@sweny-ai/core 0.1.162 → 0.1.164

package/dist/harness/codex.js

@@ -41,6 +41,13 @@ import { codexAuth } from "./auth.js";
 export { CODEX_CAPABILITIES };
 /** Oldest Codex CLI whose flags this adapter uses (`--ignore-user-config`, `--ignore-rules`). */
 export const MIN_CODEX_VERSION = "0.159.0";
+/**
+ * The Codex CLI the capability claims in capabilities.ts were read from and the contract suite
+ * was written against (openai/codex rust-v0.159.2). action.yml installs this version by default.
+ * A newer CLI is not refused (it is only a warning, see `preflight`): the claims are about a
+ * version, not a range, so a newer one is unverified rather than known-bad.
+ */
+export const TESTED_CODEX_VERSION = "0.159.2";
 /** Same system prompt Claude Code nodes get, sent as Codex developer instructions. */
 const SYSTEM_PROMPT = `You are a step in an automated workflow. Execute the instruction precisely using the tools available to you. Be thorough but concise. When you're done, summarize your findings and results.`;
 /**
@@ -348,6 +355,13 @@ export class CodexHarness {
                     return;
                 }
                 this.version = m[1];
+                // Newer than the tested version: the declared capabilities may no longer hold. Warn once
+                // (the result is cached per instance). Not `degraded`: that is a per-node policy report and
+                // there is no node yet; not a refusal: it would break anyone who chose `latest` on purpose.
+                if (compareVersions(m[1], TESTED_CODEX_VERSION) > 0) {
+                    this.logger.warn(`codex ${m[1]} is newer than ${TESTED_CODEX_VERSION}, the version sweny's Codex capabilities were tested against; ` +
+                        `flags and event shapes may differ. Pin @openai/codex@${TESTED_CODEX_VERSION} (action input codex-version) for the tested behavior.`);
+                }
                 resolve({ ok: true, version: m[1] });
             });
         });

package/dist/index.d.ts

@@ -27,6 +27,8 @@ export { EVALUATOR_KINDS, EVAL_POLICIES, REQUIRES_ON_FAIL, NODE_ON_FAIL, MCP_TRA
 export { consoleLogger } from "./types.js";
 export { execute, RouteEvaluationError } from "./executor.js";
 export type { ExecuteOptions } from "./executor.js";
+export { systemOneProvider, DecideError, gateVerdict, DECIDER_MIN_CONFIDENCE, DECIDER_MIN_MARGIN } from "./decider.js";
+export type { DecisionProvider, DeciderConfig, DeciderMode, DeciderRecord, SystemOneOptions } from "./decider.js";
 export { BudgetGuard, describeOverrun, minLimits, toLimits } from "./budget.js";
 export type { Budget, BudgetOverrun, BudgetUnit, SpendLimits } from "./budget.js";
 export { resolveNodePermissions, buildNodePolicy } from "./node-policy.js";

package/dist/index.js

@@ -27,6 +27,8 @@ export { EVALUATOR_KINDS, EVAL_POLICIES, REQUIRES_ON_FAIL, NODE_ON_FAIL, MCP_TRA
 export { consoleLogger } from "./types.js";
 // Executor
 export { execute, RouteEvaluationError } from "./executor.js";
+// Decision models, shadow mode (#357)
+export { systemOneProvider, DecideError, gateVerdict, DECIDER_MIN_CONFIDENCE, DECIDER_MIN_MARGIN } from "./decider.js";
 // Least-privilege nodes and safe outputs (#365)
 export { BudgetGuard, describeOverrun, minLimits, toLimits } from "./budget.js";
 export { resolveNodePermissions, buildNodePolicy } from "./node-policy.js";

package/dist/schema.d.ts

@@ -619,6 +619,7 @@ export declare const evaluatorZ: z.ZodEffects<z.ZodObject<{
 }, "strict", z.ZodTypeAny, {
     name: string;
     kind: "function" | "value" | "judge";
+    model?: string | undefined;
     rule?: {
         any_tool_called?: string[] | undefined;
         all_tools_called?: string[] | undefined;
@@ -633,10 +634,10 @@ export declare const evaluatorZ: z.ZodEffects<z.ZodObject<{
     } | undefined;
     rubric?: string | undefined;
     pass_when?: string | undefined;
-    model?: string | undefined;
 }, {
     name: string;
     kind: "function" | "value" | "judge";
+    model?: string | undefined;
     rule?: {
         any_tool_called?: string[] | undefined;
         all_tools_called?: string[] | undefined;
@@ -651,10 +652,10 @@ export declare const evaluatorZ: z.ZodEffects<z.ZodObject<{
     } | undefined;
