@sweny-ai/core 0.1.122 → 0.1.124

package/dist/schema.js

@@ -7,7 +7,7 @@
  * parsing untrusted input (JSON/YAML import, Studio editor).
  */
 import { z } from "zod";
-import { EVALUATOR_KINDS, EVAL_POLICIES, MCP_TRANSPORTS, REQUIRES_ON_FAIL, SKILL_CATEGORIES, SKILL_ID_MAX_LENGTH, SKILL_ID_PATTERN, WORKFLOW_TYPES, } from "./types.js";
+import { EVALUATOR_KINDS, EVAL_POLICIES, MCP_TRANSPORTS, NODE_ON_FAIL, REQUIRES_ON_FAIL, SKILL_CATEGORIES, SKILL_ID_MAX_LENGTH, SKILL_ID_PATTERN, TOOL_ACCESS, WORKFLOW_TYPES, } from "./types.js";
 import { sourceZ } from "./sources.js";
 import { workflowInputsZ, WORKFLOW_INPUT_TYPES } from "./inputs.js";
 export { sourceZ };
@@ -38,6 +38,7 @@ export const toolZ = z
     name: z.string().min(1),
     description: z.string(),
     input_schema: jsonSchemaZ,
+    access: z.enum(TOOL_ACCESS).optional(),
 })
     .strict();
 export const skillCategoryZ = z.enum(SKILL_CATEGORIES);
@@ -221,9 +222,18 @@ export const nodeToolsZ = z
 });
 const retryInstructionAutoZ = z.object({ auto: z.literal(true) }).strict();
 const retryInstructionReflectZ = z.object({ reflect: z.string().min(1) }).strict();
+/**
+ * Ceiling on `retry.max`. Each retry attempt re-invokes the agent on the
+ * node (full model spend), so an unbounded value here is an unbounded spend
+ * multiplier per node, independent of the workflow-level `max_steps` budget.
+ * 10 comfortably covers every declared workflow today (max observed: 1) while
+ * still catching a fat-fingered value (e.g. a missing digit) at author time
+ * instead of at runtime. See #325.
+ */
+const NODE_RETRY_MAX_CEILING = 10;
 export const nodeRetryZ = z
     .object({
-    max: z.number().int().min(1),
+    max: z.number().int().min(1).max(NODE_RETRY_MAX_CEILING),
     instruction: z.union([z.string().min(1), retryInstructionAutoZ, retryInstructionReflectZ]).optional(),
 })
     .strict();
@@ -237,6 +247,7 @@ export const nodeZ = z
     disallowed_tools: z.array(z.string().min(1)).optional(),
     tools: nodeToolsZ.optional(),
     fail_soft: z.boolean().optional(),
+    on_fail: z.enum(NODE_ON_FAIL).optional(),
     rules: nodeSourcesZ.optional(),
     context: nodeSourcesZ.optional(),
     eval: z.array(evaluatorZ).min(1).optional(),
@@ -823,6 +834,11 @@ export const workflowJsonSchema = {
                         type: "boolean",
                         description: "When true, an agent-level failure at this node (max turns, early termination, SDK error) is downgraded to success with fail_soft: true and the error preserved in data; routing proceeds with partial output. Eval failures are not softened. Default false.",
                     },
+                    on_fail: {
+                        type: "string",
+                        enum: [...NODE_ON_FAIL],
+                        description: "What to do when this node finishes 'failed' (agent-level failure, or an eval failure that exhausted retries and was not softened by fail_soft). 'halt' (default) stops the workflow with the failure surfaced so a broken node never advances down a conditional edge; 'continue' preserves the legacy fall-through where routing proceeds from the failed node. Distinct from requires.on_fail (the pre-condition gate).",
+                    },
                     rules: {
                         $ref: "#/$defs/NodeSources",
                         description: "Per-node rules. Additive by default; set { only: true } to block cascade.",
@@ -883,7 +899,7 @@ export const workflowJsonSchema = {
                         required: ["max"],
                         additionalProperties: false,
                         properties: {
-                            max: { type: "integer", minimum: 1 },
+                            max: { type: "integer", minimum: 1, maximum: 10 },
                             instruction: {
                                 oneOf: [
                                     { type: "string", minLength: 1 },
@@ -1080,6 +1096,11 @@ export const skillJsonSchema = {
                     type: "object",
                     description: "JSON Schema defining the tool's input parameters.",
                 },
+                access: {
+                    type: "string",
+                    enum: [...TOOL_ACCESS],
+                    description: "Side-effect class: read (only reads) or write (creates, updates, deletes, posts, sends). Absent means write. Dry runs pass only read tools to nodes.",
+                },
             },
         },
         McpServerConfig: {

