llm-switcher 1.2.12 → 1.3.1

package/tests/shim.test.mjs

@@ -452,3 +452,168 @@ test('the Windows shim raises the toast only while this tool is routed', (t) =>
   assert.match(off.out, /ran/);
   assert.equal(off.asked, '', 'a tool that is off raises no toast');
 });
+
+test('shim status follows the Windows lookup: an .exe earlier on PATH wins over the shim', () => {
+  const dirA = fs.mkdtempSync(path.join(STATE, 'real-'));
+  const shimDir = fs.mkdtempSync(path.join(STATE, 'shim-'));
+  fs.writeFileSync(path.join(dirA, 'agy.exe'), '');
+  fs.writeFileSync(path.join(shimDir, 'agy.cmd'), '');
+  const opts = { pathEnv: [dirA, shimDir].join(';'), shimDir, platform: 'win32', pathExt: '.COM;.EXE;.BAT;.CMD' };
+  const st = shimStatus(['agy'], opts);
+  assert.equal(st.shims[0].effective, path.join(dirA, 'agy.exe'));
+  assert.equal(st.shims[0].active, false, 'the real agy.exe runs first, so the shim is not active');
+  const fixed = shimStatus(['agy'], { ...opts, pathEnv: [shimDir, dirA].join(';') });
+  assert.equal(fixed.shims[0].active, true);
+});
+
+// ---- agy: the shim proves the gateway before it hands over CLOUD_CODE_URL -----------------------
+// agy sends its Google token in clear text to CLOUD_CODE_URL. A process that took the gateway port
+// must therefore never receive it: the shim asks for the identity proof first.
+const { identityProof } = await import(pathToFileURL(path.join(ROOT, 'state.mjs')).href);
+const AGY_TOKEN = 'a'.repeat(64);
+// Outside STATE: the other tests empty STATE file by file.
+const AGY_CONFIG_DIR = fs.mkdtempSync(path.join(os.tmpdir(), 'agyconfig-'));
+const AGY_CONFIG = path.join(AGY_CONFIG_DIR, 'config.json');
+test.after(() => fs.rmSync(AGY_CONFIG_DIR, { recursive: true, force: true }));
+fs.writeFileSync(path.join(path.dirname(AGY_CONFIG), 'admin.token'), AGY_TOKEN);
+const VERIFY = path.join(ROOT, 'verify-gateway.mjs');
+// Async on purpose: the /health listener lives in this process, and a spawnSync would block it.
+const { spawn: spawnAsync } = await import('node:child_process');
+function runAsync(cmd, args, opts) {
+  return new Promise((resolve) => {
+    const child = spawnAsync(cmd, args, opts);
+    let out = '', err = '';
+    child.stdout?.on('data', d => { out += d; });
+    child.stderr?.on('data', d => { err += d; });
+    const timer = setTimeout(() => child.kill(), 30000);
+    child.on('close', (status) => { clearTimeout(timer); resolve({ status, stdout: out, stderr: err }); });
+  });
+}
+const NOTICE = /did not prove it is this switcher/;
+
+// A /health listener: 'real' signs like this gateway, 'forged' sends a wrong proof, 'silent' never answers.
+async function agyListener(kind) {
+  const http = await import('node:http');
+  const net = await import('node:net');
+  const server = kind === 'silent'
+    ? net.createServer((sock) => sock.on('error', () => {}))
+    : http.createServer((req, res) => {
+      const port = server.address().port;
+      const nonce = new URL(req.url, 'http://x').searchParams.get('challenge');
+      const proof = kind === 'real' ? identityProof(nonce, { role: 'gateway', port, pid: 4242 }, AGY_TOKEN) : 'forged';
+      res.setHeader('content-type', 'application/json');
+      res.end(JSON.stringify({ status: 'ok', proxy: 'llm-switcher', port, pid: 4242, proof }));
+    });
+  await new Promise(r => server.listen(0, '127.0.0.1', r));
+  return server;
+}
+
+async function runAgyWindowsShim(port) {
