omnigateway 0.1.6 → 0.1.8

package/bin/omni.js

@@ -90,6 +90,11 @@ function formatUsd(value) {
   return `$${value.toFixed(value < 1 ? 4 : 2)}`;
 }
 
+// apps/cli/src/run.ts
+import { mkdirSync as mkdirSync2, writeFileSync as writeFileSync2 } from "fs";
+import { homedir as homedir3 } from "os";
+import { dirname as dirname3 } from "path";
+
 // packages/control/src/adminAuth.ts
 import { hash, verify } from "@node-rs/argon2";
 var MIN_PASSWORD_LENGTH = 12;
@@ -188,6 +193,23 @@ class GatewayError extends Error {
 }
 // packages/ir/src/logger.ts
 var LEVELS = { debug: 10, info: 20, warn: 30, error: 40 };
+var ANSI2 = /\u001B\[[0-9;]*m/g;
+var HEAD = /^(\S+) (DEBUG|INFO|WARN|ERROR) {1,2}(.*)$/;
+var FIELDS = / {2}(?=[a-zA-Z]+=)/;
+function parseLine(raw) {
+  const absent = { raw, at: null, level: null, msg: null };
+  const match = HEAD.exec(raw.replace(ANSI2, ""));
+  if (match === null)
+    return absent;
+  const [, instant, label, tail] = match;
+  if (instant === undefined || label === undefined || tail === undefined)
+    return absent;
+  const at = Date.parse(instant);
+  if (Number.isNaN(at))
+    return absent;
+  const msg = tail.split(FIELDS, 1)[0] ?? tail;
+  return { raw, at, level: label.toLowerCase(), msg };
+}
 var noopLogger = {
   debug: () => {},
   info: () => {},
@@ -216,6 +238,7 @@ function usageFromPromptTotal(promptTokens, outputTokens, cacheReadTokens, cache
 }
 // packages/control/src/config.ts
 var MIN_KEY_LENGTH = 16;
+var TRUTHY = new Set(["1", "true", "yes", "on"]);
 var DECIMAL_INTEGER = /^\d+$/;
 function optionalText(value, fallback) {
   return value?.trim() || fallback;
@@ -234,6 +257,8 @@ function loadConfig(env) {
   const derivedBaseUrl = `http://${host}:${port}`;
   const baseUrl = optionalText(env.OMNI_BASE_URL, derivedBaseUrl).replace(/\/+$/, "") || derivedBaseUrl;
   const staticDir = env.OMNI_STATIC_DIR?.trim();
+  const logFile = env.OMNI_LOG_FILE?.trim();
+  const exposeClaudeCodeAliases = TRUTHY.has((env.OMNI_EXPOSE_CLAUDE_CODE_ALIASES ?? "").trim().toLowerCase());
   const rawLogLevel = env.OMNI_LOG_LEVEL?.trim();
   const logLevel = parseLogLevel(rawLogLevel);
   return {
@@ -244,9 +269,15 @@ function loadConfig(env) {
     databasePath: optionalText(env.OMNI_DB_PATH, "./omnigateway.db"),
     encryptionKey,
     baseUrl,
-    staticDir: staticDir === undefined || staticDir.length === 0 ? null : staticDir
+    staticDir: staticDir === undefined || staticDir.length === 0 ? null : staticDir,
+    exposeClaudeCodeAliases,
+    logFile: logFile === undefined || logFile.length === 0 ? null : logFile
   };
 }
+// packages/providers/src/betas.ts
+var CONTEXT_1M_BETA = "context-1m-2025-08-07";
+var CONTEXT_1M_TOKENS = 1e6;
+
 // packages/providers/src/body.ts
 var BODY_ORDER = {
   anthropic: [
@@ -354,6 +385,119 @@ function signAnthropicBody(json) {
   return json.replace(needle, `cch=${computeCch(json)};`);
 }
 
+// packages/providers/src/anthropic/models.ts
+var ANTHROPIC_MODELS = {
+  defaultModel: "claude-opus-5",
+  models: [
+    {
+      id: "claude-fable-5",
+      label: "Claude Fable 5",
+      pricing: { input: 10, output: 50, cacheRead: 1, cacheWrite5m: 12.5, cacheWrite1h: 20 },
+      limits: { contextWindow: 1e6, maxOutputTokens: 128000 }
+    },
+    {
+      id: "claude-opus-5",
+      label: "Claude Opus 5",
+      pricing: { input: 5, output: 25, cacheRead: 0.5, cacheWrite5m: 6.25, cacheWrite1h: 10 },
+      limits: { contextWindow: 1e6, maxOutputTokens: 128000 }
+    },
+    {
+      id: "claude-sonnet-5",
+      label: "Claude Sonnet 5",
+      pricing: { input: 3, output: 15, cacheRead: 0.3, cacheWrite5m: 3.75, cacheWrite1h: 6 },
+      limits: { contextWindow: 1e6, maxOutputTokens: 128000 }
+    },
+    {
+      id: "claude-haiku-4-5",
+      label: "Claude Haiku 4.5",
+      pricing: { input: 1, output: 5, cacheRead: 0.1, cacheWrite5m: 1.25, cacheWrite1h: 2 },
+      limits: { contextWindow: 200000, maxOutputTokens: 64000 }
+    }
+  ]
+};
+
+// packages/providers/src/kimi/models.ts
+var KIMI_MODELS = {
+  defaultModel: "k3-256k",
+  models: [
+    {
+      id: "k3-256k",
+      label: "Kimi K3 \u2014 256K",
+      pricing: { input: 3, output: 15, cacheRead: 0.3, cacheWrite5m: 0, cacheWrite1h: 0 },
+      limits: { contextWindow: 262144, maxOutputTokens: 131072 }
+    },
+    {
+      id: "k3",
+      label: "Kimi K3 \u2014 up to 1M",
+      pricing: { input: 3, output: 15, cacheRead: 0.3, cacheWrite5m: 0, cacheWrite1h: 0 },
+      limits: { contextWindow: 1048576, maxOutputTokens: 131072 }
+    },
+    {
+      id: "kimi-for-coding",
+      label: "Kimi K2.7 Code",
+      pricing: { input: 0.95, output: 4, cacheRead: 0.19, cacheWrite5m: 0, cacheWrite1h: 0 },
+      limits: { contextWindow: 262144, maxOutputTokens: 131072 }
+    },
+    {
+      id: "kimi-for-coding-highspeed",
+      label: "Kimi K2.7 Code \u2014 High Speed",
+      pricing: { input: 0.95, output: 8, cacheRead: 0.19, cacheWrite5m: 0, cacheWrite1h: 0 },
+      limits: { contextWindow: 262144, maxOutputTokens: 131072 }
+    }
+  ]
+};
+
+// packages/providers/src/openai/models.ts
+var OPENAI_MODELS = {
+  defaultModel: "gpt-5.6",
+  models: [
+    {
+      id: "gpt-5.6",
+      label: "GPT-5.6 \u2014 routes to Sol",
+      pricing: { input: 5, output: 30, cacheRead: 0.5, cacheWrite5m: 0, cacheWrite1h: 0 },
+      limits: { contextWindow: 922000, maxOutputTokens: 128000 },
+      oauthLimits: { contextWindow: 272000, maxOutputTokens: 128000 }
+    },
+    {
+      id: "gpt-5.6-sol",
+      label: "GPT-5.6 Sol \u2014 deepest reasoning",
+      pricing: { input: 5, output: 30, cacheRead: 0.5, cacheWrite5m: 0, cacheWrite1h: 0 },
+      limits: { contextWindow: 922000, maxOutputTokens: 128000 },
+      oauthLimits: { contextWindow: 272000, maxOutputTokens: 128000 }
+    },
+    {
+      id: "gpt-5.6-terra",
+      label: "GPT-5.6 Terra \u2014 balanced",
+      pricing: { input: 2, output: 12, cacheRead: 0.2, cacheWrite5m: 0, cacheWrite1h: 0 },
+      limits: { contextWindow: 922000, maxOutputTokens: 128000 },
+      oauthLimits: { contextWindow: 272000, maxOutputTokens: 128000 }
+    },
+    {
+      id: "gpt-5.6-luna",
+      label: "GPT-5.6 Luna \u2014 fastest",
+      pricing: { input: 0.2, output: 1.2, cacheRead: 0.02, cacheWrite5m: 0, cacheWrite1h: 0 },
+      limits: { contextWindow: 922000, maxOutputTokens: 128000 },
+      oauthLimits: { contextWindow: 272000, maxOutputTokens: 128000 }
+    }
+  ]
+};
+
+// packages/providers/src/catalog.ts
+var PROVIDER_MODEL_CATALOG = {
+  anthropic: ANTHROPIC_MODELS,
+  openai: OPENAI_MODELS,
+  kimi: KIMI_MODELS
+};
+function catalogPricing(provider, model) {
+  return PROVIDER_MODEL_CATALOG[provider]?.models.find((entry) => entry.id === model)?.pricing ?? null;
+}
+function catalogLimits(provider, model, auth = "apiKey") {
