lynkr 9.14.12 → 9.14.13

package/src/routing/model-tiers.js

@@ -46,6 +46,13 @@ const TIER_DEFINITIONS = {
   },
 };
 
+// Midpoint of each tier band: the score a decision carries when only the
+// tier is known (reconcile caps, Jev overrides, badges). Single source of
+// truth — intent-score and jev-router import this rather than keeping
+// private copies that can drift (midpoints must stay inside the bands
+// above, including calibrated overrides).
+const TIER_MIDPOINT = { SIMPLE: 10, MEDIUM: 35, COMPLEX: 63, REASONING: 88 };
+
 class ModelTierSelector {
   constructor() {
     this.tierConfig = null;
@@ -147,6 +154,11 @@ class ModelTierSelector {
   getTier(complexityScore) {
     const score = Math.max(0, Math.min(100, complexityScore || 0));
     const ranges = this.ranges || this._defaultRanges();
+    // First match wins in TIER_DEFINITIONS order (SIMPLE, MEDIUM, COMPLEX,
+    // REASONING). Calibrated ranges can overlap (observed: MEDIUM [20,50] vs
+    // COMPLEX [30,75]) — in the overlap the EARLIER tier wins, so the
+    // effective COMPLEX floor is 51, not 30. Keep this in mind when reading
+    // data/calibrated-thresholds.json.
     for (const tier of Object.keys(TIER_DEFINITIONS)) {
       const [lo, hi] = ranges[tier];
       if (score >= lo && score <= hi) return tier;
@@ -521,4 +533,5 @@ module.exports = {
   getModelTierSelector,
   reloadCalibratedThresholds,
   TIER_DEFINITIONS,
+  TIER_MIDPOINT,
 };

