token-harness 0.1.19 → 0.1.20

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "token-harness",
-  "version": "0.1.19",
+  "version": "0.1.20",
   "description": "Quota-aware efficiency layer for Claude Code and Codex subscription limits.",
   "license": "Apache-2.0",
   "type": "module",

package/sbom.json

@@ -1,14 +1,14 @@
 {
   "bomFormat": "CycloneDX",
   "specVersion": "1.5",
-  "serialNumber": "urn:uuid:fd379d86-ac5b-23d6-ac6a-6b9654496726",
+  "serialNumber": "urn:uuid:6a907cd9-4778-ca06-b653-78caf2cf25f0",
   "version": 1,
   "metadata": {
     "component": {
       "type": "application",
       "bom-ref": "token-harness",
       "name": "token-harness",
-      "version": "0.1.19",
+      "version": "0.1.20",
       "description": "Quota-aware efficiency layer for Claude Code and Codex subscription limits.",
       "licenses": [
         {
@@ -20,7 +20,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "fd379d86ac5b23d6ac6a6b96544967266bf50ee71039397bb7d6a3f3c34373f7"
+          "content": "6a907cd94778ca06b65378caf2cf25f060cc82a51168e1cd611f5f58b5e19e55"
         }
       ]
     },

package/token-harness.mjs

@@ -10068,7 +10068,7 @@ var TOOL_VERSION;
 var init_version2 = __esm({
   "apps/cli/dist/src/version.js"() {
     "use strict";
-    TOOL_VERSION = "0.1.19";
+    TOOL_VERSION = "0.1.20";
   }
 });
 
@@ -32828,21 +32828,31 @@ async function planDirectRtkRelease(input) {
   const admission = admitProviderPackageUpdate(input.providerId, targetText);
   if (admission.state !== "admitted")
     return empty2("unavailable");
-  if (input.executables.length !== 1) {
-    const detail2 = input.executables.length === 0 ? "no concrete RTK executable path could be resolved" : `${String(input.executables.length)} RTK executable paths resolve: ${input.executables.map((entry) => entry.path).join(", ")}`;
+  if (input.executables.length === 0) {
     return empty2("unavailable", [
       diagnostic({
         severity: "warning",
-        code: "rtk-release-target-ambiguous",
+        code: "rtk-release-target-unresolved",
         subject: input.providerId,
-        message: `The verified GitHub release update was not planned because ${detail2}`,
-        remediation: "Make exactly one intended RTK executable resolve on PATH, then re-run Check for updates; Token Harness will not choose an arbitrary binary to replace"
+        message: "The verified GitHub release update was not planned because no concrete RTK executable path could be resolved",
+        remediation: "Make the intended RTK executable available on PATH, then re-run Check for updates"
       })
     ]);
   }
   const executable = input.executables[0];
+  const shadowedDiagnostics = input.executables.length > 1 ? [
+    diagnostic({
+      severity: "info",
+      code: "rtk-release-shadowed-executables",
+      subject: input.providerId,
+      path: executable?.path ?? null,
+      message: `RTK update will target the active PATH executable ${executable?.path ?? "unknown"}; ${String(input.executables.length - 1)} shadowed RTK executable${input.executables.length === 2 ? "" : "s"} will be left unchanged: ${input.executables.slice(1).map((entry) => entry.path).join(", ")}`,
+      remediation: null
+    })
+  ] : [];
   if (executable === void 0 || executable.kind !== "native") {
     return empty2("unavailable", [
+      ...shadowedDiagnostics,
       diagnostic({
         severity: "warning",
         code: "rtk-release-target-not-native",
@@ -32858,6 +32868,7 @@ async function planDirectRtkRelease(input) {
   const targetPath = await canonicalPath.call(input.fs, executable.path);
   if (targetPath === null) {
     return empty2("unavailable", [
+      ...shadowedDiagnostics,
       diagnostic({
         severity: "warning",
         code: "rtk-release-target-unresolved",
@@ -32875,6 +32886,7 @@ async function planDirectRtkRelease(input) {
   if (queried.status !== "found") {
     return {
       ...empty2("unavailable", [
+        ...shadowedDiagnostics,
         diagnostic({
           severity: "warning",
           code: "rtk-release-fallback-unavailable",
@@ -32899,7 +32911,7 @@ async function planDirectRtkRelease(input) {
     },
     availableVersion: targetText,
     verdict: "upgradable",
-    diagnostics: [],
+    diagnostics: shadowedDiagnostics,
     destinations: [RTK_RELEASE_METADATA_DESTINATION]
   };
 }
@@ -37440,20 +37452,149 @@ var init_guided = __esm({
         const data = input;
         const action = String(data["action"]);
         const candidateAction = action === "candidate-setup" || action === "candidate-remove";
+        const routingAction = action === "routing-setup" || action === "routing-remove" || action === "routing-metrics";
         const requestedHarnesses = data["harnesses"];