package/dist/skills/betterstack.js

@@ -121,6 +121,7 @@ export const betterstack = {
     tools: [
         {
             name: "betterstack_list_sources",
+            access: "read",
             description: "List available telemetry sources (id, name, table_name, platform)",
             input_schema: {
                 type: "object",
@@ -143,6 +144,7 @@ export const betterstack = {
         },
         {
             name: "betterstack_get_source",
+            access: "read",
             description: "Get full details for a telemetry source (table name, retention, config)",
             input_schema: {
                 type: "object",
@@ -158,6 +160,7 @@ export const betterstack = {
         },
         {
             name: "betterstack_get_source_fields",
+            access: "read",
             description: "Get queryable fields for a source table (column names and types)",
             input_schema: {
                 type: "object",
@@ -172,6 +175,7 @@ export const betterstack = {
         },
         {
             name: "betterstack_query",
+            access: "read",
             description: `Execute a read-only ClickHouse SQL query against a telemetry source.
 Tables: remote(TABLE_logs) for recent logs, s3Cluster(primary, TABLE_s3) for historical (add WHERE _row_type = 1).
 Key fields: dt (timestamp), raw (JSON blob with all log fields).

package/dist/skills/datadog.js

@@ -45,6 +45,7 @@ export const datadog = {
     tools: [
         {
             name: "datadog_search_logs",
+            access: "read",
             description: "Search logs in Datadog",
             input_schema: {
                 type: "object",
@@ -72,6 +73,7 @@ export const datadog = {
         },
         {
             name: "datadog_query_metrics",
+            access: "read",
             description: "Query time-series metrics from Datadog",
             input_schema: {
                 type: "object",
@@ -86,6 +88,7 @@ export const datadog = {
         },
         {
             name: "datadog_list_monitors",
+            access: "read",
             description: "List Datadog monitors, optionally filtered by tag or name",
             input_schema: {
                 type: "object",

package/dist/skills/github.js

@@ -75,6 +75,7 @@ export const github = {
     tools: [
         {
             name: "github_search_code",
+            access: "read",
             description: "Search for code in a GitHub repository",
             input_schema: {
                 type: "object",
@@ -88,6 +89,7 @@ export const github = {
         },
         {
             name: "github_get_issue",
+            access: "read",
             description: "Get details of a GitHub issue",
             input_schema: {
                 type: "object",
@@ -101,6 +103,7 @@ export const github = {
         },
         {
             name: "github_search_issues",
+            access: "read",
             description: "Search issues and pull requests",
             input_schema: {
                 type: "object",
@@ -117,6 +120,7 @@ export const github = {
         },
         {
             name: "github_create_issue",
+            access: "write",
             description: "Create a new GitHub issue",
             input_schema: {
                 type: "object",
@@ -135,6 +139,7 @@ export const github = {
         },
         {
             name: "github_add_comment",
+            access: "write",
             description: "Add a comment to a GitHub issue or pull request",
             input_schema: {
                 type: "object",
@@ -152,6 +157,7 @@ export const github = {
         },
         {
             name: "github_create_pr",
+            access: "write",
             description: "Create a pull request",
             input_schema: {
                 type: "object",
@@ -225,6 +231,7 @@ export const github = {
         },
         {
             name: "github_list_recent_commits",
+            access: "read",
             description: "List recent commits on a branch",
             input_schema: {
                 type: "object",
@@ -239,6 +246,7 @@ export const github = {
         },
         {
             name: "github_get_file",
+            access: "read",
             description: "Get a file's contents from a repository",
             input_schema: {
                 type: "object",