package/src/routing/passthrough-route.js

@@ -0,0 +1,286 @@
+/**
+ * Tier-driven model selection for the OAuth subscription passthrough.
+ *
+ * Context: when a picked tier resolves to `azure-anthropic` for a first-party
+ * subscription client, src/api/router.js forwards the request byte-for-byte
+ * to api.anthropic.com — serving whatever model the CLIENT chose. Tier picks
+ * (COMPLEX/sonnet, REASONING/opus, force keywords) were computed and then
+ * silently discarded, so escalation could never fire.
+ *
+ * This module decides the model the passthrough should ACTUALLY serve. The
+ * subscription is not model-locked (the same OAuth token serves Haiku, Sonnet
+ * and Opus), so rewriting `body.model` to a tier-configured Claude model is
+ * accepted upstream. Only the `model` field is ever rewritten — messages,
+ * tools, system prompt, thinking blocks and cache_control breakpoints pass
+ * through verbatim, which is what keeps Anthropic's prefix cache usable
+ * across the switch (same bytes, new model = one cold-prefix turn, then warm).
+ *
+ * Rules (first match wins):
+ *   1. Kill-switch: LYNKR_PASSTHROUGH_MODEL_ROUTING=false → verbatim always.
+ *   2. Side-channel tiers (suggestion/autocomplete/bare/drift frames routed to
+ *      static SIMPLE) → verbatim. Never spend Opus on harness wrapper text.
+ *   3. Unknown client model or unrankable tier model → verbatim (fail-closed).
+ *   4. Tier model outranks client model → upgrade to the tier model, with one
+ *      exception (rule 4a): stepping DOWN from a higher pin (pin Opus, fresh
+ *      verdict Sonnet) consults the downgrade gate for the pin→tier move. A
+ *      warm Opus prefix survives a Sonnet verdict when break-even blocks;
+ *      genuine upgrades (no higher pin, or pin at/below the tier) fire
+ *      ungated — correctness beats one cold turn, same policy as the normal
+ *      flow's hard triggers (cache-switch-cost.js scope: escalations are
+ *      never gated). Without 4a every Opus→Sonnet transition destroyed the
+ *      warm prefix with no math.
+ *   5. Pinned (previously served) model outranks client model → downgrade
+ *      gate: hold the pin (pin_hold) ONLY while real warmth is at stake —
+ *      cacheState present, fresh (not TTL-cold), recorded for this same
+ *      model, and warmPrefixTokens >= HOLD_MIN_PREFIX_TOKENS (2000). Otherwise
+ *      allow the downgrade (nothing warm worth protecting). This is the
+ *      normal flow's break-even philosophy ported to a flat subscription:
+ *      dollars can't justify holding (marginal cost is $0), but a large warm
+ *      prefix is paid latency on every switch, so a large fresh one protects
+ *      the pin while a cold/small/absent one doesn't.
+ *   6. Otherwise → verbatim. A client that explicitly chose Opus keeps Opus
+ *      even on a SIMPLE-scored turn.
+ *
+ * Pure functions, no I/O. Never throws.
+ */
+
+const FAMILY_RANK = [
+  { re: /opus/i, rank: 3 },
+  { re: /sonnet/i, rank: 2 },
+  { re: /haiku/i, rank: 1 },
+];
+
+/**
+ * Rank a Claude model id by family. Works on short aliases
+ * (claude-sonnet-4-5), dated ids (claude-haiku-4-5-20251001) and
+ * provider-prefixed forms. Returns null for anything unrecognized so
+ * callers fail closed to verbatim passthrough.
+ */
+function familyRank(modelId) {
+  if (!modelId || typeof modelId !== 'string') return null;
+  for (const f of FAMILY_RANK) {
+    if (f.re.test(modelId)) return f.rank;
+  }
+  return null;
+}
+
+function isRoutingEnabled() {
+  // Default ON. Set LYNKR_PASSTHROUGH_MODEL_ROUTING=false to restore pure
+  // byte-for-byte passthrough (pre-routing behavior).
+  return process.env.LYNKR_PASSTHROUGH_MODEL_ROUTING !== 'false';
+}
+
+function isSideTier(tier) {
+  if (!tier || typeof tier !== 'object') return false;
+  return tier.pinned === false && String(tier.method || '').startsWith('side_request');
+}
+
+// Warm-prefix floor for the downgrade hold (rule 5). Deliberately a
+// constant, not an env knob: one fewer dial, same protection. At/above this
+// many warm tokens the pin holds across lower-scored turns; below it (or
+// cold/absent/stale) the tier falls straight back.
+const HOLD_MIN_PREFIX_TOKENS = 2000;
+
+function holdMinPrefixTokens() {
+  return HOLD_MIN_PREFIX_TOKENS;
+}
+
+/**
+ * Resolve the effective tier model for dispatch (pure).
+ *
+ * A tier object can arrive with a weaker model than its label promises:
+ * model-swapping overrides (kNN/bandit) keep the tier label while serving
+ * cheaper, the no_user_messages fallback historically carried null, and
+ * stale pins replay both shapes indefinitely. On the orchestrator path
+ * those dynamics have dollar logic behind them; on the flat-fee
+ * subscription passthrough a demotion saves $0 and only risks quality —
+ * so here the label wins ties: effective model = max(tierModel,
