feat(cli): add squad config model command for model pinning (#618)

.gitignore

@@ -11,7 +11,8 @@ coverage/
 .squad/decisions/inbox/
 .squad/sessions/
 .squad/config.json
-.test-cli-*
+# Test temp dirs (created in cwd by vitest tests, cleaned in afterEach)
+.test-*
 # Docs site generated files
 docs/dist/
 docs/src/content/docs/reference/api/

.squad/agents/fido/history.md

@@ -6,6 +6,8 @@
 
 Quality gate authority for all PRs. Test assertion arrays (EXPECTED_GUIDES, EXPECTED_FEATURES, EXPECTED_SCENARIOS, etc.) MUST stay in sync with files on disk. When reviewing PRs with CI failures, always check if dev branch has the same failures — don't block PRs for pre-existing issues. 3,931 tests passing, 149 test files, ~89s runtime.
 
+📌 **Team update (2026-03-26T06:41:00Z — Crash Recovery Execution & Community PR Review):** Post-CLI crash recovery completed: Round 1 baseline verified (5,038 tests ✅ green), Round 2 executed duplicate closures (#605/#604/#602) and 9-PR community batch review. FIDO approved 3 PRs (#625 notification-routing, #603 Challenger agent, #608 security policy—merged via Coordinator) and issued change requests on 6 PRs identifying systemic issues: changeset package naming (4 PRs used unscoped `squad-cli` instead of `@bradygaster/squad-cli`); file paths (2 PRs placed files at root instead of correct package structure). Quality gate result: high-bar community acceptance—approved 3/9 (33%), change-request 6/9 (67%), 0 rejections. PR #592 (legacy, high-quality) also merged. All actions complete; dev branch remains green. Decision inbox merged and deleted. Next: Monitor 6 change-request PRs for author responses.
+
 📌 **Team update (2026-03-25T15:23Z — Triage Session & PR Review Batch):** FIDO reviewed 10 open PRs for quality and merge readiness. Identified 3 duplicate/overlap pairs consolidating 6 PRs into 4: #607 (retro enforcement, comprehensive) approved for merge, #605 closed as duplicate (less comprehensive). #603 (Challenger agent, correct paths) approved for merge, #604 closed as duplicate (wrong file paths). #606 (tiered memory superset, 3-tier model) approved for merge, #602 closed as duplicate (narrower 2-tier scope). Merge-ready PRs identified: #611 (blocked on #610), #592 (joniba wiring guide, high-quality). Draft #567 not ready. Impact: reduces PR count from 10 to 7, eliminates file conflicts, preserves unique value. All other PRs (#611, #608, #592, #567) can proceed independently. Decisions merged to decisions.md and decisions inbox deleted.
 
 ## Learnings
@@ -209,3 +211,15 @@ Reviewed all 10 open PRs for quality, test coverage, and merge readiness.
 - None for mergeability — all non-overlapping PRs are technically ready
 - Deduplication decision needed for tamirdresher's PRs before merging any of them
 
+### Community PR Batch Review — Post-Crash Recovery (2026-03-26)
+
+Reviewed 9 community PRs (8 from tamirdresher, 1 from eric-vanartsdalen). Key findings:
+
+1. **Changeset package name pattern:** 4 of 8 Tamir PRs (#623, #622, #621, #614) use unscoped `"squad-cli"` / `"squad-sdk"` instead of `"@bradygaster/squad-cli"` / `"@bradygaster/squad-sdk"`. Only #625 got this right. This is a recurring community contributor mistake — consider adding guidance to CONTRIBUTING.md or PR template.
+
+2. **File path pattern:** PRs #607 and #606 place files at root `ceremonies/`, `skills/`, `docs/`, `templates/` directories that don't exist. Skills belong in `packages/squad-cli/templates/skills/` and SDK equivalent. Community contributors don't know the monorepo layout.
+
+3. **Verdicts:** ✅ MERGE: #625 (notification-routing), #603 (Challenger agent), #608 (SECURITY.md). ⚠️ NEEDS CHANGES: #623, #622, #621, #614 (changeset fix), #607, #606 (path restructuring).
+
+**Learning:** Community contributors consistently struggle with two things: (a) scoped npm package names in changesets, and (b) monorepo file placement. Both are preventable with better contributor docs.
+

