chati-dev 4.4.0 → 4.5.1

package/src/terminal/run-parallel.js

@@ -16,7 +16,7 @@
 
 import { fileURLToPath } from 'url';
 import { buildAgentPrompt } from './prompt-builder.js';
-import { spawnParallelGroup, spawnTerminal } from './spawner.js';
+import { spawnParallelGroup, spawnTerminal, killTerminal } from './spawner.js';
 import { TerminalMonitor } from './monitor.js';
 import { collectResults, mergeHandoffs, buildConsolidatedHandoff } from './collector.js';
 import { parseAgentOutput } from './handoff-parser.js';
@@ -45,6 +45,19 @@ function parseArgs(argv) {
   return args;
 }
 
+function createSpawnConfig({ agent, taskId, promptResult, projectDir, timeout, strictProvider }) {
+  return {
+    agent,
+    taskId,
+    model: promptResult.model,
+    provider: promptResult.provider,
+    prompt: promptResult.prompt,
+    workingDir: projectDir,
+    timeout,
+    strictProvider,
+  };
+}
+
 // ---------------------------------------------------------------------------
 // Main
 // ---------------------------------------------------------------------------
@@ -103,17 +116,14 @@ async function main() {
         previousAgent,
         sessionState,
         provider: args.provider || null,
+        model: args.model || null,
+        strictProvider: args['strict-provider'] === 'true',
       });
 
-      configs.push({
-        agent: agents[i],
-        taskId: taskIds[i],
-        model: promptResult.model,
-        provider: promptResult.provider,
-        prompt: promptResult.prompt,
-        workingDir: projectDir,
-        timeout,
-      });
+      configs.push(createSpawnConfig({
+        agent: agents[i], taskId: taskIds[i], promptResult, projectDir, timeout,
+        strictProvider: args['strict-provider'] === 'true',
+      }));
     } catch (err) {
       outputError(`Failed to build prompt for ${agents[i]}: ${err.message}`);
       process.exit(1);
@@ -254,13 +264,13 @@ async function main() {
  * @param {number} timeout - Per-agent timeout in ms
  * @returns {Promise<{ groupId: string, terminals: object[] }>}
  */
-async function sequentialFallback(configs, timeout) {
+async function sequentialFallback(configs, timeout, _spawnFn = spawnTerminal) {
   const groupId = `seq-fallback-${Date.now()}`;
   const terminals = [];
 
   for (let i = 0; i < configs.length; i++) {
     const cfg = configs[i];
-    const terminal = spawnTerminal({
+    const handle = _spawnFn({
       agent: cfg.agent,
       taskId: cfg.taskId,
       model: cfg.model,
@@ -268,28 +278,29 @@ async function sequentialFallback(configs, timeout) {
       prompt: cfg.prompt,
       workingDir: cfg.workingDir,
       timeout: cfg.timeout || timeout,
+      strictProvider: cfg.strictProvider,
     });
 
-    // Wait for this terminal to finish before spawning the next
+    // Wait for the REAL process exit before spawning the next agent. The old
+    // implementation probed terminal.onExit?.(), a method TerminalHandle never
+    // had, so every agent "completed" instantly and the fallback ran the whole
+    // group in parallel - defeating its purpose (shedding rate-limit pressure).
     await new Promise((resolve) => {
-      const timer = setTimeout(() => {
-        terminal.kill?.();
+      if (!handle?.process || handle.status !== 'running') {
         resolve();
+        return;
+      }
+      const timer = setTimeout(() => {
+        killTerminal(handle).catch(() => {}).then(resolve, resolve);
       }, (cfg.timeout || timeout) + 5_000);
 
-      terminal.onExit?.(() => {
+      handle.process.once('exit', () => {
         clearTimeout(timer);
         resolve();
       });
-
-      // If terminal doesn't have onExit, resolve after a short poll
-      if (!terminal.onExit) {
-        clearTimeout(timer);
-        resolve();
-      }
     });
 
-    terminals.push(terminal);
+    terminals.push(handle);
 
     // Small delay between spawns to avoid rate limit pressure
     if (i < configs.length - 1) {
@@ -328,4 +339,4 @@ if (process.argv[1] === fileURLToPath(import.meta.url)) {
   });
 }
 
