@workweave/router 0.1.6 → 0.1.8

package/README.md

@@ -19,6 +19,21 @@ Version-pin for reproducible setups:
 npx @workweave/router@0.1.0 --claude --scope project
 ```
 
+Switch on/off without uninstalling (keeps your config so switching back is
+instant; requires an explicit client):
+
+```bash
+npx @workweave/router off --claude      # route Claude Code directly to Anthropic
+npx @workweave/router on --claude       # route Claude Code through the router again
+npx @workweave/router status --codex    # is Codex on the router or direct?
+```
+
+Claude Code reads its router setting at launch, so quit and reopen it after an
+on/off. Codex and opencode pick it up on their next run. Inside Claude Code the
+slash commands `/router-off`, `/router-on`, and `/router-status` do the same.
+Cursor has no config file we own — toggle its base URL override in **Settings →
+Models** instead.
+
 Uninstall:
 
 ```bash

package/cc-statusline.sh

@@ -130,8 +130,9 @@ normalize_model() {
 prices='{
   "input": {
     "claude-haiku-4-5":                 0.0008,
-    "claude-opus-4-6":                  0.015,
-    "claude-opus-4-7":                  0.015,
+    "claude-opus-4-6":                  0.005,
+    "claude-opus-4-7":                  0.005,
+    "claude-opus-4-8":                  0.005,
     "claude-sonnet-4-5":                0.003,
     "claude-sonnet-4-6":                0.003,
     "deepseek/deepseek-v4-flash":       0.00014,
@@ -167,21 +168,22 @@ prices='{
     "mistralai/mistral-small-2603":     0.0002,
     "moonshotai/kimi-k2.5":             0.0006,
     "moonshotai/kimi-k2.6":             0.00095,
-    "qwen/qwen3-235b-a22b-2507":        0.000071,
+    "qwen/qwen3-235b-a22b-2507":        0.0002266,
     "qwen/qwen3-30b-a3b-instruct-2507": 0.00015,
     "qwen/qwen3-coder":                 0.0009,
     "qwen/qwen3-coder-next":            0.0005,
     "qwen/qwen3-next-80b-a3b-instruct": 0.00015,
     "qwen/qwen3.5-flash-02-23":         0.00005,
     "qwen/qwen3.6-35b-a3b":             0.00015,
-    "xiaomi/mimo-v2.5":                 0.0004,
     "xiaomi/mimo-v2.5-pro":             0.001,
-    "z-ai/glm-5":                       0.0006
+    "z-ai/glm-5":                       0.0006,
+    "z-ai/glm-5.1":                     0.00105
   },
   "output": {
     "claude-haiku-4-5":                 0.004,
-    "claude-opus-4-6":                  0.075,
-    "claude-opus-4-7":                  0.075,
+    "claude-opus-4-6":                  0.025,
+    "claude-opus-4-7":                  0.025,
+    "claude-opus-4-8":                  0.025,
     "claude-sonnet-4-5":                0.015,
     "claude-sonnet-4-6":                0.015,
     "deepseek/deepseek-v4-flash":       0.00028,
@@ -217,16 +219,16 @@ prices='{
     "mistralai/mistral-small-2603":     0.0006,
     "moonshotai/kimi-k2.5":             0.003,
     "moonshotai/kimi-k2.6":             0.004,
-    "qwen/qwen3-235b-a22b-2507":        0.000463,
+    "qwen/qwen3-235b-a22b-2507":        0.0009064,
     "qwen/qwen3-30b-a3b-instruct-2507": 0.0006,
     "qwen/qwen3-coder":                 0.0027,
     "qwen/qwen3-coder-next":            0.0012,
     "qwen/qwen3-next-80b-a3b-instruct": 0.0012,
     "qwen/qwen3.5-flash-02-23":         0.00015,
     "qwen/qwen3.6-35b-a3b":             0.00095,
-    "xiaomi/mimo-v2.5":                 0.002,
     "xiaomi/mimo-v2.5-pro":             0.003,
-    "z-ai/glm-5":                       0.00208
+    "z-ai/glm-5":                       0.00208,
+    "z-ai/glm-5.1":                     0.0035
   }
 }'
 # END_GENERATED_PRICES

package/commands/router-off.md

@@ -0,0 +1,10 @@
+---
+description: Route Claude Code directly to Anthropic again (turn the Weave Router off)
+allowed-tools: Bash(npx:*)
+---
+
+Turn the Weave Router **off** for Claude Code by running:
+
+`npx @workweave/router off --claude{{SCOPE}}`
+
+Then tell me to fully quit and reopen Claude Code — it only reads the router setting at startup, so the change won't apply to the current session until it restarts.

package/commands/router-on.md

@@ -0,0 +1,10 @@
+---
+description: Route Claude Code through the Weave Router again (turn it back on)
+allowed-tools: Bash(npx:*)
+---
+
+Turn the Weave Router **on** for Claude Code by running:
+
+`npx @workweave/router on --claude{{SCOPE}}`
+
+Then tell me to fully quit and reopen Claude Code so the change takes effect — it only reads the router setting at startup.

