Every user request goes through RuntimeRouter before model execution. The router is deterministic and local; it does not call a router model, embeddings, telemetry, analytics, or a network router.

Route output

RoutingDecision includes:
  • Execution class.
  • Effort estimate.
  • Selected model and reason.
  • Required capabilities.
  • Risk tier.
  • Tool policy allowlist and denial reasons.
  • Tool requirement.
  • Fallback plan.
  • Redacted route trace.

Execution classes

ClassUse
TEXT_CHATNormal answer
TOOL_ASSISTED_CHATModel-driven tools
DIRECT_ACTIONDeterministic local action
BACKGROUND_TASKLong-running worker
SCREEN_ANALYSISScreenshot plus vision model
PDF_ANALYSISLocal PDF text extraction
FILESYSTEM_ACTIONFile action through tools
BROWSER_TASKNetwork/browser work
CODING_AGENT_TASKAgent status or delegation
CONNECTOR_TASKConnector mentioned but no configured connector metadata
CONNECTOR_LOCALAccepted local connector
CONNECTOR_REMOTEAccepted remote connector
CONNECTOR_FILE_READConnector with file-read capability
CONNECTOR_FILE_WRITEConnector with file-write capability
CONNECTOR_NETWORKConnector with network capability
CONNECTOR_UI_CONTROLConnector with UI-control capability
REALTIME_VOICE_TURNOnline Realtime path

Capability examples

CapabilityMeaning
TEXTText model response
NATIVE_TOOLSFunction/tool calling
VISIONImage processing
SCREEN_CAPTURELocal screenshot
FILE_READ, FILE_WRITESandboxed file access
NETWORK, BROWSER_CONTROLRemote web/browser work
OS_AUTOMATION, SHELLLocal OS command/control
MCP, AGENT_DELEGATIONExternal worker bridges
CONNECTOR_TASK, CONNECTOR_LOCALConnector registry execution
CONNECTOR_REMOTE, CONNECTOR_NETWORKConnector leaves local-only boundary or uses network
CONNECTOR_FILE_READ, CONNECTOR_FILE_WRITEConnector file access
CONNECTOR_UI_CONTROLConnector controls browser or UI

Model selection

When complexity routing is disabled, Eyra uses MODEL after policy routing. When enabled, ComplexityScorer estimates simple, moderate, or complex effort, and ModelRegistry chooses the matching tier. Vision tasks use VISION_MODEL when set, otherwise MODEL. Worker tasks use WORKER_MODEL when set, otherwise MODEL.

Tool policy

route_tool_policy() compares execution class, capabilities, risk tier, settings, and registered tool metadata. Settings gates deny whole categories:
  • NETWORK_TOOLS_ENABLED=false
  • OS_TOOLS_ENABLED=false
  • AGENT_TOOLS_ENABLED=false
  • EXTERNAL_AGENT_TOOLS_ENABLED=false
  • MCP_TOOLS_ENABLED=false
  • CONNECTORS_ENABLED=false
Denied tools stay visible in route traces with reasons. Connector jobs run through ConnectorRegistry, not model-selected tools. Route traces include connector id, risk tier, capabilities, privacy boundary, approval requirement, and acceptance state after redaction.