ai-consultants 4.0.2 → 4.0.3

package/.env.example

@@ -198,7 +198,7 @@ QWEN3_CMD=qwen
 # =============================================================================
 
 # GLM - The Methodologist
-GLM_MODEL=glm-5.3
+GLM_MODEL=glm-5.3-flash
 GLM_TIMEOUT=180
 GLM_API_MAX_TOKENS=16384
 GLM_API_URL=https://api.z.ai/api/coding/paas/v4/chat/completions

package/CLAUDE.md

@@ -6,7 +6,7 @@ AI Consultants is a multi-model coverage system that queries up to 10 AI consult
 
 **Self-Exclusion**: The invoking agent is automatically excluded from both the panel and synthesis. Claude Code won't query or synthesize with Claude, Codex CLI won't query or synthesize with Codex, etc.
 
-**Version**: 4.0.2
+**Version**: 4.0.3
 
 ## Distribution
 
@@ -393,7 +393,7 @@ All consultants now use premium models by default:
 | Codex | gpt-5.6-sol |
 | Mistral | CLI: mistral-medium-3.5; API: mistral-large-3 |
 | DeepSeek | deepseek-v4-pro |
-| GLM | glm-5.3 |
+| GLM | glm-5.3-flash |
 | Grok | grok-4.6 |
 | Qwen3 | qwen3.7-max |
 | Kimi | kimi-code/k3 |
@@ -760,6 +760,15 @@ curl -fsSL https://raw.githubusercontent.com/matteoscurati/ai-consultants/main/s
 
 ## Changelog
 
+### v4.0.3
+
+- **GLM's active catalog target moves from `glm-5.3` to `glm-5.3-flash` without changing transport or tier semantics.** `scripts/config.sh:189` changes the clean-install default, and the maximum/premium/standard branches at `scripts/config.sh:626-656` select the same exact provider ID. `max_quality` still supplies `GLM_REASONING_EFFORT=max`; economy deliberately remains `glm-4-flash`.
+- **Existing managed installs advance without rewriting explicit choices.** `scripts/configure.sh:310-318` migrates the two exact historical generated defaults, `glm-5.2` and `glm-5.3`, to Flash and records `# ai-consultants:default`. A `# ai-consultants:pin` survives, including an explicit old `glm-5.3`; `scripts/test_configure.sh:449-461` covers both current-default migration and pin preservation.
+- **Identity and pricing stay honest.** The OpenAI-compatible adapter sends `glm-5.3-flash`, `reasoning_effort=max`, and the 16,384-token GLM budget; the synthetic transport test requires provider-reported identity and requested-model metadata (`scripts/test_api_transport.sh:253-263`). `docs/cost_rates.json` marks Flash unpriced and retains a zero/unpriced entry for legacy `glm-5.3` pins, avoiding the generic fallback rate.
+- **The exact ai-consultants transport completed one authorized no-retry live smoke.** Z.AI returned HTTP 200 and provider-reported `glm-5.3-flash` in about 12 seconds with 37 measured input tokens and 308 output tokens. The provider accepted max effort but returned near-structured text rather than the requested JSON; the adapter preserved `PONG` through its explicit unstructured fallback with confidence 5, so strict schema adherence is not claimed. PR #15 CI, the post-bump 23-suite gate, 452 core checks, configure 94/94, API transport 88/88, and ShellCheck are green.
+
+  Deliberately unchanged: `delegation-kit` remained read-only; its Claude-to-Z.AI gate and runner were not copied into this API-only consultant. Installation does not silently edit personal configuration, so an existing unpinned `.env` advances when the user runs `configure`; explicit pins remain user-owned. The separate `agent/model-defaults-4.1.0-wip` branch is not part of this patch release.
+
 ### v4.0.2
 
 - **The Grok adapter used to copy a rotating OAuth credential into a disposable HOME and delete any refreshed token at exit.** Parallel calls amplified the race: both could seed from one refresh token, one rotation vanished with its temp directory, and the ambient session could be left stale. `scripts/lib/grok_oauth.sh` now owns a durable generation under the XDG data root and `scripts/query_grok.sh` defaults to `GROK_OAUTH_MODE=shared`.

package/README.md

@@ -1,8 +1,8 @@
-# AI Consultants v4.0.2
+# AI Consultants v4.0.3
 
 > **Coverage, not a single guess.** A panel of up to 10 frontier models from different vendors fans out on your question in parallel and hands you the *union* of what they collectively see — the risks, edge cases, and approaches a single model misses.
 
