omnigateway 0.4.12 → 0.5.0

package/bin/omni.js

@@ -405,7 +405,6 @@ function loadConfig(env) {
   const baseUrl = optionalText(env.OMNI_BASE_URL, derivedBaseUrl).replace(/\/+$/, "") || derivedBaseUrl;
   const staticDir = env.OMNI_STATIC_DIR?.trim();
   const logFile = env.OMNI_LOG_FILE?.trim();
-  const exposeClaudeCodeAliases = TRUTHY.has((env.OMNI_EXPOSE_CLAUDE_CODE_ALIASES ?? "").trim().toLowerCase());
   const bodyLoggingAllowed = TRUTHY.has((env.OMNI_BODY_LOGGING_ALLOWED ?? "").trim().toLowerCase());
   const rawLogLevel = env.OMNI_LOG_LEVEL?.trim();
   const logLevel = parseLogLevel(rawLogLevel);
@@ -418,7 +417,6 @@ function loadConfig(env) {
     encryptionKey,
     baseUrl,
     staticDir: staticDir === undefined || staticDir.length === 0 ? null : staticDir,
-    exposeClaudeCodeAliases,
     bodyLoggingAllowed,
     logFile: logFile === undefined || logFile.length === 0 ? null : logFile
   };
@@ -2140,13 +2138,31 @@ var anthropicAdapter = {
     };
   }
 };
-// packages/providers/src/kimi/decode.ts
-var FINISH = {
+// packages/providers/src/custom/decode.ts
+var CHAT_FINISH = {
   stop: "endTurn",
   length: "maxTokens",
   tool_calls: "toolUse",
   content_filter: "contentFilter"
 };
+function reasoningText(delta) {
+  if (typeof delta.reasoning === "string" && delta.reasoning.length > 0)
+    return delta.reasoning;
+  if (typeof delta.reasoning_content === "string" && delta.reasoning_content.length > 0) {
+    return delta.reasoning_content;
+  }
+  if (!Array.isArray(delta.reasoning_details))
+    return "";
+  return delta.reasoning_details.flatMap((entry) => {
+    if (entry === null || typeof entry !== "object")
+      return [];
+    if (typeof entry.text === "string" && entry.text.length > 0)
+      return [entry.text];
+    if (typeof entry.summary === "string" && entry.summary.length > 0)
+      return [entry.summary];
+    return [];
+  }).join("");
+}
 function json2(data) {
   try {
     const v = JSON.parse(data);
@@ -2155,7 +2171,7 @@ function json2(data) {
     return null;
   }
 }
-async function* decodeChat(messages) {
+async function* decodeCustomChat(messages) {
   let started = false;
   let done = false;
   let stopReason = "endTurn";
@@ -2184,6 +2200,21 @@ async function* decodeChat(messages) {
     if (!choice)
       continue;
     const delta = choice.delta ?? {};
+    const reasoning = reasoningText(delta);
+    if (reasoning.length > 0) {
+      if (openKind !== "thinking") {
+        if (openKind !== undefined)
+          yield { type: "blockEnd", index: openIndex };
+        openKind = "thinking";
+        openIndex = nextIndex++;
+        yield { type: "blockStart", index: openIndex, block: { type: "thinking" } };
+      }
+      yield {
+        type: "blockDelta",
+        index: openIndex,
+        delta: { type: "thinking", text: reasoning }
+      };
+    }
     if (typeof delta.content === "string" && delta.content.length > 0) {
       if (openKind !== "text") {
         if (openKind !== undefined)
@@ -2224,7 +2255,7 @@ async function* decodeChat(messages) {
       }
     }
     if (typeof choice.finish_reason === "string") {
-      stopReason = FINISH[choice.finish_reason] ?? "endTurn";
+      stopReason = CHAT_FINISH[choice.finish_reason] ?? "endTurn";
     }
   }
   if (done) {
@@ -2240,110 +2271,7 @@ async function* decodeChat(messages) {
     };
   }
 }
-
-// packages/providers/src/kimi/wire.ts
-function encodeToolChoice2(c) {
-  switch (c.type) {
-    case "auto":
-      return "auto";
-    case "any":
-      return "required";
-    case "none":
-      return "none";
-    case "tool":
-      return { type: "function", function: { name: c.name } };
-  }
-}
-function toChatWire(req, model, vendor = "kimi") {
-  const degradations = [];
-  const note2 = (d) => {
-    if (!degradations.includes(d))
-      degradations.push(d);
-  };
-  if (req.betas?.includes(CONTEXT_1M_BETA))
-    note2("kimi:context-1m-dropped");
-  const messages = [];
-  const system = req.system?.flatMap((b) => b.type === "text" ? [b.text] : []).join(`
-
-`);
-  if (system !== undefined && system.length > 0)
-    messages.push({ role: "system", content: system });
-  for (const message of req.messages) {
-    const text = [];
-    const toolCalls = [];
-    for (const block of message.content) {
-      switch (block.type) {
-        case "text":
-          text.push(block.text);
-          break;
-        case "image":
-          note2("kimi:images-dropped");
-          break;
-        case "thinking":
-          note2("kimi:thinking-dropped");
-          break;
-        case "toolUse":
-          toolCalls.push({
-            id: block.id,
-            type: "function",
-            function: { name: block.name, arguments: JSON.stringify(block.input) }
-          });
-          break;
-        case "toolResult":
-          messages.push({
-            role: "tool",
-            tool_call_id: block.toolUseId,
-            content: block.content
-          });
-          break;
-        case "anthropicNative":
-          note2("kimi:anthropic-native-block-dropped");
-          break;
-      }
-    }
-    if (toolCalls.length > 0) {
-      messages.push({
-        role: message.role,
-        content: text.length > 0 ? text.join(`
-`) : null,
-        tool_calls: toolCalls
-      });
-    } else if (text.length > 0) {
-      messages.push({ role: message.role, content: text.join(`
-`) });
-    }
-  }
-  const body = {
-    model,
-    messages,
-    stream: req.stream,
-    stream_options: { include_usage: true }
-  };
-  if (req.maxTokens !== undefined)
-    body.max_tokens = req.maxTokens;
-  if (req.temperature !== undefined)
-    body.temperature = req.temperature;
-  if (req.stopSequences !== undefined)
-    body.stop = req.stopSequences;
-  if (req.tools !== undefined) {
-    const custom = req.tools.filter((t) => t.provider === "custom");
-    if (custom.length !== req.tools.length)
-      note2("kimi:anthropic-tool-dropped");
-    body.tools = custom.map((t) => ({
-      type: "function",
-      function: { name: t.name, description: t.description, parameters: t.inputSchema }
-    }));
-  }
-  if (req.toolChoice !== undefined)
-    body.tool_choice = encodeToolChoice2(req.toolChoice);
-  if (req.reasoning !== undefined)
-    note2("kimi:reasoning-dropped");
-  Object.assign(body, req.vendor?.[vendor] ?? {});
-  return { body, degradations };
-}
-
-// packages/providers/src/openai/decode.ts
-var ERROR_CODE = {
+var RESPONSES_ERROR_CODE = {
   rate_limit_exceeded: "RATE_LIMIT",
   insufficient_quota: "QUOTA_EXHAUSTED",
   invalid_api_key: "AUTH",
@@ -2351,15 +2279,7 @@ var ERROR_CODE = {
   context_length_exceeded: "BAD_REQUEST",
   content_policy_violation: "CONTENT_FILTER"
 };
-function json3(data) {
-  try {
-    const v = JSON.parse(data);
-    return typeof v === "object" && v !== null ? v : null;
-  } catch {
-    return null;
-  }
-}
-async function* decodeResponses(messages) {
+async function* decodeCustomResponses(messages) {
   const indices = new Map;
   let next = 0;
   const irIndex = (outputIndex, contentIndex = 0) => {
@@ -2375,7 +2295,7 @@ async function* decodeResponses(messages) {
   let terminal = false;
   const ownsBlock = new Set;
   for await (const msg of messages) {
-    const d = json3(msg.data);
+    const d = json2(msg.data);
     if (d === null)
       continue;
     switch (msg.event) {
@@ -2467,7 +2387,7 @@ async function* decodeResponses(messages) {
       case "error": {
         terminal = true;
         const err = d.response?.error ?? d.error ?? {};
-        const code = ERROR_CODE[String(err.code ?? err.type)] ?? "UPSTREAM";
+        const code = RESPONSES_ERROR_CODE[String(err.code ?? err.type)] ?? "UPSTREAM";
         yield {
           type: "error",
           code,
@@ -2490,8 +2410,20 @@ async function* decodeResponses(messages) {
   }
 }
 
-// packages/providers/src/openai/wire.ts
-function encodeToolChoice3(c) {
+// packages/providers/src/custom/wire.ts
+function encodeChatToolChoice(c) {
+  switch (c.type) {
+    case "auto":
+      return "auto";
+    case "any":
+      return "required";
+    case "none":
+      return "none";
+    case "tool":
+      return { type: "function", function: { name: c.name } };
+  }
+}
+function encodeResponsesToolChoice(c) {
   switch (c.type) {
     case "auto":
       return "auto";
@@ -2503,20 +2435,115 @@ function encodeToolChoice3(c) {
       return { type: "function", name: c.name };
   }
 }
-function toResponsesWire(req, model, opts = { oauth: false }) {
+function customEffort(reasoning) {
+  if (reasoning === undefined || reasoning.mode !== "adaptive")
+    return;
+  return reasoning.effort ?? "medium";
+}
+function toCustomChatWire(req, model) {
   const degradations = [];
-  const input = [];
   const note2 = (d) => {
     if (!degradations.includes(d))
       degradations.push(d);
   };
   if (req.betas?.includes(CONTEXT_1M_BETA))
-    note2("openai:context-1m-dropped");
+    note2("custom:context-1m-dropped");
+  const messages = [];
+  const system = req.system?.flatMap((b) => b.type === "text" ? [b.text] : []).join(`
+
+`);
+  if (system !== undefined && system.length > 0)
+    messages.push({ role: "system", content: system });
+  for (const message of req.messages) {
+    const text = [];
+    const toolCalls = [];
+    for (const block of message.content) {
+      switch (block.type) {
+        case "text":
+          text.push(block.text);
+          break;
+        case "image":
+          note2("custom:images-dropped");
+          break;
+        case "thinking":
+          note2("custom:thinking-dropped");
+          break;
+        case "toolUse":
+          toolCalls.push({
+            id: block.id,
+            type: "function",
+            function: { name: block.name, arguments: JSON.stringify(block.input) }
+          });
+          break;
+        case "toolResult":
+          messages.push({
+            role: "tool",
+            tool_call_id: block.toolUseId,
+            content: block.content
+          });
+          break;
+        case "anthropicNative":
+          note2("custom:anthropic-native-block-dropped");
+          break;
+      }
+    }
+    if (toolCalls.length > 0) {
+      messages.push({
+        role: message.role,
+        content: text.length > 0 ? text.join(`
+`) : null,
+        tool_calls: toolCalls
+      });
+    } else if (text.length > 0) {
+      messages.push({ role: message.role, content: text.join(`
+`) });
+    }
+  }
+  const body = {
+    model,
+    messages,
+    stream: req.stream,
+    stream_options: { include_usage: true }
+  };
+  if (req.maxTokens !== undefined)
+    body.max_tokens = req.maxTokens;
+  if (req.temperature !== undefined)
+    body.temperature = req.temperature;
+  if (req.stopSequences !== undefined)
+    body.stop = req.stopSequences;
+  if (req.tools !== undefined) {
+    const portable = req.tools.filter((t) => t.provider === "custom");
+    if (portable.length !== req.tools.length)
+      note2("custom:anthropic-tool-dropped");
+    body.tools = portable.map((t) => ({
+      type: "function",
+      function: { name: t.name, description: t.description, parameters: t.inputSchema }
+    }));
+  }
+  if (req.toolChoice !== undefined)
+    body.tool_choice = encodeChatToolChoice(req.toolChoice);
+  const effort = customEffort(req.reasoning);
+  if (effort !== undefined)
+    body.reasoning_effort = effort;
+  else if (req.reasoning?.mode === "budget")
+    note2("custom:reasoning-budget-dropped");
+  Object.assign(body, req.vendor?.openai ?? {});
+  return { body, degradations };
+}
+function toCustomResponsesWire(req, model) {
+  const degradations = [];
+  const note2 = (d) => {
+    if (!degradations.includes(d))
+      degradations.push(d);
+  };
+  const input = [];
+  if (req.betas?.includes(CONTEXT_1M_BETA))
+    note2("custom:context-1m-dropped");
   for (const message of req.messages) {
     const parts = [];
     const inlined = message.role === "system";
     if (inlined)
-      note2("openai:system-turn-inlined");
+      note2("custom:system-turn-inlined");
     const role = inlined ? "user" : message.role;
     const flush = () => {
       if (parts.length === 0)
@@ -2541,9 +2568,7 @@ ${block.text}
           });
           break;
         case "thinking":
-          if (!degradations.includes("openai:thinking-dropped")) {
-            note2("openai:thinking-dropped");
-          }
+          note2("custom:thinking-dropped");
           break;
         case "toolUse":
           flush();
@@ -2563,7 +2588,7 @@ ${block.text}
           });
           break;
         case "anthropicNative":
-          note2("openai:anthropic-native-block-dropped");
+          note2("custom:anthropic-native-block-dropped");
           break;
       }
     }
@@ -2575,23 +2600,15 @@ ${block.text}
 `);
   if (instructions !== undefined && instructions.length > 0)
     body.instructions = instructions;
-  if (req.maxTokens !== undefined) {
-    if (opts.oauth)
-      note2("openai:max-tokens-dropped");
-    else
-      body.max_output_tokens = req.maxTokens;
-  }
-  if (req.temperature !== undefined) {
-    if (opts.oauth)
-      note2("openai:temperature-dropped");
-    else
-      body.temperature = req.temperature;
-  }
+  if (req.maxTokens !== undefined)
+    body.max_output_tokens = req.maxTokens;
+  if (req.temperature !== undefined)
+    body.temperature = req.temperature;
   if (req.tools !== undefined) {
-    const custom = req.tools.filter((t) => t.provider === "custom");
