fix(omp): split host providers personal vs work

mactraitorpro: xai/openrouter/opencode-go/codex only; drop cursor/vibeproxy.
seqeratop: cursor/codex/vibeproxy only; drop xai fallbacks.
Document host-block source of truth in OMP module notes.

Author: edmundmiller

hosts/mactraitorpro/default.nix

@@ -88,15 +88,19 @@
         codex.enable = true;
         omp = {
           enable = true;
-          smolModel = "cursor/composer-2.5";
+          # Personal laptop providers: xai-oauth, openrouter, opencode-go, openai-codex.
+          # No Cursor SDK, no VibeProxy here — do not pin cursor/* or vibeproxy/*.
+          smolModel = "xai-oauth/grok-composer-2.5-fast";
           modelRoles = {
-            smol = "cursor/composer-2.5";
+            smol = "xai-oauth/grok-composer-2.5-fast";
             default = "xai-oauth/grok-4.5";
+            # Shared plan defaults to vibeproxy; override to a local provider.
+            plan = "xai-oauth/grok-4.5:high";
           };
           modelProviderOrder = [
             "openai-codex"
             "xai-oauth"
-            "cursor"
+            "openrouter"
             "opencode-go"
           ];
           retry.modelFallback = true;
@@ -105,7 +109,7 @@
               "opencode-go/glm-5.2"
             ];
             plan = [
-              "xai-oauth/grok-4.5:high"
+              "openai-codex/gpt-5.6-sol:high"
               "opencode-go/glm-5.2"
             ];
             slow = [

hosts/seqeratop/default.nix

@@ -98,6 +98,8 @@
         codex.enable = true;
         omp = {
           enable = true;
+          # Work laptop providers: cursor, openai-codex, vibeproxy (Claude/Anthropic).
+          # No xai-oauth here — do not pin xai-oauth/* fallbacks.
           # Seqeratop has Cursor SDK wired through Pi, so use Cursor Composer
           # for smol and low-thinking Codex for the default role.
           smolModel = "cursor/composer-2.5";
@@ -109,12 +111,12 @@
             default = [
               "openai-codex/gpt-5.6-terra:low"
               "openai-codex/gpt-5.6-luna:low"
-              "xai-oauth/grok-4.5:high"
+              "cursor/composer-2.5"
             ];
             slow = [
               "openai-codex/gpt-5.6-terra:high"
               "openai-codex/gpt-5.6-luna:high"
-              "xai-oauth/grok-4.5:high"
+              "vibeproxy/claude-opus-4-8:high"
             ];
           };
           # Match the rest of this host's Seqera branding (stylix seqera-dark,

modules/agents/omp/AGENTS.md

@@ -44,7 +44,7 @@ OMP's runtime symlink to it. Its block reason should explain:
 Keep those alternatives in the hook's `GUIDANCE_LINES`; the reason is shown
 back to the model as the failed tool result.
 
-## Per-host model roles
+## Per-host model roles and providers
 
 `modules.agents.omp.smolModel` sets `PI_SMOL_MODEL` in the wrapper for a
 declarative per-host smol/fast model (also drives commit, which falls back to
@@ -53,11 +53,11 @@ into the rendered `config.yml`. Use it only for real host auth or quota
 differences; keep shared defaults in `config/omp/config.yml`. Precedence:
 `--smol` flag > `PI_SMOL_MODEL` > rendered `config.yml`.
 
-Current split: MacTraitor-Pro uses `xai-oauth/grok-4.5` for default
-and `cursor/composer-2.5` for smol; Seqeratop renders `cursor/composer-2.5`
-for smol and `openai-codex/gpt-5.6-sol:low` for default. Keep future
-host-specific role changes in the host `modules.agents.omp` block, not shared
-`config.yml`.
+**Providers are host-specific.** Do not cross-wire prefixes across laptops.
+Source of truth: the `modules.agents.omp` block comments + pins in each
+`hosts/*/default.nix`. Validate new ids with `omp models <provider>` on that
+host before adding roles/fallbacks. Never invent hybrid ids like
+`cursor/grok-*`.
 
 ## Docs
 

modules/agents/omp/message-queue.md

@@ -58,16 +58,14 @@ Claude Opus 4.8); kilo/Claude remains only a fallback. There is no separate
 ### Per-host overrides
 
 Shared role defaults live in `config/omp/config.yml`. Host auth/quota differences
-belong in `modules.agents.omp.modelRoles`, which is rendered into the Nix-managed
-config at activation. `modules.agents.omp.smolModel` also injects `PI_SMOL_MODEL`
-for the smol/commit fast path. Precedence: `--smol` flag > `PI_SMOL_MODEL` env >
-rendered `config.yml`.
-
-- **mactraitorpro**: default `xai-oauth/grok-4.5`; smol `cursor/composer-2.5`.
-- **seqeratop**: smol `cursor/composer-2.5`; default `openai-codex/gpt-5.6-sol:low`.
-- **fallbacks**: shared `slow` falls back Sol → Terra → Luna; mactraitorpro
-  default falls back to GLM only, while its `plan`/`slow` paths include
-  `xai-oauth/grok-4.5:high` before GLM.
+belong in `modules.agents.omp.modelRoles` / `retry.fallbackChains` on each host.
+`modules.agents.omp.smolModel` also injects `PI_SMOL_MODEL` for the smol/commit
+fast path. Precedence: `--smol` flag > `PI_SMOL_MODEL` env > rendered `config.yml`.
+
+Providers differ by machine — personal vs work do not share Cursor/xai/VibeProxy.
+Read the host `omp` block comments in `hosts/*/default.nix` before changing
+fallbacks. Shared `slow` is Sol → Terra → Luna; host chains may only use that
+host's real providers. Smoke-test every new id with `omp models` on-target.
 
 **Gotcha — Codex catalog lies.** `omp models openai-codex` can list unsupported
 ids; smoke-test every new id before trusting it. Verified GPT-5.6 ids: