@tangle-network/agent-eval 0.216.1 → 0.218.1

package/dist/{run-record-Boc5IUTp.js.map → run-record-DhEJgoPz.js.map}

@@ -1 +1 @@
-{"version":3,"file":"run-record-Boc5IUTp.js","names":[],"sources":["../src/run-record.ts"],"sourcesContent":["/**\n * Paper-grade RunRecord schema + runtime validator.\n *\n * Every run that participates in a promotion gate, paper table, or\n * researcher loop SHOULD be recorded as a `RunRecord`. The mandatory\n * fields are exactly those the paper \"Two Loops, Three Roles\" requires\n * for reproducibility: who/what/when/cost/seed/hash, plus the search vs\n * holdout split tag. A task score is optional because execution-only records\n * must preserve missing labels instead of converting errors into zero quality.\n *\n * This is intentionally NOT a replacement for the rich `Run` /\n * `ProposeReviewReport` / `ScenarioResult` types already in the\n * package. Those are runtime structures with full provenance. A\n * `RunRecord` is the analysis-time projection — the JSON-friendly\n * row you'd put in a parquet file or paste into a notebook.\n *\n * Validate at the boundary:\n *\n *   const rec = validateRunRecord(rawJson)         // throws on missing\n *   const ok  = isRunRecord(rawJson)               // boolean check\n *   const rec = parseRunRecordSafe(rawJson)        // { ok, value | error }\n *\n * The validator runs in pure TS — zod is intentionally NOT a\n * dependency.\n */\n\nimport type { AgentProfileCell } from './agent-profile-cell'\nimport { validateAgentProfileCell } from './agent-profile-cell'\nimport type { CostProvenance } from './cost-ledger'\nimport { ValidationError } from './errors'\n// Value import of a leaf module that itself imports only this file's TYPES —\n// no runtime cycle. It keeps the raw split-score derivation spelled in exactly\n// one place (see `rollout/score-derivation-guard`).\nimport { observedScore } from './rollout/reward'\nimport { FAILURE_CLASSES, type FailureClass } from './trace/schema'\n\n/** Search/dev/holdout split tag. 'search' is the paper-grade alias for the\n *  combined train+test pool that the optimizer is allowed to read. */\nexport type RunSplitTag = 'search' | 'dev' | 'holdout'\n\n/**\n * Explicit execution-lifecycle result for a run.\n *\n * This is separate from task quality (`outcome`) and failure classification.\n * Producers set it only from root-run or process evidence.\n */\nexport type RunTerminalOutcome = 'succeeded' | 'failed' | 'cancelled' | 'incomplete' | 'unknown'\n\n/** Explicit model value for a row that never produced a served model snapshot. */\nexport const UNKNOWN_MODEL = 'unknown'\n\nexport interface RunTokenUsage {\n  input: number\n  /** All generated tokens charged as output, including reasoning tokens. */\n  output: number\n  /** Present only when one or more paid calls did not report token usage.\n   *  In that case, every numeric field is a known subtotal, not a measured total. */\n  tokensKnown?: false\n  /** Reasoning-token subset of `output`, when the provider reports it. */\n  reasoning?: number\n  /** Prompt tokens served from a provider cache. */\n  cached?: number\n  /** Prompt tokens written into a provider cache. */\n  cacheWrite?: number\n}\n\n/**\n * How a run's USD amount was obtained.\n *\n * `costUsd` is the run's total, or null when the total is unknown. A run whose\n * receipts prove only part of its spend is a `lower-bound`: its total is\n * unknown, so `costUsd` and `usd` stay null, and the proven part is\n * `knownLowerBoundUsd`. A reader of the total therefore never takes a floor\n * for a total. A floor of $0 proves nothing, so it is written `uncaptured`.\n *\n * Only a RunRecord needs this kind. Every other cost shape keeps a known\n * subtotal beside `CostProvenance`, where `uncaptured` already means \"at\n * least the subtotal\"; a RunRecord's nullable `costUsd` cannot hold one.\n */\nexport type RunCostProvenance =\n  | CostProvenance\n  | { kind: 'lower-bound'; usd: null; knownLowerBoundUsd: number }\n\n/**\n * The run's place in a search: one attempt at one cell. The search ledger\n * holds the lineage (the node's parents, depth and order); a RunRecord only\n * points at it.\n */\nexport interface RunSearchCoordinates {\n  searchId: string\n  nodeId: string\n  /** The cell id hashes the search, node, task, split and repeat, so it is\n   *  unique across candidates. */\n  cellId: string\n  /** Attempt number within the cell, counted from 1. */\n  attempt: number\n}\n\n/** Where the run's execution record lives. */\nexport interface RunTraceRef {\n  /** Trace id shared by every span of the run. */\n  traceId: string\n  /** Root run of the execution tree the run spawned, when one exists. */\n  execRunId?: string\n}\n\n/**\n * The run id of one attempt at a search cell. It is unique across candidates\n * and attempts, unlike a `${scenario}:${rep}` id, which every candidate that\n * ran the same scenario shares.\n */\nexport function searchCellRunId(search: Pick<RunSearchCoordinates, 'cellId' | 'attempt'>): string {\n  return `${search.cellId}:${search.attempt}`\n}\n\nexport interface RunJudgeMetadata {\n  model: string\n  promptVersion: string\n  /** [0,1] confidence the judge declared. Constant judge confidence\n   *  across many runs is a fallback signal (see `canary.ts`). */\n  confidence: number\n  /** True if the judge degraded to a fallback path (rules-only,\n   *  prior-call cache, etc.). The canary uses this to alert. */\n  fallback: boolean\n}\n\n/**\n * Per-judge / per-dimension breakdown for runs scored by an ensemble of\n * judges over a multi-dimensional rubric.\n *\n * The collapsed `outcome.searchScore` / `holdoutScore` carries the\n * composite the gate uses. The full breakdown belongs here so consumers\n * can answer \"which judge disagreed?\", \"which dimension dragged the\n * composite down?\", and \"did half the panel fail?\" without re-running.\n *\n * `perJudge[judgeId][dim]` is the canonical source; `perDimMean` and\n * `composite` are convenience projections — derivable but precomputed so\n * downstream IRR primitives (`interRaterReliability`,\n * `corpusInterRaterAgreement`) and reporters don't pay the same\n * aggregation twice.\n *\n * Fail-loud discipline: judges that errored out land in `failedJudges`\n * by id. A missing key in `perJudge` is ambiguous (silent zero vs not\n * run); the explicit list makes a partial-failure recorded as such.\n */\nexport interface JudgeScoresRecord {\n  /** Per-judge per-dimension scores. `{ \"kimi-k2.6\": { helpfulness: 0.8, clarity: 0.7 }, ... }`. */\n  perJudge: Record<string, Record<string, number>>\n  /** Per-dim mean across judges. Convenience — derivable from `perJudge`. */\n  perDimMean: Record<string, number>\n  /** Composite mean across successful judges. Mirrors the task score only\n   *  when `failedJudges` is empty. */\n  composite: number\n  /** Judges that errored or returned an unparseable verdict. Recorded\n   *  by id (e.g. `['glm-5.1']`) so a partial-failure case is explicit,\n   *  not inferred from missing keys in `perJudge`. */\n  failedJudges?: string[]\n  /** Free-form notes the judges emitted (joined across judges or\n   *  first-judge only — consumer's choice). */\n  notes?: string\n}\n\nexport interface RunOutcome {\n  /** Score on the search/optimization split. Optional for holdout-only and\n   *  execution-only records. */\n  searchScore?: number\n  /** Score on the held-out split. Optional for search-only and execution-only\n   *  records. When both scores are absent, the run is explicitly unlabeled. */\n  holdoutScore?: number\n  /** Bag of any other metric the run produced — judge dimensions,\n   *  pass/fail counters, latency stats, etc. Numeric only — keeps\n   *  reporters honest. */\n  raw: Record<string, number>\n  /** Per-judge / per-dim breakdown. Consumers writing ensemble\n   *  judgements populate this; substrate primitives like\n   *  `interRaterReliability` and `corpusInterRaterAgreement` accept\n   *  these records as input. Optional — single-judge or scalar-only\n   *  runs leave it unset. */\n  judgeScores?: JudgeScoresRecord\n  /** Authenticity / realness verdict — did the run build the REAL thing on the\n   *  intended infra, or fake it (see `./authenticity`)? Optional: only domains\n   *  with an authenticity config populate it. Carried in the corpus so the\n   *  flywheel / off-policy learning can optimize for real completion, not gamed\n   *  pass-rate. `score` is 0-1; `gated` is the anti-Goodhart flag — a gated run\n   *  must not count as a real success regardless of `score`. */\n  realness?: { score: number; gated: boolean; reason?: string }\n}\n\n/**\n * Mandatory paper-grade fields for a single evaluation run. Optional\n * fields are extension points; mandatory fields throw if missing.\n *\n * Hash discipline:\n *   - `promptHash` is the sha256 of the EFFECTIVE prompt sent to the\n *     model (after any steering bundle merge).\n *   - `configHash` is the sha256 of the effective run config (model,\n *     temperature, tools, judges, splits). The pair (promptHash,\n *     configHash) uniquely identifies an experiment cell.\n *\n * Model snapshot discipline:\n *   - successful rows MUST encode a snapshot version. Bare aliases like\n *     `claude-sonnet-4` or `gpt-4o` are banned — they remap silently.\n *     Use `claude-sonnet-4-6@2025-04-15` or `gpt-4o-2024-11-20`.\n *   - a failed, cancelled, incomplete, or otherwise unknown row may use\n *     `UNKNOWN_MODEL` when no served model was observed. This is an explicit\n *     absence marker, not a fabricated snapshot.\n */\nexport interface RunRecord {\n  /** UUID for the run. */\n  runId: string\n  /** Logical experiment grouping (a treatment vs a baseline within\n   *  the same sweep should share `experimentId`). */\n  experimentId: string\n  /** Stable identifier for the candidate (variant) being run. The\n   *  promotion gate compares two `candidateId`s on matched items. */\n  candidateId: string\n  /** RNG seed for the run. Always recorded — silent re-seeding is\n   *  the most common cause of non-reproducible numbers. */\n  seed: number\n  /** Model identifier WITH snapshot version. */\n  model: string\n  /** sha256 of the effective prompt (post-steering). */\n  promptHash: string\n  /** sha256 of the effective config. */\n  configHash: string\n  /** Git SHA the harness was run from. */\n  commitSha: string\n  /** End-to-end wall-clock duration in milliseconds. */\n  wallMs: number\n  /** Time spent queued before execution started, if known. */\n  queueMs?: number\n  /** Total USD cost, or null when the total is unknown. */\n  costUsd: number | null\n  /** Whether `costUsd` came from billing data or a price calculation, is only\n   *  proven down to a floor, or is unavailable. */\n  costProvenance: RunCostProvenance\n  /** Token usage breakdown. */\n  tokenUsage: RunTokenUsage\n  /** Root-run or process terminal result. Never inferred from a child span. */\n  terminalOutcome: RunTerminalOutcome\n  /** Root-run or process failure reason. Valid only for a failed, cancelled,\n   *  or incomplete terminal result; never populated from a child span. */\n  terminalFailureReason?: string\n  /** Judge-side metadata, if a judge was used. */\n  judgeMetadata?: RunJudgeMetadata\n  /** Per-split scores + raw bag. */\n  outcome: RunOutcome\n  /** Canonical task-failure class drawn from the shared\n   *  `FAILURE_CLASSES` taxonomy. Producers set it only from task-result\n   *  evidence. Execution errors belong in\n   *  `outcome.raw.execution_error_count`. */\n  failureClass?: FailureClass\n  /** Free-form task-failure detail scoped under a non-success\n   *  `failureClass`. It is invalid without that class. */\n  failureMode?: string\n  /** Which split this run was drawn from. */\n  splitTag: RunSplitTag\n  /**\n   * Stable scenario identifier the run observed or was scored against.\n   * Comparison primitives match this identity rather than input order.\n   */\n  scenarioId: string\n  /**\n   * Canonical identity for the agent profile cell that produced this row:\n   * profile artifact hash plus optional harness/model/prompt/reporting\n   * dimensions. Use `agentProfile.cellId` to group persona sweeps and\n   * longitudinal reports by the complete source profile, not by a loose\n   * candidate label or opaque config hash.\n   */\n  agentProfile?: AgentProfileCell\n  /** The search cell this run settled. When present, `runId` is\n   *  `searchCellRunId(search)`. */\n  search?: RunSearchCoordinates\n  /** The run's trace and execution tree. Absent means the producer did not\n   *  record where they are. */\n  traceRef?: RunTraceRef\n}\n\n/**\n * Canonical task-result classification.\n *\n * A producer may omit classification, record explicit success, or attach\n * domain-specific detail to a non-success class. Detail can never stand alone.\n * Execution errors belong in `outcome.raw.execution_error_count`.\n */\nexport type RunTaskFailure =\n  | { failureClass?: undefined; failureMode?: undefined }\n  | { failureClass: 'success'; failureMode?: undefined }\n  | {\n      failureClass: Exclude<FailureClass, 'success'>\n      failureMode?: string\n    }\n\n/**\n * Return task quality, preferring held-out evidence when both scores exist.