[viztor]

Phase P-R1 of docs/improvement-plan.md, stacked on #112.

The plugin now serves the opencode and opencode-go routes itself (the D13 design), using only supported host paths. The hidden-route workaround is gone.

Restacked onto main 1.8.0

This branch now carries main 1.8.0 through its parent (P-H) and the two-channel host: rc 0.2.1-rc.5 and alpha 0.2.2-alpha.2, with pi unpatched. Some sections below describe the branch before the restack; where they disagree, this section wins.

Scope now. The plugin owns the opencode and opencode-go routes: the route claim, PlaneAdapter, the describe graft and the host modules. One characterization table serves every host cell (S0_TODAY_BY_CELL, built per channel by s0PluginFor). Rows differ only where the host decides.

Dropped because main or the host now does it (D26).

• The Gemini level wrapper (src/host/google-levels.ts) is deleted, with its wiring in plane-provider, plane-profile, host-modules and cordis-context, its tests, its 100% coverage floor and its doc lines. The thinking control is pi's own. The catalog level rule now lives only in test/support/thinking-levels.ts, where it picks test subjects. The "Behaviour changes" bullet about thinkingLevel above no longer holds.
• pi's catalog entry is no longer a protocol or base source in src/utils/plane-model.ts, including the legacy branch that took pi's own /zen base (D16). The protocol order is catalog SDK, then the route's api, then completions. Bases come only from the endpoint table.
• plane-profile no longer restates pi-ai's default window and output tokens (D17).
• main fix: send Gemini 4 thinking levels on older host runtimes #130's test/google-thinking.test.ts imported the deleted bridge. Its intents moved to the mock suite and to the HOST_LIMITATION rows.
• main feat(test): gate the language pairs, and lift the live-run rules out of the e2e #140's decoratePlaneAdapters case and its stream-hook "cannot be served" case are both obsolete after this PR.
• P-T1b's per-cell machinery from before this PR is gone: the per-channel floor tables, withMoved, the keyless/keyed listings, saveRejectedUnknown, SAVE_BLOCKED_BY_ANY_UNDESCRIBED, the pi-ai-first override and NEXT_DISPATCH. Every host cell now reaches TODAY_DISPATCH.
• The patched "pinned" binary cell was not built, because no pi patch remains. The npm and floor cells of both channels ran instead.

Decisions applied.

• D14': the route claim and the plane adapter are built from the host's own pi on each channel, and nothing is bundled or patched.

• D22': a channel bump re-measures F8/F12/F14/F20 per channel against that channel's own expectation, and the route claim adopts a moved internal/config contract by detecting the shape the host dispatches, never its version.

• D24: debug / debugFile follow main's wording in cordis.patch.yml, and the lifecycle test uses apply(ctx, { debugFile }).

• D25: host limitations are recorded and not fixed:

  • the rc desktop app's pi 1.1.0 sends the level-only Gemini 4 model a thinking budget;
  • alpha 0.2.2-alpha.2 installed by npm cannot save.

  Both are detected from the host's own answers, and both READMEs list them.

Known defect. On cordis 4.0.6-alpha.2 (alpha's npm cell) the route claim does not engage, so pi-ai serves the planes. This is a [KNOWN_DEFECT] row, and the claim-dependent and save rows skip on that cell. The current dsh@alpha (0.2.2-alpha.3) requires that cordis, so its bump must adopt the new contract first.

Live re-measures CI must confirm.

• protocol-routing.e2e: the Google level case on Go with a key, on the newest pi. It must skip as HOST_LIMITATION on the rc floor.
• That the gateway still refuses a thinkingBudget for the Go level-only model. The HOST_LIMITATION rows rest on this, and Zen is expected to refuse too but is not yet measured.
• keyless-matrix.e2e: TODAY_DISPATCH, all four protocols on the modern family on both planes.
• protocol-routing.e2e: the keyed adapter walks through PlaneAdapter on tier A for both planes.
• e2e-host for both channels' npm and floor cells. It records configHook per cell and confirms the alpha npm [KNOWN_DEFECT] row and the rc floor HOST_LIMITATION rows.
• Inherited from P-R2: the x-opencode-request, x-opencode-project and Retry-After rows, and the combined Google User-Agent.

