OriginRouter CLICommand reference

Command reference

OriginRouter CLI groups commands around health, agents, model routing, account, device control, and collaboration. Commands that support --json document it in their own help; parameter support is command-specific and should be verified there.

Every command below also works by replacing originrouter with or.

For task guidance and recovery, continue with Provider reference, Authentication and devices, Service and daemon, Collaboration command reference, and Exit status.

Global and diagnostics

Command	Purpose
`originrouter --help`	Show the task-oriented command overview
`originrouter help all`	Show the exhaustive command surface
`originrouter --version`	Print the installed version
`originrouter setup [--no-proxy] [--yes] [--dry-run]`	Install agents, Proxy, and local service in one flow; Proxy is included by default
`originrouter status`	Show installation, state directory, device, and default runtime
`originrouter doctor`	Check agents, PTY, tmux, account, relay, and providers
`originrouter doctor provider <name>`	Validate one local provider
`originrouter sessions [--json]`	List locally recorded sessions
`originrouter devices [--json]`	List account-authorized CLI devices
`originrouter env print --agent claude\|codex`	Inspect the redacted effective agent environment

Agent commands

Command	Purpose
`originrouter claude [args...]`	Start native Claude Code with OriginRouter control
`originrouter codex [args...]`	Start native Codex with OriginRouter control
`originrouter agent setup [--cloud\|--native]`	Configure an agent route interactively
`originrouter agent detail set <level>`	Select `concise`, `standard`, or `detailed` presentation
`originrouter agent budget show\|set\|clear ...`	Manage device or agent budgets
`originrouter agent history [filters]`	Search local display-safe activity
`originrouter history "question" [filters]`	Query the account-wide Agent history index

agent history reads the local display-safe archive. Top-level history queries the account-wide index, requires sign-in, and depends on the Memory service; they are different data sources.

Non-OriginRouter arguments passed after claude or codex are preserved, so native commands continue to work:

Resume a specific Claude session:

originrouter claude --resume <session-id>

Resume the latest Codex session:

originrouter codex resume --last

Providers, routes, and proxy

Command group	Subcommands
`provider`	`add`, `update`, `list`, `show`, `use`, `remove`
`route`	`list`, `show`, `set`, `clear`, `cloud`, `remote`
`proxy`	`install`, `start`, `stop`, `restart`, `switch`, `status`
`compatibility`	`status`, `list`, `inspect`, `check`, `update`, `rollback`

See Models and routing.

Account, service, and local control

Command	Purpose
`originrouter login [--no-browser]`	Sign in with OAuth Device Flow
`originrouter logout`	Remove local account credentials
`originrouter auth status`	Inspect sign-in and credential health
`originrouter security status\|rotate`	Inspect or rotate device security identity
`originrouter service install\|start\|stop\|restart\|status\|uninstall`	Manage the user-level daemon
`originrouter local key show\|rotate`	Show or rotate the Local API key
`originrouter local config show\|set`	Manage bind, port, LAN, and relay mode
`originrouter local api status\|set-host\|set-port`	Inspect or change Local API connection parameters
`originrouter token show\|rotate`	Show or rotate the Local API Bearer token
`originrouter update check\|install`	Check for or install CLI updates
`originrouter compatibility refresh`	Refresh the compatibility-patch catalog

Collaboration

Use originrouter collaborate "objective" for the recommended guided flow. Advanced automation uses originrouter collaboration, including templates, list, create, show, attach, attention, resolve, pause, resume, retry, cancel, archive, delete, and export.

Exhaustive syntax and flag index

The reference below comes directly from the exhaustive help output of the current released CLI. Run npm run docs:sync-cli for a new CLI release and use npm run docs:verify to detect drift.

CLI

0.2.2

Command signatures

120

Distinct flags

104

The syntax below is generated from originrouter help all. Commands, flags, defaults, and deprecation notices preserve the exact CLI output.

