@hasna/switcher 0.1.2 → 0.1.4

package/dist/mcp/index.js

@@ -4,16 +4,63 @@
 // src/mcp.ts
 import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
 import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
-import { z as z2 } from "zod";
+import { z as z3 } from "zod";
 
 // src/domain.ts
+import { z as z2 } from "zod";
+
+// src/model-policy-schema.ts
 import { z } from "zod";
-var VERSION = "0.1.2";
-var harnessSchema = z.enum(["claude", "codex", "grok", "opencode", "opencode2", "pi", "omp", "dsh", "cline", "hermes", "prime-agent", "gemini", "aider", "kilo"]);
-var protocolSchema = z.enum(["anthropic-messages", "openai-responses", "openai-chat", "gemini-generate-content"]);
-var idSchema = z.string().regex(/^[a-zA-Z0-9][a-zA-Z0-9._-]{0,79}$/);
-var label = z.string().min(1).max(200);
-var envRef = z.string().regex(/^SWITCHER_PROVIDER_[A-Z0-9_]+$/);
+var policyModelIdSchema = z.string().min(1).max(300).regex(/^[^\u0000-\u001f\u007f]+$/);
+var modelPolicyRoleSchema = z.enum(["subagent", "fast", "planning", "review", "summary", "compaction", "weak", "editor"]);
+var boundedModelList = z.array(policyModelIdSchema).max(500);
+var aliasSchema = z.string().regex(/^[A-Za-z0-9._/-]{1,120}$/).refine((v) => !["__proto__", "prototype", "constructor"].includes(v));
+var boundedModelMap = z.record(aliasSchema, policyModelIdSchema).superRefine((value, ctx) => {
+  if (Object.keys(value).length > 200)
+    ctx.addIssue({ code: "custom", message: "Model policy maps may contain at most 200 entries." });
+});
+var fallbacksSchema = z.record(policyModelIdSchema, z.array(policyModelIdSchema).max(20)).superRefine((value, ctx) => {
+  if (Object.keys(value).length > 200)
+    ctx.addIssue({ code: "custom", message: "Model policy fallback maps may contain at most 200 entries." });
+});
+var modelPolicySchema = z.object({
+  version: z.literal(1).default(1),
+  roles: z.object({
+    subagent: policyModelIdSchema.optional(),
+    fast: policyModelIdSchema.optional(),
+    planning: policyModelIdSchema.optional(),
+    review: policyModelIdSchema.optional(),
+    summary: policyModelIdSchema.optional(),
+    compaction: policyModelIdSchema.optional(),
+    weak: policyModelIdSchema.optional(),
+    editor: policyModelIdSchema.optional()
+  }).strict().optional(),
+  allowedModels: boundedModelList.optional(),
+  aliases: boundedModelMap.optional(),
+  fallbacks: fallbacksSchema.optional()
+}).strict();
+var routingDecisionSchema = z.enum(["allow", "alias", "reject", "fallback"]);
+var routingEventRoleSchema = z.enum(["main", ...modelPolicyRoleSchema.options]);
+var routingEventSchema = z.object({
+  at: z.string().datetime({ offset: true }),
+  requestId: z.string().regex(/^[A-Za-z0-9][A-Za-z0-9._:-]{0,127}$/),
+  requestedModel: policyModelIdSchema,
+  resolvedModel: policyModelIdSchema.optional(),
+  reportedModel: policyModelIdSchema.optional(),
+  decision: routingDecisionSchema,
+  role: routingEventRoleSchema.optional(),
+  reason: z.string().regex(/^[a-z][a-z0-9_]{0,63}$/).optional(),
+  upstreamStatus: z.number().int().min(100).max(599).optional()
+}).strict();
+var routingEventsSchema = z.array(routingEventSchema).max(1000);
+
+// src/domain.ts
+var VERSION = "0.1.4";
+var harnessSchema = z2.enum(["claude", "codex", "grok", "opencode", "opencode2", "pi", "omp", "dsh", "cline", "hermes", "prime-agent", "gemini", "aider", "kilo"]);
+var protocolSchema = z2.enum(["anthropic-messages", "openai-responses", "openai-chat", "gemini-generate-content"]);
+var idSchema = z2.string().regex(/^[a-zA-Z0-9][a-zA-Z0-9._-]{0,79}$/);
+var label = z2.string().min(1).max(200);
+var envRef = z2.string().regex(/^SWITCHER_PROVIDER_[A-Z0-9_]+$/);
 function endpoint(value) {
   let url;
   try {
@@ -26,74 +73,79 @@ function endpoint(value) {
     throw new Fault(400, "invalid_url", "URL must use HTTPS, contain no credentials/query/fragment, or use HTTP on loopback.");
   return url.href.replace(/\/+$/, "");
 }
-var urlSchema = z.string().max(2000).superRefine((v, ctx) => {
+var urlSchema = z2.string().max(2000).superRefine((v, ctx) => {
   try {
     endpoint(v);
   } catch {
     ctx.addIssue({ code: "custom", message: "Invalid endpoint URL" });
   }
 }).transform(endpoint);
-var modelSchema = z.object({
-  id: z.string().min(1).max(300),
+var modelSchema = z2.object({
+  id: z2.string().min(1).max(300),
   name: label,
-  description: z.string().max(8000).optional(),
-  available: z.boolean().optional(),
-  contextWindow: z.number().int().positive().optional(),
-  maxOutputTokens: z.number().int().positive().optional(),
-  inputModalities: z.array(z.string().max(50)).max(20).optional(),