-    if (custom.length !== req.tools.length)
-      note2("openai:anthropic-tool-dropped");
-    body.tools = custom.map((t) => ({
+    const portable = req.tools.filter((t) => t.provider === "custom");
+    if (portable.length !== req.tools.length)
+      note2("custom:anthropic-tool-dropped");
+    body.tools = portable.map((t) => ({
       type: "function",
       name: t.name,
       description: t.description,
@@ -2599,20 +2616,12 @@ ${block.text}
     }));
   }
   if (req.toolChoice !== undefined)
-    body.tool_choice = encodeToolChoice3(req.toolChoice);
-  if (req.reasoning !== undefined && req.reasoning.mode !== "off") {
-    const effort = req.reasoning.mode === "adaptive" ? req.reasoning.effort ?? "medium" : "medium";
-    if (effort === "xhigh" || effort === "max") {
-      degradations.push("openai:reasoning-effort-clamped");
-    }
-    body.reasoning = {
-      effort: effort === "xhigh" || effort === "max" ? "high" : effort,
-      summary: "auto"
-    };
-    if (req.reasoning.mode === "budget") {
-      degradations.push("openai:reasoning-budget-dropped");
-    }
-  }
+    body.tool_choice = encodeResponsesToolChoice(req.toolChoice);
+  const effort = customEffort(req.reasoning);
+  if (effort !== undefined)
+    body.reasoning = { effort, summary: "auto" };
+  else if (req.reasoning?.mode === "budget")
+    note2("custom:reasoning-budget-dropped");
   Object.assign(body, req.vendor?.openai ?? {});
   return { body, degradations };
 }
@@ -2623,7 +2632,13 @@ function metadata(data) {
   if (typeof origin !== "string" || protocol !== "chat_completions" && protocol !== "responses") {
     throw new GatewayError("BAD_REQUEST", "custom credential has invalid endpoint metadata");
   }
-  return { origin, protocol };
+  const basePath = typeof data.basePath === "string" ? data.basePath : "";
+  return { origin, basePath, protocol };
+}
+function endpointUrl(origin, basePath, protocol) {
+  const suffix = protocol === "chat_completions" ? "chat/completions" : "responses";
+  const base = `${origin}${basePath}`.replace(/\/+$/, "");
+  return base.endsWith("/v1") ? `${base}/${suffix}` : `${base}/v1/${suffix}`;
 }
 var customAdapter = {
   id: "custom",
@@ -2633,15 +2648,15 @@ var customAdapter = {
     if (apiKey === null) {
       throw new GatewayError("AUTH", "custom credential has no API key", { provider: "custom" });
     }
-    const { origin, protocol } = metadata(req.credentials.providerData);
-    const encoded = protocol === "chat_completions" ? toChatWire(req.request, req.model, "openai") : toResponsesWire(req.request, req.model);
+    const { origin, basePath, protocol } = metadata(req.credentials.providerData);
+    const encoded = protocol === "chat_completions" ? toCustomChatWire(req.request, req.model) : toCustomResponsesWire(req.request, req.model);
     const headers = [
       ["Content-Type", "application/json"],
       ["Authorization", `Bearer ${apiKey}`]
     ];
     const res = await req.http({
       provider: "custom",
-      url: `${origin}/v1/${protocol === "chat_completions" ? "chat/completions" : "responses"}`,
+      url: endpointUrl(origin, basePath, protocol),
       method: "POST",
       headers,
       body: JSON.stringify({ ...encoded.body, stream: true }),
@@ -2653,8 +2668,8 @@ var customAdapter = {
       throw new GatewayError("UPSTREAM", "empty response body", { provider: "custom" });
     }
     return {
-      events: protocol === "chat_completions" ? decodeChat(parseSse(res.body)) : decodeResponses(parseSse(res.body)),
-      degradations: encoded.degradations.map((value) => value.replace(protocol === "chat_completions" ? /^kimi:/ : /^openai:/, "custom:"))
+      events: protocol === "chat_completions" ? decodeCustomChat(parseSse(res.body)) : decodeCustomResponses(parseSse(res.body)),
+      degradations: encoded.degradations
     };
   }
 };
@@ -2673,7 +2688,7 @@ function grokDeviceHeaders(providerData) {
 import { createHash as createHash2 } from "crypto";
 
 // packages/providers/src/grok/decode.ts
-var ERROR_CODE2 = {
+var ERROR_CODE = {
   rate_limit_exceeded: "RATE_LIMIT",
   insufficient_quota: "QUOTA_EXHAUSTED",
   invalid_api_key: "AUTH",
@@ -2707,7 +2722,7 @@ var KNOWN_EVENTS2 = new Set([
   "response.failed",
   "error"
 ]);
-function json4(data) {
+function json3(data) {
   try {
     const v = JSON.parse(data);
     return typeof v === "object" && v !== null ? v : null;
@@ -2742,7 +2757,7 @@ async function* decodeGrokResponses(messages) {
       };
       return;
     }
-    const d = json4(msg.data);
+    const d = json3(msg.data);
     if (d === null)
       continue;
     switch (msg.event) {
@@ -2835,7 +2850,7 @@ async function* decodeGrokResponses(messages) {
       case "error": {
         terminal = true;
         const err = d.response?.error ?? d.error ?? {};
-        const code = ERROR_CODE2[String(err.code ?? err.type)] ?? "UPSTREAM";
+        const code = ERROR_CODE[String(err.code ?? err.type)] ?? "UPSTREAM";
         yield {
           type: "error",
           code,
@@ -2861,7 +2876,7 @@ async function* decodeGrokResponses(messages) {
 // packages/providers/src/grok/wire.ts
 import { createHash } from "crypto";
 var MAX_TOOLS = 200;
-function encodeToolChoice4(c) {
+function encodeToolChoice2(c) {
   switch (c.type) {
     case "auto":
       return "auto";
@@ -2972,12 +2987,14 @@ ${block.text}
     }));
   }
   if (req.toolChoice !== undefined)
-    body.tool_choice = encodeToolChoice4(req.toolChoice);
+    body.tool_choice = encodeToolChoice2(req.toolChoice);
   if (req.reasoning !== undefined && req.reasoning.mode !== "off") {
-    const effort = req.reasoning.mode === "adaptive" ? req.reasoning.effort ?? "medium" : "medium";
-    body.reasoning = { effort, summary: "concise" };
-    if (req.reasoning.mode === "budget")
+    if (req.reasoning.mode === "budget") {
       note2("grok:reasoning-budget-dropped");
+    } else {
+      const effort = req.reasoning.effort ?? "medium";
+      body.reasoning = { effort, summary: "concise" };
+    }
   }
   Object.assign(body, req.vendor?.grok ?? {});
   return { body, degradations };
@@ -3135,13 +3152,13 @@ function hasHeader(req, lowerName) {
   return req.headers.some(([name]) => name.toLowerCase() === lowerName);
 }
 // packages/providers/src/kilo/decode.ts
-var FINISH2 = {
+var FINISH = {
   stop: "endTurn",
   length: "maxTokens",
   tool_calls: "toolUse",
   content_filter: "contentFilter"
 };
-function reasoningText(delta) {
+function reasoningText2(delta) {
   if (typeof delta.reasoning === "string" && delta.reasoning.length > 0)
     return delta.reasoning;
   if (typeof delta.reasoning_content === "string" && delta.reasoning_content.length > 0) {
@@ -3159,7 +3176,7 @@ function reasoningText(delta) {
     return [];
   }).join("");
 }
-function json5(data) {
+function json4(data) {
   try {
     const v = JSON.parse(data);
     return typeof v === "object" && v !== null ? v : null;
@@ -3181,7 +3198,7 @@ async function* decodeKiloChat(messages) {
       done = true;
       break;
     }
-    const d = json5(msg.data);
+    const d = json4(msg.data);
     if (d === null)
       continue;
     if (!started && (d.id !== undefined || d.model !== undefined)) {
@@ -3196,7 +3213,7 @@ async function* decodeKiloChat(messages) {
     if (!choice)
       continue;
     const delta = choice.delta ?? {};
-    const reasoning = reasoningText(delta);
+    const reasoning = reasoningText2(delta);
     if (reasoning.length > 0) {
       if (openKind !== "thinking") {
         if (openKind !== undefined)
@@ -3252,7 +3269,7 @@ async function* decodeKiloChat(messages) {
       }
     }
     if (typeof choice.finish_reason === "string") {
-      stopReason = FINISH2[choice.finish_reason] ?? "endTurn";
+      stopReason = FINISH[choice.finish_reason] ?? "endTurn";
     }
   }
   if (done) {
@@ -3270,7 +3287,7 @@ async function* decodeKiloChat(messages) {
 }
 
 // packages/providers/src/kilo/wire.ts
-function encodeToolChoice5(c) {
+function encodeToolChoice3(c) {
   switch (c.type) {
     case "auto":
       return "auto";
@@ -3376,125 +3393,594 @@ function toKiloWire(req, model) {
   if (req.tools !== undefined) {
     const custom = req.tools.filter((t) => t.provider === "custom");
     if (custom.length !== req.tools.length)
-      note2("kilo:anthropic-tool-dropped");
+      note2("kilo:anthropic-tool-dropped");
+    body.tools = custom.map((t) => ({
+      type: "function",
+      function: { name: t.name, description: t.description, parameters: t.inputSchema }
+    }));
+  }
+  if (req.toolChoice !== undefined)
+    body.tool_choice = encodeToolChoice3(req.toolChoice);
+  if (req.reasoning !== undefined && req.reasoning.mode !== "off") {
+    if (req.reasoning.mode === "budget") {
+      body.reasoning = { max_tokens: req.reasoning.budgetTokens };
+    } else {
+      body.reasoning = { effort: req.reasoning.effort ?? "medium" };
+    }
+  }
+  Object.assign(body, req.vendor?.kilo ?? {});
+  return { body, degradations };
+}
+
+// packages/providers/src/kilo/index.ts
+var OAUTH_URL = "https://api.kilo.ai/api/openrouter/chat/completions";
+var API_URL2 = "https://api.kilo.ai/api/gateway/chat/completions";
+function organizationHeaders(providerData) {
+  const orgId = providerData.orgId;
+  if (typeof orgId !== "string" || orgId.length === 0)
+    return [];
+  return [["X-Kilocode-OrganizationID", orgId]];
+}
+var kiloAdapter = {
+  id: "kilo",
+  capabilities: PROVIDER_CAPABILITIES.kilo,
+  async send(req) {
+    const oauth = req.credentials.accessToken !== null;
+    const token = req.credentials.accessToken ?? req.credentials.apiKey;
+    if (token === null) {
+      throw new GatewayError("AUTH", "kilo credential has no token", { provider: "kilo" });
+    }
+    const { body, degradations } = toKiloWire(req.request, req.model);
+    const protocol = [
+      ["Content-Type", "application/json"],
+      ["Authorization", `Bearer ${token}`],
+      ...organizationHeaders(req.credentials.providerData)
+    ];
+    const profile = PROFILES.kilo;
+    const headers = orderHeaders(mergeHeaders(profile.headers, protocol), profile.order);
+    const res = await req.http({
+      provider: "kilo",
+      url: oauth ? OAUTH_URL : API_URL2,
+      method: "POST",
+      headers,
+      body: JSON.stringify(orderFields({ ...body, stream: true }, BODY_ORDER.kilo)),
+      signal: req.signal
+    });
+    if (res.status < 200 || res.status >= 300)
+      throw await httpError(res, "kilo");
+    if (res.body === null)
+      throw new GatewayError("UPSTREAM", "empty response body", { provider: "kilo" });
+    return { events: decodeKiloChat(parseSse(res.body)), degradations };
+  }
+};
+// packages/providers/src/kimi/device.ts
+import { randomUUID as randomUUID2 } from "crypto";
+function mintKimiDevice() {
+  return {
+    deviceId: randomUUID2(),
+    deviceName: "MacBook-Pro",
+    deviceModel: "MacBookPro18,3",
+    osVersion: "15.3.1"
+  };
+}
+function kimiDeviceHeaders(providerData) {
+  const deviceId = providerData.deviceId;
+  if (typeof deviceId !== "string" || deviceId.length === 0)
+    return [];
+  const str = (v) => typeof v === "string" && v.length > 0 ? v : "unknown";
+  return [
+    ["X-Msh-Device-Id", deviceId],
+    ["X-Msh-Device-Name", str(providerData.deviceName)],
+    ["X-Msh-Device-Model", str(providerData.deviceModel)],
+    ["X-Msh-Os-Version", str(providerData.osVersion)]
+  ];
+}
+// packages/providers/src/kimi/decode.ts
+var FINISH2 = {
+  stop: "endTurn",
+  length: "maxTokens",
+  tool_calls: "toolUse",
+  content_filter: "contentFilter"
+};
+function json5(data) {
+  try {
+    const v = JSON.parse(data);
+    return typeof v === "object" && v !== null ? v : null;
+  } catch {
+    return null;
+  }
+}
+async function* decodeChat(messages) {
+  let started = false;
+  let done = false;
+  let stopReason = "endTurn";
+  let usage = { inputTokens: 0, outputTokens: 0, cacheReadTokens: 0, cacheWriteTokens: 0 };
+  const toolIndex = new Map;
+  let nextIndex = 0;
+  let openKind;
+  let openIndex = 0;
+  for await (const msg of messages) {
+    if (msg.data === "[DONE]") {
+      done = true;
+      break;
+    }
+    const d = json5(msg.data);
+    if (d === null)
+      continue;
+    if (!started && (d.id !== undefined || d.model !== undefined)) {
+      started = true;
+      yield { type: "start", id: String(d.id ?? ""), model: String(d.model ?? "") };
+    }
+    if (d.usage) {
+      const details = d.usage.prompt_tokens_details;
+      usage = usageFromPromptTotal(d.usage.prompt_tokens ?? 0, d.usage.completion_tokens ?? 0, details?.cached_tokens ?? d.usage.prompt_cache_hit_tokens ?? 0, details?.cache_creation_tokens ?? details?.cache_write_tokens ?? 0);
+    }
+    const choice = d.choices?.[0];
+    if (!choice)
+      continue;
+    const delta = choice.delta ?? {};
+    if (typeof delta.content === "string" && delta.content.length > 0) {
+      if (openKind !== "text") {
+        if (openKind !== undefined)
+          yield { type: "blockEnd", index: openIndex };
+        openKind = "text";
+        openIndex = nextIndex++;
+        yield { type: "blockStart", index: openIndex, block: { type: "text" } };
+      }
+      yield {
+        type: "blockDelta",
+        index: openIndex,
+        delta: { type: "text", text: delta.content }
+      };
+    }
+    for (const call of delta.tool_calls ?? []) {
+      const wireIndex = call.index ?? 0;
+      let index = toolIndex.get(wireIndex);