package/dist/skills/linear.js

@@ -35,6 +35,7 @@ export const linear = {
     tools: [
         {
             name: "linear_create_issue",
+            access: "write",
             description: "Create a new Linear issue",
             input_schema: {
                 type: "object",
@@ -57,6 +58,7 @@ export const linear = {
         },
         {
             name: "linear_search_issues",
+            access: "read",
             description: "Search Linear issues by text query",
             input_schema: {
                 type: "object",
@@ -74,6 +76,7 @@ export const linear = {
         },
         {
             name: "linear_add_comment",
+            access: "write",
             description: "Add a comment to a Linear issue",
             input_schema: {
                 type: "object",
@@ -87,6 +90,7 @@ export const linear = {
         },
         {
             name: "linear_get_issue",
+            access: "read",
             description: "Get a Linear issue by ID or identifier (e.g. 'OFF-1020')",
             input_schema: {
                 type: "object",
@@ -109,6 +113,7 @@ export const linear = {
         },
         {
             name: "linear_list_comments",
+            access: "read",
             description: "List comments on a Linear issue (returns id, body, author, and timestamp for each)",
             input_schema: {
                 type: "object",
@@ -134,6 +139,7 @@ export const linear = {
         },
         {
             name: "linear_list_teams",
+            access: "read",
             description: "List Linear teams (needed for teamId when creating issues)",
             input_schema: {
                 type: "object",
@@ -147,6 +153,7 @@ export const linear = {
         },
         {
             name: "linear_list_labels",
+            access: "read",
             description: "List issue labels for a Linear team — returns id, name, and color for each label",
             input_schema: {
                 type: "object",
@@ -166,6 +173,7 @@ export const linear = {
         },
         {
             name: "linear_update_issue",
+            access: "write",
             description: "Update an existing Linear issue",
             input_schema: {
                 type: "object",

package/dist/skills/notification.js

@@ -95,6 +95,7 @@ export const notification = {
     tools: [
         {
             name: "notify_webhook",
+            access: "write",
             description: "Send a JSON payload to the configured notification webhook (NOTIFICATION_WEBHOOK_URL). " +
                 "The destination is fixed: an optional `url` is only honored when its host is on the " +
                 "NOTIFICATION_WEBHOOK_ALLOWED_HOSTS allowlist; arbitrary hosts are rejected.",
@@ -125,6 +126,7 @@ export const notification = {
         },
         {
             name: "notify_discord",
+            access: "write",
             description: "Send a message to Discord via webhook",
             input_schema: {
                 type: "object",
@@ -171,6 +173,7 @@ export const notification = {
         },
         {
             name: "notify_teams",
+            access: "write",
             description: "Send a message to Microsoft Teams via webhook",
             input_schema: {
                 type: "object",

package/dist/skills/sentry.js

@@ -38,6 +38,7 @@ export const sentry = {
     tools: [
         {
             name: "sentry_list_issues",
+            access: "read",
             description: "List recent issues for a Sentry project",
             input_schema: {
                 type: "object",
@@ -54,6 +55,7 @@ export const sentry = {
         },
         {
             name: "sentry_get_issue",
+            access: "read",
             description: "Get detailed information about a Sentry issue",
             input_schema: {
                 type: "object",
@@ -66,6 +68,7 @@ export const sentry = {
         },
         {
             name: "sentry_get_issue_events",
+            access: "read",
             description: "Get recent events (occurrences) for a Sentry issue",
             input_schema: {
                 type: "object",
@@ -78,6 +81,7 @@ export const sentry = {
         },
         {
             name: "sentry_search_events",
+            access: "read",
             description: "Search events across a project using Discover query syntax",
             input_schema: {
                 type: "object",

package/dist/skills/slack.js

@@ -24,6 +24,7 @@ export const slack = {
     tools: [
         {
             name: "slack_send_message",
+            access: "write",
             description: "Send a message to a Slack channel via webhook or API",
             input_schema: {
                 type: "object",
@@ -77,6 +78,7 @@ export const slack = {
         },
         {
             name: "slack_send_thread_reply",
+            access: "write",
             description: "Reply to an existing Slack message thread",
             input_schema: {
                 type: "object",

