// docs-guard-exempt: docs/TESTING-SUITES.md is cited only in a header comment; never read.
'use strict';

/**
 * Tests for model-resolver.cjs (ADR-857 phase 2f / #888).
 *
 * Covers:
 *   - resolveModelInternal: model resolution across tiers + profile overrides
 *   - resolveGranularityInternal + assertValidGranularityOverride
 *   - resolveEffortInternal / resolveFastModeInternal
 *   - resolveEffortForTier / nextEffort
 *   - resolveModelForTier (dynamic routing)
 *   - resolveModelPolicy (#49 provider-neutral presets)
 *   - resolveTierEntry (#2517 runtime-aware tier resolution)
 *   - shim identity: core.X === modelResolver.X for all 13 public symbols
 *   - ADVERSARIAL: unknown agent types, invalid granularity/effort overrides,
 *     runtime override edge cases
 */

process.env.MSD_TEST_MODE = '1';

const { describe, test, beforeEach, afterEach } = require('node:test');
const assert = require('node:assert/strict');
const fs = require('node:fs');
const path = require('node:path');
const os = require('node:os');

const { cleanup } = require('./helpers.cjs');

// ─── modules under test ───────────────────────────────────────────────────────

const modelResolver = require('../msd-core/bin/lib/model-resolver.cjs');

const {
  resolveTierEntry,
  resolveModelPolicy,
  resolveModelInternal,
  VALID_GRANULARITIES,
  resolveGranularityInternal,
  assertValidGranularityOverride,
  resolveModelForTier,
  VALID_EFFORTS,
  EFFORT_SET,
  nextEffort,
  resolveEffortInternal,
  resolveFastModeInternal,
  resolveEffortForTier,
  resolveTierFromConfig,
  resolveTierInternal,
} = modelResolver;

// ─── helpers ──────────────────────────────────────────────────────────────────

function makeTempProject(prefix = 'msd-model-resolver-test-') {
  const tmpDir = fs.mkdtempSync(path.join(os.tmpdir(), prefix));
  fs.mkdirSync(path.join(tmpDir, '.planning', 'phases'), { recursive: true });
  return tmpDir;
}

function writeConfig(tmpDir, obj) {
  const configPath = path.join(tmpDir, '.planning', 'config.json');
  fs.writeFileSync(configPath, JSON.stringify(obj, null, 2), 'utf-8');
}


// ─── resolveModelInternal ─────────────────────────────────────────────────────

describe('resolveModelInternal', () => {
  let tmpDir;
  beforeEach(() => { tmpDir = makeTempProject(); });
  afterEach(() => { if (tmpDir) cleanup(tmpDir); tmpDir = null; });

  test('no config -> balanced profile -> msd-planner resolves to a string', () => {
    const model = resolveModelInternal(tmpDir, 'msd-planner');
    assert.ok(typeof model === 'string' && model.length > 0, `Expected non-empty string, got: ${JSON.stringify(model)}`);
  });

  test('model_overrides takes precedence over everything else', () => {
    writeConfig(tmpDir, { model_overrides: { 'msd-planner': 'my-custom-model' } });
    assert.strictEqual(resolveModelInternal(tmpDir, 'msd-planner'), 'my-custom-model');
  });

  test('model_profile=quality -> opus-class model for msd-planner', () => {
    writeConfig(tmpDir, { model_profile: 'quality' });
    const model = resolveModelInternal(tmpDir, 'msd-planner');
    // quality profile must resolve to a non-empty model string
    assert.ok(typeof model === 'string' && model.length > 0);
  });

  test('model_profile=budget -> haiku-class model for msd-planner', () => {
    writeConfig(tmpDir, { model_profile: 'budget' });
    const model = resolveModelInternal(tmpDir, 'msd-planner');
    assert.ok(typeof model === 'string' && model.length > 0);
  });

  test('resolve_model_ids=omit -> returns empty string', () => {
    writeConfig(tmpDir, { resolve_model_ids: 'omit' });
    assert.strictEqual(resolveModelInternal(tmpDir, 'msd-planner'), '');
  });

  test('unknown agent type, no config -> returns a non-empty string (fallback)', () => {
    const model = resolveModelInternal(tmpDir, 'completely-unknown-agent-xyz');
    assert.ok(typeof model === 'string' && model.length > 0);
  });

  test('model_profile=inherit -> returns "inherit"', () => {
    writeConfig(tmpDir, { model_profile: 'inherit' });
    assert.strictEqual(resolveModelInternal(tmpDir, 'msd-planner'), 'inherit');
  });

  test('models config per phase type overrides profile tier', () => {
    writeConfig(tmpDir, { models: { planning: 'opus' } });
    // msd-planner maps to planning phase type; config says opus
    // with no resolve_model_ids, should return 'opus'
    const model = resolveModelInternal(tmpDir, 'msd-planner');
    assert.strictEqual(model, 'opus');
  });

  test('models with invalid tier value falls through to profile', () => {
    writeConfig(tmpDir, { models: { planning: 'not-a-valid-tier' } });
    // invalid tier value -> falls back to profile resolution
    const model = resolveModelInternal(tmpDir, 'msd-planner');
    assert.ok(typeof model === 'string' && model.length > 0);
  });

  // #2072 acceptance: these two catalog agents' config MUST resolve — the bug was
  // that the workflows never threaded the resolved value, not that the resolver
  // ignored it. These assert the value the (now-threaded) spawns receive.
  test('#2072: model_overrides applies to msd-code-reviewer', () => {
    writeConfig(tmpDir, { model_overrides: { 'msd-code-reviewer': 'my-custom-model' } });
    assert.strictEqual(resolveModelInternal(tmpDir, 'msd-code-reviewer'), 'my-custom-model');
  });

  test('#2072: model_overrides applies to msd-assumptions-analyzer', () => {
    writeConfig(tmpDir, { model_overrides: { 'msd-assumptions-analyzer': 'my-custom-model' } });
    assert.strictEqual(resolveModelInternal(tmpDir, 'msd-assumptions-analyzer'), 'my-custom-model');
  });

  test('#2072: models.verification tier applies to msd-code-reviewer', () => {
    writeConfig(tmpDir, { models: { verification: 'opus' } });
    assert.strictEqual(resolveModelInternal(tmpDir, 'msd-code-reviewer'), 'opus');
  });

  test('#2072: models.discuss tier applies to msd-assumptions-analyzer', () => {
    writeConfig(tmpDir, { models: { discuss: 'opus' } });
    assert.strictEqual(resolveModelInternal(tmpDir, 'msd-assumptions-analyzer'), 'opus');
  });

  test('#2072: model_overrides + models.execution apply to msd-code-fixer', () => {
    writeConfig(tmpDir, { model_overrides: { 'msd-code-fixer': 'my-custom-model' } });
    assert.strictEqual(resolveModelInternal(tmpDir, 'msd-code-fixer'), 'my-custom-model');
    writeConfig(tmpDir, { models: { execution: 'opus' } });
    assert.strictEqual(resolveModelInternal(tmpDir, 'msd-code-fixer'), 'opus');
  });

  test('runtime non-claude + model_profile_overrides for runtime tier', () => {
    writeConfig(tmpDir, {
      runtime: 'codex',
      model_profile_overrides: {
        codex: { haiku: 'codex-mini', sonnet: 'codex', opus: 'codex-full' },
      },
    });
    // msd-codebase-mapper is light tier -> haiku in balanced profile
    const model = resolveModelInternal(tmpDir, 'msd-codebase-mapper');
    assert.ok(typeof model === 'string' && model.length > 0);
  });
});

// ─── resolveGranularityInternal ───────────────────────────────────────────────

describe('resolveGranularityInternal', () => {
  let tmpDir;
  beforeEach(() => { tmpDir = makeTempProject(); });
  afterEach(() => { if (tmpDir) cleanup(tmpDir); tmpDir = null; });

  test('no config, no override -> returns "standard"', () => {
    assert.strictEqual(resolveGranularityInternal(tmpDir, 'planning'), 'standard');
  });

  test('valid override wins over config', () => {
    writeConfig(tmpDir, { granularity: 'fine' });
    assert.strictEqual(resolveGranularityInternal(tmpDir, 'planning', 'coarse'), 'coarse');
  });

  test('invalid override ignored, falls through to config', () => {
    writeConfig(tmpDir, { granularity: 'fine' });
    assert.strictEqual(resolveGranularityInternal(tmpDir, 'planning', 'ultradetailed'), 'fine');
  });

  test('null override falls through to config', () => {
    writeConfig(tmpDir, { granularity: 'coarse' });
    assert.strictEqual(resolveGranularityInternal(tmpDir, 'planning', null), 'coarse');
  });

  test('per-phase-type granularity beats global granularity', () => {
    writeConfig(tmpDir, {
      granularity: 'coarse',
      granularities: { planning: 'fine' },
    });
    assert.strictEqual(resolveGranularityInternal(tmpDir, 'planning'), 'fine');
  });

  test('planning.granularity nested config used as fallback', () => {
    writeConfig(tmpDir, { planning: { granularity: 'coarse' } });
    assert.strictEqual(resolveGranularityInternal(tmpDir, null), 'coarse');
  });

  test('VALID_GRANULARITIES contains exactly coarse, standard, fine', () => {
    assert.ok(VALID_GRANULARITIES instanceof Set);
    assert.ok(VALID_GRANULARITIES.has('coarse'));
    assert.ok(VALID_GRANULARITIES.has('standard'));
    assert.ok(VALID_GRANULARITIES.has('fine'));
    assert.strictEqual(VALID_GRANULARITIES.size, 3);
  });
});

// ─── assertValidGranularityOverride ───────────────────────────────────────────

describe('assertValidGranularityOverride', () => {
  test('undefined -> no-op (no throw)', () => {
    assert.doesNotThrow(() =>
      assertValidGranularityOverride(undefined, (msg) => { throw new Error(msg); })
    );
  });

  test('null -> no-op (no throw)', () => {
    assert.doesNotThrow(() =>
      assertValidGranularityOverride(null, (msg) => { throw new Error(msg); })
    );
  });

  test('empty string -> no-op (no throw)', () => {
    assert.doesNotThrow(() =>
      assertValidGranularityOverride('', (msg) => { throw new Error(msg); })
    );
  });

  test('valid value "coarse" -> no-op (no throw)', () => {
    assert.doesNotThrow(() =>
      assertValidGranularityOverride('coarse', (msg) => { throw new Error(msg); })
    );
  });

  test('invalid value -> calls fail with descriptive message', () => {
    let caught = null;
    // fail is called with the message; we capture it by throwing so the test can inspect
    assert.throws(
      () => assertValidGranularityOverride('megafine', (msg) => { caught = msg; throw new Error(msg); }),
      (err) => {
        assert.ok(err.message.includes('megafine'), `error message should include the invalid value: ${err.message}`);
        assert.ok(err.message.includes('coarse') && err.message.includes('standard') && err.message.includes('fine'),
          `error message should list valid values: ${err.message}`);
        return true;
      }
    );
    assert.ok(caught !== null, 'fail should have been called');
  });
});

// ─── resolveEffortInternal ────────────────────────────────────────────────────

// #3531 — the runtime resolver's install-time sibling. Driven directly as a
// pure function (effortCfg in, effort out) for the parity matrix below.
const installEffortResolver = require('../msd-core/bin/lib/install-effort-resolver.cjs');
const { resolveInstallTimeEffort, readMsdEffectiveEffortConfig } = installEffortResolver;

describe('resolveEffortInternal', () => {
  let tmpDir;
  beforeEach(() => { tmpDir = makeTempProject(); });
  afterEach(() => { if (tmpDir) cleanup(tmpDir); tmpDir = null; });

  test('no config -> msd-planner (heavy) defaults to "xhigh" via tier default', () => {
    assert.strictEqual(resolveEffortInternal(tmpDir, 'msd-planner'), 'xhigh');
  });

  test('invocation override beats everything', () => {
    writeConfig(tmpDir, { effort: { agent_overrides: { 'msd-planner': 'low' } } });
    assert.strictEqual(resolveEffortInternal(tmpDir, 'msd-planner', { override: 'minimal' }), 'minimal');
  });

  test('agent_overrides beats routing_tier_defaults', () => {
    writeConfig(tmpDir, {
      effort: {
        routing_tier_defaults: { heavy: 'medium' },
        agent_overrides: { 'msd-planner': 'low' },
      },
    });
    assert.strictEqual(resolveEffortInternal(tmpDir, 'msd-planner'), 'low');
  });

  test('effort.default is final fallback when no tier default matches', () => {
    writeConfig(tmpDir, { effort: { default: 'minimal' } });
    assert.strictEqual(resolveEffortInternal(tmpDir, 'completely-unknown-agent-xyz'), 'minimal');
  });

  test('VALID_EFFORTS and EFFORT_SET are consistent', () => {
    assert.ok(Array.isArray(VALID_EFFORTS));
    assert.ok(EFFORT_SET instanceof Set);
    // #3533 (10d): the VOCABULARY (EFFORT_SET) carries one more member than
    // the LADDER (VALID_EFFORTS) — 'inherit' is a declarable effort choice
    // but not a level nextEffort may step into.
    assert.strictEqual(EFFORT_SET.size, VALID_EFFORTS.length + 1);
    assert.ok(EFFORT_SET.has('inherit'), "EFFORT_SET must accept 'inherit'");
    assert.ok(!VALID_EFFORTS.includes('inherit'), "the escalation ladder must NOT contain 'inherit'");
    for (const e of VALID_EFFORTS) {
      assert.ok(EFFORT_SET.has(e), `EFFORT_SET missing: ${e}`);
    }
  });
});

// ─── #3533 (10d): effort inheritance ──────────────────────────────────────────

describe('#3533 effort inherit: expressible at every layer, never a wire level', () => {
  let tmpDir;
  beforeEach(() => { tmpDir = makeTempProject(); });
  afterEach(() => { cleanup(tmpDir); });

  test('inherit accepted at every cascade layer (runtime)', () => {
    writeConfig(tmpDir, { effort: { agent_overrides: { 'msd-executor': 'inherit' } } });
    assert.strictEqual(resolveEffortInternal(tmpDir, 'msd-executor'), 'inherit');

    writeConfig(tmpDir, { effort: { routing_tier_defaults: { heavy: 'inherit' } } });
    assert.strictEqual(resolveEffortInternal(tmpDir, 'msd-planner'), 'inherit');

    writeConfig(tmpDir, { effort: { default: 'inherit' } });
    assert.strictEqual(resolveEffortInternal(tmpDir, 'completely-unknown-agent-xyz'), 'inherit');
    // #3531+#3533 combined: a bare effort.default no longer reaches a TIERED
    // agent — the merged tier layer answers (manifest heavy = xhigh). To
    // inherit at a tier, pin the tier; the tier-default row above covers that.
    assert.strictEqual(resolveEffortInternal(tmpDir, 'msd-planner'), 'xhigh');

    assert.strictEqual(resolveEffortInternal(tmpDir, 'msd-executor', { override: 'inherit' }), 'inherit');
  });

  test('explicit inherit does not escalate', () => {
    writeConfig(tmpDir, {
      effort: { routing_tier_defaults: { heavy: 'inherit' } },
      dynamic_routing: { enabled: true, escalate_on_failure: true, max_escalations: 3 },
    });
    assert.strictEqual(resolveEffortForTier(tmpDir, 'msd-planner', 2), 'inherit');
  });

  test('renderEffortForRuntime inherit never yields a wire level', () => {
    const { renderEffortForRuntime } = require('../msd-core/bin/lib/model-catalog.cjs');
    for (const runtime of ['claude', 'codex', 'something-unknown']) {
      const r = renderEffortForRuntime(runtime, 'inherit');
      assert.strictEqual(r.value, 'inherit', `${runtime}: value`);
      assert.strictEqual(r.param, null, `${runtime}: param`);
      assert.strictEqual(r.channel, null, `${runtime}: channel`);
    }
    // Concrete levels unchanged.
    assert.strictEqual(renderEffortForRuntime('claude', 'minimal').value, 'low');
    // #3007: corrected — Codex DOES advertise 'max' (per-model table), so
    // ADR-443's "Codex has no max" premise went stale and this pinned the
    // defect (clamping 'max' down to 'xhigh') instead of the fix.
    assert.strictEqual(renderEffortForRuntime('codex', 'max').value, 'max');
    assert.strictEqual(renderEffortForRuntime('claude', 'xhigh').value, 'xhigh');
  });
});

// ─── #3531 (10c): routing_tier_defaults merges over manifest tier defaults ───

describe('#3531 routing_tier_defaults merge: manifest built-ins survive partial config', () => {
  let tmpDir;
  beforeEach(() => { tmpDir = makeTempProject(); });
  afterEach(() => { cleanup(tmpDir); });

  test('effort block without routing_tier_defaults keeps manifest tier defaults (runtime)', () => {
    writeConfig(tmpDir, { effort: { agent_overrides: { 'msd-executor': 'low' } } });
    assert.strictEqual(resolveEffortInternal(tmpDir, 'msd-planner'), 'xhigh');
    assert.strictEqual(resolveEffortInternal(tmpDir, 'msd-executor'), 'low');
    assert.strictEqual(resolveEffortInternal(tmpDir, 'msd-codebase-mapper'), 'low');
  });

  test('partial routing_tier_defaults merges over manifest, gaps filled per-tier (runtime)', () => {
    writeConfig(tmpDir, { effort: { routing_tier_defaults: { heavy: 'medium' } } });
    assert.strictEqual(resolveEffortInternal(tmpDir, 'msd-planner'), 'medium');
    assert.strictEqual(resolveEffortInternal(tmpDir, 'msd-executor'), 'high');
    assert.strictEqual(resolveEffortInternal(tmpDir, 'msd-codebase-mapper'), 'low');
  });

  test('non-object routing_tier_defaults treated as absent (runtime)', () => {
    writeConfig(tmpDir, { effort: { routing_tier_defaults: ['heavy'] } });
    assert.strictEqual(resolveEffortInternal(tmpDir, 'msd-planner'), 'xhigh');
  });

  test('merge never mutates the manifest defaults', () => {
    const configuration = require('../msd-core/bin/lib/configuration.cjs');
    const before = JSON.stringify(configuration.CONFIG_DEFAULTS['effort']);
    writeConfig(tmpDir, { effort: { routing_tier_defaults: { heavy: 'medium' } } });
    resolveEffortInternal(tmpDir, 'msd-planner');
    resolveInstallTimeEffort({ routing_tier_defaults: { heavy: 'medium' } }, 'msd-planner');
    assert.strictEqual(
      JSON.stringify(configuration.CONFIG_DEFAULTS['effort']), before,
      'resolving must not mutate CANONICAL_CONFIG_DEFAULTS.effort',
    );
  });
});

describe('#3531 parity: runtime and install-time resolvers agree on the merged tier ladder', () => {
  let tmpDir;
  beforeEach(() => { tmpDir = makeTempProject(); });
  afterEach(() => { cleanup(tmpDir); });

  const PARITY_AGENTS = ['msd-planner', 'msd-executor', 'msd-codebase-mapper', 'completely-unknown-agent-xyz'];
  const PARITY_EFFORT_CFGS = [
    null,
    {},
    { default: 'low' },
    { routing_tier_defaults: { heavy: 'medium' } },
    { routing_tier_defaults: { light: 'low', standard: 'medium', heavy: 'low' } },
    { routing_tier_defaults: { heavy: 'turbo' }, default: 'low' },
    { routing_tier_defaults: 'not-an-object' },
    { agent_overrides: { 'msd-executor': 'max' } },
    { agent_overrides: { 'msd-executor': 42 }, routing_tier_defaults: { heavy: 'medium' } },
  ];

  for (const effortCfg of PARITY_EFFORT_CFGS) {
    for (const agent of PARITY_AGENTS) {
      test(`parity: effortCfg=${JSON.stringify(effortCfg)} agent=${agent}`, () => {
        writeConfig(tmpDir, effortCfg === null ? {} : { effort: effortCfg });
        const runtime = resolveEffortInternal(tmpDir, agent);
        const installTime = resolveInstallTimeEffort(effortCfg, agent);
        assert.strictEqual(
          installTime, runtime,
          `install-time and runtime resolvers disagree for effortCfg=${JSON.stringify(effortCfg)} agent=${agent}`,
        );
      });
    }
  }
});

describe('#3531 readMsdEffectiveEffortConfig: home/project routing_tier_defaults deep-merge', () => {
  test('project partial tier block unions with home partial tier block per-tier', (t) => {
    const tmpDir = makeTempProject('msd-3531-home-merge-');
    t.after(() => cleanup(tmpDir));

    const homeDir = fs.mkdtempSync(path.join(os.tmpdir(), 'msd-3531-home-'));
    t.after(() => cleanup(homeDir));
    fs.mkdirSync(path.join(homeDir, '.msd'), { recursive: true });
    fs.writeFileSync(
      path.join(homeDir, '.msd', 'defaults.json'),
      JSON.stringify({ effort: { routing_tier_defaults: { heavy: 'low' } } }),
    );

    writeConfig(tmpDir, { effort: { routing_tier_defaults: { standard: 'medium' } } });

    const oldHome = process.env.HOME;
    const oldUserProfile = process.env.USERPROFILE;
    process.env.HOME = homeDir;
    process.env.USERPROFILE = homeDir; // os.homedir() is USERPROFILE-driven on win32
    t.after(() => {
      process.env.HOME = oldHome;
      if (oldUserProfile === undefined) delete process.env.USERPROFILE;
      else process.env.USERPROFILE = oldUserProfile;
    });

    const merged = readMsdEffectiveEffortConfig(tmpDir);
    assert.deepStrictEqual(merged && merged.routing_tier_defaults, { heavy: 'low', standard: 'medium' });
    // The merged config resolves planner from HOME's heavy (low), executor from
    // project's standard (medium), mapper from the manifest light (low).
    assert.strictEqual(resolveInstallTimeEffort(merged, 'msd-planner'), 'low');
    assert.strictEqual(resolveInstallTimeEffort(merged, 'msd-executor'), 'medium');
    assert.strictEqual(resolveInstallTimeEffort(merged, 'msd-codebase-mapper'), 'low');
  });
});

// ─── nextEffort ────────────────────────────────────────────────────────────────

describe('nextEffort', () => {
  test('minimal -> low', () => {
    assert.strictEqual(nextEffort('minimal'), 'low');
  });

  test('max -> max (clamp at ceiling)', () => {
    assert.strictEqual(nextEffort('max'), 'max');
  });

  test('high -> xhigh', () => {
    assert.strictEqual(nextEffort('high'), 'xhigh');
  });

  test('unknown effort -> null', () => {
    assert.strictEqual(nextEffort('turbo'), null);
  });
});

// ─── resolveFastModeInternal ──────────────────────────────────────────────────

describe('resolveFastModeInternal', () => {
  let tmpDir;
  beforeEach(() => { tmpDir = makeTempProject(); });
  afterEach(() => { if (tmpDir) cleanup(tmpDir); tmpDir = null; });

  test('no config -> defaults to false', () => {
    assert.strictEqual(resolveFastModeInternal(tmpDir, 'msd-planner'), false);
  });

  test('opts.override=true beats config', () => {
    writeConfig(tmpDir, { fast_mode: { agent_overrides: { 'msd-planner': false } } });
    assert.strictEqual(resolveFastModeInternal(tmpDir, 'msd-planner', { override: true }), true);
  });

  test('fast_mode.enabled=true sets default for all agents', () => {
    writeConfig(tmpDir, { fast_mode: { enabled: true } });
    assert.strictEqual(resolveFastModeInternal(tmpDir, 'msd-planner'), true);
  });

  test('agent_overrides beats enabled', () => {
    writeConfig(tmpDir, {
      fast_mode: { enabled: true, agent_overrides: { 'msd-planner': false } },
    });
    assert.strictEqual(resolveFastModeInternal(tmpDir, 'msd-planner'), false);
  });

  test('unknown agent with no config -> false', () => {
    assert.strictEqual(resolveFastModeInternal(tmpDir, 'unknown-agent-xyz'), false);
  });
});

// ─── resolveEffortForTier ─────────────────────────────────────────────────────

describe('resolveEffortForTier', () => {
  let tmpDir;
  beforeEach(() => { tmpDir = makeTempProject(); });
  afterEach(() => { if (tmpDir) cleanup(tmpDir); tmpDir = null; });

  test('dynamic_routing disabled -> attempt has no effect', () => {
    const base = resolveEffortForTier(tmpDir, 'msd-planner', 0);
    const at1 = resolveEffortForTier(tmpDir, 'msd-planner', 1);
    assert.strictEqual(base, at1);
  });

  test('dynamic_routing enabled + escalate_on_failure=true + attempt=1 -> one step up', () => {
    writeConfig(tmpDir, {
      dynamic_routing: {
        enabled: true,
        tier_models: { light: 'haiku', standard: 'sonnet', heavy: 'opus' },
        escalate_on_failure: true,
        max_escalations: 2,
      },
      effort: { routing_tier_defaults: { light: 'low' } },
    });
    assert.strictEqual(resolveEffortForTier(tmpDir, 'msd-codebase-mapper', 0), 'low');
    assert.strictEqual(resolveEffortForTier(tmpDir, 'msd-codebase-mapper', 1), 'medium');
  });

  test('escalation clamps at "max"', () => {
    writeConfig(tmpDir, {
      dynamic_routing: {
        enabled: true,
        tier_models: { light: 'haiku', standard: 'sonnet', heavy: 'opus' },
        escalate_on_failure: true,
        max_escalations: 99,
      },
      effort: { default: 'xhigh' },
    });
    assert.strictEqual(resolveEffortForTier(tmpDir, 'msd-planner', 99), 'max');
  });
});

// ─── resolveModelForTier ──────────────────────────────────────────────────────

describe('resolveModelForTier', () => {
  let tmpDir;
  beforeEach(() => { tmpDir = makeTempProject(); });
  afterEach(() => { if (tmpDir) cleanup(tmpDir); tmpDir = null; });

  test('no dynamic_routing -> falls back to resolveModelInternal', () => {
    const fromForTier = resolveModelForTier(tmpDir, 'msd-planner');
    const fromInternal = resolveModelInternal(tmpDir, 'msd-planner');
    assert.strictEqual(fromForTier, fromInternal);
  });

  test('model_overrides wins before dynamic routing logic', () => {
    writeConfig(tmpDir, {
      model_overrides: { 'msd-planner': 'override-model' },
      dynamic_routing: {
        enabled: true,
        tier_models: { light: 'haiku', standard: 'sonnet', heavy: 'opus' },
        escalate_on_failure: true,
        max_escalations: 2,
      },
    });
    assert.strictEqual(resolveModelForTier(tmpDir, 'msd-planner'), 'override-model');
  });

  test('dynamic_routing + tier_models + attempt=0 -> default tier model', () => {
    writeConfig(tmpDir, {
      dynamic_routing: {
        enabled: true,
        tier_models: { light: 'haiku-custom', standard: 'sonnet-custom', heavy: 'opus-custom' },
        escalate_on_failure: true,
        max_escalations: 2,
      },
    });
    // msd-codebase-mapper is 'light' tier
    assert.strictEqual(resolveModelForTier(tmpDir, 'msd-codebase-mapper', 0), 'haiku-custom');
  });

  test('dynamic_routing + attempt=1 escalates tier', () => {
    writeConfig(tmpDir, {
      dynamic_routing: {
        enabled: true,
        tier_models: { light: 'haiku-custom', standard: 'sonnet-custom', heavy: 'opus-custom' },
        escalate_on_failure: true,
        max_escalations: 2,
      },
    });
    // msd-codebase-mapper light -> attempt=1 -> standard
    assert.strictEqual(resolveModelForTier(tmpDir, 'msd-codebase-mapper', 1), 'sonnet-custom');
  });
});

// ─── resolveModelPolicy ───────────────────────────────────────────────────────

describe('resolveModelPolicy (#49)', () => {
  test('null policy -> null', () => {
    assert.strictEqual(resolveModelPolicy(null, 'sonnet'), null);
  });

  test('no provider -> null', () => {
    assert.strictEqual(resolveModelPolicy({ budget: 'medium' }, 'sonnet'), null);
  });

  test('generic provider: tier=opus -> reads policy.high', () => {
    const result = resolveModelPolicy(
      { provider: 'generic', high: 'my-high-model', medium: 'my-medium', low: 'my-low' },
      'opus'
    );
    assert.strictEqual(result, 'my-high-model');
  });

  test('generic provider: tier=sonnet -> reads policy.medium', () => {
    const result = resolveModelPolicy(
      { provider: 'generic', high: 'hi', medium: 'med', low: 'lo' },
      'sonnet'
    );
    assert.strictEqual(result, 'med');
  });

  test('generic provider: tier=haiku -> reads policy.low', () => {
    const result = resolveModelPolicy(
      { provider: 'generic', high: 'hi', medium: 'med', low: 'lo' },
      'haiku'
    );
    assert.strictEqual(result, 'lo');
  });

  test('custom provider same as generic', () => {
    const result = resolveModelPolicy(
      { provider: 'custom', medium: 'custom-sonnet' },
      'sonnet'
    );
    assert.strictEqual(result, 'custom-sonnet');
  });

  test('runtime_tiers override takes precedence over provider', () => {
    const result = resolveModelPolicy(
      {
        provider: 'generic',
        high: 'generic-hi',
        medium: 'generic-med',
        low: 'generic-lo',
        runtime: 'codex',
        runtime_tiers: { codex: { sonnet: 'codex-sonnet-override' } },
      },
      'sonnet'
    );
    assert.strictEqual(result, 'codex-sonnet-override');
  });

  test('unknown tier for generic -> null', () => {
    const result = resolveModelPolicy(
      { provider: 'generic', high: 'hi', medium: 'med', low: 'lo' },
      'unknown-tier'
    );
    assert.strictEqual(result, null);
  });
});

// ─── resolveTierEntry ────────────────────────────────────────────────────────

describe('resolveTierEntry (#2517)', () => {
  test('null runtime -> null', () => {
    assert.strictEqual(resolveTierEntry({ runtime: null, tier: 'sonnet', overrides: null }), null);
  });

  test('null tier -> null', () => {
    assert.strictEqual(resolveTierEntry({ runtime: 'codex', tier: null, overrides: null }), null);
  });

  test('unknown runtime + unknown tier, no overrides -> null', () => {
    assert.strictEqual(resolveTierEntry({
      runtime: 'totally-unknown-runtime-xyz',
      tier: 'totally-unknown-tier',
      overrides: null,
    }), null);
  });

  test('user override as string expands to { model: string }', () => {
    const entry = resolveTierEntry({
      runtime: 'codex',
      tier: 'sonnet',
      overrides: { codex: { sonnet: 'my-custom-codex-model' } },
    });
    assert.ok(entry !== null);
    assert.strictEqual(entry.model, 'my-custom-codex-model');
  });

  test('user override as object merged with builtin', () => {
    const entry = resolveTierEntry({
      runtime: 'codex',
      tier: 'sonnet',
      overrides: { codex: { sonnet: { model: 'user-model', extra: 'value' } } },
    });
    assert.ok(entry !== null);
    assert.strictEqual(entry.model, 'user-model');
    assert.strictEqual(entry['extra'], 'value');
  });
});

// ─── ADVERSARIAL ─────────────────────────────────────────────────────────────

describe('ADVERSARIAL: edge cases', () => {
  let tmpDir;
  beforeEach(() => { tmpDir = makeTempProject(); });
  afterEach(() => { if (tmpDir) cleanup(tmpDir); tmpDir = null; });

  test('resolveModelInternal: unknown agent + model_profile=quality -> "opus" fallback', () => {
    writeConfig(tmpDir, { model_profile: 'quality' });
    const model = resolveModelInternal(tmpDir, 'completely-unknown-agent');
    assert.strictEqual(model, 'opus');
  });

  test('resolveModelInternal: unknown agent + model_profile=budget -> "haiku" fallback', () => {
    writeConfig(tmpDir, { model_profile: 'budget' });
    assert.strictEqual(resolveModelInternal(tmpDir, 'unknown-agent'), 'haiku');
  });

  test('resolveGranularityInternal: empty override "" is treated as no override', () => {
    writeConfig(tmpDir, { granularity: 'fine' });
    assert.strictEqual(resolveGranularityInternal(tmpDir, 'planning', ''), 'fine');
  });

  test('assertValidGranularityOverride: "ultrawide" is invalid -> fail called', () => {
    let errorMsg = null;
    assert.throws(
      () => assertValidGranularityOverride('ultrawide', (msg) => { errorMsg = msg; throw new Error(msg); }),
      (err) => {
        assert.ok(err.message.includes('ultrawide'), `error should mention the invalid value: ${err.message}`);
        return true;
      }
    );
    assert.ok(errorMsg !== null, 'fail should have been called');
    assert.ok(errorMsg.includes('ultrawide'), `error message should include 'ultrawide': ${errorMsg}`);
  });

  test('resolveEffortInternal: invalid override "turbo" falls through to tier default', () => {
    const result = resolveEffortInternal(tmpDir, 'msd-planner', { override: 'turbo' });
    // msd-planner is heavy -> tier default xhigh
    assert.strictEqual(result, 'xhigh');
  });

  test('resolveFastModeInternal: string "true" override is not accepted (must be boolean)', () => {
    const result = resolveFastModeInternal(tmpDir, 'msd-planner', { override: 'true' });
    // string is not boolean -> falls through to default false
    assert.strictEqual(result, false);
  });

  test('resolveEffortInternal: effort block is non-object string -> uses tier default', () => {
    writeConfig(tmpDir, { effort: 'bad-value' });
    const result = resolveEffortInternal(tmpDir, 'msd-planner');
    assert.ok(EFFORT_SET.has(result), `Expected valid effort, got: ${result}`);
  });

  test('resolveModelForTier: unknown agent with dynamic routing -> resolveModelInternal fallback', () => {
    writeConfig(tmpDir, {
      dynamic_routing: {
        enabled: true,
        tier_models: { light: 'haiku', standard: 'sonnet', heavy: 'opus' },
        escalate_on_failure: true,
        max_escalations: 1,
      },
    });
    // unknown agent has no defaultTier -> falls back to resolveModelInternal
    const fromForTier = resolveModelForTier(tmpDir, 'unknown-agent-xyz');
    const fromInternal = resolveModelInternal(tmpDir, 'unknown-agent-xyz');
    assert.strictEqual(fromForTier, fromInternal);
  });

  test('resolveTierEntry: runtime override with non-string, non-object value -> no model set', () => {
    const entry = resolveTierEntry({
      runtime: 'codex',
      tier: 'sonnet',
      overrides: { codex: { sonnet: 42 } },
    });
    // numeric 42 is neither string nor object -> treated as truthy userEntry=42 (not expanded)
    // result will have whatever builtins exist + the override
    // Key requirement: does not crash
    assert.ok(entry !== null || entry === null, 'should not throw');
  });

  test('resolveModelPolicy: non-object policy -> null', () => {
    assert.strictEqual(resolveModelPolicy('string-policy', 'sonnet'), null);
  });

  test('resolveModelPolicy: null tier -> null', () => {
    assert.strictEqual(resolveModelPolicy({ provider: 'generic', medium: 'sonnet' }, null), null);
  });

  test('resolveEffortForTier: max_escalations=0 caps escalation', () => {
    writeConfig(tmpDir, {
      dynamic_routing: {
        enabled: true,
        tier_models: { light: 'haiku', standard: 'sonnet', heavy: 'opus' },
        escalate_on_failure: true,
        max_escalations: 0,
      },
      effort: { routing_tier_defaults: { light: 'low' } },
    });
    const at0 = resolveEffortForTier(tmpDir, 'msd-codebase-mapper', 0);
    const at1 = resolveEffortForTier(tmpDir, 'msd-codebase-mapper', 1);
    // max_escalations=0 means no escalation allowed even at attempt=1
    assert.strictEqual(at0, at1);
  });
});


// ────────────────────────────────────────────────────────────────────────
// Folded from tests/bug-1829-inherit-model-profile.test.cjs — consolidation epic #1969 (B3 #1972)
// ────────────────────────────────────────────────────────────────────────
{
  const { describe: __foldDescribe } = require('node:test');
  __foldDescribe("folded:bug-1829-inherit-model-profile (consolidation epic #1969 B3 #1972)", () => {
/**
 * Regression tests for bug #1829
 *
 * model_profile: "inherit" in .planning/config.json was not recognised as a
 * valid profile. resolveModelInternal() silently fell back to "balanced",
 * causing all agents to use "sonnet" instead of inheriting the parent model.
 *
 * Root cause in core.cjs:
 *   const profile = config.model_profile || 'balanced';
 *   const agentModels = MODEL_PROFILES[agentType];
 *   if (!agentModels) return 'sonnet';
 *   const resolved = agentModels[profile] || agentModels['balanced'] || 'sonnet';
 *   // agentModels['inherit'] is undefined → falls through to agentModels['balanced']
 *
 * Fix 1 (core.cjs): add early return — if (profile === 'inherit') return 'inherit';
 * Fix 2 (verify.cjs): add 'inherit' to validProfiles so it doesn't trigger W004.
 */

'use strict';

const { describe, test, beforeEach, afterEach } = require('node:test');
const assert = require('node:assert/strict');
const fs = require('fs');
const path = require('path');
const { runMsdTools, createTempProject, cleanup } = require('./helpers.cjs');

const { resolveModelInternal } = require('../msd-core/bin/lib/model-resolver.cjs');

// ─── Helpers ──────────────────────────────────────────────────────────────────

function writeConfig(tmpDir, obj) {
  fs.writeFileSync(
    path.join(tmpDir, '.planning', 'config.json'),
    JSON.stringify(obj, null, 2)
  );
}

function writeMinimalProjectMd(tmpDir) {
  fs.writeFileSync(
    path.join(tmpDir, '.planning', 'PROJECT.md'),
    '# Project\n\n## What This Is\n\nContent.\n\n## Core Value\n\nContent.\n\n## Requirements\n\nContent.\n'
  );
}

function writeMinimalRoadmap(tmpDir) {
  fs.writeFileSync(
    path.join(tmpDir, '.planning', 'ROADMAP.md'),
    '# Roadmap\n\n### Phase 1: First Phase\n'
  );
}

function writeMinimalStateMd(tmpDir) {
  fs.writeFileSync(
    path.join(tmpDir, '.planning', 'STATE.md'),
    '# Session State\n\n## Current Position\n\nPhase: 1\n'
  );
}

