@lazyingart/agintiflow 0.20.187 → 0.20.188

package/README.md

@@ -85,11 +85,12 @@ aginti init --template aaps
 aginti init --template supervision
 ```
 
-On first interactive use, AgInTiFlow opens an auth wizard if no main model key is found. Pick DeepSeek, OpenAI, Qwen, or Venice, paste the key, and it saves to the ignored project-local `.aginti/.env` file with restricted permissions. You can rerun setup any time:
+On first interactive use, AgInTiFlow opens an auth wizard if no main model key is found. Pick DeepSeek, OpenAI, OpenRouter, Qwen, or Venice, paste the key, and it saves to the ignored project-local `.aginti/.env` file with restricted permissions. You can rerun setup any time:
 
 ```bash
 aginti auth
 aginti auth deepseek
+aginti auth openrouter
 aginti auth venice
 aginti login grsai
 ```
@@ -99,6 +100,7 @@ Provider signup and key pages:
 | Provider | Register / key page | API base URL used by AgInTiFlow |
 | --- | --- | --- |
 | DeepSeek | [https://platform.deepseek.com/api_keys](https://platform.deepseek.com/api_keys) | `https://api.deepseek.com` |
+| OpenRouter | [https://openrouter.ai/settings/keys](https://openrouter.ai/settings/keys) | `https://openrouter.ai/api/v1` |
 | Venice | [https://venice.ai/settings/api](https://venice.ai/settings/api) | `https://api.venice.ai/api/v1` |
 | OpenAI | [https://platform.openai.com/api-keys](https://platform.openai.com/api-keys) | `https://api.openai.com/v1` |
 | Qwen / DashScope | [https://bailian.console.aliyun.com/](https://bailian.console.aliyun.com/) | `https://dashscope-intl.aliyuncs.com/compatible-mode/v1` |
@@ -273,6 +275,7 @@ Useful selectors:
 ```
 
 Venice routes can be used for optional uncensored or less restricted creative work. DeepSeek remains the economic default for normal engineering workflows. See [docs/model-selection.md](docs/model-selection.md) and [references/venice-model-reference.md](references/venice-model-reference.md).
+OpenRouter is available as a first-class OpenAI-compatible provider with one key and company-grouped model buckets such as OpenRouter OpenAI, Anthropic, Google, DeepSeek, Qwen, Meta, Mistral, Moonshot, and xAI.
 
 ## AAPS And Large Workflows
 
@@ -348,6 +351,9 @@ Common environment variables:
 ```bash
 DEEPSEEK_API_KEY=...
 OPENAI_API_KEY=...
+OPENROUTER_API_KEY=...
+OPENROUTER_BASE_URL=https://openrouter.ai/api/v1
+OPENROUTER_MODEL=openrouter/auto
 QWEN_API_KEY=...
 VENICE_API_KEY=...
 GRSAI_API_KEY=...
@@ -365,6 +371,7 @@ Project-local keys:
 ```bash
 aginti init
 printf '%s' "$DEEPSEEK_API_KEY" | aginti keys set deepseek --stdin
+printf '%s' "$OPENROUTER_API_KEY" | aginti keys set openrouter --stdin
 printf '%s' "$VENICE_API_KEY" | aginti keys set venice --stdin
 ```
 

package/docs/model-selection.md

@@ -25,6 +25,8 @@ aginti --list-routes
 
 # one-shot overrides
 aginti --route-model deepseek-v4-flash --main-model deepseek-v4-pro "fix this project"
+aginti --provider openrouter --model openrouter/auto --routing manual "try a gateway route"
+aginti --provider openrouter --model anthropic/claude-sonnet-4.6 --routing manual "draft a design review"
 aginti --provider venice --model venice-uncensored-1-2 --routing manual "draft a note"
 aginti --spare-provider openai --spare-model gpt-5.4 --spare-reasoning medium "review this design"
 aginti --allow-wrappers --wrapper codex --wrapper-model gpt-5.5 "patch this bug"
@@ -63,6 +65,13 @@ Provider families:
 | DeepSeek | `deepseek-v4-flash`, `deepseek-v4-pro` |
 | Venice | `venice-uncensored-1-2`, `venice-uncensored`, `gemma-4-uncensored` |
 | OpenAI | `gpt-5.5`, `gpt-5.4`, `gpt-5.4-mini`, `gpt-5.3-codex`, `gpt-5.3-codex-spark`, `gpt-5.2`; each has low/medium/high/xhigh reasoning |
+| OpenRouter | `openrouter/auto`, `openrouter/pareto-code`, `openrouter/free` |
+| OpenRouter OpenAI | `openai/gpt-5.5`, `openai/gpt-5.4`, `openai/gpt-5.4-mini`, `openai/gpt-4o` |
+| OpenRouter Anthropic | Claude routes such as `anthropic/claude-sonnet-4.6`, `anthropic/claude-opus-4.7`, `anthropic/claude-opus-4.8-fast` |
+| OpenRouter Google | Gemini/Gemma routes such as `google/gemini-3.5-flash`, `google/gemini-3.1-flash-lite`, `google/gemma-4-31b-it` |
+| OpenRouter DeepSeek | `deepseek/deepseek-v4-flash`, `deepseek/deepseek-v4-pro`, `deepseek/deepseek-r1-0528` |
+| OpenRouter Qwen | Qwen routes such as `qwen/qwen3.7-max`, `qwen/qwen3.6-flash`, `qwen/qwen3.6-plus` |
+| OpenRouter Meta/Mistral/Moonshot/xAI | `meta-llama/llama-4-maverick`, `mistralai/mistral-medium-3-5`, `moonshotai/kimi-k2.6`, `x-ai/grok-4.3` |
 | Venice GPT | GPT-family Venice routes such as `openai-gpt-55`, `openai-gpt-54`, `openai-gpt-54-mini`, `openai-gpt-53-codex`, `openai-gpt-52` |
 | Venice Gemma | Gemma instruct routes such as `google-gemma-4-31b-it`, `google-gemma-4-26b-a4b-it`, `google-gemma-3-27b-it` |
 | Venice Claude | Claude Sonnet/Opus routes such as `claude-sonnet-4-6`, `claude-opus-4-7`, `claude-opus-4-6` |
@@ -96,6 +105,16 @@ It keeps smart routing enabled. If the Venice key is missing, run `/auth venice`
 | --- | --- | --- |
 | `deepseek` | DeepSeek | Default route/main because V4 Flash and V4 Pro are cheap and strong. |
 | `openai` | OpenAI | Spare/frontier checks, Codex-family work, and explicit manual routes. |
+| `openrouter` | OpenRouter | OpenAI-compatible gateway with auto/free/code routers. |
+| `openrouter-openai` | OpenRouter | OpenAI-family models through OpenRouter. |
