token-harness 0.1.20 → 0.1.21

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "token-harness",
-  "version": "0.1.20",
+  "version": "0.1.21",
   "description": "Quota-aware efficiency layer for Claude Code and Codex subscription limits.",
   "license": "Apache-2.0",
   "type": "module",

package/sbom.json

@@ -1,14 +1,14 @@
 {
   "bomFormat": "CycloneDX",
   "specVersion": "1.5",
-  "serialNumber": "urn:uuid:6a907cd9-4778-ca06-b653-78caf2cf25f0",
+  "serialNumber": "urn:uuid:c41dcc70-e6f7-7524-9366-fd396457b2bd",
   "version": 1,
   "metadata": {
     "component": {
       "type": "application",
       "bom-ref": "token-harness",
       "name": "token-harness",
-      "version": "0.1.20",
+      "version": "0.1.21",
       "description": "Quota-aware efficiency layer for Claude Code and Codex subscription limits.",
       "licenses": [
         {
@@ -20,7 +20,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "6a907cd94778ca06b65378caf2cf25f060cc82a51168e1cd611f5f58b5e19e55"
+          "content": "c41dcc70e6f775249366fd396457b2bdfb915241c39f4f8a9784d040b86bce49"
         }
       ]
     },

package/token-harness.mjs

@@ -10068,7 +10068,7 @@ var TOOL_VERSION;
 var init_version2 = __esm({
   "apps/cli/dist/src/version.js"() {
     "use strict";
-    TOOL_VERSION = "0.1.20";
+    TOOL_VERSION = "0.1.21";
   }
 });
 
@@ -22263,9 +22263,6 @@ function stableJson(value3) {
 function isExactCcrSmartRoutingRule(value3, expected) {
   return isRecord6(value3) && stableJson(value3) === stableJson(expected);
 }
-function isSameCcrConfig(left, right) {
-  return isRecord6(left) && isRecord6(right) && stableJson(left) === stableJson(right);
-}
 function configRouter(config) {
   if (!isRecord6(config) || !isRecord6(config["Router"]) || !Array.isArray(config["Router"]["rules"])) {
     return null;
@@ -22831,7 +22828,9 @@ function parseArgv(argv2, plannedCommands = PLANNED_COMMANDS) {
     nativePolicy: false,
     routingScript: false,
     routingMetrics: false,
+    routingStatus: false,
     routingMode: "shadow",
+    routingSimpleModel: null,
     routingPrune: false,
     routingCcrConfigure: false,
     routingCcrRollback: false,
@@ -22880,6 +22879,8 @@ function parseArgv(argv2, plannedCommands = PLANNED_COMMANDS) {
         options.routingScript = true;
       if (name2 === "--route-metrics")
         options.routingMetrics = true;
+      if (name2 === "--route-status")
+        options.routingStatus = true;
       if (name2 === "--prune")
         options.routingPrune = true;
       if (name2 === "--configure-ccr")
@@ -23095,6 +23096,18 @@ function parseArgv(argv2, plannedCommands = PLANNED_COMMANDS) {
         }
         break;
       }
+      case "--route-simple-model":
+        if (!/^[A-Za-z0-9_.:/@+ -]{1,160}$/.test(value3) || !value3.includes("/")) {
+          diagnostics.push(diagnostic({
+            severity: "error",
+            code: "invalid-routing-model",
+            message: "Routing model must be an exact CCR Provider/model identifier",
+            remediation: "Choose a configured model such as Codex API/gpt-5.6-luna"
+          }));
+        } else {
+          options.routingSimpleModel = value3;
+        }
+        break;
       case "--route-mode":
         if (value3 !== "shadow" && value3 !== "conservative") {
           diagnostics.push(diagnostic({
@@ -23207,6 +23220,7 @@ var init_argv = __esm({
       "--reserve",
       "--tasks-left",
       "--route-mode",
+      "--route-simple-model",
       "--context-snapshot"
     ]);
     BOOLEAN_FLAGS = /* @__PURE__ */ new Set([
@@ -23217,6 +23231,7 @@ var init_argv = __esm({
       "--yes",
       "--script",
       "--route-metrics",
+      "--route-status",
       "--prune",
       "--configure-ccr",
       "--rollback-ccr",
@@ -30755,7 +30770,7 @@ async function readOwnership(context, harness) {
   try {
     const bytes = await context.adapters.fs.readFile(path);
     const value3 = JSON.parse(new TextDecoder().decode(bytes));
-    if (isJsonRecord(value3) && value3["schemaVersion"] === 1 && (value3["status"] === "pending" || value3["status"] === "active") && value3["harnessId"] === harness && (value3["mode"] === "shadow" || value3["mode"] === "conservative") && value3["ruleId"] === ccrSmartRoutingRuleId(harness) && typeof value3["scriptPath"] === "string" && /^[a-f0-9]{64}$/.test(String(value3["scriptSha256"])) && (value3["profileId"] === void 0 || typeof value3["profileId"] === "string") && (value3["profileSha256"] === void 0 || /^[a-f0-9]{64}$/.test(String(value3["profileSha256"]))) && value3["profileId"] === void 0 === (value3["profileSha256"] === void 0) && typeof value3["installedAt"] === "string") {
+    if (isJsonRecord(value3) && value3["schemaVersion"] === 1 && (value3["status"] === "pending" || value3["status"] === "active") && value3["harnessId"] === harness && (value3["mode"] === "shadow" || value3["mode"] === "conservative") && value3["ruleId"] === ccrSmartRoutingRuleId(harness) && typeof value3["scriptPath"] === "string" && /^[a-f0-9]{64}$/.test(String(value3["scriptSha256"])) && (value3["profileId"] === void 0 || typeof value3["profileId"] === "string") && (value3["profileSha256"] === void 0 || /^[a-f0-9]{64}$/.test(String(value3["profileSha256"]))) && value3["profileId"] === void 0 === (value3["profileSha256"] === void 0) && (value3["simpleModel"] === void 0 || typeof value3["simpleModel"] === "string" && /^[A-Za-z0-9_.:/@+ -]{1,160}$/.test(value3["simpleModel"])) && typeof value3["installedAt"] === "string") {
       return value3;
     }
   } catch {
@@ -30894,6 +30909,15 @@ function planCcrProfile(config, harness, selectedModel) {
   }
   return { profile, profileContainer, conflict: false, reason: null };
 }
+function configuredCcrModels(config) {
+  const providers = Array.isArray(config["Providers"]) ? config["Providers"] : [];
+  const models = providers.flatMap((provider) => {
+    if (!isJsonRecord(provider) || typeof provider["name"] !== "string" || !Array.isArray(provider["models"]))
+      return [];
+    return provider["models"].flatMap((model) => typeof model === "string" && /^[A-Za-z0-9_.:/@+ -]{1,160}$/.test(model) ? [`${provider["name"]}/${model}`] : []);
+  });
+  return [...new Set(models)].sort((left, right) => left.localeCompare(right)).slice(0, 200);
+}
 function configuredCcrModel(config, requested) {
   const candidate = requested?.trim();
   if (candidate === void 0 || !/^[A-Za-z0-9_.:/@+ -]{1,160}$/.test(candidate))