         const validHarnesses = Array.isArray(requestedHarnesses) && requestedHarnesses.length > 0 && requestedHarnesses.length <= 20 && requestedHarnesses.every((value3) => typeof value3 === "string" && ["claude", "codex"].includes(value3)) && new Set(requestedHarnesses).size === requestedHarnesses.length;
-        if (Object.keys(data).some((key) => !["action", "harness", "harnesses", "task", "provider", "candidate"].includes(key)) || ![
+        if (Object.keys(data).some((key) => ![
+          "action",
+          "harness",
+          "harnesses",
+          "task",
+          "provider",
+          "candidate",
+          "routeMode"
+        ].includes(key)) || ![
           "setup",
           "effort",
           "skill",
           "undo",
           "remove",
           "candidate-setup",
-          "candidate-remove"
-        ].includes(action) || data["harness"] !== void 0 && !["claude", "codex"].includes(String(data["harness"])) || data["harnesses"] !== void 0 && !validHarnesses || data["harnesses"] !== void 0 && action !== "setup" || data["harnesses"] !== void 0 && data["harness"] !== void 0 || data["task"] !== void 0 && !TASKS.has(String(data["task"])) || data["provider"] !== void 0 && !["rtk", "harnesstrim", "mcptoon", "gitnexus", "headroom"].includes(String(data["provider"])) || data["candidate"] !== void 0 && !["mcptoon", "gitnexus"].includes(String(data["candidate"])) || action === "effort" && (data["harness"] === void 0 || data["task"] === void 0) || action === "skill" && data["harness"] === void 0 || action === "remove" && (data["provider"] === void 0 || data["harness"] !== void 0 || data["harnesses"] !== void 0 || data["task"] !== void 0 || data["candidate"] !== void 0) || data["provider"] !== void 0 && action !== "remove" && action !== "setup" || candidateAction && (data["candidate"] === void 0 || data["harness"] === void 0 || data["provider"] !== void 0 || data["task"] !== void 0) || !candidateAction && data["candidate"] !== void 0)
+          "candidate-remove",
+          "routing-setup",
+          "routing-remove",
+          "routing-metrics"
+        ].includes(action) || data["harness"] !== void 0 && !["claude", "codex"].includes(String(data["harness"])) || data["harnesses"] !== void 0 && !validHarnesses || data["harnesses"] !== void 0 && action !== "setup" || data["routeMode"] !== void 0 && !["shadow", "conservative"].includes(String(data["routeMode"])) || data["harnesses"] !== void 0 && data["harness"] !== void 0 || data["task"] !== void 0 && !TASKS.has(String(data["task"])) || data["provider"] !== void 0 && !["rtk", "harnesstrim", "mcptoon", "gitnexus", "headroom"].includes(String(data["provider"])) || data["candidate"] !== void 0 && !["mcptoon", "gitnexus"].includes(String(data["candidate"])) || action === "effort" && (data["harness"] === void 0 || data["task"] === void 0) || action === "skill" && data["harness"] === void 0 || routingAction && data["harness"] === void 0 || action !== "routing-setup" && data["routeMode"] !== void 0 || action === "remove" && (data["provider"] === void 0 || data["harness"] !== void 0 || data["harnesses"] !== void 0 || data["task"] !== void 0 || data["candidate"] !== void 0) || data["provider"] !== void 0 && action !== "remove" && action !== "setup" || candidateAction && (data["candidate"] === void 0 || data["harness"] === void 0 || data["provider"] !== void 0 || data["task"] !== void 0) || !candidateAction && data["candidate"] !== void 0 || routingAction && (data["provider"] !== void 0 || data["candidate"] !== void 0 || data["task"] !== void 0 || data["harnesses"] !== void 0))
           throw new GuideError(400, "Choose a supported agent and action.");
         return this.exclusive(async () => {
           this.approval = null;
+          if (routingAction) {
+            const harness = String(data["harness"]);
+            const mode = data["routeMode"] === "conservative" ? "conservative" : "shadow";
+            if (action === "routing-metrics") {
+              this.record(`Reading local Smart Model Routing decisions for ${name(harness)}. No configuration is changed.`, "working");
+              const result7 = await this.call([
+                "routing",
+                "--route-metrics",
+                "--ccr-usage",
+                "--harness",
+                harness,
+                "--since",
+                "30d"
+              ]);
+              if (result7.exitCode !== 0 || result7.data?.kind !== "metrics") {
+                const message = explainGuideIssue(result7.diagnostics, `Routing activity for ${name(harness)} could not be read. No configuration changed.`);
+                this.record(message, "attention");
+                return {
+                  ticket: null,
+                  title: "Routing activity needs attention",
+                  changes: [],
+                  notices: [message],
+                  expiresAt: null,
+                  network: false,
