zidane 7.2.4 → 8.0.4

package/dist/{anthropic-C2aole0G.js → anthropic-CD00LhUP.js}

@@ -1,104 +1,14 @@
-import { F as unsupportedMediaError, S as resolvePromptCacheKey, b as sanitizeToolSpecs, k as lookupModel, v as createToolNameBoundary, w as fillEstimatedCost } from "./openai-compat-Dy56weK8.js";
-import { t as lazyAsync } from "./lazy-DLOurOC_.js";
 import { f as isRetryableHttpStatus, h as matchesToolPairingError, l as classifyErrorPrelude, m as matchesContextExceeded, u as errorMessage } from "./errors-DKiMrOKq.js";
+import { A as lookupModel, C as createToolJsonEscaper, I as unsupportedMediaError, T as fillEstimatedCost, b as resolvePromptCacheKey, g as createToolNameBoundary, v as sanitizeToolSpecs } from "./openai-compat-CFrpH7uq.js";
 import { renderSystemForWire, splitSystemPrompt } from "./prompt.js";
-import { g as toAnthropic, u as fromAnthropic } from "./messages-2jcOA_5R.js";
-import { a as readOAuthCredentials, r as extractRuntimeCredentials, s as resolveOAuthApiKey } from "./oauth-DxHO17JE.js";
+import { a as fromAnthropic, u as toAnthropic } from "./messages-BqiwcD2Q.js";
+import { t as lazyAsync } from "./lazy-DLOurOC_.js";
+import { a as readOAuthCredentials, r as extractRuntimeCredentials, s as resolveOAuthApiKey } from "./oauth-Px_pBB9W.js";
 import { Buffer } from "node:buffer";
 import { arch, homedir, hostname, platform, userInfo } from "node:os";
 import { createHash, randomUUID } from "node:crypto";
-//#region src/chat/anthropic-models.ts
-/**
-* Anthropic "fast mode" — `speed: "fast"` on the Messages API. ~2.5× output
-* tokens/sec at a per-model price multiplier. Supported on Opus 4.6 / 4.7 /
-* 4.8 / 5 / 5.5 only; the API errors if sent on any other model, so it's
-* attached just to those entries (see {@link FAST_MODE_OPTIONS}).
-*
-* The multiplier scales ALL rate components (input, output, and both cache
-* rates) uniformly: per Anthropic, "prompt caching multipliers apply on top of
-* fast mode pricing" across the full context window. Opus 5.5 ($4/$20 →
-* $8/$40), 5 and 4.8 ($5/$25 → $10/$50) are 2×; Opus 4.6 / 4.7 are a steeper
-* 6× ($5/$25 → $30/$150).
-* See https://platform.claude.com/docs/en/build-with-claude/fast-mode.
-*/
-const FAST_MODE_OPTION = {
-	id: "fast",
-	label: "Fast mode",
-	description: "~2.5× faster output at premium pricing",
-	costMultiplier: {
-		input: 2,
-		output: 2,
-		cacheRead: 2,
-		cacheWrite: 2
-	}
-};
-const FAST_MODE_OPTION_LEGACY = {
-	...FAST_MODE_OPTION,
-	description: "~2.5× faster output at 6× pricing",
-	costMultiplier: {
-		input: 6,
-		output: 6,
-		cacheRead: 6,
-		cacheWrite: 6
-	}
-};
-/** Model ids that accept `speed: "fast"`, mapped to their fast-mode option. */
-const FAST_MODE_OPTIONS = {
-	"claude-opus-5-5": FAST_MODE_OPTION,
-	"claude-opus-5": FAST_MODE_OPTION,
-	"claude-opus-4-8": FAST_MODE_OPTION,
-	"claude-opus-4-7": FAST_MODE_OPTION_LEGACY,
-	"claude-opus-4-6": FAST_MODE_OPTION_LEGACY
-};
-/**
-* The price multiplier to apply to a model's base rates when fast mode is
-* active, or `undefined` when the model has no fast-mode pricing (i.e. doesn't
-* support it). Mirrors {@link FAST_MODE_OPTIONS} — kept as a separate accessor
-* so the cost layer can stay decoupled from the picker-facing option objects.
-*/
-function fastModeCostMultiplier(modelId) {
-	return FAST_MODE_OPTIONS[modelId]?.costMultiplier;
-}
-/**
-* Currently empty: pi-ai 0.87.1 bundles every GA Anthropic model up to and
-* including Claude Opus 5.5 (2026-09-22) — Opus 4.8 / 5 / 5.5, Fable 5 / 5.1,
-* Sonnet 4.6 / 5, Haiku 4.5 — with published rates, 1M context and 128k output.
-*
-* When adding a stopgap entry, mirror pi-ai's `ModelInfo` shape and set
-* `provider: 'anthropic'`. Known caveats worth carrying over in the comment:
-* Fable 5 / 5.1 REJECT forced tool use (`tool_choice` of `any` or `tool`
-* returns 400), which breaks zidane's structured-output paths (`loop.ts`,
-* `generate-data.ts`, the eval judge) — Opus 5.5 rejects it too, handled
-* generically by the learned `MODELS_REJECTING_FORCED_TOOL_CHOICE` retry in
-* providers/anthropic.ts. Opus 5.5 also REJECTS non-adaptive thinking:
-* `thinking: {type:'enabled', budget_tokens}` and `{type:'disabled'}` both 400
-* with `"thinking.type.enabled/disabled" is not supported for this model`;
-* zidane's explicit-budget path (`behavior.thinkingBudget`, the Bedrock-only
-* shape) emits `enabled`, so the provider catches that 400 and retries as
-* adaptive (`MODELS_REJECTING_ENABLED_THINKING`). Claude Mythos 5 / 5.1 are
-* deliberately absent: invitation-only (Project Glasswing), so they would be
-* dead picker entries for virtually all users.
-*
-* See https://platform.claude.com/docs/en/about-claude/models/overview.
-*/
-const ANTHROPIC_EXTRA_MODELS = [];
-//#endregion
 //#region src/providers/anthropic-claude-code.ts
 /**
-* Claude Code client alignment for Anthropic subscription OAuth.
-*
-* Anthropic's subscription endpoint serves the Claude Code CLI. Requests that
-* do not look like that client are, at best, treated as a different product; at
-* worst they miss features the CLI relies on. This module holds every surface
-* that has to match, in one file, so a client bump is one edit rather than a
-* scavenger hunt through the provider.
-*
-* Modelled on `@pi-plugins/claude-oauth`, which maintains the same alignment
-* for pi and verifies its pins against a live client trace. Everything here is
-* scoped to the OAuth path — API-key, gateway-bearer and Bedrock requests never
-* reach it.
-*/
-/**
 * Pinned Claude Code client versions.
 *
 * These travel together: the billing fingerprint below hashes
@@ -169,6 +79,42 @@ function claudeCodeToolAliases(names) {
 	return aliases;
 }
 /**
+* The wire `system` block and `messages` for one request.
+*
+* Claude Code OAuth requires the system block to be the canonical Claude Code
+* prompt, so the real system prompt is folded into a leading user/assistant
+* pair ahead of the conversation. Every other auth shape sends the rendered
+* system prompt as the system block. Shared by `stream()` and `countTokens()`
+* so the count measures what is actually sent.
+*/
+function foldSystemForWire(system, messages, claudeCode) {
+	const wireSystem = renderSystemForWire(system);
+	if (!claudeCode) return {
+		system: wireSystem,
+		messages: [...messages]
+	};
+	return {
+		system: `You are Claude Code, Anthropic's official CLI for Claude.`,
+		messages: system ? [
+			{
+				role: "user",
+				content: [{
+					type: "text",
+					text: wireSystem
+				}]
+			},
+			{
+				role: "assistant",
+				content: [{
+					type: "text",
+					text: "Understood. I will proceed with these instructions above the rest of my system prompt."
+				}]
+			},
+			...messages
+		] : [...messages]
+	};
+}
+/**
 * Beta set the Claude Code agent sends, in client order.
 *
 * Sent as one unit: the endpoint is configured for this combination, and
@@ -486,133 +432,7 @@ function wrapFetchForAnthropicRateLimit(fetch) {
 	}, fetch);
 }
 //#endregion
-//#region src/providers/diagnostic.ts
-const NETWORK_CODES = /* @__PURE__ */ new Set([
-	"ECONNREFUSED",
-	"ECONNRESET",
-	"ETIMEDOUT",
-	"ENOTFOUND",
-	"EAI_AGAIN",
-	"ENETUNREACH",
-	"EHOSTUNREACH",
-	"EPIPE",
-	"UND_ERR_CONNECT_TIMEOUT",
-	"UND_ERR_HEADERS_TIMEOUT",
-	"UND_ERR_SOCKET",
-	"CERT_HAS_EXPIRED",
-	"DEPTH_ZERO_SELF_SIGNED_CERT",
-	"UNABLE_TO_VERIFY_LEAF_SIGNATURE",
-	"ERR_TLS_CERT_ALTNAME_INVALID",
-	"AbortError",
-	"TimeoutError"
-]);
-function sanitizeProviderDiagnosticMetadata(metadata) {
-	const safe = {};
-	if (typeof metadata.transportAttempt === "number" && Number.isSafeInteger(metadata.transportAttempt) && metadata.transportAttempt > 0) safe.transportAttempt = metadata.transportAttempt;
-	if (typeof metadata.networkCode === "string" && NETWORK_CODES.has(metadata.networkCode)) safe.networkCode = metadata.networkCode;
-	if (typeof metadata.httpStatus === "number" && Number.isInteger(metadata.httpStatus) && metadata.httpStatus >= 100 && metadata.httpStatus <= 599) safe.httpStatus = metadata.httpStatus;
-	if (typeof metadata.upstreamRequestId === "string" && metadata.upstreamRequestId.length <= 128 && /^req_[\w-]+$/.test(metadata.upstreamRequestId)) safe.upstreamRequestId = metadata.upstreamRequestId;
-	const retryAfter = metadata.retryAfter;
-	if (typeof retryAfter === "string" && retryAfter.length <= 32 && (/^\d+(?:\.\d+)?$/.test(retryAfter) || retryAfter.length === 29 && new Date(retryAfter).toUTCString() === retryAfter)) safe.retryAfter = retryAfter;
-	return safe;
-}
-/** No request or error objects cross this boundary. Diagnostics cannot fail a request. */
-function createProviderDiagnosticTracker(emit, signal) {
-	const requestId = crypto.randomUUID();
-	const started = performance.now();
-	let stageStarted = started;
-	let current;
-	let attempt = 0;
-	let transportAttempt = 0;
-	let finished = false;
-	let timer;
-	let abort = () => {};
-	function send(event, metadata = {}) {
-		if (!current) return;
-		const now = performance.now();
-		try {
-			emit?.({
-				requestId,
-				stage: current,
-				event,
-				elapsedMs: Math.round(now - started),
-				stageElapsedMs: Math.round(now - stageStarted),
-				attempt,
-				...sanitizeProviderDiagnosticMetadata(metadata)
-			});
-		} catch {}
-	}
-	const tracker = {
-		wrapFetch(fetch) {
-			if (!emit) return fetch;
-			return Object.assign(async (...args) => {
-				const number = ++transportAttempt;
-				const began = performance.now();
-				const report = (event, metadata = {}) => {
-					try {
-						emit({
-							requestId,
-							stage: "transport",
-							event,
-							elapsedMs: Math.round(performance.now() - started),
-							stageElapsedMs: Math.round(performance.now() - began),
-							attempt,
-							...sanitizeProviderDiagnosticMetadata({
-								...metadata,
-								transportAttempt: number
-							})
-						});
-					} catch {}
-				};
-				report("start");
-				try {
-					const response = await fetch(...args);
-					report("end", {
-						httpStatus: response.status,
-						upstreamRequestId: response.headers.get("request-id"),
-						retryAfter: response.headers.get("retry-after")
-					});
-					return response;
-				} catch (error) {
-					const err = error;
-					report("failure", { networkCode: [
-						err?.cause?.code,
-						err?.code,
-						err?.name
-					].find((value) => typeof value === "string" && NETWORK_CODES.has(value)) });
-					throw error;
-				}
-			}, fetch);
-		},
-		stage(stage, metadata = {}) {
-			if (!emit || finished) return;
-			if (current) send("end");
-			current = stage;
-			stageStarted = performance.now();
-			if (stage === "dispatch") attempt++;
-			send("start", metadata);
-			if (timer) clearInterval(timer);
-			timer = setInterval(send, 3e4, "waiting");
-			timer.unref?.();
-			if (signal?.aborted) abort();
-		},
-		finish(event, metadata = {}) {
-			if (!emit || finished) return;
-			finished = true;
-			clearInterval(timer);
-			signal?.removeEventListener("abort", abort);
-			if (current) {
-				send("end");
-				send(event, metadata);
-			}
-		}
-	};
-	abort = () => tracker.finish("abort");
-	if (emit) signal?.addEventListener("abort", abort, { once: true });
-	return tracker;
-}
-//#endregion
-//#region src/providers/anthropic.ts
+//#region src/providers/anthropic-client.ts
 const loadAnthropicSdk = lazyAsync(async () => {
 	try {
 		return (await import("@anthropic-ai/sdk")).default;
@@ -664,76 +484,33 @@ const OAUTH_DEFAULT_BETAS = CLAUDE_CODE_BETAS;
 * See: https://platform.claude.com/docs/en/build-with-claude/fast-mode
 */
 const FAST_MODE_BETA = "fast-mode-2026-02-01";
-/** Gates `thinking.block_binding` and the `input_transformations` response field. */
-const THINKING_BINDING_BETA = "thinking-binding-controls-2026-08-01";
-const THINKING_BINDING_BEHAVIORS = /* @__PURE__ */ new Set([
-	"drop_block",
-	"error",
-	"off"
+const API_KEY_RESERVED_EXTRA_HEADER_NAMES = /* @__PURE__ */ new Set(["anthropic-beta"]);
+const OAUTH_RESERVED_EXTRA_HEADER_NAMES = /* @__PURE__ */ new Set([
+	"accept",
+	"anthropic-beta",
+	"anthropic-client-platform",
+	"anthropic-client-version",
+	"x-stainless-arch",
+	"x-stainless-lang",
+	"x-stainless-os",
+	"x-stainless-package-version",
+	"x-stainless-retry-count",
+	"x-stainless-runtime",
+	"x-stainless-runtime-version",
+	"x-stainless-timeout",
+	"anthropic-dangerous-direct-browser-access",
+	"user-agent",
+	"x-app"
 ]);
+function filterReservedExtraHeaders(extraHeaders, reservedNames) {
+	const out = {};
+	for (const [name, value] of Object.entries(extraHeaders ?? {})) if (!reservedNames.has(name.toLowerCase())) out[name] = value;
+	return out;
+}
 /**
-* Env channel the chat host writes the user's `thinkingBinding` SETTING to.
-* Distinct from `ZIDANE_THINKING_BINDING` (the shell override) so the two
-* never read each other back: a host recreated in-process must not mistake
-* an earlier host's setting write for a shell value.
-*/
-const THINKING_BINDING_SETTING_ENV = "ZIDANE_THINKING_BINDING_SETTING";
-/**
-* Effective {@link AnthropicParams.thinkingBinding}: the explicit param wins,
-* then the shell's `ZIDANE_THINKING_BINDING`, then the chat host's setting
-* channel ({@link THINKING_BINDING_SETTING_ENV}), then `'drop_block'`. Read
-* per request so a flip lands on the next call without rebuilding the
-* provider (the factory is no-arg in the chat host). Unrecognized values are
-* ignored at each level.
-*/
-function resolveThinkingBinding(param, env = process.env) {
-	if (param !== void 0) return param;
-	for (const key of ["ZIDANE_THINKING_BINDING", THINKING_BINDING_SETTING_ENV]) {
-		const value = env[key]?.trim();
-		if (value && THINKING_BINDING_BEHAVIORS.has(value)) return value;
-	}
-	return "drop_block";
-}
-/**
-* The 400 the API returns under `prefix_mismatch_behavior: "error"` for a
-* replayed block whose prefix changed. Distinct from a corrupt/tampered
-* signature: this one names the binding and the remedy.
-*/
-function isPrefixMismatchError(err) {
-	return /bound to a different conversation|prefix_mismatch_behavior/i.test(errorText(err));
-}
-function isInputTransformation(value) {
-	if (typeof value !== "object" || value === null) return false;
-	const v = value;
-	return typeof v.type === "string" && typeof v.path === "string" && typeof v.reason === "string";
-}
-const API_KEY_RESERVED_EXTRA_HEADER_NAMES = /* @__PURE__ */ new Set(["anthropic-beta"]);
-const OAUTH_RESERVED_EXTRA_HEADER_NAMES = /* @__PURE__ */ new Set([
-	"accept",
-	"anthropic-beta",
-	"anthropic-client-platform",
-	"anthropic-client-version",
-	"x-stainless-arch",
-	"x-stainless-lang",
-	"x-stainless-os",
-	"x-stainless-package-version",
-	"x-stainless-retry-count",
-	"x-stainless-runtime",
-	"x-stainless-runtime-version",
-	"x-stainless-timeout",
-	"anthropic-dangerous-direct-browser-access",
-	"user-agent",
-	"x-app"
-]);
-function filterReservedExtraHeaders(extraHeaders, reservedNames) {
-	const out = {};
-	for (const [name, value] of Object.entries(extraHeaders ?? {})) if (!reservedNames.has(name.toLowerCase())) out[name] = value;
-	return out;
-}
-/**
-* Build the `anthropic-beta` header value — OAuth defaults plus caller-supplied
-* extras, de-duped while preserving order. Returns `undefined` when no betas
-* apply (non-OAuth, no extras).
