token-harness 0.1.22 → 0.1.24

package/token-harness.mjs

@@ -759,6 +759,27 @@ function parseBoundaryPolicy(value3) {
     return void 0;
   return { model, reasoningEffort, verbosity, verification: "config-only" };
 }
+function parseNativeRoutingObservation(value3) {
+  if (value3 === null)
+    return null;
+  const row2 = record(value3);
+  if (row2 === null)
+    return void 0;
+  const configured = row2["configured"];
+  const promptSubmissions = row2["promptSubmissions"];
+  const subagentsStarted = row2["subagentsStarted"];
+  const subagentsStopped = row2["subagentsStopped"];
+  const reportedModels = row2["reportedModels"];
+  if (!(configured === null || typeof configured === "boolean") || !Number.isSafeInteger(promptSubmissions) || typeof promptSubmissions !== "number" || promptSubmissions < 0 || !Number.isSafeInteger(subagentsStarted) || typeof subagentsStarted !== "number" || subagentsStarted < 0 || !Number.isSafeInteger(subagentsStopped) || typeof subagentsStopped !== "number" || subagentsStopped < 0 || !Array.isArray(reportedModels) || !reportedModels.every((model) => typeof model === "string" && model.length <= 80))
+    return void 0;
+  return {
+    configured,
+    promptSubmissions,
+    subagentsStarted,
+    subagentsStopped,
+    reportedModels: [...new Set(reportedModels)]
+  };
+}
 function parseTaskBenchmarkCapture(value3) {
   const row2 = record(value3);
   if (row2 === null) {
@@ -785,7 +806,9 @@ function parseTaskBenchmarkCapture(value3) {
   const localSessionsBefore = parsedLocalSessions === void 0 ? null : parsedLocalSessions;
   const hasContextAtStart = Object.hasOwn(row2, "contextAtStart");
   const contextAtStart = hasContextAtStart ? parseTaskBenchmarkContextSnapshot(row2["contextAtStart"]) : void 0;
-  if (typeof benchmarkId !== "string" || !isTaskBenchmarkId(benchmarkId) || typeof variant !== "string" || !isTaskBenchmarkVariant(variant) || typeof taskClass !== "string" || !isTaskClass(taskClass) || typeof harnessId2 !== "string" || !isHarnessId(harnessId2) || typeof projectId !== "string" || projectId === "" || model === void 0 || reasoningEffort === void 0 || verbosity === void 0 || !validInstant(startedAt) || usageBefore === null || parsedLocalSessions === void 0 || hasContextAtStart && contextAtStart === void 0) {
+  const hasNativeRoutingAtStart = Object.hasOwn(row2, "nativeRoutingAtStart");
+  const nativeRoutingAtStart = hasNativeRoutingAtStart ? parseNativeRoutingObservation(row2["nativeRoutingAtStart"]) : void 0;
+  if (typeof benchmarkId !== "string" || !isTaskBenchmarkId(benchmarkId) || typeof variant !== "string" || !isTaskBenchmarkVariant(variant) || typeof taskClass !== "string" || !isTaskClass(taskClass) || typeof harnessId2 !== "string" || !isHarnessId(harnessId2) || typeof projectId !== "string" || projectId === "" || model === void 0 || reasoningEffort === void 0 || verbosity === void 0 || !validInstant(startedAt) || usageBefore === null || parsedLocalSessions === void 0 || hasContextAtStart && contextAtStart === void 0 || hasNativeRoutingAtStart && nativeRoutingAtStart === void 0) {
     return {
       ok: false,
       reason: "invalid-shape",
@@ -807,6 +830,7 @@ function parseTaskBenchmarkCapture(value3) {
       startedAt,
       usageBefore,
       ...hasContextAtStart ? { contextAtStart: contextAtStart ?? null } : {},
+      ...hasNativeRoutingAtStart ? { nativeRoutingAtStart: nativeRoutingAtStart ?? null } : {},
       localSessionsBefore
     }
   };
@@ -842,7 +866,11 @@ function parseTaskBenchmarkReceipt(value3) {
   const contextAtStart = hasContextAtStart ? parseTaskBenchmarkContextSnapshot(row2["contextAtStart"]) : void 0;
   const hasContextAtFinish = Object.hasOwn(row2, "contextAtFinish");
   const contextAtFinish = hasContextAtFinish ? parseTaskBenchmarkContextSnapshot(row2["contextAtFinish"]) : void 0;
-  if (typeof benchmarkId !== "string" || benchmarkId === "" || typeof variant !== "string" || !isTaskBenchmarkVariant(variant) || typeof taskClass !== "string" || !isTaskClass(taskClass) || typeof harnessId2 !== "string" || !isHarnessId(harnessId2) || model === void 0 || reasoningEffort === void 0 || verbosity === void 0 || !validInstant(startedAt) || !validInstant(completedAt) || Date.parse(completedAt) < Date.parse(startedAt) || usageBefore === null || usageAfter === null || localUsage === void 0 || outcome2 === null || hasBoundaryPolicy && policyAtFinish === void 0 || hasContextAtStart && contextAtStart === void 0 || hasContextAtFinish && contextAtFinish === void 0) {
+  const hasNativeRoutingAtStart = Object.hasOwn(row2, "nativeRoutingAtStart");
+  const nativeRoutingAtStart = hasNativeRoutingAtStart ? parseNativeRoutingObservation(row2["nativeRoutingAtStart"]) : void 0;
+  const hasNativeRoutingAtFinish = Object.hasOwn(row2, "nativeRoutingAtFinish");
+  const nativeRoutingAtFinish = hasNativeRoutingAtFinish ? parseNativeRoutingObservation(row2["nativeRoutingAtFinish"]) : void 0;
+  if (typeof benchmarkId !== "string" || benchmarkId === "" || typeof variant !== "string" || !isTaskBenchmarkVariant(variant) || typeof taskClass !== "string" || !isTaskClass(taskClass) || typeof harnessId2 !== "string" || !isHarnessId(harnessId2) || model === void 0 || reasoningEffort === void 0 || verbosity === void 0 || !validInstant(startedAt) || !validInstant(completedAt) || Date.parse(completedAt) < Date.parse(startedAt) || usageBefore === null || usageAfter === null || localUsage === void 0 || outcome2 === null || hasBoundaryPolicy && policyAtFinish === void 0 || hasContextAtStart && contextAtStart === void 0 || hasContextAtFinish && contextAtFinish === void 0 || hasNativeRoutingAtStart && nativeRoutingAtStart === void 0 || hasNativeRoutingAtFinish && nativeRoutingAtFinish === void 0) {
     return {
       ok: false,
       reason: "invalid-shape",
@@ -868,7 +896,9 @@ function parseTaskBenchmarkReceipt(value3) {
       outcome: outcome2,
       ...hasContextAtStart ? { contextAtStart: contextAtStart ?? null } : {},
       ...hasContextAtFinish ? { contextAtFinish: contextAtFinish ?? null } : {},
-      ...hasBoundaryPolicy ? { policyAtFinish: policyAtFinish ?? null } : {}
+      ...hasBoundaryPolicy ? { policyAtFinish: policyAtFinish ?? null } : {},
+      ...hasNativeRoutingAtStart ? { nativeRoutingAtStart: nativeRoutingAtStart ?? null } : {},
+      ...hasNativeRoutingAtFinish ? { nativeRoutingAtFinish: nativeRoutingAtFinish ?? null } : {}
     }
   };
 }
@@ -888,7 +918,9 @@ function completeTaskBenchmarkCapture(capture, input) {
     usageAfter: input.usageAfter,
     localUsage: input.localUsage ?? null,
     ...capture.contextAtStart !== void 0 ? { contextAtStart: capture.contextAtStart } : {},
+    ...capture.nativeRoutingAtStart !== void 0 ? { nativeRoutingAtStart: capture.nativeRoutingAtStart } : {},
     ...input.contextAtFinish !== void 0 ? { contextAtFinish: input.contextAtFinish } : {},
+    ...input.nativeRoutingAtFinish !== void 0 ? { nativeRoutingAtFinish: input.nativeRoutingAtFinish } : {},
     ...input.policyAtFinish !== void 0 ? { policyAtFinish: input.policyAtFinish } : {},
     outcome: {
       qualityGate: input.qualityGate,
@@ -1096,7 +1128,8 @@ function buildTaskBenchmarkMatrix(pairs, selection = {
       baselineLocalTokens,
       optimizedLocalTokens,
       localTokenSavingPercent: !bothQualityPassed || baselineLocalTokens === null || optimizedLocalTokens === null ? null : roundedPercent(baselineLocalTokens - optimizedLocalTokens, baselineLocalTokens),
-      quota: comparison.quota
+      quota: comparison.quota,
+      ...nativeRoutingComparison(baseline, optimized)
     };
   }).sort((left, right) => TASK_CLASS_ORDER.indexOf(left.taskClass) - TASK_CLASS_ORDER.indexOf(right.taskClass) || left.benchmarkId.localeCompare(right.benchmarkId));
   const byTaskClass = TASK_CLASS_ORDER.map((taskClass) => ({
@@ -1110,6 +1143,36 @@ function buildTaskBenchmarkMatrix(pairs, selection = {
     selection
   };
 }
+function nativeRoutingComparison(baseline, optimized) {
+  const bStart = baseline.nativeRoutingAtStart;
+  const bFinish = baseline.nativeRoutingAtFinish;
+  const oStart = optimized.nativeRoutingAtStart;
+  const oFinish = optimized.nativeRoutingAtFinish;
+  if (bStart === void 0 && bFinish === void 0 && oStart === void 0 && oFinish === void 0)
+    return {};
+  const qualityGatesPassed = baseline.outcome.qualityGate === "passed" && optimized.outcome.qualityGate === "passed";
+  if (bStart == null || bFinish == null || oStart == null || oFinish == null || bStart.configured === null || oStart.configured === null) {
+    return {
+      nativeRouting: {
+        verdict: "unknown",
+        baselineSubagents: bFinish?.subagentsStarted ?? null,
+        optimizedSubagents: oFinish?.subagentsStarted ?? null,
+        optimizedReportedModels: oFinish?.reportedModels ?? [],
+        qualityGatesPassed
+      }
+    };
+  }
+  const attributed = bStart.configured === false && bFinish.configured === false && bFinish.subagentsStarted === 0 && oStart.configured === true && oFinish.configured === true && oFinish.promptSubmissions > 0 && oFinish.subagentsStarted > 0;
+  return {
+    nativeRouting: {
+      verdict: attributed ? "attributed" : "not-attributed",
+      baselineSubagents: bFinish.subagentsStarted,
+      optimizedSubagents: oFinish.subagentsStarted,
+      optimizedReportedModels: [...oFinish.reportedModels],
+      qualityGatesPassed
+    }
+  };
+}
 var TASK_BENCHMARK_RECEIPT_SCHEMA_VERSION, TASK_BENCHMARK_CAPTURE_SCHEMA_VERSION, BENCHMARK_ID, WINDOW_SCOPES, WINDOW_SOURCES, WINDOW_CONFIDENCES, WINDOW_KINDS, QUOTA_SCOPE_PRIORITY, TASK_CLASS_ORDER;
 var init_benchmark = __esm({
   "packages/core/dist/src/domain/benchmark.js"() {
@@ -4130,6 +4193,7 @@ function coversProviders(rule, providers) {
   return rule.providers.length === providers.length && providers.every((provider) => rule.providers.includes(provider));
 }
 function findCompatibilityRule(rules, query) {
+  const candidates = [];
   for (const rule of rules) {
     if (!rule.capabilities.includes(query.capability))
       continue;
@@ -4137,9 +4201,28 @@ function findCompatibilityRule(rules, query) {
       continue;
     if (!coversProviders(rule, query.providers))
       continue;
-    return rule;
+    if (rule.platforms !== void 0 && (query.platform === void 0 || !rule.platforms.some((platform) => platform.os === query.platform?.os && platform.wsl === query.platform?.wsl))) {
+      continue;
+    }
+    candidates.push(rule);
   }
-  return null;
+  if (query.observedVersions !== void 0) {
+    const matchesObservedTuple = (rule) => {
+      if (rule.providers.some((provider) => rule.testedVersions[provider] === void 0)) {
+        return false;
+      }
+      const testedHarnessVersion = rule.testedHarnessVersions?.[query.harness];
+      if (rule.outcome === "ordered" && testedHarnessVersion === void 0)
+        return false;
+      return Object.entries(rule.testedVersions).every(([provider, version3]) => query.observedVersions?.[provider] === version3) && (testedHarnessVersion === void 0 || query.observedHarnessVersions?.[query.harness] === testedHarnessVersion);
+    };
+    const exact = candidates.find(matchesObservedTuple);
+    if (exact !== void 0)
+      return exact;
+    const matchingDimensions = (rule) => Object.entries(rule.testedVersions).filter(([provider, version3]) => query.observedVersions?.[provider] === version3).length + (rule.testedHarnessVersions?.[query.harness] !== void 0 && query.observedHarnessVersions?.[query.harness] === rule.testedHarnessVersions[query.harness] ? 1 : 0);
+    candidates.sort((left, right) => matchingDimensions(right) - matchingDimensions(left));
+  }
+  return candidates[0] ?? null;
 }
 function coversVersion(recorded, observed) {
   if (recorded.major === 0 || observed.major === 0)
@@ -4148,17 +4231,25 @@ function coversVersion(recorded, observed) {
 }
 function staleRecordedVersions(rule, observed) {
   const stale2 = [];
-  for (const [provider, recorded] of Object.entries(rule.testedVersions)) {
+  for (const provider of rule.providers) {
+    const recorded = rule.testedVersions[provider];
     const seen = observed[provider] ?? null;
-    const recordedVersion = parseSemanticVersion(recorded);
+    const recordedVersion = recorded === void 0 ? null : parseSemanticVersion(recorded);
     const seenVersion = seen === null ? null : parseSemanticVersion(seen);
     if (recordedVersion !== null && seenVersion !== null && coversVersion(recordedVersion, seenVersion)) {
       continue;
     }
-    stale2.push({ provider, recorded, observed: seen });
+    stale2.push({ provider, recorded: recorded ?? null, observed: seen });
   }
   return stale2;
 }
+function staleRecordedHarnessVersions(rule, observed, harness) {
+  const recorded = rule.testedHarnessVersions?.[harness];
+  if (recorded === void 0 && rule.outcome !== "ordered")
+    return [];
+  const seen = observed[harness] ?? null;
+  return recorded !== void 0 && seen === recorded ? [] : [{ harness, recorded: recorded ?? null, observed: seen }];
+}
 var init_compatibility = __esm({
   "packages/core/dist/src/domain/compatibility.js"() {
     "use strict";
@@ -4777,7 +4868,77 @@ function narrowChannelOverlaps(context) {
     if (first === void 0)
       continue;
     const { harness, toolFamily, capability } = first.scope;
-    const rule = findCompatibilityRule(input.rules, { providers: owners, harness, capability });
+    const found = findCompatibilityRule(input.rules, {
+      providers: owners,
+      harness,
+      capability,
+      ...input.platform === void 0 ? {} : { platform: input.platform },
+      observedVersions: input.observedVersions,
+      ...input.observedHarnessVersions === void 0 ? {} : { observedHarnessVersions: input.observedHarnessVersions }
+    });
+    const staleProviders = found === null ? [] : staleRecordedVersions(found, input.observedVersions);
+    const staleHarnesses = found === null ? [] : staleRecordedHarnessVersions(found, input.observedHarnessVersions ?? {}, harness);
+    const stale2 = [...staleProviders, ...staleHarnesses];
+    const rule = stale2.length > 0 ? null : found;
+    if (found !== null && stale2.length > 0) {
+      conflicts.push({
+        code: "compatibility-rule-stale",
+        scope: `${harness}/${toolFamily}/${capability}`,
+        claimants: [...owners].sort(),
+        detail: [
+          `${owners.join(" and ")} both use ${capability} on ${harness}/${toolFamily} at different interception points`,
+          `Rule ${found.id} was tested at ${[
+            ...staleProviders.map((entry) => `${entry.provider} ${entry.recorded ?? "not recorded"}`),
+            ...staleHarnesses.map((entry) => `${entry.harness} ${entry.recorded ?? "not recorded"}`)
+          ].join(", ")}`,
+          `Installed now: ${[
+            ...staleProviders.map((entry) => `${entry.provider} ${entry.observed ?? "unknown"}`),
+            ...staleHarnesses.map((entry) => `${entry.harness} ${entry.observed ?? "unknown"}`)
+          ].join(", ")}`,
+          "The compatibility rule does not authorize this provider tuple"
+        ],
+        remediation: `Re-test ${found.id} against the installed versions and platform, or assign one owner to ${harness}/${toolFamily}/${capability}`
+      });
+      for (const entry of group)
+        dropped.add(entry);
+      continue;
+    }
+    if (rule?.outcome === "ordered") {
+      const conflictsBeforeOrdering = conflicts.length;
+      const order = rule.order;
+      if (order === void 0 || order.length !== owners.length) {
+        conflicts.push({
+          code: "compatibility-rule-malformed",
+          scope: `${harness}/${toolFamily}/${capability}`,
+          claimants: [...owners].sort(),
+          detail: [`Rule ${rule.id} does not order every owner in this channel`],
+          remediation: `Fix rule ${rule.id} so its order lists every provider on the channel`
+        });
+        for (const entry of group)
+          dropped.add(entry);
+        continue;
+      }
+      for (const entry of group) {
+        const index = order.indexOf(entry.owner);
+        if (index < 0) {
+          conflicts.push({
+            code: "compatibility-rule-malformed",
+            scope: `${harness}/${toolFamily}/${capability}`,
+            claimants: [...owners].sort(),
+            detail: [`Rule ${rule.id} does not include ${entry.owner}`],
+            remediation: `Fix rule ${rule.id} so its order lists every provider on the channel`
+          });
+          break;
+        }
+        entry.mode = "chainable";
+        entry.order = index;
+      }
+      if (conflicts.length > conflictsBeforeOrdering) {
+        for (const entry of group)
+          dropped.add(entry);
+      }
+      continue;
+    }
     if (rule === null || rule.outcome !== "narrowed" || rule.retains === void 0) {
       conflicts.push({
         code: "exclusive-scope-contested",
@@ -4823,10 +4984,15 @@ function resolveContested(context) {
   const found = findCompatibilityRule(input.rules, {
     providers: claimants,
     harness: scope.harness,
-    capability
+    capability,
+    ...input.platform === void 0 ? {} : { platform: input.platform },
+    observedVersions: input.observedVersions,
+    ...input.observedHarnessVersions === void 0 ? {} : { observedHarnessVersions: input.observedHarnessVersions }
   });
   const stale2 = found === null ? [] : staleRecordedVersions(found, input.observedVersions);
-  const rule = stale2.length > 0 ? null : found;
+  const staleHarnesses = found === null ? [] : staleRecordedHarnessVersions(found, input.observedHarnessVersions ?? {}, scope.harness);
+  const staleAll = [...stale2, ...staleHarnesses];
+  const rule = staleAll.length > 0 ? null : found;
   if (rule === null) {
     if (found !== null) {
       conflicts.push({
@@ -4835,11 +5001,17 @@ function resolveContested(context) {
         claimants,
         detail: [
           `${claimants.join(" and ")} both claim ${capability} on ${formatCapabilityScope(scope)}`,
-          `Rule ${found.id} was tested at ${stale2.map((entry) => `${entry.provider} ${entry.recorded}`).join(", ")}`,
-          `Installed now: ${stale2.map((entry) => `${entry.provider} ${entry.observed ?? "unknown"}`).join(", ")}`,
+          `Rule ${found.id} was tested at ${[
+            ...stale2.map((entry) => `${entry.provider} ${entry.recorded ?? "not recorded"}`),
+            ...staleHarnesses.map((entry) => `${entry.harness} ${entry.recorded ?? "not recorded"}`)
+          ].join(", ")}`,
+          `Installed now: ${[
+            ...stale2.map((entry) => `${entry.provider} ${entry.observed ?? "unknown"}`),
+            ...staleHarnesses.map((entry) => `${entry.harness} ${entry.observed ?? "unknown"}`)
+          ].join(", ")}`,
           "A compatibility result covers the versions it records, so this one is withdrawn rather than applied outside them"
         ],
-        remediation: `Re-test ${found.id} against the installed versions and update its \`testedVersions\`, or assign the scope explicitly with \`profile: custom\``
+        remediation: `Re-test ${found.id} against the installed provider and harness versions, record the evidence for ${scope.harness}, or assign the scope explicitly with \`profile: custom\``
       });
       return;
     }
@@ -5059,18 +5231,33 @@ var init_removal_order = __esm({
 });
 
 // packages/core/dist/src/planner/rules.js
-var RTK, HARNESSTRIM, RTK_HARNESSTRIM_SHELL_OVERLAP, COMPATIBILITY_RULES;
+var RTK, HARNESSTRIM, CLAUDE, CODEX, RTK_HARNESSTRIM_ORDERED_LINUX, RTK_HARNESSTRIM_SHELL_OVERLAP, COMPATIBILITY_RULES;
 var init_rules = __esm({
   "packages/core/dist/src/planner/rules.js"() {
     "use strict";
     init_ids();
     RTK = providerId("rtk");
     HARNESSTRIM = providerId("harnesstrim");
+    CLAUDE = harnessId("claude");
+    CODEX = harnessId("codex");
+    RTK_HARNESSTRIM_ORDERED_LINUX = {
+      id: "rtk-harnesstrim-post-tool-chain-linux",
+      providers: [RTK, HARNESSTRIM],
+      harnesses: [CLAUDE, CODEX],
+      capabilities: ["shell.output.reduce"],
+      outcome: "ordered",
+      order: [RTK, HARNESSTRIM],
+      platforms: [{ os: "linux", wsl: false }],
+      testedVersions: { rtk: "0.50.0", harnesstrim: "0.3.1" },
+      testedHarnessVersions: { claude: "2.1.274", codex: "0.159.0" },
+      rationale: "RTK rewrites the Bash command at PreToolUse; HarnessTrim processes the completed Bash result at PostToolUse. The harness lifecycle establishes RTK-before-HarnessTrim. Their telemetry remains separate because the providers do not expose comparable boundaries for one shared operation.",
+      fixtures: ["tests/fixtures/rows/rtk-harnesstrim-chain-linux"]
+    };
     RTK_HARNESSTRIM_SHELL_OVERLAP = {
       id: "rtk-harnesstrim-shell-output-overlap",
       providers: [RTK, HARNESSTRIM],
-      // Every harness: the RFC checked all three MVP adapters and found the same overlap on each,
-      // for different reasons. Listing them individually would imply a fourth harness is exempt.
+      // Legacy providers retain the reviewed RTK-only narrowing. The resolver selects the exact
+      // provider tuple above for the current Linux runtime chain.
       harnesses: "*",
       capabilities: ["shell.output.reduce"],
       outcome: "narrowed",
@@ -5079,7 +5266,10 @@ var init_rules = __esm({
       rationale: "RTK keeps shell output reduction: it rewrites the command, so the output arriving at any later point is already reduced, and reducing it again loses signal and counts the saving twice. HarnessTrim 0.1.0 no longer has to be excluded whole for that \u2014 `--no-hook` and `--no-instructions` produce a Claude install that adds skills and reduces nothing, and `--tools` confines its OpenCode reduction to a chosen tool family. So it is narrowed to the form that leaves this channel alone, rather than refused. At 0.0.5 no flag produced any of those states, which is why this rule read `conflict` and said no configuration narrows it.",
       fixtures: ["docs/rfcs/0003-capabilities-and-conflicts.md#the-table-is-an-intent"]
     };
-    COMPATIBILITY_RULES = [RTK_HARNESSTRIM_SHELL_OVERLAP];
+    COMPATIBILITY_RULES = [
+      RTK_HARNESSTRIM_ORDERED_LINUX,
+      RTK_HARNESSTRIM_SHELL_OVERLAP
+    ];
   }
 });
 
@@ -7160,6 +7350,14 @@ function ensureParent(document2, segments) {
   let current = document2;
   for (let index = 0; index < segments.length - 1; index += 1) {
     const segment = segments[index];
+    if (Array.isArray(current)) {
+      const itemIndex = arrayIndex(segment);
+      if (itemIndex === null || itemIndex >= current.length) {
+        return { ok: false, reason: "path crosses a missing or invalid array entry" };
+      }
+      current = current[itemIndex];
+      continue;
+    }
     if (!isJsonObject(current)) {
       return { ok: false, reason: `\`${segments.slice(0, index).join(".")}\` is not an object` };
     }
@@ -9663,7 +9861,7 @@ var TOOL_VERSION;
 var init_version2 = __esm({
   "apps/cli/dist/src/version.js"() {
     "use strict";
-    TOOL_VERSION = "0.1.22";
+    TOOL_VERSION = "0.1.24";
   }
 });
 