+  const entry = PROVIDER_MODEL_CATALOG[provider]?.models.find((choice) => choice.id === model);
+  if (entry === undefined)
+    return null;
+  return (auth === "oauth" ? entry.oauthLimits : undefined) ?? entry.limits;
+}
+
 // packages/providers/src/http.ts
 function codeForStatus(status) {
   if (status === 401 || status === 403)
@@ -669,7 +813,7 @@ async function* decodeAnthropic(messages) {
         if (cb.type === "text")
           yield { type: "blockStart", index, block: { type: "text" } };
         else if (cb.type === "thinking")
-          yield { type: "blockStart", index, block: { type: "thinking" } };
+          yield { type: "blockStart", index, block: { type: "thinking", signed: true } };
         else if (cb.type === "tool_use")
           yield {
             type: "blockStart",
@@ -689,7 +833,7 @@ async function* decodeAnthropic(messages) {
             index,
             delta: { type: "thinking", text: delta.thinking ?? "" }
           };
-        else if (delta.type === "signature_delta")
+        else if (delta.type === "signature_delta" && (delta.signature ?? "") !== "")
           yield {
             type: "blockDelta",
             index,
@@ -761,6 +905,9 @@ function wireCacheControl(c) {
     return {};
   return { cache_control: { type: c.type, ...c.ttl === undefined ? {} : { ttl: c.ttl } } };
 }
+function isReplayableThinking(b) {
+  return b.type !== "thinking" || b.signature !== undefined && b.signature !== "";
+}
 function encodeBlock(b) {
   const cache = wireCacheControl(cacheControlOf(b));
   switch (b.type) {
@@ -790,6 +937,16 @@ function encodeSystemTurn(content) {
   return content.flatMap((b) => b.type === "text" ? [b.text] : []).join(`
 `);
 }
+function systemCacheControl(req) {
+  const cacheable = req.messages.flatMap((message) => message.content.flatMap((block) => block.type === "thinking" ? [] : [{ role: message.role, block }]));
+  const markedSystemBlocks = cacheable.filter(({ role, block }) => role === "system" && cacheControlOf(block) !== undefined);
+  const final = markedSystemBlocks.at(-1);
+  const promoted = final !== undefined && final.block.type === "text" && cacheable.at(-1) === final ? cacheControlOf(final.block) : undefined;
+  return {
+    ...promoted === undefined ? {} : { promoted },
+    lost: markedSystemBlocks.length > (promoted === undefined ? 0 : 1)
+  };
+}
 function encodeToolChoice(c) {
   switch (c.type) {
     case "auto":
@@ -813,18 +970,30 @@ function toWire(req, model, opts) {
     system = [{ type: "text", text: OAUTH_IDENTITY }, ...system ?? []];
     note2("anthropic:oauth-system-prefix");
   }
+  const systemCache = systemCacheControl(req);
+  if (systemCache.lost)
+    note2("anthropic:system-turn-cache-control-dropped");
   const body = {
     model,
-    messages: req.messages.map((m) => {
-      if (m.role !== "system")
-        return { role: m.role, content: m.content.map(encodeBlock) };
-      if (m.content.some((b) => cacheControlOf(b) !== undefined)) {
-        note2("anthropic:system-turn-cache-control-dropped");
-      }
-      return { role: m.role, content: encodeSystemTurn(m.content) };
+    messages: req.messages.flatMap((m) => {
+      if (m.role !== "system") {
+        const replayable = m.content.filter(isReplayableThinking);
+        if (replayable.length !== m.content.length)
+          note2("anthropic:unsigned-thinking-dropped");
+        if (replayable.length === 0)
+          return [];
+        return [{ role: m.role, content: replayable.map(encodeBlock) }];
+      }
+      return [{ role: m.role, content: encodeSystemTurn(m.content) }];
     }),
     max_tokens: req.maxTokens ?? 4096,
-    stream: req.stream
+    stream: req.stream,
+    ...systemCache.promoted === undefined ? {} : {
+      cache_control: {
+        type: systemCache.promoted.type,
+        ...systemCache.promoted.ttl === undefined ? {} : { ttl: systemCache.promoted.ttl }
+      }
+    }
   };
   if (system !== undefined && system.length > 0)
     body.system = system;
@@ -886,6 +1055,15 @@ var anthropicAdapter = {
       ["Accept", "text/event-stream"]
     ];
     const betas = new Set(req.request.betas ?? []);
+    const notes = [...degradations];
+    if (betas.has(CONTEXT_1M_BETA)) {
+      const limits = catalogLimits("anthropic", req.model, oauth ? "oauth" : "apiKey");
+      const window = limits?.contextWindow;
+      if (window !== undefined && window < CONTEXT_1M_TOKENS) {
+        betas.delete(CONTEXT_1M_BETA);
+        notes.push("anthropic:context-1m-dropped");
+      }
+    }
     if (oauth) {
       protocol.push(["Authorization", `Bearer ${req.credentials.accessToken}`]);
       betas.add(OAUTH_BETA);
@@ -913,121 +1091,9 @@ var anthropicAdapter = {
       throw await httpError(res, "anthropic");
     if (res.body === null)
       throw new GatewayError("UPSTREAM", "empty response body", { provider: "anthropic" });
-    return { events: decodeAnthropic(parseSse(res.body)), degradations };
+    return { events: decodeAnthropic(parseSse(res.body)), degradations: notes };
   }
 };
-// packages/providers/src/anthropic/models.ts
-var ANTHROPIC_MODELS = {
-  defaultModel: "claude-opus-5",
-  models: [
-    {
-      id: "claude-fable-5",
-      label: "Claude Fable 5",
-      pricing: { input: 10, output: 50, cacheRead: 1, cacheWrite5m: 12.5, cacheWrite1h: 20 },
-      limits: { contextWindow: 1e6, maxOutputTokens: 128000 }
-    },
-    {
-      id: "claude-opus-5",
-      label: "Claude Opus 5",
-      pricing: { input: 5, output: 25, cacheRead: 0.5, cacheWrite5m: 6.25, cacheWrite1h: 10 },
-      limits: { contextWindow: 1e6, maxOutputTokens: 128000 }
-    },
-    {
-      id: "claude-sonnet-5",
-      label: "Claude Sonnet 5",
-      pricing: { input: 3, output: 15, cacheRead: 0.3, cacheWrite5m: 3.75, cacheWrite1h: 6 },
-      limits: { contextWindow: 1e6, maxOutputTokens: 128000 }
-    },
-    {
-      id: "claude-haiku-4-5",
-      label: "Claude Haiku 4.5",
-      pricing: { input: 1, output: 5, cacheRead: 0.1, cacheWrite5m: 1.25, cacheWrite1h: 2 },
-      limits: { contextWindow: 200000, maxOutputTokens: 64000 }
-    }
-  ]
-};
-
-// packages/providers/src/kimi/models.ts
-var KIMI_MODELS = {
-  defaultModel: "k3-256k",
-  models: [
-    {
-      id: "k3-256k",
-      label: "Kimi K3 \u2014 256K",
-      pricing: { input: 3, output: 15, cacheRead: 0.3, cacheWrite5m: 0, cacheWrite1h: 0 },
-      limits: { contextWindow: 262144, maxOutputTokens: 131072 }
-    },
-    {
-      id: "k3",
-      label: "Kimi K3 \u2014 up to 1M",
-      pricing: { input: 3, output: 15, cacheRead: 0.3, cacheWrite5m: 0, cacheWrite1h: 0 },
-      limits: { contextWindow: 1048576, maxOutputTokens: 131072 }
-    },
-    {
-      id: "kimi-for-coding",
-      label: "Kimi K2.7 Code",
-      pricing: { input: 0.95, output: 4, cacheRead: 0.19, cacheWrite5m: 0, cacheWrite1h: 0 },
