@kyo-so/cli 0.9.1 → 0.10.0

package/dist/utils/env.d.ts

@@ -1,5 +1,18 @@
+import { type CodexProvider } from "../config/schema.js";
+export declare const OPENROUTER_API_KEY_ENV = "OPENROUTER_API_KEY";
+export declare const KYOSO_OPENROUTER_PROVIDER_ID = "kyoso-openrouter";
+export declare class ChildEnvPreflightError extends Error {
+    readonly code: "OPENROUTER_KEY_MISSING" | "AGENT_CONFIG_INVALID";
+    constructor(code: "OPENROUTER_KEY_MISSING" | "AGENT_CONFIG_INVALID", message: string);
+}
 export declare function buildChildEnv(parentEnv: NodeJS.ProcessEnv, whitelist: string[], explicit: Record<string, string>, options?: {
     agent?: "codex" | "claude";
     model?: string;
+    provider?: CodexProvider;
     preferApiKey?: boolean;
+    onCredentialPlaceholderDiscarded?: (key: string) => void;
+    onOpenRouterCredentialWithheld?: (key: string) => void;
+    onOpenRouterProvidersDiscarded?: (count: number) => void;
 }): NodeJS.ProcessEnv;
+export declare function hasUsableEnvValue(env: Record<string, string | undefined>, key: string): boolean;
+export declare function isUnexpandedEnvPlaceholder(value: string | undefined): boolean;

package/examples/codex-config.toml

@@ -1,7 +1,10 @@
 [mcp_servers.kyoso]
 command = "npx"
 args = ["-y", "@kyo-so/cli", "mcp"]
-env_vars = ["OPENAI_API_KEY", "CODEX_API_KEY", "ANTHROPIC_API_KEY", "CLAUDE_CODE_OAUTH_TOKEN"]
+# Generated by `kyoso setup codex --write`. For OpenRouter, use
+# `kyoso setup codex --write --with-openrouter`, or insert
+# "OPENROUTER_API_KEY" after "CODEX_ACCESS_TOKEN" in this list.
+env_vars = ["OPENAI_API_KEY", "CODEX_API_KEY", "CODEX_HOME", "CODEX_ACCESS_TOKEN", "ANTHROPIC_API_KEY", "CLAUDE_CODE_OAUTH_TOKEN"]
 startup_timeout_sec = 20
 tool_timeout_sec = 360
 enabled = true

package/examples/kyoso.toml

@@ -4,6 +4,20 @@ defaultMode = "model_only"
 [agents.codex]
 # Omit model to use the user's Codex default from ~/.codex/config.toml.
 # model = "gpt-5.5"
+#
+# To opt in here, or override a model while OpenRouter is inherited, first add
+# this exact absolute project directory to
+# `allowProjectProvider = ["/absolute/path/to/project"]` under `[agents.codex]`
+# in user-global `~/.config/kyoso/config.toml`. Project TOML and `--set` cannot
+# grant that authorization; legacy boolean values are rejected. A non-empty model
+# is required.
+# provider = "openrouter"
+# model = "openai/o4-mini"
+#
+# To reset an inherited user-global OpenRouter selection for this project:
+# provider = "default"
+#
+# Remove provider to return to the existing Codex provider/login behavior.
 
 [agents.claude]
 # Omit model to use the Claude adapter default.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kyo-so/cli",
-  "version": "0.9.1",
+  "version": "0.10.0",
   "description": "Kyo-so: MCP-native, ACP-powered multi-agent review gates for AI coding workflows.",
   "license": "AGPL-3.0-or-later",
   "repository": {
@@ -43,6 +43,7 @@
     "lint": "tsc --noEmit",
     "format": "prettier --write .",
     "format:check": "prettier --check .",
+    "smoke:openrouter:codex-acp": "bun run src/cli/main.ts openrouter-acp-smoke",
     "plugin:sync": "node scripts/plugin-sync.mjs",
     "plugin:verify": "node scripts/verify-plugin.mjs",
     "plugin:verify:registry": "node scripts/verify-plugin-registry.mjs",