claude-use 11.9.0 → 11.11.0

package/dist/cli.cjs

@@ -27010,12 +27010,12 @@ var init_schema = __esm({
     ANTIGRAVITY_TIERS = ["fable", "opus", "sonnet", "haiku"];
     ANTIGRAVITY_EFFORTS = ["none", "low", "medium", "high", "xhigh", "max"];
     ANTIGRAVITY_DEFAULT_MODE = "cloud";
-    ANTIGRAVITY_DEFAULT_MODEL = "gemini-2.5-pro";
+    ANTIGRAVITY_DEFAULT_MODEL = "gemini-3.8-flash-high";
     ANTIGRAVITY_DEFAULT_TIER_MODELS = Object.freeze({
-      fable: "gemini-2.5-pro",
-      opus: "gemini-2.5-pro",
-      sonnet: "gemini-2.5-flash",
-      haiku: "gemini-2.5-flash"
+      fable: "gemini-3.8-flash-high",
+      opus: "gemini-3.8-flash-high",
+      sonnet: "gemini-3.8-flash-medium",
+      haiku: "gemini-3.8-flash-low"
     });
     ANTIGRAVITY_DEFAULT_EFFORT = "low";
     AntigravityProviderConfigSchema = external_exports.strictObject({
@@ -33419,7 +33419,7 @@ function isRateLimitHeader(name) {
   const lower = name.toLowerCase();
   return lower === "retry-after" || lower.startsWith("anthropic-ratelimit-") || lower.startsWith("x-ratelimit-") || lower.startsWith("ratelimit") || lower.startsWith("x-codex-");
 }
-var USAGE_SCHEMA_VERSION, VersionSchema, InstantSchema, TokenCountSchema, TokenUsageSchema, LIMIT_KINDS, LimitClassificationSchema, UsageRecordSchema, QuotaWindowSchema, ExtraUsageSpendSchema, UnifiedRateLimitSchema, RateLimitStateSchema, LimitEventSchema, ProviderQuotaWindowSchema, ProviderQuotaSchema, ProviderUsageStateSchema, AccountMetadataSchema, UsageSnapshotSchema;
+var USAGE_SCHEMA_VERSION, VersionSchema, InstantSchema, TokenCountSchema, TokenUsageSchema, LIMIT_KINDS, LimitClassificationSchema, UsageRecordSchema, QuotaWindowSchema, ExtraUsageSpendSchema, UnifiedRateLimitSchema, RateLimitStateSchema, LimitEventSchema, ProviderQuotaWindowSchema, ProviderAccountSchema, ProviderQuotaSchema, ProviderUsageStateSchema, AccountMetadataSchema, UsageSnapshotSchema;
 var init_schema2 = __esm({
   "src/usage/schema.ts"() {
     "use strict";
@@ -33551,12 +33551,18 @@ var init_schema2 = __esm({
       used: external_exports.number().nonnegative().optional(),
       remaining: external_exports.number().nonnegative().optional()
     });
+    ProviderAccountSchema = external_exports.strictObject({
+      email: external_exports.string().optional(),
+      accountId: external_exports.string().optional()
+    });
     ProviderQuotaSchema = external_exports.strictObject({
       observedAt: InstantSchema,
       /** Which usage endpoint produced it (`z.ai`). */
       source: external_exports.string(),
       /** The subscription level the endpoint reports, when it does. */
       level: external_exports.string().optional(),
+      /** The account the provider's credential belongs to, when its endpoint reports it. */
+      account: ProviderAccountSchema.optional(),
       windows: external_exports.array(ProviderQuotaWindowSchema)
     });
     ProviderUsageStateSchema = external_exports.strictObject({
@@ -33962,11 +33968,33 @@ function formatCredentialSummary(summary) {
 function describeCredential(credential) {
   return formatCredentialSummary(summariseCredential(credential));
 }
+function isRecord2(value2) {
+  return typeof value2 === "object" && value2 !== null && !Array.isArray(value2);
+}
+function unpackKeyringToken(raw) {
+  const trimmed = raw.trim();
+  if (!trimmed.startsWith(GO_KEYRING_BASE64_PREFIX)) {
+    return trimmed;
+  }
+  try {
+    const base64Str = trimmed.slice(GO_KEYRING_BASE64_PREFIX.length);
+    const decoded = Buffer.from(base64Str, "base64").toString("utf8");
+    const parsed = JSON.parse(decoded);
+    if (isRecord2(parsed) && isRecord2(parsed.token)) {
+      const accessToken = parsed.token.access_token;
+      if (typeof accessToken === "string" && accessToken.trim() !== "") {
+        return accessToken.trim();
+      }
+    }
+  } catch {
+  }
+  return trimmed;
+}
 function trySource(source, params) {
   const none = (reason, warn = false) => ({ ok: false, reason, warn });
   if ("env" in source) {
     const value2 = params.env[source.env];
-    return value2 === void 0 || value2 === "" ? none("is unset or empty") : { ok: true, token: value2 };
+    return value2 === void 0 || value2 === "" ? none("is unset or empty") : { ok: true, token: unpackKeyringToken(value2) };
   }
   if ("literal" in source) {
     return { ok: true, token: source.literal };
@@ -33982,7 +34010,7 @@ function trySource(source, params) {
         true
       );
     }
-    const token2 = read.content.trim();
+    const token2 = unpackKeyringToken(read.content.trim());
     return token2 === "" ? none("is empty") : { ok: true, token: token2 };
   }
   const argv = commandArgv(source);
@@ -34000,7 +34028,7 @@ function trySource(source, params) {
     const outcome = result.status === null ? "could not be run or was killed by a signal" : `exited with status ${String(result.status)}`;
     return none(`${outcome}${stderr === "" ? "" : `: ${stderr}`}`);
   }
-  const token = result.stdout.trim();
+  const token = unpackKeyringToken(result.stdout.trim());
   return token === "" ? none("printed no token") : { ok: true, token };
 }
 function warmCommandFor(subject) {
@@ -34044,7 +34072,7 @@ function credentialVariables(target, token) {
     CLAUDE_CODE_OAUTH_TOKEN: target === "oauthToken" ? token : void 0
   };
 }
-var CREDENTIAL_UNAVAILABLE_EXIT, CREDENTIAL_COMMAND_TIMEOUT_MS, CREDENTIAL_INTERACTIVE_TIMEOUT_MS, GROUP_OTHER_PERMISSION_BITS, PERMISSION_BITS2, OCTAL_RADIX2;
+var CREDENTIAL_UNAVAILABLE_EXIT, CREDENTIAL_COMMAND_TIMEOUT_MS, CREDENTIAL_INTERACTIVE_TIMEOUT_MS, GROUP_OTHER_PERMISSION_BITS, PERMISSION_BITS2, OCTAL_RADIX2, GO_KEYRING_BASE64_PREFIX;
 var init_credential = __esm({
   "src/credential.ts"() {
     "use strict";
@@ -34055,6 +34083,7 @@ var init_credential = __esm({
     GROUP_OTHER_PERMISSION_BITS = 63;
     PERMISSION_BITS2 = 511;
     OCTAL_RADIX2 = 8;
+    GO_KEYRING_BASE64_PREFIX = "go-keyring-base64:";
   }
 });
 
@@ -34064,7 +34093,7 @@ var init_package = __esm({
   "package.json"() {
     package_default = {
       name: "claude-use",
-      version: "11.9.0",
+      version: "11.11.0",
       description: "A profile manager and launcher for Claude Code that lets one person run multiple logins from one machine while controlling what gets shared between them.",
       license: "MIT",
       author: "Joseph Mearman <joseph@mearman.co.uk>",
@@ -34666,13 +34695,16 @@ function decoderFor(encoding) {
       return void 0;
   }
 }
-function destinationOf(path59) {
+function destinationOf(path59, sessionProvider) {
   const scoped = parseProviderPath(path59);
-  return scoped === void 0 ? { provider: ANTHROPIC_PROVIDER, endpoint: path59 } : { provider: scoped.provider, endpoint: scoped.rest };
+  if (scoped !== void 0) {
+    return { provider: scoped.provider, endpoint: scoped.rest };
+  }
+  return { provider: sessionProvider ?? ANTHROPIC_PROVIDER, endpoint: path59 };
 }
 function buildRecord(event, context) {
   const { scan } = context;
-  const { provider, endpoint } = destinationOf(event.path);
+  const { provider, endpoint } = destinationOf(event.path, event.session.provider);
   const rateLimitHeaders = rateLimitHeadersOf(event.headers);
   const limit = classifyLimit({ status: event.status, headers: rateLimitHeaders ?? {}, error: scan?.error, nowMs: context.endedAt });
   const requestId = headerValue(event.headers, "request-id");
@@ -35634,14 +35666,14 @@ function providerJsonPath(paths, name) {
 function providerExists(paths, name) {
   return import_node_fs10.default.existsSync(providerJsonPath(paths, name));
 }
-function isRecord2(value2) {
+function isRecord3(value2) {
   return typeof value2 === "object" && value2 !== null && !Array.isArray(value2);
 }
 function legacyProviderConversion(raw) {
-  if (!isRecord2(raw) || "credential" in raw) {
+  if (!isRecord3(raw) || "credential" in raw) {
     return void 0;
   }
-  const env = isRecord2(raw.env) ? raw.env : void 0;
+  const env = isRecord3(raw.env) ? raw.env : void 0;
   const legacyEnvKeys = env === void 0 ? [] : Object.keys(env).filter((key) => LEGACY_ENV_CREDENTIAL_KEYS.includes(key));
   const fields = [...LEGACY_PROVIDER_FIELDS.filter((field) => field in raw), ...legacyEnvKeys.map((key) => `env.${key}`)];
   if (fields.length === 0) {
@@ -63958,6 +63990,125 @@ var init_identityClaude = __esm({
   }
 });
 