package/commands/router-status.md

@@ -0,0 +1,10 @@
+---
+description: Show whether Claude Code is routing through the Weave Router or directly to Anthropic
+allowed-tools: Bash(npx:*)
+---
+
+Report whether Claude Code is currently using the Weave Router by running:
+
+`npx @workweave/router status --claude{{SCOPE}}`
+
+Then summarize the result for me in one line.

package/install.sh

@@ -37,6 +37,18 @@
 #   npx @workweave/router --non-interactive                # require WEAVE_ROUTER_KEY env var (defaults target to claude)
 #   npx @workweave/router --quiet                          # suppress banner, ping check, and trailing tips
 #   npx @workweave/router --uninstall                      # remove a previous install (delegates to uninstall.sh)
+#
+# Toggle an existing install on/off without losing the router config (so
+# switching back is instant). These never prompt for a key and require an
+# explicit client (--claude / --codex / --opencode); they only flip config
+# that install.sh already wrote:
+#   npx @workweave/router off --claude                     # route directly to Anthropic again (Claude Code)
+#   npx @workweave/router on --codex                       # route through the Weave Router again (Codex)
+#   npx @workweave/router status --opencode                # report whether opencode is on the router or direct
+# Claude Code reads env at launch, so an off/on takes effect on the next
+# `claude` start; Codex and opencode re-read config every invocation.
+# Cursor's base URL lives in its own settings UI (no file we own), so there's
+# nothing to toggle here — flip "Override OpenAI Base URL" in Cursor settings.
 
 set -euo pipefail
 
@@ -65,6 +77,11 @@ router_key_header="X-Weave-Router-Key"
 target="claude"
 target_explicit="false"
 
+# Operation mode. "install" (default) writes/refreshes config. "off"/"on"/
+# "status" toggle or report an existing install without touching the router
+# key/identity — see the toggle_* helpers and the dispatch block below.
+mode="install"
+
 # ---------- helpers ----------
 
 # Detect whether stdout is a real terminal that grokks ANSI escapes. Pipes,
@@ -98,6 +115,29 @@ info() { printf "%s==>%s %s\n" "$C_CYAN" "$C_RESET" "$*"; }
 ok()   { printf "%s✓%s %s\n" "$C_GREEN" "$C_RESET" "$*"; }
 skip() { printf "%s⊙%s %s%s%s\n" "$C_DIM" "$C_RESET" "$C_DIM" "$*" "$C_RESET"; }
 
+# uninstall_cmd echoes the npx one-liner that reverses the current install,
+# matching the target (--codex/--opencode), scope, and --dir so the hint we
+# print after a successful install is copy-paste-correct. Kept in sync with
+# uninstall.sh's flag surface.
+uninstall_cmd() {
+  local cmd="npx -y @workweave/router --uninstall"
+  case "$target" in
+    codex)    cmd="$cmd --codex" ;;
+    opencode) cmd="$cmd --opencode" ;;
+  esac
+  [ "$scope" = "project" ] && cmd="$cmd --scope project"
+  [ -n "$install_dir" ] && cmd="$cmd --dir $(printf '%q' "$install_dir")"
+  printf '%s' "$cmd"
+}
+
+# print_uninstall_hint prints the reverse command on its own labeled line so
+# every successful install ends by telling the user exactly how to undo it.
+print_uninstall_hint() {
+  [ "$quiet" = "true" ] && return 0
+  printf "%sTo uninstall:%s %s%s%s\n" \
+    "$C_BOLD" "$C_RESET" "$C_CYAN" "$(uninstall_cmd)" "$C_RESET"
+}
+
 # ---------- banner ----------
 #
 # Print the WEAVE wordmark in brand orange. Skipped under --quiet or when
@@ -537,6 +577,7 @@ write_opencode_config() {
       name: "Weave Router",
       options: { apiKey: $key, baseURL: $url, headers: $headers },
       models: {
+        "claude-opus-4-8":   { name: "Claude Opus 4.8 (via Weave Router)" },
         "claude-opus-4-7":   { name: "Claude Opus 4.7 (via Weave Router)" },
         "claude-sonnet-4-6": { name: "Claude Sonnet 4.6 (via Weave Router)" },
         "claude-haiku-4-5":  { name: "Claude Haiku 4.5 (via Weave Router)" }
@@ -681,6 +722,11 @@ while [ $# -gt 0 ]; do
       # on the default.
       target="claude"; target_explicit="true"; shift
       ;;
+    off|--off|on|--on|status|--status)
+      # Toggle/report verbs. Bare (off) or dashed (--off) both accepted; the
+      # npm wrapper forwards argv verbatim so either form reaches us.
+      mode="${1#--}"; shift
+      ;;
     -h|--help)
       usage 0
       ;;
@@ -690,6 +736,17 @@ while [ $# -gt 0 ]; do
   esac
 done
 
