agent-shim 8.5.5 → 8.6.0

package/dist/cli.cjs

@@ -55519,14 +55519,14 @@ function ensureHeadroom(params) {
         const holders = sessionsForSupervisor(ports.fs, paths.headroomSessionsDir, state.supervisorPid).filter((session) => ports.isRunning(session.pid));
         if (holders.length > 0) {
           throw new HeadroomStartError(
-            `agent-shim: the running headroom daemon was started before this launch's front door address and would refuse every request this launch sends through it. It restarts once the launches using it end (pid ${holders.map((session) => String(session.pid)).join(", ")}); end them and launch again, or launch with --no-headroom.`
+            `the running headroom daemon was started before this launch's front door address and would refuse every request this launch sends through it. It restarts once the launches using it end (pid ${holders.map((session) => String(session.pid)).join(", ")}); end them and launch again, or launch with --no-headroom.`
           );
         }
         awaitingAllowlist = true;
       }
       if (state.lastError !== void 0) {
         throw new HeadroomStartError(
-          `agent-shim: the headroom daemon reported a fatal error and is not serving: ${state.lastError} (daemon log: ${paths.headroomLogPath})`
+          `the headroom daemon reported a fatal error and is not serving: ${state.lastError} (daemon log: ${paths.headroomLogPath})`
         );
       }
     } else if (!spawnedSupervisor) {
@@ -55550,7 +55550,7 @@ function ensureHeadroom(params) {
     if (ports.now() >= deadline) {
       const lastError = state?.lastError;
       throw new HeadroomStartError(
-        `agent-shim: the headroom daemon did not become ready within ${String(HEADROOM_START_TIMEOUT_MS)}ms` + (lastError === void 0 ? "" : ` (last error: ${lastError})`) + (awaitingAllowlist ? " (the running daemon's allowlist does not admit this launch's front door, and it did not restart)" : "") + `. Daemon log: ${paths.headroomLogPath}`
+        `the headroom daemon did not become ready within ${String(HEADROOM_START_TIMEOUT_MS)}ms` + (lastError === void 0 ? "" : ` (last error: ${lastError})`) + (awaitingAllowlist ? " (the running daemon's allowlist does not admit this launch's front door, and it did not restart)" : "") + `. Daemon log: ${paths.headroomLogPath}`
       );
     }
     ports.sleep(HEADROOM_LAUNCHER_POLL_MS);
@@ -61586,7 +61586,7 @@ function registerIdentityCommand(program2, deps) {
 // package.json
 var package_default = {
   name: "agent-shim",
-  version: "8.5.5",
+  version: "8.6.0",
   description: "A profile manager and launcher for Claude Code that lets one person run multiple logins from one machine while controlling what gets shared between them.",
   license: "MIT",
   author: "Joseph Mearman <joseph@mearman.co.uk>",
@@ -65639,2156 +65639,2304 @@ var import_node_https = __toESM(require("node:https"), 1);
 
 // src/frontdoor/rcControl.ts
 var https2 = __toESM(require("node:https"), 1);
-var CONTROL_PATH_PREFIX = "/__agent-shim/rc";
-var CONTROL_BODY_CAP_BYTES = 10485760;
-function answerJson(response, status, body) {
-  const text2 = JSON.stringify(body);
-  response.writeHead(status, { "content-type": "application/json", "content-length": String(Buffer.byteLength(text2, "utf8")) });
-  response.end(text2);
-}
-async function readBody(request7) {
-  return await new Promise((resolve, reject) => {
-    const chunks = [];
-    let total = 0;
-    request7.on("data", (chunk) => {
-      total += chunk.length;
-      if (total > CONTROL_BODY_CAP_BYTES) {
-        request7.destroy();
-        reject(new Error("too large"));
-        return;
-      }
-      chunks.push(chunk);
-    });
-    request7.on("end", () => {
-      resolve(Buffer.concat(chunks).toString("utf8"));
-    });
-    request7.on("error", () => {
-      reject(new Error("the request body ended early"));
-    });
-  });
+
+// src/frontdoor/rcSessions.ts
+var RC_SESSIONS_PATH_PREFIX = "/v1/code/sessions";
+var RC_SESSION_ID_PREFIX = "cse_";
+var RC_IDLE_EXPIRY_MS = 45e3;
+var RC_CREATE_RESPONSE_CAP_BYTES = 8192;
+var CONFLICT_REASON_HEADER = "x-ccr-conflict-reason";
+var RC_PENDING_DEADLINE_MS = 14e3;
+var RC_REQUEST_PARSE_CAP_BYTES = 262144;
+var RC_PENDING_SUMMARY_EXCERPT_CHARS = 300;
+var SUCCESS_STATUS_MAX_EXCLUSIVE = 300;
+function isSuccessful(status) {
+  return status >= HTTP_STATUS.ok && status < SUCCESS_STATUS_MAX_EXCLUSIVE;
 }
-function createRcControlHandler(deps) {
-  const sessionsPath = `${CONTROL_PATH_PREFIX}/sessions`;
-  const statusPath = `${CONTROL_PATH_PREFIX}/status`;
-  const pendingPath = `${CONTROL_PATH_PREFIX}/pending`;
-  const injectPath = `${CONTROL_PATH_PREFIX}/inject`;
-  const answerPath = `${CONTROL_PATH_PREFIX}/answer`;
-  return (request7, response) => {
-    const presented = request7.headers.authorization;
-    const bearerPrefix = "bearer ".length;
-    const token = typeof presented === "string" && presented.slice(0, bearerPrefix).toLowerCase() === "bearer " ? presented.slice(bearerPrefix) : void 0;
-    if (token === void 0 || !isLiveCapability(token, [deps.expectedToken])) {
-      answerJson(response, HTTP_STATUS.unauthorized, { error: "the front door's control routes demand this generation's control token as a Bearer credential" });
-      return;
-    }
-    const url2 = new URL(request7.url ?? "/", "http://127.0.0.1");
-    const handle = async () => {
-      if (url2.pathname === sessionsPath) {
-        if (request7.method !== "GET") {
-          answerJson(response, HTTP_STATUS.methodNotAllowed, { error: "the session list is a GET" });
-          return;
-        }
-        answerJson(response, HTTP_STATUS.ok, { sessions: deps.list() });
-        return;
-      }
-      if (url2.pathname === statusPath || url2.pathname === pendingPath) {
-        if (request7.method !== "GET") {
-          answerJson(response, HTTP_STATUS.methodNotAllowed, { error: "the status and pending reads are GETs" });
-          return;
-        }
-        const session = url2.searchParams.get("session") ?? void 0;
-        if (session !== void 0 && !deps.statusOf(session).some((entry) => entry.id === session)) {
-          answerJson(response, HTTP_STATUS.notFound, { error: `the front door has not observed Remote Control session ${session}: it may never have passed through this door, or it ended or expired (an entry lives only a bounded idle period past its last observed traffic)` });
-          return;
-        }
-        answerJson(response, HTTP_STATUS.ok, url2.pathname === statusPath ? { statuses: deps.statusOf(session) } : { pending: deps.pendingOf(session) });
-        return;
-      }
-      if (url2.pathname === injectPath) {
-        if (request7.method !== "POST") {
-          answerJson(response, HTTP_STATUS.methodNotAllowed, { error: "the inject operation is a POST" });
-          return;
-        }
-        let parsed;
-        try {
-          parsed = JSON.parse(await readBody(request7));
-        } catch {
-          answerJson(response, HTTP_STATUS.badRequest, { error: "the inject body is not readable JSON within the control body cap" });
-          return;
-        }
-        if (typeof parsed !== "object" || parsed === null || !("session" in parsed) || !("text" in parsed) || typeof parsed.session !== "string" || typeof parsed.text !== "string" || parsed.session === "" || parsed.text === "") {
-          answerJson(response, HTTP_STATUS.badRequest, { error: "the inject body must be JSON naming a non-empty session id and text" });
-          return;
-        }
-        const result = await deps.inject(parsed.session, parsed.text);
-        if (result.ok) {
-          answerJson(response, HTTP_STATUS.ok, { session: parsed.session, sequenceNums: result.sequenceNums });
-          return;
-        }
-        answerJson(response, HTTP_STATUS.badGateway, { error: result.message });
-        return;
-      }
-      if (url2.pathname === answerPath) {
-        if (request7.method !== "POST") {
-          answerJson(response, HTTP_STATUS.methodNotAllowed, { error: "the answer operation is a POST" });
-          return;
-        }
-        let parsed;
-        try {
-          parsed = JSON.parse(await readBody(request7));
-        } catch {
-          answerJson(response, HTTP_STATUS.badRequest, { error: "the answer body is not readable JSON within the control body cap" });
-          return;
-        }
-        if (typeof parsed !== "object" || parsed === null || !("session" in parsed) || !("request" in parsed) || !("approve" in parsed) || typeof parsed.session !== "string" || typeof parsed.request !== "string" || typeof parsed.approve !== "boolean" || parsed.session === "" || parsed.request === "") {
-          answerJson(response, HTTP_STATUS.badRequest, { error: "the answer body must be JSON naming a non-empty session id, request id, and an approve boolean" });
-          return;
-        }
-        const text2 = "text" in parsed && typeof parsed.text === "string" ? parsed.text : void 0;
-        if (parsed.approve && text2 !== void 0 && text2 !== "") {
-          answerJson(response, HTTP_STATUS.badRequest, { error: "an approval carries no text (the protocol's allow result has no message field); text is the denial message" });
-          return;
-        }
-        const result = await deps.answer(parsed.session, parsed.request, { approve: parsed.approve, message: parsed.approve ? void 0 : text2 });
-        if (result.ok) {
-          answerJson(response, HTTP_STATUS.ok, { session: parsed.session, request: parsed.request, sequenceNums: result.sequenceNums });
-          return;
-        }
-        answerJson(response, HTTP_STATUS.badGateway, { error: result.message });
-        return;
-      }
-      answerJson(response, HTTP_STATUS.notFound, { error: `no such control route: ${url2.pathname}` });
-    };
-    handle().catch((error62) => {
-      answerJson(response, HTTP_STATUS.internalServerError, { error: `the control route failed: ${error62 instanceof Error ? error62.message : String(error62)}` });
-    });
-  };
+function singleHeader(headers, name) {
+  const value = headers[name];
+  return typeof value === "string" ? value : void 0;
 }
-function realRcControlTransport(port, ca) {
-  return {
-    request: async (options) => await new Promise((resolve, reject) => {
-      const request7 = https2.request(
-        {
-          host: "127.0.0.1",
-          port,
-          method: options.method,
-          path: options.path,
-          headers: options.body === void 0 ? options.headers : { ...options.headers, "content-length": String(Buffer.byteLength(options.body, "utf8")) },
-          agent: false,
-          ca: [ca]
-        },
-        (response) => {
-          const chunks = [];
-          response.on("data", (chunk) => {
-            chunks.push(chunk);
-          });
-          response.on("end", () => {
-            resolve({ status: response.statusCode ?? 0, body: Buffer.concat(chunks).toString("utf8") });
-          });
-        }
-      );
-      request7.once("error", reject);
-      if (options.body === void 0) {
-        request7.end();
-      } else {
-        request7.end(options.body);
-      }
-    })
-  };
+var OAUTH_AUTHORIZATION_PREFIX = "Bearer sk-ant-oat";
+function oauthAuthorizationOf(headers) {
+  const value = singleHeader(headers, "authorization");
+  return value?.startsWith(OAUTH_AUTHORIZATION_PREFIX) === true ? value : void 0;
 }
-function controlErrorOf(body) {
+function sessionCreateId(body) {
+  let parsed;
   try {
-    const parsed = JSON.parse(body);
-    if (typeof parsed === "object" && parsed !== null && "error" in parsed && typeof parsed.error === "string") {
-      return parsed.error;
-    }
+    parsed = JSON.parse(body);
   } catch {
-    return body;
-  }
-  return void 0;
-}
-function isRcSessionSummary(value) {
-  if (typeof value !== "object" || value === null) {
-    return false;
-  }
-  if (!("id" in value) || !("createdAt" in value) || !("lastSeenAt" in value)) {
-    return false;
-  }
-  return typeof value.id === "string" && typeof value.createdAt === "number" && typeof value.lastSeenAt === "number";
-}
-function isRcWorkerFact(value, valueIs) {
-  if (typeof value !== "object" || value === null) {
-    return false;
-  }
-  if (!("value" in value) || !("observedAt" in value)) {
-    return false;
-  }
-  return valueIs(value.value) && typeof value.observedAt === "number";
-}
-function isRcSessionStatus(value) {
-  if (!isRcSessionSummary(value)) {
-    return false;
-  }
-  if (!("pending" in value) || !Array.isArray(value.pending)) {
-    return false;
+    return void 0;
   }
-  if ("workerState" in value && value.workerState !== void 0 && !isRcWorkerFact(value.workerState, (candidate) => typeof candidate === "string")) {
-    return false;
+  if (typeof parsed !== "object" || parsed === null || !("session" in parsed)) {
+    return void 0;
   }
-  if ("workerIdleSeconds" in value && value.workerIdleSeconds !== void 0 && !isRcWorkerFact(value.workerIdleSeconds, (candidate) => typeof candidate === "number")) {
-    return false;
+  const session = parsed.session;
+  if (typeof session !== "object" || session === null || !("id" in session)) {
+    return void 0;
   }
-  return value.pending.every((candidate) => isRcPendingRequestSummary(candidate));
+  const id = session.id;
+  return typeof id === "string" && id.startsWith(RC_SESSION_ID_PREFIX) ? id : void 0;
 }
-function isRcPendingRequestSummary(value) {
-  if (typeof value !== "object" || value === null) {
-    return false;
-  }
-  if (!("sessionId" in value) || !("requestId" in value) || !("type" in value) || !("summary" in value) || !("observedAt" in value)) {
-    return false;
-  }
-  return typeof value.sessionId === "string" && typeof value.requestId === "string" && typeof value.type === "string" && typeof value.summary === "string" && typeof value.observedAt === "number";
+function isRecord3(value) {
+  return typeof value === "object" && value !== null && !Array.isArray(value);
 }
-function sequenceNumsOfBody(body) {
+function parseJsonObject(body) {
   let parsed;
   try {
     parsed = JSON.parse(body);
   } catch {
     return void 0;
   }
-  if (typeof parsed !== "object" || parsed === null || !("sequenceNums" in parsed) || !Array.isArray(parsed.sequenceNums)) {
-    return void 0;
-  }
-  const sequenceNums = [];
-  const values = parsed.sequenceNums;
-  for (const value of values) {
-    if (typeof value !== "number") {
-      return void 0;
-    }
-    sequenceNums.push(value);
-  }
-  return sequenceNums;
+  return isRecord3(parsed) ? parsed : void 0;
 }
-function frontDoorRcControl(transport, token) {
-  const headers = { authorization: `Bearer ${token}` };
-  const listAnswerOf = async (path41, what) => {
-    try {
-      return await transport.request({ method: "GET", path: path41, headers });
-    } catch (error62) {
-      throw new Error(`${what}: could not reach the front door's control listener: ${error62 instanceof Error ? error62.message : String(error62)}`, { cause: error62 });
-    }
-  };
-  const sessionsOf = (answer, what) => {
-    if (answer.status !== HTTP_STATUS.ok) {
-      throw new Error(`${what} failed (HTTP ${String(answer.status)}): ${controlErrorOf(answer.body) ?? answer.body}`);
-    }
-    let parsed;
-    try {
-      parsed = JSON.parse(answer.body);
-    } catch {
-      throw new Error(`${what}: the door's answer was not JSON: ${answer.body}`);
-    }
-    if (typeof parsed !== "object" || parsed === null || !("sessions" in parsed) || !Array.isArray(parsed.sessions)) {
-      throw new Error(`${what}: the door's answer named no sessions list: ${answer.body}`);
-    }
-    const candidates = parsed.sessions;
-    const sessions = [];
-    for (const value of candidates) {
-      if (!isRcSessionSummary(value)) {
-        throw new Error(`${what}: the door's answer named no sessions list: ${answer.body}`);
-      }
-      sessions.push(value);
-    }
-    return sessions;
-  };
-  const statusesOf = (answer, what) => {
-    if (answer.status !== HTTP_STATUS.ok) {
-      throw new Error(`${what} failed (HTTP ${String(answer.status)}): ${controlErrorOf(answer.body) ?? answer.body}`);
-    }
-    let parsed;
-    try {
-      parsed = JSON.parse(answer.body);
-    } catch {
-      throw new Error(`${what}: the door's answer was not JSON: ${answer.body}`);
+function nonEmptyString(record2, field) {
+  const value = record2 === void 0 ? void 0 : record2[field];
+  return typeof value === "string" && value !== "" ? value : void 0;
+}
+function finiteNumber(record2, field) {
+  const value = record2 === void 0 ? void 0 : record2[field];
+  return typeof value === "number" && Number.isFinite(value) ? value : void 0;
+}
+function excerpt(text2) {
+  return text2.length <= RC_PENDING_SUMMARY_EXCERPT_CHARS ? text2 : `${text2.slice(0, RC_PENDING_SUMMARY_EXCERPT_CHARS)}...`;
+}
+function payloadEventsOf(body) {
+  const parsed = parseJsonObject(body);
+  const events = parsed === void 0 ? void 0 : parsed.events;
+  if (!Array.isArray(events)) {
+    return [];
+  }
+  const payloads = [];
+  for (const event of events) {
+    if (!isRecord3(event)) {
+      continue;
     }
-    if (typeof parsed !== "object" || parsed === null || !("statuses" in parsed) || !Array.isArray(parsed.statuses)) {
-      throw new Error(`${what}: the door's answer named no status list: ${answer.body}`);
+    const payload = event.payload;
+    if (!isRecord3(payload)) {
+      continue;
     }
-    const statuses = [];
-    for (const value of parsed.statuses) {
-      if (!isRcSessionStatus(value)) {
-        throw new Error(`${what}: the door's answer named no status list: ${answer.body}`);
-      }
-      statuses.push(value);
+    payloads.push(payload);
+  }
+  return payloads;
+}
+function pendingOfControlRequestPayload(payload) {
+  if (payload.type !== "control_request") {
+    return void 0;
+  }
+  const requestId = nonEmptyString(payload, "request_id") ?? nonEmptyString(payload, "uuid");
+  if (requestId === void 0) {
+    return void 0;
+  }
+  const request7 = isRecord3(payload.request) ? payload.request : void 0;
+  const subtype = nonEmptyString(request7, "subtype");
+  const type = subtype ?? "control_request";
+  let summary = "";
+  if (subtype === "can_use_tool") {
+    const toolName = nonEmptyString(request7, "tool_name") ?? "unknown tool";
+    const input2 = request7 === void 0 ? void 0 : request7.input;
+    summary = input2 === void 0 ? toolName : `${toolName} ${excerpt(JSON.stringify(input2))}`;
+  } else if (request7 !== void 0) {
+    summary = excerpt(JSON.stringify(request7));
+  }
+  return { requestId, type, summary };
+}
+function answeredRequestIdsOfControlResponsePayload(payload) {
+  if (payload.type !== "control_response") {
+    return [];
+  }
+  const response = isRecord3(payload.response) ? payload.response : void 0;
+  const id = nonEmptyString(response, "request_id") ?? nonEmptyString(payload, "request_id") ?? nonEmptyString(payload, "uuid");
+  return id === void 0 ? [] : [id];
+}
+function parseRcRequestBody(kind, body) {
+  if (kind === "heartbeat") {
+    return { controlRequests: [], answeredRequestIds: [], idleSeconds: finiteNumber(parseJsonObject(body), "idle_seconds"), workerStatus: void 0 };
+  }
+  if (kind === "worker-registration") {
+    return { controlRequests: [], answeredRequestIds: [], idleSeconds: void 0, workerStatus: nonEmptyString(parseJsonObject(body), "status") };
+  }
+  const controlRequests = [];
+  const answeredRequestIds = [];
+  for (const payload of payloadEventsOf(body)) {
+    const pending = pendingOfControlRequestPayload(payload);
+    if (pending !== void 0) {
+      controlRequests.push({ requestId: pending.requestId, type: pending.type, summary: pending.summary });
+      continue;
     }
-    return statuses;
+    answeredRequestIds.push(...answeredRequestIdsOfControlResponsePayload(payload));
+  }
+  return { controlRequests, answeredRequestIds, idleSeconds: void 0, workerStatus: void 0 };
+}
+function createRcSessionTracker(deps) {
+  const entries = /* @__PURE__ */ new Map();
+  const expire = (id) => {
+    entries.delete(id);
   };
-  const pendingOfAnswer = (answer, what) => {
-    if (answer.status !== HTTP_STATUS.ok) {
-      throw new Error(`${what} failed (HTTP ${String(answer.status)}): ${controlErrorOf(answer.body) ?? answer.body}`);
-    }
-    let parsed;
-    try {
-      parsed = JSON.parse(answer.body);
-    } catch {
-      throw new Error(`${what}: the door's answer was not JSON: ${answer.body}`);
-    }
-    if (typeof parsed !== "object" || parsed === null || !("pending" in parsed) || !Array.isArray(parsed.pending)) {
-      throw new Error(`${what}: the door's answer named no pending list: ${answer.body}`);
-    }
-    const pending = [];
-    for (const value of parsed.pending) {
-      if (!isRcPendingRequestSummary(value)) {
-        throw new Error(`${what}: the door's answer named no pending list: ${answer.body}`);
+  const expirePendings = (entry, now) => {
+    for (const [requestId, pending] of entry.pending) {
+      if (now - pending.observedAt >= RC_PENDING_DEADLINE_MS) {
+        entry.pending.delete(requestId);
       }
-      pending.push(value);
     }
-    return pending;
   };
-  const writeOf = async (path41, body, describeFailure) => {
-    let answer;
-    try {
-      answer = await transport.request({ method: "POST", path: path41, headers: { ...headers, "content-type": "application/json" }, body });
-    } catch (error62) {
-      return { ok: false, message: `could not reach the front door's control listener: ${error62 instanceof Error ? error62.message : String(error62)}` };
-    }
-    if (answer.status === HTTP_STATUS.ok) {
-      const sequenceNums = sequenceNumsOfBody(answer.body);
-      if (sequenceNums === void 0) {
-        return { ok: false, message: `the door accepted the event but its answer named no sequence numbers: ${answer.body}` };
+  const sweep = () => {
+    for (const [id, entry] of entries) {
+      if (deps.now() - entry.lastSeenAt >= deps.idleMs) {
+        expire(id);
+        continue;
       }
-      return { ok: true, sequenceNums };
+      expirePendings(entry, deps.now());
     }
-    return { ok: false, message: describeFailure(answer.status, controlErrorOf(answer.body) ?? answer.body) };
   };
-  const sessionQuery = (sessionId) => sessionId === void 0 ? "" : `?session=${encodeURIComponent(sessionId)}`;
-  return {
-    listSessions: async () => sessionsOf(await listAnswerOf(`${CONTROL_PATH_PREFIX}/sessions`, "listing the door's Remote Control sessions"), "listing the door's Remote Control sessions"),
-    statusOf: async (sessionId) => statusesOf(await listAnswerOf(`${CONTROL_PATH_PREFIX}/status${sessionQuery(sessionId)}`, "reading the door's Remote Control session status"), "reading the door's Remote Control session status"),
-    pendingOf: async (sessionId) => pendingOfAnswer(await listAnswerOf(`${CONTROL_PATH_PREFIX}/pending${sessionQuery(sessionId)}`, "listing the door's pending Remote Control control requests"), "listing the door's pending Remote Control control requests"),
-    sendPrompt: async (sessionId, text2) => await writeOf(`${CONTROL_PATH_PREFIX}/inject`, JSON.stringify({ session: sessionId, text: text2 }), (status, message) => `injecting into ${sessionId} failed (HTTP ${String(status)}): ${message}`),
-    answerRequest: async (sessionId, requestId, decision) => await writeOf(
-      `${CONTROL_PATH_PREFIX}/answer`,
-      JSON.stringify({ session: sessionId, request: requestId, approve: decision.approve, ...decision.approve || decision.message === void 0 ? {} : { text: decision.message } }),
-      (status, message) => `answering control request ${requestId} on ${sessionId} failed (HTTP ${String(status)}): ${message}`
-    )
+  const timer = setInterval(sweep, deps.idleMs);
+  timer.unref();
+  const birth = (id, facts) => {
+    const record2 = { id, createdAt: deps.now(), lastSeenAt: deps.now(), ...facts, pending: /* @__PURE__ */ new Map(), workerState: void 0, workerIdleSeconds: void 0 };
+    entries.set(id, record2);
+    return record2;
   };
-}
-
-// src/frontdoor/server.ts
-var HEALTH_TIMEOUT_MS = 2e3;
-var HEALTH_START_BUDGET_MS = 5e3;
-var HEALTH_RETRY_MS = 50;
-function createFrontDoorServer(pipeline, log, tls2, control) {
-  const handler = (request7, response) => {
-    if (request7.method === "GET" && request7.url === "/healthz") {
-      response.writeHead(HTTP_STATUS.ok, { "Content-Type": "text/plain" });
-      response.end("ok");
-      return;
-    }
-    if (control !== void 0 && (request7.url ?? "/").startsWith(CONTROL_PATH_PREFIX)) {
-      control(request7, response);
-      return;
