@garygentry/system1 0.3.0 → 0.3.2

package/dist/bundle/chunks/{bin-TCIHP5PC.mjs → bin-3EWFISFQ.mjs}

@@ -6,38 +6,10 @@ import {
   VERSION,
   emit,
   extractFormat
-} from "./chunk-NUIZJRI6.mjs";
+} from "./chunk-4ZZ3ZSJN.mjs";
 
 // src/bin.ts
-import { readFileSync as readFileSync2 } from "node:fs";
-
-// src/bundled.ts
-import { existsSync, readFileSync } from "node:fs";
-import { dirname, join } from "node:path";
-import { fileURLToPath } from "node:url";
-var PACKAGE = "@garygentry/system1";
-function bundledSpecsDir(from = fileURLToPath(import.meta.url)) {
-  const root = packageRoot(dirname(from));
-  if (!root) return void 0;
-  const own = join(root, "specs");
-  if (existsSync(own)) return own;
-  const checkout = join(root, "..", "..");
-  const plugin = join(checkout, "plugins", "system1", "specs");
-  return existsSync(join(checkout, "catalog.yaml")) && existsSync(plugin) ? plugin : void 0;
-}
-function packageRoot(start) {
-  for (let dir = start; ; dir = dirname(dir)) {
-    const manifest = join(dir, "package.json");
-    if (existsSync(manifest)) {
-      try {
-        if (JSON.parse(readFileSync(manifest, "utf8")).name === PACKAGE)
-          return dir;
-      } catch {
-      }
-    }
-    if (dirname(dir) === dir) return void 0;
-  }
-}
+import { readFileSync } from "node:fs";
 
 // src/main.ts
 var HELP = `decide ${VERSION} \u2014 typed, calibrated decisions for coding agents
@@ -92,23 +64,23 @@ async function main(argv, io) {
   }
   switch (command) {
     case "ask":
-      return (await import("./decide-XVVRKQ3V.mjs")).runAskCommand(rest, io, format);
+      return (await import("./decide-AAXD3ITT.mjs")).runAskCommand(rest, io, format);
     case "many":
-      return (await import("./decide-XVVRKQ3V.mjs")).runManyCommand(rest, io, format);
+      return (await import("./decide-AAXD3ITT.mjs")).runManyCommand(rest, io, format);
     case "usage":
-      return (await import("./misc-FHOVQJ2G.mjs")).runUsageCommand(rest, io, format);
+      return (await import("./misc-IW4I3SO6.mjs")).runUsageCommand(rest, io, format);
     case "config":
-      return (await import("./config-REALJZDR.mjs")).runConfigCommand(rest, io, format);
+      return (await import("./config-UUPD2JL4.mjs")).runConfigCommand(rest, io, format);
     case "spec":
-      return (await import("./spec-734MPBKB.mjs")).runSpecCommand(rest, io, format);
+      return (await import("./spec-RKA3K6ZZ.mjs")).runSpecCommand(rest, io, format);
     case "schema":
-      return (await import("./misc-FHOVQJ2G.mjs")).runSchemaCommand(rest, io, format);
+      return (await import("./misc-IW4I3SO6.mjs")).runSchemaCommand(rest, io, format);
     case "route":
-      return (await import("./route-NMFOTXLI.mjs")).runRouteCommand(rest, io, format);
+      return (await import("./route-7N3J5NP6.mjs")).runRouteCommand(rest, io, format);
     case "ping":
-      return (await import("./misc-FHOVQJ2G.mjs")).runPingCommand(io, format);
+      return (await import("./misc-IW4I3SO6.mjs")).runPingCommand(io, format);
     case "doctor":
-      return (await import("./doctor-TKFVFCZV.mjs")).runDoctorCommand(io, format);
+      return (await import("./doctor-KPJ5KVLS.mjs")).runDoctorCommand(io, format);
     case "version":
     case "--version":
     case "-v":
@@ -138,7 +110,6 @@ process.exitCode = await main(process.argv.slice(2), {
   err: line(process.stderr),
   env: process.env,
   cwd: process.cwd(),
-  readStdin: () => readFileSync2(0, "utf8"),
-  interactive: Boolean(process.stdin.isTTY && process.stdout.isTTY),
-  ...bundledSpecsDir() ? { bundledSpecs: bundledSpecsDir() } : {}
+  readStdin: () => readFileSync(0, "utf8"),
+  interactive: Boolean(process.stdin.isTTY && process.stdout.isTTY)
 });

package/dist/bundle/chunks/{chunk-NUIZJRI6.mjs → chunk-4ZZ3ZSJN.mjs}

@@ -70,7 +70,9 @@ var EXIT = {
   egressRefused: 3,
   budgetGuard: 4,
   providerError: 5,
-  replayMiss: 6
+  replayMiss: 6,
+  /** `spec check --strict` only: the check ran, and an example did not pass. */
+  checkFailed: 7
 };
 var BY_CODE = {
   "invalid-request": EXIT.usage,
@@ -145,7 +147,7 @@ function extractFormat(argv, fallback) {
 }
 
 // ../core/dist/version.js
-var VERSION = "0.3.0";
+var VERSION = "0.3.2";
 var CLI_PACKAGE = "@garygentry/system1";
 
 export {

package/dist/bundle/chunks/{chunk-S5AIBUL7.mjs → chunk-5TUBFH7M.mjs}

@@ -9,7 +9,7 @@ import {
   __require,
   __toESM,
   isDecisionsError
-} from "./chunk-NUIZJRI6.mjs";
+} from "./chunk-4ZZ3ZSJN.mjs";
 
