agent-shim 8.34.0 → 8.36.0

package/dist/cli.cjs

@@ -17252,7 +17252,7 @@ var require_readable = __commonJS({
   "node_modules/.pnpm/undici@7.29.1/node_modules/undici/lib/api/readable.js"(exports2, module2) {
     "use strict";
     var assert2 = require("node:assert");
-    var { Readable: Readable2 } = require("node:stream");
+    var { Readable: Readable3 } = require("node:stream");
     var { RequestAbortedError, NotSupportedError, InvalidArgumentError: InvalidArgumentError2, AbortError: AbortError2 } = require_errors();
     var util = require_util2();
     var { ReadableStreamFrom } = require_util2();
@@ -17266,7 +17266,7 @@ var require_readable = __commonJS({
     var kBytesRead = /* @__PURE__ */ Symbol("kBytesRead");
     var noop = () => {
     };
-    var BodyReadable = class extends Readable2 {
+    var BodyReadable = class extends Readable3 {
       /**
        * @param {object} opts
        * @param {(this: Readable, size: number) => void} opts.resume
@@ -17655,7 +17655,7 @@ var require_api_request = __commonJS({
     "use strict";
     var assert2 = require("node:assert");
     var { AsyncResource } = require("node:async_hooks");
-    var { Readable: Readable2 } = require_readable();
+    var { Readable: Readable3 } = require_readable();
     var { InvalidArgumentError: InvalidArgumentError2, RequestAbortedError } = require_errors();
     var util = require_util2();
     function noop() {
@@ -17736,7 +17736,7 @@ var require_api_request = __commonJS({
         const parsedHeaders = responseHeaders3 === "raw" ? util.parseHeaders(rawHeaders) : headers;
         const contentType = parsedHeaders["content-type"];
         const contentLength = parsedHeaders["content-length"];
-        const res = new Readable2({
+        const res = new Readable3({
           resume,
           abort,
           contentType,
@@ -18045,9 +18045,9 @@ var require_api_pipeline = __commonJS({
   "node_modules/.pnpm/undici@7.29.1/node_modules/undici/lib/api/api-pipeline.js"(exports2, module2) {
     "use strict";
     var {
-      Readable: Readable2,
+      Readable: Readable3,
       Duplex,
-      PassThrough
+      PassThrough: PassThrough2
     } = require("node:stream");
     var assert2 = require("node:assert");
     var { AsyncResource } = require("node:async_hooks");
@@ -18061,7 +18061,7 @@ var require_api_pipeline = __commonJS({
     function noop() {
     }
     var kResume = /* @__PURE__ */ Symbol("resume");
-    var PipelineRequest = class extends Readable2 {
+    var PipelineRequest = class extends Readable3 {
       constructor() {
         super({ autoDestroy: true });
         this[kResume] = null;
@@ -18078,7 +18078,7 @@ var require_api_pipeline = __commonJS({
         callback(err);
       }
     };
-    var PipelineResponse = class extends Readable2 {
+    var PipelineResponse = class extends Readable3 {
       constructor(resume) {
         super({ autoDestroy: true });
         this[kResume] = resume;
@@ -18234,7 +18234,7 @@ var require_api_pipeline = __commonJS({
         this.dispatch({ ...opts, body: pipelineHandler.req }, pipelineHandler);
         return pipelineHandler.ret;
       } catch (err) {
-        return new PassThrough().destroy(err);
+        return new PassThrough2().destroy(err);
       }
     }
     module2.exports = pipeline;
@@ -23060,7 +23060,7 @@ var require_cache2 = __commonJS({
   "node_modules/.pnpm/undici@7.29.1/node_modules/undici/lib/interceptor/cache.js"(exports2, module2) {
     "use strict";
     var assert2 = require("node:assert");
-    var { Readable: Readable2 } = require("node:stream");
+    var { Readable: Readable3 } = require("node:stream");
     var util = require_util2();
     var CacheHandler = require_cache_handler();
     var MemoryCacheStore = require_memory_cache_store();
@@ -23229,7 +23229,7 @@ var require_cache2 = __commonJS({
       return dispatch(opts, new CacheHandler(globalOpts, cacheKey, handler));
     }
     function sendCachedValue(handler, opts, result, age, context, isStale2) {
-      const stream = util.isStream(result.body) ? result.body : Readable2.from(result.body ?? []);
+      const stream = util.isStream(result.body) ? result.body : Readable3.from(result.body ?? []);
       assert2(!stream.destroyed, "stream should not be destroyed");
       assert2(!stream.readableDidRead, "stream should not be readableDidRead");
       const controller = {
@@ -26437,7 +26437,7 @@ var require_fetch = __commonJS({