-      limits: { contextWindow: 262144, maxOutputTokens: 131072 }
-    },
-    {
-      id: "kimi-for-coding-highspeed",
-      label: "Kimi K2.7 Code \u2014 High Speed",
-      pricing: { input: 0.95, output: 8, cacheRead: 0.19, cacheWrite5m: 0, cacheWrite1h: 0 },
-      limits: { contextWindow: 262144, maxOutputTokens: 131072 }
-    }
-  ]
-};
-
-// packages/providers/src/openai/models.ts
-var OPENAI_MODELS = {
-  defaultModel: "gpt-5.6",
-  models: [
-    {
-      id: "gpt-5.6",
-      label: "GPT-5.6 \u2014 routes to Sol",
-      pricing: { input: 5, output: 30, cacheRead: 0.5, cacheWrite5m: 0, cacheWrite1h: 0 },
-      limits: { contextWindow: 922000, maxOutputTokens: 128000 },
-      oauthLimits: { contextWindow: 272000, maxOutputTokens: 128000 }
-    },
-    {
-      id: "gpt-5.6-sol",
-      label: "GPT-5.6 Sol \u2014 deepest reasoning",
-      pricing: { input: 5, output: 30, cacheRead: 0.5, cacheWrite5m: 0, cacheWrite1h: 0 },
-      limits: { contextWindow: 922000, maxOutputTokens: 128000 },
-      oauthLimits: { contextWindow: 272000, maxOutputTokens: 128000 }
-    },
-    {
-      id: "gpt-5.6-terra",
-      label: "GPT-5.6 Terra \u2014 balanced",
-      pricing: { input: 2, output: 12, cacheRead: 0.2, cacheWrite5m: 0, cacheWrite1h: 0 },
-      limits: { contextWindow: 922000, maxOutputTokens: 128000 },
-      oauthLimits: { contextWindow: 272000, maxOutputTokens: 128000 }
-    },
-    {
-      id: "gpt-5.6-luna",
-      label: "GPT-5.6 Luna \u2014 fastest",
-      pricing: { input: 0.2, output: 1.2, cacheRead: 0.02, cacheWrite5m: 0, cacheWrite1h: 0 },
-      limits: { contextWindow: 922000, maxOutputTokens: 128000 },
-      oauthLimits: { contextWindow: 272000, maxOutputTokens: 128000 }
-    }
-  ]
-};
-
-// packages/providers/src/catalog.ts
-var PROVIDER_MODEL_CATALOG = {
-  anthropic: ANTHROPIC_MODELS,
-  openai: OPENAI_MODELS,
-  kimi: KIMI_MODELS
-};
-function catalogPricing(provider, model) {
-  return PROVIDER_MODEL_CATALOG[provider]?.models.find((entry) => entry.id === model)?.pricing ?? null;
-}
-function catalogLimits(provider, model, auth = "apiKey") {
-  const entry = PROVIDER_MODEL_CATALOG[provider]?.models.find((choice) => choice.id === model);
-  if (entry === undefined)
-    return null;
-  return (auth === "oauth" ? entry.oauthLimits : undefined) ?? entry.limits;
-}
 // packages/providers/src/http-client.ts
 import { request as httpRequest } from "http";
 import { request as httpsRequest } from "https";
@@ -1253,6 +1319,8 @@ function toChatWire(req, model) {
     if (!degradations.includes(d))
       degradations.push(d);
   };
+  if (req.betas?.includes(CONTEXT_1M_BETA))
+    note2("kimi:context-1m-dropped");
   const messages = [];
   const system = req.system?.flatMap((b) => b.type === "text" ? [b.text] : []).join(`
 
@@ -1529,6 +1597,8 @@ function toResponsesWire(req, model, opts = { oauth: false }) {
     if (!degradations.includes(d))
       degradations.push(d);
   };
+  if (req.betas?.includes(CONTEXT_1M_BETA))
+    note2("openai:context-1m-dropped");
   for (const message of req.messages) {
     const parts = [];
     const inlined = message.role === "system";
@@ -2181,6 +2251,60 @@ function createConnectFlows(deps) {
     }
   };
 }
+// packages/control/src/console.ts
+var UNIT_NAME = "omnigateway.service";
+var MAX_CONSOLE_LINES = 500;
+var DEFAULT_CONSOLE_LINES = 200;
+function resolveConsoleSource(input) {
+  const path = input.logFile?.trim();
+  if (path !== undefined && path.length > 0)
+    return { kind: "file", path };
+  if (input.unitInstalled)
+    return { kind: "journal", unit: UNIT_NAME, scope: input.scope };
+  return { kind: "none" };
+}
+function consoleLimit(requested) {
+  const value = requested === undefined ? DEFAULT_CONSOLE_LINES : Number(requested);
+  if (!Number.isFinite(value))
+    return DEFAULT_CONSOLE_LINES;
+  return Math.floor(Math.min(Math.max(1, value), MAX_CONSOLE_LINES));
+}
+function keep(line, query) {
+  if (query.since !== undefined && (line.at === null || line.at <= query.since))
+    return false;
+  if (query.level === undefined || line.level === null)
+    return true;
+  return LEVELS[line.level] >= LEVELS[query.level];
+}
+var SCAN_FACTOR = 20;
+var SCAN_LIMIT = 5000;
+function scanWidth(query) {
+  const filtered = query.level !== undefined || query.since !== undefined;
+  return filtered ? Math.min(query.lines * SCAN_FACTOR, SCAN_LIMIT) : query.lines;
+}
+async function readSource(deps, source, lines) {
+  if (source.kind === "none")
+    return "";
+  if (source.kind === "file")
+    return deps.readFile(source.path, lines) ?? "";
+  const unit = source.scope === "system" ? ["-u", source.unit] : [`--user-unit=${source.unit}`];
+  const result = await deps.run([
+    "journalctl",
+    ...unit,
+    "-n",
+    String(lines),
+    "--no-pager",
+    "--output=cat"
+  ]);
+  return result.code === 0 ? result.stdout : "";
+}
+async function readConsole(deps, source, query) {
+  const limited = { ...query, lines: consoleLimit(query.lines) };
+  const text = await readSource(deps, source, scanWidth(limited));
+  const lines = text.split(`
+`).filter((raw) => raw.trim().length > 0).map(parseLine).filter((line) => keep(line, limited)).slice(-limited.lines);
+  return source.kind === "file" ? { source: "file", path: source.path, lines } : { source: source.kind, lines };
+}
 // node_modules/.bun/zod@4.4.3/node_modules/zod/v4/classic/external.js
 var exports_external = {};
 __export(exports_external, {
@@ -16473,7 +16597,9 @@ var dryRunSchema = exports_external.object({
   reasoning: exports_external.boolean().default(false)
 }).strict();
 var modelSchema = exports_external.object({
-  id: exports_external.string().min(1),
+  id: exports_external.string().min(1).refine((value) => !value.toLowerCase().startsWith("claude/"), {
+    message: 'model id must not start with "claude/": that prefix is reserved for discovery mirrors'
+  }),
   strategy: exports_external.enum(["score", "priority", "roundRobin", "weighted"]),
   isAlias: exports_external.boolean(),
   targets: exports_external.array(exports_external.object({
@@ -17885,11 +18011,65 @@ async function createKey(store, input) {
 async function revokeKey(store, id) {
   await store.keys.revoke(id);
 }
-// packages/control/src/models.ts
-async function listModels(store) {
-  return store.config.listModels();
+// packages/control/src/modelLimits.ts
+function narrower(a, b) {
+  const context = [a.contextWindow, b.contextWindow].filter((n) => n !== undefined);
+  const output = [a.maxOutputTokens, b.maxOutputTokens].filter((n) => n !== undefined);
+  return {
+    ...context.length === 0 ? {} : { contextWindow: Math.min(...context) },
+    ...output.length === 0 ? {} : { maxOutputTokens: Math.min(...output) }
+  };
 }
-async function getModel(store, id) {
+function targetLimits(target, auths) {
