claude-use 11.8.1 → 11.9.0

package/dist/cli.cjs

@@ -26886,9 +26886,15 @@ function expandAllCategoryKey(pairs) {
   const expanded = Object.fromEntries(OVERRIDABLE_CATEGORIES.filter((category) => !all2 || category !== "runtime").map((category) => [category, all2]));
   return { ...expanded, ...rest };
 }
+function isHttpProvider(provider) {
+  return provider.kind === void 0 || provider.kind === "http";
+}
 function isCodexProvider(provider) {
   return provider.kind === "codex";
 }
+function isAntigravityProvider(provider) {
+  return provider.kind === "antigravity";
+}
 function poolMemberIdentity(member) {
   return typeof member === "string" ? member : member.identity;
 }
@@ -26900,7 +26906,7 @@ function isTimeZone(name) {
     return false;
   }
 }
-var import_node_path4, CATEGORY_NAMES, OVERRIDABLE_CATEGORIES, CategoryMapSchema, DURATION_RE, DurationSchema, WhenConditionObjectSchema, WhenSchema, EntryValueSchema, ENTRY_KEY_RE, EntriesSchema, LaunchSchema, CREDENTIAL_TARGETS, PROVIDER_CREDENTIAL_TARGETS, CREDENTIAL_TARGET_VARS, ArgvSchema, CommandSourceOptions, EnvCredentialSourceSchema, FileCredentialSourceSchema, CommandCredentialSourceSchema, OpCredentialSourceSchema, KeychainCredentialSourceSchema, LiteralCredentialSourceSchema, CredentialSourceSchema, RemoteCredentialSourceSchema, CREDENTIAL_CACHE_STORES, CredentialCacheSchema, CredentialSchema, ProviderCredentialSchema, RESERVED_PROVIDER_ENV_KEYS, ProviderEnvSchema, PROVIDER_KINDS, CODEX_TIERS, CODEX_EFFORTS, CODEX_LOGINS, CODEX_DEFAULT_LOGIN, CODEX_DEFAULT_MODEL, CODEX_DEFAULT_TIER_MODELS, CODEX_DEFAULT_EFFORT, CodexProviderConfigSchema, ProviderRouteSchema, HttpProviderSchema, CodexProviderSchema, ProviderSchema, ConfigProfileSchema, POOL_SELECTOR_PREFIX, POOL_NAME_PATTERN, IDENTITY_NAME_PATTERN, PoolNameSchema, SELECTOR_RE, IdentitySelectorSchema, PoolMemberSchema, POOL_PREFERENCES, PoolPreferenceSchema, PoolSchema, WEEKDAYS, AnchorSchema, JOB_WINDOWS, JobTriggerSchema, JobTargetSchema, JobSchema, DirectoryRuleSchema, DirectoryRulesSchema, PortableConfigSchema, HEADROOM_MODES, HEADROOM_CCR_MODES, HEADROOM_ROLLOUT_CHANNELS, INTERCEPT_CHANNELS, READ_MATURATION_CHANNELS, HeadroomGlobalConfigObjectSchema, HeadroomGlobalConfigSchema, HEADROOM_DEFAULT_SOURCE, HEADROOM_DEFAULT_IDLE_SHUTDOWN_MINUTES, FRONTDOOR_DEFAULT_IDLE_SHUTDOWN_MINUTES, FrontDoorGlobalConfigSchema, UPDATE_MODES, UpdateGlobalConfigSchema, GlobalConfigSchema, IdentitySchema, CategoryClassificationSchema, CategoryClassificationOverlaySchema, SHIPPED_CATEGORY_DEFAULTS;
+var import_node_path4, CATEGORY_NAMES, OVERRIDABLE_CATEGORIES, CategoryMapSchema, DURATION_RE, DurationSchema, WhenConditionObjectSchema, WhenSchema, EntryValueSchema, ENTRY_KEY_RE, EntriesSchema, LaunchSchema, CREDENTIAL_TARGETS, PROVIDER_CREDENTIAL_TARGETS, CREDENTIAL_TARGET_VARS, ArgvSchema, CommandSourceOptions, EnvCredentialSourceSchema, FileCredentialSourceSchema, CommandCredentialSourceSchema, OpCredentialSourceSchema, KeychainCredentialSourceSchema, LiteralCredentialSourceSchema, CredentialSourceSchema, RemoteCredentialSourceSchema, CREDENTIAL_CACHE_STORES, CredentialCacheSchema, CredentialSchema, ProviderCredentialSchema, RESERVED_PROVIDER_ENV_KEYS, ProviderEnvSchema, PROVIDER_KINDS, ANTIGRAVITY_MODES, ANTIGRAVITY_TIERS, ANTIGRAVITY_EFFORTS, ANTIGRAVITY_DEFAULT_MODE, ANTIGRAVITY_DEFAULT_MODEL, ANTIGRAVITY_DEFAULT_TIER_MODELS, ANTIGRAVITY_DEFAULT_EFFORT, AntigravityProviderConfigSchema, CODEX_TIERS, CODEX_EFFORTS, CODEX_LOGINS, CODEX_DEFAULT_LOGIN, CODEX_DEFAULT_MODEL, CODEX_DEFAULT_TIER_MODELS, CODEX_DEFAULT_EFFORT, CodexProviderConfigSchema, ProviderRouteSchema, HttpProviderSchema, CodexProviderSchema, AntigravityProviderSchema, ProviderSchema, ConfigProfileSchema, POOL_SELECTOR_PREFIX, POOL_NAME_PATTERN, IDENTITY_NAME_PATTERN, PoolNameSchema, SELECTOR_RE, IdentitySelectorSchema, PoolMemberSchema, POOL_PREFERENCES, PoolPreferenceSchema, PoolSchema, WEEKDAYS, AnchorSchema, JOB_WINDOWS, JobTriggerSchema, JobTargetSchema, JobSchema, DirectoryRuleSchema, DirectoryRulesSchema, PortableConfigSchema, HEADROOM_MODES, HEADROOM_CCR_MODES, HEADROOM_ROLLOUT_CHANNELS, INTERCEPT_CHANNELS, READ_MATURATION_CHANNELS, HeadroomGlobalConfigObjectSchema, HeadroomGlobalConfigSchema, HEADROOM_DEFAULT_SOURCE, HEADROOM_DEFAULT_IDLE_SHUTDOWN_MINUTES, FRONTDOOR_DEFAULT_IDLE_SHUTDOWN_MINUTES, FrontDoorGlobalConfigSchema, UPDATE_MODES, UpdateGlobalConfigSchema, GlobalConfigSchema, IdentitySchema, CategoryClassificationSchema, CategoryClassificationOverlaySchema, SHIPPED_CATEGORY_DEFAULTS;
 var init_schema = __esm({
   "src/config/schema.ts"() {
     "use strict";
@@ -26999,7 +27005,50 @@ var init_schema = __esm({
     ProviderEnvSchema = external_exports.record(external_exports.string().min(1), external_exports.string()).refine((env) => !Object.keys(env).some((key) => RESERVED_PROVIDER_ENV_KEYS.includes(key)), {
       message: `env may not set ${RESERVED_PROVIDER_ENV_KEYS.join(", ")}: the credential block's target sets one and agent-shim removes the others`
     });
-    PROVIDER_KINDS = ["http", "codex"];
+    PROVIDER_KINDS = ["http", "codex", "antigravity"];
+    ANTIGRAVITY_MODES = ["cloud", "local"];
+    ANTIGRAVITY_TIERS = ["fable", "opus", "sonnet", "haiku"];
+    ANTIGRAVITY_EFFORTS = ["none", "low", "medium", "high", "xhigh", "max"];
+    ANTIGRAVITY_DEFAULT_MODE = "cloud";
+    ANTIGRAVITY_DEFAULT_MODEL = "gemini-2.5-pro";
+    ANTIGRAVITY_DEFAULT_TIER_MODELS = Object.freeze({
+      fable: "gemini-2.5-pro",
+      opus: "gemini-2.5-pro",
+      sonnet: "gemini-2.5-flash",
+      haiku: "gemini-2.5-flash"
+    });
+    ANTIGRAVITY_DEFAULT_EFFORT = "low";
+    AntigravityProviderConfigSchema = external_exports.strictObject({
+      /** Operational mode: direct cloud endpoint or local ACP daemon. Defaults to `cloud`. */
+      mode: external_exports.enum(ANTIGRAVITY_MODES).optional(),
+      /** The model a request maps to when no tier matches its model name. */
+      defaultModel: external_exports.string().min(1).optional(),
+      /** Per-tier overrides of the shipped mapping, matched by substring of the requested model name in `ANTIGRAVITY_TIERS` order. */
+      models: external_exports.strictObject({
+        fable: external_exports.string().min(1).optional(),
+        opus: external_exports.string().min(1).optional(),
+        sonnet: external_exports.string().min(1).optional(),
+        haiku: external_exports.string().min(1).optional()
+      }).optional(),
+      /** The reasoning effort used when the request's own effort is not one the backend accepts. */
+      effort: external_exports.enum(ANTIGRAVITY_EFFORTS).optional(),
+      /** Cloud-specific settings (for `mode: "cloud"`). */
+      cloud: external_exports.strictObject({
+        /** Google Gemini API or custom gateway endpoint. Defaults to `https://generativelanguage.googleapis.com`. */
+        endpoint: external_exports.url().optional(),
+        /** Google Cloud Project ID (when using Vertex AI). */
+        projectId: external_exports.string().min(1).optional(),
+        /** Google Cloud location/region (when using Vertex AI). */
+        location: external_exports.string().min(1).optional()
+      }).optional(),
+      /** Local-specific settings (for `mode: "local"`). */
+      local: external_exports.strictObject({
+        /** Command and arguments to spawn the ACP server process. */
+        command: external_exports.array(external_exports.string().min(1)).min(1).optional(),
+        /** Path to an existing Unix domain socket to connect to instead of spawning a process. */
+        socketPath: external_exports.string().min(1).optional()
+      }).optional()
+    });
     CODEX_TIERS = ["fable", "opus", "sonnet", "haiku"];
     CODEX_EFFORTS = ["none", "low", "medium", "high"];
     CODEX_LOGINS = ["codex-cli", "chatgpt-sign-in"];
@@ -27053,7 +27102,15 @@ var init_schema = __esm({
       env: ProviderEnvSchema.optional(),
       codex: CodexProviderConfigSchema.optional()
     });
-    ProviderSchema = external_exports.discriminatedUnion("kind", [HttpProviderSchema, CodexProviderSchema]);
+    AntigravityProviderSchema = external_exports.strictObject({
+      $schema: external_exports.string().optional(),
+      kind: external_exports.literal("antigravity"),
+      displayName: external_exports.string().min(1),
+      credential: ProviderCredentialSchema,
+      env: ProviderEnvSchema.optional(),
+      antigravity: AntigravityProviderConfigSchema.optional()
+    });
+    ProviderSchema = external_exports.discriminatedUnion("kind", [HttpProviderSchema, CodexProviderSchema, AntigravityProviderSchema]);
     ConfigProfileSchema = external_exports.strictObject({
       $schema: external_exports.string().optional(),
       description: external_exports.string().optional(),
@@ -27616,7 +27673,7 @@ function daemonIdentity(commandLine, socketPath) {
 function earlierReleaseAllowlistHash(providers, doorOrigin) {
   const entries = /* @__PURE__ */ new Set([EARLIER_RELEASE_ANTHROPIC_UPSTREAM]);
   for (const provider of providers) {
-    if (!isCodexProvider(provider)) {
+    if (isHttpProvider(provider)) {
       entries.add(provider.baseUrl);
     }
   }
@@ -34007,7 +34064,7 @@ var init_package = __esm({
   "package.json"() {
     package_default = {
       name: "claude-use",
-      version: "11.8.1",
+      version: "11.9.0",
       description: "A profile manager and launcher for Claude Code that lets one person run multiple logins from one machine while controlling what gets shared between them.",
       license: "MIT",
       author: "Joseph Mearman <joseph@mearman.co.uk>",
@@ -35669,11 +35726,20 @@ function listProviderNames(readdir, providersDir) {
   return entries.filter((entry) => entry.endsWith(".json")).map((entry) => entry.slice(0, -".json".length)).sort();
 }
 function describeProviderEndpoint(provider) {
-  return isCodexProvider(provider) ? "codex translation daemon" : provider.baseUrl;
+  if (isCodexProvider(provider)) {
+    return "codex translation daemon";
+  }
+  if (isAntigravityProvider(provider)) {
+    return (provider.antigravity?.mode ?? ANTIGRAVITY_DEFAULT_MODE) === "local" ? "antigravity local (ACP daemon)" : "antigravity cloud (Gemini API)";
+  }
+  return provider.baseUrl;
 }
 function isEmptyCodexConfig(config2) {
   return config2 === void 0 || config2.defaultModel === void 0 && config2.effort === void 0 && config2.login === void 0 && (config2.models === void 0 || Object.keys(config2.models).length === 0);
 }
+function isEmptyAntigravityConfig(config2) {
+  return config2 === void 0 || config2.mode === void 0 && config2.defaultModel === void 0 && config2.effort === void 0 && config2.cloud === void 0 && config2.local === void 0 && (config2.models === void 0 || Object.keys(config2.models).length === 0);
+}
 function addProvider(paths, name, input2) {
   if (providerExists(paths, name)) {
     throw new ProviderAlreadyExistsError(name);
@@ -35685,19 +35751,25 @@ function addProvider(paths, name, input2) {
   if (kind === "codex" && input2.baseUrl !== void 0) {
     throw new ProviderKindMismatchError("A codex provider has no base URL: the launcher points its sessions at the front-door daemon. Drop --base-url.");
   }
+  if (kind === "antigravity" && input2.baseUrl !== void 0) {
+    throw new ProviderKindMismatchError("An antigravity provider has no base URL: the launcher points its sessions at the front-door daemon. Drop --base-url.");
+  }
   if (kind === "http" && input2.baseUrl === void 0) {
     throw new ProviderKindMismatchError("An http provider needs --base-url.");
   }
-  if (kind === "http" && !isEmptyCodexConfig(input2.codex)) {
+  if (kind !== "codex" && !isEmptyCodexConfig(input2.codex)) {
     throw new ProviderKindMismatchError("Codex settings apply only to a codex provider (--kind codex).");
   }
+  if (kind !== "antigravity" && !isEmptyAntigravityConfig(input2.antigravity)) {
+    throw new ProviderKindMismatchError("Antigravity settings apply only to an antigravity provider (--kind antigravity).");
+  }
   const shared = {
     displayName: input2.displayName,
     credential: { sources: input2.sources, ...input2.target === void 0 ? {} : { target: input2.target } },
     ...input2.env === void 0 || Object.keys(input2.env).length === 0 ? {} : { env: input2.env }
   };
   const parsed = ProviderSchema.safeParse(
-    kind === "codex" ? { kind, ...shared, ...isEmptyCodexConfig(input2.codex) ? {} : { codex: input2.codex } } : { ...shared, baseUrl: input2.baseUrl }
+    kind === "codex" ? { kind, ...shared, ...isEmptyCodexConfig(input2.codex) ? {} : { codex: input2.codex } } : kind === "antigravity" ? { kind, ...shared, ...isEmptyAntigravityConfig(input2.antigravity) ? {} : { antigravity: input2.antigravity } } : { ...shared, baseUrl: input2.baseUrl }
   );
   if (!parsed.success) {
     throw new ConfigValidationError(providerJsonPath(paths, name), parsed.error.issues);
@@ -35717,8 +35789,14 @@ function updateProvider(paths, name, input2) {
   if (isCodexProvider(existing) && input2.baseUrl !== void 0) {
     throw new ProviderKindMismatchError(`Provider "${name}" is a codex provider, which has no base URL.`);
   }
+  if (isAntigravityProvider(existing) && input2.baseUrl !== void 0) {
+    throw new ProviderKindMismatchError(`Provider "${name}" is an antigravity provider, which has no base URL.`);
+  }
   if (!isCodexProvider(existing) && !isEmptyCodexConfig(input2.codex)) {
-    throw new ProviderKindMismatchError(`Provider "${name}" is an http provider; codex settings apply only to a codex provider.`);
+    throw new ProviderKindMismatchError(`Provider "${name}" is not a codex provider; codex settings apply only to a codex provider.`);
+  }
+  if (!isAntigravityProvider(existing) && !isEmptyAntigravityConfig(input2.antigravity)) {
+    throw new ProviderKindMismatchError(`Provider "${name}" is not an antigravity provider; antigravity settings apply only to an antigravity provider.`);
   }
   const shared = {
     ...input2.displayName === void 0 ? {} : { displayName: input2.displayName },
@@ -35737,6 +35815,13 @@ function updateProvider(paths, name, input2) {
       ...existing.codex?.models === void 0 && input2.codex?.models === void 0 ? {} : { models: { ...existing.codex?.models, ...input2.codex?.models } }
     };
     candidate = { ...existing, ...shared, codex: isEmptyCodexConfig(codex) ? void 0 : codex };
+  } else if (isAntigravityProvider(existing)) {
+    const antigravity = {
+      ...existing.antigravity,
+      ...input2.antigravity,
+      ...existing.antigravity?.models === void 0 && input2.antigravity?.models === void 0 ? {} : { models: { ...existing.antigravity?.models, ...input2.antigravity?.models } }
+    };
+    candidate = { ...existing, ...shared, antigravity: isEmptyAntigravityConfig(antigravity) ? void 0 : antigravity };
   } else {
     candidate = { ...existing, ...shared, ...input2.baseUrl === void 0 ? {} : { baseUrl: input2.baseUrl } };
   }
@@ -36974,7 +37059,7 @@ var require_util2 = __commonJS({
     var { kDestroyed, kBodyUsed, kListeners, kBody } = require_symbols();
     var { IncomingMessage: IncomingMessage2 } = require("node:http");
     var stream = require("node:stream");
-    var net4 = require("node:net");
+    var net5 = require("node:net");
     var { stringify } = require("node:querystring");
     var { EventEmitter: EE2 } = require("node:events");
     var timers = require_timers();
@@ -37123,7 +37208,7 @@ var require_util2 = __commonJS({
       }
       assert2(typeof host === "string");
       const servername = getHostname(host);
-      if (net4.isIP(servername)) {
+      if (net5.isIP(servername)) {
         return "";
       }
       return servername;
@@ -38786,7 +38871,7 @@ var require_dispatcher_base = __commonJS({
 var require_connect = __commonJS({
   "node_modules/.pnpm/undici@7.29.1/node_modules/undici/lib/core/connect.js"(exports2, module2) {
     "use strict";
-    var net4 = require("node:net");
+    var net5 = require("node:net");
     var assert2 = require("node:assert");
     var util2 = require_util2();
     var { InvalidArgumentError: InvalidArgumentError2 } = require_errors();
@@ -38869,7 +38954,7 @@ var require_connect = __commonJS({
         } else {
           assert2(!httpSocket, "httpSocket can only be sent on TLS update");
           port = port || 80;
-          socket = net4.connect({
+          socket = net5.connect({
             highWaterMark: 64 * 1024,
             // Same as nodejs fs streams.