+# Toggle verbs only flip config install.sh already wrote: no key, no identity,
+# no prompts. Require an explicit client so we never guess which config to
+# touch, and suppress every interactive prompt downstream.
+if [ "$mode" != "install" ]; then
+  non_interactive="true"
+  if [ "$target_explicit" != "true" ]; then
+    err "'$mode' requires an explicit client: --claude, --codex, or --opencode"
+    exit 2
+  fi
+fi
+
 if [ -z "$base_url" ]; then
   base_url="$DEFAULT_BASE_URL"
 fi
@@ -723,7 +780,8 @@ fi
 # users see when `make full-setup` hands off to install.sh is the wordmark,
 # not a bare "Install scope:" line. Target prompt above already finalized
 # $target, so the banner's per-target label reflects the user's choice.
-print_banner
+# Toggle verbs stay terse — skip the banner so `status` prints one clean line.
+[ "$mode" = "install" ] && print_banner
 
 # ---------- interactive scope prompt ----------
 
@@ -791,15 +849,22 @@ fi
 
 # ---------- pre-flight ----------
 
-[ "$quiet" = "true" ] || info "scope=${C_BOLD}${scope}${C_RESET}  target=${C_BOLD}${target}${C_RESET}  base_url=${C_BOLD}${base_url}${C_RESET}"
+if [ "$mode" = "install" ]; then
+  [ "$quiet" = "true" ] || info "scope=${C_BOLD}${scope}${C_RESET}  target=${C_BOLD}${target}${C_RESET}  base_url=${C_BOLD}${base_url}${C_RESET}"
+else
+  [ "$quiet" = "true" ] || info "mode=${C_BOLD}${mode}${C_RESET}  scope=${C_BOLD}${scope}${C_RESET}  target=${C_BOLD}${target}${C_RESET}"
+fi
 
 # Codex install only writes a TOML file (managed via awk) so jq isn't needed.
 # Claude Code's settings.json and opencode's opencode.json patching both use
-# jq to deep-merge / structurally rewrite JSON.
+# jq to deep-merge / structurally rewrite JSON. Toggling those clients reads
+# and rewrites the same JSON, so jq is required there too.
 if [ "$target" = "claude" ] || [ "$target" = "opencode" ]; then
   require_cmd jq    "macOS: 'brew install jq' · Debian/Ubuntu: 'sudo apt install jq'"
 fi
-require_cmd curl  "macOS/Linux: usually preinstalled — check your package manager"
+# curl is only used by the install path's health/validate probes; toggles never
+# hit the network.
+[ "$mode" = "install" ] && require_cmd curl  "macOS/Linux: usually preinstalled — check your package manager"
 
 case "$target" in
   claude)
@@ -935,6 +1000,348 @@ else
   mkdir -p "$opencode_dir"
 fi
 