     rubric?: string | undefined;
     pass_when?: string | undefined;
-    model?: string | undefined;
 }>, {
     name: string;
     kind: "function" | "value" | "judge";
+    model?: string | undefined;
     rule?: {
         any_tool_called?: string[] | undefined;
         all_tools_called?: string[] | undefined;
@@ -669,10 +670,10 @@ export declare const evaluatorZ: z.ZodEffects<z.ZodObject<{
     } | undefined;
     rubric?: string | undefined;
     pass_when?: string | undefined;
-    model?: string | undefined;
 }, {
     name: string;
     kind: "function" | "value" | "judge";
+    model?: string | undefined;
     rule?: {
         any_tool_called?: string[] | undefined;
         all_tools_called?: string[] | undefined;
@@ -687,7 +688,6 @@ export declare const evaluatorZ: z.ZodEffects<z.ZodObject<{
     } | undefined;
     rubric?: string | undefined;
     pass_when?: string | undefined;
-    model?: string | undefined;
 }>;
 export declare const nodeRequiresZ: z.ZodEffects<z.ZodObject<{
     output_required: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
@@ -869,6 +869,55 @@ export declare const budgetZ: z.ZodEffects<z.ZodObject<{
     tokens?: number | undefined;
     cost_usd?: number | undefined;
 }>;
+/**
+ * Decision model for route choices (#357). `shadow` needs a provider; the
+ * state only ever goes to that `base_url`, there is no fallback. The key is
+ * named by env var, never inlined.
+ */
+export declare const deciderZ: z.ZodEffects<z.ZodObject<{
+    mode: z.ZodEnum<["off", "shadow"]>;
+    provider: z.ZodOptional<z.ZodObject<{
+        base_url: z.ZodString;
+        model: z.ZodString;
+        api_key_env: z.ZodOptional<z.ZodString>;
+    }, "strict", z.ZodTypeAny, {
+        model: string;
+        base_url: string;
+        api_key_env?: string | undefined;
+    }, {
+        model: string;
+        base_url: string;
+        api_key_env?: string | undefined;
+    }>>;
+}, "strict", z.ZodTypeAny, {
+    mode: "off" | "shadow";
+    provider?: {
+        model: string;
+        base_url: string;
+        api_key_env?: string | undefined;
+    } | undefined;
+}, {
+    mode: "off" | "shadow";
+    provider?: {
+        model: string;
+        base_url: string;
+        api_key_env?: string | undefined;
+    } | undefined;
+}>, {
+    mode: "off" | "shadow";
+    provider?: {
+        model: string;
+        base_url: string;
+        api_key_env?: string | undefined;
+    } | undefined;
+}, {
+    mode: "off" | "shadow";
+    provider?: {
+        model: string;
+        base_url: string;
+        api_key_env?: string | undefined;
+    } | undefined;
+}>;
 /** One typed write intent a node may emit (#365). */
 export declare const safeOutputDeclarationZ: z.ZodObject<{
     type: z.ZodEnum<["comment", "issue", "pr", "label", "issue_state"]>;
@@ -1275,6 +1324,7 @@ export declare const nodeZ: z.ZodObject<{
     }, "strict", z.ZodTypeAny, {
         name: string;
         kind: "function" | "value" | "judge";
+        model?: string | undefined;
         rule?: {
             any_tool_called?: string[] | undefined;
             all_tools_called?: string[] | undefined;
@@ -1289,10 +1339,10 @@ export declare const nodeZ: z.ZodObject<{
         } | undefined;
         rubric?: string | undefined;
         pass_when?: string | undefined;
-        model?: string | undefined;
     }, {
         name: string;
         kind: "function" | "value" | "judge";
+        model?: string | undefined;
         rule?: {
             any_tool_called?: string[] | undefined;
             all_tools_called?: string[] | undefined;
@@ -1307,10 +1357,10 @@ export declare const nodeZ: z.ZodObject<{
         } | undefined;
         rubric?: string | undefined;
         pass_when?: string | undefined;
-        model?: string | undefined;
     }>, {
         name: string;
         kind: "function" | "value" | "judge";
+        model?: string | undefined;
         rule?: {
             any_tool_called?: string[] | undefined;
             all_tools_called?: string[] | undefined;
@@ -1325,10 +1375,10 @@ export declare const nodeZ: z.ZodObject<{
         } | undefined;
         rubric?: string | undefined;
         pass_when?: string | undefined;
-        model?: string | undefined;