+                  restart: false
+                };
+              }
+              const metrics = result7.data.metrics;
+              const notices2 = [
+                `${String(metrics.retainedDecisionCount)} local routing decision${metrics.retainedDecisionCount === 1 ? "" : "s"} recorded in the last 30 days for ${name(harness)}.`,
+                `Shadow decisions: ${String(metrics.byMode.shadow)}. Conservative route requests: ${String(metrics.routeMutationRequestCount)}.`,
+                `Tiers: simple ${String(metrics.byTier.simple)}, standard ${String(metrics.byTier.standard)}, complex ${String(metrics.byTier.complex)}, critical ${String(metrics.byTier.critical)}.`,
+                "Routing telemetry stores classifier features and model identifiers, not prompt text. Subscription savings remain not measured until paired quality and allowance evidence exists."
+              ];
+              this.record("Routing activity read successfully.", "success");
+              return {
+                ticket: null,
+                title: `Smart Model Routing \xB7 ${name(harness)}`,
+                changes: [],
+                notices: notices2,
+                expiresAt: null,
+                network: false,
+                restart: false
+              };
+            }
+            const removing = action === "routing-remove";
+            this.record(`${removing ? "Reviewing removal of" : "Reviewing"} Smart Model Routing for ${name(harness)}. Nothing has changed yet.`, "working");
+            const args = removing ? ["routing", "--rollback-ccr", "--harness", harness] : ["routing", "--configure-ccr", "--harness", harness, "--route-mode", mode];
+            const result6 = await this.call(args);
+            if (result6.exitCode !== 0 || result6.data === null) {
+              const message = explainGuideIssue(result6.diagnostics, `No safe Smart Model Routing ${removing ? "removal" : "setup"} is available for ${name(harness)}. Nothing was changed.`);
+              this.record(message, "attention");
+              return {
+                ticket: null,
+                title: "No routing change to apply",
+                changes: [],
+                notices: [message],
+                expiresAt: null,
+                network: false,
+                restart: false
+              };
+            }
+            const report = result6.data;
+            const alreadyConfigured = !removing && report.kind === "ccr-configuration" && report.state === "already-configured";
+            const alreadyAbsent = removing && report.kind === "ccr-configuration" && report.state === "already-absent";
+            if (alreadyConfigured || alreadyAbsent) {
+              const message = alreadyConfigured ? `${name(harness)} already has the Token Harness-owned ${mode} routing rule.` : `${name(harness)} has no Token Harness-owned routing rule to remove.`;
+              this.record(message, "success");
+              return {
+                ticket: null,
+                title: alreadyConfigured ? "Routing already configured" : "Routing already absent",
+                changes: [],
+                notices: [message],
+                expiresAt: null,
+                network: false,
+                restart: false
+              };
+            }
+            const ticket = this.random();
+            const expires2 = this.now() + 10 * 6e4;
+            const lifecycle = report.kind === "ccr-lifecycle";
+            const network2 = lifecycle && report.action !== "start";
+            this.approval = {
+              id: ticket,
+              expires: expires2,
+              plans: [],
+              transactionId: null,
+              provider: null,
+              description: `Smart Model Routing ${removing ? "removal" : mode}`,
+              operation: removing ? "routing-rollback" : "routing-configure",
+              network: network2,
+              routingHarness: harness,
+              routingMode: mode
+            };
+            const change = report.kind === "ccr-lifecycle" ? {
+              title: `${name(harness)}: prepare local CCR routing runtime`,
+              files: 0,
+              description: report.action === "install" ? `Install the reviewed CCR ${report.version} CLI inside Token Harness protected local state, start its loopback gateway and verify it. No global CCR package, provider login or native harness endpoint is replaced.` : `Start or update the Token Harness-owned CCR ${report.version} runtime and verify its loopback gateway before any routing rule is configured.`
+            } : {
+              title: `${name(harness)}: ${removing ? "remove" : "configure"} Smart Model Routing`,
+              files: 0,
