omnilane 0.7.0

package/SECURITY.md

@@ -0,0 +1,37 @@
+# Security policy
+
+## Supported versions
+
+| Version | Security fixes |
+|---|---|
+| 0.5.x | Supported |
+| 0.4.x and older | Upgrade to the latest release first |
+
+## Reporting a vulnerability
+
+As of 2026-07-15, this repository does not have GitHub private vulnerability
+reporting enabled. Do not publish exploit details, tokens, prompts, model
+outputs, local paths, or other sensitive evidence in a public issue.
+
+Open a minimal [security coordination issue](https://github.com/Seraphim0916/omnilane/issues/new)
+that contains only:
+
+- the affected released version;
+- the broad component, such as installer, dispatcher, jobs CLI, or Live UI;
+- a request for a private contact channel.
+
+Wait for the maintainer to establish a private channel before sharing the
+reproduction or impact details. Maintainers should enable GitHub private
+vulnerability reporting when a stable private disclosure workflow is ready.
+
+Useful reports include a minimal reproduction, expected and actual behavior,
+impact, platform, and a proposed mitigation if available. Remove credentials,
+cookies, provider responses, and proprietary source code.
+
+## Security-relevant scope
+
+Examples include shell or routing injection, path traversal, unsafe installer
+replacement, cross-user prompt or result disclosure, loopback authentication
+bypass, unsafe symlink handling, and worker processes that survive a declared
+timeout. Model answer quality and upstream provider availability are normally
+not security vulnerabilities in Omnilane itself.

package/VERSION

@@ -0,0 +1 @@
+0.7.0

package/bin/omnilane

@@ -0,0 +1,72 @@
+#!/usr/bin/env bash
+set -euo pipefail
+# omnilane — global entrypoint so commands work from any directory.
+
+SELF="${BASH_SOURCE[0]}"
+# A relative readlink target (how npm links global bins) resolves against the
+# symlink's own directory, not the caller's cwd.
+while [[ -L "$SELF" ]]; do
+  TARGET="$(readlink "$SELF")"
+  case "$TARGET" in
+    /*) SELF="$TARGET" ;;
+    *) SELF="$(dirname "$SELF")/$TARGET" ;;
+  esac
+done
+REPO="$(cd "$(dirname "$SELF")/.." && pwd)"
+
+cmd="${1:-help}"; shift || true
+case "$cmd" in
+  version|--version|-V)
+    [[ -r "$REPO/VERSION" ]] || {
+      echo "omnilane: VERSION file is unavailable" >&2
+      exit 1
+    }
+    version="$(<"$REPO/VERSION")"
+    [[ "$version" =~ ^[0-9]+\.[0-9]+\.[0-9]+$ ]] || {
+      echo "omnilane: invalid VERSION file" >&2
+      exit 1
+    }
+    printf 'omnilane %s\n' "$version"
+    ;;
+  list)      exec bash "$REPO/scripts/dispatch.sh" --list ;;
+  route|dispatch) exec bash "$REPO/scripts/dispatch.sh" "$@" ;;
+  jobs)      exec bash "$REPO/scripts/jobs.sh" "$@" ;;
+  completion)
+    [[ $# -eq 1 ]] || {
+      echo "usage: omnilane completion bash|zsh" >&2
+      exit 2
+    }
+    case "$1" in
+      bash) cat "$REPO/completions/omnilane.bash" ;;
+      zsh)  cat "$REPO/completions/_omnilane" ;;
+      *) echo "usage: omnilane completion bash|zsh" >&2; exit 2 ;;
+    esac
+    ;;
+  release-audit) exec bash "$REPO/scripts/release-audit.sh" "$@" ;;
+  doctor)    exec bash "$REPO/scripts/doctor.sh" "$@" ;;
+  ui)
+    command -v python3 >/dev/null 2>&1 || {
+      echo "omnilane: ui requires Python 3.9 or newer" >&2
+      exit 1
+    }
+    exec python3 "$REPO/scripts/ui.py" "$@"
+    ;;
+  configure) exec bash "$REPO/scripts/configure.sh" "$@" ;;
+  help|--help|-h)
+    cat <<'EOF'
+omnilane — one routing table, every harness
+
+  omnilane version                      installed release version
+  omnilane list                         effective routing table
+  omnilane route [--vendor V] [flags] LANE "TASK"
+                                        dispatch or consult a model
+  omnilane jobs  [--json] COMMAND [ARGS]  list, status, result, stats, wait, or audit
+  omnilane completion bash|zsh           print a shell completion script
+  omnilane release-audit [flags]          offline, read-only release gate
+  omnilane doctor [--json]              read-only local health report
+  omnilane ui    start|status|url|stop
+  omnilane configure                    interactive lane menu
+EOF
+    ;;
+  *) echo "omnilane: unknown command '$cmd' (try: omnilane help)" >&2; exit 2 ;;
+esac

