: resolvedModel
+          }
+        }
       ).then((r) => {
         rawStatus = r.status;
         return r;
@@ -5216,8 +5331,8 @@ async function runPipeline3(chatBody, plan) {
 }
 async function runPipelineWithPoolReporting3(chatBody, plan) {
   const first = await runPipeline3(chatBody, plan);
-  const outcome = await _optionalChain([plan, 'access', _263 => _263.auth, 'access', _264 => _264.onResult, 'optionalCall', _265 => _265(first.rawStatus)]);
-  if (_optionalChain([outcome, 'optionalAccess', _266 => _266.rebound])) {
+  const outcome = await _optionalChain([plan, 'access', _291 => _291.auth, 'access', _292 => _292.onResult, 'optionalCall', _293 => _293(first.rawStatus)]);
+  if (_optionalChain([outcome, 'optionalAccess', _294 => _294.rebound])) {
     console.log(
       "[ProviderProxy:chat] pool re-bound key after status",
       first.rawStatus,
@@ -5230,7 +5345,7 @@ async function runPipelineWithPoolReporting3(chatBody, plan) {
 async function runPipelineWithSubscriptionRetry2(chatBody, plan) {
   const first = await runPipeline3(chatBody, plan);
   if (first.rawStatus !== 401) return first;
-  const refreshed = await _optionalChain([plan, 'access', _267 => _267.auth, 'access', _268 => _268.onUnauthorized, 'optionalCall', _269 => _269()]);
+  const refreshed = await _optionalChain([plan, 'access', _295 => _295.auth, 'access', _296 => _296.onUnauthorized, 'optionalCall', _297 => _297()]);
   if (!refreshed) {
     console.warn("[ProviderProxy:chat] 401 not recoverable (onUnauthorized returned false)");
     return first;
@@ -5252,7 +5367,7 @@ function resolveRouteToken(req) {
   if (fromAuth) return fromAuth;
   const googKey = req.headers["x-goog-api-key"];
   const value = Array.isArray(googKey) ? googKey[0] : googKey;
-  return _optionalChain([value, 'optionalAccess', _270 => _270.trim, 'call', _271 => _271()]) || void 0;
+  return _optionalChain([value, 'optionalAccess', _298 => _298.trim, 'call', _299 => _299()]) || void 0;
 }
 async function routeRequest(req, res, routes, deps) {
   if (classifyAnthropicMessagesPath(req.url) !== null) {
@@ -5267,7 +5382,7 @@ async function routeRequest(req, res, routes, deps) {
   const method = req.method;
   const url = req.url;
   const openAIOperation = _chunkG4CZIUIBcjs.classifyOpenAIOperation.call(void 0, method, url);
-  if (_optionalChain([openAIOperation, 'optionalAccess', _272 => _272.owner]) === "extension") {
+  if (_optionalChain([openAIOperation, 'optionalAccess', _300 => _300.owner]) === "extension") {
     const registry = deps.openAIOperationRegistry;
     if (!registry) {
       _chunkG4CZIUIBcjs.writeOpenAIOperationError.call(void 0, res, _chunkG4CZIUIBcjs.unsupportedOpenAIOperation.call(void 0, openAIOperation));
@@ -5289,7 +5404,7 @@ async function routeRequest(req, res, routes, deps) {
     await handleAnthropicMessagesRequest(req, res, route, deps);
     return;
   }
-  if (_optionalChain([openAIOperation, 'optionalAccess', _273 => _273.id]) === "responses.create") {
+  if (_optionalChain([openAIOperation, 'optionalAccess', _301 => _301.id]) === "responses.create") {
     const abortScope = createResponsesAbortScope({ request: req, response: res });
     try {
       const rawBody = await readBody(req, abortScope.signal);
@@ -5320,7 +5435,7 @@ async function routeRequest(req, res, routes, deps) {
     }
     return;
   }
-  if (_optionalChain([openAIOperation, 'optionalAccess', _274 => _274.id]) === "chat.completions.create") {
+  if (_optionalChain([openAIOperation, 'optionalAccess', _302 => _302.id]) === "chat.completions.create") {
     const rawBody = await readBody(req);
     await handleOpenAIChatRequest(res, rawBody, route, deps);
     return;
@@ -5391,7 +5506,7 @@ var ProviderProxy = (_class8 = class {
     for (const cleanup of [...this.beforeStop]) {
       try {
         await cleanup();
-      } catch (e43) {
+      } catch (e44) {
       }
     }
     this.routes.clear();
@@ -5677,7 +5792,7 @@ var SYSTEM_ROUTE_LEASE_CLOCK = {
   now: () => Date.now(),
   setTimeout(callback, delayMs) {
     const timer = setTimeout(callback, delayMs);
-    _optionalChain([timer, 'access', _275 => _275.unref, 'optionalCall', _276 => _276()]);
+    _optionalChain([timer, 'access', _303 => _303.unref, 'optionalCall', _304 => _304()]);
     return timer;
   },
   clearTimeout(handle) {
@@ -5771,12 +5886,12 @@ var RouteLeaseManager = (_class10 = class {
     this.assertOpen();
     const route = {
       ...resolved,
-      sessionId: _nullishCoalesce(_optionalChain([request, 'access', _277 => _277.execution, 'optionalAccess', _278 => _278.sessionIdHash]), () => ( null)),
+      sessionId: _nullishCoalesce(_optionalChain([request, 'access', _305 => _305.execution, 'optionalAccess', _306 => _306.sessionIdHash]), () => ( null)),
       routeLease: {
         leaseId,
         consumer: request.consumer,
-        ..._optionalChain([request, 'access', _279 => _279.execution, 'optionalAccess', _280 => _280.runId]) ? { runId: request.execution.runId } : {},
-        ..._optionalChain([request, 'access', _281 => _281.execution, 'optionalAccess', _282 => _282.stageId]) ? { stageId: request.execution.stageId } : {}
+        ..._optionalChain([request, 'access', _307 => _307.execution, 'optionalAccess', _308 => _308.runId]) ? { runId: request.execution.runId } : {},
+        ..._optionalChain([request, 'access', _309 => _309.execution, 'optionalAccess', _310 => _310.stageId]) ? { stageId: request.execution.stageId } : {}
       }
     };
     const now = this.clock.now();
@@ -5831,7 +5946,7 @@ var RouteLeaseManager = (_class10 = class {
       this.active.set(leaseId, activeLease);
       this.idempotency.set(scope, { leaseId, payloadHash: input.payloadHash });
       published = true;
-      _optionalChain([this, 'access', _283 => _283.afterPublish, 'optionalCall', _284 => _284()]);
+      _optionalChain([this, 'access', _311 => _311.afterPublish, 'optionalCall', _312 => _312()]);
       if (this.closed) {
         this.finalize(activeLease, "released");
         throw new RouteLeaseError("daemon_not_ready", "route lease manager is shutting down");
@@ -5868,7 +5983,7 @@ var RouteLeaseManager = (_class10 = class {
     if (!lease) {
       this.pruneTombstones();
       const known = this.tombstones.get(leaseId);
-      if (_optionalChain([known, 'optionalAccess', _285 => _285.metadata, 'access', _286 => _286.status]) === "expired") {
+      if (_optionalChain([known, 'optionalAccess', _313 => _313.metadata, 'access', _314 => _314.status]) === "expired") {
         throw new RouteLeaseError("lease_expired", "route lease has expired");
       }
       throw new RouteLeaseError("lease_not_found", "route lease was not found");
@@ -5905,7 +6020,7 @@ var RouteLeaseManager = (_class10 = class {
       try {
         this.finalize(lease, "released");
       } catch (error) {
-        _optionalChain([this, 'access', _287 => _287.logger, 'optionalAccess', _288 => _288.warn, 'call', _289 => _289("route lease cleanup failed during shutdown", { leaseId: lease.leaseId, error: safeErrorName(error) })]);
+        _optionalChain([this, 'access', _315 => _315.logger, 'optionalAccess', _316 => _316.warn, 'call', _317 => _317("route lease cleanup failed during shutdown", { leaseId: lease.leaseId, error: safeErrorName(error) })]);
       }
     }
   }
@@ -5951,7 +6066,7 @@ var RouteLeaseManager = (_class10 = class {
     try {
       this.routePort.removeRoute(routeToken);
     } catch (error) {
-      _optionalChain([this, 'access', _290 => _290.logger, 'optionalAccess', _291 => _291.warn, 'call', _292 => _292("route lease route cleanup failed", { leaseId, error: safeErrorName(error) })]);
+      _optionalChain([this, 'access', _318 => _318.logger, 'optionalAccess', _319 => _319.warn, 'call', _320 => _320("route lease route cleanup failed", { leaseId, error: safeErrorName(error) })]);
     }
   }
   pruneTombstones() {
@@ -5976,28 +6091,33 @@ function nonBlank(value) {
   return typeof value === "string" && value.trim() !== "";
 }
 function gatewayBindingAllowsKey(binding, apiKeyId) {
-  const scope = _nullishCoalesce(binding.keyScope, () => ( (_optionalChain([binding, 'access', _293 => _293.apiKeyIds, 'optionalAccess', _294 => _294.length]) ? "selected" : "all")));
-  return scope === "all" || Boolean(_optionalChain([binding, 'access', _295 => _295.apiKeyIds, 'optionalAccess', _296 => _296.includes, 'call', _297 => _297(apiKeyId)]));
+  const scope = _nullishCoalesce(binding.keyScope, () => ( (_optionalChain([binding, 'access', _321 => _321.apiKeyIds, 'optionalAccess', _322 => _322.length]) ? "selected" : "all")));
+  return scope === "all" || Boolean(_optionalChain([binding, 'access', _323 => _323.apiKeyIds, 'optionalAccess', _324 => _324.includes, 'call', _325 => _325(apiKeyId)]));
 }
 function wildcardMatches(pattern, value) {
   const escaped = pattern.split("*").map((part) => part.replace(/[.*+?^${}()|[\]\\]/gu, "\\$&")).join(".*");
   return new RegExp(`^${escaped}$`, "iu").test(value);
 }
-function resolveGatewayModelMapping(mappings, requestedModel) {
+function resolveGatewayModelMappingRow(mappings, requestedModel) {
   if (!nonBlank(requestedModel)) return void 0;
   const wanted = requestedModel.trim();
   const exact = (_nullishCoalesce(mappings, () => ( []))).find(
     (mapping) => nonBlank(mapping.source) && !mapping.source.includes("*") && mapping.source.trim().toLocaleLowerCase() === wanted.toLocaleLowerCase()
   );
-  if (exact && nonBlank(exact.target)) return exact.target.trim();
+  if (exact && nonBlank(exact.target)) {
+    return { target: exact.target.trim(), effort: exact.effort };
+  }
   const wildcard = (_nullishCoalesce(mappings, () => ( []))).find(
     (mapping) => nonBlank(mapping.source) && mapping.source.includes("*") && wildcardMatches(mapping.source.trim(), wanted)
   );
-  return wildcard && nonBlank(wildcard.target) ? wildcard.target.trim() : void 0;
+  return wildcard && nonBlank(wildcard.target) ? { target: wildcard.target.trim(), effort: wildcard.effort } : void 0;
+}
+function resolveGatewayModelMapping(mappings, requestedModel) {
+  return _optionalChain([resolveGatewayModelMappingRow, 'call', _326 => _326(mappings, requestedModel), 'optionalAccess', _327 => _327.target]);
 }
 function routeCanServe(binding, requestedModel, role) {
   if (binding.modelMode === "passthrough") return nonBlank(requestedModel);
-  if (_optionalChain([binding, 'access', _298 => _298.modelMappings, 'optionalAccess', _299 => _299.length])) {
+  if (_optionalChain([binding, 'access', _328 => _328.modelMappings, 'optionalAccess', _329 => _329.length])) {
     return nonBlank(resolveGatewayModelMapping(binding.modelMappings, requestedModel));
   }
   if (_chunk57Y2EA2Gcjs.isKindMappedEndpoint.call(void 0, binding.endpoint)) {
@@ -6015,7 +6135,7 @@ function routeCanServe(binding, requestedModel, role) {
   if (binding.endpoint === "chat") {
     if (!requestedModel) return false;
     const wanted = requestedModel.trim().toLowerCase();
-    return (_nullishCoalesce(binding.models, () => ( []))).some((ref) => _optionalChain([modelIdOf, 'call', _300 => _300(ref), 'optionalAccess', _301 => _301.toLowerCase, 'call', _302 => _302()]) === wanted);
+    return (_nullishCoalesce(binding.models, () => ( []))).some((ref) => _optionalChain([modelIdOf, 'call', _330 => _330(ref), 'optionalAccess', _331 => _331.toLowerCase, 'call', _332 => _332()]) === wanted);
   }
   return role === "background" ? nonBlank(binding.backgroundModel) : nonBlank(binding.defaultModel);
 }
@@ -6066,10 +6186,12 @@ function gatewayBindingToEndpointConfig(binding, requestedModel) {
     endpoint: binding.endpoint,
     useSubscription: target.kind !== "provider"
   };
-  const usesGenericModelHandling = binding.modelMode === "passthrough" || Boolean(_optionalChain([binding, 'access', _303 => _303.modelMappings, 'optionalAccess', _304 => _304.length]));
-  const dynamicModel = binding.modelMode === "passthrough" ? requestedModel : resolveGatewayModelMapping(binding.modelMappings, requestedModel);
+  const usesGenericModelHandling = binding.modelMode === "passthrough" || Boolean(_optionalChain([binding, 'access', _333 => _333.modelMappings, 'optionalAccess', _334 => _334.length]));
+  const winningMapping = binding.modelMode === "passthrough" ? void 0 : resolveGatewayModelMappingRow(binding.modelMappings, requestedModel);
+  const dynamicModel = binding.modelMode === "passthrough" ? requestedModel : _optionalChain([winningMapping, 'optionalAccess', _335 => _335.target]);
   if (usesGenericModelHandling) {
     if (nonBlank(dynamicModel)) applySingleModel(config, binding, dynamicModel);
+    if (_optionalChain([winningMapping, 'optionalAccess', _336 => _336.effort])) config.reasoningEffort = winningMapping.effort;
   } else if (_chunk57Y2EA2Gcjs.isKindMappedEndpoint.call(void 0, binding.endpoint)) {
     config.modelMap = Object.fromEntries(
       Object.entries(_nullishCoalesce(binding.modelMap, () => ( {}))).map(([kind, ref]) => [kind, targetRef(target, ref)])
@@ -6101,7 +6223,7 @@ function candidateGatewayBindings(bindings, apiKeyId, endpoint) {
   const candidates = (_nullishCoalesce(bindings, () => ( []))).filter(
     (binding) => binding.enabled && binding.endpoint === endpoint && gatewayBindingAllowsKey(binding, apiKeyId)
   );
-  const scopeOf = (binding) => _nullishCoalesce(binding.keyScope, () => ( (_optionalChain([binding, 'access', _305 => _305.apiKeyIds, 'optionalAccess', _306 => _306.length]) ? "selected" : "all")));
+  const scopeOf = (binding) => _nullishCoalesce(binding.keyScope, () => ( (_optionalChain([binding, 'access', _337 => _337.apiKeyIds, 'optionalAccess', _338 => _338.length]) ? "selected" : "all")));
   const scoped = candidates.filter((binding) => scopeOf(binding) === "selected");
   const pool = scoped.length > 0 ? scoped : candidates.filter((binding) => scopeOf(binding) === "all");
   return pool.sort(
@@ -6155,7 +6277,7 @@ function syntheticBinding(request) {
   };
 }
 function transformerRegistered(llmConfig, name) {
-  return Boolean(_optionalChain([llmConfig, 'access', _307 => _307.getTransformerService, 'call', _308 => _308(), 'optionalAccess', _309 => _309.getTransformer, 'call', _310 => _310(name)]));
+  return Boolean(_optionalChain([llmConfig, 'access', _339 => _339.getTransformerService, 'call', _340 => _340(), 'optionalAccess', _341 => _341.getTransformer, 'call', _342 => _342(name)]));
 }
 var RouteLeaseTargetResolver = class {
   constructor(llmConfig, options = {}) {
@@ -6174,7 +6296,7 @@ var RouteLeaseTargetResolver = class {
       ingressFormat: runtime.ingressFormat,
       llmConfig: this.llmConfig,
       requestedModel: request.model,
-      sessionId: _nullishCoalesce(_optionalChain([request, 'access', _311 => _311.execution, 'optionalAccess', _312 => _312.sessionIdHash]), () => ( null))
+      sessionId: _nullishCoalesce(_optionalChain([request, 'access', _343 => _343.execution, 'optionalAccess', _344 => _344.sessionIdHash]), () => ( null))
     });
     if (!result.ok) {
       throw new RouteLeaseError(
@@ -6197,7 +6319,7 @@ var RouteLeaseTargetResolver = class {
       throw new RouteLeaseError("model_not_configured", "model is not configured for the provider");
     }
     if (target.keyId) {
-      const availability = await _optionalChain([this, 'access', _313 => _313.options, 'access', _314 => _314.providerKeys, 'optionalAccess', _315 => _315.getKeyAvailability, 'optionalCall', _316 => _316(
+      const availability = await _optionalChain([this, 'access', _345 => _345.options, 'access', _346 => _346.providerKeys, 'optionalAccess', _347 => _347.getKeyAvailability, 'optionalCall', _348 => _348(
         target.providerId,
         target.keyId
       )]);
@@ -6210,9 +6332,9 @@ var RouteLeaseTargetResolver = class {
       }
     } else {
       const directKey = resolveEnvKey(provider.api_key);
-      const poolAvailability = await _optionalChain([this, 'access', _317 => _317.options, 'access', _318 => _318.providerKeys, 'optionalAccess', _319 => _319.getPoolAvailability, 'optionalCall', _320 => _320(target.providerId)]);
+      const poolAvailability = await _optionalChain([this, 'access', _349 => _349.options, 'access', _350 => _350.providerKeys, 'optionalAccess', _351 => _351.getPoolAvailability, 'optionalCall', _352 => _352(target.providerId)]);
       const poolReady = poolAvailability ? poolAvailability.outcome === "usable" : this.options.providerKeys ? await this.options.providerKeys.hasUsableKeys(target.providerId) : false;
-      if (!directKey && _optionalChain([poolAvailability, 'optionalAccess', _321 => _321.outcome]) === "exhausted") {
+      if (!directKey && _optionalChain([poolAvailability, 'optionalAccess', _353 => _353.outcome]) === "exhausted") {
         throw new RouteLeaseError("upstream_exhausted", "provider key pool is temporarily exhausted", {
           retryAfterSeconds: poolAvailability.retryAfterSeconds
         });
@@ -6236,14 +6358,14 @@ var RouteLeaseTargetResolver = class {
   }
   async preflightSubscription(target, model) {
     const registry = _chunkQBZJ7P2Tcjs.getSubscriptionRegistryForOutbound.call(void 0, );
-    const profile = _nullishCoalesce(_optionalChain([registry, 'optionalAccess', _322 => _322.getProfile, 'call', _323 => _323(target.providerId)]), () => ( null));
+    const profile = _nullishCoalesce(_optionalChain([registry, 'optionalAccess', _354 => _354.getProfile, 'call', _355 => _355(target.providerId)]), () => ( null));
     if (!profile) throw new RouteLeaseError("upstream_not_found", "subscription provider was not found");
-    await _optionalChain([this, 'access', _324 => _324.options, 'access', _325 => _325.subscriptions, 'optionalAccess', _326 => _326.assertAvailable, 'call', _327 => _327(target, model)]);
-    const names = _nullishCoalesce(_nullishCoalesce(_optionalChain([profile, 'access', _328 => _328.resolveProviderTransformerNames, 'optionalCall', _329 => _329(model)]), () => ( profile.providerTransformerNames)), () => ( []));
+    await _optionalChain([this, 'access', _356 => _356.options, 'access', _357 => _357.subscriptions, 'optionalAccess', _358 => _358.assertAvailable, 'call', _359 => _359(target, model)]);
+    const names = _nullishCoalesce(_nullishCoalesce(_optionalChain([profile, 'access', _360 => _360.resolveProviderTransformerNames, 'optionalCall', _361 => _361(model)]), () => ( profile.providerTransformerNames)), () => ( []));
     if (names.some((name) => !transformerRegistered(this.llmConfig, name))) {
       throw new RouteLeaseError("format_unsupported", "a required transformer is unavailable");
     }
-    if (_optionalChain([profile, 'access', _330 => _330.modelTransformerNames, 'optionalAccess', _331 => _331.some, 'call', _332 => _332((name) => !transformerRegistered(this.llmConfig, name))])) {
+    if (_optionalChain([profile, 'access', _362 => _362.modelTransformerNames, 'optionalAccess', _363 => _363.some, 'call', _364 => _364((name) => !transformerRegistered(this.llmConfig, name))])) {
       throw new RouteLeaseError("format_unsupported", "a required model transformer is unavailable");
     }
   }
@@ -6265,7 +6387,7 @@ function createResponsesCompactHandler(options = {}) {
         const parsed = JSON.parse(rawBody);
         if (!parsed || typeof parsed !== "object" || Array.isArray(parsed)) throw new Error();
         body = parsed;
-      } catch (e44) {
+      } catch (e45) {
         throw new (0, _chunkG4CZIUIBcjs.OpenAIOperationError)({
           status: 400,
           code: "invalid_request_body",
@@ -6356,7 +6478,7 @@ var BoundedSseFrameDecoder = class {
     let decoded;
     try {
       decoded = this.#decoder.decode(chunk, { stream: true });
-    } catch (e45) {
+    } catch (e46) {
       protocolFailure2();
     }
     return this.#append(decoded, false);
@@ -6365,7 +6487,7 @@ var BoundedSseFrameDecoder = class {
     let tail;
     try {
       tail = this.#decoder.decode();
-    } catch (e46) {
+    } catch (e47) {
       protocolFailure2();
     }
     const frames = this.#append(tail, true);
@@ -6495,7 +6617,7 @@ var HostedImageSsePipeline = class {
     if (this.#cancelPromise) return this.#cancelPromise;
     this.#cancelled = true;
     this.#cancelPromise = Promise.allSettled([
-      _nullishCoalesce(_optionalChain([this, 'access', _333 => _333.#reader, 'optionalAccess', _334 => _334.cancel, 'call', _335 => _335(reason)]), () => ( Promise.resolve())),
+      _nullishCoalesce(_optionalChain([this, 'access', _365 => _365.#reader, 'optionalAccess', _366 => _366.cancel, 'call', _367 => _367(reason)]), () => ( Promise.resolve())),
       this.#closeActiveImageIterator(),
       this.#options.onCancel()
     ]).then(() => void 0);
@@ -6509,7 +6631,7 @@ var HostedImageSsePipeline = class {
     let parsed;
     try {
       parsed = JSON.parse(frame2.data);
-    } catch (e47) {
+    } catch (e48) {
       protocolFailure2();
     }
     if (!isRecord8(parsed) || typeof parsed.type !== "string" || parsed.type.length > 256) {
@@ -6866,7 +6988,7 @@ data: ${JSON.stringify(event)}
   #closeActiveImageIterator() {
     if (this.#activeImageIteratorClose) return this.#activeImageIteratorClose;
     const iterator = this.#activeImageIterator;
-    if (!_optionalChain([iterator, 'optionalAccess', _336 => _336.return])) return Promise.resolve();
+    if (!_optionalChain([iterator, 'optionalAccess', _368 => _368.return])) return Promise.resolve();
     this.#activeImageIteratorClose = Promise.resolve(iterator.return()).then(
       () => void 0,
       () => void 0
@@ -6903,7 +7025,7 @@ function createNativeResponsesHostedImageSseResponse(options) {
     },
     async cancel(reason) {
       await pipeline.cancel(reason);
-      await _optionalChain([iterator, 'access', _337 => _337.return, 'optionalCall', _338 => _338()]);
+      await _optionalChain([iterator, 'access', _369 => _369.return, 'optionalCall', _370 => _370()]);
     }
   });
   return transformedResponse(options.upstream, body);
@@ -6975,7 +7097,7 @@ function parseJsonObject(bytes) {
   let text;
   try {
     text = new TextDecoder("utf-8", { fatal: true }).decode(bytes);
-  } catch (e48) {
+  } catch (e49) {
     protocolFailure3();
   }
   try {
