@remnic/bench 9.69.81 → 9.69.82

package/dist/index.d.ts

@@ -5831,6 +5831,8 @@ interface InjectionSuiteRunMetadata {
     unslicedPlannedRows?: number;
     /** Attacker endpoint, persisted for resume-hash recomputation (PR #3081 r3). */
     attackerBaseUrl?: string;
+    /** Hash-bound metadata generation. Absence is the closed legacy set (#3084). */
+    contractGeneration?: number;
     stage: InjectionSuiteStage;
     runKind: "dev" | "pilot" | "main";
     modelProfileHash: string;

package/dist/index.js

@@ -49669,6 +49669,7 @@ async function readCorpusManifest(runDir) {
   return { manifest, hashVerified };
 }
 var INJECTION_SUITE_ONLINE_RESUME_CONTRACT = "h5-injection-suite-online-resume-v1";
+var INJECTION_SUITE_ONLINE_CONTRACT_GENERATION = 1;
 function injectionSuiteResumeContractHashForOnline(metadata) {
   return createHash28("sha256").update(
     JSON.stringify({
@@ -49702,7 +49703,8 @@ function injectionSuiteResumeContractHashForOnline(metadata) {
       attackerBaseUrl: metadata.attackerBaseUrl ?? "",
       attackerModelDigest: metadata.attackerModelDigest ?? "",
       attackerPromptSha256: metadata.attackerPromptSha256 ?? "",
-      attackerIterations: metadata.attackerIterations ?? 0
+      attackerIterations: metadata.attackerIterations ?? 0,
+      ...metadata.contractGeneration === void 0 ? {} : { contractGeneration: metadata.contractGeneration }
     })
   ).digest("hex");
 }
@@ -49820,14 +49822,17 @@ async function analyzeInjectionSuiteOnlineAdaptiveRun(runDir) {
   const unslicedPresent = metadata.unslicedPlannedRows !== void 0;
   const recordedUnsliced = unslicedPresent && Number.isInteger(metadata.unslicedPlannedRows) && (metadata.unslicedPlannedRows ?? 0) >= design.rows.length && (metadata.unslicedPlannedRows ?? 0) > 0 ? metadata.unslicedPlannedRows : void 0;
   let unsliced = recordedUnsliced;
+  const generationPresent = Object.hasOwn(metadata, "contractGeneration");
+  const generationBound = generationPresent && Number.isInteger(metadata.contractGeneration) && (metadata.contractGeneration ?? 0) >= 1;
+  const generationInvalid = generationPresent && !generationBound;
   const newContract = metadata.attackerBaseUrl !== void 0;
   const digest = metadata.attackerModelDigest ?? "";
   const digestCandidates = digest === "unverified" ? [digest, ""] : [digest];
-  const mustVerify = newContract || unslicedPresent;
+  const mustVerify = generationBound || newContract || unslicedPresent;
   const resumeHashVerifies = !mustVerify || digestCandidates.some((candidate) => injectionSuiteResumeContractHashForOnline({ ...metadata, attackerModelDigest: candidate }) === metadata.resumeContractHash);
   const unslicedUnverifiable = !resumeHashVerifies;
   if (unslicedUnverifiable) unsliced = void 0;
-  const limitedDesign = Number.isInteger(recordedLimit) && recordedLimit > 0 && (unsliced === void 0 || recordedLimit < unsliced) || unslicedUnverifiable;
+  const limitedDesign = Number.isInteger(recordedLimit) && recordedLimit > 0 && (unsliced === void 0 || recordedLimit < unsliced) || unslicedUnverifiable || generationInvalid;
   const incomplete = limitedDesign || !corpusManifestPresent || !manifestHashVerified || missingPlannedRows > 0 || neverGeneratedIterations > 0 || truncatedChains > 0 || unexpectedRows > 0;
   const statistics = analyzeInjectionSuiteOnlineAdaptiveRows({
     rows,
