@warmdrift/kgauto-compiler 2.0.0-alpha.53 → 2.0.0-alpha.55

package/dist/brain-proxy.d.mts

@@ -0,0 +1,100 @@
+/**
+ * `@warmdrift/kgauto-compiler/brain-proxy` — consumer brain-forward factory.
+ *
+ * ## Why this exists (the 4-consumer silent-drop class, 2026-07-06 s62)
+ *
+ * The library's `record()` / `recordOutcome()` / `recordShadowProbe()` /
+ * advisory paths all POST to a consumer-hosted proxy that forwards the row to
+ * the shared Supabase brain (the consumer holds the service-role key; kgauto's
+ * library never sees it). Every consumer hand-rolled that proxy layer — and a
+ * 4-consumer audit found every one silently broken in a *different* shape:
+ *
+ *   - tt-intelligence: middleware blocked 2 of 3 routes — server-to-server
+ *     POSTs 307-redirected to /login (missing public-path allowlist entry).
+ *   - inspire-central: the `/outcomes` proxy carried a column whitelist frozen
+ *     at alpha.7 that stripped `fell_over_from` / `fallback_reason`
+ *     (migration 018 columns) — Glass-Box fallback telemetry silently NULL.
+ *   - playbacksam: the `/probe_outcomes` whitelist would strip alpha.53's
+ *     `error_class` — every future migration column drops on the floor.
+ *   - global-expansion: mounted 1 of 4 routes — advisory POSTs 404 silently.
+ *
+ * Same L-142 / L-117 silent-drop family, four independent shapes, all in the
+ * layer consumers hand-roll. This factory kills the *class*: kgauto owns the
+ * forward handler, the consumer mounts ONE catch-all route. No column
+ * whitelist — the body is forwarded verbatim (`{ ...body }`), so any future
+ * migration column passes through untouched. One middleware/public-path entry
+ * (`/api/kgauto/v2/`) covers all four segments, which structurally prevents
+ * the tt-intel middleware-drift failure.
+ *
+ * ## Mounting recipes
+ *
+ * ### (a) Next.js app-router catch-all — ONE file, ONE middleware entry
+ *
+ *   // app/api/kgauto/v2/[segment]/route.ts
+ *   import { createBrainForwardRoutes } from '@warmdrift/kgauto-compiler/brain-proxy';
+ *   const routes = createBrainForwardRoutes({
+ *     ingestSecret: process.env.KGAUTO_INGEST_SECRET!,
+ *     brainUrl:     process.env.KGAUTO_BRAIN_URL!,      // https://xxxx.supabase.co
+ *     serviceKey:   process.env.KGAUTO_BRAIN_SERVICE_KEY!,
+ *   });
+ *   export const POST = (req: Request, { params }: { params: { segment: string } }) =>
+ *     routes.handle(req, params.segment);
+ *
+ *   // middleware.ts — ONE public-path entry covers ALL four segments.
+ *   // This is the structural fix for the tt-intel drift: you cannot mount
+ *   // 3-of-4 routes and forget the 4th, because the catch-all is one file
+ *   // and the allowlist is one prefix.
+ *   const PUBLIC_PATHS = [ ...  '/api/kgauto/v2/' ];
+ *
+ * ### (b) Plain Vercel edge function, per segment
+ *
+ *   // api/kgauto/probe_outcomes.ts
+ *   export const config = { runtime: 'edge' };
+ *   const routes = createBrainForwardRoutes({ ...  });
+ *   export default (req: Request) => routes.handle(req, 'probe_outcomes');
+ *
+ * The library appends the segment path to the consumer's `endpoint`, so the
+ * consumer's `KGAUTO_V2_BRAIN_URL` (the value passed to `configureBrain`)
+ * must be the base that resolves to `.../api/kgauto/v2` — i.e. the last path
+ * segment of each library POST (`outcomes`, `probe_outcomes`, …) is what
+ * `handle()` receives as `segment`.
+ *
+ * ## Quality-segment handle resolution (alpha.55)
+ *
+ * `recordOutcome()` sends `outcome_id` as `CompileResult.handle` (a string),
+ * but `compile_outcome_quality.outcome_id` is a BIGINT FK →
+ * `compile_outcomes(id)`. A verbatim forward would 400 every handle-shaped
+ * verdict (tt-intel + IC convergent finding, 2026-07-06). On the
+ * `compile_outcome_quality` segment the factory resolves non-numeric
+ * `outcome_id` values to their BIGINT row ids via
+ * `compile_outcomes?handle=eq.<v>` (latest row wins) before forwarding.
+ * Numeric ids pass through untouched; an unresolvable handle returns
+ * `404 handle_not_found` so the library's route-404 observability names the
+ * failure instead of the brain's opaque FK error.
+ */
+interface BrainForwardConfig {
+    /** Bearer token consumers' callers must present (usually KGAUTO_INGEST_SECRET). */
+    ingestSecret: string;
+    /** Brain Supabase project URL (e.g. https://xxxx.supabase.co). */
+    brainUrl: string;
+    /** Brain service-role key (server-side only). */
+    serviceKey: string;
+    /** Optional fetch impl for tests. */
+    fetchImpl?: typeof fetch;
+}
+interface BrainForwardRoutes {
+    /**
+     * Web-standard handler. `segment` is the last path segment of the library's
+     * POST URL (e.g. 'outcomes', 'probe_outcomes'). In a Next.js catch-all this
+     * is `params.segment`. Never throws — every error path returns a `Response`.
+     */
+    handle(req: Request, segment: string): Promise<Response>;
+    /**
+     * The path segments this factory serves. Consumers can use it for route
+     * generation, allowlist construction, or tests.
+     */
+    segments: readonly string[];
+}
+declare function createBrainForwardRoutes(config: BrainForwardConfig): BrainForwardRoutes;
+
+export { type BrainForwardConfig, type BrainForwardRoutes, createBrainForwardRoutes };