// ─── resolveModelInternal — inherit profile ───────────────────────────────────

describe('bug #1829: model_profile "inherit" — resolveModelInternal', () => {
  let tmpDir;

  beforeEach(() => {
    tmpDir = createTempProject();
  });

  afterEach(() => {
    cleanup(tmpDir);
  });

  test('returns "inherit" for msd-planner when model_profile is "inherit"', () => {
    writeConfig(tmpDir, { model_profile: 'inherit' });
    assert.strictEqual(resolveModelInternal(tmpDir, 'msd-planner'), 'inherit');
  });

  test('returns "inherit" for msd-executor when model_profile is "inherit"', () => {
    writeConfig(tmpDir, { model_profile: 'inherit' });
    assert.strictEqual(resolveModelInternal(tmpDir, 'msd-executor'), 'inherit');
  });

  test('returns "inherit" for msd-phase-researcher when model_profile is "inherit"', () => {
    writeConfig(tmpDir, { model_profile: 'inherit' });
    assert.strictEqual(resolveModelInternal(tmpDir, 'msd-phase-researcher'), 'inherit');
  });

  test('returns "inherit" for msd-codebase-mapper when model_profile is "inherit"', () => {
    writeConfig(tmpDir, { model_profile: 'inherit' });
    assert.strictEqual(resolveModelInternal(tmpDir, 'msd-codebase-mapper'), 'inherit');
  });

  test('returns "inherit" for msd-verifier when model_profile is "inherit"', () => {
    writeConfig(tmpDir, { model_profile: 'inherit' });
    assert.strictEqual(resolveModelInternal(tmpDir, 'msd-verifier'), 'inherit');
  });

  test('returns "inherit" for unknown agent with inherit profile', () => {
    writeConfig(tmpDir, { model_profile: 'inherit' });
    assert.strictEqual(resolveModelInternal(tmpDir, 'msd-nonexistent'), 'inherit');
  });

  test('per-agent override takes precedence over inherit profile', () => {
    writeConfig(tmpDir, {
      model_profile: 'inherit',
      model_overrides: { 'msd-executor': 'haiku' },
    });
    // Override wins even when profile is inherit
    assert.strictEqual(resolveModelInternal(tmpDir, 'msd-executor'), 'haiku');
    // Other agents without override still inherit
    assert.strictEqual(resolveModelInternal(tmpDir, 'msd-planner'), 'inherit');
  });

  test('does not silently fall back to "sonnet" (the original bug)', () => {
    writeConfig(tmpDir, { model_profile: 'inherit' });
    // Before the fix, this returned 'sonnet' (via balanced fallback)
    const model = resolveModelInternal(tmpDir, 'msd-planner');
    assert.notStrictEqual(model, 'sonnet', 'inherit profile must not silently fall back to sonnet');
  });
});

// ─── resolve-model CLI — inherit profile ──────────────────────────────────────

describe('bug #1829: model_profile "inherit" — resolve-model CLI', () => {
  let tmpDir;

  beforeEach(() => {
    tmpDir = createTempProject();
  });

  afterEach(() => {
    cleanup(tmpDir);
  });

  test('CLI resolve-model returns "inherit" for msd-executor with inherit profile', () => {
    fs.writeFileSync(
      path.join(tmpDir, '.planning', 'config.json'),
      JSON.stringify({ model_profile: 'inherit' }, null, 2)
    );

    const result = runMsdTools('resolve-model msd-executor', tmpDir);
    assert.ok(result.success, `resolve-model failed: ${result.error}`);

    const parsed = JSON.parse(result.output);
    assert.strictEqual(parsed.model, 'inherit');
    assert.strictEqual(parsed.profile, 'inherit');
  });

  test('CLI resolve-model returns "inherit" for msd-planner with inherit profile', () => {
    fs.writeFileSync(
      path.join(tmpDir, '.planning', 'config.json'),
      JSON.stringify({ model_profile: 'inherit' }, null, 2)
    );

    const result = runMsdTools('resolve-model msd-planner', tmpDir);
    assert.ok(result.success, `resolve-model failed: ${result.error}`);

    const parsed = JSON.parse(result.output);
    assert.strictEqual(parsed.model, 'inherit');
  });
});

// ─── verify health — inherit profile is not a validation error ────────────────

describe('bug #1829: model_profile "inherit" — validate health does not warn W004', () => {
  let tmpDir;

  beforeEach(() => {
    tmpDir = createTempProject();
    writeMinimalProjectMd(tmpDir);
    writeMinimalRoadmap(tmpDir);
    writeMinimalStateMd(tmpDir);
    fs.mkdirSync(path.join(tmpDir, '.planning', 'phases', '01-first-phase'), { recursive: true });
  });

  afterEach(() => {
    cleanup(tmpDir);
  });

  test('does not emit W004 for model_profile "inherit"', () => {
    fs.writeFileSync(
      path.join(tmpDir, '.planning', 'config.json'),
      JSON.stringify({
        model_profile: 'inherit',
        workflow: {
          research: true,
          plan_check: true,
          verifier: true,
          nyquist_validation: true,
        },
      }, null, 2)
    );

    const result = runMsdTools('validate health', tmpDir);
    assert.ok(result.success, `validate health failed: ${result.error}`);

    const output = JSON.parse(result.output);
    assert.ok(
      !output.warnings.some(w => w.code === 'W004'),
      `inherit profile must not trigger W004: ${JSON.stringify(output.warnings)}`
    );
  });

  test('still emits W004 for genuinely invalid model_profile values', () => {
    fs.writeFileSync(
      path.join(tmpDir, '.planning', 'config.json'),
      JSON.stringify({ model_profile: 'invalid-profile' }, null, 2)
    );

    const result = runMsdTools('validate health', tmpDir);
    assert.ok(result.success, `validate health failed: ${result.error}`);

    const output = JSON.parse(result.output);
    assert.ok(
      output.warnings.some(w => w.code === 'W004'),
      `Invalid profile should trigger W004: ${JSON.stringify(output.warnings)}`
    );
  });
});
  });
}


// ────────────────────────────────────────────────────────────────────────
// Folded from tests/bug-492-effort-manifest-fallback.test.cjs — consolidation epic #1969 (B3 #1972)
// ────────────────────────────────────────────────────────────────────────
{
  const { describe: __foldDescribe } = require('node:test');
  __foldDescribe("folded:bug-492-effort-manifest-fallback (consolidation epic #1969 B3 #1972)", () => {
'use strict';
/**
 * bug-492-effort-manifest-fallback.test.cjs
 *
 * Verifies resolveEffortInternal's fallback chain when no project config.json
 * is present.
 *
 * Isolation strategy: every test that injects custom effort values writes
 * them to a per-test ~/.msd/defaults.json rooted under a tmpHome, pointed at
 * via MSD_HOME. This avoids mutating the module-level CANONICAL_CONFIG_DEFAULTS
 * singleton (which caused independence violations under parallel runs).
 *
 * Test 1 (pure manifest fallback): tmpDir WITH .planning/ but no config.json.
 * MSD_HOME points to a bare tmpHome (no defaults.json). loadConfig sees
 * .planning/ → returns effort:null → model-resolver reads CANONICAL_CONFIG_DEFAULTS
 * directly for routing_tier_defaults.
 *
 * Tests 2-4 (global-defaults path): bare tmpDir (no .planning/) so loadConfig
 * hits the ~/.msd/defaults.json branch. A test-scoped defaults.json injects
 * the desired effort sub-object; model-resolver then takes the effortCfg
 * (non-null) branch — no singleton touched.
 */

process.env.MSD_TEST_MODE = '1';

const { describe, test } = require('node:test');
const assert = require('node:assert/strict');
const fs = require('node:fs');
const path = require('node:path');
const os = require('node:os');
const { cleanup } = require('./helpers.cjs');
const { resolveEffortInternal } = require('../msd-core/bin/lib/model-resolver.cjs');

/** Create a bare temp directory with no .planning/ structure */
function createBareTmpDir(prefix = 'msd-test-') {
  return fs.mkdtempSync(path.join(os.tmpdir(), prefix));
}

/** Create a temp home dir and write effort config into .msd/defaults.json */
function createTmpHomeWithEffort(effortConfig) {
  const tmpHome = createBareTmpDir('msd-home-');
  const msdDir = path.join(tmpHome, '.msd');
  fs.mkdirSync(msdDir, { recursive: true });
  fs.writeFileSync(
    path.join(msdDir, 'defaults.json'),
    JSON.stringify({ effort: effortConfig })
  );
  return tmpHome;
}

describe('#492 manifest effort fallback', () => {
  // These tests manage MSD_HOME per-test, so no shared beforeEach/afterEach.

  test('routing_tier_defaults manifest fallback still works when no config and no defaults.json', (t) => {
    // .planning/ exists → loadConfig returns effort:null → model-resolver reads
    // CANONICAL_CONFIG_DEFAULTS['effort']['routing_tier_defaults']['heavy'] = "xhigh".
    const tmpDir = createBareTmpDir();
    fs.mkdirSync(path.join(tmpDir, '.planning'), { recursive: true });
    const tmpHome = createBareTmpDir('msd-home-');
    process.env.MSD_HOME = tmpHome;
    t.after(() => {
      delete process.env.MSD_HOME;
      cleanup(tmpDir);
      cleanup(tmpHome);
    });

    // msd-planner's default tier is "heavy"; manifest routing_tier_defaults.heavy = "xhigh"
    assert.strictEqual(resolveEffortInternal(tmpDir, 'msd-planner'), 'xhigh');
  });

  test('global-defaults effort.agent_overrides wins over routing_tier_defaults when no project config', (t) => {
    // bare tmpDir (no .planning/) → loadConfig reads ~/.msd/defaults.json
    // which supplies effort.agent_overrides → resolveEffortInternal returns that value.
    const tmpDir = createBareTmpDir();
    const tmpHome = createTmpHomeWithEffort({ agent_overrides: { 'msd-planner': 'max' } });
    process.env.MSD_HOME = tmpHome;
    t.after(() => {
      delete process.env.MSD_HOME;
      cleanup(tmpDir);
      cleanup(tmpHome);
    });

    assert.strictEqual(resolveEffortInternal(tmpDir, 'msd-planner'), 'max');
  });

  test('global-defaults effort.default consulted for unknown agent with no project config', (t) => {
    // effort.default in defaults.json wins for an agent with no tier mapping.
    const tmpDir = createBareTmpDir();
    const tmpHome = createTmpHomeWithEffort({ default: 'max' });
    process.env.MSD_HOME = tmpHome;
    t.after(() => {
      delete process.env.MSD_HOME;
      cleanup(tmpDir);
      cleanup(tmpHome);
    });

    assert.strictEqual(resolveEffortInternal(tmpDir, 'fictional-agent-xyz-492'), 'max');
  });

  test('global-defaults agent_overrides takes precedence over routing_tier_defaults', (t) => {
    // agent_overrides is checked first (step 2), so "minimal" wins over
    // routing_tier_defaults.heavy = "xhigh" (step 3).
    const tmpDir = createBareTmpDir();
    const tmpHome = createTmpHomeWithEffort({
      agent_overrides: { 'msd-planner': 'minimal' },
      routing_tier_defaults: { heavy: 'xhigh' },
    });
    process.env.MSD_HOME = tmpHome;
    t.after(() => {
      delete process.env.MSD_HOME;
      cleanup(tmpDir);
      cleanup(tmpHome);
    });

    assert.strictEqual(resolveEffortInternal(tmpDir, 'msd-planner'), 'minimal');
  });
});
  });
}

// ────────────────────────────────────────────────────────────────────────
// Folded from tests/feat-3023-model-phase-types.test.cjs — consolidation epic #1969 (B8 #1977)
// ────────────────────────────────────────────────────────────────────────
{
  const { describe: __foldDescribe } = require('node:test');
  __foldDescribe("folded:feat-3023-model-phase-types (consolidation epic #1969 B8 #1977)", () => {
/**
 * Feature test for issue #3023 — per-phase-type model map.
 *
 * Adds a `models` block to .planning/config.json that accepts phase-type
 * keys (planning / discuss / research / execution / verification /
 * completion). Resolution precedence:
 *
 *   1. Per-agent `model_overrides[agent]`         (highest)
 *   2. Phase-type `models[phase_type]`            (NEW)
 *   3. Profile table (`model_profile`)
 *   4. Runtime default
 *
 * Tests are typed-IR / structural — assert on the value returned by
 * resolveModelInternal, not stdout/grep. Each test seeds a temp project
 * with a fixture .planning/config.json and asserts the resolver picks
 * the right tier for each agent.
 */

'use strict';

process.env.MSD_TEST_MODE = '1';

const { test, describe, beforeEach, afterEach } = require('node:test');
const assert = require('node:assert/strict');
const fs = require('node:fs');
const path = require('node:path');

const {
  resolveModelInternal,
} = require('../msd-core/bin/lib/model-resolver.cjs');
const {
  AGENT_TO_PHASE_TYPE,
  VALID_PHASE_TYPES,
  MODEL_PROFILES,
} = require('../msd-core/bin/lib/model-profiles.cjs');
const { isValidConfigKey } = require('../msd-core/bin/lib/config-schema.cjs');

const { createTempDir, cleanup } = require('./helpers.cjs');
const makeTmp = (prefix) => createTempDir(`msd-3023-${prefix}-`);

function writeConfig(projectDir, config) {
  const planningDir = path.join(projectDir, '.planning');
  fs.mkdirSync(planningDir, { recursive: true });
  fs.writeFileSync(path.join(planningDir, 'config.json'), JSON.stringify(config, null, 2));
}

function rmr(p) {
  cleanup(p);
}

// ─── Schema: AGENT_TO_PHASE_TYPE table + VALID_PHASE_TYPES ──────────────────

describe('#3023 phase-type schema: every agent has a phase-type assignment', () => {
  test('AGENT_TO_PHASE_TYPE is exported as a non-empty object', () => {
    assert.equal(typeof AGENT_TO_PHASE_TYPE, 'object');
    assert.ok(AGENT_TO_PHASE_TYPE !== null);
    assert.ok(Object.keys(AGENT_TO_PHASE_TYPE).length > 0);
  });

  test('VALID_PHASE_TYPES exposes the six named slots from the issue', () => {
    // The issue specified exactly these slots. Adding new slots here is a
    // schema change that must coordinate with config-schema's dynamic
    // pattern and the docs.
    assert.deepStrictEqual(
      [...VALID_PHASE_TYPES].sort(),
      ['completion', 'discuss', 'execution', 'planning', 'research', 'verification'].sort()
    );
  });

  test('every agent in MODEL_PROFILES has a phase-type assignment', () => {
    const missing = Object.keys(MODEL_PROFILES).filter(
      (agent) => !AGENT_TO_PHASE_TYPE[agent]
    );
    assert.deepStrictEqual(missing, [],
      `every agent in MODEL_PROFILES must have a phase-type — missing: ${JSON.stringify(missing)}`);
  });

  test('every assigned phase-type is one of the six valid slots', () => {
    const invalid = Object.entries(AGENT_TO_PHASE_TYPE).filter(
      ([, phaseType]) => !VALID_PHASE_TYPES.has(phaseType)
    );
    assert.deepStrictEqual(invalid, [],
      `phase-type assignments must use VALID_PHASE_TYPES — invalid: ${JSON.stringify(invalid)}`);
  });
});

// ─── Resolver behavior: phase-type drives tier ──────────────────────────────

describe('#3023 resolver: models.<phase_type> overrides profile-based tier', () => {
  let projectDir;
  beforeEach(() => { projectDir = makeTmp('resolver'); });
  afterEach(() => { rmr(projectDir); });

  test('phase-type alone — research agents get the phase-type tier, planner gets profile default', () => {
    writeConfig(projectDir, {
      model_profile: 'balanced',
      models: { research: 'haiku' },
    });
    // msd-phase-researcher is a research agent — should pick up 'haiku'
    // from the phase-type slot, not 'sonnet' from the balanced profile.
    assert.equal(resolveModelInternal(projectDir, 'msd-phase-researcher'), 'haiku');
    // msd-codebase-mapper is also research → haiku
    assert.equal(resolveModelInternal(projectDir, 'msd-codebase-mapper'), 'haiku');
    // msd-planner is planning, no models.planning set → falls through to
    // profile (balanced → opus per MODEL_PROFILES).
    assert.equal(resolveModelInternal(projectDir, 'msd-planner'), 'opus');
  });

  test('per-agent override beats phase-type (acceptance criterion b)', () => {
    writeConfig(projectDir, {
      model_profile: 'balanced',
      models: { research: 'haiku' },
      model_overrides: { 'msd-phase-researcher': 'opus' },
    });
    // The targeted per-agent override wins for that one agent.
    assert.equal(resolveModelInternal(projectDir, 'msd-phase-researcher'), 'opus');
    // Other research agents still pick up the phase-type tier.
    assert.equal(resolveModelInternal(projectDir, 'msd-codebase-mapper'), 'haiku');
    assert.equal(resolveModelInternal(projectDir, 'msd-research-synthesizer'), 'haiku');
  });

  test('phase-type beats profile (acceptance criterion c)', () => {
    // model_profile=quality would normally make research agents 'opus'.
    // models.research='haiku' must win.
    writeConfig(projectDir, {
      model_profile: 'quality',
      models: { research: 'haiku' },
    });
    assert.equal(resolveModelInternal(projectDir, 'msd-phase-researcher'), 'haiku');
    assert.equal(resolveModelInternal(projectDir, 'msd-codebase-mapper'), 'haiku');
    // msd-planner is planning, no slot set, profile=quality → opus.
    assert.equal(resolveModelInternal(projectDir, 'msd-planner'), 'opus');
  });

  test('issue example: opus for planning/discuss/execution, sonnet for research/verification/completion', () => {
    writeConfig(projectDir, {
      model_profile: 'balanced',
      models: {
        planning: 'opus',
        discuss: 'opus',
        execution: 'opus',
        research: 'sonnet',
        verification: 'sonnet',
        completion: 'sonnet',
      },
    });
    // Planning agents → opus
    assert.equal(resolveModelInternal(projectDir, 'msd-planner'), 'opus');
    // Execution agents → opus
    assert.equal(resolveModelInternal(projectDir, 'msd-executor'), 'opus');
    // Research agents → sonnet
    assert.equal(resolveModelInternal(projectDir, 'msd-phase-researcher'), 'sonnet');
    // Verification agents → sonnet
    assert.equal(resolveModelInternal(projectDir, 'msd-verifier'), 'sonnet');
  });

  test('phase-type "inherit" is honored (preserves existing inherit semantics)', () => {
    writeConfig(projectDir, {
      model_profile: 'balanced',
      models: { research: 'inherit' },
    });
    assert.equal(resolveModelInternal(projectDir, 'msd-phase-researcher'), 'inherit');
  });

  test('empty models block is a no-op (acceptance criterion: backward compat)', () => {
    writeConfig(projectDir, {
      model_profile: 'balanced',
      models: {},
    });
    // Behavior must match no-models config (balanced profile).
    assert.equal(resolveModelInternal(projectDir, 'msd-phase-researcher'), 'sonnet');
    assert.equal(resolveModelInternal(projectDir, 'msd-planner'), 'opus');
  });

  test('no models block at all is a no-op (acceptance criterion: backward compat)', () => {
    writeConfig(projectDir, {
      model_profile: 'balanced',
    });
    assert.equal(resolveModelInternal(projectDir, 'msd-phase-researcher'), 'sonnet');
    assert.equal(resolveModelInternal(projectDir, 'msd-planner'), 'opus');
  });

  test('unrecognized tier value falls through to profile (typo safety) — CR follow-up', () => {
    // The VALID_TIERS guard in resolveModelInternal must reject any value
    // that isn't a known tier alias and fall back to the profile tier.
    // Without this guard a typo like "haiku3" would pollute the runtime
    // resolution chain. Locks the guard in so a future regression that
    // removes it is caught.
    writeConfig(projectDir, {
      model_profile: 'balanced',
      models: { research: 'haiku3' }, // typo; not a valid tier alias
    });
    // Falls back to balanced → sonnet for research agents.
    assert.equal(resolveModelInternal(projectDir, 'msd-phase-researcher'), 'sonnet');
    assert.equal(resolveModelInternal(projectDir, 'msd-codebase-mapper'), 'haiku',
      'msd-codebase-mapper at balanced is haiku per profile, unaffected by typo');
  });

  test('full model ID in models.<phase_type> is rejected; falls through to profile — CR follow-up', () => {
    // Full IDs are not valid in models.<phase_type>; they belong in
    // model_overrides per agent. The guard ensures we don't accidentally
    // hand a full ID into the runtime-tier resolution chain.
    writeConfig(projectDir, {
      model_profile: 'balanced',
      models: { research: 'openai/gpt-5' },
    });
    assert.equal(resolveModelInternal(projectDir, 'msd-phase-researcher'), 'sonnet');
  });

  // ─── CR Major: phase-type beats inherit profile ─────────────────────────
  // Pre-fix bug: model_profile='inherit' + models.execution='opus' returned
  // 'inherit' because the profile short-circuit fired BEFORE the phase-type
  // override could win, violating the documented precedence where
  // models[phase_type] beats model_profile.

  test('phase-type override wins over profile=inherit (CR Major) — model resolver', () => {
    writeConfig(projectDir, {
      model_profile: 'inherit',
      models: { execution: 'opus' },
    });
    // msd-executor (execution) must get the phase-type opus, not inherit.
    assert.equal(resolveModelInternal(projectDir, 'msd-executor'), 'opus');
  });

  test('phase-type "haiku" wins over profile=inherit; agents without a slot still inherit', () => {
    writeConfig(projectDir, {
      model_profile: 'inherit',
      models: { research: 'haiku' },
    });
    // research agents → haiku (phase-type wins)
    assert.equal(resolveModelInternal(projectDir, 'msd-phase-researcher'), 'haiku');
    assert.equal(resolveModelInternal(projectDir, 'msd-codebase-mapper'), 'haiku');
    // planning agent has no slot set → falls through to profile=inherit.
    assert.equal(resolveModelInternal(projectDir, 'msd-planner'), 'inherit');
  });

  test('profile=inherit with no models block still returns inherit (no regression)', () => {
    writeConfig(projectDir, {
      model_profile: 'inherit',
    });
    assert.equal(resolveModelInternal(projectDir, 'msd-executor'), 'inherit');
    assert.equal(resolveModelInternal(projectDir, 'msd-phase-researcher'), 'inherit');
  });

  test('profile=inherit with models block but agent has no slot → inherit', () => {
    writeConfig(projectDir, {
      model_profile: 'inherit',
      models: { research: 'haiku' },
    });
    // msd-executor (execution slot) is not set → falls through to inherit.
    assert.equal(resolveModelInternal(projectDir, 'msd-executor'), 'inherit');
  });
});

// ─── #443 Unified effort: resolveEffortInternal + renderEffortForRuntime ────

const { resolveEffortInternal } = require('../msd-core/bin/lib/model-resolver.cjs');
const { renderEffortForRuntime } = require('../msd-core/bin/lib/model-catalog.cjs');

describe('#3023 + #443: unified effort resolver (resolveEffortInternal) for Codex', () => {
  let projectDir;
  beforeEach(() => { projectDir = makeTmp('effort'); });
  afterEach(() => { rmr(projectDir); });

  test('resolveEffortInternal exported from model-resolver.cjs', () => {
    assert.equal(typeof resolveEffortInternal, 'function');
  });

  test('effort derives from AGENT_DEFAULT_TIERS (routing), not phase-type; msd-executor is standard → high', () => {
    // Under unification, effort is config-driven via routing_tier_defaults.
    // msd-executor has routing tier 'standard' → default effort 'high', regardless
    // of models.execution phase-type or model_profile setting.
    writeConfig(projectDir, {
      runtime: 'codex',
      model_profile: 'balanced',
      models: { execution: 'opus' },
    });
    const eff = resolveEffortInternal(projectDir, 'msd-executor');
    // standard tier → 'high' (not 'xhigh' from opus, not 'medium' from old catalog)
    assert.equal(eff, 'high');
    const rendered = renderEffortForRuntime('codex', eff);
    assert.equal(rendered.param, 'model_reasoning_effort');
    assert.equal(rendered.value, 'high');
  });

  test('effort resolves universally even when models.execution=inherit', () => {
    // Under unification, models.execution='inherit' does not affect effort resolution.
    // Effort always resolves from routing_tier_defaults: msd-executor (standard) → 'high'.
    writeConfig(projectDir, {
      runtime: 'codex',
      model_profile: 'balanced',
      models: { execution: 'inherit' },
    });
    const eff = resolveEffortInternal(projectDir, 'msd-executor');
    assert.equal(eff, 'high');
    const rendered = renderEffortForRuntime('codex', eff);
    assert.equal(rendered.param, 'model_reasoning_effort');
    assert.equal(rendered.value, 'high');
  });

  test('per-agent model_overrides does not affect effort (effort is routing-tier-based)', () => {
    // Under unification, effort does not check model_overrides.
    // msd-executor (standard tier) → 'high' regardless.
    writeConfig(projectDir, {
      runtime: 'codex',
      model_profile: 'balanced',
      models: { execution: 'opus' },
      model_overrides: { 'msd-executor': 'openai/gpt-5' },
    });
    const eff = resolveEffortInternal(projectDir, 'msd-executor');
    assert.equal(eff, 'high');
    const rendered = renderEffortForRuntime('codex', eff);
    assert.equal(rendered.param, 'model_reasoning_effort');
    assert.equal(rendered.value, 'high');
  });

  test('Claude runtime: effort is first-class (emits output_config.effort, not null)', () => {
    // Under unification, Claude effort is first-class via output_config.effort.
    // No `runtime` set → defaults to claude (no runtime key → undefined runtime).
    writeConfig(projectDir, {
      model_profile: 'balanced',
      models: { execution: 'opus' },
    });
    const eff = resolveEffortInternal(projectDir, 'msd-executor');
    // effort resolves universally; claude render gives output_config.effort
    const rendered = renderEffortForRuntime(undefined, eff);
    // undefined runtime yields param=null (no runtime key set)
    assert.equal(rendered.param, null);
    // But if explicitly set to 'claude':
    const renderedClaude = renderEffortForRuntime('claude', eff);
    assert.equal(renderedClaude.param, 'output_config.effort');
    assert.equal(renderedClaude.value, 'high');
  });

  test('profile=inherit does not affect effort; effort resolves from routing tier', () => {
    // Under unification, effort is completely independent of model_profile.
    // msd-executor (standard routing tier) → 'high' even with model_profile='inherit'.
    writeConfig(projectDir, {
      runtime: 'codex',
      model_profile: 'inherit',
      models: { execution: 'opus' },
    });
    const eff = resolveEffortInternal(projectDir, 'msd-executor');
    assert.equal(eff, 'high',
      'profile=inherit must not affect effort; standard routing tier → high');
    const rendered = renderEffortForRuntime('codex', eff);
    assert.equal(rendered.param, 'model_reasoning_effort');
    assert.equal(rendered.value, 'high');
  });
});

// ─── Schema validation ──────────────────────────────────────────────────────

describe('#3023 config-schema: models.<phase_type> validation', () => {
  test('models.planning is a valid config key', () => {
    assert.equal(isValidConfigKey('models.planning'), true);
  });

  test('all six phase-type slots are valid config keys', () => {
    for (const slot of ['planning', 'discuss', 'research', 'execution', 'verification', 'completion']) {
      assert.equal(isValidConfigKey(`models.${slot}`), true,
        `models.${slot} must be a valid config key`);
    }
  });

  test('unknown phase-type is rejected (acceptance criterion d)', () => {
    assert.equal(isValidConfigKey('models.deployment'), false,
      'unknown phase-type must NOT be accepted');
    assert.equal(isValidConfigKey('models.msd-planner'), false,
      'agent name in models.* must NOT be accepted (use model_overrides for agents)');
  });

  test('models alone (without a slot) is not a valid config-set key', () => {
    // Setting the whole block isn't a granular set; users edit JSON directly.
    assert.equal(isValidConfigKey('models'), false);
  });
});
  });
}


// ────────────────────────────────────────────────────────────────────────
// Folded from tests/feat-443-effort-fast-mode.integration.test.cjs — consolidation epic #1969 (B8 #1977)
// ────────────────────────────────────────────────────────────────────────
{
  const { describe: __foldDescribe } = require('node:test');
  __foldDescribe("folded:feat-443-effort-fast-mode.integration (consolidation epic #1969 B8 #1977)", () => {
'use strict';

/**
 * Architecture-level QA for issue #443 — unified effort + fast_mode engine.
 *
 * Integration suite (*.integration.test.cjs): cross-module flows that exercise
 * real CLI invocations via runMsdTools, the full 33-agent registry, and the
 * config round-trip through config-set -> resolve-execution.
 *
 * INVARIANTS tested here (each is also documented in docs/TESTING-SUITES.md):
 *
 *  (a) CROSS-PROVIDER VALIDITY  — renderEffortForRuntime never emits a value
 *      that the real provider API would 400 on. Ground-truth provider enums are
 *      defined as local constants (not sourced from the implementation).
 *
 *  (b) PARAM/CHANNEL CONTRACT   — each runtime exposes a stable parameter name
 *      and propagation channel.
 *
 *  (c) RESOLVE-EXECUTION JSON CONTRACT — the CLI command emits a stable JSON
 *      shape with all required keys and correct types.
 *
 *  (d) TOTALITY across the real 33-agent registry — every agent produces a
 *      valid effort value; none returns undefined/null.
 *
 *  (e) FAST-MODE HONESTY INVARIANT — claude runtime always reports
 *      fast_mode_supported=false (emitting fast_mode frontmatter is a silent
 *      no-op for Claude Code subagents).
 *
 *  (f) PRECEDENCE MATRIX — first-valid-wins for both effort and fast_mode
 *      cascades, including invalid values correctly falling through.
 *
 *  (g) DYNAMIC-ROUTING COMPOSITION — resolveEffortForTier escalates
 *      independently of model tier logic; clamps at 'max'; respects
 *      max_escalations; disabled when escalate_on_failure=false.
 *
 *  (h) CONFIG-TOOLING ROUND-TRIP — config-set accepts all new effort/fast_mode
 *      key paths (schema validation passes); values survive round-trip through
 *      resolve-execution.
 */

process.env.MSD_TEST_MODE = '1';

const { describe, test, before, after, beforeEach, afterEach } = require('node:test');
const assert = require('node:assert/strict');
const fs = require('node:fs');
const path = require('node:path');

const { createTempProject, cleanup, runMsdTools } = require('./helpers.cjs');

const {
  resolveEffortInternal,
  resolveFastModeInternal,
  resolveEffortForTier,
  VALID_EFFORTS,
} = require('../msd-core/bin/lib/model-resolver.cjs');

const {
  renderEffortForRuntime,
  RUNTIMES_WITH_FAST_MODE,
  catalog,
} = require('../msd-core/bin/lib/model-catalog.cjs');

// ─────────────────────────────────────────────────────────────────────────────
// Ground-truth provider enums (defined HERE, not sourced from the implementation).
// These are the exact values the real APIs accept — using a value outside these
// sets would result in a 400 response from the provider.
//
// Sources:
//   Anthropic: output_config.effort — https://docs.anthropic.com (Claude API)
//   OpenAI:    model_reasoning_effort — https://platform.openai.com/docs (Codex)
// ─────────────────────────────────────────────────────────────────────────────
// #3007: corrected — Codex's own models.json now advertises 'max' (and 'ultra',
// which is policy-rejected separately, #2167) but no Codex model advertises
// 'minimal'. The old enum here ('minimal'..'xhigh', no 'max') encoded ADR-443's
// stale premise, not the real API.
const PROVIDER_EFFORT_ENUMS = {
  claude: new Set(['low', 'medium', 'high', 'xhigh', 'max']),
  codex:  new Set(['low', 'medium', 'high', 'xhigh', 'max']),
};

// Helper: write config.json into a temp project
function writeConfig(dir, config) {
  const planningDir = path.join(dir, '.planning');
  fs.mkdirSync(planningDir, { recursive: true });
  fs.writeFileSync(path.join(planningDir, 'config.json'), JSON.stringify(config, null, 2));
}

// ─── (a) CROSS-PROVIDER VALIDITY INVARIANT ───────────────────────────────────

describe('#443 integration (a): cross-provider validity invariant', () => {
  // For every universal effort × every provider runtime, the rendered value
  // must be a member of that provider's real API enum.
  test('all VALID_EFFORTS render within provider enums for claude and codex', () => {
    for (const universalEffort of VALID_EFFORTS) {
      for (const [runtime, providerEnum] of Object.entries(PROVIDER_EFFORT_ENUMS)) {
        const rendered = renderEffortForRuntime(runtime, universalEffort);
        assert.ok(
          providerEnum.has(rendered.value),
          `render('${runtime}', '${universalEffort}').value = '${rendered.value}' is NOT in the ` +
          `${runtime} provider enum ${[...providerEnum].join('|')} — real API would 400`
        );
      }
    }
  });

  // Documented clamps must hold exactly
  // #3007: corrected — Codex gained 'max' (declared per-model via
  // supported_reasoning_levels); 'max' is no longer Anthropic-only.
  test("render('codex','max').value === 'max' (Codex now advertises max)", () => {
    assert.strictEqual(renderEffortForRuntime('codex', 'max').value, 'max');
  });

  test("render('claude','minimal').value === 'low' (minimal is Codex-only)", () => {
    assert.strictEqual(renderEffortForRuntime('claude', 'minimal').value, 'low');
  });

  // Common levels must pass through unchanged on BOTH providers
  test('common levels (low/medium/high/xhigh) pass through unchanged on claude', () => {
    for (const level of ['low', 'medium', 'high', 'xhigh']) {
      assert.strictEqual(
        renderEffortForRuntime('claude', level).value,
        level,
        `claude: level '${level}' should pass through unchanged`
      );
    }
  });

  test('common levels (low/medium/high/xhigh) pass through unchanged on codex', () => {
    for (const level of ['low', 'medium', 'high', 'xhigh']) {
      assert.strictEqual(
        renderEffortForRuntime('codex', level).value,
        level,
        `codex: level '${level}' should pass through unchanged`
      );
    }
  });
});

// ─── (b) PARAM/CHANNEL CONTRACT ──────────────────────────────────────────────

describe('#443 integration (b): param/channel contract', () => {
  test("claude: param is always 'output_config.effort'", () => {
    for (const effort of VALID_EFFORTS) {
      const r = renderEffortForRuntime('claude', effort);
      assert.strictEqual(r.param, 'output_config.effort',
        `claude param must be 'output_config.effort' for effort '${effort}'`);
    }
  });

  test("codex: param is always 'model_reasoning_effort'", () => {
    for (const effort of VALID_EFFORTS) {
      const r = renderEffortForRuntime('codex', effort);
      assert.strictEqual(r.param, 'model_reasoning_effort',
        `codex param must be 'model_reasoning_effort' for effort '${effort}'`);
    }
  });

  test('claude channel is stable: frontmatter', () => {
    for (const effort of VALID_EFFORTS) {
      assert.strictEqual(renderEffortForRuntime('claude', effort).channel, 'frontmatter');
    }
  });

  test('codex channel is stable: api', () => {
    for (const effort of VALID_EFFORTS) {
      assert.strictEqual(renderEffortForRuntime('codex', effort).channel, 'api');
    }
  });

  test("unknown runtimes (gemini, qwen, 'mystery'): param===null, value passes through", () => {
    for (const runtime of ['gemini', 'qwen', 'mystery']) {
      for (const effort of VALID_EFFORTS) {
        const r = renderEffortForRuntime(runtime, effort);
        assert.strictEqual(r.param, null, `${runtime}: param must be null`);
        assert.strictEqual(r.channel, null, `${runtime}: channel must be null`);
        assert.strictEqual(r.value, effort, `${runtime}: value must pass through unchanged`);
      }
    }
  });
});

// ─── (c) RESOLVE-EXECUTION JSON CONTRACT ─────────────────────────────────────

describe('#443 integration (c): resolve-execution JSON contract', () => {
  let tmpDir;
  beforeEach(() => { tmpDir = createTempProject(); });
  afterEach(() => { cleanup(tmpDir); });

  function assertFullContract(output, label) {
    assert.ok(typeof output.model === 'string' && output.model.length > 0,
      `${label}: model must be a non-empty string`);
    assert.ok(typeof output.profile === 'string' && output.profile.length > 0,
      `${label}: profile must be a non-empty string`);
    assert.ok(VALID_EFFORTS.includes(output.effort),
      `${label}: effort '${output.effort}' must be a member of VALID_EFFORTS`);
    assert.ok(typeof output.effort_rendered === 'string' && output.effort_rendered.length > 0,
      `${label}: effort_rendered must be a non-empty string`);
    assert.ok(output.effort_param === null || typeof output.effort_param === 'string',
      `${label}: effort_param must be string or null`);
    assert.ok(output.effort_propagation === null || typeof output.effort_propagation === 'string',
      `${label}: effort_propagation must be string or null`);
    assert.ok(typeof output.fast_mode === 'boolean',
      `${label}: fast_mode must be a boolean`);
    assert.ok(typeof output.fast_mode_supported === 'boolean',
      `${label}: fast_mode_supported must be a boolean`);
  }

  test('msd-planner (default claude runtime): full contract + known-agent shape', () => {
    const result = runMsdTools(['resolve-execution', 'msd-planner'], tmpDir, { HOME: tmpDir });
    assert.ok(result.success, `Command failed: ${result.error}`);
    const output = JSON.parse(result.output);
    assertFullContract(output, 'msd-planner/claude');
    assert.strictEqual(output.effort_param, 'output_config.effort');
    assert.strictEqual(output.effort_propagation, 'frontmatter');
    assert.strictEqual(output.fast_mode_supported, false);
    // known agent must NOT have unknown_agent:true
    assert.ok(!output.unknown_agent, 'known agent must not have unknown_agent:true');
  });

  test('codex runtime: full contract + effort_param=model_reasoning_effort', () => {
    writeConfig(tmpDir, { runtime: 'codex' });
    const result = runMsdTools(['resolve-execution', 'msd-planner'], tmpDir, { HOME: tmpDir });
    assert.ok(result.success, `Command failed: ${result.error}`);
    const output = JSON.parse(result.output);
    assertFullContract(output, 'msd-planner/codex');
    assert.strictEqual(output.effort_param, 'model_reasoning_effort');
    assert.strictEqual(output.fast_mode_supported, false);
  });

  test('gemini runtime: full contract + effort_param===null (no effort wire)', () => {
    writeConfig(tmpDir, { runtime: 'gemini' });
    const result = runMsdTools(['resolve-execution', 'msd-planner'], tmpDir, { HOME: tmpDir });
    assert.ok(result.success, `Command failed: ${result.error}`);
    const output = JSON.parse(result.output);
    assertFullContract(output, 'msd-planner/gemini');
    assert.strictEqual(output.effort_param, null);
    assert.strictEqual(output.effort_propagation, null);
    assert.strictEqual(output.fast_mode_supported, false);
  });

  test('unknown agent: full contract + unknown_agent===true', () => {
    const result = runMsdTools(['resolve-execution', 'unknown-agent-xyz'], tmpDir, { HOME: tmpDir });
    assert.ok(result.success, `Command failed: ${result.error}`);
    const output = JSON.parse(result.output);
    assertFullContract(output, 'unknown-agent-xyz');
    assert.strictEqual(output.unknown_agent, true, 'unknown agent must have unknown_agent:true');
  });
});

// ─── (d) TOTALITY across the real 33-agent registry ──────────────────────────

describe('#443 integration (d): totality across real registry', () => {
  let tmpDir;
  before(() => { tmpDir = createTempProject(); });
  after(() => { cleanup(tmpDir); });

  const registeredAgents = Object.keys(catalog.agents);
  // Confirm we're covering the full registry — snapshot the count so a
  // catalog shrink is caught by this assertion.
  test(`registry has at least 33 agents (currently ${registeredAgents.length})`, () => {
    assert.ok(registeredAgents.length >= 33,
      `Expected at least 33 agents in registry, got ${registeredAgents.length}`);
  });

  test(`all ${registeredAgents.length} agents: resolveEffortInternal returns a VALID_EFFORTS member`, () => {
    const effortSet = new Set(VALID_EFFORTS);
    const bad = [];
    for (const agent of registeredAgents) {
      const effort = resolveEffortInternal(tmpDir, agent);
      if (effort === undefined || effort === null || !effortSet.has(effort)) {
        bad.push(`${agent}: got ${JSON.stringify(effort)}`);
      }
    }
    assert.strictEqual(bad.length, 0,
      `Agents with invalid effort:\n${bad.join('\n')}`);
  });

  test(`all ${registeredAgents.length} agents: resolveFastModeInternal returns strict boolean`, () => {
    const bad = [];
    for (const agent of registeredAgents) {
      const fm = resolveFastModeInternal(tmpDir, agent);
      if (typeof fm !== 'boolean') {
        bad.push(`${agent}: got ${JSON.stringify(fm)} (${typeof fm})`);
      }
    }
    assert.strictEqual(bad.length, 0,
      `Agents with non-boolean fast_mode:\n${bad.join('\n')}`);
  });

  test(`all ${registeredAgents.length} agents: renderEffortForRuntime('claude', effort) stays in claude enum`, () => {
    const claudeEnum = PROVIDER_EFFORT_ENUMS.claude;
    const bad = [];
    for (const agent of registeredAgents) {
      const effort = resolveEffortInternal(tmpDir, agent);
      const rendered = renderEffortForRuntime('claude', effort);
      if (!claudeEnum.has(rendered.value)) {
        bad.push(`${agent}: effort=${effort} rendered=${rendered.value} not in claude enum`);
      }
    }
    assert.strictEqual(bad.length, 0,
      `Agents producing invalid claude effort:\n${bad.join('\n')}`);
  });
});