package/completions/_omnilane

@@ -0,0 +1,114 @@
+#compdef omnilane
+# Zsh completion for omnilane. Reads bounded names only; never dispatches.
+
+_omnilane_repo() {
+  if [[ -n "${OMNILANE_COMPLETION_REPO:-}" && -r "$OMNILANE_COMPLETION_REPO/routing.yaml" ]]; then
+    print -r -- "$OMNILANE_COMPLETION_REPO"
+    return 0
+  fi
+  local exe target
+  exe="${commands[omnilane]:-}" || return 1
+  while [[ -L "$exe" ]]; do
+    target="$(readlink "$exe")" || return 1
+    if [[ "$target" = /* ]]; then exe="$target"; else exe="${exe:h}/$target"; fi
+  done
+  (cd "${exe:h}/.." 2>/dev/null && pwd -P)
+}
+
+_omnilane_lanes() {
+  local repo home file
+  local -a files
+  repo="$(_omnilane_repo)" || return 0
+  home="${OMNILANE_HOME:-$HOME/.omnilane}"
+  files=()
+  for file in "$home/routing.local.yaml" "$repo/routing.yaml"; do
+    [[ -f "$file" && ! -L "$file" ]] && files+=("$file")
+  done
+  (( ${#files} )) || return 0
+  awk '
+    /^[a-z][a-z0-9-]*:[[:space:]]/ {
+      lane=$1; sub(/:$/, "", lane)
+      if (!seen[lane]++) print lane
+    }
+  ' "${files[@]}"
+}
+
+_omnilane_job_ids() {
+  local home root dir id count=0
+  home="${OMNILANE_HOME:-$HOME/.omnilane}"
+  root="$home/jobs"
+  [[ -d "$root" && ! -L "$root" ]] || return 0
+  for dir in "$root"/*(N/); do
+    [[ -L "$dir" ]] && continue
+    id="${dir:t}"
+    if [[ "$id" =~ '^[0-9]{8}-[0-9]{6}-[0-9]+-[0-9]+$' ]]; then
+      print -r -- "$id"
+      (( count += 1 ))
+      (( count < 1000 )) || break
+    fi
+  done
+}
+
+_omnilane() {
+  local command="${words[2]:-}" sub sub_index=3
+  local -a lanes ids
+  if (( CURRENT == 2 )); then
+    _values 'command' version list route dispatch jobs doctor release-audit ui configure completion help
+    return
+  fi
+  case "$command" in
+    route|dispatch)
+      lanes=("${(@f)$(_omnilane_lanes)}")
+      _arguments \
+        '--background[run in background]' \
+        '--dry-run[resolve and print the plan without side effects]' \
+        '--mode[execution mode]:mode:(advise work)' \
+        '--workdir[target directory]:directory:_directories' \
+        '--vendor[vendor override]:vendor:(codex claude grok gemini exec vote)' \
+        '--model[model override]:model:' \
+        '--effort[reasoning effort]:effort:(low medium high xhigh max)' \
+        '--timeout[per-call seconds]:seconds:' \
+        '--job-timeout[whole-job seconds]:seconds:' \
+        "1:lane:($lanes)" '2:task:'
+      ;;
+    jobs)
+      sub="${words[3]:-}"
+      if [[ "$sub" == "--json" ]]; then
+        sub_index=4
+        sub="${words[4]:-}"
+      fi
+      if (( CURRENT == sub_index )); then
+        _values 'job command' list status result tail retry stats wait audit prune help
+      elif (( CURRENT == sub_index + 1 )) &&
+           [[ "$sub" == status || "$sub" == result || "$sub" == wait ||
+              "$sub" == tail || "$sub" == retry ]]; then
+        ids=("${(@f)$(_omnilane_job_ids)}")
+        _values 'job id' "$ids[@]"
+      elif [[ "$sub" == list || "$sub" == status || "$sub" == result ]]; then
+        _values 'option' --json
+      elif [[ "$sub" == tail ]]; then
+        _arguments '--lines[output lines to show]:count:'
+      elif [[ "$sub" == retry ]]; then
+        _arguments '--background[re-dispatch in the background]'
+      elif [[ "$sub" == wait ]]; then
+        _arguments '--timeout[maximum wait seconds]:seconds:'
+      elif [[ "$sub" == stats || "$sub" == audit ]]; then
+        _arguments '--last[maximum jobs]:count:' '--json[versioned metadata output]'
+      elif [[ "$sub" == prune ]]; then
+        _arguments '--keep[completed jobs to retain]:count:' \
+          '--older-than[completed jobs older than N days]:days:' \
+          '--apply[delete eligible jobs]'
+      fi
+      ;;
+    doctor) _values 'option' --json ;;
+    release-audit)
+      _arguments '--target[release version]:version:' '--allow-dirty[permit a dirty worktree]' \
+        '--require-tag[require an annotated tag at HEAD]' '--manifest[include tracked inventory]' \
+        '--json[versioned JSON output]'
+      ;;
+    ui) _values 'ui command' start status url stop ;;
+    completion) _values 'shell' bash zsh ;;
+  esac
+}
+
+(( $+functions[compdef] )) && compdef _omnilane omnilane