@@ -14190,7 +14388,7 @@ async function detect(context) {
   const state = unparsed.length > 0 ? "broken" : configured.length > 0 && version3 !== null ? "configured" : version3 !== null || present.length > 0 ? "detected" : "absent";
   const primary = present.find((config) => config.declaration.primary) ?? present[0] ?? null;
   return {
-    harnessId: CLAUDE,
+    harnessId: CLAUDE2,
     state,
     version: version3,
     versionVerdict: verdict,
@@ -14211,7 +14409,7 @@ async function inspect(context) {
     diagnostics.push(diagnostic({
       severity: "warning",
       code: "tool-family-not-covered",
-      subject: CLAUDE,
+      subject: CLAUDE2,
       /**
        * Says whose gap it is, and that the tool is working.
        *
@@ -14228,7 +14426,7 @@ async function inspect(context) {
     }));
   }
   return {
-    harnessId: CLAUDE,
+    harnessId: CLAUDE2,
     configs,
     activeToolFamilies,
     uncoveredToolFamilies,
@@ -14236,7 +14434,7 @@ async function inspect(context) {
     // settings.json runs. Codex is the one that needs the other answer.
     enabled: MANIFEST.requiresEnablement ? null : null,
     summaries: configs.filter((config) => config.configuredPoints.length > 0).map((config) => ({
-      harnessId: CLAUDE,
+      harnessId: CLAUDE2,
       configPath: config.path,
       scope: config.declaration.scope,
       interceptionPoints: config.configuredPoints,
@@ -14300,7 +14498,7 @@ async function verify(context) {
     remediation: null
   });
   const achievedTier = checks.some((check) => check.achievedTier === "config-only") ? "config-only" : checks.some((check) => check.achievedTier === "presence") ? "presence" : null;
-  return { harnessId: CLAUDE, declaredTier: MANIFEST.verificationTier, achievedTier, checks };
+  return { harnessId: CLAUDE2, declaredTier: MANIFEST.verificationTier, achievedTier, checks };
 }
 function cclimitsPercent(value3) {
   if (typeof value3 !== "string")
@@ -14326,7 +14524,7 @@ function cclimitsUsageWindow(value3, input) {
     return null;
   }
   return {
-    harnessId: CLAUDE,
+    harnessId: CLAUDE2,
     bucketId: "claude-subscription",
     bucketName: "Claude subscription",
     window: input.window,
@@ -14350,7 +14548,7 @@ async function observeUsage(context, observedAt) {
     maxOutputBytes: 512 * 1024
   });
   const unavailable3 = (code, message, severity = "warning", remediation = null) => ({
-    harnessId: CLAUDE,
+    harnessId: CLAUDE2,
     state: "unavailable",
     windows: [],
     planType: null,
@@ -14360,7 +14558,7 @@ async function observeUsage(context, observedAt) {
       diagnostic({
         severity,
         code,
-        subject: CLAUDE,
+        subject: CLAUDE2,
         message,
         remediation: remediation ?? (severity === "info" ? "Install a cclimits build with cacheless Claude JSON support if you want this optional fallback" : "Run cclimits --claude --json --no-cache-write --no-stale-fallback directly and inspect its output")
       })
@@ -14426,13 +14624,13 @@ async function observeUsage(context, observedAt) {
     diagnostics.push(diagnostic({
       severity: "warning",
       code: "cclimits-claude-window-unrecognized",
-      subject: CLAUDE,
+      subject: CLAUDE2,
       message: "One cclimits Claude quota window failed strict percentage validation",
       remediation: "Treat the omitted window as unknown and update the cclimits compatibility fixture"
     }));
   }
   return {
-    harnessId: CLAUDE,
+    harnessId: CLAUDE2,
     state: "observed",
     windows,
     planType: typeof claude["plan"] === "string" ? claude["plan"] : null,
@@ -14465,7 +14663,7 @@ async function observeContext(context, _observedAt) {
   const nativeEffort = await readClaudeNativeEffort(context);
   const benchmarkPolicy = await readClaudeBenchmarkPolicy(context, nativeEffort);
   const empty2 = (state, diagnostics) => ({
-    harnessId: CLAUDE,
+    harnessId: CLAUDE2,
     state,
     nativeEffort,
     benchmarkPolicy,
@@ -14492,7 +14690,7 @@ async function observeContext(context, _observedAt) {
       diagnostic({
         severity: "warning",
         code: "claude-mcp-inventory-unavailable",
-        subject: CLAUDE,
+        subject: CLAUDE2,
         message: "Claude MCP inventory could not be read: " + outcome2.failure.message,
         remediation: "Run claude mcp list directly and verify the CLI installation"
       })
@@ -14503,7 +14701,7 @@ async function observeContext(context, _observedAt) {
       diagnostic({
         severity: "warning",
         code: "claude-mcp-inventory-unavailable",
-        subject: CLAUDE,
+        subject: CLAUDE2,
         message: "claude mcp list exited " + String(outcome2.exitCode),
         remediation: "Run claude mcp list directly and fix the reported MCP configuration"
       })
@@ -14521,7 +14719,7 @@ async function observeContext(context, _observedAt) {
     if (name2 === void 0 || name2 === "")
       continue;
     servers.push({
-      harnessId: CLAUDE,
+      harnessId: CLAUDE2,
       name: name2,
       toolCount: null,
       runtimeStatus: claudeMcpStatus(match[2] ?? ""),
@@ -14535,7 +14733,7 @@ async function observeContext(context, _observedAt) {
     mcpServers: servers
   };
 }
-var CLAUDE, MANIFEST, VERSION_PATTERN, claudeAdapter;
+var CLAUDE2, MANIFEST, VERSION_PATTERN, claudeAdapter;
 var init_claude = __esm({
   "packages/adapters/dist/src/harnesses/claude.js"() {
     "use strict";
@@ -14543,20 +14741,23 @@ var init_claude = __esm({
     init_contract();
     init_claude_policy();
     init_claude_benchmark_policy();
-    CLAUDE = harnessId("claude");
+    CLAUDE2 = harnessId("claude");
     MANIFEST = {
       schemaVersion: MANIFEST_SCHEMA_VERSION,
-      id: CLAUDE,
+      id: CLAUDE2,
       displayName: "Claude Code",
       homepage: "https://claude.com/claude-code",
-      testedVersions: { minimum: "2.0.0", maximum: "2.1.212" },
+      testedVersions: { minimum: "2.1.274", maximum: "2.1.274" },
       // RFC 0007 §Per-harness findings: tier 3 was reached on this harness, passively,
       // through the provider's receipt. The adapter alone reaches `config-only`.
       verificationTier: "canary",
       versionCommand: { executable: "claude", args: ["--version"] },
       interceptionPoints: [
         { scopeId: "pre-tool-use", eventName: "PreToolUse" },
-        { scopeId: "post-tool-use", eventName: "PostToolUse" }
+        { scopeId: "post-tool-use", eventName: "PostToolUse" },
+        { scopeId: "user-prompt-submit", eventName: "UserPromptSubmit" },
+        { scopeId: "subagent-start", eventName: "SubagentStart" },
+        { scopeId: "subagent-stop", eventName: "SubagentStop" }
       ],
       configFiles: [
         {
@@ -14565,7 +14766,13 @@ var init_claude = __esm({
           parser: "json",
           primary: true,
           interceptionFormat: "hooks-event-command-list",
-          interceptionPoints: ["pre-tool-use", "post-tool-use"]
+          interceptionPoints: [
+            "pre-tool-use",
+            "post-tool-use",
+            "user-prompt-submit",
+            "subagent-start",
+            "subagent-stop"
+          ]
         },
         { path: ".claude/settings.json", scope: "project", parser: "json", primary: false },
         { path: ".claude/settings.local.json", scope: "project", parser: "json", primary: false }
@@ -14573,6 +14780,7 @@ var init_claude = __esm({
       toolFamilies: [
         {
           id: "Bash",
+          matcher: "Bash",
           platforms: ["windows", "macos", "linux"],
           executesShellCommands: true
         },
@@ -14580,6 +14788,7 @@ var init_claude = __esm({
           // Observed in a Windows session: the harness offers a separate PowerShell tool,
           // and a hook matching `Bash` did not see commands routed through it.
           id: "PowerShell",
+          matcher: "PowerShell",
           platforms: ["windows"],
           executesShellCommands: true
         }
@@ -14913,7 +15122,7 @@ async function detect2(context) {
   const configured = (hooks?.configuredPoints.length ?? 0) > 0;
   const primary = configs.find((config) => config.declaration.primary && config.exists) ?? present[0] ?? null;
   return {
-    harnessId: CODEX,
+    harnessId: CODEX2,
     state: hooks?.exists && !hooks.parsed ? "broken" : configured && version3 !== null ? "configured" : version3 !== null || present.length > 0 ? "detected" : "absent",
     version: version3,
     versionVerdict: verdict,
@@ -14939,14 +15148,14 @@ async function inspect2(context) {
     diagnostic({
       severity: "info",
       code: "hook-enablement-unobservable",
-      subject: CODEX,
+      subject: CODEX2,
       message: "This file declares hooks; run verify to query native enablement/trust where hooks/list is available",
       path: hook.path,
       remediation: "Open Codex and confirm the hook is enabled and trusted after any hook edit"
     })
   ] : [];
   return {
-    harnessId: CODEX,
+    harnessId: CODEX2,
     configs,
     activeToolFamilies: familiesOnThisPlatform(MANIFEST2, context.facts),
     /**
@@ -14963,7 +15172,7 @@ async function inspect2(context) {
     uncoveredToolFamilies: familiesOnThisPlatform(MANIFEST2, context.facts).filter((family) => family.executesShellCommands).filter((family) => matchers.length > 0 && !matchers.some((matcher) => matcherCoversFamily(matcher, family.id))).map((family) => family.id),
     enabled: null,
     summaries: configs.filter((config) => config.configuredPoints.length > 0).map((config) => ({
-      harnessId: CODEX,
+      harnessId: CODEX2,
       configPath: config.path,
       scope: config.declaration.scope,
       interceptionPoints: config.configuredPoints,
@@ -14983,11 +15192,15 @@ async function verify2(context) {
   const checks = [
     {
       id: "executable-resolves",
-      status: detection.version === null ? "fail" : "pass",
-      summary: detection.version === null ? "codex could not be run" : `Codex ${detection.version} resolves`,
+      // Codex Desktop can run hooks from its own app process without exposing the optional
+      // `codex` CLI to the shell that runs Token Harness. Missing CLI access therefore means
+      // that CLI-based checks cannot be exercised; the provider rows remain responsible for
+      // proving actual hook execution from RTK/HarnessTrim telemetry.
+      status: detection.version === null ? "not-exercised" : "pass",
+      summary: detection.version === null ? "Codex CLI is unavailable to this process; native CLI checks cannot run" : `Codex ${detection.version} resolves`,
       achievedTier: detection.version === null ? null : "presence",
       evidence: detection.evidence.filter((item) => item.kind === "version-output"),
-      remediation: detection.version === null ? "Install Codex CLI or add it to PATH" : null
+      remediation: null
     },
     {
       id: "hooks-readable",
@@ -15010,15 +15223,15 @@ async function verify2(context) {
     {
       id: "hook-enablement",
       status: configured ? "info" : "not-exercised",
-      summary: configured ? "Native enablement/trust metadata was unavailable; the declared file alone does not prove activation" : "No declared hook has enablement to inspect",
+      summary: configured ? "Native enablement/trust metadata is unavailable; configuration alone does not prove activation" : "No declared hook has enablement to inspect",
       achievedTier: null,
       evidence: [],
-      remediation: configured ? "Open Codex and manually enable and trust the hook; Token Harness cannot grant trust. Then run verify again." : null
+      remediation: configured ? "Use Codex hook controls to enable and trust the declared hook, then run a provider canary; Token Harness cannot grant trust." : null
     },
     {
       id: "canary-intercepted",
       status: "not-exercised",
-      summary: "No positive event-stream receipt has been observed for this integration",
+      summary: "No Codex CLI event-stream receipt is available from passive verification; provider-specific runtime receipts are checked separately",
       achievedTier: null,
       evidence: [],
       remediation: null
@@ -15033,7 +15246,7 @@ async function verify2(context) {
     }
   }
   return {
-    harnessId: CODEX,
+    harnessId: CODEX2,
     declaredTier: MANIFEST2.verificationTier,
     achievedTier: detection.version !== null && readable && configured ? "config-only" : detection.version !== null ? "presence" : null,
     checks
@@ -15069,7 +15282,7 @@ function rateWindow(value3, input) {
   const duration2 = readNumber(value3, "windowDurationMins");
   const resetsAt = readNumber(value3, "resetsAt");
   return {
-    harnessId: CODEX,
+    harnessId: CODEX2,
     bucketId: input.bucketId,
     bucketName: input.bucketName,
     window: input.window,
@@ -15171,7 +15384,7 @@ function cclimitsWindow(value3, input) {
     return null;
   }
   return {
-    harnessId: CODEX,
+    harnessId: CODEX2,
     bucketId: "codex-subscription",
     bucketName: "Codex subscription",
     window: input.window,
@@ -15231,7 +15444,7 @@ async function observeUsageViaCclimits(context, observedAt, nativeDiagnostic) {
   if (outcome2.failure !== null || outcome2.exitCode !== 0 || outcome2.stdoutTruncated) {
     const reason3 = outcome2.failure !== null ? outcome2.failure.message : outcome2.stdoutTruncated ? "output exceeded the bounded capture" : `exited ${String(outcome2.exitCode)}`;
     return {
-      harnessId: CODEX,
+      harnessId: CODEX2,
       state: "unavailable",
       windows: [],
       planType: null,
@@ -15242,7 +15455,7 @@ async function observeUsageViaCclimits(context, observedAt, nativeDiagnostic) {
         diagnostic({
           severity: outcome2.failure?.reason === "executable-not-found" ? "info" : "warning",
           code: "cclimits-codex-usage-unavailable",
-          subject: CODEX,
+          subject: CODEX2,
           message: "Optional cclimits Codex quota fallback was unavailable: " + reason3,
           remediation: "Install a cclimits build with cacheless Codex JSON support, or treat Codex quota as unknown"
         })
@@ -15252,7 +15465,7 @@ async function observeUsageViaCclimits(context, observedAt, nativeDiagnostic) {
   const parsed = parseCclimitsCodexResponse(outcome2.stdout, observedAt);
   if (parsed === null) {
     return {
-      harnessId: CODEX,
+      harnessId: CODEX2,
       state: "unavailable",
       windows: [],
       planType: null,
@@ -15263,7 +15476,7 @@ async function observeUsageViaCclimits(context, observedAt, nativeDiagnostic) {
         diagnostic({
           severity: "warning",
           code: "cclimits-codex-schema-unrecognized",
-          subject: CODEX,
+          subject: CODEX2,
           message: "cclimits returned no strictly validated Codex quota window with an absolute reset time",
           remediation: "Update the cclimits Codex compatibility fixture before using it for benchmark quota"
         })
@@ -15271,14 +15484,14 @@ async function observeUsageViaCclimits(context, observedAt, nativeDiagnostic) {
     };
   }
   return {
-    harnessId: CODEX,
+    harnessId: CODEX2,
     state: "observed",
     ...parsed,
     diagnostics: [
       diagnostic({
         severity: "info",
         code: "codex-rate-limits-companion-fallback",
-        subject: CODEX,
+        subject: CODEX2,
         message: "Native Codex quota was unavailable, so cclimits supplied a read-only reported snapshot",
         remediation: null
       })
@@ -15315,7 +15528,7 @@ async function observeUsage2(context, observedAt) {
     return observeUsageViaCclimits(context, observedAt, diagnostic({
       severity: "warning",
       code: "codex-rate-limits-unavailable",
-      subject: CODEX,
+      subject: CODEX2,
       message: "Codex rate limits could not be read natively: " + outcome2.failure.message,
       remediation: "Run Codex once, confirm ChatGPT authentication, then retry token-harness budget"
     }));
@@ -15324,7 +15537,7 @@ async function observeUsage2(context, observedAt) {
     return observeUsageViaCclimits(context, observedAt, diagnostic({
       severity: "warning",
       code: "codex-rate-limits-unavailable",
-      subject: CODEX,
+      subject: CODEX2,
       message: "Codex app-server exited " + String(outcome2.exitCode) + " without a usable rate-limit snapshot",
       remediation: "Check codex app-server --help and the installed Codex authentication state"
     }));
@@ -15334,7 +15547,7 @@ async function observeUsage2(context, observedAt) {
     return observeUsageViaCclimits(context, observedAt, diagnostic({
       severity: "warning",
       code: "codex-rate-limits-schema-unrecognized",
-      subject: CODEX,
+      subject: CODEX2,
       message: "Codex app-server returned no recognizable account/rateLimits/read response",
       remediation: "Refresh the Codex compatibility fixture before relying on this version"
     }));
@@ -15343,13 +15556,13 @@ async function observeUsage2(context, observedAt) {
     return observeUsageViaCclimits(context, observedAt, diagnostic({
       severity: "warning",
       code: "codex-rate-limits-empty",
-      subject: CODEX,
+      subject: CODEX2,
       message: "Codex returned a rate-limit response without any readable usage windows",
       remediation: "Treat current Codex quota as unknown unless a strict companion snapshot succeeds"
     }));
   }
   return {
-    harnessId: CODEX,
+    harnessId: CODEX2,
     state: "observed",
     ...parsed,
     diagnostics: []
@@ -15429,7 +15642,7 @@ async function observeContext2(context, _observedAt) {
     maxOutputBytes: 4 * 1024 * 1024
   });
   const unavailable3 = (state, code, message) => ({
-    harnessId: CODEX,
+    harnessId: CODEX2,
     state,
     model: null,
     reasoningEffort: null,
@@ -15451,7 +15664,7 @@ async function observeContext2(context, _observedAt) {
       diagnostic({
         severity: "warning",
         code,
-        subject: CODEX,
+        subject: CODEX2,
         message,
         remediation: "Update Codex and retry token-harness context"
       })
@@ -15518,7 +15731,7 @@ async function observeContext2(context, _observedAt) {
       if (path === null || version3 === null)
         continue;
       return {
-        harnessId: CODEX,
+        harnessId: CODEX2,
         scope: "user",
         path,
         version: version3,
@@ -15542,7 +15755,7 @@ async function observeContext2(context, _observedAt) {
     const path = readString(source, "file");
     const profile = readString(source, "profile");
     managedConfigFieldOrigins.push({
-      harnessId: CODEX,
+      harnessId: CODEX2,
       keyPath,
       sourceType,
       path,
@@ -15578,7 +15791,7 @@ async function observeContext2(context, _observedAt) {
         }
       }
       availableModels.push({
-        harnessId: CODEX,
+        harnessId: CODEX2,
         id,
         model,
         displayName,
@@ -15602,7 +15815,7 @@ async function observeContext2(context, _observedAt) {
         continue;
       const tools = isRecord3(item["tools"]) ? item["tools"] : null;
       mcpServers.push({
-        harnessId: CODEX,
+        harnessId: CODEX2,
         name: name2,
         toolCount: tools === null ? null : Object.keys(tools).length,
         runtimeStatus: readString(item, "runtimeStatus"),
@@ -15618,7 +15831,7 @@ async function observeContext2(context, _observedAt) {
     diagnostics.push(diagnostic({
       severity: "warning",
       code: "codex-config-read-unavailable",
-      subject: CODEX,
+      subject: CODEX2,
       message: "Codex returned no recognizable config/read result",
       remediation: "Treat effective Codex configuration as unknown"
     }));
@@ -15627,7 +15840,7 @@ async function observeContext2(context, _observedAt) {
     diagnostics.push(diagnostic({
       severity: "warning",
       code: "codex-managed-config-target-unavailable",
-      subject: CODEX,
+      subject: CODEX2,
       message: "Codex effective config was readable, but no versioned base user config layer was returned",
       remediation: "Keep native policy advisory; do not guess a config.toml path or expectedVersion"
     }));
@@ -15636,7 +15849,7 @@ async function observeContext2(context, _observedAt) {
     diagnostics.push(diagnostic({
       severity: "warning",
       code: "codex-model-catalog-unavailable",
-      subject: CODEX,
+      subject: CODEX2,
       message: "Codex returned no recognizable model/list result",
       remediation: "Keep the current model; do not infer alternative model ids"
     }));
@@ -15645,7 +15858,7 @@ async function observeContext2(context, _observedAt) {
     diagnostics.push(diagnostic({
       severity: "warning",
       code: "codex-model-catalog-truncated",
-      subject: CODEX,
+      subject: CODEX2,
       message: "Codex model catalog exceeded the one-shot page size",
       remediation: "Do not recommend a model absent from the returned catalog page"
     }));
@@ -15654,7 +15867,7 @@ async function observeContext2(context, _observedAt) {
     diagnostics.push(diagnostic({
       severity: "warning",
       code: "codex-mcp-inventory-unavailable",
-      subject: CODEX,
+      subject: CODEX2,
       message: "Codex returned no recognizable mcpServerStatus/list result",
       remediation: "Treat Codex MCP overhead as unknown; config/model optimization remains available"
     }));
@@ -15663,14 +15876,14 @@ async function observeContext2(context, _observedAt) {
     diagnostics.push(diagnostic({
       severity: "warning",
       code: "codex-mcp-inventory-truncated",
-      subject: CODEX,
+      subject: CODEX2,
       message: "Codex MCP inventory exceeded the one-shot page size",
       remediation: "Treat the reported MCP/tool counts as lower bounds"
     }));
   }
   const projectRootMarkers = config === null ? null : Array.isArray(config["project_root_markers"]) ? readStringArray(config, "project_root_markers") : null;
   return {
-    harnessId: CODEX,
+    harnessId: CODEX2,
     state: config !== null && mcpResponse !== null && modelResponse !== null ? mcpInventoryTruncated || modelCatalogTruncated ? "partial" : "observed" : config !== null || mcpResponse !== null || modelResponse !== null ? "partial" : "unavailable",
     model: config === null ? null : readString(config, "model"),
     reasoningEffort: config === null ? null : readString(config, "model_reasoning_effort"),
@@ -15691,7 +15904,7 @@ async function observeContext2(context, _observedAt) {
     diagnostics
   };
 }
-var CODEX, RATE_LIMIT_REQUEST_ID, CONTEXT_CONFIG_REQUEST_ID, CONTEXT_MCP_REQUEST_ID, CONTEXT_MODEL_REQUEST_ID, VERSION_PATTERN2, MANIFEST2, codexAdapter;
+var CODEX2, RATE_LIMIT_REQUEST_ID, CONTEXT_CONFIG_REQUEST_ID, CONTEXT_MCP_REQUEST_ID, CONTEXT_MODEL_REQUEST_ID, VERSION_PATTERN2, MANIFEST2, codexAdapter;
 var init_codex = __esm({
   "packages/adapters/dist/src/harnesses/codex.js"() {
     "use strict";
@@ -15699,7 +15912,7 @@ var init_codex = __esm({
     init_claude();
     init_codex_hooks();
     init_contract();
-    CODEX = harnessId("codex");
+    CODEX2 = harnessId("codex");
     RATE_LIMIT_REQUEST_ID = "token-harness-rate-limits";
     CONTEXT_CONFIG_REQUEST_ID = "token-harness-context-config";
     CONTEXT_MCP_REQUEST_ID = "token-harness-context-mcp";
@@ -15707,10 +15920,10 @@ var init_codex = __esm({
     VERSION_PATTERN2 = /(\d+\.\d+\.\d+(?:[-+][0-9A-Za-z.-]+)?)/;
     MANIFEST2 = {
       schemaVersion: MANIFEST_SCHEMA_VERSION,
-      id: CODEX,
+      id: CODEX2,
       displayName: "Codex CLI",
       homepage: "https://developers.openai.com/codex",
-      testedVersions: { minimum: "0.146.0", maximum: "0.146.0" },
+      testedVersions: { minimum: "0.159.0", maximum: "0.159.0" },
       verificationTier: "config-only",
       versionCommand: { executable: "codex", args: ["--version"] },
       /**
@@ -15727,7 +15940,10 @@ var init_codex = __esm({
        */
       interceptionPoints: [
         { scopeId: "pre-tool-use", eventName: "PreToolUse" },
-        { scopeId: "post-tool-use", eventName: "PostToolUse" }
+        { scopeId: "post-tool-use", eventName: "PostToolUse" },
+        { scopeId: "user-prompt-submit", eventName: "UserPromptSubmit" },
+        { scopeId: "subagent-start", eventName: "SubagentStart" },
+        { scopeId: "subagent-stop", eventName: "SubagentStop" }
       ],
       configFiles: [
         { path: ".codex/config.toml", scope: "user", parser: "toml", primary: true },
@@ -15737,11 +15953,22 @@ var init_codex = __esm({
           parser: "json",
           primary: false,
           interceptionFormat: "hooks-event-command-list",
-          interceptionPoints: ["pre-tool-use", "post-tool-use"]
+          interceptionPoints: [
+            "pre-tool-use",
+            "post-tool-use",
+            "user-prompt-submit",
+            "subagent-start",
+            "subagent-stop"
+          ]
         }
       ],
       toolFamilies: [
-        { id: "Bash", platforms: ["windows", "macos", "linux"], executesShellCommands: true }
+        {
+          id: "Bash",
+          matcher: "^Bash$",
+          platforms: ["windows", "macos", "linux"],
+          executesShellCommands: true
+        }
       ],
       requiresEnablement: true,
       enablementNote: "Codex persists hook enablement and trust separately from hooks.json; verify reads hooks/list where available and otherwise keeps enablement unknown",
@@ -16500,10 +16727,49 @@ var init_pi = __esm({
   }
 });
 
+// packages/adapters/dist/src/harnesses/native-prompt-routing.js
+function nativePromptRoutingHookEntries(harness, executable = "token-harness") {
+  return NATIVE_PROMPT_ROUTING_EVENTS.map(({ eventName, commandEvent }) => {
+    if (harness === "codex") {
+      const command = `${executable} __internal-prompt-router codex ${commandEvent}`;
+      const handler2 = {
+        type: "command",
+        command,
+        commandWindows: command,
+        timeout: 10
+      };
+      if (commandEvent === "prompt-submit")
+        handler2["additionalContextLimit"] = 500;
+      return { eventName, value: { hooks: [handler2] } };
+    }
+    const handler = {
+      type: "command",
+      command: executable,
+      args: ["__internal-prompt-router", "claude", commandEvent],
+      timeout: 10
+    };
+    return { eventName, value: { hooks: [handler] } };
+  });
+}
+var NATIVE_PROMPT_ROUTING_EVENTS;
+var init_native_prompt_routing = __esm({
+  "packages/adapters/dist/src/harnesses/native-prompt-routing.js"() {
+    "use strict";
+    NATIVE_PROMPT_ROUTING_EVENTS = [
+      { eventName: "UserPromptSubmit", commandEvent: "prompt-submit" },
+      { eventName: "SubagentStart", commandEvent: "subagent-start" },
+      { eventName: "SubagentStop", commandEvent: "subagent-stop" }
+    ];
+  }
+});
+
 // packages/adapters/dist/src/harnesses/index.js
 function listHarnessAdapters() {
   return HARNESS_ADAPTERS;
 }
+function findHarnessAdapter(id) {
+  return HARNESS_ADAPTERS.find((adapter) => adapter.manifest.id === id) ?? null;
+}
 var HARNESS_ADAPTERS;
 var init_harnesses = __esm({
   "packages/adapters/dist/src/harnesses/index.js"() {
@@ -16521,6 +16787,7 @@ var init_harnesses = __esm({
     init_opencode();
     init_pi();
     init_claude();
+    init_native_prompt_routing();
     HARNESS_ADAPTERS = [
       claudeAdapter,
       codexAdapter,
@@ -16531,6 +16798,105 @@ var init_harnesses = __esm({
   }
 });
 