@@ -30971,6 +30995,58 @@ function profilePlanDiagnostic(plan6) {
     remediation: `Resolve the CCR profile setup requirement and rerun routing setup; provider login/import and credential changes remain explicit CCR actions`
   });
 }
+function routingStatusResult(harnessId2, state, detail2, gatewayState = "unknown", profileId = null, simpleModel = null, availableModels = []) {
+  return commandResult({
+    command: "routing",
+    exitCode: EXIT_CODES.ok,
+    data: {
+      kind: "status",
+      harnessId: harnessId2,
+      state,
+      mode: state === "shadow" || state === "conservative" ? state : null,
+      gatewayState,
+      profileId,
+      launchCommand: profileId === null ? null : ccrLaunchCommand(harnessId2),
+      simpleModel,
+      availableModels,
+      detail: detail2
+    }
+  });
+}
+async function smartRoutingStatus(context) {
+  const fs = context.adapters?.fs;
+  if (fs === void 0 || context.stateRoot === null || !isSmartRoutingHarness(context.harness)) {
+    return error("routing-status-context-required", "Smart Model Routing status needs local state and a Claude Code or Codex harness", "Pass `--harness claude` or `--harness codex` from the local Token Harness installation");
+  }
+  const harnessId2 = context.harness;
+  const owned = await readOwnership(context, harnessId2);
+  let ccr;
+  try {
+    ccr = await readCcrState(context);
+  } catch {
+    return owned === null ? routingStatusResult(harnessId2, "off", "No Token Harness-owned routing configuration is active.") : routingStatusResult(harnessId2, "attention", "Token Harness has routing ownership state, but the local CCR service cannot currently be verified.");
+  }
+  const path = scriptPath(context, harnessId2);
+  const expectedRule = createCcrSmartRoutingRule(harnessId2, path);
+  const router = ccr.config["Router"];
+  const rules = isJsonRecord(router) && Array.isArray(router["rules"]) ? router["rules"] : [];
+  const matching = rules.filter((item) => isJsonRecord(item) && item["id"] === ccrSmartRoutingRuleId(harnessId2));
+  if (owned === null) {
+    return matching.length === 0 ? routingStatusResult(harnessId2, "off", "Smart Model Routing is off for this coding agent.", ccr.gatewayState, null, null, configuredCcrModels(ccr.config)) : routingStatusResult(harnessId2, "attention", "A routing rule uses the Token Harness id, but no matching ownership receipt exists.", ccr.gatewayState, null, null, configuredCcrModels(ccr.config));
+  }
+  const bytes = await fs.readFile(owned.scriptPath).catch(() => null);
+  const scriptMatches = bytes !== null && scriptHash(new TextDecoder().decode(bytes)) === owned.scriptSha256;
+  const ruleMatches = matching.length === 1 && isExactCcrSmartRoutingRule(matching[0], expectedRule);
+  let profileMatches = true;
+  if (owned.profileId !== void 0) {
+    const profile = profileRows(ccr.config).find((item) => isJsonRecord(item) && item["id"] === owned.profileId);
+    profileMatches = isJsonRecord(profile) && owned.profileSha256 !== void 0 && scriptHash(stableJson2(profile)) === owned.profileSha256;
+  }
+  if (!scriptMatches || !ruleMatches || !profileMatches) {
+    return routingStatusResult(harnessId2, "attention", "The owned routing rule, script or launcher profile no longer matches the recorded Token Harness state.", ccr.gatewayState, owned.profileId ?? null, owned.simpleModel ?? null, configuredCcrModels(ccr.config));
+  }
+  return routingStatusResult(harnessId2, owned.mode, owned.mode === "shadow" ? "Shadow routing is configured. Requests keep their selected model while local routing decisions are recorded." : "Conservative routing is configured. Eligible high-confidence simple requests may use the configured simple model.", ccr.gatewayState, owned.profileId ?? null, owned.simpleModel ?? null, configuredCcrModels(ccr.config));
+}
 async function ccrConfiguration(context) {
   const fs = context.adapters?.fs;
   if (fs === void 0 || context.stateRoot === null || !isSmartRoutingHarness(context.harness)) {
@@ -31000,7 +31076,7 @@ async function ccrConfiguration(context) {
     message: "TOKEN_HARNESS_ROUTING_PROFILE_MODEL did not match a model in the selected CCR provider and was not applied",
     remediation: "Set it to the exact Provider/model alias from CCR, then roll back and preview setup again"
   }) : null;
-  const requestedSimpleModel = context.env?.["TOKEN_HARNESS_ROUTING_SIMPLE_MODEL"];
+  const requestedSimpleModel = context.routingSimpleModel ?? context.env?.["TOKEN_HARNESS_ROUTING_SIMPLE_MODEL"];
   const configuredSimpleModel = configuredCcrModel(ccr.config, requestedSimpleModel);
   const simpleModelWarning = requestedSimpleModel?.trim() && configuredSimpleModel === null ? diagnostic({
     severity: "warning",
@@ -31060,10 +31136,17 @@ async function ccrConfiguration(context) {
             ], String(profilePlan.profile["id"]), ccrLaunchCommand(harnessId2));
           }
           try {
-            const currentConfig = await ccr.client.call("getConfig");
-            if (!isSameCcrConfig(currentConfig, ccr.config))
+            const currentConfigValue = await ccr.client.call("getConfig");
+            if (!isJsonRecord(currentConfigValue))
+              throw new CcrManagementError("invalid-response");
+            const latestPlan = planCcrProfile(currentConfigValue, harnessId2, requestedProfileModel);
+            if (latestPlan.profile === null || profilePlan.profile === null || !isExpectedCcrProfile(latestPlan.profile, profilePlan.profile)) {
+              throw new CcrManagementError("config-drift");
+            }
+            const latestProfileConfig = withCcrProfile(currentConfigValue, latestPlan.profile);
+            if (latestProfileConfig === null)
               throw new CcrManagementError("config-drift");
-            await ccr.client.call("saveConfig", [profileConfig, { applyProfile: false }]);
+            await ccr.client.call("saveConfig", [latestProfileConfig, { applyProfile: false }]);
             const afterConfig = await ccr.client.call("getConfig");
             const afterRouter = isJsonRecord(afterConfig) ? afterConfig["Router"] : null;
             const afterRules = isJsonRecord(afterRouter) && Array.isArray(afterRouter["rules"]) ? afterRouter["rules"] : [];
@@ -31118,6 +31201,9 @@ async function ccrConfiguration(context) {
   if (targetFile !== null) {
     return error("ccr-script-file-conflict", "The managed CCR script path already contains a file that Token Harness does not own", "Move that file or use the exported script with CCR Routing manually");