+      if (index === undefined) {
+        if (openKind !== undefined)
+          yield { type: "blockEnd", index: openIndex };
+        index = nextIndex++;
+        toolIndex.set(wireIndex, index);
+        openKind = "tool";
+        openIndex = index;
+        yield {
+          type: "blockStart",
+          index,
+          block: {
+            type: "toolUse",
+            id: String(call.id ?? `call_${wireIndex}`),
+            name: String(call.function?.name ?? "")
+          }
+        };
+      }
+      const args = call.function?.arguments;
+      if (typeof args === "string" && args.length > 0) {
+        yield { type: "blockDelta", index, delta: { type: "toolJson", partial: args } };
+      }
+    }
+    if (typeof choice.finish_reason === "string") {
+      stopReason = FINISH2[choice.finish_reason] ?? "endTurn";
+    }
+  }
+  if (done) {
+    if (openKind !== undefined)
+      yield { type: "blockEnd", index: openIndex };
+    yield { type: "end", stopReason, usage };
+  } else {
+    yield {
+      type: "error",
+      code: "UPSTREAM",
+      message: "upstream stream ended before [DONE]",
+      retryable: RETRYABLE.UPSTREAM
+    };
+  }
+}
+
+// packages/providers/src/kimi/wire.ts
+function encodeToolChoice4(c) {
+  switch (c.type) {
+    case "auto":
+      return "auto";
+    case "any":
+      return "required";
+    case "none":
+      return "none";
+    case "tool":
+      return { type: "function", function: { name: c.name } };
+  }
+}
+function toChatWire(req, model, vendor = "kimi") {
+  const degradations = [];
+  const note2 = (d) => {
+    if (!degradations.includes(d))
+      degradations.push(d);
+  };
+  if (req.betas?.includes(CONTEXT_1M_BETA))
+    note2("kimi:context-1m-dropped");
+  const messages = [];
+  const system = req.system?.flatMap((b) => b.type === "text" ? [b.text] : []).join(`
+
+`);
+  if (system !== undefined && system.length > 0)
+    messages.push({ role: "system", content: system });
+  for (const message of req.messages) {
+    const text = [];
+    const toolCalls = [];
+    for (const block of message.content) {
+      switch (block.type) {
+        case "text":
+          text.push(block.text);
+          break;
+        case "image":
+          note2("kimi:images-dropped");
+          break;
+        case "thinking":
+          note2("kimi:thinking-dropped");
+          break;
+        case "toolUse":
+          toolCalls.push({
+            id: block.id,
+            type: "function",
+            function: { name: block.name, arguments: JSON.stringify(block.input) }
+          });
+          break;
+        case "toolResult":
+          messages.push({
+            role: "tool",
+            tool_call_id: block.toolUseId,
+            content: block.content
+          });
+          break;
+        case "anthropicNative":
+          note2("kimi:anthropic-native-block-dropped");
+          break;
+      }
+    }
+    if (toolCalls.length > 0) {
+      messages.push({
+        role: message.role,
+        content: text.length > 0 ? text.join(`
+`) : null,
+        tool_calls: toolCalls
+      });
+    } else if (text.length > 0) {
+      messages.push({ role: message.role, content: text.join(`
+`) });
+    }
+  }
+  const body = {
+    model,
+    messages,
+    stream: req.stream,
+    stream_options: { include_usage: true }
+  };
+  if (req.maxTokens !== undefined)
+    body.max_tokens = req.maxTokens;
+  if (req.temperature !== undefined)
+    body.temperature = req.temperature;
+  if (req.stopSequences !== undefined)
+    body.stop = req.stopSequences;
+  if (req.tools !== undefined) {
+    const custom = req.tools.filter((t) => t.provider === "custom");
+    if (custom.length !== req.tools.length)
+      note2("kimi:anthropic-tool-dropped");
+    body.tools = custom.map((t) => ({
+      type: "function",
+      function: { name: t.name, description: t.description, parameters: t.inputSchema }
+    }));
+  }
+  if (req.toolChoice !== undefined)
+    body.tool_choice = encodeToolChoice4(req.toolChoice);
+  if (req.reasoning !== undefined)
+    note2("kimi:reasoning-dropped");
+  Object.assign(body, req.vendor?.[vendor] ?? {});
+  return { body, degradations };
+}
+
+// packages/providers/src/kimi/index.ts
+var BASE_URL2 = "https://api.kimi.com/coding/v1/chat/completions";
+var kimiAdapter = {
+  id: "kimi",
+  capabilities: PROVIDER_CAPABILITIES.kimi,
+  async send(req) {
+    const { body, degradations } = toChatWire(req.request, req.model);
+    const token = req.credentials.accessToken ?? req.credentials.apiKey;
+    if (token === null) {
+      throw new GatewayError("AUTH", "kimi credential has no token", { provider: "kimi" });
+    }
+    const protocol = [
+      ["Content-Type", "application/json"],
+      ["Accept", "text/event-stream"],
+      ["Authorization", `Bearer ${token}`],
+      ...kimiDeviceHeaders(req.credentials.providerData)
+    ];
+    const profile = PROFILES.kimi;
+    const headers = orderHeaders(mergeHeaders(profile.headers, protocol), profile.order);
+    const res = await req.http({
+      provider: "kimi",
+      url: BASE_URL2,
+      method: "POST",
+      headers,
+      body: JSON.stringify(orderFields({ ...body, stream: true }, BODY_ORDER.kimi)),
+      signal: req.signal
+    });
+    if (res.status < 200 || res.status >= 300)
+      throw await httpError(res, "kimi");
+    if (res.body === null)
+      throw new GatewayError("UPSTREAM", "empty response body", { provider: "kimi" });
+    return { events: decodeChat(parseSse(res.body)), degradations };
+  }
+};
+// packages/providers/src/openai/decode.ts
+var ERROR_CODE2 = {
+  rate_limit_exceeded: "RATE_LIMIT",
+  insufficient_quota: "QUOTA_EXHAUSTED",
+  invalid_api_key: "AUTH",
+  server_error: "UPSTREAM",
+  context_length_exceeded: "BAD_REQUEST",
+  content_policy_violation: "CONTENT_FILTER"
+};
+function json6(data) {
+  try {
+    const v = JSON.parse(data);
+    return typeof v === "object" && v !== null ? v : null;
+  } catch {
+    return null;
+  }
+}
+async function* decodeResponses(messages) {
+  const indices = new Map;
+  let next = 0;
+  const irIndex = (outputIndex, contentIndex = 0) => {
+    const key = `${outputIndex}:${contentIndex}`;
+    const existing = indices.get(key);
+    if (existing !== undefined)
+      return existing;
+    const assigned = next++;
+    indices.set(key, assigned);
+    return assigned;
+  };
+  let sawToolCall = false;
+  let terminal = false;
+  const ownsBlock = new Set;
+  for await (const msg of messages) {
+    const d = json6(msg.data);
+    if (d === null)
+      continue;
+    switch (msg.event) {
+      case "response.created":
+        yield {
+          type: "start",
+          id: String(d.response?.id ?? ""),
+          model: String(d.response?.model ?? "")
+        };
+        break;
+      case "response.output_item.added": {
+        const item = d.item ?? {};
+        if (item.type === "reasoning") {
+          ownsBlock.add(d.output_index ?? 0);
+          yield {
+            type: "blockStart",
+            index: irIndex(d.output_index ?? 0),
+            block: { type: "thinking" }
+          };
+        } else if (item.type === "function_call") {
+          sawToolCall = true;
+          ownsBlock.add(d.output_index ?? 0);
+          yield {
+            type: "blockStart",
+            index: irIndex(d.output_index ?? 0),
+            block: { type: "toolUse", id: String(item.call_id), name: String(item.name) }
+          };
+        }
+        break;
+      }
+      case "response.content_part.added":
+        if (d.part?.type === "output_text") {
+          yield {
+            type: "blockStart",
+            index: irIndex(d.output_index ?? 0, d.content_index ?? 0),
+            block: { type: "text" }
+          };
+        }
+        break;
+      case "response.output_text.delta":
+        yield {
+          type: "blockDelta",
+          index: irIndex(d.output_index ?? 0, d.content_index ?? 0),
+          delta: { type: "text", text: String(d.delta ?? "") }
+        };
+        break;
+      case "response.reasoning_summary_text.delta":
+        yield {
+          type: "blockDelta",
+          index: irIndex(d.output_index ?? 0),
+          delta: { type: "thinking", text: String(d.delta ?? "") }
+        };
+        break;
+      case "response.function_call_arguments.delta":
+        yield {
+          type: "blockDelta",
+          index: irIndex(d.output_index ?? 0),
+          delta: { type: "toolJson", partial: String(d.delta ?? "") }
+        };
+        break;
+      case "response.content_part.done":
+        yield { type: "blockEnd", index: irIndex(d.output_index ?? 0, d.content_index ?? 0) };
+        break;
+      case "response.output_item.done": {
+        const outputIndex = d.output_index ?? 0;
+        if (ownsBlock.delete(outputIndex)) {
+          yield { type: "blockEnd", index: irIndex(outputIndex) };
+        }
+        break;
+      }
+      case "response.completed":
+      case "response.incomplete": {
+        terminal = true;
+        const r = d.response ?? {};
+        const reason = r.incomplete_details?.reason;
+        let stopReason = sawToolCall ? "toolUse" : "endTurn";
+        if (reason === "max_output_tokens")
+          stopReason = "maxTokens";
+        else if (reason === "content_filter")
+          stopReason = "contentFilter";
+        yield {
+          type: "end",
+          stopReason,
+          usage: usageFromPromptTotal(r.usage?.input_tokens ?? 0, r.usage?.output_tokens ?? 0, r.usage?.input_tokens_details?.cached_tokens ?? r.usage?.prompt_tokens_details?.cached_tokens ?? 0)
+        };
+        break;
+      }
+      case "response.failed":
+      case "error": {
+        terminal = true;
+        const err = d.response?.error ?? d.error ?? {};
+        const code = ERROR_CODE2[String(err.code ?? err.type)] ?? "UPSTREAM";
+        yield {
+          type: "error",
+          code,
+          message: String(err.message ?? "upstream error"),
+          retryable: RETRYABLE[code]
+        };
+        break;
+      }
+      default:
+        break;
+    }
+  }
+  if (!terminal) {
+    yield {
+      type: "error",
+      code: "UPSTREAM",
+      message: "upstream stream ended before response completion",
+      retryable: RETRYABLE.UPSTREAM
+    };
+  }
+}
+
+// packages/providers/src/openai/wire.ts
+function encodeToolChoice5(c) {
+  switch (c.type) {
+    case "auto":
+      return "auto";
+    case "any":
+      return "required";
+    case "none":
+      return "none";
+    case "tool":
+      return { type: "function", name: c.name };
+  }
+}
+function toResponsesWire(req, model, opts = { oauth: false }) {
+  const degradations = [];
+  const input = [];
+  const note2 = (d) => {
+    if (!degradations.includes(d))
+      degradations.push(d);
+  };
+  if (req.betas?.includes(CONTEXT_1M_BETA))
+    note2("openai:context-1m-dropped");
+  for (const message of req.messages) {
+    const parts = [];
+    const inlined = message.role === "system";
+    if (inlined)
+      note2("openai:system-turn-inlined");
+    const role = inlined ? "user" : message.role;
+    const flush = () => {
+      if (parts.length === 0)
+        return;
+      input.push({ type: "message", role, content: [...parts] });
+      parts.length = 0;
+    };
+    for (const block of message.content) {
+      switch (block.type) {
+        case "text":
+          parts.push({
+            type: role === "assistant" ? "output_text" : "input_text",
+            text: inlined ? `<system-reminder>
+${block.text}
+</system-reminder>` : block.text
+          });
+          break;
+        case "image":
+          parts.push({
+            type: "input_image",
+            image_url: `data:${block.mediaType};base64,${block.data}`
+          });
+          break;
+        case "thinking":
+          if (!degradations.includes("openai:thinking-dropped")) {
+            note2("openai:thinking-dropped");
+          }
+          break;
+        case "toolUse":
+          flush();
+          input.push({
+            type: "function_call",
+            call_id: block.id,
+            name: block.name,
+            arguments: JSON.stringify(block.input)
+          });
+          break;
+        case "toolResult":
+          flush();
+          input.push({
+            type: "function_call_output",
+            call_id: block.toolUseId,
+            output: block.content
+          });
+          break;
+        case "anthropicNative":
+          note2("openai:anthropic-native-block-dropped");
+          break;
+      }
+    }
+    flush();
+  }
+  const body = { model, input, stream: req.stream, store: false };
+  const instructions = req.system?.flatMap((b) => b.type === "text" ? [b.text] : []).join(`
+
+`);
+  if (instructions !== undefined && instructions.length > 0)
+    body.instructions = instructions;
+  if (req.maxTokens !== undefined) {
+    if (opts.oauth)
+      note2("openai:max-tokens-dropped");
+    else
+      body.max_output_tokens = req.maxTokens;
+  }
+  if (req.temperature !== undefined) {
+    if (opts.oauth)
+      note2("openai:temperature-dropped");
+    else
+      body.temperature = req.temperature;
+  }
+  if (req.tools !== undefined) {
+    const custom = req.tools.filter((t) => t.provider === "custom");
+    if (custom.length !== req.tools.length)
+      note2("openai:anthropic-tool-dropped");
     body.tools = custom.map((t) => ({
       type: "function",