+| `openrouter-anthropic` | OpenRouter | Claude-family models through OpenRouter. |
+| `openrouter-google` | OpenRouter | Gemini/Gemma models through OpenRouter. |
+| `openrouter-deepseek` | OpenRouter | DeepSeek models through OpenRouter. |
+| `openrouter-qwen` | OpenRouter | Qwen models through OpenRouter. |
+| `openrouter-meta` | OpenRouter | Meta Llama models through OpenRouter. |
+| `openrouter-mistral` | OpenRouter | Mistral models through OpenRouter. |
+| `openrouter-moonshot` | OpenRouter | Moonshot/Kimi models through OpenRouter. |
+| `openrouter-xai` | OpenRouter | xAI Grok models through OpenRouter. |
 | `qwen` | Qwen | Chinese and general-purpose OpenAI-compatible tasks. |
 | `venice` | Venice | Venice-native text shortcuts: Venice 1.2, Venice 1.1, and Gemma 4 Uncensored. |
 | `venice-gpt` | Venice | GPT-family models through Venice. |
@@ -118,8 +137,10 @@ Keys are set per project and stored only in ignored `.aginti/.env`:
 
 ```bash
 aginti auth
+aginti auth openrouter
 aginti auth venice
 aginti keys status
+printf '%s' "$OPENROUTER_API_KEY" | aginti keys set openrouter --stdin
 printf '%s' "$VENICE_API_KEY" | aginti keys set venice --stdin
 ```
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lazyingart/agintiflow",
-  "version": "0.20.187",
+  "version": "0.20.188",
   "type": "module",
   "description": "AgInTiFlow is a project-aware agent workspace for hybrid wet-dry R&D, hardware-aware intelligence, software automation, and industrial workflows.",
   "license": "Apache-2.0",

package/public/app.js

@@ -820,6 +820,7 @@ const ariaLabelNodes = [...document.querySelectorAll("[data-i18n-aria-label]")];
 
 const defaults = {
   openai: "gpt-5.4-mini",
+  openrouter: "openrouter/auto",
   deepseek: "deepseek-v4-flash",
   qwen: "qwen-plus",
   venice: "venice-uncensored-1-2",
@@ -983,6 +984,7 @@ function renderKeyStatus(status = lastKeyStatus) {
   if (!status) return;
   const providers = [
     ["OpenAI", status.openai],
+    ["OpenRouter", status.openrouter],
     ["DeepSeek", status.deepseek],
     ["Qwen", status.qwen],
     ["Venice", status.venice],
@@ -1009,7 +1011,7 @@ function renderKeyStatus(status = lastKeyStatus) {
       })
     );
   }
-  if (setupCardEl) setupCardEl.hidden = Boolean(status.openai || status.deepseek || status.qwen || status.venice);
+  if (setupCardEl) setupCardEl.hidden = Boolean(status.openai || status.openrouter || status.deepseek || status.qwen || status.venice);
 }
 
 function renderProjectStatus(info = projectInfo) {
@@ -1611,6 +1613,7 @@ function fieldValue(field) {
 const providerLabels = {
   deepseek: "DeepSeek",
   openai: "OpenAI",
+  openrouter: "OpenRouter",
   qwen: "Qwen",
   venice: "Venice",
   mock: "Mock local",
@@ -1634,14 +1637,14 @@ function setChoiceOptions(select, options, selectedValue = "", fallbackValue = "
 }
 
 function configuredTextProviders({ includeMock = true } = {}) {
-  const base = ["deepseek", "openai", "qwen", "venice"];
+  const base = ["deepseek", "openai", "openrouter", "qwen", "venice"];
   if (includeMock) base.push("mock");
   if (Object.keys(modelCatalog || {}).length === 0) return base;
   return base.filter((provider) => provider === "mock" || Array.isArray(modelCatalog[provider]));
 }
 
 function refreshProviderDropdowns() {
-  setChoiceOptions(setupProviderField, ["deepseek", "openai", "qwen", "venice", "grsai"], setupProviderField?.value || "deepseek", "deepseek");
+  setChoiceOptions(setupProviderField, ["deepseek", "openai", "openrouter", "qwen", "venice", "grsai"], setupProviderField?.value || "deepseek", "deepseek");
   setChoiceOptions(providerField, configuredTextProviders({ includeMock: true }), providerField?.value || "deepseek", "deepseek");
   setChoiceOptions(routeProviderField, configuredTextProviders({ includeMock: true }), routeProviderField?.value || "deepseek", "deepseek");
   setChoiceOptions(mainProviderField, configuredTextProviders({ includeMock: false }), mainProviderField?.value || "deepseek", "deepseek");
@@ -3874,7 +3877,13 @@ deleteSessionButton.addEventListener("click", () => {
 });
 
 providerField.addEventListener("change", () => {
-  if (providerField.value === "mock" || providerField.value === "venice" || providerField.value === "openai" || providerField.value === "qwen") {
+  if (
+    providerField.value === "mock" ||
+    providerField.value === "venice" ||
+    providerField.value === "openai" ||
+    providerField.value === "openrouter" ||
+    providerField.value === "qwen"
+  ) {
     routingModeField.value = "manual";
   }
 
@@ -4208,6 +4217,7 @@ async function loadConfig() {
   taskProfiles = data.taskProfiles || [];
   projectInfo = data.project || null;
   defaults.openai = data.defaults?.openai?.model || defaults.openai;
+  defaults.openrouter = data.defaults?.openrouter?.model || defaults.openrouter;
   defaults.qwen = data.defaults?.qwen?.model || defaults.qwen;
   defaults.venice = data.defaults?.venice?.model || defaults.venice;
   defaults.deepseek = routingPresets.fast?.model || data.defaults?.deepseek?.model || defaults.deepseek;

package/public/index.html

@@ -65,10 +65,10 @@
           <div>
             <strong data-i18n="setupTitle">Provider setup</strong>
             <p class="subtle" data-i18n="setupHelp">
-              DeepSeek/OpenAI/Qwen/Venice keys are missing. Use mock mode, export an env var, or save a project-local key.