@@ -7148,7 +7270,7 @@ var NativeResponsesHostedImageRequestLease = class {
   #wrapSse(input) {
     const status = _nullishCoalesce(input.rawStatus, () => ( input.response.status));
     if (status < 200 || status >= 300) return input.response;
-    const hasInheritedContext = _optionalChain([this, 'access', _339 => _339.#input, 'access', _340 => _340.previousHostedImageState, 'optionalAccess', _341 => _341.hasImageContext]) === true;
+    const hasInheritedContext = _optionalChain([this, 'access', _371 => _371.#input, 'access', _372 => _372.previousHostedImageState, 'optionalAccess', _373 => _373.hasImageContext]) === true;
     return createNativeResponsesHostedImageSseResponse({
       upstream: input.response,
       signal: this.#input.signal,
@@ -7174,7 +7296,7 @@ var NativeResponsesHostedImageRequestLease = class {
           signal: this.#input.signal,
           ...this.#input.authorizedPreviousResponseId ? {
             authorizedPreviousResponseId: this.#input.authorizedPreviousResponseId,
-            authorizedPreviousResponseKnownEmpty: _optionalChain([this, 'access', _342 => _342.#input, 'access', _343 => _343.previousHostedImageState, 'optionalAccess', _344 => _344.hasImageContext]) !== true
+            authorizedPreviousResponseKnownEmpty: _optionalChain([this, 'access', _374 => _374.#input, 'access', _375 => _375.previousHostedImageState, 'optionalAccess', _376 => _376.hasImageContext]) !== true
           } : {},
           mainProviderId: this.#input.mainProviderId,
           ...input.selectedMainAccountId ? { selectedMainAccountId: input.selectedMainAccountId } : {}
@@ -7209,7 +7331,7 @@ var NativeResponsesHostedImageRequestLease = class {
       if (!UPSTREAM_CALL_ID_PATTERN4.test(selected.upstreamCallId)) protocolFailure3();
     }
     this.#runtime.validateSelection(this.#admission, parsedSelection.selection);
-    const hasInheritedContext = _optionalChain([this, 'access', _345 => _345.#input, 'access', _346 => _346.previousHostedImageState, 'optionalAccess', _347 => _347.hasImageContext]) === true;
+    const hasInheritedContext = _optionalChain([this, 'access', _377 => _377.#input, 'access', _378 => _378.previousHostedImageState, 'optionalAccess', _379 => _379.hasImageContext]) === true;
     const requiresScope = parsedSelection.imageCalls.length > 0 || hasInheritedContext || this.#admission.explicitCallIds.length > 0;
     const publicOutput = [...upstreamBody.output];
     const pendingReceipts = [];
@@ -7226,7 +7348,7 @@ var NativeResponsesHostedImageRequestLease = class {
         signal: this.#input.signal,
         ...this.#input.authorizedPreviousResponseId ? {
           authorizedPreviousResponseId: this.#input.authorizedPreviousResponseId,
-          authorizedPreviousResponseKnownEmpty: _optionalChain([this, 'access', _348 => _348.#input, 'access', _349 => _349.previousHostedImageState, 'optionalAccess', _350 => _350.hasImageContext]) !== true
+          authorizedPreviousResponseKnownEmpty: _optionalChain([this, 'access', _380 => _380.#input, 'access', _381 => _381.previousHostedImageState, 'optionalAccess', _382 => _382.hasImageContext]) !== true
         } : {},
         mainProviderId: this.#input.mainProviderId,
         ...input.selectedMainAccountId ? { selectedMainAccountId: input.selectedMainAccountId } : {}
@@ -7272,7 +7394,7 @@ function createNativeResponsesHostedImageIngress(runtimeFactory, options = {}) {
   const createRequestId = _nullishCoalesce(options.createRequestId, () => ( (() => `hosted-image-${_crypto.randomUUID.call(void 0, )}`)));
   return Object.freeze({
     prepare: async (input) => {
-      if (input.operation !== "create" || input.profile !== "native" || !hasImageOwnedResponsesInput(input.body) && !_optionalChain([input, 'access', _351 => _351.previousHostedImageState, 'optionalAccess', _352 => _352.hasImageContext]) && !_optionalChain([input, 'access', _353 => _353.previousHostedImageState, 'optionalAccess', _354 => _354.pendingReceipts, 'access', _355 => _355.length])) {
+      if (input.operation !== "create" || input.profile !== "native" || !hasImageOwnedResponsesInput(input.body) && !_optionalChain([input, 'access', _383 => _383.previousHostedImageState, 'optionalAccess', _384 => _384.hasImageContext]) && !_optionalChain([input, 'access', _385 => _385.previousHostedImageState, 'optionalAccess', _386 => _386.pendingReceipts, 'access', _387 => _387.length])) {
         return null;
       }
       if (!input.hostedImageGenerationAllowed) {
@@ -7305,7 +7427,7 @@ function createNativeResponsesHostedImageIngress(runtimeFactory, options = {}) {
         const selection = prepareNativeResponsesImageSelection({
           body: input.body,
           admission,
-          pendingReceipts: _optionalChain([input, 'access', _356 => _356.previousHostedImageState, 'optionalAccess', _357 => _357.pendingReceipts]),
+          pendingReceipts: _optionalChain([input, 'access', _388 => _388.previousHostedImageState, 'optionalAccess', _389 => _389.pendingReceipts]),
           ...options.createSelectorName ? { createSelectorName: options.createSelectorName } : {}
         });
         return new NativeResponsesHostedImageRequestLease({
@@ -7964,9 +8086,9 @@ function stringList(value, cap) {
 }
 function tavilyConfig(value) {
   const raw = record4(value);
-  const apiKey = configString(_optionalChain([raw, 'optionalAccess', _358 => _358["apiKey"]]));
+  const apiKey = configString(_optionalChain([raw, 'optionalAccess', _390 => _390["apiKey"]]));
   if (!apiKey) return void 0;
-  const apiHost = configString(_optionalChain([raw, 'optionalAccess', _359 => _359["apiHost"]]));
+  const apiHost = configString(_optionalChain([raw, 'optionalAccess', _391 => _391["apiHost"]]));
   return { apiKey, ...apiHost ? { apiHost } : {} };
 }
 function jinaConfig(value) {
@@ -7978,10 +8100,10 @@ function jinaConfig(value) {
 }
 function searxngConfig(value) {
   const raw = record4(value);
-  const apiHost = configString(_optionalChain([raw, 'optionalAccess', _360 => _360["apiHost"]]));
+  const apiHost = configString(_optionalChain([raw, 'optionalAccess', _392 => _392["apiHost"]]));
   if (!apiHost) return void 0;
-  const basicAuthUsername = configString(_optionalChain([raw, 'optionalAccess', _361 => _361["basicAuthUsername"]]));
-  const basicAuthPassword = configString(_optionalChain([raw, 'optionalAccess', _362 => _362["basicAuthPassword"]]));
+  const basicAuthUsername = configString(_optionalChain([raw, 'optionalAccess', _393 => _393["basicAuthUsername"]]));
+  const basicAuthPassword = configString(_optionalChain([raw, 'optionalAccess', _394 => _394["basicAuthPassword"]]));
   return {
     apiHost,
     ...basicAuthUsername ? { basicAuthUsername } : {},
@@ -7990,9 +8112,9 @@ function searxngConfig(value) {
 }
 function zhipuConfig(value) {
   const raw = record4(value);
-  const apiKey = configString(_optionalChain([raw, 'optionalAccess', _363 => _363["apiKey"]]));
+  const apiKey = configString(_optionalChain([raw, 'optionalAccess', _395 => _395["apiKey"]]));
   if (!apiKey) return void 0;
-  const apiHost = configString(_optionalChain([raw, 'optionalAccess', _364 => _364["apiHost"]]));
+  const apiHost = configString(_optionalChain([raw, 'optionalAccess', _396 => _396["apiHost"]]));
   return { apiKey, ...apiHost ? { apiHost } : {} };
 }
 function normalizeSearchApiProviderConfigs(value) {
@@ -8144,11 +8266,11 @@ var DEFAULT_ACCOUNT_HEALTH = {
   overloadCooldownMs: 10 * 6e4
 };
 function normalizeAccountHealth(raw) {
-  const ah = _optionalChain([raw, 'optionalAccess', _365 => _365.accountHealth]);
+  const ah = _optionalChain([raw, 'optionalAccess', _397 => _397.accountHealth]);
   return {
-    overloadCooldownEnabled: _optionalChain([ah, 'optionalAccess', _366 => _366.overloadCooldownEnabled]) !== false,
+    overloadCooldownEnabled: _optionalChain([ah, 'optionalAccess', _398 => _398.overloadCooldownEnabled]) !== false,
     overloadCooldownMs: clampNumber(
-      _optionalChain([ah, 'optionalAccess', _367 => _367.overloadCooldownMs]),
+      _optionalChain([ah, 'optionalAccess', _399 => _399.overloadCooldownMs]),
       6e4,
       36e5,
       DEFAULT_ACCOUNT_HEALTH.overloadCooldownMs
@@ -8170,25 +8292,25 @@ var DEFAULT_ALLOWANCE_SCHEDULING = {
   priorityPenalty: 100
 };
 function normalizeAllowanceScheduling(raw) {
-  const value = _optionalChain([raw, 'optionalAccess', _368 => _368.allowanceScheduling]);
+  const value = _optionalChain([raw, 'optionalAccess', _400 => _400.allowanceScheduling]);
   const demoteAtPercent = clampNumber(
-    _optionalChain([value, 'optionalAccess', _369 => _369.demoteAtPercent]),
+    _optionalChain([value, 'optionalAccess', _401 => _401.demoteAtPercent]),
     0,
     100,
     DEFAULT_ALLOWANCE_SCHEDULING.demoteAtPercent
   );
   const requestedPause = clampNumber(
-    _optionalChain([value, 'optionalAccess', _370 => _370.pauseAtPercent]),
+    _optionalChain([value, 'optionalAccess', _402 => _402.pauseAtPercent]),
     0,
     100,
     DEFAULT_ALLOWANCE_SCHEDULING.pauseAtPercent
   );
   return {
-    enabled: _optionalChain([value, 'optionalAccess', _371 => _371.enabled]) === true,
+    enabled: _optionalChain([value, 'optionalAccess', _403 => _403.enabled]) === true,
     demoteAtPercent,
     pauseAtPercent: Math.max(demoteAtPercent, requestedPause),
     priorityPenalty: Math.trunc(clampNumber(
-      _optionalChain([value, 'optionalAccess', _372 => _372.priorityPenalty]),
+      _optionalChain([value, 'optionalAccess', _404 => _404.priorityPenalty]),
       1,
       1e3,
       DEFAULT_ALLOWANCE_SCHEDULING.priorityPenalty
@@ -8196,29 +8318,29 @@ function normalizeAllowanceScheduling(raw) {
   };
 }
 function normalizeAccountProbe(raw) {
-  const ap = _optionalChain([raw, 'optionalAccess', _373 => _373.accountProbe]);
+  const ap = _optionalChain([raw, 'optionalAccess', _405 => _405.accountProbe]);
   return {
-    enabled: _optionalChain([ap, 'optionalAccess', _374 => _374.enabled]) === true,
-    intervalMs: clampNumber(_optionalChain([ap, 'optionalAccess', _375 => _375.intervalMs]), 6e4, 864e5, DEFAULT_ACCOUNT_PROBE.intervalMs),
-    onlyMultiAccount: _optionalChain([ap, 'optionalAccess', _376 => _376.onlyMultiAccount]) !== false,
-    timeoutMs: clampNumber(_optionalChain([ap, 'optionalAccess', _377 => _377.timeoutMs]), 1e3, 6e4, DEFAULT_ACCOUNT_PROBE.timeoutMs),
+    enabled: _optionalChain([ap, 'optionalAccess', _406 => _406.enabled]) === true,
+    intervalMs: clampNumber(_optionalChain([ap, 'optionalAccess', _407 => _407.intervalMs]), 6e4, 864e5, DEFAULT_ACCOUNT_PROBE.intervalMs),
+    onlyMultiAccount: _optionalChain([ap, 'optionalAccess', _408 => _408.onlyMultiAccount]) !== false,
+    timeoutMs: clampNumber(_optionalChain([ap, 'optionalAccess', _409 => _409.timeoutMs]), 1e3, 6e4, DEFAULT_ACCOUNT_PROBE.timeoutMs),
     historySize: Math.trunc(
-      clampNumber(_optionalChain([ap, 'optionalAccess', _378 => _378.historySize]), 1, 200, DEFAULT_ACCOUNT_PROBE.historySize)
+      clampNumber(_optionalChain([ap, 'optionalAccess', _410 => _410.historySize]), 1, 200, DEFAULT_ACCOUNT_PROBE.historySize)
     ),
-    staggerMs: clampNumber(_optionalChain([ap, 'optionalAccess', _379 => _379.staggerMs]), 0, 6e4, DEFAULT_ACCOUNT_PROBE.staggerMs)
+    staggerMs: clampNumber(_optionalChain([ap, 'optionalAccess', _411 => _411.staggerMs]), 0, 6e4, DEFAULT_ACCOUNT_PROBE.staggerMs)
   };
 }
 function normalizeAudit(raw) {
-  const a = _optionalChain([raw, 'optionalAccess', _380 => _380.audit]);
+  const a = _optionalChain([raw, 'optionalAccess', _412 => _412.audit]);
   return {
-    enabled: _optionalChain([a, 'optionalAccess', _381 => _381.enabled]) === true,
-    captureBodies: _optionalChain([a, 'optionalAccess', _382 => _382.captureBodies]) === true,
-    maxBodyBytes: normalizeMaxBodyBytes(_optionalChain([a, 'optionalAccess', _383 => _383.maxBodyBytes])),
+    enabled: _optionalChain([a, 'optionalAccess', _413 => _413.enabled]) === true,
+    captureBodies: _optionalChain([a, 'optionalAccess', _414 => _414.captureBodies]) === true,
+    maxBodyBytes: normalizeMaxBodyBytes(_optionalChain([a, 'optionalAccess', _415 => _415.maxBodyBytes])),
     retentionDays: Math.trunc(
-      clampNumber(_optionalChain([a, 'optionalAccess', _384 => _384.retentionDays]), 1, 365, _audittypes.DEFAULT_AUDIT_CONFIG.retentionDays)
+      clampNumber(_optionalChain([a, 'optionalAccess', _416 => _416.retentionDays]), 1, 365, _audittypes.DEFAULT_AUDIT_CONFIG.retentionDays)
     ),
-    compactStreamingBodies: _optionalChain([a, 'optionalAccess', _385 => _385.compactStreamingBodies]) === true,
-    trustForwardedFor: _optionalChain([a, 'optionalAccess', _386 => _386.trustForwardedFor]) === true
+    compactStreamingBodies: _optionalChain([a, 'optionalAccess', _417 => _417.compactStreamingBodies]) === true,
+    trustForwardedFor: _optionalChain([a, 'optionalAccess', _418 => _418.trustForwardedFor]) === true
   };
 }
 function normalizeMaxBodyBytes(value) {
@@ -8229,26 +8351,26 @@ function normalizeMaxBodyBytes(value) {
   return Math.trunc(Math.min(1048576, value));
 }
 function normalizeBilling(raw) {
-  const b = _optionalChain([raw, 'optionalAccess', _387 => _387.billing]);
+  const b = _optionalChain([raw, 'optionalAccess', _419 => _419.billing]);
   const config = {
-    enabled: _optionalChain([b, 'optionalAccess', _388 => _388.enabled]) === true,
+    enabled: _optionalChain([b, 'optionalAccess', _420 => _420.enabled]) === true,
     maxRetryAgeMs: Math.trunc(
-      clampNumber(_optionalChain([b, 'optionalAccess', _389 => _389.maxRetryAgeMs]), 6e4, 2592e6, _billingtypes.DEFAULT_BILLING_CONFIG.maxRetryAgeMs)
+      clampNumber(_optionalChain([b, 'optionalAccess', _421 => _421.maxRetryAgeMs]), 6e4, 2592e6, _billingtypes.DEFAULT_BILLING_CONFIG.maxRetryAgeMs)
     )
   };
-  if (typeof _optionalChain([b, 'optionalAccess', _390 => _390.endpoint]) === "string" && b.endpoint.trim()) config.endpoint = b.endpoint.trim();
-  if (typeof _optionalChain([b, 'optionalAccess', _391 => _391.secret]) === "string" && b.secret.length > 0) config.secret = b.secret;
+  if (typeof _optionalChain([b, 'optionalAccess', _422 => _422.endpoint]) === "string" && b.endpoint.trim()) config.endpoint = b.endpoint.trim();
+  if (typeof _optionalChain([b, 'optionalAccess', _423 => _423.secret]) === "string" && b.secret.length > 0) config.secret = b.secret;
   return config;
 }
 var DEFAULT_FINGERPRINT = { enabled: false };
 function normalizeFingerprint(raw) {
-  const f = _optionalChain([raw, 'optionalAccess', _392 => _392.fingerprint]);
-  const out = { enabled: _optionalChain([f, 'optionalAccess', _393 => _393.enabled]) === true };
-  if (typeof _optionalChain([f, 'optionalAccess', _394 => _394.ua]) === "string" && f.ua.trim().length > 0) out.ua = f.ua.trim();
+  const f = _optionalChain([raw, 'optionalAccess', _424 => _424.fingerprint]);
+  const out = { enabled: _optionalChain([f, 'optionalAccess', _425 => _425.enabled]) === true };
+  if (typeof _optionalChain([f, 'optionalAccess', _426 => _426.ua]) === "string" && f.ua.trim().length > 0) out.ua = f.ua.trim();
   return out;
 }
 function normalizeVoucher(raw) {
-  return { enabled: _optionalChain([raw, 'optionalAccess', _395 => _395.voucher, 'optionalAccess', _396 => _396.enabled]) === true };
+  return { enabled: _optionalChain([raw, 'optionalAccess', _427 => _427.voucher, 'optionalAccess', _428 => _428.enabled]) === true };
 }
 var DEFAULT_ANTHROPIC_SEGMENT = {
   countTokens: { mode: "auto", estimateBudgetMs: 2e3 },
@@ -8261,34 +8383,34 @@ var DEFAULT_ANTHROPIC_SEGMENT = {
 var COUNT_TOKENS_MODES = ["auto", "passthrough", "estimate", "reject"];
 var MODELS_SHAPES = ["auto", "anthropic", "openai"];
 function normalizeAnthropicSegment(raw) {
-  const a = _optionalChain([raw, 'optionalAccess', _397 => _397.anthropic]);
+  const a = _optionalChain([raw, 'optionalAccess', _429 => _429.anthropic]);
   return {
     countTokens: {
-      mode: COUNT_TOKENS_MODES.includes(String(_optionalChain([a, 'optionalAccess', _398 => _398.countTokens, 'optionalAccess', _399 => _399.mode]))) ? _optionalChain([a, 'optionalAccess', _400 => _400.countTokens, 'optionalAccess', _401 => _401.mode]) : DEFAULT_ANTHROPIC_SEGMENT.countTokens.mode,
+      mode: COUNT_TOKENS_MODES.includes(String(_optionalChain([a, 'optionalAccess', _430 => _430.countTokens, 'optionalAccess', _431 => _431.mode]))) ? _optionalChain([a, 'optionalAccess', _432 => _432.countTokens, 'optionalAccess', _433 => _433.mode]) : DEFAULT_ANTHROPIC_SEGMENT.countTokens.mode,
       estimateBudgetMs: clampNumber(
-        _optionalChain([a, 'optionalAccess', _402 => _402.countTokens, 'optionalAccess', _403 => _403.estimateBudgetMs]),
+        _optionalChain([a, 'optionalAccess', _434 => _434.countTokens, 'optionalAccess', _435 => _435.estimateBudgetMs]),
         100,
         6e4,
         DEFAULT_ANTHROPIC_SEGMENT.countTokens.estimateBudgetMs
       )
     },
-    modelsShape: MODELS_SHAPES.includes(String(_optionalChain([a, 'optionalAccess', _404 => _404.modelsShape]))) ? _optionalChain([a, 'optionalAccess', _405 => _405.modelsShape]) : DEFAULT_ANTHROPIC_SEGMENT.modelsShape,
+    modelsShape: MODELS_SHAPES.includes(String(_optionalChain([a, 'optionalAccess', _436 => _436.modelsShape]))) ? _optionalChain([a, 'optionalAccess', _437 => _437.modelsShape]) : DEFAULT_ANTHROPIC_SEGMENT.modelsShape,
     heartbeatIntervalMs: clampNumber(
-      _optionalChain([a, 'optionalAccess', _406 => _406.heartbeatIntervalMs]),
+      _optionalChain([a, 'optionalAccess', _438 => _438.heartbeatIntervalMs]),
       0,
       6e5,
       DEFAULT_ANTHROPIC_SEGMENT.heartbeatIntervalMs
     ),
     pdfTextExtraction: {
       budgetMs: clampNumber(
-        _optionalChain([a, 'optionalAccess', _407 => _407.pdfTextExtraction, 'optionalAccess', _408 => _408.budgetMs]),
+        _optionalChain([a, 'optionalAccess', _439 => _439.pdfTextExtraction, 'optionalAccess', _440 => _440.budgetMs]),
         100,
         6e4,
         DEFAULT_ANTHROPIC_SEGMENT.pdfTextExtraction.budgetMs
       )
     },
-    proxyOauthUsage: _optionalChain([a, 'optionalAccess', _409 => _409.proxyOauthUsage]) === true,
-    apiHello: _optionalChain([a, 'optionalAccess', _410 => _410.apiHello]) !== false
+    proxyOauthUsage: _optionalChain([a, 'optionalAccess', _441 => _441.proxyOauthUsage]) === true,
+    apiHello: _optionalChain([a, 'optionalAccess', _442 => _442.apiHello]) !== false
   };
 }
 var PROXY_TYPES = ["http", "https", "socks5"];
@@ -8373,14 +8495,14 @@ function clampNumber(value, min, max, fallback) {
   return Math.min(max, Math.max(min, n));
 }
 function normalizeQueueSegments(raw) {
-  const umq = _optionalChain([raw, 'optionalAccess', _411 => _411.userMessageQueue]);
-  const cq = _optionalChain([raw, 'optionalAccess', _412 => _412.concurrencyQueue]);
+  const umq = _optionalChain([raw, 'optionalAccess', _443 => _443.userMessageQueue]);
+  const cq = _optionalChain([raw, 'optionalAccess', _444 => _444.concurrencyQueue]);
   return {
     userMessageQueue: {
-      enabled: _optionalChain([umq, 'optionalAccess', _413 => _413.enabled]) === true,
-      delayMs: clampNumber(_optionalChain([umq, 'optionalAccess', _414 => _414.delayMs]), 0, 1e4, DEFAULT_USER_MESSAGE_QUEUE.delayMs),
+      enabled: _optionalChain([umq, 'optionalAccess', _445 => _445.enabled]) === true,
+      delayMs: clampNumber(_optionalChain([umq, 'optionalAccess', _446 => _446.delayMs]), 0, 1e4, DEFAULT_USER_MESSAGE_QUEUE.delayMs),
       waitTimeoutMs: clampNumber(
-        _optionalChain([umq, 'optionalAccess', _415 => _415.waitTimeoutMs]),
+        _optionalChain([umq, 'optionalAccess', _447 => _447.waitTimeoutMs]),
         1e3,
         3e5,
         DEFAULT_USER_MESSAGE_QUEUE.waitTimeoutMs
@@ -8388,14 +8510,14 @@ function normalizeQueueSegments(raw) {
     },
     concurrencyQueue: {
       maxQueueSizeFactor: clampNumber(
-        _optionalChain([cq, 'optionalAccess', _416 => _416.maxQueueSizeFactor]),
+        _optionalChain([cq, 'optionalAccess', _448 => _448.maxQueueSizeFactor]),
         1,
         10,
         DEFAULT_CONCURRENCY_QUEUE.maxQueueSizeFactor
       ),
-      minQueueSize: clampNumber(_optionalChain([cq, 'optionalAccess', _417 => _417.minQueueSize]), 1, 100, DEFAULT_CONCURRENCY_QUEUE.minQueueSize),
+      minQueueSize: clampNumber(_optionalChain([cq, 'optionalAccess', _449 => _449.minQueueSize]), 1, 100, DEFAULT_CONCURRENCY_QUEUE.minQueueSize),
       waitTimeoutMs: clampNumber(
-        _optionalChain([cq, 'optionalAccess', _418 => _418.waitTimeoutMs]),
+        _optionalChain([cq, 'optionalAccess', _450 => _450.waitTimeoutMs]),
         1e3,
         3e5,
         DEFAULT_CONCURRENCY_QUEUE.waitTimeoutMs
@@ -8494,6 +8616,7 @@ function normalizeBindingTarget(raw) {
   }
   return null;
 }
+var MAPPING_EFFORT_MAX_LENGTH = 32;
 function normalizeGatewayModelMappings(raw) {
   if (!Array.isArray(raw)) return [];
   const mappings = [];
@@ -8503,12 +8626,14 @@ function normalizeGatewayModelMappings(raw) {
     const source = typeof value.source === "string" ? value.source.trim() : "";
     const target = typeof value.target === "string" ? value.target.trim() : "";
     if (!source || !target) continue;
-    mappings.push({ source, target });
+    const rawEffort = typeof value.effort === "string" ? value.effort.trim() : "";
+    const effort = rawEffort && rawEffort.length <= MAPPING_EFFORT_MAX_LENGTH ? rawEffort : void 0;
+    mappings.push(effort ? { source, target, effort } : { source, target });
   }
   return mappings;
 }
 function hasConfiguredLegacyModels(config) {
-  return Object.values(_nullishCoalesce(config.modelMap, () => ( {}))).some((value) => typeof value === "string" && value.trim()) || Boolean(_optionalChain([config, 'access', _419 => _419.models, 'optionalAccess', _420 => _420.some, 'call', _421 => _421((value) => typeof value === "string" && value.trim())])) || Boolean(_optionalChain([config, 'access', _422 => _422.defaultModel, 'optionalAccess', _423 => _423.trim, 'call', _424 => _424()])) || Boolean(_optionalChain([config, 'access', _425 => _425.backgroundModel, 'optionalAccess', _426 => _426.trim, 'call', _427 => _427()])) || Boolean(Object.values(_nullishCoalesce(config.prefixTargets, () => ( {}))).some((value) => _optionalChain([value, 'optionalAccess', _428 => _428.trim, 'call', _429 => _429()])));
