heyspex 0.2.6 → 0.2.7

package/dist/cli/hs-connect.mjs

@@ -2286,6 +2286,24 @@ var consoleSettingsStore = pgTable(
   },
   (table) => [primaryKey({ columns: [table.userId, table.vaultId, table.namespace] })]
 );
+var seatAssignments = pgTable(
+  "seat_assignments",
+  {
+    accountId: text("account_id").notNull(),
+    vaultId: text("vault_id").notNull(),
+    harness: text("harness").notNull(),
+    seatId: text("seat_id").notNull(),
+    model: text("model").notNull(),
+    // Set when a launch reported the harness REFUSED this model and the run fell
+    // back to auto (Copilot's `heyspex.copilot_model_fallback` event, HS-F4UM);
+    // cleared whenever the user sets a new model.
+    overrideRejectedAt: timestamp("override_rejected_at", { withTimezone: true }),
+    updatedAt: timestamp("updated_at", { withTimezone: true }).notNull().default(sql`now()`)
+  },
+  (table) => [
+    primaryKey({ columns: [table.accountId, table.vaultId, table.harness, table.seatId] })
+  ]
+);
 var wipLedger = pgTable(
   "wip_ledger",
   {
@@ -4289,7 +4307,7 @@ var COMMAND_SCOPES = Object.freeze({
   "hs-promote.md": { scope: "customer", why: "Capture \u2192 research \u2192 milestone promotion." },
   "hs-push.md": { scope: "customer", why: "Push an epic plan into the vault." },
   "hs-qc.md": { scope: "customer", why: "Post-plan QC gate." },
-  "hs-res.md": { scope: "customer", why: "Research method entrypoint (SpexCrawl/DeepSeek)." },
+  "hs-res.md": { scope: "customer", why: "Research method entrypoint (local Docker Firecrawl search + SpexCrawl/Firecrawl fetch; DeepSeek on the platform)." },
   "hs-resolve.md": { scope: "customer", why: "Resolution lane." },
   "hs-review.md": { scope: "customer", why: "Review queue." },
   "hs-view.md": { scope: "customer", why: "Open a console surface." },
@@ -4699,7 +4717,7 @@ function githubHookNames() {
 }
 function githubHookCommand(row2) {
   const tail = hookTail(row2);
-  return `R=node_modules/heyspex/scripts/claude-hooks/_run.mjs; [ -f "$R" ] || R=./scripts/claude-hooks/_run.mjs; [ -f "$R" ] || exit 0; exec node "$R" ${tail}`;
+  return `export HEYSPEX_HARNESS="\${HEYSPEX_HARNESS:-copilot}"; R=node_modules/heyspex/scripts/claude-hooks/_run.mjs; [ -f "$R" ] || R=./scripts/claude-hooks/_run.mjs; [ -f "$R" ] || exit 0; exec node "$R" ${tail}`;
 }
 function renderGithubHooksDocument() {
   const allowed = githubHookNames();

package/dist/cli/hs-defer.mjs

@@ -1256,7 +1256,7 @@ var init_interfaces = __esm({
 });
 
 // spex-console/src/lib/db/schema/postgres.ts
-var edgeTypeEnum, validationSeverityEnum, outboxOpEnum, tsvector, specs, tags, edges, wikilinks, specLinks, aliases, validationIssues, indexMeta, frontmatterFields, eventOutbox, captureSessions, handoffContext, claimEventKindEnum, activeClaimStatusEnum, pendingReasonEnum, focusEventKindEnum, specEventKindEnum, focusPin, captureFocusPin, captureFocusSelection, focusSelection, focusSkips, activeClaims, claimWaiters, fileClaims, claimEvents, focusEvents, focusAreas, focusAreasEvents, specEvents, rateLimitBuckets, userVaults, milestoneSnapshots, modelRegistryEntries, launchIntentStatusEnum, launchIntents, companionRelayPresence, companionSettingsStore, consoleSettingsStore, wipLedger, wipLedgerArchive, gatherResults, agentSessions, usageEvents, streamEvents, jobStreams, resolutionStatusEnum, resolutionFocusPin, resolutionLedger, workspaces, vaults, accountSettings, vaultGrants, pendingVaultGrants, githubInstallations, fleetMachines, fleetTasks, fleetResults, userApiKeys, apiKeys, mcpSessions, pairingCodes, companionSessions, inviteRequests, notifications, webhookIngestions, specSettlements, sessionBranchDeclarations;
+var edgeTypeEnum, validationSeverityEnum, outboxOpEnum, tsvector, specs, tags, edges, wikilinks, specLinks, aliases, validationIssues, indexMeta, frontmatterFields, eventOutbox, captureSessions, handoffContext, claimEventKindEnum, activeClaimStatusEnum, pendingReasonEnum, focusEventKindEnum, specEventKindEnum, focusPin, captureFocusPin, captureFocusSelection, focusSelection, focusSkips, activeClaims, claimWaiters, fileClaims, claimEvents, focusEvents, focusAreas, focusAreasEvents, specEvents, rateLimitBuckets, userVaults, milestoneSnapshots, modelRegistryEntries, launchIntentStatusEnum, launchIntents, companionRelayPresence, companionSettingsStore, consoleSettingsStore, seatAssignments, wipLedger, wipLedgerArchive, gatherResults, agentSessions, usageEvents, streamEvents, jobStreams, resolutionStatusEnum, resolutionFocusPin, resolutionLedger, workspaces, vaults, accountSettings, vaultGrants, pendingVaultGrants, githubInstallations, fleetMachines, fleetTasks, fleetResults, userApiKeys, apiKeys, mcpSessions, pairingCodes, companionSessions, inviteRequests, notifications, webhookIngestions, specSettlements, sessionBranchDeclarations;
 var init_postgres = __esm({
   "spex-console/src/lib/db/schema/postgres.ts"() {
     "use strict";
@@ -2206,6 +2206,24 @@ var init_postgres = __esm({
       },
       (table) => [primaryKey({ columns: [table.userId, table.vaultId, table.namespace] })]
     );
+    seatAssignments = pgTable(
+      "seat_assignments",
+      {
+        accountId: text("account_id").notNull(),
+        vaultId: text("vault_id").notNull(),
+        harness: text("harness").notNull(),
+        seatId: text("seat_id").notNull(),
+        model: text("model").notNull(),
+        // Set when a launch reported the harness REFUSED this model and the run fell
+        // back to auto (Copilot's `heyspex.copilot_model_fallback` event, HS-F4UM);
+        // cleared whenever the user sets a new model.
+        overrideRejectedAt: timestamp("override_rejected_at", { withTimezone: true }),
+        updatedAt: timestamp("updated_at", { withTimezone: true }).notNull().default(sql`now()`)
+      },
+      (table) => [
+        primaryKey({ columns: [table.accountId, table.vaultId, table.harness, table.seatId] })
+      ]
+    );
     wipLedger = pgTable(
       "wip_ledger",
       {

package/dist/cli/hs-index-rebuild.mjs

@@ -2015,7 +2015,7 @@ var init_interfaces = __esm({
 });
 