+# ---------- off / on / status (toggle an existing install) ----------
+#
+# Flip a client between the Weave Router and talking to its provider directly,
+# WITHOUT discarding the router config — so switching back is one command. We
+# only run this for the `off`/`on`/`status` verbs; `install` falls straight
+# through to the write path below. An explicit client was already required
+# during arg parsing, so exactly one of the toggle_* helpers fires.
+#
+# Per-client "off" mechanics (each leaves the router config in place so "on"
+# restores it byte-for-byte):
+#   Claude Code — moves ANTHROPIC_BASE_URL + the key header out of settings
+#                 into a parked sidecar; CC falls back to its own login.
+#   Codex       — comments the `model_provider = "weave"` line inside the
+#                 managed block; the [model_providers.weave] section stays.
+#   opencode    — parks the top-level `model` and removes it; opencode reverts
+#                 to its own default. The provider.weave block stays.
+# Claude Code reads env at launch, so its toggle lands on the next `claude`
+# start; Codex/opencode re-read config every run.
+
+# router_shaped_url returns 0 when a base URL points at the router — i.e. it's
+# neither empty nor Anthropic's own endpoint (what "off" falls back to).
+router_shaped_url() {
+  case "$1" in
+    ""|https://api.anthropic.com*|http://api.anthropic.com*) return 1 ;;
+    *) return 0 ;;
+  esac
+}
+
+# json_get prints a jq scalar from a file, or empty when the file/key is
+# absent. Never trips set -e.
+json_get() {
+  [ -f "$1" ] || return 0
+  jq -r "${2} // empty" "$1" 2>/dev/null || true
+}
+
+# claude_key_present returns 0 when the given settings file's
+# env.ANTHROPIC_CUSTOM_HEADERS carries the router key header. "On" is only valid
+# when this is true: in project scope the committed settings.json holds the
+# router URL but the key header lives only in the per-teammate settings.local.json
+# (or the parked sidecar), so a router URL alone doesn't mean requests can
+# authenticate.
+claude_key_present() {
+  case "$(json_get "$1" '.env.ANTHROPIC_CUSTOM_HEADERS')" in
+    *X-Weave-Router-Key*) return 0 ;;
+    *) return 1 ;;
+  esac
+}
+
+# gitignore_add appends an entry to the repo .gitignore in project scope so a
+# parked sidecar (which may carry the router key header) never gets committed.
+# No-op for user scope and --dir, matching how install handles its own ignores.
+gitignore_add() {
+  [ "$scope" = "project" ] && [ -z "$install_dir" ] && [ -n "${git_root:-}" ] || return 0
+  local gi="$git_root/.gitignore" entry="$1"
+  refuse_if_symlink "$gi"
+  if [ ! -f "$gi" ] || ! grep -qxF "$entry" "$gi"; then
+    printf '%s\n' "$entry" >>"$gi"
+  fi
+}
+
+toggle_claude() {
+  local parked="$settings_dir/.weave-parked.json"
+  local proj="false" active committed_base local_base parked_env merged
+  if [ "$scope" = "project" ] && [ -z "$install_dir" ]; then
+    proj="true"
+    active="$local_settings_file"
+  else
+    active="$settings_file"
+  fi
+  # Symlink containment for the parked sidecar: project/--dir paths come from a
+  # possibly-hostile repo, and `off` writes $parked via shell redirection (which
+  # follows symlinks). A repo could pre-place it as a symlink to clobber an
+  # arbitrary file or siphon the router-key-bearing parked data. The config
+  # files themselves are already guarded during path resolution; this covers the
+  # sidecar. User scope ($HOME) is trusted, matching the installer.
+  if [ "$scope" = "project" ] || [ -n "$install_dir" ]; then
+    refuse_if_symlink "$parked"
+  fi
+  local parked_present="false"
+  if [ -f "$parked" ]; then parked_present="true"; fi
+  committed_base="$(json_get "$settings_file" '.env.ANTHROPIC_BASE_URL')"
+
+  case "$mode" in
+    status)
+      local on_hint="on --claude"
+      [ "$proj" = "true" ] && on_hint="on --claude --scope project"
+      if [ "$parked_present" = "true" ]; then
+        ok "Claude Code: ${C_BOLD}off${C_RESET} — routing directly to Anthropic. Run '$on_hint' to re-enable."
+      elif [ "$proj" = "true" ]; then
+        local_base="$(json_get "$local_settings_file" '.env.ANTHROPIC_BASE_URL')"
+        if [ -n "$local_base" ] && ! router_shaped_url "$local_base"; then
+          ok "Claude Code (project): ${C_BOLD}off${C_RESET} — routing directly to Anthropic. Run '$on_hint' to re-enable."
+        elif router_shaped_url "$committed_base"; then
+          # Router URL is committed, but it only authenticates if this teammate's
+          # settings.local.json carries the key header. A fresh clone (shared
+          # settings.json, no personal local file) has the URL but no key.
+          if claude_key_present "$local_settings_file"; then
+            ok "Claude Code (project): ${C_BOLD}on${C_RESET} — routing through $committed_base."
+          else
+            warn "Claude Code (project): router URL is set but your personal router key is missing (no settings.local.json) — requests won't authenticate. Run the installer to add your key."
+          fi
+        else
+          info "Claude Code (project): not configured for the router. Run the installer first."
+        fi
+      elif router_shaped_url "$committed_base"; then
+        if claude_key_present "$settings_file"; then
+          ok "Claude Code: ${C_BOLD}on${C_RESET} — routing through $committed_base."
+        else
+          warn "Claude Code: router URL is set but the router key header is missing — requests won't authenticate. Run the installer to restore it."
+        fi
+      else
+        info "Claude Code: not configured for the router. Run the installer first."
+      fi
+      ;;
+    off)
+      if [ "$parked_present" = "true" ]; then
+        ok "Claude Code is already off — nothing to do."
+        return 0
+      fi
+      if ! router_shaped_url "$committed_base"; then