+              DeepSeek/OpenAI/OpenRouter/Qwen/Venice keys are missing. Use mock mode, export an env var, or save a project-local key.
             </p>
             <p class="subtle" data-i18n="setupEnvHelp">
-              Env vars: DEEPSEEK_API_KEY, OPENAI_API_KEY, QWEN_API_KEY, VENICE_API_KEY, or LLM_API_KEY. Mock mode remains available for local tests.
+              Env vars: DEEPSEEK_API_KEY, OPENAI_API_KEY, OPENROUTER_API_KEY, QWEN_API_KEY, VENICE_API_KEY, or LLM_API_KEY. Mock mode remains available for local tests.
             </p>
             <p class="subtle key-links">
               <span data-i18n="setupKeyLinksLabel">Get keys:</span>
@@ -76,6 +76,8 @@
               <span aria-hidden="true">·</span>
               <a href="https://platform.openai.com/api-keys" target="_blank" rel="noreferrer" data-i18n="openaiKeyLink">OpenAI API keys</a>
               <span aria-hidden="true">·</span>
+              <a href="https://openrouter.ai/settings/keys" target="_blank" rel="noreferrer">OpenRouter API keys</a>
+              <span aria-hidden="true">·</span>
               <a href="https://venice.ai" target="_blank" rel="noreferrer">Venice API</a>
             </p>
           </div>
@@ -85,6 +87,7 @@
               <select id="setup-provider">
                 <option value="deepseek">DeepSeek</option>
                 <option value="openai">OpenAI</option>
+                <option value="openrouter">OpenRouter</option>
                 <option value="qwen">Qwen</option>
                 <option value="venice">Venice</option>
                 <option value="grsai">GRS AI image</option>
@@ -132,6 +135,7 @@
             <select id="provider" name="provider">
               <option value="deepseek">DeepSeek</option>
               <option value="openai">OpenAI</option>
+              <option value="openrouter">OpenRouter</option>
               <option value="qwen">Qwen</option>
               <option value="venice">Venice</option>
               <option value="mock" data-i18n="mockProviderOption">Mock local</option>
@@ -414,6 +418,7 @@
               <select id="routeProvider" name="routeProvider">
                 <option value="deepseek">DeepSeek</option>
                 <option value="openai">OpenAI</option>
+                <option value="openrouter">OpenRouter</option>
                 <option value="qwen">Qwen</option>
                 <option value="venice">Venice</option>
                 <option value="mock">Mock</option>
@@ -427,6 +432,7 @@
               <select id="mainProvider" name="mainProvider">
                 <option value="deepseek">DeepSeek</option>
                 <option value="openai">OpenAI</option>
+                <option value="openrouter">OpenRouter</option>
                 <option value="qwen">Qwen</option>
                 <option value="venice">Venice</option>
               </select>
@@ -438,6 +444,7 @@
               <span>Spare</span>
               <select id="spareProvider" name="spareProvider">
                 <option value="openai">OpenAI</option>
+                <option value="openrouter">OpenRouter</option>
                 <option value="deepseek">DeepSeek</option>
                 <option value="qwen">Qwen</option>
                 <option value="venice">Venice</option>

package/references/agintiflow-npm-publication-memory.md

@@ -10,6 +10,17 @@ This note records the working publication route for AgInTiFlow so future release
 
 Latest verified release:
 
+- Version: `0.20.187`
+- Commit: `9339b2e`
+- GitHub Actions run: `https://github.com/lazyingart/AgInTiFlow/actions/runs/26701125864`
+- Workflow result: success
+- npm registry check: `npm view @lazyingart/agintiflow version dist-tags.latest --registry=https://registry.npmjs.org` returned `0.20.187`.
+- Installed verification: `npm install -g @lazyingart/agintiflow@0.20.187` then `aginti --version` returned `0.20.187`.
+- Webapp verification: `aginti webapp restart --port 3210` then `curl -fsS http://127.0.0.1:3210/health` returned `version":"0.20.187"` from the global npm package path.
+- Workspace explorer verification: `POST /api/workspace/snapshot` returned no `.aginti/`, `.aginti-work/`, `.sessions/`, or `.env` entries for the project root.
