cursor-route 0.1.4 → 0.1.6

package/README.md

@@ -1,6 +1,6 @@
 # cursor-route
 
-**Cursor stays the brain. Grok CLI + DeepSeek (claude-ds) are the parallel army.**
+**Cursor stays the brain. Grok CLI + DeepSeek (claude-ds) + OpenRouter (easy) are the parallel army.**
 
 Lane-aware `/route` orchestration in tmux — not another multi-provider fleet, not a Codex clone.
 
@@ -17,7 +17,7 @@ cursor-route capture <jobId>
 |---------|-------|---------|------|
 | [codex-orchestrator](https://github.com/kingbootoshi/codex-orchestrator) | Claude Code | Codex | Viral tmux panes |
 | [CAO](https://github.com/awslabs/cli-agent-orchestrator) | Supervisor CLI | Many (incl. Cursor CLI) | Enterprise MCP + Web UI |
-| **cursor-route** | **Cursor Agent** | **Grok CLI + claude-ds** | Cost-aware lanes you already pay for |
+| **cursor-route** | **Cursor Agent** | **Grok CLI + claude-ds + OpenRouter (easy)** | Cost-aware lanes you already pay for |
 
 If you already live in Cursor, X Premium (Grok CLI), and DeepSeek — stop paying a third coding agent just to parallelize.
 
@@ -28,6 +28,7 @@ If you already live in Cursor, X Premium (Grok CLI), and DeepSeek — stop payin
 | Cursor | Premium plan | Plan / synthesize / verify (orchestrator) |
 | Grok CLI | X Premium | `--lane hard` implement |
 | DeepSeek via claude-ds | DeepSeek API / plan | `--lane mid` implement |
+| OpenRouter free models | OpenRouter API (free tier) | `--lane easy` wording/drafts — non-secret prompts only (see Security) |
 | Codex / extra Claude | Optional | Not required for v0 |
 
 Exact dollars vary — the point is **reuse subscriptions you already have**.
@@ -41,6 +42,7 @@ Exact dollars vary — the point is **reuse subscriptions you already have**.
 | [tmux](https://github.com/tmux/tmux) | Worker panes |
 | [Bun](https://bun.sh) *(or Node 20+)* | Runs the CLI |
 | [Grok CLI](https://x.ai/cli) and/or Claude Code + DeepSeek (`claude-ds`) | Workers |
+| OpenRouter API key (`OPENROUTER_API_KEY`) | Easy lane (`--lane easy` / `--worker openrouter`) |
 | `script(1)` | Job logs (macOS/Linux) |
 
 ```bash
@@ -54,6 +56,7 @@ npm i -g cursor-route
 # Auth workers
 grok login                 # if using Grok
 # configure claude-ds — see DeepSeek setup below
+export OPENROUTER_API_KEY=...   # if using the easy lane (see OpenRouter setup below)
 
 cursor-route health
 # without tmux / workers (CI / headless infra smoke):
@@ -77,7 +80,9 @@ mkdir -p .cursor/skills
 cp -R ~/.cursor-route-src/skills/route-orch .cursor/skills/
 ```
 
-Then say **`/route-orch`** or **spawn workers** in Cursor — the skill delegates to `cursor-route` (does not replace private Cemini `/route`).
+Then say **`/route-orch`** or **spawn workers** in Cursor — the skill delegates to `cursor-route` (does not replace a private in-house `/route` skill).
+
+Working notes for this repo (edit in place): [docs/briefs/WORKING.md](./docs/briefs/WORKING.md).
 
 ## Commands
 
@@ -98,11 +103,26 @@ Then say **`/route-orch`** or **spawn workers** in Cursor — the skill delegate
 
 | Lane | Worker | Intent |
 |------|--------|--------|
-| `mid` | `claude-ds` | Default implement on DeepSeek |
+| `easy` | `openrouter` | Wording / drafts on OpenRouter free models (non-secret prompts only — see Security) |
+| `mid` | `claude-ds` | Default implement on DeepSeek (**Flash** by default) |
 | `hard` | `grok` | Hard implement on Grok CLI |
 
 Always-approve is **on** by default. Opt out: `--ask` or `CURSOR_ROUTE_ASK=1`.
 
