omnigateway 0.4.12 → 0.5.0

package/gateway.js

@@ -2763,8 +2763,8 @@ function checkBytes(buffer, headers, options) {
   return true;
 }
 function hasUnknownFileSize(tokenizer) {
-  const fileSize = tokenizer.fileInfo.size;
-  return !Number.isFinite(fileSize) || fileSize === Number.MAX_SAFE_INTEGER;
+  const fileSize2 = tokenizer.fileInfo.size;
+  return !Number.isFinite(fileSize2) || fileSize2 === Number.MAX_SAFE_INTEGER;
 }
 function hasExceededUnknownSizeScanBudget(tokenizer, startOffset, maximumBytes) {
   return hasUnknownFileSize(tokenizer) && tokenizer.position - startOffset > maximumBytes;
@@ -2822,8 +2822,8 @@ function mergeByteChunks(chunks, totalLength) {
   return merged;
 }
 function getMaximumZipBufferedReadLength(tokenizer) {
-  const fileSize = tokenizer.fileInfo.size;
-  const remainingBytes = Number.isFinite(fileSize) ? Math.max(0, fileSize - tokenizer.position) : Number.MAX_SAFE_INTEGER;
+  const fileSize2 = tokenizer.fileInfo.size;
+  const remainingBytes = Number.isFinite(fileSize2) ? Math.max(0, fileSize2 - tokenizer.position) : Number.MAX_SAFE_INTEGER;
   return Math.min(remainingBytes, maximumZipBufferedReadSizeInBytes);
 }
 function isRecoverableZipError(error51) {
@@ -3561,11 +3561,11 @@ function normalizeMpegOffsetTolerance(mpegOffsetTolerance) {
   }
   return Math.max(0, Math.min(maximumMpegOffsetTolerance, Math.trunc(mpegOffsetTolerance)));
 }
-function getKnownFileSizeOrMaximum(fileSize) {
-  if (!Number.isFinite(fileSize)) {
+function getKnownFileSizeOrMaximum(fileSize2) {
+  if (!Number.isFinite(fileSize2)) {
     return Number.MAX_SAFE_INTEGER;
   }
-  return Math.max(0, fileSize);
+  return Math.max(0, fileSize2);
 }
 function importAtRuntime(specifier) {
   return import(specifier);
@@ -4683,8 +4683,8 @@ class FileTypeParser {
       if (jsonSize > 12 && this.buffer.length >= jsonSize + 16) {
         try {
           const header = new TextDecoder().decode(this.buffer.subarray(16, jsonSize + 16));
-          const json7 = JSON.parse(header);
-          if (json7.files) {
+          const json8 = JSON.parse(header);
+          if (json8.files) {
             return {
               ext: "asar",
               mime: "application/x-asar"
@@ -4804,8 +4804,8 @@ class FileTypeParser {
   };
   detectImprecise = async (tokenizer) => {
     this.buffer = new Uint8Array(reasonableDetectionSizeInBytes);
-    const fileSize = getKnownFileSizeOrMaximum(tokenizer.fileInfo.size);
-    await tokenizer.peekBuffer(this.buffer, { length: Math.min(8, fileSize), mayBeLess: true });
+    const fileSize2 = getKnownFileSizeOrMaximum(tokenizer.fileInfo.size);
+    await tokenizer.peekBuffer(this.buffer, { length: Math.min(8, fileSize2), mayBeLess: true });
     if (this.check([0, 0, 1, 186]) || this.check([0, 0, 1, 179])) {
       return {
         ext: "mpg",
@@ -4830,7 +4830,7 @@ class FileTypeParser {
         mime: "image/x-icon"
       };
     }
-    await tokenizer.peekBuffer(this.buffer, { length: Math.min(2 + this.options.mpegOffsetTolerance, fileSize), mayBeLess: true });
+    await tokenizer.peekBuffer(this.buffer, { length: Math.min(2 + this.options.mpegOffsetTolerance, fileSize2), mayBeLess: true });
     if (this.buffer.length >= 2 + this.options.mpegOffsetTolerance) {
       for (let depth = 0;depth <= this.options.mpegOffsetTolerance; ++depth) {
         const type = this.scanMpeg(depth);
@@ -5523,6 +5523,15 @@ function parseLogLevel(value) {
 function cacheControlOf(block) {
   return block.type === "thinking" ? undefined : block.cacheControl;
 }
+var REASONING_EFFORTS = [
+  "none",
+  "minimal",
+  "low",
+  "medium",
+  "high",
+  "xhigh",
+  "max"
+];
 // packages/ir/src/stream.ts
 function usageFromPromptTotal(promptTokens, outputTokens, cacheReadTokens, cacheWriteTokens = 0) {
   return {
@@ -5751,7 +5760,6 @@ function loadConfig(env) {
   const baseUrl = optionalText(env.OMNI_BASE_URL, derivedBaseUrl).replace(/\/+$/, "") || derivedBaseUrl;
   const staticDir = env.OMNI_STATIC_DIR?.trim();
   const logFile = env.OMNI_LOG_FILE?.trim();
-  const exposeClaudeCodeAliases = TRUTHY.has((env.OMNI_EXPOSE_CLAUDE_CODE_ALIASES ?? "").trim().toLowerCase());
   const bodyLoggingAllowed = TRUTHY.has((env.OMNI_BODY_LOGGING_ALLOWED ?? "").trim().toLowerCase());
   const rawLogLevel = env.OMNI_LOG_LEVEL?.trim();
   const logLevel = parseLogLevel(rawLogLevel);
@@ -5764,7 +5772,6 @@ function loadConfig(env) {
     encryptionKey,
     baseUrl,
     staticDir: staticDir === undefined || staticDir.length === 0 ? null : staticDir,
-    exposeClaudeCodeAliases,
     bodyLoggingAllowed,
     logFile: logFile === undefined || logFile.length === 0 ? null : logFile
   };
@@ -7502,13 +7509,31 @@ var anthropicAdapter = {
     };
   }
 };
-// packages/providers/src/kimi/decode.ts
-var FINISH = {
+// packages/providers/src/custom/decode.ts
+var CHAT_FINISH = {
   stop: "endTurn",
   length: "maxTokens",
   tool_calls: "toolUse",
   content_filter: "contentFilter"
 };
+function reasoningText(delta) {
+  if (typeof delta.reasoning === "string" && delta.reasoning.length > 0)
+    return delta.reasoning;
+  if (typeof delta.reasoning_content === "string" && delta.reasoning_content.length > 0) {
+    return delta.reasoning_content;
+  }
+  if (!Array.isArray(delta.reasoning_details))
+    return "";
+  return delta.reasoning_details.flatMap((entry) => {
+    if (entry === null || typeof entry !== "object")
+      return [];
+    if (typeof entry.text === "string" && entry.text.length > 0)
+      return [entry.text];
+    if (typeof entry.summary === "string" && entry.summary.length > 0)
+      return [entry.summary];
+    return [];
+  }).join("");
+}
 function json2(data) {
   try {
     const v = JSON.parse(data);
@@ -7517,7 +7542,7 @@ function json2(data) {
     return null;
   }
 }
-async function* decodeChat(messages) {
+async function* decodeCustomChat(messages) {
   let started = false;
   let done = false;
   let stopReason = "endTurn";
@@ -7546,6 +7571,21 @@ async function* decodeChat(messages) {
     if (!choice)
       continue;
     const delta = choice.delta ?? {};
+    const reasoning = reasoningText(delta);
+    if (reasoning.length > 0) {
+      if (openKind !== "thinking") {
+        if (openKind !== undefined)
+          yield { type: "blockEnd", index: openIndex };
+        openKind = "thinking";
+        openIndex = nextIndex++;
+        yield { type: "blockStart", index: openIndex, block: { type: "thinking" } };
+      }
+      yield {
+        type: "blockDelta",
+        index: openIndex,
+        delta: { type: "thinking", text: reasoning }
+      };
+    }
     if (typeof delta.content === "string" && delta.content.length > 0) {
       if (openKind !== "text") {
         if (openKind !== undefined)
@@ -7586,7 +7626,7 @@ async function* decodeChat(messages) {
       }
     }
     if (typeof choice.finish_reason === "string") {
-      stopReason = FINISH[choice.finish_reason] ?? "endTurn";
+      stopReason = CHAT_FINISH[choice.finish_reason] ?? "endTurn";
     }
   }
   if (done) {
@@ -7602,110 +7642,7 @@ async function* decodeChat(messages) {
     };
   }
 }
-
-// packages/providers/src/kimi/wire.ts
-function encodeToolChoice2(c) {
-  switch (c.type) {
-    case "auto":
-      return "auto";
-    case "any":
-      return "required";
-    case "none":
-      return "none";
-    case "tool":
-      return { type: "function", function: { name: c.name } };
-  }
-}
-function toChatWire(req, model, vendor = "kimi") {
-  const degradations = [];
-  const note = (d) => {
-    if (!degradations.includes(d))
-      degradations.push(d);
-  };
-  if (req.betas?.includes(CONTEXT_1M_BETA))
-    note("kimi:context-1m-dropped");
-  const messages = [];
-  const system = req.system?.flatMap((b) => b.type === "text" ? [b.text] : []).join(`
-
-`);
-  if (system !== undefined && system.length > 0)
-    messages.push({ role: "system", content: system });
-  for (const message of req.messages) {
-    const text = [];
-    const toolCalls = [];
-    for (const block of message.content) {
-      switch (block.type) {
-        case "text":
-          text.push(block.text);
-          break;
-        case "image":
-          note("kimi:images-dropped");
-          break;
-        case "thinking":
-          note("kimi:thinking-dropped");
-          break;
-        case "toolUse":
-          toolCalls.push({
-            id: block.id,
-            type: "function",
-            function: { name: block.name, arguments: JSON.stringify(block.input) }
-          });
-          break;
-        case "toolResult":
-          messages.push({
-            role: "tool",
-            tool_call_id: block.toolUseId,
-            content: block.content
-          });
-          break;
-        case "anthropicNative":
-          note("kimi:anthropic-native-block-dropped");
-          break;
-      }
-    }
-    if (toolCalls.length > 0) {
-      messages.push({
-        role: message.role,
-        content: text.length > 0 ? text.join(`
-`) : null,
-        tool_calls: toolCalls
-      });
-    } else if (text.length > 0) {
-      messages.push({ role: message.role, content: text.join(`
-`) });
-    }
-  }
-  const body = {
-    model,
-    messages,
-    stream: req.stream,
-    stream_options: { include_usage: true }
-  };
-  if (req.maxTokens !== undefined)
-    body.max_tokens = req.maxTokens;
-  if (req.temperature !== undefined)
-    body.temperature = req.temperature;
-  if (req.stopSequences !== undefined)
-    body.stop = req.stopSequences;
-  if (req.tools !== undefined) {
-    const custom = req.tools.filter((t) => t.provider === "custom");
-    if (custom.length !== req.tools.length)
-      note("kimi:anthropic-tool-dropped");
-    body.tools = custom.map((t) => ({
-      type: "function",
-      function: { name: t.name, description: t.description, parameters: t.inputSchema }
-    }));
-  }
-  if (req.toolChoice !== undefined)
-    body.tool_choice = encodeToolChoice2(req.toolChoice);
-  if (req.reasoning !== undefined)
-    note("kimi:reasoning-dropped");
-  Object.assign(body, req.vendor?.[vendor] ?? {});
-  return { body, degradations };
-}
-
-// packages/providers/src/openai/decode.ts
-var ERROR_CODE = {
+var RESPONSES_ERROR_CODE = {
   rate_limit_exceeded: "RATE_LIMIT",
   insufficient_quota: "QUOTA_EXHAUSTED",
   invalid_api_key: "AUTH",
@@ -7713,15 +7650,7 @@ var ERROR_CODE = {
   context_length_exceeded: "BAD_REQUEST",
   content_policy_violation: "CONTENT_FILTER"
 };
-function json3(data) {
-  try {
-    const v = JSON.parse(data);
-    return typeof v === "object" && v !== null ? v : null;
-  } catch {
-    return null;
-  }
-}
-async function* decodeResponses(messages) {
+async function* decodeCustomResponses(messages) {
   const indices = new Map;
   let next = 0;
   const irIndex = (outputIndex, contentIndex = 0) => {
@@ -7737,7 +7666,7 @@ async function* decodeResponses(messages) {
   let terminal = false;
   const ownsBlock = new Set;
   for await (const msg of messages) {
-    const d = json3(msg.data);
+    const d = json2(msg.data);
     if (d === null)
       continue;
     switch (msg.event) {
@@ -7829,7 +7758,7 @@ async function* decodeResponses(messages) {
       case "error": {
         terminal = true;
         const err = d.response?.error ?? d.error ?? {};
-        const code = ERROR_CODE[String(err.code ?? err.type)] ?? "UPSTREAM";
+        const code = RESPONSES_ERROR_CODE[String(err.code ?? err.type)] ?? "UPSTREAM";
         yield {
           type: "error",
           code,
@@ -7852,8 +7781,20 @@ async function* decodeResponses(messages) {
   }
 }
 
-// packages/providers/src/openai/wire.ts
-function encodeToolChoice3(c) {
+// packages/providers/src/custom/wire.ts
+function encodeChatToolChoice(c) {
+  switch (c.type) {
+    case "auto":
+      return "auto";
+    case "any":
+      return "required";
+    case "none":
+      return "none";
+    case "tool":
+      return { type: "function", function: { name: c.name } };
+  }
+}
+function encodeResponsesToolChoice(c) {
   switch (c.type) {
     case "auto":
       return "auto";
@@ -7865,20 +7806,115 @@ function encodeToolChoice3(c) {
       return { type: "function", name: c.name };
   }
 }
-function toResponsesWire(req, model, opts = { oauth: false }) {
+function customEffort(reasoning) {
+  if (reasoning === undefined || reasoning.mode !== "adaptive")
+    return;
+  return reasoning.effort ?? "medium";
+}
+function toCustomChatWire(req, model) {
   const degradations = [];
-  const input = [];
   const note = (d) => {
     if (!degradations.includes(d))
       degradations.push(d);
   };
   if (req.betas?.includes(CONTEXT_1M_BETA))
-    note("openai:context-1m-dropped");
+    note("custom:context-1m-dropped");
+  const messages = [];
+  const system = req.system?.flatMap((b) => b.type === "text" ? [b.text] : []).join(`
+
+`);
+  if (system !== undefined && system.length > 0)
+    messages.push({ role: "system", content: system });
+  for (const message of req.messages) {
+    const text = [];
+    const toolCalls = [];
+    for (const block of message.content) {
+      switch (block.type) {
+        case "text":
+          text.push(block.text);
+          break;
+        case "image":
+          note("custom:images-dropped");
+          break;
+        case "thinking":
+          note("custom:thinking-dropped");
+          break;
+        case "toolUse":
+          toolCalls.push({
+            id: block.id,
+            type: "function",
+            function: { name: block.name, arguments: JSON.stringify(block.input) }
+          });
+          break;
+        case "toolResult":
+          messages.push({
+            role: "tool",
+            tool_call_id: block.toolUseId,
+            content: block.content
+          });
+          break;
+        case "anthropicNative":
+          note("custom:anthropic-native-block-dropped");
+          break;
+      }
+    }
+    if (toolCalls.length > 0) {
+      messages.push({
+        role: message.role,
+        content: text.length > 0 ? text.join(`
+`) : null,
+        tool_calls: toolCalls
+      });
+    } else if (text.length > 0) {
+      messages.push({ role: message.role, content: text.join(`
+`) });
+    }
+  }
+  const body = {
+    model,
+    messages,
+    stream: req.stream,
+    stream_options: { include_usage: true }
+  };
+  if (req.maxTokens !== undefined)
+    body.max_tokens = req.maxTokens;
+  if (req.temperature !== undefined)
+    body.temperature = req.temperature;
+  if (req.stopSequences !== undefined)
+    body.stop = req.stopSequences;
+  if (req.tools !== undefined) {
+    const portable = req.tools.filter((t) => t.provider === "custom");
+    if (portable.length !== req.tools.length)
+      note("custom:anthropic-tool-dropped");
+    body.tools = portable.map((t) => ({
+      type: "function",
+      function: { name: t.name, description: t.description, parameters: t.inputSchema }
+    }));
+  }
+  if (req.toolChoice !== undefined)
+    body.tool_choice = encodeChatToolChoice(req.toolChoice);
+  const effort = customEffort(req.reasoning);
+  if (effort !== undefined)
+    body.reasoning_effort = effort;
+  else if (req.reasoning?.mode === "budget")
+    note("custom:reasoning-budget-dropped");
+  Object.assign(body, req.vendor?.openai ?? {});
+  return { body, degradations };
+}
+function toCustomResponsesWire(req, model) {
+  const degradations = [];
+  const note = (d) => {
+    if (!degradations.includes(d))
+      degradations.push(d);
+  };
+  const input = [];
+  if (req.betas?.includes(CONTEXT_1M_BETA))
+    note("custom:context-1m-dropped");
   for (const message of req.messages) {
     const parts = [];
     const inlined = message.role === "system";
     if (inlined)
-      note("openai:system-turn-inlined");
+      note("custom:system-turn-inlined");
     const role = inlined ? "user" : message.role;
     const flush = () => {
       if (parts.length === 0)
@@ -7903,9 +7939,7 @@ ${block.text}
           });
           break;
         case "thinking":
-          if (!degradations.includes("openai:thinking-dropped")) {
-            note("openai:thinking-dropped");
-          }
+          note("custom:thinking-dropped");
           break;
         case "toolUse":
           flush();
@@ -7925,7 +7959,7 @@ ${block.text}
           });
           break;
         case "anthropicNative":
-          note("openai:anthropic-native-block-dropped");
+          note("custom:anthropic-native-block-dropped");
           break;
       }
     }
@@ -7937,23 +7971,15 @@ ${block.text}
 `);
   if (instructions !== undefined && instructions.length > 0)
     body.instructions = instructions;
-  if (req.maxTokens !== undefined) {
-    if (opts.oauth)
-      note("openai:max-tokens-dropped");
-    else
-      body.max_output_tokens = req.maxTokens;
-  }
-  if (req.temperature !== undefined) {
-    if (opts.oauth)
-      note("openai:temperature-dropped");
-    else
-      body.temperature = req.temperature;
-  }
+  if (req.maxTokens !== undefined)
+    body.max_output_tokens = req.maxTokens;
+  if (req.temperature !== undefined)
+    body.temperature = req.temperature;
   if (req.tools !== undefined) {
-    const custom = req.tools.filter((t) => t.provider === "custom");
-    if (custom.length !== req.tools.length)
-      note("openai:anthropic-tool-dropped");
-    body.tools = custom.map((t) => ({
+    const portable = req.tools.filter((t) => t.provider === "custom");
+    if (portable.length !== req.tools.length)
+      note("custom:anthropic-tool-dropped");
+    body.tools = portable.map((t) => ({
       type: "function",
       name: t.name,
       description: t.description,
@@ -7961,20 +7987,12 @@ ${block.text}
     }));
   }
   if (req.toolChoice !== undefined)
-    body.tool_choice = encodeToolChoice3(req.toolChoice);
-  if (req.reasoning !== undefined && req.reasoning.mode !== "off") {
-    const effort = req.reasoning.mode === "adaptive" ? req.reasoning.effort ?? "medium" : "medium";
-    if (effort === "xhigh" || effort === "max") {
-      degradations.push("openai:reasoning-effort-clamped");
-    }
-    body.reasoning = {
-      effort: effort === "xhigh" || effort === "max" ? "high" : effort,
-      summary: "auto"
-    };
