orchestrator-workflow 0.27.0 → 0.29.0

package/dist/cli.js

@@ -5,10 +5,13 @@ import { Command } from "commander";
 import inquirer from "inquirer";
 import { PACKAGE_VERSION } from "./assets.js";
 import { buildApplyInitInputs } from "./cli-apply.js";
+import { buildInitInitInputs } from "./cli-init.js";
 import { resolveInitInputs } from "./cli-inputs.js";
 import { HARNESSES, detectHarnesses } from "./detect.js";
 import { DEFAULT_MODELS, PROFILES } from "./models.js";
 import { MANIFEST_PATH, readInstalledManifest, runInit } from "./init.js";
+import { parseRouting } from "./routing.js";
+import { codexCatalogWarnings, legacyOpencodeFallbacks, parseOpencodeModelMaps, mergeRoutingStateLayers, } from "./routing-state.js";
 import { OPERATOR_MANIFEST_FILENAME, OperatorManifestLockTimeoutError, applyRegistrationFailureMessage, createOperatorManifest, operatorManifestState, readOperatorManifest, resolveOperatorHome, safeRealpath, updateOperatorManifest, upsertOperatorTarget, } from "./operator-manifest.js";
 import { runUninstall } from "./uninstall.js";
 import { adoptExitCodeForStatus, adoptJsonExtras, inspectTarget, runDoctor, statOrClassify, suppressSuccessLine, targetReportToJson, } from "./doctor.js";
@@ -42,6 +45,20 @@ function requireDirectory(dir) {
     }
     return targetDir;
 }
+function readJsonOption(path, option) {
+    try {
+        return JSON.parse(readFileSync(resolve(path), "utf8"));
+    }
+    catch (error) {
+        const reason = error instanceof Error ? error.message : String(error);
+        throw new Error(`Could not read ${option} JSON file ${path}: ${reason}`);
+    }
+}
+function routingOption(path) {
+    return path === undefined
+        ? undefined
+        : parseRouting(readJsonOption(path, "--routing"));
+}
 /**
  * `resolveInitInputs` was extracted from `init` and typed against `init`'s
  * per-repo `Manifest` (kit/version/files/installedAt included), since that
@@ -63,6 +80,8 @@ function defaultsAsManifest(defaults) {
         models: { ...DEFAULT_MODELS, ...defaults.models },
         profile: defaults.profile,
         tiers: defaults.tiers,
+        routing: defaults.routing,
+        ...parseOpencodeModelMaps(defaults),
         files: {},
         installedAt: "",
     };
@@ -79,6 +98,8 @@ function defaultsEqual(a, b) {
         profile: d.profile,
         tiers: d.tiers,
         models: Object.fromEntries(Object.entries(d.models).sort(([x], [y]) => x.localeCompare(y))),
+        routing: d.routing ?? {},
+        ...parseOpencodeModelMaps(d),
     });
     return normalize(a) === normalize(b);
 }
@@ -95,6 +116,8 @@ program
     .option("-f, --force", "overwrite kit-owned files that have local edits")
     .option("--harness <list>", `comma-separated harnesses (${HARNESSES.join(", ")}), or "none" alone for templates-only mode (.ai/workflow/** and .ai/runs/.gitkeep only, no AGENTS.md/CLAUDE.md/harness files); default: detected`)
     .option("--models <spec>", 'per-role model overrides, e.g. "implementer=sonnet,reviewer=opus"')
+    .option("--routing <json-file>", "harness/role/tier routing patch JSON")
+    .option("--codex-catalog <json-file>", "optional offline Codex capability catalog JSON to validate before writing")
     .option("--profile <profile>", `subagent role profile (${PROFILES.join(", ")}); default: full, or the previously installed profile on a re-run`)
     .option("--opencode-provider <id>", "opencode provider id for alias resolution (e.g. github-copilot); auto-detected when omitted")
     .option("--tiers", "also render per-role effort-tier subagent variants (<role>-<tier>.md); default: off, or the previously installed value on a re-run")
@@ -104,6 +127,19 @@ program