+  return Object.values(_nullishCoalesce(config.modelMap, () => ( {}))).some((value) => typeof value === "string" && value.trim()) || Boolean(_optionalChain([config, 'access', _451 => _451.models, 'optionalAccess', _452 => _452.some, 'call', _453 => _453((value) => typeof value === "string" && value.trim())])) || Boolean(_optionalChain([config, 'access', _454 => _454.defaultModel, 'optionalAccess', _455 => _455.trim, 'call', _456 => _456()])) || Boolean(_optionalChain([config, 'access', _457 => _457.backgroundModel, 'optionalAccess', _458 => _458.trim, 'call', _459 => _459()])) || Boolean(Object.values(_nullishCoalesce(config.prefixTargets, () => ( {}))).some((value) => _optionalChain([value, 'optionalAccess', _460 => _460.trim, 'call', _461 => _461()])));
 }
 function splitModelRef(ref) {
   if (typeof ref !== "string") return null;
@@ -8576,7 +8701,7 @@ function legacyEndpointToBindings(config) {
     if (!parsed) continue;
     const route = routeFor(parsed.providerId);
     route[field] = ref;
-    if (_optionalChain([config, 'access', _430 => _430.backgroundModelIds, 'optionalAccess', _431 => _431.length])) {
+    if (_optionalChain([config, 'access', _462 => _462.backgroundModelIds, 'optionalAccess', _463 => _463.length])) {
       route.backgroundModelIds = [...config.backgroundModelIds];
     }
   }
@@ -8759,10 +8884,10 @@ function asObject(value) {
   return value !== null && typeof value === "object" && !Array.isArray(value) ? value : null;
 }
 function anthropicSessionId(body) {
-  const userId = _optionalChain([asObject, 'call', _432 => _432(body["metadata"]), 'optionalAccess', _433 => _433["user_id"]]);
+  const userId = _optionalChain([asObject, 'call', _464 => _464(body["metadata"]), 'optionalAccess', _465 => _465["user_id"]]);
   if (typeof userId !== "string" || !userId) return void 0;
   const matched = ANTHROPIC_SESSION_RE.exec(userId);
-  return _optionalChain([matched, 'optionalAccess', _434 => _434[1]]);
+  return _optionalChain([matched, 'optionalAccess', _466 => _466[1]]);
 }
 function anthropicContentFingerprint(body) {
   const messages = body["messages"];
@@ -8795,6 +8920,61 @@ function deriveAuditSessionKey(body, headers = {}, options = {}) {
   return gateway.key;
 }
 
+// src/outbound-api/mappingEffortInjection.ts
+function isPlainObject(value) {
+  return !!value && typeof value === "object" && !Array.isArray(value);
+}
+function hasOpenAiWireReasoningIntent(body) {
+  return _chunkIUL4VWNUcjs.extractReasoningIntent.call(void 0, {
+    model: typeof body["model"] === "string" ? body["model"] : "",
+    reasoning: isPlainObject(body["reasoning"]) ? body["reasoning"] : void 0,
+    reasoning_effort: body["reasoning_effort"]
+  }) !== void 0;
+}
+function injectMappingEffortDefault(endpoint, effort, body) {
+  if (!effort) return false;
+  switch (endpoint) {
+    case "chat":
+      if (hasOpenAiWireReasoningIntent(body)) {
+        return false;
+      }
+      body["reasoning_effort"] = effort;
+      return true;
+    case "responses": {
+      if (hasOpenAiWireReasoningIntent(body)) {
+        return false;
+      }
+      const reasoning = body["reasoning"];
+      body["reasoning"] = {
+        ...isPlainObject(reasoning) ? reasoning : {},
+        effort
+      };
+      return true;
+    }
+    case "messages": {
+      if (body["thinking"] !== void 0) return false;
+      if (effort === "none") return false;
+      body["thinking"] = { type: "adaptive" };
+      const outputConfig = body["output_config"];
+      body["output_config"] = {
+        ...isPlainObject(outputConfig) ? outputConfig : {},
+        effort
+      };
+      return true;
+    }
+    case "gemini": {
+      const generationConfig = body["generationConfig"];
+      const config = isPlainObject(generationConfig) ? generationConfig : {};
+      if (config["thinkingConfig"] !== void 0) return false;
+      body["generationConfig"] = {
+        ...config,
+        thinkingConfig: { thinkingLevel: effort }
+      };
+      return true;
+    }
+  }
+}
+
 // src/outbound-api/outboundApiKeyAuth.ts
 
 
@@ -8940,7 +9120,7 @@ function effectiveOutboundPermissions(value) {
   if (value === void 0) return LEGACY_OUTBOUND_PERMISSIONS;
   try {
     return validateOutboundPermissions(value);
-  } catch (e49) {
+  } catch (e50) {
     return [];
   }
 }
@@ -8981,8 +9161,23 @@ function toVerifiedKey(row) {
   if (rateLimit) key.rateLimit = rateLimit;
   const modelRestriction = extractModelRestriction(row);
   if (modelRestriction) key.modelRestriction = modelRestriction;
+  const directTarget = extractBoundUpstream(row);
+  if (directTarget) key.boundUpstream = directTarget;
   return key;
 }
+function extractBoundUpstream(row) {
+  if (row.boundUpstream && typeof row.boundUpstream === "object") {
+    const target = row.boundUpstream;
+    if (target.kind === "provider" && typeof target.providerId === "string" && target.providerId || target.kind === "account-pool" && typeof target.providerId === "string" && target.providerId || target.kind === "account" && target.providerId && target.accountId || target.kind === "account-group" && target.providerId && target.group) {
+      return target;
+    }
+    return void 0;
+  }
+  if (typeof row.boundUpstreamProviderId === "string" && row.boundUpstreamProviderId) {
+    return { kind: "provider", providerId: row.boundUpstreamProviderId };
+  }
+  return void 0;
+}
 async function verifyKey(db, presentedKey, now = Date.now()) {
   if (!presentedKey) return { status: "invalid" };
   const trimmed = presentedKey.trim();
@@ -9191,8 +9386,8 @@ var OutboundRateLimiter = (_class16 = class {
    * recorded (no bucket growth).
    */
   check(apiKeyId, now = Date.now(), override) {
-    const maxRequests = _nullishCoalesce(_optionalChain([override, 'optionalAccess', _435 => _435.maxRequests]), () => ( this.maxRequests));
-    const windowMs = _nullishCoalesce(_optionalChain([override, 'optionalAccess', _436 => _436.windowMs]), () => ( this.windowMs));
+    const maxRequests = _nullishCoalesce(_optionalChain([override, 'optionalAccess', _467 => _467.maxRequests]), () => ( this.maxRequests));
+    const windowMs = _nullishCoalesce(_optionalChain([override, 'optionalAccess', _468 => _468.windowMs]), () => ( this.windowMs));
     if (maxRequests === 0) return { allowed: true, retryAfterSeconds: 0 };
     const cutoff = now - windowMs;
     const timestamps = (_nullishCoalesce(this.hits.get(apiKeyId), () => ( []))).filter((ts) => ts > cutoff);
@@ -9378,10 +9573,10 @@ async function handleCodexSearchRequest(req, res, deps) {
     let parseFailed = false;
     try {
       parsed = raw ? JSON.parse(raw) : {};
-    } catch (e50) {
+    } catch (e51) {
       parseFailed = true;
     }
-    _optionalChain([deps, 'access', _437 => _437.onRequestBody, 'optionalCall', _438 => _438(raw, isRecord10(parsed) ? parsed : {})]);
+    _optionalChain([deps, 'access', _469 => _469.onRequestBody, 'optionalCall', _470 => _470(raw, isRecord10(parsed) ? parsed : {})]);
     if (parseFailed) {
       throw new (0, _chunkG4CZIUIBcjs.OpenAIOperationError)({
         status: 400,
@@ -9426,7 +9621,7 @@ function isUserMessageAnthropic(body) {
   if (typeof content === "string") return true;
   if (Array.isArray(content)) {
     const hasToolResult = content.some(
-      (block) => _optionalChain([asObject2, 'call', _439 => _439(block), 'optionalAccess', _440 => _440["type"]]) === "tool_result"
+      (block) => _optionalChain([asObject2, 'call', _471 => _471(block), 'optionalAccess', _472 => _472["type"]]) === "tool_result"
     );
     return !hasToolResult;
   }
@@ -9455,7 +9650,7 @@ function isUserMessageGemini(body) {
   if (!lastContent || lastContent["role"] !== "user") return false;
   const parts = asArray(lastContent["parts"]);
   const hasFunctionResponse = parts.some(
-    (part) => _optionalChain([asObject2, 'call', _441 => _441(part), 'optionalAccess', _442 => _442["functionResponse"]]) !== void 0
+    (part) => _optionalChain([asObject2, 'call', _473 => _473(part), 'optionalAccess', _474 => _474["functionResponse"]]) !== void 0
   );
   return !hasFunctionResponse;
 }
@@ -9629,14 +9824,14 @@ function newVoucherId() {
 }
 function computeVoucherGrant(voucher, currentKey, now) {
   if (voucher.type === "credit") {
-    const current = _nullishCoalesce(_optionalChain([currentKey, 'optionalAccess', _443 => _443.totalCostLimitUsd]), () => ( 0));
+    const current = _nullishCoalesce(_optionalChain([currentKey, 'optionalAccess', _475 => _475.totalCostLimitUsd]), () => ( 0));
     let granted2 = current + (_nullishCoalesce(voucher.creditUsd, () => ( 0)));
     if (voucher.maxTotalCostLimitUsd != null) {
       granted2 = Math.min(granted2, voucher.maxTotalCostLimitUsd);
     }
     return { totalCostLimitUsd: granted2 };
   }
-  const currentExpiry = _nullishCoalesce(_optionalChain([currentKey, 'optionalAccess', _444 => _444.expiresAt]), () => ( now));
+  const currentExpiry = _nullishCoalesce(_optionalChain([currentKey, 'optionalAccess', _476 => _476.expiresAt]), () => ( now));
   let granted = currentExpiry + (_nullishCoalesce(voucher.renewalDays, () => ( 0))) * DAY_MS2;
   if (voucher.maxExpiryDays != null) {
     granted = Math.min(granted, now + voucher.maxExpiryDays * DAY_MS2);
@@ -9667,7 +9862,7 @@ function toVoucherInfo(v) {
 // src/outbound-api/voucherRedeem.ts
 function isRedeemRequest(method, url) {
   if (method !== "POST" || !url) return false;
-  const path = _nullishCoalesce(_optionalChain([url, 'access', _445 => _445.split, 'call', _446 => _446("?"), 'access', _447 => _447[0], 'optionalAccess', _448 => _448.replace, 'call', _449 => _449(/\/+$/, "")]), () => ( ""));
+  const path = _nullishCoalesce(_optionalChain([url, 'access', _477 => _477.split, 'call', _478 => _478("?"), 'access', _479 => _479[0], 'optionalAccess', _480 => _480.replace, 'call', _481 => _481(/\/+$/, "")]), () => ( ""));
   return path.endsWith("/redeem");
 }
 function writeErr(res, status, message, headers = {}) {
@@ -9697,8 +9892,8 @@ function grantToResult(type, granted) {
 function currentResult(type, keyRow) {
   const result = { type };
   if (type === "credit") {
-    if (_optionalChain([keyRow, 'optionalAccess', _450 => _450.totalCostLimitUsd]) != null) result.totalCostLimitUsd = keyRow.totalCostLimitUsd;
-  } else if (_optionalChain([keyRow, 'optionalAccess', _451 => _451.expiresAt]) != null) {
+    if (_optionalChain([keyRow, 'optionalAccess', _482 => _482.totalCostLimitUsd]) != null) result.totalCostLimitUsd = keyRow.totalCostLimitUsd;
+  } else if (_optionalChain([keyRow, 'optionalAccess', _483 => _483.expiresAt]) != null) {
     result.expiresAt = keyRow.expiresAt;
   }
   return result;
@@ -9736,7 +9931,7 @@ async function handleVoucherRedeem(req, res, deps, voucherEnabled, redeemLimiter
   let code;
   try {
     code = raw ? JSON.parse(raw)["code"] : void 0;
-  } catch (e51) {
+  } catch (e52) {
     writeErr(res, 400, "Invalid JSON in request body");
     return;
   }
@@ -9785,7 +9980,7 @@ async function handleVoucherRedeem(req, res, deps, voucherEnabled, redeemLimiter
     const won = await voucherDb.voucherRedeemCas(voucher.id, verifiedKeyId, absolute, now);
     if (!won) {
       const after = await voucherDb.voucherGetByHash(codeHash);
-      if (_optionalChain([after, 'optionalAccess', _452 => _452.status]) === "redeemed" && after.redeemedByKeyId === verifiedKeyId) {
+      if (_optionalChain([after, 'optionalAccess', _484 => _484.status]) === "redeemed" && after.redeemedByKeyId === verifiedKeyId) {
         return after.grantApplied === true ? { ok: true, result: currentResult(after.type, await deps.db.outboundApiKeysGetByHash(keyHash)) } : await applyFirstPass(after, recordedAbsolute(after));
       }
       return { ok: false, status: 409, message: "Code was already redeemed" };
@@ -9860,10 +10055,10 @@ function extractPresentedKey(req) {
   }
   const xApiKey = req.headers["x-api-key"];
   const xApi = Array.isArray(xApiKey) ? xApiKey[0] : xApiKey;
-  if (_optionalChain([xApi, 'optionalAccess', _453 => _453.trim, 'call', _454 => _454()])) return xApi.trim();
+  if (_optionalChain([xApi, 'optionalAccess', _485 => _485.trim, 'call', _486 => _486()])) return xApi.trim();
   const goog = req.headers["x-goog-api-key"];
   const g = Array.isArray(goog) ? goog[0] : goog;
-  return _optionalChain([g, 'optionalAccess', _455 => _455.trim, 'call', _456 => _456()]) || void 0;
+  return _optionalChain([g, 'optionalAccess', _487 => _487.trim, 'call', _488 => _488()]) || void 0;
 }
 function isLoopbackPeer(address) {
   if (!address) return false;
@@ -9873,10 +10068,10 @@ function isLoopbackPeer(address) {
 function selectEndpoint(method, url) {
   if (method !== "POST" || !url) return null;
   const openAIOperation = _chunkG4CZIUIBcjs.classifyOpenAIOperation.call(void 0, method, url);
-  if (_optionalChain([openAIOperation, 'optionalAccess', _457 => _457.policyFamily]) === "chat" || _optionalChain([openAIOperation, 'optionalAccess', _458 => _458.policyFamily]) === "responses") {
+  if (_optionalChain([openAIOperation, 'optionalAccess', _489 => _489.policyFamily]) === "chat" || _optionalChain([openAIOperation, 'optionalAccess', _490 => _490.policyFamily]) === "responses") {
     return openAIOperation.policyFamily;
   }
-  const path = _nullishCoalesce(_optionalChain([url, 'access', _459 => _459.split, 'call', _460 => _460("?"), 'access', _461 => _461[0], 'optionalAccess', _462 => _462.replace, 'call', _463 => _463(/\/+$/, "")]), () => ( ""));
+  const path = _nullishCoalesce(_optionalChain([url, 'access', _491 => _491.split, 'call', _492 => _492("?"), 'access', _493 => _493[0], 'optionalAccess', _494 => _494.replace, 'call', _495 => _495(/\/+$/, "")]), () => ( ""));
   const classified = classifyAnthropicMessagesPath(url);
   if (classified === "messages" || classified === "count_tokens") return "messages";
   const lastSeg = _nullishCoalesce(path.split("/").pop(), () => ( ""));
@@ -9893,32 +10088,126 @@ function extractGeminiModelFromUrl(url) {
 }
 function isModelsListRequest(url) {
   if (!url) return false;
-  const path = _nullishCoalesce(_optionalChain([url, 'access', _464 => _464.split, 'call', _465 => _465("?"), 'access', _466 => _466[0], 'optionalAccess', _467 => _467.replace, 'call', _468 => _468(/\/+$/, "")]), () => ( ""));
+  const path = _nullishCoalesce(_optionalChain([url, 'access', _496 => _496.split, 'call', _497 => _497("?"), 'access', _498 => _498[0], 'optionalAccess', _499 => _499.replace, 'call', _500 => _500(/\/+$/, "")]), () => ( ""));
   return path.endsWith("/models");
 }
 function isAnthropicOauthUsagePath(url) {
   if (!url) return false;
-  const path = _nullishCoalesce(_optionalChain([url, 'access', _469 => _469.split, 'call', _470 => _470("?"), 'access', _471 => _471[0], 'optionalAccess', _472 => _472.replace, 'call', _473 => _473(/\/+$/, "")]), () => ( ""));
+  const path = _nullishCoalesce(_optionalChain([url, 'access', _501 => _501.split, 'call', _502 => _502("?"), 'access', _503 => _503[0], 'optionalAccess', _504 => _504.replace, 'call', _505 => _505(/\/+$/, "")]), () => ( ""));
   return path === "/api/oauth/usage";
 }
 function resolveModelsShape(modelsShape, allowedEndpoints) {
   if (modelsShape === "anthropic") return "anthropic";
   if (modelsShape === "openai") return "openai";
-  if (_optionalChain([allowedEndpoints, 'optionalAccess', _474 => _474.includes, 'call', _475 => _475("images")])) return "openai";
+  if (_optionalChain([allowedEndpoints, 'optionalAccess', _506 => _506.includes, 'call', _507 => _507("images")])) return "openai";
   if (!allowedEndpoints || allowedEndpoints.length === 0) return "anthropic";
   return allowedEndpoints.includes("messages") ? "anthropic" : "openai";
 }
+var UPSTREAM_MODELS_TTL_MS = 6e4;
+var UPSTREAM_MODELS_NEGATIVE_TTL_MS = 5e3;
+var UPSTREAM_MODELS_TIMEOUT_MS = 1e4;
+var upstreamModelsCache = /* @__PURE__ */ new Map();
+var upstreamModelsInFlight = /* @__PURE__ */ new Map();
+function resolveProviderKeyLiteral(apiKey) {
+  if (!apiKey) return "";
+  if (apiKey.startsWith("$")) return process.env[apiKey.slice(1)] || "";
+  return apiKey;
+}
+function buildProviderModelsUrl(baseUrl, format) {
+  const base = baseUrl.trim().replace(/\/+$/, "");
+  if (!base) return null;
+  if (format === "google") {
+    return /\/models$/.test(base) ? base : `${base}/models`;
+  }
+  if (format === "anthropic") {
+    if (base.endsWith("/messages")) return `${base.slice(0, -"/messages".length)}/models`;
+    if (/\/v\d+$/.test(base)) return `${base}/models`;
+    return `${base}/v1/models`;
+  }
+  const completionSuffix = format === "openai-response" ? "/responses" : "/chat/completions";
+  const root = base.endsWith(completionSuffix) ? base.slice(0, -completionSuffix.length) : base;
+  if (root !== base || /\/v\d+$/.test(base)) return `${root}/models`;
+  return `${base}/v1/models`;
+}
+async function fetchUpstreamModelsUncached(provider) {
+  const format = _chunkA2YMUCBTcjs.resolveApiFormat.call(void 0, provider);
+  const url = buildProviderModelsUrl(_nullishCoalesce(provider.api_base_url, () => ( "")), format);
+  if (!url) return [];
+  const headers = _chunkTX4UCSOPcjs.getProviderHeaders.call(void 0, provider, resolveProviderKeyLiteral(provider.api_key));
+  delete headers["Content-Type"];
+  headers["Accept"] = "application/json";
+  const response = await _chunkCXRJMNJJcjs.fetchUpstream.call(void 0, 
+    url,
+    { method: "GET", headers, signal: AbortSignal.timeout(UPSTREAM_MODELS_TIMEOUT_MS) },
+    { providerId: "byo" }
+  );
+  if (!response.ok) return [];
+  const body = await response.json();
+  const fromData = Array.isArray(_optionalChain([body, 'optionalAccess', _508 => _508.data])) ? body.data.map((entry) => typeof _optionalChain([entry, 'optionalAccess', _509 => _509.id]) === "string" ? entry.id.trim() : "").filter((id) => id !== "") : [];
+  if (fromData.length > 0) return fromData;
+  return Array.isArray(_optionalChain([body, 'optionalAccess', _510 => _510.models])) ? body.models.map(
+    (entry) => typeof _optionalChain([entry, 'optionalAccess', _511 => _511.name]) === "string" ? entry.name.replace(/^models\//, "").trim() : ""
+  ).filter((id) => id !== "") : [];
+}
+async function discoverUpstreamModels(provider) {
+  const cached = upstreamModelsCache.get(provider.id);
+  if (cached) {
+    const ttl = cached.ok ? UPSTREAM_MODELS_TTL_MS : UPSTREAM_MODELS_NEGATIVE_TTL_MS;
+    if (Date.now() - cached.at < ttl) return cached.ids;
+    upstreamModelsCache.delete(provider.id);
+  }
+  const existing = upstreamModelsInFlight.get(provider.id);
+  if (existing) return existing;
+  const pending = (async () => {
+    let ids = [];
+    try {
+      ids = await fetchUpstreamModelsUncached(provider);
+    } catch (e53) {
+      ids = [];
+    }
+    upstreamModelsCache.set(provider.id, { at: Date.now(), ids, ok: ids.length > 0 });
+    return ids;
+  })();
+  upstreamModelsInFlight.set(provider.id, pending);
+  try {
+    return await pending;
+  } finally {
+    upstreamModelsInFlight.delete(provider.id);
+  }
+}
+async function passthroughProviderModelIds(llmConfig, providerId) {
+  const provider = await llmConfig.getProvider(providerId);
+  if (!provider) return [];
+  const configured = _nullishCoalesce(provider.models, () => ( []));
+  return configured.length > 0 ? configured : await discoverUpstreamModels(provider);
+}
 var ANTHROPIC_MODELS_CREATED_AT = (/* @__PURE__ */ new Date()).toISOString();
+function hasWildcardMapping(binding) {
+  return (_nullishCoalesce(binding.modelMappings, () => ( []))).some(
+    (mapping) => mapping.source.includes("*") && mapping.target.trim() !== ""
+  );
+}
+async function pushTargetCatalog(llmConfig, target, push) {
+  if (target.kind === "provider") {
+    for (const id of await passthroughProviderModelIds(llmConfig, target.providerId)) {
+      push(id);
+    }
+  } else if (Object.prototype.hasOwnProperty.call(_subscriptionmodelcatalog.SUBSCRIPTION_MODEL_CATALOG, target.providerId)) {
+    for (const id of _subscriptionmodelcatalog.SUBSCRIPTION_MODEL_CATALOG[target.providerId]) {
+      push(id);
+    }
+  }
+}
+var MODEL_LIST_ENDPOINTS = ["chat", "responses", "messages", "gemini"];
 function parseModelsLimit(url) {
-  const query = _optionalChain([url, 'optionalAccess', _476 => _476.split, 'call', _477 => _477("?"), 'access', _478 => _478[1]]);
+  const query = _optionalChain([url, 'optionalAccess', _512 => _512.split, 'call', _513 => _513("?"), 'access', _514 => _514[1]]);
   if (!query) return void 0;
   const raw = new URLSearchParams(query).get("limit");
   if (raw === null) return void 0;
   const n = Number.parseInt(raw, 10);
   return Number.isFinite(n) && n > 0 ? n : void 0;
 }
-async function writeModelsListAnthropic(res, llmConfig, config, apiKeyId, allowedEndpoints, limit) {
-  void allowedEndpoints;
+async function writeModelsListAnthropic(res, llmConfig, config, apiKeyId, allowedEndpoints, limit, directTarget) {
   const entries2 = [];
   const seen = /* @__PURE__ */ new Set();
   const push = (id, displayName) => {
@@ -9929,32 +10218,40 @@ async function writeModelsListAnthropic(res, llmConfig, config, apiKeyId, allowe
     );
   };
   const viaLabel = (name, ref) => {
-    const modelId = ref ? _optionalChain([_chunk57Y2EA2Gcjs.parseModelRef.call(void 0, ref), 'optionalAccess', _479 => _479.modelId]) : void 0;
+    const modelId = ref ? _optionalChain([_chunk57Y2EA2Gcjs.parseModelRef.call(void 0, ref), 'optionalAccess', _515 => _515.modelId]) : void 0;
     return modelId ? `${name} (via ${modelId})` : void 0;
   };
-  for (const binding of candidateGatewayBindings(config.bindings, apiKeyId, "messages")) {
-    if (binding.modelMode === "passthrough") {
-      if (binding.target.kind === "provider") {
-        const provider = await llmConfig.getProvider(binding.target.providerId);
-        for (const id of _nullishCoalesce(_optionalChain([provider, 'optionalAccess', _480 => _480.models]), () => ( []))) push(id);
-      } else if (Object.prototype.hasOwnProperty.call(_subscriptionmodelcatalog.SUBSCRIPTION_MODEL_CATALOG, binding.target.providerId)) {