   }
+  if (mode === "conservative" && configuredSimpleModel === null) {
+    return error("ccr-simple-model-required", "Conservative routing needs an exact simple model that already exists in CCR", "Choose a configured Provider/model in Token Harness before enabling conservative routing");
+  }
   if (!context.confirmed) {
     const profileDiagnostic = profilePlanDiagnostic(profilePlan);
     return configurationResult("configure", "preview", ccr, harnessId2, mode, ruleId, path, [
@@ -31156,14 +31242,6 @@ async function ccrConfiguration(context) {
   if (!validateRouteRuleResult(validation)) {
     return error("ccr-script-validation-failed", "CCR did not validate the generated routing script", "No CCR or harness configuration was changed; inspect CCR compatibility and retry");
   }
-  const withRule = addCcrSmartRoutingRule(ccr.config, expectedRule);
-  if (withRule === null) {
-    return error("ccr-routing-rule-conflict", "CCR routing rules changed or cannot accept a script rule", "Refresh CCR state and review existing rules before retrying");
-  }
-  const nextConfig = profilePlan.profile === null ? withRule : withCcrProfile(withRule, profilePlan.profile);
-  if (nextConfig === null) {
-    return error("ccr-profile-config-conflict", "CCR Agent Profile settings changed or cannot accept the Token Harness profile", "Review CCR Agent Config and retry from a new preview");
-  }
   const now = context.now();
   const ownership = {
     schemaVersion: 1,
@@ -31173,6 +31251,7 @@ async function ccrConfiguration(context) {
     ruleId,
     scriptPath: path,
     scriptSha256: scriptHash(script),
+    ...configuredSimpleModel === null ? {} : { simpleModel: configuredSimpleModel },
     installedAt: now
   };
   let saveAttempted = false;
@@ -31181,12 +31260,33 @@ async function ccrConfiguration(context) {
     await fs.createDirectory(scriptDirectory(context));
     await writeJson4(context, receiptPath3(context, harnessId2), ownership);
     await fs.writeFile(path, new TextEncoder().encode(script));
-    const currentConfig = await ccr.client.call("getConfig");
-    if (!isSameCcrConfig(currentConfig, ccr.config)) {
+    const currentConfigValue = await ccr.client.call("getConfig");
+    if (!isJsonRecord(currentConfigValue))
+      throw new CcrManagementError("invalid-response");
+    const latestSimpleModel = configuredCcrModel(currentConfigValue, requestedSimpleModel);
+    if (latestSimpleModel !== configuredSimpleModel)
+      throw new CcrManagementError("config-drift");
+    const latestScript = createCcrSmartRoutingScript({
+      harnessId: harnessId2,
+      mode,
+      telemetryDirectory,
+      pathSeparator: context.platform.os === "windows" ? "\\" : "/",
+      simpleModel: latestSimpleModel
+    });
+    if (scriptHash(latestScript) !== ownership.scriptSha256)
+      throw new CcrManagementError("config-drift");
+    const latestProfilePlan = planCcrProfile(currentConfigValue, harnessId2, requestedProfileModel);
+    if (profilePlan.profile === null !== (latestProfilePlan.profile === null) || profilePlan.profile !== null && latestProfilePlan.profile !== null && !isExpectedCcrProfile(latestProfilePlan.profile, profilePlan.profile)) {
       throw new CcrManagementError("config-drift");
     }
+    const latestWithRule = addCcrSmartRoutingRule(currentConfigValue, expectedRule);
+    if (latestWithRule === null)
+      throw new CcrManagementError("config-drift");
+    const latestNextConfig = latestProfilePlan.profile === null ? latestWithRule : withCcrProfile(latestWithRule, latestProfilePlan.profile);
+    if (latestNextConfig === null)
+      throw new CcrManagementError("config-drift");
     saveAttempted = true;
-    await ccr.client.call("saveConfig", [nextConfig, { applyProfile: false }]);
+    await ccr.client.call("saveConfig", [latestNextConfig, { applyProfile: false }]);
     const afterConfig = await ccr.client.call("getConfig");
     const afterRouter = isJsonRecord(afterConfig) ? afterConfig["Router"] : null;
     const afterRules = isJsonRecord(afterRouter) && Array.isArray(afterRouter["rules"]) ? afterRouter["rules"] : [];
@@ -31305,15 +31405,18 @@ async function rollbackCcrConfiguration(context) {
       ], ownership.profileId ?? null, ownership.profileId === void 0 ? null : ccrLaunchCommand(harnessId2));
     }
     if (ownership.profileId !== void 0) {
-      const nextConfig2 = withoutOwnedCcrProfile(ccr.config, ownership.profileId, ownership.profileSha256);
-      if (nextConfig2 === null) {
+      const nextConfig = withoutOwnedCcrProfile(ccr.config, ownership.profileId, ownership.profileSha256);
+      if (nextConfig === null) {
         return error("ccr-owned-profile-drift", "The CCR profile is duplicated or changed, so rollback left it untouched", "Review CCR Agent Config and retry after restoring the exact owned profile");
       }
       try {
-        const currentConfig = await ccr.client.call("getConfig");
-        if (!isSameCcrConfig(currentConfig, ccr.config))
+        const currentConfigValue = await ccr.client.call("getConfig");
+        if (!isJsonRecord(currentConfigValue))
+          throw new CcrManagementError("invalid-response");
+        const latestNextConfig = withoutOwnedCcrProfile(currentConfigValue, ownership.profileId, ownership.profileSha256);
+        if (latestNextConfig === null)
           throw new CcrManagementError("config-drift");
-        await ccr.client.call("saveConfig", [nextConfig2, { applyProfile: false }]);
+        await ccr.client.call("saveConfig", [latestNextConfig, { applyProfile: false }]);
         const afterConfig = await ccr.client.call("getConfig");
         if (profileRows(isJsonRecord(afterConfig) ? afterConfig : {}).some((item) => isJsonRecord(item) && item["id"] === ownership.profileId)) {
           throw new CcrManagementError("request-failed");
@@ -31356,20 +31459,17 @@ async function rollbackCcrConfiguration(context) {
       ]
     ], ownership.profileId ?? null, ownership.profileId === void 0 ? null : ccrLaunchCommand(harnessId2));
   }
-  const withoutRule = removeOwnedCcrSmartRoutingRule(ccr.config, ownership.ruleId, expectedRule);
-  if (withoutRule === null) {
-    return error("ccr-owned-rule-drift", "CCR rules changed while rollback was being prepared", "Refresh the CCR state and retry after reviewing the rule list");
-  }
-  const nextConfig = ownership.profileId === void 0 ? withoutRule : withoutOwnedCcrProfile(withoutRule, ownership.profileId, ownership.profileSha256);
