dsh-autotier 0.1.1 → 0.2.1

package/AGENTS.md

@@ -21,9 +21,28 @@ records repo-local decisions.
 - `src/service.ts` — `ctx.autotier` (`status()` and the live settings scope).
 - `src/types.ts` — shared vocabulary (tier ids, effort ids, routing modes,
   scenarios, route/status shapes).
-- `tests/` — vitest over the REAL published `0.1.2-rc.1` host packages
+- `src/wire.ts` — the `tier` Remote wire vocabulary: `TierStatus` (the public
+  `AutotierStatus` plus an additive `session` view), `TierCatalog`, their zod v4
+  codecs, and the three invocation descriptors shared verbatim by the host
+  manifest and the client contribution.
+- `src/typert.host.ts` — the hand-written host Typert manifest exported as
+  `./typert`; the harness's typert-loader registers the `tier` invocations from
+  it when the plugin mounts.
+- `src/tier-remote.ts` — `TierRemoteService` (`TypertRemoteService`, namespace
+  `tier`): `status(agentId?)` / `catalog()` / `setMode(mode, agentId?)`. The
+  override it writes is the same per-agent `RouteState.override` the router and
+  `/tier` read; `agents` is read optionally through the injected resolver.
+- `src/client/` — browser half: `$mount`s the Remote contribution, registers the
+  composer pill into `conversation.input.left` (id `tier-pill`) and the Settings
+  card into `settings.plugins.tab` (id `autotier`), with a pure presenter
+  (`present.ts`), inline scoped stylesheet (`styles.ts`), and en/zh dictionaries
+  (`locales.ts`). The slot registry is read through a local structural
+  `SlotsFace` (its owning package differs across host lines).
+- `tests/` — vitest over the REAL published `0.1.5-rc.1` host packages
   (`Context`, `SessionStore`, `SystemPrompt`, `ToolRuntime`, `CommandRuntime`,
-  in-memory `SettingsProvider`) plus one real Loader composition.
+  in-memory `SettingsProvider`) plus one real Loader composition. The browser
+  half is covered through its pure units (wire codecs, presenter, dictionaries)
+  and the `tier` service through a real mount with a scripted `agents` face.
 
 ## Hard rules applied here
 
@@ -63,8 +82,12 @@ table.
 `typescript` + `tsdown` are regular `dependencies` (the git channel's `prepare`
 builds with production dependencies alone). `scripts/prepare.mjs` wipes `lib/`,
 emits tsc declarations into `lib/types`, then runs tsdown (tsdown `clean` stays
-OFF so the declarations survive). `pnpm-workspace.yaml` declares
-`allowBuilds: { esbuild: true }`.
+OFF so the declarations survive). Two build faces: the node half
+(`lib/index.js` + `lib/typert.host.js`) and the browser half (`lib/client.js`),
+whose CJS factory is wrapped in `window.__ModuleLoader__.load({ id, factory })`
+with the shell's platform modules (`react`, `react/jsx-runtime`, the
+`@deepseek-ai/dsh-client-*` singletons) left external and zod inlined.
+`pnpm-workspace.yaml` declares `allowBuilds: { esbuild: true }`.
 
 ## Checks
 
@@ -72,7 +95,7 @@ OFF so the declarations survive). `pnpm-workspace.yaml` declares
 pnpm run verify:self-contained && pnpm run verify:artifacts && pnpm pack`. The
 plain `typecheck` resolves the local harness checkout's type faces through
 tsconfig `paths` (four levels up to `D:\deepseek-harness`); `typecheck:ci`
-resolves the npm-published `0.1.2-rc.1` faces (no paths) and is what CI runs —
+resolves the npm-published `0.1.5-rc.1` faces (no paths) and is what CI runs —
 keep both green.
 
