@kontextmind/kxm 0.7.184 → 0.7.186

package/.claude-plugin/marketplace.json

@@ -11,7 +11,7 @@
       "name": "kxm",
       "source": "./plugins/kxm",
       "description": "Durable workflows, peer agents, and kxm tui",
-      "version": "0.7.184",
+      "version": "0.7.186",
       "category": "development",
       "tags": ["kxm", "multi-agent", "workflows", "mcp"]
     }

package/.kxm/README.md

@@ -37,7 +37,7 @@ Ids in this checkout follow one convention per kind:
 |---|---|---|
 | Role | The purpose: `planner`, `writer`, `reviewer-arch`, `reviewer-cli` | Unchanged |
 | Agent | The same id as its `role` | `planner`, `writer`, `reviewer-arch`, `reviewer-cli` |
-| Route | `<harness>-<model-slug>[-<provider>]`, with `.` written as `-` | `grok-grok-4-7`, `claude-fable`, `pi-qwen3-coder-plus-openrouter` |
+| Route | `<harness>-<model-slug>[-<provider>]`, with `.` written as `-` | `grok-grok-4-7`, `claude-fable`, `pi-qwen3-7-plus-openrouter` |
 | Workflow | `default`, `land`, or `<role>-only` | `default`, `land`, `writer-only`, `reviewer-arch-only`, `reviewer-cli-only` |
 | Agent step | The agent's role id | `writer`, `reviewer-arch`, `reviewer-cli` |
 

package/.kxm/roles/reviewer-cli.yaml

@@ -3,9 +3,12 @@ id: reviewer-cli
 purpose: reviewer-cli
 permission: read-only
 description: Independent CLI and docs critic.
-# codex-gpt-5-6-sol is the required cli critic. The Pi fallback is a different vendor.
+# codex-gpt-6-1-sol is the required cli critic. The Pi fallback is a different vendor.
+# codex-gpt-5-6-sol stays admitted as the last fallback.
 roster:
-  - route: codex-gpt-5-6-sol
+  - route: codex-gpt-6-1-sol
     effort: low
   - route: pi-qwen3-8-flash-openrouter
     effort: low
+  - route: codex-gpt-5-6-sol
+    effort: low

package/.kxm/roles/writer.yaml

@@ -10,7 +10,7 @@ description: Primary implementation agent.
 roster:
   - route: grok-grok-4-7
     effort: medium
-  - route: pi-qwen3-coder-plus-openrouter
+  - route: pi-qwen3-7-plus-openrouter
     effort: medium
   - route: agy-gemini-4-argon-high
     effort: medium

package/CHANGELOG.md

@@ -216,6 +216,24 @@ All notable user-facing changes are documented here. The project follows [Semant
 
 ### Changed
 
+- **Writer #2 is OpenRouter Qwen3.7 Plus.** `pi-qwen3-7-plus-openrouter`
+  (`openrouter/qwen/qwen3.7-plus`) replaces `pi-qwen3-coder-plus-openrouter`.
+  OpenRouter no longer lists `qwen/qwen3-coder-plus`. The live catalog on
+  2026-10-17 prices Qwen3.7 Plus at $0.32 input and $1.28 output per 1M
+  tokens, with a 1,000,000-token context and tool support. The old model
+  file stays `status: retired`, off every roster, and `qwen-openrouter-pi`
+  no longer resolves. `.kxm/prices.yaml` keeps the last Coder Plus row and
+  adds the Qwen3.7 Plus base tier. The dev helper's only Pi writer is
+  `openrouter/qwen/qwen3.7-plus`.
+- **The CLI critic is Codex GPT-6.1 Sol.** `codex-gpt-6-1-sol` is the
+  `reviewer-cli` primary (`codex` / `gpt-6.1-sol`, effort `low`).
+  `pi-qwen3-8-flash-openrouter` stays the other-vendor fallback, and
+  `codex-gpt-5-6-sol` stays admitted as the last fallback. Architecture
+  review stays `claude-fable`, then `pi-glm-5-3-flash-openrouter`. Pro is
+  the same model with reasoning mode `pro`, not a separate route. List
+  price is $2 / $10 per 1M tokens through 272,000 prompt tokens ($0.10
+  cached input, $2.50 cache write), then $4 / $15.
+
 - **The writer rotation's agy routes are Gemini 4 Argon.** `agy-gemini-4-argon-high`
   (alias `gemini-agy`) and `agy-gemini-4-argon-medium` are writer #3 and #4.
   `agy-gemini-3-8-flash-medium` stays #5 because Argon needs a paid Google AI

package/docs/contributing/assignment-runner.md

@@ -34,10 +34,10 @@ admits each route for specific roles and permissions:
 
 | Role | Admitted route (harness / model) | Vendor | Permission |
 |---|---|---|---|
-| `writer` | `grok` / `grok-4.7`; relief: `pi` / `openrouter/qwen/qwen3-coder-plus`; `agy` / `gemini-4-argon-high`, then `gemini-4-argon-medium`, then `gemini-3.8-flash-medium`, then `gemini-3.8-flash-high` | `xai`; `alibaba`; `google` | `edit` |
+| `writer` | `grok` / `grok-4.7`; relief: `pi` / `openrouter/qwen/qwen3.7-plus`; `agy` / `gemini-4-argon-high`, then `gemini-4-argon-medium`, then `gemini-3.8-flash-medium`, then `gemini-3.8-flash-high` | `xai`; `alibaba`; `google` | `edit` |
 | `planner` | `claude` / `fable` | `anthropic` | `read-only` |
 | `reviewer-arch` | `claude` / `fable` | `anthropic` | `read-only` |
-| `reviewer-cli` | `codex` / `gpt-5.6-sol` | `openai` | `read-only` |
+| `reviewer-cli` | `codex` / `gpt-6.1-sol`; fallback `pi` / `openrouter/qwen/qwen3.8-flash`, then `codex` / `gpt-5.6-sol` | `openai`; `alibaba`; `openai` | `read-only` |
 
 The policy itself enforces three rules. Critics are read-only. The two
 designated critics have different vendors. No admitted writer shares a vendor
@@ -347,7 +347,7 @@ and exits with status 2. It refuses when:
   segment must not be a braked native vendor (`x-ai`, `moonshotai` and
   `google-ai` count as `xai`, `moonshot` and `google`);
 - a Pi `edit` request comes from a role other than `experiment` or `writer`, or
-  a Pi writer asks for anything but `openrouter/qwen/qwen3-coder-plus` with
+  a Pi writer asks for anything but `openrouter/qwen/qwen3.7-plus` with
   `edit`;
 - the request asks for hooks or skills, sets `max_cost_usd` for a harness other
   than Claude, or sets `max_turns` for a harness other than Grok;

package/docs/contributing/ci-and-release.md

@@ -269,7 +269,7 @@ The real Pi smoke calls paid models, so it never runs by default. Its workflow,
 `KXM_SMOKE_RUNNER` names a runner with Pi credentials. Both smoke models run as
 long-lived Pi workers, so each must pass the Pi native-vendor brake: pick two
 non-native routes such as
-`openrouter/qwen/qwen3-coder-plus,openrouter/z-ai/glm-5.3-flash`, never `xai/…`
+`openrouter/qwen/qwen3.7-plus,openrouter/z-ai/glm-5.3-flash`, never `xai/…`
 or `anthropic/…`. The container smoke needs
 Docker, a `pass-cli` session and a local Pi model store. It keeps secrets in a
 mode-600 file inside a temporary directory; set `KXM_SMOKE_VAULT` to read keys

package/docs/contributing/harness-routing-internals.md

@@ -9,7 +9,7 @@ This page records how the KXM repository applies [harness routing](../reference/
 
 The files use one id shape per kind. A route id is `<harness>-<model-slug>[-<provider>]`, with `.` written as `-`. An agent id equals its role. A workflow id is `default`, `land`, or `<role>-only`. An agent step id equals that role.
 
-This checkout's routes are `grok-grok-4-7`, `pi-qwen3-coder-plus-openrouter`, `agy-gemini-4-argon-high`, `agy-gemini-4-argon-medium`, `agy-gemini-3-8-flash-medium`, `agy-gemini-3-8-flash-high`, `claude-fable`, `codex-gpt-5-6-sol`, `pi-qwen3-8-flash-openrouter`, and `pi-glm-5-3-flash-openrouter`. Agents are `planner`, `writer`, `reviewer-arch`, and `reviewer-cli`. `opus-claude` was removed because `opus` is not an admitted selector. `qwen-token-plan/*` and `zai-coding-cn/*` left the admitted list because those harnesses are not allowlisted; their `prices.yaml` rows stay. Old ids resolve as aliases. Every roster entry names an effort. `reviewer-arch` dispatches `claude-fable`. #343's architecture critic ran on opus because the justfile recipe review-arch hardcoded that model; the role file on that commit listed only `fable-claude`. The helper now refuses `opus`.
+This checkout's admitted routes are `grok-grok-4-7`, `pi-qwen3-7-plus-openrouter`, `agy-gemini-4-argon-high`, `agy-gemini-4-argon-medium`, `agy-gemini-3-8-flash-medium`, `agy-gemini-3-8-flash-high`, `claude-fable`, `codex-gpt-6-1-sol`, `codex-gpt-5-6-sol`, `pi-qwen3-8-flash-openrouter`, and `pi-glm-5-3-flash-openrouter`. `pi-qwen3-coder-plus-openrouter` stays on disk with `status: retired` because OpenRouter removed `qwen/qwen3-coder-plus` (catalog 404); it is not admitted and not on a roster, and `qwen-openrouter-pi` does not resolve. Agents are `planner`, `writer`, `reviewer-arch`, and `reviewer-cli`. `opus-claude` was removed because `opus` is not an admitted selector. `qwen-token-plan/*` and `zai-coding-cn/*` left the admitted list because those harnesses are not allowlisted; their `prices.yaml` rows stay. Other old ids resolve as aliases. Every roster entry names an effort. `reviewer-arch` dispatches `claude-fable`. #343's architecture critic ran on opus because the justfile recipe review-arch hardcoded that model; the role file on that commit listed only `fable-claude`. The helper now refuses `opus`.
 
 ## This checkout's routes and roster
 
@@ -25,7 +25,7 @@ skills: []
 roster:
   - route: grok-grok-4-7
     effort: medium
-  - route: pi-qwen3-coder-plus-openrouter
+  - route: pi-qwen3-7-plus-openrouter
     effort: medium
   - route: agy-gemini-4-argon-high
     effort: medium
@@ -37,7 +37,7 @@ roster:
     effort: medium
 ```
 
-The writer role lists route ids, in order: `grok-grok-4-7`, then `pi-qwen3-coder-plus-openrouter`, then `agy-gemini-4-argon-high`, `agy-gemini-4-argon-medium`, `agy-gemini-3-8-flash-medium`, and `agy-gemini-3-8-flash-high`. `grok-grok-4-7` is harness `grok`, model `grok-4.7`, vendor `xai`. An agent file does not declare `harness:`. Argon is writer #3 and #4. Flash medium is the safety net because Argon needs a paid Google AI Pro, Ultra, or Enterprise plan and `agy -p` exits when the pinned model is missing. Flash high stays on the roster so that admitted model file is still used. Planner and reviewer primaries stay `claude-fable` and `codex-gpt-5-6-sol`. Argon can serve as a planner or architecture-review fallback; it is not on those rosters.
+The writer role lists route ids, in order: `grok-grok-4-7`, then `pi-qwen3-7-plus-openrouter`, then `agy-gemini-4-argon-high`, `agy-gemini-4-argon-medium`, `agy-gemini-3-8-flash-medium`, and `agy-gemini-3-8-flash-high`. `grok-grok-4-7` is harness `grok`, model `grok-4.7`, vendor `xai`. An agent file does not declare `harness:`. Argon is writer #3 and #4. Flash medium is the safety net because Argon needs a paid Google AI Pro, Ultra, or Enterprise plan and `agy -p` exits when the pinned model is missing. Flash high stays on the roster so that admitted model file is still used. The planner primary stays `claude-fable`. The CLI critic primary is `codex-gpt-6-1-sol`, then `pi-qwen3-8-flash-openrouter`, then `codex-gpt-5-6-sol`. The architecture critic primary stays `claude-fable`, then `pi-glm-5-3-flash-openrouter`. Argon can serve as a planner or architecture-review fallback; it is not on those rosters. GPT-6.1 Sol Pro is the same model with reasoning mode `pro`. The route id does not carry a reasoning mode, role effort has no `pro` value, and codex is limited to `reviewer-cli`, so that mode is not an architecture fallback.
 
 `node scripts/kxm.mjs routes list`:
 
@@ -48,7 +48,8 @@ admitted google/gemini-3.8-flash-medium
 admitted google/gemini-4-argon-high
 admitted google/gemini-4-argon-medium
 admitted openai/gpt-5.6-sol
-admitted openrouter/qwen/qwen3-coder-plus
+admitted openai/gpt-6.1-sol
+admitted openrouter/qwen/qwen3.7-plus
 admitted openrouter/qwen/qwen3.8-flash
 admitted openrouter/z-ai/glm-5.3-flash
 admitted xai/grok-4.7
@@ -56,17 +57,18 @@ planner claude-fable
 planner pi-qwen3-8-flash-openrouter
 reviewer-arch claude-fable
 reviewer-arch pi-glm-5-3-flash-openrouter
-reviewer-cli codex-gpt-5-6-sol
+reviewer-cli codex-gpt-6-1-sol
 reviewer-cli pi-qwen3-8-flash-openrouter
+reviewer-cli codex-gpt-5-6-sol
 writer grok-grok-4-7
-writer pi-qwen3-coder-plus-openrouter
+writer pi-qwen3-7-plus-openrouter
 writer agy-gemini-4-argon-high
 writer agy-gemini-4-argon-medium
 writer agy-gemini-3-8-flash-medium
 writer agy-gemini-3-8-flash-high
 ```
 
