@miller-tech/uap 1.221.0 → 2.0.0

package/dist/cli/deliver.d.ts

@@ -324,6 +324,40 @@ export declare function resolveTierModel(routingId: string | undefined, instruct
     tier: TaskComplexity;
     preset: string;
 } | null;
+/**
+ * The tier-model resolution with an EXPLICIT preset id — no env fallback.
+ * Used when the routing id has already been resolved through the G1
+ * precedence chain (CLI > config > criticality > env).
+ */
+export declare function resolveTierModelById(id: string, instruction: string): {
+    model: string;
+    tier: TaskComplexity;
+    preset: string;
+} | null;
+/**
+ * G1 (deliver-hardening 2026-07-13): `criticality` shorthand → routing preset.
+ * money = cost-tiered (local-first, escalate by complexity); normal =
+ * sonnet-5-tiered (balanced); sandbox = NO tier routing — the executor stays
+ * on the free local default, and the declaration SUPPRESSES ambient env
+ * routing (config-authoritative means a declared posture beats a stale shell).
+ */
+export declare const CRITICALITY_ROUTING: Record<'money' | 'normal' | 'sandbox', string | null>;
+export type RoutingSource = 'cli' | 'config' | 'criticality' | 'env';
+/**
+ * Resolve which routing preset (if any) governs this run, and where the choice
+ * came from. Config-authoritative: a DECLARED routing/criticality beats the
+ * ambient UAP_DELIVER_ROUTING; an explicit --routing beats config. PURE —
+ * unit-tested.
+ */
+export declare function resolveRoutingId(opts: {
+    cliRouting?: string;
+    cfgRouting?: unknown;
+    cfgCriticality?: unknown;
+    envRouting?: string;
+}): {
+    id: string | null;
+    source: RoutingSource | null;
+};
 /**
  * Explorer candidates act through the file-block applier, which the agentic
  * tool-loop bypasses — agentic runs must use single-candidate turns. PURE,

package/dist/cli/deliver.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"deliver.d.ts","sourceRoot":"","sources":["../../src/cli/deliver.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AA4BH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AAuBzD;;;;GAIG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,EAAE;IACvC,aAAa,EAAE,OAAO,CAAC;IACvB,WAAW,EAAE,OAAO,CAAC;IACrB,aAAa,EAAE,OAAO,CAAC;IACvB,eAAe,EAAE,OAAO,CAAC;IACzB;;;;;OAKG;IACH,gBAAgB,CAAC,EAAE,OAAO,CAAC;CAC5B,GAAG;IAAE,iBAAiB,EAAE,OAAO,CAAC;IAAC,aAAa,EAAE,OAAO,CAAC;IAAC,YAAY,EAAE,OAAO,CAAA;CAAE,CAQhF;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,0BAA0B,CAAC,IAAI,EAAE;IAC/C,iBAAiB,EAAE,OAAO,CAAC;IAC3B,aAAa,EAAE,OAAO,CAAC;IACvB,cAAc,EAAE,OAAO,CAAC;IACxB,eAAe,EAAE,OAAO,CAAC;CAC1B,GAAG,OAAO,CAEV;AAED;;;;;GAKG;AACH,wBAAgB,yBAAyB,CAAC,IAAI,EAAE;IAC9C,iBAAiB,EAAE,OAAO,CAAC;IAC3B,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,iBAAiB,EAAE,OAAO,CAAC;CAC5B,GAAG,OAAO,CAMV;AAED;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,wBAAgB,sBAAsB,CAAC,IAAI,EAAE;IAC3C,iBAAiB,EAAE,OAAO,CAAC;IAC3B,YAAY,EAAE,OAAO,CAAC;CACvB,GAAG,OAAO,CAMV;AAED;;;;;;GAMG;AACH,wBAAgB,sBAAsB,CAAC,IAAI,EAAE;IAC3C,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,eAAe,EAAE,MAAM,CAAC;IACxB,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB,GAAG,MAAM,GAAG,IAAI,CAIhB;AAED;;;;;;;;;GASG;AACH,wBAAgB,2BAA2B,CAAC,IAAI,EAAE;IAChD,WAAW,EAAE,OAAO,CAAC;IACrB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,eAAe,EAAE,OAAO,CAAC;IACzB,kBAAkB,EAAE,OAAO,CAAC;IAC5B,wBAAwB,EAAE,OAAO,CAAC;CACnC,GAAG,OAAO,CAMV;AAED;;;;;;GAMG;AACH;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,wBAAgB,eAAe,CAC7B,IAAI,EAAE,OAAO,GAAG,SAAS,EACzB,GAAG,GAAE,MAAM,CAAC,UAAwB,GACnC,OAAO,CAIT;AAED,wBAAgB,iBAAiB,CAC/B,WAAW,EAAE,KAAK,CAAC;IAAE,EAAE,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,OAAO,CAAA;CAAE,CAAC,EACnD,WAAW,EAAE,GAAG,CAAC,MAAM,CAAC,GACvB,MAAM,GAAG,IAAI,CAIf;AAID,OAAO,EAAE,wBAAwB,EAAE,MAAM,mCAAmC,CAAC;AA8C7E;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,wBAAgB,qBAAqB,CACnC,QAAQ,GAAE,MAAM,MAAM,GAAG,SAA2B,GACnD,MAAM,CAMR;AAyBD,