-      function: { name: t.name, description: t.description, parameters: t.inputSchema }
+      name: t.name,
+      description: t.description,
+      parameters: t.inputSchema
     }));
   }
   if (req.toolChoice !== undefined)
     body.tool_choice = encodeToolChoice5(req.toolChoice);
   if (req.reasoning !== undefined && req.reasoning.mode !== "off") {
     if (req.reasoning.mode === "budget") {
-      body.reasoning = { max_tokens: req.reasoning.budgetTokens };
+      degradations.push("openai:reasoning-budget-dropped");
     } else {
       const effort = req.reasoning.effort ?? "medium";
-      if (effort === "xhigh" || effort === "max")
-        note2("kilo:reasoning-effort-clamped");
-      body.reasoning = { effort: effort === "xhigh" || effort === "max" ? "high" : effort };
+      body.reasoning = { effort, summary: "auto" };
     }
   }
-  Object.assign(body, req.vendor?.kilo ?? {});
+  Object.assign(body, req.vendor?.openai ?? {});
   return { body, degradations };
 }
 
-// packages/providers/src/kilo/index.ts
-var OAUTH_URL = "https://api.kilo.ai/api/openrouter/chat/completions";
-var API_URL2 = "https://api.kilo.ai/api/gateway/chat/completions";
-function organizationHeaders(providerData) {
-  const orgId = providerData.orgId;
-  if (typeof orgId !== "string" || orgId.length === 0)
-    return [];
-  return [["X-Kilocode-OrganizationID", orgId]];
-}
-var kiloAdapter = {
-  id: "kilo",
-  capabilities: PROVIDER_CAPABILITIES.kilo,
-  async send(req) {
-    const oauth = req.credentials.accessToken !== null;
-    const token = req.credentials.accessToken ?? req.credentials.apiKey;
-    if (token === null) {
-      throw new GatewayError("AUTH", "kilo credential has no token", { provider: "kilo" });
-    }
-    const { body, degradations } = toKiloWire(req.request, req.model);
-    const protocol = [
-      ["Content-Type", "application/json"],
-      ["Authorization", `Bearer ${token}`],
-      ...organizationHeaders(req.credentials.providerData)
-    ];
-    const profile = PROFILES.kilo;
-    const headers = orderHeaders(mergeHeaders(profile.headers, protocol), profile.order);
-    const res = await req.http({
-      provider: "kilo",
-      url: oauth ? OAUTH_URL : API_URL2,
-      method: "POST",
-      headers,
-      body: JSON.stringify(orderFields({ ...body, stream: true }, BODY_ORDER.kilo)),
-      signal: req.signal
-    });
-    if (res.status < 200 || res.status >= 300)
-      throw await httpError(res, "kilo");
-    if (res.body === null)
-      throw new GatewayError("UPSTREAM", "empty response body", { provider: "kilo" });
-    return { events: decodeKiloChat(parseSse(res.body)), degradations };
-  }
-};
-// packages/providers/src/kimi/device.ts
-import { randomUUID as randomUUID2 } from "crypto";
-function mintKimiDevice() {
-  return {
-    deviceId: randomUUID2(),
-    deviceName: "MacBook-Pro",
-    deviceModel: "MacBookPro18,3",
-    osVersion: "15.3.1"
-  };
-}
-function kimiDeviceHeaders(providerData) {
-  const deviceId = providerData.deviceId;
-  if (typeof deviceId !== "string" || deviceId.length === 0)
-    return [];
-  const str = (v) => typeof v === "string" && v.length > 0 ? v : "unknown";
-  return [
-    ["X-Msh-Device-Id", deviceId],
-    ["X-Msh-Device-Name", str(providerData.deviceName)],
-    ["X-Msh-Device-Model", str(providerData.deviceModel)],
-    ["X-Msh-Os-Version", str(providerData.osVersion)]
-  ];
-}
-// packages/providers/src/kimi/index.ts
-var BASE_URL2 = "https://api.kimi.com/coding/v1/chat/completions";
-var kimiAdapter = {
-  id: "kimi",
-  capabilities: PROVIDER_CAPABILITIES.kimi,
-  async send(req) {
-    const { body, degradations } = toChatWire(req.request, req.model);
-    const token = req.credentials.accessToken ?? req.credentials.apiKey;
-    if (token === null) {
-      throw new GatewayError("AUTH", "kimi credential has no token", { provider: "kimi" });
-    }
-    const protocol = [
-      ["Content-Type", "application/json"],
-      ["Accept", "text/event-stream"],
-      ["Authorization", `Bearer ${token}`],
-      ...kimiDeviceHeaders(req.credentials.providerData)
-    ];
-    const profile = PROFILES.kimi;
-    const headers = orderHeaders(mergeHeaders(profile.headers, protocol), profile.order);
-    const res = await req.http({
-      provider: "kimi",
-      url: BASE_URL2,
-      method: "POST",
-      headers,
-      body: JSON.stringify(orderFields({ ...body, stream: true }, BODY_ORDER.kimi)),
-      signal: req.signal
-    });
-    if (res.status < 200 || res.status >= 300)
-      throw await httpError(res, "kimi");
-    if (res.body === null)
-      throw new GatewayError("UPSTREAM", "empty response body", { provider: "kimi" });
-    return { events: decodeChat(parseSse(res.body)), degradations };
-  }
-};
 // packages/providers/src/openai/index.ts
 var OAUTH_URL2 = "https://chatgpt.com/backend-api/codex/responses";
 var API_URL3 = "https://api.openai.com/v1/responses";
@@ -3897,7 +4383,7 @@ __export(exports_external, {
   ipv4: () => ipv42,
   ipv6: () => ipv62,
   iso: () => exports_iso,
-  json: () => json6,
+  json: () => json7,
   jwt: () => jwt,
   keyof: () => keyof,
   ksuid: () => ksuid2,
@@ -15338,29 +15824,29 @@ var formatMap = {
   regex: ""
 };
 var stringProcessor = (schema, ctx, _json, _params) => {
-  const json6 = _json;
-  json6.type = "string";
+  const json7 = _json;
+  json7.type = "string";
   const { minimum, maximum, format, patterns, contentEncoding } = schema._zod.bag;
   if (typeof minimum === "number")
-    json6.minLength = minimum;
+    json7.minLength = minimum;
   if (typeof maximum === "number")
-    json6.maxLength = maximum;
+    json7.maxLength = maximum;
   if (format) {
-    json6.format = formatMap[format] ?? format;
-    if (json6.format === "")
-      delete json6.format;
+    json7.format = formatMap[format] ?? format;
+    if (json7.format === "")
+      delete json7.format;
     if (format === "time") {
-      delete json6.format;
+      delete json7.format;
     }
   }
   if (contentEncoding)
-    json6.contentEncoding = contentEncoding;
+    json7.contentEncoding = contentEncoding;
   if (patterns && patterns.size > 0) {
     const regexes = [...patterns];
     if (regexes.length === 1)
-      json6.pattern = regexes[0].source;
+      json7.pattern = regexes[0].source;
     else if (regexes.length > 1) {
-      json6.allOf = [
+      json7.allOf = [
         ...regexes.map((regex) => ({
           ...ctx.target === "draft-07" || ctx.target === "draft-04" || ctx.target === "openapi-3.0" ? { type: "string" } : {},
           pattern: regex.source
@@ -15370,40 +15856,40 @@ var stringProcessor = (schema, ctx, _json, _params) => {
   }
 };
 var numberProcessor = (schema, ctx, _json, _params) => {
-  const json6 = _json;
+  const json7 = _json;
   const { minimum, maximum, format, multipleOf, exclusiveMaximum, exclusiveMinimum } = schema._zod.bag;
   if (typeof format === "string" && format.includes("int"))
-    json6.type = "integer";
+    json7.type = "integer";
   else
-    json6.type = "number";
+    json7.type = "number";
   const exMin = typeof exclusiveMinimum === "number" && exclusiveMinimum >= (minimum ?? Number.NEGATIVE_INFINITY);
   const exMax = typeof exclusiveMaximum === "number" && exclusiveMaximum <= (maximum ?? Number.POSITIVE_INFINITY);
   const legacy = ctx.target === "draft-04" || ctx.target === "openapi-3.0";
   if (exMin) {
     if (legacy) {
-      json6.minimum = exclusiveMinimum;
-      json6.exclusiveMinimum = true;
+      json7.minimum = exclusiveMinimum;
+      json7.exclusiveMinimum = true;
     } else {
-      json6.exclusiveMinimum = exclusiveMinimum;
+      json7.exclusiveMinimum = exclusiveMinimum;
     }
   } else if (typeof minimum === "number") {
-    json6.minimum = minimum;
+    json7.minimum = minimum;
   }
   if (exMax) {
     if (legacy) {
-      json6.maximum = exclusiveMaximum;
-      json6.exclusiveMaximum = true;
+      json7.maximum = exclusiveMaximum;
+      json7.exclusiveMaximum = true;
     } else {
-      json6.exclusiveMaximum = exclusiveMaximum;
+      json7.exclusiveMaximum = exclusiveMaximum;
     }
   } else if (typeof maximum === "number") {
-    json6.maximum = maximum;
+    json7.maximum = maximum;
   }
   if (typeof multipleOf === "number")
-    json6.multipleOf = multipleOf;
+    json7.multipleOf = multipleOf;
 };
-var booleanProcessor = (_schema, _ctx, json6, _params) => {
-  json6.type = "boolean";
+var booleanProcessor = (_schema, _ctx, json7, _params) => {
+  json7.type = "boolean";
 };
 var bigintProcessor = (_schema, ctx, _json, _params) => {
   if (ctx.unrepresentable === "throw") {
@@ -15415,13 +15901,13 @@ var symbolProcessor = (_schema, ctx, _json, _params) => {
     throw new Error("Symbols cannot be represented in JSON Schema");
   }
 };
-var nullProcessor = (_schema, ctx, json6, _params) => {
+var nullProcessor = (_schema, ctx, json7, _params) => {
   if (ctx.target === "openapi-3.0") {
-    json6.type = "string";
-    json6.nullable = true;
-    json6.enum = [null];
+    json7.type = "string";
+    json7.nullable = true;
+    json7.enum = [null];
   } else {
-    json6.type = "null";
+    json7.type = "null";
   }
 };
 var undefinedProcessor = (_schema, ctx, _json, _params) => {
@@ -15434,8 +15920,8 @@ var voidProcessor = (_schema, ctx, _json, _params) => {
     throw new Error("Void cannot be represented in JSON Schema");
   }
 };
-var neverProcessor = (_schema, _ctx, json6, _params) => {
-  json6.not = {};
+var neverProcessor = (_schema, _ctx, json7, _params) => {
+  json7.not = {};
 };
 var anyProcessor = (_schema, _ctx, _json, _params) => {};
 var unknownProcessor = (_schema, _ctx, _json, _params) => {};
@@ -15444,16 +15930,16 @@ var dateProcessor = (_schema, ctx, _json, _params) => {
     throw new Error("Date cannot be represented in JSON Schema");
   }
 };
-var enumProcessor = (schema, _ctx, json6, _params) => {
+var enumProcessor = (schema, _ctx, json7, _params) => {
   const def = schema._zod.def;
   const values = getEnumValues(def.entries);
   if (values.every((v) => typeof v === "number"))
-    json6.type = "number";
+    json7.type = "number";
   if (values.every((v) => typeof v === "string"))
-    json6.type = "string";
-  json6.enum = values;
+    json7.type = "string";
+  json7.enum = values;
 };
-var literalProcessor = (schema, ctx, json6, _params) => {
+var literalProcessor = (schema, ctx, json7, _params) => {
   const def = schema._zod.def;
   const vals = [];
   for (const val of def.values) {
@@ -15473,22 +15959,22 @@ var literalProcessor = (schema, ctx, json6, _params) => {
   }
   if (vals.length === 0) {} else if (vals.length === 1) {
     const val = vals[0];
-    json6.type = val === null ? "null" : typeof val;
+    json7.type = val === null ? "null" : typeof val;
     if (ctx.target === "draft-04" || ctx.target === "openapi-3.0") {
-      json6.enum = [val];
+      json7.enum = [val];
     } else {
-      json6.const = val;
+      json7.const = val;
     }
   } else {
     if (vals.every((v) => typeof v === "number"))
-      json6.type = "number";
+      json7.type = "number";
     if (vals.every((v) => typeof v === "string"))
-      json6.type = "string";
+      json7.type = "string";
     if (vals.every((v) => typeof v === "boolean"))
-      json6.type = "boolean";
+      json7.type = "boolean";
     if (vals.every((v) => v === null))
-      json6.type = "null";
-    json6.enum = vals;
+      json7.type = "null";
+    json7.enum = vals;
   }
 };
 var nanProcessor = (_schema, ctx, _json, _params) => {
@@ -15496,16 +15982,16 @@ var nanProcessor = (_schema, ctx, _json, _params) => {
     throw new Error("NaN cannot be represented in JSON Schema");
   }
 };
-var templateLiteralProcessor = (schema, _ctx, json6, _params) => {
-  const _json = json6;
+var templateLiteralProcessor = (schema, _ctx, json7, _params) => {
+  const _json = json7;
   const pattern = schema._zod.pattern;
   if (!pattern)
     throw new Error("Pattern not found in template literal");
   _json.type = "string";
   _json.pattern = pattern.source;
 };
-var fileProcessor = (schema, _ctx, json6, _params) => {
-  const _json = json6;
+var fileProcessor = (schema, _ctx, json7, _params) => {
+  const _json = json7;
   const file = {
     type: "string",
     format: "binary",
@@ -15528,8 +16014,8 @@ var fileProcessor = (schema, _ctx, json6, _params) => {
     Object.assign(_json, file);
   }
 };
-var successProcessor = (_schema, _ctx, json6, _params) => {
-  json6.type = "boolean";
+var successProcessor = (_schema, _ctx, json7, _params) => {
+  json7.type = "boolean";
 };
 var customProcessor = (_schema, ctx, _json, _params) => {
   if (ctx.unrepresentable === "throw") {
@@ -15557,27 +16043,27 @@ var setProcessor = (_schema, ctx, _json, _params) => {
   }
 };
 var arrayProcessor = (schema, ctx, _json, params) => {
-  const json6 = _json;
+  const json7 = _json;
   const def = schema._zod.def;
   const { minimum, maximum } = schema._zod.bag;
   if (typeof minimum === "number")
-    json6.minItems = minimum;
+    json7.minItems = minimum;
   if (typeof maximum === "number")
-    json6.maxItems = maximum;
-  json6.type = "array";
-  json6.items = process2(def.element, ctx, {
+    json7.maxItems = maximum;
+  json7.type = "array";
+  json7.items = process2(def.element, ctx, {
     ...params,
     path: [...params.path, "items"]
   });
 };
 var objectProcessor = (schema, ctx, _json, params) => {
-  const json6 = _json;
+  const json7 = _json;
   const def = schema._zod.def;
-  json6.type = "object";
