cartethyia 2.5.1 → 2.5.2

package/dist/dashboard/precompressed-assets.json

@@ -1,75 +1,73 @@
 {
-  "count": 117,
+  "count": 114,
   "assets": [
-    "assets\\AccountCooldown-ChpdzxRH.js",
-    "assets\\BannedPage-ChqnTRpZ.js",
-    "assets\\CliToolDetailPage-Bb9CNuoh.js",
-    "assets\\CliToolsPage-BXUaRCQQ.js",
-    "assets\\CombosPage-CisNZOUt.js",
-    "assets\\ConsoleLogPage-BOpI_LOH.js",
-    "assets\\CustomizationPage-DAkdvJ4k.js",
-    "assets\\HealthEventsModal-DeT-VXHd.js",
-    "assets\\LoginPage-CytxSeGP.js",
-    "assets\\ModelPicker-oQ-SDXp8.js",
-    "assets\\OverviewPage-CU7S1wJs.js",
-    "assets\\ProviderDetailPage-DLm2baot.js",
+    "assets\\AccountCooldown-Bjo92Qat.js",
+    "assets\\BannedPage-MsQaeQTs.js",
+    "assets\\CliToolDetailPage-BO9nKg9w.js",
+    "assets\\CliToolsPage-DfWHTJ7v.js",
+    "assets\\CombosPage-BrCBQDAc.js",
+    "assets\\ConsoleLogPage-C6Uh33er.js",
+    "assets\\CustomizationPage-8aS9hyJu.js",
+    "assets\\HealthEventsModal-qomXThxX.js",
+    "assets\\LoginPage-C8hKyXBe.js",
+    "assets\\ModelPicker-CWkTUtpX.js",
+    "assets\\OverviewPage-C-ExCy1V.js",
+    "assets\\ProviderDetailPage-tr811uaF.js",
     "assets\\ProviderIcon-CmfzxpVM.js",
-    "assets\\ProvidersPage-DOXfuzfL.js",
-    "assets\\ProxyPage-wvk0ciQN.js",
-    "assets\\QuotaPage-Cn_fcUHE.js",
-    "assets\\SettingsPage-8-eVadhc.js",
-    "assets\\SetupPage-uEIXPyGO.js",
-    "assets\\SortableList-DCY0TPTZ.js",
-    "assets\\StudioPage-DqK5E26W.js",
+    "assets\\ProvidersPage-BS9IEpvv.js",
+    "assets\\ProxyPage-Rn_qXScb.js",
+    "assets\\QuotaPage-BihkgQSq.js",
+    "assets\\SettingsPage-DhiEjm6T.js",
+    "assets\\SetupPage-CXjUlfqr.js",
+    "assets\\SortableList-C-_oD3F2.js",
+    "assets\\StudioPage-u9IxmYOI.js",
     "assets\\ToolIcon-K1ckcDKg.js",
-    "assets\\UsagePage-38JfiZ0H.js",
-    "assets\\api-keys-BmDbsior.js",
-    "assets\\app-BbpSarVV.css",
-    "assets\\app-C-Y4oZT0.js",
+    "assets\\UsagePage-BEVLVrwP.js",
+    "assets\\api-keys-uNywYlfv.js",
+    "assets\\app-CafWtVXA.js",
+    "assets\\app-DxivpfYG.css",
     "assets\\arrow-left-CpBxkoxI.js",
     "assets\\arrow-right-Dl5yKnp8.js",
-    "assets\\assert-BHfaei-X.js",
+    "assets\\assert-NHwYq95t.js",
     "assets\\backup-file-gdKIlg8U.js",
-    "assets\\badge-DpXT4Ixt.js",
-    "assets\\banner-CSAAWLJv.js",
+    "assets\\badge-6uzDDvqs.js",
+    "assets\\banner-4_WNg2WZ.js",
     "assets\\brain-Cwed_72z.js",
-    "assets\\card-DEhRXXw4.js",
-    "assets\\check-D69FzdvC.js",
+    "assets\\card--AtFedAq.js",
     "assets\\chevron-right-BXIy5l3h.js",
     "assets\\circle-alert-CntYHV5v.js",
     "assets\\circle-check-BU3v_mFW.js",
-    "assets\\cli-tools-B0wBq-RL.js",
-    "assets\\clipboard-button-DOo6EU8O.js",
+    "assets\\cli-tools-B3e7dx3N.js",
+    "assets\\clipboard-button-NreUx6c8.js",
     "assets\\cog-CdWhsajs.js",
-    "assets\\copy-ngmQ9zcZ.js",
-    "assets\\dialog-BvQeBMfP.js",
+    "assets\\dialog-BtpsJU98.js",
     "assets\\dialog-actions-B1axpEg7.js",
     "assets\\download-A0SW9OCW.js",
     "assets\\download-dRFo5_Wu.js",
-    "assets\\drawer-CMwPXwQB.js",
-    "assets\\entry--yj84zk3.js",
-    "assets\\entry-D4O2229X.js",
-    "assets\\entry-DKvr5Q9K.js",
+    "assets\\drawer-WwwtzihF.js",
+    "assets\\entry-Dj9AR0gY.js",
+    "assets\\entry-TJIye_jT.js",
+    "assets\\entry-jy9_4-Ke.js",
     "assets\\eye-C_hawfH4.js",
     "assets\\eye-off-Bk5g2luF.js",
     "assets\\fingerprint-pattern-BWuHtbW4.js",
     "assets\\gauge-BbIMy7MB.js",
-    "assets\\github-badge-zliLvBwr.js",
+    "assets\\github-badge-D_eM3IgG.js",
     "assets\\image-BPaouViG.js",
-    "assets\\index-CcD1eSJ6.js",
-    "assets\\inline-D1IlZZ8H.js",
-    "assets\\input-BpVZdrbc.js",
+    "assets\\index-DCBtROoK.js",
+    "assets\\inline-BcNGF8Gr.js",
+    "assets\\input-BG41et9G.js",
     "assets\\jsx-runtime-CXUMngI_.js",
     "assets\\key-round-UkavsGxp.js",
     "assets\\layers-2-glBbjl.js",
-    "assets\\layout-BioLW7gN.js",
-    "assets\\list-row-CwVcGAIc.js",
-    "assets\\live-yfEJFF9T.js",
+    "assets\\layout-C8mer_Ak.js",
+    "assets\\list-row-Gh_W4OR_.js",
+    "assets\\live-BJGYRBnR.js",
     "assets\\log-in-BmRjy60c.js",
     "assets\\message-circle-CCxGwRvv.js",
-    "assets\\model-bans-CT-TxSNX.js",
+    "assets\\model-bans-DeVLDA7I.js",
     "assets\\mutation-BkoLM5Ba.js",
-    "assets\\numbers-CFL4_Dqc.js",
+    "assets\\numbers-Bs4LOOuf.js",
     "assets\\pencil-768ysRAr.js",
     "assets\\plus-DIdX_g-x.js",
     "assets\\power-off-Yjw9GMJh.js",
@@ -96,26 +94,25 @@
     "assets\\refresh-cw-BqJFk4sU.js",
     "assets\\rotate-ccw-CufcqITi.js",
     "assets\\route-CNSNj9Zm.js",
-    "assets\\routing-Cs6jl49L.js",
+    "assets\\routing-CcusqXA7.js",
     "assets\\scaling-nWE4Cx8f.js",
     "assets\\search-JOKus9rb.js",
-    "assets\\select-XPJ-dIw3.js",
-    "assets\\settings-CfcTcOyU.js",
+    "assets\\select-DsX5QT8K.js",
+    "assets\\settings-mpmXTgUa.js",
     "assets\\shield-check-DVS0Foqh.js",
     "assets\\sparkles-BRaRUxAU.js",
-    "assets\\stack-C9_uUjaA.js",
-    "assets\\state-DA0B95UQ.js",
+    "assets\\stack-DwLmjUFK.js",
+    "assets\\state-DYdQmdAl.js",
     "assets\\stream-retry-5QnVuSSo.js",
-    "assets\\switch-Cittxy-x.js",
+    "assets\\switch-CidSfbG7.js",
     "assets\\terminal-Bd4ee8TA.js",
-    "assets\\toast-CNt_jzO4.js",
     "assets\\tokens-DDxMbSRL.js",
     "assets\\trash-Cppn5c3R.js",
     "assets\\use-clipboard-B0Sy03fE.js",
     "assets\\use-presence-BSZEBx7U.js",
     "assets\\use-reduced-motion-C4B0R6Sz.js",
     "assets\\use-timeout-BwcBBRrT.js",
-    "assets\\useMutation-BQKMcJ1H.js",
+    "assets\\useMutation-w4u4CVue.js",
     "assets\\wrench-B6E1oEuY.js",
     "index.html"
   ]