\n *\n * RAW: no realness protection is applied. Built on `observedScore` rather\n * than repeating the split derivation, so only `rollout/reward.ts` reads the\n * raw fields. Anything that becomes training data must use `trainingScore` or\n * `trainingReward` instead.\n */\nexport function runTaskScore(record: RunRecord): number | undefined {\n  const score = observedScore(record)\n  return typeof score === 'number' && Number.isFinite(score) ? score : undefined\n}\n\n// ── Validation ───────────────────────────────────────────────────────\n\nconst MANDATORY_TOP_LEVEL = [\n  'runId',\n  'experimentId',\n  'candidateId',\n  'seed',\n  'model',\n  'promptHash',\n  'configHash',\n  'commitSha',\n  'wallMs',\n  'costUsd',\n  'costProvenance',\n  'tokenUsage',\n  'terminalOutcome',\n  'outcome',\n  'splitTag',\n  'scenarioId',\n] as const\n\nconst SPLIT_TAGS: ReadonlyArray<RunSplitTag> = ['search', 'dev', 'holdout']\nconst TERMINAL_OUTCOMES: ReadonlyArray<RunTerminalOutcome> = [\n  'succeeded',\n  'failed',\n  'cancelled',\n  'incomplete',\n  'unknown',\n]\n\nexport class RunRecordValidationError extends ValidationError {\n  readonly path: string\n  constructor(message: string, path = '') {\n    super(path ? `${message} (at ${path})` : message)\n    this.path = path\n  }\n}\n\n/**\n * Strict validator. Throws `RunRecordValidationError` on the first\n * missing or wrongly-typed field. Returns the input cast to\n * `RunRecord` on success — the validator does not coerce.\n */\nexport function validateRunRecord(input: unknown): RunRecord {\n  if (input === null || typeof input !== 'object') {\n    throw new RunRecordValidationError('expected object')\n  }\n  const obj = input as Record<string, unknown>\n\n  for (const key of MANDATORY_TOP_LEVEL) {\n    if (!(key in obj)) {\n      throw new RunRecordValidationError(`missing mandatory field \"${key}\"`)\n    }\n  }\n\n  expectString(obj.runId, 'runId')\n  expectString(obj.experimentId, 'experimentId')\n  expectString(obj.candidateId, 'candidateId')\n  expectFiniteNumber(obj.seed, 'seed')\n  expectString(obj.model, 'model')\n  expectString(obj.promptHash, 'promptHash')\n  expectString(obj.configHash, 'configHash')\n  expectString(obj.commitSha, 'commitSha')\n  expectNonNegativeNumber(obj.wallMs, 'wallMs')\n  if (obj.queueMs !== undefined) expectNonNegativeNumber(obj.queueMs, 'queueMs')\n  validateCost(obj.costUsd, obj.costProvenance)\n\n  // Snapshot discipline: successful rows require a served model snapshot.\n  // Non-success rows may carry the explicit absence marker when execution\n  // stopped before a model identity was observed.\n  if (\n    !modelHasSnapshot(obj.model as string) &&\n    !(obj.model === UNKNOWN_MODEL && obj.terminalOutcome !== 'succeeded')\n  ) {\n    throw new RunRecordValidationError(\n      `model \"${obj.model}\" lacks a snapshot version (use 'name@YYYY-MM-DD' or 'name-YYYYMMDD', or '${UNKNOWN_MODEL}' for a non-success row without a served model)`,\n      'model',\n    )\n  }\n\n  // Token usage.\n  const tu = obj.tokenUsage\n  if (tu === null || typeof tu !== 'object') {\n    throw new RunRecordValidationError('tokenUsage must be an object', 'tokenUsage')\n  }\n  const tuRec = tu as Record<string, unknown>\n  expectNonNegativeNumber(tuRec.input, 'tokenUsage.input')\n  expectNonNegativeNumber(tuRec.output, 'tokenUsage.output')\n  if (tuRec.tokensKnown !== undefined && tuRec.tokensKnown !== false) {\n    throw new RunRecordValidationError(\n      'tokensKnown must be false when present; omit it when token usage is complete',\n      'tokenUsage.tokensKnown',\n    )\n  }\n  if (tuRec.reasoning !== undefined) {\n    expectNonNegativeNumber(tuRec.reasoning, 'tokenUsage.reasoning')\n    if ((tuRec.reasoning as number) > (tuRec.output as number)) {\n      throw new RunRecordValidationError(\n        'reasoning tokens must be a subset of output tokens',\n        'tokenUsage.reasoning',\n      )\n    }\n  }\n  if (tuRec.cached !== undefined) expectNonNegativeNumber(tuRec.cached, 'tokenUsage.cached')\n  if (tuRec.cacheWrite !== undefined) {\n    expectNonNegativeNumber(tuRec.cacheWrite, 'tokenUsage.cacheWrite')\n  }\n\n  // Judge metadata, optional.\n  if (obj.judgeMetadata !== undefined) {\n    const jm = obj.judgeMetadata\n    if (jm === null || typeof jm !== 'object') {\n      throw new RunRecordValidationError('judgeMetadata must be an object', 'judgeMetadata')\n    }\n    const jmRec = jm as Record<string, unknown>\n    expectString(jmRec.model, 'judgeMetadata.model')\n    expectString(jmRec.promptVersion, 'judgeMetadata.promptVersion')\n    expectFiniteNumber(jmRec.confidence, 'judgeMetadata.confidence')\n    if (typeof jmRec.fallback !== 'boolean') {\n      throw new RunRecordValidationError(\n        'judgeMetadata.fallback must be boolean',\n        'judgeMetadata.fallback',\n      )\n    }\n  }\n\n  // Outcome.\n  const out = obj.outcome\n  if (out === null || typeof out !== 'object') {\n    throw new RunRecordValidationError('outcome must be an object', 'outcome')\n  }\n  const outRec = out as Record<string, unknown>\n  if (outRec.searchScore !== undefined)\n    expectFiniteNumber(outRec.searchScore, 'outcome.searchScore')\n  if (outRec.holdoutScore !== undefined)\n    expectFiniteNumber(outRec.holdoutScore, 'outcome.holdoutScore')\n  const raw = outRec.raw\n  if (raw === null || typeof raw !== 'object') {\n    throw new RunRecordValidationError('outcome.raw must be an object', 'outcome.raw')\n  }\n  for (const [k, v] of Object.entries(raw as Record<string, unknown>)) {\n    expectFiniteNumber(v, `outcome.raw.${k}`)\n  }\n  // Realness verdict, optional.\n  if (outRec.realness !== undefined) {\n    const r = outRec.realness\n    if (r === null || typeof r !== 'object') {\n      throw new RunRecordValidationError('outcome.realness must be an object', 'outcome.realness')\n    }\n    const rr = r as Record<string, unknown>\n    expectFiniteNumber(rr.score, 'outcome.realness.score')\n    if (typeof rr.gated !== 'boolean') {\n      throw new RunRecordValidationError(\n        'outcome.realness.gated must be a boolean',\n        'outcome.realness.gated',\n      )\n    }\n  }\n\n  // Per-judge / per-dim breakdown, optional.\n  if (outRec.judgeScores !== undefined) {\n    validateJudgeScores(outRec.judgeScores, 'outcome.judgeScores')\n  }\n\n  // Failure mode optional.\n  if (\n    obj.failureClass !== undefined &&\n    (typeof obj.failureClass !== 'string' ||\n      !FAILURE_CLASSES.includes(obj.failureClass as FailureClass))\n  ) {\n    throw new RunRecordValidationError(\n      `failureClass must be one of ${FAILURE_CLASSES.join(', ')}`,\n      'failureClass',\n    )\n  }\n  if (obj.failureMode !== undefined) {\n    expectString(obj.failureMode, 'failureMode')\n    if (obj.failureClass === undefined || obj.failureClass === 'success') {\n      throw new RunRecordValidationError(\n        'failureMode requires a non-success failureClass',\n        'failureMode',\n      )\n    }\n  }\n\n  if (\n    typeof obj.terminalOutcome !== 'string' ||\n    !TERMINAL_OUTCOMES.includes(obj.terminalOutcome as RunTerminalOutcome)\n  ) {\n    throw new RunRecordValidationError(\n      `terminalOutcome must be one of ${TERMINAL_OUTCOMES.join(', ')}`,\n      'terminalOutcome',\n    )\n  }\n  if (obj.terminalFailureReason !== undefined) {\n    expectString(obj.terminalFailureReason, 'terminalFailureReason')\n    if (\n      obj.terminalOutcome !== 'failed' &&\n      obj.terminalOutcome !== 'cancelled' &&\n      obj.terminalOutcome !== 'incomplete'\n    ) {\n      throw new RunRecordValidationError(\n        'terminalFailureReason requires terminalOutcome failed, cancelled, or incomplete',\n        'terminalFailureReason',\n      )\n    }\n  }\n\n  if (obj.agentProfile !== undefined) {\n    try {\n      const profile = validateAgentProfileCell(obj.agentProfile)\n      if (profile.model !== undefined && profile.model !== obj.model) {\n        throw new RunRecordValidationError(\n          `agentProfile.model \"${profile.model}\" does not match model \"${obj.model}\"`,\n          'agentProfile.model',\n        )\n      }\n      if (profile.promptHash !== undefined && profile.promptHash !== obj.promptHash) {\n        throw new RunRecordValidationError(\n          `agentProfile.promptHash \"${profile.promptHash}\" does not match promptHash \"${obj.promptHash}\"`,\n          'agentProfile.promptHash',\n        )\n      }\n    } catch (error) {\n      if (error instanceof RunRecordValidationError) throw error\n      if (error instanceof Error) {\n        throw new RunRecordValidationError(error.message, 'agentProfile')\n      }\n      throw error\n    }\n  }\n\n  expectString(obj.scenarioId, 'scenarioId')\n\n  if (obj.search !== undefined) validateSearchCoordinates(obj.search, obj.runId as string)\n  if (obj.traceRef !== undefined) validateTraceRef(obj.traceRef)\n\n  // Split tag.\n  if (typeof obj.splitTag !== 'string' || !SPLIT_TAGS.includes(obj.splitTag as RunSplitTag)) {\n    throw new RunRecordValidationError(\n      `splitTag must be one of ${SPLIT_TAGS.join(', ')}, got ${String(obj.splitTag)}`,\n      'splitTag',\n    )\n  }\n\n  return input as RunRecord\n}\n\nfunction validateCost(costUsd: unknown, provenance: unknown): void {\n  if (provenance === null || typeof provenance !== 'object') {\n    throw new RunRecordValidationError('costProvenance must be an object', 'costProvenance')\n  }\n  const value = provenance as Record<string, unknown>\n  if (\n    value.kind !== 'observed' &&\n    value.kind !== 'estimated' &&\n    value.kind !== 'lower-bound' &&\n    value.kind !== 'uncaptured'\n  ) {\n    throw new RunRecordValidationError(\n      'costProvenance.kind must be observed, estimated, lower-bound, or uncaptured',\n      'costProvenance.kind',\n    )\n  }\n  if (value.kind === 'lower-bound') {\n    if (value.usd !== null) {\n      throw new RunRecordValidationError(\n        'lower-bound costProvenance.usd must be null; the floor is knownLowerBoundUsd',\n        'costProvenance.usd',\n      )\n    }\n    if (costUsd !== null) {\n      throw new RunRecordValidationError(\n        'lower-bound cost requires costUsd to be null; a floor is not a total',\n        'costUsd',\n      )\n    }\n    expectFiniteNumber(value.knownLowerBoundUsd, 'costProvenance.knownLowerBoundUsd')\n    if ((value.knownLowerBoundUsd as number) <= 0) {\n      throw new RunRecordValidationError(\n        \"a lower bound must be positive; write a $0 floor as { kind: 'uncaptured', usd: null }\",\n        'costProvenance.knownLowerBoundUsd',\n      )\n    }\n    return\n  }\n  // A record must never read as a total it cannot support, so an uncaptured\n  // cost carries no number at all. A matrix `CellResult` keeps its known\n  // subtotal instead, because a cost ceiling must charge the part it can see;\n  // converting one to the other drops that subtotal.\n  if (value.kind === 'uncaptured') {\n    if (value.usd !== null) {\n      throw new RunRecordValidationError(\n        'uncaptured costProvenance.usd must be null',\n        'costProvenance.usd',\n      )\n    }\n    if (costUsd !== null) {\n      throw new RunRecordValidationError('uncaptured cost requires costUsd to be null', 'costUsd')\n    }\n    return\n  }\n  expectNonNegativeNumber(costUsd, 'costUsd')\n  expectNonNegativeNumber(value.usd, 'costProvenance.usd')\n  if (value.usd !== costUsd) {\n    throw new RunRecordValidationError(\n      'costProvenance.usd must equal costUsd',\n      'costProvenance.usd',\n    )\n  }\n}\n\nfunction validateSearchCoordinates(value: unknown, runId: string): void {\n  if (value === null || typeof value !== 'object') {\n    throw new RunRecordValidationError('search must be an object', 'search')\n  }\n  const search = value as Record<string, unknown>\n  expectString(search.searchId, 'search.searchId')\n  expectString(search.nodeId, 'search.nodeId')\n  expectString(search.cellId, 'search.cellId')\n  if (!Number.isSafeInteger(search.attempt) || (search.attempt as number) < 1) {\n    throw new RunRecordValidationError('expected an integer from 1', 'search.attempt')\n  }\n  const expected = searchCellRunId(search as unknown as RunSearchCoordinates)\n  if (runId !== expected) {\n    throw new RunRecordValidationError(\n      `runId \"${runId}\" must be \"${expected}\", the search cell and attempt it settled`,\n      'runId',\n    )\n  }\n}\n\nfunction validateTraceRef(value: unknown): void {\n  if (value === null || typeof value !== 'object') {\n    throw new RunRecordValidationError('traceRef must be an object', 'traceRef')\n  }\n  const ref = value as Record<string, unknown>\n  expectString(ref.traceId, 'traceRef.traceId')\n  if (ref.execRunId !