// ─── (e) FAST-MODE HONESTY INVARIANT ─────────────────────────────────────────

describe('#443 integration (e): fast-mode honesty invariant', () => {
  let tmpDir;
  beforeEach(() => { tmpDir = createTempProject(); });
  afterEach(() => { cleanup(tmpDir); });

  // Sample of agents across all tiers to prove the invariant is not agent-specific
  const testAgents = ['msd-planner', 'msd-executor', 'msd-codebase-mapper', 'msd-verifier'];

  test('claude runtime: fast_mode_supported is ALWAYS false regardless of fast_mode config', () => {
    const configs = [
      {},
      { fast_mode: { enabled: true } },
      { fast_mode: { routing_tier_defaults: { heavy: true } } },
      { fast_mode: { agent_overrides: { 'msd-planner': true } } },
    ];
    for (const config of configs) {
      writeConfig(tmpDir, config);
      for (const agent of testAgents) {
        const result = runMsdTools(['resolve-execution', agent], tmpDir, { HOME: tmpDir });
        assert.ok(result.success, `Command failed for ${agent}: ${result.error}`);
        const output = JSON.parse(result.output);
        assert.strictEqual(output.fast_mode_supported, false,
          `claude/${agent}: fast_mode_supported must be false (Claude has no per-subagent fast-mode mechanism); config=${JSON.stringify(config)}`);
      }
    }
  });

  test("RUNTIMES_WITH_FAST_MODE.has('api') === true (api is the only fast-mode capable runtime)", () => {
    assert.ok(RUNTIMES_WITH_FAST_MODE.has('api'),
      "RUNTIMES_WITH_FAST_MODE must include 'api' — this is the only runtime with per-call fast_mode support");
  });

  test("RUNTIMES_WITH_FAST_MODE.has('claude') === false (claude fast-mode is session-level only)", () => {
    assert.ok(!RUNTIMES_WITH_FAST_MODE.has('claude'),
      "RUNTIMES_WITH_FAST_MODE must NOT include 'claude' — emitting fast_mode frontmatter on a Claude subagent is a silent no-op");
  });

  test("RUNTIMES_WITH_FAST_MODE.has('codex') === false", () => {
    assert.ok(!RUNTIMES_WITH_FAST_MODE.has('codex'),
      "codex does not support per-call fast_mode");
  });

  test("RUNTIMES_WITH_FAST_MODE.has('gemini') === false", () => {
    assert.ok(!RUNTIMES_WITH_FAST_MODE.has('gemini'),
      "gemini does not support per-call fast_mode");
  });
});

// ─── (f) PRECEDENCE MATRIX ───────────────────────────────────────────────────

describe('#443 integration (f): precedence matrix (property/table-driven)', () => {
  let tmpDir;
  beforeEach(() => { tmpDir = createTempProject(); });
  afterEach(() => { cleanup(tmpDir); });

  // Effort: first-valid-wins from highest precedence to lowest
  //   1. opts.override (invocation)
  //   2. effort.agent_overrides.<agent>
  //   3. effort.routing_tier_defaults.<tier>
  //   4. effort.default
  //   5. manifest tier default
  //   6. hardcoded 'high'
  const effortPrecedenceTable = [
    {
      label: 'layer 1 (invocation override) beats all',
      config: {
        effort: {
          agent_overrides: { 'msd-planner': 'low' },
          routing_tier_defaults: { heavy: 'medium' },
          default: 'xhigh',
        },
      },
      opts: { override: 'minimal' },
      expected: 'minimal',
    },
    {
      label: 'layer 2 (agent_override) beats tier default and default',
      config: {
        effort: {
          agent_overrides: { 'msd-planner': 'low' },
          routing_tier_defaults: { heavy: 'medium' },
          default: 'xhigh',
        },
      },
      opts: {},
      expected: 'low',
    },
    {
      label: 'layer 3 (routing_tier_defaults) beats effort.default',
      config: {
        effort: {
          routing_tier_defaults: { heavy: 'medium' },
          default: 'xhigh',
        },
      },
      opts: {},
      expected: 'medium',
    },
    {
      // #3531 (10c): an effort block without routing_tier_defaults no longer
      // discards the manifest tier defaults — msd-planner (heavy) gets the
      // manifest 'xhigh', not effort.default. effort.default is still the
      // layer that answers for an agent with NO catalog tier (see the
      // unknown-agent row below, which is what this layer actually names).
      label: 'layer 4 (effort.default) when agent has no catalog tier',
      config: {
        effort: { default: 'low' },
      },
      opts: {},
      agent: 'completely-unknown-agent-xyz',
      expected: 'low',
    },
    {
      label: '10c: effort block without routing_tier_defaults keeps manifest tier defaults (#3531)',
      config: {
        effort: { default: 'low' },
      },
      opts: {},
      agent: 'msd-planner',
      expected: 'xhigh',
    },
    {
      label: 'invalid layer 1 (turbo) falls through to layer 2 (agent_override)',
      config: {
        effort: { agent_overrides: { 'msd-planner': 'medium' } },
      },
      opts: { override: 'turbo' },
      expected: 'medium',
    },
    {
      label: 'invalid layer 2 (agent_override=123 numeric) falls through to tier default',
      config: {
        effort: {
          agent_overrides: { 'msd-planner': 123 },
          routing_tier_defaults: { heavy: 'high' },
        },
      },
      opts: {},
      expected: 'high',
    },
    {
      // #3531 (10c): under the merged tier layer, an invalid config value for
      // a tier falls back to the MANIFEST value for that same tier (xhigh for
      // heavy), not to effort.default.
      label: 'invalid tier default (turbo) falls back to the manifest value for that tier (#3531)',
      config: {
        effort: {
          routing_tier_defaults: { heavy: 'turbo' },
          default: 'low',
        },
      },
      opts: {},
      expected: 'xhigh',
    },
  ];

  for (const row of effortPrecedenceTable) {
    test(`effort precedence: ${row.label}`, () => {
      writeConfig(tmpDir, row.config);
      // #3531: rows may pin a specific agent (default keeps the historical
      // msd-planner target so existing rows are unchanged in what they assert).
      const result = resolveEffortInternal(tmpDir, row.agent || 'msd-planner', row.opts);
      assert.strictEqual(result, row.expected,
        `Expected '${row.expected}', got '${result}' — config: ${JSON.stringify(row.config)}`);
    });
  }

  // fast_mode precedence:
  //   1. opts.override (strict boolean only)
  //   2. fast_mode.agent_overrides.<agent> (strict boolean only)
  //   3. fast_mode.routing_tier_defaults.<tier> (strict boolean only)
  //   4. fast_mode.enabled (strict boolean only)
  //   5. false
  const fastModePrecedenceTable = [
    {
      label: 'layer 1 (opts.override=false) beats enabled=true',
      config: { fast_mode: { enabled: true } },
      opts: { override: false },
      expected: false,
    },
    {
      label: 'layer 2 (agent_override=true) beats tier default',
      config: {
        fast_mode: {
          agent_overrides: { 'msd-planner': true },
          routing_tier_defaults: { heavy: false },
          enabled: false,
        },
      },
      opts: {},
      expected: true,
    },
    {
      label: 'layer 3 (tier default=true) beats enabled=false',
      config: {
        fast_mode: {
          routing_tier_defaults: { heavy: true },
          enabled: false,
        },
      },
      opts: {},
      expected: true,
    },
    {
      label: 'layer 4 (enabled=true) when no tier/agent overrides',
      config: { fast_mode: { enabled: true } },
      opts: {},
      expected: true,
    },
    {
      label: 'layer 5 (default false) when all absent',
      config: {},
      opts: {},
      expected: false,
    },
    {
      label: 'string "true" in opts.override is NOT accepted (falls through)',
      config: { fast_mode: { enabled: true } },
      // override must be strict boolean; string falls through to next layer
      opts: { override: 'true' },
      // 'true' as string is not boolean -> falls through to tier default
      // msd-planner is heavy; no tier default set; falls to enabled=true
      expected: true,
    },
    {
      label: 'string "true" in agent_overrides is NOT accepted',
      config: {
        fast_mode: {
          agent_overrides: { 'msd-planner': 'true' },
          enabled: false,
        },
      },
      opts: {},
      // string 'true' is not boolean -> fall through to tier default -> enabled=false -> false
      expected: false,
    },
  ];

  for (const row of fastModePrecedenceTable) {
    test(`fast_mode precedence: ${row.label}`, () => {
      writeConfig(tmpDir, row.config);
      const result = resolveFastModeInternal(tmpDir, 'msd-planner', row.opts);
      assert.strictEqual(result, row.expected,
        `Expected ${row.expected}, got ${result} — config: ${JSON.stringify(row.config)}`);
    });
  }
});

// ─── (g) DYNAMIC-ROUTING COMPOSITION ─────────────────────────────────────────

describe('#443 integration (g): dynamic-routing composition', () => {
  let tmpDir;
  beforeEach(() => { tmpDir = createTempProject(); });
  afterEach(() => { cleanup(tmpDir); });

  const dynamicRoutingBase = {
    dynamic_routing: {
      enabled: true,
      tier_models: { light: 'haiku', standard: 'sonnet', heavy: 'opus' },
      escalate_on_failure: true,
      max_escalations: 4,
    },
    effort: { routing_tier_defaults: { light: 'low' } },
  };

  test('resolveEffortForTier escalates independently of model resolution', () => {
    writeConfig(tmpDir, dynamicRoutingBase);
    const effort0 = resolveEffortForTier(tmpDir, 'msd-codebase-mapper', 0);
    const effort1 = resolveEffortForTier(tmpDir, 'msd-codebase-mapper', 1);
    const effort2 = resolveEffortForTier(tmpDir, 'msd-codebase-mapper', 2);
    assert.strictEqual(effort0, 'low');
    assert.strictEqual(effort1, 'medium');
    assert.strictEqual(effort2, 'high');
    // Verify the effort ladder steps up correctly without asserting model value
    // (model timing is a separate concern from effort escalation)
    assert.notStrictEqual(effort0, effort1, 'effort should escalate at attempt 1');
    assert.notStrictEqual(effort1, effort2, 'effort should escalate at attempt 2');
  });

  test('escalate_on_failure=false: attempt is ignored for effort', () => {
    writeConfig(tmpDir, {
      ...dynamicRoutingBase,
      dynamic_routing: {
        ...dynamicRoutingBase.dynamic_routing,
        escalate_on_failure: false,
      },
    });
    const e0 = resolveEffortForTier(tmpDir, 'msd-codebase-mapper', 0);
    const e1 = resolveEffortForTier(tmpDir, 'msd-codebase-mapper', 1);
    const e3 = resolveEffortForTier(tmpDir, 'msd-codebase-mapper', 3);
    assert.strictEqual(e0, e1, 'effort must not escalate when escalate_on_failure=false');
    assert.strictEqual(e0, e3, 'effort must not escalate when escalate_on_failure=false');
  });

  test('escalation clamps at "max" regardless of attempt number', () => {
    writeConfig(tmpDir, {
      dynamic_routing: {
        enabled: true,
        tier_models: { light: 'haiku', standard: 'sonnet', heavy: 'opus' },
        escalate_on_failure: true,
        max_escalations: 99,
      },
      effort: { default: 'max' },
    });
    // Any large attempt number — result must never exceed 'max'
    const r = resolveEffortForTier(tmpDir, 'msd-planner', 50);
    assert.strictEqual(r, 'max', `Effort must clamp at 'max', got '${r}'`);
    const EFFORT_LADDER = VALID_EFFORTS;
    const maxIdx = EFFORT_LADDER.indexOf('max');
    const rIdx = EFFORT_LADDER.indexOf(r);
    assert.ok(rIdx <= maxIdx, 'Effort must not exceed the max position in the ladder');
  });

  test('respects max_escalations cap: attempt beyond cap gives same as cap', () => {
    writeConfig(tmpDir, {
      dynamic_routing: {
        enabled: true,
        tier_models: { light: 'haiku', standard: 'sonnet', heavy: 'opus' },
        escalate_on_failure: true,
        max_escalations: 1,
      },
      effort: { routing_tier_defaults: { light: 'low' } },
    });
    const atCap = resolveEffortForTier(tmpDir, 'msd-codebase-mapper', 1);    // 1 escalation
    const beyond = resolveEffortForTier(tmpDir, 'msd-codebase-mapper', 5);   // capped at 1
    assert.strictEqual(atCap, beyond,
      'Effort beyond max_escalations must be same as at cap');
    assert.strictEqual(atCap, 'medium', 'low + 1 escalation = medium');
  });

  test('dynamic_routing disabled: resolveEffortForTier ignores attempt', () => {
    writeConfig(tmpDir, {
      effort: { routing_tier_defaults: { light: 'low' } },
    });
    const e0 = resolveEffortForTier(tmpDir, 'msd-codebase-mapper', 0);
    const e5 = resolveEffortForTier(tmpDir, 'msd-codebase-mapper', 5);
    assert.strictEqual(e0, e5, 'Effort must not change when dynamic_routing is disabled');
    assert.strictEqual(e0, 'low');
  });
});

// ─── (h) CONFIG-TOOLING ROUND-TRIP ───────────────────────────────────────────

describe('#443 integration (h): config-tooling round-trip', () => {
  let tmpDir;
  beforeEach(() => { tmpDir = createTempProject(); });
  afterEach(() => { cleanup(tmpDir); });

  test('config-set effort.default then resolve-execution reflects new value', () => {
    const setResult = runMsdTools(['config-set', 'effort.default', 'low'], tmpDir, { HOME: tmpDir });
    assert.ok(setResult.success, `config-set effort.default failed: ${setResult.error}`);

    const execResult = runMsdTools(['resolve-execution', 'unknown-agent-xyz'], tmpDir, { HOME: tmpDir });
    assert.ok(execResult.success, `resolve-execution failed: ${execResult.error}`);
    const output = JSON.parse(execResult.output);
    // unknown agent falls through to effort.default
    assert.strictEqual(output.effort, 'low',
      `Expected effort='low' after config-set, got '${output.effort}'`);
  });

  test('config-set effort.routing_tier_defaults.heavy then resolve-execution uses it', () => {
    const setResult = runMsdTools(
      ['config-set', 'effort.routing_tier_defaults.heavy', 'medium'],
      tmpDir, { HOME: tmpDir }
    );
    assert.ok(setResult.success, `config-set failed: ${setResult.error}`);

    const execResult = runMsdTools(['resolve-execution', 'msd-planner'], tmpDir, { HOME: tmpDir });
    assert.ok(execResult.success, `resolve-execution failed: ${execResult.error}`);
    const output = JSON.parse(execResult.output);
    // msd-planner is heavy; tier default now overridden to medium
    assert.strictEqual(output.effort, 'medium',
      `Expected effort='medium' after routing_tier_defaults override, got '${output.effort}'`);
  });

  test('config-set effort.agent_overrides.<agent> wins over tier default', () => {
    // Set tier default first, then per-agent override
    runMsdTools(['config-set', 'effort.routing_tier_defaults.heavy', 'medium'], tmpDir, { HOME: tmpDir });
    const setResult = runMsdTools(
      ['config-set', 'effort.agent_overrides.msd-planner', 'xhigh'],
      tmpDir, { HOME: tmpDir }
    );
    assert.ok(setResult.success, `config-set agent_overrides failed: ${setResult.error}`);

    const execResult = runMsdTools(['resolve-execution', 'msd-planner'], tmpDir, { HOME: tmpDir });
    assert.ok(execResult.success, `resolve-execution failed: ${execResult.error}`);
    const output = JSON.parse(execResult.output);
    assert.strictEqual(output.effort, 'xhigh',
      `Expected agent_overrides to win (xhigh), got '${output.effort}'`);
  });

  test('config-set fast_mode.enabled true then resolve-execution reflects fast_mode=true', () => {
    const setResult = runMsdTools(['config-set', 'fast_mode.enabled', 'true'], tmpDir, { HOME: tmpDir });
    assert.ok(setResult.success, `config-set fast_mode.enabled failed: ${setResult.error}`);

    const execResult = runMsdTools(['resolve-execution', 'msd-planner'], tmpDir, { HOME: tmpDir });
    assert.ok(execResult.success, `resolve-execution failed: ${execResult.error}`);
    const output = JSON.parse(execResult.output);
    assert.strictEqual(output.fast_mode, true,
      `Expected fast_mode=true after config-set, got ${output.fast_mode}`);
    // fast_mode_supported stays false (claude runtime)
    assert.strictEqual(output.fast_mode_supported, false);
  });

  test('config-set fast_mode.agent_overrides.<agent> true reflects in output', () => {
    const setResult = runMsdTools(
      ['config-set', 'fast_mode.agent_overrides.msd-codebase-mapper', 'true'],
      tmpDir, { HOME: tmpDir }
    );
    assert.ok(setResult.success, `config-set failed: ${setResult.error}`);

    const execResult = runMsdTools(['resolve-execution', 'msd-codebase-mapper'], tmpDir, { HOME: tmpDir });
    assert.ok(execResult.success, `resolve-execution failed: ${execResult.error}`);
    const output = JSON.parse(execResult.output);
    assert.strictEqual(output.fast_mode, true,
      `Expected fast_mode=true for agent-specific override`);
  });

  // Prove the config-set commands accept all the new key namespaces (schema validation)
  test('config-set accepts all effort/* and fast_mode/* key namespaces without error', () => {
    const keysToTest = [
      ['effort.default', 'high'],
      ['effort.routing_tier_defaults.light', 'low'],
      ['effort.routing_tier_defaults.standard', 'medium'],
      ['effort.routing_tier_defaults.heavy', 'xhigh'],
      ['effort.agent_overrides.msd-executor', 'high'],
      ['fast_mode.enabled', 'false'],
      ['fast_mode.routing_tier_defaults.light', 'false'],
      ['fast_mode.routing_tier_defaults.standard', 'false'],
      ['fast_mode.routing_tier_defaults.heavy', 'false'],
      ['fast_mode.agent_overrides.msd-verifier', 'false'],
    ];
    for (const [key, val] of keysToTest) {
      const r = runMsdTools(['config-set', key, val], tmpDir, { HOME: tmpDir });
      assert.ok(r.success, `config-set '${key}' '${val}' should succeed, got: ${r.error}`);
    }
  });
});
  });
}


// ────────────────────────────────────────────────────────────────────────
// Folded from tests/feat-443-effort-fast-mode.test.cjs — consolidation epic #1969 (B8 #1977)
// ────────────────────────────────────────────────────────────────────────
{
  const { describe: __foldDescribe } = require('node:test');
  __foldDescribe("folded:feat-443-effort-fast-mode (consolidation epic #1969 B8 #1977)", () => {
'use strict';

/**
 * Feature test for issue #443 — unified cross-provider effort + fast_mode knobs.
 *
 * Adds config-driven effort (universal ladder: minimal<low<medium<high<xhigh<max)
 * and fast_mode knobs. Per-runtime rendering clamps the unique tails:
 *   - Anthropic/Claude: supports {low,medium,high,xhigh,max}, param=output_config.effort
 *   - Codex: supports {minimal,low,medium,high,xhigh}, param=model_reasoning_effort
 *
 * Also adds resolve-execution query which is the superset command including
 * effort rendering and fast_mode propagation metadata.
 */

process.env.MSD_TEST_MODE = '1';

const { describe, test, beforeEach, afterEach } = require('node:test');
const assert = require('node:assert/strict');
const fs = require('node:fs');
const path = require('node:path');

const { createTempProject, cleanup, runMsdTools } = require('./helpers.cjs');

const {
  resolveEffortInternal,
  resolveFastModeInternal,
  resolveEffortForTier,
} = require('../msd-core/bin/lib/model-resolver.cjs');

const {
  renderEffortForRuntime,
  RUNTIMES_WITH_FAST_MODE,
} = require('../msd-core/bin/lib/model-catalog.cjs');

const {
  injectEffortFrontmatter,
} = require('../msd-core/bin/lib/runtime-artifact-conversion.cjs');

function writeConfig(dir, config) {
  const planningDir = path.join(dir, '.planning');
  fs.mkdirSync(planningDir, { recursive: true });
  fs.writeFileSync(path.join(planningDir, 'config.json'), JSON.stringify(config, null, 2));
}

// ─── Effort cascade ───────────────────────────────────────────────────────────

describe('#443 effort cascade', () => {
  let tmpDir;
  beforeEach(() => { tmpDir = createTempProject(); });
  afterEach(() => { cleanup(tmpDir); });

  test('no config -> msd-planner (heavy) defaults to "xhigh" via tier default', () => {
    // msd-planner is heavy tier; manifest default for heavy is xhigh
    assert.strictEqual(resolveEffortInternal(tmpDir, 'msd-planner'), 'xhigh');
  });

  test('routing_tier_defaults: light (msd-codebase-mapper) -> "low"', () => {
    // msd-codebase-mapper routingTier=light, default for light is "low"
    assert.strictEqual(resolveEffortInternal(tmpDir, 'msd-codebase-mapper'), 'low');
  });

  test('routing_tier_defaults: standard (msd-executor) -> "high"', () => {
    // msd-executor routingTier=standard, default for standard is "high"
    assert.strictEqual(resolveEffortInternal(tmpDir, 'msd-executor'), 'high');
  });

  test('routing_tier_defaults: heavy (msd-planner) -> "xhigh"', () => {
    // msd-planner routingTier=heavy, default for heavy is "xhigh"
    assert.strictEqual(resolveEffortInternal(tmpDir, 'msd-planner'), 'xhigh');
  });

  test('effort.routing_tier_defaults override beats tier default', () => {
    writeConfig(tmpDir, {
      effort: { routing_tier_defaults: { heavy: 'medium' } },
    });
    assert.strictEqual(resolveEffortInternal(tmpDir, 'msd-planner'), 'medium');
  });

  test('effort.agent_overrides beats routing_tier_defaults', () => {
    writeConfig(tmpDir, {
      effort: {
        routing_tier_defaults: { heavy: 'medium' },
        agent_overrides: { 'msd-planner': 'low' },
      },
    });
    assert.strictEqual(resolveEffortInternal(tmpDir, 'msd-planner'), 'low');
  });

  test('opts.override beats agent_overrides', () => {
    writeConfig(tmpDir, {
      effort: { agent_overrides: { 'msd-planner': 'low' } },
    });
    assert.strictEqual(resolveEffortInternal(tmpDir, 'msd-planner', { override: 'minimal' }), 'minimal');
  });

  test('invalid override falls through to agent_overrides', () => {
    writeConfig(tmpDir, {
      effort: { agent_overrides: { 'msd-planner': 'low' } },
    });
    // 'turbo' is not a valid effort — should fall through to agent_overrides
    assert.strictEqual(resolveEffortInternal(tmpDir, 'msd-planner', { override: 'turbo' }), 'low');
  });

  test('invalid agent_overrides value falls through to routing_tier_defaults', () => {
    writeConfig(tmpDir, {
      effort: {
        agent_overrides: { 'msd-planner': 123 },
        routing_tier_defaults: { heavy: 'medium' },
      },
    });
    assert.strictEqual(resolveEffortInternal(tmpDir, 'msd-planner'), 'medium');
  });

  test('invalid routing_tier_defaults value falls back to the manifest value for that tier (#3531)', () => {
    writeConfig(tmpDir, {
      effort: {
        routing_tier_defaults: { heavy: 'turbo' },
        default: 'low',
      },
    });
    // #3531: the config block merges OVER the manifest built-ins; an invalid
    // entry is dropped by the merge, so the manifest heavy default surfaces.
    assert.strictEqual(resolveEffortInternal(tmpDir, 'msd-planner'), 'xhigh');
  });

  test('invalid effort.default falls through to the manifest tier default (#3531)', () => {
    writeConfig(tmpDir, {
      effort: { default: 'turbo' },
    });
    // #3531: an effort block without routing_tier_defaults keeps the manifest
    // tier ladder; the invalid default never answers for a tiered agent.
    assert.strictEqual(resolveEffortInternal(tmpDir, 'msd-planner'), 'xhigh');
  });

  test('unknown agent -> uses effort.default', () => {
    writeConfig(tmpDir, {
      effort: { default: 'medium' },
    });
    // unknown-agent has no routingTier, so step 3 skipped
    assert.strictEqual(resolveEffortInternal(tmpDir, 'unknown-agent-xyz'), 'medium');
  });

  test('effort.default numeric value (123) ignored, manifest tier default answers (#3531)', () => {
    writeConfig(tmpDir, {
      effort: { default: 123 },
    });
    // #3531: no valid tier override -> manifest heavy default; numeric default ignored.
    assert.strictEqual(resolveEffortInternal(tmpDir, 'msd-planner'), 'xhigh');
  });

  test('effort block missing entirely -> uses tier default', () => {
    // No effort key in config at all
    writeConfig(tmpDir, { model_profile: 'balanced' });
    // heavy agent: tier default xhigh
    assert.strictEqual(resolveEffortInternal(tmpDir, 'msd-planner'), 'xhigh');
  });

  test('effort block is non-object (string) -> effortCfg=null -> uses manifest tier default xhigh', () => {
    writeConfig(tmpDir, { effort: 'bad' });
    // Non-object effort => effortCfg=null; msd-planner heavy tier manifest default = xhigh
    assert.strictEqual(resolveEffortInternal(tmpDir, 'msd-planner'), 'xhigh');
  });

  test('effort.routing_tier_defaults empty object -> manifest tier default (#3531)', () => {
    writeConfig(tmpDir, {
      effort: { routing_tier_defaults: {}, default: 'low' },
    });
    // #3531: an empty override block leaves the manifest built-ins in force.
    assert.strictEqual(resolveEffortInternal(tmpDir, 'msd-planner'), 'xhigh');
  });
});

// ─── Fast mode cascade ────────────────────────────────────────────────────────

describe('#443 fast_mode cascade', () => {
  let tmpDir;
  beforeEach(() => { tmpDir = createTempProject(); });
  afterEach(() => { cleanup(tmpDir); });

  test('no config -> defaults to false', () => {
    assert.strictEqual(resolveFastModeInternal(tmpDir, 'msd-planner'), false);
  });

  test('fast_mode.enabled=true -> true when no tier/agent overrides', () => {
    writeConfig(tmpDir, { fast_mode: { enabled: true } });
    // heavy agent: tier default is false, but enabled=true is layer 4
    // tier default for heavy is false (below enabled), so gets enabled=true
    // Wait — the cascade is: 1.override 2.agent_overrides 3.tier_defaults 4.enabled 5.false
    // For msd-planner (heavy), tier default is false — falls through to enabled=true
    assert.strictEqual(resolveFastModeInternal(tmpDir, 'msd-planner'), true);
  });

  test('fast_mode.routing_tier_defaults.light=true -> light agent gets true', () => {
    writeConfig(tmpDir, {
      fast_mode: { routing_tier_defaults: { light: true } },
    });
    assert.strictEqual(resolveFastModeInternal(tmpDir, 'msd-codebase-mapper'), true);
  });

  test('fast_mode.routing_tier_defaults.heavy=false -> heavy agent stays false', () => {
    writeConfig(tmpDir, {
      fast_mode: { enabled: true, routing_tier_defaults: { heavy: false } },
    });
    assert.strictEqual(resolveFastModeInternal(tmpDir, 'msd-planner'), false);
  });

  test('fast_mode.agent_overrides beats routing_tier_defaults', () => {
    writeConfig(tmpDir, {
      fast_mode: {
        routing_tier_defaults: { light: false },
        agent_overrides: { 'msd-codebase-mapper': true },
      },
    });
    assert.strictEqual(resolveFastModeInternal(tmpDir, 'msd-codebase-mapper'), true);
  });

  test('opts.override beats agent_overrides', () => {
    writeConfig(tmpDir, {
      fast_mode: { agent_overrides: { 'msd-planner': true } },
    });
    assert.strictEqual(resolveFastModeInternal(tmpDir, 'msd-planner', { override: false }), false);
  });

  test('string "true" NOT accepted as fast_mode override', () => {
    writeConfig(tmpDir, {
      fast_mode: { agent_overrides: { 'msd-planner': 'true' } },
    });
    // string "true" is not boolean -> fall through to tier default or enabled
    const result = resolveFastModeInternal(tmpDir, 'msd-planner');
    assert.strictEqual(typeof result, 'boolean');
  });

  test('string "true" in opts.override NOT accepted', () => {
    // opts.override must be strict boolean — string falls through
    const result = resolveFastModeInternal(tmpDir, 'msd-planner', { override: 'true' });
    assert.strictEqual(result, false);
  });

  test('fast_mode block missing entirely -> defaults to false', () => {
    writeConfig(tmpDir, { model_profile: 'balanced' });
    assert.strictEqual(resolveFastModeInternal(tmpDir, 'msd-planner'), false);
  });

  test('fast_mode.enabled="yes" (non-boolean) ignored -> false', () => {
    writeConfig(tmpDir, { fast_mode: { enabled: 'yes' } });
    assert.strictEqual(resolveFastModeInternal(tmpDir, 'msd-planner'), false);
  });

  test('unknown agent fast_mode -> uses enabled flag', () => {
    writeConfig(tmpDir, { fast_mode: { enabled: true } });
    assert.strictEqual(resolveFastModeInternal(tmpDir, 'unknown-agent-xyz'), true);
  });
});

// ─── Effort escalation (resolveEffortForTier) ─────────────────────────────────

describe('#443 resolveEffortForTier escalation', () => {
  let tmpDir;
  beforeEach(() => { tmpDir = createTempProject(); });
  afterEach(() => { cleanup(tmpDir); });

  test('dynamic_routing disabled -> attempt ignored, returns base effort', () => {
    // msd-planner heavy -> xhigh baseline
    const base = resolveEffortForTier(tmpDir, 'msd-planner', 0);
    const attempt1 = resolveEffortForTier(tmpDir, 'msd-planner', 1);
    assert.strictEqual(base, 'xhigh');
    assert.strictEqual(attempt1, 'xhigh'); // no dynamic_routing -> attempt ignored
  });

  test('dynamic_routing enabled, escalate_on_failure=false -> attempt ignored', () => {
    writeConfig(tmpDir, {
      dynamic_routing: {
        enabled: true,
        tier_models: { light: 'haiku', standard: 'sonnet', heavy: 'opus' },
        escalate_on_failure: false,
        max_escalations: 2,
      },
    });
    const base = resolveEffortForTier(tmpDir, 'msd-codebase-mapper', 0);
    const attempt1 = resolveEffortForTier(tmpDir, 'msd-codebase-mapper', 1);
    assert.strictEqual(base, attempt1);
  });

  test('dynamic_routing enabled, attempt=1 -> one step up from base', () => {
    writeConfig(tmpDir, {
      dynamic_routing: {
        enabled: true,
        tier_models: { light: 'haiku', standard: 'sonnet', heavy: 'opus' },
        escalate_on_failure: true,
        max_escalations: 2,
      },
      effort: { routing_tier_defaults: { light: 'low' } },
    });
    // msd-codebase-mapper: light -> effort 'low'; attempt=1 -> 'medium'
    assert.strictEqual(resolveEffortForTier(tmpDir, 'msd-codebase-mapper', 0), 'low');
    assert.strictEqual(resolveEffortForTier(tmpDir, 'msd-codebase-mapper', 1), 'medium');
  });

  test('escalation clamps at "max"', () => {
    writeConfig(tmpDir, {
      dynamic_routing: {
        enabled: true,
        tier_models: { light: 'haiku', standard: 'sonnet', heavy: 'opus' },
        escalate_on_failure: true,
        max_escalations: 99,
      },
      effort: { default: 'xhigh' },
    });
    // xhigh -> max -> max (clamp)
    const result = resolveEffortForTier(tmpDir, 'msd-planner', 99);
    assert.strictEqual(result, 'max');
  });

  test('respects max_escalations cap', () => {
    writeConfig(tmpDir, {
      dynamic_routing: {
        enabled: true,
        tier_models: { light: 'haiku', standard: 'sonnet', heavy: 'opus' },
        escalate_on_failure: true,
        max_escalations: 1,
      },
      effort: { routing_tier_defaults: { light: 'low' } },
    });
    // light: low -> attempt=1 -> medium (but max=1 so can only escalate once)
    const at1 = resolveEffortForTier(tmpDir, 'msd-codebase-mapper', 1);
    const at2 = resolveEffortForTier(tmpDir, 'msd-codebase-mapper', 2);
    // at2 is capped at 1 escalation, same as at1
    assert.strictEqual(at1, at2);
    assert.strictEqual(at1, 'medium');
  });
});

// ─── Rendering / clamping ──────────────────────────────────────────────────────

describe('#443 renderEffortForRuntime', () => {
  // #3007: corrected — Codex gained 'max' (per-model supported_reasoning_levels);
  // it no longer clamps to 'xhigh'.
  test('codex: "max" passes through as "max"', () => {
    const r = renderEffortForRuntime('codex', 'max');
    assert.strictEqual(r.value, 'max');
    assert.strictEqual(r.param, 'model_reasoning_effort');
  });

  test('codex: common levels passthrough', () => {
    assert.strictEqual(renderEffortForRuntime('codex', 'low').value, 'low');
    assert.strictEqual(renderEffortForRuntime('codex', 'medium').value, 'medium');
    assert.strictEqual(renderEffortForRuntime('codex', 'high').value, 'high');
    assert.strictEqual(renderEffortForRuntime('codex', 'xhigh').value, 'xhigh');
  });

  // #3007: corrected — no Codex model advertises 'minimal'; it now clamps up
  // to the family floor, 'low', instead of passing through.
  test('codex: "minimal" clamps to "low"', () => {
    assert.strictEqual(renderEffortForRuntime('codex', 'minimal').value, 'low');
  });

  test('claude: "minimal" clamps to "low"', () => {
    const r = renderEffortForRuntime('claude', 'minimal');
    assert.strictEqual(r.value, 'low');
    assert.strictEqual(r.param, 'output_config.effort');
  });

  test('claude: "max" passthrough (Anthropic-only)', () => {
    const r = renderEffortForRuntime('claude', 'max');
    assert.strictEqual(r.value, 'max');
    assert.strictEqual(r.param, 'output_config.effort');
  });

  test('claude: common levels passthrough', () => {
    assert.strictEqual(renderEffortForRuntime('claude', 'low').value, 'low');
    assert.strictEqual(renderEffortForRuntime('claude', 'medium').value, 'medium');
    assert.strictEqual(renderEffortForRuntime('claude', 'high').value, 'high');
    assert.strictEqual(renderEffortForRuntime('claude', 'xhigh').value, 'xhigh');
  });

  test('unknown runtime: param is null, value passthrough', () => {
    const r = renderEffortForRuntime('unknown-runtime', 'high');
    assert.strictEqual(r.param, null);
    assert.strictEqual(r.value, 'high');
  });

  test('RUNTIMES_WITH_FAST_MODE does NOT include "claude"', () => {
    // Claude Code has no per-subagent fast-mode mechanism — session-level only
    assert.ok(!RUNTIMES_WITH_FAST_MODE.has('claude'),
      'claude must NOT be in RUNTIMES_WITH_FAST_MODE — emitting fast_mode frontmatter is a silent no-op');
  });
});

// ─── resolve-execution end-to-end ─────────────────────────────────────────────

describe('#443 resolve-execution CLI command', () => {
  let tmpDir;
  beforeEach(() => {
    tmpDir = createTempProject();
    // HOME isolation to prevent ~/.msd/defaults.json bleed
    process.env._MSD_TEST_HOME_OVERRIDE = tmpDir;
  });
  afterEach(() => {
    cleanup(tmpDir);
    delete process.env._MSD_TEST_HOME_OVERRIDE;
  });

  test('default (claude) runtime -> effort present, effort_param=output_config.effort, fast_mode_supported=false', () => {
    const result = runMsdTools(['resolve-execution', 'msd-planner'], tmpDir, { HOME: tmpDir });
    assert.ok(result.success, `Command failed: ${result.error}`);
    const output = JSON.parse(result.output);
    assert.ok(output.effort, 'should have effort field');
    assert.strictEqual(output.effort_param, 'output_config.effort');
    assert.strictEqual(output.fast_mode_supported, false);
    assert.ok('fast_mode' in output, 'should have fast_mode field');
    assert.ok('model' in output, 'should have model field');
    assert.ok('profile' in output, 'should have profile field');
  });

  // NOTE: effort.default: 'max' never reaches the renderer for msd-planner here —
  // msd-planner is a heavy/opus-tier agent, and its routing-tier default outranks
  // effort.default in resolution precedence, so the resolved level is 'xhigh' before
  // the renderer ever sees 'max'. effort_clamped=false and effort_requested='xhigh'
  // prove this is precedence, not the #3007 clamp — do not "correct" this back to
  // expecting 'max'.
  test('codex runtime -> effort_param=model_reasoning_effort, tier default outranks effort.default, fast_mode_supported=false', () => {
    writeConfig(tmpDir, {
      runtime: 'codex',
      effort: { default: 'max' },
    });
    const result = runMsdTools(['resolve-execution', 'msd-planner'], tmpDir, { HOME: tmpDir });
    assert.ok(result.success, `Command failed: ${result.error}`);
    const output = JSON.parse(result.output);
    assert.strictEqual(output.effort_param, 'model_reasoning_effort');
    assert.strictEqual(output.effort_rendered, 'xhigh');
    assert.strictEqual(output.effort_clamped, false);
    assert.strictEqual(output.effort_requested, 'xhigh');
    // fast_mode_supported: codex does not support fast mode via subagent
    assert.strictEqual(output.fast_mode_supported, false);
  });