package/dist/brain-proxy.d.ts

@@ -0,0 +1,100 @@
+/**
+ * `@warmdrift/kgauto-compiler/brain-proxy` — consumer brain-forward factory.
+ *
+ * ## Why this exists (the 4-consumer silent-drop class, 2026-07-06 s62)
+ *
+ * The library's `record()` / `recordOutcome()` / `recordShadowProbe()` /
+ * advisory paths all POST to a consumer-hosted proxy that forwards the row to
+ * the shared Supabase brain (the consumer holds the service-role key; kgauto's
+ * library never sees it). Every consumer hand-rolled that proxy layer — and a
+ * 4-consumer audit found every one silently broken in a *different* shape:
+ *
+ *   - tt-intelligence: middleware blocked 2 of 3 routes — server-to-server
+ *     POSTs 307-redirected to /login (missing public-path allowlist entry).
+ *   - inspire-central: the `/outcomes` proxy carried a column whitelist frozen
+ *     at alpha.7 that stripped `fell_over_from` / `fallback_reason`
+ *     (migration 018 columns) — Glass-Box fallback telemetry silently NULL.
+ *   - playbacksam: the `/probe_outcomes` whitelist would strip alpha.53's
+ *     `error_class` — every future migration column drops on the floor.
+ *   - global-expansion: mounted 1 of 4 routes — advisory POSTs 404 silently.
+ *
+ * Same L-142 / L-117 silent-drop family, four independent shapes, all in the
+ * layer consumers hand-roll. This factory kills the *class*: kgauto owns the
+ * forward handler, the consumer mounts ONE catch-all route. No column
+ * whitelist — the body is forwarded verbatim (`{ ...body }`), so any future
+ * migration column passes through untouched. One middleware/public-path entry
+ * (`/api/kgauto/v2/`) covers all four segments, which structurally prevents
+ * the tt-intel middleware-drift failure.
+ *
+ * ## Mounting recipes
+ *
+ * ### (a) Next.js app-router catch-all — ONE file, ONE middleware entry
+ *
+ *   // app/api/kgauto/v2/[segment]/route.ts
+ *   import { createBrainForwardRoutes } from '@warmdrift/kgauto-compiler/brain-proxy';
+ *   const routes = createBrainForwardRoutes({
+ *     ingestSecret: process.env.KGAUTO_INGEST_SECRET!,
+ *     brainUrl:     process.env.KGAUTO_BRAIN_URL!,      // https://xxxx.supabase.co
+ *     serviceKey:   process.env.KGAUTO_BRAIN_SERVICE_KEY!,
+ *   });
+ *   export const POST = (req: Request, { params }: { params: { segment: string } }) =>
+ *     routes.handle(req, params.segment);
+ *
+ *   // middleware.ts — ONE public-path entry covers ALL four segments.
+ *   // This is the structural fix for the tt-intel drift: you cannot mount
+ *   // 3-of-4 routes and forget the 4th, because the catch-all is one file
+ *   // and the allowlist is one prefix.
+ *   const PUBLIC_PATHS = [ ...  '/api/kgauto/v2/' ];
+ *
+ * ### (b) Plain Vercel edge function, per segment
+ *
+ *   // api/kgauto/probe_outcomes.ts
+ *   export const config = { runtime: 'edge' };
+ *   const routes = createBrainForwardRoutes({ ...  });
+ *   export default (req: Request) => routes.handle(req, 'probe_outcomes');
+ *
+ * The library appends the segment path to the consumer's `endpoint`, so the
+ * consumer's `KGAUTO_V2_BRAIN_URL` (the value passed to `configureBrain`)
+ * must be the base that resolves to `.../api/kgauto/v2` — i.e. the last path
+ * segment of each library POST (`outcomes`, `probe_outcomes`, …) is what
+ * `handle()` receives as `segment`.
+ *
+ * ## Quality-segment handle resolution (alpha.55)
+ *
+ * `recordOutcome()` sends `outcome_id` as `CompileResult.handle` (a string),
+ * but `compile_outcome_quality.outcome_id` is a BIGINT FK →
+ * `compile_outcomes(id)`. A verbatim forward would 400 every handle-shaped
+ * verdict (tt-intel + IC convergent finding, 2026-07-06). On the
+ * `compile_outcome_quality` segment the factory resolves non-numeric
+ * `outcome_id` values to their BIGINT row ids via
+ * `compile_outcomes?handle=eq.<v>` (latest row wins) before forwarding.
+ * Numeric ids pass through untouched; an unresolvable handle returns
+ * `404 handle_not_found` so the library's route-404 observability names the
+ * failure instead of the brain's opaque FK error.
+ */
+interface BrainForwardConfig {
+    /** Bearer token consumers' callers must present (usually KGAUTO_INGEST_SECRET). */
+    ingestSecret: string;
+    /** Brain Supabase project URL (e.g. https://xxxx.supabase.co). */
+    brainUrl: string;
+    /** Brain service-role key (server-side only). */
+    serviceKey: string;
+    /** Optional fetch impl for tests. */
+    fetchImpl?: typeof fetch;
+}
+interface BrainForwardRoutes {
+    /**
+     * Web-standard handler. `segment` is the last path segment of the library's
+     * POST URL (e.g. 'outcomes', 'probe_outcomes'). In a Next.js catch-all this
+     * is `params.segment`. Never throws — every error path returns a `Response`.
+     */
+    handle(req: Request, segment: string): Promise<Response>;
+    /**
+     * The path segments this factory serves. Consumers can use it for route
+     * generation, allowlist construction, or tests.
+     */
+    segments: readonly string[];
+}
+declare function createBrainForwardRoutes(config: BrainForwardConfig): BrainForwardRoutes;
+
+export { type BrainForwardConfig, type BrainForwardRoutes, createBrainForwardRoutes };