-  json6.properties = {};
+  json7.type = "object";
+  json7.properties = {};
   const shape = def.shape;
   for (const key in shape) {
-    json6.properties[key] = process2(shape[key], ctx, {
+    json7.properties[key] = process2(shape[key], ctx, {
       ...params,
       path: [...params.path, "properties", key]
     });
@@ -15592,21 +16078,21 @@ var objectProcessor = (schema, ctx, _json, params) => {
     }
   }));
   if (requiredKeys.size > 0) {
-    json6.required = Array.from(requiredKeys);
+    json7.required = Array.from(requiredKeys);
   }
   if (def.catchall?._zod.def.type === "never") {
-    json6.additionalProperties = false;
+    json7.additionalProperties = false;
   } else if (!def.catchall) {
     if (ctx.io === "output")
-      json6.additionalProperties = false;
+      json7.additionalProperties = false;
   } else if (def.catchall) {
-    json6.additionalProperties = process2(def.catchall, ctx, {
+    json7.additionalProperties = process2(def.catchall, ctx, {
       ...params,
       path: [...params.path, "additionalProperties"]
     });
   }
 };
-var unionProcessor = (schema, ctx, json6, params) => {
+var unionProcessor = (schema, ctx, json7, params) => {
   const def = schema._zod.def;
   const isExclusive = def.inclusive === false;
   const options = def.options.map((x, i) => process2(x, ctx, {
@@ -15614,12 +16100,12 @@ var unionProcessor = (schema, ctx, json6, params) => {
     path: [...params.path, isExclusive ? "oneOf" : "anyOf", i]
   }));
   if (isExclusive) {
-    json6.oneOf = options;
+    json7.oneOf = options;
   } else {
-    json6.anyOf = options;
+    json7.anyOf = options;
   }
 };
-var intersectionProcessor = (schema, ctx, json6, params) => {
+var intersectionProcessor = (schema, ctx, json7, params) => {
   const def = schema._zod.def;
   const a = process2(def.left, ctx, {
     ...params,
@@ -15634,12 +16120,12 @@ var intersectionProcessor = (schema, ctx, json6, params) => {
     ...isSimpleIntersection(a) ? a.allOf : [a],
     ...isSimpleIntersection(b) ? b.allOf : [b]
   ];
-  json6.allOf = allOf;
+  json7.allOf = allOf;
 };
 var tupleProcessor = (schema, ctx, _json, params) => {
-  const json6 = _json;
+  const json7 = _json;
   const def = schema._zod.def;
-  json6.type = "array";
+  json7.type = "array";
   const prefixPath = ctx.target === "draft-2020-12" ? "prefixItems" : "items";
   const restPath = ctx.target === "draft-2020-12" ? "items" : ctx.target === "openapi-3.0" ? "items" : "additionalItems";
   const prefixItems = def.items.map((x, i) => process2(x, ctx, {
@@ -15651,37 +16137,37 @@ var tupleProcessor = (schema, ctx, _json, params) => {
     path: [...params.path, restPath, ...ctx.target === "openapi-3.0" ? [def.items.length] : []]
   }) : null;
   if (ctx.target === "draft-2020-12") {
-    json6.prefixItems = prefixItems;
+    json7.prefixItems = prefixItems;
     if (rest) {
-      json6.items = rest;
+      json7.items = rest;
     }
   } else if (ctx.target === "openapi-3.0") {
-    json6.items = {
+    json7.items = {
       anyOf: prefixItems
     };
     if (rest) {
-      json6.items.anyOf.push(rest);
+      json7.items.anyOf.push(rest);
     }
-    json6.minItems = prefixItems.length;
+    json7.minItems = prefixItems.length;
     if (!rest) {
-      json6.maxItems = prefixItems.length;
+      json7.maxItems = prefixItems.length;
     }
   } else {
-    json6.items = prefixItems;
+    json7.items = prefixItems;
     if (rest) {
-      json6.additionalItems = rest;
+      json7.additionalItems = rest;
     }
   }
   const { minimum, maximum } = schema._zod.bag;
   if (typeof minimum === "number")
-    json6.minItems = minimum;
+    json7.minItems = minimum;
   if (typeof maximum === "number")
-    json6.maxItems = maximum;
+    json7.maxItems = maximum;
 };
 var recordProcessor = (schema, ctx, _json, params) => {
-  const json6 = _json;
+  const json7 = _json;
   const def = schema._zod.def;
-  json6.type = "object";
+  json7.type = "object";
   const keyType = def.keyType;
   const keyBag = keyType._zod.bag;
   const patterns = keyBag?.patterns;
@@ -15690,18 +16176,18 @@ var recordProcessor = (schema, ctx, _json, params) => {
       ...params,
       path: [...params.path, "patternProperties", "*"]
     });
-    json6.patternProperties = {};
+    json7.patternProperties = {};
     for (const pattern of patterns) {
-      json6.patternProperties[pattern.source] = valueSchema;
+      json7.patternProperties[pattern.source] = valueSchema;
     }
   } else {
     if (ctx.target === "draft-07" || ctx.target === "draft-2020-12") {
-      json6.propertyNames = process2(def.keyType, ctx, {
+      json7.propertyNames = process2(def.keyType, ctx, {
         ...params,
         path: [...params.path, "propertyNames"]
       });
     }
-    json6.additionalProperties = process2(def.valueType, ctx, {
+    json7.additionalProperties = process2(def.valueType, ctx, {
       ...params,
       path: [...params.path, "additionalProperties"]
     });
@@ -15710,19 +16196,19 @@ var recordProcessor = (schema, ctx, _json, params) => {
   if (keyValues) {
     const validKeyValues = [...keyValues].filter((v) => typeof v === "string" || typeof v === "number");
     if (validKeyValues.length > 0) {
-      json6.required = validKeyValues;
+      json7.required = validKeyValues;
     }
   }
 };
-var nullableProcessor = (schema, ctx, json6, params) => {
+var nullableProcessor = (schema, ctx, json7, params) => {
   const def = schema._zod.def;
   const inner = process2(def.innerType, ctx, params);
   const seen = ctx.seen.get(schema);
   if (ctx.target === "openapi-3.0") {
     seen.ref = def.innerType;
-    json6.nullable = true;
+    json7.nullable = true;
   } else {
-    json6.anyOf = [inner, { type: "null" }];
+    json7.anyOf = [inner, { type: "null" }];
   }
 };
 var nonoptionalProcessor = (schema, ctx, _json, params) => {
@@ -15731,22 +16217,22 @@ var nonoptionalProcessor = (schema, ctx, _json, params) => {
   const seen = ctx.seen.get(schema);
   seen.ref = def.innerType;
 };
-var defaultProcessor = (schema, ctx, json6, params) => {
+var defaultProcessor = (schema, ctx, json7, params) => {
   const def = schema._zod.def;
   process2(def.innerType, ctx, params);
   const seen = ctx.seen.get(schema);
   seen.ref = def.innerType;
-  json6.default = JSON.parse(JSON.stringify(def.defaultValue));
+  json7.default = JSON.parse(JSON.stringify(def.defaultValue));
 };
-var prefaultProcessor = (schema, ctx, json6, params) => {
+var prefaultProcessor = (schema, ctx, json7, params) => {
   const def = schema._zod.def;
   process2(def.innerType, ctx, params);
   const seen = ctx.seen.get(schema);
   seen.ref = def.innerType;
   if (ctx.io === "input")
-    json6._prefault = JSON.parse(JSON.stringify(def.defaultValue));
+    json7._prefault = JSON.parse(JSON.stringify(def.defaultValue));
 };
-var catchProcessor = (schema, ctx, json6, params) => {
+var catchProcessor = (schema, ctx, json7, params) => {
   const def = schema._zod.def;
   process2(def.innerType, ctx, params);
   const seen = ctx.seen.get(schema);
@@ -15757,7 +16243,7 @@ var catchProcessor = (schema, ctx, json6, params) => {
   } catch {
     throw new Error("Dynamic catch values are not supported in JSON Schema");
   }
-  json6.default = catchValue;
+  json7.default = catchValue;
 };
 var pipeProcessor = (schema, ctx, _json, params) => {
   const def = schema._zod.def;
@@ -15767,12 +16253,12 @@ var pipeProcessor = (schema, ctx, _json, params) => {
   const seen = ctx.seen.get(schema);
   seen.ref = innerType;
 };
-var readonlyProcessor = (schema, ctx, json6, params) => {
+var readonlyProcessor = (schema, ctx, json7, params) => {
   const def = schema._zod.def;
   process2(def.innerType, ctx, params);
   const seen = ctx.seen.get(schema);
   seen.ref = def.innerType;
-  json6.readOnly = true;
+  json7.readOnly = true;
 };
 var promiseProcessor = (schema, ctx, _json, params) => {
   const def = schema._zod.def;
@@ -16042,7 +16528,7 @@ __export(exports_schemas2, {
   invertCodec: () => invertCodec,
   ipv4: () => ipv42,
   ipv6: () => ipv62,
-  json: () => json6,
+  json: () => json7,
   jwt: () => jwt,
   keyof: () => keyof,
   ksuid: () => ksuid2,
@@ -16393,7 +16879,7 @@ var ZodType = /* @__PURE__ */ $constructor("ZodType", (inst, def) => {
 var _ZodString = /* @__PURE__ */ $constructor("_ZodString", (inst, def) => {
   $ZodString.init(inst, def);
   ZodType.init(inst, def);
-  inst._zod.processJSONSchema = (ctx, json6, params) => stringProcessor(inst, ctx, json6, params);
+  inst._zod.processJSONSchema = (ctx, json7, params) => stringProcessor(inst, ctx, json7, params);
   const bag = inst._zod.bag;
   inst.format = bag.format ?? null;
   inst.minLength = bag.minimum ?? null;
@@ -16664,7 +17150,7 @@ function hash2(alg, params) {
 var ZodNumber = /* @__PURE__ */ $constructor("ZodNumber", (inst, def) => {
   $ZodNumber.init(inst, def);
   ZodType.init(inst, def);
-  inst._zod.processJSONSchema = (ctx, json6, params) => numberProcessor(inst, ctx, json6, params);
+  inst._zod.processJSONSchema = (ctx, json7, params) => numberProcessor(inst, ctx, json7, params);
   _installLazyMethods(inst, "ZodNumber", {
     gt(value, params) {
       return this.check(_gt(value, params));
@@ -16744,7 +17230,7 @@ function uint32(params) {
 var ZodBoolean = /* @__PURE__ */ $constructor("ZodBoolean", (inst, def) => {
   $ZodBoolean.init(inst, def);
   ZodType.init(inst, def);
-  inst._zod.processJSONSchema = (ctx, json6, params) => booleanProcessor(inst, ctx, json6, params);
+  inst._zod.processJSONSchema = (ctx, json7, params) => booleanProcessor(inst, ctx, json7, params);
 });
 function boolean2(params) {
   return _boolean(ZodBoolean, params);
@@ -16752,7 +17238,7 @@ function boolean2(params) {
 var ZodBigInt = /* @__PURE__ */ $constructor("ZodBigInt", (inst, def) => {
   $ZodBigInt.init(inst, def);
   ZodType.init(inst, def);
-  inst._zod.processJSONSchema = (ctx, json6, params) => bigintProcessor(inst, ctx, json6, params);
+  inst._zod.processJSONSchema = (ctx, json7, params) => bigintProcessor(inst, ctx, json7, params);
   inst.gte = (value, params) => inst.check(_gte(value, params));
   inst.min = (value, params) => inst.check(_gte(value, params));
   inst.gt = (value, params) => inst.check(_gt(value, params));
@@ -16787,7 +17273,7 @@ function uint64(params) {
 var ZodSymbol = /* @__PURE__ */ $constructor("ZodSymbol", (inst, def) => {
   $ZodSymbol.init(inst, def);
   ZodType.init(inst, def);
-  inst._zod.processJSONSchema = (ctx, json6, params) => symbolProcessor(inst, ctx, json6, params);
+  inst._zod.processJSONSchema = (ctx, json7, params) => symbolProcessor(inst, ctx, json7, params);
 });
 function symbol(params) {
   return _symbol(ZodSymbol, params);
@@ -16795,7 +17281,7 @@ function symbol(params) {
 var ZodUndefined = /* @__PURE__ */ $constructor("ZodUndefined", (inst, def) => {
   $ZodUndefined.init(inst, def);
   ZodType.init(inst, def);
-  inst._zod.processJSONSchema = (ctx, json6, params) => undefinedProcessor(inst, ctx, json6, params);
+  inst._zod.processJSONSchema = (ctx, json7, params) => undefinedProcessor(inst, ctx, json7, params);
 });
 function _undefined3(params) {
   return _undefined2(ZodUndefined, params);
@@ -16803,7 +17289,7 @@ function _undefined3(params) {
 var ZodNull = /* @__PURE__ */ $constructor("ZodNull", (inst, def) => {
   $ZodNull.init(inst, def);
   ZodType.init(inst, def);
-  inst._zod.processJSONSchema = (ctx, json6, params) => nullProcessor(inst, ctx, json6, params);
+  inst._zod.processJSONSchema = (ctx, json7, params) => nullProcessor(inst, ctx, json7, params);
 });
 function _null3(params) {
   return _null2(ZodNull, params);
@@ -16811,7 +17297,7 @@ function _null3(params) {
 var ZodAny = /* @__PURE__ */ $constructor("ZodAny", (inst, def) => {
   $ZodAny.init(inst, def);
   ZodType.init(inst, def);
-  inst._zod.processJSONSchema = (ctx, json6, params) => anyProcessor(inst, ctx, json6, params);
+  inst._zod.processJSONSchema = (ctx, json7, params) => anyProcessor(inst, ctx, json7, params);
 });
 function any() {
   return _any(ZodAny);
@@ -16819,7 +17305,7 @@ function any() {
 var ZodUnknown = /* @__PURE__ */ $constructor("ZodUnknown", (inst, def) => {
   $ZodUnknown.init(inst, def);
   ZodType.init(inst, def);
-  inst._zod.processJSONSchema = (ctx, json6, params) => unknownProcessor(inst, ctx, json6, params);
+  inst._zod.processJSONSchema = (ctx, json7, params) => unknownProcessor(inst, ctx, json7, params);
 });
 function unknown() {
   return _unknown(ZodUnknown);
@@ -16827,7 +17313,7 @@ function unknown() {
 var ZodNever = /* @__PURE__ */ $constructor("ZodNever", (inst, def) => {
   $ZodNever.init(inst, def);
   ZodType.init(inst, def);
-  inst._zod.processJSONSchema = (ctx, json6, params) => neverProcessor(inst, ctx, json6, params);
+  inst._zod.processJSONSchema = (ctx, json7, params) => neverProcessor(inst, ctx, json7, params);
 });
 function never(params) {
   return _never(ZodNever, params);
@@ -16835,7 +17321,7 @@ function never(params) {
 var ZodVoid = /* @__PURE__ */ $constructor("ZodVoid", (inst, def) => {
   $ZodVoid.init(inst, def);
   ZodType.init(inst, def);
-  inst._zod.processJSONSchema = (ctx, json6, params) => voidProcessor(inst, ctx, json6, params);
+  inst._zod.processJSONSchema = (ctx, json7, params) => voidProcessor(inst, ctx, json7, params);
 });
 function _void2(params) {
   return _void(ZodVoid, params);
@@ -16843,7 +17329,7 @@ function _void2(params) {
 var ZodDate = /* @__PURE__ */ $constructor("ZodDate", (inst, def) => {