     if (!targetDir)
         return;
     const interactive = !opts.yes && isInteractive();
+    let routing;
+    let codexCatalog;
+    try {
+        routing = routingOption(opts.routing);
+        codexCatalog = opts.codexCatalog
+            ? readJsonOption(opts.codexCatalog, "--codex-catalog")
+            : undefined;
+    }
+    catch (error) {
+        console.error(error instanceof Error ? error.message : error);
+        process.exitCode = 2;
+        return;
+    }
     // Say where files will land BEFORE anything is written; an accidental
     // cwd (e.g. $HOME) is the most likely operator mistake.
     console.log(`Installing into ${targetDir}`);
@@ -124,17 +160,16 @@ program
             : "none recorded";
         console.log(`Found existing install (${version.startsWith("unknown") ? version : `v${version}`}, harnesses: ${installedFor}, profile: ${previous.profile}, tiers: ${previous.tiers})`);
     }
-    const { harnesses, profile, models, tiers, opencodeModels, opencodeClassModels, warnings, } = await resolveInitInputs({
-        detected,
-        interactive,
-        previous,
-        opts,
-        // `previous` here is `readInstalledManifest(targetDir)` (undefined,
-        // or the target's own actually-recorded manifest), unlike `apply`'s
-        // synthetic operator-defaults "floor" object: an empty harnesses
-        // array is a real recorded --harness none install here.
-        previousIsRecordedManifest: true,
-    });
+    const { harnesses, profile, models, tiers, opencodeModels, opencodeClassModels, routing: resolvedRouting, warnings, } = await resolveInitInputs(
+    // The sticky-branch wiring itself (neither `stickyPreChecked` nor
+    // `stickyAnnotateDetected` overridden, so `resolveInitInputs`'s own
+    // `?? []` / `?? detected` defaults apply) is pinned inside
+    // `buildInitInitInputs` and covered by a dedicated test
+    // (`test/cli-init.test.ts`), not by this call site.
+    buildInitInitInputs(detected, previous, interactive, {
+        ...opts,
+        routing,
+    }));
     for (const w of warnings) {
         process.stderr.write(`${w}\n`);
     }
@@ -147,6 +182,9 @@ program
         opencodeModels,
         tiers,
         opencodeClassModels,
+        routing: resolvedRouting,
+        routingMode: "replace",
+        codexCatalog,
     });
     showPaths("Created", report.written);
     showPaths("Updated", report.updated);
@@ -162,6 +200,8 @@ program
     .option("-y, --yes", "accept all defaults and skip prompts")
     .option("--harness <list>", `comma-separated harnesses (${HARNESSES.join(", ")}); default: previously stored, or claude`)
     .option("--models <spec>", 'per-role model overrides, e.g. "implementer=sonnet,reviewer=opus"')
+    .option("--routing <json-file>", "harness/role/tier routing patch JSON")
+    .option("--codex-catalog <json-file>", "optional offline Codex capability catalog JSON to validate before saving")
     .option("--profile <profile>", `subagent role profile (${PROFILES.join(", ")}); default: full, or the previously stored profile on a re-run`)
     .option("--opencode-provider <id>", "opencode provider id for alias resolution (e.g. github-copilot); auto-detected when omitted")
     .option("--tiers", "select per-role effort-tier subagent variants by default; default: off, or the previously stored value on a re-run")
@@ -169,6 +209,19 @@ program
     .action(async (opts) => {
     const interactive = !opts.yes && isInteractive();
     const home = resolveOperatorHome();
+    let routingPatch;
+    let codexCatalog;
+    try {
+        routingPatch = routingOption(opts.routing);
+        codexCatalog = opts.codexCatalog
