phasegate 0.160.21 → 0.161.0

package/CHANGELOG.md

@@ -7,9 +7,27 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [0.161.0] - 2026-07-04
+
+### Fixed
+
+- **WI-220 — phase-gate bypass and quick-mode relaxation defects** — closes four defects reproduced against the published `0.160.21` package:
+  - Claude Code の PreToolUse `Bash` matcher に `phasegate hook pre-tool-use` を配線し、Bash 経由（`cat >`, heredoc, `tee`, `sed -i`, `cp`, `mv` 等）の書き込みもフェーズゲート・保護ファイル判定を通すようにした（従来は Codex のみ配線され Claude では素通りしていた）。
+  - `WriteTargetScope.fromPath` の `normalize()` で `.`/`..` セグメントを解決し、`.../__tests__/../domain/*` トラバーサルによる保護回避を塞いだ（本物のテストファイルの除外は維持）。
+  - `WriteTargetScope` のプレフィックス一致を大文字小文字非依存にし、大小非依存ファイルシステム（macOS/Windows）での `Scripts/harness/...` 経由の保護回避を塞いだ。
+  - `QuickModeConfig.isMaintained` がレイヤー名エントリ（`"L2"`）を配下バリデータ ID（`"L2-002"` 等）にマッチさせるようにし、`maintainedLayers: ["L1","L2"]` で L2 が全件 skip されていた不具合を修正（ID 完全一致も後方互換）。
+
+## [0.160.22] - 2026-06-12
+
+### Added
+
+- **WI-212 — language-aware validator and skill metadata** — adds `project.languages` configuration, `init --language`, unsupported-language skips for TypeScript-only validators, bundled skill `languages` frontmatter, and a supported languages matrix for adoption planning.
+- **WI-219 — configurable model delegation policy** — adds `modelRouting.delegation` so projects can keep the existing `delegate-sonnet` skill behavior or disable fixed Sonnet delegation while preserving local review guidance.
+
 ### Fixed
 
 - **WI-217 — personal inception/product consistency** — makes L4-002 validate configured personal documentation roots, scopes L4-004 freshness to `paths.designDocs`, adds personal hook L4 backstop behavior for `.phasegate-local` docs, and lets `scaffold-wi` use custom IDs and personal inception roots.
+- **WI-218 — WI description scope classification** — treats `docs/inception/**/WI-*/description.md` as a Phase 1 description artifact instead of Level 3, matching hook guidance and allowing description-only inception work without Full Mode.
 
 ## [0.160.16] - 2026-05-22
 

package/README.md

@@ -413,6 +413,9 @@ For selection guidance and config examples see [Preset Selection Guide](docs/gui
     "preset": "standard",
     "storyReflection": { "enabled": true }
   },
+  "modelRouting": {
+    "delegation": "delegate-sonnet"
+  },
   "protectedFiles": {
     "exclude": ["tsconfig.json", "package.json"]
   },
@@ -433,6 +436,8 @@ For selection guidance and config examples see [Preset Selection Guide](docs/gui
 
 `paths` maps PhaseGate's design and reference documentation roots. Repositories that do not use `docs/` can point `designDocs`, `inceptionDocs`, `principlesDocs`, and `folderRulesDoc` at their own documentation layout; product-wide Level 1 artifacts are overridden separately with custom `phaseDependencies.gates[]`. <!-- @work-item-id WI-214 -->
 
+`modelRouting.delegation` controls whether bundled skills may use the legacy `delegate-sonnet` workflow. Set it to `"none"` when the main agent session should do the work directly; skill deployment removes fixed model routing text and normal `delegate-sonnet` execution is refused. <!-- @work-item-id WI-219 -->
+
 `baseline` opts in to the **Phase A-2 retrofit grandfather**: pre-existing files captured in `.phasegate/baseline.json` are exempted from `phase-gate` until they are structurally modified. Generate the snapshot with `npx phasegate baseline` before introducing the harness to an existing repository. Since v0.71.0 the `baseline.enabled` flag defaults to `true`, so simply running `npx phasegate baseline` after `init` is enough — no manual config edit needed. For a step-by-step retrofit walkthrough see [Retrofit Adoption Guide](docs/guide/retrofit-adoption.md).
 