 // spex-console/src/lib/db/schema/postgres.ts
-var edgeTypeEnum, validationSeverityEnum, outboxOpEnum, tsvector, specs, tags, edges, wikilinks, specLinks, aliases, validationIssues, indexMeta, frontmatterFields, eventOutbox, captureSessions, handoffContext, claimEventKindEnum, activeClaimStatusEnum, pendingReasonEnum, focusEventKindEnum, specEventKindEnum, focusPin, captureFocusPin, captureFocusSelection, focusSelection, focusSkips, activeClaims, claimWaiters, fileClaims, claimEvents, focusEvents, focusAreas, focusAreasEvents, specEvents, rateLimitBuckets, userVaults, milestoneSnapshots, modelRegistryEntries, launchIntentStatusEnum, launchIntents, companionRelayPresence, companionSettingsStore, consoleSettingsStore, wipLedger, wipLedgerArchive, gatherResults, agentSessions, usageEvents, streamEvents, jobStreams, resolutionStatusEnum, resolutionFocusPin, resolutionLedger, workspaces, vaults, accountSettings, vaultGrants, pendingVaultGrants, githubInstallations, fleetMachines, fleetTasks, fleetResults, userApiKeys, apiKeys, mcpSessions, pairingCodes, companionSessions, inviteRequests, notifications, webhookIngestions, specSettlements, sessionBranchDeclarations;
+var edgeTypeEnum, validationSeverityEnum, outboxOpEnum, tsvector, specs, tags, edges, wikilinks, specLinks, aliases, validationIssues, indexMeta, frontmatterFields, eventOutbox, captureSessions, handoffContext, claimEventKindEnum, activeClaimStatusEnum, pendingReasonEnum, focusEventKindEnum, specEventKindEnum, focusPin, captureFocusPin, captureFocusSelection, focusSelection, focusSkips, activeClaims, claimWaiters, fileClaims, claimEvents, focusEvents, focusAreas, focusAreasEvents, specEvents, rateLimitBuckets, userVaults, milestoneSnapshots, modelRegistryEntries, launchIntentStatusEnum, launchIntents, companionRelayPresence, companionSettingsStore, consoleSettingsStore, seatAssignments, wipLedger, wipLedgerArchive, gatherResults, agentSessions, usageEvents, streamEvents, jobStreams, resolutionStatusEnum, resolutionFocusPin, resolutionLedger, workspaces, vaults, accountSettings, vaultGrants, pendingVaultGrants, githubInstallations, fleetMachines, fleetTasks, fleetResults, userApiKeys, apiKeys, mcpSessions, pairingCodes, companionSessions, inviteRequests, notifications, webhookIngestions, specSettlements, sessionBranchDeclarations;
 var init_postgres = __esm({
   "spex-console/src/lib/db/schema/postgres.ts"() {
     "use strict";
@@ -2965,6 +2965,24 @@ var init_postgres = __esm({
       },
       (table) => [primaryKey({ columns: [table.userId, table.vaultId, table.namespace] })]
     );
+    seatAssignments = pgTable(
+      "seat_assignments",
+      {
+        accountId: text("account_id").notNull(),
+        vaultId: text("vault_id").notNull(),
+        harness: text("harness").notNull(),
+        seatId: text("seat_id").notNull(),
+        model: text("model").notNull(),
+        // Set when a launch reported the harness REFUSED this model and the run fell
+        // back to auto (Copilot's `heyspex.copilot_model_fallback` event, HS-F4UM);
+        // cleared whenever the user sets a new model.
+        overrideRejectedAt: timestamp("override_rejected_at", { withTimezone: true }),
+        updatedAt: timestamp("updated_at", { withTimezone: true }).notNull().default(sql`now()`)
+      },
+      (table) => [
+        primaryKey({ columns: [table.accountId, table.vaultId, table.harness, table.seatId] })
+      ]
+    );
     wipLedger = pgTable(
       "wip_ledger",
       {

package/dist/cli/hs-index-reconcile.mjs

@@ -2010,7 +2010,7 @@ var init_interfaces = __esm({
 });
 