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,+BAA+B,CAAC;AA0B9D,MAAM,WAAW,cAAc;IAC7B;;;;OAIG;IACH,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAC5B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB;;uEAEmE;IACnE,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf;;;;8BAI0B;IAC1B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB;;;mFAG+E;IAC/E,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,iDAAiD;IACjD,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,mFAAmF;IACnF,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,oFAAoF;IACpF,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB;mFAC+E;IAC/E,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,oFAAoF;IACpF,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB;;sCAEkC;IAClC,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,+FAA+F;IAC/F,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,4EAA4E;IAC5E,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,6EAA6E;IAC7E,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,qEAAqE;IACrE,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,yDAAyD;IACzD,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,yEAAyE;IACzE,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,2EAA2E;IAC3E,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,8GAA8G;IAC9G,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,8GAA8G;IAC9G,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,wGAAwG;IACxG,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,+FAA+F;IAC/F,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,yFAAyF;IACzF,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,yGAAyG;IACzG,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,6CAA6C;IAC7C,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,+CAA+C;IAC/C,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;+EAC2E;IAC3E,IAAI,CAAC,EAAE,OAAO,CAAC;IACf;oEACgE;IAChE,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB;;;gCAG4B;IAC5B,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB;sDACkD;IAClD,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB;uFACmF;IACnF,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,0DAA0D;IAC1D,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,+DAA+D;IAC/D,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,iFAAiF;IACjF,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,6EAA6E;IAC7E,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB;;+CAE2C;IAC3C,IAAI,CAAC,EAAE,OAAO,CAAC;IACf;yDACqD;IACrD,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB;;;4CAGwC;IACxC,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB;;;yEAGqE;IACrE,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB;+EAC2E;IAC3E,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB;6DACyD;IACzD,OAAO,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;IAC3B,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,0FAA0F;IAC1F,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,IAAI,CAAC,EAAE,OAAO,CAAC;CAChB;AAwCD;;;;;;;;GAQG;AACH,wBAAgB,gBAAgB,CAC9B,SAAS,EAAE,MAAM,GAAG,SAAS,EAC7B,WAAW,EAAE,MAAM,GAClB;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,cAAc,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAOhE;AAWD;;;;GAIG;AACH,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,OAAO,EAAE,UAAU,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAE7F;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,sBAAsB,CAAC,IAAI,EAAE;IAC3C,iBAAiB,EAAE,OAAO,GAAG,SAAS,CAAC;IACvC,eAAe,EAAE,OAAO,GAAG,SAAS,CAAC;IACrC,OAAO,EAAE,OAAO,CAAC;IACjB,YAAY,EAAE,MAAM,GAAG,SAAS,CAAC;IACjC,SAAS,EAAE,MAAM,OAAO,CAAC;CAC1B,GAAG,OAAO,CAMV;AAED;;;;;GAKG;AACH,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,cAAc,GAAG,OAAO,CAapE;AAED;;;GAGG;AACH,wBAAgB,aAAa,CAAC,OAAO,EAAE,cAAc,EAAE,IAAI,EAAE,QAAQ,GAAG,IAAI,CAiB3E;AA4BD,OAAO,EACL,uBAAuB,EACvB,aAAa,EACb,sBAAsB,EACtB,oBAAoB,EACpB,qBAAqB,GACtB,MAAM,0BAA0B,CAAC;AAElC;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,wBAAgB,sBAAsB,CACpC,WAAW,EAAE,MAAM,EACnB