+// packages/adapters/dist/src/providers/hook-plan.js
+function hookListPointer(eventName) {
+  return `hooks.${eventName.replace(/\./g, "\\.")}`;
+}
+function hookMatcherForFamily(harness, toolFamily) {
+  const family = harness.toolFamilies.find((entry) => entry.id === toolFamily);
+  return family?.matcher ?? toolFamily;
+}
+function commandHookTarget(context, harness, scopeId, toolFamily) {
+  const point = harness.interceptionPoints.find((entry) => entry.scopeId === scopeId);
+  const family = harness.toolFamilies.find((entry) => entry.id === toolFamily);
+  const file = harness.configFiles.find((entry) => entry.interceptionFormat === "hooks-event-command-list" && entry.interceptionPoints?.includes(scopeId));
+  if (point === void 0 || family === void 0 || file === void 0)
+    return null;
+  const base = file.scope === "user" ? context.paths.home : context.projectRoot;
+  const configPath = context.fs.join(base, ...file.path.split("/"));
+  return {
+    harness,
+    harnessId: harness.id,
+    scopeId,
+    toolFamily,
+    eventName: point.eventName,
+    matcher: family.matcher ?? family.id,
+    configPath,
+    pointer: hookListPointer(point.eventName)
+  };
+}
+function commandHookEntry(matcher, command) {
+  return {
+    matcher,
+    hooks: [{ type: "command", command }]
+  };
+}
+function appendCommandHookAction(input) {
+  const { target } = input;
+  return {
+    kind: "merge-json",
+    id: input.actionId,
+    riskClass: "reversible",
+    requiresNetwork: false,
+    requiresElevation: false,
+    affectedPaths: [target.configPath],
+    affectedProcesses: [],
+    preconditions: [
+      `${target.configPath} is absent or parses as JSON`,
+      `no ${input.providerId} command hook already exists on ${target.eventName}/${target.toolFamily}`
+    ],
+    postconditions: [
+      `${target.eventName} carries one ${input.providerId} command hook for ${target.toolFamily}`,
+      "every other hook entry is unchanged"
+    ],
+    rollbackData: "file-snapshot",
+    explanation: input.explanation,
+    path: target.configPath,
+    ownedPointers: [target.pointer],
+    operations: [
+      {
+        kind: "append",
+        pointer: target.pointer,
+        value: commandHookEntry(target.matcher, input.command),
+        expectedValueDigest: null
+      }
+    ],
+    createIfMissing: true
+  };
+}
+function removeCommandHookAction(input) {
+  return {
+    kind: "remove-owned-change",
+    id: input.actionId,
+    riskClass: "reversible",
+    requiresNetwork: false,
+    requiresElevation: false,
+    affectedPaths: [input.target.configPath],
+    affectedProcesses: [],
+    preconditions: [`the ${input.providerId} hook still matches the entry Token Harness wrote`],
+    postconditions: [
+      `${input.target.eventName} no longer carries the Token Harness ${input.providerId} hook`
+    ],
+    rollbackData: "file-snapshot",
+    explanation: `Remove the ${input.providerId} hook from ${input.target.harness.displayName}`,
+    path: input.target.configPath,
+    reverses: input.installActionId,
+    target: {
+      kind: "owned-json-entry",
+      path: input.target.configPath,
+      pointer: input.target.pointer,
+      placement: "array-element",
+      valueDigest: jsonValueDigest(commandHookEntry(input.target.matcher, input.command))
+    }
+  };
+}
+var init_hook_plan = __esm({
+  "packages/adapters/dist/src/providers/hook-plan.js"() {
+    "use strict";
+    init_src();
+  }
+});
+
 // packages/adapters/dist/src/providers/harnesstrim.js
 function identifiesCommand(command) {
   return HOOK_COMMAND_PATTERN.test(command) || PLUGIN_MODULE_PATTERN2.test(command);
@@ -17037,22 +17403,27 @@ async function verify6(context) {
       continue;
     const text3 = new TextDecoder().decode(await context.fs.readFile(path));
     const lines = text3.split("\n").filter((line) => line.trim() !== "");
-    const last = lines.at(-1);
-    const parsed = last === void 0 ? null : parseTrimEvent(last);
-    if (parsed === null)
+    const parsed = lines.map(parseTrimEvent).filter((event) => event !== null).filter((event) => event.harness === "codex" || event.harness === "claude");
+    const latest = parsed.at(-1);
+    if (latest === void 0)
       continue;
-    receipt = { observedAt: parsed.ts, operations: lines.length, source: path };
+    const reductions = parsed.filter((event) => !event.reductionFailed && event.afterChars < event.beforeChars && event.changed !== false);
+    receipt = {
+      observedAt: latest.ts,
+      operations: reductions.length,
+      attempts: parsed.length,
+      source: path
+    };
     break;
   }
   checks.push({
     id: "canary-intercepted",
-    status: receipt === null ? "not-exercised" : "pass",
-    summary: receipt === null ? "no telemetry file yet, so nothing has been observed" : `${String(receipt.operations)} reductions recorded, most recently ${receipt.observedAt}`,
-    // A recorded reduction is the provider witnessing its own interception, which is what `canary`
-    // means in RFC 0007's tier table.
-    achievedTier: receipt === null ? null : "canary",
+    status: receipt === null ? "not-exercised" : receipt.operations === 0 ? "info" : "pass",
+    summary: receipt === null ? "no telemetry file yet, so nothing has been observed" : receipt.operations === 0 ? `HarnessTrim observed ${String(receipt.attempts ?? 0)} Claude/Codex outputs, but none was reduced; latest attempt ${receipt.observedAt}` : `${String(receipt.operations)} applied reductions recorded from ${String(receipt.attempts ?? receipt.operations)} Claude/Codex outputs, most recently ${receipt.observedAt}`,
+    // Configured hooks and pass-through receipts do not prove that HarnessTrim shortened output.
+    achievedTier: receipt === null || receipt.operations === 0 ? null : "canary",
     evidence: [],
-    remediation: receipt !== null ? null : runtimeConfigured.length > 0 ? "Enable telemetry on the runtime integration, then use it on an output it can reduce." : "A skills-only setup does not write reduction telemetry. Configure a compatible measurement path before expecting agent-attributed results."
+    remediation: receipt !== null && receipt.operations > 0 ? null : receipt !== null ? "Run a canary that produces output the installed HarnessTrim reducer can shorten, then verify again." : runtimeConfigured.length > 0 ? "Enable telemetry on the runtime integration, then use it on an output it can reduce." : "A skills-only setup does not write reduction telemetry. Configure a compatible measurement path before expecting agent-attributed results."
   });
   const agents = context.fs.join(context.projectRoot, "AGENTS.md");
   if (await context.fs.stat(agents) !== null) {
@@ -17294,7 +17665,7 @@ async function harnessTrimSkillsConfigured(context, harness, capabilities) {
 }
 async function configuredHarnessesForHarnessTrim(context, capabilities) {
   const configured = new Set(harnessesWiredToHarnessTrim(context.harnessConfigs));
-  for (const harness of [CLAUDE2, CODEX2]) {
+  for (const harness of [CLAUDE3, CODEX3]) {
     if (await harnessTrimSkillsConfigured(context, harness, capabilities))
       configured.add(harness);
   }
@@ -17338,6 +17709,28 @@ async function plan(context, request) {
         mode: null
       }
     })));
+    for (const owned of request.ownership) {
+      if (owned.owner !== HARNESSTRIM2 || owned.scope.capability !== "shell.output.reduce" || owned.scope.interceptionPoint !== "post-tool-use" || owned.scope.harness !== CLAUDE3 && owned.scope.harness !== CODEX3) {
+        continue;
+      }
+      const harness = request.harnesses.find((entry) => entry.id === owned.scope.harness);
+      if (harness === void 0)
+        continue;
+      const target = commandHookTarget(context, harness, owned.scope.interceptionPoint, owned.scope.toolFamily);
+      if (target === null)
+        continue;
+      const existing = context.harnessConfigs.filter((config) => config.harnessId === harness.id && config.configPath === target.configPath && config.interceptionPoints.includes(target.scopeId)).flatMap((config) => config.hookCommands ?? []).find((entry) => entry.eventName === target.eventName && entry.matcher === target.matcher && isHarnessTrimHookFor(entry.command, harness.id));
+      if (existing === void 0)
+        continue;
+      const actionKey = digestText(target.configPath).slice(7, 15);
+      actions2.push(removeCommandHookAction({
+        target,
+        providerId: HARNESSTRIM2,
+        actionId: `harnesstrim-${harness.id}-hook-remove-${actionKey}`,
+        installActionId: `harnesstrim-${harness.id}-hook-${actionKey}`,
+        command: existing.command
+      }));
+    }
     return {
       providerId: HARNESSTRIM2,
       desiredState: "absent",
@@ -17354,6 +17747,7 @@ async function plan(context, request) {
     };
   }
   const actions = [];
+  const diagnostics = [];
   const plannedHarnesses = [];
   for (const harness of targets) {
     const review = reviews[harness];
@@ -17401,24 +17795,132 @@ async function plan(context, request) {
     });
     plannedHarnesses.push(harnessId(harness));
   }
+  for (const owned of request.ownership) {
+    if (owned.owner !== HARNESSTRIM2 || owned.scope.capability !== "shell.output.reduce" || owned.scope.interceptionPoint !== "post-tool-use" || owned.scope.harness !== CLAUDE3 && owned.scope.harness !== CODEX3) {
+      continue;
+    }
+    const harness = request.harnesses.find((entry) => entry.id === owned.scope.harness);
+    if (harness === void 0)
+      continue;
+    const target = commandHookTarget(context, harness, owned.scope.interceptionPoint, owned.scope.toolFamily);
+    if (target === null)
+      continue;
+    const metricsPath = ".harnesstrim/metrics.jsonl";
+    const command = `harnesstrim hook ${harness.id} --metrics ${metricsPath}`;
+    const existing = context.harnessConfigs.filter((config) => config.harnessId === harness.id && config.configPath === target.configPath && config.interceptionPoints.includes(target.scopeId)).flatMap((config) => config.hookCommands ?? []).filter((entry) => entry.eventName === target.eventName && entry.matcher !== null && matcherCoversFamily2(entry.matcher, target.toolFamily) && isHarnessTrimHookFor(entry.command, harness.id));
+    const correctlyMonitored = existing.some((entry) => commandHasMetricsPath(entry.command, metricsPath));
+    if (correctlyMonitored) {
+      plannedHarnesses.push(harness.id);
+      continue;
+    }
+    const upgradable = existing.find((entry) => !hasMetricsArgument(entry.command));
+    if (upgradable !== void 0) {
+      const upgraded = `${upgradable.command.trim()} --metrics ${metricsPath}`;
+      actions.push(replaceHookCommandAction({
+        target,
+        commandPointer: upgradable.commandPointer,
+        currentCommand: upgradable.command,
+        nextCommand: upgraded,
+        actionId: `harnesstrim-${harness.id}-metrics-${digestText(target.configPath).slice(7, 15)}`
+      }));
+      plannedHarnesses.push(harness.id);
+      continue;
+    }
+    if (existing.length > 0) {
+      diagnostics.push(diagnostic({
+        severity: "warning",
+        code: "harnesstrim-metrics-path-needs-review",
+        subject: harness.id,
+        message: `An existing HarnessTrim hook on ${harness.displayName} uses a different telemetry path or custom command and was left unchanged`,
+        path: target.configPath,
+        remediation: `Set its --metrics path to ${metricsPath}, or review the command before changing it`
+      }));
+      continue;
+    }
+    const actionId2 = `harnesstrim-${harness.id}-hook-${digestText(target.configPath).slice(7, 15)}`;
+    actions.push(appendCommandHookAction({
+      target,
+      providerId: HARNESSTRIM2,
+      actionId: actionId2,
+      command,
+      explanation: `Register HarnessTrim after ${harness.displayName} Bash commands and record reductions in ${metricsPath}${codexActivationNote(harness.id)}`
+    }));
+    plannedHarnesses.push(harness.id);
+  }
   return {
     providerId: HARNESSTRIM2,
     desiredState: "configured",
     actions,
-    targetHarnesses: plannedHarnesses
+    diagnostics,
+    targetHarnesses: [...new Set(plannedHarnesses)]
+  };
+}
+function isHarnessTrimHookFor(command, harness) {
+  const match = HARNESSTRIM_HOOK_COMMAND.exec(command.trim());
+  return match?.[1]?.toLowerCase() === harness;
+}
+function hasMetricsArgument(command) {
+  return /(?:^|\s)--metrics(?:\s|=)/i.test(command);
+}
+function commandHasMetricsPath(command, metricsPath) {
+  const match = /(?:^|\s)--metrics(?:=|\s+)(?:"([^"]+)"|'([^']+)'|([^\s]+))/i.exec(command);
+  const observed = match?.[1] ?? match?.[2] ?? match?.[3];
+  return observed?.replaceAll("\\", "/") === metricsPath;
+}
+function matcherCoversFamily2(matcher, family) {
+  if (matcher === family)
+    return true;
+  try {
+    return new RegExp(matcher).test(family);
+  } catch {
+    return false;
+  }
+}
+function replaceHookCommandAction(input) {
+  return {
+    kind: "merge-json",
+    id: input.actionId,
+    riskClass: "reversible",
+    requiresNetwork: false,
+    requiresElevation: false,
+    affectedPaths: [input.target.configPath],
+    affectedProcesses: [],
+    preconditions: [
+      `${input.commandPointer} still contains the HarnessTrim command Token Harness inspected`
+    ],
+    postconditions: [
+      `${input.commandPointer} records HarnessTrim reductions to .harnesstrim/metrics.jsonl`
+    ],
+    rollbackData: "file-snapshot",
+    explanation: `Enable per-harness HarnessTrim telemetry for ${input.target.harness.displayName}${codexActivationNote(input.target.harnessId)}`,
+    path: input.target.configPath,
+    ownedPointers: [input.commandPointer],
+    operations: [
+      {
+        kind: "set",
+        pointer: input.commandPointer,
+        value: input.nextCommand,
+        expectedValueDigest: jsonValueDigest(input.currentCommand)
+      }
+    ],
+    createIfMissing: false
   };
 }
-var HARNESSTRIM2, CLAUDE2, HERMES2, CODEX2, PI2, SKILLS_UPSTREAM, RUNTIME_SKILL_DIGESTS_MINIMUM, SKILL_ARTIFACT_DIGESTS, SKILL_ARTIFACTS, OPENCODE2, MODE_CARRYING_HARNESSES, HOOK_COMMAND_PATTERN, PLUGIN_MODULE_PATTERN2, PI_EXTENSION_PATTERN, MANIFEST6, SKILLS_INSTALL, TESTED_UPSTREAM, TESTED_VERSIONS, SURFACE_ANCHORS, VERSION_PATTERN6, harnesstrimAdapter;
+function codexActivationNote(harness) {
+  return harness === CODEX3 ? ". Codex must enable and trust this hook in its native UI; Token Harness can register it but cannot grant trust" : "";
+}
+var HARNESSTRIM2, CLAUDE3, HERMES2, CODEX3, PI2, SKILLS_UPSTREAM, RUNTIME_SKILL_DIGESTS_MINIMUM, SKILL_ARTIFACT_DIGESTS, SKILL_ARTIFACTS, OPENCODE2, MODE_CARRYING_HARNESSES, HOOK_COMMAND_PATTERN, PLUGIN_MODULE_PATTERN2, PI_EXTENSION_PATTERN, MANIFEST6, SKILLS_INSTALL, TESTED_UPSTREAM, TESTED_VERSIONS, SURFACE_ANCHORS, VERSION_PATTERN6, HARNESSTRIM_HOOK_COMMAND, harnesstrimAdapter;
 var init_harnesstrim = __esm({
   "packages/adapters/dist/src/providers/harnesstrim.js"() {
     "use strict";
     init_src();
+    init_hook_plan();
     HARNESSTRIM2 = providerId("harnesstrim");
-    CLAUDE2 = harnessId("claude");
+    CLAUDE3 = harnessId("claude");
     HERMES2 = harnessId("hermes");
-    CODEX2 = harnessId("codex");
+    CODEX3 = harnessId("codex");
     PI2 = harnessId("pi");
-    SKILLS_UPSTREAM = "0.0.7";
+    SKILLS_UPSTREAM = "0.3.1";
     RUNTIME_SKILL_DIGESTS_MINIMUM = "0.2.0";
     SKILL_ARTIFACT_DIGESTS = {
       "compact-handoff/SKILL.md": "sha256:0efbf35581c559359e755b204778b64a289dab4d20dadc1cba3d5b5c995b5f01",
@@ -17452,7 +17954,7 @@ var init_harnesstrim = __esm({
         {
           capability: "shell.output.reduce",
           mode: "exclusive",
-          harnesses: [CLAUDE2, CODEX2],
+          harnesses: [CLAUDE3, CODEX3],
           // `HOOK_MATCHER = "Bash"` and `CODEX_HOOK_MATCHER = "^Bash$"`, per RFC 0003 §The table is an
           // intent. One surface each, and no selector narrows it.
           surfaces: [{ toolFamily: "Bash", interceptionPoint: "post-tool-use" }],
@@ -17482,14 +17984,14 @@ var init_harnesstrim = __esm({
       ],
       harnesses: [
         {
-          harness: CLAUDE2,
-          testedVersions: { minimum: "2.0.0", maximum: "2.1.212" },
-          verificationTier: "config-only"
+          harness: CLAUDE3,
+          testedVersions: { minimum: "2.1.274", maximum: "2.1.274" },
+          verificationTier: "canary"
         },
         {
-          harness: CODEX2,
-          testedVersions: { minimum: "0.146.0", maximum: "0.146.0" },
-          verificationTier: "config-only"
+          harness: CODEX3,
+          testedVersions: { minimum: "0.159.0", maximum: "0.159.0" },
+          verificationTier: "canary"
         },
         {
           harness: OPENCODE2,
@@ -17531,11 +18033,9 @@ var init_harnesstrim = __esm({
       /**
        * One review per harness — PLAN §15 item 46b.
        *
-       * Codex was observed at `0.1.0`: `harnesstrim install codex <dir> --apply --no-instructions`
-       * writes the same seven skill artifacts as the Claude invocation, byte for byte — the digests
-       * below are shared because the files are the same files — under `.codex/skills/` instead, and
-       * skips `AGENTS.md` exactly as the Claude one skips `CLAUDE.md`. What differs is the boundary and
-       * the protected paths, which is precisely why one review could not describe both.
+       * HarnessTrim 0.3.1 declares the same seven skill artifacts on Claude and Codex, byte for byte.
+       * The delegated invocation omits runtime hooks and instructions; Token Harness adds the
+       * versioned PostToolUse hook through the harness adapter and owns that exact JSON entry.
        *
        * OpenCode is absent on purpose. Its installer writes `.opencode/plugin/harnesstrim.ts` and
        * `.opencode/package.json` *and runs an npm install*, so the containment boundary would hold a
@@ -17570,13 +18070,14 @@ var init_harnesstrim = __esm({
         args: ["--no-instructions"]
       }
     };
-    TESTED_UPSTREAM = "0.2.1";
+    TESTED_UPSTREAM = "0.3.1";
     TESTED_VERSIONS = { minimum: "0.0.5", maximum: TESTED_UPSTREAM };
     SURFACE_ANCHORS = {
       "post-tool-use": "PostToolUse",
       "tool-execute-after": "tool.execute.after"
     };
     VERSION_PATTERN6 = /(\d+\.\d+\.\d+(?:[-+][0-9A-Za-z.-]+)?)/;
+    HARNESSTRIM_HOOK_COMMAND = /^(?:"?[^"\n]*[\\/]?harnesstrim(?:\.cmd|\.exe)?"?|harnesstrim(?:\.cmd|\.exe)?)\s+hook\s+(claude|codex)(?:\s+(.*))?$/i;
     harnesstrimAdapter = {
       manifest: MANIFEST6,
       detect: detect6,
@@ -17590,7 +18091,7 @@ var init_harnesstrim = __esm({
 });
 