package/dist/skills/supabase.js

@@ -144,6 +144,7 @@ export const supabase = {
         // ─── Read ────────────────────────────────────────────────
         {
             name: "supabase_query",
+            access: "read",
             description: "Query rows from a Supabase table. Uses PostgREST query syntax. " + "Returns an array of matching rows.",
             input_schema: {
                 type: "object",
@@ -182,6 +183,7 @@ export const supabase = {
         },
         {
             name: "supabase_count",
+            access: "read",
             description: "Count rows in a table, optionally with filters.",
             input_schema: {
                 type: "object",
@@ -221,6 +223,7 @@ export const supabase = {
         // ─── Write ───────────────────────────────────────────────
         {
             name: "supabase_insert",
+            access: "write",
             description: "Insert one or more rows into a table. Returns the inserted rows. " +
                 "Use upsert=true to update existing rows on conflict.",
             input_schema: {
@@ -254,6 +257,7 @@ export const supabase = {
         },
         {
             name: "supabase_update",
+            access: "write",
             description: "Update rows matching filters. Returns the updated rows.",
             input_schema: {
                 type: "object",
@@ -285,6 +289,7 @@ export const supabase = {
         },
         {
             name: "supabase_delete",
+            access: "write",
             description: "Delete rows matching filters. Returns the deleted rows.",
             input_schema: {
                 type: "object",
@@ -310,6 +315,7 @@ export const supabase = {
         // ─── RPC ─────────────────────────────────────────────────
         {
             name: "supabase_rpc",
+            access: "write",
             description: "Call a Supabase RPC (stored procedure / database function).",
             input_schema: {
                 type: "object",
@@ -332,6 +338,7 @@ export const supabase = {
         // ─── Edge Functions ──────────────────────────────────────
         {
             name: "supabase_invoke_function",
+            access: "write",
             description: "Invoke a Supabase Edge Function by name with a JSON body.",
             input_schema: {
                 type: "object",
@@ -354,6 +361,7 @@ export const supabase = {
         // ─── Auth Admin ──────────────────────────────────────────
         {
             name: "supabase_list_users",
+            access: "read",
             description: "List auth users. Returns user IDs, emails, and metadata.",
             input_schema: {
                 type: "object",
@@ -383,6 +391,7 @@ export const supabase = {
         // ─── Schema Introspection ────────────────────────────────
         {
             name: "supabase_list_tables",
+            access: "read",
             description: "List all public tables with row counts. Useful for content auditing.",
             input_schema: {
                 type: "object",

package/dist/testing.d.ts

@@ -46,7 +46,8 @@ export interface MockClaudeOptions {
  *
  * For each node, it executes scripted tool calls and returns
  * scripted results. For routing decisions, it follows the
- * routes map or defaults to the first choice.
+ * routes map. With no scripted route (or an invalid one) it returns
+ * `null`, mirroring the real client failing closed on a route-eval failure.
  */
 export declare class MockClaude implements Claude {
     private callOrder;
@@ -70,7 +71,7 @@ export declare class MockClaude implements Claude {
             id: string;
             description: string;
         }[];
-    }): Promise<string>;
+    }): Promise<string | null>;
     ask(opts: {
         instruction: string;
         context: Record<string, unknown>;

package/dist/testing.js

@@ -25,7 +25,8 @@ import { consoleLogger } from "./types.js";
  *
  * For each node, it executes scripted tool calls and returns
  * scripted results. For routing decisions, it follows the
- * routes map or defaults to the first choice.
+ * routes map. With no scripted route (or an invalid one) it returns
+ * `null`, mirroring the real client failing closed on a route-eval failure.
  */
 export class MockClaude {
     callOrder = [];
@@ -97,8 +98,8 @@ export class MockClaude {
                 return route;
             }
         }
-        // Default: first choice
-        return opts.choices[0].id;
+        // No scripted route: fail closed (same as ClaudeClient.evaluate).
+        return null;
     }
     async ask(opts) {
         if (this.askFn)
@@ -164,6 +165,7 @@ export function createFileSkill(outputDir) {
         tools: [
             {
                 name: "fs_read_json",
+                access: "read",
                 description: "Read and parse a JSON file",
                 input_schema: {
                     type: "object",
@@ -182,6 +184,7 @@ export function createFileSkill(outputDir) {
             },
             {
                 name: "fs_read_text",
+                access: "read",
                 description: "Read a text file",
                 input_schema: {
                     type: "object",
@@ -199,6 +202,7 @@ export function createFileSkill(outputDir) {
             },
             {
                 name: "fs_write_json",
+                access: "write",
                 description: "Write a JSON object to a file",
                 input_schema: {
                     type: "object",
@@ -219,6 +223,7 @@ export function createFileSkill(outputDir) {
             },
             {
                 name: "fs_write_markdown",
+                access: "write",
                 description: "Write a markdown file (for issues, PRs, notifications)",
                 input_schema: {
                     type: "object",
@@ -239,6 +244,7 @@ export function createFileSkill(outputDir) {
             },
             {
                 name: "fs_list_dir",
+                access: "read",
                 description: "List files in a directory",
                 input_schema: {
                     type: "object",