-`routes admit --model openrouter/qwen/qwen3-coder-plus --dry-run` exits 2 with `select a model from the refreshed inventory` even though that selector is already admitted, because the inventory never carries `openrouter/…` selectors. Selectors like these are admitted by a Git-reviewed edit of `.kxm/routes.yaml`.
+`routes admit --model openrouter/qwen/qwen3.7-plus --dry-run` exits 2 with `select a model from the refreshed inventory` even though that selector is already admitted, because the inventory never carries `openrouter/…` selectors. Selectors like these are admitted by a Git-reviewed edit of `.kxm/routes.yaml`.
 
 On the capture machine, `kxm harness list` showed `claude` detected but logged out (`dispatch no (not_authenticated)`), `deepseek` not installed, and `grok`, `codex`, `kimi` and `agy` ready.
 
@@ -83,9 +85,9 @@ The issue-127 runner (`kxm assign`, see the [assignment runner](assignment-runne
     harness: grok
     model: grok-4.7
     vendor: xai
-  pi-qwen3-coder-plus-openrouter:
+  pi-qwen3-7-plus-openrouter:
     harness: pi
-    model: openrouter/qwen/qwen3-coder-plus
+    model: openrouter/qwen/qwen3.7-plus
     vendor: alibaba
 ```
 
@@ -106,7 +108,7 @@ The product layers are in [What the brake refuses](../reference/harness-routing.
 
 | Layer | Where | What it refuses | What you see |
 |---|---|---|---|
-| Dev helper | `scripts/harness-run.mjs` | A braked Pi provider, a Pi provider outside the allowlist, a Pi writer other than `openrouter/qwen/qwen3-coder-plus`, or an aggregator id whose vendor segment is a native vendor | `pi brake: xai has a native harness; refusing Pi impersonation`, or `… refusing to bill it through openrouter` |
+| Dev helper | `scripts/harness-run.mjs` | A braked Pi provider, a Pi provider outside the allowlist, a Pi writer other than `openrouter/qwen/qwen3.7-plus`, or an aggregator id whose vendor segment is a native vendor | `pi brake: xai has a native harness; refusing Pi impersonation`, or `… refusing to bill it through openrouter` |
 | Developer roster | `scripts/roster-policy.mjs` | An aggregator route whose vendor segment is a native vendor | `Roster policy refused: native vendor cannot use Pi` |
 
 The dev helper's allowlist (`openrouter`, `nous-portal`, `antigravity`) is a different list from `PI_ALLOWED_PROVIDERS` in `plugins/kxm/src/harness.ts`, which gates nothing. Which of the two should govern is an open decision (Tracking → Still open). Edit permission exists only in the dev helper, and only for admitted writer or experiment routes. The helper accepts only a ChatGPT login for codex, not an API key.
@@ -127,18 +129,18 @@ These extend the generic examples on the reference page with this checkout's adm
 | Billing | grok.com subscription (OAuth) | $2.00 input, $6.00 output, $0.50 cached input |
 | Context | 500,000 (`x-ai/grok-4.7` in the refreshed inventory) | 500,000 |
 
-Pi's own `xai` provider reported `ready` (OAuth) on the capture machine. When the grok quota runs out, the next writer in the lineup is `pi-qwen3-coder-plus-openrouter`, a different vendor.
+Pi's own `xai` provider reported `ready` (OAuth) on the capture machine. When the grok quota runs out, the next writer in the lineup is `pi-qwen3-7-plus-openrouter`, a different vendor.
 
-### GPT-5.6 Sol
+### GPT-6.1 Sol
 
 | | Native `codex` | Pi + OpenRouter |
 |---|---|---|
-| Selector | `openai/gpt-5.6-sol`: admitted, the CLI critic | `openrouter/openai/gpt-5.6-sol`: not admitted |
-| Developer roster | `codex-gpt-5-6-sol`: `reviewer-cli`, `read-only` | Refused |
-| Billing | ChatGPT subscription | $4.00 input, $20.00 output, $0.40 cached input |
-| Context | Pi's `openai-codex` row, the same ChatGPT backend, lists 272K | 1,050,000 |
+| Selector | `openai/gpt-6.1-sol`: admitted, the CLI critic | `openrouter/openai/gpt-6.1-sol`: not admitted |
+| Developer roster | `codex-gpt-6-1-sol`: `reviewer-cli` primary, `read-only`, effort `low` | Refused |
+| Billing | ChatGPT subscription. List price $2.00 input, $10.00 output, $0.10 cached input, $2.50 cache write through 272,000 prompt tokens, then $4.00 / $15.00 | Same per-token list price. OpenRouter's `openai/gpt-6.1-sol-pro` row is reasoning mode `pro`, not a second model |
+| Context | 1,050,000 (922,000 max input, 128,000 max output). Reasoning is mandatory | 1,050,000 |
 
-In the inventory, `openai/gpt-5.6-sol` has sources `openrouter+nous` and carries OpenRouter prices. `pi auth check --provider openai-codex` reported `ready` on the capture machine.
+`codex-gpt-5-6-sol` stays on the `reviewer-cli` roster after the Qwen fallback. Its selector `openai/gpt-5.6-sol` stays admitted. OpenRouter lists that model at $4.00 input, $20.00 output, and $0.40 cached input. `pi auth check --provider openai-codex` reported `ready` on the capture machine. That readiness is not permission to bill OpenAI through Pi.
 
 ### Claude Fable
 
@@ -175,11 +177,11 @@ The code differs from that decision: `.kxm/routes.yaml` admits `google/gemini-3.
 | Model | Vendor-plan route | OpenRouter route | Notes |
 |---|---|---|---|
 | Qwen3.8 Flash | `qwen-token-plan/qwen3.8-flash`: removed from the admitted list on 2026-09-27; `qwen-token-plan` is not allowlisted | `openrouter/qwen/qwen3.8-flash`: admitted, route `pi-qwen3-8-flash-openrouter`, read-only fallback for planner and reviewer-cli | `prices.yaml` keeps both rows. |
-| Qwen3 Coder Plus | none | `openrouter/qwen/qwen3-coder-plus`: route `pi-qwen3-coder-plus-openrouter` | The only admitted Pi writer: exact model, `edit` permission. |
+| Qwen3.7 Plus | none | `openrouter/qwen/qwen3.7-plus`: route `pi-qwen3-7-plus-openrouter`, writer #2 | The only admitted Pi writer: exact model, `edit` permission. OpenRouter list on 2026-10-17 is $0.32 input and $1.28 output per 1M tokens, 1,000,000 context, tools supported. |
 | GLM 5.3 and 5.3 Flash | `zai-coding-cn/glm-5.3` and `…/glm-5.3-flash`: removed from the admitted list on 2026-09-27; `zai-coding-cn` is not allowlisted | `openrouter/z-ai/glm-5.3-flash`: admitted, route `pi-glm-5-3-flash-openrouter`, read-only fallback for reviewer-arch | Z.ai has no native harness. |
 | DeepSeek V4.1 Flash | `qwen-token-plan/deepseek-v4.1-flash`: removed from the admitted list on 2026-09-27 | `deepseek/deepseek-v4.1-flash` in the OpenRouter feed | Bills a DeepSeek model through Alibaba's plan. `deepseek` is a native-vendor Pi brake, so this is not a route. |
 
-The developer runner is stricter. Its only Pi writer is `openrouter/qwen/qwen3-coder-plus`, and it does not allowlist `qwen-token-plan` or `zai-coding-cn`. Today OpenRouter is the right answer here for Qwen3 Coder Plus, Qwen3.8 Flash and GLM 5.3 Flash.
+The developer runner is stricter. Its only Pi writer is `openrouter/qwen/qwen3.7-plus`, and it does not allowlist `qwen-token-plan` or `zai-coding-cn`. Today OpenRouter is the right answer here for Qwen3.7 Plus, Qwen3.8 Flash and GLM 5.3 Flash. `qwen/qwen3-coder-plus` is retired.
 
 ### Nous
 

package/docs/glossary.md

@@ -427,7 +427,7 @@ A list of allowed models. It means either a [role](#role)'s roster, or the devel
 
 ### Route
 
-A model selector, such as `xai/grok-4.6` or `openrouter/qwen/qwen3-coder-plus`, that a step can run on. The harness that runs it comes from the agent or the project default. See [Harness routing](reference/harness-routing.md).
+A model selector, such as `xai/grok-4.6` or `openrouter/qwen/qwen3.7-plus`, that a step can run on. The harness that runs it comes from the agent or the project default. See [Harness routing](reference/harness-routing.md).
 
 ### Session
 

package/docs/guides/governed-skills.md

@@ -61,7 +61,7 @@ Write the procedure as a Markdown file. KXM adds `name` and `description` front
 ```bash
 kxm skills create --file flaky.md --name "Triage flaky test" \
   --description "Isolate and classify a flaky test before changing code" \
-  --created-by agent-a --harness pi --models openrouter/qwen/qwen3-coder-plus \
+  --created-by agent-a --harness pi --models openrouter/qwen/qwen3.7-plus \
   --journal journal_abc
 ```
 

package/docs/guides/pi-workers.md

@@ -82,7 +82,7 @@ When no unused fallback remains, the worker waits `KXM_WORKER_PROVIDER_RETRY_MS`
 > [!IMPORTANT]
 > A worker refuses to start on a model whose vendor has its own native harness. Before Pi starts, the worker runs `--model` and every `--fallback-models` entry through the Pi native-vendor brake, and exits 1 with `pi_native_impersonation_blocked` on the first one it refuses: a native provider (`xai/…`), that vendor's own Pi provider (`openai-codex/…`, `kimi-coding/…`), or an aggregator path to it (`openrouter/x-ai/…`). `--dry-run` does not run this check.
 
-Pick every model with [Harness routing](../reference/harness-routing.md), for example `openrouter/qwen/qwen3-coder-plus` with the fallback `openrouter/z-ai/glm-5.3-flash`. The brake cannot check a worker started without `--model`, which runs Pi's default model, or a bare model id that lets Pi choose the provider, so name the provider.
+Pick every model with [Harness routing](../reference/harness-routing.md), for example `openrouter/qwen/qwen3.7-plus` with the fallback `openrouter/z-ai/glm-5.3-flash`. The brake cannot check a worker started without `--model`, which runs Pi's default model, or a bare model id that lets Pi choose the provider, so name the provider.
 
 An agent name is only a label. To use a native-harness model as a peer, connect that harness to the hub under the agent name instead, for example the Claude Code plugin with the name `reviewer-claude`.
 
@@ -203,7 +203,7 @@ kxm hub stop
 | `KXM worker <project>/<name> is already managed by PID <pid>` | A supervisor for this agent is already running. | Use the running worker, or stop it first. |
 | The worker exits with `worker requires --name and --project` | Name or project missing. | Pass `--name` and `--project`, or set `KXM_AGENT_NAME` and `KXM_PROJECT`. |
 | `KXM_WORKER_FALLBACK_MODELS requires KXM_WORKER_MODEL` | Fallbacks without a primary model. | Add `--model`. |
-| The worker exits 1 with `pi_native_impersonation_blocked: …` | `--model` or a fallback is a model whose vendor has its own harness. | Run that model in its native harness, or use an admitted Pi route such as `openrouter/qwen/qwen3-coder-plus`. |
+| The worker exits 1 with `pi_native_impersonation_blocked: …` | `--model` or a fallback is a model whose vendor has its own harness. | Run that model in its native harness, or use an admitted Pi route such as `openrouter/qwen/qwen3.7-plus`. |
 | `kxm connection failed` in the Pi log, or Pi shows `hub:off` | Wrong URL, token, or project, or the name is live elsewhere (`duplicate_agent_name`). | Compare `KXM_SERVER_URL`, `KXM_AUTH_TOKEN`, and `KXM_PROJECT` with the hub; check `kxm peer list`. |
 | Workflow runs share one conversation | Isolation is `off`, the default. | Restart with `--session-isolation workflow`. |
 | A request stays `delivered` | A turn, tool, or provider call is still running, or the watchdogs are recovering it. | Read the lifecycle log. Do not send a duplicate. |

package/docs/guides/provenance-gates.md

@@ -173,7 +173,7 @@ kxm agent worker --name reviewer-grok --project provenance-demo --model <reviewe
 </details>
 
 > [!IMPORTANT]
-> The reviewer names are labels. Choose every Pi model with [Harness routing](../reference/harness-routing.md), for example `openrouter/qwen/qwen3-coder-plus` and `openrouter/z-ai/glm-5.3-flash` for two reviewers from different vendors. A worker refuses a model whose vendor has its own native harness, such as Anthropic or xAI, with `pi_native_impersonation_blocked`. To use such a model as a reviewer, connect its native harness under the same agent name instead, for example the Claude Code plugin as `reviewer-claude`.
+> The reviewer names are labels. Choose every Pi model with [Harness routing](../reference/harness-routing.md), for example `openrouter/qwen/qwen3.7-plus` and `openrouter/z-ai/glm-5.3-flash` for two reviewers from different vendors. A worker refuses a model whose vendor has its own native harness, such as Anthropic or xAI, with `pi_native_impersonation_blocked`. To use such a model as a reviewer, connect its native harness under the same agent name instead, for example the Claude Code plugin as `reviewer-claude`.
 
 In an operator terminal, supply the workflow-start secret, validate the definition, and create a run:
 

package/docs/operations/troubleshooting.md

@@ -134,7 +134,7 @@ The [plugin troubleshooting guide](../../plugins/kxm/README.md#troubleshooting)
 | The heartbeat is healthy but one tool never finishes | A tool exceeded `KXM_WORKER_TOOL_TIMEOUT_MS` (31 minutes by default, above the 30-minute fanout wait) | The worker logs `worker_tool_timeout` and restarts the child; raise the limit only above the longest legitimate call |
 | A long-lived worker keeps restarting | Pi is missing from the service `PATH`, the working directory is gone, or model credentials are missing | Read `worker_process_error` and `worker_exited`; set `KXM_PI_COMMAND` to an explicit path |
 | A read-only reviewer edits files | Prompt wording does not remove tools | Set `KXM_WORKER_TOOLS=read,grep,find,ls` |
-| The worker exits at once with `pi_native_impersonation_blocked` | `--model` or a `--fallback-models` entry is a model whose vendor has its own harness, such as `xai/…`, `openai-codex/…` or `openrouter/x-ai/…` | Run that model in its native harness, or pick an admitted Pi route such as `openrouter/qwen/qwen3-coder-plus`; see [Harness routing](../reference/harness-routing.md#what-the-brake-refuses) |
+| The worker exits at once with `pi_native_impersonation_blocked` | `--model` or a `--fallback-models` entry is a model whose vendor has its own harness, such as `xai/…`, `openai-codex/…` or `openrouter/x-ai/…` | Run that model in its native harness, or pick an admitted Pi route such as `openrouter/qwen/qwen3.7-plus`; see [Harness routing](../reference/harness-routing.md#what-the-brake-refuses) |
 
 Use `--fresh-start`, not `--no-continue`, when only the first launch must avoid old session state.
 

package/docs/reference/cli-reference.md

@@ -1156,7 +1156,8 @@ admitted google/gemini-3.8-flash-medium
 admitted google/gemini-4-argon-high
 admitted google/gemini-4-argon-medium
 admitted openai/gpt-5.6-sol
-admitted openrouter/qwen/qwen3-coder-plus
+admitted openai/gpt-6.1-sol
+admitted openrouter/qwen/qwen3.7-plus
 admitted openrouter/qwen/qwen3.8-flash
 admitted openrouter/z-ai/glm-5.3-flash
 admitted xai/grok-4.7
@@ -1164,10 +1165,11 @@ planner claude-fable
 planner pi-qwen3-8-flash-openrouter
 reviewer-arch claude-fable
 reviewer-arch pi-glm-5-3-flash-openrouter
-reviewer-cli codex-gpt-5-6-sol
+reviewer-cli codex-gpt-6-1-sol
 reviewer-cli pi-qwen3-8-flash-openrouter
+reviewer-cli codex-gpt-5-6-sol
 writer grok-grok-4-7
-writer pi-qwen3-coder-plus-openrouter
+writer pi-qwen3-7-plus-openrouter
 writer agy-gemini-4-argon-high
 writer agy-gemini-4-argon-medium
 writer agy-gemini-3-8-flash-medium
@@ -1179,7 +1181,7 @@ kxm routes list --json
 ```
 
 ```text
-{"schema":"kxm.cli-result.v1","ok":true,"command":"routes list","policy":{"schema":"kxm.routes.v2","updatedAt":"2026-10-17T00:00:00.000Z","admitted":["anthropic/fable","google/gemini-3.8-flash-high","google/gemini-3.8-flash-medium","google/gemini-4-argon-high","google/gemini-4-argon-medium","openai/gpt-5.6-sol","openrouter/qwen/qwen3-coder-plus","openrouter/qwen/qwen3.8-flash","openrouter/z-ai/glm-5.3-flash","xai/grok-4.7"],"disabled":[]},"membership":["planner claude-fable","planner pi-qwen3-8-flash-openrouter","reviewer-arch claude-fable","reviewer-arch pi-glm-5-3-flash-openrouter","reviewer-cli codex-gpt-5-6-sol","reviewer-cli pi-qwen3-8-flash-openrouter","writer grok-grok-4-7","writer pi-qwen3-coder-plus-openrouter","writer agy-gemini-4-argon-high","writer agy-gemini-4-argon-medium","writer agy-gemini-3-8-flash-medium","writer agy-gemini-3-8-flash-high"]}
+{"schema":"kxm.cli-result.v1","ok":true,"command":"routes list","policy":{"schema":"kxm.routes.v2","updatedAt":"2026-10-17T14:30:00.000Z","admitted":["anthropic/fable","google/gemini-3.8-flash-high","google/gemini-3.8-flash-medium","google/gemini-4-argon-high","google/gemini-4-argon-medium","openai/gpt-5.6-sol","openai/gpt-6.1-sol","openrouter/qwen/qwen3.7-plus","openrouter/qwen/qwen3.8-flash","openrouter/z-ai/glm-5.3-flash","xai/grok-4.7"],"disabled":[]},"membership":["planner claude-fable","planner pi-qwen3-8-flash-openrouter","reviewer-arch claude-fable","reviewer-arch pi-glm-5-3-flash-openrouter","reviewer-cli codex-gpt-6-1-sol","reviewer-cli pi-qwen3-8-flash-openrouter","reviewer-cli codex-gpt-5-6-sol","writer grok-grok-4-7","writer pi-qwen3-7-plus-openrouter","writer agy-gemini-4-argon-high","writer agy-gemini-4-argon-medium","writer agy-gemini-3-8-flash-medium","writer agy-gemini-3-8-flash-high"]}
 ```
 