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "cartethyia",
-  "version": "2.5.1",
+  "version": "2.5.2",
   "description": "A powerful, self-hosted reverse proxy for OpenAI- and Anthropic-compatible AI clients, powered by native Bun and Elysia. It serves both protocols from a single server, routes every model across any configured provider, and translates requests and responses in real time — streaming and prompt caching included. Underneath it runs a full delivery engine: per-account health tracking, quota and cooldown enforcement, automatic failover across pools and providers, usage accounting, and telemetry. Point OpenCode, Cline, Claude Code, Codex, or any compatible client at Cartethyia and it keeps its native protocol while the gateway absorbs every provider-specific difference behind it. Runs on embedded SQLite or external PostgreSQL with optional Redis coordination, ships as a global CLI with a system-tray console, and needs only Bun 1.4+ alongside Node.js/npm.",
   "license": "GPL-3.0-only",
   "type": "module",

package/src/boot/app.ts

@@ -15,6 +15,7 @@ import { GatewayError, publicGatewayErrorBody } from "../protocol/gateway-error"
 import { shutdownError, shutdownNotice } from "../transport/shutdown-notice";
 import type { CanonicalAdapter } from "../transport/contracts";
 import type { ApiKeyAuthorizationSnapshot } from "../security/api-key-auth";
+import { unknownApiKeyError } from "../security/api-key-auth";
 import { getDbHandle } from "../persistence/boot";
 import { isPgHandle } from "../persistence/db-pg";
 import { resolveRedisClient } from "../persistence/redis";
@@ -408,7 +409,7 @@ export function createGatewayApp(deps: GatewayAppDeps) {
     const handleModelsList = async ({ request }: { request: Request }): Promise<Response> => {
       const state = requestStateStore.require(request);
       const auth = state.authorization;
-      if (!auth) throw new GatewayError("invalid_request", 401, "This API key is unknown, revoked, or expired. Issue a new key and send it as: Authorization: Bearer <key>.");
+      if (!auth) throw unknownApiKeyError();
       const data = await queryAllowedModels(auth);
       return new Response(JSON.stringify({ object: "list", data }), {
         headers: {
@@ -431,7 +432,7 @@ export function createGatewayApp(deps: GatewayAppDeps) {
     }): Promise<Response> => {
       const state = requestStateStore.require(request);
       const auth = state.authorization;
-      if (!auth) throw new GatewayError("invalid_request", 401, "This API key is unknown, revoked, or expired. Issue a new key and send it as: Authorization: Bearer <key>.");
+      if (!auth) throw unknownApiKeyError();
       const raw = params?.["*"] ?? params?.id ?? "";
       const targetId = new URL(request.url).searchParams.get("id") ?? raw;
       const found = await publicModelStore.getPublicModelDetail(

package/src/console/observability/contracts.ts

@@ -45,7 +45,17 @@ export interface SystemHealthResponse {
    * gateway itself grew.
    */
   database_in_process: boolean;
-  cpu_percent: number;
+  /**
+   * `null` when the platform does not report it — there is no `loadavg` on
+   * Windows and Node hands back a zeroed tuple rather than failing, so on
+   * Windows this is always `null` rather than a confident-looking `0`.
+   *
+   * Nullable rather than `NaN`: `NaN` is not a JSON value and serializes to
+   * `null` anyway, which means a client validating the field as a number
+   * rejects the *whole* health payload. One unavailable metric then reads as
+   * every metric being unavailable.
+   */
+  cpu_percent: number | null;
   cpu_cores: number;
   pid: number;
   platform: string;

package/src/console/observability/store.ts

@@ -330,12 +330,15 @@ export class DrizzleObservabilityStore implements ObservabilityStore {
     // syscall and Node reports a zeroed tuple rather than failing. Divided by
     // cores that is a confident-looking 0.0% on a busy gateway, which is worse
     // than saying nothing: an operator reads it as "idle" and stops looking.
-    // Reported as unavailable instead of as a measurement.
-    const load = loadavg()[0] ?? 0;
-    const cpuPercent =
-      process.platform === "win32" || load === 0
-        ? Number.NaN
-        : Math.round((load / Math.max(cpus().length, 1)) * 10000) / 100;
+    // Reported as null instead of as a measurement.
+    //
+    // A real zero load is *not* the same thing and is reported as zero: an
+    // idle machine genuinely has nothing queued, and collapsing that into
+    // "unavailable" would hide a number the platform did supply.
+    const cpuPercent: number | null =
+      process.platform === "win32"
+        ? null
+        : Math.round(((loadavg()[0] ?? 0) / Math.max(cpus().length, 1)) * 10000) / 100;
 
     let databaseHealthy = true;
     let total = 0;

package/src/providers/discovery/openrouter-free-roster.ts

@@ -2,7 +2,7 @@
  * The free tier shared by the OpenRouter-backed providers.
  *
  * Cline, Kilo Code and OpenRouter serve one model catalog: the same 469 ids,
- * and the same 17 of them carrying a `:free` suffix. Verified against all three
+ * and the same 9 of them carrying a `:free` suffix. Verified against all three
  * live listings — every id below is present under `openrouter`, `kilo` and
  * `cline` — so this roster is a catalog fact, not a per-provider guess, and it
  * lives in one place rather than being restated three times.
@@ -37,10 +37,10 @@ interface FreeRow {
 }
 