+ * configured(tier)) by family rank. Promotions (stronger-than-configured,
+ * e.g. a held Opus on a COMPLEX tier) always survive.
+ *
+ * @param {object} args
+ * @param {string|null} args.tierName - tier label ('COMPLEX', ...)
+ * @param {string|null} args.tierModel - model carried on the tier object
+ * @param {function|null} args.selectModelFn - (tier) => {model} | null
+ * @returns {{model:string|null, resolved:boolean}} resolved=true when the
+ *   configured model replaced the carried one.
+ */
+function resolveTierModel({ tierName = null, tierModel = null, selectModelFn = null } = {}) {
+  try {
+    let configured = null;
+    try {
+      configured = (typeof selectModelFn === 'function' && tierName)
+        ? selectModelFn(tierName)?.model || null
+        : null;
+    } catch { configured = null; }
+    const rT = familyRank(tierModel);
+    const rC = familyRank(configured);
+    if (rC !== null && (rT === null || rC > rT)) {
+      return { model: configured, resolved: true };
+    }
+    return { model: tierModel ?? null, resolved: false };
+  } catch {
+    return { model: tierModel ?? null, resolved: false };
+  }
+}
+
+/**
+ * Downgrade gate (rule 5): is there enough live warmth to justify holding
+ * the pinned model instead of following the fresh lower tier down?
+ * Mirrors cache-switch-cost.js staleness/TTL handling: stale-model state,
+ * TTL-cold state, absent state and small prefixes all allow the downgrade
+ * without further math.
+ *
+ * Above the trivial floor, the decision is dollar break-even via the SAME
+ * evaluator the normal flow uses: holding Opus to "save" a re-read is only
+ * rational when the re-read costs more than the per-turn premium over the
+ * session's expected remaining turns. With Opus ~5x Haiku on output
+ * (registry: $25/M vs $5/M) the break-even typically clears in ~1-2 turns,
+ * so holds are rare by design — surviving only when the session is nearly
+ * over (nothing to amortize a rebuild over), quota pressure has shortened
+ * the horizon to ~nothing, or pricing is unknown (fail toward the hold).
+ *
+ * @param {string|null} pinModel - currently serving (pinned) model
+ * @param {object|null} cacheState - sessionAffinity.getCacheState(sessionId)
+ * @param {object} [opts]
+ * @param {string|null} [opts.downgradeModel] - model a downgrade would serve
+ * @param {number|null} [opts.remainingTurns] - expected turns left (null → evaluator default)
+ * @param {number|null} [opts.sessionBurnPressure] - 0..1 quota pressure,
++ *   threaded into evaluateSwitch (null/0 = untouched horizon)
+ * @param {function|null} [opts.evaluateSwitch] - injectable evaluator (tests)
+ */
+function shouldHoldForCache(pinModel, cacheState, opts = {}) {
+  if (!cacheState || typeof cacheState !== 'object') return null;
+  if (cacheState.cold) return { hold: false, reason: 'downgrade_cache_cold' };
+  if (cacheState.model && pinModel && cacheState.model !== pinModel) {
+    return { hold: false, reason: 'downgrade_cache_stale' };
+  }
+  const warm = Number(cacheState.warmPrefixTokens) || 0;
+  if (warm < holdMinPrefixTokens()) {
+    return { hold: false, reason: 'downgrade_prefix_small', warmPrefixTokens: warm };
+  }
+  try {
+    const evaluate = opts.evaluateSwitch
+      || require('./cache-switch-cost').evaluateSwitch;
+    const ev = evaluate({
+      cacheState,
+      current: { provider: cacheState.provider || 'azure-anthropic', model: pinModel },
+      target: { provider: cacheState.provider || 'azure-anthropic', model: opts.downgradeModel || null },
+      expectedRemainingTurns: opts.remainingTurns ?? null,
+      ...(opts.sessionBurnPressure != null ? { sessionBurnPressure: opts.sessionBurnPressure } : {}),
+    });
+    if (ev && ev.switchAllowed) {
+      return {
+        hold: false,
+        reason: 'downgrade_break_even_cleared',
+        warmPrefixTokens: warm,
+        breakEvenTurns: ev.breakEvenTurns ?? null,
+        expectedRemainingTurns: ev.expectedRemainingTurns ?? null,
+      };
+    }
+    return {
+      hold: true,
+      reason: 'hold_break_even_blocked',
+      warmPrefixTokens: warm,
+      breakEvenTurns: ev && ev.breakEvenTurns !== undefined ? ev.breakEvenTurns : null,
+      expectedRemainingTurns: ev && ev.expectedRemainingTurns !== undefined ? ev.expectedRemainingTurns : null,
+    };
+  } catch {
+    return { hold: true, reason: 'hold_evaluator_failed', warmPrefixTokens: warm };
+  }
+}
+
+/**
+ * @param {object} args
+ * @param {string|null} args.tierModel - model from the picked tier's config
+ * @param {string|null} args.clientModel - req.body.model (what the client asked for)
+ * @param {string|null} [args.pinModel] - model recorded on the session pin (previously served)
+ * @param {string|null} [args.tierMethod] - tier.method (side-channel detection)