+  const observeExchange = (request7) => {
+    const method = (request7.method ?? "").toUpperCase();
+    const path41 = new URL(request7.url ?? "/", "http://127.0.0.1").pathname;
+    if (!path41.startsWith(RC_SESSIONS_PATH_PREFIX)) {
+      return void 0;
     }
-    const abort = new AbortController();
-    response.on("close", () => {
-      if (!response.writableFinished) {
-        abort.abort();
-      }
-    });
-    const handle = async () => {
-      await pipeline({ method: request7.method ?? "GET", url: request7.url ?? "/", headers: aliasLegacyWireHeaders(request7.headers), body: request7, signal: abort.signal, response });
-      if (!request7.readableEnded) {
-        request7.resume();
-      }
+    const tail = path41.slice(RC_SESSIONS_PATH_PREFIX.length);
+    const facts = {
+      oauthAuthorization: oauthAuthorizationOf(request7.headers),
+      anthropicVersion: singleHeader(request7.headers, "anthropic-version"),
+      anthropicClientPlatform: singleHeader(request7.headers, "anthropic-client-platform")
     };
-    handle().catch((error62) => {
-      log(`request ${request7.method ?? "?"} ${request7.url ?? "?"} failed: ${error62 instanceof Error ? `${error62.name}: ${error62.message}` : String(error62)}`);
-      if (!response.headersSent) {
-        response.writeHead(HTTP_STATUS.internalServerError, { "Content-Type": "application/json" });
-        response.end(JSON.stringify({ type: "error", error: { type: "api_error", message: "internal error in the agent-shim front door" } }));
-      } else {
-        response.destroy();
+    if (tail === "") {
+      if (method !== "POST") {
+        return void 0;
       }
-    });
-  };
-  if (tls2 === void 0) {
-    return import_node_http.default.createServer(handler);
-  }
-  const server = import_node_https.default.createServer({ key: tls2.keyPem, cert: tls2.certPem }, handler);
-  server.on("tlsClientError", (_error, socket) => {
-    socket.destroy();
-  });
-  return server;
-}
-async function frontDoorHealthy(port, ca) {
-  return await new Promise((resolve) => {
-    const onResponse = (response) => {
-      response.resume();
-      resolve(response.statusCode === HTTP_STATUS.ok);
-    };
-    const options = { host: "127.0.0.1", port, path: "/healthz", agent: false, timeout: HEALTH_TIMEOUT_MS };
-    const request7 = ca === void 0 ? import_node_http.default.get(options, onResponse) : import_node_https.default.get({ ...options, ca: [ca] }, onResponse);
-    request7.on("timeout", () => {
-      request7.destroy();
-    });
-    request7.on("error", () => {
-      resolve(false);
-    });
-  });
-}
-async function listenFrontDoor(server, options = {}) {
-  const { preferredPort, ca } = options;
-  const tryListen = async (port) => await new Promise((resolve, reject) => {
-    const onError = (error62) => {
-      server.off("error", onError);
-      reject(error62);
-    };
-    server.once("error", onError);
-    server.listen(port, "127.0.0.1", () => {
-      server.off("error", onError);
-      const address = server.address();
-      const bound2 = typeof address === "object" && address !== null ? address.port : 0;
-      if (bound2 === 0) {
-        reject(new Error("could not bind a loopback port"));
-        return;
-      }
-      resolve(bound2);
-    });
-  });
-  let bound;
-  if (preferredPort !== void 0) {
-    try {
-      bound = await tryListen(preferredPort);
-    } catch {
-      bound = await tryListen(0);
-    }
-  } else {
-    bound = await tryListen(0);
-  }
-  options.onBound?.(bound);
-  if (options.onError !== void 0) {
-    server.on("error", options.onError);
-  }
-  const deadline = Date.now() + HEALTH_START_BUDGET_MS;
-  for (; ; ) {
-    if (await frontDoorHealthy(bound, ca)) {
+      let accepted2 = false;
+      let buffered2 = 0;
+      let body = "";
       return {
-        port: bound,
-        close: async () => {
-          await new Promise((resolve) => {
-            server.close(() => {
-              resolve(void 0);
-            });
-            server.closeAllConnections();
-          });
+        onResponse: (status) => {
+          accepted2 = isSuccessful(status);
+        },
+        onBodyChunk: (chunk) => {
+          if (!accepted2 || buffered2 >= RC_CREATE_RESPONSE_CAP_BYTES) {
+            return;
+          }
+          const text2 = Buffer.from(chunk).toString("utf8");
+          body = body + text2.slice(0, RC_CREATE_RESPONSE_CAP_BYTES - buffered2);
+          buffered2 = body.length;
+        },
+        onEnd: () => {
+          if (!accepted2) {
+            return;
+          }
+          const id2 = sessionCreateId(body);
+          if (id2 === void 0) {
+            return;
+          }
+          birth(id2, facts);
         }
       };
     }
-    if (Date.now() >= deadline) {
-      throw new Error(`the front door listener on 127.0.0.1:${String(bound)} did not answer its health probe`);
+    const rest = tail.slice(1);
+    const [id] = rest.split("/");
+    if (id?.startsWith(RC_SESSION_ID_PREFIX) !== true) {
+      return void 0;
     }
-    await new Promise((resolve) => {
-      setTimeout(resolve, HEALTH_RETRY_MS);
-    });
-  }
-}
-async function* upstreamChunks(stream) {
-  for await (const chunk of stream) {
-    if (typeof chunk === "string") {
-      yield Buffer.from(chunk, "utf8");
-      continue;
+    const entry = entries.get(id) ?? birth(id, facts);
+    entry.lastSeenAt = deps.now();
+    entry.oauthAuthorization = facts.oauthAuthorization ?? entry.oauthAuthorization;
+    entry.anthropicVersion = facts.anthropicVersion ?? entry.anthropicVersion;
+    entry.anthropicClientPlatform = facts.anthropicClientPlatform ?? entry.anthropicClientPlatform;
+    const bodyKind = method === "POST" && rest === `${id}/worker/events` ? "worker-events" : method === "POST" && rest === `${id}/events` ? "client-events" : method === "POST" && rest === `${id}/worker/heartbeat` ? "heartbeat" : method === "PUT" && rest === `${id}/worker` ? "worker-registration" : void 0;
+    let chunks = [];
+    let buffered = 0;
+    let oversized = false;
+    let requestEnded = false;
+    let accepted;
+    let filed = false;
+    const file2 = () => {
+      if (filed || accepted !== true || !requestEnded || bodyKind === void 0) {
+        return;
+      }
+      filed = true;
+      const factsOfBody = oversized ? void 0 : parseRcRequestBody(bodyKind, Buffer.concat(chunks).toString("utf8"));
+      chunks = [];
+      const entryNow = entries.get(id);
+      if (entryNow === void 0 || factsOfBody === void 0) {
+        return;
+      }
+      const now = deps.now();
+      for (const controlRequest of factsOfBody.controlRequests) {
+        entryNow.pending.set(controlRequest.requestId, { sessionId: id, ...controlRequest, observedAt: now });
+      }
+      for (const requestId of factsOfBody.answeredRequestIds) {
+        entryNow.pending.delete(requestId);
+      }
+      if (factsOfBody.idleSeconds !== void 0) {
+        entryNow.workerIdleSeconds = { value: factsOfBody.idleSeconds, observedAt: now };
+      }
+      if (factsOfBody.workerStatus !== void 0) {
+        entryNow.workerState = { value: factsOfBody.workerStatus, observedAt: now };
+      }
+    };
+    const archiving = method === "POST" && rest === `${id}/archive`;
+    return {
+      ...bodyKind === void 0 ? {} : {
+        onRequestChunk: (chunk) => {
+          if (oversized) {
+            return;
+          }
+          chunks.push(Buffer.from(chunk));
+          buffered += chunk.length;
+          if (buffered > RC_REQUEST_PARSE_CAP_BYTES) {
+            oversized = true;
+            chunks = [];
+          }
+        },
+        onRequestEnd: () => {
+          requestEnded = true;
+          file2();
+        }
+      },
+      onResponse: (status, headers) => {
+        if (singleHeader(headers, CONFLICT_REASON_HEADER) !== void 0 || archiving && isSuccessful(status)) {
+          expire(id);
+          return;
+        }
+        accepted = isSuccessful(status);
+        file2();
+      },
+      onBodyChunk: () => {
+      },
+      onEnd: () => {
+      }
+    };
+  };
+  const summaryOf = ({ id, createdAt, lastSeenAt }) => ({ id, createdAt, lastSeenAt });
+  const pendingSummaryOf = ({ sessionId, requestId, type, summary, observedAt: observedAt2 }) => ({ sessionId, requestId, type, summary, observedAt: observedAt2 });
+  const sortedEntries = () => [...entries.values()].sort((left, right) => left.createdAt - right.createdAt || (left.id < right.id ? -1 : 1));
+  const pendingSorted = (entry) => [...entry.pending.values()].sort((left, right) => left.observedAt - right.observedAt || (left.requestId < right.requestId ? -1 : 1)).map(pendingSummaryOf);
+  return {
+    observeExchange,
+    list: () => {
+      sweep();
+      return sortedEntries().map(summaryOf);
+    },
+    statusOf: (sessionId) => {
+      sweep();
+      return sortedEntries().filter((entry) => sessionId === void 0 || entry.id === sessionId).map((entry) => ({ ...summaryOf(entry), workerState: entry.workerState, workerIdleSeconds: entry.workerIdleSeconds, pending: pendingSorted(entry) }));
+    },
+    pendingOf: (sessionId) => {
+      sweep();
+      return sortedEntries().filter((entry) => sessionId === void 0 || entry.id === sessionId).flatMap((entry) => pendingSorted(entry));
+    },
+    credentialOf: (sessionId) => {
+      const entry = entries.get(sessionId);
+      return entry === void 0 ? void 0 : { authorization: entry.oauthAuthorization, anthropicVersion: entry.anthropicVersion, anthropicClientPlatform: entry.anthropicClientPlatform };
+    },
+    completePending: (sessionId, requestId) => {
+      entries.get(sessionId)?.pending.delete(requestId);
+    },
+    close: () => {
+      clearInterval(timer);
     }
-    if (chunk instanceof Uint8Array) {
-      yield chunk;
+  };
+}
+function observingRoutedRoute(route, tracker) {
+  return {
+    ...route,
+    serve: async (request7, response) => {
+      const observed = tracker.observeExchange({ method: request7.method, url: request7.url, headers: request7.headers });
+      if (observed?.onRequestChunk !== void 0) {
+        request7.body.on("data", (chunk) => {
+          observed.onRequestChunk?.(chunk);
+        });
+        request7.body.on("end", () => {
+          observed.onRequestEnd?.();
+        });
+      }
+      await route.serve(request7, observed === void 0 ? response : teeRoutedResponse(response, observed));
     }
-  }
+  };
 }
-
-// src/frontdoor/headroomHop.ts
-var HTTP_BAD_GATEWAY2 = HTTP_STATUS.badGateway;
-function responseHeaders(headers) {
-  const result = {};
-  for (const [name, value] of Object.entries(forwardableHeaders(headers))) {
-    if (value === void 0) {
-      continue;
+function teeRoutedResponse(response, observer) {
+  return {
+    get headersSent() {
+      return response.headersSent;
+    },
+    start: (status, headers) => {
+      observer.onResponse(status, headers);
+      response.start(status, headers);
+    },
+    flush: () => {
+      response.flush();
+    },
+    write: async (chunk) => {
+      observer.onBodyChunk(typeof chunk === "string" ? Buffer.from(chunk, "utf8") : chunk);
+      await response.write(chunk);
+    },
+    end: () => {
+      response.end();
+      observer.onEnd();
+    },
+    destroy: () => {
+      response.destroy();
+      observer.onEnd();
     }
-    result[name] = Array.isArray(value) ? value.join(", ") : value;
-  }
-  return result;
+  };
 }
-async function applyHeadroomHop(request7, response, upstream, deps) {
-  const target = deps.headroomSocket();
-  if (target === void 0) {
-    await answerBadGateway(response, "agent-shim front door: the headroom daemon is restarting");
-    return;
+function buildRcUserMessagePayload(uuid3, sessionId, text2) {
+  return {
+    type: "user",
+    uuid: uuid3,
+    session_id: sessionId,
+    parent_tool_use_id: null,
+    message: { role: "user", content: text2 }
+  };
+}
+function buildRcEventWriteBody(payload) {
+  return { events: [{ payload }] };
+}
+function sequenceNumsOf(body) {
+  let parsed;
+  try {
+    parsed = JSON.parse(body);
+  } catch {
+    return void 0;
   }
-  if (target.refused !== void 0) {
-    deps.log(`front door: refusing the headroom hop (${request7.method} ${new URL(request7.url, "http://127.0.0.1").pathname}): ${target.refused}`);
-    await answerBadGateway(response, `agent-shim front door: refusing to send this request to headroom: ${target.refused}`);
-    return;
+  if (typeof parsed !== "object" || parsed === null || !("results" in parsed) || !Array.isArray(parsed.results)) {
+    return void 0;
   }
-  const { socketPath } = target;
-  let headers = forwardableHeaders(request7.headers);
-  let hopId;
-  if (upstream !== void 0) {
-    const provider = parseProviderPath(new URL(request7.url, "http://127.0.0.1").pathname)?.provider;
-    if (provider === void 0) {
-      throw new Error(`headroom hop for ${request7.url} names an upstream but no provider`);
+  const sequenceNums = [];
+  const results = parsed.results;
+  for (const result of results) {
+    if (typeof result !== "object" || result === null || !("sequence_num" in result)) {
+      return void 0;
+    }
+    const sequenceNum = result.sequence_num;
+    if (typeof sequenceNum === "number") {
+      sequenceNums.push(sequenceNum);
+    } else if (typeof sequenceNum === "string" && /^[0-9]+$/.test(sequenceNum)) {
+      sequenceNums.push(Number(sequenceNum));
+    } else {
+      return void 0;
     }
-    const sequestered = deps.custody.sequester(headers, provider);
-    hopId = sequestered.hopId;
-    headers = sequestered.headers;
-    headers[HOP_ID_HEADER] = hopId;
-    headers[HEADROOM_BASE_URL_HEADER] = upstream;
-  }
-  if (request7.session.projectId !== void 0) {
-    headers[PROJECT_ID_HEADER] = request7.session.projectId;
   }
-  headers[HOP_SECRET_HEADER] = deps.hopSecret;
-  try {
-    await forwardThroughHeadroom(request7, response, { socketPath, headers, log: deps.log });
-  } finally {
-    if (hopId !== void 0) {
-      deps.custody.release(hopId);
+  return sequenceNums.length === 0 ? void 0 : sequenceNums;
+}
+function rcEventWriteResultFromAnswer(answer) {
+  if (!isSuccessful(answer.status)) {
+    if (answer.status === HTTP_STATUS.unauthorized) {
+      return { ok: false, message: `the API refused the observed Authorization bearer for this session (HTTP 401): the bearer went stale after the door last saw the session's traffic. The session's own client refreshes it on its next call, which the door will observe, so retry once Remote Control has been active again. API answer: ${answer.body}` };
     }
+    return { ok: false, message: `the API answered HTTP ${String(answer.status)} to the injected event: ${answer.body}` };
+  }
+  const sequenceNums = sequenceNumsOf(answer.body);
+  if (sequenceNums === void 0) {
+    return { ok: false, message: `the API accepted the injected event but its answer named no results[].sequence_num, so delivery cannot be confirmed: ${answer.body}` };
   }
+  return { ok: true, sequenceNums };
 }
-async function answerBadGateway(response, message) {
-  response.start(HTTP_BAD_GATEWAY2, { "Content-Type": "application/json" });
-  await response.write(JSON.stringify({ type: "error", error: { type: "api_error", message } }));
-  response.end();
+function noOAuthCredentialResult(sessionId) {
+  return { ok: false, message: `no claude.ai OAuth bearer has been observed for session ${sessionId}: only worker calls crossed this door, and the worker JWT they carry is answered 401 on the client half. Reconnect Remote Control through this door and the create's own bearer will be observed` };
 }
-var HOP_AGENT = new http3.Agent({ keepAlive: false });
-async function forwardThroughHeadroom(request7, response, target) {
-  const { socketPath, headers } = target;
-  await new Promise((resolve) => {
-    const onUpstreamResponse = (upstreamResponse) => {
-      response.start(upstreamResponse.statusCode ?? HTTP_BAD_GATEWAY2, responseHeaders(upstreamResponse.headers));
-      response.flush();
-      const stream = async () => {
-        try {
-          for await (const chunk of upstreamChunks(upstreamResponse)) {
-            if (request7.signal.aborted) {
-              break;
-            }
-            await response.write(chunk);
-          }
-          if (!request7.signal.aborted) {
-            response.end();
-          }
-        } catch (error62) {
-          if (!request7.signal.aborted) {
-            target.log(`front door: headroom hop to ${socketPath} ended mid-stream (${request7.method} ${new URL(request7.url, "http://127.0.0.1").pathname}): ${error62 instanceof Error ? error62.message : String(error62)}`);
-          }
-          response.destroy();
-        }
-        resolve(void 0);
-      };
-      void stream();
-    };
-    const hop = http3.request({ socketPath, method: request7.method, path: request7.url, headers, agent: HOP_AGENT }, onUpstreamResponse);
-    hop.on("error", (error62) => {
-      const phase = response.headersSent ? "mid-stream" : "before the response started";
-      const code = "code" in error62 && typeof error62.code === "string" ? ` ${error62.code}` : "";
-      target.log(`front door: headroom hop to ${socketPath} failed (${request7.method} ${new URL(request7.url, "http://127.0.0.1").pathname}, ${phase}): ${error62.message}${code}`);
-      if (!response.headersSent) {
-        response.start(HTTP_BAD_GATEWAY2, { "Content-Type": "application/json" });
-        void response.write(JSON.stringify({ type: "error", error: { type: "api_error", message: `agent-shim front door: the headroom daemon is unreachable (${error62.message})` } })).then(() => {
-          response.end();
-        });
-      } else {
-        response.destroy();
-      }
-      resolve(void 0);
-    });
-    request7.signal.addEventListener("abort", () => {
-      hop.destroy();
-    });
-    request7.body.pipe(hop);
-    request7.body.on("error", () => {
-      hop.destroy();
-    });
-  });
+function rcWriteHeaders(credential) {
+  const headers = { "content-type": "application/json" };
+  if (credential.authorization !== void 0) {
+    headers.authorization = credential.authorization;
+  }
+  if (credential.anthropicVersion !== void 0) {
+    headers["anthropic-version"] = credential.anthropicVersion;
+  }
+  if (credential.anthropicClientPlatform !== void 0) {
+    headers["anthropic-client-platform"] = credential.anthropicClientPlatform;
+  }
+  return headers;
 }
-
-// src/frontdoor/pipeline.ts
-function errorTypeFor(status) {
-  switch (status) {
-    case HTTP_STATUS.badRequest:
-      return "invalid_request_error";
-    case HTTP_STATUS.unauthorized:
-      return "authentication_error";
-    case HTTP_STATUS.forbidden:
-      return "permission_error";
-    case HTTP_STATUS.notFound:
-      return "not_found_error";
-    case HTTP_STATUS.tooManyRequests:
-      return "rate_limit_error";
-    default:
-      return "api_error";
+async function injectRcUserMessage(deps, sessionId, text2) {
+  const credential = deps.credentialOf(sessionId);
+  if (credential === void 0) {
+    return { ok: false, message: `the front door has not observed Remote Control session ${sessionId}: it may never have passed through this door, or it ended or expired (an entry lives only a bounded idle period past its last observed traffic)` };
+  }
+  if (credential.authorization === void 0) {
+    return noOAuthCredentialResult(sessionId);
   }
+  const body = JSON.stringify(buildRcEventWriteBody(buildRcUserMessagePayload(deps.newUuid(), sessionId, text2)));
+  let answer;
+  try {
+    answer = await deps.dial.writeEvents(sessionId, rcWriteHeaders(credential), body);
+  } catch (error62) {
+    return { ok: false, message: `the door could not reach the API host to inject into session ${sessionId}: ${error62 instanceof Error ? error62.message : String(error62)}` };
+  }
+  return rcEventWriteResultFromAnswer(answer);
 }
-function errorBody(status, message) {
-  return JSON.stringify({ type: "error", error: { type: errorTypeFor(status), message } });
+function buildRcControlResponsePayload(requestId, decision) {
+  const result = decision.approve ? { behavior: "allow" } : { behavior: "deny", message: decision.message ?? "" };
+  return { type: "control_response", response: { subtype: "success", request_id: requestId, response: result } };
 }
-function pathOf(url2) {
-  const query = url2.indexOf("?");
-  return query === -1 ? url2 : url2.slice(0, query);
+var RC_PERMISSION_MODES = ["default", "acceptEdits", "bypassPermissions", "plan", "dontAsk", "auto"];
+function isRcPermissionMode(value) {
+  return RC_PERMISSION_MODES.some((mode) => mode === value);
 }
-function describeThrown(error62) {
-  return error62 instanceof Error ? error62.message : String(error62);
+function buildRcInterruptPayload(requestId) {
+  return { type: "control_request", request_id: requestId, request: { subtype: "interrupt" } };
 }
-function createRoutedResponse(response, context) {
-  const { deps, session, route, request: request7 } = context;
-  let headersSent = false;
-  let bodyObservers = [];
-  let finished = false;
-  const observeBody = (call) => {
-    bodyObservers = bodyObservers.filter((observer) => {
-      try {
-        call(observer);
-        return true;
-      } catch (error62) {
-        deps.log(`front door: response body observer threw for ${route}: ${describeThrown(error62)}`);
-        return false;
-      }
-    });
-  };
-  const finish = (outcome) => {
-    if (finished) {
-      return;
-    }
-    finished = true;
-    observeBody((observer) => {
-      observer.end(outcome);
-    });
-    bodyObservers = [];
-  };
-  response.once("close", () => {
-    finish(response.writableFinished ? "completed" : "aborted");
-  });
-  const settle2 = async () => {
-    await new Promise((resolve) => {
-      const done = () => {
-        response.off("drain", done);
-        response.off("close", done);
-        resolve();
-      };
-      response.once("drain", done);
-      response.once("close", done);
-    });
-  };
-  return {
-    get headersSent() {
-      return headersSent;
-    },
-    start: (status, headers) => {
-      for (const observe of deps.responseObservers) {
-        try {
-          const body = observe({ session, route, method: request7.method, path: request7.path, receivedAt: request7.receivedAt, status, headers });
-          if (body !== void 0) {
-            bodyObservers.push(body);
-          }
-        } catch (error62) {
-          deps.log(`front door: response observer threw for ${route}: ${describeThrown(error62)}`);
-        }
-      }
-      response.writeHead(status, headers);
-      headersSent = true;
-    },
-    flush: () => {
-      response.flushHeaders();
-    },
-    write: async (chunk) => {
-      if (response.destroyed || response.writableEnded) {
-        return;
-      }
-      const accepted = response.write(chunk);
-      if (bodyObservers.length > 0) {
-        const bytes = typeof chunk === "string" ? Buffer.from(chunk, "utf8") : chunk;
-        observeBody((observer) => {
-          observer.chunk(bytes);
-        });
-      }
-      if (!accepted) {
-        await settle2();
-      }
-    },
-    end: () => {
-      const outcome = response.destroyed ? "aborted" : "completed";
-      response.end();
-      finish(outcome);
-    },
-    destroy: () => {
-      response.destroy();
-      finish("aborted");
-    }
-  };
+function buildRcSetModelPayload(requestId, model) {
+  return { type: "control_request", request_id: requestId, request: { subtype: "set_model", model } };
 }
-async function serveRouted(request7, deps) {
-  const observed = { method: request7.method, path: pathOf(request7.url), receivedAt: deps.now() };
-  const identified = identifyRequest(request7.headers);
-  const admission = deps.admit({ url: request7.url, headers: request7.headers, forwardable: identified.forwardableHeaders });
-  if (!admission.ok) {
-    const response2 = createRoutedResponse(request7.response, { deps, session: identified.session, route: "(unauthorized)", request: observed });
-    response2.start(HTTP_STATUS.unauthorized, { "Content-Type": "application/json" });
-    await response2.write(errorBody(HTTP_STATUS.unauthorized, admission.message));
-    response2.end();
-    return;
+function buildRcSetPermissionModePayload(requestId, mode) {
+  return { type: "control_request", request_id: requestId, request: { subtype: "set_permission_mode", mode } };
+}
+async function answerRcControlRequest(deps, sessionId, requestId, decision) {
+  const credential = deps.credentialOf(sessionId);
+  if (credential === void 0) {
