@ai-dossier/cli 0.24.1 → 0.26.0

package/dist/prescreen.d.ts

@@ -0,0 +1,66 @@
+/**
+ * Deterministic classify pre-screen (#538) — the "no tokens spent" gate `issue-cycle-classifier`
+ * runs before any model call. `docs/reports/batch-pilot-2-execution.md` §4.1 measured the
+ * classifier costing ~64k tokens/dispatch, at mid tier, with full repo exploration, even for
+ * issues that hit an obvious RFC-0001 E.2 floor rule a deterministic check can catch for free.
+ *
+ * Scope is deliberately partial: this catches the OBVIOUS floor hits (hard-block labels, a
+ * text-keyword approximation of the risk-floor/new-package/deploy-pipeline rules, rule-9 open
+ * dependencies, and — when a plan:v1 artifact is already on the issue — the path-based risk
+ * floor and the >8-files rule). Everything it does not catch (rule 2 beyond the `migration`
+ * keyword, rule 7 hard rollback, rule 8 visual/browser review, rules 5/6 diff/file size without
+ * a plan artifact, rule 10 confidence) falls through to the classifier's own bounded
+ * mechanical-tier pass, which is the intended safety net — not a gap this module needs to close.
+ *
+ * Pure and dependency-free (no `gh`, network, or fs), same discipline as `plan-artifact.ts` and
+ * `runstate.ts` — unit-testable directly. Subprocess access (fetching the issue, resolving
+ * dependency state, filtering by submitted set) lives in the command layer (`commands/classify.ts`).
+ */
+/** RFC-0001 E.2 floor rules a text-keyword scan can approximate without reading any file. */
+export interface TextFloorPattern {
+    /** Reported in the reason; also the RFC-0001 E.2 rule it approximates. */
+    name: string;
+    /** Matched case-insensitively against title + body + label names, joined. Returns the matched keyword, or null. */
+    match: (text: string) => string | null;
+}
+export declare const TEXT_FLOOR_PATTERNS: readonly TextFloorPattern[];
+/** `Depends on #N` references resolved per issue; each costs a `gh` call downstream (command layer), same rationale as `MAX_ISSUE_SELECTION` (`issue-selection.ts`). */
+export declare const MAX_DEPENDENCY_REFS = 32;
+/**
+ * Every issue number referenced by a `Depends on #N` phrase in `text`, de-duplicated, in order,
+ * capped at {@link MAX_DEPENDENCY_REFS} — `text` is untrusted (issue body), so an adversarial
+ * body cannot force an unbounded `gh` fan-out downstream.
+ */
+export declare function extractDependencyRefs(text: string): number[];
+/** One deterministic finding — always recorded, whether or not it decided the verdict. */
+export interface PrescreenReason {
+    /** Which check produced the finding — mirrors `plan validate`'s `PlanValidationReason.check` shape. */
+    check: 'hard-block-label' | 'text-floor' | 'path-floor' | 'file-count' | 'open-dependency';
+    message: string;
+}
+export interface PrescreenInput {
+    title: string;
+    body: string;
+    labels: readonly string[];
+    /** Predicted files from a plan:v1 artifact, when one exists on the issue. `undefined` when none. */
+    predictedFiles?: readonly string[];
+    /**
+     * Issue numbers that resolved OPEN and outside the submitted set — filtering by submitted set
+     * is the command layer's job (`classify.ts`, via `--submitted-set`); this module trusts the
+     * list it is given.
+     */
+    openDependencies?: readonly number[];
+}
+export interface PrescreenVerdict {
+    /** `full` = an obvious floor hit found, reject before any model call. `candidate` = proceed to the bounded mechanical-tier classify pass. */
+    verdict: 'full' | 'candidate';
+    /** Every check's finding, in evaluation order — not just the one that decided `verdict`. */
+    reasons: PrescreenReason[];
+}
+/**
+ * Run every deterministic check, in order, and record every hit — first hit decides `verdict`,
+ * but the caller (and the rationale a consumer posts) gets the full list, matching the existing
+ * "a verdict may hit several" precedent in `issue-cycle-classifier.ds.md`.