+              description: removing ? "Remove only the Token Harness-owned CCR rule/profile for this coding agent. Provider credentials and unrelated CCR configuration are left untouched." : mode === "shadow" ? "Install the Token Harness-owned CCR rule in shadow mode. Requests keep their current model; only local routing decisions are recorded." : "Install the conservative opt-in rule. Only high-confidence simple requests may request the already-configured simple model; complex, ambiguous, image and unsafe tool requests pass through unchanged."
+            };
+            this.record("Smart Model Routing preview ready. Waiting for your approval.", "success");
+            return {
+              ticket,
+              title: removing ? `Remove Smart Model Routing for ${name(harness)}?` : `Set up ${mode} Smart Model Routing for ${name(harness)}?`,
+              changes: [change],
+              notices: [
+                lifecycle && !removing ? "CCR runtime preparation and routing-rule configuration are deliberately separate safety stages. After the runtime is ready, open Manage routing again to review the exact rule/profile." : "Token Harness owns only its exact CCR rule/profile and local managed runtime. Provider credentials remain in CCR and are never imported silently.",
+                mode === "shadow" && !removing ? "Shadow mode is the default: it never changes the model selected for a request." : mode === "conservative" && !removing ? "Conservative routing requires TOKEN_HARNESS_ROUTING_SIMPLE_MODEL to name an exact model already configured in CCR. Without that explicit model the preview is refused." : "Removing routing does not uninstall CCR or delete provider credentials."
+              ],
+              expiresAt: new Date(expires2).toISOString(),
+              network: network2,
+              restart: false
+            };
+          }
           if (candidateAction) {
             const candidate = String(data["candidate"]);
             const harness = String(data["harness"]);
@@ -37854,6 +37995,86 @@ var init_guided = __esm({
               appliedPlans: appliedCount
             };
           }
+          if (approval.operation === "routing-configure" || approval.operation === "routing-rollback") {
+            if (approval.routingHarness === void 0 || approval.routingMode === void 0)
+              throw new GuideError(409, "This Smart Model Routing preview is incomplete. Review it again.");
+            const harness = approval.routingHarness;
+            const mode = approval.routingMode;
+            const removing = approval.operation === "routing-rollback";
+            this.record((removing ? "Removing" : "Applying") + " Smart Model Routing for " + name(harness) + ".", "working");
+            let result6;
+            try {
+              result6 = await this.call(removing ? ["routing", "--rollback-ccr", "--harness", harness, "--yes"] : ["routing", "--configure-ccr", "--harness", harness, "--route-mode", mode, "--yes"]);
+            } catch {
+              this.invalidateObservedState();
+              const message = "The Smart Model Routing operation stopped before its final result could be read. No automatic retry was made. Review the local routing state before retrying.";
+              this.record(message, "attention");
+              return {
+                ok: false,
+                title: "Routing result needs checking",
+                messages: [message],
+                appliedPlans: 0
+              };
+            }
+            if (result6.exitCode !== 0 || result6.data === null) {
+              const message = explainGuideIssue(result6.diagnostics, "Smart Model Routing for " + name(harness) + " was not changed. The local CCR runtime, provider model selection or owned rule state no longer matches the preview.");
+              this.invalidateObservedState();
+              this.record(message, "attention");
+              return {
+                ok: false,
+                title: "Routing change was not applied",
+                messages: [message],
+                appliedPlans: 0
+              };
+            }
+            const report = result6.data;
+            this.lastApplied = null;
+            this.invalidateObservedState();
+            if (report.kind === "ccr-lifecycle") {
+              const message = "The Token Harness-owned CCR " + report.version + " runtime is ready and verified on loopback. No routing rule has been assumed from this runtime step. Open Manage routing again to review the exact shadow or conservative rule/profile.";
+              this.record("CCR routing runtime prepared and verified.", "success");
+              return {
+                ok: true,
+                title: "Routing runtime ready",
+                messages: [
+                  message,
+                  "Provider login/import remains an explicit CCR choice; Token Harness did not change Claude Code or Codex native endpoints."