 // ../../node_modules/.pnpm/yaml@2.9.1/node_modules/yaml/dist/nodes/identity.js
 var require_identity = __commonJS({
@@ -9117,54 +9117,6 @@ var require_picomatch2 = __commonJS({
   }
 });
 
-// ../core/dist/config/load.js
-var import_yaml = __toESM(require_dist(), 1);
-import { existsSync, readFileSync, statSync } from "node:fs";
-import { homedir } from "node:os";
-import { dirname, join, resolve } from "node:path";
-
-// ../core/dist/model/answers.js
-var DEFAULT_UNDECIDED_FLOOR = 0.15;
-function noulConfidence(answer) {
-  return Math.abs(answer.noul - 0.5) * 2;
-}
-function confidenceOf(answer) {
-  return answer.type === "noul" ? noulConfidence(answer) : answer.confidence;
-}
-function undecidedNames(answers, floor = DEFAULT_UNDECIDED_FLOOR) {
-  return Object.entries(answers).filter(([, answer]) => confidenceOf(answer) <= floor).map(([name]) => name);
-}
-
-// ../core/dist/model/profiles.js
-var PROFILES = [
-  {
-    id: "typesafe/jev-1.13",
-    displayName: "TypeSafe Jev 1.13",
-    transport: "openrouter-decisions",
-    maxStateTokens: 32e3,
-    // Measured 2026-09-22: 400 options is refused upstream with "at most 255 choices".
-    maxChoices: 255,
-    usdPerInputToken: 0.042 / 1e6,
-    usdPerOutputToken: 0,
-    priceAsOf: "2026-09-19",
-    undecidedFloor: DEFAULT_UNDECIDED_FLOOR,
-    calibrated: true
-  }
-];
-var DEFAULT_MODEL_ID = "typesafe/jev-1.13";
-function resolveProfile(id, profiles = PROFILES) {
-  const exact = profiles.find((p) => p.id === id);
-  if (exact)
-    return exact;
-  const family = profiles.find((p) => new RegExp(`^${escapeRegExp(p.id)}-\\d{8}$`).test(id));
-  if (family)
-    return { ...family, id };
-  throw new DecisionsError("unknown-model", `No profile for model "${id}". Known: ${profiles.map((p) => p.id).join(", ")}.`, { model: id, known: profiles.map((p) => p.id) });
-}
-function escapeRegExp(text) {
-  return text.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
-}
-
 // ../core/dist/route/route.js
 var ROUTE_DEFAULTS = {
   enabled: true,
@@ -9266,7 +9218,58 @@ function route(prompt, config) {
   };
 }
 