+// src/antigravity/cloudUpstream.ts
+function isCcpaEndpoint(endpoint) {
+  return endpoint.includes("cloudcode-pa.googleapis.com");
+}
+function buildCloudUrl(config2, model) {
+  const { cloud } = config2;
+  if (cloud.projectId !== void 0 && cloud.location !== void 0) {
+    const base2 = cloud.endpoint ?? `https://${cloud.location}-aiplatform.googleapis.com`;
+    return `${base2}/v1/projects/${cloud.projectId}/locations/${cloud.location}/publishers/google/models/${encodeURIComponent(model)}:streamGenerateContent?alt=sse`;
+  }
+  const base = cloud.endpoint ?? CCPA_ENDPOINT;
+  if (isCcpaEndpoint(base)) {
+    return `${base}/v1internal:streamGenerateContent?alt=sse`;
+  }
+  return `${base}/v1beta/models/${encodeURIComponent(model)}:streamGenerateContent?alt=sse`;
+}
+function buildCloudHeaders(token, credentialTarget, endpoint) {
+  const headers = {
+    "Content-Type": "application/json",
+    Accept: "text/event-stream"
+  };
+  const target = credentialTarget ?? "bearer";
+  if (target === "apiKey") {
+    headers["x-goog-api-key"] = token;
+  } else {
+    headers.Authorization = `Bearer ${token}`;
+  }
+  const base = endpoint ?? CCPA_ENDPOINT;
+  if (isCcpaEndpoint(base)) {
+    headers["User-Agent"] = CCPA_USER_AGENT;
+  }
+  return headers;
+}
+function buildCloudRequestBody(params) {
+  const base = params.config.cloud.endpoint ?? CCPA_ENDPOINT;
+  if (isCcpaEndpoint(base)) {
+    return JSON.stringify({
+      project: params.config.cloud.projectId ?? CCPA_DEFAULT_PROJECT_ID,
+      requestId: `agent/${(0, import_node_crypto16.randomUUID)()}/${String(Date.now())}/1`,
+      request: params.request,
+      model: params.model,
+      userAgent: "antigravity"
+    });
+  }
+  return JSON.stringify(params.request);
+}
+function isRecord4(value2) {
+  return typeof value2 === "object" && value2 !== null && !Array.isArray(value2);
+}
+function isGeminiChunk(value2) {
+  return isRecord4(value2);
+}
+async function* callCloudAntigravity(params, fetchFn = fetch) {
+  const url2 = buildCloudUrl(params.config, params.model);
+  const headers = buildCloudHeaders(params.token, params.credentialTarget, params.config.cloud.endpoint);
+  const body = buildCloudRequestBody(params);
+  const response = await fetchFn(url2, {
+    method: "POST",
+    headers,
+    body,
+    signal: params.signal
+  });
+  if (!response.ok) {
+    const errorText = await response.text();
+    const retryAfter = response.headers.get("retry-after");
+    throw new AntigravityUpstreamError(response.status, errorText, retryAfter);
+  }
+  if (response.body === null) {
+    return;
+  }
+  const decoder = new TextDecoder("utf-8");
+  let buffer2 = "";
+  const sseDataPrefix = "data:";
+  for await (const rawChunk of response.body) {
+    const chunk = rawChunk instanceof Uint8Array ? rawChunk : Buffer.from(String(rawChunk));
+    buffer2 += decoder.decode(chunk, { stream: true });
+    const lines = buffer2.split("\n");
+    buffer2 = lines.pop() ?? "";
+    for (const line of lines) {
+      const trimmed = line.trim();
+      if (trimmed.startsWith(sseDataPrefix)) {
+        const jsonStr = trimmed.slice(sseDataPrefix.length).trim();
+        if (jsonStr.length > 0) {
+          try {
+            const parsed = JSON.parse(jsonStr);
+            if (isRecord4(parsed)) {
+              const unwrapped = isRecord4(parsed.response) ? parsed.response : parsed;
+              if (isGeminiChunk(unwrapped)) {
+                yield unwrapped;
+              }
+            }
+          } catch {
+          }
+        }
+      }
+    }
+  }
+}
+var import_node_crypto16, CCPA_ENDPOINT, CCPA_DEFAULT_PROJECT_ID, CCPA_USER_AGENT, AntigravityUpstreamError;
+var init_cloudUpstream = __esm({
+  "src/antigravity/cloudUpstream.ts"() {
+    "use strict";
+    import_node_crypto16 = require("node:crypto");
+    CCPA_ENDPOINT = "https://daily-cloudcode-pa.googleapis.com";
+    CCPA_DEFAULT_PROJECT_ID = "aicode-consumers";
+    CCPA_USER_AGENT = "antigravity/cli/1.3.5 (aidev_client; os_type=darwin; arch=arm64; cl=998863838; auth_method=consumer)";
+    AntigravityUpstreamError = class extends Error {
+      status;
+      retryAfter;
+      constructor(status, message, retryAfter) {
+        super(`Google Antigravity API error (${String(status)}): ${message}`);
+        this.name = "AntigravityUpstreamError";
+        this.status = status;
+        this.retryAfter = retryAfter;
+      }
+    };
+  }
+});
+
 // src/usage/providerQuota.ts
 function zaiWindow(limit) {
   const unitMs = ZAI_UNIT_MS.get(limit.unit);
@@ -64001,11 +64152,12 @@ function quotaFreshnessMs(quota) {
   const lengths = quota.windows.flatMap((window) => window.periodMs === void 0 ? [] : [window.periodMs]);
   return lengths.length === 0 ? Number.POSITIVE_INFINITY : Math.min(...lengths) / PERCENT3;
 }
-var ProviderQuotaError, MS_PER_SECOND6, SECONDS_PER_HOUR, HOURS_PER_DAY3, DAYS_PER_MONTH, PERCENT3, HTTP_OK, ZAI_SOURCE, ZAI_HOST, ZAI_QUOTA_URL, ZAI_UNIT_HOURS, ZAI_UNIT_MONTHS, ZAI_UNIT_MS, ZAI_MEASURES, ZaiLimitSchema, ZaiResponseSchema, zaiQuotaAdapter, OPENROUTER_SOURCE, OPENROUTER_HOST, OPENROUTER_KEY_URL, OPENROUTER_CREDITS_URL, HTTP_FORBIDDEN, MS_PER_DAY2, OpenRouterKeySchema, OpenRouterCreditsSchema, openRouterQuotaAdapter, PROVIDER_QUOTA_ADAPTERS;
+var ProviderQuotaError, MS_PER_SECOND6, SECONDS_PER_HOUR, HOURS_PER_DAY3, DAYS_PER_MONTH, PERCENT3, HTTP_OK, ZAI_SOURCE, ZAI_HOST, ZAI_QUOTA_URL, ZAI_UNIT_HOURS, ZAI_UNIT_MONTHS, ZAI_UNIT_MS, ZAI_MEASURES, ZaiLimitSchema, ZaiResponseSchema, zaiQuotaAdapter, OPENROUTER_SOURCE, OPENROUTER_HOST, OPENROUTER_KEY_URL, OPENROUTER_CREDITS_URL, HTTP_FORBIDDEN, MS_PER_DAY2, OpenRouterKeySchema, OpenRouterCreditsSchema, openRouterQuotaAdapter, ANTIGRAVITY_SOURCE, ANTIGRAVITY_HOST, ANTIGRAVITY_QUOTA_URL, GOOGLE_TOKENINFO_URL, FIVE_HOURS2, DAYS_PER_WEEK, FIVE_HOURS_MS, WEEK_MS, AntigravityBucketSchema, AntigravitySummarySchema, GoogleTokenInfoSchema, ANTIGRAVITY_WINDOW_MS, antigravityQuotaAdapter, PROVIDER_QUOTA_ADAPTERS;
 var init_providerQuota = __esm({
   "src/usage/providerQuota.ts"() {
     "use strict";
     init_zod();
+    init_cloudUpstream();
     init_schema2();
     ProviderQuotaError = class extends Error {
       constructor(source, detail) {
@@ -64119,7 +64271,71 @@ var init_providerQuota = __esm({
         });
       }
     };
-    PROVIDER_QUOTA_ADAPTERS = [zaiQuotaAdapter, openRouterQuotaAdapter];
+    ANTIGRAVITY_SOURCE = "Cloud Code";
+    ANTIGRAVITY_HOST = "daily-cloudcode-pa.googleapis.com";
+    ANTIGRAVITY_QUOTA_URL = `https://${ANTIGRAVITY_HOST}/v1internal:retrieveUserQuotaSummary`;
+    GOOGLE_TOKENINFO_URL = "https://oauth2.googleapis.com/tokeninfo";
+    FIVE_HOURS2 = 5;
+    DAYS_PER_WEEK = 7;
+    FIVE_HOURS_MS = FIVE_HOURS2 * SECONDS_PER_HOUR * MS_PER_SECOND6;
+    WEEK_MS = DAYS_PER_WEEK * HOURS_PER_DAY3 * SECONDS_PER_HOUR * MS_PER_SECOND6;
+    AntigravityBucketSchema = external_exports.object({
+      bucketId: external_exports.string(),
+      remainingFraction: external_exports.number().optional(),
+      resetTime: external_exports.string().optional()
+    });
+    AntigravitySummarySchema = external_exports.object({ groups: external_exports.array(external_exports.object({ buckets: external_exports.array(AntigravityBucketSchema) })) });
+    GoogleTokenInfoSchema = external_exports.object({
+      email: external_exports.string().optional(),
+      sub: external_exports.string().optional()
+    });
+    ANTIGRAVITY_WINDOW_MS = { "gemini-5h": FIVE_HOURS_MS, "3p-5h": FIVE_HOURS_MS, "gemini-weekly": WEEK_MS, "3p-weekly": WEEK_MS };
+    antigravityQuotaAdapter = {
+      source: ANTIGRAVITY_SOURCE,
+      matches: (baseUrl) => URL.canParse(baseUrl) && new URL(baseUrl).hostname === ANTIGRAVITY_HOST,
+      fetch: async (apiKey, http8, signal, nowMs) => {
+        const headers = { authorization: `Bearer ${apiKey}`, "content-type": "application/json", "user-agent": CCPA_USER_AGENT };
+        const summaryResponse = await http8(ANTIGRAVITY_QUOTA_URL, headers, signal, { method: "POST", body: JSON.stringify({ project: "aicode-consumers" }) });
+        if (summaryResponse.status !== HTTP_OK) {
+          throw new ProviderQuotaError(ANTIGRAVITY_SOURCE, `answered HTTP ${String(summaryResponse.status)}`);
+        }
+        let summaryBody;
+        try {
+          summaryBody = JSON.parse(summaryResponse.text);
+        } catch {
+          throw new ProviderQuotaError(ANTIGRAVITY_SOURCE, "answered something that is not JSON");
+        }
+        const parsed = AntigravitySummarySchema.safeParse(summaryBody);
+        if (!parsed.success) {
+          throw new ProviderQuotaError(ANTIGRAVITY_SOURCE, `answered an unexpected shape: ${parsed.error.issues.map((issue2) => `${issue2.path.join(".")}: ${issue2.message}`).join("; ")}`);
+        }
+        const tokenResponse = await http8(`${GOOGLE_TOKENINFO_URL}?access_token=${encodeURIComponent(apiKey)}`, { accept: "application/json" }, signal);
+        let account;
+        if (tokenResponse.status === HTTP_OK) {
+          try {
+            const tokenInfo = GoogleTokenInfoSchema.parse(JSON.parse(tokenResponse.text));
+            if (tokenInfo.email !== void 0 || tokenInfo.sub !== void 0) {
+              account = { ...tokenInfo.email === void 0 ? {} : { email: tokenInfo.email }, ...tokenInfo.sub === void 0 ? {} : { accountId: tokenInfo.sub } };
+            }
+          } catch {
+          }
+        }
+        return ProviderQuotaSchema.parse({
+          observedAt: new Date(nowMs).toISOString(),
+          source: ANTIGRAVITY_SOURCE,
+          ...account === void 0 ? {} : { account },
+          windows: parsed.data.groups.flatMap(
+            (group) => group.buckets.map((bucket) => ({
+              measures: bucket.bucketId,
+              ...ANTIGRAVITY_WINDOW_MS[bucket.bucketId] === void 0 ? {} : { periodMs: ANTIGRAVITY_WINDOW_MS[bucket.bucketId] },
+              utilization: bucket.remainingFraction === void 0 ? 0 : 1 - bucket.remainingFraction,
+              ...bucket.resetTime === void 0 ? {} : { resetsAt: bucket.resetTime }
+            }))
+          )
+        });
+      }
+    };
+    PROVIDER_QUOTA_ADAPTERS = [zaiQuotaAdapter, openRouterQuotaAdapter, antigravityQuotaAdapter];
   }
 });
 
@@ -64194,11 +64410,15 @@ function createQuotaRefresher(deps) {
 function createProviderLookup(ports) {
   return (name) => {
     const definition = loadProvider(ports.providersDir, name, ports.fs);
-    if (definition === void 0 || !isHttpProvider(definition)) {
+    if (definition === void 0) {
+      return void 0;
+    }
+    const baseUrl = isAntigravityProvider(definition) ? "https://daily-cloudcode-pa.googleapis.com" : isHttpProvider(definition) ? definition.baseUrl : void 0;
+    if (baseUrl === void 0) {
       return void 0;
     }
     return {
-      baseUrl: definition.baseUrl,
+      baseUrl,
       apiKey: () => {
         const resolution = resolveCredential({ credential: definition.credential, env: ports.env, port: ports.credentials, subject: `provider ${name}` });
         if (!resolution.ok) {
@@ -112646,7 +112866,7 @@ function registerCodexCommand(program2, deps) {
 }
 
 // src/frontdoor/commands.ts
-var import_node_crypto23 = require("node:crypto");
+var import_node_crypto24 = require("node:crypto");
 var import_node_path51 = __toESM(require("node:path"), 1);
 var import_node_fs19 = __toESM(require("node:fs"), 1);
 init_commandDeps();
@@ -113929,11 +114149,11 @@ init_capability();
 init_capture();
 
 // src/frontdoor/connect.ts
-var import_node_crypto17 = require("node:crypto");
+var import_node_crypto18 = require("node:crypto");
 var fs17 = __toESM(require("node:fs"), 1);
 