,IAAI,GAAE,MAAsC,GAC3C,OAAO,CAeT;AAED;;;;GAIG;AACH,wBAAgB,mBAAmB,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,GAAG,OAAO,CAcjE;AAwDD;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,yBAAyB,CACvC,WAAW,EAAE,MAAM,EACnB,OAAO,GAAE,MAAoB,EAC7B,aAAa,GAAE,MAAmB,GACjC;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAwCtC;AAkDD;;;;;;GAMG;AACH,sDAAsD;AACtD,eAAO,MAAM,YAAY,4BAA4B,CAAC;AAEtD;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,CAAC,EAAE,OAAO,GAAG,OAAO,CAEzD;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAgB,kBAAkB,CAAC,WAAW,EAAE,MAAM,EAAE,OAAO,EAAE,cAAc,GAAG,OAAO,CAoDxF;AAED,wBAAgB,wBAAwB,CAAC,WAAW,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,MAAM,GAAG,IAAI,CAU5F;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,oBAAoB,CAClC,WAAW,EAAE,MAAM,EACnB,QAAQ,SAAI,EACZ,OAAO,SAAI,EACX,SAAS,SAAwB,GAChC,MAAM,EAAE,CAkCV;AAYD,kFAAkF;AAClF,wBAAgB,kBAAkB,IAAI;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAEzE;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,kBAAkB,CAAC,WAAW,EAAE,MAAM,GAAG,CAAC,MAAM,IAAI,CAAC,GAAG,IAAI,CAsF3E;AAED,wBAAsB,cAAc,CAAC,WAAW,EAAE,MAAM,EAAE,OAAO,EAAE,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC,CA8MhG;AAED;;;;;;;;;;;;GAYG;AACH;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,eAAO,MAAM,oBAAoB,IAAI,CAAC;AAEtC;;;;;;;GAOG;AACH,wBAAgB,iBAAiB,IAAI,MAAM,GAAG,SAAS,CAOtD;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,kBAAkB,CAChC,gBAAgB,EAAE,MAAM,GAAG,SAAS,EACpC,qBAAqB,SAAI,GACxB;IAAE,gBAAgB,CAAC,EAAE,MAAM,CAAA;CAAE,CAW/B"}
+{"version":3,"file":"deliver.d.ts","sourceRoot":"","sources":["../../src/cli/deliver.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AA6BH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AAuBzD;;;;GAIG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,EAAE;IACvC,aAAa,EAAE,OAAO,CAAC;IACvB,WAAW,EAAE,OAAO,CAAC;IACrB,aAAa,EAAE,OAAO,CAAC;IACvB,eAAe,EAAE,OAAO,CAAC;IACzB;;;;;OAKG;IACH,gBAAgB,CAAC,EAAE,OAAO,CAAC;CAC5B,GAAG;IAAE,iBAAiB,EAAE,OAAO,CAAC;IAAC,aAAa,EAAE,OAAO,CAAC;IAAC,YAAY,EAAE,OAAO,CAAA;CAAE,CAQhF;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,0BAA0B,CAAC,IAAI,EAAE;IAC/C,iBAAiB,EAAE,OAAO,CAAC;IAC3B,aAAa,EAAE,OAAO,CAAC;IACvB,cAAc,EAAE,OAAO,CAAC;IACxB,eAAe,EAAE,OAAO,CAAC;CAC1B,GAAG,OAAO,CAEV;AAED;;;;;GAKG;AACH,wBAAgB,yBAAyB,CAAC,IAAI,EAAE;IAC9C,iBAAiB,EAAE,OAAO,CAAC;IAC3B,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,iBAAiB,EAAE,OAAO,CAAC;CAC5B,GAAG,OAAO,CAMV;AAED;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,wBAAgB,sBAAsB,CAAC,IAAI,EAAE;IAC3C,iBAAiB,EAAE,OAAO,CAAC;IAC3B,YAAY,EAAE,OAAO,CAAC;CACvB,GAAG,OAAO,CAMV;AAED;;;;;;GAMG;AACH,wBAAgB,sBAAsB,CAAC,IAAI,EAAE;IAC3C,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,eAAe,EAAE,MAAM,CAAC;IACxB,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB,GAAG,MAAM,GAAG,IAAI,CAIhB;AAED;;;;;;;;;GASG;AACH,wBAAgB,2BAA2B,CAAC,IAAI,EAAE;IAChD,WAAW,EAAE,OAAO,CAAC;IACrB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,eAAe,EAAE,OAAO,CAAC;IACzB,kBAAkB,EAAE,OAAO,CAAC;IAC5B,wBAAwB,EAAE,OAAO,CAAC;CACnC,GAAG,OAAO,CAMV;AAED;;;;;;GAMG;AACH;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,wBAAgB,eAAe,CAC7B,IAAI,EAAE,OAAO,GAAG,SAAS,EACzB,GAAG,GAAE,MAAM,CAAC,UAAwB,GACnC,OAAO,CAIT;AAED,wBAAgB,iBAAiB,CAC/B,WAAW,EAAE,KAAK,CAAC;IAAE,EAAE,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,OAAO,CAAA;CAAE,CAAC,EACnD,WAAW,EAAE,GAAG,CAAC,MAAM,CAAC,GACvB,MAAM,GAAG,IAAI,CAIf;AAID,OAAO,EAAE,wBAAwB,EAAE,MAAM,mCAAmC,CAAC;AA8C7E;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,wBAAgB,qBAAqB,CACnC,QAAQ,GAAE,MAAM,MAAM,GAAG,SAA2B,GACnD,MAAM,CAMR;AAyBD,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,+BAA+B,CAAC;AA0B9D,MAAM,WAAW,cAAc;IAC7B;;;;OAIG;IACH,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAC5B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB;;uEAEmE;IACnE,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf;;;;8BAI0B;IAC1B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB;;;mFAG+E;IAC/E,