claude-use 11.32.0 → 11.34.0

package/dist/index.mjs

@@ -212,6 +212,9 @@ function isHttpProvider(provider) {
 function isCodexProvider(provider) {
   return provider.kind === "codex";
 }
+function isRouterProvider(provider) {
+  return provider.kind === "router";
+}
 function isAntigravityProvider(provider) {
   return provider.kind === "antigravity";
 }
@@ -226,7 +229,7 @@ function isTimeZone(name) {
     return false;
   }
 }
-var CATEGORY_NAMES, OVERRIDABLE_CATEGORIES, CategoryMapSchema, DURATION_RE, DurationSchema, WhenConditionObjectSchema, WhenSchema, EntryValueSchema, ENTRY_KEY_RE, EntriesSchema, LaunchSchema, CREDENTIAL_TARGETS, PROVIDER_CREDENTIAL_TARGETS, CREDENTIAL_TARGET_VARS, ArgvSchema, CommandSourceOptions, EnvCredentialSourceSchema, FileCredentialSourceSchema, CommandCredentialSourceSchema, OpCredentialSourceSchema, KeychainCredentialSourceSchema, LiteralCredentialSourceSchema, CredentialSourceSchema, RemoteCredentialSourceSchema, CREDENTIAL_CACHE_STORES, CredentialCacheSchema, CredentialSchema, ProviderCredentialSchema, RESERVED_PROVIDER_ENV_KEYS, ProviderEnvSchema, PROVIDER_KINDS, ANTIGRAVITY_MODES, CLAUDE_TIERS, ANTIGRAVITY_EFFORTS, ANTIGRAVITY_DEFAULT_MODE, ANTIGRAVITY_DEFAULT_MODEL, ANTIGRAVITY_DEFAULT_TIER_MODELS, ANTIGRAVITY_DEFAULT_EFFORT, AntigravityModelTargetSchema, AntigravityProviderConfigSchema, CODEX_EFFORTS, CODEX_LOGINS, CODEX_DEFAULT_LOGIN, CODEX_DEFAULT_MODEL, CODEX_DEFAULT_TIER_MODELS, CODEX_DEFAULT_EFFORT, CodexProviderConfigSchema, ProviderRouteSchema, PickerModelSchema, PickerModelsSchema, ProviderCatalogueSchema, HttpProviderSchema, CodexProviderSchema, AntigravityProviderSchema, ProviderSchema, ConfigProfileSchema, POOL_SELECTOR_PREFIX, POOL_NAME_PATTERN, IDENTITY_NAME_PATTERN, PoolNameSchema, SELECTOR_RE, IdentitySelectorSchema, PoolMemberSchema, POOL_PREFERENCES, PoolPreferenceSchema, WHOLE_PERCENT_MAX, CompactAtUtilisationSchema, PoolSchema, WEEKDAYS, AnchorSchema, JOB_WINDOWS, JobTriggerSchema, JobTargetSchema, JobSchema, DirectoryRuleSchema, DirectoryRulesSchema, PortableConfigSchema, HEADROOM_MODES, HEADROOM_CCR_MODES, HEADROOM_ROLLOUT_CHANNELS, INTERCEPT_CHANNELS, READ_MATURATION_CHANNELS, HeadroomGlobalConfigObjectSchema, HeadroomGlobalConfigSchema, HEADROOM_DEFAULT_SOURCE, HEADROOM_DEFAULT_IDLE_SHUTDOWN_MINUTES, FrontDoorGlobalConfigSchema, UPDATE_MODES, UpdateGlobalConfigSchema, GlobalConfigSchema, IdentitySchema, CategoryClassificationSchema, CategoryClassificationOverlaySchema, SHIPPED_CATEGORY_DEFAULTS;
+var CATEGORY_NAMES, OVERRIDABLE_CATEGORIES, CategoryMapSchema, DURATION_RE, DurationSchema, WhenConditionObjectSchema, WhenSchema, EntryValueSchema, ENTRY_KEY_RE, EntriesSchema, LaunchSchema, CREDENTIAL_TARGETS, PROVIDER_CREDENTIAL_TARGETS, CREDENTIAL_TARGET_VARS, ArgvSchema, CommandSourceOptions, EnvCredentialSourceSchema, FileCredentialSourceSchema, CommandCredentialSourceSchema, OpCredentialSourceSchema, KeychainCredentialSourceSchema, LiteralCredentialSourceSchema, CredentialSourceSchema, RemoteCredentialSourceSchema, CREDENTIAL_CACHE_STORES, CredentialCacheSchema, CredentialSchema, ProviderCredentialSchema, RESERVED_PROVIDER_ENV_KEYS, ProviderEnvSchema, PROVIDER_KINDS, ANTIGRAVITY_MODES, CLAUDE_TIERS, ANTIGRAVITY_EFFORTS, ANTIGRAVITY_DEFAULT_MODE, ANTIGRAVITY_DEFAULT_MODEL, ANTIGRAVITY_DEFAULT_TIER_MODELS, ANTIGRAVITY_DEFAULT_EFFORT, AntigravityModelTargetSchema, AntigravityProviderConfigSchema, CODEX_EFFORTS, CODEX_LOGINS, CODEX_DEFAULT_LOGIN, CODEX_DEFAULT_MODEL, CODEX_DEFAULT_TIER_MODELS, CODEX_DEFAULT_EFFORT, CodexProviderConfigSchema, ProviderRouteSchema, PickerModelSchema, PickerModelsSchema, ProviderCatalogueSchema, HttpProviderSchema, CodexProviderSchema, RouterProviderSchema, AntigravityProviderSchema, ProviderSchema, SELECTION_MODES, VirtualModelSchema, ModelPricesSchema, ModelsConfigSchema, ModelsLayerSchema, ConfigProfileSchema, POOL_SELECTOR_PREFIX, POOL_NAME_PATTERN, IDENTITY_NAME_PATTERN, PoolNameSchema, SELECTOR_RE, IdentitySelectorSchema, PoolMemberSchema, POOL_PREFERENCES, PoolPreferenceSchema, WHOLE_PERCENT_MAX, CompactAtUtilisationSchema, PoolSchema, WEEKDAYS, AnchorSchema, JOB_WINDOWS, JobTriggerSchema, JobTargetSchema, JobSchema, DirectoryRuleSchema, DirectoryRulesSchema, PortableConfigSchema, HEADROOM_MODES, HEADROOM_CCR_MODES, HEADROOM_ROLLOUT_CHANNELS, INTERCEPT_CHANNELS, READ_MATURATION_CHANNELS, HeadroomGlobalConfigObjectSchema, HeadroomGlobalConfigSchema, HEADROOM_DEFAULT_SOURCE, HEADROOM_DEFAULT_IDLE_SHUTDOWN_MINUTES, FrontDoorGlobalConfigSchema, UPDATE_MODES, UpdateGlobalConfigSchema, GlobalConfigSchema, IdentitySchema, CategoryClassificationSchema, CategoryClassificationOverlaySchema, SHIPPED_CATEGORY_DEFAULTS;
 var init_schema = __esm({
   "src/config/schema.ts"() {
     "use strict";
@@ -268,6 +271,8 @@ var init_schema = __esm({
       delay: z.string().regex(DURATION_RE, "must be a duration such as 5s or 500ms").optional(),