+* Build the `anthropic-beta` header value — OAuth defaults plus caller-supplied
+* extras, de-duped while preserving order. Returns `undefined` when no betas
+* apply (non-OAuth, no extras).
 */
 function resolveAnthropicBetas(isOAuth, extraBetas) {
 	const seen = /* @__PURE__ */ new Set();
@@ -863,424 +640,84 @@ function createClient(SDK, apiKey, auth, baseURL, extraBetas, extraHeaders, wrap
 	if (wrapFetch) options.fetch = wrapFetch(options.fetch ?? globalThis.fetch);
 	return new SDK(options);
 }
+//#endregion
+//#region src/providers/anthropic-errors.ts
 /**
-* Map `ThinkingLevel` budgeted tiers to Anthropic's `output_config.effort`
-* enum. `minimal` collapses to `low` (the closest equivalent — Anthropic does
-* not have a sub-`low` tier).
-*/
-/**
-* Explicit thinking budgets for Bedrock, per effort tier. Bedrock's
-* anthropic-native path only accepts the legacy
-* `thinking: { type: 'enabled', budget_tokens }` shape (the 4.6 surface —
-* `output_config.effort`, adaptive, `display` — is rejected by its
-* translation layer), so effort tiers degrade to token budgets. Floor is
-* Anthropic's 1024 minimum; ceilings stay well under haiku/sonnet output
-* caps — the request builder clamps against the model ceiling regardless.
-*/
-/**
-* Output tokens reserved for the visible response when an explicit thinking
-* budget must be shrunk to fit under the model's `max_tokens` ceiling — see
-* the budget clamp in `stream()`.
-*/
-const THINKING_RESPONSE_RESERVE_TOKENS = 1024;
-const BEDROCK_THINKING_BUDGETS = {
-	low: 4096,
-	medium: 12288,
-	high: 24576,
-	xhigh: 32768,
-	max: 32768
-};
-const EFFORT_FOR_LEVEL = {
-	minimal: "low",
-	low: "low",
-	medium: "medium",
-	high: "high",
-	xhigh: "xhigh",
-	max: "max"
-};
-/**
-* Decide how to translate a `ThinkingLevel` into Anthropic's request shape.
-* Pure / synchronous — exported so tests can assert routing without standing
-* up the SDK.
+* Duck-type check for an Anthropic SDK `APIError` — avoids a runtime dependency
+* on `@anthropic-ai/sdk` so `classifyError` stays usable even when the optional
+* peer dep isn't loaded (e.g. host code calling it on an unrelated provider's
+* error).
 *
-* Routing rules:
-* - `'off'` → `null` (no thinking field, no effort hint).
-* - `'adaptive'` → adaptive thinking with no effort hint (model decides
-*   everything). When `taskBudget` is set, it is carried as
-*   `taskBudgetTokens` and emitted as `output_config.task_budget` — the
-*   native whole-task thinking cap. LEGACY: when `customBudget` is set, it
-*   is carried as `maxTokensCap` so the request builder caps `max_tokens`
-*   accordingly — this clamps the whole response envelope (text and
-*   tool-call JSON included), which is the wrong knob for bounding thinking
-*   now that `taskBudget` exists; kept only for callers who already depend
-*   on it. Prefer `taskBudget`.
-* - Budgeted levels → adaptive thinking with an `effort` hint (plus
-*   `taskBudgetTokens` when `taskBudget` is set), unless `customBudget` is
-*   provided.
-* - Any level + `customBudget` → explicit-budget `enabled` path, carrying
-*   the level's `effort` hint alongside the budget. The caller has opted
-*   into precise budget control and accepts the Anthropic deprecation
-*   warning that comes with it on opus 4.6+. `'adaptive'` is the sole
-*   exception: it never falls back to enabled, since adaptive is the
-*   current Anthropic API surface for self-budgeted thinking. `taskBudget`
-*   is adaptive-only and ignored on this path.
-* - `effortHint: false` (default `true`) strips the `effort` hint from
-*   every shape — budgeted levels plan plain adaptive and the
-*   `customBudget` path plans `enabled` with no `output_config.effort` —
-*   for Anthropic models that reject the effort field.
+* Anthropic's APIError shape: `.status: number` + `.error` (parsed body, object
+* or null). Plain `Error`s don't have `.status` + `.error`.
 */
-function planAnthropicThinking(level, customBudget, taskBudget, effortHint = true) {
-	if (level === "off") return null;
-	const taskBudgetTokens = typeof taskBudget === "number" && taskBudget > 0 ? taskBudget : void 0;
-	if (level === "adaptive") return {
-		kind: "adaptive",
-		...typeof customBudget === "number" && customBudget > 0 ? { maxTokensCap: customBudget } : {},
-		...taskBudgetTokens !== void 0 ? { taskBudgetTokens } : {}
-	};
-	if (customBudget !== void 0) return {
-		kind: "enabled",
-		budgetTokens: customBudget,
-		maxTokensBump: customBudget,
-		...effortHint ? { effort: EFFORT_FOR_LEVEL[level] } : {}
-	};
-	return {
-		kind: "adaptive",
-		...effortHint ? { effort: EFFORT_FOR_LEVEL[level] } : {},
-		...taskBudgetTokens !== void 0 ? { taskBudgetTokens } : {}
-	};
+function looksLikeAnthropicApiError(err) {
+	if (!err || typeof err !== "object") return false;
+	const e = err;
+	return typeof e.status === "number" && "error" in e;
 }
 /**
-* Map Anthropic's native `stop_reason` to the zidane `TurnFinishReason` union.
+* Anthropic SSE `error` event types that warrant a retry. `overloaded_error`
+* is the headline case (capacity event mid-stream); `api_error` and
+* `timeout_error` are both server-side transient failures. `invalid_request_error`,
+* `authentication_error`, `permission_error`, `not_found_error`, `billing_error`
+* are terminal — retrying them would just hammer a bad request.
 *
-* `pause_turn` and `model_context_window_exceeded` are 4.6+ stop reasons that
-* pre-Z21 collapsed to `'other'` and silently terminated the run. They now
-* map to `'pause'` and `'length'` respectively, and the surrounding caller
-* adjusts the `done` flag so the loop can recover.
-*/
-function mapStopReason(stopReason) {
-	if (!stopReason) return void 0;
-	switch (stopReason) {
-		case "end_turn":
-		case "stop_sequence": return "stop";
-		case "tool_use": return "tool-calls";
-		case "max_tokens":
-		case "model_context_window_exceeded": return "length";
-		case "refusal": return "content-filter";
-		case "pause_turn": return "pause";
-		default: return "other";
-	}
-}
-/**
-* Conservative per-family output ceiling, used ONLY as a fallback when pi-ai's
-* model registry doesn't know the model (or pi-ai is externalized) — see
-* {@link resolveAnthropicMaxOutput}, which is the primary path. These are
-* non-beta floors we can always send without a 400; the registry reports the
-* real (often much higher, e.g. Opus 4.x = 128K native) max when available.
+* `rate_limit_error` here would be redundant: the SDK's pre-stream retry
+* handles 429, and a mid-stream `rate_limit_error` is exceedingly rare. We
+* include it anyway for symmetry with the HTTP-level retry policy.
 */
-function defaultAnthropicMaxTokens(modelId) {
-	const id = modelId.toLowerCase();
-	if (id.includes("haiku")) return 8192;
-	if (id.includes("sonnet")) return 64e3;
-	return 32e3;
-}
+const SSE_RETRYABLE_ERROR_TYPES = /* @__PURE__ */ new Set([
+	"overloaded_error",
+	"api_error",
+	"timeout_error",
+	"rate_limit_error"
+]);
 /**
-* Lazily-loaded pi-ai model-registry getter (cached; keeps the multi-MB
-* registry out of the static bundle, mirroring `cost.ts`). Returns `null` when
-* pi-ai is externalized, in which case callers fall back to the family map.
+* Try to parse an Anthropic SSE `error` event payload out of a thrown error's
+* message. The SDK's `MessageStream` surfaces mid-stream error events by
+* throwing an `AnthropicError` whose `.message` contains the raw JSON shape:
+*
+*     {"type":"error","error":{"type":"overloaded_error","message":"Overloaded"},"request_id":"req_..."}
+*
+* Returns the inner `{ type, message }` or `null` when the message isn't
+* the canonical SSE error shape. Tolerant: silently returns `null` for
+* non-string input, non-JSON content, or any shape mismatch.
 */
-const loadPiModelGetter = lazyAsync(async () => {
+function matchSseErrorEvent(message) {
+	if (typeof message !== "string" || message.length === 0) return null;
+	if (!message.includes("\"type\":\"error\"") && !message.includes("\"type\": \"error\"")) return null;
+	const start = message.indexOf("{");
+	if (start < 0) return null;
 	try {
-		return (await import("@earendil-works/pi-ai/providers/all")).getBuiltinModel;
+		const parsed = JSON.parse(message.slice(start));
+		if (!parsed || typeof parsed !== "object") return null;
+		const outer = parsed;
+		if (outer.type !== "error" || !outer.error || typeof outer.error !== "object") return null;
+		const inner = outer.error;
+		if (typeof inner.type !== "string") return null;
+		return {
+			type: inner.type,
+			message: typeof inner.message === "string" ? inner.message : inner.type
+		};
 	} catch {
 		return null;
 	}
-});
+}
 /**
-* Resolve a model's max output tokens. Prefers pi-ai's bundled registry — the
-* authoritative source the SDK itself uses to build requests, so e.g. Opus 4.x
-* reports its full native 128K (no extended-output beta required) — and falls
-* back to {@link defaultAnthropicMaxTokens} only when the registry lacks the
-* model. Used as BOTH the default (when the caller leaves `maxTokens` unset)
-* and a hard clamp, since a `max_tokens` above the model's max would 400.
+* Classify an Anthropic SDK / HTTP error for typed-error wrapping.
 *
-* The clamp is only as good as the ceiling's provenance, so an explicit caller
-* `maxTokens` can RAISE the fallback: models the registry doesn't know are
-* mostly ids that never appear in pi-ai's anthropic registry — Bedrock ids
-* (`global.anthropic.claude-*`) and non-Anthropic models served over the
-* Anthropic wire (`openai.gpt-*` on Bedrock, gateway aliases). For the
-* latter the fallback degrades to the 32000 catch-all; for the former the
-* family match yields a deliberately conservative non-beta floor. Clamping a
-* caller who knows the real ceiling down to either silently truncates long
-* generations mid-write (observed as turns pinned at exactly 32000 tokens).
-*
-* It can only raise, never lower: the caller's `maxTokens` is a cap on the
-* VISIBLE response, already enforced as `max_tokens` itself, whereas this
-* value is the model's physical ceiling. Letting it lower the ceiling would
-* break the `enabled` thinking path's invariant that the budget sits ON TOP
-* of the response cap — the budget would be shrunk to share the caller's cap,
-* or dropped entirely once no satisfiable budget fits.
-*
-* A registry-backed max always wins over the caller — above it the provider
-* 400s. A CATALOG entry (`behavior.modelCatalog` / `setModelCatalog`) outranks
-* even that: it's an explicit claim about a model whose registry entry may be
-* absent, stale, or an alias for something else entirely.
-*/
-async function resolveAnthropicMaxOutput(modelId, explicitMaxTokens, catalog) {
-	const override = lookupModel("anthropic", modelId, catalog)?.maxTokens;
-	if (typeof override === "number" && override > 0) return override;
-	const registryMax = (await loadPiModelGetter())?.("anthropic", modelId)?.maxTokens;
-	if (typeof registryMax === "number" && registryMax > 0) return registryMax;
-	const fallback = defaultAnthropicMaxTokens(modelId);
-	return typeof explicitMaxTokens === "number" && explicitMaxTokens > 0 ? Math.max(fallback, explicitMaxTokens) : fallback;
-}
-/**
-* Anthropic bills a 1h-TTL cache write at 2× base input against 1.25× for the
-* default 5m TTL, but `cache_creation_input_tokens` (what `TurnUsage.
-* cacheCreation` carries) is the SUM of both buckets. Registry `cacheWrite`
-* rates are the 5m rate, so a turn that wrote under `ttl: '1h'` needs its
-* write component scaled by `(5m·1.25 + 1h·2) / (total·1.25)`. `1` when the
-* response carries no split (Bedrock, older API versions) or no 1h writes.
-*/
-const CACHE_WRITE_1H_OVER_5M = 2 / 1.25;
-function cacheWriteTtlMultiplier(usage) {
-	const split = usage.cache_creation;
-	const oneHour = split?.ephemeral_1h_input_tokens ?? 0;
-	if (oneHour <= 0) return 1;
-	const fiveMin = split?.ephemeral_5m_input_tokens ?? 0;
-	const total = usage.cache_creation_input_tokens ?? fiveMin + oneHour;
-	if (total <= 0) return 1;
-	return (fiveMin + oneHour * CACHE_WRITE_1H_OVER_5M) / total;
-}
-/** Per-rate product of two multipliers; a missing key on either side is `1`. */
-function composeCostMultipliers(a, b) {
-	if (!a) return b;
-	if (!b) return a;
-	return {
-		input: (a.input ?? 1) * (b.input ?? 1),
-		output: (a.output ?? 1) * (b.output ?? 1),
-		cacheRead: (a.cacheRead ?? 1) * (b.cacheRead ?? 1),
-		cacheWrite: (a.cacheWrite ?? 1) * (b.cacheWrite ?? 1)
-	};
-}
-/**
-* Price an API-key (non-OAuth) turn.
-*
-* - Bedrock traffic is looked up under pi-ai's `amazon-bedrock` registry: the
-*   echoed ids (`global.anthropic.claude-…`, `eu.anthropic.…`) never appear
-*   under `anthropic`, and Bedrock's regional uplifts only exist there.
-* - The API may echo a dated snapshot for an alias request (`claude-haiku-4-5`
-*   → `claude-haiku-4-5-20251001`). Rates and the fast-mode multiplier are
-*   resolved by the echoed id first, then by the REQUESTED id, so a snapshot
-*   the registry doesn't list yet is still priced (and a fast-mode Opus turn
-*   keeps its 2× instead of silently billing at base). The echoed id stays on
-*   the record — only the price falls back.
-* - 1h cache writes are scaled to their real rate (see
-*   {@link cacheWriteTtlMultiplier}); fast mode composes on top.
-*/
-async function priceAnthropicUsage(raw, response, requestedModelId, fastRequested, bedrock, catalog) {
-	const providerKey = bedrock ? "amazon-bedrock" : "anthropic";
-	const echoedModelId = raw.modelId ?? requestedModelId;
-	const fast = fastRequested ? fastModeCostMultiplier(echoedModelId) ?? fastModeCostMultiplier(requestedModelId) : void 0;
-	const ttl = cacheWriteTtlMultiplier(response.usage);
-	const multiplier = composeCostMultipliers(fast, ttl === 1 ? void 0 : { cacheWrite: ttl });
-	const priced = await fillEstimatedCost(raw, providerKey, multiplier, catalog);
-	if (priced.cost !== void 0 || echoedModelId === requestedModelId) return priced;
-	const byRequested = await fillEstimatedCost({
-		...raw,
-		modelId: requestedModelId
-	}, providerKey, multiplier, catalog);
-	return byRequested.cost !== void 0 ? {
-		...raw,
-		cost: byRequested.cost
-	} : raw;
-}
-const EPHEMERAL = { type: "ephemeral" };
-/**
-* `cache_control` for the requested TTL. `'5m'` stays the bare ephemeral shape
-* (no `ttl` field) so default-TTL requests are byte-identical to what every
-* zidane version has ever sent — adding `ttl: '5m'` would be semantically
-* equal but is gratuitous churn against proxies that pattern-match the body.
-* `'1h'` also requires the `extended-cache-ttl-2025-04-11` beta header, which
-* the request path adds — see {@link EXTENDED_CACHE_TTL_BETA}.
-*/
-function cacheControlFor(ttl) {
-	return ttl === "1h" ? {
-		type: "ephemeral",
-		ttl: "1h"
-	} : EPHEMERAL;
-}
-/** Beta flag Anthropic requires before it honors `ttl: '1h'` on `cache_control`. */
-const EXTENDED_CACHE_TTL_BETA = "extended-cache-ttl-2025-04-11";
-/**
-* Mutate an Anthropic request in place to add cache breakpoints on the three
-* stable prefixes:
-*  1. System prompt — `cache_control` on the static prefix only (see below).
-*  2. Tool definitions — last tool.
-*  3. Conversation — last content block of the last message.
-*
-* Each breakpoint tells Anthropic to cache the prefix ending at that block;
-* subsequent turns reuse the cached prefix and pay only for the delta. Safe
-* no-op when any prefix is empty (no tools, empty system, etc.).
-*
-* System-prompt boundary handling (`SYSTEM_PROMPT_BOUNDARY`):
-*
-* - When `originalSystem` is provided AND carries the marker, the system
-*   block is rewritten as a 2-block array: static (cached) then dynamic
-*   (uncached). The caller is expected to have already stripped the marker
-*   from `params.system` via {@link renderSystemForWire} — this helper
-*   only re-splits to apply `cache_control` cleanly.