.squad/agents/flight/history.md

@@ -4,6 +4,8 @@
 
 ---
 
+📌 **Team update (2026-03-26T06:41:00Z — Crash Recovery Execution Complete):** Post-CLI crash recovery executed in 3 rounds. Round 1: Flight audited PR/issue state (found #617 merged, #619 conflicting, 3 dupes #605/#604/#602 open); FIDO verified baseline (5,038 tests ✅ green); Scribe merged stale inbox. Round 2: Flight closed 3 duplicate PRs with rationale; Procedures rebased PR #619 (model catalog) onto dev, resolved 3 merge conflicts, merged; FIDO reviewed 9 community PRs—approved 3 (#625/#603/#608), requested changes on 6 (package naming, file paths). Round 3: Coordinator merged 3 approved PRs. **10 PRs merged total** (6 merge-plan, 3 community, 1 legacy #592). **3 PRs closed** as duplicates. **6 PRs awaiting author revisions**. **Dev branch green** (5,038 tests). All merge-plan sequence complete. Draft #567 parked pending requirements. Decision inbox merged to decisions.md and deleted. Next: Monitor change-request PRs for author responses.
+
 📌 **Team update (2026-03-25T15:23Z — Triage Session & PR Review):** Flight triaged 14 untriaged GitHub issues, created prioritized work session plan. Identified high-value quick wins (P1): #610 (docs broken link, 5-min fix), #590 (getPersonalSquadRoot bug, P0), #591 (hiring wiring docs). Deferred community feature contributions (#601–#595) pending PR review. Categorized maintenance (P2) and questions for community. FIDO reviewed 10 open PRs, identified 3 duplicate/overlap pairs (6 PRs consolidate to 4: merge #607/#603/#606, close #605/#604/#602). Work session priority: #610→PAO, #590→EECOM, #592/#611→Flight review, #588→Procedures. Established PR review strategy: Tamir PRs require proposal-first discipline before review. Merge-ready identified: #611 (blocked on #610), #592 (joniba wiring guide, high-quality). A2A protocol PRs remain shelved. All 14 issues fully categorized with squad assignments. Decision inbox merged to decisions.md. Session complete; team ready for execution.
 
 📌 **Team update (2026-03-23T22:00Z — Release Crisis Recovery):** v0.9.0→v0.9.1 incident resolved. Released v0.9.1 stable on npm after 8-hour debugging marathon (should have been 10 min). Root causes: dependency validation gap (file: refs in packages), GitHub workflow cache race, npm workspace publish automation broken, coordinator decision-making under pressure, no pre-publish verification. Created comprehensive retrospective with 5 root causes and 6 action items (A1–A6). Filed 9 GitHub issues (#556–#564) documenting release process improvements. Pre-flight job added to publish pipeline (dependency scanning + semver validation). Surgeon charter hardened with release governance rules. 10 community PRs merged (#569, #570, #571, #555, #552, #568, #572, #513, #573, #574). Discussion board fully triaged (15 discussions: 4 closed, 1 consolidated, 2 converted to issue, 8 kept). Dark mode fix deployed to production. Release process skill created at `.squad/skills/release-process/SKILL.md`. 9 GitHub issues filed for release improvements. Team ready for next cycle.

.squad/agents/procedures/history.md

@@ -13,6 +13,8 @@ Procedures assigned:
 
 Pattern: Agent specification gap identified. Procedures owns formal spec structure and documentation; Flight owns architecture decisions.
 
+📌 **Team update (2026-03-26T06:41:00Z — Crash Recovery Execution & Model Catalog Merge):** Procedures executed Round 2 PR merge action: rebased PR #619 (model catalog refresh, issue #588) onto dev branch from main, resolved 3 merge conflicts, and successfully merged. Model catalog now current: default model bumped to `claude-sonnet-4.6` (latest standard-tier Claude), specialist bumped to `gpt-5.3-codex` (latest code-writing specialist), fallback chains restructured to include new models (`gpt-5.4`, `gpt-5.4-mini`) and removed dead models (`claude-opus-4.6-fast`). All 6 original merge-plan PRs (#620, #627, #624, #611, #617, #619) now ✅ complete. Dev branch green (5,038 tests). Decision inbox merged to decisions.md and deleted. Next: Ready for follow-on feature PRs.
+
 📌 **Team update (2026-03-22T06:44:01Z):** Flight issued comprehensive triage. Procedures owns Agent Specification PRD structure (#485). Architecture decisions from Flight. Coordinate on formal spec format and standard structure for future agent definitions.
 # Procedures — Project History
 
@@ -186,3 +188,11 @@ Also updated: examples section (showing `name` + `description` pairs), anti-patt
 
 **Remaining P1 fixes** (template renaming, prompt slimming, VS Code block relocation) deferred to separate PRs per the proposal's ship order.
 