 // spex-console/src/lib/db/schema/postgres.ts
-var edgeTypeEnum, validationSeverityEnum, outboxOpEnum, tsvector, specs, tags, edges, wikilinks, specLinks, aliases, validationIssues, indexMeta, frontmatterFields, eventOutbox, captureSessions, handoffContext, claimEventKindEnum, activeClaimStatusEnum, pendingReasonEnum, focusEventKindEnum, specEventKindEnum, focusPin, captureFocusPin, captureFocusSelection, focusSelection, focusSkips, activeClaims, claimWaiters, fileClaims, claimEvents, focusEvents, focusAreas, focusAreasEvents, specEvents, rateLimitBuckets, userVaults, milestoneSnapshots, modelRegistryEntries, launchIntentStatusEnum, launchIntents, companionRelayPresence, companionSettingsStore, consoleSettingsStore, wipLedger, wipLedgerArchive, gatherResults, agentSessions, usageEvents, streamEvents, jobStreams, resolutionStatusEnum, resolutionFocusPin, resolutionLedger, workspaces, vaults, accountSettings, vaultGrants, pendingVaultGrants, githubInstallations, fleetMachines, fleetTasks, fleetResults, userApiKeys, apiKeys, mcpSessions, pairingCodes, companionSessions, inviteRequests, notifications, webhookIngestions, specSettlements, sessionBranchDeclarations;
+var edgeTypeEnum, validationSeverityEnum, outboxOpEnum, tsvector, specs, tags, edges, wikilinks, specLinks, aliases, validationIssues, indexMeta, frontmatterFields, eventOutbox, captureSessions, handoffContext, claimEventKindEnum, activeClaimStatusEnum, pendingReasonEnum, focusEventKindEnum, specEventKindEnum, focusPin, captureFocusPin, captureFocusSelection, focusSelection, focusSkips, activeClaims, claimWaiters, fileClaims, claimEvents, focusEvents, focusAreas, focusAreasEvents, specEvents, rateLimitBuckets, userVaults, milestoneSnapshots, modelRegistryEntries, launchIntentStatusEnum, launchIntents, companionRelayPresence, companionSettingsStore, consoleSettingsStore, seatAssignments, wipLedger, wipLedgerArchive, gatherResults, agentSessions, usageEvents, streamEvents, jobStreams, resolutionStatusEnum, resolutionFocusPin, resolutionLedger, workspaces, vaults, accountSettings, vaultGrants, pendingVaultGrants, githubInstallations, fleetMachines, fleetTasks, fleetResults, userApiKeys, apiKeys, mcpSessions, pairingCodes, companionSessions, inviteRequests, notifications, webhookIngestions, specSettlements, sessionBranchDeclarations;
 var init_postgres = __esm({
   "spex-console/src/lib/db/schema/postgres.ts"() {
     "use strict";
@@ -2960,6 +2960,24 @@ var init_postgres = __esm({
       },
       (table) => [primaryKey({ columns: [table.userId, table.vaultId, table.namespace] })]
     );
+    seatAssignments = pgTable(
+      "seat_assignments",
+      {
+        accountId: text("account_id").notNull(),
+        vaultId: text("vault_id").notNull(),
+        harness: text("harness").notNull(),
+        seatId: text("seat_id").notNull(),
+        model: text("model").notNull(),
+        // Set when a launch reported the harness REFUSED this model and the run fell
+        // back to auto (Copilot's `heyspex.copilot_model_fallback` event, HS-F4UM);
+        // cleared whenever the user sets a new model.
+        overrideRejectedAt: timestamp("override_rejected_at", { withTimezone: true }),
+        updatedAt: timestamp("updated_at", { withTimezone: true }).notNull().default(sql`now()`)
+      },
+      (table) => [
+        primaryKey({ columns: [table.accountId, table.vaultId, table.harness, table.seatId] })
+      ]
+    );
     wipLedger = pgTable(
       "wip_ledger",
       {

package/dist/cli/hs-init.mjs

@@ -2837,7 +2837,7 @@ var COMMAND_SCOPES = Object.freeze({
   "hs-promote.md": { scope: "customer", why: "Capture \u2192 research \u2192 milestone promotion." },
   "hs-push.md": { scope: "customer", why: "Push an epic plan into the vault." },
   "hs-qc.md": { scope: "customer", why: "Post-plan QC gate." },
-  "hs-res.md": { scope: "customer", why: "Research method entrypoint (SpexCrawl/DeepSeek)." },
+  "hs-res.md": { scope: "customer", why: "Research method entrypoint (local Docker Firecrawl search + SpexCrawl/Firecrawl fetch; DeepSeek on the platform)." },
   "hs-resolve.md": { scope: "customer", why: "Resolution lane." },
   "hs-review.md": { scope: "customer", why: "Review queue." },
   "hs-view.md": { scope: "customer", why: "Open a console surface." },
@@ -3166,7 +3166,7 @@ function githubHookNames() {
 }
 function githubHookCommand(row) {
   const tail = hookTail(row);
-  return `R=node_modules/heyspex/scripts/claude-hooks/_run.mjs; [ -f "$R" ] || R=./scripts/claude-hooks/_run.mjs; [ -f "$R" ] || exit 0; exec node "$R" ${tail}`;
+  return `export HEYSPEX_HARNESS="\${HEYSPEX_HARNESS:-copilot}"; R=node_modules/heyspex/scripts/claude-hooks/_run.mjs; [ -f "$R" ] || R=./scripts/claude-hooks/_run.mjs; [ -f "$R" ] || exit 0; exec node "$R" ${tail}`;
 }
 function renderGithubHooksDocument() {
   const allowed = githubHookNames();

package/dist/cli/hs-install.mjs

@@ -2342,7 +2342,7 @@ var COMMAND_SCOPES = Object.freeze({
   "hs-promote.md": { scope: "customer", why: "Capture \u2192 research \u2192 milestone promotion." },
   "hs-push.md": { scope: "customer", why: "Push an epic plan into the vault." },
   "hs-qc.md": { scope: "customer", why: "Post-plan QC gate." },
-  "hs-res.md": { scope: "customer", why: "Research method entrypoint (SpexCrawl/DeepSeek)." },
+  "hs-res.md": { scope: "customer", why: "Research method entrypoint (local Docker Firecrawl search + SpexCrawl/Firecrawl fetch; DeepSeek on the platform)." },
   "hs-resolve.md": { scope: "customer", why: "Resolution lane." },
   "hs-review.md": { scope: "customer", why: "Review queue." },
   "hs-view.md": { scope: "customer", why: "Open a console surface." },
@@ -2752,7 +2752,7 @@ function githubHookNames() {
 }
 function githubHookCommand(row) {
   const tail = hookTail(row);
-  return `R=node_modules/heyspex/scripts/claude-hooks/_run.mjs; [ -f "$R" ] || R=./scripts/claude-hooks/_run.mjs; [ -f "$R" ] || exit 0; exec node "$R" ${tail}`;
+  return `export HEYSPEX_HARNESS="\${HEYSPEX_HARNESS:-copilot}"; R=node_modules/heyspex/scripts/claude-hooks/_run.mjs; [ -f "$R" ] || R=./scripts/claude-hooks/_run.mjs; [ -f "$R" ] || exit 0; exec node "$R" ${tail}`;
 }
 function renderGithubHooksDocument() {
   const allowed = githubHookNames();