 // packages/adapters/dist/src/providers/rtk-plan.js
-function hookListPointer(eventName) {
+function hookListPointer2(eventName) {
   return `hooks.${eventName.replace(/\./g, "\\.")}`;
 }
 function hookEntryFor(harnessId2, matcher, restoreNativeHookOnUninstall = false) {
@@ -17607,7 +18108,7 @@ function hookEntryFor(harnessId2, matcher, restoreNativeHookOnUninstall = false)
 function hookActivationNote(target) {
   return target.harness.id === "codex" ? ". After applying, manually enable and trust this hook in Codex; Token Harness writes hooks.json but cannot activate the hook or grant trust" : "";
 }
-function matcherCoversFamily2(matcher, family) {
+function matcherCoversFamily3(matcher, family) {
   if (matcher === family)
     return true;
   try {
@@ -17637,12 +18138,13 @@ function planTargets(context, request) {
       scope: owned.scope,
       harness,
       eventName: point.eventName,
+      matcher: hookMatcherForFamily(harness, owned.scope.toolFamily),
       configPath
     });
   }
   if (context.facts.os === "windows") {
     for (const target of [...targets.values()]) {
-      if (target.harness.id !== CLAUDE3 || target.scope.toolFamily !== BASH)
+      if (target.harness.id !== CLAUDE4 || target.scope.toolFamily !== BASH)
         continue;
       if (!target.harness.toolFamilies.some((family) => family.id === POWERSHELL))
         continue;
@@ -17651,14 +18153,15 @@ function planTargets(context, request) {
         continue;
       targets.set(key, {
         ...target,
-        scope: { ...target.scope, toolFamily: POWERSHELL }
+        scope: { ...target.scope, toolFamily: POWERSHELL },
+        matcher: hookMatcherForFamily(target.harness, POWERSHELL)
       });
     }
   }
   return [...targets.values()];
 }
 function alreadyRegistered(context, target, allowRegexCoverage) {
-  return context.harnessConfigs.some((config) => config.harnessId === target.harness.id && config.configPath === target.configPath && config.interceptionPoints.includes(target.scope.interceptionPoint) && config.matchers.some((matcher) => allowRegexCoverage ? matcherCoversFamily2(matcher, target.scope.toolFamily) : matcher === target.scope.toolFamily) && (config.hookCommands ?? []).some((entry) => entry.eventName === target.eventName && entry.matcher !== null && (allowRegexCoverage ? matcherCoversFamily2(entry.matcher, target.scope.toolFamily) : entry.matcher === target.scope.toolFamily) && isRtkAttributionCommand(entry.command, target.harness.id)));
+  return context.harnessConfigs.some((config) => config.harnessId === target.harness.id && config.configPath === target.configPath && config.interceptionPoints.includes(target.scope.interceptionPoint) && config.matchers.some((matcher) => allowRegexCoverage ? matcherCoversFamily3(matcher, target.scope.toolFamily) : matcher === target.scope.toolFamily) && (config.hookCommands ?? []).some((entry) => entry.eventName === target.eventName && entry.matcher !== null && (allowRegexCoverage ? matcherCoversFamily3(entry.matcher, target.scope.toolFamily) : entry.matcher === target.matcher) && isRtkAttributionCommand(entry.command, target.harness.id)));
 }
 function isRtkAttributionCommand(command, harness) {
   return new RegExp(`^token-harness __internal-rtk-hook ${harness}(?: --restore-rtk)?$`, "i").test(command.trim());
@@ -17671,7 +18174,7 @@ function deterministicId(parts) {
   return digest.slice(digest.indexOf(":") + 1, digest.indexOf(":") + 9);
 }
 function hookAction(target, entry) {
-  const pointer = hookListPointer(target.eventName);
+  const pointer = hookListPointer2(target.eventName);
   return {
     kind: "merge-json",
     id: deterministicId([
@@ -17773,7 +18276,7 @@ function restoreNativeHookAction(target, current) {
   };
 }
 function removalAction(target, entry) {
-  const pointer = hookListPointer(target.eventName);
+  const pointer = hookListPointer2(target.eventName);
   const reverses = deterministicId([
     "rtk",
     "hook",
@@ -17857,13 +18360,13 @@ function buildRtkPlan(input) {
   const targetHarnesses = [...new Set(targets.map((target) => target.harness.id))];
   if (request.desiredState === "absent") {
     for (const target of targets) {
-      const existing = context.harnessConfigs.flatMap((config) => config.hookCommands ?? []).find((entry) => entry.eventName === target.eventName && entry.matcher === target.scope.toolFamily && isRtkAttributionCommand(entry.command, target.harness.id));
+      const existing = context.harnessConfigs.flatMap((config) => config.hookCommands ?? []).find((entry) => entry.eventName === target.eventName && entry.matcher === target.matcher && isRtkAttributionCommand(entry.command, target.harness.id));
       if (existing === void 0)
         continue;
       if (existing.command.endsWith(" --restore-rtk")) {
         actions.push(restoreNativeHookAction(target, existing));
       } else {
-        actions.push(removalAction(target, hookEntryFor(target.harness.id, target.scope.toolFamily)));
+        actions.push(removalAction(target, hookEntryFor(target.harness.id, target.matcher)));
       }
     }
     return {
@@ -17899,7 +18402,7 @@ function buildRtkPlan(input) {
   for (const target of targets) {
     if (alreadyRegistered(context, target, true))
       continue;
-    const matchingEntries = context.harnessConfigs.filter((config) => config.harnessId === target.harness.id && config.configPath === target.configPath && config.interceptionPoints.includes(target.scope.interceptionPoint)).flatMap((config) => config.hookCommands ?? []).filter((entry) => entry.eventName === target.eventName && entry.matcher !== null && matcherCoversFamily2(entry.matcher, target.scope.toolFamily) && input.identifiesCommand(entry.command));
+    const matchingEntries = context.harnessConfigs.filter((config) => config.harnessId === target.harness.id && config.configPath === target.configPath && config.interceptionPoints.includes(target.scope.interceptionPoint)).flatMap((config) => config.hookCommands ?? []).filter((entry) => entry.eventName === target.eventName && entry.matcher !== null && matcherCoversFamily3(entry.matcher, target.scope.toolFamily) && input.identifiesCommand(entry.command));
     const native = matchingEntries.find((entry) => isCanonicalNativeHook(entry.command, target.harness.id));
     if (native !== void 0) {
       if (!migratedPointers.has(native.commandPointer)) {
@@ -17931,7 +18434,7 @@ function buildRtkPlan(input) {
       }));
       continue;
     }
-    actions.push(hookAction(target, hookEntryFor(target.harness.id, target.scope.toolFamily)));
+    actions.push(hookAction(target, hookEntryFor(target.harness.id, target.matcher)));
   }
   return {
     providerId: "rtk",
@@ -17941,14 +18444,15 @@ function buildRtkPlan(input) {
     targetHarnesses: actions.length === 0 ? [] : targetHarnesses
   };
 }
-var RTK_HOOK_PROXY_COMMAND, RTK_NATIVE_HOOK_PREFIX, CLAUDE3, BASH, POWERSHELL;
+var RTK_HOOK_PROXY_COMMAND, RTK_NATIVE_HOOK_PREFIX, CLAUDE4, BASH, POWERSHELL;
 var init_rtk_plan = __esm({
   "packages/adapters/dist/src/providers/rtk-plan.js"() {
     "use strict";
     init_src();
+    init_hook_plan();
     RTK_HOOK_PROXY_COMMAND = "token-harness __internal-rtk-hook";
     RTK_NATIVE_HOOK_PREFIX = "rtk hook";
-    CLAUDE3 = "claude";
+    CLAUDE4 = "claude";
     BASH = "Bash";
     POWERSHELL = "PowerShell";
   }
@@ -18051,12 +18555,12 @@ async function detect7(context) {
     }));
   }
   const codexHookSupported = version3.version === RTK_CODEX_HOOK_VERSION;
-  const codexConfiguredWithoutHookSupport = configured.includes(CODEX3) && !codexHookSupported;
+  const codexConfiguredWithoutHookSupport = configured.includes(CODEX4) && !codexHookSupported;
   if (codexConfiguredWithoutHookSupport) {
     warnings.push(diagnostic({
       severity: "error",
       code: "rtk-codex-hook-unsupported",
-      subject: CODEX3,
+      subject: CODEX4,
       message: `RTK ${String(version3.version)} does not provide the Codex hook; its configuration entry cannot capture commands`,
       remediation: `Upgrade RTK to ${RTK_CODEX_HOOK_VERSION}, then refresh and apply the attribution plan`
     }));
@@ -18106,7 +18610,7 @@ async function detect7(context) {
      * its integration is a plugin module installed by `rtk init -g --opencode`, which this build
      * deliberately does not delegate without a reviewed write set.
      */
-    assignableHarnesses: version3.version === null || codexHookSupported ? [CLAUDE4, CODEX3] : [CLAUDE4],
+    assignableHarnesses: version3.version === null || codexHookSupported ? [CLAUDE5, CODEX4] : [CLAUDE5],
     evidence: evidenceItems,
     warnings
   };
@@ -18124,7 +18628,7 @@ async function verify7(context) {
     remediation: version3.version === null ? "Install RTK, or add it to PATH" : null
   });
   const configured = harnessesWiredToRtk(context.harnessConfigs);
-  const configuredSupported = configured.filter((harness) => harness === CLAUDE4 || harness === CODEX3 && version3.version === RTK_CODEX_HOOK_VERSION);
+  const configuredSupported = configured.filter((harness) => harness === CLAUDE5 || harness === CODEX4 && version3.version === RTK_CODEX_HOOK_VERSION);
   checks.push({
     id: "hook-registered",
     status: configuredSupported.length > 0 ? "pass" : configured.length > 0 ? "fail" : "not-exercised",
@@ -18138,8 +18642,8 @@ async function verify7(context) {
   for (const harness of TRACKED_HARNESSES) {
     if (!configured.includes(harness))
       continue;
-    const label = harness === CLAUDE4 ? "Claude Code" : "Codex";
-    const supported = harness !== CODEX3 || version3.version === RTK_CODEX_HOOK_VERSION;
+    const label = harness === CLAUDE5 ? "Claude Code" : "Codex";
+    const supported = harness !== CODEX4 || version3.version === RTK_CODEX_HOOK_VERSION;
     if (!supported) {
       checks.push({
         id: `rtk-attribution-${harness}`,
@@ -18566,17 +19070,17 @@ async function plan2(context, request) {
     hookProxyAvailable
   });
 }
-var RTK2, CLAUDE4, CODEX3, OPENCODE3, TRACKED_HARNESSES, RTK_CODEX_HOOK_VERSION, MANIFEST7, TESTED_VERSIONS2, VERSION_PATTERN7, HOOK_COMMAND_PATTERN2, PLUGIN_MODULE_PATTERN3, HARNESS_ACTIVITY_QUERY, STALE_RECEIPT_DAYS, HISTORY_QUERY, GENERATION_QUERY, IMPORT_BATCH_SIZE, SOURCE_LABEL, rtkAdapter;
+var RTK2, CLAUDE5, CODEX4, OPENCODE3, TRACKED_HARNESSES, RTK_CODEX_HOOK_VERSION, MANIFEST7, TESTED_VERSIONS2, VERSION_PATTERN7, HOOK_COMMAND_PATTERN2, PLUGIN_MODULE_PATTERN3, HARNESS_ACTIVITY_QUERY, STALE_RECEIPT_DAYS, HISTORY_QUERY, GENERATION_QUERY, IMPORT_BATCH_SIZE, SOURCE_LABEL, rtkAdapter;
 var init_rtk = __esm({
   "packages/adapters/dist/src/providers/rtk.js"() {
     "use strict";
     init_src();
     init_rtk_plan();
     RTK2 = providerId("rtk");
-    CLAUDE4 = harnessId("claude");
-    CODEX3 = harnessId("codex");
+    CLAUDE5 = harnessId("claude");
+    CODEX4 = harnessId("codex");
     OPENCODE3 = harnessId("opencode");
-    TRACKED_HARNESSES = [CLAUDE4, CODEX3];
+    TRACKED_HARNESSES = [CLAUDE5, CODEX4];
     RTK_CODEX_HOOK_VERSION = "0.50.0";
     MANIFEST7 = {
       schemaVersion: MANIFEST_SCHEMA_VERSION,
@@ -18590,7 +19094,7 @@ var init_rtk = __esm({
         {
           capability: "shell.command.rewrite",
           mode: "exclusive",
-          harnesses: [CLAUDE4],
+          harnesses: [CLAUDE5],
           // The portable resolver surface remains Bash. Windows PowerShell coverage is added by
           // the planner only on Windows, because ProviderManifest capabilities are not platform-scoped.
           // The native processor and that Windows-only plan path are covered by the live fixture below.
@@ -18603,7 +19107,7 @@ var init_rtk = __esm({
         {
           capability: "shell.output.reduce",
           mode: "exclusive",
-          harnesses: [CLAUDE4],
+          harnesses: [CLAUDE5],
           // Same portable Bash surface. On Windows the planner adds PowerShell as a platform-only
           // companion matcher; the live fixture below proves the same native processor handles both.
           surfaces: [{ toolFamily: "Bash", interceptionPoint: "pre-tool-use" }],
@@ -18622,7 +19126,7 @@ var init_rtk = __esm({
         {
           capability: "shell.command.rewrite",
           mode: "exclusive",
-          harnesses: [CODEX3],
+          harnesses: [CODEX4],
           surfaces: [{ toolFamily: "Bash", interceptionPoint: "pre-tool-use" }],
           evidence: {
             sourceReference: "docs/spikes/rtk-codex-upstream-contract.md",
@@ -18632,7 +19136,7 @@ var init_rtk = __esm({
         {
           capability: "shell.output.reduce",
           mode: "exclusive",
-          harnesses: [CODEX3],
+          harnesses: [CODEX4],
           surfaces: [{ toolFamily: "Bash", interceptionPoint: "pre-tool-use" }],
           evidence: {
             sourceReference: "docs/spikes/rtk-codex-upstream-contract.md",
@@ -18691,15 +19195,14 @@ var init_rtk = __esm({
       ],
       harnesses: [
         {
-          harness: CLAUDE4,
-          testedVersions: { minimum: "2.0.0", maximum: "2.1.251" },
+          harness: CLAUDE5,
+          testedVersions: { minimum: "2.1.274", maximum: "2.1.274" },
           verificationTier: "canary"
         },
         {
-          harness: CODEX3,
-          // RTK added its native Codex PreToolUse rewriter in 0.50.0. Earlier releases only wrote
-          // prompt instructions; a hooks.json entry alone did not activate it.
-          testedVersions: { minimum: "0.146.0", maximum: "0.146.0" },
+          harness: CODEX4,
+          // RTK 0.50.0's native hook was exercised against the installed Codex 0.159.0 schema.
+          testedVersions: { minimum: "0.159.0", maximum: "0.159.0" },
           verificationTier: "canary"
         },
         {
@@ -20206,7 +20709,7 @@ async function mcptoonDetection(context) {
   const observation = await observeMcptoonManagedRuntime(context);
   const configuredHarnesses = [];
   if (observation.ready) {
-    for (const harness of [CLAUDE5, CODEX4]) {
+    for (const harness of [CLAUDE6, CODEX5]) {
       const verification = await verifyMcptoonManagedActivation(context, harness);
       if (verification.state === "verified")
         configuredHarnesses.push(harness);
@@ -20239,7 +20742,7 @@ async function mcptoonDetection(context) {
     unmanagedHarnessesConfigured: [],
     supportsUnmanagedHarnesses: false,
     managedByTokenHarness: false,
-    assignableHarnesses: observation.ready || canInstall ? [CLAUDE5, CODEX4] : [],
+    assignableHarnesses: observation.ready || canInstall ? [CLAUDE6, CODEX5] : [],
     evidence: [],
     warnings
   };
@@ -20248,7 +20751,7 @@ async function gitnexusDetection(context) {
   const observation = await observeGitNexusManagedRuntime(context);
   const configuredHarnesses = [];
   if (observation.ready) {
-    for (const harness of [CLAUDE5, CODEX4]) {
+    for (const harness of [CLAUDE6, CODEX5]) {
       const verification = await verifyGitNexusManagedMcpActivation(context, harness);
       if (verification.state === "verified")
         configuredHarnesses.push(harness);
@@ -20281,7 +20784,7 @@ async function gitnexusDetection(context) {
     unmanagedHarnessesConfigured: [],
     supportsUnmanagedHarnesses: false,
     managedByTokenHarness: false,
-    assignableHarnesses: observation.ready || canInstall ? [CLAUDE5, CODEX4] : [],
+    assignableHarnesses: observation.ready || canInstall ? [CLAUDE6, CODEX5] : [],
     evidence: [],
     warnings
   };
@@ -20289,7 +20792,7 @@ async function gitnexusDetection(context) {
 async function mcptoonVerify(context) {
   const checks = [];
   let achieved = null;
-  for (const harness of [CLAUDE5, CODEX4]) {
+  for (const harness of [CLAUDE6, CODEX5]) {
     const result6 = await verifyMcptoonManagedActivation(context, harness);
     if (result6.state === "verified")
       achieved = "config-only";
@@ -20316,7 +20819,7 @@ async function mcptoonVerify(context) {
 async function gitnexusVerify(context) {
   const checks = [];
   let achieved = null;
-  for (const harness of [CLAUDE5, CODEX4]) {
+  for (const harness of [CLAUDE6, CODEX5]) {
     const result6 = await verifyGitNexusManagedMcpActivation(context, harness);
     if (result6.state === "verified")
       achieved = "config-only";
@@ -20355,7 +20858,7 @@ async function mcptoonPlan(context, request) {
   const actions = [];
   const targets = [];
   for (const harness of request.harnesses.map((item) => item.id)) {
-    if (harness !== CLAUDE5 && harness !== CODEX4)
+    if (harness !== CLAUDE6 && harness !== CODEX5)
       continue;
     const plan6 = await planMcptoonManagedActivation(context, harness);
     if (plan6.actions.length === 0)
@@ -20382,7 +20885,7 @@ async function gitnexusPlan(context, request) {
   const actions = [];
   const targets = [];
   for (const harness of request.harnesses.map((item) => item.id)) {
-    if (harness !== CLAUDE5 && harness !== CODEX4)
+    if (harness !== CLAUDE6 && harness !== CODEX5)
       continue;
     const plan6 = await planGitNexusManagedMcpActivation(context, harness);
     if (plan6.actions.length === 0)
@@ -20397,7 +20900,7 @@ async function gitnexusPlan(context, request) {
     targetHarnesses: [...new Set(targets)]
   };
 }
-var MCPTOON, GITNEXUS, HEADROOM, CLAUDE5, CODEX4, MCPTOON_MANIFEST, GITNEXUS_MANIFEST, HEADROOM_MANIFEST, mcptoonAdapter, gitnexusAdapter;
+var MCPTOON, GITNEXUS, HEADROOM, CLAUDE6, CODEX5, MCPTOON_MANIFEST, GITNEXUS_MANIFEST, HEADROOM_MANIFEST, mcptoonAdapter, gitnexusAdapter;
 var init_managed_optimization_tools = __esm({
   "packages/adapters/dist/src/providers/managed-optimization-tools.js"() {
     "use strict";
@@ -20410,8 +20913,8 @@ var init_managed_optimization_tools = __esm({
     MCPTOON = providerId("mcptoon");
     GITNEXUS = providerId("gitnexus");
     HEADROOM = providerId("headroom");
-    CLAUDE5 = harnessId("claude");
-    CODEX4 = harnessId("codex");
+    CLAUDE6 = harnessId("claude");
+    CODEX5 = harnessId("codex");
     MCPTOON_MANIFEST = {
       schemaVersion: MANIFEST_SCHEMA_VERSION,
       id: MCPTOON,
@@ -20424,12 +20927,12 @@ var init_managed_optimization_tools = __esm({
       platforms: platforms(),
       harnesses: [
         {
-          harness: CLAUDE5,
+          harness: CLAUDE6,
           testedVersions: { minimum: "2.1.269", maximum: "2.1.269" },
           verificationTier: "config-only"
         },
         {
-          harness: CODEX4,
+          harness: CODEX5,
           testedVersions: { minimum: "0.152.1", maximum: "0.153.0" },
           verificationTier: "config-only"
         }
@@ -20463,12 +20966,12 @@ var init_managed_optimization_tools = __esm({
       platforms: platforms(),
       harnesses: [
         {
-          harness: CLAUDE5,
+          harness: CLAUDE6,
           testedVersions: { minimum: "2.1.269", maximum: "2.1.269" },
           verificationTier: "config-only"
         },
         {
-          harness: CODEX4,
+          harness: CODEX5,
           testedVersions: { minimum: "0.153.0", maximum: "0.153.0" },
           verificationTier: "config-only"
         }
@@ -20542,7 +21045,7 @@ async function plan3(context, request) {
   const actions = [];
   const targets = [];
   for (const harness of request.harnesses.map((item) => item.id)) {
-    if (harness !== CLAUDE6 && harness !== CODEX5)
+    if (harness !== CLAUDE7 && harness !== CODEX6)
       continue;
     const target = gitnexusOwnedArtifact(context, harness);
     if (target === null)
@@ -20559,15 +21062,15 @@ async function plan3(context, request) {
     targetHarnesses: [...new Set(targets)]
   };
 }
-var CLAUDE6, CODEX5, gitnexusManagedProviderAdapter;
+var CLAUDE7, CODEX6, gitnexusManagedProviderAdapter;
 var init_gitnexus_provider = __esm({
   "packages/adapters/dist/src/providers/gitnexus-provider.js"() {
     "use strict";
     init_src();
     init_managed_optimization_tools();
     init_gitnexus_managed();
-    CLAUDE6 = harnessId("claude");
-    CODEX5 = harnessId("codex");
+    CLAUDE7 = harnessId("claude");
+    CODEX6 = harnessId("codex");
     gitnexusManagedProviderAdapter = {
       ...gitnexusAdapter,
       plan: plan3
@@ -21085,7 +21588,7 @@ async function detect8(context) {
   const runtime = await headroomManagedMcpRuntime(context);
   const configuredHarnesses = [];
   if (runtime.ok) {
-    for (const harness of [CLAUDE7, CODEX6]) {
+    for (const harness of [CLAUDE8, CODEX7]) {
       const verification = await verifyHeadroomManagedMcpActivation(context, harness);
       if (verification.state === "verified")
         configuredHarnesses.push(harness);
@@ -21124,7 +21627,7 @@ async function detect8(context) {
     unmanagedHarnessesConfigured: [],
     supportsUnmanagedHarnesses: false,
     managedByTokenHarness: false,
-    assignableHarnesses: runtime.ok || canInstall ? [CLAUDE7, CODEX6] : [],
+    assignableHarnesses: runtime.ok || canInstall ? [CLAUDE8, CODEX7] : [],
     evidence: [],
     warnings
   };
@@ -21156,7 +21659,7 @@ function dedupe(actions) {
 }
 async function plan4(context, request) {
   if (request.desiredState === "absent") {
-    const targets = request.harnesses.map((item) => item.id).filter((id) => id === CLAUDE7 || id === CODEX6);
+    const targets = request.harnesses.map((item) => item.id).filter((id) => id === CLAUDE8 || id === CODEX7);
     return {
       providerId: HEADROOM2,
       desiredState: "absent",
@@ -21167,7 +21670,7 @@ async function plan4(context, request) {
   const actions = [];
   const targetHarnesses = [];
   for (const harness of request.harnesses.map((item) => item.id)) {
-    if (harness !== CLAUDE7 && harness !== CODEX6)
+    if (harness !== CLAUDE8 && harness !== CODEX7)
       continue;
     const activation = await planHeadroomManagedMcpActivation(context, harness);
     if (activation.actions.length === 0)
@@ -21185,7 +21688,7 @@ async function plan4(context, request) {
 async function verify8(context) {
   const checks = [];
   let achieved = null;
-  for (const harness of [CLAUDE7, CODEX6]) {
+  for (const harness of [CLAUDE8, CODEX7]) {
     const result6 = await verifyHeadroomManagedMcpActivation(context, harness);
     if (result6.state === "verified")
       achieved = "config-only";
@@ -21220,7 +21723,7 @@ function unavailableMetrics2() {
     diagnostics: []
   };
 }
-var HEADROOM2, CLAUDE7, CODEX6, HEADROOM_MANIFEST2, headroomManagedProviderAdapter;
+var HEADROOM2, CLAUDE8, CODEX7, HEADROOM_MANIFEST2, headroomManagedProviderAdapter;
 var init_headroom_provider = __esm({
   "packages/adapters/dist/src/providers/headroom-provider.js"() {
     "use strict";
@@ -21228,8 +21731,8 @@ var init_headroom_provider = __esm({
     init_headroom_candidate();
     init_headroom_managed();
     HEADROOM2 = providerId("headroom");
-    CLAUDE7 = harnessId("claude");
-    CODEX6 = harnessId("codex");
+    CLAUDE8 = harnessId("claude");
+    CODEX7 = harnessId("codex");
     HEADROOM_MANIFEST2 = {
       schemaVersion: MANIFEST_SCHEMA_VERSION,
       id: HEADROOM2,
@@ -21246,12 +21749,12 @@ var init_headroom_provider = __esm({
       ],
       harnesses: [
         {
-          harness: CLAUDE7,
+          harness: CLAUDE8,
           testedVersions: { minimum: "2.1.269", maximum: "2.1.269" },
           verificationTier: "config-only"
         },
         {
-          harness: CODEX6,
+          harness: CODEX7,
           testedVersions: { minimum: "0.153.0", maximum: "0.153.0" },
           verificationTier: "config-only"
         }
@@ -21285,7 +21788,7 @@ var init_headroom_provider = __esm({
 
 // packages/adapters/dist/src/providers/mcptoon-provider.js
 function removalAction3(context, harness) {
-  if (harness === CLAUDE8) {
+  if (harness === CLAUDE9) {
     const path = context.fs.join(context.paths.home, ".claude", "skills", "mcptoon", "SKILL.md");
     const target = {
       kind: "owned-file",
@@ -21310,7 +21813,7 @@ function removalAction3(context, harness) {
       target
     };
   }
-  if (harness === CODEX7) {
+  if (harness === CODEX8) {
     const path = context.fs.join(context.projectRoot, "AGENTS.md");
     const target = {
       kind: "owned-marker-block",
@@ -21349,18 +21852,18 @@ async function plan5(context, request) {
     providerId: mcptoonAdapter.manifest.id,
     desiredState: "absent",
     actions,
-    targetHarnesses: request.harnesses.map((item) => item.id).filter((id) => id === CLAUDE8 || id === CODEX7)
+    targetHarnesses: request.harnesses.map((item) => item.id).filter((id) => id === CLAUDE9 || id === CODEX8)
   };
 }
-var CLAUDE8, CODEX7, mcptoonManagedProviderAdapter;
+var CLAUDE9, CODEX8, mcptoonManagedProviderAdapter;
 var init_mcptoon_provider = __esm({
   "packages/adapters/dist/src/providers/mcptoon-provider.js"() {
     "use strict";
     init_src();
     init_managed_optimization_tools();
     init_mcptoon_managed();
-    CLAUDE8 = harnessId("claude");
-    CODEX7 = harnessId("codex");
+    CLAUDE9 = harnessId("claude");
+    CODEX8 = harnessId("codex");
     mcptoonManagedProviderAdapter = {
       ...mcptoonAdapter,
       plan: plan5
@@ -21489,7 +21992,19 @@ function parseHarnessTrimReceiptEnvelope(line) {
   if (schemaVersion === 1 && (typeof record6["eventId"] !== "string" || record6["eventId"].length === 0)) {
     return null;
   }
-  return { ts: record6["ts"], harness: record6["harness"] };
+  return {
+    ts: record6["ts"],
+    harness: record6["harness"],
+    beforeChars: record6["beforeChars"],
+    afterChars: record6["afterChars"],
+    changed: typeof record6["changed"] === "boolean" ? record6["changed"] : null,
+    reductionFailed: record6["reductionFailed"] === true
+  };
+}
+function provesHarnessTrimReduction(event) {
+  return !event.reductionFailed && event.afterChars < event.beforeChars && // Native receipts explicitly mark pass-throughs. Legacy receipts predate this bit, so a
+  // strictly smaller after-size remains the only available evidence that the hook reduced it.
+  event.changed !== false;
 }
 async function harnessTrimReceiptFor(context, harnessId2) {
   for (const path of metricsLocations(context)) {
@@ -21498,9 +22013,15 @@ async function harnessTrimReceiptFor(context, harnessId2) {
       continue;
     const text3 = new TextDecoder().decode(await context.fs.readFile(path));
     const matches = text3.split("\n").filter((line) => line.trim() !== "").map(parseHarnessTrimReceiptEnvelope).filter((event) => event !== null && event.harness === harnessId2);
-    const latest = matches.at(-1);
-    if (latest !== void 0) {
-      return { observedAt: latest.ts, operations: matches.length, source: path };
+    const latestAttempt = matches.at(-1);
+    if (latestAttempt !== void 0) {
+      const reductions = matches.filter(provesHarnessTrimReduction);
+      return {
+        observedAt: latestAttempt.ts,
+        operations: reductions.length,
+        attempts: matches.length,
+        source: path
+      };
     }
   }
   return null;
@@ -21545,10 +22066,19 @@ function scopeCanaryCheck(check, input) {
         remediation: input.runtimeConfigured ? "Enable telemetry on this runtime integration and use it on an output it can reduce." : "Skills or instructions alone do not write reduction telemetry; a compatible measurement path is required."
       };
     }
+    if (input.receipt.operations === 0) {
+      return {
+        ...check,
+        status: "info",
+        summary: `HarnessTrim observed ${String(input.receipt.attempts ?? 0)} ${input.harnessId} outputs, but none was reduced; latest attempt ${input.receipt.observedAt}`,
+        achievedTier: null,
+        remediation: "Run a canary that produces output the installed HarnessTrim reducer can shorten, then verify again."
+      };
+    }
     return {
       ...check,
       status: "pass",
-      summary: `${String(input.receipt.operations)} reductions recorded for ${input.harnessId}, most recently ${input.receipt.observedAt}`,
+      summary: `${String(input.receipt.operations)} reductions recorded for ${input.harnessId} from ${String(input.receipt.attempts ?? input.receipt.operations)} observed outputs, most recently ${input.receipt.observedAt}`,
       achievedTier: "canary"
     };
   }
@@ -21597,9 +22127,13 @@ async function scopeProviderVerificationToHarness(context, verification, harness
   const harnessTrim = verification.providerId === HARNESSTRIM4;
   const runtimeConfigured = harnessTrim ? harnessesWiredToHarnessTrim(context.harnessConfigs).includes(harnessId2) : configured;
   const attributableByExclusion = configured && configuredHarnesses.length === 1 && configuredHarnesses[0] === harnessId2;
-  const receipt = !configured ? null : harnessTrim ? await harnessTrimReceiptFor(context, harnessId2) : attributableByExclusion ? verification.receipt : null;
+  const receipt = !configured ? null : harnessTrim ? await harnessTrimReceiptFor(context, harnessId2) : verification.receipt?.harnessId !== void 0 ? verification.receipt.harnessId === harnessId2 ? verification.receipt : null : attributableByExclusion ? verification.receipt : null;
   const providerHasAttributableReceipt = harnessTrim || attributableByExclusion;
-  const checks = verification.checks.map((check) => scopeCanaryCheck(scopeIntegrationCheck(scopeHookCheck(check, harnessId2, harnessTrim ? runtimeConfigured : configured), { harnessId: harnessId2, configured, runtimeConfigured }), {
+  const scopedSourceChecks = verification.providerId === RTK4 ? verification.checks.filter((check) => {
+    const match = /^(?:rtk-attribution|receipt-freshness)-(claude|codex)$/.exec(check.id);
+    return match === null || match[1] === harnessId2;
+  }) : verification.checks;
+  const checks = scopedSourceChecks.map((check) => scopeCanaryCheck(scopeIntegrationCheck(scopeHookCheck(check, harnessId2, harnessTrim ? runtimeConfigured : configured), { harnessId: harnessId2, configured, runtimeConfigured }), {
     harnessId: harnessId2,
     configured,
     runtimeConfigured,
@@ -21614,13 +22148,14 @@ async function scopeProviderVerificationToHarness(context, verification, harness
     checks
   };
 }
-var HARNESSTRIM4;
+var HARNESSTRIM4, RTK4;
 var init_harness_verification = __esm({
   "packages/adapters/dist/src/providers/harness-verification.js"() {
     "use strict";
     init_src();
     init_harnesstrim();
     HARNESSTRIM4 = providerId("harnesstrim");
+    RTK4 = providerId("rtk");
   }
 });
 