-  outputModalities: z.array(z.string().max(50)).max(20).optional(),
-  supportedParameters: z.array(z.string().max(100)).max(100).optional(),
-  supportedGenerationMethods: z.array(z.string().min(1).max(100)).max(100).optional()
+  description: z2.string().max(8000).optional(),
+  available: z2.boolean().optional(),
+  contextWindow: z2.number().int().positive().optional(),
+  maxOutputTokens: z2.number().int().positive().optional(),
+  inputModalities: z2.array(z2.string().max(50)).max(20).optional(),
+  outputModalities: z2.array(z2.string().max(50)).max(20).optional(),
+  supportedParameters: z2.array(z2.string().max(100)).max(100).optional(),
+  supportedGenerationMethods: z2.array(z2.string().min(1).max(100)).max(100).optional()
 }).strict();
-var providerInputSchema = z.object({
+var providerInputSchema = z2.object({
   id: idSchema,
   name: label,
   baseUrl: urlSchema,
   protocol: protocolSchema,
   credentialEnv: envRef.optional(),
-  authStyle: z.enum(["bearer", "x-api-key", "api-key"]).default("bearer"),
+  authStyle: z2.enum(["bearer", "x-api-key", "api-key"]).default("bearer"),
   catalogBaseUrl: urlSchema.optional(),
-  catalogFormat: z.enum(["openai", "ollama", "mistral", "together", "fireworks", "dashscope", "gemini", "none"]).optional(),
-  catalogAuthStyle: z.enum(["bearer", "x-api-key", "api-key", "none"]).optional(),
+  catalogFormat: z2.enum(["openai", "ollama", "mistral", "together", "fireworks", "dashscope", "gemini", "none"]).optional(),
+  catalogAuthStyle: z2.enum(["bearer", "x-api-key", "api-key", "none"]).optional(),
   catalogCredentialEnv: envRef.optional(),
-  catalogAccountId: z.string().regex(/^[A-Za-z0-9][A-Za-z0-9._-]{0,127}$/).optional(),
-  modelsPath: z.string().regex(/^[a-zA-Z0-9_/-]+$/).max(200).default("models"),
-  manualModels: z.array(modelSchema).max(1e4).default([])
+  catalogAccountId: z2.string().regex(/^[A-Za-z0-9][A-Za-z0-9._-]{0,127}$/).optional(),
+  modelsPath: z2.string().regex(/^[a-zA-Z0-9_/-]+$/).max(200).default("models"),
+  manualModels: z2.array(modelSchema).max(1e4).default([])
 }).strict().refine((p) => !p.modelsPath.split("/").includes("..") && !p.modelsPath.startsWith("/"), "modelsPath must be relative");
-var providerPresetSchema = z.object({
+var providerPresetSchema = z2.object({
   id: idSchema,
   name: label,
   credentialEnv: envRef.optional(),
-  credentialAliases: z.array(z.string().regex(/^[A-Z][A-Z0-9_]+$/)),
-  protocols: z.array(z.object({
+  credentialAliases: z2.array(z2.string().regex(/^[A-Z][A-Z0-9_]+$/)),
+  protocols: z2.array(z2.object({
     protocol: protocolSchema,
     baseUrl: urlSchema.optional(),
-    authStyle: z.enum(["bearer", "x-api-key", "api-key"]),
+    authStyle: z2.enum(["bearer", "x-api-key", "api-key"]),
     catalogBaseUrl: urlSchema.optional(),
-    catalogFormat: z.enum(["openai", "ollama", "mistral", "together", "fireworks", "dashscope", "gemini", "none"]),
-    catalogAuthStyle: z.enum(["bearer", "x-api-key", "api-key", "none"]).optional(),
-    modelsPath: z.string(),
-    notes: z.array(z.string())
+    catalogFormat: z2.enum(["openai", "ollama", "mistral", "together", "fireworks", "dashscope", "gemini", "none"]),
+    catalogAuthStyle: z2.enum(["bearer", "x-api-key", "api-key", "none"]).optional(),
+    modelsPath: z2.string(),
+    notes: z2.array(z2.string())
   }).strict()).min(1),
-  sources: z.array(z.string().url()),
-  verification: z.literal("documented")
+  sources: z2.array(z2.string().url()),
+  verification: z2.literal("documented")
 }).strict();
-var profileInputSchema = z.object({
+var profileInputSchema = z2.object({
   id: idSchema,
   name: label,
   providerId: idSchema,
   harness: harnessSchema,
-  model: z.string().min(1).max(300)
+  model: z2.string().min(1).max(300),
+  modelPolicy: modelPolicySchema.optional()
 }).strict();
-var runInputSchema = z.object({
+var runInputSchema = z2.object({
+  modelPolicyVersion: z2.literal(1),
   profileId: idSchema,
   harness: harnessSchema,
-  model: z.string().min(1).max(300),
-  planToken: z.string().regex(/^[a-f0-9]{64}$/)
+  model: z2.string().min(1).max(300),
+  modelPolicy: modelPolicySchema.optional(),
+  planToken: z2.string().regex(/^[a-f0-9]{64}$/)
 }).strict();
-var runUpdateSchema = z.object({
-  status: z.enum(["exited", "failed", "interrupted"]),
-  exitCode: z.number().int().min(0).max(255)
+var runUpdateSchema = z2.object({
+  status: z2.enum(["exited", "failed", "interrupted"]),
+  exitCode: z2.number().int().min(0).max(255),
+  routingEvents: routingEventsSchema.optional(),
+  routingEventsDropped: z2.number().int().min(0).max(1e6).optional()
 }).strict();
 