             ...options,
@@ -44546,7 +44631,7 @@ var require_client = __commonJS({
   "node_modules/.pnpm/undici@7.29.1/node_modules/undici/lib/dispatcher/client.js"(exports2, module2) {
     "use strict";
     var assert2 = require("node:assert");
-    var net4 = require("node:net");
+    var net5 = require("node:net");
     var http8 = require("node:http");
     var util2 = require_util2();
     var { ClientStats } = require_stats();
@@ -44701,7 +44786,7 @@ var require_client = __commonJS({
         if (maxRequestsPerClient != null && (!Number.isInteger(maxRequestsPerClient) || maxRequestsPerClient < 0)) {
           throw new InvalidArgumentError2("maxRequestsPerClient must be a positive number");
         }
-        if (localAddress != null && (typeof localAddress !== "string" || net4.isIP(localAddress) === 0)) {
+        if (localAddress != null && (typeof localAddress !== "string" || net5.isIP(localAddress) === 0)) {
           throw new InvalidArgumentError2("localAddress must be valid string IP address");
         }
         if (maxResponseSize != null && (!Number.isInteger(maxResponseSize) || maxResponseSize < -1)) {
@@ -44881,7 +44966,7 @@ var require_client = __commonJS({
         const idx = hostname3.indexOf("]");
         assert2(idx !== -1);
         const ip2 = hostname3.substring(1, idx);
-        assert2(net4.isIPv6(ip2));
+        assert2(net5.isIPv6(ip2));
         hostname3 = ip2;
       }
       client[kConnecting] = true;
@@ -45826,10 +45911,10 @@ var require_socks5_utils = __commonJS({
   "node_modules/.pnpm/undici@7.29.1/node_modules/undici/lib/core/socks5-utils.js"(exports2, module2) {
     "use strict";
     var { Buffer: Buffer3 } = require("node:buffer");
-    var net4 = require("node:net");
+    var net5 = require("node:net");
     var { InvalidArgumentError: InvalidArgumentError2 } = require_errors();
     function parseAddress(address) {
-      if (net4.isIPv4(address)) {
+      if (net5.isIPv4(address)) {
         const parts = address.split(".").map(Number);
         return {
           type: 1,
@@ -45837,7 +45922,7 @@ var require_socks5_utils = __commonJS({
           buffer: Buffer3.from(parts)
         };
       }
-      if (net4.isIPv6(address)) {
+      if (net5.isIPv6(address)) {
         return {
           type: 4,
           // IPv6
@@ -45860,7 +45945,7 @@ var require_socks5_utils = __commonJS({
       if (address.includes(".")) {
         const lastColonIndex = address.lastIndexOf(":");
         const ipv4Part = address.slice(lastColonIndex + 1);
-        if (net4.isIPv4(ipv4Part)) {
+        if (net5.isIPv4(ipv4Part)) {
           const octets = ipv4Part.split(".").map(Number);
           const high = (octets[0] << 8 | octets[1]).toString(16);
           const low = (octets[2] << 8 | octets[3]).toString(16);
@@ -63657,10 +63742,10 @@ function resolveLaunch(params) {
     environment
   };
 }
-function runLaunchPlan(plan, spawn5) {
+function runLaunchPlan(plan, spawn6) {
   try {
     plan.markChildStarted();
-    const result = spawn5.spawnSync(plan.bin, plan.args, { stdio: "inherit", env: plan.env });
+    const result = spawn6.spawnSync(plan.bin, plan.args, { stdio: "inherit", env: plan.env });
     if (result.error !== void 0) {
       throw result.error;
     }
@@ -64109,7 +64194,7 @@ function createQuotaRefresher(deps) {
 function createProviderLookup(ports) {
   return (name) => {
     const definition = loadProvider(ports.providersDir, name, ports.fs);
-    if (definition === void 0 || isCodexProvider(definition)) {
+    if (definition === void 0 || !isHttpProvider(definition)) {
       return void 0;
     }
     return {
@@ -112410,7 +112495,7 @@ function writeUsageSnapshot(log, snapshot) {
     log(`usage snapshot write failed: ${error63 instanceof Error ? error63.message : String(error63)}`);
   }
 }
-function createCodexRoutePorts(log, signInFile) {
+function createCodexRoutePorts(log, signInFile, options) {
   const agent = createUpstreamAgent();
   const upstreamFetch = createUpstreamFetch(agent);
   const tempSuffix = `${String(process.pid)}.${(0, import_node_crypto9.randomUUID)()}`;
@@ -112426,9 +112511,11 @@ function createCodexRoutePorts(log, signInFile) {
       "codex-cli": { fetch: upstreamFetch, auth, timers: realTimers, randomId: import_node_crypto9.randomUUID },
       "chatgpt-sign-in": { fetch: upstreamFetch, auth: signIn.auth, timers: realTimers, randomId: import_node_crypto9.randomUUID, target: RESPONSES_API_TARGET }
     },
-    writeUsageSnapshot: (snapshot) => {
-      writeUsageSnapshot(log, snapshot);
-    },
+    ...options?.enableUsageSnapshot === true ? {
+      writeUsageSnapshot: (snapshot) => {
+        writeUsageSnapshot(log, snapshot);
+      }
+    } : {},
     now: () => Date.now(),
     log
   };
@@ -112559,7 +112646,7 @@ function registerCodexCommand(program2, deps) {
 }
 
 // src/frontdoor/commands.ts
-var import_node_crypto21 = require("node:crypto");
+var import_node_crypto23 = require("node:crypto");
 var import_node_path51 = __toESM(require("node:path"), 1);
 var import_node_fs19 = __toESM(require("node:fs"), 1);
 init_commandDeps();
@@ -114184,6 +114271,13 @@ function watchedInstallEntry(resolvedOwnExecutablePath, siblingExists) {
   const sibling = import_node_path44.default.join(parsed.dir, `agent-shim${parsed.ext}`);
   return siblingExists(sibling) ? sibling : resolvedOwnExecutablePath;
 }
+var AWAIT_PID_POLL_MS = 50;
+async function awaitPidExit(pid, boundMs, ports) {
+  const deadline = ports.now() + boundMs;
+  while (ports.isRunning(pid) && ports.now() < deadline) {
+    await ports.sleep(AWAIT_PID_POLL_MS);
+  }
+}
 var FRONTDOOR_SUPERVISOR_STILL_RUNNING = -1;
 var FRONTDOOR_POLL_MS = 1e3;
 var MS_PER_MINUTE3 = 6e4;
@@ -125795,7 +125889,7 @@ function providerValue(name, provider) {
     name,
     kind: provider.kind ?? "http",
     displayName: provider.displayName,
-    ...isCodexProvider(provider) ? provider.codex === void 0 ? {} : { codex: provider.codex } : { baseUrl: provider.baseUrl },
+    ...isCodexProvider(provider) ? provider.codex === void 0 ? {} : { codex: provider.codex } : isAntigravityProvider(provider) ? provider.antigravity === void 0 ? {} : { antigravity: provider.antigravity } : { baseUrl: provider.baseUrl },
     credential: summariseCredential(provider.credential),
     ...provider.env === void 0 ? {} : { env: provider.env }
   };
@@ -125974,7 +126068,7 @@ function createConfigApiRouter(deps) {
               throw new ProviderNotFoundError(input2.name);
             }
             const credential = input2.credential;
-            if (input2.baseUrl !== void 0 && !isCodexProvider(existing) && input2.baseUrl !== existing.baseUrl && credential?.sources === void 0) {
+            if (input2.baseUrl !== void 0 && isHttpProvider(existing) && input2.baseUrl !== existing.baseUrl && credential?.sources === void 0) {
               throw new ORPCError("BAD_REQUEST", { message: `Changing the base URL of provider "${input2.name}" requires a credential block in the same call: the stored credential is not sent to a different endpoint.` });
             }
             const cache = credential?.cache === void 0 ? void 0 : mergeCredentialCache(credential.cache === false ? { enabled: false } : { ...credential.cache, enabled: true }, existing.credential.cache);
@@ -127434,6 +127528,198 @@ function translateRequest(body, config2) {
   return { request: request7, toolNames: names };
 }
 
+// src/antigravity/translate.ts
+var import_node_crypto20 = require("node:crypto");
+init_schema();
+function resolveAntigravityConfig(config2) {
+  const overrides = config2?.models;
+  return {
+    mode: config2?.mode ?? ANTIGRAVITY_DEFAULT_MODE,
+    defaultModel: config2?.defaultModel ?? ANTIGRAVITY_DEFAULT_MODEL,
+    models: {
+      fable: overrides?.fable ?? ANTIGRAVITY_DEFAULT_TIER_MODELS.fable,
+      opus: overrides?.opus ?? ANTIGRAVITY_DEFAULT_TIER_MODELS.opus,
+      sonnet: overrides?.sonnet ?? ANTIGRAVITY_DEFAULT_TIER_MODELS.sonnet,
+      haiku: overrides?.haiku ?? ANTIGRAVITY_DEFAULT_TIER_MODELS.haiku
+    },
+    effort: config2?.effort ?? ANTIGRAVITY_DEFAULT_EFFORT,
+    cloud: {
+      endpoint: config2?.cloud?.endpoint,
+      projectId: config2?.cloud?.projectId,
+      location: config2?.cloud?.location
+    },
+    local: {
+      command: config2?.local?.command,
+      socketPath: config2?.local?.socketPath
+    }
+  };
+}
+function mapModel2(requested, config2) {
+  if (requested.startsWith("gemini-") || requested.startsWith("antigravity-")) {
+    return requested;
+  }
+  const lower = requested.toLowerCase();
+  const tier = ANTIGRAVITY_TIERS.find((candidate) => lower.includes(candidate));
+  return tier === void 0 ? config2.defaultModel : config2.models[tier];
+}
+var EFFORT_TO_BUDGET = {
+  none: 0,
+  low: 1024,
+  medium: 4096,
+  high: 8192,
+  xhigh: 16384,
+  max: 32768
+};
+function mapEffort2(request7, config2) {
+  const requested = request7.output_config?.effort;
+  const level = ANTIGRAVITY_EFFORTS.find((effort) => effort === requested) ?? config2.effort;
+  const budget = EFFORT_TO_BUDGET[level];
+  return budget > 0 ? budget : void 0;
+}
+var BILLING_HEADER_LINE2 = /^x-anthropic-billing-header:[^\n]*\n/;
+function systemToInstruction(system) {
+  if (system === void 0) {
+    return void 0;
+  }
+  const texts = typeof system === "string" ? [system] : system.filter(isTextBlock).map((b) => b.text);
+  const combined = texts.join("\n").replace(BILLING_HEADER_LINE2, "").trim();
+  return combined.length > 0 ? { parts: [{ text: combined }] } : void 0;
+}
+var ANTIGRAVITY_TOOL_NAME_LIMIT = 64;
+var TOOL_NAME_HASH_CHARS2 = 8;
+function shortToolName2(name, names) {
+  const sanitized = name.replace(/[^a-zA-Z0-9_]/g, "_");
+  if (sanitized === name && name.length <= ANTIGRAVITY_TOOL_NAME_LIMIT) {
+    return name;
+  }
+  let result;
+  if (sanitized.length <= ANTIGRAVITY_TOOL_NAME_LIMIT) {
+    result = sanitized;
+  } else {
+    const hash2 = (0, import_node_crypto20.createHash)("sha256").update(name).digest("hex").slice(0, TOOL_NAME_HASH_CHARS2);
+    const prefix = sanitized.slice(0, ANTIGRAVITY_TOOL_NAME_LIMIT - TOOL_NAME_HASH_CHARS2 - 1);
+    result = `${prefix}_${hash2}`;
+  }
+  names.set(result, name);
+  return result;
+}
+var NON_TEXT_TOOL_RESULT2 = "[non-text tool result omitted]";
+function flattenToolResult2(content) {
+  if (content === void 0) {
+    return "";
+  }
+  if (typeof content === "string") {
+    return content;
+  }
+  return content.map((block2) => isTextBlock(block2) ? block2.text : NON_TEXT_TOOL_RESULT2).join("\n");
+}
+function systemReminder2(text2) {
+  return `<system-reminder>
+${text2}
+</system-reminder>`;
+}
+function turnBlocks2(message) {
+  const blocks = typeof message.content === "string" ? [{ type: "text", text: message.content }] : message.content;
+  if (message.role !== "system") {
+    return blocks;
+  }
+  return blocks.map((block2) => isTextBlock(block2) ? { ...block2, text: systemReminder2(block2.text) } : block2);
+}
+function isRecord6(value2) {
+  return typeof value2 === "object" && value2 !== null && !Array.isArray(value2);
+}
+function messagesToGeminiContents(messages, names, toolIdToName) {
+  const contents = [];
+  let pendingRole;
+  let pendingParts = [];
+  const flush = () => {
+    if (pendingRole !== void 0 && pendingParts.length > 0) {
+      contents.push({ role: pendingRole, parts: pendingParts });
+    }
+    pendingRole = void 0;
+    pendingParts = [];
+  };
+  const ensureRole = (role) => {
+    if (pendingRole !== role) {
+      flush();
+      pendingRole = role;
+    }
+    return pendingParts;
+  };
+  for (const message of messages) {
+    const defaultRole = message.role === "assistant" ? "model" : "user";
+    for (const block2 of turnBlocks2(message)) {
+      if (isTextBlock(block2)) {
+        if (block2.text.trim() === "") {
+          continue;
+        }
+        ensureRole(defaultRole).push({ text: block2.text });
+      } else if (isImageBlock(block2)) {
+        const { source } = block2;
+        if (source.type === "base64") {
+          ensureRole("user").push({
+            inlineData: {
+              mimeType: source.media_type,
+              data: source.data
+            }
+          });
+        }
+      } else if (isToolUseBlock(block2)) {
+        const sanitizedName = shortToolName2(block2.name, names);
+        toolIdToName.set(block2.id, sanitizedName);
+        ensureRole("model").push({
+          functionCall: {
+            name: sanitizedName,
+            args: isRecord6(block2.input) ? block2.input : {}
+          }
+        });
+      } else if (isToolResultBlock(block2)) {
+        const toolName = toolIdToName.get(block2.tool_use_id) ?? "unknown_tool";
+        ensureRole("user").push({
+          functionResponse: {
+            name: toolName,
+            response: { output: flattenToolResult2(block2.content) }
+          }
+        });
+      }
+    }
+  }
+  flush();
+  return contents;
+}
+var EMPTY_SCHEMA = { type: "object", properties: {} };
+function mapTools2(tools, names) {
+  if (tools === void 0 || tools.length === 0) {
+    return void 0;
+  }
+  const declarations = tools.map((tool) => ({
+    name: shortToolName2(tool.name, names),
+    description: tool.description,
+    parameters: tool.input_schema ?? EMPTY_SCHEMA
+  }));
+  return [{ functionDeclarations: declarations }];
+}
+function translateRequest2(request7, config2) {
+  const toolNames = /* @__PURE__ */ new Map();
+  const toolIdToName = /* @__PURE__ */ new Map();
+  const model = mapModel2(request7.model ?? "", config2);