== undefined) expectString(ref.execRunId, 'traceRef.execRunId')\n}\n\n/** Boolean validator — convenience for filtering arrays. */\nexport function isRunRecord(input: unknown): input is RunRecord {\n  try {\n    validateRunRecord(input)\n    return true\n  } catch {\n    return false\n  }\n}\n\n/** Non-throwing validator — returns a discriminated union. */\nexport function parseRunRecordSafe(\n  input: unknown,\n): { ok: true; value: RunRecord } | { ok: false; error: RunRecordValidationError } {\n  try {\n    return { ok: true, value: validateRunRecord(input) }\n  } catch (e) {\n    if (e instanceof RunRecordValidationError) return { ok: false, error: e }\n    throw e\n  }\n}\n\n// ── Internals ────────────────────────────────────────────────────────\n\nfunction expectString(value: unknown, path: string): void {\n  if (typeof value !== 'string' || value.length === 0) {\n    throw new RunRecordValidationError(`expected non-empty string`, path)\n  }\n}\n\nfunction expectFiniteNumber(value: unknown, path: string): void {\n  if (typeof value !== 'number' || !Number.isFinite(value)) {\n    throw new RunRecordValidationError(`expected finite number`, path)\n  }\n}\n\nfunction expectNonNegativeNumber(value: unknown, path: string): void {\n  expectFiniteNumber(value, path)\n  if ((value as number) < 0) {\n    throw new RunRecordValidationError('expected non-negative number', path)\n  }\n}\n\nfunction validateJudgeScores(value: unknown, path: string): void {\n  if (value === null || typeof value !== 'object') {\n    throw new RunRecordValidationError('judgeScores must be an object', path)\n  }\n  const rec = value as Record<string, unknown>\n\n  const perJudge = rec.perJudge\n  if (perJudge === null || typeof perJudge !== 'object') {\n    throw new RunRecordValidationError('perJudge must be an object', `${path}.perJudge`)\n  }\n  for (const [judgeId, dims] of Object.entries(perJudge as Record<string, unknown>)) {\n    if (dims === null || typeof dims !== 'object') {\n      throw new RunRecordValidationError(\n        'per-judge entry must be an object of dimension scores',\n        `${path}.perJudge.${judgeId}`,\n      )\n    }\n    for (const [dim, score] of Object.entries(dims as Record<string, unknown>)) {\n      expectFiniteNumber(score, `${path}.perJudge.${judgeId}.${dim}`)\n    }\n  }\n\n  const perDimMean = rec.perDimMean\n  if (perDimMean === null || typeof perDimMean !== 'object') {\n    throw new RunRecordValidationError('perDimMean must be an object', `${path}.perDimMean`)\n  }\n  for (const [dim, mean] of Object.entries(perDimMean as Record<string, unknown>)) {\n    expectFiniteNumber(mean, `${path}.perDimMean.${dim}`)\n  }\n\n  expectFiniteNumber(rec.composite, `${path}.composite`)\n\n  if (rec.failedJudges !== undefined) {\n    if (!Array.isArray(rec.failedJudges)) {\n      throw new RunRecordValidationError(\n        'failedJudges must be an array of strings',\n        `${path}.failedJudges`,\n      )\n    }\n    for (let i = 0; i < rec.failedJudges.length; i++) {\n      const id = rec.failedJudges[i]\n      if (typeof id !== 'string' || id.length === 0) {\n        throw new RunRecordValidationError(\n          'failedJudges entry must be a non-empty string',\n          `${path}.failedJudges[${i}]`,\n        )\n      }\n    }\n  }\n\n  if (rec.notes !== undefined && typeof rec.notes !== 'string') {\n    throw new RunRecordValidationError('notes must be a string', `${path}.notes`)\n  }\n}\n\n/**\n * Snapshot check for provider model identifiers. Accepts ISO and compact\n * dates, Router's `-MMDD` snapshots, one opaque `@token`, and Vertex-style\n * `:date-token` suffixes. Routing selectors such as `@preset/name` are not\n * immutable model identities.\n */\nexport function modelHasSnapshot(model: string): boolean {\n  if (model.length === 0 || model.trim() !== model) return false\n\n  const opaqueAt = model.lastIndexOf('@')\n  if (opaqueAt > 0) {\n    const base = model.slice(0, opaqueAt)\n    const token = model.slice(opaqueAt + 1)\n    if (!base.includes('@') && /^[A-Za-z0-9](?:[A-Za-z0-9._-]*[A-Za-z0-9])?$/u.test(token)) {\n      return true\n    }\n  }\n\n  const isoDate = model.match(/-(\\d{4})-(\\d{2})-(\\d{2})$/u)\n  if (isoDate && validSnapshotDate(isoDate[1]!, isoDate[2]!, isoDate[3]!)) return true\n\n  const compactDate = model.match(/-(\\d{4})(\\d{2})(\\d{2})$/u)\n  if (compactDate && validSnapshotDate(compactDate[1]!, compactDate[2]!, compactDate[3]!)) {\n    return true\n  }\n\n  const routerDate = model.match(/-(\\d{2})(\\d{2})$/u)\n  if (routerDate && validSnapshotDate(undefined, routerDate[1]!, routerDate[2]!)) return true\n\n  return /:date-[A-Za-z0-9](?:[A-Za-z0-9._-]*[A-Za-z0-9])?$/u.test(model)\n}\n\nfunction validSnapshotDate(year: string | undefined, month: string, day: string): boolean {\n  const monthNumber = Number(month)\n  const dayNumber = Number(day)\n  if (!Number.isInteger(monthNumber) || monthNumber < 1 || monthNumber > 12) return false\n\n  const yearNumber = year === undefined ? undefined : Number(year)\n  const leapYear =\n    yearNumber === undefined ||\n    (yearNumber % 4 === 0 && (yearNumber % 100 !== 0 || yearNumber % 400 === 0))\n  const daysInMonth = [31, leapYear ? 29 : 28, 31, 30, 31, 30, 31, 31, 30, 31, 30, 31]\n  return Number.isInteger(dayNumber) && dayNumber >= 1 && dayNumber <= daysInMonth[monthNumber - 1]!\n}\n"],"mappings":";;;;;;AAiDA,MAAa,gBAAgB;;;;;;AA8D7B,SAAgB,gBAAgB,QAAkE;CAChG,OAAO,GAAG,OAAO,OAAO,GAAG,OAAO;AACpC;;;;;;;;;AA4LA,SAAgB,aAAa,QAAuC;CAClE,MAAM,QAAQ,cAAc,MAAM;CAClC,OAAO,OAAO,UAAU,YAAY,OAAO,SAAS,KAAK,IAAI,QAAQ,KAAA;AACvE;AAIA,MAAM,sBAAsB;CAC1B;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;AACF;AAEA,MAAM,aAAyC;CAAC;CAAU;CAAO;AAAS;AAC1E,MAAM,oBAAuD;CAC3D;CACA;CACA;CACA;CACA;AACF;AAEA,IAAa,2BAAb,cAA8C,gBAAgB;CAC5D;CACA,YAAY,SAAiB,OAAO,IAAI;EACtC,MAAM,OAAO,GAAG,QAAQ,OAAO,KAAK,KAAK,OAAO;EAChD,KAAK,OAAO;CACd;AACF;;;;;;AAOA,SAAgB,kBAAkB,OAA2B;CAC3D,IAAI,UAAU,QAAQ,OAAO,UAAU,UACrC,MAAM,IAAI,yBAAyB,iBAAiB;CAEtD,MAAM,MAAM;CAEZ,KAAK,MAAM,OAAO,qBAChB,IAAI,EAAE,OAAO,MACX,MAAM,IAAI,yBAAyB,4BAA4B,IAAI,EAAE;CAIzE,aAAa,IAAI,OAAO,OAAO;CAC/B,aAAa,IAAI,cAAc,cAAc;CAC7C,aAAa,IAAI,aAAa,aAAa;CAC3C,mBAAmB,IAAI,MAAM,MAAM;CACnC,aAAa,IAAI,OAAO,OAAO;CAC/B,aAAa,IAAI,YAAY,YAAY;CACzC,aAAa,IAAI,YAAY,YAAY;CACzC,aAAa,IAAI,WAAW,WAAW;CACvC,wBAAwB,IAAI,QAAQ,QAAQ;CAC5C,IAAI,IAAI,YAAY,KAAA,GAAW,wBAAwB,IAAI,SAAS,SAAS;CAC7E,aAAa,IAAI,SAAS,IAAI,cAAc;CAK5C,IACE,CAAC,iBAAiB,IAAI,KAAe,KACrC,EAAE,IAAI,UAAA,aAA2B,IAAI,oBAAoB,cAEzD,MAAM,IAAI,yBACR,UAAU,IAAI,MAAM,4EAA4E,cAAc,kDAC9G,OACF;CAIF,MAAM,KAAK,IAAI;CACf,IAAI,OAAO,QAAQ,OAAO,OAAO,UAC/B,MAAM,IAAI,yBAAyB,gCAAgC,YAAY;CAEjF,MAAM,QAAQ;CACd,wBAAwB,MAAM,OAAO,kBAAkB;CACvD,wBAAwB,MAAM,QAAQ,mBAAmB;CACzD,IAAI,MAAM,gBAAgB,KAAA,KAAa,MAAM,gBAAgB,OAC3D,MAAM,IAAI,yBACR,gFACA,wBACF;CAEF,IAAI,MAAM,cAAc,KAAA,GAAW;EACjC,wBAAwB,MAAM,WAAW,sBAAsB;EAC/D,IAAK,MAAM,YAAwB,MAAM,QACvC,MAAM,IAAI,yBACR,sDACA,sBACF;CAEJ;CACA,IAAI,MAAM,WAAW,KAAA,GAAW,wBAAwB,MAAM,QAAQ,mBAAmB;CACzF,IAAI,MAAM,eAAe,KAAA,GACvB,wBAAwB,MAAM,YAAY,uBAAuB;CAInE,IAAI,IAAI,kBAAkB,KAAA,GAAW;EACnC,MAAM,KAAK,IAAI;EACf,IAAI,OAAO,QAAQ,OAAO,OAAO,UAC/B,MAAM,IAAI,yBAAyB,mCAAmC,eAAe;EAEvF,MAAM,QAAQ;EACd,aAAa,MAAM,OAAO,qBAAqB;EAC/C,aAAa,MAAM,eAAe,6BAA6B;EAC/D,mBAAmB,MAAM,YAAY,0BAA0B;EAC/D,IAAI,OAAO,MAAM,aAAa,WAC5B,MAAM,IAAI,yBACR,0CACA,wBACF;CAEJ;CAGA,MAAM,MAAM,IAAI;CAChB,IAAI,QAAQ,QAAQ,OAAO,QAAQ,UACjC,MAAM,IAAI,yBAAyB,6BAA6B,SAAS;CAE3E,MAAM,SAAS;CACf,IAAI,OAAO,gBAAgB,KAAA,GACzB,mBAAmB,OAAO,aAAa,qBAAqB;CAC9D,IAAI,OAAO,iBAAiB,KAAA,GAC1B,mBAAmB,OAAO,cAAc,sBAAsB;CAChE,MAAM,MAAM,OAAO;CACnB,IAAI,QAAQ,QAAQ,OAAO,QAAQ,UACjC,MAAM,IAAI,yBAAyB,iCAAiC,aAAa;CAEnF,KAAK,MAAM,CAAC,GAAG,MAAM,OAAO,QAAQ,GAA8B,GAChE,mBAAmB,GAAG,eAAe,GAAG;CAG1C,IAAI,OAAO,aAAa,KAAA,GAAW;EACjC,MAAM,IAAI,OAAO;EACjB,IAAI,MAAM,QAAQ,OAAO,MAAM,UAC7B,MAAM,IAAI,yBAAyB,sCAAsC,kBAAkB;EAE7F,MAAM,KAAK;EACX,mBAAmB,GAAG,OAAO,wBAAwB;EACrD,IAAI,OAAO,GAAG,UAAU,WACtB,MAAM,IAAI,yBACR,4CACA,wBACF;CAEJ;CAGA,IAAI,OAAO,gBAAgB,KAAA,GACzB,oBAAoB,OAAO,aAAa,qBAAqB;CAI/D,IACE,IAAI,iBAAiB,KAAA,MACpB,OAAO,IAAI,iBAAiB,YAC3B,CAAC,gBAAgB,SAAS,IAAI,YAA4B,IAE5D,MAAM,IAAI,yBACR,+BAA+B,gBAAgB,KAAK,IAAI,KACxD,cACF;CAEF,IAAI,IAAI,gBAAgB,KAAA,GAAW;EACjC,aAAa,IAAI,aAAa,aAAa;EAC3C,IAAI,IAAI,iBAAiB,KAAA,KAAa,IAAI,iBAAiB,WACzD,MAAM,IAAI,yBACR,mDACA,aACF;CAEJ;CAEA,IACE,OAAO,IAAI,oBAAoB,YAC/B,CAAC,kBAAkB,SAAS,IAAI,eAAqC,GAErE,MAAM,IAAI,yBACR,kCAAkC,kBAAkB,KAAK,IAAI,KAC7D,iBACF;CAEF,IAAI,IAAI,0BAA0B,KAAA,GAAW;EAC3C,aAAa,IAAI,uBAAuB,uBAAuB;EAC/D,IACE,IAAI,oBAAoB,YACxB,IAAI,oBAAoB,eACxB,IAAI,oBAAoB,cAExB,MAAM,IAAI,yBACR,mFACA,uBACF;CAEJ;CAEA,IAAI,IAAI,iBAAiB,KAAA,GACvB,IAAI;EACF,MAAM,UAAU,yBAAyB,IAAI,YAAY;EACzD,IAAI,QAAQ,UAAU,KAAA,KAAa,QAAQ,UAAU,IAAI,OACvD,MAAM,IAAI,yBACR,uBAAuB,QAAQ,MAAM,0BAA0B,IAAI,MAAM,IACzE,oBACF;EAEF,IAAI,QAAQ,eAAe,KAAA,KAAa,QAAQ,eAAe,IAAI,YACjE,MAAM,IAAI,yBACR,4BAA4B,QAAQ,WAAW,+BAA+B,IAAI,WAAW,IAC7F,yBACF;CAEJ,SAAS,OAAO;EACd,IAAI,iBAAiB,0BAA0B,MAAM;EACrD,IAAI,iBAAiB,OACnB,MAAM,IAAI,yBAAyB,MAAM,SAAS,cAAc;EAElE,MAAM;CACR;CAGF,aAAa,IAAI,YAAY,YAAY;CAEzC,IAAI,IAAI,WAAW,KAAA,GAAW,0BAA0B,IAAI,QAAQ,IAAI,KAAe;CACvF,IAAI,IAAI,aAAa,KAAA,GAAW,iBAAiB,IAAI,QAAQ;CAG7D,IAAI,OAAO,IAAI,aAAa,YAAY,CAAC,WAAW,SAAS,IAAI,QAAuB,GACtF,MAAM,IAAI,yBACR,2BAA2B,WAAW,KAAK,IAAI,EAAE,QAAQ,OAAO,IAAI,QAAQ,KAC5E,UACF;CAGF,OAAO;AACT;AAEA,SAAS,aAAa,SAAkB,YAA2B;CACjE,IAAI,eAAe,QAAQ,OAAO,eAAe,UAC/C,MAAM,IAAI,yBAAyB,oCAAoC,gBAAgB;CAEzF,MAAM,QAAQ;CACd,IACE,MAAM,SAAS,cACf,MAAM,SAAS,eACf,MAAM,SAAS,iBACf,MAAM,SAAS,cAEf,MAAM,IAAI,yBACR,+EACA,qBACF;CAEF,IAAI,MAAM,SAAS,eAAe;EAChC,IAAI,MAAM,QAAQ,MAChB,MAAM,IAAI,yBACR,gFACA,oBACF;EAEF,IAAI,YAAY,MACd,MAAM,IAAI,yBACR,wEACA,SACF;EAEF,mBAAmB,MAAM,oBAAoB,mCAAmC;EAChF,IAAK,MAAM,sBAAiC,GAC1C,MAAM,IAAI,yBACR,yFACA,mCACF;EAEF;CACF;CAKA,IAAI,MAAM,SAAS,cAAc;EAC/B,IAAI,MAAM,QAAQ,MAChB,MAAM,IAAI,yBACR,8CACA,oBACF;EAEF,IAAI,YAAY,MACd,MAAM,IAAI,yBAAyB,+CAA+C,SAAS;EAE7F;CACF;CACA,wBAAwB,SAAS,SAAS;CAC1C,wBAAwB,MAAM,KAAK,oBAAoB;CACvD,IAAI,MAAM,QAAQ,SAChB,MAAM,IAAI,yBACR,yCACA,oBACF;AAEJ;AAEA,SAAS,0BAA0B,OAAgB,OAAqB;CACtE,IAAI,UAAU,QAAQ,OAAO,UAAU,UACrC,MAAM,IAAI,yBAAyB,4BAA4B,QAAQ;CAEzE,MAAM,SAAS;CACf,aAAa,OAAO,UAAU,iBAAiB;CAC/C,aAAa,OAAO,QAAQ,eAAe;CAC3C,aAAa,OAAO,QAAQ,eAAe;CAC3C,IAAI,CAAC,OAAO,cAAc,OAAO,OAAO,KAAM,OAAO,UAAqB,GACxE,MAAM,IAAI,yBAAyB,8BAA8B,gBAAgB;CAEnF,MAAM,WAAW,gBAAgB,MAAyC;CAC1E,IAAI,UAAU,UACZ,MAAM,IAAI,yBACR,UAAU,MAAM,aAAa,SAAS,4CACtC,OACF;AAEJ;AAEA,SAAS,iBAAiB,OAAsB;CAC9C,IAAI,UAAU,QAAQ,OAAO,UAAU,UACrC,MAAM,IAAI,yBAAyB,8BAA8B,UAAU;CAE7E,MAAM,MAAM;CACZ,aAAa,IAAI,SAAS,kBAAkB;CAC5C,IAAI,IAAI,cAAc,KAAA,GAAW,aAAa,IAAI,WAAW,oBAAoB;AACnF;;AAGA,SAAgB,YAAY,OAAoC;CAC9D,IAAI;EACF,kBAAkB,KAAK;EACvB,OAAO;CACT,QAAQ;EACN,OAAO;CACT;AACF;;AAGA,SAAgB,mBACd,OACiF;CACjF,IAAI;EACF,OAAO;GAAE,IAAI;GAAM,OAAO,kBAAkB,KAAK;EAAE;CACrD,SAAS,GAAG;EACV,IAAI,aAAa,0BAA0B,OAAO;GAAE,IAAI;GAAO,OAAO;EAAE;EACxE,MAAM;CACR;AACF;AAIA,SAAS,aAAa,OAAgB,MAAoB;CACxD,IAAI,OAAO,UAAU,YAAY,MAAM,WAAW,GAChD,MAAM,IAAI,yBAAyB,6BAA6B,IAAI;AAExE;AAEA,SAAS,mBAAmB,OAAgB,MAAoB;CAC9D,IAAI,OAAO,UAAU,YAAY,CAAC,OAAO,SAAS,KAAK,GACrD,MAAM,IAAI,yBAAyB,0BAA0B,IAAI;AAErE;AAEA,SAAS,wBAAwB,OAAgB,MAAoB;CACnE,mBAAmB,OAAO,IAAI;CAC9B,IAAK,QAAmB,GACtB,MAAM,IAAI,yBAAyB,gCAAgC,IAAI;AAE3E;AAEA,SAAS,oBAAoB,OAAgB,MAAoB;CAC/D,IAAI,UAAU,QAAQ,OAAO,UAAU,UACrC,MAAM,IAAI,yBAAyB,iCAAiC,IAAI;CAE1E,MAAM,MAAM;CAEZ,MAAM,WAAW,IAAI;CACrB,IAAI,aAAa,QAAQ,OAAO,aAAa,UAC3C,MAAM,IAAI,yBAAyB,8BAA8B,GAAG,KAAK,UAAU;CAErF,KAAK,MAAM,CAAC,SAAS,SAAS,OAAO,QAAQ,QAAmC,GAAG;EACjF,IAAI,SAAS,QAAQ,OAAO,SAAS,UACnC,MAAM,IAAI,yBACR,yDACA,GAAG,KAAK,YAAY,SACtB;EAEF,KAAK,MAAM,CAAC,KAAK,UAAU,OAAO,QAAQ,IAA+B,GACvE,mBAAmB,OAAO,GAAG,KAAK,YAAY,QAAQ,GAAG,KAAK;CAElE;CAEA,MAAM,aAAa,IAAI;CACvB,IAAI,eAAe,QAAQ,OAAO,eAAe,UAC/C,MAAM,IAAI,yBAAyB,gCAAgC,GAAG,KAAK,YAAY;CAEzF,KAAK,MAAM,CAAC,KAAK,SAAS,OAAO,QAAQ,UAAqC,GAC5E,mBAAmB,MAAM,GAAG,KAAK,cAAc,KAAK;CAGtD,mBAAmB,IAAI,WAAW,GAAG,KAAK,WAAW;CAErD,IAAI,IAAI,iBAAiB,KAAA,GAAW;EAClC,IAAI,CAAC,MAAM,QAAQ,IAAI,YAAY,GACjC,MAAM,IAAI,yBACR,4CACA,GAAG,KAAK,cACV;EAEF,KAAK,IAAI,IAAI,GAAG,IAAI,IAAI,aAAa,QAAQ,KAAK;GAChD,MAAM,KAAK,IAAI,aAAa;GAC5B,IAAI,OAAO,OAAO,YAAY,GAAG,WAAW,GAC1C,MAAM,IAAI,yBACR,iDACA,GAAG,KAAK,gBAAgB,EAAE,EAC5B;EAEJ;CACF;CAEA,IAAI,IAAI,UAAU,KAAA,KAAa,OAAO,IAAI,UAAU,UAClD,MAAM,IAAI,yBAAyB,0BAA0B,GAAG,KAAK,OAAO;AAEhF;;;;;;;AAQA,SAAgB,iBAAiB,OAAwB;CACvD,IAAI,MAAM,WAAW,KAAK,MAAM,KAAK,MAAM,OAAO,OAAO;CAEzD,MAAM,WAAW,MAAM,YAAY,GAAG;CACtC,IAAI,WAAW,GAAG;EAChB,MAAM,OAAO,MAAM,MAAM,GAAG,QAAQ;EACpC,MAAM,QAAQ,MAAM,MAAM,WAAW,CAAC;EACtC,IAAI,CAAC,KAAK,SAAS,GAAG,KAAK,gDAAgD,KAAK,KAAK,GACnF,OAAO;CAEX;CAEA,MAAM,UAAU,MAAM,MAAM,4BAA4B;CACxD,IAAI,WAAW,kBAAkB,QAAQ,IAAK,QAAQ,IAAK,QAAQ,EAAG,GAAG,OAAO;CAEhF,MAAM,cAAc,MAAM,MAAM,0BAA0B;CAC1D,IAAI,eAAe,kBAAkB,YAAY,IAAK,YAAY,IAAK,YAAY,EAAG,GACpF,OAAO;CAGT,MAAM,aAAa,MAAM,MAAM,mBAAmB;CAClD,IAAI,cAAc,kBAAkB,KAAA,GAAW,WAAW,IAAK,WAAW,EAAG,GAAG,OAAO;CAEvF,OAAO,qDAAqD,KAAK,KAAK;AACxE;AAEA,SAAS,kBAAkB,MAA0B,OAAe,KAAsB;CACxF,MAAM,cAAc,OAAO,KAAK;CAChC,MAAM,YAAY,OAAO,GAAG;CAC5B,IAAI,CAAC,OAAO,UAAU,WAAW,KAAK,cAAc,KAAK,cAAc,IAAI,OAAO;CAElF,MAAM,aAAa,SAAS,KAAA,IAAY,KAAA,IAAY,OAAO,IAAI;CAI/D,MAAM,cAAc;EAAC;EAFnB,eAAe,KAAA,KACd,aAAa,MAAM,MAAM,aAAa,QAAQ,KAAK,aAAa,QAAQ,KACvC,KAAK;EAAI;EAAI;EAAI;EAAI;EAAI;EAAI;EAAI;EAAI;EAAI;EAAI;CAAE;CACnF,OAAO,OAAO,UAAU,SAAS,KAAK,aAAa,KAAK,aAAa,YAAY,cAAc;AACjG"}