package/dist/cli/hs-join.mjs

@@ -23909,6 +23909,24 @@ var consoleSettingsStore = pgTable(
   },
   (table) => [primaryKey({ columns: [table.userId, table.vaultId, table.namespace] })]
 );
+var seatAssignments = pgTable(
+  "seat_assignments",
+  {
+    accountId: text("account_id").notNull(),
+    vaultId: text("vault_id").notNull(),
+    harness: text("harness").notNull(),
+    seatId: text("seat_id").notNull(),
+    model: text("model").notNull(),
+    // Set when a launch reported the harness REFUSED this model and the run fell
+    // back to auto (Copilot's `heyspex.copilot_model_fallback` event, HS-F4UM);
+    // cleared whenever the user sets a new model.
+    overrideRejectedAt: timestamp("override_rejected_at", { withTimezone: true }),
+    updatedAt: timestamp("updated_at", { withTimezone: true }).notNull().default(sql`now()`)
+  },
+  (table) => [
+    primaryKey({ columns: [table.accountId, table.vaultId, table.harness, table.seatId] })
+  ]
+);
 var wipLedger = pgTable(
   "wip_ledger",
   {
@@ -26034,7 +26052,7 @@ var COMMAND_SCOPES = Object.freeze({
   "hs-promote.md": { scope: "customer", why: "Capture \u2192 research \u2192 milestone promotion." },
   "hs-push.md": { scope: "customer", why: "Push an epic plan into the vault." },
   "hs-qc.md": { scope: "customer", why: "Post-plan QC gate." },
-  "hs-res.md": { scope: "customer", why: "Research method entrypoint (SpexCrawl/DeepSeek)." },
+  "hs-res.md": { scope: "customer", why: "Research method entrypoint (local Docker Firecrawl search + SpexCrawl/Firecrawl fetch; DeepSeek on the platform)." },
   "hs-resolve.md": { scope: "customer", why: "Resolution lane." },
   "hs-review.md": { scope: "customer", why: "Review queue." },
   "hs-view.md": { scope: "customer", why: "Open a console surface." },
@@ -26444,7 +26462,7 @@ function githubHookNames() {
 }
 function githubHookCommand(row2) {
   const tail = hookTail(row2);
-  return `R=node_modules/heyspex/scripts/claude-hooks/_run.mjs; [ -f "$R" ] || R=./scripts/claude-hooks/_run.mjs; [ -f "$R" ] || exit 0; exec node "$R" ${tail}`;
+  return `export HEYSPEX_HARNESS="\${HEYSPEX_HARNESS:-copilot}"; R=node_modules/heyspex/scripts/claude-hooks/_run.mjs; [ -f "$R" ] || R=./scripts/claude-hooks/_run.mjs; [ -f "$R" ] || exit 0; exec node "$R" ${tail}`;
 }
 function renderGithubHooksDocument() {
   const allowed = githubHookNames();

package/dist/cli/hs-next-launch.mjs

@@ -124,9 +124,9 @@ function resolveBearer({ envToken, credentialsText, accountId, legacyAccountId }
   if (entry?.mcp_token) return { token: entry.mcp_token, source: "credentials-file" };
   return { token: null, source: null };
 }
-function readTextOrNull(read, path3) {
+function readTextOrNull(read, path4) {
   try {
-    const raw = read(path3);
+    const raw = read(path4);
     return typeof raw === "string" ? raw : null;
   } catch {
     return null;
@@ -427,14 +427,14 @@ var VAULT_LESS_ENDPOINTS = Object.freeze([
   "GET /api/workspaces",
   "* /api/admin/dev-mode"
 ]);
-function pathnameOf(path3) {
-  const raw = String(path3 ?? "").split("?")[0].split("#")[0];
+function pathnameOf(path4) {
+  const raw = String(path4 ?? "").split("?")[0].split("#")[0];
   const noTrailing = raw.length > 1 ? raw.replace(/\/+$/, "") : raw;
   return noTrailing || "/";
 }
-function isVaultLessEndpoint(method, path3) {
+function isVaultLessEndpoint(method, path4) {
   const m = String(method || "GET").toUpperCase();
-  const pathname = pathnameOf(path3);
+  const pathname = pathnameOf(path4);
   return VAULT_LESS_ENDPOINTS.some((row) => {
     const [rowMethod, rowPath] = row.split(" ");
     return rowPath === pathname && (rowMethod === "*" || rowMethod === m);
@@ -806,11 +806,11 @@ function bearerHeaderFor(consoleUrl, opts = {}) {
     return {};
   }
 }
-function scopeHeadersFor(scope, method, path3) {
+function scopeHeadersFor(scope, method, path4) {
   if (scope === "none") {
-    if (!isVaultLessEndpoint(method, path3)) {
+    if (!isVaultLessEndpoint(method, path4)) {
       throw new Error(
-        `controlRequest: scope "none" is only allowed for the vault-less endpoints (${VAULT_LESS_ENDPOINTS.join(", ")}); ${method.toUpperCase()} ${path3} is vault-scoped and must name { accountId, vaultId }.`
+        `controlRequest: scope "none" is only allowed for the vault-less endpoints (${VAULT_LESS_ENDPOINTS.join(", ")}); ${method.toUpperCase()} ${path4} is vault-scoped and must name { accountId, vaultId }.`
       );
     }
     return {};
@@ -1728,10 +1728,80 @@ var CLAUDE_PERMISSION_MODE_OPTIONS = [
 var CURSOR_PERMISSION_MODE_OPTIONS = [];
 
 // spex-console/src/lib/model-registry/types.ts
+var DEFAULT_LAUNCH_BACKEND = "anthropic";
+function defaultLaunchBackendForHarness(harness) {
+  return harness === "copilot" ? null : DEFAULT_LAUNCH_BACKEND;
+}
 function isLaunchBackend(v) {
   return v === "anthropic" || v === "ollama" || v === "deepseek";
 }
 
