token-harness 0.1.19 → 0.1.21

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "token-harness",
-  "version": "0.1.19",
+  "version": "0.1.21",
   "description": "Quota-aware efficiency layer for Claude Code and Codex subscription limits.",
   "license": "Apache-2.0",
   "type": "module",

package/sbom.json

@@ -1,14 +1,14 @@
 {
   "bomFormat": "CycloneDX",
   "specVersion": "1.5",
-  "serialNumber": "urn:uuid:fd379d86-ac5b-23d6-ac6a-6b9654496726",
+  "serialNumber": "urn:uuid:c41dcc70-e6f7-7524-9366-fd396457b2bd",
   "version": 1,
   "metadata": {
     "component": {
       "type": "application",
       "bom-ref": "token-harness",
       "name": "token-harness",
-      "version": "0.1.19",
+      "version": "0.1.21",
       "description": "Quota-aware efficiency layer for Claude Code and Codex subscription limits.",
       "licenses": [
         {
@@ -20,7 +20,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "fd379d86ac5b23d6ac6a6b96544967266bf50ee71039397bb7d6a3f3c34373f7"
+          "content": "c41dcc70e6f775249366fd396457b2bdfb915241c39f4f8a9784d040b86bce49"
         }
       ]
     },

package/token-harness.mjs

@@ -10068,7 +10068,7 @@ var TOOL_VERSION;
 var init_version2 = __esm({
   "apps/cli/dist/src/version.js"() {
     "use strict";
-    TOOL_VERSION = "0.1.19";
+    TOOL_VERSION = "0.1.21";
   }
 });
 
@@ -22263,9 +22263,6 @@ function stableJson(value3) {
 function isExactCcrSmartRoutingRule(value3, expected) {
   return isRecord6(value3) && stableJson(value3) === stableJson(expected);
 }
-function isSameCcrConfig(left, right) {
-  return isRecord6(left) && isRecord6(right) && stableJson(left) === stableJson(right);
-}
 function configRouter(config) {
   if (!isRecord6(config) || !isRecord6(config["Router"]) || !Array.isArray(config["Router"]["rules"])) {
     return null;
@@ -22831,7 +22828,9 @@ function parseArgv(argv2, plannedCommands = PLANNED_COMMANDS) {
     nativePolicy: false,
     routingScript: false,
     routingMetrics: false,
+    routingStatus: false,
     routingMode: "shadow",
+    routingSimpleModel: null,
     routingPrune: false,
     routingCcrConfigure: false,
     routingCcrRollback: false,
@@ -22880,6 +22879,8 @@ function parseArgv(argv2, plannedCommands = PLANNED_COMMANDS) {
         options.routingScript = true;
       if (name2 === "--route-metrics")
         options.routingMetrics = true;
+      if (name2 === "--route-status")
+        options.routingStatus = true;
       if (name2 === "--prune")
         options.routingPrune = true;
       if (name2 === "--configure-ccr")
@@ -23095,6 +23096,18 @@ function parseArgv(argv2, plannedCommands = PLANNED_COMMANDS) {
         }
         break;
       }
+      case "--route-simple-model":
+        if (!/^[A-Za-z0-9_.:/@+ -]{1,160}$/.test(value3) || !value3.includes("/")) {
+          diagnostics.push(diagnostic({
+            severity: "error",
+            code: "invalid-routing-model",
+            message: "Routing model must be an exact CCR Provider/model identifier",
+            remediation: "Choose a configured model such as Codex API/gpt-5.6-luna"
+          }));
+        } else {
+          options.routingSimpleModel = value3;
+        }
+        break;
       case "--route-mode":
         if (value3 !== "shadow" && value3 !== "conservative") {
           diagnostics.push(diagnostic({
@@ -23207,6 +23220,7 @@ var init_argv = __esm({
       "--reserve",
       "--tasks-left",
       "--route-mode",
+      "--route-simple-model",
       "--context-snapshot"
     ]);
     BOOLEAN_FLAGS = /* @__PURE__ */ new Set([
@@ -23217,6 +23231,7 @@ var init_argv = __esm({
       "--yes",
       "--script",
       "--route-metrics",
+      "--route-status",
       "--prune",
       "--configure-ccr",
       "--rollback-ccr",
@@ -30755,7 +30770,7 @@ async function readOwnership(context, harness) {
   try {
     const bytes = await context.adapters.fs.readFile(path);
     const value3 = JSON.parse(new TextDecoder().decode(bytes));
-    if (isJsonRecord(value3) && value3["schemaVersion"] === 1 && (value3["status"] === "pending" || value3["status"] === "active") && value3["harnessId"] === harness && (value3["mode"] === "shadow" || value3["mode"] === "conservative") && value3["ruleId"] === ccrSmartRoutingRuleId(harness) && typeof value3["scriptPath"] === "string" && /^[a-f0-9]{64}$/.test(String(value3["scriptSha256"])) && (value3["profileId"] === void 0 || typeof value3["profileId"] === "string") && (value3["profileSha256"] === void 0 || /^[a-f0-9]{64}$/.test(String(value3["profileSha256"]))) && value3["profileId"] === void 0 === (value3["profileSha256"] === void 0) && typeof value3["installedAt"] === "string") {
+    if (isJsonRecord(value3) && value3["schemaVersion"] === 1 && (value3["status"] === "pending" || value3["status"] === "active") && value3["harnessId"] === harness && (value3["mode"] === "shadow" || value3["mode"] === "conservative") && value3["ruleId"] === ccrSmartRoutingRuleId(harness) && typeof value3["scriptPath"] === "string" && /^[a-f0-9]{64}$/.test(String(value3["scriptSha256"])) && (value3["profileId"] === void 0 || typeof value3["profileId"] === "string") && (value3["profileSha256"] === void 0 || /^[a-f0-9]{64}$/.test(String(value3["profileSha256"]))) && value3["profileId"] === void 0 === (value3["profileSha256"] === void 0) && (value3["simpleModel"] === void 0 || typeof value3["simpleModel"] === "string" && /^[A-Za-z0-9_.:/@+ -]{1,160}$/.test(value3["simpleModel"])) && typeof value3["installedAt"] === "string") {
       return value3;
     }
   } catch {
@@ -30894,6 +30909,15 @@ function planCcrProfile(config, harness, selectedModel) {
   }
   return { profile, profileContainer, conflict: false, reason: null };
 }
+function configuredCcrModels(config) {
+  const providers = Array.isArray(config["Providers"]) ? config["Providers"] : [];
+  const models = providers.flatMap((provider) => {
+    if (!isJsonRecord(provider) || typeof provider["name"] !== "string" || !Array.isArray(provider["models"]))
+      return [];
+    return provider["models"].flatMap((model) => typeof model === "string" && /^[A-Za-z0-9_.:/@+ -]{1,160}$/.test(model) ? [`${provider["name"]}/${model}`] : []);
+  });
+  return [...new Set(models)].sort((left, right) => left.localeCompare(right)).slice(0, 200);
+}
 function configuredCcrModel(config, requested) {
   const candidate = requested?.trim();
   if (candidate === void 0 || !/^[A-Za-z0-9_.:/@+ -]{1,160}$/.test(candidate))
@@ -30971,6 +30995,58 @@ function profilePlanDiagnostic(plan6) {
     remediation: `Resolve the CCR profile setup requirement and rerun routing setup; provider login/import and credential changes remain explicit CCR actions`
   });
 }
+function routingStatusResult(harnessId2, state, detail2, gatewayState = "unknown", profileId = null, simpleModel = null, availableModels = []) {
+  return commandResult({
+    command: "routing",
+    exitCode: EXIT_CODES.ok,
+    data: {
+      kind: "status",
+      harnessId: harnessId2,
+      state,
+      mode: state === "shadow" || state === "conservative" ? state : null,
+      gatewayState,
+      profileId,
+      launchCommand: profileId === null ? null : ccrLaunchCommand(harnessId2),
+      simpleModel,
+      availableModels,