 // src/frontdoor/x509.ts
-var import_node_crypto16 = require("node:crypto");
+var import_node_crypto17 = require("node:crypto");
 var import_node_net = __toESM(require("node:net"), 1);
 var TAG_BOOLEAN = 1;
 var TAG_INTEGER = 2;
@@ -114085,7 +114305,7 @@ function ipBytes(address) {
   return bytes;
 }
 function keyIdentifier(publicKey) {
-  return (0, import_node_crypto16.createHash)("sha1").update(publicKey.export({ type: "pkcs1", format: "der" })).digest();
+  return (0, import_node_crypto17.createHash)("sha1").update(publicKey.export({ type: "pkcs1", format: "der" })).digest();
 }
 function readElement(buffer2, offset) {
   const tag = buffer2[offset];
@@ -114131,7 +114351,7 @@ ${body.join("\n")}
 `;
 }
 function randomSerial() {
-  const bytes = (0, import_node_crypto16.randomBytes)(SERIAL_NUMBER_BYTES);
+  const bytes = (0, import_node_crypto17.randomBytes)(SERIAL_NUMBER_BYTES);
   bytes[0] = (bytes[0] ?? 0) & BASE_128_PAYLOAD_MASK | HIGH_BIT >> 1;
   return bytes;
 }
@@ -114146,7 +114366,7 @@ function assemble(spec) {
     spec.subjectPublicKey.export({ type: "spki", format: "der" }),
     tlv(TAG_EXTENSIONS, sequence(...spec.extensions))
   );
-  const signature = (0, import_node_crypto16.sign)("sha256", tbs, spec.signingKey);
+  const signature = (0, import_node_crypto17.sign)("sha256", tbs, spec.signingKey);
   return sequence(tbs, SIGNATURE_ALGORITHM, wholeBitString(signature));
 }
 function subjectKeyIdentifierExtension(publicKey) {
@@ -114156,7 +114376,7 @@ function basicConstraintsExtension(isCa) {
   return extension(OID_BASIC_CONSTRAINTS, true, sequence(...isCa ? [boolean4(true)] : []));
 }
 function rsaKeyPair() {
-  return (0, import_node_crypto16.generateKeyPairSync)("rsa", { modulusLength: RSA_MODULUS_BITS });
+  return (0, import_node_crypto17.generateKeyPairSync)("rsa", { modulusLength: RSA_MODULUS_BITS });
 }
 function keyPem(privateKey) {
   return privateKey.export({ type: "pkcs8", format: "pem" });
@@ -114180,8 +114400,8 @@ function issueLeafCertificate(ca2, names, notBefore, notAfter) {
   if (commonName === void 0) {
     throw new Error("a leaf certificate needs at least one name");
   }
-  const caCertificate = new import_node_crypto16.X509Certificate(ca2.certPem);
-  const caPrivateKey = (0, import_node_crypto16.createPrivateKey)(ca2.keyPem);
+  const caCertificate = new import_node_crypto17.X509Certificate(ca2.certPem);
+  const caPrivateKey = (0, import_node_crypto17.createPrivateKey)(ca2.keyPem);
   const { publicKey, privateKey } = rsaKeyPair();
   const generalNames = names.map((name) => import_node_net.default.isIP(name) === 0 ? tlv(TAG_GENERAL_NAME_DNS, Buffer.from(name, "ascii")) : tlv(TAG_GENERAL_NAME_IP, ipBytes(name)));
   const der = assemble({
@@ -114536,8 +114756,8 @@ function ensureCa(store, generate) {
 }
 function caParses(ca2) {
   try {
-    new import_node_crypto17.X509Certificate(ca2.certPem);
-    (0, import_node_crypto17.createPrivateKey)(ca2.keyPem);
+    new import_node_crypto18.X509Certificate(ca2.certPem);
+    (0, import_node_crypto18.createPrivateKey)(ca2.keyPem);
     return true;
   } catch {
     return false;
@@ -114864,7 +115084,7 @@ var LiveTaskSchema = external_exports.strictObject({
   observedAt: external_exports.number()
 });
 var SYSTEM_SUBTYPES = ["task_started", "task_progress", "task_updated", "task_notification", "background_tasks_changed"];
-function isRecord3(value2) {
+function isRecord5(value2) {
   return typeof value2 === "object" && value2 !== null && !Array.isArray(value2);
 }
 function stringField(record2, field) {
@@ -114881,7 +115101,7 @@ function booleanField(record2, field) {
 }
 function usageOf(record2) {
   const raw = record2.usage;
-  if (!isRecord3(raw)) {
+  if (!isRecord5(raw)) {
     return void 0;
   }
   const totalTokens = numberField(raw, "total_tokens");
@@ -114913,7 +115133,7 @@ function bounded(book) {
   return book;
 }
 function applyAgentTaskEvent(book, sessionId, payload, observedAt2) {
-  if (!isRecord3(payload) || payload.type !== "system") {
+  if (!isRecord5(payload) || payload.type !== "system") {
     return book;
   }
   const subtype = payload.subtype;
@@ -114929,8 +115149,8 @@ function applyAgentTaskEvent(book, sessionId, payload, observedAt2) {
   if (subtype === "background_tasks_changed") {
     const tasks = Array.isArray(payload.tasks) ? payload.tasks : [];
     for (const raw of tasks) {
-      const taskId2 = isRecord3(raw) ? stringField(raw, "task_id") : void 0;
-      if (isRecord3(raw) && taskId2 !== void 0) {
+      const taskId2 = isRecord5(raw) ? stringField(raw, "task_id") : void 0;
+      if (isRecord5(raw) && taskId2 !== void 0) {
         upsert(taskId2, { runId: stringField(raw, "run_id"), taskType: stringField(raw, "task_type"), description: stringField(raw, "description") });
       }
     }
@@ -114953,7 +115173,7 @@ function applyAgentTaskEvent(book, sessionId, payload, observedAt2) {
   } else if (subtype === "task_progress") {
     upsert(taskId, { ...common, subagentType: stringField(payload, "subagent_type"), lastToolName: stringField(payload, "last_tool_name"), usage: usageOf(payload) });
   } else if (subtype === "task_updated") {
-    const patch = isRecord3(payload.patch) ? payload.patch : {};
+    const patch = isRecord5(payload.patch) ? payload.patch : {};
     upsert(taskId, { runId: stringField(payload, "run_id"), status: stringField(patch, "status") });
   } else {
     upsert(taskId, { ...common, status: stringField(payload, "status"), outputFile: stringField(payload, "output_file"), summary: stringField(payload, "summary"), usage: usageOf(payload) });
@@ -115035,7 +115255,7 @@ function sessionCreateId(body) {
   const id2 = session.id;
   return typeof id2 === "string" && id2.startsWith(RC_SESSION_ID_PREFIX) ? id2 : void 0;
 }
-function isRecord4(value2) {
+function isRecord6(value2) {
   return typeof value2 === "object" && value2 !== null && !Array.isArray(value2);
 }
 function parseJsonObject(body) {
@@ -115045,7 +115265,7 @@ function parseJsonObject(body) {
   } catch {
     return void 0;
   }
-  return isRecord4(parsed) ? parsed : void 0;
+  return isRecord6(parsed) ? parsed : void 0;
 }
 function nonEmptyString(record2, field) {
   const value2 = record2 === void 0 ? void 0 : record2[field];
@@ -115066,11 +115286,11 @@ function payloadEventsOf(body) {
   }
   const payloads = [];
   for (const event of events) {
-    if (!isRecord4(event)) {
+    if (!isRecord6(event)) {
       continue;
     }
     const payload = event.payload;
-    if (!isRecord4(payload)) {
+    if (!isRecord6(payload)) {
       continue;
     }
     payloads.push(payload);
@@ -115085,7 +115305,7 @@ function pendingOfControlRequestPayload(payload) {
   if (requestId === void 0) {
     return void 0;
   }
-  const request7 = isRecord4(payload.request) ? payload.request : void 0;
+  const request7 = isRecord6(payload.request) ? payload.request : void 0;
   const subtype = nonEmptyString(request7, "subtype");
   const type2 = subtype ?? "control_request";
   let summary = "";
@@ -115102,7 +115322,7 @@ function answeredRequestIdsOfControlResponsePayload(payload) {
   if (payload.type !== "control_response") {
     return [];
   }
-  const response = isRecord4(payload.response) ? payload.response : void 0;
+  const response = isRecord6(payload.response) ? payload.response : void 0;
   const id2 = nonEmptyString(response, "request_id") ?? nonEmptyString(payload, "request_id") ?? nonEmptyString(payload, "uuid");
   return id2 === void 0 ? [] : [id2];
 }
@@ -115331,7 +115551,7 @@ function createRcSessionTracker(deps) {
         return;
       }
       entry.sequenceNum = entry.sequenceNum === void 0 || event.sequence_num > entry.sequenceNum ? event.sequence_num : entry.sequenceNum;
-      if (!isRecord4(event.payload)) {
+      if (!isRecord6(event.payload)) {
         return;
       }
       entry.liveTasks = applyAgentTaskEvent(entry.liveTasks, sessionId, event.payload, deps.now());
@@ -120209,7 +120429,7 @@ var HTTP_METHODS_UP_TO_V31 = [
 function operationFields(convert) {
   return Object.fromEntries(HTTP_METHODS_UP_TO_V31.map((method) => [method, convert]));
 }
-function isRecord5(value2) {
+function isRecord7(value2) {
   if (typeof value2 !== "object" || value2 === null) {
     return false;
   }
@@ -120229,7 +120449,7 @@ function setOwn2(object3, key, value2) {
   }
 }
 function cloneValue(value2, seen) {
-  if (!(Array.isArray(value2) || isRecord5(value2))) {
+  if (!(Array.isArray(value2) || isRecord7(value2))) {
     return value2;
   }
   const existing = seen.get(value2);
@@ -120252,14 +120472,14 @@ function cloneValue(value2, seen) {
   return out;
 }
 function deepClone(value2) {
-  if (!(Array.isArray(value2) || isRecord5(value2))) {
+  if (!(Array.isArray(value2) || isRecord7(value2))) {
     return value2;
   }
   return cloneValue(value2, /* @__PURE__ */ new WeakMap());
 }
 var converting = /* @__PURE__ */ new WeakMap();
 function convertRecord(value2, fields, finish) {
-  if (!isRecord5(value2)) {
+  if (!isRecord7(value2)) {
     return deepClone(value2);
   }
   const inProgress = converting.get(value2);
@@ -120285,7 +120505,7 @@ function convertRecord(value2, fields, finish) {
   }
 }
 function mapRecord(value2, convert) {
-  if (!isRecord5(value2)) {
+  if (!isRecord7(value2)) {
     return deepClone(value2);
   }
   const out = {};
@@ -120304,7 +120524,7 @@ function mapArray(value2, convert) {
   return value2.map((item) => convert(item)).filter((item) => item !== DROP);
 }
 function getRef(value2) {
-  if (isRecord5(value2) && typeof value2.$ref === "string") {
+  if (isRecord7(value2) && typeof value2.$ref === "string") {
     return value2.$ref;
   }
   return void 0;
@@ -120510,7 +120730,7 @@ function convertSchema2(schema) {
   if (schema === false) {
     return { not: {} };
   }
-  if (isRecord5(schema) && typeof schema.$ref === "string" && Object.keys(schema).length === 1) {
+  if (isRecord7(schema) && typeof schema.$ref === "string" && Object.keys(schema).length === 1) {
     return { $ref: schema.$ref };
   }
   return convertRecord(schema, SCHEMA_FIELDS, finishSchema);
@@ -120522,7 +120742,7 @@ function resolveSchemeType(name, schemes, seen) {
     return void 0;
   }
   const scheme = schemes[name];
-  if (!isRecord5(scheme)) {
+  if (!isRecord7(scheme)) {
     return void 0;
   }
   if (typeof scheme.type === "string") {
@@ -120539,11 +120759,11 @@ function resolveSchemeType(name, schemes, seen) {
   return void 0;
 }
 function createContext(spec) {
-  const components = isRecord5(spec) ? spec.components : void 0;
-  const pathItems = isRecord5(components) ? components.pathItems : void 0;
-  const schemes = isRecord5(components) ? components.securitySchemes : void 0;
+  const components = isRecord7(spec) ? spec.components : void 0;
+  const pathItems = isRecord7(components) ? components.pathItems : void 0;
+  const schemes = isRecord7(components) ? components.securitySchemes : void 0;
   const schemeTypes = /* @__PURE__ */ new Map();
-  if (isRecord5(schemes)) {
+  if (isRecord7(schemes)) {
     for (const name of Object.keys(schemes)) {
       const type2 = resolveSchemeType(name, schemes, /* @__PURE__ */ new Set());
       if (type2 !== void 0) {
@@ -120553,7 +120773,7 @@ function createContext(spec) {
   }
   return {
     inlining: /* @__PURE__ */ new Set(),
-    pathItems: isRecord5(pathItems) ? pathItems : void 0,
+    pathItems: isRecord7(pathItems) ? pathItems : void 0,
     schemeTypes
   };
 }
@@ -120561,7 +120781,7 @@ function isMutualTls(name, context) {
   return context.schemeTypes.get(name) === "mutualTLS";
 }
 function convertRequirement(value2, context) {
-  if (!isRecord5(value2)) {
+  if (!isRecord7(value2)) {
     return deepClone(value2);
   }
   const entries = Object.entries(value2);
@@ -120661,10 +120881,10 @@ function resolvePathItemRef(value2, context) {
     return void 0;
   }
   const target = context.pathItems[name];
-  return isRecord5(target) ? [name, target] : void 0;
+  return isRecord7(target) ? [name, target] : void 0;
 }
 function convertPathItem(value2, context) {
-  if (!isRecord5(value2)) {
+  if (!isRecord7(value2)) {
     return deepClone(value2);
   }
   const resolved = resolvePathItemRef(value2, context);
@@ -120764,7 +120984,7 @@ function convertExample(value2) {
   });
 }
 function isQuerystringParameter(value2) {
-  return isRecord5(value2) && value2.in === "querystring";
+  return isRecord7(value2) && value2.in === "querystring";
 }
 function isRemovedRef(value2, removed) {
   const ref = getRef(value2);
@@ -120780,7 +121000,7 @@ function convertParameterOrHeader2(value2, context) {
       style: (item) => item === "cookie" ? DROP : deepClone(item)
     },
     (out, parameter) => {
-      const lostContent = isRecord5(parameter.content) && Object.keys(parameter.content).length > 0 && isRecord5(out.content) && Object.keys(out.content).length === 0;
+      const lostContent = isRecord7(parameter.content) && Object.keys(parameter.content).length > 0 && isRecord7(out.content) && Object.keys(out.content).length === 0;
       return lostContent ? DROP : out;
     }
   );
@@ -120901,7 +121121,7 @@ function convertComponents2(value2, context) {
   });
 }
 function losesEntireContent(value2, mediaTypes) {
-  if (!(isRecord5(value2) && isRecord5(value2.content))) {
+  if (!(isRecord7(value2) && isRecord7(value2.content))) {
     return false;
   }
   const entries = Object.values(value2.content);
@@ -120909,7 +121129,7 @@ function losesEntireContent(value2, mediaTypes) {
 }
 function indexRemovedComponentRefs(map2, prefix, mediaTypes, isDirectlyRemoved) {
   const removed = /* @__PURE__ */ new Set();
-  if (!isRecord5(map2)) {
+  if (!isRecord7(map2)) {
     return removed;
   }
   const entries = Object.entries(map2);
@@ -120931,12 +121151,12 @@ function indexRemovedComponentRefs(map2, prefix, mediaTypes, isDirectlyRemoved)
   return removed;
 }
 function createContext2(spec) {
-  const components = isRecord5(spec) ? spec.components : void 0;
-  const mediaTypes = isRecord5(components) && isRecord5(components.mediaTypes) ? components.mediaTypes : void 0;
+  const components = isRecord7(spec) ? spec.components : void 0;
+  const mediaTypes = isRecord7(components) && isRecord7(components.mediaTypes) ? components.mediaTypes : void 0;
   return {
     mediaTypes,
-    removedHeaderRefs: indexRemovedComponentRefs(isRecord5(components) ? components.headers : void 0, HEADERS_REF_PREFIX, mediaTypes, () => false),
-    removedParameterRefs: indexRemovedComponentRefs(isRecord5(components) ? components.parameters : void 0, PARAMETERS_REF_PREFIX, mediaTypes, isQuerystringParameter)
+    removedHeaderRefs: indexRemovedComponentRefs(isRecord7(components) ? components.headers : void 0, HEADERS_REF_PREFIX, mediaTypes, () => false),
+    removedParameterRefs: indexRemovedComponentRefs(isRecord7(components) ? components.parameters : void 0, PARAMETERS_REF_PREFIX, mediaTypes, isQuerystringParameter)
   };
 }
 function convertJsonSchemaDialect(value2) {
@@ -126705,7 +126925,7 @@ var import_consumers = require("node:stream/consumers");
 init_route();
 