 ### `kxm routes count`
@@ -1384,7 +1386,7 @@ kxm role get writer --json
 ```
 
 ```text
-{"schema":"kxm.cli-result.v1","ok":true,"command":"role get","roleId":"writer","scope":"local","filePath":"/work/kxm/.kxm/roles/writer.yaml","role":{"schema":"kxm.role.v2","id":"writer","purpose":"writer","permission":"edit","description":"Primary implementation agent.","skills":[],"roster":[{"route":"grok-grok-4-7","effort":"medium"},{"route":"pi-qwen3-coder-plus-openrouter","effort":"medium"},{"route":"agy-gemini-4-argon-high","effort":"medium"},{"route":"agy-gemini-4-argon-medium","effort":"medium"},{"route":"agy-gemini-3-8-flash-medium","effort":"medium"},{"route":"agy-gemini-3-8-flash-high","effort":"medium"}]}}
+{"schema":"kxm.cli-result.v1","ok":true,"command":"role get","roleId":"writer","scope":"local","filePath":"/work/kxm/.kxm/roles/writer.yaml","role":{"schema":"kxm.role.v2","id":"writer","purpose":"writer","permission":"edit","description":"Primary implementation agent.","skills":[],"roster":[{"route":"grok-grok-4-7","effort":"medium"},{"route":"pi-qwen3-7-plus-openrouter","effort":"medium"},{"route":"agy-gemini-4-argon-high","effort":"medium"},{"route":"agy-gemini-4-argon-medium","effort":"medium"},{"route":"agy-gemini-3-8-flash-medium","effort":"medium"},{"route":"agy-gemini-3-8-flash-high","effort":"medium"}]}}
 ```
 
 Captured from this checkout with `node scripts/kxm.mjs role get writer --json`. The path is shortened to `/work/kxm`.
@@ -1394,7 +1396,7 @@ kxm role modify writer --add-skill kxm --dry-run --json
 ```
 
 ```text
-{"schema":"kxm.cli-result.v1","ok":true,"command":"role modify","roleId":"writer","id":"writer","role":{"schema":"kxm.role.v2","id":"writer","purpose":"writer","permission":"edit","description":"Primary implementation agent.","skills":["kxm"],"roster":[{"route":"grok-grok-4-7","effort":"medium"},{"route":"pi-qwen3-coder-plus-openrouter","effort":"medium"},{"route":"agy-gemini-4-argon-high","effort":"medium"},{"route":"agy-gemini-4-argon-medium","effort":"medium"},{"route":"agy-gemini-3-8-flash-medium","effort":"medium"},{"route":"agy-gemini-3-8-flash-high","effort":"medium"}]},"filePath":"/work/kxm/.kxm/roles/writer.yaml","scope":"local","dryRun":true,"planned":[{"action":"write","target":"/work/kxm/.kxm/roles/writer.yaml"}]}
+{"schema":"kxm.cli-result.v1","ok":true,"command":"role modify","roleId":"writer","id":"writer","role":{"schema":"kxm.role.v2","id":"writer","purpose":"writer","permission":"edit","description":"Primary implementation agent.","skills":["kxm"],"roster":[{"route":"grok-grok-4-7","effort":"medium"},{"route":"pi-qwen3-7-plus-openrouter","effort":"medium"},{"route":"agy-gemini-4-argon-high","effort":"medium"},{"route":"agy-gemini-4-argon-medium","effort":"medium"},{"route":"agy-gemini-3-8-flash-medium","effort":"medium"},{"route":"agy-gemini-3-8-flash-high","effort":"medium"}]},"filePath":"/work/kxm/.kxm/roles/writer.yaml","scope":"local","dryRun":true,"planned":[{"action":"write","target":"/work/kxm/.kxm/roles/writer.yaml"}]}
 ```
 