+ * @param {boolean|null} [args.tierPinned] - tier.pinned flag
+ * @param {object|null} [args.cacheState] - sessionAffinity.getCacheState(sessionId):
+ *   {warmPrefixTokens, provider, model, lastRequestAt, ttlMs, cold} or null.
+ *   Caller (router fork) loads it; kept out of here so this stays pure.
+ * @param {number|null} [args.remainingTurns] - expected turns left, for the
+ *   break-even gate (null → evaluator default). Caller loads via telemetry.
+ * @param {number|null} [args.sessionBurnPressure] - 0..1 quota pressure,
+ *   threaded into both gate calls (null/0 = untouched horizon).
+ * @param {function|null} [args.evaluateSwitch] - injectable evaluator (tests).
+ * @returns {{model:string|null, action:'verbatim'|'upgrade'|'pin_hold', reason:string, warmPrefixTokens:number|null}}
+ */
+function decidePassthroughModel({ tierModel = null, clientModel = null, pinModel = null, tierMethod = null, tierPinned = null, cacheState = null, remainingTurns = null, sessionBurnPressure = null, evaluateSwitch = null } = {}) {
+  try {
+    if (!isRoutingEnabled()) {
+      return { model: clientModel, action: 'verbatim', reason: 'routing_disabled', warmPrefixTokens: null };
+    }
+    if (isSideTier({ method: tierMethod, pinned: tierPinned })) {
+      return { model: clientModel, action: 'verbatim', reason: 'side_request', warmPrefixTokens: null };
+    }
+    const clientRank = familyRank(clientModel);
+    if (clientRank === null) {
+      return { model: clientModel, action: 'verbatim', reason: 'unknown_client_model', warmPrefixTokens: null };
+    }
+    const tierRank = familyRank(tierModel);
+    const pinRank = familyRank(pinModel);
+    if (tierRank !== null && tierRank > clientRank) {
+      // Rule 4a — the upgrade branch can also be a step DOWN from the pin
+      // (pin Opus, fresh verdict Sonnet, client Haiku). Consult the gate for
+      // the pin→tier move instead of destroying warmth unexamined.
+      if (pinRank !== null && pinRank > tierRank) {
+        const gate = shouldHoldForCache(pinModel, cacheState, {
+          downgradeModel: tierModel,
+          remainingTurns,
+          sessionBurnPressure,
+          ...(evaluateSwitch ? { evaluateSwitch } : {}),
+        });
+        if (gate && gate.hold) {
+          return { model: pinModel, action: 'pin_hold', reason: gate.reason, warmPrefixTokens: gate.warmPrefixTokens ?? null };
+        }
+      }
+      return { model: tierModel, action: 'upgrade', reason: 'tier_outranks_client', warmPrefixTokens: null };
+    }
+    if (pinRank !== null && pinRank > clientRank) {
+      const gate = shouldHoldForCache(pinModel, cacheState, {
+        downgradeModel: clientModel,
+        remainingTurns,
+        sessionBurnPressure,
+        ...(evaluateSwitch ? { evaluateSwitch } : {}),
+      });
+      if (gate && gate.hold) {
+        return { model: pinModel, action: 'pin_hold', reason: gate.reason, warmPrefixTokens: gate.warmPrefixTokens ?? null };
+      }
+      return {
+        model: clientModel,
+        action: 'verbatim',
+        reason: gate ? gate.reason : 'downgrade_no_cache_state',
+        warmPrefixTokens: (gate && gate.warmPrefixTokens) ?? null,
+      };
+    }
+    return { model: clientModel, action: 'verbatim', reason: 'no_upgrade', warmPrefixTokens: null };
+  } catch {
+    return { model: clientModel ?? null, action: 'verbatim', reason: 'error_fail_closed', warmPrefixTokens: null };
+  }
+}
+
+/**
+ * Badge text for a passthrough turn (pure — unit-tested, used by router.js).
+ * Three marked variants plus the plain no-op:
+ *   upgrade  → +route  (model rewritten up)
+ *   pin_hold → +hold   (model rewritten to the held pin, with gate reason)
+ *   verbatim + downgrade_* reason → −stepdown (gate-approved descent)
+ *   otherwise → plain passthrough (true no-op: no_upgrade, side_request…)
+ */
+function buildPassthroughBadge({ action = null, reason = null, routeModel = null, clientModel = null, tierName = null, servedModel = null } = {}) {
+  if (action === 'upgrade' && routeModel) {
+    return `*[Lynkr] subscription-passthrough+route → ${routeModel} (client: ${clientModel || '—'}) · ${tierName || '—'}*`;
+  }
+  if (action === 'pin_hold' && routeModel) {
+    return `*[Lynkr] subscription-passthrough+hold → ${routeModel} (client: ${clientModel || '—'}) · ${tierName || '—'} (${reason || 'cache'})*`;
+  }
+  if (action === 'verbatim' && typeof reason === 'string' && reason.startsWith('downgrade_')) {
+    return `*[Lynkr] subscription-passthrough−stepdown → ${servedModel || '—'} (azure-anthropic) · ${tierName || '—'} (${reason})*`;
+  }
+  return `*[Lynkr] subscription-passthrough → ${servedModel || '—'} (azure-anthropic)*`;
+}
+
+module.exports = { familyRank, isRoutingEnabled, isSideTier,   decidePassthroughModel,
+  resolveTierModel, shouldHoldForCache, holdMinPrefixTokens, buildPassthroughBadge };