+  const ways = auths.size === 0 ? ["apiKey"] : [...auths];
+  let listed = {};
+  for (const auth of ways) {
+    const entry = catalogLimits(target.provider, target.model, auth);
+    if (entry === null)
+      continue;
+    listed = narrower(listed, {
+      contextWindow: entry.contextWindow,
+      maxOutputTokens: entry.maxOutputTokens
+    });
+  }
+  const contextWindow = target.contextWindow ?? listed.contextWindow;
+  const maxOutputTokens = target.maxOutputTokens ?? listed.maxOutputTokens;
+  return {
+    ...contextWindow === undefined ? {} : { contextWindow },
+    ...maxOutputTokens === undefined ? {} : { maxOutputTokens }
+  };
+}
+function servingAuths(credentials) {
+  const byProvider = new Map;
+  for (const credential of credentials) {
+    if (!credential.enabled)
+      continue;
+    const ways = byProvider.get(credential.provider) ?? new Set;
+    ways.add(credential.authType);
+    byProvider.set(credential.provider, ways);
+  }
+  return byProvider;
+}
+function resolveModelLimits(model, credentials) {
+  const auths = servingAuths(credentials);
+  let limits = {};
+  for (const target of model.targets) {
+    limits = narrower(limits, targetLimits(target, auths.get(target.provider) ?? new Set));
+  }
+  return limits;
+}
+function modelDisplayName(model) {
+  const only = model.targets.length === 1 ? model.targets[0] : undefined;
+  if (only === undefined)
+    return model.id;
+  const labelled = PROVIDER_MODEL_CATALOG[only.provider]?.models.find((choice) => choice.id === only.model);
+  return labelled?.label ?? model.id;
+}
+// packages/control/src/models.ts
+async function listModels(store) {
+  return store.config.listModels();
+}
+async function getModel(store, id) {
   const model = (await store.config.listModels()).find((m) => m.id === id);
   if (model === undefined)
     throw new GatewayError("MODEL_UNAVAILABLE", `no virtual model "${id}"`);
@@ -18241,6 +18421,115 @@ async function putSettings(store, input) {
   await store.config.putSettings(settings);
   return settings;
 }
+// packages/control/src/setup.ts
+var KEY_PLACEHOLDER = "<your OmniGateway key>";
+async function describeModelsForSetup(store) {
+  const models = await listModels(store);
+  const credentials = (await listCredentials(store)).map((credential) => ({
+    provider: credential.provider,
+    authType: credential.authType,
+    enabled: credential.enabled
+  }));
+  return models.map((model) => ({
+    model,
+    limits: resolveModelLimits(model, credentials),
+    label: modelDisplayName(model)
+  }));
+}
+function slug(id) {
+  return encodeURIComponent(id).replace(/\./g, "%2E");
+}
+function claudeProfiles(described, input) {
+  const apiKey = input.apiKey ?? KEY_PLACEHOLDER;
+  return described.map(({ model, limits }) => {
+    const useMirror = input.discoveryMirrors === true && !/^(?:claude|anthropic)/i.test(model.id);
+    const modelId = useMirror ? `claude/${model.id}` : model.id;
+    const env2 = {
+      ANTHROPIC_BASE_URL: input.baseUrl,
+      ANTHROPIC_AUTH_TOKEN: apiKey,
+      ANTHROPIC_MODEL: modelId,
+      CLAUDE_CODE_ENABLE_GATEWAY_MODEL_DISCOVERY: "1"
+    };
+    if (limits.contextWindow !== undefined && !/^claude-/i.test(modelId)) {
+      env2.CLAUDE_CODE_MAX_CONTEXT_TOKENS = String(limits.contextWindow);
+    }
+    return {
+      path: `${slug(model.id)}/settings.json`,
+      contents: `${JSON.stringify({ env: env2 }, null, 2)}
+`
+    };
+  });
+}
+function opencodeConfig(described, input) {
+  const models = {};
+  for (const { model, limits, label: label2 } of described) {
+    const limit = limits.contextWindow === undefined ? undefined : {
+      context: limits.contextWindow,
+      ...limits.maxOutputTokens === undefined ? {} : { output: limits.maxOutputTokens }
+    };
+    models[model.id] = { name: label2, ...limit === undefined ? {} : { limit } };
+  }
+  const contents = `${JSON.stringify({
+    $schema: "https://opencode.ai/config.json",
+    provider: {
+      omnigateway: {
+        npm: "@ai-sdk/openai-compatible",
+        name: "OmniGateway",
+        options: {
+          baseURL: `${input.baseUrl.replace(/\/+$/, "").replace(/(?:\/v1)+$/i, "")}/v1`,
+          apiKey: input.apiKey ?? KEY_PLACEHOLDER
+        },
+        models
+      }
+    }
+  }, null, 2)}
+`;
+  return { path: "opencode.json", contents };
+}
+// packages/control/src/tail.ts
+import { closeSync, fstatSync, openSync, readSync, statSync } from "fs";
+var CHUNK = 64 * 1024;
+var MAX_BYTES = 8 * 1024 * 1024;
+function tailFile(path, lines) {
+  let fd;
+  try {
+    fd = openSync(path, "r");
+  } catch {
+    return null;
+  }
+  try {
+    const size = fstatSync(fd).size;
+    if (size === 0)
+      return "";
+    const budget = Math.min(size, MAX_BYTES);
+    let read = 0;
+    let newlines = 0;
+    const chunks = [];
+    while (read < budget && newlines <= lines) {
+      const span = Math.min(CHUNK, budget - read);
+      const buffer = Buffer.allocUnsafe(span);
+      const position = size - read - span;
+      readSync(fd, buffer, 0, span, position);
+      chunks.unshift(buffer);
+      read += span;
+      for (const byte of buffer)
+        if (byte === 10)
+          newlines++;
+    }
+    return Buffer.concat(chunks).toString("utf8");
+  } catch {
+    return null;
+  } finally {
+    closeSync(fd);
+  }
+}
+function fileExists(path) {
+  try {
+    return statSync(path).isFile();
+  } catch {
+    return false;
+  }
+}
 // packages/control/src/usage.ts
 var MAX_LOG_LIMIT = 500;
 var DEFAULT_LOG_LIMIT = 100;
@@ -18475,6 +18764,278 @@ async function pollUntilAuthorized(flows, start, deps) {
   }
 }
 
+// apps/cli/src/service.ts
+import { existsSync as existsSync2, mkdirSync, readFileSync as readFileSync2, rmSync, writeFileSync } from "fs";
+import { homedir as homedir2 } from "os";
+import { dirname, join as join2 } from "path";
+var UNIT_NAME2 = "omnigateway.service";
+function unitPath(scope) {
+  return scope === "system" ? join2("/etc/systemd/system", UNIT_NAME2) : join2(homedir2(), ".config", "systemd", "user", UNIT_NAME2);
+}
+function systemctlArgs(scope, args) {
+  return scope === "system" ? ["systemctl", ...args] : ["systemctl", "--user", ...args];
+}
+function pidFile(stateDir) {
+  return join2(stateDir, "gateway.pid");
+}
+function logFile(stateDir) {
+  return join2(stateDir, "gateway.log");
+}
+function supervisedLogFile(deps) {
+  const configured = deps.logFile?.trim();
+  return configured !== undefined && configured.length > 0 ? configured : logFile(deps.stateDir);
+}
+function defaultStateDir(env2) {
+  const xdg = env2.XDG_STATE_HOME;
+  const base = typeof xdg === "string" && xdg.length > 0 ? xdg : join2(homedir2(), ".local", "state");
+  return join2(base, "omnigateway");
+}
+function unitFile(input) {
+  return `[Unit]
+Description=${input.description ?? "OmniGateway"}