+  const thinkingBudget = mapEffort2(request7, config2);
+  const systemInstruction = systemToInstruction(request7.system);
+  const contents = messagesToGeminiContents(request7.messages, toolNames, toolIdToName);
+  const tools = mapTools2(request7.tools, toolNames);
+  const req = {
+    contents,
+    ...systemInstruction === void 0 ? {} : { systemInstruction },
+    ...tools === void 0 ? {} : { tools },
+    ...thinkingBudget !== void 0 ? { generationConfig: { thinkingConfig: { thinkingBudget } } } : {}
+  };
+  return {
+    model,
+    request: req,
+    toolNames
+  };
+}
+
 // src/frontdoor/providerRoute.ts
 init_credential();
 init_providersStore();
@@ -127836,9 +128122,11 @@ function createCodexRoute(ports) {
       return errorResponse(HTTP_STATUS.badGateway, `codex backend unreachable: ${describeError3(error63)}`);
     }
     const snapshot = (quotaError) => {
-      const built = buildUsageSnapshot(upstream.headers, quotaError, ports.now());
-      if (built !== void 0) {
-        ports.writeUsageSnapshot(built);
+      if (ports.writeUsageSnapshot !== void 0) {
+        const built = buildUsageSnapshot(upstream.headers, quotaError, ports.now());
+        if (built !== void 0) {
+          ports.writeUsageSnapshot(built);
+        }
       }
     };
     if (!upstream.ok || upstream.body === null) {
@@ -128024,6 +128312,770 @@ function createCodexRouteMount(ports, upstreamBase, provider) {
   };
 }
 
+// src/antigravity/route.ts
+var import_node_crypto21 = require("node:crypto");
+init_route();
+
+// src/antigravity/relay.ts
+function renderSseFrame2(frame) {
+  return `event: ${frame.event}
+data: ${JSON.stringify(frame.data)}
+
+`;
+}
+function createAntigravityRelay(params) {
+  const messageId = params.fallbackId();
+  let started = false;
+  let activeBlockType;
+  let currentBlockIndex = -1;
+  let sawToolUse = false;
+  let finished = false;
+  let usage = {
+    input_tokens: 0,
+    cache_creation_input_tokens: 0,
+    cache_read_input_tokens: 0,
+    output_tokens: 0
+  };
+  const frames = [];
+  const ensureStarted = () => {
+    if (!started) {
+      started = true;
+      frames.push({
+        event: "message_start",
+        data: {
+          type: "message_start",
+          message: {
+            id: messageId,
+            type: "message",
+            role: "assistant",
+            model: params.requestedModel,
+            content: [],
+            stop_reason: null,
+            stop_sequence: null,
+            usage: { input_tokens: 0, output_tokens: 0 }
+          }
+        }
+      });
+    }
+  };
+  const closeActiveBlock = () => {
+    if (activeBlockType !== void 0 && currentBlockIndex >= 0) {
+      frames.push({
+        event: "content_block_stop",
+        data: {
+          type: "content_block_stop",
+          index: currentBlockIndex
+        }
+      });
+      activeBlockType = void 0;
+    }
+  };
+  const pushChunk = (chunk) => {
+    frames.length = 0;
+    ensureStarted();
+    if (chunk.usageMetadata !== void 0) {
+      usage = {
+        input_tokens: chunk.usageMetadata.promptTokenCount ?? usage.input_tokens,
+        cache_creation_input_tokens: 0,
+        cache_read_input_tokens: 0,
+        output_tokens: chunk.usageMetadata.candidatesTokenCount ?? usage.output_tokens
+      };
+    }
+    const candidate = chunk.candidates?.[0];
+    if (candidate?.content?.parts !== void 0) {
+      for (const part of candidate.content.parts) {
+        if ("text" in part && typeof part.text === "string" && part.text.length > 0) {
+          if (activeBlockType !== "text") {
+            closeActiveBlock();
+            currentBlockIndex += 1;
+            activeBlockType = "text";
+            frames.push({
+              event: "content_block_start",
+              data: {
+                type: "content_block_start",
+                index: currentBlockIndex,
+                content_block: { type: "text", text: "" }
+              }
+            });
+          }
+          frames.push({
+            event: "content_block_delta",
+            data: {
+              type: "content_block_delta",
+              index: currentBlockIndex,
+              delta: { type: "text_delta", text: part.text }
+            }
+          });
+        } else if ("functionCall" in part && part.functionCall !== void 0) {
+          sawToolUse = true;
+          closeActiveBlock();
+          currentBlockIndex += 1;
+          activeBlockType = "tool_use";
+          const callName = part.functionCall.name;
+          const originalName = params.toolNames.get(callName) ?? callName;
+          const callId = params.fallbackId();
+          frames.push({
+            event: "content_block_start",
+            data: {
+              type: "content_block_start",
+              index: currentBlockIndex,
+              content_block: {
+                type: "tool_use",
+                id: callId,
+                name: originalName,
+                input: {}
+              }
+            }
+          });
+          const argsJson = JSON.stringify(part.functionCall.args);
+          frames.push({
+            event: "content_block_delta",
+            data: {
+              type: "content_block_delta",
+              index: currentBlockIndex,
+              delta: {
+                type: "input_json_delta",
+                partial_json: argsJson
+              }
+            }
+          });
+          closeActiveBlock();
+        }
+      }
+    }
+    if (candidate?.finishReason !== void 0) {
+      const stopReason = sawToolUse ? "tool_use" : candidate.finishReason === "MAX_TOKENS" ? "max_tokens" : "end_turn";
+      closeActiveBlock();
+      frames.push({
+        event: "message_delta",
+        data: {
+          type: "message_delta",
+          delta: { stop_reason: stopReason, stop_sequence: null },
+          usage
+        }
+      });
+      frames.push({
+        event: "message_stop",
+        data: { type: "message_stop" }
+      });
+      finished = true;
+    }
+    return { frames: [...frames], done: finished };
+  };
+  const finish = () => {
+    frames.length = 0;
+    if (!finished) {
+      ensureStarted();
+      closeActiveBlock();
+      const stopReason = sawToolUse ? "tool_use" : "end_turn";
+      frames.push({
+        event: "message_delta",
+        data: {
+          type: "message_delta",
+          delta: { stop_reason: stopReason, stop_sequence: null },
+          usage
+        }
+      });
+      frames.push({
+        event: "message_stop",
+        data: { type: "message_stop" }
+      });
+      finished = true;
+    }
+    return { frames: [...frames], done: true };
+  };
+  return { pushChunk, finish };
+}
+
+// src/antigravity/cloudUpstream.ts
+var GEMINI_API_BASE_URL = "https://generativelanguage.googleapis.com";
+function buildCloudUrl(config2, model) {
+  const { cloud } = config2;
+  if (cloud.projectId !== void 0 && cloud.location !== void 0) {
+    const base2 = cloud.endpoint ?? `https://${cloud.location}-aiplatform.googleapis.com`;
+    return `${base2}/v1/projects/${cloud.projectId}/locations/${cloud.location}/publishers/google/models/${encodeURIComponent(model)}:streamGenerateContent?alt=sse`;
+  }
+  const base = cloud.endpoint ?? GEMINI_API_BASE_URL;
+  return `${base}/v1beta/models/${encodeURIComponent(model)}:streamGenerateContent?alt=sse`;
+}
+function buildCloudHeaders(token, credentialTarget) {
+  const headers = {
+    "Content-Type": "application/json",
+    Accept: "text/event-stream"
+  };
+  if (credentialTarget === "apiKey") {
+    headers["x-goog-api-key"] = token;
+  } else {
+    headers.Authorization = `Bearer ${token}`;
+  }
+  return headers;
+}
+var AntigravityUpstreamError = class extends Error {
+  status;
+  retryAfter;
+  constructor(status, message, retryAfter) {
+    super(`Google Antigravity API error (${String(status)}): ${message}`);
+    this.name = "AntigravityUpstreamError";
+    this.status = status;
+    this.retryAfter = retryAfter;
+  }
+};
+async function* callCloudAntigravity(params, fetchFn = fetch) {
+  const url2 = buildCloudUrl(params.config, params.model);
+  const headers = buildCloudHeaders(params.token, params.credentialTarget);
+  const response = await fetchFn(url2, {
+    method: "POST",
+    headers,
+    body: JSON.stringify(params.request),
+    signal: params.signal
+  });
+  if (!response.ok) {
+    const errorText = await response.text();
+    const retryAfter = response.headers.get("retry-after");
+    throw new AntigravityUpstreamError(response.status, errorText, retryAfter);
+  }
+  if (response.body === null) {
+    return;
+  }
+  const decoder = new TextDecoder("utf-8");
+  let buffer2 = "";
+  const sseDataPrefix = "data:";
+  for await (const rawChunk of response.body) {
+    const chunk = rawChunk instanceof Uint8Array ? rawChunk : Buffer.from(String(rawChunk));
+    buffer2 += decoder.decode(chunk, { stream: true });
+    const lines = buffer2.split("\n");
+    buffer2 = lines.pop() ?? "";
+    for (const line of lines) {
+      const trimmed = line.trim();
+      if (trimmed.startsWith(sseDataPrefix)) {
+        const jsonStr = trimmed.slice(sseDataPrefix.length).trim();
+        if (jsonStr.length > 0) {
+          try {
+            const parsed = JSON.parse(jsonStr);
+            if (typeof parsed === "object" && parsed !== null && !Array.isArray(parsed)) {
+              yield parsed;
+            }
+          } catch {
+          }
+        }
+      }
+    }
+  }
+}
+
+// src/antigravity/localUpstream.ts
+var import_node_child_process6 = require("node:child_process");
+var import_node_net2 = __toESM(require("node:net"), 1);
+var import_node_readline2 = __toESM(require("node:readline"), 1);
+init_zod();
+var DEFAULT_ACP_COMMAND = ["antigravity-acp"];
+function connectSocket(socketPath) {
+  const socket = import_node_net2.default.createConnection({ path: socketPath });
+  const rl2 = import_node_readline2.default.createInterface({ input: socket, crlfDelay: Infinity });
+  return {
+    send: (msg) => {
+      socket.write(`${JSON.stringify(msg)}
+`);
+    },
+    lines: rl2,
+    close: () => {
+      socket.destroy();
+    }
+  };
+}
+function spawnProcess(command, signal) {
+  const bin = command[0];
+  if (bin === void 0) {
+    throw new Error("ACP command cannot be empty");
+  }
+  const args = command.slice(1);
+  const proc = (0, import_node_child_process6.spawn)(bin, args, {
+    stdio: ["pipe", "pipe", "inherit"],
+    signal
+  });
+  if (proc.stdin === null || proc.stdout === null) {
+    throw new Error(`Failed to establish stdio pipes with ACP process "${command.join(" ")}"`);
+  }
+  const rl2 = import_node_readline2.default.createInterface({ input: proc.stdout, crlfDelay: Infinity });
+  return {
+    send: (msg) => {
+      proc.stdin?.write(`${JSON.stringify(msg)}
+`);
+    },
+    lines: rl2,
+    close: () => {
+      try {
+        proc.kill("SIGTERM");
+      } catch {
+      }
+    }
+  };
+}
+var AcpStreamMessageSchema = external_exports.looseObject({
+  jsonrpc: external_exports.string().optional(),
+  id: external_exports.union([external_exports.number(), external_exports.string()]).optional(),
+  method: external_exports.string().optional(),
+  params: external_exports.looseObject({
+    delta: external_exports.looseObject({
+      text: external_exports.string().optional(),
+      toolCall: external_exports.looseObject({
+        id: external_exports.string().optional(),
+        name: external_exports.string(),
+        arguments: external_exports.string().optional()
+      }).optional()
+    }).optional(),
+    finishReason: external_exports.string().optional(),
+    chunk: external_exports.looseObject({}).optional()
+  }).optional(),
+  result: external_exports.looseObject({
+    chunk: external_exports.looseObject({}).optional()
+  }).optional()
+});
+function isRecord7(value2) {
+  return typeof value2 === "object" && value2 !== null && !Array.isArray(value2);
+}
+function normalizeFinishReason(reason) {
+  if (reason === void 0) {
+    return void 0;
+  }
+  if (reason === "STOP" || reason === "MAX_TOKENS" || reason === "SAFETY" || reason === "RECITATION" || reason === "OTHER") {
+    return reason;
+  }
+  const lower = reason.toLowerCase();
+  if (lower === "stop" || lower === "end_turn") {
+    return "STOP";
+  }
+  if (lower === "max_tokens" || lower === "length") {
+    return "MAX_TOKENS";
+  }
+  return "OTHER";
+}
+function parseJsonRecord(raw) {
+  if (raw === void 0) {
+    return {};
+  }
+  try {
+    const parsed = JSON.parse(raw);
+    if (isRecord7(parsed)) {
+      return parsed;
+    }
+  } catch {
+  }
+  return {};
+}
+async function* callLocalAntigravity(params) {
+  const { config: config2, signal } = params;
+  let conn;
+  try {
+    if (params.connector !== void 0) {
+      conn = params.connector(config2, signal);
+    } else if (config2.local.socketPath !== void 0) {
+      conn = connectSocket(config2.local.socketPath);
+    } else {
+      const cmd = config2.local.command ?? DEFAULT_ACP_COMMAND;
+      conn = spawnProcess(cmd, signal);
+    }
+    let nextId = 1;
+    const initId = nextId++;
+    conn.send({
+      jsonrpc: "2.0",
+      id: initId,
+      method: "initialize",
+      params: {
+        protocolVersion: "1.0",
+        clientInfo: { name: "agent-shim", version: "1.0" }
+      }
+    });
+    const promptId = nextId++;
+    conn.send({
+      jsonrpc: "2.0",
+      id: promptId,
+      method: "session/prompt",
+      params: {
+        model: params.model,
+        request: params.request
+      }
+    });