 ---
@@ -560,7 +565,7 @@ README keeps only the entry points most users need. The full public/compatibilit
 | `hook <pre-tool-use\|post-tool-use\|stop\|session-start\|user-prompt-submit>` | Run an agent hook (reads JSON from stdin; session-start/user-prompt-submit write JSON context) |
 | `pre-commit` | Run L2 pre-commit validators on staged files |
 | `bypass:audit --base <ref> [--head <ref>]` | Replay pre-commit validation over a push/CI range and require structured bypass evidence for gate failures |
-| `delegate-sonnet [...args]` | Delegate task to Sonnet 4.6 (transparent wrapper) |
+| `delegate-sonnet [...args]` | Delegate task to Sonnet 4.6 when `modelRouting.delegation` allows it; `--help` and `--dry-run` remain available |
 | `migrate work-items --dry-run` / `--apply` | Migrate legacy `ISSUE-XXX` / `H{NN}-{NN}` directories under `docs/inception/` to the unified `WI-XXX` layout (frontmatter `type` / `legacy_id` / `affects` injected). Sequential allocator skips numbers already used by existing WIs. See [CLI Reference -- Work Item Migration](docs/guide/cli-reference.md#work-item-migration). |
 | `migrate --schema v3` | Upgrade `phasegate.config.json` to v3 schema by adding the `architecture` key (idempotent). |
 

package/docs/guide/cli-reference.md

@@ -22,7 +22,7 @@ Command names in this document are split into three surfaces:
 
 | Command | Description |
 |---|---|
-| `init --name <name>` | Legacy-compatible bootstrap for new projects: deploy skills, generate config, and optionally add hooks/CI. Options: `--preset <full\|standard\|minimal\|custom>`, `--skills <core\|all>`, `--agent <claude\|codex\|both>`, `--workflow <standard\|strict>`, `--with-husky`, `--with-ci`, `--yes`. |
+| `init --name <name>` | Legacy-compatible bootstrap for new projects: deploy skills, generate config, and optionally add hooks/CI. Options: `--preset <full\|standard\|minimal\|custom>`, `--skills <core\|all>`, `--agent <claude\|codex\|both>`, `--workflow <standard\|strict>`, `--language <language>`, `--with-husky`, `--with-ci`, `--yes`. `--language` writes `project.languages: ["<language>"]`; omitted language keeps the TypeScript-compatible default. <!-- @work-item-id WI-212 --> |
 | `install --dry-run` / `--apply` | Idempotently merge PhaseGate into an existing project, preserve user content, add package scripts/devDependency, create selected `AGENTS.md` / `CLAUDE.md` managed sections, and write `.phasegate/manifest.json`. `--agent <claude\|codex\|both>`, `--skills <core\|all>`, and `--workflow <standard\|strict>` affect rendered agent context; `--force` replaces managed targets after backup. |
 | `doctor` | Diagnose silent or partial installations and report repair hints (`--json`, `--strict`, `--agent <claude\|codex\|both>`, `--report-out <path>`). `--agent` defaults to `both`; single-agent scopes keep shared targets applicable and mark the other agent's findings as not applicable. `--report-out` writes exactly to the supplied path, not to `reporting.outputDir`. |
 | `uninstall --dry-run` / `--apply` | Remove PhaseGate-managed files and managed blocks using `.phasegate/manifest.json`; `--force` handles managed conflict cases. |