  // #3007: Codex gained 'max' (per-model supported_reasoning_levels), so 'max' now
  // renders through unchanged instead of clamping to 'xhigh'. agent_overrides is used
  // here (not effort.default) because it outranks the routing-tier default, which is
  // what actually lets 'max' reach the renderer end-to-end.
  test('codex runtime -> max survives to the wire via agent_overrides, fast_mode_supported=false', () => {
    writeConfig(tmpDir, {
      runtime: 'codex',
      effort: { default: 'max', agent_overrides: { 'msd-planner': 'max' } },
    });
    const result = runMsdTools(['resolve-execution', 'msd-planner'], tmpDir, { HOME: tmpDir });
    assert.ok(result.success, `Command failed: ${result.error}`);
    const output = JSON.parse(result.output);
    assert.strictEqual(output.effort_param, 'model_reasoning_effort');
    assert.strictEqual(output.effort, 'max');
    assert.strictEqual(output.effort_rendered, 'max');
    assert.strictEqual(output.effort_requested, 'max');
    assert.strictEqual(output.effort_clamped, false);
    // fast_mode_supported: codex does not support fast mode via subagent
    assert.strictEqual(output.fast_mode_supported, false);
  });

  test('--effort flag overrides config effort', () => {
    const result = runMsdTools(
      ['resolve-execution', 'msd-planner', '--effort', 'low'],
      tmpDir,
      { HOME: tmpDir }
    );
    assert.ok(result.success, `Command failed: ${result.error}`);
    const output = JSON.parse(result.output);
    assert.strictEqual(output.effort, 'low');
  });

  test('--fast-mode flag honored', () => {
    const result = runMsdTools(
      ['resolve-execution', 'msd-planner', '--fast-mode', 'true'],
      tmpDir,
      { HOME: tmpDir }
    );
    assert.ok(result.success, `Command failed: ${result.error}`);
    const output = JSON.parse(result.output);
    assert.strictEqual(output.fast_mode, true);
  });

  test('--attempt flag triggers escalation', () => {
    writeConfig(tmpDir, {
      dynamic_routing: {
        enabled: true,
        tier_models: { light: 'haiku', standard: 'sonnet', heavy: 'opus' },
        escalate_on_failure: true,
        max_escalations: 2,
      },
      effort: { routing_tier_defaults: { light: 'low' } },
    });
    const result0 = runMsdTools(
      ['resolve-execution', 'msd-codebase-mapper', '--attempt', '0'],
      tmpDir,
      { HOME: tmpDir }
    );
    const result1 = runMsdTools(
      ['resolve-execution', 'msd-codebase-mapper', '--attempt', '1'],
      tmpDir,
      { HOME: tmpDir }
    );
    assert.ok(result0.success && result1.success);
    const out0 = JSON.parse(result0.output);
    const out1 = JSON.parse(result1.output);
    assert.strictEqual(out0.effort, 'low');
    assert.strictEqual(out1.effort, 'medium');
  });

  test('--raw prints effort string', () => {
    const result = runMsdTools(
      ['resolve-execution', 'msd-planner', '--raw'],
      tmpDir,
      { HOME: tmpDir }
    );
    assert.ok(result.success, `Command failed: ${result.error}`);
    // Raw output should be the effort string
    const VALID_EFFORTS = ['minimal', 'low', 'medium', 'high', 'xhigh', 'max'];
    assert.ok(VALID_EFFORTS.includes(result.output.trim()),
      `Expected effort string, got: ${result.output}`);
  });

  test('fails when no agent-type provided', () => {
    const result = runMsdTools(['resolve-execution'], tmpDir, { HOME: tmpDir });
    assert.ok(!result.success, 'should fail without agent-type');
    assert.ok(result.error.includes('agent-type required'), `error: ${result.error}`);
  });

  test('unknown agent -> unknown_agent=true still emits effort', () => {
    const result = runMsdTools(['resolve-execution', 'unknown-agent-xyz'], tmpDir, { HOME: tmpDir });
    assert.ok(result.success, `Command failed: ${result.error}`);
    const output = JSON.parse(result.output);
    assert.strictEqual(output.unknown_agent, true);
    assert.ok(output.effort, 'should have effort even for unknown agent');
  });

  test('emits effort_propagation (channel) field', () => {
    const result = runMsdTools(['resolve-execution', 'msd-planner'], tmpDir, { HOME: tmpDir });
    assert.ok(result.success, `Command failed: ${result.error}`);
    const output = JSON.parse(result.output);
    assert.ok('effort_propagation' in output, 'should have effort_propagation field');
  });
});

// ─── resolve-model now emits effort (replaces reasoning_effort) ───────────────

describe('#443 resolve-model emits effort (unified)', () => {
  let tmpDir;
  beforeEach(() => { tmpDir = createTempProject(); });
  afterEach(() => { cleanup(tmpDir); });

  test('resolve-model on claude runtime emits effort (not null)', () => {
    const result = runMsdTools(['resolve-model', 'msd-planner'], tmpDir, { HOME: tmpDir });
    assert.ok(result.success, `Command failed: ${result.error}`);
    const output = JSON.parse(result.output);
    // effort must be present and valid
    const VALID_EFFORTS = ['minimal', 'low', 'medium', 'high', 'xhigh', 'max'];
    assert.ok(VALID_EFFORTS.includes(output.effort),
      `Expected valid effort, got: ${output.effort}`);
    // reasoning_effort must NOT be present (removed)
    assert.ok(!Object.prototype.hasOwnProperty.call(output, 'reasoning_effort'),
      'resolve-model must not emit reasoning_effort (replaced by effort)');
  });

  test('resolve-model on codex runtime emits unified effort (not reasoning_effort)', () => {
    fs.writeFileSync(
      path.join(tmpDir, '.planning', 'config.json'),
      JSON.stringify({ runtime: 'codex', model_profile: 'balanced' })
    );
    const result = runMsdTools(['resolve-model', 'msd-planner'], tmpDir, { HOME: tmpDir });
    assert.ok(result.success, `Command failed: ${result.error}`);
    const output = JSON.parse(result.output);
    const VALID_EFFORTS = ['minimal', 'low', 'medium', 'high', 'xhigh', 'max'];
    assert.ok(VALID_EFFORTS.includes(output.effort),
      `Expected valid effort, got: ${output.effort}`);
    assert.ok(!Object.prototype.hasOwnProperty.call(output, 'reasoning_effort'),
      'resolve-model must not emit reasoning_effort');
  });
});

// ─── QA Matrix — hostile/malformed configs ───────────────────────────────────

describe('#443 QA matrix — malformed effort/fast_mode configs', () => {
  let tmpDir;
  beforeEach(() => { tmpDir = createTempProject(); });
  afterEach(() => { cleanup(tmpDir); });

  test('effort.default=123 (numeric) -> gracefully falls through', () => {
    writeConfig(tmpDir, { effort: { default: 123 } });
    // msd-planner is heavy, tier default xhigh is used instead
    const result = resolveEffortInternal(tmpDir, 'msd-planner');
    assert.ok(typeof result === 'string');
    const VALID_EFFORTS = ['minimal', 'low', 'medium', 'high', 'xhigh', 'max'];
    assert.ok(VALID_EFFORTS.includes(result));
  });

  test('fast_mode.enabled="yes" (string) -> ignored, returns false', () => {
    writeConfig(tmpDir, { fast_mode: { enabled: 'yes' } });
    assert.strictEqual(resolveFastModeInternal(tmpDir, 'msd-planner'), false);
  });

  test('effort:{} empty block -> uses tier default or hardcoded high', () => {
    writeConfig(tmpDir, { effort: {} });
    const result = resolveEffortInternal(tmpDir, 'msd-planner');
    const VALID_EFFORTS = ['minimal', 'low', 'medium', 'high', 'xhigh', 'max'];
    assert.ok(VALID_EFFORTS.includes(result));
  });

  test('fast_mode:{} empty block -> false', () => {
    writeConfig(tmpDir, { fast_mode: {} });
    assert.strictEqual(resolveFastModeInternal(tmpDir, 'msd-planner'), false);
  });

  test('effort config is completely absent -> still resolves valid effort', () => {
    writeConfig(tmpDir, { model_profile: 'quality' });
    const result = resolveEffortInternal(tmpDir, 'msd-planner');
    const VALID_EFFORTS = ['minimal', 'low', 'medium', 'high', 'xhigh', 'max'];
    assert.ok(VALID_EFFORTS.includes(result));
  });

  test('effort.routing_tier_defaults has boolean value -> falls through', () => {
    writeConfig(tmpDir, {
      effort: {
        routing_tier_defaults: { heavy: true },
        default: 'medium',
      },
    });
    // #3531: boolean true is not a valid effort -> the merge drops it and the
    // manifest heavy default (xhigh) surfaces, not effort.default 'medium'.
    assert.strictEqual(resolveEffortInternal(tmpDir, 'msd-planner'), 'xhigh');
  });

  test('effort.agent_overrides is non-object -> falls through gracefully', () => {
    writeConfig(tmpDir, {
      effort: {
        agent_overrides: 'not-an-object',
        default: 'low',
      },
    });
    // non-object agent_overrides -> skip step 2, use tier default (heavy=xhigh)
    // actually heavy tier default kicks in first if no routing_tier_defaults
    const result = resolveEffortInternal(tmpDir, 'msd-planner');
    const VALID_EFFORTS = ['minimal', 'low', 'medium', 'high', 'xhigh', 'max'];
    assert.ok(VALID_EFFORTS.includes(result));
  });

  test('config.json has unknown agent with effort.default set -> uses effort.default', () => {
    writeConfig(tmpDir, { effort: { default: 'minimal' } });
    assert.strictEqual(resolveEffortInternal(tmpDir, 'completely-unknown-agent-98765'), 'minimal');
  });

  test('resolve-execution with malformed config does not crash', () => {
    writeConfig(tmpDir, {
      effort: { default: null, routing_tier_defaults: null },
      fast_mode: { enabled: null, agent_overrides: null },
    });
    const result = runMsdTools(['resolve-execution', 'msd-planner'], tmpDir, { HOME: tmpDir });
    assert.ok(result.success, `Should not crash with null config values: ${result.error}`);
  });
});

// ─── Config schema: new keys are valid ───────────────────────────────────────

describe('#443 config schema: new effort/fast_mode keys valid', () => {
  const { isValidConfigKey } = require('../msd-core/bin/lib/config-schema.cjs');

  test('effort.default is a valid config key', () => {
    assert.ok(isValidConfigKey('effort.default'), 'effort.default must be valid');
  });

  test('fast_mode.enabled is a valid config key', () => {
    assert.ok(isValidConfigKey('fast_mode.enabled'), 'fast_mode.enabled must be valid');
  });

  test('effort.routing_tier_defaults.light is valid (dynamic pattern)', () => {
    assert.ok(isValidConfigKey('effort.routing_tier_defaults.light'));
  });

  test('effort.routing_tier_defaults.standard is valid', () => {
    assert.ok(isValidConfigKey('effort.routing_tier_defaults.standard'));
  });

  test('effort.routing_tier_defaults.heavy is valid', () => {
    assert.ok(isValidConfigKey('effort.routing_tier_defaults.heavy'));
  });

  test('effort.agent_overrides.<agent-id> is valid (dynamic pattern)', () => {
    assert.ok(isValidConfigKey('effort.agent_overrides.msd-planner'));
    assert.ok(isValidConfigKey('effort.agent_overrides.my-custom-agent'));
  });

  test('fast_mode.routing_tier_defaults.light is valid', () => {
    assert.ok(isValidConfigKey('fast_mode.routing_tier_defaults.light'));
  });

  test('fast_mode.agent_overrides.<agent-id> is valid', () => {
    assert.ok(isValidConfigKey('fast_mode.agent_overrides.msd-planner'));
  });

  test('effort.routing_tier_defaults.invalid-tier is NOT valid', () => {
    assert.ok(!isValidConfigKey('effort.routing_tier_defaults.super'));
  });
});

// ─── resolve-execution arg parsing matrix (Codex adversarial finding #1) ──────
//
// These tests FAIL before the fix: flags-first ordering misroutes the agent.

describe('#443 resolve-execution: deterministic arg parsing (flags-first ordering)', () => {
  let tmpDir;
  beforeEach(() => {
    tmpDir = createTempProject();
    process.env._MSD_TEST_HOME_OVERRIDE = tmpDir;
  });
  afterEach(() => {
    cleanup(tmpDir);
    delete process.env._MSD_TEST_HOME_OVERRIDE;
  });

  test('flags-first: --effort low msd-planner resolves msd-planner (NOT "low" as agent)', () => {
    // BUG: before fix, agentTypeArg = 'low' (first non-dash token) -> unknown_agent:true
    const result = runMsdTools(
      ['resolve-execution', '--effort', 'low', 'msd-planner'],
      tmpDir,
      { HOME: tmpDir }
    );
    assert.ok(result.success, `Command failed: ${result.error}`);
    const output = JSON.parse(result.output);
    assert.ok(!output.unknown_agent, `agent must be resolved (not unknown_agent), got: ${JSON.stringify(output)}`);
    assert.strictEqual(output.effort, 'low', `effort should be low, got: ${output.effort}`);
  });

  test('flags-first: --attempt 1 msd-codebase-mapper resolves msd-codebase-mapper (NOT "1" as agent)', () => {
    // BUG: before fix, agentTypeArg = '1' -> unknown_agent:true
    const result = runMsdTools(
      ['resolve-execution', '--attempt', '1', 'msd-codebase-mapper'],
      tmpDir,
      { HOME: tmpDir }
    );
    assert.ok(result.success, `Command failed: ${result.error}`);
    const output = JSON.parse(result.output);
    assert.ok(!output.unknown_agent, `msd-codebase-mapper must be resolved, got: ${JSON.stringify(output)}`);
  });

  test('agent-first parity: msd-planner --effort low produces same effort as flags-first', () => {
    const flagsFirst = runMsdTools(
      ['resolve-execution', '--effort', 'low', 'msd-planner'],
      tmpDir,
      { HOME: tmpDir }
    );
    const agentFirst = runMsdTools(
      ['resolve-execution', 'msd-planner', '--effort', 'low'],
      tmpDir,
      { HOME: tmpDir }
    );
    assert.ok(flagsFirst.success && agentFirst.success,
      `Both orderings must succeed. flags-first err: ${flagsFirst.error} agent-first err: ${agentFirst.error}`);
    const outFF = JSON.parse(flagsFirst.output);
    const outAF = JSON.parse(agentFirst.output);
    assert.strictEqual(outFF.effort, outAF.effort, 'effort must be identical for both orderings');
    assert.strictEqual(outFF.model, outAF.model, 'model must be identical for both orderings');
  });

  test('error: missing agent (--effort low with no positional) -> non-zero exit, no stack trace', () => {
    const result = runMsdTools(
      ['resolve-execution', '--effort', 'low'],
      tmpDir,
      { HOME: tmpDir }
    );
    assert.ok(!result.success, 'must exit non-zero when agent is missing');
    assert.ok(!result.error.includes('at '), `error must not contain stack trace, got: ${result.error}`);
    assert.ok(result.error.length > 0, 'must emit an error message');
  });

  test('error: two positional agents -> non-zero exit', () => {
    const result = runMsdTools(
      ['resolve-execution', 'msd-planner', 'msd-executor'],
      tmpDir,
      { HOME: tmpDir }
    );
    assert.ok(!result.success, 'must exit non-zero when two agents are given');
  });

  test('error: --attempt notanumber -> non-zero exit, clear error', () => {
    const result = runMsdTools(
      ['resolve-execution', '--attempt', 'notanumber', 'msd-planner'],
      tmpDir,
      { HOME: tmpDir }
    );
    assert.ok(!result.success, 'must exit non-zero for non-integer --attempt');
    assert.ok(result.error.length > 0, 'must emit an error message');
  });

  test('error: trailing --effort (no value) -> non-zero exit', () => {
    const result = runMsdTools(
      ['resolve-execution', 'msd-planner', '--effort'],
      tmpDir,
      { HOME: tmpDir }
    );
    assert.ok(!result.success, 'must exit non-zero for trailing --effort with no value');
    assert.ok(result.error.length > 0, 'must emit an error message');
  });

  test('unknown agent positional -> unknown_agent:true (preserved behavior)', () => {
    const result = runMsdTools(
      ['resolve-execution', 'totally-not-an-agent'],
      tmpDir,
      { HOME: tmpDir }
    );
    assert.ok(result.success, `Should succeed (unknown agent is valid input): ${result.error}`);
    const output = JSON.parse(result.output);
    assert.strictEqual(output.unknown_agent, true, 'unknown agent must emit unknown_agent:true');
  });
});

// ─── injectEffortFrontmatter: newline-agnostic injection (#443 Windows fix) ──

describe('#443 injectEffortFrontmatter: newline-agnostic YAML frontmatter injection', () => {
  // LF source (macOS / Linux git checkout) — baseline
  test('LF frontmatter: injects effort: before closing ---', () => {
    const content = '---\nname: msd-planner\ndescription: Creates plans\ncolor: blue\n---\nBody here\n';
    const result = injectEffortFrontmatter(content, 'xhigh');
    assert.notStrictEqual(result, content, 'content should be modified');
    assert.match(result, /^effort:\s*xhigh$/m, 'effort: xhigh must be present');
    assert.ok(result.includes('\neffort: xhigh\n---\n'), 'effort: must appear before closing --- with LF');
    // Closing --- must still be present and intact
    assert.ok(result.includes('\n---\n'), 'closing --- must remain with LF');
  });

  // CRLF source (Windows git checkout with core.autocrlf=true) — the actual bug
  test('CRLF frontmatter: injects effort: with CRLF preserved (Windows fix)', () => {
    const content = '---\r\nname: msd-planner\r\ndescription: Creates plans\r\ncolor: blue\r\n---\r\nBody here\r\n';
    const result = injectEffortFrontmatter(content, 'xhigh');
    assert.notStrictEqual(result, content, 'content should be modified (CRLF source was silently skipped before fix)');
    // effort: line must use CRLF, not LF (EOL consistency)
    assert.ok(result.includes('effort: xhigh\r\n'), 'effort: line must use CRLF to match surrounding frontmatter');
    // Closing --- must use CRLF and remain intact
    assert.ok(result.includes('\r\neffort: xhigh\r\n---\r\n'), 'effort: must appear before closing ---\\r\\n with CRLF');
    // The effort value must be readable via multiline regex (as the install-wiring assertions do)
    assert.match(result, /^effort:\s*xhigh$/m, '/^effort:\\s*xhigh$/m must match in CRLF output');
  });

  // Idempotency: don't double-insert if effort: already exists
  test('idempotent: does NOT insert a second effort: line when already present (LF)', () => {
    const content = '---\nname: msd-planner\neffort: high\n---\nBody\n';
    const result = injectEffortFrontmatter(content, 'xhigh');
    assert.strictEqual(result, content, 'content must be unchanged when effort: already present');
    // Confirm no duplicate
    const matches = [...result.matchAll(/^effort:/mg)];
    assert.strictEqual(matches.length, 1, 'exactly one effort: key must exist');
  });

  test('idempotent: does NOT insert a second effort: line when already present (CRLF)', () => {
    const content = '---\r\nname: msd-planner\r\neffort: high\r\n---\r\nBody\r\n';
    const result = injectEffortFrontmatter(content, 'xhigh');
    assert.strictEqual(result, content, 'content must be unchanged when effort: already present (CRLF)');
  });

  // No frontmatter — leave unchanged
  test('no YAML frontmatter: returns content unchanged', () => {
    const content = 'Just a body\nNo frontmatter here\n';
    const result = injectEffortFrontmatter(content, 'xhigh');
    assert.strictEqual(result, content, 'content without frontmatter must be returned unchanged');
  });

  // Complex frontmatter with comment lines and color: key (mirrors real agent .md files)
  test('complex LF frontmatter (# comment + color:) still injects effort: before ---', () => {
    const content = [
      '---',
      'name: msd-executor',
      '# hooks: see .claude/settings.json',
      'description: Executes tasks',
      'color: green',
      '---',
      'Body content here',
      '',
    ].join('\n');
    const result = injectEffortFrontmatter(content, 'high');
    assert.match(result, /^effort:\s*high$/m, 'effort: high must be present');
    assert.ok(result.includes('\neffort: high\n---\n'), 'effort: must appear immediately before closing ---');
    // Other frontmatter fields must be untouched
    assert.ok(result.includes('color: green'), 'color: must be preserved');
    assert.ok(result.includes('# hooks:'), '# comment must be preserved');
  });

  test('complex CRLF frontmatter (# comment + color:) still injects effort: with CRLF before ---', () => {
    const lines = [
      '---',
      'name: msd-executor',
      '# hooks: see .claude/settings.json',
      'description: Executes tasks',
      'color: green',
      '---',
      'Body content here',
      '',
    ];
    const content = lines.join('\r\n');
    const result = injectEffortFrontmatter(content, 'high');
    assert.ok(result.includes('effort: high\r\n'), 'effort: must use CRLF in CRLF file');
    assert.ok(result.includes('\r\neffort: high\r\n---\r\n'), 'effort: must appear before closing ---\\r\\n');
    assert.ok(result.includes('color: green\r\n'), 'color: must be preserved with CRLF');
  });
});
  });
}


// ────────────────────────────────────────────────────────────────────────
// Folded from tests/feat-49-model-policy-presets.test.cjs — consolidation epic #1969 (B8 #1977)
// ────────────────────────────────────────────────────────────────────────
{
  const { describe: __foldDescribe } = require('node:test');
  __foldDescribe("folded:feat-49-model-policy-presets (consolidation epic #1969 B8 #1977)", () => {
/**
 * Feature test for issue #49 — model_policy presets.
 *
 * Adds a `model_policy` block to .planning/config.json:
 *
 *   {
 *     "model_policy": {
 *       "provider": "anthropic-fable",
 *       "budget": "high",
 *       "runtime_tiers": {
 *         "opencode": {
 *           "opus": { "model": "anthropic/claude-opus-4-8" }
 *         }
 *       }
 *     }
 *   }
 *
 * Resolution precedence in resolveModelInternal (highest → lowest):
 *   1. model_overrides[agent]                 (per-agent full IDs; existing)
 *   2. model_policy.runtime_tiers[runtime][tier]  (Sub-path A: explicit runtime+tier entry)
 *   3. model_policy provider preset + budget  (Sub-path B: known-provider catalog lookup)
 *   4. model_profile_overrides                (legacy runtime-aware overrides)
 *   5. resolve_model_ids / profile fallback
 *
 * Sub-path A (runtime_tiers) fires when config.runtime matches a key inside
 * model_policy.runtime_tiers AND that key contains an entry for the resolved tier.
 *
 * Sub-path B (provider preset) fires when model_policy.provider is a known
 * provider AND the catalog contains an entry for (tier, budget) pair.
 *
 * Both sub-paths return a string model ID. Failures in either sub-path fall
 * through cleanly to the next step in the chain.
 *
 * New config keys accepted by isValidConfigKey:
 *   - model_policy.provider
 *   - model_policy.budget
 *   - model_policy.runtime_tiers.<runtime>.<tier>
 *
 * Backwards compatibility:
 *   - model_profile_overrides continues to work when model_policy is absent.
 *   - When both are set, model_policy wins (fires first).
 *
 * KNOWN_PROVIDERS is exported from both model-catalog.cjs and core.cjs (re-export).
 *
 * These tests are written to FAIL before implementation. They use typed-IR /
 * structural assertions on resolveModelInternal / resolveModelPolicy / isValidConfigKey
 * return values — not stdout / grep.
 */

'use strict';

process.env.MSD_TEST_MODE = '1';

const { test, describe, beforeEach, afterEach } = require('node:test');
const assert = require('node:assert/strict');
const fs = require('node:fs');
const path = require('node:path');

// ─── Imports (will fail until implementation exists) ────────────────────────
// resolveModelPolicy is a new internal function that must be exported from core.cjs.
// KNOWN_PROVIDERS must be exported from model-catalog.cjs and re-exported by core.cjs.
const {
  resolveModelInternal,
  resolveModelPolicy,
  resolveModelForTier,
} = require('../msd-core/bin/lib/model-resolver.cjs');
const {
  KNOWN_PROVIDERS,
} = require('../msd-core/bin/lib/model-catalog.cjs');

// KNOWN_PROVIDERS must also be exported directly from model-catalog.cjs
const modelCatalog = require('../msd-core/bin/lib/model-catalog.cjs');

const { isValidConfigKey } = require('../msd-core/bin/lib/config-schema.cjs');
const { createTempDir, cleanup, resetRuntimeWarningCaches } = require('./helpers.cjs');

const makeTmp = (prefix) => createTempDir(`msd-49-${prefix}-`);

function writeConfig(dir, config) {
  const planningDir = path.join(dir, '.planning');
  fs.mkdirSync(planningDir, { recursive: true });
  fs.writeFileSync(path.join(planningDir, 'config.json'), JSON.stringify(config, null, 2));
}

function rmr(p) {
  cleanup(p);
}

// ─── resolveModelPolicy unit tests ──────────────────────────────────────────
//
// resolveModelPolicy(config, tier) is the pure resolver that takes a loaded
// config object and a resolved tier string. It returns a string model ID when
// model_policy produces a hit, or null when it falls through.

describe('#49 resolveModelPolicy: null/absent policy returns null', () => {
  test('resolveModelPolicy returns null when policy is null or absent', () => {
    // policy is null
    assert.strictEqual(resolveModelPolicy(null, 'opus'), null);
    // policy is undefined
    assert.strictEqual(resolveModelPolicy(undefined, 'opus'), null);
    // policy is absent (empty object treated as absent)
    assert.strictEqual(resolveModelPolicy({}, 'opus'), null);
  });

  test('resolveModelPolicy returns null when runtime or tier is missing', () => {
    const policy = { provider: 'anthropic', budget: 'high' };
    // tier is null
    assert.strictEqual(resolveModelPolicy(policy, null), null);
    // tier is empty string
    assert.strictEqual(resolveModelPolicy(policy, ''), null);
    // tier is undefined
    assert.strictEqual(resolveModelPolicy(policy, undefined), null);
  });
});

describe('#49 resolveModelPolicy Sub-path B: provider presets', () => {
  test('known provider "anthropic" + tier "opus" + budget "high" returns correct model ID', () => {
    // The anthropic preset catalog must contain an entry for opus+high.
    // The returned model ID is the high-budget anthropic opus model.
    const policy = { provider: 'anthropic', budget: 'high' };
    const result = resolveModelPolicy(policy, 'opus');
    assert.ok(typeof result === 'string' && result.length > 0,
      `expected a non-empty model ID string, got: ${JSON.stringify(result)}`);
    assert.strictEqual(result, 'claude-opus-4-8',
      `expected anthropic opus/high to resolve to claude-opus-4-8, got: ${result}`);
  });

  test('known provider "anthropic" + tier "sonnet" + budget "high" preserves Opus 4.8 routing', () => {
    const policy = { provider: 'anthropic', budget: 'high' };
    const result = resolveModelPolicy(policy, 'sonnet');
    assert.strictEqual(result, 'claude-opus-4-8',
      `expected anthropic sonnet/high to resolve to claude-opus-4-8, got: ${result}`);
  });

  test('known provider "anthropic-fable" + tier "opus" + budget "high" resolves to Claude Fable 5', () => {
    const policy = { provider: 'anthropic-fable', budget: 'high' };
    const result = resolveModelPolicy(policy, 'opus');
    assert.strictEqual(result, 'claude-fable-5',
      `expected anthropic-fable opus/high to resolve to claude-fable-5, got: ${result}`);
  });

  test('known provider "anthropic-fable" + tier "haiku" + budget "high" keeps low tier on Sonnet', () => {
    const policy = { provider: 'anthropic-fable', budget: 'high' };
    const result = resolveModelPolicy(policy, 'haiku');
    assert.strictEqual(result, 'claude-sonnet-5',
      `expected anthropic-fable haiku/high to resolve to claude-sonnet-5, got: ${result}`);
  });

  test('known provider "openai" + tier "sonnet" + budget "low" returns model with reasoning_effort from preset', () => {
    // The openai preset catalog must contain a sonnet+low entry.
    // "openai" maps to a different model family; the entry may include reasoning_effort.
    const policy = { provider: 'openai', budget: 'low' };
    const result = resolveModelPolicy(policy, 'sonnet');
    assert.ok(typeof result === 'string' && result.length > 0,
      `expected a non-empty model ID string for openai/sonnet/low, got: ${JSON.stringify(result)}`);
  });

  test('budget absent defaults to "medium"', () => {
    // No "budget" key — defaults to "medium". The anthropic/opus/medium entry must exist.
    const policyWithBudget = { provider: 'anthropic', budget: 'medium' };
    const policyNoBudget = { provider: 'anthropic' };
    const withBudget = resolveModelPolicy(policyWithBudget, 'opus');
    const withoutBudget = resolveModelPolicy(policyNoBudget, 'opus');
    // Both must return a string (not null)
    assert.ok(typeof withBudget === 'string' && withBudget.length > 0,
      `expected model from explicit budget:'medium'`);
    assert.ok(typeof withoutBudget === 'string' && withoutBudget.length > 0,
      `expected model when budget absent (should default to medium)`);
    // They must resolve to the same value
    assert.strictEqual(withBudget, withoutBudget,
      'absent budget must behave identically to explicit "medium"');
  });

  test('provider "generic" (all null entries) returns null (falls through)', () => {
    // provider:'generic' means opaque model IDs — there's no preset catalog for
    // generic. Without a runtime_tiers hit, resolveModelPolicy returns null.
    const policy = { provider: 'generic', budget: 'high' };
    const result = resolveModelPolicy(policy, 'opus');
    assert.strictEqual(result, null,
      'provider:"generic" with no runtime_tiers must return null (no preset catalog)');
  });

  test('unknown provider string returns null without throwing', () => {
    // A typo like provider:'mistral' must not crash; it degrades gracefully.
    const policy = { provider: 'mistral', budget: 'high' };
    let result;
    assert.doesNotThrow(() => {
      result = resolveModelPolicy(policy, 'opus');
    }, 'resolveModelPolicy must not throw on unknown provider');
    assert.strictEqual(result, null,
      'unknown provider with no runtime_tiers must return null');
  });

  test('known provider + unknown tier returns null', () => {
    const policy = { provider: 'anthropic', budget: 'high' };
    const result = resolveModelPolicy(policy, 'jumbo');
    assert.strictEqual(result, null,
      'unknown tier "jumbo" must return null for anthropic provider');
  });

  test('known provider + known tier + missing budget level returns null', () => {
    // The anthropic preset for opus only defines 'high' and 'medium' but NOT 'critical'.
    // A missing budget level must fall through (return null) — not crash.
    const policy = { provider: 'anthropic', budget: 'critical' };
    const result = resolveModelPolicy(policy, 'opus');
    assert.strictEqual(result, null,
      'missing budget level "critical" must return null without throwing');
  });
});

describe('#49 resolveModelPolicy Sub-path A: runtime_tiers', () => {
  test('runtime_tiers entry wins over provider preset for same runtime+tier', () => {
    // Sub-path A fires first: explicit runtime_tiers entry overrides the
    // provider preset catalog. The returned model is the one in runtime_tiers,
    // not what the provider preset would have returned.
    const policy = {
      provider: 'anthropic',
      budget: 'high',
      runtime: 'opencode',
      runtime_tiers: {
        opencode: {
          opus: { model: 'anthropic/custom-opus-override' },
        },
      },
    };
    const result = resolveModelPolicy(policy, 'opus');
    assert.strictEqual(result, 'anthropic/custom-opus-override',
      'Sub-path A runtime_tiers must win over Sub-path B provider preset');
  });

  test('runtime_tiers string shorthand normalized to { model } object', () => {
    // String shorthand: `{ opencode: { opus: "some-model-id" } }`
    // must be normalized to `{ model: "some-model-id" }` so the resolver
    // returns the string as-is.
    const policy = {
      provider: 'anthropic',
      budget: 'high',
      runtime: 'opencode',
      runtime_tiers: {
        opencode: {
          opus: 'anthropic/string-shorthand-model',
        },
      },
    };
    const result = resolveModelPolicy(policy, 'opus');
    assert.strictEqual(result, 'anthropic/string-shorthand-model',
      'string shorthand in runtime_tiers must be normalized and returned as model ID');
  });

  test('runtime_tiers partial entry (no matching runtime) falls through to provider preset', () => {
    // runtime_tiers has entries for 'copilot' but the active runtime is 'opencode'.
    // The miss on runtime_tiers falls through to Sub-path B (provider preset).
    const policy = {
      provider: 'anthropic',
      budget: 'high',
      runtime: 'opencode',
      runtime_tiers: {
        copilot: {
          opus: { model: 'some-copilot-model' },
        },
      },
    };
    const result = resolveModelPolicy(policy, 'opus');
    // Falls through to Sub-path B (anthropic/opus/high) — must not be null.
    assert.ok(typeof result === 'string' && result.length > 0,
      'runtime_tiers miss must fall through to provider preset, got: ' + JSON.stringify(result));
    // And it must NOT be the copilot model
    assert.notStrictEqual(result, 'some-copilot-model');
  });
});

// ─── resolveModelInternal integration tests ──────────────────────────────────
//
// These tests call resolveModelInternal through a temp project's config.json.
// They verify the full resolution chain including model_policy placement.

describe('#49 resolveModelInternal: model_policy in the resolution chain', () => {
  let projectDir;
  beforeEach(() => {
    projectDir = makeTmp('internal');
    resetRuntimeWarningCaches();
  });
  afterEach(() => {
    rmr(projectDir);
    resetRuntimeWarningCaches();
  });

  test('model_policy fires before model_profile_overrides when both are set (model_policy wins)', () => {
    // model_policy (Sub-path B: anthropic/opus/high) must win over
    // model_profile_overrides when both are present.
    // We use a model_profile_overrides entry that would give a DIFFERENT result.
    writeConfig(projectDir, {
      runtime: 'opencode',
      model_profile: 'quality',
      model_policy: {
        provider: 'anthropic',
        budget: 'high',
      },
      model_profile_overrides: {
        opencode: {
          // This legacy override would have returned this model — but model_policy must win.
          opus: 'legacy-override-model-should-not-appear',
        },
      },
    });
    const result = resolveModelInternal(projectDir, 'msd-planner');
    assert.notStrictEqual(result, 'legacy-override-model-should-not-appear',
      'model_policy must fire before model_profile_overrides and win');
    assert.ok(typeof result === 'string' && result.length > 0,
      'must return a non-empty model ID');
    assert.strictEqual(result, 'claude-opus-4-8',
      'expected anthropic preset opus/high to resolve to claude-opus-4-8');
  });

  test('model_policy with provider:"anthropic" + budget:"high" + runtime:"opencode" resolves to preset model', () => {
    writeConfig(projectDir, {
      runtime: 'opencode',
      model_profile: 'quality',  // msd-planner quality = opus tier
      model_policy: {
        provider: 'anthropic',
        budget: 'high',
      },
    });
    const result = resolveModelInternal(projectDir, 'msd-planner');
    assert.ok(typeof result === 'string' && result.length > 0,
      'expected a non-empty model ID');
    assert.strictEqual(result, 'claude-opus-4-8',
      'anthropic/opus/high must resolve to claude-opus-4-8');
  });

  test('model_policy with provider:"anthropic-fable" + budget:"high" resolves to Fable preset model', () => {
    writeConfig(projectDir, {
      runtime: 'opencode',
      model_profile: 'quality',
      model_policy: {
        provider: 'anthropic-fable',
        budget: 'high',
      },
    });
    const result = resolveModelInternal(projectDir, 'msd-planner');
    assert.strictEqual(result, 'claude-fable-5',
      'anthropic-fable/opus/high must resolve to claude-fable-5');
  });

  test('model_policy is skipped when runtime is absent', () => {
    // No `runtime` in config — model_policy fires on any non-null policy
    // only when a runtime context is available. Without runtime, the policy
    // falls through entirely.
    // NOTE: Sub-path B (provider preset) can fire without runtime — it only
    // needs tier+budget+provider. Sub-path A requires runtime. This test
    // verifies the gating behavior described in the issue: if model_policy
    // is present but runtime is absent, provider preset Sub-path B still
    // fires (it doesn't need runtime). So "skipped" means the runtime_tiers
    // sub-path is skipped but provider preset may still fire.
    // The test asserts that resolveModelInternal does not crash and returns
    // a string regardless.
    writeConfig(projectDir, {
      model_profile: 'quality',
      model_policy: {
        provider: 'anthropic',
        budget: 'high',
        runtime_tiers: {
          opencode: {
            opus: { model: 'should-not-appear-no-runtime' },
          },
        },
      },
    });
    let result;
    assert.doesNotThrow(() => {
      result = resolveModelInternal(projectDir, 'msd-planner');
    });
    assert.ok(typeof result === 'string',
      'resolveModelInternal must return a string even when runtime is absent');
    // The runtime_tiers entry for opencode must not appear since runtime is absent
    assert.notStrictEqual(result, 'should-not-appear-no-runtime',
      'runtime_tiers must not fire when config.runtime is absent');
  });

  test('model_policy provider preset resolves to a Claude alias on runtime:"claude" (#1133)', () => {
    writeConfig(projectDir, {
      runtime: 'claude',
      model_profile: 'balanced',
      model_policy: { provider: 'anthropic-fable', budget: 'high' },
    });
    // msd-planner -> opus tier; anthropic-fable opus/high = claude-fable-5 -> alias "fable"
    assert.strictEqual(resolveModelInternal(projectDir, 'msd-planner'), 'fable');
  });

  test('model_policy works with implicit claude runtime (no runtime key) (#1133)', () => {
    writeConfig(projectDir, {
      model_profile: 'balanced',
      model_policy: { provider: 'anthropic-fable', budget: 'high' },
    });
    // msd-executor -> sonnet tier; anthropic-fable sonnet/high = claude-fable-5 -> "fable"
    assert.strictEqual(resolveModelInternal(projectDir, 'msd-executor'), 'fable');
  });

  test('unmappable model_policy ID warns and falls back to the tier alias on claude (#1133)', () => {
    resetRuntimeWarningCaches();
    writeConfig(projectDir, {
      runtime: 'claude',
      model_profile: 'balanced',
      model_policy: { provider: 'anthropic-fable', budget: 'low' },
    });
    // msd-planner -> opus tier; anthropic-fable opus/low = claude-opus-4-5 (no alias) -> fall back to "opus"
    assert.strictEqual(resolveModelInternal(projectDir, 'msd-planner'), 'opus');
  });

  test('model_policy.runtime_tiers applies on runtime:"claude", mapped to alias (#1133)', () => {
    writeConfig(projectDir, {
      runtime: 'claude',
      model_profile: 'balanced',
      model_policy: {
        provider: 'anthropic',
        budget: 'high',
        runtime_tiers: { claude: { opus: { model: 'claude-fable-5' } } },
      },
    });
    // msd-planner -> opus tier; runtime_tiers.claude.opus = claude-fable-5 -> "fable" (was a no-op pre-#1133)
    assert.strictEqual(resolveModelInternal(projectDir, 'msd-planner'), 'fable');
  });

  test('model_policy maps a built-in catalog model ID to its Claude alias via MODEL_ALIAS_MAP (#1133)', () => {
    writeConfig(projectDir, {
      runtime: 'claude',
      model_profile: 'balanced',
      model_policy: {
        provider: 'anthropic',
        budget: 'high',
        runtime_tiers: { claude: { opus: { model: 'claude-opus-4-8' } } },
      },
    });
    // msd-planner -> opus tier; runtime_tiers.claude.opus = claude-opus-4-8 ->
    // reverse of MODEL_ALIAS_MAP -> "opus" (exercises the non-fable reverse-map path)
    assert.strictEqual(resolveModelInternal(projectDir, 'msd-planner'), 'opus');
  });

  test('model_policy still returns full IDs on non-claude runtimes (#1133 regression)', () => {
    writeConfig(projectDir, {
      runtime: 'opencode',
      model_profile: 'balanced',
      model_policy: { provider: 'anthropic-fable', budget: 'high' },
    });
    assert.strictEqual(resolveModelInternal(projectDir, 'msd-planner'), 'claude-fable-5');
  });

  test('model_policy is skipped when tier:"inherit"', () => {
    // When the resolved tier is 'inherit', model_policy must not fire.
    // This mirrors the existing behavior for runtime-aware resolution.
    writeConfig(projectDir, {
      runtime: 'opencode',
      model_profile: 'inherit',
      model_policy: {
        provider: 'anthropic',
        budget: 'high',
      },
    });
    const result = resolveModelInternal(projectDir, 'msd-planner');
    // With profile:'inherit', the result must be 'inherit'
    assert.strictEqual(result, 'inherit',
      'model_policy must not fire when tier is "inherit"; resolveModelInternal must return "inherit"');
  });

  test('model_profile_overrides still resolves when model_policy is absent (legacy fallback intact)', () => {
    // No model_policy — model_profile_overrides must still work exactly as before.
    writeConfig(projectDir, {
      runtime: 'opencode',
      model_profile: 'quality',
      model_profile_overrides: {
        opencode: {
          opus: 'legacy-overridden-model',
        },
      },
    });
    const result = resolveModelInternal(projectDir, 'msd-planner');
    assert.strictEqual(result, 'legacy-overridden-model',
      'model_profile_overrides must still win when model_policy is absent');
  });

  test('model_policy absent + model_profile_overrides set → model_profile_overrides wins (back-compat)', () => {
    // Explicit: no model_policy key at all. model_profile_overrides is the only
    // custom config. The legacy chain must apply exactly as before this feature.
    writeConfig(projectDir, {
      runtime: 'opencode',
      model_profile: 'balanced',
      model_profile_overrides: {
        opencode: {
          sonnet: 'back-compat-sonnet-model',
        },
      },
    });
    // msd-executor has balanced/opencode -> sonnet tier
    const result = resolveModelInternal(projectDir, 'msd-executor');
    assert.strictEqual(result, 'back-compat-sonnet-model',
      'legacy model_profile_overrides must be unaffected when model_policy is absent');
  });

  test('model_policy present but runtime_tiers empty + provider:"generic" → falls through to model_profile_overrides', () => {
    // model_policy is a stub: runtime_tiers is empty ({}), provider is "generic".
    // The resolver must fall through all model_policy paths and land on model_profile_overrides.
    writeConfig(projectDir, {
      runtime: 'opencode',
      model_profile: 'quality',
      model_policy: {
        provider: 'generic',
        budget: 'high',
        runtime_tiers: {},
      },
      model_profile_overrides: {
        opencode: {
          opus: 'fallthrough-to-legacy',
        },
      },
    });
    const result = resolveModelInternal(projectDir, 'msd-planner');
    assert.strictEqual(result, 'fallthrough-to-legacy',
      'empty runtime_tiers + generic provider must fall through to model_profile_overrides');
  });
});