+    for await (const line of conn.lines) {
+      if (signal.aborted) {
+        break;
+      }
+      const trimmed = line.trim();
+      if (trimmed.length === 0) {
+        continue;
+      }
+      try {
+        const parsedJson = JSON.parse(trimmed);
+        const parsed = AcpStreamMessageSchema.safeParse(parsedJson);
+        if (!parsed.success) {
+          continue;
+        }
+        const msg = parsed.data;
+        if (msg.params?.chunk !== void 0) {
+          yield msg.params.chunk;
+        } else if (msg.result?.chunk !== void 0) {
+          yield msg.result.chunk;
+        } else if (msg.method === "session/update" && msg.params?.delta !== void 0) {
+          const delta = msg.params.delta;
+          const parts = [];
+          if (delta.text !== void 0 && delta.text.length > 0) {
+            parts.push({ text: delta.text });
+          }
+          if (delta.toolCall !== void 0) {
+            const argsObj = parseJsonRecord(delta.toolCall.arguments);
+            parts.push({ functionCall: { name: delta.toolCall.name, args: argsObj } });
+          }
+          yield {
+            candidates: [
+              {
+                content: { parts },
+                finishReason: normalizeFinishReason(msg.params.finishReason)
+              }
+            ]
+          };
+        }
+      } catch {
+      }
+    }
+  } finally {
+    conn?.close();
+  }
+}
+
+// src/antigravity/quota.ts
+var MS_PER_SECOND9 = 1e3;
+var DEFAULT_RETRY_AFTER_SECONDS = 60;
+var PERCENT_MULTIPLIER = 100;
+var EXHAUSTED_PERCENT2 = "100";
+var GEMINI_5H_KEYS = ["gemini-5h", "gemini_5h", "gemini"];
+var GEMINI_WEEKLY_KEYS = ["gemini-weekly", "gemini_weekly"];
+var THIRD_PARTY_5H_KEYS = ["3p-5h", "claude-5h", "3p_5h", "claude_5h", "claude"];
+var THIRD_PARTY_WEEKLY_KEYS = ["3p-weekly", "claude-weekly", "3p_weekly", "claude_weekly"];
+function findBucket(quota, keys) {
+  for (const key of keys) {
+    const bucket = quota[key];
+    if (bucket !== void 0) {
+      return bucket;
+    }
+  }
+  return void 0;
+}
+function calculateUtilization(remainingFraction) {
+  if (remainingFraction === void 0 || !Number.isFinite(remainingFraction)) {
+    return void 0;
+  }
+  const clampedRem = Math.max(0, Math.min(1, remainingFraction));
+  const used = Math.max(0, 1 - clampedRem);
+  return String(Math.round(used * PERCENT_MULTIPLIER));
+}
+function calculateResetTimestamp(nowSec, resetInSeconds) {
+  if (resetInSeconds === void 0 || !Number.isFinite(resetInSeconds) || resetInSeconds < 0) {
+    return void 0;
+  }
+  return String(nowSec + Math.ceil(resetInSeconds));
+}
+function parseRetryAfterSeconds(raw, defaultSeconds = DEFAULT_RETRY_AFTER_SECONDS) {
+  if (raw === null || raw === void 0 || raw.trim() === "") {
+    return defaultSeconds;
+  }
+  const numeric = Number(raw);
+  if (Number.isFinite(numeric) && numeric > 0) {
+    return Math.ceil(numeric);
+  }
+  const parsedDate = Date.parse(raw);
+  if (!Number.isNaN(parsedDate)) {
+    const diffSec = Math.ceil((parsedDate - Date.now()) / MS_PER_SECOND9);
+    return Math.max(1, diffSec);
+  }
+  return defaultSeconds;
+}
+function unifiedAntigravityQuotaHeaders(params) {
+  const rejected = params.rejected === true;
+  const nowSec = Math.floor(params.nowMs / MS_PER_SECOND9);
+  const headers = {
+    "anthropic-ratelimit-unified-status": rejected ? "rejected" : "allowed"
+  };
+  const modelLower = (params.model ?? "").toLowerCase();
+  const isGemini = modelLower.includes("gemini");
+  const fiveHourKeys = isGemini ? GEMINI_5H_KEYS : THIRD_PARTY_5H_KEYS;
+  const weeklyKeys = isGemini ? GEMINI_WEEKLY_KEYS : THIRD_PARTY_WEEKLY_KEYS;
+  const quota = params.quota ?? {};
+  const b5h = findBucket(quota, fiveHourKeys);
+  const bWk = findBucket(quota, weeklyKeys);
+  const used5h = calculateUtilization(b5h?.remaining_fraction);
+  const reset5h = calculateResetTimestamp(nowSec, b5h?.reset_in_seconds);
+  const used7d = calculateUtilization(bWk?.remaining_fraction);
+  const reset7d = calculateResetTimestamp(nowSec, bWk?.reset_in_seconds);
+  let earliestResetSec;
+  if (used5h !== void 0 && reset5h !== void 0) {
+    headers["anthropic-ratelimit-unified-5h-utilization"] = used5h;
+    headers["anthropic-ratelimit-unified-5h-reset"] = reset5h;
+    earliestResetSec = Number(reset5h);
+  }
+  if (used7d !== void 0 && reset7d !== void 0) {
+    headers["anthropic-ratelimit-unified-7d-utilization"] = used7d;
+    headers["anthropic-ratelimit-unified-7d-reset"] = reset7d;
+    const reset7dSec = Number(reset7d);
+    earliestResetSec = earliestResetSec === void 0 ? reset7dSec : Math.min(earliestResetSec, reset7dSec);
+  }
+  if (rejected) {
+    const retrySec = params.retryAfterSeconds ?? DEFAULT_RETRY_AFTER_SECONDS;
+    const fallbackReset = String(nowSec + retrySec);
+    if (headers["anthropic-ratelimit-unified-5h-utilization"] === void 0) {
+      headers["anthropic-ratelimit-unified-5h-utilization"] = EXHAUSTED_PERCENT2;
+      headers["anthropic-ratelimit-unified-5h-reset"] = fallbackReset;
+    }
+    if (headers["anthropic-ratelimit-unified-7d-utilization"] === void 0) {
+      headers["anthropic-ratelimit-unified-7d-utilization"] = EXHAUSTED_PERCENT2;
+      headers["anthropic-ratelimit-unified-7d-reset"] = fallbackReset;
+    }
+    earliestResetSec = earliestResetSec === void 0 ? nowSec + retrySec : Math.min(earliestResetSec, nowSec + retrySec);
+  }
+  if (earliestResetSec !== void 0) {
+    headers["anthropic-ratelimit-unified-reset"] = String(earliestResetSec);
+  }
+  return headers;
+}
+
+// src/antigravity/route.ts
+function createAntigravityRoute(ports) {
+  const fallbackId = ports.fallbackId ?? (() => (0, import_node_crypto21.randomUUID)());
+  return async (request7) => {
+    await Promise.resolve();
+    if (request7.method !== "POST") {
+      return {
+        status: HTTP_STATUS.badRequest,
+        headers: { "Content-Type": "application/json" },
+        body: JSON.stringify({ type: "error", error: { type: "invalid_request_error", message: "only POST is supported" } })
+      };
+    }
+    const providerName = parseProviderPath(request7.path)?.provider;
+    if (providerName === void 0) {
+      return {
+        status: HTTP_STATUS.notFound,
+        headers: { "Content-Type": "application/json" },
+        body: JSON.stringify({ type: "error", error: { type: "not_found_error", message: "no provider specified in path" } })
+      };
+    }
+    const lookup = ports.loadProvider(providerName);
+    if (!lookup.ok) {
+      return {
+        status: lookup.status,
+        headers: { "Content-Type": "application/json" },
+        body: JSON.stringify({ type: "error", error: { type: "invalid_request_error", message: lookup.message } })
+      };
+    }
+    let parsedJson;
+    try {
+      parsedJson = JSON.parse(request7.body);
+    } catch {
+      return {
+        status: HTTP_STATUS.badRequest,
+        headers: { "Content-Type": "application/json" },
+        body: JSON.stringify({ type: "error", error: { type: "invalid_request_error", message: "malformed JSON body" } })
+      };
+    }
+    const parsed = MessagesRequestSchema.safeParse(parsedJson);
+    if (!parsed.success) {
+      return {
+        status: HTTP_STATUS.badRequest,
+        headers: { "Content-Type": "application/json" },
+        body: JSON.stringify({
+          type: "error",
+          error: {
+            type: "invalid_request_error",
+            message: parsed.error.issues.map((i10) => `${i10.path.join(".")}: ${i10.message}`).join("; ")
+          }
+        })
+      };
+    }
+    const { config: config2, token, credentialTarget } = lookup;
+    const requestedModel = parsed.data.model ?? config2.defaultModel;
+    const translated = translateRequest2(parsed.data, config2);
+    const relay = createAntigravityRelay({
+      requestedModel,
+      toolNames: translated.toolNames,
+      fallbackId
+    });
+    const nowMs = ports.now?.() ?? Date.now();
+    const upstreamChunks2 = config2.mode === "local" ? callLocalAntigravity({
+      config: config2,
+      model: translated.model,
+      request: translated.request,
+      signal: request7.signal,
+      connector: ports.localConnector
+    }) : callCloudAntigravity(
+      {
+        config: config2,
+        model: translated.model,
+        request: translated.request,
+        token,
+        credentialTarget,
+        signal: request7.signal
+      },
+      ports.fetchFn
+    );
+    const iterator = upstreamChunks2[Symbol.asyncIterator]();
+    let firstResult;
+    try {
+      firstResult = await iterator.next();
+    } catch (error63) {
+      if (error63 instanceof AntigravityUpstreamError) {
+        const is429 = error63.status === HTTP_STATUS.tooManyRequests;
+        const retryAfter = is429 ? parseRetryAfterSeconds(error63.retryAfter) : void 0;
+        const quotaHeaders3 = unifiedAntigravityQuotaHeaders({
+          quota: ports.quotaSource?.(),
+          rejected: is429,
+          nowMs,
+          retryAfterSeconds: retryAfter,
+          model: requestedModel
+        });
+        const errorType = is429 ? "rate_limit_error" : "api_error";
+        return {
+          status: error63.status,
+          headers: {
+            "Content-Type": "application/json",
+            ...quotaHeaders3,
+            ...retryAfter !== void 0 ? { "retry-after": String(retryAfter) } : {}
+          },
+          body: JSON.stringify({ type: "error", error: { type: errorType, message: error63.message } })
+        };
+      }
+      const errMsg = error63 instanceof Error ? error63.message : String(error63);
+      return {
+        status: HTTP_STATUS.badGateway,
+        headers: { "Content-Type": "application/json" },
+        body: JSON.stringify({ type: "error", error: { type: "api_error", message: errMsg } })
+      };
+    }
+    const quotaHeaders2 = unifiedAntigravityQuotaHeaders({
+      quota: ports.quotaSource?.(),
+      rejected: false,
+      nowMs,
+      model: requestedModel
+    });
+    const stream = async function* () {
+      try {
+        if (firstResult.done !== true) {
+          const step2 = relay.pushChunk(firstResult.value);
+          for (const frame of step2.frames) {
+            yield renderSseFrame2(frame);
+          }
+          if (!step2.done) {
+            for (; ; ) {
+              if (request7.signal.aborted) {
+                break;
+              }
+              const nextResult = await iterator.next();
+              if (nextResult.done === true) {
+                break;
+              }
+              const nextStep = relay.pushChunk(nextResult.value);
+              for (const frame of nextStep.frames) {
+                yield renderSseFrame2(frame);
+              }
+              if (nextStep.done) {
+                break;
+              }
+            }
+          }
+        }
+        const finalStep = relay.finish();
+        for (const frame of finalStep.frames) {
+          yield renderSseFrame2(frame);
+        }
+      } catch (error63) {
+        if (!request7.signal.aborted) {
+          const errMsg = error63 instanceof Error ? error63.message : String(error63);
+          yield renderSseFrame2({
+            event: "error",
+            data: { type: "error", error: { type: "api_error", message: errMsg } }
+          });
+        }
+      }
+    };
+    return {
+      status: HTTP_STATUS.ok,
+      headers: {
+        "Content-Type": "text/event-stream",
+        "Cache-Control": "no-cache",
+        Connection: "keep-alive",
+        ...quotaHeaders2
+      },
+      body: stream()
+    };
+  };
+}
+
+// src/frontdoor/antigravityMount.ts
+var ANTIGRAVITY_MAX_BODY_BYTES = 67108864;
+var BodyTooLargeError2 = class extends Error {
+  constructor() {
+    super("request body too large");
+    this.name = "BodyTooLargeError";
+  }
+};
+async function readBody3(request7) {
+  const chunks = [];
+  let size = 0;
+  for await (const chunk of request7.body) {
+    if (!Buffer.isBuffer(chunk)) {
+      throw new TypeError("request body chunk was not a Buffer");
+    }
+    size += chunk.length;
+    if (size > ANTIGRAVITY_MAX_BODY_BYTES) {
+      throw new BodyTooLargeError2();
+    }
+    chunks.push(chunk);
+  }
+  return Buffer.concat(chunks).toString("utf8");
+}
+async function writeRouteResponse2(routed, response, signal) {
+  response.start(routed.status, routed.headers);
+  if (typeof routed.body === "string") {
+    await response.write(routed.body);
+    response.end();
+    return;
+  }
+  for await (const chunk of routed.body) {
+    if (signal.aborted) {
+      return;
+    }
+    await response.write(chunk);
+  }
+  response.end();
+}
+function createAntigravityRouteMount(ports, upstreamBase, provider) {
+  const route = createAntigravityRoute(ports);
+  return {
+    name: `antigravity:${provider}`,
+    headroomEligible: true,
+    headroomUpstream: upstreamBase,
+    serve: async (request7, response) => {
+      let body;
+      try {
+        body = await readBody3(request7);
+      } catch (error63) {
+        const tooLarge = error63 instanceof BodyTooLargeError2;
+        response.start(tooLarge ? HTTP_STATUS.payloadTooLarge : HTTP_STATUS.badRequest, { "Content-Type": "application/json" });
+        await response.write(
+          JSON.stringify({ type: "error", error: { type: "invalid_request_error", message: error63 instanceof Error ? error63.message : String(error63) } })
+        );
+        response.end();
+        request7.body.resume();
+        return;
+      }
+      const path59 = new URL(request7.url, "http://127.0.0.1").pathname;