+### Mid models (Flash vs Pro)
+
+| Flag | Model id | When |
+|------|----------|------|
+| `--model flash` (default) | `deepseek-v4-flash` | Cheap mid execute |
+| `--model pro` | `deepseek-v4-pro` | Harder mid / Grok **usage** stand-in |
+
+```bash
+cursor-route start --lane mid "…"                    # Flash
+cursor-route start --lane mid --model pro "…"        # Pro
+```
+
+**Grok auth ≠ usage-out:** if `cursor-route health` shows `worker:grok` ✗, run `grok login` (or set `XAI_API_KEY`). That is auth. Quota / subscription usage exhausted is different — use `--lane mid --model pro` as the stand-in, not a missing login.
+
 ## DeepSeek setup (the cheap mid-lane — this is the point)
 
 `cursor-route` mid lane runs **DeepSeek**, not Anthropic. Claude Code is only the terminal harness; bills go to DeepSeek when `ANTHROPIC_BASE_URL` points at them.
@@ -114,22 +134,44 @@ npm i -g @anthropic-ai/claude-code
 
 export ANTHROPIC_BASE_URL=https://api.deepseek.com/anthropic
 export ANTHROPIC_AUTH_TOKEN=YOUR_DEEPSEEK_API_KEY   # from platform.deepseek.com
-export ANTHROPIC_MODEL=deepseek-v4-pro[1m]
+# Optional shell defaults (CLI --model overrides ANTHROPIC_MODEL for the job):
 export ANTHROPIC_DEFAULT_HAIKU_MODEL=deepseek-v4-flash
 export CLAUDE_CODE_SUBAGENT_MODEL=deepseek-v4-flash
 