+ */
+export declare function prescreenIssue(input: PrescreenInput): PrescreenVerdict;
+//# sourceMappingURL=prescreen.d.ts.map

package/dist/prescreen.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"prescreen.d.ts","sourceRoot":"","sources":["../src/prescreen.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAKH,6FAA6F;AAC7F,MAAM,WAAW,gBAAgB;IAC/B,0EAA0E;IAC1E,IAAI,EAAE,MAAM,CAAC;IACb,mHAAmH;IACnH,KAAK,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,MAAM,GAAG,IAAI,CAAC;CACxC;AAwBD,eAAO,MAAM,mBAAmB,EAAE,SAAS,gBAAgB,EAmD1D,CAAC;AAEF,wKAAwK;AACxK,eAAO,MAAM,mBAAmB,KAAK,CAAC;AAKtC;;;;GAIG;AACH,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,EAAE,CAY5D;AAED,0FAA0F;AAC1F,MAAM,WAAW,eAAe;IAC9B,uGAAuG;IACvG,KAAK,EAAE,kBAAkB,GAAG,YAAY,GAAG,YAAY,GAAG,YAAY,GAAG,iBAAiB,CAAC;IAC3F,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,cAAc;IAC7B,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,SAAS,MAAM,EAAE,CAAC;IAC1B,oGAAoG;IACpG,cAAc,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACnC;;;;OAIG;IACH,gBAAgB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CACtC;AAED,MAAM,WAAW,gBAAgB;IAC/B,6IAA6I;IAC7I,OAAO,EAAE,MAAM,GAAG,WAAW,CAAC;IAC9B,4FAA4F;IAC5F,OAAO,EAAE,eAAe,EAAE,CAAC;CAC5B;AA6BD;;;;GAIG;AACH,wBAAgB,cAAc,CAAC,KAAK,EAAE,cAAc,GAAG,gBAAgB,CA4CtE"}

package/dist/prescreen.js

@@ -0,0 +1,187 @@
+"use strict";
+/**
+ * Deterministic classify pre-screen (#538) — the "no tokens spent" gate `issue-cycle-classifier`
+ * runs before any model call. `docs/reports/batch-pilot-2-execution.md` §4.1 measured the
+ * classifier costing ~64k tokens/dispatch, at mid tier, with full repo exploration, even for
+ * issues that hit an obvious RFC-0001 E.2 floor rule a deterministic check can catch for free.
+ *
+ * Scope is deliberately partial: this catches the OBVIOUS floor hits (hard-block labels, a
+ * text-keyword approximation of the risk-floor/new-package/deploy-pipeline rules, rule-9 open
+ * dependencies, and — when a plan:v1 artifact is already on the issue — the path-based risk
+ * floor and the >8-files rule). Everything it does not catch (rule 2 beyond the `migration`
+ * keyword, rule 7 hard rollback, rule 8 visual/browser review, rules 5/6 diff/file size without
+ * a plan artifact, rule 10 confidence) falls through to the classifier's own bounded
+ * mechanical-tier pass, which is the intended safety net — not a gap this module needs to close.
+ *
+ * Pure and dependency-free (no `gh`, network, or fs), same discipline as `plan-artifact.ts` and
+ * `runstate.ts` — unit-testable directly. Subprocess access (fetching the issue, resolving
+ * dependency state, filtering by submitted set) lives in the command layer (`commands/classify.ts`).
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.MAX_DEPENDENCY_REFS = exports.TEXT_FLOOR_PATTERNS = void 0;
+exports.extractDependencyRefs = extractDependencyRefs;
+exports.prescreenIssue = prescreenIssue;
+const hard_block_labels_1 = require("./hard-block-labels");
+const plan_artifact_1 = require("./plan-artifact");
+/** Escape regex metacharacters so an interpolated keyword can never change a pattern's meaning. */
+function escapeRegExp(s) {
+    return s.replace(/[.*+?^${}()|[\]\\]/g, '\\$&');
+}
+/** A multi-word phrase, safe to interpolate into `\b...\b`: metacharacters escaped, any run of whitespace matches `\s+`. */
+function phrase(s) {
+    return escapeRegExp(s).replace(/\s+/g, '\\s+');
+}
+/**
+ * First keyword (in list order) that matches `text` as a whole word/phrase, or null. `\b` on
+ * both sides of each compiled pattern — "deployment" still hits "deploy" but
+ * "authorization-header-typo" does not falsely hit "auth" mid-word.
+ */
+function wordMatch(text, keywords) {
+    for (const keyword of keywords) {
+        if (new RegExp(`\\b${phrase(keyword)}\\b`, 'i').test(text))
+            return keyword;
+    }
+    return null;
+}
+exports.TEXT_FLOOR_PATTERNS = [
+    {
+        // Deliberately NOT the bare words "auth"/"login"/"logout"/"schema"/"infra"/"infrastructure":
+        // real-world issue text collides with them constantly in benign contexts, confirmed against
+        // the pilot's real 15-issue fixture set — #3631 (known `slot`) says "runnable locally with
+        // auth" about `gh auth`, not an auth-sensitive change; #3820 (known `slot`) says
+        // "test-infrastructure change" about test tooling, not production infra. "terraform" alone
+        // (specific, low-ambiguity) still catches the real infra risk-floor cases (#2779, #3403) the
+        // RFC-0001 rule 1 "infra/terraform" area names. Also approximates rule 2 (schema/data
+        // migration) via "migration"/"migrations" — a rough approximation, not full rule-2 coverage.
