@schlessera/brain-ui-server 0.23.0 → 0.25.0

package/dist/routes/models.js

@@ -5,14 +5,15 @@
 // with its visibility, plus discovery freshness so the UI can say when the list
 // was last refreshed and why it might be stale.
 import { Hono } from "hono";
-import { isBillingMode, } from "@schlessera/brain-ui-sdk";
-import { getBillingOverrides, getHiddenModelIds, setBillingOverrides, setHiddenModelIds, } from "../db/settings.js";
+import { isBillingMode, isThinkingLevel, } from "@schlessera/brain-ui-sdk";
+import { getBillingOverrides, getCustomOpenRouterModels, getDefaultModelId, getHiddenModelIds, getThinkingOverrides, setBillingOverrides, setCustomOpenRouterModels, setDefaultModelId, setHiddenModelIds, setThinkingOverrides, } from "../db/settings.js";
 export function createModelRoutes(deps) {
     const { registry, db, pricing } = deps;
     async function buildCatalog() {
         const source = await registry.getModelSource();
         const hidden = new Set(getHiddenModelIds(db));
         const overrides = getBillingOverrides(db);
+        const thinking = getThinkingOverrides(db);
         // `billingMode` already rides each provider entry (the registry applies the
         // override last); the catalog additionally tags WHICH rows carry an explicit
         // override, so the settings screen can render auto vs forced.
@@ -20,10 +21,18 @@ export function createModelRoutes(deps) {
             ...profile,
             hidden: hidden.has(profile.id),
             ...(overrides[profile.id] ? { billingOverride: overrides[profile.id] } : {}),
+            // `thinkingLevel` on the profile is already the EFFECTIVE level (the
+            // registry applies overrides at read time); this tags which rows carry
+            // an explicit user choice, so the UI can render default vs forced.
+            ...(thinking[profile.id] ? { thinkingOverride: thinking[profile.id] } : {}),
         }));
         const state = source?.state();
+        const resolvedDefaultId = await registry.getPreferredProfileId();
         return {
             models,
+            defaultModelId: getDefaultModelId(db),
+            ...(resolvedDefaultId ? { resolvedDefaultId } : {}),
+            customModels: getCustomOpenRouterModels(db),
             refreshedAt: state?.refreshedAt ?? null,
             stale: state?.stale ?? false,
             discovery: {
@@ -62,6 +71,86 @@ export function createModelRoutes(deps) {
         // The picker reads through a memo — drop it so the change is immediate.
         registry.invalidateProfiles();
         return c.json(await buildCatalog());
+    })
+        .put("/models/default", async (c) => {
+        const body = (await c.req.json().catch(() => null));
+        const defaultId = body?.defaultId;
+        if (defaultId !== null && typeof defaultId !== "string") {
+            return c.json({ error: "defaultId must be a profile id or null" }, 400);
+        }
+        if (typeof defaultId === "string") {
+            const known = await registry.listAllProviders({ includeHidden: true });
+            if (!known.some((profile) => profile.id === defaultId)) {
+                return c.json({ error: `Unknown profile id: ${defaultId}` }, 400);
+            }
+        }
+        setDefaultModelId(db, defaultId);
+        registry.invalidateProfiles();
+        return c.json(await buildCatalog());
+    })
+        .put("/models/custom", async (c) => {
+        const body = (await c.req.json().catch(() => null));
+        const models = body?.models;
+        if (!Array.isArray(models) || models.some((id) => typeof id !== "string")) {
+            return c.json({ error: "models must be an array of OpenRouter model ids" }, 400);
+        }
+        // OpenRouter ids are "<org>/<model>", org and model from a small safe
+        // charset (e.g. "z.ai/glm-5.3-flash", "openai/gpt-oss-120b:nitro").
+        const ID_SHAPE = /^[A-Za-z0-9][\w.-]*\/[\w.:-]+$/;
+        const bad = models.find((id) => !ID_SHAPE.test(id));
+        if (bad !== undefined) {
+            return c.json({ error: `Not an OpenRouter model id: "${bad}"` }, 400);
+        }
+        // A generated id ("openrouter:<model>") that collides with a profile
+        // another source owns (a pi profile, a discovered model) must be refused
+        // BEFORE persisting: stored, it would 500 every roster read until the
+        // setting is dug out of the database. An id the CLAUDE env already
+        // declares is fine — the merge dedupes it in the declared entry's favor.
+        const currentCustomIds = new Set(getCustomOpenRouterModels(db).map((model) => `openrouter:${model}`));
+        const nonCustomIds = new Set((await registry.listAllProviders({ includeHidden: true }))
+            .filter((profile) => !currentCustomIds.has(profile.id))
+            .map((profile) => profile.id));
+        const collision = models
+            .map((model) => `openrouter:${model}`)
+            .find((id) => nonCustomIds.has(id));
+        if (collision !== undefined) {
+            return c.json({ error: `"${collision}" collides with an existing profile id.` }, 400);
+        }
+        setCustomOpenRouterModels(db, models);
+        registry.invalidateProfiles();
+        // A removal that takes the stored default's profile off the roster would
+        // strand the default on nothing; reset it to auto — but only when the
+        // profile is actually gone (an id the env also declares survives the
+        // removal of its custom duplicate).
+        const currentDefault = getDefaultModelId(db);
+        if (currentDefault) {
+            const roster = await registry.listAllProviders({ includeHidden: true });
+            if (!roster.some((profile) => profile.id === currentDefault)) {
+                setDefaultModelId(db, null);
+            }
+        }
+        return c.json(await buildCatalog());
+    })
+        .put("/models/thinking", async (c) => {
+        const body = (await c.req.json().catch(() => null));
+        const thinking = body?.thinking;
+        if (typeof thinking !== "object" ||
+            thinking === null ||
+            Array.isArray(thinking) ||
+            Object.values(thinking).some((level) => !isThinkingLevel(level))) {
+            return c.json({ error: "thinking must map profile ids to a reasoning-effort level" }, 400);
+        }
+        // Only rows that actually take an effort level accept an override — a
+        // stray id would be stored dead weight and mislead the settings UI.
+        const known = await registry.listAllProviders({ includeHidden: true });
+        const supported = new Set(known.filter((profile) => profile.thinkingLevel).map((profile) => profile.id));
+        const stray = Object.keys(thinking).find((id) => !supported.has(id));
+        if (stray !== undefined) {
+            return c.json({ error: `Profile "${stray}" does not take a reasoning-effort level.` }, 400);
+        }
+        setThinkingOverrides(db, thinking);
+        registry.invalidateProfiles();
+        return c.json(await buildCatalog());
     })
         .put("/models/billing", async (c) => {
         const body = (await c.req.json().catch(() => null));