-  if (nextConfig === null) {
-    return error("ccr-owned-profile-drift", "The Token Harness CCR profile changed while rollback was being prepared", "Refresh CCR state and retry after reviewing the profile");
-  }
   try {
-    const currentConfig = await ccr.client.call("getConfig");
-    if (!isSameCcrConfig(currentConfig, ccr.config)) {
+    const currentConfigValue = await ccr.client.call("getConfig");
+    if (!isJsonRecord(currentConfigValue))
+      throw new CcrManagementError("invalid-response");
+    const latestWithoutRule = removeOwnedCcrSmartRoutingRule(currentConfigValue, ownership.ruleId, expectedRule);
+    if (latestWithoutRule === null)
       throw new CcrManagementError("config-drift");
-    }
-    await ccr.client.call("saveConfig", [nextConfig, { applyProfile: false }]);
+    const latestNextConfig = ownership.profileId === void 0 ? latestWithoutRule : withoutOwnedCcrProfile(latestWithoutRule, ownership.profileId, ownership.profileSha256);
+    if (latestNextConfig === null)
+      throw new CcrManagementError("config-drift");
+    await ccr.client.call("saveConfig", [latestNextConfig, { applyProfile: false }]);
     const after = await ccr.client.call("getConfig");
     const afterRules = isJsonRecord(after) && isJsonRecord(after["Router"]) && Array.isArray(after["Router"]["rules"]) ? after["Router"]["rules"] : [];
     if (afterRules.some((item) => isJsonRecord(item) && item["id"] === ownership.ruleId)) {
@@ -31414,19 +31514,23 @@ async function rollbackCcrConfiguration(context) {
 async function runSmartRouting(context) {
   const wantsScript = context.routingScript === true;
   const wantsMetrics = context.routingMetrics === true;
+  const wantsStatus = context.routingStatus === true;
   const wantsCcrConfigure = context.routingCcrConfigure === true;
   const wantsCcrRollback = context.routingCcrRollback === true;
   const wantsCcrUpdate = context.routingCcrUpdate === true;
   const requestedActions = [
     wantsScript,
     wantsMetrics,
+    wantsStatus,
     wantsCcrConfigure,
     wantsCcrRollback,
     wantsCcrUpdate
   ].filter(Boolean).length;
   if (requestedActions !== 1) {
-    return error("routing-action-required", "Choose one Smart Model Routing action", "Use `token-harness routing --script --harness claude`, `--configure-ccr`, `--update-ccr`, `--rollback-ccr`, or `--route-metrics`");
+    return error("routing-action-required", "Choose one Smart Model Routing action", "Use `token-harness routing --route-status --harness codex`, `--script`, `--configure-ccr`, `--update-ccr`, `--rollback-ccr`, or `--route-metrics`");
   }
+  if (wantsStatus)
+    return smartRoutingStatus(context);
   if (context.routingPrune === true && !wantsMetrics) {
     return error("routing-prune-requires-metrics", "`--prune` is available only with the routing metrics action", "Use `token-harness routing --route-metrics --prune`");
   }
@@ -34888,6 +34992,16 @@ function renderSmartRoutingReport(report) {
   if (report.kind === "ccr-script")
     return `${report.script}
 `;
+  if (report.kind === "status") {
+    return [
+      `Smart Model Routing: ${report.state}`,
+      `Harness: ${report.harnessId}`,
+      `Gateway: ${report.gatewayState}`,
+      ...report.simpleModel === null ? [] : [`Simple model: ${report.simpleModel}`],
+      ...report.launchCommand === null ? [] : [`Launch: ${report.launchCommand}`],
+      report.detail
+    ].join("\n");
+  }
   if (report.kind === "ccr-configuration") {
     return [
       `CCR ${report.action}: ${report.state}`,
@@ -35622,10 +35736,12 @@ Useful flags
   --harness <id>       Restrict the operation to one harness
   --provider <id>      Restrict the operation to one provider
   --script             Export a CCR script rule (routing command)
+  --route-status       Show current Smart Model Routing state for one agent
   --route-metrics      Show local routing decision telemetry
   --route-mode <mode>  shadow by default; conservative requires opt-in
+  --route-simple-model <Provider/model>  Simple model for conservative routing
   --prune              Keep only the 200 newest routing decision records
-  --configure-ccr      Preview managed CCR setup; --yes applies one step
+  --configure-ccr      Preview CCR setup; --yes applies the reviewed change
   --update-ccr         Preview update of the managed CCR CLI
   --rollback-ccr       Preview rollback; --yes removes owned rule/profile
   --ccr-usage          Read CCR model/token aggregates for local sessions
@@ -35896,7 +36012,10 @@ Exits 0 whatever the figures say \u2014 an empty report is a fact, not a failure
 Usage
   token-harness routing --script --harness <claude|codex>
                         [--route-mode <shadow|conservative>] [--json]
-  token-harness routing --configure-ccr --harness <claude|codex> [--yes]
+  token-harness routing --route-status --harness <claude|codex> [--json]
+  token-harness routing --configure-ccr --harness <claude|codex>
+                        [--route-mode <shadow|conservative>]
+                        [--route-simple-model <Provider/model>] [--yes]
   token-harness routing --update-ccr [--yes]
   token-harness routing --rollback-ccr --harness <claude|codex> [--yes]
   token-harness routing --route-metrics [--since <duration|date>]
@@ -35914,9 +36033,10 @@ telemetry write never blocks the agent request. Decision records contain no prom
 Routing choices are not measured token savings; this command keeps them separate from \`metrics\`.
 Use --prune to remove all but the 200 newest decision records.
 
-When no authenticated local CCR service is present, configure first previews an npm install/start
-of CCR 3.1.1 in Token Harness' protected local state; after approving that step, run configure again
-to preview the routing rule and optional CCR-only CLI profile. A Token Harness-owned service keeps
+When no authenticated local CCR service is present, configure previews the managed CCR runtime
+preparation required for the selected routing mode. The browser workflow completes runtime
+preparation and the reviewed routing configuration in one approved flow. Conservative mode
+requires --route-simple-model to name an exact model already configured in CCR. A Token Harness-owned service keeps
 its Web RPC token in a private local file; existing services can use CCR_WEB_AUTH_TOKEN and
 optionally CCR_WEB_URL. --update-ccr only updates a Token Harness-owned CLI to the reviewed pin.