+            ? readJsonOption(opts.codexCatalog, "--codex-catalog")
+            : undefined;
+    }
+    catch (error) {
+        console.error(error instanceof Error ? error.message : error);
+        process.exitCode = 2;
+        return;
+    }
     console.log(`Operator home: ${home}`);
     const existing = readOperatorManifest(home);
     if (existing) {
@@ -180,7 +233,7 @@ program
     // No target repository exists to detect harnesses against; "claude"
     // is the same shipped fallback `init` uses for a fresh install with
     // nothing detected and nothing previously recorded.
-    const { harnesses, profile, models, tiers, warnings } = await resolveInitInputs({
+    const { harnesses, profile, models, tiers, routing, warnings, opencodeModels, opencodeClassModels, } = await resolveInitInputs({
         // No target directory exists to detect against: the stored
         // harnesses are the baseline, and only a first-ever setup falls
         // back to claude, so a codex-only default is not widened silently.
@@ -189,16 +242,30 @@ program
             : ["claude"],
         interactive,
         previous: defaultsAsManifest(existing?.defaults),
-        opts,
+        opts: { ...opts, routing: routingPatch },
     });
     for (const w of warnings) {
         process.stderr.write(`${w}\n`);
     }
+    {
+        try {
+            for (const warning of codexCatalogWarnings(routing, { harnesses, profile, tiers }, codexCatalog)) {
+                process.stderr.write(`Warning: ${warning}\n`);
+            }
+        }
+        catch (error) {
+            console.error(error instanceof Error ? error.message : error);
+            process.exitCode = 2;
+            return;
+        }
+    }
     const newDefaults = {
         harnesses,
         profile,
         tiers,
         models,
+        routing,
+        ...legacyOpencodeFallbacks({ opencodeModels, opencodeClassModels }),
     };
     // The prompts and resolution above ran against `existing`, an
     // unlocked read taken before this point; another process (an
@@ -413,6 +480,7 @@ function buildApplyPrevious(repoManifest, operatorDefaults, sync) {
     const tiers = sync
         ? operatorDefaults.tiers
         : (repoManifest?.tiers ?? operatorDefaults.tiers);
+    const { routing, ...compatibility } = mergeRoutingStateLayers(operatorDefaults, ...(!sync && repoManifest ? [repoManifest] : []));
     return {
         kit: "orchestrator-workflow",
         version: PACKAGE_VERSION,
@@ -427,6 +495,8 @@ function buildApplyPrevious(repoManifest, operatorDefaults, sync) {
         models,
         profile,
         tiers,
+        ...(routing !== undefined ? { routing } : {}),
+        ...compatibility,
         files: {},
         installedAt: "",
     };
@@ -439,6 +509,8 @@ program
     .option("-f, --force", "overwrite kit-owned files that have local edits")
     .option("--harness <list>", `comma-separated harnesses (${HARNESSES.join(", ")}); default: the target's recorded harnesses, else the operator defaults, else detected`)
     .option("--models <spec>", 'per-role model overrides, e.g. "implementer=sonnet,reviewer=opus"')
+    .option("--routing <json-file>", "harness/role/tier routing patch JSON")
+    .option("--codex-catalog <json-file>", "optional offline Codex capability catalog JSON to validate before writing")
     .option("--profile <profile>", `subagent role profile (${PROFILES.join(", ")}); default: the target's recorded profile, else the operator default`)
     .option("--opencode-provider <id>", "opencode provider id for alias resolution (e.g. github-copilot); auto-detected when omitted")