+      const translated = { method: request7.method, path: path59, body, signal: request7.signal };
+      const routed = await route(translated);
+      if (request7.signal.aborted) {
+        return;
+      }
+      await writeRouteResponse2(routed, response, request7.signal);
+    }
+  };
+}
+
 // src/frontdoor/passthrough.ts
 var http5 = __toESM(require("node:http"), 1);
 var https4 = __toESM(require("node:https"), 1);
@@ -128238,6 +129290,36 @@ function createProviderRouteResolver(deps) {
         )
       };
     }
+    if (isAntigravityProvider(definition)) {
+      const antigravityProvider = definition;
+      const config2 = resolveAntigravityConfig(antigravityProvider.antigravity);
+      return {
+        ok: true,
+        route: createAntigravityRouteMount(
+          {
+            loadProvider: () => {
+              const res = resolveCredential({
+                credential: antigravityProvider.credential,
+                env: deps.env,
+                port: deps.credentials,
+                subject: `provider ${provider}`
+              });
+              if (!res.ok) {
+                return { ok: false, status: HTTP_STATUS.unauthorized, message: res.message };
+              }
+              return {
+                ok: true,
+                config: config2,
+                token: res.credential.token,
+                credentialTarget: antigravityProvider.credential.target
+              };
+            }
+          },
+          directOrigin2(deps.directPort()),
+          provider
+        )
+      };
+    }
     const httpProvider = definition;
     return {
       ok: true,
@@ -128277,7 +129359,7 @@ function createProviderRouteResolver(deps) {
       let routes;
       try {
         const definition = providerName === void 0 ? void 0 : loadProvider(deps.providersDir, providerName, deps.fs);
-        routes = definition === void 0 || isCodexProvider(definition) ? void 0 : definition.routes;
+        routes = definition === void 0 || !isHttpProvider(definition) ? void 0 : definition.routes;
       } catch {
         routes = void 0;
       }
@@ -128357,7 +129439,7 @@ function attachingProviderCredential(route, deps) {
 init_realFrontDoorPort();
 
 // src/frontdoor/rcCommands.ts
-var import_node_crypto20 = require("node:crypto");
+var import_node_crypto22 = require("node:crypto");
 init_commandDeps();
 init_cliError();
 init_realPorts();
@@ -128396,15 +129478,15 @@ function readFrontDoorControlMaterial(fsPort, paths, purpose) {
 
 // src/frontdoor/rcLiveUsage.ts
 var RC_RATE_LIMIT_EVENT_TYPE = "rate_limit_event";
-function isRecord6(value2) {
+function isRecord8(value2) {
   return typeof value2 === "object" && value2 !== null && !Array.isArray(value2);
 }
 function rcRateLimitInfoOf(event) {
   const payload = event.envelope.payload;
-  if (!isRecord6(payload) || payload.type !== RC_RATE_LIMIT_EVENT_TYPE) {
+  if (!isRecord8(payload) || payload.type !== RC_RATE_LIMIT_EVENT_TYPE) {
     return void 0;
   }
-  if (!isRecord6(payload.rate_limit_info)) {
+  if (!isRecord8(payload.rate_limit_info)) {
     return void 0;
   }
   const parsed = RcRateLimitInfoSchema.safeParse(payload.rate_limit_info);
@@ -128438,9 +129520,9 @@ init_account();
 var RC_SELF_HOST_OAUTH_HOST = "platform.claude.com";
 var RC_SELF_HOST_SCOPE_LIST = ["user:profile", "user:inference", "user:sessions:claude_code", "user:mcp_servers", "user:file_upload"];
 var RC_SELF_HOST_OAUTH_TOKEN_TTL_SECONDS = 3600;
-var MS_PER_SECOND9 = 1e3;
+var MS_PER_SECOND10 = 1e3;
 var HTTP_SERVICE_UNAVAILABLE = 503;
-function isRecord7(value2) {
+function isRecord9(value2) {
   return typeof value2 === "object" && value2 !== null && !Array.isArray(value2);
 }
 function parseJsonObject2(body) {
@@ -128450,7 +129532,7 @@ function parseJsonObject2(body) {
   } catch {
     return void 0;
   }
-  return isRecord7(parsed) ? parsed : void 0;
+  return isRecord9(parsed) ? parsed : void 0;
 }
 function growthBookFeatures() {
   return {
@@ -128494,7 +129576,7 @@ function createRcSelfHostLocal(deps) {
       }
       if (method === "POST" && pathname.startsWith("/api/eval/")) {
         await deps.readBody(request7, CONTROL_BODY_CAP_BYTES);
-        answerServerJson(response, HTTP_STATUS.ok, { features: growthBookFeatures(), dateUpdated: Math.floor(deps.now() / MS_PER_SECOND9) });
+        answerServerJson(response, HTTP_STATUS.ok, { features: growthBookFeatures(), dateUpdated: Math.floor(deps.now() / MS_PER_SECOND10) });
         return true;
       }
       if (method === "GET" && pathname === "/api/oauth/profile") {
@@ -128544,7 +129626,7 @@ var RC_SELF_HOST_RECORD_DIR = "rc-selfhost";
 var RC_SELF_HOST_RECORD_FILE = "credential.json";
 var SELF_HOST_EMAIL = "selfhost@agent-shim.invalid";
 var SELF_HOST_SUBSCRIPTION_TYPE = "max";
-function isRecord8(value2) {
+function isRecord10(value2) {
   return typeof value2 === "object" && value2 !== null && !Array.isArray(value2);
 }
 function readJsonObject(fs24, file2) {
@@ -128558,7 +129640,7 @@ function readJsonObject(fs24, file2) {
   } catch {
     return void 0;
   }
-  return isRecord8(parsed) ? parsed : void 0;
+  return isRecord10(parsed) ? parsed : void 0;
 }
 function readRcSelfHostRecord(fs24, frontdoorDir) {
   const parsed = readJsonObject(fs24, import_node_path49.default.join(frontdoorDir, RC_SELF_HOST_RECORD_DIR, RC_SELF_HOST_RECORD_FILE));
@@ -128582,7 +129664,7 @@ function mintRcSelfHostCredential(deps) {
   const recordFile = import_node_path49.default.join(recordDir, RC_SELF_HOST_RECORD_FILE);
   const previousRecord = readRcSelfHostRecord(deps.fs, deps.frontdoorDir);
   const existingCredentials = readJsonObject(deps.fs, credentialsFile);
-  const existingOauth = isRecord8(existingCredentials?.claudeAiOauth) ? existingCredentials.claudeAiOauth : void 0;
+  const existingOauth = isRecord10(existingCredentials?.claudeAiOauth) ? existingCredentials.claudeAiOauth : void 0;
   const existingToken = typeof existingOauth?.accessToken === "string" && existingOauth.accessToken !== "" ? existingOauth.accessToken : void 0;
   const existingIsOwn = existingToken !== void 0 && previousRecord?.accessToken === existingToken;
   if (existingToken !== void 0 && !existingIsOwn && !deps.force) {
@@ -128599,7 +129681,7 @@ function mintRcSelfHostCredential(deps) {
   deps.fs.writeFilePrivate(credentialsFile, `${JSON.stringify({ ...existingCredentials, claudeAiOauth: { accessToken, refreshToken, expiresAt: null, scopes: [...RC_SELF_HOST_SCOPE_LIST], subscriptionType: SELF_HOST_SUBSCRIPTION_TYPE, rateLimitTier: null } }, null, 2)}
 `);
   const claudeJson = readJsonObject(deps.fs, claudeJsonFile) ?? {};
-  const existingBlock = (value2) => isRecord8(value2) ? value2 : {};
+  const existingBlock = (value2) => isRecord10(value2) ? value2 : {};
   deps.fs.writeFilePrivate(claudeJsonFile, `${JSON.stringify({
     ...claudeJson,
     oauthAccount: {
@@ -128678,12 +129760,12 @@ function eventExcerpt(text2) {
   return text2.length <= RC_PENDING_SUMMARY_EXCERPT_CHARS ? text2 : `${text2.slice(0, RC_PENDING_SUMMARY_EXCERPT_CHARS)}...`;
 }
 var PERCENT_SCALE = 100;
-var MS_PER_SECOND10 = 1e3;
+var MS_PER_SECOND11 = 1e3;
 function percentOf(fraction) {
   return `${String(Math.round(fraction * PERCENT_SCALE))}%`;
 }
 function resetInstantOf(epochSeconds) {
-  return new Date(epochSeconds * MS_PER_SECOND10).toISOString();
+  return new Date(epochSeconds * MS_PER_SECOND11).toISOString();
 }
 function formatRcRateLimitInfo(info) {
   const parts = [info.status];
@@ -128964,8 +130046,8 @@ function registerRcCommand(frontdoor, paths) {
         identitiesDir: paths.identitiesDir,
         frontdoorDir: paths.frontdoorDir,
         identity,
-        newUuid: import_node_crypto20.randomUUID,
-        randomToken: () => (0, import_node_crypto20.randomBytes)(MINTED_TOKEN_RANDOM_BYTES).toString("base64url"),
+        newUuid: import_node_crypto22.randomUUID,
+        randomToken: () => (0, import_node_crypto22.randomBytes)(MINTED_TOKEN_RANDOM_BYTES).toString("base64url"),
         force: options.force === true,
         now: () => Date.now()
       });
@@ -128986,11 +130068,11 @@ var import_node_path50 = __toESM(require("node:path"), 1);
 function isSafeSessionId(sessionId) {
   return /^[A-Za-z0-9_-]+$/.test(sessionId);
 }
-function isRecord9(value2) {
+function isRecord11(value2) {
   return typeof value2 === "object" && value2 !== null && !Array.isArray(value2);
 }
 function credentialOfJson(parsed) {
-  if (!isRecord9(parsed)) {
+  if (!isRecord11(parsed)) {
     return void 0;
   }
   const { authorization, anthropicVersion, anthropicClientPlatform } = parsed;
@@ -129020,7 +130102,7 @@ function createRcCredentialStore(fs24, dir) {
     } catch {
       return void 0;
     }
-    return isRecord9(parsed) ? parsed : void 0;
+    return isRecord11(parsed) ? parsed : void 0;
   };
   return {
     read: (sessionId) => {
@@ -129588,7 +130670,7 @@ init_capability();
 // src/frontdoor/rcSelfHostEndpoints.ts
 var RC_SOURCE_WORKER = "worker";
 var RC_SOURCE_CLIENT = "client";
-function isRecord10(value2) {
+function isRecord12(value2) {
   return typeof value2 === "object" && value2 !== null && !Array.isArray(value2);
 }
 function parseJsonObject3(body) {
@@ -129598,7 +130680,7 @@ function parseJsonObject3(body) {
   } catch {
     return void 0;
   }
-  return isRecord10(parsed) ? parsed : void 0;
+  return isRecord12(parsed) ? parsed : void 0;
 }
 function nonEmptyString2(record2, field) {
   const value2 = record2 === void 0 ? void 0 : record2[field];
@@ -129672,7 +130754,7 @@ async function serveRcClientChannels(ctx, tail, method, maxBatchEvents) {
     }
     const results = [];
     for (const event of events) {
-      if (!isRecord10(event) || !isRecord10(event.payload)) {
+      if (!isRecord12(event) || !isRecord12(event.payload)) {
         await ctx.answerJson(response, HTTP_STATUS.badRequest, { type: "error", error: { type: "invalid_request_error", message: "every event in a teleport write is an object carrying one payload object" } });
         return true;
       }
@@ -129772,7 +130854,7 @@ async function serveRcCompatSessions(ctx, pathname, compatPath) {
 // src/frontdoor/rcSelfHostConversations.ts
 var RC_CONVERSATIONS_PATH_PREFIX = "/v1/code/conversations";
 var RC_CONVERSATION_ID_PREFIX = "conv_";
-function isRecord11(value2) {
+function isRecord13(value2) {
   return typeof value2 === "object" && value2 !== null && !Array.isArray(value2);
 }
 function parseJsonObject4(body) {
@@ -129782,7 +130864,7 @@ function parseJsonObject4(body) {
   } catch {
     return void 0;
   }
-  return isRecord11(parsed) ? parsed : void 0;
+  return isRecord13(parsed) ? parsed : void 0;
 }
 function nonEmptyString3(record2, field) {
   const value2 = record2 === void 0 ? void 0 : record2[field];
@@ -129836,7 +130918,7 @@ async function serveRcConversations(ctx, pathname, method) {
     }
     const results = [];
     for (const event of events) {
-      if (!isRecord11(event) || !isRecord11(event.payload)) {
+      if (!isRecord13(event) || !isRecord13(event.payload)) {
         await ctx.answerJson(response, HTTP_STATUS.badRequest, { type: "error", error: { type: "invalid_request_error", message: "every event in a write is an object carrying one payload object" } });
         return;
       }
@@ -129866,7 +130948,7 @@ async function serveRcConversations(ctx, pathname, method) {
 var dns2 = __toESM(require("node:dns"), 1);
 var http6 = __toESM(require("node:http"), 1);
 var https5 = __toESM(require("node:https"), 1);
-var net3 = __toESM(require("node:net"), 1);
+var net4 = __toESM(require("node:net"), 1);
 var RC_WEB_FETCH_MAX_BYTES = 12582912;
 var RC_WEB_FETCH_DEADLINE_MS = 4e4;
 var RC_WEB_FETCH_MAX_REDIRECTS = 20;
@@ -129907,7 +130989,7 @@ function refused(errorType, errorMessage2) {
   return { kind: "refused", errorType: `${ERROR_PREFIX}${errorType}`, errorMessage: errorMessage2 };
 }
 function isPrivateAddress(address) {
-  const version2 = net3.isIP(address);
+  const version2 = net4.isIP(address);
   if (version2 === IP_VERSION_4) {
     const octets = address.split(".").map((part) => Number(part));
     const first = octets[0] ?? -1;
@@ -129993,7 +131075,7 @@ async function checkTarget(url2, deps) {
   const hostname3 = url2.hostname.replace(/^\[|\]$/g, "");
   let addresses;
   try {
-    addresses = net3.isIP(hostname3) === 0 ? await deps.lookup(hostname3) : [hostname3];
+    addresses = net4.isIP(hostname3) === 0 ? await deps.lookup(hostname3) : [hostname3];
   } catch {
     return refused("resolve", `${hostname3} did not resolve`);
   }
@@ -130118,7 +131200,7 @@ var RC_COMPAT_SESSIONS_PATH = "/v1/sessions";
 var RC_SESSION_ID_PREFIX2 = "cse_";
 var RC_SELF_HOST_API_BASE_URL = "https://api.anthropic.com";
 var HTTP_CONFLICT = 409;
-var MS_PER_SECOND11 = 1e3;
+var MS_PER_SECOND12 = 1e3;
 var HTTP_SERVICE_UNAVAILABLE2 = 503;
 var RC_SELF_HOST_WORKER_JWT_TTL_SECONDS = 46800;
 var RC_SELF_HOST_KEEPALIVE_MS = 15e3;
@@ -130129,7 +131211,7 @@ var RC_SELF_HOST_WORKER_EPOCH = 1;
 var RC_STREAM_EVENT_NAME = "client_event";
 var CONFLICT_REASON_HEADER2 = "x-ccr-conflict-reason";
 var CONFLICT_REASON_EPOCH_STALE = "epoch_stale";
-function isRecord12(value2) {
+function isRecord14(value2) {
   return typeof value2 === "object" && value2 !== null && !Array.isArray(value2);
 }
 function isWebSearchRefusal(value2) {
@@ -130185,7 +131267,7 @@ function presentationRefusal(headers) {
   const bearer = presented.slice("bearer ".length);
   return bearer.slice(0, "bearer ".length).toLowerCase() === "bearer " ? "doubled-scheme-word" : "unrecognised";
 }