       /** Whether the launcher waits for a key press after its own output before it starts claude. Takes the place of `delay` when both are set. Applies only when a terminal is watching. */
       pause: z.boolean().optional(),
+      /** Whether a provider session routes provider-qualified model names (`z/glm-5.3`, `auto`) through the `models` block to the provider that serves them, instead of sending every request to the launch provider. */
+      routeByName: z.boolean().optional(),
       /** Whether the launcher's report, for a launch that picks from a pool, lists every member the pick ranked with why each stands where it does, and not only the member it picked. */
       explain: z.boolean().optional()
     });
@@ -328,7 +333,7 @@ var init_schema = __esm({
     ProviderEnvSchema = z.record(z.string().min(1), z.string()).refine((env) => !Object.keys(env).some((key) => RESERVED_PROVIDER_ENV_KEYS.includes(key)), {
       message: `env may not set ${RESERVED_PROVIDER_ENV_KEYS.join(", ")}: the credential block's target sets one and agent-shim removes the others`
     });
-    PROVIDER_KINDS = ["http", "codex", "antigravity"];
+    PROVIDER_KINDS = ["http", "codex", "antigravity", "router"];
     ANTIGRAVITY_MODES = ["cloud", "local"];
     CLAUDE_TIERS = ["fable", "opus", "sonnet", "haiku"];
     ANTIGRAVITY_EFFORTS = ["none", "low", "medium", "high", "xhigh", "max"];
@@ -441,6 +446,11 @@ var init_schema = __esm({
       pickerModels: PickerModelsSchema.optional(),
       codex: CodexProviderConfigSchema.optional()
     });
+    RouterProviderSchema = z.strictObject({
+      $schema: z.string().optional(),
+      kind: z.literal("router"),
+      displayName: z.string().min(1)
+    });
     AntigravityProviderSchema = z.strictObject({
       $schema: z.string().optional(),
       kind: z.literal("antigravity"),
@@ -451,14 +461,55 @@ var init_schema = __esm({
       pickerModels: PickerModelsSchema.optional(),
       antigravity: AntigravityProviderConfigSchema.optional()
     });
-    ProviderSchema = z.discriminatedUnion("kind", [HttpProviderSchema, CodexProviderSchema, AntigravityProviderSchema]);
+    ProviderSchema = z.discriminatedUnion("kind", [HttpProviderSchema, CodexProviderSchema, AntigravityProviderSchema, RouterProviderSchema]);
+    SELECTION_MODES = ["ordered", "most-allowance", "soonest-reset", "spread", "adaptive", "lowest-latency", "highest-success", "cheapest"];
+    VirtualModelSchema = z.strictObject({
+      /** How the virtual model chooses its member for a request. */
+      mode: z.enum(SELECTION_MODES),
+      /** The members to choose among, in preference order where the mode reads order. Each names a target (`z/glm-5.3`), an account model (`acct:work/opus`), another virtual model, or a family (`family:<canonical>`). */
+      members: z.array(z.string().min(1)).min(1)
+    });
+    ModelPricesSchema = z.strictObject({
+      input: z.number().positive(),
+      output: z.number().positive()
+    });
+    ModelsConfigSchema = z.strictObject({
+      /** Virtual models, by name. */
+      virtual: z.record(z.string().min(1), VirtualModelSchema).optional(),
+      /** Which model ref each Claude tier (`fable`, `opus`, `sonnet`, `haiku`) points at: a concrete target, an account model, a virtual model, or a family. */
+      tiers: z.strictObject({
+        fable: z.string().min(1).optional(),
+        opus: z.string().min(1).optional(),
+        sonnet: z.string().min(1).optional(),
+        haiku: z.string().min(1).optional()
+      }).optional(),
+      /** Prices per model ref, for the `cheapest` mode. */
+      prices: z.record(z.string().min(1), ModelPricesSchema).optional(),
+      /** Model refs hidden from the picker and from routing, whatever else names them. */
+      hide: z.array(z.string().min(1)).optional(),
+      /** When set, the only model refs visible; everything else is hidden. */
+      show: z.array(z.string().min(1)).optional()
+    });
+    ModelsLayerSchema = z.strictObject({
+      virtual: z.record(z.string().min(1), z.union([VirtualModelSchema, z.null()])).optional(),
+      tiers: z.strictObject({
+        fable: z.union([z.string().min(1), z.null()]).optional(),
+        opus: z.union([z.string().min(1), z.null()]).optional(),
+        sonnet: z.union([z.string().min(1), z.null()]).optional(),
+        haiku: z.union([z.string().min(1), z.null()]).optional()
+      }).optional(),
+      prices: z.record(z.string().min(1), z.union([ModelPricesSchema, z.null()])).optional(),
+      hide: z.array(z.string().min(1)).optional(),
+      show: z.array(z.string().min(1)).optional()
+    });
     ConfigProfileSchema = z.strictObject({
       $schema: z.string().optional(),
       description: z.string().optional(),
       extends: z.array(z.string().min(1)).optional(),
       categories: CategoryMapSchema.optional(),
       entries: EntriesSchema.optional(),