 Add an existing route to a role's roster (Not run):
@@ -2012,11 +2014,11 @@ Starts a long-lived, supervised Pi RPC worker in the foreground through `scripts
 - Needs Pi and a reachable hub. Runs until stopped (`kxm hub stop` stops managed workers too). The exit code is the worker's.
 - A name and project are required (exit 2 otherwise); an invalid isolation mode exits 2.
 - `--dry-run` prints a `kxm.worker-result.v1` envelope with `workspace`, `name`, `project`, `model`, `fallbackModels`, `tools`, `sessionIsolation`, `continue`, `freshStart`.
-- Before Pi starts, the worker runs `--model` and every `--fallback-models` entry through the Pi native-vendor brake. A model whose vendor has its own harness (for example `xai/…`, `openai-codex/…`, `openrouter/x-ai/…` or `antigravity/claude-…`) exits 1 with `pi_native_impersonation_blocked: <message>` on stderr; use the native harness, or an admitted Pi route such as `openrouter/qwen/qwen3-coder-plus`. `--dry-run` does not run this check. See [Harness routing](harness-routing.md#what-the-brake-refuses).
+- Before Pi starts, the worker runs `--model` and every `--fallback-models` entry through the Pi native-vendor brake. A model whose vendor has its own harness (for example `xai/…`, `openai-codex/…`, `openrouter/x-ai/…` or `antigravity/claude-…`) exits 1 with `pi_native_impersonation_blocked: <message>` on stderr; use the native harness, or an admitted Pi route such as `openrouter/qwen/qwen3.7-plus`. `--dry-run` does not run this check. See [Harness routing](harness-routing.md#what-the-brake-refuses).
 - The remaining worker variables are described in [Long-lived worker settings](configuration.md#long-lived-worker-settings).
 
 ```bash
-kxm agent worker --name reviewer --project demo --model openrouter/qwen/qwen3-coder-plus --tools read,grep,find,ls --session-isolation workflow --fresh-start --dry-run
+kxm agent worker --name reviewer --project demo --model openrouter/qwen/qwen3.7-plus --tools read,grep,find,ls --session-isolation workflow --fresh-start --dry-run
 ```
 
 ```text
@@ -2024,7 +2026,7 @@ would start worker
 ```
 
 ```bash
-kxm agent worker --name coordinator --project demo --model openrouter/qwen/qwen3-coder-plus --session-isolation workflow
+kxm agent worker --name coordinator --project demo --model openrouter/qwen/qwen3.7-plus --session-isolation workflow
 ```
 
 Not run: starts a long-lived Pi worker.
@@ -3360,7 +3362,7 @@ Submit a skill candidate from verified episodes.
 - Writes a candidate. Honors `--dry-run`. JSON keys: `metadata` (or `name` for a dry run).
 
 ```bash
-kxm skills create --file SKILL.md --name retry-backoff --created-by alice --harness pi --models openrouter/qwen/qwen3-coder-plus --run wf_123 --dry-run --json
+kxm skills create --file SKILL.md --name retry-backoff --created-by alice --harness pi --models openrouter/qwen/qwen3.7-plus --run wf_123 --dry-run --json
 ```
 
 ```text
@@ -3625,7 +3627,7 @@ Dedicated offline benchmark for side-by-side model comparison (Decision Q12). To
 | Option | Argument | Default | Description |
 |---|---|---|---|
 | `--task` | `<fixture>` | `Deterministic benchmark task` | Task prompt or fixture path for benchmark comparison |
-| `--arms` | `<models>` | `grok/grok-4.6,claude/fable,pi/qwen3-coder-plus` | Comma-separated model routes to benchmark (e.g. grok/grok-4.6,claude/fable) |
+| `--arms` | `<models>` | `grok/grok-4.6,claude/fable,pi/qwen3.7-plus` | Comma-separated model routes to benchmark (e.g. grok/grok-4.6,claude/fable) |
 | `--runs` | `<count>` | `1` | Benchmark runs per arm |
 
 - Reads nothing. JSON keys: `task`, `runs`, `timestamp`, `arms` (`harness`, `model`, `latencyMs`, `tokensIn`, `tokensOut`, `costUsd`, `outcome`).
@@ -3639,7 +3641,7 @@ Routing Benchmark Results (task: Deterministic benchmark task, runs: 1)
 Harness    Model                     Latency(ms)   TokensIn  TokensOut    Cost($)    Outcome
 grok       grok-4.6                          420       1200        450      $0.17     passed
 claude     fable                             680       1200        450      $0.45     passed
-pi         qwen3-coder-plus                  560       1200        450      $0.12     passed
+pi         qwen3.7-plus                  560       1200        450      $0.12     passed
 ```
 
 ## `kxm prices`

package/docs/reference/config-reference.md

@@ -686,7 +686,7 @@ Example (validated with `kxm init --json` and compiled with
 the `critic-claude` profile shown above, it needs a `planner` agent (the
 workflow coordinator; `coordinator` still resolves as an alias), a
 `reviewer-cli` agent, and a second profile tagged `critic`, `critic-sol`
-(`openai/gpt-5.6-sol`). Routes, not agent files, name the harness and model.
+(`openai/gpt-6.1-sol`). Routes, not agent files, name the harness and model.
 The two providers among the `critic` candidates satisfy
 `distinctBy: [provider]` with `target: 2`.
 
@@ -963,7 +963,7 @@ description: Primary implementation agent.
 roster:
   - route: grok-grok-4-7
     effort: medium
-  - route: pi-qwen3-coder-plus-openrouter
+  - route: pi-qwen3-7-plus-openrouter
     effort: medium
 ```
 
@@ -991,7 +991,7 @@ unknown keys are ignored).
 
 A route string is derived from the selected model file's `vendor` and
 `model`, joined by a slash: `xai/grok-4.6`, `anthropic/fable`,
-`openrouter/qwen/qwen3-coder-plus`. When the file is missing, nothing is
+`openrouter/qwen/qwen3.7-plus`. When the file is missing, nothing is
 admitted and every live attempt is refused (`producer_route_unsupported`, or
 `producer_route_not_admitted` from the live producer). A leftover
 `.kxm/producers.yaml` makes every reader fail with `retired
@@ -1002,7 +1002,7 @@ admitted and every live attempt is refused (`producer_route_unsupported`, or
 `model_selection_required`. Inventory IDs come in several shapes (bare
 `grok-4.6` from `grok models`, `vendor/model` from OpenRouter,
 `provider/model` from `pi --list-models`), so a route such as
-`openrouter/qwen/qwen3-coder-plus` or `anthropic/fable` usually has to be
+`openrouter/qwen/qwen3.7-plus` or `anthropic/fable` usually has to be
 added by editing the file.
 
 ```yaml
@@ -1011,8 +1011,9 @@ updatedAt: '2026-09-23T00:00:00.000Z'
 admitted:
   - anthropic/fable
   - openai/gpt-5.6-sol
+  - openai/gpt-6.1-sol
   - xai/grok-4.6
-  - openrouter/qwen/qwen3-coder-plus
+  - openrouter/qwen/qwen3.7-plus
 disabled: []
 ```
 
@@ -1067,9 +1068,9 @@ routes:
     roles: [writer]
     permissions: [edit]
     status: admitted            # admitted | retired
-  pi-qwen3-coder-plus-openrouter:
+  pi-qwen3-7-plus-openrouter:
     harness: pi
-    model: openrouter/qwen/qwen3-coder-plus   # Pi: allowed provider prefix + vendor/model
+    model: openrouter/qwen/qwen3.7-plus   # Pi: allowed provider prefix + vendor/model
     vendor: alibaba
     roles: [writer]
     permissions: [edit]
@@ -1081,6 +1082,13 @@ routes:
     roles: [planner, reviewer-arch]
     permissions: [read-only]
     status: admitted
+  codex-gpt-6-1-sol:
+    harness: codex
+    model: gpt-6.1-sol
+    vendor: openai
+    roles: [reviewer-cli]
+    permissions: [read-only]
+    status: admitted
   codex-gpt-5-6-sol:
     harness: codex
     model: gpt-5.6-sol
@@ -1089,19 +1097,19 @@ routes:
     permissions: [read-only]
     status: admitted
 lineup:                         # routes admitted for each role, preference order
-  writer: [grok-grok-4-7, pi-qwen3-coder-plus-openrouter, agy-gemini-4-argon-high, agy-gemini-4-argon-medium, agy-gemini-3-8-flash-medium, agy-gemini-3-8-flash-high]
+  writer: [grok-grok-4-7, pi-qwen3-7-plus-openrouter, agy-gemini-4-argon-high, agy-gemini-4-argon-medium, agy-gemini-3-8-flash-medium, agy-gemini-3-8-flash-high]
   planner: [claude-fable, pi-qwen3-8-flash-openrouter]
   reviewer-arch: [claude-fable, pi-glm-5-3-flash-openrouter]
-  reviewer-cli: [codex-gpt-5-6-sol, pi-qwen3-8-flash-openrouter]
+  reviewer-cli: [codex-gpt-6-1-sol, pi-qwen3-8-flash-openrouter, codex-gpt-5-6-sol]
 required_critics:
   review-arch: claude-fable
-  review-cli: codex-gpt-5-6-sol
+  review-cli: codex-gpt-6-1-sol
 model_origins:                  # required for every Pi route model
-  openrouter/qwen/qwen3-coder-plus:
+  openrouter/qwen/qwen3.7-plus:
     vendor: alibaba
     evidence:
-      source: plans/evidence/route-qwen-openrouter-pi.md
-      sha256: b15f8a54adc398b33e75609e959076eee310bf4ff6623d0b8470ea3da95e6c54
+      source: plans/evidence/route-pi-qwen3-7-plus-openrouter.md
+      sha256: 10e11cfa572ef4891e514d229fa8b7f0f355b31e6481315a6dd763bbe44244a1
 ```
 
 Validated with `validateRosterDocument` from `scripts/roster-policy.mjs`,

package/docs/reference/configuration.md

@@ -166,14 +166,14 @@ For example, a review-only worker that cannot edit the checkout:
 
 ```bash
 export KXM_WORKER_TOOLS="read,grep,find,ls,kxm_list,kxm_get,kxm_reply"
-kxm agent worker --name reviewer --project <project> --model openrouter/qwen/qwen3-coder-plus
+kxm agent worker --name reviewer --project <project> --model openrouter/qwen/qwen3.7-plus
 ```
 
 <details><summary>PowerShell</summary>
 
 ```powershell
 $env:KXM_WORKER_TOOLS = "read,grep,find,ls,kxm_list,kxm_get,kxm_reply"
-kxm agent worker --name reviewer --project <project> --model openrouter/qwen/qwen3-coder-plus
+kxm agent worker --name reviewer --project <project> --model openrouter/qwen/qwen3.7-plus
 ```
 
 </details>

package/docs/reference/harness-routing.md

@@ -12,11 +12,11 @@ These are KXM's routing rules. The code enforces them in layers: the Pi native-v
 - **Same model, prefer the subscription.** Prefer an authenticated native subscription for the same model.
 - **Quota exhaustion is not a license to cross-bill.** Take the **next best** authenticated option by quality, then cost, from the report, not a silent Pi API key for the same vendor.
 - **A harness is not a model, and it is not a worker.** A harness runs only the models it hosts. Only Pi is a long-lived worker. `grok` and `agy` are one-shot CLIs.
-- **Admission is a decision, not a config tweak.** A route that is not admitted is refused. Admit one precise selector, such as `openrouter/qwen/qwen3-coder-plus`, never a whole provider.
+- **Admission is a decision, not a config tweak.** A route that is not admitted is refused. Admit one precise selector, such as `openrouter/qwen/qwen3.7-plus`, never a whole provider.
 