-async function readBody3(request7, capBytes) {
+async function readBody4(request7, capBytes) {
   return await new Promise((resolve2, reject) => {
     const chunks = [];
     let total = 0;
@@ -130213,12 +131295,12 @@ function parseJsonObject5(body) {
   } catch {
     return void 0;
   }
-  return isRecord12(parsed) ? parsed : void 0;
+  return isRecord14(parsed) ? parsed : void 0;
 }
 function mintWorkerJwt(randomToken, issuedAt) {
   const encode3 = (value2) => Buffer.from(JSON.stringify(value2), "utf8").toString("base64url");
   const header = encode3({ alg: "HS256", typ: "JWT" });
-  const payload = encode3({ exp: Math.floor((issuedAt + RC_SELF_HOST_WORKER_JWT_TTL_SECONDS * MS_PER_SECOND11) / MS_PER_SECOND11), iat: Math.floor(issuedAt / MS_PER_SECOND11) });
+  const payload = encode3({ exp: Math.floor((issuedAt + RC_SELF_HOST_WORKER_JWT_TTL_SECONDS * MS_PER_SECOND12) / MS_PER_SECOND12), iat: Math.floor(issuedAt / MS_PER_SECOND12) });
   return `${header}.${payload}.${Buffer.from(randomToken(), "utf8").toString("base64url")}`;
 }
 function createRcSelfHostSurface(deps) {
@@ -130408,7 +131490,7 @@ data: ${JSON.stringify(envelope)}
           await unauthorized(response, refusal2);
           return;
         }
-        const body = parseJsonObject5(await readBody3(request7.body, CONTROL_BODY_CAP_BYTES));
+        const body = parseJsonObject5(await readBody4(request7.body, CONTROL_BODY_CAP_BYTES));
         const title = nonEmptyString4(body, "title");
         if (title === void 0) {
           await answerJson2(response, HTTP_STATUS.badRequest, { type: "error", error: { type: "invalid_request_error", message: "a session update is JSON naming a non-empty title" } });
@@ -130463,7 +131545,7 @@ data: ${JSON.stringify(envelope)}
         return;
       }
       if (workerTail === "" && method === "PUT") {
-        const body = parseJsonObject5(await readBody3(request7.body, CONTROL_BODY_CAP_BYTES));
+        const body = parseJsonObject5(await readBody4(request7.body, CONTROL_BODY_CAP_BYTES));
         const claimedEpoch = numberOf2(body, "worker_epoch");
         if (claimedEpoch !== void 0 && claimedEpoch !== RC_SELF_HOST_WORKER_EPOCH) {
           await epochStale(response);
@@ -130473,24 +131555,24 @@ data: ${JSON.stringify(envelope)}
         if (status !== void 0) {
           session.workerStatus = status;
         }
-        if (isRecord12(body?.external_metadata)) {
+        if (isRecord14(body?.external_metadata)) {
           session.externalMetadata = body.external_metadata;
         }
         await answerJson2(response, HTTP_STATUS.ok, {});
         return;
       }
       if (workerTail === "register" && method === "POST") {
-        await readBody3(request7.body, CONTROL_BODY_CAP_BYTES);
+        await readBody4(request7.body, CONTROL_BODY_CAP_BYTES);
         await answerJson2(response, HTTP_STATUS.ok, { worker_epoch: RC_SELF_HOST_WORKER_EPOCH });
         return;
       }
       if (workerTail === "heartbeat" && method === "POST") {
-        await readBody3(request7.body, CONTROL_BODY_CAP_BYTES);
+        await readBody4(request7.body, CONTROL_BODY_CAP_BYTES);
         await answerJson2(response, HTTP_STATUS.ok, {});
         return;
       }
       if (workerTail === "events" && method === "POST") {
-        const body = parseJsonObject5(await readBody3(request7.body, CONTROL_BODY_CAP_BYTES));
+        const body = parseJsonObject5(await readBody4(request7.body, CONTROL_BODY_CAP_BYTES));
         const claimedEpoch = numberOf2(body, "worker_epoch");
         if (claimedEpoch !== void 0 && claimedEpoch !== RC_SELF_HOST_WORKER_EPOCH) {
           await epochStale(response);
@@ -130503,7 +131585,7 @@ data: ${JSON.stringify(envelope)}
         }
         const results = [];
         for (const event of events) {
-          if (!isRecord12(event) || !isRecord12(event.payload)) {
+          if (!isRecord14(event) || !isRecord14(event.payload)) {
             await answerJson2(response, HTTP_STATUS.badRequest, { type: "error", error: { type: "invalid_request_error", message: "every event in a batch is an object carrying one payload object" } });
             return;
           }
@@ -130519,12 +131601,12 @@ data: ${JSON.stringify(envelope)}
         return;
       }
       if (workerTail === "events/delivery" && method === "POST") {
-        await readBody3(request7.body, CONTROL_BODY_CAP_BYTES);
+        await readBody4(request7.body, CONTROL_BODY_CAP_BYTES);
         await answerJson2(response, HTTP_STATUS.ok, {});
         return;
       }
       if (workerTail === "internal-events" && method === "POST") {
-        const body = parseJsonObject5(await readBody3(request7.body, CONTROL_BODY_CAP_BYTES));
+        const body = parseJsonObject5(await readBody4(request7.body, CONTROL_BODY_CAP_BYTES));
         const claimedEpoch = numberOf2(body, "worker_epoch");
         if (claimedEpoch !== void 0 && claimedEpoch !== RC_SELF_HOST_WORKER_EPOCH) {
           await epochStale(response);
@@ -130536,7 +131618,7 @@ data: ${JSON.stringify(envelope)}
           return;
         }
         for (const event of events) {
-          if (isRecord12(event)) {
+          if (isRecord14(event)) {
             session.internalEvents.push({ eventId: deps.newUuid(), body: event });
           }
         }
@@ -130559,12 +131641,12 @@ data: ${JSON.stringify(envelope)}
         return;
       }
       if (workerTail === "diagnostics" && method === "POST") {
-        await readBody3(request7.body, CONTROL_BODY_CAP_BYTES);
+        await readBody4(request7.body, CONTROL_BODY_CAP_BYTES);
         await answerJson2(response, HTTP_STATUS.ok, {});
         return;
       }
       if (workerTail === "web-fetch" && method === "POST") {
-        const body = parseJsonObject5(await readBody3(request7.body, CONTROL_BODY_CAP_BYTES));
+        const body = parseJsonObject5(await readBody4(request7.body, CONTROL_BODY_CAP_BYTES));
         const target = nonEmptyString4(body, "url");
         if (target === void 0) {
           await answerJson2(response, HTTP_STATUS.badRequest, { type: "error", error: { type: "invalid_request_error", message: "a worker web-fetch carries one url" } });
@@ -130587,7 +131669,7 @@ data: ${JSON.stringify(envelope)}
         return;
       }
       if (workerTail === "web-search" && method === "POST") {
-        const body = parseJsonObject5(await readBody3(request7.body, CONTROL_BODY_CAP_BYTES));
+        const body = parseJsonObject5(await readBody4(request7.body, CONTROL_BODY_CAP_BYTES));
         const query = nonEmptyString4(body, "query");
         if (query === void 0) {
           await answerJson2(response, HTTP_STATUS.badRequest, { type: "error", error: { type: "invalid_request_error", message: "a worker web-search carries one query" } });
@@ -130624,7 +131706,7 @@ data: ${JSON.stringify(envelope)}
       return;
     }
     if (tail === "events" && method === "POST") {
-      const body = parseJsonObject5(await readBody3(request7.body, CONTROL_BODY_CAP_BYTES));
+      const body = parseJsonObject5(await readBody4(request7.body, CONTROL_BODY_CAP_BYTES));
       const events = body?.events;
       if (!Array.isArray(events) || events.length === 0 || events.length > RC_SELF_HOST_MAX_BATCH_EVENTS) {
         await answerJson2(response, HTTP_STATUS.badRequest, { type: "error", error: { type: "invalid_request_error", message: `a client event write is a non-empty array of at most ${String(RC_SELF_HOST_MAX_BATCH_EVENTS)} events` } });
@@ -130632,7 +131714,7 @@ data: ${JSON.stringify(envelope)}
       }
       const results = [];
       for (const event of events) {
-        if (!isRecord12(event) || !isRecord12(event.payload)) {
+        if (!isRecord14(event) || !isRecord14(event.payload)) {
           await answerJson2(response, HTTP_STATUS.badRequest, { type: "error", error: { type: "invalid_request_error", message: "every event in a write is an object carrying one payload object" } });
           return;
         }
@@ -130651,7 +131733,7 @@ data: ${JSON.stringify(envelope)}
       await holdStream(session.conversation, session.id, "clientStreams", () => true, request7, response);
       return;
     }
-    if (await serveRcClientChannels({ request: request7, response, host: { id: session.id, clients: session.clients, conversation: session.conversation, writer: { session: session.id, half: "client" } }, answerJson: answerJson2, readBody: readBody3, publish, sweep, now: deps.now, presenceRefreshSeconds: RC_PRESENCE_REFRESH_SECONDS, ...deps.log === void 0 ? {} : { log: deps.log } }, tail, method, RC_SELF_HOST_MAX_BATCH_EVENTS)) {
+    if (await serveRcClientChannels({ request: request7, response, host: { id: session.id, clients: session.clients, conversation: session.conversation, writer: { session: session.id, half: "client" } }, answerJson: answerJson2, readBody: readBody4, publish, sweep, now: deps.now, presenceRefreshSeconds: RC_PRESENCE_REFRESH_SECONDS, ...deps.log === void 0 ? {} : { log: deps.log } }, tail, method, RC_SELF_HOST_MAX_BATCH_EVENTS)) {
       return;
     }
     await answerJson2(response, HTTP_STATUS.notFound, { type: "error", error: { type: "api_error", message: `the self-hosted Remote Control surface serves no path "${tail}"` } });
@@ -130669,11 +131751,11 @@ data: ${JSON.stringify(envelope)}
         return;
       }
       if (pathname === RC_COMPAT_SESSIONS_PATH || pathname.startsWith(`${RC_COMPAT_SESSIONS_PATH}/`)) {
-        await serveRcCompatSessions({ request: request7, response, sessions, retireSession, answerJson: answerJson2, readBody: readBody3, credentialRefusal, unauthorized, now: deps.now, ...deps.log === void 0 ? {} : { log: deps.log } }, pathname, RC_COMPAT_SESSIONS_PATH);
+        await serveRcCompatSessions({ request: request7, response, sessions, retireSession, answerJson: answerJson2, readBody: readBody4, credentialRefusal, unauthorized, now: deps.now, ...deps.log === void 0 ? {} : { log: deps.log } }, pathname, RC_COMPAT_SESSIONS_PATH);
         return;
       }
       if (pathname === RC_CONVERSATIONS_PATH_PREFIX || pathname.startsWith(`${RC_CONVERSATIONS_PATH_PREFIX}/`)) {
-        await serveRcConversations({ request: request7, response, conversations, answerJson: answerJson2, readBody: readBody3, credentialRefusal, unauthorized, publish, holdStream, sweep, now: deps.now, presenceRefreshSeconds: RC_PRESENCE_REFRESH_SECONDS, maxBatchEvents: RC_SELF_HOST_MAX_BATCH_EVENTS, ...deps.log === void 0 ? {} : { log: deps.log } }, pathname, method);
+        await serveRcConversations({ request: request7, response, conversations, answerJson: answerJson2, readBody: readBody4, credentialRefusal, unauthorized, publish, holdStream, sweep, now: deps.now, presenceRefreshSeconds: RC_PRESENCE_REFRESH_SECONDS, maxBatchEvents: RC_SELF_HOST_MAX_BATCH_EVENTS, ...deps.log === void 0 ? {} : { log: deps.log } }, pathname, method);
         return;
       }
       if (pathname !== RC_SESSIONS_PATH_PREFIX2 && !pathname.startsWith(`${RC_SESSIONS_PATH_PREFIX2}/`)) {
@@ -130687,7 +131769,7 @@ data: ${JSON.stringify(envelope)}
             await unauthorized(response, createRefusal);
             return;
           }
-          const body = parseJsonObject5(await readBody3(request7.body, CONTROL_BODY_CAP_BYTES));
+          const body = parseJsonObject5(await readBody4(request7.body, CONTROL_BODY_CAP_BYTES));
           const namedConversation = nonEmptyString4(body, "conversation");
           let conversation;
           if (namedConversation === void 0) {
@@ -130742,7 +131824,7 @@ data: ${JSON.stringify(envelope)}
       await serveSessionPath(sessions.get(id2), tail, request7, response);
     }
   };
-  const local = createRcSelfHostLocal({ now: deps.now, credentialRecord: deps.credentialRecord, readBody: readBody3 });
+  const local = createRcSelfHostLocal({ now: deps.now, credentialRecord: deps.credentialRecord, readBody: readBody4 });
   return {
     route,
     local,
@@ -130822,7 +131904,7 @@ function createSseParser() {
     }
   };
 }
-function isRecord13(value2) {
+function isRecord15(value2) {
   return typeof value2 === "object" && value2 !== null && !Array.isArray(value2);
 }
 function sequenceNumOf(value2) {
@@ -130844,7 +131926,7 @@ function parseRcStreamEnvelope(parsed) {
   } catch {
     return void 0;
   }
-  if (!isRecord13(data)) {
+  if (!isRecord15(data)) {
     return void 0;
   }
   const eventType = data.event_type;
@@ -131081,15 +132163,20 @@ function createRcStreamHub(deps) {
 
 // src/frontdoor/watchdog.ts
 var import_node_worker_threads2 = require("node:worker_threads");
+init_schema();
 init_ensure2();
 init_probe();
 var DOOR_STALL_BOUND_MS = 2 * FRONTDOOR_PROBE_ATTEMPTS * PROBE_TIMEOUT_MS;
+var MS_PER_MINUTE4 = 6e4;
+var DOOR_RESPAWN_MIN_SERVING_MS = FRONTDOOR_DEFAULT_IDLE_SHUTDOWN_MINUTES * MS_PER_MINUTE4;
+var DOOR_AWAIT_PID_ENV = "AGENT_SHIM_FRONTDOOR_AWAIT_PID";
 var CHECKS_PER_PROBE_DEADLINE = 2;
 var DOOR_WATCHDOG_CHECK_MS = PROBE_TIMEOUT_MS / CHECKS_PER_PROBE_DEADLINE;
 var WATCHDOG_SOURCE = `
 const { workerData, parentPort } = require("node:worker_threads");
 const fs = require("node:fs");
-const { shared, boundMs, checkEveryMs, stateFile, ownPid, action } = workerData;
+const { shared, boundMs, checkEveryMs, stateFile, ownPid, action, logFile, respawn, respawnAfterServingMs, awaitPidEnv } = workerData;
+const startedAt = Date.now();
 const counter = new Int32Array(shared);
 let lastValue = Atomics.load(counter, 0);
 let lastChangeAt = Date.now();
@@ -131106,6 +132193,31 @@ const record = (message) => {
     // The state file is a courtesy to whoever looks next; the process still has to end.