package/docs/guide/configuration.md

@@ -24,7 +24,8 @@ The plan identifies target fields, managed artifacts, commands, validation, risk
 {
   "project": {
     "name": "my-project",
-    "preset": "standard"       // "minimal" | "standard" | "strict"
+    "preset": "standard",      // "minimal" | "standard" | "strict"
+    "languages": ["typescript"]
   },
   "layers": {
     "L1": { "enabled": true },
@@ -56,6 +57,9 @@ The plan identifies target fields, managed artifacts, commands, validation, risk
     "default": "interactive",  // "interactive" | "embedded-qa"
     "perPhase": {}
   },
+  "modelRouting": {
+    "delegation": "delegate-sonnet" // "delegate-sonnet" | "none"
+  },
   "harnesses": {
     "agentLessonCollection": false,
     "cascadeUpdate": false,
@@ -121,6 +125,24 @@ The `strict` preset also enables:
 |-----------|----------|--------------|----------------------------------------------------------------|
 | `name`    | `string` | --           | Project identifier. Used in reports and validation output.     |
 | `preset`  | `string` | `"standard"` | One of `"minimal"`, `"standard"`, `"strict"`. Controls which layers and harnesses are active by default. Individual settings override the preset. |
+| `languages` | `string[]` | `["typescript"]` | Project implementation languages used for validator dispatch and skill applicability. Unknown values are accepted as declarations; unsupported validator/language pairs are reported as skips with `unsupported-language` reasons. <!-- @work-item-id WI-212 --> |
+
+#### Supported Languages
+
+<!-- @work-item-id WI-212 -->
+
+PhaseGate currently ships TypeScript-backed source, test, and coverage validators. Non-TypeScript declarations are supported as configuration metadata so architecture, phase-gate, documentation, pointer, and WI workflow checks can still run while TypeScript-only validators skip with a clear reason.
+
+| Capability | TypeScript | Python / Go / Rust / other declared languages |
+|---|---:|---:|
+| `project.languages` config | Supported | Accepted |
+| `init --language <lang>` bootstrap | Supported | Accepted |
+| Architecture preset / phase-gate / WI workflow | Supported | Supported |
+| Markdown document validators (`L4-002`, `L4-004`, `L4-005`, `L4-006`) | Supported | Supported |
+| L3 performance AST validator (`L3-002`) | Supported | Skipped as `unsupported-language` |
+| L3 coverage validator (`L3-003`) | Supported through Vitest coverage | Skipped as `unsupported-language` |
+| L4 dead-code validator (`L4-003`) | Supported | Skipped as `unsupported-language` |
+| Bundled skills | `languages: [typescript]` metadata present | Future language-specific skills can coexist by declaring their own `languages` metadata |
 
 #### `layers`
 
@@ -454,6 +476,14 @@ Quick Mode with `relaxedGates: ["phase-gate"]` relaxes `storyReflection` as well
 | `default`  | `string` | `"interactive"` | `"interactive"` prompts the user at each decision point. `"embedded-qa"` embeds QA checks inline without prompting. |
 | `perPhase` | `object` | `{}`            | Override the planning mode for specific phases. Keys are phase names, values are `"interactive"` or `"embedded-qa"`. |
 
+#### `modelRouting`
+
+<!-- @work-item-id WI-219 -->
+
+| Sub-field    | Type     | Default              | Description |
+|--------------|----------|----------------------|-------------|
+| `delegation` | `string` | `"delegate-sonnet"`  | `"delegate-sonnet"` preserves the legacy skill routing and `phasegate delegate-sonnet` behavior. `"none"` deploys bundled skills without fixed `model` / `review` frontmatter or `delegate-sonnet` body instructions, and blocks normal `phasegate delegate-sonnet` execution. Help and `--dry-run` remain available. |
+
 #### `harnesses`
 
 | Sub-field              | Type      | Default | Description                                                          |

package/docs/guide/skills-overview.md

@@ -2,6 +2,8 @@
 
 Phasegate provides 30 skills covering the full AIDLC (AI-Driven Development Life Cycle). `npx phasegate init` and project `npx phasegate install` deploy skill bodies to root `skills/` and expose them to enabled agents through `.claude/skills/` / `.codex/skills/` links. Personal install instead writes real local-only per-agent skill directories. <!-- @work-item-id WI-210 -->
 
+Bundled `SKILL.md` files include `languages: [typescript]` frontmatter so PhaseGate can distinguish current TypeScript-oriented guidance from future language-specific skill variants. The metadata is advisory for applicability and does not prevent non-TypeScript projects from installing the catalog. <!-- @work-item-id WI-212 -->
+
 ## AIDLC Process — Skill Execution Order
 
 The AIDLC follows a 3-level execution flow, each level producing design artifacts that gate the next.