+      detail: detail2
+    }
+  });
+}
+async function smartRoutingStatus(context) {
+  const fs = context.adapters?.fs;
+  if (fs === void 0 || context.stateRoot === null || !isSmartRoutingHarness(context.harness)) {
+    return error("routing-status-context-required", "Smart Model Routing status needs local state and a Claude Code or Codex harness", "Pass `--harness claude` or `--harness codex` from the local Token Harness installation");
+  }
+  const harnessId2 = context.harness;
+  const owned = await readOwnership(context, harnessId2);
+  let ccr;
+  try {
+    ccr = await readCcrState(context);
+  } catch {
+    return owned === null ? routingStatusResult(harnessId2, "off", "No Token Harness-owned routing configuration is active.") : routingStatusResult(harnessId2, "attention", "Token Harness has routing ownership state, but the local CCR service cannot currently be verified.");
+  }
+  const path = scriptPath(context, harnessId2);
+  const expectedRule = createCcrSmartRoutingRule(harnessId2, path);
+  const router = ccr.config["Router"];
+  const rules = isJsonRecord(router) && Array.isArray(router["rules"]) ? router["rules"] : [];
+  const matching = rules.filter((item) => isJsonRecord(item) && item["id"] === ccrSmartRoutingRuleId(harnessId2));
+  if (owned === null) {
+    return matching.length === 0 ? routingStatusResult(harnessId2, "off", "Smart Model Routing is off for this coding agent.", ccr.gatewayState, null, null, configuredCcrModels(ccr.config)) : routingStatusResult(harnessId2, "attention", "A routing rule uses the Token Harness id, but no matching ownership receipt exists.", ccr.gatewayState, null, null, configuredCcrModels(ccr.config));
+  }
+  const bytes = await fs.readFile(owned.scriptPath).catch(() => null);
+  const scriptMatches = bytes !== null && scriptHash(new TextDecoder().decode(bytes)) === owned.scriptSha256;
+  const ruleMatches = matching.length === 1 && isExactCcrSmartRoutingRule(matching[0], expectedRule);
+  let profileMatches = true;
+  if (owned.profileId !== void 0) {
+    const profile = profileRows(ccr.config).find((item) => isJsonRecord(item) && item["id"] === owned.profileId);
+    profileMatches = isJsonRecord(profile) && owned.profileSha256 !== void 0 && scriptHash(stableJson2(profile)) === owned.profileSha256;
+  }
+  if (!scriptMatches || !ruleMatches || !profileMatches) {
+    return routingStatusResult(harnessId2, "attention", "The owned routing rule, script or launcher profile no longer matches the recorded Token Harness state.", ccr.gatewayState, owned.profileId ?? null, owned.simpleModel ?? null, configuredCcrModels(ccr.config));
+  }
+  return routingStatusResult(harnessId2, owned.mode, owned.mode === "shadow" ? "Shadow routing is configured. Requests keep their selected model while local routing decisions are recorded." : "Conservative routing is configured. Eligible high-confidence simple requests may use the configured simple model.", ccr.gatewayState, owned.profileId ?? null, owned.simpleModel ?? null, configuredCcrModels(ccr.config));
+}
 async function ccrConfiguration(context) {
   const fs = context.adapters?.fs;
   if (fs === void 0 || context.stateRoot === null || !isSmartRoutingHarness(context.harness)) {
@@ -31000,7 +31076,7 @@ async function ccrConfiguration(context) {
     message: "TOKEN_HARNESS_ROUTING_PROFILE_MODEL did not match a model in the selected CCR provider and was not applied",
     remediation: "Set it to the exact Provider/model alias from CCR, then roll back and preview setup again"
   }) : null;
-  const requestedSimpleModel = context.env?.["TOKEN_HARNESS_ROUTING_SIMPLE_MODEL"];
+  const requestedSimpleModel = context.routingSimpleModel ?? context.env?.["TOKEN_HARNESS_ROUTING_SIMPLE_MODEL"];
   const configuredSimpleModel = configuredCcrModel(ccr.config, requestedSimpleModel);
   const simpleModelWarning = requestedSimpleModel?.trim() && configuredSimpleModel === null ? diagnostic({
     severity: "warning",
@@ -31060,10 +31136,17 @@ async function ccrConfiguration(context) {
             ], String(profilePlan.profile["id"]), ccrLaunchCommand(harnessId2));
           }
           try {
-            const currentConfig = await ccr.client.call("getConfig");
-            if (!isSameCcrConfig(currentConfig, ccr.config))
+            const currentConfigValue = await ccr.client.call("getConfig");
+            if (!isJsonRecord(currentConfigValue))
+              throw new CcrManagementError("invalid-response");
+            const latestPlan = planCcrProfile(currentConfigValue, harnessId2, requestedProfileModel);
+            if (latestPlan.profile === null || profilePlan.profile === null || !isExpectedCcrProfile(latestPlan.profile, profilePlan.profile)) {
               throw new CcrManagementError("config-drift");
-            await ccr.client.call("saveConfig", [profileConfig, { applyProfile: false }]);
+            }
+            const latestProfileConfig = withCcrProfile(currentConfigValue, latestPlan.profile);
+            if (latestProfileConfig === null)
+              throw new CcrManagementError("config-drift");
+            await ccr.client.call("saveConfig", [latestProfileConfig, { applyProfile: false }]);
             const afterConfig = await ccr.client.call("getConfig");
             const afterRouter = isJsonRecord(afterConfig) ? afterConfig["Router"] : null;
             const afterRules = isJsonRecord(afterRouter) && Array.isArray(afterRouter["rules"]) ? afterRouter["rules"] : [];
@@ -31118,6 +31201,9 @@ async function ccrConfiguration(context) {
   if (targetFile !== null) {
     return error("ccr-script-file-conflict", "The managed CCR script path already contains a file that Token Harness does not own", "Move that file or use the exported script with CCR Routing manually");
   }
+  if (mode === "conservative" && configuredSimpleModel === null) {
+    return error("ccr-simple-model-required", "Conservative routing needs an exact simple model that already exists in CCR", "Choose a configured Provider/model in Token Harness before enabling conservative routing");
+  }
   if (!context.confirmed) {
     const profileDiagnostic = profilePlanDiagnostic(profilePlan);
     return configurationResult("configure", "preview", ccr, harnessId2, mode, ruleId, path, [
@@ -31156,14 +31242,6 @@ async function ccrConfiguration(context) {
   if (!validateRouteRuleResult(validation)) {
     return error("ccr-script-validation-failed", "CCR did not validate the generated routing script", "No CCR or harness configuration was changed; inspect CCR compatibility and retry");
   }
-  const withRule = addCcrSmartRoutingRule(ccr.config, expectedRule);
-  if (withRule === null) {
-    return error("ccr-routing-rule-conflict", "CCR routing rules changed or cannot accept a script rule", "Refresh CCR state and review existing rules before retrying");
-  }
-  const nextConfig = profilePlan.profile === null ? withRule : withCcrProfile(withRule, profilePlan.profile);
-  if (nextConfig === null) {
-    return error("ccr-profile-config-conflict", "CCR Agent Profile settings changed or cannot accept the Token Harness profile", "Review CCR Agent Config and retry from a new preview");
-  }
   const now = context.now();
   const ownership = {
     schemaVersion: 1,