Usage

originrouter
  originrouter "<objective>" [-c codex|claude] [--mode <mode>]
  originrouter --help
  originrouter --version
  originrouter update [status|check|install] [--json]
  originrouter completion <shell>
  originrouter completion install [--shell <shell>] [--dry-run]
  originrouter completion uninstall [--shell <shell>] [--dry-run]
  originrouter status
  originrouter doctor [provider <name>]
  originrouter setup [--no-proxy] [--yes] [--dry-run]
  originrouter setup --verify [--no-proxy]
  originrouter sessions [--json]
  originrouter devices [--json]
  originrouter env print [--provider <name>] [--agent claude|codex]
  originrouter agent detail [set concise|standard|detailed]
  originrouter agent budget [show|set|clear] [device|claude|codex] [options]
  originrouter agent setup [--cloud|--native]
  originrouter agent history [--search <text>] [--agent claude|codex] [--device <id>] [--status <status>] [--json]
  originrouter agent history show <conversation-id> [--json]
  originrouter history [question] [--agent claude|codex] [--device <id>] [--workspace <id>] [--since <ISO>] [--until <ISO>] [--limit N] [--archived] [--json]

Agent collaboration

originrouter collaborate
  originrouter collaborate "<objective>" [--review|--yes] [--json]
  originrouter collaboration templates [--json]
  originrouter collaboration list [--category all|attention|active|recent] [--page N] [--page-size N] [--archived] [--json]
  originrouter collaboration drafts [--json]
  originrouter collaboration draft show|resume|delete <draft-id>
  originrouter collaboration show <run-id> [--json]
  originrouter collaboration attach <run-id> [--plain] [--verbose|--raw]
      [--participant <id>] [--task <id>]
  originrouter collaboration attention <run-id>
  originrouter collaboration resolve <run-id> <attention-id> --action <action> [--text <reply>]
  originrouter collaboration doctor <run-id> [--json]
  originrouter collaboration create --objective <text>
      --participant <id:claude|codex:device:workspace> [--participant ...]
      [--role <id=natural language responsibility>]
      [--route <id=provider:model>] [--permission <id=profile>]
      [--preference <text>] [--template <id>]
      [--coordination-prompt <text>] [--concurrency <n>]
      [--token-limit <n>] [--amount-limit <decimal>] [--currency <ISO-4217>]
      [--yes] [--detach] [--no-wait] [--timeout <seconds>]
  originrouter collaboration create "<objective>" [--review|--yes] [--json]
  originrouter collaboration create --spec <collaboration.json> [--yes]
  originrouter collaboration create --draft <draft-id>
  originrouter collaboration confirm <run-id>
  originrouter collaboration revise <run-id> [--feedback <text>]
  originrouter collaboration pause <run-id>
  originrouter collaboration resume <run-id>
  originrouter collaboration retry <run-id> [--task <task-id>]
  originrouter collaboration cancel <run-id>
  originrouter collaboration archive <run-id>
  originrouter collaboration delete <run-id> [--yes]
  originrouter collaboration export <run-id> [--format json|markdown]
  Confirmation defaults to required (review before Team/plan execution); --yes enables always_auto.

Local Proxy provider management

originrouter provider add <name> [--type proxy] [--base-url <u>] [--model <m>]
                                   [--engine <e>] [--litellm-provider <id>] [--api-key <k>] [--auth-token <k>]
                                   [--organization <o>] [--small-fast-model <m> [legacy]] [--api-version <v>]
                                   [--aws-region <r>] [--aws-access-key-id <id>] [--aws-secret-access-key <k>]
                                   [--aws-session-token <t>] [--aws-profile-name <p>]
                                   [--aws-bedrock-runtime-endpoint <u>] [--aws-role-name <r>] [--aws-session-name <n>]
                                   [--aws-web-identity-token <t>] [--aws-sts-endpoint <u>] [--sagemaker-base-url <u>]
                                   [--vertex-project <id>] [--vertex-location <loc>] [--vertex-credentials <json>]
                                   [--google-application-credentials <path>] [--azure-ad-token <t>] [--hf-token <t>]