+After=network-online.target
+Wants=network-online.target
+
+[Service]
+Type=simple
+WorkingDirectory=${input.root}
+EnvironmentFile=${join2(input.root, ".env")}
+ExecStart=${input.bun} ${input.entrypoint}
+Restart=on-failure
+RestartSec=2
+
+[Install]
+WantedBy=default.target
+`;
+}
+function unitInstalled(deps) {
+  return existsSync2(deps.unitPath);
+}
+function readPid(stateDir) {
+  const file2 = pidFile(stateDir);
+  if (!existsSync2(file2))
+    return null;
+  const pid = Number(readFileSync2(file2, "utf8").trim());
+  return Number.isInteger(pid) && pid > 0 ? pid : null;
+}
+function livePid(deps) {
+  const pid = readPid(deps.stateDir);
+  if (pid === null)
+    return null;
+  if (deps.alive(pid))
+    return pid;
+  rmSync(pidFile(deps.stateDir), { force: true });
+  return null;
+}
+async function status(deps) {
+  if (unitInstalled(deps)) {
+    const active = await deps.run(systemctlArgs(deps.scope, ["is-active", UNIT_NAME2]));
+    const state = active.stdout.trim() || active.stderr.trim() || "unknown";
+    const shown = await deps.run(systemctlArgs(deps.scope, ["show", UNIT_NAME2, "--property=MainPID", "--value"]));
+    const pid2 = Number(shown.stdout.trim());
+    return {
+      supervisor: "systemd",
+      running: state === "active",
+      pid: Number.isInteger(pid2) && pid2 > 0 ? pid2 : null,
+      state,
+      unitPath: deps.unitPath,
+      logFile: null
+    };
+  }
+  const pid = livePid(deps);
+  return {
+    supervisor: pid === null ? "none" : "pidfile",
+    running: pid !== null,
+    pid,
+    state: null,
+    unitPath: null,
+    logFile: supervisedLogFile(deps)
+  };
+}
+async function start(deps, input) {
+  if (unitInstalled(deps)) {
+    const result = await deps.run(systemctlArgs(deps.scope, ["start", UNIT_NAME2]));
+    if (result.code !== 0) {
+      throw new Error(result.stderr.trim() || `systemctl start exited ${result.code}`);
+    }
+    return {
+      supervisor: "systemd",
+      pid: null,
+      healthy: await waitForHealth(deps, input.baseUrl)
+    };
+  }
+  const running = livePid(deps);
+  if (running !== null) {
+    return {
+      supervisor: "pidfile",
+      pid: running,
+      healthy: await waitForHealth(deps, input.baseUrl)
+    };
+  }
+  mkdirSync(deps.stateDir, { recursive: true });
+  const file2 = supervisedLogFile(deps);
+  mkdirSync(dirname(file2), { recursive: true });
+  const pid = deps.spawn({
+    argv: input.argv,
+    cwd: deps.root,
+    env: { ...input.env, OMNI_LOG_FILE: file2 },
+    logFile: file2
+  });
+  writeFileSync(pidFile(deps.stateDir), `${pid}
+`);
+  return { supervisor: "pidfile", pid, healthy: await waitForHealth(deps, input.baseUrl) };
+}
+var HEALTH_TIMEOUT_MS = 1e4;
+var HEALTH_INTERVAL_MS = 200;
+async function waitForHealth(deps, baseUrl) {
+  const attempts = Math.ceil(HEALTH_TIMEOUT_MS / HEALTH_INTERVAL_MS);
+  for (let attempt = 0;attempt < attempts; attempt++) {
+    if (await deps.probe(baseUrl))
+      return true;
+    await deps.sleep(HEALTH_INTERVAL_MS);
+  }
+  return false;
+}
+var STOP_GRACE_MS = 5000;
+var STOP_INTERVAL_MS = 100;
+async function stop(deps) {
+  if (unitInstalled(deps)) {
+    const result = await deps.run(systemctlArgs(deps.scope, ["stop", UNIT_NAME2]));
+    if (result.code !== 0) {
+      throw new Error(result.stderr.trim() || `systemctl stop exited ${result.code}`);
+    }
+    return { supervisor: "systemd", stopped: true };
+  }
+  const pid = livePid(deps);
+  if (pid === null)
+    return { supervisor: "none", stopped: false };
+  deps.kill(pid, "SIGTERM");
+  const attempts = Math.ceil(STOP_GRACE_MS / STOP_INTERVAL_MS);
+  for (let attempt = 0;deps.alive(pid); attempt++) {
+    if (attempt >= attempts) {
+      deps.kill(pid, "SIGKILL");
+      break;
+    }
+    await deps.sleep(STOP_INTERVAL_MS);
+  }
+  rmSync(pidFile(deps.stateDir), { force: true });
+  return { supervisor: "pidfile", stopped: true };
+}
+async function install(deps, input) {
+  const path = deps.unitPath;
+  if (existsSync2(path) && !input.force) {
+    throw new Error(`${path} already exists; pass --force to replace it`);
+  }
+  mkdirSync(dirname(path), { recursive: true });
+  writeFileSync(path, unitFile({ root: deps.root, bun: input.bun, entrypoint: input.entrypoint }));
+  const reload = await deps.run(systemctlArgs(deps.scope, ["daemon-reload"]));
+  let enabled = false;
+  if (input.enable) {
+    const result = await deps.run(systemctlArgs(deps.scope, ["enable", UNIT_NAME2]));
+    enabled = result.code === 0;
+  }
+  return { path, reloaded: reload.code === 0, enabled };
+}
+async function uninstall(deps) {
+  const path = deps.unitPath;
+  if (!existsSync2(path))
+    return { path, removed: false };
+  await deps.run(systemctlArgs(deps.scope, ["disable", "--now", UNIT_NAME2]));
+  rmSync(path, { force: true });
+  await deps.run(systemctlArgs(deps.scope, ["daemon-reload"]));
+  return { path, removed: true };
+}
+function consoleSource(deps) {
+  const configured = deps.logFile?.trim();
+  const chosen = configured !== undefined && configured.length > 0 && fileExists(configured) ? configured : unitInstalled(deps) ? undefined : fileExists(supervisedLogFile(deps)) ? supervisedLogFile(deps) : undefined;
+  return {
+    source: resolveConsoleSource({
+      ...chosen === undefined ? {} : { logFile: chosen },
+      unitInstalled: unitInstalled(deps),
+      scope: deps.scope
+    }),
+    deps: {
+      readFile: (path, lines) => tailFile(path, lines),
+      run: deps.run
+    }
+  };
+}
+async function serviceLogs(deps, lines) {
+  const { source, deps: readDeps } = consoleSource(deps);
+  const read = await readConsole(readDeps, source, { lines });
+  return read.lines.map((line) => line.raw).join(`
+`);
+}
+
+// apps/cli/src/commands/console.ts
+var FOLLOW_INTERVAL_MS = 2000;
+var LEVEL_TONE = {
+  debug: "dim",
+  warn: "yellow",
+  error: "red"
+};
+function render(ctx, lines) {
+  return lines.map((line) => {
+    const tone = line.level === null ? undefined : LEVEL_TONE[line.level];
+    return tone === undefined ? line.raw : paint(ctx, tone, line.raw);
+  }).join(`
+`);
+}
+function sourceHint(source) {
+  if (source.kind === "file")
+    return `${source.path} (named by OMNI_LOG_FILE)`;
+  if (source.kind === "journal")
+    return `systemd journal for ${source.unit}`;
+  return "not captured \u2014 run under systemd, or start it with `omni start`";
+}
+function empty(source) {
+  if (source.kind !== "none")
+    return `no output yet in ${sourceHint(source)}`;
+  return [
+    "this gateway's output is not being captured, so there is nothing to show.",
+    "run it in the foreground and its output goes to your terminal instead.",
+    "to capture it: `omni service install`, or `omni start`, which redirects",
+    "output to a file and points OMNI_LOG_FILE at it."