+  const shimDir = fs.mkdtempSync(path.join(os.tmpdir(), 'agyshim-'));
+  const fakeDir = fs.mkdtempSync(path.join(os.tmpdir(), 'agyfake-'));
+  fs.writeFileSync(path.join(fakeDir, 'agy.cmd'), '@echo off\r\necho CCU=[%CLOUD_CODE_URL%]\r\n');
+  for (const f of fs.readdirSync(STATE)) if (fs.statSync(path.join(STATE, f)).isFile()) fs.rmSync(path.join(STATE, f), { force: true });
+  fs.writeFileSync(path.join(STATE, 'active.flag'), 'active');
+  fs.writeFileSync(path.join(STATE, 'env-agy.cmd'), `SET "CLOUD_CODE_URL=http://127.0.0.1:${port}"\r\n`);
+  const shim = path.join(shimDir, 'agy.cmd');
+  fs.writeFileSync(shim, renderShim('agy', 'win32'), 'utf8');
+  const started = Date.now();
+  const child = await runAsync('cmd.exe', ['/d', '/c', shim], {
+    env: { ...process.env, LLM_SWITCHER_CONFIG: AGY_CONFIG, PATH: [fakeDir, shimDir, path.join(process.env.SystemRoot, 'System32'), path.dirname(process.execPath)].join(path.delimiter) }
+  });
+  fs.rmSync(shimDir, { recursive: true, force: true });
+  fs.rmSync(fakeDir, { recursive: true, force: true });
+  return { out: child.stdout || '', err: child.stderr || '', ms: Date.now() - started };
+}
+
+for (const [kind, routed] of [['forged', false], ['silent', false], ['real', true]]) {
+  test(`the Windows agy shim with a ${kind} listener on the gateway port ${routed ? 'keeps' : 'drops'} CLOUD_CODE_URL`, async (t) => {
+    if (process.platform !== 'win32') return t.skip('cmd.exe only');
+    const server = await agyListener(kind);
+    t.after(() => server.close());
+    const port = server.address().port;
+    const { out, err, ms } = await runAgyWindowsShim(port);
+    if (routed) {
+      assert.match(out, new RegExp(`CCU=\\[http://127\\.0\\.0\\.1:${port}\\]`));
+      assert.doesNotMatch(err, NOTICE);
+    } else {
+      assert.match(out, /CCU=\[\]/, 'the token must not go to a port that did not prove itself');
+      assert.match(err, NOTICE);
+    }
+    assert.ok(ms < 8000, `the shim took ${ms} ms`);
+  });
+}
+
+for (const [kind, routed] of [['forged', false], ['silent', false], ['real', true]]) {
+  test(`the POSIX agy shim with a ${kind} listener on the gateway port ${routed ? 'keeps' : 'drops'} CLOUD_CODE_URL`, async (t) => {
+    if (process.platform === 'win32') return t.skip('posix only');
+    const server = await agyListener(kind);
+    t.after(() => server.close());
+    const port = server.address().port;
+    const dir = fs.mkdtempSync(path.join(os.tmpdir(), 'agyposix-'));
+    fs.writeFileSync(path.join(dir, 'agy'), '#!/usr/bin/env bash\necho "CCU=[${CLOUD_CODE_URL:-}]"\n');
+    fs.chmodSync(path.join(dir, 'agy'), 0o755);
+    for (const f of fs.readdirSync(STATE)) if (fs.statSync(path.join(STATE, f)).isFile()) fs.rmSync(path.join(STATE, f), { force: true });
+    fs.writeFileSync(path.join(STATE, 'active.flag'), 'active');
+    fs.writeFileSync(path.join(STATE, 'env-agy.sh'), `export CLOUD_CODE_URL='http://127.0.0.1:${port}'\n`);
+    const started = Date.now();
+    const out = await runAsync(path.join(RENDER_DIR, 'agy'), [], {
+      env: { ...process.env, LLM_SWITCHER_CONFIG: AGY_CONFIG, PATH: [RENDER_DIR, dir, '/usr/bin:/bin', NODE_DIR].join(path.delimiter) }
+    });
+    fs.rmSync(dir, { recursive: true, force: true });
+    if (routed) {
+      assert.match(out.stdout, new RegExp(`CCU=\\[http://127\\.0\\.0\\.1:${port}\\]`));
+      assert.doesNotMatch(out.stderr, NOTICE);
+    } else {
+      assert.match(out.stdout, /CCU=\[\]/);