-* - When `originalSystem` is omitted or marker-free, the existing single-
-*   block treatment applies: `cache_control` on the whole system string.
-* - Array system prompts: existing semantics — `cache_control` lands on the
-*   last block. Callers building their own multi-block layout own the
-*   breakpoint placement.
-*/
-function applyAnthropicCacheBreakpoints(params, originalSystem, ttl) {
-	const cacheControl = cacheControlFor(ttl);
-	if (typeof params.system === "string") {
-		if (params.system.length > 0) {
-			const parts = splitSystemPrompt(originalSystem && originalSystem.length > 0 ? originalSystem : params.system);
-			if (parts.dynamic.length > 0) {
-				const blocks = [];
-				if (parts.static.length > 0) blocks.push({
-					type: "text",
-					text: parts.static,
-					cache_control: cacheControl
-				});
-				blocks.push({
-					type: "text",
-					text: parts.dynamic
-				});
-				params.system = blocks;
-			} else params.system = [{
-				type: "text",
-				text: parts.static,
-				cache_control: cacheControl
-			}];
-		}
-	} else if (Array.isArray(params.system) && params.system.length > 0) {
-		const lastIdx = params.system.length - 1;
-		params.system = params.system.map((block, i) => i === lastIdx ? {
-			...block,
-			cache_control: cacheControl
-		} : block);
-	}
-	if (params.tools && params.tools.length > 0) {
-		const lastIdx = params.tools.length - 1;
-		params.tools = params.tools.map((tool, i) => i === lastIdx ? {
-			...tool,
-			cache_control: cacheControl
-		} : tool);
-	}
-	if (params.messages.length === 0) return;
-	const lastMsgIdx = params.messages.length - 1;
-	const lastMsg = params.messages[lastMsgIdx];
-	if (typeof lastMsg.content === "string") {
-		if (lastMsg.content.length === 0) return;
-		params.messages[lastMsgIdx] = {
-			...lastMsg,
-			content: [{
-				type: "text",
-				text: lastMsg.content,
-				cache_control: cacheControl
-			}]
-		};
-		return;
-	}
-	if (!Array.isArray(lastMsg.content) || lastMsg.content.length === 0) return;
-	const blocks = lastMsg.content;
-	let targetIdx = blocks.length - 1;
-	while (targetIdx >= 0 && isThinkingBlock(blocks[targetIdx])) targetIdx -= 1;
-	if (targetIdx < 0) return;
-	const nextBlocks = blocks.slice();
-	nextBlocks[targetIdx] = {
-		...nextBlocks[targetIdx],
-		cache_control: cacheControl
-	};
-	params.messages[lastMsgIdx] = {
-		...lastMsg,
-		content: nextBlocks
-	};
-}
-function isThinkingBlock(block) {
-	return block.type === "thinking" || block.type === "redacted_thinking";
-}
-/**
-* Duck-type check for an Anthropic SDK `APIError` — avoids a runtime dependency
-* on `@anthropic-ai/sdk` so `classifyError` stays usable even when the optional
-* peer dep isn't loaded (e.g. host code calling it on an unrelated provider's
-* error).
-*
-* Anthropic's APIError shape: `.status: number` + `.error` (parsed body, object
-* or null). Plain `Error`s don't have `.status` + `.error`.
-*/
-function looksLikeAnthropicApiError(err) {
-	if (!err || typeof err !== "object") return false;
-	const e = err;
-	return typeof e.status === "number" && "error" in e;
-}
-/**
-* Anthropic SSE `error` event types that warrant a retry. `overloaded_error`
-* is the headline case (capacity event mid-stream); `api_error` and
-* `timeout_error` are both server-side transient failures. `invalid_request_error`,
-* `authentication_error`, `permission_error`, `not_found_error`, `billing_error`
-* are terminal — retrying them would just hammer a bad request.
-*
-* `rate_limit_error` here would be redundant: the SDK's pre-stream retry
-* handles 429, and a mid-stream `rate_limit_error` is exceedingly rare. We
-* include it anyway for symmetry with the HTTP-level retry policy.
-*/
-const SSE_RETRYABLE_ERROR_TYPES = /* @__PURE__ */ new Set([
-	"overloaded_error",
-	"api_error",
-	"timeout_error",
-	"rate_limit_error"
-]);
-/**
-* Try to parse an Anthropic SSE `error` event payload out of a thrown error's
-* message. The SDK's `MessageStream` surfaces mid-stream error events by
-* throwing an `AnthropicError` whose `.message` contains the raw JSON shape:
-*
-*     {"type":"error","error":{"type":"overloaded_error","message":"Overloaded"},"request_id":"req_..."}
-*
-* Returns the inner `{ type, message }` or `null` when the message isn't
-* the canonical SSE error shape. Tolerant: silently returns `null` for
-* non-string input, non-JSON content, or any shape mismatch.
-*/
-function matchSseErrorEvent(message) {
-	if (typeof message !== "string" || message.length === 0) return null;
-	if (!message.includes("\"type\":\"error\"") && !message.includes("\"type\": \"error\"")) return null;
-	const start = message.indexOf("{");
-	if (start < 0) return null;
-	try {
-		const parsed = JSON.parse(message.slice(start));
-		if (!parsed || typeof parsed !== "object") return null;
-		const outer = parsed;
-		if (outer.type !== "error" || !outer.error || typeof outer.error !== "object") return null;
-		const inner = outer.error;
-		if (typeof inner.type !== "string") return null;
-		return {
-			type: inner.type,
-			message: typeof inner.message === "string" ? inner.message : inner.type
-		};
-	} catch {
-		return null;
-	}
-}
-/**
-* Classify an Anthropic SDK / HTTP error for typed-error wrapping.
-*
-* - `prompt is too long` (400 invalid_request_error) → `context_exceeded`.
-* - `'tool_use' ids were found without 'tool_result' blocks` /
-*   `'tool_result must be preceded by a tool_call'` (400) →
-*   `tool_pairing_corruption`. The local repair pass should have caught
-*   this — the typed error tells consumers their pre-send pipeline is
-*   shipping orphaned blocks somehow (custom `context:transform` hook,
-*   bypassed loop, mid-stream session edit) so they can patch the root
-*   cause instead of chasing 400s.
-* - Any other Anthropic `APIError`-shaped value → `provider_error` with the
-*   native status/type code.
-* - Unknown errors → `null` (loop wraps in `AgentProviderError` generically).
+* - `prompt is too long` (400 invalid_request_error) → `context_exceeded`.
+* - `'tool_use' ids were found without 'tool_result' blocks` /
+*   `'tool_result must be preceded by a tool_call'` (400) →
+*   `tool_pairing_corruption`. The local repair pass should have caught
+*   this — the typed error tells consumers their pre-send pipeline is
+*   shipping orphaned blocks somehow (custom `context:transform` hook,
+*   bypassed loop, mid-stream session edit) so they can patch the root
+*   cause instead of chasing 400s.
+* - Any other Anthropic `APIError`-shaped value → `provider_error` with the
+*   native status/type code.
+* - Unknown errors → `null` (loop wraps in `AgentProviderError` generically).
 *
 * Anthropic's wire error shape is `{ type: 'error', error: { type, message } }` — the
 * SDK stores the parsed body on `err.error`. We walk both levels so callers see the
@@ -1344,7 +781,15 @@ function shouldFallbackFromFastMode(err) {
 	return /\b(?:fast|speed)\b/i.test(message) && /capacity|overload|rate|unavailable|unsupported|not supported|not permitted|extra inputs|invalid/i.test(message);
 }
 /**
-* Anthropic signs thinking blocks so they can be echoed through tool-use
+* The 400 the API returns under `prefix_mismatch_behavior: "error"` for a
+* replayed block whose prefix changed. Distinct from a corrupt/tampered
+* signature: this one names the binding and the remedy.
+*/
+function isPrefixMismatchError(err) {
+	return /bound to a different conversation|prefix_mismatch_behavior/i.test(errorText(err));
+}
+/**
+* Anthropic signs thinking blocks so they can be echoed through tool-use
 * chains without exposing raw reasoning. A signature can become
 * unverifiable after a model/route/account switch, a legacy session edit,
 * or a provider-side signing-key rotation. We cannot validate the opaque
@@ -1442,24 +887,6 @@ function parseFailingMessageIndex(err) {
 	return Number.isSafeInteger(index) ? index : void 0;
 }
 /**
-* Hard cap on signature-400 scrub retries within one `stream()` call. Two
-* passes resolve every real-world shape (bounded pass, then the
-* everything-but-active-chain pass); the third is margin. Beyond that the
-* error is not signature poisoning and must surface.
-*/
-const MAX_THINKING_SCRUB_PASSES = 3;
-/**
-* Models observed rejecting forced tool use, so later calls skip straight to
-* the downgraded shape instead of paying the failing round-trip every time.
-*
-* Learned, not declared: Claude Fable 5.1 is the first model where
-* `tool_choice` of `tool` / `any` returns 400, and a catalog flag would need
-* upkeep for every successor that follows suit. Process-wide and keyed by
-* model id only — whether a model accepts forcing is a property of the model,
-* not of the endpoint or credential serving it.
-*/
-const MODELS_REJECTING_FORCED_TOOL_CHOICE = /* @__PURE__ */ new Set();
-/**
 * True for the 400 Anthropic returns when a model does not support forcing a
 * tool: `tool_choice: type "tool" and "any" are not supported for this model.`
 * Anchored on the status/type gate plus the field name and the "not supported
@@ -1493,174 +920,1313 @@ function isThinkingBindingRejectedError(err) {
 	const text = errorText(err);
 	return /block_binding|prefix_mismatch_behavior|thinking-binding-controls/i.test(text) && !/invalid\s+`?signature`?|bound to a different conversation/i.test(text);
 }
-/** The same request with `thinking.block_binding` removed. */
-function withoutThinkingBinding(params) {
-	if (!params.thinking) return params;
-	const { block_binding: _dropped, ...thinking } = params.thinking;
-	return {
-		...params,
-		thinking
+/**
+* True for the 400 Anthropic returns when a model does not support the manual
+* extended-thinking shape: `"thinking.type.enabled" is not supported for this
+* model. Use "thinking.type.adaptive" and "output_config.effort" ...`. Anchored
+* on the validation-400 gate plus the dotted field name and the "not supported
+* for this model" tail, so a reworded middle still matches while an unrelated
+* `thinking` validation error (bad budget, wrong type) does not. Only the
+* `enabled` variant is matched: zidane omits the field for the `'off'` level
+* (adaptive on these models) and never emits `thinking.type.disabled`.
+*/
+function isEnabledThinkingUnsupportedError(err) {
+	return isRequestValidationError(err) && /\bthinking\.type\.enabled\b[^.]+not supported for this model\b/i.test(errorText(err));
+}
+//#endregion
+//#region src/providers/anthropic-cache.ts
+const EPHEMERAL = { type: "ephemeral" };
+/**
+* `cache_control` for the requested TTL. `'5m'` stays the bare ephemeral shape
+* (no `ttl` field) so default-TTL requests are byte-identical to what every
+* zidane version has ever sent — adding `ttl: '5m'` would be semantically
+* equal but is gratuitous churn against proxies that pattern-match the body.
+* `'1h'` also requires the `extended-cache-ttl-2025-04-11` beta header, which
+* the request path adds — see {@link EXTENDED_CACHE_TTL_BETA}.
+*/
+function cacheControlFor(ttl) {
+	return ttl === "1h" ? {
+		type: "ephemeral",
+		ttl: "1h"
+	} : EPHEMERAL;
+}
+/** Beta flag Anthropic requires before it honors `ttl: '1h'` on `cache_control`. */
+const EXTENDED_CACHE_TTL_BETA = "extended-cache-ttl-2025-04-11";
+/** Anthropic's per-request limit on `cache_control` markers. */
+const MAX_CACHE_BREAKPOINTS = 4;
+/**
+* Mutate an Anthropic request in place to add cache breakpoints on the three
+* stable prefixes:
+*  1. System prompt — `cache_control` on the static prefix only (see below).
+*  2. Tool definitions — last tool.
+*  3. Conversation — last content block of the last message.
+*
+* Each breakpoint tells Anthropic to cache the prefix ending at that block;
+* subsequent turns reuse the cached prefix and pay only for the delta. Safe
+* no-op when any prefix is empty (no tools, empty system, etc.).
+*
+* System-prompt boundary handling (`SYSTEM_PROMPT_BOUNDARY`):
+*
+* - When `originalSystem` is provided AND carries the marker, the system
+*   block is rewritten as a 2-block array: static (cached) then dynamic
+*   (uncached). The caller is expected to have already stripped the marker
+*   from `params.system` via {@link renderSystemForWire} — this helper
+*   only re-splits to apply `cache_control` cleanly.
+* - When `originalSystem` is omitted or marker-free, the existing single-
+*   block treatment applies: `cache_control` on the whole system string.
+* - Array system prompts: existing semantics — `cache_control` lands on the
+*   last block. Callers building their own multi-block layout own the
+*   breakpoint placement.
+*/
+function applyAnthropicCacheBreakpoints(params, originalSystem, ttl) {
+	const cacheControl = cacheControlFor(ttl);
+	if (typeof params.system === "string") {
+		if (params.system.length > 0) {
+			const splitSource = originalSystem && originalSystem.length > 0 ? originalSystem : params.system;
+			const parts = splitSystemPrompt(splitSource);
+			if (parts.dynamic.length > 0) {
+				const blocks = [];
+				if (parts.static.length > 0) blocks.push({
+					type: "text",
+					text: parts.static,
+					cache_control: cacheControl
+				});
+				blocks.push({
+					type: "text",
+					text: parts.dynamic
+				});
+				params.system = blocks;
+			} else params.system = [{
+				type: "text",
+				text: parts.static,
+				cache_control: cacheControl
+			}];
+		}
+	} else if (Array.isArray(params.system) && params.system.length > 0) {
+		const lastIdx = params.system.length - 1;
+		params.system = params.system.map((block, i) => i === lastIdx ? {
+			...block,
+			cache_control: cacheControl
+		} : block);
+	}
+	if (params.tools && params.tools.length > 0) {
+		const lastIdx = params.tools.length - 1;
+		params.tools = params.tools.map((tool, i) => i === lastIdx ? {
+			...tool,
+			cache_control: cacheControl
+		} : tool);
+	}
+	if (params.messages.length === 0) return;
+	const lastMsgIdx = params.messages.length - 1;
+	markMessageBreakpoint(params.messages, lastMsgIdx, cacheControl);
+	if (countCacheBreakpoints(params) >= MAX_CACHE_BREAKPOINTS) return;
+	for (let i = lastMsgIdx - 1; i >= 0; i--) {
+		if (params.messages[i].role !== "user") continue;
+		if (i < lastMsgIdx - 1) markMessageBreakpoint(params.messages, i, cacheControl);
+		break;
+	}
+}
+/** Put `cache_control` on the last cache-eligible block of `messages[idx]`. */
+function markMessageBreakpoint(messages, idx, cacheControl) {
+	const msg = messages[idx];
+	if (typeof msg.content === "string") {
+		if (msg.content.length === 0) return;
+		messages[idx] = {
+			...msg,
+			content: [{
+				type: "text",
+				text: msg.content,
+				cache_control: cacheControl
+			}]
+		};
+		return;
+	}
+	if (!Array.isArray(msg.content) || msg.content.length === 0) return;
+	const blocks = msg.content;
+	let targetIdx = blocks.length - 1;
+	while (targetIdx >= 0 && isThinkingBlock(blocks[targetIdx])) targetIdx -= 1;
+	if (targetIdx < 0) return;
+	const nextBlocks = blocks.slice();
+	nextBlocks[targetIdx] = {
+		...nextBlocks[targetIdx],
+		cache_control: cacheControl
+	};
+	messages[idx] = {
+		...msg,
+		content: nextBlocks
+	};
+}
+function hasCacheControl(value) {
+	return typeof value === "object" && value !== null && value.cache_control != null;
+}
+function countCacheBreakpoints(params) {
+	let count = 0;
+	if (Array.isArray(params.system)) {
+		for (const block of params.system) if (hasCacheControl(block)) count++;
+	}
+	for (const tool of params.tools ?? []) if (hasCacheControl(tool)) count++;
+	for (const msg of params.messages) {
+		if (!Array.isArray(msg.content)) continue;
+		for (const block of msg.content) if (hasCacheControl(block)) count++;
+		else if (block.type === "tool_result" && Array.isArray(block.content)) {
+			for (const part of block.content) if (hasCacheControl(part)) count++;
+		}
+	}
+	return count;
+}
+function isThinkingBlock(block) {
+	return block.type === "thinking" || block.type === "redacted_thinking";
+}
+//#endregion
+//#region src/providers/anthropic-thinking.ts
+/** Gates `thinking.block_binding` and the `input_transformations` response field. */
+const THINKING_BINDING_BETA = "thinking-binding-controls-2026-08-01";
+const THINKING_BINDING_BEHAVIORS = /* @__PURE__ */ new Set([
+	"drop_block",
+	"error",
+	"off"
+]);
+/**
+* Env channel the chat host writes the user's `thinkingBinding` SETTING to.
