@workweave/router 0.2.5 → 0.2.7

package/README.md

@@ -1,12 +1,13 @@
 # @workweave/router
 
-One command, anywhere, to point Claude Code, Codex, or opencode at the Weave Router.
+One command, anywhere, to point Claude Code, Codex, opencode, or pi at the Weave Router.
 
 ```bash
-npx @workweave/router                       # interactive: pick Claude Code / Codex / opencode, then scope
+npx @workweave/router                       # interactive: pick Claude Code / Codex / opencode / pi, then scope
 npx @workweave/router --claude              # skip the picker, target Claude Code
 npx @workweave/router --codex               # skip the picker, target the OpenAI Codex CLI
 npx @workweave/router --opencode            # skip the picker, target opencode
+npx @workweave/router --pi                  # skip the picker, target pi + Loom UI
 npx @workweave/router --scope project       # per-repo install, commit settings.json (or .codex/ / opencode.json)
 npx @workweave/router --local               # self-hosted via docker-compose (localhost:8080)
 npx @workweave/router --base-url https://router.acme.internal
@@ -40,6 +41,7 @@ Uninstall:
 npx @workweave/router --uninstall                       # Claude Code, user scope
 npx @workweave/router --uninstall --codex               # Codex, user scope
 npx @workweave/router --uninstall --opencode            # opencode, user scope
+npx @workweave/router --uninstall --pi                  # pi, user scope
 npx @workweave/router --uninstall --scope project       # Claude Code, inside the repo
 npx @workweave/router --uninstall --codex --scope project
 ```
@@ -52,7 +54,7 @@ Node ≥ 18 — no `curl | sh`, no Git clone, no PATH fiddling. Everything the
 shell installer documents (targets, scopes, flags, environment variables)
 works identically here.
 
-Three install targets:
+Four install targets:
 
 - **Claude Code** (default) — patches `~/.claude/settings.json` (or
   `<repo>/.claude/settings.json` with `--scope project`) so `claude` routes
@@ -71,6 +73,12 @@ Three install targets:
   natively, so opencode talks to it unmodified. Re-install rewrites only
   the managed `provider.weave` block; `--uninstall --opencode` strips it
   and leaves your other providers and settings alone.
+- **pi** (`--pi`) — registers the `weave` provider and installs this package as
+  a pi extension. Stock pi then gets the Loom startup header, Wooly's animated
+  mascot, the persistent actual-route display, cumulative session savings,
+  `/fm` + `/ufm` model-pin commands with a `[forced]` status, and the
+  context-isolated `dispatch` tool. There is no forked pi binary and no separate
+  Loom runtime.
 
 See the [main installer docs](https://github.com/workweave/router/tree/main/install)
 for the full reference.
@@ -79,11 +87,23 @@ for the full reference.
 
 - Node ≥ 18 (ships with `npx`)
 - `bash` on PATH (macOS / Linux native; Windows needs Git Bash or WSL)
-- `jq` on PATH — used by the Claude Code status line script and the
-  opencode JSON merge. Not required for the Codex path.
+- `jq` on PATH — used by the Claude Code status line and the opencode/pi JSON
+  merges. Not required for the Codex path.
 
 ## Why npx
 
-`curl -fsSL https://weave.ai/cc/install.sh | sh` still works and is fine.
-`npx @workweave/router` adds: Windows support via Git Bash, painless version
-pinning, no `curl | sh` aversion, and discoverability via the npm registry.
+`npx @workweave/router` gives Windows support via Git Bash, painless version
+pinning, and discoverability via the npm registry.
+
+## Older npm
+
+On npm ≤ 6 the bundled `npx` treats an undeclared `-y` as consuming the next
+token, so `npx -y @workweave/router --claude` silently drops the package name
+and resolves the following argument as the command instead. Either upgrade
+(`npm i -g npm@latest`) or name the binary explicitly:
+
+```bash
+npx --package @workweave/router -y -- weave-router --claude
+```
+
+That form is correct on every npm version.