  --type proxy         Local Proxy. Use --engine litellm (default) + --litellm-provider <id>.
                        --type litellm is accepted as an alias and persisted as proxy(engine=litellm).
  OriginRouter Cloud and remote devices are login-backed route sources, not local providers.

originrouter provider update <name> [same flags as add]
  originrouter provider list
  originrouter provider show <name>
  originrouter provider use <name> [--agent claude|codex] [--force]
  originrouter provider remove <name>

Model routes

originrouter route list
  originrouter route show [claude|codex]
  originrouter route set claude --provider <name> --main-model <m> --small-model <m>
  originrouter route clear claude
  originrouter route set <agent>.<slot> --provider <name> [--model <m>]
                                 claude slots: main, small; codex slot: main
  originrouter route clear <agent>.<slot>
  originrouter route cloud models
  originrouter route cloud set <agent>.<slot> [--model <id>]
  originrouter route remote devices
  originrouter route remote set <agent>.<slot> [--device <id>] [--model <id>]
  originrouter remote setup [--workspace <path>] [--providers <name[,name...]>] [--port <p>]
  originrouter remote status
  originrouter remote share status|start|stop|restart [--providers <name[,name...]>] [--port <p>]
  originrouter remote workspace list|authorize <path>
  originrouter remote workspace request <path> --device <device-id>
  Aliases are fixed: originrouter-claude-model, originrouter-claude-fast-model, and gpt-5.4.

Proxy runtime

originrouter proxy install [--version <v>]      default version 1.83.0
  originrouter proxy start --port <p>            routes mode (default; reads routes.claude)
  originrouter proxy start --provider <name> --port <p>   legacy / debug — NOT for use with originrouter claude
  originrouter proxy stop
  originrouter proxy restart [--port <p>]         restart in routes mode using current port
  originrouter proxy switch   [--port <p>]        alias for proxy restart
  originrouter proxy status

Model compatibility patches

originrouter compatibility status [--json]
  originrouter compatibility list [--json]
  originrouter compatibility inspect <patch-id> [--json]
  originrouter compatibility check [--json]
  originrouter compatibility update [--json]
  originrouter compatibility refresh [--json]       alias for update
  originrouter compatibility rollback

Provider field metadata

Every --flag maps to a catalog field for the chosen Provider adapter.
  Unknown flags are rejected. Fields can be literal values or env references
  (e.g. --api-key os.environ/DEEPSEEK_API_KEY). Secret fields are masked in
  all CLI / API output.

Local API auth

originrouter token show                            Print the current token + Local API URL
  originrouter token rotate                          Mint a new token (invalidates existing clients)
  originrouter local key show                        Alias for token show
  originrouter local key rotate                      Alias for token rotate
  originrouter local config show                     Print persisted local API bind/port settings
  originrouter local config set [--port <p>] [--bind <addr>] [--allow-lan on|off] [--relay-mode auto|cloud|local|custom] [--relay-url <url>]

Configuration

originrouter config show
  originrouter config set updates.mode prompt|auto|off
  originrouter config set claude.<key> <value>
  originrouter config unset claude.<key>
  originrouter claude-config --base-url <url> --api-key <key> --model <model> --small-fast-model <model> [legacy]

Service, daemon, and run commands

originrouter daemon [--relay https://app.easytransnote.com] [--relay-mode auto|cloud|local|custom] [--device <device-id>] [--local-port <p>]
                      [--bind 127.0.0.1|0.0.0.0] [--allow-lan]
  originrouter daemon-port                           Print the running daemon's local API URL (reads daemon.state.json)
  originrouter service install|start|stop|restart|status|uninstall
  originrouter run -- <command> [args...]
  originrouter claude [args...]                   Start native Claude Code TUI with remote control
  originrouter codex [args...]                    Start native Codex TUI with remote control
  originrouter claude-terminal [args...]          Start managed Claude Agent SDK session
  originrouter codex-terminal [args...]           Start managed Codex app-server session
  originrouter claude-sdk [args...]               Alias for managed Claude session
  originrouter codex-app-server [args...]         Alias for managed Codex session
  --originrouter-autonomy <profile>                manual|guarded|ai_review|unrestricted|custom
  --originrouter-policy <id-or-path>               Approval policy ID or JSON file for custom mode