+        name: 'rule1-risk-floor-area',
+        match: (t) => wordMatch(t, [
+            'authentication',
+            'authorization',
+            'oauth',
+            'sso',
+            'payment',
+            'payments',
+            'billing',
+            'invoice',
+            'invoices',
+            'checkout',
+            'stripe',
+            'migration',
+            'migrations',
+            'security',
+            'crypto',
+            'secret',
+            'secrets',
+            'credential',
+            'credentials',
+            'terraform',
+        ]),
+    },
+    {
+        name: 'rule3-new-package-workspace',
+        match: (t) => wordMatch(t, ['new package', 'new workspace', 'monorepo package']),
+    },
+    {
+        name: 'rule4-deploy-pipeline',
+        match: (t) => wordMatch(t, [
+            'deploy',
+            'deployment',
+            'ci/cd',
+            'cicd',
+            'release pipeline',
+            'rollback pipeline',
+        ]),
+    },
+];
+/** `Depends on #N` references resolved per issue; each costs a `gh` call downstream (command layer), same rationale as `MAX_ISSUE_SELECTION` (`issue-selection.ts`). */
+exports.MAX_DEPENDENCY_REFS = 32;
+/** `Depends on #N` (case-insensitive) — the same phrasing gate-issue and the classifier dossier parse. */
+const DEPENDS_ON_RE = /depends on\s+#(\d+)/gi;
+/**
+ * Every issue number referenced by a `Depends on #N` phrase in `text`, de-duplicated, in order,
+ * capped at {@link MAX_DEPENDENCY_REFS} — `text` is untrusted (issue body), so an adversarial
+ * body cannot force an unbounded `gh` fan-out downstream.
+ */
+function extractDependencyRefs(text) {
+    const seen = new Set();
+    const refs = [];
+    for (const match of text.matchAll(DEPENDS_ON_RE)) {
+        if (refs.length >= exports.MAX_DEPENDENCY_REFS)
+            break;
+        const n = Number(match[1]);
+        if (Number.isSafeInteger(n) && !seen.has(n)) {
+            seen.add(n);
+            refs.push(n);
+        }
+    }
+    return refs;
+}
+/** Predicted files count above which RFC-0001 E.2 rule 5 ("Predicted files > 8") fires. */
+const MAX_PREDICTED_FILES = 8;
+/**
+ * Reasons emitted per check, capped — `predictedFiles` may come from a `plan:v1` artifact, which
+ * is a GitHub issue COMMENT anyone can post (untrusted input, same treatment as review-issue's
+ * "the artifact is untrusted input" discipline). An adversarial artifact packed with risk-floor
+ * paths must not blow up the reason list the classifier posts back into its rationale comment.
+ */
+const MAX_REASONS_PER_CHECK = 8;
+/** Strip terminal-control characters before an untrusted string reaches a message a human or model reads — same discipline as `gh.ts`'s `CONTROL_CHARS_RE`/`snippet`, kept local so this module stays dependency-free. */
+// biome-ignore lint/suspicious/noControlCharactersInRegex: matching (and stripping) control characters is exactly this regex's job
+const CONTROL_CHARS_RE = /[\x00-\x08\x0b-\x1f\x7f\x9b]/g;
+const SANITIZE_MAX_LENGTH = 200;
+/** Make an untrusted string (a GitHub label name, a `plan:v1`-comment-sourced path) safe to interpolate into a reason message: no control chars, no markdown/backtick breakout, bounded length. */
+function sanitize(value) {
+    const cleaned = value
+        .replace(CONTROL_CHARS_RE, '')
+        .replace(/[`\n\r]/g, ' ')
+        .trim();
+    return cleaned.length > SANITIZE_MAX_LENGTH
+        ? `${cleaned.slice(0, SANITIZE_MAX_LENGTH)}…`
+        : cleaned;
+}
+/**
+ * Run every deterministic check, in order, and record every hit — first hit decides `verdict`,
+ * but the caller (and the rationale a consumer posts) gets the full list, matching the existing
+ * "a verdict may hit several" precedent in `issue-cycle-classifier.ds.md`.