package/completions/omnilane.bash

@@ -0,0 +1,123 @@
+# Bash completion for omnilane. This file reads routing/job names only; it never
+# invokes dispatch, provider CLIs, or the executable machine-local overlay.
+
+_omnilane_repo() {
+  if [[ -n "${OMNILANE_COMPLETION_REPO:-}" && -r "$OMNILANE_COMPLETION_REPO/routing.yaml" ]]; then
+    printf '%s\n' "$OMNILANE_COMPLETION_REPO"
+    return 0
+  fi
+  local exe target
+  exe="$(command -v omnilane 2>/dev/null)" || return 1
+  while [[ -L "$exe" ]]; do
+    target="$(readlink "$exe")" || return 1
+    case "$target" in
+      /*) exe="$target" ;;
+      *) exe="$(dirname "$exe")/$target" ;;
+    esac
+  done
+  (cd "$(dirname "$exe")/.." 2>/dev/null && pwd -P)
+}
+
+_omnilane_lanes() {
+  local repo home file
+  local files=()
+  repo="$(_omnilane_repo)" || return 0
+  home="${OMNILANE_HOME:-$HOME/.omnilane}"
+  for file in "$home/routing.local.yaml" "$repo/routing.yaml"; do
+    [[ -f "$file" && ! -L "$file" ]] && files+=("$file")
+  done
+  [[ ${#files[@]} -gt 0 ]] || return 0
+  awk '
+    /^[a-z][a-z0-9-]*:[[:space:]]/ {
+      lane=$1; sub(/:$/, "", lane)
+      if (!seen[lane]++) print lane
+    }
+  ' "${files[@]}"
+}
+
+_omnilane_job_ids() {
+  local home root dir id count=0
+  home="${OMNILANE_HOME:-$HOME/.omnilane}"
+  root="$home/jobs"
+  [[ -d "$root" && ! -L "$root" ]] || return 0
+  for dir in "$root"/*; do
+    [[ -d "$dir" && ! -L "$dir" ]] || continue
+    id="${dir##*/}"
+    if [[ "$id" =~ ^[0-9]{8}-[0-9]{6}-[0-9]+-[0-9]+$ ]]; then
+      printf '%s\n' "$id"
+      ((count += 1))
+      [[ "$count" -lt 1000 ]] || break
+    fi
+  done
+}
+
+_omnilane() {
+  local cur prev command sub words sub_index reply_line
+  COMPREPLY=()
+  cur="${COMP_WORDS[COMP_CWORD]}"
+  prev="${COMP_WORDS[COMP_CWORD-1]:-}"
+  command="${COMP_WORDS[1]:-}"
+  if [[ "$COMP_CWORD" -eq 1 ]]; then
+    words="version list route dispatch jobs doctor release-audit ui configure completion help"
+  else
+    case "$command" in
+      route|dispatch)
+        case "$prev" in
+          --mode) words="advise work" ;;
+          --vendor) words="codex claude grok gemini exec vote" ;;
+          --effort) words="low medium high xhigh max" ;;
+          --workdir)
+            COMPREPLY=()
+            while IFS= read -r reply_line; do
+              COMPREPLY+=("$reply_line")
+            done < <(compgen -d -- "$cur")
+            return ;;
+          --model|--timeout|--job-timeout) return ;;
+          *) words="--background --dry-run --help --mode --workdir --vendor --model --effort --timeout --job-timeout $(_omnilane_lanes)" ;;
+        esac
+        ;;
+      jobs)
+        sub="${COMP_WORDS[2]:-}"
+        sub_index=2
+        if [[ "$sub" == "--json" ]]; then
+          sub_index=3
+          sub="${COMP_WORDS[3]:-}"
+        fi
+        if [[ "$COMP_CWORD" -eq "$sub_index" ]]; then
+          words="list status result tail retry stats wait audit prune help"
+        elif [[ "$COMP_CWORD" -eq $((sub_index + 1)) &&
+                ( "$sub" == status || "$sub" == result || "$sub" == wait ||