package/cc-statusline.sh

@@ -33,10 +33,21 @@ set -euo pipefail
 # lives in their per-user cache dir, and on no-content-change days we skip
 # the mv entirely so the repo working tree stays clean. When upstream does
 # change, the first teammate's commit propagates the new version to the rest.
+# A pricing-table miss also triggers a refresh off-schedule — see
+# weave_refresh_on_price_miss below.
 #
 # Opt out entirely with `export WEAVE_STATUSLINE_UPDATE=0`. Override the
 # source with `WEAVE_STATUSLINE_URL=...`, e.g. for self-hosters who fork.
+#
+# $1 is an optional stamp suffix, so a caller refreshing for a reason other than
+# "the interval elapsed" rate-limits on its own clock rather than sharing the
+# periodic check's budget. $2=1 drops the stamp again if the download fails, for
+# callers recovering from a known-bad state where waiting out the full interval
+# on a transient network error is worse than retrying next turn.
 weave_self_refresh() {
+  local stamp_suffix="${1:-}"
+  local retry_on_fail="${2:-0}"
+
   [ "${WEAVE_STATUSLINE_UPDATE:-1}" = "0" ] && return 0
   command -v curl >/dev/null 2>&1 || return 0
 
@@ -53,7 +64,7 @@ weave_self_refresh() {
   mkdir -p "$cache_dir" 2>/dev/null || return 0
   local script_slug
   script_slug="$(printf '%s' "$self" | tr -c 'A-Za-z0-9._-' '_')"
-  local stamp="$cache_dir/checked-at${script_slug}"
+  local stamp="$cache_dir/checked-at${script_slug}${stamp_suffix}"
 
   local now stamp_mtime
   now="$(date +%s 2>/dev/null)" || return 0
@@ -77,7 +88,13 @@ weave_self_refresh() {
   : > "$stamp" 2>/dev/null || return 0
 
   local url="${WEAVE_STATUSLINE_URL:-https://raw.githubusercontent.com/workweave/router/main/install/cc-statusline.sh}"
-  local tmp="${self}.tmp.$$"
+  # $$ alone is not unique: two calls can run in one invocation (the periodic
+  # check and a pricing-miss retry both fire on a cold cache) and would then
+  # curl -o into the same path and mv over each other, installing a truncated
+  # script that can never self-heal. The stamp suffix is the right key — it is
+  # what makes two callers mutually exclusive in the first place, so callers
+  # that could overlap necessarily have different suffixes.
+  local tmp="${self}.tmp.$$${stamp_suffix}"
   (
     # Detach stdin (CC pipes JSON to us) so curl can't accidentally consume
     # it, and silence all output so nothing leaks into the statusline.
@@ -96,6 +113,11 @@ weave_self_refresh() {
       fi
     else
       rm -f "$tmp"
+      # A download that never landed shouldn't spend the caller's whole
+      # interval; drop the stamp so the next turn can try again.
+      if [ "$retry_on_fail" = "1" ]; then
+        rm -f "$stamp"
+      fi
     fi
   ) >/dev/null 2>&1 &
   disown 2>/dev/null || true
@@ -137,6 +159,7 @@ prices='{
     "claude-opus-4-6":                  0.005,
     "claude-opus-4-7":                  0.005,
     "claude-opus-4-8":                  0.005,
+    "claude-opus-5":                    0.005,
     "claude-sonnet-4-5":                0.003,
     "claude-sonnet-4-6":                0.003,
     "claude-sonnet-5":                  0.003,
@@ -152,6 +175,8 @@ prices='{
     "gemini-3.1-flash-lite-preview":    0.0001,
     "gemini-3.1-pro-preview":           0.002,
     "gemini-3.5-flash":                 0.0015,
+    "gemini-3.5-flash-lite":            0.0003,
+    "gemini-3.6-flash":                 0.0015,
     "google/gemma-4-26b-a4b-it":        0.00015,
     "gpt-4.1":                          0.002,
     "gpt-4.1-mini":                     0.0004,
@@ -170,12 +195,17 @@ prices='{
     "gpt-5.5-mini":                     0.0005,
     "gpt-5.5-nano":                     0.00015,
     "gpt-5.5-pro":                      0.03,
+    "gpt-5.6-luna":                     0.001,
+    "gpt-5.6-sol":                      0.005,
+    "gpt-5.6-terra":                    0.0025,
+    "grok-4.5":                         0.002,
     "minimax/minimax-m2.7":             0.0003,
     "minimax/minimax-m3":               0.0003,
     "mistralai/mistral-small-2603":     0.0002,
     "moonshotai/kimi-k2.5":             0.0006,
     "moonshotai/kimi-k2.6":             0.00095,
     "moonshotai/kimi-k2.7":             0.00095,
+    "moonshotai/kimi-k3":               0.003,
     "qwen/qwen3-235b-a22b-2507":        0.0002266,
     "qwen/qwen3-30b-a3b-instruct-2507": 0.00015,
     "qwen/qwen3-coder":                 0.0009,
@@ -198,6 +228,7 @@ prices='{
     "claude-opus-4-6":                  0.025,
     "claude-opus-4-7":                  0.025,
     "claude-opus-4-8":                  0.025,
+    "claude-opus-5":                    0.025,
     "claude-sonnet-4-5":                0.015,
     "claude-sonnet-4-6":                0.015,
     "claude-sonnet-5":                  0.015,
@@ -213,6 +244,8 @@ prices='{
     "gemini-3.1-flash-lite-preview":    0.0004,
     "gemini-3.1-pro-preview":           0.008,
     "gemini-3.5-flash":                 0.009,
+    "gemini-3.5-flash-lite":            0.0025,
+    "gemini-3.6-flash":                 0.0075,
     "google/gemma-4-26b-a4b-it":        0.0006,
     "gpt-4.1":                          0.008,
     "gpt-4.1-mini":                     0.0016,
@@ -231,12 +264,17 @@ prices='{
     "gpt-5.5-mini":                     0.0025,
     "gpt-5.5-nano":                     0.0006,
     "gpt-5.5-pro":                      0.18,
+    "gpt-5.6-luna":                     0.006,
+    "gpt-5.6-sol":                      0.03,
+    "gpt-5.6-terra":                    0.015,
+    "grok-4.5":                         0.006,
     "minimax/minimax-m2.7":             0.0012,
     "minimax/minimax-m3":               0.0012,
     "mistralai/mistral-small-2603":     0.0006,
     "moonshotai/kimi-k2.5":             0.003,
     "moonshotai/kimi-k2.6":             0.004,
     "moonshotai/kimi-k2.7":             0.004,
+    "moonshotai/kimi-k3":               0.015,
     "qwen/qwen3-235b-a22b-2507":        0.0009064,
     "qwen/qwen3-30b-a3b-instruct-2507": 0.0006,
     "qwen/qwen3-coder":                 0.0027,
@@ -383,6 +421,42 @@ if [[ -n "$transcript_path" && -f "$transcript_path" ]]; then
   ) || true
 fi
 