What changed

Item	Change
Root plugin	Declares inject: [].
src/host/route-claim.ts (new)	A prepended internal/config listener gives pi-ai's fiber a fresh copy of its config with providers.opencode and providers["opencode-go"] removed. It runs the nested waterfall on that copy behind a re-entrancy guard. On a commit it schedules reconcile. On a Settings candidate it strictly validates only the plane entries that changed. The served pi-ai row is sticky: it stays the same while it is live and still declares a plane.
src/host/plane-provider.ts (new)	reconcile builds one PlaneAdapter, a subclass of the host's PiAiAdapter, and registers only the declared planes through registerAdapter / handle.replace. pi-ai keeps every other route.
src/utils/plane-profile.ts, plane-model.ts, model-metadata.ts, protocols.ts (new)	Pure profiles the adapter is built from. The utils/ purity gate covers them.
src/host/describe-graft.ts (new)	A read-only settings.describe wrapper, built on patchMethod, that grafts the committed plane entries back (D18).
src/host/host-modules.ts (new)	The host-module loaders, moved here. The seam stays in cordis-context.ts. pi-ai's module comes from pi-ai's own loader entry during its commit run, so nothing waits on a timer.
Deleted	responses-provider.ts, responses-routes.ts, google-bridge.ts, pi-provider.ts, utils/google-replay.ts (removed after a mock-gateway replay test showed a single provider label); from models-discovery.ts: the listing hide, decoratePlaneAdapters and decorateModelInfo; the stream redirect; the D19 settings; the hidden ids in DEFAULT_PROVIDERS and cordis.patch.yml.
Tests	New unit, real-host (host-planes), contract (describe-graft, catalog-change) and mock (plane-dispatch) suites. Characterization rows flipped to new [BASELINE] values: 14 S0_TODAY facets, 14 named host-characterization cases and 5 binary-e2e rows, each named under "Characterization rows this PR flips" below. Every other row stays green unchanged.
Docs	README (both languages), AGENTS.md, CONTRIBUTING, credentials, deep-dive, protocol routing and redirect planes now describe the new wiring. In the plan, P-R1 is set to in review.

Some details refine the plan text on purpose, and the plan's P-R1 entry records each one:

• D20 follows pi-ai's exact rule: it uses the credentials service when one is mounted, and the launch environment only when none is.
• legacy uses pi's own base only when pi files the model under the same protocol and that base is a /zen root.
• The fixture-sanity case derives info the way D17 does, so the INFO_NOT_FROM_CATALOG BASELINE guard stays intact.

Behaviour changes

After this phase:

• Any saved id is accepted and served (D15). An id that no catalog knows dispatches as completions.
• The protocol comes from the catalog (D16). Model info follows the user's own row first (D17).
• A model whose reasoning can only be switched on or off offers Off / On (D1). Off is offered only where the protocol can disable reasoning.
• The default endpoint is modern: the per-protocol inference family. Go Gemini dispatches on /inference/go/google/v1beta.
• Keys resolve by pi-ai's own rule (D20).
• A Go entry without apiKeyEnv now sends the Zen key. pi's own lookup reads OPENCODE_API_KEY on both planes, so such an entry authenticates every Go protocol with it. Before, Go's Responses, Messages and Google turns defaulted to OPENCODE_GO_API_KEY (completions already took pi's rule). The meter follows: it prefers the key a Go turn carried, so after the first such turn it sends the Zen key to the Go usage endpoint, is refused, and falls back to the Zen pill or "subscription required". The fix for a user is apiKeyEnv: OPENCODE_GO_API_KEY on the Go entry; README step 3 and "Changed in 1.x" (both languages) say so, and test/host-planes.test.ts pins both cases.
• A Gemini model the catalog describes by level is sent Google's thinkingLevel, never a thinkingBudget (src/host/google-levels.ts); Go gemini-4-argon refused the budget live.
• There is no keyless listing filter (D21). A plane lists its declared ids even when no key resolves.