 cursor-route health          # worker:claude-ds should be ✓
-cursor-route start --lane mid "…"
+cursor-route start --lane mid "…"                 # Flash (default)
+cursor-route start --lane mid --model pro "…"     # Pro when you need it
 ```
 
 Persist the same vars under `~/.claude/settings.json` → `"env": { … }` if you want them every shell.
 
-**Also accepted:** `claude-ds` or `deepseek-claude` on PATH (Cemini shims).
+**Also accepted:** `claude-ds` or `deepseek-claude` on PATH (Cemini shims). The adapter passes `-Model deepseek-v4-flash|deepseek-v4-pro`.
+
+**Reserved:** `--worker deepseek` is a slot for an official DeepSeek coding harness — not wired yet. Mid stays on `claude-ds`.
 
 **Not the default:** bare `claude` still talking to Anthropic. Health refuses that so a misconfigured install cannot silently burn frontier $ rates. Escape hatch only: `CURSOR_ROUTE_ALLOW_ANTHROPIC=1`.
 
 No DeepSeek yet? Use `--lane hard` / `--worker grok` (X Premium).
 
+## OpenRouter setup (the free easy lane)
+
+`--lane easy` / `--worker openrouter` sends wording/draft prompts to OpenRouter's
+free model route (`openrouter/free`). Get a key at [openrouter.ai/keys](https://openrouter.ai/keys).
+
+```bash
+export OPENROUTER_API_KEY=sk-or-v1-...        # from openrouter.ai/keys
+# optional:
+export CURSOR_ROUTE_OPENROUTER_MODEL=openrouter/free   # default
+export OPENROUTER_BASE_URL=https://openrouter.ai/api/v1  # default
+
+cursor-route health          # worker:openrouter should be ✓
+cursor-route start --lane easy "Rewrite this FAQ answer in 3 sentences"
+```
+
+**Non-secret prompts only:** free OpenRouter models may log prompts, so the easy lane is for
+**wording/drafts without credentials**. The same refuse gate as every lane blocks
+key-shaped material in `start` / `send`, and the runner re-checks the prompt file.
+
 ## Jobs directory
 
 Jobs default to `~/.local/share/cursor-route/jobs` (override with `CURSOR_ROUTE_JOBS_DIR`).
@@ -144,19 +186,19 @@ This is **not** inside a git clone of this repo.
 ## FAQ
 
 **What is cursor-route?**  
-cursor-route is a public MIT CLI and Cursor skill that runs parallel coding workers in tmux while Cursor remains the planner. DeepSeek handles the mid lane, and Grok CLI handles the hard lane.
+cursor-route is a public MIT CLI and Cursor skill that runs parallel coding workers in tmux while Cursor remains the planner. DeepSeek handles the mid lane, Grok CLI handles the hard lane, and OpenRouter free models handle the easy lane for wording/drafts.
 
 **How is this different from Codex orchestrator?**  
 It uses the familiar strategist and worker-pane shape, but it is not a Codex clone. cursor-route uses Cursor as the planner and DeepSeek plus Grok CLI as workers. Codex is not required.
 
 **Does mid lane use Anthropic Claude?**  
-No. The mid worker is DeepSeek. Claude Code is the harness, configured with `ANTHROPIC_BASE_URL=https://api.deepseek.com/anthropic` and a DeepSeek key in `ANTHROPIC_AUTH_TOKEN`.
+No. The mid worker is DeepSeek. Claude Code is the harness, configured with `ANTHROPIC_BASE_URL=https://api.deepseek.com/anthropic` and a DeepSeek key in `ANTHROPIC_AUTH_TOKEN`. Default model is Flash (`--model flash`); use `--model pro` for harder mid work or when Grok usage is exhausted (not the same as a missing `grok login`).
 
 **How do I install?**  
 Run `npm i -g cursor-route`, install tmux if needed, then run `cursor-route health`. The package is available at https://www.npmjs.com/package/cursor-route, and the source is at https://github.com/cemini23/cursor-route.
 
 **Is it free?**  
-The cursor-route code is open source under MIT. It does not make the worker services free. Your costs depend on Cursor, DeepSeek API usage, and the Grok access or balance available to you.
+The cursor-route code is open source under MIT. It does not make the worker services free. Your costs depend on Cursor, DeepSeek API usage, and the Grok access or balance available to you. The easy lane can be free on OpenRouter's free-model route (`openrouter/free`).
 