+// spexharness/src/adapters/harness-detect.mjs
+import path3 from "node:path";
+
+// spexharness/src/adapters/detect-harness.mjs
+var OVERRIDES = /* @__PURE__ */ new Set(["copilot", "claude-code", "cursor"]);
+function detectHarness(payload, env = process.env) {
+  const forced = String(env?.HEYSPEX_HARNESS ?? "").trim().toLowerCase();
+  if (OVERRIDES.has(forced)) return forced;
+  if (!payload || typeof payload !== "object" || Array.isArray(payload)) return "unknown";
+  const p = (
+    /** @type {Record<string, unknown>} */
+    payload
+  );
+  if ("conversation_id" in p || "workspace_roots" in p || "cursor_version" in p) return "cursor";
+  const camel = ("toolName" in p || "toolArgs" in p) && !("tool_name" in p);
+  if ("timestamp" in p || camel) return "copilot";
+  if (typeof p.hook_event_name === "string" && typeof p.session_id === "string") return "claude-code";
+  return "unknown";
+}
+
+// spexharness/src/adapters/harness-detect.mjs
+var SEAT_HARNESSES = Object.freeze(["claude-code", "copilot"]);
+var COPILOT_ENV_MARKERS = Object.freeze(["COPILOT_AGENT_SESSION_ID", "COPILOT_CLI", "COPILOT_PLUGIN_ROOT"]);
+var CLAUDE_ENV_MARKERS = Object.freeze(["CLAUDECODE", "CLAUDE_CODE_SESSION_ID"]);
+var EXPLICIT = Object.freeze({
+  "claude-code": "claude-code",
+  claude: "claude-code",
+  claudecode: "claude-code",
+  copilot: "copilot",
+  "github-copilot": "copilot",
+  none: null
+});
+function normalizeHarness(value) {
+  const key = String(value ?? "").trim().toLowerCase();
+  if (!key || !Object.prototype.hasOwnProperty.call(EXPLICIT, key)) return void 0;
+  return EXPLICIT[key];
+}
+var present = (env, k) => typeof env?.[k] === "string" && env[k].trim() !== "";
+function detectHarness2(env = {}, payload = null, installedPlugins = []) {
+  const safeEnv = env && typeof env === "object" ? env : {};
+  if (present(safeEnv, "HEYSPEX_HARNESS")) {
+    const h = normalizeHarness(safeEnv.HEYSPEX_HARNESS);
+    if (h !== void 0) {
+      return Object.freeze({ harness: h, status: h ? "resolved" : "none", source: "env:HEYSPEX_HARNESS", detail: String(safeEnv.HEYSPEX_HARNESS).trim() });
+    }
+  }
+  if (payload && typeof payload === "object" && !Array.isArray(payload)) {
+    const fromPayload = detectHarness(payload, {});
+    if (fromPayload === "claude-code" || fromPayload === "copilot") {
+      return Object.freeze({ harness: fromPayload, status: "resolved", source: "hook-payload", detail: fromPayload });
+    }
+  }
+  const copilotMarker = COPILOT_ENV_MARKERS.find((k) => present(safeEnv, k));
+  if (copilotMarker) return Object.freeze({ harness: "copilot", status: "resolved", source: "env-marker", detail: copilotMarker });
+  const claudeMarker = CLAUDE_ENV_MARKERS.find((k) => present(safeEnv, k));
+  if (claudeMarker) return Object.freeze({ harness: "claude-code", status: "resolved", source: "env-marker", detail: claudeMarker });
+  const installed = [...new Set((Array.isArray(installedPlugins) ? installedPlugins : []).map(normalizeHarness).filter(Boolean))].sort();
+  if (installed.length === 1) {
+    return Object.freeze({ harness: installed[0], status: "resolved", source: "installed-plugin", detail: installed[0] });
+  }
+  if (installed.length > 1) {
+    return Object.freeze({ harness: null, status: "needs-choice", source: "installed-plugin", detail: null, choices: Object.freeze(installed) });
+  }
+  return Object.freeze({ harness: null, status: "none", source: "none", detail: null });
+}
+
 // spex-console/src/lib/cli/backend.ts
 var LAUNCH_BACKENDS = ["anthropic", "ollama", "deepseek"];
 var BACKEND_VALID_SET_MESSAGE = `valid backends: ${LAUNCH_BACKENDS.join(", ")}`;
@@ -1746,6 +1816,15 @@ function maskBackendEnvValue(key, value) {
   const last4 = value.length > 4 ? value.slice(-4) : value;
   return `****${last4}`;
 }
+function harnessFallbackBackend(env = process.env) {
+  let harness = null;
+  try {
+    harness = detectHarness2(env).harness ?? null;
+  } catch {
+    harness = null;
+  }
+  return defaultLaunchBackendForHarness(harness) ?? "harness-default (copilot: auto)";
+}
 async function resolveKindBackend(kind, deps) {
   const res = await controlRequest(deps, {
     method: "POST",
@@ -1760,7 +1839,7 @@ async function resolveKindBackend(kind, deps) {
     value: {
       kind,
       agent: typeof c.agent === "string" ? c.agent : "claude-code",
-      backend: typeof c.backend === "string" ? c.backend : "anthropic",
+      backend: typeof c.backend === "string" ? c.backend : harnessFallbackBackend(),
       backendSource: typeof c.backendSource === "string" ? c.backendSource : "?"
     }
   };

package/dist/cli/hs-spawn.mjs

@@ -699,6 +699,14 @@ var init_settings_nav_config = __esm({
             wired: true,
             ownerRef: "HS-ZY8T-EPIC-encrypted-key-store-and-settings-page"
           },
+          {
+            id: "seats",
+            glyph: "\u25EB",
+            title: "SpexFleet seats",
+            subtitle: "Which model each SpexFleet seat uses for you, per coding tool.",
+            wired: true,
+            ownerRef: "HS-K9L7-C86Z-EPIC-per-user-per-vault-seat-assignments"
+          },
           {
             id: "secrets",
             glyph: "\u26C9",
@@ -5398,7 +5406,7 @@ var init_interfaces = __esm({
 });
 
 // spex-console/src/lib/db/schema/postgres.ts
-var edgeTypeEnum, validationSeverityEnum, outboxOpEnum, tsvector, specs, tags, edges, wikilinks, specLinks, aliases, validationIssues, indexMeta, frontmatterFields, eventOutbox, captureSessions, handoffContext, claimEventKindEnum, activeClaimStatusEnum, pendingReasonEnum, focusEventKindEnum, specEventKindEnum, focusPin, captureFocusPin, captureFocusSelection, focusSelection, focusSkips, activeClaims, claimWaiters, fileClaims, claimEvents, focusEvents, focusAreas, focusAreasEvents, specEvents, rateLimitBuckets, userVaults, milestoneSnapshots, modelRegistryEntries, launchIntentStatusEnum, launchIntents, companionRelayPresence, companionSettingsStore, consoleSettingsStore, wipLedger, wipLedgerArchive, gatherResults, agentSessions, usageEvents, streamEvents, jobStreams, resolutionStatusEnum, resolutionFocusPin, resolutionLedger, workspaces, vaults, accountSettings, vaultGrants, pendingVaultGrants, githubInstallations, fleetMachines, fleetTasks, fleetResults, userApiKeys, apiKeys, mcpSessions, pairingCodes, companionSessions, inviteRequests, notifications, webhookIngestions, specSettlements, sessionBranchDeclarations;
+var edgeTypeEnum, validationSeverityEnum, outboxOpEnum, tsvector, specs, tags, edges, wikilinks, specLinks, aliases, validationIssues, indexMeta, frontmatterFields, eventOutbox, captureSessions, handoffContext, claimEventKindEnum, activeClaimStatusEnum, pendingReasonEnum, focusEventKindEnum, specEventKindEnum, focusPin, captureFocusPin, captureFocusSelection, focusSelection, focusSkips, activeClaims, claimWaiters, fileClaims, claimEvents, focusEvents, focusAreas, focusAreasEvents, specEvents, rateLimitBuckets, userVaults, milestoneSnapshots, modelRegistryEntries, launchIntentStatusEnum, launchIntents, companionRelayPresence, companionSettingsStore, consoleSettingsStore, seatAssignments, wipLedger, wipLedgerArchive, gatherResults, agentSessions, usageEvents, streamEvents, jobStreams, resolutionStatusEnum, resolutionFocusPin, resolutionLedger, workspaces, vaults, accountSettings, vaultGrants, pendingVaultGrants, githubInstallations, fleetMachines, fleetTasks, fleetResults, userApiKeys, apiKeys, mcpSessions, pairingCodes, companionSessions, inviteRequests, notifications, webhookIngestions, specSettlements, sessionBranchDeclarations;
 var init_postgres = __esm({
   "spex-console/src/lib/db/schema/postgres.ts"() {
     "use strict";
@@ -6348,6 +6356,24 @@ var init_postgres = __esm({
       },
       (table) => [primaryKey({ columns: [table.userId, table.vaultId, table.namespace] })]
     );
+    seatAssignments = pgTable(
+      "seat_assignments",
+      {
+        accountId: text("account_id").notNull(),
+        vaultId: text("vault_id").notNull(),
+        harness: text("harness").notNull(),
+        seatId: text("seat_id").notNull(),
+        model: text("model").notNull(),
+        // Set when a launch reported the harness REFUSED this model and the run fell
+        // back to auto (Copilot's `heyspex.copilot_model_fallback` event, HS-F4UM);
+        // cleared whenever the user sets a new model.
+        overrideRejectedAt: timestamp("override_rejected_at", { withTimezone: true }),
+        updatedAt: timestamp("updated_at", { withTimezone: true }).notNull().default(sql`now()`)
+      },
+      (table) => [
+        primaryKey({ columns: [table.accountId, table.vaultId, table.harness, table.seatId] })
+      ]
+    );
     wipLedger = pgTable(
       "wip_ledger",
       {