+* Distinct from `ZIDANE_THINKING_BINDING` (the shell override) so the two
+* never read each other back: a host recreated in-process must not mistake
+* an earlier host's setting write for a shell value.
+*/
+const THINKING_BINDING_SETTING_ENV = "ZIDANE_THINKING_BINDING_SETTING";
+/**
+* Effective {@link AnthropicParams.thinkingBinding}: the explicit param wins,
+* then the shell's `ZIDANE_THINKING_BINDING`, then the chat host's setting
+* channel ({@link THINKING_BINDING_SETTING_ENV}), then `'drop_block'`. Read
+* per request so a flip lands on the next call without rebuilding the
+* provider (the factory is no-arg in the chat host). Unrecognized values are
+* ignored at each level.
+*/
+function resolveThinkingBinding(param, env = process.env) {
+	if (param !== void 0) return param;
+	for (const key of ["ZIDANE_THINKING_BINDING", THINKING_BINDING_SETTING_ENV]) {
+		const value = env[key]?.trim();
+		if (value && THINKING_BINDING_BEHAVIORS.has(value)) return value;
+	}
+	return "drop_block";
+}
+/**
+* Output tokens reserved for the visible response when an explicit thinking
+* budget must be shrunk to fit under the model's `max_tokens` ceiling — see
+* the budget clamp in `buildAnthropicStreamRequest` (`./anthropic-request`).
+*/
+const THINKING_RESPONSE_RESERVE_TOKENS = 1024;
+/**
+* Explicit thinking budgets for Bedrock, per effort tier. Bedrock's
+* anthropic-native path only accepts the legacy
+* `thinking: { type: 'enabled', budget_tokens }` shape (the 4.6 surface —
+* `output_config.effort`, adaptive, `display` — is rejected by its
+* translation layer), so effort tiers degrade to token budgets. Floor is
+* Anthropic's 1024 minimum; ceilings stay well under haiku/sonnet output
+* caps — the request builder clamps against the model ceiling regardless.
+*/
+const BEDROCK_THINKING_BUDGETS = {
+	low: 4096,
+	medium: 12288,
+	high: 24576,
+	xhigh: 32768,
+	max: 32768
+};
+/**
+* Map `ThinkingLevel` budgeted tiers to Anthropic's `output_config.effort`
+* enum. `minimal` collapses to `low` (the closest equivalent — Anthropic does
+* not have a sub-`low` tier).
+*/
+const EFFORT_FOR_LEVEL = {
+	minimal: "low",
+	low: "low",
+	medium: "medium",
+	high: "high",
+	xhigh: "xhigh",
+	max: "max"
+};
+/**
+* Decide how to translate a `ThinkingLevel` into Anthropic's request shape.
+* Pure / synchronous — exported so tests can assert routing without standing
+* up the SDK.
+*
+* Routing rules:
+* - `'off'` → `null` (no thinking field, no effort hint).
+* - `'adaptive'` → adaptive thinking with no effort hint (model decides
+*   everything). When `taskBudget` is set, it is carried as
+*   `taskBudgetTokens` and emitted as `output_config.task_budget` — the
+*   native whole-task thinking cap. LEGACY: when `customBudget` is set, it
+*   is carried as `maxTokensCap` so the request builder caps `max_tokens`
+*   accordingly — this clamps the whole response envelope (text and
+*   tool-call JSON included), which is the wrong knob for bounding thinking
+*   now that `taskBudget` exists; kept only for callers who already depend
+*   on it. Prefer `taskBudget`.
+* - Budgeted levels → adaptive thinking with an `effort` hint (plus
+*   `taskBudgetTokens` when `taskBudget` is set), unless `customBudget` is
+*   provided.
+* - Any level + `customBudget` → explicit-budget `enabled` path, carrying
+*   the level's `effort` hint alongside the budget. The caller has opted
+*   into precise budget control and accepts the Anthropic deprecation
+*   warning that comes with it on opus 4.6+. `'adaptive'` is the sole
+*   exception: it never falls back to enabled, since adaptive is the
+*   current Anthropic API surface for self-budgeted thinking. `taskBudget`
+*   is adaptive-only and ignored on this path.
+* - `effortHint: false` (default `true`) strips the `effort` hint from
+*   every shape — budgeted levels plan plain adaptive and the
+*   `customBudget` path plans `enabled` with no `output_config.effort` —
+*   for Anthropic models that reject the effort field.
+*/
+function planAnthropicThinking(level, customBudget, taskBudget, effortHint = true) {
+	if (level === "off") return null;
+	const taskBudgetTokens = typeof taskBudget === "number" && taskBudget > 0 ? taskBudget : void 0;
+	if (level === "adaptive") return {
+		kind: "adaptive",
+		...typeof customBudget === "number" && customBudget > 0 ? { maxTokensCap: customBudget } : {},
+		...taskBudgetTokens !== void 0 ? { taskBudgetTokens } : {}
+	};
+	if (customBudget !== void 0) return {
+		kind: "enabled",
+		budgetTokens: customBudget,
+		maxTokensBump: customBudget,
+		...effortHint ? { effort: EFFORT_FOR_LEVEL[level] } : {}
+	};
+	return {
+		kind: "adaptive",
+		...effortHint ? { effort: EFFORT_FOR_LEVEL[level] } : {},
+		...taskBudgetTokens !== void 0 ? { taskBudgetTokens } : {}
+	};
+}
+//#endregion
+//#region src/providers/anthropic-request.ts
+/**
+* Conservative per-family output ceiling, used ONLY as a fallback when pi-ai's
+* model registry doesn't know the model (or pi-ai is externalized) — see
+* {@link resolveAnthropicMaxOutput}, which is the primary path. These are
+* non-beta floors we can always send without a 400; the registry reports the
+* real (often much higher, e.g. Opus 4.x = 128K native) max when available.
+*/
+function defaultAnthropicMaxTokens(modelId) {
+	const id = modelId.toLowerCase();
+	if (id.includes("haiku")) return 8192;
+	if (id.includes("sonnet")) return 64e3;
+	return 32e3;
+}
+/**
+* Lazily-loaded pi-ai model-registry getter (cached; keeps the multi-MB
+* registry out of the static bundle, mirroring `cost.ts`). Returns `null` when
+* pi-ai is externalized, in which case callers fall back to the family map.
+*/
+const loadPiModelGetter = lazyAsync(async () => {
+	try {
+		return (await import("@earendil-works/pi-ai/providers/all")).getBuiltinModel;
+	} catch {
+		return null;
+	}
+});
+/**
+* Resolve a model's max output tokens. Prefers pi-ai's bundled registry — the
+* authoritative source the SDK itself uses to build requests, so e.g. Opus 4.x
+* reports its full native 128K (no extended-output beta required) — and falls
+* back to {@link defaultAnthropicMaxTokens} only when the registry lacks the
+* model. Used as BOTH the default (when the caller leaves `maxTokens` unset)
+* and a hard clamp, since a `max_tokens` above the model's max would 400.
+*
+* The clamp is only as good as the ceiling's provenance, so an explicit caller
+* `maxTokens` can RAISE the fallback: models the registry doesn't know are
+* mostly ids that never appear in pi-ai's anthropic registry — Bedrock ids
+* (`global.anthropic.claude-*`) and non-Anthropic models served over the
+* Anthropic wire (`openai.gpt-*` on Bedrock, gateway aliases). For the
+* latter the fallback degrades to the 32000 catch-all; for the former the
+* family match yields a deliberately conservative non-beta floor. Clamping a
+* caller who knows the real ceiling down to either silently truncates long
+* generations mid-write (observed as turns pinned at exactly 32000 tokens).
+*
+* It can only raise, never lower: the caller's `maxTokens` is a cap on the
+* VISIBLE response, already enforced as `max_tokens` itself, whereas this
+* value is the model's physical ceiling. Letting it lower the ceiling would
+* break the `enabled` thinking path's invariant that the budget sits ON TOP
+* of the response cap — the budget would be shrunk to share the caller's cap,
+* or dropped entirely once no satisfiable budget fits.
+*
+* A registry-backed max always wins over the caller — above it the provider
+* 400s. A CATALOG entry (`behavior.modelCatalog` / `setModelCatalog`) outranks
+* even that: it's an explicit claim about a model whose registry entry may be
+* absent, stale, or an alias for something else entirely.
+*/
+async function resolveAnthropicMaxOutput(modelId, explicitMaxTokens, catalog) {
+	const override = lookupModel("anthropic", modelId, catalog)?.maxTokens;
+	if (typeof override === "number" && override > 0) return override;
+	const registryMax = (await loadPiModelGetter())?.("anthropic", modelId)?.maxTokens;
+	if (typeof registryMax === "number" && registryMax > 0) return registryMax;
+	const fallback = defaultAnthropicMaxTokens(modelId);
+	return typeof explicitMaxTokens === "number" && explicitMaxTokens > 0 ? Math.max(fallback, explicitMaxTokens) : fallback;
+}
+/**
+* Build the Messages request body for one `stream()` call: system block (and
+* the OAuth persona fold), tool-name boundary, max-output resolution, cache
+* breakpoints, thinking shape, Claude Code alignment, fast mode, tool choice,
+* and the prompt-cache affinity key/header.
+*/
+async function buildAnthropicStreamRequest(input) {
+	const { anthropicParams, bedrockConfig, options, callIsOAuth, effectiveCacheTtl, extendedTtl, plan, thinkingBinding, bindingActive, resolvedExtraHeaders } = input;
+	const { system, messages } = foldSystemForWire(options.system, options.messages, callIsOAuth);
+	const inputTools = options.tools ?? [];
+	const nameBoundary = createToolNameBoundary(messages, inputTools.map((t) => t.name), callIsOAuth ? claudeCodeToolAliases : void 0);
+	const wireTools = nameBoundary.changed ? inputTools.map((t) => t.name === nameBoundary.toWire(t.name) ? t : {
+		...t,
+		name: nameBoundary.toWire(t.name)
+	}) : inputTools;
+	const modelId = options.model;
+	const modelMaxOutput = await resolveAnthropicMaxOutput(modelId, options.maxTokens, options.modelCatalog);
+	const params = {
+		...anthropicParams?.extraBodyParams ?? {},
+		model: modelId,
+		max_tokens: options.maxTokens ?? modelMaxOutput,
+		system,
+		tools: wireTools,
+		messages: nameBoundary.messages.map((m) => toAnthropic(m)),
+		stream: true
+	};
+	if (anthropicParams?.contextManagement && !bedrockConfig) params.context_management = anthropicParams.contextManagement;
+	if (options.cache !== false) applyAnthropicCacheBreakpoints(params, callIsOAuth ? void 0 : options.system, extendedTtl ? effectiveCacheTtl : void 0);
+	applyAnthropicThinkingPlan(params, plan, bedrockConfig, bindingActive, thinkingBinding);
+	params.max_tokens = Math.min(params.max_tokens, modelMaxOutput);
+	if (callIsOAuth) alignClaudeCodePayload(params);
+	fitThinkingBudgetUnderEnvelope(params);
+	if (options.modelOptions?.fast && !callIsOAuth) params.speed = "fast";
+	if (options.toolChoice) {
+		if (options.toolChoice.type === "tool" && options.toolChoice.name) params.tool_choice = {
+			type: "tool",
+			name: nameBoundary.toWire(options.toolChoice.name)
+		};
+		else if (options.toolChoice.type === "required") params.tool_choice = { type: "any" };
+		else params.tool_choice = { type: "auto" };
+	}
+	const promptCacheKey = resolvePromptCacheKey(anthropicParams?.promptCacheKey, {
+		model: modelId,
+		system: options.system,
+		messages: options.messages
+	});
+	if (promptCacheKey !== void 0 && params.metadata?.user_id === void 0) params.metadata = {
+		...params.metadata,
+		user_id: promptCacheKey
+	};
+	const affinityHeaderName = anthropicParams?.promptCacheKeyHeader?.toLowerCase();
+	return {
+		params,
+		nameBoundary,
+		modelId,
+		affinityHeader: anthropicParams?.promptCacheKeyHeader !== void 0 && promptCacheKey !== void 0 && !Object.keys(resolvedExtraHeaders ?? {}).some((k) => k.toLowerCase() === affinityHeaderName) ? { [anthropicParams.promptCacheKeyHeader]: promptCacheKey } : void 0
+	};
+}
+/** Set the thinking fields (and the max-tokens/temperature they imply) from the plan. */
+function applyAnthropicThinkingPlan(params, plan, bedrockConfig, bindingActive, thinkingBinding) {
+	if (plan && bedrockConfig) {
+		const budget = plan.kind === "enabled" ? plan.budgetTokens : BEDROCK_THINKING_BUDGETS[plan.effort ?? "medium"];
+		params.thinking = {
+			type: "enabled",
+			budget_tokens: budget
+		};
+		params.max_tokens = budget + params.max_tokens;
+		params.temperature = 1;
+	} else if (plan) {
+		if (plan.kind === "enabled") {
+			params.thinking = {
+				type: "enabled",
+				budget_tokens: plan.budgetTokens,
+				display: "summarized"
+			};
+			params.max_tokens = plan.maxTokensBump + params.max_tokens;
+			if (plan.effort) params.output_config = {
+				...params.output_config,
+				effort: plan.effort
+			};
+		} else {
+			params.thinking = {
+				type: "adaptive",
+				display: "summarized"
+			};
+			const outputConfig = {};
+			if (plan.effort) outputConfig.effort = plan.effort;
+			if (typeof plan.taskBudgetTokens === "number" && plan.taskBudgetTokens > 0) outputConfig.task_budget = {
+				type: "tokens",
+				total: plan.taskBudgetTokens
+			};
+			if (Object.keys(outputConfig).length > 0) params.output_config = {
+				...params.output_config,
+				...outputConfig
+			};
+			if (typeof plan.maxTokensCap === "number" && plan.maxTokensCap > 0) params.max_tokens = Math.min(params.max_tokens, plan.maxTokensCap);
+		}
+		params.temperature = 1;
+		if (bindingActive) params.thinking.block_binding = { prefix_mismatch_behavior: thinkingBinding };
+	}
+}
+/** Claude Code payload alignment for the OAuth persona (output cap, billing block, `user_id`). */
+function alignClaudeCodePayload(params) {
+	params.max_tokens = Math.min(params.max_tokens, CLAUDE_CODE_MAX_OUTPUT_TOKENS);
+	if (Array.isArray(params.system)) params.system = [{
+		type: "text",
+		text: claudeCodeBillingText(firstUserMessageText(params.messages))
+	}, ...params.system];
+	if (typeof params.metadata?.user_id !== "string") params.metadata = {
+		...params.metadata,
+		user_id: claudeCodeUserId()
+	};
+}
+function fitThinkingBudgetUnderEnvelope(params) {
+	if (params.thinking?.type === "enabled" && params.thinking.budget_tokens >= params.max_tokens) {
+		const fitted = params.max_tokens - THINKING_RESPONSE_RESERVE_TOKENS;
+		if (fitted >= 1024) params.thinking.budget_tokens = fitted;
+		else {
+			delete params.thinking;
+			delete params.temperature;
+		}
+	}
+}
+//#endregion
+//#region src/providers/anthropic-retry.ts
+/**
+* Models observed rejecting forced tool use, so later calls skip straight to
+* the downgraded shape instead of paying the failing round-trip every time.
+*
+* Learned, not declared: Claude Fable 5.1 is the first model where
+* `tool_choice` of `tool` / `any` returns 400, and a catalog flag would need
+* upkeep for every successor that follows suit. Process-wide and keyed by
+* model id only — whether a model accepts forcing is a property of the model,
+* not of the endpoint or credential serving it.
+*/
+const MODELS_REJECTING_FORCED_TOOL_CHOICE = /* @__PURE__ */ new Set();
+/** The same request with `thinking.block_binding` removed. */
+function withoutThinkingBinding(params) {
+	if (!params.thinking) return params;
+	const { block_binding: _dropped, ...thinking } = params.thinking;
+	return {
+		...params,
+		thinking
+	};
+}
+function isForcedToolChoice(choice) {
+	return choice?.type === "tool" || choice?.type === "any";
+}
+/**
+* Models observed rejecting the explicit-budget thinking shape
+* (`thinking: { type: 'enabled', budget_tokens }`), so later calls skip the
+* failing round-trip and downgrade to adaptive up front.
+*
+* Learned, not declared — same rationale as
+* {@link MODELS_REJECTING_FORCED_TOOL_CHOICE}. Claude Opus 5.5 is the first
+* model where the `enabled` shape 400s (adaptive-only, thinking always on);
+* successors that follow suit are caught without a catalog edit.
+*/
+const MODELS_REJECTING_ENABLED_THINKING = /* @__PURE__ */ new Set();
+function isEnabledThinking(thinking) {
+	return thinking?.type === "enabled";
+}
+/**
+* The same request with the explicit budget dropped: `thinking.type` flipped to
+* `adaptive`, `budget_tokens` removed, every other thinking field
+* (`display`, `block_binding`) kept. `temperature` stays pinned to 1 (adaptive
+* requires it, same as the enabled shape) and the budget-inflated `max_tokens`
+* is left as-is — it is already clamped to the model ceiling and an oversized
+* envelope is harmless for adaptive, which thinks and replies inside it. Any
+* `output_config.effort` the enabled path set survives on `params.output_config`.