-    if (req.reasoning.mode === "budget") {
-      degradations.push("openai:reasoning-budget-dropped");
-    }
-  }
+    body.tool_choice = encodeResponsesToolChoice(req.toolChoice);
+  const effort = customEffort(req.reasoning);
+  if (effort !== undefined)
+    body.reasoning = { effort, summary: "auto" };
+  else if (req.reasoning?.mode === "budget")
+    note("custom:reasoning-budget-dropped");
   Object.assign(body, req.vendor?.openai ?? {});
   return { body, degradations };
 }
@@ -7985,7 +8003,13 @@ function metadata(data) {
   if (typeof origin !== "string" || protocol !== "chat_completions" && protocol !== "responses") {
     throw new GatewayError("BAD_REQUEST", "custom credential has invalid endpoint metadata");
   }
-  return { origin, protocol };
+  const basePath = typeof data.basePath === "string" ? data.basePath : "";
+  return { origin, basePath, protocol };
+}
+function endpointUrl(origin, basePath, protocol) {
+  const suffix = protocol === "chat_completions" ? "chat/completions" : "responses";
+  const base = `${origin}${basePath}`.replace(/\/+$/, "");
+  return base.endsWith("/v1") ? `${base}/${suffix}` : `${base}/v1/${suffix}`;
 }
 var customAdapter = {
   id: "custom",
@@ -7995,15 +8019,15 @@ var customAdapter = {
     if (apiKey === null) {
       throw new GatewayError("AUTH", "custom credential has no API key", { provider: "custom" });
     }
-    const { origin, protocol } = metadata(req.credentials.providerData);
-    const encoded = protocol === "chat_completions" ? toChatWire(req.request, req.model, "openai") : toResponsesWire(req.request, req.model);
+    const { origin, basePath, protocol } = metadata(req.credentials.providerData);
+    const encoded = protocol === "chat_completions" ? toCustomChatWire(req.request, req.model) : toCustomResponsesWire(req.request, req.model);
     const headers = [
       ["Content-Type", "application/json"],
       ["Authorization", `Bearer ${apiKey}`]
     ];
     const res = await req.http({
       provider: "custom",
-      url: `${origin}/v1/${protocol === "chat_completions" ? "chat/completions" : "responses"}`,
+      url: endpointUrl(origin, basePath, protocol),
       method: "POST",
       headers,
       body: JSON.stringify({ ...encoded.body, stream: true }),
@@ -8015,8 +8039,8 @@ var customAdapter = {
       throw new GatewayError("UPSTREAM", "empty response body", { provider: "custom" });
     }
     return {
-      events: protocol === "chat_completions" ? decodeChat(parseSse(res.body)) : decodeResponses(parseSse(res.body)),
-      degradations: encoded.degradations.map((value) => value.replace(protocol === "chat_completions" ? /^kimi:/ : /^openai:/, "custom:"))
+      events: protocol === "chat_completions" ? decodeCustomChat(parseSse(res.body)) : decodeCustomResponses(parseSse(res.body)),
+      degradations: encoded.degradations
     };
   }
 };
@@ -8035,7 +8059,7 @@ function grokDeviceHeaders(providerData) {
 import { createHash as createHash2 } from "crypto";
 
 // packages/providers/src/grok/decode.ts
-var ERROR_CODE2 = {
+var ERROR_CODE = {
   rate_limit_exceeded: "RATE_LIMIT",
   insufficient_quota: "QUOTA_EXHAUSTED",
   invalid_api_key: "AUTH",
@@ -8069,7 +8093,7 @@ var KNOWN_EVENTS2 = new Set([
   "response.failed",
   "error"
 ]);
-function json4(data) {
+function json3(data) {
   try {
     const v = JSON.parse(data);
     return typeof v === "object" && v !== null ? v : null;
@@ -8104,7 +8128,7 @@ async function* decodeGrokResponses(messages) {
       };
       return;
     }
-    const d = json4(msg.data);
+    const d = json3(msg.data);
     if (d === null)
       continue;
     switch (msg.event) {
@@ -8197,7 +8221,7 @@ async function* decodeGrokResponses(messages) {
       case "error": {
         terminal = true;
         const err = d.response?.error ?? d.error ?? {};
-        const code = ERROR_CODE2[String(err.code ?? err.type)] ?? "UPSTREAM";
+        const code = ERROR_CODE[String(err.code ?? err.type)] ?? "UPSTREAM";
         yield {
           type: "error",
           code,
@@ -8223,7 +8247,7 @@ async function* decodeGrokResponses(messages) {
 // packages/providers/src/grok/wire.ts
 import { createHash } from "crypto";
 var MAX_TOOLS = 200;
-function encodeToolChoice4(c) {
+function encodeToolChoice2(c) {
   switch (c.type) {
     case "auto":
       return "auto";
@@ -8334,12 +8358,14 @@ ${block.text}
     }));
   }
   if (req.toolChoice !== undefined)
-    body.tool_choice = encodeToolChoice4(req.toolChoice);
+    body.tool_choice = encodeToolChoice2(req.toolChoice);
   if (req.reasoning !== undefined && req.reasoning.mode !== "off") {
-    const effort = req.reasoning.mode === "adaptive" ? req.reasoning.effort ?? "medium" : "medium";
-    body.reasoning = { effort, summary: "concise" };
-    if (req.reasoning.mode === "budget")
+    if (req.reasoning.mode === "budget") {
       note("grok:reasoning-budget-dropped");
+    } else {
+      const effort = req.reasoning.effort ?? "medium";
+      body.reasoning = { effort, summary: "concise" };
+    }
   }
   Object.assign(body, req.vendor?.grok ?? {});
   return { body, degradations };
@@ -8497,13 +8523,13 @@ function hasHeader(req, lowerName) {
   return req.headers.some(([name]) => name.toLowerCase() === lowerName);
 }
 // packages/providers/src/kilo/decode.ts
-var FINISH2 = {
+var FINISH = {
   stop: "endTurn",
   length: "maxTokens",
   tool_calls: "toolUse",
   content_filter: "contentFilter"
 };
-function reasoningText(delta) {
+function reasoningText2(delta) {
   if (typeof delta.reasoning === "string" && delta.reasoning.length > 0)
     return delta.reasoning;
   if (typeof delta.reasoning_content === "string" && delta.reasoning_content.length > 0) {
@@ -8521,7 +8547,7 @@ function reasoningText(delta) {
     return [];
   }).join("");
 }
-function json5(data) {
+function json4(data) {
   try {
     const v = JSON.parse(data);
     return typeof v === "object" && v !== null ? v : null;
@@ -8543,7 +8569,7 @@ async function* decodeKiloChat(messages) {
       done = true;
       break;
     }
-    const d = json5(msg.data);
+    const d = json4(msg.data);
     if (d === null)
       continue;
     if (!started && (d.id !== undefined || d.model !== undefined)) {
@@ -8558,7 +8584,7 @@ async function* decodeKiloChat(messages) {
     if (!choice)
       continue;
     const delta = choice.delta ?? {};
-    const reasoning = reasoningText(delta);
+    const reasoning = reasoningText2(delta);
     if (reasoning.length > 0) {
       if (openKind !== "thinking") {
         if (openKind !== undefined)
@@ -8614,7 +8640,7 @@ async function* decodeKiloChat(messages) {
       }
     }
     if (typeof choice.finish_reason === "string") {
-      stopReason = FINISH2[choice.finish_reason] ?? "endTurn";
+      stopReason = FINISH[choice.finish_reason] ?? "endTurn";
     }
   }
   if (done) {
@@ -8632,7 +8658,7 @@ async function* decodeKiloChat(messages) {
 }
 
 // packages/providers/src/kilo/wire.ts
-function encodeToolChoice5(c) {
+function encodeToolChoice3(c) {
   switch (c.type) {
     case "auto":
       return "auto";
@@ -8745,15 +8771,12 @@ function toKiloWire(req, model) {
     }));
   }
   if (req.toolChoice !== undefined)
-    body.tool_choice = encodeToolChoice5(req.toolChoice);
+    body.tool_choice = encodeToolChoice3(req.toolChoice);
   if (req.reasoning !== undefined && req.reasoning.mode !== "off") {
     if (req.reasoning.mode === "budget") {
       body.reasoning = { max_tokens: req.reasoning.budgetTokens };
     } else {
-      const effort = req.reasoning.effort ?? "medium";
-      if (effort === "xhigh" || effort === "max")
-        note("kilo:reasoning-effort-clamped");
-      body.reasoning = { effort: effort === "xhigh" || effort === "max" ? "high" : effort };
+      body.reasoning = { effort: req.reasoning.effort ?? "medium" };
     }
   }
   Object.assign(body, req.vendor?.kilo ?? {});
@@ -8823,6 +8846,208 @@ function kimiDeviceHeaders(providerData) {
     ["X-Msh-Os-Version", str(providerData.osVersion)]
   ];
 }
+// packages/providers/src/kimi/decode.ts
+var FINISH2 = {
+  stop: "endTurn",
+  length: "maxTokens",
+  tool_calls: "toolUse",
+  content_filter: "contentFilter"
+};
+function json5(data) {
+  try {
+    const v = JSON.parse(data);
+    return typeof v === "object" && v !== null ? v : null;
+  } catch {
+    return null;
+  }
+}
+async function* decodeChat(messages) {
+  let started = false;
+  let done = false;
+  let stopReason = "endTurn";
+  let usage = { inputTokens: 0, outputTokens: 0, cacheReadTokens: 0, cacheWriteTokens: 0 };
+  const toolIndex = new Map;
+  let nextIndex = 0;
+  let openKind;
+  let openIndex = 0;
+  for await (const msg of messages) {
+    if (msg.data === "[DONE]") {
+      done = true;
+      break;
+    }
+    const d = json5(msg.data);
+    if (d === null)
+      continue;
+    if (!started && (d.id !== undefined || d.model !== undefined)) {
+      started = true;
+      yield { type: "start", id: String(d.id ?? ""), model: String(d.model ?? "") };
+    }
+    if (d.usage) {
+      const details = d.usage.prompt_tokens_details;
+      usage = usageFromPromptTotal(d.usage.prompt_tokens ?? 0, d.usage.completion_tokens ?? 0, details?.cached_tokens ?? d.usage.prompt_cache_hit_tokens ?? 0, details?.cache_creation_tokens ?? details?.cache_write_tokens ?? 0);
+    }
+    const choice = d.choices?.[0];
+    if (!choice)
+      continue;
+    const delta = choice.delta ?? {};
+    if (typeof delta.content === "string" && delta.content.length > 0) {
+      if (openKind !== "text") {
+        if (openKind !== undefined)
+          yield { type: "blockEnd", index: openIndex };
+        openKind = "text";
+        openIndex = nextIndex++;
+        yield { type: "blockStart", index: openIndex, block: { type: "text" } };
+      }
+      yield {
+        type: "blockDelta",
+        index: openIndex,
+        delta: { type: "text", text: delta.content }
+      };
+    }
+    for (const call of delta.tool_calls ?? []) {
+      const wireIndex = call.index ?? 0;
+      let index = toolIndex.get(wireIndex);
+      if (index === undefined) {
+        if (openKind !== undefined)
+          yield { type: "blockEnd", index: openIndex };
+        index = nextIndex++;
+        toolIndex.set(wireIndex, index);
+        openKind = "tool";
+        openIndex = index;
+        yield {
+          type: "blockStart",
+          index,
+          block: {
+            type: "toolUse",
+            id: String(call.id ?? `call_${wireIndex}`),
+            name: String(call.function?.name ?? "")
+          }
+        };
+      }
+      const args = call.function?.arguments;
+      if (typeof args === "string" && args.length > 0) {
+        yield { type: "blockDelta", index, delta: { type: "toolJson", partial: args } };
+      }
+    }
+    if (typeof choice.finish_reason === "string") {
+      stopReason = FINISH2[choice.finish_reason] ?? "endTurn";
+    }
+  }
+  if (done) {
+    if (openKind !== undefined)
+      yield { type: "blockEnd", index: openIndex };
+    yield { type: "end", stopReason, usage };
+  } else {
+    yield {
+      type: "error",
+      code: "UPSTREAM",
+      message: "upstream stream ended before [DONE]",
+      retryable: RETRYABLE.UPSTREAM
+    };
+  }
+}
+
+// packages/providers/src/kimi/wire.ts
+function encodeToolChoice4(c) {
+  switch (c.type) {
+    case "auto":
+      return "auto";
+    case "any":
+      return "required";
+    case "none":
+      return "none";
+    case "tool":
+      return { type: "function", function: { name: c.name } };
+  }
+}
+function toChatWire(req, model, vendor = "kimi") {
+  const degradations = [];
+  const note = (d) => {
+    if (!degradations.includes(d))
+      degradations.push(d);
+  };
+  if (req.betas?.includes(CONTEXT_1M_BETA))
+    note("kimi:context-1m-dropped");
+  const messages = [];
+  const system = req.system?.flatMap((b) => b.type === "text" ? [b.text] : []).join(`
+
+`);
+  if (system !== undefined && system.length > 0)
+    messages.push({ role: "system", content: system });
+  for (const message of req.messages) {
+    const text = [];
+    const toolCalls = [];
+    for (const block of message.content) {
+      switch (block.type) {
+        case "text":
+          text.push(block.text);
+          break;
+        case "image":
+          note("kimi:images-dropped");
+          break;
+        case "thinking":
+          note("kimi:thinking-dropped");
+          break;
+        case "toolUse":
+          toolCalls.push({
+            id: block.id,
+            type: "function",
+            function: { name: block.name, arguments: JSON.stringify(block.input) }
+          });
+          break;
+        case "toolResult":
+          messages.push({
+            role: "tool",
+            tool_call_id: block.toolUseId,
+            content: block.content
+          });
+          break;
+        case "anthropicNative":
+          note("kimi:anthropic-native-block-dropped");
+          break;
+      }
+    }
+    if (toolCalls.length > 0) {
+      messages.push({
+        role: message.role,
+        content: text.length > 0 ? text.join(`
+`) : null,
+        tool_calls: toolCalls
+      });
+    } else if (text.length > 0) {
+      messages.push({ role: message.role, content: text.join(`
+`) });
+    }
+  }
+  const body = {
+    model,
+    messages,
+    stream: req.stream,
+    stream_options: { include_usage: true }
+  };
+  if (req.maxTokens !== undefined)
+    body.max_tokens = req.maxTokens;
+  if (req.temperature !== undefined)
+    body.temperature = req.temperature;
+  if (req.stopSequences !== undefined)
+    body.stop = req.stopSequences;
+  if (req.tools !== undefined) {
+    const custom = req.tools.filter((t) => t.provider === "custom");
+    if (custom.length !== req.tools.length)
+      note("kimi:anthropic-tool-dropped");
+    body.tools = custom.map((t) => ({
+      type: "function",
+      function: { name: t.name, description: t.description, parameters: t.inputSchema }
+    }));
+  }
+  if (req.toolChoice !== undefined)
+    body.tool_choice = encodeToolChoice4(req.toolChoice);
+  if (req.reasoning !== undefined)
+    note("kimi:reasoning-dropped");
+  Object.assign(body, req.vendor?.[vendor] ?? {});
+  return { body, degradations };
+}
+
 // packages/providers/src/kimi/index.ts
 var BASE_URL2 = "https://api.kimi.com/coding/v1/chat/completions";
 var kimiAdapter = {
@@ -8857,6 +9082,276 @@ var kimiAdapter = {
     return { events: decodeChat(parseSse(res.body)), degradations };
   }
 };
+// packages/providers/src/openai/decode.ts
+var ERROR_CODE2 = {
+  rate_limit_exceeded: "RATE_LIMIT",
+  insufficient_quota: "QUOTA_EXHAUSTED",
+  invalid_api_key: "AUTH",
+  server_error: "UPSTREAM",
+  context_length_exceeded: "BAD_REQUEST",
+  content_policy_violation: "CONTENT_FILTER"
+};
+function json6(data) {
+  try {
+    const v = JSON.parse(data);
+    return typeof v === "object" && v !== null ? v : null;
+  } catch {
+    return null;
+  }
+}
+async function* decodeResponses(messages) {
+  const indices = new Map;
+  let next = 0;
+  const irIndex = (outputIndex, contentIndex = 0) => {
+    const key = `${outputIndex}:${contentIndex}`;
+    const existing = indices.get(key);
+    if (existing !== undefined)
+      return existing;
+    const assigned = next++;
+    indices.set(key, assigned);
+    return assigned;
+  };
+  let sawToolCall = false;
+  let terminal = false;
+  const ownsBlock = new Set;
+  for await (const msg of messages) {
+    const d = json6(msg.data);
+    if (d === null)
+      continue;
+    switch (msg.event) {
+      case "response.created":
+        yield {
+          type: "start",
+          id: String(d.response?.id ?? ""),
+          model: String(d.response?.model ?? "")
+        };
+        break;
+      case "response.output_item.added": {
+        const item = d.item ?? {};
+        if (item.type === "reasoning") {
+          ownsBlock.add(d.output_index ?? 0);
+          yield {
+            type: "blockStart",
+            index: irIndex(d.output_index ?? 0),
+            block: { type: "thinking" }
+          };
+        } else if (item.type === "function_call") {
+          sawToolCall = true;
+          ownsBlock.add(d.output_index ?? 0);
+          yield {
+            type: "blockStart",
+            index: irIndex(d.output_index ?? 0),
+            block: { type: "toolUse", id: String(item.call_id), name: String(item.name) }
+          };
+        }
+        break;
+      }
+      case "response.content_part.added":
+        if (d.part?.type === "output_text") {
+          yield {
+            type: "blockStart",
+            index: irIndex(d.output_index ?? 0, d.content_index ?? 0),
+            block: { type: "text" }
+          };
+        }
+        break;
+      case "response.output_text.delta":
+        yield {
+          type: "blockDelta",
+          index: irIndex(d.output_index ?? 0, d.content_index ?? 0),
+          delta: { type: "text", text: String(d.delta ?? "") }
+        };
+        break;
+      case "response.reasoning_summary_text.delta":
+        yield {
+          type: "blockDelta",
+          index: irIndex(d.output_index ?? 0),
+          delta: { type: "thinking", text: String(d.delta ?? "") }
+        };
+        break;
+      case "response.function_call_arguments.delta":
+        yield {
+          type: "blockDelta",
+          index: irIndex(d.output_index ?? 0),
+          delta: { type: "toolJson", partial: String(d.delta ?? "") }
+        };
+        break;
+      case "response.content_part.done":
+        yield { type: "blockEnd", index: irIndex(d.output_index ?? 0, d.content_index ?? 0) };
+        break;
+      case "response.output_item.done": {
+        const outputIndex = d.output_index ?? 0;
+        if (ownsBlock.delete(outputIndex)) {
+          yield { type: "blockEnd", index: irIndex(outputIndex) };
+        }
+        break;
+      }
+      case "response.completed":
+      case "response.incomplete": {
+        terminal = true;
+        const r = d.response ?? {};
+        const reason = r.incomplete_details?.reason;
+        let stopReason = sawToolCall ? "toolUse" : "endTurn";
+        if (reason === "max_output_tokens")
+          stopReason = "maxTokens";