+// ../core/dist/config/load.js
+var import_yaml = __toESM(require_dist(), 1);
+import { existsSync, readFileSync, statSync } from "node:fs";
+import { homedir } from "node:os";
+import { dirname, join, resolve } from "node:path";
+
+// ../core/dist/model/answers.js
+var DEFAULT_UNDECIDED_FLOOR = 0.15;
+function noulConfidence(answer) {
+  return Math.abs(answer.noul - 0.5) * 2;
+}
+function confidenceOf(answer) {
+  return answer.type === "noul" ? noulConfidence(answer) : answer.confidence;
+}
+function undecidedNames(answers, floor = DEFAULT_UNDECIDED_FLOOR) {
+  return Object.entries(answers).filter(([, answer]) => confidenceOf(answer) <= floor).map(([name]) => name);
+}
+
+// ../core/dist/model/profiles.js
+var JEV_CALL_OVERHEAD_TOKENS = 300;
+var PROFILES = [
+  {
+    id: "typesafe/jev-1.13",
+    displayName: "TypeSafe Jev 1.13",
+    transport: "openrouter-decisions",
+    maxStateTokens: 32e3,
+    // Measured 2026-09-22: 400 options is refused upstream with "at most 255 choices".
+    maxChoices: 255,
+    callOverheadTokens: JEV_CALL_OVERHEAD_TOKENS,
+    usdPerInputToken: 0.042 / 1e6,
+    usdPerOutputToken: 0,
+    priceAsOf: "2026-09-19",
+    undecidedFloor: DEFAULT_UNDECIDED_FLOOR,
+    calibrated: true
+  }
+];
+var DEFAULT_MODEL_ID = "typesafe/jev-1.13";
+function resolveProfile(id, profiles = PROFILES) {
+  const exact = profiles.find((p) => p.id === id);
+  if (exact)
+    return exact;
+  const family = profiles.find((p) => new RegExp(`^${escapeRegExp(p.id)}-\\d{8}$`).test(id));
+  if (family)
+    return { ...family, id };
+  throw new DecisionsError("unknown-model", `No profile for model "${id}". Known: ${profiles.map((p) => p.id).join(", ")}.`, { model: id, known: profiles.map((p) => p.id) });
+}
+function escapeRegExp(text) {
+  return text.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
+}
+
 // ../core/dist/model/validate.js
+var QUESTION_KEYS = ["type", "instructions", "criteria"];
 function assertQuestionSet(questions) {
   const problems = [];
   if (!isObject(questions) || Object.keys(questions).length === 0) {
@@ -9277,6 +9280,10 @@ function assertQuestionSet(questions) {
       problems.push(`${name}: must be an object`);
       continue;
     }
+    const extra = Object.keys(q).filter((k) => !QUESTION_KEYS.includes(k));
+    if (extra.length > 0) {
+      problems.push(`${name}: unknown key(s) ${extra.join(", ")} (a question has type, instructions, criteria)`);
+    }
     if (typeof q.instructions !== "string" || q.instructions.trim() === "") {
       problems.push(`${name}: instructions must be a non-empty string`);
     }
@@ -9556,14 +9563,20 @@ function loadConfig(options = {}) {
   const repoFile = repoConfigPath(repoRoot);
   const user = readLayer(userFile);
   const repo = readLayer(repoFile);
+  const warnings = [...unknownKeys(user, userFile, "user"), ...unknownKeys(repo, repoFile, "repo")];
+  const layers2 = [
+    { layer: repo, file: repoFile },
+    { layer: user, file: userFile }
+  ];
+  const pickFrom = (path, rule) => pick(path, rule, layers2, warnings);
   const merged = {
-    model: pick("model", "string", repo, user) ?? DEFAULTS.model,
-    endpoint: pick("endpoint", "string", repo, user) ?? DEFAULTS.endpoint,
-    concurrency: pick("concurrency", "number", repo, user) ?? DEFAULTS.concurrency,
-    timeoutMs: pick("timeoutMs", "number", repo, user) ?? DEFAULTS.timeoutMs,
+    model: pickFrom("model", TEXT) ?? DEFAULTS.model,
+    endpoint: pickFrom("endpoint", URL_TEXT) ?? DEFAULTS.endpoint,
+    concurrency: pickFrom("concurrency", WHOLE) ?? DEFAULTS.concurrency,
+    timeoutMs: pickFrom("timeoutMs", POSITIVE) ?? DEFAULTS.timeoutMs,
     budget: {
-      maxCalls: pickIn("budget", "maxCalls", repo, user) ?? DEFAULTS.budget.maxCalls,
-      maxUsd: pickIn("budget", "maxUsd", repo, user) ?? DEFAULTS.budget.maxUsd
+      maxCalls: pickFrom("budget.maxCalls", NON_NEGATIVE) ?? DEFAULTS.budget.maxCalls,
+      maxUsd: pickFrom("budget.maxUsd", NON_NEGATIVE) ?? DEFAULTS.budget.maxUsd
     },
     egress: {
       consent: readConsent(repo, repoFile),
@@ -9572,7 +9585,7 @@ function loadConfig(options = {}) {
         ...stringList(repo, "egress.exclude", repoFile)
       ]
     },
-    profiles: [...profileList(user, userFile), ...profileList(repo, repoFile)],
+    profiles: [...profileList(user, userFile, warnings), ...profileList(repo, repoFile, warnings)],
     route: readRoute(user, userFile, repo, repoFile, env)
   };
   const key = resolveApiKey(env, userDir);
@@ -9591,11 +9604,15 @@ function loadConfig(options = {}) {
       ...user ? { user: userFile } : {},
       ...repo ? { repo: repoFile } : {},
       ...key?.file ? { credentials: key.file } : {}
-    }
+    },
+    warnings
   };
 }
 function allProfiles(config) {
-  return [...PROFILES, ...config.profiles];
+  const byId = /* @__PURE__ */ new Map();
+  for (const profile of [...PROFILES, ...config.profiles])
+    byId.set(profile.id, profile);
+  return [...byId.values()];
 }
 function readLayer(file) {
   if (!existsSync(file))
@@ -9615,25 +9632,73 @@ function readLayer(file) {
   }
   return parsed;
 }
-function pick(key, type, ...layers2) {
-  for (const layer of layers2) {
-    const value = layer?.[key];
-    if (typeof value === type)
-      return value;
+var KNOWN = {
+  "": ["model", "endpoint", "concurrency", "timeoutMs", "budget", "egress", "profiles", "route"],
+  budget: ["maxCalls", "maxUsd"],
+  egress: ["consent", "exclude"]
+};
+function unknownKeys(layer, file, which2) {
+  if (!layer)
+    return [];
+  const warnings = Object.keys(layer).filter((k) => !KNOWN[""]?.includes(k)).map((key) => `${file}: unknown key ${key}`);
+  for (const section2 of ["budget", "egress"]) {
+    const value = layer[section2];
+    if (value === void 0 || value === null)
+      continue;
+    if (!isMapping(value)) {
+      warnings.push(`${file}: ${section2} must be a mapping (ignored)`);
+      continue;
+    }
+    for (const key of Object.keys(value)) {
+      if (!KNOWN[section2]?.includes(key))