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,iDAAiD;IACjD,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,mFAAmF;IACnF,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,oFAAoF;IACpF,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB;mFAC+E;IAC/E,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,oFAAoF;IACpF,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB;;sCAEkC;IAClC,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,+FAA+F;IAC/F,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,4EAA4E;IAC5E,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,6EAA6E;IAC7E,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,qEAAqE;IACrE,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,yDAAyD;IACzD,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,yEAAyE;IACzE,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,2EAA2E;IAC3E,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,8GAA8G;IAC9G,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,8GAA8G;IAC9G,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,wGAAwG;IACxG,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,+FAA+F;IAC/F,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,yFAAyF;IACzF,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,yGAAyG;IACzG,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,6CAA6C;IAC7C,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,+CAA+C;IAC/C,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;+EAC2E;IAC3E,IAAI,CAAC,EAAE,OAAO,CAAC;IACf;oEACgE;IAChE,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB;;;gCAG4B;IAC5B,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB;sDACkD;IAClD,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB;uFACmF;IACnF,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,0DAA0D;IAC1D,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,+DAA+D;IAC/D,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,iFAAiF;IACjF,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,6EAA6E;IAC7E,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB;;+CAE2C;IAC3C,IAAI,CAAC,EAAE,OAAO,CAAC;IACf;yDACqD;IACrD,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB;;;4CAGwC;IACxC,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB;;;yEAGqE;IACrE,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB;+EAC2E;IAC3E,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB;6DACyD;IACzD,OAAO,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;IAC3B,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,0FAA0F;IAC1F,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,IAAI,CAAC,EAAE,OAAO,CAAC;CAChB;AAwCD;;;;;;;;GAQG;AACH,wBAAgB,gBAAgB,CAC9B,SAAS,EAAE,MAAM,GAAG,SAAS,EAC7B,WAAW,EAAE,MAAM,GAClB;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,cAAc,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAIhE;AAED;;;;GAIG;AACH,wBAAgB,oBAAoB,CAClC,EAAE,EAAE,MAAM,EACV,WAAW,EAAE,MAAM,GAClB;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,cAAc,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAKhE;AAED;;;;;;GAMG;AACH,eAAO,MAAM,mBAAmB,EAAE,MAAM,CAAC,OAAO,GAAG,QAAQ,GAAG,SAAS,EAAE,MAAM,GAAG,IAAI,CAIrF,CAAC;AAEF,MAAM,MAAM,aAAa,GAAG,KAAK,GAAG,QAAQ,GAAG,aAAa,GAAG,KAAK,CAAC;AAErE;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE;IACrC,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB,GAAG;IAAE,EAAE,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,MAAM,EAAE,aAAa,GAAG,IAAI,CAAA;CAAE,CAetD;AAWD;;;;GAIG;AACH,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,OAAO,EAAE,UAAU,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAE7F;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,sBAAsB,CAAC,IAAI,EAAE;IAC3C,iBAAiB,EAAE,OAAO,GAAG,SAAS,CAAC;IACvC,eAAe,EAAE,OAAO,GAAG,SAAS,CAAC;IACrC,OAAO,EAAE,OAAO,CAAC;IACjB,YAAY,EAAE,MAAM,GAAG,SAAS,CAAC;IACjC,SAAS,EAAE,MAAM,OAAO,CAAC;CAC1B,GAAG,OAAO,CAMV;AAED;;;;;GAKG;AACH,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,cAAc,GAAG,OAAO,CAapE;AAED;;;GAGG;AACH,wBAAgB,aAAa,CAAC,OAAO,EAAE,cAAc,EAAE,IAAI,EAAE,QAAQ,GAAG,IAAI,CAiB3E;AA4BD,OAAO,EACL,uBAAuB,EACvB,aAAa,EACb,sBAAsB,EACtB,oBAAoB,EACpB,qBAAqB,GACtB,MAAM,0BAA0B,CAAC;AAElC;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,wBAAgB,sBAAsB,CACpC,WAAW,EAAE,MAAM,EACnB,IAAI,GAAE,MAAsC,GAC3C,OAAO,CAeT;AAED;;;;GAIG;AACH,wBAAgB,mBAAmB,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,GAAG,OAAO,CAcjE;AAwDD;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,yBAAyB,CACvC,WAAW,EAAE,MAAM,EACnB,OAAO,GAAE,MAAoB,EAC7B,aAAa,GAAE,MAAmB,GACjC;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAwCtC;AAkDD;;;;;;GAMG;AACH,sDAAsD;AACtD,eAAO,MAAM,YAAY,4BAA4B,CAAC;AAEtD;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,CAAC,EAAE,OAAO,GAAG,OAAO,CAEzD;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAgB,kBAAkB,CAAC,WAAW,EAAE,MAAM,EAAE,OAAO,EAAE,cAAc,GAAG,OAAO,CAoDxF;AAED,wBAAgB,wBAAwB,CAAC,WAAW,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,MAAM,GAAG,IAAI,CAU5F;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,oBAAoB,CAClC,WAAW,EAAE,MAAM,EACnB,QAAQ,SAAI,EACZ,OAAO,SAAI,EACX,SAAS,SAAwB,GAChC,MAAM,EAAE,CAkCV;AAYD,kFAAkF;AAClF,wBAAgB,kBAAkB,IAAI;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAEzE;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,kBAAkB,CAAC,WAAW,EAAE,MAAM,GAAG,CAAC,MAAM,IAAI,CAAC,GAAG,IAAI,CAsF3E;AAED,wBAAsB,cAAc,CAAC,WAAW,EAAE,MAAM,EAAE,OAAO,EAAE,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC,CA8MhG;AAED;;;;;;;;;;;;GAYG;AACH;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,eAAO,MAAM,oBAAoB,IAAI,CAAC;AAEtC;;;;;;;GAOG;AACH,wBAAgB,iBAAiB,IAAI,MAAM,GAAG,SAAS,CAOtD;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,kBAAkB,CAChC,gBAAgB,EAAE,MAAM,GAAG,SAAS,EACpC,qBAAqB,SAAI,GACxB;IAAE,gBAAgB,CAAC,EAAE,MAAM,CAAA;CAAE,CAW/B"}

package/dist/cli/deliver.js

@@ -186,7 +186,7 @@ export function bestKeepFastScore(gateResults, fastRungIds) {
 // Legacy export surface: test/cli/acceptance-verdict.test.ts (and any external
 // consumer) imports the verdict fold from deliver.js — keep the re-export.
 export { resolveAcceptanceVerdict } from '../delivery/mission-acceptance.js';
-import { createAgenticExecutor, noopApplier, selectExecutorMode, lockContractFiles } from '../delivery/agentic-executor.js';
+import { createAgenticExecutor, selectExecutorMode, lockContractFiles } from '../delivery/agentic-executor.js';
 import { createRepairEscalation } from '../delivery/repair-escalation.js';
 import { clearProjectStop, clearStop, finalRunStatus, isRunBudgetExpired, isRunBudgetExplicit, isStopRequested, makeStopLatch, phaseAwareRunBudgetMinutes, requestStop, runBudgetMinutes, loadRunState, newRunId, saveRunState, isEpicResume, MAX_PERSISTED_PHASES } from '../delivery/run-state.js';
 import { planDeliveryPhases, shouldDecompose } from '../delivery/decompose.js';
@@ -279,7 +279,7 @@ import { FilePracticeStore, defaultPracticePath, extractKeywords, retrievePracti
 import { detectRungs, mergeRedetectedRungs, runLadder, runTieredLadder, tierOf, TIER_ORDER, demoteBaselineFailures, baselineRegressions } from '../delivery/verifier-ladder.js';
 import { runDeployDevLadder } from '../delivery/deploy-dev-gate.js';
 import { commitPushAndWatch } from '../delivery/ci-watcher.js';
-import { snapshotTree, restoreTree, disposeSnapshot } from '../delivery/snapshot.js';
+import { snapshotTree, restoreTreeScoped, disposeSnapshot } from '../delivery/snapshot.js';
 import { snapshotProtection } from '../delivery/spec-imports.js';
 import { listGateConfigFiles } from '../delivery/applier.js';
 import { OpenAICompatClient, setModelCallProgress } from '../models/openai-compat-client.js';
@@ -333,12 +333,56 @@ export function resolveTierModel(routingId, instruction) {
     const id = routingId ?? process.env.UAP_DELIVER_ROUTING;
     if (!id)
         return null;
+    return resolveTierModelById(id, instruction);
+}
+/**
+ * The tier-model resolution with an EXPLICIT preset id — no env fallback.