       subresourceSet
     } = require_constants4();
     var EE = require("node:events");
-    var { Readable: Readable2, pipeline, finished, isErrored, isReadable } = require("node:stream");
+    var { Readable: Readable3, pipeline, finished, isErrored, isReadable } = require("node:stream");
     var { addAbortListener, bufferToLowerCasedHeaderName } = require_util2();
     var { dataURLProcessor, serializeAMimeType, minimizeSupportedMimeType } = require_data_url();
     var { getGlobalDispatcher } = require_global2();
@@ -27380,7 +27380,7 @@ var require_fetch = __commonJS({
                 }
               }
               const location = headersList.get("location", true);
-              this.body = new Readable2({ read: resume });
+              this.body = new Readable3({ read: resume });
               const willFollow = location && request7.redirect === "follow" && redirectStatusSet.has(status);
               const decoders = [];
               if (request7.method !== "HEAD" && request7.method !== "CONNECT" && !nullBodyStatus.includes(status) && !willFollow) {
@@ -57101,13 +57101,23 @@ var CodexProviderConfigSchema = external_exports.strictObject({
   /** Which login the upstream call is made with; see `CODEX_LOGINS`. */
   login: external_exports.enum(CODEX_LOGINS).optional()
 });
+var ProviderRouteSchema = external_exports.strictObject({
+  /** The condition, the same `when` union a configuration cascade entry takes: the object form or a trilean predicate tree over the request facts the door resolves (`request.model` and kin). */
+  when: WhenSchema,
+  /** The provider a matching request is sent to, by the name a provider file carries. */
+  provider: external_exports.string().min(1),
+  /** The model name to rewrite the request to before it reaches the target, for a provider that expects another form (OpenRouter's `anthropic/claude-...` for instance). A route that rewrites reads the whole body, the one copy the rewrite needs. */
+  model: external_exports.string().min(1).optional()
+});
 var HttpProviderSchema = external_exports.strictObject({
   $schema: external_exports.string().optional(),
   kind: external_exports.literal("http").optional(),
   displayName: external_exports.string().min(1),
   baseUrl: external_exports.url(),
   credential: ProviderCredentialSchema,
-  env: ProviderEnvSchema.optional()
+  env: ProviderEnvSchema.optional(),
+  /** Per-request routing: when present, each request this provider would serve is matched against the list in order, and the first definite match is sent to that entry's provider instead (itself resolved exactly as a directly dialled request would be). Unmatched requests stay on this provider. */
+  routes: external_exports.array(ProviderRouteSchema).optional()
 });
 var CodexProviderSchema = external_exports.strictObject({
   $schema: external_exports.string().optional(),
@@ -60930,7 +60940,17 @@ function resolversOf(context) {
     ...pool?.sevenDay === void 0 ? {} : { "quota.sevenDay.remaining": pool.sevenDay.remaining, "quota.sevenDay.utilization": pool.sevenDay.utilization, "quota.sevenDay.hoursUntilReset": pool.sevenDay.hoursUntilReset },
     ...pool?.burnPerHour === void 0 ? {} : { "quota.burnPerHour": pool.burnPerHour },
     ...pool?.resuming === void 0 ? {} : { "session.resuming": pool.resuming },
-    ...pool?.lastPickHoursAgo === void 0 ? {} : { "session.lastPickHoursAgo": pool.lastPickHoursAgo }
+    ...pool?.lastPickHoursAgo === void 0 ? {} : { "session.lastPickHoursAgo": pool.lastPickHoursAgo },
+    ...context.request?.model === void 0 ? {} : { "request.model": context.request.model },
+    ...context.request?.hasImage === void 0 ? {} : { "request.hasImage": context.request.hasImage },
+    ...context.providerQuota === void 0 ? {} : Object.fromEntries(
+      Object.entries(context.providerQuota).flatMap(
+        ([name, windows]) => [
+          ...windows.fiveHour === void 0 ? [] : [["provider." + name + ".fiveHour.remaining", windows.fiveHour.remaining], ["provider." + name + ".fiveHour.utilization", windows.fiveHour.utilization], ["provider." + name + ".fiveHour.hoursUntilReset", windows.fiveHour.hoursUntilReset]],
+          ...windows.sevenDay === void 0 ? [] : [["provider." + name + ".sevenDay.remaining", windows.sevenDay.remaining], ["provider." + name + ".sevenDay.utilization", windows.sevenDay.utilization], ["provider." + name + ".sevenDay.hoursUntilReset", windows.sevenDay.hoursUntilReset]]
+        ]
+      )