 // src/frontdoor/lineage.ts
-var import_node_crypto18 = require("node:crypto");
+var import_node_crypto19 = require("node:crypto");
 var CACHE_MARKER_KEY = '"cache_control"';
 var THREAD_MEMBER_KEYS = /* @__PURE__ */ new Set(['"model"', '"system"', '"tools"']);
 var MESSAGES_KEY = '"messages"';
@@ -126782,8 +127002,8 @@ function nextToken(body, from) {
   return SCALAR;
 }
 function walk(body, hashing, parentAfter) {
-  const thread = (0, import_node_crypto18.createHash)("sha256");
-  const messages = (0, import_node_crypto18.createHash)("sha256");
+  const thread = (0, import_node_crypto19.createHash)("sha256");
+  const messages = (0, import_node_crypto19.createHash)("sha256");
   let parentDigest;
   let elements = 0;
   let depth = 0;
@@ -126904,7 +127124,7 @@ function lineageOf(body) {
   }
   const parentAfter = counted.elements > MESSAGES_PER_TURN ? counted.elements - MESSAGES_PER_TURN : void 0;
   const hashed = walk(body, true, parentAfter);
-  const combine = (messagesDigest) => (0, import_node_crypto18.createHash)("sha256").update(hashed.threadDigest).update(messagesDigest).digest("hex");
+  const combine = (messagesDigest) => (0, import_node_crypto19.createHash)("sha256").update(hashed.threadDigest).update(messagesDigest).digest("hex");
   return { ownKey: combine(hashed.messagesDigest), parentKey: hashed.parentDigest === void 0 ? void 0 : combine(hashed.parentDigest) };
 }
 
@@ -127289,7 +127509,7 @@ init_load();
 init_schema();
 
 // src/codex/translate.ts
-var import_node_crypto19 = require("node:crypto");
+var import_node_crypto20 = require("node:crypto");
 init_schema();
 
 // src/codex/anthropic.ts
@@ -127404,7 +127624,7 @@ function shortToolName(name, names) {
   if (name.length <= CODEX_TOOL_NAME_LIMIT) {
     return name;
   }
-  const hash2 = (0, import_node_crypto19.createHash)("sha256").update(name).digest("hex").slice(0, TOOL_NAME_HASH_CHARS);
+  const hash2 = (0, import_node_crypto20.createHash)("sha256").update(name).digest("hex").slice(0, TOOL_NAME_HASH_CHARS);
   const shortened = `${name.slice(0, CODEX_TOOL_NAME_LIMIT - TOOL_NAME_HASH_CHARS - 1)}_${hash2}`;
   names.set(shortened, name);
   return shortened;
@@ -127529,7 +127749,25 @@ function translateRequest(body, config2) {
 }
 
 // src/antigravity/translate.ts
-var import_node_crypto20 = require("node:crypto");
+var import_node_crypto21 = require("node:crypto");
+
+// src/antigravity/signatures.ts
+var MAX_REMEMBERED = 1024;
+var signatures = /* @__PURE__ */ new Map();
+function rememberToolCallSignature(toolUseId, signature) {
+  signatures.set(toolUseId, signature);
+  if (signatures.size > MAX_REMEMBERED) {
+    const oldest = signatures.keys().next();
+    if (oldest.done !== true) {
+      signatures.delete(oldest.value);
+    }
+  }
+}
+function toolCallSignatureOf(toolUseId) {
+  return signatures.get(toolUseId);
+}
+
+// src/antigravity/translate.ts
 init_schema();
 function resolveAntigravityConfig(config2) {
   const overrides = config2?.models;
@@ -127596,7 +127834,7 @@ function shortToolName2(name, names) {
   if (sanitized.length <= ANTIGRAVITY_TOOL_NAME_LIMIT) {
     result = sanitized;
   } else {
-    const hash2 = (0, import_node_crypto20.createHash)("sha256").update(name).digest("hex").slice(0, TOOL_NAME_HASH_CHARS2);
+    const hash2 = (0, import_node_crypto21.createHash)("sha256").update(name).digest("hex").slice(0, TOOL_NAME_HASH_CHARS2);
     const prefix = sanitized.slice(0, ANTIGRAVITY_TOOL_NAME_LIMIT - TOOL_NAME_HASH_CHARS2 - 1);
     result = `${prefix}_${hash2}`;
   }
@@ -127625,7 +127863,7 @@ function turnBlocks2(message) {
   }
   return blocks.map((block2) => isTextBlock(block2) ? { ...block2, text: systemReminder2(block2.text) } : block2);
 }
-function isRecord6(value2) {
+function isRecord8(value2) {
   return typeof value2 === "object" && value2 !== null && !Array.isArray(value2);
 }
 function messagesToGeminiContents(messages, names, toolIdToName) {
@@ -127667,11 +127905,14 @@ function messagesToGeminiContents(messages, names, toolIdToName) {
       } else if (isToolUseBlock(block2)) {
         const sanitizedName = shortToolName2(block2.name, names);
         toolIdToName.set(block2.id, sanitizedName);
+        const signature = toolCallSignatureOf(block2.id);
         ensureRole("model").push({
           functionCall: {
             name: sanitizedName,
-            args: isRecord6(block2.input) ? block2.input : {}
-          }
+            args: isRecord8(block2.input) ? block2.input : {}
+          },
+          // The relay remembered the signature the backend attached to this exact call; echoing it back is what the backend requires of a repeated function call.
+          ...signature === void 0 ? {} : { thoughtSignature: signature }
         });
       } else if (isToolResultBlock(block2)) {
         const toolName = toolIdToName.get(block2.tool_use_id) ?? "unknown_tool";
@@ -127688,21 +127929,110 @@ function messagesToGeminiContents(messages, names, toolIdToName) {
   return contents;
 }
 var EMPTY_SCHEMA = { type: "object", properties: {} };
+var GEMINI_SCHEMA_KEYS = /* @__PURE__ */ new Set(["type", "format", "description", "nullable", "enum", "anyOf", "items", "properties", "required", "minimum", "maximum", "minItems", "maxItems"]);
+function describeSchemaValue(node2) {
+  if (!isRecord8(node2)) {
+    return "any value";
+  }
+  const type2 = node2.type;
+  const name = typeof type2 === "string" ? type2 : Array.isArray(type2) && typeof type2[0] === "string" ? type2[0] : "value";
+  if (name === "array") {
+    return `a list of ${describeSchemaValue(node2.items)}`;
+  }
+  return name === "object" ? "an object" : `a ${name}`;
+}
+function toGeminiSchema(node2) {
+  if (!isRecord8(node2)) {
+    return node2;
+  }
+  const out = {};
+  const notes = [];
+  let nullable2 = false;
+  for (const [key, value2] of Object.entries(node2)) {
+    if (key === "type" && Array.isArray(value2)) {
+      const named = value2.filter((entry) => entry !== "null");
+      if (named.length > 0 && typeof named[0] === "string") {
+        out.type = named[0];
+      }
+      nullable2 = value2.includes("null");
+      continue;
+    }
+    if (!GEMINI_SCHEMA_KEYS.has(key)) {
+      if (key === "additionalProperties" && value2 !== false) {
+        notes.push(`Each value is ${describeSchemaValue(value2)}.`);
+      } else if (key === "propertyNames" && isRecord8(value2) && typeof value2.pattern === "string") {
+        notes.push(`Keys match ${value2.pattern}.`);
+      }
+      continue;
+    }
+    out[key] = value2;
+  }
+  if (out.type === "null") {
+    delete out.type;
+  }
+  if (nullable2 && out.type !== void 0) {
+    out.nullable = true;
+  }
+  if (notes.length > 0) {
+    const description = typeof out.description === "string" ? out.description : "";
+    out.description = `${description}${description === "" ? "" : " "}${notes.join(" ")}`;
+  }
+  if ("properties" in out && isRecord8(out.properties)) {
+    out.properties = Object.fromEntries(Object.entries(out.properties).map(([name, child]) => [name, toGeminiSchema(child)]));
+  }
+  if ("items" in out) {
+    out.items = toGeminiSchema(out.items);
+  } else if (out.type === "array") {
+    out.items = {};
+  }
+  if (Array.isArray(out.anyOf)) {
+    out.anyOf = out.anyOf.map(toGeminiSchema);
+  }
+  return out;
+}
 function mapTools2(tools, names) {
   if (tools === void 0 || tools.length === 0) {
     return void 0;
   }
-  const declarations = tools.map((tool) => ({
-    name: shortToolName2(tool.name, names),
-    description: tool.description,
-    parameters: tool.input_schema ?? EMPTY_SCHEMA
-  }));
+  const declarations = tools.map((tool) => {
+    const converted = tool.input_schema === void 0 ? void 0 : toGeminiSchema(tool.input_schema);
+    return {
+      name: shortToolName2(tool.name, names),
+      description: tool.description,
+      parameters: isRecord8(converted) ? converted : EMPTY_SCHEMA
+    };
+  });
   return [{ functionDeclarations: declarations }];
 }
+var EFFORT_SUFFIXES = /* @__PURE__ */ new Set(["low", "medium", "high"]);
+function effortSuffixOf(level) {
+  if (level === "medium") {
+    return "medium";
+  }
+  return level === "none" || level === "low" ? "low" : "high";
+}
+function splitEffortSuffix(model) {
+  const index = model.lastIndexOf("-");
+  if (index === -1) {
+    return void 0;
+  }
+  const suffix = model.slice(index + 1);
+  return EFFORT_SUFFIXES.has(suffix) ? { base: model.slice(0, index), suffix } : void 0;
+}
+function completeEffortSuffix(model, request7, config2) {
+  if (splitEffortSuffix(model) !== void 0) {
+    return model;
+  }
+  const configured = [config2.defaultModel, ...Object.values(config2.models)];
+  const effort = request7.output_config?.effort;
+  const level = ANTIGRAVITY_EFFORTS.find((candidate) => candidate === effort) ?? config2.effort;
+  const suffixed = `${model}-${effortSuffixOf(level)}`;
+  return configured.some((entry) => entry === suffixed || splitEffortSuffix(entry)?.base === model) ? suffixed : model;
+}
 function translateRequest2(request7, config2) {
   const toolNames = /* @__PURE__ */ new Map();
   const toolIdToName = /* @__PURE__ */ new Map();
-  const model = mapModel2(request7.model ?? "", config2);
+  const model = completeEffortSuffix(mapModel2(request7.model ?? "", config2), request7, config2);
   const thinkingBudget = mapEffort2(request7, config2);
   const systemInstruction = systemToInstruction(request7.system);
   const contents = messagesToGeminiContents(request7.messages, toolNames, toolIdToName);
@@ -127720,6 +128050,190 @@ function translateRequest2(request7, config2) {
   };
 }
 