   }
 };
+const log = (line) => {
+  if (logFile === undefined) return;
+  try {
+    fs.appendFileSync(logFile, new Date().toISOString() + " frontdoor " + String(ownPid) + ": " + line + "\\n");
+  } catch (error) {
+    // Nowhere left to report a failed log write to; the process still has to end.
+  }
+};
+const spawnReplacement = () => {
+  if (respawn === undefined || logFile === undefined) return;
+  const servedMs = Date.now() - startedAt;
+  if (servedMs < respawnAfterServingMs) {
+    log("the door served for " + String(servedMs) + "ms before stalling, less than the " + String(respawnAfterServingMs) + "ms it must have served to be replaced; leaving the next launch to start one");
+    return;
+  }
+  try {
+    const out = fs.openSync(logFile, "a");
+    const child = require("node:child_process").spawn(respawn.command, respawn.args, { detached: true, stdio: ["ignore", out, out], env: Object.assign({}, respawn.env, { [awaitPidEnv]: String(ownPid) }) });
+    child.unref();
+    fs.closeSync(out);
+    log("started replacement door " + String(child.pid) + ", which binds once this process is gone");
+  } catch (error) {
+    log("could not start a replacement door: " + (error instanceof Error ? error.message : String(error)));
+  }
+};
 const timer = setInterval(() => {
   if (stopped) return;
   const now = Date.now();
@@ -131120,6 +132232,8 @@ const timer = setInterval(() => {
   if (now - lastChangeAt >= boundMs) {
     const message = "the front door's event loop did not run for " + String(now - lastChangeAt) + "ms; its watchdog ended the process so the next launch starts a fresh door on the same ports";
     record(message);
+    log(message);
+    spawnReplacement();
     stopped = true;
     clearInterval(timer);
     if (action === "kill-process") {
@@ -131142,7 +132256,7 @@ function startThreadWatchdog(params) {
   const counter = new Int32Array(shared);
   const worker = new import_node_worker_threads2.Worker(WATCHDOG_SOURCE, {
     eval: true,
-    workerData: { shared, boundMs: params.boundMs, checkEveryMs: params.checkEveryMs, stateFile: params.stateFile, ownPid: params.ownPid, action: params.action }
+    workerData: { shared, boundMs: params.boundMs, checkEveryMs: params.checkEveryMs, stateFile: params.stateFile, ownPid: params.ownPid, action: params.action, logFile: params.logFile, respawn: params.respawn, respawnAfterServingMs: params.respawnAfterServingMs, awaitPidEnv: DOOR_AWAIT_PID_ENV }
   });
   worker.unref();
   worker.on("message", (message) => {
@@ -131270,6 +132384,13 @@ function createRealQuotaRefresher(params) {
 
 // src/frontdoor/commands.ts
 init_store2();
+function respawnInvocation(paths) {
+  const env = {};
+  for (const [name, value2] of Object.entries({ ...process.env, AGENT_SHIM_HOME: paths.root })) {
+    env[name] = value2;
+  }
+  return { ...selfInvocation(["__frontdoor-supervisor"]), env };
+}
 function appendLog(paths, line) {
   import_node_fs19.default.mkdirSync(paths.logsDir, { recursive: true });
   import_node_fs19.default.appendFileSync(paths.frontdoorLogPath, `${(/* @__PURE__ */ new Date()).toISOString()} ${line}
@@ -131312,8 +132433,8 @@ function realFrontDoorSupervisorPorts(paths) {
   };
   const rcSelfHostSurface = rcSelfHost ? createRcSelfHostSurface({
     now: () => Date.now(),
-    newUuid: import_node_crypto21.randomUUID,
-    randomToken: () => (0, import_node_crypto21.randomBytes)(MINTED_TOKEN_RANDOM_BYTES).toString("base64url"),
+    newUuid: import_node_crypto23.randomUUID,
+    randomToken: () => (0, import_node_crypto23.randomBytes)(MINTED_TOKEN_RANDOM_BYTES).toString("base64url"),
     credentialRecord: () => readRcSelfHostRecord(realFarmFs, paths.frontdoorDir),
     webFetch: realRcWebFetch({ allowPrivate: rcWebFetchAllowsPrivateFromEnv(process.env) }),
     log
@@ -131336,7 +132457,7 @@ function realFrontDoorSupervisorPorts(paths) {
     saveSequenceNum: rcCredentialStore.writeCursor,
     dial: rcSelfHost ? lateRcStreamDial(rcSelfHostDialTarget) : realRcStreamDial(),
     fanout: rcFanout,
-    newClientId: import_node_crypto21.randomUUID,
+    newClientId: import_node_crypto23.randomUUID,
     backoffMs: RC_STREAM_BACKOFF_MS,
     sleep: async (ms2) => {
       await new Promise((resolve2) => {
@@ -131348,7 +132469,7 @@ function realFrontDoorSupervisorPorts(paths) {
     }
   });
   const routingSnapshots = /* @__PURE__ */ new Map();
-  const rcControlToken = (0, import_node_crypto21.randomUUID)();
+  const rcControlToken = (0, import_node_crypto23.randomUUID)();
   const resolveRoute = rcObservingResolver(
     createProviderRouteResolver({
       fs: realFsPort,
@@ -131464,9 +132585,9 @@ function realFrontDoorSupervisorPorts(paths) {
     now: () => Date.now(),
     headroomSocket: () => headroomSocketTarget(realFarmFs, realHeadroomSocketTrust, paths),
     // The per-generation capability the direct listener demands: held only in this process's memory, so a loopback process that discovers the direct port still cannot use it.
-    hopSecret: (0, import_node_crypto21.randomUUID)(),
+    hopSecret: (0, import_node_crypto23.randomUUID)(),
     headroomDecision,
-    custody: createCredentialCustody(() => (0, import_node_crypto21.randomUUID)()),
+    custody: createCredentialCustody(() => (0, import_node_crypto23.randomUUID)()),
     log
   });
   const onListenerError = (name) => (error63) => {
@@ -131489,9 +132610,9 @@ function realFrontDoorSupervisorPorts(paths) {
     startProviderListener: async (preferredPort) => {
       const authority = loadCa();
       const rcDial = rcSelfHost ? lateRcEventDial(rcSelfHostDialTarget) : realRcEventDial();
-      const rcInject = async (sessionId, text2) => await injectRcUserMessage({ credentialOf: rcTracker.credentialOf, noteSequenceNums: rcTracker.noteSequenceNums, dial: rcDial, newUuid: import_node_crypto21.randomUUID }, sessionId, text2);
+      const rcInject = async (sessionId, text2) => await injectRcUserMessage({ credentialOf: rcTracker.credentialOf, noteSequenceNums: rcTracker.noteSequenceNums, dial: rcDial, newUuid: import_node_crypto23.randomUUID }, sessionId, text2);
       const rcAnswer = async (sessionId, requestId, decision) => await answerRcControlRequest({ credentialOf: rcTracker.credentialOf, pendingOf: (id2) => rcTracker.pendingOf(id2), completePending: rcTracker.completePending, noteSequenceNums: rcTracker.noteSequenceNums, dial: rcDial }, sessionId, requestId, decision);
-      const rcControlRequestDeps = { credentialOf: rcTracker.credentialOf, noteSequenceNums: rcTracker.noteSequenceNums, dial: rcDial, newUuid: import_node_crypto21.randomUUID };
+      const rcControlRequestDeps = { credentialOf: rcTracker.credentialOf, noteSequenceNums: rcTracker.noteSequenceNums, dial: rcDial, newUuid: import_node_crypto23.randomUUID };
       const rcInterrupt = async (sessionId) => await interruptRcSession(rcControlRequestDeps, sessionId);
       const rcSetModel = async (sessionId, model) => await setRcSessionModel(rcControlRequestDeps, sessionId, model);
       const rcSetPermissionMode = async (sessionId, mode) => await setRcSessionPermissionMode(rcControlRequestDeps, sessionId, mode);
@@ -131590,7 +132711,7 @@ function realFrontDoorSupervisorPorts(paths) {
     },
     startConnectListener: async (preferredPort) => {
       const wantedTransparentPort = process.env.AGENT_SHIM_TRANSPARENT_SURFACE === void 0 ? void 0 : Number(process.env.AGENT_SHIM_TRANSPARENT_SURFACE);
-      const transparentCapability = wantedTransparentPort === void 0 || Number.isNaN(wantedTransparentPort) ? void 0 : (0, import_node_crypto21.randomUUID)();
+      const transparentCapability = wantedTransparentPort === void 0 || Number.isNaN(wantedTransparentPort) ? void 0 : (0, import_node_crypto23.randomUUID)();
       if (transparentCapability !== void 0) {
         writeFrontDoorSession(realFarmFs, paths.frontdoorSessionsDir, { pid: process.pid, startedAt: Date.now(), token: transparentCapability });
       }
@@ -131663,7 +132784,16 @@ function realFrontDoorSupervisorPorts(paths) {
       return { port: handle.port, close: handle.close };
     },
     closeRcStreamHub: rcHub.close,
-    startWatchdog: () => startThreadWatchdog({ stateFile: paths.frontdoorStateFile, ownPid: process.pid, boundMs: DOOR_STALL_BOUND_MS, checkEveryMs: DOOR_WATCHDOG_CHECK_MS, action: "kill-process" }),
+    startWatchdog: () => startThreadWatchdog({
+      stateFile: paths.frontdoorStateFile,
+      ownPid: process.pid,
+      boundMs: DOOR_STALL_BOUND_MS,
+      checkEveryMs: DOOR_WATCHDOG_CHECK_MS,
+      action: "kill-process",
+      logFile: paths.frontdoorLogPath,
+      respawn: respawnInvocation(paths),
+      respawnAfterServingMs: DOOR_RESPAWN_MIN_SERVING_MS
+    }),
     // The launch lifecycle publisher over the same backbone the typed API serves: the tick's registry facts go in here, and the door's own register, prune and end moments come out as source-tagged events.