package/dist/brain-proxy.js

@@ -0,0 +1,180 @@
+"use strict";
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+
+// src/brain-proxy.ts
+var brain_proxy_exports = {};
+__export(brain_proxy_exports, {
+  createBrainForwardRoutes: () => createBrainForwardRoutes
+});
+module.exports = __toCommonJS(brain_proxy_exports);
+var SEGMENT_TO_TABLE = {
+  outcomes: "compile_outcomes",
+  compile_outcome_advisories: "compile_outcome_advisories",
+  compile_outcome_quality: "compile_outcome_quality",
+  probe_outcomes: "probe_outcomes"
+};
+var KNOWN_SEGMENTS = Object.keys(SEGMENT_TO_TABLE);
+var JSON_HEADERS = { "Content-Type": "application/json" };
+function jsonResponse(status, body) {
+  return new Response(JSON.stringify(body), { status, headers: JSON_HEADERS });
+}
+function bearerOf(req) {
+  const header = req.headers.get("Authorization") ?? "";
+  const match = /^Bearer\s+(.+)$/i.exec(header);
+  return match?.[1]?.trim() ?? "";
+}
+function requireString(name, value) {
+  if (typeof value !== "string" || value.length === 0) {
+    throw new Error(`createBrainForwardRoutes: ${name} is required`);
+  }
+  return value;
+}
+function isNumericOutcomeId(value) {
+  return typeof value === "number" || typeof value === "string" && /^\d+$/.test(value);
+}
+function createBrainForwardRoutes(config) {
+  const ingestSecret = requireString("ingestSecret", config.ingestSecret);
+  const brainUrl = requireString("brainUrl", config.brainUrl).replace(/\/+$/, "");
+  const serviceKey = requireString("serviceKey", config.serviceKey);
+  const fetchFn = config.fetchImpl ?? fetch;
+  async function resolveQualityOutcomeIds(body) {
+    const rows = Array.isArray(body) ? body : [body];
+    const handles = [
+      ...new Set(
+        rows.map((r) => r?.outcome_id).filter(
+          (v) => typeof v === "string" && !isNumericOutcomeId(v)
+        )
+      )
+    ];
+    if (handles.length === 0) return body;
+    const list = handles.map((h) => `"${h.replace(/"/g, "")}"`).join(",");
+    const url = `${brainUrl}/rest/v1/compile_outcomes?select=id,handle&handle=in.(${encodeURIComponent(list)})&order=id.desc`;
+    let idByHandle;
+    try {
+      const res = await fetchFn(url, {
+        headers: { apikey: serviceKey, Authorization: `Bearer ${serviceKey}` }
+      });
+      if (!res.ok) {
+        const text = await res.text().catch(() => "<no body>");
+        return jsonResponse(502, {
+          error: "handle-resolution-failed",
+          table: "compile_outcome_quality",
+          status: res.status,
+          detail: text
+        });
+      }
+      const found = await res.json();
+      idByHandle = /* @__PURE__ */ new Map();
+      for (const r of found) {
+        if (!idByHandle.has(r.handle)) idByHandle.set(r.handle, r.id);
+      }
+    } catch (err) {
+      return jsonResponse(502, {
+        error: "handle-resolution-failed",
+        table: "compile_outcome_quality",
+        detail: err instanceof Error ? err.message : String(err)
+      });
+    }
+    const unresolved = handles.filter((h) => !idByHandle.has(h));
+    if (unresolved.length > 0) {
+      return jsonResponse(404, {
+        error: "handle_not_found",
+        table: "compile_outcome_quality",
+        unresolved
+      });
+    }
+    const rewritten = rows.map(
+      (r) => typeof r?.outcome_id === "string" && idByHandle.has(r.outcome_id) ? { ...r, outcome_id: idByHandle.get(r.outcome_id) } : r
+    );
+    return Array.isArray(body) ? rewritten : rewritten[0];
+  }
+  async function handle(req, segment) {
+    try {
+      if (req.method !== "POST") {
+        return jsonResponse(405, {
+          error: "method-not-allowed",
+          method: req.method,
+          allowed: ["POST"]
+        });
+      }
+      const table = SEGMENT_TO_TABLE[segment];
+      if (!table) {
+        return jsonResponse(404, {
+          error: "unknown-brain-forward-segment",
+          segment,
+          known: KNOWN_SEGMENTS
+        });
+      }
+      if (bearerOf(req) !== ingestSecret) {
+        return jsonResponse(401, { error: "unauthorized" });
+      }
+      let body;
+      try {
+        body = await req.json();
+      } catch {
+        return jsonResponse(400, { error: "invalid-json" });
+      }
+      let row = Array.isArray(body) ? body : { ...body };
+      if (table === "compile_outcome_quality") {
+        const outcome = await resolveQualityOutcomeIds(row);
+        if (outcome instanceof Response) return outcome;
+        row = outcome;
+      }
+      let brainRes;
+      try {
+        brainRes = await fetchFn(`${brainUrl}/rest/v1/${table}`, {
+          method: "POST",
+          headers: {
+            apikey: serviceKey,
+            Authorization: `Bearer ${serviceKey}`,
+            "Content-Type": "application/json",
+            Prefer: "return=minimal"
+          },
+          body: JSON.stringify(row)
+        });
+      } catch (err) {
+        return jsonResponse(502, {
+          error: "brain-unreachable",
+          table,
+          detail: err instanceof Error ? err.message : String(err)
+        });
+      }
+      if (brainRes.ok) {
+        return jsonResponse(201, { ok: true });
+      }
+      const text = await brainRes.text().catch(() => "<no body>");
+      return jsonResponse(brainRes.status, {
+        error: "brain-write-failed",
+        table,
+        status: brainRes.status,
+        detail: text
+      });
+    } catch (err) {
+      return jsonResponse(500, {
+        error: "brain-forward-internal-error",
+        detail: err instanceof Error ? err.message : String(err)
+      });
+    }
+  }
+  return { handle, segments: KNOWN_SEGMENTS };
+}
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  createBrainForwardRoutes
+});