+// src/antigravity/quota.ts
+init_cloudUpstream();
+var MS_PER_SECOND8 = 1e3;
+var DEFAULT_RETRY_AFTER_SECONDS = 60;
+var PERCENT_MULTIPLIER = 100;
+var EXHAUSTED_PERCENT = "100";
+var GEMINI_5H_KEYS = ["gemini-5h", "gemini_5h", "gemini"];
+var GEMINI_WEEKLY_KEYS = ["gemini-weekly", "gemini_weekly"];
+var THIRD_PARTY_5H_KEYS = ["3p-5h", "claude-5h", "3p_5h", "claude_5h", "claude"];
+var THIRD_PARTY_WEEKLY_KEYS = ["3p-weekly", "claude-weekly", "3p_weekly", "claude_weekly"];
+function findBucket(quota, keys) {
+  for (const key of keys) {
+    const bucket = quota[key];
+    if (bucket !== void 0) {
+      return bucket;
+    }
+  }
+  return void 0;
+}
+function calculateUtilization(remainingFraction) {
+  if (remainingFraction === void 0 || !Number.isFinite(remainingFraction)) {
+    return void 0;
+  }
+  const clampedRem = Math.max(0, Math.min(1, remainingFraction));
+  const used = Math.max(0, 1 - clampedRem);
+  return String(Math.round(used * PERCENT_MULTIPLIER));
+}
+function calculateResetTimestamp(nowSec, resetInSeconds) {
+  if (resetInSeconds === void 0 || !Number.isFinite(resetInSeconds) || resetInSeconds < 0) {
+    return void 0;
+  }
+  return String(nowSec + Math.ceil(resetInSeconds));
+}
+function parseRetryAfterSeconds(raw, defaultSeconds = DEFAULT_RETRY_AFTER_SECONDS) {
+  if (raw === null || raw === void 0 || raw.trim() === "") {
+    return defaultSeconds;
+  }
+  const numeric = Number(raw);
+  if (Number.isFinite(numeric) && numeric > 0) {
+    return Math.ceil(numeric);
+  }
+  const parsedDate = Date.parse(raw);
+  if (!Number.isNaN(parsedDate)) {
+    const diffSec = Math.ceil((parsedDate - Date.now()) / MS_PER_SECOND8);
+    return Math.max(1, diffSec);
+  }
+  return defaultSeconds;
+}
+function unifiedAntigravityQuotaHeaders(params) {
+  const rejected = params.rejected === true;
+  const nowSec = Math.floor(params.nowMs / MS_PER_SECOND8);
+  const headers = {
+    "anthropic-ratelimit-unified-status": rejected ? "rejected" : "allowed"
+  };
+  const modelLower = (params.model ?? "").toLowerCase();
+  const isGemini = modelLower.includes("gemini");
+  const fiveHourKeys = isGemini ? GEMINI_5H_KEYS : THIRD_PARTY_5H_KEYS;
+  const weeklyKeys = isGemini ? GEMINI_WEEKLY_KEYS : THIRD_PARTY_WEEKLY_KEYS;
+  const quota = params.quota ?? {};
+  const b5h = findBucket(quota, fiveHourKeys);
+  const bWk = findBucket(quota, weeklyKeys);
+  const used5h = calculateUtilization(b5h?.remaining_fraction);
+  const reset5h = calculateResetTimestamp(nowSec, b5h?.reset_in_seconds);
+  const used7d = calculateUtilization(bWk?.remaining_fraction);
+  const reset7d = calculateResetTimestamp(nowSec, bWk?.reset_in_seconds);
+  let earliestResetSec;
+  if (used5h !== void 0 && reset5h !== void 0) {
+    headers["anthropic-ratelimit-unified-5h-utilization"] = used5h;
+    headers["anthropic-ratelimit-unified-5h-reset"] = reset5h;
+    earliestResetSec = Number(reset5h);
+  }
+  if (used7d !== void 0 && reset7d !== void 0) {
+    headers["anthropic-ratelimit-unified-7d-utilization"] = used7d;
+    headers["anthropic-ratelimit-unified-7d-reset"] = reset7d;
+    const reset7dSec = Number(reset7d);
+    earliestResetSec = earliestResetSec === void 0 ? reset7dSec : Math.min(earliestResetSec, reset7dSec);
+  }
+  if (rejected) {
+    const retrySec = params.retryAfterSeconds ?? DEFAULT_RETRY_AFTER_SECONDS;
+    const fallbackReset = String(nowSec + retrySec);
+    if (headers["anthropic-ratelimit-unified-5h-utilization"] === void 0) {
+      headers["anthropic-ratelimit-unified-5h-utilization"] = EXHAUSTED_PERCENT;
+      headers["anthropic-ratelimit-unified-5h-reset"] = fallbackReset;
+    }
+    if (headers["anthropic-ratelimit-unified-7d-utilization"] === void 0) {
+      headers["anthropic-ratelimit-unified-7d-utilization"] = EXHAUSTED_PERCENT;
+      headers["anthropic-ratelimit-unified-7d-reset"] = fallbackReset;
+    }
+    earliestResetSec = earliestResetSec === void 0 ? nowSec + retrySec : Math.min(earliestResetSec, nowSec + retrySec);
+  }
+  if (earliestResetSec !== void 0) {
+    headers["anthropic-ratelimit-unified-reset"] = String(earliestResetSec);
+  }
+  return headers;
+}
+function isRecord9(value2) {
+  return typeof value2 === "object" && value2 !== null && !Array.isArray(value2);
+}
+function bucketToEntry(bucket, nowMs) {
+  if (!isRecord9(bucket) || typeof bucket.bucketId !== "string") {
+    return void 0;
+  }
+  const remainingFraction = typeof bucket.remainingFraction === "number" && Number.isFinite(bucket.remainingFraction) ? bucket.remainingFraction : void 0;
+  const resetMs = typeof bucket.resetTime === "string" ? Date.parse(bucket.resetTime) : Number.NaN;
+  const resetInSeconds = Number.isNaN(resetMs) ? void 0 : Math.max(0, Math.ceil((resetMs - nowMs) / MS_PER_SECOND8));
+  if (remainingFraction === void 0 && resetInSeconds === void 0) {
+    return void 0;
+  }
+  return {
+    key: bucket.bucketId,
+    entry: {
+      ...remainingFraction === void 0 ? {} : { remaining_fraction: remainingFraction },
+      ...resetInSeconds === void 0 ? {} : { reset_in_seconds: resetInSeconds }
+    }
+  };
+}
+async function fetchAntigravityQuotaSummary(params) {
+  const fetchFn = params.fetchFn ?? fetch;
+  let response;
+  try {
+    response = await fetchFn(`${params.endpoint ?? CCPA_ENDPOINT}/v1internal:retrieveUserQuotaSummary`, {
+      method: "POST",
+      headers: {
+        "Content-Type": "application/json",
+        Authorization: `Bearer ${params.token}`,
+        "User-Agent": CCPA_USER_AGENT
+      },
+      body: JSON.stringify({ project: params.projectId ?? CCPA_DEFAULT_PROJECT_ID })
+    });
+  } catch {
+    return void 0;
+  }
+  if (!response.ok) {
+    return void 0;
+  }
+  let parsed;
+  try {
+    parsed = await response.json();
+  } catch {
+    return void 0;
+  }
+  if (!isRecord9(parsed) || !Array.isArray(parsed.groups)) {
+    return void 0;
+  }
+  const map2 = {};
+  for (const group of parsed.groups) {
+    if (!isRecord9(group) || !Array.isArray(group.buckets)) {
+      continue;
+    }
+    for (const bucket of group.buckets) {
+      const read = bucketToEntry(bucket, params.nowMs);
+      if (read !== void 0) {
+        map2[read.key] = read.entry;
+      }
+    }
+  }
+  return Object.keys(map2).length > 0 ? map2 : void 0;
+}
+var ANTIGRAVITY_QUOTA_REFRESH_MS = 6e4;
+function createCachedAntigravityQuotaSource(params) {
+  let cachedAt = Number.NEGATIVE_INFINITY;
+  let cached2;
+  let refresh;
+  const refreshMs = params.refreshMs ?? ANTIGRAVITY_QUOTA_REFRESH_MS;
+  const run = async () => {
+    const nowMs = params.now();
+    const read = await params.fetchSummary(nowMs);
+    if (read !== void 0) {
+      cached2 = read;
+    }
+    cachedAt = params.now();
+  };
+  return () => {
+    const nowMs = params.now();
+    if (nowMs - cachedAt < refreshMs) {
+      return cached2;
+    }
+    refresh ??= run().finally(() => {
+      refresh = void 0;
+    });
+    return cached2;
+  };
+}
+
 // src/frontdoor/providerRoute.ts
 init_credential();
 init_providersStore();
@@ -127856,10 +128370,10 @@ function quotaHeaders(upstream) {
   }
   return headers;
 }
-var EXHAUSTED_PERCENT = "100";
+var EXHAUSTED_PERCENT2 = "100";
 function unifiedQuotaHeaders(upstream, rejected, quotaError) {
   const headers = { "anthropic-ratelimit-unified-status": rejected ? "rejected" : "allowed" };
-  const used7d = upstream.get("x-codex-primary-used-percent") ?? (rejected ? EXHAUSTED_PERCENT : null);
+  const used7d = upstream.get("x-codex-primary-used-percent") ?? (rejected ? EXHAUSTED_PERCENT2 : null);
   const reset7d = upstream.get("x-codex-primary-reset-at") ?? (quotaError?.resets_at === void 0 ? null : String(quotaError.resets_at));
   if (used7d !== null && reset7d !== null) {
     headers["anthropic-ratelimit-unified-7d-utilization"] = used7d;
@@ -127880,17 +128394,17 @@ function unifiedQuotaHeaders(upstream, rejected, quotaError) {
   }
   return headers;
 }
-var MS_PER_SECOND8 = 1e3;
+var MS_PER_SECOND9 = 1e3;
 function buildUsageSnapshot(upstream, quotaError, nowMs) {
-  const used7 = upstream.get("x-codex-primary-used-percent") ?? (quotaError === void 0 ? null : EXHAUSTED_PERCENT);
+  const used7 = upstream.get("x-codex-primary-used-percent") ?? (quotaError === void 0 ? null : EXHAUSTED_PERCENT2);
   const reset7 = upstream.get("x-codex-primary-reset-at") ?? (quotaError?.resets_at === void 0 ? null : String(quotaError.resets_at));
-  const sevenDay = used7 !== null && reset7 !== null ? { used_percentage: Number(used7), resets_at: new Date(Number(reset7) * MS_PER_SECOND8).toISOString() } : void 0;
+  const sevenDay = used7 !== null && reset7 !== null ? { used_percentage: Number(used7), resets_at: new Date(Number(reset7) * MS_PER_SECOND9).toISOString() } : void 0;
   let fiveHour;
   if (Number(upstream.get("x-codex-secondary-window-minutes")) > 0) {
     const used5 = upstream.get("x-codex-secondary-used-percent");
     const reset5 = upstream.get("x-codex-secondary-reset-at");
     if (used5 !== null && reset5 !== null) {
-      fiveHour = { used_percentage: Number(used5), resets_at: new Date(Number(reset5) * MS_PER_SECOND8).toISOString() };
+      fiveHour = { used_percentage: Number(used5), resets_at: new Date(Number(reset5) * MS_PER_SECOND9).toISOString() };
     }
   }
   if (sevenDay === void 0 && fiveHour === void 0) {
@@ -128313,7 +128827,7 @@ function createCodexRouteMount(ports, upstreamBase, provider) {
 }
 