Examples

originrouter run -- bash
  # Proxy provider (via the local runtime). The --type litellm
  # alias and --engine litellm are equivalent to the canonical --type proxy.
  originrouter provider add minimax --type proxy --engine litellm --litellm-provider anthropic --base-url https://api.easytransnote.com/coding --api-key sk-v1-xxx --model MiniMax-M3 --small-fast-model MiniMax-M3.1-Flash-Preview
  # Login-backed source selectors: Cloud presents the available models; Remote
  # presents the authorized CLI devices for the current account.
  originrouter route cloud set claude.main
  originrouter route remote set codex.main
  originrouter provider use minimax
  originrouter env print
  originrouter claude
  originrouter route set claude.main --provider minimax --model MiniMax-M3
  originrouter claude-config --base-url https://x --api-key sk-y --model m   # legacy: writes config.claude
  originrouter claude-sdk --model MiniMax-M3
  originrouter codex --model gpt-5-codex
  originrouter sessions
  originrouter sessions --json
  # Provider fields can be env references. The shell var name is
  # stored verbatim; the Proxy runtime reads the env itself at startup.
  originrouter provider add bedrock-irsa --type proxy --engine litellm --litellm-provider bedrock     --aws-region os.environ/AWS_REGION_NAME     --aws-role-name arn:aws:iam::123456789012:role/MyBedrockRole     --aws-web-identity-token os.environ/AWS_WEB_IDENTITY_TOKEN_FILE     --model anthropic.claude-3-5-sonnet-20241022-v2:0

OriginRouter OAuth login

originrouter login [status] [--surety-url <url>] [--login-url <url>]
                     [--device-name <name>]
                     [--no-browser]
  originrouter logout [--remove-device]
  originrouter auth status|verify
  originrouter security status|rotate

  Login uses RFC 8628 Device Authorization Grant directly with Surety. It prints
  an 8-character user code + verification URL, opens the browser
  (unless --no-browser), and polls Surety until you approve
  on the browser authorization page. Works for SSH, Docker, CI, or any environment
  where the CLI cannot receive a browser redirect.

  --no-browser     Do not auto-open the browser; only print the
                   URL + code. Use this in headless / SSH / Docker
                   / CI environments.
  --surety-url     Surety OAuth base URL. Defaults to SURETY_BASE_URL
                   or https://surety.easytransnote.com.
  --login-url      Browser authorization page base URL.

  The CLI stores one rotating Refresh Token and separate short-lived
  Access Tokens for Control, AI, Coding, and Relay. The installation
  device ID is random, persisted locally, and never derived from MAC,
  serial number, machine-id, or other hardware identifiers.

OriginRouter wrapper options for Claude and Codex

--provider <name>                              Deprecated for claude; use 'originrouter route set'. Reserved for legacy/debug paths.
  --originrouter-relay https://app.easytransnote.com
  --originrouter-relay-mode auto|cloud|local|custom  auto uses authenticated cloud when signed in, otherwise local-only
  --originrouter-device <device-id>
  --originrouter-session session-id
  --originrouter-autonomy manual|guarded|ai_review|unrestricted|custom
  --originrouter-detail concise|standard|detailed  Override this session's installed default
  --originrouter-auto-approve                    Alias for --originrouter-autonomy guarded
  --originrouter-auto-allow <scope[,scope...]>   Use a custom unattended allow-list; repeatable
                                                 scopes: plan_continue, explicit_continue_questions, read_tools,
                                                 workspace_edits, workspace_commands, additional_permissions,
                                                 destructive_commands, elevated_commands, network_mutations,
                                                 outside_workspace, unknown_tools
  --native-config                                Use the installed Claude/Codex auth, model, environment, and config; keep OriginRouter remote control only

Flag index

Use this index to verify spelling and find the commands that accept each flag. A flag can appear in multiple commands; use the command syntax for its exact constraints.