 ## 1. Decision procedure: "I want model X"
 
-1. **Name the vendor of X.** The vendor is the lab that trained the model, not whoever bills you for it. `x-ai/grok-4.6` is xAI. `qwen/qwen3-coder-plus` is Alibaba. `z-ai/glm-5.3` is Z.ai.
+1. **Name the vendor of X.** The vendor is the lab that trained the model, not whoever bills you for it. `x-ai/grok-4.6` is xAI. `qwen/qwen3.7-plus` is Alibaba. `z-ai/glm-5.3` is Z.ai.
 2. **Check whether the vendor has a native harness.** KXM maps `anthropic→claude`, `openai→codex`, `xai→grok`, `google→agy`, `moonshot→kimi` and `deepseek→deepseek`. Google is an exception (section 4). If the vendor is not in this list, go to step 6.
 3. **Check that the native harness is installed and logged in.** In `kxm harness list`, the row must show `detected yes`, `auth yes` and `dispatch yes`. `no` and `unknown` are never eligible.
 4. **Check that the harness hosts X.** `claude` runs only Anthropic models. `grok` runs only `grok-*`. `agy` runs only `gemini-*`. `kimi` runs only `kimi-*` or `moonshot-*`. `deepseek` runs only `deepseek-*`. `codex` refuses other vendors' model prefixes. To see the exact ids, use the harness's own catalog: `grok models`, `agy models` or `kimi provider list`.
@@ -92,14 +92,14 @@ codex login status
 grok models
 agy models
 kimi provider list
-pi auth check --model openrouter/qwen/qwen3-coder-plus --json --no-refresh
+pi auth check --model openrouter/qwen/qwen3.7-plus --json --no-refresh
 ```
 
 ## 2. Which route will a config line use?
 
 ### How KXM builds a route
 
-- **Selector.** The selector is `<vendor>/<model>` from the selected `.kxm/models/<route>.yaml`. The agent names a `role`, `.kxm/roles/<role>.yaml` lists route ids, and the chosen roster entry names that model file. The model id may contain `/`, for example `openrouter/qwen/qwen3-coder-plus`.
+- **Selector.** The selector is `<vendor>/<model>` from the selected `.kxm/models/<route>.yaml`. The agent names a `role`, `.kxm/roles/<role>.yaml` lists route ids, and the chosen roster entry names that model file. The model id may contain `/`, for example `openrouter/qwen/qwen3.7-plus`.
 - **Harness.** The harness is the `harness` field on that model file. An agent file does not select it.
 - **Admission.** The selector must be admitted. The engine uses the first roster entry whose model file is readable and whose route is admitted.
 - **Dispatch probe.** Before spawning anything, the producer probes the exact harness, provider and model triple. It refuses unhosted pairs and the Pi brake.
@@ -135,7 +135,7 @@ model: openrouter/x-ai/grok-4.7
 vendor: xai
 ```
 
-The selector is `openrouter/x-ai/grok-4.7` and the harness is `pi`. The Pi brake refuses it before Pi starts, because the vendor segment `x-ai` is xAI, which has a native harness. A vendor with no native harness runs in the same shape: with `model: openrouter/qwen/qwen3-coder-plus`, Pi is spawned with `--model openrouter/qwen/qwen3-coder-plus`, its read-only flags (section 3) and `-p --mode json`. Write `model` exactly as the provider names it. For OpenRouter that is the vendor slug, so `x-ai`, not `xai`.
+The selector is `openrouter/x-ai/grok-4.7` and the harness is `pi`. The Pi brake refuses it before Pi starts, because the vendor segment `x-ai` is xAI, which has a native harness. A vendor with no native harness runs in the same shape: with `model: openrouter/qwen/qwen3.7-plus`, Pi is spawned with `--model openrouter/qwen/qwen3.7-plus`, its read-only flags (section 3) and `-p --mode json`. Write `model` exactly as the provider names it. For OpenRouter that is the vendor slug, so `x-ai`, not `xai`.
 
 The harness and the selector have to agree. Pi refuses `provider: xai` and `openrouter/x-ai/…`. `grok` refuses `provider: openrouter`. [What the brake refuses](#what-the-brake-refuses) has the exact messages.
 
@@ -153,7 +153,7 @@ description: Primary implementation agent.
 roster:
   - route: grok-grok-4-7
     effort: medium
-  - route: pi-qwen3-coder-plus-openrouter
+  - route: pi-qwen3-7-plus-openrouter
     effort: medium
   - route: agy-gemini-4-argon-high
     effort: medium
@@ -165,7 +165,7 @@ roster:
     effort: medium
 ```
 
-`grok-grok-4-7` resolves to `.kxm/models/grok-grok-4-7.yaml`: harness `grok`, model `grok-4.7`, vendor `xai`, status `admitted`, permission `edit`. `pi-qwen3-coder-plus-openrouter` is harness `pi`, model `openrouter/qwen/qwen3-coder-plus`, vendor `alibaba`. `agy-gemini-4-argon-high` is harness `agy`, model `gemini-4-argon-high`, vendor `google`. `kxm role list` prints the first route id as the primary, for example `(grok-grok-4-7)`. The previous ids (`grok-native`, `qwen-openrouter-pi`, `gemini-agy`) are aliases. `gemini-agy` resolves to `agy-gemini-4-argon-high`.
+`grok-grok-4-7` resolves to `.kxm/models/grok-grok-4-7.yaml`: harness `grok`, model `grok-4.7`, vendor `xai`, status `admitted`, permission `edit`. `pi-qwen3-7-plus-openrouter` is harness `pi`, model `openrouter/qwen/qwen3.7-plus`, vendor `alibaba`, and it is writer #2. `agy-gemini-4-argon-high` is harness `agy`, model `gemini-4-argon-high`, vendor `google`. `kxm role list` prints the first route id as the primary, for example `(grok-grok-4-7)`. The previous ids `grok-native` and `gemini-agy` are aliases. `gemini-agy` resolves to `agy-gemini-4-argon-high`. `qwen-openrouter-pi` is not an alias: it belonged to retired `pi-qwen3-coder-plus-openrouter` (`openrouter/qwen/qwen3-coder-plus`, catalog 404) and does not resolve to `pi-qwen3-7-plus-openrouter`.
 
 Dispatch resolves a step from the agent `role`, then `.kxm/roles/<role>.yaml`, then the selected `.kxm/models/<route>.yaml`. That model file carries `harness`, `model`, `vendor`, `status`, and `permissions`. The engine walks the roster in order and uses the first admitted route whose model file is readable. A missing or unreadable model file is a refusal (`roster_model_unreadable` at load, `producer_route_unsupported` at dispatch), not a skip to the next entry. A route file that names a harness the model cannot run on still fails closed with `harness_unhosted_model`.
 
@@ -176,7 +176,7 @@ Role files are what `kxm role` and the Runtime membership check use.
 `kxm routes list` prints one line per decision, for example:
 
 ```text
-admitted openrouter/qwen/qwen3-coder-plus
+admitted openrouter/qwen/qwen3.7-plus
 admitted xai/grok-4.7
 disabled openrouter/x-ai/grok-4.7
 ```
@@ -201,7 +201,7 @@ The first segment of an id is the provider, and the rest is the model id. A rout
 `kxm routes admit --model <id>` only takes an id that exists in `.kxm/models/inventory.yaml`. The inventory is a different namespace from these selectors (next section), and it never carries an `openrouter/…` selector, so a dry run refuses one:
 
 ```bash
-kxm routes admit --model openrouter/qwen/qwen3-coder-plus --dry-run
+kxm routes admit --model openrouter/qwen/qwen3.7-plus --dry-run
 ```
 
 ```text
@@ -232,7 +232,7 @@ The same model shows up under different ids depending on the file:
 | `.kxm/models/inventory.yaml`, source `openrouter` | `x-ai/grok-4.7` | The OpenRouter catalog slug. The inventory stores OpenRouter ids without an `openrouter/` prefix. |
 | `.kxm/prices.yaml` | `id: xai/grok-4.7`, `provider: xai`, alias `x-ai/grok-4.7` | A list price that applies only to provider `xai`, because price lookup filters by provider. `xai/grok-4.6` remains a separate row. |
 
-An inventory id can also mean something else in `.kxm/routes.yaml`. For example, the inventory can list `openai/gpt-5.6-sol` from the OpenRouter feed with OpenRouter prices, while in `.kxm/routes.yaml` the same string means provider `openai` through native `codex`.
+An inventory id can also mean something else in `.kxm/routes.yaml`. For example, the inventory can list `openai/gpt-6.1-sol` from the OpenRouter feed with OpenRouter prices, while in `.kxm/routes.yaml` the same string means provider `openai` through native `codex`. `openai/gpt-5.6-sol` is the same kind of selector and stays admitted.
 
 ### What the brake refuses
 
@@ -249,10 +249,10 @@ The brake runs wherever KXM starts Pi on a model: in the dispatch probe that eac
 | How the id names the vendor | Refused examples | Message |
 |---|---|---|
 | The provider is the vendor | `anthropic/…`, `openai/…`, `xai/…`, `moonshot/…`, `google/…`, `deepseek/…` | `pi must not impersonate native provider xai; use the native harness` |
-| A Pi provider that belongs to the vendor | `openai-codex/…`, `moonshotai/…`, `moonshotai-cn/…`, `kimi-coding/…`, `google-vertex/…`, `claude-bridge/…`, and `antigravity/…` except Gemini ids | `pi provider openai-codex bills native vendor openai for gpt-5.6-sol; use the native harness` |
+| A Pi provider that belongs to the vendor | `openai-codex/…`, `moonshotai/…`, `moonshotai-cn/…`, `kimi-coding/…`, `google-vertex/…`, `claude-bridge/…`, and `antigravity/…` except Gemini ids | `pi provider openai-codex bills native vendor openai for gpt-6.1-sol; use the native harness` |
 | The vendor segment of an aggregator id, including the aliases `x-ai`, `moonshotai` and `google-ai` | `openrouter/x-ai/grok-4.6`, `openrouter/anthropic/claude-fable-5.1`, `nous-portal/google/…` | `pi must not bill native vendor xai through openrouter; use the native harness` |
 
-The brake accepts `antigravity/gemini-…` and any id whose vendor has no native harness, such as `openrouter/qwen/qwen3-coder-plus`, `zai-coding-cn/glm-5.3` or `qwen-token-plan/qwen3.8-flash`. Passing the brake is not admission: the route must still be admitted. The hosting refusal at dispatch reads `grok_not_authenticated: grok harness not detected (harness_unhosted_model)`.
+The brake accepts `antigravity/gemini-…` and any id whose vendor has no native harness, such as `openrouter/qwen/qwen3.7-plus`, `zai-coding-cn/glm-5.3` or `qwen-token-plan/qwen3.8-flash`. Passing the brake is not admission: the route must still be admitted. The hosting refusal at dispatch reads `grok_not_authenticated: grok harness not detected (harness_unhosted_model)`.
 