+        else if (reason === "content_filter")
+          stopReason = "contentFilter";
+        yield {
+          type: "end",
+          stopReason,
+          usage: usageFromPromptTotal(r.usage?.input_tokens ?? 0, r.usage?.output_tokens ?? 0, r.usage?.input_tokens_details?.cached_tokens ?? r.usage?.prompt_tokens_details?.cached_tokens ?? 0)
+        };
+        break;
+      }
+      case "response.failed":
+      case "error": {
+        terminal = true;
+        const err = d.response?.error ?? d.error ?? {};
+        const code = ERROR_CODE2[String(err.code ?? err.type)] ?? "UPSTREAM";
+        yield {
+          type: "error",
+          code,
+          message: String(err.message ?? "upstream error"),
+          retryable: RETRYABLE[code]
+        };
+        break;
+      }
+      default:
+        break;
+    }
+  }
+  if (!terminal) {
+    yield {
+      type: "error",
+      code: "UPSTREAM",
+      message: "upstream stream ended before response completion",
+      retryable: RETRYABLE.UPSTREAM
+    };
+  }
+}
+
+// packages/providers/src/openai/wire.ts
+function encodeToolChoice5(c) {
+  switch (c.type) {
+    case "auto":
+      return "auto";
+    case "any":
+      return "required";
+    case "none":
+      return "none";
+    case "tool":
+      return { type: "function", name: c.name };
+  }
+}
+function toResponsesWire(req, model, opts = { oauth: false }) {
+  const degradations = [];
+  const input = [];
+  const note = (d) => {
+    if (!degradations.includes(d))
+      degradations.push(d);
+  };
+  if (req.betas?.includes(CONTEXT_1M_BETA))
+    note("openai:context-1m-dropped");
+  for (const message of req.messages) {
+    const parts = [];
+    const inlined = message.role === "system";
+    if (inlined)
+      note("openai:system-turn-inlined");
+    const role = inlined ? "user" : message.role;
+    const flush = () => {
+      if (parts.length === 0)
+        return;
+      input.push({ type: "message", role, content: [...parts] });
+      parts.length = 0;
+    };
+    for (const block of message.content) {
+      switch (block.type) {
+        case "text":
+          parts.push({
+            type: role === "assistant" ? "output_text" : "input_text",
+            text: inlined ? `<system-reminder>
+${block.text}
+</system-reminder>` : block.text
+          });
+          break;
+        case "image":
+          parts.push({
+            type: "input_image",
+            image_url: `data:${block.mediaType};base64,${block.data}`
+          });
+          break;
+        case "thinking":
+          if (!degradations.includes("openai:thinking-dropped")) {
+            note("openai:thinking-dropped");
+          }
+          break;
+        case "toolUse":
+          flush();
+          input.push({
+            type: "function_call",
+            call_id: block.id,
+            name: block.name,
+            arguments: JSON.stringify(block.input)
+          });
+          break;
+        case "toolResult":
+          flush();
+          input.push({
+            type: "function_call_output",
+            call_id: block.toolUseId,
+            output: block.content
+          });
+          break;
+        case "anthropicNative":
+          note("openai:anthropic-native-block-dropped");
+          break;
+      }
+    }
+    flush();
+  }
+  const body = { model, input, stream: req.stream, store: false };
+  const instructions = req.system?.flatMap((b) => b.type === "text" ? [b.text] : []).join(`
+
+`);
+  if (instructions !== undefined && instructions.length > 0)
+    body.instructions = instructions;
+  if (req.maxTokens !== undefined) {
+    if (opts.oauth)
+      note("openai:max-tokens-dropped");
+    else
+      body.max_output_tokens = req.maxTokens;
+  }
+  if (req.temperature !== undefined) {
+    if (opts.oauth)
+      note("openai:temperature-dropped");
+    else
+      body.temperature = req.temperature;
+  }
+  if (req.tools !== undefined) {
+    const custom = req.tools.filter((t) => t.provider === "custom");
+    if (custom.length !== req.tools.length)
+      note("openai:anthropic-tool-dropped");
+    body.tools = custom.map((t) => ({
+      type: "function",
+      name: t.name,
+      description: t.description,
+      parameters: t.inputSchema
+    }));
+  }
+  if (req.toolChoice !== undefined)
+    body.tool_choice = encodeToolChoice5(req.toolChoice);
+  if (req.reasoning !== undefined && req.reasoning.mode !== "off") {
+    if (req.reasoning.mode === "budget") {
+      degradations.push("openai:reasoning-budget-dropped");
+    } else {
+      const effort = req.reasoning.effort ?? "medium";
+      body.reasoning = { effort, summary: "auto" };
+    }
+  }
+  Object.assign(body, req.vendor?.openai ?? {});
+  return { body, degradations };
+}
+
 // packages/providers/src/openai/index.ts
 var OAUTH_URL2 = "https://chatgpt.com/backend-api/codex/responses";
 var API_URL3 = "https://api.openai.com/v1/responses";
@@ -9268,7 +9763,7 @@ __export(exports_external, {
   ipv4: () => ipv42,
   ipv6: () => ipv62,
   iso: () => exports_iso,
-  json: () => json6,
+  json: () => json7,
   jwt: () => jwt,
   keyof: () => keyof,
   ksuid: () => ksuid2,
@@ -20709,29 +21204,29 @@ var formatMap = {
   regex: ""
 };
 var stringProcessor = (schema, ctx, _json, _params) => {
-  const json6 = _json;
-  json6.type = "string";
+  const json7 = _json;
+  json7.type = "string";
   const { minimum, maximum, format, patterns, contentEncoding } = schema._zod.bag;
   if (typeof minimum === "number")
-    json6.minLength = minimum;
+    json7.minLength = minimum;
   if (typeof maximum === "number")
-    json6.maxLength = maximum;
+    json7.maxLength = maximum;
   if (format) {
-    json6.format = formatMap[format] ?? format;
-    if (json6.format === "")
-      delete json6.format;
+    json7.format = formatMap[format] ?? format;
+    if (json7.format === "")
+      delete json7.format;
     if (format === "time") {
-      delete json6.format;
+      delete json7.format;
     }
   }
   if (contentEncoding)
-    json6.contentEncoding = contentEncoding;
+    json7.contentEncoding = contentEncoding;
   if (patterns && patterns.size > 0) {
     const regexes = [...patterns];
     if (regexes.length === 1)
-      json6.pattern = regexes[0].source;
+      json7.pattern = regexes[0].source;
     else if (regexes.length > 1) {
-      json6.allOf = [
+      json7.allOf = [
         ...regexes.map((regex) => ({
           ...ctx.target === "draft-07" || ctx.target === "draft-04" || ctx.target === "openapi-3.0" ? { type: "string" } : {},
           pattern: regex.source
@@ -20741,40 +21236,40 @@ var stringProcessor = (schema, ctx, _json, _params) => {
   }
 };
 var numberProcessor = (schema, ctx, _json, _params) => {
-  const json6 = _json;
+  const json7 = _json;
   const { minimum, maximum, format, multipleOf, exclusiveMaximum, exclusiveMinimum } = schema._zod.bag;
   if (typeof format === "string" && format.includes("int"))
-    json6.type = "integer";
+    json7.type = "integer";
   else
-    json6.type = "number";
+    json7.type = "number";
   const exMin = typeof exclusiveMinimum === "number" && exclusiveMinimum >= (minimum ?? Number.NEGATIVE_INFINITY);
   const exMax = typeof exclusiveMaximum === "number" && exclusiveMaximum <= (maximum ?? Number.POSITIVE_INFINITY);
   const legacy = ctx.target === "draft-04" || ctx.target === "openapi-3.0";
   if (exMin) {
     if (legacy) {
-      json6.minimum = exclusiveMinimum;
-      json6.exclusiveMinimum = true;
+      json7.minimum = exclusiveMinimum;
+      json7.exclusiveMinimum = true;
     } else {
-      json6.exclusiveMinimum = exclusiveMinimum;
+      json7.exclusiveMinimum = exclusiveMinimum;
     }
   } else if (typeof minimum === "number") {
-    json6.minimum = minimum;
+    json7.minimum = minimum;
   }
   if (exMax) {
     if (legacy) {
-      json6.maximum = exclusiveMaximum;
-      json6.exclusiveMaximum = true;
+      json7.maximum = exclusiveMaximum;
+      json7.exclusiveMaximum = true;
     } else {
-      json6.exclusiveMaximum = exclusiveMaximum;
+      json7.exclusiveMaximum = exclusiveMaximum;
     }
   } else if (typeof maximum === "number") {
-    json6.maximum = maximum;
+    json7.maximum = maximum;
   }
   if (typeof multipleOf === "number")
-    json6.multipleOf = multipleOf;
+    json7.multipleOf = multipleOf;
 };
-var booleanProcessor = (_schema, _ctx, json6, _params) => {
-  json6.type = "boolean";
+var booleanProcessor = (_schema, _ctx, json7, _params) => {
+  json7.type = "boolean";
 };
 var bigintProcessor = (_schema, ctx, _json, _params) => {
   if (ctx.unrepresentable === "throw") {
@@ -20786,13 +21281,13 @@ var symbolProcessor = (_schema, ctx, _json, _params) => {
     throw new Error("Symbols cannot be represented in JSON Schema");
   }
 };
-var nullProcessor = (_schema, ctx, json6, _params) => {
+var nullProcessor = (_schema, ctx, json7, _params) => {
   if (ctx.target === "openapi-3.0") {
-    json6.type = "string";
-    json6.nullable = true;
-    json6.enum = [null];
+    json7.type = "string";
+    json7.nullable = true;
+    json7.enum = [null];
   } else {
-    json6.type = "null";
+    json7.type = "null";
   }
 };
 var undefinedProcessor = (_schema, ctx, _json, _params) => {
@@ -20805,8 +21300,8 @@ var voidProcessor = (_schema, ctx, _json, _params) => {
     throw new Error("Void cannot be represented in JSON Schema");
   }
 };
-var neverProcessor = (_schema, _ctx, json6, _params) => {
-  json6.not = {};
+var neverProcessor = (_schema, _ctx, json7, _params) => {
+  json7.not = {};
 };
 var anyProcessor = (_schema, _ctx, _json, _params) => {};
 var unknownProcessor = (_schema, _ctx, _json, _params) => {};
@@ -20815,16 +21310,16 @@ var dateProcessor = (_schema, ctx, _json, _params) => {
     throw new Error("Date cannot be represented in JSON Schema");
   }
 };
-var enumProcessor = (schema, _ctx, json6, _params) => {
+var enumProcessor = (schema, _ctx, json7, _params) => {
   const def = schema._zod.def;
   const values = getEnumValues(def.entries);
   if (values.every((v) => typeof v === "number"))
-    json6.type = "number";
+    json7.type = "number";
   if (values.every((v) => typeof v === "string"))
-    json6.type = "string";
-  json6.enum = values;
+    json7.type = "string";
+  json7.enum = values;
 };
-var literalProcessor = (schema, ctx, json6, _params) => {
+var literalProcessor = (schema, ctx, json7, _params) => {
   const def = schema._zod.def;
   const vals = [];
   for (const val of def.values) {
@@ -20844,22 +21339,22 @@ var literalProcessor = (schema, ctx, json6, _params) => {
   }
   if (vals.length === 0) {} else if (vals.length === 1) {
     const val = vals[0];
-    json6.type = val === null ? "null" : typeof val;
+    json7.type = val === null ? "null" : typeof val;
     if (ctx.target === "draft-04" || ctx.target === "openapi-3.0") {
-      json6.enum = [val];
+      json7.enum = [val];
     } else {
-      json6.const = val;
+      json7.const = val;
     }
   } else {
     if (vals.every((v) => typeof v === "number"))
-      json6.type = "number";
+      json7.type = "number";
     if (vals.every((v) => typeof v === "string"))
-      json6.type = "string";
+      json7.type = "string";
     if (vals.every((v) => typeof v === "boolean"))
-      json6.type = "boolean";
+      json7.type = "boolean";
     if (vals.every((v) => v === null))
-      json6.type = "null";
-    json6.enum = vals;
+      json7.type = "null";
+    json7.enum = vals;
   }
 };
 var nanProcessor = (_schema, ctx, _json, _params) => {
@@ -20867,16 +21362,16 @@ var nanProcessor = (_schema, ctx, _json, _params) => {
     throw new Error("NaN cannot be represented in JSON Schema");
   }
 };
-var templateLiteralProcessor = (schema, _ctx, json6, _params) => {
-  const _json = json6;
+var templateLiteralProcessor = (schema, _ctx, json7, _params) => {
+  const _json = json7;
   const pattern = schema._zod.pattern;
   if (!pattern)
     throw new Error("Pattern not found in template literal");
   _json.type = "string";
   _json.pattern = pattern.source;
 };
-var fileProcessor = (schema, _ctx, json6, _params) => {
-  const _json = json6;
+var fileProcessor = (schema, _ctx, json7, _params) => {
+  const _json = json7;
   const file = {
     type: "string",
     format: "binary",
@@ -20899,8 +21394,8 @@ var fileProcessor = (schema, _ctx, json6, _params) => {
     Object.assign(_json, file);
   }
 };
-var successProcessor = (_schema, _ctx, json6, _params) => {
-  json6.type = "boolean";
+var successProcessor = (_schema, _ctx, json7, _params) => {
+  json7.type = "boolean";
 };
 var customProcessor = (_schema, ctx, _json, _params) => {
   if (ctx.unrepresentable === "throw") {
@@ -20928,27 +21423,27 @@ var setProcessor = (_schema, ctx, _json, _params) => {
   }
 };
 var arrayProcessor = (schema, ctx, _json, params) => {
-  const json6 = _json;
+  const json7 = _json;
   const def = schema._zod.def;
   const { minimum, maximum } = schema._zod.bag;
   if (typeof minimum === "number")
-    json6.minItems = minimum;
+    json7.minItems = minimum;
   if (typeof maximum === "number")
-    json6.maxItems = maximum;
-  json6.type = "array";
-  json6.items = process2(def.element, ctx, {
+    json7.maxItems = maximum;
+  json7.type = "array";
+  json7.items = process2(def.element, ctx, {
     ...params,
     path: [...params.path, "items"]
   });
 };
 var objectProcessor = (schema, ctx, _json, params) => {
-  const json6 = _json;
+  const json7 = _json;
   const def = schema._zod.def;
-  json6.type = "object";
-  json6.properties = {};
+  json7.type = "object";
+  json7.properties = {};
   const shape = def.shape;
   for (const key in shape) {
-    json6.properties[key] = process2(shape[key], ctx, {
+    json7.properties[key] = process2(shape[key], ctx, {
       ...params,
       path: [...params.path, "properties", key]
     });
@@ -20963,21 +21458,21 @@ var objectProcessor = (schema, ctx, _json, params) => {
     }
   }));
   if (requiredKeys.size > 0) {
-    json6.required = Array.from(requiredKeys);
+    json7.required = Array.from(requiredKeys);
   }
   if (def.catchall?._zod.def.type === "never") {
-    json6.additionalProperties = false;
+    json7.additionalProperties = false;
   } else if (!def.catchall) {
     if (ctx.io === "output")
-      json6.additionalProperties = false;
+      json7.additionalProperties = false;
   } else if (def.catchall) {
-    json6.additionalProperties = process2(def.catchall, ctx, {
+    json7.additionalProperties = process2(def.catchall, ctx, {
       ...params,
       path: [...params.path, "additionalProperties"]
     });
   }
 };
-var unionProcessor = (schema, ctx, json6, params) => {
+var unionProcessor = (schema, ctx, json7, params) => {
   const def = schema._zod.def;
   const isExclusive = def.inclusive === false;
   const options = def.options.map((x, i) => process2(x, ctx, {
@@ -20985,12 +21480,12 @@ var unionProcessor = (schema, ctx, json6, params) => {
     path: [...params.path, isExclusive ? "oneOf" : "anyOf", i]
   }));
   if (isExclusive) {
-    json6.oneOf = options;
+    json7.oneOf = options;
   } else {
-    json6.anyOf = options;
+    json7.anyOf = options;
   }
 };
-var intersectionProcessor = (schema, ctx, json6, params) => {
+var intersectionProcessor = (schema, ctx, json7, params) => {
   const def = schema._zod.def;
   const a = process2(def.left, ctx, {
     ...params,
@@ -21005,12 +21500,12 @@ var intersectionProcessor = (schema, ctx, json6, params) => {
     ...isSimpleIntersection(a) ? a.allOf : [a],
     ...isSimpleIntersection(b) ? b.allOf : [b]
   ];
-  json6.allOf = allOf;
+  json7.allOf = allOf;
 };
 var tupleProcessor = (schema, ctx, _json, params) => {
-  const json6 = _json;
+  const json7 = _json;
   const def = schema._zod.def;
-  json6.type = "array";
+  json7.type = "array";
   const prefixPath = ctx.target === "draft-2020-12" ? "prefixItems" : "items";
   const restPath = ctx.target === "draft-2020-12" ? "items" : ctx.target === "openapi-3.0" ? "items" : "additionalItems";
   const prefixItems = def.items.map((x, i) => process2(x, ctx, {
@@ -21022,37 +21517,37 @@ var tupleProcessor = (schema, ctx, _json, params) => {
     path: [...params.path, restPath, ...ctx.target === "openapi-3.0" ? [def.items.length] : []]
   }) : null;
   if (ctx.target === "draft-2020-12") {
-    json6.prefixItems = prefixItems;
+    json7.prefixItems = prefixItems;
     if (rest) {
-      json6.items = rest;
+      json7.items = rest;
     }
   } else if (ctx.target === "openapi-3.0") {
-    json6.items = {
+    json7.items = {
       anyOf: prefixItems
     };
     if (rest) {
-      json6.items.anyOf.push(rest);
+      json7.items.anyOf.push(rest);
     }
-    json6.minItems = prefixItems.length;
+    json7.minItems = prefixItems.length;
     if (!rest) {
-      json6.maxItems = prefixItems.length;
+      json7.maxItems = prefixItems.length;
     }
   } else {
-    json6.items = prefixItems;
+    json7.items = prefixItems;
     if (rest) {
-      json6.additionalItems = rest;
+      json7.additionalItems = rest;
     }
   }
   const { minimum, maximum } = schema._zod.bag;
   if (typeof minimum === "number")
-    json6.minItems = minimum;
+    json7.minItems = minimum;
   if (typeof maximum === "number")
-    json6.maxItems = maximum;
+    json7.maxItems = maximum;
 };
 var recordProcessor = (schema, ctx, _json, params) => {
-  const json6 = _json;
+  const json7 = _json;
   const def = schema._zod.def;
-  json6.type = "object";
+  json7.type = "object";
   const keyType = def.keyType;
   const keyBag = keyType._zod.bag;
   const patterns = keyBag?.patterns;
@@ -21061,18 +21556,18 @@ var recordProcessor = (schema, ctx, _json, params) => {
       ...params,
       path: [...params.path, "patternProperties", "*"]
     });
-    json6.patternProperties = {};
+    json7.patternProperties = {};
     for (const pattern of patterns) {
-      json6.patternProperties[pattern.source] = valueSchema;
+      json7.patternProperties[pattern.source] = valueSchema;
     }
   } else {
     if (ctx.target === "draft-07" || ctx.target === "draft-2020-12") {
-      json6.propertyNames = process2(def.keyType, ctx, {
+      json7.propertyNames = process2(def.keyType, ctx, {