 ## Release

package/CHANGELOG.md

@@ -5,6 +5,51 @@ All notable changes to this project are documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [Unreleased]
+
+## [0.2.1] - 2026-09-10
+
+### Changed
+
+- Pin the `@deepseek-ai/dsh-*` dev/test dependencies to the published `0.1.5-rc.1` line and record `0.1.5-rc.1` in `dshWorkshop.compatibility.dshVersions`; the monthly Compat workflow now runs against `0.1.5-rc.1`. The peer range `>=0.1.2-rc.1 <0.2.0 || >=0.1.5-alpha.1 <0.2.0` is unchanged, so no supported host line is dropped.
+
+### Docs
+
+- Refresh the five-language README compatibility baseline to `dsh-v0.1.5-rc.1` (verified 2026-09-10).
+
+## [0.2.0] - 2026-09-09
+
+### Added
+
+- **Browser half: a Settings card and a composer tier pill.** The plugin now
+  ships a `tier` Typert Remote service (`tier/status`, `tier/catalog`,
+  `tier/setMode`) behind a hand-written `./typert` host manifest, and a client
+  bundle that registers the composer pill into `conversation.input.left`
+  (id `tier-pill`) and the autotier card into the Plugins settings section
+  (`settings.plugins.tab`, id `autotier`). The pill shows the session's effective
+  mode (`AUTO` / `STRONG` / `CHEAP` / `OFF`) with an escalation badge and cycles
+  the session override on click; the card offers the full
+  `auto | strong | cheap | delegated | off` selector, the read-only tier
+  landings, the live session state, and a model-catalog dropdown fed by the live
+  `ctx.llm` registry. Copy ships in English and Simplified Chinese.
+- `TierStatus` extends the public `AutotierStatus` additively with a `session`
+  view (override, effective mode, applied tier and source, escalation, plan
+  mode, guard denials); the host still serves `ctx.autotier.status()` unchanged.
+- `zod` is now a runtime dependency (the strict wire codecs on both faces) and
+  the client peers (`dsh-api-remotes`, `dsh-client-connection`,
+  `dsh-client-locale`, `dsh-client-ui-conversation`, `dsh-client-ui-settings`,
+  `dsh-client-ui-slots`, `dsh-typert-protocol`) are declared as optional peers.
+
+### Notes
+
+- The session override stays runtime-only: `auto` clears it, and a plugin reload
+  restores the `cordis.yml` routing mode. Nothing is persisted.
+- `pnpm run verify:artifacts` now asserts the two new shipped faces
+  (`lib/typert.host.js` with its manifest shape, `lib/client.js` with its
+  ModuleLoader handshake and external platform modules).
+- The five-language READMEs are not updated in this change; the client copy is
+  English + Simplified Chinese only.
+
 ## [0.1.1] - 2026-09-09
 
 ### Added

package/README.es.md

@@ -20,7 +20,7 @@ strong con un TTL de retorno.
 | Harness | Estado |
 |---|---|
 | `@deepseek-ai/dsh` `0.1.2-rc.1` | compatible; el flujo compat instala esta línea de extremo a extremo |
-| `@deepseek-ai/dsh` `0.1.5-alpha.1` | compatible; verificada de extremo a extremo (perfil real, fila en `--dump-config`, smoke keyless) y en la matriz compat |
+| `@deepseek-ai/dsh` `0.1.5-rc.1` | compatible; verificada de extremo a extremo (perfil real, fila en `--dump-config`, smoke keyless) y en la matriz compat |
 | `@deepseek-ai/cordis` `^4.0.2`, `@deepseek-ai/schemastery` `^3.18.2` | base de peers |
 