Two changes from the last review round:

• When several pi-ai rows declare OpenCode planes, the row whose planes the plugin serves stays the same while it is live and still declares a plane. If another row adds a plane later, the plugin does not take it over: that row keeps and serves its own plane, and the plugin reports this once. Before, the plugin could switch rows and leave the old row's planes served by nobody, without a warning.
• If the host's pi-ai module cannot be read, the plugin now steps aside even when no OpenCode plane is declared yet. A plane added later in Settings then goes to pi-ai's own save check. Before, it was refused for good with "try the save again".

Characterization rows this PR flips

Every row below was [KNOWN_DEFECT] or [INTENDED_CHANGE] on the base and is [BASELINE] here. No [BASELINE] row on the base moved.

S0_TODAY facets (test/support/host.ts; facet order info / callConfig / wire), 14:

Row	Facet(s)	Base	Now
opencode/deepseek-v4-pro	wire	[INTENDED_CHANGE] /zen/v1/chat/completions	/inference/openai/v1/chat/completions
opencode/gpt-5.3-codex-spark	info, callConfig	[KNOWN_DEFECT] user row ignored (128000), INVALID_CONFIG	the user row's 400000 (D17), ok
opencode/not-in-any-catalog	info, callConfig, wire	[KNOWN_DEFECT] INVALID_CONFIG, nothing sent	262144 / no efforts, ok, sent as completions on /inference/openai/v1 (D15, D16)
opencode-go/deepseek-v4-pro	wire	[INTENDED_CHANGE] /zen/go/v1/chat/completions	/inference/go/openai/v1/chat/completions
opencode-go/minimax-m3	info	[KNOWN_DEFECT] toggle-only model offered Minimal…Max	Off / On (D1)
opencode-go/gemini-4-argon	callConfig	[KNOWN_DEFECT] INVALID_CONFIG	ok
opencode-go/minimax-m3.1-flash	callConfig, wire	[KNOWN_DEFECT] INVALID_CONFIG, nothing sent	ok, sent on /inference/go/openai/v1
opencode-go/not-in-any-catalog	info, callConfig, wire	[KNOWN_DEFECT] INVALID_CONFIG, nothing sent	262144 / no efforts, ok, sent on /inference/go/openai/v1

The listing rows keylessListing / keyedListing are replaced by listingBeforeTurn / listingAfterTurn (every declared id, D21), and saveRejectedUnknown is gone (D15).

Named host-characterization cases, 14 (base title → head title):

1. [INTENDED_CHANGE] registry: both planes are pi-ai's, six hidden routes → [BASELINE] registry: both planes are the plugin's adapter, no hidden route (D13)
2. [INTENDED_CHANGE] keyless listing hides every paid model → [BASELINE] listing before any turn: every declared id (D21)
3. [KNOWN_DEFECT] keyed listing: only pi-resolved ids → [BASELINE] listing after a turn: gap ids and the unknown id included (G1)
4. [KNOWN_DEFECT] toggle-only model offered Minimal/Xhigh/Max → [BASELINE] offered Off / On, an untaken level refused (D1)
5. [INTENDED_CHANGE] completions dispatch to pi 1.1.0's legacy bases → [BASELINE] completions dispatch to the modern family on both planes
6. [KNOWN_DEFECT] the adapter decoration never runs in this order → [BASELINE] the plugin patches nothing on its own PlaneAdapter
7. [KNOWN_DEFECT] Zen gpt-5.3-codex-spark: user row ignored, resolveCallConfig refuses → [BASELINE] user row reaches model info, sent on Responses (D17)
8. [KNOWN_DEFECT] Go minimax-m3.1-flash INVALID_CONFIG → [BASELINE] validates, sent once as completions on Go's modern base (G1)
9. [KNOWN_DEFECT] Go gemini-4-argon refused while served through the bridge → [BASELINE] validates, sent on Go's Google base with the Go key (F10)
10. [KNOWN_DEFECT] a stored gap id blocks every save of its plane → [BASELINE] a stored gap id blocks no save; the unknown id is listed, validates and is sent (D15)
11. [KNOWN_DEFECT] the probe's save sequence needs the gap ids dropped first → [BASELINE] the first append of the unknown id is accepted
12. [INTENDED_CHANGE] the adapter decoration runs in pi-ai-first order → [BASELINE] pi-ai held the planes first, so the claim restarted it exactly once
13. [KNOWN_DEFECT] the apply order decides one facet (Go gemini-4-argon) → [BASELINE] no facet depends on the apply order (todayRowsFor's override dropped)
14. [KNOWN_DEFECT] the unknown id is what the save check names → [BASELINE] the save check accepts it and the file holds it (D15)