     .option("--tiers", "also render per-role effort-tier subagent variants (<role>-<tier>.md); default: the target's recorded value, else the operator default")
@@ -448,6 +520,19 @@ program
     .option("--pin <version>", "set or replace the target's recorded kit-version pin and apply this operator install regardless of any existing pin")
     .option("--unpin", "clear the target's recorded kit-version pin and apply this operator install")
     .action(async (opts) => {
+    let routingPatch;
+    let codexCatalog;
+    try {
+        routingPatch = routingOption(opts.routing);
+        codexCatalog = opts.codexCatalog
+            ? readJsonOption(opts.codexCatalog, "--codex-catalog")
+            : undefined;
+    }
+    catch (error) {
+        console.error(error instanceof Error ? error.message : error);
+        process.exitCode = 2;
+        return;
+    }
     // --pin and --unpin express opposite intents (set a pin vs clear it);
     // accepting both silently would make the effective pin depend on
     // internal option-resolution order, so this is a usage error rather
@@ -539,7 +624,7 @@ program
     }
     const chosenHarnesses = resolveApplyHarnesses(targetDir, repoManifest, operatorManifest.defaults);
     const previous = buildApplyPrevious(repoManifest, operatorManifest.defaults, Boolean(opts.sync));
-    const { harnesses, profile, models, tiers, opencodeModels, opencodeClassModels, warnings, } = await resolveInitInputs(
+    const { harnesses, profile, models, tiers, opencodeModels, opencodeClassModels, routing: resolvedRouting, warnings, } = await resolveInitInputs(
     // `previous` is always defined here (`buildApplyPrevious` returns a
     // synthetic object even for a target with no manifest of its own),
     // so `previousIsRecordedManifest` cannot be `Boolean(previous)`; it
@@ -560,7 +645,10 @@ program
     // `stickyAnnotateDetected`) is pinned inside `buildApplyInitInputs`
     // rather than inlined here (agent-tasks fe834823, fix round 3,
     // review finding 1).
-    buildApplyInitInputs(targetDir, chosenHarnesses, previous, interactive, opts, Boolean(repoManifest)));
+    buildApplyInitInputs(targetDir, chosenHarnesses, previous, interactive, 
+    // Explicit routing is parsed before the first target write and is
+    // the final merge layer after repo/operator sticky resolution.
+    { ...opts, routing: routingPatch }, Boolean(repoManifest)));
     for (const w of warnings) {
         process.stderr.write(`${w}\n`);
     }
@@ -591,6 +679,9 @@ program
         opencodeModels,
         tiers,
         opencodeClassModels,
+        routing: resolvedRouting,
+        routingMode: "replace",
+        codexCatalog,
         pin,
     });
     showPaths("Created", report.written);
@@ -789,6 +880,12 @@ function printTargetDetail(target, operatorVersion) {
         if (target.divergence.models) {
             console.log(`  models: ${target.divergentModelRoles.join(", ")}`);
         }
+        if (target.divergence.routing) {
+            console.log("  routing: repo and operator selections differ");
+        }
+    }
+    for (const gap of target.routingComparisonGaps ?? []) {
+        console.log(`  Routing comparison incomplete: ${gap}`);
     }
     const showsVersionLagDetail = (target.status === "version-lag" ||
         ((target.status === "divergent" || target.status === "drift") &&
@@ -826,6 +923,10 @@ function operatorDefaultsFromRepoManifest(repoManifest) {
         profile: repoManifest.profile,
         tiers: repoManifest.tiers,
         models: { ...repoManifest.models },
+        ...parseOpencodeModelMaps(repoManifest),
+        ...(repoManifest.routing !== undefined
+            ? { routing: repoManifest.routing }
+            : {}),
     };
 }
 /**