+      assert.match(out.stderr, NOTICE);
+    }
+    assert.ok(Date.now() - started < 8000, `the shim took ${Date.now() - started} ms`);
+  });
+}
+
+test('verify-gateway accepts only 127.0.0.1 with a real port, whatever listens', async (t) => {
+  const server = await agyListener('real');
+  t.after(() => server.close());
+  const port = server.address().port;
+  const run = async (u) => (await runAsync(process.execPath, [VERIFY, u], { env: { ...process.env, LLM_SWITCHER_CONFIG: AGY_CONFIG } })).status;
+  assert.equal(await run(`http://127.0.0.1:${port}`), 0, 'the real gateway passes');
+  assert.notEqual(await run('http://127.0.0.1/'), 0, 'no port');
+  assert.notEqual(await run(`http://localhost:${port}`), 0, 'localhost can resolve to ::1, which the probe never checked');
+  assert.notEqual(await run(`http://other.example:${port}`), 0);
+  assert.notEqual(await run('not a url'), 0);
+});
+
+// While agy is off, a gateway address left in the shell from an earlier run is the switcher's own
+// value and goes; an address the person set for another host is theirs and stays.
+for (const [value, kept] of [['http://127.0.0.1:3456', false], ['https://cloudcode.corp.example', true]]) {
+  test(`the Windows agy shim, with agy off, ${kept ? 'keeps' : 'scrubs'} CLOUD_CODE_URL=${value}`, async (t) => {
+    if (process.platform !== 'win32') return t.skip('cmd.exe only');
+    const shimDir = fs.mkdtempSync(path.join(os.tmpdir(), 'agyoff-'));
+    const fakeDir = fs.mkdtempSync(path.join(os.tmpdir(), 'agyofffake-'));
+    t.after(() => { fs.rmSync(shimDir, { recursive: true, force: true }); fs.rmSync(fakeDir, { recursive: true, force: true }); });
+    fs.writeFileSync(path.join(fakeDir, 'agy.cmd'), '@echo off\r\necho CCU=[%CLOUD_CODE_URL%]\r\n');
+    for (const f of fs.readdirSync(STATE)) if (fs.statSync(path.join(STATE, f)).isFile()) fs.rmSync(path.join(STATE, f), { force: true });
+    const shim = path.join(shimDir, 'agy.cmd');
+    fs.writeFileSync(shim, renderShim('agy', 'win32'), 'utf8');
+    const out = await runAsync('cmd.exe', ['/d', '/c', shim], {
+      env: { ...process.env, CLOUD_CODE_URL: value, LLM_SWITCHER_CONFIG: AGY_CONFIG, PATH: [fakeDir, shimDir, path.join(process.env.SystemRoot, 'System32'), path.dirname(process.execPath)].join(path.delimiter) }
+    });
+    assert.ok(out.stdout.includes(`CCU=[${kept ? value : ''}]`), out.stdout);
+    assert.doesNotMatch(out.stderr, NOTICE, 'no gateway check runs while agy is off');
+  });
+
+  test(`the POSIX agy shim, with agy off, ${kept ? 'keeps' : 'scrubs'} CLOUD_CODE_URL=${value}`, async (t) => {
+    if (process.platform === 'win32') return t.skip('posix only');
+    const dir = fs.mkdtempSync(path.join(os.tmpdir(), 'agyoffposix-'));
+    t.after(() => fs.rmSync(dir, { recursive: true, force: true }));
+    fs.writeFileSync(path.join(dir, 'agy'), '#!/usr/bin/env bash\necho "CCU=[${CLOUD_CODE_URL:-}]"\n');
+    fs.chmodSync(path.join(dir, 'agy'), 0o755);
+    for (const f of fs.readdirSync(STATE)) if (fs.statSync(path.join(STATE, f)).isFile()) fs.rmSync(path.join(STATE, f), { force: true });
+    const out = await runAsync(path.join(RENDER_DIR, 'agy'), [], {
+      env: { ...process.env, CLOUD_CODE_URL: value, LLM_SWITCHER_CONFIG: AGY_CONFIG, PATH: [RENDER_DIR, dir, '/usr/bin:/bin', NODE_DIR].join(path.delimiter) }
+    });
+    assert.ok(out.stdout.includes(`CCU=[${kept ? value : ''}]`), out.stdout);
+    assert.doesNotMatch(out.stderr, NOTICE);
+  });
+}