-export { parseArgs, determineNextAgent, sequentialFallback };
+export { parseArgs, createSpawnConfig, determineNextAgent, sequentialFallback };

package/src/terminal/spawner.js

@@ -107,7 +107,8 @@ export function cleanParentEnv(env) {
  * @property {string} agent           - Agent name (e.g. "architect")
  * @property {string} taskId          - Task identifier
  * @property {string} [model]         - LLM model tier name (e.g. opus, pro, codex, claude-sonnet)
- * @property {string} [provider]      - CLI provider name (claude, gemini, codex)
+ * @property {string} [provider]      - CLI provider name (claude, gemini, codex, grok)
+ * @property {boolean} [strictProvider] - Reject a missing provider rather than using the legacy fallback
  * @property {string} [prompt]        - Full prompt string (from prompt-builder, piped via stdin)
  * @property {object} [contextPayload] - Context to inject via env var
  * @property {string[]} [writeScope]   - Override write scope
@@ -181,6 +182,11 @@ export function buildSpawnCommand(config) {
     args = adapterResult.args;
     prompt = adapterResult.stdinPrompt;
   } catch (err) {
+    if (config.strictProvider) {
+      const failure = new Error(`Selected provider "${providerName}" is unavailable: ${err.message}`);
+      failure.code = 'SELECTED_PROVIDER_UNAVAILABLE';
+      throw failure;
+    }
     // Fallback to claude if provider resolution fails (backwards compatibility)
     providerFallback = {
       requested: providerName,

package/src/terminal/team-task-list.js

@@ -10,7 +10,7 @@
 
 import { existsSync, readFileSync, writeFileSync, mkdirSync, readdirSync, realpathSync } from 'fs';
 import { join, dirname, resolve, relative } from 'path';
-import yaml from 'js-yaml';
+import * as yaml from 'js-yaml';
 import { withLock } from '../utils/file-lock.js';
 
 // ---------------------------------------------------------------------------

package/src/upgrade/backup.js

@@ -1,6 +1,24 @@
 import { existsSync, mkdirSync, cpSync, rmSync } from 'fs';
 import { join } from 'path';
 import { resolveFrameworkDir } from '../utils/framework-dir.js';
+import { FRAMEWORK_DIRS_TO_COPY } from '../installer/core.js';
+
+/**
+ * The backup must cover exactly what the upgrade overwrites, or a rollback
+ * leaves the install in a chimera state (some dirs at the new version, some
+ * restored). The upgrade replaces every dir in FRAMEWORK_DIRS_TO_COPY (via
+ * copyFrameworkFiles), so that same list is the backup/restore scope - one
+ * source of truth, no asymmetry. Previously the backup saved 12 dirs and the
+ * restore returned only 10 (intelligence and data were backed up but never
+ * restored; hooks, domains, tasks, scaffold and others were never backed up
+ * at all).
+ */
+const BACKUP_DIRS = FRAMEWORK_DIRS_TO_COPY;
+
+const BACKUP_FILES = [
+  'constitution.md',
+  'config.yaml',
+];
 
 /**
  * Create backup of chati.dev/ directory before upgrade
@@ -17,28 +35,7 @@ export function createBackup(targetDir, currentVersion) {
 
   mkdirSync(backupDir, { recursive: true });
 
-  // Backup framework files (NOT artifacts or intelligence)
-  const dirsToBackup = [
-    'orchestrator',
-    'agents',
-    'templates',
-    'workflows',
-    'quality-gates',
-    'schemas',
-    'frameworks',
-    'i18n',
-    'patterns',
-    'migrations',
-    'intelligence',
-    'data',
-  ];
-
-  const filesToBackup = [
-    'constitution.md',
-    'config.yaml',
-  ];
-
-  for (const dir of dirsToBackup) {
+  for (const dir of BACKUP_DIRS) {
     const src = join(frameworkDir, dir);
     const dest = join(backupDir, dir);
     if (existsSync(src)) {
@@ -46,7 +43,7 @@ export function createBackup(targetDir, currentVersion) {
     }
   }
 