 Rollback removes only the exact rule, profile, and script Token Harness owns. CCR usage is observed
@@ -36203,7 +36323,9 @@ async function run(options) {
     nativePolicy: invocation.options.nativePolicy,
     routingScript: invocation.options.routingScript,
     routingMetrics: invocation.options.routingMetrics,
+    routingStatus: invocation.options.routingStatus,
     routingMode: invocation.options.routingMode,
+    routingSimpleModel: invocation.options.routingSimpleModel,
     routingPrune: invocation.options.routingPrune,
     routingCcrConfigure: invocation.options.routingCcrConfigure,
     routingCcrRollback: invocation.options.routingCcrRollback,
@@ -37127,6 +37249,10 @@ var init_guided = __esm({
       }
     ];
     ISSUE_COPY = {
+      "ccr-simple-model-required": "Conservative routing needs a simple model selected from the models already configured in CCR.",
+      "ccr-config-changed-during-operation": "CCR changed configuration while routing was being prepared. Token Harness preserved the latest CCR state instead of overwriting it; refresh and retry.",
+      "ccr-profile-id-conflict": "A Token Harness routing profile already exists but its ownership cannot be verified. Disable or repair that routing state before enabling it again.",
+      "ccr-management-operation-failed": "CCR rejected the routing configuration change. The existing routing state was left unchanged.",
       "cclimits-not-installed": "Claude allowance needs the optional cclimits companion. Output optimization does not depend on the allowance meter.",
       "cclimits-readonly-flags-unsupported": "The installed cclimits is too old for safe allowance reading. Version 1.7.0 includes the required support.",
       "cclimits-python-unavailable": "cclimits is installed, but Python could not start. Check the Python installation used by this terminal.",
@@ -37314,6 +37440,7 @@ var init_guided = __esm({
         const empty2 = () => ({ data: null, diagnostics: [], exitCode: 9 });
         let doctor = empty2(), budget = empty2(), context = empty2();
         let guidance;
+        const routing = {};
         const observe = async (id, args) => {
           let result6;
           try {
@@ -37331,7 +37458,7 @@ var init_guided = __esm({
           loading.agents = this.agentView(doctor, budget, context, {
             rules: loading.stages.find((item) => item.id === "rules")?.state !== "working",
             allowance: loading.stages.find((item) => item.id === "allowance")?.state !== "working"
-          }, guidance);
+          }, guidance, routing);
         };
         const [, , , metrics, status, benchmark] = await Promise.all([
           observe("agents", ["doctor"]).then((result6) => {
@@ -37371,7 +37498,30 @@ var init_guided = __esm({
           observe("checks", ["status"]),
           observe("value", ["benchmark-matrix"])
         ]);
-        const agents = this.agentView(doctor, budget, context, { rules: true, allowance: true }, guidance);
+        await Promise.all(["claude", "codex"].map(async (harness) => {
+          try {
+            const result6 = await this.call([
+              "routing",
+              "--route-status",
+              "--harness",
+              harness
+            ]);
+            if (result6.exitCode === 0 && result6.data?.kind === "status") {
+              routing[harness] = {
+                state: result6.data.state,
+                mode: result6.data.mode,
+                gatewayState: result6.data.gatewayState,
+                profileId: result6.data.profileId,
+                launchCommand: result6.data.launchCommand,
+                simpleModel: result6.data.simpleModel,
+                availableModels: result6.data.availableModels,
+                detail: result6.data.detail
+              };
+            }
+          } catch {
+          }
+        }));
+        const agents = this.agentView(doctor, budget, context, { rules: true, allowance: true }, guidance, routing);
         const notices = [];
         if (doctor.data === null)
           notices.push("The agent inventory could not be read. Check the local installation and refresh.");
@@ -37399,7 +37549,7 @@ var init_guided = __esm({
           notices
         };
       }
-      agentView(doctor, budget, context, complete2, guidance) {
+      agentView(doctor, budget, context, complete2, guidance, routing) {
         const present = (doctor.data?.harnesses ?? []).filter((item) => item.state !== "absent" && (item.harnessId === "claude" || item.harnessId === "codex"));
         return present.map((agent) => {
           const providers = (doctor.data?.providers ?? []).filter((provider) => provider.state === "configured" && provider.configuredHarnesses.includes(agent.harnessId)).map((p) => p.providerId);
@@ -37421,6 +37571,16 @@ var init_guided = __esm({
             setup,
             effort: observed?.nativeEffort?.current ?? observed?.reasoningEffort ?? null,
             reasoning: reasoningView(agent.harnessId, observed),
+            routing: routing?.[agent.harnessId] ?? {
+              state: "off",
+              mode: null,
+              gatewayState: "unknown",
+              profileId: null,
+              launchCommand: null,
+              simpleModel: null,
+              availableModels: [],
+              detail: "Smart Model Routing is not configured."
+            },
             ...guidance?.[agent.harnessId] ? { guidance: guidance[agent.harnessId] } : {},
             allowanceAction: allowanceAction(usage?.diagnostics ?? []),
             rules: agentRules(agent.harnessId, providers, context.data, guidance?.[agent.harnessId]),
@@ -37462,7 +37622,8 @@ var init_guided = __esm({
           "task",
           "provider",
           "candidate",
-          "routeMode"
+          "routeMode",
+          "simpleModel"
         ].includes(key)) || ![
           "setup",
           "effort",
@@ -37474,7 +37635,7 @@ var init_guided = __esm({
           "routing-setup",
           "routing-remove",
           "routing-metrics"
-        ].includes(action) || data["harness"] !== void 0 && !["claude", "codex"].includes(String(data["harness"])) || data["harnesses"] !== void 0 && !validHarnesses || data["harnesses"] !== void 0 && action !== "setup" || data["routeMode"] !== void 0 && !["shadow", "conservative"].includes(String(data["routeMode"])) || data["harnesses"] !== void 0 && data["harness"] !== void 0 || data["task"] !== void 0 && !TASKS.has(String(data["task"])) || data["provider"] !== void 0 && !["rtk", "harnesstrim", "mcptoon", "gitnexus", "headroom"].includes(String(data["provider"])) || data["candidate"] !== void 0 && !["mcptoon", "gitnexus"].includes(String(data["candidate"])) || action === "effort" && (data["harness"] === void 0 || data["task"] === void 0) || action === "skill" && data["harness"] === void 0 || routingAction && data["harness"] === void 0 || action !== "routing-setup" && data["routeMode"] !== void 0 || action === "remove" && (data["provider"] === void 0 || data["harness"] !== void 0 || data["harnesses"] !== void 0 || data["task"] !== void 0 || data["candidate"] !== void 0) || data["provider"] !== void 0 && action !== "remove" && action !== "setup" || candidateAction && (data["candidate"] === void 0 || data["harness"] === void 0 || data["provider"] !== void 0 || data["task"] !== void 0) || !candidateAction && data["candidate"] !== void 0 || routingAction && (data["provider"] !== void 0 || data["candidate"] !== void 0 || data["task"] !== void 0 || data["harnesses"] !== void 0))