+                ],
+                appliedPlans: report.state === "already-current" ? 0 : 1
+              };
+            }
+            if (report.kind !== "ccr-configuration") {
+              const message = "The routing command returned an unexpected result shape after approval. No success is being reported; review the local CCR routing state before retrying.";
+              this.record(message, "attention");
+              return {
+                ok: false,
+                title: "Routing result needs checking",
+                messages: [message],
+                appliedPlans: 0
+              };
+            }
+            const changed = report.state === "configured" || report.state === "rolled-back";
+            const messages2 = removing ? [
+              report.state === "already-absent" ? name(harness) + " already had no Token Harness-owned routing rule." : "The Token Harness-owned Smart Model Routing rule/profile for " + name(harness) + " was removed. CCR and provider credentials were left in place."
+            ] : [
+              report.state === "already-configured" ? name(harness) + " already has the Token Harness-owned " + mode + " routing rule." : name(harness) + " Smart Model Routing is configured in " + mode + " mode.",
+              ...mode === "shadow" ? [
+                "Shadow mode records local routing decisions but does not change the request model."
+              ] : [
+                "Conservative mode may request the configured simple model only for high-confidence simple prompts; safety-gated requests pass through unchanged."
+              ],
+              ...report.launchCommand ? ["Launch through the CCR profile to use the rule: " + report.launchCommand] : [
+                "CCR still needs an unambiguous provider/model profile before a routed launch can be verified."
+              ]
+            ];
+            this.record(removing ? "Smart Model Routing rule removed." : "Smart Model Routing configured.", "success");
+            return {
+              ok: true,
+              title: removing ? "Routing removed" : "Smart Model Routing configured",
+              messages: messages2,
+              appliedPlans: changed ? 1 : 0
+            };
+          }
           if (approval.operation === "candidate-apply" || approval.operation === "candidate-uninstall") {
             if (approval.candidate === void 0 || approval.candidateHarness === void 0)
               throw new GuideError(409, "This experimental preview is incomplete. Review it again.");
@@ -38061,6 +38282,7 @@ var init_guided = __esm({
           ];
           const applicationUpgradable = updateResult.data.application?.verdict === "upgradable";
           const blocked = updateResult.data.providers.filter((row2) => row2.verdict === "blocked-unreviewed");
+          const updateWarnings = updateResult.diagnostics.filter((entry) => entry.severity === "warning");
           const messages = [];
           const application = updateResult.data.application;
           if (application?.verdict === "upgradable") {
@@ -38076,9 +38298,15 @@ var init_guided = __esm({
           if (blocked.length > 0) {
             messages.push(...blocked.map((row2) => `${name(row2.providerId)}: ${row2.available ?? "a newer version"} exists, but Token Harness is keeping ${row2.installed ?? "the installed version"} because the target does not meet the provider update prerequisites.`));
           }
-          if (available.length === 0 && blocked.length === 0 && application?.verdict === "current") {
+          if (updateWarnings.length > 0) {
+            messages.push(...updateWarnings.map((entry) => {
+              const label = entry.subject === null || entry.subject === void 0 ? "Update check" : name(entry.subject);
+              return label + ": " + entry.message + (entry.remediation === null || entry.remediation === void 0 ? "" : " " + entry.remediation);
+            }));
+          }
+          if (available.length === 0 && blocked.length === 0 && updateWarnings.length === 0 && application?.verdict === "current") {
             messages.push("Token Harness and your managed optimizers are up to date.");
-          } else if (available.length === 0 && blocked.length === 0 && application === void 0) {
+          } else if (available.length === 0 && blocked.length === 0 && updateWarnings.length === 0 && application === void 0) {
             messages.push("Your managed optimizers are up to date on their configured channels.");
           }