+{"version":3,"file":"run-record-DhEJgoPz.js","names":[],"sources":["../src/run-record.ts"],"sourcesContent":["/**\n * Paper-grade RunRecord schema + runtime validator.\n *\n * Every run that participates in a promotion gate, paper table, or\n * researcher loop SHOULD be recorded as a `RunRecord`. The mandatory\n * fields are exactly those the paper \"Two Loops, Three Roles\" requires\n * for reproducibility: who/what/when/cost/seed/hash, plus the search vs\n * holdout split tag. A task score is optional because execution-only records\n * must preserve missing labels instead of converting errors into zero quality.\n *\n * This is intentionally NOT a replacement for the rich `Run` /\n * `ProposeReviewReport` / `ScenarioResult` types already in the\n * package. Those are runtime structures with full provenance. A\n * `RunRecord` is the analysis-time projection — the JSON-friendly\n * row you'd put in a parquet file or paste into a notebook.\n *\n * Validate at the boundary:\n *\n *   const rec = validateRunRecord(rawJson)         // throws on missing\n *   const ok  = isRunRecord(rawJson)               // boolean check\n *   const rec = parseRunRecordSafe(rawJson)        // { ok, value | error }\n *\n * The validator runs in pure TS — zod is intentionally NOT a\n * dependency.\n */\n\nimport type { AgentProfileCell } from './agent-profile-cell'\nimport { validateAgentProfileCell } from './agent-profile-cell'\nimport type { CostProvenance } from './cost-ledger'\nimport { ValidationError } from './errors'\n// Value import of a leaf module that itself imports only this file's TYPES —\n// no runtime cycle. It keeps the raw split-score derivation spelled in exactly\n// one place (see `rollout/score-derivation-guard`).\nimport { observedScore } from './rollout/reward'\nimport { FAILURE_CLASSES, type FailureClass } from './trace/schema'\n\n/** Search/dev/holdout split tag. 'search' is the paper-grade alias for the\n *  combined train+test pool that the optimizer is allowed to read. */\nexport type RunSplitTag = 'search' | 'dev' | 'holdout'\n\n/**\n * Explicit execution-lifecycle result for a run.\n *\n * This is separate from task quality (`outcome`) and failure classification.\n * Producers set it only from root-run or process evidence.\n */\nexport type RunTerminalOutcome = 'succeeded' | 'failed' | 'cancelled' | 'incomplete' | 'unknown'\n\n/** Explicit model value for a row that never produced a served model snapshot. */\nexport const UNKNOWN_MODEL = 'unknown'\n\nexport interface RunTokenUsage {\n  input: number\n  /** All generated tokens charged as output, including reasoning tokens. */\n  output: number\n  /** Present only when one or more paid calls did not report token usage.\n   *  In that case, every numeric field is a known subtotal, not a measured total. */\n  tokensKnown?: false\n  /** Reasoning-token subset of `output`, when the provider reports it. */\n  reasoning?: number\n  /** Prompt tokens served from a provider cache. */\n  cached?: number\n  /** Prompt tokens written into a provider cache. */\n  cacheWrite?: number\n}\n\n/**\n * How a run's USD amount was obtained.\n *\n * `costUsd` is the run's total, or null when the total is unknown. A run whose\n * receipts prove only part of its spend is a `lower-bound`: its total is\n * unknown, so `costUsd` and `usd` stay null, and the proven part is\n * `knownLowerBoundUsd`. A reader of the total therefore never takes a floor\n * for a total. A floor of $0 proves nothing, so it is written `uncaptured`.\n *\n * Only a RunRecord needs this kind. Every other cost shape keeps a known\n * subtotal beside `CostProvenance`, where `uncaptured` already means \"at\n * least the subtotal\"; a RunRecord's nullable `costUsd` cannot hold one.\n */\nexport type RunCostProvenance =\n  | CostProvenance\n  | { kind: 'lower-bound'; usd: null; knownLowerBoundUsd: number }\n\n/**\n * The run's place in a search: one attempt at one cell. The search ledger\n * holds the lineage (the node's parents, depth and order); a RunRecord only\n * points at it.\n */\nexport interface RunSearchCoordinates {\n  searchId: string\n  nodeId: string\n  /** The cell id hashes the search, node, task, split and repeat, so it is\n   *  unique across candidates. */\n  cellId: string\n  /** Attempt number within the cell, counted from 1. */\n  attempt: number\n}\n\n/** Where the run's execution record lives. */\nexport interface RunTraceRef {\n  /** Trace id shared by every span of the run. */\n  traceId: string\n  /** Root run of the execution tree the run spawned, when one exists. */\n  execRunId?: string\n}\n\n/**\n * The run id of one attempt at a search cell. It is unique across candidates\n * and attempts, unlike a `${scenario}:${rep}` id, which every candidate that\n * ran the same scenario shares.\n */\nexport function searchCellRunId(search: Pick<RunSearchCoordinates, 'cellId' | 'attempt'>): string {\n  return `${search.cellId}:${search.attempt}`\n}\n\nexport interface RunJudgeMetadata {\n  model: string\n  promptVersion: string\n  /** [0,1] confidence the judge declared. Constant judge confidence\n   *  across many runs is a fallback signal (see `canary.ts`). */\n  confidence: number\n  /** True if the judge degraded to a fallback path (rules-only,\n   *  prior-call cache, etc.). The canary uses this to alert. */\n  fallback: boolean\n}\n\n/**\n * Per-judge / per-dimension breakdown for runs scored by an ensemble of\n * judges over a multi-dimensional rubric.\n *\n * The collapsed `outcome.searchScore` / `holdoutScore` carries the\n * composite the gate uses. The full breakdown belongs here so consumers\n * can answer \"which judge disagreed?\", \"which dimension dragged the\n * composite down?\", and \"did half the panel fail?\" without re-running.\n *\n * `perJudge[judgeId][dim]` is the canonical source; `perDimMean` and\n * `composite` are convenience projections — derivable but precomputed so\n * downstream IRR primitives (`interRaterReliability`,\n * `corpusInterRaterAgreement`) and reporters don't pay the same\n * aggregation twice.\n *\n * Fail-loud discipline: judges that errored out land in `failedJudges`\n * by id. A missing key in `perJudge` is ambiguous (silent zero vs not\n * run); the explicit list makes a partial-failure recorded as such.\n */\nexport interface JudgeScoresRecord {\n  /** Per-judge per-dimension scores. `{ \"kimi-k2.6\": { helpfulness: 0.8, clarity: 0.7 }, ... }`. */\n  perJudge: Record<string, Record<string, number>>\n  /** Per-dim mean across judges. Convenience — derivable from `perJudge`. */\n  perDimMean: Record<string, number>\n  /** Composite mean across successful judges. Mirrors the task score only\n   *  when `failedJudges` is empty. */\n  composite: number\n  /** Judges that errored or returned an unparseable verdict. Recorded\n   *  by id (e.g. `['glm-5.1']`) so a partial-failure case is explicit,\n   *  not inferred from missing keys in `perJudge`. */\n  failedJudges?: string[]\n  /** Free-form notes the judges emitted (joined across judges or\n   *  first-judge only — consumer's choice). */\n  notes?: string\n}\n\nexport interface RunOutcome {\n  /** Score on the search/optimization split. Optional for holdout-only and\n   *  execution-only records. */\n  searchScore?: number\n  /** Score on the held-out split. Optional for search-only and execution-only\n   *  records. When both scores are absent, the run is explicitly unlabeled. */\n  holdoutScore?: number\n  /** Bag of any other metric the run produced — judge dimensions,\n   *  pass/fail counters, latency stats, etc. Numeric only — keeps\n   *  reporters honest. */\n  raw: Record<string, number>\n  /** Per-judge / per-dim breakdown. Consumers writing ensemble\n   *  judgements populate this; substrate primitives like\n   *  `interRaterReliability` and `corpusInterRaterAgreement` accept\n   *  these records as input. Optional — single-judge or scalar-only\n   *  runs leave it unset. */\n  judgeScores?: JudgeScoresRecord\n  /** Authenticity / realness verdict — did the run build the REAL thing on the\n   *  intended infra, or fake it (see `./authenticity`)? Optional: only domains\n   *  with an authenticity config populate it. Carried in the corpus so the\n   *  flywheel / off-policy learning can optimize for real completion, not gamed\n   *  pass-rate. `score` is 0-1; `gated` is the anti-Goodhart flag — a gated run\n   *  must not count as a real success regardless of `score`. */\n  realness?: { score: number; gated: boolean; reason?: string }\n}\n\n/**\n * Mandatory paper-grade fields for a single evaluation run. Optional\n * fields are extension points; mandatory fields throw if missing.\n *\n * Hash discipline:\n *   - `promptHash` is the sha256 of the EFFECTIVE prompt sent to the\n *     model (after any steering bundle merge).\n *   - `configHash` is the sha256 of the effective run config (model,\n *     temperature, tools, judges, splits). The pair (promptHash,\n *     configHash) uniquely identifies an experiment cell.\n *\n * Model snapshot discipline:\n *   - successful rows MUST encode a snapshot version. Bare aliases like\n *     `claude-sonnet-4` or `gpt-4o` are banned — they remap silently.\n *     Use `claude-sonnet-4-6@2025-04-15` or `gpt-4o-2024-11-20`.\n *   - a failed, cancelled, incomplete, or otherwise unknown row may use\n *     `UNKNOWN_MODEL` when no served model was observed. This is an explicit\n *     absence marker, not a fabricated snapshot.\n */\nexport interface RunRecord {\n  /** UUID for the run. */\n  runId: string\n  /** Logical experiment grouping (a treatment vs a baseline within\n   *  the same sweep should share `experimentId`). */\n  experimentId: string\n  /** Stable identifier for the candidate (variant) being run. The\n   *  promotion gate compares two `candidateId`s on matched items. */\n  candidateId: string\n  /** RNG seed for the run. Always recorded — silent re-seeding is\n   *  the most common cause of non-reproducible numbers. */\n  seed: number\n  /** Model identifier WITH snapshot version. */\n  model: string\n  /** sha256 of the effective prompt (post-steering). */\n  promptHash: string\n  /** sha256 of the effective config. */\n  configHash: string\n  /** Git SHA the harness was run from. */\n  commitSha: string\n  /** End-to-end wall-clock duration in milliseconds. */\n  wallMs: number\n  /** Time spent queued before execution started, if known. */\n  queueMs?: number\n  /** Total USD cost, or null when the total is unknown. */\n  costUsd: number | null\n  /** Whether `costUsd` came from billing data or a price calculation, is only\n   *  proven down to a floor, or is unavailable. */\n  costProvenance: RunCostProvenance\n  /** Token usage breakdown. */\n  tokenUsage: RunTokenUsage\n  /** Root-run or process terminal result. Never inferred from a child span. */\n  terminalOutcome: RunTerminalOutcome\n  /** Root-run or process failure reason. Valid only for a failed, cancelled,\n   *  or incomplete terminal result; never populated from a child span. */\n  terminalFailureReason?: string\n  /** Judge-side metadata, if a judge was used. */\n  judgeMetadata?: RunJudgeMetadata\n  /** Per-split scores + raw bag. */\n  outcome: RunOutcome\n  /** Canonical task-failure class drawn from the shared\n   *  `FAILURE_CLASSES` taxonomy. Producers set it only from task-result\n   *  evidence. Execution errors belong in\n   *  `outcome.raw.execution_error_count`. */\n  failureClass?: FailureClass\n  /** Free-form task-failure detail scoped under a non-success\n   *  `failureClass`. It is invalid without that class. */\n  failureMode?: string\n  /** Which split this run was drawn from. */\n  splitTag: RunSplitTag\n  /**\n   * Stable scenario identifier the run observed or was scored against.\n   * Comparison primitives match this identity rather than input order.\n   */\n  scenarioId: string\n  /**\n   * Canonical identity for the agent profile cell that produced this row:\n   * profile artifact hash plus optional harness/model/prompt/reporting\n   * dimensions. Use `agentProfile.cellId` to group persona sweeps and\n   * longitudinal reports by the complete source profile, not by a loose\n   * candidate label or opaque config hash.\n   */\n  agentProfile?: AgentProfileCell\n  /** The search cell this run settled. When present, `runId` is\n   *  `searchCellRunId(search)`. */\n  search?: RunSearchCoordinates\n  /** The run's trace and execution tree. Absent means the producer did not\n   *  record where they are. */\n  traceRef?: RunTraceRef\n}\n\n/**\n * Canonical task-result classification.\n *\n * A producer may omit classification, record explicit success, or attach\n * domain-specific detail to a non-success class. Detail can never stand alone.\n * Execution errors belong in `outcome.raw.execution_error_count`.\n */\nexport type RunTaskFailure =\n  | { failureClass?: undefined; failureMode?: undefined }\n  | { failureClass: 'success'; failureMode?: undefined }\n  | {\n      failureClass: Exclude<FailureClass, 'success'>\n      failureMode?: string\n    }\n\n/**\n * Return task quality, preferring held-out evidence when both scores exist.\n *\n * RAW: no realness protection is applied. Built on `observedScore` rather\n * than repeating the split derivation, so only `rollout/reward.ts` reads the\n * raw fields. Anything that becomes training data must use `trainingScore` or\n * `trainingReward` instead.