+ * Used when the routing id has already been resolved through the G1
+ * precedence chain (CLI > config > criticality > env).
+ */
+export function resolveTierModelById(id, instruction) {
     const preset = RoutingPresets[id];
     if (!preset)
         return null;
     const tier = tierToRouting(classifyComplexity({ instruction }).tier);
     return { model: resolvePresetModel(preset, { complexity: tier, role: 'executor' }), tier, preset: id };
 }
+/**
+ * G1 (deliver-hardening 2026-07-13): `criticality` shorthand → routing preset.
+ * money = cost-tiered (local-first, escalate by complexity); normal =
+ * sonnet-5-tiered (balanced); sandbox = NO tier routing — the executor stays
+ * on the free local default, and the declaration SUPPRESSES ambient env
+ * routing (config-authoritative means a declared posture beats a stale shell).
+ */
+export const CRITICALITY_ROUTING = {
+    money: 'cost-tiered',
+    normal: 'sonnet-5-tiered',
+    sandbox: null,
+};
+/**
+ * Resolve which routing preset (if any) governs this run, and where the choice
+ * came from. Config-authoritative: a DECLARED routing/criticality beats the
+ * ambient UAP_DELIVER_ROUTING; an explicit --routing beats config. PURE —
+ * unit-tested.
+ */
+export function resolveRoutingId(opts) {
+    if (opts.cliRouting)
+        return { id: opts.cliRouting, source: 'cli' };
+    if (typeof opts.cfgRouting === 'string' && opts.cfgRouting) {
+        return { id: opts.cfgRouting, source: 'config' };
+    }
+    // Object.hasOwn, not `in`: a raw (non-zod) config value like
+    // "criticality": "constructor" would otherwise pass the check via the
+    // prototype chain and yield a FUNCTION as the routing id (review nit).
+    if (typeof opts.cfgCriticality === 'string' && Object.hasOwn(CRITICALITY_ROUTING, opts.cfgCriticality)) {
+        const mapped = CRITICALITY_ROUTING[opts.cfgCriticality];
+        // sandbox maps to null ON PURPOSE: the declaration suppresses ambient env.
+        return { id: mapped, source: 'criticality' };
+    }
+    if (opts.envRouting)
+        return { id: opts.envRouting, source: 'env' };
+    return { id: null, source: null };
+}
 function resolveModel(presetId, endpointOverride) {
     const preset = ModelPresets[presetId];
     if (!preset) {
@@ -1477,20 +1521,49 @@ async function runDeliver(instruction, options) {
     if (!process.env.UAP_HALO_TRACE_PATH) {
         process.env.UAP_HALO_TRACE_PATH = join(projectRoot, '.uap', 'halo', 'traces.jsonl');
     }
-    // Complexity-tier routing: when --routing (or UAP_DELIVER_ROUTING) names a
-    // preset and the user did NOT pin --model, execute on the model the preset
-    // assigns to this task's complexity tier. Explicit --model and a resumed
-    // run's preset always win (user intent / mid-flight consistency).
-    const tierRoute = options.model === undefined && resumeState === null
-        ? resolveTierModel(options.routing, instruction)
+    // Complexity-tier routing: when a routing preset is named and the user did
+    // NOT pin --model, execute on the model the preset assigns to this task's
+    // complexity tier. Explicit --model and a resumed run's preset always win
+    // (user intent / mid-flight consistency).
+    //
+    // G1 (deliver-hardening 2026-07-13): the routing choice itself is now a
+    // PROJECT decision — `.uap.json → delivery.routing` / `delivery.criticality`
+    // / `delivery.model` are config-authoritative (declared config beats ambient
+    // env; an explicit CLI flag beats config). Before this, routing was CLI/env
+    // only, so the choice left no trace in the repo and a stale
+    // UAP_DELIVER_ROUTING in a launching shell silently steered the run.
+    const cfgDeliveryRouting = (() => {
+        try {
+            const d = loadUapConfigRaw(projectRoot)?.delivery;
+            return d ?? {};
+        }
+        catch {
+            return {};
+        }
+    })();
+    const routingChoice = resolveRoutingId({
+        cliRouting: options.routing,
+        cfgRouting: cfgDeliveryRouting.routing,
+        cfgCriticality: cfgDeliveryRouting.criticality,
+        envRouting: process.env.UAP_DELIVER_ROUTING,
+    });
+    const tierRoute = options.model === undefined && resumeState === null && routingChoice.id
+        ? resolveTierModelById(routingChoice.id, instruction)
         : null;
+    const cfgModel = typeof cfgDeliveryRouting.model === 'string' && cfgDeliveryRouting.model
+        ? cfgDeliveryRouting.model
+        : undefined;
     const presetId = options.model ??
         resumeState?.presetId ??
         tierRoute?.model ??