package/dist/brain-proxy.mjs

@@ -0,0 +1,6 @@
+import {
+  createBrainForwardRoutes
+} from "./chunk-WVICNOLA.mjs";
+export {
+  createBrainForwardRoutes
+};

package/dist/chunk-WVICNOLA.mjs

@@ -0,0 +1,156 @@
+// src/brain-proxy.ts
+var SEGMENT_TO_TABLE = {
+  outcomes: "compile_outcomes",
+  compile_outcome_advisories: "compile_outcome_advisories",
+  compile_outcome_quality: "compile_outcome_quality",
+  probe_outcomes: "probe_outcomes"
+};
+var KNOWN_SEGMENTS = Object.keys(SEGMENT_TO_TABLE);
+var JSON_HEADERS = { "Content-Type": "application/json" };
+function jsonResponse(status, body) {
+  return new Response(JSON.stringify(body), { status, headers: JSON_HEADERS });
+}
+function bearerOf(req) {
+  const header = req.headers.get("Authorization") ?? "";
+  const match = /^Bearer\s+(.+)$/i.exec(header);
+  return match?.[1]?.trim() ?? "";
+}
+function requireString(name, value) {
+  if (typeof value !== "string" || value.length === 0) {
+    throw new Error(`createBrainForwardRoutes: ${name} is required`);
+  }
+  return value;
+}
+function isNumericOutcomeId(value) {
+  return typeof value === "number" || typeof value === "string" && /^\d+$/.test(value);
+}
+function createBrainForwardRoutes(config) {
+  const ingestSecret = requireString("ingestSecret", config.ingestSecret);
+  const brainUrl = requireString("brainUrl", config.brainUrl).replace(/\/+$/, "");
+  const serviceKey = requireString("serviceKey", config.serviceKey);
+  const fetchFn = config.fetchImpl ?? fetch;
+  async function resolveQualityOutcomeIds(body) {
+    const rows = Array.isArray(body) ? body : [body];
+    const handles = [
+      ...new Set(
+        rows.map((r) => r?.outcome_id).filter(
+          (v) => typeof v === "string" && !isNumericOutcomeId(v)
+        )
+      )
+    ];
+    if (handles.length === 0) return body;
+    const list = handles.map((h) => `"${h.replace(/"/g, "")}"`).join(",");
+    const url = `${brainUrl}/rest/v1/compile_outcomes?select=id,handle&handle=in.(${encodeURIComponent(list)})&order=id.desc`;
+    let idByHandle;
+    try {
+      const res = await fetchFn(url, {
+        headers: { apikey: serviceKey, Authorization: `Bearer ${serviceKey}` }
+      });
+      if (!res.ok) {
+        const text = await res.text().catch(() => "<no body>");
+        return jsonResponse(502, {
+          error: "handle-resolution-failed",
+          table: "compile_outcome_quality",
+          status: res.status,
+          detail: text
+        });
+      }
+      const found = await res.json();
+      idByHandle = /* @__PURE__ */ new Map();
+      for (const r of found) {
+        if (!idByHandle.has(r.handle)) idByHandle.set(r.handle, r.id);
+      }
+    } catch (err) {
+      return jsonResponse(502, {
+        error: "handle-resolution-failed",