+    )
   };
   return {
     resolveValue: (key) => {
@@ -60996,6 +61016,24 @@ function evaluateWhen(when, context) {
   }
   return { status: "definite", passed: failed.length === 0, checked, failed };
 }
+function referencesFact(when, key) {
+  if (when === void 0 || !("kind" in when)) {
+    return false;
+  }
+  const walk = (node2) => {
+    if (Array.isArray(node2)) {
+      return node2.some(walk);
+    }
+    if (typeof node2 !== "object" || node2 === null) {
+      return false;
+    }
+    if ("kind" in node2 && node2.kind === "reference" && "key" in node2 && node2.key === key) {
+      return true;
+    }
+    return Object.values(node2).some(walk);
+  };
+  return walk(when);
+}
 function isVacuousWhen(when) {
   return when !== void 0 && !("kind" in when) && Object.keys(when).length === 0;
 }
@@ -63665,7 +63703,7 @@ function registerIdentityCommand(program2, deps) {
 // package.json
 var package_default = {
   name: "agent-shim",
-  version: "8.34.0",
+  version: "8.36.0",
   description: "A profile manager and launcher for Claude Code that lets one person run multiple logins from one machine while controlling what gets shared between them.",
   license: "MIT",
   author: "Joseph Mearman <joseph@mearman.co.uk>",
@@ -77383,6 +77421,78 @@ function createPassthroughRoute(name, target) {
 }
 
 // src/frontdoor/providerRoute.ts
+var import_node_stream3 = require("node:stream");
+
+// src/frontdoor/requestScan.ts
+var import_node_stream2 = require("node:stream");
+var BYTES_PER_KIB = 1024;
+var SCAN_KIB = 64;
+var REQUEST_SCAN_CAP_BYTES = SCAN_KIB * BYTES_PER_KIB;
+async function scanRequestHead(request7, wholeBody = false) {
+  const body = request7.body;
+  const head = [];
+  let seen = 0;
+  let text2 = "";
+  let decided = false;
+  let ended = false;
+  let error62;
+  const replay = new import_node_stream2.PassThrough();
+  const modelIn = () => /"model"\s*:\s*"([^"]+)"/.exec(text2)?.[1];
+  const settled = new Promise((resolve) => {
+    const settle2 = () => {
+      const model = modelIn();
+      const hasImage = /"type"\s*:\s*"image"/.test(text2);
+      for (const chunk of head) {
+        replay.write(chunk);
+      }
+      resolve({ ...model === void 0 ? {} : { model }, hasImage, ...wholeBody ? { whole: true, text: text2 } : {}, replayed: { ...request7, body: replay } });
+    };
+    body.on("data", (chunk) => {
+      if (decided) {
+        if (!replay.write(chunk)) {
+          body.pause();
+          replay.once("drain", () => {
+            body.resume();
+          });
+        }
+        return;
+      }
+      head.push(chunk);
+      seen += chunk.length;
+      text2 += chunk.toString("utf8");
+      if (!wholeBody && (modelIn() !== void 0 || seen >= REQUEST_SCAN_CAP_BYTES)) {
+        decided = true;
+        body.pause();
+        replay.once("resume", () => {
+          body.resume();
+        });
+        settle2();
+      }
+    });
+    body.on("end", () => {
+      ended = true;
+      if (!decided) {
+        decided = true;
+        settle2();
+      }
+      replay.end();
+    });
+    body.on("error", (cause) => {
+      error62 = cause;
+      replay.destroy(cause);
+    });
+    body.on("close", () => {
+      if (!decided && !ended && error62 === void 0) {
+        decided = true;
+        settle2();
+      }
+    });
+  });
+  return await settled;
+}
+
+// src/frontdoor/providerRoute.ts
+var MS_PER_HOUR3 = 36e5;
 function createProviderRouteResolver(deps) {
   const isRcSelfHostPath = (path46) => path46 === "/v1/code/sessions" || path46.startsWith("/v1/code/sessions/") || path46 === "/v1/sessions" || path46.startsWith("/v1/sessions/");
   const oauthRoute = createPassthroughRoute("anthropic", { baseUrl: `https://${CONNECT_INTERCEPT_HOST}:${String(HTTPS_PORT)}`, stripPrefix: void 0, headroomUpstream: void 0 });
@@ -77446,7 +77556,83 @@ function createProviderRouteResolver(deps) {
       )
     };
   };
-  return async (request7) => await Promise.resolve(resolve(request7));
+  const servingRewritten = (route, rewritten) => ({
+    name: route.name,
+    headroomEligible: route.headroomEligible,
+    headroomUpstream: route.headroomUpstream,
+    // The pipeline serves the route with the request it received; the routing layer's decisions (the rewritten target path, the replayed body and, when the model name was rewritten, the re-framed headers) are substituted here, so the route sees exactly the request the resolution acted on.