+  ].join(`
+`);
+}
+var console_ = {
+  usage: "console [-n N] [--follow] [--level debug|info|warn|error]",
+  summary: "Show the gateway process's own output",
+  options: {
+    number: { type: "string", short: "n" },
+    follow: { type: "boolean" },
+    level: { type: "string" },
+    system: { type: "boolean" }
+  },
+  async run(args, { ctx, writer, service }) {
+    const lines = numberFlag(args.values, "number") ?? 50;
+    const rawLevel = stringFlag(args.values, "level");
+    const level = parseLogLevel(rawLevel);
+    if (rawLevel !== undefined && level === null) {
+      throw new UsageError(`unknown level "${rawLevel}"; use debug, info, warn or error`);
+    }
+    const { source, deps } = consoleSource(service());
+    const query = { lines, ...level === null ? {} : { level } };
+    const first = await readConsole(deps, source, query);
+    emit(ctx, writer, first, () => first.lines.length === 0 ? empty(source) : render(ctx, first.lines));
+    if (!ctx.json && first.lines.length > 0) {
+      note(ctx, writer, paint(ctx, "dim", `reading ${sourceHint(source)}`));
+    }
+    if (boolFlag(args.values, "follow") !== true || ctx.json)
+      return;
+    let seen = first.lines.at(-1)?.at ?? 0;
+    for (;; ) {
+      await Bun.sleep(FOLLOW_INTERVAL_MS);
+      const next = await readConsole(deps, source, { ...query, since: seen });
+      if (next.lines.length === 0)
+        continue;
+      seen = next.lines.at(-1)?.at ?? seen;
+      writer.out(render(ctx, next.lines));
+    }
+  }
+};
+
 // apps/cli/src/command.ts
 var PROVIDER_TONE = {
   anthropic: "magenta",
@@ -18515,7 +19076,7 @@ var credentialsList = {
         { header: "STATE" },
         { header: "EXPIRES" }
       ], credentials.map((c) => {
-        const status = condition(c);
+        const status2 = condition(c);
         return [
           c.id,
           provider(ctx, c.provider),
@@ -18523,7 +19084,7 @@ var credentialsList = {
           c.authType,
           String(c.tier),
           String(c.weight),
-          state(ctx, status.ok, status.text),
+          state(ctx, status2.ok, status2.text),
           formatTime(c.expiresAt)
         ];
       }));
@@ -18539,7 +19100,7 @@ var credentialsShow = {
   async run(args, { ctx, writer }) {
     const id = requirePositional(args, 0, "credential id");
     const credential = await findCredential(ctx, id);
-    const status = condition(credential);
+    const status2 = condition(credential);
     const data = {
       id: credential.id,
       provider: credential.provider,
@@ -18562,7 +19123,7 @@ var credentialsShow = {
       ["provider", provider(ctx, credential.provider)],
       ["label", credential.label],
       ["auth", credential.authType],
-      ["state", state(ctx, status.ok, status.text)],
+      ["state", state(ctx, status2.ok, status2.text)],
       ["tier", String(credential.tier)],
       ["weight", String(credential.weight)],
       ["account", credential.accountEmail ?? "\u2014"],
@@ -18697,12 +19258,12 @@ var credentialsHealth = {
 };
 
 // apps/cli/src/commands/db.ts
-import { existsSync as existsSync2 } from "fs";
+import { existsSync as existsSync3 } from "fs";
 var dbMigrate = {
   usage: "db migrate",
   summary: "Create or upgrade the database schema",
   async run(_args, { ctx, writer }) {
-    const existed = existsSync2(ctx.databasePath);
+    const existed = existsSync3(ctx.databasePath);
     const store = await ctx.store();
     await store.config.getSettings();
     emit(ctx, writer, { path: ctx.databasePath, created: !existed }, () => fields([
@@ -18840,8 +19401,8 @@ var modelsShow = {
         price(target.costPerMTok.cacheRead),
         price(target.costPerMTok.cacheWrite5m),
         price(target.costPerMTok.cacheWrite1h),
-        tokens(target.contextWindow),
-        tokens(target.maxOutputTokens),
+        tokens2(target.contextWindow),
+        tokens2(target.maxOutputTokens),
         capabilityList(target)
       ]))
     ].join(`
@@ -18851,7 +19412,7 @@ var modelsShow = {
 function price(value) {
   return value === undefined ? "\u2014" : value.toFixed(2);
 }
-function tokens(value) {
+function tokens2(value) {
   return value === undefined ? "\u2014" : value.toLocaleString("en-US");
 }
 function capabilityList(target) {
@@ -18919,9 +19480,9 @@ var modelsCatalog = {
         price(listed?.cacheRead),
         price(listed?.cacheWrite5m),
         price(listed?.cacheWrite1h),
-        tokens(limits?.contextWindow),
-        oauth?.contextWindow === limits?.contextWindow ? "\u2014" : tokens(oauth?.contextWindow),
-        tokens(limits?.maxOutputTokens)
+        tokens2(limits?.contextWindow),
+        oauth?.contextWindow === limits?.contextWindow ? "\u2014" : tokens2(oauth?.contextWindow),
+        tokens2(limits?.maxOutputTokens)
       ];
     })));
   }
@@ -19030,207 +19591,8 @@ ${candidates}${excluded}`;
 import { existsSync as existsSync5 } from "fs";
 
 // apps/cli/src/runtime.ts
-import { closeSync, existsSync as existsSync4, openSync } from "fs";
+import { closeSync as closeSync2, existsSync as existsSync4, openSync as openSync2 } from "fs";
 import { join as join3 } from "path";
-
-// apps/cli/src/service.ts
-import { existsSync as existsSync3, mkdirSync, readFileSync as readFileSync2, rmSync, writeFileSync } from "fs";
-import { homedir as homedir2 } from "os";
-import { dirname, join as join2 } from "path";
-var UNIT_NAME = "omnigateway.service";
-function unitPath(scope) {
-  return scope === "system" ? join2("/etc/systemd/system", UNIT_NAME) : join2(homedir2(), ".config", "systemd", "user", UNIT_NAME);
-}
-function systemctlArgs(scope, args) {
-  return scope === "system" ? ["systemctl", ...args] : ["systemctl", "--user", ...args];
-}
-function pidFile(stateDir) {
-  return join2(stateDir, "gateway.pid");
-}
-function logFile(stateDir) {
-  return join2(stateDir, "gateway.log");
-}
-function defaultStateDir(env2) {
-  const xdg = env2.XDG_STATE_HOME;
-  const base = typeof xdg === "string" && xdg.length > 0 ? xdg : join2(homedir2(), ".local", "state");
-  return join2(base, "omnigateway");
-}
-function unitFile(input) {
-  return `[Unit]
-Description=${input.description ?? "OmniGateway"}
-After=network-online.target
-Wants=network-online.target
-
-[Service]
-Type=simple
-WorkingDirectory=${input.root}
-EnvironmentFile=${join2(input.root, ".env")}
-ExecStart=${input.bun} ${input.entrypoint}
-Restart=on-failure
-RestartSec=2
-
-[Install]
-WantedBy=default.target
-`;
-}
-function unitInstalled(deps) {
-  return existsSync3(deps.unitPath);
-}
-function readPid(stateDir) {
-  const file2 = pidFile(stateDir);
-  if (!existsSync3(file2))
-    return null;
-  const pid = Number(readFileSync2(file2, "utf8").trim());
