chati-dev 4.5.1 → 4.5.2

package/framework/config.yaml

@@ -1,8 +1,8 @@
 # chati.dev Configuration
-version: "4.5.1"
+version: "4.5.2"
 installed_at: "2026-02-07T10:00:00Z"
 updated_at: "2026-06-11T00:00:00Z"
-installer_version: "4.5.1"
+installer_version: "4.5.2"
 project_type: greenfield
 language: en
 ides: [claude-code]

package/framework/context/root.md

@@ -1,7 +1,7 @@
 # Chati.dev System Context
 
 ## Framework
-- **Version**: 4.5.1
+- **Version**: 4.5.2
 - **Agents**: Specialized discovery and planning agents feeding provider-neutral RAIL execution and a sealed release lane
 - **Constitution**: 25 Articles + Preamble
 - **Quality**: 5 pipeline gates + 3-tier verdicts + Fault Vector Protocol (Article XXII)

package/framework/i18n/en.yaml

@@ -22,8 +22,14 @@ installer:
   llm_provider_not_installed: "(CLI not detected)"
   llm_provider_label: "AI Provider"
   ide_selection_title: "Select your IDEs / CLIs (multiple allowed):"
-  primary_provider_title: "Which is your primary CLI provider?"
-  primary_provider_label: "Primary Provider"
+  installation_mode_title: "Select the installation mode"
+  installation_mode_open: "Open"
+  installation_mode_open_hint: "Public framework without mandatory company integrations"
+  installation_mode_internal: "Internal"
+  installation_mode_internal_hint: "Requires an authorized license and enables ClickUp tracking plus internal policies"
+  installation_mode_label: "Installation mode"
+  model_routing_label: "Model routing"
+  model_routing_automatic: "Automatic per task across all enabled models"
   providers_label: "Providers"
   quick_start_switch_hint: "Switch CLIs anytime — your session continues from where you left off"
   created_overlays: "Created provider overlay directories"

package/framework/i18n/es.yaml

@@ -22,8 +22,14 @@ installer:
   llm_provider_not_installed: "(CLI no detectada)"
   llm_provider_label: "Proveedor de IA"
   ide_selection_title: "Seleccione sus IDEs / CLIs (multiples permitidos):"
-  primary_provider_title: "Cual es su proveedor CLI principal?"
-  primary_provider_label: "Proveedor Principal"
+  installation_mode_title: "Seleccione el modo de instalacion"
+  installation_mode_open: "Open"
+  installation_mode_open_hint: "Framework publico sin integraciones corporativas obligatorias"
+  installation_mode_internal: "Internal"
+  installation_mode_internal_hint: "Requiere una licencia autorizada y activa el tracking en ClickUp y las politicas internas"
+  installation_mode_label: "Modo de instalacion"
+  model_routing_label: "Enrutamiento de modelos"
+  model_routing_automatic: "Automatico por tarea entre todos los modelos habilitados"
   providers_label: "Proveedores"
   quick_start_switch_hint: "Cambie de CLI en cualquier momento — su sesion continua desde donde quedo"
   created_overlays: "Creados directorios de overlay de proveedores"

package/framework/i18n/fr.yaml

@@ -22,8 +22,14 @@ installer:
   llm_provider_not_installed: "(CLI non detecte)"
   llm_provider_label: "Fournisseur IA"
   ide_selection_title: "Selectionnez vos IDEs / CLIs (multiples autorises):"
-  primary_provider_title: "Quel est votre fournisseur CLI principal?"
-  primary_provider_label: "Fournisseur Principal"
+  installation_mode_title: "Selectionnez le mode d'installation"
+  installation_mode_open: "Open"
+  installation_mode_open_hint: "Framework public sans integrations d'entreprise obligatoires"
+  installation_mode_internal: "Internal"
+  installation_mode_internal_hint: "Necessite une licence autorisee et active le suivi ClickUp et les politiques internes"
+  installation_mode_label: "Mode d'installation"
+  model_routing_label: "Routage des modeles"
+  model_routing_automatic: "Automatique par tache entre tous les modeles actives"
   providers_label: "Fournisseurs"
   quick_start_switch_hint: "Changez de CLI a tout moment — votre session continue la ou vous l'avez laissee"
   created_overlays: "Crees les repertoires d'overlay des fournisseurs"