-  for (const file of filesToBackup) {
+  for (const file of BACKUP_FILES) {
     const src = join(frameworkDir, file);
     const dest = join(backupDir, file);
     if (existsSync(src)) {
@@ -68,26 +65,7 @@ export function restoreFromBackup(targetDir, version) {
     throw new Error(`Backup not found: ${backupDir}`);
   }
 
-  // Restore backed-up directories
-  const dirsToRestore = [
-    'orchestrator',
-    'agents',
-    'templates',
-    'workflows',
-    'quality-gates',
-    'schemas',
-    'frameworks',
-    'i18n',
-    'patterns',
-    'migrations',
-  ];
-
-  const filesToRestore = [
-    'constitution.md',
-    'config.yaml',
-  ];
-
-  for (const dir of dirsToRestore) {
+  for (const dir of BACKUP_DIRS) {
     const src = join(backupDir, dir);
     const dest = join(frameworkDir, dir);
     if (existsSync(src)) {
@@ -98,7 +76,7 @@ export function restoreFromBackup(targetDir, version) {
     }
   }
 
-  for (const file of filesToRestore) {
+  for (const file of BACKUP_FILES) {
     const src = join(backupDir, file);
     const dest = join(frameworkDir, file);
     if (existsSync(src)) {

package/src/upgrade/checker.js

@@ -1,7 +1,7 @@
 import { readFileSync, writeFileSync, existsSync } from 'fs';
 import { join } from 'path';
 import { resolveFrameworkDir } from '../utils/framework-dir.js';
-import yaml from 'js-yaml';
+import * as yaml from 'js-yaml';
 import semver from 'semver';
 
 /**

package/src/upgrade/migrator.js

@@ -2,7 +2,7 @@ import { readFileSync, writeFileSync, existsSync, mkdirSync, readdirSync, rmSync
 import { dirname, join } from 'path';
 import { fileURLToPath } from 'url';
 import { resolveFrameworkDir } from '../utils/framework-dir.js';
-import yaml from 'js-yaml';
+import * as yaml from 'js-yaml';
 import semver from 'semver';
 
 const __dirname = dirname(fileURLToPath(import.meta.url));
@@ -42,13 +42,25 @@ export function findMigrations(targetDir, fromVersion, toVersion) {
   for (const file of files) {
     try {
       const content = yaml.load(readFileSync(join(migrationsDir, file), 'utf-8'));
-      const migration = content?.migration;
+      // Two header schemas exist: the nested `migration: { from, to }` form and
+      // the older flat `from_version`/`to_version` form (with `operations`
+      // instead of `steps`). The flat files were silently skipped here, which
+      // hid them from every upgrade.
+      const migration = content?.migration
+        ?? (content?.from_version && content?.to_version
+          ? { from: content.from_version, to: content.to_version, description: content.description, breaking: content.breaking }
+          : null);
 
       if (!migration?.from || !migration?.to) continue;
 
-      // Check if this migration is in the upgrade path
+      // A migration applies when its TARGET version lies inside the upgrade
+      // interval (fromVersion, toVersion]. The old condition compared the
+      // migration's `from` against the user's version with gte, which skipped
+      // every pending migration for users sitting ABOVE a migration's starting
+      // point (a 4.2.3 user never received v4.2-to-v4.3) and is wrong for
+      // users below it too (a 3.x user needs every step on the way up).
       if (
-        semver.gte(migration.from, fromVersion) &&
+        semver.gt(migration.to, fromVersion) &&
         semver.lte(migration.to, toVersion)
       ) {
         applicable.push({
@@ -57,7 +69,7 @@ export function findMigrations(targetDir, fromVersion, toVersion) {
           to: migration.to,
           description: migration.description || '',
           breaking: migration.breaking || false,
-          steps: content.steps || [],
+          steps: content.steps || content.operations || [],
           rollback: content.rollback || [],
         });
       }
@@ -73,14 +85,20 @@ export function findMigrations(targetDir, fromVersion, toVersion) {
 }
 