+    return { ok: false, message: `the front door has not observed Remote Control session ${sessionId}: it may never have passed through this door, or it ended or expired (an entry lives only a bounded idle period past its last observed traffic)` };
   }
-  const routed = {
-    method: request7.method,
-    url: request7.url,
-    headers: admission.headers,
-    body: request7.body,
-    signal: request7.signal,
-    session: identified.session
-  };
-  const resolution = await deps.resolveRoute(routed);
-  if (!resolution.ok) {
-    const response2 = createRoutedResponse(request7.response, { deps, session: identified.session, route: "(unrouted)", request: observed });
-    response2.start(resolution.status, { "Content-Type": "application/json" });
-    await response2.write(errorBody(resolution.status, resolution.message));
-    response2.end();
-    return;
+  if (credential.authorization === void 0) {
+    return noOAuthCredentialResult(sessionId);
   }
-  const response = createRoutedResponse(request7.response, { deps, session: identified.session, route: resolution.route.name, request: observed });
+  if (!deps.pendingOf(sessionId).some((pending) => pending.requestId === requestId)) {
+    return { ok: false, message: `the front door has not observed control request ${requestId} pending on session ${sessionId}: it was answered already (by this door or by an attached client), it passed its answer deadline (the protocol's permission round-trip bound), or it never passed through this door` };
+  }
+  const body = JSON.stringify(buildRcEventWriteBody(buildRcControlResponsePayload(requestId, decision)));
+  let answer;
   try {
-    if (identified.session.headroom && resolution.route.headroomEligible && deps.headroom !== void 0) {
-      await applyHeadroomHop(routed, response, resolution.route.headroomUpstream, deps.headroom);
-    } else {
-      await resolution.route.serve(routed, response);
-    }
+    answer = await deps.dial.writeEvents(sessionId, rcWriteHeaders(credential), body);
   } catch (error62) {
-    if (request7.signal.aborted) {
-      return;
-    }
-    deps.log(`front door: route ${resolution.route.name} failed: ${error62 instanceof Error ? `${error62.name}: ${error62.message}` : String(error62)}`);
-    if (!response.headersSent) {
-      response.start(HTTP_STATUS.internalServerError, { "Content-Type": "application/json" });
-      await response.write(errorBody(HTTP_STATUS.internalServerError, "internal error in the agent-shim front door"));
-      response.end();
-      return;
-    }
-    response.destroy();
+    return { ok: false, message: `the door could not reach the API host to answer on session ${sessionId}: ${error62 instanceof Error ? error62.message : String(error62)}` };
   }
-}
-
-// src/codex/translate.ts
-var import_node_crypto11 = require("node:crypto");
-
-// src/codex/anthropic.ts
-var TextBlockSchema = external_exports.looseObject({ type: external_exports.literal("text"), text: external_exports.string() });
-var Base64ImageSourceSchema = external_exports.looseObject({ type: external_exports.literal("base64"), media_type: external_exports.string().min(1), data: external_exports.string() });
-var UrlImageSourceSchema = external_exports.looseObject({ type: external_exports.literal("url"), url: external_exports.string().min(1) });
-var ImageBlockSchema = external_exports.looseObject({
-  type: external_exports.literal("image"),
-  source: external_exports.union([Base64ImageSourceSchema, UrlImageSourceSchema])
-});
-var ToolUseBlockSchema = external_exports.looseObject({
-  type: external_exports.literal("tool_use"),
-  id: external_exports.string().min(1),
-  name: external_exports.string().min(1),
-  input: external_exports.unknown()
-});
-var ToolResultContentBlockSchema = external_exports.union([TextBlockSchema, external_exports.looseObject({ type: external_exports.string() })]);
-var ToolResultBlockSchema = external_exports.looseObject({
-  type: external_exports.literal("tool_result"),
-  tool_use_id: external_exports.string().min(1),
-  content: external_exports.union([external_exports.string(), external_exports.array(ToolResultContentBlockSchema)]).optional()
-});
-var OtherBlockSchema = external_exports.looseObject({ type: external_exports.string() });
-var ContentBlockSchema = external_exports.union([TextBlockSchema, ImageBlockSchema, ToolUseBlockSchema, ToolResultBlockSchema, OtherBlockSchema]);
-var MessageSchema = external_exports.looseObject({
-  role: external_exports.enum(["user", "assistant", "system"]),
-  content: external_exports.union([external_exports.string(), external_exports.array(ContentBlockSchema)])
-});
-var ToolSchema = external_exports.looseObject({
-  name: external_exports.string().min(1),
-  description: external_exports.string().optional(),
-  input_schema: external_exports.record(external_exports.string(), external_exports.unknown()).optional()
-});
-var ToolChoiceSchema = external_exports.union([
-  external_exports.looseObject({ type: external_exports.enum(["auto", "none", "any"]) }),
-  external_exports.looseObject({ type: external_exports.literal("tool"), name: external_exports.string().min(1) })
-]);
-var SystemSchema = external_exports.union([external_exports.string(), external_exports.array(external_exports.union([TextBlockSchema, OtherBlockSchema]))]);
-var MessagesRequestSchema = external_exports.looseObject({
-  model: external_exports.string().optional(),
-  system: SystemSchema.optional(),
-  messages: external_exports.array(MessageSchema),
-  tools: external_exports.array(ToolSchema).optional(),
-  tool_choice: ToolChoiceSchema.optional(),
-  stream: external_exports.boolean().optional(),
-  /** `user_id` is stable for one Claude Code session and differs between sessions, which is what makes it the right key for both the backend's prompt cache and its session header. */
-  metadata: external_exports.looseObject({ user_id: external_exports.string().optional() }).optional(),
-  /** Claude Code's effort setting. Any string is accepted; the translator honours only the levels the backend understands. */
-  output_config: external_exports.looseObject({ effort: external_exports.string().optional() }).optional()
-});
-var CountTokensRequestSchema = external_exports.looseObject({
-  system: external_exports.unknown().optional(),
-  messages: external_exports.unknown().optional(),
-  tools: external_exports.unknown().optional()
-});
-function isTextBlock(block2) {
-  return TextBlockSchema.safeParse(block2).success;
-}
-function isImageBlock(block2) {
-  return ImageBlockSchema.safeParse(block2).success;
-}
-function isToolUseBlock(block2) {
-  return ToolUseBlockSchema.safeParse(block2).success;
-}
-function isToolResultBlock(block2) {
-  return ToolResultBlockSchema.safeParse(block2).success;
-}
-
-// src/codex/translate.ts
-function resolveCodexConfig(config2) {
-  const overrides = config2?.models;
-  return {
-    defaultModel: config2?.defaultModel ?? CODEX_DEFAULT_MODEL,
-    models: {
-      fable: overrides?.fable ?? CODEX_DEFAULT_TIER_MODELS.fable,
-      opus: overrides?.opus ?? CODEX_DEFAULT_TIER_MODELS.opus,
-      sonnet: overrides?.sonnet ?? CODEX_DEFAULT_TIER_MODELS.sonnet,
-      haiku: overrides?.haiku ?? CODEX_DEFAULT_TIER_MODELS.haiku
-    },
-    effort: config2?.effort ?? CODEX_DEFAULT_EFFORT
-  };
-}
-function mapModel(requested, config2) {
-  if (requested.startsWith("gpt-")) {
-    return requested;
+  const result = rcEventWriteResultFromAnswer(answer);
+  if (result.ok) {
+    deps.completePending(sessionId, requestId);
   }
-  const lower = requested.toLowerCase();
-  const tier = CODEX_TIERS.find((candidate) => lower.includes(candidate));
-  return tier === void 0 ? config2.defaultModel : config2.models[tier];
-}
-var REQUESTABLE_EFFORTS = ["low", "medium", "high"];
-function isRequestableEffort(value) {
-  return REQUESTABLE_EFFORTS.includes(value);
-}
-function mapEffort(request7, config2) {
-  const requested = request7.output_config?.effort;
-  return requested !== void 0 && isRequestableEffort(requested) ? requested : config2.effort;
+  return result;
 }
-var BILLING_HEADER_LINE = /^x-anthropic-billing-header:[^\n]*\n/;
-function systemToInstructions(system) {
-  if (system === void 0) {
-    return "";
+async function interruptRcSession(deps, sessionId) {
+  const credential = deps.credentialOf(sessionId);
+  if (credential === void 0) {
+    return { ok: false, message: `the front door has not observed Remote Control session ${sessionId}: it may never have passed through this door, or it ended or expired (an entry lives only a bounded idle period past its last observed traffic)` };
   }
-  const texts = typeof system === "string" ? [system] : system.filter(isTextBlock).map((block2) => block2.text);
-  return texts.join("\n").replace(BILLING_HEADER_LINE, "");
+  if (credential.authorization === void 0) {
+    return noOAuthCredentialResult(sessionId);
+  }
+  const body = JSON.stringify(buildRcEventWriteBody(buildRcInterruptPayload(deps.newUuid())));
+  let answer;
+  try {
+    answer = await deps.dial.writeEvents(sessionId, rcWriteHeaders(credential), body);
+  } catch (error62) {
+    return { ok: false, message: `the door could not reach the API host to interrupt session ${sessionId}: ${error62 instanceof Error ? error62.message : String(error62)}` };
+  }
+  return rcEventWriteResultFromAnswer(answer);
 }
-var CODEX_TOOL_NAME_LIMIT = 64;
-var TOOL_NAME_HASH_CHARS = 8;
-function shortToolName(name, names) {
-  if (name.length <= CODEX_TOOL_NAME_LIMIT) {
-    return name;
+async function setRcSessionModel(deps, sessionId, model) {
+  if (model === "") {
+    return { ok: false, message: "a set-model write needs a non-empty model id: the SDK's own field treats an omitted or null value as a reset to the session default, which this operation never sends, and an empty string is neither" };
   }
-  const hash2 = (0, import_node_crypto11.createHash)("sha256").update(name).digest("hex").slice(0, TOOL_NAME_HASH_CHARS);
-  const shortened = `${name.slice(0, CODEX_TOOL_NAME_LIMIT - TOOL_NAME_HASH_CHARS - 1)}_${hash2}`;
-  names.set(shortened, name);
-  return shortened;
+  const credential = deps.credentialOf(sessionId);
+  if (credential === void 0) {
+    return { ok: false, message: `the front door has not observed Remote Control session ${sessionId}: it may never have passed through this door, or it ended or expired (an entry lives only a bounded idle period past its last observed traffic)` };
+  }
+  if (credential.authorization === void 0) {
+    return noOAuthCredentialResult(sessionId);
+  }
+  const body = JSON.stringify(buildRcEventWriteBody(buildRcSetModelPayload(deps.newUuid(), model)));
+  let answer;
+  try {
+    answer = await deps.dial.writeEvents(sessionId, rcWriteHeaders(credential), body);
+  } catch (error62) {
+    return { ok: false, message: `the door could not reach the API host to set the model on session ${sessionId}: ${error62 instanceof Error ? error62.message : String(error62)}` };
+  }
+  return rcEventWriteResultFromAnswer(answer);
 }
-var NON_TEXT_TOOL_RESULT = "[non-text tool result omitted]";
-function flattenToolResult(content) {
-  if (content === void 0) {
-    return "";
+async function setRcSessionPermissionMode(deps, sessionId, mode) {
+  const credential = deps.credentialOf(sessionId);
+  if (credential === void 0) {
+    return { ok: false, message: `the front door has not observed Remote Control session ${sessionId}: it may never have passed through this door, or it ended or expired (an entry lives only a bounded idle period past its last observed traffic)` };
   }
-  if (typeof content === "string") {
-    return content;
+  if (credential.authorization === void 0) {
+    return noOAuthCredentialResult(sessionId);
   }
-  return content.map((block2) => isTextBlock(block2) ? block2.text : NON_TEXT_TOOL_RESULT).join("\n");
+  const body = JSON.stringify(buildRcEventWriteBody(buildRcSetPermissionModePayload(deps.newUuid(), mode)));
+  let answer;
+  try {
+    answer = await deps.dial.writeEvents(sessionId, rcWriteHeaders(credential), body);
+  } catch (error62) {
+    return { ok: false, message: `the door could not reach the API host to set the permission mode on session ${sessionId}: ${error62 instanceof Error ? error62.message : String(error62)}` };
+  }
+  return rcEventWriteResultFromAnswer(answer);
 }
-function systemReminder(text2) {
-  return `<system-reminder>
-${text2}
-</system-reminder>`;
+
+// src/frontdoor/rcControl.ts
+var RC_PERMISSION_MODE_LIST = RC_PERMISSION_MODES.join(", ");
+var CONTROL_PATH_PREFIX = "/__agent-shim/rc";
+var CONTROL_BODY_CAP_BYTES = 10485760;
+function answerJson(response, status, body) {
+  const text2 = JSON.stringify(body);
+  response.writeHead(status, { "content-type": "application/json", "content-length": String(Buffer.byteLength(text2, "utf8")) });
+  response.end(text2);
 }
-function turnBlocks(message) {
-  const blocks = typeof message.content === "string" ? [{ type: "text", text: message.content }] : message.content;
-  if (message.role !== "system") {
-    return blocks;
-  }
-  return blocks.map((block2) => isTextBlock(block2) ? { ...block2, text: systemReminder(block2.text) } : block2);
+async function readBody(request7) {
+  return await new Promise((resolve, reject) => {
+    const chunks = [];
+    let total = 0;
+    request7.on("data", (chunk) => {
+      total += chunk.length;
+      if (total > CONTROL_BODY_CAP_BYTES) {
+        request7.destroy();
+        reject(new Error("too large"));
+        return;
+      }
+      chunks.push(chunk);
+    });
+    request7.on("end", () => {
+      resolve(Buffer.concat(chunks).toString("utf8"));
+    });
+    request7.on("error", () => {
+      reject(new Error("the request body ended early"));
+    });
+  });
 }
-function messagesToInput(messages, names) {
-  const input2 = [];
-  let pending;
-  const flush = () => {
-    if (pending !== void 0 && pending.parts.length > 0) {
-      input2.push({ type: "message", role: pending.role, content: pending.parts });
-    }
-    pending = void 0;
-  };
-  const partsFor = (role) => {
-    if (pending?.role !== role) {
-      flush();
-      pending = { role, parts: [] };
+function createRcControlHandler(deps) {
+  const sessionsPath = `${CONTROL_PATH_PREFIX}/sessions`;
+  const statusPath = `${CONTROL_PATH_PREFIX}/status`;
+  const pendingPath = `${CONTROL_PATH_PREFIX}/pending`;
+  const injectPath = `${CONTROL_PATH_PREFIX}/inject`;
+  const answerPath = `${CONTROL_PATH_PREFIX}/answer`;
+  const interruptPath = `${CONTROL_PATH_PREFIX}/interrupt`;
+  const setModelPath = `${CONTROL_PATH_PREFIX}/set-model`;
+  const setPermissionModePath = `${CONTROL_PATH_PREFIX}/set-permission-mode`;
+  return (request7, response) => {
+    const presented = request7.headers.authorization;
+    const bearerPrefix = "bearer ".length;
+    const token = typeof presented === "string" && presented.slice(0, bearerPrefix).toLowerCase() === "bearer " ? presented.slice(bearerPrefix) : void 0;
+    if (token === void 0 || !isLiveCapability(token, [deps.expectedToken])) {
+      answerJson(response, HTTP_STATUS.unauthorized, { error: "the front door's control routes demand this generation's control token as a Bearer credential" });
+      return;
     }
-    return pending.parts;
+    const url2 = new URL(request7.url ?? "/", "http://127.0.0.1");
+    const handle = async () => {
+      if (url2.pathname === sessionsPath) {
+        if (request7.method !== "GET") {
+          answerJson(response, HTTP_STATUS.methodNotAllowed, { error: "the session list is a GET" });
+          return;
+        }
+        answerJson(response, HTTP_STATUS.ok, { sessions: deps.list() });
+        return;
+      }
+      if (url2.pathname === statusPath || url2.pathname === pendingPath) {
+        if (request7.method !== "GET") {
+          answerJson(response, HTTP_STATUS.methodNotAllowed, { error: "the status and pending reads are GETs" });
+          return;
+        }
+        const session = url2.searchParams.get("session") ?? void 0;
+        if (session !== void 0 && !deps.statusOf(session).some((entry) => entry.id === session)) {
+          answerJson(response, HTTP_STATUS.notFound, { error: `the front door has not observed Remote Control session ${session}: it may never have passed through this door, or it ended or expired (an entry lives only a bounded idle period past its last observed traffic)` });
+          return;
+        }
+        answerJson(response, HTTP_STATUS.ok, url2.pathname === statusPath ? { statuses: deps.statusOf(session) } : { pending: deps.pendingOf(session) });
+        return;
+      }
+      if (url2.pathname === injectPath) {
+        if (request7.method !== "POST") {
+          answerJson(response, HTTP_STATUS.methodNotAllowed, { error: "the inject operation is a POST" });
+          return;
+        }
+        let parsed;
+        try {
+          parsed = JSON.parse(await readBody(request7));
+        } catch {
+          answerJson(response, HTTP_STATUS.badRequest, { error: "the inject body is not readable JSON within the control body cap" });
+          return;
+        }
+        if (typeof parsed !== "object" || parsed === null || !("session" in parsed) || !("text" in parsed) || typeof parsed.session !== "string" || typeof parsed.text !== "string" || parsed.session === "" || parsed.text === "") {
+          answerJson(response, HTTP_STATUS.badRequest, { error: "the inject body must be JSON naming a non-empty session id and text" });
+          return;
+        }
+        const result = await deps.inject(parsed.session, parsed.text);
+        if (result.ok) {
+          answerJson(response, HTTP_STATUS.ok, { session: parsed.session, sequenceNums: result.sequenceNums });
+          return;
+        }
+        answerJson(response, HTTP_STATUS.badGateway, { error: result.message });
+        return;
+      }
+      if (url2.pathname === answerPath) {
+        if (request7.method !== "POST") {
+          answerJson(response, HTTP_STATUS.methodNotAllowed, { error: "the answer operation is a POST" });
+          return;
+        }
+        let parsed;
+        try {
+          parsed = JSON.parse(await readBody(request7));
+        } catch {
+          answerJson(response, HTTP_STATUS.badRequest, { error: "the answer body is not readable JSON within the control body cap" });
+          return;
+        }
+        if (typeof parsed !== "object" || parsed === null || !("session" in parsed) || !("request" in parsed) || !("approve" in parsed) || typeof parsed.session !== "string" || typeof parsed.request !== "string" || typeof parsed.approve !== "boolean" || parsed.session === "" || parsed.request === "") {
+          answerJson(response, HTTP_STATUS.badRequest, { error: "the answer body must be JSON naming a non-empty session id, request id, and an approve boolean" });
+          return;
+        }
+        const text2 = "text" in parsed && typeof parsed.text === "string" ? parsed.text : void 0;
+        if (parsed.approve && text2 !== void 0 && text2 !== "") {
+          answerJson(response, HTTP_STATUS.badRequest, { error: "an approval carries no text (the protocol's allow result has no message field); text is the denial message" });
+          return;
+        }
+        const result = await deps.answer(parsed.session, parsed.request, { approve: parsed.approve, message: parsed.approve ? void 0 : text2 });
+        if (result.ok) {
+          answerJson(response, HTTP_STATUS.ok, { session: parsed.session, request: parsed.request, sequenceNums: result.sequenceNums });
+          return;
+        }
+        answerJson(response, HTTP_STATUS.badGateway, { error: result.message });
+        return;
+      }
+      if (url2.pathname === interruptPath) {
+        if (request7.method !== "POST") {
+          answerJson(response, HTTP_STATUS.methodNotAllowed, { error: "the interrupt operation is a POST" });
+          return;
+        }
+        let parsed;
+        try {
+          parsed = JSON.parse(await readBody(request7));
+        } catch {
+          answerJson(response, HTTP_STATUS.badRequest, { error: "the interrupt body is not readable JSON within the control body cap" });
+          return;
+        }
+        if (typeof parsed !== "object" || parsed === null || !("session" in parsed) || typeof parsed.session !== "string" || parsed.session === "") {
+          answerJson(response, HTTP_STATUS.badRequest, { error: "the interrupt body must be JSON naming a non-empty session id" });
+          return;
+        }
+        const result = await deps.interrupt(parsed.session);
+        if (result.ok) {
+          answerJson(response, HTTP_STATUS.ok, { session: parsed.session, sequenceNums: result.sequenceNums });
+          return;
+        }
+        answerJson(response, HTTP_STATUS.badGateway, { error: result.message });
+        return;
+      }
+      if (url2.pathname === setModelPath) {
+        if (request7.method !== "POST") {
+          answerJson(response, HTTP_STATUS.methodNotAllowed, { error: "the set-model operation is a POST" });
+          return;
+        }
+        let parsed;
+        try {
+          parsed = JSON.parse(await readBody(request7));
+        } catch {
+          answerJson(response, HTTP_STATUS.badRequest, { error: "the set-model body is not readable JSON within the control body cap" });
+          return;
+        }
+        if (typeof parsed !== "object" || parsed === null || !("session" in parsed) || !("model" in parsed) || typeof parsed.session !== "string" || typeof parsed.model !== "string" || parsed.session === "" || parsed.model === "") {
+          answerJson(response, HTTP_STATUS.badRequest, { error: "the set-model body must be JSON naming a non-empty session id and model id" });
+          return;
+        }
+        const result = await deps.setModel(parsed.session, parsed.model);
+        if (result.ok) {
+          answerJson(response, HTTP_STATUS.ok, { session: parsed.session, model: parsed.model, sequenceNums: result.sequenceNums });
+          return;
+        }
+        answerJson(response, HTTP_STATUS.badGateway, { error: result.message });
+        return;
+      }
+      if (url2.pathname === setPermissionModePath) {
+        if (request7.method !== "POST") {
+          answerJson(response, HTTP_STATUS.methodNotAllowed, { error: "the set-permission-mode operation is a POST" });
+          return;
+        }
+        let parsed;
+        try {
+          parsed = JSON.parse(await readBody(request7));
+        } catch {
+          answerJson(response, HTTP_STATUS.badRequest, { error: "the set-permission-mode body is not readable JSON within the control body cap" });
+          return;
+        }
+        if (typeof parsed !== "object" || parsed === null || !("session" in parsed) || !("mode" in parsed) || typeof parsed.session !== "string" || parsed.session === "" || !isRcPermissionMode(parsed.mode)) {
+          answerJson(response, HTTP_STATUS.badRequest, { error: `the set-permission-mode body must be JSON naming a non-empty session id and a mode the SDK's own type permits (${RC_PERMISSION_MODE_LIST})` });
+          return;
+        }
+        const result = await deps.setPermissionMode(parsed.session, parsed.mode);
+        if (result.ok) {
+          answerJson(response, HTTP_STATUS.ok, { session: parsed.session, mode: parsed.mode, sequenceNums: result.sequenceNums });
+          return;
+        }
+        answerJson(response, HTTP_STATUS.badGateway, { error: result.message });
+        return;
+      }
+      answerJson(response, HTTP_STATUS.notFound, { error: `no such control route: ${url2.pathname}` });
+    };
+    handle().catch((error62) => {
+      answerJson(response, HTTP_STATUS.internalServerError, { error: `the control route failed: ${error62 instanceof Error ? error62.message : String(error62)}` });
+    });
   };
-  for (const message of messages) {
-    const role = message.role === "assistant" ? "assistant" : "user";
-    for (const block2 of turnBlocks(message)) {
-      if (isTextBlock(block2)) {
-        if (block2.text.trim() === "") {
-          continue;
+}
+function realRcControlTransport(port, ca) {
+  return {
+    request: async (options) => await new Promise((resolve, reject) => {
+      const request7 = https2.request(
+        {
+          host: "127.0.0.1",
+          port,
+          method: options.method,
+          path: options.path,
+          headers: options.body === void 0 ? options.headers : { ...options.headers, "content-length": String(Buffer.byteLength(options.body, "utf8")) },
+          agent: false,
+          ca: [ca]
+        },
+        (response) => {
+          const chunks = [];
+          response.on("data", (chunk) => {
+            chunks.push(chunk);