+        info "Claude Code isn't configured for the router. Run the installer first."
+        return 0
+      fi
+      if [ "$proj" = "true" ]; then
+        # Park the whole local env (carries the key header), then override the
+        # base URL to Anthropic in the local file only — committed settings.json
+        # is never touched, so this stays out of `git diff`.
+        if [ -f "$local_settings_file" ]; then
+          jq '{env: (.env // {})}' "$local_settings_file" >"$parked"
+          merged="$(jq '.env = ((.env // {} | del(.ANTHROPIC_CUSTOM_HEADERS)) + {ANTHROPIC_BASE_URL: "https://api.anthropic.com"})' "$local_settings_file")"
+        else
+          printf '{"env":{}}\n' >"$parked"
+          merged='{"env":{"ANTHROPIC_BASE_URL":"https://api.anthropic.com"}}'
+        fi
+        printf '%s\n' "$merged" >"$local_settings_file"
+        chmod 600 "$local_settings_file" "$parked"
+        gitignore_add ".claude/.weave-parked.json"
+      else
+        # Park just the router-owned env keys, then strip them so Claude Code
+        # falls back to its own Anthropic login.
+        jq '{env: ((.env // {}) | {ANTHROPIC_BASE_URL, ANTHROPIC_CUSTOM_HEADERS} | with_entries(select(.value != null)))}' "$settings_file" >"$parked"
+        chmod 600 "$parked"
+        merged="$(jq '(.env // {}) |= del(.ANTHROPIC_BASE_URL, .ANTHROPIC_CUSTOM_HEADERS)
+                      | (if (.env // {} | length) == 0 then del(.env) else . end)' "$settings_file")"
+        printf '%s\n' "$merged" >"$settings_file"
+      fi
+      ok "Claude Code is now ${C_BOLD}off${C_RESET} (direct to Anthropic). Restart Claude Code for it to take effect."
+      ;;
+    on)
+      if [ "$parked_present" != "true" ]; then
+        # Project scope can still carry a direct-override in settings.local.json
+        # even with no sidecar (e.g. the parked file was deleted by hand). That
+        # override wins over the committed router URL, so traffic is really
+        # going direct — drop it so "on" matches what "status" reports, instead
+        # of falsely claiming we're already on.
+        if [ "$proj" = "true" ]; then
+          local_base="$(json_get "$local_settings_file" '.env.ANTHROPIC_BASE_URL')"
+          if [ -n "$local_base" ] && ! router_shaped_url "$local_base"; then
+            # We're off, but the parked sidecar is gone. The router key header
+            # lives only in the local file / sidecar in project scope — never in
+            # committed settings.json — so we can only re-enable cleanly if the
+            # header survived in the local file. If it didn't, clearing the
+            # override would point Claude Code at the router with no auth
+            # (401s); leave the working direct setup in place and tell the user
+            # to reinstall instead of faking success.
+            if claude_key_present "$local_settings_file"; then
+              merged="$(jq '(.env // {}) |= del(.ANTHROPIC_BASE_URL)
+                            | (if (.env // {} | length) == 0 then del(.env) else . end)' "$local_settings_file")"
+              printf '%s\n' "$merged" >"$local_settings_file"
+              chmod 600 "$local_settings_file"
+              ok "Claude Code is now ${C_BOLD}on${C_RESET} (routing through the Weave Router). Restart Claude Code for it to take effect."
+            else
+              warn "Claude Code is off and the parked router key is missing (its sidecar was deleted). Re-run the installer to restore the router key — leaving the current direct-to-Anthropic setup in place so requests don't fail auth."
+            fi
+            return 0
+          fi
+        fi
+        # No direct override (or user scope). "On" requires both the router URL
+        # and the key header — a committed router URL with no local key (e.g. a
+        # fresh clone) can't authenticate, so don't claim it's already on.
+        if ! router_shaped_url "$committed_base"; then
+          warn "No parked router config found. Run the installer to set up Claude Code."
+        elif claude_key_present "$active"; then
+          ok "Claude Code is already on — nothing to do."
+        else
+          # $active is settings.local.json in project scope, settings.json for
+          # user/--dir — name the right file so the hint isn't misleading.
+          warn "Router URL is set but the router key is missing — run the installer to add your key (written to $(basename "$active"))."
+        fi
+        return 0
+      fi
+      # Sidecar present: restore it — but only if the result actually carries
+      # the router key. An off that ran with an empty/absent settings.local.json
+      # parks {"env":{}}; blindly restoring that would drop the direct override
+      # and leave the committed router URL unauthenticated while printing
+      # success. Refuse that and tell the user to reinstall.
+      parked_env="$(jq -c '.env // {}' "$parked")"
+      parked_has_key="false"
+      if printf '%s' "$parked_env" | jq -e '(.ANTHROPIC_CUSTOM_HEADERS // "") | test("X-Weave-Router-Key")' >/dev/null 2>&1; then
+        parked_has_key="true"
+      fi
+      if [ "$parked_has_key" != "true" ] && ! claude_key_present "$active"; then
+        warn "Can't re-enable: the parked config has no router key (it was created without one). Re-run the installer to set up your router key — leaving the current direct-to-Anthropic setup in place."
+        return 0
+      fi
+      merged="$(jq --argjson p "$parked_env" '.env = (((.env // {}) | del(.ANTHROPIC_BASE_URL)) + $p)' "$active")"
+      printf '%s\n' "$merged" >"$active"
+      [ "$proj" = "true" ] && chmod 600 "$active"
+      rm -f "$parked"
+      ok "Claude Code is now ${C_BOLD}on${C_RESET} (routing through the Weave Router). Restart Claude Code for it to take effect."
+      ;;
+  esac
+}
+
+toggle_codex() {
+  local f="$codex_config_file" state="absent" tmp
+  if [ -f "$f" ]; then
+    state="$(awk -v b="$WEAVE_CODEX_BEGIN_MARKER" -v e="$WEAVE_CODEX_END_MARKER" '
+      $0==b{inblk=1; next}
+      $0==e{inblk=0; next}
+      inblk && /^[[:space:]]*model_provider[[:space:]]*=[[:space:]]*"weave"/ {st="on"}
+      inblk && /^[[:space:]]*#[[:space:]]*model_provider[[:space:]]*=[[:space:]]*"weave"/ {if(st=="")st="off"}
+      END{print (st==""?"absent":st)}
+    ' "$f")"
+  fi
+
+  case "$mode" in
+    status)
+      case "$state" in
+        on)  ok "Codex: ${C_BOLD}on${C_RESET} — routing through the Weave Router." ;;
+        off) ok "Codex: ${C_BOLD}off${C_RESET} — using Codex's default provider. Run 'on --codex' to re-enable." ;;
+        *)   info "Codex: not configured for the router. Run the installer first." ;;
+      esac
+      ;;
+    off)
+      if [ "$state" = "absent" ]; then info "Codex isn't configured for the router. Run the installer first."; return 0; fi
+      if [ "$state" = "off" ]; then ok "Codex is already off — nothing to do."; return 0; fi
+      tmp="$(mktemp -t weave-codex-toggle.XXXXXX)"
+      awk -v b="$WEAVE_CODEX_BEGIN_MARKER" -v e="$WEAVE_CODEX_END_MARKER" '
+        $0==b{inblk=1; print; next}
+        $0==e{inblk=0; print; next}
+        inblk && /^[[:space:]]*model_provider[[:space:]]*=[[:space:]]*"weave"[[:space:]]*$/ {
+          print "# " $0 "  # weave-router: off (run on to re-enable)"; next
+        }
+        {print}
+      ' "$f" >"$tmp" && mv "$tmp" "$f"
+      chmod 600 "$f"
+      ok "Codex is now ${C_BOLD}off${C_RESET} (default provider). Takes effect on your next 'codex' run."
+      ;;
+    on)
+      if [ "$state" = "absent" ]; then warn "No managed Weave block in $f. Run the installer to set up Codex."; return 0; fi
+      if [ "$state" = "on" ]; then ok "Codex is already on — nothing to do."; return 0; fi
+      tmp="$(mktemp -t weave-codex-toggle.XXXXXX)"
+      awk -v b="$WEAVE_CODEX_BEGIN_MARKER" -v e="$WEAVE_CODEX_END_MARKER" '
+        $0==b{inblk=1; print; next}
+        $0==e{inblk=0; print; next}
+        inblk && /^[[:space:]]*#[[:space:]]*model_provider[[:space:]]*=[[:space:]]*"weave"/ {
+          print "model_provider = \"weave\""; next
+        }
+        {print}
+      ' "$f" >"$tmp" && mv "$tmp" "$f"
+      chmod 600 "$f"
+      ok "Codex is now ${C_BOLD}on${C_RESET} (routing through the Weave Router). Takes effect on your next 'codex' run."
+      ;;
+  esac
+}
+
+toggle_opencode() {
+  local f="$opencode_config_file" parked="$opencode_dir/.weave-parked.json"
+  local model="" has_weave="false" parked_present="false" on="false" restore_model merged
+  # Symlink containment for the parked sidecar — `off` writes it via shell
+  # redirection; a hostile project repo could pre-place it as a symlink. The
+  # opencode.json itself is already guarded during path resolution.
+  if [ "$scope" = "project" ] || [ -n "$install_dir" ]; then
+    refuse_if_symlink "$parked"
+  fi
+  if [ -f "$parked" ]; then parked_present="true"; fi
+  if [ -f "$f" ]; then
+    model="$(jq -r '.model // empty' "$f" 2>/dev/null || true)"
+    if [ "$(jq -r '((.provider // {}) | has("weave"))' "$f" 2>/dev/null || true)" = "true" ]; then has_weave="true"; fi
+  fi
+  case "$model" in weave/*) on="true" ;; esac
+
+  case "$mode" in
+    status)
+      if [ "$on" = "true" ]; then
+        ok "opencode: ${C_BOLD}on${C_RESET} — default model is $model (via the Weave Router)."
+      elif [ "$has_weave" = "true" ] || [ "$parked_present" = "true" ]; then
+        ok "opencode: ${C_BOLD}off${C_RESET} — not using the Weave Router model. Run 'on --opencode' to re-enable."
+      else
+        info "opencode: not configured for the router. Run the installer first."
+      fi
+      ;;
+    off)
+      if [ "$on" != "true" ]; then
+        if [ "$has_weave" = "true" ]; then ok "opencode is already off — nothing to do."; else info "opencode isn't configured for the router. Run the installer first."; fi
+        return 0
+      fi
+      jq '{model: .model}' "$f" >"$parked"
+      chmod 600 "$parked"
+      merged="$(jq 'del(.model)' "$f")"
+      printf '%s\n' "$merged" >"$f"
+      chmod 600 "$f"
+      gitignore_add ".weave-parked.json"
+      ok "opencode is now ${C_BOLD}off${C_RESET} — pick a non-Weave model with /models. Takes effect on your next opencode run."
+      ;;
+    on)
+      if [ "$on" = "true" ]; then ok "opencode is already on — nothing to do."; return 0; fi
+      restore_model="weave/claude-sonnet-4-6"
+      if [ "$parked_present" = "true" ]; then
+        restore_model="$(jq -r '.model // "weave/claude-sonnet-4-6"' "$parked")"
+      elif [ "$has_weave" != "true" ]; then
+        warn "opencode isn't configured for the router. Run the installer first."; return 0
+      else
+        # No parked model (sidecar deleted by hand). Derive the default from the
+        # installed provider.weave.models block rather than a hardcoded literal
+        # that silently diverges when the installer's default changes — prefer a
+        # sonnet entry, else the first model the installer registered.
+        restore_model="$(jq -r '
+          (.provider.weave.models // {} | keys) as $k
+          | (([$k[] | select(test("sonnet"))] | first) // $k[0] // "claude-sonnet-4-6")
+          | "weave/" + .
+        ' "$f" 2>/dev/null || echo "weave/claude-sonnet-4-6")"
+      fi
+      merged="$(jq --arg m "$restore_model" '.model = $m' "$f")"
+      printf '%s\n' "$merged" >"$f"
+      chmod 600 "$f"
+      rm -f "$parked"
+      ok "opencode is now ${C_BOLD}on${C_RESET} (default model $restore_model via the Weave Router). Takes effect on your next opencode run."
+      ;;
+  esac
+}
+
+if [ "$mode" != "install" ]; then
+  case "$target" in
+    claude)   toggle_claude ;;
+    codex)    toggle_codex ;;
+    opencode) toggle_opencode ;;
+  esac
+  exit 0
+fi
+
 # ---------- token handling ----------
 