 ## Related
 
@@ -202,5 +244,4 @@ MIT © Cemini — see [LICENSE](LICENSE).
 - Native DeepSeek harness adapter  
 - Codebase map injection (`--map`)  
 - Cursor CLI `agent` as alternate supervisor  
-- Web UI / CAO-style MCP supervisor  
-- OpenRouter easy lane (secrets-safe)
+- Web UI / CAO-style MCP supervisor

package/SECURITY.md

@@ -14,14 +14,15 @@ Do **not** open a public issue for credential leaks or RCE-class bugs.
 ## Hard rules for users and agents
 
 1. **No secrets in prompts or job files.** Do not paste API keys, SSH private keys, Discord tokens, or `.env` contents into `cursor-route start` / `send` prompts.
-2. **Always-approve is powerful.** Default headless workers skip interactive permission prompts (`--always-approve` / `--dangerously-skip-permissions`). Opt out with `--ask` / `CURSOR_ROUTE_ASK=1` when you need HITL.
-3. **Install from known channels only.** Prefer `npm i -g cursor-route` or a git clone of this repo. Do not pipe unknown `curl | bash` installers as the primary path.
-4. **Workers inherit your auth.** Grok CLI and Claude Code / claude-ds use *your* local login. Treat worker panes like you would treat your own shell.
-5. **No LIVE Discord / trading egress demos** from this tool. Orchestration is local.
+2. **Free OpenRouter easy-lane models may log prompts.** `--lane easy` / `--worker openrouter` is for **non-secret** wording/drafts only. The refuse gate (`start` / `send`, plus the runner's re-check) applies to every lane — never send key-shaped material to the easy lane.
+3. **Always-approve is powerful.** Default headless workers skip interactive permission prompts (`--always-approve` / `--dangerously-skip-permissions`). Opt out with `--ask` / `CURSOR_ROUTE_ASK=1` when you need HITL.
+4. **Install from known channels only.** Prefer `npm i -g cursor-route` or a git clone of this repo. Do not pipe unknown `curl | bash` installers as the primary path.
+5. **Workers inherit your auth.** Grok CLI and Claude Code / claude-ds use *your* local login. Treat worker panes like you would treat your own shell.
+6. **No LIVE Discord / trading egress demos** from this tool. Orchestration is local.
 
 ## Supply chain
 
-- Declared runtime npm dependencies: **none**. System needs: Node ≥20 or Bun, `tmux`, and worker CLIs (Grok / claude-ds).
+- Declared runtime npm dependencies: **none**. System needs: Node ≥20 or Bun, `tmux`, worker CLIs (Grok / claude-ds), and an OpenRouter API key for the easy lane.
 - The npm package ships a compiled `dist/` (plain JS, no loader). The bin shim and the completion hook run the compiled JS via `node`; there is **no network fetch of `tsx` on the happy path**.
 - Running from a git clone without a build uses Bun to execute `src/` directly (Bun runs TypeScript natively) — also offline-friendly.
 - Review `package.json` before upgrading.

package/dist/adapters/claude-ds.js

@@ -2,6 +2,7 @@ import { execSync } from "node:child_process";
 import { readFileSync, existsSync } from "node:fs";
 import { homedir } from "node:os";
 import { join } from "node:path";
+import { DS_MODEL_IDS, config, resolveDsModelAlias, } from "../config.js";
 import { shellQuote } from "../util.js";
 /**
  * Mid-lane = DeepSeek (cheap). The Claude Code binary is only a harness —
@@ -104,24 +105,39 @@ function resolveClaudeDs() {
     }
     return null;
 }
+function pickModelAlias(requested) {
+    if (requested)
+        return requested;
+    // Env override for power users who already export ANTHROPIC_MODEL
+    const fromEnv = process.env.CURSOR_ROUTE_DS_MODEL || process.env.ANTHROPIC_MODEL;
+    if (fromEnv) {
+        try {
+            return resolveDsModelAlias(fromEnv);
+        }
+        catch {
+            /* fall through to default */
+        }
+    }
+    return config.defaultDsModel;
+}
 /**
  * Env that must reach stock `claude` for DeepSeek routing.
  * Passed via process/tmux env — never interpolated into the printed command.