package/src/routing/quota-ledger.js

@@ -0,0 +1,110 @@
+/**
+ * Subscription quota ledger (Phase 4 — quota-aware descents).
+ *
+ * Flat-fee subscriptions have no dollar price per token, but they do have a
+ * quota bucket: sustained Opus serving drains weekly runway several times
+ * faster than Haiku. This module tracks per-session burn in QUOTA UNITS so
+ * the downgrade gate can shorten its horizon under pressure (see
+ * cache-switch-cost.js `sessionBurnPressure`): high burn → fewer effective
+ * remaining turns → holds collapse → descents clear sooner.
+ *
+ * Units: 1 quota unit = 1000 Haiku-class tokens (input+output blended).
+ * Model weight = (inputPerM + outputPerM) / (haiku input+output), resolved
+ * via cache-economics with a fail-to-middle default (2.0) for unpriced ids —
+ * unknown models should exert middling pressure, never zero, never Opus.
+ * Today's registry: haiku 1.0, sonnet-5 2.0, opus-4-8 5.0.
+ *
+ * Pressure = min(1, windowBurn / BURN_WINDOW_QUOTA) over the trailing window
+ * (default 10 turns). BURN_WINDOW_QUOTA is a heuristic constant: ~ten sustained
+ * full-context Opus turns. It is deliberately coarse — pressure only shortens
+ * the hold horizon, it never forces a descent past the gate's own math, and
+ * upgrades/tool-loops/compaction-floors bypass the gate entirely.
+ *
+ * Pure except for the in-memory session map (no I/O, no DB). Never throws.
+ */
+
+const BURN_WINDOW_TURNS = 10;
+// ~10 sustained 10k-token Opus turns (10 × 10 × 5.0). Sustained peaks pin
+// pressure at 1; occasional upgrades barely register. Heuristic — see above.
+const BURN_WINDOW_QUOTA = 500;
+const MAX_SESSIONS = 500;
+const UNKNOWN_MODEL_WEIGHT = 2.0;
+const HAIKU_BASELINE_PER_M = 6; // claude-haiku-4-5-20251001: 1 input + 5 output
+
+const _windows = new Map(); // sessionId -> number[] (recent turn burns)
+
+function _evictIfNeeded() {
+  while (_windows.size > MAX_SESSIONS) {
+    const oldest = _windows.keys().next();
+    if (oldest.done) break;
+    _windows.delete(oldest.value);
+  }
+}
+
+/**
+ * Quota weight for a model id: output+input price relative to Haiku baseline.
+ * @param {string|null} model
+ * @param {function|null} [resolveFn] - (provider, model) => {inputPerM, outputPerM} (tests)
+ */
+function modelWeight(model, resolveFn = null) {
+  try {
+    const resolve = resolveFn || require('./cache-economics').resolveCacheEconomics;
+    const econ = resolve('azure-anthropic', model);
+    if (!econ || typeof econ.inputPerM !== 'number' || typeof econ.outputPerM !== 'number') {
+      return UNKNOWN_MODEL_WEIGHT;
+    }
+    if (econ.unknownPricing) return UNKNOWN_MODEL_WEIGHT;
+    return (econ.inputPerM + econ.outputPerM) / HAIKU_BASELINE_PER_M;
+  } catch {
+    return UNKNOWN_MODEL_WEIGHT;
+  }
+}
+
+/**
+ * Record one served turn.
+ * @param {string|null} sessionId
+ * @param {object} usage - {model, inputTokens, outputTokens}
+ * @param {function|null} [resolveFn] - test injection for modelWeight
+ */
+function record(sessionId, usage = {}, resolveFn = null) {
+  if (!sessionId) return;
+  const input = Number(usage.inputTokens) || 0;
+  const output = Number(usage.outputTokens) || 0;
+  if (input <= 0 && output <= 0) return;
+  const burn = ((input + output) / 1000) * modelWeight(usage.model, resolveFn);
+  let window = _windows.get(sessionId);
+  if (!window) {
+    window = [];
+    _windows.set(sessionId, window);
+  }
+  window.push(burn);
+  while (window.length > BURN_WINDOW_TURNS) window.shift();
+  _evictIfNeeded();
+}
+
+/**
+ * Current burn pressure for a session: 0 (idle/cheap) → 1 (sustained peaks).
+ */
+function pressure(sessionId) {
+  const window = _windows.get(sessionId);
+  if (!window || window.length === 0) return 0;
+  const burn = window.reduce((a, b) => a + b, 0);
+  return Math.max(0, Math.min(1, burn / BURN_WINDOW_QUOTA));
+}
+
+/** Test/ops helpers. */
+function _reset() { _windows.clear(); }
+function _windowBurn(sessionId) {
+  const window = _windows.get(sessionId);
+  return window ? window.reduce((a, b) => a + b, 0) : 0;
+}
+
+module.exports = {
+  record,
+  pressure,
+  modelWeight,
+  BURN_WINDOW_TURNS,
+  BURN_WINDOW_QUOTA,
+  _reset,
+  _windowBurn,
+};