+# ---------- refresh when a model isn't in the pricing table ----------
+#
+# A model that shipped after this copy of the script has no price entry, so the
+# jq guard above zeroes savings on every turn and the line reads "saved $0.00"
+# — indistinguishable from "the router ran and didn't beat your selection". The
+# periodic check heals that eventually, but a week late, and a model launch is
+# exactly when the number gets looked at. Refresh off-schedule instead.
+#
+# Keyed on its own stamp per unpriced id: a model we never price (self-hosted,
+# unrecognized) then costs one download per interval, not one per turn, and
+# can't starve the periodic check.
+weave_refresh_on_price_miss() {
+  local candidates="" m
+  for m in "$@"; do
+    case "$m" in
+      "" | "?" | failure | weave-router | "<synthetic>") continue ;;
+    esac
+    candidates="${candidates}${m}"$'\n'
+  done
+  [ -n "$candidates" ] || return 0
+
+  # A malformed $prices emits nothing here, which fails closed (no refresh)
+  # rather than re-downloading every turn.
+  local missing
+  missing="$(printf '%s' "$candidates" \
+    | jq -rR --argjson p "$prices" \
+        'select($p.input[.] == null or $p.output[.] == null)' 2>/dev/null \
+    | head -n 1)" || return 0
+  [ -n "$missing" ] || return 0
+
+  local model_slug
+  model_slug="$(printf '%s' "$missing" | tr -c 'A-Za-z0-9._-' '_')"
+  weave_self_refresh ".miss.${model_slug}" 1
+}
+weave_refresh_on_price_miss "$requested_norm" "$routed" 2>/dev/null || true
+
 # Brand color (#FF6C47) on terminals that grok 24-bit truecolor — that's
 # every modern one (iTerm2, Apple Terminal, vscode, ghostty, alacritty,
 # wezterm, kitty). Falls back gracefully on any escape-stripping terminal.

package/commands/router-session.md

@@ -0,0 +1,15 @@
+---
+description: Print the session id that correlates this session in router telemetry and logs.
+allowed-tools: Bash(echo:*)
+---
+
+Print the session id used by the Weave Router to correlate this session's
+telemetry, logs, and feedback submissions. Also works as a transcript
+filename key for manual lookups in the router dashboard.
+
+The router carries this id as `X-Claude-Code-Session-Id` on every request and
+stores it in `model_router_users.SessionID` for analytics joins.
+
+Run `echo "$CLAUDE_CODE_SESSION_ID"`.
+
+Then tell me the session id in one line, formatted as inline code so I can copy it.