-[![Version](https://img.shields.io/badge/version-4.0.2-blue.svg)](https://github.com/matteoscurati/ai-consultants)
+[![Version](https://img.shields.io/badge/version-4.0.3-blue.svg)](https://github.com/matteoscurati/ai-consultants)
 [![License](https://img.shields.io/badge/license-MIT-green.svg)](LICENSE)
 [![Claude Code Skill](https://img.shields.io/badge/Claude%20Code-Skill-orange.svg)](https://docs.anthropic.com/en/docs/claude-code/skills)
 [![GitHub stars](https://img.shields.io/github/stars/matteoscurati/ai-consultants?style=social)](https://github.com/matteoscurati/ai-consultants)
@@ -411,7 +411,7 @@ the observed version is response provenance only.
 
 | Consultant | Default Model | Persona | Focus |
 |------------|---------------|---------|-------|
-| **GLM** | glm-5.3 | The Methodologist | Structured approaches |
+| **GLM** | glm-5.3-flash | The Methodologist | Structured approaches |
 | **DeepSeek** | deepseek-v4-pro | The Code Specialist | Algorithms, code generation |
 
 ### Installing Consultant CLIs
@@ -483,7 +483,7 @@ detail instead of reducing every consultant to its summary.
 | Mistral CLI | mistral-medium-3.5 | mistral-medium-3.5 | mistral-medium-3.5 | devstral-small-2 |
 | Mistral API | mistral-large-3 | mistral-large-3 | mistral-large-3 | mistral-large-3 |
 | DeepSeek | deepseek-v4-pro | deepseek-v4-pro | deepseek-v4-flash | deepseek-v4-flash |
-| GLM | glm-5.3 | glm-5.3 | glm-5.3 | glm-4-flash |
+| GLM | glm-5.3-flash | glm-5.3-flash | glm-5.3-flash | glm-4-flash |
 | Grok | grok-4.6 | grok-4.6 | grok-4.5 | grok-4.5 |
 | Qwen3 | qwen3.8-max when Token Plan is configured; otherwise qwen3.7-max | qwen3.7-max | qwen3.6-35b-a3b | qwen3-32b |
 | Kimi | kimi-code/k3-256k | kimi-code/k3 | kimi-code/k3 | kimi-code/k3 |

package/SKILL.md

@@ -5,10 +5,10 @@ license: MIT
 compatibility: Requires bash, jq, and at least 2 AI CLI tools (agy, codex, vibe, etc.). macOS and Linux.
 metadata:
   author: matteoscurati
-  version: 4.0.2
+  version: 4.0.3
 ---
 
-# AI Consultants v4.0.2 - AI Expert Panel
+# AI Consultants v4.0.3 - AI Expert Panel
 
 **Coverage, not a single guess.** Convene a panel of AI "consultants" from different vendors for coding questions: they fan out in parallel and you get the *union* of what they collectively see — the risks, edge cases, and approaches a single model misses. Each consultant has a **configurable persona** that decorrelates its analysis.
 

package/docs/COST_RATES.md

@@ -1,4 +1,4 @@
-# Cost Rates - AI Consultants v4.0.2
+# Cost Rates - AI Consultants v4.0.3
 
 This page documents the per-token rates used by the cost tracking system.
 