     }, {
         name: string;
         kind: "function" | "value" | "judge";
+        model?: string | undefined;
         rule?: {
             any_tool_called?: string[] | undefined;
             all_tools_called?: string[] | undefined;
@@ -1343,7 +1393,6 @@ export declare const nodeZ: z.ZodObject<{
         } | undefined;
         rubric?: string | undefined;
         pass_when?: string | undefined;
-        model?: string | undefined;
     }>, "many">>;
     eval_policy: z.ZodOptional<z.ZodEnum<["all_pass", "any_pass", "weighted"]>>;
     judge_model: z.ZodOptional<z.ZodString>;
@@ -1455,12 +1504,12 @@ export declare const nodeZ: z.ZodObject<{
         type?: string | undefined;
     };
     skills: string[];
+    model?: string | undefined;
     output?: Record<string, unknown> | undefined;
     tools?: {
         deny?: string[] | undefined;
         allow?: string[] | undefined;
     } | undefined;
-    model?: string | undefined;
     on_fail?: "halt" | "continue" | undefined;
     max_turns?: number | undefined;
     budget?: {
@@ -1526,6 +1575,7 @@ export declare const nodeZ: z.ZodObject<{
     eval?: {
         name: string;
         kind: "function" | "value" | "judge";
+        model?: string | undefined;
         rule?: {
             any_tool_called?: string[] | undefined;
             all_tools_called?: string[] | undefined;
@@ -1540,7 +1590,6 @@ export declare const nodeZ: z.ZodObject<{
         } | undefined;
         rubric?: string | undefined;
         pass_when?: string | undefined;
-        model?: string | undefined;
     }[] | undefined;
     eval_policy?: "all_pass" | "any_pass" | "weighted" | undefined;
     judge_model?: string | undefined;
@@ -1572,12 +1621,12 @@ export declare const nodeZ: z.ZodObject<{
         url: string;
         type?: string | undefined;
     };
+    model?: string | undefined;
     output?: Record<string, unknown> | undefined;
     tools?: {
         deny?: string[] | undefined;
         allow?: string[] | undefined;
     } | undefined;
-    model?: string | undefined;
     on_fail?: "halt" | "continue" | undefined;
     skills?: string[] | undefined;
     max_turns?: number | undefined;
@@ -1644,6 +1693,7 @@ export declare const nodeZ: z.ZodObject<{
     eval?: {
         name: string;
         kind: "function" | "value" | "judge";
+        model?: string | undefined;
         rule?: {
             any_tool_called?: string[] | undefined;
             all_tools_called?: string[] | undefined;
@@ -1658,7 +1708,6 @@ export declare const nodeZ: z.ZodObject<{
         } | undefined;
         rubric?: string | undefined;
         pass_when?: string | undefined;
-        model?: string | undefined;
     }[] | undefined;
     eval_policy?: "all_pass" | "any_pass" | "weighted" | undefined;
     judge_model?: string | undefined;
@@ -2068,6 +2117,7 @@ export declare const workflowZ: z.ZodObject<{
         }, "strict", z.ZodTypeAny, {
             name: string;
             kind: "function" | "value" | "judge";
+            model?: string | undefined;
             rule?: {
                 any_tool_called?: string[] | undefined;
                 all_tools_called?: string[] | undefined;
@@ -2082,10 +2132,10 @@ export declare const workflowZ: z.ZodObject<{
             } | undefined;
             rubric?: string | undefined;
             pass_when?: string | undefined;
-            model?: string | undefined;
         }, {
             name: string;
             kind: "function" | "value" | "judge";
+            model?: string | undefined;
             rule?: {
                 any_tool_called?: string[] | undefined;
                 all_tools_called?: string[] | undefined;
@@ -2100,10 +2150,10 @@ export declare const workflowZ: z.ZodObject<{
             } | undefined;
             rubric?: string | undefined;
             pass_when?: string | undefined;
-            model?: string | undefined;
         }>, {
             name: string;
             kind: "function" | "value" | "judge";
+            model?: string | undefined;
             rule?: {
                 any_tool_called?: string[] | undefined;
                 all_tools_called?: string[] | undefined;
@@ -2118,10 +2168,10 @@ export declare const workflowZ: z.ZodObject<{