+        warnings.push(`${file}: unknown key ${section2}.${key}`);
+    }
   }
-  return void 0;
+  const egress = layer.egress;
+  if (which2 === "user" && isMapping(egress) && egress.consent !== void 0) {
+    warnings.push(`${file}: egress.consent is read only from the repo file (ignored)`);
+  }
+  return warnings;
 }
-function pickIn(section2, key, ...layers2) {
-  for (const layer of layers2) {
-    const value = layer?.[section2]?.[key];
-    if (typeof value === "number" && value >= 0)
-      return value;
+var TEXT = { ok: (v) => typeof v === "string", expected: "text" };
+var URL_TEXT = {
+  ok: (v) => typeof v === "string" && URL.canParse(v) && /^https?:$/.test(new URL(v).protocol),
+  expected: "an http(s) URL"
+};
+var WHOLE = {
+  ok: (v) => Number.isInteger(v) && v >= 1,
+  expected: "a whole number of at least 1"
+};
+var POSITIVE = {
+  ok: (v) => typeof v === "number" && Number.isFinite(v) && v > 0,
+  expected: "a number above 0"
+};
+var NON_NEGATIVE = {
+  ok: (v) => typeof v === "number" && Number.isFinite(v) && v >= 0,
+  expected: "a number of at least 0"
+};
+function pick(path, rule, layers2, warnings) {
+  let found2;
+  for (const { layer, file } of layers2) {
+    const [head, key] = path.split(".");
+    let value = layer?.[head];
+    if (key !== void 0)
+      value = isMapping(value) ? value[key] : void 0;
+    if (value === void 0 || value === null)
+      continue;
+    if (!rule.ok(value))
+      warnings.push(`${file}: ${path} must be ${rule.expected} (ignored)`);
+    else if (found2 === void 0)
+      found2 = value;
   }
-  return void 0;
+  return found2;
+}
+function isMapping(value) {
+  return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 function readConsent(repo, file) {
   const consent = repo?.egress?.consent;
-  if (consent === void 0)
+  if (consent === void 0 || consent === null)
     return { granted: false };
   if (typeof consent !== "object" || consent === null || typeof consent.granted !== "boolean") {
     throw new DecisionsError("config-error", `${file}: egress.consent must be {granted: true|false, at?, by?}`, { file });
@@ -9647,7 +9712,7 @@ function readConsent(repo, file) {
 }
 function stringList(layer, path, file) {
   const value = layer?.egress?.exclude;
-  if (value === void 0)
+  if (value === void 0 || value === null)
     return [];
   if (!Array.isArray(value) || !value.every((v) => typeof v === "string")) {
     throw new DecisionsError("config-error", `${file}: ${path} must be a list of glob patterns`, {
@@ -9656,29 +9721,57 @@ function stringList(layer, path, file) {
   }
   return value;
 }
-function profileList(layer, file) {
+var PROFILE_FIELDS = [
+  "id",
+  "displayName",
+  "transport",
+  "maxStateTokens",
+  "maxChoices",
+  "callOverheadTokens",
+  "usdPerInputToken",
+  "usdPerOutputToken",
+  "priceAsOf",
+  "undecidedFloor",
+  "calibrated"
+];
+function profileList(layer, file, warnings) {
   const value = layer?.profiles;
-  if (value === void 0)
+  if (value === void 0 || value === null)
     return [];
   if (!Array.isArray(value))
     throw new DecisionsError("config-error", `${file}: profiles must be a list`, { file });
   return value.map((p, i) => {
-    const profile = p;
+    const profile = { ...p };
+    for (const [key, v] of Object.entries(profile)) {
+      if (v === null && PROFILE_FIELDS.includes(key)) {
+        delete profile[key];
+      }
+    }
     const ok = typeof profile.id === "string" && typeof profile.maxStateTokens === "number" && typeof profile.usdPerInputToken === "number" && typeof profile.undecidedFloor === "number";
     if (!ok) {
       throw new DecisionsError("config-error", `${file}: profiles[${i}] needs id, maxStateTokens, usdPerInputToken and undecidedFloor`, { file });
     }
+    if (profile.callOverheadTokens !== void 0 && !(Number.isInteger(profile.callOverheadTokens) && profile.callOverheadTokens >= 0)) {
+      throw new DecisionsError("config-error", `${file}: profiles[${i}].callOverheadTokens must be a whole number of at least 0`, { file });
+    }
     if (profile.maxChoices !== void 0 && !(Number.isInteger(profile.maxChoices) && profile.maxChoices >= 2)) {
       throw new DecisionsError("config-error", `${file}: profiles[${i}].maxChoices must be a whole number of at least 2`, { file });
     }
+    const extra = Object.keys(profile).filter((k) => !PROFILE_FIELDS.includes(k));
+    for (const key of extra) {
+      warnings.push(`${file}: unknown key profiles[${i}].${key} (ignored)`);
+      delete profile[key];
+    }
     return {
       displayName: profile.id,
       transport: "openrouter-decisions",
       usdPerOutputToken: 0,
       priceAsOf: "unknown",
       calibrated: true,
-      // Same wire contract as Jev unless the config says otherwise.
+      // Same wire contract as Jev unless the config says otherwise. The overhead is
+      // Jev's measured one: unknown for another model, but it errs toward stopping.
       maxChoices: 255,
+      callOverheadTokens: JEV_CALL_OVERHEAD_TOKENS,
       ...profile
     };
   });
@@ -9784,7 +9877,7 @@ function setConsent(repoRoot, granted, by, now = /* @__PURE__ */ new Date()) {
 function assertConsent(consent, repoRoot) {
   if (consent.granted)
     return;
-  throw new DecisionsError("egress-refused", `This repo has not agreed to send content to the decision model's provider. Consent is the user's: they run \`decide config egress allow\` in ${repoRoot} themselves (the setup skill explains what gets sent). Replay of recorded answers works without consent.`, { repoRoot });
+  throw new DecisionsError("egress-refused", `This repo has not agreed to send content to the decision model's provider. Consent is the user's, and an agent must not grant it: the user runs \`decide config egress allow\` themselves in a terminal in ${repoRoot}, or through their agent prompt's shell escape (not as a chat message) with --confirm added. The setup skill explains what gets sent. Replay of recorded answers works without consent.`, { repoRoot });
 }
 