+        cfgModel ??
         process.env.UAP_DELIVER_MODEL ??
         'qwen35-a3b';
     if (tierRoute && !options.dryRun) {
-        console.log(chalk.cyan(`\u26a1 tier routing: '${tierRoute.preset}' \u2192 ${tierRoute.tier} complexity \u2192 ${tierRoute.model}`));
+        console.log(chalk.cyan(`\u26a1 tier routing: '${tierRoute.preset}' (${routingChoice.source}) \u2192 ${tierRoute.tier} complexity \u2192 ${tierRoute.model}`));
+    }
+    else if (!tierRoute && cfgModel && options.model === undefined && !options.dryRun) {
+        console.log(chalk.dim(`  model from .uap.json delivery.model: ${cfgModel}`));
     }
     let maxTurns;
     if (options.maxTurns !== undefined) {
@@ -1907,7 +1980,9 @@ async function runDeliver(instruction, options) {
     // of the hardcoded haiku default — the preset's designated reviewer IS the
     // Generator≠Evaluator choice. resolveJudgePlan still swaps to the alt judge if
     // this collides with the generator, and only uses it on the auto-distinct path.
-    const routingIdForJudge = options.routing ?? process.env.UAP_DELIVER_ROUTING;
+    // The judge follows the SAME resolved routing choice as the executor (G1) —
+    // a config-declared preset must also pick the reviewer, not just the worker.
+    const routingIdForJudge = routingChoice.id ?? undefined;
     const presetForJudge = routingIdForJudge ? RoutingPresets[routingIdForJudge] : undefined;
     const reviewJudgeId = presetForJudge
         ? resolvePhaseChain(presetForJudge, {
@@ -2055,6 +2130,14 @@ async function runDeliver(instruction, options) {
     // those back would silently drop PascalCase files like Config.ts). P1 reads
     // these for verbatim injection.
     const contractPaths = [];
+    // Per-RUN write ledger for the agentic executor (deliver-hardening review
+    // blocker, 2026-07-13): the agentic path installs a no-op applier, so
+    // `filesApplied` is empty by construction and keep-best's E2 scoped restore
+    // had an empty write-set on the DEFAULT executor — a regressed run restored
+    // NOTHING and disposed the snapshot. The tool handlers and the turn-end bash
+    // sweep record real written paths here; the applier below drains them into
+    // ApplyResult.filesWritten so history[].filesApplied is truthful again.
+    const agenticWriteLedger = new Set();
     const executor = agentic
         ? createAgenticExecutor(model, {
             projectRoot,
@@ -2063,6 +2146,7 @@ async function runDeliver(instruction, options) {
             temperature,
             contextTokenBudget: sessionBudget,
             contractFiles: contractLock,
+            writeLedger: agenticWriteLedger,
             // Block oracle tampering: protected test files are read-only to the agent.
             protectedFiles: options.protectTests !== false ? snapshotProtection(projectRoot).protectedFiles : new Set(),
             // Block gate-config / IaC rigging in the agentic path too (it bypasses
@@ -2085,6 +2169,7 @@ async function runDeliver(instruction, options) {
             temperature: 0.2,
             contextTokenBudget: sessionBudget,
             contractFiles: contractLock,
+            writeLedger: agenticWriteLedger,
             protectedFiles: options.protectTests !== false ? snapshotProtection(projectRoot).protectedFiles : new Set(),
             protectGateConfigs: options.protectTests !== false,
             allowBash: options.allowBash === true || process.env.UAP_DELIVER_ALLOW_BASH === '1',
@@ -2408,8 +2493,19 @@ async function runDeliver(instruction, options) {
     const seams = {
         ladderRunner: tieredRunner,
         // The agentic executor mutates the repo directly, so nothing remains for
-        // the file-block applier to materialize.
-        ...(agentic ? { applier: noopApplier } : {}),
+        // the file-block applier to materialize — but the applier is also where
+        // history[].filesApplied comes from, and keep-best's scoped restore reads
+        // exactly that. Drain the run's write ledger so the rollback write-set is
+        // real instead of empty-by-construction (deliver-hardening review, 2026-07-13).