         ...params,
         path: [...params.path, "propertyNames"]
       });
     }
-    json6.additionalProperties = process2(def.valueType, ctx, {
+    json7.additionalProperties = process2(def.valueType, ctx, {
       ...params,
       path: [...params.path, "additionalProperties"]
     });
@@ -21081,19 +21576,19 @@ var recordProcessor = (schema, ctx, _json, params) => {
   if (keyValues) {
     const validKeyValues = [...keyValues].filter((v) => typeof v === "string" || typeof v === "number");
     if (validKeyValues.length > 0) {
-      json6.required = validKeyValues;
+      json7.required = validKeyValues;
     }
   }
 };
-var nullableProcessor = (schema, ctx, json6, params) => {
+var nullableProcessor = (schema, ctx, json7, params) => {
   const def = schema._zod.def;
   const inner = process2(def.innerType, ctx, params);
   const seen = ctx.seen.get(schema);
   if (ctx.target === "openapi-3.0") {
     seen.ref = def.innerType;
-    json6.nullable = true;
+    json7.nullable = true;
   } else {
-    json6.anyOf = [inner, { type: "null" }];
+    json7.anyOf = [inner, { type: "null" }];
   }
 };
 var nonoptionalProcessor = (schema, ctx, _json, params) => {
@@ -21102,22 +21597,22 @@ var nonoptionalProcessor = (schema, ctx, _json, params) => {
   const seen = ctx.seen.get(schema);
   seen.ref = def.innerType;
 };
-var defaultProcessor = (schema, ctx, json6, params) => {
+var defaultProcessor = (schema, ctx, json7, params) => {
   const def = schema._zod.def;
   process2(def.innerType, ctx, params);
   const seen = ctx.seen.get(schema);
   seen.ref = def.innerType;
-  json6.default = JSON.parse(JSON.stringify(def.defaultValue));
+  json7.default = JSON.parse(JSON.stringify(def.defaultValue));
 };
-var prefaultProcessor = (schema, ctx, json6, params) => {
+var prefaultProcessor = (schema, ctx, json7, params) => {
   const def = schema._zod.def;
   process2(def.innerType, ctx, params);
   const seen = ctx.seen.get(schema);
   seen.ref = def.innerType;
   if (ctx.io === "input")
-    json6._prefault = JSON.parse(JSON.stringify(def.defaultValue));
+    json7._prefault = JSON.parse(JSON.stringify(def.defaultValue));
 };
-var catchProcessor = (schema, ctx, json6, params) => {
+var catchProcessor = (schema, ctx, json7, params) => {
   const def = schema._zod.def;
   process2(def.innerType, ctx, params);
   const seen = ctx.seen.get(schema);
@@ -21128,7 +21623,7 @@ var catchProcessor = (schema, ctx, json6, params) => {
   } catch {
     throw new Error("Dynamic catch values are not supported in JSON Schema");
   }
-  json6.default = catchValue;
+  json7.default = catchValue;
 };
 var pipeProcessor = (schema, ctx, _json, params) => {
   const def = schema._zod.def;
@@ -21138,12 +21633,12 @@ var pipeProcessor = (schema, ctx, _json, params) => {
   const seen = ctx.seen.get(schema);
   seen.ref = innerType;
 };
-var readonlyProcessor = (schema, ctx, json6, params) => {
+var readonlyProcessor = (schema, ctx, json7, params) => {
   const def = schema._zod.def;
   process2(def.innerType, ctx, params);
   const seen = ctx.seen.get(schema);
   seen.ref = def.innerType;
-  json6.readOnly = true;
+  json7.readOnly = true;
 };
 var promiseProcessor = (schema, ctx, _json, params) => {
   const def = schema._zod.def;
@@ -21413,7 +21908,7 @@ __export(exports_schemas2, {
   invertCodec: () => invertCodec,
   ipv4: () => ipv42,
   ipv6: () => ipv62,
-  json: () => json6,
+  json: () => json7,
   jwt: () => jwt,
   keyof: () => keyof,
   ksuid: () => ksuid2,
@@ -21764,7 +22259,7 @@ var ZodType = /* @__PURE__ */ $constructor("ZodType", (inst, def) => {
 var _ZodString = /* @__PURE__ */ $constructor("_ZodString", (inst, def) => {
   $ZodString.init(inst, def);
   ZodType.init(inst, def);
-  inst._zod.processJSONSchema = (ctx, json6, params) => stringProcessor(inst, ctx, json6, params);
+  inst._zod.processJSONSchema = (ctx, json7, params) => stringProcessor(inst, ctx, json7, params);
   const bag = inst._zod.bag;
   inst.format = bag.format ?? null;
   inst.minLength = bag.minimum ?? null;
@@ -22035,7 +22530,7 @@ function hash2(alg, params) {
 var ZodNumber = /* @__PURE__ */ $constructor("ZodNumber", (inst, def) => {
   $ZodNumber.init(inst, def);
   ZodType.init(inst, def);
-  inst._zod.processJSONSchema = (ctx, json6, params) => numberProcessor(inst, ctx, json6, params);
+  inst._zod.processJSONSchema = (ctx, json7, params) => numberProcessor(inst, ctx, json7, params);
   _installLazyMethods(inst, "ZodNumber", {
     gt(value, params) {
       return this.check(_gt(value, params));
@@ -22115,7 +22610,7 @@ function uint32(params) {
 var ZodBoolean = /* @__PURE__ */ $constructor("ZodBoolean", (inst, def) => {
   $ZodBoolean.init(inst, def);
   ZodType.init(inst, def);
-  inst._zod.processJSONSchema = (ctx, json6, params) => booleanProcessor(inst, ctx, json6, params);
+  inst._zod.processJSONSchema = (ctx, json7, params) => booleanProcessor(inst, ctx, json7, params);
 });
 function boolean2(params) {
   return _boolean(ZodBoolean, params);
@@ -22123,7 +22618,7 @@ function boolean2(params) {
 var ZodBigInt = /* @__PURE__ */ $constructor("ZodBigInt", (inst, def) => {
   $ZodBigInt.init(inst, def);
   ZodType.init(inst, def);
-  inst._zod.processJSONSchema = (ctx, json6, params) => bigintProcessor(inst, ctx, json6, params);
+  inst._zod.processJSONSchema = (ctx, json7, params) => bigintProcessor(inst, ctx, json7, params);
   inst.gte = (value, params) => inst.check(_gte(value, params));
   inst.min = (value, params) => inst.check(_gte(value, params));
   inst.gt = (value, params) => inst.check(_gt(value, params));
@@ -22158,7 +22653,7 @@ function uint64(params) {
 var ZodSymbol = /* @__PURE__ */ $constructor("ZodSymbol", (inst, def) => {
   $ZodSymbol.init(inst, def);
   ZodType.init(inst, def);
-  inst._zod.processJSONSchema = (ctx, json6, params) => symbolProcessor(inst, ctx, json6, params);
+  inst._zod.processJSONSchema = (ctx, json7, params) => symbolProcessor(inst, ctx, json7, params);
 });
 function symbol(params) {
   return _symbol(ZodSymbol, params);
@@ -22166,7 +22661,7 @@ function symbol(params) {
 var ZodUndefined = /* @__PURE__ */ $constructor("ZodUndefined", (inst, def) => {
   $ZodUndefined.init(inst, def);
   ZodType.init(inst, def);
-  inst._zod.processJSONSchema = (ctx, json6, params) => undefinedProcessor(inst, ctx, json6, params);
+  inst._zod.processJSONSchema = (ctx, json7, params) => undefinedProcessor(inst, ctx, json7, params);
 });
 function _undefined3(params) {
   return _undefined2(ZodUndefined, params);
@@ -22174,7 +22669,7 @@ function _undefined3(params) {
 var ZodNull = /* @__PURE__ */ $constructor("ZodNull", (inst, def) => {
   $ZodNull.init(inst, def);
   ZodType.init(inst, def);
-  inst._zod.processJSONSchema = (ctx, json6, params) => nullProcessor(inst, ctx, json6, params);
+  inst._zod.processJSONSchema = (ctx, json7, params) => nullProcessor(inst, ctx, json7, params);
 });
 function _null3(params) {
   return _null2(ZodNull, params);
@@ -22182,7 +22677,7 @@ function _null3(params) {
 var ZodAny = /* @__PURE__ */ $constructor("ZodAny", (inst, def) => {
   $ZodAny.init(inst, def);
   ZodType.init(inst, def);
-  inst._zod.processJSONSchema = (ctx, json6, params) => anyProcessor(inst, ctx, json6, params);
+  inst._zod.processJSONSchema = (ctx, json7, params) => anyProcessor(inst, ctx, json7, params);
 });
 function any() {
   return _any(ZodAny);
@@ -22190,7 +22685,7 @@ function any() {
 var ZodUnknown = /* @__PURE__ */ $constructor("ZodUnknown", (inst, def) => {
   $ZodUnknown.init(inst, def);
   ZodType.init(inst, def);
-  inst._zod.processJSONSchema = (ctx, json6, params) => unknownProcessor(inst, ctx, json6, params);
+  inst._zod.processJSONSchema = (ctx, json7, params) => unknownProcessor(inst, ctx, json7, params);
 });
 function unknown() {
   return _unknown(ZodUnknown);
@@ -22198,7 +22693,7 @@ function unknown() {
 var ZodNever = /* @__PURE__ */ $constructor("ZodNever", (inst, def) => {
   $ZodNever.init(inst, def);
   ZodType.init(inst, def);
-  inst._zod.processJSONSchema = (ctx, json6, params) => neverProcessor(inst, ctx, json6, params);
+  inst._zod.processJSONSchema = (ctx, json7, params) => neverProcessor(inst, ctx, json7, params);
 });
 function never(params) {
   return _never(ZodNever, params);
@@ -22206,7 +22701,7 @@ function never(params) {
 var ZodVoid = /* @__PURE__ */ $constructor("ZodVoid", (inst, def) => {
   $ZodVoid.init(inst, def);
   ZodType.init(inst, def);
-  inst._zod.processJSONSchema = (ctx, json6, params) => voidProcessor(inst, ctx, json6, params);
+  inst._zod.processJSONSchema = (ctx, json7, params) => voidProcessor(inst, ctx, json7, params);
 });
 function _void2(params) {
   return _void(ZodVoid, params);
@@ -22214,7 +22709,7 @@ function _void2(params) {
 var ZodDate = /* @__PURE__ */ $constructor("ZodDate", (inst, def) => {
   $ZodDate.init(inst, def);
   ZodType.init(inst, def);
-  inst._zod.processJSONSchema = (ctx, json6, params) => dateProcessor(inst, ctx, json6, params);
+  inst._zod.processJSONSchema = (ctx, json7, params) => dateProcessor(inst, ctx, json7, params);
   inst.min = (value, params) => inst.check(_gte(value, params));
   inst.max = (value, params) => inst.check(_lte(value, params));
   const c = inst._zod.bag;
@@ -22227,7 +22722,7 @@ function date3(params) {
 var ZodArray = /* @__PURE__ */ $constructor("ZodArray", (inst, def) => {
   $ZodArray.init(inst, def);
   ZodType.init(inst, def);
-  inst._zod.processJSONSchema = (ctx, json6, params) => arrayProcessor(inst, ctx, json6, params);
+  inst._zod.processJSONSchema = (ctx, json7, params) => arrayProcessor(inst, ctx, json7, params);
   inst.element = def.element;
   _installLazyMethods(inst, "ZodArray", {
     min(n, params) {
@@ -22257,7 +22752,7 @@ function keyof(schema) {
 var ZodObject = /* @__PURE__ */ $constructor("ZodObject", (inst, def) => {
   $ZodObjectJIT.init(inst, def);
   ZodType.init(inst, def);
-  inst._zod.processJSONSchema = (ctx, json6, params) => objectProcessor(inst, ctx, json6, params);
+  inst._zod.processJSONSchema = (ctx, json7, params) => objectProcessor(inst, ctx, json7, params);
   exports_util.defineLazy(inst, "shape", () => {
     return def.shape;
   });
@@ -22330,7 +22825,7 @@ function looseObject(shape, params) {
 var ZodUnion = /* @__PURE__ */ $constructor("ZodUnion", (inst, def) => {
   $ZodUnion.init(inst, def);
   ZodType.init(inst, def);
-  inst._zod.processJSONSchema = (ctx, json6, params) => unionProcessor(inst, ctx, json6, params);
+  inst._zod.processJSONSchema = (ctx, json7, params) => unionProcessor(inst, ctx, json7, params);
   inst.options = def.options;
 });
 function union(options, params) {
@@ -22343,7 +22838,7 @@ function union(options, params) {
 var ZodXor = /* @__PURE__ */ $constructor("ZodXor", (inst, def) => {
   ZodUnion.init(inst, def);
   $ZodXor.init(inst, def);
-  inst._zod.processJSONSchema = (ctx, json6, params) => unionProcessor(inst, ctx, json6, params);
+  inst._zod.processJSONSchema = (ctx, json7, params) => unionProcessor(inst, ctx, json7, params);
   inst.options = def.options;
 });
 function xor(options, params) {
@@ -22369,7 +22864,7 @@ function discriminatedUnion(discriminator, options, params) {
 var ZodIntersection = /* @__PURE__ */ $constructor("ZodIntersection", (inst, def) => {
   $ZodIntersection.init(inst, def);
   ZodType.init(inst, def);
-  inst._zod.processJSONSchema = (ctx, json6, params) => intersectionProcessor(inst, ctx, json6, params);
+  inst._zod.processJSONSchema = (ctx, json7, params) => intersectionProcessor(inst, ctx, json7, params);
 });
 function intersection(left, right) {
   return new ZodIntersection({
@@ -22381,7 +22876,7 @@ function intersection(left, right) {
 var ZodTuple = /* @__PURE__ */ $constructor("ZodTuple", (inst, def) => {
   $ZodTuple.init(inst, def);
   ZodType.init(inst, def);
-  inst._zod.processJSONSchema = (ctx, json6, params) => tupleProcessor(inst, ctx, json6, params);
+  inst._zod.processJSONSchema = (ctx, json7, params) => tupleProcessor(inst, ctx, json7, params);
   inst.rest = (rest) => inst.clone({
     ...inst._zod.def,
     rest
@@ -22401,7 +22896,7 @@ function tuple(items, _paramsOrRest, _params) {
 var ZodRecord = /* @__PURE__ */ $constructor("ZodRecord", (inst, def) => {
   $ZodRecord.init(inst, def);
   ZodType.init(inst, def);
-  inst._zod.processJSONSchema = (ctx, json6, params) => recordProcessor(inst, ctx, json6, params);
+  inst._zod.processJSONSchema = (ctx, json7, params) => recordProcessor(inst, ctx, json7, params);
   inst.keyType = def.keyType;
   inst.valueType = def.valueType;
 });
@@ -22443,7 +22938,7 @@ function looseRecord(keyType, valueType, params) {
 var ZodMap = /* @__PURE__ */ $constructor("ZodMap", (inst, def) => {
   $ZodMap.init(inst, def);
   ZodType.init(inst, def);
-  inst._zod.processJSONSchema = (ctx, json6, params) => mapProcessor(inst, ctx, json6, params);
+  inst._zod.processJSONSchema = (ctx, json7, params) => mapProcessor(inst, ctx, json7, params);
   inst.keyType = def.keyType;
   inst.valueType = def.valueType;
   inst.min = (...args) => inst.check(_minSize(...args));
@@ -22462,7 +22957,7 @@ function map(keyType, valueType, params) {
 var ZodSet = /* @__PURE__ */ $constructor("ZodSet", (inst, def) => {
   $ZodSet.init(inst, def);
   ZodType.init(inst, def);
-  inst._zod.processJSONSchema = (ctx, json6, params) => setProcessor(inst, ctx, json6, params);
+  inst._zod.processJSONSchema = (ctx, json7, params) => setProcessor(inst, ctx, json7, params);
   inst.min = (...args) => inst.check(_minSize(...args));
   inst.nonempty = (params) => inst.check(_minSize(1, params));
   inst.max = (...args) => inst.check(_maxSize(...args));
@@ -22478,7 +22973,7 @@ function set(valueType, params) {
 var ZodEnum = /* @__PURE__ */ $constructor("ZodEnum", (inst, def) => {
   $ZodEnum.init(inst, def);
   ZodType.init(inst, def);
-  inst._zod.processJSONSchema = (ctx, json6, params) => enumProcessor(inst, ctx, json6, params);
+  inst._zod.processJSONSchema = (ctx, json7, params) => enumProcessor(inst, ctx, json7, params);
   inst.enum = def.entries;
   inst.options = Object.values(def.entries);
   const keys = new Set(Object.keys(def.entries));
@@ -22531,7 +23026,7 @@ function nativeEnum(entries, params) {
 var ZodLiteral = /* @__PURE__ */ $constructor("ZodLiteral", (inst, def) => {
   $ZodLiteral.init(inst, def);
   ZodType.init(inst, def);
-  inst._zod.processJSONSchema = (ctx, json6, params) => literalProcessor(inst, ctx, json6, params);
+  inst._zod.processJSONSchema = (ctx, json7, params) => literalProcessor(inst, ctx, json7, params);
   inst.values = new Set(def.values);
   Object.defineProperty(inst, "value", {
     get() {
@@ -22552,7 +23047,7 @@ function literal(value, params) {
 var ZodFile = /* @__PURE__ */ $constructor("ZodFile", (inst, def) => {
   $ZodFile.init(inst, def);
   ZodType.init(inst, def);
-  inst._zod.processJSONSchema = (ctx, json6, params) => fileProcessor(inst, ctx, json6, params);
+  inst._zod.processJSONSchema = (ctx, json7, params) => fileProcessor(inst, ctx, json7, params);
   inst.min = (size, params) => inst.check(_minSize(size, params));
   inst.max = (size, params) => inst.check(_maxSize(size, params));
   inst.mime = (types2, params) => inst.check(_mime(Array.isArray(types2) ? types2 : [types2], params));
@@ -22563,7 +23058,7 @@ function file(params) {
 var ZodTransform = /* @__PURE__ */ $constructor("ZodTransform", (inst, def) => {
   $ZodTransform.init(inst, def);
   ZodType.init(inst, def);
-  inst._zod.processJSONSchema = (ctx, json6, params) => transformProcessor(inst, ctx, json6, params);
+  inst._zod.processJSONSchema = (ctx, json7, params) => transformProcessor(inst, ctx, json7, params);
   inst._zod.parse = (payload, _ctx) => {
     if (_ctx.direction === "backward") {
       throw new $ZodEncodeError(inst.constructor.name);
@@ -22603,7 +23098,7 @@ function transform(fn) {
 var ZodOptional = /* @__PURE__ */ $constructor("ZodOptional", (inst, def) => {
   $ZodOptional.init(inst, def);
   ZodType.init(inst, def);
-  inst._zod.processJSONSchema = (ctx, json6, params) => optionalProcessor(inst, ctx, json6, params);
+  inst._zod.processJSONSchema = (ctx, json7, params) => optionalProcessor(inst, ctx, json7, params);
   inst.unwrap = () => inst._zod.def.innerType;
 });
 function optional(innerType) {
@@ -22615,7 +23110,7 @@ function optional(innerType) {
 var ZodExactOptional = /* @__PURE__ */ $constructor("ZodExactOptional", (inst, def) => {
   $ZodExactOptional.init(inst, def);
   ZodType.init(inst, def);
-  inst._zod.processJSONSchema = (ctx, json6, params) => optionalProcessor(inst, ctx, json6, params);
+  inst._zod.processJSONSchema = (ctx, json7, params) => optionalProcessor(inst, ctx, json7, params);
   inst.unwrap = () => inst._zod.def.innerType;
 });
 function exactOptional(innerType) {
@@ -22627,7 +23122,7 @@ function exactOptional(innerType) {
 var ZodNullable = /* @__PURE__ */ $constructor("ZodNullable", (inst, def) => {
   $ZodNullable.init(inst, def);
   ZodType.init(inst, def);
-  inst._zod.processJSONSchema = (ctx, json6, params) => nullableProcessor(inst, ctx, json6, params);
+  inst._zod.processJSONSchema = (ctx, json7, params) => nullableProcessor(inst, ctx, json7, params);
   inst.unwrap = () => inst._zod.def.innerType;
 });
 function nullable(innerType) {
@@ -22642,7 +23137,7 @@ function nullish2(innerType) {
 var ZodDefault = /* @__PURE__ */ $constructor("ZodDefault", (inst, def) => {
   $ZodDefault.init(inst, def);
   ZodType.init(inst, def);
-  inst._zod.processJSONSchema = (ctx, json6, params) => defaultProcessor(inst, ctx, json6, params);
+  inst._zod.processJSONSchema = (ctx, json7, params) => defaultProcessor(inst, ctx, json7, params);
   inst.unwrap = () => inst._zod.def.innerType;
   inst.removeDefault = inst.unwrap;
 });
@@ -22658,7 +23153,7 @@ function _default2(innerType, defaultValue) {
 var ZodPrefault = /* @__PURE__ */ $constructor("ZodPrefault", (inst, def) => {
   $ZodPrefault.init(inst, def);
   ZodType.init(inst, def);
-  inst._zod.processJSONSchema = (ctx, json6, params) => prefaultProcessor(inst, ctx, json6, params);
+  inst._zod.processJSONSchema = (ctx, json7, params) => prefaultProcessor(inst, ctx, json7, params);
   inst.unwrap = () => inst._zod.def.innerType;