 // src/antigravity/route.ts
-var import_node_crypto21 = require("node:crypto");
+var import_node_crypto22 = require("node:crypto");
 init_route();
 
 // src/antigravity/relay.ts
@@ -128384,7 +128898,7 @@ function createAntigravityRelay(params) {
     const candidate = chunk.candidates?.[0];
     if (candidate?.content?.parts !== void 0) {
       for (const part of candidate.content.parts) {
-        if ("text" in part && typeof part.text === "string" && part.text.length > 0) {
+        if ("text" in part && typeof part.text === "string" && (part.thoughtSignature === void 0 || part.text.length > 0)) {
           if (activeBlockType !== "text") {
             closeActiveBlock();
             currentBlockIndex += 1;
@@ -128414,6 +128928,9 @@ function createAntigravityRelay(params) {
           const callName = part.functionCall.name;
           const originalName = params.toolNames.get(callName) ?? callName;
           const callId = params.fallbackId();
+          if (typeof part.thoughtSignature === "string") {
+            rememberToolCallSignature(callId, part.thoughtSignature);
+          }
           frames.push({
             event: "content_block_start",
             data: {
@@ -128487,81 +129004,8 @@ function createAntigravityRelay(params) {
   return { pushChunk, finish };
 }
 
-// src/antigravity/cloudUpstream.ts
-var GEMINI_API_BASE_URL = "https://generativelanguage.googleapis.com";
-function buildCloudUrl(config2, model) {
-  const { cloud } = config2;
-  if (cloud.projectId !== void 0 && cloud.location !== void 0) {
-    const base2 = cloud.endpoint ?? `https://${cloud.location}-aiplatform.googleapis.com`;
-    return `${base2}/v1/projects/${cloud.projectId}/locations/${cloud.location}/publishers/google/models/${encodeURIComponent(model)}:streamGenerateContent?alt=sse`;
-  }
-  const base = cloud.endpoint ?? GEMINI_API_BASE_URL;
-  return `${base}/v1beta/models/${encodeURIComponent(model)}:streamGenerateContent?alt=sse`;
-}
-function buildCloudHeaders(token, credentialTarget) {
-  const headers = {
-    "Content-Type": "application/json",
-    Accept: "text/event-stream"
-  };
-  if (credentialTarget === "apiKey") {
-    headers["x-goog-api-key"] = token;
-  } else {
-    headers.Authorization = `Bearer ${token}`;
-  }
-  return headers;
-}
-var AntigravityUpstreamError = class extends Error {
-  status;
-  retryAfter;
-  constructor(status, message, retryAfter) {
-    super(`Google Antigravity API error (${String(status)}): ${message}`);
-    this.name = "AntigravityUpstreamError";
-    this.status = status;
-    this.retryAfter = retryAfter;
-  }
-};
-async function* callCloudAntigravity(params, fetchFn = fetch) {
-  const url2 = buildCloudUrl(params.config, params.model);
-  const headers = buildCloudHeaders(params.token, params.credentialTarget);
-  const response = await fetchFn(url2, {
-    method: "POST",
-    headers,
-    body: JSON.stringify(params.request),
-    signal: params.signal
-  });
-  if (!response.ok) {
-    const errorText = await response.text();
-    const retryAfter = response.headers.get("retry-after");
-    throw new AntigravityUpstreamError(response.status, errorText, retryAfter);
-  }
-  if (response.body === null) {
-    return;
-  }
-  const decoder = new TextDecoder("utf-8");
-  let buffer2 = "";
-  const sseDataPrefix = "data:";
-  for await (const rawChunk of response.body) {
-    const chunk = rawChunk instanceof Uint8Array ? rawChunk : Buffer.from(String(rawChunk));
-    buffer2 += decoder.decode(chunk, { stream: true });
-    const lines = buffer2.split("\n");
-    buffer2 = lines.pop() ?? "";
-    for (const line of lines) {
-      const trimmed = line.trim();
-      if (trimmed.startsWith(sseDataPrefix)) {
-        const jsonStr = trimmed.slice(sseDataPrefix.length).trim();
-        if (jsonStr.length > 0) {
-          try {
-            const parsed = JSON.parse(jsonStr);
-            if (typeof parsed === "object" && parsed !== null && !Array.isArray(parsed)) {
-              yield parsed;
-            }
-          } catch {
-          }
-        }
-      }
-    }
-  }
-}
+// src/antigravity/route.ts
+init_cloudUpstream();
 
 // src/antigravity/localUpstream.ts
 var import_node_child_process6 = require("node:child_process");
@@ -128631,7 +129075,7 @@ var AcpStreamMessageSchema = external_exports.looseObject({
     chunk: external_exports.looseObject({}).optional()
   }).optional()
 });
-function isRecord7(value2) {
+function isRecord10(value2) {
   return typeof value2 === "object" && value2 !== null && !Array.isArray(value2);
 }
 function normalizeFinishReason(reason) {
@@ -128656,7 +129100,7 @@ function parseJsonRecord(raw) {
   }
   try {
     const parsed = JSON.parse(raw);
-    if (isRecord7(parsed)) {
+    if (isRecord10(parsed)) {
       return parsed;
     }
   } catch {
@@ -128742,104 +129186,9 @@ async function* callLocalAntigravity(params) {
   }
 }
 
-// src/antigravity/quota.ts
-var MS_PER_SECOND9 = 1e3;
-var DEFAULT_RETRY_AFTER_SECONDS = 60;
-var PERCENT_MULTIPLIER = 100;
-var EXHAUSTED_PERCENT2 = "100";
-var GEMINI_5H_KEYS = ["gemini-5h", "gemini_5h", "gemini"];
-var GEMINI_WEEKLY_KEYS = ["gemini-weekly", "gemini_weekly"];
-var THIRD_PARTY_5H_KEYS = ["3p-5h", "claude-5h", "3p_5h", "claude_5h", "claude"];
-var THIRD_PARTY_WEEKLY_KEYS = ["3p-weekly", "claude-weekly", "3p_weekly", "claude_weekly"];
-function findBucket(quota, keys) {
-  for (const key of keys) {
-    const bucket = quota[key];
-    if (bucket !== void 0) {
-      return bucket;
-    }
-  }
-  return void 0;
-}
-function calculateUtilization(remainingFraction) {
-  if (remainingFraction === void 0 || !Number.isFinite(remainingFraction)) {
-    return void 0;
-  }
-  const clampedRem = Math.max(0, Math.min(1, remainingFraction));
-  const used = Math.max(0, 1 - clampedRem);
-  return String(Math.round(used * PERCENT_MULTIPLIER));
-}
-function calculateResetTimestamp(nowSec, resetInSeconds) {
-  if (resetInSeconds === void 0 || !Number.isFinite(resetInSeconds) || resetInSeconds < 0) {
-    return void 0;
-  }
-  return String(nowSec + Math.ceil(resetInSeconds));
-}
-function parseRetryAfterSeconds(raw, defaultSeconds = DEFAULT_RETRY_AFTER_SECONDS) {
-  if (raw === null || raw === void 0 || raw.trim() === "") {
-    return defaultSeconds;
-  }
-  const numeric = Number(raw);
-  if (Number.isFinite(numeric) && numeric > 0) {
-    return Math.ceil(numeric);
-  }
-  const parsedDate = Date.parse(raw);
-  if (!Number.isNaN(parsedDate)) {
-    const diffSec = Math.ceil((parsedDate - Date.now()) / MS_PER_SECOND9);
-    return Math.max(1, diffSec);
-  }
-  return defaultSeconds;
-}
-function unifiedAntigravityQuotaHeaders(params) {
-  const rejected = params.rejected === true;
-  const nowSec = Math.floor(params.nowMs / MS_PER_SECOND9);
-  const headers = {
-    "anthropic-ratelimit-unified-status": rejected ? "rejected" : "allowed"
-  };
-  const modelLower = (params.model ?? "").toLowerCase();
-  const isGemini = modelLower.includes("gemini");
-  const fiveHourKeys = isGemini ? GEMINI_5H_KEYS : THIRD_PARTY_5H_KEYS;
-  const weeklyKeys = isGemini ? GEMINI_WEEKLY_KEYS : THIRD_PARTY_WEEKLY_KEYS;
-  const quota = params.quota ?? {};
-  const b5h = findBucket(quota, fiveHourKeys);
-  const bWk = findBucket(quota, weeklyKeys);
-  const used5h = calculateUtilization(b5h?.remaining_fraction);
-  const reset5h = calculateResetTimestamp(nowSec, b5h?.reset_in_seconds);
-  const used7d = calculateUtilization(bWk?.remaining_fraction);
-  const reset7d = calculateResetTimestamp(nowSec, bWk?.reset_in_seconds);
-  let earliestResetSec;
-  if (used5h !== void 0 && reset5h !== void 0) {
-    headers["anthropic-ratelimit-unified-5h-utilization"] = used5h;
-    headers["anthropic-ratelimit-unified-5h-reset"] = reset5h;
-    earliestResetSec = Number(reset5h);
-  }
-  if (used7d !== void 0 && reset7d !== void 0) {
-    headers["anthropic-ratelimit-unified-7d-utilization"] = used7d;
-    headers["anthropic-ratelimit-unified-7d-reset"] = reset7d;
-    const reset7dSec = Number(reset7d);
-    earliestResetSec = earliestResetSec === void 0 ? reset7dSec : Math.min(earliestResetSec, reset7dSec);
-  }
-  if (rejected) {
-    const retrySec = params.retryAfterSeconds ?? DEFAULT_RETRY_AFTER_SECONDS;
-    const fallbackReset = String(nowSec + retrySec);
-    if (headers["anthropic-ratelimit-unified-5h-utilization"] === void 0) {
-      headers["anthropic-ratelimit-unified-5h-utilization"] = EXHAUSTED_PERCENT2;
-      headers["anthropic-ratelimit-unified-5h-reset"] = fallbackReset;
-    }
-    if (headers["anthropic-ratelimit-unified-7d-utilization"] === void 0) {
-      headers["anthropic-ratelimit-unified-7d-utilization"] = EXHAUSTED_PERCENT2;
-      headers["anthropic-ratelimit-unified-7d-reset"] = fallbackReset;
-    }
-    earliestResetSec = earliestResetSec === void 0 ? nowSec + retrySec : Math.min(earliestResetSec, nowSec + retrySec);
-  }
-  if (earliestResetSec !== void 0) {
-    headers["anthropic-ratelimit-unified-reset"] = String(earliestResetSec);
-  }
-  return headers;
-}
-
 // src/antigravity/route.ts
 function createAntigravityRoute(ports) {
-  const fallbackId = ports.fallbackId ?? (() => (0, import_node_crypto21.randomUUID)());
+  const fallbackId = ports.fallbackId ?? (() => (0, import_node_crypto22.randomUUID)());
   return async (request7) => {
     await Promise.resolve();
     if (request7.method !== "POST") {
@@ -129240,9 +129589,43 @@ async function scanRequestHead(request7, wholeBody = false) {
 }
 