 To run the load-time check, which covers only agents that declare a harness and select a profile or tag, run the read-only validation:
 
@@ -367,18 +367,22 @@ pi auth check --provider xai --json --no-refresh
 {"status":"ready","provider":"xai","authType":"oauth"}
 ```
 
-### GPT-5.6 Sol
+### GPT-6.1 Sol
 
 | | Native `codex` | Pi + OpenRouter |
 |---|---|---|
-| Model file | `harness: codex`, `model: gpt-5.6-sol`, `vendor: openai` | `harness: pi`, `model: openrouter/openai/gpt-5.6-sol`, `vendor: openai` |
-| Selector | `openai/gpt-5.6-sol` | `openrouter/openai/gpt-5.6-sol` |
+| Model file | `harness: codex`, `model: gpt-6.1-sol`, `vendor: openai` | `harness: pi`, `model: openrouter/openai/gpt-6.1-sol`, `vendor: openai` |
+| Selector | `openai/gpt-6.1-sol`: admitted, the CLI critic | `openrouter/openai/gpt-6.1-sol` |
 | Readiness | Needs `codex` auth `yes` with `authMethod: ChatGPT` | Never reached: the brake refuses it first |
-| Billing | ChatGPT subscription | OpenRouter credit |
+| Billing | ChatGPT subscription. List price $2 / $10 per 1M tokens through 272,000 prompt tokens ($0.10 cached input, $2.50 cache write), then $4 / $15 | OpenRouter credit, same per-token list price |
 | Recorded `costBasis` | `unmetered`, `priceRef: subscription:codex` | None: refused before dispatch |
-| Mode | One-shot `codex exec --json -` | Refused |
+| Mode | One-shot `codex exec --json -`. Reasoning is mandatory (`low`, `medium`, `high`, `xhigh`, `max`) | Refused |
 
-**KXM picks the native route.** Two traps apply here. The first is `openai-codex/gpt-5.6-sol`, which is the same ChatGPT subscription driven through Pi. `pi auth check --provider openai-codex` can report `ready`, but readiness is not permission: the brake refuses `openai-codex` as OpenAI's own Pi provider. The second is a codex login made with an API key: the row shows `API key`, and the run records `unknown`.
+`codex-gpt-6-1-sol` is the `reviewer-cli` primary at effort `low`. `pi-qwen3-8-flash-openrouter` is the other-vendor fallback. `codex-gpt-5-6-sol` stays admitted as the last fallback. Architecture review stays `claude-fable`, then `pi-glm-5-3-flash-openrouter`.
+
+Pro is not a separate model. It is `gpt-6.1-sol` with reasoning mode `pro`. OpenRouter lists that mode as `openai/gpt-6.1-sol-pro` at the same per-token price. A route id is `<harness>-<model-slug>`, role `effort` has no `pro` value, and the codex harness ceiling is `reviewer-cli` only. There is no pro architecture-review fallback.
+
+**KXM picks the native route.** Two traps apply here. The first is `openai-codex/gpt-6.1-sol`, which is the same ChatGPT subscription driven through Pi. `pi auth check --provider openai-codex` can report `ready`, but readiness is not permission: the brake refuses `openai-codex` as OpenAI's own Pi provider. The second is a codex login made with an API key: the row shows `API key`, and the run records `unknown`. `openai/gpt-5.6-sol` is the same shape of selector and stays admitted. On OpenRouter it now lists at $4 / $20 per 1M tokens.
 
 ```bash
 pi auth check --provider openai-codex --json --no-refresh
@@ -448,7 +452,7 @@ Admit an `antigravity/…` route only through a reviewed admission decision. The
 Pi is the right harness when the vendor has no native harness in KXM, for example Qwen (Alibaba) and GLM (Z.ai). The choice is then between the vendor's own plan provider in Pi and an aggregator:
 
 - Prefer the vendor-plan provider when `pi auth check` reports it `ready`, for example `qwen-token-plan/qwen3.8-flash` or `zai-coding-cn/glm-5.3`.
-- Otherwise use an aggregator selector, such as `openrouter/qwen/qwen3-coder-plus`.
+- Otherwise use an aggregator selector, such as `openrouter/qwen/qwen3.7-plus`.
 - Admit the exact selector, with the permission it needs, never a whole provider.
 
 DeepSeek has a native harness entry, but it is never eligible: its auth is always `unknown`, and it has no audited read-only profile. A DeepSeek model billed through another vendor's plan, such as `qwen-token-plan/deepseek-…`, passes the brake because its id names no vendor segment. It is an admission question, not a precedent.
@@ -493,7 +497,7 @@ Each of those is a fail-closed stop, or a new admission decision.
 | `pi auth check --provider nous-portal` or `--provider antigravity` returns `provider_not_found`. | The provider comes from a Pi package or the KXM Pi extension, and `pi auth check` never loads extensions, not even one passed with `-e`. | Confirm with `pi list` and `pi --list-models <id>`. The Runtime's Pi one-shot runs with `--no-extensions` and checks readiness with `pi auth check`, so it cannot reach extension providers. |
 | `producer_route_unsupported: model '<selector>' is not admitted`, or `producer_route_not_admitted`. | The selector is missing from `admitted` in `.kxm/routes.yaml`, or it is under `disabled`. | Check with `kxm routes list`. After a reviewed decision, run `kxm routes admit --model <id>`, or edit the file when the inventory lacks the id. |
 | `producer_route_unsupported: model '<selector>' not in role '<role>' roster` | The role file exists and does not list the selector. | Add it to `.kxm/roles/<role>.yaml` by Git review, and check with `kxm role get <role>`. |
-| `pi_native_impersonation_blocked`, at dispatch or when a worker starts. | A Pi agent or worker names a native vendor's model: directly, through that vendor's Pi provider, or behind an aggregator. | Use the native harness (`harness: grok` for `provider: xai`), or an admitted Pi route whose vendor has no native harness, such as `openrouter/qwen/qwen3-coder-plus`. |
+| `pi_native_impersonation_blocked`, at dispatch or when a worker starts. | A Pi agent or worker names a native vendor's model: directly, through that vendor's Pi provider, or behind an aggregator. | Use the native harness (`harness: grok` for `provider: xai`), or an admitted Pi route whose vendor has no native harness, such as `openrouter/qwen/qwen3.7-plus`. |
 | `grok_not_authenticated: grok harness not detected (harness_unhosted_model)`, or `harness grok does not host provider openrouter`. | A native-harness agent was given an aggregator or another vendor's selector, often from a mixed role roster. | Give that selector its own agent with `harness:` omitted. |
 | `routing report` shows every attempt under `Unk*`, and records carry `costBasis: unknown`. | Grok and every Pi route are recorded as `unknown` today. That is the design, not a missing price. | Nothing to fix per run. Compare quality and latency, and use list estimates for cost. |
 | `providerMetadata.priceCatalogStale: true`, and there is no `listCostUsd`. | `.kxm/prices.yaml` is not dated today, or no row matches the route's provider. | Edit `.kxm/prices.yaml` by Git review: add a row for the provider, then update `date` and `sha256`. The loader refuses a hash mismatch. |

package/docs/templates/review.md

@@ -26,7 +26,7 @@ details:
     - kind: "review-cli"
       role: "reviewer-cli"
       harness: "codex"
-      model: "gpt-5.6-sol"
+      model: "gpt-6.1-sol"
       verdict: "PASS" # PASS | BLOCK
 ---
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kontextmind/kxm",
-  "version": "0.7.184",
+  "version": "0.7.186",
   "description": "KXM local-first multi-agent orchestration and operator dashboard",
   "type": "module",
   "author": "KontextMind",

package/packages/core/tui/dist/index.js

@@ -1167,7 +1167,7 @@ function evaluatePlanOptimizations(tasks) {
         projectedTimeSavingsSeconds: 5,
         projectedCostSavingsPercent: 65,
         suggestedHarness: "pi",
-        suggestedModel: "qwen/qwen3-coder-plus",
+        suggestedModel: "qwen/qwen3.7-plus",
         selected: true
       });
     } else if (isFrontier && (task.category === "lint" || /lint|format|style/i.test(task.title))) {

package/packages/core/tui/src/tui/optimizer.ts

@@ -84,7 +84,7 @@ export function evaluatePlanOptimizations(tasks: readonly OptimizerTaskInput[]):
         projectedTimeSavingsSeconds: 5,
         projectedCostSavingsPercent: 65,
         suggestedHarness: "pi",
-        suggestedModel: "qwen/qwen3-coder-plus",
+        suggestedModel: "qwen/qwen3.7-plus",
         selected: true,
       });
     } else if (isFrontier && (task.category === "lint" || /lint|format|style/i.test(task.title))) {

package/plugins/kxm/.claude-plugin/plugin.json

@@ -2,7 +2,7 @@
   "$schema": "https://json.schemastore.org/claude-code-plugin-manifest.json",
   "name": "kxm",
   "displayName": "KXM",
-  "version": "0.7.184",
+  "version": "0.7.186",
   "description": "Headless multi-agent orchestration, durable workflows, and a live operator dashboard for Pi and Claude Code",
   "author": {
     "name": "KontextMind",

package/plugins/kxm/dist/cli.js

@@ -18541,9 +18541,14 @@ function lintWorkforce(root) {
     if (!expected || model.id !== expected) {
       push(errors, "error", "route_id_convention", `.kxm/models/${model.id}.yaml`, `route id '${model.id}' must be '${expected ?? "<harness>-<model-slug>[-<provider>]"}'`);
     }
-    if (!used.has(model.id)) {
+    const retired = doc.status === "retired";
+    if (retired && used.has(model.id)) {
+      push(errors, "error", "route_not_admitted", `.kxm/models/${model.id}.yaml`, `retired route '${model.id}' is still on a role roster`);
+    }
+    if (!retired && !used.has(model.id)) {
       push(errors, "error", "route_unused", `.kxm/models/${model.id}.yaml`, `route '${model.id}' is not on any role roster`);
     }
+    if (retired) continue;
     const selectorHit = selectorsFor(doc).find((selector) => admitted.includes(selector));
     if (!selectorHit) {
       push(errors, "error", "route_not_admitted", `.kxm/models/${model.id}.yaml`, `model '${doc.model ?? ""}' is not an admitted selector`);
@@ -18614,9 +18619,9 @@ var init_workforce_names = __esm({
     ]);
     ROUTE_RENAMES = Object.freeze([
       ["grok-native", "grok-grok-4-7"],
-      ["qwen-openrouter-pi", "pi-qwen3-coder-plus-openrouter"],
       ["gemini-agy", "agy-gemini-4-argon-high"],
       ["fable-claude", "claude-fable"],
+      // sol-codex stays the GPT-5.6 route. codex-gpt-6-1-sol is a separate route.
       ["sol-codex", "codex-gpt-5-6-sol"],
       ["grok-default", "grok-grok-4-6"],
       ["fable-default", "claude-fable"]
@@ -56720,7 +56725,7 @@ var ADMITTED_GUIDE_BINDINGS = Object.freeze({
   "openai/gpt-5.6-sol": { harness: "codex", provider: "openai", model: "gpt-5.6-sol" },
   "x-ai/grok-4.6": { harness: "grok", provider: "xai", model: "grok-4.6" },
   "xai/grok-4.6": { harness: "grok", provider: "xai", model: "grok-4.6" },
-  "qwen/qwen3-coder-plus": { harness: "pi", provider: "openrouter", model: "qwen/qwen3-coder-plus" }
+  "qwen/qwen3.7-plus": { harness: "pi", provider: "openrouter", model: "qwen/qwen3.7-plus" }
 });
 var GUIDE_WORKFLOWS = [
   {
@@ -56751,7 +56756,7 @@ var GUIDE_WORKFLOWS = [
           { vendor: "openai", model: "gpt-5.6-sol" },
           { vendor: "deepseek", model: "deepseek-v4-pro-0813" },
           { vendor: "google", model: "gemini-3.8-flash" },
-          { vendor: "qwen", model: "qwen3-coder-plus" },
+          { vendor: "qwen", model: "qwen3.7-plus" },
           { vendor: "anthropic", model: "claude-fable-5.1" }
         ]
       },
@@ -56763,7 +56768,7 @@ var GUIDE_WORKFLOWS = [
         candidates: [
           { vendor: "x-ai", model: "grok-4.6" },
           { vendor: "mistralai", model: "devstral-2512" },
-          { vendor: "qwen", model: "qwen3-coder-plus" },
+          { vendor: "qwen", model: "qwen3.7-plus" },
           { vendor: "openai", model: "gpt-5.3-codex" },
           { vendor: "kwaipilot", model: "kat-coder-pro-v2.5" }
         ]
@@ -56775,7 +56780,7 @@ var GUIDE_WORKFLOWS = [
         domain: "Implements domain entities, SQL queries/migrations, ORM persistence, concurrency primitives, and transactional boundaries.",
         candidates: [
           { vendor: "x-ai", model: "grok-4.6" },
-          { vendor: "qwen", model: "qwen3-coder-plus" },
+          { vendor: "qwen", model: "qwen3.7-plus" },
           { vendor: "deepseek", model: "deepseek-v4-pro-0813" },
           { vendor: "openai", model: "gpt-5.3-codex" },
           { vendor: "kwaipilot", model: "kat-coder-pro-v2.5" }
@@ -56802,7 +56807,7 @@ var GUIDE_WORKFLOWS = [
         candidates: [
           { vendor: "openai", model: "gpt-5.6-sol" },
           { vendor: "x-ai", model: "grok-4.6" },
-          { vendor: "qwen", model: "qwen3-coder-plus" },
+          { vendor: "qwen", model: "qwen3.7-plus" },
           { vendor: "deepseek", model: "deepseek-v4-pro-0813" },
           { vendor: "google", model: "gemini-3.8-flash" }
         ]
@@ -56929,7 +56934,7 @@ var GUIDE_WORKFLOWS = [
         domain: "Generates declarative Terraform/OpenTofu, Pulumi, Kubernetes CRDs, and VPC networking definitions.",
         candidates: [
           { vendor: "x-ai", model: "grok-4.6" },
-          { vendor: "qwen", model: "qwen3-coder-plus" },
+          { vendor: "qwen", model: "qwen3.7-plus" },
           { vendor: "openai", model: "gpt-5.3-codex" },
           { vendor: "google", model: "gemini-3.8-flash" },
           { vendor: "mistralai", model: "devstral-2512" }
@@ -56989,7 +56994,7 @@ var GUIDE_WORKFLOWS = [
         domain: "Authors concise, accurate developer and operator documentation with clear terminology, correct command flags, and consistent formatting without marketing drift.",
         candidates: [
           { vendor: "x-ai", model: "grok-4.6" },
-          { vendor: "qwen", model: "qwen3-coder-plus" },
+          { vendor: "qwen", model: "qwen3.7-plus" },
           { vendor: "anthropic", model: "claude-sonnet-5" },
           { vendor: "openai", model: "gpt-5.3-codex" },
           { vendor: "deepseek", model: "deepseek-v4-pro-0813" }
@@ -57094,11 +57099,11 @@ function workflowDocument(workflow) {
   };
 }
 var GUIDE_PI_EVIDENCE_SOURCE = "plans/evidence/route-guide-qwen-pi.md";
-var GUIDE_PI_EVIDENCE_SHA256 = "109f39728b251dd0565e275ae689a6e1d9b889a488d996b157d500c538115759";
+var GUIDE_PI_EVIDENCE_SHA256 = "8a24a7dc6db416df2153cfec7bccf1a4462f838e35c4e6707dc421ca84cf069b";
 var GUIDE_PI_NOTE = {
   harness: "pi",
   vendor: "openrouter",
-  model: "qwen/qwen3-coder-plus",
+  model: "qwen/qwen3.7-plus",
   reason: "Qwen has no supported native harness on this runner, and the operator admitted that exact model for guided setup.",
   provingCommand: "pi auth check --provider openrouter"
 };
@@ -58100,7 +58105,7 @@ async function cmdRoutingReport(runtime, options) {
 }
 async function cmdRoutingBenchmark(runtime, options) {
   const task = options.task || "Deterministic benchmark task";
-  const armsStr = options.arms || "grok/grok-4.6,claude/fable,pi/qwen3-coder-plus";
+  const armsStr = options.arms || "grok/grok-4.6,claude/fable,pi/qwen3.7-plus";
   const armsList = armsStr.split(",").map((s) => s.trim()).filter(Boolean);
   const runsCount = Math.max(1, parseInt(options.runs || "1", 10) || 1);
   const arms = armsList.map((arm) => {