@@ -31173,6 +31251,7 @@ async function ccrConfiguration(context) {
     ruleId,
     scriptPath: path,
     scriptSha256: scriptHash(script),
+    ...configuredSimpleModel === null ? {} : { simpleModel: configuredSimpleModel },
     installedAt: now
   };
   let saveAttempted = false;
@@ -31181,12 +31260,33 @@ async function ccrConfiguration(context) {
     await fs.createDirectory(scriptDirectory(context));
     await writeJson4(context, receiptPath3(context, harnessId2), ownership);
     await fs.writeFile(path, new TextEncoder().encode(script));
-    const currentConfig = await ccr.client.call("getConfig");
-    if (!isSameCcrConfig(currentConfig, ccr.config)) {
+    const currentConfigValue = await ccr.client.call("getConfig");
+    if (!isJsonRecord(currentConfigValue))
+      throw new CcrManagementError("invalid-response");
+    const latestSimpleModel = configuredCcrModel(currentConfigValue, requestedSimpleModel);
+    if (latestSimpleModel !== configuredSimpleModel)
+      throw new CcrManagementError("config-drift");
+    const latestScript = createCcrSmartRoutingScript({
+      harnessId: harnessId2,
+      mode,
+      telemetryDirectory,
+      pathSeparator: context.platform.os === "windows" ? "\\" : "/",
+      simpleModel: latestSimpleModel
+    });
+    if (scriptHash(latestScript) !== ownership.scriptSha256)
+      throw new CcrManagementError("config-drift");
+    const latestProfilePlan = planCcrProfile(currentConfigValue, harnessId2, requestedProfileModel);
+    if (profilePlan.profile === null !== (latestProfilePlan.profile === null) || profilePlan.profile !== null && latestProfilePlan.profile !== null && !isExpectedCcrProfile(latestProfilePlan.profile, profilePlan.profile)) {
       throw new CcrManagementError("config-drift");
     }
+    const latestWithRule = addCcrSmartRoutingRule(currentConfigValue, expectedRule);
+    if (latestWithRule === null)
+      throw new CcrManagementError("config-drift");
+    const latestNextConfig = latestProfilePlan.profile === null ? latestWithRule : withCcrProfile(latestWithRule, latestProfilePlan.profile);
+    if (latestNextConfig === null)
+      throw new CcrManagementError("config-drift");
     saveAttempted = true;
-    await ccr.client.call("saveConfig", [nextConfig, { applyProfile: false }]);
+    await ccr.client.call("saveConfig", [latestNextConfig, { applyProfile: false }]);
     const afterConfig = await ccr.client.call("getConfig");
     const afterRouter = isJsonRecord(afterConfig) ? afterConfig["Router"] : null;
     const afterRules = isJsonRecord(afterRouter) && Array.isArray(afterRouter["rules"]) ? afterRouter["rules"] : [];
@@ -31305,15 +31405,18 @@ async function rollbackCcrConfiguration(context) {
       ], ownership.profileId ?? null, ownership.profileId === void 0 ? null : ccrLaunchCommand(harnessId2));
     }
     if (ownership.profileId !== void 0) {
-      const nextConfig2 = withoutOwnedCcrProfile(ccr.config, ownership.profileId, ownership.profileSha256);
-      if (nextConfig2 === null) {
+      const nextConfig = withoutOwnedCcrProfile(ccr.config, ownership.profileId, ownership.profileSha256);
+      if (nextConfig === null) {
         return error("ccr-owned-profile-drift", "The CCR profile is duplicated or changed, so rollback left it untouched", "Review CCR Agent Config and retry after restoring the exact owned profile");
       }
       try {
-        const currentConfig = await ccr.client.call("getConfig");
-        if (!isSameCcrConfig(currentConfig, ccr.config))
+        const currentConfigValue = await ccr.client.call("getConfig");
+        if (!isJsonRecord(currentConfigValue))
+          throw new CcrManagementError("invalid-response");
+        const latestNextConfig = withoutOwnedCcrProfile(currentConfigValue, ownership.profileId, ownership.profileSha256);
+        if (latestNextConfig === null)
           throw new CcrManagementError("config-drift");
-        await ccr.client.call("saveConfig", [nextConfig2, { applyProfile: false }]);
+        await ccr.client.call("saveConfig", [latestNextConfig, { applyProfile: false }]);
         const afterConfig = await ccr.client.call("getConfig");
         if (profileRows(isJsonRecord(afterConfig) ? afterConfig : {}).some((item) => isJsonRecord(item) && item["id"] === ownership.profileId)) {
           throw new CcrManagementError("request-failed");
@@ -31356,20 +31459,17 @@ async function rollbackCcrConfiguration(context) {
       ]
     ], ownership.profileId ?? null, ownership.profileId === void 0 ? null : ccrLaunchCommand(harnessId2));
   }
-  const withoutRule = removeOwnedCcrSmartRoutingRule(ccr.config, ownership.ruleId, expectedRule);
-  if (withoutRule === null) {
-    return error("ccr-owned-rule-drift", "CCR rules changed while rollback was being prepared", "Refresh the CCR state and retry after reviewing the rule list");
-  }
-  const nextConfig = ownership.profileId === void 0 ? withoutRule : withoutOwnedCcrProfile(withoutRule, ownership.profileId, ownership.profileSha256);
-  if (nextConfig === null) {
-    return error("ccr-owned-profile-drift", "The Token Harness CCR profile changed while rollback was being prepared", "Refresh CCR state and retry after reviewing the profile");
-  }
   try {
-    const currentConfig = await ccr.client.call("getConfig");
-    if (!isSameCcrConfig(currentConfig, ccr.config)) {
+    const currentConfigValue = await ccr.client.call("getConfig");
+    if (!isJsonRecord(currentConfigValue))
+      throw new CcrManagementError("invalid-response");
+    const latestWithoutRule = removeOwnedCcrSmartRoutingRule(currentConfigValue, ownership.ruleId, expectedRule);
+    if (latestWithoutRule === null)
       throw new CcrManagementError("config-drift");
-    }
-    await ccr.client.call("saveConfig", [nextConfig, { applyProfile: false }]);
+    const latestNextConfig = ownership.profileId === void 0 ? latestWithoutRule : withoutOwnedCcrProfile(latestWithoutRule, ownership.profileId, ownership.profileSha256);
+    if (latestNextConfig === null)
+      throw new CcrManagementError("config-drift");
+    await ccr.client.call("saveConfig", [latestNextConfig, { applyProfile: false }]);
     const after = await ccr.client.call("getConfig");
     const afterRules = isJsonRecord(after) && isJsonRecord(after["Router"]) && Array.isArray(after["Router"]["rules"]) ? after["Router"]["rules"] : [];
     if (afterRules.some((item) => isJsonRecord(item) && item["id"] === ownership.ruleId)) {
@@ -31414,19 +31514,23 @@ async function rollbackCcrConfiguration(context) {
 async function runSmartRouting(context) {
   const wantsScript = context.routingScript === true;
   const wantsMetrics = context.routingMetrics === true;
+  const wantsStatus = context.routingStatus === true;
   const wantsCcrConfigure = context.routingCcrConfigure === true;
   const wantsCcrRollback = context.routingCcrRollback === true;
   const wantsCcrUpdate = context.routingCcrUpdate === true;
   const requestedActions = [
     wantsScript,
     wantsMetrics,
+    wantsStatus,
     wantsCcrConfigure,
     wantsCcrRollback,
     wantsCcrUpdate
   ].filter(Boolean).length;
   if (requestedActions !== 1) {