package/dist/codex.d.ts

@@ -0,0 +1,8 @@
+import type { Role, Tier } from "./models.js";
+import type { ModelSelection } from "./routing.js";
+/**
+ * Produces a standalone Codex subagent definition. The reviewer intentionally
+ * inherits its parent's sandbox: its canonical prompt prohibits source edits,
+ * while inherited access lets it create test/build output in temporary paths.
+ */
+export declare function composeCodexAgent(role: Role, selection: ModelSelection, tier?: Tier): string;

package/dist/codex.js

@@ -0,0 +1,52 @@
+import { readAgentAsset } from "./assets.js";
+function tomlString(value) {
+    let escaped = "";
+    for (let index = 0; index < value.length; index += 1) {
+        const code = value.charCodeAt(index);
+        if (code === 0x22)
+            escaped += '\\"';
+        else if (code === 0x5c)
+            escaped += "\\\\";
+        else if (code === 0x08)
+            escaped += "\\b";
+        else if (code === 0x09)
+            escaped += "\\t";
+        else if (code === 0x0a)
+            escaped += "\\n";
+        else if (code === 0x0c)
+            escaped += "\\f";
+        else if (code === 0x0d)
+            escaped += "\\r";
+        else if (code < 0x20 || code === 0x7f) {
+            escaped += `\\u${code.toString(16).padStart(4, "0")}`;
+        }
+        else {
+            escaped += value[index];
+        }
+    }
+    return `"${escaped}"`;
+}
+function descriptionForTier(description, tier) {
+    return tier === undefined
+        ? description
+        : `${description} (Effort tier: ${tier}.)`;
+}
+/**
+ * Produces a standalone Codex subagent definition. The reviewer intentionally
+ * inherits its parent's sandbox: its canonical prompt prohibits source edits,
+ * while inherited access lets it create test/build output in temporary paths.
+ */
+export function composeCodexAgent(role, selection, tier) {
+    const asset = readAgentAsset(role);
+    const lines = [
+        `name = ${tomlString(tier === undefined ? asset.name : `${asset.name}-${tier}`)}`,
+        `description = ${tomlString(descriptionForTier(asset.description, tier))}`,
+        `model = ${tomlString(selection.model)}`,
+        `model_reasoning_effort = ${tomlString(selection.effort)}`,
+    ];
+    if (role === "explorer" || role === "advisor") {
+        lines.push('sandbox_mode = "read-only"');
+    }
+    lines.push(`developer_instructions = ${tomlString(asset.body.trimEnd())}`);
+    return `${lines.join("\n")}\n`;
+}

package/dist/doctor.d.ts

@@ -24,6 +24,8 @@ export interface TargetDivergence {
     profile: boolean;
     tiers: boolean;
     models: boolean;
+    /** Present only when explicit effective routing differs. */
+    routing?: boolean;
 }
 /**
  * Per-target report. Only `path`, `status`, `installedVersion`, `pin`,
@@ -40,6 +42,8 @@ export interface TargetReport {
     pin: string | null;
     divergence: TargetDivergence | null;
     driftFiles: string[] | null;
+    /** Selected legacy opencode leaves that cannot be compared offline. */
+    routingComparisonGaps?: string[];
     /** Human-output-only: the repo's own profile, or null when unknown. */
     repoProfile: Profile | null;
     /** Human-output-only: the operator default profile, for the comparison line. */
@@ -81,6 +85,8 @@ export interface TargetReportJson {
     pin: string | null;
     divergence: TargetDivergence | null;
     driftFiles: string[] | null;
+    /** Selected legacy opencode leaves that cannot be compared offline. */
+    routingComparisonGaps?: string[];
     versionLag: boolean;
     reason: string | null;
 }