 /**
- * The 17 `:free` ids, with the limits the catalog states for each.
+ * The 9 `:free` ids, with the limits the catalog states for each.
  *
  * Every row declares `reasoning`: `supported_parameters` lists it on all
- * seventeen. `toolCall` is `true` unless stated otherwise, because a row that
+ * nine. `toolCall` is `true` unless stated otherwise, because a row that
  * advertises tools must keep them — a false `toolCall` makes the preflight
  * strip `tools` from the request, which is a wrong capability rather than a
  * conservative one.
@@ -48,8 +48,6 @@ interface FreeRow {
 const FREE_ROWS: readonly FreeRow[] = [
   { id: "cohere/north-mini-code:free", ctx: 256_000, out: 64_000 },
   { id: "dots-studio/dots-3-note-preview:free", ctx: 512_000, out: 460_800, vision: true },
-  { id: "google/gemma-4-26b-a4b-it:free", ctx: 262_144, out: 32_768, vision: true },
-  { id: "google/gemma-4-31b-it:free", ctx: 262_144, out: 32_768, vision: true },
   { id: "liquid/lfm-2.5-2.6b:free", ctx: 65_536, out: 8_192 },
   { id: "minimax/minimax-m3.1-flash:free", ctx: 1_000_000, out: 524_288, vision: true },
   {
@@ -58,7 +56,6 @@ const FREE_ROWS: readonly FreeRow[] = [
     out: 65_536,
     vision: true,
   },
-  { id: "nvidia/nemotron-3-super-120b-a12b:free", ctx: 262_144, out: 235_929 },
   { id: "nvidia/nemotron-3-ultra-550b-a55b:free", ctx: 1_000_000, out: 65_536 },
   {
     id: "nvidia/nemotron-3.5-content-safety:free",
@@ -69,11 +66,6 @@ const FREE_ROWS: readonly FreeRow[] = [
   },
   { id: "nvidia/nemotron-3.5-lightning:free", ctx: 1_000_000, out: 65_536 },
   { id: "nvidia/nemotron-3.5-super-vl:free", ctx: 1_000_000, out: 131_072, vision: true },
-  { id: "poolside/laguna-s-2.1:free", ctx: 262_144, out: 32_768 },
-  { id: "poolside/laguna-xs-2.1:free", ctx: 262_144, out: 32_768 },
-  { id: "thinkingmachines/inkling-small:free", ctx: 1_048_576, out: 262_144, vision: true },
-  { id: "thinkingmachines/inkling:free", ctx: 1_048_576, out: 262_144, vision: true },
-  { id: "xingchen-agi/xing4.0-29b-a4b:free", ctx: 262_144, out: 235_929 },
 ];
 
 /** Builds this roster for one provider, since each spells its own endpoint. */

package/src/providers/discovery/probe-phases.ts

@@ -37,6 +37,7 @@ import { resolveByokWireProfile } from "../operations/byok-wire-profile";
 import { recordAccountFailure, recordAccountSuccess } from "../operations/account-health-service";
 import { buildCapabilityProfile } from "../../transport/routing/route-catalog";
 import { classifyUpstreamFailure } from "../../transport/failure-policy";
+import { terminalFailure } from "../../transport/dispatch/attempt-finalize";
 import { GatewayError } from "../../protocol/gateway-error";
 import type { ModelDefinition } from "../provider-model-definition";
 import type { ProviderAdapter, ProviderId } from "../provider-contracts";
@@ -579,13 +580,33 @@ export async function recordProbeHealth(args: {
   readonly invalidator: { invalidate(): unknown } | undefined;
   readonly accountId: string | undefined;
   readonly dispatchError: unknown;
+  /**
+   * The probe's canonical events, when there are any.
+   *
+   * Needed because some adapters deliver a refusal as a terminal event rather
+   * than as a thrown error — Cursor's `resource_exhausted` is the case — so
+   * `dispatchError` stays `undefined` for a Run the upstream refused. Without
+   * the events, that account looked like a success and was recovered.
+   */
+  readonly events?: readonly CanonicalEvent[] | undefined;
   readonly modelId: string;
   readonly upstreamStatusCode: number | undefined;
 }): Promise<void> {
   const { db, invalidator, accountId, dispatchError, modelId, upstreamStatusCode } = args;
-  if (dispatchError !== undefined && accountId) {
+  // A terminal `failed` state is written only by the upstream decoders, so it
+  // is the upstream refusing — the same thing a thrown error would have meant.
+  const terminal = args.events?.find((event) => event.type === "terminal");
+  // Reconstructed through the very function the live dispatch path uses, so a
+  // refusal carries the same code, status, and health classification in both.
+  // Hand-rolling a category here is how the two paths drifted apart.
+  const refusedUpstream =
+    terminal?.type === "terminal" && terminal.state === "failed"
+      ? terminalFailure(terminal)
+      : undefined;
+  const failure = dispatchError ?? refusedUpstream;
+  if (failure !== undefined && accountId) {
     const failureEvidence = {
-      ...classifyUpstreamFailure(dispatchError),
+      ...classifyUpstreamFailure(failure),
       modelId,
       ...(upstreamStatusCode === undefined ? {} : { statusCode: upstreamStatusCode }),
     };
@@ -593,7 +614,7 @@ export async function recordProbeHealth(args: {
     // already classified as `rate_limit_transient` with a real cooldown by
     // `classifyAccountError`, so writing a status here only clobbered that
     // cooldown with a state nothing recovers from.
-    await recordAccountFailure(db, accountId, dispatchError, failureEvidence)
+    await recordAccountFailure(db, accountId, failure, failureEvidence)
       .then((classification) => {
         if (classification?.mutatesAccount) void invalidator?.invalidate();
       })
@@ -603,7 +624,7 @@ export async function recordProbeHealth(args: {
   // (a cooling account flips back to active instead of staying stale).
   // recordAccountSuccess is a no-op write for already-healthy accounts and
   // never throws.
-  if (dispatchError === undefined && accountId) {
+  if (failure === undefined && accountId) {
     await recordAccountSuccess(db, accountId)
       .then((recovered) => {
         if (recovered) void invalidator?.invalidate();
@@ -703,7 +724,23 @@ export function computeProbeVerdict(args: {
     errorMessage = `${wireFamily} — ${tagged}${upstreamReq ? ` [req ${upstreamReq}]` : ""}`;
 