   $ZodDate.init(inst, def);
   ZodType.init(inst, def);
-  inst._zod.processJSONSchema = (ctx, json6, params) => dateProcessor(inst, ctx, json6, params);
+  inst._zod.processJSONSchema = (ctx, json7, params) => dateProcessor(inst, ctx, json7, params);
   inst.min = (value, params) => inst.check(_gte(value, params));
   inst.max = (value, params) => inst.check(_lte(value, params));
   const c = inst._zod.bag;
@@ -16856,7 +17342,7 @@ function date3(params) {
 var ZodArray = /* @__PURE__ */ $constructor("ZodArray", (inst, def) => {
   $ZodArray.init(inst, def);
   ZodType.init(inst, def);
-  inst._zod.processJSONSchema = (ctx, json6, params) => arrayProcessor(inst, ctx, json6, params);
+  inst._zod.processJSONSchema = (ctx, json7, params) => arrayProcessor(inst, ctx, json7, params);
   inst.element = def.element;
   _installLazyMethods(inst, "ZodArray", {
     min(n, params) {
@@ -16886,7 +17372,7 @@ function keyof(schema) {
 var ZodObject = /* @__PURE__ */ $constructor("ZodObject", (inst, def) => {
   $ZodObjectJIT.init(inst, def);
   ZodType.init(inst, def);
-  inst._zod.processJSONSchema = (ctx, json6, params) => objectProcessor(inst, ctx, json6, params);
+  inst._zod.processJSONSchema = (ctx, json7, params) => objectProcessor(inst, ctx, json7, params);
   exports_util.defineLazy(inst, "shape", () => {
     return def.shape;
   });
@@ -16959,7 +17445,7 @@ function looseObject(shape, params) {
 var ZodUnion = /* @__PURE__ */ $constructor("ZodUnion", (inst, def) => {
   $ZodUnion.init(inst, def);
   ZodType.init(inst, def);
-  inst._zod.processJSONSchema = (ctx, json6, params) => unionProcessor(inst, ctx, json6, params);
+  inst._zod.processJSONSchema = (ctx, json7, params) => unionProcessor(inst, ctx, json7, params);
   inst.options = def.options;
 });
 function union(options, params) {
@@ -16972,7 +17458,7 @@ function union(options, params) {
 var ZodXor = /* @__PURE__ */ $constructor("ZodXor", (inst, def) => {
   ZodUnion.init(inst, def);
   $ZodXor.init(inst, def);
-  inst._zod.processJSONSchema = (ctx, json6, params) => unionProcessor(inst, ctx, json6, params);
+  inst._zod.processJSONSchema = (ctx, json7, params) => unionProcessor(inst, ctx, json7, params);
   inst.options = def.options;
 });
 function xor(options, params) {
@@ -16998,7 +17484,7 @@ function discriminatedUnion(discriminator, options, params) {
 var ZodIntersection = /* @__PURE__ */ $constructor("ZodIntersection", (inst, def) => {
   $ZodIntersection.init(inst, def);
   ZodType.init(inst, def);
-  inst._zod.processJSONSchema = (ctx, json6, params) => intersectionProcessor(inst, ctx, json6, params);
+  inst._zod.processJSONSchema = (ctx, json7, params) => intersectionProcessor(inst, ctx, json7, params);
 });
 function intersection(left, right) {
   return new ZodIntersection({
@@ -17010,7 +17496,7 @@ function intersection(left, right) {
 var ZodTuple = /* @__PURE__ */ $constructor("ZodTuple", (inst, def) => {
   $ZodTuple.init(inst, def);
   ZodType.init(inst, def);
-  inst._zod.processJSONSchema = (ctx, json6, params) => tupleProcessor(inst, ctx, json6, params);
+  inst._zod.processJSONSchema = (ctx, json7, params) => tupleProcessor(inst, ctx, json7, params);
   inst.rest = (rest) => inst.clone({
     ...inst._zod.def,
     rest
@@ -17030,7 +17516,7 @@ function tuple(items, _paramsOrRest, _params) {
 var ZodRecord = /* @__PURE__ */ $constructor("ZodRecord", (inst, def) => {
   $ZodRecord.init(inst, def);
   ZodType.init(inst, def);
-  inst._zod.processJSONSchema = (ctx, json6, params) => recordProcessor(inst, ctx, json6, params);
+  inst._zod.processJSONSchema = (ctx, json7, params) => recordProcessor(inst, ctx, json7, params);
   inst.keyType = def.keyType;
   inst.valueType = def.valueType;
 });
@@ -17072,7 +17558,7 @@ function looseRecord(keyType, valueType, params) {
 var ZodMap = /* @__PURE__ */ $constructor("ZodMap", (inst, def) => {
   $ZodMap.init(inst, def);
   ZodType.init(inst, def);
-  inst._zod.processJSONSchema = (ctx, json6, params) => mapProcessor(inst, ctx, json6, params);
+  inst._zod.processJSONSchema = (ctx, json7, params) => mapProcessor(inst, ctx, json7, params);
   inst.keyType = def.keyType;
   inst.valueType = def.valueType;
   inst.min = (...args) => inst.check(_minSize(...args));
@@ -17091,7 +17577,7 @@ function map(keyType, valueType, params) {
 var ZodSet = /* @__PURE__ */ $constructor("ZodSet", (inst, def) => {
   $ZodSet.init(inst, def);
   ZodType.init(inst, def);
-  inst._zod.processJSONSchema = (ctx, json6, params) => setProcessor(inst, ctx, json6, params);
+  inst._zod.processJSONSchema = (ctx, json7, params) => setProcessor(inst, ctx, json7, params);
   inst.min = (...args) => inst.check(_minSize(...args));
   inst.nonempty = (params) => inst.check(_minSize(1, params));
   inst.max = (...args) => inst.check(_maxSize(...args));
@@ -17107,7 +17593,7 @@ function set(valueType, params) {
 var ZodEnum = /* @__PURE__ */ $constructor("ZodEnum", (inst, def) => {
   $ZodEnum.init(inst, def);
   ZodType.init(inst, def);
-  inst._zod.processJSONSchema = (ctx, json6, params) => enumProcessor(inst, ctx, json6, params);
+  inst._zod.processJSONSchema = (ctx, json7, params) => enumProcessor(inst, ctx, json7, params);
   inst.enum = def.entries;
   inst.options = Object.values(def.entries);
   const keys = new Set(Object.keys(def.entries));
@@ -17160,7 +17646,7 @@ function nativeEnum(entries, params) {
 var ZodLiteral = /* @__PURE__ */ $constructor("ZodLiteral", (inst, def) => {
   $ZodLiteral.init(inst, def);
   ZodType.init(inst, def);
-  inst._zod.processJSONSchema = (ctx, json6, params) => literalProcessor(inst, ctx, json6, params);
+  inst._zod.processJSONSchema = (ctx, json7, params) => literalProcessor(inst, ctx, json7, params);
   inst.values = new Set(def.values);
   Object.defineProperty(inst, "value", {
     get() {
@@ -17181,7 +17667,7 @@ function literal(value, params) {
 var ZodFile = /* @__PURE__ */ $constructor("ZodFile", (inst, def) => {
   $ZodFile.init(inst, def);
   ZodType.init(inst, def);
-  inst._zod.processJSONSchema = (ctx, json6, params) => fileProcessor(inst, ctx, json6, params);
+  inst._zod.processJSONSchema = (ctx, json7, params) => fileProcessor(inst, ctx, json7, params);
   inst.min = (size, params) => inst.check(_minSize(size, params));
   inst.max = (size, params) => inst.check(_maxSize(size, params));
   inst.mime = (types2, params) => inst.check(_mime(Array.isArray(types2) ? types2 : [types2], params));
@@ -17192,7 +17678,7 @@ function file(params) {
 var ZodTransform = /* @__PURE__ */ $constructor("ZodTransform", (inst, def) => {
   $ZodTransform.init(inst, def);
   ZodType.init(inst, def);
-  inst._zod.processJSONSchema = (ctx, json6, params) => transformProcessor(inst, ctx, json6, params);
+  inst._zod.processJSONSchema = (ctx, json7, params) => transformProcessor(inst, ctx, json7, params);
   inst._zod.parse = (payload, _ctx) => {
     if (_ctx.direction === "backward") {
       throw new $ZodEncodeError(inst.constructor.name);
@@ -17232,7 +17718,7 @@ function transform(fn) {
 var ZodOptional = /* @__PURE__ */ $constructor("ZodOptional", (inst, def) => {
   $ZodOptional.init(inst, def);
   ZodType.init(inst, def);
-  inst._zod.processJSONSchema = (ctx, json6, params) => optionalProcessor(inst, ctx, json6, params);
+  inst._zod.processJSONSchema = (ctx, json7, params) => optionalProcessor(inst, ctx, json7, params);
   inst.unwrap = () => inst._zod.def.innerType;
 });
 function optional(innerType) {
@@ -17244,7 +17730,7 @@ function optional(innerType) {
 var ZodExactOptional = /* @__PURE__ */ $constructor("ZodExactOptional", (inst, def) => {
   $ZodExactOptional.init(inst, def);
   ZodType.init(inst, def);
-  inst._zod.processJSONSchema = (ctx, json6, params) => optionalProcessor(inst, ctx, json6, params);
+  inst._zod.processJSONSchema = (ctx, json7, params) => optionalProcessor(inst, ctx, json7, params);
   inst.unwrap = () => inst._zod.def.innerType;
 });
 function exactOptional(innerType) {
@@ -17256,7 +17742,7 @@ function exactOptional(innerType) {
 var ZodNullable = /* @__PURE__ */ $constructor("ZodNullable", (inst, def) => {
   $ZodNullable.init(inst, def);
   ZodType.init(inst, def);
-  inst._zod.processJSONSchema = (ctx, json6, params) => nullableProcessor(inst, ctx, json6, params);
+  inst._zod.processJSONSchema = (ctx, json7, params) => nullableProcessor(inst, ctx, json7, params);
   inst.unwrap = () => inst._zod.def.innerType;
 });
 function nullable(innerType) {
@@ -17271,7 +17757,7 @@ function nullish2(innerType) {
 var ZodDefault = /* @__PURE__ */ $constructor("ZodDefault", (inst, def) => {
   $ZodDefault.init(inst, def);
   ZodType.init(inst, def);
-  inst._zod.processJSONSchema = (ctx, json6, params) => defaultProcessor(inst, ctx, json6, params);
+  inst._zod.processJSONSchema = (ctx, json7, params) => defaultProcessor(inst, ctx, json7, params);
   inst.unwrap = () => inst._zod.def.innerType;
   inst.removeDefault = inst.unwrap;
 });
@@ -17287,7 +17773,7 @@ function _default2(innerType, defaultValue) {
 var ZodPrefault = /* @__PURE__ */ $constructor("ZodPrefault", (inst, def) => {
   $ZodPrefault.init(inst, def);
   ZodType.init(inst, def);
-  inst._zod.processJSONSchema = (ctx, json6, params) => prefaultProcessor(inst, ctx, json6, params);
+  inst._zod.processJSONSchema = (ctx, json7, params) => prefaultProcessor(inst, ctx, json7, params);
   inst.unwrap = () => inst._zod.def.innerType;
 });
 function prefault(innerType, defaultValue) {
@@ -17302,7 +17788,7 @@ function prefault(innerType, defaultValue) {
 var ZodNonOptional = /* @__PURE__ */ $constructor("ZodNonOptional", (inst, def) => {
   $ZodNonOptional.init(inst, def);
   ZodType.init(inst, def);
-  inst._zod.processJSONSchema = (ctx, json6, params) => nonoptionalProcessor(inst, ctx, json6, params);
+  inst._zod.processJSONSchema = (ctx, json7, params) => nonoptionalProcessor(inst, ctx, json7, params);
   inst.unwrap = () => inst._zod.def.innerType;
 });
 function nonoptional(innerType, params) {
@@ -17315,7 +17801,7 @@ function nonoptional(innerType, params) {
 var ZodSuccess = /* @__PURE__ */ $constructor("ZodSuccess", (inst, def) => {
   $ZodSuccess.init(inst, def);
   ZodType.init(inst, def);
-  inst._zod.processJSONSchema = (ctx, json6, params) => successProcessor(inst, ctx, json6, params);
+  inst._zod.processJSONSchema = (ctx, json7, params) => successProcessor(inst, ctx, json7, params);
   inst.unwrap = () => inst._zod.def.innerType;
 });
 function success(innerType) {
@@ -17327,7 +17813,7 @@ function success(innerType) {
 var ZodCatch = /* @__PURE__ */ $constructor("ZodCatch", (inst, def) => {
   $ZodCatch.init(inst, def);
   ZodType.init(inst, def);
-  inst._zod.processJSONSchema = (ctx, json6, params) => catchProcessor(inst, ctx, json6, params);
+  inst._zod.processJSONSchema = (ctx, json7, params) => catchProcessor(inst, ctx, json7, params);
   inst.unwrap = () => inst._zod.def.innerType;
   inst.removeCatch = inst.unwrap;
 });
@@ -17341,7 +17827,7 @@ function _catch2(innerType, catchValue) {
 var ZodNaN = /* @__PURE__ */ $constructor("ZodNaN", (inst, def) => {
   $ZodNaN.init(inst, def);
   ZodType.init(inst, def);
-  inst._zod.processJSONSchema = (ctx, json6, params) => nanProcessor(inst, ctx, json6, params);
+  inst._zod.processJSONSchema = (ctx, json7, params) => nanProcessor(inst, ctx, json7, params);
 });
 function nan(params) {
   return _nan(ZodNaN, params);
@@ -17349,7 +17835,7 @@ function nan(params) {
 var ZodPipe = /* @__PURE__ */ $constructor("ZodPipe", (inst, def) => {
   $ZodPipe.init(inst, def);
   ZodType.init(inst, def);
-  inst._zod.processJSONSchema = (ctx, json6, params) => pipeProcessor(inst, ctx, json6, params);
+  inst._zod.processJSONSchema = (ctx, json7, params) => pipeProcessor(inst, ctx, json7, params);
   inst.in = def.in;
   inst.out = def.out;
 });
@@ -17390,7 +17876,7 @@ var ZodPreprocess = /* @__PURE__ */ $constructor("ZodPreprocess", (inst, def) =>
 var ZodReadonly = /* @__PURE__ */ $constructor("ZodReadonly", (inst, def) => {
   $ZodReadonly.init(inst, def);
   ZodType.init(inst, def);
-  inst._zod.processJSONSchema = (ctx, json6, params) => readonlyProcessor(inst, ctx, json6, params);
+  inst._zod.processJSONSchema = (ctx, json7, params) => readonlyProcessor(inst, ctx, json7, params);
   inst.unwrap = () => inst._zod.def.innerType;
 });
 function readonly(innerType) {
@@ -17402,7 +17888,7 @@ function readonly(innerType) {
 var ZodTemplateLiteral = /* @__PURE__ */ $constructor("ZodTemplateLiteral", (inst, def) => {
   $ZodTemplateLiteral.init(inst, def);
   ZodType.init(inst, def);
-  inst._zod.processJSONSchema = (ctx, json6, params) => templateLiteralProcessor(inst, ctx, json6, params);
+  inst._zod.processJSONSchema = (ctx, json7, params) => templateLiteralProcessor(inst, ctx, json7, params);
 });
 function templateLiteral(parts, params) {
   return new ZodTemplateLiteral({
@@ -17414,7 +17900,7 @@ function templateLiteral(parts, params) {
 var ZodLazy = /* @__PURE__ */ $constructor("ZodLazy", (inst, def) => {
   $ZodLazy.init(inst, def);
   ZodType.init(inst, def);
-  inst._zod.processJSONSchema = (ctx, json6, params) => lazyProcessor(inst, ctx, json6, params);
+  inst._zod.processJSONSchema = (ctx, json7, params) => lazyProcessor(inst, ctx, json7, params);
   inst.unwrap = () => inst._zod.def.getter();
 });
 function lazy(getter) {
@@ -17426,7 +17912,7 @@ function lazy(getter) {
 var ZodPromise = /* @__PURE__ */ $constructor("ZodPromise", (inst, def) => {
   $ZodPromise.init(inst, def);