-    return error("routing-action-required", "Choose one Smart Model Routing action", "Use `token-harness routing --script --harness claude`, `--configure-ccr`, `--update-ccr`, `--rollback-ccr`, or `--route-metrics`");
+    return error("routing-action-required", "Choose one Smart Model Routing action", "Use `token-harness routing --route-status --harness codex`, `--script`, `--configure-ccr`, `--update-ccr`, `--rollback-ccr`, or `--route-metrics`");
   }
+  if (wantsStatus)
+    return smartRoutingStatus(context);
   if (context.routingPrune === true && !wantsMetrics) {
     return error("routing-prune-requires-metrics", "`--prune` is available only with the routing metrics action", "Use `token-harness routing --route-metrics --prune`");
   }
@@ -32828,21 +32932,31 @@ async function planDirectRtkRelease(input) {
   const admission = admitProviderPackageUpdate(input.providerId, targetText);
   if (admission.state !== "admitted")
     return empty2("unavailable");
-  if (input.executables.length !== 1) {
-    const detail2 = input.executables.length === 0 ? "no concrete RTK executable path could be resolved" : `${String(input.executables.length)} RTK executable paths resolve: ${input.executables.map((entry) => entry.path).join(", ")}`;
+  if (input.executables.length === 0) {
     return empty2("unavailable", [
       diagnostic({
         severity: "warning",
-        code: "rtk-release-target-ambiguous",
+        code: "rtk-release-target-unresolved",
         subject: input.providerId,
-        message: `The verified GitHub release update was not planned because ${detail2}`,
-        remediation: "Make exactly one intended RTK executable resolve on PATH, then re-run Check for updates; Token Harness will not choose an arbitrary binary to replace"
+        message: "The verified GitHub release update was not planned because no concrete RTK executable path could be resolved",
+        remediation: "Make the intended RTK executable available on PATH, then re-run Check for updates"
       })
     ]);
   }
   const executable = input.executables[0];
+  const shadowedDiagnostics = input.executables.length > 1 ? [
+    diagnostic({
+      severity: "info",
+      code: "rtk-release-shadowed-executables",
+      subject: input.providerId,
+      path: executable?.path ?? null,
+      message: `RTK update will target the active PATH executable ${executable?.path ?? "unknown"}; ${String(input.executables.length - 1)} shadowed RTK executable${input.executables.length === 2 ? "" : "s"} will be left unchanged: ${input.executables.slice(1).map((entry) => entry.path).join(", ")}`,
+      remediation: null
+    })
+  ] : [];
   if (executable === void 0 || executable.kind !== "native") {
     return empty2("unavailable", [
+      ...shadowedDiagnostics,
       diagnostic({
         severity: "warning",
         code: "rtk-release-target-not-native",
@@ -32858,6 +32972,7 @@ async function planDirectRtkRelease(input) {
   const targetPath = await canonicalPath.call(input.fs, executable.path);
   if (targetPath === null) {
     return empty2("unavailable", [
+      ...shadowedDiagnostics,
       diagnostic({
         severity: "warning",
         code: "rtk-release-target-unresolved",
@@ -32875,6 +32990,7 @@ async function planDirectRtkRelease(input) {
   if (queried.status !== "found") {
     return {
       ...empty2("unavailable", [
+        ...shadowedDiagnostics,
         diagnostic({
           severity: "warning",
           code: "rtk-release-fallback-unavailable",
@@ -32899,7 +33015,7 @@ async function planDirectRtkRelease(input) {
     },
     availableVersion: targetText,
     verdict: "upgradable",
-    diagnostics: [],
+    diagnostics: shadowedDiagnostics,
     destinations: [RTK_RELEASE_METADATA_DESTINATION]
   };
 }
@@ -34876,6 +34992,16 @@ function renderSmartRoutingReport(report) {
   if (report.kind === "ccr-script")
     return `${report.script}
 `;
+  if (report.kind === "status") {
+    return [
+      `Smart Model Routing: ${report.state}`,
+      `Harness: ${report.harnessId}`,
+      `Gateway: ${report.gatewayState}`,
+      ...report.simpleModel === null ? [] : [`Simple model: ${report.simpleModel}`],
+      ...report.launchCommand === null ? [] : [`Launch: ${report.launchCommand}`],
+      report.detail
+    ].join("\n");
+  }
   if (report.kind === "ccr-configuration") {
     return [
       `CCR ${report.action}: ${report.state}`,
@@ -35610,10 +35736,12 @@ Useful flags
   --harness <id>       Restrict the operation to one harness
   --provider <id>      Restrict the operation to one provider
   --script             Export a CCR script rule (routing command)
+  --route-status       Show current Smart Model Routing state for one agent
   --route-metrics      Show local routing decision telemetry
   --route-mode <mode>  shadow by default; conservative requires opt-in
+  --route-simple-model <Provider/model>  Simple model for conservative routing
   --prune              Keep only the 200 newest routing decision records
-  --configure-ccr      Preview managed CCR setup; --yes applies one step
+  --configure-ccr      Preview CCR setup; --yes applies the reviewed change
   --update-ccr         Preview update of the managed CCR CLI
   --rollback-ccr       Preview rollback; --yes removes owned rule/profile
   --ccr-usage          Read CCR model/token aggregates for local sessions
@@ -35884,7 +36012,10 @@ Exits 0 whatever the figures say \u2014 an empty report is a fact, not a failure
 Usage
   token-harness routing --script --harness <claude|codex>
                         [--route-mode <shadow|conservative>] [--json]
-  token-harness routing --configure-ccr --harness <claude|codex> [--yes]
+  token-harness routing --route-status --harness <claude|codex> [--json]
+  token-harness routing --configure-ccr --harness <claude|codex>
+                        [--route-mode <shadow|conservative>]
+                        [--route-simple-model <Provider/model>] [--yes]
   token-harness routing --update-ccr [--yes]
   token-harness routing --rollback-ccr --harness <claude|codex> [--yes]
   token-harness routing --route-metrics [--since <duration|date>]
@@ -35902,9 +36033,10 @@ telemetry write never blocks the agent request. Decision records contain no prom
 Routing choices are not measured token savings; this command keeps them separate from \`metrics\`.
 Use --prune to remove all but the 200 newest decision records.
 
-When no authenticated local CCR service is present, configure first previews an npm install/start
-of CCR 3.1.1 in Token Harness' protected local state; after approving that step, run configure again
-to preview the routing rule and optional CCR-only CLI profile. A Token Harness-owned service keeps
+When no authenticated local CCR service is present, configure previews the managed CCR runtime
+preparation required for the selected routing mode. The browser workflow completes runtime
+preparation and the reviewed routing configuration in one approved flow. Conservative mode
+requires --route-simple-model to name an exact model already configured in CCR. A Token Harness-owned service keeps
 its Web RPC token in a private local file; existing services can use CCR_WEB_AUTH_TOKEN and
 optionally CCR_WEB_URL. --update-ccr only updates a Token Harness-owned CLI to the reviewed pin.