+*/
+function withoutEnabledThinking(params) {
+	const thinking = params.thinking;
+	if (!thinking || thinking.type !== "enabled") return params;
+	const { budget_tokens: _dropped, type: _type, ...rest } = thinking;
+	return {
+		...params,
+		thinking: {
+			...rest,
+			type: "adaptive"
+		}
+	};
+}
+/**
+* The same request with forcing removed: `tool_choice: auto` plus one trailing
+* system sentence naming what the model was being forced into.
+*
+* The sentence is load-bearing, not decoration. `enforceSchemaOutput` sends the
+* agent's own system prompt, which says nothing about `__output__` — forcing
+* was the whole instruction — so without it a model on `auto` can legitimately
+* answer in prose and the caller's "no structured payload" guard fires. It is
+* appended as a final uncached block: everything before it keeps its cache
+* prefix, and the downgrade adds no new breakpoint.
+*/
+function withoutForcedToolChoice(params) {
+	const choice = params.tool_choice;
+	const nudge = choice?.type === "tool" ? `Respond only by calling the \`${choice.name}\` tool. Do not reply with prose.` : "Respond only by calling one of the provided tools. Do not reply with prose.";
+	const system = typeof params.system === "string" ? params.system.length > 0 ? `${params.system}\n\n${nudge}` : nudge : [...params.system ?? [], {
+		type: "text",
+		text: nudge
+	}];
+	return {
+		...params,
+		system,
+		tool_choice: { type: "auto" }
+	};
+}
+/**
+* Wire index where the ACTIVE chain begins: the last user message that
+* carries real user content (string content, or any non-tool_result
+* block). Everything from there onward is the current prompt plus the
+* in-flight assistant/tool exchange — its thinking blocks were minted by
+* this very call chain and Anthropic requires them to be echoed back, so
+* escalated scrubs must never cross this boundary. `undefined` when no
+* such message exists (degenerate resume shapes) — callers treat that as
+* "no protected region".
+*/
+function activeChainScrubBoundary(messages) {
+	for (let i = messages.length - 1; i >= 0; i--) {
+		const message = messages[i];
+		if (message?.role !== "user") continue;
+		if (typeof message.content === "string") return i;
+		if (message.content.some((block) => block.type !== "tool_result")) return i;
+	}
+}
+/**
+* Decide what a scrub pass may touch. The bound NEVER crosses into the
+* active chain wholesale — not even on pass 0 with no parseable locator
+* (an unbounded first pass would strip the in-flight chain's thinking and
+* trade a recoverable 400 for an "expected thinking block" one). When the
+* API-reported failing index lies INSIDE the chain, only that single
+* message is scrubbed on top of the pre-chain region: the block the API
+* itself rejected fails whether or not it is echoed, but sibling chain
+* messages below it may hold still-valid thinking the exchange requires.
+*
+* - pass 0 with a pre-chain locator → bounded at the locator (preserves
+*   later, still-valid historical thinking).
+* - pass 0 without a locator, and every escalated pass → the full
+*   pre-chain history.
+* - no active chain at all (degenerate resume shapes) → locator bound on
+*   pass 0, full history afterwards.
+*/
+function planThinkingScrub(scrubPass, failingIndex, messages) {
+	const chainStart = activeChainScrubBoundary(messages);
+	if (chainStart === void 0) return scrubPass === 0 && failingIndex !== void 0 ? { upToIndex: failingIndex } : {};
+	const beforeChain = chainStart - 1;
+	const inChain = failingIndex !== void 0 && failingIndex >= chainStart;
+	const upToIndex = scrubPass === 0 && failingIndex !== void 0 && !inChain ? failingIndex : beforeChain;
+	return inChain ? {
+		upToIndex,
+		alsoMessageIndex: failingIndex
+	} : { upToIndex };
+}
+/**
+* Remove opaque historical Anthropic reasoning from a retry payload. Text,
+* tool calls/results, images, and every other block are preserved exactly.
+* If a message consisted only of reasoning, leave a neutral text marker so
+* the wire never receives an empty content array and conversation role
+* boundaries stay intact.
+*
+* `upToIndex` bounds the scrub to messages at/before the API-reported
+* failing index (see {@link parseFailingMessageIndex}); `undefined` strips
+* everywhere. `alsoMessageIndex` additionally scrubs that single message
+* beyond the bound (see {@link planThinkingScrub}). A later stale block
+* simply triggers the same recovery again — each pass removes at least
+* one block, so the recursion is bounded.
+*/
+function withoutHistoricalThinking(messages, upToIndex, alsoMessageIndex) {
+	let removed = 0;
+	return {
+		messages: messages.map((message, index) => {
+			if (upToIndex !== void 0 && index > upToIndex && index !== alsoMessageIndex) return message;
+			if (!Array.isArray(message.content)) return message;
+			const content = message.content.filter((block) => {
+				if (block.type === "thinking" || block.type === "redacted_thinking") {
+					removed += 1;
+					return false;
+				}
+				return true;
+			});
+			return {
+				...message,
+				content: content.length > 0 ? content : [{
+					type: "text",
+					text: "[historical reasoning omitted]"
+				}]
+			};
+		}),
+		removed
+	};
+}
+//#endregion
+//#region src/providers/anthropic-tool-json.ts
+/**
+* Raw control characters in streamed tool input.
+*
+* With fine-grained tool streaming (one of the Claude Code subscription
+* betas) the API streams a tool call's input JSON without validating it, so a
+* string value can carry a literal newline or tab. The SDK re-parses the
+* accumulated input on every `input_json_delta` with a strict `JSON.parse`,
+* which throws "Bad control character in string literal" and fails the whole
+* turn. Escaping those characters inside strings before the SDK sees the delta
+* yields the value the model meant.
+*/
+/** The stream with every `input_json_delta` escaped; same object, so the SDK keeps its controller. */
+function escapingStream(stream) {
+	const escape = createToolJsonEscaper();
+	const events = stream[Symbol.asyncIterator].bind(stream);
+	Object.defineProperty(stream, Symbol.asyncIterator, {
+		configurable: true,
+		async *value() {
+			for await (const event of { [Symbol.asyncIterator]: events }) {
+				const e = event;
+				if (e.type === "content_block_delta" && e.delta?.type === "input_json_delta" && typeof e.delta.partial_json === "string") yield {
+					...e,
+					delta: {
+						...e.delta,
+						partial_json: escape(e.index ?? 0, e.delta.partial_json)
+					}
+				};
+				else yield event;
+			}
+		}
+	});
+	return stream;
+}
+/**
+* `messages` whose `stream()` escapes tool-input control characters. The
+* SDK's `stream()` builds its `MessageStream` from `this.create(...)
+* .withResponse()`, so only `create` is replaced; everything else (client,
+* logger, headers, abort, `connect`) is the real one, through the prototype.
+* Pinned by a test against the real SDK, which fails if that changes.
+*/
+function withToolJsonEscaping(messages) {
+	const create = (...args) => {
+		const pending = messages.create(...args);
+		if (!args[0]?.stream) return pending;
+		return {
+			...pending,
+			withResponse: async () => {
+				const result = await pending.withResponse();
+				return {
+					...result,
+					data: escapingStream(result.data)
+				};
+			}
+		};
+	};
+	return Object.create(messages, { create: { value: create } });
+}
+//#endregion
+//#region src/chat/anthropic-models.ts
+/**
+* Anthropic "fast mode" — `speed: "fast"` on the Messages API. ~2.5× output
+* tokens/sec at a per-model price multiplier. Supported on Opus 4.6 / 4.7 /
+* 4.8 / 5 / 5.5 only; the API errors if sent on any other model, so it's
+* attached just to those entries (see {@link FAST_MODE_OPTIONS}).
+*
+* The multiplier scales ALL rate components (input, output, and both cache
+* rates) uniformly: per Anthropic, "prompt caching multipliers apply on top of
+* fast mode pricing" across the full context window. Opus 5.5 ($4/$20 →
+* $8/$40), 5 and 4.8 ($5/$25 → $10/$50) are 2×; Opus 4.6 / 4.7 are a steeper
+* 6× ($5/$25 → $30/$150).
+* See https://platform.claude.com/docs/en/build-with-claude/fast-mode.
+*/
+const FAST_MODE_OPTION = {
+	id: "fast",
+	label: "Fast mode",
+	description: "~2.5× faster output at premium pricing",
+	costMultiplier: {
+		input: 2,
+		output: 2,
+		cacheRead: 2,
+		cacheWrite: 2
+	}
+};
+const FAST_MODE_OPTION_LEGACY = {
+	...FAST_MODE_OPTION,
+	description: "~2.5× faster output at 6× pricing",
+	costMultiplier: {
+		input: 6,
+		output: 6,
+		cacheRead: 6,
+		cacheWrite: 6
+	}
+};
+/** Model ids that accept `speed: "fast"`, mapped to their fast-mode option. */
+const FAST_MODE_OPTIONS = {
+	"claude-opus-5-5": FAST_MODE_OPTION,
+	"claude-opus-5": FAST_MODE_OPTION,
+	"claude-opus-4-8": FAST_MODE_OPTION,
+	"claude-opus-4-7": FAST_MODE_OPTION_LEGACY,
+	"claude-opus-4-6": FAST_MODE_OPTION_LEGACY
+};
+/**
+* The price multiplier to apply to a model's base rates when fast mode is
+* active, or `undefined` when the model has no fast-mode pricing (i.e. doesn't
+* support it). Mirrors {@link FAST_MODE_OPTIONS} — kept as a separate accessor
+* so the cost layer can stay decoupled from the picker-facing option objects.
+*/
+function fastModeCostMultiplier(modelId) {
+	return FAST_MODE_OPTIONS[modelId]?.costMultiplier;
+}
+/**
+* Currently empty: pi-ai 1.0.4 bundles every GA Anthropic model up to and
+* including Claude Sonnet 5.5 — Opus 4.8 / 5 / 5.5, Fable 5 / 5.1,
+* Sonnet 4.6 / 5 / 5.5, Haiku 4.5 — with published rates, 1M context and 128k output.
+*
+* When adding a stopgap entry, mirror pi-ai's `ModelInfo` shape and set
+* `provider: 'anthropic'`. Known caveats worth carrying over in the comment:
+* Fable 5 / 5.1 REJECT forced tool use (`tool_choice` of `any` or `tool`
+* returns 400), which breaks zidane's structured-output paths (`loop.ts`,
+* `generate-data.ts`, the eval judge) — Opus 5.5 rejects it too, handled
+* generically by the learned `MODELS_REJECTING_FORCED_TOOL_CHOICE` retry in
+* providers/anthropic.ts. Opus 5.5 also REJECTS non-adaptive thinking:
+* `thinking: {type:'enabled', budget_tokens}` and `{type:'disabled'}` both 400
+* with `"thinking.type.enabled/disabled" is not supported for this model`;
+* zidane's explicit-budget path (`behavior.thinkingBudget`, the Bedrock-only
+* shape) emits `enabled`, so the provider catches that 400 and retries as
+* adaptive (`MODELS_REJECTING_ENABLED_THINKING`). Claude Mythos 5 / 5.1 are
+* deliberately absent: invitation-only (Project Glasswing), so they would be
+* dead picker entries for virtually all users.
+*
+* See https://platform.claude.com/docs/en/about-claude/models/overview.
+*/
+const ANTHROPIC_EXTRA_MODELS = [];
+//#endregion
+//#region src/providers/anthropic-usage.ts
+/**
+* Map Anthropic's native `stop_reason` to the zidane `TurnFinishReason` union.
+*
+* `pause_turn` and `model_context_window_exceeded` are 4.6+ stop reasons that
+* pre-Z21 collapsed to `'other'` and silently terminated the run. They now
+* map to `'pause'` and `'length'` respectively, and the surrounding caller
+* adjusts the `done` flag so the loop can recover.
+*/
+function mapStopReason(stopReason) {
+	if (!stopReason) return void 0;
+	switch (stopReason) {
+		case "end_turn":
+		case "stop_sequence": return "stop";
+		case "tool_use": return "tool-calls";
+		case "max_tokens":
+		case "model_context_window_exceeded": return "length";
+		case "refusal": return "content-filter";
+		case "pause_turn": return "pause";
+		default: return "other";
+	}
+}
+/**
+* Anthropic bills a 1h-TTL cache write at 2× base input against 1.25× for the
+* default 5m TTL, but `cache_creation_input_tokens` (what `TurnUsage.
+* cacheCreation` carries) is the SUM of both buckets. Registry `cacheWrite`
+* rates are the 5m rate, so a turn that wrote under `ttl: '1h'` needs its
+* write component scaled by `(5m·1.25 + 1h·2) / (total·1.25)`. `1` when the
+* response carries no split (Bedrock, older API versions) or no 1h writes.
+*/
+const CACHE_WRITE_1H_OVER_5M = 2 / 1.25;
+function cacheWriteTtlMultiplier(usage) {
+	const split = usage.cache_creation;
+	const oneHour = split?.ephemeral_1h_input_tokens ?? 0;
+	if (oneHour <= 0) return 1;
+	const fiveMin = split?.ephemeral_5m_input_tokens ?? 0;
+	const total = usage.cache_creation_input_tokens ?? fiveMin + oneHour;
+	if (total <= 0) return 1;
+	return (fiveMin + oneHour * CACHE_WRITE_1H_OVER_5M) / total;
+}
+/** Per-rate product of two multipliers; a missing key on either side is `1`. */
+function composeCostMultipliers(a, b) {
+	if (!a) return b;
+	if (!b) return a;
+	return {
+		input: (a.input ?? 1) * (b.input ?? 1),
+		output: (a.output ?? 1) * (b.output ?? 1),
+		cacheRead: (a.cacheRead ?? 1) * (b.cacheRead ?? 1),
+		cacheWrite: (a.cacheWrite ?? 1) * (b.cacheWrite ?? 1)
+	};
+}
+/**
+* Price an API-key (non-OAuth) turn.
+*
+* - Bedrock traffic is looked up under pi-ai's `amazon-bedrock` registry: the
+*   echoed ids (`global.anthropic.claude-…`, `eu.anthropic.…`) never appear
+*   under `anthropic`, and Bedrock's regional uplifts only exist there.
+* - The API may echo a dated snapshot for an alias request (`claude-haiku-4-5`
+*   → `claude-haiku-4-5-20251001`). Rates and the fast-mode multiplier are
+*   resolved by the echoed id first, then by the REQUESTED id, so a snapshot
+*   the registry doesn't list yet is still priced (and a fast-mode Opus turn
+*   keeps its 2× instead of silently billing at base). The echoed id stays on
+*   the record — only the price falls back.
+* - 1h cache writes are scaled to their real rate (see
+*   {@link cacheWriteTtlMultiplier}); fast mode composes on top.