+          });
+          response.on("end", () => {
+            resolve({ status: response.statusCode ?? 0, body: Buffer.concat(chunks).toString("utf8") });
+          });
         }
-        partsFor(role).push(role === "assistant" ? { type: "output_text", text: block2.text } : { type: "input_text", text: block2.text });
-      } else if (isImageBlock(block2)) {
-        const { source } = block2;
-        partsFor(role).push({
-          type: "input_image",
-          image_url: source.type === "base64" ? `data:${source.media_type};base64,${source.data}` : source.url
-        });
-      } else if (isToolUseBlock(block2)) {
-        flush();
-        input2.push({
-          type: "function_call",
-          call_id: block2.id,
-          name: shortToolName(block2.name, names),
-          arguments: JSON.stringify(block2.input ?? {})
-        });
-      } else if (isToolResultBlock(block2)) {
-        flush();
-        input2.push({ type: "function_call_output", call_id: block2.tool_use_id, output: flattenToolResult(block2.content) });
+      );
+      request7.once("error", reject);
+      if (options.body === void 0) {
+        request7.end();
+      } else {
+        request7.end(options.body);
       }
+    })
+  };
+}
+function controlErrorOf(body) {
+  try {
+    const parsed = JSON.parse(body);
+    if (typeof parsed === "object" && parsed !== null && "error" in parsed && typeof parsed.error === "string") {
+      return parsed.error;
     }
+  } catch {
+    return body;
   }
-  flush();
-  return input2;
+  return void 0;
 }
-var EMPTY_PARAMETERS = { type: "object", properties: {} };
-function mapTools(tools, names) {
-  if (tools === void 0 || tools.length === 0) {
-    return void 0;
+function isRcSessionSummary(value) {
+  if (typeof value !== "object" || value === null) {
+    return false;
   }
-  return tools.map((tool) => ({
-    type: "function",
-    name: shortToolName(tool.name, names),
-    description: tool.description ?? "",
-    parameters: tool.input_schema ?? EMPTY_PARAMETERS,
-    strict: false
-  }));
+  if (!("id" in value) || !("createdAt" in value) || !("lastSeenAt" in value)) {
+    return false;
+  }
+  return typeof value.id === "string" && typeof value.createdAt === "number" && typeof value.lastSeenAt === "number";
 }
-function mapToolChoice(choice, names) {
-  if (choice === void 0) {
-    return void 0;
+function isRcWorkerFact(value, valueIs) {
+  if (typeof value !== "object" || value === null) {
+    return false;
   }
-  switch (choice.type) {
-    case "auto":
-    case "none":
-      return choice.type;
-    case "any":
-      return "required";
-    case "tool":
-      return { type: "function", name: shortToolName(choice.name, names) };
-    default:
-      return choice;
+  if (!("value" in value) || !("observedAt" in value)) {
+    return false;
   }
+  return valueIs(value.value) && typeof value.observedAt === "number";
 }
-function translateRequest(body, config2) {
-  const names = /* @__PURE__ */ new Map();
-  const effort = mapEffort(body, config2);
-  const tools = mapTools(body.tools, names);
-  const toolChoice = mapToolChoice(body.tool_choice, names);
-  const userId = body.metadata?.user_id;
-  const request7 = {
-    model: mapModel(body.model ?? "", config2),
-    instructions: systemToInstructions(body.system),
-    input: messagesToInput(body.messages, names),
-    stream: true,
-    store: false,
-    text: { verbosity: "medium" },
-    ...effort === "none" ? {} : { reasoning: { effort, summary: "auto" } },
-    ...userId === void 0 ? {} : { prompt_cache_key: userId },
-    ...tools === void 0 ? {} : { tools },
-    ...toolChoice === void 0 ? {} : { tool_choice: toolChoice }
-  };
-  return { request: request7, toolNames: names };
-}
-
-// src/codex/events.ts
-var ResponsesUsageSchema = external_exports.looseObject({
-  input_tokens: external_exports.number().optional(),
-  output_tokens: external_exports.number().optional(),
-  input_tokens_details: external_exports.looseObject({ cached_tokens: external_exports.number().optional(), cache_write_tokens: external_exports.number().optional() }).nullish()
-});
-var ResponseCreatedSchema = external_exports.looseObject({
-  type: external_exports.literal("response.created"),
-  response: external_exports.looseObject({ id: external_exports.string().optional() }).optional()
-});
-var OutputItemAddedSchema = external_exports.looseObject({
-  type: external_exports.literal("response.output_item.added"),
-  output_index: external_exports.number(),
-  item: external_exports.looseObject({
-    type: external_exports.string(),
-    id: external_exports.string().optional(),
-    call_id: external_exports.string().optional(),
-    name: external_exports.string().optional()
-  })
-});
-var OutputTextDeltaSchema = external_exports.looseObject({
-  type: external_exports.literal("response.output_text.delta"),
-  output_index: external_exports.number(),
-  delta: external_exports.string()
-});
-var FunctionArgumentsDeltaSchema = external_exports.looseObject({
-  type: external_exports.literal("response.function_call_arguments.delta"),
-  output_index: external_exports.number(),
-  delta: external_exports.string()
-});
-var OutputItemDoneSchema = external_exports.looseObject({
-  type: external_exports.literal("response.output_item.done"),
-  output_index: external_exports.number()
-});
-var ResponseCompletedSchema = external_exports.looseObject({
-  type: external_exports.literal("response.completed"),
-  response: external_exports.looseObject({ id: external_exports.string().optional(), status: external_exports.string().optional(), usage: ResponsesUsageSchema.nullish() }).optional()
-});
-var ResponseFailedSchema = external_exports.looseObject({
-  type: external_exports.literal("response.failed"),
-  response: external_exports.looseObject({ error: external_exports.looseObject({ message: external_exports.string().optional() }).nullish() }).optional()
-});
-var StreamErrorSchema = external_exports.looseObject({ type: external_exports.literal("error"), message: external_exports.string().optional() });
-var CodexEventSchema = external_exports.union([
-  ResponseCreatedSchema,
-  OutputItemAddedSchema,
-  OutputTextDeltaSchema,
-  FunctionArgumentsDeltaSchema,
-  OutputItemDoneSchema,
-  ResponseCompletedSchema,
-  ResponseFailedSchema,
-  StreamErrorSchema
-]);
-var CodexErrorEnvelopeSchema = external_exports.looseObject({
-  error: external_exports.looseObject({
-    message: external_exports.string().optional(),
-    resets_at: external_exports.number().optional(),
-    resets_in_seconds: external_exports.number().optional()
-  })
-});
-async function* parseSse(body) {
-  const decoder = new TextDecoder();
-  let buffer = "";
-  let data = "";
-  const parsed = function* (raw) {
-    try {
-      yield JSON.parse(raw);
-    } catch {
-    }
-  };
-  for await (const chunk of body) {
-    buffer += decoder.decode(chunk, { stream: true });
-    let newline = buffer.indexOf("\n");
-    while (newline !== -1) {
-      const line = buffer.slice(0, newline).replace(/\r$/, "");
-      buffer = buffer.slice(newline + 1);
-      if (line === "") {
-        if (data !== "") {
-          yield* parsed(data);
-        }
-        data = "";
-      } else if (line.startsWith("data:")) {
-        data += line.slice("data:".length).trimStart();
-      }
-      newline = buffer.indexOf("\n");
-    }
+function isRcSessionStatus(value) {
+  if (!isRcSessionSummary(value)) {
+    return false;
   }
-  const tail = (buffer + decoder.decode()).replace(/\r$/, "");
-  if (tail.startsWith("data:")) {
-    data += tail.slice("data:".length).trimStart();
+  if (!("pending" in value) || !Array.isArray(value.pending)) {
+    return false;
   }
-  if (data !== "") {
-    yield* parsed(data);
+  if ("workerState" in value && value.workerState !== void 0 && !isRcWorkerFact(value.workerState, (candidate) => typeof candidate === "string")) {
+    return false;
   }
-}
-async function* codexEvents(body) {
-  for await (const raw of parseSse(body)) {
-    const event = CodexEventSchema.safeParse(raw);
-    if (event.success) {
-      yield event.data;
-    }
+  if ("workerIdleSeconds" in value && value.workerIdleSeconds !== void 0 && !isRcWorkerFact(value.workerIdleSeconds, (candidate) => typeof candidate === "number")) {
+    return false;
   }
+  return value.pending.every((candidate) => isRcPendingRequestSummary(candidate));
 }
-
-// src/codex/quota.ts
-var QUOTA_FORWARD_HEADERS = [
-  "x-codex-active-limit",
-  "x-codex-plan-type",
-  "x-codex-primary-used-percent",
-  "x-codex-secondary-used-percent",
-  "x-codex-primary-window-minutes",
-  "x-codex-secondary-window-minutes",
-  "x-codex-primary-over-secondary-limit-percent",
-  "x-codex-primary-reset-after-seconds",
-  "x-codex-secondary-reset-after-seconds",
-  "x-codex-primary-reset-at",
-  "x-codex-secondary-reset-at"
-];
-function quotaHeaders(upstream) {
-  const headers = {};
-  for (const name of QUOTA_FORWARD_HEADERS) {
-    const value = upstream.get(name);
-    if (value !== null && value !== "") {
-      headers[name] = value;
-    }
+function isRcPendingRequestSummary(value) {
+  if (typeof value !== "object" || value === null) {
+    return false;
   }
-  return headers;
+  if (!("sessionId" in value) || !("requestId" in value) || !("type" in value) || !("summary" in value) || !("observedAt" in value)) {
+    return false;
+  }
+  return typeof value.sessionId === "string" && typeof value.requestId === "string" && typeof value.type === "string" && typeof value.summary === "string" && typeof value.observedAt === "number";
 }
-var EXHAUSTED_PERCENT = "100";
-function unifiedQuotaHeaders(upstream, rejected, quotaError) {
-  const headers = { "anthropic-ratelimit-unified-status": rejected ? "rejected" : "allowed" };
-  const used7d = upstream.get("x-codex-primary-used-percent") ?? (rejected ? EXHAUSTED_PERCENT : null);
-  const reset7d = upstream.get("x-codex-primary-reset-at") ?? (quotaError?.resets_at === void 0 ? null : String(quotaError.resets_at));
-  if (used7d !== null && reset7d !== null) {
-    headers["anthropic-ratelimit-unified-7d-utilization"] = used7d;
-    headers["anthropic-ratelimit-unified-7d-reset"] = reset7d;
-    headers["anthropic-ratelimit-unified-reset"] = reset7d;
+function sequenceNumsOfBody(body) {
+  let parsed;
+  try {
+    parsed = JSON.parse(body);
+  } catch {
+    return void 0;
   }
-  if (Number(upstream.get("x-codex-secondary-window-minutes")) > 0) {
-    const used5h = upstream.get("x-codex-secondary-used-percent");
-    const reset5h = upstream.get("x-codex-secondary-reset-at");
-    if (used5h !== null && used5h !== "" && reset5h !== null && reset5h !== "") {
-      headers["anthropic-ratelimit-unified-5h-utilization"] = used5h;
-      headers["anthropic-ratelimit-unified-5h-reset"] = reset5h;
-      const overall = headers["anthropic-ratelimit-unified-reset"];
-      if (overall !== void 0) {
-        headers["anthropic-ratelimit-unified-reset"] = String(Math.min(Number(overall), Number(reset5h)));
-      }
+  if (typeof parsed !== "object" || parsed === null || !("sequenceNums" in parsed) || !Array.isArray(parsed.sequenceNums)) {
+    return void 0;
+  }
+  const sequenceNums = [];
+  const values = parsed.sequenceNums;
+  for (const value of values) {
+    if (typeof value !== "number") {
+      return void 0;
     }
+    sequenceNums.push(value);
   }
-  return headers;
+  return sequenceNums;
 }
-var MS_PER_SECOND5 = 1e3;
-function buildUsageSnapshot(upstream, quotaError, nowMs) {
-  const used7 = upstream.get("x-codex-primary-used-percent") ?? (quotaError === void 0 ? null : EXHAUSTED_PERCENT);
-  const reset7 = upstream.get("x-codex-primary-reset-at") ?? (quotaError?.resets_at === void 0 ? null : String(quotaError.resets_at));
-  const sevenDay = used7 !== null && reset7 !== null ? { used_percentage: Number(used7), resets_at: new Date(Number(reset7) * MS_PER_SECOND5).toISOString() } : void 0;
-  let fiveHour;
-  if (Number(upstream.get("x-codex-secondary-window-minutes")) > 0) {
-    const used5 = upstream.get("x-codex-secondary-used-percent");
-    const reset5 = upstream.get("x-codex-secondary-reset-at");
-    if (used5 !== null && reset5 !== null) {
-      fiveHour = { used_percentage: Number(used5), resets_at: new Date(Number(reset5) * MS_PER_SECOND5).toISOString() };
+function frontDoorRcControl(transport, token) {
+  const headers = { authorization: `Bearer ${token}` };
+  const listAnswerOf = async (path41, what) => {
+    try {
+      return await transport.request({ method: "GET", path: path41, headers });
+    } catch (error62) {
+      throw new Error(`${what}: could not reach the front door's control listener: ${error62 instanceof Error ? error62.message : String(error62)}`, { cause: error62 });
     }
-  }
-  if (sevenDay === void 0 && fiveHour === void 0) {
-    return void 0;
-  }
-  return {
-    updated_at: new Date(nowMs).toISOString(),
-    ...sevenDay === void 0 ? {} : { seven_day: sevenDay },
-    ...fiveHour === void 0 ? {} : { five_hour: fiveHour }
   };
-}
-function retryAfterSeconds2(upstream, quotaError) {
-  const seconds = quotaError?.resets_in_seconds ?? Number(upstream.get("x-codex-primary-reset-after-seconds"));
-  return Number.isFinite(seconds) && seconds > 0 ? Math.ceil(seconds) : void 0;
-}
-
-// src/codex/relay.ts
-function anthropicUsage(usage) {
-  const cached2 = usage?.input_tokens_details?.cached_tokens ?? 0;
-  const written = usage?.input_tokens_details?.cache_write_tokens ?? 0;
-  return {
-    input_tokens: Math.max(0, (usage?.input_tokens ?? 0) - cached2 - written),
-    cache_creation_input_tokens: written,
-    cache_read_input_tokens: cached2,
-    output_tokens: usage?.output_tokens ?? 0
+  const sessionsOf = (answer, what) => {
+    if (answer.status !== HTTP_STATUS.ok) {
+      throw new Error(`${what} failed (HTTP ${String(answer.status)}): ${controlErrorOf(answer.body) ?? answer.body}`);
+    }
+    let parsed;
+    try {
+      parsed = JSON.parse(answer.body);
+    } catch {
+      throw new Error(`${what}: the door's answer was not JSON: ${answer.body}`);
+    }
+    if (typeof parsed !== "object" || parsed === null || !("sessions" in parsed) || !Array.isArray(parsed.sessions)) {
+      throw new Error(`${what}: the door's answer named no sessions list: ${answer.body}`);
+    }
+    const candidates = parsed.sessions;
+    const sessions = [];
+    for (const value of candidates) {
+      if (!isRcSessionSummary(value)) {
+        throw new Error(`${what}: the door's answer named no sessions list: ${answer.body}`);
+      }
+      sessions.push(value);
+    }
+    return sessions;
   };
-}
-function renderSseFrame(frame) {
-  return `event: ${frame.event}
-data: ${JSON.stringify(frame.data)}
+  const statusesOf = (answer, what) => {
+    if (answer.status !== HTTP_STATUS.ok) {
+      throw new Error(`${what} failed (HTTP ${String(answer.status)}): ${controlErrorOf(answer.body) ?? answer.body}`);
+    }
+    let parsed;
+    try {
+      parsed = JSON.parse(answer.body);
+    } catch {
+      throw new Error(`${what}: the door's answer was not JSON: ${answer.body}`);
+    }
+    if (typeof parsed !== "object" || parsed === null || !("statuses" in parsed) || !Array.isArray(parsed.statuses)) {
+      throw new Error(`${what}: the door's answer named no status list: ${answer.body}`);
+    }
+    const statuses = [];
+    for (const value of parsed.statuses) {
+      if (!isRcSessionStatus(value)) {
+        throw new Error(`${what}: the door's answer named no status list: ${answer.body}`);
+      }
+      statuses.push(value);
+    }
+    return statuses;
+  };
+  const pendingOfAnswer = (answer, what) => {
+    if (answer.status !== HTTP_STATUS.ok) {
+      throw new Error(`${what} failed (HTTP ${String(answer.status)}): ${controlErrorOf(answer.body) ?? answer.body}`);
+    }
+    let parsed;
+    try {
+      parsed = JSON.parse(answer.body);
+    } catch {
+      throw new Error(`${what}: the door's answer was not JSON: ${answer.body}`);
+    }
+    if (typeof parsed !== "object" || parsed === null || !("pending" in parsed) || !Array.isArray(parsed.pending)) {
+      throw new Error(`${what}: the door's answer named no pending list: ${answer.body}`);
+    }
+    const pending = [];
+    for (const value of parsed.pending) {
+      if (!isRcPendingRequestSummary(value)) {
+        throw new Error(`${what}: the door's answer named no pending list: ${answer.body}`);
+      }
+      pending.push(value);
+    }
+    return pending;
+  };
+  const writeOf = async (path41, body, describeFailure) => {
+    let answer;
+    try {
+      answer = await transport.request({ method: "POST", path: path41, headers: { ...headers, "content-type": "application/json" }, body });
+    } catch (error62) {
+      return { ok: false, message: `could not reach the front door's control listener: ${error62 instanceof Error ? error62.message : String(error62)}` };
+    }
+    if (answer.status === HTTP_STATUS.ok) {
+      const sequenceNums = sequenceNumsOfBody(answer.body);
+      if (sequenceNums === void 0) {
+        return { ok: false, message: `the door accepted the event but its answer named no sequence numbers: ${answer.body}` };
+      }
+      return { ok: true, sequenceNums };
+    }
+    return { ok: false, message: describeFailure(answer.status, controlErrorOf(answer.body) ?? answer.body) };
+  };
+  const sessionQuery = (sessionId) => sessionId === void 0 ? "" : `?session=${encodeURIComponent(sessionId)}`;
+  return {
+    listSessions: async () => sessionsOf(await listAnswerOf(`${CONTROL_PATH_PREFIX}/sessions`, "listing the door's Remote Control sessions"), "listing the door's Remote Control sessions"),
+    statusOf: async (sessionId) => statusesOf(await listAnswerOf(`${CONTROL_PATH_PREFIX}/status${sessionQuery(sessionId)}`, "reading the door's Remote Control session status"), "reading the door's Remote Control session status"),
+    pendingOf: async (sessionId) => pendingOfAnswer(await listAnswerOf(`${CONTROL_PATH_PREFIX}/pending${sessionQuery(sessionId)}`, "listing the door's pending Remote Control control requests"), "listing the door's pending Remote Control control requests"),
+    sendPrompt: async (sessionId, text2) => await writeOf(`${CONTROL_PATH_PREFIX}/inject`, JSON.stringify({ session: sessionId, text: text2 }), (status, message) => `injecting into ${sessionId} failed (HTTP ${String(status)}): ${message}`),
+    answerRequest: async (sessionId, requestId, decision) => await writeOf(
+      `${CONTROL_PATH_PREFIX}/answer`,
+      JSON.stringify({ session: sessionId, request: requestId, approve: decision.approve, ...decision.approve || decision.message === void 0 ? {} : { text: decision.message } }),
+      (status, message) => `answering control request ${requestId} on ${sessionId} failed (HTTP ${String(status)}): ${message}`
+    ),
+    interruptSession: async (sessionId) => await writeOf(`${CONTROL_PATH_PREFIX}/interrupt`, JSON.stringify({ session: sessionId }), (status, message) => `interrupting ${sessionId} failed (HTTP ${String(status)}): ${message}`),
+    setModel: async (sessionId, model) => await writeOf(`${CONTROL_PATH_PREFIX}/set-model`, JSON.stringify({ session: sessionId, model }), (status, message) => `setting the model on ${sessionId} failed (HTTP ${String(status)}): ${message}`),
+    setPermissionMode: async (sessionId, mode) => await writeOf(`${CONTROL_PATH_PREFIX}/set-permission-mode`, JSON.stringify({ session: sessionId, mode }), (status, message) => `setting the permission mode on ${sessionId} failed (HTTP ${String(status)}): ${message}`)
+  };
+}
+
+// src/frontdoor/server.ts
+var HEALTH_TIMEOUT_MS = 2e3;
+var HEALTH_START_BUDGET_MS = 5e3;
+var HEALTH_RETRY_MS = 50;
+function createFrontDoorServer(pipeline, log, tls2, control) {
+  const handler = (request7, response) => {
+    if (request7.method === "GET" && request7.url === "/healthz") {
+      response.writeHead(HTTP_STATUS.ok, { "Content-Type": "text/plain" });
+      response.end("ok");
+      return;
+    }
+    if (control !== void 0 && (request7.url ?? "/").startsWith(CONTROL_PATH_PREFIX)) {
+      control(request7, response);
+      return;
+    }
+    const abort = new AbortController();
+    response.on("close", () => {
+      if (!response.writableFinished) {
+        abort.abort();
+      }
+    });
+    const handle = async () => {
+      await pipeline({ method: request7.method ?? "GET", url: request7.url ?? "/", headers: aliasLegacyWireHeaders(request7.headers), body: request7, signal: abort.signal, response });
+      if (!request7.readableEnded) {
+        request7.resume();
+      }
+    };
+    handle().catch((error62) => {
+      log(`request ${request7.method ?? "?"} ${request7.url ?? "?"} failed: ${error62 instanceof Error ? `${error62.name}: ${error62.message}` : String(error62)}`);
+      if (!response.headersSent) {
+        response.writeHead(HTTP_STATUS.internalServerError, { "Content-Type": "application/json" });
+        response.end(JSON.stringify({ type: "error", error: { type: "api_error", message: "internal error in the agent-shim front door" } }));
+      } else {
+        response.destroy();
+      }
+    });
+  };
+  if (tls2 === void 0) {
+    return import_node_http.default.createServer(handler);
+  }
+  const server = import_node_https.default.createServer({ key: tls2.keyPem, cert: tls2.certPem }, handler);
+  server.on("tlsClientError", (_error, socket) => {
+    socket.destroy();
+  });
+  return server;
+}
+async function frontDoorHealthy(port, ca) {
+  return await new Promise((resolve) => {
+    const onResponse = (response) => {
+      response.resume();
+      resolve(response.statusCode === HTTP_STATUS.ok);
+    };
+    const options = { host: "127.0.0.1", port, path: "/healthz", agent: false, timeout: HEALTH_TIMEOUT_MS };
+    const request7 = ca === void 0 ? import_node_http.default.get(options, onResponse) : import_node_https.default.get({ ...options, ca: [ca] }, onResponse);
+    request7.on("timeout", () => {
+      request7.destroy();
+    });
+    request7.on("error", () => {
+      resolve(false);
+    });
+  });
+}
+async function listenFrontDoor(server, options = {}) {
+  const { preferredPort, ca } = options;
+  const tryListen = async (port) => await new Promise((resolve, reject) => {
+    const onError = (error62) => {
+      server.off("error", onError);
+      reject(error62);
+    };
+    server.once("error", onError);
+    server.listen(port, "127.0.0.1", () => {
+      server.off("error", onError);
+      const address = server.address();
+      const bound2 = typeof address === "object" && address !== null ? address.port : 0;
+      if (bound2 === 0) {
+        reject(new Error("could not bind a loopback port"));
+        return;
+      }
+      resolve(bound2);
+    });
+  });
+  let bound;
+  if (preferredPort !== void 0) {
+    try {
+      bound = await tryListen(preferredPort);
+    } catch {
+      bound = await tryListen(0);
+    }
+  } else {
+    bound = await tryListen(0);
+  }
+  options.onBound?.(bound);
+  if (options.onError !== void 0) {
+    server.on("error", options.onError);
+  }
+  const deadline = Date.now() + HEALTH_START_BUDGET_MS;
+  for (; ; ) {
+    if (await frontDoorHealthy(bound, ca)) {
+      return {
+        port: bound,
+        close: async () => {
+          await new Promise((resolve) => {
+            server.close(() => {
+              resolve(void 0);
+            });
+            server.closeAllConnections();
+          });
+        }
+      };
+    }
+    if (Date.now() >= deadline) {
+      throw new Error(`the front door listener on 127.0.0.1:${String(bound)} did not answer its health probe`);
+    }
+    await new Promise((resolve) => {
+      setTimeout(resolve, HEALTH_RETRY_MS);
+    });
+  }
+}
+async function* upstreamChunks(stream) {
+  for await (const chunk of stream) {
+    if (typeof chunk === "string") {
+      yield Buffer.from(chunk, "utf8");
+      continue;
+    }
+    if (chunk instanceof Uint8Array) {
+      yield chunk;
+    }
+  }
+}
+
+// src/frontdoor/headroomHop.ts
+var HTTP_BAD_GATEWAY2 = HTTP_STATUS.badGateway;
+function responseHeaders(headers) {
+  const result = {};
+  for (const [name, value] of Object.entries(forwardableHeaders(headers))) {
+    if (value === void 0) {
+      continue;
+    }
+    result[name] = Array.isArray(value) ? value.join(", ") : value;
+  }
+  return result;
+}
+async function applyHeadroomHop(request7, response, upstream, deps) {
+  const target = deps.headroomSocket();
+  if (target === void 0) {
+    await answerBadGateway(response, "agent-shim front door: the headroom daemon is restarting");
+    return;