Flag	Command context
--action	originrouter collaboration resolve <run-id> <attention-id> --action <action> [--text <reply>]
--agent	originrouter env print [--provider <name>] [--agent claude\|codex] originrouter agent history [--search <text>] [--agent claude\|codex] [--device <id>] [--status <status>] [--json] originrouter history [question] [--agent claude\|codex] [--device <id>] [--workspace <id>] [--since <ISO>] [--until <ISO>] [--limit N] [--archived] [--json] +1
--allow-lan	originrouter local config set [--port <p>] [--bind <addr>] [--allow-lan on\|off] [--relay-mode auto\|cloud\|local\|custom] [--relay-url <url>] [--bind 127.0.0.1\|0.0.0.0] [--allow-lan]
--amount-limit	[--token-limit <n>] [--amount-limit <decimal>] [--currency <ISO-4217>]
--api-key	[--engine <e>] [--litellm-provider <id>] [--api-key <k>] [--auth-token <k>] (e.g. --api-key os.environ/DEEPSEEK_API_KEY). Secret fields are masked in originrouter claude-config --base-url <url> --api-key <key> --model <model> --small-fast-model <model> [legacy] +2
--api-version	[--organization <o>] [--small-fast-model <m> [legacy]] [--api-version <v>]
--archived	originrouter history [question] [--agent claude\|codex] [--device <id>] [--workspace <id>] [--since <ISO>] [--until <ISO>] [--limit N] [--archived] [--json] originrouter collaboration list [--category all\|attention\|active\|recent] [--page N] [--page-size N] [--archived] [--json]
--auth-token	[--engine <e>] [--litellm-provider <id>] [--api-key <k>] [--auth-token <k>]
--aws-access-key-id	[--aws-region <r>] [--aws-access-key-id <id>] [--aws-secret-access-key <k>]
--aws-bedrock-runtime-endpoint	[--aws-bedrock-runtime-endpoint <u>] [--aws-role-name <r>] [--aws-session-name <n>]
--aws-profile-name	[--aws-session-token <t>] [--aws-profile-name <p>]
--aws-region	[--aws-region <r>] [--aws-access-key-id <id>] [--aws-secret-access-key <k>] originrouter provider add bedrock-irsa --type proxy --engine litellm --litellm-provider bedrock --aws-region os.environ/AWS_REGION_NAME --aws-role-name arn:aws:iam::123456789012:role/MyBedrockRole --aws-web-identity-token os.environ/AWS_WEB_IDENTITY_TOKEN_FILE --model anthropic.claude-3-5-sonnet-20241022-v2:0
--aws-role-name	[--aws-bedrock-runtime-endpoint <u>] [--aws-role-name <r>] [--aws-session-name <n>] originrouter provider add bedrock-irsa --type proxy --engine litellm --litellm-provider bedrock --aws-region os.environ/AWS_REGION_NAME --aws-role-name arn:aws:iam::123456789012:role/MyBedrockRole --aws-web-identity-token os.environ/AWS_WEB_IDENTITY_TOKEN_FILE --model anthropic.claude-3-5-sonnet-20241022-v2:0
--aws-secret-access-key	[--aws-region <r>] [--aws-access-key-id <id>] [--aws-secret-access-key <k>]
--aws-session-name	[--aws-bedrock-runtime-endpoint <u>] [--aws-role-name <r>] [--aws-session-name <n>]
--aws-session-token	[--aws-session-token <t>] [--aws-profile-name <p>]
--aws-sts-endpoint	[--aws-web-identity-token <t>] [--aws-sts-endpoint <u>] [--sagemaker-base-url <u>]
--aws-web-identity-token	[--aws-web-identity-token <t>] [--aws-sts-endpoint <u>] [--sagemaker-base-url <u>] originrouter provider add bedrock-irsa --type proxy --engine litellm --litellm-provider bedrock --aws-region os.environ/AWS_REGION_NAME --aws-role-name arn:aws:iam::123456789012:role/MyBedrockRole --aws-web-identity-token os.environ/AWS_WEB_IDENTITY_TOKEN_FILE --model anthropic.claude-3-5-sonnet-20241022-v2:0
--azure-ad-token	[--google-application-credentials <path>] [--azure-ad-token <t>] [--hf-token <t>]