-      launch: LaunchSchema.optional()
+      launch: LaunchSchema.optional(),
+      models: ModelsLayerSchema.optional()
     });
     POOL_SELECTOR_PREFIX = "pool:";
     POOL_NAME_PATTERN = "[A-Za-z0-9][A-Za-z0-9._-]*";
@@ -568,6 +619,7 @@ var init_schema = __esm({
       frontdoor: FrontDoorGlobalConfigSchema.optional(),
       update: UpdateGlobalConfigSchema.optional(),
       pools: z.record(PoolNameSchema, PoolSchema).optional(),
+      models: ModelsConfigSchema.optional(),
       jobs: z.record(PoolNameSchema, JobSchema).optional()
     });
     IdentitySchema = z.strictObject({
@@ -1344,6 +1396,7 @@ function flattenLayers(layers, options) {
   const rules = /* @__PURE__ */ new Map();
   const launch = {};
   const diagnostics = [];
+  let models;
   for (const layer of layers) {
     if (layer.categories !== void 0) {
       for (const [name, value] of Object.entries(layer.categories)) {
@@ -1382,6 +1435,9 @@ function flattenLayers(layers, options) {
         launch.explain = layer.launch.explain;
       }
     }
+    if (layer.models !== void 0) {
+      models = mergeModels(models, layer.models);
+    }
     if (layer.entries === void 0) {
       continue;
     }
@@ -1444,7 +1500,7 @@ function flattenLayers(layers, options) {
       rules.set(pattern, rule);
     }
   }
-  return { categories, rules, launch, diagnostics };
+  return { categories, rules, launch, ...models === void 0 ? {} : { models }, diagnostics };
 }
 function orderedKeys(layer) {
   const present = new Set(Object.keys(layer.entries ?? {}));
@@ -1469,6 +1525,67 @@ function matchingRules(flattened, relPath) {
   }
   return matches.sort((a, b) => compareSpecificity(b, a));
 }
+function mergeModels(current, layer) {
+  const pieces = { ...current ?? {} };
+  if (layer.virtual !== void 0) {
+    const virtual = {};
+    for (const [name, definition] of Object.entries(current?.virtual ?? {})) {
+      if (layer.virtual[name] === void 0) {
+        virtual[name] = definition;
+      }
+    }
+    for (const [name, definition] of Object.entries(layer.virtual)) {
+      if (definition !== null) {
+        virtual[name] = definition;
+      }
+    }
+    pieces.virtual = virtual;
+  }
+  if (layer.tiers !== void 0) {
+    const tiers = {};
+    for (const tier of ["fable", "opus", "sonnet", "haiku"]) {
+      const ref = layer.tiers[tier];
+      const inherited = current?.tiers?.[tier];
+      if (ref !== null && ref !== void 0) {
+        tiers[tier] = ref;
+      } else if (ref === void 0 && inherited !== void 0) {
+        tiers[tier] = inherited;
+      }
+    }
+    pieces.tiers = tiers;
+  }
+  if (layer.prices !== void 0) {
+    const priced = {};
+    for (const [ref, prices] of Object.entries(current?.prices ?? {})) {
+      if (layer.prices[ref] === void 0) {
+        priced[ref] = prices;
+      }
+    }
+    for (const [ref, prices] of Object.entries(layer.prices)) {
+      if (prices !== null) {
+        priced[ref] = prices;
+      }
+    }
+    pieces.prices = priced;
+  }
+  if (layer.hide !== void 0) {
+    pieces.hide = layer.hide;
+  }
+  if (layer.show !== void 0) {
+    pieces.show = layer.show;
+  }
+  const merged = modelsOf(pieces);
+  return Object.keys(merged).length === 0 ? void 0 : merged;
+}
+function modelsOf(pieces) {
+  return {
+    ...pieces.virtual === void 0 || Object.keys(pieces.virtual).length === 0 ? {} : { virtual: pieces.virtual },
+    ...pieces.tiers === void 0 || Object.keys(pieces.tiers).length === 0 ? {} : { tiers: pieces.tiers },
+    ...pieces.prices === void 0 || Object.keys(pieces.prices).length === 0 ? {} : { prices: pieces.prices },
+    ...pieces.hide === void 0 || pieces.hide.length === 0 ? {} : { hide: [...pieces.hide] },
+    ...pieces.show === void 0 || pieces.show.length === 0 ? {} : { show: [...pieces.show] }
+  };
+}
 var init_flatten = __esm({
   "src/resolve/flatten.ts"() {
     "use strict";
@@ -1843,7 +1960,8 @@ function profileLayers(rootName, load, startId) {
       ...source.profile.categories === void 0 ? {} : { categories: source.profile.categories },
       ...source.profile.entries === void 0 ? {} : { entries: source.profile.entries },
       ...source.entryOrder === void 0 ? {} : { entryOrder: source.entryOrder },
-      ...source.profile.launch === void 0 ? {} : { launch: source.profile.launch }
+      ...source.profile.launch === void 0 ? {} : { launch: source.profile.launch },
+      ...source.profile.models === void 0 ? {} : { models: source.profile.models }
     });
     nextId += 1;
   }
@@ -1932,7 +2050,8 @@ function assembleCascade(input) {
         ...source.config.categories === void 0 ? {} : { categories: source.config.categories },
         ...source.config.entries === void 0 ? {} : { entries: source.config.entries },
         ...source.entryOrder === void 0 ? {} : { entryOrder: source.entryOrder },
-        ...source.config.launch === void 0 ? {} : { launch: source.config.launch }