-        for (const id of _subscriptionmodelcatalog.SUBSCRIPTION_MODEL_CATALOG[binding.target.providerId]) {
-          push(id);
+  for (const endpoint of MODEL_LIST_ENDPOINTS) {
+    if (allowedEndpoints && !allowedEndpoints.includes(endpoint)) continue;
+    for (const binding of candidateGatewayBindings(config.bindings, apiKeyId, endpoint)) {
+      if (binding.modelMode === "passthrough") {
+        await pushTargetCatalog(llmConfig, binding.target, push);
+        continue;
+      }
+      if (_optionalChain([binding, 'access', _516 => _516.modelMappings, 'optionalAccess', _517 => _517.length])) {
+        for (const mapping of binding.modelMappings) {
+          const source = mapping.source.trim();
+          if (source === "" || source.includes("*")) continue;
+          push(source, viaLabel(source, mapping.target));
+        }
+        if (hasWildcardMapping(binding)) {
+          await pushTargetCatalog(llmConfig, binding.target, push);
+          for (const mapping of _nullishCoalesce(binding.modelMappings, () => ( []))) {
+            if (!mapping.source.includes("*") || mapping.target.trim() === "") continue;
+            push(_nullishCoalesce(_optionalChain([_chunk57Y2EA2Gcjs.parseModelRef.call(void 0, mapping.target), 'optionalAccess', _518 => _518.modelId]), () => ( mapping.target.trim())));
+          }
         }
+        continue;
       }
-      continue;
-    }
-    if (_optionalChain([binding, 'access', _481 => _481.modelMappings, 'optionalAccess', _482 => _482.length])) {
-      for (const mapping of binding.modelMappings) {
-        const source = mapping.source.trim();
-        if (source === "" || source.includes("*")) continue;
-        push(source, viaLabel(source, mapping.target));
+      for (const [kind, ref] of Object.entries(_nullishCoalesce(binding.modelMap, () => ( {})))) {
+        if (typeof ref !== "string" || ref.trim() === "") continue;
+        push(kind, viaLabel(kind, ref));
       }
-      continue;
     }
-    for (const [kind, ref] of Object.entries(_nullishCoalesce(binding.modelMap, () => ( {})))) {
-      if (typeof ref !== "string" || ref.trim() === "") continue;
-      push(kind, viaLabel(kind, ref));
+  }
+  if (_optionalChain([directTarget, 'optionalAccess', _519 => _519.kind]) === "provider") {
+    for (const id of await passthroughProviderModelIds(llmConfig, directTarget.providerId)) {
+      push(id);
     }
   }
   const limited = limit !== void 0 ? entries2.slice(0, limit) : entries2;
@@ -9962,9 +10259,9 @@ async function writeModelsListAnthropic(res, llmConfig, config, apiKeyId, allowe
   res.end(
     JSON.stringify({
       data: limited,
-      first_id: _nullishCoalesce(_optionalChain([limited, 'access', _483 => _483[0], 'optionalAccess', _484 => _484.id]), () => ( null)),
+      first_id: _nullishCoalesce(_optionalChain([limited, 'access', _520 => _520[0], 'optionalAccess', _521 => _521.id]), () => ( null)),
       has_more: limited.length < entries2.length,
-      last_id: _nullishCoalesce(_optionalChain([limited, 'access', _485 => _485[limited.length - 1], 'optionalAccess', _486 => _486.id]), () => ( null))
+      last_id: _nullishCoalesce(_optionalChain([limited, 'access', _522 => _522[limited.length - 1], 'optionalAccess', _523 => _523.id]), () => ( null))
     })
   );
 }
@@ -9986,8 +10283,8 @@ function handleOauthUsageProxy(res, config, apiKeyId) {
   const snapshot = _nullishCoalesce(_nullishCoalesce((preferredAccountId !== void 0 ? snapshots.find((s) => s.accountId === preferredAccountId) : void 0), () => ( snapshots.find((s) => s.windows.some((w) => w.state === "fresh")))), () => ( snapshots[0]));
   const body = {};
   for (const [wireKey, windowId] of OAUTH_USAGE_WINDOW_IDS) {
-    const window = _optionalChain([snapshot, 'optionalAccess', _487 => _487.windows, 'access', _488 => _488.find, 'call', _489 => _489((w) => w.id === windowId)]);
-    const usable = _optionalChain([window, 'optionalAccess', _490 => _490.state]) === "fresh";
+    const window = _optionalChain([snapshot, 'optionalAccess', _524 => _524.windows, 'access', _525 => _525.find, 'call', _526 => _526((w) => w.id === windowId)]);
+    const usable = _optionalChain([window, 'optionalAccess', _527 => _527.state]) === "fresh";
     body[wireKey] = {
       utilization: usable ? _nullishCoalesce(window.usedPercent, () => ( null)) : null,
       resets_at: usable ? _nullishCoalesce(window.resetsAt, () => ( null)) : null
@@ -9996,29 +10293,172 @@ function handleOauthUsageProxy(res, config, apiKeyId) {
   res.writeHead(200, { "Content-Type": "application/json" });
   res.end(JSON.stringify(body));
 }
-async function writeModelsList(res, llmConfig, config, apiKeyId, allowedEndpoints, imageModels = []) {
+function directUpstreamRoot(baseUrl, format) {
+  const base = baseUrl.trim().replace(/\/+$/, "");
+  if (!base) return null;
+  if (format === "google") return base.replace(/\/models$/, "");
+  if (format === "anthropic") return base.replace(/\/messages$/, "");
+  if (format === "openai-response") return base.replace(/\/responses$/, "");
+  return base.replace(/\/chat\/completions$/, "");
+}
+function directUpstreamUrl(provider, requestUrl) {
+  const root = directUpstreamRoot(
+    _nullishCoalesce(provider.api_base_url, () => ( "")),
+    _chunkA2YMUCBTcjs.resolveApiFormat.call(void 0, provider)
+  );
+  if (!root) return null;
+  const raw = _nullishCoalesce(requestUrl, () => ( "/"));
+  const queryIndex = raw.indexOf("?");
+  const path = (queryIndex >= 0 ? raw.slice(0, queryIndex) : raw) || "/";
+  const query = queryIndex >= 0 ? raw.slice(queryIndex) : "";
+  const versionSegment = _optionalChain([/\/v\d+[a-z]*$/, 'access', _528 => _528.exec, 'call', _529 => _529(root), 'optionalAccess', _530 => _530[0]]);
+  let tail = path;
+  if (versionSegment) {
+    if (path === versionSegment) tail = "";
+    else if (path.startsWith(`${versionSegment}/`)) tail = path.slice(versionSegment.length);
+  }
+  return `${root}${tail}${query}`;
+}
+function directUpstreamBinding(target, apiKeyId, priority = 1e3) {
+  return {
+    id: `direct:${apiKeyId}`,
+    name: "direct upstream",
+    enabled: true,
+    keyScope: "selected",
+    apiKeyIds: [apiKeyId],
+    endpoint: "messages",
+    target,
+    priority,
+    fallback: "fail",
+    modelMode: "passthrough"
+  };
+}
+async function relayDirectUpstream(req, res, deps, verified, config, concurrencyGate, audit, preReadBody) {
+  const direct = verified.boundUpstream;
+  const providerId = _optionalChain([direct, 'optionalAccess', _531 => _531.kind]) === "provider" ? direct.providerId : "";
+  const provider = await deps.llmConfig.getProvider(providerId);
+  if (!provider) {
+    writeJsonError(
+      res,
+      503,
+      `direct upstream provider '${providerId}' is not configured for this key`
+    );
+    return;
+  }
+  const url = directUpstreamUrl(provider, req.url);
+  if (!url) {
+    writeJsonError(res, 503, `direct upstream provider '${providerId}' has no base URL`);
+    return;
+  }
+  const concurrencyLimit = verified.maxConcurrency;
+  let releaseConcurrency = null;
+  if (typeof concurrencyLimit === "number" && concurrencyLimit > 0) {
+    const cq = _nullishCoalesce(config.concurrencyQueue, () => ( DEFAULT_CONCURRENCY_QUEUE));
+    const acquisition = concurrencyGate.acquire(verified.id, concurrencyLimit, {
+      maxQueueSizeFactor: cq.maxQueueSizeFactor,
+      minQueueSize: cq.minQueueSize,
+      waitTimeoutMs: cq.waitTimeoutMs
+    });
+    const cancelOnClose = () => acquisition.cancel();
+    res.once("close", cancelOnClose);
+    let slot;
+    try {
+      slot = await acquisition.granted;
+    } catch (err) {
+      res.removeListener("close", cancelOnClose);
+      if (isConcurrencyRejection(err)) {
+        writeJsonError(res, 429, "Concurrency limit exceeded", { "Retry-After": "5" });
+        return;
+      }
+      throw err;
+    }
+    res.removeListener("close", cancelOnClose);
+    const release2 = () => slot.release();
+    releaseConcurrency = release2;
+    res.once("close", release2);
+  }
+  try {
+    const rawBody = preReadBody !== void 0 ? preReadBody : await readBody3(req);
+    if (audit) {
+      audit.setRequestBody(rawBody);
+      try {
+        audit.sessionKey = deriveAuditSessionKey(
+          rawBody ? JSON.parse(rawBody) : {},
+          req.headers,
+          { fallbackKey: verified.id, endpoint: "direct" }
+        );
+      } catch (e54) {
+      }
+    }
+    const headers = _chunkTX4UCSOPcjs.getProviderHeaders.call(void 0, provider, resolveProviderKeyLiteral(provider.api_key));
+    delete headers["Content-Type"];
+    const clientContentType = req.headers["content-type"];
+    if (typeof clientContentType === "string" && clientContentType) {
+      headers["Content-Type"] = clientContentType;
+    }
+    const clientAccept = req.headers["accept"];
+    if (typeof clientAccept === "string" && clientAccept) headers["Accept"] = clientAccept;
+    const hasRequestBody = req.method !== "GET" && req.method !== "HEAD";
+    const upstream = await _chunkCXRJMNJJcjs.fetchUpstream.call(void 0, 
+      url,
+      {
+        method: _nullishCoalesce(req.method, () => ( "GET")),
+        headers,
+        ...hasRequestBody ? { body: rawBody } : {},
+        // Client hang-up aborts the upstream call (no egress after cancel).
+        signal: requestLifecycleSignal(req, res)
+      },
+      { providerId: "byo" }
+    );
+    if (audit) audit.provider = provider.id;
+    const responseHeaders = {};
+    const contentType = upstream.headers.get("content-type");
+    if (contentType) responseHeaders["Content-Type"] = contentType;
+    res.writeHead(upstream.status, responseHeaders);
+    if (!upstream.body) {
+      res.end();
+      return;
+    }
+    const bodyStream = _stream.Readable.fromWeb(
+      upstream.body
+    );
+    bodyStream.on("error", () => {
+      res.destroy();
+    });
+    bodyStream.pipe(res);
+    await new Promise((resolve) => {
+      res.once("close", resolve);
+    });
+  } catch (err) {
+    const message = _chunkSVNDB62Dcjs.serializeError.call(void 0, err);
+    if (deps.logger) deps.logger.error("[OutboundApi] direct relay error:", message);
+    else console.error("[OutboundApi] direct relay error:", message);
+    _chunkUIBD2YY5cjs.emitWebhookEvent.call(void 0, { kind: "server.error", at: Date.now(), message });
+    if (audit) audit.error = message;
+    if (!res.headersSent) writeJsonError(res, 502, message);
+    else res.destroy();
+  }
+}
+async function writeModelsList(res, llmConfig, config, apiKeyId, allowedEndpoints, imageModels = [], directTarget) {
   const modelIds = [];
-  for (const endpoint of ["chat", "responses", "messages", "gemini"]) {
+  for (const endpoint of MODEL_LIST_ENDPOINTS) {
     if (allowedEndpoints && !allowedEndpoints.includes(endpoint)) continue;
     for (const binding of candidateGatewayBindings(config.bindings, apiKeyId, endpoint)) {
       if (binding.modelMode === "passthrough") {
-        if (binding.target.kind === "provider") {
-          const provider = await llmConfig.getProvider(binding.target.providerId);
-          modelIds.push(..._nullishCoalesce(_optionalChain([provider, 'optionalAccess', _491 => _491.models]), () => ( [])));
-        } else if (Object.prototype.hasOwnProperty.call(
-          _subscriptionmodelcatalog.SUBSCRIPTION_MODEL_CATALOG,
-          binding.target.providerId
-        )) {
-          modelIds.push(
-            ..._subscriptionmodelcatalog.SUBSCRIPTION_MODEL_CATALOG[binding.target.providerId]
-          );
-        }
+        await pushTargetCatalog(llmConfig, binding.target, (id) => modelIds.push(id));
         continue;
       }
-      if (_optionalChain([binding, 'access', _492 => _492.modelMappings, 'optionalAccess', _493 => _493.length])) {
+      if (_optionalChain([binding, 'access', _532 => _532.modelMappings, 'optionalAccess', _533 => _533.length])) {
         modelIds.push(
           ...binding.modelMappings.map((mapping) => mapping.source.trim()).filter((source) => source !== "" && !source.includes("*"))
         );
+        if (hasWildcardMapping(binding)) {
+          await pushTargetCatalog(llmConfig, binding.target, (id) => modelIds.push(id));
+          for (const mapping of _nullishCoalesce(binding.modelMappings, () => ( []))) {
+            if (!mapping.source.includes("*") || mapping.target.trim() === "") continue;
+            modelIds.push(_nullishCoalesce(_optionalChain([_chunk57Y2EA2Gcjs.parseModelRef.call(void 0, mapping.target), 'optionalAccess', _534 => _534.modelId]), () => ( mapping.target.trim())));
+          }
+        }
         continue;
       }
       const endpointConfig = gatewayBindingToEndpointConfig(binding);
@@ -10031,10 +10471,13 @@ async function writeModelsList(res, llmConfig, config, apiKeyId, allowedEndpoint
         if (endpointConfig.backgroundModel) refs.push(endpointConfig.backgroundModel);
       }
       modelIds.push(
-        ...refs.map((ref) => _optionalChain([_chunk57Y2EA2Gcjs.parseModelRef.call(void 0, ref), 'optionalAccess', _494 => _494.modelId])).filter((modelId) => modelId !== void 0)
+        ...refs.map((ref) => _optionalChain([_chunk57Y2EA2Gcjs.parseModelRef.call(void 0, ref), 'optionalAccess', _535 => _535.modelId])).filter((modelId) => modelId !== void 0)
       );
     }
   }
+  if (_optionalChain([directTarget, 'optionalAccess', _536 => _536.kind]) === "provider") {
+    modelIds.push(...await passthroughProviderModelIds(llmConfig, directTarget.providerId));
+  }
   modelIds.push(...imageModels);
   const seen = /* @__PURE__ */ new Set();
   const data = modelIds.filter((modelId) => {
@@ -10078,9 +10521,9 @@ async function handleOutboundRequest(req, res, deps, config, rateLimiter, serial
   const anthropicPathClass = classifyAnthropicMessagesPath(req.url);
   const isCountTokens = anthropicPathClass === "count_tokens";
   const classifiedOperation = _chunkG4CZIUIBcjs.classifyOpenAIOperation.call(void 0, req.method, req.url);
-  const imageOperation = _optionalChain([classifiedOperation, 'optionalAccess', _495 => _495.policyFamily]) === "images" ? classifiedOperation : null;
+  const imageOperation = _optionalChain([classifiedOperation, 'optionalAccess', _537 => _537.policyFamily]) === "images" ? classifiedOperation : null;
   if (anthropicPathClass !== null) markAnthropicProtocolResponse(res);
-  const proxyOauthUsageEnabled = _optionalChain([config, 'access', _496 => _496.anthropic, 'optionalAccess', _497 => _497.proxyOauthUsage]) === true;
+  const proxyOauthUsageEnabled = _optionalChain([config, 'access', _538 => _538.anthropic, 'optionalAccess', _539 => _539.proxyOauthUsage]) === true;
   const isOauthUsagePath = proxyOauthUsageEnabled && isAnthropicOauthUsagePath(req.url);
   if (isOauthUsagePath) markAnthropicProtocolResponse(res);
   const audit = _chunkFX325I5Qcjs.beginAuditCapture.call(void 0, req, res, now, {
@@ -10100,7 +10543,7 @@ async function handleOutboundRequest(req, res, deps, config, rateLimiter, serial
   const verified = verification.key;
   if (audit) audit.keyId = verified.id;
   if (billing) billing.keyId = verified.id;
-  if (verified.loopbackOnly && !isLoopbackPeer(_optionalChain([req, 'access', _498 => _498.socket, 'optionalAccess', _499 => _499.remoteAddress]))) {
+  if (verified.loopbackOnly && !isLoopbackPeer(_optionalChain([req, 'access', _540 => _540.socket, 'optionalAccess', _541 => _541.remoteAddress]))) {
     writeJsonError(res, 403, "This integration key is restricted to loopback clients");
     return;
   }
@@ -10113,7 +10556,7 @@ async function handleOutboundRequest(req, res, deps, config, rateLimiter, serial
       req,
       res,
       deps,
-      _optionalChain([config, 'access', _500 => _500.voucher, 'optionalAccess', _501 => _501.enabled]) === true,
+      _optionalChain([config, 'access', _542 => _542.voucher, 'optionalAccess', _543 => _543.enabled]) === true,
       _nullishCoalesce(redeemLimiter, () => ( getFallbackRedeemLimiter())),
       verified.id,
       _nullishCoalesce(presented, () => ( "")),
@@ -10129,6 +10572,16 @@ async function handleOutboundRequest(req, res, deps, config, rateLimiter, serial
     });
     return;
   }
+  const directProvider = _optionalChain([verified, 'access', _544 => _544.boundUpstream, 'optionalAccess', _545 => _545.kind]) === "provider" ? verified.boundUpstream : null;
+  if (verified.boundUpstream && !directProvider) {
+    config = {
+      ...config,
+      bindings: [
+        ..._nullishCoalesce(config.bindings, () => ( [])),
+        directUpstreamBinding(verified.boundUpstream, verified.id, 1e3)
+      ]
+    };
+  }
   if (isOauthUsagePath) {
     if (req.method !== "GET") {
       writeJsonError(res, 404, `Unsupported: ${req.method} ${req.url}`);
@@ -10162,7 +10615,7 @@ async function handleOutboundRequest(req, res, deps, config, rateLimiter, serial
   }
   if (isCodexSearchRequest(req.method, req.url)) {
     await handleCodexSearchRequest(req, res, {
-      mode: _nullishCoalesce(_optionalChain([config, 'access', _502 => _502.search, 'optionalAccess', _503 => _503.modes, 'access', _504 => _504.codex]), () => ( _chunkE4QHVXV5cjs.DEFAULT_SEARCH_FRONTEND_MODES.codex)),
+      mode: _nullishCoalesce(_optionalChain([config, 'access', _546 => _546.search, 'optionalAccess', _547 => _547.modes, 'access', _548 => _548.codex]), () => ( _chunkE4QHVXV5cjs.DEFAULT_SEARCH_FRONTEND_MODES.codex)),
       runtime: _nullishCoalesce(deps.searchRuntime, () => ( null)),
       // This handler EXECUTES rather than relays, and `handleOutboundRequest`
       // has no signal of its own to hand down, so it builds one. Without it a
@@ -10185,21 +10638,22 @@ async function handleOutboundRequest(req, res, deps, config, rateLimiter, serial
       writeJsonError(res, 403, "API key is not allowed to access this endpoint");
       return;
     }
-    if (resolveModelsShape(_optionalChain([config, 'access', _505 => _505.anthropic, 'optionalAccess', _506 => _506.modelsShape]), verified.allowedEndpoints) === "anthropic") {
+    if (resolveModelsShape(_optionalChain([config, 'access', _549 => _549.anthropic, 'optionalAccess', _550 => _550.modelsShape]), verified.allowedEndpoints) === "anthropic") {
       await writeModelsListAnthropic(
         res,
         deps.llmConfig,
         config,
         verified.id,
         verified.allowedEndpoints,
-        parseModelsLimit(req.url)
+        parseModelsLimit(req.url),
+        verified.boundUpstream
       );
     } else {
       let imageModels = [];
       if (verified.allowedEndpoints.includes("images") && deps.imageModelCatalog) {
         try {
           imageModels = await deps.imageModelCatalog.listAvailableModels(verified.id);
-        } catch (e52) {
+        } catch (e55) {
         }
       }
       await writeModelsList(
@@ -10208,21 +10662,26 @@ async function handleOutboundRequest(req, res, deps, config, rateLimiter, serial
         config,
         verified.id,
         verified.allowedEndpoints,
-        imageModels
+        imageModels,
+        verified.boundUpstream
       );
     }
     return;
   }
   const endpoint = selectEndpoint(req.method, req.url);
   if (!endpoint) {
+    if (directProvider) {
+      await relayDirectUpstream(req, res, deps, verified, config, concurrencyGate, audit);
+      return;
+    }
     writeJsonError(res, 404, `Unsupported: ${req.method} ${req.url}`);
     return;
   }
-  if (verified.allowedEndpoints && !verified.allowedEndpoints.includes(endpoint)) {
+  if (verified.allowedEndpoints && !verified.boundUpstream && !verified.allowedEndpoints.includes(endpoint)) {
     writeJsonError(res, 403, "API key is not allowed to access this endpoint");
     return;
   }
-  if (candidateGatewayBindings(config.bindings, verified.id, endpoint).length === 0) {
+  if (candidateGatewayBindings(config.bindings, verified.id, endpoint).length === 0 && !directProvider) {
     writeJsonError(res, 503, `endpoint '${endpoint}' has no downstream route for this key`);
     return;
   }
@@ -10287,7 +10746,7 @@ async function handleOutboundRequest(req, res, deps, config, rateLimiter, serial
     let parsedBody = {};
     try {
       parsedBody = rawBody ? JSON.parse(rawBody) : {};
-    } catch (e53) {
+    } catch (e56) {
       writeJsonError(res, 400, "Invalid JSON in request body");
       return;
     }
@@ -10316,22 +10775,31 @@ async function handleOutboundRequest(req, res, deps, config, rateLimiter, serial
       role
     });
     if (bindingResolution.source === "none") {
+      if (directProvider) {
+        await relayDirectUpstream(req, res, deps, verified, config, concurrencyGate, audit, rawBody);
+        return;
+      }
       writeJsonError(res, 503, `endpoint '${endpoint}' has no downstream route for this key`);
       return;
     }
     const effectiveEndpointConfig = bindingResolution.config;
     const bindingAffinitySuffix = `:${bindingResolution.binding.id}`;
     const sessionId = deps.proxyDeps.apiKeyPool ? `outbound:${verified.id}${bindingAffinitySuffix}` : null;
+    let replayBody = rawBody;
+    if (!isCountTokens && effectiveEndpointConfig.reasoningEffort && injectMappingEffortDefault(endpoint, effectiveEndpointConfig.reasoningEffort, parsedBody)) {
+      replayBody = JSON.stringify(parsedBody);
+    }
     const hostedImageGenerationAllowed = verified.allowedEndpoints.includes("images");
+    const listResolvedModel = endpoint === "chat" && bindingResolution.binding.modelMode === "mapped" ? _nullishCoalesce(_optionalChain([resolveGatewayModelMappingRow, 'call', _551 => _551(bindingResolution.binding.modelMappings, requestedModel), 'optionalAccess', _552 => _552.target]), () => ( requestedModel)) : requestedModel;
     const resolved = _chunk57Y2EA2Gcjs.isKindMappedEndpoint.call(void 0, endpoint) || endpoint === "chat" ? await _chunk57Y2EA2Gcjs.resolveRoute.call(void 0, {
       config: effectiveEndpointConfig,
       ingressFormat,
       llmConfig: deps.llmConfig,
       sessionId,
-      // Capture the ORIGINAL requested id BEFORE any downstream swap; for
-      // kind-mapped endpoints it selects the kind AND is stamped onto
-      // `route.requestedModel`; for chat it is matched against the list.