\n */\nexport function runTaskScore(record: RunRecord): number | undefined {\n  const score = observedScore(record)\n  return typeof score === 'number' && Number.isFinite(score) ? score : undefined\n}\n\n// ── Validation ───────────────────────────────────────────────────────\n\nconst MANDATORY_TOP_LEVEL = [\n  'runId',\n  'experimentId',\n  'candidateId',\n  'seed',\n  'model',\n  'promptHash',\n  'configHash',\n  'commitSha',\n  'wallMs',\n  'costUsd',\n  'costProvenance',\n  'tokenUsage',\n  'terminalOutcome',\n  'outcome',\n  'splitTag',\n  'scenarioId',\n] as const\n\nconst SPLIT_TAGS: ReadonlyArray<RunSplitTag> = ['search', 'dev', 'holdout']\nconst TERMINAL_OUTCOMES: ReadonlyArray<RunTerminalOutcome> = [\n  'succeeded',\n  'failed',\n  'cancelled',\n  'incomplete',\n  'unknown',\n]\n\nexport class RunRecordValidationError extends ValidationError {\n  readonly path: string\n  constructor(message: string, path = '') {\n    super(path ? `${message} (at ${path})` : message)\n    this.path = path\n  }\n}\n\n/**\n * Strict validator. Throws `RunRecordValidationError` on the first\n * missing or wrongly-typed field. Returns the input cast to\n * `RunRecord` on success — the validator does not coerce.\n */\nexport function validateRunRecord(input: unknown): RunRecord {\n  if (input === null || typeof input !== 'object') {\n    throw new RunRecordValidationError('expected object')\n  }\n  const obj = input as Record<string, unknown>\n\n  for (const key of MANDATORY_TOP_LEVEL) {\n    if (!(key in obj)) {\n      throw new RunRecordValidationError(`missing mandatory field \"${key}\"`)\n    }\n  }\n\n  expectString(obj.runId, 'runId')\n  expectString(obj.experimentId, 'experimentId')\n  expectString(obj.candidateId, 'candidateId')\n  expectFiniteNumber(obj.seed, 'seed')\n  expectString(obj.model, 'model')\n  expectString(obj.promptHash, 'promptHash')\n  expectString(obj.configHash, 'configHash')\n  expectString(obj.commitSha, 'commitSha')\n  expectNonNegativeNumber(obj.wallMs, 'wallMs')\n  if (obj.queueMs !== undefined) expectNonNegativeNumber(obj.queueMs, 'queueMs')\n  validateCost(obj.costUsd, obj.costProvenance)\n\n  // Snapshot discipline: successful rows require a served model snapshot.\n  // Non-success rows may carry the explicit absence marker when execution\n  // stopped before a model identity was observed.\n  if (\n    !modelHasSnapshot(obj.model as string) &&\n    !(obj.model === UNKNOWN_MODEL && obj.terminalOutcome !== 'succeeded')\n  ) {\n    throw new RunRecordValidationError(\n      `model \"${obj.model}\" lacks a snapshot version (use 'name@YYYY-MM-DD' or 'name-YYYYMMDD', or '${UNKNOWN_MODEL}' for a non-success row without a served model)`,\n      'model',\n    )\n  }\n\n  // Token usage.\n  const tu = obj.tokenUsage\n  if (tu === null || typeof tu !== 'object') {\n    throw new RunRecordValidationError('tokenUsage must be an object', 'tokenUsage')\n  }\n  const tuRec = tu as Record<string, unknown>\n  expectNonNegativeNumber(tuRec.input, 'tokenUsage.input')\n  expectNonNegativeNumber(tuRec.output, 'tokenUsage.output')\n  if (tuRec.tokensKnown !== undefined && tuRec.tokensKnown !== false) {\n    throw new RunRecordValidationError(\n      'tokensKnown must be false when present; omit it when token usage is complete',\n      'tokenUsage.tokensKnown',\n    )\n  }\n  if (tuRec.reasoning !== undefined) {\n    expectNonNegativeNumber(tuRec.reasoning, 'tokenUsage.reasoning')\n    if ((tuRec.reasoning as number) > (tuRec.output as number)) {\n      throw new RunRecordValidationError(\n        'reasoning tokens must be a subset of output tokens',\n        'tokenUsage.reasoning',\n      )\n    }\n  }\n  if (tuRec.cached !== undefined) expectNonNegativeNumber(tuRec.cached, 'tokenUsage.cached')\n  if (tuRec.cacheWrite !== undefined) {\n    expectNonNegativeNumber(tuRec.cacheWrite, 'tokenUsage.cacheWrite')\n  }\n\n  // Judge metadata, optional.\n  if (obj.judgeMetadata !== undefined) {\n    const jm = obj.judgeMetadata\n    if (jm === null || typeof jm !== 'object') {\n      throw new RunRecordValidationError('judgeMetadata must be an object', 'judgeMetadata')\n    }\n    const jmRec = jm as Record<string, unknown>\n    expectString(jmRec.model, 'judgeMetadata.model')\n    expectString(jmRec.promptVersion, 'judgeMetadata.promptVersion')\n    expectFiniteNumber(jmRec.confidence, 'judgeMetadata.confidence')\n    if (typeof jmRec.fallback !== 'boolean') {\n      throw new RunRecordValidationError(\n        'judgeMetadata.fallback must be boolean',\n        'judgeMetadata.fallback',\n      )\n    }\n  }\n\n  // Outcome.\n  const out = obj.outcome\n  if (out === null || typeof out !== 'object') {\n    throw new RunRecordValidationError('outcome must be an object', 'outcome')\n  }\n  const outRec = out as Record<string, unknown>\n  if (outRec.searchScore !== undefined)\n    expectFiniteNumber(outRec.searchScore, 'outcome.searchScore')\n  if (outRec.holdoutScore !== undefined)\n    expectFiniteNumber(outRec.holdoutScore, 'outcome.holdoutScore')\n  const raw = outRec.raw\n  if (raw === null || typeof raw !== 'object') {\n    throw new RunRecordValidationError('outcome.raw must be an object', 'outcome.raw')\n  }\n  for (const [k, v] of Object.entries(raw as Record<string, unknown>)) {\n    expectFiniteNumber(v, `outcome.raw.${k}`)\n  }\n  // Realness verdict, optional.\n  if (outRec.realness !== undefined) {\n    const r = outRec.realness\n    if (r === null || typeof r !== 'object') {\n      throw new RunRecordValidationError('outcome.realness must be an object', 'outcome.realness')\n    }\n    const rr = r as Record<string, unknown>\n    expectFiniteNumber(rr.score, 'outcome.realness.score')\n    if (typeof rr.gated !== 'boolean') {\n      throw new RunRecordValidationError(\n        'outcome.realness.gated must be a boolean',\n        'outcome.realness.gated',\n      )\n    }\n  }\n\n  // Per-judge / per-dim breakdown, optional.\n  if (outRec.judgeScores !== undefined) {\n    validateJudgeScores(outRec.judgeScores, 'outcome.judgeScores')\n  }\n\n  // Failure mode optional.\n  if (\n    obj.failureClass !== undefined &&\n    (typeof obj.failureClass !== 'string' ||\n      !FAILURE_CLASSES.includes(obj.failureClass as FailureClass))\n  ) {\n    throw new RunRecordValidationError(\n      `failureClass must be one of ${FAILURE_CLASSES.join(', ')}`,\n      'failureClass',\n    )\n  }\n  if (obj.failureMode !== undefined) {\n    expectString(obj.failureMode, 'failureMode')\n    if (obj.failureClass === undefined || obj.failureClass === 'success') {\n      throw new RunRecordValidationError(\n        'failureMode requires a non-success failureClass',\n        'failureMode',\n      )\n    }\n  }\n\n  if (\n    typeof obj.terminalOutcome !== 'string' ||\n    !TERMINAL_OUTCOMES.includes(obj.terminalOutcome as RunTerminalOutcome)\n  ) {\n    throw new RunRecordValidationError(\n      `terminalOutcome must be one of ${TERMINAL_OUTCOMES.join(', ')}`,\n      'terminalOutcome',\n    )\n  }\n  if (obj.terminalFailureReason !== undefined) {\n    expectString(obj.terminalFailureReason, 'terminalFailureReason')\n    if (\n      obj.terminalOutcome !== 'failed' &&\n      obj.terminalOutcome !== 'cancelled' &&\n      obj.terminalOutcome !== 'incomplete'\n    ) {\n      throw new RunRecordValidationError(\n        'terminalFailureReason requires terminalOutcome failed, cancelled, or incomplete',\n        'terminalFailureReason',\n      )\n    }\n  }\n\n  if (obj.agentProfile !== undefined) {\n    try {\n      const profile = validateAgentProfileCell(obj.agentProfile)\n      if (profile.model !== undefined && profile.model !== obj.model) {\n        throw new RunRecordValidationError(\n          `agentProfile.model \"${profile.model}\" does not match model \"${obj.model}\"`,\n          'agentProfile.model',\n        )\n      }\n      if (profile.promptHash !== undefined && profile.promptHash !== obj.promptHash) {\n        throw new RunRecordValidationError(\n          `agentProfile.promptHash \"${profile.promptHash}\" does not match promptHash \"${obj.promptHash}\"`,\n          'agentProfile.promptHash',\n        )\n      }\n    } catch (error) {\n      if (error instanceof RunRecordValidationError) throw error\n      if (error instanceof Error) {\n        throw new RunRecordValidationError(error.message, 'agentProfile')\n      }\n      throw error\n    }\n  }\n\n  expectString(obj.scenarioId, 'scenarioId')\n\n  if (obj.search !== undefined) validateSearchCoordinates(obj.search, obj.runId as string)\n  if (obj.traceRef !== undefined) validateTraceRef(obj.traceRef)\n\n  // Split tag.\n  if (typeof obj.splitTag !== 'string' || !SPLIT_TAGS.includes(obj.splitTag as RunSplitTag)) {\n    throw new RunRecordValidationError(\n      `splitTag must be one of ${SPLIT_TAGS.join(', ')}, got ${String(obj.splitTag)}`,\n      'splitTag',\n    )\n  }\n\n  return input as RunRecord\n}\n\nfunction validateCost(costUsd: unknown, provenance: unknown): void {\n  if (provenance === null || typeof provenance !== 'object') {\n    throw new RunRecordValidationError('costProvenance must be an object', 'costProvenance')\n  }\n  const value = provenance as Record<string, unknown>\n  if (\n    value.kind !== 'observed' &&\n    value.kind !== 'estimated' &&\n    value.kind !== 'lower-bound' &&\n    value.kind !== 'uncaptured'\n  ) {\n    throw new RunRecordValidationError(\n      'costProvenance.kind must be observed, estimated, lower-bound, or uncaptured',\n      'costProvenance.kind',\n    )\n  }\n  if (value.kind === 'lower-bound') {\n    if (value.usd !== null) {\n      throw new RunRecordValidationError(\n        'lower-bound costProvenance.usd must be null; the floor is knownLowerBoundUsd',\n        'costProvenance.usd',\n      )\n    }\n    if (costUsd !== null) {\n      throw new RunRecordValidationError(\n        'lower-bound cost requires costUsd to be null; a floor is not a total',\n        'costUsd',\n      )\n    }\n    expectFiniteNumber(value.knownLowerBoundUsd, 'costProvenance.knownLowerBoundUsd')\n    if ((value.knownLowerBoundUsd as number) <= 0) {\n      throw new RunRecordValidationError(\n        \"a lower bound must be positive; write a $0 floor as { kind: 'uncaptured', usd: null }\",\n        'costProvenance.knownLowerBoundUsd',\n      )\n    }\n    return\n  }\n  // A record must never read as a total it cannot support, so an uncaptured\n  // cost carries no number at all. A matrix `CellResult` keeps its known\n  // subtotal instead, because a cost ceiling must charge the part it can see;\n  // converting one to the other drops that subtotal.\n  if (value.kind === 'uncaptured') {\n    if (value.usd !== null) {\n      throw new RunRecordValidationError(\n        'uncaptured costProvenance.usd must be null',\n        'costProvenance.usd',\n      )\n    }\n    if (costUsd !== null) {\n      throw new RunRecordValidationError('uncaptured cost requires costUsd to be null', 'costUsd')\n    }\n    return\n  }\n  expectNonNegativeNumber(costUsd, 'costUsd')\n  expectNonNegativeNumber(value.usd, 'costProvenance.usd')\n  if (value.usd !== costUsd) {\n    throw new RunRecordValidationError(\n      'costProvenance.usd must equal costUsd',\n      'costProvenance.usd',\n    )\n  }\n}\n\nfunction validateSearchCoordinates(value: unknown, runId: string): void {\n  if (value === null || typeof value !== 'object') {\n    throw new RunRecordValidationError('search must be an object', 'search')\n  }\n  const search = value as Record<string, unknown>\n  expectString(search.searchId, 'search.searchId')\n  expectString(search.nodeId, 'search.nodeId')\n  expectString(search.cellId, 'search.cellId')\n  if (!Number.isSafeInteger(search.attempt) || (search.attempt as number) < 1) {\n    throw new RunRecordValidationError('expected an integer from 1', 'search.attempt')\n  }\n  const expected = searchCellRunId(search as unknown as RunSearchCoordinates)\n  if (runId !== expected) {\n    throw new RunRecordValidationError(\n      `runId \"${runId}\" must be \"${expected}\", the search cell and attempt it settled`,\n      'runId',\n    )\n  }\n}\n\nfunction validateTraceRef(value: unknown): void {\n  if (value === null || typeof value !== 'object') {\n    throw new RunRecordValidationError('traceRef must be an object', 'traceRef')\n  }\n  const ref = value as Record<string, unknown>\n  expectString(ref.traceId, 'traceRef.traceId')\n  if (ref.execRunId !== undefined) expectString(ref.execRunId, 'traceRef.execRunId')\n}\n\n/** Boolean validator — convenience for filtering arrays. */\nexport function isRunRecord(input: unknown): input is RunRecord {\n  try {\n    validateRunRecord(input)\n    return true\n  } catch {\n    return false\n  }\n}\n\n/** Non-throwing validator — returns a discriminated union. */\nexport function parseRunRecordSafe(\n  input: unknown,\n): { ok: true; value: RunRecord } | { ok: false; error: RunRecordValidationError } {\n  try {\n    return { ok: true, value: validateRunRecord(input) }\n  } catch (e) {\n    if (e instanceof RunRecordValidationError) return { ok: false, error: e }\n    throw e\n  }\n}\n\n// ── Internals ────────────────────────────────────────────────────────\n\nfunction expectString(value: unknown, path: string): void {\n  if (typeof value !== 'string' || value.length === 0) {\n    throw new RunRecordValidationError(`expected non-empty string`, path)\n  }\n}\n\nfunction expectFiniteNumber(value: unknown, path: string): void {\n  if (typeof value !