package/docs/principles/model-routing.md

@@ -17,6 +17,7 @@
 - 実装、テスト、リポジトリ内の整合修正は Implementor が担当する。
 - 委任結果は必ず親エージェントがレビューし、配置ルール、上位文書整合、スコープ逸脱を確認する。
 - ユーザーまたは実行環境の指示でサブエージェント利用が制限されている場合は、その指示を優先する。
+- `phasegate.config.json` の `modelRouting.delegation` はPhaseGate配備物に対する委任可否の正本である。`"none"` の場合、配備済みスキルは固定モデル委任を指示せず、`delegate-sonnet` の通常実行も拒否される。@work-item-id WI-219
 
 ## 委任してよい作業
 

package/docs/templates/personal/phasegate-local-config.json

@@ -1,7 +1,10 @@
 {
   "project": {
     "name": "personal-phasegate",
-    "preset": "standard"
+    "preset": "standard",
+    "languages": [
+      "typescript"
+    ]
   },
   "layers": {
     "L1": {

package/docs/templates/project/phasegate.config.json

@@ -1,7 +1,10 @@
 {
   "project": {
     "name": "phasegate-project",
-    "preset": "standard"
+    "preset": "standard",
+    "languages": [
+      "typescript"
+    ]
   },
   "architecture": {
     "preset": "clean"

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "phasegate",
-  "version": "0.160.21",
+  "version": "0.161.0",
   "packageManager": "pnpm@10.30.1",
   "description": "Phasegate — AI-agnostic quality defense toolkit. Enforces structural integrity between design intent and code.",
   "license": "MIT",

package/scripts/harness/agent-integration/domain/value-objects/write-target-scope.ts

@@ -75,11 +75,15 @@ export class WriteTargetScope {
 
     const inceptionMatch = matchPrefix(normalizedPath, inceptionPath);
     if (inceptionMatch !== null) {
-      const [unitId, secondSegment] = inceptionMatch;
+      const [unitId, secondSegment, thirdSegment] = inceptionMatch;
 
       // 横断的 WI: docs/inception/_cross/{WI-XXX}/ → Level 3
       if (unitId === "_cross") {
         if (secondSegment !== undefined && WORK_ITEM_ID_PATTERN.test(secondSegment)) {
+          if (thirdSegment === "description.md") {
+            return WriteTargetScope.create({ level: 1 });
+          }
+
           return WriteTargetScope.create({ level: 3, unitId, storyId: secondSegment });
         }
 
@@ -88,6 +92,10 @@ export class WriteTargetScope {
 
       // Unit 所有 WI / 既存 US パス: docs/inception/{unit}/{storyId}/ → Level 3
       if (unitId !== undefined && secondSegment !== undefined && WORK_ITEM_ID_PATTERN.test(secondSegment)) {
+        if (secondSegment.startsWith("WI-") && thirdSegment === "description.md") {
+          return WriteTargetScope.create({ level: 1 });
+        }
+
         return WriteTargetScope.create({ level: 3, unitId, storyId: secondSegment });
       }
     }
@@ -121,24 +129,65 @@ export class WriteTargetScope {
   }
 }
 
-const normalize = (value: string): string =>
-  value
+const normalize = (value: string): string => {
+  const cleaned = value
     .replaceAll("\\", "/")
     .replace(/^\.\/+/, "")
     .replace(/\/+/g, "/")
     .replace(/\/$/, "");
 
+  return resolveTraversal(cleaned);
+};
+
+// posix セマンティクスで `.`/`..` セグメントを解決する（プロジェクト相対パス想定）。
+// これにより `a/b/../c` → `a/c`。フェーズゲート保護回避（P-2）対策として、
+// __tests__ 除外や prefix 一致判定はこの解決後のパスに対して適用される。
+const resolveTraversal = (value: string): string => {
+  if (value === "") {
+    return "";
+  }
+
+  const segments = value.split("/");
+  const resolved: string[] = [];
+
+  for (const segment of segments) {
+    if (segment === "" || segment === ".") {
+      continue;
+    }
+
+    if (segment === "..") {
+      if (resolved.length > 0 && resolved[resolved.length - 1] !== "..") {
+        resolved.pop();
+      } else {
+        // プロジェクトルートより上への参照はそのまま残す（保護判定に影響させない）
+        resolved.push("..");
+      }
+      continue;
+    }
+
+    resolved.push(segment);
+  }
+
+  return resolved.join("/");
+};
+
 const matchPrefix = (targetPath: string, basePath: string): string[] | null => {
   const normalizedBase = normalize(basePath);
 