-      requestedModel,
+      // The id the route resolves against: the client's ORIGINAL id for
+      // kind-mapped endpoints (it selects the kind AND is stamped onto
+      // `route.requestedModel`), the mapping-resolved target for chat.
+      requestedModel: listResolvedModel,
       // Attribution: stamp the verified named-key id onto the route.
       apiKeyId: verified.id,
       hostedImageGenerationAllowed
@@ -10346,6 +10814,10 @@ async function handleOutboundRequest(req, res, deps, config, rateLimiter, serial
       hostedImageGenerationAllowed
     });
     if (!resolved.ok) {
+      if (directProvider) {
+        await relayDirectUpstream(req, res, deps, verified, config, concurrencyGate, audit, rawBody);
+        return;
+      }
       writeJsonError(res, resolved.error.status, resolved.error.message);
       return;
     }
@@ -10367,7 +10839,7 @@ async function handleOutboundRequest(req, res, deps, config, rateLimiter, serial
     }
     let releaseSerial = null;
     const providerKey = resolved.route.providerId;
-    if (_optionalChain([config, 'access', _507 => _507.userMessageQueue, 'optionalAccess', _508 => _508.enabled]) && providerKey && !isCountTokens && isUserMessageRequest(endpoint, parsedBody)) {
+    if (_optionalChain([config, 'access', _553 => _553.userMessageQueue, 'optionalAccess', _554 => _554.enabled]) && providerKey && !isCountTokens && isUserMessageRequest(endpoint, parsedBody)) {
       const umq = config.userMessageQueue;
       try {
         const serialSlot = await serialQueue.acquire(providerKey, {
@@ -10397,17 +10869,17 @@ async function handleOutboundRequest(req, res, deps, config, rateLimiter, serial
     const token = routeMap.addRoute(
       isCountTokens ? {
         ...requestRoute,
-        anthropicCountTokensMode: _optionalChain([config, 'access', _509 => _509.anthropic, 'optionalAccess', _510 => _510.countTokens, 'optionalAccess', _511 => _511.mode]),
-        anthropicCountTokensEstimateBudgetMs: _optionalChain([config, 'access', _512 => _512.anthropic, 'optionalAccess', _513 => _513.countTokens, 'optionalAccess', _514 => _514.estimateBudgetMs]),
-        anthropicPdfTextExtractionBudgetMs: _optionalChain([config, 'access', _515 => _515.anthropic, 'optionalAccess', _516 => _516.pdfTextExtraction, 'optionalAccess', _517 => _517.budgetMs])
+        anthropicCountTokensMode: _optionalChain([config, 'access', _555 => _555.anthropic, 'optionalAccess', _556 => _556.countTokens, 'optionalAccess', _557 => _557.mode]),
+        anthropicCountTokensEstimateBudgetMs: _optionalChain([config, 'access', _558 => _558.anthropic, 'optionalAccess', _559 => _559.countTokens, 'optionalAccess', _560 => _560.estimateBudgetMs]),
+        anthropicPdfTextExtractionBudgetMs: _optionalChain([config, 'access', _561 => _561.anthropic, 'optionalAccess', _562 => _562.pdfTextExtraction, 'optionalAccess', _563 => _563.budgetMs])
       } : anthropicPathClass !== null ? {
         ...requestRoute,
-        anthropicPdfTextExtractionBudgetMs: _optionalChain([config, 'access', _518 => _518.anthropic, 'optionalAccess', _519 => _519.pdfTextExtraction, 'optionalAccess', _520 => _520.budgetMs])
+        anthropicPdfTextExtractionBudgetMs: _optionalChain([config, 'access', _564 => _564.anthropic, 'optionalAccess', _565 => _565.pdfTextExtraction, 'optionalAccess', _566 => _566.budgetMs])
       } : requestRoute
     );
     try {
       shimAuthHeader(req, token);
-      const replay = makeReplayRequest(req, rawBody);
+      const replay = makeReplayRequest(req, replayBody);
       await routeRequest(replay, res, routeMap, deps.proxyDeps);
     } catch (err) {
       if (_chunk25GXJCEZcjs.isBoundAccountSelectionError.call(void 0, err)) {
@@ -10586,7 +11058,7 @@ var OutboundApiServer = (_class19 = class {
     this.server = listener.server;
     this.boundAddr = bindAddr;
     this.boundPort = actualPort;
-    if (actualPort !== port) _optionalChain([this, 'access', _521 => _521.onPortChange, 'optionalCall', _522 => _522(actualPort)]);
+    if (actualPort !== port) _optionalChain([this, 'access', _567 => _567.onPortChange, 'optionalCall', _568 => _568(actualPort)]);
     this.logInfo(`[OutboundApiServer] Listening on ${bindAddr}:${actualPort}`);
     return actualPort;
   }
@@ -10629,8 +11101,8 @@ var OutboundApiServer = (_class19 = class {
     this.anthropicConfig = input.anthropic;
     this.searchConfig = input.search;
     this.imagesEnabled = input.imagesEnabled === true;
-    this.apiHelloEnabled = _optionalChain([input, 'access', _523 => _523.anthropic, 'optionalAccess', _524 => _524.apiHello]) !== false;
-    _chunkVGBJPHHDcjs.setAnthropicPingHeartbeatMs.call(void 0, _optionalChain([input, 'access', _525 => _525.anthropic, 'optionalAccess', _526 => _526.heartbeatIntervalMs]));
+    this.apiHelloEnabled = _optionalChain([input, 'access', _569 => _569.anthropic, 'optionalAccess', _570 => _570.apiHello]) !== false;
+    _chunkVGBJPHHDcjs.setAnthropicPingHeartbeatMs.call(void 0, _optionalChain([input, 'access', _571 => _571.anthropic, 'optionalAccess', _572 => _572.heartbeatIntervalMs]));
   }
   captureRuntimeSnapshot() {
     return {
@@ -10656,8 +11128,8 @@ var OutboundApiServer = (_class19 = class {
     this.anthropicConfig = snapshot.anthropic;
     this.searchConfig = snapshot.search;
     this.imagesEnabled = snapshot.imagesEnabled;
-    this.apiHelloEnabled = _optionalChain([snapshot, 'access', _527 => _527.anthropic, 'optionalAccess', _528 => _528.apiHello]) !== false;
-    _chunkVGBJPHHDcjs.setAnthropicPingHeartbeatMs.call(void 0, _optionalChain([snapshot, 'access', _529 => _529.anthropic, 'optionalAccess', _530 => _530.heartbeatIntervalMs]));
+    this.apiHelloEnabled = _optionalChain([snapshot, 'access', _573 => _573.anthropic, 'optionalAccess', _574 => _574.apiHello]) !== false;
+    _chunkVGBJPHHDcjs.setAnthropicPingHeartbeatMs.call(void 0, _optionalChain([snapshot, 'access', _575 => _575.anthropic, 'optionalAccess', _576 => _576.heartbeatIntervalMs]));
   }
   async restoreRuntimeSnapshot(snapshot) {
     const current = this.server;
@@ -10691,22 +11163,22 @@ var OutboundApiServer = (_class19 = class {
       server.close(() => {
         try {
           this.logInfo("[OutboundApiServer] Stopped");
-        } catch (e54) {
+        } catch (e57) {
         }
       });
-    } catch (e55) {
+    } catch (e58) {
     }
   }
   announcePublishedListener(bindAddr, requestedPort, actualPort) {
     if (actualPort !== requestedPort) {
       try {
-        _optionalChain([this, 'access', _531 => _531.onPortChange, 'optionalCall', _532 => _532(actualPort)]);
-      } catch (e56) {
+        _optionalChain([this, 'access', _577 => _577.onPortChange, 'optionalCall', _578 => _578(actualPort)]);
+      } catch (e59) {
       }
     }
     try {
       this.logInfo(`[OutboundApiServer] Listening on ${bindAddr}:${actualPort}`);
-    } catch (e57) {
+    } catch (e60) {
     }
   }
   /** Per-request handler. Auth is enforced on EVERY request (incl. loopback). */
@@ -10753,7 +11225,7 @@ var OutboundApiServer = (_class19 = class {
   tryServeApiHello(req, res) {
     if (!this.apiHelloEnabled) return false;
     if (req.method !== "HEAD") return false;
-    const path = _optionalChain([(_nullishCoalesce(req.url, () => ( "/"))), 'access', _533 => _533.split, 'call', _534 => _534("?"), 'access', _535 => _535[0], 'optionalAccess', _536 => _536.replace, 'call', _537 => _537(/\/+$/, "")]) || "/";
+    const path = _optionalChain([(_nullishCoalesce(req.url, () => ( "/"))), 'access', _579 => _579.split, 'call', _580 => _580("?"), 'access', _581 => _581[0], 'optionalAccess', _582 => _582.replace, 'call', _583 => _583(/\/+$/, "")]) || "/";
     if (path !== "/api/hello") return false;
     res.writeHead(200);
     res.end();
@@ -10767,7 +11239,7 @@ var OutboundApiServer = (_class19 = class {
     const provider = this.deps.healthReportProvider;
     if (!provider) return false;
     if (req.method !== "GET" && req.method !== "HEAD") return false;
-    const path = _optionalChain([(_nullishCoalesce(req.url, () => ( "/"))), 'access', _538 => _538.split, 'call', _539 => _539("?"), 'access', _540 => _540[0], 'optionalAccess', _541 => _541.replace, 'call', _542 => _542(/\/+$/, "")]) || "/";
+    const path = _optionalChain([(_nullishCoalesce(req.url, () => ( "/"))), 'access', _584 => _584.split, 'call', _585 => _585("?"), 'access', _586 => _586[0], 'optionalAccess', _587 => _587.replace, 'call', _588 => _588(/\/+$/, "")]) || "/";
     if (path !== "/health" && path !== "/healthz") return false;
     const report = provider();
     res.writeHead(_healthloggingtypes.healthHttpStatus.call(void 0, report.status), { "Content-Type": "application/json" });
@@ -10992,7 +11464,7 @@ function resolveCompletionReasoningPlan(provider, options, target, requestMaxTok
 }
 function resolveOpenAIEffort(provider, options, target) {
   const plan = resolveCompletionReasoningPlan(provider, options, target);
-  return _optionalChain([plan, 'optionalAccess', _543 => _543.kind]) === "level" && plan.enabled ? plan.effort : void 0;
+  return _optionalChain([plan, 'optionalAccess', _589 => _589.kind]) === "level" && plan.enabled ? plan.effort : void 0;
 }
 function buildAnthropicReasoningWire(provider, options) {
   const configuredMaxTokens = _nullishCoalesce(options.maxTokens, () => ( LEGACY_ANTHROPIC_MAX_TOKENS));
@@ -11003,7 +11475,7 @@ function buildAnthropicReasoningWire(provider, options) {
     "anthropic",
     legacyBound
   );
-  if (_optionalChain([plan, 'optionalAccess', _544 => _544.kind]) === "level" && plan.enabled) {
+  if (_optionalChain([plan, 'optionalAccess', _590 => _590.kind]) === "level" && plan.enabled) {
     return {
       effectiveMaxTokens: configuredMaxTokens,
       thinking: { type: "adaptive" },
@@ -11011,7 +11483,7 @@ function buildAnthropicReasoningWire(provider, options) {
       legacyBudgetEnabled: false
     };
   }
-  if (_optionalChain([plan, 'optionalAccess', _545 => _545.kind]) === "budget" && plan.enabled) {
+  if (_optionalChain([plan, 'optionalAccess', _591 => _591.kind]) === "budget" && plan.enabled) {
     return {
       effectiveMaxTokens: legacyBound,
       thinking: { type: "enabled", budget_tokens: plan.budgetTokens },
@@ -11025,13 +11497,13 @@ function buildAnthropicReasoningWire(provider, options) {
 }
 function buildGeminiThinkingConfig(provider, options) {
   const plan = resolveCompletionReasoningPlan(provider, options, "gemini");
-  if (_optionalChain([plan, 'optionalAccess', _546 => _546.kind]) === "level") {
+  if (_optionalChain([plan, 'optionalAccess', _592 => _592.kind]) === "level") {
     return {
       includeThoughts: plan.enabled,
       thinkingLevel: plan.effort
     };
   }
-  if (_optionalChain([plan, 'optionalAccess', _547 => _547.kind]) === "budget") {
+  if (_optionalChain([plan, 'optionalAccess', _593 => _593.kind]) === "budget") {
     return {
       includeThoughts: plan.enabled,
       thinkingBudget: plan.budgetTokens
@@ -11127,7 +11599,7 @@ async function callAnthropicCompletion(provider, apiKey, options, logger) {
       message: {
         id: `assistant-${Date.now()}`,
         role: "assistant",
-        content: _optionalChain([choice2, 'access', _548 => _548.message, 'optionalAccess', _549 => _549.content]) || "",
+        content: _optionalChain([choice2, 'access', _594 => _594.message, 'optionalAccess', _595 => _595.content]) || "",
         timestamp: Date.now()
       },
       usage: openaiResponse2.usage ? {
@@ -11244,7 +11716,7 @@ async function callGeminiCompletion(provider, apiKey, options, logger) {
   const candidate = candidates[0];
   const content = candidate.content;
   let textContent = "";
-  if (_optionalChain([content, 'optionalAccess', _550 => _550.parts])) {
+  if (_optionalChain([content, 'optionalAccess', _596 => _596.parts])) {
     for (const part of content.parts) {
       if (part.text) {
         textContent += part.text;
@@ -11372,7 +11844,7 @@ async function streamOpenAICompletion(provider, apiKey, options, messageId, call
   });
   if (!response.ok) {
     const errorText = await response.text();
-    _optionalChain([callbacks, 'access', _551 => _551.onError, 'optionalCall', _552 => _552(`API error (${response.status}): ${errorText}`)]);
+    _optionalChain([callbacks, 'access', _597 => _597.onError, 'optionalCall', _598 => _598(`API error (${response.status}): ${errorText}`)]);
     return;
   }
   const result = await _chunkHQP3K7PUcjs.streamSSEResponse.call(void 0, response, "openai", {
@@ -11382,7 +11854,7 @@ async function streamOpenAICompletion(provider, apiKey, options, messageId, call
     onVideo: callbacks.onVideo,
     onError: callbacks.onError
   });
-  _optionalChain([callbacks, 'access', _553 => _553.onDone, 'optionalCall', _554 => _554(
+  _optionalChain([callbacks, 'access', _599 => _599.onDone, 'optionalCall', _600 => _600(
     {
       id: messageId,
       role: "assistant",
@@ -11457,7 +11929,7 @@ async function streamAnthropicCompletion(provider, apiKey, options, messageId, c
   logger.info("Streaming Anthropic completion request", {
     url: apiUrl,
     model: anthropicRequest.model,
-    messagesCount: _optionalChain([anthropicRequest, 'access', _555 => _555.messages, 'optionalAccess', _556 => _556.length]),
+    messagesCount: _optionalChain([anthropicRequest, 'access', _601 => _601.messages, 'optionalAccess', _602 => _602.length]),
     max_tokens: anthropicRequest.max_tokens,
     temperature: anthropicRequest.temperature,
     stream: anthropicRequest.stream,
@@ -11474,7 +11946,7 @@ async function streamAnthropicCompletion(provider, apiKey, options, messageId, c
   if (!response.ok) {
     const errorText = await response.text();
     logger.error("Anthropic API error", void 0, { status: response.status, errorText });
-    _optionalChain([callbacks, 'access', _557 => _557.onError, 'optionalCall', _558 => _558(`API error (${response.status}): ${errorText}`)]);
+    _optionalChain([callbacks, 'access', _603 => _603.onError, 'optionalCall', _604 => _604(`API error (${response.status}): ${errorText}`)]);
     return;
   }
   const result = await _chunkHQP3K7PUcjs.streamSSEResponse.call(void 0, response, "anthropic", {
@@ -11485,10 +11957,10 @@ async function streamAnthropicCompletion(provider, apiKey, options, messageId, c
   });
   logger.info("Anthropic stream complete", {
     contentLength: result.content.length,
-    reasoningLength: _optionalChain([result, 'access', _559 => _559.reasoning, 'optionalAccess', _560 => _560.length]) || 0,
+    reasoningLength: _optionalChain([result, 'access', _605 => _605.reasoning, 'optionalAccess', _606 => _606.length]) || 0,
     blocksCount: result.blocks.length
   });
-  _optionalChain([callbacks, 'access', _561 => _561.onDone, 'optionalCall', _562 => _562(
+  _optionalChain([callbacks, 'access', _607 => _607.onDone, 'optionalCall', _608 => _608(
     {
       id: messageId,
       role: "assistant",
@@ -11546,7 +12018,7 @@ async function streamGeminiCompletion(provider, apiKey, options, messageId, call
   if (!response.ok) {
     const errorText = await response.text();
     logger.error("Gemini API error", void 0, { status: response.status, errorText });
-    _optionalChain([callbacks, 'access', _563 => _563.onError, 'optionalCall', _564 => _564(`API error (${response.status}): ${errorText}`)]);
+    _optionalChain([callbacks, 'access', _609 => _609.onError, 'optionalCall', _610 => _610(`API error (${response.status}): ${errorText}`)]);
     return;
   }
   const result = await _chunkHQP3K7PUcjs.streamSSEResponse.call(void 0, response, "gemini", {
@@ -11555,7 +12027,7 @@ async function streamGeminiCompletion(provider, apiKey, options, messageId, call
     onError: callbacks.onError
   });
   logger.info("Gemini stream complete", { contentLength: result.content.length });
-  _optionalChain([callbacks, 'access', _565 => _565.onDone, 'optionalCall', _566 => _566(
+  _optionalChain([callbacks, 'access', _611 => _611.onDone, 'optionalCall', _612 => _612(
     {
       id: messageId,
       role: "assistant",
@@ -11605,7 +12077,7 @@ async function streamOpenAIResponseCompletion(provider, apiKey, options, message
   });
   if (!response.ok) {
     const errorText = await response.text();
-    _optionalChain([callbacks, 'access', _567 => _567.onError, 'optionalCall', _568 => _568(`API error (${response.status}): ${errorText}`)]);
+    _optionalChain([callbacks, 'access', _613 => _613.onError, 'optionalCall', _614 => _614(`API error (${response.status}): ${errorText}`)]);
     return;
   }
   const result = await _chunkHQP3K7PUcjs.streamSSEResponse.call(void 0, response, "openai-response", {
@@ -11614,7 +12086,7 @@ async function streamOpenAIResponseCompletion(provider, apiKey, options, message
     onError: callbacks.onError
   });
   logger.info("OpenAI Response API stream complete", { contentLength: result.content.length });
-  _optionalChain([callbacks, 'access', _569 => _569.onDone, 'optionalCall', _570 => _570(
+  _optionalChain([callbacks, 'access', _615 => _615.onDone, 'optionalCall', _616 => _616(
     {
       id: messageId,
       role: "assistant",
@@ -11642,7 +12114,7 @@ async function resolveEffectiveMaxTokens(llmConfig, _getProvider, logger, _provi
   }
   try {
     const globalParams = await llmConfig.getGlobalModelParameters();
-    if (_optionalChain([globalParams, 'optionalAccess', _571 => _571.maxTokens, 'optionalAccess', _572 => _572.enabled]) && globalParams.maxTokens.value > 0) {
+    if (_optionalChain([globalParams, 'optionalAccess', _617 => _617.maxTokens, 'optionalAccess', _618 => _618.enabled]) && globalParams.maxTokens.value > 0) {
       logger.debug("Using global maxTokens", { maxTokens: globalParams.maxTokens.value });
       return globalParams.maxTokens.value;
     }
@@ -11670,7 +12142,7 @@ async function resolveThinkingBudget(getProvider, logger, providerId, modelId, m
   }
   const thinkingBudget = _thinkingconfig.calculateThinkingBudget.call(void 0, modelId, thinkLevel, maxTokens);
   const provider = await getProvider(providerId);
-  const providerName = _optionalChain([provider, 'optionalAccess', _573 => _573.name, 'optionalAccess', _574 => _574.toLowerCase, 'call', _575 => _575()]) || "";
+  const providerName = _optionalChain([provider, 'optionalAccess', _619 => _619.name, 'optionalAccess', _620 => _620.toLowerCase, 'call', _621 => _621()]) || "";
   const apiFormat = provider ? _chunkA2YMUCBTcjs.resolveApiFormat.call(void 0, provider) : "openai";
   if (apiFormat === "anthropic" || providerName === "anthropic" || providerName.includes("claude")) {
     const thinkingConfig = _thinkingconfig.buildAnthropicThinking.call(void 0, modelId, thinkLevel, maxTokens);
@@ -11707,7 +12179,7 @@ function logToolFormat(tools, logger) {
       tools: openaiTools.map((t) => t.function.name),
       firstTool: {
         name: firstTool.function.name,
-        description: _optionalChain([firstTool, 'access', _576 => _576.function, 'access', _577 => _577.description, 'optionalAccess', _578 => _578.slice, 'call', _579 => _579(0, 100)]),
+        description: _optionalChain([firstTool, 'access', _622 => _622.function, 'access', _623 => _623.description, 'optionalAccess', _624 => _624.slice, 'call', _625 => _625(0, 100)]),
         parameters: firstTool.function.parameters
       }
     });
@@ -11718,7 +12190,7 @@ function logToolFormat(tools, logger) {
       tools: anthropicTools.map((t) => t.name),
       firstTool: {
         name: firstTool.name,
-        description: _optionalChain([firstTool, 'access', _580 => _580.description, 'optionalAccess', _581 => _581.slice, 'call', _582 => _582(0, 100)]),
+        description: _optionalChain([firstTool, 'access', _626 => _626.description, 'optionalAccess', _627 => _627.slice, 'call', _628 => _628(0, 100)]),