 Los rangos de peers nombran ambas líneas publicadas (`>=0.1.2-rc.1 <0.2.0 ||
@@ -207,10 +207,9 @@ cruzado se rechaza al guardar y la última política válida sigue vigente.
   el nivel cheap si quieres el mismo perfil de coste (`docs/supporting-lanes.md`).
 - `followSession: true` en el nivel cheap significa que una elección explícita de
   modelo en la sesión gana; en ese caso el nivel cheap no puede imponer el suyo.
-- **Aún no hay tarjeta de Settings ni píldora del compositor.** El enrutamiento es
-  totalmente automático y la superficie host (`ctx.autotier.status()` /
-  `catalog()`, `/tier`, `tier_status`, `tier_route`) está completa; la mitad de
-  navegador está prevista para v0.2.
+- **La tarjeta de Settings y la píldora del compositor llegaron en 0.2.0.** La
+  tarjeta (modo de enrutamiento, aterrizajes de nivel, catálogo de modelos) vive en
+  la sección Plugins y la píldora cicla el modo de la sesión desde el compositor.
 - **Un modelo elegido en la GUI no se detecta automáticamente.** Usa
   `routingMode: delegated` o `/tier off` para detener el enrutamiento.
 - **Las posteriores por huella viven en memoria** y se reinician al reiniciar.
@@ -222,7 +221,7 @@ cruzado se rechaza al guardar y la última política válida sigue vigente.
 ```bash
 pnpm install
 pnpm run typecheck      # contra las caras de tipo del checkout local del harness
-pnpm run typecheck:ci   # contra las caras publicadas 0.1.2-rc.1 (lo que ejecuta CI)
+pnpm run typecheck:ci   # contra las caras publicadas 0.1.5-rc.1 (lo que ejecuta CI)
 pnpm test
 pnpm run build
 pnpm run verify:self-contained

package/README.hi.md

@@ -18,7 +18,7 @@ DeepSeek Harness के लिए स्वचालित मॉडल-स्
 | Harness | स्थिति |
 |---|---|
 | `@deepseek-ai/dsh` `0.1.2-rc.1` | संगत; compat वर्कफ़्लो इस लाइन को end-to-end इंस्टॉल करता है |
-| `@deepseek-ai/dsh` `0.1.5-alpha.1` | संगत; end-to-end सत्यापित (वास्तविक profile, `--dump-config` पंक्ति, keyless smoke) और compat मैट्रिक्स में |
+| `@deepseek-ai/dsh` `0.1.5-rc.1` | संगत; end-to-end सत्यापित (वास्तविक profile, `--dump-config` पंक्ति, keyless smoke) और compat मैट्रिक्स में |
 | `@deepseek-ai/cordis` `^4.0.2`, `@deepseek-ai/schemastery` `^3.18.2` | peer आधार |
 
 peer ranges दोनों प्रकाशित लाइनें स्पष्ट रूप से लिखती हैं (`>=0.1.2-rc.1 <0.2.0
@@ -203,9 +203,9 @@ dsh plugin --profile web remove dsh-autotier
   संरेखित करें (`docs/supporting-lanes.md`)।
 - cheap स्तर पर `followSession: true` का अर्थ है कि सत्र का स्पष्ट मॉडल चयन
   जीतता है; उस स्थिति में cheap स्तर अपना मॉडल नहीं थोप सकता।
-- **अभी Settings कार्ड या composer पिल नहीं है।** रूटिंग पूरी तरह स्वचालित है और
-  host सतह (`ctx.autotier.status()` / `catalog()`, `/tier`, `tier_status`,
-  `tier_route`) पूरी है; ब्राउज़र आधा v0.2 में नियोजित है।
+- **Settings कार्ड और composer पिल 0.2.0 में आ गए हैं।** कार्ड (रूटिंग मोड, लाइव
+  स्तर लैंडिंग, मॉडल कैटलॉग) Plugins सेटिंग्स अनुभाग में है और पिल composer से सत्र
+  मोड बदलता है।
 - **GUI में चुना गया मॉडल स्वचालित रूप से नहीं पहचाना जाता।** रूटिंग रोकने के लिए
   `routingMode: delegated` या `/tier off` इस्तेमाल करें।
 - **फिंगरप्रिंट posteriors केवल स्मृति में रहते हैं** और पुनः आरंभ पर रीसेट होते हैं।
@@ -217,7 +217,7 @@ dsh plugin --profile web remove dsh-autotier
 ```bash
 pnpm install
 pnpm run typecheck      # स्थानीय harness checkout के type faces के विरुद्ध
-pnpm run typecheck:ci   # प्रकाशित 0.1.2-rc.1 faces के विरुद्ध (CI यही चलाता है)
+pnpm run typecheck:ci   # प्रकाशित 0.1.5-rc.1 faces के विरुद्ध (CI यही चलाता है)
 pnpm test
 pnpm run build
 pnpm run verify:self-contained

package/README.md

@@ -18,7 +18,7 @@ escalate to the strong tier with a TTL fallback.
 | Harness | Status |
 |---|---|
 | `@deepseek-ai/dsh` `0.1.2-rc.1` | compatible; the compat workflow installs this line end-to-end |
-| `@deepseek-ai/dsh` `0.1.5-alpha.1` | compatible; verified end-to-end (real profile install, `--dump-config` row, keyless headless smoke) and in the compat matrix |
+| `@deepseek-ai/dsh` `0.1.5-rc.1` | compatible; verified end-to-end (real profile install, `--dump-config` row, keyless headless smoke) and in the compat matrix |
 | `@deepseek-ai/cordis` `^4.0.2`, `@deepseek-ai/schemastery` `^3.18.2` | peer baseline |
 