 // ../core/dist/egress/exclude.js
@@ -19433,40 +19526,36 @@ function describeExpectation(expectation) {
 }
 
 // ../core/dist/spec/spec.js
-var Threshold = typebox_exports.Object({ value: typebox_exports.Number(), why: typebox_exports.String({ minLength: 1 }) });
+var CLOSED = { additionalProperties: false };
+var Threshold = typebox_exports.Object({ value: typebox_exports.Number(), why: typebox_exports.String({ minLength: 1 }) }, CLOSED);
 var SPEC_FORMAT = 1;
-var SpecSchema = typebox_exports.Object(
-  {
-    /** Spec file format. Absent means 1; a newer one is refused, not guessed. */
-    version: typebox_exports.Optional(typebox_exports.Integer({ minimum: 1 })),
-    description: typebox_exports.String({ minLength: 1 }),
-    questions: typebox_exports.Record(typebox_exports.String(), typebox_exports.Unknown()),
-    keep: typebox_exports.Optional(typebox_exports.Array(typebox_exports.String())),
-    sort: typebox_exports.Optional(typebox_exports.String()),
-    policy: typebox_exports.Optional(typebox_exports.Object({ thresholds: typebox_exports.Optional(typebox_exports.Record(typebox_exports.String(), Threshold)) })),
-    source: typebox_exports.Optional(typebox_exports.Object({
-      glob: typebox_exports.Optional(typebox_exports.Array(typebox_exports.String())),
-      file: typebox_exports.Optional(typebox_exports.String()),
-      jsonl: typebox_exports.Optional(typebox_exports.String()),
-      diff: typebox_exports.Optional(typebox_exports.String()),
-      split: typebox_exports.Optional(typebox_exports.String())
-    })),
-    examples: typebox_exports.Optional(typebox_exports.Array(typebox_exports.Object({
-      id: typebox_exports.String({ minLength: 1 }),
-      /** The text (or a JSON value, sent as its JSON text) to judge. Give this or `file`. */
-      state: typebox_exports.Optional(typebox_exports.Unknown()),
-      /** A repo file to judge, `path` or `path:START-END`. Give this or `state`. */
-      file: typebox_exports.Optional(typebox_exports.String()),
-      expect: typebox_exports.Optional(typebox_exports.Record(typebox_exports.String(), typebox_exports.Unknown()))
-    }))),
-    provenance: typebox_exports.Optional(typebox_exports.Record(typebox_exports.String(), typebox_exports.Unknown())),
-    /** Anything else a team wants to carry, ignored by the engine. */
-    meta: typebox_exports.Optional(typebox_exports.Record(typebox_exports.String(), typebox_exports.Unknown()))
-  },
-  // A misspelled key (`kepe:`, `exepct:`) must fail rather than silently
-  // becoming no policy at all.
-  { additionalProperties: false }
-);
+var SpecSchema = typebox_exports.Object({
+  /** Spec file format. Absent means 1; a newer one is refused, not guessed. */
+  version: typebox_exports.Optional(typebox_exports.Integer({ minimum: 1 })),
+  description: typebox_exports.String({ minLength: 1 }),
+  questions: typebox_exports.Record(typebox_exports.String(), typebox_exports.Unknown()),
+  keep: typebox_exports.Optional(typebox_exports.Array(typebox_exports.String())),
+  sort: typebox_exports.Optional(typebox_exports.String()),
+  policy: typebox_exports.Optional(typebox_exports.Object({ thresholds: typebox_exports.Optional(typebox_exports.Record(typebox_exports.String(), Threshold)) }, CLOSED)),
+  source: typebox_exports.Optional(typebox_exports.Object({
+    glob: typebox_exports.Optional(typebox_exports.Array(typebox_exports.String())),
+    file: typebox_exports.Optional(typebox_exports.String()),
+    jsonl: typebox_exports.Optional(typebox_exports.String()),
+    diff: typebox_exports.Optional(typebox_exports.String()),
+    split: typebox_exports.Optional(typebox_exports.String())
+  }, CLOSED)),
+  examples: typebox_exports.Optional(typebox_exports.Array(typebox_exports.Object({
+    id: typebox_exports.String({ minLength: 1 }),
+    /** The text (or a JSON value, sent as its JSON text) to judge. Give this or `file`. */
+    state: typebox_exports.Optional(typebox_exports.Unknown()),
+    /** A repo file to judge, `path` or `path:START-END`. Give this or `state`. */
+    file: typebox_exports.Optional(typebox_exports.String()),
+    expect: typebox_exports.Optional(typebox_exports.Record(typebox_exports.String(), typebox_exports.Unknown()))
+  }, CLOSED))),
+  provenance: typebox_exports.Optional(typebox_exports.Record(typebox_exports.String(), typebox_exports.Unknown())),
+  /** Anything else a team wants to carry, ignored by the engine. */
+  meta: typebox_exports.Optional(typebox_exports.Record(typebox_exports.String(), typebox_exports.Unknown()))
+}, CLOSED);
 var NAME = /^[a-z0-9][a-z0-9._-]*$/;
 function parseSpec(text, file, origin) {
   let raw;
@@ -20116,7 +20205,7 @@ function ledgerFor(ctx) {
 