 class Fault extends Error {
@@ -147,7 +199,7 @@ async function boundedJson(response, maxBytes = MAX_BYTES) {
 }
 
 // src/sdk.ts
-import { resolveCredential } from "@hasna/contracts/client";
+import { createClientTransport } from "@hasna/contracts/client";
 
 // src/presets.ts
 var route = (protocol, baseUrl, options = {}) => ({
@@ -269,6 +321,7 @@ function apiError(status, data, apiKey) {
 
 class SwitcherClient {
   options;
+  transport;
   baseUrl;
   constructor(options) {
     this.baseUrl = endpoint(options.baseUrl).replace(/\/v1$/, "");
@@ -276,9 +329,50 @@ class SwitcherClient {
       throw new Error("Switcher API key is required.");
     this.options = { ...options };
   }
+  static fromEnvironment(env = process.env, options = {}) {
+    const shared = createClientTransport("switcher", env, {
+      credentials: options.credentials,
+      timeoutMs: options.timeoutMs ?? 120000,
+      retry: false,
+      fetchImpl: async (input, init) => {
+        const address = String(input).replace(/\/v1\/(health|ready|version)$/, "/$1");
+        const key = new Headers(init?.headers).get("x-api-key") ?? "";
+        let response;
+        try {
+          response = await (options.fetch ?? fetch)(address, init);
+        } catch {
+          throw new SwitcherError(0, "connection_failed", "Switcher API request failed; check endpoint and service availability.");
+        }
+        if (response.status === 401 || response.status === 403) {
+          await response.body?.cancel().catch(() => {});
+          throw new SwitcherError(response.status, "api_error", `Switcher API returned HTTP ${response.status}. Check the configured credential; no alternate identity was selected.`);
+        }
+        let data;
+        try {
+          data = await boundedJson(response);
+        } catch {
+          throw new SwitcherError(response.status, "invalid_response", "Switcher API returned invalid JSON.");
+        }
+        if (!response.ok)
+          throw apiError(response.status, data, key);
+        return Response.json(data);
+      }
+    });
+    const client = new SwitcherClient({ baseUrl: shared.resolution.baseUrl, apiKey: () => {
+      throw new Error("Shared credential transport was not invoked.");
+    } });
+    client.transport = shared.client;
+    return client;
+  }
   async request(method, path, body, options = {}) {
     if (!/^\/v1\/[a-zA-Z0-9/?&=._%+-]+$/.test(path) && !["/health", "/ready", "/version"].includes(path) || path.includes(".."))
       throw new Error("Invalid API path.");
+    if (this.transport)
+      return this.transport.request(method, path.startsWith("/v1/") ? path.slice(3) : path, body, {
+        idempotencyKey: method === "GET" ? undefined : options.idempotencyKey ?? crypto.randomUUID(),
+        headers: options.version === undefined ? undefined : { "if-match": String(options.version) },
+        retry: false
+      });
     const apiKey = typeof this.options.apiKey === "function" ? this.options.apiKey() : this.options.apiKey;
     if (!apiKey || /[\r\n]/.test(apiKey))
       throw new Error("Switcher API key is required.");
@@ -369,22 +463,19 @@ class SwitcherClient {
     return this.request("GET", `/v1/runs/${encodeURIComponent(id)}`);
   }
   createRun(input, idempotencyKey) {
-    return this.request("POST", "/v1/runs", input, { idempotencyKey });
+    return this.request("POST", "/v1/runs", { ...input, modelPolicyVersion: 1 }, { idempotencyKey });
   }
   finishRun(id, version, input, idempotencyKey) {
     return this.request("PATCH", `/v1/runs/${encodeURIComponent(id)}`, input, { version, idempotencyKey });
   }
 }
-function clientFromEnv(env = process.env) {
-  const credential = () => resolveCredential("switcher", Object.fromEntries(Object.entries(env).filter(([name]) => name === "HASNA_SWITCHER_API_KEY")), { keychain: { enabled: false } })?.apiKey ?? "";
-  if (!env.HASNA_SWITCHER_API_URL || !credential())
-    throw new Error("Set HASNA_SWITCHER_API_URL and HASNA_SWITCHER_API_KEY; no local database fallback is available.");
-  return new SwitcherClient({ baseUrl: env.HASNA_SWITCHER_API_URL, apiKey: credential });
+function clientFromEnv(env = process.env, options = {}) {
+  return SwitcherClient.fromEnvironment(env, options);
 }
 