 Peer ranges name both published lines explicitly (`>=0.1.2-rc.1 <0.2.0 ||
@@ -203,10 +203,9 @@ refused at save time and the last good policy stays in effect.
   want the same cost profile (`docs/supporting-lanes.md`).
 - `followSession: true` on the cheap tier means an explicit session model choice
   wins; in that case the cheap tier cannot force its own model.
-- **No Settings card or composer pill yet.** Routing is fully automatic and the
-  host surface (`ctx.autotier.status()` / `catalog()`, `/tier`, `tier_status`,
-  `tier_route`) is complete; the browser half that renders a Settings tab and a
-  composer tier pill is planned for v0.2.
+- **The Settings card and composer tier pill shipped in 0.2.0.** The card
+  (routing mode, live tier landings, model catalog) lives in the Plugins settings
+  section and the pill cycles the session mode from the composer.
 - **A model picked in the GUI is not detected automatically.** The router does
   not watch the `agent-default-model` document, so switching models there does
   not by itself stop routing — use `routingMode: delegated` or `/tier off`.
@@ -221,7 +220,7 @@ refused at save time and the last good policy stays in effect.
 ```bash
 pnpm install
 pnpm run typecheck      # against the local harness checkout type faces
-pnpm run typecheck:ci   # against the published 0.1.2-rc.1 faces (what CI runs)
+pnpm run typecheck:ci   # against the published 0.1.5-rc.1 faces (what CI runs)
 pnpm test
 pnpm run build
 pnpm run verify:self-contained

package/README.pt.md

@@ -19,7 +19,7 @@ retorno.
 | Harness | Estado |
 |---|---|
 | `@deepseek-ai/dsh` `0.1.2-rc.1` | compatível; o fluxo compat instala esta linha ponta a ponta |
-| `@deepseek-ai/dsh` `0.1.5-alpha.1` | compatível; verificada ponta a ponta (perfil real, linha no `--dump-config`, smoke keyless) e na matriz compat |
+| `@deepseek-ai/dsh` `0.1.5-rc.1` | compatível; verificada ponta a ponta (perfil real, linha no `--dump-config`, smoke keyless) e na matriz compat |
 | `@deepseek-ai/cordis` `^4.0.2`, `@deepseek-ai/schemastery` `^3.18.2` | base de peers |
 
 Os ranges de peers nomeiam as duas linhas publicadas (`>=0.1.2-rc.1 <0.2.0 ||
@@ -205,10 +205,9 @@ cruzado é recusada ao salvar e a última política válida continua em vigor.
   cheap para o mesmo perfil de custo (`docs/supporting-lanes.md`).
 - `followSession: true` no nível cheap significa que uma escolha explícita de
   modelo na sessão vence; nesse caso o nível cheap não pode impor o seu.
-- **Ainda não há cartão de Settings nem pílula do compositor.** O roteamento é
-  totalmente automático e a superfície host (`ctx.autotier.status()` /
-  `catalog()`, `/tier`, `tier_status`, `tier_route`) está completa; a metade do
-  navegador está planejada para v0.2.
+- **O cartão de Settings e a pílula do compositor chegaram na 0.2.0.** O cartão
+  (modo de roteamento, aterrissagens de nível, catálogo de modelos) fica na seção
+  Plugins e a pílula cicla o modo da sessão pelo compositor.
 - **Um modelo escolhido na GUI não é detectado automaticamente.** Use
   `routingMode: delegated` ou `/tier off` para interromper o roteamento.
 - **As posteriores por impressão digital ficam em memória** e reiniciam a cada
@@ -221,7 +220,7 @@ cruzado é recusada ao salvar e a última política válida continua em vigor.
 ```bash
 pnpm install
 pnpm run typecheck      # contra as faces de tipo do checkout local do harness
-pnpm run typecheck:ci   # contra as faces publicadas 0.1.2-rc.1 (o que a CI executa)
+pnpm run typecheck:ci   # contra as faces publicadas 0.1.5-rc.1 (o que a CI executa)
 pnpm test
 pnpm run build
 pnpm run verify:self-contained