+                  "$sub" == tail || "$sub" == retry ) ]]; then
+          words="$(_omnilane_job_ids)"
+        elif [[ "$sub" == list ]]; then
+          words="--json"
+        elif [[ "$sub" == status || "$sub" == result ]]; then
+          words="--json"
+        elif [[ "$sub" == tail ]]; then
+          words="--lines"
+        elif [[ "$sub" == retry ]]; then
+          words="--background"
+        elif [[ "$sub" == wait ]]; then
+          words="--timeout"
+        elif [[ "$sub" == stats || "$sub" == audit ]]; then
+          words="--last --json"
+        elif [[ "$sub" == prune ]]; then
+          words="--keep --older-than --apply"
+        else
+          return
+        fi
+        ;;
+      doctor) words="--json" ;;
+      release-audit) words="--target --allow-dirty --require-tag --manifest --json" ;;
+      ui) words="start status url stop" ;;
+      completion) words="bash zsh" ;;
+      *) return ;;
+    esac
+  fi
+  COMPREPLY=()
+  while IFS= read -r reply_line; do
+    COMPREPLY+=("$reply_line")
+  done < <(compgen -W "$words" -- "$cur")
+}
+
+complete -F _omnilane omnilane

package/local.sh.example

@@ -0,0 +1,37 @@
+# Copy to ~/.omnilane/local.sh — sourced by every runner. Never committed.
+# Use it for machine-specific binaries, proxies, and auth. Examples:
+
+# Absolute paths when the CLIs are not on the runners' PATH.
+# Keep the ${VAR:-...} form so per-call env overrides still win:
+# CLAUDE_BIN="${CLAUDE_BIN:-/opt/homebrew/bin/claude}"
+# CODEX_BIN="${CODEX_BIN:-$HOME/.local/bin/codex}"
+# GROK_BIN="${GROK_BIN:-/usr/local/bin/grok}"
+# AGY_BIN="${AGY_BIN:-/usr/local/bin/agy}"
+
+# Route a vendor CLI through a local proxy:
+# export ANTHROPIC_BASE_URL=http://127.0.0.1:8080
+
+# Watchdog cap for EACH CLI invocation (seconds), not a whole-job budget —
+# a retrying vendor (grok) or the vote panel makes several calls. Global default:
+# export OMNILANE_TIMEOUT=600
+# Per-lane override — lane upper-cased with "-" turned into "_". A one-off
+# `--timeout SEC` on the dispatch call still wins over both of these:
+# export OMNILANE_TIMEOUT_TRIAGE=600
+# export OMNILANE_TIMEOUT_HARD_JUDGMENT=1200
+# export OMNILANE_TIMEOUT_LONG_CONTEXT=1800
+
+# Grok retries an empty response; keep the explicit cost bound between 1 and 20.
+# export OMNILANE_GROK_MAX_ATTEMPTS=5
+
+# Optional whole-job fuse: lock wait + every retry/voter/round share this cap.
+# Disabled by default, except non-Git Codex work automatically reuses its
+# resolved per-call timeout (up to 999999999 seconds). A one-off
+# `--job-timeout SEC` wins over these values.
+# The automatic exception warns and falls back to the existing per-call
+# watchdog path if the bundled Perl supervisor is unavailable; it never makes
+# non-Git work Git-only.
+# For a deep full-repository audit, 2–4 hours is a starting range, not a default:
+# export OMNILANE_JOB_TIMEOUT=10800
+# export OMNILANE_JOB_TIMEOUT_HARD_JUDGMENT=14400
+# Pair it with a per-call guard such as:
+# export OMNILANE_TIMEOUT_HARD_JUDGMENT=1800