+
+Previous verified release:
+
 - Version: `0.20.186`
 - Commit: `f32a748`
 - GitHub Actions run: `https://github.com/lazyingart/AgInTiFlow/actions/runs/26700782132`

package/scripts/smoke-auth.js

@@ -10,7 +10,16 @@ import { maskProviderKey, providerKeyPreview, providerKeyStatus, setProviderKey
 
 const repoRoot = path.resolve(path.dirname(fileURLToPath(import.meta.url)), "..");
 const tempRoot = await fs.mkdtemp(path.join(os.tmpdir(), "agintiflow-auth-"));
-const envKeys = ["DEEPSEEK_API_KEY", "OPENAI_API_KEY", "LLM_API_KEY", "QWEN_API_KEY", "VENICE_API_KEY", "GRSAI", "GRSAI_API_KEY"];
+const envKeys = [
+  "DEEPSEEK_API_KEY",
+  "OPENAI_API_KEY",
+  "OPENROUTER_API_KEY",
+  "LLM_API_KEY",
+  "QWEN_API_KEY",
+  "VENICE_API_KEY",
+  "GRSAI",
+  "GRSAI_API_KEY",
+];
 const originalEnv = Object.fromEntries(envKeys.map((key) => [key, process.env[key]]));
 for (const key of envKeys) delete process.env[key];
 
@@ -55,57 +64,85 @@ async function runCli(args, stdin = "") {
 
 try {
   assert(normalizeAuthProvider("auxiliary") === "grsai", "auxiliary alias did not normalize to grsai");
+  assert(normalizeAuthProvider("or") === "openrouter", "OpenRouter alias did not normalize");
+  assert(normalizeAuthProvider("open-router") === "openrouter", "open-router alias did not normalize");
   assert(normalizeAuthProvider("qwen") === "qwen", "qwen provider did not normalize");
   assert(normalizeAuthProvider("venice") === "venice", "venice provider did not normalize");
   assert(authProviderKeyUrl("deepseek") === "https://platform.deepseek.com/api_keys", "DeepSeek key URL is missing");
+  assert(authProviderKeyUrl("openrouter") === "https://openrouter.ai/settings/keys", "OpenRouter key URL is missing");
   assert(authProviderKeyHelp("openai").includes("https://platform.openai.com/api-keys"), "OpenAI key help is missing");
   assert(maskProviderKey("short") === "s…t (5 chars)", "short key mask was not compact");
   assert(maskProviderKey("test-openai-key") === "test…-key (15 chars)", "long key mask did not preserve prefix/suffix");
   const qwenDefaults = getProviderDefaults("qwen");
   assert(qwenDefaults.provider === "qwen" && qwenDefaults.model, "qwen provider defaults are not available");
+  const openrouterDefaults = getProviderDefaults("openrouter");
+  assert(
+    openrouterDefaults.provider === "openrouter" &&
+      openrouterDefaults.baseURL === "https://openrouter.ai/api/v1" &&
+      openrouterDefaults.model === "openrouter/auto",
+    "openrouter provider defaults are not available"
+  );
   const veniceDefaults = getProviderDefaults("venice");
   assert(veniceDefaults.provider === "venice" && veniceDefaults.model === "venice-uncensored-1-2", "venice provider defaults are not available");
 
   process.env.DEEPSEEK_API_KEY = "ambient-deepseek-key";
+  process.env.OPENROUTER_API_KEY = "ambient-openrouter-key";
   process.env.VENICE_API_KEY = "ambient-venice-key";
   process.env.GRSAI_API_KEY = "ambient-grsai-key";
   let status = providerKeyStatus(tempRoot);
-  assert(status.deepseek && status.venice && status.grsai, "ambient provider keys were not detected");
+  assert(status.deepseek && status.openrouter && status.venice && status.grsai, "ambient provider keys were not detected");
   assert(status.localEnv, "ambient provider keys were not persisted into local .aginti/.env");
   const localEnv = await fs.readFile(path.join(tempRoot, ".aginti", ".env"), "utf8");
   assert(localEnv.includes("DEEPSEEK_API_KEY="), "ambient DeepSeek key was not saved locally");
+  assert(localEnv.includes("OPENROUTER_API_KEY="), "ambient OpenRouter key was not saved locally");
   assert(localEnv.includes("VENICE_API_KEY="), "ambient Venice key was not saved locally");
   assert(localEnv.includes("GRSAI_API_KEY="), "ambient GRS AI key was not saved locally");
   delete process.env.DEEPSEEK_API_KEY;
+  delete process.env.OPENROUTER_API_KEY;
   delete process.env.VENICE_API_KEY;
   delete process.env.GRSAI_API_KEY;
   status = providerKeyStatus(tempRoot);
-  assert(status.deepseek && status.venice && status.grsai, "persisted provider keys were not reloaded after ambient env was cleared");
+  assert(status.deepseek && status.openrouter && status.venice && status.grsai, "persisted provider keys were not reloaded after ambient env was cleared");
 
   await setProviderKey(tempRoot, "qwen", "test-qwen-key");
+  await setProviderKey(tempRoot, "openrouter", "test-openrouter-key");
   await setProviderKey(tempRoot, "venice", "test-venice-key");
   status = providerKeyStatus(tempRoot);
   assert(status.qwen, "qwen key status was not detected");
+  assert(status.openrouter, "openrouter key status was not detected");
   assert(status.venice, "venice key status was not detected");
   assert(status.envVars.qwen.includes("QWEN_API_KEY"), "qwen env var name was not reported");
+  assert(status.envVars.openrouter.includes("OPENROUTER_API_KEY"), "openrouter env var name was not reported");
   assert(status.envVars.venice.includes("VENICE_API_KEY"), "venice env var name was not reported");
   const qwenPreview = providerKeyPreview(tempRoot, "qwen");