+    serve: async (request7, response) => {
+      await route.serve({ ...request7, url: rewritten.url, headers: rewritten.headers, body: rewritten.body }, response);
+    }
+  });
+  return async (request7) => {
+    let current = request7;
+    let replay;
+    const visited = /* @__PURE__ */ new Set();
+    for (; ; ) {
+      const path46 = new URL(current.url, "http://127.0.0.1").pathname;
+      const scoped = parseProviderPath(path46);
+      const providerName = scoped?.provider ?? current.session.provider;
+      if (providerName !== void 0 && visited.has(providerName)) {
+        return { ok: false, status: HTTP_STATUS.internalServerError, message: `provider routing cycle: ${[...visited, providerName].join(" -> ")}` };
+      }
+      if (providerName !== void 0) {
+        visited.add(providerName);
+      }
+      let routes;
+      try {
+        const definition = providerName === void 0 ? void 0 : loadProvider(deps.providersDir, providerName, deps.fs);
+        routes = definition === void 0 || isCodexProvider(definition) ? void 0 : definition.routes;
+      } catch {
+        routes = void 0;
+      }
+      if (routes === void 0 || routes.length === 0) {
+        const resolution = resolve(current);
+        return resolution.ok && replay !== void 0 ? { ok: true, route: servingRewritten(resolution.route, { ...replay, url: current.url }) } : resolution;
+      }
+      const whole = routes.some((entry) => entry.model !== void 0 || referencesFact(entry.when, "request.hasImage"));
+      const snapshot = deps.usageSnapshotOf?.(current.session.identity);
+      const windowFacts = (raw) => {
+        if (raw?.utilization === void 0 || raw.resetsAt === void 0) {
+          return void 0;
+        }
+        return { remaining: Math.max(0, 1 - raw.utilization), utilization: raw.utilization, hoursUntilReset: Math.max(0, (Date.parse(raw.resetsAt) - Date.now()) / MS_PER_HOUR3) };
+      };
+      const providerQuota = Object.fromEntries(
+        routes.flatMap((entry) => {
+          const unified = snapshot?.providers[entry.provider]?.rateLimit?.unified;
+          return [[entry.provider, { fiveHour: windowFacts(unified?.fiveHour), sevenDay: windowFacts(unified?.sevenDay) }]];
+        })
+      );
+      const scan = await scanRequestHead(current, whole);
+      if (scan.replayed === void 0) {
+        const resolution = resolve(current);
+        return resolution.ok && replay !== void 0 ? { ok: true, route: servingRewritten(resolution.route, { ...replay, url: current.url }) } : resolution;
+      }
+      replay = scan.replayed;
+      const context = { nowMs: Date.now(), env: deps.env, providerQuota, ...scan.model === void 0 && scan.hasImage === void 0 ? {} : { request: { ...scan.model === void 0 ? {} : { model: scan.model }, hasImage: scan.hasImage } } };
+      let matched;
+      for (const entry of routes) {
+        const verdict = evaluateWhen(entry.when, context);
+        if (verdict.status === "definite" && verdict.passed) {
+          matched = { provider: entry.provider, model: entry.model };
+          break;
+        }
+      }
+      if (matched === void 0) {
+        const resolution = resolve(current);
+        return resolution.ok ? { ok: true, route: servingRewritten(resolution.route, { ...replay, url: current.url }) } : resolution;
+      }
+      if (matched.model !== void 0 && scan.text !== void 0 && scan.model !== void 0) {
+        const rewritten = scan.text.replace(new RegExp('"model":\\s*"' + scan.model.replace(/[.*+?^${}()|[\]\\]/g, "\\$&") + '"'), '"model":"' + matched.model + '"');
+        const headers = Object.fromEntries(Object.entries(replay.headers).filter(([name]) => name.toLowerCase() !== "content-length"));
+        replay = { ...replay, headers, body: import_node_stream3.Readable.from([Buffer.from(rewritten, "utf8")]) };
+      }
+      const rest = scoped === void 0 ? path46 : path46.slice(`${PROVIDER_PATH_PREFIX}${encodeURIComponent(scoped.provider)}`.length);
+      const query = current.url.includes("?") ? current.url.slice(current.url.indexOf("?")) : "";
+      current = { ...current, url: `${PROVIDER_PATH_PREFIX}${encodeURIComponent(matched.provider)}${rest}${query}`, body: replay.body, headers: replay.headers };
+    }
+  };
 }
 function providerCredentialHeaders(credential) {
   return credential.target === "apiKey" ? { "x-api-key": credential.token } : { authorization: `Bearer ${credential.token}` };
@@ -80575,6 +80761,7 @@ function realFrontDoorSupervisorPorts(paths) {
       appendLog(paths, `frontdoor ${String(process.pid)}: ${line}`);
     }
   });
+  const routingSnapshots = /* @__PURE__ */ new Map();
   const rcControlToken = (0, import_node_crypto15.randomUUID)();
   const resolveRoute = rcObservingResolver(
     createProviderRouteResolver({
@@ -80585,6 +80772,7 @@ function realFrontDoorSupervisorPorts(paths) {
       // The same port (cache included) the launcher resolves a launch's provider with, so the credential the door attaches at the route and the one the launcher handed the child are the same resolution of the same block.