package/framework/i18n/pt.yaml

@@ -22,8 +22,14 @@ installer:
   llm_provider_not_installed: "(CLI nao detectada)"
   llm_provider_label: "Provedor de IA"
   ide_selection_title: "Selecione suas IDEs / CLIs (multiplos permitidos):"
-  primary_provider_title: "Qual e seu provedor CLI principal?"
-  primary_provider_label: "Provedor Principal"
+  installation_mode_title: "Selecione o modo de instalacao"
+  installation_mode_open: "Open"
+  installation_mode_open_hint: "Framework publico sem integracoes corporativas obrigatorias"
+  installation_mode_internal: "Internal"
+  installation_mode_internal_hint: "Exige uma licenca autorizada e ativa o tracking no ClickUp e as politicas internas"
+  installation_mode_label: "Modo de instalacao"
+  model_routing_label: "Roteamento de modelos"
+  model_routing_automatic: "Automatico por task entre todos os modelos habilitados"
   providers_label: "Provedores"
   quick_start_switch_hint: "Troque de CLI a qualquer momento — sua sessao continua de onde parou"
   created_overlays: "Criados diretorios de overlay de provedores"

package/framework/manifest.json

@@ -1,5 +1,5 @@
 {
-  "createdAt": "2026-08-26T20:08:59.239Z",
+  "createdAt": "2026-08-27T07:27:47.925Z",
   "files": {
     "agents/build/dev.md": {
       "hash": "5c8da2eee3357bbe84a6c468c76fe60a0c77357575503c3797aa94128282c565",
@@ -97,7 +97,7 @@
       "type": "md"
     },
     "config.yaml": {
-      "hash": "46011fbc84ddcb0d5aa5c3c3a303bcb649983568000d256574afaaa4efe585ab",
+      "hash": "f7c77483aeaa44f37d8492d85a376304cb24ec28d91dbed3155f41faa627b7ad",
       "size": 2841,
       "type": "yaml"
     },
@@ -122,7 +122,7 @@
       "type": "md"
     },
     "context/root.md": {
-      "hash": "bb154fbf806841bfc2a1885eddc453bf0c291b48fde8e39c68ce5309cd2b2fdd",
+      "hash": "1ac04cbce1e85009ecdf224cdbee4fe64bcc80232366c2122805e9c9c3191f9a",
       "size": 1217,
       "type": "md"
     },
@@ -377,23 +377,23 @@
       "type": "js"
     },
     "i18n/en.yaml": {
-      "hash": "7fb19ab9fed900f10aeaa5bcffe3a4c2037b92513ec593fffc0509cd25f612fb",
-      "size": 4549,
+      "hash": "5eb0e9dfa7baec166fc12ca8a1c0e9623c9a023c51c09455b80a6d8df1e0205f",
+      "size": 4941,
       "type": "yaml"
     },
     "i18n/es.yaml": {
-      "hash": "f83cc1afbe9e7f1ed0243326d4587ac087f72e5b7f9ba667ae8c65a4842a01f4",
-      "size": 4794,
+      "hash": "1ed8c732c13c23e3fc2d5578526c1285a2a1ffc1d79b85d8e12365c3bcbbd882",
+      "size": 5225,
       "type": "yaml"
     },
     "i18n/fr.yaml": {
-      "hash": "d2b3b9077ee93260133ab83e9d928043d38f454ac28444e6d2dbc87fedc5b84c",
-      "size": 4878,
+      "hash": "ae88b914ea39d6613879aae3a3fcdf92a771d3df0f207def6cbb2cc76455cfe9",
+      "size": 5290,
       "type": "yaml"
     },
     "i18n/pt.yaml": {
-      "hash": "10183e9096376f050350cf5f69d582fae2fb47da4eb18fe72486760d5f965e07",
-      "size": 4747,
+      "hash": "9e766ca8c7eba6362816bdc9d1f6162d615f1b5ca1a9b2f75071a53b7ab9f6b3",
+      "size": 5163,
       "type": "yaml"
     },
     "intelligence/confidence.yaml": {
@@ -1347,5 +1347,5 @@
       "type": "yaml"
     }
   },
-  "version": "4.5.1"
+  "version": "4.5.2"
 }