         input_schema: firstTool.input_schema
       }
     });
@@ -11729,9 +12201,9 @@ function logToolFormat(tools, logger) {
       count: allDeclarations.length,
       tools: allDeclarations.map((t) => t.name),
       firstTool: {
-        name: _optionalChain([allDeclarations, 'access', _583 => _583[0], 'optionalAccess', _584 => _584.name]),
-        description: _optionalChain([allDeclarations, 'access', _585 => _585[0], 'optionalAccess', _586 => _586.description, 'optionalAccess', _587 => _587.slice, 'call', _588 => _588(0, 100)]),
-        parameters: _optionalChain([allDeclarations, 'access', _589 => _589[0], 'optionalAccess', _590 => _590.parameters])
+        name: _optionalChain([allDeclarations, 'access', _629 => _629[0], 'optionalAccess', _630 => _630.name]),
+        description: _optionalChain([allDeclarations, 'access', _631 => _631[0], 'optionalAccess', _632 => _632.description, 'optionalAccess', _633 => _633.slice, 'call', _634 => _634(0, 100)]),
+        parameters: _optionalChain([allDeclarations, 'access', _635 => _635[0], 'optionalAccess', _636 => _636.parameters])
       }
     });
   }
@@ -11794,7 +12266,7 @@ function buildToolRequest(apiFormat, conversationMessages, actualModel, options,
 function extractDeltaContent(rawJson, apiFormat) {
   const json = rawJson;
   if (apiFormat === "google") {
-    const parts = _optionalChain([json, 'access', _591 => _591.candidates, 'optionalAccess', _592 => _592[0], 'optionalAccess', _593 => _593.content, 'optionalAccess', _594 => _594.parts]) || [];
+    const parts = _optionalChain([json, 'access', _637 => _637.candidates, 'optionalAccess', _638 => _638[0], 'optionalAccess', _639 => _639.content, 'optionalAccess', _640 => _640.parts]) || [];
     let text = "";
     for (const part of parts) {
       if (part.thought === true) continue;
@@ -11802,15 +12274,15 @@ function extractDeltaContent(rawJson, apiFormat) {
     }
     return text;
   } else if (apiFormat === "anthropic") {
-    return _optionalChain([json, 'access', _595 => _595.delta, 'optionalAccess', _596 => _596.text]) || "";
+    return _optionalChain([json, 'access', _641 => _641.delta, 'optionalAccess', _642 => _642.text]) || "";
   } else {
-    return _optionalChain([json, 'access', _597 => _597.choices, 'optionalAccess', _598 => _598[0], 'optionalAccess', _599 => _599.delta, 'optionalAccess', _600 => _600.content]) || "";
+    return _optionalChain([json, 'access', _643 => _643.choices, 'optionalAccess', _644 => _644[0], 'optionalAccess', _645 => _645.delta, 'optionalAccess', _646 => _646.content]) || "";
   }
 }
 function extractDeltaReasoning(rawJson, apiFormat) {
   const json = rawJson;
   if (apiFormat === "google") {
-    const parts = _optionalChain([json, 'access', _601 => _601.candidates, 'optionalAccess', _602 => _602[0], 'optionalAccess', _603 => _603.content, 'optionalAccess', _604 => _604.parts]) || [];
+    const parts = _optionalChain([json, 'access', _647 => _647.candidates, 'optionalAccess', _648 => _648[0], 'optionalAccess', _649 => _649.content, 'optionalAccess', _650 => _650.parts]) || [];
     let reasoning = "";
     for (const part of parts) {
       if (part.thought === true && part.text) reasoning += part.text;
@@ -11819,14 +12291,14 @@ function extractDeltaReasoning(rawJson, apiFormat) {
   } else if (apiFormat === "anthropic") {
     return "";
   } else {
-    const delta = _optionalChain([json, 'access', _605 => _605.choices, 'optionalAccess', _606 => _606[0], 'optionalAccess', _607 => _607.delta]);
-    return (_optionalChain([delta, 'optionalAccess', _608 => _608.thinking, 'optionalAccess', _609 => _609.content]) || "") + (_optionalChain([delta, 'optionalAccess', _610 => _610.reasoning_content]) || "");
+    const delta = _optionalChain([json, 'access', _651 => _651.choices, 'optionalAccess', _652 => _652[0], 'optionalAccess', _653 => _653.delta]);
+    return (_optionalChain([delta, 'optionalAccess', _654 => _654.thinking, 'optionalAccess', _655 => _655.content]) || "") + (_optionalChain([delta, 'optionalAccess', _656 => _656.reasoning_content]) || "");
   }
 }
 function extractToolCalls(rawJson, apiFormat, toolCalls, callbacks, logger, pendingOpenAIToolCalls) {
   const json = rawJson;
   if (apiFormat === "google") {
-    const parts = _optionalChain([json, 'access', _611 => _611.candidates, 'optionalAccess', _612 => _612[0], 'optionalAccess', _613 => _613.content, 'optionalAccess', _614 => _614.parts]) || [];
+    const parts = _optionalChain([json, 'access', _657 => _657.candidates, 'optionalAccess', _658 => _658[0], 'optionalAccess', _659 => _659.content, 'optionalAccess', _660 => _660.parts]) || [];
     for (const part of parts) {
       if (part.functionCall) {
         logger.info("Function call detected", { functionCall: part.functionCall });
@@ -11836,13 +12308,13 @@ function extractToolCalls(rawJson, apiFormat, toolCalls, callbacks, logger, pend
           args: part.functionCall.args || {}
         };
         toolCalls.push(toolCall);
-        _optionalChain([callbacks, 'access', _615 => _615.onToolCall, 'optionalCall', _616 => _616(toolCall)]);
+        _optionalChain([callbacks, 'access', _661 => _661.onToolCall, 'optionalCall', _662 => _662(toolCall)]);
         logger.info("Tool called", { toolName: toolCall.name });
       }
     }
   } else if (apiFormat !== "anthropic") {
-    const delta = _optionalChain([json, 'access', _617 => _617.choices, 'optionalAccess', _618 => _618[0], 'optionalAccess', _619 => _619.delta]);
-    if (_optionalChain([delta, 'optionalAccess', _620 => _620.tool_calls]) && pendingOpenAIToolCalls) {
+    const delta = _optionalChain([json, 'access', _663 => _663.choices, 'optionalAccess', _664 => _664[0], 'optionalAccess', _665 => _665.delta]);
+    if (_optionalChain([delta, 'optionalAccess', _666 => _666.tool_calls]) && pendingOpenAIToolCalls) {
       for (const tc of delta.tool_calls) {
         const index = _nullishCoalesce(tc.index, () => ( 0));
         let pending = pendingOpenAIToolCalls.get(index);
@@ -11851,8 +12323,8 @@ function extractToolCalls(rawJson, apiFormat, toolCalls, callbacks, logger, pend
           pendingOpenAIToolCalls.set(index, pending);
         }
         if (tc.id) pending.id = tc.id;
-        if (_optionalChain([tc, 'access', _621 => _621.function, 'optionalAccess', _622 => _622.name])) pending.name += tc.function.name;
-        if (_optionalChain([tc, 'access', _623 => _623.function, 'optionalAccess', _624 => _624.arguments])) pending.arguments += tc.function.arguments;
+        if (_optionalChain([tc, 'access', _667 => _667.function, 'optionalAccess', _668 => _668.name])) pending.name += tc.function.name;
+        if (_optionalChain([tc, 'access', _669 => _669.function, 'optionalAccess', _670 => _670.arguments])) pending.arguments += tc.function.arguments;
       }
     }
   }
@@ -11867,7 +12339,7 @@ function finalizeOpenAIToolCalls(pendingOpenAIToolCalls, toolCalls, callbacks, l
           args: JSON.parse(pending.arguments || "{}")
         };
         toolCalls.push(toolCall);
-        _optionalChain([callbacks, 'access', _625 => _625.onToolCall, 'optionalCall', _626 => _626(toolCall)]);
+        _optionalChain([callbacks, 'access', _671 => _671.onToolCall, 'optionalCall', _672 => _672(toolCall)]);
         logger.info("Tool called (OpenAI)", { toolName: toolCall.name, args: toolCall.args });
       } catch (e) {
         logger.error("Failed to parse OpenAI tool call arguments", e instanceof Error ? e : void 0, {
@@ -11881,38 +12353,38 @@ function finalizeOpenAIToolCalls(pendingOpenAIToolCalls, toolCalls, callbacks, l
 function parseStreamChunk(rawJson, apiFormat, callbacks, logger) {
   const json = rawJson;
   if (apiFormat === "google") {
-    const candidate = _optionalChain([json, 'access', _627 => _627.candidates, 'optionalAccess', _628 => _628[0]]);
+    const candidate = _optionalChain([json, 'access', _673 => _673.candidates, 'optionalAccess', _674 => _674[0]]);
     if (!candidate) {
       logger.warn("No candidate found in Gemini response");
       return;
     }
-    const parts = _optionalChain([candidate, 'access', _629 => _629.content, 'optionalAccess', _630 => _630.parts]) || [];
+    const parts = _optionalChain([candidate, 'access', _675 => _675.content, 'optionalAccess', _676 => _676.parts]) || [];
     for (const part of parts) {
       if (part.thought === true && part.text) {
-        _optionalChain([callbacks, 'access', _631 => _631.onReasoning, 'optionalCall', _632 => _632(part.text)]);
+        _optionalChain([callbacks, 'access', _677 => _677.onReasoning, 'optionalCall', _678 => _678(part.text)]);
         continue;
       } else if (part.thoughtSignature && !part.thought) {
         logger.debug("Gemini returned thoughtSignature without thought content");
       }
       if (part.text) {
-        _optionalChain([callbacks, 'access', _633 => _633.onDelta, 'optionalCall', _634 => _634(part.text)]);
+        _optionalChain([callbacks, 'access', _679 => _679.onDelta, 'optionalCall', _680 => _680(part.text)]);
       }
     }
   } else if (apiFormat === "anthropic") {
     const delta = json.delta;
-    if (_optionalChain([delta, 'optionalAccess', _635 => _635.text])) {
-      _optionalChain([callbacks, 'access', _636 => _636.onDelta, 'optionalCall', _637 => _637(delta.text)]);
+    if (_optionalChain([delta, 'optionalAccess', _681 => _681.text])) {
+      _optionalChain([callbacks, 'access', _682 => _682.onDelta, 'optionalCall', _683 => _683(delta.text)]);
     }
   } else {
-    const delta = _optionalChain([json, 'access', _638 => _638.choices, 'optionalAccess', _639 => _639[0], 'optionalAccess', _640 => _640.delta]);
-    if (_optionalChain([delta, 'optionalAccess', _641 => _641.content])) {
-      _optionalChain([callbacks, 'access', _642 => _642.onDelta, 'optionalCall', _643 => _643(delta.content)]);
+    const delta = _optionalChain([json, 'access', _684 => _684.choices, 'optionalAccess', _685 => _685[0], 'optionalAccess', _686 => _686.delta]);
+    if (_optionalChain([delta, 'optionalAccess', _687 => _687.content])) {
+      _optionalChain([callbacks, 'access', _688 => _688.onDelta, 'optionalCall', _689 => _689(delta.content)]);
     }
-    if (_optionalChain([delta, 'optionalAccess', _644 => _644.thinking, 'optionalAccess', _645 => _645.content])) {
-      _optionalChain([callbacks, 'access', _646 => _646.onReasoning, 'optionalCall', _647 => _647(delta.thinking.content)]);
+    if (_optionalChain([delta, 'optionalAccess', _690 => _690.thinking, 'optionalAccess', _691 => _691.content])) {
+      _optionalChain([callbacks, 'access', _692 => _692.onReasoning, 'optionalCall', _693 => _693(delta.thinking.content)]);
     }
-    if (_optionalChain([delta, 'optionalAccess', _648 => _648.reasoning_content])) {
-      _optionalChain([callbacks, 'access', _649 => _649.onReasoning, 'optionalCall', _650 => _650(delta.reasoning_content)]);
+    if (_optionalChain([delta, 'optionalAccess', _694 => _694.reasoning_content])) {
+      _optionalChain([callbacks, 'access', _695 => _695.onReasoning, 'optionalCall', _696 => _696(delta.reasoning_content)]);
     }
   }
 }
@@ -11925,7 +12397,7 @@ function buildIterationBlocks(iteration, content, reasoning, blocks, callbacks)
       content: reasoning
     };
     blocks.push(thinkingBlock);
-    _optionalChain([callbacks, 'access', _651 => _651.onBlock, 'optionalCall', _652 => _652(thinkingBlock)]);
+    _optionalChain([callbacks, 'access', _697 => _697.onBlock, 'optionalCall', _698 => _698(thinkingBlock)]);
   }
   if (content && content.trim()) {
     const textBlock = {
@@ -11934,7 +12406,7 @@ function buildIterationBlocks(iteration, content, reasoning, blocks, callbacks)
       content
     };
     blocks.push(textBlock);
-    _optionalChain([callbacks, 'access', _653 => _653.onBlock, 'optionalCall', _654 => _654(textBlock)]);
+    _optionalChain([callbacks, 'access', _699 => _699.onBlock, 'optionalCall', _700 => _700(textBlock)]);
   }
 }
 async function executeToolCalls(toolCalls, mcpTools, mcpService, blocks, callbacks, logger, builtinExecutor) {
@@ -11949,7 +12421,7 @@ async function executeToolCalls(toolCalls, mcpTools, mcpService, blocks, callbac
       status: "running"
     };
     blocks.push(toolUseBlock);
-    _optionalChain([callbacks, 'access', _655 => _655.onBlock, 'optionalCall', _656 => _656(toolUseBlock)]);
+    _optionalChain([callbacks, 'access', _701 => _701.onBlock, 'optionalCall', _702 => _702(toolUseBlock)]);
     try {
       logger.info("Executing tool", { toolName: toolCall.name });
       const mcpTool = mcpTools.find((t) => t.id === toolCall.name);
@@ -11972,8 +12444,8 @@ async function executeToolCalls(toolCalls, mcpTools, mcpService, blocks, callbac
         result = { isError: true, content: [{ type: "text", text: "MCP service not available" }] };
       }
       logger.info("Tool result received", { result });
-      _optionalChain([callbacks, 'access', _657 => _657.onToolResult, 'optionalCall', _658 => _658(toolCall.id, result)]);
-      const resultText = _optionalChain([result, 'access', _659 => _659.content, 'optionalAccess', _660 => _660[0], 'optionalAccess', _661 => _661.text]) || JSON.stringify(result);
+      _optionalChain([callbacks, 'access', _703 => _703.onToolResult, 'optionalCall', _704 => _704(toolCall.id, result)]);
+      const resultText = _optionalChain([result, 'access', _705 => _705.content, 'optionalAccess', _706 => _706[0], 'optionalAccess', _707 => _707.text]) || JSON.stringify(result);
       const toolResultBlock = {
         id: `${toolCall.id}_result`,
         type: "tool_result",
@@ -11983,11 +12455,11 @@ async function executeToolCalls(toolCalls, mcpTools, mcpService, blocks, callbac
         isError: result.isError
       };
       blocks.push(toolResultBlock);
-      _optionalChain([callbacks, 'access', _662 => _662.onBlock, 'optionalCall', _663 => _663(toolResultBlock)]);
+      _optionalChain([callbacks, 'access', _708 => _708.onBlock, 'optionalCall', _709 => _709(toolResultBlock)]);
       const toolUseBlockRef = blocks.find((b) => b.id === `${toolCall.id}_use`);
       if (toolUseBlockRef && toolUseBlockRef.type === "tool_use") {
         toolUseBlockRef.status = result.isError ? "error" : "completed";
-        _optionalChain([callbacks, 'access', _664 => _664.onBlock, 'optionalCall', _665 => _665({ ...toolUseBlockRef })]);
+        _optionalChain([callbacks, 'access', _710 => _710.onBlock, 'optionalCall', _711 => _711({ ...toolUseBlockRef })]);
       }
       toolResults.push({ toolCall, result });
     } catch (error) {
@@ -11997,7 +12469,7 @@ async function executeToolCalls(toolCalls, mcpTools, mcpService, blocks, callbac
         isError: true,
         content: [{ type: "text", text: `Error: ${errorMessage}` }]
       };
-      _optionalChain([callbacks, 'access', _666 => _666.onToolResult, 'optionalCall', _667 => _667(toolCall.id, errorResult)]);
+      _optionalChain([callbacks, 'access', _712 => _712.onToolResult, 'optionalCall', _713 => _713(toolCall.id, errorResult)]);
       const errorToolResultBlock = {
         id: `${toolCall.id}_result`,
         type: "tool_result",
@@ -12007,11 +12479,11 @@ async function executeToolCalls(toolCalls, mcpTools, mcpService, blocks, callbac
         isError: true
       };
       blocks.push(errorToolResultBlock);
-      _optionalChain([callbacks, 'access', _668 => _668.onBlock, 'optionalCall', _669 => _669(errorToolResultBlock)]);
+      _optionalChain([callbacks, 'access', _714 => _714.onBlock, 'optionalCall', _715 => _715(errorToolResultBlock)]);
       const errorToolUseBlockRef = blocks.find((b) => b.id === `${toolCall.id}_use`);
       if (errorToolUseBlockRef && errorToolUseBlockRef.type === "tool_use") {
         errorToolUseBlockRef.status = "error";
-        _optionalChain([callbacks, 'access', _670 => _670.onBlock, 'optionalCall', _671 => _671({ ...errorToolUseBlockRef })]);
+        _optionalChain([callbacks, 'access', _716 => _716.onBlock, 'optionalCall', _717 => _717({ ...errorToolUseBlockRef })]);
       }
       toolResults.push({ toolCall, result: errorResult });
     }
@@ -12021,7 +12493,7 @@ async function executeToolCalls(toolCalls, mcpTools, mcpService, blocks, callbac
 function mapToolArguments(args, mcpTool, logger) {
   const mappedArgs = { ...args };
   const toolSchema = mcpTool.inputSchema;
-  if (_optionalChain([toolSchema, 'optionalAccess', _672 => _672.properties])) {
+  if (_optionalChain([toolSchema, 'optionalAccess', _718 => _718.properties])) {
     const expectedParams = Object.keys(toolSchema.properties);
     const paramMappings = {
       "search_query": ["query", "q", "searchQuery", "search"],
@@ -12055,25 +12527,25 @@ async function streamWithTools(options, callbacks, mcpService, llmConfig, getPro
       options.providerId,
       options.model
     );
-    const actualProviderId = _optionalChain([routedInfo, 'optionalAccess', _673 => _673.actualProviderId]) || options.providerId;
-    const actualModel = _optionalChain([routedInfo, 'optionalAccess', _674 => _674.actualModelId]) || options.model;
+    const actualProviderId = _optionalChain([routedInfo, 'optionalAccess', _719 => _719.actualProviderId]) || options.providerId;
+    const actualModel = _optionalChain([routedInfo, 'optionalAccess', _720 => _720.actualModelId]) || options.model;
     const provider = await getProvider(actualProviderId);
     if (!provider) {
-      _optionalChain([callbacks, 'access', _675 => _675.onError, 'optionalCall', _676 => _676(`Provider not found: ${actualProviderId}`)]);
+      _optionalChain([callbacks, 'access', _721 => _721.onError, 'optionalCall', _722 => _722(`Provider not found: ${actualProviderId}`)]);
       return;
     }
     if (!provider.enabled) {
-      _optionalChain([callbacks, 'access', _677 => _677.onError, 'optionalCall', _678 => _678(`Provider is disabled: ${provider.name}`)]);
+      _optionalChain([callbacks, 'access', _723 => _723.onError, 'optionalCall', _724 => _724(`Provider is disabled: ${provider.name}`)]);
       return;
     }
     const { apiKey: effectiveKey } = _chunkA2YMUCBTcjs.resolveProviderEndpoint.call(void 0, provider);
     const apiKey = resolveApiKey2(effectiveKey);
     if (!apiKey) {
-      _optionalChain([callbacks, 'access', _679 => _679.onError, 'optionalCall', _680 => _680("API key not configured")]);
+      _optionalChain([callbacks, 'access', _725 => _725.onError, 'optionalCall', _726 => _726("API key not configured")]);
       return;
     }
     const messageId = `msg_${Date.now()}_${Math.random().toString(36).slice(2)}`;
-    _optionalChain([callbacks, 'access', _681 => _681.onStart, 'optionalCall', _682 => _682(messageId)]);
+    _optionalChain([callbacks, 'access', _727 => _727.onStart, 'optionalCall', _728 => _728(messageId)]);
     const globalParams = await llmConfig.getGlobalModelParameters();
     const MAX_ITERATIONS = _nullishCoalesce(globalParams.toolMaxTurns, () => ( 100));
     let iteration = 0;
@@ -12120,12 +12592,12 @@ async function streamWithTools(options, callbacks, mcpService, llmConfig, getPro
       });
       if (!response.ok) {
         const errorText = await response.text();
-        _optionalChain([callbacks, 'access', _683 => _683.onError, 'optionalCall', _684 => _684(`API error (${response.status}): ${errorText}`)]);
+        _optionalChain([callbacks, 'access', _729 => _729.onError, 'optionalCall', _730 => _730(`API error (${response.status}): ${errorText}`)]);
         return;
       }
-      const reader = _optionalChain([response, 'access', _685 => _685.body, 'optionalAccess', _686 => _686.getReader, 'call', _687 => _687()]);
+      const reader = _optionalChain([response, 'access', _731 => _731.body, 'optionalAccess', _732 => _732.getReader, 'call', _733 => _733()]);
       if (!reader) {