@@ -21787,15 +22322,15 @@ async function runBudget(context) {
     diagnostics: report.harnesses.flatMap((item) => item.diagnostics)
   });
 }
-var CLAUDE9, CODEX8, BUDGET_HARNESSES;
+var CLAUDE10, CODEX9, BUDGET_HARNESSES;
 var init_budget2 = __esm({
   "apps/cli/dist/src/commands/budget.js"() {
     "use strict";
     init_src3();
     init_src();
-    CLAUDE9 = harnessId("claude");
-    CODEX8 = harnessId("codex");
-    BUDGET_HARNESSES = /* @__PURE__ */ new Set([CLAUDE9, CODEX8]);
+    CLAUDE10 = harnessId("claude");
+    CODEX9 = harnessId("codex");
+    BUDGET_HARNESSES = /* @__PURE__ */ new Set([CLAUDE10, CODEX9]);
   }
 });
 
@@ -22053,6 +22588,8 @@ function parseArgv(argv2, plannedCommands = PLANNED_COMMANDS) {
     contextSnapshot: null,
     nativePolicy: false,
     agentSkill: false,
+    agentRouting: false,
+    disableAgentRouting: false,
     verbose: false,
     yes: false
   };
@@ -22091,6 +22628,10 @@ function parseArgv(argv2, plannedCommands = PLANNED_COMMANDS) {
         options.nativePolicy = true;
       if (name2 === "--agent-skill")
         options.agentSkill = true;
+      if (name2 === "--agent-routing")
+        options.agentRouting = true;
+      if (name2 === "--disable-agent-routing")
+        options.disableAgentRouting = true;
       if (name2 === "--verbose")
         options.verbose = true;
       continue;
@@ -22327,6 +22868,14 @@ function parseArgv(argv2, plannedCommands = PLANNED_COMMANDS) {
     }));
     return usageError(json, diagnostics);
   }
+  if (options.agentRouting && options.disableAgentRouting) {
+    diagnostics.push(diagnostic({
+      severity: "error",
+      code: "conflicting-prompt-routing-flags",
+      message: "--agent-routing and --disable-agent-routing cannot be used together",
+      remediation: "Choose one prompt-routing state to plan"
+    }));
+  }
   if (!isAvailableCommand(command)) {
     const planned = plannedCommands.includes(command);
     diagnostics.push(planned ? diagnostic({
@@ -22396,7 +22945,557 @@ var init_argv = __esm({
       "--tasks-left",
       "--context-snapshot"
     ]);
-    BOOLEAN_FLAGS = /* @__PURE__ */ new Set(["--json", "--native-policy", "--agent-skill", "--verbose", "--yes"]);
+    BOOLEAN_FLAGS = /* @__PURE__ */ new Set([
+      "--json",
+      "--native-policy",
+      "--agent-skill",
+      "--agent-routing",
+      "--disable-agent-routing",
+      "--verbose",
+      "--yes"
+    ]);
+  }
+});
+
+// apps/cli/dist/src/prompt-router.js
+function isHarness(value3) {
+  return value3 === "claude" || value3 === "codex";
+}
+function expectedVersions(harness) {
+  return harness === "codex" ? ["0.159.0", "0.160.0"] : ["2.1.274", "2.1.288"];
+}
+function configTarget(input) {
+  if (!isHarness(input.harness) || input.home === null)
+    return null;
+  const adapter = findHarnessAdapter(harnessId(input.harness));
+  const declaration = adapter?.manifest.configFiles.find((file) => file.scope === "user" && file.parser === "json" && file.interceptionPoints?.includes("user-prompt-submit") === true);
+  if (declaration === void 0 || adapter === null)
+    return null;
+  const fileContext = {
+    fs: input.fs,
+    runner: input.runner,
+    facts: input.facts,
+    paths: { ...input.paths, home: input.home },
+    projectRoot: input.projectRoot
+  };
+  return {
+    harness: input.harness,
+    path: resolveConfigPath(declaration, fileContext),
+    version: input.version,
+    fileContext
+  };
+}
+function hookEntries(harness) {
+  return nativePromptRoutingHookEntries(harnessId(harness), "token-harness");
+}
+function asRecord(value3) {
+  return typeof value3 === "object" && value3 !== null && !Array.isArray(value3) ? value3 : null;
+}
+function parseHookDocument(text3) {
+  let decoded;
+  try {
+    decoded = JSON.parse(text3);
+  } catch {
+    return { ok: false, reason: "The hook settings file is malformed JSON or contains comments." };
+  }
+  const root = asRecord(decoded);
+  if (root === null)
+    return { ok: false, reason: "The hook settings root must be a JSON object." };
+  const hooksValue = root["hooks"];
+  if (hooksValue === void 0)
+    return { ok: true, hooks: {} };
+  const hooks = asRecord(hooksValue);
+  if (hooks === null)
+    return { ok: false, reason: "The settings hooks property must be an object." };
+  for (const { eventName } of hookEntries("codex")) {
+    const entries = hooks[eventName];
+    if (entries !== void 0 && !Array.isArray(entries))
+      return { ok: false, reason: `The ${eventName} hook property must be an array.` };
+  }
+  return { ok: true, hooks };
+}
+function containsRouterCommand(value3, harness) {
+  const row2 = asRecord(value3);
+  const hooks = row2?.["hooks"];
+  if (!Array.isArray(hooks))
+    return false;
+  return hooks.some((hook) => {
+    const handler = asRecord(hook);
+    if (handler === null)
+      return false;
+    if (harness === "codex")
+      return [handler["command"], handler["commandWindows"]].some((command) => typeof command === "string" && command.includes(ROUTE_MARKER));
+    const args = handler["args"];
+    return handler["command"] === "token-harness" && Array.isArray(args) && args[0] === ROUTE_MARKER;
+  });
+}
+function configHasExactRouter(hooks, harness) {
+  let exactCount = 0;
+  let routeCount = 0;
+  for (const expected of hookEntries(harness)) {
+    const live = hooks[expected.eventName];
+    const entries = Array.isArray(live) ? live : [];
+    const routeEntries = entries.filter((entry) => containsRouterCommand(entry, harness));
+    routeCount += routeEntries.length;
+    if (routeEntries.some((entry) => jsonValueDigest(entry) === jsonValueDigest(expected.value)))
+      exactCount += 1;
+  }
+  return {
+    complete: exactCount === hookEntries(harness).length,
+    partial: routeCount > 0 && exactCount !== hookEntries(harness).length,
+    conflict: routeCount > exactCount
+  };
+}
+function routerOwnedArtifacts(journals, path, harness) {
+  const expected = hookEntries(harness);
+  for (const journal of journals) {
+    const disabledHere = journal.entries.some((entry) => entry.actionId.startsWith(`native-prompt-routing:${harness}:disable:`) && entry.snapshots.some((snapshot) => snapshot.path === path));
+    if (disabledHere && journal.outcome === "committed")
+      return [];
+    const relevant = journal.ownership.filter((artifact) => artifact.kind === "owned-json-entry" && artifact.path === path && artifact.placement === "array-element" && expected.some((entry) => artifact.pointer === `hooks.${entry.eventName}` && artifact.valueDigest === jsonValueDigest(entry.value)));
+    if (relevant.length > 0)
+      return journal.outcome === "committed" ? relevant : [];
+  }
+  return [];
+}
+async function journalsFor(input) {
+  if (input.stateRoot === null)
+    return [];
+  const journalRoot = input.fs.join(input.stateRoot, "journals");
+  if ((await input.fs.stat(journalRoot))?.kind !== "directory")
+    return [];
+  return new FileJournalStore({
+    fs: input.fs,
+    journalRoot,
+    backupRoot: input.fs.join(input.stateRoot, "backups")
+  }).list();
+}
+function actionId(harness, intent, eventName) {
+  return `native-prompt-routing:${harness}:${intent}:${eventName}`;
+}
+async function planNativePromptRoutingInstall(input) {
+  const diagnostics = [];
+  const target = configTarget(input);
+  if (target === null) {
+    diagnostics.push(diagnostic({
+      severity: "warning",
+      code: "prompt-routing-target-unavailable",
+      subject: input.harness,
+      message: "No supported user-scope native prompt hook target is available",
+      remediation: "Resolve the user home and harness installation, then refresh Token Harness"
+    }));
+    return { target: null, actions: [], diagnostics };
+  }
+  if (!expectedVersions(target.harness).includes(target.version ?? "")) {
+    diagnostics.push(diagnostic({
+      severity: "warning",
+      code: "prompt-routing-version-unverified",
+      subject: target.harness,
+      message: `Native prompt routing has no hook fixture for ${target.harness} ${target.version ?? "unknown"}`,
+      path: target.path,
+      remediation: "Refresh Token Harness after the installed harness hook schema is fixture-tested"
+    }));
+    return { target: target.path, actions: [], diagnostics };
+  }
+  const runtimeCheck = await input.runner.run({
+    executable: "token-harness",
+    args: ["__internal-prompt-router", target.harness, "--check"],
+    cwd: input.projectRoot,
+    timeoutMs: 3e3,
+    maxOutputBytes: 256
+  });
+  if (runtimeCheck.failure !== null || runtimeCheck.exitCode !== 0 || runtimeCheck.stdout.trim() !== PROMPT_ROUTER_CHECK_MARKER) {
+    diagnostics.push(diagnostic({
+      severity: "error",
+      code: "prompt-routing-runtime-unavailable",
+      subject: target.harness,
+      message: "The Token Harness executable found on PATH cannot serve the native prompt hook",
+      path: target.path,
+      remediation: "Install or update Token Harness so the same executable is available to the coding agent, then refresh and plan again"
+    }));
+    return { target: target.path, actions: [], diagnostics };
+  }
+  const stat3 = await input.fs.stat(target.path);
+  if (stat3 !== null && stat3.kind !== "file") {
+    diagnostics.push(diagnostic({
+      severity: "error",
+      code: "prompt-routing-target-not-file",
+      subject: target.harness,
+      message: "A non-file occupies the native hook settings path",
+      path: target.path,
+      remediation: "Move the conflicting path and refresh Token Harness"
+    }));
+    return { target: target.path, actions: [], diagnostics };
+  }
+  let hooks = {};
+  if (stat3 !== null) {
+    const parsed = parseHookDocument(DECODER4.decode(await input.fs.readFile(target.path)));
+    if (!parsed.ok) {
+      diagnostics.push(diagnostic({
+        severity: "error",
+        code: "prompt-routing-settings-unmergeable",
+        subject: target.harness,
+        message: parsed.reason,
+        path: target.path,
+        remediation: "Repair the JSON settings file or configure native prompt routing manually"
+      }));
+      return { target: target.path, actions: [], diagnostics };
+    }
+    hooks = parsed.hooks;
+  }
+  const existing = configHasExactRouter(hooks, target.harness);
+  if (existing.complete) {
+    diagnostics.push(diagnostic({
+      severity: "info",
+      code: "prompt-routing-already-configured",
+      subject: target.harness,
+      message: "Native prompt routing hooks are already present; no settings are changed",
+      path: target.path,
+      remediation: null
+    }));
+    return { target: target.path, actions: [], diagnostics };
+  }
+  if (existing.partial || existing.conflict) {
+    diagnostics.push(diagnostic({
+      severity: "error",
+      code: "prompt-routing-existing-hook-conflict",
+      subject: target.harness,
+      message: "A partial or modified Token Harness prompt hook already exists and was left untouched",
+      path: target.path,
+      remediation: "Review the existing native routing entries before planning another change"
+    }));
+    return { target: target.path, actions: [], diagnostics };
+  }
+  const entries = hookEntries(target.harness);
+  const action = {
+    kind: "merge-json",
+    id: actionId(target.harness, "enable", "all"),
+    riskClass: "reversible",
+    requiresNetwork: false,
+    requiresElevation: false,
+    affectedPaths: [target.path],
+    affectedProcesses: [target.harness],
+    preconditions: [
+      "the harness hook settings remain absent or valid JSON",
+      "no Token Harness native prompt-routing hooks are already present"
+    ],
+    postconditions: entries.map((entry) => `${entry.eventName} has one Token Harness-owned hook`),
+    rollbackData: "file-snapshot",
+    explanation: `Enable automatic native prompt routing for ${target.harness}` + (target.harness === "codex" ? "; manually enable and trust this hook in Codex after applying" : "; start a new Claude Code session after applying"),
+    path: target.path,
+    ownedPointers: entries.map((entry) => `hooks.${entry.eventName}`),
+    operations: entries.map((entry) => ({
+      kind: "append",
+      pointer: `hooks.${entry.eventName}`,
+      value: entry.value,
+      expectedValueDigest: null
+    })),
+    createIfMissing: true
+  };
+  return { target: target.path, actions: [action], diagnostics };
+}
+async function planNativePromptRoutingRemoval(input) {
+  const diagnostics = [];
+  const target = configTarget(input);
+  if (target === null || input.stateRoot === null) {
+    diagnostics.push(diagnostic({
+      severity: "warning",
+      code: "prompt-routing-removal-unavailable",
+      subject: input.harness,
+      message: "The owned native prompt-routing configuration could not be located safely",
+      remediation: "Refresh Token Harness from the signed-in user environment"
+    }));
+    return { target: target?.path ?? null, actions: [], diagnostics };
+  }
+  const expected = hookEntries(target.harness);
+  const journals = await journalsFor({ fs: input.fs, stateRoot: input.stateRoot });
+  const artifacts = routerOwnedArtifacts(journals, target.path, target.harness);
+  const actions = expected.flatMap((entry) => {
+    const pointer = `hooks.${entry.eventName}`;
+    const targetArtifact = artifacts.find((artifact) => artifact.kind === "owned-json-entry" && artifact.pointer === pointer && artifact.valueDigest === jsonValueDigest(entry.value));
+    if (targetArtifact === void 0)
+      return [];
+    const reverses = actionId(target.harness, "enable", "all");
+    return [
+      {
+        kind: "remove-owned-change",
+        id: actionId(target.harness, "disable", entry.eventName),
+        riskClass: "reversible",
+        requiresNetwork: false,
+        requiresElevation: false,
+        affectedPaths: [target.path],
+        affectedProcesses: [target.harness],
+        preconditions: [`${entry.eventName} still contains the exact Token Harness-owned hook`],
+        postconditions: [`${entry.eventName} no longer contains the owned prompt-routing hook`],
+        rollbackData: "file-snapshot",
+        explanation: `Disable automatic native prompt routing for ${target.harness}`,
+        path: target.path,
+        reverses,
+        target: targetArtifact
+      }
+    ];
+  });
+  if (actions.length === 0)
+    diagnostics.push(diagnostic({
+      severity: "info",
+      code: "prompt-routing-not-owned",
+      subject: target.harness,
+      message: "Token Harness owns no native prompt-routing hooks here, so nothing is removed",
+      path: target.path,
+      remediation: null
+    }));
+  return { target: target.path, actions, diagnostics };
+}
+async function readEvents(input) {
+  if (input.stateRoot === null)
+    return { state: "unavailable", events: [] };
+  const directory = input.fs.join(input.stateRoot, "prompt-routing");
+  if ((await input.fs.stat(directory))?.kind !== "directory")
+    return { state: "available", events: [] };
+  const files = (await input.fs.readDirectory(directory)).filter((name2) => /^events-\d{4}-\d{2}\.jsonl$/.test(name2)).sort().reverse();
+  const events = [];
+  let scannedBytes = 0;
+  try {
+    for (const file of files) {
+      const path = input.fs.join(directory, file);
+      const stat3 = await input.fs.stat(path);
+      if (stat3 === null || stat3.kind !== "file")
+        continue;
+      if (stat3.byteLength > MAX_EVENT_FILE_BYTES || scannedBytes + stat3.byteLength > MAX_EVENT_SCAN_BYTES)
+        return { state: "limited", events };
+      const bytes = await input.fs.readFile(path);
+      if (bytes.byteLength !== stat3.byteLength)
+        return { state: "limited", events };
+      scannedBytes += bytes.byteLength;
+      const text3 = DECODER4.decode(bytes);
+      for (const line of text3.split("\n")) {
+        if (line === "")
+          continue;
+        try {
+          const value3 = JSON.parse(line);
+          if (!isPromptRouterEvent(value3))
+            continue;
+          if (input.harness !== void 0 && value3.harness !== input.harness)
+            continue;
+          if (input.projectId !== void 0 && value3.projectId !== input.projectId)
+            continue;
+          if (input.since !== void 0 && value3.timestamp < input.since)
+            continue;
+          events.push(value3);
+        } catch {
+        }
+      }
+      if (input.since !== void 0 && file.slice(7, 14) < input.since.slice(0, 7))
+        break;
+    }
+    return { state: "available", events };
+  } catch {
+    return { state: "unavailable", events: [] };
+  }
+}
+function isPromptRouterEvent(value3) {
+  const row2 = asRecord(value3);
+  return row2?.["schemaVersion"] === 1 && typeof row2["timestamp"] === "string" && Number.isFinite(Date.parse(row2["timestamp"])) && (row2["harness"] === "claude" || row2["harness"] === "codex") && typeof row2["projectId"] === "string" && ["prompt-submit", "subagent-start", "subagent-stop"].includes(String(row2["type"])) && (row2["model"] === null || typeof row2["model"] === "string" && row2["model"].length <= 80) && (row2["agentType"] === null || typeof row2["agentType"] === "string" && row2["agentType"].length <= 80);
+}
+async function recordNativePromptRoutingHook(input) {
+  if (input.fs === null || input.stateRoot === null || input.projectId === null)
+    return;
+  let payload = null;
+  if (input.event !== "prompt-submit" && input.hookInput !== null) {
+    try {
+      payload = asRecord(JSON.parse(input.hookInput));
+    } catch {
+      payload = null;
+    }
+  }
+  const agentTypeRaw = payload?.["agent_type"];
+  const agentType = input.event !== "prompt-submit" && typeof agentTypeRaw === "string" && agentTypeRaw.length <= 80 ? agentTypeRaw : null;
+  const timestamp = new Date(input.now).toISOString();
+  const event = {
+    schemaVersion: 1,
+    timestamp,
+    harness: input.harness,
+    projectId: input.projectId,
+    type: input.event,
+    // Hook payload model fields can identify the root session, not the spawned child. Until an
+    // adapter has a versioned child-model field, keep actual worker identity unknown.
+    model: null,
+    agentType
+  };
+  const partition = `events-${timestamp.slice(0, 7)}.jsonl`;
+  const directory = input.fs.join(input.stateRoot, "prompt-routing");
+  await input.fs.createDirectory(directory);
+  await input.fs.appendFile(input.fs.join(directory, partition), UTF84.encode(`${JSON.stringify(event)}
+`));
+}
+function summarizeEvents(events) {
+  return {
+    promptSubmissions: events.filter((event) => event.type === "prompt-submit").length,
+    subagentsStarted: events.filter((event) => event.type === "subagent-start").length,
+    subagentsStopped: events.filter((event) => event.type === "subagent-stop").length,
+    reportedModels: [
+      ...new Set(events.filter((event) => event.type === "subagent-start" || event.type === "subagent-stop").flatMap((event) => event.model === null ? [] : [event.model]))
+    ],
+    lastObservedAt: events.map((event) => event.timestamp).sort().at(-1) ?? null
+  };
+}
+async function observeNativePromptRouting(input) {
+  const harness = isHarness(input.harness) ? input.harness : "codex";
+  const base = {
+    harness,
+    state: "unavailable",
+    label: "Not verified",
+    detail: "Native prompt routing could not be checked on this harness.",
+    configPath: null,
+    configured: null,
+    promptSubmissions: 0,
+    subagentsStarted: 0,
+    subagentsStopped: 0,
+    reportedModels: [],
+    lastObservedAt: null,
+    receiptState: "unavailable"
+  };
+  const target = configTarget({ ...input, harness: input.harness });
+  if (target === null)
+    return base;
+  const eventResult = await readEvents({
+    fs: input.fs,
+    stateRoot: input.stateRoot,
+    harness,
+    ...input.projectId === null ? {} : { projectId: input.projectId },
+    since: new Date(Date.now() - 30 * 24 * 60 * 60 * 1e3).toISOString()
+  });
+  const summary = summarizeEvents(eventResult.events);
+  const stat3 = await input.fs.stat(target.path);
+  if (stat3 === null) {
+    return {
+      ...base,
+      state: "absent",
+      label: "Disabled",
+      detail: "Automatic routing is off. No Token Harness native prompt hook is installed.",
+      configPath: target.path,
+      configured: false,
+      ...summary,
+      receiptState: eventResult.state
+    };
+  }
+  if (stat3.kind !== "file")
+    return {
+      ...base,
+      state: "conflict",
+      label: "Path conflict",
+      detail: "A non-file occupies the native hook settings path.",
+      configPath: target.path,
+      ...summary,
+      receiptState: eventResult.state
+    };
+  let hooks;
+  try {
+    const parsed = parseHookDocument(DECODER4.decode(await input.fs.readFile(target.path)));
+    if (!parsed.ok)
+      return {
+        ...base,
+        state: "conflict",
+        label: "Settings need review",
+        detail: parsed.reason,
+        configPath: target.path,
+        ...summary,
+        receiptState: eventResult.state
+      };
+    hooks = parsed.hooks;
+  } catch {
+    return {
+      ...base,
+      state: "unavailable",
+      label: "Not verified",
+      detail: "The hook settings file could not be read safely.",
+      configPath: target.path,
+      ...summary,
+      receiptState: eventResult.state
+    };
+  }
+  const match = configHasExactRouter(hooks, harness);
+  if (match.conflict || match.partial) {
+    return {
+      ...base,
+      state: "conflict",
+      label: "Custom hook needs review",
+      detail: "A partial or edited Token Harness prompt-routing hook was found and was not changed.",
+      configPath: target.path,
+      ...summary,
+      receiptState: eventResult.state
+    };
+  }
+  if (!match.complete) {
+    return {
+      ...base,
+      state: "absent",
+      label: "Disabled",
+      detail: "Automatic routing is off. No Token Harness native prompt hook is installed.",
+      configPath: target.path,
+      configured: false,
+      ...summary,
+      receiptState: eventResult.state
+    };
+  }
+  const artifacts = routerOwnedArtifacts(await journalsFor(input), target.path, harness);
+  const state = artifacts.length === hookEntries(harness).length ? "managed" : "external";
+  const hasRuntimeReceipt = summary.promptSubmissions > 0;
+  const label = state === "external" ? hasRuntimeReceipt ? "Runtime observed \xB7 external" : "Enabled externally" : hasRuntimeReceipt ? "Runtime observed" : harness === "codex" ? "Configured \xB7 trust or runtime pending" : "Configured \xB7 runtime pending";
+  const detail2 = summary.promptSubmissions > 0 ? `${String(summary.promptSubmissions)} prompt hook(s), ${String(summary.subagentsStarted)} native agent start(s), ${String(summary.subagentsStopped)} stop(s) observed in this project during the last 30 days.${eventResult.state === "limited" ? " Counts are partial because the local receipt scan reached its safety limit." : eventResult.state === "unavailable" ? " Local runtime receipts could not be read." : ""}` : harness === "codex" ? "The hook is configured. Review and trust it in Codex with /hooks, then submit a prompt to produce a runtime receipt." : "The hook is configured. Start a new Claude Code session, submit a prompt, and Token Harness will show the runtime receipt.";
+  return {
+    ...base,
+    state,
+    label,
+    detail: detail2,
+    configPath: target.path,
+    configured: true,
+    ...summary,
+    receiptState: eventResult.state
+  };
+}
+async function nativeRoutingObservationForBenchmark(input) {
+  const observed = await observeNativePromptRouting({
+    ...input,
+    projectId: input.projectId
+  });
+  const configured = observed.configured;
+  if (input.startedAt === void 0)
+    return {
+      configured,
+      promptSubmissions: 0,
+      subagentsStarted: 0,
+      subagentsStopped: 0,
+      reportedModels: []
+    };
+  const found = await readEvents({
+    fs: input.fs,
+    stateRoot: input.stateRoot,
+    harness: observed.harness,
+    projectId: input.projectId,
+    since: input.startedAt
+  });
+  const summary = summarizeEvents(found.events);
+  return {
+    configured,
+    promptSubmissions: summary.promptSubmissions,
+    subagentsStarted: summary.subagentsStarted,
+    subagentsStopped: summary.subagentsStopped,
+    reportedModels: summary.reportedModels
+  };
+}
+var UTF84, DECODER4, ROUTE_MARKER, MAX_EVENT_FILE_BYTES, MAX_EVENT_SCAN_BYTES, PROMPT_ROUTER_CHECK_MARKER;
+var init_prompt_router = __esm({
+  "apps/cli/dist/src/prompt-router.js"() {
+    "use strict";
+    init_src();
+    init_src3();
+    UTF84 = new TextEncoder();
+    DECODER4 = new TextDecoder("utf-8", { fatal: true });
+    ROUTE_MARKER = "__internal-prompt-router";
+    MAX_EVENT_FILE_BYTES = 4 * 1024 * 1024;
+    MAX_EVENT_SCAN_BYTES = 16 * 1024 * 1024;
+    PROMPT_ROUTER_CHECK_MARKER = "token-harness-prompt-router-v1";
   }
 });
 