package/dist/routes/models.js.map

@@ -1 +1 @@
-{"version":3,"file":"models.js","sourceRoot":"","sources":["../../src/routes/models.ts"],"names":[],"mappings":"AAAA,mEAAmE;AACnE,EAAE;AACF,8EAA8E;AAC9E,4EAA4E;AAC5E,gFAAgF;AAChF,gDAAgD;AAGhD,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAE5B,OAAO,EACL,aAAa,GAId,MAAM,0BAA0B,CAAC;AAGlC,OAAO,EACL,mBAAmB,EACnB,iBAAiB,EACjB,mBAAmB,EACnB,iBAAiB,GAClB,MAAM,mBAAmB,CAAC;AAE3B,MAAM,UAAU,iBAAiB,CAAC,IAOjC;IACC,MAAM,EAAE,QAAQ,EAAE,EAAE,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC;IAEvC,KAAK,UAAU,YAAY;QAC3B,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,cAAc,EAAE,CAAC;QAC/C,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,iBAAiB,CAAC,EAAE,CAAC,CAAC,CAAC;QAC9C,MAAM,SAAS,GAAG,mBAAmB,CAAC,EAAE,CAAC,CAAC;QAC1C,4EAA4E;QAC5E,6EAA6E;QAC7E,8DAA8D;QAC9D,MAAM,MAAM,GAAwB,CAClC,MAAM,QAAQ,CAAC,gBAAgB,CAAC,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CACzD,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;YAClB,GAAG,OAAO;YACV,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;YAC9B,GAAG,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,SAAS,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC7E,CAAC,CAAC,CAAC;QAEJ,MAAM,KAAK,GAAG,MAAM,EAAE,KAAK,EAAE,CAAC;QAC9B,OAAO;YACL,MAAM;YACN,WAAW,EAAE,KAAK,EAAE,WAAW,IAAI,IAAI;YACvC,KAAK,EAAE,KAAK,EAAE,KAAK,IAAI,KAAK;YAC5B,SAAS,EAAE;gBACT,OAAO,EAAE,KAAK,EAAE,OAAO,IAAI,KAAK;gBAChC,GAAG,CAAC,KAAK,EAAE,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAC9D;SACF,CAAC;IACJ,CAAC;IAEC,OAAO,IAAI,IAAI,EAAE;SAChB,GAAG,CAAC,SAAS,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAC1B,yEAAyE;QACzE,uEAAuE;QACvE,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,cAAc,EAAE,CAAC;QAC/C,MAAM,MAAM,EAAE,WAAW,EAAE,CAAC;QAC5B,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,YAAY,EAAE,CAAC,CAAC;IACtC,CAAC,CAAC;SAED,GAAG,CAAC,iBAAiB,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAClC,sEAAsE;QACtE,0EAA0E;QAC1E,IAAI,CAAC,OAAO;YAAE,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,uBAAuB,EAAE,EAAE,GAAG,CAAC,CAAC;QACrE,uEAAuE;QACvE,uEAAuE;QACvE,6BAA6B;QAC7B,KAAK,OAAO,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QAC3C,OAAO,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC;IACjC,CAAC,CAAC;SAED,GAAG,CAAC,gBAAgB,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACjC,MAAM,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAY,CAAC;QAC/D,MAAM,MAAM,GAAI,IAAoC,EAAE,MAAM,CAAC;QAC7D,IACE,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;YACtB,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,OAAO,EAAE,KAAK,QAAQ,CAAC,EAC3C,CAAC;YACD,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,wCAAwC,EAAE,EAAE,GAAG,CAAC,CAAC;QAC1E,CAAC;QAED,iBAAiB,CAAC,EAAE,EAAE,MAAkB,CAAC,CAAC;QAC1C,wEAAwE;QACxE,QAAQ,CAAC,kBAAkB,EAAE,CAAC;QAC9B,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,YAAY,EAAE,CAAC,CAAC;IACtC,CAAC,CAAC;SAED,GAAG,CAAC,iBAAiB,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAClC,MAAM,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAY,CAAC;QAC/D,MAAM,OAAO,GAAI,IAAqC,EAAE,OAAO,CAAC;QAChE,IACE,OAAO,OAAO,KAAK,QAAQ;YAC3B,OAAO,KAAK,IAAI;YAChB,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC;YACtB,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,EAC3D,CAAC;YACD,OAAO,CAAC,CAAC,IAAI,CACX,EAAE,KAAK,EAAE,yDAAyD,EAAE,EACpE,GAAG,CACJ,CAAC;QACJ,CAAC;QAED,mBAAmB,CAAC,EAAE,EAAE,OAAsC,CAAC,CAAC;QAChE,wEAAwE;QACxE,gEAAgE;QAChE,QAAQ,CAAC,kBAAkB,EAAE,CAAC;QAC9B,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,YAAY,EAAE,CAAC,CAAC;IACtC,CAAC,CAAC;SAED,IAAI,CAAC,iBAAiB,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACnC,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,cAAc,EAAE,CAAC;QAC/C,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO,CAAC,CAAC,IAAI,CACX,EAAE,KAAK,EAAE,kDAAkD,EAAE,EAC7D,GAAG,CACJ,CAAC;QACJ,CAAC;QACD,IAAI,CAAC;YACH,MAAM,MAAM,CAAC,OAAO,EAAE,CAAC;QACzB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,yEAAyE;YACzE,iEAAiE;YACjE,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC;gBACb,YAAY,EAAE,MAAM;gBACpB,IAAI,EAAE,0DAA0D;gBAChE,UAAU,EAAE,EAAE,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE;aACxE,CAAC,CAAC;QACL,CAAC;QACD,QAAQ,CAAC,kBAAkB,EAAE,CAAC;QAC9B,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,YAAY,EAAE,CAAC,CAAC;IACtC,CAAC,CAAC,CAAC;AACL,CAAC"}