  */
-function deepSeekWorkerEnv() {
+function deepSeekWorkerEnv(modelId) {
     const base = resolvedDeepSeekBaseUrl();
     if (!base)
         return undefined;
-    const env = { ANTHROPIC_BASE_URL: base };
+    const env = {
+        ANTHROPIC_BASE_URL: base,
+        ANTHROPIC_MODEL: modelId,
+    };
     const token = process.env.ANTHROPIC_AUTH_TOKEN ||
         process.env.ANTHROPIC_API_KEY ||
         process.env.DEEPSEEK_API_KEY ||
         "";
     if (token)
         env.ANTHROPIC_AUTH_TOKEN = token;
-    const model = process.env.ANTHROPIC_MODEL;
-    if (model)
-        env.ANTHROPIC_MODEL = model;
     return env;
 }
 export const claudeDsAdapter = {
@@ -144,24 +160,30 @@ export const claudeDsAdapter = {
             worker: "claude-ds",
             ok: true,
             binary: resolved.binary,
-            detail: `ok (${resolved.mode})`,
+            detail: `ok (${resolved.mode}; default model ${DS_MODEL_IDS[config.defaultDsModel]})`,
         };
     },
-    buildLaunch({ promptFile, cwd, alwaysApprove }) {
+    buildLaunch({ promptFile, cwd, alwaysApprove, model }) {
         const resolved = resolveClaudeDs();
         if (!resolved) {
             throw new Error("DeepSeek worker not available — run: cursor-route health");
         }
+        const alias = pickModelAlias(model);
+        const modelId = DS_MODEL_IDS[alias];
         const ask = process.env.CURSOR_ROUTE_ASK === "1" || process.env.CLAUDE_DS_ASK === "1";
         const skip = alwaysApprove && !ask;
         // Stock `claude` needs DeepSeek env injected into the worker process
         // (tmux panes may not inherit client env from a long-lived server).
-        const env = resolved.mode.startsWith("claude → DeepSeek") ? deepSeekWorkerEnv() : undefined;
-        if (resolved.mode.startsWith("claude-ds")) {
+        const env = resolved.mode.startsWith("claude → DeepSeek")
+            ? deepSeekWorkerEnv(modelId)
+            : undefined;
+        if (resolved.mode.startsWith("claude-ds") || resolved.mode.startsWith("deepseek-claude")) {
             const parts = [
                 shellQuote(resolved.binary),
                 "-PromptFile",
                 shellQuote(promptFile),
+                "-Model",
+                shellQuote(modelId),
             ];
             if (skip)
                 parts.push("--dangerously-skip-permissions");
@@ -176,6 +198,8 @@ export const claudeDsAdapter = {
             shellQuote(resolved.binary),
             "-p",
             `"$(cat ${shellQuote(promptFile)})"`,
+            "--model",
+            shellQuote(modelId),
         ];
         if (skip)
             parts.push("--dangerously-skip-permissions");

package/dist/adapters/deepseek.js

@@ -0,0 +1,19 @@
+/**
+ * Reserved slot for the official DeepSeek coding harness when it ships.
+ * Mid lane stays on claude-ds until then — do not route jobs here.
+ */
+export const deepseekAdapter = {
+    kind: "deepseek",
+    label: "Official DeepSeek harness (unreleased)",
+    health() {
+        return {
+            worker: "deepseek",
+            ok: false,
+            binary: null,
+            detail: "unreleased — mid lane uses claude-ds (DeepSeek behind Claude Code). See README.",
+        };
+    },
+    buildLaunch() {
+        throw new Error("Official DeepSeek harness is not available yet — use --lane mid / --worker claude-ds");
+    },
+};

package/dist/adapters/index.js

@@ -1,8 +1,12 @@
 import { grokAdapter } from "./grok.js";
 import { claudeDsAdapter } from "./claude-ds.js";
+import { openRouterAdapter } from "./openrouter.js";
+import { deepseekAdapter } from "./deepseek.js";
 const registry = {
     grok: grokAdapter,
     "claude-ds": claudeDsAdapter,
+    openrouter: openRouterAdapter,
+    deepseek: deepseekAdapter,
 };
 export function getAdapter(worker) {
     const a = registry[worker];

package/dist/adapters/openrouter.js

@@ -0,0 +1,78 @@
+import { existsSync } from "node:fs";