package/install.sh

@@ -127,7 +127,10 @@ skip() { printf "%s⊙%s %s%s%s\n" "$C_DIM" "$C_RESET" "$C_DIM" "$*" "$C_RESET";
 # print after a successful install is copy-paste-correct. Kept in sync with
 # uninstall.sh's flag surface.
 uninstall_cmd() {
-  local cmd="npx -y @workweave/router --uninstall"
+  # --package + `--` is load-bearing: npm <= 6's bundled npx treats an
+  # undeclared `-y` as consuming the NEXT token, so `npx -y @workweave/router`
+  # loses the package name and resolves whatever follows as the command.
+  local cmd="npx --package @workweave/router -y -- weave-router --uninstall"
   case "$target" in
     codex)    cmd="$cmd --codex" ;;
     opencode) cmd="$cmd --opencode" ;;
@@ -577,11 +580,10 @@ write_opencode_config() {
     | (if $name  != "" then . + {"X-Weave-User-Name":  $name } else . end)
   ')"
 
-  # Headline models we surface in opencode's picker. The router re-routes
-  # each request anyway, so this list is mostly UX — what shows up when the
-  # user runs /models inside opencode. We list a mix of GPT + Claude so the
-  # picker reflects that the router spans families; whichever model serves the
-  # turn, its matching subscription (if connected) pays.
+  # Surface one Auto choice in opencode's picker. The router chooses the
+  # upstream model for every request, so presenting pinned model names would
+  # imply a choice that the router intentionally does not honor. Whichever
+  # model serves a turn uses its matching subscription when one is connected.
   #
   # npm is @ai-sdk/openai and baseURL KEEPS its /v1 here: opencode's
   # @ai-sdk/openai provider appends /responses, yielding the router's
@@ -601,12 +603,7 @@ write_opencode_config() {
       name: "Weave Router",
       options: { apiKey: $key, baseURL: $url, headers: $headers },
       models: {
-        "claude-sonnet-5":   { name: "Claude Sonnet 5 (via Weave Router)" },
-        "claude-sonnet-4-6": { name: "Claude Sonnet 4.6 (via Weave Router)" },
-        "claude-opus-4-8":   { name: "Claude Opus 4.8 (via Weave Router)" },
-        "claude-haiku-4-5":  { name: "Claude Haiku 4.5 (via Weave Router)" },
-        "gpt-5.5":           { name: "GPT-5.5 (via Weave Router)" },
-        "gpt-5.4":           { name: "GPT-5.4 (via Weave Router)" }
+        auto: { name: "Auto" }
       }
     }
   ')"
@@ -656,8 +653,9 @@ write_opencode_config() {
 