package/dist/types.d.ts

@@ -10,11 +10,23 @@ export interface ToolContext {
     /** Structured logger */
     logger: Logger;
 }
+/**
+ * Side-effect class of a tool. `"read"` only reads. `"write"` can change
+ * something outside the run: create, update, delete, post, send, invoke.
+ */
+export declare const TOOL_ACCESS: readonly ["read", "write"];
+export type ToolAccess = (typeof TOOL_ACCESS)[number];
 /** A single tool Claude can invoke */
 export interface Tool {
     name: string;
     description: string;
     input_schema: JSONSchema;
+    /**
+     * Side-effect class. Under dry-run (`input.dryRun === true`) the executor
+     * passes only `"read"` tools to a node. Absent means `"write"`, so a new or
+     * unclassified tool fails safe: it is withheld from dry runs.
+     */
+    access?: ToolAccess;
     handler: (input: any, ctx: ToolContext) => Promise<unknown>;
 }
 /** Config field declaration — skills say what they need */
@@ -127,6 +139,19 @@ export type EvalPolicy = (typeof EVAL_POLICIES)[number];
 /** Action when a `requires` precondition fails. */
 export declare const REQUIRES_ON_FAIL: readonly ["fail", "skip"];
 export type RequiresOnFail = (typeof REQUIRES_ON_FAIL)[number];
+/**
+ * Post-execution failure policy for a node (the top-level `on_fail` field).
+ *
+ * Distinct from {@link REQUIRES_ON_FAIL}, which governs the pre-condition
+ * `requires` gate (`fail | skip`). This one governs what happens AFTER the
+ * node ran and its retry budget is exhausted with `status: "failed"`:
+ *  - `halt`     (default) — stop the workflow, leaving the failed node in the
+ *                results so the run surfaces as failed. Fails closed: a broken
+ *                node never advances down a conditional edge.
+ *  - `continue` — legacy fall-through: routing proceeds from the failed node.
+ */
+export declare const NODE_ON_FAIL: readonly ["halt", "continue"];
+export type NodeOnFail = (typeof NODE_ON_FAIL)[number];
 /** MCP server transport type. Inferred from command/url when omitted. */
 export declare const MCP_TRANSPORTS: readonly ["stdio", "http"];
 export type McpTransport = (typeof MCP_TRANSPORTS)[number];
@@ -321,6 +346,21 @@ export interface Node {
      * Default false (previous behavior, back-compat).
      */
     fail_soft?: boolean;
+    /**
+     * What to do when this node finishes with `status: "failed"` (agent-level
+     * failure or an eval failure that exhausted the retry budget and was not
+     * softened by `fail_soft`).
+     *
+     *  - `"halt"` (default) — stop the workflow. The failed node stays in the
+     *    results so the run surfaces as failed; routing does NOT proceed. This
+     *    fails closed: a broken node can never take a conditional out-edge (e.g.
+     *    file an issue/PR) on the back of a failure.
+     *  - `"continue"` — legacy fall-through: routing proceeds from the failed
+     *    node, letting a downstream branch inspect or recover from the failure.
+     *
+     * Distinct from `requires.on_fail`, which is the pre-condition gate.
+     */
+    on_fail?: NodeOnFail;
 }
 /**
  * Per-node skill-tool filter. See {@link Node.tools}.
@@ -396,6 +436,29 @@ export interface SkillDefinition {
     /** External MCP server. */
     mcp?: McpServerConfig;
 }
+/**
+ * Model usage + cost accounting for a single node's AI invocation.
+ *
+ * SHAPE-ONLY telemetry: counts, cost, and turn totals. Never any prompt,
+ * response, or tool payload. Populated from the Claude Agent SDK's terminal
+ * `result` message (`total_cost_usd`, `usage`, `num_turns`). Absent when the
+ * node made no AI call (e.g. a deterministic node) or when running against a
+ * mock/older SDK that doesn't emit the fields.
+ */
+export interface NodeUsage {
+    /** Aggregate USD cost the SDK billed for this node's turn(s). */
+    costUsd?: number;
+    /** Input (prompt) tokens across the node's turns. */
+    inputTokens?: number;
+    /** Output (completion) tokens across the node's turns. */
+    outputTokens?: number;
+    /** Cache-read input tokens (prompt-cache hits). */
+    cacheReadTokens?: number;
+    /** Cache-creation input tokens (prompt-cache writes). */
+    cacheCreationTokens?: number;
+    /** Number of model turns the SDK ran for this node. */
+    numTurns?: number;
+}
 export interface NodeResult {
     status: "success" | "skipped" | "failed";
     /** Arbitrary data produced by this node */
@@ -408,6 +471,17 @@ export interface NodeResult {
      * eval was not run (e.g. node failed during execution).
      */
     evals?: EvalResult[];
+    /**
+     * Token + cost accounting for this node's AI invocation. Shape-only
+     * telemetry; see {@link NodeUsage}. Absent for nodes that made no AI call.
+     */
+    usage?: NodeUsage;
+    /**
+     * Dry-run only: names of the node's skill tools that were withheld because
+     * they are write-capable or unclassified. Absent on normal runs and on
+     * dry-run nodes that had no write tools.
+     */
+    skippedWrites?: string[];
 }
 export interface ToolCall {
     tool: string;
@@ -540,8 +614,31 @@ export interface Claude {
         timeoutMs?: number;
         /** Caller-supplied abort signal. Aborting it interrupts the query. */
         signal?: AbortSignal;
+        /**
+         * What this node's agent may see (#360): env var names declared by the
+         * node's skills (added to the scoped subprocess env) and the provider
+         * hosts its sandboxed commands may reach. Absent = allowlist only.
+         */
+        agentAccess?: {
+            envVars: string[];
+            domains: string[];
+        };
+        /**
+         * Dry-run: the node must not change anything. `tools` is already filtered
+         * to reads; implementations MUST NOT add any other write-capable tool
+         * (external MCP servers, shell, file-edit built-ins).
+         */
+        readOnly?: boolean;
     }): Promise<NodeResult>;
-    /** Evaluate a routing condition — pick one of N choices */
+    /**
+     * Evaluate a routing condition — pick one of N choices.
+     *
+     * Fails closed: returns `null` when the routing decision could not be made
+     * (SDK error, timeout, non-success subtype, or an unparseable answer).
+     * Callers MUST treat `null` as "no decision" and take an explicit default
+     * edge or terminate — never fall through to the first choice. Returning a
+     * choice id on that path is the fail-open bug this contract exists to close.
+     */
     evaluate(opts: {
         question: string;
         context: Record<string, unknown>;
@@ -553,7 +650,7 @@ export interface Claude {
         timeoutMs?: number;
         /** Caller-supplied abort signal. Aborting it interrupts the query. */
         signal?: AbortSignal;
-    }): Promise<string>;
+    }): Promise<string | null>;
     /**
      * Single-completion free-text query. No tools, no output schema.
      * Used by the executor to generate retry strategies in autonomous reflection mode