+import { fileURLToPath } from "node:url";
+import { dirname, join } from "node:path";
+import { shellQuote } from "../util.js";
+import { openRouterModel, openRouterBaseUrl } from "../config.js";
+/**
+ * Resolve how to invoke the one-shot runner. Prefer the compiled dist via node
+ * (no loader); else Bun on src. No npx/tsx — same policy as mark-complete.
+ */
+function resolveRunner() {
+    const here = dirname(fileURLToPath(import.meta.url));
+    const compiled = join(here, "..", "..", "dist", "openrouter-run.js");
+    if (existsSync(compiled)) {
+        return { command: `node ${shellQuote(compiled)}` };
+    }
+    const srcFile = join(here, "..", "openrouter-run.ts");
+    if (existsSync(srcFile)) {
+        return { command: `bun ${shellQuote(srcFile)}` };
+    }
+    return null;
+}
+function openRouterEnv() {
+    const key = process.env.OPENROUTER_API_KEY;
+    if (!key)
+        return undefined;
+    const env = { OPENROUTER_API_KEY: key };
+    const model = process.env.CURSOR_ROUTE_OPENROUTER_MODEL;
+    if (model)
+        env.CURSOR_ROUTE_OPENROUTER_MODEL = model;
+    const base = process.env.OPENROUTER_BASE_URL;
+    if (base)
+        env.OPENROUTER_BASE_URL = base;
+    return env;
+}
+export const openRouterAdapter = {
+    kind: "openrouter",
+    label: "OpenRouter (free easy lane)",
+    health() {
+        const runner = resolveRunner();
+        if (!process.env.OPENROUTER_API_KEY) {
+            return {
+                worker: "openrouter",
+                ok: false,
+                binary: runner?.command ?? null,
+                detail: "OPENROUTER_API_KEY not set — export your OpenRouter key (easy lane model defaults to openrouter/free)",
+            };
+        }
+        if (!runner) {
+            return {
+                worker: "openrouter",
+                ok: false,
+                binary: null,
+                detail: "openrouter-run not found — run bun run build (or use Bun from a source clone)",
+            };
+        }
+        return {
+            worker: "openrouter",
+            ok: true,
+            binary: runner.command,
+            detail: `ok (model ${openRouterModel()} @ ${openRouterBaseUrl()})`,
+        };
+    },
+    buildLaunch({ promptFile }) {
+        const runner = resolveRunner();
+        if (!runner)
+            throw new Error("openrouter runner not available — run: bun run build");
+        // Missing key is tolerated here so `--dry-run` can still print the command;
+        // real starts are gated by the health preflight (which requires the key).
+        const env = openRouterEnv();
+        // No interactive approval concept for a pure HTTP call — nothing to auto-approve.
+        return {
+            worker: "openrouter",
+            command: `${runner.command} --prompt-file ${shellQuote(promptFile)}`,
+            alwaysApprove: false,
+            env,
+        };
+    },
+};

package/dist/cli.js

@@ -1,10 +1,10 @@
 #!/usr/bin/env bun
 /**
- * cursor-route CLI — Cursor brain, Grok + DeepSeek workers in tmux.
+ * cursor-route CLI — Cursor brain, Grok + DeepSeek + OpenRouter (easy) workers in tmux.
  */
 import { readFileSync, existsSync, realpathSync, statSync } from "node:fs";
 import { resolve, basename } from "node:path";
-import { config, WORKERS, LANES } from "./config.js";
+import { config, WORKERS, LANES, resolveDsModelAlias, } from "./config.js";
 import { runHealth, printHealth } from "./health.js";
 import { startJob, listJobs, readJob, killJob, cleanJobs, jobPaths, refreshStatus, } from "./jobs.js";
 import { capturePane, sendKeys, attachHint, listManagedSessions, sessionExists, } from "./tmux.js";
@@ -12,7 +12,7 @@ import { looksLikeSecretMaterial, redactSecrets } from "./secrets.js";
 function usage(exitCode = 0) {
     console.log(`cursor-route v${config.version}
 
-Cursor stays the brain. Grok CLI + DeepSeek (claude-ds) are the parallel army.