 // src/mcp.ts
 var server = new McpServer({ name: "switcher", version: VERSION });
-var page = { limit: z2.number().int().min(1).max(1000).optional(), offset: z2.number().int().nonnegative().optional(), search: z2.string().optional() };
+var page = { limit: z3.number().int().min(1).max(1000).optional(), offset: z3.number().int().nonnegative().optional(), search: z3.string().optional() };
 function tool(name, description, schema, run) {
   server.tool(name, description, schema, async (input) => {
     try {
@@ -395,26 +486,26 @@ function tool(name, description, schema, run) {
   });
 }
 tool("providers_list", "List provider profiles.", page, (p) => clientFromEnv().listProviders(p));
-tool("providers_get", "Get a provider.", { id: z2.string() }, (p) => clientFromEnv().getProvider(p.id));
+tool("providers_get", "Get a provider.", { id: z3.string() }, (p) => clientFromEnv().getProvider(p.id));
 tool("providers_create", "Create a provider using credential environment references only.", providerInputSchema.innerType().shape, (p) => clientFromEnv().createProvider(p));
-tool("providers_update", "Replace a provider at its current version.", { provider: providerInputSchema, version: z2.number().int() }, (p) => clientFromEnv().updateProvider(p.provider, p.version));
-tool("providers_delete", "Delete an unreferenced provider.", { id: z2.string(), version: z2.number().int() }, (p) => clientFromEnv().deleteProvider(p.id, p.version));
-tool("models_list", "List catalog with capability information.", { id: z2.string(), ...page }, (p) => {
+tool("providers_update", "Replace a provider at its current version.", { provider: providerInputSchema, version: z3.number().int() }, (p) => clientFromEnv().updateProvider(p.provider, p.version));
+tool("providers_delete", "Delete an unreferenced provider.", { id: z3.string(), version: z3.number().int() }, (p) => clientFromEnv().deleteProvider(p.id, p.version));
+tool("models_list", "List catalog with capability information.", { id: z3.string(), ...page }, (p) => {
   const { id, ...rest } = p;
   return clientFromEnv().listModels(id, rest);
 });
-tool("models_refresh", "Discover provider models.", { id: z2.string() }, (p) => clientFromEnv().refreshModels(p.id));
+tool("models_refresh", "Discover provider models.", { id: z3.string() }, (p) => clientFromEnv().refreshModels(p.id));
 tool("profiles_list", "List harness launch profiles.", page, (p) => clientFromEnv().listProfiles(p));
-tool("profiles_get", "Get a harness profile.", { id: z2.string() }, (p) => clientFromEnv().getProfile(p.id));
+tool("profiles_get", "Get a harness profile.", { id: z3.string() }, (p) => clientFromEnv().getProfile(p.id));
 tool("profiles_create", "Create a harness launch profile.", profileInputSchema.shape, (p) => clientFromEnv().createProfile(p));
-tool("profiles_update", "Replace a harness profile at its version.", { profile: profileInputSchema, version: z2.number().int() }, (p) => clientFromEnv().updateProfile(p.profile, p.version));
-tool("profiles_delete", "Delete a profile without run history.", { id: z2.string(), version: z2.number().int() }, (p) => clientFromEnv().deleteProfile(p.id, p.version));
-tool("launch_plan", "Validate a local launch plan; does not execute a remote process.", { profileId: z2.string() }, (p) => clientFromEnv().launchPlan(p.profileId));
+tool("profiles_update", "Replace a harness profile at its version.", { profile: profileInputSchema, version: z3.number().int() }, (p) => clientFromEnv().updateProfile(p.profile, p.version));
+tool("profiles_delete", "Delete a profile without run history.", { id: z3.string(), version: z3.number().int() }, (p) => clientFromEnv().deleteProfile(p.id, p.version));
+tool("launch_plan", "Validate a local launch plan; does not execute a remote process.", { profileId: z3.string() }, (p) => clientFromEnv().launchPlan(p.profileId));
 tool("runs_list", "List launch metadata.", page, (p) => clientFromEnv().listRuns(p));
-tool("runs_get", "Get launch metadata.", { id: z2.string() }, (p) => clientFromEnv().getRun(p.id));
+tool("runs_get", "Get launch metadata.", { id: z3.string() }, (p) => clientFromEnv().getRun(p.id));
 if (process.argv.includes("--version"))
   console.log(VERSION);
 else if (process.argv.includes("--help"))
-  console.log("switcher-mcp: authenticated Switcher API tools over MCP stdio. Requires HASNA_SWITCHER_API_URL and HASNA_SWITCHER_API_KEY.");
+  console.log("switcher-mcp: authenticated Switcher API tools over MCP stdio. Resolves API URL/key through @hasna/contracts (Keychain, canonical config/credentials, or environment).");
 else
   await server.connect(new StdioServerTransport);