+  }
+  if (target.refused !== void 0) {
+    deps.log(`front door: refusing the headroom hop (${request7.method} ${new URL(request7.url, "http://127.0.0.1").pathname}): ${target.refused}`);
+    await answerBadGateway(response, `agent-shim front door: refusing to send this request to headroom: ${target.refused}`);
+    return;
+  }
+  const { socketPath } = target;
+  let headers = forwardableHeaders(request7.headers);
+  let hopId;
+  if (upstream !== void 0) {
+    const provider = parseProviderPath(new URL(request7.url, "http://127.0.0.1").pathname)?.provider;
+    if (provider === void 0) {
+      throw new Error(`headroom hop for ${request7.url} names an upstream but no provider`);
+    }
+    const sequestered = deps.custody.sequester(headers, provider);
+    hopId = sequestered.hopId;
+    headers = sequestered.headers;
+    headers[HOP_ID_HEADER] = hopId;
+    headers[HEADROOM_BASE_URL_HEADER] = upstream;
+  }
+  if (request7.session.projectId !== void 0) {
+    headers[PROJECT_ID_HEADER] = request7.session.projectId;
+  }
+  headers[HOP_SECRET_HEADER] = deps.hopSecret;
+  try {
+    await forwardThroughHeadroom(request7, response, { socketPath, headers, log: deps.log });
+  } finally {
+    if (hopId !== void 0) {
+      deps.custody.release(hopId);
+    }
+  }
+}
+async function answerBadGateway(response, message) {
+  response.start(HTTP_BAD_GATEWAY2, { "Content-Type": "application/json" });
+  await response.write(JSON.stringify({ type: "error", error: { type: "api_error", message } }));
+  response.end();
+}
+var HOP_AGENT = new http3.Agent({ keepAlive: false });
+async function forwardThroughHeadroom(request7, response, target) {
+  const { socketPath, headers } = target;
+  await new Promise((resolve) => {
+    const onUpstreamResponse = (upstreamResponse) => {
+      response.start(upstreamResponse.statusCode ?? HTTP_BAD_GATEWAY2, responseHeaders(upstreamResponse.headers));
+      response.flush();
+      const stream = async () => {
+        try {
+          for await (const chunk of upstreamChunks(upstreamResponse)) {
+            if (request7.signal.aborted) {
+              break;
+            }
+            await response.write(chunk);
+          }
+          if (!request7.signal.aborted) {
+            response.end();
+          }
+        } catch (error62) {
+          if (!request7.signal.aborted) {
+            target.log(`front door: headroom hop to ${socketPath} ended mid-stream (${request7.method} ${new URL(request7.url, "http://127.0.0.1").pathname}): ${error62 instanceof Error ? error62.message : String(error62)}`);
+          }
+          response.destroy();
+        }
+        resolve(void 0);
+      };
+      void stream();
+    };
+    const hop = http3.request({ socketPath, method: request7.method, path: request7.url, headers, agent: HOP_AGENT }, onUpstreamResponse);
+    hop.on("error", (error62) => {
+      const phase = response.headersSent ? "mid-stream" : "before the response started";
+      const code = "code" in error62 && typeof error62.code === "string" ? ` ${error62.code}` : "";
+      target.log(`front door: headroom hop to ${socketPath} failed (${request7.method} ${new URL(request7.url, "http://127.0.0.1").pathname}, ${phase}): ${error62.message}${code}`);
+      if (!response.headersSent) {
+        response.start(HTTP_BAD_GATEWAY2, { "Content-Type": "application/json" });
+        void response.write(JSON.stringify({ type: "error", error: { type: "api_error", message: `agent-shim front door: the headroom daemon is unreachable (${error62.message})` } })).then(() => {
+          response.end();
+        });
+      } else {
+        response.destroy();
+      }
+      resolve(void 0);
+    });
+    request7.signal.addEventListener("abort", () => {
+      hop.destroy();
+    });
+    request7.body.pipe(hop);
+    request7.body.on("error", () => {
+      hop.destroy();
+    });
+  });
+}
+
+// src/frontdoor/pipeline.ts
+function errorTypeFor(status) {
+  switch (status) {
+    case HTTP_STATUS.badRequest:
+      return "invalid_request_error";
+    case HTTP_STATUS.unauthorized:
+      return "authentication_error";
+    case HTTP_STATUS.forbidden:
+      return "permission_error";
+    case HTTP_STATUS.notFound:
+      return "not_found_error";
+    case HTTP_STATUS.tooManyRequests:
+      return "rate_limit_error";
+    default:
+      return "api_error";
+  }
+}
+function errorBody(status, message) {
+  return JSON.stringify({ type: "error", error: { type: errorTypeFor(status), message } });
+}
+function pathOf(url2) {
+  const query = url2.indexOf("?");
+  return query === -1 ? url2 : url2.slice(0, query);
+}
+function describeThrown(error62) {
+  return error62 instanceof Error ? error62.message : String(error62);
+}
+function createRoutedResponse(response, context) {
+  const { deps, session, route, request: request7 } = context;
+  let headersSent = false;
+  let bodyObservers = [];
+  let finished = false;
+  const observeBody = (call) => {
+    bodyObservers = bodyObservers.filter((observer) => {
+      try {
+        call(observer);
+        return true;
+      } catch (error62) {
+        deps.log(`front door: response body observer threw for ${route}: ${describeThrown(error62)}`);
+        return false;
+      }
+    });
+  };
+  const finish = (outcome) => {
+    if (finished) {
+      return;
+    }
+    finished = true;
+    observeBody((observer) => {
+      observer.end(outcome);
+    });
+    bodyObservers = [];
+  };
+  response.once("close", () => {
+    finish(response.writableFinished ? "completed" : "aborted");
+  });
+  const settle2 = async () => {
+    await new Promise((resolve) => {
+      const done = () => {
+        response.off("drain", done);
+        response.off("close", done);
+        resolve();
+      };
+      response.once("drain", done);
+      response.once("close", done);
+    });
+  };
+  return {
+    get headersSent() {
+      return headersSent;
+    },
+    start: (status, headers) => {
+      for (const observe of deps.responseObservers) {
+        try {
+          const body = observe({ session, route, method: request7.method, path: request7.path, receivedAt: request7.receivedAt, status, headers });
+          if (body !== void 0) {
+            bodyObservers.push(body);
+          }
+        } catch (error62) {
+          deps.log(`front door: response observer threw for ${route}: ${describeThrown(error62)}`);
+        }
+      }
+      response.writeHead(status, headers);
+      headersSent = true;
+    },
+    flush: () => {
+      response.flushHeaders();
+    },
+    write: async (chunk) => {
+      if (response.destroyed || response.writableEnded) {
+        return;
+      }
+      const accepted = response.write(chunk);
+      if (bodyObservers.length > 0) {
+        const bytes = typeof chunk === "string" ? Buffer.from(chunk, "utf8") : chunk;
+        observeBody((observer) => {
+          observer.chunk(bytes);
+        });
+      }
+      if (!accepted) {
+        await settle2();
+      }
+    },
+    end: () => {
+      const outcome = response.destroyed ? "aborted" : "completed";
+      response.end();
+      finish(outcome);
+    },
+    destroy: () => {
+      response.destroy();
+      finish("aborted");
+    }
+  };
+}
+async function serveRouted(request7, deps) {
+  const observed = { method: request7.method, path: pathOf(request7.url), receivedAt: deps.now() };
+  const identified = identifyRequest(request7.headers);
+  const admission = deps.admit({ url: request7.url, headers: request7.headers, forwardable: identified.forwardableHeaders });
+  if (!admission.ok) {
+    const response2 = createRoutedResponse(request7.response, { deps, session: identified.session, route: "(unauthorized)", request: observed });
+    response2.start(HTTP_STATUS.unauthorized, { "Content-Type": "application/json" });
+    await response2.write(errorBody(HTTP_STATUS.unauthorized, admission.message));
+    response2.end();
+    return;
+  }
+  const routed = {
+    method: request7.method,
+    url: request7.url,
+    headers: admission.headers,
+    body: request7.body,
+    signal: request7.signal,
+    session: identified.session
+  };
+  const resolution = await deps.resolveRoute(routed);
+  if (!resolution.ok) {
+    const response2 = createRoutedResponse(request7.response, { deps, session: identified.session, route: "(unrouted)", request: observed });
+    response2.start(resolution.status, { "Content-Type": "application/json" });
+    await response2.write(errorBody(resolution.status, resolution.message));
+    response2.end();
+    return;
+  }
+  const response = createRoutedResponse(request7.response, { deps, session: identified.session, route: resolution.route.name, request: observed });
+  try {
+    if (identified.session.headroom && resolution.route.headroomEligible && deps.headroom !== void 0) {
+      await applyHeadroomHop(routed, response, resolution.route.headroomUpstream, deps.headroom);
+    } else {
+      await resolution.route.serve(routed, response);
+    }
+  } catch (error62) {
+    if (request7.signal.aborted) {
+      return;
+    }
+    deps.log(`front door: route ${resolution.route.name} failed: ${error62 instanceof Error ? `${error62.name}: ${error62.message}` : String(error62)}`);
+    if (!response.headersSent) {
+      response.start(HTTP_STATUS.internalServerError, { "Content-Type": "application/json" });
+      await response.write(errorBody(HTTP_STATUS.internalServerError, "internal error in the agent-shim front door"));
+      response.end();
+      return;
+    }
+    response.destroy();
+  }
+}
+
+// src/codex/translate.ts
+var import_node_crypto11 = require("node:crypto");
+
+// src/codex/anthropic.ts
+var TextBlockSchema = external_exports.looseObject({ type: external_exports.literal("text"), text: external_exports.string() });
+var Base64ImageSourceSchema = external_exports.looseObject({ type: external_exports.literal("base64"), media_type: external_exports.string().min(1), data: external_exports.string() });
+var UrlImageSourceSchema = external_exports.looseObject({ type: external_exports.literal("url"), url: external_exports.string().min(1) });
+var ImageBlockSchema = external_exports.looseObject({
+  type: external_exports.literal("image"),
+  source: external_exports.union([Base64ImageSourceSchema, UrlImageSourceSchema])
+});
+var ToolUseBlockSchema = external_exports.looseObject({
+  type: external_exports.literal("tool_use"),
+  id: external_exports.string().min(1),
+  name: external_exports.string().min(1),
+  input: external_exports.unknown()
+});
+var ToolResultContentBlockSchema = external_exports.union([TextBlockSchema, external_exports.looseObject({ type: external_exports.string() })]);
+var ToolResultBlockSchema = external_exports.looseObject({
+  type: external_exports.literal("tool_result"),
+  tool_use_id: external_exports.string().min(1),
+  content: external_exports.union([external_exports.string(), external_exports.array(ToolResultContentBlockSchema)]).optional()
+});
+var OtherBlockSchema = external_exports.looseObject({ type: external_exports.string() });
+var ContentBlockSchema = external_exports.union([TextBlockSchema, ImageBlockSchema, ToolUseBlockSchema, ToolResultBlockSchema, OtherBlockSchema]);
+var MessageSchema = external_exports.looseObject({
+  role: external_exports.enum(["user", "assistant", "system"]),
+  content: external_exports.union([external_exports.string(), external_exports.array(ContentBlockSchema)])
+});
+var ToolSchema = external_exports.looseObject({
+  name: external_exports.string().min(1),
+  description: external_exports.string().optional(),
+  input_schema: external_exports.record(external_exports.string(), external_exports.unknown()).optional()
+});
+var ToolChoiceSchema = external_exports.union([
+  external_exports.looseObject({ type: external_exports.enum(["auto", "none", "any"]) }),
+  external_exports.looseObject({ type: external_exports.literal("tool"), name: external_exports.string().min(1) })
+]);
+var SystemSchema = external_exports.union([external_exports.string(), external_exports.array(external_exports.union([TextBlockSchema, OtherBlockSchema]))]);
+var MessagesRequestSchema = external_exports.looseObject({
+  model: external_exports.string().optional(),
+  system: SystemSchema.optional(),
+  messages: external_exports.array(MessageSchema),
+  tools: external_exports.array(ToolSchema).optional(),
+  tool_choice: ToolChoiceSchema.optional(),
+  stream: external_exports.boolean().optional(),
+  /** `user_id` is stable for one Claude Code session and differs between sessions, which is what makes it the right key for both the backend's prompt cache and its session header. */
+  metadata: external_exports.looseObject({ user_id: external_exports.string().optional() }).optional(),
+  /** Claude Code's effort setting. Any string is accepted; the translator honours only the levels the backend understands. */
+  output_config: external_exports.looseObject({ effort: external_exports.string().optional() }).optional()
+});
+var CountTokensRequestSchema = external_exports.looseObject({
+  system: external_exports.unknown().optional(),
+  messages: external_exports.unknown().optional(),
+  tools: external_exports.unknown().optional()
+});
+function isTextBlock(block2) {
+  return TextBlockSchema.safeParse(block2).success;
+}
+function isImageBlock(block2) {
+  return ImageBlockSchema.safeParse(block2).success;
+}
+function isToolUseBlock(block2) {
+  return ToolUseBlockSchema.safeParse(block2).success;
+}
+function isToolResultBlock(block2) {
+  return ToolResultBlockSchema.safeParse(block2).success;
+}
 
-`;
+// src/codex/translate.ts
+function resolveCodexConfig(config2) {
+  const overrides = config2?.models;
+  return {
+    defaultModel: config2?.defaultModel ?? CODEX_DEFAULT_MODEL,
+    models: {
+      fable: overrides?.fable ?? CODEX_DEFAULT_TIER_MODELS.fable,
+      opus: overrides?.opus ?? CODEX_DEFAULT_TIER_MODELS.opus,
+      sonnet: overrides?.sonnet ?? CODEX_DEFAULT_TIER_MODELS.sonnet,
+      haiku: overrides?.haiku ?? CODEX_DEFAULT_TIER_MODELS.haiku
+    },
+    effort: config2?.effort ?? CODEX_DEFAULT_EFFORT
+  };
 }
-function parseToolArguments(json2) {
-  if (json2 === "") {
-    return {};
+function mapModel(requested, config2) {
+  if (requested.startsWith("gpt-")) {
+    return requested;
   }
-  try {
-    const parsed = JSON.parse(json2);
-    return parsed;
-  } catch {
-    return {};
+  const lower = requested.toLowerCase();
+  const tier = CODEX_TIERS.find((candidate) => lower.includes(candidate));
+  return tier === void 0 ? config2.defaultModel : config2.models[tier];
+}
+var REQUESTABLE_EFFORTS = ["low", "medium", "high"];
+function isRequestableEffort(value) {
+  return REQUESTABLE_EFFORTS.includes(value);
+}
+function mapEffort(request7, config2) {
+  const requested = request7.output_config?.effort;
+  return requested !== void 0 && isRequestableEffort(requested) ? requested : config2.effort;
+}
+var BILLING_HEADER_LINE = /^x-anthropic-billing-header:[^\n]*\n/;
+function systemToInstructions(system) {
+  if (system === void 0) {
+    return "";
   }
+  const texts = typeof system === "string" ? [system] : system.filter(isTextBlock).map((block2) => block2.text);
+  return texts.join("\n").replace(BILLING_HEADER_LINE, "");
 }
-function wireBlock(block2) {
-  return block2.type === "text" ? { type: "text", text: "" } : { type: "tool_use", id: block2.id, name: block2.name, input: {} };
+var CODEX_TOOL_NAME_LIMIT = 64;
+var TOOL_NAME_HASH_CHARS = 8;
+function shortToolName(name, names) {
+  if (name.length <= CODEX_TOOL_NAME_LIMIT) {
+    return name;
+  }
+  const hash2 = (0, import_node_crypto11.createHash)("sha256").update(name).digest("hex").slice(0, TOOL_NAME_HASH_CHARS);
+  const shortened = `${name.slice(0, CODEX_TOOL_NAME_LIMIT - TOOL_NAME_HASH_CHARS - 1)}_${hash2}`;
+  names.set(shortened, name);
+  return shortened;
 }
-function finalBlock(block2) {
-  return block2.type === "text" ? { type: "text", text: block2.text } : { type: "tool_use", id: block2.id, name: block2.name, input: parseToolArguments(block2.json) };
+var NON_TEXT_TOOL_RESULT = "[non-text tool result omitted]";
+function flattenToolResult(content) {
+  if (content === void 0) {
+    return "";
+  }
+  if (typeof content === "string") {
+    return content;
+  }
+  return content.map((block2) => isTextBlock(block2) ? block2.text : NON_TEXT_TOOL_RESULT).join("\n");
 }
-var STREAM_ERROR = "codex backend stream error";
-function createRelay(params) {
-  const blockByOutput = /* @__PURE__ */ new Map();
-  const blocks = [];
-  let messageId;
-  let sawToolUse = false;
-  const block2 = (outputIndex) => {
-    const index = blockByOutput.get(outputIndex);
-    const found = index === void 0 ? void 0 : blocks[index];
-    return index === void 0 || found === void 0 ? void 0 : { index, block: found };
+function systemReminder(text2) {
+  return `<system-reminder>
+${text2}
+</system-reminder>`;
+}
+function turnBlocks(message) {
+  const blocks = typeof message.content === "string" ? [{ type: "text", text: message.content }] : message.content;
+  if (message.role !== "system") {
+    return blocks;
+  }
+  return blocks.map((block2) => isTextBlock(block2) ? { ...block2, text: systemReminder(block2.text) } : block2);
+}
+function messagesToInput(messages, names) {
+  const input2 = [];
+  let pending;
+  const flush = () => {
+    if (pending !== void 0 && pending.parts.length > 0) {
+      input2.push({ type: "message", role: pending.role, content: pending.parts });
+    }
+    pending = void 0;
   };
-  const push = (event) => {
-    switch (event.type) {
-      case "response.created": {
-        messageId = event.response?.id ?? params.fallbackId();
-        return {
-          frames: [
-            {
-              event: "message_start",
-              data: {
-                type: "message_start",
-                message: {
-                  id: messageId,
-                  type: "message",
-                  role: "assistant",
-                  model: params.requestedModel,
-                  content: [],
-                  stop_reason: null,
-                  stop_sequence: null,
-                  usage: { input_tokens: 0, output_tokens: 0 }
-                }
-              }
-            }
-          ]
-        };
-      }
-      case "response.output_item.added": {
-        const { item } = event;
-        let opened;
-        if (item.type === "message") {
-          opened = { type: "text", text: "" };
-        } else if (item.type === "function_call") {
-          sawToolUse = true;
-          const name = item.name ?? "";
-          opened = { type: "tool_use", id: item.call_id ?? item.id ?? params.fallbackId(), name: params.toolNames.get(name) ?? name, json: "" };
-        } else {
-          return { frames: [] };
-        }
-        const index = blocks.length;
-        blocks.push(opened);
-        blockByOutput.set(event.output_index, index);
-        return { frames: [{ event: "content_block_start", data: { type: "content_block_start", index, content_block: wireBlock(opened) } }] };
-      }
-      case "response.output_text.delta": {
-        const target = block2(event.output_index);
-        if (target?.block.type !== "text") {
-          return { frames: [] };
-        }
-        target.block.text += event.delta;
-        return {
-          frames: [{ event: "content_block_delta", data: { type: "content_block_delta", index: target.index, delta: { type: "text_delta", text: event.delta } } }]
-        };
-      }
-      case "response.function_call_arguments.delta": {
-        const target = block2(event.output_index);
-        if (target?.block.type !== "tool_use") {
-          return { frames: [] };
+  const partsFor = (role) => {
+    if (pending?.role !== role) {
+      flush();
+      pending = { role, parts: [] };
+    }
+    return pending.parts;
+  };
+  for (const message of messages) {
+    const role = message.role === "assistant" ? "assistant" : "user";
+    for (const block2 of turnBlocks(message)) {
+      if (isTextBlock(block2)) {
+        if (block2.text.trim() === "") {
+          continue;
         }
-        target.block.json += event.delta;
-        return {
-          frames: [
-            { event: "content_block_delta", data: { type: "content_block_delta", index: target.index, delta: { type: "input_json_delta", partial_json: event.delta } } }
-          ]
-        };
-      }
-      case "response.output_item.done": {
-        const target = block2(event.output_index);
-        return target === void 0 ? { frames: [] } : { frames: [{ event: "content_block_stop", data: { type: "content_block_stop", index: target.index } }] };
-      }
-      case "response.completed": {
-        const usage = event.response?.usage ?? void 0;
-        const stopReason = sawToolUse ? "tool_use" : event.response?.status === "incomplete" ? "max_tokens" : "end_turn";
-        const converted = anthropicUsage(usage);
-        const content = blocks.map(finalBlock);
-        return {
-          frames: [
-            { event: "message_delta", data: { type: "message_delta", delta: { stop_reason: stopReason, stop_sequence: null }, usage: converted } },
-            { event: "message_stop", data: { type: "message_stop" } }
-          ],
-          completed: {
-            message: {
-              id: event.response?.id ?? messageId ?? params.fallbackId(),
-              type: "message",
-              role: "assistant",
-              model: params.requestedModel,
-              content: content.length === 0 ? [{ type: "text", text: "" }] : content,
-              stop_reason: stopReason,
-              stop_sequence: null,
-              usage: converted
-            },
-            usage
-          }
-        };
+        partsFor(role).push(role === "assistant" ? { type: "output_text", text: block2.text } : { type: "input_text", text: block2.text });
+      } else if (isImageBlock(block2)) {
+        const { source } = block2;
+        partsFor(role).push({
+          type: "input_image",
+          image_url: source.type === "base64" ? `data:${source.media_type};base64,${source.data}` : source.url
+        });
+      } else if (isToolUseBlock(block2)) {
+        flush();
+        input2.push({
+          type: "function_call",
+          call_id: block2.id,
+          name: shortToolName(block2.name, names),
+          arguments: JSON.stringify(block2.input ?? {})
+        });
+      } else if (isToolResultBlock(block2)) {
+        flush();
+        input2.push({ type: "function_call_output", call_id: block2.tool_use_id, output: flattenToolResult(block2.content) });
       }
-      case "response.failed":
-        return { frames: [], failed: { message: event.response?.error?.message ?? STREAM_ERROR } };
-      case "error":
-        return { frames: [], failed: { message: event.message ?? STREAM_ERROR } };
-      default:
-        return event;
     }
-  };
-  return { push };
-}
-
-// src/codex/route.ts
-function errorTypeFor2(status) {
-  switch (status) {
-    case HTTP_STATUS.badRequest:
-      return "invalid_request_error";
-    case HTTP_STATUS.unauthorized:
-      return "authentication_error";
-    case HTTP_STATUS.forbidden:
-      return "permission_error";
-    case HTTP_STATUS.notFound:
-      return "not_found_error";
-    case HTTP_STATUS.tooManyRequests:
-      return "rate_limit_error";
-    default:
-      return "api_error";
   }
+  flush();
+  return input2;
 }
-function errorBody2(status, message) {
-  return JSON.stringify({ type: "error", error: { type: errorTypeFor2(status), message } });
-}
-function errorResponse(status, message, headers = {}) {
-  return { status, headers: { "Content-Type": "application/json", ...headers }, body: errorBody2(status, message) };
-}
-function errorFrame(status, message) {
-  return `event: error
-data: ${errorBody2(status, message)}
-
-`;
+var EMPTY_PARAMETERS = { type: "object", properties: {} };
+function mapTools(tools, names) {
+  if (tools === void 0 || tools.length === 0) {
+    return void 0;
+  }
+  return tools.map((tool) => ({
+    type: "function",
+    name: shortToolName(tool.name, names),
+    description: tool.description ?? "",
+    parameters: tool.input_schema ?? EMPTY_PARAMETERS,
+    strict: false
+  }));
 }
-var UPSTREAM_DETAIL_CHARS = 2e3;
-var UPSTREAM_LOG_DETAIL_CHARS = 300;
-var CHARS_PER_TOKEN = 4;
-function parseJson3(body) {
-  try {
-    const value = JSON.parse(body);
-    return { ok: true, value };
-  } catch (error62) {
-    return { ok: false, message: `request body is not JSON: ${error62 instanceof Error ? error62.message : String(error62)}` };
+function mapToolChoice(choice, names) {