 // src/frontdoor/providerRoute.ts
+var isRcSelfHostPath = (path59) => path59 === "/v1/code/sessions" || path59.startsWith("/v1/code/sessions/") || path59 === "/v1/sessions" || path59.startsWith("/v1/sessions/");
+function scopeSessionProviderPath(request7) {
+  if (request7.session.provider === void 0) {
+    return request7;
+  }
+  const path59 = new URL(request7.url, "http://127.0.0.1").pathname;
+  if (!path59.startsWith("/v1/") || isRcSelfHostPath(path59)) {
+    return request7;
+  }
+  return { ...request7, url: `${PROVIDER_PATH_PREFIX}${encodeURIComponent(request7.session.provider)}${request7.url}` };
+}
 function createProviderRouteResolver(deps) {
-  const isRcSelfHostPath = (path59) => path59 === "/v1/code/sessions" || path59.startsWith("/v1/code/sessions/") || path59 === "/v1/sessions" || path59.startsWith("/v1/sessions/");
   const oauthRoute = createPassthroughRoute("anthropic", { baseUrl: `https://${CONNECT_INTERCEPT_HOST}:${String(HTTPS_PORT)}`, stripPrefix: void 0, headroomUpstream: void 0 });
+  const antigravityQuotaSources = /* @__PURE__ */ new Map();
+  const antigravityQuotaOf = (provider, definition, config2) => {
+    const existing = antigravityQuotaSources.get(provider);
+    if (existing !== void 0) {
+      return existing;
+    }
+    const source = createCachedAntigravityQuotaSource({
+      now: () => Date.now(),
+      fetchSummary: async (nowMs) => {
+        const res = resolveCredential({ credential: definition.credential, env: deps.env, port: deps.credentials, subject: `provider ${provider}` });
+        if (!res.ok) {
+          return void 0;
+        }
+        return fetchAntigravityQuotaSummary({
+          token: res.credential.token,
+          endpoint: config2.cloud.endpoint ?? void 0,
+          projectId: config2.cloud.projectId ?? void 0,
+          nowMs
+        });
+      }
+    });
+    antigravityQuotaSources.set(provider, source);
+    return source;
+  };
   const passthroughByTarget = /* @__PURE__ */ new Map();
   const passthroughFor = (name, target) => {
     const key = `${name}\0${target.baseUrl}\0${target.stripPrefix ?? ""}\0${target.headroomUpstream ?? ""}`;
@@ -129261,9 +129644,6 @@ function createProviderRouteResolver(deps) {
       if (deps.rcSelfHostRoute !== void 0 && isRcSelfHostPath(path59)) {
         return { ok: true, route: deps.rcSelfHostRoute };
       }
-      if (request7.session.provider !== void 0 && path59.startsWith("/v1/") && !isRcSelfHostPath(path59)) {
-        return resolve2({ ...request7, url: `${PROVIDER_PATH_PREFIX}${encodeURIComponent(request7.session.provider)}${request7.url}` });
-      }
       return path59.startsWith("/v1/") ? { ok: true, route: oauthRoute } : { ok: false, status: HTTP_STATUS.notFound, message: `no such endpoint: ${path59}` };
     }
     const { provider } = scoped;
@@ -129313,7 +129693,8 @@ function createProviderRouteResolver(deps) {
                 token: res.credential.token,
                 credentialTarget: antigravityProvider.credential.target
               };
-            }
+            },
+            quotaSource: antigravityQuotaOf(provider, antigravityProvider, config2)
           },
           directOrigin2(deps.directPort()),
           provider
@@ -129343,7 +129724,9 @@ function createProviderRouteResolver(deps) {
     }
   });
   return async (request7) => {
-    let current = request7;
+    const scopedRequest = scopeSessionProviderPath(request7);
+    const serveScoped = (resolution) => scopedRequest === request7 ? resolution : { ok: true, route: servingRewritten(resolution.route, scopedRequest) };
+    let current = scopedRequest;
     let replay;
     const visited = /* @__PURE__ */ new Set();
     for (; ; ) {
@@ -129365,7 +129748,7 @@ function createProviderRouteResolver(deps) {
       }
       if (routes === void 0 || routes.length === 0) {
         const resolution = resolve2(current);
-        return resolution.ok && replay !== void 0 ? { ok: true, route: servingRewritten(resolution.route, { ...replay, url: current.url }) } : resolution;
+        return resolution.ok && replay !== void 0 ? { ok: true, route: servingRewritten(resolution.route, { ...replay, url: current.url }) } : resolution.ok ? serveScoped(resolution) : resolution;
       }
       const whole = routes.some((entry) => entry.model !== void 0 || referencesFact(entry.when, "request.hasImage"));
       const snapshot = deps.usageSnapshotOf?.(current.session.identity);
@@ -129377,7 +129760,7 @@ function createProviderRouteResolver(deps) {
       const scan = await scanRequestHead(current, whole);
       if (scan.replayed === void 0) {
         const resolution = resolve2(current);
-        return resolution.ok && replay !== void 0 ? { ok: true, route: servingRewritten(resolution.route, { ...replay, url: current.url }) } : resolution;
+        return resolution.ok && replay !== void 0 ? { ok: true, route: servingRewritten(resolution.route, { ...replay, url: current.url }) } : resolution.ok ? serveScoped(resolution) : resolution;
       }
       replay = scan.replayed;
       const requestFacts = {
@@ -129439,7 +129822,7 @@ function attachingProviderCredential(route, deps) {
 init_realFrontDoorPort();
 
 // src/frontdoor/rcCommands.ts
-var import_node_crypto22 = require("node:crypto");
+var import_node_crypto23 = require("node:crypto");
 init_commandDeps();
 init_cliError();
 init_realPorts();
@@ -129478,15 +129861,15 @@ function readFrontDoorControlMaterial(fsPort, paths, purpose) {
 