@@ -45,7 +45,8 @@ models programmatically.
 | gemini-3-flash | Legacy | $0.0005 | Removed Cursor consultant |
 | deepseek-v4-pro | Premium | $0.000435 | DeepSeek |
 | deepseek-v4-flash | Standard/Economy | $0.00014 | DeepSeek |
-| glm-5.3 | Maximum/Premium/Standard | Unpriced | GLM coding-plan endpoint |
+| glm-5.3-flash | Maximum/Premium/Standard | Unpriced | GLM coding-plan endpoint |
+| glm-5.3 | Legacy pins | Unpriced | GLM coding-plan endpoint |
 | glm-4-flash | Economy | $0.001 | GLM |
 | grok-4.6 | Maximum/Premium | $0.002 | Grok |
 | grok-4.5 | Standard/Economy | $0.002 | Grok |
@@ -86,7 +87,8 @@ models programmatically.
 | gemini-3-flash | Legacy | $0.003 | Removed Cursor consultant |
 | deepseek-v4-pro | Premium | $0.00087 | DeepSeek |
 | deepseek-v4-flash | Standard/Economy | $0.00028 | DeepSeek |
-| glm-5.3 | Maximum/Premium/Standard | Unpriced | GLM coding-plan endpoint |
+| glm-5.3-flash | Maximum/Premium/Standard | Unpriced | GLM coding-plan endpoint |
+| glm-5.3 | Legacy pins | Unpriced | GLM coding-plan endpoint |
 | glm-4-flash | Economy | $0.003 | GLM |
 | grok-4.6 | Maximum/Premium | $0.006 | Grok |
 | grok-4.5 | Standard/Economy | $0.006 | Grok |
@@ -174,7 +176,8 @@ the providers' official pricing pages: [Anthropic](https://platform.claude.com/d
 [MiniMax](https://platform.minimax.io/docs/guides/pricing-paygo). Gemini 3.7's
 listed rate is the promotion effective through December 31, 2026.
 
-`glm-5.3`, `qwen3.8-max`, and `kimi-code/k3-256k` are explicitly unpriced on
+`glm-5.3-flash`, legacy-pinned `glm-5.3`, `qwen3.8-max`, and
+`kimi-code/k3-256k` are explicitly unpriced on
 the transports used here. Their zero catalog entries prevent the estimator from
 inventing a dollar figure; session reports disclose their exclusion rather than
 presenting them as free.

package/docs/cost_rates.json

@@ -1,5 +1,5 @@
 {
-  "version": "4.0.2",
+  "version": "4.0.3",
   "updated": "2026-08-23",
   "models": {
     "_comment_units": "All rates are USD per 1,000 tokens (per-1K). lib/costs.sh computes cost as (token_count / 1000) * rate, so every value here MUST be a per-1K rate = (provider $/1M price) / 1000. Do NOT paste $/MTok figures directly.",
@@ -402,6 +402,10 @@
       "input": 0,
       "output": 0
     },
+    "glm-5.3-flash": {
+      "input": 0,
+      "output": 0
+    },
     "kimi-code/k3-256k": {
       "input": 0,
       "output": 0
@@ -411,6 +415,7 @@
     "qwen3.8-max",
     "qwen3.8-max-preview",
     "glm-5.3",
+    "glm-5.3-flash",
     "kimi-code/k3-256k"
   ],
   "consultant_fallbacks": {
@@ -420,7 +425,7 @@
     "codex": "gpt-5.6-sol",
     "mistral": "mistral-large-3",
     "deepseek": "deepseek-v4-pro",
-    "glm": "glm-5.3",
+    "glm": "glm-5.3-flash",
     "grok": "grok-4.6",
     "qwen3": "qwen3.7-max",
     "kimi": "kimi-code/k3",
@@ -434,7 +439,7 @@
       "codex": "gpt-5.6-sol",
       "mistral": "mistral-medium-3.5",
       "deepseek": "deepseek-v4-pro",
-      "glm": "glm-5.3",
+      "glm": "glm-5.3-flash",
       "grok": "grok-4.6",
       "qwen3": "qwen3.8-max",
       "kimi": "kimi-code/k3-256k",
@@ -446,7 +451,7 @@
       "codex": "gpt-5.6-sol",
       "mistral": "mistral-medium-3.5",
       "deepseek": "deepseek-v4-pro",
-      "glm": "glm-5.3",
+      "glm": "glm-5.3-flash",
       "grok": "grok-4.6",
       "qwen3": "qwen3.7-max",
       "kimi": "kimi-code/k3",
@@ -458,7 +463,7 @@
       "codex": "gpt-5.6-terra",
       "mistral": "mistral-medium-3.5",
       "deepseek": "deepseek-v4-flash",
-      "glm": "glm-5.3",
+      "glm": "glm-5.3-flash",
       "grok": "grok-4.5",
       "qwen3": "qwen3.6-35b-a3b",
       "kimi": "kimi-code/k3",