// ─── Warning emission tests ───────────────────────────────────────────────────

describe('#49 resolveModelInternal: unknown provider warning behavior', () => {
  let projectDir;
  let origWrite;
  let captured;

  beforeEach(() => {
    projectDir = makeTmp('warnings');
    resetRuntimeWarningCaches();
    captured = [];
    origWrite = process.stderr.write.bind(process.stderr);
    process.stderr.write = (chunk) => { captured.push(String(chunk)); return true; };
  });

  afterEach(() => {
    process.stderr.write = origWrite;
    rmr(projectDir);
    resetRuntimeWarningCaches();
  });

  test('unknown provider in model_policy → falls through to model_profile_overrides, emits stderr warning once', () => {
    writeConfig(projectDir, {
      runtime: 'opencode',
      model_profile: 'quality',
      model_policy: {
        provider: 'mistral',
        budget: 'high',
      },
      model_profile_overrides: {
        opencode: {
          opus: 'fallback-from-unknown-provider',
        },
      },
    });
    const result = resolveModelInternal(projectDir, 'msd-planner');
    // Must fall through to model_profile_overrides
    assert.strictEqual(result, 'fallback-from-unknown-provider',
      'unknown provider must fall through to model_profile_overrides');
    // Must emit at least one stderr warning about the unknown provider
    const joined = captured.join('');
    assert.match(joined, /model_policy.*provider.*mistral|unknown.*provider.*mistral|mistral.*unknown/i,
      'must emit a stderr warning about the unknown provider "mistral"');
  });

  test('unknown provider warning is deduplicated (emitted only once per config label)', () => {
    writeConfig(projectDir, {
      runtime: 'opencode',
      model_profile: 'quality',
      model_policy: {
        provider: 'mistral',
        budget: 'high',
      },
    });
    // Call resolveModelInternal multiple times for different agents — the
    // warning about the unknown provider must be emitted only once.
    resolveModelInternal(projectDir, 'msd-planner');
    resolveModelInternal(projectDir, 'msd-executor');
    resolveModelInternal(projectDir, 'msd-verifier');
    const joined = captured.join('');
    // Count occurrences of "mistral" in the warning output
    const matches = (joined.match(/mistral/gi) || []).length;
    assert.ok(matches >= 1, 'expected at least one warning about "mistral"');
    assert.ok(matches <= 2, `warning for unknown provider must be deduplicated — saw ${matches} occurrences`);
  });

  test('model_policy.runtime_tiers with unknown runtime emits one-shot stderr warning', () => {
    writeConfig(projectDir, {
      runtime: 'opencode',
      model_profile: 'quality',
      model_policy: {
        provider: 'anthropic',
        budget: 'high',
        runtime_tiers: {
          unknownrt: {
            opus: { model: 'some-model' },
          },
        },
      },
    });
    resolveModelInternal(projectDir, 'msd-planner');
    const joined = captured.join('');
    // Must emit a warning about the unknown runtime key in runtime_tiers
    assert.match(joined, /unknownrt|unknown.*runtime|runtime_tiers.*unknown/i,
      'must emit a stderr warning about unknown runtime "unknownrt" in model_policy.runtime_tiers');
  });

  test('model_policy.runtime_tiers with invalid tier name emits one-shot stderr warning', () => {
    writeConfig(projectDir, {
      runtime: 'opencode',
      model_profile: 'quality',
      model_policy: {
        provider: 'anthropic',
        budget: 'high',
        runtime_tiers: {
          opencode: {
            jumbo: { model: 'invalid-tier-model' },
          },
        },
      },
    });
    resolveModelInternal(projectDir, 'msd-planner');
    const joined = captured.join('');
    // Must emit a warning about the invalid tier name "jumbo"
    assert.match(joined, /jumbo|invalid.*tier|tier.*invalid|unknown.*tier/i,
      'must emit a stderr warning about invalid tier "jumbo" in model_policy.runtime_tiers.opencode');
  });
});

// ─── reasoning_effort passthrough tests ──────────────────────────────────────

describe('#49 reasoning_effort in model_policy entries', () => {
  let projectDir;
  beforeEach(() => { projectDir = makeTmp('effort'); });
  afterEach(() => { rmr(projectDir); });

  test('reasoning_effort in preset entry is returned as part of the entry object (caller decides whether to emit)', () => {
    // When a provider preset includes reasoning_effort (e.g. openai opus/high),
    // resolveModelPolicy must return the full entry object (or at minimum the model
    // string) without stripping reasoning_effort internally.
    // This is checked via the internal resolveModelPolicy function directly.
    // The policy object includes a runtime_tiers entry that has reasoning_effort.
    const policy = {
      provider: 'anthropic',
      budget: 'high',
      runtime: 'opencode',
      runtime_tiers: {
        opencode: {
          opus: { model: 'anthropic/claude-opus-4-8', reasoning_effort: 'high' },
        },
      },
    };
    // resolveModelPolicy must return the model string (at minimum).
    // The caller (resolveModelInternal) is responsible for deciding what to
    // emit — the resolver just returns the model ID string.
    const result = resolveModelPolicy(policy, 'opus');
    assert.strictEqual(result, 'anthropic/claude-opus-4-8',
      'resolveModelPolicy must return the model string from the runtime_tiers entry');
  });

  test('reasoning_effort in model_policy.runtime_tiers entry is returned verbatim; renderEffortForRuntime strips it when runtime not in RUNTIMES_WITH_REASONING_EFFORT', () => {
    // The renderEffortForRuntime function (already existing) handles the stripping.
    // This test verifies the contract: resolveModelPolicy returns the model string,
    // and for runtimes not in RUNTIMES_WITH_REASONING_EFFORT, the caller must not
    // emit reasoning_effort.
    const { renderEffortForRuntime, RUNTIMES_WITH_REASONING_EFFORT } = require('../msd-core/bin/lib/model-catalog.cjs');

    // 'opencode' is NOT in RUNTIMES_WITH_REASONING_EFFORT (only codex has reasoning_effort in catalog)
    assert.ok(!RUNTIMES_WITH_REASONING_EFFORT.has('opencode'),
      'opencode must not be in RUNTIMES_WITH_REASONING_EFFORT for this test to be meaningful');

    // renderEffortForRuntime for a non-effort runtime returns channel:null
    const rendered = renderEffortForRuntime('opencode', 'high');
    assert.strictEqual(rendered.channel, null,
      'renderEffortForRuntime must return channel:null for runtimes not supporting reasoning_effort');

    // The resolveModelPolicy function returns just the model string — reasoning_effort
    // is stripped at the emit layer, not inside resolveModelPolicy.
    const policy = {
      runtime: 'opencode',
      provider: 'anthropic',
      budget: 'high',
      runtime_tiers: {
        opencode: {
          opus: { model: 'anthropic/claude-opus-4-8', reasoning_effort: 'high' },
        },
      },
    };
    const result = resolveModelPolicy(policy, 'opus');
    assert.strictEqual(result, 'anthropic/claude-opus-4-8',
      'resolveModelPolicy must return model string; reasoning_effort is stripped downstream');
  });
});

// ─── isValidConfigKey: model_policy.* schema validation ──────────────────────

describe('#49 isValidConfigKey: model_policy.* keys accepted/rejected', () => {
  test('isValidConfigKey accepts "model_policy.provider"', () => {
    assert.strictEqual(isValidConfigKey('model_policy.provider'), true,
      '"model_policy.provider" must be a valid config key');
  });

  test('isValidConfigKey accepts "model_policy.budget"', () => {
    assert.strictEqual(isValidConfigKey('model_policy.budget'), true,
      '"model_policy.budget" must be a valid config key');
  });

  test('isValidConfigKey accepts "model_policy.runtime_tiers.opencode.opus"', () => {
    assert.strictEqual(isValidConfigKey('model_policy.runtime_tiers.opencode.opus'), true,
      '"model_policy.runtime_tiers.opencode.opus" must be a valid config key');
  });

  test('isValidConfigKey rejects "model_policy.runtime_tiers.opencode.banana" (invalid tier)', () => {
    assert.strictEqual(isValidConfigKey('model_policy.runtime_tiers.opencode.banana'), false,
      '"model_policy.runtime_tiers.opencode.banana" must be rejected (banana is not a valid tier)');
  });
});

// ─── KNOWN_PROVIDERS export tests ─────────────────────────────────────────────

describe('#49 KNOWN_PROVIDERS exports from model-catalog.cjs', () => {
  test('KNOWN_PROVIDERS exported from model-catalog.cjs includes all keys from providerPresets in catalog', () => {
    // KNOWN_PROVIDERS must be a Set (or array) exported from model-catalog.cjs.
    assert.ok(KNOWN_PROVIDERS != null,
      'KNOWN_PROVIDERS must be exported from model-catalog.cjs');
    const isIterable = typeof KNOWN_PROVIDERS[Symbol.iterator] === 'function';
    assert.ok(isIterable,
      'KNOWN_PROVIDERS must be iterable (Set or array)');
    const providers = [...KNOWN_PROVIDERS];
    assert.ok(providers.length > 0,
      'KNOWN_PROVIDERS must not be empty');
    // 'anthropic' must be in the set since it is a required provider preset
    assert.ok(providers.includes('anthropic'),
      'KNOWN_PROVIDERS must include "anthropic"');
    assert.ok(providers.includes('anthropic-fable'),
      'KNOWN_PROVIDERS must include "anthropic-fable"');
    // 'generic' is a special fallback, not a real provider — it must NOT be in KNOWN_PROVIDERS
    // (KNOWN_PROVIDERS lists only providers with catalog entries)
    assert.ok(!providers.includes('generic'),
      'KNOWN_PROVIDERS must not include "generic" (it is not a catalog-backed provider)');
  });

  test('KNOWN_PROVIDERS from model-catalog.cjs is the canonical export', () => {
    // model-catalog.cjs is the canonical source of KNOWN_PROVIDERS.
    assert.ok(modelCatalog.KNOWN_PROVIDERS != null,
      'KNOWN_PROVIDERS must be exported from model-catalog.cjs');
    const fromCatalog = [...modelCatalog.KNOWN_PROVIDERS].sort();
    const fromImport = [...KNOWN_PROVIDERS].sort();
    assert.deepStrictEqual(fromImport, fromCatalog,
      'KNOWN_PROVIDERS imported from model-catalog.cjs must match the module export');
  });
});

// ─── resolveModelPolicy: Object.hasOwn prototype-pollution guards ────────────

describe('#49 resolveModelPolicy: prototype-pollution guards', () => {
  test('__proto__ as provider returns null without throwing', () => {
    assert.strictEqual(resolveModelPolicy({ provider: '__proto__', budget: 'medium' }, 'sonnet'), null);
  });

  test('constructor as provider returns null without throwing', () => {
    assert.strictEqual(resolveModelPolicy({ provider: 'constructor', budget: 'medium' }, 'sonnet'), null);
  });

  test('__proto__ as budget returns null without throwing', () => {
    assert.strictEqual(resolveModelPolicy({ provider: 'openai', budget: '__proto__' }, 'haiku'), null);
  });

  test('toString as budget returns null without throwing', () => {
    assert.strictEqual(resolveModelPolicy({ provider: 'openai', budget: 'toString' }, 'haiku'), null);
  });

  test('__proto__ as runtime_tiers key returns null without throwing', () => {
    const policy = {
      runtime: '__proto__',
      runtime_tiers: { '__proto__': { haiku: { model: 'evil' } } },
    };
    assert.strictEqual(resolveModelPolicy(policy, 'haiku'), null);
  });

  test('__proto__ as tier inside runtime_tiers returns null without throwing', () => {
    const policy = {
      runtime: 'codex',
      runtime_tiers: { codex: { '__proto__': { model: 'evil' } } },
    };
    assert.strictEqual(resolveModelPolicy(policy, '__proto__'), null);
  });

  test('valid provider+tier+budget still resolves correctly after guards', () => {
    const result = resolveModelPolicy({ provider: 'openai', budget: 'low' }, 'haiku');
    assert.ok(typeof result === 'string' && result.length > 0,
      'valid openai/haiku/low lookup must still resolve after adding hasOwn guards');
  });
});

// ─── #2041: model_overrides Claude full ID → Agent-tool alias on claude runtime ─
//
// Mirrors the #1133 model_policy alias-mapping tests (above) for the
// model_overrides path. Bug: a full Claude model ID in model_overrides
// (e.g. "claude-sonnet-5") was returned VERBATIM on the claude runtime and
// handed to the Claude Agent tool, whose typed `model` parameter documents only
// tier aliases (opus/sonnet/haiku/fable). The model_policy path already maps
// full IDs → aliases via CLAUDE_POLICY_ID_TO_ALIAS (#1144); model_overrides
// skipped that mapping entirely. The fix mirrors #1144 on the override path.
// Non-Claude runtimes and non-Claude values pass through verbatim (parity).

describe('#2041 model_overrides: Claude full ID → alias on claude runtime', () => {
  let tmpDir;
  beforeEach(() => {
    tmpDir = makeTmp('2041');
    resetRuntimeWarningCaches();
  });
  afterEach(() => {
    rmr(tmpDir);
    resetRuntimeWarningCaches();
  });

  // AC1 + AC2: mappable Claude full IDs resolve to their aliases on claude runtime
  test('model_overrides claude-sonnet-5 → "sonnet" on runtime:claude (resolveModelInternal)', () => {
    writeConfig(tmpDir, {
      runtime: 'claude',
      model_overrides: { 'msd-executor': 'claude-sonnet-5' },
    });
    assert.strictEqual(resolveModelInternal(tmpDir, 'msd-executor'), 'sonnet');
  });

  test('model_overrides claude-opus-4-8 → "opus" on runtime:claude', () => {
    writeConfig(tmpDir, {
      runtime: 'claude',
      model_overrides: { 'msd-planner': 'claude-opus-4-8' },
    });
    assert.strictEqual(resolveModelInternal(tmpDir, 'msd-planner'), 'opus');
  });

  test('model_overrides claude-haiku-4-5 → "haiku" on runtime:claude', () => {
    writeConfig(tmpDir, {
      runtime: 'claude',
      model_overrides: { 'msd-codebase-mapper': 'claude-haiku-4-5' },
    });
    assert.strictEqual(resolveModelInternal(tmpDir, 'msd-codebase-mapper'), 'haiku');
  });

  test('model_overrides claude-fable-5 → "fable" on runtime:claude', () => {
    writeConfig(tmpDir, {
      runtime: 'claude',
      model_overrides: { 'msd-planner': 'claude-fable-5' },
    });
    assert.strictEqual(resolveModelInternal(tmpDir, 'msd-planner'), 'fable');
  });

  // AC3: bare aliases pass through verbatim
  test('model_overrides bare "sonnet" alias passes through verbatim on runtime:claude', () => {
    writeConfig(tmpDir, {
      runtime: 'claude',
      model_overrides: { 'msd-executor': 'sonnet' },
    });
    assert.strictEqual(resolveModelInternal(tmpDir, 'msd-executor'), 'sonnet');
  });

  test('model_overrides bare "fable" alias passes through verbatim on runtime:claude', () => {
    writeConfig(tmpDir, {
      runtime: 'claude',
      model_overrides: { 'msd-planner': 'fable' },
    });
    assert.strictEqual(resolveModelInternal(tmpDir, 'msd-planner'), 'fable');
  });

  // AC1 (implicit claude): mapping fires when runtime key is absent (defaults to claude)
  test('model_overrides claude-sonnet-5 → "sonnet" with implicit claude runtime (no runtime key)', () => {
    writeConfig(tmpDir, {
      model_overrides: { 'msd-executor': 'claude-sonnet-5' },
    });
    assert.strictEqual(resolveModelInternal(tmpDir, 'msd-executor'), 'sonnet');
  });

  // AC4: non-claude runtimes keep full IDs verbatim (parity with model_policy path)
  test('model_overrides claude-sonnet-5 → verbatim ID on non-claude runtime (opencode)', () => {
    writeConfig(tmpDir, {
      runtime: 'opencode',
      model_overrides: { 'msd-executor': 'claude-sonnet-5' },
    });
    assert.strictEqual(resolveModelInternal(tmpDir, 'msd-executor'), 'claude-sonnet-5');
  });

  // AC5 (#4192 revision): an unmappable Claude full ID — an explicit
  // generation pin — is passed through VERBATIM with a warn-once breadcrumb,
  // instead of being dropped to tier resolution (which silently unpinned the
  // operator's explicit choice; see #4192 Finding 2).
  test('model_overrides unmappable claude ID (claude-opus-4-5) passes through verbatim on claude', () => {
    resetRuntimeWarningCaches();
    writeConfig(tmpDir, {
      runtime: 'claude',
      model_profile: 'balanced',
      model_overrides: { 'msd-planner': 'claude-opus-4-5' },
    });
    // msd-planner balanced → opus tier; claude-opus-4-5 has no alias → warn + verbatim pin
    assert.strictEqual(resolveModelInternal(tmpDir, 'msd-planner'), 'claude-opus-4-5');
  });

  test('model_overrides unmappable claude ID emits a stderr warning exactly once (dedupe)', () => {
    resetRuntimeWarningCaches();
    writeConfig(tmpDir, {
      runtime: 'claude',
      model_profile: 'balanced',
      model_overrides: { 'msd-planner': 'claude-opus-4-5' },
    });
    const writes = [];
    const original = process.stderr.write.bind(process.stderr);
    process.stderr.write = (chunk) => { writes.push(String(chunk)); return true; };
    try {
      resolveModelInternal(tmpDir, 'msd-planner');
      resolveModelInternal(tmpDir, 'msd-planner'); // second call — dedupe must suppress
    } finally {
      process.stderr.write = original;
    }
    const warnings = writes.filter((w) => w.includes('model_overrides') && w.includes('claude-opus-4-5'));
    assert.strictEqual(warnings.length, 1,
      `expected exactly one override warning, got ${warnings.length}: ${JSON.stringify(writes)}`);
  });

  // AC6: resolveModelForTier (escalation / --attempt path) maps the same way
  test('resolveModelForTier maps claude-sonnet-5 → "sonnet" on runtime:claude', () => {
    writeConfig(tmpDir, {
      runtime: 'claude',
      model_overrides: { 'msd-executor': 'claude-sonnet-5' },
    });
    assert.strictEqual(resolveModelForTier(tmpDir, 'msd-executor', 0), 'sonnet');
  });

  test('resolveModelForTier keeps full ID verbatim on non-claude runtime', () => {
    writeConfig(tmpDir, {
      runtime: 'opencode',
      model_overrides: { 'msd-executor': 'claude-sonnet-5' },
    });
    assert.strictEqual(resolveModelForTier(tmpDir, 'msd-executor', 0), 'claude-sonnet-5');
  });

  // MEDIUM-1 (review, #4192 revision): exercise the unmappable-override
  // branch in resolveModelForTier (keeps the mutation-score gap closed — the
  // verbatim-pin return must survive a future refactor on the escalation path
  // too, not just resolveModelInternal).
  test('resolveModelForTier unmappable claude ID passes through verbatim on claude', () => {
    resetRuntimeWarningCaches();
    writeConfig(tmpDir, {
      runtime: 'claude',
      model_profile: 'balanced',
      model_overrides: { 'msd-planner': 'claude-opus-4-5' },
    });
    // unmappable override → no dynamic_routing → resolveModelInternal → verbatim pin
    assert.strictEqual(resolveModelForTier(tmpDir, 'msd-planner', 0), 'claude-opus-4-5');
  });

  // LOW-2 (review): pin the case-sensitive contract — a case-variant like
  // "Claude-Sonnet-5" is NOT mapped (alias keys are case-sensitive, matching
  // the model_policy path and the Claude API).
  test('model_overrides case-variant "Claude-Sonnet-5" passes through verbatim (case-sensitive contract)', () => {
    writeConfig(tmpDir, {
      runtime: 'claude',
      model_overrides: { 'msd-executor': 'Claude-Sonnet-5' },
    });
    assert.strictEqual(resolveModelInternal(tmpDir, 'msd-executor'), 'Claude-Sonnet-5');
  });

  // Regression guard: non-Claude custom / vendor values still pass through verbatim
  // on the claude runtime (the fix must NOT touch values that aren't Claude IDs).
  test('model_overrides non-Claude custom model passes through verbatim on runtime:claude', () => {
    writeConfig(tmpDir, {
      runtime: 'claude',
      model_overrides: { 'msd-planner': 'my-custom-model' },
    });
    assert.strictEqual(resolveModelInternal(tmpDir, 'msd-planner'), 'my-custom-model');
  });

  test('model_overrides non-Claude vendor ID (openai/gpt-5) passes through verbatim on runtime:claude', () => {
    writeConfig(tmpDir, {
      runtime: 'claude',
      model_overrides: { 'msd-executor': 'openai/gpt-5' },
    });
    assert.strictEqual(resolveModelInternal(tmpDir, 'msd-executor'), 'openai/gpt-5');
  });
});

// ─── resolveModelForTier: model_policy beats dynamic_routing ─────────────────

describe('#49 resolveModelForTier: model_policy beats dynamic_routing', () => {
  let tmpDir;
  beforeEach(() => { tmpDir = makeTmp('for-tier-'); });
  afterEach(() => { rmr(tmpDir); });

  test('model_policy wins over dynamic_routing.tier_models when both are set', () => {
    writeConfig(tmpDir, {
      runtime: 'codex',
      model_policy: { provider: 'openai', budget: 'low' },
      dynamic_routing: {
        enabled: true,
        tier_models: { light: 'haiku', standard: 'sonnet', heavy: 'opus' },
      },
    });
    // model_policy fires before dynamic_routing in resolveModelForTier
    const result = resolveModelForTier(tmpDir, 'msd-executor', 0);
    // msd-executor is standard/sonnet tier; openai+low+sonnet preset model
    assert.ok(typeof result === 'string' && result.length > 0,
      'model_policy must return a model string');
    assert.notStrictEqual(result, 'sonnet',
      'dynamic_routing tier alias must not win over model_policy');
  });

  test('model_overrides still beats model_policy in resolveModelForTier', () => {
    writeConfig(tmpDir, {
      runtime: 'codex',
      model_policy: { provider: 'openai', budget: 'high' },
      dynamic_routing: {
        enabled: true,
        tier_models: { light: 'haiku', standard: 'sonnet', heavy: 'opus' },
      },
      model_overrides: { 'msd-planner': 'custom-model-id' },
    });
    assert.strictEqual(resolveModelForTier(tmpDir, 'msd-planner', 0), 'custom-model-id');
  });

  test('dynamic_routing.tier_models used normally when model_policy absent', () => {
    writeConfig(tmpDir, {
      runtime: 'codex',
      dynamic_routing: {
        enabled: true,
        tier_models: { light: 'haiku', standard: 'my-custom-sonnet', heavy: 'opus' },
      },
    });
    assert.strictEqual(resolveModelForTier(tmpDir, 'msd-executor', 0), 'my-custom-sonnet');
  });

  test('model_policy with Claude runtime does not interrupt dynamic_routing', () => {
    // model_policy only gates on non-Claude runtimes; with runtime absent/claude,
    // dynamic_routing must still work normally.
    writeConfig(tmpDir, {
      model_policy: { provider: 'openai', budget: 'low' },
      dynamic_routing: {
        enabled: true,
        tier_models: { light: 'haiku', standard: 'my-sonnet', heavy: 'opus' },
      },
    });
    assert.strictEqual(resolveModelForTier(tmpDir, 'msd-executor', 0), 'my-sonnet');
  });

  test('model_policy value that is already a bare Claude alias is returned as-is on claude (#1133)', () => {
    writeConfig(tmpDir, {
      runtime: 'claude',
      model_profile: 'balanced',
      model_policy: {
        provider: 'anthropic',
        budget: 'high',
        runtime_tiers: { claude: { opus: { model: 'fable' } } },
      },
    });
    // msd-planner → opus tier; runtime_tiers.claude.opus = "fable" is already a valid alias → "fable"
    assert.strictEqual(resolveModelInternal(tmpDir, 'msd-planner'), 'fable');
  });
});

// ─── #2229: computeProfileTier / resolveTierFromConfig / resolveTierInternal ──
//
// `tier` is additive on top of resolveModelInternal's model/profile/effort keys
// (cmdResolveModel, src/commands.cts) so a caller can learn the effective tier
// even under resolve_model_ids:"omit", where `model` is deliberately blank.

describe('#2229 resolveTierInternal / resolveTierFromConfig — config rows', () => {
  let tmpDir;
  beforeEach(() => { tmpDir = makeTempProject(); });
  afterEach(() => { if (tmpDir) cleanup(tmpDir); tmpDir = null; });

  test('no config -> balanced profile -> "sonnet"', () => {
    assert.strictEqual(resolveTierInternal(tmpDir, 'msd-phase-researcher'), 'sonnet');
  });

  test('model_profile=budget -> "haiku"', () => {
    writeConfig(tmpDir, { model_profile: 'budget' });
    assert.strictEqual(resolveTierInternal(tmpDir, 'msd-phase-researcher'), 'haiku');
  });

  test('model_overrides="haiku" alias -> "haiku"', () => {
    writeConfig(tmpDir, { model_overrides: { 'msd-phase-researcher': 'haiku' } });
    assert.strictEqual(resolveTierInternal(tmpDir, 'msd-phase-researcher'), 'haiku');
  });

  test('model_overrides full Claude id "claude-haiku-4-5" maps back to its alias -> "haiku"', () => {
    writeConfig(tmpDir, { model_overrides: { 'msd-phase-researcher': 'claude-haiku-4-5' } });
    assert.strictEqual(resolveTierInternal(tmpDir, 'msd-phase-researcher'), 'haiku');
  });

  test('model_overrides pinning a non-Claude id (gemini-2.5-flash-lite) is never guessed -> "unknown"', () => {
    writeConfig(tmpDir, { model_overrides: { 'msd-phase-researcher': 'gemini-2.5-flash-lite' } });
    assert.strictEqual(resolveTierInternal(tmpDir, 'msd-phase-researcher'), 'unknown');
  });

  // Regression: CLAUDE_POLICY_ID_TO_ALIAS is a plain object literal indexed
  // with this config-supplied override value with no own-property guard. A
  // prototype-chain override ("toString", "constructor", "__proto__",
  // "valueOf", "hasOwnProperty") returned the inherited Function/Object
  // member (typeof "function"/"object") instead of falling through to
  // "unknown" — and a function-valued tier is silently dropped by
  // JSON.stringify in the CLI output, so `tier` vanished from `query
  // resolve-model` entirely.
  for (const proto of ['toString', 'constructor', '__proto__', 'valueOf', 'hasOwnProperty']) {
    test(`REGRESSION: model_overrides="${proto}" (prototype-chain key) -> string "unknown", not an inherited member`, () => {
      writeConfig(tmpDir, { model_overrides: { 'msd-phase-researcher': proto } });
      const result = resolveTierInternal(tmpDir, 'msd-phase-researcher');
      assert.strictEqual(typeof result, 'string', `expected a string, got ${typeof result}: ${String(result)}`);
      assert.strictEqual(result, 'unknown');
    });
  }

  test('model_profile=inherit -> "inherit"', () => {
    writeConfig(tmpDir, { model_profile: 'inherit' });
    assert.strictEqual(resolveTierInternal(tmpDir, 'msd-phase-researcher'), 'inherit');
  });

  test('ADVERSARIAL: models=0 (non-object) does not throw and falls back to "sonnet"', () => {
    writeConfig(tmpDir, { models: 0 });
    assert.doesNotThrow(() => resolveTierInternal(tmpDir, 'msd-phase-researcher'));
    assert.strictEqual(resolveTierInternal(tmpDir, 'msd-phase-researcher'), 'sonnet');
  });

  for (const hostileModels of ['nope', [], null]) {
    test(`ADVERSARIAL: models=${JSON.stringify(hostileModels)} does not throw and falls back to "sonnet"`, () => {
      writeConfig(tmpDir, { models: hostileModels });
      assert.doesNotThrow(() => resolveTierInternal(tmpDir, 'msd-phase-researcher'));
      assert.strictEqual(resolveTierInternal(tmpDir, 'msd-phase-researcher'), 'sonnet');
    });
  }

  test('ADVERSARIAL: empty config object {} does not throw -> "sonnet"', () => {
    writeConfig(tmpDir, {});
    assert.doesNotThrow(() => resolveTierInternal(tmpDir, 'msd-phase-researcher'));
    assert.strictEqual(resolveTierInternal(tmpDir, 'msd-phase-researcher'), 'sonnet');
  });

  test('ADVERSARIAL: zero-byte config.json does not throw -> "sonnet"', () => {
    fs.writeFileSync(path.join(tmpDir, '.planning', 'config.json'), '', 'utf-8');
    assert.doesNotThrow(() => resolveTierInternal(tmpDir, 'msd-phase-researcher'));
    assert.strictEqual(resolveTierInternal(tmpDir, 'msd-phase-researcher'), 'sonnet');
  });
});

describe('#2229 resolveTierInternal — computeProfileTier is blind to model-id and profile-only checks', () => {
  let tmpDir;
  beforeEach(() => { tmpDir = makeTempProject(); });
  afterEach(() => { if (tmpDir) cleanup(tmpDir); tmpDir = null; });

  test('models.research="haiku" wins over model_profile=balanced (a profile-only check would miss this)', () => {
    writeConfig(tmpDir, { model_profile: 'balanced', models: { research: 'haiku' } });
    assert.strictEqual(resolveTierInternal(tmpDir, 'msd-phase-researcher'), 'haiku');
  });
});

// Regression (#3282): resolveTierFromConfig used to report only the PROFILE
// tier and ignore the model_policy preset step that resolveModelInternal
// applies afterward (its "2.5" step) — so a haiku-tier run under
// model_policy.budget:"low" reported tier "sonnet", silently defeating any
// tier-floor keyed on this value. These pin the fixed behavior: the reported
// tier and the resolved model must agree on which tier actually ran.
describe('#3282 resolveTierFromConfig mirrors resolveModelInternal step 2.5 (model_policy)', () => {
  let tmpDir;
  beforeEach(() => { tmpDir = makeTempProject(); });
  afterEach(() => { if (tmpDir) cleanup(tmpDir); tmpDir = null; });

  test('model_policy budget:low -> tier "haiku", agreeing with the resolved model', () => {
    writeConfig(tmpDir, { model_policy: { provider: 'anthropic', budget: 'low' } });
    assert.strictEqual(resolveTierInternal(tmpDir, 'msd-phase-researcher'), 'haiku');
    assert.strictEqual(resolveModelInternal(tmpDir, 'msd-phase-researcher'), 'haiku');
  });

  test('model_policy budget:high -> tier "opus", agreeing with the resolved model', () => {
    writeConfig(tmpDir, { model_policy: { provider: 'anthropic', budget: 'high' } });
    assert.strictEqual(resolveTierInternal(tmpDir, 'msd-phase-researcher'), 'opus');
    assert.strictEqual(resolveModelInternal(tmpDir, 'msd-phase-researcher'), 'opus');
  });

  test('model_policy budget:medium -> tier "sonnet"', () => {
    writeConfig(tmpDir, { model_policy: { provider: 'anthropic', budget: 'medium' } });
    assert.strictEqual(resolveTierInternal(tmpDir, 'msd-phase-researcher'), 'sonnet');
  });

  // Measured (2026-08-09): model_profile:"budget" gives msd-phase-researcher
  // a "haiku" profile tier, but model_policy.budget:"high" resolves the
  // anthropic "haiku" preset's high slot to "claude-sonnet-5" — the POLICY
  // outranks the PROFILE, so the actually-dispatched tier is "sonnet", not
  // the profile's "haiku". A profile-only reporter would under-report this.
  test('model_policy outranks model_profile: budget profile + policy budget:high -> tier "sonnet"', () => {
    writeConfig(tmpDir, { model_profile: 'budget', model_policy: { provider: 'anthropic', budget: 'high' } });
    assert.strictEqual(resolveTierInternal(tmpDir, 'msd-phase-researcher'), 'sonnet');
  });

  // Measured (2026-08-09): on a non-Claude runtime, resolveModelInternal
  // returns the policy-resolved model id VERBATIM (no Claude-alias mapping
  // is attempted) — "qwen3-coder-plus" carries no tier we can name. Must
  // report "unknown", never fall back to the profile tier ("balanced" ->
  // "sonnet" here), which would silently reintroduce the under-report.
  test('non-Claude runtime + model_policy resolving a verbatim model id -> tier "unknown"', () => {
    writeConfig(tmpDir, { runtime: 'qwen', model_policy: { provider: 'qwen', budget: 'medium' } });
    assert.strictEqual(resolveModelInternal(tmpDir, 'msd-phase-researcher'), 'qwen3-coder-plus');
    assert.strictEqual(resolveTierInternal(tmpDir, 'msd-phase-researcher'), 'unknown');
  });

  // "fable" is a real, reachable tier value (Claude Code's Agent tool accepts
  // it, and CLAUDE_POLICY_ID_TO_ALIAS maps "claude-fable-5" to it) — it is
  // NOT the budget tier and must NOT be floored by a budget-tier check.
  test('model_overrides pinning "fable" -> tier "fable", a valid non-floored tier', () => {
    writeConfig(tmpDir, { model_overrides: { 'msd-phase-researcher': 'fable' } });
    assert.strictEqual(resolveTierInternal(tmpDir, 'msd-phase-researcher'), 'fable');
  });
});

describe('#2229 resolveTierFromConfig — config-object form matches the cwd/CLI form', () => {
  // computeProfileTier itself is an internal (unexported) helper — per its own
  // doc comment, resolveTierFromConfig "calls straight back into it", so this
  // exercises the same code path through the public API.
  test('config-object form of the phase-type-override case matches the tmpDir form', () => {
    const cfg = { model_profile: 'balanced', models: { research: 'haiku' } };
    assert.strictEqual(resolveTierFromConfig(cfg, 'msd-phase-researcher'), 'haiku');
  });

  test('agent with no catalog entry and a non-inherit profile -> "unknown"', () => {
    assert.strictEqual(resolveTierFromConfig({ model_profile: 'balanced' }, 'not-a-real-agent'), 'unknown');
  });
});

describe('#2229 cmdResolveModel CLI — tier key, additive-output guard, unknown_agent', () => {
  let tmpDir;
  // Local require, matching the folded-block idiom elsewhere in this file:
  // the top-level imports only pull in `cleanup` from helpers.cjs.
  const { runMsdTools } = require('./helpers.cjs');

  beforeEach(() => { tmpDir = makeTempProject(); });
  afterEach(() => { if (tmpDir) cleanup(tmpDir); tmpDir = null; });

  test('model_profile=balanced + models.research=haiku -> tier "haiku", profile still "balanced"', () => {
    writeConfig(tmpDir, { model_profile: 'balanced', models: { research: 'haiku' } });
    const result = runMsdTools('resolve-model msd-phase-researcher', tmpDir);
    assert.ok(result.success, `resolve-model failed: ${result.error}`);
    const parsed = JSON.parse(result.output);
    assert.strictEqual(parsed.tier, 'haiku');
    assert.strictEqual(parsed.profile, 'balanced');
  });

  test('resolve_model_ids=omit -> tier "sonnet" even though model is blank', () => {
    writeConfig(tmpDir, { resolve_model_ids: 'omit' });
    const result = runMsdTools('resolve-model msd-phase-researcher', tmpDir);
    assert.ok(result.success, `resolve-model failed: ${result.error}`);
    const parsed = JSON.parse(result.output);
    assert.strictEqual(parsed.tier, 'sonnet');
    assert.strictEqual(parsed.model, '');
  });

  test('CORE CASE: resolve_model_ids=omit + models.research=haiku -> tier "haiku" though model is blank ' +
    'and profile alone would also miss it', () => {
    writeConfig(tmpDir, { resolve_model_ids: 'omit', models: { research: 'haiku' } });
    const result = runMsdTools('resolve-model msd-phase-researcher', tmpDir);
    assert.ok(result.success, `resolve-model failed: ${result.error}`);
    const parsed = JSON.parse(result.output);
    assert.strictEqual(parsed.tier, 'haiku');
    assert.strictEqual(parsed.model, '');
  });

  test('runtime=codex + model_profile=budget -> tier "haiku" even though the resolved model id ' +
    '("gpt-5.6-luna") contains no "haiku" substring', () => {
    writeConfig(tmpDir, { runtime: 'codex', model_profile: 'budget' });
    const result = runMsdTools('resolve-model msd-phase-researcher', tmpDir);
    assert.ok(result.success, `resolve-model failed: ${result.error}`);
    const parsed = JSON.parse(result.output);
    assert.strictEqual(parsed.tier, 'haiku');
    assert.strictEqual(parsed.model, 'gpt-5.6-luna');
  });

  test('unknown agent -> tier "unknown", unknown_agent:true still present', () => {
    writeConfig(tmpDir, {});
    const result = runMsdTools('resolve-model not-a-real-agent', tmpDir);
    assert.ok(result.success, `resolve-model failed: ${result.error}`);
    const parsed = JSON.parse(result.output);
    assert.strictEqual(parsed.tier, 'unknown');
    assert.strictEqual(parsed.unknown_agent, true);
  });