 /**
- * Execute a single migration step
+ * Execute a single migration step. Exported for testing.
  */
-async function executeMigrationStep(targetDir, step) {
+export async function executeMigrationStep(targetDir, step, sourceFile = '') {
   switch (step.type) {
     case 'create_directory': {
-      const dir = join(targetDir, step.path);
-      if (!existsSync(dir) || !step.idempotent) {
-        mkdirSync(dir, { recursive: true });
+      // Both shapes exist in the migration corpus: `path` (string) in the
+      // nested-schema files and `paths` (array) in the older flat-schema ones.
+      const dirs = Array.isArray(step.paths) ? step.paths : [step.path];
+      for (const rel of dirs) {
+        if (!rel) continue;
+        const dir = join(targetDir, rel);
+        if (!existsSync(dir) || !step.idempotent) {
+          mkdirSync(dir, { recursive: true });
+        }
       }
       break;
     }
@@ -100,7 +118,19 @@ async function executeMigrationStep(targetDir, step) {
 
       const content = yaml.load(readFileSync(filePath, 'utf-8')) || {};
 
-      if (step.operation === 'add_field') {
+      if (step.changes && typeof step.changes === 'object') {
+        // Older flat-schema shape: a `changes:` map of (possibly dotted)
+        // field -> value, applied as a plain set.
+        for (const [field, value] of Object.entries(step.changes)) {
+          const keys = field.split('.');
+          let obj = content;
+          for (let i = 0; i < keys.length - 1; i++) {
+            if (!obj[keys[i]]) obj[keys[i]] = {};
+            obj = obj[keys[i]];
+          }
+          obj[keys[keys.length - 1]] = value;
+        }
+      } else if (step.operation === 'add_field') {
         const keys = step.field.split('.');
         let obj = content;
         for (let i = 0; i < keys.length - 1; i++) {
@@ -176,7 +206,16 @@ async function executeMigrationStep(targetDir, step) {
     }
 
     default:
-      // Unknown step type - skip
+      // Copy-style steps (copy_file, copy_directory) from the older flat-schema
+      // migrations are subsumed by the upgrade's blanket copyFrameworkFiles, so
+      // skipping them is correct. Anything else unknown is surfaced instead of
+      // silently dropped, so an upgrader from a very old version knows what to
+      // review manually.
+      if (step.type !== 'copy_file' && step.type !== 'copy_directory') {
+        process.stderr.write(
+          `[chati] warning: migration step type "${step.type}"${sourceFile ? ` in ${sourceFile}` : ''} is not auto-executable; review the migration file manually\n`
+        );
+      }
       break;
   }
 }
@@ -196,7 +235,7 @@ export async function runMigrations(targetDir, fromVersion, toVersion) {
   for (const migration of migrations) {
     try {
       for (const step of migration.steps) {
-        await executeMigrationStep(targetDir, step);
+        await executeMigrationStep(targetDir, step, migration.file);
       }
       results.push({ file: migration.file, success: true });
     } catch (err) {

package/src/utils/constitution-meta.js

@@ -0,0 +1,12 @@
+/**
+ * @fileoverview Single source of truth for constitution metadata used by
+ * integrity checks.
+ *
+ * Every check that counts `## Article` headings (doctor, registry health,
+ * installer validator, stale-scan check 13) compares against THIS constant,
+ * so adding a constitutional article is a one-line bump here. The stale-scan
+ * asserts the canonical constitution.md actually contains this many articles,
+ * which keeps the constant honest.
+ */
+
+export const EXPECTED_ARTICLE_COUNT = 25;

package/src/utils/feature-flags.js

@@ -14,9 +14,17 @@ import { resolveFrameworkDir } from './framework-dir.js';
 