   } else if (terminal?.type === "terminal" && terminal.state !== "complete") {
-    errorMessage = terminal.stop_reason ?? "Model probe failed";
+    // Read the terminal's own detail before falling back to the stop reason.
+    //
+    // `stop_reason` is a canonical one-word label — "error" — so reporting it
+    // alone turned a Cursor quota refusal into a toast whose entire body was
+    // the word "error". The upstream sentence an operator needs is in
+    // `stop_details`, which is where the adapter parks it and where the live
+    // dispatch path already reads it (see `terminalFailure` in
+    // `attempt-finalize.ts`). The probe path disagreed with the dispatch path
+    // about the same provider response.
+    const detail = terminal.stop_details;
+    const message =
+      typeof detail?.["message"] === "string" && detail["message"].trim().length > 0
+        ? detail["message"].trim()
+        : undefined;
+    const code = typeof detail?.["code"] === "string" ? detail["code"] : undefined;
+    const tag = code === undefined ? "" : ` (${code})`;
+    errorMessage = `${message ?? terminal.stop_reason ?? "Model probe failed"}${tag}`;
   } else {
     errorMessage = undefined;
   }

package/src/providers/discovery/probing-service.ts

@@ -274,7 +274,13 @@ export class ProviderProbingService {
       // The same wrapper a real dispatch uses, so the probe reads the model the
       // upstream named from the raw bytes rather than from a synthesized event.
       const probeFetch = createProbeFetch(
-        captureProviderExchange(outbound.fetch, probeCapture, false),
+        // Body capture on, unlike a live dispatch: a probe is one-shot and
+        // operator-initiated, so it exists to be inspected. With it off, the
+        // provider-response tee resolved to null and every probe row reported
+        // the middle two stages as absent — a constant, not a measurement,
+        // which made the stage markers useless for the diagnosis they exist
+        // for. The 256 KiB cap in the tee bounds the cost.
+        captureProviderExchange(outbound.fetch, probeCapture, true),
       );
       try {
         if (serviceKind === "websearch") {
@@ -435,6 +441,11 @@ export class ProviderProbingService {
       invalidator: this.snapshotInvalidator,
       accountId,
       dispatchError,
+      // Passed so a refusal delivered as a terminal event — not as a thrown
+      // error — still reaches the health machine. Without it, Cursor's
+      // `resource_exhausted` left `dispatchError` undefined and the probe
+      // recovered an exhausted account.
+      ...(events === undefined ? {} : { events }),
       modelId,
       upstreamStatusCode,
     });
@@ -496,12 +507,24 @@ export class ProviderProbingService {
       ...(tokensPerSec !== undefined ? { tokensPerSec } : {}),
     });
     if (this.telemetryBuffer && payloadCaptureEnabled) {
+      // All four surfaces, so the row's stage markers mean the same thing here
+      // as they do on a live request: which hop actually produced bytes.
+      const providerRequest = probeCapture?.request ?? null;
+      const providerResponse = await probeCapture?.response.catch(() => null) ?? null;
       await this.payloadCapture
         .capture({
           tenantId,
           requestId,
           requestBody: capturedRequest,
-          responseBody: events,
+          // `events` is what the *client* receives, so it belongs in the client
+          // surface. Passing it as `responseBody` lit the client bit on probes
+          // whose event list was empty, over a body that was never captured.
+          // The legacy alias is explicitly absent here; `null` leaves bit 8 to
+          // be decided by the real client body alone.
+          responseBody: null,
+          ...(events === undefined ? {} : { clientResponseBody: events }),
+          ...(providerRequest === null ? {} : { providerRequestBody: providerRequest }),
+          ...(providerResponse === null ? {} : { providerResponseBody: providerResponse }),
           scope: "tenant",
           tenantOptIn: true,
         })

package/src/providers/integrations/claude/claude.ts

@@ -96,7 +96,9 @@ export const CLAUDE_MODELS: readonly ModelDefinition[] = [
   claudeMessagesModel("claude-sonnet-5", 1_000_000, 128_000, true),
   claudeMessagesModel("claude-sonnet-4-6", 1_000_000, 128_000, true),
   claudeMessagesModel("claude-opus-4-5", 200_000, 64_000, true),
-  claudeMessagesModel("claude-sonnet-4-5", 1_000_000, 64_000, true),
+  // 200K: the 4.5 trio predates the million-token window, which arrived with
+  // Opus 4.6. Only this row claimed 1M while its own siblings said 200K.
+  claudeMessagesModel("claude-sonnet-4-5", 200_000, 64_000, true),
   claudeMessagesModel("claude-haiku-4-5", 200_000, 64_000, true),
 ];
 

package/src/providers/integrations/cloudflareai/cloudflareai-models.ts

@@ -59,7 +59,9 @@ export const CLOUDFLAREAI_MODELS: readonly ModelDefinition[] = [
   ["claude-opus-4.7", 1_000_000, 128_000] as const,
   ["claude-opus-4.8", 1_000_000, 128_000] as const,
   ["claude-opus-5", 1_000_000, 128_000] as const,
-  ["claude-sonnet-4.5", 1_000_000, 64_000] as const,
+  // 200K, matching the other two 4.5 rows: the million-token window starts at
+  // Opus 4.6, so the 4.5 trio is 200K across the board.
+  ["claude-sonnet-4.5", 200_000, 64_000] as const,
   ["claude-sonnet-4.6", 1_000_000, 128_000] as const,
   ["claude-sonnet-5", 1_000_000, 128_000] as const,
 ].map(cloudflareaiModel);

package/src/providers/integrations/inferhub.ts

@@ -124,7 +124,9 @@ const INFERHUB_MODELS_RAW: readonly {
   { id: "cc/claude-opus-4-8", contextLimit: 1000000, outputLimit: 128000 },
   { id: "cc/claude-opus-5", contextLimit: 1000000, outputLimit: 128000 },
   { id: "cc/claude-sonnet-4-5", contextLimit: 200000, outputLimit: 64000 },
-  { id: "cc/claude-sonnet-4-6", contextLimit: 1000000, outputLimit: 64000 },
+  // 128K: Sonnet 4.6 is in the 1M/128K generation, the same as the Opus 4.6
+  // row directly above it and every other 4.6+ row here.
+  { id: "cc/claude-sonnet-4-6", contextLimit: 1000000, outputLimit: 128000 },
   { id: "cc/claude-sonnet-5", contextLimit: 1000000, outputLimit: 128000 },
   // cb/ — CodeBuddy (12 models)
   { id: "cb/claude-opus-4.6", contextLimit: 1000000, outputLimit: 128000 },

package/src/providers/integrations/kilo/kilo.ts

@@ -87,7 +87,6 @@ export const KILO_MODELS: readonly ModelDefinition[] = [
   // window the router may select into rather than one model's.
   kiloModel("kilo-auto/free", 256_000, 32_768, { reasoning: true }),
   kiloModel("kilo-auto/small", 262_144, 32_768, { vision: true, reasoning: true }),
-  kiloModel("openrouter/auto", 2_000_000, 128_000, { reasoning: true }),
 ];
 