-        _optionalChain([callbacks, 'access', _688 => _688.onError, 'optionalCall', _689 => _689("No response body")]);
+        _optionalChain([callbacks, 'access', _734 => _734.onError, 'optionalCall', _735 => _735("No response body")]);
         return;
       }
       const decoder = new TextDecoder();
@@ -12158,7 +12630,7 @@ async function streamWithTools(options, callbacks, mcpService, llmConfig, getPro
                 logger.debug("Parsed JSON", { json });
                 if (json.error) {
                   logger.error("API Error", void 0, { error: json.error });
-                  _optionalChain([callbacks, 'access', _690 => _690.onError, 'optionalCall', _691 => _691(`API Error: ${json.error.message || JSON.stringify(json.error)}`)]);
+                  _optionalChain([callbacks, 'access', _736 => _736.onError, 'optionalCall', _737 => _737(`API Error: ${json.error.message || JSON.stringify(json.error)}`)]);
                   return;
                 }
                 parseStreamChunk(json, apiFormat, callbacks, logger);
@@ -12191,7 +12663,7 @@ async function streamWithTools(options, callbacks, mcpService, llmConfig, getPro
           toolCallsLength: toolCalls.length,
           executableToolCallsLength: executableToolCalls.length,
           hasMcpTools: !!options.mcpTools,
-          mcpToolsLength: _optionalChain([options, 'access', _692 => _692.mcpTools, 'optionalAccess', _693 => _693.length]),
+          mcpToolsLength: _optionalChain([options, 'access', _738 => _738.mcpTools, 'optionalAccess', _739 => _739.length]),
           hasMcpService: !!mcpService
         });
         if (executableToolCalls.length > 0 && options.mcpTools && (mcpService || builtinExecutor)) {
@@ -12212,7 +12684,7 @@ async function streamWithTools(options, callbacks, mcpService, llmConfig, getPro
             builtinExecutor
           );
           const toolResultsText = toolResults.map(({ toolCall, result }) => {
-            const resultText = typeof result === "string" ? result : _optionalChain([result, 'access', _694 => _694.content, 'optionalAccess', _695 => _695[0], 'optionalAccess', _696 => _696.text]) || JSON.stringify(result);
+            const resultText = typeof result === "string" ? result : _optionalChain([result, 'access', _740 => _740.content, 'optionalAccess', _741 => _741[0], 'optionalAccess', _742 => _742.text]) || JSON.stringify(result);
             return `Tool ${toolCall.name} result:
 ${resultText}`;
           }).join("\n\n");
@@ -12230,12 +12702,12 @@ ${resultText}`;
         }
       } catch (streamError) {
         logger.error("Stream processing error", streamError instanceof Error ? streamError : void 0);
-        _optionalChain([callbacks, 'access', _697 => _697.onError, 'optionalCall', _698 => _698(`Stream error: ${streamError instanceof Error ? streamError.message : "Unknown error"}`)]);
+        _optionalChain([callbacks, 'access', _743 => _743.onError, 'optionalCall', _744 => _744(`Stream error: ${streamError instanceof Error ? streamError.message : "Unknown error"}`)]);
         return;
       }
     }
     logger.info("Sending final callback", { blocksCount: blocks.length });
-    _optionalChain([callbacks, 'access', _699 => _699.onDone, 'optionalCall', _700 => _700({
+    _optionalChain([callbacks, 'access', _745 => _745.onDone, 'optionalCall', _746 => _746({
       id: messageId,
       role: "assistant",
       content: finalContent,
@@ -12246,7 +12718,7 @@ ${resultText}`;
   } catch (error) {
     logger.error("Error in streamWithTools", error instanceof Error ? error : void 0);
     const message = error instanceof Error ? error.message : "Unknown error";
-    _optionalChain([callbacks, 'access', _701 => _701.onError, 'optionalCall', _702 => _702(message)]);
+    _optionalChain([callbacks, 'access', _747 => _747.onError, 'optionalCall', _748 => _748(message)]);
   }
 }
 
@@ -12297,8 +12769,8 @@ async function completeWithTransformers(options, llmConfig, getProvider, resolve
       options.providerId,
       options.model
     );
-    const actualProviderId = _optionalChain([routedInfo, 'optionalAccess', _703 => _703.actualProviderId]) || options.providerId;
-    const actualModel = _optionalChain([routedInfo, 'optionalAccess', _704 => _704.actualModelId]) || options.model;
+    const actualProviderId = _optionalChain([routedInfo, 'optionalAccess', _749 => _749.actualProviderId]) || options.providerId;
+    const actualModel = _optionalChain([routedInfo, 'optionalAccess', _750 => _750.actualModelId]) || options.model;
     const provider = await getProvider(actualProviderId);
     if (!provider) {
       return { success: false, error: `Provider not found: ${actualProviderId}` };
@@ -12375,18 +12847,18 @@ async function completeWithTransformers(options, llmConfig, getProvider, resolve
       { endpointTransformer: void 0 }
     );
     const data = await transformedResponse2.json();
-    const choice = _optionalChain([data, 'access', _705 => _705.choices, 'optionalAccess', _706 => _706[0]]);
+    const choice = _optionalChain([data, 'access', _751 => _751.choices, 'optionalAccess', _752 => _752[0]]);
     if (!choice) {
       return { success: false, error: "No choices in response" };
     }
-    const rawToolCalls = _optionalChain([choice, 'access', _707 => _707.message, 'optionalAccess', _708 => _708.tool_calls]);
-    const toolCalls = _optionalChain([rawToolCalls, 'optionalAccess', _709 => _709.map, 'call', _710 => _710((tc) => ({
+    const rawToolCalls = _optionalChain([choice, 'access', _753 => _753.message, 'optionalAccess', _754 => _754.tool_calls]);
+    const toolCalls = _optionalChain([rawToolCalls, 'optionalAccess', _755 => _755.map, 'call', _756 => _756((tc) => ({
       id: tc.id,
       name: tc.function.name,
       args: typeof tc.function.arguments === "string" ? JSON.parse(tc.function.arguments) : tc.function.arguments
     }))]);
     const tapped = readUsageFromOpenAIResponse(data.usage);
-    if (_optionalChain([recording, 'optionalAccess', _711 => _711.recorder]) && tapped) {
+    if (_optionalChain([recording, 'optionalAccess', _757 => _757.recorder]) && tapped) {
       recording.recorder.record({
         messageId: _nullishCoalesce(options.messageId, () => ( null)),
         parentMessageId: _nullishCoalesce(options.parentMessageId, () => ( null)),
@@ -12404,9 +12876,9 @@ async function completeWithTransformers(options, llmConfig, getProvider, resolve
       message: {
         id: `msg_${Date.now()}`,
         role: "assistant",
-        content: _optionalChain([choice, 'access', _712 => _712.message, 'optionalAccess', _713 => _713.content]) || "",
+        content: _optionalChain([choice, 'access', _758 => _758.message, 'optionalAccess', _759 => _759.content]) || "",
         timestamp: Date.now(),
-        thinking: data.reasoning_content || _optionalChain([choice, 'access', _714 => _714.message, 'optionalAccess', _715 => _715.thinking, 'optionalAccess', _716 => _716.content]) ? { content: data.reasoning_content || _optionalChain([choice, 'access', _717 => _717.message, 'optionalAccess', _718 => _718.thinking, 'optionalAccess', _719 => _719.content]) || "", signature: _optionalChain([choice, 'access', _720 => _720.message, 'optionalAccess', _721 => _721.thinking, 'optionalAccess', _722 => _722.signature]) } : void 0,
+        thinking: data.reasoning_content || _optionalChain([choice, 'access', _760 => _760.message, 'optionalAccess', _761 => _761.thinking, 'optionalAccess', _762 => _762.content]) ? { content: data.reasoning_content || _optionalChain([choice, 'access', _763 => _763.message, 'optionalAccess', _764 => _764.thinking, 'optionalAccess', _765 => _765.content]) || "", signature: _optionalChain([choice, 'access', _766 => _766.message, 'optionalAccess', _767 => _767.thinking, 'optionalAccess', _768 => _768.signature]) } : void 0,
         toolCalls
       },
       usage: data.usage ? {
@@ -12427,21 +12899,21 @@ async function completeStreamWithTransformers(options, callbacks, llmConfig, get
       options.providerId,
       options.model
     );
-    const actualProviderId = _optionalChain([routedInfo, 'optionalAccess', _723 => _723.actualProviderId]) || options.providerId;
-    const actualModel = _optionalChain([routedInfo, 'optionalAccess', _724 => _724.actualModelId]) || options.model;
+    const actualProviderId = _optionalChain([routedInfo, 'optionalAccess', _769 => _769.actualProviderId]) || options.providerId;
+    const actualModel = _optionalChain([routedInfo, 'optionalAccess', _770 => _770.actualModelId]) || options.model;
     const provider = await getProvider(actualProviderId);
     if (!provider) {
-      _optionalChain([callbacks, 'access', _725 => _725.onError, 'optionalCall', _726 => _726(`Provider not found: ${actualProviderId}`)]);
+      _optionalChain([callbacks, 'access', _771 => _771.onError, 'optionalCall', _772 => _772(`Provider not found: ${actualProviderId}`)]);
       return;
     }
     if (!provider.enabled) {
-      _optionalChain([callbacks, 'access', _727 => _727.onError, 'optionalCall', _728 => _728(`Provider is disabled: ${provider.name}`)]);
+      _optionalChain([callbacks, 'access', _773 => _773.onError, 'optionalCall', _774 => _774(`Provider is disabled: ${provider.name}`)]);
       return;
     }
     const { apiKey: effectiveKey } = _chunkA2YMUCBTcjs.resolveProviderEndpoint.call(void 0, provider);
     const apiKey = resolveApiKey2(effectiveKey);
     if (!apiKey) {
-      _optionalChain([callbacks, 'access', _729 => _729.onError, 'optionalCall', _730 => _730("API key not configured")]);
+      _optionalChain([callbacks, 'access', _775 => _775.onError, 'optionalCall', _776 => _776("API key not configured")]);
       return;
     }
     const { chain, hasTransformers } = await resolveChainWithMain(
@@ -12453,7 +12925,7 @@ async function completeStreamWithTransformers(options, callbacks, llmConfig, get
       return completeStreamFallback(options, callbacks);
     }
     const messageId = `msg_${Date.now()}`;
-    _optionalChain([callbacks, 'access', _731 => _731.onStart, 'optionalCall', _732 => _732(messageId)]);
+    _optionalChain([callbacks, 'access', _777 => _777.onStart, 'optionalCall', _778 => _778(messageId)]);
     const unifiedRequest = buildUnifiedCompletionRequest(actualModel, options, true);
     const transformerProvider = {
       name: provider.name,
@@ -12493,7 +12965,7 @@ async function completeStreamWithTransformers(options, callbacks, llmConfig, get
     });
     if (!response.ok) {
       const errorText = await response.text();
-      _optionalChain([callbacks, 'access', _733 => _733.onError, 'optionalCall', _734 => _734(`API error (${response.status}): ${errorText}`)]);
+      _optionalChain([callbacks, 'access', _779 => _779.onError, 'optionalCall', _780 => _780(`API error (${response.status}): ${errorText}`)]);
       return;
     }
     const transformedResponse2 = await executor.executeResponseChain(
@@ -12503,9 +12975,9 @@ async function completeStreamWithTransformers(options, callbacks, llmConfig, get
       chain,
       { endpointTransformer: void 0 }
     );
-    const reader = _optionalChain([transformedResponse2, 'access', _735 => _735.body, 'optionalAccess', _736 => _736.getReader, 'call', _737 => _737()]);
+    const reader = _optionalChain([transformedResponse2, 'access', _781 => _781.body, 'optionalAccess', _782 => _782.getReader, 'call', _783 => _783()]);
     if (!reader) {
-      _optionalChain([callbacks, 'access', _738 => _738.onError, 'optionalCall', _739 => _739("No response body")]);
+      _optionalChain([callbacks, 'access', _784 => _784.onError, 'optionalCall', _785 => _785("No response body")]);
       return;
     }
     const decoder = new TextDecoder();
@@ -12523,22 +12995,22 @@ async function completeStreamWithTransformers(options, callbacks, llmConfig, get
             if (data === "[DONE]") continue;
             try {
               const json = JSON.parse(data);
-              const delta = _optionalChain([json, 'access', _740 => _740.choices, 'optionalAccess', _741 => _741[0], 'optionalAccess', _742 => _742.delta]);
-              if (_optionalChain([delta, 'optionalAccess', _743 => _743.content])) {
+              const delta = _optionalChain([json, 'access', _786 => _786.choices, 'optionalAccess', _787 => _787[0], 'optionalAccess', _788 => _788.delta]);
+              if (_optionalChain([delta, 'optionalAccess', _789 => _789.content])) {
                 content += delta.content;
-                _optionalChain([callbacks, 'access', _744 => _744.onDelta, 'optionalCall', _745 => _745(delta.content)]);
+                _optionalChain([callbacks, 'access', _790 => _790.onDelta, 'optionalCall', _791 => _791(delta.content)]);
               }
-              if (_optionalChain([delta, 'optionalAccess', _746 => _746.thinking, 'optionalAccess', _747 => _747.content])) {
+              if (_optionalChain([delta, 'optionalAccess', _792 => _792.thinking, 'optionalAccess', _793 => _793.content])) {
                 reasoning += delta.thinking.content;
-                _optionalChain([callbacks, 'access', _748 => _748.onReasoning, 'optionalCall', _749 => _749(delta.thinking.content)]);
+                _optionalChain([callbacks, 'access', _794 => _794.onReasoning, 'optionalCall', _795 => _795(delta.thinking.content)]);
               }
-              if (_optionalChain([delta, 'optionalAccess', _750 => _750.reasoning_content])) {
+              if (_optionalChain([delta, 'optionalAccess', _796 => _796.reasoning_content])) {
                 reasoning += delta.reasoning_content;
-                _optionalChain([callbacks, 'access', _751 => _751.onReasoning, 'optionalCall', _752 => _752(delta.reasoning_content)]);
+                _optionalChain([callbacks, 'access', _797 => _797.onReasoning, 'optionalCall', _798 => _798(delta.reasoning_content)]);
               }
               if (json.usage) {
                 const tapped = readUsageFromOpenAIResponse(json.usage);
-                if (_optionalChain([recording, 'optionalAccess', _753 => _753.recorder]) && tapped) {
+                if (_optionalChain([recording, 'optionalAccess', _799 => _799.recorder]) && tapped) {
                   recording.recorder.record({
                     messageId: _nullishCoalesce(options.messageId, () => ( null)),
                     parentMessageId: _nullishCoalesce(options.parentMessageId, () => ( null)),
@@ -12551,7 +13023,7 @@ async function completeStreamWithTransformers(options, callbacks, llmConfig, get
                     rawUsage: json.usage
                   });
                 }
-                _optionalChain([callbacks, 'access', _754 => _754.onDone, 'optionalCall', _755 => _755(
+                _optionalChain([callbacks, 'access', _800 => _800.onDone, 'optionalCall', _801 => _801(
                   {
                     id: messageId,
                     role: "assistant",
@@ -12572,7 +13044,7 @@ async function completeStreamWithTransformers(options, callbacks, llmConfig, get
           }
         }
       }
-      _optionalChain([callbacks, 'access', _756 => _756.onDone, 'optionalCall', _757 => _757({
+      _optionalChain([callbacks, 'access', _802 => _802.onDone, 'optionalCall', _803 => _803({
         id: messageId,
         role: "assistant",
         content,
@@ -12584,7 +13056,7 @@ async function completeStreamWithTransformers(options, callbacks, llmConfig, get
     }
   } catch (error) {
     const message = error instanceof Error ? error.message : "Unknown error";
-    _optionalChain([callbacks, 'access', _758 => _758.onError, 'optionalCall', _759 => _759(message)]);
+    _optionalChain([callbacks, 'access', _804 => _804.onError, 'optionalCall', _805 => _805(message)]);
   }
 }
 
@@ -12651,8 +13123,8 @@ var CompletionService = (_class21 = class {
         options.providerId,
         options.model
       );
-      const actualProviderId = _optionalChain([routedInfo, 'optionalAccess', _760 => _760.actualProviderId]) || options.providerId;
-      const actualModel = _optionalChain([routedInfo, 'optionalAccess', _761 => _761.actualModelId]) || options.model;
+      const actualProviderId = _optionalChain([routedInfo, 'optionalAccess', _806 => _806.actualProviderId]) || options.providerId;
+      const actualModel = _optionalChain([routedInfo, 'optionalAccess', _807 => _807.actualModelId]) || options.model;
       const provider = await this.getProvider(actualProviderId);
       if (!provider) {
         return { success: false, error: `Provider not found: ${actualProviderId}` };
@@ -12685,7 +13157,7 @@ var CompletionService = (_class21 = class {
         this.apiKeyPool.reportSuccess(options.sessionId);
       }
       if (result.success && result.usage && options.sessionId) {
-        _optionalChain([this, 'access', _762 => _762.usageEventSink, 'optionalAccess', _763 => _763.emit, 'call', _764 => _764({
+        _optionalChain([this, 'access', _808 => _808.usageEventSink, 'optionalAccess', _809 => _809.emit, 'call', _810 => _810({
           sessionId: options.sessionId,
           modelId: actualModel,
           usage: result.usage,
@@ -12714,8 +13186,8 @@ var CompletionService = (_class21 = class {
         options.model
       );
       this.logger.debug("Resolved routed model", { routedInfo });
-      const actualProviderId = _optionalChain([routedInfo, 'optionalAccess', _765 => _765.actualProviderId]) || options.providerId;
-      const actualModel = _optionalChain([routedInfo, 'optionalAccess', _766 => _766.actualModelId]) || options.model;
+      const actualProviderId = _optionalChain([routedInfo, 'optionalAccess', _811 => _811.actualProviderId]) || options.providerId;
+      const actualModel = _optionalChain([routedInfo, 'optionalAccess', _812 => _812.actualModelId]) || options.model;
       this.logger.debug("Resolved provider and model", { actualProviderId, actualModel });
       const provider = await this.getProvider(actualProviderId);
       this.logger.debug("Retrieved provider", provider ? {
@@ -12727,22 +13199,22 @@ var CompletionService = (_class21 = class {
         enabled: provider.enabled
       } : { error: "Provider not found" });
       if (!provider) {
-        _optionalChain([callbacks, 'access', _767 => _767.onError, 'optionalCall', _768 => _768(`Provider not found: ${actualProviderId}`)]);
+        _optionalChain([callbacks, 'access', _813 => _813.onError, 'optionalCall', _814 => _814(`Provider not found: ${actualProviderId}`)]);
         return;
       }
       if (!provider.enabled) {
-        _optionalChain([callbacks, 'access', _769 => _769.onError, 'optionalCall', _770 => _770(`Provider is disabled: ${provider.name}`)]);
+        _optionalChain([callbacks, 'access', _815 => _815.onError, 'optionalCall', _816 => _816(`Provider is disabled: ${provider.name}`)]);
         return;
       }
       const apiKey = await this.resolveApiKeyForRequest(provider, actualProviderId, options.sessionId);
       if (!apiKey) {
-        _optionalChain([callbacks, 'access', _771 => _771.onError, 'optionalCall', _772 => _772("API key not configured")]);
+        _optionalChain([callbacks, 'access', _817 => _817.onError, 'optionalCall', _818 => _818("API key not configured")]);
         return;
       }
       const apiFormat = _chunkA2YMUCBTcjs.resolveApiFormat.call(void 0, provider);
       this.logger.info("Using API format for stream", { apiFormat });
       const messageId = `msg_${Date.now()}`;
-      _optionalChain([callbacks, 'access', _773 => _773.onStart, 'optionalCall', _774 => _774(messageId)]);
+      _optionalChain([callbacks, 'access', _819 => _819.onStart, 'optionalCall', _820 => _820(messageId)]);
       const resolvedOptions = { ...options, model: actualModel };
       if (options.sessionId) {
         const sid = options.sessionId;
@@ -12751,14 +13223,14 @@ var CompletionService = (_class21 = class {