package/package.json

@@ -0,0 +1,54 @@
+{
+  "name": "omnilane",
+  "version": "0.7.0",
+  "description": "One routing table, every harness — classify subtasks into lanes and dispatch each lane to the best vendor's agentic CLI (Codex, Claude, Gemini, Grok) using your existing subscription logins.",
+  "bin": {
+    "omnilane": "bin/omnilane"
+  },
+  "files": [
+    "bin/",
+    "scripts/",
+    "!scripts/__pycache__",
+    "!**/*.pyc",
+    "completions/",
+    "ui/",
+    "routing.yaml",
+    "routing.local.yaml.example",
+    "local.sh.example",
+    "VERSION",
+    "CHANGELOG.md",
+    "README.md",
+    "README.zh-TW.md",
+    "README.zh-CN.md",
+    "README.ja.md",
+    "README.ko.md",
+    "SECURITY.md"
+  ],
+  "os": [
+    "darwin",
+    "linux"
+  ],
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/Seraphim0916/omnilane.git"
+  },
+  "homepage": "https://github.com/Seraphim0916/omnilane#readme",
+  "bugs": {
+    "url": "https://github.com/Seraphim0916/omnilane/issues"
+  },
+  "keywords": [
+    "agentic",
+    "cli",
+    "llm",
+    "routing",
+    "dispatch",
+    "codex",
+    "claude",
+    "gemini",
+    "grok",
+    "multi-model",
+    "orchestration"
+  ],
+  "license": "MIT",
+  "author": "Seraphim0916"
+}

package/routing.local.yaml.example

@@ -0,0 +1,41 @@
+# Copy to ~/.omnilane/routing.local.yaml — lines here override routing.yaml.
+# Same format: lane: vendor model effort   (first match per lane wins)
+
+# Example: send triage to a cheaper local setup and disable the grok lane.
+# triage:      codex gpt-5.6-luna low
+# live-search: off - -
+
+# consult is a multi-vendor direct-target chain. configure.sh intentionally
+# skips it because that menu writes one candidate per lane. If overriding it,
+# retain every vendor you want to address by name:
+# consult: codex gpt-5.6-sol max | claude claude-opus-4-8 high | grok grok-4.5 - | gemini "Gemini 3.1 Pro (High)" -
+
+# ── Starter profiles ─────────────────────────────────────────────
+# Uncomment ONE block that matches what you actually subscribe to.
+# You never need every vendor — unmatched lanes fall back down the chain
+# in routing.yaml automatically.
+
+# Profile: Claude-only (no Codex/Gemini/Grok) — route everything to Claude.
+# hardest-coding:  claude claude-opus-4-8 high
+# bulk-mechanical: claude claude-sonnet-5 high
+# triage:          claude claude-haiku-4-5 -
+# hard-judgment:   claude claude-opus-4-8 high
+# ui-draft:        claude claude-opus-4-8 high
+# long-context:    claude claude-opus-4-8 high
+# fast-agentic:    claude claude-sonnet-5 high
+# live-search:     off - -
+# coding-overflow: off - -
+
+# Profile: Claude Code (Fable 5) as the main loop — let Fable keep judgment/taste,
+# push only coding volume out to Codex.
+# hard-judgment:   claude claude-fable-5 high
+# taste-final:     claude claude-fable-5 high
+
+# Profile: Codex-heavy (Sol main) — keep the hard lanes on Codex, Claude for taste.
+# taste-final:     claude claude-opus-4-8 high
+# long-context:    codex gpt-5.6-sol high
+
+# Profile: no Codex subscription — promote Claude/Gemini into the coding lanes.
+# hardest-coding:  claude claude-opus-4-8 high
+# bulk-mechanical: gemini "Gemini 3.5 Flash (High)" -
+# triage:          gemini "Gemini 3.5 Flash (Low)" -