package/framework/manifest.sig

@@ -1 +1 @@
-9pBBKgpxLVVwfO6C1eWcXgEIDlAm3sGh30KGwtKCy8wc5owlP5ZSbrCIm30FCl6MsK6c6Jktbz/EAZ48qUuCAQ==
+Y5XGGQ07UbiwrVZytFSTJvXNifA8l16S9QI+ret6AVjrYfWvN6E5ChUG0BGKWLsE2wpjVtEW4TVJosYaFDANAg==

package/node_modules/@chati/provider-registry/src/index.js

@@ -30,6 +30,7 @@ function readClock(clock) {
 export function validateCapabilitySnapshot(snapshot, { clock } = {}) {
   assertObject(snapshot, 'INVALID_CATALOG', 'snapshot');
   assertString(snapshot.snapshot_id, 'INVALID_CATALOG', 'snapshot_id');
+  if (snapshot.published_at !== undefined) parseTime(snapshot.published_at, 'INVALID_CATALOG', 'published_at');
   const expiresAt = parseTime(snapshot.expires_at, 'INVALID_CATALOG', 'expires_at');
   if (expiresAt <= readClock(clock)) throw new ContractError('CATALOG_SNAPSHOT_EXPIRED', 'capability snapshot is expired', { snapshot_id: snapshot.snapshot_id });
   if (!Array.isArray(snapshot.models) || snapshot.models.length === 0) throw new ContractError('INVALID_CATALOG', 'models must be a non-empty array');
@@ -49,6 +50,15 @@ export function validateCapabilitySnapshot(snapshot, { clock } = {}) {
     } else if (model.highest_reasoning_configuration !== undefined) {
       assertString(model.highest_reasoning_configuration, 'INVALID_CATALOG', 'model.highest_reasoning_configuration');
     }
+    if (model.routing_priority !== undefined) {
+      assertObject(model.routing_priority, 'INVALID_CATALOG', 'model.routing_priority');
+      for (const [route, priority] of Object.entries(model.routing_priority)) {
+        assertString(route, 'INVALID_CATALOG', 'model.routing_priority key');
+        if (!Number.isFinite(priority) || priority < 0) throw new ContractError('INVALID_CATALOG', 'model.routing_priority values must be non-negative numbers');
+      }
+    }
+    if (model.tier !== undefined) assertString(model.tier, 'INVALID_CATALOG', 'model.tier');
+    if (model.natural_role !== undefined) assertString(model.natural_role, 'INVALID_CATALOG', 'model.natural_role');
   }
   return Object.freeze(canonicalize(snapshot));
 }
@@ -91,11 +101,17 @@ export function validateInstallation(installation, snapshot, { bindingMap = DEFA
     selectedHarnesses.add(binding.harness_id);
     selectedBindings.set(`${binding.provider_id}:${binding.harness_id}`, binding);
   }
-  assertObject(installation.primary_binding, 'INVALID_INSTALLATION', 'primary_binding');
-  const primaryKey = `${installation.primary_binding.provider_id}:${installation.primary_binding.harness_id}`;
-  if (!selectedBindings.has(primaryKey)) throw new ContractError('PRIMARY_BINDING_NOT_SELECTED', 'primary_binding must be selected');
-  if (installation.primary_harness !== undefined && installation.primary_harness !== installation.primary_binding.harness_id) {
-    throw new ContractError('PRIMARY_HARNESS_MISMATCH', 'primary_harness must match primary_binding.harness_id');
+  // v2.1 installations are symmetric across enabled CLIs. Legacy v2 artifacts
+  // may retain a primary binding, which remains validated but is never required.
+  if (installation.primary_binding !== undefined) {
+    assertObject(installation.primary_binding, 'INVALID_INSTALLATION', 'primary_binding');
+    const primaryKey = `${installation.primary_binding.provider_id}:${installation.primary_binding.harness_id}`;
+    if (!selectedBindings.has(primaryKey)) throw new ContractError('PRIMARY_BINDING_NOT_SELECTED', 'primary_binding must be selected');
+    if (installation.primary_harness !== undefined && installation.primary_harness !== installation.primary_binding.harness_id) {
+      throw new ContractError('PRIMARY_HARNESS_MISMATCH', 'primary_harness must match primary_binding.harness_id');
+    }
+  } else if (installation.primary_harness !== undefined) {
+    throw new ContractError('PRIMARY_BINDING_MISSING', 'legacy primary_harness requires primary_binding');
   }
   if (installation.profile === 'focus-ai-internal' && installation.external_integrations?.clickup !== 'required') {
     throw new ContractError('PROFILE_DEPENDENCY_MISSING', 'focus-ai-internal requires ClickUp');