Binary-e2e rows (test/e2e/host-binary.e2e.ts), 5:

1. [INTENDED_CHANGE] registry: the planes are pi-ai's, hidden routes registered → [BASELINE] both planes are the plugin's PlaneAdapter, no hidden route (D13)
2. [INTENDED_CHANGE] keyless listing hides every paid model → [BASELINE] listing before any turn: every declared id (D21)
3. [KNOWN_DEFECT] keyed listing: the gap ids are missing → [BASELINE] listing after a turn on each plane: every declared id (G1)
4. [KNOWN_DEFECT] a stored gap id blocks saving any new id → [BASELINE] a stored gap id blocks no save (D15)
5. [KNOWN_DEFECT] a catalog-unknown id cannot be saved → [BASELINE] it saves, is listed, validates and is sent as completions on the modern base (D15, D16)

The binary e2e also gained rows with no base counterpart: the plane provider is built from the host's own pi, the Go Gemini level model is sent a thinking level and no thinkingBudget, and the Settings graft (below).

Records the plan asks for

docs/improvement-plan.md (Test plan, P-R1) asks this PR body to record four things.

• The measured endpoints. Default (auto = modern) dispatch: Zen https://opencode.ai/inference/{openai/v1, anthropic/v1, google/v1beta}, Go https://opencode.ai/inference/go/{openai/v1, anthropic/v1} and https://opencode.ai/inference/go/google/v1beta (the catalog's family map, else MODERN_FALLBACK in src/utils/protocols.ts). legacy: /zen/v1 and /zen/go/v1 (/zen, /zen/go for Messages), with Go's Google staying on /inference/go/google/v1beta under every family. The keyless matrix (every PR in CI) asserts that no cell the default endpoint dispatches to answers 404; the binary e2e records the URL each characterized model was sent to through the shipped bundle (the wire facets above), including Go gemini-4-argon on /inference/go/google/v1beta with a thinking level.
• The describe graft. src/host/describe-graft.ts grafts the committed plane entries back into pi-ai's settings.describe value (D18). Held by the binary-e2e row "the Settings graft shows each plane's own entry, and the Models page reads both planes configured under their apiKeyEnv", by the [BASELINE] hasProviderApiKey row in both apply orders, and by test/describe-graft.test.ts.
• The handback. Disabling the plugin's row hands both planes back to pi-ai (PiAiAdapter owns them again), and pi-ai's own save check is back in force; dispose then apply hands them to the plugin again (test/host-planes.test.ts, tiers B and A). When the host's modules cannot be read the plugin stands down and says so; a failing handback restart is reported, not thrown (test/route-claim.test.ts).
• The save of a catalog-unknown id. On the first try, with a gap id already stored: accepted, written to the file, listed, validated, and sent as completions on the plane's modern base (D15, D16) — in tier B and on the binary.

Review

Round	Found	Upheld	Fixed
1	31	31	31
2	8	8	8
3	5	5	5
audit	8	8	8

In rounds 2 and 3, reviewers reported some of the same defects (the catalog-listener unsubscribe; the store-opt-in case reading the shell's OPENCODE_API_KEY; the modules-unreadable refusal). Round 3's fixes:

• the sticky served row;
• the stand-down when the modules cannot be read;
• a launch environment that answers nothing, for the store-opt-in case.