             } | undefined;
             rubric?: string | undefined;
             pass_when?: string | undefined;
-            model?: string | undefined;
         }, {
             name: string;
             kind: "function" | "value" | "judge";
+            model?: string | undefined;
             rule?: {
                 any_tool_called?: string[] | undefined;
                 all_tools_called?: string[] | undefined;
@@ -2136,7 +2186,6 @@ export declare const workflowZ: z.ZodObject<{
             } | undefined;
             rubric?: string | undefined;
             pass_when?: string | undefined;
-            model?: string | undefined;
         }>, "many">>;
         eval_policy: z.ZodOptional<z.ZodEnum<["all_pass", "any_pass", "weighted"]>>;
         judge_model: z.ZodOptional<z.ZodString>;
@@ -2248,12 +2297,12 @@ export declare const workflowZ: z.ZodObject<{
             type?: string | undefined;
         };
         skills: string[];
+        model?: string | undefined;
         output?: Record<string, unknown> | undefined;
         tools?: {
             deny?: string[] | undefined;
             allow?: string[] | undefined;
         } | undefined;
-        model?: string | undefined;
         on_fail?: "halt" | "continue" | undefined;
         max_turns?: number | undefined;
         budget?: {
@@ -2319,6 +2368,7 @@ export declare const workflowZ: z.ZodObject<{
         eval?: {
             name: string;
             kind: "function" | "value" | "judge";
+            model?: string | undefined;
             rule?: {
                 any_tool_called?: string[] | undefined;
                 all_tools_called?: string[] | undefined;
@@ -2333,7 +2383,6 @@ export declare const workflowZ: z.ZodObject<{
             } | undefined;
             rubric?: string | undefined;
             pass_when?: string | undefined;
-            model?: string | undefined;
         }[] | undefined;
         eval_policy?: "all_pass" | "any_pass" | "weighted" | undefined;
         judge_model?: string | undefined;
@@ -2365,12 +2414,12 @@ export declare const workflowZ: z.ZodObject<{
             url: string;
             type?: string | undefined;
         };
+        model?: string | undefined;
         output?: Record<string, unknown> | undefined;
         tools?: {
             deny?: string[] | undefined;
             allow?: string[] | undefined;
         } | undefined;
-        model?: string | undefined;
         on_fail?: "halt" | "continue" | undefined;
         skills?: string[] | undefined;
         max_turns?: number | undefined;
@@ -2437,6 +2486,7 @@ export declare const workflowZ: z.ZodObject<{
         eval?: {
             name: string;
             kind: "function" | "value" | "judge";
+            model?: string | undefined;
             rule?: {
                 any_tool_called?: string[] | undefined;
                 all_tools_called?: string[] | undefined;
@@ -2451,7 +2501,6 @@ export declare const workflowZ: z.ZodObject<{
             } | undefined;
             rubric?: string | undefined;
             pass_when?: string | undefined;
-            model?: string | undefined;
         }[] | undefined;
         eval_policy?: "all_pass" | "any_pass" | "weighted" | undefined;
         judge_model?: string | undefined;
@@ -2653,6 +2702,50 @@ export declare const workflowZ: z.ZodObject<{
         tokens?: number | undefined;
         cost_usd?: number | undefined;
     }>>;
+    decider: z.ZodOptional<z.ZodEffects<z.ZodObject<{
+        mode: z.ZodEnum<["off", "shadow"]>;
+        provider: z.ZodOptional<z.ZodObject<{
+            base_url: z.ZodString;
+            model: z.ZodString;
+            api_key_env: z.ZodOptional<z.ZodString>;
+        }, "strict", z.ZodTypeAny, {
+            model: string;
+            base_url: string;
+            api_key_env?: string | undefined;
+        }, {
+            model: string;
+            base_url: string;
+            api_key_env?: string | undefined;
+        }>>;
+    }, "strict", z.ZodTypeAny, {
+        mode: "off" | "shadow";
+        provider?: {
+            model: string;
+            base_url: string;
+            api_key_env?: string | undefined;
+        } | undefined;
+    }, {
+        mode: "off" | "shadow";