package/dist/model-policy-schema.d.ts

@@ -0,0 +1,137 @@
+import { z } from "zod";
+/** Model references are opaque provider IDs, never prompts or credentials. */
+export declare const policyModelIdSchema: z.ZodString;
+export declare const modelPolicyRoleSchema: z.ZodEnum<["subagent", "fast", "planning", "review", "summary", "compaction", "weak", "editor"]>;
+export type ModelPolicyRole = z.infer<typeof modelPolicyRoleSchema>;
+export declare const modelPolicySchema: z.ZodObject<{
+    version: z.ZodDefault<z.ZodLiteral<1>>;
+    roles: z.ZodOptional<z.ZodObject<{
+        subagent: z.ZodOptional<z.ZodString>;
+        fast: z.ZodOptional<z.ZodString>;
+        planning: z.ZodOptional<z.ZodString>;
+        review: z.ZodOptional<z.ZodString>;
+        summary: z.ZodOptional<z.ZodString>;
+        compaction: z.ZodOptional<z.ZodString>;
+        weak: z.ZodOptional<z.ZodString>;
+        editor: z.ZodOptional<z.ZodString>;
+    }, "strict", z.ZodTypeAny, {
+        subagent?: string | undefined;
+        fast?: string | undefined;
+        planning?: string | undefined;
+        review?: string | undefined;
+        summary?: string | undefined;
+        compaction?: string | undefined;
+        weak?: string | undefined;
+        editor?: string | undefined;
+    }, {
+        subagent?: string | undefined;
+        fast?: string | undefined;
+        planning?: string | undefined;
+        review?: string | undefined;
+        summary?: string | undefined;
+        compaction?: string | undefined;
+        weak?: string | undefined;
+        editor?: string | undefined;
+    }>>;
+    allowedModels: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+    aliases: z.ZodOptional<z.ZodEffects<z.ZodRecord<z.ZodEffects<z.ZodString, string, string>, z.ZodString>, Record<string, string>, Record<string, string>>>;
+    fallbacks: z.ZodOptional<z.ZodEffects<z.ZodRecord<z.ZodString, z.ZodArray<z.ZodString, "many">>, Record<string, string[]>, Record<string, string[]>>>;
+}, "strict", z.ZodTypeAny, {
+    version: 1;
+    roles?: {
+        subagent?: string | undefined;
+        fast?: string | undefined;
+        planning?: string | undefined;
+        review?: string | undefined;
+        summary?: string | undefined;
+        compaction?: string | undefined;
+        weak?: string | undefined;
+        editor?: string | undefined;
+    } | undefined;
+    allowedModels?: string[] | undefined;
+    aliases?: Record<string, string> | undefined;
+    fallbacks?: Record<string, string[]> | undefined;
+}, {
+    version?: 1 | undefined;
+    roles?: {
+        subagent?: string | undefined;
+        fast?: string | undefined;
+        planning?: string | undefined;
+        review?: string | undefined;
+        summary?: string | undefined;
+        compaction?: string | undefined;
+        weak?: string | undefined;
+        editor?: string | undefined;
+    } | undefined;
+    allowedModels?: string[] | undefined;
+    aliases?: Record<string, string> | undefined;
+    fallbacks?: Record<string, string[]> | undefined;
+}>;
+export type ModelPolicy = z.infer<typeof modelPolicySchema>;
+export declare const routingDecisionSchema: z.ZodEnum<["allow", "alias", "reject", "fallback"]>;