-  if (targetPath === normalizedBase) {
+  // フェーズゲートはセキュリティ境界のため、大小非依存 FS（macOS/Windows）での
+  // 保護回避（P-3）を防ぐべく prefix 一致は大文字小文字を無視して判定する。
+  const lowerTarget = targetPath.toLowerCase();
+  const lowerBase = normalizedBase.toLowerCase();
+
+  if (lowerTarget === lowerBase) {
     return [];
   }
 
-  if (!targetPath.startsWith(`${normalizedBase}/`)) {
+  if (!lowerTarget.startsWith(`${lowerBase}/`)) {
     return null;
   }
 
+  // remainder（unitId 等の抽出結果）は元の大小を保持する。
   const remainder = targetPath.slice(normalizedBase.length + 1);
   return remainder === "" ? [] : remainder.split("/");
 };

package/scripts/harness/config-foundation/application/mappers/validator-system-config-mapper.ts

@@ -3,6 +3,7 @@
  * @unit config-foundation
  * @work-item-id WI-133 / WI-156
  * @work-item-id WI-217
+ * @work-item-id WI-212
  */
 import type { HarnessConfigV2 } from '../../domain/harness-config.js';
 
@@ -33,7 +34,10 @@ export function toValidatorSystemConfig(resolvedConfig: HarnessConfigV2 | undefi
     : l4Validators;
 
   return {
-    project: { preset: resolvedConfig.project.preset },
+    project: {
+      preset: resolvedConfig.project.preset,
+      languages: resolvedConfig.project.languages ?? ['typescript'],
+    },
     paths: {
       designDocs: resolvedConfig.paths.designDocs,
       inceptionDocs: resolvedConfig.paths.inceptionDocs,

package/scripts/harness/config-foundation/domain/harness-config.ts

@@ -2,6 +2,8 @@
  * @layer domain
  * @unit config-foundation
  * @work-item-id WI-012
+ * @work-item-id WI-212
+ * @work-item-id WI-219
  */
 import { ConfigFoundationDomainError } from './errors/config-foundation-domain-error.js';
 import { ConfigValidationError } from './errors/config-validation-error.js';
@@ -30,6 +32,7 @@ import type {
 export type LayerId = 'L1' | 'L2' | 'L3' | 'L4';
 export type PresetId = 'minimal' | 'standard' | 'strict';
 export type PlanningModeValue = 'interactive' | 'embedded-qa' | 'manual';
+export type ModelDelegationPolicy = 'delegate-sonnet' | 'none';
 export type { PhaseDependenciesPresetId };
 type DeepPartial<T> = {
   [K in keyof T]?: T[K] extends Array<infer TItem>
@@ -43,6 +46,7 @@ export interface HarnessConfigSourceDocument {
   project: {
     name: string;
     preset: PresetId;
+    languages?: string[];
   };
   layers: DeepPartial<HarnessConfigResolvedDocument['layers']>;
   quickMode: Partial<HarnessConfigResolvedDocument['quickMode']>;
@@ -54,6 +58,7 @@ export interface HarnessConfigSourceDocument {
   ci?: HarnessConfigResolvedDocument['ci'];
   validate?: HarnessConfigResolvedDocument['validate'];
   preCommit?: Partial<HarnessConfigResolvedDocument['preCommit']>;
+  modelRouting?: HarnessConfigResolvedDocument['modelRouting'];
   phase2Extensions?: HarnessConfigResolvedDocument['phase2Extensions'];
   architecture?: ArchitectureConfigSource;
 }
@@ -62,6 +67,7 @@ export interface HarnessConfigResolvedDocument {
   project: {
     name: string;
     preset: PresetId;
+    languages?: string[];
   };
   layers: {
     L1: {
@@ -125,6 +131,9 @@ export interface HarnessConfigResolvedDocument {
   preCommit?: {
     implementationExtensions: string[];
   };
+  modelRouting?: {
+    delegation: ModelDelegationPolicy;
+  };
   phase2Extensions?: {
     initialCreationExpirationRules?: Array<{
       ruleId: string;

package/scripts/harness/config-foundation/domain/services/preset-resolution-service.ts