 Rollback removes only the exact rule, profile, and script Token Harness owns. CCR usage is observed
@@ -36191,7 +36323,9 @@ async function run(options) {
     nativePolicy: invocation.options.nativePolicy,
     routingScript: invocation.options.routingScript,
     routingMetrics: invocation.options.routingMetrics,
+    routingStatus: invocation.options.routingStatus,
     routingMode: invocation.options.routingMode,
+    routingSimpleModel: invocation.options.routingSimpleModel,
     routingPrune: invocation.options.routingPrune,
     routingCcrConfigure: invocation.options.routingCcrConfigure,
     routingCcrRollback: invocation.options.routingCcrRollback,
@@ -37115,6 +37249,10 @@ var init_guided = __esm({
       }
     ];
     ISSUE_COPY = {
+      "ccr-simple-model-required": "Conservative routing needs a simple model selected from the models already configured in CCR.",
+      "ccr-config-changed-during-operation": "CCR changed configuration while routing was being prepared. Token Harness preserved the latest CCR state instead of overwriting it; refresh and retry.",
+      "ccr-profile-id-conflict": "A Token Harness routing profile already exists but its ownership cannot be verified. Disable or repair that routing state before enabling it again.",
+      "ccr-management-operation-failed": "CCR rejected the routing configuration change. The existing routing state was left unchanged.",
       "cclimits-not-installed": "Claude allowance needs the optional cclimits companion. Output optimization does not depend on the allowance meter.",
       "cclimits-readonly-flags-unsupported": "The installed cclimits is too old for safe allowance reading. Version 1.7.0 includes the required support.",
       "cclimits-python-unavailable": "cclimits is installed, but Python could not start. Check the Python installation used by this terminal.",
@@ -37302,6 +37440,7 @@ var init_guided = __esm({
         const empty2 = () => ({ data: null, diagnostics: [], exitCode: 9 });
         let doctor = empty2(), budget = empty2(), context = empty2();
         let guidance;
+        const routing = {};
         const observe = async (id, args) => {
           let result6;
           try {
@@ -37319,7 +37458,7 @@ var init_guided = __esm({
           loading.agents = this.agentView(doctor, budget, context, {
             rules: loading.stages.find((item) => item.id === "rules")?.state !== "working",
             allowance: loading.stages.find((item) => item.id === "allowance")?.state !== "working"
-          }, guidance);
+          }, guidance, routing);
         };
         const [, , , metrics, status, benchmark] = await Promise.all([
           observe("agents", ["doctor"]).then((result6) => {
@@ -37359,7 +37498,30 @@ var init_guided = __esm({
           observe("checks", ["status"]),
           observe("value", ["benchmark-matrix"])
         ]);
-        const agents = this.agentView(doctor, budget, context, { rules: true, allowance: true }, guidance);
+        await Promise.all(["claude", "codex"].map(async (harness) => {
+          try {
+            const result6 = await this.call([
+              "routing",
+              "--route-status",
+              "--harness",
+              harness
+            ]);
+            if (result6.exitCode === 0 && result6.data?.kind === "status") {
+              routing[harness] = {
+                state: result6.data.state,
+                mode: result6.data.mode,
+                gatewayState: result6.data.gatewayState,
+                profileId: result6.data.profileId,
+                launchCommand: result6.data.launchCommand,
+                simpleModel: result6.data.simpleModel,
+                availableModels: result6.data.availableModels,
+                detail: result6.data.detail
+              };
+            }
+          } catch {
+          }
+        }));
+        const agents = this.agentView(doctor, budget, context, { rules: true, allowance: true }, guidance, routing);
         const notices = [];
         if (doctor.data === null)
           notices.push("The agent inventory could not be read. Check the local installation and refresh.");
@@ -37387,7 +37549,7 @@ var init_guided = __esm({
           notices
         };
       }
-      agentView(doctor, budget, context, complete2, guidance) {
+      agentView(doctor, budget, context, complete2, guidance, routing) {
         const present = (doctor.data?.harnesses ?? []).filter((item) => item.state !== "absent" && (item.harnessId === "claude" || item.harnessId === "codex"));
         return present.map((agent) => {
           const providers = (doctor.data?.providers ?? []).filter((provider) => provider.state === "configured" && provider.configuredHarnesses.includes(agent.harnessId)).map((p) => p.providerId);
@@ -37409,6 +37571,16 @@ var init_guided = __esm({
             setup,
             effort: observed?.nativeEffort?.current ?? observed?.reasoningEffort ?? null,
             reasoning: reasoningView(agent.harnessId, observed),
+            routing: routing?.[agent.harnessId] ?? {
+              state: "off",
+              mode: null,
+              gatewayState: "unknown",
+              profileId: null,
+              launchCommand: null,
+              simpleModel: null,
+              availableModels: [],
+              detail: "Smart Model Routing is not configured."
+            },
             ...guidance?.[agent.harnessId] ? { guidance: guidance[agent.harnessId] } : {},
             allowanceAction: allowanceAction(usage?.diagnostics ?? []),
             rules: agentRules(agent.harnessId, providers, context.data, guidance?.[agent.harnessId]),
@@ -37440,20 +37612,166 @@ var init_guided = __esm({
         const data = input;
         const action = String(data["action"]);
         const candidateAction = action === "candidate-setup" || action === "candidate-remove";
+        const routingAction = action === "routing-setup" || action === "routing-remove" || action === "routing-metrics";
         const requestedHarnesses = data["harnesses"];
         const validHarnesses = Array.isArray(requestedHarnesses) && requestedHarnesses.length > 0 && requestedHarnesses.length <= 20 && requestedHarnesses.every((value3) => typeof value3 === "string" && ["claude", "codex"].includes(value3)) && new Set(requestedHarnesses).size === requestedHarnesses.length;
-        if (Object.keys(data).some((key) => !["action", "harness", "harnesses", "task", "provider", "candidate"].includes(key)) || ![
+        if (Object.keys(data).some((key) => ![
+          "action",
+          "harness",
+          "harnesses",
+          "task",
+          "provider",
+          "candidate",
+          "routeMode",
+          "simpleModel"
+        ].includes(key)) || ![
           "setup",
           "effort",
           "skill",
           "undo",
           "remove",
           "candidate-setup",
-          "candidate-remove"
-        ].includes(action) || data["harness"] !== void 0 && !["claude", "codex"].includes(String(data["harness"])) || data["harnesses"] !== void 0 && !validHarnesses || data["harnesses"] !== void 0 && action !== "setup" || data["harnesses"] !== void 0 && data["harness"] !== void 0 || data["task"] !== void 0 && !TASKS.has(String(data["task"])) || data["provider"] !== void 0 && !["rtk", "harnesstrim", "mcptoon", "gitnexus", "headroom"].includes(String(data["provider"])) || data["candidate"] !== void 0 && !["mcptoon", "gitnexus"].includes(String(data["candidate"])) || action === "effort" && (data["harness"] === void 0 || data["task"] === void 0) || action === "skill" && data["harness"] === void 0 || action === "remove" && (data["provider"] === void 0 || data["harness"] !== void 0 || data["harnesses"] !== void 0 || data["task"] !== void 0 || data["candidate"] !== void 0) || data["provider"] !== void 0 && action !== "remove" && action !== "setup" || candidateAction && (data["candidate"] === void 0 || data["harness"] === void 0 || data["provider"] !== void 0 || data["task"] !== void 0) || !candidateAction && data["candidate"] !== void 0)
+          "candidate-remove",
+          "routing-setup",
+          "routing-remove",
+          "routing-metrics"
+        ].includes(action) || data["harness"] !== void 0 && !["claude", "codex"].includes(String(data["harness"])) || data["harnesses"] !== void 0 && !validHarnesses || data["harnesses"] !== void 0 && action !== "setup" || data["routeMode"] !== void 0 && !["shadow", "conservative"].includes(String(data["routeMode"])) || data["simpleModel"] !== void 0 && (typeof data["simpleModel"] !== "string" || !/^[A-Za-z0-9_.:/@+ -]{1,160}$/.test(data["simpleModel"]) || !String(data["simpleModel"]).includes("/")) || data["harnesses"] !== void 0 && data["harness"] !== void 0 || data["task"] !== void 0 && !TASKS.has(String(data["task"])) || data["provider"] !== void 0 && !["rtk", "harnesstrim", "mcptoon", "gitnexus", "headroom"].includes(String(data["provider"])) || data["candidate"] !== void 0 && !["mcptoon", "gitnexus"].includes(String(data["candidate"])) || action === "effort" && (data["harness"] === void 0 || data["task"] === void 0) || action === "skill" && data["harness"] === void 0 || routingAction && data["harness"] === void 0 || action !== "routing-setup" && (data["routeMode"] !== void 0 || data["simpleModel"] !== void 0) || action === "remove" && (data["provider"] === void 0 || data["harness"] !== void 0 || data["harnesses"] !== void 0 || data["task"] !== void 0 || data["candidate"] !== void 0) || data["provider"] !== void 0 && action !== "remove" && action !== "setup" || candidateAction && (data["candidate"] === void 0 || data["harness"] === void 0 || data["provider"] !== void 0 || data["task"] !== void 0) || !candidateAction && data["candidate"] !== void 0 || routingAction && (data["provider"] !== void 0 || data["candidate"] !== void 0 || data["task"] !== void 0 || data["harnesses"] !== void 0))
           throw new GuideError(400, "Choose a supported agent and action.");
         return this.exclusive(async () => {
           this.approval = null;
+          if (routingAction) {
+            const harness = String(data["harness"]);
+            const mode = data["routeMode"] === "conservative" ? "conservative" : "shadow";
+            if (action === "routing-metrics") {
+              this.record(`Reading local Smart Model Routing decisions for ${name(harness)}. No configuration is changed.`, "working");
+              const result7 = await this.call([
+                "routing",
+                "--route-metrics",
+                "--ccr-usage",
+                "--harness",
+                harness,
+                "--since",
+                "30d"
+              ]);
+              if (result7.exitCode !== 0 || result7.data?.kind !== "metrics") {
+                const message = explainGuideIssue(result7.diagnostics, `Routing activity for ${name(harness)} could not be read. No configuration changed.`);
+                this.record(message, "attention");
+                return {
+                  ticket: null,
+                  title: "Routing activity needs attention",
+                  changes: [],
+                  notices: [message],
+                  expiresAt: null,
+                  network: false,
+                  restart: false
+                };
+              }
+              const metrics = result7.data.metrics;
+              const notices2 = [
+                `${String(metrics.retainedDecisionCount)} local routing decision${metrics.retainedDecisionCount === 1 ? "" : "s"} recorded in the last 30 days for ${name(harness)}.`,
+                `Shadow decisions: ${String(metrics.byMode.shadow)}. Conservative route requests: ${String(metrics.routeMutationRequestCount)}.`,
+                `Tiers: simple ${String(metrics.byTier.simple)}, standard ${String(metrics.byTier.standard)}, complex ${String(metrics.byTier.complex)}, critical ${String(metrics.byTier.critical)}.`,
+                "Routing telemetry stores classifier features and model identifiers, not prompt text. Subscription savings remain not measured until paired quality and allowance evidence exists."