   assert(qwenPreview.available && qwenPreview.preview === "test…-key (13 chars)", "qwen key preview was not masked correctly");
+  const openrouterPreview = providerKeyPreview(tempRoot, "openrouter");
+  assert(
+    openrouterPreview.available && openrouterPreview.preview === "test…-key (19 chars)",
+    "openrouter key preview was not masked correctly"
+  );
   const venicePreview = providerKeyPreview(tempRoot, "venice");
   assert(venicePreview.available && venicePreview.preview === "test…-key (15 chars)", "venice key preview was not masked correctly");
 
   await runCli(["keys", "set", "openai", "--stdin"], "test-openai-key");
   await runCli(["keys", "set", "grsai", "--stdin"], "test-grsai-key");
   status = providerKeyStatus(tempRoot);
-  assert(status.openai && status.grsai && status.qwen && status.venice, "stored auth keys were not detected");
+  assert(status.openai && status.openrouter && status.grsai && status.qwen && status.venice, "stored auth keys were not detected");
   const openaiPreview = providerKeyPreview(tempRoot, "openai");
   assert(openaiPreview.preview === "test…-key (15 chars)", "openai key preview was not masked correctly");
   assert(openaiPreview.preview !== "test-openai-key", "openai key preview leaked raw key");
 
   const keysOutput = await runCli(["keys", "status"]);
+  assert(keysOutput.includes("openrouter=available"), "keys status did not include openrouter");
   assert(keysOutput.includes("qwen=available"), "keys status did not include qwen");
   assert(keysOutput.includes("venice=available"), "keys status did not include venice");
-  assert(!keysOutput.includes("test-openai-key") && !keysOutput.includes("test-qwen-key") && !keysOutput.includes("test-venice-key"), "keys status leaked a raw key");
+  assert(
+    !keysOutput.includes("test-openai-key") &&
+      !keysOutput.includes("test-openrouter-key") &&
+      !keysOutput.includes("test-qwen-key") &&
+      !keysOutput.includes("test-venice-key"),
+    "keys status leaked a raw key"
+  );
 
   console.log(
     JSON.stringify(
@@ -118,9 +155,11 @@ try {
           "provider-key-mask",
           "provider-key-preview",
           "qwen-defaults",
+          "openrouter-defaults",
           "venice-defaults",
           "ambient-key-autopersist",
           "qwen-key-status",
+          "openrouter-key-status",
           "venice-key-status",
           "cli-key-status-redacted",
         ],

package/scripts/smoke-model-roles.js

@@ -207,6 +207,14 @@ assert(modelsForProviderGroup("venice-claude").some((item) => item.id === "claud
 assert(modelsForProviderGroup("venice-qwen").some((item) => item.id === "qwen3-coder-480b-a35b-instruct-turbo"), "venice-qwen bucket missing Qwen Coder");
 assert(AUXILIARY_MODEL_CATALOG["venice-image"].some((item) => item.id === "gpt-image-2"), "Venice image catalog missing GPT Image 2");
 assert(AUXILIARY_MODEL_CATALOG["venice-image"].some((item) => item.id === "wan-2-7-pro-edit"), "Venice image catalog missing Wan edit");
+assert(MODEL_PROVIDER_GROUPS["openrouter"].provider === "openrouter", "openrouter group missing");
+assert(MODEL_PROVIDER_GROUPS["openrouter-openai"].provider === "openrouter", "openrouter-openai group missing");
+assert(modelsForProviderGroup("openrouter").some((item) => item.id === "openrouter/auto"), "openrouter group missing auto router");
+assert(modelsForProviderGroup("openrouter-openai").some((item) => item.id === "openai/gpt-5.4-mini"), "openrouter OpenAI bucket missing GPT-5.4 Mini");
+assert(modelsForProviderGroup("openrouter-anthropic").some((item) => item.id === "anthropic/claude-sonnet-4.6"), "openrouter Anthropic bucket missing Claude Sonnet");
+assert(modelsForProviderGroup("openrouter-google").some((item) => item.id === "google/gemini-3.5-flash"), "openrouter Google bucket missing Gemini");
+assert(modelsForProviderGroup("openrouter-deepseek").some((item) => item.id === "deepseek/deepseek-v4-pro"), "openrouter DeepSeek bucket missing V4 Pro");
+assert(modelsForProviderGroup("openrouter-qwen").some((item) => item.id === "qwen/qwen3.7-max"), "openrouter Qwen bucket missing Qwen Max");
 const routeChoices = modelRoleChoices("route").map((item) => `${item.provider}/${item.model}`);
 const mainChoices = modelRoleChoices("main").map((item) => `${item.provider}/${item.model}`);
 const spareChoices = modelRoleChoices("spare").map((item) => `${item.provider}/${item.model}`);
@@ -231,6 +239,12 @@ for (const expected of [
   "openai/gpt-5.4-mini",
   "openai/gpt-5.3-codex",
   "openai/gpt-5.3-codex-spark",
+  "openrouter/openrouter/auto",
+  "openrouter/openai/gpt-5.4-mini",
+  "openrouter/anthropic/claude-sonnet-4.6",
+  "openrouter/google/gemini-3.5-flash",
+  "openrouter/deepseek/deepseek-v4-pro",
+  "openrouter/qwen/qwen3.7-max",
   "qwen/qwen-plus",
   "mock/mock-agent",
 ]) {

package/scripts/smoke-web-api.js

@@ -123,6 +123,18 @@ try {
 
   const config = await fetchJson("/api/config");
   if (!config.keyStatus?.mock) throw new Error("mock provider is not advertised by /api/config");
+  if (!Object.prototype.hasOwnProperty.call(config.keyStatus || {}, "openrouter")) {
+    throw new Error("OpenRouter key status is not advertised by /api/config");