   ZodType.init(inst, def);
-  inst._zod.processJSONSchema = (ctx, json6, params) => promiseProcessor(inst, ctx, json6, params);
+  inst._zod.processJSONSchema = (ctx, json7, params) => promiseProcessor(inst, ctx, json7, params);
   inst.unwrap = () => inst._zod.def.innerType;
 });
 function promise(innerType) {
@@ -17438,7 +17924,7 @@ function promise(innerType) {
 var ZodFunction = /* @__PURE__ */ $constructor("ZodFunction", (inst, def) => {
   $ZodFunction.init(inst, def);
   ZodType.init(inst, def);
-  inst._zod.processJSONSchema = (ctx, json6, params) => functionProcessor(inst, ctx, json6, params);
+  inst._zod.processJSONSchema = (ctx, json7, params) => functionProcessor(inst, ctx, json7, params);
 });
 function _function(params) {
   return new ZodFunction({
@@ -17450,7 +17936,7 @@ function _function(params) {
 var ZodCustom = /* @__PURE__ */ $constructor("ZodCustom", (inst, def) => {
   $ZodCustom.init(inst, def);
   ZodType.init(inst, def);
-  inst._zod.processJSONSchema = (ctx, json6, params) => customProcessor(inst, ctx, json6, params);
+  inst._zod.processJSONSchema = (ctx, json7, params) => customProcessor(inst, ctx, json7, params);
 });
 function check(fn) {
   const ch = new $ZodCheck({
@@ -17497,7 +17983,7 @@ var stringbool = (...args) => _stringbool({
   Boolean: ZodBoolean,
   String: ZodString
 }, ...args);
-function json6(params) {
+function json7(params) {
   const jsonSchema = lazy(() => {
     return union([string2(params), number2(), boolean2(), _null3(), array(jsonSchema), record(string2(), jsonSchema)]);
   });
@@ -18105,6 +18591,7 @@ var targetSchema = exports_external.discriminatedUnion("provider", [
     }),
     contextWindow: exports_external.number().int().positive().optional(),
     maxOutputTokens: exports_external.number().int().positive().optional(),
+    credentialId: exports_external.string().trim().min(1).max(64).regex(/^[A-Za-z0-9_-]+$/, "credentialId must be an account id").optional(),
     capabilities: exports_external.object({
       tools: exports_external.boolean(),
       images: exports_external.boolean(),
@@ -18126,6 +18613,7 @@ var targetSchema = exports_external.discriminatedUnion("provider", [
     }),
     contextWindow: exports_external.number().int().positive().optional(),
     maxOutputTokens: exports_external.number().int().positive().optional(),
+    credentialId: exports_external.string().trim().min(1).max(64).regex(/^[A-Za-z0-9_-]+$/, "credentialId must be an account id").optional(),
     capabilities: exports_external.object({
       tools: exports_external.boolean(),
       images: exports_external.boolean(),
@@ -18134,9 +18622,7 @@ var targetSchema = exports_external.discriminatedUnion("provider", [
   }).strict()
 ]);
 var modelSchema = exports_external.object({
-  id: exports_external.string().min(1).refine((value) => !value.toLowerCase().startsWith("claude/"), {
-    message: 'model id must not start with "claude/": that prefix is reserved for discovery mirrors'
-  }),
+  id: exports_external.string().min(1),
   strategy: exports_external.enum(["score", "priority", "roundRobin", "weighted"]),
   isAlias: exports_external.boolean(),
   targets: exports_external.array(targetSchema).min(1, "a virtual model needs at least one target")
@@ -18148,6 +18634,9 @@ var keyCreateSchema = exports_external.object({
   bodyLoggingOptOut: exports_external.boolean().default(false)
 }).strict();
 var keyLimitsSchema = exports_external.object({ limits: limitConfigSchema }).strict();
+var keyModelsSchema = exports_external.object({
+  modelAllowlist: exports_external.array(exports_external.string().min(1)).nullable()
+}).strict();
 var retentionSchema = exports_external.object({
   keepLatest: exports_external.number().int().min(1).max(100),
   maxAgeDays: exports_external.number().int().min(1).max(3650)
@@ -18245,13 +18734,76 @@ async function readSource(deps, source, lines) {
   ]);
   return result.code === 0 ? result.stdout : "";
 }
+function parseConsoleLines(text, query) {
+  const lines = consoleLimit(query.lines);
+  return text.split(`
+`).filter((raw) => raw.trim().length > 0).map(parseLine).filter((line) => keep(line, query)).slice(-lines);
+}
 async function readConsole(deps, source, query) {
   const limited = { ...query, lines: consoleLimit(query.lines) };
   const text = await readSource(deps, source, scanWidth(limited));
-  const lines = text.split(`
-`).filter((raw) => raw.trim().length > 0).map(parseLine).filter((line) => keep(line, limited)).slice(-limited.lines);
+  const lines = parseConsoleLines(text, limited);
   return source.kind === "file" ? { source: "file", path: source.path, lines } : { source: source.kind, lines };
 }
+// packages/store/src/types.ts
+var WINDOW_DURATION_MS = {
+  fiveHour: 5 * 60 * 60 * 1000,
+  daily: 24 * 60 * 60 * 1000,
+  weekly: 7 * 24 * 60 * 60 * 1000
+};
+function durationFor(windowType, windowMs) {
+  return windowMs !== null && windowMs > 0 ? windowMs : WINDOW_DURATION_MS[windowType];
+}
+var SAME_WINDOW_TOLERANCE_MS = 60000;
+function sameWindow(a, b) {
+  if (a === null || b === null)
+    return a === b;
+  return Math.abs(a - b) <= SAME_WINDOW_TOLERANCE_MS;
+}
+function quotaVerdict(window, estimate) {
+  if (estimate === undefined)
+    return "unknown";
+  if (window.observedAt > 0 && estimate.stale)
+    return "stale";
+  if (estimate.ratePerHour === null || window.limit === null)
+    return "unknown";
+  if (estimate.survives === false && estimate.exhaustsAt !== null)
+    return "empty";
+  return estimate.survives === true ? "ok" : "unknown";
+}
+var READ_OVER_INPUT = 0.1;
+function cacheReadRate(prices) {
+  return prices.cacheRead ?? prices.input * READ_OVER_INPUT;
+}
+function servesTarget(target, account) {
+  if (account.provider !== target.provider)
+    return false;
+  if (target.provider === "custom" && account.providerData.endpointId !== target.endpointId) {
+    return false;
+  }
+  return target.credentialId === undefined || account.id === target.credentialId;
+}
+function resolvePin(target, accounts) {
+  if (target.credentialId === undefined)
+    return;
+  return accounts.find((account) => servesTarget(target, account));
+}
+var DEFAULT_SETTINGS = {
+  weights: { tier: 10, health: 3, quota: 2, load: 2, cost: 1, latency: 1 },
+  maxAttempts: 3,
+  requestDeadlineMs: 120000,
+  breakerThreshold: 3,
+  breakerCooldownMs: 30000,
+  logRetentionDays: 30,
+  quotaPollIntervalMs: 300000,
+  rtkEnabled: false,
+  autoCacheEnabled: true,
+  bodyLoggingEnabled: false,
+  bodyLoggingCaptureStreamChunks: false,
+  snapshotKeepLatest: 5,
+  snapshotMaxAgeDays: 30
+};
+
 // packages/router/src/snapshot.ts
 var HEALTH_KEY_SEP = "::";
 function healthKey(credentialId, model) {
@@ -18311,12 +18863,11 @@ function eligible(input) {
   const excluded = [];
   for (const target of model.targets) {
     const missing = needNative && !ANTHROPIC_NATIVE_TOOLS[target.provider] ? "anthropicTools" : ["tools", "images", "reasoning"].find((cap) => need[cap] && !target.capabilities[cap]);
+    let pinSeen = false;
     for (const credential of snapshot.credentials) {
-      if (credential.provider !== target.provider)
-        continue;
-      if (target.provider === "custom" && credential.providerData.endpointId !== target.endpointId) {
+      if (!servesTarget(target, credential))
         continue;
-      }
+      pinSeen = target.credentialId !== undefined;
       const drop = (reason) => {
         excluded.push({ credentialId: credential.id, model: target.model, reason });
       };
@@ -18353,56 +18904,17 @@ function eligible(input) {
       }
       pairs.push({ credential, target });
     }
+    if (target.credentialId !== undefined && !pinSeen) {
+      excluded.push({
+        credentialId: target.credentialId,
+        model: target.model,
+        reason: "pin:missing"
+      });
+    }
   }
   return { pairs, excluded };
 }
 
-// packages/store/src/types.ts
-var WINDOW_DURATION_MS = {
-  fiveHour: 5 * 60 * 60 * 1000,
-  daily: 24 * 60 * 60 * 1000,
-  weekly: 7 * 24 * 60 * 60 * 1000
-};
-function durationFor(windowType, windowMs) {
-  return windowMs !== null && windowMs > 0 ? windowMs : WINDOW_DURATION_MS[windowType];
-}
-var SAME_WINDOW_TOLERANCE_MS = 60000;
-function sameWindow(a, b) {
-  if (a === null || b === null)
-    return a === b;
-  return Math.abs(a - b) <= SAME_WINDOW_TOLERANCE_MS;
-}
-function quotaVerdict(window, estimate) {
-  if (estimate === undefined)
-    return "unknown";
-  if (window.observedAt > 0 && estimate.stale)
-    return "stale";
-  if (estimate.ratePerHour === null || window.limit === null)
-    return "unknown";
-  if (estimate.survives === false && estimate.exhaustsAt !== null)
-    return "empty";
-  return estimate.survives === true ? "ok" : "unknown";
-}
-var READ_OVER_INPUT = 0.1;
-function cacheReadRate(prices) {
-  return prices.cacheRead ?? prices.input * READ_OVER_INPUT;
-}
-var DEFAULT_SETTINGS = {
-  weights: { tier: 10, health: 3, quota: 2, load: 2, cost: 1, latency: 1 },
-  maxAttempts: 3,
-  requestDeadlineMs: 120000,
-  breakerThreshold: 3,
-  breakerCooldownMs: 30000,
-  logRetentionDays: 30,
-  quotaPollIntervalMs: 300000,
-  rtkEnabled: false,
-  autoCacheEnabled: true,
-  bodyLoggingEnabled: false,
-  bodyLoggingCaptureStreamChunks: false,
-  snapshotKeepLatest: 5,
-  snapshotMaxAgeDays: 30
-};
-
 // packages/router/src/quota.ts
 var UNKNOWN_QUOTA = 0.5;
 var QUOTA_FLOOR = 0.1;
@@ -18749,10 +19261,10 @@ function prepareArtifact(input) {
     attempts,
     error: error51.value
   };
-  const json7 = JSON.stringify(bounded);
-  const size = encoder2.encode(json7).length;
+  const json8 = JSON.stringify(bounded);
+  const size = encoder2.encode(json8).length;
   if (size <= MAX_ARTIFACT_BYTES)
-    return { artifact: bounded, json: json7 };
+    return { artifact: bounded, json: json8 };
   const marker = omission(size);
   const omitted = omitBodies(bounded, marker);
   const omittedJson = JSON.stringify(omitted);
@@ -18762,8 +19274,8 @@ function prepareArtifact(input) {
   const stripped = { ...omitted, error: marker };
   return { artifact: stripped, json: JSON.stringify(stripped) };
 }
-async function sealArtifact(key, json7) {
-  const bytes = encoder2.encode(await encrypt(key, json7));
+async function sealArtifact(key, json8) {
+  const bytes = encoder2.encode(await encrypt(key, json8));
   return { bytes, sha256: await sha256Hex(bytes) };
 }
 async function readArtifact(key, dir, relPath, expectedSha256) {
@@ -20082,6 +20594,12 @@ function createKeyRepo(db, logger2 = noopLogger) {
         id
       ]);
     },
+    async setModelAllowlist(id, modelAllowlist) {
+      db.run("UPDATE api_keys SET model_allowlist = ? WHERE id = ?", [
+        modelAllowlist === null ? null : JSON.stringify(modelAllowlist),
+        id
+      ]);
+    },
     async revoke(id) {
       db.run("UPDATE api_keys SET revoked_at = ? WHERE id = ?", [Date.now(), id]);
     }
@@ -20710,6 +21228,7 @@ async function createStore(opts) {
       findByHash: (hash3) => handle.keys.findByHash(hash3),
       create: (input) => handle.keys.create(input),
       setLimits: (id, limits) => handle.keys.setLimits(id, limits),
+      setModelAllowlist: (id, modelAllowlist) => handle.keys.setModelAllowlist(id, modelAllowlist),
       revoke: (id) => handle.keys.revoke(id)
     },
     usage: {
@@ -20859,13 +21378,15 @@ function customProviderData(input) {
   } catch {
     throw new GatewayError("BAD_REQUEST", "origin: must be a valid URL");
   }
-  if (url2.protocol !== "http:" && url2.protocol !== "https:" || url2.hostname.length === 0 || url2.username.length > 0 || url2.password.length > 0 || url2.pathname !== "" && url2.pathname !== "/" || url2.search.length > 0 || url2.hash.length > 0) {
+  if (url2.protocol !== "http:" && url2.protocol !== "https:" || url2.hostname.length === 0 || url2.username.length > 0 || url2.password.length > 0 || url2.search.length > 0 || url2.hash.length > 0) {
     throw new GatewayError("BAD_REQUEST", "origin: must be an HTTP(S) server origin");
   }
-  return { endpointId, endpointLabel, origin: url2.origin, protocol: input.protocol };
+  const basePath = url2.pathname.replace(/\/+$/, "");
+  return { endpointId, endpointLabel, origin: url2.origin, basePath, protocol: input.protocol };
 }
 function sameCustomEndpoint(a, b) {
-  return a.endpointId === b.endpointId && a.endpointLabel === b.endpointLabel && a.origin === b.origin && a.protocol === b.protocol;
+  const basePath = typeof a.basePath === "string" ? a.basePath : "";
+  return a.endpointId === b.endpointId && a.endpointLabel === b.endpointLabel && a.origin === b.origin && basePath === b.basePath && a.protocol === b.protocol;
 }
 async function createApiKeyCredential(store, input, logger2 = noopLogger) {
   const provider = parseOrThrow(providerIdSchema, input.provider);
@@ -21341,6 +21862,14 @@ async function setKeyLimits(store, id, input, now = Date.now()) {
   await store.keys.setLimits(id, body2.limits);
   return toSummary(store, { ...key, limits: body2.limits }, now);
 }
+async function setKeyModels(store, id, input, now = Date.now()) {
+  const body2 = parseOrThrow(keyModelsSchema, input);
+  const key = (await store.keys.list()).find((entry) => entry.id === id);
+  if (key === undefined)
+    throw new GatewayError("BAD_REQUEST", "no such api key");
+  await store.keys.setModelAllowlist(id, body2.modelAllowlist);
+  return toSummary(store, { ...key, modelAllowlist: body2.modelAllowlist }, now);
+}
 async function revokeKey(store, id) {