package/routing.yaml

@@ -0,0 +1,34 @@
+# omnilane — single routing table shared by every harness (CC / Codex / Grok / Antigravity)
+# Format: one lane per line ->  lane: vendor model effort [| vendor model effort | off]
+#   vendor  = codex | claude | grok | gemini
+#   effort  = codex reasoning effort / claude --effort / agy thinking suffix / (grok: ignored)
+#   Fallback chain: the first candidate whose vendor CLI is installed wins, so the
+#   same table degrades gracefully when you only subscribe to one or two vendors.
+# Override any line in ~/.omnilane/routing.local.yaml (same format; local wins).
+# Provenance (audited 2026-07-12): defaults follow Artificial Analysis data, 2026-07
+# snapshot. Verified against AA site records + vendor pricing pages: Intelligence &
+# Coding indexes and 7:2:1 blended prices all match (AA field price1mBlended7To2To1);
+# coding cost-per-task is chart-only (not independently reconstructed). Prices are
+# standard short-context API tier — on subscription CLIs treat $ as relative ranking.
+# Your own job outcomes (~/.omnilane/jobs/) outrank these priors; edit lanes to match.
+
+hardest-coding:  codex gpt-5.6-sol xhigh | claude claude-opus-4-8 high  # AA coding 78.35; xhigh beats max (77.39) at lower cost — verified
+bulk-mechanical: codex gpt-5.6-terra max | claude claude-sonnet-5 high | gemini "Gemini 3.5 Flash (High)" -  # Terra 76.66 ~= Fable-class at a fraction of the cost
+triage:          codex gpt-5.6-luna medium | gemini "Gemini 3.5 Flash (Low)" - | claude claude-haiku-4-5 -  # high-volume scans
+hard-judgment:   codex gpt-5.6-sol max | claude claude-opus-4-8 high    # Sol max Intelligence 58.9 — second only to Fable 5 (59.9, fallback composite)
+taste-final:     claude claude-opus-4-8 high | codex gpt-5.6-sol max    # user-facing prose, prompt/doc polish, Chinese phrasing, style arbitration
+consult:         codex gpt-5.6-sol max | claude claude-opus-4-8 high | grok grok-4.5 - | gemini "Gemini 3.1 Pro (High)" -  # direct named-model consultation; use --vendor to prevent fallback
+ui-draft:        codex gpt-5.6-sol xhigh | claude claude-opus-4-8 high  # only with a design system / reference images; open-ended visual taste -> taste-final
+long-context:    gemini "Gemini 3.1 Pro (High)" - | claude claude-opus-4-8 high | codex gpt-5.6-sol high  # 1M-token synthesis ONLY — never agentic loops (AA agentic 21.4)
+fast-agentic:    gemini "Gemini 3.5 Flash (High)" - | codex gpt-5.6-luna high  # speed + agentic tool loops
+live-search:     grok grok-4.5 - | off          # native X/web search lane; no real substitute
+coding-overflow: grok grok-4.5 - | off          # codex-quota relief valve: mid-tier coding (AA 72.45); verify factual claims (hallucination 0.54)
+arbitrate:       off - -                        # opinion panel is OPT-IN: it costs one call per voter per round.
+                                                # Enable: `arbitrate: vote codex,claude,grok -` (any 1-4 of codex/claude/grok/gemini)
+                                                # Debate round (each voter rebuts the others): set the effort field to 2.
+                                                # Custom gate: `arbitrate: exec /path/to/script -`
+# Claude Fable 5 (claude-fable-5) is deliberately absent from the defaults: the top Claude tier
+# is usually the MAIN LOOP itself, not a dispatched worker, and it prices above Opus. If you want
+# to route to it anyway, pick it in the configurator or set e.g.
+#   taste-final: claude claude-fable-5 high
+# in ~/.omnilane/routing.local.yaml.