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "chati-dev",
-  "version": "4.5.1",
+  "version": "4.5.2",
   "description": "AI-Powered Multi-Agent Orchestration System - Structured vibe coding for Full Stack Development",
   "type": "module",
   "bin": {

package/src/installer/core.js

@@ -23,7 +23,7 @@ const FRAMEWORK_SOURCE = existsSync(BUNDLED_SOURCE) ? BUNDLED_SOURCE : MONOREPO_
  * Install Chati.dev framework into target directory
  */
 export async function installFramework(config) {
-  const { targetDir, projectType, language, selectedIDEs, selectedMCPs, projectName, llmProvider, allProviders } = config;
+  const { targetDir, projectType, language, selectedIDEs, selectedMCPs, projectName, allProviders } = config;
   // Always derive version from package.json (single source of truth)
   let { version } = config;
   if (!version) {
@@ -55,7 +55,7 @@ export async function installFramework(config) {
   if (!existsSync(sessionPath)) {
     writeFileSync(
       sessionPath,
-      generateSessionYaml({ projectName, projectType, language, selectedIDEs, selectedMCPs, llmProvider, allProviders }),
+      generateSessionYaml({ projectName, projectType, language, selectedIDEs, selectedMCPs, allProviders }),
       'utf-8'
     );
   }
@@ -114,12 +114,13 @@ export async function installFramework(config) {
     createDir(join(memoriesBase, dir));
   }
 
-  // Copy framework files from source (adapted for non-Claude providers)
-  copyFrameworkFiles(frameworkDir, llmProvider || 'claude');
+  // Copy the canonical framework as a provider-neutral fallback. Every enabled
+  // CLI receives its own explicit adapted overlay below.
+  copyFrameworkFiles(frameworkDir, 'claude');
 
-  // Generate provider overlays for secondary CLI providers
-  if (allProviders && allProviders.length > 1) {
-    generateProviderOverlays(targetDir, FRAMEWORK_SOURCE, llmProvider || 'claude', allProviders);
+  // Generate symmetric provider overlays. No CLI is permanently primary.
+  if (allProviders && allProviders.length > 0) {
+    generateProviderOverlays(targetDir, FRAMEWORK_SOURCE, allProviders);
   }
 
   // Bundle the CLI source into the framework dir so chati-router.js can run
@@ -159,19 +160,19 @@ export async function installFramework(config) {
   // Write config.yaml
   writeFileSync(
     join(frameworkDir, 'config.yaml'),
-    generateConfigYaml({ version, projectType, language, selectedIDEs, llmProvider, allProviders }),
+    generateConfigYaml({ version, projectType, language, selectedIDEs, allProviders }),
     'utf-8'
   );
 
-  // 3. Configure IDEs (secondary providers get overlay orchestrator path)
-  const primary = llmProvider || 'claude';
+  // 3. Configure every CLI against its own overlay. The CLI that opens a
+  // session becomes that session's orchestrator.
   for (const ideKey of selectedIDEs) {
     const ideProvider = IDE_TO_PROVIDER[ideKey];
-    const isSecondary = ideProvider && ideProvider !== primary && allProviders && allProviders.length > 1;
-    const orchestratorPath = isSecondary
+    const hasProviderOverlay = ideProvider && allProviders?.includes(ideProvider);
+    const orchestratorPath = hasProviderOverlay
       ? `.chati.dev/.adapted/${ideProvider}/orchestrator/chati.md`
       : '.chati.dev/orchestrator/chati.md';
-    await configureIDE(targetDir, ideKey, selectedMCPs, { orchestratorPath, isSecondary, providerName: ideProvider });
+    await configureIDE(targetDir, ideKey, selectedMCPs, { orchestratorPath, isSecondary: false, providerName: ideProvider });
   }
 
   const hasClaude = selectedIDEs.includes('claude-code');