== 'number' || !Number.isFinite(value)) {\n    throw new RunRecordValidationError(`expected finite number`, path)\n  }\n}\n\nfunction expectNonNegativeNumber(value: unknown, path: string): void {\n  expectFiniteNumber(value, path)\n  if ((value as number) < 0) {\n    throw new RunRecordValidationError('expected non-negative number', path)\n  }\n}\n\nfunction validateJudgeScores(value: unknown, path: string): void {\n  if (value === null || typeof value !== 'object') {\n    throw new RunRecordValidationError('judgeScores must be an object', path)\n  }\n  const rec = value as Record<string, unknown>\n\n  const perJudge = rec.perJudge\n  if (perJudge === null || typeof perJudge !== 'object') {\n    throw new RunRecordValidationError('perJudge must be an object', `${path}.perJudge`)\n  }\n  for (const [judgeId, dims] of Object.entries(perJudge as Record<string, unknown>)) {\n    if (dims === null || typeof dims !== 'object') {\n      throw new RunRecordValidationError(\n        'per-judge entry must be an object of dimension scores',\n        `${path}.perJudge.${judgeId}`,\n      )\n    }\n    for (const [dim, score] of Object.entries(dims as Record<string, unknown>)) {\n      expectFiniteNumber(score, `${path}.perJudge.${judgeId}.${dim}`)\n    }\n  }\n\n  const perDimMean = rec.perDimMean\n  if (perDimMean === null || typeof perDimMean !== 'object') {\n    throw new RunRecordValidationError('perDimMean must be an object', `${path}.perDimMean`)\n  }\n  for (const [dim, mean] of Object.entries(perDimMean as Record<string, unknown>)) {\n    expectFiniteNumber(mean, `${path}.perDimMean.${dim}`)\n  }\n\n  expectFiniteNumber(rec.composite, `${path}.composite`)\n\n  if (rec.failedJudges !== undefined) {\n    if (!Array.isArray(rec.failedJudges)) {\n      throw new RunRecordValidationError(\n        'failedJudges must be an array of strings',\n        `${path}.failedJudges`,\n      )\n    }\n    for (let i = 0; i < rec.failedJudges.length; i++) {\n      const id = rec.failedJudges[i]\n      if (typeof id !== 'string' || id.length === 0) {\n        throw new RunRecordValidationError(\n          'failedJudges entry must be a non-empty string',\n          `${path}.failedJudges[${i}]`,\n        )\n      }\n    }\n  }\n\n  if (rec.notes !== undefined && typeof rec.notes !== 'string') {\n    throw new RunRecordValidationError('notes must be a string', `${path}.notes`)\n  }\n}\n\n/**\n * Snapshot check for provider model identifiers. Accepts ISO and compact\n * dates, Router's `-MMDD` snapshots, one opaque `@token`, and Vertex-style\n * `:date-token` suffixes. Routing selectors such as `@preset/name` are not\n * immutable model identities.\n */\nexport function modelHasSnapshot(model: string): boolean {\n  if (model.length === 0 || model.trim() !== model) return false\n\n  const opaqueAt = model.lastIndexOf('@')\n  if (opaqueAt > 0) {\n    const base = model.slice(0, opaqueAt)\n    const token = model.slice(opaqueAt + 1)\n    if (!base.includes('@') && /^[A-Za-z0-9](?:[A-Za-z0-9._-]*[A-Za-z0-9])?$/u.test(token)) {\n      return true\n    }\n  }\n\n  const isoDate = model.match(/-(\\d{4})-(\\d{2})-(\\d{2})$/u)\n  if (isoDate && validSnapshotDate(isoDate[1]!, isoDate[2]!, isoDate[3]!)) return true\n\n  const compactDate = model.match(/-(\\d{4})(\\d{2})(\\d{2})$/u)\n  if (compactDate && validSnapshotDate(compactDate[1]!, compactDate[2]!, compactDate[3]!)) {\n    return true\n  }\n\n  const routerDate = model.match(/-(\\d{2})(\\d{2})$/u)\n  if (routerDate && validSnapshotDate(undefined, routerDate[1]!, routerDate[2]!)) return true\n\n  return /:date-[A-Za-z0-9](?:[A-Za-z0-9._-]*[A-Za-z0-9])?$/u.test(model)\n}\n\nfunction validSnapshotDate(year: string | undefined, month: string, day: string): boolean {\n  const monthNumber = Number(month)\n  const dayNumber = Number(day)\n  if (!Number.isInteger(monthNumber) || monthNumber < 1 || monthNumber > 12) return false\n\n  const yearNumber = year === undefined ? undefined : Number(year)\n  const leapYear =\n    yearNumber === undefined ||\n    (yearNumber % 4 === 0 && (yearNumber % 100 !== 0 || yearNumber % 400 === 0))\n  const daysInMonth = [31, leapYear ? 29 : 28, 31, 30, 31, 30, 31, 31, 30, 31, 30, 31]\n  return Number.isInteger(dayNumber) && dayNumber >= 1 && dayNumber <= daysInMonth[monthNumber - 1]!\n}\n"],"mappings":";;;;;;AAiDA,MAAa,gBAAgB;;;;;;AA8D7B,SAAgB,gBAAgB,QAAkE;CAChG,OAAO,GAAG,OAAO,OAAO,GAAG,OAAO;AACpC;;;;;;;;;AA4LA,SAAgB,aAAa,QAAuC;CAClE,MAAM,QAAQ,cAAc,MAAM;CAClC,OAAO,OAAO,UAAU,YAAY,OAAO,SAAS,KAAK,IAAI,QAAQ,KAAA;AACvE;AAIA,MAAM,sBAAsB;CAC1B;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;AACF;AAEA,MAAM,aAAyC;CAAC;CAAU;CAAO;AAAS;AAC1E,MAAM,oBAAuD;CAC3D;CACA;CACA;CACA;CACA;AACF;AAEA,IAAa,2BAAb,cAA8C,gBAAgB;CAC5D;CACA,YAAY,SAAiB,OAAO,IAAI;EACtC,MAAM,OAAO,GAAG,QAAQ,OAAO,KAAK,KAAK,OAAO;EAChD,KAAK,OAAO;CACd;AACF;;;;;;AAOA,SAAgB,kBAAkB,OAA2B;CAC3D,IAAI,UAAU,QAAQ,OAAO,UAAU,UACrC,MAAM,IAAI,yBAAyB,iBAAiB;CAEtD,MAAM,MAAM;CAEZ,KAAK,MAAM,OAAO,qBAChB,IAAI,EAAE,OAAO,MACX,MAAM,IAAI,yBAAyB,4BAA4B,IAAI,EAAE;CAIzE,aAAa,IAAI,OAAO,OAAO;CAC/B,aAAa,IAAI,cAAc,cAAc;CAC7C,aAAa,IAAI,aAAa,aAAa;CAC3C,mBAAmB,IAAI,MAAM,MAAM;CACnC,aAAa,IAAI,OAAO,OAAO;CAC/B,aAAa,IAAI,YAAY,YAAY;CACzC,aAAa,IAAI,YAAY,YAAY;CACzC,aAAa,IAAI,WAAW,WAAW;CACvC,wBAAwB,IAAI,QAAQ,QAAQ;CAC5C,IAAI,IAAI,YAAY,KAAA,GAAW,wBAAwB,IAAI,SAAS,SAAS;CAC7E,aAAa,IAAI,SAAS,IAAI,cAAc;CAK5C,IACE,CAAC,iBAAiB,IAAI,KAAe,KACrC,EAAE,IAAI,UAAA,aAA2B,IAAI,oBAAoB,cAEzD,MAAM,IAAI,yBACR,UAAU,IAAI,MAAM,4EAA4E,cAAc,kDAC9G,OACF;CAIF,MAAM,KAAK,IAAI;CACf,IAAI,OAAO,QAAQ,OAAO,OAAO,UAC/B,MAAM,IAAI,yBAAyB,gCAAgC,YAAY;CAEjF,MAAM,QAAQ;CACd,wBAAwB,MAAM,OAAO,kBAAkB;CACvD,wBAAwB,MAAM,QAAQ,mBAAmB;CACzD,IAAI,MAAM,gBAAgB,KAAA,KAAa,MAAM,gBAAgB,OAC3D,MAAM,IAAI,yBACR,gFACA,wBACF;CAEF,IAAI,MAAM,cAAc,KAAA,GAAW;EACjC,wBAAwB,MAAM,WAAW,sBAAsB;EAC/D,IAAK,MAAM,YAAwB,MAAM,QACvC,MAAM,IAAI,yBACR,sDACA,sBACF;CAEJ;CACA,IAAI,MAAM,WAAW,KAAA,GAAW,wBAAwB,MAAM,QAAQ,mBAAmB;CACzF,IAAI,MAAM,eAAe,KAAA,GACvB,wBAAwB,MAAM,YAAY,uBAAuB;CAInE,IAAI,IAAI,kBAAkB,KAAA,GAAW;EACnC,MAAM,KAAK,IAAI;EACf,IAAI,OAAO,QAAQ,OAAO,OAAO,UAC/B,MAAM,IAAI,yBAAyB,mCAAmC,eAAe;EAEvF,MAAM,QAAQ;EACd,aAAa,MAAM,OAAO,qBAAqB;EAC/C,aAAa,MAAM,eAAe,6BAA6B;EAC/D,mBAAmB,MAAM,YAAY,0BAA0B;EAC/D,IAAI,OAAO,MAAM,aAAa,WAC5B,MAAM,IAAI,yBACR,0CACA,wBACF;CAEJ;CAGA,MAAM,MAAM,IAAI;CAChB,IAAI,QAAQ,QAAQ,OAAO,QAAQ,UACjC,MAAM,IAAI,yBAAyB,6BAA6B,SAAS;CAE3E,MAAM,SAAS;CACf,IAAI,OAAO,gBAAgB,KAAA,GACzB,mBAAmB,OAAO,aAAa,qBAAqB;CAC9D,IAAI,OAAO,iBAAiB,KAAA,GAC1B,mBAAmB,OAAO,cAAc,sBAAsB;CAChE,MAAM,MAAM,OAAO;CACnB,IAAI,QAAQ,QAAQ,OAAO,QAAQ,UACjC,MAAM,IAAI,yBAAyB,iCAAiC,aAAa;CAEnF,KAAK,MAAM,CAAC,GAAG,MAAM,OAAO,QAAQ,GAA8B,GAChE,mBAAmB,GAAG,eAAe,GAAG;CAG1C,IAAI,OAAO,aAAa,KAAA,GAAW;EACjC,MAAM,IAAI,OAAO;EACjB,IAAI,MAAM,QAAQ,OAAO,MAAM,UAC7B,MAAM,IAAI,yBAAyB,sCAAsC,kBAAkB;EAE7F,MAAM,KAAK;EACX,mBAAmB,GAAG,OAAO,wBAAwB;EACrD,IAAI,OAAO,GAAG,UAAU,WACtB,MAAM,IAAI,yBACR,4CACA,wBACF;CAEJ;CAGA,IAAI,OAAO,gBAAgB,KAAA,GACzB,oBAAoB,OAAO,aAAa,qBAAqB;CAI/D,IACE,IAAI,iBAAiB,KAAA,MACpB,OAAO,IAAI,iBAAiB,YAC3B,CAAC,gBAAgB,SAAS,IAAI,YAA4B,IAE5D,MAAM,IAAI,yBACR,+BAA+B,gBAAgB,KAAK,IAAI,KACxD,cACF;CAEF,IAAI,IAAI,gBAAgB,KAAA,GAAW;EACjC,aAAa,IAAI,aAAa,aAAa;EAC3C,IAAI,IAAI,iBAAiB,KAAA,KAAa,IAAI,iBAAiB,WACzD,MAAM,IAAI,yBACR,mDACA,aACF;CAEJ;CAEA,IACE,OAAO,IAAI,oBAAoB,YAC/B,CAAC,kBAAkB,SAAS,IAAI,eAAqC,GAErE,MAAM,IAAI,yBACR,kCAAkC,kBAAkB,KAAK,IAAI,KAC7D,iBACF;CAEF,IAAI,IAAI,0BAA0B,KAAA,GAAW;EAC3C,aAAa,IAAI,uBAAuB,uBAAuB;EAC/D,IACE,IAAI,oBAAoB,YACxB,IAAI,oBAAoB,eACxB,IAAI,oBAAoB,cAExB,MAAM,IAAI,yBACR,mFACA,uBACF;CAEJ;CAEA,IAAI,IAAI,iBAAiB,KAAA,GACvB,IAAI;EACF,MAAM,UAAU,yBAAyB,IAAI,YAAY;EACzD,IAAI,QAAQ,UAAU,KAAA,KAAa,QAAQ,UAAU,IAAI,OACvD,MAAM,IAAI,yBACR,uBAAuB,QAAQ,MAAM,0BAA0B,IAAI,MAAM,IACzE,oBACF;EAEF,IAAI,QAAQ,eAAe,KAAA,KAAa,QAAQ,eAAe,IAAI,YACjE,MAAM,IAAI,yBACR,4BAA4B,QAAQ,WAAW,+BAA+B,IAAI,WAAW,IAC7F,yBACF;CAEJ,SAAS,OAAO;EACd,IAAI,iBAAiB,0BAA0B,MAAM;EACrD,IAAI,iBAAiB,OACnB,MAAM,IAAI,yBAAyB,MAAM,SAAS,cAAc;EAElE,MAAM;CACR;CAGF,aAAa,IAAI,YAAY,YAAY;CAEzC,IAAI,IAAI,WAAW,KAAA,GAAW,0BAA0B,IAAI,QAAQ,IAAI,KAAe;CACvF,IAAI,IAAI,aAAa,KAAA,GAAW,iBAAiB,IAAI,QAAQ;CAG7D,IAAI,OAAO,IAAI,aAAa,YAAY,CAAC,WAAW,SAAS,IAAI,QAAuB,GACtF,MAAM,IAAI,yBACR,2BAA2B,WAAW,KAAK,IAAI,EAAE,QAAQ,OAAO,IAAI,QAAQ,KAC5E,UACF;CAGF,OAAO;AACT;AAEA,SAAS,aAAa,SAAkB,YAA2B;CACjE,IAAI,eAAe,QAAQ,OAAO,eAAe,UAC/C,MAAM,IAAI,yBAAyB,oCAAoC,gBAAgB;CAEzF,MAAM,QAAQ;CACd,IACE,MAAM,SAAS,cACf,MAAM,SAAS,eACf,MAAM,SAAS,iBACf,MAAM,SAAS,cAEf,MAAM,IAAI,yBACR,+EACA,qBACF;CAEF,IAAI,MAAM,SAAS,eAAe;EAChC,IAAI,MAAM,QAAQ,MAChB,MAAM,IAAI,yBACR,gFACA,oBACF;EAEF,IAAI,YAAY,MACd,MAAM,IAAI,yBACR,wEACA,SACF;EAEF,mBAAmB,MAAM,oBAAoB,mCAAmC;EAChF,IAAK,MAAM,sBAAiC,GAC1C,MAAM,IAAI,yBACR,yFACA,mCACF;EAEF;CACF;CAKA,IAAI,MAAM,SAAS,cAAc;EAC/B,IAAI,MAAM,QAAQ,MAChB,MAAM,IAAI,yBACR,8CACA,oBACF;EAEF,IAAI,YAAY,MACd,MAAM,IAAI,yBAAyB,+CAA+C,SAAS;EAE7F;CACF;CACA,wBAAwB,SAAS,SAAS;CAC1C,wBAAwB,MAAM,KAAK,oBAAoB;CACvD,IAAI,MAAM,QAAQ,SAChB,MAAM,IAAI,yBACR,yCACA,oBACF;AAEJ;AAEA,SAAS,0BAA0B,OAAgB,OAAqB;CACtE,IAAI,UAAU,QAAQ,OAAO,UAAU,UACrC,MAAM,IAAI,yBAAyB,4BAA4B,QAAQ;CAEzE,MAAM,SAAS;CACf,aAAa,OAAO,UAAU,iBAAiB;CAC/C,aAAa,OAAO,QAAQ,eAAe;CAC3C,aAAa,OAAO,QAAQ,eAAe;CAC3C,IAAI,CAAC,OAAO,cAAc,OAAO,OAAO,KAAM,OAAO,UAAqB,GACxE,MAAM,IAAI,yBAAyB,8BAA8B,gBAAgB;CAEnF,MAAM,WAAW,gBAAgB,MAAyC;CAC1E,IAAI,UAAU,UACZ,MAAM,IAAI,yBACR,UAAU,MAAM,aAAa,SAAS,4CACtC,OACF;AAEJ;AAEA,SAAS,iBAAiB,OAAsB;CAC9C,IAAI,UAAU,QAAQ,OAAO,UAAU,UACrC,MAAM,IAAI,yBAAyB,8BAA8B,UAAU;CAE7E,MAAM,MAAM;CACZ,aAAa,IAAI,SAAS,kBAAkB;CAC5C,IAAI,IAAI,cAAc,KAAA,GAAW,aAAa,IAAI,WAAW,oBAAoB;AACnF;;AAGA,SAAgB,YAAY,OAAoC;CAC9D,IAAI;EACF,kBAAkB,KAAK;EACvB,OAAO;CACT,QAAQ;EACN,OAAO;CACT;AACF;;AAGA,SAAgB,mBACd,OACiF;CACjF,IAAI;EACF,OAAO;GAAE,IAAI;GAAM,OAAO,kBAAkB,KAAK;EAAE;CACrD,SAAS,GAAG;EACV,IAAI,aAAa,0BAA0B,OAAO;GAAE,IAAI;GAAO,OAAO;EAAE;EACxE,MAAM;CACR;AACF;AAIA,SAAS,aAAa,OAAgB,MAAoB;CACxD,IAAI,OAAO,UAAU,YAAY,MAAM,WAAW,GAChD,MAAM,IAAI,yBAAyB,6BAA6B,IAAI;AAExE;AAEA,SAAS,mBAAmB,OAAgB,MAAoB;CAC9D,IAAI,OAAO,UAAU,YAAY,CAAC,OAAO,SAAS,KAAK,GACrD,MAAM,IAAI,yBAAyB,0BAA0B,IAAI;AAErE;AAEA,SAAS,wBAAwB,OAAgB,MAAoB;CACnE,mBAAmB,OAAO,IAAI;CAC9B,IAAK,QAAmB,GACtB,MAAM,IAAI,yBAAyB,gCAAgC,IAAI;AAE3E;AAEA,SAAS,oBAAoB,OAAgB,MAAoB;CAC/D,IAAI,UAAU,QAAQ,OAAO,UAAU,UACrC,MAAM,IAAI,yBAAyB,iCAAiC,IAAI;CAE1E,MAAM,MAAM;CAEZ,MAAM,WAAW,IAAI;CACrB,IAAI,aAAa,QAAQ,OAAO,aAAa,UAC3C,MAAM,IAAI,yBAAyB,8BAA8B,GAAG,KAAK,UAAU;CAErF,KAAK,MAAM,CAAC,SAAS,SAAS,OAAO,QAAQ,QAAmC,GAAG;EACjF,IAAI,SAAS,QAAQ,OAAO,SAAS,UACnC,MAAM,IAAI,yBACR,yDACA,GAAG,KAAK,YAAY,SACtB;EAEF,KAAK,MAAM,CAAC,KAAK,UAAU,OAAO,QAAQ,IAA+B,GACvE,mBAAmB,OAAO,GAAG,KAAK,YAAY,QAAQ,GAAG,KAAK;CAElE;CAEA,MAAM,aAAa,IAAI;CACvB,IAAI,eAAe,QAAQ,OAAO,eAAe,UAC/C,MAAM,IAAI,yBAAyB,gCAAgC,GAAG,KAAK,YAAY;CAEzF,KAAK,MAAM,CAAC,KAAK,SAAS,OAAO,QAAQ,UAAqC,GAC5E,mBAAmB,MAAM,GAAG,KAAK,cAAc,KAAK;CAGtD,mBAAmB,IAAI,WAAW,GAAG,KAAK,WAAW;CAErD,IAAI,IAAI,iBAAiB,KAAA,GAAW;EAClC,IAAI,CAAC,MAAM,QAAQ,IAAI,YAAY,GACjC,MAAM,IAAI,yBACR,4CACA,GAAG,KAAK,cACV;EAEF,KAAK,IAAI,IAAI,GAAG,IAAI,IAAI,aAAa,QAAQ,KAAK;GAChD,MAAM,KAAK,IAAI,aAAa;GAC5B,IAAI,OAAO,OAAO,YAAY,GAAG,WAAW,GAC1C,MAAM,IAAI,yBACR,iDACA,GAAG,KAAK,gBAAgB,EAAE,EAC5B;EAEJ;CACF;CAEA,IAAI,IAAI,UAAU,KAAA,KAAa,OAAO,IAAI,UAAU,UAClD,MAAM,IAAI,yBAAyB,0BAA0B,GAAG,KAAK,OAAO;AAEhF;;;;;;;AAQA,SAAgB,iBAAiB,OAAwB;CACvD,IAAI,MAAM,WAAW,KAAK,MAAM,KAAK,MAAM,OAAO,OAAO;CAEzD,MAAM,WAAW,MAAM,YAAY,GAAG;CACtC,IAAI,WAAW,GAAG;EAChB,MAAM,OAAO,MAAM,MAAM,GAAG,QAAQ;EACpC,MAAM,QAAQ,MAAM,MAAM,WAAW,CAAC;EACtC,IAAI,CAAC,KAAK,SAAS,GAAG,KAAK,gDAAgD,KAAK,KAAK,GACnF,OAAO;CAEX;CAEA,MAAM,UAAU,MAAM,MAAM,4BAA4B;CACxD,IAAI,WAAW,kBAAkB,QAAQ,IAAK,QAAQ,IAAK,QAAQ,EAAG,GAAG,OAAO;CAEhF,MAAM,cAAc,MAAM,MAAM,0BAA0B;CAC1D,IAAI,eAAe,kBAAkB,YAAY,IAAK,YAAY,IAAK,YAAY,EAAG,GACpF,OAAO;CAGT,MAAM,aAAa,MAAM,MAAM,mBAAmB;CAClD,IAAI,cAAc,kBAAkB,KAAA,GAAW,WAAW,IAAK,WAAW,EAAG,GAAG,OAAO;CAEvF,OAAO,qDAAqD,KAAK,KAAK;AACxE;AAEA,SAAS,kBAAkB,MAA0B,OAAe,KAAsB;CACxF,MAAM,cAAc,OAAO,KAAK;CAChC,MAAM,YAAY,OAAO,GAAG;CAC5B,IAAI,CAAC,OAAO,UAAU,WAAW,KAAK,cAAc,KAAK,cAAc,IAAI,OAAO;CAElF,MAAM,aAAa,SAAS,KAAA,IAAY,KAAA,IAAY,OAAO,IAAI;CAI/D,MAAM,cAAc;EAAC;EAFnB,eAAe,KAAA,KACd,aAAa,MAAM,MAAM,aAAa,QAAQ,KAAK,aAAa,QAAQ,KACvC,KAAK;EAAI;EAAI;EAAI;EAAI;EAAI;EAAI;EAAI;EAAI;EAAI;EAAI;CAAE;CACnF,OAAO,OAAO,UAAU,SAAS,KAAK,aAAa,KAAK,aAAa,YAAY,cAAc;AACjG"}

package/dist/sandbox-harness-BlSOu4LX.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sandbox-harness-BlSOu4LX.d.ts","names":[],"sources":["../src/sandbox-harness.ts"],"mappings":";UAoBiB;;EAEf;;EAEA;;EAEA;;EAEA;;EAEA;;;;;;EAMA;;EAEA;;EAEA,MAAM;;EAEN,aAAa;;UAGE;EACf;EACA,MACE,gBACA,gBACA;IACG;IAAoB;;;UAGV;EACf;EACA;EACA;EACA;EACA;EACA;EACA;;;;;;;EAOA;;;;;;EAMA;;UAGe;EACf;EACA,KACE,OAAO,wBACP,iBACA,QAAQ,gBACP,QAAQ;;UA6JI;EACf;EACA,QAAQ;EACR,MAAM;EACN,OAAO;EACP;;EAEA"}
+{"version":3,"file":"sandbox-harness-BlSOu4LX.d.ts","names":[],"sources":["../src/sandbox-harness.ts"],"mappings":";UAoBiB;;EAEf;;EAEA;;EAEA;;EAEA;;EAEA;;;;;;EAMA;;EAEA;;EAEA,MAAM;;EAEN,aAAa;;UAGE;EACf;EACA,MACE,gBACA,gBACA;IACG;IAAoB;;;UAGV;EACf;EACA;EACA;EACA;EACA;EACA;EACA;;;;;;;EAOA;;;;;;EAMA;;UAGe;EACf;EACA,KACE,OAAO,wBACP,iBACA,QAAQ,gBACP,QAAQ;;UA0II;EACf;EACA,QAAQ;EACR,MAAM;EACN,OAAO;EACP;;EAEA"}

package/dist/{schema-CSf6qWgZ.js → schema-Bt2vLFm3.js}

@@ -1,17 +1,5 @@
 //#region src/trace/schema.ts
 /**
-* TraceSchema v1 — the canonical data model for agent-eval.