+        ].includes(action) || data["harness"] !== void 0 && !["claude", "codex"].includes(String(data["harness"])) || data["harnesses"] !== void 0 && !validHarnesses || data["harnesses"] !== void 0 && action !== "setup" || data["routeMode"] !== void 0 && !["shadow", "conservative"].includes(String(data["routeMode"])) || data["simpleModel"] !== void 0 && (typeof data["simpleModel"] !== "string" || !/^[A-Za-z0-9_.:/@+ -]{1,160}$/.test(data["simpleModel"]) || !String(data["simpleModel"]).includes("/")) || data["harnesses"] !== void 0 && data["harness"] !== void 0 || data["task"] !== void 0 && !TASKS.has(String(data["task"])) || data["provider"] !== void 0 && !["rtk", "harnesstrim", "mcptoon", "gitnexus", "headroom"].includes(String(data["provider"])) || data["candidate"] !== void 0 && !["mcptoon", "gitnexus"].includes(String(data["candidate"])) || action === "effort" && (data["harness"] === void 0 || data["task"] === void 0) || action === "skill" && data["harness"] === void 0 || routingAction && data["harness"] === void 0 || action !== "routing-setup" && (data["routeMode"] !== void 0 || data["simpleModel"] !== void 0) || action === "remove" && (data["provider"] === void 0 || data["harness"] !== void 0 || data["harnesses"] !== void 0 || data["task"] !== void 0 || data["candidate"] !== void 0) || data["provider"] !== void 0 && action !== "remove" && action !== "setup" || candidateAction && (data["candidate"] === void 0 || data["harness"] === void 0 || data["provider"] !== void 0 || data["task"] !== void 0) || !candidateAction && data["candidate"] !== void 0 || routingAction && (data["provider"] !== void 0 || data["candidate"] !== void 0 || data["task"] !== void 0 || data["harnesses"] !== void 0))
           throw new GuideError(400, "Choose a supported agent and action.");
         return this.exclusive(async () => {
           this.approval = null;
@@ -37525,9 +37686,19 @@ var init_guided = __esm({
             }
             const removing = action === "routing-remove";
             this.record(`${removing ? "Reviewing removal of" : "Reviewing"} Smart Model Routing for ${name(harness)}. Nothing has changed yet.`, "working");
-            const args = removing ? ["routing", "--rollback-ccr", "--harness", harness] : ["routing", "--configure-ccr", "--harness", harness, "--route-mode", mode];
+            const simpleModel = mode === "conservative" && typeof data["simpleModel"] === "string" ? data["simpleModel"] : void 0;
+            const args = removing ? ["routing", "--rollback-ccr", "--harness", harness] : [
+              "routing",
+              "--configure-ccr",
+              "--harness",
+              harness,
+              "--route-mode",
+              mode,
+              ...simpleModel ? ["--route-simple-model", simpleModel] : []
+            ];
             const result6 = await this.call(args);
-            if (result6.exitCode !== 0 || result6.data === null) {
+            const replacing = !removing && result6.diagnostics.some((entry) => entry.code === "ccr-route-mode-requires-rollback");
+            if ((result6.exitCode !== 0 || result6.data === null) && !replacing) {
               const message = explainGuideIssue(result6.diagnostics, `No safe Smart Model Routing ${removing ? "removal" : "setup"} is available for ${name(harness)}. Nothing was changed.`);
               this.record(message, "attention");
               return {
@@ -37541,8 +37712,8 @@ var init_guided = __esm({
               };
             }
             const report = result6.data;
-            const alreadyConfigured = !removing && report.kind === "ccr-configuration" && report.state === "already-configured";
-            const alreadyAbsent = removing && report.kind === "ccr-configuration" && report.state === "already-absent";
+            const alreadyConfigured = !removing && report?.kind === "ccr-configuration" && report.state === "already-configured";
+            const alreadyAbsent = removing && report?.kind === "ccr-configuration" && report.state === "already-absent";
             if (alreadyConfigured || alreadyAbsent) {
               const message = alreadyConfigured ? `${name(harness)} already has the Token Harness-owned ${mode} routing rule.` : `${name(harness)} has no Token Harness-owned routing rule to remove.`;
               this.record(message, "success");
@@ -37558,8 +37729,8 @@ var init_guided = __esm({
             }
             const ticket = this.random();
             const expires2 = this.now() + 10 * 6e4;
-            const lifecycle = report.kind === "ccr-lifecycle";
-            const network2 = lifecycle && report.action !== "start";
+            const lifecycle = report?.kind === "ccr-lifecycle";
+            const network2 = Boolean(lifecycle && report?.kind === "ccr-lifecycle" && report.action !== "start");
             this.approval = {
               id: ticket,
               expires: expires2,
@@ -37570,9 +37741,15 @@ var init_guided = __esm({
               operation: removing ? "routing-rollback" : "routing-configure",
               network: network2,
               routingHarness: harness,
-              routingMode: mode
+              routingMode: mode,
+              ...simpleModel ? { routingSimpleModel: simpleModel } : {},
+              ...replacing ? { routingReplace: true } : {}
             };
-            const change = report.kind === "ccr-lifecycle" ? {
+            const change = replacing ? {
+              title: `${name(harness)}: change Smart Model Routing to ${mode}`,
+              files: 0,
+              description: "Replace only the Token Harness-owned routing rule/profile for this coding agent, preserving unrelated CCR settings and provider credentials."
+            } : report?.kind === "ccr-lifecycle" ? {
               title: `${name(harness)}: prepare local CCR routing runtime`,
               files: 0,
               description: report.action === "install" ? `Install the reviewed CCR ${report.version} CLI inside Token Harness protected local state, start its loopback gateway and verify it. No global CCR package, provider login or native harness endpoint is replaced.` : `Start or update the Token Harness-owned CCR ${report.version} runtime and verify its loopback gateway before any routing rule is configured.`
@@ -37587,8 +37764,8 @@ var init_guided = __esm({
               title: removing ? `Remove Smart Model Routing for ${name(harness)}?` : `Set up ${mode} Smart Model Routing for ${name(harness)}?`,
               changes: [change],
               notices: [
-                lifecycle && !removing ? "CCR runtime preparation and routing-rule configuration are deliberately separate safety stages. After the runtime is ready, open Manage routing again to review the exact rule/profile." : "Token Harness owns only its exact CCR rule/profile and local managed runtime. Provider credentials remain in CCR and are never imported silently.",
-                mode === "shadow" && !removing ? "Shadow mode is the default: it never changes the model selected for a request." : mode === "conservative" && !removing ? "Conservative routing requires TOKEN_HARNESS_ROUTING_SIMPLE_MODEL to name an exact model already configured in CCR. Without that explicit model the preview is refused." : "Removing routing does not uninstall CCR or delete provider credentials."
+                lifecycle && !removing ? "This approval prepares the Token Harness-owned CCR runtime and then completes the selected routing mode in the same flow." : replacing ? "This approval removes only the existing Token Harness-owned routing rule/profile and replaces it with the selected mode." : "Token Harness owns only its exact CCR rule/profile and local managed runtime. Provider credentials remain in CCR and are never imported silently.",
+                mode === "shadow" && !removing ? "Shadow mode is the default: it never changes the model selected for a request." : mode === "conservative" && !removing ? `Conservative routing will use ${simpleModel ?? "no selected model"} for high-confidence simple requests.` : "Removing routing does not uninstall CCR or delete provider credentials."
