import {

buildAllowedModelSet,

buildConfiguredModelCatalog,

isModelKeyAllowedBySet,

modelKey,

normalizeModelRef,

parseModelRef,

if (overrideModel) {

const normalizedOverride = normalizeModelRef(overrideProvider, overrideModel);

const key = modelKey(normalizedOverride.provider, normalizedOverride.model);

if (!allowAnyModel && !allowedModelKeys.has(key)) {

if (!allowAnyModel && !isModelKeyAllowedBySet(allowedModelKeys, key)) {

const { updated } = applyModelOverrideToSessionEntry({

entry,

selection: { provider: defaultProvider, model: defaultModel, isDefault: true },

const candidateProvider = storedProviderOverride || defaultProvider;

const normalizedStored = normalizeModelRef(candidateProvider, storedModelOverride);

const key = modelKey(normalizedStored.provider, normalizedStored.model);

if (allowAnyModel || allowedModelKeys.has(key)) {

if (allowAnyModel || isModelKeyAllowedBySet(allowedModelKeys, key)) {

provider = normalizedStored.provider;

model = normalizedStored.model;

}

throw new Error("Invalid model override.");

}

const explicitKey = modelKey(explicitRef.provider, explicitRef.model);

if (!allowAnyModel && !allowedModelKeys.has(explicitKey)) {

if (!allowAnyModel && !isModelKeyAllowedBySet(allowedModelKeys, explicitKey)) {

throw new Error(

`Model override "${sanitizeForLog(explicitRef.provider)}/${sanitizeForLog(explicitRef.model)}" is not allowed for agent "${sessionAgentId}".`,

);

}

const switchRef = normalizeModelRef(err.provider, err.model);

const switchKey = modelKey(switchRef.provider, switchRef.model);

if (!allowAnyModel && !allowedModelKeys.has(switchKey)) {

if (!allowAnyModel && !isModelKeyAllowedBySet(allowedModelKeys, switchKey)) {

log.info(

`Live session model switch in subagent run ${runId}: ` +

`rejected ${sanitizeForLog(err.provider)}/${sanitizeForLog(err.model)} (not in allowlist)`,