@@ -1,6 +1,7 @@
 /**
  * @layer domain
  * @unit config-foundation
+ * @work-item-id WI-212
  */
 import { ConfigFoundationDomainError } from '../errors/config-foundation-domain-error.js';
 import type {
@@ -152,6 +153,7 @@ export class PresetResolutionService {
       project: {
         name: sourceDocument.project.name,
         preset: sourceDocument.project.preset,
+        languages: sourceDocument.project.languages ?? ['typescript'],
       },
       layers: deepMerge(presetDefinition.layers, sourceDocument.layers, 'layers'),
       quickMode: deepMerge(

package/scripts/harness/config-foundation/domain/value-objects/project-config.ts

@@ -1,6 +1,7 @@
 /**
  * @layer domain
  * @unit config-foundation
+ * @work-item-id WI-212
  *
  * ProjectConfig値オブジェクト - プロジェクト名とPresetを保持する
  */
@@ -10,35 +11,49 @@ import { Preset } from './preset.js';
 interface ProjectConfigProps {
   readonly name: string;
   readonly preset: Preset;
+  readonly languages?: readonly string[];
 }
 
 export class ProjectConfig {
   readonly name: string;
   readonly preset: Preset;
+  readonly languages: readonly string[];
 
   constructor(props: ProjectConfigProps) {
     if (!props.name || props.name.trim() === '') {
       throw new ConfigValidationError('ProjectConfig: name must not be empty');
     }
+    const sourceLanguages = props.languages ?? ['typescript'];
+    if (sourceLanguages.length === 0) {
+      throw new ConfigValidationError('ProjectConfig: languages must not be empty');
+    }
+    const normalizedLanguages = sourceLanguages.map((language) => language.trim()).filter((language) => language.length > 0);
+    if (normalizedLanguages.length !== sourceLanguages.length) {
+      throw new ConfigValidationError('ProjectConfig: languages must contain non-empty strings');
+    }
     this.name = props.name;
     this.preset = props.preset;
+    this.languages = Object.freeze([...normalizedLanguages]);
     Object.freeze(this);
   }
 
-  static create(raw: { name: string; preset: string }): ProjectConfig {
+  static create(raw: { name: string; preset: string; languages?: readonly string[] }): ProjectConfig {
     const preset = Preset.create(raw.preset);
-    return new ProjectConfig({ name: raw.name, preset });
+    return new ProjectConfig({ name: raw.name, preset, languages: raw.languages ?? ['typescript'] });
   }
 
   rename(name: string): ProjectConfig {
-    return new ProjectConfig({ name, preset: this.preset });
+    return new ProjectConfig({ name, preset: this.preset, languages: this.languages });
   }
 
   changePreset(preset: Preset): ProjectConfig {
-    return new ProjectConfig({ name: this.name, preset });
+    return new ProjectConfig({ name: this.name, preset, languages: this.languages });
   }
 
   equals(other: ProjectConfig): boolean {
-    return this.name === other.name && this.preset.equals(other.preset);
+    return this.name === other.name
+      && this.preset.equals(other.preset)
+      && this.languages.length === other.languages.length
+      && this.languages.every((language, index) => language === other.languages[index]);
   }
 }

package/scripts/harness/config-foundation/infrastructure/schemas/harness-config-v2.schema.json

@@ -33,6 +33,15 @@
             "strict"
           ]
         },
+        "languages": {
+          "type": "array",
+          "items": {
+            "type": "string",
+            "minLength": 1
+          },
+          "minItems": 1,
+          "uniqueItems": true
+        },
         "paths": {
           "type": "object",
           "additionalProperties": false,
@@ -474,6 +483,22 @@
         }
       }
     },
+    "modelRouting": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": [
+        "delegation"
+      ],
+      "properties": {
+        "delegation": {
+          "type": "string",
+          "enum": [
+            "delegate-sonnet",
+            "none"
+          ]
+        }
+      }
+    },
     "protectedFiles": {
       "type": "object",
       "additionalProperties": false,

package/scripts/harness/config-foundation/infrastructure/schemas/harness-config-v3.schema.json