 // ../core/dist/run/budget.js
 function project2(profile, tokensPerCall) {
-  const estimatedInputTokens = tokensPerCall.reduce((a, b) => a + b, 0);
+  const estimatedInputTokens = tokensPerCall.reduce((sum, tokens) => sum + tokens + profile.callOverheadTokens, 0);
   return {
     basis: "projected",
     calls: tokensPerCall.length,
@@ -20125,6 +20214,16 @@ function project2(profile, tokensPerCall) {
     priceAsOf: profile.priceAsOf
   };
 }
+function combineProjections(profile, parts) {
+  const estimatedInputTokens = parts.reduce((sum, p) => sum + p.estimatedInputTokens, 0);
+  return {
+    basis: "projected",
+    calls: parts.reduce((sum, p) => sum + p.calls, 0),
+    estimatedInputTokens,
+    projectedUsd: estimatedInputTokens * profile.usdPerInputToken,
+    priceAsOf: profile.priceAsOf
+  };
+}
 function checkBudget(projection, budget, confirmed) {
   if (confirmed)
     return;
@@ -20457,18 +20556,26 @@ async function runDoctor(options) {
     return report2(void 0, false);
   }
   const { config } = ctx;
+  if (config.warnings.length > 0) {
+    checks.push({
+      name: "config-keys",
+      status: "warn",
+      detail: `ignored: ${config.warnings.join("; ")}`,
+      fix: "correct or remove these keys (docs/configuration.md lists every key)"
+    });
+  }
   checks.push(config.apiKey ? { name: "key", status: "ok", detail: `OPENROUTER_API_KEY present (${config.apiKeySource})` } : {
     name: "key",
     status: "warn",
     detail: "no API key: only replay works",
     // The file this shell would read: XDG_CONFIG_HOME moves it.
-    fix: `set OPENROUTER_API_KEY, or write \`openrouter_api_key: <key>\` to ${join5(userConfigDir(env, options.home), "credentials")} (chmod 600)`
+    fix: `set OPENROUTER_API_KEY, or write \`openrouter_api_key: <key>\` to ${join5(userConfigDir(env, options.home), "credentials")} (create its directory first; chmod 600)`
   });
   checks.push(config.egress.consent.granted ? { name: "consent", status: "ok", detail: `egress consent granted for ${config.repoRoot}` } : {
     name: "consent",
     status: "warn",
     detail: `no egress consent for ${config.repoRoot}: live calls are refused`,
-    fix: "the user runs `decide config egress allow` in this repo, if they agree"
+    fix: "if the user agrees, they grant it themselves (an agent must not): `decide config egress allow` in a terminal in this repo, or through their agent prompt's shell escape (not as a chat message) with --confirm added"
   });
   checks.push(routeCheck(config.route));
   let reach;
@@ -20669,8 +20776,8 @@ async function runSpecCheck(ctx, rawInput) {
   const decider = deciderFor(ctx, profile, input.mode ?? "replay");
   if (decider.mode !== "replay") {
     assertConsent(ctx.config.egress.consent, root);
-    const tokens = prepared.flatMap((p) => p.prep ? [p.prep.projection.estimatedInputTokens] : []);
-    checkBudget(project2(profile, tokens), ctx.config.budget, input.confirm ?? false);
+    const parts = prepared.flatMap((p) => p.prep ? [p.prep.projection] : []);
+    checkBudget(combineProjections(profile, parts), ctx.config.budget, input.confirm ?? false);
   }
   const results = [];
   const usages = [];
@@ -20792,10 +20899,13 @@ function nonEmpty3(value) {
 }
 
 export {
+  activeTriggers,
   repoConfigPath,
   loadConfig,
+  allProfiles,
   setConsent,
   DEFAULT_EXCLUDES,
+  probeUrl,
   ping,
   parseFileRef,
   exampleProblems,

package/dist/bundle/chunks/{chunk-4BSTNWLV.mjs → chunk-BGL272OK.mjs}

@@ -2,10 +2,10 @@ import { createRequire as __decideRequire } from "node:module"; const require =
 import {
   parseFileRef,
   parseQuestionSet
-} from "./chunk-S5AIBUL7.mjs";
+} from "./chunk-5TUBFH7M.mjs";
 import {
   DecisionsError
-} from "./chunk-NUIZJRI6.mjs";
+} from "./chunk-4ZZ3ZSJN.mjs";
 
 // src/args.ts
 import { readFileSync } from "node:fs";

package/dist/bundle/chunks/{config-REALJZDR.mjs → config-UUPD2JL4.mjs}

@@ -1,18 +1,20 @@
 import { createRequire as __decideRequire } from "node:module"; const require = __decideRequire(import.meta.url);
 import {
   typedParse
-} from "./chunk-4BSTNWLV.mjs";
+} from "./chunk-BGL272OK.mjs";
 import {
   DEFAULT_EXCLUDES,
+  activeTriggers,
+  allProfiles,
   createContext,
   loadConfig,
   repoConfigPath,
   setConsent
-} from "./chunk-S5AIBUL7.mjs";
+} from "./chunk-5TUBFH7M.mjs";
 import {
   DecisionsError,
   emit
-} from "./chunk-NUIZJRI6.mjs";
+} from "./chunk-4ZZ3ZSJN.mjs";
 