package/tests/state.test.mjs

@@ -30,7 +30,7 @@ const makeCfg = () => ({
 });
 
 test('legacy config without activeProfiles maps every target to activeProfile', () => {
-  assert.deepEqual(getActiveMap(makeCfg()), { claude: 'router', codex: 'router' });
+  assert.deepEqual(getActiveMap(makeCfg()), { claude: 'router', codex: 'router', agy: null });
 });
 
 test('setTargetProfile validates the target, existence (no prototype keys) and the tool', () => {
@@ -40,16 +40,16 @@ test('setTargetProfile validates the target, existence (no prototype keys) and t
   assert.match(setTargetProfile(cfg, 'anthropic', 'codexOnly'), /cannot serve/);
   assert.equal(setTargetProfile(cfg, 'responses', 'codexOnly'), null);
   // `anthropic` and `responses` are spellings of the two tools, and the map holds two keys.
-  assert.deepEqual(cfg.activeProfiles, { claude: 'router', codex: 'codexOnly' });
+  assert.deepEqual(cfg.activeProfiles, { claude: 'router', codex: 'codexOnly', agy: null });
 });
 
 test('activateProfile only assigns compatible tools; deactivateProfile leaves the other alone', () => {
   const cfg = makeCfg();
   setTargetProfile(cfg, 'claude', null);
   activateProfile(cfg, 'codexOnly');
-  assert.deepEqual(cfg.activeProfiles, { claude: null, codex: 'codexOnly' });
+  assert.deepEqual(cfg.activeProfiles, { claude: null, codex: 'codexOnly', agy: null });
   deactivateProfile(cfg, 'codexOnly');
-  assert.deepEqual(cfg.activeProfiles, { claude: null, codex: null });
+  assert.deepEqual(cfg.activeProfiles, { claude: null, codex: null, agy: null });
 });
 
 test('switching a migrated config does not make it need migration again', () => {
@@ -1315,15 +1315,15 @@ test('R1: rollBack proceeds to restore oldPort gateway even if saveConfig throws
   assert.equal(caught, false);
 });
 
-test('R5: getActiveMap returns exactly { claude, codex } and a present pointer wins over the legacy one', () => {
+test('R5: getActiveMap returns exactly { claude, codex, agy } and a present pointer wins over the legacy one', () => {
   const cfg = {
     activeProfiles: { claude: 'c-prof', codex: 'cdx-prof' },
     profiles: { 'c-prof': { tool: 'claude' }, 'cdx-prof': { tool: 'codex' } }
   };
-  assert.deepEqual(getActiveMap(cfg), { claude: 'c-prof', codex: 'cdx-prof' });
+  assert.deepEqual(getActiveMap(cfg), { claude: 'c-prof', codex: 'cdx-prof', agy: null });
   // An explicit "off" is a present pointer, not a missing one: it must not fall back to
   // activeProfile and switch the tool back on under another key.
-  assert.deepEqual(getActiveMap({ activeProfile: 'legacy', activeProfiles: { claude: null } }), { claude: null, codex: 'legacy' });
+  assert.deepEqual(getActiveMap({ activeProfile: 'legacy', activeProfiles: { claude: null } }), { claude: null, codex: 'legacy', agy: null });
 });
 