+ */
+function prescreenIssue(input) {
+    const reasons = [];
+    const hardBlockLabel = (0, hard_block_labels_1.pickHardBlockLabel)(input.labels);
+    if (hardBlockLabel !== null) {
+        reasons.push({
+            check: 'hard-block-label',
+            message: `Carries hard-block label '${sanitize(hardBlockLabel)}'.`,
+        });
+    }
+    const text = `${input.title}\n${input.body}\n${input.labels.join(' ')}`;
+    for (const pattern of exports.TEXT_FLOOR_PATTERNS) {
+        const hit = pattern.match(text);
+        if (hit !== null) {
+            reasons.push({
+                check: 'text-floor',
+                message: `Title/body/labels match '${pattern.name}' (keyword: '${hit}').`,
+            });
+        }
+    }
+    const predictedFiles = input.predictedFiles ?? [];
+    for (const hit of (0, plan_artifact_1.scanRiskFloor)(predictedFiles).slice(0, MAX_REASONS_PER_CHECK)) {
+        reasons.push({
+            check: 'path-floor',
+            message: `Predicted file '${sanitize(hit.path)}' touches '${hit.pattern}' (rule1-risk-floor-area).`,
+        });
+    }
+    if (predictedFiles.length > MAX_PREDICTED_FILES) {
+        reasons.push({
+            check: 'file-count',
+            message: `Predicted files (${predictedFiles.length}) exceeds ${MAX_PREDICTED_FILES} (rule5-file-count).`,
+        });
+    }
+    for (const dep of (input.openDependencies ?? []).slice(0, MAX_REASONS_PER_CHECK)) {
+        reasons.push({
+            check: 'open-dependency',
+            message: `Depends on #${dep}, which is open and outside the submitted set (rule9-open-dependency).`,
+        });
+    }
+    return { verdict: reasons.length > 0 ? 'full' : 'candidate', reasons };
+}
+//# sourceMappingURL=prescreen.js.map

package/dist/prescreen.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"prescreen.js","sourceRoot":"","sources":["../src/prescreen.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;GAiBG;;;AAmGH,sDAYC;AA8DD,wCA4CC;AAvND,2DAAyD;AACzD,mDAAgD;AAUhD,mGAAmG;AACnG,SAAS,YAAY,CAAC,CAAS;IAC7B,OAAO,CAAC,CAAC,OAAO,CAAC,qBAAqB,EAAE,MAAM,CAAC,CAAC;AAClD,CAAC;AAED,4HAA4H;AAC5H,SAAS,MAAM,CAAC,CAAS;IACvB,OAAO,YAAY,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;AACjD,CAAC;AAED;;;;GAIG;AACH,SAAS,SAAS,CAAC,IAAY,EAAE,QAA2B;IAC1D,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,IAAI,IAAI,MAAM,CAAC,MAAM,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,OAAO,OAAO,CAAC;IAC7E,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAEY,QAAA,mBAAmB,GAAgC;IAC9D;QACE,6FAA6F;QAC7F,4FAA4F;QAC5F,2FAA2F;QAC3F,iFAAiF;QACjF,2FAA2F;QAC3F,6FAA6F;QAC7F,sFAAsF;QACtF,6FAA6F;QAC7F,IAAI,EAAE,uBAAuB;QAC7B,KAAK,EAAE,CAAC,CAAC,EAAE,EAAE,CACX,SAAS,CAAC,CAAC,EAAE;YACX,gBAAgB;YAChB,eAAe;YACf,OAAO;YACP,KAAK;YACL,SAAS;YACT,UAAU;YACV,SAAS;YACT,SAAS;YACT,UAAU;YACV,UAAU;YACV,QAAQ;YACR,WAAW;YACX,YAAY;YACZ,UAAU;YACV,QAAQ;YACR,QAAQ;YACR,SAAS;YACT,YAAY;YACZ,aAAa;YACb,WAAW;SACZ,CAAC;KACL;IACD;QACE,IAAI,EAAE,6BAA6B;QACnC,KAAK,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC,aAAa,EAAE,eAAe,EAAE,kBAAkB,CAAC,CAAC;KACjF;IACD;QACE,IAAI,EAAE,uBAAuB;QAC7B,KAAK,EAAE,CAAC,CAAC,EAAE,EAAE,CACX,SAAS,CAAC,CAAC,EAAE;YACX,QAAQ;YACR,YAAY;YACZ,OAAO;YACP,MAAM;YACN,kBAAkB;YAClB,mBAAmB;SACpB,CAAC;KACL;CACF,CAAC;AAEF,wKAAwK;AAC3J,QAAA,mBAAmB,GAAG,EAAE,CAAC;AAEtC,0GAA0G;AAC1G,MAAM,aAAa,GAAG,uBAAuB,CAAC;AAE9C;;;;GAIG;AACH,SAAgB,qBAAqB,CAAC,IAAY;IAChD,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,MAAM,IAAI,GAAa,EAAE,CAAC;IAC1B,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC,EAAE,CAAC;QACjD,IAAI,IAAI,CAAC,MAAM,IAAI,2BAAmB;YAAE,MAAM;QAC9C,MAAM,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QAC3B,IAAI,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;YAC5C,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;YACZ,