package/README.zh.md

@@ -15,7 +15,7 @@ DeepSeek Harness 的自动模型分档路由：一条用户指令进来，一个
 | Harness | 状态 |
 |---|---|
 | `@deepseek-ai/dsh` `0.1.2-rc.1` | 兼容；compat 工作流对该线做端到端安装验证 |
-| `@deepseek-ai/dsh` `0.1.5-alpha.1` | 兼容；已端到端实测（真实 profile 安装、`--dump-config` 行、keyless headless 冒烟）并纳入 compat 矩阵 |
+| `@deepseek-ai/dsh` `0.1.5-rc.1` | 兼容；已端到端实测（真实 profile 安装、`--dump-config` 行、keyless headless 冒烟）并纳入 compat 矩阵 |
 | `@deepseek-ai/cordis` `^4.0.2`、`@deepseek-ai/schemastery` `^3.18.2` | peer 基线 |
 
 peer 范围显式列出两条已发布线（`>=0.1.2-rc.1 <0.2.0 || >=0.1.5-alpha.1
@@ -184,9 +184,8 @@ dsh plugin --profile web remove dsh-autotier
   画像，请把它们各自的模型设置对齐到弱档（`docs/supporting-lanes.md`）。
 - 弱档 `followSession: true` 意味着会话中显式选择的模型优先；此时弱档无法强制
   使用自己的模型。
-- **暂无 Settings 卡片与 composer 胶囊**。路由已完全自动，host 面
-  （`ctx.autotier.status()` / `catalog()`、`/tier`、`tier_status`、
-  `tier_route`）已完整；浏览器半计划于 v0.2。
+- **Settings 卡片与 composer 胶囊已于 0.2.0 交付**。卡片（路由模式、实时档位落点、
+  模型目录）位于 Plugins 设置区，胶囊在输入区循环切换会话档位。
 - **GUI 里改选模型不会被自动识别**。请用 `routingMode: delegated` 或
   `/tier off` 关闭路由。
 - **指纹后验仅存于内存**，重启后重新学习。
@@ -197,7 +196,7 @@ dsh plugin --profile web remove dsh-autotier
 ```bash
 pnpm install
 pnpm run typecheck      # 对照本地 harness checkout 的类型面
-pnpm run typecheck:ci   # 对照已发布的 0.1.2-rc.1 类型面（CI 实际执行）
+pnpm run typecheck:ci   # 对照已发布的 0.1.5-rc.1 类型面（CI 实际执行）
 pnpm test
 pnpm run build
 pnpm run verify:self-contained

package/THIRD_PARTY_NOTICES.md

@@ -1,5 +1,36 @@
 # Third-party notices
 
+## zod (https://github.com/colinhacks/zod)
+
+The `tier` Remote wire codecs (`src/wire.ts`) are zod v4 schemas. `zod` is a
+declared runtime dependency (MIT) and its library code is inlined into the built
+`lib/index.js`, `lib/typert.host.js` and `lib/client.js` bundles; no zod source
+is modified.
+
+```
+MIT License
+
+Copyright (c) 2020 Colin McDonnell
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.
+```
+
 ## dsh-tier-router (`lib/pure.js`)
 
 The high-risk command guard in `src/guard-rules.ts` is a port of the rule table

package/docs/roadmap-v0.2.md

@@ -0,0 +1,114 @@
+# v0.2 roadmap: concrete designs for the deferred items
+
+This file records the researched, decision-ready design for every capability
+that is deliberately **not** in 0.1.x. Each entry states the goal, the exact
+mechanism, the acceptance criteria, and why it is not enabled yet. Nothing here
+is speculation: the seams named below were read in the harness checkout
+(`dsh-v0.1.5-alpha.1-13`).
+
+## 1. Browser half (Settings card + composer pill)
+
+**Status:** implemented on the `v0.2.0` line (client bundle + Typert Remote
+`tier/status|setMode|catalog`); see `src/client/`, `src/wire.ts`,
+`src/typert.host.ts`.
+
+**Why it was deferred:** the host surface was complete first (`ctx.autotier`),
+and the client half needs the browser bundle pipeline (tsdown CJS face wrapped
+in `window.__ModuleLoader__.load`), which is a packaging change rather than a
+routing change.
+
+## 2. Fingerprint posterior persistence
+
+**Goal:** a restarted harness keeps the per-shape cheap/strong win rates instead
+of re-learning from the judge's cold start.
+
+**Mechanism (chosen):** a dedicated settings namespace, not the user-facing
+`autotier` one:
+
+```ts
+ctx.settings.register('autotier-fingerprints', FingerprintSchema, { applies: 'live' })
+```
+
+- `FingerprintSchema` = `{ version: 1, entries: [{ key, cheapOK, cheapN, strongOK, strongN, observations, lastSeen }] }`, capped at the same LRU 2000.
+- Writes are **debounced** (≥30 s between flushes and one final flush on
+  `ctx.effect` disposal) and use `replace()` on the whole section, so a user
+  editing the document cannot produce a partial merge.
+- On mount, `PosteriorTable.hydrate(section)` validates and loads; a
+  `stateVersion`/`version` mismatch discards the section (the same rule the