+{"version":3,"file":"models.js","sourceRoot":"","sources":["../../src/routes/models.ts"],"names":[],"mappings":"AAAA,mEAAmE;AACnE,EAAE;AACF,8EAA8E;AAC9E,4EAA4E;AAC5E,gFAAgF;AAChF,gDAAgD;AAGhD,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAE5B,OAAO,EACL,aAAa,EACb,eAAe,GAKhB,MAAM,0BAA0B,CAAC;AAGlC,OAAO,EACL,mBAAmB,EACnB,yBAAyB,EACzB,iBAAiB,EACjB,iBAAiB,EACjB,oBAAoB,EACpB,mBAAmB,EACnB,yBAAyB,EACzB,iBAAiB,EACjB,iBAAiB,EACjB,oBAAoB,GACrB,MAAM,mBAAmB,CAAC;AAE3B,MAAM,UAAU,iBAAiB,CAAC,IAOjC;IACC,MAAM,EAAE,QAAQ,EAAE,EAAE,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC;IAEvC,KAAK,UAAU,YAAY;QAC3B,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,cAAc,EAAE,CAAC;QAC/C,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,iBAAiB,CAAC,EAAE,CAAC,CAAC,CAAC;QAC9C,MAAM,SAAS,GAAG,mBAAmB,CAAC,EAAE,CAAC,CAAC;QAC1C,MAAM,QAAQ,GAAG,oBAAoB,CAAC,EAAE,CAAC,CAAC;QAC1C,4EAA4E;QAC5E,6EAA6E;QAC7E,8DAA8D;QAC9D,MAAM,MAAM,GAAwB,CAClC,MAAM,QAAQ,CAAC,gBAAgB,CAAC,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CACzD,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;YAClB,GAAG,OAAO;YACV,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;YAC9B,GAAG,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,SAAS,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC5E,qEAAqE;YACrE,uEAAuE;YACvE,mEAAmE;YACnE,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC5E,CAAC,CAAC,CAAC;QAEJ,MAAM,KAAK,GAAG,MAAM,EAAE,KAAK,EAAE,CAAC;QAC9B,MAAM,iBAAiB,GAAG,MAAM,QAAQ,CAAC,qBAAqB,EAAE,CAAC;QACjE,OAAO;YACL,MAAM;YACN,cAAc,EAAE,iBAAiB,CAAC,EAAE,CAAC;YACrC,GAAG,CAAC,iBAAiB,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACnD,YAAY,EAAE,yBAAyB,CAAC,EAAE,CAAC;YAC3C,WAAW,EAAE,KAAK,EAAE,WAAW,IAAI,IAAI;YACvC,KAAK,EAAE,KAAK,EAAE,KAAK,IAAI,KAAK;YAC5B,SAAS,EAAE;gBACT,OAAO,EAAE,KAAK,EAAE,OAAO,IAAI,KAAK;gBAChC,GAAG,CAAC,KAAK,EAAE,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAC9D;SACF,CAAC;IACJ,CAAC;IAEC,OAAO,IAAI,IAAI,EAAE;SAChB,GAAG,CAAC,SAAS,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAC1B,yEAAyE;QACzE,uEAAuE;QACvE,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,cAAc,EAAE,CAAC;QAC/C,MAAM,MAAM,EAAE,WAAW,EAAE,CAAC;QAC5B,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,YAAY,EAAE,CAAC,CAAC;IACtC,CAAC,CAAC;SAED,GAAG,CAAC,iBAAiB,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAClC,sEAAsE;QACtE,0EAA0E;QAC1E,IAAI,CAAC,OAAO;YAAE,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,uBAAuB,EAAE,EAAE,GAAG,CAAC,CAAC;QACrE,uEAAuE;QACvE,uEAAuE;QACvE,6BAA6B;QAC7B,KAAK,OAAO,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QAC3C,OAAO,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC;IACjC,CAAC,CAAC;SAED,GAAG,CAAC,gBAAgB,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACjC,MAAM,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAY,CAAC;QAC/D,MAAM,MAAM,GAAI,IAAoC,EAAE,MAAM,CAAC;QAC7D,IACE,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;YACtB,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,OAAO,EAAE,KAAK,QAAQ,CAAC,EAC3C,CAAC;YACD,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,wCAAwC,EAAE,EAAE,GAAG,CAAC,CAAC;QAC1E,CAAC;QAED,iBAAiB,CAAC,EAAE,EAAE,MAAkB,CAAC,CAAC;QAC1C,wEAAwE;QACxE,QAAQ,CAAC,kBAAkB,EAAE,CAAC;QAC9B,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,YAAY,EAAE,CAAC,CAAC;IACtC,CAAC,CAAC;SAED,GAAG,CAAC,iBAAiB,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAClC,MAAM,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAY,CAAC;QAC/D,MAAM,SAAS,GAAI,IAAuC,EAAE,SAAS,CAAC;QACtE,IAAI,SAAS,KAAK,IAAI,IAAI,OAAO,SAAS,KAAK,QAAQ,EAAE,CAAC;YACxD,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,wCAAwC,EAAE,EAAE,GAAG,CAAC,CAAC;QAC1E,CAAC;QACD,IAAI,OAAO,SAAS,KAAK,QAAQ,EAAE,CAAC;YAClC,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,gBAAgB,CAAC,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;YACvE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,EAAE,KAAK,SAAS,CAAC,EAAE,CAAC;gBACvD,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,uBAAuB,SAAS,EAAE,EAAE,EAAE,GAAG,CAAC,CAAC;YACpE,CAAC;QACH,CAAC;QAED,iBAAiB,CAAC,EAAE,EAAE,SAAS,CAAC,CAAC;QACjC,QAAQ,CAAC,kBAAkB,EAAE,CAAC;QAC9B,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,YAAY,EAAE,CAAC,CAAC;IACtC,CAAC,CAAC;SAED,GAAG,CAAC,gBAAgB,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACjC,MAAM,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAY,CAAC;QAC/D,MAAM,MAAM,GAAI,IAAoC,EAAE,MAAM,CAAC;QAC7D,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,OAAO,EAAE,KAAK,QAAQ,CAAC,EAAE,CAAC;YAC1E,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,iDAAiD,EAAE,EAAE,GAAG,CAAC,CAAC;QACnF,CAAC;QACD,sEAAsE;QACtE,oEAAoE;QACpE,MAAM,QAAQ,GAAG,gCAAgC,CAAC;QAClD,MAAM,GAAG,GAAI,MAAmB,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;QAClE,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;YACtB,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,gCAAgC,GAAG,GAAG,EAAE,EAAE,GAAG,CAAC,CAAC;QACxE,CAAC;QAED,qEAAqE;QACrE,yEAAyE;QACzE,sEAAsE;QACtE,mEAAmE;QACnE,yEAAyE;QACzE,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAC9B,yBAAyB,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,cAAc,KAAK,EAAE,CAAC,CACpE,CAAC;QACF,MAAM,YAAY,GAAG,IAAI,GAAG,CAC1B,CAAC,MAAM,QAAQ,CAAC,gBAAgB,CAAC,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;aACvD,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,gBAAgB,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;aACtD,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,CAChC,CAAC;QACF,MAAM,SAAS,GAAI,MAAmB;aACnC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,cAAc,KAAK,EAAE,CAAC;aACrC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,YAAY,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;QACtC,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;YAC5B,OAAO,CAAC,CAAC,IAAI,CACX,EAAE,KAAK,EAAE,IAAI,SAAS,yCAAyC,EAAE,EACjE,GAAG,CACJ,CAAC;QACJ,CAAC;QAED,yBAAyB,CAAC,EAAE,EAAE,MAAkB,CAAC,CAAC;QAClD,QAAQ,CAAC,kBAAkB,EAAE,CAAC;QAE9B,yEAAyE;QACzE,sEAAsE;QACtE,qEAAqE;QACrE,oCAAoC;QACpC,MAAM,cAAc,GAAG,iBAAiB,CAAC,EAAE,CAAC,CAAC;QAC7C,IAAI,cAAc,EAAE,CAAC;YACnB,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,gBAAgB,CAAC,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;YACxE,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,EAAE,KAAK,cAAc,CAAC,EAAE,CAAC;gBAC7D,iBAAiB,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;YAC9B,CAAC;QACH,CAAC;QACD,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,YAAY,EAAE,CAAC,CAAC;IACtC,CAAC,CAAC;SAED,GAAG,CAAC,kBAAkB,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACnC,MAAM,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAY,CAAC;QAC/D,MAAM,QAAQ,GAAI,IAAsC,EAAE,QAAQ,CAAC;QACnE,IACE,OAAO,QAAQ,KAAK,QAAQ;YAC5B,QAAQ,KAAK,IAAI;YACjB,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC;YACvB,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC,EAChE,CAAC;YACD,OAAO,CAAC,CAAC,IAAI,CACX,EAAE,KAAK,EAAE,2DAA2D,EAAE,EACtE,GAAG,CACJ,CAAC;QACJ,CAAC;QACD,sEAAsE;QACtE,oEAAoE;QACpE,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,gBAAgB,CAAC,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;QACvE,MAAM,SAAS,GAAG,IAAI,GAAG,CACvB,KAAK,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,CAC9E,CAAC;QACF,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;QACrE,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,OAAO,CAAC,CAAC,IAAI,CACX,EAAE,KAAK,EAAE,YAAY,KAAK,2CAA2C,EAAE,EACvE,GAAG,CACJ,CAAC;QACJ,CAAC;QAED,oBAAoB,CAAC,EAAE,EAAE,QAAyC,CAAC,CAAC;QACpE,QAAQ,CAAC,kBAAkB,EAAE,CAAC;QAC9B,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,YAAY,EAAE,CAAC,CAAC;IACtC,CAAC,CAAC;SAED,GAAG,CAAC,iBAAiB,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAClC,MAAM,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAY,CAAC;QAC/D,MAAM,OAAO,GAAI,IAAqC,EAAE,OAAO,CAAC;QAChE,IACE,OAAO,OAAO,KAAK,QAAQ;YAC3B,OAAO,KAAK,IAAI;YAChB,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC;YACtB,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,EAC3D,CAAC;YACD,OAAO,CAAC,CAAC,IAAI,CACX,EAAE,KAAK,EAAE,yDAAyD,EAAE,EACpE,GAAG,CACJ,CAAC;QACJ,CAAC;QAED,mBAAmB,CAAC,EAAE,EAAE,OAAsC,CAAC,CAAC;QAChE,wEAAwE;QACxE,gEAAgE;QAChE,QAAQ,CAAC,kBAAkB,EAAE,CAAC;QAC9B,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,YAAY,EAAE,CAAC,CAAC;IACtC,CAAC,CAAC;SAED,IAAI,CAAC,iBAAiB,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACnC,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,cAAc,EAAE,CAAC;QAC/C,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO,CAAC,CAAC,IAAI,CACX,EAAE,KAAK,EAAE,kDAAkD,EAAE,EAC7D,GAAG,CACJ,CAAC;QACJ,CAAC;QACD,IAAI,CAAC;YACH,MAAM,MAAM,CAAC,OAAO,EAAE,CAAC;QACzB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,yEAAyE;YACzE,iEAAiE;YACjE,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC;gBACb,YAAY,EAAE,MAAM;gBACpB,IAAI,EAAE,0DAA0D;gBAChE,UAAU,EAAE,EAAE,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE;aACxE,CAAC,CAAC;QACL,CAAC;QACD,QAAQ,CAAC,kBAAkB,EAAE,CAAC;QAC9B,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,YAAY,EAAE,CAAC,CAAC;IACtC,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/ws/routing.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"routing.d.ts","sourceRoot":"","sources":["../../src/ws/routing.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,iCAAiC,CAAC;AACpE,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAC3D,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAE3D;;;GAGG;AACH,wBAAsB,iBAAiB,CACrC,QAAQ,EAAE,eAAe,EACzB,OAAO,EAAE,cAAc,EACvB,SAAS,EAAE,MAAM,GAAG,SAAS,EAC7B,SAAS,EAAE,MAAM,GAAG,SAAS,GAC5B,OAAO,CAAC;IAAE,SAAS,CAAC,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,YAAY,CAAC;IAAC,UAAU,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CAyB7E"}
+{"version":3,"file":"routing.d.ts","sourceRoot":"","sources":["../../src/ws/routing.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,iCAAiC,CAAC;AACpE,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAC3D,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAE3D;;;GAGG;AACH,wBAAsB,iBAAiB,CACrC,QAAQ,EAAE,eAAe,EACzB,OAAO,EAAE,cAAc,EACvB,SAAS,EAAE,MAAM,GAAG,SAAS,EAC7B,SAAS,EAAE,MAAM,GAAG,SAAS,GAC5B,OAAO,CAAC;IAAE,SAAS,CAAC,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,YAAY,CAAC;IAAC,UAAU,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CAkC7E"}