+        ...source.config.launch === void 0 ? {} : { launch: source.config.launch },
+        ...source.config.models === void 0 ? {} : { models: source.config.models }
       });
       nextId += 1;
     }
@@ -2959,7 +3078,7 @@ var init_package = __esm({
   "package.json"() {
     package_default = {
       name: "claude-use",
-      version: "11.32.0",
+      version: "11.34.0",
       description: "A profile manager and launcher for Claude Code that lets one person run multiple logins from one machine while controlling what gets shared between them.",
       license: "MIT",
       author: "Joseph Mearman <joseph@mearman.co.uk>",
@@ -6659,7 +6778,7 @@ function describeProviderEndpoint(provider) {
   if (isAntigravityProvider(provider)) {
     return (provider.antigravity?.mode ?? ANTIGRAVITY_DEFAULT_MODE) === "local" ? "antigravity local (ACP daemon)" : "antigravity cloud (Gemini API)";
   }
-  return provider.baseUrl;
+  return isRouterProvider(provider) ? "the models block" : provider.baseUrl;
 }
 function isEmptyCodexConfig(config) {
   return config === void 0 || config.defaultModel === void 0 && config.effort === void 0 && config.login === void 0 && (config.models === void 0 || Object.keys(config.models).length === 0);
@@ -6681,10 +6800,16 @@ function addProvider(paths, name, input) {
   if (kind === "antigravity" && input.baseUrl !== void 0) {
     throw new ProviderKindMismatchError("An antigravity provider has no base URL: the launcher points its sessions at the front-door daemon. Drop --base-url.");
   }
+  if (kind === "router" && input.baseUrl !== void 0) {
+    throw new ProviderKindMismatchError("A router provider has no base URL: it resolves each request's model name through the models block. Drop --base-url.");
+  }
   if (kind === "http" && input.baseUrl === void 0) {
     throw new ProviderKindMismatchError("An http provider needs --base-url.");
   }
-  if (kind !== "http" && input.catalogue !== void 0) {
+  if (kind === "router" && (input.sources.length > 0 || input.target !== void 0 || input.env !== void 0 || input.pickerModels !== void 0)) {
+    throw new ProviderKindMismatchError("A router provider has no credential, env or picker models of its own: the models block's targets carry their own.");
+  }
+  if (kind !== "http" && kind !== "router" && input.catalogue !== void 0) {
     throw new ProviderKindMismatchError("A model catalogue applies only to an http provider.");
   }
   if (kind !== "codex" && !isEmptyCodexConfig(input.codex)) {
@@ -6700,7 +6825,7 @@ function addProvider(paths, name, input) {
     ...input.pickerModels === void 0 || input.pickerModels.length === 0 ? {} : { pickerModels: input.pickerModels }
   };
   const parsed = ProviderSchema.safeParse(
-    kind === "codex" ? { kind, ...shared, ...isEmptyCodexConfig(input.codex) ? {} : { codex: input.codex } } : kind === "antigravity" ? { kind, ...shared, ...isEmptyAntigravityConfig(input.antigravity) ? {} : { antigravity: input.antigravity } } : { ...shared, baseUrl: input.baseUrl, ...input.catalogue === void 0 ? {} : { catalogue: input.catalogue } }
+    kind === "router" ? { kind, displayName: input.displayName } : kind === "codex" ? { kind, ...shared, ...isEmptyCodexConfig(input.codex) ? {} : { codex: input.codex } } : kind === "antigravity" ? { kind, ...shared, ...isEmptyAntigravityConfig(input.antigravity) ? {} : { antigravity: input.antigravity } } : { ...shared, baseUrl: input.baseUrl, ...input.catalogue === void 0 ? {} : { catalogue: input.catalogue } }
   );
   if (!parsed.success) {
     throw new ConfigValidationError(providerJsonPath(paths, name), parsed.error.issues);
@@ -6714,15 +6839,18 @@ function updateProvider(paths, name, input) {
     throw new ProviderNotFoundError(name);
   }
   const unset = new Set(input.unsetEnv);
-  const env = Object.fromEntries(Object.entries({ ...existing.env, ...input.env }).filter(([key]) => !unset.has(key)));
+  const existingEnv = isRouterProvider(existing) ? {} : existing.env;
+  const env = Object.fromEntries(Object.entries({ ...existingEnv, ...input.env }).filter(([key]) => !unset.has(key)));
   const unsetPicker = new Set(input.unsetPickerModels);
   const added = new Map((input.pickerModels ?? []).map((entry) => [entry.model, entry]));
+  const existingPicker = isRouterProvider(existing) ? [] : existing.pickerModels;
   const pickerModels = [
-    ...(existing.pickerModels ?? []).filter((entry) => !unsetPicker.has(entry.model)).map((entry) => added.get(entry.model) ?? entry),
-    ...[...added.values()].filter((entry) => !(existing.pickerModels ?? []).some((kept) => kept.model === entry.model))
+    ...(existingPicker ?? []).filter((entry) => !unsetPicker.has(entry.model)).map((entry) => added.get(entry.model) ?? entry),
+    ...[...added.values()].filter((entry) => !(existingPicker ?? []).some((kept) => kept.model === entry.model))
