How long does the integration take?

Change one base URL in an OpenAI-compatible client, or install the Python or TypeScript SDK; the quickstart routes a first request in a few minutes.

Will this lock us into another vendor?

No. The router is Apache-2.0 open source, your provider keys stay yours, and the API is OpenAI-compatible, so leaving is a change of base URL.

What happens when a provider fails?

The router falls back to the next model your policy allows and records the fallback in the trace, so an outage costs a retry, not an incident.

web-server - Skill - OpenSmartRoute

Name: web-server
Author: NexNirvana

Instruction file imported from NexNirvana/thereelcapital (.github/instructions/web-server.instructions.md). Copyright stays with the author.

Web Worker server code

Spec: docs/auth-and-security.md.

The user and role come only from the Better Auth session; ids in params or bodies are ownership-checked or ignored. Trading calls go to ENGINE.getByName(session.userId) and nowhere else.
Admin routes check the role on the server, require a fresh session for changes, and write audit_log with before/after (never secret values). Admins never place or cancel client orders or impersonate clients.
Better Auth gaps the app must cover: passkey user verification checked in both afterVerification hooks; onboarding only through a validated single-use activation link whose enrollment session can only register a passkey (the app sends no email); recovery through the app's hashed single-use recovery_codes; session freshness checked explicitly (sensitiveSessionMiddleware doesn't).
No public sign-up path; impersonation and set-password endpoints stay disabled.
Decode form and JSON input with Effect Schema and reject unknown fields. Errors to users carry a stable code and a Spanish message; details go to logs without secrets.
The web Worker never calls TradeStation and never holds tokens.

# after Install: the listing is in your workspace's routing pool - a plan picks it for its slot curl -s -X POST https://api.opensmartroute.ai/api/v1/route -H 'Authorization: Bearer $OSR_API_KEY' -H 'Content-Type: application/json' -d '{"text": "...", "plan": true}'

Install web-server and it becomes one more candidate the router can pick - when it fits.

A listing is a routing target with a manifest: what it does, which domains it covers, what it costs and who publishes it. Once installed it sits beside your own models and tools, is scored like any other candidate for each request, and shows up in the trace when it wins. Ratings come from workspaces that installed it, one per account.

{ "ocm": "1", "id": "nexnirvana-thereelcapital-web-server-instructions", "kind": "skill", "name": "web-server", "description": "Spec: `docs/auth-and-security.md`.", "publisher": "NexNirvana", "version": "1.0.0", "capabilities": { "domains": [ "coding", "customer_support" ], "tags": [ "skill-md", "github-instructions" ], "languages": [ "en" ] }, "quality_prior": 0.6, "examples": [ "Spec: `docs/auth-and-security.md`." ], "primary": false, "metadata": { "source": { "provider": "github-instructions", "repository": "https://github.com/NexNirvana/thereelcapital", "path": ".github/instructions/web-server.instructions.md", "ref": "cabb633c41bc0d0934530d0276652ea2640c3484", "url": "https://github.com/NexNirvana/thereelcapital/blob/cabb633c41bc0d0934530d0276652ea2640c3484/.github/instructions/web-server.instructions.md", "key": "NexNirvana/thereelcapital/.github/instructions/web-server.instructions.md" }, "applies_to": "src/hooks.server.ts,src/lib/server/**,src/routes/**/*.server.ts,src/routes/**/+server.ts" }, "instructions": "# Web Worker server code\n\nSpec: `docs/auth-and-security.md`.\n\n- The user and role come only from the Better Auth session; ids in params or bodies are ownership-checked or ignored. Trading calls go to `ENGINE.getByName(session.userId)` and nowhere else.\n- Admin routes check the role on the server, require a fresh session for changes, and write `audit_log` with before/after (never secret values). Admins never place or cancel client orders or impersonate clients.\n- Better Auth gaps the app must cover: passkey user verification checked in both `afterVerification` hooks; onboarding only through a v", "cost": { "context_tokens": 293 } }

web-server

About

Web Worker server code

Use it

Install web-server and it becomes one more candidate the router can pick - when it fits.

What it costs to adopt - in engineering time.

One base URL

No vendor lock-in

Failover built in

Manifest

Reviews