package/dist/ws/routing.js

@@ -23,6 +23,15 @@ export async function resolveTurnTarget(registry, catalog, sessionId, requested)
                 return { backend, profileId: requested };
         }
     }
+    // No explicit choice (fresh client, share, host-initiated action): the
+    // preferred default — the Settings-stored default model, else a connected
+    // subscription-auth profile — before the default backend's own first profile.
+    const preferred = await registry.getPreferredProfileId();
+    if (preferred) {
+        const backend = await registry.getBackendForProfile(preferred);
+        if (backend)
+            return { backend, profileId: preferred };
+    }
     const backend = await registry.getDefaultBackend();
     const profileId = (await backend.listProfiles())[0]?.id;
     return { backend, ...(profileId ? { profileId } : {}) };

package/dist/ws/routing.js.map

@@ -1 +1 @@
-{"version":3,"file":"routing.js","sourceRoot":"","sources":["../../src/ws/routing.ts"],"names":[],"mappings":"AAIA;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,QAAyB,EACzB,OAAuB,EACvB,SAA6B,EAC7B,SAA6B;IAE7B,IAAI,SAAS,EAAE,CAAC;QACd,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,oBAAoB,CAAC,OAAO,CAAC,kBAAkB,CAAC,SAAS,CAAC,CAAC,CAAC;QAC3F,MAAM,MAAM,GAAG,OAAO,CAAC,mBAAmB,CAAC,SAAS,CAAC,CAAC;QACtD,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,YAAY,EAAE,CAAC;QAC/C,IAAI,MAAM,IAAI,SAAS,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,EAAE,KAAK,MAAM,CAAC,EAAE,CAAC;YACjE,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC;QACxC,CAAC;QACD,yEAAyE;QACzE,0EAA0E;QAC1E,wEAAwE;QACxE,OAAO,EAAE,OAAO,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;IAChE,CAAC;IAED,IAAI,SAAS,EAAE,CAAC;QACd,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC,gBAAgB,EAAE,CAAC;QACpD,IAAI,SAAS,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,EAAE,KAAK,SAAS,CAAC,EAAE,CAAC;YAC1D,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,oBAAoB,CAAC,SAAS,CAAC,CAAC;YAC/D,IAAI,OAAO;gBAAE,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC;QACxD,CAAC;IACH,CAAC;IAED,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,iBAAiB,EAAE,CAAC;IACnD,MAAM,SAAS,GAAG,CAAC,MAAM,OAAO,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;IACxD,OAAO,EAAE,OAAO,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;AAC1D,CAAC"}
+{"version":3,"file":"routing.js","sourceRoot":"","sources":["../../src/ws/routing.ts"],"names":[],"mappings":"AAIA;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,QAAyB,EACzB,OAAuB,EACvB,SAA6B,EAC7B,SAA6B;IAE7B,IAAI,SAAS,EAAE,CAAC;QACd,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,oBAAoB,CAAC,OAAO,CAAC,kBAAkB,CAAC,SAAS,CAAC,CAAC,CAAC;QAC3F,MAAM,MAAM,GAAG,OAAO,CAAC,mBAAmB,CAAC,SAAS,CAAC,CAAC;QACtD,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,YAAY,EAAE,CAAC;QAC/C,IAAI,MAAM,IAAI,SAAS,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,EAAE,KAAK,MAAM,CAAC,EAAE,CAAC;YACjE,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC;QACxC,CAAC;QACD,yEAAyE;QACzE,0EAA0E;QAC1E,wEAAwE;QACxE,OAAO,EAAE,OAAO,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;IAChE,CAAC;IAED,IAAI,SAAS,EAAE,CAAC;QACd,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC,gBAAgB,EAAE,CAAC;QACpD,IAAI,SAAS,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,EAAE,KAAK,SAAS,CAAC,EAAE,CAAC;YAC1D,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,oBAAoB,CAAC,SAAS,CAAC,CAAC;YAC/D,IAAI,OAAO;gBAAE,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC;QACxD,CAAC;IACH,CAAC;IAED,uEAAuE;IACvE,0EAA0E;IAC1E,8EAA8E;IAC9E,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC,qBAAqB,EAAE,CAAC;IACzD,IAAI,SAAS,EAAE,CAAC;QACd,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,oBAAoB,CAAC,SAAS,CAAC,CAAC;QAC/D,IAAI,OAAO;YAAE,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC;IACxD,CAAC;IAED,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,iBAAiB,EAAE,CAAC;IACnD,MAAM,SAAS,GAAG,CAAC,MAAM,OAAO,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;IACxD,OAAO,EAAE,OAAO,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;AAC1D,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@schlessera/brain-ui-server",
-  "version": "0.23.0",
+  "version": "0.25.0",
   "description": "brain-kit chat-UI server: Hono app factory, WebSocket turn coordinator, auth (password/passkeys/tailscale/proxy), session catalog, and brain/files/voice routes",
   "license": "MIT",
   "keywords": [
@@ -51,8 +51,8 @@
   "dependencies": {
     "@opentelemetry/api": "^1.9.1",
     "@opentelemetry/api-logs": "0.221.0",
-    "@schlessera/brain-render-template": "0.23.0",
-    "@schlessera/brain-ui-sdk": "0.23.0",
+    "@schlessera/brain-render-template": "0.25.0",
+    "@schlessera/brain-ui-sdk": "0.25.0",
     "@simplewebauthn/server": "^13.3.2",
     "hono": "^4",
     "ignore": "^7.0.5",