+  }
+  if (config.defaults?.openrouter?.baseURL !== "https://openrouter.ai/api/v1") {
+    throw new Error(`OpenRouter defaults are missing from /api/config: ${JSON.stringify(config.defaults?.openrouter)}`);
+  }
+  if (!config.modelCatalog?.openrouter?.some((model) => model.id === "openrouter/auto")) {
+    throw new Error("OpenRouter model catalog is missing from /api/config");
+  }
+  if (!config.modelGroups?.["openrouter-openai"]) {
+    throw new Error("OpenRouter company model groups are missing from /api/config");
+  }
   if (!config.workspace?.enabled) throw new Error("workspace file tools are not advertised by /api/config");
   if (config.preferences?.preferredWrapper !== "codex") throw new Error("Codex is not the default preferred wrapper");
   if (config.project?.root !== runtimeDir) throw new Error("web project root did not default to launch directory");

package/scripts/smoke-web-ui.js

@@ -297,7 +297,7 @@ try {
   await page.click("#open-settings");
   await page.waitForSelector("#settings-modal[open]");
   const routeProviders = await optionValues(page, "#routeProvider");
-  for (const provider of ["deepseek", "openai", "qwen", "venice", "mock"]) {
+  for (const provider of ["deepseek", "openai", "openrouter", "qwen", "venice", "mock"]) {
     if (!routeProviders.includes(provider)) throw new Error(`settings route provider dropdown is missing ${provider}`);
   }
   const wrapperOptions = await optionValues(page, "#preferredWrapper");

package/src/auth-onboarding.js

@@ -36,6 +36,13 @@ export const MAIN_AUTH_PROVIDERS = [
     description: "OpenAI-compatible fallback",
     keyUrl: "https://platform.openai.com/api-keys",
   },
+  {
+    id: "openrouter",
+    label: "OpenRouter",
+    keyName: "OPENROUTER_API_KEY",
+    description: "OpenAI-compatible multi-provider gateway",
+    keyUrl: "https://openrouter.ai/settings/keys",
+  },
   {
     id: "qwen",
     label: "Qwen",
@@ -69,6 +76,10 @@ const AUTH_ALIASES = {
   deepseek: "deepseek",
   ds: "deepseek",
   openai: "openai",
+  openrouter: "openrouter",
+  "open-router": "openrouter",
+  or: "openrouter",
+  router: "openrouter",
   qwen: "qwen",
   venice: "venice",
   v: "venice",
@@ -76,7 +87,7 @@ const AUTH_ALIASES = {
 
 export function normalizeAuthProvider(provider = "", fallback = "deepseek") {
   const normalized = AUTH_ALIASES[String(provider || "").trim().toLowerCase()] || String(provider || "").trim().toLowerCase();
-  return ["deepseek", "openai", "qwen", "venice", "grsai"].includes(normalized) ? normalized : fallback;
+  return ["deepseek", "openai", "openrouter", "qwen", "venice", "grsai"].includes(normalized) ? normalized : fallback;
 }
 
 function providerLabel(provider = "") {
@@ -396,11 +407,11 @@ export async function chooseAuthProvider({
 
 export function shouldPromptForDeepSeek(args = {}, projectRoot = process.cwd()) {
   const provider = String(args.provider || "").toLowerCase();
-  if (provider === "mock" || provider === "openai" || provider === "qwen" || provider === "venice") return false;
+  if (provider === "mock" || provider === "openai" || provider === "openrouter" || provider === "qwen" || provider === "venice") return false;
   if (process.env.AGINTIFLOW_NO_AUTH_PROMPT === "1") return false;
   if (!input.isTTY || !output.isTTY) return false;
   const status = providerKeyStatus(projectRoot);
-  return !status.deepseek && !status.openai && !status.qwen && !status.venice;
+  return !status.deepseek && !status.openai && !status.openrouter && !status.qwen && !status.venice;
 }
 
 export async function promptAndSaveDeepSeekKey(projectRoot = process.cwd(), options = {}) {
@@ -422,7 +433,7 @@ export async function runAuthWizard(projectRoot = process.cwd(), options = {}) {
   const status = providerKeyStatus(projectRoot);
   const initialProvider = normalizeAuthProvider(options.provider || options.initialProvider || "deepseek", "deepseek");
   const directProvider =
-    options.provider && ["deepseek", "openai", "qwen", "venice", "grsai"].includes(normalizeAuthProvider(options.provider, ""))
+    options.provider && ["deepseek", "openai", "openrouter", "qwen", "venice", "grsai"].includes(normalizeAuthProvider(options.provider, ""))
       ? normalizeAuthProvider(options.provider)
       : "";
   const mainProvider =

package/src/capabilities.js

@@ -164,6 +164,7 @@ export async function buildCapabilityReport(projectRoot, packageVersion, config)
     capability("docker", Boolean(dockerStatus?.dockerAvailable), dockerStatus || {}),
     capability("deepseek-key", keyStatus.deepseek, { envVars: keyStatus.envVars.deepseek }),
     capability("openai-key", keyStatus.openai, { envVars: keyStatus.envVars.openai }),
+    capability("openrouter-key", keyStatus.openrouter, { envVars: keyStatus.envVars.openrouter }),
     capability("qwen-key", keyStatus.qwen, { envVars: keyStatus.envVars.qwen }),
     capability("venice-key", keyStatus.venice, { envVars: keyStatus.envVars.venice }),
     capability("grsai-key", keyStatus.grsai, {
@@ -238,6 +239,7 @@ export async function buildCapabilityReport(projectRoot, packageVersion, config)