 /**

package/src/providers/integrations/kiro/kiro-catalog.ts

@@ -71,9 +71,15 @@ export const KIRO_MODELS: readonly ModelDefinition[] = [
   kiroModel({ id: "claude-opus-4.5", ctx: 200_000, out: 64_000, vision: true, reasoning: true, toolCall: true }),
   kiroModel({ id: "claude-sonnet-5", ctx: 1_000_000, out: 128_000, vision: true, reasoning: true, toolCall: true }),
   kiroModel({ id: "claude-sonnet-5.5", ctx: 1_000_000, out: 128_000, vision: true, reasoning: true, toolCall: true }),
-  kiroModel({ id: "claude-sonnet-4.5", ctx: 1_000_000, out: 64_000, vision: true, reasoning: true, toolCall: true }),
+  // 200K, not the 1M the 1M-window models use: Sonnet 4.5 predates it. The
+  // million-token window arrived with Opus 4.6 and the 5.x generation; the 4.5
+  // trio is 200K, and Opus and Haiku here already say so.
+  kiroModel({ id: "claude-sonnet-4.5", ctx: 200_000, out: 64_000, vision: true, reasoning: true, toolCall: true }),
   kiroModel({ id: "claude-haiku-4.5", ctx: 200_000, out: 64_000, vision: true, reasoning: true, toolCall: true }),
-  kiroModel({ id: "claude-haiku-5.5", ctx: 200_000, out: 64_000, vision: true, reasoning: true, toolCall: true }),
+  // 1M/128K, not the 200K/64K of the 4.5 row above it: Haiku moved to the
+  // million-token window and the doubled output ceiling with the rest of the
+  // 5.x generation, and this line had been copied from its predecessor.
+  kiroModel({ id: "claude-haiku-5.5", ctx: 1_000_000, out: 128_000, vision: true, reasoning: true, toolCall: true }),
   kiroModel({ id: "gpt-5.5", ctx: 272_000, out: 128_000, reasoning: true, toolCall: true }),
   kiroModel({ id: "gpt-5.6-sol", ctx: 272_000, out: 128_000, reasoning: true, toolCall: true }),
   kiroModel({ id: "gpt-5.6-terra", ctx: 272_000, out: 128_000, reasoning: true, toolCall: true }),

package/src/providers/integrations/openrouter/provider.ts

@@ -24,21 +24,11 @@ const OPENROUTER_REQUIRED_HEADERS: Readonly<Record<string, string>> = {
  * served by the native System One route, never by the chat surface.
  */
 export const OPENROUTER_MODELS: readonly ModelDefinition[] = [
-  // The router, and only the router. A hand-kept catalog of specific ids was a
-  // snapshot of one afternoon: OpenRouter adds and pulls models within days, so
-  // every committed row outside this one drifts out of truth. Discovery is the
-  // authority, and the free roster below is the offline floor.
-  defineModel({
-    id: "openrouter/auto",
-    providerId: OPENROUTER_PROVIDER_ID,
-    wireFamily: "chat",
-    endpoint: "/chat/completions",
-    // The catalog publishes no limits for a router (pricing is -1, meaning
-    // "decided at dispatch"), so this is the largest window it may select into.
-    ctx: 2_000_000,
-    out: 128_000,
-    reasoning: true,
-  }),
+  // No committed chat rows. OpenRouter adds and pulls models within days, so a
+  // hand-kept list of ids drifts out of truth and discovery is the authority;
+  // the free roster below stays as the offline floor. `openrouter/auto` was the
+  // last committed chat row and went with the rest of the static catalog — it
+  // publishes no limits of its own anyway, since a router's pricing is -1.
   // Not a chat row: it answers `{answers}` to a `{state, questions}` body, and
   // is served by the native System One route. Kept because deleting it removes
   // that route, which is a capability, not a stale catalog entry.

package/src/security/api-key-auth.ts

@@ -305,6 +305,29 @@ export interface ResolvedApiKey {
   /** Share-template id whose remote CLI mappings are inherited by this child. */
   readonly cliMappingOwnerId?: string;
 }
+
+/**
+ * The 401 a caller gets when a key resolves to nothing.
+ *
+ * One function, not a message repeated at each boundary: three surfaces refuse
+ * an unknown key, and any wording drift between them is a caller guessing which
+ * surface it hit. Unknown, revoked and expired stay deliberately
+ * indistinguishable — distinguishing them would let a caller confirm that a
+ * guessed token once existed — so there is no variant carrying a reason.
+ *
+ * The rotate instruction is unconditional for the same reason. The key that
+ * fails is usually the one seeded at first boot, which cannot be deleted and
+ * only rotates, and an operator hitting this on a personal key loses nothing by
+ * being told the same thing.
+ */
+export function unknownApiKeyError(): GatewayError {
+  return new GatewayError(
+    "authentication_failed",
+    401,
+    "Invalid API key. Rotate the default Cartethyia API key in API Keys and send the new key as: Authorization: Bearer <key>.",
+  );
+}
+
 /** Extracts exactly one supported credential source, preserving public auth statuses. */
 export function requestToken(headers: Headers | Record<string, string>): string {
   const get = (name: string): string | null =>

package/src/transport/guards/auth-guard.ts

@@ -6,7 +6,7 @@ import { GatewayError } from "../../protocol/gateway-error";
 import type { ProxyRequestStateStore } from "../request/state";
 import { fastPathname } from "../pathname";
 import type { CartethyiaDatabase } from "../../persistence/db-handle";
-import { requestToken, resolveApiKeyAuthorization } from "../../security/api-key-auth";
+import { requestToken, resolveApiKeyAuthorization, unknownApiKeyError } from "../../security/api-key-auth";
 import {
   deniedClientRouter,
   detectClientRouter,
@@ -65,8 +65,7 @@ export function createApiKeyAuthenticationMiddleware(deps: {
           "cartethyia",
         );
       });
-      if (!authorization)
-        throw new GatewayError("invalid_request", 401, "This API key is unknown, revoked, or expired. Issue a new key and send it as: Authorization: Bearer <key>.");
+      if (!authorization) throw unknownApiKeyError();
       const decision = createAccessDecision({
         id: authorization.id,
         tenantId: authorization.tenantId,

package/dist/dashboard/assets/CliToolDetailPage-Bb9CNuoh.js

@@ -1 +0,0 @@
-import{n as e,o as t,r as n,t as r}from"./jsx-runtime-CXUMngI_.js";import{t as i}from"./arrow-left-CpBxkoxI.js";import{t as a}from"./circle-check-BU3v_mFW.js";import{r as o,t as s}from"./toast-CNt_jzO4.js";import{t as ee}from"./download-A0SW9OCW.js";import{n as c,r as l}from"./state-DA0B95UQ.js";import{t as te}from"./route-CNSNj9Zm.js";import{t as u}from"./search-JOKus9rb.js";import{l as d}from"./query-keys-D7wX2vM5.js";import{Q as f,X as p}from"./entry--yj84zk3.js";import{n as m,r as h,t as g}from"./card-DEhRXXw4.js";import{n as _}from"./download-dRFo5_Wu.js";import{t as v}from"./badge-DpXT4Ixt.js";import{n as y}from"./input-BpVZdrbc.js";import{t as b}from"./select-XPJ-dIw3.js";import{t as ne}from"./ModelPicker-oQ-SDXp8.js";import{t as re}from"./switch-Cittxy-x.js";import{t as x}from"./stack-C9_uUjaA.js";import{n as S}from"./inline-D1IlZZ8H.js";import{f as ie,t as C}from"./api-keys-BmDbsior.js";import{a as w,i as ae,n as oe,o as T,r as se,t as E}from"./cli-tools-B0wBq-RL.js";import{t as D}from"./ToolIcon-K1ckcDKg.js";var ce=e(`book-open`,[[`path`,{d:`M12 5v16`,key:`1f6ucr`}],[`path`,{d:`M20.001 19A2 2 0 0022 17V5a2 2 0 00-1.999-2L16 3.002A5 5 0 0012 5a5 5 0 00-4-2H4a2 2 0 00-2 2v12a2 2 0 001.999 2H8a5 5 0 014 2 5 5 0 014-2z`,key:`1fyvmf`}]]),le=e(`circle-x`,[[`circle`,{cx:`12`,cy:`12`,r:`10`,key:`1mglay`}],[`path`,{d:`m15 9-6 6`,key:`1uzhvr`}],[`path`,{d:`m9 9 6 6`,key:`z0biqf`}]]),ue=e(`file-code-corner`,[[`path`,{d:`M4 12.15V4a2 2 0 0 1 2-2h8a2.4 2.4 0 0 1 1.706.706l3.588 3.588A2.4 2.4 0 0 1 20 8v12a2 2 0 0 1-2 2h-3.35`,key:`1wthlu`}],[`path`,{d:`M14 2v5a1 1 0 0 0 1 1h5`,key:`wfsgrz`}],[`path`,{d:`m5 16-3 3 3 3`,key:`331omg`}],[`path`,{d:`m9 22 3-3-3-3`,key:`lsp7cz`}]]),de=e(`settings-2`,[[`path`,{d:`M14 17H5`,key:`gfn3mx`}],[`path`,{d:`M19 7h-9`,key:`6i9tg`}],[`circle`,{cx:`17`,cy:`17`,r:`3`,key:`18b49y`}],[`circle`,{cx:`7`,cy:`7`,r:`3`,key:`dfmy0x`}]]),O=t(n(),1);function k(e,t){return e==null?!1:e instanceof Set?e.has(t):e.includes(t)}function A(e){return e==null?0:e instanceof Set?e.size:e.length}function j(e){let t=e.lastIndexOf(`/`);return t<0?e:e.slice(t+1)}function M(e,t,n,r){let i=n?`${n}/${j(t)}`:void 0,a=[t,j(t),...i?[i]:[]];r&&r!==t&&a.push(r);let o=e.model_list;return e.model_access_mode===`blacklist`?a.some(e=>k(o,e))?`model-denied`:null:o==null||A(o)===0||a.some(e=>k(o,e))?null:`model-not-allowed`}function N(e,t,n,r){return M(e,t,n,r)===null}var P=r();function F(){let{toolId:e}=f(),t=w(),n=T(),r=C(),i=(0,O.useMemo)(()=>t.data?.find(t=>t.id===e)??null,[t.data,e]),a=(0,O.useMemo)(()=>{let t=n.data;if(t)return Array.isArray(t)?t.find(t=>t.toolId===e):t[e]},[n.data,e]);return t.isLoading?(0,P.jsx)(l,{label:`Loading tool details…`}):t.isError?(0,P.jsx)(c,{title:`Unable to load tool`,message:t.error?.message??`Could not load the CLI tool registry.`,onRetry:()=>void t.refetch()}):i?(0,P.jsx)(I,{tool:i,status:a,apiKeys:r.data??[]}):(0,P.jsxs)(x,{gap:`12px`,children:[(0,P.jsx)(p,{to:`/cli-tools`,className:`text-caption text-accent`,children:`← Back to CLI Tools`}),(0,P.jsx)(c,{title:`Tool not found`,message:`Unknown CLI tool id.`})]})}function I({tool:e,status:t,apiKeys:n}){let[r,c]=(0,O.useState)(``),[l,f]=(0,O.useState)(()=>typeof window>`u`?`http://localhost:12800`:window.location.origin),[C,w]=(0,O.useState)({}),[T,k]=(0,O.useState)(!1),[A,j]=(0,O.useState)({}),[M,F]=(0,O.useState)(null),[I,L]=(0,O.useState)(`slot`),R=(0,O.useRef)(null),z=(0,O.useMemo)(()=>n.filter(e=>e.keyMode===`personal`||e.keyMode===`share`&&e.parentKeyId===void 0),[n]),B=ae(e.id,r),V=se(),H=oe(),U=ie(),W=E(),G=z.find(e=>e.id===r),K=G?.scopes?.includes(`routing:cli_mapping`)===!0,q=G?.keyMode===`personal`,J=G?.modelAccessMode??`whitelist`,Y=G?.modelList,X=e=>N({model_access_mode:J,model_list:Y},e),fe=(0,O.useMemo)(()=>{let t=new Set;if(!e.mappingSupported)return t;for(let n of e.defaultModels){let e=A[n.alias]??``;if(e.length===0)continue;let r=C[n.alias]??n.defaultValue??n.id;!X(e)&&!X(r)&&t.add(n.alias)}return t},[e.defaultModels,e.mappingSupported,A,C,G]),pe=e=>{if(!G)return;let t=Y??[],n=J===`blacklist`?t.filter(t=>t!==e):[...new Set([...t,e])];U.mutate({keyId:G.id,request:{modelAccessMode:J,modelList:n}},{onSuccess:()=>s.success(J===`blacklist`?`Model unblocked for this key`:`Model allowed for this key`),onError:e=>s.error(d(e,`Could not update the API key.`))})};(0,O.useEffect)(()=>{let t=Object.fromEntries(e.defaultModels.map(e=>[e.alias,e.defaultValue??e.id]));w(t),j({}),R.current=null},[e,r]),(0,O.useEffect)(()=>{let t=B.data;if(t&&t.apiKeyId===r){if(k(t.enabled),t.mappings.length>0)w(e=>({...e,...Object.fromEntries(t.mappings.map(e=>[e.slotKey,e.sourceModel]))})),j(e=>({...e,...Object.fromEntries(t.mappings.map(e=>[e.slotKey,e.targetModel]))}));else{let t=Object.fromEntries(e.defaultModels.map(e=>[e.alias,e.defaultValue??e.id]));w(t),j({})}R.current=JSON.stringify({enabled:t.enabled,mappings:t.mappings})}},[r,B.data,e.defaultModels]);let me=t?.installed??!1,Z=t?.configured??!1,he=e.configType===`guide`,Q=(0,O.useMemo)(()=>e.defaultModels.map(e=>C[e.alias]??e.defaultValue??e.id),[C,e.defaultModels]),$=(0,O.useCallback)(()=>{if(e.mappingSupported)return{enabled:T,mappings:e.defaultModels.filter(e=>(A[e.alias]??