+  session-projection cache uses).
+- A namespace that is absent (a deployment without settings) degrades to the
+  current in-memory behaviour — the plugin never depends on persistence.
+
+**Why not the `autotier` namespace:** it is user-facing; writing a large learned
+table into it would surface in the Settings card and collide with the user's
+revision on every flush. A separate namespace keeps the two concerns apart.
+
+**Acceptance:** a unit test proving hydrate → record → flush → hydrate is
+idempotent; an integration test proving a refused settings write leaves the
+in-memory table intact.
+
+**Why not enabled yet:** it adds a write path to a plugin whose current promise
+is "writes only the `autotier` namespace", and the benefit only appears after a
+long enough session history that the cold-start fallback has already paid for
+itself. Ship it behind `persistence.fingerprints: false` default.
+
+## 3. Attempt-first middle band (default on)
+
+**Goal:** start ambiguous turns on the cheap tier and escalate on a signal,
+which the cascade literature shows is cheaper *and* faster than deciding up
+front.
+
+**What is missing is calibration, not code:** the band, its `tauLow`, the
+verify-once review, and the effort-first ladder are implemented and tested; the
+shipped default is `intent.attemptBand.enabled: false` because the thresholds
+have never been measured on real traffic.
+
+**Mechanism:** `scripts/calibrate.mjs` + a 90-case labelled corpus:
+
+- Corpus: `fixtures/intent-corpus.jsonl`, one `{ text, expectedTier, hard }` per
+  line, balanced across the eight scenarios (11–12 each) plus 10 adversarial
+  "looks simple, is complex" cases.
+- The script replays the corpus through the *shipped* classifier (no LLM), then
+  sweeps `ruleThreshold`/`tauLow` and prints a table of PGR, APGR, CPT(50 %),
+  CPT(80 %), strong-call % and rule-layer hit rate — the same metrics RouteLLM's
+  `calibrate_threshold` reports.
+- CI gate (a vitest suite over the same corpus): **CPT(80 %) ≤ 40 %**,
+  **APGR ≥ 0.7**, routing quality ≥ 95 % of an always-strong oracle, rule-layer
+  zero-token hit ≥ 60 %.
+- Only when the gate is green does the shipped default flip to
+  `attemptBand.enabled: true`.
+
+**Why not enabled yet:** enabling an uncalibrated band would spend strong calls
+on turns the rules already classify correctly, which is exactly the cost the
+plugin exists to avoid.
+
+## 4. Long-context lane
+
+**Goal:** route very long sessions (est. tokens ≥ 30 k) to a model whose context
+window actually fits, instead of failing or compacting mid-turn.
+
+**Mechanism:** the same pre-flight module already answers "does this route
+exist"; extend it with `ctx.llm.resolveModelInfo(...).context?.contextWindow`:
+
+- When the assembled request's estimated tokens exceed the target route's
+  `contextWindow`, pick the first fallback entry (or the other tier) whose
+  window fits, and log the substitution once.
+- If nothing fits, leave the route alone — compaction owns that case, and a
+  router must not silently drop the user's context.
+
+**Why not yet:** `LlmCallConfig` carries no message payload at the request
+waterfall, so the estimate must come from the session's derived history; the
+read is cheap but it is a new dependency on `session.deriveMessages()`, and the
+harness's own compaction is the primary owner of this problem.
+
+## 5. Multi-router coexistence
+
+**Status:** implemented in 0.1.2 — a foreign `provider/model` at the request
+waterfall is detected, logged once per session, and surfaced by `/tier status`
+and `tier_status`.
+
+## 6. Explicit user selection
+
+**Status:** implemented in 0.1.2 — the applied tier is mirrored into the
+`agent-default-model` document, and an external change to that document moves
+every live session to `delegated` until `/tier auto`.