  // Regression: without the Object.hasOwn guard, model_overrides:"toString"
  // resolved a function-valued tier, and JSON.stringify silently DROPS a
  // function-valued object key — so `tier` disappeared from the parsed
  // output entirely rather than merely holding a wrong value. Asserting the
  // key's presence (not just its value) is what would have caught that.
  test('REGRESSION: model_overrides="toString" (prototype-chain key) -> parsed JSON still HAS a "tier" key, equal to "unknown"', () => {
    writeConfig(tmpDir, { model_overrides: { 'msd-phase-researcher': 'toString' } });
    const result = runMsdTools('resolve-model msd-phase-researcher', tmpDir);
    assert.ok(result.success, `resolve-model failed: ${result.error}`);
    const parsed = JSON.parse(result.output);
    assert.ok(Object.hasOwn(parsed, 'tier'), `expected a "tier" key in ${result.output}`);
    assert.strictEqual(parsed.tier, 'unknown');
  });

  test('--pick tier prints the bare string "sonnet" (no JSON, no quotes) for {}', () => {
    writeConfig(tmpDir, {});
    const result = runMsdTools(['resolve-model', 'msd-phase-researcher', '--pick', 'tier'], tmpDir);
    assert.ok(result.success, `resolve-model failed: ${result.error}`);
    assert.strictEqual(result.output, 'sonnet');
  });

  // Compatibility guard, not a tier test: pins that adding `tier` to
  // cmdResolveModel's output did not disturb the pre-existing
  // model/profile/effort keys that other consumers already parse.
  test('COMPATIBILITY GUARD: adding tier did not disturb model/profile/effort for {}', () => {
    writeConfig(tmpDir, {});
    const result = runMsdTools('resolve-model msd-phase-researcher', tmpDir);
    assert.ok(result.success, `resolve-model failed: ${result.error}`);
    const parsed = JSON.parse(result.output);
    assert.strictEqual(parsed.model, 'sonnet');
    assert.strictEqual(parsed.profile, 'balanced');
    assert.strictEqual(parsed.effort, 'high');
  });
});

describe('#2229 PARITY GUARD: catalog budget tier for msd-phase-researcher backs explore.md\'s tier-floor text', () => {
  test('MODEL_PROFILES["msd-phase-researcher"].budget === "haiku"', () => {
    // msd-core/workflows/explore.md's tier-floor text names "haiku" as this
    // agent's budget tier; if the catalog ever moves that tier, this test
    // fails instead of the floor silently ceasing to fire.
    const { MODEL_PROFILES } = require('../msd-core/bin/lib/model-profiles.cjs');
    assert.strictEqual(MODEL_PROFILES['msd-phase-researcher'].budget, 'haiku');
  });
});

describe('#2229 PROPERTY: resolveTierFromConfig never throws and always returns a known tier', () => {
  test('for arbitrary plain-object configs', () => {
    const fc = require('./helpers/fast-check-setup.cjs');
    const KNOWN_TIERS = new Set(['opus', 'sonnet', 'haiku', 'fable', 'inherit', 'unknown']);
    fc.assert(
      fc.property(fc.object(), (cfg) => {
        let result;
        assert.doesNotThrow(() => { result = resolveTierFromConfig(cfg, 'msd-phase-researcher'); });
        assert.ok(typeof result === 'string', `expected a string, got: ${JSON.stringify(result)}`);
        assert.ok(KNOWN_TIERS.has(result), `unexpected tier value: ${JSON.stringify(result)}`);
      })
    );
  });

  // Regression: the generic fc.object() generator above almost never produces
  // a prototype-chain string ("toString", "constructor", "__proto__",
  // "valueOf", "hasOwnProperty") as a model_overrides value, so it never
  // exercised the CLAUDE_POLICY_ID_TO_ALIAS own-property guard. This variant
  // pins model_overrides['msd-phase-researcher'] to a mix of those names and
  // arbitrary strings so the "always returns a known tier" invariant is
  // actually checked against the class of input that broke it.
  test('for configs whose model_overrides value may be a prototype-chain key', () => {
    const fc = require('./helpers/fast-check-setup.cjs');
    const KNOWN_TIERS = new Set(['opus', 'sonnet', 'haiku', 'fable', 'inherit', 'unknown']);
    const overrideArb = fc.oneof(
      fc.constantFrom('toString', 'constructor', '__proto__', 'valueOf', 'hasOwnProperty'),
      fc.string(),
    );
    fc.assert(
      fc.property(fc.object(), overrideArb, (baseCfg, overrideValue) => {
        const cfg = { ...baseCfg, model_overrides: { 'msd-phase-researcher': overrideValue } };
        let result;
        assert.doesNotThrow(() => { result = resolveTierFromConfig(cfg, 'msd-phase-researcher'); });
        assert.strictEqual(typeof result, 'string', `expected a string, got: ${typeof result} (${JSON.stringify(result)})`);
        assert.ok(KNOWN_TIERS.has(result), `unexpected tier value: ${JSON.stringify(result)}`);
      })
    );
  });
});
  });
}

// ────────────────────────────────────────────────────────────────────────
// Folded from tests/fix-2297-resolve-model-ids-runtime-scoping.test.cjs
// ────────────────────────────────────────────────────────────────────────
{
  const { describe: __foldDescribe } = require('node:test');
  __foldDescribe('folded:fix-2297-resolve-model-ids-runtime-scoping', () => {
/**
 * Bug #2297 — `resolve_model_ids:"omit"` must be scoped to the ACTIVE runtime,
 * not applied blindly whenever it appears anywhere in the merged config.
 *
 * Root cause (pre-fix): the installer writes `resolve_model_ids:"omit"` into
 * the SHARED `~/.msd/defaults.json` for every runtime that lacks native model
 * aliases (#1156). Because that file is machine-wide, installing a non-Claude
 * runtime (e.g. codex) on a box that also runs Claude poisoned Claude's
 * no-project resolution: Claude would see `resolve_model_ids:"omit"` in the
 * merged global defaults and return `''` instead of its tier aliases
 * (opus/sonnet/haiku), silently defeating Claude's adaptive tier distinction.
 *
 * Fix (`resolveModelInternal`): the `"omit"` branch now returns `''` ONLY
 * when either (a) the PROJECT's own `.planning/config.json` explicitly sets
 * `resolve_model_ids:"omit"` (user intent — #2517 finding #4, unchanged), or
 * (b) the ACTIVE runtime genuinely lacks native model aliases. A native-alias
 * runtime (currently only `claude`) ignores an `"omit"` that came solely from
 * the shared global defaults and falls through to its tier aliases.
 * Active-runtime precedence: `process.env.MSD_RUNTIME` -> `config.runtime` ->
 * per-install `.msd-runtime` marker -> `'claude'` (all canonicalized).
 *
 * #4717 (user-sanctioned decision a) ADDENDUM: with the runtime-identity fill
 * in config-loader, an empty `config.runtime` is materialized from
 * MSD_RUNTIME/the marker — so a genuinely installed non-Claude runtime now
 * counts as the opt-in and resolves its own tier map past a GLOBAL or
 * project omit. The #2297 Claude-protection cases are unchanged: a claude
 * runtime still ignores the shared omit, garbage runtime values still fail
 * safe to "", and an explicit project omit still applies when no runtime
 * identity is known.
 *
 * NOTE: the global-defaults merge path in config-loader.cjs (branch D: "no
 * .planning/ at all") only fires when the project dir has NO `.planning/`
 * whatsoever — the moment `.planning/` exists, `~/.msd/defaults.json` is not
 * merged for these fields at all. Group A below therefore uses bare
 * `fs.mkdtempSync` project dirs with no `.planning/` subdir; Group A #4,
 * Group B, and Group C need a real per-project config and create
 * `.planning/config.json`.
 */

'use strict';

const { describe, test, beforeEach, afterEach } = require('node:test');
const assert = require('node:assert/strict');
const fs = require('fs');
const os = require('os');
const path = require('path');

const {
  resolveModelInternal,
  _setInstallRuntimeMarkerForTests,
  _resetInstallRuntimeMarkerCacheForTests,
} = require('../msd-core/bin/lib/model-resolver.cjs');

const { isolateWorkstreamEnv, restoreWorkstreamEnv } = require('./helpers.cjs');

// HOME / MSD_HOME / MSD_RUNTIME isolation — config-loader.cjs reads global
// defaults from path.join(process.env.MSD_HOME || os.homedir(), '.msd', 'defaults.json').
// Isolate HOME and MSD_HOME to a fresh tmpdir per test, and save/restore
// MSD_RUNTIME (several tests set it directly to drive the active-runtime
// chain) plus MSD_WORKSTREAM/MSD_PROJECT via the shared helpers.cjs
// isolateWorkstreamEnv()/restoreWorkstreamEnv() pair (planningDir() reads both
// directly from process.env when its params are omitted, so an ambient value
// in a developer's shell could redirect projectExplicitlySetsOmit()'s reads).
let _origHome;
let _origUserProfile;
let _origMsdHome;
let _origMsdRuntime;
let _isolatedHome;

function isolateHome() {
  _origHome = process.env.HOME;
  _origUserProfile = process.env.USERPROFILE;
  _origMsdHome = process.env.MSD_HOME;
  _origMsdRuntime = process.env.MSD_RUNTIME;
  isolateWorkstreamEnv();
  _isolatedHome = fs.mkdtempSync(path.join(os.tmpdir(), 'msd-2297-home-'));
  process.env.HOME = _isolatedHome;
  // Windows resolves the home dir from USERPROFILE, not HOME.
  process.env.USERPROFILE = _isolatedHome;
  process.env.MSD_HOME = _isolatedHome;
  delete process.env.MSD_RUNTIME;
}

function restoreHome() {
  if (_origHome === undefined) delete process.env.HOME; else process.env.HOME = _origHome;
  if (_origUserProfile === undefined) delete process.env.USERPROFILE; else process.env.USERPROFILE = _origUserProfile;
  if (_origMsdHome === undefined) delete process.env.MSD_HOME; else process.env.MSD_HOME = _origMsdHome;
  if (_origMsdRuntime === undefined) delete process.env.MSD_RUNTIME; else process.env.MSD_RUNTIME = _origMsdRuntime;
  restoreWorkstreamEnv();
  rmDir(_isolatedHome);
  _isolatedHome = null;
}

function rmDir(dir) {
  if (typeof dir !== 'string' || dir.length === 0) return;
  // eslint-disable-next-line local/no-raw-rmsync-in-tests -- carries the same maxRetries/retryDelay budget as helpers.cleanup; used for both the isolated-home and bare project temp dirs
  fs.rmSync(dir, { recursive: true, force: true, maxRetries: 10, retryDelay: 50 });
}

function writeGlobalDefaults(obj) {
  fs.mkdirSync(path.join(_isolatedHome, '.msd'), { recursive: true });
  fs.writeFileSync(path.join(_isolatedHome, '.msd', 'defaults.json'), JSON.stringify(obj, null, 2));
}

// Bare project dir with NO .planning/ subdirectory — needed to exercise the
// config-loader's global-defaults merge branch (see header comment above).
function mkProjNoPlanning() {
  return fs.mkdtempSync(path.join(os.tmpdir(), 'msd-2297-proj-noplan-'));
}

// Project dir WITH a .planning/config.json — the normal "inside a project" path.
function mkProjWithConfig(obj) {
  const dir = fs.mkdtempSync(path.join(os.tmpdir(), 'msd-2297-proj-'));
  fs.mkdirSync(path.join(dir, '.planning'), { recursive: true });
  fs.writeFileSync(path.join(dir, '.planning', 'config.json'), JSON.stringify(obj, null, 2));
  return dir;
}

// ─── Group A: GLOBAL-defaults "omit" is runtime-scoped (the #2297 fix) ─────
describe('#2297: global-defaults resolve_model_ids:"omit" is scoped to the active runtime', () => {
  let projDir;
  beforeEach(() => { isolateHome(); projDir = null; });
  afterEach(() => { rmDir(projDir); restoreHome(); });

  test('no runtime signal defaults to claude: executor and planner get distinct non-empty tier aliases (acceptance #3)', () => {
    // Global defaults poison the shared file with "omit" (simulating a
    // non-Claude runtime having been installed on this machine). With no
    // .planning/config.json (no project) and no MSD_RUNTIME, the active
    // runtime falls back to 'claude', which has native aliases and must
    // ignore the poisoned global "omit" — the adaptive tier distinction
    // between executor (sonnet) and planner (opus) must survive.
    writeGlobalDefaults({ resolve_model_ids: 'omit' });
    projDir = mkProjNoPlanning();

    const executor = resolveModelInternal(projDir, 'msd-executor');
    const planner = resolveModelInternal(projDir, 'msd-planner');

    assert.strictEqual(executor, 'sonnet');
    assert.strictEqual(planner, 'opus');
    assert.notStrictEqual(executor, '');
    assert.notStrictEqual(planner, '');
    assert.notStrictEqual(executor, planner);
  });

  test('MSD_RUNTIME="claude" explicitly: executor still resolves to "sonnet" (claude ignores global omit)', () => {
    writeGlobalDefaults({ resolve_model_ids: 'omit' });
    projDir = mkProjNoPlanning();
    process.env.MSD_RUNTIME = 'claude';

    assert.strictEqual(resolveModelInternal(projDir, 'msd-executor'), 'sonnet');
  });

  test('MSD_RUNTIME="codex": the env-detected runtime opts into its tier map past the global omit (#4717 decision a)', () => {
    writeGlobalDefaults({ resolve_model_ids: 'omit' });
    projDir = mkProjNoPlanning();
    process.env.MSD_RUNTIME = 'codex';

    // #4717 (user-sanctioned semantics change): the fill materializes the env
    // runtime into config.runtime, and a recognised non-Claude runtime there
    // counts as an opt-in — the shared "omit" stays a Claude protection, not a
    // codex directive. Supersedes the #2297 acceptance-#4 reading for
    // detected runtimes.
    assert.strictEqual(resolveModelInternal(projDir, 'msd-executor'), 'gpt-5.6-terra');
  });

  // #2297 correctness-review BLOCKER: resolveActiveRuntime() must canonicalize
  // its candidates via resolveRuntimeNameFromCandidates before checking
  // RUNTIMES_WITH_NATIVE_ALIASES, or an alias/case variant of "claude" would
  // fail the Set('claude').has() check and wrongly fall through to honoring the
  // poisoned global omit. These would FAIL against a non-canonicalizing resolver.
  test('MSD_RUNTIME="claude-code" (alias, not canonical "claude"): executor and planner still ignore the global omit', () => {
    writeGlobalDefaults({ resolve_model_ids: 'omit' });
    projDir = mkProjNoPlanning();
    process.env.MSD_RUNTIME = 'claude-code';

    assert.strictEqual(resolveModelInternal(projDir, 'msd-executor'), 'sonnet');
    assert.strictEqual(resolveModelInternal(projDir, 'msd-planner'), 'opus');
  });

  test('MSD_RUNTIME="Claude" (case variant): executor still resolves to "sonnet" (canonicalization is case-insensitive)', () => {
    writeGlobalDefaults({ resolve_model_ids: 'omit' });
    projDir = mkProjNoPlanning();
    process.env.MSD_RUNTIME = 'Claude';

    assert.strictEqual(resolveModelInternal(projDir, 'msd-executor'), 'sonnet');
  });

  test('project config.runtime="codex" (no resolve_model_ids in project) takes precedence over MSD_RUNTIME/marker in the active-runtime chain', () => {
    // config.runtime is checked before MSD_RUNTIME / the install marker. This
    // scenario uses a REAL project (.planning/config.json present), so the
    // config-loader does NOT merge ~/.msd/defaults.json for resolve_model_ids
    // at all here (see header comment above) — resolution instead reaches the
    // #2517 runtime-tier path (step 3 in resolveModelInternal, which fires
    // before the omit gate) and returns codex's native sonnet-tier model id
    // directly, rather than the omit gate's ''. Verified empirically: the
    // built resolver returns 'gpt-5.6-terra', not ''. Assert it is non-empty
    // and NOT a claude alias, which is the property this test actually needs
    // to guarantee (config.runtime, not MSD_RUNTIME/env, drove the resolution).
    projDir = mkProjWithConfig({ runtime: 'codex' });
    writeGlobalDefaults({ resolve_model_ids: 'omit' }); // irrelevant: not merged when .planning/ exists

    const result = resolveModelInternal(projDir, 'msd-executor');
    assert.notStrictEqual(result, '');
    assert.ok(
      !['sonnet', 'opus', 'haiku'].includes(result),
      `expected a non-claude-alias result for config.runtime="codex", got ${JSON.stringify(result)}`
    );
  });

  test('install-order independence (acceptance #1/#2): a global omit poisoned by a prior non-Claude install does not affect Claude resolution, and Claude retains its adaptive tier distinction', () => {
    // Resolution depends on the RESOLVING runtime (active runtime at call
    // time), not on install order — installing codex (or any non-alias
    // runtime) before/after Claude must never change what Claude itself
    // resolves to. Global omit present, no project, no runtime signal ->
    // default 'claude' -> tier aliases survive. Distinct from the first Group A
    // test above: this asserts install-order independence AND, specifically,
    // that executor/planner remain DIFFERENT tiers under the poisoned global
    // omit — i.e. install order never collapses Claude's adaptive tier
    // distinction into a single omitted value.
    writeGlobalDefaults({ resolve_model_ids: 'omit' });
    projDir = mkProjNoPlanning();

    const executor = resolveModelInternal(projDir, 'msd-executor');
    const planner = resolveModelInternal(projDir, 'msd-planner');

    assert.strictEqual(executor, 'sonnet');
    assert.strictEqual(planner, 'opus');
    assert.notStrictEqual(executor, planner, 'install-order poisoning must not collapse the adaptive tier distinction');
  });
});

// ─── Group B: explicit PROJECT "omit" is still honored for EVERY runtime ───
// (#2517 finding #4 — preserved, NOT changed by #2297.)
describe('#2297: explicit project-level resolve_model_ids:"omit" is honored regardless of runtime', () => {
  let projDir;
  beforeEach(() => { isolateHome(); projDir = null; });
  afterEach(() => { rmDir(projDir); restoreHome(); });

  test('no runtime set, explicit project omit -> "" even though the default runtime is claude', () => {
    projDir = mkProjWithConfig({ resolve_model_ids: 'omit' });

    assert.strictEqual(resolveModelInternal(projDir, 'msd-planner'), '');
  });

  test('runtime:"claude" + explicit project omit -> "" (mirrors #2517 finding #4)', () => {
    projDir = mkProjWithConfig({ runtime: 'claude', resolve_model_ids: 'omit' });

    assert.strictEqual(resolveModelInternal(projDir, 'msd-planner'), '');
  });
});

// ─── Group B2: projectExplicitlySetsOmit is workstream-scope aware (#2297) ──
// The root .planning/config.json does NOT set resolve_model_ids, but the
// ACTIVE workstream's own config.json does — projectExplicitlySetsOmit()
// resolves via planningDir(cwd) (workstream layer wins over root, mirroring
// loadConfig's precedence), so the workstream's explicit "omit" must still be
// honored even though no global default and the default runtime (claude) would
// otherwise have returned a tier alias.
describe('#2297: explicit project-level "omit" is honored at the active-workstream config layer', () => {
  let projDir;
  let _origMsdWorkstreamForBlock;
  beforeEach(() => {
    isolateHome(); // clears MSD_WORKSTREAM/MSD_PROJECT as part of hermeticity
    projDir = null;
    _origMsdWorkstreamForBlock = process.env.MSD_WORKSTREAM;
  });
  afterEach(() => {
    if (_origMsdWorkstreamForBlock === undefined) delete process.env.MSD_WORKSTREAM;
    else process.env.MSD_WORKSTREAM = _origMsdWorkstreamForBlock;
    rmDir(projDir);
    restoreHome();
  });

  test('root config has no resolve_model_ids, but the active workstream config sets "omit" -> "" despite default runtime claude', () => {
    const ws = 'ws-alpha';
    projDir = fs.mkdtempSync(path.join(os.tmpdir(), 'msd-2297-proj-ws-'));
    fs.mkdirSync(path.join(projDir, '.planning'), { recursive: true });
    // Root config exists but does NOT set resolve_model_ids at all.
    fs.writeFileSync(
      path.join(projDir, '.planning', 'config.json'),
      JSON.stringify({ model_profile: 'balanced' }, null, 2)
    );
    // The active workstream's own config explicitly sets "omit".
    const wsConfigDir = path.join(projDir, '.planning', 'workstreams', ws);
    fs.mkdirSync(wsConfigDir, { recursive: true });
    fs.writeFileSync(
      path.join(wsConfigDir, 'config.json'),
      JSON.stringify({ resolve_model_ids: 'omit' }, null, 2)
    );
    process.env.MSD_WORKSTREAM = ws;

    assert.strictEqual(resolveModelInternal(projDir, 'msd-planner'), '');
  });
});

// ─── Group C: explicit `true` still materializes full model ids (acceptance #5) ──
describe('#2297: resolve_model_ids:true still materializes full Claude model ids', () => {
  let projDir;
  beforeEach(() => { isolateHome(); projDir = null; });
  afterEach(() => { rmDir(projDir); restoreHome(); });

  test('resolve_model_ids:true + balanced profile -> full materialized claude-opus-4-8 id', () => {
    projDir = mkProjWithConfig({ resolve_model_ids: true, model_profile: 'balanced' });

    assert.strictEqual(resolveModelInternal(projDir, 'msd-planner'), 'claude-opus-4-8');
  });
});

// ─── Group D: registry parity guard ─────────────────────────────────────────
describe('#2297: capability-registry nativeModelAliases parity guard', () => {
  test('exactly the runtimes with hostBehaviors.nativeModelAliases:true match RUNTIMES_WITH_NATIVE_ALIASES ([\'claude\'])', () => {
    // The model-resolver hardcodes RUNTIMES_WITH_NATIVE_ALIASES = new Set(['claude'])
    // rather than reading the registry at runtime. This test keeps that
    // hardcoded set honest against the generated registry's actual contract:
    // registry.runtimes[id].runtime.hostBehaviors.nativeModelAliases.
    // If a future runtime gains nativeModelAliases:true, this fails loudly so
    // RUNTIMES_WITH_NATIVE_ALIASES in model-resolver.cts is updated in lockstep.
    const registry = require('../msd-core/bin/lib/capability-registry.cjs');

    const nativeAliasRuntimes = Object.keys(registry.runtimes)
      .filter((id) => registry.runtimes[id]?.runtime?.hostBehaviors?.nativeModelAliases === true)
      .sort();

    assert.deepStrictEqual(nativeAliasRuntimes, ['claude']);
  });
});

// ─── Group E: installer writes the per-install .msd-runtime marker ─────────
describe('#2297: installer emits the msd-core/.msd-runtime marker (fixture parity)', () => {
  test('claude and codex install-tree fixtures both list msd-core/.msd-runtime', () => {
    // These fixtures are flat JSON arrays of install-relative paths, generated
    // by running the real installer (tests/fixtures/install-tree/*.json). Their
    // presence here proves the installer actually emits the per-install marker
    // that resolveActiveRuntime()'s precedence chain falls back to.
    const claudeFixturePath = path.join(__dirname, 'fixtures', 'install-tree', 'claude.json');
    const codexFixturePath = path.join(__dirname, 'fixtures', 'install-tree', 'codex.json');

    const claudeFixture = JSON.parse(fs.readFileSync(claudeFixturePath, 'utf8'));
    const codexFixture = JSON.parse(fs.readFileSync(codexFixturePath, 'utf8'));

    assert.ok(Array.isArray(claudeFixture), 'expected claude.json fixture to be a flat array of paths');
    assert.ok(Array.isArray(codexFixture), 'expected codex.json fixture to be a flat array of paths');

    assert.ok(
      claudeFixture.includes('msd-core/.msd-runtime'),
      'expected claude.json install-tree fixture to include msd-core/.msd-runtime'
    );
    assert.ok(
      codexFixture.includes('msd-core/.msd-runtime'),
      'expected codex.json install-tree fixture to include msd-core/.msd-runtime'
    );
  });
});

// ─── Group F: the install-marker precedence rung, driven directly (#2297) ──
// Previously untested: with no MSD_RUNTIME and no project config.runtime, the
// active runtime falls all the way through to the per-install .msd-runtime
// marker (third precedence rung). The dev/source tree has no real marker file,
// so these tests drive that rung directly via the _setInstallRuntimeMarkerForTests
// / _resetInstallRuntimeMarkerCacheForTests seams exported specifically for this
// purpose (#2297 correctness-review gap).
describe('#2297: install-marker precedence rung (MSD_RUNTIME and config.runtime both absent)', () => {
  let projDir;
  beforeEach(() => {
    isolateHome(); // also deletes MSD_RUNTIME
    projDir = null;
    // Belt-and-suspenders: the marker rung is only reached when MSD_RUNTIME and
    // config.runtime are both absent; isolateHome() already deletes MSD_RUNTIME.
    delete process.env.MSD_RUNTIME;
  });
  afterEach(() => {
    rmDir(projDir);
    restoreHome();
    // CRITICAL: reset the module-level marker cache after every case in this
    // block so a set value never leaks into a later case here, or into any
    // OTHER describe block in this file (readInstallRuntimeMarker() otherwise
    // memoizes the first value it sees for the lifetime of the process).
    _resetInstallRuntimeMarkerCacheForTests();
  });

  test('marker="codex" (non-alias runtime): the marker-detected runtime opts into its tier map (#4717 decision a)', () => {
    writeGlobalDefaults({ resolve_model_ids: 'omit' });
    projDir = mkProjNoPlanning();
    _setInstallRuntimeMarkerForTests('codex');

    // #4717 (decision a): the marker-filled runtime counts as opt-in.
    assert.strictEqual(resolveModelInternal(projDir, 'msd-executor'), 'gpt-5.6-terra');
  });

  test('marker="claude": ignores the poisoned global omit -> "sonnet"', () => {
    writeGlobalDefaults({ resolve_model_ids: 'omit' });
    projDir = mkProjNoPlanning();
    _setInstallRuntimeMarkerForTests('claude');

    assert.strictEqual(resolveModelInternal(projDir, 'msd-executor'), 'sonnet');
  });

  test('marker="claude-code" (alias): canonicalized to "claude" and still ignores the poisoned global omit -> "sonnet"', () => {
    writeGlobalDefaults({ resolve_model_ids: 'omit' });
    projDir = mkProjNoPlanning();
    _setInstallRuntimeMarkerForTests('claude-code');

    assert.strictEqual(resolveModelInternal(projDir, 'msd-executor'), 'sonnet');
  });

  test('marker unset (null): falls through to the "claude" default and ignores the poisoned global omit -> "sonnet"', () => {
    writeGlobalDefaults({ resolve_model_ids: 'omit' });
    projDir = mkProjNoPlanning();
    _setInstallRuntimeMarkerForTests(null);

    assert.strictEqual(resolveModelInternal(projDir, 'msd-executor'), 'sonnet');
  });
});
  });
}

// ────────────────────────────────────────────────────────────────────────
// Folded from tests/issue-2517-runtime-aware-profiles.test.cjs (H3 Wave 7,
// issue #3339). 1 of 80 source test blocks ('resolveTierEntry helper: unknown
// runtime + no overrides -> null', runtime:'mystery') was dropped as a verified
// duplicate of the pre-existing test at line 525 ('unknown runtime + unknown
// tier, no overrides -> null') — same resolveTierEntry null-return assertion
// for an unknown runtime with no overrides.
// ────────────────────────────────────────────────────────────────────────
{
  const { describe: __foldDescribe } = require('node:test');
  __foldDescribe('folded:issue-2517-runtime-aware-profiles', () => {
/**
 * Issue #2517 — runtime-aware model profile resolution.
 *
 * Today, profile tiers (opus/sonnet/haiku) only resolve to Claude IDs. On Codex /
 * other runtimes, users must use `inherit` or write large `model_overrides` blocks.
 *
 * This adds a `runtime` config key + `model_profile_overrides[runtime][tier]` map.
 * When `runtime` is set to a non-Claude value, profile tiers resolve to runtime-
 * native model IDs.
 *
 *   Codex:   opus -> gpt-5.6-sol (xhigh), sonnet -> gpt-5.6-terra (medium), haiku -> gpt-5.6-luna (medium)
 *
 * `runtime: "claude"` is the implicit default and is treated as a no-op for
 * resolution — it does not override `resolve_model_ids: "omit"` or any other
 * Claude-native semantics (review finding #4).
 *
 * `inherit` keeps current behavior. Unknown runtimes fall back safely (do NOT emit
 * provider-specific IDs the runtime can't accept) and trigger a one-shot stderr
 * warning so typos like `runtime: "codx"` surface immediately (review finding #13).
 *
 * HOME isolation: every test sets `process.env.HOME` to a per-suite tmpdir so the
 * developer's real `~/.msd/defaults.json` cannot bleed into assertions
 * (review finding #8 / pattern from CodeRabbit on PRs #2603, #2604).
 */

'use strict';

const { describe, test, beforeEach, afterEach } = require('node:test');
const assert = require('node:assert/strict');
const fs = require('fs');
const os = require('os');
const path = require('path');
const { createTempProject, cleanup, resetRuntimeWarningCaches } = require('./helpers.cjs');

const {
  resolveModelInternal,
  resolveEffortInternal,
  resolveTierEntry,
} = require('../msd-core/bin/lib/model-resolver.cjs');
const {
  RUNTIME_PROFILE_MAP,
  KNOWN_RUNTIMES,
} = require('../msd-core/bin/lib/model-catalog.cjs');
const { renderEffortForRuntime } = require('../msd-core/bin/lib/model-catalog.cjs');
const { isValidConfigKey } = require('../msd-core/bin/lib/config-schema.cjs');

function writeConfig(tmpDir, obj) {
  fs.writeFileSync(
    path.join(tmpDir, '.planning', 'config.json'),
    JSON.stringify(obj, null, 2)
  );
}

// ─── Shared HOME isolation (#2517 review finding #8) ────────────────────────
// Without this, a developer's real `~/.msd/defaults.json` (e.g. one with
// `runtime: codex` set) silently overrides test assertions about back-compat
// behavior. Capture HOME, point it at an isolated tmpdir for the duration of
// each test, restore on teardown.
let _origHome;
let _origUserProfile;
let _origMsdHome;
let _isolatedHome;
function isolateHome() {
  _origHome = process.env.HOME;
  _origUserProfile = process.env.USERPROFILE;
  _origMsdHome = process.env.MSD_HOME;
  _isolatedHome = fs.mkdtempSync(path.join(os.tmpdir(), 'msd-home-iso-'));
  process.env.HOME = _isolatedHome;
  process.env.USERPROFILE = _isolatedHome;
  process.env.MSD_HOME = _isolatedHome;
}
function restoreHome() {
  if (_origHome === undefined) delete process.env.HOME; else process.env.HOME = _origHome;
  if (_origUserProfile === undefined) delete process.env.USERPROFILE; else process.env.USERPROFILE = _origUserProfile;
  if (_origMsdHome === undefined) delete process.env.MSD_HOME; else process.env.MSD_HOME = _origMsdHome;
  cleanup(_isolatedHome);
  _isolatedHome = null;
}

// ─── Backwards compatibility — no `runtime` set ─────────────────────────────
describe('issue #2517: backwards compat — no runtime key set', () => {
  let tmpDir;
  beforeEach(() => { isolateHome(); tmpDir = createTempProject(); resetRuntimeWarningCaches(); });
  afterEach(() => { cleanup(tmpDir); restoreHome(); });

  test('balanced profile returns Claude alias when runtime absent', () => {
    writeConfig(tmpDir, { model_profile: 'balanced' });
    // msd-planner balanced -> opus
    assert.strictEqual(resolveModelInternal(tmpDir, 'msd-planner'), 'opus');
  });

  test('inherit profile still returns "inherit" with no runtime', () => {
    writeConfig(tmpDir, { model_profile: 'inherit' });
    assert.strictEqual(resolveModelInternal(tmpDir, 'msd-planner'), 'inherit');
  });

  test('resolve_model_ids:true still maps alias -> full Claude ID with no runtime', () => {
    writeConfig(tmpDir, { model_profile: 'balanced', resolve_model_ids: true });
    assert.strictEqual(resolveModelInternal(tmpDir, 'msd-planner'), 'claude-opus-4-8');
  });

  test('resolve_model_ids:"omit" still returns "" with no runtime', () => {
    writeConfig(tmpDir, { model_profile: 'balanced', resolve_model_ids: 'omit' });
    assert.strictEqual(resolveModelInternal(tmpDir, 'msd-planner'), '');
  });

  test('effort resolves universally but render param is null when runtime absent', () => {
    writeConfig(tmpDir, { model_profile: 'balanced' });
    const eff = resolveEffortInternal(tmpDir, 'msd-planner');
    // Effort always resolves (universal); rendering without a runtime yields no wire param.
    const rendered = renderEffortForRuntime(undefined, eff);
    assert.strictEqual(rendered.param, null);
  });

  test('adaptive profile still works without runtime (#1713/#1806)', () => {
    writeConfig(tmpDir, { model_profile: 'adaptive' });
    assert.strictEqual(resolveModelInternal(tmpDir, 'msd-planner'), 'opus');
    assert.strictEqual(resolveModelInternal(tmpDir, 'msd-codebase-mapper'), 'haiku');
  });
});

// ─── runtime: "claude" — no-op (preserves Claude-native semantics) ──────────
describe('issue #2517: runtime "claude" is a no-op for resolution (finding #4)', () => {
  let tmpDir;
  beforeEach(() => { isolateHome(); tmpDir = createTempProject(); resetRuntimeWarningCaches(); });
  afterEach(() => { cleanup(tmpDir); restoreHome(); });

  test('runtime:"claude" + balanced returns the alias, not the resolved Claude ID', () => {
    // `runtime: "claude"` is the implicit default — it must not silently flip
    // resolve_model_ids on. The alias passes through identically to the unset case.
    writeConfig(tmpDir, { runtime: 'claude', model_profile: 'balanced' });
    assert.strictEqual(resolveModelInternal(tmpDir, 'msd-planner'), 'opus');
  });

  test('runtime:"claude" + resolve_model_ids:"omit" returns "" (finding #4 regression)', () => {
    // The pre-fix bug: runtime:"claude" hijacked the resolution chain and
    // returned the resolved Claude ID even when the user explicitly asked for the
    // omit semantics.
    writeConfig(tmpDir, {
      runtime: 'claude',
      model_profile: 'quality',
      resolve_model_ids: 'omit',
    });
    assert.strictEqual(resolveModelInternal(tmpDir, 'msd-planner'), '');
  });

  test('runtime:"claude" + resolve_model_ids:true maps alias -> full Claude ID', () => {
    writeConfig(tmpDir, {
      runtime: 'claude',
      model_profile: 'quality',
      resolve_model_ids: true,
    });
    assert.strictEqual(resolveModelInternal(tmpDir, 'msd-planner'), 'claude-opus-4-8');
  });

  test('effort is first-class on Claude (emits output_config.effort)', () => {
    writeConfig(tmpDir, { runtime: 'claude', model_profile: 'quality' });
    // Under unification, Claude effort is first-class — rendered via output_config.effort.
    const eff = resolveEffortInternal(tmpDir, 'msd-planner');
    const rendered = renderEffortForRuntime('claude', eff);
    assert.strictEqual(rendered.param, 'output_config.effort');
    // msd-planner is heavy tier → default effort 'xhigh'
    assert.strictEqual(rendered.value, 'xhigh');
  });
});

// ─── runtime: "codex" — resolves tiers to Codex IDs + reasoning_effort ──────
describe('issue #2517: runtime "codex" — Codex tier resolution', () => {
  let tmpDir;
  beforeEach(() => { isolateHome(); tmpDir = createTempProject(); resetRuntimeWarningCaches(); });
  afterEach(() => { cleanup(tmpDir); restoreHome(); });

  test('opus tier -> gpt-5.6-sol model; heavy-tier agent -> xhigh effort on codex', () => {
    writeConfig(tmpDir, { runtime: 'codex', model_profile: 'quality' });
    // msd-planner quality -> opus -> gpt-5.6-sol (model unchanged)
    assert.strictEqual(resolveModelInternal(tmpDir, 'msd-planner'), 'gpt-5.6-sol');
    // msd-planner is heavy routing tier → effort 'xhigh' → rendered model_reasoning_effort
    const eff = resolveEffortInternal(tmpDir, 'msd-planner');
    const rendered = renderEffortForRuntime('codex', eff);
    assert.strictEqual(rendered.param, 'model_reasoning_effort');
    assert.strictEqual(rendered.value, 'xhigh');
  });

  test('sonnet tier -> gpt-5.6-terra model; heavy-tier agent -> xhigh effort on codex', () => {
    writeConfig(tmpDir, { runtime: 'codex', model_profile: 'balanced' });
    assert.strictEqual(resolveModelInternal(tmpDir, 'msd-roadmapper'), 'gpt-5.6-terra');
    // msd-roadmapper is heavy routing tier → effort 'xhigh' (not catalog medium)
    const eff = resolveEffortInternal(tmpDir, 'msd-roadmapper');
    const rendered = renderEffortForRuntime('codex', eff);
    assert.strictEqual(rendered.param, 'model_reasoning_effort');
    assert.strictEqual(rendered.value, 'xhigh');
  });

  test('haiku tier -> gpt-5.6-luna model; light-tier agent -> low effort on codex', () => {
    writeConfig(tmpDir, { runtime: 'codex', model_profile: 'budget' });
    assert.strictEqual(resolveModelInternal(tmpDir, 'msd-codebase-mapper'), 'gpt-5.6-luna');
    // msd-codebase-mapper is light routing tier → effort 'low' (not catalog medium)
    const eff = resolveEffortInternal(tmpDir, 'msd-codebase-mapper');
    const rendered = renderEffortForRuntime('codex', eff);
    assert.strictEqual(rendered.param, 'model_reasoning_effort');
    assert.strictEqual(rendered.value, 'low');
  });

  test('adaptive profile resolves on Codex (no #1713/#1806 regression)', () => {
    writeConfig(tmpDir, { runtime: 'codex', model_profile: 'adaptive' });
    // msd-planner adaptive -> opus -> gpt-5.6-sol
    assert.strictEqual(resolveModelInternal(tmpDir, 'msd-planner'), 'gpt-5.6-sol');
    // msd-codebase-mapper adaptive -> haiku -> gpt-5.6-luna
    assert.strictEqual(resolveModelInternal(tmpDir, 'msd-codebase-mapper'), 'gpt-5.6-luna');
  });

  test('inherit profile still returns "inherit" on Codex; effort still resolves universally', () => {
    writeConfig(tmpDir, { runtime: 'codex', model_profile: 'inherit' });
    assert.strictEqual(resolveModelInternal(tmpDir, 'msd-planner'), 'inherit');
    // Unified effort is config-driven (routing_tier_defaults), independent of model_profile.
    // msd-planner (heavy tier) → 'xhigh'; rendered to codex param.
    const eff = resolveEffortInternal(tmpDir, 'msd-planner');
    const rendered = renderEffortForRuntime('codex', eff);
    assert.strictEqual(rendered.param, 'model_reasoning_effort');
    assert.strictEqual(rendered.value, 'xhigh');
  });

  test('runtime:"codex" beats resolve_model_ids:"omit" (explicit non-Claude opt-in wins)', () => {
    writeConfig(tmpDir, {
      runtime: 'codex',
      model_profile: 'quality',
      resolve_model_ids: 'omit',
    });
    assert.strictEqual(resolveModelInternal(tmpDir, 'msd-planner'), 'gpt-5.6-sol');
  });
});