           let ticket = null;
@@ -38106,10 +38334,10 @@ var init_guided = __esm({
           const stack = this.stackSnapshot();
           if (this.cached !== null)
             this.cached.value = { ...this.cached.value, stack };
-          this.record(ticket !== null ? "Token Harness or optimizer update available. Waiting for your approval." : upgradableCount > 0 ? "Update check could not produce an exact install target." : "Token Harness and optimizer update check completed.", "success");
+          this.record(ticket !== null ? "Token Harness or optimizer update available. Waiting for your approval." : upgradableCount > 0 || updateWarnings.length > 0 ? "Update check needs attention." : "Token Harness and optimizer update check completed.", upgradableCount > 0 || updateWarnings.length > 0 ? "attention" : "success");
           return {
             ok: true,
-            title: ticket !== null ? "Updates available" : upgradableCount > 0 ? "Update check needs attention" : application?.verdict === "current" ? "Token Harness and optimizers up to date" : "Update check completed",
+            title: ticket !== null ? "Updates available" : upgradableCount > 0 || updateWarnings.length > 0 ? "Update check needs attention" : application?.verdict === "current" ? "Token Harness and optimizers up to date" : "Update check completed",
             messages,
             appliedPlans: 0,
             stack,
@@ -41290,6 +41518,155 @@ var init_guided_product_client = __esm({
       });
   }
 
+
+  function reviewRoutingAction(harness, action, routeMode, run) {
+    const label =
+      action === 'routing-metrics'
+        ? 'Reading routing activity'
+        : action === 'routing-remove'
+          ? 'Reviewing routing removal'
+          : 'Reviewing ' + routeMode + ' routing setup';
+    $('modal-content').replaceChildren(
+      progress(label, 'Nothing changes while Token Harness reads the local routing state.'),
+    );
+    $('modal-actions').replaceChildren(modalClose('Cancel'));
+    setBusy(true, false);
+    ensureSession()
+      .then(() =>
+        request('/api/preview', {
+          action,
+          harness,
+          ...(action === 'routing-setup' ? { routeMode } : {}),
+        }),
+      )
+      .then(data => {
+        if (run !== modalRun || !$('modal').open) return;
+        pendingTicket = data.ticket;
+        $('modal-content').replaceChildren(
+          messageBox(
+            'Smart Model Routing · ' + agentName(harness),
+            action === 'routing-metrics'
+              ? 'Local classifier and CCR activity only. Prompt text and credentials are not shown.'
+              : action === 'routing-remove'
+                ? 'Only the Token Harness-owned CCR rule/profile is eligible for removal.'
+                : routeMode === 'shadow'
+                  ? 'Shadow mode is the safe default: it classifies requests locally and records decisions without changing the selected model.'
+                  : 'Conservative mode is opt-in: only high-confidence simple requests may request one already-configured simple model; safety-gated requests pass through unchanged.',
+          ),
+        );
+        for (const change of data.changes || []) {
+          const item = node('article', undefined, 'preview-change');
+          item.append(node('h3', change.title), node('p', change.description));
+          $('modal-content').append(item);
+        }
+        for (const notice of data.notices || [])
+          $('modal-content').append(node('p', notice, 'notice-row'));
+        if (action !== 'routing-metrics')
+          $('modal-content').append(
+            messageBox(
+              'Safety boundary',
+              'Token Harness owns only its exact CCR runtime/rule/profile. Provider credentials remain in CCR, native Claude Code/Codex endpoints are not rewritten, and every mutation still requires this explicit approval.',
+              'safe',
+            ),
+          );
+        $('modal-actions').replaceChildren(modalClose(data.ticket ? 'Cancel' : 'Done'));
+        if (data.ticket)
+          $('modal-actions').append(
+            actionButton(
+              action === 'routing-remove'
+                ? 'Remove managed routing'
+                : routeMode === 'conservative'
+                  ? 'Apply conservative routing step'
+                  : 'Apply shadow routing step',
+              () => applyTicket(data.ticket),
+            ),
+          );
+      })
+      .catch(error => {
+        if (run !== modalRun) return;