 });
 function prefault(innerType, defaultValue) {
@@ -22673,7 +23168,7 @@ function prefault(innerType, defaultValue) {
 var ZodNonOptional = /* @__PURE__ */ $constructor("ZodNonOptional", (inst, def) => {
   $ZodNonOptional.init(inst, def);
   ZodType.init(inst, def);
-  inst._zod.processJSONSchema = (ctx, json6, params) => nonoptionalProcessor(inst, ctx, json6, params);
+  inst._zod.processJSONSchema = (ctx, json7, params) => nonoptionalProcessor(inst, ctx, json7, params);
   inst.unwrap = () => inst._zod.def.innerType;
 });
 function nonoptional(innerType, params) {
@@ -22686,7 +23181,7 @@ function nonoptional(innerType, params) {
 var ZodSuccess = /* @__PURE__ */ $constructor("ZodSuccess", (inst, def) => {
   $ZodSuccess.init(inst, def);
   ZodType.init(inst, def);
-  inst._zod.processJSONSchema = (ctx, json6, params) => successProcessor(inst, ctx, json6, params);
+  inst._zod.processJSONSchema = (ctx, json7, params) => successProcessor(inst, ctx, json7, params);
   inst.unwrap = () => inst._zod.def.innerType;
 });
 function success(innerType) {
@@ -22698,7 +23193,7 @@ function success(innerType) {
 var ZodCatch = /* @__PURE__ */ $constructor("ZodCatch", (inst, def) => {
   $ZodCatch.init(inst, def);
   ZodType.init(inst, def);
-  inst._zod.processJSONSchema = (ctx, json6, params) => catchProcessor(inst, ctx, json6, params);
+  inst._zod.processJSONSchema = (ctx, json7, params) => catchProcessor(inst, ctx, json7, params);
   inst.unwrap = () => inst._zod.def.innerType;
   inst.removeCatch = inst.unwrap;
 });
@@ -22712,7 +23207,7 @@ function _catch2(innerType, catchValue) {
 var ZodNaN = /* @__PURE__ */ $constructor("ZodNaN", (inst, def) => {
   $ZodNaN.init(inst, def);
   ZodType.init(inst, def);
-  inst._zod.processJSONSchema = (ctx, json6, params) => nanProcessor(inst, ctx, json6, params);
+  inst._zod.processJSONSchema = (ctx, json7, params) => nanProcessor(inst, ctx, json7, params);
 });
 function nan(params) {
   return _nan(ZodNaN, params);
@@ -22720,7 +23215,7 @@ function nan(params) {
 var ZodPipe = /* @__PURE__ */ $constructor("ZodPipe", (inst, def) => {
   $ZodPipe.init(inst, def);
   ZodType.init(inst, def);
-  inst._zod.processJSONSchema = (ctx, json6, params) => pipeProcessor(inst, ctx, json6, params);
+  inst._zod.processJSONSchema = (ctx, json7, params) => pipeProcessor(inst, ctx, json7, params);
   inst.in = def.in;
   inst.out = def.out;
 });
@@ -22761,7 +23256,7 @@ var ZodPreprocess = /* @__PURE__ */ $constructor("ZodPreprocess", (inst, def) =>
 var ZodReadonly = /* @__PURE__ */ $constructor("ZodReadonly", (inst, def) => {
   $ZodReadonly.init(inst, def);
   ZodType.init(inst, def);
-  inst._zod.processJSONSchema = (ctx, json6, params) => readonlyProcessor(inst, ctx, json6, params);
+  inst._zod.processJSONSchema = (ctx, json7, params) => readonlyProcessor(inst, ctx, json7, params);
   inst.unwrap = () => inst._zod.def.innerType;
 });
 function readonly(innerType) {
@@ -22773,7 +23268,7 @@ function readonly(innerType) {
 var ZodTemplateLiteral = /* @__PURE__ */ $constructor("ZodTemplateLiteral", (inst, def) => {
   $ZodTemplateLiteral.init(inst, def);
   ZodType.init(inst, def);
-  inst._zod.processJSONSchema = (ctx, json6, params) => templateLiteralProcessor(inst, ctx, json6, params);
+  inst._zod.processJSONSchema = (ctx, json7, params) => templateLiteralProcessor(inst, ctx, json7, params);
 });
 function templateLiteral(parts, params) {
   return new ZodTemplateLiteral({
@@ -22785,7 +23280,7 @@ function templateLiteral(parts, params) {
 var ZodLazy = /* @__PURE__ */ $constructor("ZodLazy", (inst, def) => {
   $ZodLazy.init(inst, def);
   ZodType.init(inst, def);
-  inst._zod.processJSONSchema = (ctx, json6, params) => lazyProcessor(inst, ctx, json6, params);
+  inst._zod.processJSONSchema = (ctx, json7, params) => lazyProcessor(inst, ctx, json7, params);
   inst.unwrap = () => inst._zod.def.getter();
 });
 function lazy(getter) {
@@ -22797,7 +23292,7 @@ function lazy(getter) {
 var ZodPromise = /* @__PURE__ */ $constructor("ZodPromise", (inst, def) => {
   $ZodPromise.init(inst, def);
   ZodType.init(inst, def);
-  inst._zod.processJSONSchema = (ctx, json6, params) => promiseProcessor(inst, ctx, json6, params);
+  inst._zod.processJSONSchema = (ctx, json7, params) => promiseProcessor(inst, ctx, json7, params);
   inst.unwrap = () => inst._zod.def.innerType;
 });
 function promise(innerType) {
@@ -22809,7 +23304,7 @@ function promise(innerType) {
 var ZodFunction = /* @__PURE__ */ $constructor("ZodFunction", (inst, def) => {
   $ZodFunction.init(inst, def);
   ZodType.init(inst, def);
-  inst._zod.processJSONSchema = (ctx, json6, params) => functionProcessor(inst, ctx, json6, params);
+  inst._zod.processJSONSchema = (ctx, json7, params) => functionProcessor(inst, ctx, json7, params);
 });
 function _function(params) {
   return new ZodFunction({
@@ -22821,7 +23316,7 @@ function _function(params) {
 var ZodCustom = /* @__PURE__ */ $constructor("ZodCustom", (inst, def) => {
   $ZodCustom.init(inst, def);
   ZodType.init(inst, def);
-  inst._zod.processJSONSchema = (ctx, json6, params) => customProcessor(inst, ctx, json6, params);
+  inst._zod.processJSONSchema = (ctx, json7, params) => customProcessor(inst, ctx, json7, params);
 });
 function check(fn) {
   const ch = new $ZodCheck({
@@ -22868,7 +23363,7 @@ var stringbool = (...args) => _stringbool({
   Boolean: ZodBoolean,
   String: ZodString
 }, ...args);
-function json6(params) {
+function json7(params) {
   const jsonSchema = lazy(() => {
     return union([string2(params), number2(), boolean2(), _null3(), array(jsonSchema), record(string2(), jsonSchema)]);
   });
@@ -23476,6 +23971,7 @@ var targetSchema = exports_external.discriminatedUnion("provider", [
     }),
     contextWindow: exports_external.number().int().positive().optional(),
     maxOutputTokens: exports_external.number().int().positive().optional(),
+    credentialId: exports_external.string().trim().min(1).max(64).regex(/^[A-Za-z0-9_-]+$/, "credentialId must be an account id").optional(),
     capabilities: exports_external.object({
       tools: exports_external.boolean(),
       images: exports_external.boolean(),
@@ -23497,6 +23993,7 @@ var targetSchema = exports_external.discriminatedUnion("provider", [
     }),
     contextWindow: exports_external.number().int().positive().optional(),
     maxOutputTokens: exports_external.number().int().positive().optional(),
+    credentialId: exports_external.string().trim().min(1).max(64).regex(/^[A-Za-z0-9_-]+$/, "credentialId must be an account id").optional(),
     capabilities: exports_external.object({
       tools: exports_external.boolean(),
       images: exports_external.boolean(),
@@ -23505,9 +24002,7 @@ var targetSchema = exports_external.discriminatedUnion("provider", [
   }).strict()
 ]);
 var modelSchema = exports_external.object({
-  id: exports_external.string().min(1).refine((value) => !value.toLowerCase().startsWith("claude/"), {
-    message: 'model id must not start with "claude/": that prefix is reserved for discovery mirrors'
-  }),
+  id: exports_external.string().min(1),
   strategy: exports_external.enum(["score", "priority", "roundRobin", "weighted"]),
   isAlias: exports_external.boolean(),
   targets: exports_external.array(targetSchema).min(1, "a virtual model needs at least one target")
@@ -23519,6 +24014,9 @@ var keyCreateSchema = exports_external.object({
   bodyLoggingOptOut: exports_external.boolean().default(false)
 }).strict();
 var keyLimitsSchema = exports_external.object({ limits: limitConfigSchema }).strict();
+var keyModelsSchema = exports_external.object({
+  modelAllowlist: exports_external.array(exports_external.string().min(1)).nullable()
+}).strict();
 var retentionSchema = exports_external.object({
   keepLatest: exports_external.number().int().min(1).max(100),
   maxAgeDays: exports_external.number().int().min(1).max(3650)
@@ -23616,13 +24114,65 @@ async function readSource(deps, source, lines) {
   ]);
   return result.code === 0 ? result.stdout : "";
 }
+function parseConsoleLines(text, query) {
+  const lines = consoleLimit(query.lines);
+  return text.split(`
+`).filter((raw) => raw.trim().length > 0).map(parseLine).filter((line) => keep(line, query)).slice(-lines);
+}
 async function readConsole(deps, source, query) {
   const limited = { ...query, lines: consoleLimit(query.lines) };
   const text = await readSource(deps, source, scanWidth(limited));
-  const lines = text.split(`
-`).filter((raw) => raw.trim().length > 0).map(parseLine).filter((line) => keep(line, limited)).slice(-limited.lines);
+  const lines = parseConsoleLines(text, limited);
   return source.kind === "file" ? { source: "file", path: source.path, lines } : { source: source.kind, lines };
 }
+// packages/store/src/types.ts
+var WINDOW_DURATION_MS = {
+  fiveHour: 5 * 60 * 60 * 1000,
+  daily: 24 * 60 * 60 * 1000,
+  weekly: 7 * 24 * 60 * 60 * 1000
+};
+function durationFor(windowType, windowMs) {
+  return windowMs !== null && windowMs > 0 ? windowMs : WINDOW_DURATION_MS[windowType];
+}
+var SAME_WINDOW_TOLERANCE_MS = 60000;
+function sameWindow(a, b) {
+  if (a === null || b === null)
+    return a === b;
+  return Math.abs(a - b) <= SAME_WINDOW_TOLERANCE_MS;
+}
+var READ_OVER_INPUT = 0.1;
+function cacheReadRate(prices) {
+  return prices.cacheRead ?? prices.input * READ_OVER_INPUT;
+}
+function servesTarget(target, account) {
+  if (account.provider !== target.provider)
+    return false;
+  if (target.provider === "custom" && account.providerData.endpointId !== target.endpointId) {
+    return false;
+  }
+  return target.credentialId === undefined || account.id === target.credentialId;
+}
+function resolvePin(target, accounts) {
+  if (target.credentialId === undefined)
+    return;
+  return accounts.find((account) => servesTarget(target, account));
+}
+var DEFAULT_SETTINGS = {
+  weights: { tier: 10, health: 3, quota: 2, load: 2, cost: 1, latency: 1 },
+  maxAttempts: 3,
+  requestDeadlineMs: 120000,
+  breakerThreshold: 3,
+  breakerCooldownMs: 30000,
+  logRetentionDays: 30,
+  quotaPollIntervalMs: 300000,
+  rtkEnabled: false,
+  autoCacheEnabled: true,
+  bodyLoggingEnabled: false,
+  bodyLoggingCaptureStreamChunks: false,
+  snapshotKeepLatest: 5,
+  snapshotMaxAgeDays: 30
+};
+
 // packages/router/src/snapshot.ts
 var HEALTH_KEY_SEP = "::";
 function healthKey(credentialId, model) {
@@ -23682,12 +24232,11 @@ function eligible(input) {
   const excluded = [];
   for (const target of model.targets) {
     const missing = needNative && !ANTHROPIC_NATIVE_TOOLS[target.provider] ? "anthropicTools" : ["tools", "images", "reasoning"].find((cap) => need[cap] && !target.capabilities[cap]);
+    let pinSeen = false;
     for (const credential of snapshot.credentials) {
-      if (credential.provider !== target.provider)
-        continue;
-      if (target.provider === "custom" && credential.providerData.endpointId !== target.endpointId) {
+      if (!servesTarget(target, credential))
         continue;
-      }
+      pinSeen = target.credentialId !== undefined;
       const drop = (reason) => {
         excluded.push({ credentialId: credential.id, model: target.model, reason });
       };
@@ -23724,45 +24273,17 @@ function eligible(input) {
       }
       pairs.push({ credential, target });
     }
+    if (target.credentialId !== undefined && !pinSeen) {
+      excluded.push({
+        credentialId: target.credentialId,
+        model: target.model,
+        reason: "pin:missing"
+      });
+    }
   }
   return { pairs, excluded };
 }
 
-// packages/store/src/types.ts
-var WINDOW_DURATION_MS = {
-  fiveHour: 5 * 60 * 60 * 1000,
-  daily: 24 * 60 * 60 * 1000,
-  weekly: 7 * 24 * 60 * 60 * 1000
-};
-function durationFor(windowType, windowMs) {
-  return windowMs !== null && windowMs > 0 ? windowMs : WINDOW_DURATION_MS[windowType];
-}
-var SAME_WINDOW_TOLERANCE_MS = 60000;
-function sameWindow(a, b) {
-  if (a === null || b === null)
-    return a === b;
-  return Math.abs(a - b) <= SAME_WINDOW_TOLERANCE_MS;
-}
-var READ_OVER_INPUT = 0.1;
-function cacheReadRate(prices) {
-  return prices.cacheRead ?? prices.input * READ_OVER_INPUT;
-}
-var DEFAULT_SETTINGS = {
-  weights: { tier: 10, health: 3, quota: 2, load: 2, cost: 1, latency: 1 },
-  maxAttempts: 3,
-  requestDeadlineMs: 120000,
-  breakerThreshold: 3,
-  breakerCooldownMs: 30000,
-  logRetentionDays: 30,
-  quotaPollIntervalMs: 300000,
-  rtkEnabled: false,
-  autoCacheEnabled: true,
-  bodyLoggingEnabled: false,
-  bodyLoggingCaptureStreamChunks: false,
-  snapshotKeepLatest: 5,
-  snapshotMaxAgeDays: 30
-};
-
 // packages/router/src/quota.ts
 var UNKNOWN_QUOTA = 0.5;
 var QUOTA_FLOOR = 0.1;
@@ -24225,10 +24746,10 @@ function prepareArtifact(input) {
     attempts,
     error: error51.value
   };
-  const json7 = JSON.stringify(bounded);
-  const size = encoder2.encode(json7).length;
+  const json8 = JSON.stringify(bounded);
+  const size = encoder2.encode(json8).length;
   if (size <= MAX_ARTIFACT_BYTES)
-    return { artifact: bounded, json: json7 };
+    return { artifact: bounded, json: json8 };
   const marker = omission(size);
   const omitted = omitBodies(bounded, marker);
   const omittedJson = JSON.stringify(omitted);
@@ -24238,8 +24759,8 @@ function prepareArtifact(input) {
   const stripped = { ...omitted, error: marker };
   return { artifact: stripped, json: JSON.stringify(stripped) };
 }
-async function sealArtifact(key, json7) {
-  const bytes = encoder2.encode(await encrypt(key, json7));
+async function sealArtifact(key, json8) {
+  const bytes = encoder2.encode(await encrypt(key, json8));
   return { bytes, sha256: await sha256Hex(bytes) };
 }
 async function readArtifact(key, dir, relPath, expectedSha256) {
@@ -25558,6 +26079,12 @@ function createKeyRepo(db, logger2 = noopLogger) {
         id
       ]);
     },
+    async setModelAllowlist(id, modelAllowlist) {
+      db.run("UPDATE api_keys SET model_allowlist = ? WHERE id = ?", [
+        modelAllowlist === null ? null : JSON.stringify(modelAllowlist),
+        id
+      ]);
+    },
     async revoke(id) {
       db.run("UPDATE api_keys SET revoked_at = ? WHERE id = ?", [Date.now(), id]);
     }
@@ -26186,6 +26713,7 @@ async function createStore(opts) {
       findByHash: (hash3) => handle.keys.findByHash(hash3),
       create: (input) => handle.keys.create(input),
       setLimits: (id, limits) => handle.keys.setLimits(id, limits),
+      setModelAllowlist: (id, modelAllowlist) => handle.keys.setModelAllowlist(id, modelAllowlist),
       revoke: (id) => handle.keys.revoke(id)
     },
     usage: {
@@ -26329,13 +26857,15 @@ function customProviderData(input) {
   } catch {
     throw new GatewayError("BAD_REQUEST", "origin: must be a valid URL");
   }
-  if (url2.protocol !== "http:" && url2.protocol !== "https:" || url2.hostname.length === 0 || url2.username.length > 0 || url2.password.length > 0 || url2.pathname !== "" && url2.pathname !== "/" || url2.search.length > 0 || url2.hash.length > 0) {
+  if (url2.protocol !== "http:" && url2.protocol !== "https:" || url2.hostname.length === 0 || url2.username.length > 0 || url2.password.length > 0 || url2.search.length > 0 || url2.hash.length > 0) {
     throw new GatewayError("BAD_REQUEST", "origin: must be an HTTP(S) server origin");
   }
-  return { endpointId, endpointLabel, origin: url2.origin, protocol: input.protocol };
+  const basePath = url2.pathname.replace(/\/+$/, "");
+  return { endpointId, endpointLabel, origin: url2.origin, basePath, protocol: input.protocol };
 }
 function sameCustomEndpoint(a, b) {
-  return a.endpointId === b.endpointId && a.endpointLabel === b.endpointLabel && a.origin === b.origin && a.protocol === b.protocol;
+  const basePath = typeof a.basePath === "string" ? a.basePath : "";
+  return a.endpointId === b.endpointId && a.endpointLabel === b.endpointLabel && a.origin === b.origin && basePath === b.basePath && a.protocol === b.protocol;
 }
 async function createApiKeyCredential(store, input, logger2 = noopLogger) {
   const provider = parseOrThrow(providerIdSchema, input.provider);
@@ -26853,6 +27383,14 @@ async function setKeyLimits(store, id, input, now = Date.now()) {
   await store.keys.setLimits(id, body2.limits);
   return toSummary(store, { ...key, limits: body2.limits }, now);
 }
+async function setKeyModels(store, id, input, now = Date.now()) {
+  const body2 = parseOrThrow(keyModelsSchema, input);
+  const key = (await store.keys.list()).find((entry) => entry.id === id);
+  if (key === undefined)
+    throw new GatewayError("BAD_REQUEST", "no such api key");
+  await store.keys.setModelAllowlist(id, body2.modelAllowlist);
+  return toSummary(store, { ...key, modelAllowlist: body2.modelAllowlist }, now);
+}
 async function revokeKey(store, id) {
   await store.keys.revoke(id);
 }
@@ -26913,8 +27451,8 @@ function narrower(a, b) {
     ...output.length === 0 ? {} : { maxOutputTokens: Math.min(...output) }
   };
 }
-function targetLimits(target, auths) {
-  const ways = auths.size === 0 ? ["apiKey"] : [...auths];
+function targetLimits(target, auths, pinned) {
+  const ways = pinned !== undefined ? [pinned.authType] : auths.size === 0 ? ["apiKey"] : [...auths];
   let listed = {};
   for (const auth of ways) {
     const entry = catalogLimits(target.provider, target.model, auth);
@@ -26934,20 +27472,22 @@ function targetLimits(target, auths) {
 }
 function servingAuths(credentials) {
   const byProvider = new Map;
+  const routable = [];
   for (const credential of credentials) {
     if (!credential.enabled)
       continue;
     const ways = byProvider.get(credential.provider) ?? new Set;
     ways.add(credential.authType);
     byProvider.set(credential.provider, ways);
+    routable.push(credential);
   }
-  return byProvider;
+  return { byProvider, routable };
 }
 function resolveModelLimits(model, credentials) {
-  const auths = servingAuths(credentials);
+  const { byProvider, routable } = servingAuths(credentials);
   let limits = {};
   for (const target of model.targets) {
-    limits = narrower(limits, targetLimits(target, auths.get(target.provider) ?? new Set));
+    limits = narrower(limits, targetLimits(target, byProvider.get(target.provider) ?? new Set, resolvePin(target, routable)));