package/dist/cli/hs-vault-pull.mjs

@@ -1368,7 +1368,7 @@ var init_interfaces = __esm({
 });
 
 // spex-console/src/lib/db/schema/postgres.ts
-var edgeTypeEnum, validationSeverityEnum, outboxOpEnum, tsvector, specs, tags, edges, wikilinks, specLinks, aliases, validationIssues, indexMeta, frontmatterFields, eventOutbox, captureSessions, handoffContext, claimEventKindEnum, activeClaimStatusEnum, pendingReasonEnum, focusEventKindEnum, specEventKindEnum, focusPin, captureFocusPin, captureFocusSelection, focusSelection, focusSkips, activeClaims, claimWaiters, fileClaims, claimEvents, focusEvents, focusAreas, focusAreasEvents, specEvents, rateLimitBuckets, userVaults, milestoneSnapshots, modelRegistryEntries, launchIntentStatusEnum, launchIntents, companionRelayPresence, companionSettingsStore, consoleSettingsStore, wipLedger, wipLedgerArchive, gatherResults, agentSessions, usageEvents, streamEvents, jobStreams, resolutionStatusEnum, resolutionFocusPin, resolutionLedger, workspaces, vaults, accountSettings, vaultGrants, pendingVaultGrants, githubInstallations, fleetMachines, fleetTasks, fleetResults, userApiKeys, apiKeys, mcpSessions, pairingCodes, companionSessions, inviteRequests, notifications, webhookIngestions, specSettlements, sessionBranchDeclarations;
+var edgeTypeEnum, validationSeverityEnum, outboxOpEnum, tsvector, specs, tags, edges, wikilinks, specLinks, aliases, validationIssues, indexMeta, frontmatterFields, eventOutbox, captureSessions, handoffContext, claimEventKindEnum, activeClaimStatusEnum, pendingReasonEnum, focusEventKindEnum, specEventKindEnum, focusPin, captureFocusPin, captureFocusSelection, focusSelection, focusSkips, activeClaims, claimWaiters, fileClaims, claimEvents, focusEvents, focusAreas, focusAreasEvents, specEvents, rateLimitBuckets, userVaults, milestoneSnapshots, modelRegistryEntries, launchIntentStatusEnum, launchIntents, companionRelayPresence, companionSettingsStore, consoleSettingsStore, seatAssignments, wipLedger, wipLedgerArchive, gatherResults, agentSessions, usageEvents, streamEvents, jobStreams, resolutionStatusEnum, resolutionFocusPin, resolutionLedger, workspaces, vaults, accountSettings, vaultGrants, pendingVaultGrants, githubInstallations, fleetMachines, fleetTasks, fleetResults, userApiKeys, apiKeys, mcpSessions, pairingCodes, companionSessions, inviteRequests, notifications, webhookIngestions, specSettlements, sessionBranchDeclarations;
 var init_postgres = __esm({
   "spex-console/src/lib/db/schema/postgres.ts"() {
     "use strict";
@@ -2318,6 +2318,24 @@ var init_postgres = __esm({
       },
       (table) => [primaryKey({ columns: [table.userId, table.vaultId, table.namespace] })]
     );
+    seatAssignments = pgTable(
+      "seat_assignments",
+      {
+        accountId: text("account_id").notNull(),
+        vaultId: text("vault_id").notNull(),
+        harness: text("harness").notNull(),
+        seatId: text("seat_id").notNull(),
+        model: text("model").notNull(),
+        // Set when a launch reported the harness REFUSED this model and the run fell
+        // back to auto (Copilot's `heyspex.copilot_model_fallback` event, HS-F4UM);
+        // cleared whenever the user sets a new model.
+        overrideRejectedAt: timestamp("override_rejected_at", { withTimezone: true }),
+        updatedAt: timestamp("updated_at", { withTimezone: true }).notNull().default(sql`now()`)
+      },
+      (table) => [
+        primaryKey({ columns: [table.accountId, table.vaultId, table.harness, table.seatId] })
+      ]
+    );
     wipLedger = pgTable(
       "wip_ledger",
       {

package/dist/cli/hs-vault-push.mjs

@@ -1364,7 +1364,7 @@ var init_interfaces = __esm({
 });
 