 test('R7e: saves work again after the file is fixed', (t) => {
@@ -1564,7 +1564,7 @@ test('A5: config.example.json loads and passes validation without requiring migr
   }
 
   assert.equal('activeProfile' in example, false, 'the retired top-level pointer is gone');
-  assert.deepEqual(Object.keys(example.activeProfiles).sort(), ['claude', 'codex'], 'exactly the two tools');
+  assert.deepEqual(Object.keys(example.activeProfiles).sort(), ['agy', 'claude', 'codex'], 'exactly the three tools');
   assert.deepEqual(example.blindfold, { port: 3457 }, 'the interceptor port is top-level, and it is only a port');
   for (const [key, p] of Object.entries(example.profiles)) {
     for (const retired of ['inFormat', 'blindfold', 'blindfoldPort', 'blindfoldHost', 'blindfoldPrefix']) {

package/ui.html

@@ -936,7 +936,7 @@
     <div class="ph">
       <div class="title-box">
         <h1 id="page-title">Routes & Profiles</h1>
-        <p id="status-sub">Route Claude Code and Codex independently.</p>
+        <p id="status-sub">Route Claude Code, Codex and the Antigravity CLI independently.</p>
       </div>
       <div class="ph-actions" id="ph-actions">
         <!-- Rendered dynamically per route -->
@@ -983,6 +983,21 @@
               </div>
               <span id="badge-slot-codex" class="badge outline">OFF</span>
             </div>
+
+            <!-- Antigravity CLI Target Row -->
+            <div class="row" id="card-slot-agy">
+              <span class="av logo" title="Antigravity CLI"><img src="/icons/antigravity.png" alt="Antigravity"></span>
+              <div class="who">
+                <div class="l">Antigravity CLI (agy)</div>
+                <div class="meta">Code Assist over <code>CLOUD_CODE_URL</code> · <code>/v1internal:*</code></div>
+              </div>
+              <div style="min-width:14rem;">
+                <select id="select-slot-agy" aria-label="Antigravity CLI route" onchange="switchCliTarget('agy', this.value)">
+                  <option value="">Official endpoint</option>
+                </select>
+              </div>
+              <span id="badge-slot-agy" class="badge outline">OFF</span>
+            </div>
           </div>
 
           <!-- Configured Profiles Header -->
@@ -1123,6 +1138,7 @@
               <span class="hint" style="font-weight:600; display:block; margin-bottom:0.4rem;">Template Quick-Fill:</span>
               <div style="display:flex; gap:0.4rem; flex-wrap:wrap;">
                 <button type="button" class="btn btn-outline btn-sm" onclick="applyTemplate('intact')">intact</button>
+                <button type="button" class="btn btn-outline btn-sm" onclick="applyTemplate('agy-intact')">agy on intact</button>
                 <button type="button" class="btn btn-outline btn-sm" onclick="applyTemplate('9router')">9Router</button>
                 <button type="button" class="btn btn-outline btn-sm" onclick="applyTemplate('openrouter')">OpenRouter</button>
                 <button type="button" class="btn btn-outline btn-sm" onclick="applyTemplate('vertex')">Vertex AI</button>
@@ -1156,6 +1172,7 @@
                   <option value="auto">All compatible tools (auto)</option>
                   <option value="claude">Claude Code only (claude)</option>
                   <option value="codex">Codex only (codex)</option>
+                  <option value="agy">Antigravity CLI only (agy)</option>
                 </select>
               </label>
               <label class="f">Outbound Format
@@ -1443,6 +1460,7 @@
           const parts = [];
           if (activeMap.claude) parts.push('Claude: ' + activeMap.claude);
           if (activeMap.codex) parts.push('Codex: ' + activeMap.codex);
+          if (activeMap.agy) parts.push('agy: ' + activeMap.agy);
           subEl.textContent = 'Port ' + state.port + ' · Active for ' + parts.join(' · ');
         } else {
           subEl.textContent = 'Gateway is idle. Clients connect directly to official endpoints.';
@@ -1503,7 +1521,10 @@
       let iconFile = 'openai.png';
       let brandName = 'AI Provider';
 