+  if (choice === void 0) {
+    return void 0;
+  }
+  switch (choice.type) {
+    case "auto":
+    case "none":
+      return choice.type;
+    case "any":
+      return "required";
+    case "tool":
+      return { type: "function", name: shortToolName(choice.name, names) };
+    default:
+      return choice;
   }
 }
-function describeError(error62) {
-  return error62 instanceof Error ? `${error62.name}: ${error62.message}` : String(error62);
+function translateRequest(body, config2) {
+  const names = /* @__PURE__ */ new Map();
+  const effort = mapEffort(body, config2);
+  const tools = mapTools(body.tools, names);
+  const toolChoice = mapToolChoice(body.tool_choice, names);
+  const userId = body.metadata?.user_id;
+  const request7 = {
+    model: mapModel(body.model ?? "", config2),
+    instructions: systemToInstructions(body.system),
+    input: messagesToInput(body.messages, names),
+    stream: true,
+    store: false,
+    text: { verbosity: "medium" },
+    ...effort === "none" ? {} : { reasoning: { effort, summary: "auto" } },
+    ...userId === void 0 ? {} : { prompt_cache_key: userId },
+    ...tools === void 0 ? {} : { tools },
+    ...toolChoice === void 0 ? {} : { tool_choice: toolChoice }
+  };
+  return { request: request7, toolNames: names };
 }
-function createCodexRoute(ports) {
-  const handleMessages = async (request7, config2, raw) => {
-    const parsed = MessagesRequestSchema.safeParse(raw);
-    if (!parsed.success) {
-      return errorResponse(HTTP_STATUS.badRequest, `not an Anthropic Messages request: ${parsed.error.issues.map((issue2) => `${issue2.path.join(".")}: ${issue2.message}`).join("; ")}`);
-    }
-    const body = parsed.data;
-    const requestedModel = body.model ?? "";
-    const { request: upstreamRequest, toolNames } = translateRequest(body, config2);
-    const started = ports.now();
-    const elapsed = () => `${String(ports.now() - started)}ms`;
-    let upstream;
-    try {
-      upstream = await callCodex(ports.upstream, upstreamRequest, sessionIdFor(body.metadata?.user_id, ports.upstream.randomId), request7.signal);
-    } catch (error62) {
-      if (request7.signal.aborted) {
-        return errorResponse(HTTP_STATUS.clientClosedRequest, "client disconnected");
-      }
-      ports.log(`${upstreamRequest.model} upstream fetch failed after ${elapsed()}: ${describeError(error62)}`);
-      return errorResponse(HTTP_STATUS.badGateway, `codex backend unreachable: ${describeError(error62)}`);
-    }
-    const snapshot = (quotaError) => {
-      const built = buildUsageSnapshot(upstream.headers, quotaError, ports.now());
-      if (built !== void 0) {
-        ports.writeUsageSnapshot(built);
-      }
-    };
-    if (!upstream.ok || upstream.body === null) {
-      const detail = (await upstream.text()).slice(0, UPSTREAM_DETAIL_CHARS);
-      let quotaError;
-      try {
-        const envelope = CodexErrorEnvelopeSchema.safeParse(JSON.parse(detail));
-        quotaError = envelope.success ? envelope.data.error : void 0;
-      } catch {
-      }
-      const rejected = upstream.status === HTTP_STATUS.tooManyRequests;
-      const retryAfter = rejected ? retryAfterSeconds2(upstream.headers, quotaError) : void 0;
-      ports.log(`${upstreamRequest.model} upstream ${String(upstream.status)} ${elapsed()}: ${detail.slice(0, UPSTREAM_LOG_DETAIL_CHARS)}`);
-      snapshot(quotaError);
-      return errorResponse(upstream.ok ? HTTP_STATUS.badGateway : upstream.status, `codex backend: ${detail}`, {
-        ...quotaHeaders(upstream.headers),
-        ...unifiedQuotaHeaders(upstream.headers, rejected, quotaError),
-        ...retryAfter === void 0 ? {} : { "retry-after": String(retryAfter) }
-      });
-    }
-    snapshot(void 0);
-    const relay = createRelay({ requestedModel, toolNames, fallbackId: () => `msg_${ports.upstream.randomId()}` });
-    const upstreamBody = upstream.body;
-    const quota = { ...quotaHeaders(upstream.headers), ...unifiedQuotaHeaders(upstream.headers, false, void 0) };
-    const logCompleted = (message, usage) => {
-      ports.log(
-        `${upstreamRequest.model} ok ${elapsed()} effort=${upstreamRequest.reasoning?.effort ?? "none"} stop=${message.stop_reason} in=${String(usage?.input_tokens ?? 0)} cached=${String(usage?.input_tokens_details?.cached_tokens ?? 0)} cache_write=${String(usage?.input_tokens_details?.cache_write_tokens ?? 0)} out=${String(usage?.output_tokens ?? 0)}`
-      );
-    };
-    if (body.stream === true) {
-      const frames = async function* () {
-        try {
-          for await (const event of codexEvents(upstreamBody)) {
-            const step = relay.push(event);
-            for (const frame of step.frames) {
-              yield renderSseFrame(frame);
-            }
-            if (step.completed !== void 0) {
-              logCompleted(step.completed.message, step.completed.usage);
-              return;
-            }
-            if (step.failed !== void 0) {
-              ports.log(`${upstreamRequest.model} stream error: ${step.failed.message}`);
-              yield errorFrame(HTTP_STATUS.internalServerError, step.failed.message);
-              return;
-            }
-          }
-          ports.log(`${upstreamRequest.model} stream ended without completing after ${elapsed()}`);
-          yield errorFrame(HTTP_STATUS.badGateway, "codex backend stream ended without completing");
-        } catch (error62) {
-          if (request7.signal.aborted) {
-            return;
-          }
-          ports.log(`${upstreamRequest.model} stream relay failed: ${describeError(error62)}`);
-          yield errorFrame(HTTP_STATUS.badGateway, `stream relay failed: ${describeError(error62)}`);
-        }
-      };
-      return {
-        status: HTTP_STATUS.ok,
-        headers: { "Content-Type": "text/event-stream", "Cache-Control": "no-cache", Connection: "keep-alive", ...quota },
-        body: frames()
-      };
-    }
+
+// src/codex/events.ts
+var ResponsesUsageSchema = external_exports.looseObject({
+  input_tokens: external_exports.number().optional(),
+  output_tokens: external_exports.number().optional(),
+  input_tokens_details: external_exports.looseObject({ cached_tokens: external_exports.number().optional(), cache_write_tokens: external_exports.number().optional() }).nullish()
+});
+var ResponseCreatedSchema = external_exports.looseObject({
+  type: external_exports.literal("response.created"),
+  response: external_exports.looseObject({ id: external_exports.string().optional() }).optional()
+});
+var OutputItemAddedSchema = external_exports.looseObject({
+  type: external_exports.literal("response.output_item.added"),
+  output_index: external_exports.number(),
+  item: external_exports.looseObject({
+    type: external_exports.string(),
+    id: external_exports.string().optional(),
+    call_id: external_exports.string().optional(),
+    name: external_exports.string().optional()
+  })
+});
+var OutputTextDeltaSchema = external_exports.looseObject({
+  type: external_exports.literal("response.output_text.delta"),
+  output_index: external_exports.number(),
+  delta: external_exports.string()
+});
+var FunctionArgumentsDeltaSchema = external_exports.looseObject({
+  type: external_exports.literal("response.function_call_arguments.delta"),
+  output_index: external_exports.number(),
+  delta: external_exports.string()
+});
+var OutputItemDoneSchema = external_exports.looseObject({
+  type: external_exports.literal("response.output_item.done"),
+  output_index: external_exports.number()
+});
+var ResponseCompletedSchema = external_exports.looseObject({
+  type: external_exports.literal("response.completed"),
+  response: external_exports.looseObject({ id: external_exports.string().optional(), status: external_exports.string().optional(), usage: ResponsesUsageSchema.nullish() }).optional()
+});
+var ResponseFailedSchema = external_exports.looseObject({
+  type: external_exports.literal("response.failed"),
+  response: external_exports.looseObject({ error: external_exports.looseObject({ message: external_exports.string().optional() }).nullish() }).optional()
+});
+var StreamErrorSchema = external_exports.looseObject({ type: external_exports.literal("error"), message: external_exports.string().optional() });
+var CodexEventSchema = external_exports.union([
+  ResponseCreatedSchema,
+  OutputItemAddedSchema,
+  OutputTextDeltaSchema,
+  FunctionArgumentsDeltaSchema,
+  OutputItemDoneSchema,
+  ResponseCompletedSchema,
+  ResponseFailedSchema,
+  StreamErrorSchema
+]);
+var CodexErrorEnvelopeSchema = external_exports.looseObject({
+  error: external_exports.looseObject({
+    message: external_exports.string().optional(),
+    resets_at: external_exports.number().optional(),
+    resets_in_seconds: external_exports.number().optional()
+  })
+});
+async function* parseSse(body) {
+  const decoder = new TextDecoder();
+  let buffer = "";
+  let data = "";
+  const parsed = function* (raw) {
     try {
-      for await (const event of codexEvents(upstreamBody)) {
-        const step = relay.push(event);
-        if (step.completed !== void 0) {
-          logCompleted(step.completed.message, step.completed.usage);
-          return { status: HTTP_STATUS.ok, headers: { "Content-Type": "application/json", ...quota }, body: JSON.stringify(step.completed.message) };
-        }
-        if (step.failed !== void 0) {
-          ports.log(`${upstreamRequest.model} stream error: ${step.failed.message}`);
-          return errorResponse(HTTP_STATUS.internalServerError, step.failed.message);
-        }
-      }
-    } catch (error62) {
-      if (request7.signal.aborted) {
-        return errorResponse(HTTP_STATUS.clientClosedRequest, "client disconnected");
-      }
-      ports.log(`${upstreamRequest.model} stream relay failed: ${describeError(error62)}`);
-      return errorResponse(HTTP_STATUS.badGateway, `stream relay failed: ${describeError(error62)}`);
-    }
-    ports.log(`${upstreamRequest.model} stream ended without completing after ${elapsed()}`);
-    return errorResponse(HTTP_STATUS.badGateway, "codex backend stream ended without completing");
-  };
-  const handleCountTokens = (raw) => {
-    const parsed = CountTokensRequestSchema.safeParse(raw);
-    if (!parsed.success) {
-      return errorResponse(HTTP_STATUS.badRequest, "not a count_tokens request");
-    }
-    const text2 = JSON.stringify({ system: parsed.data.system, messages: parsed.data.messages, tools: parsed.data.tools });
-    return { status: HTTP_STATUS.ok, headers: { "Content-Type": "application/json" }, body: JSON.stringify({ input_tokens: Math.ceil(text2.length / CHARS_PER_TOKEN) }) };
-  };
-  return async (request7) => {
-    if (request7.method === "GET" && request7.path === "/healthz") {
-      return { status: HTTP_STATUS.ok, headers: { "Content-Type": "text/plain" }, body: "ok" };
-    }
-    if (request7.method !== "POST") {
-      return errorResponse(HTTP_STATUS.methodNotAllowed, `unsupported ${request7.method} ${request7.path}`);
-    }
-    const scoped = parseProviderPath(request7.path);
-    if (scoped === void 0 || scoped.rest !== "/v1/messages" && scoped.rest !== "/v1/messages/count_tokens") {
-      return errorResponse(HTTP_STATUS.notFound, `no such endpoint: ${request7.path}`);
-    }
-    const provider = ports.loadProvider(scoped.provider);
-    if (!provider.ok) {
-      return errorResponse(provider.status, provider.message);
-    }
-    const json2 = parseJson3(request7.body);
-    if (!json2.ok) {
-      return errorResponse(HTTP_STATUS.badRequest, json2.message);
+      yield JSON.parse(raw);
+    } catch {
     }
-    return scoped.rest === "/v1/messages" ? await handleMessages(request7, provider.config, json2.value) : handleCountTokens(json2.value);
   };
-}
-
-// src/frontdoor/codexMount.ts
-var CODEX_MAX_BODY_BYTES = 67108864;
-var BodyTooLargeError = class extends Error {
-  constructor() {
-    super("request body too large");
-    this.name = "BodyTooLargeError";
-  }
-};
-async function readBody2(request7) {
-  const chunks = [];
-  let size = 0;
-  for await (const chunk of request7.body) {
-    if (!Buffer.isBuffer(chunk)) {
-      throw new TypeError("request body chunk was not a Buffer");
-    }
-    size += chunk.length;
-    if (size > CODEX_MAX_BODY_BYTES) {
-      throw new BodyTooLargeError();
+  for await (const chunk of body) {
+    buffer += decoder.decode(chunk, { stream: true });
+    let newline = buffer.indexOf("\n");
+    while (newline !== -1) {
+      const line = buffer.slice(0, newline).replace(/\r$/, "");
+      buffer = buffer.slice(newline + 1);
+      if (line === "") {
+        if (data !== "") {
+          yield* parsed(data);
+        }
+        data = "";
+      } else if (line.startsWith("data:")) {
+        data += line.slice("data:".length).trimStart();
+      }
+      newline = buffer.indexOf("\n");
     }
-    chunks.push(chunk);
   }
-  return Buffer.concat(chunks).toString("utf8");
-}
-async function writeRouteResponse(routed, response, signal) {
-  response.start(routed.status, routed.headers);
-  if (typeof routed.body === "string") {
-    await response.write(routed.body);
-    response.end();
-    return;
+  const tail = (buffer + decoder.decode()).replace(/\r$/, "");
+  if (tail.startsWith("data:")) {
+    data += tail.slice("data:".length).trimStart();
   }
-  for await (const chunk of routed.body) {
-    if (signal.aborted) {
-      return;
-    }
-    await response.write(chunk);
+  if (data !== "") {
+    yield* parsed(data);
   }
-  response.end();
-}
-function createCodexRouteMount(ports, upstreamBase, provider) {
-  const route = createCodexRoute(ports);
-  return {
-    name: `codex:${provider}`,
-    headroomEligible: true,
-    headroomUpstream: upstreamBase,
-    serve: async (request7, response) => {
-      let body;
-      try {
-        body = await readBody2(request7);
-      } catch (error62) {
-        const tooLarge = error62 instanceof BodyTooLargeError;
-        response.start(tooLarge ? HTTP_STATUS.payloadTooLarge : HTTP_STATUS.badRequest, { "Content-Type": "application/json" });
-        await response.write(
-          JSON.stringify({ type: "error", error: { type: "invalid_request_error", message: error62 instanceof Error ? error62.message : String(error62) } })
-        );
-        response.end();
-        request7.body.resume();
-        return;
-      }
-      const path41 = new URL(request7.url, "http://127.0.0.1").pathname;
-      const translated = { method: request7.method, path: path41, body, signal: request7.signal };
-      const routed = await route(translated);
-      if (request7.signal.aborted) {
-        return;
-      }
-      await writeRouteResponse(routed, response, request7.signal);
-    }
-  };
 }
-
-// src/frontdoor/passthrough.ts
-var http4 = __toESM(require("node:http"), 1);
-var https4 = __toESM(require("node:https"), 1);
-function responseHeaders2(headers) {
-  const result = {};
-  for (const [name, value] of Object.entries(forwardableHeaders(headers))) {
-    if (value === void 0) {
-      continue;
+async function* codexEvents(body) {
+  for await (const raw of parseSse(body)) {
+    const event = CodexEventSchema.safeParse(raw);
+    if (event.success) {
+      yield event.data;
     }
-    result[name] = Array.isArray(value) ? value.join(", ") : value;
   }
-  return result;
-}
-function createPassthroughRoute(name, target) {
-  const base = new URL(target.baseUrl);
-  const tls2 = base.protocol === "https:";
-  const basePath = base.pathname.replace(/\/+$/, "");
-  const agent = tls2 ? new ExemptTlsAgent() : new ExemptHttpAgent();
-  return {
-    name,
-    headroomEligible: true,
-    headroomUpstream: target.headroomUpstream,
-    serve: async (request7, response) => {
-      const incoming = new URL(request7.url, "http://127.0.0.1");
-      const path41 = target.stripPrefix !== void 0 && incoming.pathname.startsWith(target.stripPrefix) ? incoming.pathname.slice(target.stripPrefix.length) : incoming.pathname;
-      const headers = forwardableHeaders(request7.headers);
-      delete headers.host;
-      await new Promise((resolve) => {
-        const options = {
-          host: base.hostname,
-          port: base.port === "" ? void 0 : Number(base.port),
-          method: request7.method,
-          path: `${basePath}${path41}${incoming.search}`,
-          headers,
-          agent
-        };
-        const onUpstreamResponse = (upstreamResponse) => {
-          response.start(upstreamResponse.statusCode ?? HTTP_STATUS.badGateway, responseHeaders2(upstreamResponse.headers));
-          response.flush();
-          const stream = async () => {
-            try {
-              for await (const chunk of upstreamChunks(upstreamResponse)) {
-                if (request7.signal.aborted) {
-                  return;
-                }
-                await response.write(chunk);
-              }
-              response.end();
-            } catch {
-              response.destroy();
-            }
-            resolve(void 0);
-          };
-          void stream();
-        };
-        const forward = tls2 ? https4.request(options, onUpstreamResponse) : http4.request(options, onUpstreamResponse);
-        forward.on("error", (error62) => {
-          if (!response.headersSent) {
-            response.start(HTTP_STATUS.badGateway, { "Content-Type": "application/json" });
-            void response.write(JSON.stringify({ type: "error", error: { type: "api_error", message: `upstream ${target.baseUrl} unreachable (${error62.message})` } })).then(() => {
-              response.end();
-            });
-          } else {
-            response.destroy();
-          }
-          resolve(void 0);
-        });
-        request7.signal.addEventListener("abort", () => {
-          forward.destroy();
-        });
-        request7.body.pipe(forward);
-        request7.body.on("error", () => {
-          forward.destroy();
-        });
-      });
-    }
-  };
 }
 
-// src/frontdoor/providerRoute.ts
-function createProviderRouteResolver(deps) {
-  const oauthRoute = createPassthroughRoute("anthropic", { baseUrl: `https://${CONNECT_INTERCEPT_HOST}:${String(HTTPS_PORT)}`, stripPrefix: void 0, headroomUpstream: void 0 });
-  const passthroughByTarget = /* @__PURE__ */ new Map();
-  const passthroughFor = (name, target) => {
-    const key = `${name}\0${target.baseUrl}\0${target.stripPrefix ?? ""}\0${target.headroomUpstream ?? ""}`;
-    const existing = passthroughByTarget.get(key);
-    if (existing !== void 0) {
-      return existing;
-    }
-    const route = createPassthroughRoute(name, target);
-    passthroughByTarget.set(key, route);
-    return route;
-  };
-  const resolve = (request7) => {
-    const path41 = new URL(request7.url, "http://127.0.0.1").pathname;
-    const scoped = parseProviderPath(path41);
-    if (scoped === void 0) {
-      return path41.startsWith("/v1/") ? { ok: true, route: oauthRoute } : { ok: false, status: HTTP_STATUS.notFound, message: `no such endpoint: ${path41}` };
+// src/codex/quota.ts
+var QUOTA_FORWARD_HEADERS = [
+  "x-codex-active-limit",
+  "x-codex-plan-type",
+  "x-codex-primary-used-percent",
+  "x-codex-secondary-used-percent",
+  "x-codex-primary-window-minutes",
+  "x-codex-secondary-window-minutes",
+  "x-codex-primary-over-secondary-limit-percent",
+  "x-codex-primary-reset-after-seconds",
+  "x-codex-secondary-reset-after-seconds",
+  "x-codex-primary-reset-at",
+  "x-codex-secondary-reset-at"
+];
+function quotaHeaders(upstream) {
+  const headers = {};
+  for (const name of QUOTA_FORWARD_HEADERS) {
+    const value = upstream.get(name);
+    if (value !== null && value !== "") {
+      headers[name] = value;
     }
-    const { provider } = scoped;
-    let definition;
-    try {
-      definition = loadProvider(deps.providersDir, provider, deps.fs);
-    } catch (error62) {
-      if (error62 instanceof ConfigValidationError || error62 instanceof LegacyProviderFileError) {
-        return { ok: false, status: HTTP_STATUS.internalServerError, message: `provider ${provider} is invalid: ${error62 instanceof Error ? error62.message : String(error62)}` };
+  }
+  return headers;
+}
+var EXHAUSTED_PERCENT = "100";
+function unifiedQuotaHeaders(upstream, rejected, quotaError) {
+  const headers = { "anthropic-ratelimit-unified-status": rejected ? "rejected" : "allowed" };
+  const used7d = upstream.get("x-codex-primary-used-percent") ?? (rejected ? EXHAUSTED_PERCENT : null);
+  const reset7d = upstream.get("x-codex-primary-reset-at") ?? (quotaError?.resets_at === void 0 ? null : String(quotaError.resets_at));
+  if (used7d !== null && reset7d !== null) {
+    headers["anthropic-ratelimit-unified-7d-utilization"] = used7d;
+    headers["anthropic-ratelimit-unified-7d-reset"] = reset7d;
+    headers["anthropic-ratelimit-unified-reset"] = reset7d;
+  }
+  if (Number(upstream.get("x-codex-secondary-window-minutes")) > 0) {
+    const used5h = upstream.get("x-codex-secondary-used-percent");
+    const reset5h = upstream.get("x-codex-secondary-reset-at");
+    if (used5h !== null && used5h !== "" && reset5h !== null && reset5h !== "") {
+      headers["anthropic-ratelimit-unified-5h-utilization"] = used5h;
+      headers["anthropic-ratelimit-unified-5h-reset"] = reset5h;
+      const overall = headers["anthropic-ratelimit-unified-reset"];
+      if (overall !== void 0) {
+        headers["anthropic-ratelimit-unified-reset"] = String(Math.min(Number(overall), Number(reset5h)));
       }
-      throw error62;
-    }
-    if (definition === void 0) {
-      return { ok: false, status: HTTP_STATUS.notFound, message: `no provider named "${provider}"` };
     }
-    if (isCodexProvider(definition)) {
-      const codexProvider = definition;
-      return {
-        ok: true,
-        route: createCodexRouteMount(
-          { ...deps.codexPorts, loadProvider: () => ({ ok: true, config: resolveCodexConfig(codexProvider.codex) }) },
-          directOrigin(deps.directPort()),
-          provider
-        )
-      };
+  }
+  return headers;
+}
+var MS_PER_SECOND5 = 1e3;
+function buildUsageSnapshot(upstream, quotaError, nowMs) {
+  const used7 = upstream.get("x-codex-primary-used-percent") ?? (quotaError === void 0 ? null : EXHAUSTED_PERCENT);
+  const reset7 = upstream.get("x-codex-primary-reset-at") ?? (quotaError?.resets_at === void 0 ? null : String(quotaError.resets_at));
+  const sevenDay = used7 !== null && reset7 !== null ? { used_percentage: Number(used7), resets_at: new Date(Number(reset7) * MS_PER_SECOND5).toISOString() } : void 0;
+  let fiveHour;
+  if (Number(upstream.get("x-codex-secondary-window-minutes")) > 0) {
+    const used5 = upstream.get("x-codex-secondary-used-percent");
+    const reset5 = upstream.get("x-codex-secondary-reset-at");
+    if (used5 !== null && reset5 !== null) {
+      fiveHour = { used_percentage: Number(used5), resets_at: new Date(Number(reset5) * MS_PER_SECOND5).toISOString() };
     }
-    const httpProvider = definition;
-    return {
-      ok: true,
-      route: passthroughFor(`http:${provider}`, {
-        baseUrl: httpProvider.baseUrl,
-        stripPrefix: `${PROVIDER_PATH_PREFIX}${encodeURIComponent(provider)}`,
-        headroomUpstream: directOrigin(deps.directPort())
-      })
-    };
+  }
+  if (sevenDay === void 0 && fiveHour === void 0) {
+    return void 0;
+  }
+  return {
+    updated_at: new Date(nowMs).toISOString(),
+    ...sevenDay === void 0 ? {} : { seven_day: sevenDay },
+    ...fiveHour === void 0 ? {} : { five_hour: fiveHour }
   };
-  return async (request7) => await Promise.resolve(resolve(request7));
 }
-
-// src/frontdoor/rcSessions.ts
-var RC_SESSIONS_PATH_PREFIX = "/v1/code/sessions";
-var RC_SESSION_ID_PREFIX = "cse_";
-var RC_IDLE_EXPIRY_MS = 45e3;
-var RC_CREATE_RESPONSE_CAP_BYTES = 8192;
-var CONFLICT_REASON_HEADER = "x-ccr-conflict-reason";
-var RC_PENDING_DEADLINE_MS = 14e3;
-var RC_REQUEST_PARSE_CAP_BYTES = 262144;
-var RC_PENDING_SUMMARY_EXCERPT_CHARS = 300;
-var SUCCESS_STATUS_MAX_EXCLUSIVE = 300;
-function isSuccessful(status) {
-  return status >= HTTP_STATUS.ok && status < SUCCESS_STATUS_MAX_EXCLUSIVE;
+function retryAfterSeconds2(upstream, quotaError) {
+  const seconds = quotaError?.resets_in_seconds ?? Number(upstream.get("x-codex-primary-reset-after-seconds"));
+  return Number.isFinite(seconds) && seconds > 0 ? Math.ceil(seconds) : void 0;
 }
-function singleHeader(headers, name) {
-  const value = headers[name];
-  return typeof value === "string" ? value : void 0;
+
+// src/codex/relay.ts
+function anthropicUsage(usage) {
+  const cached2 = usage?.input_tokens_details?.cached_tokens ?? 0;
+  const written = usage?.input_tokens_details?.cache_write_tokens ?? 0;