+export declare const routingEventRoleSchema: z.ZodEnum<["main", "subagent", "fast", "planning", "review", "summary", "compaction", "weak", "editor"]>;
+export declare const routingEventSchema: z.ZodObject<{
+    at: z.ZodString;
+    requestId: z.ZodString;
+    requestedModel: z.ZodString;
+    resolvedModel: z.ZodOptional<z.ZodString>;
+    reportedModel: z.ZodOptional<z.ZodString>;
+    decision: z.ZodEnum<["allow", "alias", "reject", "fallback"]>;
+    role: z.ZodOptional<z.ZodEnum<["main", "subagent", "fast", "planning", "review", "summary", "compaction", "weak", "editor"]>>;
+    reason: z.ZodOptional<z.ZodString>;
+    upstreamStatus: z.ZodOptional<z.ZodNumber>;
+}, "strict", z.ZodTypeAny, {
+    at: string;
+    requestId: string;
+    requestedModel: string;
+    decision: "allow" | "alias" | "reject" | "fallback";
+    resolvedModel?: string | undefined;
+    reportedModel?: string | undefined;
+    role?: "main" | "subagent" | "fast" | "planning" | "review" | "summary" | "compaction" | "weak" | "editor" | undefined;
+    reason?: string | undefined;
+    upstreamStatus?: number | undefined;
+}, {
+    at: string;
+    requestId: string;
+    requestedModel: string;
+    decision: "allow" | "alias" | "reject" | "fallback";
+    resolvedModel?: string | undefined;
+    reportedModel?: string | undefined;
+    role?: "main" | "subagent" | "fast" | "planning" | "review" | "summary" | "compaction" | "weak" | "editor" | undefined;
+    reason?: string | undefined;
+    upstreamStatus?: number | undefined;
+}>;
+export type RoutingEvent = z.infer<typeof routingEventSchema>;
+export declare const routingEventsSchema: z.ZodArray<z.ZodObject<{
+    at: z.ZodString;
+    requestId: z.ZodString;
+    requestedModel: z.ZodString;
+    resolvedModel: z.ZodOptional<z.ZodString>;
+    reportedModel: z.ZodOptional<z.ZodString>;
+    decision: z.ZodEnum<["allow", "alias", "reject", "fallback"]>;
+    role: z.ZodOptional<z.ZodEnum<["main", "subagent", "fast", "planning", "review", "summary", "compaction", "weak", "editor"]>>;
+    reason: z.ZodOptional<z.ZodString>;
+    upstreamStatus: z.ZodOptional<z.ZodNumber>;
+}, "strict", z.ZodTypeAny, {
+    at: string;
+    requestId: string;
+    requestedModel: string;
+    decision: "allow" | "alias" | "reject" | "fallback";
+    resolvedModel?: string | undefined;
+    reportedModel?: string | undefined;
+    role?: "main" | "subagent" | "fast" | "planning" | "review" | "summary" | "compaction" | "weak" | "editor" | undefined;
+    reason?: string | undefined;
+    upstreamStatus?: number | undefined;
+}, {
+    at: string;
+    requestId: string;
+    requestedModel: string;
+    decision: "allow" | "alias" | "reject" | "fallback";
+    resolvedModel?: string | undefined;
+    reportedModel?: string | undefined;
+    role?: "main" | "subagent" | "fast" | "planning" | "review" | "summary" | "compaction" | "weak" | "editor" | undefined;
+    reason?: string | undefined;
+    upstreamStatus?: number | undefined;
+}>, "many">;
+/** Stable object-key order; ordered fallback arrays retain their precedence. */
+export declare function canonicalPolicyJSON(value: unknown): string;