   ];
-  const target = input.target ?? existing.credential.target;
-  const cache = input.cache === void 0 ? existing.credential.cache : input.cache === false ? void 0 : input.cache;
+  const router = isRouterProvider(existing);
+  const target = router ? void 0 : input.target ?? existing.credential.target;
+  const cache = router ? void 0 : input.cache === void 0 ? existing.credential.cache : input.cache === false ? void 0 : input.cache;
   if (isCodexProvider(existing) && input.baseUrl !== void 0) {
     throw new ProviderKindMismatchError(`Provider "${name}" is a codex provider, which has no base URL.`);
   }
@@ -6740,10 +6868,12 @@ function updateProvider(paths, name, input) {
   }
   const shared = {
     ...input.displayName === void 0 ? {} : { displayName: input.displayName },
-    credential: {
-      sources: input.sources ?? existing.credential.sources,
-      ...target === void 0 ? {} : { target },
-      ...cache === void 0 ? {} : { cache }
+    ...router ? {} : {
+      credential: {
+        sources: input.sources ?? existing.credential.sources,
+        ...target === void 0 ? {} : { target },
+        ...cache === void 0 ? {} : { cache }
+      }
     },
     env: Object.keys(env).length === 0 ? void 0 : env,
     pickerModels: pickerModels.length === 0 ? void 0 : pickerModels
@@ -6763,6 +6893,8 @@ function updateProvider(paths, name, input) {
       ...existing.antigravity?.models === void 0 && input.antigravity?.models === void 0 ? {} : { models: { ...existing.antigravity?.models, ...input.antigravity?.models } }
     };
     candidate = { ...existing, ...shared, antigravity: isEmptyAntigravityConfig(antigravity) ? void 0 : antigravity };
+  } else if (router) {
+    candidate = { kind: "router", ...shared };
   } else {
     const catalogue = input.catalogue === void 0 ? existing.catalogue : input.catalogue === false ? void 0 : input.catalogue;
     candidate = { ...existing, ...shared, catalogue, ...input.baseUrl === void 0 ? {} : { baseUrl: input.baseUrl } };
@@ -6812,6 +6944,9 @@ function resolveProvider(params) {
     return selection;
   }
   const { name, definition } = selection.provider;
+  if (isRouterProvider(definition)) {
+    return { ok: true, provider: { name, definition, credential: { target: "bearer", token: "", source: { env: "AGENT_SHIM_ROUTER" }, warnings: [] } }, warnings: [] };
+  }
   if (params.credentials === void 0) {
     return { ok: false, status: 1, message: `agent-shim: provider ${name} needs its credential resolved, but this launcher has no credential port wired` };
   }
@@ -7788,7 +7923,7 @@ function buildEnv(params) {
     env.CLAUDE_CONFIG_DIR = path36.join(params.identitiesDir, params.resolvedIdentityName);
   }
   if (params.provider !== void 0) {
-    const providerEnv = params.provider.definition.env ?? {};
+    const providerEnv = params.provider.definition.kind !== void 0 && params.provider.definition.kind !== "http" ? {} : params.provider.definition.env ?? {};
     providerCustomHeaders = providerEnv.ANTHROPIC_CUSTOM_HEADERS;
     env.ANTHROPIC_BASE_URL = void 0;
     env.AGENT_SHIM_PROVIDER = params.provider.definition.displayName;
@@ -8449,8 +8584,8 @@ function catalogueRows(provider, models) {
   return filterCatalogue(models, provider.catalogue).map((model) => ({ model: model.id, label: labelOf(model.id), description: describedAs(model.id, model.name === void 0 ? "Listed by the provider" : `Listed by the provider as ${model.name}`), behavesAs: TIER_BEHAVES_AS[tier] })).sort((left, right) => left.model.localeCompare(right.model));
 }
 function providerModelRows(provider, catalogue = []) {
-  const derived = provider.kind === "codex" ? codexRows(provider) : provider.kind === "antigravity" ? antigravityRows(provider) : httpRows(provider);
-  const declared = (provider.pickerModels ?? []).map(declaredRow);
+  const derived = provider.kind === "codex" ? codexRows(provider) : provider.kind === "antigravity" ? antigravityRows(provider) : provider.kind === "router" ? [] : httpRows(provider);
+  const declared = provider.kind === "router" ? [] : (provider.pickerModels ?? []).map(declaredRow);
   const declaredModels = new Set(declared.map((row) => row.model));
   const named = [...derived.filter((row) => !declaredModels.has(row.model)), ...declared];
   const taken = new Set(named.map((row) => labelOf(row.model)));
@@ -9070,7 +9205,7 @@ function resolveLaunch(params) {
   });
   const credentialNames = decided.identityCredentialBlock === void 0 ? [] : Object.keys(credentialVariables(decided.identityCredentialBlock.target ?? "bearer", ""));
   const environment = [.../* @__PURE__ */ new Set([...Object.keys(built).filter((name) => built[name] !== env[name]), ...credentialNames])].sort();