 // src/commands/config.ts
 function runConfigCommand(argv, io, format) {
@@ -49,12 +51,17 @@ function body(argv, io) {
       if (!io.interactive && !values.confirm) {
         throw new DecisionsError(
           "egress-refused",
-          "Egress consent is the user's decision. Ask the user to run `decide config egress allow` themselves (in Claude Code: `! decide config egress allow`)."
+          "Egress consent is the user's decision. An agent must not grant it, with or without --confirm: show the user this message instead. The user grants it by typing `decide config egress allow` in a terminal at the repo root. If they run it through their agent prompt's shell escape instead (not as a chat message), there is no terminal, so they add --confirm to say the decision is theirs."
         );
       }
       return {
         egress: {
-          consent: setConsent(config.repoRoot, true, values.by ?? "decide config"),
+          // Record which route granted it: a terminal, or --confirm without one.
+          consent: setConsent(
+            config.repoRoot,
+            true,
+            values.by ?? (io.interactive ? "decide config" : "decide config --confirm")
+          ),
           file,
           changed: true
         }
@@ -82,6 +89,7 @@ function show(io, cwd) {
     model: config.model,
     endpoint: config.endpoint,
     concurrency: config.concurrency,
+    timeoutMs: config.timeoutMs,
     budget: config.budget,
     egress: {
       consent: config.egress.consent,
@@ -92,8 +100,15 @@ function show(io, cwd) {
     replay: config.replay,
     session: config.session ?? null,
     sessionOrigin: config.sessionOrigin ?? null,
+    /**
+     * The profiles in effect for the ids the config files set, one per id: an
+     * override of a built-in shows once. Built-ins nobody overrides are not repeated.
+     */
+    profiles: allProfiles(config).filter((p) => config.profiles.some((c) => c.id === p.id)),
+    route: config.route,
     files: config.layers,
-    specDirs: ctx.specDirs
+    specDirs: ctx.specDirs,
+    warnings: config.warnings
   };
 }
 function brief(r) {
@@ -106,12 +121,24 @@ function brief(r) {
     `repo: ${r.repoRoot}`,
     `model: ${r.model} via ${r.endpoint}`,
     `key: ${r.apiKey}${r.replay ? " \xB7 SYSTEM1_REPLAY forces replay" : ""}`,
-    `egress consent: ${c.granted ? `granted ${c.at ?? ""}`.trim() : "not granted \u2014 run `decide config egress allow`"}`,
+    `egress consent: ${c.granted ? `granted ${c.at ?? ""}`.trim() : "not granted (the user grants it; see `decide doctor`)"}`,
     `excludes: ${r.egress.defaultExcludes} default${r.egress.exclude.length ? ` + ${r.egress.exclude.join(", ")}` : ""}`,
-    `budget: ${r.budget.maxCalls} calls / $${r.budget.maxUsd} per request \xB7 concurrency ${r.concurrency}`,
-    `session: ${r.session ? `${r.session} (${r.sessionOrigin === "env" ? "SYSTEM1_SESSION" : `detected from ${r.sessionOrigin}`})` : "none"}`
+    `budget: ${r.budget.maxCalls} calls / $${r.budget.maxUsd} per request \xB7 concurrency ${r.concurrency} \xB7 timeout ${r.timeoutMs} ms`,
+    ...r.profiles.length ? [`profiles: ${r.profiles.map((p) => p.id).join(", ")}`] : [],
+    `route: ${routeLine(r.route)}`,
+    `session: ${r.session ? `${r.session} (${r.sessionOrigin === "env" ? "SYSTEM1_SESSION" : `detected from ${r.sessionOrigin}`})` : "none"}`,
+    ...r.warnings.length ? [`ignored: ${r.warnings.join("; ")}`] : []
   ].join("\n");
 }
+function routeLine(route) {
+  if (!route.enabled) return "off";
+  try {
+    const names = activeTriggers(route).map((t) => t.name);
+    return `on \xB7 ${names.join(", ") || "no triggers"}`;
+  } catch (error) {
+    return `invalid (${error instanceof Error ? error.message : String(error)})`;
+  }
+}
 export {
   CONFIG_OPTIONS,
   runConfigCommand

package/dist/bundle/chunks/{decide-XVVRKQ3V.mjs → decide-AAXD3ITT.mjs}

@@ -6,17 +6,17 @@ import {
 import {
   buildInput,
   parseDecideFlags
-} from "./chunk-4BSTNWLV.mjs";
+} from "./chunk-BGL272OK.mjs";
 import {
   createContext,
   runAsk,
   runMany
-} from "./chunk-S5AIBUL7.mjs";
+} from "./chunk-5TUBFH7M.mjs";
 import {
   DecisionsError,
   ENVELOPE_VERSION,
   emit
-} from "./chunk-NUIZJRI6.mjs";
+} from "./chunk-4ZZ3ZSJN.mjs";
 
 // src/commands/decide.ts
 import { readFileSync } from "node:fs";

package/dist/bundle/chunks/{doctor-TKFVFCZV.mjs → doctor-KPJ5KVLS.mjs}

@@ -1,10 +1,10 @@
 import { createRequire as __decideRequire } from "node:module"; const require = __decideRequire(import.meta.url);
 import {
   runDoctor
-} from "./chunk-S5AIBUL7.mjs";
+} from "./chunk-5TUBFH7M.mjs";
 import {
   emit
-} from "./chunk-NUIZJRI6.mjs";
+} from "./chunk-4ZZ3ZSJN.mjs";
 
 // src/commands/doctor.ts
 import { execFile } from "node:child_process";

package/dist/bundle/chunks/{misc-FHOVQJ2G.mjs → misc-IW4I3SO6.mjs}

@@ -1,19 +1,22 @@
 import { createRequire as __decideRequire } from "node:module"; const require = __decideRequire(import.meta.url);
 import {
   typedParse
-} from "./chunk-4BSTNWLV.mjs";
+} from "./chunk-BGL272OK.mjs";
 import {
   TOOL_SCHEMAS,
   createContext,
+  loadConfig,
   ping,
+  probeUrl,
   resolveConnection,
   runUsage
-} from "./chunk-S5AIBUL7.mjs";
+} from "./chunk-5TUBFH7M.mjs";
 import {
   DecisionsError,
   EXIT,
-  emit
-} from "./chunk-NUIZJRI6.mjs";
+  emit,
+  isDecisionsError
+} from "./chunk-4ZZ3ZSJN.mjs";
 