+        provider?: {
+            model: string;
+            base_url: string;
+            api_key_env?: string | undefined;
+        } | undefined;
+    }>, {
+        mode: "off" | "shadow";
+        provider?: {
+            model: string;
+            base_url: string;
+            api_key_env?: string | undefined;
+        } | undefined;
+    }, {
+        mode: "off" | "shadow";
+        provider?: {
+            model: string;
+            base_url: string;
+            api_key_env?: string | undefined;
+        } | undefined;
+    }>>;
     context_mode: z.ZodOptional<z.ZodEnum<["bounded", "full"]>>;
     inputs: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodEffects<z.ZodObject<{
         type: z.ZodEnum<["string", "number", "boolean", "string[]"]>;
@@ -2756,12 +2849,12 @@ export declare const workflowZ: z.ZodObject<{
             type?: string | undefined;
         };
         skills: string[];
+        model?: string | undefined;
         output?: Record<string, unknown> | undefined;
         tools?: {
             deny?: string[] | undefined;
             allow?: string[] | undefined;
         } | undefined;
-        model?: string | undefined;
         on_fail?: "halt" | "continue" | undefined;
         max_turns?: number | undefined;
         budget?: {
@@ -2827,6 +2920,7 @@ export declare const workflowZ: z.ZodObject<{
         eval?: {
             name: string;
             kind: "function" | "value" | "judge";
+            model?: string | undefined;
             rule?: {
                 any_tool_called?: string[] | undefined;
                 all_tools_called?: string[] | undefined;
@@ -2841,7 +2935,6 @@ export declare const workflowZ: z.ZodObject<{
             } | undefined;
             rubric?: string | undefined;
             pass_when?: string | undefined;
-            model?: string | undefined;
         }[] | undefined;
         eval_policy?: "all_pass" | "any_pass" | "weighted" | undefined;
         judge_model?: string | undefined;
@@ -2903,6 +2996,14 @@ export declare const workflowZ: z.ZodObject<{
     spec_version?: string | undefined;
     workflow_type?: "pr_review" | "e2e_test" | "content_generation" | "monitor" | "data_sync" | "generic" | undefined;
     judge_budget?: number | undefined;
+    decider?: {
+        mode: "off" | "shadow";
+        provider?: {
+            model: string;
+            base_url: string;
+            api_key_env?: string | undefined;
+        } | undefined;
+    } | undefined;
     context_mode?: "full" | "bounded" | undefined;
     inputs?: Record<string, {
         type: "string" | "number" | "boolean" | "string[]";
@@ -2932,12 +3033,12 @@ export declare const workflowZ: z.ZodObject<{
             url: string;
             type?: string | undefined;
         };
+        model?: string | undefined;
         output?: Record<string, unknown> | undefined;
         tools?: {
             deny?: string[] | undefined;
             allow?: string[] | undefined;
         } | undefined;
-        model?: string | undefined;
         on_fail?: "halt" | "continue" | undefined;
         skills?: string[] | undefined;
         max_turns?: number | undefined;
@@ -3004,6 +3105,7 @@ export declare const workflowZ: z.ZodObject<{
         eval?: {
             name: string;
             kind: "function" | "value" | "judge";
+            model?: string | undefined;
             rule?: {
                 any_tool_called?: string[] | undefined;
                 all_tools_called?: string[] | undefined;
@@ -3018,7 +3120,6 @@ export declare const workflowZ: z.ZodObject<{
             } | undefined;
             rubric?: string | undefined;
             pass_when?: string | undefined;
-            model?: string | undefined;
         }[] | undefined;
         eval_policy?: "all_pass" | "any_pass" | "weighted" | undefined;
         judge_model?: string | undefined;
@@ -3094,6 +3195,14 @@ export declare const workflowZ: z.ZodObject<{
     spec_version?: string | undefined;
     workflow_type?: "pr_review" | "e2e_test" | "content_generation" | "monitor" | "data_sync" | "generic" | undefined;
     judge_budget?: number | undefined;
+    decider?: {
+        mode: "off" | "shadow";
+        provider?: {
+            model: string;
