# Provider > Inspect or select a Clade execution connection while keeping agent runtime, inference provider, wire protocol, and model distinct. Use for Claude/Codex runtime selection, Anthropic/OpenAI/MiniMax/Kimi/custom gateways, model routing, or connection troubleshooting. - Skill: `shenxingy/provider-2` (Agent Skill, multi-file: 5 files) - Install (CLI): `npx skillmds@latest add shenxingy/provider-2` - Raw SKILL.md: https://api.skillmd.com/api/skills/shenxingy/provider-2/raw - Safety review: pending (external: skill-scanner PASS, skillspector PASS) - Works with: Claude Code, Claude.ai, OpenAI Codex - Category: AI & ML - Author: shenxingy (https://skillmd.com/u/shenxingy) - Updated: 2026-09-21 - Page: https://skillmd.com/skills/shenxingy/provider-2 --- # Clade for Codex This package composes the provider-neutral Clade core contract with the native Codex surface adapter. Run the workflow directly in Codex; do not launch another agent CLI or route it through Clade MCP. Package provenance: - core contract: `clade.execution/v1` - surface adapter: `codex/v1` - explicit invocation: `$clade:provider` - generated from: `configs/skills/` ## Canonical Clade workflow name: provider contract: clade.execution/v1 completion-status: DONE | DONE_WITH_CONCERNS | BLOCKED | NEEDS_CONTEXT Treat these as independent dimensions: 1. surface; 2. agent runtime (`claude`, `codex`, or another installed adapter); 3. secret-free connection identity; 4. inference provider; 5. wire protocol; 6. opaque provider-scoped model ID; 7. capability profile and task policy. Never infer provider/capabilities from a model prefix. Never silently fall back to Claude, a default account, or another billing identity. ## No argument / inspect Show the resolved execution identity and provenance. List available connection identities only from trusted user/runtime configuration. Do not read or print credentials, raw authorization headers, or secret-bearing files. When the orchestrator provider registry is available, report its catalog state (`fresh`, `stale`, `unavailable`, or `declared`), observation time, adapter/profile provenance, health, and capability provenance. A live catalog is a time-bounded observation, not a permanent model allowlist. ## Select or change 1. Parse the requested runtime, connection, model, effort, and task profile. 2. Read trusted repository policy and the current surface adapter. 3. Validate that the connection belongs to the selected runtime. 4. Resolve required/preferred/optional/forbidden capabilities. 5. Refresh an expired discovery-managed catalog before selection. 6. Preview requested vs. resolved values, catalog provenance, and explicit degradations. 7. Change only the requested user-scoped selection. Repository files may name a connection/profile but must not supply credentials or silently mutate user-level provider configuration. 8. Re-read the effective configuration and report whether a restart/new session is required. Unknown required capabilities fail before spending tokens or changing Git. Unknown preferred capabilities may continue only with a visible degradation. If discovery fails or expires, continue only when the resolved opaque model ID is explicitly pinned on that connection. Mark the execution as a stale catalog degradation; never substitute another model, account, or provider. ## Clade orchestrator configuration Use canonical fields: ```json { "agent_runtime": "claude", "runtime_connections": {"claude": "minimax-work"}, "connections": { "minimax-work": { "agent_runtime": "claude", "inference_provider": "minimax", "wire_protocol": "anthropic-compatible", "endpoint_identity": "minimax-user-config", "models": {"strong": "MiniMax-M2.5"}, "pinned_models": ["MiniMax-M2.5"], "discovery": { "adapter": "minimax", "store": "claude-providers", "profile": "minimax-work", "ttl_seconds": 300 }, "capabilities": {} } } } ``` This object is metadata only. Keep endpoint URLs, API keys, tokens, shell exports, and machine-specific credential paths in the native user store. `discovery.store` and `discovery.profile` are secret-free references to that store. Supported adapters are Anthropic, OpenAI, MiniMax, Moonshot, OpenAI-compatible custom gateways, and explicitly declared native-static profiles. ## Completion - `DONE`: selection is resolved and verified. - `DONE_WITH_CONCERNS`: selection works with named degradation/restart need. - `BLOCKED`: required capability or trusted connection is unavailable. - `NEEDS_CONTEXT`: the user must choose among materially different accounts, costs, or authority boundaries. ## Codex surface adapter # Codex connection adapter - Invoke the installed plugin workflow explicitly as `$clade:provider`; bare `$provider` is not the Clade plugin identity. - Use user-scoped Codex `model_provider`/model configuration and its native credential mechanism. Project config is trust-gated and must not donate credentials. - Prefer the Responses protocol when supported; treat Chat Completions or a compatible gateway as an explicit protocol choice. - Preserve unknown custom provider/model IDs. Validate capabilities through declared metadata or probes, never prefixes. - A discovery-managed connection references the trusted user profile as `store: codex-config` plus its `model_providers` profile name. Model-list probes may use that profile's endpoint and credential environment variable, but neither value may enter repository settings, status, or cache output. - Start a new session if the installed Codex version does not reload provider configuration dynamically. ## Additional skill reference # Provider Manage secret-free connection identities and produce a `clade.execution/v1` preview before changing execution selection. Read `prompt.md` for the semantic workflow and only the matching file under `surfaces/` for native configuration mechanics. ## Delivery completion If this workflow changes files or external state: - Inspect the real final state before responding, including `git status` for a repository task. - Never report `DONE` while task-owned changes are uncommitted. Use or continue `$clade:delivery` and create a repository-compliant checkpoint or preserve the work when committing is unavailable. - When the user request or trusted repository policy makes publication, deployment, or live verification part of the task, do not silently downgrade the result to local-only work. - If a required delivery transition lacks authority, credentials, a destination, or reachable external state, report `BLOCKED` or `NEEDS_CONTEXT` rather than appending a "not committed/pushed/deployed" caveat after `DONE`.