``).length>0).map(e=>({slotKey:e.alias,sourceModel:C[e.alias]??e.defaultValue??e.id,targetModel:A[e.alias]??``,enabled:!0})).filter(e=>e.targetModel.length>0)}},[T,A,C,e.defaultModels,e.mappingSupported]);(0,O.useEffect)(()=>{if(!e.mappingSupported||r.length===0)return;let t=B.data;if(!t||t.apiKeyId!==r)return;let n=$();if(!n)return;let i=JSON.stringify({enabled:n.enabled,mappings:n.mappings});if(i===R.current)return;let a=setTimeout(()=>{V.mutate({toolId:e.id,keyId:r,input:n},{onSuccess:()=>{R.current=i},onError:e=>s.error(d(e,`Could not save mappings.`))})},600);return()=>clearTimeout(a)},[$,r,B.data,V,e.id,e.mappingSupported]);let ge=(0,O.useCallback)(()=>{let t=Object.fromEntries(e.defaultModels.map(e=>[e.alias,C[e.alias]??e.defaultValue??e.id])),n=e.defaultModels.find(e=>e.roleKind===`subagent`);return{endpoint:l,apiKey:``,modelIds:e.id===`claude`?[]:Q,modelSlots:t,...Q[0]?{activeModel:Q[0]}:{},...n?{subagentModel:C[n.alias]??n.defaultValue??n.id}:{},mappingOwnerId:r,...e.mappingSupported?{mapping:$()}:{}}},[Q,$,r,l,C,e]);return(0,P.jsxs)(x,{gap:`16px`,children:[(0,P.jsxs)(p,{to:`/cli-tools`,className:`inline-flex items-center gap-3 text-caption text-accent`,children:[(0,P.jsx)(i,{size:14}),`Back to CLI Tools`]}),(0,P.jsx)(g,{children:(0,P.jsxs)(m,{className:`flex flex-col gap-5`,children:[(0,P.jsxs)(S,{gap:`14px`,align:`flex-start`,className:`flex-wrap`,children:[(0,P.jsx)(D,{toolId:e.id,name:e.name,color:e.color,size:46}),(0,P.jsxs)(S,{gap:`8px`,className:`flex-wrap`,children:[(0,P.jsx)(`h1`,{className:`text-title font-bold m-0`,children:e.name}),me?(0,P.jsx)(v,{tone:`ok`,children:`Installed`}):(0,P.jsx)(v,{tone:`disabled`,children:`Not installed`}),Z?(0,P.jsx)(v,{tone:`accent`,children:`Configured`}):null,e.configType===`guide`?(0,P.jsx)(v,{tone:`info`,children:`Guide`}):null]})]}),(0,P.jsx)(`p`,{className:`m-0 text-caption text-text-secondary`,children:e.description}),e.docsUrl?(0,P.jsx)(`a`,{href:e.docsUrl,target:`_blank`,rel:`noreferrer`,className:`inline-block text-caption text-accent`,children:`Official documentation →`}):null,t?.settingsPath?(0,P.jsxs)(`div`,{className:`font-mono tabular-nums px-6 py-4 rounded-inset bg-surface-2 border border-inner-border text-badge text-text-secondary break-all`,children:[`Config file: `,t.settingsPath]}):null,t?.message?(0,P.jsxs)(`div`,{className:`flex items-center gap-3 text-badge ${Z?`text-green`:`text-orange`}`,children:[Z?(0,P.jsx)(a,{size:13}):(0,P.jsx)(le,{size:13}),t.message]}):null]})}),(0,P.jsxs)(g,{children:[(0,P.jsx)(h,{title:`Setup`,subtitle:`Pick the Apikey Name and endpoint, set the models, then download. The key's secret is read server-side — you never paste it.`,icon:(0,P.jsx)(de,{size:16})}),(0,P.jsx)(m,{children:(0,P.jsx)(x,{gap:`12px`,children:(0,P.jsxs)(`div`,{className:`grid grid-cols-2 gap-4 items-start min-w-0 max-medium:grid-cols-1`,children:[(0,P.jsxs)(`div`,{className:`flex flex-col gap-3 min-w-0`,children:[(0,P.jsx)(b,{label:`Apikey Name`,id:`api-key-select`,value:r,onValueChange:c,options:[{value:``,label:`Select…`},...z.map(e=>({value:e.id,label:`${e.label} — ${e.keyMode===`personal`?`Personal`:`Share template`}`}))]}),(0,P.jsx)(`div`,{className:`flex items-center gap-3 flex-wrap`,children:G===void 0?(0,P.jsx)(`span`,{className:`mt-1 text-badge text-text-tertiary`,children:`Choose the Apikey Name whose routes this CLI session should use.`}):K?(0,P.jsxs)(P.Fragment,{children:[(0,P.jsx)(v,{tone:`ok`,children:`routing:cli_mapping`}),(0,P.jsx)(`span`,{className:`mt-1 text-badge text-text-tertiary`,children:`Remote routes work with this key.`})]}):(0,P.jsxs)(P.Fragment,{children:[(0,P.jsx)(v,{tone:`warn`,title:`This key cannot resolve persisted CLI mappings on /v1/*. Turn on Remote Routing below to enable it.`,children:`no CLI scope`}),(0,P.jsx)(`span`,{className:`mt-1 text-badge text-text-tertiary`,children:`Remote routes stay inert on this key — turning on Remote Routing below will activate it.`})]})}),G?.keyMode===`share`?(0,P.jsx)(`span`,{className:`mt-1 text-badge text-text-tertiary`,children:`Share template: its child keys inherit these routes automatically.`}):null]}),(0,P.jsx)(`div`,{className:`min-w-0`,children:(0,P.jsx)(y,{label:`Endpoint`,value:l,onChange:e=>f(e.target.value)})})]})})})]}),(0,P.jsxs)(g,{children:[(0,P.jsx)(h,{title:`Model routing`,icon:(0,P.jsx)(te,{size:16}),subtitle:e.mappingSupported?`Left is the model name the CLI asks for. Right is the route Cartethyia sends it to. Leave a target empty to send that slot straight to the provider.`:`The model names written into this tool's config.`,action:e.mappingSupported?(0,P.jsxs)(`div`,{className:`flex items-center gap-5`,children:[(0,P.jsx)(re,{checked:T,disabled:!r,onChange:t=>{if(k(t),!r){s.error(`Select an API key first to configure its Remote Routing.`);return}if(t&&G&&!K){let e=[...new Set([...G.scopes??[],`routing:cli_mapping`])];U.mutate({keyId:G.id,request:{scopes:e}},{onSuccess:()=>{s.success(`Activated routing:cli_mapping on "${G.label}".`)},onError:e=>{s.error(d(e,`Could not update key scope.`))}})}let n=$();n&&V.mutate({toolId:e.id,keyId:r,input:{...n,enabled:t}},{onError:e=>s.error(d(e,`Could not save mappings.`))})},label:T?`Remote Routing on`:`Remote Routing off`}),(0,P.jsx)(o,{variant:`secondary`,size:`sm`,disabled:!r||H.isPending,onClick:()=>{if(!r){s.error(`Select an API key first.