package/src/installer/provider-overlay.js

@@ -2,8 +2,8 @@
  * @fileoverview Provider Overlay Generator for multi-CLI continuity.
  *
  * When multiple CLI providers are selected (e.g. Claude Code + Gemini CLI),
- * the primary provider's adapted files go in chati.dev/ (main). For each
- * secondary provider, this module generates an overlay directory at
+ * the provider-neutral framework lives in chati.dev/ (main). For each
+ * enabled provider, this module generates an overlay directory at
  * chati.dev/.adapted/<provider>/ with the ADAPTABLE_FILES adapted for
  * that provider. Each CLI reads only its own files — zero runtime translation.
  *
@@ -15,31 +15,24 @@ import { join, dirname } from 'path';
 import { adaptFrameworkFile, ADAPTABLE_FILES } from '../config/framework-adapter.js';
 
 /**
- * Generate adapted framework overlays for secondary providers.
+ * Generate adapted framework overlays for all enabled providers.
  *
- * For each non-primary CLI provider, creates chati.dev/.adapted/<provider>/
+ * For each CLI provider, creates chati.dev/.adapted/<provider>/
  * with provider-adapted copies of all ADAPTABLE_FILES.
  *
- * Reads CANONICAL (Claude) content from frameworkSource, then adapts for
- * each secondary provider. This avoids double-adaptation issues when the
- * primary provider is not Claude.
+ * Reads canonical source content from frameworkSource, then adapts it for
+ * each enabled provider. Every CLI resolves its own overlay symmetrically.
  *
  * @param {string} targetDir - Project root directory
  * @param {string} frameworkSource - Source directory with canonical framework files
- * @param {string} primaryProvider - Primary provider name ('claude', 'gemini', 'codex')
  * @param {string[]} allProviders - All CLI provider names
  * @returns {{ generated: string[], skipped: string[] }}
  */
-export function generateProviderOverlays(targetDir, frameworkSource, primaryProvider, allProviders) {
+export function generateProviderOverlays(targetDir, frameworkSource, allProviders) {
   const result = { generated: [], skipped: [] };
   const frameworkDir = join(targetDir, '.chati.dev');
 
   for (const provider of allProviders) {
-    if (provider === primaryProvider) {
-      result.skipped.push(provider);
-      continue;
-    }
-
     const overlayDir = join(frameworkDir, '.adapted', provider);
 
     for (const file of ADAPTABLE_FILES) {
@@ -64,7 +57,7 @@ export function generateProviderOverlays(targetDir, frameworkSource, primaryProv
 /**
  * Resolve the correct framework file path for a given provider.
  *
- * Returns the overlay path for secondary providers (if it exists),
+ * Returns the provider overlay path when it exists,
  * otherwise falls back to the main chati.dev/ path.
  *
  * @param {string} projectDir - Project root directory

package/src/installer/templates.js

@@ -4,7 +4,7 @@ import * as yaml from 'js-yaml';
  * Generate session.yaml content
  */
 export function generateSessionYaml(config) {
-  const { projectName, projectType, language, selectedIDEs, selectedMCPs, llmProvider, allProviders } = config;
+  const { projectName, projectType, language, selectedIDEs, selectedMCPs, allProviders } = config;
 
   // Schema MUST match session-manager.js DEFAULT_SESSION fields,
   // otherwise validateSession() rejects installer-generated sessions.
@@ -27,9 +27,7 @@ export function generateSessionYaml(config) {
     user_level_confidence: 0.0,
     ides: selectedIDEs,
     mcps: selectedMCPs,
-    providers_enabled: allProviders && allProviders.length > 0 ? allProviders : [llmProvider || 'claude'],
-    primary_provider: llmProvider || 'claude',
-    active_provider: llmProvider || 'claude',
+    providers_enabled: allProviders && allProviders.length > 0 ? allProviders : ['claude'],
     completed_agents: [],
     agent_results: {},
     mode_transitions: [],
@@ -102,10 +100,9 @@ export const PROVIDER_MODEL_MAPS = {
  * Generate config.yaml content
  */
 export function generateConfigYaml(config) {
-  const { version, projectType, language, llmProvider, allProviders } = config;
+  const { version, projectType, language, allProviders } = config;
   const selectedIDEs = config.selectedIDEs || [];
-  const provider = llmProvider || 'claude';
-  const providers = allProviders && allProviders.length > 0 ? allProviders : [provider];
+  const providers = allProviders && allProviders.length > 0 ? allProviders : ['claude'];
 