 /**
  * All known feature flags with their default values.
- * New features start as false (opt-in).
+ * New features start as false (opt-in). Defaults describe the state when
+ * config.yaml is absent; installed projects get their real values written by
+ * generateConfigYaml, and parseFeaturesSection only honors keys listed here,
+ * so EVERY boolean flag documented in config.yaml must appear in this map or
+ * the user's toggle is silently ignored (which froze 11 flags until 4.4.1).
+ * The numeric team_* and build_wave_size keys are intentionally absent: the
+ * parser is boolean-only and those values are read directly from config.yaml
+ * by their consumers.
  */
 const DEFAULTS = {
+  // Core framework flags
   hybrid_budget: false,
   anti_dash: false,
   rate_limiter_integration: false,
@@ -28,6 +36,22 @@ const DEFAULTS = {
   tech_presets: false,
   doctor_autofix: false,
   brandbook: false,
+  // Intelligence upgrade flags
+  undercover_mode: false,
+  memory_extraction: false,
+  memory_consolidation: false,
+  daily_digest: false,
+  structured_session_memory: false,
+  static_prism_boundary: false,
+  token_bracket_estimation: false,
+  model_fallback: false,
+  frustration_detection: false,
+  bash_security_checks: false,
+  // Agent Teams (Article XXI). NOTE: isAgentTeamsEnabled in cli.js keeps its
+  // own reader with Claude-provider defaulting; this entry exists so a config
+  // toggle is at least visible through the generic API.
+  agent_teams: false,
+  // Execution Kinds (Article XXV)
   execution_kinds: false,
 };
 

package/src/wizard/i18n.js

@@ -1,7 +1,7 @@
 import { readFileSync, existsSync } from 'fs';
 import { join, dirname } from 'path';
 import { fileURLToPath } from 'url';
-import yaml from 'js-yaml';
+import * as yaml from 'js-yaml';
 import { resolveFrameworkDir } from '../utils/framework-dir.js';
 
 const __dirname = dirname(fileURLToPath(import.meta.url));
@@ -31,12 +31,18 @@ const FALLBACK_EN = {
     provider_selection_title: 'Which AI providers will you use?',
     editor_selection_title: 'Which editor IDEs should get rules files? (optional)',
     primary_provider_title: 'Which is your primary CLI provider?',
+    execution_profile_title: 'Select the execution profile',
+    execution_profile_standard: 'Standard',
+    execution_profile_standard_hint: 'Provider-neutral local project workflow',
+    execution_profile_internal: 'Focus AI internal',
+    execution_profile_internal_hint: 'Requires ClickUp tracking and completion metrics',
+    execution_profile_label: 'Execution profile',
     primary_provider_label: 'Primary Provider',
     providers_label: 'Providers',
     quick_start_switch_hint: 'Switch CLIs anytime — your session continues from where you left off',
     created_overlays: 'Created provider overlay directories',
     will_install: 'Will install:',
-    agents_count: 'Specialized agent definitions across DISCOVER, PLAN, BUILD, DEPLOY phases',
+    agents_count: 'Specialized discovery and planning agents with RAIL execution and release lanes',
     workflows_count: '6 workflow blueprints',
     templates_count: '6 templates (PRD, Brownfield PRD, Architecture, Task, QA Gate, Quick Brief)',
     constitution: 'Constitution (25 Articles + Preamble)',

package/src/wizard/index.js

@@ -1,11 +1,14 @@
 import * as p from '@clack/prompts';
-import { readFileSync } from 'fs';
+import { existsSync, readFileSync } from 'fs';
 import { join, dirname, basename } from 'path';
 import { fileURLToPath } from 'url';
 import { logBanner } from '../utils/logger.js';
-import { stepLanguage, stepProjectType, stepProviderSelection, stepEditorSelection, stepPrimaryProvider, stepConfirmation, stepTermsOfUse } from './questions.js';
+import { stepLanguage, stepProjectType, stepProviderSelection, stepEditorSelection, stepPrimaryProvider, stepModelSelection, stepExecutionProfile, stepConfirmation, stepTermsOfUse } from './questions.js';
 import { createSpinner, showStep, showValidation, showQuickStart } from './feedback.js';
 import { installFramework } from '../installer/core.js';
+import { INSTALLATION_ARTIFACT_PATH, dryRunV2, installV2, reconfigureV2 } from '../installer-v2/index.js';
+import { buildWizardV2InstallationInput } from '../installer-v2/wizard-installation.js';
+import { resolveCapabilityCatalog, verifySignedCapabilityCatalog } from '../installer-v2/catalog-client.js';
 import { validateInstallation } from '../installer/validator.js';
 import { initCollector, track as telemetryTrack, flush as telemetryFlush } from '../telemetry/collector.js';
 import { sendEvents } from '../telemetry/sender.js';
@@ -69,11 +72,25 @@ export async function runWizard(targetDir, options = {}) {
   // Step 3b: Primary provider (only if multiple)
   const primaryProvider = options.llmProvider || await stepPrimaryProvider(selectedProviders);
 