+              ];
+              this.record("Routing activity read successfully.", "success");
+              return {
+                ticket: null,
+                title: `Smart Model Routing \xB7 ${name(harness)}`,
+                changes: [],
+                notices: notices2,
+                expiresAt: null,
+                network: false,
+                restart: false
+              };
+            }
+            const removing = action === "routing-remove";
+            this.record(`${removing ? "Reviewing removal of" : "Reviewing"} Smart Model Routing for ${name(harness)}. Nothing has changed yet.`, "working");
+            const simpleModel = mode === "conservative" && typeof data["simpleModel"] === "string" ? data["simpleModel"] : void 0;
+            const args = removing ? ["routing", "--rollback-ccr", "--harness", harness] : [
+              "routing",
+              "--configure-ccr",
+              "--harness",
+              harness,
+              "--route-mode",
+              mode,
+              ...simpleModel ? ["--route-simple-model", simpleModel] : []
+            ];
+            const result6 = await this.call(args);
+            const replacing = !removing && result6.diagnostics.some((entry) => entry.code === "ccr-route-mode-requires-rollback");
+            if ((result6.exitCode !== 0 || result6.data === null) && !replacing) {
+              const message = explainGuideIssue(result6.diagnostics, `No safe Smart Model Routing ${removing ? "removal" : "setup"} is available for ${name(harness)}. Nothing was changed.`);
+              this.record(message, "attention");
+              return {
+                ticket: null,
+                title: "No routing change to apply",
+                changes: [],
+                notices: [message],
+                expiresAt: null,
+                network: false,
+                restart: false
+              };
+            }
+            const report = result6.data;
+            const alreadyConfigured = !removing && report?.kind === "ccr-configuration" && report.state === "already-configured";
+            const alreadyAbsent = removing && report?.kind === "ccr-configuration" && report.state === "already-absent";
+            if (alreadyConfigured || alreadyAbsent) {
+              const message = alreadyConfigured ? `${name(harness)} already has the Token Harness-owned ${mode} routing rule.` : `${name(harness)} has no Token Harness-owned routing rule to remove.`;
+              this.record(message, "success");
+              return {
+                ticket: null,
+                title: alreadyConfigured ? "Routing already configured" : "Routing already absent",
+                changes: [],
+                notices: [message],
+                expiresAt: null,
+                network: false,
+                restart: false
+              };
+            }
+            const ticket = this.random();
+            const expires2 = this.now() + 10 * 6e4;
+            const lifecycle = report?.kind === "ccr-lifecycle";
+            const network2 = Boolean(lifecycle && report?.kind === "ccr-lifecycle" && report.action !== "start");
+            this.approval = {
+              id: ticket,
+              expires: expires2,
+              plans: [],
+              transactionId: null,
+              provider: null,
+              description: `Smart Model Routing ${removing ? "removal" : mode}`,
+              operation: removing ? "routing-rollback" : "routing-configure",
+              network: network2,
+              routingHarness: harness,
+              routingMode: mode,
+              ...simpleModel ? { routingSimpleModel: simpleModel } : {},
+              ...replacing ? { routingReplace: true } : {}
+            };
+            const change = replacing ? {
+              title: `${name(harness)}: change Smart Model Routing to ${mode}`,
+              files: 0,
+              description: "Replace only the Token Harness-owned routing rule/profile for this coding agent, preserving unrelated CCR settings and provider credentials."
+            } : report?.kind === "ccr-lifecycle" ? {
+              title: `${name(harness)}: prepare local CCR routing runtime`,
+              files: 0,
+              description: report.action === "install" ? `Install the reviewed CCR ${report.version} CLI inside Token Harness protected local state, start its loopback gateway and verify it. No global CCR package, provider login or native harness endpoint is replaced.` : `Start or update the Token Harness-owned CCR ${report.version} runtime and verify its loopback gateway before any routing rule is configured.`
+            } : {
+              title: `${name(harness)}: ${removing ? "remove" : "configure"} Smart Model Routing`,
+              files: 0,
+              description: removing ? "Remove only the Token Harness-owned CCR rule/profile for this coding agent. Provider credentials and unrelated CCR configuration are left untouched." : mode === "shadow" ? "Install the Token Harness-owned CCR rule in shadow mode. Requests keep their current model; only local routing decisions are recorded." : "Install the conservative opt-in rule. Only high-confidence simple requests may request the already-configured simple model; complex, ambiguous, image and unsafe tool requests pass through unchanged."
+            };
+            this.record("Smart Model Routing preview ready. Waiting for your approval.", "success");
+            return {
+              ticket,
+              title: removing ? `Remove Smart Model Routing for ${name(harness)}?` : `Set up ${mode} Smart Model Routing for ${name(harness)}?`,
+              changes: [change],
+              notices: [
+                lifecycle && !removing ? "This approval prepares the Token Harness-owned CCR runtime and then completes the selected routing mode in the same flow." : replacing ? "This approval removes only the existing Token Harness-owned routing rule/profile and replaces it with the selected mode." : "Token Harness owns only its exact CCR rule/profile and local managed runtime. Provider credentials remain in CCR and are never imported silently.",
+                mode === "shadow" && !removing ? "Shadow mode is the default: it never changes the model selected for a request." : mode === "conservative" && !removing ? `Conservative routing will use ${simpleModel ?? "no selected model"} for high-confidence simple requests.` : "Removing routing does not uninstall CCR or delete provider credentials."