package/plugins/kxm/dist/mcp-server.js

@@ -25462,7 +25462,7 @@ function sessionTokenFixHint(policy) {
 }
 
 // plugins/kxm/src/mcp-server.ts
-var VERSION = "0.7.184";
+var VERSION = "0.7.186";
 var CONFIGURE_PLUGIN = "/plugin configure kxm@kxm";
 var inbox = /* @__PURE__ */ new Map();
 var notifiedInbox = /* @__PURE__ */ new Set();

package/plugins/kxm/dist/runtime-supervisor.js

@@ -15543,9 +15543,9 @@ var ROLE_IDS = Object.freeze([
 ]);
 var ROUTE_RENAMES = Object.freeze([
   ["grok-native", "grok-grok-4-7"],
-  ["qwen-openrouter-pi", "pi-qwen3-coder-plus-openrouter"],
   ["gemini-agy", "agy-gemini-4-argon-high"],
   ["fable-claude", "claude-fable"],
+  // sol-codex stays the GPT-5.6 route. codex-gpt-6-1-sol is a separate route.
   ["sol-codex", "codex-gpt-5-6-sol"],
   ["grok-default", "grok-grok-4-6"],
   ["fable-default", "claude-fable"]
@@ -15734,9 +15734,14 @@ function lintWorkforce(root) {
     if (!expected || model.id !== expected) {
       push(errors, "error", "route_id_convention", `.kxm/models/${model.id}.yaml`, `route id '${model.id}' must be '${expected ?? "<harness>-<model-slug>[-<provider>]"}'`);
     }
-    if (!used.has(model.id)) {
+    const retired = doc.status === "retired";
+    if (retired && used.has(model.id)) {
+      push(errors, "error", "route_not_admitted", `.kxm/models/${model.id}.yaml`, `retired route '${model.id}' is still on a role roster`);
+    }
+    if (!retired && !used.has(model.id)) {
       push(errors, "error", "route_unused", `.kxm/models/${model.id}.yaml`, `route '${model.id}' is not on any role roster`);
     }
+    if (retired) continue;
     const selectorHit = selectorsFor(doc).find((selector) => admitted.includes(selector));
     if (!selectorHit) {
       push(errors, "error", "route_not_admitted", `.kxm/models/${model.id}.yaml`, `model '${doc.model ?? ""}' is not an admitted selector`);

package/plugins/kxm/dist/runtime.js

@@ -15516,9 +15516,9 @@ var ROLE_IDS = Object.freeze([
 ]);
 var ROUTE_RENAMES = Object.freeze([
   ["grok-native", "grok-grok-4-7"],
-  ["qwen-openrouter-pi", "pi-qwen3-coder-plus-openrouter"],
   ["gemini-agy", "agy-gemini-4-argon-high"],
   ["fable-claude", "claude-fable"],
+  // sol-codex stays the GPT-5.6 route. codex-gpt-6-1-sol is a separate route.
   ["sol-codex", "codex-gpt-5-6-sol"],
   ["grok-default", "grok-grok-4-6"],
   ["fable-default", "claude-fable"]
@@ -15707,9 +15707,14 @@ function lintWorkforce(root) {
     if (!expected || model.id !== expected) {
       push(errors, "error", "route_id_convention", `.kxm/models/${model.id}.yaml`, `route id '${model.id}' must be '${expected ?? "<harness>-<model-slug>[-<provider>]"}'`);
     }
-    if (!used.has(model.id)) {
+    const retired = doc.status === "retired";
+    if (retired && used.has(model.id)) {
+      push(errors, "error", "route_not_admitted", `.kxm/models/${model.id}.yaml`, `retired route '${model.id}' is still on a role roster`);
+    }
+    if (!retired && !used.has(model.id)) {
       push(errors, "error", "route_unused", `.kxm/models/${model.id}.yaml`, `route '${model.id}' is not on any role roster`);
     }
+    if (retired) continue;
     const selectorHit = selectorsFor(doc).find((selector) => admitted.includes(selector));
     if (!selectorHit) {
       push(errors, "error", "route_not_admitted", `.kxm/models/${model.id}.yaml`, `model '${doc.model ?? ""}' is not an admitted selector`);
@@ -36446,7 +36451,7 @@ var SUBAGENT_TYPES = Object.freeze([
 ]);
 var DEFAULT_SUBAGENT_MODELS = Object.freeze({
   general: "grok/grok-4.6",
-  Explore: "openrouter/qwen/qwen3-coder-plus",
+  Explore: "openrouter/qwen/qwen3.7-plus",
   Plan: "claude/fable",
   Reviewer: "openai/gpt-5.6-sol",
   Auditor: "claude/fable"

package/plugins/kxm/dist/server.js

@@ -15008,9 +15008,9 @@ var ROLE_IDS = Object.freeze([
 ]);
 var ROUTE_RENAMES = Object.freeze([
   ["grok-native", "grok-grok-4-7"],
-  ["qwen-openrouter-pi", "pi-qwen3-coder-plus-openrouter"],
   ["gemini-agy", "agy-gemini-4-argon-high"],
   ["fable-claude", "claude-fable"],
+  // sol-codex stays the GPT-5.6 route. codex-gpt-6-1-sol is a separate route.
   ["sol-codex", "codex-gpt-5-6-sol"],
   ["grok-default", "grok-grok-4-6"],
   ["fable-default", "claude-fable"]

package/plugins/kxm/package.json

@@ -1,6 +1,6 @@
 {
   "name": "claude-plugin",
-  "version": "0.7.184",
+  "version": "0.7.186",
   "private": true,
   "type": "module",
   "engines": {

package/plugins/kxm/src/cli/system.ts

@@ -1071,7 +1071,7 @@ export async function cmdRoutingBenchmark(
   options: { task?: string | undefined; arms?: string | undefined; runs?: string | undefined },
 ): Promise<number> {
   const task = options.task || "Deterministic benchmark task";
-  const armsStr = options.arms || "grok/grok-4.6,claude/fable,pi/qwen3-coder-plus";
+  const armsStr = options.arms || "grok/grok-4.6,claude/fable,pi/qwen3.7-plus";
   const armsList = armsStr.split(",").map((s) => s.trim()).filter(Boolean);
   const runsCount = Math.max(1, parseInt(options.runs || "1", 10) || 1);
 

package/plugins/kxm/src/init-guide-setup.ts

@@ -64,7 +64,7 @@ const ADMITTED_GUIDE_BINDINGS: Readonly<Record<string, AgentBinding>> = Object.f
   "openai/gpt-5.6-sol": { harness: "codex", provider: "openai", model: "gpt-5.6-sol" },
   "x-ai/grok-4.6": { harness: "grok", provider: "xai", model: "grok-4.6" },
   "xai/grok-4.6": { harness: "grok", provider: "xai", model: "grok-4.6" },
-  "qwen/qwen3-coder-plus": { harness: "pi", provider: "openrouter", model: "qwen/qwen3-coder-plus" },
+  "qwen/qwen3.7-plus": { harness: "pi", provider: "openrouter", model: "qwen/qwen3.7-plus" },
 });
 