               ],
               expiresAt: new Date(expires2).toISOString(),
               network: network2,
@@ -38003,8 +38180,36 @@ var init_guided = __esm({
             const removing = approval.operation === "routing-rollback";
             this.record((removing ? "Removing" : "Applying") + " Smart Model Routing for " + name(harness) + ".", "working");
             let result6;
+            const configureArgs = [
+              "routing",
+              "--configure-ccr",
+              "--harness",
+              harness,
+              "--route-mode",
+              mode,
+              ...approval.routingSimpleModel ? ["--route-simple-model", approval.routingSimpleModel] : [],
+              "--yes"
+            ];
             try {
-              result6 = await this.call(removing ? ["routing", "--rollback-ccr", "--harness", harness, "--yes"] : ["routing", "--configure-ccr", "--harness", harness, "--route-mode", mode, "--yes"]);
+              if (!removing && approval.routingReplace) {
+                const removed = await this.call([
+                  "routing",
+                  "--rollback-ccr",
+                  "--harness",
+                  harness,
+                  "--yes"
+                ]);
+                if (removed.exitCode !== 0 || removed.data?.kind !== "ccr-configuration" || !["rolled-back", "already-absent"].includes(removed.data.state)) {
+                  result6 = removed;
+                } else {
+                  result6 = await this.call(configureArgs);
+                }
+              } else {
+                result6 = await this.call(removing ? ["routing", "--rollback-ccr", "--harness", harness, "--yes"] : configureArgs);
+              }
+              if (!removing && result6.exitCode === 0 && result6.data?.kind === "ccr-lifecycle") {
+                result6 = await this.call(configureArgs);
+              }
             } catch {
               this.invalidateObservedState();
               const message = "The Smart Model Routing operation stopped before its final result could be read. No automatic retry was made. Review the local routing state before retrying.";
@@ -40894,6 +41099,40 @@ var init_guided_product_client = __esm({
           'caption',
         ),
       );
+      const routing = agent.routing || {
+        state: 'off',
+        mode: null,
+        detail: 'Smart Model Routing is not configured.',
+        simpleModel: null,
+        availableModels: [],
+      };
+      const routingRow = node('div', undefined, 'maintenance-row agent-routing-row');
+      const routingCopy = node('div');
+      const routingLabel =
+        routing.state === 'shadow'
+          ? 'Shadow'
+          : routing.state === 'conservative'
+            ? 'Conservative'
+            : routing.state === 'attention'
+              ? 'Needs attention'
+              : 'Off';
+      routingCopy.append(
+        node('strong', 'Smart Model Routing'),
+        node('p', routing.detail || 'Optional prompt routing for this coding agent.', 'caption'),
+      );
+      const routingActions = node('div', undefined, 'inline-actions');
+      if (routing.state === 'off') {
+        routingActions.append(
+          actionButton('Enable', () => enableRouting(agent.id)),
+        );
+      } else {
+        routingActions.append(
+          actionButton('Configure', () => configureRouting(agent.id), routing.state === 'attention' ? '' : 'secondary'),
+          actionButton('Disable', () => disableRouting(agent.id), 'secondary'),
+        );
+      }
+      routingRow.append(routingCopy, pill(routingLabel, routing.state === 'attention' ? 'warn' : routing.state === 'off' ? '' : 'good'), routingActions);
+      card.append(routingRow);
       if (baseline.unavailable.length) {
         const details = node('details', undefined, 'agent-details');
         details.append(node('summary', 'Connection limitations'));
@@ -41519,15 +41758,15 @@ var init_guided_product_client = __esm({
   }
 
 
-  function reviewRoutingAction(harness, action, routeMode, run) {
+  function reviewRoutingAction(harness, action, routeMode, run, simpleModel = null) {
     const label =
       action === 'routing-metrics'
         ? 'Reading routing activity'
         : action === 'routing-remove'
           ? 'Reviewing routing removal'
-          : 'Reviewing ' + routeMode + ' routing setup';
+          : 'Reviewing ' + routeMode + ' routing';
     $('modal-content').replaceChildren(
-      progress(label, 'Nothing changes while Token Harness reads the local routing state.'),
+      progress(label, 'Nothing changes while Token Harness checks the current local routing state.'),
     );
     $('modal-actions').replaceChildren(modalClose('Cancel'));
     setBusy(true, false);
@@ -41536,7 +41775,12 @@ var init_guided_product_client = __esm({
         request('/api/preview', {
           action,
           harness,
-          ...(action === 'routing-setup' ? { routeMode } : {}),
+          ...(action === 'routing-setup'
+            ? {
+                routeMode,
+                ...(simpleModel ? { simpleModel } : {}),
+              }
+            : {}),
         }),
       )
       .then(data => {
@@ -41546,12 +41790,12 @@ var init_guided_product_client = __esm({
           messageBox(
             'Smart Model Routing · ' + agentName(harness),
             action === 'routing-metrics'
-              ? 'Local classifier and CCR activity only. Prompt text and credentials are not shown.'
+              ? 'Local routing activity only. Prompt text and credentials are not shown.'
               : action === 'routing-remove'
-                ? 'Only the Token Harness-owned CCR rule/profile is eligible for removal.'
+                ? 'Smart Model Routing will be turned off for this coding agent. CCR and provider credentials stay in place.'
                 : routeMode === 'shadow'
-                  ? 'Shadow mode is the safe default: it classifies requests locally and records decisions without changing the selected model.'
-                  : 'Conservative mode is opt-in: only high-confidence simple requests may request one already-configured simple model; safety-gated requests pass through unchanged.',
+                  ? 'Shadow mode observes and classifies requests locally without changing the selected model.'
+                  : 'Conservative mode may use ' + simpleModel + ' only for high-confidence simple requests; safety-gated requests keep their current model.',
           ),
         );
         for (const change of data.changes || []) {
@@ -41564,8 +41808,8 @@ var init_guided_product_client = __esm({
         if (action !== 'routing-metrics')
           $('modal-content').append(
             messageBox(
-              'Safety boundary',
-              'Token Harness owns only its exact CCR runtime/rule/profile. Provider credentials remain in CCR, native Claude Code/Codex endpoints are not rewritten, and every mutation still requires this explicit approval.',
+              'Safety',
+              'Token Harness changes only its owned CCR routing state. Existing provider credentials and unrelated CCR settings are preserved.',
               'safe',
             ),
           );
@@ -41574,10 +41818,10 @@ var init_guided_product_client = __esm({
           $('modal-actions').append(
             actionButton(
               action === 'routing-remove'
-                ? 'Remove managed routing'
+                ? 'Disable routing'
                 : routeMode === 'conservative'
-                  ? 'Apply conservative routing step'
-                  : 'Apply shadow routing step',
+                  ? 'Apply conservative mode'
+                  : 'Enable shadow mode',
               () => applyTicket(data.ticket),
             ),
           );
@@ -41594,77 +41838,111 @@ var init_guided_product_client = __esm({
       });
   }
 
-  function manageRouting(harness) {
+  function enableRouting(harness) {
     if (busy) return;
-    const run = modal('Smart Model Routing · ' + agentName(harness));
+    const run = modal('Enable Smart Model Routing · ' + agentName(harness));
+    reviewRoutingAction(harness, 'routing-setup', 'shadow', run);
+  }
+
+  function disableRouting(harness) {
+    if (busy) return;
+    const run = modal('Disable Smart Model Routing · ' + agentName(harness));
+    reviewRoutingAction(harness, 'routing-remove', 'shadow', run);
+  }
+
+  function configureRouting(harness) {
+    if (busy) return;
+    const agent = activeAgents().find(item => item.id === harness);
+    const routing = agent?.routing || {
+      state: 'off',
+      mode: null,
+      simpleModel: null,
+      availableModels: [],
+      detail: '',
+    };
+    const run = modal('Configure Smart Model Routing · ' + agentName(harness));
     $('modal-content').append(
       messageBox(
-        'Shadow-first routing',
-        'The classifier runs locally with deterministic heuristics. It needs no paid routing API and no local LLM. The reviewed CCR gateway is used only as the local request-routing surface.',
-      ),
-      messageBox(
-        'How to use it',
-        'Start with Shadow. After CCR is prepared, review Shadow again to install the exact rule/profile. Launch the agent through the CCR profile shown after configuration. Conservative mode is optional and requires an exact simple model already configured in CCR.',
-      ),
-      messageBox(
-        'What is measured',
-        'Routing decisions are kept separate from optimizer token savings. A cheaper model is not counted as saved quota unless paired quality and allowance evidence proves it.',
-        'safe',
+        'Current state',
+        routing.state === 'shadow'
+          ? 'Shadow is enabled. Requests keep their selected model.'