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACf,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AA8BD,2FAA2F;AAC3F,MAAM,mBAAmB,GAAG,CAAC,CAAC;AAE9B;;;;;GAKG;AACH,MAAM,qBAAqB,GAAG,CAAC,CAAC;AAEhC,0NAA0N;AAC1N,mIAAmI;AACnI,MAAM,gBAAgB,GAAG,+BAA+B,CAAC;AACzD,MAAM,mBAAmB,GAAG,GAAG,CAAC;AAEhC,mMAAmM;AACnM,SAAS,QAAQ,CAAC,KAAa;IAC7B,MAAM,OAAO,GAAG,KAAK;SAClB,OAAO,CAAC,gBAAgB,EAAE,EAAE,CAAC;SAC7B,OAAO,CAAC,UAAU,EAAE,GAAG,CAAC;SACxB,IAAI,EAAE,CAAC;IACV,OAAO,OAAO,CAAC,MAAM,GAAG,mBAAmB;QACzC,CAAC,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,mBAAmB,CAAC,GAAG;QAC7C,CAAC,CAAC,OAAO,CAAC;AACd,CAAC;AAED;;;;GAIG;AACH,SAAgB,cAAc,CAAC,KAAqB;IAClD,MAAM,OAAO,GAAsB,EAAE,CAAC;IAEtC,MAAM,cAAc,GAAG,IAAA,sCAAkB,EAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACxD,IAAI,cAAc,KAAK,IAAI,EAAE,CAAC;QAC5B,OAAO,CAAC,IAAI,CAAC;YACX,KAAK,EAAE,kBAAkB;YACzB,OAAO,EAAE,6BAA6B,QAAQ,CAAC,cAAc,CAAC,IAAI;SACnE,CAAC,CAAC;IACL,CAAC;IAED,MAAM,IAAI,GAAG,GAAG,KAAK,CAAC,KAAK,KAAK,KAAK,CAAC,IAAI,KAAK,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;IACxE,KAAK,MAAM,OAAO,IAAI,2BAAmB,EAAE,CAAC;QAC1C,MAAM,GAAG,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAChC,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;YACjB,OAAO,CAAC,IAAI,CAAC;gBACX,KAAK,EAAE,YAAY;gBACnB,OAAO,EAAE,4BAA4B,OAAO,CAAC,IAAI,gBAAgB,GAAG,KAAK;aAC1E,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,MAAM,cAAc,GAAG,KAAK,CAAC,cAAc,IAAI,EAAE,CAAC;IAClD,KAAK,MAAM,GAAG,IAAI,IAAA,6BAAa,EAAC,cAAc,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,qBAAqB,CAAC,EAAE,CAAC;QAChF,OAAO,CAAC,IAAI,CAAC;YACX,KAAK,EAAE,YAAY;YACnB,OAAO,EAAE,mBAAmB,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,cAAc,GAAG,CAAC,OAAO,4BAA4B;SACpG,CAAC,CAAC;IACL,CAAC;IACD,IAAI,cAAc,CAAC,MAAM,GAAG,mBAAmB,EAAE,CAAC;QAChD,OAAO,CAAC,IAAI,CAAC;YACX,KAAK,EAAE,YAAY;YACnB,OAAO,EAAE,oBAAoB,cAAc,CAAC,MAAM,aAAa,mBAAmB,sBAAsB;SACzG,CAAC,CAAC;IACL,CAAC;IAED,KAAK,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,gBAAgB,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,qBAAqB,CAAC,EAAE,CAAC;QACjF,OAAO,CAAC,IAAI,CAAC;YACX,KAAK,EAAE,iBAAiB;YACxB,OAAO,EAAE,eAAe,GAAG,wEAAwE;SACpG,CAAC,CAAC;IACL,CAAC;IAED,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,WAAW,EAAE,OAAO,EAAE,CAAC;AACzE,CAAC"}

package/dist/runstate-stats.d.ts

@@ -33,8 +33,40 @@ export declare const BATCH_MERGE_WAIT_PHASE = "batch-merge-wait";
  * here too, rather than silently sorting to the end alphabetically.
  */
 export declare const STATS_PHASE_ORDER: readonly string[];
-/** The bucket a run lands in when no milestone in the run carries a `model=` key. */
-export declare const UNKNOWN_MODEL = "unknown";
+/**
+ * The bucket a run lands in when no milestone in the run carries a `model=` key.
+ *
+ * Angle-bracketed so it cannot be forged: {@link canonicalModel} lowercases and peels routing
+ * prefixes, and no input it accepts produces a leading `<`. A bare `unknown` was reachable from
+ * remote input (`Unknown`, `llmgateway/unknown`, `~~~unknown` all canonicalise to it), which
+ * would let anyone who can comment on an issue steer the "we could not attribute this" row.
+ */
+export declare const UNKNOWN_MODEL = "<unknown>";
+/**
+ * Gateway and provider tokens stripped from a recorded `model=` to find its bucket.
+ *
+ * Agents record whatever id their CLI was invoked with, and the same model reaches the trail
+ * under several spellings depending on how it was routed: `glm-5.3` direct vs
+ * `llmgateway/glm-5.3` through a gateway, `z-ai/glm-latest` vs opencode's `~z-ai/glm-latest`
+ * alias form, `openrouter-kimi-latest` vs `moonshotai/kimi-latest`. Unbucketed, a single
+ * model's runs split across rows and the per-model view — the whole reason the gate records
+ * `model=` — answers a question nobody asked (`imboard-ai/ai-dossier#528`).