@@ -23665,7 +24764,7 @@ var init_agent_skill = __esm({
   "apps/cli/dist/src/agent-skill.js"() {
     "use strict";
     init_src();
-    TOKEN_HARNESS_AGENT_SKILL = "---\nname: token-harness\ndescription: Optimizes local Claude Code or Codex work against observed subscription allowance, context pressure, quality floors, and project-local benchmark evidence using the Token Harness CLI. Use when the user asks to conserve or maximize coding-agent allowance, choose reasoning/model/verbosity deliberately, check whether a task fits current quota, or explicitly asks to use Token Harness.\n---\n\n# Token Harness\n\nUse Token Harness as a local deterministic policy engine. Do not reproduce its quota math or invent provider conversions yourself.\n\n## Default workflow\n\n1. Confirm `token-harness --version` works. If it is missing, do not install it silently. If the user asked to install or set up Token Harness, follow that request; otherwise explain that the local CLI is required.\n2. Identify the harness you are currently running as: `claude` for Claude Code or `codex` for Codex. Do not guess from repository files.\n3. Classify the current task conservatively:\n   - `mechanical`: formatting, rename, lookup, simple edits, deterministic scaffolding.\n   - `standard`: ordinary implementation, tests, focused bug fixes.\n   - `hard`: multi-file reasoning, ambiguous failures, migrations, difficult reviews.\n   - `critical`: architecture, security-sensitive work, releases, or high-regression-risk changes.\n   If uncertain between two classes, use the higher class.\n4. For a substantial task, or whenever the user asks about allowance/efficiency, run:\n\n   `token-harness optimize --harness <claude|codex> --task <class> --profile balanced --json`\n\n5. Treat the JSON result as evidence, not as permission to mutate configuration. Prefer recommendations that reduce avoidable context or session overhead before lowering a quality floor.\n6. Continue with the user's task. Mention Token Harness only when it materially changes the plan, recommends a user-visible action, or lacks enough evidence.\n\nDo not run Token Harness before every trivial tool call. One observation at a meaningful task boundary is normally enough; re-observe when the task class changes materially, after a quota reset, after a substantial session/context change, or when the user asks.\n\n## Active context evidence\n\nWhen the current conversation or your own tool results directly establish useful task-state evidence, you may pass a short-lived `--context-snapshot` file to `optimize`. This metadata is for the CLI; never ask the user to write or understand the JSON. Skip the snapshot when no actionable evidence is directly observable or a temporary file cannot be safely created and removed.\n\n- Set task boundary, validation and quality only from explicit task state and checks you observed. Use `unknown` when those facts are missing or ambiguous.\n- Mark material superseded or condensable only when its current state is directly clear. Include `byteLength` only when tooling measured the exact local bytes; otherwise use `null`. Never estimate bytes from tokens.\n- Set reducer attribution only when directly known; otherwise use `unknown`. Do not include transcript text, prompts, tool payloads, source text, paths, MCP names or schemas.\n- Add a checkpoint byte ceiling only when you will use that same ceiling for the existing bounded `token-harness handoff` command. Omit it when no artifact budget is configured.\n- Create the metadata file temporarily, run `optimize`, then remove it. Treat the decision as advice; do not mask, summarize, compact or start a session on the user's behalf.\n\n## Explicit workload\n\nOnly pass `--tasks-left N` when the remaining accepted-task count is explicit from the user or an explicit task list already in the conversation. Never infer it from token history, source files, GitHub issues, or a guessed backlog. When it is explicit, add it to the same advisory call:\n\n`token-harness optimize --harness <claude|codex> --task <class> --profile balanced --tasks-left <N> --json`\n\nFor multiple independent new tasks whose explicit list can be classified by task class, Token Harness can compare Claude and Codex with:\n\n`token-harness schedule --current <current> --candidate <other> --workload mechanical=N,standard=N,hard=N,critical=N --json`\n\nOmit zero-count classes. This is for queued new work, not an in-progress handoff. Never switch harnesses automatically from this result.\n\n## Persistent native changes\n\n`optimize` is advisory. If it recommends a persistent model/reasoning/verbosity change and the user wants it applied:\n\n1. Build a reviewed plan with `token-harness plan --harness <claude|codex> --native-policy --task <class> --profile balanced --json`.\n2. Summarize the exact proposed change, scope, and any limitations to the user.\n3. Apply only after the user explicitly approves the proposed mutation. Use the returned plan id with `token-harness apply --plan <id> --yes`.\n4. Do not treat a persisted preference as a live change to an already-running session. Follow the plan/result instructions about when it takes effect.\n\nNever silently change authentication, billing, provider, model routing, hooks, trust, or purchase/redeem credits.\n\n## Evidence rules\n\n- Never equate local token counts with subscription quota.\n- Never compare raw Claude and Codex percentages as if they were the same currency.\n- Unknown allowance or benchmark evidence stays unknown.\n- Preserve task quality floors; do not lower effort merely because a cheaper setting exists.\n- Prefer project-local measured outcomes and backend quota deltas when Token Harness exposes them.\n- Do not add an MCP server or background model just to use this skill. The local CLI is the tool surface.\n";
+    TOKEN_HARNESS_AGENT_SKILL = "---\nname: token-harness\ndescription: Optimizes local Claude Code or Codex work against observed subscription allowance, context pressure, quality floors, and project-local benchmark evidence using the Token Harness CLI. Guides native subagent model routing for substantial bounded coding tasks. Use for substantial coding work where native delegation may apply, or when the user asks about allowance, model/effort/verbosity choices, quota fit, or Token Harness.\n---\n\n# Token Harness\n\nUse Token Harness as a local deterministic policy engine. Do not reproduce its quota math or invent provider conversions yourself.\n\n## Automatic routing\n\nWhen enabled in the Token Harness dashboard, a native prompt hook supplies the routing policy on every submitted prompt. This works without invoking this skill or prefixing the prompt with a command. The hook asks the coding agent to delegate only eligible bounded work; it does not change the root model or prove which child model ran. Use this skill when the user asks for explicit quota-aware advice or a benchmark.\n\n## Default workflow\n\n1. Confirm `token-harness --version` works. If it is missing, do not install it silently. If the user asked to install or set up Token Harness, follow that request; otherwise explain that the local CLI is required.\n2. Identify the harness you are currently running as: `claude` for Claude Code or `codex` for Codex. Do not guess from repository files.\n3. Classify the current task conservatively:\n   - `mechanical`: formatting, rename, lookup, simple edits, deterministic scaffolding.\n   - `standard`: ordinary implementation, tests, focused bug fixes.\n   - `hard`: multi-file reasoning, ambiguous failures, migrations, difficult reviews.\n   - `critical`: architecture, security-sensitive work, releases, or high-regression-risk changes.\n   If uncertain between two classes, use the higher class.\n4. For a substantial task, or whenever the user asks about allowance/efficiency, run:\n\n   `token-harness optimize --harness <claude|codex> --task <class> --profile balanced --json`\n\n5. Treat the JSON result as evidence, not as permission to mutate configuration. Prefer recommendations that reduce avoidable context or session overhead before lowering a quality floor.\n6. Continue with the user's task. Mention Token Harness only when it materially changes the plan, recommends a user-visible action, or lacks enough evidence.\n\nDo not run Token Harness before every trivial tool call. One observation at a meaningful task boundary is normally enough; re-observe when the task class changes materially, after a quota reset, after a substantial session/context change, or when the user asks.\n\n## Active context evidence\n\nWhen the current conversation or your own tool results directly establish useful task-state evidence, you may pass a short-lived `--context-snapshot` file to `optimize`. This metadata is for the CLI; never ask the user to write or understand the JSON. Skip the snapshot when no actionable evidence is directly observable or a temporary file cannot be safely created and removed.\n\n- Set task boundary, validation and quality only from explicit task state and checks you observed. Use `unknown` when those facts are missing or ambiguous.\n- Mark material superseded or condensable only when its current state is directly clear. Include `byteLength` only when tooling measured the exact local bytes; otherwise use `null`. Never estimate bytes from tokens.\n- Set reducer attribution only when directly known; otherwise use `unknown`. Do not include transcript text, prompts, tool payloads, source text, paths, MCP names or schemas.\n- Add a checkpoint byte ceiling only when you will use that same ceiling for the existing bounded `token-harness handoff` command. Omit it when no artifact budget is configured.\n- Create the metadata file temporarily, run `optimize`, then remove it. Treat the decision as advice; do not mask, summarize, compact or start a session on the user's behalf.\n\n## Explicit workload\n\nOnly pass `--tasks-left N` when the remaining accepted-task count is explicit from the user or an explicit task list already in the conversation. Never infer it from token history, source files, GitHub issues, or a guessed backlog. When it is explicit, add it to the same advisory call:\n\n`token-harness optimize --harness <claude|codex> --task <class> --profile balanced --tasks-left <N> --json`\n\nFor multiple independent new tasks whose explicit list can be classified by task class, Token Harness can compare Claude and Codex with:\n\n`token-harness schedule --current <current> --candidate <other> --workload mechanical=N,standard=N,hard=N,critical=N --json`\n\nOmit zero-count classes. This is for queued new work, not an in-progress handoff. Never switch harnesses automatically from this result.\n\n## Native subagent model routing\n\nUse native subagents as the only model-routing surface. This routes delegated work; it never changes the model already selected for the root conversation. Keep Codex as the first supported path.\n\nFor Codex, when the task is substantial and contains a complete, bounded implementation unit that can be handed off without duplicating work, delegate that unit to one native subagent with `model: gpt-6-luna` if Luna is present in the current Codex model picker/catalog. Set the model explicitly in the native spawn request: when it is omitted, Codex inherits the root model and reasoning effort, so a generic delegation is not a cost-routed delegation. If a higher-priority instruction forbids specifying the child model, skip cost routing and continue with the root model. Keep the root model responsible for task framing, integration, and acceptance review. Do not run the same implementation in both agents. Use at most one cost-routed worker at a time.\n\nSkip routing for trivial tasks, tightly coupled or shared-write work, architecture/security/release decisions, work that needs the root model's full context or judgment throughout, when the user asks not to delegate, when the root model is Luna or cannot be identified, or when the requested model is not currently available. Do not substitute an unverified model ID or silently fall back to another harness. If no supported route is available, continue with the current root model.\n\nFor Claude Code, apply the same bounded-task rules only when Claude Code is already configured and authenticated and native subagents are available. Request the current native `haiku` alias for an eligible worker; do not configure Claude Code or authenticate on the user's behalf.\n\nTreat the selected child model as a routing request until Codex or Claude Code visibly reports the worker's actual model. A skill instruction is not runtime telemetry. Subagents add context and coordination overhead and can consume more total tokens than single-agent work; do not claim token, quota, or cost savings without paired, quality-gated usage evidence for the same harness and task class.\n\n## Persistent native changes\n\n`optimize` is advisory. If it recommends a persistent model/reasoning/verbosity change and the user wants it applied:\n\n1. Build a reviewed plan with `token-harness plan --harness <claude|codex> --native-policy --task <class> --profile balanced --json`.\n2. Summarize the exact proposed change, scope, and any limitations to the user.\n3. Apply only after the user explicitly approves the proposed mutation. Use the returned plan id with `token-harness apply --plan <id> --yes`.\n4. Do not treat a persisted preference as a live change to an already-running session. Follow the plan/result instructions about when it takes effect.\n\nNever silently change authentication, billing, provider, model routing, hooks, trust, or purchase/redeem credits.\n\n## Evidence rules\n\n- Never equate local token counts with subscription quota.\n- Never compare raw Claude and Codex percentages as if they were the same currency.\n- Unknown allowance or benchmark evidence stays unknown.\n- Preserve task quality floors; do not lower effort merely because a cheaper setting exists.\n- Prefer project-local measured outcomes and backend quota deltas when Token Harness exposes them.\n- Do not add an MCP server or background model just to use this skill. The local CLI is the tool surface.\n";
     ENCODER = new TextEncoder();
     SKILL_DIGEST = digestBytes(ENCODER.encode(TOKEN_HARNESS_AGENT_SKILL));
     TARGETS = {
@@ -23883,12 +24982,12 @@ var init_context_owner_candidates = __esm({
 });
 
 // apps/cli/dist/src/commands/context-cost.js
-function nativeToolDeferral(harness, version3, verdict) {
-  if (harness !== CODEX9)
+function nativeToolDeferral(harness, version3) {
+  if (harness !== CODEX10)
     return null;
-  if (version3 === "0.146.0" && verdict === "in-range") {
+  if (version3 === "0.146.0") {
     return {
-      harnessId: CODEX9,
+      harnessId: CODEX10,
       mechanism: "native-tool-search",
       state: "available",
       scope: "mcp-tools",
@@ -23897,7 +24996,7 @@ function nativeToolDeferral(harness, version3, verdict) {
     };
   }
   return {
-    harnessId: CODEX9,
+    harnessId: CODEX10,
     mechanism: "native-tool-search",
     state: "unknown",
     scope: "mcp-tools",
@@ -24014,7 +25113,7 @@ async function codexInstructionFiles(context, observation) {
     if (selected === null)
       continue;
     const item = await fileObservation(context, {
-      harnessId: CODEX9,
+      harnessId: CODEX10,
       path: selected,
       scope: "project",
       loadedBytes: remaining2
@@ -24046,7 +25145,7 @@ async function claudeInstructionFiles(context) {
   const results = [];
   for (const candidate of candidates) {
     const item = await fileObservation(context, {
-      harnessId: CLAUDE10,
+      harnessId: CLAUDE11,
       path: candidate.path,
       scope: candidate.scope,
       loadedBytes: null
@@ -24113,16 +25212,16 @@ async function runContext(context) {
       continue;
     }
     const observation = await adapter.observeContext(harnessContext, report.observedAt);
-    const deferral = nativeToolDeferral(adapter.manifest.id, detection.version, detection.versionVerdict);
+    const deferral = nativeToolDeferral(adapter.manifest.id, detection.version);
     if (deferral !== null)
       observation.toolDeferral = deferral;
     report.harnesses.push(observation);
   }
-  const codex = report.harnesses.find((item) => item.harnessId === CODEX9);
+  const codex = report.harnesses.find((item) => item.harnessId === CODEX10);
   if (codex !== void 0 && codex.state !== "absent") {
     report.instructions.push(...await codexInstructionFiles(context, codex));
   }
-  const claude = report.harnesses.find((item) => item.harnessId === CLAUDE10);
+  const claude = report.harnesses.find((item) => item.harnessId === CLAUDE11);
   if (claude !== void 0 && claude.state !== "absent") {
     report.instructions.push(...await claudeInstructionFiles(context));
   }
@@ -24174,16 +25273,16 @@ async function runContext(context) {
     ]
   });
 }
-var CLAUDE10, CODEX9, CONTEXT_HARNESSES;
+var CLAUDE11, CODEX10, CONTEXT_HARNESSES;
 var init_context_cost2 = __esm({
   "apps/cli/dist/src/commands/context-cost.js"() {
     "use strict";
     init_src3();
     init_src();
     init_context_owner_candidates();
-    CLAUDE10 = harnessId("claude");
-    CODEX9 = harnessId("codex");
-    CONTEXT_HARNESSES = /* @__PURE__ */ new Set([CLAUDE10, CODEX9]);
+    CLAUDE11 = harnessId("claude");
+    CODEX10 = harnessId("codex");
+    CONTEXT_HARNESSES = /* @__PURE__ */ new Set([CLAUDE11, CODEX10]);
   }
 });
 
@@ -24204,7 +25303,7 @@ function stringArray(value3) {
   return array(value3).filter((item) => typeof item === "string");
 }
 function normalizedHarness(value3) {
-  return value3 === "claude" ? CLAUDE11 : value3 === "codex" ? CODEX10 : null;
+  return value3 === "claude" ? CLAUDE12 : value3 === "codex" ? CODEX11 : null;
 }
 function totals(row2) {
   const inputTokens = number(row2["inputTokens"]);
@@ -24512,7 +25611,7 @@ async function runHistory(context) {
   const filterHarness = context.harness;
   const daily = dailyRows(payload).filter((row2) => filterHarness === null || row2.harnessId === filterHarness).sort((left, right) => left.period.localeCompare(right.period));
   const sessions = sessionRows(payload).filter((row2) => filterHarness === null || row2.harnessId === filterHarness).sort((left, right) => (left.lastActivity ?? "").localeCompare(right.lastActivity ?? ""));
-  const harnesses = [CLAUDE11, CODEX10].filter((harness) => filterHarness === null || harness === filterHarness).map((harness) => summarize(harness, daily, sessions, context.now()));
+  const harnesses = [CLAUDE12, CODEX11].filter((harness) => filterHarness === null || harness === filterHarness).map((harness) => summarize(harness, daily, sessions, context.now()));
   const report = {
     ...blankReport(context, window.windowStart, window.windowEnd, "available", version3, []),
     daily,
@@ -24525,15 +25624,15 @@ async function runHistory(context) {
     data: report
   });
 }
-var SUPPORTED_CCUSAGE_MAJOR, CLAUDE11, CODEX10, HISTORY_HARNESSES;
+var SUPPORTED_CCUSAGE_MAJOR, CLAUDE12, CODEX11, HISTORY_HARNESSES;
 var init_history2 = __esm({
   "apps/cli/dist/src/commands/history.js"() {
     "use strict";
     init_src();
     SUPPORTED_CCUSAGE_MAJOR = 20;
-    CLAUDE11 = harnessId("claude");
-    CODEX10 = harnessId("codex");
-    HISTORY_HARNESSES = /* @__PURE__ */ new Set([CLAUDE11, CODEX10]);
+    CLAUDE12 = harnessId("claude");
+    CODEX11 = harnessId("codex");
+    HISTORY_HARNESSES = /* @__PURE__ */ new Set([CLAUDE12, CODEX11]);
   }
 });
 
@@ -25336,7 +26435,7 @@ function admitOutcomePolicy(advice, observation, diagnostics) {
 async function appendCodexNativePolicy(context, actions, diagnostics) {
   if (context.nativePolicy !== true)
     return;
-  if (context.harness !== null && context.harness !== CODEX11) {
+  if (context.harness !== null && context.harness !== CODEX12) {
     diagnostics.push(diagnostic({
       severity: "warning",
       code: "native-policy-harness-unsupported",
@@ -25346,16 +26445,16 @@ async function appendCodexNativePolicy(context, actions, diagnostics) {
     }));
     return;
   }
-  const nativeContext = { ...context, harness: CODEX11 };
+  const nativeContext = { ...context, harness: CODEX12 };
   const optimization = await runOptimize(nativeContext);
   const contextResult = await runContext(nativeContext);
-  const advice = optimization.data?.harnesses.find((item) => item.harnessId === CODEX11) ?? null;
-  const observation = contextResult.data?.harnesses.find((item) => item.harnessId === CODEX11) ?? null;
+  const advice = optimization.data?.harnesses.find((item) => item.harnessId === CODEX12) ?? null;
+  const observation = contextResult.data?.harnesses.find((item) => item.harnessId === CODEX12) ?? null;
   if (advice === null || observation === null || observation.managedConfigTarget === null) {
     diagnostics.push(diagnostic({
       severity: "warning",
       code: "codex-native-policy-unavailable",
-      subject: CODEX11,
+      subject: CODEX12,
       message: "Codex optimizer advice could not be paired with a versioned native user-config target",
       remediation: "Run token-harness context --harness codex and keep native policy advisory until the target is observable"
     }));
@@ -25375,7 +26474,7 @@ async function appendCodexNativePolicy(context, actions, diagnostics) {
       diagnostics.push(diagnostic({
         severity: "warning",
         code: "codex-native-policy-observation-drift",
-        subject: CODEX11,
+        subject: CODEX12,
         message: `${input.keyPath} changed between optimizer observation (${String(input.adviceCurrent)}) and native-plan observation (${String(input.observedCurrent)})`,
         remediation: "Re-run token-harness plan --native-policy so recommendation and config precondition come from a stable state"
       }));
@@ -25385,7 +26484,7 @@ async function appendCodexNativePolicy(context, actions, diagnostics) {
       diagnostics.push(diagnostic({
         severity: "warning",
         code: "codex-native-policy-origin-unavailable",
-        subject: CODEX11,
+        subject: CODEX12,
         message: `Codex did not expose origin metadata for ${input.keyPath}, so it will not be managed`,
         remediation: "Keep this recommendation advisory rather than guessing config precedence"
       }));
@@ -25396,7 +26495,7 @@ async function appendCodexNativePolicy(context, actions, diagnostics) {
       diagnostics.push(diagnostic({
         severity: "warning",
         code: "codex-native-policy-shadowed",
-        subject: CODEX11,
+        subject: CODEX12,
         message: `${input.keyPath} currently comes from Codex layer ${origin.sourceType}` + (origin.profile === null ? "" : ` profile ${origin.profile}`) + ", not from the writable base user layer",
         path: origin.path,
         remediation: "Leave the project/profile-owned value untouched; change that scope explicitly if desired"
@@ -25408,7 +26507,7 @@ async function appendCodexNativePolicy(context, actions, diagnostics) {
         diagnostics.push(diagnostic({
           severity: "warning",
           code: "codex-native-model-unproven",
-          subject: CODEX11,
+          subject: CODEX12,
           message: "A managed Codex model change requires the learned model candidate and a complete native catalog",
           remediation: "Keep the model recommendation advisory until RFC 0018 evidence and the complete catalog agree"
         }));
@@ -25419,7 +26518,7 @@ async function appendCodexNativePolicy(context, actions, diagnostics) {
         diagnostics.push(diagnostic({
           severity: "warning",
           code: "codex-native-model-reference-ambiguous",
-          subject: CODEX11,
+          subject: CODEX12,
           message: "The learned Codex model recommendation does not resolve uniquely in the current native catalog",
           remediation: "Re-run the plan after the Codex model catalog is stable"
         }));
@@ -25539,6 +26638,8 @@ async function computePlan(context) {
     providers,
     rules: [...COMPATIBILITY_RULES],
     observedVersions: versions.providers,
+    observedHarnessVersions: versions.harnesses,
+    platform: { os: context.platform.os, wsl: context.platform.isWsl },
     harness: context.harness
   });
   const actions = [];
@@ -25643,6 +26744,41 @@ async function computePlan(context) {
       }
     }
   }
+  if (context.agentRouting === true || context.disableAgentRouting === true) {
+    const harness = context.harness;
+    if (harness !== harnessId("claude") && harness !== CODEX12) {
+      diagnostics.push(diagnostic({
+        severity: "warning",
+        code: "prompt-routing-harness-required",
+        subject: harness,
+        message: "Automatic prompt routing requires an explicit Claude Code or Codex harness",
+        remediation: "Choose the detected agent in the guided app, or pass --harness claude|codex"
+      }));
+    } else if (context.adapters === null) {
+      diagnostics.push(diagnostic({
+        severity: "warning",
+        code: "prompt-routing-adapters-unavailable",
+        subject: harness,
+        message: "The native prompt hook could not be planned without filesystem adapters",
+        remediation: "Refresh Token Harness from a supported local environment"
+      }));
+    } else {
+      const input = {
+        fs: context.adapters.fs,
+        home: context.home,
+        harness,
+        version: versions.harnesses[harness] ?? null,
+        runner: context.adapters.runner,
+        facts: context.platform,
+        paths: context.adapters.paths,
+        projectRoot: context.projectRoot,
+        stateRoot: context.stateRoot
+      };
+      const routingPlan = context.agentRouting ? await planNativePromptRoutingInstall(input) : await planNativePromptRoutingRemoval(input);
+      actions.push(...routingPlan.actions);
+      diagnostics.push(...routingPlan.diagnostics);
+    }
+  }
   if (context.nativePolicy === true && context.harness === harnessId("claude")) {
     if (context.taskClass === void 0 || context.taskClass === null) {
       diagnostics.push(diagnostic({
@@ -25818,18 +26954,19 @@ function planExitCode(counts) {
     return EXIT_CODES["blocked-by-conflict"];
   return EXIT_CODES.ok;
 }
-var DEFAULT_PROFILE, CODEX11;
+var DEFAULT_PROFILE, CODEX12;
 var init_plan2 = __esm({
   "apps/cli/dist/src/commands/plan.js"() {
     "use strict";
     init_src3();
     init_src();
     init_agent_skill();
+    init_prompt_router();
     init_apply();
     init_context_cost2();
     init_optimize();
     DEFAULT_PROFILE = "safe";
-    CODEX11 = harnessId("codex");
+    CODEX12 = harnessId("codex");
   }
 });
 