+        table: "compile_outcome_quality",
+        detail: err instanceof Error ? err.message : String(err)
+      });
+    }
+    const unresolved = handles.filter((h) => !idByHandle.has(h));
+    if (unresolved.length > 0) {
+      return jsonResponse(404, {
+        error: "handle_not_found",
+        table: "compile_outcome_quality",
+        unresolved
+      });
+    }
+    const rewritten = rows.map(
+      (r) => typeof r?.outcome_id === "string" && idByHandle.has(r.outcome_id) ? { ...r, outcome_id: idByHandle.get(r.outcome_id) } : r
+    );
+    return Array.isArray(body) ? rewritten : rewritten[0];
+  }
+  async function handle(req, segment) {
+    try {
+      if (req.method !== "POST") {
+        return jsonResponse(405, {
+          error: "method-not-allowed",
+          method: req.method,
+          allowed: ["POST"]
+        });
+      }
+      const table = SEGMENT_TO_TABLE[segment];
+      if (!table) {
+        return jsonResponse(404, {
+          error: "unknown-brain-forward-segment",
+          segment,
+          known: KNOWN_SEGMENTS
+        });
+      }
+      if (bearerOf(req) !== ingestSecret) {
+        return jsonResponse(401, { error: "unauthorized" });
+      }
+      let body;
+      try {
+        body = await req.json();
+      } catch {
+        return jsonResponse(400, { error: "invalid-json" });
+      }
+      let row = Array.isArray(body) ? body : { ...body };
+      if (table === "compile_outcome_quality") {
+        const outcome = await resolveQualityOutcomeIds(row);
+        if (outcome instanceof Response) return outcome;
+        row = outcome;
+      }
+      let brainRes;
+      try {
+        brainRes = await fetchFn(`${brainUrl}/rest/v1/${table}`, {
+          method: "POST",
+          headers: {
+            apikey: serviceKey,
+            Authorization: `Bearer ${serviceKey}`,
+            "Content-Type": "application/json",
+            Prefer: "return=minimal"
+          },
+          body: JSON.stringify(row)
+        });
+      } catch (err) {
+        return jsonResponse(502, {
+          error: "brain-unreachable",
+          table,
+          detail: err instanceof Error ? err.message : String(err)
+        });
+      }
+      if (brainRes.ok) {
+        return jsonResponse(201, { ok: true });
+      }
+      const text = await brainRes.text().catch(() => "<no body>");
+      return jsonResponse(brainRes.status, {
+        error: "brain-write-failed",
+        table,
+        status: brainRes.status,
+        detail: text
+      });
+    } catch (err) {
+      return jsonResponse(500, {
+        error: "brain-forward-internal-error",
+        detail: err instanceof Error ? err.message : String(err)
+      });
+    }
+  }
+  return { handle, segments: KNOWN_SEGMENTS };
+}
+
+export {
+  createBrainForwardRoutes
+};