 // src/frontdoor/rcLiveUsage.ts
 var RC_RATE_LIMIT_EVENT_TYPE = "rate_limit_event";
-function isRecord8(value2) {
+function isRecord11(value2) {
   return typeof value2 === "object" && value2 !== null && !Array.isArray(value2);
 }
 function rcRateLimitInfoOf(event) {
   const payload = event.envelope.payload;
-  if (!isRecord8(payload) || payload.type !== RC_RATE_LIMIT_EVENT_TYPE) {
+  if (!isRecord11(payload) || payload.type !== RC_RATE_LIMIT_EVENT_TYPE) {
     return void 0;
   }
-  if (!isRecord8(payload.rate_limit_info)) {
+  if (!isRecord11(payload.rate_limit_info)) {
     return void 0;
   }
   const parsed = RcRateLimitInfoSchema.safeParse(payload.rate_limit_info);
@@ -129522,7 +129905,7 @@ var RC_SELF_HOST_SCOPE_LIST = ["user:profile", "user:inference", "user:sessions:
 var RC_SELF_HOST_OAUTH_TOKEN_TTL_SECONDS = 3600;
 var MS_PER_SECOND10 = 1e3;
 var HTTP_SERVICE_UNAVAILABLE = 503;
-function isRecord9(value2) {
+function isRecord12(value2) {
   return typeof value2 === "object" && value2 !== null && !Array.isArray(value2);
 }
 function parseJsonObject2(body) {
@@ -129532,7 +129915,7 @@ function parseJsonObject2(body) {
   } catch {
     return void 0;
   }
-  return isRecord9(parsed) ? parsed : void 0;
+  return isRecord12(parsed) ? parsed : void 0;
 }
 function growthBookFeatures() {
   return {
@@ -129626,7 +130009,7 @@ var RC_SELF_HOST_RECORD_DIR = "rc-selfhost";
 var RC_SELF_HOST_RECORD_FILE = "credential.json";
 var SELF_HOST_EMAIL = "selfhost@agent-shim.invalid";
 var SELF_HOST_SUBSCRIPTION_TYPE = "max";
-function isRecord10(value2) {
+function isRecord13(value2) {
   return typeof value2 === "object" && value2 !== null && !Array.isArray(value2);
 }
 function readJsonObject(fs24, file2) {
@@ -129640,7 +130023,7 @@ function readJsonObject(fs24, file2) {
   } catch {
     return void 0;
   }
-  return isRecord10(parsed) ? parsed : void 0;
+  return isRecord13(parsed) ? parsed : void 0;
 }
 function readRcSelfHostRecord(fs24, frontdoorDir) {
   const parsed = readJsonObject(fs24, import_node_path49.default.join(frontdoorDir, RC_SELF_HOST_RECORD_DIR, RC_SELF_HOST_RECORD_FILE));
@@ -129664,7 +130047,7 @@ function mintRcSelfHostCredential(deps) {
   const recordFile = import_node_path49.default.join(recordDir, RC_SELF_HOST_RECORD_FILE);
   const previousRecord = readRcSelfHostRecord(deps.fs, deps.frontdoorDir);
   const existingCredentials = readJsonObject(deps.fs, credentialsFile);
-  const existingOauth = isRecord10(existingCredentials?.claudeAiOauth) ? existingCredentials.claudeAiOauth : void 0;
+  const existingOauth = isRecord13(existingCredentials?.claudeAiOauth) ? existingCredentials.claudeAiOauth : void 0;
   const existingToken = typeof existingOauth?.accessToken === "string" && existingOauth.accessToken !== "" ? existingOauth.accessToken : void 0;
   const existingIsOwn = existingToken !== void 0 && previousRecord?.accessToken === existingToken;
   if (existingToken !== void 0 && !existingIsOwn && !deps.force) {
@@ -129681,7 +130064,7 @@ function mintRcSelfHostCredential(deps) {
   deps.fs.writeFilePrivate(credentialsFile, `${JSON.stringify({ ...existingCredentials, claudeAiOauth: { accessToken, refreshToken, expiresAt: null, scopes: [...RC_SELF_HOST_SCOPE_LIST], subscriptionType: SELF_HOST_SUBSCRIPTION_TYPE, rateLimitTier: null } }, null, 2)}
 `);
   const claudeJson = readJsonObject(deps.fs, claudeJsonFile) ?? {};
-  const existingBlock = (value2) => isRecord10(value2) ? value2 : {};
+  const existingBlock = (value2) => isRecord13(value2) ? value2 : {};
   deps.fs.writeFilePrivate(claudeJsonFile, `${JSON.stringify({
     ...claudeJson,
     oauthAccount: {
@@ -130046,8 +130429,8 @@ function registerRcCommand(frontdoor, paths) {
         identitiesDir: paths.identitiesDir,
         frontdoorDir: paths.frontdoorDir,
         identity,
-        newUuid: import_node_crypto22.randomUUID,
-        randomToken: () => (0, import_node_crypto22.randomBytes)(MINTED_TOKEN_RANDOM_BYTES).toString("base64url"),
+        newUuid: import_node_crypto23.randomUUID,
+        randomToken: () => (0, import_node_crypto23.randomBytes)(MINTED_TOKEN_RANDOM_BYTES).toString("base64url"),
         force: options.force === true,
         now: () => Date.now()
       });
@@ -130068,11 +130451,11 @@ var import_node_path50 = __toESM(require("node:path"), 1);
 function isSafeSessionId(sessionId) {
   return /^[A-Za-z0-9_-]+$/.test(sessionId);
 }
-function isRecord11(value2) {
+function isRecord14(value2) {
   return typeof value2 === "object" && value2 !== null && !Array.isArray(value2);
 }
 function credentialOfJson(parsed) {
-  if (!isRecord11(parsed)) {
+  if (!isRecord14(parsed)) {
     return void 0;
   }
   const { authorization, anthropicVersion, anthropicClientPlatform } = parsed;
@@ -130102,7 +130485,7 @@ function createRcCredentialStore(fs24, dir) {
     } catch {
       return void 0;
     }
-    return isRecord11(parsed) ? parsed : void 0;
+    return isRecord14(parsed) ? parsed : void 0;
   };
   return {
     read: (sessionId) => {
@@ -130670,7 +131053,7 @@ init_capability();
 // src/frontdoor/rcSelfHostEndpoints.ts
 var RC_SOURCE_WORKER = "worker";
 var RC_SOURCE_CLIENT = "client";
-function isRecord12(value2) {
+function isRecord15(value2) {
   return typeof value2 === "object" && value2 !== null && !Array.isArray(value2);
 }
 function parseJsonObject3(body) {
@@ -130680,7 +131063,7 @@ function parseJsonObject3(body) {
   } catch {
     return void 0;
   }
-  return isRecord12(parsed) ? parsed : void 0;
+  return isRecord15(parsed) ? parsed : void 0;
 }
 function nonEmptyString2(record2, field) {
   const value2 = record2 === void 0 ? void 0 : record2[field];
@@ -130754,7 +131137,7 @@ async function serveRcClientChannels(ctx, tail, method, maxBatchEvents) {
     }
     const results = [];
     for (const event of events) {
-      if (!isRecord12(event) || !isRecord12(event.payload)) {
+      if (!isRecord15(event) || !isRecord15(event.payload)) {
         await ctx.answerJson(response, HTTP_STATUS.badRequest, { type: "error", error: { type: "invalid_request_error", message: "every event in a teleport write is an object carrying one payload object" } });
         return true;
       }
@@ -130854,7 +131237,7 @@ async function serveRcCompatSessions(ctx, pathname, compatPath) {
 // src/frontdoor/rcSelfHostConversations.ts
 var RC_CONVERSATIONS_PATH_PREFIX = "/v1/code/conversations";
 var RC_CONVERSATION_ID_PREFIX = "conv_";
-function isRecord13(value2) {
+function isRecord16(value2) {
   return typeof value2 === "object" && value2 !== null && !Array.isArray(value2);
 }
 function parseJsonObject4(body) {
@@ -130864,7 +131247,7 @@ function parseJsonObject4(body) {
   } catch {
     return void 0;
   }
-  return isRecord13(parsed) ? parsed : void 0;
+  return isRecord16(parsed) ? parsed : void 0;
 }
 function nonEmptyString3(record2, field) {
   const value2 = record2 === void 0 ? void 0 : record2[field];
@@ -130918,7 +131301,7 @@ async function serveRcConversations(ctx, pathname, method) {
     }
     const results = [];
     for (const event of events) {
-      if (!isRecord13(event) || !isRecord13(event.payload)) {
+      if (!isRecord16(event) || !isRecord16(event.payload)) {
         await ctx.answerJson(response, HTTP_STATUS.badRequest, { type: "error", error: { type: "invalid_request_error", message: "every event in a write is an object carrying one payload object" } });
         return;
       }
@@ -131211,7 +131594,7 @@ var RC_SELF_HOST_WORKER_EPOCH = 1;
 var RC_STREAM_EVENT_NAME = "client_event";
 var CONFLICT_REASON_HEADER2 = "x-ccr-conflict-reason";
 var CONFLICT_REASON_EPOCH_STALE = "epoch_stale";
-function isRecord14(value2) {
+function isRecord17(value2) {
   return typeof value2 === "object" && value2 !== null && !Array.isArray(value2);
 }
 function isWebSearchRefusal(value2) {
@@ -131295,7 +131678,7 @@ function parseJsonObject5(body) {
   } catch {
     return void 0;
   }
-  return isRecord14(parsed) ? parsed : void 0;
+  return isRecord17(parsed) ? parsed : void 0;
 }
 function mintWorkerJwt(randomToken, issuedAt) {
   const encode3 = (value2) => Buffer.from(JSON.stringify(value2), "utf8").toString("base64url");
@@ -131555,7 +131938,7 @@ data: ${JSON.stringify(envelope)}
         if (status !== void 0) {
           session.workerStatus = status;
         }
-        if (isRecord14(body?.external_metadata)) {
+        if (isRecord17(body?.external_metadata)) {
           session.externalMetadata = body.external_metadata;
         }
         await answerJson2(response, HTTP_STATUS.ok, {});
@@ -131585,7 +131968,7 @@ data: ${JSON.stringify(envelope)}
         }
         const results = [];
         for (const event of events) {
-          if (!isRecord14(event) || !isRecord14(event.payload)) {
+          if (!isRecord17(event) || !isRecord17(event.payload)) {
             await answerJson2(response, HTTP_STATUS.badRequest, { type: "error", error: { type: "invalid_request_error", message: "every event in a batch is an object carrying one payload object" } });
             return;
           }
@@ -131618,7 +132001,7 @@ data: ${JSON.stringify(envelope)}
           return;
         }
         for (const event of events) {
-          if (isRecord14(event)) {
+          if (isRecord17(event)) {
             session.internalEvents.push({ eventId: deps.newUuid(), body: event });
           }
         }
@@ -131714,7 +132097,7 @@ data: ${JSON.stringify(envelope)}
       }
       const results = [];
       for (const event of events) {
-        if (!isRecord14(event) || !isRecord14(event.payload)) {
+        if (!isRecord17(event) || !isRecord17(event.payload)) {
           await answerJson2(response, HTTP_STATUS.badRequest, { type: "error", error: { type: "invalid_request_error", message: "every event in a write is an object carrying one payload object" } });
           return;
         }
@@ -131904,7 +132287,7 @@ function createSseParser() {
     }
   };
 }
-function isRecord15(value2) {
+function isRecord18(value2) {
   return typeof value2 === "object" && value2 !== null && !Array.isArray(value2);
 }
 function sequenceNumOf(value2) {
@@ -131926,7 +132309,7 @@ function parseRcStreamEnvelope(parsed) {
   } catch {
     return void 0;
   }
-  if (!isRecord15(data)) {
+  if (!isRecord18(data)) {
     return void 0;
   }
   const eventType = data.event_type;
@@ -132354,8 +132737,8 @@ init_realPorts();
 init_quotaRefresh();
 
 // src/usage/quotaHttp.ts
-var realQuotaHttpGet = async (url2, headers, signal) => {
-  const response = await fetch(url2, { method: "GET", headers: { ...headers }, signal });
+var realQuotaHttpGet = async (url2, headers, signal, options) => {
+  const response = await fetch(url2, { method: options?.method ?? "GET", headers: { ...headers }, ...options?.body === void 0 ? {} : { body: options.body }, signal });
   return { status: response.status, text: await response.text() };
 };
 
@@ -132433,8 +132816,8 @@ function realFrontDoorSupervisorPorts(paths) {
   };
   const rcSelfHostSurface = rcSelfHost ? createRcSelfHostSurface({
     now: () => Date.now(),
-    newUuid: import_node_crypto23.randomUUID,
-    randomToken: () => (0, import_node_crypto23.randomBytes)(MINTED_TOKEN_RANDOM_BYTES).toString("base64url"),
+    newUuid: import_node_crypto24.randomUUID,
+    randomToken: () => (0, import_node_crypto24.randomBytes)(MINTED_TOKEN_RANDOM_BYTES).toString("base64url"),
     credentialRecord: () => readRcSelfHostRecord(realFarmFs, paths.frontdoorDir),
     webFetch: realRcWebFetch({ allowPrivate: rcWebFetchAllowsPrivateFromEnv(process.env) }),
     log
@@ -132457,7 +132840,7 @@ function realFrontDoorSupervisorPorts(paths) {
     saveSequenceNum: rcCredentialStore.writeCursor,
     dial: rcSelfHost ? lateRcStreamDial(rcSelfHostDialTarget) : realRcStreamDial(),
     fanout: rcFanout,
-    newClientId: import_node_crypto23.randomUUID,
+    newClientId: import_node_crypto24.randomUUID,
     backoffMs: RC_STREAM_BACKOFF_MS,
     sleep: async (ms2) => {
       await new Promise((resolve2) => {
@@ -132469,7 +132852,7 @@ function realFrontDoorSupervisorPorts(paths) {
     }
   });
   const routingSnapshots = /* @__PURE__ */ new Map();
-  const rcControlToken = (0, import_node_crypto23.randomUUID)();
+  const rcControlToken = (0, import_node_crypto24.randomUUID)();
   const resolveRoute = rcObservingResolver(
     createProviderRouteResolver({
       fs: realFsPort,
@@ -132585,9 +132968,9 @@ function realFrontDoorSupervisorPorts(paths) {
     now: () => Date.now(),
     headroomSocket: () => headroomSocketTarget(realFarmFs, realHeadroomSocketTrust, paths),
     // The per-generation capability the direct listener demands: held only in this process's memory, so a loopback process that discovers the direct port still cannot use it.
-    hopSecret: (0, import_node_crypto23.randomUUID)(),
+    hopSecret: (0, import_node_crypto24.randomUUID)(),
     headroomDecision,
-    custody: createCredentialCustody(() => (0, import_node_crypto23.randomUUID)()),
+    custody: createCredentialCustody(() => (0, import_node_crypto24.randomUUID)()),
     log
   });
   const onListenerError = (name) => (error63) => {
@@ -132610,9 +132993,9 @@ function realFrontDoorSupervisorPorts(paths) {
     startProviderListener: async (preferredPort) => {
       const authority = loadCa();
       const rcDial = rcSelfHost ? lateRcEventDial(rcSelfHostDialTarget) : realRcEventDial();
-      const rcInject = async (sessionId, text2) => await injectRcUserMessage({ credentialOf: rcTracker.credentialOf, noteSequenceNums: rcTracker.noteSequenceNums, dial: rcDial, newUuid: import_node_crypto23.randomUUID }, sessionId, text2);
+      const rcInject = async (sessionId, text2) => await injectRcUserMessage({ credentialOf: rcTracker.credentialOf, noteSequenceNums: rcTracker.noteSequenceNums, dial: rcDial, newUuid: import_node_crypto24.randomUUID }, sessionId, text2);
       const rcAnswer = async (sessionId, requestId, decision) => await answerRcControlRequest({ credentialOf: rcTracker.credentialOf, pendingOf: (id2) => rcTracker.pendingOf(id2), completePending: rcTracker.completePending, noteSequenceNums: rcTracker.noteSequenceNums, dial: rcDial }, sessionId, requestId, decision);
-      const rcControlRequestDeps = { credentialOf: rcTracker.credentialOf, noteSequenceNums: rcTracker.noteSequenceNums, dial: rcDial, newUuid: import_node_crypto23.randomUUID };
+      const rcControlRequestDeps = { credentialOf: rcTracker.credentialOf, noteSequenceNums: rcTracker.noteSequenceNums, dial: rcDial, newUuid: import_node_crypto24.randomUUID };
       const rcInterrupt = async (sessionId) => await interruptRcSession(rcControlRequestDeps, sessionId);
       const rcSetModel = async (sessionId, model) => await setRcSessionModel(rcControlRequestDeps, sessionId, model);
       const rcSetPermissionMode = async (sessionId, mode) => await setRcSessionPermissionMode(rcControlRequestDeps, sessionId, mode);
@@ -132711,7 +133094,7 @@ function realFrontDoorSupervisorPorts(paths) {
     },
     startConnectListener: async (preferredPort) => {
       const wantedTransparentPort = process.env.AGENT_SHIM_TRANSPARENT_SURFACE === void 0 ? void 0 : Number(process.env.AGENT_SHIM_TRANSPARENT_SURFACE);
-      const transparentCapability = wantedTransparentPort === void 0 || Number.isNaN(wantedTransparentPort) ? void 0 : (0, import_node_crypto23.randomUUID)();
+      const transparentCapability = wantedTransparentPort === void 0 || Number.isNaN(wantedTransparentPort) ? void 0 : (0, import_node_crypto24.randomUUID)();
       if (transparentCapability !== void 0) {
         writeFrontDoorSession(realFarmFs, paths.frontdoorSessionsDir, { pid: process.pid, startedAt: Date.now(), token: transparentCapability });
       }