     keys: {
       deepseek: keyStatus.deepseek,
       openai: keyStatus.openai,
+      openrouter: keyStatus.openrouter,
       qwen: keyStatus.qwen,
       venice: keyStatus.venice,
       grsai: keyStatus.grsai,
@@ -321,7 +323,7 @@ export function printCapabilityReport(report) {
   console.log(
     `keys: deepseek=${report.keys.deepseek ? "available" : "missing"} openai=${
       report.keys.openai ? "available" : "missing"
-    } qwen=${report.keys.qwen ? "available" : "missing"} venice=${
+    } openrouter=${report.keys.openrouter ? "available" : "missing"} qwen=${report.keys.qwen ? "available" : "missing"} venice=${
       report.keys.venice ? "available" : "missing"
     } grsai=${
       report.keys.grsai ? "available" : "missing"

package/src/cli.js

@@ -762,7 +762,7 @@ function exitOnUnknownOptions(parsed) {
 
 function printUsage() {
   console.log(
-    'Usage: aginti [chat] OR aginti init [--template minimal|disciplined|coding|research|writing|design|aaps|supervision] OR aginti web [--port 3210] OR aginti docker [status|setup|install-host] OR aginti update OR aginti image [--json] [--dry-run] [--format png|webp|svg] "prompt" OR aginti models OR aginti aaps [status|init|files|validate|compile|check|run] OR aginti mcp [status|config|inspect|tools|resources|read|prompts|prompt|call|restart] OR aginti skills [query] OR aginti skillmesh [status|off|record|share|sync|serve|service] OR aginti housekeeping [--json] OR aginti auth [deepseek|openai|qwen|venice|grsai] OR aginti resume [--all-sessions] [latest|<session-id>] ["prompt"] OR aginti --remove-empty-sessions OR aginti --remove-sessions OR aginti queue <session-id> "message" OR aginti [--no-auto-update] [-s safe|normal|danger] [--language en|ja|zh-Hans|zh-Hant|ko|fr|es|ar|vi|de|ru] [--image] [--latex] [--scs|--scs auto|--no-scs] [--dynamic-steps auto|on|off] [--routing smart|fast|complex|manual] [--provider deepseek|openai|qwen|venice|mock] [--model MODEL] [--route-model MODEL] [--main-model MODEL] [--spare-model MODEL --spare-reasoning medium] [--aux-provider grsai|venice --aux-model MODEL] [--sandbox-mode host|docker-readonly|docker-workspace] [--package-install-policy block|prompt|allow] [--approve-package-installs] [--allow-shell|--no-shell] [--allow-file-tools|--no-file-tools] [--web-search|--no-web-search] [--mcp|--no-mcp] [--parallel-scouts|--no-parallel-scouts --scout-count 1..10] [--allow-auxiliary-tools|--no-auxiliary-tools] [--allow-wrappers --wrapper codex --wrapper-model gpt-5.5] [--list-models|--list-routes] "your task"'
+    'Usage: aginti [chat] OR aginti init [--template minimal|disciplined|coding|research|writing|design|aaps|supervision] OR aginti web [--port 3210] OR aginti docker [status|setup|install-host] OR aginti update OR aginti image [--json] [--dry-run] [--format png|webp|svg] "prompt" OR aginti models OR aginti aaps [status|init|files|validate|compile|check|run] OR aginti mcp [status|config|inspect|tools|resources|read|prompts|prompt|call|restart] OR aginti skills [query] OR aginti skillmesh [status|off|record|share|sync|serve|service] OR aginti housekeeping [--json] OR aginti auth [deepseek|openai|openrouter|qwen|venice|grsai] OR aginti resume [--all-sessions] [latest|<session-id>] ["prompt"] OR aginti --remove-empty-sessions OR aginti --remove-sessions OR aginti queue <session-id> "message" OR aginti [--no-auto-update] [-s safe|normal|danger] [--language en|ja|zh-Hans|zh-Hant|ko|fr|es|ar|vi|de|ru] [--image] [--latex] [--scs|--scs auto|--no-scs] [--dynamic-steps auto|on|off] [--routing smart|fast|complex|manual] [--provider deepseek|openai|openrouter|qwen|venice|mock] [--model MODEL] [--route-model MODEL] [--main-model MODEL] [--spare-model MODEL --spare-reasoning medium] [--aux-provider grsai|venice --aux-model MODEL] [--sandbox-mode host|docker-readonly|docker-workspace] [--package-install-policy block|prompt|allow] [--approve-package-installs] [--allow-shell|--no-shell] [--allow-file-tools|--no-file-tools] [--web-search|--no-web-search] [--mcp|--no-mcp] [--parallel-scouts|--no-parallel-scouts --scout-count 1..10] [--allow-auxiliary-tools|--no-auxiliary-tools] [--allow-wrappers --wrapper codex --wrapper-model gpt-5.5] [--list-models|--list-routes] "your task"'
   );
   console.log("Permission shortcuts: -s safe asks before writes/setup; -s normal allows current-project writes and Docker setup; -s danger enables trusted host/full-access mode.");
   console.log(`Languages: ${["en", "ja", "zh-Hans", "zh-Hant", "ko", "fr", "es", "ar", "vi", "de", "ru"].map((code) => `${code}=${languageLabel(code)}`).join(", ")}`);
@@ -1157,6 +1157,7 @@ async function restartWebAppAfterUpdate({ commandCwd = process.cwd(), language =
 function providerLabel(provider) {
   const normalized = String(provider || "").toLowerCase();
   if (normalized === "openai") return "OpenAI";
+  if (normalized === "openrouter" || normalized === "or" || normalized === "open-router") return "OpenRouter";
   if (normalized === "qwen") return "Qwen";
   if (normalized === "venice") return "Venice";
   if (normalized === "grsai" || normalized === "auxiliary") return "GRSAI";