package/dist/index.d.mts

@@ -2,6 +2,7 @@ import { C as CompilePolicy, N as NormalizedResponse, A as ApiKeys, P as Provide
 export { m as CallAttempt, n as CallError, o as ChainModelEntry, p as ChainWithGrounding, q as Constraints, F as FallbackReason, H as HistoryCachePolicy, I as IntentDeclaration, M as Message, r as MutationApplied, s as NormalizedTokens, t as OutcomeKind, u as PerAxisMetricsByModel, v as PromptSection, w as SectionKind, x as ShadowProbeConfig, T as ToolCall, y as ToolDefinition } from './ir-CAlLBu5d.mjs';
 import { ModelProfile, ArchetypeConvention } from './profiles.mjs';
 export { ALIASES, CacheStrategy, CliffRule, LATENCY_TIER_MS, LatencyTier, LoweringSpec, RecoveryRule, StructuredOutputCapability, SystemPromptMode, allProfiles, getProfile, latencyTierOf, profilesByProvider, tryGetProfile } from './profiles.mjs';
+export { BrainForwardConfig, BrainForwardRoutes, createBrainForwardRoutes } from './brain-proxy.mjs';
 import { IntentArchetypeName } from './dialect.mjs';
 export { ALL_ARCHETYPES, ContextBucket, DIALECT_VERSION, HistoryDepth, INTENT_ARCHETYPES, OutputMode, ShapeSignature, ToolCountBucket, bucketContext, bucketHistory, bucketToolCount, hashShape, isArchetype, learningKey } from './dialect.mjs';
 
@@ -316,7 +317,10 @@ interface CompileForAISDKv6Result {
     /**
      * Index (into post-strip history) for the Anthropic history cache marker
      * (alpha.33). Mirror of `result.diagnostics.historyCacheMarkIndex` — no
-     * consumer re-derivation needed. Undefined when no marker fires.
+     * consumer re-derivation needed. Undefined when no marker fires, and (since
+     * alpha.55) always undefined for non-Anthropic targets: the marker is an
+     * Anthropic wire concept, other providers cache prefixes implicitly. The
+     * ungated value remains on `diagnostics.historyCacheMarkIndex`.
      */
     historyCacheMarkIndex?: number;
     /** Compile handle — pass to `record()` after the call. */

