AI CLI model-catalog rollout
Model-catalog reconciliation is additive and explicit. It does not run on upgrade, daemon startup, ordinary ticks, or schedules; it does not log in, update an AI CLI, send a prompt, make a paid probe, restart an agent, or change an existing session.
The operator workflow is manual and daemon-backed:
- Preview with
warden models refresh [--aicli ID](aliaswarden backend model refresh). It runs each installed AI CLI’s non-generating model discovery, submits the evidence to the daemon and prints the proposal. A preview changes no routing policy. Account identity is conveyed only as an opaquescope_fp. - Inspect the operations and blocked entries, then apply with
warden models refresh --apply --yes. Automation can usePOST /api/v1/model-catalog/proposals,POST /api/v1/model-catalog/proposals/{proposal_id}/apply, or MCPpreview_model_catalog/apply_model_catalog_proposal. - Reselect a running agent with
warden switch AGENT --aicli ID(catalog pick at the agent’s own role tier),--aicli ID --tier tier-N,--tier tier-N, or an explicit--aicli ID --model MODELpin. Existing, pinned, restored and live sessions are otherwise unchanged. - Inspect history with
warden models historyand, if needed, roll back the exact revision withwarden models rollback REV --yes. Rollback is compare-and-swap policy history, not a live-session restart.
Automatic recovery from an invalid model at launch is deferred until the PTY migration and state/prompt/error detection redesign; nothing retries or substitutes a model for you.
Partial, stale, offline, malformed, unsupported, or failed evidence cannot retire a model. Seed entries are bootstrap/unknown fallback only, not proof of current availability; accepted negative evidence is not reset by seed code. Explicit model/tier/quota choices remain operator intent. On an account or profile switch, create and inspect a fresh scoped preview.
Claude, Aider, and Goose do not have dynamic entitlement discovery in this release. For a full API example, compatibility/deprecation guidance, downgrade matrix, stuck-session handling, and release checklist, see the repository’s model-catalog rollout runbook.