+          : routing.state === 'conservative'
+            ? 'Conservative routing is enabled' + (routing.simpleModel ? ' with ' + routing.simpleModel + '.' : '.')
+            : routing.state === 'attention'
+              ? 'The saved routing state needs attention. Reviewing a configuration change will re-check ownership before anything is modified.'
+              : 'Smart Model Routing is currently off.',
+        routing.state === 'attention' ? 'warn' : routing.state === 'off' ? '' : 'safe',
       ),
     );
-    $('modal-actions').append(
-      modalClose('Close'),
+
+    const form = node('div', undefined, 'setup-choice-list');
+    const modeLabel = node('label', undefined, 'setup-choice-copy');
+    modeLabel.append(node('strong', 'Mode'));
+    const modeSelect = node('select');
+    const shadow = node('option', 'Shadow — observe only');
+    shadow.value = 'shadow';
+    const conservative = node('option', 'Conservative — route simple prompts');
+    conservative.value = 'conservative';
+    modeSelect.append(shadow, conservative);
+    modeSelect.value = routing.mode || 'shadow';
+    modeLabel.append(modeSelect);
+    form.append(modeLabel);
+
+    const modelWrap = node('label', undefined, 'setup-choice-copy');
+    modelWrap.append(node('strong', 'Simple model'));
+    const modelSelect = node('select');
+    const models = routing.availableModels || [];
+    if (!models.length) {
+      const none = node('option', 'No configured CCR model available');
+      none.value = '';
+      modelSelect.append(none);
+      modelSelect.disabled = true;
+    } else {
+      for (const model of models) {
+        const option = node('option', model);
+        option.value = model;
+        modelSelect.append(option);
+      }
+      if (routing.simpleModel && models.includes(routing.simpleModel))
+        modelSelect.value = routing.simpleModel;
+    }
+    modelWrap.append(
+      modelSelect,
+      node('span', 'Used only in Conservative mode. The model must already exist in CCR.', 'caption'),
+    );
+    form.append(modelWrap);
+    $('modal-content').append(form);
+
+    const activityDetails = node('details', undefined, 'agent-details');
+    activityDetails.append(
+      node('summary', 'Advanced'),
+      node('p', 'Routing decisions are stored separately from optimizer savings. Shadow activity can be inspected without enabling model changes.', 'caption'),
+    );
+    const activityActions = node('div', undefined, 'inline-actions');
+    activityActions.append(
       actionButton(
         'View 30-day activity',
         () => reviewRoutingAction(harness, 'routing-metrics', 'shadow', run),
         'secondary',
       ),
-      actionButton(
-        'Remove managed rule',
-        () => reviewRoutingAction(harness, 'routing-remove', 'shadow', run),
-        'secondary',
-      ),
-      actionButton(
-        'Review conservative setup',
-        () => reviewRoutingAction(harness, 'routing-setup', 'conservative', run),
-        'secondary',
-      ),
-      actionButton(
-        'Review shadow setup',
-        () => reviewRoutingAction(harness, 'routing-setup', 'shadow', run),
-      ),
     );
-  }
+    activityDetails.append(activityActions);
+    $('modal-content').append(activityDetails);
 
-  function renderRouting() {
-    const root = $('routing-overview');
-    if (!root) return;
-    root.replaceChildren();
-    const agents = activeAgents();
-    if (!agents.length) {
-      root.append(
-        messageBox(
-          'No supported coding agent detected',
-          'Smart Model Routing is available for Claude Code and Codex after the agent is detected.',
-          'warn',
-        ),
-      );
-      return;
-    }
-    for (const agent of agents) {
-      const row = node('article', undefined, 'maintenance-row');
-      const copy = node('div');
-      copy.append(
-        node('strong', agent.name),
-        node(
-          'p',
-          'Optional request routing through a local CCR profile. Shadow mode never changes models; conservative mode is explicit and safety-gated.',
-          'caption',
-        ),
-      );
-      row.append(copy, actionButton('Manage routing', () => manageRouting(agent.id), 'secondary'));
-      root.append(row);
-    }
+    const review = actionButton('Review change', () => {
+      const mode = modeSelect.value;
+      const model = mode === 'conservative' ? modelSelect.value : null;
+      reviewRoutingAction(harness, 'routing-setup', mode, run, model);
+    });
+    const update = () => {
+      const conservativeMode = modeSelect.value === 'conservative';
+      modelWrap.hidden = !conservativeMode;
+      review.disabled = conservativeMode && !modelSelect.value;
+    };
+    modeSelect.addEventListener('change', update);
+    modelSelect.addEventListener('change', update);
+    $('modal-actions').append(modalClose('Cancel'), review);
+    update();
   }
 
   function renderMaintenance() {
@@ -41731,7 +42009,6 @@ var init_guided_product_client = __esm({
     renderManagedSetup();
     renderExperimental();
     renderTuning();
-    renderRouting();
     renderMaintenance();
   }
 
@@ -42775,11 +43052,6 @@ ${GUIDE_CANDIDATE_READINESS_JS}`;
 <details class="disclosure"><summary>Remove Token Harness-managed configuration</summary><p class="caption">Removal is reviewed first. Token Harness removes only configuration it owns; installed provider software and user-owned configuration may remain.</p><div id="managed-removal-actions" class="maintenance-list"><p class="caption">Checking managed ownership\u2026</p></div></details>
 </section>
 
-<section class="setup-step" id="smart-routing">
-<div class="section-title"><div><h2>Smart Model Routing</h2><p>Optional shadow-first request routing for Claude Code and Codex. Shadow mode observes locally without changing models; conservative routing is an explicit opt-in.</p></div></div>
-<div id="routing-overview" class="maintenance-list"><p class="empty">Checking supported coding agents\u2026</p></div>
-</section>
-
 <section class="setup-step" id="maintenance">
 <div class="section-title"><div><h2>Health and updates</h2><p>These are maintenance actions, not onboarding steps. Setup already performs its own safety checks.</p></div></div>
 <div id="maintenance-actions" class="maintenance-list"><p class="empty">Checking\u2026</p></div>