package/docs/releases/v4.0.3.md

@@ -0,0 +1,62 @@
+# Release v4.0.3
+
+**Date:** 2026-08-29
+**Type:** Patch — upgrade the GLM consultant to GLM-5.3-Flash
+**Previous:** v4.0.2
+
+## Highlights
+
+- GLM uses `glm-5.3-flash` in maximum, premium, and standard tiers.
+- `max_quality` continues to request GLM's `max` reasoning effort; the economy tier remains `glm-4-flash`.
+- Existing managed GLM defaults migrate forward while explicit model pins survive.
+- A real single-attempt Z.AI smoke confirmed the exact model and API transport.
+
+## What's New
+
+### GLM-5.3-Flash default
+
+New installations and runs without a GLM model override now request `glm-5.3-flash`. The same exact identifier is selected by the maximum, premium, and standard model tiers. This release does not change the Z.AI OpenAI-compatible endpoint, response budget, panel composition, routing affinities, or GLM's Methodologist persona.
+
+`max_quality` still sends `reasoning_effort=max` and a 16,384-token response budget. The economy preset remains on `glm-4-flash`.
+
+### Managed migration and cost disclosure
+
+When `ai-consultants configure` rewrites a configuration, the exact historical generated values `glm-5.2` and `glm-5.3` advance to `glm-5.3-flash`. Values marked `# ai-consultants:pin` remain untouched.
+
+GLM-5.3-Flash is explicitly listed as unpriced on the Coding Plan transport. The catalog also keeps legacy `glm-5.3` pins unpriced, preventing the estimator from presenting a fabricated fallback dollar rate.
+
+### Exact-transport verification
+
+One authorized live smoke used the shipped `query_glm.sh` adapter, the Z.AI OpenAI-compatible endpoint, `glm-5.3-flash`, max effort, a single attempt, and no retry. It completed with HTTP 200 and exit 0 in about 12 seconds; the response reported the exact requested model and measured 37 input plus 308 output tokens.
+
+The model returned near-structured text rather than the requested JSON. The adapter handled that response as designed: it retained the `PONG` content, labeled the answer as an unstructured-provider fallback, reduced confidence to 5, and disclosed the format caveat. This smoke therefore attests transport, authentication, model identity, max-effort acceptance, token accounting, and fallback behavior; it does not claim strict JSON adherence from every GLM-5.3-Flash response.
+
+## Breaking Changes
+
+None — this release is backwards-compatible. Explicit GLM model pins are preserved.
+
+## Upgrade Guide
+
+```bash
+# npx (no install)
+npx ai-consultants "question"
+
+# git clone install
+cd ~/.claude/skills/ai-consultants && git pull
+
+# curl | bash install
+curl -fsSL https://raw.githubusercontent.com/matteoscurati/ai-consultants/main/scripts/install.sh | bash
+```
+
+New installations use GLM-5.3-Flash automatically. Existing installations with an unpinned managed GLM value should run:
+
+```bash
+ai-consultants configure --force
+```
+
+Alternatively, set `GLM_MODEL=glm-5.3-flash` explicitly. A value marked `# ai-consultants:pin` will not be migrated.
+
+## Commits
+
+- `fc6aa85` feat: upgrade GLM default to 5.3 Flash
+- `b2690c3` Merge pull request #15 from matteoscurati/agent/glm-5.3-flash

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "ai-consultants",
-  "version": "4.0.2",
+  "version": "4.0.3",
   "description": "A cross-vendor panel of up to 10 AI models that returns the coverage union of their distinct perspectives",
   "bin": {
     "ai-consultants": "bin/ai-consultants"

package/references/configuration.md

@@ -252,7 +252,7 @@ KIMI_MODEL=kimi-code/k3
 QWEN3_MODEL=qwen3.7-max
 QWEN3_MAX_QUALITY_TIMEOUT=600
 QWEN3_API_MAX_TOKENS=16384
-GLM_MODEL=glm-5.3
+GLM_MODEL=glm-5.3-flash
 GLM_API_MAX_TOKENS=16384
 GLM_REASONING_EFFORT=       # max_quality sets max
 GROK_MODEL=grok-4.6

package/scripts/config.sh

@@ -186,7 +186,7 @@ QWEN3_FORMAT="${QWEN3_FORMAT:-qwen}"
 # GLM CONFIGURATION - The Code Specialist (API-based)
 # =============================================================================
 