+              ],
+              expiresAt: new Date(expires2).toISOString(),
+              network: network2,
+              restart: false
+            };
+          }
           if (candidateAction) {
             const candidate = String(data["candidate"]);
             const harness = String(data["harness"]);
@@ -37854,6 +38172,114 @@ var init_guided = __esm({
               appliedPlans: appliedCount
             };
           }
+          if (approval.operation === "routing-configure" || approval.operation === "routing-rollback") {
+            if (approval.routingHarness === void 0 || approval.routingMode === void 0)
+              throw new GuideError(409, "This Smart Model Routing preview is incomplete. Review it again.");
+            const harness = approval.routingHarness;
+            const mode = approval.routingMode;
+            const removing = approval.operation === "routing-rollback";
+            this.record((removing ? "Removing" : "Applying") + " Smart Model Routing for " + name(harness) + ".", "working");
+            let result6;
+            const configureArgs = [
+              "routing",
+              "--configure-ccr",
+              "--harness",
+              harness,
+              "--route-mode",
+              mode,
+              ...approval.routingSimpleModel ? ["--route-simple-model", approval.routingSimpleModel] : [],
+              "--yes"
+            ];
+            try {
+              if (!removing && approval.routingReplace) {
+                const removed = await this.call([
+                  "routing",
+                  "--rollback-ccr",
+                  "--harness",
+                  harness,
+                  "--yes"
+                ]);
+                if (removed.exitCode !== 0 || removed.data?.kind !== "ccr-configuration" || !["rolled-back", "already-absent"].includes(removed.data.state)) {
+                  result6 = removed;
+                } else {
+                  result6 = await this.call(configureArgs);
+                }
+              } else {
+                result6 = await this.call(removing ? ["routing", "--rollback-ccr", "--harness", harness, "--yes"] : configureArgs);
+              }
+              if (!removing && result6.exitCode === 0 && result6.data?.kind === "ccr-lifecycle") {
+                result6 = await this.call(configureArgs);
+              }
+            } catch {
+              this.invalidateObservedState();
+              const message = "The Smart Model Routing operation stopped before its final result could be read. No automatic retry was made. Review the local routing state before retrying.";
+              this.record(message, "attention");
+              return {
+                ok: false,
+                title: "Routing result needs checking",
+                messages: [message],
+                appliedPlans: 0
+              };
+            }
+            if (result6.exitCode !== 0 || result6.data === null) {
+              const message = explainGuideIssue(result6.diagnostics, "Smart Model Routing for " + name(harness) + " was not changed. The local CCR runtime, provider model selection or owned rule state no longer matches the preview.");
+              this.invalidateObservedState();
+              this.record(message, "attention");
+              return {
+                ok: false,
+                title: "Routing change was not applied",
+                messages: [message],
+                appliedPlans: 0
+              };
+            }
+            const report = result6.data;
+            this.lastApplied = null;
+            this.invalidateObservedState();
+            if (report.kind === "ccr-lifecycle") {
+              const message = "The Token Harness-owned CCR " + report.version + " runtime is ready and verified on loopback. No routing rule has been assumed from this runtime step. Open Manage routing again to review the exact shadow or conservative rule/profile.";
+              this.record("CCR routing runtime prepared and verified.", "success");
+              return {
+                ok: true,
+                title: "Routing runtime ready",
+                messages: [
+                  message,
+                  "Provider login/import remains an explicit CCR choice; Token Harness did not change Claude Code or Codex native endpoints."
+                ],
+                appliedPlans: report.state === "already-current" ? 0 : 1
+              };
+            }
+            if (report.kind !== "ccr-configuration") {
+              const message = "The routing command returned an unexpected result shape after approval. No success is being reported; review the local CCR routing state before retrying.";
+              this.record(message, "attention");
+              return {
+                ok: false,
+                title: "Routing result needs checking",
+                messages: [message],
+                appliedPlans: 0
+              };
+            }
+            const changed = report.state === "configured" || report.state === "rolled-back";
+            const messages2 = removing ? [
+              report.state === "already-absent" ? name(harness) + " already had no Token Harness-owned routing rule." : "The Token Harness-owned Smart Model Routing rule/profile for " + name(harness) + " was removed. CCR and provider credentials were left in place."
+            ] : [
+              report.state === "already-configured" ? name(harness) + " already has the Token Harness-owned " + mode + " routing rule." : name(harness) + " Smart Model Routing is configured in " + mode + " mode.",
+              ...mode === "shadow" ? [
+                "Shadow mode records local routing decisions but does not change the request model."
+              ] : [
+                "Conservative mode may request the configured simple model only for high-confidence simple prompts; safety-gated requests pass through unchanged."
+              ],
+              ...report.launchCommand ? ["Launch through the CCR profile to use the rule: " + report.launchCommand] : [
+                "CCR still needs an unambiguous provider/model profile before a routed launch can be verified."
+              ]
+            ];
+            this.record(removing ? "Smart Model Routing rule removed." : "Smart Model Routing configured.", "success");
+            return {
+              ok: true,
+              title: removing ? "Routing removed" : "Smart Model Routing configured",
+              messages: messages2,
+              appliedPlans: changed ? 1 : 0
+            };
+          }
           if (approval.operation === "candidate-apply" || approval.operation === "candidate-uninstall") {
             if (approval.candidate === void 0 || approval.candidateHarness === void 0)
               throw new GuideError(409, "This experimental preview is incomplete. Review it again.");
@@ -38061,6 +38487,7 @@ var init_guided = __esm({
           ];
           const applicationUpgradable = updateResult.data.application?.verdict === "upgradable";
           const blocked = updateResult.data.providers.filter((row2) => row2.verdict === "blocked-unreviewed");
+          const updateWarnings = updateResult.diagnostics.filter((entry) => entry.severity === "warning");
           const messages = [];
           const application = updateResult.data.application;
           if (application?.verdict === "upgradable") {
@@ -38076,9 +38503,15 @@ var init_guided = __esm({
           if (blocked.length > 0) {
             messages.push(...blocked.map((row2) => `${name(row2.providerId)}: ${row2.available ?? "a newer version"} exists, but Token Harness is keeping ${row2.installed ?? "the installed version"} because the target does not meet the provider update prerequisites.`));
           }
-          if (available.length === 0 && blocked.length === 0 && application?.verdict === "current") {
+          if (updateWarnings.length > 0) {
+            messages.push(...updateWarnings.map((entry) => {
+              const label = entry.subject === null || entry.subject === void 0 ? "Update check" : name(entry.subject);
+              return label + ": " + entry.message + (entry.remediation === null || entry.remediation === void 0 ? "" : " " + entry.remediation);
+            }));
+          }
+          if (available.length === 0 && blocked.length === 0 && updateWarnings.length === 0 && application?.verdict === "current") {
             messages.push("Token Harness and your managed optimizers are up to date.");
-          } else if (available.length === 0 && blocked.length === 0 && application === void 0) {
+          } else if (available.length === 0 && blocked.length === 0 && updateWarnings.length === 0 && application === void 0) {
             messages.push("Your managed optimizers are up to date on their configured channels.");
           }
           let ticket = null;
@@ -38106,10 +38539,10 @@ var init_guided = __esm({
           const stack = this.stackSnapshot();
           if (this.cached !== null)
             this.cached.value = { ...this.cached.value, stack };
-          this.record(ticket !== null ? "Token Harness or optimizer update available. Waiting for your approval." : upgradableCount > 0 ? "Update check could not produce an exact install target." : "Token Harness and optimizer update check completed.", "success");
+          this.record(ticket !== null ? "Token Harness or optimizer update available. Waiting for your approval." : upgradableCount > 0 || updateWarnings.length > 0 ? "Update check needs attention." : "Token Harness and optimizer update check completed.", upgradableCount > 0 || updateWarnings.length > 0 ? "attention" : "success");
           return {
             ok: true,
-            title: ticket !== null ? "Updates available" : upgradableCount > 0 ? "Update check needs attention" : application?.verdict === "current" ? "Token Harness and optimizers up to date" : "Update check completed",
+            title: ticket !== null ? "Updates available" : upgradableCount > 0 || updateWarnings.length > 0 ? "Update check needs attention" : application?.verdict === "current" ? "Token Harness and optimizers up to date" : "Update check completed",
             messages,
             appliedPlans: 0,
             stack,
@@ -40666,6 +41099,40 @@ var init_guided_product_client = __esm({
           'caption',
         ),
       );
+      const routing = agent.routing || {
+        state: 'off',
+        mode: null,
+        detail: 'Smart Model Routing is not configured.',
+        simpleModel: null,
+        availableModels: [],
+      };
+      const routingRow = node('div', undefined, 'maintenance-row agent-routing-row');
+      const routingCopy = node('div');
+      const routingLabel =
+        routing.state === 'shadow'
+          ? 'Shadow'
+          : routing.state === 'conservative'
+            ? 'Conservative'
+            : routing.state === 'attention'
+              ? 'Needs attention'
+              : 'Off';
+      routingCopy.append(
+        node('strong', 'Smart Model Routing'),
+        node('p', routing.detail || 'Optional prompt routing for this coding agent.', 'caption'),
+      );
+      const routingActions = node('div', undefined, 'inline-actions');
+      if (routing.state === 'off') {
+        routingActions.append(
+          actionButton('Enable', () => enableRouting(agent.id)),
+        );
+      } else {
+        routingActions.append(
+          actionButton('Configure', () => configureRouting(agent.id), routing.state === 'attention' ? '' : 'secondary'),
+          actionButton('Disable', () => disableRouting(agent.id), 'secondary'),
+        );
+      }
+      routingRow.append(routingCopy, pill(routingLabel, routing.state === 'attention' ? 'warn' : routing.state === 'off' ? '' : 'good'), routingActions);
+      card.append(routingRow);
       if (baseline.unavailable.length) {
         const details = node('details', undefined, 'agent-details');
         details.append(node('summary', 'Connection limitations'));
@@ -41290,6 +41757,194 @@ var init_guided_product_client = __esm({
       });
   }
 
+
+  function reviewRoutingAction(harness, action, routeMode, run, simpleModel = null) {
+    const label =
+      action === 'routing-metrics'
+        ? 'Reading routing activity'
+        : action === 'routing-remove'
+          ? 'Reviewing routing removal'
+          : 'Reviewing ' + routeMode + ' routing';
+    $('modal-content').replaceChildren(
+      progress(label, 'Nothing changes while Token Harness checks the current local routing state.'),
+    );
+    $('modal-actions').replaceChildren(modalClose('Cancel'));
+    setBusy(true, false);
+    ensureSession()
+      .then(() =>
+        request('/api/preview', {
+          action,
+          harness,
+          ...(action === 'routing-setup'
+            ? {
+                routeMode,
+                ...(simpleModel ? { simpleModel } : {}),
+              }
+            : {}),
+        }),
+      )
+      .then(data => {
+        if (run !== modalRun || !$('modal').open) return;
+        pendingTicket = data.ticket;
+        $('modal-content').replaceChildren(
+          messageBox(
+            'Smart Model Routing · ' + agentName(harness),
+            action === 'routing-metrics'
+              ? 'Local routing activity only. Prompt text and credentials are not shown.'