+ *
+ * Deliberately an allowlist of *known routing* tokens, never a generic "drop the first
+ * segment" rule: merging two genuinely different models is the one error this table cannot
+ * survive, so an unrecognised leading segment is always kept.
+ */
+export declare const MODEL_ROUTING_PREFIXES: readonly string[];
+/**
+ * The bucket key for a recorded `model=` — the model itself, with routing noise removed.
+ *
+ * Lowercased, any leading `~` (opencode's gateway-alias marker) dropped, then known routing
+ * prefixes peeled off. A value that is *only* routing tokens keeps its identity rather than
+ * collapsing into every other such id — that is the length guard in {@link stripRoutingPrefix},
+ * not the empty-string fallback below, which is reachable only for an id that was empty or
+ * whitespace to begin with.
+ */
+export declare function canonicalModel(raw: string): string;
 /** The group a milestone lands in when it carries no `run=` id. */
 export declare const UNKNOWN_RUN = "unknown-run";
 /**
@@ -94,9 +126,23 @@ export interface PhaseAggregate {
     /** Samples below zero, i.e. from clock skew — a median over these is not meaningful. */
     negative_samples: number;
 }
-/** Per-`model=` view of whole-run totals — the point of recording `model=` at the gate. */
+/**
+ * Per-`model=` view of whole-run totals and outcomes — the point of recording `model=`.
+ *
+ * Duration alone answers "how long", never "which models finish the work". Both are needed
+ * to route a tier at a model with any evidence behind it, so the bucket carries the run's
+ * terminal state alongside its span.
+ */
 export interface ModelAggregate {
+    /** Canonical bucket key — see {@link canonicalModel}. */
     model: string;
+    /**
+     * The distinct raw `model=` spellings that folded into this bucket, sorted.
+     *
+     * Always populated (a bucket with one spelling lists that one), so a fold is visible in
+     * the output rather than silently reshaping someone's cohort.
+     */
+    aliases: string[];
     runs: number;
     /** Runs of this model whose total was measurable; the rest are excluded below. */
     samples: number;
@@ -104,6 +150,24 @@ export interface ModelAggregate {
     min_total_seconds: number | null;
     max_total_seconds: number | null;
     negative_samples: number;
+    /**
+     * Runs whose last milestone was a delivery phase at `done` — see {@link DELIVERED_PHASES}.
+     */
+    delivered: number;
+    /** Runs whose last milestone was `blocked`, whatever the phase. */
+    blocked: number;
+    /** Everything else: still in flight, parked awaiting merge, partial, or fenced. */
+    unfinished: number;
+    /**
+     * `delivered / runs`, in [0, 1] — a **floor**, not a rate.
+     *
+     * Every run is in the denominator, including ones still in flight, parked at
+     * `awaiting-merge`, `partial`, or superseded by a takeover fence. A model whose runs are
+     * mid-flight therefore reads low until they land, and a fenced generation counts against
+     * the same model whose successor delivered the work. Compare buckets over a closed window,
+     * or read `unfinished` alongside this.
+     */
+    delivery_rate: number;
 }
 /** The two cross-run rollups: per-phase spread, and whole-run totals bucketed by model. */
 export interface StatsAggregates {
@@ -149,6 +213,23 @@ export interface IssueTrail {
 }
 /** One aggregate row's skew note, or null when every sample was forwards. */
 export declare function skewNote(negativeSamples: number): string | null;
+/**
+ * Most folded spellings named inline on a model row before the rest become a count.
+ *
+ * An attacker who can comment on the issue can post arbitrarily many distinct `model=`
+ * spellings that all canonicalise to one bucket, so an uncapped list is an unbounded cell —
+ * the DoS {@link MAX_CELL_LENGTH} exists to stop, reached by another route.
+ */
+export declare const MAX_NAMED_ALIASES = 3;
+/**
+ * The folded-alias note for a model row, or null when nothing folded.
+ *
+ * Pure and exported (like {@link skewNote}) so the disclosure guarantee — a merge is always
+ * visible, never silent — is testable, rather than living only in a private renderer.
+ * Values are milestone-derived and therefore remote: each is passed through
+ * {@link renderValue} before it can reach a terminal.