@@ -25901,6 +27038,48 @@ async function verifyManagedIntegrationPostconditions(context, integrations) {
   }
   return diagnostics;
 }
+async function verifyNativePromptRoutingPostconditions(context, actions) {
+  const routing = actions.filter((action) => action.id.startsWith("native-prompt-routing:"));
+  if (routing.length === 0)
+    return [];
+  if (context.adapters === null || context.stateRoot === null || context.harness !== harnessId("claude") && context.harness !== harnessId("codex")) {
+    return [
+      diagnostic({
+        severity: "error",
+        code: "prompt-routing-postcondition-unavailable",
+        subject: context.harness,
+        message: "Native prompt-routing configuration could not be read after the change",
+        remediation: "Keep the transaction rollback and review a fresh plan from the local agent environment"
+      })
+    ];
+  }
+  const observed = await observeNativePromptRouting({
+    fs: context.adapters.fs,
+    home: context.home,
+    stateRoot: context.stateRoot,
+    harness: context.harness,
+    version: null,
+    runner: context.adapters.runner,
+    facts: context.platform,
+    paths: context.adapters.paths,
+    projectRoot: context.projectRoot,
+    projectId: context.adapters.projectIdFor(context.projectRoot)
+  });
+  const shouldBeEnabled = routing.some((action) => action.id.includes(":enable:"));
+  const satisfied = shouldBeEnabled ? observed.configured === true : observed.configured === false;
+  if (satisfied)
+    return [];
+  return [
+    diagnostic({
+      severity: "error",
+      code: "prompt-routing-postcondition-unmet",
+      subject: context.harness,
+      path: observed.configPath,
+      message: `Native prompt-routing hooks were not observed in the requested state after the change: ${observed.label}`,
+      remediation: "Review the hook settings and allow the transaction to restore its backup"
+    })
+  ];
+}
 function transactionIdFor(planId, at) {
   const digest = digestText(`${planId} ${at}`);
   return digest.slice(digest.indexOf(":") + 1, digest.indexOf(":") + 13);
@@ -25967,6 +27146,8 @@ async function runApply(context) {
   const diagnostics = [];
   let stored = null;
   let storedAgentSkill = false;
+  let storedAgentRouting = false;
+  let storedAgentRoutingRemoval = false;
   let planningContext = context;
   const rejectedReport = () => ({
     ...emptyReport3("rejected"),
@@ -26020,11 +27201,15 @@ async function runApply(context) {
         return finish3("rejected", EXIT_CODES["precondition-drift"], rejectedReport(), diagnostics);
       }
       storedAgentSkill = stored.actions.some((action) => action.id.startsWith("agent-skill:"));
+      storedAgentRouting = stored.actions.some((action) => action.id.startsWith("native-prompt-routing:") && action.id.includes(":enable:"));
+      storedAgentRoutingRemoval = stored.actions.some((action) => action.id.startsWith("native-prompt-routing:") && action.id.includes(":disable:"));
       planningContext = {
         ...context,
         harness: stored.harness,
         provider,
-        agentSkill: storedAgentSkill
+        agentSkill: storedAgentSkill,
+        agentRouting: storedAgentRouting,
+        disableAgentRouting: storedAgentRoutingRemoval
       };
     } catch {
       diagnostics.push(diagnostic({
@@ -26048,6 +27233,16 @@ async function runApply(context) {
     }));
     return finish3("rejected", EXIT_CODES["precondition-drift"], rejectedReport(), diagnostics);
   }
+  if (stored !== null && (storedAgentRouting || storedAgentRoutingRemoval) && computed.report.planId !== stored.planId) {
+    diagnostics.push(diagnostic({
+      severity: "error",
+      code: "prompt-routing-plan-drift",
+      subject: stored.harness,
+      message: "The native prompt-routing target or ownership changed after the reviewed preview",
+      remediation: "Review a fresh prompt-routing preview; nothing was written"
+    }));
+    return finish3("rejected", EXIT_CODES["precondition-drift"], rejectedReport(), diagnostics);
+  }
   if (computed.blocked.length > 0 && computed.report.actions.length === 0) {
     return finish3("rejected", EXIT_CODES["unsupported-environment"], rejectedReport(), diagnostics);
   }
@@ -26151,7 +27346,10 @@ async function runApply(context) {
     // RFC 0004 §Process policy: an installer reaches the machine through the runner or not at all.
     runner: context.adapters.runner,
     now: context.now,
-    verifyPostconditions: async () => verifyManagedIntegrationPostconditions(context, computed.managedIntegrations)
+    verifyPostconditions: async () => [
+      ...await verifyManagedIntegrationPostconditions(context, computed.managedIntegrations),
+      ...await verifyNativePromptRoutingPostconditions(context, actions)
+    ]
   });
   diagnostics.push(...transaction.diagnostics);
   const report = {
@@ -26187,6 +27385,7 @@ var init_apply = __esm({
     "use strict";
     init_src();
     init_src3();
+    init_prompt_router();
     init_candidate_lifecycle();
     init_plan2();
     init_snapshot_safety();
@@ -26486,6 +27685,18 @@ async function runBenchmarkStart(context) {
     runContext(observedContext),
     runHistory({ ...observedContext, since: "1d", until: null })
   ]);
+  const nativeRoutingAtStart = context.adapters === null ? null : await nativeRoutingObservationForBenchmark({
+    fs: context.adapters.fs,
+    home: context.home,
+    stateRoot: context.stateRoot,
+    harness,
+    version: null,
+    runner: context.adapters.runner,
+    facts: context.platform,
+    paths: context.adapters.paths,
+    projectRoot: context.projectRoot,
+    projectId
+  });
   const budget = budgetResult.data?.harnesses.find((item) => item.harnessId === harness);
   const contextObservation = contextResult.data?.harnesses.find((item) => item.harnessId === harness);
   const policy = benchmarkPolicySnapshot(contextObservation);
@@ -26504,7 +27715,8 @@ async function runBenchmarkStart(context) {
     startedAt,
     usageBefore: budget?.windows ?? [],
     contextAtStart,
-    localSessionsBefore
+    localSessionsBefore,
+    nativeRoutingAtStart
   };
   if (!await writeJson(context, paths.capturePath, capture)) {
     return commandResult({
@@ -26689,6 +27901,19 @@ async function runBenchmarkFinish(context) {
     runContext(completedContext),
     runHistory({ ...completedContext, since: "1d", until: null })
   ]);
+  const nativeRoutingAtFinish = context.adapters === null ? null : await nativeRoutingObservationForBenchmark({
+    fs: context.adapters.fs,
+    home: context.home,
+    stateRoot: context.stateRoot,
+    harness: parsed.capture.harnessId,
+    version: null,
+    runner: context.adapters.runner,
+    facts: context.platform,
+    paths: context.adapters.paths,
+    projectRoot: context.projectRoot,
+    projectId,
+    startedAt: parsed.capture.startedAt
+  });
   const budget = budgetResult.data?.harnesses.find((item) => item.harnessId === parsed.capture.harnessId);
   const localUsage = parsed.capture.localSessionsBefore !== null && historyResult.data?.source.state === "available" ? deriveTaskLocalUsage(parsed.capture.localSessionsBefore, snapshotTaskLocalSessions(historyResult.data.sessions), parsed.capture.startedAt, completedAt) : null;
   const finishContextObservation = contextResult.data?.harnesses.find((item) => item.harnessId === parsed.capture.harnessId);
@@ -26700,7 +27925,8 @@ async function runBenchmarkFinish(context) {
     failedAttempts,
     localUsage,
     contextAtFinish: taskBenchmarkContextSnapshot(finishContextObservation),
-    policyAtFinish: benchmarkPolicySnapshot(finishContextObservation)
+    policyAtFinish: benchmarkPolicySnapshot(finishContextObservation),
+    nativeRoutingAtFinish
   });
   if (!completed.ok) {
     return commandResult({
@@ -26749,7 +27975,7 @@ async function runBenchmarkFinish(context) {
     ]
   });
 }
-var CLAUDE12, CODEX12, CAPTURE_HARNESSES;
+var CLAUDE13, CODEX13, CAPTURE_HARNESSES;
 var init_benchmark_capture = __esm({
   "apps/cli/dist/src/commands/benchmark-capture.js"() {
     "use strict";
@@ -26757,9 +27983,10 @@ var init_benchmark_capture = __esm({
     init_budget2();
     init_context_cost2();
     init_history2();
-    CLAUDE12 = harnessId("claude");
-    CODEX12 = harnessId("codex");
-    CAPTURE_HARNESSES = /* @__PURE__ */ new Set([CLAUDE12, CODEX12]);
+    init_prompt_router();
+    CLAUDE13 = harnessId("claude");
+    CODEX13 = harnessId("codex");
+    CAPTURE_HARNESSES = /* @__PURE__ */ new Set([CLAUDE13, CODEX13]);
   }
 });
 
@@ -28546,10 +29773,12 @@ async function runStatus(context) {
   const harnessAdapters = listHarnessAdapters().filter((adapter) => context.harness === null || adapter.manifest.id === context.harness);
   const present = [];
   const configs = [];
+  const observedHarnessVersions = {};
   for (const adapter of harnessAdapters) {
     const detection = await adapter.detect(detectionContext);
     if (detection.state === "absent")
       continue;
+    observedHarnessVersions[adapter.manifest.id] = detection.version;
     present.push(adapter.manifest);
     const inspection = await adapter.inspect(detectionContext);
     configs.push(...inspection.summaries);
@@ -28580,6 +29809,8 @@ async function runStatus(context) {
     providers,
     rules: [...COMPATIBILITY_RULES],
     observedVersions,
+    observedHarnessVersions,
+    platform: { os: context.platform.os, wsl: context.platform.isWsl },
     harness: context.harness
   });
   if (context.stateRoot !== null) {
@@ -29189,6 +30420,38 @@ var init_rollback = __esm({
   }
 });
 
+// apps/cli/dist/src/commands/verify-status.js
+function harnessesForVerification(selected, configured, present) {
+  if (selected !== null)
+    return present.includes(selected) ? [selected] : [];
+  return configured.length > 0 ? [...configured] : [...present];
+}
+function statusFor(achieved, declared, checks = []) {
+  const canaryNotExercised = checks.some((check) => (check.id === "canary-intercepted" || check.id.startsWith("rtk-attribution-")) && (check.status === "not-exercised" || check.status === "info" && check.achievedTier === null));
+  const noObservedOutcome = checks.length > 0 && checks.some((check) => check.status === "not-exercised") && checks.every((check) => check.status === "not-exercised" || check.status === "info");
+  if (canaryNotExercised || noObservedOutcome)
+    return "not-applicable";
+  const order = ["presence", "config-only", "canary", "live-receipt"];
+  if (achieved === null)
+    return "not-applicable";
+  const reached = order.indexOf(achieved);
+  const promised = order.indexOf(declared);
+  if (reached < 0 || promised < 0)
+    return "not-applicable";
+  return reached >= promised ? "healthy" : "degraded";
+}
+function allResultsAtDeclaredTier(results) {
+  return results.every((result6) => result6.status === "healthy");
+}
+function verificationHasProblems(results, failedCheckCount) {
+  return failedCheckCount > 0 || results.some((result6) => result6.status === "degraded" || result6.status === "failed");
+}
+var init_verify_status = __esm({
+  "apps/cli/dist/src/commands/verify-status.js"() {
+    "use strict";
+  }
+});
+
 // apps/cli/dist/src/commands/verify.js
 async function runVerify(context) {
   const diagnostics = [];
@@ -29256,18 +30519,14 @@ async function runVerify(context) {
       continue;
     const verification = await adapter.verify(providerContext4);
     diagnostics.push(...verification.diagnostics);
-    const harnesses = detection.configuredHarnesses.length > 0 ? detection.configuredHarnesses : (
-      // Installed but wired to nothing: still worth a row, on every present harness, because
-      // "installed and not connected here" is the finding.
-      presentHarnesses
-    );
+    const harnesses = harnessesForVerification(context.harness, detection.configuredHarnesses, presentHarnesses);
     for (const harnessId2 of harnesses) {
       const declaredTier = adapter.manifest.harnesses.find((entry) => entry.harness === harnessId2)?.verificationTier ?? verification.declaredTier;
       const scopedVerification = await scopeProviderVerificationToHarness(providerContext4, verification, harnessId2, detection.configuredHarnesses);
       results.push({
         providerId: adapter.manifest.id,
         harnessId: harnessId2,
-        status: statusFor(scopedVerification.achievedTier, declaredTier),
+        status: statusFor(scopedVerification.achievedTier, declaredTier, scopedVerification.checks),
         declaredTier,
         managedByTokenHarness: managedIntegrations.has(`${adapter.manifest.id}\0${harnessId2}`),
         providerManagedByTokenHarness: detection.managedByTokenHarness,
@@ -29278,15 +30537,16 @@ async function runVerify(context) {
   const receipts = context.metrics === null ? [] : await readReceipts(context);
   const latest = receipts[0] ?? null;
   const failures = results.flatMap((result6) => result6.checks.filter(contributesToProblems));
+  const hasProblems = verificationHasProblems(results, failures.length);
   const report = {
     receiptId: latest?.receiptId ?? null,
     appliedAt: latest?.appliedAt ?? null,
     results,
-    healthyAtDeclaredTier: failures.length === 0
+    healthyAtDeclaredTier: allResultsAtDeclaredTier(results)
   };
   return commandResult({
     command: "verify",
-    exitCode: failures.length === 0 ? EXIT_CODES.ok : EXIT_CODES["problems-found"],
+    exitCode: hasProblems ? EXIT_CODES["problems-found"] : EXIT_CODES.ok,
     data: report,
     diagnostics
   });
@@ -29323,21 +30583,12 @@ async function readReceipts(context) {
     return [];
   }
 }
-function statusFor(achieved, declared) {
-  const order = ["presence", "config-only", "canary", "live-receipt"];
-  if (achieved === null)
-    return "not-applicable";
-  const reached = order.indexOf(achieved);
-  const promised = order.indexOf(declared);
-  if (reached < 0 || promised < 0)
-    return "not-applicable";
-  return reached >= promised ? "healthy" : "degraded";
-}
 var init_verify = __esm({
   "apps/cli/dist/src/commands/verify.js"() {
     "use strict";
     init_src3();
     init_src();
+    init_verify_status();
   }
 });
 
@@ -32473,8 +33724,18 @@ function renderVerifyReport(report, _context) {
   if (report.healthyAtDeclaredTier) {
     lines.push("Healthy at the declared tier for every provider.");
   } else {
-    const failures = report.results.flatMap((result6) => result6.checks).filter((check) => check.status === "fail").length;
-    lines.push(`${String(failures)} ${pluralize(failures, "check")} below tier. Not proven.`);
+    const belowTier = report.results.filter((result6) => result6.status === "degraded" || result6.status === "failed").length;
+    const notProven = report.results.filter((result6) => result6.status === "not-applicable").length;
+    const failedChecks = report.results.flatMap((result6) => result6.checks).filter((check) => check.status === "fail").length;
+    if (belowTier > 0) {
+      lines.push(`${String(belowTier)} ${pluralize(belowTier, "provider\u2013harness integration")} below declared tier.`);
+    }
+    if (failedChecks > 0) {
+      lines.push(`${String(failedChecks)} ${pluralize(failedChecks, "check")} failed.`);
+    }
+    if (notProven > 0) {
+      lines.push(`${String(notProven)} ${pluralize(notProven, "provider\u2013harness integration")} not proven yet.`);
+    }
   }
   return document(lines);
 }
@@ -33338,12 +34599,19 @@ not-exercised, which is not a failure.`,
 
 Usage
   token-harness plan [--json] [--harness <id>] [--provider <id>] [--project <dir>]
+                     [--agent-routing | --disable-agent-routing]
                      [--native-policy] [--task <class>] [--profile <name>]
                      [--reserve <0-95>] [--tasks-left <n>]
 
 Read-only. Exits 0 when a plan was produced, and 4 when a hard conflict prevents
 apply. Nothing is changed either way.
 
+--agent-routing adds the native per-prompt hook for the selected Claude Code or Codex
+harness. --disable-agent-routing removes only exact hook entries owned by Token Harness.
+Both changes use the normal stored-plan, approval, verification and rollback path. Claude
+loads the change in a new session; Codex requires the user to review and trust the hook in
+/hooks. Configuration is shown separately from runtime callbacks in the guided app.
+
 --native-policy adds reviewed Codex native settings derived from the same optimizer
 policy as token-harness optimize. This build manages reasoning effort and verbosity
 only. A field coming from project config or a selected profile is left untouched.
@@ -33562,6 +34830,8 @@ async function run(options) {
     nativePolicy: invocation.options.nativePolicy,
     env: options.env ?? {},
     agentSkill: invocation.options.agentSkill,
+    agentRouting: invocation.options.agentRouting,
+    disableAgentRouting: invocation.options.disableAgentRouting,
     since: invocation.options.since,
     until: invocation.options.until,
     planId: invocation.options.plan,
@@ -34052,6 +35322,48 @@ function allowanceEvidence(entries, scope, quality) {
     pairs: deltas.length
   };
 }
+function routedAllowanceEvidence(entries, scope) {
+  const deltas = entries.flatMap((entry) => {
+    const quota = entry.quota;
+    if (quota === null || quota.scope !== scope || quota.confidence !== "authoritative")
+      return [];
+    return [quota.baselineDeltaUsedPercent - quota.optimizedDeltaUsedPercent];
+  });
+  const savedPercent = median2(deltas);
+  return {
+    state: savedPercent === null ? "not-measured" : "measured",
+    scope,
+    savedPercent: savedPercent === null ? null : roundOne(savedPercent),
+    equivalentMinutes: scope === "five-hour" && savedPercent !== null ? roundOne(savedPercent * 3) : null,
+    pairs: deltas.length
+  };
+}
+function routingEvidence(entries) {
+  const routed = entries.filter((entry) => entry.nativeRouting?.verdict === "attributed");
+  const eligible = routed.filter((entry) => entry.nativeRouting?.qualityGatesPassed === true);
+  const local = eligible.filter((entry) => entry.baselineLocalTokens !== null && entry.optimizedLocalTokens !== null);
+  const baselineLocalTokens = local.length ? local.reduce((total, entry) => total + (entry.baselineLocalTokens ?? 0), 0) : null;
+  const optimizedLocalTokens = local.length ? local.reduce((total, entry) => total + (entry.optimizedLocalTokens ?? 0), 0) : null;
+  const savedLocalTokens = baselineLocalTokens === null || optimizedLocalTokens === null ? null : baselineLocalTokens - optimizedLocalTokens;
+  const localTokenSavingPercent = baselineLocalTokens === null || optimizedLocalTokens === null || baselineLocalTokens <= 0 ? null : roundOne(savedLocalTokens / baselineLocalTokens * 100);
+  const qualityBlockedPairs = routed.length - eligible.length;
+  return {
+    state: routed.length === 0 ? "not-measured" : eligible.length === 0 ? "blocked-by-quality" : "measured",
+    pairs: eligible.length,
+    qualityBlockedPairs,
+    localPairs: local.length,
+    baselineLocalTokens,
+    optimizedLocalTokens,
+    savedLocalTokens,
+    localTokenSavingPercent,
+    allowance5h: routedAllowanceEvidence(eligible, "five-hour"),
+    allowance7d: routedAllowanceEvidence(eligible, "weekly"),
+    reportedChildModels: [
+      ...new Set(eligible.flatMap((entry) => entry.nativeRouting?.optimizedReportedModels ?? []))
+    ],
+    basis: routed.length === 0 ? "No paired benchmark currently proves that a native prompt hook ran and started a subagent." : eligible.length === 0 ? "Routing callbacks were observed, but all attributed pairs failed the quality gate; no savings are credited." : local.length > 0 || eligible.some((entry) => entry.quota?.confidence === "authoritative") ? "Exact local token counts and authoritative quota deltas are reported in separate units, only for attributed pairs that passed both quality gates." : "Routing was observed and both quality gates passed, but local token or authoritative quota usage was unavailable; no savings amount is inferred."
+  };
+}
 function guidedValueEvidence(report) {
   const entries = report?.entries ?? [];
   const quality = qualityEvidence(entries);
@@ -34060,6 +35372,7 @@ function guidedValueEvidence(report) {
     allowance5h: allowanceEvidence(entries, "five-hour", quality),
     allowance7d: allowanceEvidence(entries, "weekly", quality),
     quality,
+    routing: routingEvidence(entries),
     candidates: (report?.candidateEvidence ?? []).map((item) => ({ ...item })),
     apiCost: {
       state: "not-measured",
@@ -34304,7 +35617,7 @@ function guidanceView(id, observation) {
     ...observation.state === "absent" ? { action: { kind: "skill", label: "Enable in-session guidance", harness: id } } : {}
   };
 }
-function agentRules(id, providers, context, guidance) {
+function agentRules(id, providers, context, guidance, promptRouting) {
   const observation = context?.harnesses.find((item) => item.harnessId === id);
   const reasoning = reasoningView(id, observation);
   return [
@@ -34354,6 +35667,29 @@ function agentRules(id, providers, context, guidance) {
       next: guidance?.state === "managed" ? "Keep coding normally. Ask the agent to use Token Harness when you want an explicit quota-aware check." : guidance?.state === "external" ? "The matching skill can be used as-is. Token Harness keeps it user-owned." : guidance?.state === "conflict" ? "Review the existing skill manually. Token Harness will not overwrite it." : "Enable this once, then keep coding normally. Ask the agent to use Token Harness for a task when you want an explicit check.",
       ...guidance?.action ? { action: guidance.action } : {}
     },
+    {
+      id: `${id}-prompt-routing`,
+      title: "Automatic prompt routing",
+      state: promptRouting?.label ?? "Not verified",
+      mode: promptRouting?.state === "absent" ? "not-enabled" : promptRouting?.state === "managed" || promptRouting?.state === "external" ? "automatic" : "integration",
+      what: promptRouting?.detail ?? "Adds a native prompt hook that supplies the routing policy on every submitted prompt.",
+      why: "Eligible bounded work may use a cheaper native subagent. The root conversation model stays unchanged, and the model decides whether a native subagent is appropriate.",
+      evidence: promptRouting?.promptSubmissions ? `${String(promptRouting.promptSubmissions)} prompt callback(s) and ${String(promptRouting.subagentsStarted)} subagent start(s) observed in the last 30 days. Actual child model is shown only when the harness reports it.` : promptRouting?.configured ? "The hook is configured, but no prompt callback has been observed yet. Configuration alone is not runtime proof." : "No runtime routing evidence has been recorded yet.",
+      next: promptRouting?.state === "absent" ? "Enable routing once, restart or trust the hook if the harness requires it, then keep using prompts normally." : promptRouting?.state === "managed" ? "Routing is enabled. Disable it here if you want to stop injecting the policy on each prompt." : promptRouting?.state === "external" ? "This hook is user-owned. Token Harness can report it but will not remove it." : promptRouting?.detail ?? "Refresh to inspect the native prompt-hook state.",
+      ...promptRouting?.state === "absent" ? {
+        action: {
+          kind: "routing-enable",
+          label: "Enable automatic routing",
+          harness: id
+        }
+      } : promptRouting?.state === "managed" ? {
+        action: {
+          kind: "routing-disable",
+          label: "Disable automatic routing",
+          harness: id
+        }
+      } : {}
+    },
     {
       id: `${id}-mcp`,
       title: "Connected tools",
@@ -34587,11 +35923,13 @@ var init_guided = __esm({
       now;
       random;
       observeGuidance;
-      constructor(call, now, random, observeGuidance = null) {
+      observeRouting;
+      constructor(call, now, random, observeGuidance = null, observeRouting = null) {
         this.call = call;
         this.now = now;
         this.random = random;
         this.observeGuidance = observeGuidance;
+        this.observeRouting = observeRouting;
       }
       status() {
         return {
@@ -34663,6 +36001,7 @@ var init_guided = __esm({
         const empty2 = () => ({ data: null, diagnostics: [], exitCode: 9 });
         let doctor = empty2(), budget = empty2(), context = empty2();
         let guidance;
+        let promptRouting;
         const observe = async (id, args) => {
           let result6;
           try {
@@ -34680,7 +36019,7 @@ var init_guided = __esm({
           loading.agents = this.agentView(doctor, budget, context, {
             rules: loading.stages.find((item) => item.id === "rules")?.state !== "working",
             allowance: loading.stages.find((item) => item.id === "allowance")?.state !== "working"
-          }, guidance);
+          }, guidance, promptRouting);
         };
         const [, , , metrics, status, benchmark] = await Promise.all([
           observe("agents", ["doctor"]).then((result6) => {
@@ -34707,6 +36046,29 @@ var init_guided = __esm({
                 }
               }));
             }
+            if (this.observeRouting !== null) {
+              promptRouting = {};
+              await Promise.all(["claude", "codex"].map(async (harness) => {
+                try {
+                  promptRouting[harness] = await this.observeRouting(harness);
+                } catch {
+                  promptRouting[harness] = {
+                    harness,
+                    state: "unavailable",
+                    label: "Not verified",
+                    detail: "Native prompt-hook status could not be checked.",
+                    configPath: null,
+                    configured: null,
+                    promptSubmissions: 0,
+                    subagentsStarted: 0,
+                    subagentsStopped: 0,
+                    reportedModels: [],
+                    lastObservedAt: null,
+                    receiptState: "unavailable"
+                  };
+                }
+              }));
+            }
             updateAgents();
           }),
           observe("savings", [
@@ -34720,7 +36082,7 @@ var init_guided = __esm({
           observe("checks", ["status"]),
           observe("value", ["benchmark-matrix"])
         ]);
-        const agents = this.agentView(doctor, budget, context, { rules: true, allowance: true }, guidance);
+        const agents = this.agentView(doctor, budget, context, { rules: true, allowance: true }, guidance, promptRouting);
         const notices = [];
         if (doctor.data === null)
           notices.push("The agent inventory could not be read. Check the local installation and refresh.");
@@ -34748,7 +36110,7 @@ var init_guided = __esm({
           notices
         };
       }
-      agentView(doctor, budget, context, complete2, guidance) {
+      agentView(doctor, budget, context, complete2, guidance, promptRouting) {
         const present = (doctor.data?.harnesses ?? []).filter((item) => item.state !== "absent" && (item.harnessId === "claude" || item.harnessId === "codex"));
         return present.map((agent) => {
           const providers = (doctor.data?.providers ?? []).filter((provider) => provider.state === "configured" && provider.configuredHarnesses.includes(agent.harnessId)).map((p) => p.providerId);
@@ -34771,8 +36133,9 @@ var init_guided = __esm({
             effort: observed?.nativeEffort?.current ?? observed?.reasoningEffort ?? null,
             reasoning: reasoningView(agent.harnessId, observed),
             ...guidance?.[agent.harnessId] ? { guidance: guidance[agent.harnessId] } : {},
+            ...promptRouting?.[agent.harnessId] ? { promptRouting: promptRouting[agent.harnessId] } : {},
             allowanceAction: allowanceAction(usage?.diagnostics ?? []),
-            rules: agentRules(agent.harnessId, providers, context.data, guidance?.[agent.harnessId]),
+            rules: agentRules(agent.harnessId, providers, context.data, guidance?.[agent.harnessId], promptRouting?.[agent.harnessId]),
             allowance: (usage?.windows ?? []).map((window) => ({
               label: window.scope === "five-hour" ? "5-hour allowance" : `${window.scope} allowance`,
               remaining: window.remainingPercent,
@@ -34807,11 +36170,13 @@ var init_guided = __esm({
           "setup",
           "effort",
           "skill",
+          "routing-enable",
+          "routing-disable",
           "undo",
           "remove",
           "candidate-setup",
           "candidate-remove"
-        ].includes(action) || data["harness"] !== void 0 && !["claude", "codex"].includes(String(data["harness"])) || data["harnesses"] !== void 0 && !validHarnesses || data["harnesses"] !== void 0 && action !== "setup" || data["harnesses"] !== void 0 && data["harness"] !== void 0 || data["task"] !== void 0 && !TASKS.has(String(data["task"])) || data["provider"] !== void 0 && !["rtk", "harnesstrim", "mcptoon", "gitnexus", "headroom"].includes(String(data["provider"])) || data["candidate"] !== void 0 && !["mcptoon", "gitnexus"].includes(String(data["candidate"])) || action === "effort" && (data["harness"] === void 0 || data["task"] === void 0) || action === "skill" && data["harness"] === void 0 || action === "remove" && (data["provider"] === void 0 || data["harness"] !== void 0 || data["harnesses"] !== void 0 || data["task"] !== void 0 || data["candidate"] !== void 0) || data["provider"] !== void 0 && action !== "remove" && action !== "setup" || candidateAction && (data["candidate"] === void 0 || data["harness"] === void 0 || data["provider"] !== void 0 || data["task"] !== void 0) || !candidateAction && data["candidate"] !== void 0)
+        ].includes(action) || data["harness"] !== void 0 && !["claude", "codex"].includes(String(data["harness"])) || data["harnesses"] !== void 0 && !validHarnesses || data["harnesses"] !== void 0 && action !== "setup" || data["harnesses"] !== void 0 && data["harness"] !== void 0 || data["task"] !== void 0 && !TASKS.has(String(data["task"])) || data["provider"] !== void 0 && !["rtk", "harnesstrim", "mcptoon", "gitnexus", "headroom"].includes(String(data["provider"])) || data["candidate"] !== void 0 && !["mcptoon", "gitnexus"].includes(String(data["candidate"])) || action === "effort" && (data["harness"] === void 0 || data["task"] === void 0) || action === "skill" && data["harness"] === void 0 || (action === "routing-enable" || action === "routing-disable") && data["harness"] === void 0 || action === "remove" && (data["provider"] === void 0 || data["harness"] !== void 0 || data["harnesses"] !== void 0 || data["task"] !== void 0 || data["candidate"] !== void 0) || data["provider"] !== void 0 && action !== "remove" && action !== "setup" || candidateAction && (data["candidate"] === void 0 || data["harness"] === void 0 || data["provider"] !== void 0 || data["task"] !== void 0) || !candidateAction && data["candidate"] !== void 0)
           throw new GuideError(400, "Choose a supported agent and action.");
         return this.exclusive(async () => {
           this.approval = null;
@@ -34999,13 +36364,17 @@ var init_guided = __esm({
                 args.push("--provider", setupProvider);
               if (data["action"] === "skill") {
                 args.push("--provider", "none", "--agent-skill");
+              } else if (data["action"] === "routing-enable") {
+                args.push("--provider", "none", "--agent-routing");
+              } else if (data["action"] === "routing-disable") {
+                args.push("--provider", "none", "--disable-agent-routing");
               } else if (data["action"] === "effort")
                 args.push("--provider", "none", "--native-policy", "--task", String(data["task"]), "--profile", data["task"] === "mechanical" ? "economy" : data["task"] === "standard" ? "balanced" : "quality");
               const result6 = await this.call(args);
               const report = result6.data;
               if (report === null || result6.exitCode !== 0 || report.conflicts.length > 0 || report.actions.length === 0 || !report.persisted || report.planId === null) {
                 const subject = setupProvider !== null ? `${name(agent.harnessId)} \xB7 ${name(setupProvider)}` : name(agent.harnessId);
-                notices.push(`${subject}: ${explainGuideIssue(result6.diagnostics, data["action"] === "effort" ? "No supported preference change is needed or available. Your current preference is kept." : data["action"] === "skill" ? "In-session guidance is already present, or an existing user-owned skill location was left untouched." : "No safe setup change is available for the current provider, agent version and platform.")}`);
+                notices.push(`${subject}: ${explainGuideIssue(result6.diagnostics, data["action"] === "effort" ? "No supported preference change is needed or available. Your current preference is kept." : data["action"] === "skill" ? "In-session guidance is already present, or an existing user-owned skill location was left untouched." : data["action"] === "routing-enable" || data["action"] === "routing-disable" ? "No safe native prompt-routing change is available for the current harness, hook state and ownership evidence." : "No safe setup change is available for the current provider, agent version and platform.")}`);
                 continue;
               }
               plans.push(report.planId);
@@ -35015,6 +36384,8 @@ var init_guided = __esm({
                   description: "Installs one reviewed Token Harness Agent Skill in the standard user skill directory. It does not change model, login, billing, hooks, trust, or the current conversation.",
                   files: 1
                 });
+              } else if (data["action"] === "routing-enable" || data["action"] === "routing-disable") {
+                changes.push(...report.actions.map((action2) => describeChange(action2, agent.harnessId)));
               } else {
                 changes.push(...report.actions.map((action2) => describeChange(action2, agent.harnessId)));
               }
@@ -35032,7 +36403,7 @@ var init_guided = __esm({
               plans,
               transactionId: null,
               provider: null,
-              description: data["action"] === "effort" ? "Task preference" : data["action"] === "skill" ? "In-session guidance" : "Integration setup",
+              description: data["action"] === "effort" ? "Task preference" : data["action"] === "skill" ? "In-session guidance" : data["action"] === "routing-enable" || data["action"] === "routing-disable" ? "Automatic prompt routing" : "Integration setup",
               operation: "apply",
               network
             };
@@ -35044,7 +36415,7 @@ var init_guided = __esm({
             notices,
             expiresAt: id === null ? null : new Date(expires).toISOString(),
             network,
-            restart: data["action"] === "effort" || data["action"] === "skill"
+            restart: data["action"] === "effort" || data["action"] === "skill" || data["action"] === "routing-enable" || data["action"] === "routing-disable"
           };
         });
       }
@@ -38034,6 +39405,31 @@ var init_guided_product_client = __esm({
           'caption',
         ),
       );
+      const routing = agent.promptRouting;
+      const routingCard = node('div', undefined, 'routing-feature');
+      const routingHead = node('div', undefined, 'tool-head');
+      routingHead.append(
+        node('strong', 'Automatic prompt routing'),
+        pill(routing?.label || 'Not verified', routing?.state === 'managed' ? 'good' : routing?.state === 'absent' ? '' : 'warn'),
+      );
+      routingCard.append(
+        routingHead,
+        node(
+          'p',
+          routing?.detail || 'A native hook can inject the routing policy on every submitted prompt. Setup and runtime activity are tracked separately.',
+          'caption',
+        ),
+      );
+      const routingActions = node('div', undefined, 'inline-actions');
+      if (routing?.state === 'absent') {
+        routingActions.append(actionButton('Enable routing', () => reviewPromptRouting(agent.id, true), 'secondary'));
+      } else if (routing?.state === 'managed') {
+        routingActions.append(actionButton('Disable routing', () => reviewPromptRouting(agent.id, false), 'secondary'));
+      } else if (routing?.state === 'external') {
+        routingActions.append(node('span', 'Managed elsewhere · left untouched', 'caption'));
+      }
+      if (routingActions.children.length) routingCard.append(routingActions);
+      card.append(routingCard);
       if (baseline.unavailable.length) {
         const details = node('details', undefined, 'agent-details');
         details.append(node('summary', 'Connection limitations'));
@@ -38125,6 +39521,57 @@ var init_guided_product_client = __esm({
       });
   }
 