       env: process.env,
       credentials: { ...realCredentialPort, cache: realCredentialCacheEnv(paths) },
+      usageSnapshotOf: (identity) => identity === void 0 ? void 0 : routingSnapshots.get(identity) ?? readUsageSnapshot(realFarmFs, paths.usageSnapshotsDir, identity),
       ...rcSelfHostSurface === void 0 ? {} : { rcSelfHostRoute: rcSelfHostSurface.route }
     }),
     rcTracker,
@@ -80599,6 +80787,7 @@ function realFrontDoorSupervisorPorts(paths) {
     readAccount: createAccountReader(realFarmFs, paths.identitiesDir),
     log,
     publish: (snapshot) => {
+      routingSnapshots.set(snapshot.identity, snapshot);
       usagePublisher.publish(snapshot);
     }
   });
@@ -82619,13 +82808,13 @@ function formatLimit(limit) {
   return `last limit: ${limit.kind} (${String(limit.status)}) at ${limit.observedAt}${limit.window === void 0 ? "" : ` on the ${limit.window} window`}${wait2.length === 0 ? "" : `, ${wait2.join(", ")}`}`;
 }
 var MONEY_DECIMALS = 2;
-var MS_PER_HOUR3 = 36e5;
+var MS_PER_HOUR4 = 36e5;
 var HOURS_PER_DAY4 = 24;
 function formatPeriod(window) {
   if (window.periodMs === void 0) {
     return window.period ?? "unknown period";
   }
-  const hours = window.periodMs / MS_PER_HOUR3;
+  const hours = window.periodMs / MS_PER_HOUR4;
   return hours >= HOURS_PER_DAY4 && Number.isInteger(hours / HOURS_PER_DAY4) ? `${String(hours / HOURS_PER_DAY4)}d` : `${String(hours)}h`;
 }
 function formatCount(value2) {

package/dist/index.cjs

@@ -589,13 +589,23 @@ var CodexProviderConfigSchema = import_zod.z.strictObject({
   /** Which login the upstream call is made with; see `CODEX_LOGINS`. */
   login: import_zod.z.enum(CODEX_LOGINS).optional()
 });
+var ProviderRouteSchema = import_zod.z.strictObject({
+  /** The condition, the same `when` union a configuration cascade entry takes: the object form or a trilean predicate tree over the request facts the door resolves (`request.model` and kin). */
+  when: WhenSchema,
+  /** The provider a matching request is sent to, by the name a provider file carries. */
+  provider: import_zod.z.string().min(1),
+  /** The model name to rewrite the request to before it reaches the target, for a provider that expects another form (OpenRouter's `anthropic/claude-...` for instance). A route that rewrites reads the whole body, the one copy the rewrite needs. */
+  model: import_zod.z.string().min(1).optional()
+});
 var HttpProviderSchema = import_zod.z.strictObject({
   $schema: import_zod.z.string().optional(),
   kind: import_zod.z.literal("http").optional(),
   displayName: import_zod.z.string().min(1),
   baseUrl: import_zod.z.url(),
   credential: ProviderCredentialSchema,
-  env: ProviderEnvSchema.optional()
+  env: ProviderEnvSchema.optional(),
+  /** Per-request routing: when present, each request this provider would serve is matched against the list in order, and the first definite match is sent to that entry's provider instead (itself resolved exactly as a directly dialled request would be). Unmatched requests stay on this provider. */
+  routes: import_zod.z.array(ProviderRouteSchema).optional()
 });
 var CodexProviderSchema = import_zod.z.strictObject({
   $schema: import_zod.z.string().optional(),
@@ -1018,7 +1028,17 @@ function resolversOf(context) {
     ...pool?.sevenDay === void 0 ? {} : { "quota.sevenDay.remaining": pool.sevenDay.remaining, "quota.sevenDay.utilization": pool.sevenDay.utilization, "quota.sevenDay.hoursUntilReset": pool.sevenDay.hoursUntilReset },
     ...pool?.burnPerHour === void 0 ? {} : { "quota.burnPerHour": pool.burnPerHour },
     ...pool?.resuming === void 0 ? {} : { "session.resuming": pool.resuming },
-    ...pool?.lastPickHoursAgo === void 0 ? {} : { "session.lastPickHoursAgo": pool.lastPickHoursAgo }
+    ...pool?.lastPickHoursAgo === void 0 ? {} : { "session.lastPickHoursAgo": pool.lastPickHoursAgo },
+    ...context.request?.model === void 0 ? {} : { "request.model": context.request.model },
+    ...context.request?.hasImage === void 0 ? {} : { "request.hasImage": context.request.hasImage },
+    ...context.providerQuota === void 0 ? {} : Object.fromEntries(
+      Object.entries(context.providerQuota).flatMap(
+        ([name, windows]) => [
+          ...windows.fiveHour === void 0 ? [] : [["provider." + name + ".fiveHour.remaining", windows.fiveHour.remaining], ["provider." + name + ".fiveHour.utilization", windows.fiveHour.utilization], ["provider." + name + ".fiveHour.hoursUntilReset", windows.fiveHour.hoursUntilReset]],
+          ...windows.sevenDay === void 0 ? [] : [["provider." + name + ".sevenDay.remaining", windows.sevenDay.remaining], ["provider." + name + ".sevenDay.utilization", windows.sevenDay.utilization], ["provider." + name + ".sevenDay.hoursUntilReset", windows.sevenDay.hoursUntilReset]]