-      if (k.includes('claude') || n.includes('claude') || t === 'claude' || t === 'anthropic' || u.includes('anthropic')) {
+      if (t === 'agy') {
+        iconFile = 'antigravity.png';
+        brandName = 'Antigravity CLI';
+      } else if (k.includes('claude') || n.includes('claude') || t === 'claude' || t === 'anthropic' || u.includes('anthropic')) {
         iconFile = 'claude.png';
         brandName = 'Anthropic Claude';
       } else if (k.includes('codex') || n.includes('codex') || t === 'codex' || t === 'responses') {
@@ -1574,12 +1595,21 @@
           { id: 'review', name: 'Review Model', placeholder: 'gpt-5.6-terra' },
           { id: 'subagent', name: 'Subagent Model', placeholder: 'gpt-5.6-luna' }
         ]
+      },
+      agy: {
+        title: 'Antigravity CLI Agent Model (Code Assist)',
+        // agy sizes its own window; * stands for the model agy picked (antigravity/* keeps it on intact).
+        no1m: true,
+        slots: [
+          { id: 'main', name: 'Agent Model (* = the model agy picked)', placeholder: 'antigravity/* or claude/claude-opus-5' }
+        ]
       }
     };
 
     function getActiveSlotConfig(fmt) {
       if (fmt === 'claude' || fmt === 'anthropic') return SLOT_CONFIGS.claude;
       if (fmt === 'codex' || fmt === 'responses') return SLOT_CONFIGS.codex;
+      if (fmt === 'agy') return SLOT_CONFIGS.agy;
       return SLOT_CONFIGS.auto;
     }
 
@@ -1612,10 +1642,10 @@
         slotRow.innerHTML = `
           <div style="display:flex; justify-content:space-between; align-items:center;">
             <label for="p-${s.id}" style="font-size:0.82rem; font-weight:500;">${escapeHtml(s.name)}</label>
-            <label style="display:flex; align-items:center; gap:0.35rem; font-size:0.75rem; color:var(--accent); cursor:pointer;">
+            ${cfg.no1m ? '' : `<label style="display:flex; align-items:center; gap:0.35rem; font-size:0.75rem; color:var(--accent); cursor:pointer;">
               <input type="checkbox" id="p-${s.id}-1m" aria-label="1M context for ${escapeHtml(s.name)}" aria-describedby="p-${s.id}-1m-note" style="width:13px; height:13px; min-height:0;" onchange="update1mWarnings()" ${checked ? 'checked' : ''}>
               1M context
-            </label>
+            </label>`}
           </div>
           <div class="combo">
             <input type="text" id="p-${s.id}" oninput="update1mWarnings()" role="combobox" aria-autocomplete="list" aria-expanded="false" aria-controls="p-${s.id}-list" autocomplete="off" spellcheck="false" placeholder="${escapeHtml(s.placeholder)}" value="${escapeHtml(val)}">
@@ -1784,7 +1814,8 @@
       // Render CLI Targets Rows
       const slots = [
         { id: 'claude', name: 'Claude Code', key: 'claude' },
-        { id: 'codex', name: 'Codex', key: 'codex' }
+        { id: 'codex', name: 'Codex', key: 'codex' },
+        { id: 'agy', name: 'Antigravity CLI', key: 'agy' }
       ];
 