+            base_url: string;
+            api_key_env?: string | undefined;
+        } | undefined;
+    } | undefined;
     context_mode?: "full" | "bounded" | undefined;
     inputs?: Record<string, {
         type: "string" | "number" | "boolean" | "string[]";
@@ -3152,12 +3261,12 @@ export declare function parseWorkflow(raw: unknown): {
             type?: string | undefined;
         };
         skills: string[];
+        model?: string | undefined;
         output?: Record<string, unknown> | undefined;
         tools?: {
             deny?: string[] | undefined;
             allow?: string[] | undefined;
         } | undefined;
-        model?: string | undefined;
         on_fail?: "halt" | "continue" | undefined;
         max_turns?: number | undefined;
         budget?: {
@@ -3223,6 +3332,7 @@ export declare function parseWorkflow(raw: unknown): {
         eval?: {
             name: string;
             kind: "function" | "value" | "judge";
+            model?: string | undefined;
             rule?: {
                 any_tool_called?: string[] | undefined;
                 all_tools_called?: string[] | undefined;
@@ -3237,7 +3347,6 @@ export declare function parseWorkflow(raw: unknown): {
             } | undefined;
             rubric?: string | undefined;
             pass_when?: string | undefined;
-            model?: string | undefined;
         }[] | undefined;
         eval_policy?: "all_pass" | "any_pass" | "weighted" | undefined;
         judge_model?: string | undefined;
@@ -3299,6 +3408,14 @@ export declare function parseWorkflow(raw: unknown): {
     spec_version?: string | undefined;
     workflow_type?: "pr_review" | "e2e_test" | "content_generation" | "monitor" | "data_sync" | "generic" | undefined;
     judge_budget?: number | undefined;
+    decider?: {
+        mode: "off" | "shadow";
+        provider?: {
+            model: string;
+            base_url: string;
+            api_key_env?: string | undefined;
+        } | undefined;
+    } | undefined;
     context_mode?: "full" | "bounded" | undefined;
     inputs?: Record<string, {
         type: "string" | "number" | "boolean" | "string[]";
@@ -3595,6 +3712,49 @@ export declare const workflowJsonSchema: {
                 };
             };
         };
+        readonly Decider: {
+            readonly type: "object";
+            readonly required: readonly ["mode"];
+            readonly additionalProperties: false;
+            readonly description: "Decision model for route choices. 'shadow' asks it alongside the agent and logs whether they agree; the route is always the agent's. The workflow state goes only to provider.base_url, with no fallback.";
+            readonly properties: {
+                readonly mode: {
+                    readonly type: "string";
+                    readonly enum: readonly ["off", "shadow"];
+                };
+                readonly provider: {
+                    readonly type: "object";
+                    readonly required: readonly ["base_url", "model"];
+                    readonly additionalProperties: false;
+                    readonly properties: {
+                        readonly base_url: {
+                            readonly type: "string";
+                            readonly format: "uri";
+                            readonly description: "Server root serving POST /v1/systemone (Ollama or TypeSafe Jev).";
+                        };
+                        readonly model: {
+                            readonly type: "string";
+                            readonly minLength: 1;
+                        };
+                        readonly api_key_env: {
+                            readonly type: "string";
+                            readonly minLength: 1;
+                            readonly description: "Env var holding the bearer key.";
+                        };
+                    };
+                };
+            };
+            readonly if: {
+                readonly properties: {
+                    readonly mode: {
+                        readonly const: "shadow";
+                    };
+                };
+            };
+            readonly then: {
+                readonly required: readonly ["provider"];