-*
-* Every score, every failure class, every pipeline in the framework is
-* a view over this data. Shape it once, live with it.
-*
-* Wire-compatible with OpenTelemetry span semantics (see trace/otel.ts)
-* but extended with agent-specific span kinds (llm, tool, retrieval,
-* judge, sandbox) and first-class BudgetLedger / Artifact / JudgeVerdict
-* entities that OTEL leaves as free-form attributes.
-*/
-const TRACE_SCHEMA_VERSION = "1.0.0";
-/**
 * The failure taxonomy. `FailureClass` derives from this array, so the type
 * and the runtime list cannot name different sets.
 *
@@ -96,6 +84,6 @@ function isJudgeSpan(s) {
 	return s.kind === "judge";
 }
 //#endregion
-export { isToolSpan as a, isLlmSpan as i, TRACE_SCHEMA_VERSION as n, isJudgeSpan as r, FAILURE_CLASSES as t };
+export { isToolSpan as i, isJudgeSpan as n, isLlmSpan as r, FAILURE_CLASSES as t };
 
-//# sourceMappingURL=schema-CSf6qWgZ.js.map
+//# sourceMappingURL=schema-Bt2vLFm3.js.map

package/dist/schema-Bt2vLFm3.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema-Bt2vLFm3.js","names":[],"sources":["../src/trace/schema.ts"],"sourcesContent":["/**\n * TraceSchema v1 — the canonical data model for agent-eval.\n *\n * Every score, every failure class, every pipeline in the framework is\n * a view over this data. Shape it once, live with it.\n *\n * Wire-compatible with OpenTelemetry span semantics (see trace/otel.ts)\n * but extended with agent-specific span kinds (llm, tool, retrieval,\n * judge, sandbox) and first-class BudgetLedger / Artifact / JudgeVerdict\n * entities that OTEL leaves as free-form attributes.\n */\n\n\n\n// ── Run ──────────────────────────────────────────────────────────────\n\nexport type RunStatus = 'running' | 'completed' | 'failed' | 'aborted'\n\nexport interface BudgetSpec {\n  tokens?: number\n  wallMs?: number\n  calls?: number\n  usd?: number\n}\n\nexport interface TraceRunOutcome {\n  score?: number\n  pass?: boolean\n  failureClass?: FailureClass\n  notes?: string\n}\n\n/**\n * Layer — optional classification in a nested build workflow.\n * `builder`: the meta-agent editing a project (e.g. agent-builder Forge chat).\n * `app-build`: sandbox harness that compiled + tested the generated scaffold.\n * `app-runtime`: a run of the generated agent against a domain scenario.\n * `meta`: any meta-eval (judge replay, correlation analysis).\n */\nexport type RunLayer = 'builder' | 'app-build' | 'app-runtime' | 'meta' | 'custom'\n\nexport interface Run {\n  runId: string\n  /**\n   * Stable identifier of the scenario being executed.\n   *\n   * Always populated on the persisted Run — but `TraceEmitter.startRun` accepts\n   * input WITHOUT this field, substituting a sensible default\n   * (`run.layer ?? run.tags?.['kind'] ?? 'runtime'`) when the caller has no\n   * curated scenario to anchor to (runtime / operator / meta-eval runs). This\n   * keeps the persisted shape unambiguous for downstream filters + aggregations\n   * while removing the boilerplate of inventing placeholder ids at the call site.\n   */\n  scenarioId: string\n  variantId?: string\n  datasetVersion?: string\n  /** Git SHA of agent code at run time. */\n  codeSha?: string\n  /** Hash of the prompt template + any system prompt. */\n  promptSha?: string\n  /** Model id + date + system-prompt hash, concatenated. */\n  modelFingerprint?: string\n  seed?: number\n  /** Arbitrary environment markers (shell, docker version, tz). */\n  envFingerprint?: Record<string, string>\n  /** Version of the redaction rules applied to this run. */\n  redactionVersion?: string\n  /** Parent run in a nested build workflow. A builder run's children are\n   *  app-build runs; those children are app-runtime runs. */\n  parentRunId?: string\n  /** Stable project identifier — groups runs across chats + sessions. */\n  projectId?: string\n  /** Chat/conversation identifier within a project. */\n  chatId?: string\n  /** Layer classification — hint for aggregation; not enforced. */\n  layer?: RunLayer\n  startedAt: number\n  endedAt?: number\n  status: RunStatus\n  outcome?: TraceRunOutcome\n  budget?: BudgetSpec\n  /** Free-form labels for downstream grouping. */\n  tags?: Record<string, string>\n  /**\n   * The producer's own account of its store writes for this run, written when\n   * the run ends. Absent when the producer kept no account, which is unknown,\n   * not complete.\n   */\n  capture?: RunCaptureReport\n}\n\n/** Store writes a producer made for one run. */\nexport interface RunCaptureReport {\n  /** Writes that landed. */\n  written: number\n  /** Writes that failed; those records are missing from the store. */\n  dropped: number\n  /** The most recent failure, prefixed with the write that failed. */\n  lastError?: string\n}\n\n// ── Spans (hierarchical work units) ──────────────────────────────────\n\nexport type SpanKind = 'agent' | 'llm' | 'tool' | 'retrieval' | 'judge' | 'sandbox' | 'custom'\n\nexport type SpanStatus = 'ok' | 'error'\n\nexport interface SpanBase {\n  spanId: string\n  parentSpanId?: string\n  runId: string\n  kind: SpanKind\n  name: string\n  startedAt: number\n  endedAt?: number\n  status?: SpanStatus\n  error?: string\n  /** Anything not covered by typed fields. Kept deliberately free-form. */\n  attributes?: Record<string, unknown>\n}\n\nexport interface Message {\n  role: 'system' | 'user' | 'assistant' | 'tool'\n  content: string\n  tokens?: number\n  /** Multi-modal content descriptors; blobs themselves live in Artifacts. */\n  images?: Array<{ artifactId?: string; url?: string; mime?: string }>\n}\n\nexport interface LlmSpan extends SpanBase {\n  kind: 'llm'\n  model: string\n  messages: Message[]\n  output?: string\n  inputTokens?: number\n  /** All generated tokens, including the reasoning subset when present. */\n  outputTokens?: number\n  cachedTokens?: number\n  cacheWriteTokens?: number\n  /** Reasoning-token subset of `outputTokens`. */\n  reasoningTokens?: number\n  costUsd?: number\n  finishReason?: string\n}\n\nexport interface ToolSpan extends SpanBase {\n  kind: 'tool'\n  toolName: string\n  args: unknown\n  /** False when the source observed the call but did not capture its arguments. */\n  argsCaptured?: boolean\n  result?: unknown\n  latencyMs?: number\n}\n\nexport interface RetrievalSpan extends SpanBase {\n  kind: 'retrieval'\n  query: string\n  hits: Array<{ docId: string; score: number; content?: string }>\n}\n\nexport interface JudgeSpan extends SpanBase {\n  kind: 'judge'\n  judgeId: string\n  /** Span this judgment applies to. */\n  targetSpanId: string\n  dimension: string\n  /** Numeric score (free-range; interpretation up to the judge). */\n  score: number\n  rationale?: string\n  evidence?: string\n}\n\nexport interface SandboxSpan extends SpanBase {\n  kind: 'sandbox'\n  image?: string\n  command?: string\n  exitCode?: number\n  testsTotal?: number\n  testsPassed?: number\n  stdoutHash?: string\n  stderrHash?: string\n  /** Duration in ms; the harness fills this explicitly (endedAt - startedAt may miss setup). */\n  wallMs?: number\n}\n\nexport interface GenericSpan extends SpanBase {\n  kind: 'agent' | 'custom'\n}\n\nexport type Span = LlmSpan | ToolSpan | RetrievalSpan | JudgeSpan | SandboxSpan | GenericSpan\n\n// ── Events (point-in-time occurrences within a span) ─────────────────\n\nexport type EventKind =\n  | 'log'\n  | 'error'\n  | 'budget_decrement'\n  | 'budget_breach'\n  | 'state_mutation'\n  | 'policy_violation'\n  | 'redaction_applied'\n  | 'custom'\n\nexport interface TraceEvent {\n  eventId: string\n  runId: string\n  spanId?: string\n  kind: EventKind\n  timestamp: number\n  payload: Record<string, unknown>\n}\n\n// ── Budget ledger (running token/wall/call/$ accounting) ─────────────\n\nexport interface BudgetLedgerEntry {\n  runId: string\n  dimension: keyof BudgetSpec\n  limit: number\n  consumed: number\n  remaining: number\n  timestamp: number\n  breached: boolean\n  /** Span that triggered this entry, if any. */\n  spanId?: string\n}\n\n// ── Artifacts (blobs addressed by hash) ──────────────────────────────\n\nexport interface Artifact {\n  artifactId: string\n  runId: string\n  spanId?: string\n  contentType: string\n  sizeBytes: number\n  /** sha256 in hex. */\n  hash: string\n  /** External storage URL (R2, S3, filesystem path). */\n  storageUrl?: string\n  /** Inline content for small blobs — keep under ~64KB. */\n  inlineContent?: string\n}\n\n// ── Failure taxonomy ─────────────────────────────────────────────────\n\n/**\n * The failure taxonomy. `FailureClass` derives from this array, so the type\n * and the runtime list cannot name different sets.\n *\n * Two layers, and the split is what `FAILURE_BLAME` reads\n * (`src/failure-taxonomy.ts`):\n *   - behaviour classes name what the agent did wrong, and a run that ends in\n *     one is evidence about the agent;\n *   - transport classes name a death before or around the model turn — the\n *     bridge refused, the box never provisioned, the stream tore — and a run\n *     that ends in one of the machine-blamed members is not evidence about the\n *     agent at all.\n *\n * The transport layer exists because a taxonomy with no name for \"the run\n * never reached a model\" charges an infrastructure outage to the agent under\n * test. Measured: six director cells settled with the runtime journal's own\n * `infra` flag reading FALSE while the real reason was\n * `host-executor: acquire timeout after 900000ms (in_flight=10/10)` — the\n * bridge's host lane had saturated.\n */\nexport const FAILURE_CLASSES = [\n  'success',\n  'reasoning_error',\n  'tool_selection_error',\n  'tool_argument_error',\n  'tool_recovery_failure',\n  'hallucination',\n  'instruction_following',\n  'safety_refusal_miss',\n  'policy_violation',\n  'budget_exceeded',\n  'format_drift',\n  'permission_escalation',\n  'pii_leak',\n  'cost_overrun',\n  'timeout',\n  'sandbox_failure',\n  'missing_user_data',\n  'missing_domain_data',\n  'missing_codebase_context',\n  'missing_runtime_context',\n  'missing_credentials',\n  'missing_integration_connection',\n  'missing_integration_scope',\n  'integration_approval_required',\n  'integration_auth_expired',\n  'integration_provider_failure',\n  'bad_integration_manifest',\n  'unsafe_integration_write_denied',\n  'stale_external_data',\n  'bad_retrieval',\n  'insufficient_evidence',\n  'contradictory_evidence',\n  'ambiguous_user_intent',\n  'knowledge_readiness_blocked',\n\n  // ── Transport: the run never reached a model, or the turn never completed ──\n  /** The bridge refused the connection or dropped it before a terminal event. */\n  'bridge_unreachable',\n  /** The bridge accepted the request and its execution lane was already full. */\n  'bridge_lane_saturated',\n  /** The router could not reconcile a completion with its own recorded usage. */\n  'router_usage_mismatch',\n  /** A session was bound to one AgentProfile and asked to serve another. */\n  'session_profile_conflict',\n  /** The agent runtime restarted underneath a live run. */\n  'runtime_restart',\n  /** The root driver of a recursive run failed before it could dispatch work. */\n  'root_driver_failed',\n  /** A sandbox box never finished provisioning. Distinct from `sandbox_failure`,\n   *  which is a command the agent ran exiting non-zero inside a live box. */\n  'box_provision_failure',\n  /** A sandbox box did not confirm destruction after the run. */\n  'box_teardown_failure',\n  /** The harness refused an agent-authored profile: an unknown model, a\n   *  workspace file it may not overwrite, a system prompt it may not replace. */\n  'profile_refused',\n  /** The model was reached and returned no visible output. */\n  'empty_completion',\n  /** The response stream carried malformed protocol content. */\n  'stream_protocol_error',\n  /** The response stream ended before a terminal event. */\n  'stream_incomplete',\n  /** A message was appended to a conversation the provider had already sealed. */\n  'message_sealed',\n  /** The model process was killed by a signal or exited with no code. */\n  'process_killed',\n  /** The run was cancelled by an operator. */\n  'cancelled',\n  /** The run was terminated without a more specific reason. */\n  'terminated',\n  /** The agent exhausted its traversal or iteration cap. */\n  'traversal_cap_exhausted',\n\n  /** No reason was recorded at all. Distinct from `unknown`, which means a\n   *  reason exists and no rule matched it. */\n  'unreported',\n  'unknown',\n] as const\n\nexport type FailureClass = (typeof FAILURE_CLASSES)[number]\n\n// ── Helpers ──────────────────────────────────────────────────────────\n\nexport function isLlmSpan(s: Span): s is LlmSpan {\n  return s.kind === 'llm'\n}\nexport function isToolSpan(s: Span): s is ToolSpan {\n  return s.kind === 'tool'\n}\nexport function isJudgeSpan(s: Span): s is JudgeSpan {\n  return s.kind === 'judge'\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;AAyQA,MAAa,kBAAkB;CAC7B;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CAIA;CAEA;CAEA;CAEA;CAEA;CAEA;CAGA;CAEA;CAGA;CAEA;CAEA;CAEA;CAEA;CAEA;CAEA;CAEA;CAEA;CAIA;CACA;AACF;AAMA,SAAgB,UAAU,GAAuB;CAC/C,OAAO,EAAE,SAAS;AACpB;AACA,SAAgB,WAAW,GAAwB;CACjD,OAAO,EAAE,SAAS;AACpB;AACA,SAAgB,YAAY,GAAyB;CACnD,OAAO,EAAE,SAAS;AACpB"}

package/dist/schema-C-ziyJD7.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"schema-C-ziyJD7.d.ts","names":[],"sources":["../src/rollout/schema.ts"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;cAmDa;;KAGD;cACC,wBAAwB;;KAUzB;cACC,yBAAyB;iBAItB,iBAAiB,OAAO;;KAK5B;cACC,2BAA2B;KAM5B;UAGK;EACf;EACA;EACA;IACE;;IAEA;;;UAIa;EACf,MAAM;EACN;;EAEA;EACA,aAAa;;EAEb;EACA;;;;;;;;EAQA;;UAGe;EACf;EACA;IACE;IACA;IACA,aAAa;;;;;;;;UASA;EACf;EACA;;EAEA;;EAEA;EACA;EACA;;;;;EAUA;;EAEA;;EAEA;;;;;;EAMA;;UAOe;;EAEf;EACA;EACA,OAAO;;EAEP;;EAEA;;UAGe;;EAEf;EACA;EACA;EACA;;EAEA;;EAEA;;EAEA;;EAEA;;EAEA,UAAU;;UAGK;;;;;EAKf;;EAEA;;EAEA;;EAEA,SAAS;EACT;EACA;EACA;;;;;;;;;;;;;EAaA;;;;;;;;;;;;;;;;;;;;;EAqBA;;UAGe;EACf;EACA;EACA;EACA;EACA;EACA;EACA;;;;;EAKA;;UAGe;EACf;EACA;;;EAGA;;;;;;;UAQe;;EAEf,UAAU;;EAEV;;;;;;;;;EASA;;UAGe;EACf;EACA;EACA;EACA;EACA;EACA;EACA;;;UAIe;WACN;WACA;;WAEA;WACA;WACA;;WAEA;WACA;WACA;;UAGM;EACf;EACA,SAAS;;EAET;IAAW;IAAkB;IAAgB;IAAgB;;;EAE7D,WAAW;;EAEX,8BAA8B;;EAE9B;;;;;;;EAOA;;;;;;;EAOA,iBAAiB;;UAGF;EACf,eAAe;EACf;;;EAGA;EACA;;EAEA;;EAEA;;EAEA;;EAEA;EACA,MAAM;EACN,MAAM;EACN,QAAQ;;EAER,UAAU;EACV,WAAW;;EAEX,QAAQ;EACR,SAAS;EACT,MAAM;EACN,WAAW;EACX,YAAY;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBA6GE,iBAAiB,MAAM,cAAc;iBAqDrC,oBAAoB;iBAgTpB,kBACd,gBACA,2BACS,SAAS;iBAOJ,cAAc,iBAAiB,SAAS;;;;;;cAa1C;;;;;;UAOG,6BAA6B;EAC5C;;;;;;;;;;;;;;;;;;;;;;KAuBU,oBAAoB,KAAK;YACzB;EACV,SAAS;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAsCK,aAAa,gBAAgB,mBAA2B;;iBAiBxD,kBACd,4BACA,mBACC"}
+{"version":3,"file":"schema-C-ziyJD7.d.ts","names":[],"sources":["../src/rollout/schema.ts"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;cAmDa;;KAGD;cACC,wBAAwB;;KAUzB;cACC,yBAAyB;iBAItB,iBAAiB,OAAO;;KAK5B;cACC,2BAA2B;KAM5B;UAGK;EACf;EACA;EACA;IACE;;IAEA;;;UAIa;EACf,MAAM;EACN;;EAEA;EACA,aAAa;;EAEb;EACA;;;;;;;;EAQA;;UAGe;EACf;EACA;IACE;IACA;IACA,aAAa;;;;;;;;UASA;EACf;EACA;;EAEA;;EAEA;EACA;EACA;;;;;EAUA;;EAEA;;EAEA;;;;;;EAMA;;UAOe;;EAEf;EACA;EACA,OAAO;;EAEP;;EAEA;;UAGe;;EAEf;EACA;EACA;EACA;;EAEA;;EAEA;;EAEA;;EAEA;;EAEA,UAAU;;UAGK;;;;;EAKf;;EAEA;;EAEA;;EAEA,SAAS;EACT;EACA;EACA;;;;;;;;;;;;;EAaA;;;;;;;;;;;;;;;;;;;;;EAqBA;;UAGe;EACf;EACA;EACA;EACA;EACA;EACA;EACA;;;;;EAKA;;UAGe;EACf;EACA;;;EAGA;;;;;;;UAQe;;EAEf,UAAU;;EAEV;;;;;;;;;EASA;;UAGe;EACf;EACA;EACA;EACA;EACA;EACA;EACA;;;UAIe;WACN;WACA;;WAEA;WACA;WACA;;WAEA;WACA;WACA;;UAGM;EACf;EACA,SAAS;;EAET;IAAW;IAAkB;IAAgB;IAAgB;;;EAE7D,WAAW;;EAEX,8BAA8B;;EAE9B;;;;;;;EAOA;;;;;;;EAOA,iBAAiB;;UAGF;EACf,eAAe;EACf;;;EAGA;EACA;;EAEA;;EAEA;;EAEA;;EAEA;EACA,MAAM;EACN,MAAM;EACN,QAAQ;;EAER,UAAU;EACV,WAAW;;EAEX,QAAQ;EACR,SAAS;EACT,MAAM;EACN,WAAW;EACX,YAAY;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBA0GE,iBAAiB,MAAM,cAAc;iBA4WrC,oBAAoB;iBAmBpB,kBACd,gBACA,2BACS,SAAS;iBAOJ,cAAc,iBAAiB,SAAS;;;;;;cAa1C;;;;;;UAOG,6BAA6B;EAC5C;;;;;;;;;;;;;;;;;;;;;;KAuBU,oBAAoB,KAAK;YACzB;EACV,SAAS;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAsCK,aAAa,gBAAgB,mBAA2B;;iBAiBxD,kBACd,4BACA,mBACC"}

package/dist/{schema-BuiujZ-g.js → schema-CvhfLjtZ.js}

@@ -1,3 +1,4 @@
+import { n as isRecord } from "./json-BhdsJaOQ.js";
 //#region src/rollout/gate-checks.ts
 /**
 * Every gate check in the package, in the order they are applied.