+        $('modal-error').textContent = error.message;
+        $('modal-error').hidden = false;
+        $('modal-actions').replaceChildren(modalClose('Close'));
+      })
+      .finally(() => {
+        if (run === modalRun) setBusy(false, false);
+        loadActivity();
+      });
+  }
+
+  function manageRouting(harness) {
+    if (busy) return;
+    const run = modal('Smart Model Routing · ' + agentName(harness));
+    $('modal-content').append(
+      messageBox(
+        'Shadow-first routing',
+        'The classifier runs locally with deterministic heuristics. It needs no paid routing API and no local LLM. The reviewed CCR gateway is used only as the local request-routing surface.',
+      ),
+      messageBox(
+        'How to use it',
+        'Start with Shadow. After CCR is prepared, review Shadow again to install the exact rule/profile. Launch the agent through the CCR profile shown after configuration. Conservative mode is optional and requires an exact simple model already configured in CCR.',
+      ),
+      messageBox(
+        'What is measured',
+        'Routing decisions are kept separate from optimizer token savings. A cheaper model is not counted as saved quota unless paired quality and allowance evidence proves it.',
+        'safe',
+      ),
+    );
+    $('modal-actions').append(
+      modalClose('Close'),
+      actionButton(
+        'View 30-day activity',
+        () => reviewRoutingAction(harness, 'routing-metrics', 'shadow', run),
+        'secondary',
+      ),
+      actionButton(
+        'Remove managed rule',
+        () => reviewRoutingAction(harness, 'routing-remove', 'shadow', run),
+        'secondary',
+      ),
+      actionButton(
+        'Review conservative setup',
+        () => reviewRoutingAction(harness, 'routing-setup', 'conservative', run),
+        'secondary',
+      ),
+      actionButton(
+        'Review shadow setup',
+        () => reviewRoutingAction(harness, 'routing-setup', 'shadow', run),
+      ),
+    );
+  }
+
+  function renderRouting() {
+    const root = $('routing-overview');
+    if (!root) return;
+    root.replaceChildren();
+    const agents = activeAgents();
+    if (!agents.length) {
+      root.append(
+        messageBox(
+          'No supported coding agent detected',
+          'Smart Model Routing is available for Claude Code and Codex after the agent is detected.',
+          'warn',
+        ),
+      );
+      return;
+    }
+    for (const agent of agents) {
+      const row = node('article', undefined, 'maintenance-row');
+      const copy = node('div');
+      copy.append(
+        node('strong', agent.name),
+        node(
+          'p',
+          'Optional request routing through a local CCR profile. Shadow mode never changes models; conservative mode is explicit and safety-gated.',
+          'caption',
+        ),
+      );
+      row.append(copy, actionButton('Manage routing', () => manageRouting(agent.id), 'secondary'));
+      root.append(row);
+    }
+  }
+
   function renderMaintenance() {
     const root = $('maintenance-actions');
     root.replaceChildren();
@@ -41354,6 +41731,7 @@ var init_guided_product_client = __esm({
     renderManagedSetup();
     renderExperimental();
     renderTuning();
+    renderRouting();
     renderMaintenance();
   }
 
@@ -42397,6 +42775,11 @@ ${GUIDE_CANDIDATE_READINESS_JS}`;
 <details class="disclosure"><summary>Remove Token Harness-managed configuration</summary><p class="caption">Removal is reviewed first. Token Harness removes only configuration it owns; installed provider software and user-owned configuration may remain.</p><div id="managed-removal-actions" class="maintenance-list"><p class="caption">Checking managed ownership\u2026</p></div></details>
 </section>
 
+<section class="setup-step" id="smart-routing">
+<div class="section-title"><div><h2>Smart Model Routing</h2><p>Optional shadow-first request routing for Claude Code and Codex. Shadow mode observes locally without changing models; conservative routing is an explicit opt-in.</p></div></div>
+<div id="routing-overview" class="maintenance-list"><p class="empty">Checking supported coding agents\u2026</p></div>
+</section>
+
 <section class="setup-step" id="maintenance">
 <div class="section-title"><div><h2>Health and updates</h2><p>These are maintenance actions, not onboarding steps. Setup already performs its own safety checks.</p></div></div>
 <div id="maintenance-actions" class="maintenance-list"><p class="empty">Checking\u2026</p></div>