package/src/agent/backend.ts

@@ -199,6 +199,23 @@ export interface BackendRegistryOptions {
    * sessions pinned to it. Defaults to "nothing hidden".
    */
   getHiddenModelIds?: () => string[];
+  /**
+   * Settings-stored default profile id (Settings → Models). Null/absent =
+   * auto (a connected subscription-auth profile, else the default backend's
+   * own default).
+   */
+  getDefaultModelId?: () => string | null;
+  /**
+   * User-managed OpenRouter model ids (from the app's settings table), added
+   * to the Claude roster as declared OpenRouter profiles at runtime.
+   */
+  getCustomOpenRouterModels?: () => string[];
+  /**
+   * Per-profile reasoning-effort overrides (from the app's settings table),
+   * applied over the pi roster's configured levels at read time — no rebuild
+   * or redeploy needed.
+   */
+  getThinkingOverrides?: () => Record<string, PiThinkingLevel>;
   /**
    * Per-profile billing-mode overrides (from the app's settings table).
    * Consulted LAST: an override wins over both the declared-credential rule
@@ -234,6 +251,17 @@ export interface BackendRegistry {
    * catalog.
    */
   listAllProviders(options?: { includeHidden?: boolean }): Promise<ProviderInfo[]>;
+  /**
+   * The profile new sessions and host-initiated turns (shares, actions)
+   * default to when the client named none, or null for "the default
+   * backend's own default". Resolution: the Settings-stored default model
+   * (when it still exists on the roster) wins; otherwise AUTO — a
+   * subscription-auth profile (pi vendor "openai-codex") that is on the
+   * roster, not hidden, and whose account is actually connected. The
+   * resolved profile is also listed FIRST by `listAllProviders`, so a fresh
+   * client's picker lands on it.
+   */
+  getPreferredProfileId(): Promise<string | null>;
   /** Per-backend capability metadata exposed by the providers route. */
   getBackendsInfo(): Promise<
     Record<string, { id: string; capabilities: BackendCapabilities }>
@@ -552,26 +580,54 @@ export function createBackendRegistry(
   let mergeCache: {
     declared: ClaudeProfile[];
     discovered: ClaudeProfileInput[];
+    customKey: string;
     result: ClaudeProfile[];
   } | null = null;
 
+  /**
+   * User-managed OpenRouter models (Settings → Models) as declared Claude
+   * profiles — same shape a BRAIN_UI_CLAUDE_PROFILES OpenRouter entry has,
+   * but editable at runtime without an env change or redeploy.
+   */
+  function customOpenRouterInputs(): ClaudeProfileInput[] {
+    const models = options.getCustomOpenRouterModels?.() ?? [];
+    return models.map((model) => ({
+      id: `openrouter:${model}`,
+      label: `${model} (OpenRouter)`,
+      vendor: "openrouter",
+      model,
+      baseUrl: "https://openrouter.ai/api",
+      authTokenEnv: "OPENROUTER_API_KEY",
+      modelAliases: true,
+      source: "declared" as const,
+    }));
+  }
+
   function mergeDiscovered(
     claude: ClaudeBackendModule,
     declared: ClaudeProfile[],
     discovered: ClaudeProfileInput[]
   ): ClaudeProfile[] {
+    const custom = customOpenRouterInputs();
+    const customKey = custom.map((profile) => profile.id).join("\n");
     if (
       mergeCache &&
       mergeCache.declared === declared &&
-      mergeCache.discovered === discovered
+      mergeCache.discovered === discovered &&
+      mergeCache.customKey === customKey
     ) {
       return mergeCache.result;
     }
 
     const declaredIds = new Set(declared.map((profile) => profile.id));
-    const extra = discovered.filter((input) => !declaredIds.has(input.id));
-    const result = [...declared, ...claude.defineProfiles(extra)];
-    mergeCache = { declared, discovered, result };
+    const customExtra = custom.filter((input) => !declaredIds.has(input.id));
+    // OpenRouter runs on its own key: always api-billed, like an env-declared
+    // profile with explicit credentials.
+    for (const input of customExtra) declaredApiProfileIds.add(input.id);
+    const knownIds = new Set([...declaredIds, ...customExtra.map((input) => input.id)]);
+    const extra = discovered.filter((input) => !knownIds.has(input.id));
+    const result = [...declared, ...claude.defineProfiles([...customExtra, ...extra])];
+    mergeCache = { declared, discovered, customKey, result };
     return result;
   }
 