-  const credential = decided.provider !== void 0 ? { subject: "provider", name: decided.provider.name, summary: summariseCredential(decided.provider.definition.credential) } : decided.identityCredentialBlock !== void 0 && decided.farmIdentity !== void 0 ? { subject: "identity", name: decided.farmIdentity, summary: summariseCredential(decided.identityCredentialBlock) } : void 0;
+  const credential = decided.provider !== void 0 ? isRouterProvider(decided.provider.definition) ? void 0 : { subject: "provider", name: decided.provider.name, summary: summariseCredential(decided.provider.definition.credential) } : decided.identityCredentialBlock !== void 0 && decided.farmIdentity !== void 0 ? { subject: "identity", name: decided.farmIdentity, summary: summariseCredential(decided.identityCredentialBlock) } : void 0;
   return {
     decision: decided.decision,
     flags: decided.flags,
@@ -13914,11 +14049,12 @@ function cachedState(cacheEnv, owner, block) {
 function buildCredentialReport(provider, identity, identityName, cacheEnv) {
   const identityCredential = identity?.credential === void 0 ? void 0 : summariseCredential(identity.credential);
   const identityCached = identity?.credential === void 0 || identityName === void 0 ? void 0 : cachedState(cacheEnv, `identity ${identityName}`, identity.credential);
-  const providerCached = provider?.definition === void 0 ? void 0 : cachedState(cacheEnv, `provider ${provider.name}`, provider.definition.credential);
+  const providerCredential = provider?.definition !== void 0 && !isRouterProvider(provider.definition) ? provider.definition.credential : void 0;
+  const providerCached = providerCredential === void 0 || provider === void 0 ? void 0 : cachedState(cacheEnv, `provider ${provider.name}`, providerCredential);
   return {
     applies: provider !== void 0 ? "provider" : identityCredential !== void 0 ? "identity" : "stored-login",
     ...provider === void 0 ? {} : {
-      provider: provider.problem === void 0 ? { name: provider.name, credential: summariseCredential(provider.definition.credential), ...providerCached === void 0 ? {} : { cached: providerCached } } : { name: provider.name, problem: provider.problem }
+      provider: provider.problem === void 0 ? { name: provider.name, ...providerCredential === void 0 ? {} : { credential: summariseCredential(providerCredential), ...providerCached === void 0 ? {} : { cached: providerCached } } } : { name: provider.name, problem: provider.problem }
     },
     ...identityCredential === void 0 ? {} : { identity: identityCredential },
     ...identityCached === void 0 ? {} : { identityCached }
@@ -14013,7 +14149,7 @@ function formatCheckReport(report) {
   const { credential } = report;
   if (credential.provider !== void 0) {
     lines.push(
-      `  Provider ${credential.provider.name}: ${credential.provider.credential === void 0 ? `unusable: ${credential.provider.problem}` : formatCredentialSummary(credential.provider.credential)}${credential.provider.cached === void 0 ? "" : `; ${formatCachedCredentialState(credential.provider.cached)}`}`
+      `  Provider ${credential.provider.name}: ${credential.provider.credential === void 0 ? `unusable: ${credential.provider.problem ?? ""}` : formatCredentialSummary(credential.provider.credential)}${credential.provider.cached === void 0 ? "" : `; ${formatCachedCredentialState(credential.provider.cached)}`}`
     );
   }
   if (credential.identity !== void 0) {
@@ -14299,7 +14435,7 @@ var CachedCredentialStateSchema = z17.union([
   z17.strictObject({ store: z17.enum(CREDENTIAL_CACHE_STORES), status: z17.enum(["fresh", "expired"]), ageMs: z17.number(), expiresInMs: z17.number().optional() })
 ]);
 var CheckCredentialProviderSchema = z17.union([
-  z17.strictObject({ name: z17.string(), credential: CredentialSummarySchema, cached: CachedCredentialStateSchema.optional() }),
+  z17.strictObject({ name: z17.string(), credential: CredentialSummarySchema.optional(), cached: CachedCredentialStateSchema.optional() }),
   z17.strictObject({ name: z17.string(), problem: z17.string() })
 ]);
 var CheckCredentialSchema = z17.strictObject({
@@ -14672,6 +14808,107 @@ init_credentialCache();
 init_realCredentialCache();
 init_source();
 
+// src/modelsStore.ts
+init_store();
+init_schema();
+var VirtualModelNotFoundError = class extends Error {
+  constructor(name) {
+    super(`No virtual model named "${name}".`);
+    this.name = "VirtualModelNotFoundError";
+  }
+};
+function memberKindOf(ref, models) {
+  if (ref.startsWith("acct:")) {
+    return "account";
+  }
+  if (ref.startsWith("family:")) {
+    return "family";
+  }
+  return models?.virtual !== void 0 && ref in models.virtual ? "virtual" : "provider";
+}
+function expandMembers(name, models) {
+  const virtual = models?.virtual ?? {};
+  const expanded = [];
+  const walk = (current, chain) => {
+    const nested = virtual[current];
+    if (nested !== void 0) {
+      if (chain.includes(current)) {
+        throw new Error(`virtual model cycle: ${[...chain, current].join(" -> ")}`);
+      }