-GLM_MODEL="${GLM_MODEL:-glm-5.3}"
+GLM_MODEL="${GLM_MODEL:-glm-5.3-flash}"
 GLM_TIMEOUT_SECONDS="${GLM_TIMEOUT:-180}"
 GLM_API_MAX_TOKENS="${GLM_API_MAX_TOKENS:-16384}"
 GLM_API_URL="${GLM_API_URL:-https://api.z.ai/api/coding/paas/v4/chat/completions}"
@@ -623,7 +623,7 @@ get_model_for_tier() {
                 codex)    echo "gpt-5.6-sol" ;;
                 mistral)  [[ "$transport" == "api" ]] && echo "mistral-large-3" || echo "mistral-medium-3.5" ;;
                 deepseek) echo "deepseek-v4-pro" ;;
-                glm)      echo "glm-5.3" ;;
+                glm)      echo "glm-5.3-flash" ;;
                 grok)     echo "grok-4.6" ;;
                 qwen3)    echo "qwen3.8-max" ;;
                 kimi)     echo "kimi-code/k3-256k" ;;
@@ -638,7 +638,7 @@ get_model_for_tier() {
                 codex)    echo "gpt-5.6-sol" ;;
                 mistral)  [[ "$transport" == "api" ]] && echo "mistral-large-3" || echo "mistral-medium-3.5" ;;
                 deepseek) echo "deepseek-v4-pro" ;;
-                glm)      echo "glm-5.3" ;;
+                glm)      echo "glm-5.3-flash" ;;
                 grok)     echo "grok-4.6" ;;
                 qwen3)    echo "qwen3.7-max" ;;
                 kimi)     echo "kimi-code/k3" ;;
@@ -653,7 +653,7 @@ get_model_for_tier() {
                 codex)    echo "gpt-5.6-terra" ;;
                 mistral)  [[ "$transport" == "api" ]] && echo "mistral-large-3" || echo "mistral-medium-3.5" ;;
                 deepseek) echo "deepseek-v4-flash" ;;
-                glm)      echo "glm-5.3" ;;  # Same as premium (no mid-tier GLM)
+                glm)      echo "glm-5.3-flash" ;;  # Same as premium (no mid-tier GLM)
                 grok)     echo "grok-4.5" ;;
                 qwen3)    echo "qwen3.6-35b-a3b" ;;  # Open-weight MoE (35B total, 3B active)
                 kimi)     echo "kimi-code/k3" ;;
@@ -1011,4 +1011,4 @@ EOF
 # VERSION
 # =============================================================================
 
-AI_CONSULTANTS_VERSION="4.0.2"
+AI_CONSULTANTS_VERSION="4.0.3"

package/scripts/configure.sh

@@ -307,11 +307,14 @@ if [[ "$(read_value "$WORK_FILE" GEMINI_MODEL 2>/dev/null || true)" == "Gemini 3
     echo "Migrated managed Gemini CLI default: Gemini 3.1 Pro (High) -> Gemini 3.7 Flash (High)" >&2
 fi
 
-if [[ "$(read_value "$WORK_FILE" GLM_MODEL 2>/dev/null || true)" == "glm-5.2" ]] \
-    && ! has_value_marker "$WORK_FILE" GLM_MODEL "$PIN_MARKER"; then
-    set_value GLM_MODEL "glm-5.3 $DEFAULT_MARKER"
-    echo "Migrated managed GLM default: glm-5.2 -> glm-5.3" >&2
-fi
+case "$(read_value "$WORK_FILE" GLM_MODEL 2>/dev/null || true)" in
+    glm-5.2|glm-5.3)
+        if ! has_value_marker "$WORK_FILE" GLM_MODEL "$PIN_MARKER"; then
+            set_value GLM_MODEL "glm-5.3-flash $DEFAULT_MARKER"
+            echo "Migrated managed GLM default to glm-5.3-flash" >&2
+        fi
+        ;;
+esac
 
 if [[ "$(read_value "$WORK_FILE" GROK_MODEL 2>/dev/null || true)" == "grok-4.5" ]] \
     && ! has_value_marker "$WORK_FILE" GROK_MODEL "$PIN_MARKER"; then

package/scripts/query_glm.sh

@@ -5,7 +5,7 @@
 #
 # Environment variables:
 #   GLM_API_KEY     - API key for Zhipu AI (required)
-#   GLM_MODEL       - Model to use (default: glm-5.3)
+#   GLM_MODEL       - Model to use (default: glm-5.3-flash)
 #   GLM_TIMEOUT     - Timeout in seconds (default: 180)
 #   ENABLE_PERSONA  - Enable "The Methodologist" persona (default: true)