@@ -421,7 +422,6 @@ const CHAT_ROLES = [
 	"assistant",
 	"tool"
 ];
-const isRecord = (v) => typeof v === "object" && v !== null && !Array.isArray(v);
 const isNumberOrNull = (v) => v === null || typeof v === "number";
 const isNumberArray = (v) => Array.isArray(v) && v.every((n) => typeof n === "number" && Number.isFinite(n));
 const isIntegerArray = (v) => Array.isArray(v) && v.every((n) => Number.isInteger(n));
@@ -545,9 +545,8 @@ function assertRewardGate(line, context) {
 	const errors = gateErrors(line, GATE_POLICIES.assertRewardGate);
 	if (errors.length > 0) throw new Error(`${context}: rollout ${line.rollout_id} — ${errors[0]}`);
 }
-function validateRolloutLine(value) {
-	const errors = [];
-	if (!isRecord(value)) return ["line: not an object"];
+/** Check the line's identity fields and the policy section. */
+function validateRolloutIdentity(value, errors) {
 	if (value.schema !== "tangle.rollout.v1") errors.push(`schema: expected "${ROLLOUT_SCHEMA}"`);
 	if (typeof value.rollout_id !== "string" || value.rollout_id.length === 0) errors.push("rollout_id: expected non-empty string");
 	if (!isStringOrNull(value.parent_rollout_id)) errors.push("parent_rollout_id: expected string|null");
@@ -623,6 +622,9 @@ function validateRolloutLine(value) {
 			"agent_profile_cell_id"
 		]) if (value.policy[key] !== void 0 && !isStringOrNull(value.policy[key])) errors.push(`policy.${key}: expected string|null when present`);
 	}
+}
+/** Check the messages, tool definitions and steps arrays. */
+function validateRolloutTranscript(value, errors) {
 	if (!Array.isArray(value.messages)) errors.push("messages: expected array");
 	else for (const [i, m] of value.messages.entries()) validateChatMessage(m, `messages[${i}]`, errors);
 	if (!Array.isArray(value.tool_defs)) errors.push("tool_defs: expected array");
@@ -641,6 +643,9 @@ function validateRolloutLine(value) {
 			if (s.logprobs !== void 0 && !isNumberArray(s.logprobs)) errors.push(`steps[${i}].logprobs: expected number[] when present`);
 		});
 	}
+}
+/** Check the outcome section, the cost section and the reward gate. */
+function validateRolloutOutcomeAndCost(value, errors) {
 	validateSection(value.outcome, "outcome", [
 		[
 			"reward",
@@ -720,6 +725,55 @@ function validateRolloutLine(value) {
 		]
 	], errors);
 	if (isRecord(value.cost) && value.cost.llm_call_count !== void 0 && !(value.cost.llm_call_count === null || Number.isInteger(value.cost.llm_call_count))) errors.push("cost.llm_call_count: expected integer|null when present");
+}
+/** Check the lossy-projection flag and its gap note. */
+function validateLossyProjection(provenance, errors) {
+	if (provenance.lossy_projection !== void 0 && provenance.lossy_projection !== true) errors.push("provenance.lossy_projection: expected true when present");
+	if (provenance.lossy_projection === true && (typeof provenance.gap !== "string" || provenance.gap.length === 0)) errors.push("provenance.gap: required for a lossy projection");
+}
+/** Check the search coordinates of a search-produced rollout. */
+function validateProvenanceSearch(search, errors) {
+	if (search === void 0) return;
+	if (!isRecord(search) || typeof search.searchId !== "string" || !search.searchId || typeof search.nodeId !== "string" || !search.nodeId || typeof search.cellId !== "string" || !search.cellId || !Number.isSafeInteger(search.attempt) || search.attempt < 1) errors.push("provenance.search: expected exact search, node, cell and positive attempt");
+}
+/** Check each workspace capture's evidence fields. */
+function validateWorkspaceCaptures(captures, errors) {
+	if (captures === void 0 || captures === null) return;
+	if (!Array.isArray(captures)) {
+		errors.push("provenance.workspace_captures: expected array|null when present");
+		return;
+	}
+	for (const [i, capture] of captures.entries()) if (!isRecord(capture) || !isStringOrNull(capture.outRef) || !isStringOrNull(capture.blobPath) || !isStringOrNull(capture.receiptPointer) || !("receipt" in capture) || capture.attempts !== null && !Array.isArray(capture.attempts) || capture.coverageComplete !== null && typeof capture.coverageComplete !== "boolean" || !isStringOrNull(capture.incompleteReason) || !isStringOrNull(capture.projectionGap)) errors.push(`provenance.workspace_captures[${i}]: invalid capture evidence`);
+}
+/** Check each attempt's evidence and that every execution's ordinals are unique and contiguous from 1. */
+function validateProvenanceAttempts(attempts, errors) {
+	if (attempts === void 0) return;
+	if (!Array.isArray(attempts)) {
+		errors.push("provenance.attempts: expected array when present");
+		return;
+	}
+	const ordinalsByExecution = /* @__PURE__ */ new Map();
+	for (const [i, attempt] of attempts.entries()) {
+		if (!isRecord(attempt) || typeof attempt.executionId !== "string" || !attempt.executionId || !Number.isSafeInteger(attempt.ordinal) || attempt.ordinal < 1 || !isStringOrNull(attempt.providerSessionId) || !Array.isArray(attempt.nativeSessionIds) || !attempt.nativeSessionIds.every((id) => typeof id === "string" && id.length > 0) || !Array.isArray(attempt.processIds) || !attempt.processIds.every((id) => typeof id === "string" && id.length > 0) || ![
+			"succeeded",
+			"failed",
+			"cancelled",
+			"unknown"
+		].includes(attempt.outcome) || !Array.isArray(attempt.missingReasons) || !attempt.missingReasons.every((reason) => typeof reason === "string" && reason.length > 0)) {
+			errors.push(`provenance.attempts[${i}]: invalid attempt evidence`);
+			continue;
+		}
+		const executionId = attempt.executionId;
+		const ordinal = attempt.ordinal;
+		const seen = ordinalsByExecution.get(executionId) ?? /* @__PURE__ */ new Set();
+		if (seen.has(ordinal)) errors.push(`provenance.attempts[${i}]: duplicate execution/ordinal`);
+		seen.add(ordinal);
+		ordinalsByExecution.set(executionId, seen);
+	}
+	for (const [executionId, ordinals] of ordinalsByExecution) for (let ordinal = 1; ordinal <= ordinals.size; ordinal++) if (!ordinals.has(ordinal)) errors.push(`provenance.attempts: ${executionId} is missing ordinal ${ordinal}`);
+}
+/** Check the artifacts and provenance sections. */
+function validateRolloutProvenance(value, errors) {
 	validateSection(value.artifacts, "artifacts", [
 		[
 			"patch_path",
@@ -746,50 +800,26 @@ function validateRolloutLine(value) {
 		(v) => ROLLOUT_CAPTURES.includes(v),
 		`one of ${ROLLOUT_CAPTURES.join("|")}`
 	]], errors);
-	if (isRecord(value.provenance)) {
-		if (value.provenance.lossy_projection !== void 0 && value.provenance.lossy_projection !== true) errors.push("provenance.lossy_projection: expected true when present");
-		if (value.provenance.lossy_projection === true && (typeof value.provenance.gap !== "string" || value.provenance.gap.length === 0)) errors.push("provenance.gap: required for a lossy projection");
-		const search = value.provenance.search;
-		if (search !== void 0) {
-			if (!isRecord(search) || typeof search.searchId !== "string" || !search.searchId || typeof search.nodeId !== "string" || !search.nodeId || typeof search.cellId !== "string" || !search.cellId || !Number.isSafeInteger(search.attempt) || search.attempt < 1) errors.push("provenance.search: expected exact search, node, cell and positive attempt");
-		}
-		const captures = value.provenance.workspace_captures;
-		if (captures !== void 0 && captures !== null) {
-			if (!Array.isArray(captures)) errors.push("provenance.workspace_captures: expected array|null when present");
-			else for (const [i, capture] of captures.entries()) if (!isRecord(capture) || !isStringOrNull(capture.outRef) || !isStringOrNull(capture.blobPath) || !isStringOrNull(capture.receiptPointer) || !("receipt" in capture) || capture.attempts !== null && !Array.isArray(capture.attempts) || capture.coverageComplete !== null && typeof capture.coverageComplete !== "boolean" || !isStringOrNull(capture.incompleteReason) || !isStringOrNull(capture.projectionGap)) errors.push(`provenance.workspace_captures[${i}]: invalid capture evidence`);
-		}
-		const attempts = value.provenance.attempts;
-		if (attempts !== void 0) {
-			if (!Array.isArray(attempts)) errors.push("provenance.attempts: expected array when present");
-			else {
-				const ordinalsByExecution = /* @__PURE__ */ new Map();
-				for (const [i, attempt] of attempts.entries()) {
-					if (!isRecord(attempt) || typeof attempt.executionId !== "string" || !attempt.executionId || !Number.isSafeInteger(attempt.ordinal) || attempt.ordinal < 1 || !isStringOrNull(attempt.providerSessionId) || !Array.isArray(attempt.nativeSessionIds) || !attempt.nativeSessionIds.every((id) => typeof id === "string" && id.length > 0) || !Array.isArray(attempt.processIds) || !attempt.processIds.every((id) => typeof id === "string" && id.length > 0) || ![
-						"succeeded",
-						"failed",
-						"cancelled",
-						"unknown"
-					].includes(attempt.outcome) || !Array.isArray(attempt.missingReasons) || !attempt.missingReasons.every((reason) => typeof reason === "string" && reason.length > 0)) {
-						errors.push(`provenance.attempts[${i}]: invalid attempt evidence`);
-						continue;
-					}
-					const executionId = attempt.executionId;
-					const ordinal = attempt.ordinal;
-					const seen = ordinalsByExecution.get(executionId) ?? /* @__PURE__ */ new Set();
-					if (seen.has(ordinal)) errors.push(`provenance.attempts[${i}]: duplicate execution/ordinal`);
-					seen.add(ordinal);
-					ordinalsByExecution.set(executionId, seen);
-				}
-				for (const [executionId, ordinals] of ordinalsByExecution) for (let ordinal = 1; ordinal <= ordinals.size; ordinal++) if (!ordinals.has(ordinal)) errors.push(`provenance.attempts: ${executionId} is missing ordinal ${ordinal}`);
-			}
-		}
-		if (value.provenance.gap !== void 0 && typeof value.provenance.gap !== "string") errors.push("provenance.gap: must be string when present");
-		const evidence = value.provenance.gated_evidence;
-		if (evidence !== void 0) {
-			if (!isRecord(evidence)) errors.push("provenance.gated_evidence: must be an object when present");
-			else if (evidence.metrics !== void 0 && !isRecord(evidence.metrics)) errors.push("provenance.gated_evidence.metrics: must be an object when present");
-		}
+	if (!isRecord(value.provenance)) return;
+	const provenance = value.provenance;
+	validateLossyProjection(provenance, errors);
+	validateProvenanceSearch(provenance.search, errors);
+	validateWorkspaceCaptures(provenance.workspace_captures, errors);
+	validateProvenanceAttempts(provenance.attempts, errors);
+	if (provenance.gap !== void 0 && typeof provenance.gap !== "string") errors.push("provenance.gap: must be string when present");
+	const evidence = provenance.gated_evidence;
+	if (evidence !== void 0) {
+		if (!isRecord(evidence)) errors.push("provenance.gated_evidence: must be an object when present");
+		else if (evidence.metrics !== void 0 && !isRecord(evidence.metrics)) errors.push("provenance.gated_evidence.metrics: must be an object when present");
 	}
+}
+function validateRolloutLine(value) {
+	const errors = [];
+	if (!isRecord(value)) return ["line: not an object"];
+	validateRolloutIdentity(value, errors);
+	validateRolloutTranscript(value, errors);
+	validateRolloutOutcomeAndCost(value, errors);
+	validateRolloutProvenance(value, errors);
 	if (Array.isArray(value.messages) && isRecord(value.provenance)) {
 		if (value.messages.length === 0 && typeof value.provenance.gap !== "string") errors.push("provenance.gap: required when messages is empty");
 	}
@@ -858,4 +888,4 @@ function assertMintedLines(values, context = "rollout line") {
 //#endregion
 export { gatedEvidenceOf as _, assertMinted as a, assertRolloutLine as c, isTrainableSplit as d, validateRolloutLine as f, gateErrors as g, GATE_POLICIES as h, ROLLOUT_SPLITS as i, gateGamedOutcome as l, GATE_CHECK_IDS as m, ROLLOUT_ROLES as n, assertMintedLines as o, GATE_CHECKS as p, ROLLOUT_SCHEMA as r, assertRewardGate as s, ROLLOUT_CAPTURES as t, isRolloutLine as u, undeclaredStepPayload as v };
 
-//# sourceMappingURL=schema-BuiujZ-g.js.map
+//# sourceMappingURL=schema-CvhfLjtZ.js.map