     observeLaunchRegistry: createLaunchEventPublisher(doorEvents, () => Date.now()).observe,
     doorHealth,
@@ -131708,14 +132838,24 @@ function registerFrontDoorCommand(program2, deps) {
   registerRcCommand(frontdoor, paths);
   program2.command("__frontdoor-supervisor", { hidden: true }).description("Internal: serve the front-door routing listeners. Started by the launcher; never run by hand.").allowUnknownOption().action(async () => {
     const idleShutdownMinutes = readGlobalConfig(paths)?.frontdoor?.idleShutdownMinutes ?? FRONTDOOR_DEFAULT_IDLE_SHUTDOWN_MINUTES;
-    process.on("SIGTERM", () => {
-      deps.exit(0);
-    });
-    process.on("SIGINT", () => {
-      deps.exit(0);
-    });
+    const supervisorPorts = realFrontDoorSupervisorPorts(paths);
+    const ownPid = process.pid;
+    process.on("exit", (code) => {
+      supervisorPorts.log(`frontdoor ${String(ownPid)}: exiting with code ${String(code)}`);
+    });
+    for (const signal of ["SIGTERM", "SIGINT"]) {
+      process.on(signal, () => {
+        supervisorPorts.log(`frontdoor ${String(ownPid)}: received ${signal}; exiting`);
+        deps.exit(0);
+      });
+    }
+    const awaited = Number(process.env[DOOR_AWAIT_PID_ENV]);
+    Reflect.deleteProperty(process.env, DOOR_AWAIT_PID_ENV);
+    if (Number.isInteger(awaited) && awaited > 0) {
+      await awaitPidExit(awaited, DOOR_STALL_BOUND_MS, supervisorPorts);
+    }
     declareThisProcessTheFrontDoor();
-    deps.exit(await runFrontDoorSupervisor(idleShutdownMinutes, realFrontDoorSupervisorPorts(paths)));
+    deps.exit(await runFrontDoorSupervisor(idleShutdownMinutes, supervisorPorts));
   });
 }
 
@@ -141797,7 +142937,7 @@ function registerCompletionCommand(program2) {
 }
 
 // src/credentialCommand.ts
-var import_node_child_process6 = require("node:child_process");
+var import_node_child_process7 = require("node:child_process");
 init_commandDeps();
 init_cliError();
 init_credential();
@@ -141857,7 +142997,7 @@ function realCommandPorts(deps) {
     cache: createRealCredentialCache(deps.paths.root),
     platform: process.platform,
     now: () => Date.now(),
-    ssh: (host, remoteCommand, input2) => (0, import_node_child_process6.spawnSync)("ssh", ["--", host, remoteCommand], { input: input2, stdio: ["pipe", "inherit", "inherit"] }).status
+    ssh: (host, remoteCommand, input2) => (0, import_node_child_process7.spawnSync)("ssh", ["--", host, remoteCommand], { input: input2, stdio: ["pipe", "inherit", "inherit"] }).status
   };
 }
 var REMOTE_ROOT_SCRIPT = 'root="${AGENT_SHIM_HOME:-${CLAUDE_USE_HOME:-}}"; if [ -z "$root" ]; then if [ ! -d "$HOME/.agent-shim" ] && [ -d "$HOME/.claude-use" ]; then root="$HOME/.claude-use"; else root="$HOME/.agent-shim"; fi; fi';
@@ -141994,7 +143134,7 @@ function registerDoctorCommand(program2, deps) {
 var import_node_fs22 = __toESM(require("node:fs"), 1);
 var import_node_http4 = __toESM(require("node:http"), 1);
 var import_node_path54 = __toESM(require("node:path"), 1);
-var import_node_child_process7 = require("node:child_process");
+var import_node_child_process8 = require("node:child_process");
 init_commandDeps();
 init_realFrontDoorPort();
 init_trust();
@@ -142178,7 +143318,7 @@ async function readyOverSocket(socketPath) {
 }
 var HEADROOM_TOOL_NAME = "headroom-ai";
 function readInstalledHeadroomCommit() {
-  const toolDir = (0, import_node_child_process7.spawnSync)("uv", ["tool", "dir"], { encoding: "utf8" });
+  const toolDir = (0, import_node_child_process8.spawnSync)("uv", ["tool", "dir"], { encoding: "utf8" });
   if (toolDir.status !== 0) {
     return void 0;
   }
@@ -142222,7 +143362,7 @@ function realSupervisorPorts(paths) {
       }
       const logFd = import_node_fs22.default.openSync(paths.headroomLogPath, "a");
       try {
-        const child = (0, import_node_child_process7.spawn)("headroom", headroomProxyArgs(socketPath, allowlistFile, settings2), {
+        const child = (0, import_node_child_process8.spawn)("headroom", headroomProxyArgs(socketPath, allowlistFile, settings2), {
           detached: true,
           stdio: ["ignore", logFd, logFd],
           env: headroomSpawnEnv(process.env, settings2, trust?.path)
@@ -142262,7 +143402,7 @@ function realSupervisorPorts(paths) {
     },
     ready: readyOverSocket,
     install: (spec) => {
-      const result = (0, import_node_child_process7.spawnSync)("uv", ["tool", "install", spec], { encoding: "utf8", timeout: HEADROOM_INSTALL_TIMEOUT_MS });
+      const result = (0, import_node_child_process8.spawnSync)("uv", ["tool", "install", spec], { encoding: "utf8", timeout: HEADROOM_INSTALL_TIMEOUT_MS });
       if (result.error !== void 0) {
         const timedOut = "code" in result.error && result.error.code === "ETIMEDOUT";
         return {
@@ -142279,7 +143419,7 @@ function realSupervisorPorts(paths) {
       return result.status === 0 ? { ok: true } : { ok: false, error: `uv tool install exited ${String(result.status)}` };
     },
     headroomVersion: () => {
-      const result = (0, import_node_child_process7.spawnSync)("headroom", ["--version"], { encoding: "utf8" });
+      const result = (0, import_node_child_process8.spawnSync)("headroom", ["--version"], { encoding: "utf8" });
       return result.status === 0 ? result.stdout.trim() : void 0;
     },
     installedCommit: readInstalledHeadroomCommit,
@@ -142671,11 +143811,38 @@ function toProviderView(name, provider) {
     name,
     kind: provider.kind ?? "http",
     displayName: provider.displayName,
-    ...isCodexProvider(provider) ? provider.codex === void 0 ? {} : { codex: provider.codex } : { baseUrl: provider.baseUrl },
+    ...isCodexProvider(provider) ? provider.codex === void 0 ? {} : { codex: provider.codex } : isAntigravityProvider(provider) ? provider.antigravity === void 0 ? {} : { antigravity: provider.antigravity } : { baseUrl: provider.baseUrl },
     credential: summariseCredential(provider.credential),
     ...provider.env === void 0 ? {} : { env: provider.env }
   };
 }
+function antigravityConfigFromOptions(options) {
+  if (options.antigravityMode === void 0 && options.antigravityDefaultModel === void 0 && options.antigravityModel === void 0 && options.antigravityEffort === void 0 && options.antigravityEndpoint === void 0 && options.antigravityProjectId === void 0 && options.antigravityLocation === void 0 && options.antigravityCommand === void 0 && options.antigravitySocket === void 0) {
+    return void 0;
+  }
+  const cloud = options.antigravityEndpoint !== void 0 || options.antigravityProjectId !== void 0 || options.antigravityLocation !== void 0 ? {
+    ...options.antigravityEndpoint === void 0 ? {} : { endpoint: options.antigravityEndpoint },
+    ...options.antigravityProjectId === void 0 ? {} : { projectId: options.antigravityProjectId },
+    ...options.antigravityLocation === void 0 ? {} : { location: options.antigravityLocation }
+  } : void 0;
+  const local = options.antigravityCommand !== void 0 || options.antigravitySocket !== void 0 ? {
+    ...options.antigravityCommand === void 0 ? {} : { command: options.antigravityCommand },
+    ...options.antigravitySocket === void 0 ? {} : { socketPath: options.antigravitySocket }
+  } : void 0;
+  const candidate = {
+    ...options.antigravityMode === void 0 ? {} : { mode: options.antigravityMode },
+    ...options.antigravityDefaultModel === void 0 ? {} : { defaultModel: options.antigravityDefaultModel },
+    ...options.antigravityModel === void 0 ? {} : { models: options.antigravityModel },
+    ...options.antigravityEffort === void 0 ? {} : { effort: options.antigravityEffort },
+    ...cloud === void 0 ? {} : { cloud },
+    ...local === void 0 ? {} : { local }
+  };
+  const parsed = AntigravityProviderConfigSchema.safeParse(candidate);
+  if (!parsed.success) {
+    throw new UsageError(`Invalid antigravity settings: ${parsed.error.issues.map((issue2) => `${issue2.path.join(".")}: ${issue2.message}`).join("; ")}`);
+  }
+  return parsed.data;
+}
 function codexConfigFromOptions(options) {
   if (options.codexDefaultModel === void 0 && options.codexModel === void 0 && options.codexEffort === void 0 && options.codexLogin === void 0) {
     return void 0;
@@ -142707,8 +143874,9 @@ function registerProviderCommand(program2, deps) {
       new Option("--credential-target <target>", "Where the token goes: bearer sets ANTHROPIC_AUTH_TOKEN (default), apiKey sets ANTHROPIC_API_KEY.").choices(
         PROVIDER_CREDENTIAL_TARGETS
       )
-    ).option("--env <KEY=VALUE>", "Extra environment entry for the child (repeatable).", collectStringPair).option("--codex-default-model <model>", "Codex providers: the codex model a request maps to when no tier matches.").option("--codex-model <tier=model>", "Codex providers: the codex model one tier (fable, opus, sonnet or haiku) maps to (repeatable).", collectStringPair).addOption(new Option("--codex-effort <effort>", "Codex providers: the reasoning effort when a request asks for none the backend accepts.").choices(CODEX_EFFORTS)).addOption(new Option("--codex-login <login>", "Codex providers: which login the upstream call uses, the Codex CLI's own login or a Sign in with ChatGPT grant from `agent-shim codex login`.").choices(CODEX_LOGINS)).option("--json", "Print the result as JSON.").action((name, options) => {
+    ).option("--env <KEY=VALUE>", "Extra environment entry for the child (repeatable).", collectStringPair).option("--codex-default-model <model>", "Codex providers: the codex model a request maps to when no tier matches.").option("--codex-model <tier=model>", "Codex providers: the codex model one tier (fable, opus, sonnet or haiku) maps to (repeatable).", collectStringPair).addOption(new Option("--codex-effort <effort>", "Codex providers: the reasoning effort when a request asks for none the backend accepts.").choices(CODEX_EFFORTS)).addOption(new Option("--codex-login <login>", "Codex providers: which login the upstream call uses, the Codex CLI's own login or a Sign in with ChatGPT grant from `agent-shim codex login`.").choices(CODEX_LOGINS)).addOption(new Option("--antigravity-mode <mode>", "Antigravity providers: cloud (direct Gemini/Vertex) or local (ACP daemon).").choices(ANTIGRAVITY_MODES)).option("--antigravity-default-model <model>", "Antigravity providers: the model a request maps to when no tier matches.").option("--antigravity-model <tier=model>", "Antigravity providers: the model one tier (fable, opus, sonnet or haiku) maps to (repeatable).", collectStringPair).addOption(new Option("--antigravity-effort <effort>", "Antigravity providers: reasoning effort.").choices(ANTIGRAVITY_EFFORTS)).option("--antigravity-endpoint <url>", "Antigravity cloud providers: custom API endpoint URL.").option("--antigravity-project-id <id>", "Antigravity cloud providers: Google Cloud project ID (for Vertex AI).").option("--antigravity-location <loc>", "Antigravity cloud providers: Google Cloud location (for Vertex AI).").option("--antigravity-command <cmd...>", "Antigravity local providers: command to spawn ACP server.", collectRepeated).option("--antigravity-socket <path>", "Antigravity local providers: path to existing Unix domain socket.").option("--json", "Print the result as JSON.").action((name, options) => {
       const codex = codexConfigFromOptions(options);
+      const antigravity = antigravityConfigFromOptions(options);
       const created = addProvider(paths, name, {
         ...options.kind === void 0 ? {} : { kind: options.kind },
         displayName: options.displayName,
@@ -142716,7 +143884,8 @@ function registerProviderCommand(program2, deps) {
         sources: options.credential,
         ...options.credentialTarget === void 0 ? {} : { target: options.credentialTarget },
         ...options.env === void 0 ? {} : { env: options.env },
-        ...codex === void 0 ? {} : { codex }
+        ...codex === void 0 ? {} : { codex },
+        ...antigravity === void 0 ? {} : { antigravity }
       });
       reportMutation(options.json, { action: "created", kind: "provider", name, value: created }, () => {
         console.log(`Created provider "${name}" (${describeProviderEndpoint(created)}, credential ${describeCredential(created.credential)}).`);
@@ -142728,7 +143897,9 @@ function registerProviderCommand(program2, deps) {
       "agent-shim provider add anthropic-api --display-name Anthropic --base-url https://api.anthropic.com --credential-target apiKey --credential keychain:anthropic-api-key",
       "agent-shim provider add local --display-name Local --base-url http://127.0.0.1:4000 --credential literal:dummy",
       "agent-shim provider add codex --kind codex --display-name Codex --credential literal:codex",
-      "agent-shim provider add codex --kind codex --display-name Codex --credential literal:codex --codex-model sonnet=gpt-5.6-sol --codex-effort medium"
+      "agent-shim provider add codex --kind codex --display-name Codex --credential literal:codex --codex-model sonnet=gpt-5.6-sol --codex-effort medium",
+      "agent-shim provider add agy-cloud --kind antigravity --display-name Antigravity --credential env:GEMINI_API_KEY",
+      "agent-shim provider add agy-local --kind antigravity --display-name Antigravity --antigravity-mode local --credential literal:placeholder"
     ]
   );
   const providerSet = provider.command("set <name>").description("Update an existing API provider definition.").option("--display-name <name>", "Replace the human-readable name.").option("--base-url <url>", "Replace the base URL (http providers only).").option(
@@ -142739,20 +143910,22 @@ function registerProviderCommand(program2, deps) {
     new Option("--credential-target <target>", "Where the token goes: bearer sets ANTHROPIC_AUTH_TOKEN, apiKey sets ANTHROPIC_API_KEY.").choices(
       PROVIDER_CREDENTIAL_TARGETS
     )
-  ).option("--env <KEY=VALUE>", "Add or replace an environment entry for the child (repeatable).", collectStringPair).option("--unset-env <KEY>", "Remove an environment entry (repeatable).", collectRepeated).option("--codex-default-model <model>", "Codex providers: replace the model a request maps to when no tier matches.").option("--codex-model <tier=model>", "Codex providers: set the codex model one tier maps to (repeatable; other tiers are kept).", collectStringPair).addOption(new Option("--codex-effort <effort>", "Codex providers: replace the default reasoning effort.").choices(CODEX_EFFORTS)).addOption(new Option("--codex-login <login>", "Codex providers: replace which login the upstream call uses.").choices(CODEX_LOGINS));
+  ).option("--env <KEY=VALUE>", "Add or replace an environment entry for the child (repeatable).", collectStringPair).option("--unset-env <KEY>", "Remove an environment entry (repeatable).", collectRepeated).option("--codex-default-model <model>", "Codex providers: replace the model a request maps to when no tier matches.").option("--codex-model <tier=model>", "Codex providers: set the codex model one tier maps to (repeatable; other tiers are kept).", collectStringPair).addOption(new Option("--codex-effort <effort>", "Codex providers: replace the default reasoning effort.").choices(CODEX_EFFORTS)).addOption(new Option("--codex-login <login>", "Codex providers: replace which login the upstream call uses.").choices(CODEX_LOGINS)).addOption(new Option("--antigravity-mode <mode>", "Antigravity providers: cloud (direct Gemini/Vertex) or local (ACP daemon).").choices(ANTIGRAVITY_MODES)).option("--antigravity-default-model <model>", "Antigravity providers: the model a request maps to when no tier matches.").option("--antigravity-model <tier=model>", "Antigravity providers: set the model one tier maps to (repeatable; other tiers are kept).", collectStringPair).addOption(new Option("--antigravity-effort <effort>", "Antigravity providers: reasoning effort.").choices(ANTIGRAVITY_EFFORTS)).option("--antigravity-endpoint <url>", "Antigravity cloud providers: custom API endpoint URL.").option("--antigravity-project-id <id>", "Antigravity cloud providers: Google Cloud project ID (for Vertex AI).").option("--antigravity-location <loc>", "Antigravity cloud providers: Google Cloud location (for Vertex AI).").option("--antigravity-command <cmd...>", "Antigravity local providers: command to spawn ACP server.", collectRepeated).option("--antigravity-socket <path>", "Antigravity local providers: path to existing Unix domain socket.");
   addCredentialCacheOptions(providerSet);
   withExamples(
     providerSet.option("--json", "Print the result as JSON.").action((name, allOptions) => {
       const { json: json2, ...options } = allOptions;
       if (Object.entries(allOptions).every(([key, value2]) => key === "json" || value2 === void 0)) {
         throw new UsageError(
-          "Nothing to change: pass --display-name, --base-url, --credential, --credential-target, a --credential-cache option, --env, --unset-env, --codex-default-model, --codex-model, --codex-effort or --codex-login."
+          "Nothing to change: pass --display-name, --base-url, --credential, --credential-target, a --credential-cache option, --env, --unset-env, or codex/antigravity settings."
         );
       }
       const codex = codexConfigFromOptions(options);
+      const antigravity = antigravityConfigFromOptions(options);
       const cache = cacheChange(options, readProvider(paths, name)?.credential.cache);
       const updated = updateProvider(paths, name, {
         ...codex === void 0 ? {} : { codex },
+        ...antigravity === void 0 ? {} : { antigravity },
         ...cache === void 0 ? {} : { cache },
         ...options.displayName === void 0 ? {} : { displayName: options.displayName },
         ...options.baseUrl === void 0 ? {} : { baseUrl: options.baseUrl },
@@ -142770,7 +143943,8 @@ function registerProviderCommand(program2, deps) {
       "agent-shim provider set z --env API_TIMEOUT_MS=600000",
       "agent-shim provider set z --credential op:op://vault/z/credential --credential-cache-ttl 12h",
       "agent-shim provider set anthropic-api --credential-target apiKey",
-      "agent-shim provider set codex --codex-model haiku=gpt-5.6-terra"
+      "agent-shim provider set codex --codex-model haiku=gpt-5.6-terra",
+      "agent-shim provider set agy --antigravity-model haiku=gemini-2.5-flash"
     ]
   );
   withExamples(
@@ -142808,6 +143982,12 @@ function registerProviderCommand(program2, deps) {
         console.log(`Codex models: ${CODEX_TIERS.map((tier) => `${tier}=${config2.models[tier]}`).join(", ")}, otherwise ${config2.defaultModel}`);
         console.log(`Codex effort: ${config2.effort}`);
         console.log(`Codex login: ${config2.login}`);
+      } else if (isAntigravityProvider(found)) {
+        const config2 = resolveAntigravityConfig(found.antigravity);
+        console.log(`Antigravity mode: ${config2.mode}`);
+        console.log(`Antigravity models: ${ANTIGRAVITY_TIERS.map((tier) => `${tier}=${config2.models[tier]}`).join(", ")}, otherwise ${config2.defaultModel}`);
+        console.log(`Antigravity effort: ${config2.effort}`);
+        console.log(`Endpoint: ${describeProviderEndpoint(found)}`);
       } else {
         console.log(`Base URL: ${found.baseUrl}`);
       }