 // spex-console/src/lib/db/schema/postgres.ts
-var edgeTypeEnum, validationSeverityEnum, outboxOpEnum, tsvector, specs, tags, edges, wikilinks, specLinks, aliases, validationIssues, indexMeta, frontmatterFields, eventOutbox, captureSessions, handoffContext, claimEventKindEnum, activeClaimStatusEnum, pendingReasonEnum, focusEventKindEnum, specEventKindEnum, focusPin, captureFocusPin, captureFocusSelection, focusSelection, focusSkips, activeClaims, claimWaiters, fileClaims, claimEvents, focusEvents, focusAreas, focusAreasEvents, specEvents, rateLimitBuckets, userVaults, milestoneSnapshots, modelRegistryEntries, launchIntentStatusEnum, launchIntents, companionRelayPresence, companionSettingsStore, consoleSettingsStore, wipLedger, wipLedgerArchive, gatherResults, agentSessions, usageEvents, streamEvents, jobStreams, resolutionStatusEnum, resolutionFocusPin, resolutionLedger, workspaces, vaults, accountSettings, vaultGrants, pendingVaultGrants, githubInstallations, fleetMachines, fleetTasks, fleetResults, userApiKeys, apiKeys, mcpSessions, pairingCodes, companionSessions, inviteRequests, notifications, webhookIngestions, specSettlements, sessionBranchDeclarations;
+var edgeTypeEnum, validationSeverityEnum, outboxOpEnum, tsvector, specs, tags, edges, wikilinks, specLinks, aliases, validationIssues, indexMeta, frontmatterFields, eventOutbox, captureSessions, handoffContext, claimEventKindEnum, activeClaimStatusEnum, pendingReasonEnum, focusEventKindEnum, specEventKindEnum, focusPin, captureFocusPin, captureFocusSelection, focusSelection, focusSkips, activeClaims, claimWaiters, fileClaims, claimEvents, focusEvents, focusAreas, focusAreasEvents, specEvents, rateLimitBuckets, userVaults, milestoneSnapshots, modelRegistryEntries, launchIntentStatusEnum, launchIntents, companionRelayPresence, companionSettingsStore, consoleSettingsStore, seatAssignments, wipLedger, wipLedgerArchive, gatherResults, agentSessions, usageEvents, streamEvents, jobStreams, resolutionStatusEnum, resolutionFocusPin, resolutionLedger, workspaces, vaults, accountSettings, vaultGrants, pendingVaultGrants, githubInstallations, fleetMachines, fleetTasks, fleetResults, userApiKeys, apiKeys, mcpSessions, pairingCodes, companionSessions, inviteRequests, notifications, webhookIngestions, specSettlements, sessionBranchDeclarations;
 var init_postgres = __esm({
   "spex-console/src/lib/db/schema/postgres.ts"() {
     "use strict";
@@ -2314,6 +2314,24 @@ var init_postgres = __esm({
       },
       (table) => [primaryKey({ columns: [table.userId, table.vaultId, table.namespace] })]
     );
+    seatAssignments = pgTable(
+      "seat_assignments",
+      {
+        accountId: text("account_id").notNull(),
+        vaultId: text("vault_id").notNull(),
+        harness: text("harness").notNull(),
+        seatId: text("seat_id").notNull(),
+        model: text("model").notNull(),
+        // Set when a launch reported the harness REFUSED this model and the run fell
+        // back to auto (Copilot's `heyspex.copilot_model_fallback` event, HS-F4UM);
+        // cleared whenever the user sets a new model.
+        overrideRejectedAt: timestamp("override_rejected_at", { withTimezone: true }),
+        updatedAt: timestamp("updated_at", { withTimezone: true }).notNull().default(sql`now()`)
+      },
+      (table) => [
+        primaryKey({ columns: [table.accountId, table.vaultId, table.harness, table.seatId] })
+      ]
+    );
     wipLedger = pgTable(
       "wip_ledger",
       {

package/dist/cli/hs-vault.mjs

@@ -1107,7 +1107,7 @@ var init_interfaces = __esm({
 });
 
 // spex-console/src/lib/db/schema/postgres.ts
-var edgeTypeEnum, validationSeverityEnum, outboxOpEnum, tsvector, specs, tags, edges, wikilinks, specLinks, aliases, validationIssues, indexMeta, frontmatterFields, eventOutbox, captureSessions, handoffContext, claimEventKindEnum, activeClaimStatusEnum, pendingReasonEnum, focusEventKindEnum, specEventKindEnum, focusPin, captureFocusPin, captureFocusSelection, focusSelection, focusSkips, activeClaims, claimWaiters, fileClaims, claimEvents, focusEvents, focusAreas, focusAreasEvents, specEvents, rateLimitBuckets, userVaults, milestoneSnapshots, modelRegistryEntries, launchIntentStatusEnum, launchIntents, companionRelayPresence, companionSettingsStore, consoleSettingsStore, wipLedger, wipLedgerArchive, gatherResults, agentSessions, usageEvents, streamEvents, jobStreams, resolutionStatusEnum, resolutionFocusPin, resolutionLedger, workspaces, vaults, accountSettings, vaultGrants, pendingVaultGrants, githubInstallations, fleetMachines, fleetTasks, fleetResults, userApiKeys, apiKeys, mcpSessions, pairingCodes, companionSessions, inviteRequests, notifications, webhookIngestions, specSettlements, sessionBranchDeclarations;
+var edgeTypeEnum, validationSeverityEnum, outboxOpEnum, tsvector, specs, tags, edges, wikilinks, specLinks, aliases, validationIssues, indexMeta, frontmatterFields, eventOutbox, captureSessions, handoffContext, claimEventKindEnum, activeClaimStatusEnum, pendingReasonEnum, focusEventKindEnum, specEventKindEnum, focusPin, captureFocusPin, captureFocusSelection, focusSelection, focusSkips, activeClaims, claimWaiters, fileClaims, claimEvents, focusEvents, focusAreas, focusAreasEvents, specEvents, rateLimitBuckets, userVaults, milestoneSnapshots, modelRegistryEntries, launchIntentStatusEnum, launchIntents, companionRelayPresence, companionSettingsStore, consoleSettingsStore, seatAssignments, wipLedger, wipLedgerArchive, gatherResults, agentSessions, usageEvents, streamEvents, jobStreams, resolutionStatusEnum, resolutionFocusPin, resolutionLedger, workspaces, vaults, accountSettings, vaultGrants, pendingVaultGrants, githubInstallations, fleetMachines, fleetTasks, fleetResults, userApiKeys, apiKeys, mcpSessions, pairingCodes, companionSessions, inviteRequests, notifications, webhookIngestions, specSettlements, sessionBranchDeclarations;
 var init_postgres = __esm({
   "spex-console/src/lib/db/schema/postgres.ts"() {
     "use strict";
@@ -2057,6 +2057,24 @@ var init_postgres = __esm({
       },
       (table) => [primaryKey({ columns: [table.userId, table.vaultId, table.namespace] })]
     );
+    seatAssignments = pgTable(
+      "seat_assignments",
+      {
+        accountId: text("account_id").notNull(),
+        vaultId: text("vault_id").notNull(),
+        harness: text("harness").notNull(),
+        seatId: text("seat_id").notNull(),
+        model: text("model").notNull(),
+        // Set when a launch reported the harness REFUSED this model and the run fell
+        // back to auto (Copilot's `heyspex.copilot_model_fallback` event, HS-F4UM);
+        // cleared whenever the user sets a new model.
+        overrideRejectedAt: timestamp("override_rejected_at", { withTimezone: true }),
+        updatedAt: timestamp("updated_at", { withTimezone: true }).notNull().default(sql`now()`)
+      },
+      (table) => [
+        primaryKey({ columns: [table.accountId, table.vaultId, table.harness, table.seatId] })
+      ]
+    );
     wipLedger = pgTable(
       "wip_ledger",
       {
@@ -4519,9 +4537,7 @@ async function listVaultsNeon(accountId2, deps = {}) {
       githubRemote: vaults.githubRemote,
       schemaVersion: vaults.schemaVersion,
       createdAt: vaults.createdAt,
-      archived: vaults.archived,
-      // [[HS-RRCG-8QDO-DIAG-a-shared-vault-is-labelled-read-only-in]] -- the grant's access level must reach the client.
-      access: vaultGrants.access
+      archived: vaults.archived
     }).from(vaultGrants).innerJoin(vaults, eq(vaults.id, vaultGrants.vaultId)).where(and(eq(vaultGrants.accountId, accountId2), ne(vaults.accountId, accountId2)));
     const toRecord = (r, granted) => ({
       id: r.id,
@@ -4540,9 +4556,7 @@ async function listVaultsNeon(accountId2, deps = {}) {
       // `GET /api/vaults` kept listing the vault with no `archived` field.
       archived: r.archived,
       ...r.githubRemote ? { github_remote: r.githubRemote } : {},
-      ...granted ? { granted: true } : {},
-      // [[HS-RRCG-8QDO-DIAG-a-shared-vault-is-labelled-read-only-in]]: granted rows only; unknown = read.
-      ...granted ? { access: r.access === "write" ? "write" : "read" } : {}
+      ...granted ? { granted: true } : {}
     });
     return [
       ...ownedRows.map((r) => toRecord(r, false)),