package/dist/model-policy.d.ts

@@ -0,0 +1,31 @@
+import { type Model } from "./domain";
+export declare const MODEL_POLICY_VERSION: 1;
+export type ModelRole = "subagent" | "fast" | "planning" | "review" | "summary" | "compaction" | "weak" | "editor";
+export type ModelPolicy = {
+    version?: 1;
+    roles?: Partial<Record<ModelRole, string>>;
+    allowedModels?: string[];
+    aliases?: Record<string, string>;
+    fallbacks?: Record<string, string[]>;
+};
+export type CompiledModelPolicy = {
+    version: 1;
+    model: string;
+    roles: Record<ModelRole, string>;
+    allowedModels: string[];
+    aliases: Record<string, string>;
+    fallbacks: Record<string, string[]>;
+    digest: string;
+};
+export type ModelGuidanceContext = {
+    harness: string;
+    providerId?: string;
+    baseUrl?: string;
+    model: string;
+    compiled: CompiledModelPolicy;
+    catalogPath?: string;
+};
+export declare function compileModelPolicy(model: string, catalog: readonly Model[], policy?: ModelPolicy): CompiledModelPolicy;
+export declare function resolvePolicyModel(compiled: CompiledModelPolicy, requested: string): string;
+export declare function renderModelGuidance(context: ModelGuidanceContext): string;
+export declare function injectModelGuidance(protocol: "anthropic-messages" | "openai-chat" | "openai-responses" | "gemini-generate-content", body: unknown, guidance: string, operation?: string): unknown;