--base-url	originrouter provider add <name> [--type proxy] [--base-url <u>] [--model <m>] originrouter claude-config --base-url <url> --api-key <key> --model <model> --small-fast-model <model> [legacy] originrouter provider add minimax --type proxy --engine litellm --litellm-provider anthropic --base-url https://api.easytransnote.com/coding --api-key sk-v1-xxx --model MiniMax-M3 --small-fast-model MiniMax-M3.1-Flash-Preview +1
--bind	originrouter local config set [--port <p>] [--bind <addr>] [--allow-lan on\|off] [--relay-mode auto\|cloud\|local\|custom] [--relay-url <url>] [--bind 127.0.0.1\|0.0.0.0] [--allow-lan]
--category	originrouter collaboration list [--category all\|attention\|active\|recent] [--page N] [--page-size N] [--archived] [--json]
--cloud	originrouter agent setup [--cloud\|--native]
--concurrency	[--coordination-prompt <text>] [--concurrency <n>]
--coordination-prompt	[--coordination-prompt <text>] [--concurrency <n>]
--currency	[--token-limit <n>] [--amount-limit <decimal>] [--currency <ISO-4217>]
--detach	[--yes] [--detach] [--no-wait] [--timeout <seconds>]
--device	originrouter agent history [--search <text>] [--agent claude\|codex] [--device <id>] [--status <status>] [--json] originrouter history [question] [--agent claude\|codex] [--device <id>] [--workspace <id>] [--since <ISO>] [--until <ISO>] [--limit N] [--archived] [--json] originrouter route remote set <agent>.<slot> [--device <id>] [--model <id>] +2
--device-name	[--device-name <name>]
--draft	originrouter collaboration create --draft <draft-id>
--dry-run	originrouter completion install [--shell <shell>] [--dry-run] originrouter completion uninstall [--shell <shell>] [--dry-run] originrouter setup [--no-proxy] [--yes] [--dry-run]
--engine	[--engine <e>] [--litellm-provider <id>] [--api-key <k>] [--auth-token <k>] --type proxy Local Proxy. Use --engine litellm (default) + --litellm-provider <id>. # alias and --engine litellm are equivalent to the canonical --type proxy. +2
--feedback	originrouter collaboration revise <run-id> [--feedback <text>]
--flag	Every --flag maps to a catalog field for the chosen Provider adapter.
--force	originrouter provider use <name> [--agent claude\|codex] [--force]
--format	originrouter collaboration export <run-id> [--format json\|markdown]
--google-application-credentials	[--google-application-credentials <path>] [--azure-ad-token <t>] [--hf-token <t>]
--help	originrouter --help
--hf-token	[--google-application-credentials <path>] [--azure-ad-token <t>] [--hf-token <t>]
--json	originrouter update [status\|check\|install] [--json] originrouter sessions [--json] originrouter devices [--json] +17
--limit	originrouter history [question] [--agent claude\|codex] [--device <id>] [--workspace <id>] [--since <ISO>] [--until <ISO>] [--limit N] [--archived] [--json]
--litellm-provider	[--engine <e>] [--litellm-provider <id>] [--api-key <k>] [--auth-token <k>] --type proxy Local Proxy. Use --engine litellm (default) + --litellm-provider <id>. originrouter provider add minimax --type proxy --engine litellm --litellm-provider anthropic --base-url https://api.easytransnote.com/coding --api-key sk-v1-xxx --model MiniMax-M3 --small-fast-model MiniMax-M3.1-Flash-Preview +1
--local-port	originrouter daemon [--relay https://app.easytransnote.com] [--relay-mode auto\|cloud\|local\|custom] [--device <device-id>] [--local-port <p>]
--login-url	originrouter login [status] [--surety-url <url>] [--login-url <url>] --login-url Browser authorization page base URL.
--main-model	originrouter route set claude --provider <name> --main-model <m> --small-model <m>
--mode	originrouter "<objective>" [-c codex\|claude] [--mode <mode>]
--model	originrouter provider add <name> [--type proxy] [--base-url <u>] [--model <m>] originrouter route set <agent>.<slot> --provider <name> [--model <m>] originrouter route cloud set <agent>.<slot> [--model <id>] +8