package/dist/index.d.ts

@@ -2,6 +2,7 @@ import { C as CompilePolicy, N as NormalizedResponse, A as ApiKeys, P as Provide
 export { m as CallAttempt, n as CallError, o as ChainModelEntry, p as ChainWithGrounding, q as Constraints, F as FallbackReason, H as HistoryCachePolicy, I as IntentDeclaration, M as Message, r as MutationApplied, s as NormalizedTokens, t as OutcomeKind, u as PerAxisMetricsByModel, v as PromptSection, w as SectionKind, x as ShadowProbeConfig, T as ToolCall, y as ToolDefinition } from './ir-BiXAMyji.js';
 import { ModelProfile, ArchetypeConvention } from './profiles.js';
 export { ALIASES, CacheStrategy, CliffRule, LATENCY_TIER_MS, LatencyTier, LoweringSpec, RecoveryRule, StructuredOutputCapability, SystemPromptMode, allProfiles, getProfile, latencyTierOf, profilesByProvider, tryGetProfile } from './profiles.js';
+export { BrainForwardConfig, BrainForwardRoutes, createBrainForwardRoutes } from './brain-proxy.js';
 import { IntentArchetypeName } from './dialect.js';
 export { ALL_ARCHETYPES, ContextBucket, DIALECT_VERSION, HistoryDepth, INTENT_ARCHETYPES, OutputMode, ShapeSignature, ToolCountBucket, bucketContext, bucketHistory, bucketToolCount, hashShape, isArchetype, learningKey } from './dialect.js';
 
@@ -316,7 +317,10 @@ interface CompileForAISDKv6Result {
     /**
      * Index (into post-strip history) for the Anthropic history cache marker
      * (alpha.33). Mirror of `result.diagnostics.historyCacheMarkIndex` — no
-     * consumer re-derivation needed. Undefined when no marker fires.
+     * consumer re-derivation needed. Undefined when no marker fires, and (since
+     * alpha.55) always undefined for non-Anthropic targets: the marker is an
+     * Anthropic wire concept, other providers cache prefixes implicitly. The
+     * ungated value remains on `diagnostics.historyCacheMarkIndex`.
      */
     historyCacheMarkIndex?: number;
     /** Compile handle — pass to `record()` after the call. */

package/dist/index.js

@@ -51,6 +51,7 @@ __export(index_exports, {
   compileForAISDKv6: () => compileForAISDKv6,
   configureBrain: () => configureBrain,
   countTokens: () => countTokens,
+  createBrainForwardRoutes: () => createBrainForwardRoutes,
   deriveFamilyFromModelId: () => deriveFamilyFromModelId,
   deriveOwnership: () => deriveOwnership,
   execute: () => execute,
@@ -6733,7 +6734,12 @@ function compileForAISDKv6(ir, opts) {
     },
     keptToolNames,
     ...providerOptions ? { providerOptions } : {},
-    ...result.diagnostics.historyCacheMarkIndex !== void 0 ? { historyCacheMarkIndex: result.diagnostics.historyCacheMarkIndex } : {},
+    // Provider-gated (alpha.55, IC finding): the marker is an Anthropic
+    // concept — Gemini/OpenAI/DeepSeek cache prefixes implicitly, and a
+    // consumer attaching Anthropic providerOptions at this index on a
+    // non-Anthropic call would ship a no-op-at-best marker. The ungated value
+    // stays on diagnostics.historyCacheMarkIndex for observability.
+    ...result.provider === "anthropic" && result.diagnostics.historyCacheMarkIndex !== void 0 ? { historyCacheMarkIndex: result.diagnostics.historyCacheMarkIndex } : {},
     mutationsApplied: result.mutationsApplied.map((m) => m.id),
     advisories: result.advisories ?? [],
     diagnostics,
@@ -6761,6 +6767,159 @@ function extractKeptToolNames(result) {
   return names;
 }
 