+  return {
+    input_tokens: Math.max(0, (usage?.input_tokens ?? 0) - cached2 - written),
+    cache_creation_input_tokens: written,
+    cache_read_input_tokens: cached2,
+    output_tokens: usage?.output_tokens ?? 0
+  };
 }
-var OAUTH_AUTHORIZATION_PREFIX = "Bearer sk-ant-oat";
-function oauthAuthorizationOf(headers) {
-  const value = singleHeader(headers, "authorization");
-  return value?.startsWith(OAUTH_AUTHORIZATION_PREFIX) === true ? value : void 0;
+function renderSseFrame(frame) {
+  return `event: ${frame.event}
+data: ${JSON.stringify(frame.data)}
+
+`;
 }
-function sessionCreateId(body) {
-  let parsed;
+function parseToolArguments(json2) {
+  if (json2 === "") {
+    return {};
+  }
   try {
-    parsed = JSON.parse(body);
+    const parsed = JSON.parse(json2);
+    return parsed;
   } catch {
-    return void 0;
-  }
-  if (typeof parsed !== "object" || parsed === null || !("session" in parsed)) {
-    return void 0;
-  }
-  const session = parsed.session;
-  if (typeof session !== "object" || session === null || !("id" in session)) {
-    return void 0;
+    return {};
   }
-  const id = session.id;
-  return typeof id === "string" && id.startsWith(RC_SESSION_ID_PREFIX) ? id : void 0;
 }
-function isRecord3(value) {
-  return typeof value === "object" && value !== null && !Array.isArray(value);
+function wireBlock(block2) {
+  return block2.type === "text" ? { type: "text", text: "" } : { type: "tool_use", id: block2.id, name: block2.name, input: {} };
+}
+function finalBlock(block2) {
+  return block2.type === "text" ? { type: "text", text: block2.text } : { type: "tool_use", id: block2.id, name: block2.name, input: parseToolArguments(block2.json) };
+}
+var STREAM_ERROR = "codex backend stream error";
+function createRelay(params) {
+  const blockByOutput = /* @__PURE__ */ new Map();
+  const blocks = [];
+  let messageId;
+  let sawToolUse = false;
+  const block2 = (outputIndex) => {
+    const index = blockByOutput.get(outputIndex);
+    const found = index === void 0 ? void 0 : blocks[index];
+    return index === void 0 || found === void 0 ? void 0 : { index, block: found };
+  };
+  const push = (event) => {
+    switch (event.type) {
+      case "response.created": {
+        messageId = event.response?.id ?? params.fallbackId();
+        return {
+          frames: [
+            {
+              event: "message_start",
+              data: {
+                type: "message_start",
+                message: {
+                  id: messageId,
+                  type: "message",
+                  role: "assistant",
+                  model: params.requestedModel,
+                  content: [],
+                  stop_reason: null,
+                  stop_sequence: null,
+                  usage: { input_tokens: 0, output_tokens: 0 }
+                }
+              }
+            }
+          ]
+        };
+      }
+      case "response.output_item.added": {
+        const { item } = event;
+        let opened;
+        if (item.type === "message") {
+          opened = { type: "text", text: "" };
+        } else if (item.type === "function_call") {
+          sawToolUse = true;
+          const name = item.name ?? "";
+          opened = { type: "tool_use", id: item.call_id ?? item.id ?? params.fallbackId(), name: params.toolNames.get(name) ?? name, json: "" };
+        } else {
+          return { frames: [] };
+        }
+        const index = blocks.length;
+        blocks.push(opened);
+        blockByOutput.set(event.output_index, index);
+        return { frames: [{ event: "content_block_start", data: { type: "content_block_start", index, content_block: wireBlock(opened) } }] };
+      }
+      case "response.output_text.delta": {
+        const target = block2(event.output_index);
+        if (target?.block.type !== "text") {
+          return { frames: [] };
+        }
+        target.block.text += event.delta;
+        return {
+          frames: [{ event: "content_block_delta", data: { type: "content_block_delta", index: target.index, delta: { type: "text_delta", text: event.delta } } }]
+        };
+      }
+      case "response.function_call_arguments.delta": {
+        const target = block2(event.output_index);
+        if (target?.block.type !== "tool_use") {
+          return { frames: [] };
+        }
+        target.block.json += event.delta;
+        return {
+          frames: [
+            { event: "content_block_delta", data: { type: "content_block_delta", index: target.index, delta: { type: "input_json_delta", partial_json: event.delta } } }
+          ]
+        };
+      }
+      case "response.output_item.done": {
+        const target = block2(event.output_index);
+        return target === void 0 ? { frames: [] } : { frames: [{ event: "content_block_stop", data: { type: "content_block_stop", index: target.index } }] };
+      }
+      case "response.completed": {
+        const usage = event.response?.usage ?? void 0;
+        const stopReason = sawToolUse ? "tool_use" : event.response?.status === "incomplete" ? "max_tokens" : "end_turn";
+        const converted = anthropicUsage(usage);
+        const content = blocks.map(finalBlock);
+        return {
+          frames: [
+            { event: "message_delta", data: { type: "message_delta", delta: { stop_reason: stopReason, stop_sequence: null }, usage: converted } },
+            { event: "message_stop", data: { type: "message_stop" } }
+          ],
+          completed: {
+            message: {
+              id: event.response?.id ?? messageId ?? params.fallbackId(),
+              type: "message",
+              role: "assistant",
+              model: params.requestedModel,
+              content: content.length === 0 ? [{ type: "text", text: "" }] : content,
+              stop_reason: stopReason,
+              stop_sequence: null,
+              usage: converted
+            },
+            usage
+          }
+        };
+      }
+      case "response.failed":
+        return { frames: [], failed: { message: event.response?.error?.message ?? STREAM_ERROR } };
+      case "error":
+        return { frames: [], failed: { message: event.message ?? STREAM_ERROR } };
+      default:
+        return event;
+    }
+  };
+  return { push };
 }
-function parseJsonObject(body) {
-  let parsed;
-  try {
-    parsed = JSON.parse(body);
-  } catch {
-    return void 0;
+
+// src/codex/route.ts
+function errorTypeFor2(status) {
+  switch (status) {
+    case HTTP_STATUS.badRequest:
+      return "invalid_request_error";
+    case HTTP_STATUS.unauthorized:
+      return "authentication_error";
+    case HTTP_STATUS.forbidden:
+      return "permission_error";
+    case HTTP_STATUS.notFound:
+      return "not_found_error";
+    case HTTP_STATUS.tooManyRequests:
+      return "rate_limit_error";
+    default:
+      return "api_error";
   }
-  return isRecord3(parsed) ? parsed : void 0;
-}
-function nonEmptyString(record2, field) {
-  const value = record2 === void 0 ? void 0 : record2[field];
-  return typeof value === "string" && value !== "" ? value : void 0;
 }
-function finiteNumber(record2, field) {
-  const value = record2 === void 0 ? void 0 : record2[field];
-  return typeof value === "number" && Number.isFinite(value) ? value : void 0;
+function errorBody2(status, message) {
+  return JSON.stringify({ type: "error", error: { type: errorTypeFor2(status), message } });
 }
-function excerpt(text2) {
-  return text2.length <= RC_PENDING_SUMMARY_EXCERPT_CHARS ? text2 : `${text2.slice(0, RC_PENDING_SUMMARY_EXCERPT_CHARS)}...`;
+function errorResponse(status, message, headers = {}) {
+  return { status, headers: { "Content-Type": "application/json", ...headers }, body: errorBody2(status, message) };
 }
-function payloadEventsOf(body) {
-  const parsed = parseJsonObject(body);
-  const events = parsed === void 0 ? void 0 : parsed.events;
-  if (!Array.isArray(events)) {
-    return [];
-  }
-  const payloads = [];
-  for (const event of events) {
-    if (!isRecord3(event)) {
-      continue;
-    }
-    const payload = event.payload;
-    if (!isRecord3(payload)) {
-      continue;
-    }
-    payloads.push(payload);
-  }
-  return payloads;
+function errorFrame(status, message) {
+  return `event: error
+data: ${errorBody2(status, message)}
+
+`;
 }
-function pendingOfControlRequestPayload(payload) {
-  if (payload.type !== "control_request") {
-    return void 0;
-  }
-  const requestId = nonEmptyString(payload, "request_id") ?? nonEmptyString(payload, "uuid");
-  if (requestId === void 0) {
-    return void 0;
-  }
-  const request7 = isRecord3(payload.request) ? payload.request : void 0;
-  const subtype = nonEmptyString(request7, "subtype");
-  const type = subtype ?? "control_request";
-  let summary = "";
-  if (subtype === "can_use_tool") {
-    const toolName = nonEmptyString(request7, "tool_name") ?? "unknown tool";
-    const input2 = request7 === void 0 ? void 0 : request7.input;
-    summary = input2 === void 0 ? toolName : `${toolName} ${excerpt(JSON.stringify(input2))}`;
-  } else if (request7 !== void 0) {
-    summary = excerpt(JSON.stringify(request7));
+var UPSTREAM_DETAIL_CHARS = 2e3;
+var UPSTREAM_LOG_DETAIL_CHARS = 300;
+var CHARS_PER_TOKEN = 4;
+function parseJson3(body) {
+  try {
+    const value = JSON.parse(body);
+    return { ok: true, value };
+  } catch (error62) {
+    return { ok: false, message: `request body is not JSON: ${error62 instanceof Error ? error62.message : String(error62)}` };
   }
-  return { requestId, type, summary };
 }
-function answeredRequestIdsOfControlResponsePayload(payload) {
-  if (payload.type !== "control_response") {
-    return [];
-  }
-  const response = isRecord3(payload.response) ? payload.response : void 0;
-  const id = nonEmptyString(response, "request_id") ?? nonEmptyString(payload, "request_id") ?? nonEmptyString(payload, "uuid");
-  return id === void 0 ? [] : [id];
+function describeError(error62) {
+  return error62 instanceof Error ? `${error62.name}: ${error62.message}` : String(error62);
 }
-function parseRcRequestBody(kind, body) {
-  if (kind === "heartbeat") {
-    return { controlRequests: [], answeredRequestIds: [], idleSeconds: finiteNumber(parseJsonObject(body), "idle_seconds"), workerStatus: void 0 };
-  }
-  if (kind === "worker-registration") {
-    return { controlRequests: [], answeredRequestIds: [], idleSeconds: void 0, workerStatus: nonEmptyString(parseJsonObject(body), "status") };
-  }
-  const controlRequests = [];
-  const answeredRequestIds = [];
-  for (const payload of payloadEventsOf(body)) {
-    const pending = pendingOfControlRequestPayload(payload);
-    if (pending !== void 0) {
-      controlRequests.push({ requestId: pending.requestId, type: pending.type, summary: pending.summary });
-      continue;
+function createCodexRoute(ports) {
+  const handleMessages = async (request7, config2, raw) => {
+    const parsed = MessagesRequestSchema.safeParse(raw);
+    if (!parsed.success) {
+      return errorResponse(HTTP_STATUS.badRequest, `not an Anthropic Messages request: ${parsed.error.issues.map((issue2) => `${issue2.path.join(".")}: ${issue2.message}`).join("; ")}`);
     }
-    answeredRequestIds.push(...answeredRequestIdsOfControlResponsePayload(payload));
-  }
-  return { controlRequests, answeredRequestIds, idleSeconds: void 0, workerStatus: void 0 };
-}
-function createRcSessionTracker(deps) {
-  const entries = /* @__PURE__ */ new Map();
-  const expire = (id) => {
-    entries.delete(id);
-  };
-  const expirePendings = (entry, now) => {
-    for (const [requestId, pending] of entry.pending) {
-      if (now - pending.observedAt >= RC_PENDING_DEADLINE_MS) {
-        entry.pending.delete(requestId);
+    const body = parsed.data;
+    const requestedModel = body.model ?? "";
+    const { request: upstreamRequest, toolNames } = translateRequest(body, config2);
+    const started = ports.now();
+    const elapsed = () => `${String(ports.now() - started)}ms`;
+    let upstream;
+    try {
+      upstream = await callCodex(ports.upstream, upstreamRequest, sessionIdFor(body.metadata?.user_id, ports.upstream.randomId), request7.signal);
+    } catch (error62) {
+      if (request7.signal.aborted) {
+        return errorResponse(HTTP_STATUS.clientClosedRequest, "client disconnected");
       }
+      ports.log(`${upstreamRequest.model} upstream fetch failed after ${elapsed()}: ${describeError(error62)}`);
+      return errorResponse(HTTP_STATUS.badGateway, `codex backend unreachable: ${describeError(error62)}`);
     }
-  };
-  const sweep = () => {
-    for (const [id, entry] of entries) {
-      if (deps.now() - entry.lastSeenAt >= deps.idleMs) {
-        expire(id);
-        continue;
+    const snapshot = (quotaError) => {
+      const built = buildUsageSnapshot(upstream.headers, quotaError, ports.now());
+      if (built !== void 0) {
+        ports.writeUsageSnapshot(built);
       }
-      expirePendings(entry, deps.now());
+    };
+    if (!upstream.ok || upstream.body === null) {
+      const detail = (await upstream.text()).slice(0, UPSTREAM_DETAIL_CHARS);
+      let quotaError;
+      try {
+        const envelope = CodexErrorEnvelopeSchema.safeParse(JSON.parse(detail));
+        quotaError = envelope.success ? envelope.data.error : void 0;
+      } catch {
+      }
+      const rejected = upstream.status === HTTP_STATUS.tooManyRequests;
+      const retryAfter = rejected ? retryAfterSeconds2(upstream.headers, quotaError) : void 0;
+      ports.log(`${upstreamRequest.model} upstream ${String(upstream.status)} ${elapsed()}: ${detail.slice(0, UPSTREAM_LOG_DETAIL_CHARS)}`);
+      snapshot(quotaError);
+      return errorResponse(upstream.ok ? HTTP_STATUS.badGateway : upstream.status, `codex backend: ${detail}`, {
+        ...quotaHeaders(upstream.headers),
+        ...unifiedQuotaHeaders(upstream.headers, rejected, quotaError),
+        ...retryAfter === void 0 ? {} : { "retry-after": String(retryAfter) }
+      });
+    }
+    snapshot(void 0);
+    const relay = createRelay({ requestedModel, toolNames, fallbackId: () => `msg_${ports.upstream.randomId()}` });
+    const upstreamBody = upstream.body;
+    const quota = { ...quotaHeaders(upstream.headers), ...unifiedQuotaHeaders(upstream.headers, false, void 0) };
+    const logCompleted = (message, usage) => {
+      ports.log(
+        `${upstreamRequest.model} ok ${elapsed()} effort=${upstreamRequest.reasoning?.effort ?? "none"} stop=${message.stop_reason} in=${String(usage?.input_tokens ?? 0)} cached=${String(usage?.input_tokens_details?.cached_tokens ?? 0)} cache_write=${String(usage?.input_tokens_details?.cache_write_tokens ?? 0)} out=${String(usage?.output_tokens ?? 0)}`
+      );
+    };
+    if (body.stream === true) {
+      const frames = async function* () {
+        try {
+          for await (const event of codexEvents(upstreamBody)) {
+            const step = relay.push(event);
+            for (const frame of step.frames) {
+              yield renderSseFrame(frame);
+            }
+            if (step.completed !== void 0) {
+              logCompleted(step.completed.message, step.completed.usage);
+              return;
+            }
+            if (step.failed !== void 0) {
+              ports.log(`${upstreamRequest.model} stream error: ${step.failed.message}`);
+              yield errorFrame(HTTP_STATUS.internalServerError, step.failed.message);
+              return;
+            }
+          }
+          ports.log(`${upstreamRequest.model} stream ended without completing after ${elapsed()}`);
+          yield errorFrame(HTTP_STATUS.badGateway, "codex backend stream ended without completing");
+        } catch (error62) {
+          if (request7.signal.aborted) {
+            return;
+          }
+          ports.log(`${upstreamRequest.model} stream relay failed: ${describeError(error62)}`);
+          yield errorFrame(HTTP_STATUS.badGateway, `stream relay failed: ${describeError(error62)}`);
+        }
+      };
+      return {
+        status: HTTP_STATUS.ok,
+        headers: { "Content-Type": "text/event-stream", "Cache-Control": "no-cache", Connection: "keep-alive", ...quota },
+        body: frames()
+      };
+    }
+    try {
+      for await (const event of codexEvents(upstreamBody)) {
+        const step = relay.push(event);
+        if (step.completed !== void 0) {
+          logCompleted(step.completed.message, step.completed.usage);
+          return { status: HTTP_STATUS.ok, headers: { "Content-Type": "application/json", ...quota }, body: JSON.stringify(step.completed.message) };
+        }
+        if (step.failed !== void 0) {
+          ports.log(`${upstreamRequest.model} stream error: ${step.failed.message}`);
+          return errorResponse(HTTP_STATUS.internalServerError, step.failed.message);
+        }
+      }
+    } catch (error62) {
+      if (request7.signal.aborted) {
+        return errorResponse(HTTP_STATUS.clientClosedRequest, "client disconnected");
+      }
+      ports.log(`${upstreamRequest.model} stream relay failed: ${describeError(error62)}`);
+      return errorResponse(HTTP_STATUS.badGateway, `stream relay failed: ${describeError(error62)}`);
+    }
+    ports.log(`${upstreamRequest.model} stream ended without completing after ${elapsed()}`);
+    return errorResponse(HTTP_STATUS.badGateway, "codex backend stream ended without completing");
+  };
+  const handleCountTokens = (raw) => {
+    const parsed = CountTokensRequestSchema.safeParse(raw);
+    if (!parsed.success) {
+      return errorResponse(HTTP_STATUS.badRequest, "not a count_tokens request");
+    }
+    const text2 = JSON.stringify({ system: parsed.data.system, messages: parsed.data.messages, tools: parsed.data.tools });
+    return { status: HTTP_STATUS.ok, headers: { "Content-Type": "application/json" }, body: JSON.stringify({ input_tokens: Math.ceil(text2.length / CHARS_PER_TOKEN) }) };
+  };
+  return async (request7) => {
+    if (request7.method === "GET" && request7.path === "/healthz") {
+      return { status: HTTP_STATUS.ok, headers: { "Content-Type": "text/plain" }, body: "ok" };
+    }
+    if (request7.method !== "POST") {
+      return errorResponse(HTTP_STATUS.methodNotAllowed, `unsupported ${request7.method} ${request7.path}`);
+    }
+    const scoped = parseProviderPath(request7.path);
+    if (scoped === void 0 || scoped.rest !== "/v1/messages" && scoped.rest !== "/v1/messages/count_tokens") {
+      return errorResponse(HTTP_STATUS.notFound, `no such endpoint: ${request7.path}`);
     }
+    const provider = ports.loadProvider(scoped.provider);
+    if (!provider.ok) {
+      return errorResponse(provider.status, provider.message);
+    }
+    const json2 = parseJson3(request7.body);
+    if (!json2.ok) {
+      return errorResponse(HTTP_STATUS.badRequest, json2.message);
+    }
+    return scoped.rest === "/v1/messages" ? await handleMessages(request7, provider.config, json2.value) : handleCountTokens(json2.value);
   };
-  const timer = setInterval(sweep, deps.idleMs);
-  timer.unref();
-  const birth = (id, facts) => {
-    const record2 = { id, createdAt: deps.now(), lastSeenAt: deps.now(), ...facts, pending: /* @__PURE__ */ new Map(), workerState: void 0, workerIdleSeconds: void 0 };
-    entries.set(id, record2);
-    return record2;
-  };
-  const observeExchange = (request7) => {
-    const method = (request7.method ?? "").toUpperCase();
-    const path41 = new URL(request7.url ?? "/", "http://127.0.0.1").pathname;
-    if (!path41.startsWith(RC_SESSIONS_PATH_PREFIX)) {
-      return void 0;
+}
+
+// src/frontdoor/codexMount.ts
+var CODEX_MAX_BODY_BYTES = 67108864;
+var BodyTooLargeError = class extends Error {
+  constructor() {
+    super("request body too large");
+    this.name = "BodyTooLargeError";
+  }
+};
+async function readBody2(request7) {
+  const chunks = [];
+  let size = 0;
+  for await (const chunk of request7.body) {
+    if (!Buffer.isBuffer(chunk)) {
+      throw new TypeError("request body chunk was not a Buffer");
     }
-    const tail = path41.slice(RC_SESSIONS_PATH_PREFIX.length);
-    const facts = {
-      oauthAuthorization: oauthAuthorizationOf(request7.headers),
-      anthropicVersion: singleHeader(request7.headers, "anthropic-version"),
-      anthropicClientPlatform: singleHeader(request7.headers, "anthropic-client-platform")
-    };
-    if (tail === "") {
-      if (method !== "POST") {
-        return void 0;
-      }
-      let accepted2 = false;
-      let buffered2 = 0;
-      let body = "";
-      return {
-        onResponse: (status) => {
-          accepted2 = isSuccessful(status);
-        },
-        onBodyChunk: (chunk) => {
-          if (!accepted2 || buffered2 >= RC_CREATE_RESPONSE_CAP_BYTES) {
-            return;
-          }
-          const text2 = Buffer.from(chunk).toString("utf8");
-          body = body + text2.slice(0, RC_CREATE_RESPONSE_CAP_BYTES - buffered2);
-          buffered2 = body.length;
-        },
-        onEnd: () => {
-          if (!accepted2) {
-            return;
-          }
-          const id2 = sessionCreateId(body);
-          if (id2 === void 0) {
-            return;
-          }
-          birth(id2, facts);
-        }
-      };
+    size += chunk.length;
+    if (size > CODEX_MAX_BODY_BYTES) {
+      throw new BodyTooLargeError();
     }
-    const rest = tail.slice(1);
-    const [id] = rest.split("/");
-    if (id?.startsWith(RC_SESSION_ID_PREFIX) !== true) {
-      return void 0;
+    chunks.push(chunk);
+  }
+  return Buffer.concat(chunks).toString("utf8");
+}
+async function writeRouteResponse(routed, response, signal) {
+  response.start(routed.status, routed.headers);
+  if (typeof routed.body === "string") {
+    await response.write(routed.body);
+    response.end();
+    return;
+  }
+  for await (const chunk of routed.body) {
+    if (signal.aborted) {
+      return;
     }
-    const entry = entries.get(id) ?? birth(id, facts);
-    entry.lastSeenAt = deps.now();
-    entry.oauthAuthorization = facts.oauthAuthorization ?? entry.oauthAuthorization;
-    entry.anthropicVersion = facts.anthropicVersion ?? entry.anthropicVersion;
-    entry.anthropicClientPlatform = facts.anthropicClientPlatform ?? entry.anthropicClientPlatform;
-    const bodyKind = method === "POST" && rest === `${id}/worker/events` ? "worker-events" : method === "POST" && rest === `${id}/events` ? "client-events" : method === "POST" && rest === `${id}/worker/heartbeat` ? "heartbeat" : method === "PUT" && rest === `${id}/worker` ? "worker-registration" : void 0;
-    let chunks = [];
-    let buffered = 0;
-    let oversized = false;
-    let requestEnded = false;
-    let accepted;
-    let filed = false;
-    const file2 = () => {
-      if (filed || accepted !== true || !requestEnded || bodyKind === void 0) {
+    await response.write(chunk);
+  }
+  response.end();
+}
+function createCodexRouteMount(ports, upstreamBase, provider) {
+  const route = createCodexRoute(ports);
+  return {
+    name: `codex:${provider}`,
+    headroomEligible: true,
+    headroomUpstream: upstreamBase,
+    serve: async (request7, response) => {
+      let body;
+      try {
+        body = await readBody2(request7);
+      } catch (error62) {
+        const tooLarge = error62 instanceof BodyTooLargeError;
+        response.start(tooLarge ? HTTP_STATUS.payloadTooLarge : HTTP_STATUS.badRequest, { "Content-Type": "application/json" });
+        await response.write(
+          JSON.stringify({ type: "error", error: { type: "invalid_request_error", message: error62 instanceof Error ? error62.message : String(error62) } })
+        );
+        response.end();
+        request7.body.resume();
         return;
       }
-      filed = true;
-      const factsOfBody = oversized ? void 0 : parseRcRequestBody(bodyKind, Buffer.concat(chunks).toString("utf8"));
-      chunks = [];
-      const entryNow = entries.get(id);
-      if (entryNow === void 0 || factsOfBody === void 0) {
+      const path41 = new URL(request7.url, "http://127.0.0.1").pathname;
+      const translated = { method: request7.method, path: path41, body, signal: request7.signal };
+      const routed = await route(translated);
+      if (request7.signal.aborted) {
         return;
       }
-      const now = deps.now();
-      for (const controlRequest of factsOfBody.controlRequests) {
-        entryNow.pending.set(controlRequest.requestId, { sessionId: id, ...controlRequest, observedAt: now });
-      }
-      for (const requestId of factsOfBody.answeredRequestIds) {
-        entryNow.pending.delete(requestId);
-      }
-      if (factsOfBody.idleSeconds !== void 0) {
-        entryNow.workerIdleSeconds = { value: factsOfBody.idleSeconds, observedAt: now };