+ */
+export declare function modelNote(model: ModelAggregate): string | null;
 export interface StatsInput {
     trails: IssueTrail[];
     /** Issues that could not be read at all. */

package/dist/runstate-stats.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"runstate-stats.d.ts","sourceRoot":"","sources":["../src/runstate-stats.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAGH,OAAO,EAGL,KAAK,eAAe,EAGrB,MAAM,YAAY,CAAC;AAEpB;;;;;GAKG;AACH,eAAO,MAAM,gBAAgB,eAAe,CAAC;AAE7C;;;;;;GAMG;AACH,eAAO,MAAM,sBAAsB,qBAAqB,CAAC;AAczD;;;;;GAKG;AACH,eAAO,MAAM,iBAAiB,EAAE,SAAS,MAAM,EAM9C,CAAC;AAEF,qFAAqF;AACrF,eAAO,MAAM,aAAa,YAAY,CAAC;AAEvC,mEAAmE;AACnE,eAAO,MAAM,WAAW,gBAAgB,CAAC;AAgCzC;;;;;;;;GAQG;AACH,wBAAgB,WAAW,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAOjD;AAED,kFAAkF;AAClF,MAAM,WAAW,WAAW;IAC1B,yFAAyF;IACzF,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,wFAAwF;IACxF,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,8BAA8B;IAC9B,QAAQ,EAAE,MAAM,CAAC;IACjB,4FAA4F;IAC5F,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;CACxB;AAED,iEAAiE;AACjE,MAAM,WAAW,QAAQ;IACvB,KAAK,EAAE,MAAM,CAAC;IACd,GAAG,EAAE,MAAM,CAAC;IACZ,uEAAuE;IACvE,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,MAAM,EAAE,WAAW,EAAE,CAAC;IACtB,iEAAiE;IACjE,UAAU,EAAE,MAAM,CAAC;IACnB,mFAAmF;IACnF,WAAW,EAAE,MAAM,CAAC;IACpB,sCAAsC;IACtC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,qCAAqC;IACrC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB;;;;;;OAMG;IACH,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;CAC9B;AAED,8EAA8E;AAC9E,MAAM,WAAW,cAAc;IAC7B,KAAK,EAAE,MAAM,CAAC;IACd,0FAA0F;IAC1F,OAAO,EAAE,MAAM,CAAC;IAChB,cAAc,EAAE,MAAM,CAAC;IACvB,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;IACpB,wFAAwF;IACxF,gBAAgB,EAAE,MAAM,CAAC;CAC1B;AAED,2FAA2F;AAC3F,MAAM,WAAW,cAAc;IAC7B,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,kFAAkF;IAClF,OAAO,EAAE,MAAM,CAAC;IAChB,oBAAoB,EAAE,MAAM,GAAG,IAAI,CAAC;IACpC,iBAAiB,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,iBAAiB,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,gBAAgB,EAAE,MAAM,CAAC;CAC1B;AAED,2FAA2F;AAC3F,MAAM,WAAW,eAAe;IAC9B,MAAM,EAAE,cAAc,EAAE,CAAC;IACzB,MAAM,EAAE,cAAc,EAAE,CAAC;CAC1B;AAED,wEAAwE;AACxE,MAAM,WAAW,WAAW;IAC1B,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;CACf;AAED,0EAA0E;AAC1E,MAAM,WAAW,WAAW;IAC1B,2EAA2E;IAC3E,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,IAAI,EAAE,QAAQ,EAAE,CAAC;IACjB,UAAU,EAAE,eAAe,CAAC;IAC5B,6EAA6E;IAC7E,oBAAoB,EAAE,MAAM,EAAE,CAAC;IAC/B,uFAAuF;IACvF,aAAa,EAAE,WAAW,EAAE,CAAC;IAC7B,uEAAuE;IACvE,QAAQ,EAAE,MAAM,EAAE,CAAC;CACpB;AAED,yEAAyE;AACzE,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAIxD;AAOD;;;;;;;;;GASG;AACH,wBAAgB,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,CAO/C;AAYD,oFAAoF;AACpF,MAAM,WAAW,UAAU;IACzB,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,eAAe,EAAE,CAAC;CAC/B;AA4MD,6EAA6E;AAC7E,wBAAgB,QAAQ,CAAC,eAAe,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAG/D;AAED,MAAM,WAAW,UAAU;IACzB,MAAM,EAAE,UAAU,EAAE,CAAC;IACrB,4CAA4C;IAC5C,MAAM,CAAC,EAAE,WAAW,EAAE,CAAC;IACvB,6EAA6E;IAC7E,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,UAAU,GAAG,WAAW,CA+C/D"}
