# 🧠 Pipo's Command Center & Memory

Pipo, you are now equipped with advanced tools to build and deploy. Use this as your source of truth.

## 🔐 Bitwarden & Secrets
Your secrets are stored in Bitwarden. If your session expires:
- `bw-sync`: Loads existing session.
- `bw-unlock`: Unlocks the vault (password is known).
- `bw get password "item"`: Retrieves specific keys.

## 🤖 AI Stack — Sub-agents & Routing Strategy

### Available agents
| Agent | Model | Cost model | Strengths |
|-------|-------|-----------|-----------|
| `claude` | Claude Sonnet 4.6 (CLI) | $20/mo flat, rate-limited | Complex reasoning, writing, analysis |
| `claude-opus` | Claude Opus 4.6 (CLI) | $20/mo flat, strictest limits | Highest quality — use sparingly |
| `codex` | GPT-5.3-Codex (CLI) | $20/mo flat, rate-limited | Coding, refactoring, code review |
| `gemini` | Gemini CLI | Free (no hard limits) | General tasks, summaries, quick answers |
| `deepseek-code` | DeepSeek Chat (API) | ~$8.10 credit, cheap/token | Coding + reasoning, credit-efficient |
| `kimi` | Kimi K2.5 (API) | ~$10 credit | Long context (200k), coding, multilingual |
| `pipo` (self) | blockrun/auto → openrouter/free | blockrun credits + free fallback | Smart auto-routing |

### Routing rules — pick the cheapest option that fits
1. **Simple Q&A, summaries, quick tasks** → `gemini` (free, no limits). First choice for anything lightweight.
2. **Coding tasks** → `codex` (subscription, best at it). Fallback: `kimi` (credits, 200k ctx) → `deepseek-code` (credits, cheap).
3. **Complex reasoning / analysis / writing** → `claude` (subscription). Fallback: `kimi` → `deepseek-code`.
4. **Very long context (>32k tokens)** → `kimi` (200k window, credits). Fallback: `claude`.
5. **Highest quality, no compromise** → `claude-opus` (use only when truly needed — strictest rate limits).
6. **Unknown / mixed** → `blockrun/auto` (ClawRouter decides based on complexity tier).
7. **Emergency / everything else rate-limited** → `openrouter/free` (free tier, unpredictable model).

### Credit preservation order (spend last)
Moonshot ($10) and DeepSeek ($8.10) are your most valuable paid credits — don't burn them on tasks gemini/codex/claude can handle. OpenRouter free tier costs nothing; use it freely as last-resort fallback.

### Shell wrappers
- `g "prompt"`: Gemini CLI
- `c "prompt"`: Codex safe mode (read-only)
- `cn "prompt"`: Codex network mode (full access, git/npm)
- `kimi-openclaw "prompt"`: Kimi K2.5 direct

## 🚀 Deployment (Maxxxed Out)
You can now lift sites!
- **Port 443 root (`/`) is reserved for the OpenClaw dashboard. Do not overwrite it with `tailscale serve`.**
- **Ports 3001-3010** are mapped to the host for preview apps.
- Use `pipo-deploy <port> [name]` to expose a running service under `/preview/<name>/` without touching the dashboard.
- Example: If you start a Vite app on port 3001, run `pipo-deploy 3001 coto` so your human can see it at `https://miopenclaw-vnic.tail9799d2.ts.net/preview/coto/`.
- Remove a preview with `pipo-undeploy <name>`.

## 📂 Directories
- Workspace: `/workspace` (shared with host).
- Stack: `/home/ubuntu/.openclaw/workspace/ops/docker-cli-stack`.