 api_key=""
@@ -1027,16 +1434,44 @@ install_slash_commands() {
     refuse_if_symlink "$dst_dir"
   fi
   mkdir -p "$dst_dir"
-  for cmd in force-model unforce-model; do
+
+  # force-model/unforce-model are router-intercepted prompt expansions and
+  # apply to every target. The router-off/on/status wrappers shell out to this
+  # installer to flip the *local* config, so they're Claude Code-only and need
+  # the install scope baked into the command (the .md can't discover it at
+  # invocation time). {{SCOPE}} is substituted accordingly.
+  installed="force-model, unforce-model"
+  cmds="force-model unforce-model"
+  if [ "$target" = "claude" ]; then
+    cmds="$cmds router-off router-on router-status"
+    installed="$installed, router-off, router-on, router-status"
+  fi
+
+  # Bake the same scope selector the toggle needs to find this install: --dir
+  # overrides scope (mirrors install/uninstall path resolution), so a sandbox
+  # install gets `--dir <path>` and the slash commands flip that dir rather
+  # than the default user-scope paths. printf %q quotes paths with spaces.
+  local scope_args=""
+  if [ -n "$install_dir" ]; then
+    scope_args=" --dir $(printf '%q' "$install_dir")"
+  elif [ "$scope" = "project" ]; then
+    scope_args=" --scope project"
+  fi
+
+  for cmd in $cmds; do
     src="$commands_src_dir/$cmd.md"
     dst="$dst_dir/$cmd.md"
     [ -f "$src" ] || continue
     if [ "$scope" = "project" ] || [ -n "$install_dir" ]; then
       refuse_if_symlink "$dst"
     fi
-    cp "$src" "$dst"
+    # Substitute the {{SCOPE}} placeholder (only the router-* wrappers carry it;
+    # cp-equivalent for the others since the token is absent).
+    local body; body="$(cat "$src")"
+    body="${body//\{\{SCOPE\}\}/$scope_args}"
+    printf '%s\n' "$body" >"$dst"
   done
-  ok "Slash commands written to $dst_dir (force-model, unforce-model)"
+  ok "Slash commands written to $dst_dir ($installed)"
 }
 