+Cursor stays the brain. Grok CLI + DeepSeek (claude-ds) + OpenRouter (easy) are the parallel army.
 
 Usage:
   cursor-route --version
@@ -29,13 +29,14 @@ Usage:
   cursor-route clean [--days N]
 
 Start options:
-  --worker <grok|claude-ds>   Worker adapter (default: grok)
-  --lane <mid|hard>           Lane → worker (mid=claude-ds, hard=grok)
-  --dir <path>                Working directory (default: cwd)
-  --ask                       Disable always-approve for this job
-  --dry-run                   Print launch command; do not start
-  --no-tmux                   Headless background process (no attach/send)
-  --json                      JSON output where supported
+  --worker <grok|claude-ds|openrouter>  Worker adapter (default: grok; deepseek = reserved slot)
+  --lane <easy|mid|hard>                Lane → worker (easy=openrouter, mid=claude-ds, hard=grok)
+  --model <flash|pro>                   Mid DeepSeek model (default: flash). Ignored by grok/openrouter
+  --dir <path>                          Working directory (default: cwd)
+  --ask                                 Disable always-approve for this job
+  --dry-run                             Print launch command; do not start
+  --no-tmux                             Headless background process (no attach/send)
+  --json                                JSON output where supported
 
 Env:
   CURSOR_ROUTE_ASK=1                 Opt out of always-approve
@@ -43,8 +44,12 @@ Env:
   CURSOR_ROUTE_MAX_JOBS              Max active jobs (default: 50)
   CURSOR_ROUTE_RELAXED=1             health OK without tmux/workers (CI / infra smoke)
   CURSOR_ROUTE_ALLOW_ANTHROPIC=1     Allow mid-lane on Anthropic Claude (expensive; not default)
+  CURSOR_ROUTE_DS_MODEL              Default mid model flash|pro (overridden by --model)
   CURSOR_ROUTE_GROK_BIN              Override the grok binary path (tests / power users)
   CURSOR_ROUTE_CLAUDE_DS_BIN         Override the claude-ds binary path (tests / power users)
+  OPENROUTER_API_KEY                 OpenRouter key (required for --worker openrouter / --lane easy)
+  CURSOR_ROUTE_OPENROUTER_MODEL      OpenRouter model (default: openrouter/free)
+  OPENROUTER_BASE_URL                OpenRouter API base (default: https://openrouter.ai/api/v1)
 `);
     process.exit(exitCode);
 }
@@ -136,6 +141,13 @@ function asLane(v) {
         return v;
     throw new Error(`Invalid --lane ${v}; expected ${LANES.join("|")}`);
 }
+function asDsModel(v) {
+    if (v === undefined || v === true)
+        return undefined;
+    if (typeof v !== "string")
+        throw new Error(`Invalid --model; expected flash|pro`);
+    return resolveDsModelAlias(v);
+}
 function refuseSecrets(text, context) {
     if (looksLikeSecretMaterial(text)) {
         console.error(`Refusing ${context}: looks like secret key material. Remove tokens/keys and retry.`);
@@ -193,8 +205,17 @@ async function main() {
     if (cmd === "start") {
         requireStringFlag(f, "worker");
         requireStringFlag(f, "lane");
+        requireStringFlag(f, "model");
         const promptFile = requireStringFlag(f, "prompt-file");
         const dirFlag = requireStringFlag(f, "dir");
+        let model;
+        try {
+            model = asDsModel(f.model);
+        }
+        catch (e) {
+            console.error(e.message);
+            process.exit(2);
+        }
         let prompt = "";
         if (promptFile) {
             const p = resolve(promptFile);
@@ -231,6 +252,7 @@ async function main() {
             prompt,
             worker: asWorker(f.worker),
             lane: asLane(f.lane),
+            model,
             cwd,
             alwaysApprove: !f.ask,
             dryRun: Boolean(f.dryRun),
@@ -249,10 +271,13 @@ async function main() {
         else if (result.dryRun) {
             console.log(`dry-run job ${result.job.id}`);
             console.log(`worker: ${result.job.worker}`);
+            if (result.job.model)
+                console.log(`model:  ${result.job.model}`);