           ...callbacks,
           onDone: (message, usage, metrics) => {
             if (usage) {
-              _optionalChain([this, 'access', _775 => _775.usageEventSink, 'optionalAccess', _776 => _776.emit, 'call', _777 => _777({
+              _optionalChain([this, 'access', _821 => _821.usageEventSink, 'optionalAccess', _822 => _822.emit, 'call', _823 => _823({
                 sessionId: sid,
                 modelId: actualModel,
                 usage,
                 engineOrigin: "completion"
               })]);
             }
-            _optionalChain([userOnDone, 'optionalCall', _778 => _778(message, usage, metrics)]);
+            _optionalChain([userOnDone, 'optionalCall', _824 => _824(message, usage, metrics)]);
           }
         };
       }
@@ -12774,11 +13246,11 @@ var CompletionService = (_class21 = class {
               retryState.error = { status, message: error };
               return;
             }
-            _optionalChain([callbacks, 'access', _779 => _779.onError, 'optionalCall', _780 => _780(error)]);
+            _optionalChain([callbacks, 'access', _825 => _825.onError, 'optionalCall', _826 => _826(error)]);
           },
           onDone: (message, usage, metrics) => {
             this.apiKeyPool.reportSuccess(options.sessionId);
-            _optionalChain([callbacks, 'access', _781 => _781.onDone, 'optionalCall', _782 => _782(message, usage, metrics)]);
+            _optionalChain([callbacks, 'access', _827 => _827.onDone, 'optionalCall', _828 => _828(message, usage, metrics)]);
           }
         };
         await this.callStreamHandler(apiFormat, provider, apiKey, resolvedOptions, messageId, interceptCallbacks);
@@ -12799,7 +13271,7 @@ var CompletionService = (_class21 = class {
               // don't fire onStart again
             });
           } else {
-            _optionalChain([callbacks, 'access', _783 => _783.onError, 'optionalCall', _784 => _784(retryState.error.message)]);
+            _optionalChain([callbacks, 'access', _829 => _829.onError, 'optionalCall', _830 => _830(retryState.error.message)]);
           }
         }
       } else {
@@ -12812,7 +13284,7 @@ var CompletionService = (_class21 = class {
     } catch (error) {
       const message = error instanceof Error ? error.message : "Unknown error";
       this.logger.error("Stream completion error", error instanceof Error ? error : void 0, { message });
-      _optionalChain([callbacks, 'access', _785 => _785.onError, 'optionalCall', _786 => _786(message)]);
+      _optionalChain([callbacks, 'access', _831 => _831.onError, 'optionalCall', _832 => _832(message)]);
     }
   }
   /**
@@ -12852,7 +13324,7 @@ var CompletionService = (_class21 = class {
         return {
           success: true,
           message: "Connection successful",
-          response: _optionalChain([result, 'access', _787 => _787.message, 'optionalAccess', _788 => _788.content]) || "",
+          response: _optionalChain([result, 'access', _833 => _833.message, 'optionalAccess', _834 => _834.content]) || "",
           model: modelId,
           durationMs
         };
@@ -12917,7 +13389,7 @@ ${description}`;
    * 3. Legacy single key from provider config
    */
   async resolveApiKeyForRequest(provider, providerId, sessionId) {
-    if (_optionalChain([provider, 'access', _789 => _789.codingPlan, 'optionalAccess', _790 => _790.enabled]) && provider.codingPlan.apiKey) {
+    if (_optionalChain([provider, 'access', _835 => _835.codingPlan, 'optionalAccess', _836 => _836.enabled]) && provider.codingPlan.apiKey) {
       return this.resolveApiKey(provider.codingPlan.apiKey);
     }
     if (this.apiKeyPool) {
@@ -13227,4 +13699,6 @@ ${description}`;
 
 
 
-exports.CompletionService = CompletionService; exports.register = register; exports.emit = emit; exports.attach = attach; exports.release = release; exports.convertMessageToOpenAI = convertMessageToOpenAI; exports.convertMessageToAnthropic = convertMessageToAnthropic; exports.convertMessageToGemini = convertMessageToGemini; exports.getOpenRouterProviderConfig = getOpenRouterProviderConfig; exports.addOpenRouterProviderToRequest = addOpenRouterProviderToRequest; exports.getSharedExecutor = getSharedExecutor; exports.getResponsesEndpointTransformer = getResponsesEndpointTransformer; exports.getAnthropicEndpointTransformer = getAnthropicEndpointTransformer; exports.getGeminiEndpointTransformer = getGeminiEndpointTransformer; exports.readBody = readBody; exports.cancelDiscardedResponse = cancelDiscardedResponse; exports.projectUpstreamResponseHeaders = projectUpstreamResponseHeaders; exports.relayResponse = relayResponse; exports.aggregateAnthropicSseToJsonBody = aggregateAnthropicSseToJsonBody; exports.writeError = writeError; exports.writeBoundAccountError = writeBoundAccountError; exports.resolvePoolBoundKey = resolvePoolBoundKey; exports.DEFAULT_ROUTE_IDLE_MS = DEFAULT_ROUTE_IDLE_MS; exports.ProviderProxyRouteMap = ProviderProxyRouteMap; exports.previousResponseNotFound = previousResponseNotFound; exports.ResponsesAffinityStore = ResponsesAffinityStore; exports.getResponsesAffinityStore = getResponsesAffinityStore; exports.classifyResponsesProfile = classifyResponsesProfile; exports.extractRouteToken = extractRouteToken; exports.isLoopbackAddress = isLoopbackAddress; exports.ProviderProxy = ProviderProxy; exports.ROUTE_LEASE_REQUEST_SCHEMA = ROUTE_LEASE_REQUEST_SCHEMA; exports.ROUTE_LEASE_RESULT_SCHEMA = ROUTE_LEASE_RESULT_SCHEMA; exports.ROUTE_LEASE_CAPABILITIES_SCHEMA = ROUTE_LEASE_CAPABILITIES_SCHEMA; exports.ROUTE_LEASE_API_VERSION = ROUTE_LEASE_API_VERSION; exports.ROUTE_LEASE_DEFAULT_TTL_SECONDS = ROUTE_LEASE_DEFAULT_TTL_SECONDS; exports.ROUTE_LEASE_MAX_TTL_SECONDS = ROUTE_LEASE_MAX_TTL_SECONDS; exports.ROUTE_LEASE_MAX_IDEMPOTENCY_BYTES = ROUTE_LEASE_MAX_IDEMPOTENCY_BYTES; exports.ROUTE_LEASE_MAX_CONSUMER_BYTES = ROUTE_LEASE_MAX_CONSUMER_BYTES; exports.ROUTE_LEASE_MAX_EXECUTION_ID_BYTES = ROUTE_LEASE_MAX_EXECUTION_ID_BYTES; exports.ROUTE_LEASE_MAX_SESSION_ID_BYTES = ROUTE_LEASE_MAX_SESSION_ID_BYTES; exports.ROUTE_LEASE_MAX_MODEL_BYTES = ROUTE_LEASE_MAX_MODEL_BYTES; exports.ROUTE_LEASE_SESSION_HASH_DOMAIN = ROUTE_LEASE_SESSION_HASH_DOMAIN; exports.ROUTE_LEASE_CODEX_TOKEN_ENV = ROUTE_LEASE_CODEX_TOKEN_ENV; exports.ROUTE_LEASE_RUNTIMES = ROUTE_LEASE_RUNTIMES; exports.ROUTE_LEASE_CAPABILITIES = ROUTE_LEASE_CAPABILITIES; exports.ROUTE_LEASE_RUNTIME_TABLE = ROUTE_LEASE_RUNTIME_TABLE; exports.RouteLeaseError = RouteLeaseError; exports.normalizeRouteLeaseIdempotencyKey = normalizeRouteLeaseIdempotencyKey; exports.normalizeRouteLeaseTtl = normalizeRouteLeaseTtl; exports.hashRouteLeaseSessionId = hashRouteLeaseSessionId; exports.canonicalizeRouteLeasePayload = canonicalizeRouteLeasePayload; exports.hashRouteLeasePayload = hashRouteLeasePayload; exports.parseRouteLeaseCreate = parseRouteLeaseCreate; exports.routeLeaseRuntime = routeLeaseRuntime; exports.SYSTEM_ROUTE_LEASE_CLOCK = SYSTEM_ROUTE_LEASE_CLOCK; exports.RouteLeaseManager = RouteLeaseManager; exports.gatewayBindingToEndpointConfig = gatewayBindingToEndpointConfig; exports.candidateGatewayBindings = candidateGatewayBindings; exports.candidateBackgroundModelIds = candidateBackgroundModelIds; exports.resolveGatewayBinding = resolveGatewayBinding; exports.RouteLeaseTargetResolver = RouteLeaseTargetResolver; exports.createResponsesCompactHandler = createResponsesCompactHandler; exports.registerResponsesCompactOperation = registerResponsesCompactOperation; exports.createNativeResponsesHostedImageIngress = createNativeResponsesHostedImageIngress; exports.getProviderProxy = getProviderProxy; exports.__resetProviderProxyForTests = __resetProviderProxyForTests; exports.KeyedMutex = KeyedMutex; exports.IMAGE_SERVER_HARD_CEILINGS = IMAGE_SERVER_HARD_CEILINGS; exports.DEFAULT_IMAGES_SERVER_CONFIG = DEFAULT_IMAGES_SERVER_CONFIG; exports.normalizeImagesServerConfig = normalizeImagesServerConfig; exports.validateImagesServerConfig = validateImagesServerConfig; exports.DEFAULT_SEARCH_SERVER_CONFIG = DEFAULT_SEARCH_SERVER_CONFIG; exports.normalizeSearchApiProviderConfigs = normalizeSearchApiProviderConfigs; exports.normalizeSearchServerConfig = normalizeSearchServerConfig; exports.validateSearchServerConfig = validateSearchServerConfig; exports.OUTBOUND_API_SERVER_CONFIG_KEY = OUTBOUND_API_SERVER_CONFIG_KEY; exports.DEFAULT_USER_MESSAGE_QUEUE = DEFAULT_USER_MESSAGE_QUEUE; exports.DEFAULT_CONCURRENCY_QUEUE = DEFAULT_CONCURRENCY_QUEUE; exports.DEFAULT_ACCOUNT_PROBE = DEFAULT_ACCOUNT_PROBE; exports.DEFAULT_ALLOWANCE_SCHEDULING = DEFAULT_ALLOWANCE_SCHEDULING; exports.normalizeAllowanceScheduling = normalizeAllowanceScheduling; exports.normalizeAccountProbe = normalizeAccountProbe; exports.normalizeAudit = normalizeAudit; exports.normalizeBilling = normalizeBilling; exports.DEFAULT_FINGERPRINT = DEFAULT_FINGERPRINT; exports.normalizeFingerprint = normalizeFingerprint; exports.normalizeVoucher = normalizeVoucher; exports.normalizeProxyConfig = normalizeProxyConfig; exports.normalizeProxySegment = normalizeProxySegment; exports.normalizeWebhookDestination = normalizeWebhookDestination; exports.normalizeWebhookSegment = normalizeWebhookSegment; exports.normalizeQueueSegments = normalizeQueueSegments; exports.normalizePrefixTargets = normalizePrefixTargets; exports.legacyEndpointsToBindings = legacyEndpointsToBindings; exports.normalizeGatewayBindings = normalizeGatewayBindings; exports.defaultServerConfig = defaultServerConfig; exports.normalizeServerConfig = normalizeServerConfig; exports.loadServerConfig = loadServerConfig; exports.saveServerConfig = saveServerConfig; exports.mergeServerConfig = mergeServerConfig; exports.computeKeyExpiry = computeKeyExpiry; exports.checkKeyQuota = checkKeyQuota; exports.randomBase62 = randomBase62; exports.hashKey = hashKey; exports.createNamedKey = createNamedKey; exports.createIntegrationKey = createIntegrationKey; exports.LEGACY_OUTBOUND_PERMISSIONS = LEGACY_OUTBOUND_PERMISSIONS; exports.validateOutboundPermissions = validateOutboundPermissions; exports.effectiveOutboundPermissions = effectiveOutboundPermissions; exports.verifyKey = verifyKey; exports.verifyPresentedKey = verifyPresentedKey; exports.ConcurrencyQueueFullError = ConcurrencyQueueFullError; exports.ConcurrencyWaitTimeoutError = ConcurrencyWaitTimeoutError; exports.ConcurrencyWaitCancelledError = ConcurrencyWaitCancelledError; exports.isConcurrencyRejection = isConcurrencyRejection; exports.OutboundConcurrencyGate = OutboundConcurrencyGate; exports.OutboundRateLimiter = OutboundRateLimiter; exports.codexSearchRoutePath = codexSearchRoutePath; exports.isCodexSearchRequest = isCodexSearchRequest; exports.handleCodexSearchRequest = handleCodexSearchRequest; exports.isUserMessageRequest = isUserMessageRequest; exports.SerialQueueTimeoutError = SerialQueueTimeoutError; exports.isSerialQueueTimeout = isSerialQueueTimeout; exports.UserMessageSerialQueue = UserMessageSerialQueue; exports.generateVoucherCode = generateVoucherCode; exports.hashVoucherCode = hashVoucherCode; exports.voucherCodePrefix = voucherCodePrefix; exports.newVoucherId = newVoucherId; exports.computeVoucherGrant = computeVoucherGrant; exports.toVoucherInfo = toVoucherInfo; exports.isRedeemRequest = isRedeemRequest; exports.handleVoucherRedeem = handleVoucherRedeem; exports.DEFAULT_OUTBOUND_PORT = DEFAULT_OUTBOUND_PORT; exports.OutboundApiServer = OutboundApiServer; exports.formatUrls = formatUrls; exports.startOfLocalDay = startOfLocalDay; exports.startOfLocalWeek = startOfLocalWeek; exports.KeySpendTracker = KeySpendTracker; exports.getOutboundApiServer = getOutboundApiServer; exports.__resetOutboundApiServerForTests = __resetOutboundApiServerForTests;
+
+
+exports.CompletionService = CompletionService; exports.register = register; exports.emit = emit; exports.attach = attach; exports.release = release; exports.convertMessageToOpenAI = convertMessageToOpenAI; exports.convertMessageToAnthropic = convertMessageToAnthropic; exports.convertMessageToGemini = convertMessageToGemini; exports.getOpenRouterProviderConfig = getOpenRouterProviderConfig; exports.addOpenRouterProviderToRequest = addOpenRouterProviderToRequest; exports.getSharedExecutor = getSharedExecutor; exports.getResponsesEndpointTransformer = getResponsesEndpointTransformer; exports.getAnthropicEndpointTransformer = getAnthropicEndpointTransformer; exports.getGeminiEndpointTransformer = getGeminiEndpointTransformer; exports.readBody = readBody; exports.cancelDiscardedResponse = cancelDiscardedResponse; exports.projectUpstreamResponseHeaders = projectUpstreamResponseHeaders; exports.relayResponse = relayResponse; exports.aggregateAnthropicSseToJsonBody = aggregateAnthropicSseToJsonBody; exports.writeError = writeError; exports.writeBoundAccountError = writeBoundAccountError; exports.resolvePoolBoundKey = resolvePoolBoundKey; exports.buildByoRouteActivityMeta = buildByoRouteActivityMeta; exports.DEFAULT_ROUTE_IDLE_MS = DEFAULT_ROUTE_IDLE_MS; exports.ProviderProxyRouteMap = ProviderProxyRouteMap; exports.previousResponseNotFound = previousResponseNotFound; exports.ResponsesAffinityStore = ResponsesAffinityStore; exports.getResponsesAffinityStore = getResponsesAffinityStore; exports.classifyResponsesProfile = classifyResponsesProfile; exports.extractRouteToken = extractRouteToken; exports.isLoopbackAddress = isLoopbackAddress; exports.ProviderProxy = ProviderProxy; exports.ROUTE_LEASE_REQUEST_SCHEMA = ROUTE_LEASE_REQUEST_SCHEMA; exports.ROUTE_LEASE_RESULT_SCHEMA = ROUTE_LEASE_RESULT_SCHEMA; exports.ROUTE_LEASE_CAPABILITIES_SCHEMA = ROUTE_LEASE_CAPABILITIES_SCHEMA; exports.ROUTE_LEASE_API_VERSION = ROUTE_LEASE_API_VERSION; exports.ROUTE_LEASE_DEFAULT_TTL_SECONDS = ROUTE_LEASE_DEFAULT_TTL_SECONDS; exports.ROUTE_LEASE_MAX_TTL_SECONDS = ROUTE_LEASE_MAX_TTL_SECONDS; exports.ROUTE_LEASE_MAX_IDEMPOTENCY_BYTES = ROUTE_LEASE_MAX_IDEMPOTENCY_BYTES; exports.ROUTE_LEASE_MAX_CONSUMER_BYTES = ROUTE_LEASE_MAX_CONSUMER_BYTES; exports.ROUTE_LEASE_MAX_EXECUTION_ID_BYTES = ROUTE_LEASE_MAX_EXECUTION_ID_BYTES; exports.ROUTE_LEASE_MAX_SESSION_ID_BYTES = ROUTE_LEASE_MAX_SESSION_ID_BYTES; exports.ROUTE_LEASE_MAX_MODEL_BYTES = ROUTE_LEASE_MAX_MODEL_BYTES; exports.ROUTE_LEASE_SESSION_HASH_DOMAIN = ROUTE_LEASE_SESSION_HASH_DOMAIN; exports.ROUTE_LEASE_CODEX_TOKEN_ENV = ROUTE_LEASE_CODEX_TOKEN_ENV; exports.ROUTE_LEASE_RUNTIMES = ROUTE_LEASE_RUNTIMES; exports.ROUTE_LEASE_CAPABILITIES = ROUTE_LEASE_CAPABILITIES; exports.ROUTE_LEASE_RUNTIME_TABLE = ROUTE_LEASE_RUNTIME_TABLE; exports.RouteLeaseError = RouteLeaseError; exports.normalizeRouteLeaseIdempotencyKey = normalizeRouteLeaseIdempotencyKey; exports.normalizeRouteLeaseTtl = normalizeRouteLeaseTtl; exports.hashRouteLeaseSessionId = hashRouteLeaseSessionId; exports.canonicalizeRouteLeasePayload = canonicalizeRouteLeasePayload; exports.hashRouteLeasePayload = hashRouteLeasePayload; exports.parseRouteLeaseCreate = parseRouteLeaseCreate; exports.routeLeaseRuntime = routeLeaseRuntime; exports.SYSTEM_ROUTE_LEASE_CLOCK = SYSTEM_ROUTE_LEASE_CLOCK; exports.RouteLeaseManager = RouteLeaseManager; exports.gatewayBindingToEndpointConfig = gatewayBindingToEndpointConfig; exports.candidateGatewayBindings = candidateGatewayBindings; exports.candidateBackgroundModelIds = candidateBackgroundModelIds; exports.resolveGatewayBinding = resolveGatewayBinding; exports.RouteLeaseTargetResolver = RouteLeaseTargetResolver; exports.createResponsesCompactHandler = createResponsesCompactHandler; exports.registerResponsesCompactOperation = registerResponsesCompactOperation; exports.createNativeResponsesHostedImageIngress = createNativeResponsesHostedImageIngress; exports.getProviderProxy = getProviderProxy; exports.__resetProviderProxyForTests = __resetProviderProxyForTests; exports.KeyedMutex = KeyedMutex; exports.IMAGE_SERVER_HARD_CEILINGS = IMAGE_SERVER_HARD_CEILINGS; exports.DEFAULT_IMAGES_SERVER_CONFIG = DEFAULT_IMAGES_SERVER_CONFIG; exports.normalizeImagesServerConfig = normalizeImagesServerConfig; exports.validateImagesServerConfig = validateImagesServerConfig; exports.DEFAULT_SEARCH_SERVER_CONFIG = DEFAULT_SEARCH_SERVER_CONFIG; exports.normalizeSearchApiProviderConfigs = normalizeSearchApiProviderConfigs; exports.normalizeSearchServerConfig = normalizeSearchServerConfig; exports.validateSearchServerConfig = validateSearchServerConfig; exports.OUTBOUND_API_SERVER_CONFIG_KEY = OUTBOUND_API_SERVER_CONFIG_KEY; exports.DEFAULT_USER_MESSAGE_QUEUE = DEFAULT_USER_MESSAGE_QUEUE; exports.DEFAULT_CONCURRENCY_QUEUE = DEFAULT_CONCURRENCY_QUEUE; exports.DEFAULT_ACCOUNT_PROBE = DEFAULT_ACCOUNT_PROBE; exports.DEFAULT_ALLOWANCE_SCHEDULING = DEFAULT_ALLOWANCE_SCHEDULING; exports.normalizeAllowanceScheduling = normalizeAllowanceScheduling; exports.normalizeAccountProbe = normalizeAccountProbe; exports.normalizeAudit = normalizeAudit; exports.normalizeBilling = normalizeBilling; exports.DEFAULT_FINGERPRINT = DEFAULT_FINGERPRINT; exports.normalizeFingerprint = normalizeFingerprint; exports.normalizeVoucher = normalizeVoucher; exports.normalizeProxyConfig = normalizeProxyConfig; exports.normalizeProxySegment = normalizeProxySegment; exports.normalizeWebhookDestination = normalizeWebhookDestination; exports.normalizeWebhookSegment = normalizeWebhookSegment; exports.normalizeQueueSegments = normalizeQueueSegments; exports.normalizePrefixTargets = normalizePrefixTargets; exports.legacyEndpointsToBindings = legacyEndpointsToBindings; exports.normalizeGatewayBindings = normalizeGatewayBindings; exports.defaultServerConfig = defaultServerConfig; exports.normalizeServerConfig = normalizeServerConfig; exports.loadServerConfig = loadServerConfig; exports.saveServerConfig = saveServerConfig; exports.mergeServerConfig = mergeServerConfig; exports.injectMappingEffortDefault = injectMappingEffortDefault; exports.computeKeyExpiry = computeKeyExpiry; exports.checkKeyQuota = checkKeyQuota; exports.randomBase62 = randomBase62; exports.hashKey = hashKey; exports.createNamedKey = createNamedKey; exports.createIntegrationKey = createIntegrationKey; exports.LEGACY_OUTBOUND_PERMISSIONS = LEGACY_OUTBOUND_PERMISSIONS; exports.validateOutboundPermissions = validateOutboundPermissions; exports.effectiveOutboundPermissions = effectiveOutboundPermissions; exports.verifyKey = verifyKey; exports.verifyPresentedKey = verifyPresentedKey; exports.ConcurrencyQueueFullError = ConcurrencyQueueFullError; exports.ConcurrencyWaitTimeoutError = ConcurrencyWaitTimeoutError; exports.ConcurrencyWaitCancelledError = ConcurrencyWaitCancelledError; exports.isConcurrencyRejection = isConcurrencyRejection; exports.OutboundConcurrencyGate = OutboundConcurrencyGate; exports.OutboundRateLimiter = OutboundRateLimiter; exports.codexSearchRoutePath = codexSearchRoutePath; exports.isCodexSearchRequest = isCodexSearchRequest; exports.handleCodexSearchRequest = handleCodexSearchRequest; exports.isUserMessageRequest = isUserMessageRequest; exports.SerialQueueTimeoutError = SerialQueueTimeoutError; exports.isSerialQueueTimeout = isSerialQueueTimeout; exports.UserMessageSerialQueue = UserMessageSerialQueue; exports.generateVoucherCode = generateVoucherCode; exports.hashVoucherCode = hashVoucherCode; exports.voucherCodePrefix = voucherCodePrefix; exports.newVoucherId = newVoucherId; exports.computeVoucherGrant = computeVoucherGrant; exports.toVoucherInfo = toVoucherInfo; exports.isRedeemRequest = isRedeemRequest; exports.handleVoucherRedeem = handleVoucherRedeem; exports.DEFAULT_OUTBOUND_PORT = DEFAULT_OUTBOUND_PORT; exports.OutboundApiServer = OutboundApiServer; exports.formatUrls = formatUrls; exports.startOfLocalDay = startOfLocalDay; exports.startOfLocalWeek = startOfLocalWeek; exports.KeySpendTracker = KeySpendTracker; exports.getOutboundApiServer = getOutboundApiServer; exports.__resetOutboundApiServerForTests = __resetOutboundApiServerForTests;