@@ -697,7 +753,7 @@ export function createBackendRegistry(
     const mod = (await loadBackendModule("pi")) as {
       createPiBackend?: (opts: {
         brainPath: string;
-        profiles?: PiProfileInput[];
+        profiles?: PiProfileInput[] | (() => PiProfileInput[]);
         log?: BackendLogFn;
       }) => AgentBackend;
     };
@@ -709,9 +765,20 @@ export function createBackendRegistry(
     // Re-parsed here (assertBackendResolvable already validated at boot) so an
     // injected-registry path without the boot assert still fails loudly.
     const profiles = parsePiProfiles(agent.piProfilesJson, agent.profilesJson);
+    // A FUNCTION, so per-profile thinking overrides from settings are read on
+    // every use (roster listing AND new-session model resolution) — a change
+    // in Settings applies to the next turn without a rebuild.
+    const withOverrides = (): PiProfileInput[] => {
+      const overrides = options.getThinkingOverrides?.() ?? {};
+      return profiles.map((profile) =>
+        overrides[profile.id]
+          ? { ...profile, thinkingLevel: overrides[profile.id] }
+          : profile
+      );
+    };
     return mod.createPiBackend({
       brainPath,
-      ...(profiles.length > 0 ? { profiles } : {}),
+      ...(profiles.length > 0 ? { profiles: withOverrides } : {}),
       ...(backendLog ? { log: backendLog } : {}),
     });
   }
@@ -749,6 +816,33 @@ export function createBackendRegistry(
     return cachedRegistry;
   }
 
+  /**
+   * Whether the openai-codex (ChatGPT subscription) account is connected —
+   * a cheap file probe through the pi package, memoized briefly so provider
+   * listings and turn routing don't re-read the auth store on every call.
+   */
+  let codexCredentialCache: { at: number; value: boolean } | null = null;
+  async function hasCodexCredential(): Promise<boolean> {
+    const piInPlay = Boolean(agent.piProfilesJson) || (agent.backend || "claude") === "pi";
+    if (!piInPlay) return false;
+    if (codexCredentialCache && Date.now() - codexCredentialCache.at < PROFILE_MEMO_MS) {
+      return codexCredentialCache.value;
+    }
+    let value = false;
+    try {
+      const mod = (await loadBackendModule("pi")) as {
+        hasStoredCredential?: (providerId: string) => boolean;
+      };
+      value =
+        typeof mod.hasStoredCredential === "function" &&
+        mod.hasStoredCredential("openai-codex");
+    } catch {
+      value = false;
+    }
+    codexCredentialCache = { at: Date.now(), value };
+    return value;
+  }
+
   return makeRegistry(
     getRegistry,
     getHidden,
@@ -762,6 +856,10 @@ export function createBackendRegistry(
       ...(options.getBillingOverrides
         ? { getOverrides: options.getBillingOverrides }
         : {}),
+    },
+    {
+      ...(options.getDefaultModelId ? { getOverride: options.getDefaultModelId } : {}),
+      auto: { vendor: "openai-codex", hasCredential: hasCodexCredential },
     }
   );
 }
@@ -777,6 +875,7 @@ export function createStaticBackendRegistry(
   defaultBackendId = backends[0]?.id ?? "",
   options: {
     getHiddenModelIds?: () => string[];
+    getDefaultModelId?: () => string | null;
     getBillingOverrides?: () => Record<string, BillingMode>;
     log?: Logger;
   } = {}
@@ -791,7 +890,9 @@ export function createStaticBackendRegistry(
     // registry could reason about, so only an explicit override sets a mode.
     options.getBillingOverrides
       ? { getOverrides: options.getBillingOverrides }
-      : {}
+      : {},
+    // No auto rule either — only the stored default applies here.
+    options.getDefaultModelId ? { getOverride: options.getDefaultModelId } : {}
   );
 }
 
@@ -806,6 +907,12 @@ function makeRegistry(
     classify?: (profile: ProviderInfo & { backendId: string }) => BillingMode;
     /** Settings overrides, consulted LAST — an override wins over `classify`. */
     getOverrides?: () => Record<string, BillingMode>;
+  } = {},
+  defaults: {
+    /** Settings-stored default profile id; null/absent = auto. */
+    getOverride?: () => string | null;
+    /** Auto rule: prefer this vendor's profile while its account is connected. */
+    auto?: { vendor: string; hasCredential: () => Promise<boolean> };
   } = {}
 ): BackendRegistry {
   let profileSnapshot: ProfileSnapshot | null = null;
@@ -866,6 +973,36 @@ function makeRegistry(
     }
   }
 
+  /**
+   * The preferred-default profile. The stored Settings override wins while it
+   * still names a roster profile (a vanished profile falls through to auto
+   * rather than pinning turns to nothing); auto is the first non-hidden
+   * roster entry of the auto vendor, but only while its credential exists.
+   * Any failure degrades to "no preference" — this must never take routing
+   * down.
+   */
+  async function getPreferredProfileId(): Promise<string | null> {
+    try {
+      const snapshot = await getProfileSnapshot();
+      const override = defaults.getOverride?.() ?? null;
+      if (override && snapshot.owners.has(override)) return override;
+
+      const auto = defaults.auto;
+      if (!auto) return null;
+      const registry = await getRegistry();
+      const hidden = hiddenIds();
+      for (const backend of registry.backends) {
+        const match = (snapshot.byBackend.get(backend.id) ?? []).find(
+          (profile) => profile.vendor === auto.vendor && !hidden.has(profile.id)
+        );
+        if (match) return (await auto.hasCredential()) ? match.id : null;
+      }
+      return null;
+    } catch {
+      return null;
+    }
+  }
+
   return {
     async getBackends() {
       return (await getRegistry()).backends;
@@ -910,7 +1047,7 @@ function makeRegistry(
       // saved override is live for the very next run without invalidation.
       const overrides = billingOverrides();
 