   # Merge into any existing opencode.json. We always overwrite provider.weave
   # so re-install reflects the latest key/identity, but we leave the rest of the
-  # file (other providers, mcp, agent settings) untouched. Top-level `model` is
-  # only set when the user hasn't already picked one.
+  # file (other providers, mcp, agent settings) untouched. A previously
+  # installed `weave/*` model is migrated to `weave/auto`; unrelated provider
+  # choices stay untouched.
   #
   # The weave-claude login provider AND the plugin entry are written together
   # only when the bundled plugin was present and copied ($plugin non-empty): the
@@ -685,12 +683,12 @@ write_opencode_config() {
                    then (.plugin -= [$pluginspec]) | (if (.plugin | length) == 0 then del(.plugin) else . end)
                    else . end)
          end)
-      | (if (.model // "") == "" then .model = "weave/claude-sonnet-4-6" else . end)
-      # Reset the default model if it points at a provider we just removed: the
-      # retired weave-codex, or weave-claude on a plugin-less re-install (it has
-      # no models anyway). Otherwise opencode boots with a dangling model.
-      | (if (.model // "" | tostring | startswith("weave-codex/")) then .model = "weave/claude-sonnet-4-6" else . end)
-      | (if $plugin == "" and (.model // "" | tostring | startswith("weave-claude/")) then .model = "weave/claude-sonnet-4-6" else . end)
+      | (if (.model // "") == "" then .model = "weave/auto" else . end)
+      # Replace any legacy Weave model choice with the single auto-routing
+      # choice. Models from unrelated providers remain unchanged.
+      | (if (.model // "" | tostring) as $model
+           | ($model | startswith("weave/") or startswith("weave-codex/") or startswith("weave-claude/"))
+           then .model = "weave/auto" else . end)
       | (.["$schema"] //= "https://opencode.ai/config.json")
     ' "$config_file")"
   else
@@ -700,7 +698,7 @@ write_opencode_config() {
       --arg plugin "$plugin_arg" '
       {
         "$schema": "https://opencode.ai/config.json",
-        model: "weave/claude-sonnet-4-6",
+        model: "weave/auto",
         provider: { weave: $block }
       }
       | (if $plugin != "" then .provider["weave-claude"] = $claude | .plugin = [$plugin] else . end)
@@ -771,10 +769,12 @@ write_pi_models_config() {
       headers: $headers,
       models: [
         { id: "claude-fable-5",    name: "Claude Fable 5 (via Weave Router)",    reasoning: true, input: ["text","image"], contextWindow: 1000000, maxTokens: 128000 },
-        { id: "claude-opus-4-8",   name: "Claude Opus 4.8 (via Weave Router)",   reasoning: true, input: ["text","image"], contextWindow: 200000, maxTokens: 64000 },
+        { id: "claude-opus-5",     name: "Claude Opus 5 (via Weave Router)",     reasoning: true, input: ["text","image"], contextWindow: 1000000, maxTokens: 128000 },
         { id: "claude-opus-4-7",   name: "Claude Opus 4.7 (via Weave Router)",   reasoning: true, input: ["text","image"], contextWindow: 200000, maxTokens: 64000 },
         { id: "claude-sonnet-4-6", name: "Claude Sonnet 4.6 (via Weave Router)", reasoning: true, input: ["text","image"], contextWindow: 200000, maxTokens: 64000 },
-        { id: "claude-haiku-4-5",  name: "Claude Haiku 4.5 (via Weave Router)",  reasoning: true, input: ["text","image"], contextWindow: 200000, maxTokens: 32000 }
+        { id: "claude-haiku-4-5",  name: "Claude Haiku 4.5 (via Weave Router)",  reasoning: true, input: ["text","image"], contextWindow: 200000, maxTokens: 32000 },
+        { id: "gpt-5.6-sol",       name: "GPT-5.6 Sol (via Weave Router)",       reasoning: true, input: ["text","image"], contextWindow: 1050000, maxTokens: 128000 },
+        { id: "grok-4.5",          name: "Grok 4.5 (via Weave Router)",          reasoning: true, input: ["text","image"], contextWindow: 500000, maxTokens: 131072 }
       ]
     }
   ')"
@@ -1573,30 +1573,34 @@ toggle_opencode() {
       ;;
     on)
       if [ "$on" = "true" ]; then ok "opencode is already on — nothing to do."; return 0; fi
-      restore_model="weave/claude-sonnet-4-6"
+      restore_model="weave/auto"
       if [ "$parked_present" = "true" ]; then
-        restore_model="$(jq -r '.model // "weave/claude-sonnet-4-6"' "$parked")"
+        restore_model="$(jq -r '.model // "weave/auto"' "$parked")"
       elif [ "$has_weave" != "true" ]; then
         warn "opencode isn't configured for the router. Run the installer first."; return 0
       else
         # No parked model (sidecar deleted by hand). Derive the default from the
         # installed provider.weave.models block rather than a hardcoded literal
-        # that silently diverges when the installer's default changes — prefer a
-        # sonnet entry, else the first model the installer registered.
+        # that silently diverges when the installer's default changes — prefer
+        # the auto-routing entry, else the first model the installer registered.
         restore_model="$(jq -r '
           (.provider.weave.models // {} | keys) as $k
-          | (([$k[] | select(test("sonnet"))] | first) // $k[0] // "claude-sonnet-4-6")
+          | (([$k[] | select(. == "auto")] | first) // $k[0] // "auto")
           | "weave/" + .
-        ' "$f" 2>/dev/null || echo "weave/claude-sonnet-4-6")"
+        ' "$f" 2>/dev/null || echo "weave/auto")"
       fi
-      # Never restore a legacy weave-codex model whose provider is no longer
-      # registered (every current install strips weave-codex). Fall back to the
-      # `weave` default so `on` can't leave opencode pointing at a missing
-      # provider.
+      # Restore only a registered `weave` model. Legacy installations may have
+      # parked a pinned model, but a current install exposes only `weave/auto`.
       case "$restore_model" in
+        weave/*)
+          local model_id="${restore_model#weave/}"
+          if ! jq -e --arg id "$model_id" '(.provider.weave.models // {}) | has($id)' "$f" >/dev/null 2>&1; then
+            restore_model="weave/auto"
+          fi
+          ;;
         weave-codex/*)
           if [ "$(jq -r '((.provider // {}) | has("weave-codex"))' "$f" 2>/dev/null || true)" != "true" ]; then
-            restore_model="weave/claude-sonnet-4-6"
+            restore_model="weave/auto"
           fi
           ;;
       esac
@@ -1689,6 +1693,7 @@ fi
 # Layout:
 #   Claude:  <settings_dir>/commands/{force-model,unforce-model}.md  → /force-model
 #   Codex:   <codex_dir>/prompts/{force-model,unforce-model}.md      → /prompts:force-model
+#   opencode: <commands_dir>/{force-model,unforce-model}.md          → /force-model
 #
 # Files come from install/commands/ in the repo (or the colocated commands/
 # directory the npm package ships alongside install.sh).
@@ -1719,8 +1724,8 @@ install_slash_commands() {
   installed="force-model, unforce-model, router-feedback, fm, ufm, rf"
   cmds="force-model unforce-model router-feedback fm ufm rf"
   if [ "$target" = "claude" ]; then
-    cmds="$cmds router-off router-on router-status"
-    installed="$installed, router-off, router-on, router-status"
+    cmds="$cmds router-off router-on router-status router-session"
+    installed="$installed, router-off, router-on, router-status, router-session"
   fi
 