@@ -1394,7 +1395,7 @@ async function readStdin() {
 async function ensureDeepSeekKeyForOneShot(args) {
   if (!shouldPromptForDeepSeek(args, process.cwd())) return true;
   console.log("No main model API key is configured for this project.");
-  console.log("Choose DeepSeek, OpenAI, Qwen, or Venice, then paste a key to save in `.aginti/.env` with 0600 permissions.");
+  console.log("Choose DeepSeek, OpenAI, OpenRouter, Qwen, or Venice, then paste a key to save in `.aginti/.env` with 0600 permissions.");
   const result = await runAuthWizard(process.cwd(), { provider: args.provider || "" });
   printAuthWizardResult(result);
   if (result.saved.some((item) => item.provider !== "grsai")) {
@@ -1413,9 +1414,9 @@ async function handleKeyCommand(argv) {
         status.openai ? "available" : "missing"
       } qwen=${status.qwen ? "available" : "missing"} venice=${
         status.venice ? "available" : "missing"
-      } grsai=${status.grsai ? "available" : "missing"} mock=available localEnv=${status.localEnv}`
+      } openrouter=${status.openrouter ? "available" : "missing"} grsai=${status.grsai ? "available" : "missing"} mock=available localEnv=${status.localEnv}`
     );
-    console.log("env vars: DeepSeek=DEEPSEEK_API_KEY or LLM_API_KEY; OpenAI=OPENAI_API_KEY or LLM_API_KEY; Qwen=QWEN_API_KEY; Venice=VENICE_API_KEY; image=GRSAI or GRSAI_API_KEY");
+    console.log("env vars: DeepSeek=DEEPSEEK_API_KEY or LLM_API_KEY; OpenAI=OPENAI_API_KEY or LLM_API_KEY; OpenRouter=OPENROUTER_API_KEY; Qwen=QWEN_API_KEY; Venice=VENICE_API_KEY; image=GRSAI or GRSAI_API_KEY");
     return;
   }
 
@@ -1431,7 +1432,7 @@ async function handleKeyCommand(argv) {
     return;
   }
 
-  console.error("Usage: aginti keys status OR aginti keys set deepseek|openai|qwen|venice|grsai [--stdin]");
+  console.error("Usage: aginti keys status OR aginti keys set deepseek|openai|openrouter|qwen|venice|grsai [--stdin]");
   process.exit(1);
 }
 

package/src/config.js

@@ -45,11 +45,13 @@ export function resolveRuntimeConfig(args, overrides = {}) {
       ? "deepseek"
       : process.env.OPENAI_API_KEY
         ? "openai"
-        : process.env.QWEN_API_KEY
-          ? "qwen"
-          : process.env.VENICE_API_KEY
-            ? "venice"
-            : "deepseek");
+        : process.env.OPENROUTER_API_KEY
+          ? "openrouter"
+          : process.env.QWEN_API_KEY
+            ? "qwen"
+            : process.env.VENICE_API_KEY
+              ? "venice"
+              : "deepseek");
   const routingMode = normalizeRoutingMode(overrides.routingMode || args.routingMode || process.env.AGENT_ROUTING_MODE || "smart");
   const taskProfile = normalizeTaskProfile(overrides.taskProfile || args.taskProfile || process.env.AGINTI_TASK_PROFILE || "auto");
   const language = resolveLanguage(overrides.language || args.language || process.env.AGINTI_LANGUAGE || "");

package/src/guardrails.js

@@ -285,7 +285,7 @@ export function checkToolUse({ toolName, args, snapshot, config }) {
     const brief = String(args.writingBrief || args.brief || args.prompt || "").trim();
     if (!brief) return { allowed: false, reason: "Writing specialist requires writingBrief.", category: "writing-specialist" };
     const provider = String(args.provider || process.env.AGINTI_WRITING_PROVIDER || "").trim();
-    if (provider && !["deepseek", "openai", "qwen", "venice", "mock"].includes(provider)) {
+    if (provider && !["deepseek", "openai", "openrouter", "qwen", "venice", "mock"].includes(provider)) {
       return { allowed: false, reason: `Unknown writing specialist provider: ${provider}`, category: "writing-specialist" };
     }
     const payloadBytes = Buffer.byteLength(
@@ -321,7 +321,7 @@ export function checkToolUse({ toolName, args, snapshot, config }) {
       return { allowed: false, reason: "JSON specialist requires schema or schemaJson.", category: "json-specialist" };
     }
     const provider = String(args.provider || process.env.AGINTI_JSON_PROVIDER || "").trim();
-    if (provider && !["deepseek", "openai", "qwen", "venice", "mock"].includes(provider)) {
+    if (provider && !["deepseek", "openai", "openrouter", "qwen", "venice", "mock"].includes(provider)) {
       return { allowed: false, reason: `Unknown JSON specialist provider: ${provider}`, category: "json-specialist" };
     }
     const payloadBytes = Buffer.byteLength(
@@ -360,7 +360,7 @@ export function checkToolUse({ toolName, args, snapshot, config }) {
       return { allowed: false, reason: "JSON specialist batch concurrency is limited to 16.", category: "json-specialist" };
     }
     const provider = String(args.provider || args.defaults?.provider || process.env.AGINTI_JSON_PROVIDER || "").trim();
-    if (provider && !["deepseek", "openai", "qwen", "venice", "mock"].includes(provider)) {
+    if (provider && !["deepseek", "openai", "openrouter", "qwen", "venice", "mock"].includes(provider)) {
       return { allowed: false, reason: `Unknown JSON specialist provider: ${provider}`, category: "json-specialist" };
     }
     const payloadBytes = Buffer.byteLength(JSON.stringify({ defaults: args.defaults || {}, items }), "utf8");