 // src/commands/misc.ts
 function runSchemaCommand(argv, io, format) {
@@ -55,7 +58,20 @@ async function runPingCommand(io, format) {
     "ping",
     format,
     async () => {
-      const result = await ping(resolveConnection(io.env), io.fetch ? { fetch: io.fetch } : {});
+      const { config, configError } = connection(io);
+      try {
+        probeUrl(config);
+      } catch {
+        throw new DecisionsError(
+          "config-error",
+          `endpoint ${config.endpoint} is not a URL: correct SYSTEM1_ENDPOINT or \`endpoint\` in the config file`,
+          { endpoint: config.endpoint }
+        );
+      }
+      const result = {
+        ...await ping(config, io.fetch ? { fetch: io.fetch } : {}),
+        ...configError ? { configError } : {}
+      };
       failed = !result.ok;
       if (!result.ok && format !== "brief") {
         throw new DecisionsError("provider-unreachable", result.error ?? "unreachable", {
@@ -67,11 +83,28 @@ async function runPingCommand(io, format) {
     (r, f) => {
       if (f !== "brief") return void 0;
       const key = r.keyPresent ? "key: present" : "key: absent (replay only)";
-      return r.ok ? `decide ping: ok \u2014 ${r.model} reachable in ${r.latencyMs} ms (${key})` : `decide ping: FAILED \u2014 ${r.probe}: ${r.error} (${key})`;
+      const line = r.ok ? `decide ping: ok \u2014 ${r.model} reachable in ${r.latencyMs} ms (${key})` : `decide ping: FAILED \u2014 ${r.probe}: ${r.error} (${key})`;
+      return r.configError ? `${line}
+config not loaded, so this used the environment only: ${r.configError}` : line;
     }
   );
   return failed ? EXIT.providerError : code;
 }
+function connection(io) {
+  try {
+    const config = loadConfig({
+      cwd: io.cwd ?? process.cwd(),
+      env: io.env,
+      ...io.home ? { home: io.home } : {}
+    });
+    const { endpoint, model, apiKey, replay } = config;
+    return { config: { endpoint, model, apiKey, replay } };
+  } catch (error) {
+    if (isDecisionsError(error) && error.code === "config-error")
+      return { config: resolveConnection(io.env), configError: error.message };
+    throw error;
+  }
+}
 export {
   USAGE_OPTIONS,
   runPingCommand,

package/dist/bundle/chunks/{route-NMFOTXLI.mjs → route-7N3J5NP6.mjs}

@@ -1,14 +1,14 @@
 import { createRequire as __decideRequire } from "node:module"; const require = __decideRequire(import.meta.url);
 import {
   typedParse
-} from "./chunk-4BSTNWLV.mjs";
+} from "./chunk-BGL272OK.mjs";
 import {
   runRoute
-} from "./chunk-S5AIBUL7.mjs";
+} from "./chunk-5TUBFH7M.mjs";
 import {
   DecisionsError,
   emit
-} from "./chunk-NUIZJRI6.mjs";
+} from "./chunk-4ZZ3ZSJN.mjs";
 
 // src/commands/route.ts
 import { readFileSync } from "node:fs";

package/dist/bundle/chunks/{spec-734MPBKB.mjs → spec-RKA3K6ZZ.mjs}

@@ -4,7 +4,7 @@ import {
 } from "./chunk-5LVOFZF3.mjs";
 import {
   typedParse
-} from "./chunk-4BSTNWLV.mjs";
+} from "./chunk-BGL272OK.mjs";
 import {
   assertExamples,
   createContext,
@@ -12,11 +12,12 @@ import {
   listSpecs,
   loadSpec,
   runSpecCheck
-} from "./chunk-S5AIBUL7.mjs";
+} from "./chunk-5TUBFH7M.mjs";
 import {
   DecisionsError,
+  EXIT,
   emit
-} from "./chunk-NUIZJRI6.mjs";
+} from "./chunk-4ZZ3ZSJN.mjs";
 
 // src/commands/spec.ts
 function runSpecCommand(argv, io, format) {
@@ -70,13 +71,7 @@ function runSpecCommand(argv, io, format) {
         (r, f) => f === "brief" ? `valid: ${r.valid.join(", ") || "(none)"}` : void 0
       );
     case "check":
-      return emit(
-        io,
-        "spec",
-        format,
-        () => runSpecCheck(ctx(), checkInput(argv.slice(1))),
-        (r, f) => f === "brief" ? briefSpecCheck(r) : void 0
-      );
+      return check(argv.slice(1), io, format, ctx);
     default:
       return emit(io, "spec", format, () => {
         throw new DecisionsError(
@@ -86,13 +81,28 @@ function runSpecCommand(argv, io, format) {
       });
   }
 }
+async function check(argv, io, format, ctx) {
+  let failed = false;
+  const code = await emit(
+    io,
+    "spec",
+    format,
+    async () => {
+      const result = await runSpecCheck(ctx(), checkInput(argv));
+      failed = !result.passed;
+      return result;
+    },
+    (r, f) => f === "brief" ? briefSpecCheck(r) : void 0
+  );
+  return code === EXIT.ok && failed && parse(argv).values.strict ? EXIT.checkFailed : code;
+}
 function checkInput(argv) {
   const { values, positionals } = parse(argv);
   const [spec, extra] = positionals;
   if (!spec || extra !== void 0) {
     throw new DecisionsError(
       "invalid-request",
-      "Usage: decide spec check <name|path> [--live] [--confirm] [--model <id>]"
+      "Usage: decide spec check <name|path> [--live] [--confirm] [--model <id>] [--strict]"
     );
   }
   if (values.live && values.replay) {
@@ -109,7 +119,8 @@ var SPEC_OPTIONS = {
   live: { type: "boolean" },
   replay: { type: "boolean" },
   confirm: { type: "boolean" },
-  model: { type: "string" }
+  model: { type: "string" },
+  strict: { type: "boolean" }
 };
 function parse(argv) {
   return typedParse({

package/dist/bundle/decide.mjs

@@ -4,4 +4,4 @@ import { createRequire as __decideRequire } from "node:module"; const require =
 // src/entry.ts
 import module from "node:module";
 module.enableCompileCache?.();
-await import("./chunks/bin-TCIHP5PC.mjs");
+await import("./chunks/bin-3EWFISFQ.mjs");

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@garygentry/system1",
-  "version": "0.3.0",
+  "version": "0.3.2",
   "description": "The `decide` CLI: typed, calibrated decisions for coding agents, hooks and CI.",
   "type": "module",
   "license": "MIT",