@@ -43,6 +43,15 @@
             "strict"
           ]
         },
+        "languages": {
+          "type": "array",
+          "items": {
+            "type": "string",
+            "minLength": 1
+          },
+          "minItems": 1,
+          "uniqueItems": true
+        },
         "paths": {
           "type": "object",
           "additionalProperties": false,
@@ -492,6 +501,22 @@
         }
       }
     },
+    "modelRouting": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": [
+        "delegation"
+      ],
+      "properties": {
+        "delegation": {
+          "type": "string",
+          "enum": [
+            "delegate-sonnet",
+            "none"
+          ]
+        }
+      }
+    },
     "protectedFiles": {
       "type": "object",
       "additionalProperties": false,

package/scripts/harness/installation/application/usecases/run-install.ts

@@ -15,9 +15,11 @@
 // @work-item-id WI-214
 // @work-item-id WI-215
 // @work-item-id WI-216
+// @work-item-id WI-219
 
 import { mkdir, readFile, writeFile, copyFile, chmod, access, lstat, readlink, symlink, readdir, rm } from "node:fs/promises";
 import { dirname, join } from "node:path";
+import { readModelDelegationPolicy, renderSkillForModelDelegation } from "../../../setup/skill-deployer.js";
 import { DeploymentEntry } from "../../domain/deployment-entry.js";
 import { DeploymentManifest } from "../../domain/deployment-manifest.js";
 import type { ManagedBlockInput } from "../../domain/managed-block.js";
@@ -132,13 +134,24 @@ async function copyDirectory(src: string, dest: string): Promise<void> {
   }
 }
 
-async function copySelectedSkillDirectories(harnessRoot: string, targetRoot: string, skills: readonly string[]): Promise<void> {
+async function copySelectedSkillDirectories(
+  harnessRoot: string,
+  projectRoot: string,
+  targetRoot: string,
+  skills: readonly string[],
+): Promise<void> {
   await mkdir(targetRoot, { recursive: true });
+  const modelDelegationPolicy = await readModelDelegationPolicy(projectRoot);
   for (const skill of skills) {
     const source = join(harnessRoot, "skills", skill);
     const target = join(targetRoot, skill);
     await rm(target, { recursive: true, force: true });
     await copyDirectory(source, target);
+    if (modelDelegationPolicy === "none") {
+      const skillPath = join(target, "SKILL.md");
+      const content = await readFile(skillPath, "utf8");
+      await writeFile(skillPath, renderSkillForModelDelegation(content, modelDelegationPolicy), "utf8");
+    }
   }
 }
 
@@ -445,7 +458,7 @@ export class RunInstallUseCase {
       plan.push(item);
       if (input.apply && item.changed && item.repairMode === "mechanical") {
         try {
-          await copySelectedSkillDirectories(input.harnessRoot, join(input.projectRoot, skillPath), selectedPersonalSkills);
+          await copySelectedSkillDirectories(input.harnessRoot, input.projectRoot, join(input.projectRoot, skillPath), selectedPersonalSkills);
           await writeFile(
             join(input.projectRoot, skillPath, ".harness-version"),
             `${JSON.stringify({ version: input.phasegateVersion, deployedAt: new Date().toISOString(), skillSet }, null, 2)}\n`,
@@ -862,7 +875,7 @@ export class RunInstallUseCase {
 
   private async deploySharedSkills(input: RunInstallInput, skills: readonly string[], skillSet: SkillSet): Promise<void> {
     const targetRoot = join(input.projectRoot, "skills");
-    await copySelectedSkillDirectories(input.harnessRoot, targetRoot, skills);
+    await copySelectedSkillDirectories(input.harnessRoot, input.projectRoot, targetRoot, skills);
     await writeFile(
       join(targetRoot, ".harness-version"),
       `${JSON.stringify({ version: input.phasegateVersion, deployedAt: new Date().toISOString(), skillSet }, null, 2)}\n`,