       for (const slot of slots) {
@@ -1796,7 +1827,8 @@
           select.innerHTML = '<option value="">Official endpoint</option>';
           for (const [key, p] of profilesList) {
             const tool = p.tool || 'auto';
-            if (tool === 'auto' || tool === slot.key) {
+            // agy has no auto profile: only a profile made for it can serve it.
+            if (tool === slot.key || (tool === 'auto' && slot.key !== 'agy')) {
               const opt = document.createElement('option');
               opt.value = key;
               opt.textContent = p.name + ' (' + key + ')';
@@ -1826,6 +1858,7 @@
         const activeCLIs = [];
         if (activeMap.claude === key) activeCLIs.push('Claude');
         if (activeMap.codex === key) activeCLIs.push('Codex');
+        if (activeMap.agy === key) activeCLIs.push('agy');
         const isActiveAny = activeCLIs.length > 0;
         const isEditing = (key === currentlyEditingKey);
 
@@ -1836,7 +1869,7 @@
         const toolAv = getToolAvatar(key, p);
         const routeBadge = (p.tool || 'auto') + ' → ' + (p.outFormat || p.mode || 'chat');
 
-        const slotFmt = p.tool === 'claude' ? 'anthropic' : p.tool === 'codex' ? 'responses' : 'auto';
+        const slotFmt = p.tool === 'claude' ? 'anthropic' : p.tool === 'codex' ? 'responses' : p.tool === 'agy' ? 'agy' : 'auto';
         const pCfg = getActiveSlotConfig(slotFmt);
         const modelChips = pCfg.slots.map(s => {
           const val = valueForSlot(p.defaultModels, s.id);
@@ -2002,6 +2035,17 @@
         thinkingMode: 'auto',
         defaultModels: { default: 'gpt-4o', sonnet: 'claude-3-7-sonnet', opus: 'claude-3-opus', haiku: 'claude-3-5-haiku' }
       },
+      // agy on an intact Antigravity pool: antigravity/* keeps the model agy picked, and intact names
+      // the CLI as its own client (bifrost_ua), so the request crosses unchanged.
+      'agy-intact': {
+        name: 'Antigravity CLI on intact',
+        baseURL: 'http://127.0.0.1:8080/v1',
+        tool: 'agy',
+        outFormat: 'openai-chat',
+        mode: 'convert',
+        thinkingMode: 'auto',
+        defaultModels: { main: 'antigravity/*' }
+      },
       '9router': {
         name: '9Router Client Proxy',
         baseURL: 'http://127.0.0.1:20128/v1',

package/verify-gateway.mjs

@@ -0,0 +1,35 @@
+#!/usr/bin/env node
+// Exits 0 only when the gateway named by a CLOUD_CODE_URL proves that it is this switcher.
+//
+// agy sends its Google token in clear text to CLOUD_CODE_URL, so the agy shim runs this before it
+// hands the variable over. Any doubt fails closed: then agy keeps its official endpoint.
+//
+// Usage: node verify-gateway.mjs <url>
+import { probeGateway } from './state.mjs';
+
+// A probe that hangs must never hold agy at its start.
+const LIMIT_MS = 3000;
+setTimeout(() => {
+  process.stdout.write('timeout');
+  process.exit(1);
+}, LIMIT_MS).unref();
+
+async function check(raw) {
+  let u;
+  try { u = new URL(raw); } catch { return 'invalid'; }
+  // The switcher writes 127.0.0.1 only. localhost can resolve to ::1, which the probe never asks.
+  if (u.protocol !== 'http:' || u.hostname !== '127.0.0.1') return 'not-the-switcher-address';
+  const port = Number(u.port);
+  if (!Number.isInteger(port) || port < 1 || port > 65535) return 'no-port';
+  return probeGateway(port);
+}
+
+check(process.argv[2])
+  .then((state) => {
+    process.stdout.write(String(state));
+    process.exit(state === 'ours' ? 0 : 1);
+  })
+  .catch(() => {
+    process.stdout.write('error');
+    process.exit(1);
+  });