+            };
+        };
         readonly SafeOutput: {
             readonly type: "object";
             readonly required: readonly ["type"];
@@ -3780,6 +3940,10 @@ export declare const workflowJsonSchema: {
             readonly $ref: "#/$defs/Budget";
             readonly description: "Spend ceiling for the whole run and for every node. A node's own budget may only narrow it. The CLI's --max-tokens and --max-cost tighten it further.";
         };
+        readonly decider: {
+            readonly $ref: "#/$defs/Decider";
+            readonly description: "Decision model for route choices (shadow mode only). Default: off.";
+        };
         readonly context_mode: {
             readonly type: "string";
             readonly enum: readonly ["bounded", "full"];

package/dist/schema.js

@@ -278,6 +278,27 @@ export const budgetZ = z
     .refine((b) => b.tokens !== undefined || b.cost_usd !== undefined, {
     message: "budget must declare at least one of tokens, cost_usd",
 });
+/**
+ * Decision model for route choices (#357). `shadow` needs a provider; the
+ * state only ever goes to that `base_url`, there is no fallback. The key is
+ * named by env var, never inlined.
+ */
+export const deciderZ = z
+    .object({
+    mode: z.enum(["off", "shadow"]),
+    provider: z
+        .object({
+        base_url: z.string().url(),
+        model: z.string().min(1),
+        api_key_env: z.string().min(1).optional(),
+    })
+        .strict()
+        .optional(),
+})
+    .strict()
+    .refine((d) => d.mode === "off" || d.provider !== undefined, {
+    message: "decider.provider is required when mode is shadow",
+});
 /** One typed write intent a node may emit (#365). */
 export const safeOutputDeclarationZ = z
     .object({
@@ -377,6 +398,7 @@ export const workflowZ = z.object({
     model: z.string().min(1).optional(),
     judge_budget: z.number().int().min(0).optional(),
     budget: budgetZ.optional(),
+    decider: deciderZ.optional(),
     context_mode: z.enum(CONTEXT_MODES).optional(),
     inputs: workflowInputsZ.optional(),
     permissions: nodePermissionsZ.optional(),
@@ -961,6 +983,31 @@ export const workflowJsonSchema = {
                 cost_usd: { type: "number", exclusiveMinimum: 0, description: "Max reported cost in USD." },
             },
         },
+        Decider: {
+            type: "object",
+            required: ["mode"],
+            additionalProperties: false,
+            description: "Decision model for route choices. 'shadow' asks it alongside the agent and logs whether they agree; the route is always the agent's. The workflow state goes only to provider.base_url, with no fallback.",
+            properties: {
+                mode: { type: "string", enum: ["off", "shadow"] },
+                provider: {
+                    type: "object",
+                    required: ["base_url", "model"],
+                    additionalProperties: false,
+                    properties: {
+                        base_url: {
+                            type: "string",
+                            format: "uri",
+                            description: "Server root serving POST /v1/systemone (Ollama or TypeSafe Jev).",
+                        },
+                        model: { type: "string", minLength: 1 },
+                        api_key_env: { type: "string", minLength: 1, description: "Env var holding the bearer key." },
+                    },
+                },
+            },
+            if: { properties: { mode: { const: "shadow" } } },
+            then: { required: ["provider"] },
+        },
         SafeOutput: {
             type: "object",
             required: ["type"],
@@ -1110,6 +1157,10 @@ export const workflowJsonSchema = {
             $ref: "#/$defs/Budget",
             description: "Spend ceiling for the whole run and for every node. A node's own budget may only narrow it. The CLI's --max-tokens and --max-cost tighten it further.",
         },
+        decider: {
+            $ref: "#/$defs/Decider",
+            description: "Decision model for route choices (shadow mode only). Default: off.",
+        },
         context_mode: {
             type: "string",
             enum: [...CONTEXT_MODES],