+        ...(agentic
+            ? {
+                applier: async () => {
+                    const filesWritten = [...agenticWriteLedger];
+                    agenticWriteLedger.clear();
+                    return { filesWritten, rejected: [] };
+                },
+            }
+            : {}),
         ...(acceptanceGate ? { acceptanceGate } : {}),
     };
     /** Compose the per-turn hooks with a FRESH escalation controller. */
@@ -3054,6 +3150,9 @@ async function runDeliver(instruction, options) {
                         temperature,
                         contextTokenBudget: sessionBudget,
                         contractFiles: contractLock,
+                        // No writeLedger here: an isolated task's paths are relative to
+                        // ITS tree, and folding them into the projectRoot-scoped ledger
+                        // would mis-target the keep-best scoped restore.
                         protectedFiles: options.protectTests !== false ? snapshotProtection(root).protectedFiles : new Set(),
                         protectGateConfigs: options.protectTests !== false,
                         protectIac,
@@ -3698,15 +3797,43 @@ async function runDeliver(instruction, options) {
         const endCap = compareCapability(readCapabilityBaseline(projectRoot), readCapabilityCurrent(projectRoot));
         const endCapabilityLost = endCap.regressed;
         if (endScore < baselineGateScore || endRegressions.length > 0 || endCapabilityLost) {
+            // E2 (deliver-hardening 2026-07-13): restore ONLY the files this run
+            // wrote. A whole-tree restore in a SHARED worktree reverts other
+            // agents' concurrent legitimate edits — observed live: a frontend
+            // agent's newly written test file was rolled back by someone else's
+            // deliver run. Files the run created after the best point are removed;
+            // everything else is left byte-identical. Known gap: a file the run
+            // DELETED without ever writing is outside the write-set and stays
+            // deleted — the run's deletions can't be told apart from another
+            // agent's via git state alone, and the safe direction wins.
+            const runFiles = [...new Set((result.history ?? []).flatMap((h) => h.filesApplied ?? []))];
             try {
-                restoreTree(projectRoot, regressSnapshot);
-                console.log(chalk.yellow(endRegressions.length > 0
-                    ? `  ↩ no-regress: reverted to best — tests that passed at baseline are failing now: ` +
-                        `${endRegressions.flatMap((r) => r.tests).slice(0, 5).join(', ')}`
-                    : endCapabilityLost
-                        ? `  ↩ no-regress: reverted to best — the run ended having LOST capability: ${endCap.findings.join('; ')}`
-                        : `  ↩ no-regress: reverted to best (end gate score ${endScore.toFixed(2)} < best ${baselineGateScore.toFixed(2)})`));
-                disposeSnapshot(regressSnapshot);
+                if (runFiles.length === 0) {
+                    // The write-set is EMPTY but the tree regressed. With the agentic
+                    // write ledger this means the writes escaped tracking (a shell write
+                    // with the sweep disabled, or a deletion — the documented known-gap).
+                    // The old whole-tree restore is the wrong fallback: in a shared
+                    // worktree it reverts OTHER agents' work (the incident E2 fixes).
+                    // Fail LOUD and keep the snapshot instead of pretending all is well.
+                    console.log(chalk.red('  ↩ no-regress: the run regressed the gates but its write-set is EMPTY — the writes escaped ' +
+                        'tracking (shell with the bash sweep disabled, or deletions). NOT restoring blindly: a ' +
+                        `whole-tree restore could revert other agents' work. The pre-run snapshot is PRESERVED at ` +
+                        `${regressSnapshot} — inspect it and restore by hand if needed.`));
+                    // Do NOT dispose: the snapshot is the only known-good copy.
+                }
+                else {
+                    const touched = restoreTreeScoped(projectRoot, regressSnapshot, runFiles);
+                    console.log(chalk.yellow((endRegressions.length > 0
+                        ? `  ↩ no-regress: reverted to best — tests that passed at baseline are failing now: ` +
+                            `${endRegressions.flatMap((r) => r.tests).slice(0, 5).join(', ')}`
+                        : endCapabilityLost
+                            ? `  ↩ no-regress: reverted to best — the run ended having LOST capability: ${endCap.findings.join('; ')}`
+                            : `  ↩ no-regress: reverted to best (end gate score ${endScore.toFixed(2)} < best ${baselineGateScore.toFixed(2)})`) +
+                        ` — ${touched} run-written file(s) restored`));
+                    // The scoped restore succeeded (or preserved-on-failure itself) —
+                    // only here is the snapshot safe to dispose.
+                    disposeSnapshot(regressSnapshot);
+                }
             }
             catch (restoreErr) {
                 // restoreTree marked the snapshot preserve — do NOT dispose it; it may