+              : action === 'routing-remove'
+                ? 'Smart Model Routing will be turned off for this coding agent. CCR and provider credentials stay in place.'
+                : routeMode === 'shadow'
+                  ? 'Shadow mode observes and classifies requests locally without changing the selected model.'
+                  : 'Conservative mode may use ' + simpleModel + ' only for high-confidence simple requests; safety-gated requests keep their current model.',
+          ),
+        );
+        for (const change of data.changes || []) {
+          const item = node('article', undefined, 'preview-change');
+          item.append(node('h3', change.title), node('p', change.description));
+          $('modal-content').append(item);
+        }
+        for (const notice of data.notices || [])
+          $('modal-content').append(node('p', notice, 'notice-row'));
+        if (action !== 'routing-metrics')
+          $('modal-content').append(
+            messageBox(
+              'Safety',
+              'Token Harness changes only its owned CCR routing state. Existing provider credentials and unrelated CCR settings are preserved.',
+              'safe',
+            ),
+          );
+        $('modal-actions').replaceChildren(modalClose(data.ticket ? 'Cancel' : 'Done'));
+        if (data.ticket)
+          $('modal-actions').append(
+            actionButton(
+              action === 'routing-remove'
+                ? 'Disable routing'
+                : routeMode === 'conservative'
+                  ? 'Apply conservative mode'
+                  : 'Enable shadow mode',
+              () => applyTicket(data.ticket),
+            ),
+          );
+      })
+      .catch(error => {
+        if (run !== modalRun) return;
+        $('modal-error').textContent = error.message;
+        $('modal-error').hidden = false;
+        $('modal-actions').replaceChildren(modalClose('Close'));
+      })
+      .finally(() => {
+        if (run === modalRun) setBusy(false, false);
+        loadActivity();
+      });
+  }
+
+  function enableRouting(harness) {
+    if (busy) return;
+    const run = modal('Enable Smart Model Routing · ' + agentName(harness));
+    reviewRoutingAction(harness, 'routing-setup', 'shadow', run);
+  }
+
+  function disableRouting(harness) {
+    if (busy) return;
+    const run = modal('Disable Smart Model Routing · ' + agentName(harness));
+    reviewRoutingAction(harness, 'routing-remove', 'shadow', run);
+  }
+
+  function configureRouting(harness) {
+    if (busy) return;
+    const agent = activeAgents().find(item => item.id === harness);
+    const routing = agent?.routing || {
+      state: 'off',
+      mode: null,
+      simpleModel: null,
+      availableModels: [],
+      detail: '',
+    };
+    const run = modal('Configure Smart Model Routing · ' + agentName(harness));
+    $('modal-content').append(
+      messageBox(
+        'Current state',
+        routing.state === 'shadow'
+          ? 'Shadow is enabled. Requests keep their selected model.'
+          : routing.state === 'conservative'
+            ? 'Conservative routing is enabled' + (routing.simpleModel ? ' with ' + routing.simpleModel + '.' : '.')
+            : routing.state === 'attention'
+              ? 'The saved routing state needs attention. Reviewing a configuration change will re-check ownership before anything is modified.'
+              : 'Smart Model Routing is currently off.',
+        routing.state === 'attention' ? 'warn' : routing.state === 'off' ? '' : 'safe',
+      ),
+    );
+
+    const form = node('div', undefined, 'setup-choice-list');
+    const modeLabel = node('label', undefined, 'setup-choice-copy');
+    modeLabel.append(node('strong', 'Mode'));
+    const modeSelect = node('select');
+    const shadow = node('option', 'Shadow — observe only');
+    shadow.value = 'shadow';
+    const conservative = node('option', 'Conservative — route simple prompts');
+    conservative.value = 'conservative';
+    modeSelect.append(shadow, conservative);
+    modeSelect.value = routing.mode || 'shadow';
+    modeLabel.append(modeSelect);
+    form.append(modeLabel);
+
+    const modelWrap = node('label', undefined, 'setup-choice-copy');
+    modelWrap.append(node('strong', 'Simple model'));
+    const modelSelect = node('select');
+    const models = routing.availableModels || [];
+    if (!models.length) {
+      const none = node('option', 'No configured CCR model available');
+      none.value = '';
+      modelSelect.append(none);
+      modelSelect.disabled = true;
+    } else {
+      for (const model of models) {
+        const option = node('option', model);
+        option.value = model;
+        modelSelect.append(option);
+      }
+      if (routing.simpleModel && models.includes(routing.simpleModel))
+        modelSelect.value = routing.simpleModel;
+    }
+    modelWrap.append(
+      modelSelect,
+      node('span', 'Used only in Conservative mode. The model must already exist in CCR.', 'caption'),
+    );
+    form.append(modelWrap);
+    $('modal-content').append(form);
+
+    const activityDetails = node('details', undefined, 'agent-details');
+    activityDetails.append(
+      node('summary', 'Advanced'),
+      node('p', 'Routing decisions are stored separately from optimizer savings. Shadow activity can be inspected without enabling model changes.', 'caption'),
+    );
+    const activityActions = node('div', undefined, 'inline-actions');
+    activityActions.append(
+      actionButton(
+        'View 30-day activity',
+        () => reviewRoutingAction(harness, 'routing-metrics', 'shadow', run),
+        'secondary',
+      ),
+    );
+    activityDetails.append(activityActions);
+    $('modal-content').append(activityDetails);
+
+    const review = actionButton('Review change', () => {
+      const mode = modeSelect.value;
+      const model = mode === 'conservative' ? modelSelect.value : null;
+      reviewRoutingAction(harness, 'routing-setup', mode, run, model);
+    });
+    const update = () => {
+      const conservativeMode = modeSelect.value === 'conservative';
+      modelWrap.hidden = !conservativeMode;
+      review.disabled = conservativeMode && !modelSelect.value;
+    };
+    modeSelect.addEventListener('change', update);
+    modelSelect.addEventListener('change', update);
+    $('modal-actions').append(modalClose('Cancel'), review);
+    update();
+  }
+
   function renderMaintenance() {
     const root = $('maintenance-actions');
     root.replaceChildren();