   const configData = {
     version: version,
@@ -116,9 +113,10 @@ export function generateConfigYaml(config) {
     language: language,
     ides: selectedIDEs,
     providers: {
-      claude: { enabled: providers.includes('claude') || provider === 'claude', primary: provider === 'claude' },
-      gemini: { enabled: providers.includes('gemini') || selectedIDEs.includes('gemini-cli'), model_default: 'pro', primary: provider === 'gemini' },
-      codex: { enabled: providers.includes('codex') || selectedIDEs.includes('codex-cli'), model_default: 'codex', primary: provider === 'codex' },
+      claude: { enabled: providers.includes('claude') },
+      gemini: { enabled: providers.includes('gemini') || selectedIDEs.includes('gemini-cli') },
+      codex: { enabled: providers.includes('codex') || selectedIDEs.includes('codex-cli') },
+      grok: { enabled: providers.includes('grok') || selectedIDEs.includes('grok-cli') },
     },
   };
 
@@ -148,7 +146,7 @@ export function generateConfigYaml(config) {
     frustration_detection: true,
     bash_security_checks: true,
     // Agent Teams (Article XXI) — default ON in v4.2.2.
-    // Only effective when provider === 'claude' (gated in cli.js
+    // Only effective when the active session runs in Claude (gated in cli.js
     // isAgentTeamsEnabled). Gemini and Codex always fall back to sequential
     // pipeline silently. See plan: was previously false for "safe rollout"
     // but the v4.2.0 launch never actually shipped, so this is a fresh start.
@@ -165,17 +163,6 @@ export function generateConfigYaml(config) {
     anonymous_id: null,
   };
 
-  // Add agent_overrides with optimal model map for the selected provider
-  if (provider !== 'claude') {
-    const modelMap = PROVIDER_MODEL_MAPS[provider];
-    if (modelMap) {
-      configData.agent_overrides = {};
-      for (const [agent, model] of Object.entries(modelMap.agents)) {
-        configData.agent_overrides[agent] = { provider, model };
-      }
-    }
-  }
-
   return yaml.dump(configData, { lineWidth: -1, quoteStyle: 'double', forceQuotes: false });
 }
 

package/src/installer/validator.js

@@ -187,28 +187,23 @@ export async function validateInstallation(targetDir) {
     try {
       const configContent = readFileSync(configYamlPath, 'utf-8');
       const enabledProviders = [];
-      let primaryProvider = null;
       let currentProvider = null;
 
       for (const line of configContent.split('\n')) {
         const provLine = line.match(/^\s{4}(\w+):$/);
-        if (provLine && ['claude', 'gemini', 'codex'].includes(provLine[1])) {
+        if (provLine && ['claude', 'gemini', 'codex', 'grok'].includes(provLine[1])) {
           currentProvider = provLine[1];
         }
         if (currentProvider && line.includes('enabled: true')) {
           enabledProviders.push(currentProvider);
         }
-        if (currentProvider && line.includes('primary: true')) {
-          primaryProvider = currentProvider;
-        }
       }
 
-      // Validate overlay completeness for each secondary provider
-      if (enabledProviders.length > 1 && primaryProvider) {
-        const secondaryProviders = enabledProviders.filter(p => p !== primaryProvider);
+      // Validate overlay completeness for every enabled provider.
+      if (enabledProviders.length > 0) {
         const overlayDetails = [];
 
-        for (const provider of secondaryProviders) {
+        for (const provider of enabledProviders) {
           let present = 0;
           let missing = 0;
           const missingFiles = [];

package/src/installer-v2/catalog-client.js

@@ -84,10 +84,17 @@ function readBundledPayload() {
   };
 }
 
+function catalogPublishedAt(catalog) {
+  const parsed = catalog.published_at ? Date.parse(catalog.published_at) : 0;
+  return Number.isNaN(parsed) ? 0 : parsed;
+}
+
+const SOURCE_PRIORITY = Object.freeze({ remote: 3, cache: 2, bundled: 1 });
+
 /**
- * Resolves a signed CHATI model catalog. Order is remote, verified local cache,
- * then the signed catalog bundled with the installed release. Vendor APIs and
- * local binary inference are deliberately outside this trust boundary.
+ * Resolves every available signed CHATI model catalog and selects the newest
+ * published snapshot. Remote wins ties, then cache, then the bundled release.
+ * Vendor APIs and local binary inference stay outside this trust boundary.
  */
 export async function resolveCapabilityCatalog({
   projectDir,
@@ -98,6 +105,7 @@ export async function resolveCapabilityCatalog({
   timeoutMs = 5000,
 } = {}) {
   const failures = [];
+  const candidates = [];
 