+        ]
+      )
+    )
   };
   return {
     resolveValue: (key) => {
@@ -5399,7 +5419,7 @@ var import_undici = require("undici");
 // package.json
 var package_default = {
   name: "agent-shim",
-  version: "8.34.0",
+  version: "8.36.0",
   description: "A profile manager and launcher for Claude Code that lets one person run multiple logins from one machine while controlling what gets shared between them.",
   license: "MIT",
   author: "Joseph Mearman <joseph@mearman.co.uk>",

package/dist/index.mjs

@@ -277,13 +277,23 @@ var CodexProviderConfigSchema = z.strictObject({
   /** Which login the upstream call is made with; see `CODEX_LOGINS`. */
   login: z.enum(CODEX_LOGINS).optional()
 });
+var ProviderRouteSchema = z.strictObject({
+  /** The condition, the same `when` union a configuration cascade entry takes: the object form or a trilean predicate tree over the request facts the door resolves (`request.model` and kin). */
+  when: WhenSchema,
+  /** The provider a matching request is sent to, by the name a provider file carries. */
+  provider: z.string().min(1),
+  /** The model name to rewrite the request to before it reaches the target, for a provider that expects another form (OpenRouter's `anthropic/claude-...` for instance). A route that rewrites reads the whole body, the one copy the rewrite needs. */
+  model: z.string().min(1).optional()
+});
 var HttpProviderSchema = z.strictObject({
   $schema: z.string().optional(),
   kind: z.literal("http").optional(),
   displayName: z.string().min(1),
   baseUrl: z.url(),
   credential: ProviderCredentialSchema,
-  env: ProviderEnvSchema.optional()
+  env: ProviderEnvSchema.optional(),
+  /** Per-request routing: when present, each request this provider would serve is matched against the list in order, and the first definite match is sent to that entry's provider instead (itself resolved exactly as a directly dialled request would be). Unmatched requests stay on this provider. */
+  routes: z.array(ProviderRouteSchema).optional()
 });
 var CodexProviderSchema = z.strictObject({
   $schema: z.string().optional(),
@@ -706,7 +716,17 @@ function resolversOf(context) {
     ...pool?.sevenDay === void 0 ? {} : { "quota.sevenDay.remaining": pool.sevenDay.remaining, "quota.sevenDay.utilization": pool.sevenDay.utilization, "quota.sevenDay.hoursUntilReset": pool.sevenDay.hoursUntilReset },
     ...pool?.burnPerHour === void 0 ? {} : { "quota.burnPerHour": pool.burnPerHour },
     ...pool?.resuming === void 0 ? {} : { "session.resuming": pool.resuming },
-    ...pool?.lastPickHoursAgo === void 0 ? {} : { "session.lastPickHoursAgo": pool.lastPickHoursAgo }
+    ...pool?.lastPickHoursAgo === void 0 ? {} : { "session.lastPickHoursAgo": pool.lastPickHoursAgo },
+    ...context.request?.model === void 0 ? {} : { "request.model": context.request.model },
+    ...context.request?.hasImage === void 0 ? {} : { "request.hasImage": context.request.hasImage },
+    ...context.providerQuota === void 0 ? {} : Object.fromEntries(
+      Object.entries(context.providerQuota).flatMap(
+        ([name, windows]) => [
+          ...windows.fiveHour === void 0 ? [] : [["provider." + name + ".fiveHour.remaining", windows.fiveHour.remaining], ["provider." + name + ".fiveHour.utilization", windows.fiveHour.utilization], ["provider." + name + ".fiveHour.hoursUntilReset", windows.fiveHour.hoursUntilReset]],
+          ...windows.sevenDay === void 0 ? [] : [["provider." + name + ".sevenDay.remaining", windows.sevenDay.remaining], ["provider." + name + ".sevenDay.utilization", windows.sevenDay.utilization], ["provider." + name + ".sevenDay.hoursUntilReset", windows.sevenDay.hoursUntilReset]]
+        ]
+      )
+    )
   };
   return {
     resolveValue: (key) => {
@@ -5087,7 +5107,7 @@ import { Agent as Agent3, fetch as undiciFetch } from "undici";
 // package.json
 var package_default = {
   name: "agent-shim",
-  version: "8.34.0",
+  version: "8.36.0",
   description: "A profile manager and launcher for Claude Code that lets one person run multiple logins from one machine while controlling what gets shared between them.",
   license: "MIT",
   author: "Joseph Mearman <joseph@mearman.co.uk>",

package/dist/types/index.d.ts

@@ -4,7 +4,7 @@ import * as zod from 'zod';
 import { z } from 'zod';
 import { IncomingHttpHeaders, IncomingMessage, ServerResponse } from 'node:http';
 import * as net from 'node:net';
-import { Duplex } from 'node:stream';
+import { Duplex, Readable } from 'node:stream';
 import * as _orpc_client from '@orpc/client';
 import * as zod_v4_core from 'zod/v4/core';
 import * as _orpc_server from '@orpc/server';
@@ -446,6 +446,82 @@ declare const ProviderSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