-  return Number.isInteger(pid) && pid > 0 ? pid : null;
-}
-function livePid(deps) {
-  const pid = readPid(deps.stateDir);
-  if (pid === null)
-    return null;
-  if (deps.alive(pid))
-    return pid;
-  rmSync(pidFile(deps.stateDir), { force: true });
-  return null;
-}
-async function status(deps) {
-  if (unitInstalled(deps)) {
-    const active = await deps.run(systemctlArgs(deps.scope, ["is-active", UNIT_NAME]));
-    const state2 = active.stdout.trim() || active.stderr.trim() || "unknown";
-    const shown = await deps.run(systemctlArgs(deps.scope, ["show", UNIT_NAME, "--property=MainPID", "--value"]));
-    const pid2 = Number(shown.stdout.trim());
-    return {
-      supervisor: "systemd",
-      running: state2 === "active",
-      pid: Number.isInteger(pid2) && pid2 > 0 ? pid2 : null,
-      state: state2,
-      unitPath: deps.unitPath,
-      logFile: null
-    };
-  }
-  const pid = livePid(deps);
-  return {
-    supervisor: pid === null ? "none" : "pidfile",
-    running: pid !== null,
-    pid,
-    state: null,
-    unitPath: null,
-    logFile: logFile(deps.stateDir)
-  };
-}
-async function start(deps, input) {
-  if (unitInstalled(deps)) {
-    const result = await deps.run(systemctlArgs(deps.scope, ["start", UNIT_NAME]));
-    if (result.code !== 0) {
-      throw new Error(result.stderr.trim() || `systemctl start exited ${result.code}`);
-    }
-    return {
-      supervisor: "systemd",
-      pid: null,
-      healthy: await waitForHealth(deps, input.baseUrl)
-    };
-  }
-  const running = livePid(deps);
-  if (running !== null) {
-    return {
-      supervisor: "pidfile",
-      pid: running,
-      healthy: await waitForHealth(deps, input.baseUrl)
-    };
-  }
-  mkdirSync(deps.stateDir, { recursive: true });
-  const pid = deps.spawn({
-    argv: input.argv,
-    cwd: deps.root,
-    env: input.env,
-    logFile: logFile(deps.stateDir)
-  });
-  writeFileSync(pidFile(deps.stateDir), `${pid}
-`);
-  return { supervisor: "pidfile", pid, healthy: await waitForHealth(deps, input.baseUrl) };
-}
-var HEALTH_TIMEOUT_MS = 1e4;
-var HEALTH_INTERVAL_MS = 200;
-async function waitForHealth(deps, baseUrl) {
-  const attempts = Math.ceil(HEALTH_TIMEOUT_MS / HEALTH_INTERVAL_MS);
-  for (let attempt = 0;attempt < attempts; attempt++) {
-    if (await deps.probe(baseUrl))
-      return true;
-    await deps.sleep(HEALTH_INTERVAL_MS);
-  }
-  return false;
-}
-var STOP_GRACE_MS = 5000;
-var STOP_INTERVAL_MS = 100;
-async function stop(deps) {
-  if (unitInstalled(deps)) {
-    const result = await deps.run(systemctlArgs(deps.scope, ["stop", UNIT_NAME]));
-    if (result.code !== 0) {
-      throw new Error(result.stderr.trim() || `systemctl stop exited ${result.code}`);
-    }
-    return { supervisor: "systemd", stopped: true };
-  }
-  const pid = livePid(deps);
-  if (pid === null)
-    return { supervisor: "none", stopped: false };
-  deps.kill(pid, "SIGTERM");
-  const attempts = Math.ceil(STOP_GRACE_MS / STOP_INTERVAL_MS);
-  for (let attempt = 0;deps.alive(pid); attempt++) {
-    if (attempt >= attempts) {
-      deps.kill(pid, "SIGKILL");
-      break;
-    }
-    await deps.sleep(STOP_INTERVAL_MS);
-  }
-  rmSync(pidFile(deps.stateDir), { force: true });
-  return { supervisor: "pidfile", stopped: true };
-}
-async function install(deps, input) {
-  const path = deps.unitPath;
-  if (existsSync3(path) && !input.force) {
-    throw new Error(`${path} already exists; pass --force to replace it`);
-  }
-  mkdirSync(dirname(path), { recursive: true });
-  writeFileSync(path, unitFile({ root: deps.root, bun: input.bun, entrypoint: input.entrypoint }));
-  const reload = await deps.run(systemctlArgs(deps.scope, ["daemon-reload"]));
-  let enabled = false;
-  if (input.enable) {
-    const result = await deps.run(systemctlArgs(deps.scope, ["enable", UNIT_NAME]));
-    enabled = result.code === 0;
-  }
-  return { path, reloaded: reload.code === 0, enabled };
-}
-async function uninstall(deps) {
-  const path = deps.unitPath;
-  if (!existsSync3(path))
-    return { path, removed: false };
-  await deps.run(systemctlArgs(deps.scope, ["disable", "--now", UNIT_NAME]));
-  rmSync(path, { force: true });
-  await deps.run(systemctlArgs(deps.scope, ["daemon-reload"]));
-  return { path, removed: true };
-}
-async function serviceLogs(deps, lines) {
-  if (unitInstalled(deps)) {
-    const args = deps.scope === "system" ? [] : ["--user"];
-    const result = await deps.run([
-      "journalctl",
-      ...args,
-      "-u",
-      UNIT_NAME,
-      "-n",
-      String(lines),
-      "--no-pager"
-    ]);
-    return result.stdout.trimEnd();
-  }
-  const file2 = logFile(deps.stateDir);
-  if (!existsSync3(file2))
-    return "";
-  return readFileSync2(file2, "utf8").split(`
-`).slice(-lines).join(`
-`).trimEnd();
-}
-
-// apps/cli/src/runtime.ts
 var runCommand = async (argv) => {
   const proc = Bun.spawn([...argv], { stdout: "pipe", stderr: "pipe" });
   const [stdout, stderr, code] = await Promise.all([
@@ -19241,7 +19603,7 @@ var runCommand = async (argv) => {
   return { code, stdout, stderr };
 };
 var spawnDetached = ({ argv, cwd, env: env2, logFile: logFile2 }) => {
-  const fd = openSync(logFile2, "a");
+  const fd = openSync2(logFile2, "a");
   try {
     const proc = Bun.spawn([...argv], {
       cwd,
@@ -19253,7 +19615,7 @@ var spawnDetached = ({ argv, cwd, env: env2, logFile: logFile2 }) => {
     proc.unref();
     return proc.pid;
   } finally {
-    closeSync(fd);
+    closeSync2(fd);
   }
 };
 async function runForeground(input) {
@@ -19294,11 +19656,13 @@ function gatewayEntrypoint(root, cliDir = import.meta.dir) {
   return candidates.find((path) => existsSync4(path)) ?? null;
 }
 function createServiceDeps(input) {
+  const logFile2 = input.env.OMNI_LOG_FILE?.trim();
   return {
     root: input.root,
     stateDir: defaultStateDir(input.env),
     scope: input.scope,
     unitPath: unitPath(input.scope),
+    ...logFile2 === undefined || logFile2.length === 0 ? {} : { logFile: logFile2 },
     run: runCommand,
     spawn: spawnDetached,
     probe: probeHealth,
@@ -19341,7 +19705,7 @@ var start2 = {
     emit(ctx, writer, result, () => {
       const how = result.supervisor === "systemd" ? "systemd" : `pid ${result.pid}`;
       if (!result.healthy) {
-        const where = result.supervisor === "systemd" ? "journalctl -u omnigateway.service" : logFile(deps.stateDir);
+        const where = result.supervisor === "systemd" ? "journalctl -u omnigateway.service" : supervisedLogFile(deps);
         return `${state(ctx, false, "started but /health never answered")} (${how}); see ${where}`;
       }
       return `${state(ctx, true, "running")} (${how}) at ${baseUrl}`;
@@ -19434,7 +19798,8 @@ var doctor = {