package/dist/cli/hs-workspace.mjs

@@ -376,7 +376,7 @@ var init_interfaces = __esm({
 });
 
 // spex-console/src/lib/db/schema/postgres.ts
-var edgeTypeEnum, validationSeverityEnum, outboxOpEnum, tsvector, specs, tags, edges, wikilinks, specLinks, aliases, validationIssues, indexMeta, frontmatterFields, eventOutbox, captureSessions, handoffContext, claimEventKindEnum, activeClaimStatusEnum, pendingReasonEnum, focusEventKindEnum, specEventKindEnum, focusPin, captureFocusPin, captureFocusSelection, focusSelection, focusSkips, activeClaims, claimWaiters, fileClaims, claimEvents, focusEvents, focusAreas, focusAreasEvents, specEvents, rateLimitBuckets, userVaults, milestoneSnapshots, modelRegistryEntries, launchIntentStatusEnum, launchIntents, companionRelayPresence, companionSettingsStore, consoleSettingsStore, wipLedger, wipLedgerArchive, gatherResults, agentSessions, usageEvents, streamEvents, jobStreams, resolutionStatusEnum, resolutionFocusPin, resolutionLedger, workspaces, vaults, accountSettings, vaultGrants, pendingVaultGrants, githubInstallations, fleetMachines, fleetTasks, fleetResults, userApiKeys, apiKeys, mcpSessions, pairingCodes, companionSessions, inviteRequests, notifications, webhookIngestions, specSettlements, sessionBranchDeclarations;
+var edgeTypeEnum, validationSeverityEnum, outboxOpEnum, tsvector, specs, tags, edges, wikilinks, specLinks, aliases, validationIssues, indexMeta, frontmatterFields, eventOutbox, captureSessions, handoffContext, claimEventKindEnum, activeClaimStatusEnum, pendingReasonEnum, focusEventKindEnum, specEventKindEnum, focusPin, captureFocusPin, captureFocusSelection, focusSelection, focusSkips, activeClaims, claimWaiters, fileClaims, claimEvents, focusEvents, focusAreas, focusAreasEvents, specEvents, rateLimitBuckets, userVaults, milestoneSnapshots, modelRegistryEntries, launchIntentStatusEnum, launchIntents, companionRelayPresence, companionSettingsStore, consoleSettingsStore, seatAssignments, wipLedger, wipLedgerArchive, gatherResults, agentSessions, usageEvents, streamEvents, jobStreams, resolutionStatusEnum, resolutionFocusPin, resolutionLedger, workspaces, vaults, accountSettings, vaultGrants, pendingVaultGrants, githubInstallations, fleetMachines, fleetTasks, fleetResults, userApiKeys, apiKeys, mcpSessions, pairingCodes, companionSessions, inviteRequests, notifications, webhookIngestions, specSettlements, sessionBranchDeclarations;
 var init_postgres = __esm({
   "spex-console/src/lib/db/schema/postgres.ts"() {
     "use strict";
@@ -1326,6 +1326,24 @@ var init_postgres = __esm({
       },
       (table) => [primaryKey({ columns: [table.userId, table.vaultId, table.namespace] })]
     );
+    seatAssignments = pgTable(
+      "seat_assignments",
+      {
+        accountId: text("account_id").notNull(),
+        vaultId: text("vault_id").notNull(),
+        harness: text("harness").notNull(),
+        seatId: text("seat_id").notNull(),
+        model: text("model").notNull(),
+        // Set when a launch reported the harness REFUSED this model and the run fell
+        // back to auto (Copilot's `heyspex.copilot_model_fallback` event, HS-F4UM);
+        // cleared whenever the user sets a new model.
+        overrideRejectedAt: timestamp("override_rejected_at", { withTimezone: true }),
+        updatedAt: timestamp("updated_at", { withTimezone: true }).notNull().default(sql`now()`)
+      },
+      (table) => [
+        primaryKey({ columns: [table.accountId, table.vaultId, table.harness, table.seatId] })
+      ]
+    );
     wipLedger = pgTable(
       "wip_ledger",
       {