package/scripts/configure.sh

@@ -0,0 +1,134 @@
+#!/usr/bin/env bash
+set -euo pipefail
+# omnilane interactive lane configurator — writes ~/.omnilane/routing.local.yaml.
+# Pure bash + a tty, no extra dependencies. Prefer editing routing.local.yaml
+# by hand for scripted/non-interactive setups.
+
+source "$(dirname "${BASH_SOURCE[0]}")/lib/common.sh"
+source "$(dirname "${BASH_SOURCE[0]}")/lib/i18n.sh"
+
+LOCAL_FILE="$OMNILANE_HOME/routing.local.yaml"
+
+# Curated suggestions only — "c" always allows free text so new models work.
+CODEX_MODELS=("gpt-5.6-sol" "gpt-5.6-terra" "gpt-5.6-luna")
+CODEX_EFFORTS=("xhigh" "max" "ultra" "high" "medium" "low" "minimal" "none")
+CLAUDE_MODELS=("claude-opus-4-8" "claude-fable-5" "claude-sonnet-5" "claude-haiku-4-5")
+CLAUDE_EFFORTS=("max" "xhigh" "high" "medium" "low" "-")
+GEMINI_MODELS=("Gemini 3.1 Pro (High)" "Gemini 3.1 Pro (Low)" "Gemini 3.5 Flash (High)" "Gemini 3.5 Flash (Medium)" "Gemini 3.5 Flash (Low)")
+GROK_MODELS=("grok-4.5" "grok-4.3")
+
+custom_value_is_safe() {
+  case "$1" in
+    *'$'*|*'`'*|*'"'*|*'\'*|*'#'*|*'|'*|*$'\r'*) return 1 ;;
+    *) return 0 ;;
+  esac
+}
+
+warn_unsafe_value() {
+  echo 'omnilane: unsafe custom value (not allowed: $ ` " \ # |)' >&2
+}
+
+pick() { # title, options... -> prints the chosen value
+  local title="$1"; shift
+  local opts=("$@") i choice
+  echo "$title" >&2
+  for i in "${!opts[@]}"; do printf '  %d) %s\n' "$((i + 1))" "${opts[$i]}" >&2; done
+  printf '%s\n' "$(msg cfg_custom)" >&2
+  while true; do
+    read -rp "> " choice || choice=""
+    [[ -z "$choice" ]] && { echo "$(msg cfg_aborted)" >&2; exit 1; }
+    if [[ "$choice" == "c" ]]; then
+      read -rp "$(msg cfg_custom_value)" choice || choice=""
+      if [[ -n "$choice" ]] && custom_value_is_safe "$choice"; then
+        printf '%s' "$choice"; return
+      fi
+      [[ -n "$choice" ]] && warn_unsafe_value
+      continue
+    fi
+    if [[ "$choice" =~ ^[0-9]+$ ]] && (( choice >= 1 && choice <= ${#opts[@]} )); then
+      printf '%s' "${opts[$((choice - 1))]}"; return
+    fi
+    echo "$(msgf cfg_pick_or_c "${#opts[@]}")" >&2
+  done
+}
+
+LANES=()
+while IFS= read -r line; do
+  if [[ "$line" =~ ^([a-z][a-z0-9-]*): ]]; then
+    lane="${BASH_REMATCH[1]}"
+    [[ "$lane" == "consult" ]] || LANES+=("$lane")
+  fi
+done < "$OMNILANE_REPO/routing.yaml"
+
+echo "$(msg cfg_title)"
+bash "$OMNILANE_REPO/scripts/dispatch.sh" --list
+echo
+
+OVERRIDES=()
+while true; do
+  echo "$(msg cfg_pick_lane)"
+  for i in "${!LANES[@]}"; do printf '  %d) %s\n' "$((i + 1))" "${LANES[$i]}"; done
+  read -rp "lane> " n || n=""
+  [[ -z "$n" ]] && break
+  if ! [[ "$n" =~ ^[0-9]+$ ]] || (( n < 1 || n > ${#LANES[@]} )); then
+    echo "$(msgf cfg_pick_range "${#LANES[@]}")"; continue
+  fi
+  lane="${LANES[$((n - 1))]}"