 /** Guide candidates are ordered by preference; the first eligible wins. */
@@ -97,7 +97,7 @@ export const GUIDE_WORKFLOWS: readonly GuideWorkflow[] = [
           { vendor: "openai", model: "gpt-5.6-sol" },
           { vendor: "deepseek", model: "deepseek-v4-pro-0813" },
           { vendor: "google", model: "gemini-3.8-flash" },
-          { vendor: "qwen", model: "qwen3-coder-plus" },
+          { vendor: "qwen", model: "qwen3.7-plus" },
           { vendor: "anthropic", model: "claude-fable-5.1" },
         ],
       },
@@ -109,7 +109,7 @@ export const GUIDE_WORKFLOWS: readonly GuideWorkflow[] = [
         candidates: [
           { vendor: "x-ai", model: "grok-4.6" },
           { vendor: "mistralai", model: "devstral-2512" },
-          { vendor: "qwen", model: "qwen3-coder-plus" },
+          { vendor: "qwen", model: "qwen3.7-plus" },
           { vendor: "openai", model: "gpt-5.3-codex" },
           { vendor: "kwaipilot", model: "kat-coder-pro-v2.5" },
         ],
@@ -121,7 +121,7 @@ export const GUIDE_WORKFLOWS: readonly GuideWorkflow[] = [
         domain: "Implements domain entities, SQL queries/migrations, ORM persistence, concurrency primitives, and transactional boundaries.",
         candidates: [
           { vendor: "x-ai", model: "grok-4.6" },
-          { vendor: "qwen", model: "qwen3-coder-plus" },
+          { vendor: "qwen", model: "qwen3.7-plus" },
           { vendor: "deepseek", model: "deepseek-v4-pro-0813" },
           { vendor: "openai", model: "gpt-5.3-codex" },
           { vendor: "kwaipilot", model: "kat-coder-pro-v2.5" },
@@ -148,7 +148,7 @@ export const GUIDE_WORKFLOWS: readonly GuideWorkflow[] = [
         candidates: [
           { vendor: "openai", model: "gpt-5.6-sol" },
           { vendor: "x-ai", model: "grok-4.6" },
-          { vendor: "qwen", model: "qwen3-coder-plus" },
+          { vendor: "qwen", model: "qwen3.7-plus" },
           { vendor: "deepseek", model: "deepseek-v4-pro-0813" },
           { vendor: "google", model: "gemini-3.8-flash" },
         ],
@@ -275,7 +275,7 @@ export const GUIDE_WORKFLOWS: readonly GuideWorkflow[] = [
         domain: "Generates declarative Terraform/OpenTofu, Pulumi, Kubernetes CRDs, and VPC networking definitions.",
         candidates: [
           { vendor: "x-ai", model: "grok-4.6" },
-          { vendor: "qwen", model: "qwen3-coder-plus" },
+          { vendor: "qwen", model: "qwen3.7-plus" },
           { vendor: "openai", model: "gpt-5.3-codex" },
           { vendor: "google", model: "gemini-3.8-flash" },
           { vendor: "mistralai", model: "devstral-2512" },
@@ -335,7 +335,7 @@ export const GUIDE_WORKFLOWS: readonly GuideWorkflow[] = [
         domain: "Authors concise, accurate developer and operator documentation with clear terminology, correct command flags, and consistent formatting without marketing drift.",
         candidates: [
           { vendor: "x-ai", model: "grok-4.6" },
-          { vendor: "qwen", model: "qwen3-coder-plus" },
+          { vendor: "qwen", model: "qwen3.7-plus" },
           { vendor: "anthropic", model: "claude-sonnet-5" },
           { vendor: "openai", model: "gpt-5.3-codex" },
           { vendor: "deepseek", model: "deepseek-v4-pro-0813" },
@@ -490,11 +490,11 @@ function workflowDocument(workflow: GuideWorkflow): Record<string, unknown> {
  * id, and harness gets no model file and no origin.
  */
 const GUIDE_PI_EVIDENCE_SOURCE = "plans/evidence/route-guide-qwen-pi.md";
-const GUIDE_PI_EVIDENCE_SHA256 = "109f39728b251dd0565e275ae689a6e1d9b889a488d996b157d500c538115759";
+const GUIDE_PI_EVIDENCE_SHA256 = "8a24a7dc6db416df2153cfec7bccf1a4462f838e35c4e6707dc421ca84cf069b";
 const GUIDE_PI_NOTE = {
   harness: "pi",
   vendor: "openrouter",
-  model: "qwen/qwen3-coder-plus",
+  model: "qwen/qwen3.7-plus",
   reason: "Qwen has no supported native harness on this runner, and the operator admitted that exact model for guided setup.",
   provingCommand: "pi auth check --provider openrouter",
 } as const;

package/plugins/kxm/src/mcp-server.ts

@@ -11,7 +11,7 @@ import { deliverInboxNotification } from "./inbox.ts";
 import type { HubEvent, MessageRecord } from "./protocol.ts";
 import { sessionTokenFixHint } from "./session-token-hint.ts";
 
-const VERSION = "0.7.184";
+const VERSION = "0.7.186";
 const CONFIGURE_PLUGIN = "/plugin configure kxm@kxm";
 const inbox = new Map<string, MessageRecord>();
 const notifiedInbox = new Set<string>();

package/plugins/kxm/src/oneshot-producer.ts

@@ -270,7 +270,7 @@ export function createKxmOneShotProducer(options: KxmOneShotProducerOptions = {}
   ): { provider: string; model: string; thinking?: string | undefined } {
     if (request.model) {
       // A separate provider field means the model id is bare and may itself be
-      // namespaced (openrouter + qwen/qwen3-coder-plus); reparsing it as a
+      // namespaced (openrouter + qwen/qwen3.7-plus); reparsing it as a
       // provider/model selector strips the namespace — the same defect #262 fixed
       // in the pi producer. Only parse when the provider must come from the string.
       if (request.provider) {
@@ -401,7 +401,7 @@ export function createKxmOneShotProducer(options: KxmOneShotProducerOptions = {}
         // pi's model flag takes the provider-qualified id — exactly the auth probe's
         // rule (#265): prefix with the provider unless the model already starts with it.
         // A bare "contains a slash" test is wrong for provider-local namespaces
-        // (openrouter + qwen/qwen3-coder-plus must spawn as the full three-part id).
+        // (openrouter + qwen/qwen3.7-plus must spawn as the full three-part id).
         const qualified = resolved.provider && resolved.model.startsWith(`${resolved.provider}/`)
           ? resolved.model
           : resolved.provider ? `${resolved.provider}/${resolved.model}` : resolved.model;

package/plugins/kxm/src/pi-producer.ts

@@ -463,7 +463,7 @@ export function createKxmPiProducer(options: KxmPiProducerOptions = {}): KxmPiPr
   function resolveModelForRequest(request: KxmProducerRequest): { provider: string; model: string; thinking?: string | undefined } {
     if (request.model) {
       // A separate provider field means the model id is bare and may itself be
-      // namespaced (`qwen/qwen3-coder-plus` under `openrouter`); reparsing it as a
+      // namespaced (`qwen/qwen3.7-plus` under `openrouter`); reparsing it as a
       // provider/model selector strips the namespace and sends the wrong model. Only
       // parse when the provider must come from the string itself.
       if (request.provider) {

package/plugins/kxm/src/subagent-control.ts

@@ -77,7 +77,7 @@ export const SUBAGENT_TYPES: readonly SubagentType[] = Object.freeze([
 
 export const DEFAULT_SUBAGENT_MODELS: Readonly<Record<SubagentType, string>> = Object.freeze({
   general: "grok/grok-4.6",
-  Explore: "openrouter/qwen/qwen3-coder-plus",
+  Explore: "openrouter/qwen/qwen3.7-plus",
   Plan: "claude/fable",
   Reviewer: "openai/gpt-5.6-sol",
   Auditor: "claude/fable",

package/plugins/kxm/src/workforce-names.mjs

@@ -12,7 +12,9 @@
  * the assignment runner reads at one commit. A tree that has already renamed
  * the files still accepts the old id. A mixed tree accepts either side.
  * `opus-claude` is not renamed: that route pointed at an unadmitted model and
- * was removed.
+ * was removed. `qwen-openrouter-pi` is not renamed either: it belonged to
+ * retired `pi-qwen3-coder-plus-openrouter` and does not resolve to
+ * `pi-qwen3-7-plus-openrouter`.
  */
 
 import { existsSync, readdirSync, readFileSync } from "node:fs";
@@ -32,9 +34,9 @@ export const ROLE_IDS = Object.freeze([
 /** Old id, canonical id. Listed once; lookup tries both directions. */
 export const ROUTE_RENAMES = Object.freeze([
   ["grok-native", "grok-grok-4-7"],
-  ["qwen-openrouter-pi", "pi-qwen3-coder-plus-openrouter"],
   ["gemini-agy", "agy-gemini-4-argon-high"],
   ["fable-claude", "claude-fable"],
+  // sol-codex stays the GPT-5.6 route. codex-gpt-6-1-sol is a separate route.
   ["sol-codex", "codex-gpt-5-6-sol"],
   ["grok-default", "grok-grok-4-6"],
   ["fable-default", "claude-fable"],
@@ -190,7 +192,9 @@ function selectorsFor(doc) {
 
 /**
  * Lint one project's `.kxm` workforce. Errors fail CI. An admitted model with
- * no route is a warning. Alias declarations are not uses; a roster or step
+ * no route is a warning. A model file with `status: retired` may stay off
+ * every roster and off `.kxm/routes.yaml`; a roster that still names it is
+ * `route_not_admitted`. Alias declarations are not uses; a roster or step
  * that still cites an old id is a `deprecated_id` warning.
  */
 export function lintWorkforce(root) {
@@ -256,9 +260,14 @@ export function lintWorkforce(root) {
     if (!expected || model.id !== expected) {
       push(errors, "error", "route_id_convention", `.kxm/models/${model.id}.yaml`, `route id '${model.id}' must be '${expected ?? "<harness>-<model-slug>[-<provider>]"}'`);
     }
-    if (!used.has(model.id)) {
+    const retired = doc.status === "retired";
+    if (retired && used.has(model.id)) {
+      push(errors, "error", "route_not_admitted", `.kxm/models/${model.id}.yaml`, `retired route '${model.id}' is still on a role roster`);
+    }
+    if (!retired && !used.has(model.id)) {
       push(errors, "error", "route_unused", `.kxm/models/${model.id}.yaml`, `route '${model.id}' is not on any role roster`);
     }
+    if (retired) continue;
     const selectorHit = selectorsFor(doc).find((selector) => admitted.includes(selector));
     if (!selectorHit) {
       push(errors, "error", "route_not_admitted", `.kxm/models/${model.id}.yaml`, `model '${doc.model ?? ""}' is not an admitted selector`);

package/scripts/assignment-run.mjs

@@ -141,7 +141,7 @@ export const ATTRIBUTION_CLASSES = Object.freeze(["orchestration", "model", "env
 export const ACCEPTED_NOTE = "developer record; not human approval, hub peer evidence, CI success, or merged/released status";
 export const REQUIRED_ACCEPT_CRITICS = Object.freeze({
   "review-arch": Object.freeze({ harness: "claude", model: "fable", role: "reviewer-arch" }),
-  "review-cli": Object.freeze({ harness: "codex", model: "gpt-5.6-sol", role: "reviewer-cli" }),
+  "review-cli": Object.freeze({ harness: "codex", model: "gpt-6.1-sol", role: "reviewer-cli" }),
 });
 export const ASSIGNMENT_KINDS = Object.freeze([
   "plan",

package/scripts/harness-run.d.mts

@@ -19,7 +19,7 @@ export const PI_ALLOWED_PROVIDERS: readonly string[];
 export const PI_NATIVE_VENDOR_PROVIDERS: Readonly<Record<string, string>>;
 export const PI_ANTIGRAVITY_MODEL_ID: RegExp;
 export const PI_NOUS_PORTAL_HY4: "nous-portal/tencent/hy4-preview";
-export const PI_ADMITTED_WRITER: "openrouter/qwen/qwen3-coder-plus";
+export const PI_ADMITTED_WRITER: "openrouter/qwen/qwen3.7-plus";
 export const ROUTES: Record<string, {
   provider: string;
   roles: readonly string[];

package/scripts/harness-run.mjs

@@ -88,7 +88,7 @@ export const PI_ANTIGRAVITY_MODEL_ID = /^gemini-[a-z0-9.-]+$/;
 export const PI_NOUS_PORTAL_HY4 = "nous-portal/tencent/hy4-preview";
 
 /** Narrowly admitted Pi writer. Other Pi models need reviewed route admission. */
-export const PI_ADMITTED_WRITER = "openrouter/qwen/qwen3-coder-plus";
+export const PI_ADMITTED_WRITER = "openrouter/qwen/qwen3.7-plus";
 
 const REQUEST_KEYS = Object.freeze([
   "schema",
@@ -164,7 +164,7 @@ export const ROUTES = Object.freeze({
     provider: "openai",
     roles: Object.freeze(["reviewer-cli"]),
     permissions: Object.freeze(["read-only"]),
-    models: Object.freeze(["gpt-5.6-sol"]),
+    models: Object.freeze(["gpt-6.1-sol", "gpt-5.6-sol"]),
     efforts: Object.freeze(["low", "medium", "high"]),
     auth: Object.freeze({ args: ["login", "status"], loginHint: "codex login" }),
   },
@@ -1555,7 +1555,7 @@ export function preflightRequest(request) {
       }
     }
     if (request.role === "writer" && (request.model !== PI_ADMITTED_WRITER || request.permission !== "edit")) {
-      throw failClosed("pi writer refuses unsupported route; allows only authenticated openrouter/qwen/qwen3-coder-plus with edit permission; other models need reviewed route admission");
+      throw failClosed("pi writer refuses unsupported route; allows only authenticated openrouter/qwen/qwen3.7-plus with edit permission; other models need reviewed route admission");
     }
     const segment = piProviderOf(piModelId(request.model));
     const vendor = segment && Object.hasOwn(PI_VENDOR_SEGMENT_ALIASES, segment) ? PI_VENDOR_SEGMENT_ALIASES[segment] : segment;