-      return registry.backends.flatMap((backend) =>
+      const providers = registry.backends.flatMap((backend) =>
         (snapshot.byBackend.get(backend.id) ?? [])
           .filter((profile) => !hidden.has(profile.id))
           .map((profile) => {
@@ -919,8 +1056,19 @@ function makeRegistry(
             return billingMode ? { ...entry, billingMode } : entry;
           })
       );
+
+      // A connected subscription-auth profile leads the list: a fresh client
+      // with no stored selection defaults to providers[0].
+      const preferredId = await getPreferredProfileId();
+      if (preferredId) {
+        const index = providers.findIndex((provider) => provider.id === preferredId);
+        if (index > 0) providers.unshift(...providers.splice(index, 1));
+      }
+      return providers;
     },
 
+    getPreferredProfileId,
+
     async getBackendsInfo() {
       const backends = (await getRegistry()).backends;
       return Object.fromEntries(

package/src/app.ts

@@ -34,7 +34,13 @@ import {
   type PasskeyContext,
 } from "./middleware/passkeys.js";
 import { createUiDb } from "./db/client.js";
-import { getBillingOverrides, getHiddenModelIds } from "./db/settings.js";
+import {
+  getBillingOverrides,
+  getCustomOpenRouterModels,
+  getDefaultModelId,
+  getHiddenModelIds,
+  getThinkingOverrides,
+} from "./db/settings.js";
 import { createActivityRuntime } from "./activity/runtime.js";
 import { createModelPricing } from "./pricing/model-pricing.js";
 import { createPushRoutes } from "./routes/push.js";
@@ -200,6 +206,9 @@ export function createApp(options: CreateAppOptions = {}): BrainUiApp {
       brainPath: config.brainPath,
       agent: config.agent,
       getHiddenModelIds: () => getHiddenModelIds(db, dbLog),
+      getDefaultModelId: () => getDefaultModelId(db, dbLog),
+      getCustomOpenRouterModels: () => getCustomOpenRouterModels(db, dbLog),
+      getThinkingOverrides: () => getThinkingOverrides(db, dbLog),
       getBillingOverrides: () => getBillingOverrides(db, dbLog),
       log: observability.logger("agent"),
     });

package/src/db/settings.ts

@@ -8,10 +8,18 @@
 
 import type { Logger } from "@opentelemetry/api-logs";
 import type { Database } from "bun:sqlite";
-import { isBillingMode, type BillingMode } from "@schlessera/brain-ui-sdk/protocol";
+import {
+  isBillingMode,
+  isThinkingLevel,
+  type BillingMode,
+  type ThinkingLevel,
+} from "@schlessera/brain-ui-sdk/protocol";
 
 const HIDDEN_MODELS_KEY = "models.hidden";
 const BILLING_OVERRIDES_KEY = "models.billing";
+const DEFAULT_MODEL_KEY = "models.default";
+const CUSTOM_OPENROUTER_KEY = "models.customOpenRouter";
+const THINKING_OVERRIDES_KEY = "models.thinking";
 const DETAIL_RETENTION_KEY = "activity.retention.detailDays";
 const DETAIL_RETENTION_DEFAULT_DAYS = 7;
 
@@ -89,6 +97,67 @@ export function setBillingOverrides(
   setSetting(db, BILLING_OVERRIDES_KEY, clean);
 }
 
+/**
+ * The user's chosen default model profile, used when a turn names none (new
+ * conversations from a fresh client, shares, host-initiated actions). Null =
+ * auto (a connected subscription-auth profile, else the default backend's
+ * own default).
+ */
+export function getDefaultModelId(db: Database, log?: Logger): string | null {
+  const value = getSetting<unknown>(db, DEFAULT_MODEL_KEY, null, log);
+  return typeof value === "string" && value ? value : null;
+}
+
+export function setDefaultModelId(db: Database, id: string | null): void {
+  setSetting(db, DEFAULT_MODEL_KEY, id);
+}
+
+/** User-managed OpenRouter model ids (e.g. "z.ai/glm-5.3-flash"). */
+export function getCustomOpenRouterModels(db: Database, log?: Logger): string[] {
+  const value = getSetting<unknown>(db, CUSTOM_OPENROUTER_KEY, [], log);
+  if (!Array.isArray(value)) return [];
+  return value.filter((id): id is string => typeof id === "string" && id.length > 0);
+}
+
+/** Replace the custom OpenRouter list (full list, not a delta). */
+export function setCustomOpenRouterModels(db: Database, models: string[]): void {
+  const unique = [...new Set(models.filter((id) => typeof id === "string" && id))];
+  setSetting(db, CUSTOM_OPENROUTER_KEY, unique);
+}
+
+/**
+ * Per-profile reasoning-effort overrides: profile id → forced level. A
+ * profile absent from the record keeps its configured default. Invalid
+ * levels are dropped on read (same degradation discipline as billing).
+ */
+export function getThinkingOverrides(
+  db: Database,
+  log?: Logger
+): Record<string, ThinkingLevel> {
+  const value = getSetting<unknown>(db, THINKING_OVERRIDES_KEY, {}, log);
+  if (typeof value !== "object" || value === null || Array.isArray(value)) {
+    return Object.create(null);
+  }
+  const overrides: Record<string, ThinkingLevel> = Object.create(null);
+  for (const [profileId, level] of Object.entries(value)) {
+    if (isThinkingLevel(level)) overrides[profileId] = level;
+  }
+  return overrides;
+}
+
+/** Replace the override record (the client always sends the full record, not a delta). */
+export function setThinkingOverrides(
+  db: Database,
+  overrides: Record<string, ThinkingLevel>
+): void {
+  const clean = Object.fromEntries(
+    Object.entries(overrides).filter(
+      ([profileId, level]) => profileId && isThinkingLevel(level)
+    )
+  );
+  setSetting(db, THINKING_OVERRIDES_KEY, clean);
+}
+
 /** Minimum days a finished run keeps its detail (spans/events) before the
  *  digest-covered prune may take it. 0 is valid (prune as soon as covered);
  *  anything non-numeric or negative degrades to the default. */