Three new route-claim cases fail under the old behaviour and pass with the fix.

The audit round's eight findings repeat four defects. The README.zh-CN.md credential wording, the live adapter walk (a withdrawn model now moves to the protocol's next candidate, a withdrawal is confirmed by a raw probe, and a protocol no candidate reached skips by name) and docs/deep-dive.md's key-isolation claim were already fixed on this branch; a source comment in src/go-discovery.ts still claimed the isolation and is corrected; the description findings are this body's flipped-row and record sections and the D20 Go entry above.

Verification

Node	Step	Result
26.12.1	pnpm run check	0 errors, 11 warnings (limit 21)
26.12.1	vp test run	95 files, 1467 tests passed
26.12.1	shuffled, seeds 1, 42	95 files, 1467 tests passed each time
26.12.1	mock suite (vitest.mock.config.ts)	4 files, 67 tests passed
26.12.1	vp test run --coverage	97.71 / 94.44 / 97.58 / 97.70 against the ratchet 97.5 / 94 / 97.4 / 97.5
26.12.1	pnpm run build	lib/index.mjs 322.89 kB, build complete
26.12.1	scripts/check.ts (bundle gate)	every check ok, check passed, exit 0
24.22.1	shuffled, seed 7; mock suite	95 files / 1467 tests; 4 files / 67 tests passed
scratch host	binary e2e (DSH_HOST_E2E=1)	11 of 11 passed, probe file written fresh at run time

Before each commit, the full diff and the new files were checked for absolute local paths and anything shaped like a credential. Nothing was found, and the pattern was confirmed to match a known positive.

Note: the catalog freshness check now gates a pull request only on its own generator changes (D23, from the base), and it passes on this branch.

---

Generated by Claude Code

[viztor]

catalog freshness is red on bffd3a4 because the vendor changed its catalog, not because of anything in this PR. The Go plane renamed gemini-4-argon-contributor to gemini-4-argon and added iceman-contributor-free, and its limits page changed with them.

The fix already exists. 2ebaffc takes the regenerated tables unchanged, and the follow-ups move the fixtures and counts. #105 through #110 carry it and are green. It is being merged into this PR's base branch (P-H, #112) now. This branch picks it up with its next push: either the fix commit from the review now running on this PR, or the final sync pass.

---

Generated by Claude Code

[viztor]

e2e · live gateway on bffd3a4 fails the same way it did on #105, because the vendor's live state changed. The gateway now answers 400 Model is unavailable for the free nemotron-3-ultra-free and 429 for beam-free. Nothing in this PR causes that. The fix is d51a3e6: the live suite now skips withdrawn and throttled free models, and the free-tier routing case only accepts a gated model. It is green on #105–#110 and reaches this branch along the same path as the catalog refresh. When the sync merges it here, it also checks that P-R1's retargeted suite keeps that behaviour.

---

Generated by Claude Code

[viztor]

Second review of P-R1

This phase's first reviews ran without the dedicated reviewer, which was unavailable at the time. It has now had that review: three rounds, through the correctness, rules and test-matrix lenses.

Round	Found	Correctness (upheld / fixed)	Rules (upheld / fixed)	Test matrix (upheld / fixed)
1	20	5 / 3	8 / 7	6 / 4
2	5	2 / 2	—	2 / 1
3	8	4 / 3	—	4 / 3

In total 31 findings were upheld and 23 fixed. Round 3's two lenses found the same two problems: the Chinese README was not ported, and the live walk dropped a protocol.