   await store.keys.revoke(id);
 }
@@ -21353,8 +21882,8 @@ function narrower(a, b) {
     ...output.length === 0 ? {} : { maxOutputTokens: Math.min(...output) }
   };
 }
-function targetLimits(target, auths) {
-  const ways = auths.size === 0 ? ["apiKey"] : [...auths];
+function targetLimits(target, auths, pinned) {
+  const ways = pinned !== undefined ? [pinned.authType] : auths.size === 0 ? ["apiKey"] : [...auths];
   let listed = {};
   for (const auth of ways) {
     const entry = catalogLimits(target.provider, target.model, auth);
@@ -21374,20 +21903,22 @@ function targetLimits(target, auths) {
 }
 function servingAuths(credentials) {
   const byProvider = new Map;
+  const routable = [];
   for (const credential of credentials) {
     if (!credential.enabled)
       continue;
     const ways = byProvider.get(credential.provider) ?? new Set;
     ways.add(credential.authType);
     byProvider.set(credential.provider, ways);
+    routable.push(credential);
   }
-  return byProvider;
+  return { byProvider, routable };
 }
 function resolveModelLimits(model, credentials) {
-  const auths = servingAuths(credentials);
+  const { byProvider, routable } = servingAuths(credentials);
   let limits = {};
   for (const target of model.targets) {
-    limits = narrower(limits, targetLimits(target, auths.get(target.provider) ?? new Set));
+    limits = narrower(limits, targetLimits(target, byProvider.get(target.provider) ?? new Set, resolvePin(target, routable)));
   }
   return limits;
 }
@@ -21431,15 +21962,18 @@ function unreachable(model, credentials, stored) {
   const held = heldAuths(credentials);
   const grandfathered = new Set((stored?.targets ?? []).map(pairOf));
   for (const target of model.targets) {
-    if (grandfathered.has(pairOf(target)))
+    const pinned = resolvePin(target, credentials);
+    if (pinned === undefined && grandfathered.has(pairOf(target)))
       continue;
-    const have = held.get(target.provider);
+    const have = pinned === undefined ? held.get(target.provider) : new Set([pinned.authType]);
     if (have === undefined)
       continue;
     const reach = catalogModelAuths(target.provider, target.model);
     if (reach.some((auth) => have.has(auth)))
       continue;
-    return new GatewayError("BAD_REQUEST", `${target.provider} serves "${target.model}" to ${phrase(reach)} credentials only, ` + `and every ${target.provider} credential here is ${phrase([...have])} \u2014 ` + `connect the other kind, or pick a model this one can reach`);
+    const holds = pinned === undefined ? `every ${target.provider} credential here is ${phrase([...have])}` : `this target is pinned to "${pinned.label}", which is ${phrase([...have])}`;
+    const fix = pinned === undefined ? "connect the other kind, or pick a model this one can reach" : "pin it to the other kind, or pick a model this account can reach";
+    return new GatewayError("BAD_REQUEST", `${target.provider} serves "${target.model}" to ${phrase(reach)} credentials only, ` + `and ${holds} \u2014 ${fix}`);
   }
   return null;
 }
@@ -21483,14 +22017,15 @@ import { basename as basename2, join as join3, resolve as resolve2, sep as sep2
 
 // packages/plugin-api/src/version.ts
 var PLUGIN_API_VERSION = 1;
-var DASHBOARD_SDK_VERSION = "0.1.1";
+var DASHBOARD_SDK_VERSION = "0.1.2";
 // packages/plugin-api/src/manifest.ts
 var CAPABILITIES = [
   "storage",
   "files",
   "net:outbound",
   "events:request",
-  "events:limit"
+  "events:limit",
+  "channels"
 ];
 var ID_PATTERN = /^[a-z][a-z0-9-]{0,31}$/;
 var idSchema = exports_external.string().regex(ID_PATTERN, "id must match /^[a-z][a-z0-9-]{0,31}$/");
@@ -22506,10 +23041,10 @@ function emailFromIdToken(idToken) {
   if (parts.length !== 3 || payload === undefined || payload.length === 0)
     return null;
   try {
-    const json7 = JSON.parse(Buffer.from(payload, "base64url").toString("utf8"));
-    if (!isRecord2(json7))
+    const json8 = JSON.parse(Buffer.from(payload, "base64url").toString("utf8"));
+    if (!isRecord2(json8))
       return null;
-    return typeof json7.email === "string" && json7.email.trim().length > 0 ? json7.email : null;
+    return typeof json8.email === "string" && json8.email.trim().length > 0 ? json8.email : null;
   } catch {
     return null;
   }
@@ -22912,12 +23447,12 @@ function decodeClaims(idToken) {
     return { email: null, accountId: null };
   }
   try {
-    const json7 = JSON.parse(Buffer.from(payload, "base64url").toString("utf8"));
-    if (!isRecord5(json7))
+    const json8 = JSON.parse(Buffer.from(payload, "base64url").toString("utf8"));
+    if (!isRecord5(json8))
       return { email: null, accountId: null };
-    const auth = json7["https://api.openai.com/auth"];
+    const auth = json8["https://api.openai.com/auth"];
     return {
-      email: typeof json7.email === "string" ? json7.email : null,
+      email: typeof json8.email === "string" ? json8.email : null,
       accountId: isRecord5(auth) ? nonBlankStringOrNull(auth.chatgpt_account_id) : null
     };
   } catch {
@@ -23188,9 +23723,11 @@ var KEY_PLACEHOLDER = "<your OmniGateway key>";
 async function describeModelsForSetup(store) {
   const models = await listModels(store);
   const credentials = (await listCredentials(store)).map((credential) => ({
+    id: credential.id,
     provider: credential.provider,
     authType: credential.authType,
-    enabled: credential.enabled
+    enabled: credential.enabled,
+    providerData: credential.providerData
   }));
   return models.map((model) => ({
     model,
@@ -23226,8 +23763,7 @@ function claudeSettings(described, input, mapping, existing) {
   const visibleId = (slot, id) => {
     if (!ids.has(id))
       throw new Error(`${slot} names unknown virtual model "${id}"`);
-    const useMirror = input.discoveryMirrors === true && !/^(?:claude|anthropic)/i.test(id);
-    return useMirror ? `claude/${id}` : id;
+    return id;
   };
   const settings = settingsObject(existing);
   const currentEnv = settings.env;
@@ -24113,7 +24649,8 @@ var credentialsRemove = {
   async run(args, { ctx, writer, prompt }) {
     const id = requirePositional(args, 0, "credential id");
     const credential = await findCredential(ctx, id);
-    const confirmed = await prompt.confirm(`delete ${credential.provider} credential "${credential.label}" (${id})?`);
+    const pinned = (await listModels(await ctx.store())).filter((model) => model.targets.some((target) => target.credentialId === id)).map((model) => model.id);
+    const confirmed = await prompt.confirm(`delete ${credential.provider} credential "${credential.label}" (${id})?` + (pinned.length === 0 ? "" : ` ${pinned.length === 1 ? "model" : "models"} ${pinned.join(", ")} ` + `${pinned.length === 1 ? "pins a target" : "pin targets"} to it, and ` + `${pinned.length === 1 ? "that target" : "those targets"} will fail rather than ` + "fall back to another account."));
     if (!confirmed)
       throw new CliError("cancelled");
     await removeCredential(await ctx.store(), id);
@@ -24161,13 +24698,14 @@ var credentialsAddKey = {
     const store = await ctx.store();
     const endpointId = stringFlag(args.values, "endpoint-id");
     const existingEndpoint = providerId === "custom" && endpointId !== undefined ? (await listCredentials(store)).find((credential) => credential.provider === "custom" && credential.providerData.endpointId === endpointId.trim()) : undefined;
+    const existingOrigin = existingEndpoint === undefined ? undefined : `${String(existingEndpoint.providerData.origin)}${typeof existingEndpoint.providerData.basePath === "string" ? existingEndpoint.providerData.basePath : ""}`;
     const created = await createApiKeyCredential(store, {
       provider: providerId,
       apiKey: key,
       label: stringFlag(args.values, "label"),
       endpointId,
       endpointLabel: stringFlag(args.values, "endpoint-label") ?? existingEndpoint?.providerData.endpointLabel,
-      origin: stringFlag(args.values, "origin") ?? existingEndpoint?.providerData.origin,
+      origin: stringFlag(args.values, "origin") ?? existingOrigin,
       protocol: protocol ?? existingEndpoint?.providerData.protocol
     });
     emit(ctx, writer, { id: created.id, provider: created.provider }, () => `stored ${created.provider} api key as ${created.id}`);
@@ -24579,6 +25117,43 @@ var keysRevoke = {
     emit(ctx, writer, { id, revoked: true }, () => `${id} revoked`);
   }
 };
+var keysModels = {
+  usage: "keys models <id> [--allow <model> ...] [--all] [--none]",
+  summary: "Show or replace one key's allowed models",
+  options: {
+    allow: { type: "string", multiple: true },
+    all: { type: "boolean" },
+    none: { type: "boolean" }
+  },
+  async run(args, { ctx, writer }) {
+    const id = requirePositional(args, 0, "key id");
+    const allow = listFlag(args.values, "allow");
+    const all = boolFlag(args.values, "all");
+    const none = boolFlag(args.values, "none");
+    const store = await ctx.store();
+    const existing = (await listKeys(store)).find((entry) => entry.id === id);
+    if (existing === undefined)
+      throw new CliError(`no api key "${id}"`);
+    let key = existing;
+    if (all || none || allow !== undefined) {
+      if ([all, none, allow !== undefined].filter(Boolean).length > 1) {
+        throw new UsageError("--all, --none, and --allow cannot be combined");
+      }
+      const next = all ? null : none ? [] : allow ?? [];
+      key = await setKeyModels(store, id, { modelAllowlist: next });
+    }
+    emit(ctx, writer, key, () => {
+      const head = fields([
+        ["id", key.id],
+        ["label", key.label],
+        ["prefix", `${key.prefix}\u2026`]
+      ]);
+      const models = key.modelAllowlist === null ? "every model" : key.modelAllowlist.length === 0 ? "no models; every request this key makes is refused" : key.modelAllowlist.join(", ");
+      return `${head}
+models: ${models}`;
+    });
+  }
+};
 
 // apps/cli/src/commands/models.ts
 var modelsList = {
@@ -24611,6 +25186,7 @@ var modelsShow = {
   async run(args, { ctx, writer }) {
     const id = requirePositional(args, 0, "model id");
     const model = await getModel(await ctx.store(), id);
+    const pinned = model.targets.some((target) => target.credentialId !== undefined);
     emit(ctx, writer, { model }, () => [
       fields([
         ["id", model.id],
@@ -24621,6 +25197,7 @@ var modelsShow = {
       table([
         { header: "PROVIDER" },
         { header: "MODEL" },
+        ...pinned ? [{ header: "ACCOUNT" }] : [],
         { header: "TIER", align: "right" },
         { header: "WEIGHT", align: "right" },
         { header: "IN $/MTOK", align: "right" },
@@ -24634,6 +25211,7 @@ var modelsShow = {
       ], model.targets.map((target) => [
         provider(ctx, target.provider),
         target.model,
+        ...pinned ? [target.credentialId ?? "any"] : [],
         String(target.tier),
         String(target.weight),
         target.costPerMTok.input.toFixed(2),
@@ -25297,6 +25875,17 @@ async function orphanTables(ctx) {
     return null;
   }
 }
+async function danglingPins(ctx) {
+  if (ctx.configError !== null || !existsSync5(ctx.databasePath))
+    return null;
+  try {
+    const store = await ctx.store();
+    const accounts = await store.credentials.list();
+    return (await store.config.listModels()).flatMap((model) => model.targets.filter((target) => target.credentialId !== undefined && resolvePin(target, accounts) === undefined).map((target) => `${model.id}/${target.model} \u2192 ${target.credentialId}`));
+  } catch {
+    return null;
+  }
+}
 var doctor = {
   usage: "doctor",
   summary: "Check what this CLI resolved, and whether it can do anything with it",
@@ -25309,6 +25898,7 @@ var doctor = {
     const usageRollup = await rollupState(ctx);
     const plugins = listPlugins(doctorPluginDeps(), deps.root);
     const orphans = await orphanTables(ctx);
+    const pins = await danglingPins(ctx);
     const checks3 = {
       root: deps.root,
       rootSource: ctx.root.source,
@@ -25326,6 +25916,7 @@ var doctor = {
       pluginsDir: pluginsDir(deps.root),
       plugins,
       orphanPluginTables: orphans,
+      danglingPins: pins,
       warnings: ctx.warnings
     };
     emit(ctx, writer, checks3, () => {
@@ -25352,6 +25943,10 @@ var doctor = {
           "orphan plugin tables",
           orphans === null ? paint(ctx, "dim", "not checked") : orphans.length === 0 ? ok(true, "none") : paint(ctx, "yellow", `${orphans.length}: ${orphans.join(", ")}`)
         ],
+        [
+          "dangling pins",
+          pins === null ? paint(ctx, "dim", "not checked") : pins.length === 0 ? ok(true, "none") : paint(ctx, "yellow", `${pins.length}: ${pins.join(", ")}`)
+        ],
         ...checks3.warnings.map((warning) => ["ignored", paint(ctx, "yellow", warning)])
       ]);
     });
@@ -25505,7 +26100,6 @@ var setupClaude = {
     const path = join8(dir, "settings.json");
     const file2 = claudeSettings(models, {
       baseUrl: baseUrl(ctx),
-      discoveryMirrors: ctx.config().exposeClaudeCodeAliases,
       ...key === undefined ? {} : { apiKey: key }
     }, mapping, setupFs.read(path) ?? undefined);
     finish(ctx, writer, [at(dir, file2)], dryRun2, key, setupFs.write);
@@ -25756,6 +26350,7 @@ var COMMANDS = {
   "keys list": keysList,
   "keys create": keysCreate,
   "keys limits": keysLimits,
+  "keys models": keysModels,
   "keys revoke": keysRevoke,
   "plugin list": pluginList,
   "plugin verify": pluginVerify,