+*/
+async function priceAnthropicUsage(raw, response, requestedModelId, fastRequested, bedrock, catalog) {
+	const providerKey = bedrock ? "amazon-bedrock" : "anthropic";
+	const echoedModelId = raw.modelId ?? requestedModelId;
+	const fast = fastRequested ? fastModeCostMultiplier(echoedModelId) ?? fastModeCostMultiplier(requestedModelId) : void 0;
+	const ttl = cacheWriteTtlMultiplier(response.usage);
+	const multiplier = composeCostMultipliers(fast, ttl === 1 ? void 0 : { cacheWrite: ttl });
+	const priced = await fillEstimatedCost(raw, providerKey, multiplier, catalog);
+	if (priced.cost !== void 0 || echoedModelId === requestedModelId) return priced;
+	const byRequested = await fillEstimatedCost({
+		...raw,
+		modelId: requestedModelId
+	}, providerKey, multiplier, catalog);
+	return byRequested.cost !== void 0 ? {
+		...raw,
+		cost: byRequested.cost
+	} : raw;
+}
+//#endregion
+//#region src/providers/diagnostic.ts
+const NETWORK_CODES = /* @__PURE__ */ new Set([
+	"ECONNREFUSED",
+	"ECONNRESET",
+	"ETIMEDOUT",
+	"ENOTFOUND",
+	"EAI_AGAIN",
+	"ENETUNREACH",
+	"EHOSTUNREACH",
+	"EPIPE",
+	"UND_ERR_CONNECT_TIMEOUT",
+	"UND_ERR_HEADERS_TIMEOUT",
+	"UND_ERR_SOCKET",
+	"CERT_HAS_EXPIRED",
+	"DEPTH_ZERO_SELF_SIGNED_CERT",
+	"UNABLE_TO_VERIFY_LEAF_SIGNATURE",
+	"ERR_TLS_CERT_ALTNAME_INVALID",
+	"AbortError",
+	"TimeoutError"
+]);
+function sanitizeProviderDiagnosticMetadata(metadata) {
+	const safe = {};
+	if (typeof metadata.transportAttempt === "number" && Number.isSafeInteger(metadata.transportAttempt) && metadata.transportAttempt > 0) safe.transportAttempt = metadata.transportAttempt;
+	if (typeof metadata.networkCode === "string" && NETWORK_CODES.has(metadata.networkCode)) safe.networkCode = metadata.networkCode;
+	if (typeof metadata.httpStatus === "number" && Number.isInteger(metadata.httpStatus) && metadata.httpStatus >= 100 && metadata.httpStatus <= 599) safe.httpStatus = metadata.httpStatus;
+	if (typeof metadata.upstreamRequestId === "string" && metadata.upstreamRequestId.length <= 128 && /^req_[\w-]+$/.test(metadata.upstreamRequestId)) safe.upstreamRequestId = metadata.upstreamRequestId;
+	const retryAfter = metadata.retryAfter;
+	if (typeof retryAfter === "string" && retryAfter.length <= 32 && (/^\d+(?:\.\d+)?$/.test(retryAfter) || retryAfter.length === 29 && new Date(retryAfter).toUTCString() === retryAfter)) safe.retryAfter = retryAfter;
+	return safe;
+}
+/** No request or error objects cross this boundary. Diagnostics cannot fail a request. */
+function createProviderDiagnosticTracker(emit, signal) {
+	const requestId = crypto.randomUUID();
+	const started = performance.now();
+	let stageStarted = started;
+	let current;
+	let attempt = 0;
+	let transportAttempt = 0;
+	let finished = false;
+	let timer;
+	let abort = () => {};
+	function send(event, metadata = {}) {
+		if (!current) return;
+		const now = performance.now();
+		try {
+			emit?.({
+				requestId,
+				stage: current,
+				event,
+				elapsedMs: Math.round(now - started),
+				stageElapsedMs: Math.round(now - stageStarted),
+				attempt,
+				...sanitizeProviderDiagnosticMetadata(metadata)
+			});
+		} catch {}
+	}
+	const tracker = {
+		wrapFetch(fetch) {
+			if (!emit) return fetch;
+			return Object.assign(async (...args) => {
+				const number = ++transportAttempt;
+				const began = performance.now();
+				const report = (event, metadata = {}) => {
+					try {
+						emit({
+							requestId,
+							stage: "transport",
+							event,
+							elapsedMs: Math.round(performance.now() - started),
+							stageElapsedMs: Math.round(performance.now() - began),
+							attempt,
+							...sanitizeProviderDiagnosticMetadata({
+								...metadata,
+								transportAttempt: number
+							})
+						});
+					} catch {}
+				};
+				report("start");
+				try {
+					const response = await fetch(...args);
+					report("end", {
+						httpStatus: response.status,
+						upstreamRequestId: response.headers.get("request-id"),
+						retryAfter: response.headers.get("retry-after")
+					});
+					return response;
+				} catch (error) {
+					const err = error;
+					report("failure", { networkCode: [
+						err?.cause?.code,
+						err?.code,
+						err?.name
+					].find((value) => typeof value === "string" && NETWORK_CODES.has(value)) });
+					throw error;
+				}
+			}, fetch);
+		},
+		stage(stage, metadata = {}) {
+			if (!emit || finished) return;
+			if (current) send("end");
+			current = stage;
+			stageStarted = performance.now();
+			if (stage === "dispatch") attempt++;
+			send("start", metadata);
+			if (timer) clearInterval(timer);
+			timer = setInterval(send, 3e4, "waiting");
+			timer.unref?.();
+			if (signal?.aborted) abort();
+		},
+		finish(event, metadata = {}) {
+			if (!emit || finished) return;
+			finished = true;
+			clearInterval(timer);
+			signal?.removeEventListener("abort", abort);
+			if (current) {
+				send("end");
+				send(event, metadata);
+			}
+		}
 	};
+	abort = () => tracker.finish("abort");
+	if (emit) signal?.addEventListener("abort", abort, { once: true });
+	return tracker;
 }
-function isForcedToolChoice(choice) {
-	return choice?.type === "tool" || choice?.type === "any";
+//#endregion
+//#region src/providers/anthropic-stream.ts
+function isInputTransformation(value) {
+	if (typeof value !== "object" || value === null) return false;
+	const v = value;
+	return typeof v.type === "string" && typeof v.path === "string" && typeof v.reason === "string";
 }
-/**
-* Models observed rejecting the explicit-budget thinking shape
-* (`thinking: { type: 'enabled', budget_tokens }`), so later calls skip the
-* failing round-trip and downgrade to adaptive up front.
-*
-* Learned, not declared — same rationale as
-* {@link MODELS_REJECTING_FORCED_TOOL_CHOICE}. Claude Opus 5.5 is the first
-* model where the `enabled` shape 400s (adaptive-only, thinking always on);
-* successors that follow suit are caught without a catalog edit.
-*/
-const MODELS_REJECTING_ENABLED_THINKING = /* @__PURE__ */ new Set();
-/**
-* True for the 400 Anthropic returns when a model does not support the manual
-* extended-thinking shape: `"thinking.type.enabled" is not supported for this
-* model. Use "thinking.type.adaptive" and "output_config.effort" ...`. Anchored
-* on the validation-400 gate plus the dotted field name and the "not supported
-* for this model" tail, so a reworded middle still matches while an unrelated
-* `thinking` validation error (bad budget, wrong type) does not. Only the
-* `enabled` variant is matched: zidane omits the field for the `'off'` level
-* (adaptive on these models) and never emits `thinking.type.disabled`.
-*/
-function isEnabledThinkingUnsupportedError(err) {
-	return isRequestValidationError(err) && /\bthinking\.type\.enabled\b[^.]+not supported for this model\b/i.test(errorText(err));
+function betasFor(anthropicParams, conditional) {
+	return conditional.length > 0 ? [...anthropicParams?.extraBetas ?? [], ...conditional] : anthropicParams?.extraBetas;
 }
-function isEnabledThinking(thinking) {
-	return thinking?.type === "enabled";
+/** The `anthropic()` provider's `stream()`: prepare auth + client, build the request, run it. */
+async function streamAnthropic(provider, options, callbacks) {
+	const diagnostic = createProviderDiagnosticTracker(callbacks.onDiagnostic, options.signal);
+	const live = {
+		diagnosticActive: false,
+		apiKey: ""
+	};
+	try {
+		const prepared = await prepareAnthropicCall(provider, options, callbacks, diagnostic, live);
+		const { params, nameBoundary, modelId, affinityHeader } = await buildAnthropicStreamRequest(prepared);
+		const call = {
+			...prepared,
+			nameBoundary,
+			modelId,
+			affinityHeader
+		};
+		const { callIsOAuth } = call;
+		let initialParams = isForcedToolChoice(params.tool_choice) && MODELS_REJECTING_FORCED_TOOL_CHOICE.has(modelId) ? withoutForcedToolChoice(params) : params;
+		if (isEnabledThinking(initialParams.thinking) && MODELS_REJECTING_ENABLED_THINKING.has(modelId)) initialParams = withoutEnabledThinking(initialParams);
+		const result = await runAnthropicStream(call, initialParams, options.modelOptions?.fast === true && !callIsOAuth);
+		diagnostic.finish("success");
+		return result;
+	} catch (err) {
+		diagnostic.finish(options.signal?.aborted ? "abort" : "failure", { httpStatus: err && typeof err === "object" && "status" in err ? err.status : void 0 });
+		throw err;
+	} finally {
+		diagnostic.finish("failure");
+	}
 }
-/**
-* The same request with the explicit budget dropped: `thinking.type` flipped to
-* `adaptive`, `budget_tokens` removed, every other thinking field
-* (`display`, `block_binding`) kept. `temperature` stays pinned to 1 (adaptive
-* requires it, same as the enabled shape) and the budget-inflated `max_tokens`
-* is left as-is — it is already clamped to the model ceiling and an oversized
-* envelope is harmless for adaptive, which thinks and replies inside it. Any
-* `output_config.effort` the enabled path set survives on `params.output_config`.
-*/
-function withoutEnabledThinking(params) {
-	const thinking = params.thinking;
-	if (!thinking || thinking.type !== "enabled") return params;
-	const { budget_tokens: _dropped, type: _type, ...rest } = thinking;
-	return {
-		...params,
-		thinking: {
-			...rest,
-			type: "adaptive"
+/** Resolve (or force-refresh) this call's credential through the shared OAuth machinery. */
+async function resolveAnthropicCallApiKey(call, forceRefresh = false, rejectedAccess) {
+	const identity = credentialIdentity(call.provider.anthropicParams);
+	return await resolveOAuthApiKey({
+		provider: identity.providerId,
+		providerId: identity.providerId,
+		params: call.provider.runtimeCredentials ? {
+			...call.provider.anthropicParams,
+			...call.provider.runtimeCredentials
+		} : call.provider.anthropicParams,
+		envKey: identity.envKey,
+		missingError: identity.missingError,
+		refreshError: identity.refreshError,
+		forceRefresh,
+		rejectedAccess
+	}, {
+		...call.callbacks,
+		onOAuthStage(stage) {
+			if (!call.callbacks.onDiagnostic || call.provider.anthropicParams?.authMode === "api-key" || call.provider.anthropicParams?.authMode === "bearer") return;
+			call.live.diagnosticActive = true;
+			call.diagnostic.stage(stage);
+		},
+		async onOAuthRefresh(ctx) {
+			if (ctx.source === "params") call.provider.runtimeCredentials = {
+				access: ctx.credentials.access,
+				refresh: ctx.credentials.refresh,
+				expires: ctx.credentials.expires
+			};
+			await call.callbacks.onOAuthRefresh?.(ctx);
 		}
-	};
+	});
 }
 /**
-* The same request with forcing removed: `tool_choice: auto` plus one trailing
-* system sentence naming what the model was being forced into.
-*
-* The sentence is load-bearing, not decoration. `enforceSchemaOutput` sends the
-* agent's own system prompt, which says nothing about `__output__` — forcing
-* was the whole instruction — so without it a model on `auto` can legitimately
-* answer in prose and the caller's "no structured payload" guard fires. It is
-* appended as a final uncached block: everything before it keeps its cache
-* prefix, and the downgrade adds no new breakpoint.
+* Auth, betas, extra headers, and client for one call — everything decided
+* before the request body.
 */
-function withoutForcedToolChoice(params) {
-	const choice = params.tool_choice;
-	const nudge = choice?.type === "tool" ? `Respond only by calling the \`${choice.name}\` tool. Do not reply with prose.` : "Respond only by calling one of the provided tools. Do not reply with prose.";
-	const system = typeof params.system === "string" ? params.system.length > 0 ? `${params.system}\n\n${nudge}` : nudge : [...params.system ?? [], {
-		type: "text",
-		text: nudge
-	}];
+async function prepareAnthropicCall(provider, options, callbacks, diagnostic, live) {
+	const { anthropicParams, bedrockConfig } = provider;
+	if (!bedrockConfig) live.apiKey = await resolveAnthropicCallApiKey({
+		provider,
+		callbacks,
+		diagnostic,
+		live
+	});
+	const callAuth = resolveAnthropicAuthShape(live.apiKey, bedrockConfig ? "api-key" : anthropicParams?.authMode);
+	const callIsOAuth = callAuth.claudeCode;
+	if (callIsOAuth && callbacks.onDiagnostic) {
+		live.diagnosticActive = true;
+		diagnostic.stage("prepare");
+	}
+	/**
+	* Whether a provider auth rejection on this call is worth ATTEMPTING one
+	* forced credential rotation. A bearer-authenticated call MAY resolve its
+	* token through the refreshable OAuth store — subscription OAuth and
+	* `authMode: 'bearer'` gateways (`extensions/bolt`) both do — so a 401
+	* arriving before the local expiry is recoverable for them. Deliberately
+	* WIDER than {@link callIsOAuth}, which additionally means "wear the
+	* Claude Code persona"; a gateway is not Claude Code but its token still
+	* rotates.
+	*
+	* The ones that cannot rotate stop at the identical-credential guard in
+	* the recovery below rather than being excluded here: a static bearer
+	* token supplied as `apiKey` short-circuits `resolveOAuthApiKey` and never
+	* reaches the store, so the re-resolve returns the same value and costs
+	* nothing but a function call. API-key and Bedrock calls never get that
+	* far — `callAuth.bearer` is false for both.
+	*/
+	const callCanRotateAuth = callAuth.bearer;
+	const effectiveCacheTtl = options.cacheTtl ?? (callIsOAuth ? "1h" : void 0);
+	const extendedTtl = options.cache !== false && effectiveCacheTtl === "1h" && !bedrockConfig;
+	const plan = planAnthropicThinking(options.thinking ?? "off", options.thinkingBudget, options.taskBudget, options.effortHint !== false);
+	const thinkingBinding = resolveThinkingBinding(anthropicParams?.thinkingBinding);
+	const bindingActive = plan !== null && !bedrockConfig && thinkingBinding !== "off" && !provider.thinkingBindingRejected;
+	const baseConditionalBetas = [...options.modelOptions?.fast && !callIsOAuth ? [FAST_MODE_BETA] : [], ...extendedTtl ? [EXTENDED_CACHE_TTL_BETA] : []];
+	const requestBetas = betasFor(anthropicParams, [...baseConditionalBetas, ...bindingActive ? [THINKING_BINDING_BETA] : []]);
+	const resolvedExtraHeaders = await resolveExtraHeaders(anthropicParams?.extraHeaders);
 	return {
-		...params,
-		system,
-		tool_choice: { type: "auto" }
+		provider,
+		callbacks,
+		diagnostic,
+		live,
+		anthropicParams,
+		bedrockConfig,
+		options,
+		callIsOAuth,
+		effectiveCacheTtl,
+		extendedTtl,
+		plan,
+		thinkingBinding,
+		bindingActive,
+		resolvedExtraHeaders,
+		client: bedrockConfig ? await createBedrockClient(bedrockConfig, anthropicParams, resolvedExtraHeaders) : createClient(await loadAnthropicSdk(), live.apiKey, callAuth, anthropicParams?.baseURL, requestBetas, resolvedExtraHeaders, callIsOAuth ? diagnostic.wrapFetch : void 0),
+		callAuth,
+		callCanRotateAuth,
+		baseConditionalBetas,
+		requestBetas
 	};
 }
-/**
-* Wire index where the ACTIVE chain begins: the last user message that
-* carries real user content (string content, or any non-tool_result
-* block). Everything from there onward is the current prompt plus the
-* in-flight assistant/tool exchange — its thinking blocks were minted by
-* this very call chain and Anthropic requires them to be echoed back, so
-* escalated scrubs must never cross this boundary. `undefined` when no
-* such message exists (degenerate resume shapes) — callers treat that as
-* "no protected region".
-*/
-function activeChainScrubBoundary(messages) {
-	for (let i = messages.length - 1; i >= 0; i--) {
-		const message = messages[i];
-		if (message?.role !== "user") continue;
-		if (typeof message.content === "string") return i;
-		if (message.content.some((block) => block.type !== "tool_result")) return i;
+/** Dispatch one request and settle it, recovering through the retry ladder on failure. */
+async function runAnthropicStream(call, requestParams, fastRequested, scrubPass = 0, authPass = 0) {
+	if (call.live.diagnosticActive) call.diagnostic.stage("dispatch");
+	const s = withToolJsonEscaping(call.client.messages).stream(requestParams, {
+		signal: call.options.signal,
+		...call.affinityHeader ? { headers: call.affinityHeader } : {}
+	});
+	const turn = attachAnthropicStreamListeners(call, s);
+	let response;
+	try {
+		response = await s.finalMessage();
+	} catch (err) {
+		return recoverAnthropicStreamFailure(call, turn, err, requestParams, fastRequested, scrubPass, authPass);
 	}
+	return settleAnthropicStream(call, turn, response, fastRequested);
+}
+/** Wire diagnostics, output deltas, live usage, input transformations, and server-tool callbacks. */
+function attachAnthropicStreamListeners(call, s) {
+	if (call.live.diagnosticActive) {
+		s.on("connect", () => call.diagnostic.stage("response-headers", {
+			httpStatus: s.response?.status,
+			upstreamRequestId: s.request_id
+		}));
+		let firstActivity = true;
+		s.on("streamEvent", () => {
+			if (!firstActivity) return;
+			firstActivity = false;
+			call.diagnostic.stage("first-activity");
+			call.diagnostic.stage("stream");
+		});
+	}
+	const turn = {
+		text: "",
+		observedOutput: false,
+		inputTransformations: void 0
+	};
+	s.on("text", (delta) => {
+		turn.observedOutput = true;
+		turn.text += delta;
+		call.callbacks.onText(delta);
+	});
+	if (call.callbacks.onThinking) s.on("thinking", (delta) => {
+		turn.observedOutput = true;
+		call.callbacks.onThinking(delta);
+	});
+	if (call.callbacks.onUsage) {
+		let live;
+		s.on("streamEvent", (event) => {
+			if (event.type === "message_start") {
+				const u = event.message.usage;
+				live = {
+					inputTokens: u.input_tokens ?? 0,
+					...u.cache_read_input_tokens != null ? { cacheRead: u.cache_read_input_tokens } : {},
+					...u.cache_creation_input_tokens != null ? { cacheCreation: u.cache_creation_input_tokens } : {},
+					...call.callIsOAuth ? { billable: false } : {}
+				};
+			} else if (event.type === "message_delta") live = {
+				...live ?? {
+					inputTokens: 0,
+					...call.callIsOAuth ? { billable: false } : {}
+				},
+				outputTokens: event.usage.output_tokens
+			};
+			else return;
+			call.callbacks.onUsage(live);
+		});
+	}
+	if (call.callbacks.onInputTransformations) s.on("streamEvent", (event) => {
+		const list = (event.type === "message_start" ? event.message : event.type === "message_delta" ? event : void 0)?.input_transformations;
+		if (Array.isArray(list) && list.length > 0) turn.inputTransformations = list.filter(isInputTransformation);
+	});
+	if (call.callbacks.onToolCallDelta) s.on("inputJson", () => {
+		turn.observedOutput = true;
+		call.callbacks.onToolCallDelta();
+	});
+	if (call.callbacks.onServerToolUse || call.callbacks.onServerToolResult) s.on("contentBlock", (block) => {
+		turn.observedOutput = true;
+		if (block.type === "server_tool_use") call.callbacks.onServerToolUse?.({
+			id: block.id,
+			name: block.name,
+			input: block.input ?? {}
+		});
+		else if (block.type === "web_search_tool_result") call.callbacks.onServerToolResult?.({
+			toolUseId: block.tool_use_id,
+			toolName: "web_search",
+			content: block.content
+		});
+	});
+	return turn;
 }
 /**
-* Decide what a scrub pass may touch. The bound NEVER crosses into the
-* active chain wholesale — not even on pass 0 with no parseable locator
-* (an unbounded first pass would strip the in-flight chain's thinking and
-* trade a recoverable 400 for an "expected thinking block" one). When the
-* API-reported failing index lies INSIDE the chain, only that single
-* message is scrubbed on top of the pre-chain region: the block the API
-* itself rejected fails whether or not it is echoed, but sibling chain
-* messages below it may hold still-valid thinking the exchange requires.