-      }
-      if (factsOfBody.workerStatus !== void 0) {
-        entryNow.workerState = { value: factsOfBody.workerStatus, observedAt: now };
-      }
-    };
-    const archiving = method === "POST" && rest === `${id}/archive`;
-    return {
-      ...bodyKind === void 0 ? {} : {
-        onRequestChunk: (chunk) => {
-          if (oversized) {
-            return;
-          }
-          chunks.push(Buffer.from(chunk));
-          buffered += chunk.length;
-          if (buffered > RC_REQUEST_PARSE_CAP_BYTES) {
-            oversized = true;
-            chunks = [];
-          }
-        },
-        onRequestEnd: () => {
-          requestEnded = true;
-          file2();
-        }
-      },
-      onResponse: (status, headers) => {
-        if (singleHeader(headers, CONFLICT_REASON_HEADER) !== void 0 || archiving && isSuccessful(status)) {
-          expire(id);
-          return;
-        }
-        accepted = isSuccessful(status);
-        file2();
-      },
-      onBodyChunk: () => {
-      },
-      onEnd: () => {
-      }
-    };
-  };
-  const summaryOf = ({ id, createdAt, lastSeenAt }) => ({ id, createdAt, lastSeenAt });
-  const pendingSummaryOf = ({ sessionId, requestId, type, summary, observedAt: observedAt2 }) => ({ sessionId, requestId, type, summary, observedAt: observedAt2 });
-  const sortedEntries = () => [...entries.values()].sort((left, right) => left.createdAt - right.createdAt || (left.id < right.id ? -1 : 1));
-  const pendingSorted = (entry) => [...entry.pending.values()].sort((left, right) => left.observedAt - right.observedAt || (left.requestId < right.requestId ? -1 : 1)).map(pendingSummaryOf);
-  return {
-    observeExchange,
-    list: () => {
-      sweep();
-      return sortedEntries().map(summaryOf);
-    },
-    statusOf: (sessionId) => {
-      sweep();
-      return sortedEntries().filter((entry) => sessionId === void 0 || entry.id === sessionId).map((entry) => ({ ...summaryOf(entry), workerState: entry.workerState, workerIdleSeconds: entry.workerIdleSeconds, pending: pendingSorted(entry) }));
-    },
-    pendingOf: (sessionId) => {
-      sweep();
-      return sortedEntries().filter((entry) => sessionId === void 0 || entry.id === sessionId).flatMap((entry) => pendingSorted(entry));
-    },
-    credentialOf: (sessionId) => {
-      const entry = entries.get(sessionId);
-      return entry === void 0 ? void 0 : { authorization: entry.oauthAuthorization, anthropicVersion: entry.anthropicVersion, anthropicClientPlatform: entry.anthropicClientPlatform };
-    },
-    completePending: (sessionId, requestId) => {
-      entries.get(sessionId)?.pending.delete(requestId);
-    },
-    close: () => {
-      clearInterval(timer);
+      await writeRouteResponse(routed, response, request7.signal);
     }
   };
 }
-function observingRoutedRoute(route, tracker) {
+
+// src/frontdoor/passthrough.ts
+var http4 = __toESM(require("node:http"), 1);
+var https4 = __toESM(require("node:https"), 1);
+function responseHeaders2(headers) {
+  const result = {};
+  for (const [name, value] of Object.entries(forwardableHeaders(headers))) {
+    if (value === void 0) {
+      continue;
+    }
+    result[name] = Array.isArray(value) ? value.join(", ") : value;
+  }
+  return result;
+}
+function createPassthroughRoute(name, target) {
+  const base = new URL(target.baseUrl);
+  const tls2 = base.protocol === "https:";
+  const basePath = base.pathname.replace(/\/+$/, "");
+  const agent = tls2 ? new ExemptTlsAgent() : new ExemptHttpAgent();
   return {
-    ...route,
+    name,
+    headroomEligible: true,
+    headroomUpstream: target.headroomUpstream,
     serve: async (request7, response) => {
-      const observed = tracker.observeExchange({ method: request7.method, url: request7.url, headers: request7.headers });
-      if (observed?.onRequestChunk !== void 0) {
-        request7.body.on("data", (chunk) => {
-          observed.onRequestChunk?.(chunk);
+      const incoming = new URL(request7.url, "http://127.0.0.1");
+      const path41 = target.stripPrefix !== void 0 && incoming.pathname.startsWith(target.stripPrefix) ? incoming.pathname.slice(target.stripPrefix.length) : incoming.pathname;
+      const headers = forwardableHeaders(request7.headers);
+      delete headers.host;
+      await new Promise((resolve) => {
+        const options = {
+          host: base.hostname,
+          port: base.port === "" ? void 0 : Number(base.port),
+          method: request7.method,
+          path: `${basePath}${path41}${incoming.search}`,
+          headers,
+          agent
+        };
+        const onUpstreamResponse = (upstreamResponse) => {
+          response.start(upstreamResponse.statusCode ?? HTTP_STATUS.badGateway, responseHeaders2(upstreamResponse.headers));
+          response.flush();
+          const stream = async () => {
+            try {
+              for await (const chunk of upstreamChunks(upstreamResponse)) {
+                if (request7.signal.aborted) {
+                  return;
+                }
+                await response.write(chunk);
+              }
+              response.end();
+            } catch {
+              response.destroy();
+            }
+            resolve(void 0);
+          };
+          void stream();
+        };
+        const forward = tls2 ? https4.request(options, onUpstreamResponse) : http4.request(options, onUpstreamResponse);
+        forward.on("error", (error62) => {
+          if (!response.headersSent) {
+            response.start(HTTP_STATUS.badGateway, { "Content-Type": "application/json" });
+            void response.write(JSON.stringify({ type: "error", error: { type: "api_error", message: `upstream ${target.baseUrl} unreachable (${error62.message})` } })).then(() => {
+              response.end();
+            });
+          } else {
+            response.destroy();
+          }
+          resolve(void 0);
         });
-        request7.body.on("end", () => {
-          observed.onRequestEnd?.();
+        request7.signal.addEventListener("abort", () => {
+          forward.destroy();
         });
-      }
-      await route.serve(request7, observed === void 0 ? response : teeRoutedResponse(response, observed));
+        request7.body.pipe(forward);
+        request7.body.on("error", () => {
+          forward.destroy();
+        });
+      });
     }
   };
 }
-function teeRoutedResponse(response, observer) {
-  return {
-    get headersSent() {
-      return response.headersSent;
-    },
-    start: (status, headers) => {
-      observer.onResponse(status, headers);
-      response.start(status, headers);
-    },
-    flush: () => {
-      response.flush();
-    },
-    write: async (chunk) => {
-      observer.onBodyChunk(typeof chunk === "string" ? Buffer.from(chunk, "utf8") : chunk);
-      await response.write(chunk);
-    },
-    end: () => {
-      response.end();
-      observer.onEnd();
-    },
-    destroy: () => {
-      response.destroy();
-      observer.onEnd();
+
+// src/frontdoor/providerRoute.ts
+function createProviderRouteResolver(deps) {
+  const oauthRoute = createPassthroughRoute("anthropic", { baseUrl: `https://${CONNECT_INTERCEPT_HOST}:${String(HTTPS_PORT)}`, stripPrefix: void 0, headroomUpstream: void 0 });
+  const passthroughByTarget = /* @__PURE__ */ new Map();
+  const passthroughFor = (name, target) => {
+    const key = `${name}\0${target.baseUrl}\0${target.stripPrefix ?? ""}\0${target.headroomUpstream ?? ""}`;
+    const existing = passthroughByTarget.get(key);
+    if (existing !== void 0) {
+      return existing;
     }
+    const route = createPassthroughRoute(name, target);
+    passthroughByTarget.set(key, route);
+    return route;
   };
-}
-function buildRcUserMessagePayload(uuid3, sessionId, text2) {
-  return {
-    type: "user",
-    uuid: uuid3,
-    session_id: sessionId,
-    parent_tool_use_id: null,
-    message: { role: "user", content: text2 }
-  };
-}
-function buildRcEventWriteBody(payload) {
-  return { events: [{ payload }] };
-}
-function sequenceNumsOf(body) {
-  let parsed;
-  try {
-    parsed = JSON.parse(body);
-  } catch {
-    return void 0;
-  }
-  if (typeof parsed !== "object" || parsed === null || !("results" in parsed) || !Array.isArray(parsed.results)) {
-    return void 0;
-  }
-  const sequenceNums = [];
-  const results = parsed.results;
-  for (const result of results) {
-    if (typeof result !== "object" || result === null || !("sequence_num" in result)) {
-      return void 0;
+  const resolve = (request7) => {
+    const path41 = new URL(request7.url, "http://127.0.0.1").pathname;
+    const scoped = parseProviderPath(path41);
+    if (scoped === void 0) {
+      return path41.startsWith("/v1/") ? { ok: true, route: oauthRoute } : { ok: false, status: HTTP_STATUS.notFound, message: `no such endpoint: ${path41}` };
     }
-    const sequenceNum = result.sequence_num;
-    if (typeof sequenceNum === "number") {
-      sequenceNums.push(sequenceNum);
-    } else if (typeof sequenceNum === "string" && /^[0-9]+$/.test(sequenceNum)) {
-      sequenceNums.push(Number(sequenceNum));
-    } else {
-      return void 0;
+    const { provider } = scoped;
+    let definition;
+    try {
+      definition = loadProvider(deps.providersDir, provider, deps.fs);
+    } catch (error62) {
+      if (error62 instanceof ConfigValidationError || error62 instanceof LegacyProviderFileError) {
+        return { ok: false, status: HTTP_STATUS.internalServerError, message: `provider ${provider} is invalid: ${error62 instanceof Error ? error62.message : String(error62)}` };
+      }
+      throw error62;
     }
-  }
-  return sequenceNums.length === 0 ? void 0 : sequenceNums;
-}
-function rcEventWriteResultFromAnswer(answer) {
-  if (!isSuccessful(answer.status)) {
-    if (answer.status === HTTP_STATUS.unauthorized) {
-      return { ok: false, message: `the API refused the observed Authorization bearer for this session (HTTP 401): the bearer went stale after the door last saw the session's traffic. The session's own client refreshes it on its next call, which the door will observe, so retry once Remote Control has been active again. API answer: ${answer.body}` };
+    if (definition === void 0) {
+      return { ok: false, status: HTTP_STATUS.notFound, message: `no provider named "${provider}"` };
     }
-    return { ok: false, message: `the API answered HTTP ${String(answer.status)} to the injected event: ${answer.body}` };
-  }
-  const sequenceNums = sequenceNumsOf(answer.body);
-  if (sequenceNums === void 0) {
-    return { ok: false, message: `the API accepted the injected event but its answer named no results[].sequence_num, so delivery cannot be confirmed: ${answer.body}` };
-  }
-  return { ok: true, sequenceNums };
-}
-function noOAuthCredentialResult(sessionId) {
-  return { ok: false, message: `no claude.ai OAuth bearer has been observed for session ${sessionId}: only worker calls crossed this door, and the worker JWT they carry is answered 401 on the client half. Reconnect Remote Control through this door and the create's own bearer will be observed` };
-}
-function rcWriteHeaders(credential) {
-  const headers = { "content-type": "application/json" };
-  if (credential.authorization !== void 0) {
-    headers.authorization = credential.authorization;
-  }
-  if (credential.anthropicVersion !== void 0) {
-    headers["anthropic-version"] = credential.anthropicVersion;
-  }
-  if (credential.anthropicClientPlatform !== void 0) {
-    headers["anthropic-client-platform"] = credential.anthropicClientPlatform;
-  }
-  return headers;
-}
-async function injectRcUserMessage(deps, sessionId, text2) {
-  const credential = deps.credentialOf(sessionId);
-  if (credential === void 0) {
-    return { ok: false, message: `the front door has not observed Remote Control session ${sessionId}: it may never have passed through this door, or it ended or expired (an entry lives only a bounded idle period past its last observed traffic)` };
-  }
-  if (credential.authorization === void 0) {
-    return noOAuthCredentialResult(sessionId);
-  }
-  const body = JSON.stringify(buildRcEventWriteBody(buildRcUserMessagePayload(deps.newUuid(), sessionId, text2)));
-  let answer;
-  try {
-    answer = await deps.dial.writeEvents(sessionId, rcWriteHeaders(credential), body);
-  } catch (error62) {
-    return { ok: false, message: `the door could not reach the API host to inject into session ${sessionId}: ${error62 instanceof Error ? error62.message : String(error62)}` };
-  }
-  return rcEventWriteResultFromAnswer(answer);
-}
-function buildRcControlResponsePayload(requestId, decision) {
-  const result = decision.approve ? { behavior: "allow" } : { behavior: "deny", message: decision.message ?? "" };
-  return { type: "control_response", response: { subtype: "success", request_id: requestId, response: result } };
-}
-async function answerRcControlRequest(deps, sessionId, requestId, decision) {
-  const credential = deps.credentialOf(sessionId);
-  if (credential === void 0) {
-    return { ok: false, message: `the front door has not observed Remote Control session ${sessionId}: it may never have passed through this door, or it ended or expired (an entry lives only a bounded idle period past its last observed traffic)` };
-  }
-  if (credential.authorization === void 0) {
-    return noOAuthCredentialResult(sessionId);
-  }
-  if (!deps.pendingOf(sessionId).some((pending) => pending.requestId === requestId)) {
-    return { ok: false, message: `the front door has not observed control request ${requestId} pending on session ${sessionId}: it was answered already (by this door or by an attached client), it passed its answer deadline (the protocol's permission round-trip bound), or it never passed through this door` };
-  }
-  const body = JSON.stringify(buildRcEventWriteBody(buildRcControlResponsePayload(requestId, decision)));
-  let answer;
-  try {
-    answer = await deps.dial.writeEvents(sessionId, rcWriteHeaders(credential), body);
-  } catch (error62) {
-    return { ok: false, message: `the door could not reach the API host to answer on session ${sessionId}: ${error62 instanceof Error ? error62.message : String(error62)}` };
-  }
-  const result = rcEventWriteResultFromAnswer(answer);
-  if (result.ok) {
-    deps.completePending(sessionId, requestId);
-  }
-  return result;
+    if (isCodexProvider(definition)) {
+      const codexProvider = definition;
+      return {
+        ok: true,
+        route: createCodexRouteMount(
+          { ...deps.codexPorts, loadProvider: () => ({ ok: true, config: resolveCodexConfig(codexProvider.codex) }) },
+          directOrigin(deps.directPort()),
+          provider
+        )
+      };
+    }
+    const httpProvider = definition;
+    return {
+      ok: true,
+      route: passthroughFor(`http:${provider}`, {
+        baseUrl: httpProvider.baseUrl,
+        stripPrefix: `${PROVIDER_PATH_PREFIX}${encodeURIComponent(provider)}`,
+        headroomUpstream: directOrigin(deps.directPort())
+      })
+    };
+  };
+  return async (request7) => await Promise.resolve(resolve(request7));
 }
 
 // src/usage/providerQuota.ts
@@ -68151,6 +68299,10 @@ function realFrontDoorSupervisorPorts(paths) {
       const rcDial = realRcEventDial();
       const rcInject = async (sessionId, text2) => await injectRcUserMessage({ credentialOf: rcTracker.credentialOf, dial: rcDial, newUuid: import_node_crypto12.randomUUID }, sessionId, text2);
       const rcAnswer = async (sessionId, requestId, decision) => await answerRcControlRequest({ credentialOf: rcTracker.credentialOf, pendingOf: (id) => rcTracker.pendingOf(id), completePending: rcTracker.completePending, dial: rcDial }, sessionId, requestId, decision);
+      const rcControlRequestDeps = { credentialOf: rcTracker.credentialOf, dial: rcDial, newUuid: import_node_crypto12.randomUUID };
+      const rcInterrupt = async (sessionId) => await interruptRcSession(rcControlRequestDeps, sessionId);
+      const rcSetModel = async (sessionId, model) => await setRcSessionModel(rcControlRequestDeps, sessionId, model);
+      const rcSetPermissionMode = async (sessionId, mode) => await setRcSessionPermissionMode(rcControlRequestDeps, sessionId, mode);
       realFarmFs.mkdirp(paths.frontdoorDir);
       realFarmFs.writeFilePrivate(paths.frontdoorControlTokenFile, `${rcControlToken}
 `);
@@ -68160,7 +68312,7 @@ function realFrontDoorSupervisorPorts(paths) {
         },
         log,
         mintLeaf(authority, LOOPBACK_LEAF_NAMES, /* @__PURE__ */ new Date()),
-        createRcControlHandler({ expectedToken: rcControlToken, list: rcTracker.list, statusOf: rcTracker.statusOf, pendingOf: rcTracker.pendingOf, inject: rcInject, answer: rcAnswer })
+        createRcControlHandler({ expectedToken: rcControlToken, list: rcTracker.list, statusOf: rcTracker.statusOf, pendingOf: rcTracker.pendingOf, inject: rcInject, answer: rcAnswer, interrupt: rcInterrupt, setModel: rcSetModel, setPermissionMode: rcSetPermissionMode })
       );
       const handle = await listenFrontDoor(server, { ...preferredPort === void 0 ? {} : { preferredPort }, ca: authority.certPem, onError: onListenerError("provider") });
       return {
@@ -68352,7 +68504,7 @@ function registerFrontDoorCommand(program2, deps) {
     ["agent-shim frontdoor status", "agent-shim frontdoor status --json"]
   );
   const rc = withExamples(
-    frontdoor.command("rc").description("Observe the Remote Control sessions passing through the front door, send a prompt into one, and answer its pending control requests."),
+    frontdoor.command("rc").description("Observe the Remote Control sessions passing through the front door, send a prompt into one, answer its pending control requests, and steer one with the client half's own control requests (interrupt, model, permission mode)."),
     ["agent-shim frontdoor rc list", "agent-shim frontdoor rc pending"]
   );
   withExamples(
@@ -68431,6 +68583,54 @@ function registerFrontDoorCommand(program2, deps) {
       'agent-shim frontdoor rc answer --session cse_00000000-0000-4000-8000-000000000000 --request req_00000000-0000-4000-8000-000000000000 --deny --text "not today"'
     ]
   );
+  withExamples(
+    rc.command("interrupt").description("Interrupt one observed Remote Control session's running turn, as an attached client's stop button would. Queued commands survive the interrupt.").requiredOption("--session <id>", "The cse_ session id, as `frontdoor rc list` shows it.").option("--json", "Print the delivery result as JSON.").action(async (options) => {
+      const result = await frontDoorRcControlFromState(realFarmFs, paths).interruptSession(options.session);
+      if (!result.ok) {
+        throw new Error(result.message);
+      }
+      if (options.json === true) {
+        printJson({ session: options.session, sequenceNums: result.sequenceNums });
+        return;
+      }
+      console.log(`interrupted ${options.session}: sequence_num ${result.sequenceNums.join(", ")}`);
+    }),
+    ["agent-shim frontdoor rc interrupt --session cse_00000000-0000-4000-8000-000000000000"]
+  );
+  withExamples(
+    rc.command("set-model").description("Set the model one observed Remote Control session's subsequent turns use, as an attached client's model picker would.").requiredOption("--session <id>", "The cse_ session id, as `frontdoor rc list` shows it.").requiredOption("--model <model>", "The model id to switch the session to.").option("--json", "Print the delivery result as JSON.").action(async (options) => {
+      const result = await frontDoorRcControlFromState(realFarmFs, paths).setModel(options.session, options.model);
+      if (!result.ok) {
+        throw new Error(result.message);
+      }
+      if (options.json === true) {
+        printJson({ session: options.session, model: options.model, sequenceNums: result.sequenceNums });
+        return;
+      }
+      console.log(`set ${options.session} to model ${options.model}: sequence_num ${result.sequenceNums.join(", ")}`);
+    }),
+    ["agent-shim frontdoor rc set-model --session cse_00000000-0000-4000-8000-000000000000 --model claude-opus-5-5"]
+  );
+  withExamples(
+    rc.command("set-permission-mode").description("Set one observed Remote Control session's permission mode, as an attached client's mode switcher would.").requiredOption("--session <id>", "The cse_ session id, as `frontdoor rc list` shows it.").requiredOption("--mode <mode>", `The permission mode to set; one of the SDK's own modes (${RC_PERMISSION_MODES.join(", ")}).`).option("--json", "Print the delivery result as JSON.").action(async (options) => {
+      if (!isRcPermissionMode(options.mode)) {
+        throw new UsageError(`--mode must be one of the SDK's own permission modes (${RC_PERMISSION_MODES.join(", ")}), not "${options.mode}"`);
+      }
+      const result = await frontDoorRcControlFromState(realFarmFs, paths).setPermissionMode(options.session, options.mode);
+      if (!result.ok) {
+        throw new Error(result.message);
+      }
+      if (options.json === true) {
+        printJson({ session: options.session, mode: options.mode, sequenceNums: result.sequenceNums });
+        return;
+      }
+      console.log(`set ${options.session} to permission mode ${options.mode}: sequence_num ${result.sequenceNums.join(", ")}`);
+    }),
+    [
+      "agent-shim frontdoor rc set-permission-mode --session cse_00000000-0000-4000-8000-000000000000 --mode plan",
+      "agent-shim frontdoor rc set-permission-mode --session cse_00000000-0000-4000-8000-000000000000 --mode acceptEdits"
+    ]
+  );
   program2.command("__frontdoor-supervisor", { hidden: true }).description("Internal: serve the front-door routing listeners. Started by the launcher; never run by hand.").allowUnknownOption().action(async () => {
     const idleShutdownMinutes = readGlobalConfig(paths)?.frontdoor?.idleShutdownMinutes ?? FRONTDOOR_DEFAULT_IDLE_SHUTDOWN_MINUTES;
     process.on("SIGTERM", () => {
@@ -69492,7 +69692,7 @@ function ensureFrontDoor(params) {
           ports.stopSupervisor(supervisorPid);
           while (ports.isRunning(supervisorPid)) {
             if (ports.now() >= deadline) {
-              throw new FrontDoorStartError(`agent-shim: the front door (pid ${String(supervisorPid)}, protocol ${String(state.protocol ?? 0)}) is older than this launcher (protocol ${String(FRONT_DOOR_PROTOCOL)}) and did not exit when asked. Daemon log: ${paths.frontdoorLogPath}`);
+              throw new FrontDoorStartError(`the front door (pid ${String(supervisorPid)}, protocol ${String(state.protocol ?? 0)}) is older than this launcher (protocol ${String(FRONT_DOOR_PROTOCOL)}) and did not exit when asked. Daemon log: ${paths.frontdoorLogPath}`);
             }
             ports.sleep(FRONTDOOR_LAUNCHER_POLL_MS);
           }
@@ -69506,13 +69706,13 @@ function ensureFrontDoor(params) {
         }
         lastRejection = `the listener on 127.0.0.1:${String(state.port)} (recorded for pid ${String(supervisorPid)}) failed authentication: ${verdict.reason}`;
         if (spawned) {
-          throw new FrontDoorStartError(`agent-shim: ${lastRejection}; refusing to send this session's credentials to it. Daemon log: ${paths.frontdoorLogPath}`);
+          throw new FrontDoorStartError(`${lastRejection}; refusing to send this session's credentials to it. Daemon log: ${paths.frontdoorLogPath}`);
         }
         distrusted.add(supervisorPid);
         continue;
       }
       if (state?.lastError !== void 0) {
-        throw new FrontDoorStartError(`agent-shim: the front door reported a fatal error and is not serving: ${state.lastError} (daemon log: ${paths.frontdoorLogPath})`);
+        throw new FrontDoorStartError(`the front door reported a fatal error and is not serving: ${state.lastError} (daemon log: ${paths.frontdoorLogPath})`);
       }
     } else if (!spawned) {
       ports.fs.mkdirp(paths.frontdoorDir);
@@ -69532,7 +69732,7 @@ function ensureFrontDoor(params) {
     if (ports.now() >= deadline) {
       const lastError = state?.lastError;
       throw new FrontDoorStartError(
-        `agent-shim: the front door did not become ready within ${String(FRONTDOOR_START_TIMEOUT_MS)}ms` + (lastError === void 0 ? "" : ` (last error: ${lastError})`) + (lastRejection === void 0 ? "" : ` (${lastRejection})`) + `. Daemon log: ${paths.frontdoorLogPath}`
+        `the front door did not become ready within ${String(FRONTDOOR_START_TIMEOUT_MS)}ms` + (lastError === void 0 ? "" : ` (last error: ${lastError})`) + (lastRejection === void 0 ? "" : ` (${lastRejection})`) + `. Daemon log: ${paths.frontdoorLogPath}`
       );
     }
     ports.sleep(FRONTDOOR_LAUNCHER_POLL_MS);