 # ---------- codex install path (dispatch + exit before the Claude-only writes) ----------
@@ -1091,6 +1526,7 @@ if [ "$target" = "codex" ]; then
     # point CODEX_HOME at the directory we wrote so Codex finds our config.
     info "Run Codex with CODEX_HOME=$codex_dir codex so it picks up this config."
   fi
+  print_uninstall_hint
   exit 0
 fi
 
@@ -1141,6 +1577,7 @@ if [ "$target" = "opencode" ]; then
     # has to point opencode at the file explicitly.
     info "Run opencode with OPENCODE_CONFIG=$opencode_config_file opencode."
   fi
+  print_uninstall_hint
   exit 0
 fi
 
@@ -1279,8 +1716,9 @@ normalize_model() {
 prices='{
   "input": {
     "claude-haiku-4-5":                 0.0008,
-    "claude-opus-4-6":                  0.015,
-    "claude-opus-4-7":                  0.015,
+    "claude-opus-4-6":                  0.005,
+    "claude-opus-4-7":                  0.005,
+    "claude-opus-4-8":                  0.005,
     "claude-sonnet-4-5":                0.003,
     "claude-sonnet-4-6":                0.003,
     "deepseek/deepseek-v4-flash":       0.00014,
@@ -1316,21 +1754,22 @@ prices='{
     "mistralai/mistral-small-2603":     0.0002,
     "moonshotai/kimi-k2.5":             0.0006,
     "moonshotai/kimi-k2.6":             0.00095,
-    "qwen/qwen3-235b-a22b-2507":        0.000071,
+    "qwen/qwen3-235b-a22b-2507":        0.0002266,
     "qwen/qwen3-30b-a3b-instruct-2507": 0.00015,
     "qwen/qwen3-coder":                 0.0009,
     "qwen/qwen3-coder-next":            0.0005,
     "qwen/qwen3-next-80b-a3b-instruct": 0.00015,
     "qwen/qwen3.5-flash-02-23":         0.00005,
     "qwen/qwen3.6-35b-a3b":             0.00015,
-    "xiaomi/mimo-v2.5":                 0.0004,
     "xiaomi/mimo-v2.5-pro":             0.001,
-    "z-ai/glm-5":                       0.0006
+    "z-ai/glm-5":                       0.0006,
+    "z-ai/glm-5.1":                     0.00105
   },
   "output": {
     "claude-haiku-4-5":                 0.004,
-    "claude-opus-4-6":                  0.075,
-    "claude-opus-4-7":                  0.075,
+    "claude-opus-4-6":                  0.025,
+    "claude-opus-4-7":                  0.025,
+    "claude-opus-4-8":                  0.025,
     "claude-sonnet-4-5":                0.015,
     "claude-sonnet-4-6":                0.015,
     "deepseek/deepseek-v4-flash":       0.00028,
@@ -1366,16 +1805,16 @@ prices='{
     "mistralai/mistral-small-2603":     0.0006,
     "moonshotai/kimi-k2.5":             0.003,
     "moonshotai/kimi-k2.6":             0.004,
-    "qwen/qwen3-235b-a22b-2507":        0.000463,
+    "qwen/qwen3-235b-a22b-2507":        0.0009064,
     "qwen/qwen3-30b-a3b-instruct-2507": 0.0006,
     "qwen/qwen3-coder":                 0.0027,
     "qwen/qwen3-coder-next":            0.0012,
     "qwen/qwen3-next-80b-a3b-instruct": 0.0012,
     "qwen/qwen3.5-flash-02-23":         0.00015,
     "qwen/qwen3.6-35b-a3b":             0.00095,
-    "xiaomi/mimo-v2.5":                 0.002,
     "xiaomi/mimo-v2.5-pro":             0.003,
-    "z-ai/glm-5":                       0.00208
+    "z-ai/glm-5":                       0.00208,
+    "z-ai/glm-5.1":                     0.0035
   }
 }'
 # END_GENERATED_PRICES
@@ -1676,3 +2115,4 @@ fi
 printf "\n"
 printf "%s✓%s %s%sWeave Router installed for Claude Code.%s\n" \
   "$C_GREEN" "$C_RESET" "$C_BOLD" "$C_BRAND" "$C_RESET"
+print_uninstall_hint

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@workweave/router",
-  "version": "0.1.6",
+  "version": "0.1.8",
   "description": "One-command installer that points Claude Code at the Weave Router.",
   "bin": {
     "weave-router": "bin.js"

package/uninstall.sh

@@ -173,6 +173,14 @@ if [ "$target" = "opencode" ]; then
     info "No opencode config at $opencode_config_file (already uninstalled?)"
   fi
 
+  # Drop the toggle parked sidecar (holds the parked router model when off).
+  opencode_parked="$opencode_dir/.weave-parked.json"
+  if [ -f "$opencode_parked" ]; then
+    refuse_if_symlink "$opencode_parked"
+    rm -f "$opencode_parked"
+    ok "Removed $opencode_parked"
+  fi
+
   if [ -n "$install_dir" ]; then
     ok "Weave Router uninstalled from $install_dir (opencode)."
   else
@@ -351,9 +359,12 @@ else
 fi
 
 if [ -n "$local_settings_file" ] && [ -f "$local_settings_file" ]; then
+  # ANTHROPIC_BASE_URL only lives here when a project install was toggled off
+  # (the off path overrides it to Anthropic in the local file); scrub it too so
+  # uninstall fully reverts a toggled-off install.
   cleaned="$(jq '
     if .env then
-      .env |= (del(.ANTHROPIC_AUTH_TOKEN, .ANTHROPIC_CUSTOM_HEADERS))
+      .env |= (del(.ANTHROPIC_BASE_URL, .ANTHROPIC_AUTH_TOKEN, .ANTHROPIC_CUSTOM_HEADERS))
       | (if (.env | length) == 0 then del(.env) else . end)
     else . end
     | del(.apiKeyHelper)
@@ -362,6 +373,14 @@ if [ -n "$local_settings_file" ] && [ -f "$local_settings_file" ]; then
   ok "Cleaned $local_settings_file"
 fi
 
+# Drop the toggle parked sidecar (carries the router key header when off).
+parked_file="$(dirname "$settings_file")/.weave-parked.json"
+if [ -f "$parked_file" ]; then
+  refuse_if_symlink "$parked_file"
+  rm -f "$parked_file"
+  ok "Removed $parked_file"
+fi
+
 for f in "$statusline_file"; do
   if [ -f "$f" ]; then
     rm -f "$f"
@@ -375,7 +394,7 @@ done
 commands_dir="$(dirname "$settings_file")/commands"
 if [ -d "$commands_dir" ]; then
   refuse_if_symlink "$commands_dir"
-  for cmd in force-model unforce-model; do
+  for cmd in force-model unforce-model router-off router-on router-status; do
     cmd_file="$commands_dir/$cmd.md"
     if [ -f "$cmd_file" ]; then
       refuse_if_symlink "$cmd_file"