package/dist/types.js

@@ -1,4 +1,9 @@
 export { WORKFLOW_INPUT_TYPES } from "./inputs.js";
+/**
+ * Side-effect class of a tool. `"read"` only reads. `"write"` can change
+ * something outside the run: create, update, delete, post, send, invoke.
+ */
+export const TOOL_ACCESS = ["read", "write"];
 /**
  * Skill categories: used for per-node validation and grouping.
  *
@@ -48,6 +53,18 @@ export const EVALUATOR_KINDS = ["value", "function", "judge"];
 export const EVAL_POLICIES = ["all_pass", "any_pass", "weighted"];
 /** Action when a `requires` precondition fails. */
 export const REQUIRES_ON_FAIL = ["fail", "skip"];
+/**
+ * Post-execution failure policy for a node (the top-level `on_fail` field).
+ *
+ * Distinct from {@link REQUIRES_ON_FAIL}, which governs the pre-condition
+ * `requires` gate (`fail | skip`). This one governs what happens AFTER the
+ * node ran and its retry budget is exhausted with `status: "failed"`:
+ *  - `halt`     (default) — stop the workflow, leaving the failed node in the
+ *                results so the run surfaces as failed. Fails closed: a broken
+ *                node never advances down a conditional edge.
+ *  - `continue` — legacy fall-through: routing proceeds from the failed node.
+ */
+export const NODE_ON_FAIL = ["halt", "continue"];
 /** MCP server transport type. Inferred from command/url when omitted. */
 export const MCP_TRANSPORTS = ["stdio", "http"];
 /**