// ─── Precedence chain ───────────────────────────────────────────────────────
describe('issue #2517: precedence chain', () => {
  let tmpDir;
  beforeEach(() => { isolateHome(); tmpDir = createTempProject(); resetRuntimeWarningCaches(); });
  afterEach(() => { cleanup(tmpDir); restoreHome(); });

  test('per-agent model_overrides wins over runtime tier resolution', () => {
    writeConfig(tmpDir, {
      runtime: 'codex',
      model_profile: 'quality',
      model_overrides: { 'msd-planner': 'gpt-5.6-luna' },
    });
    assert.strictEqual(resolveModelInternal(tmpDir, 'msd-planner'), 'gpt-5.6-luna');
  });

  test('model_profile_overrides[runtime][tier] beats built-in defaults', () => {
    writeConfig(tmpDir, {
      runtime: 'codex',
      model_profile: 'quality',
      model_profile_overrides: {
        codex: { opus: 'gpt-5-pro' },
      },
    });
    // msd-planner quality -> opus -> overridden to gpt-5-pro
    assert.strictEqual(resolveModelInternal(tmpDir, 'msd-planner'), 'gpt-5-pro');
    // msd-codebase-mapper quality -> sonnet -> gpt-5.6-terra
    assert.strictEqual(resolveModelInternal(tmpDir, 'msd-codebase-mapper'), 'gpt-5.6-terra');
  });

  test('partial profile_overrides — only opus overridden, sonnet uses default', () => {
    writeConfig(tmpDir, {
      runtime: 'codex',
      model_profile: 'balanced',
      model_profile_overrides: {
        codex: { opus: 'gpt-5-pro' }, // only opus overridden
      },
    });
    // msd-planner balanced -> opus -> overridden to gpt-5-pro
    assert.strictEqual(resolveModelInternal(tmpDir, 'msd-planner'), 'gpt-5-pro');
    // msd-roadmapper balanced -> sonnet -> spec default
    assert.strictEqual(resolveModelInternal(tmpDir, 'msd-roadmapper'), 'gpt-5.6-terra');
  });

  test('per-agent override beats profile override beats default', () => {
    writeConfig(tmpDir, {
      runtime: 'codex',
      model_profile: 'quality',
      model_profile_overrides: { codex: { opus: 'gpt-5-pro' } },
      model_overrides: { 'msd-planner': 'custom-model' },
    });
    assert.strictEqual(resolveModelInternal(tmpDir, 'msd-planner'), 'custom-model');
  });
});

// ─── Field-merge semantics — review findings #2 ─────────────────────────────
describe('issue #2517: field-merge of overrides with built-in defaults (finding #2)', () => {
  let tmpDir;
  beforeEach(() => { isolateHome(); tmpDir = createTempProject(); resetRuntimeWarningCaches(); });
  afterEach(() => { cleanup(tmpDir); restoreHome(); });

  test('string-shorthand override: model is overridden; unified effort derives from routing tier', () => {
    // `{ codex: { opus: "gpt-5-pro" } }` is the documented shorthand.
    // Model is overridden to gpt-5-pro; effort now derives from the universal
    // config-driven path (msd-planner heavy tier → 'xhigh'), not from the catalog.
    writeConfig(tmpDir, {
      runtime: 'codex',
      model_profile: 'quality',
      model_profile_overrides: { codex: { opus: 'gpt-5-pro' } },
    });
    assert.strictEqual(resolveModelInternal(tmpDir, 'msd-planner'), 'gpt-5-pro');
    const eff = resolveEffortInternal(tmpDir, 'msd-planner');
    const rendered = renderEffortForRuntime('codex', eff);
    assert.strictEqual(rendered.param, 'model_reasoning_effort');
    assert.strictEqual(rendered.value, 'xhigh');
  });

  test('partial-object override (no model) keeps model from built-in; unified effort from routing tier', () => {
    // `{ codex: { opus: { reasoning_effort: "low" } } }` preserves the built-in model.
    // Under unification, the catalog reasoning_effort field is not read for effort resolution;
    // effort comes from routing_tier_defaults (msd-planner heavy → 'xhigh').
    writeConfig(tmpDir, {
      runtime: 'codex',
      model_profile: 'quality',
      model_profile_overrides: { codex: { opus: { reasoning_effort: 'low' } } },
    });
    assert.strictEqual(resolveModelInternal(tmpDir, 'msd-planner'), 'gpt-5.6-sol');
    const eff = resolveEffortInternal(tmpDir, 'msd-planner');
    const rendered = renderEffortForRuntime('codex', eff);
    assert.strictEqual(rendered.param, 'model_reasoning_effort');
    assert.strictEqual(rendered.value, 'xhigh');
  });

  test('full-object override: model replaced; unified effort from routing tier (not catalog field)', () => {
    writeConfig(tmpDir, {
      runtime: 'codex',
      model_profile: 'quality',
      model_profile_overrides: {
        codex: { opus: { model: 'custom-model', reasoning_effort: 'minimal' } },
      },
    });
    assert.strictEqual(resolveModelInternal(tmpDir, 'msd-planner'), 'custom-model');
    // Effort comes from routing_tier_defaults, not the catalog 'minimal' field.
    const eff = resolveEffortInternal(tmpDir, 'msd-planner');
    const rendered = renderEffortForRuntime('codex', eff);
    assert.strictEqual(rendered.param, 'model_reasoning_effort');
    assert.strictEqual(rendered.value, 'xhigh');
  });

  test('resolveTierEntry helper: shorthand merge', () => {
    // Direct unit-test of the shared helper used by core + install.js.
    const entry = resolveTierEntry({
      runtime: 'codex',
      tier: 'opus',
      overrides: { codex: { opus: 'gpt-5-pro' } },
    });
    assert.deepStrictEqual(entry, { model: 'gpt-5-pro', reasoning_effort: 'xhigh' });
  });

  test('resolveTierEntry helper: partial-object merge keeps built-in model', () => {
    const entry = resolveTierEntry({
      runtime: 'codex',
      tier: 'opus',
      overrides: { codex: { opus: { reasoning_effort: 'low' } } },
    });
    assert.deepStrictEqual(entry, { model: 'gpt-5.6-sol', reasoning_effort: 'low' });
  });
});

// ─── Unknown runtime render safety (finding #3 spirit) ──────────────────────
describe('issue #2517: unknown runtime render param is null (effort does not leak to install path)', () => {
  let tmpDir;
  beforeEach(() => { isolateHome(); tmpDir = createTempProject(); resetRuntimeWarningCaches(); });
  afterEach(() => { cleanup(tmpDir); restoreHome(); });

  test('unknown runtime: model resolves via override; render param is null (no wire param leaked)', () => {
    // Under unification, effort always resolves (universal), but renderEffortForRuntime
    // returns param=null for unknown runtimes — no effort leaks to the install path.
    writeConfig(tmpDir, {
      runtime: 'mystery',
      model_profile: 'quality',
      model_profile_overrides: {
        mystery: { opus: { model: 'mystery-opus', reasoning_effort: 'xhigh' } },
      },
    });
    // Model still resolves (overrides are honored).
    assert.strictEqual(resolveModelInternal(tmpDir, 'msd-planner'), 'mystery-opus');
    // Effort resolves universally but the unknown runtime has no wire param.
    const eff = resolveEffortInternal(tmpDir, 'msd-planner');
    const rendered = renderEffortForRuntime('mystery', eff);
    assert.strictEqual(rendered.param, null);
  });

  test('typo runtime "codx": render param is null (no leak into install path)', () => {
    writeConfig(tmpDir, {
      runtime: 'codx',
      model_profile: 'quality',
      model_profile_overrides: { codx: { opus: { model: 'gpt-5.6-terra', reasoning_effort: 'xhigh' } } },
    });
    const eff = resolveEffortInternal(tmpDir, 'msd-planner');
    const rendered = renderEffortForRuntime('codx', eff);
    assert.strictEqual(rendered.param, null);
  });
});

// ─── Unknown runtime / unknown tier ─────────────────────────────────────────
describe('issue #2517: unknown runtime + safe fallback', () => {
  let tmpDir;
  beforeEach(() => { isolateHome(); tmpDir = createTempProject(); resetRuntimeWarningCaches(); });
  afterEach(() => { cleanup(tmpDir); restoreHome(); });

  test('unknown runtime falls back to Claude-alias safe default (no Codex IDs leaked)', () => {
    writeConfig(tmpDir, { runtime: 'mystery-runtime', model_profile: 'quality' });
    // Should NOT emit gpt-5.6-sol — should fall back to Claude alias
    const resolved = resolveModelInternal(tmpDir, 'msd-planner');
    assert.notStrictEqual(resolved, 'gpt-5.6-sol');
    assert.strictEqual(resolved, 'opus');
  });

  test('unknown runtime + user-provided overrides for that runtime — uses overrides', () => {
    writeConfig(tmpDir, {
      runtime: 'mystery-runtime',
      model_profile: 'quality',
      model_profile_overrides: {
        'mystery-runtime': { opus: 'mystery-opus' },
      },
    });
    assert.strictEqual(resolveModelInternal(tmpDir, 'msd-planner'), 'mystery-opus');
  });

  test('runtime:"codex" but missing model_profile_overrides[codex] uses spec defaults', () => {
    writeConfig(tmpDir, { runtime: 'codex', model_profile: 'quality' });
    // No model_profile_overrides at all — built-in Codex defaults take over
    assert.strictEqual(resolveModelInternal(tmpDir, 'msd-planner'), 'gpt-5.6-sol');
  });
});

// ─── Schema validation (config-set time + load time) ────────────────────────
describe('issue #2517: VALID_CONFIG_KEYS schema', () => {
  test('"runtime" is a valid config key', () => {
    assert.strictEqual(isValidConfigKey('runtime'), true);
  });

  test('model_profile_overrides.codex.opus is valid', () => {
    assert.strictEqual(isValidConfigKey('model_profile_overrides.codex.opus'), true);
  });

  test('model_profile_overrides.codex.sonnet is valid', () => {
    assert.strictEqual(isValidConfigKey('model_profile_overrides.codex.sonnet'), true);
  });

  test('model_profile_overrides.codex.haiku is valid', () => {
    assert.strictEqual(isValidConfigKey('model_profile_overrides.codex.haiku'), true);
  });

  test('model_profile_overrides.claude.opus is valid', () => {
    assert.strictEqual(isValidConfigKey('model_profile_overrides.claude.opus'), true);
  });

  test('model_profile_overrides with unknown runtime is valid (free-string runtime)', () => {
    assert.strictEqual(isValidConfigKey('model_profile_overrides.acme.opus'), true);
  });

  test('model_profile_overrides with bogus tier is rejected', () => {
    assert.strictEqual(isValidConfigKey('model_profile_overrides.codex.banana'), false);
  });

  test('model_profile_overrides without tier is rejected', () => {
    assert.strictEqual(isValidConfigKey('model_profile_overrides.codex'), false);
  });

  test('model_profile_overrides root key alone is rejected (must include runtime+tier)', () => {
    assert.strictEqual(isValidConfigKey('model_profile_overrides'), false);
  });
});

// ─── loadConfig validation warnings (review findings #10, #13) ──────────────
describe('issue #2517: loadConfig warns on unknown runtime/tier (findings #10, #13)', () => {
  const { loadConfig } = require('../msd-core/bin/lib/config-loader.cjs');
  let tmpDir;
  let origWrite;
  let captured;
  beforeEach(() => {
    isolateHome();
    tmpDir = createTempProject();
    resetRuntimeWarningCaches();
    captured = [];
    origWrite = process.stderr.write.bind(process.stderr);
    process.stderr.write = (chunk) => { captured.push(String(chunk)); return true; };
  });
  afterEach(() => { process.stderr.write = origWrite; cleanup(tmpDir); restoreHome(); });

  test('unknown runtime triggers a stderr warning', () => {
    writeConfig(tmpDir, { runtime: 'codx', model_profile: 'quality' });
    loadConfig(tmpDir);
    const joined = captured.join('');
    assert.match(joined, /unknown value "codx"/);
  });

  test('known runtime does NOT trigger a runtime warning', () => {
    writeConfig(tmpDir, { runtime: 'codex', model_profile: 'quality' });
    loadConfig(tmpDir);
    const joined = captured.join('');
    assert.doesNotMatch(joined, /unknown value/);
  });

  test('unknown tier in overrides triggers a stderr warning', () => {
    writeConfig(tmpDir, {
      runtime: 'codex',
      model_profile_overrides: { codex: { banana: 'whatever' } },
    });
    loadConfig(tmpDir);
    const joined = captured.join('');
    assert.match(joined, /unknown tier "banana"/);
  });

  test('unknown runtime in overrides triggers a stderr warning', () => {
    writeConfig(tmpDir, {
      runtime: 'codex',
      model_profile_overrides: { mystery: { opus: 'whatever' } },
    });
    loadConfig(tmpDir);
    const joined = captured.join('');
    assert.match(joined, /model_profile_overrides\.mystery\.\* uses unknown runtime/);
  });

  test('every name in KNOWN_RUNTIMES survives the warning gate', () => {
    // Smoke check: `KNOWN_RUNTIMES` must list every runtime `bin/install.js`
    // emits for, otherwise legitimate users get spammed at every loadConfig.
    for (const r of KNOWN_RUNTIMES) {
      assert.ok(typeof r === 'string' && r.length > 0);
    }
  });
});

// ─── End-to-end: per-project config -> Codex TOML emit (finding #1) ─────────
describe('issue #2517: install end-to-end — per-project config reaches Codex TOML (finding #1)', () => {
  // Load install.js in test-mode so its module exports are populated.
  const prevTestMode = process.env.MSD_TEST_MODE;
  process.env.MSD_TEST_MODE = '1';
  const installMod = require('../bin/install.js');
  const { readMsdRuntimeProfileResolver } = require('../msd-core/bin/lib/install-model-override-resolver.cjs');
  if (prevTestMode === undefined) delete process.env.MSD_TEST_MODE;
  else process.env.MSD_TEST_MODE = prevTestMode;
  const { generateCodexAgentToml } = installMod;

  let tmpDir;
  beforeEach(() => { isolateHome(); tmpDir = createTempProject(); resetRuntimeWarningCaches(); });
  afterEach(() => { cleanup(tmpDir); restoreHome(); });

  test('readMsdRuntimeProfileResolver picks up runtime from .planning/config.json', () => {
    // No ~/.msd/defaults.json (HOME is isolated tmpdir). Per-project config alone
    // must drive the resolver — pre-fix, it returned null.
    writeConfig(tmpDir, { runtime: 'codex', model_profile: 'quality' });
    const resolver = readMsdRuntimeProfileResolver(tmpDir);
    assert.ok(resolver, 'expected a resolver from per-project config');
    assert.strictEqual(resolver.runtime, 'codex');
    const entry = resolver.resolve('msd-planner');
    assert.deepStrictEqual(entry, { model: 'gpt-5.6-sol', reasoning_effort: 'xhigh' });
  });

  test('per-project config wins over global ~/.msd/defaults.json', () => {
    fs.mkdirSync(path.join(_isolatedHome, '.msd'), { recursive: true });
    fs.writeFileSync(
      path.join(_isolatedHome, '.msd', 'defaults.json'),
      JSON.stringify({ runtime: 'claude', model_profile: 'budget' })
    );
    writeConfig(tmpDir, { runtime: 'codex', model_profile: 'quality' });
    const resolver = readMsdRuntimeProfileResolver(tmpDir);
    assert.strictEqual(resolver.runtime, 'codex');
    const entry = resolver.resolve('msd-planner');
    assert.strictEqual(entry.model, 'gpt-5.6-sol');
  });

  test('generated Codex TOML omits model = and model_reasoning_effort = lines when only the resolver would have supplied them (#3241)', () => {
    // #3241 flips this: the runtime-resolver auto-embed (D1) was removed, so a
    // resolver alone with no explicit model_overrides no longer pins a model,
    // and #838's coupling means the reasoning-effort line is omitted too.
    writeConfig(tmpDir, { runtime: 'codex', model_profile: 'quality' });
    const resolver = readMsdRuntimeProfileResolver(tmpDir);
    const toml = generateCodexAgentToml(
      'msd-planner',
      '---\nname: msd-planner\ndescription: Planner agent\n---\nBody.\n',
      null,
      resolver
    );
    assert.doesNotMatch(toml, /^model = "gpt-5\.6-sol"$/m);
    assert.doesNotMatch(toml, /^model_reasoning_effort = "xhigh"$/m);
  });

  test('generated TOML always includes model_reasoning_effort even when model_profile_overrides sets reasoning_effort to empty (#443 unified) (#3241: model now pinned via explicit model_overrides, not the resolver alone)', () => {
    // Under the unified effort design (#443), model_reasoning_effort in the Codex TOML
    // is driven by the unified effort resolver (resolveInstallTimeEffort / effortCfg),
    // NOT by model_profile_overrides.reasoning_effort. Setting reasoning_effort: '' in
    // model_profile_overrides does NOT suppress the unified effort when a model IS
    // pinned — the TOML carries a valid model_reasoning_effort drawn from the agent's
    // routing tier.
    // #3241: the resolver alone no longer pins a model (D1), so this test now supplies
    // an explicit model_overrides pin ('custom', a real-looking Codex id — row 4,
    // "unchanged") to keep exercising the unrelated property under test: that
    // model_profile_overrides.reasoning_effort is ignored by the unified resolver.
    // msd-planner is a heavy-tier agent → unified default resolves to "xhigh".
    writeConfig(tmpDir, {
      runtime: 'codex',
      model_profile: 'quality',
      model_profile_overrides: { codex: { opus: { model: 'custom', reasoning_effort: '' } } },
    });
    const resolver = readMsdRuntimeProfileResolver(tmpDir);
    const toml = generateCodexAgentToml(
      'msd-planner',
      '---\nname: msd-planner\n---\nBody.\n',
      { 'msd-planner': 'custom' },
      resolver
    );
    // Explicit model_overrides pin is respected (#3241 row 4 — unchanged).
    assert.match(toml, /^model = "custom"$/m);
    // Unified effort always fires when a model is pinned — model_reasoning_effort is
    // present and valid, ignoring model_profile_overrides.reasoning_effort.
    assert.match(toml, /^model_reasoning_effort = "(minimal|low|medium|high|xhigh)"$/m);
    // msd-planner is heavy-tier, so with no effortCfg the manifest tier default applies → xhigh.
    assert.match(toml, /^model_reasoning_effort = "xhigh"$/m);
  });

  test('resolver returns null with no global, no per-project config', () => {
    // Sanity: nothing configured -> nothing emitted. Pre-existing back-compat.
    const resolver = readMsdRuntimeProfileResolver(tmpDir);
    assert.strictEqual(resolver, null);
  });

  test('inline require paths resolve relative to install.js __dirname (finding #6)', () => {
    // Defensive: assert the lib files install.js requires actually exist at
    // resolver-construction time. Catches accidental relative-path drift in CI.
    const installDir = path.dirname(require.resolve('../bin/install.js'));
    const libDir = path.join(installDir, '..', 'msd-core', 'bin', 'lib');
    assert.ok(fs.existsSync(path.join(libDir, 'model-catalog.cjs')));
    assert.ok(fs.existsSync(path.join(libDir, 'model-profiles.cjs')));
  });
});

// ─── #2875: install-model-override-resolver.cts's `depth < 8` upward-walk ──
// boundary (CLAUDE.md boundary coverage: a budget limit must be exercised at
// limit-1/limit/limit+1). The walk starts AT targetDir (checked at depth=0,
// "0 levels up") and stops after depth=7 ("7 levels up", the LAST reachable
// ancestor) — a `.planning/config.json` 8 levels up is never reached. Both
// `readMsdRuntimeProfileResolver` and `readMsdEffectiveModelOverrides` run
// the identical loop shape; readMsdRuntimeProfileResolver is exercised here
// since resolver.runtime !== null is a simple, direct found/not-found signal.
describe('#2875: install-model-override-resolver upward-walk depth boundary (limit-1/limit/limit+1)', () => {
  const { readMsdRuntimeProfileResolver } = require('../msd-core/bin/lib/install-model-override-resolver.cjs');

  beforeEach(() => { isolateHome(); resetRuntimeWarningCaches(); });
  afterEach(() => { restoreHome(); });

  // Builds an 8-level-deep directory chain under a fresh temp root and
  // returns { root, leaf }, where leaf is 8 levels below root (root/L1/../L8).
  // ancestorLevelsUp(leaf, n) === root/L1/../L(8-n).
  function buildDeepChain() {
    const root = fs.mkdtempSync(path.join(os.tmpdir(), 'msd-depth-walk-'));
    let dir = root;
    for (let i = 1; i <= 8; i += 1) {
      dir = path.join(dir, `L${i}`);
    }
    fs.mkdirSync(dir, { recursive: true });
    return { root, leaf: dir };
  }

  function ancestorLevelsUp(leaf, n) {
    let dir = leaf;
    for (let i = 0; i < n; i += 1) dir = path.dirname(dir);
    return dir;
  }

  // writeConfig assumes `<dir>/.planning/` already exists (every other call
  // site in this file writes into a `createTempProject()`-scaffolded tree,
  // which pre-creates it) — the bare ancestor dirs `buildDeepChain` makes do
  // not, so create it first.
  function writeConfigAt(dir, obj) {
    fs.mkdirSync(path.join(dir, '.planning'), { recursive: true });
    writeConfig(dir, obj);
  }

  test('limit-1: config.json 6 levels up from targetDir is found', (t) => {
    const { root, leaf } = buildDeepChain();
    t.after(() => cleanup(root));
    writeConfigAt(ancestorLevelsUp(leaf, 6), { runtime: 'codex', model_profile: 'quality' });
    const resolver = readMsdRuntimeProfileResolver(leaf);
    assert.ok(resolver, 'a config.json 6 levels up must be found — well within the 8-deep walk');
    assert.strictEqual(resolver.runtime, 'codex');
  });

  test('limit: config.json 7 levels up from targetDir is found — the LAST reachable ancestor', (t) => {
    const { root, leaf } = buildDeepChain();
    t.after(() => cleanup(root));
    writeConfigAt(ancestorLevelsUp(leaf, 7), { runtime: 'codex', model_profile: 'quality' });
    const resolver = readMsdRuntimeProfileResolver(leaf);
    assert.ok(resolver, 'a config.json exactly 7 levels up (the walk\'s last checked ancestor) must still be found');
    assert.strictEqual(resolver.runtime, 'codex');
  });

  test('limit+1: config.json 8 levels up from targetDir is NEVER found — one level past what the walk reaches', (t) => {
    const { root, leaf } = buildDeepChain();
    t.after(() => cleanup(root));
    writeConfigAt(ancestorLevelsUp(leaf, 8), { runtime: 'codex', model_profile: 'quality' });
    const resolver = readMsdRuntimeProfileResolver(leaf);
    assert.strictEqual(resolver, null, 'a config.json 8 levels up is past the walk\'s cap and must not be found');
  });
});

// ─── RUNTIME_PROFILE_MAP single source of truth (finding #16) ───────────────
describe('issue #2517: RUNTIME_PROFILE_MAP single source of truth (finding #16)', () => {
  test('install.js consumes the same map as model-catalog.cjs', () => {
    // `bin/install.js` must NOT carry its own duplicate copy of the map.
    // The shared resolver imported in install.js exposes `runtime` and the
    // entries through `resolveTierEntry`, so any future drift between the two
    // files would surface as a test failure here rather than a silent bug.
    const codexOpus = RUNTIME_PROFILE_MAP.codex?.opus;
    assert.deepStrictEqual(codexOpus, { model: 'gpt-5.6-sol', reasoning_effort: 'xhigh' });
    const claudeOpus = RUNTIME_PROFILE_MAP.claude?.opus;
    assert.deepStrictEqual(claudeOpus, { model: 'claude-opus-4-8' });
  });
});

// #1928: the "gemini" runtime tier-resolution suite was removed with the
// sunset Gemini CLI runtime. The gemini-3.x models remain in the catalog for
// Antigravity (which runs on the Gemini backend and carries its own
// runtimeTierDefaults); Antigravity's tier resolution is covered elsewhere.

// ─── Issue #2612: opencode runtime tier resolution ───────────────────────────
describe('issue #2612: runtime "opencode" — OpenCode tier resolution', () => {
  let tmpDir;
  beforeEach(() => { isolateHome(); tmpDir = createTempProject(); resetRuntimeWarningCaches(); });
  afterEach(() => { cleanup(tmpDir); restoreHome(); });

  test('opus tier -> anthropic/claude-opus-4-8', () => {
    writeConfig(tmpDir, { runtime: 'opencode', model_profile: 'quality' });
    assert.strictEqual(resolveModelInternal(tmpDir, 'msd-planner'), 'anthropic/claude-opus-4-8');
  });

  test('sonnet tier -> anthropic/claude-sonnet-5', () => {
    writeConfig(tmpDir, { runtime: 'opencode', model_profile: 'balanced' });
    assert.strictEqual(resolveModelInternal(tmpDir, 'msd-roadmapper'), 'anthropic/claude-sonnet-5');
  });

  test('haiku tier -> anthropic/claude-haiku-4-5', () => {
    writeConfig(tmpDir, { runtime: 'opencode', model_profile: 'budget' });
    assert.strictEqual(resolveModelInternal(tmpDir, 'msd-codebase-mapper'), 'anthropic/claude-haiku-4-5');
  });

  test('opencode: effort resolves universally but render param is null (no wire param)', () => {
    writeConfig(tmpDir, { runtime: 'opencode', model_profile: 'quality' });
    const eff = resolveEffortInternal(tmpDir, 'msd-planner');
    assert.strictEqual(renderEffortForRuntime('opencode', eff).param, null);
  });
});

// ─── Issue #2612: Group B runtimes fall through (no built-in map) ────────────
describe('issue #2612: Group B runtimes — no built-in map, use unknown-runtime fallback', () => {
  test('cursor is not in RUNTIME_PROFILE_MAP (uses unknown-runtime fallback)', () => {
    assert.strictEqual(RUNTIME_PROFILE_MAP.cursor, undefined);
  });

  test('windsurf is not in RUNTIME_PROFILE_MAP', () => {
    assert.strictEqual(RUNTIME_PROFILE_MAP.windsurf, undefined);
  });

  test('cline is not in RUNTIME_PROFILE_MAP', () => {
    assert.strictEqual(RUNTIME_PROFILE_MAP.cline, undefined);
  });

  test('augment is not in RUNTIME_PROFILE_MAP', () => {
    assert.strictEqual(RUNTIME_PROFILE_MAP.augment, undefined);
  });

  test('trae is not in RUNTIME_PROFILE_MAP', () => {
    assert.strictEqual(RUNTIME_PROFILE_MAP.trae, undefined);
  });

  test('codebuddy is not in RUNTIME_PROFILE_MAP', () => {
    assert.strictEqual(RUNTIME_PROFILE_MAP.codebuddy, undefined);
  });

  test('antigravity is not in RUNTIME_PROFILE_MAP', () => {
    assert.strictEqual(RUNTIME_PROFILE_MAP.antigravity, undefined);
  });

  test('cursor runtime falls back to Claude alias (not a Gemini/Qwen/etc ID)', () => {
    const { createTempProject, cleanup } = require('./helpers.cjs');
    isolateHome();
    const tmpDir = createTempProject();
    resetRuntimeWarningCaches();
    try {
      writeConfig(tmpDir, { runtime: 'cursor', model_profile: 'quality' });
      // Should fall back to Claude alias, not emit a provider-specific ID
      const resolved = resolveModelInternal(tmpDir, 'msd-planner');
      assert.strictEqual(resolved, 'opus');
    } finally {
      cleanup(tmpDir);
      restoreHome();
    }
  });
});

// ─── Issue #2612: Partial override merge for new runtimes ────────────────────
describe('issue #2612: partial override merge for Group A runtimes', () => {
  let tmpDir;
  beforeEach(() => { isolateHome(); tmpDir = createTempProject(); resetRuntimeWarningCaches(); });
  afterEach(() => { cleanup(tmpDir); restoreHome(); });

  test('opencode.sonnet override wins; opus and haiku still use built-in defaults', () => {
    writeConfig(tmpDir, {
      runtime: 'opencode',
      model_profile: 'balanced',
      model_profile_overrides: {
        opencode: { sonnet: 'anthropic/claude-sonnet-4-7' },
      },
    });
    // msd-planner balanced -> opus -> built-in default
    assert.strictEqual(resolveModelInternal(tmpDir, 'msd-planner'), 'anthropic/claude-opus-4-8');
    // msd-roadmapper balanced -> sonnet -> overridden
    assert.strictEqual(resolveModelInternal(tmpDir, 'msd-roadmapper'), 'anthropic/claude-sonnet-4-7');
    // msd-codebase-mapper balanced -> haiku -> built-in default (haiku not overridden)
    assert.strictEqual(resolveModelInternal(tmpDir, 'msd-codebase-mapper'), 'anthropic/claude-haiku-4-5');
  });

});
  });
}

// ─── #3007: Codex effort capability is per-model ─────────────────────────────
//
// Ground truth (Codex's models.json): gpt-5.6-sol advertises
// low/medium/high/xhigh/max/ultra; gpt-5.6-luna and gpt-5.6-terra advertise
// low/medium/high/xhigh/max (no ultra); no Codex model advertises 'minimal'.
// An unknown/omitted model id falls back to the family baseline
// (low/medium/high/xhigh/max).

const CODEX_MODEL_EFFORT_SETS = {
  'gpt-5.6-sol': new Set(['low', 'medium', 'high', 'xhigh', 'max', 'ultra']),
  'gpt-5.6-luna': new Set(['low', 'medium', 'high', 'xhigh', 'max']),
  'gpt-5.6-terra': new Set(['low', 'medium', 'high', 'xhigh', 'max']),
};
const CODEX_FAMILY_BASELINE = new Set(['low', 'medium', 'high', 'xhigh', 'max']);
function advertisedCodexEfforts(model) {
  return CODEX_MODEL_EFFORT_SETS[model] || CODEX_FAMILY_BASELINE;
}

describe('#3007 — Codex effort capability is per-model, and every clamp is visible', () => {
  test('max survives for a model that advertises it', () => {
    const { renderEffortForRuntime } = require('../msd-core/bin/lib/model-catalog.cjs');
    const r = renderEffortForRuntime('codex', 'max', 'gpt-5.6-sol');
    assert.strictEqual(r.value, 'max');
    assert.strictEqual(r.clamped, false);
    assert.strictEqual(r.reason, null);
  });

  test('max survives on luna, not only sol', () => {
    const { renderEffortForRuntime } = require('../msd-core/bin/lib/model-catalog.cjs');
    const r = renderEffortForRuntime('codex', 'max', 'gpt-5.6-luna');
    assert.strictEqual(r.value, 'max');
  });

  test('a level below the ceiling is not reported as clamped', () => {
    const { renderEffortForRuntime } = require('../msd-core/bin/lib/model-catalog.cjs');
    const r = renderEffortForRuntime('codex', 'xhigh', 'gpt-5.6-sol');
    assert.strictEqual(r.value, 'xhigh');
    assert.strictEqual(r.clamped, false);
  });

  test('ultra is rejected, never clamped to max', () => {
    const { renderEffortForRuntime } = require('../msd-core/bin/lib/model-catalog.cjs');
    const r = renderEffortForRuntime('codex', 'ultra', 'gpt-5.6-sol');
    assert.strictEqual(r.value, null);
    assert.ok(typeof r.reason === 'string' && /deleg/i.test(r.reason), `reason should mention delegation: ${r.reason}`);
  });

  test('minimal clamps to low on a model that floors at low', () => {
    const { renderEffortForRuntime } = require('../msd-core/bin/lib/model-catalog.cjs');
    const r = renderEffortForRuntime('codex', 'minimal', 'gpt-5.6-luna');
    assert.strictEqual(r.value, 'low');
    assert.strictEqual(r.clamped, true);
    assert.ok(typeof r.reason === 'string' && r.reason.length > 0);
  });

  test('minimal clamps on sol too', () => {
    const { renderEffortForRuntime } = require('../msd-core/bin/lib/model-catalog.cjs');
    const r = renderEffortForRuntime('codex', 'minimal', 'gpt-5.6-sol');
    assert.strictEqual(r.value, 'low');
    assert.strictEqual(r.clamped, true);
  });

  test('an unknown model id gets the family baseline, not a clamp', () => {
    const { renderEffortForRuntime } = require('../msd-core/bin/lib/model-catalog.cjs');
    const r = renderEffortForRuntime('codex', 'max', 'gpt-9.9-unreleased');
    assert.strictEqual(r.value, 'max');
    assert.strictEqual(r.clamped, false);
  });

  test('an unknown model id still floors at low', () => {
    const { renderEffortForRuntime } = require('../msd-core/bin/lib/model-catalog.cjs');
    const r = renderEffortForRuntime('codex', 'minimal', 'gpt-9.9-unreleased');
    assert.strictEqual(r.value, 'low');
    assert.strictEqual(r.clamped, true);
  });

  test('the model-less form resolves against the family baseline', () => {
    const { renderEffortForRuntime } = require('../msd-core/bin/lib/model-catalog.cjs');
    const r = renderEffortForRuntime('codex', 'max');
    assert.strictEqual(r.value, 'max');
  });

  test('the model-less form still floors at low', () => {
    const { renderEffortForRuntime } = require('../msd-core/bin/lib/model-catalog.cjs');
    const r = renderEffortForRuntime('codex', 'minimal');
    assert.strictEqual(r.value, 'low');
  });

  test('the two-argument signature keeps working for every level', () => {
    const { renderEffortForRuntime } = require('../msd-core/bin/lib/model-catalog.cjs');
    const UNCHANGED = new Set(['low', 'medium', 'high', 'xhigh']);
    for (const level of ['minimal', 'low', 'medium', 'high', 'xhigh', 'max']) {
      let r;
      assert.doesNotThrow(() => { r = renderEffortForRuntime('codex', level); });
      if (UNCHANGED.has(level)) {
        assert.strictEqual(r.value, level, `level ${level} should pass through unchanged`);
      }
    }
  });

  test('claude rendering is untouched by the codex table', () => {
    const { renderEffortForRuntime } = require('../msd-core/bin/lib/model-catalog.cjs');
    assert.strictEqual(renderEffortForRuntime('claude', 'max').value, 'max');
    assert.strictEqual(renderEffortForRuntime('claude', 'minimal').value, 'low');
    // passing a codex model id as the 3rd arg to claude must change nothing
    const withModel = renderEffortForRuntime('claude', 'max', 'gpt-5.6-sol');
    assert.strictEqual(withModel.value, 'max');
  });

  test('inherit is not measured against any supported set', () => {
    const { renderEffortForRuntime } = require('../msd-core/bin/lib/model-catalog.cjs');
    for (const runtime of ['claude', 'codex', 'something-unknown']) {
      for (const model of [undefined, 'gpt-5.6-sol']) {
        const r = renderEffortForRuntime(runtime, 'inherit', model);
        assert.deepStrictEqual(
          { value: r.value, param: r.param, channel: r.channel },
          { value: 'inherit', param: null, channel: null },
          `runtime=${runtime} model=${JSON.stringify(model)}`,
        );
        // #3007's new requested/clamped/reason fields must be honest on this
        // path too: 'inherit' is never a clamp target, so it can never be
        // reported as clamped, and it echoes itself back as `requested`.
        assert.deepStrictEqual(
          { requested: r.requested, clamped: r.clamped, reason: r.reason },
          { requested: 'inherit', clamped: false, reason: null },
          `runtime=${runtime} model=${JSON.stringify(model)}`,
        );
      }
    }
  });

  test('an undeclared runtime still renders nothing', () => {
    const { renderEffortForRuntime } = require('../msd-core/bin/lib/model-catalog.cjs');
    const r = renderEffortForRuntime('something-unknown', 'high');
    assert.strictEqual(r.param, null);
    assert.strictEqual(r.channel, null);
    // #3007's new fields must also be honest for a host with no spec at all:
    // the value passes straight through, unclamped, and there is nothing to
    // explain about it.
    assert.strictEqual(r.value, 'high');
    assert.strictEqual(r.requested, 'high');
    assert.strictEqual(r.clamped, false);
    assert.strictEqual(r.reason, null);
  });

  test('a bare tier alias is not treated as a model id', () => {
    const { renderEffortForRuntime } = require('../msd-core/bin/lib/model-catalog.cjs');
    let r;
    assert.doesNotThrow(() => { r = renderEffortForRuntime('codex', 'max', 'opus'); });
    assert.strictEqual(r.value, 'max');
  });

  test('an anthropic-flavored id is not an effort-capability error', () => {
    const { renderEffortForRuntime } = require('../msd-core/bin/lib/model-catalog.cjs');
    let r;
    assert.doesNotThrow(() => { r = renderEffortForRuntime('codex', 'max', 'claude-opus-4-8'); });
    assert.strictEqual(r.value, 'max');
  });

  test('an empty model argument behaves exactly like omitting it', () => {
    const { renderEffortForRuntime } = require('../msd-core/bin/lib/model-catalog.cjs');
    for (const level of ['max', 'minimal']) {
      const omitted = renderEffortForRuntime('codex', level);
      for (const emptyish of ['', null, undefined]) {
        assert.deepStrictEqual(
          renderEffortForRuntime('codex', level, emptyish),
          omitted,
          `level=${level} emptyish=${JSON.stringify(emptyish)}`,
        );
      }
    }
  });

  test('effort matching is case-sensitive, as the ladder always was', () => {
    const { renderEffortForRuntime } = require('../msd-core/bin/lib/model-catalog.cjs');
    // 'MAX' is not 'max' — whatever the renderer does with an unrecognized
    // level, it must not silently treat it as a clean pass-through of 'max'.
    // 'MAX' is off the EFFORT_LADDER entirely, so #3007's per-model path
    // must fall through to the runtime-level clamp verbatim rather than
    // inventing new handling — and it must report that verbatim pass-through
    // as NOT clamped, with `requested` echoing the exact (unrecognized) input.
    // Under a fully reverted #3007, `clamped`/`requested` do not exist on the
    // returned object at all, so this fails there too.
    const r = renderEffortForRuntime('codex', 'MAX', 'gpt-5.6-sol');
    assert.notStrictEqual(r.value, 'max');
    assert.strictEqual(r.value, 'MAX');
    assert.strictEqual(r.clamped, false);
    assert.strictEqual(r.requested, 'MAX');
  });

  test('a clamp never lands on ultra, even for a model that only advertises it', () => {
    // The clamp-up loop in renderEffortForRuntime walks EFFORT_LADDER
    // upward from the requested level looking for the model's floor. Today's
    // catalog can't actually exercise the 'ultra'-as-clamp-target path — every
    // model advertises 'max', so the allowed.has() fast path always returns
    // first. This test guards a latent path, not a currently-reachable one:
    // do not delete it as redundant just because it never fails today. The
    // invariant it protects is general — for EVERY model and EVERY ladder
    // level, a clamp must never produce 'ultra', because that would re-enter
    // by the back door the delegation mode the #2167 rejection exists to
    // keep out.
    const { renderEffortForRuntime } = require('../msd-core/bin/lib/model-catalog.cjs');
    const models = [undefined, 'gpt-5.6-sol', 'gpt-5.6-luna', 'gpt-5.6-terra', 'gpt-9.9-unreleased'];
    const levels = ['minimal', 'low', 'medium', 'high', 'xhigh', 'max', 'ultra'];
    for (const model of models) {
      for (const level of levels) {
        const r = renderEffortForRuntime('codex', level, model);
        assert.notStrictEqual(r.value, 'ultra', `model=${JSON.stringify(model)} level=${level}`);
      }
    }
  });
});