   # Bake the same scope selector the toggle needs to find this install: --dir
@@ -1830,6 +1835,26 @@ if [ "$target" = "opencode" ]; then
     ok "Updated $gitignore (ignored opencode.json, .weave/)"
   fi
 
+  # Slash command wrappers: opencode discovers commands in *.md files under
+  # ~/.config/opencode/commands/ (user scope) and .opencode/commands/ (project
+  # scope). Install command wrappers for /rf (±), /force-model, /unforce-model
+  # so typing /rf + in the TUI expands to /router-feedback + and reaches the
+  # router's server-side feedback interceptor, same as Claude Code + Codex.
+  #
+  # Router on/off/status are not installed — they run npx shell commands
+  # specific to the Claude Code settings model and don't apply to opencode.
+  if [ "$scope" = "project" ]; then
+    opencode_commands_dir="$opencode_dir/.opencode/commands"
+  else
+    # User scope and --dir installs: use the global commands path that opencode
+    # discovers regardless of working directory.
+    opencode_commands_dir="${XDG_CONFIG_HOME:-$HOME/.config}/opencode/commands"
+  fi
+  install_slash_commands "$opencode_commands_dir"
+  if [ "$scope" = "user" ] || [ -n "$install_dir" ]; then
+    info "opencode restart required for commands to take effect."
+  fi
+
   # Post-install verification: same probes the Claude/Codex paths run.
   if [ "$quiet" != "true" ]; then
     if ! spin "Pinging $base_url/health" curl -fsS --max-time 5 "$base_url/health"; then
@@ -1974,10 +1999,21 @@ set -euo pipefail
 # lives in their per-user cache dir, and on no-content-change days we skip
 # the mv entirely so the repo working tree stays clean. When upstream does
 # change, the first teammate's commit propagates the new version to the rest.
+# A pricing-table miss also triggers a refresh off-schedule — see
+# weave_refresh_on_price_miss below.
 #
 # Opt out entirely with `export WEAVE_STATUSLINE_UPDATE=0`. Override the
 # source with `WEAVE_STATUSLINE_URL=...`, e.g. for self-hosters who fork.
+#
+# $1 is an optional stamp suffix, so a caller refreshing for a reason other than
+# "the interval elapsed" rate-limits on its own clock rather than sharing the
+# periodic check's budget. $2=1 drops the stamp again if the download fails, for
+# callers recovering from a known-bad state where waiting out the full interval
+# on a transient network error is worse than retrying next turn.
 weave_self_refresh() {
+  local stamp_suffix="${1:-}"
+  local retry_on_fail="${2:-0}"
+
   [ "${WEAVE_STATUSLINE_UPDATE:-1}" = "0" ] && return 0
   command -v curl >/dev/null 2>&1 || return 0
 