package/dist/doctor.js

@@ -3,7 +3,8 @@ import { existsSync, readFileSync, statSync } from "node:fs";
 import { join } from "node:path";
 import { PACKAGE_VERSION } from "./assets.js";
 import { MANIFEST_PATH, readInstalledManifest } from "./init.js";
-import { DEFAULT_MODELS, ROLES } from "./models.js";
+import { DEFAULT_MODELS, rolesForProfile } from "./models.js";
+import { compareRoutingState } from "./routing-state.js";
 import { OPERATOR_MANIFEST_FILENAME, operatorManifestState, updateOperatorManifest, } from "./operator-manifest.js";
 export function targetReportToJson(report) {
     return {
@@ -13,6 +14,9 @@ export function targetReportToJson(report) {
         pin: report.pin,
         divergence: report.divergence,
         driftFiles: report.driftFiles,
+        ...(report.routingComparisonGaps?.length
+            ? { routingComparisonGaps: report.routingComparisonGaps }
+            : {}),
         versionLag: report.versionLag,
         reason: report.reason,
     };
@@ -167,17 +171,31 @@ export function inspectTarget(target, operator, kitVersion) {
     if (manifestStat.kind === "error") {
         return baseReport(target, operator, "unverifiable", "directory not accessible");
     }
-    const manifest = readInstalledManifest(target.path);
+    let manifest;
+    try {
+        manifest = readInstalledManifest(target.path);
+    }
+    catch {
+        // Strict reinstall validation must not abort inspection of other targets.
+        return baseReport(target, operator, "unverifiable", "manifest unreadable");
+    }
     if (!manifest) {
         return baseReport(target, operator, "unverifiable", "manifest unreadable");
     }
     const driftFiles = computeDriftFiles(target.path, manifest);
-    const divergentModelRoles = ROLES.filter((role) => resolvedModel(manifest.models, role) !==
-        resolvedModel(operator.defaults.models, role));
+    const divergentModelRoles = rolesForProfile(manifest.profile).filter((role) => manifest.harnesses.some((harness) => harness === "claude" || harness === "opencode") &&
+        resolvedModel(manifest.models, role) !==
+            resolvedModel(operator.defaults.models, role));
+    const routingComparison = compareRoutingState(manifest, operator.defaults, {
+        harnesses: manifest.harnesses,
+        profile: manifest.profile,
+        tiers: manifest.tiers,
+    });
     const divergence = {
         profile: manifest.profile !== operator.defaults.profile,
         tiers: manifest.tiers !== operator.defaults.tiers,
         models: divergentModelRoles.length > 0,
+        ...(routingComparison.differs ? { routing: true } : {}),
     };
     // A recorded pin suppresses version-lag only when the pin equals the
     // repo's own installed version: that is the expected, deliberate-stay
@@ -196,7 +214,10 @@ export function inspectTarget(target, operator, kitVersion) {
     if (driftFiles.length > 0) {
         status = "drift";
     }
-    else if (divergence.profile || divergence.tiers || divergence.models) {
+    else if (divergence.profile ||
+        divergence.tiers ||
+        divergence.models ||
+        divergence.routing) {
         status = "divergent";
     }
     else if (versionLag) {
@@ -212,6 +233,9 @@ export function inspectTarget(target, operator, kitVersion) {
         pin: hasPin ? manifest.pin : null,
         divergence,
         driftFiles: driftFiles.length > 0 ? driftFiles : null,
+        ...(routingComparison.gaps.length > 0
+            ? { routingComparisonGaps: routingComparison.gaps }
+            : {}),
         repoProfile: manifest.profile,
         operatorProfile: operator.defaults.profile,
         repoTiers: manifest.tiers,

package/dist/index.d.ts

@@ -8,3 +8,6 @@ export { CLASS_MODELS, DEFAULT_MODELS, DEFAULT_PROFILE, DEFAULT_TIER, MODEL_ALIA
 export type { ModelAlias, ModelClass, Profile, Role, Tier } from "./models.js";
 export type { Report } from "./writers.js";
 export { PACKAGE_VERSION } from "./assets.js";
+export { defaultCodexRouting, mergeRouting, parseRouting, validateCodexCatalog, } from "./routing.js";
+export type { HarnessRouting, ModelSelection } from "./routing.js";
+export { composeCodexAgent } from "./codex.js";

package/dist/index.js

@@ -3,3 +3,5 @@ export { runUninstall } from "./uninstall.js";
 export { detectHarnesses, parseHarnessList, parseHarnessOption, HARNESSES, } from "./detect.js";
 export { CLASS_MODELS, DEFAULT_MODELS, DEFAULT_PROFILE, DEFAULT_TIER, MODEL_ALIASES, MODEL_CLASSES, PROFILES, ROLES, ROLE_TIERS, TIER_DEFS, claudeModelValue, isProfile, opencodeModelValue, parseModelsSpec, parseProfile, rolesForProfile, } from "./models.js";
 export { PACKAGE_VERSION } from "./assets.js";
+export { defaultCodexRouting, mergeRouting, parseRouting, validateCodexCatalog, } from "./routing.js";
+export { composeCodexAgent } from "./codex.js";