+### 2026-07: PR #619 rebase and merge — model catalog final sync
+
+**Problem:** PR #619 (model catalog update, #588) was the last of 6 PRs in the pre-crash triage merge plan. It had accumulated old dev merge commits and was behind after PRs #620, #627, #624, #611, and #617 merged first. Template renames from #624 (`.agent.md` → `.agent.md.template`) changed which files needed updating.
+
+**Fix:** Used targeted `git rebase --onto dev <base>` to replay only the 2 actual PR commits (skipping accumulated dev merge noise). Rebase applied cleanly — one commit landed, one was auto-dropped as already upstream. After rebase, only `packages/squad-sdk/templates/squad.agent.md.template` and `templates/squad.agent.md.template` needed changes since the canonical and other copies already had the model updates from earlier merges.
+
+**Pattern:** When a PR branch has accumulated merge commits from dev, use `git rebase --onto dev <parent-of-first-PR-commit>` to cherry-pick only the relevant commits. This avoids conflict noise from old merge commits that are already in dev. Also: after template renames, the sync script may overwrite version stamps in the canonical file — revert those before pushing.
+

.squad/decisions.md

@@ -5965,6 +5965,73 @@ Copied during init if user opts into distributed mode (future enhancement). For
 ✅ **Copy `SKILL.md` to `templates/skills/distributed-mesh/SKILL.md`** (and SDK/CLI template dirs)
 
 ### No Changes Required
+
+---
+
+## 2026-03-26: Crash Recovery Execution — 10 PRs Merged
+
+**Author:** Scribe (documenting Round 2+3 outcomes)  
+**Date:** 2026-03-26T06:41:00Z  
+**Context:** Post-CLI crash triage session, team consensus executed across three recovery rounds.
+
+### Round 1 (Audit & Baseline)
+- **Flight** audited PR/issue state post-crash: found #617 already merged, #619 conflicting, 3 duplicates (#605, #604, #602) open
+- **FIDO** verified build baseline: ✅ 5,038 tests passing, dev green
+- **Scribe** merged stale decision inbox (procedures-model-update.md), logged crash session
+
+### Round 2 (Duplicate Closure & PR Actions)
+- **Flight** closed 3 duplicate PRs (#605, #604, #602) with rationale comments
+- **Procedures** rebased PR #619 (model catalog) onto dev, resolved 3 merge conflicts, merged
+- **FIDO** reviewed 9 community PRs: ✅ approved 3 (#625, #603, #608), requested changes on 6 (#623, #622, #621, #614, #607, #606)
+
+### Round 3 (Community Merges)
+- **Coordinator** merged 3 approved community PRs: #625 (notification-routing), #608 (security policy), #603 (Challenger agent template)
+- **Flight** confirmed all merges and verified state
+
+### Outcomes
+- **PRs merged:** 10 total
+  - 6 merge-plan PRs (#620, #627, #624, #611, #617, #619) ✅ all complete
+  - 3 community PRs (#625, #608, #603) ✅ merged
+  - 1 legacy PR (#592) ✅ merged
+- **PRs closed:** 3 duplicates
+- **PRs awaiting author changes:** 6 (#623, #622, #621, #614, #607, #606)
+- **Dev branch status:** 5,038 tests passing ✅ Green
+
+### Decisions Made
+1. **Duplicate closure rationale:**
+   - #605 → duplicate of #607 (ceremonies-related)
+   - #604 → duplicate of #603 (Challenger agent)
+   - #602 → duplicate of #606 (tiered agent memory)
+
+2. **Community PR quality gate:** FIDO identified systemic issues in lower-tier PRs:
+   - **Changeset package naming:** 4 PRs used unscoped `squad-cli` instead of `@bradygaster/squad-cli`
+   - **File paths:** 2 PRs placed files at root-level instead of correct package structure
+   - **Action:** Requested specific changes; authors must revise
+
+3. **Model catalog (PR #619):** Rebased with conflict resolution, merged successfully. Platform models now current: `claude-sonnet-4.6` (default), `gpt-5.3-codex` (specialist), new fallbacks added.
+
+### Next Steps
+- Monitor 6 change-request PRs for author responses (48h window)
+- Park draft PR #567 pending requirements clarification
+- Dev branch remains green; ready for follow-on feature work
+
+---
+
+## 2026-03-26: Decision Inbox Merge Complete
+
+**Author:** Scribe  
+**Date:** 2026-03-26T06:41:00Z
+
+### Inbox Files Merged & Deleted
+1. ✅ `fido-community-pr-review.md` — 9-PR review with quality gate findings
+2. ✅ `flight-crash-recovery-audit.md` — Baseline PR/issue audit post-crash
+3. ✅ `flight-phase1-execution.md` — Duplicate closure + community PR merge execution
+4. ✅ `procedures-model-update.md` — Model catalog refresh decision
+
+### Deduplication
+- **No exact duplicates found** — each inbox file covers distinct aspects (audit vs. execution vs. review)
+- **Integrated into crash-recovery decision** above (single coherent timeline)
+- All inbox files archived and deleted per standard Scribe workflow
 ❌ **squad.config.ts** — Does NOT need a `mesh` section. The mesh config lives in `mesh.json` as a separate concern. squad.config.ts is for agent behavior, not transport.
 
 ❌ **squad.agent.md** — Does NOT need mesh awareness. Agents learn mesh patterns from the skill file, not the coordinator prompt.