-*
-* - pass 0 with a pre-chain locator → bounded at the locator (preserves
-*   later, still-valid historical thinking).
-* - pass 0 without a locator, and every escalated pass → the full
-*   pre-chain history.
-* - no active chain at all (degenerate resume shapes) → locator bound on
-*   pass 0, full history afterwards.
-*/
-function planThinkingScrub(scrubPass, failingIndex, messages) {
-	const chainStart = activeChainScrubBoundary(messages);
-	if (chainStart === void 0) return scrubPass === 0 && failingIndex !== void 0 ? { upToIndex: failingIndex } : {};
-	const beforeChain = chainStart - 1;
-	const inChain = failingIndex !== void 0 && failingIndex >= chainStart;
-	const upToIndex = scrubPass === 0 && failingIndex !== void 0 && !inChain ? failingIndex : beforeChain;
-	return inChain ? {
-		upToIndex,
-		alsoMessageIndex: failingIndex
-	} : { upToIndex };
-}
-/**
-* Remove opaque historical Anthropic reasoning from a retry payload. Text,
-* tool calls/results, images, and every other block are preserved exactly.
-* If a message consisted only of reasoning, leave a neutral text marker so
-* the wire never receives an empty content array and conversation role
-* boundaries stay intact.
-*
-* `upToIndex` bounds the scrub to messages at/before the API-reported
-* failing index (see {@link parseFailingMessageIndex}); `undefined` strips
-* everywhere. `alsoMessageIndex` additionally scrubs that single message
-* beyond the bound (see {@link planThinkingScrub}). A later stale block
-* simply triggers the same recovery again — each pass removes at least
-* one block, so the recursion is bounded.
+* The retry ladder for a failed dispatch: thinking-signature scrub, forced
+* OAuth rotation, fast-mode fallback, binding downgrade, forced-tool-choice
+* and enabled-thinking downgrades. Rethrows when nothing applies.
 */
-function withoutHistoricalThinking(messages, upToIndex, alsoMessageIndex) {
-	let removed = 0;
+async function recoverAnthropicStreamFailure(call, turn, err, requestParams, fastRequested, scrubPass, authPass) {
+	if (!(call.bindingActive && call.thinkingBinding === "error" && isPrefixMismatchError(err)) && !turn.observedOutput && scrubPass < 3 && isRecoverableThinkingBlockError(err, requestParams.messages)) {
+		const failingIndex = parseFailingMessageIndex(err);
+		const plan = planThinkingScrub(scrubPass, failingIndex, requestParams.messages);
+		const scrubbed = withoutHistoricalThinking(requestParams.messages, plan.upToIndex, plan.alsoMessageIndex);
+		if (scrubbed.removed > 0) {
+			try {
+				await call.callbacks.onHistoryRepair?.({
+					type: "invalid-anthropic-thinking-signature",
+					...failingIndex !== void 0 ? { wireMessageIndex: failingIndex } : {}
+				});
+			} catch (repairErr) {
+				if (process.env.ZIDANE_DEBUG) process.stderr.write(`[zidane/anthropic] history repair callback failed: ${errorMessage(repairErr)}\n`);
+			}
+			return await runAnthropicStream(call, {
+				...requestParams,
+				messages: scrubbed.messages
+			}, fastRequested, scrubPass + 1, authPass);
+		}
+	}
+	if (call.callCanRotateAuth && authPass === 0 && !turn.observedOutput && isAnthropicAuthenticationError(err)) {
+		const rejectedAccess = call.live.apiKey;
+		let refreshedApiKey;
+		try {
+			refreshedApiKey = await resolveAnthropicCallApiKey(call, true, rejectedAccess);
+		} catch (refreshErr) {
+			if (err !== null && typeof err === "object" && err.cause === void 0) try {
+				err.cause = refreshErr;
+			} catch {}
+			if (process.env.ZIDANE_DEBUG) process.stderr.write(`[zidane/anthropic] forced OAuth refresh after 401 failed: ${errorMessage(refreshErr)}\n`);
+			throw err;
+		}
+		if (refreshedApiKey === rejectedAccess) throw err;
+		call.live.apiKey = refreshedApiKey;
+		call.client = createClient(await loadAnthropicSdk(), call.live.apiKey, call.callAuth, call.anthropicParams?.baseURL, call.requestBetas, call.resolvedExtraHeaders, call.callIsOAuth ? call.diagnostic.wrapFetch : void 0);
+		return await runAnthropicStream(call, requestParams, fastRequested, scrubPass, authPass + 1);
+	}
+	if (fastRequested && !turn.observedOutput && shouldFallbackFromFastMode(err)) {
+		const standardParams = { ...requestParams };
+		delete standardParams.speed;
+		return await runAnthropicStream(call, standardParams, false, scrubPass, authPass);
+	}
+	if (call.bindingActive && !call.provider.thinkingBindingRejected && !turn.observedOutput && isThinkingBindingRejectedError(err)) {
+		call.provider.thinkingBindingRejected = true;
+		if (process.env.ZIDANE_DEBUG) process.stderr.write(`[zidane/anthropic] endpoint rejected thinking.block_binding; retrying without it: ${errorMessage(err)}\n`);
+		call.client = createClient(await loadAnthropicSdk(), call.live.apiKey, call.callAuth, call.anthropicParams?.baseURL, betasFor(call.anthropicParams, call.baseConditionalBetas), call.resolvedExtraHeaders, call.callIsOAuth ? call.diagnostic.wrapFetch : void 0);
+		return await runAnthropicStream(call, withoutThinkingBinding(requestParams), fastRequested, scrubPass, authPass);
+	}
+	if (!turn.observedOutput && isForcedToolChoice(requestParams.tool_choice) && isForcedToolChoiceUnsupportedError(err)) {
+		MODELS_REJECTING_FORCED_TOOL_CHOICE.add(call.modelId);
+		return await runAnthropicStream(call, withoutForcedToolChoice(requestParams), fastRequested, scrubPass, authPass);
+	}
+	if (!turn.observedOutput && isEnabledThinking(requestParams.thinking) && isEnabledThinkingUnsupportedError(err)) {
+		MODELS_REJECTING_ENABLED_THINKING.add(call.modelId);
+		return await runAnthropicStream(call, withoutEnabledThinking(requestParams), fastRequested, scrubPass, authPass);
+	}
+	throw err;
+}
+/** Fire the settled-stream hooks and map the final message to a `TurnResult`. */
+async function settleAnthropicStream(call, turn, response, fastRequested) {
+	if (turn.inputTransformations && turn.inputTransformations.length > 0) try {
+		call.callbacks.onInputTransformations?.(turn.inputTransformations);
+	} catch (hookErr) {
+		if (process.env.ZIDANE_DEBUG) process.stderr.write(`[zidane/anthropic] onInputTransformations threw: ${errorMessage(hookErr)}\n`);
+	}
+	const toolCalls = response.content.filter((b) => b.type === "tool_use").map((b) => ({
+		id: b.id,
+		name: call.nameBoundary.fromWire(b.name),
+		input: b.input
+	}));
+	const finishReason = mapStopReason(response.stop_reason);
+	const isPause = response.stop_reason === "pause_turn";
+	const rawUsage = {
+		input: response.usage.input_tokens,
+		output: response.usage.output_tokens,
+		cacheCreation: response.usage.cache_creation_input_tokens ?? void 0,
+		cacheRead: response.usage.cache_read_input_tokens ?? void 0,
+		...finishReason ? { finishReason } : {},
+		modelId: response.model ?? call.options.model
+	};
+	const usage = call.callIsOAuth ? rawUsage : await priceAnthropicUsage(rawUsage, response, call.modelId, fastRequested, Boolean(call.bedrockConfig), call.options.modelCatalog);
+	const assistantMessage = fromAnthropic({
+		role: "assistant",
+		content: response.content
+	});
+	if (call.nameBoundary.changed) assistantMessage.content = assistantMessage.content.map((block) => block.type === "tool_call" ? {
+		...block,
+		name: call.nameBoundary.fromWire(block.name)
+	} : block);
 	return {
-		messages: messages.map((message, index) => {
-			if (upToIndex !== void 0 && index > upToIndex && index !== alsoMessageIndex) return message;
-			if (!Array.isArray(message.content)) return message;
-			const content = message.content.filter((block) => {
-				if (block.type === "thinking" || block.type === "redacted_thinking") {
-					removed += 1;
-					return false;
-				}
-				return true;
-			});
-			return {
-				...message,
-				content: content.length > 0 ? content : [{
-					type: "text",
-					text: "[historical reasoning omitted]"
-				}]
-			};
-		}),
-		removed
+		assistantMessage,
+		text: turn.text,
+		toolCalls,
+		done: !isPause && (response.stop_reason === "end_turn" || toolCalls.length === 0),
+		usage
 	};
 }
+//#endregion
+//#region src/providers/anthropic.ts
 /**
 * Build a user `SessionMessage` from multimodal prompt parts.
 *
@@ -1711,15 +2277,12 @@ function anthropic(anthropicParams) {
 	const bedrockConfig = normalizeBedrock(anthropicParams?.bedrock);
 	const isOAuth = resolveAnthropicAuthShape(bedrockConfig ? "" : getConfiguredApiKey(anthropicParams), anthropicParams?.authMode).bearer;
 	const defaultModel = anthropicParams?.defaultModel || "claude-fable-5-1";
-	let runtimeCredentials = extractRuntimeCredentials(anthropicParams);
-	/**
-	* Set once this provider instance sees the endpoint reject the
-	* preserved-thinking binding beta or field; every later request on the
-	* instance skips both up front instead of paying the failing round-trip.
-	* Per instance, not process-wide: acceptance is a property of the
-	* endpoint + credential, and one process may hold several.
-	*/
-	let thinkingBindingRejected = false;
+	const state = {
+		anthropicParams,
+		bedrockConfig,
+		runtimeCredentials: extractRuntimeCredentials(anthropicParams),
+		thinkingBindingRejected: false
+	};
 	return {
 		name: "anthropic",
 		meta: {
@@ -1733,6 +2296,7 @@ function anthropic(anthropicParams) {
 				audio: false,
 				video: false,
 				...bedrockConfig ? {} : { nativeWebSearch: { maxUses: 5 } },
+				...bedrockConfig ? { maxMediaPerRequest: 20 } : {},
 				adaptiveBudgetIsEnvelope: true,
 				...anthropicParams?.capabilities
 			}
@@ -1740,7 +2304,8 @@ function anthropic(anthropicParams) {
 		formatTools(tools) {
 			const nativeWebSearch = this.meta.capabilities?.nativeWebSearch;
 			const hasWebSearch = !!nativeWebSearch && tools.some((t) => t.name === "web_search");
-			const out = sanitizeToolSpecs(hasWebSearch ? tools.filter((t) => t.name !== "web_search") : tools, { profile: "anthropic" }).map((t) => ({
+			const fnTools = hasWebSearch ? tools.filter((t) => t.name !== "web_search") : tools;
+			const out = sanitizeToolSpecs(fnTools, { profile: "anthropic" }).map((t) => ({
 				name: t.name,
 				description: t.description ?? "",
 				input_schema: t.inputSchema
@@ -1795,9 +2360,9 @@ function anthropic(anthropicParams) {
 				const apiKey = await resolveOAuthApiKey({
 					provider: identity.providerId,
 					providerId: identity.providerId,
-					params: runtimeCredentials ? {
+					params: state.runtimeCredentials ? {
 						...anthropicParams,
-						...runtimeCredentials
+						...state.runtimeCredentials
 					} : anthropicParams,
 					envKey: identity.envKey,
 					missingError: identity.missingError,
@@ -1806,25 +2371,7 @@ function anthropic(anthropicParams) {
 				const callAuth = resolveAnthropicAuthShape(apiKey, anthropicParams?.authMode);
 				const callIsOAuth = callAuth.claudeCode;
 				const client = createClient(SDK, apiKey, callAuth, anthropicParams?.baseURL, anthropicParams?.extraBetas, await resolveExtraHeaders(anthropicParams?.extraHeaders));
-				const wireSystem = renderSystemForWire(payload.system);
-				const system = callIsOAuth ? `You are Claude Code, Anthropic's official CLI for Claude.` : wireSystem;
-				const messages = callIsOAuth && payload.system ? [
-					{
-						role: "user",
-						content: [{
-							type: "text",
-							text: wireSystem
-						}]
-					},
-					{
-						role: "assistant",
-						content: [{
-							type: "text",
-							text: "Understood. I will proceed with these instructions above the rest of my system prompt."
-						}]
-					},
-					...payload.messages
-				] : [...payload.messages];
+				const { system, messages } = foldSystemForWire(payload.system, payload.messages, callIsOAuth);
 				const countTools = payload.tools;
 				const countBoundary = createToolNameBoundary(messages, countTools.map((t) => t.name), callIsOAuth ? claudeCodeToolAliases : void 0);
 				return (await client.messages.countTokens({
@@ -1841,381 +2388,12 @@ function anthropic(anthropicParams) {
 				return null;
 			}
 		},
-		async stream(options, callbacks) {
-			const diagnostic = createProviderDiagnosticTracker(callbacks.onDiagnostic, options.signal);
-			let diagnosticActive = false;
-			try {
-				let apiKey = "";
-				const resolveCallApiKey = async (forceRefresh = false, rejectedAccess) => {
-					const identity = credentialIdentity(anthropicParams);
-					return await resolveOAuthApiKey({
-						provider: identity.providerId,
-						providerId: identity.providerId,
-						params: runtimeCredentials ? {
-							...anthropicParams,
-							...runtimeCredentials
-						} : anthropicParams,
-						envKey: identity.envKey,
-						missingError: identity.missingError,
-						refreshError: identity.refreshError,
-						forceRefresh,
-						rejectedAccess
-					}, {
-						...callbacks,
-						onOAuthStage(stage) {
-							if (!callbacks.onDiagnostic || anthropicParams?.authMode === "api-key" || anthropicParams?.authMode === "bearer") return;
-							diagnosticActive = true;
-							diagnostic.stage(stage);
-						},
-						async onOAuthRefresh(ctx) {
-							if (ctx.source === "params") runtimeCredentials = {
-								access: ctx.credentials.access,
-								refresh: ctx.credentials.refresh,
-								expires: ctx.credentials.expires
-							};
-							await callbacks.onOAuthRefresh?.(ctx);
-						}
-					});
-				};
-				if (!bedrockConfig) apiKey = await resolveCallApiKey();
-				const callAuth = resolveAnthropicAuthShape(apiKey, bedrockConfig ? "api-key" : anthropicParams?.authMode);
-				const callIsOAuth = callAuth.claudeCode;
-				if (callIsOAuth && callbacks.onDiagnostic) {
-					diagnosticActive = true;
-					diagnostic.stage("prepare");
-				}
-				/**
-				* Whether a provider auth rejection on this call is worth ATTEMPTING one
-				* forced credential rotation. A bearer-authenticated call MAY resolve its
-				* token through the refreshable OAuth store — subscription OAuth and
-				* `authMode: 'bearer'` gateways (`extensions/bolt`) both do — so a 401
-				* arriving before the local expiry is recoverable for them. Deliberately
-				* WIDER than {@link callIsOAuth}, which additionally means "wear the
-				* Claude Code persona"; a gateway is not Claude Code but its token still
-				* rotates.
-				*
-				* The ones that cannot rotate stop at the identical-credential guard in
-				* the recovery below rather than being excluded here: a static bearer
-				* token supplied as `apiKey` short-circuits `resolveOAuthApiKey` and never
-				* reaches the store, so the re-resolve returns the same value and costs
-				* nothing but a function call. API-key and Bedrock calls never get that
-				* far — `callAuth.bearer` is false for both.