@@ -1994,7 +2030,7 @@ weave_self_refresh() {
   mkdir -p "$cache_dir" 2>/dev/null || return 0
   local script_slug
   script_slug="$(printf '%s' "$self" | tr -c 'A-Za-z0-9._-' '_')"
-  local stamp="$cache_dir/checked-at${script_slug}"
+  local stamp="$cache_dir/checked-at${script_slug}${stamp_suffix}"
 
   local now stamp_mtime
   now="$(date +%s 2>/dev/null)" || return 0
@@ -2018,7 +2054,13 @@ weave_self_refresh() {
   : > "$stamp" 2>/dev/null || return 0
 
   local url="${WEAVE_STATUSLINE_URL:-https://raw.githubusercontent.com/workweave/router/main/install/cc-statusline.sh}"
-  local tmp="${self}.tmp.$$"
+  # $$ alone is not unique: two calls can run in one invocation (the periodic
+  # check and a pricing-miss retry both fire on a cold cache) and would then
+  # curl -o into the same path and mv over each other, installing a truncated
+  # script that can never self-heal. The stamp suffix is the right key — it is
+  # what makes two callers mutually exclusive in the first place, so callers
+  # that could overlap necessarily have different suffixes.
+  local tmp="${self}.tmp.$$${stamp_suffix}"
   (
     # Detach stdin (CC pipes JSON to us) so curl can't accidentally consume
     # it, and silence all output so nothing leaks into the statusline.
@@ -2037,6 +2079,11 @@ weave_self_refresh() {
       fi
     else
       rm -f "$tmp"
+      # A download that never landed shouldn't spend the caller's whole
+      # interval; drop the stamp so the next turn can try again.
+      if [ "$retry_on_fail" = "1" ]; then
+        rm -f "$stamp"
+      fi
     fi
   ) >/dev/null 2>&1 &
   disown 2>/dev/null || true
@@ -2078,6 +2125,7 @@ prices='{
     "claude-opus-4-6":                  0.005,
     "claude-opus-4-7":                  0.005,
     "claude-opus-4-8":                  0.005,
+    "claude-opus-5":                    0.005,
     "claude-sonnet-4-5":                0.003,
     "claude-sonnet-4-6":                0.003,
     "claude-sonnet-5":                  0.003,
@@ -2093,6 +2141,8 @@ prices='{
     "gemini-3.1-flash-lite-preview":    0.0001,
     "gemini-3.1-pro-preview":           0.002,
     "gemini-3.5-flash":                 0.0015,
+    "gemini-3.5-flash-lite":            0.0003,
+    "gemini-3.6-flash":                 0.0015,
     "google/gemma-4-26b-a4b-it":        0.00015,
     "gpt-4.1":                          0.002,
     "gpt-4.1-mini":                     0.0004,
@@ -2111,12 +2161,17 @@ prices='{
     "gpt-5.5-mini":                     0.0005,
     "gpt-5.5-nano":                     0.00015,
     "gpt-5.5-pro":                      0.03,
+    "gpt-5.6-luna":                     0.001,
+    "gpt-5.6-sol":                      0.005,
+    "gpt-5.6-terra":                    0.0025,
+    "grok-4.5":                         0.002,
     "minimax/minimax-m2.7":             0.0003,
     "minimax/minimax-m3":               0.0003,
     "mistralai/mistral-small-2603":     0.0002,
     "moonshotai/kimi-k2.5":             0.0006,
     "moonshotai/kimi-k2.6":             0.00095,
     "moonshotai/kimi-k2.7":             0.00095,
+    "moonshotai/kimi-k3":               0.003,
     "qwen/qwen3-235b-a22b-2507":        0.0002266,
     "qwen/qwen3-30b-a3b-instruct-2507": 0.00015,
     "qwen/qwen3-coder":                 0.0009,
@@ -2139,6 +2194,7 @@ prices='{
     "claude-opus-4-6":                  0.025,
     "claude-opus-4-7":                  0.025,
     "claude-opus-4-8":                  0.025,
+    "claude-opus-5":                    0.025,
     "claude-sonnet-4-5":                0.015,
     "claude-sonnet-4-6":                0.015,
     "claude-sonnet-5":                  0.015,
@@ -2154,6 +2210,8 @@ prices='{
     "gemini-3.1-flash-lite-preview":    0.0004,
     "gemini-3.1-pro-preview":           0.008,
     "gemini-3.5-flash":                 0.009,
+    "gemini-3.5-flash-lite":            0.0025,
+    "gemini-3.6-flash":                 0.0075,
     "google/gemma-4-26b-a4b-it":        0.0006,
     "gpt-4.1":                          0.008,
     "gpt-4.1-mini":                     0.0016,
@@ -2172,12 +2230,17 @@ prices='{
     "gpt-5.5-mini":                     0.0025,
     "gpt-5.5-nano":                     0.0006,
     "gpt-5.5-pro":                      0.18,
+    "gpt-5.6-luna":                     0.006,
+    "gpt-5.6-sol":                      0.03,
+    "gpt-5.6-terra":                    0.015,
+    "grok-4.5":                         0.006,
     "minimax/minimax-m2.7":             0.0012,
     "minimax/minimax-m3":               0.0012,
     "mistralai/mistral-small-2603":     0.0006,
     "moonshotai/kimi-k2.5":             0.003,
     "moonshotai/kimi-k2.6":             0.004,
     "moonshotai/kimi-k2.7":             0.004,
+    "moonshotai/kimi-k3":               0.015,
     "qwen/qwen3-235b-a22b-2507":        0.0009064,
     "qwen/qwen3-30b-a3b-instruct-2507": 0.0006,
     "qwen/qwen3-coder":                 0.0027,
@@ -2324,6 +2387,42 @@ if [[ -n "$transcript_path" && -f "$transcript_path" ]]; then
   ) || true
 fi
 