--native	originrouter agent setup [--cloud\|--native]
--no-browser	[--no-browser] (unless --no-browser), and polls Surety until you approve --no-browser Do not auto-open the browser; only print the
--no-proxy	originrouter setup [--no-proxy] [--yes] [--dry-run] originrouter setup --verify [--no-proxy]
--no-wait	[--yes] [--detach] [--no-wait] [--timeout <seconds>]
--objective	originrouter collaboration create --objective <text>
--organization	[--organization <o>] [--small-fast-model <m> [legacy]] [--api-version <v>]
--originrouter-auto-allow	--originrouter-auto-allow <scope[,scope...]> Use a custom unattended allow-list; repeatable
--originrouter-auto-approve	--originrouter-auto-approve Alias for --originrouter-autonomy guarded
--originrouter-autonomy	--originrouter-autonomy <profile> manual\|guarded\|ai_review\|unrestricted\|custom --originrouter-autonomy manual\|guarded\|ai_review\|unrestricted\|custom --originrouter-auto-approve Alias for --originrouter-autonomy guarded
--originrouter-detail	--originrouter-detail concise\|standard\|detailed Override this session's installed default
--originrouter-device	--originrouter-device <device-id>
--native-config	--native-config Use the installed Claude/Codex auth, model, environment, and config; keep OriginRouter remote control only
--originrouter-policy	--originrouter-policy <id-or-path> Approval policy ID or JSON file for custom mode
--originrouter-relay	--originrouter-relay https://app.easytransnote.com
--originrouter-relay-mode	--originrouter-relay-mode auto\|cloud\|local\|custom auto uses authenticated cloud when signed in, otherwise local-only
--originrouter-session	--originrouter-session session-id
--page	originrouter collaboration list [--category all\|attention\|active\|recent] [--page N] [--page-size N] [--archived] [--json]
--page-size	originrouter collaboration list [--category all\|attention\|active\|recent] [--page N] [--page-size N] [--archived] [--json]
--participant	[--participant <id>] [--task <id>] --participant <id:claude\|codex:device:workspace> [--participant ...]
--permission	[--route <id=provider:model>] [--permission <id=profile>]
--plain	originrouter collaboration attach <run-id> [--plain] [--verbose\|--raw]
--port	originrouter remote setup [--workspace <path>] [--providers <name[,name...]>] [--port <p>] originrouter remote share status\|start\|stop\|restart [--providers <name[,name...]>] [--port <p>] originrouter proxy start --port <p> routes mode (default; reads routes.claude) +4
--preference	[--preference <text>] [--template <id>]
--provider	originrouter env print [--provider <name>] [--agent claude\|codex] originrouter route set claude --provider <name> --main-model <m> --small-model <m> originrouter route set <agent>.<slot> --provider <name> [--model <m>] +3
--providers	originrouter remote setup [--workspace <path>] [--providers <name[,name...]>] [--port <p>] originrouter remote share status\|start\|stop\|restart [--providers <name[,name...]>] [--port <p>]
--raw	originrouter collaboration attach <run-id> [--plain] [--verbose\|--raw]
--relay	originrouter daemon [--relay https://app.easytransnote.com] [--relay-mode auto\|cloud\|local\|custom] [--device <device-id>] [--local-port <p>]
--relay-mode	originrouter local config set [--port <p>] [--bind <addr>] [--allow-lan on\|off] [--relay-mode auto\|cloud\|local\|custom] [--relay-url <url>] originrouter daemon [--relay https://app.easytransnote.com] [--relay-mode auto\|cloud\|local\|custom] [--device <device-id>] [--local-port <p>]