package/dist/native-model-policy.d.ts

@@ -0,0 +1,23 @@
+/** Pure compilation of the documented native model-policy surfaces.
+ *
+ * This module deliberately does not launch processes, read configuration, or
+ * infer provider aliases. Callers provide the exact model IDs they have
+ * already selected and may then serialize the returned env/config values.
+ */
+export declare const nativeRoles: readonly ["main", "subagent", "fast", "planning", "review", "summary", "compaction", "weak", "editor"];
+export type NativeRole = typeof nativeRoles[number];
+export type NativePolicyHarness = "claude" | "codex" | "grok" | "opencode" | "opencode2" | "omp" | "hermes" | "aider" | "kilo" | "gemini" | "cline" | "dsh" | "pi" | "prime-agent";
+export type NativeModelPolicyInput = {
+    harness: NativePolicyHarness;
+    mainModel: string;
+    roles?: Partial<Record<NativeRole, string>>;
+    version?: string;
+};
+export type NativeModelPolicy = {
+    harness: NativePolicyHarness;
+    env: Record<string, string>;
+    config: Record<string, unknown>;
+    unsupportedRoles: NativeRole[];
+};
+/** Compile exact role assignments into native settings/env without inventing knobs. */
+export declare function compileNativeModelPolicy(input: NativeModelPolicyInput): NativeModelPolicy;

package/dist/opencode-model-policy.d.ts

@@ -0,0 +1,33 @@
+import type { ModelPolicy } from "./model-policy-schema";
+type Dict = Record<string, unknown>;
+export type OpenCodeRole = "main" | "subagent" | "planning" | "summary" | "compaction";
+export type OpenCodeCompiledRoles = Partial<Record<OpenCodeRole, string>>;
+export type PreservedOpenCodeAgent = Dict & {
+    name: string;
+};
+export type OpenCodeModelPolicyInput = {
+    providerId: string;
+    mainModel: string;
+    roles?: OpenCodeCompiledRoles | ModelPolicy["roles"];
+    preservedAgents?: PreservedOpenCodeAgent[];
+    /** OpenCode 2's native `agents` table or legacy OpenCode's `agent` table. */
+    format?: "v2" | "legacy";
+};
+export type OpenCodeModelPolicyResult = {
+    model: string;
+    agents: PreservedOpenCodeAgent[];
+    /** Only native OpenCode fields are emitted. */
+    config: {
+        model: string;
+        agents?: Record<string, Dict>;
+        agent?: Record<string, Dict>;
+    };
+};
+/**
+ * Merge Switcher routing into native OpenCode agent declarations. Prompts,
+ * permissions, modes and other native fields are copied without alteration.
+ */
+export declare function compileOpenCodeModelPolicy(input: OpenCodeModelPolicyInput): OpenCodeModelPolicyResult;
+/** Match OpenCode's explicit agent selection without interpreting prompt values as flags. */
+export declare function openCodeInvocationModel(args: readonly string[], policy: OpenCodeModelPolicyResult, defaultAgent?: string): string;
+export {};

package/dist/ori-model-policy.d.ts

@@ -0,0 +1,8 @@
+import type { PreparedLaunch } from "./harness-types";
+/** Execute the verified native launch after Ori finishes its OpenRouter setup.
+ * Credentials are remapped from process environment, never written into the shim. */
+export declare function prepareOriModelPolicy(target: "codex" | "grok", prepared: Pick<PreparedLaunch, "executable" | "args" | "env">): {
+    name: "codex" | "grok";
+    env: Record<string, string>;
+    script: string;
+};