-  // Step 3c: Editor Selection (which editor IDEs get rules files)
+  // Step 3c: Models allowed for each selected provider. Never add a provider
+  // or model that the user did not explicitly bind to this installation.
+  if (options.capabilityCatalog) {
+    throw Object.assign(new Error('unsigned capabilityCatalog injection is forbidden; provide signedCapabilityCatalogEnvelope'), { code: 'UNSIGNED_CATALOG_FORBIDDEN' });
+  }
+  const catalogResolution = options.signedCapabilityCatalogEnvelope
+    ? { source: 'provided-signed', catalog: verifySignedCapabilityCatalog(options.signedCapabilityCatalogEnvelope, { publicKeyPem: options.catalogPublicKeyPem }) }
+    : await resolveCapabilityCatalog({ projectDir: targetDir, catalogUrl: options.catalogUrl, fetchImpl: options.catalogFetch });
+  const modelSelections = options.modelSelections || await stepModelSelection(selectedProviders, catalogResolution.catalog);
+
+  // Step 3d: Profile controls whether ClickUp and internal completion metrics
+  // are mandatory. It must never be silently forced on public installations.
+  const executionProfile = options.executionProfile || await stepExecutionProfile();
+
+  // Step 3e: Editor Selection (which editor IDEs get rules files)
   const selectedEditors = options.editors || await stepEditorSelection();
 
   // Combine providers + editors into selectedIDEs for backward compatibility
-  const providerToIDE = { claude: 'claude-code', gemini: 'gemini-cli', codex: 'codex-cli' };
+  const providerToIDE = { claude: 'claude-code', gemini: 'gemini-cli', codex: 'codex-cli', grok: 'grok-cli' };
   const selectedIDEs = options.ides || [
     ...selectedProviders.map(p => providerToIDE[p]).filter(Boolean),
     ...selectedEditors,
@@ -94,9 +111,25 @@ export async function runWizard(targetDir, options = {}) {
     allProviders: cliProviders,
     selectedIDEs,
     selectedMCPs,
+    executionProfile,
     targetDir,
     version: VERSION,
   };
+  const v2InstallationInput = buildWizardV2InstallationInput({
+    projectName,
+    selectedProviders: cliProviders,
+    primaryProvider,
+    modelSelections,
+    capabilityCatalog: catalogResolution.catalog,
+    profile: executionProfile,
+  });
+  // Validate the complete v2 material and refuse a repeated init before the
+  // legacy installer writes anything. Reconfiguration uses its own backup and
+  // atomic replacement path below.
+  dryRunV2(v2InstallationInput, { projectDir: targetDir });
+  if (existsSync(join(targetDir, INSTALLATION_ARTIFACT_PATH)) && options.reconfigure !== true) {
+    throw Object.assign(new Error('a v2 installation already exists; use --reconfigure to replace it safely'), { code: 'INSTALLATION_ALREADY_EXISTS' });
+  }
 
   await stepConfirmation(config);
 
@@ -115,6 +148,8 @@ export async function runWizard(targetDir, options = {}) {
 
   try {
     await installFramework(config);
+    if (options.reconfigure === true) reconfigureV2(v2InstallationInput, { projectDir: targetDir });
+    else installV2(v2InstallationInput, { projectDir: targetDir });
     installSpinner.stop();
 
     showStep(t('installer.created_chati'));

package/src/wizard/questions.js

@@ -5,6 +5,7 @@ import { showSummary, showChecklist } from './feedback.js';
 import { brand, dim, success } from '../utils/colors.js';
 import { isProviderAvailable } from '../terminal/cli-registry.js';
 import { IDE_CONFIGS, IDE_TO_PROVIDER } from '../config/ide-configs.js';
+import { supportedV2WizardProviders, wizardDefaultModels, wizardModelSuggestions } from '../installer-v2/wizard-installation.js';
 