--relay-url	originrouter local config set [--port <p>] [--bind <addr>] [--allow-lan on\|off] [--relay-mode auto\|cloud\|local\|custom] [--relay-url <url>]
--remove-device	originrouter logout [--remove-device]
--review	originrouter collaborate "<objective>" [--review\|--yes] [--json] originrouter collaboration create "<objective>" [--review\|--yes] [--json]
--role	[--role <id=natural language responsibility>]
--route	[--route <id=provider:model>] [--permission <id=profile>]
--sagemaker-base-url	[--aws-web-identity-token <t>] [--aws-sts-endpoint <u>] [--sagemaker-base-url <u>]
--search	originrouter agent history [--search <text>] [--agent claude\|codex] [--device <id>] [--status <status>] [--json]
--shell	originrouter completion install [--shell <shell>] [--dry-run] originrouter completion uninstall [--shell <shell>] [--dry-run]
--since	originrouter history [question] [--agent claude\|codex] [--device <id>] [--workspace <id>] [--since <ISO>] [--until <ISO>] [--limit N] [--archived] [--json]
--small-fast-model	[--organization <o>] [--small-fast-model <m> [legacy]] [--api-version <v>] originrouter claude-config --base-url <url> --api-key <key> --model <model> --small-fast-model <model> [legacy] originrouter provider add minimax --type proxy --engine litellm --litellm-provider anthropic --base-url https://api.easytransnote.com/coding --api-key sk-v1-xxx --model MiniMax-M3 --small-fast-model MiniMax-M3.1-Flash-Preview
--small-model	originrouter route set claude --provider <name> --main-model <m> --small-model <m>
--spec	originrouter collaboration create --spec <collaboration.json> [--yes]
--status	originrouter agent history [--search <text>] [--agent claude\|codex] [--device <id>] [--status <status>] [--json]
--surety-url	originrouter login [status] [--surety-url <url>] [--login-url <url>] --surety-url Surety OAuth base URL. Defaults to SURETY_BASE_URL
--task	[--participant <id>] [--task <id>] originrouter collaboration retry <run-id> [--task <task-id>]
--template	[--preference <text>] [--template <id>]
--text	originrouter collaboration resolve <run-id> <attention-id> --action <action> [--text <reply>]
--timeout	[--yes] [--detach] [--no-wait] [--timeout <seconds>]
--token-limit	[--token-limit <n>] [--amount-limit <decimal>] [--currency <ISO-4217>]
--type	originrouter provider add <name> [--type proxy] [--base-url <u>] [--model <m>] --type proxy Local Proxy. Use --engine litellm (default) + --litellm-provider <id>. --type litellm is accepted as an alias and persisted as proxy(engine=litellm). +4
--until	originrouter history [question] [--agent claude\|codex] [--device <id>] [--workspace <id>] [--since <ISO>] [--until <ISO>] [--limit N] [--archived] [--json]
--verbose	originrouter collaboration attach <run-id> [--plain] [--verbose\|--raw]
--verify	originrouter setup --verify [--no-proxy]
--version	originrouter --version originrouter proxy install [--version <v>] default version 1.83.0
--vertex-credentials	[--vertex-project <id>] [--vertex-location <loc>] [--vertex-credentials <json>]
--vertex-location	[--vertex-project <id>] [--vertex-location <loc>] [--vertex-credentials <json>]
--vertex-project	[--vertex-project <id>] [--vertex-location <loc>] [--vertex-credentials <json>]
--workspace	originrouter history [question] [--agent claude\|codex] [--device <id>] [--workspace <id>] [--since <ISO>] [--until <ISO>] [--limit N] [--archived] [--json] originrouter remote setup [--workspace <path>] [--providers <name[,name...]>] [--port <p>]
--yes	originrouter setup [--no-proxy] [--yes] [--dry-run] originrouter collaborate "<objective>" [--review\|--yes] [--json] [--yes] [--detach] [--no-wait] [--timeout <seconds>] +4