`);return}H.mutate({toolId:e.id,keyId:r},{onSuccess:()=>{k(!1),j({}),s.success(`Remote routes cleared and Remote Routing turned off.`)},onError:e=>s.error(d(e,`Could not reset remote routes.`))})},children:H.isPending?`Resetting…`:`Reset`})]}):void 0}),(0,P.jsxs)(m,{children:[r?null:(0,P.jsx)(`p`,{className:`text-badge text-text-tertiary mb-5`,children:`Select an API key above to load and save remote routes for that key. You can still set models below to download a config file.`}),e.mappingSupported?(0,P.jsxs)(`div`,{className:`mb-5 flex items-center gap-4 rounded-inset border border-inner-border bg-surface-2 px-5 py-3 text-micro text-text-tertiary`,children:[(0,P.jsx)(`span`,{className:`flex-1`,children:`CLI asks for`}),(0,P.jsx)(`span`,{className:`w-9 text-center`,children:`→`}),(0,P.jsx)(`span`,{className:`flex-1`,children:`Cartethyia routes to`})]}):null,(0,P.jsx)(x,{gap:`6px`,children:e.defaultModels.map(t=>{let n=C[t.alias]??t.defaultValue??t.id,r=A[t.alias]??``,i=r===n;return(0,P.jsxs)(`div`,{className:`grid items-center gap-4 ${e.mappingSupported?`grid-cols-2`:`grid-cols-1`}`,children:[(0,P.jsxs)(`div`,{className:`flex flex-col gap-1 min-w-0`,children:[(0,P.jsxs)(`button`,{type:`button`,onClick:()=>{F(t.alias),L(`slot`)},className:`font-mono tabular-nums flex w-full min-w-0 cursor-pointer items-center justify-between gap-4 rounded-inset border border-inner-border bg-surface-2 px-5 py-3.5 text-left text-badge text-text-primary`,children:[(0,P.jsx)(`span`,{className:`overflow-hidden truncate whitespace-nowrap`,children:n}),(0,P.jsx)(u,{size:12,className:`text-text-tertiary shrink-0`})]}),(0,P.jsx)(`span`,{className:`text-micro text-text-tertiary pl-1`,children:t.roleLabel??t.name})]}),e.mappingSupported?(0,P.jsxs)(`div`,{className:`flex flex-col gap-1 min-w-0`,children:[(0,P.jsxs)(`button`,{type:`button`,onClick:()=>{F(t.alias),L(`target`)},className:`font-mono tabular-nums flex w-full min-w-0 cursor-pointer items-center justify-between gap-4 rounded-inset border px-5 py-3.5 text-left text-badge ${i?`border-inner-border bg-surface-2 text-text-tertiary`:`border-accent bg-accent-soft text-text-primary`}`,children:[(0,P.jsx)(`span`,{className:`overflow-hidden truncate whitespace-nowrap`,children:r.length>0?r:`Not routed`}),(0,P.jsx)(u,{size:12,className:`text-text-tertiary shrink-0`})]}),(0,P.jsxs)(`span`,{className:`pl-1 text-micro ${r.length===0?`text-text-tertiary`:`text-accent`}`,children:[r.length===0?`not routed`:`rerouted`,r.length>0?(0,P.jsx)(`button`,{type:`button`,onClick:()=>j(e=>({...e,[t.alias]:``})),className:`ml-3 border-none bg-none p-0 text-micro text-text-tertiary cursor-pointer underline`,children:`clear`}):null]}),fe.has(t.alias)?(0,P.jsxs)(`span`,{className:`mt-1 flex items-center gap-3 text-micro text-orange`,children:[(0,P.jsx)(`span`,{children:J===`blacklist`?`This key blocks the target model.`:`This key does not allow the target model.`}),(0,P.jsx)(`button`,{type:`button`,disabled:U.isPending,onClick:()=>pe(r),className:`border-none bg-none p-0 text-micro font-semibold text-accent underline ${U.isPending?`cursor-not-allowed`:`cursor-pointer`}`,children:J===`blacklist`?`Unblock`:`Allow this model`})]}):null]}):null]},t.alias)})})]})]}),he&&e.guideSteps?(0,P.jsxs)(g,{children:[(0,P.jsx)(h,{title:`Guide`,subtitle:`Manual setup steps for tools that do not support file injection.`,icon:(0,P.jsx)(ce,{size:16})}),(0,P.jsx)(m,{children:(0,P.jsx)(`ol`,{className:`flex flex-col gap-6 pl-9`,children:e.guideSteps.map(e=>(0,P.jsxs)(`li`,{children:[(0,P.jsx)(`strong`,{className:`text-body`,children:e.title}),e.desc?(0,P.jsx)(`p`,{className:`text-caption text-text-secondary mt-2`,children:e.desc}):null,e.value?(0,P.jsx)(`pre`,{className:`mt-3 overflow-x-auto rounded-control border border-inner-border bg-surface-2 p-5 font-mono text-badge`,children:e.value.replace(/\{\{baseUrl\}\}/g,l)}):null]},e.step))})})]}):null,(0,P.jsxs)(g,{children:[(0,P.jsx)(h,{title:`Config file`,subtitle:`Download the config file for this CLI tool. The selected API key secret is decrypted automatically into the download.`,icon:(0,P.jsx)(ue,{size:16})}),(0,P.jsxs)(m,{className:`flex flex-col gap-6`,children:[(0,P.jsx)(`div`,{className:`flex gap-4 flex-wrap justify-end`,children:(0,P.jsx)(o,{variant:`primary`,icon:(0,P.jsx)(ee,{size:14}),onClick:()=>{if(!r){s.error(`Select an API key first.`);return}W.mutate({toolId:e.id,keyId:r,input:ge()},{onSuccess:e=>{_(e.filename,e.content,e.mimeType),s.success(`Downloaded ${e.filename}.`)},onError:e=>s.error(d(e,`Could not download config.`))})},disabled:W.isPending||!q,children:W.isPending?`Downloading…`:`Download config`})}),q?null:(0,P.jsx)(`p`,{className:`text-badge text-text-tertiary text-right`,children:G?.keyMode===`share`?`A share template has no secret to write into a config. Select a personal key to download the config file.`:`Select an Apikey Name above to enable downloading the config file.`})]})]}),(0,P.jsx)(ne,{open:M!==null,onClose:()=>F(null),selected:M?[I===`target`?A[M]??C[M]??``:C[M]??``]:[],onToggle:()=>{},onSelectOne:e=>{M&&(I===`target`?j(t=>({...t,[M]:e})):w(t=>({...t,[M]:e}))),F(null)},title:M?`Select ${M} model`:`Select model`,multi:!1})]})}export{F as default};