   }
   return limits;
 }
@@ -26985,15 +27525,18 @@ function unreachable(model, credentials, stored) {
   const held = heldAuths(credentials);
   const grandfathered = new Set((stored?.targets ?? []).map(pairOf));
   for (const target of model.targets) {
-    if (grandfathered.has(pairOf(target)))
+    const pinned = resolvePin(target, credentials);
+    if (pinned === undefined && grandfathered.has(pairOf(target)))
       continue;
-    const have = held.get(target.provider);
+    const have = pinned === undefined ? held.get(target.provider) : new Set([pinned.authType]);
     if (have === undefined)
       continue;
     const reach = catalogModelAuths(target.provider, target.model);
     if (reach.some((auth) => have.has(auth)))
       continue;
-    return new GatewayError("BAD_REQUEST", `${target.provider} serves "${target.model}" to ${phrase(reach)} credentials only, ` + `and every ${target.provider} credential here is ${phrase([...have])} \u2014 ` + `connect the other kind, or pick a model this one can reach`);
+    const holds = pinned === undefined ? `every ${target.provider} credential here is ${phrase([...have])}` : `this target is pinned to "${pinned.label}", which is ${phrase([...have])}`;
+    const fix = pinned === undefined ? "connect the other kind, or pick a model this one can reach" : "pin it to the other kind, or pick a model this account can reach";
+    return new GatewayError("BAD_REQUEST", `${target.provider} serves "${target.model}" to ${phrase(reach)} credentials only, ` + `and ${holds} \u2014 ${fix}`);
   }
   return null;
 }
@@ -27033,14 +27576,15 @@ import { join as join3 } from "path";
 
 // packages/plugin-api/src/version.ts
 var PLUGIN_API_VERSION = 1;
-var DASHBOARD_SDK_VERSION = "0.1.1";
+var DASHBOARD_SDK_VERSION = "0.1.2";
 // packages/plugin-api/src/manifest.ts
 var CAPABILITIES = [
   "storage",
   "files",
   "net:outbound",
   "events:request",
-  "events:limit"
+  "events:limit",
+  "channels"
 ];
 var ID_PATTERN = /^[a-z][a-z0-9-]{0,31}$/;
 var idSchema = exports_external.string().regex(ID_PATTERN, "id must match /^[a-z][a-z0-9-]{0,31}$/");
@@ -27465,10 +28009,10 @@ function emailFromIdToken(idToken) {
   if (parts.length !== 3 || payload === undefined || payload.length === 0)
     return null;
   try {
-    const json7 = JSON.parse(Buffer.from(payload, "base64url").toString("utf8"));
-    if (!isRecord2(json7))
+    const json8 = JSON.parse(Buffer.from(payload, "base64url").toString("utf8"));
+    if (!isRecord2(json8))
       return null;
-    return typeof json7.email === "string" && json7.email.trim().length > 0 ? json7.email : null;
+    return typeof json8.email === "string" && json8.email.trim().length > 0 ? json8.email : null;
   } catch {
     return null;
   }
@@ -27871,12 +28415,12 @@ function decodeClaims(idToken) {
     return { email: null, accountId: null };
   }
   try {
-    const json7 = JSON.parse(Buffer.from(payload, "base64url").toString("utf8"));
-    if (!isRecord5(json7))
+    const json8 = JSON.parse(Buffer.from(payload, "base64url").toString("utf8"));
+    if (!isRecord5(json8))
       return { email: null, accountId: null };
-    const auth = json7["https://api.openai.com/auth"];
+    const auth = json8["https://api.openai.com/auth"];
     return {
-      email: typeof json7.email === "string" ? json7.email : null,
+      email: typeof json8.email === "string" ? json8.email : null,
       accountId: isRecord5(auth) ? nonBlankStringOrNull(auth.chatgpt_account_id) : null
     };
   } catch {
@@ -28214,9 +28758,11 @@ var KEY_PLACEHOLDER = "<your OmniGateway key>";
 async function describeModelsForSetup(store) {
   const models = await listModels(store);
   const credentials = (await listCredentials(store)).map((credential) => ({
+    id: credential.id,
     provider: credential.provider,
     authType: credential.authType,
-    enabled: credential.enabled
+    enabled: credential.enabled,
+    providerData: credential.providerData
   }));
   return models.map((model) => ({
     model,
@@ -28252,8 +28798,7 @@ function claudeSettings(described, input, mapping, existing) {
   const visibleId = (slot, id) => {
     if (!ids.has(id))
       throw new Error(`${slot} names unknown virtual model "${id}"`);
-    const useMirror = input.discoveryMirrors === true && !/^(?:claude|anthropic)/i.test(id);
-    return useMirror ? `claude/${id}` : id;
+    return id;
   };
   const settings = settingsObject(existing);
   const currentEnv = settings.env;
@@ -28362,6 +28907,43 @@ function tailFile(path, lines) {
     closeSync(fd);
   }
 }
+function fileSize(path) {
+  try {
+    const stat = statSync2(path);
+    return stat.isFile() ? stat.size : null;
+  } catch {
+    return null;
+  }
+}
+function readFrom(path, offset) {
+  let fd;
+  try {
+    fd = openSync(path, "r");
+  } catch {
+    return null;
+  }
+  try {
+    const size = fstatSync(fd).size;
+    const shrank = size < offset;
+    const from = shrank ? 0 : offset;
+    const available = size - from;
+    if (available <= 0)
+      return { text: "", offset: size, gap: shrank };
+    const span = Math.min(available, MAX_BYTES);
+    const start = from + (available - span);
+    const buffer = Buffer.allocUnsafe(span);
+    const read = readSync(fd, buffer, 0, span, start);
+    return {
+      text: buffer.subarray(0, read).toString("utf8"),
+      offset: start + read,
+      gap: shrank || span < available
+    };
+  } catch {
+    return null;
+  } finally {
+    closeSync(fd);
+  }
+}
 // packages/control/src/usage.ts
 var MAX_LOG_LIMIT = 500;
 var DEFAULT_LOG_LIMIT = 100;
@@ -43479,6 +44061,15 @@ async function* openaiStream(events, requestId, created) {
               finish_reason: null
             }));
           }
+        } else if (event.block.type === "thinking") {
+          if (!roleSent) {
+            roleSent = true;
+            yield emit(chunk(requestId, created, model, {
+              index: 0,
+              delta: { role: "assistant" },
+              finish_reason: null
+            }));
+          }
         } else if (event.block.type === "toolUse") {
           const index = toolIndex.size;
           toolIndex.set(event.index, index);
@@ -43510,6 +44101,12 @@ async function* openaiStream(events, requestId, created) {
             delta: { content: d.text },
             finish_reason: null
           }));
+        } else if (d.type === "thinking") {
+          yield emit(chunk(requestId, created, model, {
+            index: 0,
+            delta: { reasoning_content: d.text },
+            finish_reason: null
+          }));
         } else if (d.type === "toolJson") {
           const index = toolIndex.get(event.index) ?? 0;
           yield emit(chunk(requestId, created, model, {
@@ -43538,6 +44135,7 @@ async function* openaiStream(events, requestId, created) {
 }
 function openaiResponse(collected, requestId, created) {
   const text = collected.content.flatMap((b) => b.type === "text" ? [b.text] : []).join("");
+  const reasoning = collected.content.flatMap((b) => b.type === "thinking" ? [b.text] : []).join("");
   const toolCalls = collected.content.flatMap((b) => b.type === "toolUse" ? [
     {
       id: b.id,
@@ -43556,6 +44154,7 @@ function openaiResponse(collected, requestId, created) {
         message: {
           role: "assistant",
           content: toolCalls.length > 0 && text.length === 0 ? null : text,
+          ...reasoning.length > 0 ? { reasoning_content: reasoning } : {},
           ...toolCalls.length > 0 ? { tool_calls: toolCalls } : {}
         },
         finish_reason: FINISH3[collected.stopReason]
@@ -43956,6 +44555,7 @@ function createQuiesceLatch() {
 // apps/gateway/src/routes/admin.ts
 function adminRoutes(deps) {
   const logger2 = deps.logger ?? noopLogger;
+  const changed = (topic) => deps.broadcaster?.invalidate(topic);
   return new Elysia().onError(apiErrorHandler).get("/api/status", async ({ request: request2 }) => {
     const token = readCookie(request2, ADMIN_COOKIE);
     return {
@@ -44015,9 +44615,9 @@ function adminRoutes(deps) {
     const body2 = await readJsonRecord(request2);
     if (body2 === null)
       throw new GatewayError("BAD_REQUEST", "credential body is required");
-    return {
-      credential: await createApiKeyCredential(deps.store, { provider: body2.provider, apiKey: body2.apiKey, ...body2 }, logger2)
-    };
+    const credential = await createApiKeyCredential(deps.store, { provider: body2.provider, apiKey: body2.apiKey, ...body2 }, logger2);
+    changed("res:credentials");
+    return { credential };
   }).get("/api/credentials/health", async ({ request: request2 }) => {
     await requireAdmin(request2, deps.admin);
     return credentialHealth(deps);
@@ -44031,10 +44631,12 @@ function adminRoutes(deps) {
   }).patch("/api/credentials/:id", async ({ request: request2, params }) => {
     await requireAdmin(request2, deps.admin);
     await patchCredential(deps, params.id, await readJson(request2));
+    changed("res:credentials");
     return { ok: true };
   }).delete("/api/credentials/:id", async ({ request: request2, params }) => {
     await requireAdmin(request2, deps.admin);
     await removeCredential(deps.store, params.id);
+    changed("res:credentials");
     return { ok: true };
   }).get("/api/models", async ({ request: request2 }) => {
     await requireAdmin(request2, deps.admin);
@@ -44042,10 +44644,12 @@ function adminRoutes(deps) {
   }).put("/api/models/:id", async ({ request: request2, params }) => {
     await requireAdmin(request2, deps.admin);
     await putModel(deps.store, params.id, await readJson(request2));
+    changed("res:models");
     return { ok: true };
   }).delete("/api/models/:id", async ({ request: request2, params }) => {
     await requireAdmin(request2, deps.admin);
     await removeModel(deps.store, params.id);
+    changed("res:models");
     return { ok: true };
   }).get("/api/agent-setup", async ({ request: request2, query }) => {
     await requireAdmin(request2, deps.admin);
@@ -44057,10 +44661,7 @@ function adminRoutes(deps) {
     try {
       return {
         client,
-        files: await setupFiles(deps.store, client, {
-          baseUrl: deps.baseUrl,
-          discoveryMirrors: deps.discoveryMirrors === true
-        }, {
+        files: await setupFiles(deps.store, client, { baseUrl: deps.baseUrl }, {
           defaultModel,
           ...query.fableModel ? { fableModel: query.fableModel } : {},
           ...query.opusModel ? { opusModel: query.opusModel } : {},
@@ -44076,13 +44677,23 @@ function adminRoutes(deps) {
     return { keys: await listKeys(deps.store) };
   }).post("/api/keys", async ({ request: request2 }) => {
     await requireAdmin(request2, deps.admin);
-    return createKey(deps.store, await readJson(request2));
+    const created = await createKey(deps.store, await readJson(request2));
+    changed("res:keys");
+    return created;
   }).put("/api/keys/:id/limits", async ({ request: request2, params }) => {
     await requireAdmin(request2, deps.admin);
-    return setKeyLimits(deps.store, params.id, await readJson(request2));
+    const key = await setKeyLimits(deps.store, params.id, await readJson(request2));
+    changed("res:keys");
+    return key;
+  }).put("/api/keys/:id/models", async ({ request: request2, params }) => {
+    await requireAdmin(request2, deps.admin);
+    const key = await setKeyModels(deps.store, params.id, await readJson(request2));
+    changed("res:keys");
+    return key;
   }).delete("/api/keys/:id", async ({ request: request2, params }) => {
     await requireAdmin(request2, deps.admin);
     await revokeKey(deps.store, params.id);
+    changed("res:keys");
     return { ok: true };
   }).get("/api/settings", async ({ request: request2 }) => {
     await requireAdmin(request2, deps.admin);
@@ -44093,6 +44704,7 @@ function adminRoutes(deps) {
   }).put("/api/settings", async ({ request: request2 }) => {
     await requireAdmin(request2, deps.admin);
     await putSettings(deps.store, await readJson(request2));
+    changed("res:settings");
     return { ok: true };
   }).post("/api/models/:id/dry-run", async ({ request: request2, params }) => {
     await requireAdmin(request2, deps.admin);
@@ -44177,6 +44789,7 @@ async function swap(deps, logger2, label2, operation) {
         reason: label2
       });
     }
+    deps.broadcaster?.invalidateAll();
     return result;
   } catch (error51) {
     if (error51 instanceof SwapFailedError) {
@@ -46341,24 +46954,44 @@ function report(logger2, what, requestId, error51) {
     reason: describeError(error51, "unknown")
   });
 }
-async function beginLog(store, log, keyId, logger2 = noopLogger) {
+async function beginLog(store, log, keyId, logger2 = noopLogger, broadcast) {
+  let began = false;
   try {
     await store.usage.begin({ ...log, state: "pending", apiKeyId: keyId });
+    began = true;
   } catch (error51) {
     report(logger2, "failed to record request start", log.id, error51);
   }
+  if (began && broadcast !== undefined) {
+    try {
+      broadcast.invalidate("res:logs");
+    } catch (error51) {
+      report(logger2, "failed to publish a resource invalidation", log.id, error51);
+    }
+  }
 }
-async function routeLog(store, requestId, target, logger2 = noopLogger) {
+async function routeLog(store, requestId, target, logger2 = noopLogger, broadcast) {
+  let routed = false;
   try {
     await store.usage.route(requestId, target);
+    routed = true;
   } catch (error51) {
     report(logger2, "failed to record request route", requestId, error51);
   }
+  if (routed && broadcast !== undefined) {
+    try {
+      broadcast.invalidate("res:logs");
+    } catch (error51) {
+      report(logger2, "failed to publish a resource invalidation", requestId, error51);
+    }
+  }
 }
-async function finishLog(store, log, keyId, logger2 = noopLogger, bodies, debit, emit) {
+async function finishLog(store, log, keyId, logger2 = noopLogger, bodies, debit, emit, broadcast) {
+  let appended = true;
   try {
     await store.usage.append({ ...log, apiKeyId: keyId });
   } catch (error51) {
+    appended = false;
     report(logger2, "failed to persist request log", log.id, error51);
   }
   if (keyId !== null && debit !== undefined) {
@@ -46389,6 +47022,14 @@ async function finishLog(store, log, keyId, logger2 = noopLogger, bodies, debit,
       report(logger2, "failed to emit plugin event", log.id, error51);
     }
   }
+  if (appended && broadcast !== undefined) {
+    try {
+      broadcast.invalidate("res:usage");
+      broadcast.invalidate("res:logs");
+    } catch (error51) {
+      report(logger2, "failed to publish a resource invalidation", log.id, error51);
+    }
+  }
   if (bodies === undefined)
     return;
   try {
@@ -47115,7 +47756,6 @@ function mcpServerNames(body2) {
 }
 
 // apps/gateway/src/ingress/model.ts
-var DISCOVERY_PREFIX = "claude/";
 var ONE_M_SUFFIX2 = "[1m]";
 function normalizeClientModel(raw, betas2 = []) {
   let model = raw.trim();
@@ -47127,11 +47767,6 @@ function normalizeClientModel(raw, betas2 = []) {
       wantsOneM = true;
     }
   }
-  if (model.toLowerCase().startsWith(DISCOVERY_PREFIX)) {
-    const stripped = model.slice(DISCOVERY_PREFIX.length);
-    if (stripped.length > 0)
-      model = stripped;
-  }
   const merged = [...betas2];
   if (wantsOneM && !merged.includes(CONTEXT_1M_BETA))
     merged.push(CONTEXT_1M_BETA);
@@ -47470,7 +48105,7 @@ function readBlock(raw, role, path) {
 function toIrToolChoice(c) {
   return c.type === "tool" ? { type: "tool", name: c.name } : { type: c.type };
 }
-var EFFORTS = ["low", "medium", "high", "xhigh", "max"];
+var EFFORTS = REASONING_EFFORTS;
 function readEffort(body2) {
   if (!isRecord6(body2))
     return;
@@ -47627,7 +48262,7 @@ var schema2 = exports_external.object({
     exports_external.enum(["auto", "none", "required"]),
     exports_external.object({ type: exports_external.literal("function"), function: exports_external.object({ name: exports_external.string() }) })
   ]).optional(),
-  reasoning_effort: exports_external.enum(["low", "medium", "high"]).optional()
+  reasoning_effort: exports_external.enum(REASONING_EFFORTS).optional()
 });
 var KNOWN2 = [
   "model",
@@ -47778,29 +48413,8 @@ function describeModel(model, credentials) {
     ...limits.maxOutputTokens === undefined ? {} : { max_tokens: limits.maxOutputTokens }
   };
 }
-var ALREADY_CLAUDE = /^(?:claude|anthropic)/i;
-var MIRROR_PREFIX = "claude/";
-function discoveryMirrors(data) {
-  const taken = new Set(data.map((entry) => entry.id));
-  const mirrors = [];
-  for (const entry of data) {
-    if (ALREADY_CLAUDE.test(entry.id))
-      continue;
-    const id = `${MIRROR_PREFIX}${entry.id}`;
-    if (taken.has(id))
-      continue;
-    mirrors.push({
-      ...entry,
-      id,
-      root: entry.id,
-      display_name: `${entry.display_name} (OmniGateway)`
-    });
-  }
-  return mirrors;
-}
-function modelListBody(models, credentials, options = {}) {
-  const described = models.map((model) => describeModel(model, credentials));
-  const data = options.discoveryMirrors === true ? [...described, ...discoveryMirrors(described)] : described;
+function modelListBody(models, credentials) {
+  const data = models.map((model) => describeModel(model, credentials));
   return {
     object: "list",
     data,
@@ -48000,7 +48614,7 @@ async function handle(deps, rateLimiter, surface, request2) {
       ...captured === null ? {} : { http: captured.wrap(deps.http) },
       async onRoute(target) {
         if (began) {
-          await routeLog(deps.store, requestId, target, deps.logger);
+          await routeLog(deps.store, requestId, target, deps.logger, deps.broadcaster);
           return;
         }
         began = true;
@@ -48012,7 +48626,7 @@ async function handle(deps, rateLimiter, surface, request2) {
           resolvedModel: target.model,
           credentialId: target.credentialId
         });
-        await beginLog(deps.store, log2, keyId, deps.logger);
+        await beginLog(deps.store, log2, keyId, deps.logger, deps.broadcaster);
       }
     }, request2.signal, requestId);
     outcome = dispatched;