+# ---------- refresh when a model isn't in the pricing table ----------
+#
+# A model that shipped after this copy of the script has no price entry, so the
+# jq guard above zeroes savings on every turn and the line reads "saved $0.00"
+# — indistinguishable from "the router ran and didn't beat your selection". The
+# periodic check heals that eventually, but a week late, and a model launch is
+# exactly when the number gets looked at. Refresh off-schedule instead.
+#
+# Keyed on its own stamp per unpriced id: a model we never price (self-hosted,
+# unrecognized) then costs one download per interval, not one per turn, and
+# can't starve the periodic check.
+weave_refresh_on_price_miss() {
+  local candidates="" m
+  for m in "$@"; do
+    case "$m" in
+      "" | "?" | failure | weave-router | "<synthetic>") continue ;;
+    esac
+    candidates="${candidates}${m}"$'\n'
+  done
+  [ -n "$candidates" ] || return 0
+
+  # A malformed $prices emits nothing here, which fails closed (no refresh)
+  # rather than re-downloading every turn.
+  local missing
+  missing="$(printf '%s' "$candidates" \
+    | jq -rR --argjson p "$prices" \
+        'select($p.input[.] == null or $p.output[.] == null)' 2>/dev/null \
+    | head -n 1)" || return 0
+  [ -n "$missing" ] || return 0
+
+  local model_slug
+  model_slug="$(printf '%s' "$missing" | tr -c 'A-Za-z0-9._-' '_')"
+  weave_self_refresh ".miss.${model_slug}" 1
+}
+weave_refresh_on_price_miss "$requested_norm" "$routed" 2>/dev/null || true
+
 # Brand color (#FF6C47) on terminals that grok 24-bit truecolor — that's
 # every modern one (iTerm2, Apple Terminal, vscode, ghostty, alacritty,
 # wezterm, kitty). Falls back gracefully on any escape-stripping terminal.
@@ -2439,12 +2538,20 @@ custom_headers="$custom_headers"$'\n'"X-App: claude-code"
 if [ "$scope" = "project" ] && [ -z "$install_dir" ]; then
   jq -n --arg url "$base_url" --arg sl "$statusline_path_for_settings" '{
     env: { ANTHROPIC_BASE_URL: $url, ENABLE_TOOL_SEARCH: "auto" },
-    statusLine: { type: "command", command: $sl }
+    statusLine: { type: "command", command: $sl },
+    attribution: {
+      commit: "Co-Authored-By: Weave Router <noreply@workweave.ai>",
+      pr: "🤖 Generated with [Weave Router](https://router.workweave.ai)"
+    }
   }' >"$tmp_patch"
 else
   jq -n --arg url "$base_url" --arg header "$custom_headers" --arg sl "$statusline_path_for_settings" '{
     env: { ANTHROPIC_BASE_URL: $url, ANTHROPIC_CUSTOM_HEADERS: $header, ENABLE_TOOL_SEARCH: "auto" },
-    statusLine: { type: "command", command: $sl }
+    statusLine: { type: "command", command: $sl },
+    attribution: {
+      commit: "Co-Authored-By: Weave Router <noreply@workweave.ai>",
+      pr: "🤖 Generated with [Weave Router](https://router.workweave.ai)"
+    }
   }' >"$tmp_patch"
 fi
 
@@ -2460,6 +2567,7 @@ if [ -f "$settings_file" ]; then
     | (if (.env | length) == 0 then del(.env) else . end)
     | del(.apiKeyHelper)
     | (if $b.statusLine then .statusLine = $b.statusLine else . end)
+    | (if $b.attribution then .attribution = $b.attribution else . end)
   ' "$settings_file" "$tmp_patch")"
   printf '%s\n' "$merged" >"$settings_file"
 else