         }>>;
     }, z.core.$strict>;
     env: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+    routes: z.ZodOptional<z.ZodArray<z.ZodObject<{
+        when: z.ZodUnion<readonly [z.ZodObject<{
+            newerThan: z.ZodOptional<z.ZodString>;
+            olderThan: z.ZodOptional<z.ZodString>;
+            maxSizeBytes: z.ZodOptional<z.ZodInt>;
+            branch: z.ZodOptional<z.ZodString>;
+            env: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+        }, z.core.$strict>, z.ZodDiscriminatedUnion<[z.ZodObject<{
+            kind: z.ZodLiteral<"not">;
+            operand: typeof PredicateNodeSchema;
+        }, z.core.$strip>, z.ZodObject<{
+            kind: z.ZodLiteral<"and">;
+            left: typeof PredicateNodeSchema;
+            right: typeof PredicateNodeSchema;
+        }, z.core.$strip>, z.ZodObject<{
+            kind: z.ZodLiteral<"or">;
+            left: typeof PredicateNodeSchema;
+            right: typeof PredicateNodeSchema;
+        }, z.core.$strip>, z.ZodObject<{
+            kind: z.ZodLiteral<"allOf">;
+            operands: z.ZodArray<typeof PredicateNodeSchema>;
+        }, z.core.$strip>, z.ZodObject<{
+            kind: z.ZodLiteral<"anyOf">;
+            operands: z.ZodArray<typeof PredicateNodeSchema>;
+        }, z.core.$strip>, z.ZodObject<{
+            kind: z.ZodLiteral<"compare">;
+            op: z.ZodEnum<{
+                gt: "gt";
+                gte: "gte";
+                lt: "lt";
+                lte: "lte";
+                eq: "eq";
+                neq: "neq";
+            }>;
+            left: typeof trilean.ExpressionNodeSchema;
+            right: typeof trilean.ExpressionNodeSchema;
+        }, z.core.$strip>, z.ZodObject<{
+            kind: z.ZodLiteral<"textCompare">;
+            op: z.ZodEnum<{
+                equals: "equals";
+                notEquals: "notEquals";
+                matches: "matches";
+                notMatches: "notMatches";
+                portableMatches: "portableMatches";
+                portableNotMatches: "portableNotMatches";
+            }>;
+            left: typeof trilean.ExpressionNodeSchema;
+            right: typeof trilean.ExpressionNodeSchema;
+        }, z.core.$strip>, z.ZodObject<{
+            kind: z.ZodLiteral<"memberOf">;
+            op: z.ZodEnum<{
+                in: "in";
+                notIn: "notIn";
+            }>;
+            operand: typeof trilean.ExpressionNodeSchema;
+            candidates: z.ZodArray<typeof trilean.ExpressionNodeSchema>;
+        }, z.core.$strip>, z.ZodObject<{
+            kind: z.ZodLiteral<"exists">;
+            operand: typeof trilean.ExpressionNodeSchema;
+        }, z.core.$strip>, z.ZodObject<{
+            kind: z.ZodLiteral<"some">;
+            collection: z.ZodType<trilean.JsonValue, unknown, z.core.$ZodTypeInternals<trilean.JsonValue, unknown>>;
+            item: typeof PredicateNodeSchema;
+            filter: z.ZodOptional<typeof PredicateNodeSchema>;
+        }, z.core.$strip>, z.ZodObject<{
+            kind: z.ZodLiteral<"every">;
+            collection: z.ZodType<trilean.JsonValue, unknown, z.core.$ZodTypeInternals<trilean.JsonValue, unknown>>;
+            item: typeof PredicateNodeSchema;
+            filter: z.ZodOptional<typeof PredicateNodeSchema>;
+        }, z.core.$strip>, z.ZodObject<{
+            kind: z.ZodLiteral<"treeReference">;
+            key: z.ZodType<trilean.JsonValue, unknown, z.core.$ZodTypeInternals<trilean.JsonValue, unknown>>;
+        }, z.core.$strip>], "kind">]>;
+        provider: z.ZodString;
+        model: z.ZodOptional<z.ZodString>;
+    }, z.core.$strict>>>;
 }, z.core.$strict>, z.ZodObject<{
     $schema: z.ZodOptional<z.ZodString>;
     kind: z.ZodLiteral<"codex">;
@@ -2665,8 +2741,8 @@ interface RoutedRequest {
     readonly url: string;
     /** The request's headers with every internal header already stripped: exactly what a route may forward onwards. */
     readonly headers: IncomingHttpHeaders;
-    /** The request's body stream: a route either pipes it onward untouched or reads it whole, never both. */
-    readonly body: IncomingMessage;
+    /** The request's body stream: a route either pipes it onward untouched or reads it whole, never both. A readable, not the socket-bound type the pipeline received it as, because the routing layer's scan hands routes a replayed body (the scanned head re-emitted in front of the unread remainder) that is a plain stream. */
+    readonly body: Readable;
     /** Aborted the moment the client goes away; a route aborts its own upstream work with it. */
     readonly signal: AbortSignal;
     readonly session: SessionIdentity;
@@ -5378,12 +5454,12 @@ declare function createControlApiRouter(deps: ControlApiDeps): {