       gatewayEntrypoint: gatewayEntrypoint(deps.root),
       unitInstalled: unit,
       supervisor: status2.supervisor,
-      running: status2.running
+      running: status2.running,
+      consoleSource: consoleSource(deps).source
     };
     emit(ctx, writer, checks3, () => {
       const ok = (value, text) => state(ctx, value, text);
@@ -19449,7 +19814,8 @@ var doctor = {
         ["config", checks3.configError === null ? ok(true, "ok") : ok(false, checks3.configError)],
         ["entrypoint", checks3.gatewayEntrypoint ?? ok(false, "not found")],
         ["systemd unit", unit ? deps.scope : paint(ctx, "dim", "none")],
-        ["gateway", ok(status2.running, status2.running ? "running" : "stopped")]
+        ["gateway", ok(status2.running, status2.running ? "running" : "stopped")],
+        ["console log", sourceHint(checks3.consoleSource)]
       ]);
     });
   }
@@ -19500,6 +19866,78 @@ var settingsSet = {
   }
 };
 
+// apps/cli/src/commands/setup.ts
+import { dirname as dirname2, join as join4 } from "path";
+var OPTIONS = {
+  dir: { type: "string" },
+  key: { type: "string" },
+  "dry-run": { type: "boolean" }
+};
+async function described(ctx) {
+  const models = await describeModelsForSetup(await ctx.store());
+  if (models.length === 0) {
+    throw new CliError("no virtual models configured; add one with `omni models put`");
+  }
+  return models;
+}
+function baseUrl(ctx) {
+  if (ctx.configError !== null)
+    throw new CliError(ctx.configError);
+  return ctx.config().baseUrl;
+}
+function finish(ctx, writer, files, dryRun2, key, write) {
+  if (!dryRun2) {
+    for (const file2 of files)
+      write(file2.path, file2.contents);
+  }
+  emit(ctx, writer, { files }, () => dryRun2 ? files.map((f) => `--- ${f.path}
+${f.contents}`).join(`
+`) : files.map((f) => f.path).join(`
+`));
+  if (key === undefined) {
+    note(ctx, writer, "no --key given: the files carry a placeholder, so paste your key over it");
+  }
+}
+function at(dir, file2) {
+  return { path: join4(dir, file2.path), contents: file2.contents };
+}
+var setupClaude = {
+  usage: "setup claude [--dir <path>] [--key <key>] [--dry-run]",
+  summary: "Write a Claude Code profile per virtual model",
+  options: OPTIONS,
+  async run(args, { ctx, writer, setupFs }) {
+    const models = await described(ctx);
+    const dir = stringFlag(args.values, "dir") ?? join4(setupFs.homeDir, ".claude", "profiles");
+    const key = stringFlag(args.values, "key");
+    const dryRun2 = boolFlag(args.values, "dry-run");
+    const files = claudeProfiles(models, {
+      baseUrl: baseUrl(ctx),
+      discoveryMirrors: ctx.config().exposeClaudeCodeAliases,
+      ...key === undefined ? {} : { apiKey: key }
+    }).map((file2) => at(dir, file2));
+    finish(ctx, writer, files, dryRun2, key, setupFs.write);
+    if (!dryRun2) {
+      note(ctx, writer, `run one with: CLAUDE_CONFIG_DIR=${dirname2(files[0]?.path ?? dir)} claude`);
+    }
+  }
+};
+var setupOpencode = {
+  usage: "setup opencode [--dir <path>] [--key <key>] [--dry-run]",
+  summary: "Write an opencode.json provider entry for this gateway",
+  options: OPTIONS,
+  async run(args, { ctx, writer, setupFs }) {
+    const models = await described(ctx);
+    const dir = stringFlag(args.values, "dir") ?? setupFs.cwd;
+    const key = stringFlag(args.values, "key");
+    const dryRun2 = boolFlag(args.values, "dry-run");
+    const file2 = opencodeConfig(models, {
+      baseUrl: baseUrl(ctx),
+      ...key === undefined ? {} : { apiKey: key }
+    });
+    finish(ctx, writer, [at(dir, file2)], dryRun2, key, setupFs.write);
+  }
+};
+
 // apps/cli/src/commands/status.ts
 var WINDOW_ORDER = {
   fiveHour: 0,
@@ -19653,11 +20091,12 @@ var usage = {
 };
 var logs = {
   usage: "logs [-n N] [--follow] [--service]",
-  summary: "Show recent requests, or the gateway process's own output",
+  summary: "Show recent requests (--service is an alias for `omni console`)",
   options: {
     number: { type: "string", short: "n" },
     follow: { type: "boolean" },
-    service: { type: "boolean" }
+    service: { type: "boolean" },
+    system: { type: "boolean" }
   },
   async run(args, { ctx, writer, service }) {
     const limit = numberFlag(args.values, "number") ?? 20;
@@ -19667,7 +20106,7 @@ var logs = {
       return;
     }
     const store = await ctx.store();
-    const render = (rows) => table([
+    const render2 = (rows) => table([
       { header: "AT" },
       { header: "MODEL" },
       { header: "RESOLVED" },
@@ -19685,7 +20124,7 @@ var logs = {
       String(row.durationMs)
     ]));
     const first = await recentLogs(store, limit);
-    emit(ctx, writer, { logs: first }, () => first.length === 0 ? "no requests logged yet" : render(first));
+    emit(ctx, writer, { logs: first }, () => first.length === 0 ? "no requests logged yet" : render2(first));
     if (args.values.follow !== true || ctx.json)
       return;
     let seen = first[0]?.at ?? 0;
@@ -19695,7 +20134,7 @@ var logs = {
       if (next.length === 0)
         continue;
       seen = next[0]?.at ?? seen;
-      writer.out(render(next.reverse()));
+      writer.out(render2(next.reverse()));
     }
   }
 };
@@ -19708,6 +20147,7 @@ var COMMANDS = {
   restart,
   doctor,
   logs,
+  console: console_,
   usage,
   connect,
   "service install": serviceInstall,
@@ -19732,6 +20172,8 @@ var COMMANDS = {
   "keys revoke": keysRevoke,
   "settings get": settingsGet,
   "settings set": settingsSet,
+  "setup claude": setupClaude,
+  "setup opencode": setupOpencode,
   "admin set-password": adminSetPassword,
   "db migrate": dbMigrate
 };
@@ -19770,7 +20212,10 @@ function resolveCommand(argv) {
 
 // apps/cli/src/help.ts
 var GROUPS = [
-  { title: "Gateway", prefixes: ["status", "start", "stop", "restart", "doctor", "logs"] },
+  {
+    title: "Gateway",
+    prefixes: ["status", "start", "stop", "restart", "doctor", "logs", "console"]
+  },
   { title: "Service", prefixes: ["service "] },
   { title: "Accounts", prefixes: ["connect", "credentials "] },
   { title: "Models", prefixes: ["models "] },
@@ -19929,6 +20374,14 @@ async function run(argv, writer, options = {}) {
     ctx,
     writer,
     prompt,
+    setupFs: options.setupFs ?? {
+      homeDir: homedir3(),
+      cwd: process.cwd(),
+      write: (path, contents) => {
+        mkdirSync2(dirname3(path), { recursive: true });
+        writeFileSync2(path, contents);
+      }
+    },
     service: () => options.service?.({ root: ctx.root.root, env: ctx.env }) ?? createServiceDeps({ root: ctx.root.root, env: ctx.env, scope, now: ctx.now }),
     foreground: options.foreground ?? runForeground,
     connect: (store) => options.connect?.(store) ?? createConnectFlows({