@@ -48035,7 +48649,7 @@ async function handle(deps, rateLimiter, surface, request2) {
         reportRejection(deps.logger, requestId, completed, gatewayError, surface);
       }
       logged = true;
-      await finishLog(deps.store, completed, keyId, deps.logger, writeBodies, debit, deps.emit);
+      await finishLog(deps.store, completed, keyId, deps.logger, writeBodies, debit, deps.emit, deps.broadcaster);
     };
     if (chatRequest.stream) {
       const frames = surface === "anthropic" ? anthropicStream(dispatched.events, requestId) : openaiStream(dispatched.events, requestId, Math.floor(deps.now() / 1000));
@@ -48076,7 +48690,7 @@ async function handle(deps, rateLimiter, surface, request2) {
     if (collector !== null && !logged)
       collector.client.response = rejection;
     if (!logged)
-      await finishLog(deps.store, completed, keyId, deps.logger, writeBodies, debit, deps.emit);
+      await finishLog(deps.store, completed, keyId, deps.logger, writeBodies, debit, deps.emit, deps.broadcaster);
     if (!cancelled)
       reportRejection(deps.logger, requestId, completed, gatewayError, surface);
     return jsonResponse(rejection, HTTP_STATUS[gatewayError.code], {
@@ -48110,9 +48724,7 @@ function proxyRoutes(deps) {
       const snapshot = await dispatchDeps.snapshots.get(deps.now());
       const models = [...snapshot.models.values()];
       const visibleModels = key.modelAllowlist === null ? models : models.filter((model) => key.modelAllowlist?.includes(model.id));
-      return Response.json(modelListBody(visibleModels, snapshot.credentials, {
-        discoveryMirrors: deps.discoveryMirrors === true
-      }));
+      return Response.json(modelListBody(visibleModels, snapshot.credentials));
     } catch (error51) {
       const gatewayError = asGatewayError(error51);
       logger2.error("model listing failed", {
@@ -48152,6 +48764,684 @@ function proxyRoutes(deps) {
   });
 }
 
+// apps/gateway/src/stream/broadcaster.ts
+var INVALIDATION_FLOORS = {
+  "res:usage": 1000,
+  "res:logs": 1000,
+  "res:quota": 5000,
+  "res:credentials": 5000
+};
+var DEFAULT_FLOOR_MS = 1000;
+var GLOBAL_INVALIDATE = "res:*";
+function createBroadcaster(deps) {
+  const streams = new Set;
+  return {
+    invalidate(topic, keys) {
+      deps.coalescer.emit(topic, keys === undefined ? undefined : { keys });
+    },
+    invalidateAll() {
+      deps.registry.publish(GLOBAL_INVALIDATE, {
+        type: "event",
+        topic: GLOBAL_INVALIDATE
+      });
+    },
+    declareStream(topic) {
+      streams.add(topic);
+    },
+    declared(topic) {
+      return streams.has(topic);
+    },
+    stream(topic, payload) {
+      const seq = deps.ring.push(topic, payload);
+      deps.registry.publish(topic, { type: "event", topic, seq, payload });
+    },
+    resetStream(topic) {
+      deps.ring.reset(topic);
+    },
+    stop() {
+      deps.coalescer.stop();
+    }
+  };
+}
+
+// apps/gateway/src/stream/protocol.ts
+function topicClass(topic) {
+  if (topic.startsWith("res:") && topic.length > 4)
+    return "res";
+  if (topic.startsWith("stream:") && topic.length > 7)
+    return "stream";
+  if (topic.startsWith("plugin:")) {
+    const rest = topic.slice(7);
+    const colon = rest.indexOf(":");
+    return colon > 0 && colon < rest.length - 1 ? "plugin" : null;
+  }
+  return null;
+}
+var MAX_TOPIC = 128;
+function isRecord7(value) {
+  return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+function parseClientFrame(raw) {
+  if (!isRecord7(raw))
+    return null;
+  const { id, type, topic } = raw;
+  if (id !== undefined && typeof id !== "string")
+    return null;
+  if (typeof topic !== "string" || topic.length === 0 || topic.length > MAX_TOPIC)
+    return null;
+  if (topicClass(topic) === null)
+    return null;
+  const head = id === undefined ? { topic } : { id, topic };
+  if (type === "unsubscribe")
+    return { ...head, type: "unsubscribe" };
+  if (type === "send") {
+    return "payload" in raw ? { ...head, type: "send", payload: raw.payload } : { ...head, type: "send" };
+  }
+  if (type === "subscribe") {
+    const { sinceSeq } = raw;
+    if (sinceSeq === undefined)
+      return { ...head, type: "subscribe" };
+    if (typeof sinceSeq !== "number" || !Number.isInteger(sinceSeq) || sinceSeq < 0)
+      return null;
+    return { ...head, type: "subscribe", sinceSeq };
+  }
+  return null;
+}
+
+// apps/gateway/src/routes/stream.ts
+function authorised(channels, principal, topic) {
+  const kind = topicClass(topic);
+  if (kind === null)
+    return false;
+  if (kind === "plugin") {
+    if (!channels.opened(topic))
+      return false;
+    if (principal.kind === "admin")
+      return true;
+    return topic.startsWith(`plugin:${principal.pluginId}:`);
+  }
+  return principal.kind === "admin";
+}
+function streamRoutes(deps) {
+  const logger2 = deps.logger ?? noopLogger;
+  const nextId = deps.connectionId ?? (() => `ws_${crypto.randomUUID()}`);
+  const resolved = new WeakMap;
+  const ids = new WeakMap;
+  const send = (ws, frame2) => {
+    ws.send(JSON.stringify(frame2));
+  };
+  return new Elysia().onError(apiErrorHandler).ws("/api/stream", {
+    beforeHandle: async ({ request: request2 }) => {
+      if (resolved.has(request2))
+        return;
+      const bearer = request2.headers.get("authorization");
+      const cookie = readCookie(request2, ADMIN_COOKIE);
+      if (bearer !== null && cookie !== null) {
+        throw new GatewayError("AUTH", "present one credential, not two");
+      }
+      await requireAdmin(request2, deps.admin);
+      if (cookie === null)
+        throw new GatewayError("AUTH", "admin session required");
+      resolved.set(request2, {
+        principal: { kind: "admin" },
+        revalidate: () => deps.admin.verify(cookie)
+      });
+    },
+    open(ws) {
+      const credential = resolved.get(ws.data.request);
+      if (credential === undefined) {
+        ws.close(1011, "unauthenticated");
+        return;
+      }
+      const id = nextId();
+      ids.set(ws.raw, id);
+      deps.registry.add(id, ws.raw, credential);
+      deps.registry.subscribe(id, GLOBAL_INVALIDATE);
+    },
+    message(ws, raw) {
+      const id = ids.get(ws.raw);
+      if (id === undefined)
+        return;
+      const frame2 = parseClientFrame(raw);
+      if (frame2 === null) {
+        send(ws, { type: "error", message: "malformed frame" });
+        return;
+      }
+      const principal = deps.registry.principal(id);
+      if (principal === null)
+        return;
+      const head = frame2.id === undefined ? {} : { id: frame2.id };
+      if (!authorised(deps.channels, principal, frame2.topic)) {
+        send(ws, { ...head, type: "error", topic: frame2.topic, message: "not permitted" });
+        return;
+      }
+      if (frame2.type === "unsubscribe") {
+        deps.registry.unsubscribe(id, frame2.topic);
+        send(ws, { ...head, type: "ack", topic: frame2.topic });
+        return;
+      }
+      if (frame2.type === "send") {
+        if (topicClass(frame2.topic) !== "plugin") {
+          send(ws, { ...head, type: "error", topic: frame2.topic, message: "topic is read-only" });
+          return;
+        }
+        if (!deps.channels.deliver(frame2.topic, id, frame2.payload)) {
+          send(ws, {
+            ...head,
+            type: "error",
+            topic: frame2.topic,
+            message: "subscribe before sending"
+          });
+          return;
+        }
+        send(ws, { ...head, type: "ack", topic: frame2.topic });
+        return;
+      }
+      if (topicClass(frame2.topic) === "stream" && !deps.broadcaster.declared(frame2.topic)) {
+        send(ws, { ...head, type: "error", topic: frame2.topic, message: "no source" });
+        return;
+      }
+      deps.registry.subscribe(id, frame2.topic);
+      send(ws, { ...head, type: "ack", topic: frame2.topic });
+      if (frame2.sinceSeq !== undefined) {
+        const slice = deps.ring.since(frame2.topic, frame2.sinceSeq);
+        if (slice.kind === "gap") {
+          send(ws, { type: "gap", topic: frame2.topic, seq: slice.seq });
+        } else {
+          for (const item of slice.frames) {
+            send(ws, { type: "event", topic: frame2.topic, seq: item.seq, payload: item.payload });
+          }
+        }
+      }
+    },
+    pong(ws) {
+      const id = ids.get(ws.raw);
+      if (id !== undefined)
+        deps.registry.pong(id);
+    },
+    drain(ws) {
+      const id = ids.get(ws.raw);
+      if (id !== undefined)
+        deps.registry.drain(id);
+    },
+    close(ws) {
+      const id = ids.get(ws.raw);
+      if (id === undefined)
+        return;
+      deps.channels.closed(id, deps.registry.topics(id));
+      deps.registry.remove(id);
+      ids.delete(ws.raw);
+      logger2.debug("stream closed");
+    }
+  }).get("/api/stream", ({ set: set2 }) => {
+    set2.status = 426;
+    return { error: { code: "BAD_REQUEST", message: "websocket upgrade required" } };
+  });
+}
+
+// apps/gateway/src/stream/channels.ts
+var NAME_PATTERN = /^[a-z0-9][a-z0-9:._-]{0,63}$/;
+var defaultScheduler = (run) => {
+  const timer = setTimeout(run, 0);
+  timer.unref?.();
+  return () => clearTimeout(timer);
+};
+function createChannelRegistry(deps) {
+  const logger2 = deps.logger ?? noopLogger;
+  const scheduler = deps.scheduler ?? defaultScheduler;
+  const channels = new Map;
+  let handlerErrors = 0;
+  let live = true;
+  let cancelReport;
+  const errorsSinceReport = new Map;
+  const report2 = () => {
+    cancelReport = undefined;
+    if (!live)
+      return;
+    for (const [pluginId, count] of errorsSinceReport) {
+      logger2.warn("plugin channel handler failed", { plugin: pluginId, count });
+    }
+    errorsSinceReport.clear();
+  };
+  const countFailure = (pluginId) => {
+    handlerErrors++;
+    errorsSinceReport.set(pluginId, (errorsSinceReport.get(pluginId) ?? 0) + 1);
+    if (cancelReport !== undefined || !live)
+      return;
+    cancelReport = scheduler(report2);
+  };
+  const holds = (connectionId, topic) => deps.sockets.has(connectionId, topic);
+  const openChannel = (pluginId, name) => {
+    if (!NAME_PATTERN.test(name)) {
+      throw new Error(`channel name must match ${String(NAME_PATTERN)}, got ${name}`);
+    }
+    const topic = `plugin:${pluginId}:${name}`;
+    const existing = channels.get(topic);
+    if (existing !== undefined)
+      return existing.facade;
+    const channel = {
+      pluginId,
+      topic,
+      onMessage: [],
+      onClose: [],
+      facade: { onMessage: () => {}, send: () => {}, onClose: () => {} }
+    };
+    channel.facade = {
+      onMessage(handler) {
+        channel.onMessage.push(handler);
+      },
+      onClose(handler) {
+        channel.onClose.push(handler);
+      },
+      send(connectionId, payload) {
+        if (!live)
+          return;
+        if (!holds(connectionId, topic))
+          return;
+        deps.sockets.sendTo(connectionId, { type: "event", topic, payload });
+      }
+    };
+    channels.set(topic, channel);
+    return channel.facade;
+  };
+  return {
+    for(pluginId) {
+      return { open: (name) => openChannel(pluginId, name) };
+    },
+    opened(topic) {
+      return channels.has(topic);
+    },
+    deliver(topic, connectionId, payload) {
+      if (!live)
+        return false;
+      const channel = channels.get(topic);
+      if (channel === undefined)
+        return false;
+      if (!holds(connectionId, topic))
+        return false;
+      for (const handler of channel.onMessage) {
+        try {
+          handler({ connectionId, payload });
+        } catch {
+          countFailure(channel.pluginId);
+        }
+      }
+      return true;
+    },
+    closed(connectionId, topics) {
+      if (!live)
+        return;
+      for (const topic of topics) {
+        const channel = channels.get(topic);
+        if (channel === undefined)
+          continue;
+        for (const handler of channel.onClose) {
+          try {
+            handler(connectionId);
+          } catch {
+            countFailure(channel.pluginId);
+          }
+        }
+      }
+    },
+    stats() {
+      return { channels: channels.size, handlerErrors };
+    },
+    stop() {
+      live = false;
+      channels.clear();
+      cancelReport?.();
+      cancelReport = undefined;
+      errorsSinceReport.clear();
+    }
+  };
+}
+
+// apps/gateway/src/stream/coalescer.ts
+var defaultSchedule = (run, ms) => {
+  const timer = setTimeout(run, ms);
+  return () => clearTimeout(timer);
+};
+function createCoalescer(deps) {
+  const now = deps.now ?? Date.now;
+  const schedule = deps.schedule ?? defaultSchedule;
+  const lastSent = new Map;
+  const pending = new Map;
+  const floorFor = (topic) => deps.floors[topic] ?? deps.defaultFloorMs;
+  const send = (topic, payload) => {
+    lastSent.set(topic, now());
+    deps.sink(topic, payload);
+  };
+  const fire = (topic) => {
+    const item = pending.get(topic);
+    if (item === undefined)
+      return;
+    pending.delete(topic);
+    send(topic, item.payload);
+  };
+  return {
+    emit(topic, payload) {
+      const floor = floorFor(topic);
+      const previous = lastSent.get(topic);
+      const elapsed = previous === undefined ? Number.POSITIVE_INFINITY : now() - previous;
+      const waiting = pending.get(topic);
+      if (waiting !== undefined) {
+        waiting.payload = payload;
+        return;
+      }
+      if (elapsed >= floor) {
+        send(topic, payload);
+        return;
+      }
+      const cancel = schedule(() => fire(topic), floor - elapsed);
+      pending.set(topic, { payload, cancel });
+    },
+    flush() {
+      for (const [topic, item] of [...pending]) {
+        item.cancel();
+        pending.delete(topic);
+        send(topic, item.payload);
+      }
+    },
+    stop() {
+      for (const item of pending.values())
+        item.cancel();
+      pending.clear();
+      lastSent.clear();
+    }
+  };
+}
+
+// apps/gateway/src/stream/registry.ts
+var DEFAULT_QUEUE_CAPACITY = 1000;
+var MAX_TOPICS_PER_CONNECTION = 256;
+var HIGH_WATER_BYTES = 512 * 1024;
+var HEARTBEAT_MS = 20000;
+var PONG_DEADLINE_MS = 60000;
+var CHECK_STALE_MS = 60000;
+var CLOSE_UNAUTHENTICATED = 4401;
+function createSocketRegistry(deps = {}) {
+  const logger2 = deps.logger ?? noopLogger;
+  const onDetach = deps.onDetach;
+  const now = deps.now ?? Date.now;
+  const schedule = deps.schedule ?? ((run, ms) => {
+    const timer = setTimeout(run, ms);
+    timer.unref?.();
+    return () => clearTimeout(timer);
+  });
+  const capacity = deps.queueCapacity ?? DEFAULT_QUEUE_CAPACITY;
+  const heartbeatMs = deps.heartbeatMs ?? HEARTBEAT_MS;
+  const pongDeadlineMs = deps.pongDeadlineMs ?? PONG_DEADLINE_MS;
+  const checkStaleMs = deps.checkStaleMs ?? CHECK_STALE_MS;
+  const connections = new Map;
+  const index = new Map;
+  let dropped = 0;
+  let live = true;
+  let cancelTick;
+  let droppedSinceReport = 0;
+  const flush = (connection) => {
+    while (connection.queue.length > 0) {
+      if ((connection.socket.getBufferedAmount?.() ?? 0) >= HIGH_WATER_BYTES)
+        return;
+      const frame2 = connection.queue[0];
+      if (frame2 === undefined)
+        break;
+      let status2;
+      try {
+        status2 = connection.socket.send(JSON.stringify(frame2));
+      } catch {
+        return;
+      }
+      if (status2 === 0)
+        return;
+      connection.queue.shift();
+    }
+  };
+  const deliver = (connection, frame2) => {
+    if (connection.queue.length >= capacity) {
+      connection.queue.shift();
+      dropped++;
+      droppedSinceReport++;
+    }
+    connection.queue.push(frame2);
+    flush(connection);
+  };
+  const detach = (connection) => {
+    for (const topic of connection.topics) {
+      const subscribers = index.get(topic);
+      if (subscribers === undefined)
+        continue;
+      subscribers.delete(connection.id);
+      if (subscribers.size === 0)
+        index.delete(topic);
+    }
+    connections.delete(connection.id);
+  };
+  const closeOne = (connection, code, reason) => {
+    onDetach?.(connection.id, [...connection.topics]);
+    detach(connection);
+    try {
+      connection.socket.close(code, reason);
+    } catch {}
+  };
+  const tick = () => {
+    cancelTick = undefined;
+    if (!live)
+      return;
+    const at = now();
+    for (const connection of [...connections.values()]) {
+      if (at - connection.lastPongAt > pongDeadlineMs) {
+        closeOne(connection, 1001, "pong deadline");
+        continue;
+      }
+      try {
+        connection.socket.ping?.();
+      } catch {
+        closeOne(connection, 1001, "ping failed");
+        continue;
+      }
+      if (connection.checking) {
+        if (at - connection.checkingSince < checkStaleMs)
+          continue;
+        connection.generation += 1;
+        connection.checking = false;
+      }
+      connection.checking = true;
+      connection.checkingSince = at;
+      const generation = connection.generation;
+      connection.credential.revalidate().then((valid) => {
+        if (connection.generation !== generation)
+          return;
+        connection.checking = false;
+        if (!valid && connections.has(connection.id)) {
+          closeOne(connection, CLOSE_UNAUTHENTICATED, "session expired");
+        }
+      }).catch(() => {
+        if (connection.generation !== generation)
+          return;
+        connection.checking = false;
+      });
+    }
+    if (droppedSinceReport > 0) {
+      logger2.warn("stream queue overflowed", { count: droppedSinceReport });
+      droppedSinceReport = 0;
+    }
+    arm();
+  };
+  const arm = () => {
+    if (!live || cancelTick !== undefined)
+      return;
+    cancelTick = schedule(tick, heartbeatMs);
+  };
+  arm();
+  return {
+    add(id, socket, credential) {
+      if (!live) {
+        socket.close(1001, "shutting down");
+        return;
+      }
+      connections.set(id, {
+        id,
+        socket,
+        credential,
+        topics: new Set,
+        queue: [],
+        lastPongAt: now(),
+        checking: false,
+        checkingSince: 0,
+        generation: 0
+      });
