Preserve host-owned executors and transports, make executor ownership atomic, roll back canceled starts, avoid persistence and hooks during runtime-only reconciliation, and prevent model projection without an executable provider.

Add scoped auto-refresh leases so EmbeddedRuntime can start and drain refresh workers without stopping host-owned loops or selectors.

Add a headless resolved-execution facade that accepts host-authorized credential candidates and delegates transport, translation, retry, cooldown, and streaming behavior to CLIProxyAPI native executors and Manager semantics. Treat provider 400/422 responses as request-scoped so client errors do not rotate credentials or poison account health.\n\nValidated SDK/auth tests, race tests, and go vet.

Preserve host auth identity and transport policy while executing request-local provider candidates. Carry interceptor metadata safely, suppress duplicate usage publication, fence resolved executions during shutdown, and cover retry, streaming, and mutation isolation behavior.

Make embedded resolved streams cancelable during runtime shutdown, isolate nested interceptor metadata, and apply usage suppression at the manager boundary. Normalize requested model names in native translator responses so host-resolved physical models do not leak through OpenAI, Claude, or Codex protocols.

Route event-prefixed and Claude same-format SSE frames through canonical model normalization, deepen interceptor metadata isolation across typed containers, and make Antigravity test cleanup concurrency-safe so the full executor race suite is reliable.