+      for (const member of nested.members) {
+        walk(member, [...chain, current]);
+      }
+      return;
+    }
+    if (!expanded.includes(current)) {
+      expanded.push(current);
+    }
+  };
+  const top = virtual[name];
+  if (top === void 0) {
+    throw new VirtualModelNotFoundError(name);
+  }
+  for (const member of top.members) {
+    walk(member, [name]);
+  }
+  return expanded;
+}
+
+// src/models/doctor.ts
+function modelsFindings(input) {
+  const findings = [];
+  const { models } = input;
+  const providers = new Set(input.providers);
+  const identities = new Set(input.identities);
+  const virtualNames = new Set(Object.keys(models.virtual ?? {}));
+  for (const [name, model] of Object.entries(models.virtual ?? {})) {
+    for (const member of model.members) {
+      const kind = memberKindOf(member, models);
+      if (kind === "provider" && !member.includes("/")) {
+        findings.push({ severity: "fail", message: `Virtual model "${name}" names member "${member}", which is neither a defined virtual model nor a provider model (a provider model is <provider>/<model>).` });
+      } else if (kind === "provider" && !providers.has(member.split("/")[0] ?? "")) {
+        findings.push({ severity: "fail", message: `Virtual model "${name}" names member "${member}", but no provider "${member.split("/")[0] ?? ""}" is defined.` });
+      }
+      if (kind === "virtual" && !virtualNames.has(member)) {
+        findings.push({ severity: "fail", message: `Virtual model "${name}" names member "${member}", but no virtual model "${member}" is defined.` });
+      }
+      if (kind === "account") {
+        const identity = member.slice("acct:".length).split("/")[0] ?? "";
+        if (!identities.has(identity)) {
+          findings.push({ severity: "fail", message: `Virtual model "${name}" names member "${member}", but no identity "${identity}" is defined.` });
+        }
+      }
+    }
+    try {
+      expandMembers(name, models);
+    } catch (error) {
+      findings.push({ severity: "fail", message: `Virtual model "${name}" cannot be expanded: ${error instanceof Error ? error.message : String(error)}` });
+    }
+    if (model.mode === "cheapest") {
+      const expanded = expandMembers(name, models);
+      const unpriced = expanded.filter((member) => models.prices?.[member] === void 0 && memberKindOf(member, models) !== "virtual");
+      if (unpriced.length > 0) {
+        findings.push({ severity: "warn", message: `Virtual model "${name}" chooses by price, but no prices are set for: ${unpriced.join(", ")}.` });
+      }
+    }
+  }
+  for (const [tier, ref] of Object.entries(models.tiers ?? {})) {
+    const kind = memberKindOf(ref, models);
+    const known = kind === "virtual" ? virtualNames.has(ref) : kind === "provider" ? providers.has(ref.split("/")[0] ?? "") : true;
+    if (!known) {
+      findings.push({ severity: "fail", message: `Tier ${tier} points at "${ref}", which names nothing defined.` });
+    }
+  }
+  const hidden = new Set(models.hide ?? []);
+  const shown = new Set(models.show ?? []);
+  for (const ref of hidden) {
+    if (shown.has(ref)) {
+      findings.push({ severity: "fail", message: `Model ref "${ref}" is both hidden and in the show-only list.` });
+    }
+  }
+  return findings;
+}
+
 // src/headroom/allowlistDrift.ts
 init_earlierRelease();
 init_state2();
@@ -14858,7 +15095,8 @@ var DOCTOR_SECTIONS = [
   "categories-local",
   "active-identity",
   "headroom",
-  "frontdoor"
+  "frontdoor",
+  "models"
 ];
 function refinePathShadow(status, ownExecutablePath, realpath) {
   if (status.status !== "shadowed") {
@@ -14981,9 +15219,11 @@ function pushProvider(push, entry, cacheEnv, signIn) {
   if (validated3.ignored.length > 0) {
     push("provider", "warn", describeIgnoredKeys(entry.path, validated3.ignored), entry.name);
   }
-  const cache = cacheClause(cacheEnv, `provider ${entry.name}`, validated3.data.credential);
-  push("provider", cache.unreadable ? "fail" : "pass", `${entry.name} is valid (${describeProviderEndpoint(validated3.data)}, credential ${describeCredential(validated3.data.credential)})${cache.text}.`, entry.name);
-  if (validated3.data.env?.ENABLE_TOOL_SEARCH === void 0) {
+  const router = isRouterProvider(validated3.data);
+  const noCache = { unreadable: false, text: "" };
+  const cache = router ? noCache : cacheClause(cacheEnv, `provider ${entry.name}`, validated3.data.credential);
+  push("provider", cache.unreadable ? "fail" : "pass", router ? `${entry.name} is valid (${describeProviderEndpoint(validated3.data)})` : `${entry.name} is valid (${describeProviderEndpoint(validated3.data)}, credential ${describeCredential(validated3.data.credential)})${cache.text}.`, entry.name);
+  if (!router && validated3.data.env?.ENABLE_TOOL_SEARCH === void 0) {