                     identity: "identity";
                     provider: "provider";
                     pool: "pool";
+                    keychain: "keychain";
                     "ambient-credential": "ambient-credential";
                     "binary-discovery": "binary-discovery";
                     "claude-shim": "claude-shim";
                     "path-resolution": "path-resolution";
                     "legacy-name": "legacy-name";
-                    keychain: "keychain";
                     "directory-rules": "directory-rules";
                     "categories-local": "categories-local";
                     "active-identity": "active-identity";
@@ -5959,12 +6035,12 @@ declare function createDoorApiRouter(deps: DoorApiDeps): {
                     identity: "identity";
                     provider: "provider";
                     pool: "pool";
+                    keychain: "keychain";
                     "ambient-credential": "ambient-credential";
                     "binary-discovery": "binary-discovery";
                     "claude-shim": "claude-shim";
                     "path-resolution": "path-resolution";
                     "legacy-name": "legacy-name";
-                    keychain: "keychain";
                     "directory-rules": "directory-rules";
                     "categories-local": "categories-local";
                     "active-identity": "active-identity";
@@ -6449,12 +6525,12 @@ declare const DoctorFindingSchema: z.ZodObject<{
         identity: "identity";
         provider: "provider";
         pool: "pool";
+        keychain: "keychain";
         "ambient-credential": "ambient-credential";
         "binary-discovery": "binary-discovery";
         "claude-shim": "claude-shim";
         "path-resolution": "path-resolution";
         "legacy-name": "legacy-name";
-        keychain: "keychain";
         "directory-rules": "directory-rules";
         "categories-local": "categories-local";
         "active-identity": "active-identity";
@@ -6478,12 +6554,12 @@ declare const DoctorRunOutputSchema: z.ZodObject<{
             identity: "identity";
             provider: "provider";
             pool: "pool";
+            keychain: "keychain";
             "ambient-credential": "ambient-credential";
             "binary-discovery": "binary-discovery";
             "claude-shim": "claude-shim";
             "path-resolution": "path-resolution";
             "legacy-name": "legacy-name";
-            keychain: "keychain";
             "directory-rules": "directory-rules";
             "categories-local": "categories-local";
             "active-identity": "active-identity";
@@ -7033,6 +7109,18 @@ interface ConditionContext {
         readonly resuming?: boolean;
         readonly lastPickHoursAgo?: number;
     };
+    /**
+     * The request facts a provider's route condition reads, present only when the condition routes a request the door is resolving: `request.model` (the Messages body's own model field) and `request.hasImage` (an image block anywhere in the scanned head of the body). A request the door could not read that far carries neither, so a condition naming them is indeterminate and the routing falls through, never to a cheaper provider by accident.
+     */
+    readonly request?: {
+        readonly model?: string;
+        readonly hasImage?: boolean;
+    };
+    /** Per-provider quota facts for request routing, keyed by provider name, from the session identity's usage snapshot: a route condition names a target's windows (`provider.<name>.fiveHour.utilization` and kin) to skip one that is exhausted or nearly spent. The windows are the same shape the pool facts read. */
+    readonly providerQuota?: Readonly<Record<string, {
+        readonly fiveHour?: PoolWindowFacts;
+        readonly sevenDay?: PoolWindowFacts;
+    }>>;
 }
 /**
  * The result of evaluating one `when`: definite, with which condition fields were present and which of those did not hold, or indeterminate, when a datum the condition needed is missing. Indeterminate is not false: a missing fact has not failed the condition, it has left it undecided, and the consumer decides what an undecided entry does (the resolver keeps today's behaviour of not passing it, so nothing changes for existing configurations; the pool ranking of #258 instead keeps such a member but ranks it last, naming the missing fact).

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "agent-shim",
-  "version": "8.34.0",
+  "version": "8.36.0",
   "description": "A profile manager and launcher for Claude Code that lets one person run multiple logins from one machine while controlling what gets shared between them.",
   "license": "MIT",
   "author": "Joseph Mearman <joseph@mearman.co.uk>",