package/src/routing/risk-analyzer.js

@@ -125,9 +125,22 @@ function findHits(keywords, haystack) {
  * not what the harness injected; genuinely risky asks live in the typed
  * text and still fire. (The intent scorers have stripped these blocks
  * since WS3 — this brings the risk scan in line.)
+ *
+ * Bare-line MCP boilerplate (HARNESS_BOILERPLATE_LINE) gets the same
+ * treatment: auth notices also arrive as PLAIN text outside any tags.
  * @param {string} text
  * @returns {string}
  */
+// Bare-line harness boilerplate that escapes the tag stripping above: MCP
+// auth notices also arrive as PLAIN text (tool results, echoed banners),
+// where the same credential-flavored words detonate the keyword scan —
+// live 2026-09-18: "Can you pull sprint stories…" + an "Authentication
+// successful. Connected to claude.ai BT1_MCP" notice routed REASONING on
+// instructionHits ["authentication"] the user never typed. Full-LINE match
+// only: these are fixed harness templates, never user prose — typed risky
+// asks ("disable the authentication check") span the line differently and
+// keep firing. Tool_use inputs are untouched (real activity still counts).
+const HARNESS_BOILERPLATE_LINE = /^\s*(authentication successful[.!]?(\s+connected to .+)?|connected to \S+ MCP\.?|(\d+\s+)?MCP servers? need authentication\b.*|run \/mcp\b.*)\s*$/i;
 function stripSystemReminders(text) {
   if (typeof text !== 'string' || !text) return '';
   return text
@@ -139,7 +152,10 @@ function stripSystemReminders(text) {
     // "Hi", force-escalated to COMPLEX on it) and <user_instructions>
     // carries AGENTS.md contents the user never typed this turn.
     .replace(/<environment_context>[\s\S]*?<\/environment_context>/g, ' ')
-    .replace(/<user_instructions>[\s\S]*?<\/user_instructions>/g, ' ');
+    .replace(/<user_instructions>[\s\S]*?<\/user_instructions>/g, ' ')
+    .split('\n')
+    .filter((line) => !HARNESS_BOILERPLATE_LINE.test(line))
+    .join('\n');
 }
 