@@ -50266,7 +50271,8 @@ async function runInjectionSuiteOnlineAdaptive(rawInput, deps = DEFAULT_ONLINE_D
     attackerBaseUrl: attacker.baseUrl,
     attackerModelDigest: input.attackerModelDigest ?? "",
     attackerPromptSha256,
-    attackerIterations: input.attackerIterations
+    attackerIterations: input.attackerIterations,
+    contractGeneration: INJECTION_SUITE_ONLINE_CONTRACT_GENERATION
   });
   const existing = await readRunMetadata(input.outputDir);
   if (existing && input.resume !== true) {
@@ -50275,9 +50281,38 @@ async function runInjectionSuiteOnlineAdaptive(rawInput, deps = DEFAULT_ONLINE_D
     );
   }
   if (existing && existing.resumeContractHash !== resumeContractHash) {
-    throw new Error(
-      "resume contract hash drifted; refusing to continue this run"
-    );
+    const legacyHash = Object.hasOwn(existing, "contractGeneration") ? null : injectionSuiteResumeContractHashForOnline({
+      suiteVersion: INJECTION_SUITE_VERSION,
+      modelProfileId: input.modelProfileId,
+      seeds,
+      variantsPerFamily: input.variantsPerFamily,
+      family: input.family ?? null,
+      limit: input.limit ?? null,
+      ...input.limit === void 0 ? {} : { unslicedPlannedRows },
+      executor: defendedContract.executor,
+      model: defendedContract.model,
+      baseUrl: defendedContract.baseUrl,
+      requestTimeoutMs: defendedContract.requestTimeoutMs,
+      backend: defendedContract.backend,
+      stage: ONLINE_ADAPTIVE_STAGE,
+      runKind: input.runKind ?? "dev",
+      modelProfileHash: frozen.profile.modelProfileHash,
+      corpusManifestHash: frozen.corpusManifestHash,
+      expectedDesignHash: frozen.expectedDesignHash,
+      decisionRuleHash: frozen.decisionRuleHash,
+      gitSha: frozen.gitSha,
+      attackerExecutor: attacker.executor,
+      attackerModel: attacker.model,
+      attackerBaseUrl: attacker.baseUrl,
+      attackerModelDigest: input.attackerModelDigest ?? "",
+      attackerPromptSha256,
+      attackerIterations: input.attackerIterations
+    });
+    if (legacyHash === null || existing.resumeContractHash !== legacyHash) {
+      throw new Error(
+        "resume contract hash drifted; refusing to continue this run"
+      );
+    }
   }
   await mkdir20(input.outputDir, { recursive: true });
   await Promise.all([
@@ -50319,6 +50354,7 @@ async function runInjectionSuiteOnlineAdaptive(rawInput, deps = DEFAULT_ONLINE_D
       // Persisted so the analyzer can recompute the resume hash exactly as
       // the runner did (PR #3081 r3); optional, so old runs are unaffected.
       ...attacker.baseUrl ? { attackerBaseUrl: attacker.baseUrl } : {},
+      contractGeneration: INJECTION_SUITE_ONLINE_CONTRACT_GENERATION,
       attackerModelDigest: input.attackerModelDigest ?? "unverified",
       attackerPromptSha256,
       attackerIterations: input.attackerIterations

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@remnic/bench",
-  "version": "9.69.81",
+  "version": "9.69.82",
   "description": "Retrieval latency ladder benchmarks + CI regression gates for @remnic/core",
   "type": "module",
   "main": "./dist/index.js",
@@ -41,8 +41,8 @@
     "hyparquet": "^1.25.7",
     "yaml": "^2.4.2",
     "zod": "^3.24.0",
-    "@remnic/coding-graph": "^9.69.81",
-    "@remnic/core": "^9.69.81"
+    "@remnic/coding-graph": "^9.69.82",
+    "@remnic/core": "^9.69.82"
   },
   "devDependencies": {
     "tsup": "^8.5.1",