+  vendor="$(pick "$(msgf cfg_vendor_for "$lane")" codex claude grok gemini "vote (multi-model panel)" "exec (your own script/gate)" off)"
+  [[ "$vendor" == exec* ]] && vendor="exec"
+  [[ "$vendor" == vote* ]] && vendor="vote"
+  if [[ "$vendor" == "off" ]]; then
+    OVERRIDES+=("$lane: off - -")
+    echo "-> $lane: off"; echo; continue
+  fi
+  case "$vendor" in
+    codex)  model="$(pick "$(msg cfg_model)" "${CODEX_MODELS[@]}")";  effort="$(pick "$(msg cfg_effort)" "${CODEX_EFFORTS[@]}")" ;;
+    claude) model="$(pick "$(msg cfg_model)" "${CLAUDE_MODELS[@]}")"; effort="$(pick "$(msg cfg_effort)" "${CLAUDE_EFFORTS[@]}")" ;;
+    gemini) model="$(pick "$(msg cfg_model)" "${GEMINI_MODELS[@]}")"; effort="-" ;;
+    grok)   model="$(pick "$(msg cfg_model)" "${GROK_MODELS[@]}")";   effort="-" ;;
+    vote)   while true; do
+              count="$(pick "$(msg cfg_voters_count)" "1" "2" "3" "4")"
+              [[ "$count" =~ ^[1-4]$ ]] && break
+              echo "$(msg cfg_voters_range)" >&2
+            done
+            model=""; remaining=(codex claude grok gemini)
+            for ((s = 1; s <= count; s++)); do
+              v="$(pick "$(msgf cfg_voter_n "$s")" "${remaining[@]}")"
+              model+="${model:+,}$v"
+              next=()
+              for r in "${remaining[@]}"; do [[ "$r" == "$v" ]] || next+=("$r"); done
+              # next is empty once every vendor is picked; the bare expansion
+              # is an unbound-variable error under set -u on Bash 3.2.
+              remaining=(${next[@]+"${next[@]}"})
+            done
+            effort="$(pick "$(msg cfg_rounds)" "1" "2")"
+            [[ "$effort" == "1" ]] && effort="-" ;;
+    exec)   read -rp "$(msg cfg_exec_path)" model || model=""
+            [[ -n "$model" ]] || { echo "$(msg cfg_empty_path)"; continue; }
+            effort="-" ;;
+    *)      model="$(pick "$(msg cfg_model)" "custom")";              effort="-" ;;
+  esac
+  if ! custom_value_is_safe "$vendor" || ! custom_value_is_safe "$model" ||
+     ! custom_value_is_safe "$effort" ||
+     [[ "$vendor" == *[[:space:]]* || "$effort" == *[[:space:]]* ]]; then
+    warn_unsafe_value; continue
+  fi
+  [[ "$model" == *[[:space:]]* ]] && model="\"$model\""
+  OVERRIDES+=("$lane: $vendor $model $effort")
+  echo "-> $lane: $vendor $model $effort"
+  echo
+done
+
+[[ ${#OVERRIDES[@]} -gt 0 ]] || { echo "$(msg cfg_no_changes)"; exit 0; }
+
+mkdir -p "$OMNILANE_HOME"
+[[ -f "$LOCAL_FILE" ]] && cp "$LOCAL_FILE" "$LOCAL_FILE.bak"
+{
+  echo "# written by scripts/configure.sh on $(date +%F) — first match per lane wins"
+  printf '%s\n' "${OVERRIDES[@]}"
+  # keep earlier customizations below (new lines above shadow same-lane old ones)
+  [[ -f "$LOCAL_FILE.bak" ]] && grep -v '^#' "$LOCAL_FILE.bak" || true
+} > "$LOCAL_FILE"
+
+echo "$(msgf cfg_wrote "$LOCAL_FILE")"
+bash "$OMNILANE_REPO/scripts/dispatch.sh" --list