+  function reviewPromptRouting(agentId, enabled) {
+    if (busy) return;
+    const run = modal((enabled ? 'Enable' : 'Disable') + ' automatic routing · ' + agentName(agentId));
+    $('modal-content').append(
+      messageBox(
+        'How this works',
+        enabled
+          ? 'Token Harness adds a native UserPromptSubmit hook that supplies a short routing policy on each prompt. The agent may delegate eligible bounded work to a lower-cost native subagent; the root model stays the same.'
+          : 'Token Harness removes only the exact native routing entries it owns. User-edited or manually installed hooks remain untouched.',
+      ),
+      progress('Preparing a read-only plan', 'No harness settings change until you approve the exact preview.'),
+    );
+    $('modal-actions').append(modalClose('Cancel'));
+    setBusy(true, false);
+    ensureSession()
+      .then(() => request('/api/preview', {
+        action: enabled ? 'routing-enable' : 'routing-disable',
+        harness: agentId,
+      }))
+      .then(data => {
+        if (run !== modalRun || !$('modal').open) return;
+        pendingTicket = data.ticket;
+        $('modal-content').replaceChildren();
+        for (const change of data.changes || []) {
+          const item = node('article', undefined, 'preview-change');
+          item.append(node('h3', change.title), node('p', change.description));
+          $('modal-content').append(item);
+        }
+        if (!(data.changes || []).length)
+          $('modal-content').append(messageBox('No change proposed', (data.notices || []).join(' ') || 'The current routing state or ownership evidence does not support a safe change.'));
+        for (const notice of data.notices || []) $('modal-content').append(node('p', notice, 'notice-row'));
+        $('modal-content').append(messageBox(
+          agentId === 'codex' ? 'Codex trust step' : 'When it takes effect',
+          agentId === 'codex'
+            ? 'After Apply, review and trust the UserPromptSubmit hook in Codex using /hooks. Until a callback is observed, the dashboard will show it as configured but not runtime verified.'
+            : 'After Apply, start a new Claude Code session. The dashboard will show configured state first and runtime activity after the next prompt callback.',
+          'safe',
+        ));
+        $('modal-actions').replaceChildren(modalClose(data.ticket ? 'Cancel' : 'Done'));
+        if (data.ticket) $('modal-actions').append(actionButton(enabled ? 'Apply routing hook' : 'Remove owned routing hook', () => applyTicket(data.ticket)));
+      })
+      .catch(error => {
+        if (run !== modalRun) return;
+        $('modal-error').textContent = error.message;
+        $('modal-error').hidden = false;
+      })
+      .finally(() => {
+        if (run === modalRun) setBusy(false, false);
+      });
+  }
+
   function reviewSetup(providerId = null) {
     if (busy) return;
     const choices = setupChoiceData(providerId);
@@ -38815,10 +40262,6 @@ var init_guided_product_client = __esm({
         node('strong', component?.configuredHarnesses?.length ? component.configuredHarnesses.map(agentName).join(', ') : 'No detected agent'),
       );
       const measured = rows.filter(row => row.providerId === id);
-      facts.append(
-        node('span', 'Recorded results'),
-        node('strong', measured.length ? measured.length + ' recorded result' + (measured.length === 1 ? '' : 's') : 'None in this period'),
-      );
       card.append(facts);
       if (!measured.length) {
         card.append(
@@ -38922,6 +40365,29 @@ var init_guided_product_client = __esm({
       metricCard('5h / 7d allowance', allowance.value, allowance.detail, allowance.cls),
       metricCard('Quality', quality.value, quality.detail, quality.cls),
     );
+    const routed = current?.value?.routing;
+    const quotaParts = [];
+    if (routed?.allowance5h?.state === 'measured' && routed.allowance5h.savedPercent !== null)
+      quotaParts.push(routed.allowance5h.savedPercent >= 0
+        ? '5h saved ' + count(routed.allowance5h.savedPercent) + '%'
+        : '5h use +' + count(Math.abs(routed.allowance5h.savedPercent)) + '%');
+    if (routed?.allowance7d?.state === 'measured' && routed.allowance7d.savedPercent !== null)
+      quotaParts.push(routed.allowance7d.savedPercent >= 0
+        ? '7d saved ' + count(routed.allowance7d.savedPercent) + '%'
+        : '7d use +' + count(Math.abs(routed.allowance7d.savedPercent)) + '%');
+    const routingValue = routed?.state === 'blocked-by-quality'
+      ? 'Not credited'
+      : routed?.savedLocalTokens !== null && routed?.savedLocalTokens !== undefined
+        ? (routed.savedLocalTokens >= 0
+          ? count(routed.savedLocalTokens) + ' tokens saved' + (routed.localTokenSavingPercent === null ? '' : ' · ' + count(routed.localTokenSavingPercent) + '%')
+          : count(Math.abs(routed.savedLocalTokens)) + ' tokens added' + (routed.localTokenSavingPercent === null ? '' : ' · ' + count(Math.abs(routed.localTokenSavingPercent)) + '%'))
+        : quotaParts.length ? 'Allowance measured' : routed?.state === 'measured' ? 'Usage unavailable' : 'Not measured yet';
+    const routingDetail = routed?.state === 'blocked-by-quality'
+      ? routed.basis
+      : (quotaParts.length ? quotaParts.join(' · ') + '. ' : '') +
+        (routed?.pairs ? count(routed.pairs) + ' quality-passed routed pair(s). ' : '') +
+        'Local tokens and allowance percentages are separate measurements. Actual child model is not exposed by every harness hook.';
+    $('result-summary').append(metricCard('Automatic routing', routingValue, routingDetail, routed?.state === 'measured' ? 'positive' : ''));
     renderResultOptimizers();
     renderResultAgents();
     renderSavings();
@@ -39069,6 +40535,7 @@ var init_guided_product_styles = __esm({
 .setup-step{margin:1.6rem 0}.step-heading{display:grid;grid-template-columns:34px 1fr;gap:.65rem;align-items:start;margin-bottom:.7rem}.step-number{display:grid;place-items:center;width:32px;height:32px;border-radius:9px;background:var(--accent);color:#fff;font-weight:900}.step-heading h2{margin:0}.step-heading p{margin:.2rem 0;color:var(--muted)}
 .connection-overview{display:grid;gap:.75rem}.connection-summary{display:flex;align-items:center;justify-content:space-between;gap:1rem;background:var(--panel);border:1px solid var(--line);border-radius:var(--radius);padding:1rem}.connection-summary p{margin:.15rem 0 0}.connection-scroll{overflow-x:auto;border:1px solid var(--line);border-radius:var(--radius);background:var(--panel)}.connection-table{min-width:max(720px,100%)}.connection-row{display:grid;grid-template-columns:minmax(170px,1.25fr) repeat(var(--connection-columns),minmax(130px,1fr)) minmax(155px,.8fr);align-items:center;gap:.6rem;padding:.72rem .8rem;border-bottom:1px solid var(--line)}.connection-row:last-child{border-bottom:0}.connection-head{background:var(--panel-soft);color:var(--muted);font-size:.8rem}.connection-name{display:grid;gap:.12rem}.connection-cell,.connection-action{min-width:0}.connection-action{display:flex;justify-content:flex-end}.tool-grid{display:grid;grid-template-columns:repeat(2,minmax(0,1fr));gap:.8rem}.candidate-comparison-toolbar{grid-column:1/-1;justify-content:flex-end;align-self:start}.tool-card{background:var(--panel);border:1px solid var(--line);border-radius:var(--radius);padding:1rem;box-shadow:var(--shadow)}.tool-card.experimental{border-style:dashed}.tool-card.compact{box-shadow:none}.tool-card>p{color:var(--muted);margin:.65rem 0}.tool-head{display:flex;align-items:flex-start;justify-content:space-between;gap:.75rem}.tool-head h3{margin:0}.tool-facts{display:grid;grid-template-columns:auto 1fr;gap:.3rem .75rem;border-top:1px solid var(--line);border-bottom:1px solid var(--line);padding:.65rem 0;margin:.65rem 0}.tool-facts span{color:var(--muted);font-size:.8rem}.tool-facts strong{font-size:.85rem}
 .connection-role{max-width:28ch}.setup-choice-list{display:grid;gap:.55rem;margin:.9rem 0}.setup-choice-list h3{margin:.25rem 0 0}.setup-choice{display:grid;grid-template-columns:auto 1fr;align-items:start;gap:.7rem;padding:.8rem;border:1px solid var(--line);border-radius:12px;background:var(--panel);cursor:pointer}.setup-choice:hover{border-color:var(--accent);background:var(--accent-soft)}.setup-choice input{inline-size:1.1rem;block-size:1.1rem;margin:.15rem 0 0;accent-color:var(--accent)}.setup-choice-copy{display:grid;gap:.2rem}.setup-choice-limitation{color:var(--muted)}
+.routing-feature{margin:.8rem 0;padding:.8rem;border:1px solid var(--line);border-radius:12px;background:var(--panel-soft)}.routing-feature .tool-head{align-items:center}.routing-feature p{margin:.55rem 0;color:var(--muted)}
 .managed-action-box{margin-top:.8rem;background:var(--panel-soft);border:1px solid var(--line);border-radius:12px;padding:.85rem}.managed-action-box p{margin:.1rem 0 .65rem}
 .maintenance-list{display:grid;gap:.55rem}.maintenance-row{display:flex;align-items:center;justify-content:space-between;gap:1rem;background:var(--panel);border:1px solid var(--line);border-radius:12px;padding:.8rem}.maintenance-row p{margin:.15rem 0}
 .explain-box{background:var(--panel-soft);border:1px solid var(--line);border-radius:12px;padding:.8rem;margin:.6rem 0}.explain-box p{margin:.25rem 0;color:var(--muted)}.explain-box.warn{background:var(--warn-soft);border-color:color-mix(in srgb,var(--warn) 35%,var(--line))}.explain-box.safe{background:var(--good-soft);border-color:color-mix(in srgb,var(--good) 30%,var(--line))}.operation-progress{margin:.75rem 0;padding:.8rem;border:1px solid var(--line);border-radius:12px}.operation-progress p{margin:.35rem 0 0}
@@ -39749,7 +41216,7 @@ ${GUIDE_CANDIDATE_READINESS_JS}`;
 </div>
 
 <section class="setup-step" id="coding-agents">
-<div class="section-title"><div><h2>Coding agents</h2><p>Detected coding apps are shown here as status. Optimizer setup is managed centrally below; a detected setup does not prove that it ran or recorded results.</p></div></div>
+<div class="section-title"><div><h2>Coding agents</h2><p>Enable automatic per-prompt routing here for each detected coding app. The card distinguishes hook configuration from callbacks actually observed at runtime.</p></div></div>
 <div id="setup-agents" class="tool-grid"><article class="tool-card"><h3>Checking agents\u2026</h3></article></div>
 <details class="disclosure advanced-disclosure">
 <summary>Agent details and optional reasoning settings</summary>
@@ -40217,6 +41684,19 @@ async function runAsDatabaseReader(argv2) {
   process5.exitCode = 0;
   return true;
 }
+function parsePromptRouterEvent(value3) {
+  if (value3 === "prompt-submit" || value3 === "subagent-start" || value3 === "subagent-stop")
+    return value3;
+  return null;
+}
+function emitPromptRouterContext(harness) {
+  process5.stdout.write(JSON.stringify({
+    hookSpecificOutput: {
+      hookEventName: "UserPromptSubmit",
+      additionalContext: ROUTING_CONTEXT[harness]
+    }
+  }) + "\n");
+}
 async function readStandardInput() {
   const chunks = [];
   let bytes = 0;
@@ -40241,6 +41721,16 @@ async function main(argv2) {
     }
     return;
   }
+  if (argv2[0] === PROMPT_ROUTER_FLAG && argv2[2] === "--check") {
+    if (argv2[1] === "claude" || argv2[1] === "codex") {
+      process5.stdout.write(`${PROMPT_ROUTER_CHECK_MARKER2}
+`);
+      process5.exitCode = EXIT_CODES.ok;
+    } else {
+      process5.exitCode = EXIT_CODES["usage-error"];
+    }
+    return;
+  }
   const opensGuide = argv2.length === 0 || argv2[0] === "start" || argv2[0] === "ui";
   const readOnly = argv2.includes("--read-only");
   const uiInvocation = opensGuide ? parseUiArgs(argv2.slice(1).filter((arg) => arg !== "--read-only")) : null;
@@ -40310,6 +41800,34 @@ Run token-harness ui --help for usage.
     env: process5.env,
     stdoutIsTty: process5.stdout.isTTY === true
   };
+  if (argv2[0] === PROMPT_ROUTER_FLAG) {
+    const selected = argv2[1];
+    const event = parsePromptRouterEvent(argv2[2]);
+    if (selected !== "claude" && selected !== "codex" || event === null) {
+      process5.exitCode = EXIT_CODES.ok;
+      return;
+    }
+    const input = await readStandardInput();
+    if (resolution.ok && fs !== null && input !== null) {
+      try {
+        const projectId = attribution.salt === null ? null : deriveProjectId(process5.cwd(), attribution.salt, resolution.environment.facts.os === "windows");
+        await recordNativePromptRoutingHook({
+          fs,
+          stateRoot: resolution.environment.paths.state,
+          harness: selected,
+          event,
+          projectId,
+          now: (/* @__PURE__ */ new Date()).toISOString(),
+          hookInput: input
+        });
+      } catch {
+      }
+    }
+    if (event === "prompt-submit")
+      emitPromptRouterContext(selected);
+    process5.exitCode = EXIT_CODES.ok;
+    return;
+  }
   if (argv2[0] === RTK_HOOK_PROXY_FLAG) {
     const selected = argv2[1];
     if (selected !== "claude" && selected !== "codex") {
@@ -40532,6 +42050,35 @@ async function runGuidedUi(options, base) {
       stateRoot: base.stateRoot ?? null,
       harness
     });
+  }, async (harness) => {
+    if (base.adapters === null || base.adapters === void 0 || base.platform === null) {
+      return {
+        harness,
+        state: "unavailable",
+        label: "Not verified",
+        detail: "The local filesystem is unavailable, so native prompt routing cannot be checked.",
+        configPath: null,
+        configured: null,
+        promptSubmissions: 0,
+        subagentsStarted: 0,
+        subagentsStopped: 0,
+        reportedModels: [],
+        lastObservedAt: null,
+        receiptState: "unavailable"
+      };
+    }
+    return observeNativePromptRouting({
+      fs: base.adapters.fs,
+      home: base.home,
+      stateRoot: base.stateRoot ?? null,
+      harness: harnessId(harness),
+      version: null,
+      runner: base.adapters.runner,
+      facts: base.platform,
+      paths: base.adapters.paths,
+      projectRoot: base.cwd,
+      projectId: base.adapters.projectIdFor(base.cwd)
+    });
   });
   const token = randomBytes2(32).toString("hex");
   let authority = "";
@@ -40632,7 +42179,7 @@ async function runSavingsView(args, base) {
   }
   return result6.exitCode;
 }
-var RTK_HOOK_PROXY_FLAG, MAX_HOOK_INPUT_BYTES, UI_SECURITY_HEADERS;
+var RTK_HOOK_PROXY_FLAG, PROMPT_ROUTER_FLAG, PROMPT_ROUTER_CHECK_MARKER2, MAX_HOOK_INPUT_BYTES, ROUTING_CONTEXT, UI_SECURITY_HEADERS;
 var init_main = __esm({
   "apps/cli/dist/src/main.js"() {
     "use strict";
@@ -40643,11 +42190,19 @@ var init_main = __esm({
     init_version2();
     init_guided();
     init_agent_skill();
+    init_prompt_router();
     init_guided_candidate_campaign_status();
     init_guided_http();
     init_rtk_hook_proxy();
+    init_prompt_router();
     RTK_HOOK_PROXY_FLAG = "__internal-rtk-hook";
+    PROMPT_ROUTER_FLAG = "__internal-prompt-router";
+    PROMPT_ROUTER_CHECK_MARKER2 = "token-harness-prompt-router-v1";
     MAX_HOOK_INPUT_BYTES = 1024 * 1024;
+    ROUTING_CONTEXT = {
+      codex: "For substantial coding work, delegate at most one independent bounded subtask to a native subagent with gpt-6-luna if available and the root is not Luna. Keep trivial, coupled, security, architecture, release, and integration decisions on the root. Specify the model; if unavailable, stay on the root. The root reviews. Claim savings only from paired, quality-gated measurements.",
+      claude: "For substantial coding work, delegate at most one independent bounded subtask to a native subagent with the current Haiku alias if available and cheaper than the root. Keep trivial, coupled, security, architecture, release, and integration decisions on the root. Specify the model; if unavailable, stay on the root. The root reviews. Claim savings only from paired, quality-gated measurements."
+    };
     UI_SECURITY_HEADERS = {
       "Cache-Control": "no-store",
       "Content-Security-Policy": "default-src 'self'; script-src 'self'; style-src 'self'; connect-src 'self'; img-src 'self' data:; object-src 'none'; base-uri 'none'; frame-ancestors 'none'",