-				*/
-				const callCanRotateAuth = callAuth.bearer;
-				const effectiveCacheTtl = options.cacheTtl ?? (callIsOAuth ? "1h" : void 0);
-				const extendedTtl = options.cache !== false && effectiveCacheTtl === "1h" && !bedrockConfig;
-				const plan = planAnthropicThinking(options.thinking ?? "off", options.thinkingBudget, options.taskBudget, options.effortHint !== false);
-				const thinkingBinding = resolveThinkingBinding(anthropicParams?.thinkingBinding);
-				const bindingActive = plan !== null && !bedrockConfig && thinkingBinding !== "off" && !thinkingBindingRejected;
-				const baseConditionalBetas = [...options.modelOptions?.fast && !callIsOAuth ? [FAST_MODE_BETA] : [], ...extendedTtl ? [EXTENDED_CACHE_TTL_BETA] : []];
-				const conditionalBetas = [...baseConditionalBetas, ...bindingActive ? [THINKING_BINDING_BETA] : []];
-				const betasFor = (conditional) => conditional.length > 0 ? [...anthropicParams?.extraBetas ?? [], ...conditional] : anthropicParams?.extraBetas;
-				const requestBetas = betasFor(conditionalBetas);
-				const resolvedExtraHeaders = await resolveExtraHeaders(anthropicParams?.extraHeaders);
-				let client = bedrockConfig ? await createBedrockClient(bedrockConfig, anthropicParams, resolvedExtraHeaders) : createClient(await loadAnthropicSdk(), apiKey, callAuth, anthropicParams?.baseURL, requestBetas, resolvedExtraHeaders, callIsOAuth ? diagnostic.wrapFetch : void 0);
-				const wireSystem = renderSystemForWire(options.system);
-				const system = callIsOAuth ? `You are Claude Code, Anthropic's official CLI for Claude.` : wireSystem;
-				const messages = callIsOAuth && options.system ? [
-					{
-						role: "user",
-						content: [{
-							type: "text",
-							text: wireSystem
-						}]
-					},
-					{
-						role: "assistant",
-						content: [{
-							type: "text",
-							text: "Understood. I will proceed with these instructions above the rest of my system prompt."
-						}]
-					},
-					...options.messages
-				] : [...options.messages];
-				const inputTools = options.tools ?? [];
-				const nameBoundary = createToolNameBoundary(messages, inputTools.map((t) => t.name), callIsOAuth ? claudeCodeToolAliases : void 0);
-				const wireTools = nameBoundary.changed ? inputTools.map((t) => t.name === nameBoundary.toWire(t.name) ? t : {
-					...t,
-					name: nameBoundary.toWire(t.name)
-				}) : inputTools;
-				const modelId = options.model;
-				const modelMaxOutput = await resolveAnthropicMaxOutput(modelId, options.maxTokens, options.modelCatalog);
-				const params = {
-					...anthropicParams?.extraBodyParams ?? {},
-					model: modelId,
-					max_tokens: options.maxTokens ?? modelMaxOutput,
-					system,
-					tools: wireTools,
-					messages: nameBoundary.messages.map((m) => toAnthropic(m)),
-					stream: true
-				};
-				if (anthropicParams?.contextManagement && !bedrockConfig) params.context_management = anthropicParams.contextManagement;
-				if (options.cache !== false) applyAnthropicCacheBreakpoints(params, callIsOAuth ? void 0 : options.system, extendedTtl ? effectiveCacheTtl : void 0);
-				if (plan && bedrockConfig) {
-					const budget = plan.kind === "enabled" ? plan.budgetTokens : BEDROCK_THINKING_BUDGETS[plan.effort ?? "medium"];
-					params.thinking = {
-						type: "enabled",
-						budget_tokens: budget
-					};
-					params.max_tokens = budget + params.max_tokens;
-					params.temperature = 1;
-				} else if (plan) {
-					if (plan.kind === "enabled") {
-						params.thinking = {
-							type: "enabled",
-							budget_tokens: plan.budgetTokens,
-							display: "summarized"
-						};
-						params.max_tokens = plan.maxTokensBump + params.max_tokens;
-						if (plan.effort) params.output_config = {
-							...params.output_config,
-							effort: plan.effort
-						};
-					} else {
-						params.thinking = {
-							type: "adaptive",
-							display: "summarized"
-						};
-						const outputConfig = {};
-						if (plan.effort) outputConfig.effort = plan.effort;
-						if (typeof plan.taskBudgetTokens === "number" && plan.taskBudgetTokens > 0) outputConfig.task_budget = {
-							type: "tokens",
-							total: plan.taskBudgetTokens
-						};
-						if (Object.keys(outputConfig).length > 0) params.output_config = {
-							...params.output_config,
-							...outputConfig
-						};
-						if (typeof plan.maxTokensCap === "number" && plan.maxTokensCap > 0) params.max_tokens = Math.min(params.max_tokens, plan.maxTokensCap);
-					}
-					params.temperature = 1;
-					if (bindingActive) params.thinking.block_binding = { prefix_mismatch_behavior: thinkingBinding };
-				}
-				params.max_tokens = Math.min(params.max_tokens, modelMaxOutput);
-				if (callIsOAuth) {
-					params.max_tokens = Math.min(params.max_tokens, CLAUDE_CODE_MAX_OUTPUT_TOKENS);
-					if (Array.isArray(params.system)) params.system = [{
-						type: "text",
-						text: claudeCodeBillingText(firstUserMessageText(params.messages))
-					}, ...params.system];
-					if (typeof params.metadata?.user_id !== "string") params.metadata = {
-						...params.metadata,
-						user_id: claudeCodeUserId()
-					};
-				}
-				if (params.thinking?.type === "enabled" && params.thinking.budget_tokens >= params.max_tokens) {
-					const fitted = params.max_tokens - THINKING_RESPONSE_RESERVE_TOKENS;
-					if (fitted >= 1024) params.thinking.budget_tokens = fitted;
-					else {
-						delete params.thinking;
-						delete params.temperature;
-					}
-				}
-				if (options.modelOptions?.fast && !callIsOAuth) params.speed = "fast";
-				if (options.toolChoice) if (options.toolChoice.type === "tool" && options.toolChoice.name) params.tool_choice = {
-					type: "tool",
-					name: nameBoundary.toWire(options.toolChoice.name)
-				};
-				else if (options.toolChoice.type === "required") params.tool_choice = { type: "any" };
-				else params.tool_choice = { type: "auto" };
-				const promptCacheKey = resolvePromptCacheKey(anthropicParams?.promptCacheKey, {
-					model: modelId,
-					system: options.system,
-					messages: options.messages
-				});
-				if (promptCacheKey !== void 0 && params.metadata?.user_id === void 0) params.metadata = {
-					...params.metadata,
-					user_id: promptCacheKey
-				};
-				const affinityHeaderName = anthropicParams?.promptCacheKeyHeader?.toLowerCase();
-				const affinityHeader = anthropicParams?.promptCacheKeyHeader !== void 0 && promptCacheKey !== void 0 && !Object.keys(resolvedExtraHeaders ?? {}).some((k) => k.toLowerCase() === affinityHeaderName) ? { [anthropicParams.promptCacheKeyHeader]: promptCacheKey } : void 0;
-				const runStream = async (requestParams, fastRequested, scrubPass = 0, authPass = 0) => {
-					if (diagnosticActive) diagnostic.stage("dispatch");
-					const s = client.messages.stream(requestParams, {
-						signal: options.signal,
-						...affinityHeader ? { headers: affinityHeader } : {}
-					});
-					if (diagnosticActive) {
-						s.on("connect", () => diagnostic.stage("response-headers", {
-							httpStatus: s.response?.status,
-							upstreamRequestId: s.request_id
-						}));
-						let firstActivity = true;
-						s.on("streamEvent", () => {
-							if (!firstActivity) return;
-							firstActivity = false;
-							diagnostic.stage("first-activity");
-							diagnostic.stage("stream");
-						});
-					}
-					let text = "";
-					let observedOutput = false;
-					s.on("text", (delta) => {
-						observedOutput = true;
-						text += delta;
-						callbacks.onText(delta);
-					});
-					if (callbacks.onThinking) s.on("thinking", (delta) => {
-						observedOutput = true;
-						callbacks.onThinking(delta);
-					});
-					if (callbacks.onUsage) {
-						let live;
-						s.on("streamEvent", (event) => {
-							if (event.type === "message_start") {
-								const u = event.message.usage;
-								live = {
-									inputTokens: u.input_tokens ?? 0,
-									...u.cache_read_input_tokens != null ? { cacheRead: u.cache_read_input_tokens } : {},
-									...u.cache_creation_input_tokens != null ? { cacheCreation: u.cache_creation_input_tokens } : {},
-									...callIsOAuth ? { billable: false } : {}
-								};
-							} else if (event.type === "message_delta") live = {
-								...live ?? {
-									inputTokens: 0,
-									...callIsOAuth ? { billable: false } : {}
-								},
-								outputTokens: event.usage.output_tokens
-							};
-							else return;
-							callbacks.onUsage(live);
-						});
-					}
-					let inputTransformations;
-					if (callbacks.onInputTransformations) s.on("streamEvent", (event) => {
-						const list = (event.type === "message_start" ? event.message : event.type === "message_delta" ? event : void 0)?.input_transformations;
-						if (Array.isArray(list) && list.length > 0) inputTransformations = list.filter(isInputTransformation);
-					});
-					if (callbacks.onToolCallDelta) s.on("inputJson", () => {
-						observedOutput = true;
-						callbacks.onToolCallDelta();
-					});
-					if (callbacks.onServerToolUse || callbacks.onServerToolResult) s.on("contentBlock", (block) => {
-						observedOutput = true;
-						if (block.type === "server_tool_use") callbacks.onServerToolUse?.({
-							id: block.id,
-							name: block.name,
-							input: block.input ?? {}
-						});
-						else if (block.type === "web_search_tool_result") callbacks.onServerToolResult?.({
-							toolUseId: block.tool_use_id,
-							toolName: "web_search",
-							content: block.content
-						});
-					});
-					let response;
-					try {
-						response = await s.finalMessage();
-					} catch (err) {
-						if (!(bindingActive && thinkingBinding === "error" && isPrefixMismatchError(err)) && !observedOutput && scrubPass < MAX_THINKING_SCRUB_PASSES && isRecoverableThinkingBlockError(err, requestParams.messages)) {
-							const failingIndex = parseFailingMessageIndex(err);
-							const plan = planThinkingScrub(scrubPass, failingIndex, requestParams.messages);
-							const scrubbed = withoutHistoricalThinking(requestParams.messages, plan.upToIndex, plan.alsoMessageIndex);
-							if (scrubbed.removed > 0) {
-								try {
-									await callbacks.onHistoryRepair?.({
-										type: "invalid-anthropic-thinking-signature",
-										...failingIndex !== void 0 ? { wireMessageIndex: failingIndex } : {}
-									});
-								} catch (repairErr) {
-									if (process.env.ZIDANE_DEBUG) process.stderr.write(`[zidane/anthropic] history repair callback failed: ${errorMessage(repairErr)}\n`);
-								}
-								return await runStream({
-									...requestParams,
-									messages: scrubbed.messages
-								}, fastRequested, scrubPass + 1, authPass);
-							}
-						}
-						if (callCanRotateAuth && authPass === 0 && !observedOutput && isAnthropicAuthenticationError(err)) {
-							const rejectedAccess = apiKey;
-							let refreshedApiKey;
-							try {
-								refreshedApiKey = await resolveCallApiKey(true, rejectedAccess);
-							} catch (refreshErr) {
-								if (err !== null && typeof err === "object" && err.cause === void 0) try {
-									err.cause = refreshErr;
-								} catch {}
-								if (process.env.ZIDANE_DEBUG) process.stderr.write(`[zidane/anthropic] forced OAuth refresh after 401 failed: ${errorMessage(refreshErr)}\n`);
-								throw err;
-							}
-							if (refreshedApiKey === rejectedAccess) throw err;
-							apiKey = refreshedApiKey;
-							client = createClient(await loadAnthropicSdk(), apiKey, callAuth, anthropicParams?.baseURL, requestBetas, resolvedExtraHeaders, callIsOAuth ? diagnostic.wrapFetch : void 0);
-							return await runStream(requestParams, fastRequested, scrubPass, authPass + 1);
-						}
-						if (fastRequested && !observedOutput && shouldFallbackFromFastMode(err)) {
-							const standardParams = { ...requestParams };
-							delete standardParams.speed;
-							return await runStream(standardParams, false, scrubPass, authPass);
-						}
-						if (bindingActive && !thinkingBindingRejected && !observedOutput && isThinkingBindingRejectedError(err)) {
-							thinkingBindingRejected = true;
-							if (process.env.ZIDANE_DEBUG) process.stderr.write(`[zidane/anthropic] endpoint rejected thinking.block_binding; retrying without it: ${errorMessage(err)}\n`);
-							client = createClient(await loadAnthropicSdk(), apiKey, callAuth, anthropicParams?.baseURL, betasFor(baseConditionalBetas), resolvedExtraHeaders, callIsOAuth ? diagnostic.wrapFetch : void 0);
-							return await runStream(withoutThinkingBinding(requestParams), fastRequested, scrubPass, authPass);
-						}
-						if (!observedOutput && isForcedToolChoice(requestParams.tool_choice) && isForcedToolChoiceUnsupportedError(err)) {
-							MODELS_REJECTING_FORCED_TOOL_CHOICE.add(modelId);
-							return await runStream(withoutForcedToolChoice(requestParams), fastRequested, scrubPass, authPass);
-						}
-						if (!observedOutput && isEnabledThinking(requestParams.thinking) && isEnabledThinkingUnsupportedError(err)) {
-							MODELS_REJECTING_ENABLED_THINKING.add(modelId);
-							return await runStream(withoutEnabledThinking(requestParams), fastRequested, scrubPass, authPass);
-						}
-						throw err;
-					}
-					if (inputTransformations && inputTransformations.length > 0) try {
-						callbacks.onInputTransformations?.(inputTransformations);
-					} catch (hookErr) {
-						if (process.env.ZIDANE_DEBUG) process.stderr.write(`[zidane/anthropic] onInputTransformations threw: ${errorMessage(hookErr)}\n`);
-					}
-					const toolCalls = response.content.filter((b) => b.type === "tool_use").map((b) => ({
-						id: b.id,
-						name: nameBoundary.fromWire(b.name),
-						input: b.input
-					}));
-					const finishReason = mapStopReason(response.stop_reason);
-					const isPause = response.stop_reason === "pause_turn";
-					const rawUsage = {
-						input: response.usage.input_tokens,
-						output: response.usage.output_tokens,
-						cacheCreation: response.usage.cache_creation_input_tokens ?? void 0,
-						cacheRead: response.usage.cache_read_input_tokens ?? void 0,
-						...finishReason ? { finishReason } : {},
-						modelId: response.model ?? options.model
-					};
-					const usage = callIsOAuth ? rawUsage : await priceAnthropicUsage(rawUsage, response, modelId, fastRequested, Boolean(bedrockConfig), options.modelCatalog);
-					const assistantMessage = fromAnthropic({
-						role: "assistant",
-						content: response.content
-					});
-					if (nameBoundary.changed) assistantMessage.content = assistantMessage.content.map((block) => block.type === "tool_call" ? {
-						...block,
-						name: nameBoundary.fromWire(block.name)
-					} : block);
-					return {
-						assistantMessage,
-						text,
-						toolCalls,
-						done: !isPause && (response.stop_reason === "end_turn" || toolCalls.length === 0),
-						usage
-					};
-				};
-				let initialParams = isForcedToolChoice(params.tool_choice) && MODELS_REJECTING_FORCED_TOOL_CHOICE.has(modelId) ? withoutForcedToolChoice(params) : params;
-				if (isEnabledThinking(initialParams.thinking) && MODELS_REJECTING_ENABLED_THINKING.has(modelId)) initialParams = withoutEnabledThinking(initialParams);
-				const result = await runStream(initialParams, options.modelOptions?.fast === true && !callIsOAuth);
-				diagnostic.finish("success");
-				return result;
-			} catch (err) {
-				diagnostic.finish(options.signal?.aborted ? "abort" : "failure", { httpStatus: err && typeof err === "object" && "status" in err ? err.status : void 0 });
-				throw err;
-			} finally {
-				diagnostic.finish("failure");
-			}
+		stream(options, callbacks) {
+			return streamAnthropic(state, options, callbacks);
 		}
 	};
 }
 //#endregion
-export { FAST_MODE_OPTIONS as _, buildAnthropicClientOptions as a, credentialIdentity as c, resolveAnthropicAuthShape as d, resolveAnthropicBetas as f, ANTHROPIC_EXTRA_MODELS as g, sanitizeProviderDiagnosticMetadata as h, applyAnthropicCacheBreakpoints as i, defaultAnthropicMaxTokens as l, resolveThinkingBinding as m, THINKING_BINDING_SETTING_ENV as n, cacheWriteTtlMultiplier as o, resolveAnthropicMaxOutput as p, anthropic as r, classifyAnthropicError as s, EXTENDED_CACHE_TTL_BETA as t, planAnthropicThinking as u };
+export { resolveAnthropicBetas as _, FAST_MODE_OPTIONS as a, THINKING_BINDING_SETTING_ENV as c, EXTENDED_CACHE_TTL_BETA as d, applyAnthropicCacheBreakpoints as f, resolveAnthropicAuthShape as g, credentialIdentity as h, ANTHROPIC_EXTRA_MODELS as i, planAnthropicThinking as l, buildAnthropicClientOptions as m, sanitizeProviderDiagnosticMetadata as n, defaultAnthropicMaxTokens as o, classifyAnthropicError as p, cacheWriteTtlMultiplier as r, resolveAnthropicMaxOutput as s, anthropic as t, resolveThinkingBinding as u };
 
-//# sourceMappingURL=anthropic-C2aole0G.js.map
+//# sourceMappingURL=anthropic-CD00LhUP.js.map