Fixed

• src/utils/model-metadata.ts: a completions model whose effort list names none offers Off again, with none as its wire value, as pi 1.1.0's own entries do. Responses is unchanged.
• src/host/route-claim.ts: a Settings save of a plane is judged with the last modules that loaded. It is no longer refused after a handover or a partial dispose.
• README.md: "Changed in 1.x" and step 3 now say that a Go entry without apiKeyEnv sends OPENCODE_API_KEY (D20). test/host-planes.test.ts pins both cases.
• README.md, README.zh-CN.md: the false "strict credential isolation" claim is replaced with the meter's real key order and the 403 remedies. The Chinese README now carries every change from rounds 1 and 2, and test/readme-parity.test.ts keeps the two in step.
• docs/deep-dive.md: corrected four points: pi's Go lookup, who answers Fetch, the meter's auto order, and the 403 for a Go entry without apiKeyEnv. The "excludes Zen keys / ring stays hidden" claim is gone.
• docs/credentials.md, docs/redirect-planes.md: each plane's credential is now given as the entry's apiKeyEnv, else pi's OPENCODE_API_KEY.
• src/settings-copy.ts: the keySource hint (en and zh) gives Automatic's real order: literal key, then captured key, then the declared reference.
• src/cordis-context.ts: comments no longer describe the stream redirect, the isolated child mount or an llm root inject.
• CONTRIBUTING.md: the field count is now "every field of Config.dict", and the per-file floor list includes host/host-modules.ts.
• docs/opencode-parity-plan.md, docs/upstream-findings.md: marked historical, or superseded by P-R1.
• test/mock/plane-dispatch.mock.ts: the body-shape row checks each protocol's required fields and the gateway's answer, not only body.model. A comment claimed a shape check the mock does not have; it is corrected.
• test/route-claim.test.ts: removing the last plane now pins replace([]) on the live handle.
• test/host-planes.test.ts: "booting with none" waits for the plugin's row to become active instead of sleeping 50 ms.
• test/e2e/protocol-routing.e2e.ts, test/e2e/dispatch-levels.e2e.ts: paid models go through the plane adapter. Each protocol tries up to three candidates (test/support/live-walk.ts). A withdrawn model is passed only when a raw probe confirms it (test/support/live-probe.ts), and a protocol no candidate reached makes the case skip, naming that protocol. The live blocks could not run here (no vendor access, no keys); the walk is tested offline in test/live-walk.test.ts.

Declined

• The PR description (raised in all three rounds) still gives counts, not the flipped rows and the four records. It was not rewritten before this push because it would have described work the head commit did not contain. A replacement is prepared and can go in now.
• Fiber.update(config) with noSave false would persist the stripped config. This is recorded as a host constraint in src/host/route-claim.ts and docs/improvement-plan.md. No caller does this today, so a guard waits for one.
• A toggle beside an effort list still offers no Off. Changing that moves [BASELINE] facets and the no-level request on Messages and Responses, so it is the owner's decision. It is recorded in docs/improvement-plan.md.
• The Models store's join stays a restatement, with its source lines documented. Importing a client UI package into a node test for a three-line join is not worth it.

Commit: 0cceb81. Gate before the commit: check, 1387 unit tests, 63 mock tests, build and bundle gate, all passing.

---

Generated by Claude Code

[viztor]

Fix pushed: Google's thinking level for Gemini models the catalog describes by level (4dbd22e)

The live failure. The live suite caught a turn on the Go plane's Gemini model failing. The gateway refused a token thinking budget with 400 INVALID_ARGUMENT:

Thinking budget is not supported for this model. Use thinking level instead.

Cause. pi 1.1.0 picks Google's discrete thinkingLevel over a token thinkingBudget only when the model id matches its own pattern, so a level-only model that pattern does not name gets a budget it cannot accept.

Fix. The decision now comes from the catalog, as D16 requires. A model whose catalog entry offers discrete effort levels on the Google protocol (usesCatalogThinkingLevels) is sent a thinking level. src/host/google-levels.ts builds that request from pi's own public exports, loaded lazily through the host-module seam, on both the enabled path and the no-effort path. With no effort chosen, the model gets the level pi itself falls back to, not thinkingBudget: 0. Every other model, including ids pi's pattern already serves by level, goes through pi's own path unchanged. A profile that declares Off for such a model still gets pi's own disable, which the docs record as a profile error.

Tests that pin it.