 /**

package/src/routing/telemetry.js

@@ -181,6 +181,14 @@ function init() {
       // NULL on rows where the bandit didn't run (deterministic decisions)
       // or recorded before this column existed.
       ["context", "TEXT"],
+      // Jev routing judge — shadow verdict recorded alongside every scored
+      // decision so heuristic/Jev eras stay separable. NULL when Jev didn't
+      // run (pinned serves, side frames, no key) or predates this column.
+      ["jev_verdict", "TEXT"],
+      ["jev_confidence", "REAL"],
+      ["jev_probabilities", "TEXT"],
+      ["jev_model", "TEXT"],
+      ["criteria_hash", "TEXT"],
     ];
     for (const [col, type] of additiveCols) {
       if (!existingCols.has(col)) {
@@ -243,7 +251,8 @@ function record(data) {
           retry_count, circuit_breaker_state, quality_score, tokens_per_second,
           cost_efficiency, request_text, response_text,
           base_tier, escalation_source, propensity, candidates, pinned, switch_reason,
-          cache_decision, cache_read_tokens, cache_creation_tokens, context
+          cache_decision, cache_read_tokens, cache_creation_tokens, context,
+          jev_verdict, jev_confidence, jev_probabilities, jev_model, criteria_hash
         ) VALUES (
           @request_id, @session_id, @timestamp, @complexity_score, @tier,
           @agentic_type, @tool_count, @input_tokens, @message_count, @request_type,
@@ -252,7 +261,8 @@ function record(data) {
           @retry_count, @circuit_breaker_state, @quality_score, @tokens_per_second,
           @cost_efficiency, @request_text, @response_text,
           @base_tier, @escalation_source, @propensity, @candidates, @pinned, @switch_reason,
-          @cache_decision, @cache_read_tokens, @cache_creation_tokens, @context
+          @cache_decision, @cache_read_tokens, @cache_creation_tokens, @context,
+          @jev_verdict, @jev_confidence, @jev_probabilities, @jev_model, @criteria_hash
         )`
       );
       if (!insert) return;
@@ -308,6 +318,13 @@ function record(data) {
         context: data.context == null
           ? null
           : (typeof data.context === "string" ? data.context : JSON.stringify(data.context)),
+        jev_verdict: data.jev_verdict ?? null,
+        jev_confidence: data.jev_confidence ?? null,
+        jev_probabilities: data.jev_probabilities === null || data.jev_probabilities === undefined
+          ? null
+          : (typeof data.jev_probabilities === "string" ? data.jev_probabilities : JSON.stringify(data.jev_probabilities)),
+        jev_model: data.jev_model ?? null,
+        criteria_hash: data.criteria_hash ?? null,
       });
     } catch (err) {
       logger.debug({ err: err.message }, "Telemetry record failed");
@@ -1136,8 +1153,36 @@ function getAnalytics(opts = {}) {
   }
 }
 
+/**
+ * Map a Jev verdict (decision.jev or analysis.jev shape) onto the
+ * jev_* telemetry columns. Null-safe: anything missing yields all-null
+ * fields so call sites spread this unconditionally.
+ */
+function jevFields(src) {
+  const j = (src && typeof src === 'object')
+    ? (src.jev && typeof src.jev === 'object' ? src.jev
+      : (src.analysis && typeof src.analysis === 'object' && src.analysis.jev ? src.analysis.jev : null))
+    : null;
+  if (!j) {
+    return {
+      jev_verdict: null, jev_confidence: null, jev_probabilities: null,
+      jev_model: null, criteria_hash: null,
+    };
+  }
+  return {
+    jev_verdict: j.tier ?? null,
+    jev_confidence: j.confidence ?? null,
+    jev_probabilities: j.probabilities === null || j.probabilities === undefined
+      ? null
+      : (typeof j.probabilities === 'string' ? j.probabilities : JSON.stringify(j.probabilities)),
+    jev_model: j.model ?? null,
+    criteria_hash: j.criteriaHash ?? j.criteria_hash ?? null,
+  };
+}
+
 module.exports = {
   record,
+  jevFields,
   query,
   getStats: getStatsCached,
   getProviderStats: getProviderStatsCached,