// ─── #3007 PARITY: known-defect gauntlet ──────────────────────────────────────

test('every catalog preset ships an effort its own model supports', () => {
  const catalogPath = path.join(__dirname, '..', 'msd-core', 'bin', 'shared', 'model-catalog.json');
  const catalog = JSON.parse(fs.readFileSync(catalogPath, 'utf8'));
  const offenders = [];

  const checkEntry = (entryPath, entry) => {
    if (!entry || typeof entry !== 'object') return;
    const model = entry.model;
    const effort = entry.reasoning_effort;
    if (typeof model !== 'string' || !model.startsWith('gpt-') || typeof effort !== 'string') return;
    const allowed = advertisedCodexEfforts(model);
    if (!allowed.has(effort)) {
      offenders.push(`${entryPath}: model=${model} reasoning_effort=${effort} (not in {${[...allowed].join(', ')}})`);
    }
  };

  const codexDefaults = catalog.runtimeTierDefaults && catalog.runtimeTierDefaults.codex;
  if (codexDefaults) {
    for (const [tier, entry] of Object.entries(codexDefaults)) {
      checkEntry(`runtimeTierDefaults.codex.${tier}`, entry);
    }
  }

  const openaiPresets = catalog.providerPresets && catalog.providerPresets.openai;
  if (openaiPresets) {
    for (const [tier, profiles] of Object.entries(openaiPresets)) {
      if (!profiles || typeof profiles !== 'object') continue;
      for (const [profile, entry] of Object.entries(profiles)) {
        checkEntry(`providerPresets.openai.${tier}.${profile}`, entry);
      }
    }
  }

  assert.deepStrictEqual(offenders, [], `offending presets (model does not advertise the assigned effort):\n${offenders.join('\n')}`);
});

// ─── #3007 PARITY: argv channel must agree with the render-for-runtime channel ─
//
// `renderEffortArgv('codex', ...)` (invocation-time, `-c model_reasoning_effort=`)
// and `renderEffortForRuntime('codex', ...)` (install-time / api channel) each
// read their own EFFORT_ARGV.codex / EFFORT_RENDERING.codex tables. Those two
// tables must describe the SAME capability, or a user gets a different answer
// depending on which code path asked — the repo's documented "generative fix
// divergence" class (two surfaces reading one fact that can drift apart).

describe('#3007 PARITY: argv channel agrees with renderEffortForRuntime for codex', () => {
  test('renderEffortArgv and renderEffortForRuntime never disagree across the ladder', () => {
    const { renderEffortArgv, renderEffortForRuntime } = require('../msd-core/bin/lib/model-catalog.cjs');
    const LADDER = ['minimal', 'low', 'medium', 'high', 'xhigh', 'max', 'ultra'];
    for (const level of LADDER) {
      const argvResult = renderEffortArgv('codex', level, 'argv');
      const runtimeResult = renderEffortForRuntime('codex', level);
      if (level === 'ultra') {
        // 'ultra' is Codex's automatic-delegation switch (#2167): the
        // install-time channel rejects it outright (value: null, policy
        // reason). The argv channel has no concept of that policy rejection
        // — it simply isn't in EFFORT_ARGV.codex's supported set, so it also
        // degrades to a `null` value. Both channels landing on `null` here
        // is the explicit agreement contract for this level; it is not a
        // case the parity check can skip.
        assert.strictEqual(argvResult.value, null, `argv channel must also refuse ultra: got ${argvResult.value}`);
        assert.strictEqual(runtimeResult.value, null, `runtime channel must refuse ultra: got ${runtimeResult.value}`);
        continue;
      }
      assert.strictEqual(
        argvResult.value,
        runtimeResult.value,
        `argv/runtime channels disagree for level=${level}: argv=${argvResult.value} runtime=${runtimeResult.value}`,
      );
    }
  });
});

// ─── #3007 PROPERTY: rendered codex effort is always within the model's ceiling ─

describe('#3007 PROPERTY: renderEffortForRuntime never renders a level the model does not advertise', () => {
  test('every (model, level) pair is exhaustively checked, not sampled', () => {
    // fc.constantFrom over MODELS x LADDER with numRuns: 200 is very likely to
    // hit all 4 x 7 = 28 pairs but is not GUARANTEED to. This deterministic
    // nested loop covers the full cross-product with certainty; it is kept
    // alongside the fast-check property below (not instead of it) because the
    // repo requires a property test for a closed-vocabulary contract, and the
    // property still adds shrinking value on failure.
    const { renderEffortForRuntime } = require('../msd-core/bin/lib/model-catalog.cjs');
    const MODELS = ['gpt-5.6-sol', 'gpt-5.6-terra', 'gpt-5.6-luna', 'gpt-9.9-unreleased-model'];
    const LADDER = ['minimal', 'low', 'medium', 'high', 'xhigh', 'max', 'ultra'];
    for (const model of MODELS) {
      for (const level of LADDER) {
        const allowed = advertisedCodexEfforts(model);
        const r = renderEffortForRuntime('codex', level, model);
        if (r.value === null) {
          assert.strictEqual(level, 'ultra', `only ultra may be rejected: model=${model} level=${level}`);
          continue;
        }
        assert.ok(allowed.has(r.value), `rendered value not in model's advertised set: model=${model} level=${level} value=${r.value}`);
        if (r.value === level) {
          assert.strictEqual(r.clamped, false, `pass-through reported as clamped: model=${model} level=${level}`);
        } else {
          assert.strictEqual(r.clamped, true, `changed value not reported as clamped: model=${model} level=${level} value=${r.value}`);
        }
      }
    }
  });

  test('for every (model, level) pair, the outcome is pass-through, clamp, or reject', () => {
    const fc = require('./helpers/fast-check-setup.cjs');
    const { renderEffortForRuntime } = require('../msd-core/bin/lib/model-catalog.cjs');
    const MODELS = ['gpt-5.6-sol', 'gpt-5.6-terra', 'gpt-5.6-luna', 'gpt-9.9-unreleased-model'];
    const LADDER = ['minimal', 'low', 'medium', 'high', 'xhigh', 'max', 'ultra'];
    fc.assert(
      fc.property(fc.constantFrom(...MODELS), fc.constantFrom(...LADDER), (model, level) => {
        const allowed = advertisedCodexEfforts(model);
        const r = renderEffortForRuntime('codex', level, model);
        if (r.value === null) {
          // Rejection is a POLICY outcome, not a capability one, so it is not
          // predicted by the advertised set. `ultra` is refused even on sol,
          // which does advertise it: MSD is deliberately stricter than Codex
          // because ultra turns on automatic task delegation (#2167).
          // Reserving null for exactly `ultra` is what keeps that a decision
          // rather than a side effect — any OTHER null is a bug.
          assert.strictEqual(level, 'ultra', `only ultra may be rejected: model=${model} level=${level}`);
          return;
        }
        assert.ok(allowed.has(r.value), `rendered value not in model's advertised set: model=${model} level=${level} value=${r.value}`);
        if (r.value === level) {
          assert.strictEqual(r.clamped, false, `pass-through reported as clamped: model=${model} level=${level}`);
        } else {
          assert.strictEqual(r.clamped, true, `changed value not reported as clamped: model=${model} level=${level} value=${r.value}`);
        }
      }),
      { seed: 3007, numRuns: 200 },
    );
  });
});

// ─── #4192: claude-runtime generation pinning via explicit overrides ──────────
//
// Confirmed-bug scope (maintainer triage): Findings 1 and 2 — documented
// behavior the resolver does not implement on the claude runtime.
//
//   F1 — model_profile_overrides.claude.<tier> was inert: step 3 of
//        resolveModelInternal gated runtime-aware tier resolution on
//        `configRuntime !== 'claude'`, so the only reader of the key was never
//        consulted on claude, while settings-advanced.md writes it for
//        claude-runtime users.
//   F2 — fully-qualified claude-* IDs in model_overrides were warn-dropped to
//        tier resolution (mapClaudeOverrideForRuntime unmappable branch,
//        #2041), while the configuration reference and the shipped
//        model-profiles reference both document "any fully-qualified model
//        ID" as valid.
//
// Agreed contract (AC2, pinned here): an explicit pin is RESOLVED AS
// CONFIGURED. A claude-* value that maps to a current tier alias still
// collapses to that alias (the #2041 protection — byte-equivalent resolution);
// an unmappable one (a pinned older generation) is returned verbatim with a
// warn-once breadcrumb, because dropping it would silently unpin the operator's
// explicit choice — the exact "profile misrepresents what runs" defect of
// #4192. Unpinned resolution is byte-stable (control rows below).
describe('#4192 model_profile_overrides.claude.*: tier overrides honor pins on the claude runtime', () => {
  const { createTempDir, resetRuntimeWarningCaches } = require('./helpers.cjs');
  let tmpDir;
  const make = () => createTempDir('msd-4192-tier-override-');
  const write = (cfg) => fs.writeFileSync(
    path.join(tmpDir, '.planning', 'config.json'), JSON.stringify(cfg, null, 2), 'utf-8');

  beforeEach(() => {
    tmpDir = make();
    fs.mkdirSync(path.join(tmpDir, '.planning'), { recursive: true });
    resetRuntimeWarningCaches();
  });
  afterEach(() => {
    cleanup(tmpDir);
    resetRuntimeWarningCaches();
  });

  // Row 1 — REGRESSION (failing-first): pinned generation honored, implicit claude runtime.
  test('claude.opus = "claude-opus-4-7" pins the opus tier (implicit claude runtime)', () => {
    write({
      model_profile: 'balanced',
      model_profile_overrides: { claude: { opus: 'claude-opus-4-7' } },
    });
    assert.strictEqual(resolveModelInternal(tmpDir, 'msd-planner'), 'claude-opus-4-7');
  });

  // Row 2 — same with an explicit runtime key.
  test('claude.opus pin honored with explicit runtime: "claude"', () => {
    write({
      runtime: 'claude',
      model_profile: 'balanced',
      model_profile_overrides: { claude: { opus: 'claude-opus-4-7' } },
    });
    assert.strictEqual(resolveModelInternal(tmpDir, 'msd-planner'), 'claude-opus-4-7');
  });

  // Row 3 — mappable override collapses to the alias (form parity with #2041 step 1).
  test('claude.sonnet = "claude-sonnet-5" resolves to the "sonnet" alias', () => {
    write({
      model_profile: 'balanced',
      model_profile_overrides: { claude: { sonnet: 'claude-sonnet-5' } },
    });
    assert.strictEqual(resolveModelInternal(tmpDir, 'msd-executor'), 'sonnet');
  });

  // Row 4 — fable-valued override maps through the fable alias.
  test('claude.opus = "claude-fable-5" resolves to "fable"', () => {
    write({
      model_profile: 'balanced',
      model_profile_overrides: { claude: { opus: 'claude-fable-5' } },
    });
    assert.strictEqual(resolveModelInternal(tmpDir, 'msd-planner'), 'fable');
  });

  // Row 5 — bare-alias / tier-repoint override passes through verbatim.
  test('claude.opus = "sonnet" repoints the tier at the sonnet alias', () => {
    write({
      model_profile: 'balanced',
      model_profile_overrides: { claude: { opus: 'sonnet' } },
    });
    assert.strictEqual(resolveModelInternal(tmpDir, 'msd-planner'), 'sonnet');
  });

  // Row 6 — non-Claude ID override passes through verbatim (docs: any fully-qualified ID).
  test('claude.haiku = "openai/gpt-4o-mini" passes through verbatim on claude', () => {
    write({
      model_profile: 'balanced',
      model_profile_overrides: { claude: { haiku: 'openai/gpt-4o-mini' } },
    });
    assert.strictEqual(resolveModelInternal(tmpDir, 'msd-codebase-mapper'), 'openai/gpt-4o-mini');
  });

  // Row 7 — object-form override (settings workflow accepts {model, reasoning_effort}).
  test('claude.opus = { model: "claude-opus-4-7" } object form pins the tier', () => {
    write({
      model_profile: 'balanced',
      model_profile_overrides: { claude: { opus: { model: 'claude-opus-4-7' } } },
    });
    assert.strictEqual(resolveModelInternal(tmpDir, 'msd-planner'), 'claude-opus-4-7');
  });

  // Row 8 — CONTROL (AC1): no override → byte-identical alias resolution.
  test('no model_profile_overrides → alias resolution unchanged', () => {
    write({ model_profile: 'balanced' });
    assert.strictEqual(resolveModelInternal(tmpDir, 'msd-planner'), 'opus');
  });

  // Row 9 — CONTROL: overrides for another runtime never apply to claude.
  test('codex-only overrides are inert on the claude runtime', () => {
    write({
      model_profile: 'balanced',
      model_profile_overrides: { codex: { opus: 'gpt-5-pro' } },
    });
    assert.strictEqual(resolveModelInternal(tmpDir, 'msd-planner'), 'opus');
  });

  // Row 10 — CONTROL: override for a different tier than the agent's is inert for that agent.
  test('claude.sonnet override does not touch an opus-tier agent', () => {
    write({
      model_profile: 'balanced',
      model_profile_overrides: { claude: { sonnet: 'claude-sonnet-4-6' } },
    });
    assert.strictEqual(resolveModelInternal(tmpDir, 'msd-planner'), 'opus');
  });

  // Row 11 — CONTROL: inherit profile is immune to tier overrides.
  test('model_profile: "inherit" + claude.opus pin → "inherit"', () => {
    write({
      model_profile: 'inherit',
      model_profile_overrides: { claude: { opus: 'claude-opus-4-7' } },
    });
    assert.strictEqual(resolveModelInternal(tmpDir, 'msd-planner'), 'inherit');
  });

  // Row 12 — CONTROL: explicit project resolve_model_ids:"omit" beats the override (#2297).
  test('project resolve_model_ids: "omit" + claude.opus pin → empty string', () => {
    write({
      model_profile: 'balanced',
      resolve_model_ids: 'omit',
      model_profile_overrides: { claude: { opus: 'claude-opus-4-7' } },
    });
    assert.strictEqual(resolveModelInternal(tmpDir, 'msd-planner'), '');
  });

  // Row 13 — CONTROL: model_overrides still wins over the tier override.
  test('model_overrides beats model_profile_overrides.claude', () => {
    write({
      model_profile: 'balanced',
      model_overrides: { 'msd-planner': 'haiku' },
      model_profile_overrides: { claude: { opus: 'claude-opus-4-7' } },
    });
    assert.strictEqual(resolveModelInternal(tmpDir, 'msd-planner'), 'haiku');
  });

  // Row 15 — CONTROL: object override without a model key degrades to the alias.
  test('claude.opus = { reasoning_effort } (no model) falls through to the alias', () => {
    write({
      model_profile: 'balanced',
      model_profile_overrides: { claude: { opus: { reasoning_effort: 'high' } } },
    });
    assert.strictEqual(resolveModelInternal(tmpDir, 'msd-planner'), 'opus');
  });

  // Row 16 — CONTROL: non-string/non-object value degrades to the alias.
  test('claude.opus = 42 (malformed value) falls through to the alias', () => {
    write({
      model_profile: 'balanced',
      model_profile_overrides: { claude: { opus: 42 } },
    });
    assert.strictEqual(resolveModelInternal(tmpDir, 'msd-planner'), 'opus');
  });

  // Row 17 — CONTROL: empty-string value degrades to the alias.
  test('claude.opus = "" falls through to the alias', () => {
    write({
      model_profile: 'balanced',
      model_profile_overrides: { claude: { opus: '' } },
    });
    assert.strictEqual(resolveModelInternal(tmpDir, 'msd-planner'), 'opus');
  });

  // Row 26 — ADVERSARIAL: prototype-chain keys in the override map must not leak.
  test('"constructor" as a claude override key does not resolve an inherited member', () => {
    write({
      model_profile: 'balanced',
      model_profile_overrides: { claude: { constructor: 'claude-opus-4-7' } },
    });
    // 'constructor' is not a tier; resolution must ignore it entirely and land
    // on the profile alias, never on Function.prototype's members.
    assert.strictEqual(resolveModelInternal(tmpDir, 'msd-planner'), 'opus');
  });

  // Row 30 — the pin wins over resolve_model_ids:true alias materialization.
  test('claude.opus pin beats resolve_model_ids: true materialization', () => {
    write({
      model_profile: 'balanced',
      resolve_model_ids: true,
      model_profile_overrides: { claude: { opus: 'claude-opus-4-7' } },
    });
    assert.strictEqual(resolveModelInternal(tmpDir, 'msd-planner'), 'claude-opus-4-7');
  });
});

describe('#4192 model_overrides: fully-qualified claude IDs resolve as configured', () => {
  const { createTempDir, resetRuntimeWarningCaches } = require('./helpers.cjs');
  let tmpDir;
  const make = () => createTempDir('msd-4192-agent-override-');
  const write = (cfg) => fs.writeFileSync(
    path.join(tmpDir, '.planning', 'config.json'), JSON.stringify(cfg, null, 2), 'utf-8');

  beforeEach(() => {
    tmpDir = make();
    fs.mkdirSync(path.join(tmpDir, '.planning'), { recursive: true });
    resetRuntimeWarningCaches();
  });
  afterEach(() => {
    cleanup(tmpDir);
    resetRuntimeWarningCaches();
  });

  // Row 18 — REGRESSION (failing-first): pinned generation honored, implicit claude runtime.
  test('model_overrides "claude-opus-4-7" resolves verbatim (implicit claude runtime)', () => {
    write({
      model_profile: 'balanced',
      model_overrides: { 'msd-debugger': 'claude-opus-4-7' },
    });
    assert.strictEqual(resolveModelInternal(tmpDir, 'msd-debugger'), 'claude-opus-4-7');
  });

  // Row 18b — explicit runtime key.
  test('model_overrides "claude-opus-4-7" resolves verbatim with runtime: "claude"', () => {
    write({
      runtime: 'claude',
      model_profile: 'balanced',
      model_overrides: { 'msd-debugger': 'claude-opus-4-7' },
    });
    assert.strictEqual(resolveModelInternal(tmpDir, 'msd-debugger'), 'claude-opus-4-7');
  });

  // Row 21 — warn-once breadcrumb on an unmappable pin (visibility, not a drop).
  test('unmappable pin emits exactly one pass-through stderr warning (dedupe)', () => {
    write({
      runtime: 'claude',
      model_profile: 'balanced',
      model_overrides: { 'msd-debugger': 'claude-opus-4-7' },
    });
    const writes = [];
    const original = process.stderr.write.bind(process.stderr);
    process.stderr.write = (chunk) => { writes.push(String(chunk)); return true; };
    try {
      resolveModelInternal(tmpDir, 'msd-debugger');
      resolveModelInternal(tmpDir, 'msd-debugger'); // dedupe must suppress
    } finally {
      process.stderr.write = original;
    }
    const warnings = writes.filter((w) => w.includes('model_overrides') && w.includes('claude-opus-4-7'));
    assert.strictEqual(warnings.length, 1,
      `expected exactly one override warning, got ${warnings.length}: ${JSON.stringify(writes)}`);
    // The warning must describe pass-through, not a fall-through that no longer happens.
    assert.ok(!warnings[0].includes('falling through'),
      `warning must not claim a fall-through: ${warnings[0]}`);
  });

  // Row 21b — no warning for a value that needs no breadcrumb (mappable / non-claude).
  test('mappable ID resolution emits no model_overrides warning', () => {
    write({
      runtime: 'claude',
      model_profile: 'balanced',
      model_overrides: { 'msd-debugger': 'claude-sonnet-5' },
    });
    const writes = [];
    const original = process.stderr.write.bind(process.stderr);
    process.stderr.write = (chunk) => { writes.push(String(chunk)); return true; };
    try {
      assert.strictEqual(resolveModelInternal(tmpDir, 'msd-debugger'), 'sonnet');
    } finally {
      process.stderr.write = original;
    }
    assert.strictEqual(writes.filter((w) => w.includes('model_overrides')).length, 0);
  });

  // Row 22 — escalation path parity.
  test('resolveModelForTier returns the pinned generation verbatim', () => {
    write({
      runtime: 'claude',
      model_profile: 'balanced',
      model_overrides: { 'msd-debugger': 'claude-opus-4-7' },
    });
    assert.strictEqual(resolveModelForTier(tmpDir, 'msd-debugger', 0), 'claude-opus-4-7');
  });

  // Row 24 — tier honesty signal unchanged (AC3): a raw pin carries no tier.
  test('resolveTierFromConfig reports "unknown" for a raw pinned generation', () => {
    write({
      runtime: 'claude',
      model_profile: 'balanced',
      model_overrides: { 'msd-debugger': 'claude-opus-4-7' },
    });
    assert.strictEqual(resolveTierFromConfig(
      JSON.parse(fs.readFileSync(path.join(tmpDir, '.planning', 'config.json'), 'utf-8')),
      'msd-debugger'), 'unknown');
  });

  // Row 25 — ADVERSARIAL: prototype-chain agentType must not leak through overrides.
  test('agentType "toString" against model_overrides: {} stays on the unknown-agent path', () => {
    write({
      model_profile: 'balanced',
      model_overrides: {},
    });
    // Unknown agent + balanced profile → the hardcoded fallback alias, never
    // an inherited Function.prototype member.
    assert.strictEqual(resolveModelInternal(tmpDir, 'toString'), 'sonnet');
  });

  // Row 28 — an oversized pin value survives resolution; any warning stays capped.
  test('oversized unmappable pin resolves verbatim and warning text is capped at 64 chars', () => {
    const longPin = 'claude-opus-' + '9'.repeat(80);
    write({
      runtime: 'claude',
      model_profile: 'balanced',
      model_overrides: { 'msd-debugger': longPin },
    });
    const writes = [];
    const original = process.stderr.write.bind(process.stderr);
    process.stderr.write = (chunk) => { writes.push(String(chunk)); return true; };
    try {
      assert.strictEqual(resolveModelInternal(tmpDir, 'msd-debugger'), longPin);
    } finally {
      process.stderr.write = original;
    }
    const warnings = writes.filter((w) => w.includes('model_overrides'));
    assert.strictEqual(warnings.length, 1);
    // The rendered value inside the warning is the 64-char cap + ellipsis, not the full pin.
    assert.ok(!warnings[0].includes(longPin),
      `warning must not contain the uncapped pin: ${warnings[0]}`);
    assert.ok(warnings[0].includes('claude-opus-' + '9'.repeat(52) + '…'),
      `warning must contain the capped pin render: ${warnings[0]}`);
  });
});

// ────────────────────────────────────────────────────────────────────────────
// #4505 — resolveModelInternal bypassed BOTH resolveActiveRuntime and
// dynamic_routing.tier_models. Consolidates #4495 and #4493.
// ────────────────────────────────────────────────────────────────────────────
//
// Every row drives the REAL CLI in a subprocess rather than calling the
// resolver in-process. That is load-bearing, not stylistic: the defect is
// *which function the shipped call sites reach*, so a test that called
// resolveModelForTier directly would pass while every real spawn stayed broken.
// It also makes MSD_RUNTIME hermetic — it is ambient, and an in-process test
// would leak it between rows.
//
// The sharpest statement of the bug, measured on the unfixed tree with one
// config (dynamic_routing.enabled + tier_models.standard="sonnet"):
//
//   query resolve-execution msd-executor --attempt 0  ->  sonnet   (correct)
//   query resolve-model     msd-executor --raw        ->  opus     (wrong)
//   init quick --raw        .executor_model           ->  opus     (wrong)
//
// Same agent, same config, three answers. The parity rows below assert those
// surfaces AGREE, which is a stronger and more durable invariant than pinning
// any single literal.
{
  const { describe, test, afterEach } = require('node:test');
  const assert = require('node:assert/strict');
  const fs = require('node:fs');
  const path = require('node:path');
  const os = require('node:os');
  const { cleanup, runMsdTools } = require('./helpers.cjs');

  /**
   * `config === null` writes NO .planning/config.json at all. That is not a
   * stylistic choice: the shared ~/.msd/defaults.json layer is only consulted
   * when the project has no config of its own (config-loader Branch D), so a
   * fixture that writes even `{}` silently stops exercising the "poisoned
   * global" path and tests something else. Measured, with a global omit and
   * MSD_RUNTIME=codex:
   *   .planning/ with config.json -> gpt-5.6-terra
   *   .planning/ present, no config.json -> gpt-5.6-terra   <- the subtle one
   *   no .planning/ at all -> ""
   * The DIRECTORY alone is enough to disable the layer, so `config === null`
   * must not create it either.
   *
   * The runners redirect BOTH `HOME` and `MSD_HOME` into `dir` — the loader reads
   * `process.env.MSD_HOME || os.homedir()`, so redirecting only HOME leaves a
   * developer's real ~/.msd/defaults.json in play.
   */
  function project(config, globalDefaults = null) {
    const dir = fs.mkdtempSync(path.join(os.tmpdir(), 'msd-4505-'));
    if (config !== null) {
      fs.mkdirSync(path.join(dir, '.planning', 'phases'), { recursive: true });
      fs.writeFileSync(path.join(dir, '.planning', 'config.json'), JSON.stringify(config));
    }
    if (globalDefaults) {
      fs.mkdirSync(path.join(dir, '.msd'), { recursive: true });
      fs.writeFileSync(path.join(dir, '.msd', 'defaults.json'), JSON.stringify(globalDefaults));
    }
    return dir;
  }

  // HOME is redirected into the project so a developer's own ~/.msd/defaults.json
  // cannot change a concrete expected value (helpers.cjs documents this).
  // MSD_RUNTIME is always passed EXPLICITLY, including as '' for "declared
  // nowhere" — inheriting it from the parent shell would make these rows depend
  // on who ran them.
  function resolveModel(dir, agent, runtime = '') {
    const r = runMsdTools(`query resolve-model ${agent} --raw`, dir, { HOME: dir, MSD_HOME: dir, MSD_RUNTIME: runtime });
    assert.ok(r.success, `resolve-model ${agent} failed: ${r.error}`);
    return r.output.trim();
  }

  function initQuick(dir, runtime = '') {
    const r = runMsdTools('init quick --raw', dir, { HOME: dir, MSD_HOME: dir, MSD_RUNTIME: runtime });
    assert.ok(r.success, `init quick failed: ${r.error}`);
    return JSON.parse(r.output);
  }

  function resolveExecutionModel(dir, agent, attempt, runtime = '') {
    const r = runMsdTools(`query resolve-execution ${agent} --attempt ${attempt}`, dir, { HOME: dir, MSD_HOME: dir, MSD_RUNTIME: runtime });
    assert.ok(r.success, `resolve-execution ${agent} failed: ${r.error}`);
    return JSON.parse(r.output).model;
  }

  const DR_CONFIG = {
    model_profile: 'quality',
    dynamic_routing: { enabled: true, tier_models: { light: 'haiku', standard: 'sonnet', heavy: 'opus' } },
  };

  describe('#4505 half B — dynamic_routing.tier_models must reach the FIRST spawn', () => {
    let dir;
    afterEach(() => { if (dir) cleanup(dir); dir = null; });

    // FAILING-FIRST. Measured on the unfixed tree: "opus".
    test('query resolve-model uses the tier table (#4493)', () => {
      dir = project(DR_CONFIG);
      assert.strictEqual(
        resolveModel(dir, 'msd-executor'),
        'sonnet',
        'docs/features/dynamic-routing-with-failure-tier-escalation.md: "the resolver picks '
        + 'tier_models[default_tier] for the FIRST spawn"',
      );
    });

    // FAILING-FIRST, and the one that matters most: this payload IS what a real
    // spawn reads. #4493's complaint is precisely that no real spawn sees it.
    test('the init payload a real spawn reads carries it (#4493)', () => {
      dir = project(DR_CONFIG);
      assert.strictEqual(initQuick(dir).executor_model, 'sonnet');
    });

    // The invariant, not a literal: two surfaces resolving the same agent under
    // the same config must not disagree.
    test('resolve-model agrees with resolve-execution --attempt 0', () => {
      dir = project(DR_CONFIG);
      const viaExecution = resolveExecutionModel(dir, 'msd-executor', 0);
      assert.strictEqual(
        resolveModel(dir, 'msd-executor'),
        viaExecution,
        'the same agent under the same config resolved differently depending on which '
        + 'command asked — that divergence IS #4505',
      );
    });

    // REQ-DYNROUTE-01: "zero behavior change" when off. `false` and ABSENT are
    // different code paths, so both are asserted.
    test('enabled:false leaves the classic profile path untouched', () => {
      dir = project({ ...DR_CONFIG, dynamic_routing: { ...DR_CONFIG.dynamic_routing, enabled: false } });
      assert.strictEqual(resolveModel(dir, 'msd-executor'), 'opus');
      assert.strictEqual(initQuick(dir).executor_model, 'opus');
    });

    test('an absent dynamic_routing block leaves the classic path untouched', () => {
      dir = project({ model_profile: 'quality' });
      assert.strictEqual(resolveModel(dir, 'msd-executor'), 'opus');
      assert.strictEqual(initQuick(dir).executor_model, 'opus');
    });

    // Documented composition: "model_overrides always wins".
    test('model_overrides still outranks tier_models', () => {
      dir = project({ ...DR_CONFIG, model_overrides: { 'msd-executor': 'my-pinned-model' } });
      assert.strictEqual(resolveModel(dir, 'msd-executor'), 'my-pinned-model');
    });

    test('a tier absent from tier_models falls back to the classic path', () => {
      dir = project({ model_profile: 'quality', dynamic_routing: { enabled: true, tier_models: { light: 'haiku' } } });
      assert.strictEqual(resolveModel(dir, 'msd-executor'), 'opus');
    });
  });

  // dynamic_routing sits at a DOCUMENTED precedence slot, and an earlier cut of
  // this fix put it above everything by routing call sites through
  // resolveModelForTier -- which returns the tier model directly and so skipped
  // the runtime tier map, the omit gate and the claude tier override. These rows
  // pin the composition the feature doc states:
  //   "model_overrides always wins; dynamic_routing.tier_models[<tier>] resolves
  //    above models.<phase_type> and model_profile."
  describe('#4505 — dynamic_routing must not outrank higher-precedence layers', () => {
    let dir;
    afterEach(() => { if (dir) cleanup(dir); dir = null; });

    const DR = { enabled: true, tier_models: { light: 'haiku', standard: 'DR-STANDARD', heavy: 'opus' } };

    // #4717 (user-sanctioned semantics change, decision a): with the runtime
    // identity fill, a detected codex runtime materializes config.runtime and
    // counts as an opt-in — the runtime tier map (step 3) now resolves before
    // the omit gate would, so the omit no longer yields "" for a genuinely
    // installed non-Claude runtime. The gate's canonicalization guard rows
    // below still fail safe to "" for garbage runtime values.
    test('a detected codex runtime resolves its tier map; the global omit no longer wins (#4717 decision a)', () => {
      dir = project({ model_profile: 'quality', resolve_model_ids: 'omit', dynamic_routing: DR });
      assert.strictEqual(resolveModel(dir, 'msd-executor', 'codex'), 'gpt-5.6-sol');
    });

    test('the init payload a real spawn reads resolves the tier map too (#4717 decision a)', () => {
      dir = project({ model_profile: 'quality', resolve_model_ids: 'omit', dynamic_routing: DR });
      assert.strictEqual(initQuick(dir, 'codex').executor_model, 'gpt-5.6-sol');
    });

    test('the runtime tier map (step 3) outranks the tier table', () => {
      dir = project({
        model_profile: 'quality',
        dynamic_routing: DR,
        model_profile_overrides: { codex: { opus: 'MPO-CODEX-OPUS' } },
      });
      assert.strictEqual(resolveModel(dir, 'msd-executor', 'codex'), 'MPO-CODEX-OPUS');
    });

    test('model_overrides still wins over everything', () => {
      dir = project({ model_profile: 'quality', dynamic_routing: DR, model_overrides: { 'msd-executor': 'PINNED' } });
      assert.strictEqual(resolveModel(dir, 'msd-executor'), 'PINNED');
    });

    // `tier` reports the PROFILE tier; dynamic_routing keys off the ROUTING tier
    // (light/standard/heavy), a different vocabulary. So under dynamic routing the
    // two fields describe different axes and do not have to match. Pinned here so
    // the combination is a deliberate, visible property rather than a surprise.
    test('`tier` keeps reporting the profile tier when the tier table supplies the model', () => {
      dir = project({ model_profile: 'quality', dynamic_routing: DR });
      const r = runMsdTools('query resolve-model msd-executor', dir, { HOME: dir, MSD_HOME: dir, MSD_RUNTIME: '' });
      assert.ok(r.success, r.error);
      const parsed = JSON.parse(r.output);
      assert.strictEqual(parsed.model, 'DR-STANDARD');
      assert.strictEqual(parsed.tier, 'opus');
    });

    // resolve-execution with the attempt ABSENT is the one behaviour the
    // #2068 gate change touches; it must agree with resolve-model.
    test('resolve-execution with no --attempt agrees with resolve-model', () => {
      dir = project({ model_profile: 'quality', dynamic_routing: DR });
      const r = runMsdTools('query resolve-execution msd-executor', dir, { HOME: dir, MSD_HOME: dir, MSD_RUNTIME: '' });
      assert.ok(r.success, r.error);
      assert.strictEqual(JSON.parse(r.output).model, resolveModel(dir, 'msd-executor'));
    });

    // Boundary on the escalation cap: limit-1 / limit / limit+1.
    for (const [attempt, expected] of [[0, 'DR-STANDARD'], [1, 'opus'], [2, 'opus']]) {
      test(`max_escalations:1 — attempt ${attempt} resolves ${expected}`, () => {
        dir = project({ model_profile: 'quality', dynamic_routing: { ...DR, max_escalations: 1 } });
        assert.strictEqual(resolveExecutionModel(dir, 'msd-executor', attempt), expected);
      });
    }

    test('max_escalations:0 pins attempt 1 to the default tier', () => {
      dir = project({ model_profile: 'quality', dynamic_routing: { ...DR, max_escalations: 0 } });
      assert.strictEqual(resolveExecutionModel(dir, 'msd-executor', 1), 'DR-STANDARD');
    });
  });

  describe('#4505 half A — the runtime-aware tier map must follow the ACTIVE runtime', () => {
    let dir;
    afterEach(() => { if (dir) cleanup(dir); dir = null; });

    const OVERRIDES = { model_profile_overrides: { opencode: { sonnet: 'TEST-OPENCODE' } } };

    // FAILING-FIRST. Measured on the unfixed tree: "sonnet" — the override is
    // silently ignored because config.runtime is absent.
    test('MSD_RUNTIME selects the runtime tier map (#4495)', () => {
      dir = project(OVERRIDES);
      assert.strictEqual(resolveModel(dir, 'msd-phase-researcher', 'opencode'), 'TEST-OPENCODE');
    });

    // CONTROL — identical override, runtime declared in the config instead.
    // Passes on the unfixed tree, so it proves the override machinery works and
    // the fixture is live; without it the row above could be failing for any
    // reason at all.
    test('CONTROL: the same override already works when runtime is written into the config', () => {
      dir = project({ runtime: 'opencode', ...OVERRIDES });
      assert.strictEqual(resolveModel(dir, 'msd-phase-researcher'), 'TEST-OPENCODE');
    });

    // NEGATIVE SPACE: with no runtime declared anywhere the active runtime is
    // 'claude', so step 3's deliberate claude skip (#1156/#2297/#4192) must
    // still apply and the opencode map must NOT leak in.
    test('no runtime declared anywhere still resolves claude-native, not opencode', () => {
      dir = project(OVERRIDES);
      assert.strictEqual(resolveModel(dir, 'msd-phase-researcher'), 'sonnet');
    });

    test('claude stays alias-native via its own tier override path', () => {
      dir = project({ model_profile_overrides: { claude: { sonnet: 'TEST-CLAUDE' } } });
      assert.strictEqual(resolveModel(dir, 'msd-phase-researcher', 'claude'), 'TEST-CLAUDE');
    });

    // The VALUE policy follows the active runtime too. #4192 originally keyed
    // this off `config.runtime` and wrote that it must stay that way; applying
    // #4505's criterion to it turned out to SERVE #4192's own principle ("an
    // explicit pin must not be silently unpinned") rather than fight it, and no
    // test pinned the old reading. Without the fix the first assertion returns
    // 'opus' — a Claude-only alias handed to a runtime that cannot spawn it.
    test('an explicit claude pin is not unpinned just because the runtime came from env', () => {
      dir = project({ model_overrides: { 'msd-phase-researcher': 'claude-opus-4-8' } });
      assert.strictEqual(resolveModel(dir, 'msd-phase-researcher', 'opencode'), 'claude-opus-4-8');
    });

    test('the same pin still collapses to its alias when claude IS the active runtime', () => {
      dir = project({ model_overrides: { 'msd-phase-researcher': 'claude-opus-4-8' } });
      assert.strictEqual(resolveModel(dir, 'msd-phase-researcher', 'claude'), 'opus');
    });
  });

  // Making step 3 reachable for env/marker-declared runtimes newly exposes an
  // ordering that two shipped fixes had each decided in isolation, and which
  // only coexisted because step 3 could not fire without `config.runtime`.
  // Neither #4505 nor #4495/#4493 mentions it. These rows pin both halves so a
  // future edit cannot quietly pick one and drop the other.
  describe('#4505 — runtime tier map vs the resolve_model_ids:"omit" gate', () => {
    let dir;
    afterEach(() => { if (dir) cleanup(dir); dir = null; });

    test('#2517: an explicit runtime opt-in in the config outranks an omit', () => {
      dir = project({ runtime: 'codex', resolve_model_ids: 'omit' });
      // The concrete codex tier model, not merely "not empty" — `notStrictEqual('')`
      // would also pass on `opus`, i.e. on the omit gate being skipped for the
      // wrong reason.
      assert.strictEqual(resolveModel(dir, 'msd-executor'), 'gpt-5.6-terra');
    });

    // The omit lives in the SHARED ~/.msd/defaults.json, not the project config —
    // that is the "poisoned global" #2297 acceptance #4 is actually about. An
    // earlier cut of this row wrote it into the project config, which is the
    // #2517 project-explicit path and exercises a different branch entirely.
    test('#4717 (decision a): a DETECTED runtime opts into its tier map past a GLOBAL omit', () => {
      // No project config at all — see the `project` docblock: that is the only
      // shape in which the shared defaults layer is consulted. #4717's
      // user-sanctioned semantics change supersedes the #2297 acceptance-#4
      // reading: the fill materializes the detected runtime into config.runtime
      // and a recognised non-Claude runtime there opts into its own tier map.
      dir = project(null, { resolve_model_ids: 'omit' });
      assert.strictEqual(resolveModel(dir, 'msd-executor', 'codex'), 'gpt-5.6-terra');
    });

    test('#4717 (decision a): a project-explicit omit also yields to a detected runtime\'s tier map', () => {
      dir = project({ resolve_model_ids: 'omit' });
      assert.strictEqual(resolveModel(dir, 'msd-executor', 'codex'), 'gpt-5.6-terra');
    });

    // The opt-in signal is CANONICALIZED. An earlier cut of this fix compared the
    // raw config field against the literal 'claude', so every other spelling of
    // Claude — and any non-string — counted as a deliberate non-Claude opt-in and
    // bought an escalation past an explicit omit. Failing OPEN, in the exact case
    // the guard exists to protect. Each row below returned a model id before the
    // canonicalization and returns '' on origin/next.
    for (const [label, runtimeValue] of [
      ['a case variant', 'Claude'],
      ['a known alias', 'claude-code'],
      ['a non-string', 5],
      ['an unrecognised runtime', 'not-a-real-runtime'],
    ]) {
      test(`${label} in the runtime key is NOT a non-Claude opt-in`, () => {
        dir = project({ runtime: runtimeValue, resolve_model_ids: 'omit' });
        assert.strictEqual(
          resolveModel(dir, 'msd-executor', 'codex'),
          '',
          'only a value that canonicalizes to a recognised non-Claude runtime may '
          + 'outrank the omit gate — anything else must fail safe',
        );
      });
    }
  });
}