• The pure rule over the shipped catalog (test/model-metadata.test.ts).
• A differential check (test/google-levels.test.ts), 16 cases. pi's own streamSimple on an id its pattern names is the oracle, and the wrapper on the same model under an id the pattern misses must build a deep-equal request. Each case also asserts its own premise and that pi's path would differ for the wrapped id. Planted mutations to the wrapper turn it red.
• Lazy loading of pi's pieces (test/host-modules.test.ts). The check counts imports, and an eager load turns it red.
• A mock-gateway case (test/mock/plane-dispatch.mock.ts). The mock refuses a budget with the measured message, and the case requires that the turn completes on both planes and that no request carries a budget. A control requires that a model pi already serves by level keeps pi's own request.

The full gate passed before the push: check, unit suite, mock suite, build and the bundle gate. The fix reaches the stacked PRs above through the sync.

These reviews ran on the general model because the dedicated reviewer was unavailable: review:tests#1, review:correctness#1, verify#1.1, review:tests#2, review:correctness#2, verify#2.1, review:tests#3, review:correctness#3, verify#3.1.

---

Generated by Claude Code

[viztor]

Restacked onto main 1.8.0. This branch now carries main 1.8.0 through its parent P-H (ff2db1d), on the two-channel host: rc 0.2.1-rc.5 and alpha 0.2.2-alpha.2, with pi unpatched. Pushed head: 26d1e7479fd497e01778be67ec8123287fb20d9e. The PR body has a new "Restacked onto main 1.8.0" section with the new scope.

Conflicts and how they were resolved

Source

• src/google-bridge.ts, src/pi-provider.ts and their tests: these were modify/delete conflicts. P-R1's deletions are kept.
• src/stream-hook.ts: comment only. Took P-H's wording, because P-R1's named a model.
• src/utils/request-shape.ts: comment only. Took P-R1's, since opencode-google is no longer a route.
• cordis.patch.yml: P-R1's key list, minus the keys D19 removed, with main's debug/debugFile wording (D24).

CI and config

• .github/dependabot.yml: P-H's text. The cluster and pi move only as a channel bump.
• .github/workflows/ci.yml: the e2e-host scope is P-R1's host-seam regex plus scripts/host-drift.ts. patches/ is dropped, and the comment merges both sides.

Host harness and characterization

• test/support/host.ts: P-H's cell machinery (HostCell, forHost, forChannel, PI_GAPS, the HOST_LIMITATION tag) with P-R1's flipped rows.
  • One table builder per channel (s0PluginFor) feeds S0_TODAY_BY_CELL.
  • todayRowsFor answers the same rows in both apply orders.
• test/host-characterization.test.ts: started from P-R1's file and ported P-H's cell awareness. The apply-order baseline now runs on every cell.
• test/e2e/host-binary.e2e.ts: P-R1's assertions on P-H's infrastructure. The rows that depend on the route claim, and the save rows, skip where the host cannot save or the claim cannot engage.
• test/e2e/host/probe-plugin.mjs: P-R1's plane and graft measurements, plus P-H's thrownBy, editEntry, the control edit and the fiber state.
• test/host-versions.test.ts, test/mount-protocols.test.ts, test/host-shapes.test.ts: P-H's channel-aware files with P-R1's "plane adapter" wording, and imports from both sides.

Live suites

• test/e2e/protocol-routing.e2e.ts: P-R1's file, plus main feat(test): gate the language pairs, and lift the live-run rules out of the e2e #140's freeTierClosed/gatewayBusy and the free-tier walk that skips when every candidate is busy.
• Keyless matrix (support, e2e, unit): TODAY_DISPATCH is P-R1's all-modern set, and NEXT_DISPATCH is dropped. The unit test checks that every host cell reaches exactly TODAY_DISPATCH.

Other tests

• test/lifecycle.test.ts: main's D24 rule, apply(ctx, { debugFile }).
• test/models-discovery.test.ts: P-R1's side.
• These did not conflict but were wrong after the merge:
  • test/catalog.test.ts: counts now follow main's shim (81 Zen, 9 free, 24 with no SDK).
  • test/host-modules.test.ts: reads HOST_VERSIONS.pi.
  • test/stream-hook.test.ts: the obsolete case is dropped.