             console.log(`command: ${redactSecrets(result.command || "")}`);
         }
         else {
-            console.log(`started ${result.job.id} (${result.job.worker})`);
+            const modelNote = result.job.model ? `/${result.job.model}` : "";
+            console.log(`started ${result.job.id} (${result.job.worker}${modelNote})`);
             console.log(`session: ${result.job.tmuxSession}`);
             if (String(result.job.tmuxSession).startsWith("headless-")) {
                 console.log(`mode:    headless (--no-tmux); use capture/status (no attach/send)`);

package/dist/config.js

@@ -1,8 +1,32 @@
 import { homedir } from "node:os";
 import { join } from "node:path";
 import { defaultJobsDir } from "./runtime.js";
-export const WORKERS = ["grok", "claude-ds"];
-export const LANES = ["mid", "hard"];
+export const WORKERS = ["grok", "claude-ds", "openrouter", "deepseek"];
+export const LANES = ["easy", "mid", "hard"];
+export const DS_MODELS = ["flash", "pro"];
+export const DS_MODEL_IDS = {
+    flash: "deepseek-v4-flash",
+    pro: "deepseek-v4-pro",
+};
+/** Resolve --model flash|pro (or full deepseek-v4-* id) to a CLI alias. Default: flash. */
+export function resolveDsModelAlias(raw) {
+    if (!raw || !raw.trim())
+        return "flash";
+    const v = raw.trim().toLowerCase();
+    if (v === "flash" || v === "deepseek-v4-flash")
+        return "flash";
+    if (v === "pro" || v === "deepseek-v4-pro" || v === "deepseek-v4-pro[1m]")
+        return "pro";
+    throw new Error(`Invalid --model ${raw}; expected flash|pro`);
+}
+/** OpenRouter model for the easy lane (env CURSOR_ROUTE_OPENROUTER_MODEL). */
+export function openRouterModel() {
+    return process.env.CURSOR_ROUTE_OPENROUTER_MODEL || "openrouter/free";
+}
+/** OpenRouter API base URL (env OPENROUTER_BASE_URL). */
+export function openRouterBaseUrl() {
+    return process.env.OPENROUTER_BASE_URL || "https://openrouter.ai/api/v1";
+}
 function maxConcurrentJobsFromEnv() {
     const raw = process.env.CURSOR_ROUTE_MAX_JOBS;
     if (raw) {
@@ -19,7 +43,7 @@ function maxConcurrentJobsFromEnv() {
  */
 export const config = {
     product: "cursor-route",
-    version: "0.1.4",
+    version: "0.1.6",
     get jobsDir() {
         return defaultJobsDir();
     },
@@ -27,9 +51,12 @@ export const config = {
     defaultWorker: "grok",
     /** Lane → default worker (Cemini /route public core). */
     laneWorkers: {
+        easy: "openrouter",
         mid: "claude-ds",
         hard: "grok",
     },
+    /** Default mid DeepSeek model (Flash = cheap execute). Override: --model pro */
+    defaultDsModel: "flash",
     jobsListLimit: 20,
     /** Max simultaneously active (running|pending) jobs. Override: CURSOR_ROUTE_MAX_JOBS. */
     get maxConcurrentJobs() {

package/dist/jobs.js

@@ -2,7 +2,7 @@ import { mkdirSync, writeFileSync, readFileSync, readdirSync, existsSync, unlink
 import { join, resolve } from "node:path";
 import { fileURLToPath } from "node:url";
 import { dirname } from "node:path";
-import { config, sessionName } from "./config.js";
+import { config, sessionName, } from "./config.js";
 import { getAdapter } from "./adapters/index.js";
 import { spawn } from "node:child_process";
 import { spawnSync } from "node:child_process";
@@ -217,12 +217,14 @@ export function startJob(opts) {
     const id = newJobId();
     const paths = jobPaths(id);
     writeSecure(paths.prompt, opts.prompt);
+    const model = worker === "claude-ds" ? opts.model ?? config.defaultDsModel : undefined;
     let plan;
     try {
         plan = adapter.buildLaunch({
             promptFile: paths.prompt,
             cwd,
             alwaysApprove,
+            model,
         });
     }
     catch (e) {
@@ -240,6 +242,7 @@ export function startJob(opts) {
         status: "pending",
         worker,
         lane: opts.lane,
+        model,
         prompt: opts.prompt,
         cwd,
         alwaysApprove: plan.alwaysApprove,