     push("provider", "warn", `${entry.name} does not set ENABLE_TOOL_SEARCH: a session on this provider keeps Claude Code's own API as its base URL, so it defers MCP tool loading and sends tool_reference payloads the upstream backend must understand. Set ENABLE_TOOL_SEARCH=false in the provider's env block to load tools upfront instead, when the backend does not support them.`, entry.name);
   }
   if (signIn !== void 0 && isCodexProvider(validated3.data) && validated3.data.codex?.login === "chatgpt-sign-in") {
@@ -15010,6 +15250,9 @@ function pushLegacyName(push, params) {
     );
   }
 }
+function parsedModelsOf(paths) {
+  return readGlobalConfig(paths)?.models;
+}
 function runDoctor(params) {
   const findings = [];
   const push = (section, severity, message, subject) => {
@@ -15211,6 +15454,17 @@ function runDoctor(params) {
       }
     }
   }
+  {
+    const models = params.models;
+    if (models === void 0) {
+      push("models", "pass", "No models block configured.");
+    } else {
+      for (const finding of modelsFindings({ models, providers: params.providers.map((entry) => entry.name), identities: params.identities.map((entry) => entry.name) })) {
+        push("models", finding.severity, finding.message);
+      }
+      push("models", "pass", "The models block is consistent.");
+    }
+  }
   if (params.categoriesLocal.raw === void 0) {
     push("categories-local", "pass", "No categories.local.json configured.");
   } else {
@@ -15305,6 +15559,7 @@ function runDoctor(params) {
   return { findings, ok: !findings.some((finding) => finding.severity === "fail") };
 }
 var SECTION_TITLES = {
+  models: "Virtual models",
   "ambient-credential": "Ambient-credential exposure",
   "binary-discovery": "Claude Code binary discovery",
   "claude-shim": "`claude` command shim",
@@ -15437,6 +15692,7 @@ function collectDoctorReport(params) {
     providers,
     directoryRules: { path: paths.directoryRulesFile, raw: realFsPort.readFileUtf8(paths.directoryRulesFile) },
     globalConfig: { path: paths.globalConfigFile, raw: realFsPort.readFileUtf8(paths.globalConfigFile) },
+    models: parsedModelsOf(paths),
     categoriesLocal: { path: paths.categoriesLocalFile, raw: realFsPort.readFileUtf8(paths.categoriesLocalFile) },
     activeIdentity: { path: paths.activeIdentityFile, raw: realFsPort.readFileUtf8(paths.activeIdentityFile) },
     binaryDiscovery,
@@ -15765,7 +16021,7 @@ var ProviderValueSchema = z24.strictObject({
   displayName: z24.string(),
   baseUrl: z24.string().optional(),
   codex: CodexProviderConfigSchema.optional(),
-  credential: CredentialSummarySchema2,
+  credential: CredentialSummarySchema2.optional(),
   env: z24.record(z24.string(), z24.string()).optional()
 });
 var ConfigNameInputSchema = z24.strictObject({ name: z24.string().min(1) });
@@ -15915,9 +16171,8 @@ function providerValue(name, provider) {
     name,
     kind: provider.kind ?? "http",
     displayName: provider.displayName,
-    ...isCodexProvider(provider) ? provider.codex === void 0 ? {} : { codex: provider.codex } : isAntigravityProvider(provider) ? provider.antigravity === void 0 ? {} : { antigravity: provider.antigravity } : { baseUrl: provider.baseUrl },
-    credential: summariseCredential(provider.credential),
-    ...provider.env === void 0 ? {} : { env: provider.env }
+    ...isCodexProvider(provider) ? provider.codex === void 0 ? {} : { codex: provider.codex } : isAntigravityProvider(provider) ? provider.antigravity === void 0 ? {} : { antigravity: provider.antigravity } : isRouterProvider(provider) ? {} : { baseUrl: provider.baseUrl },
+    ...isRouterProvider(provider) ? {} : { credential: summariseCredential(provider.credential), ...provider.env === void 0 ? {} : { env: provider.env } }
   };
 }
 function profileValue(name, paths) {
@@ -16099,7 +16354,7 @@ function createConfigApiRouter(deps) {
             if (input.baseUrl !== void 0 && isHttpProvider(existing) && input.baseUrl !== existing.baseUrl && credential?.sources === void 0) {
               throw new ORPCError2("BAD_REQUEST", { message: `Changing the base URL of provider "${input.name}" requires a credential block in the same call: the stored credential is not sent to a different endpoint.` });
             }
-            const cache = credential?.cache === void 0 ? void 0 : mergeCredentialCache(credential.cache === false ? { enabled: false } : { ...credential.cache, enabled: true }, existing.credential.cache);
+            const cache = credential?.cache === void 0 || isRouterProvider(existing) ? void 0 : mergeCredentialCache(credential.cache === false ? { enabled: false } : { ...credential.cache, enabled: true }, isRouterProvider(existing) ? void 0 : existing.credential.cache);
             const updated = updateProvider(paths, input.name, {
               ...input.displayName === void 0 ? {} : { displayName: input.displayName },
               ...input.baseUrl === void 0 ? {} : { baseUrl: input.baseUrl },