Docs

• AGENTS.md: P-H's host-versions bullet, and P-R1's host.ts bullet updated for S0_TODAY_BY_CELL. The utils table gains retry.ts and loses google-replay.
• CONTRIBUTING.md: P-H's tags, channels and cells, with P-R1's flip text, trigger list and keyless bullet.
• README.md and README.zh-CN.md: P-R1's routing prose with main's lists. The count line is 81 as of 2026-11-03. The two READMEs still pair.
• docs/deep-dive.md: item 3 from P-H, items 4 and 5 from P-R1.
• docs/protocol-routing-and-merge.md and docs/redirect-planes.md: the counts are re-derived against 81 models.
• docs/improvement-plan.md: P-H's status table, with the P-R1 row set to merged, plus P-R1's trigger list and keyless bullet.

Dropped because main or the host now does it (D26)

• src/host/google-levels.ts and everything that hung off it: its wiring, its tests, its 100% coverage floor and its doc lines. The thinking control is pi's own.
• pi's catalog entry as a protocol or base source in plane-model.ts, including the legacy branch that took pi's /zen base (D16).
• plane-profile's restated pi-ai default window and output tokens (D17).
• Obsolete tests from main:
  • main fix: send Gemini 4 thinking levels on older host runtimes #130's test/google-thinking.test.ts. Its intents moved to the mock suite and the HOST_LIMITATION rows.
  • main feat(test): gate the language pairs, and lift the live-run rules out of the e2e #140's decoratePlaneAdapters case and its stream-hook "cannot be served" case.
• P-T1b's per-cell machinery from before P-R1, including NEXT_DISPATCH.
• The patched "pinned" binary cell. No pi patch remains, so the npm and floor cells of both channels ran instead.

Review rounds

Round	Found	Upheld	Fixed
1	20	20	20
2	11	11	11
3	13	13	12 (1 declined)

The declined finding sets P0's plan row to merged. It belongs at the bottom of the stack (P1a) and will reach this branch through the P-H parent merge. Editing it here first would only create a conflict for that merge.

Live re-measures still owed (CI)

• protocol-routing.e2e: the Google level case on Go with a key, on the newest pi. It must skip as HOST_LIMITATION on the rc floor.
• That the gateway still refuses a thinkingBudget for the Go level-only model. Zen is expected to refuse too but is not yet measured.
• keyless-matrix.e2e: TODAY_DISPATCH, all four protocols on the modern family on both planes.
• protocol-routing.e2e: the keyed adapter walks through PlaneAdapter on tier A for both planes.
• e2e-host for both channels' npm and floor cells. It records configHook per cell and confirms the alpha npm [KNOWN_DEFECT] row and the rc floor HOST_LIMITATION rows.
• Inherited from P-R2: the x-opencode-request, x-opencode-project and Retry-After rows, and the combined Google User-Agent.

Known defect, high priority. On cordis 4.0.6-alpha.2 the route claim does not engage. The current dsh@alpha (0.2.2-alpha.3) requires that cordis, so its bump must adopt that internal/config contract first, detected from what the host dispatches.

All rounds' reviews (both-kept, resolutions, rules-docs) and their verify passes ran on the general model, because the dedicated reviewer was unavailable.

---

Generated by Claude Code

[viztor]

catalog freshness is red on 26d1e74 because of a vendor-side catalog change, not this pull request. The vendor added a Zen model, crouton-alpha-free (81 → 82), after the last refresh this stack carries. This diff touches the catalog generator's imports, so the check gates on the drift by design. The branch carries the stack's generated src/catalog-data.ts unchanged.

No fix exists yet. The machine doing the restack cannot reach the vendor catalog, so the regenerated file can only come from the scheduled refresh on main. When that lands, it will be ported into the bottom of the stack and merged up through this branch, with the counts that restate the catalog re-derived. A re-run would fail the same way, so none was spent.

---

Generated by Claude Code