diff --git a/config/agentrun.yaml b/config/agentrun.yaml
index e4c1695c..d1a6d90c 100644
--- a/config/agentrun.yaml
+++ b/config/agentrun.yaml
@@ -804,6 +804,33 @@ controlPlane:
             key: config.toml
           providerCredential:
             profile: codex
+        - id: provider-dsflash-go-auth-json
+          sourceMode: file
+          sourceRef: /root/.codex-opencode-go-all/auth.json
+          targetRef:
+            namespace: agentrun-v02
+            name: agentrun-v01-provider-dsflash-go
+            key: auth.json
+          providerCredential:
+            profile: dsflash-go
+        - id: provider-dsflash-go-config
+          sourceMode: file
+          sourceRef: agentrun/provider-dsflash-go-config.toml
+          targetRef:
+            namespace: agentrun-v02
+            name: agentrun-v01-provider-dsflash-go
+            key: config.toml
+          providerCredential:
+            profile: dsflash-go
+        - id: provider-dsflash-go-model-catalog
+          sourceMode: file
+          sourceRef: /root/.codex-opencode-go-all/model-catalog.json
+          targetRef:
+            namespace: agentrun-v02
+            name: agentrun-v01-provider-dsflash-go
+            key: model-catalog.json
+          providerCredential:
+            profile: dsflash-go
         - id: tool-github-pr-token
           sourceRef: /root/.config/unidesk/github.env
           sourceKey: GH_TOKEN
diff --git a/config/hwlab-node-lanes.yaml b/config/hwlab-node-lanes.yaml
index 5b9fc17a..da86f89b 100644
--- a/config/hwlab-node-lanes.yaml
+++ b/config/hwlab-node-lanes.yaml
@@ -985,7 +985,7 @@ lanes:
           secretNamespace: agentrun-v02
           repoUrlFrom: runtimeGitReadUrl
           providerIdFrom: runtimeNodeId
-          defaultProviderProfile: codex
+          defaultProviderProfile: dsflash-go
           codexStdioSupervisor: repo-owned
         publicExposure:
           mode: pk01-caddy-frp
diff --git a/scripts/src/hwlab-node-web-sentinel-cicd.ts b/scripts/src/hwlab-node-web-sentinel-cicd.ts
index 026ff16d..c4aeb367 100644
--- a/scripts/src/hwlab-node-web-sentinel-cicd.ts
+++ b/scripts/src/hwlab-node-web-sentinel-cicd.ts
@@ -2611,7 +2611,7 @@ export function stringAt(value: unknown, path: string): string {
   return found;
 }
 
-function nonEmptyString(value: unknown): string | null {
+export function nonEmptyString(value: unknown): string | null {
   return typeof value === "string" && value.length > 0 ? value : null;
 }
 
diff --git a/scripts/src/hwlab-node-web-sentinel-p5-observe.ts b/scripts/src/hwlab-node-web-sentinel-p5-observe.ts
index c451752c..0646a661 100644
--- a/scripts/src/hwlab-node-web-sentinel-p5-observe.ts
+++ b/scripts/src/hwlab-node-web-sentinel-p5-observe.ts
@@ -21,6 +21,7 @@ import {
   quickVerifyAccountEnv,
   record,
   recordTarget,
+  nonEmptyString,
   secretSourcePaths,
   sentinelCliSuffix,
   shellQuote,