+    },
+    remove(id) {
+      const connection = connections.get(id);
+      if (connection !== undefined)
+        detach(connection);
+    },
+    subscribe(id, topic) {
+      const connection = connections.get(id);
+      if (connection === undefined)
+        return;
+      if (connection.topics.size >= MAX_TOPICS_PER_CONNECTION && !connection.topics.has(topic)) {
+        return;
+      }
+      connection.topics.add(topic);
+      const subscribers = index.get(topic) ?? new Set;
+      subscribers.add(id);
+      index.set(topic, subscribers);
+    },
+    unsubscribe(id, topic) {
+      const connection = connections.get(id);
+      if (connection === undefined)
+        return;
+      connection.topics.delete(topic);
+      const subscribers = index.get(topic);
+      if (subscribers === undefined)
+        return;
+      subscribers.delete(id);
+      if (subscribers.size === 0)
+        index.delete(topic);
+    },
+    topics(id) {
+      return [...connections.get(id)?.topics ?? []];
+    },
+    has(id, topic) {
+      return connections.get(id)?.topics.has(topic) ?? false;
+    },
+    principal(id) {
+      return connections.get(id)?.credential.principal ?? null;
+    },
+    pong(id) {
+      const connection = connections.get(id);
+      if (connection !== undefined)
+        connection.lastPongAt = now();
+    },
+    drain(id) {
+      const connection = connections.get(id);
+      if (connection !== undefined)
+        flush(connection);
+    },
+    publish(topic, frame2) {
+      const subscribers = index.get(topic);
+      if (subscribers === undefined)
+        return;
+      for (const id of subscribers) {
+        const connection = connections.get(id);
+        if (connection !== undefined)
+          deliver(connection, frame2);
+      }
+    },
+    sendTo(id, frame2) {
+      const connection = connections.get(id);
+      if (connection !== undefined)
+        deliver(connection, frame2);
+    },
+    closeAll(code, reason) {
+      for (const connection of [...connections.values()])
+        closeOne(connection, code, reason);
+      index.clear();
+    },
+    stats() {
+      let queued = 0;
+      for (const connection of connections.values())
+        queued += connection.queue.length;
+      return { connections: connections.size, dropped, queued };
+    },
+    stop() {
+      live = false;
+      cancelTick?.();
+      cancelTick = undefined;
+    }
+  };
+}
+
+// apps/gateway/src/stream/ring.ts
+function sizeOf(payload) {
+  try {
+    return JSON.stringify(payload)?.length ?? 0;
+  } catch {
+    return 0;
+  }
+}
+function createRing(limits) {
+  const topics = new Map;
+  const stateFor = (topic) => {
+    const existing = topics.get(topic);
+    if (existing !== undefined)
+      return existing;
+    const created = { entries: [], bytes: 0, seq: 0 };
+    topics.set(topic, created);
+    return created;
+  };
+  return {
+    push(topic, payload) {
+      const state = stateFor(topic);
+      state.seq += 1;
+      const bytes = sizeOf(payload);
+      state.entries.push({ seq: state.seq, payload, bytes });
+      state.bytes += bytes;
+      while (state.entries.length > limits.frames || state.bytes > limits.bytes && state.entries.length > 1) {
+        const evicted = state.entries.shift();
+        if (evicted === undefined)
+          break;
+        state.bytes -= evicted.bytes;
+      }
+      return state.seq;
+    },
+    since(topic, sinceSeq) {
+      const state = topics.get(topic);
+      if (state === undefined) {
+        return sinceSeq === 0 ? { kind: "frames", frames: [] } : { kind: "gap", seq: 0 };
+      }
+      if (sinceSeq > state.seq)
+        return { kind: "gap", seq: state.seq };
+      if (sinceSeq === state.seq)
+        return { kind: "frames", frames: [] };
+      const oldest = state.entries[0];
+      if (oldest === undefined)
+        return { kind: "gap", seq: state.seq };
+      if (oldest.seq > sinceSeq + 1)
+        return { kind: "gap", seq: state.seq };
+      return {
+        kind: "frames",
+        frames: state.entries.filter((entry) => entry.seq > sinceSeq).map(({ seq, payload }) => ({ seq, payload }))
+      };
+    },
+    head(topic) {
+      return topics.get(topic)?.seq ?? 0;
+    },
+    reset(topic) {
+      const state = topics.get(topic);
+      if (state === undefined)
+        return;
+      state.entries = [];
+      state.bytes = 0;
+    },
+    drop(topic) {
+      topics.delete(topic);
+    }
+  };
+}
+
 // apps/gateway/src/app.ts
 var ADMIN_SESSION_TTL_MS = 12 * 60 * 60 * 1000;
 var QUIESCE_MESSAGE = "the gateway is briefly quiesced for database maintenance";
@@ -48201,6 +49491,29 @@ function createApp(deps) {
     } catch {}
   }
   const latch = deps.latch ?? createQuiesceLatch();
+  let channelsRef;
+  const registry2 = deps.registry ?? createSocketRegistry({
+    logger: logger2,
+    now,
+    onDetach: (id, topics) => channelsRef?.closed(id, topics)
+  });
+  const channels = deps.channels ?? createChannelRegistry({ sockets: registry2, logger: logger2 });
+  channelsRef = channels;
+  const ring = deps.ring ?? createRing({ frames: 500, bytes: 2 * 1024 * 1024 });
+  const broadcaster = deps.broadcaster ?? createBroadcaster({
+    registry: registry2,
+    ring,
+    coalescer: createCoalescer({
+      floors: INVALIDATION_FLOORS,
+      defaultFloorMs: DEFAULT_FLOOR_MS,
+      now,
+      sink: (topic, payload) => registry2.publish(topic, {
+        type: "event",
+        topic,
+        ...payload === undefined ? {} : { payload }
+      })
+    })
+  });
   const admitted = new WeakMap;
   return new Elysia().onRequest(({ request: request2 }) => {
     const path = new URL(request2.url).pathname;
@@ -48225,18 +49538,18 @@ function createApp(deps) {
     rateLimiter,
     logger: logger2,
     ...deps.loadRegistry === undefined ? {} : { loadRegistry: deps.loadRegistry },
-    discoveryMirrors: deps.discoveryMirrors === true,
     bodyLoggingAllowed: deps.bodyLoggingAllowed === true,
-    ...deps.emit === undefined ? {} : { emit: deps.emit }
+    ...deps.emit === undefined ? {} : { emit: deps.emit },
+    broadcaster
   })).use(adminRoutes({
     store: deps.store,
     admin,
     baseUrl: deps.baseUrl,
-    discoveryMirrors: deps.discoveryMirrors === true,
     bodyLoggingAllowed: deps.bodyLoggingAllowed === true,
     now,
     sessionTtlMs: ADMIN_SESSION_TTL_MS,
     logger: logger2,
+    broadcaster,
     ...deps.console === undefined ? {} : { console: deps.console }
   })).use(databaseRoutes({
     store: deps.store,
@@ -48244,6 +49557,7 @@ function createApp(deps) {
     admin,
     latch,
     snapshots,
+    broadcaster,
     fs: deps.databaseFs ?? nodeDatabaseFs(),
     now,
     logger: logger2,
@@ -48263,6 +49577,13 @@ function createApp(deps) {
     admin,
     plugins: deps.pluginUi ?? [],
     logger: logger2
+  })).use(streamRoutes({
+    admin,
+    registry: registry2,
+    broadcaster,
+    ring,
+    channels,
+    logger: logger2
   })).get("/*", ({ path, request: request2, set: set2 }) => {
     const rawPath = new URL(request2.url).pathname;
     const error51 = () => {
@@ -48419,6 +49740,7 @@ async function sweep(deps) {
   const logger2 = deps.logger ?? noopLogger;
   const credentials = await deps.store.credentials.list();
   let refreshed = 0;
+  let touched = 0;
   for (const credential of due(credentials, deps.now())) {
     if (!credential.hasRefreshToken) {
       if (credential.expiresAt !== null && credential.expiresAt <= deps.now()) {
@@ -48427,14 +49749,18 @@ async function sweep(deps) {
           disabledReason: "expiredNoRefresh",
           disabledAt: deps.now()
         });
+        touched += 1;
       }
       continue;
     }
     try {
       await deps.refresh(credential);
       refreshed += 1;
+      touched += 1;
     } catch (error51) {
       const code = error51 instanceof GatewayError ? error51.code : "INTERNAL";
+      if (code === "AUTH")
+        touched += 1;
       logger2.warn("scheduled token refresh failed", {
         provider: credential.provider,
         credentialId: credential.id,
@@ -48443,6 +49769,8 @@ async function sweep(deps) {
       });
     }
   }
+  if (touched > 0)
+    deps.broadcaster?.invalidate("res:credentials");
   return refreshed;
 }
 function startRefreshScheduler(deps) {
@@ -48466,14 +49794,14 @@ function startRefreshScheduler(deps) {
 
 // apps/gateway/src/plugins/events.ts
 var DEFAULT_CAPACITY = 1000;
-var defaultScheduler = (run) => {
+var defaultScheduler2 = (run) => {
   const timer = setTimeout(run, 0);
   return () => clearTimeout(timer);
 };
 function createPluginEventBus(opts) {
   const logger2 = opts.logger ?? noopLogger;
   const capacity = opts.capacity ?? DEFAULT_CAPACITY;
-  const scheduler = opts.scheduler ?? defaultScheduler;
+  const scheduler = opts.scheduler ?? defaultScheduler2;
   const requestHandlers = [];
   const limitHandlers = [];
   const queue = [];
@@ -48681,6 +50009,7 @@ function buildContext(deps) {
       const events = createPluginEvents(manifest, deps.events);
       return events === undefined ? {} : { events };
     })(),
+    ...declared.includes("channels") ? { channels: deps.channels.for(manifest.id) } : {},
     config: manifest.defaults ?? {}
   };
 }
@@ -48761,6 +50090,7 @@ async function loadPlugins(deps) {
           home,
           store: deps.store,
           events: deps.events,
+          channels: deps.channels,
           logger: logger2,
           now
         });
@@ -48809,6 +50139,7 @@ async function startQuotaPoller(deps) {
       });
     }).finally(() => {
       running = false;
+      deps.broadcaster?.invalidate("res:quota");
     });
   };
   pass();
@@ -48817,6 +50148,169 @@ async function startQuotaPoller(deps) {
   return () => clearInterval(timer);
 }
 
+// apps/gateway/src/stream/console.ts
+import { watch } from "fs";
+var CONSOLE_TOPIC = "stream:console";
+var CONSOLE_FLOOR_MS = 250;
+var JOURNAL_POLL_MS = 1000;
+var REWATCH_ATTEMPTS = 5;
+var defaultSchedule2 = (run, ms) => {
+  const timer = setTimeout(run, ms);
+  return () => clearTimeout(timer);
+};
+function startConsoleStream(deps) {
+  const logger2 = deps.logger ?? noopLogger;
+  const { source } = deps.console;
+  if (source.kind === "none")
+    return () => {};
+  if (source.kind === "journal")
+    return startJournalPoll(deps, source, logger2);
+  return startFileWatch(deps, source, logger2);
+}
+function startFileWatch(deps, source, logger2) {
+  const { broadcaster } = deps;
+  const read = deps.read ?? readFrom;
+  const size = deps.size ?? fileSize;
+  const floorMs = deps.floorMs ?? CONSOLE_FLOOR_MS;
+  let offset = size(source.path) ?? 0;
+  let stopped = false;
+  let watcher = null;
+  let rotated = false;
+  let rewatchAttempts = 0;
+  let cancelRewatch = null;
+  const rewatchSchedule = deps.schedule ?? defaultSchedule2;
+  const pump = () => {
+    const delta2 = read(source.path, offset);
+    if (delta2 === null) {
+      rotate();
+      return;
+    }
+    offset = delta2.offset;
+    const lines = parseConsoleLines(delta2.text, { lines: MAX_CONSOLE_LINES });
+    if (lines.length > 0)
+      broadcaster.stream(CONSOLE_TOPIC, { lines });
+    if (delta2.gap || rotated) {
+      rotated = false;
+      broadcaster.resetStream(CONSOLE_TOPIC);
+    }
+  };
+  const coalescer = createCoalescer({
+    floors: { [CONSOLE_TOPIC]: floorMs },
+    defaultFloorMs: floorMs,
+    ...deps.now === undefined ? {} : { now: deps.now },
+    ...deps.schedule === undefined ? {} : { schedule: deps.schedule },
+    sink: () => pump()
+  });
+  function rotate() {
+    if (stopped)
+      return;
+    offset = 0;
+    rotated = true;
+    watcher?.close();
+    watcher = startWatcher(deps, source.path, onWatchEvent, logger2);
+    if (watcher === null) {
+      if (rewatchAttempts >= REWATCH_ATTEMPTS) {
+        logger2.warn("console stream ended", { path: source.path });
+        return;
+      }
+      rewatchAttempts += 1;
+      cancelRewatch?.();
+      cancelRewatch = rewatchSchedule(() => rotate(), floorMs);
+      return;
+    }
+    rewatchAttempts = 0;
+    coalescer.emit(CONSOLE_TOPIC);
+  }
+  function onWatchEvent(event) {
+    if (event === "rename") {
+      rotate();
+      return;
+    }
+    coalescer.emit(CONSOLE_TOPIC);
+  }
+  watcher = startWatcher(deps, source.path, onWatchEvent, logger2);
+  if (watcher === null) {
+    coalescer.stop();
+    return () => {};
+  }
+  broadcaster.declareStream(CONSOLE_TOPIC);
+  logger2.info("console stream watching", { path: source.path });
+  return () => {
+    stopped = true;
+    cancelRewatch?.();
+    watcher?.close();
+    coalescer.stop();
+  };
+}
+function startWatcher(deps, path, onChange, logger2) {
+  const create2 = deps.watch ?? ((target, changed) => {
+    const watcher = watch(target, (event) => changed(event));
+    watcher.on("error", (error51) => {
+      logger2.error("console watch failed", { reason: describeError(error51, "unknown") });
+    });
+    return watcher;
+  });
+  try {
+    return create2(path, onChange);
+  } catch (error51) {
+    logger2.warn("console stream unavailable", {
+      path,
+      reason: describeError(error51, "unknown")
+    });
+    return null;
+  }
+}
+function startJournalPoll(deps, source, logger2) {
+  const { broadcaster } = deps;
+  const now = deps.now ?? Date.now;
+  const schedule = deps.schedule ?? defaultSchedule2;
+  const pollMs = deps.pollMs ?? JOURNAL_POLL_MS;
+  let cursor = now();
+  let stopped = false;
+  let cancel = null;
+  let publishedAtCursor = new Set;
+  const arm = () => {
+    if (stopped)
+      return;
+    cancel = schedule(() => void tick(), pollMs);
+  };
+  const tick = async () => {
+    try {
+      const read = await readConsole(deps.console.deps, source, {
+        lines: MAX_CONSOLE_LINES,
+        since: cursor - 1
+      });
+      const fresh = read.lines.filter((line) => line.at !== cursor || !publishedAtCursor.has(line.raw));
+      if (fresh.length > 0) {
+        let newest = cursor;
+        for (const line of fresh) {
+          if (line.at !== null && line.at > newest)
+            newest = line.at;
+        }
+        if (newest > cursor) {
+          cursor = newest;
+          publishedAtCursor = new Set;
+        }
+        for (const line of fresh) {
+          if (line.at === cursor)
+            publishedAtCursor.add(line.raw);
+        }
+        broadcaster.stream(CONSOLE_TOPIC, { lines: fresh });
+      }
+    } catch (error51) {
+      logger2.error("console poll failed", { reason: describeError(error51, "unknown") });
+    } finally {
+      arm();
+    }
+  };
+  broadcaster.declareStream(CONSOLE_TOPIC);
+  arm();
+  return () => {
+    stopped = true;
+    cancel?.();
+  };
+}
+
 // apps/gateway/src/index.ts
 function stdoutLogger(level) {
   return createLogger({
@@ -48895,10 +50389,19 @@ async function main() {
   const installRoot = process.env.OMNI_ROOT ?? dirname5(config2.databasePath);
   const pluginRoot = resolve6(installRoot, "plugins");
   const pluginEvents = createPluginEventBus({ logger: logger2 });
+  let pluginChannelsRef;
+  const streamRegistry = createSocketRegistry({
+    logger: logger2,
+    now,
+    onDetach: (id, topics) => pluginChannelsRef?.closed(id, topics)
+  });
+  const pluginChannels = createChannelRegistry({ sockets: streamRegistry, logger: logger2 });
+  pluginChannelsRef = pluginChannels;
   const loadedPlugins = await loadPlugins({
     root: pluginRoot,
     store,
     events: pluginEvents,
+    channels: pluginChannels,
     sdkVersion: DASHBOARD_SDK_VERSION,
     logger: logger2,
     now
@@ -48907,6 +50410,21 @@ async function main() {
     logger2.warn("plugin unavailable", { plugin: failure.id, reason: failure.reason });
   }
   logger2.info("plugins resolved", { count: loadedPlugins.plugins.length, path: pluginRoot });
+  const streamRing = createRing({ frames: 500, bytes: 2 * 1024 * 1024 });
+  const broadcaster = createBroadcaster({
+    registry: streamRegistry,
+    ring: streamRing,
+    coalescer: createCoalescer({
+      floors: INVALIDATION_FLOORS,
+      defaultFloorMs: DEFAULT_FLOOR_MS,
+      now,
+      sink: (topic, payload) => streamRegistry.publish(topic, {
+        type: "event",
+        topic,
+        ...payload === undefined ? {} : { payload }
+      })
+    })
+  });
   const app = createApp({
     store,
     baseUrl: config2.baseUrl,
@@ -48916,7 +50434,10 @@ async function main() {
     staticDir,
     logger: logger2,
     console: console2,
-    discoveryMirrors: config2.exposeClaudeCodeAliases,
+    registry: streamRegistry,
+    broadcaster,
+    ring: streamRing,
+    channels: pluginChannels,
     bodyLoggingAllowed: config2.bodyLoggingAllowed,
     plugins: loadedPlugins.plugins.map((plugin) => ({ id: plugin.id, routes: plugin.routes })),
     pluginUi: loadedPlugins.plugins,
@@ -48939,20 +50460,34 @@ async function main() {
     }
   });
   const stopMaintenance = startMaintenance({ store, now, logger: logger2 });
-  const stopRefreshScheduler = startRefreshScheduler({ store, refresh, now, logger: logger2 });
+  const stopRefreshScheduler = startRefreshScheduler({ store, refresh, now, logger: logger2, broadcaster });
   const stopQuotaPoller = await startQuotaPoller({
     store,
     providers: OAUTH_PROVIDERS,
     http,
     refresh,
     now,
-    logger: logger2
+    logger: logger2,
+    broadcaster
   });
+  const stopConsoleStream = startConsoleStream({ console: console2, broadcaster, logger: logger2, now });
   app.listen({ port: config2.port, hostname: config2.host, idleTimeout: 255 });
   logger2.info("omnigateway listening", { host: config2.host, port: config2.port });
   shutdown = createShutdown({
     logger: logger2,
-    stopLoops: [stopMaintenance, stopRefreshScheduler, stopQuotaPoller, () => pluginEvents.stop()],
+    stopLoops: [
+      stopMaintenance,
+      stopRefreshScheduler,
+      stopQuotaPoller,
+      stopConsoleStream,
+      () => pluginEvents.stop(),
+      () => {
+        streamRegistry.closeAll(1001, "restart");
+        streamRegistry.stop();
+        broadcaster.stop();
+        pluginChannels.stop();
+      }
+    ],
     stopServer: async () => {
       await app.stop();
     },