 /**
  * Step 1: Language Selection (always in English)
@@ -66,6 +67,7 @@ const PROVIDER_DISPLAY_NAMES = {
   claude: 'Claude (Anthropic)',
   gemini: 'Gemini (Google)',
   codex: 'Codex (OpenAI)',
+  grok: 'Grok (xAI)',
 };
 
 /**
@@ -75,7 +77,7 @@ const PROVIDER_DISPLAY_NAMES = {
  * Returns an array of provider names (e.g. ['claude', 'gemini']).
  */
 export async function stepProviderSelection() {
-  const cliIDEs = Object.entries(IDE_CONFIGS).filter(([, c]) => c.group === 'cli');
+  const cliIDEs = Object.entries(IDE_CONFIGS).filter(([key, c]) => c.group === 'cli' && supportedV2WizardProviders.includes(IDE_TO_PROVIDER[key]));
   const options = [];
 
   for (const [key, config] of cliIDEs) {
@@ -110,6 +112,26 @@ export async function stepProviderSelection() {
   return selected;
 }
 
+/**
+ * Selects the operational policy profile. Focus AI internal projects require
+ * ClickUp tracking; standard projects do not gain that external dependency.
+ */
+export async function stepExecutionProfile() {
+  const profile = await p.select({
+    message: t('installer.execution_profile_title'),
+    options: [
+      { value: 'other-supported-profile', label: t('installer.execution_profile_standard'), hint: t('installer.execution_profile_standard_hint') },
+      { value: 'focus-ai-internal', label: t('installer.execution_profile_internal'), hint: t('installer.execution_profile_internal_hint') },
+    ],
+    initialValue: 'other-supported-profile',
+  });
+  if (p.isCancel(profile)) {
+    p.cancel('Installation cancelled.');
+    process.exit(0);
+  }
+  return profile;
+}
+
 /**
  * Step 3b: Editor Selection (multi-select, optional)
  *
@@ -228,11 +250,43 @@ export async function stepPrimaryProvider(cliProviders) {
   return primary;
 }
 
+/**
+ * Records exactly which models the installation is allowed to orchestrate.
+ * A catalog refresh can replace the suggestion, but the user remains the
+ * authority for the final binding stored in the installation artifact.
+ */
+export async function stepModelSelection(providers, capabilityCatalog) {
+  const selections = {};
+
+  for (const provider of providers) {
+    const suggestions = wizardModelSuggestions(provider, capabilityCatalog);
+    const suggested = suggestions[0] || wizardDefaultModels[provider];
+    const answer = await p.text({
+      message: `Models for ${PROVIDER_DISPLAY_NAMES[provider] || provider} (comma-separated):`,
+      placeholder: suggestions.join(', '),
+      initialValue: suggested,
+      validate: (value) => {
+        const models = String(value || '').split(',').map((item) => item.trim()).filter(Boolean);
+        return models.length > 0 ? undefined : 'Select at least one model.';
+      },
+    });
+
+    if (p.isCancel(answer)) {
+      p.cancel('Installation cancelled.');
+      process.exit(0);
+    }
+
+    selections[provider] = String(answer).split(',').map((item) => item.trim()).filter(Boolean);
+  }
+
+  return selections;
+}
+
 /**
  * Step 4: Confirmation
  */
 export async function stepConfirmation(config) {
-  const { projectName, projectType, language, llmProvider, selectedMCPs, selectedIDEs, allProviders } = config;
+  const { projectName, projectType, language, llmProvider, selectedMCPs, selectedIDEs, allProviders, executionProfile } = config;
 
   const langName = SUPPORTED_LANGUAGES.find(l => l.value === language)?.label || language;
 
@@ -256,6 +310,9 @@ export async function stepConfirmation(config) {
     [t('installer.project_label')]: `${projectName} (${projectType === 'greenfield' ? 'Greenfield' : 'Brownfield'})`,
     [t('installer.language_label')]: langName,
     [t('installer.providers_label')]: providersDisplay,
+    [t('installer.execution_profile_label')]: executionProfile === 'focus-ai-internal'
+      ? `${t('installer.execution_profile_internal')} (ClickUp required)`
+      : t('installer.execution_profile_standard'),
   };
 
   // Only show editor IDEs line if any were selected