   if (catalogUrl && typeof fetchImpl === 'function') {
     try {
@@ -109,8 +117,7 @@ export async function resolveCapabilityCatalog({
       if (!response.ok) throw catalogError('CATALOG_HTTP_ERROR', `catalog endpoint returned HTTP ${response.status}`);
       const payload = parseSignedPayload(await response.json());
       const catalog = verifySignedCapabilityCatalog(payload, { clock, publicKeyPem });
-      const cache_path = projectDir ? writeCache(projectDir, payload) : null;
-      return Object.freeze({ source: 'remote', source_url: safeCatalogUrl, cache_path, catalog });
+      candidates.push({ source: 'remote', source_url: safeCatalogUrl, payload, catalog });
     } catch (error) {
       failures.push({ source: 'remote', code: error.code || error.name || 'CATALOG_FETCH_FAILED' });
     }
@@ -122,7 +129,7 @@ export async function resolveCapabilityCatalog({
       try {
         const payload = readSignedCatalogFile(cachePath);
         const catalog = verifySignedCapabilityCatalog(payload, { clock, publicKeyPem });
-        return Object.freeze({ source: 'cache', cache_path: CATALOG_CACHE_PATH, catalog });
+        candidates.push({ source: 'cache', cache_path: CATALOG_CACHE_PATH, payload, catalog });
       } catch (error) {
         failures.push({ source: 'cache', code: error.code || error.name || 'CATALOG_CACHE_INVALID' });
       }
@@ -132,10 +139,27 @@ export async function resolveCapabilityCatalog({
   try {
     const payload = readBundledPayload();
     const catalog = verifySignedCapabilityCatalog(payload, { clock, publicKeyPem });
-    return Object.freeze({ source: 'bundled', cache_path: null, catalog });
+    candidates.push({ source: 'bundled', cache_path: null, payload, catalog });
   } catch (error) {
     failures.push({ source: 'bundled', code: error.code || error.name || 'CATALOG_BUNDLE_INVALID' });
   }
 
-  throw catalogError('CATALOG_UNAVAILABLE', 'no fresh, signed CHATI model catalog is available', { failures });
+  if (candidates.length === 0) {
+    throw catalogError('CATALOG_UNAVAILABLE', 'no fresh, signed CHATI model catalog is available', { failures });
+  }
+
+  candidates.sort((left, right) =>
+    catalogPublishedAt(right.catalog) - catalogPublishedAt(left.catalog)
+    || SOURCE_PRIORITY[right.source] - SOURCE_PRIORITY[left.source]
+  );
+  const selected = candidates[0];
+  const cache_path = selected.source === 'remote' && projectDir
+    ? writeCache(projectDir, selected.payload)
+    : (selected.cache_path ?? null);
+  return Object.freeze({
+    source: selected.source,
+    ...(selected.source_url ? { source_url: selected.source_url } : {}),
+    cache_path,
+    catalog: selected.catalog,
+  });
 }

package/src/installer-v2/index.js

@@ -88,12 +88,15 @@ function artifactCore(input, createdAt) {
     expires_at: input.capability_snapshot.expires_at,
     models: input.capability_snapshot.models
       .filter((model) => selectedModelKeys.has(`${model.provider_id}:${model.model_id}`))
-      .map(({ provider_id, model_id, actions, adjudication_priority, highest_reasoning_configuration }) => ({
+      .map(({ provider_id, model_id, actions, adjudication_priority, highest_reasoning_configuration, routing_priority, tier, natural_role }) => ({
         provider_id,
         model_id,
         actions,
         ...(adjudication_priority !== undefined ? { adjudication_priority } : {}),
         ...(highest_reasoning_configuration !== undefined ? { highest_reasoning_configuration } : {}),
+        ...(routing_priority !== undefined ? { routing_priority } : {}),
+        ...(tier !== undefined ? { tier } : {}),
+        ...(natural_role !== undefined ? { natural_role } : {}),
       })),
   };
   return {