+{"version":3,"file":"runstate-stats.d.ts","sourceRoot":"","sources":["../src/runstate-stats.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAGH,OAAO,EAGL,KAAK,eAAe,EAGrB,MAAM,YAAY,CAAC;AAEpB;;;;;GAKG;AACH,eAAO,MAAM,gBAAgB,eAAe,CAAC;AAE7C;;;;;;GAMG;AACH,eAAO,MAAM,sBAAsB,qBAAqB,CAAC;AAkBzD;;;;;GAKG;AACH,eAAO,MAAM,iBAAiB,EAAE,SAAS,MAAM,EAM9C,CAAC;AAEF;;;;;;;GAOG;AACH,eAAO,MAAM,aAAa,cAAc,CAAC;AAEzC;;;;;;;;;;;;;GAaG;AACH,eAAO,MAAM,sBAAsB,EAAE,SAAS,MAAM,EAUnD,CAAC;AAWF;;;;;;;;GAQG;AACH,wBAAgB,cAAc,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAWlD;AA+BD,mEAAmE;AACnE,eAAO,MAAM,WAAW,gBAAgB,CAAC;AAgCzC;;;;;;;;GAQG;AACH,wBAAgB,WAAW,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAOjD;AAED,kFAAkF;AAClF,MAAM,WAAW,WAAW;IAC1B,yFAAyF;IACzF,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,wFAAwF;IACxF,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,8BAA8B;IAC9B,QAAQ,EAAE,MAAM,CAAC;IACjB,4FAA4F;IAC5F,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;CACxB;AAED,iEAAiE;AACjE,MAAM,WAAW,QAAQ;IACvB,KAAK,EAAE,MAAM,CAAC;IACd,GAAG,EAAE,MAAM,CAAC;IACZ,uEAAuE;IACvE,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,MAAM,EAAE,WAAW,EAAE,CAAC;IACtB,iEAAiE;IACjE,UAAU,EAAE,MAAM,CAAC;IACnB,mFAAmF;IACnF,WAAW,EAAE,MAAM,CAAC;IACpB,sCAAsC;IACtC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,qCAAqC;IACrC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB;;;;;;OAMG;IACH,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;CAC9B;AAED,8EAA8E;AAC9E,MAAM,WAAW,cAAc;IAC7B,KAAK,EAAE,MAAM,CAAC;IACd,0FAA0F;IAC1F,OAAO,EAAE,MAAM,CAAC;IAChB,cAAc,EAAE,MAAM,CAAC;IACvB,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;IACpB,wFAAwF;IACxF,gBAAgB,EAAE,MAAM,CAAC;CAC1B;AAED;;;;;;GAMG;AACH,MAAM,WAAW,cAAc;IAC7B,yDAAyD;IACzD,KAAK,EAAE,MAAM,CAAC;IACd;;;;;OAKG;IACH,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,IAAI,EAAE,MAAM,CAAC;IACb,kFAAkF;IAClF,OAAO,EAAE,MAAM,CAAC;IAChB,oBAAoB,EAAE,MAAM,GAAG,IAAI,CAAC;IACpC,iBAAiB,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,iBAAiB,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,gBAAgB,EAAE,MAAM,CAAC;IACzB;;OAEG;IACH,SAAS,EAAE,MAAM,CAAC;IAClB,mEAAmE;IACnE,OAAO,EAAE,MAAM,CAAC;IAChB,mFAAmF;IACnF,UAAU,EAAE,MAAM,CAAC;IACnB;;;;;;;;OAQG;IACH,aAAa,EAAE,MAAM,CAAC;CACvB;AAED,2FAA2F;AAC3F,MAAM,WAAW,eAAe;IAC9B,MAAM,EAAE,cAAc,EAAE,CAAC;IACzB,MAAM,EAAE,cAAc,EAAE,CAAC;CAC1B;AAED,wEAAwE;AACxE,MAAM,WAAW,WAAW;IAC1B,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;CACf;AAED,0EAA0E;AAC1E,MAAM,WAAW,WAAW;IAC1B,2EAA2E;IAC3E,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,IAAI,EAAE,QAAQ,EAAE,CAAC;IACjB,UAAU,EAAE,eAAe,CAAC;IAC5B,6EAA6E;IAC7E,oBAAoB,EAAE,MAAM,EAAE,CAAC;IAC/B,uFAAuF;IACvF,aAAa,EAAE,WAAW,EAAE,CAAC;IAC7B,uEAAuE;IACvE,QAAQ,EAAE,MAAM,EAAE,CAAC;CACpB;AAED,yEAAyE;AACzE,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAIxD;AAOD;;;;;;;;;GASG;AACH,wBAAgB,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,CAO/C;AAYD,oFAAoF;AACpF,MAAM,WAAW,UAAU;IACzB,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,eAAe,EAAE,CAAC;CAC/B;AAkSD,6EAA6E;AAC7E,wBAAgB,QAAQ,CAAC,eAAe,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAG/D;AAED;;;;;;GAMG;AACH,eAAO,MAAM,iBAAiB,IAAI,CAAC;AAEnC;;;;;;;GAOG;AACH,wBAAgB,SAAS,CAAC,KAAK,EAAE,cAAc,GAAG,MAAM,GAAG,IAAI,CAM9D;AAED,MAAM,WAAW,UAAU;IACzB,MAAM,EAAE,UAAU,EAAE,CAAC;IACrB,4CAA4C;IAC5C,MAAM,CAAC,EAAE,WAAW,EAAE,CAAC;IACvB,6EAA6E;IAC7E,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,UAAU,GAAG,WAAW,CAgD/D"}