package/dist/init.d.ts

@@ -1,5 +1,7 @@
 import type { Harness } from "./detect.js";
 import type { ModelClass, Profile, Role } from "./models.js";
+import type { HarnessRouting } from "./routing.js";
+import type { OpencodeModelMaps } from "./routing-state.js";
 import type { Report } from "./writers.js";
 export interface InitOptions {
     targetDir: string;
@@ -15,11 +17,14 @@ export interface InitOptions {
     /**
      * Resolved fully-qualified opencode model ids per role, or `undefined` to
      * omit the `model:` frontmatter line (subagent inherits the session model).
-     * When this field is absent the fallback is `opencodeModelValue(models[role])`,
-     * which passes through a fully-qualified id and returns `undefined` for bare
-     * aliases, producing the same inherit-session-model behaviour for bare inputs.
+     * Qualified values persist in routing; legacy bare IDs persist in the
+     * manifest compatibility map of the same name. A present map records
+     * inheritance for missing keys unless routing supplies that selection.
+     * When absent, prior
+     * selections survive; otherwise `opencodeModelValue(models[role])` passes
+     * through a qualified id or leaves bare aliases inheriting the session model.
      */
-    opencodeModels?: Record<Role, string | undefined>;
+    opencodeModels?: Partial<Record<Role, string | undefined>>;
     /**
      * Renders additional per-role effort-tier subagent variants
      * (`<role>-<tier>.md`) alongside the default agent file. Defaults to
@@ -33,9 +38,29 @@ export interface InitOptions {
      * that variant. Only consulted when `tiers` is true and the `opencode`
      * harness is selected; mirrors `opencodeModels` but keyed by model class
      * instead of role, since a tier variant's model is chosen by class, not
-     * by the role's own preselected model.
+     * by the role's own preselected model. Resolved ids are persisted per tier
+     * and retained on a later install that omits this field. Legacy bare IDs
+     * persist in the manifest compatibility map of the same name.
      */
-    opencodeClassModels?: Record<ModelClass, string | undefined>;
+    opencodeClassModels?: Partial<Record<ModelClass, string | undefined>>;
+    /**
+     * Per-harness role/tier selections. This is an additive, partial map: the
+     * installer preserves previous leaves and fills remaining omissions from
+     * deterministic harness defaults. An explicit leaf wins over legacy inputs.
+     */
+    routing?: HarnessRouting;
+    /**
+     * "patch" (default) preserves previous routing leaves. "replace" accepts
+     * an authoritative resolved map and excludes all previous routing, as used
+     * by CLI resolution and apply --sync. Omitted leaves still use defaults.
+     */
+    routingMode?: "patch" | "replace";
+    /**
+     * Optional, explicitly supplied Codex capability catalog. The installer
+     * never contacts a live service; when this is present it is validated
+     * before any kit-owned file is written.
+     */
+    codexCatalog?: unknown;
     /**
      * Repo kit-version pin (distinct from the actually-installed `version`),
      * so a later `apply` command can gate on it. A `string` sets a new
@@ -47,7 +72,7 @@ export interface InitOptions {
     pin?: string | null;
 }
 export declare const MANIFEST_PATH: string;
-export interface Manifest {
+export interface Manifest extends OpencodeModelMaps {
     kit: string;
     version: string;
     harnesses: Harness[];
@@ -56,6 +81,8 @@ export interface Manifest {
     profile: Profile;
     /** Whether per-role effort-tier subagent variants were rendered. */
     tiers: boolean;
+    /** Exact resolved harness/role/tier selections from the install. */
+    routing?: HarnessRouting;
     /**
      * sha256 of every kit-owned file as installed. This is how a re-run tells
      * "upstream changed, safe to update" apart from "user edited, conflict".