+// src/brain-proxy.ts
+var SEGMENT_TO_TABLE = {
+  outcomes: "compile_outcomes",
+  compile_outcome_advisories: "compile_outcome_advisories",
+  compile_outcome_quality: "compile_outcome_quality",
+  probe_outcomes: "probe_outcomes"
+};
+var KNOWN_SEGMENTS = Object.keys(SEGMENT_TO_TABLE);
+var JSON_HEADERS = { "Content-Type": "application/json" };
+function jsonResponse(status, body) {
+  return new Response(JSON.stringify(body), { status, headers: JSON_HEADERS });
+}
+function bearerOf(req) {
+  const header = req.headers.get("Authorization") ?? "";
+  const match = /^Bearer\s+(.+)$/i.exec(header);
+  return match?.[1]?.trim() ?? "";
+}
+function requireString(name, value) {
+  if (typeof value !== "string" || value.length === 0) {
+    throw new Error(`createBrainForwardRoutes: ${name} is required`);
+  }
+  return value;
+}
+function isNumericOutcomeId(value) {
+  return typeof value === "number" || typeof value === "string" && /^\d+$/.test(value);
+}
+function createBrainForwardRoutes(config) {
+  const ingestSecret = requireString("ingestSecret", config.ingestSecret);
+  const brainUrl = requireString("brainUrl", config.brainUrl).replace(/\/+$/, "");
+  const serviceKey = requireString("serviceKey", config.serviceKey);
+  const fetchFn = config.fetchImpl ?? fetch;
+  async function resolveQualityOutcomeIds(body) {
+    const rows = Array.isArray(body) ? body : [body];
+    const handles = [
+      ...new Set(
+        rows.map((r) => r?.outcome_id).filter(
+          (v) => typeof v === "string" && !isNumericOutcomeId(v)
+        )
+      )
+    ];
+    if (handles.length === 0) return body;
+    const list = handles.map((h) => `"${h.replace(/"/g, "")}"`).join(",");
+    const url = `${brainUrl}/rest/v1/compile_outcomes?select=id,handle&handle=in.(${encodeURIComponent(list)})&order=id.desc`;
+    let idByHandle;
+    try {
+      const res = await fetchFn(url, {
+        headers: { apikey: serviceKey, Authorization: `Bearer ${serviceKey}` }
+      });
+      if (!res.ok) {
+        const text = await res.text().catch(() => "<no body>");
+        return jsonResponse(502, {
+          error: "handle-resolution-failed",
+          table: "compile_outcome_quality",
+          status: res.status,
+          detail: text
+        });
+      }
+      const found = await res.json();
+      idByHandle = /* @__PURE__ */ new Map();
+      for (const r of found) {
+        if (!idByHandle.has(r.handle)) idByHandle.set(r.handle, r.id);
+      }
+    } catch (err) {
+      return jsonResponse(502, {
+        error: "handle-resolution-failed",
+        table: "compile_outcome_quality",
+        detail: err instanceof Error ? err.message : String(err)
+      });
+    }
+    const unresolved = handles.filter((h) => !idByHandle.has(h));
+    if (unresolved.length > 0) {
+      return jsonResponse(404, {
+        error: "handle_not_found",
+        table: "compile_outcome_quality",
+        unresolved
+      });
+    }
+    const rewritten = rows.map(
+      (r) => typeof r?.outcome_id === "string" && idByHandle.has(r.outcome_id) ? { ...r, outcome_id: idByHandle.get(r.outcome_id) } : r
+    );
+    return Array.isArray(body) ? rewritten : rewritten[0];
+  }
+  async function handle(req, segment) {
+    try {
+      if (req.method !== "POST") {
+        return jsonResponse(405, {
+          error: "method-not-allowed",
+          method: req.method,
+          allowed: ["POST"]
+        });
+      }
+      const table = SEGMENT_TO_TABLE[segment];
+      if (!table) {
+        return jsonResponse(404, {
+          error: "unknown-brain-forward-segment",
+          segment,
+          known: KNOWN_SEGMENTS
+        });
+      }
+      if (bearerOf(req) !== ingestSecret) {
+        return jsonResponse(401, { error: "unauthorized" });
+      }
+      let body;
+      try {
+        body = await req.json();
+      } catch {
+        return jsonResponse(400, { error: "invalid-json" });
+      }
+      let row = Array.isArray(body) ? body : { ...body };
+      if (table === "compile_outcome_quality") {
+        const outcome = await resolveQualityOutcomeIds(row);
+        if (outcome instanceof Response) return outcome;
+        row = outcome;
+      }
+      let brainRes;
+      try {
+        brainRes = await fetchFn(`${brainUrl}/rest/v1/${table}`, {
+          method: "POST",
+          headers: {
+            apikey: serviceKey,
+            Authorization: `Bearer ${serviceKey}`,
+            "Content-Type": "application/json",
+            Prefer: "return=minimal"
+          },
+          body: JSON.stringify(row)
+        });
+      } catch (err) {
+        return jsonResponse(502, {
+          error: "brain-unreachable",
+          table,
+          detail: err instanceof Error ? err.message : String(err)
+        });
+      }
+      if (brainRes.ok) {
+        return jsonResponse(201, { ok: true });
+      }
+      const text = await brainRes.text().catch(() => "<no body>");
+      return jsonResponse(brainRes.status, {
+        error: "brain-write-failed",
+        table,
+        status: brainRes.status,
+        detail: text
+      });
+    } catch (err) {
+      return jsonResponse(500, {
+        error: "brain-forward-internal-error",
+        detail: err instanceof Error ? err.message : String(err)
+      });
+    }
+  }
+  return { handle, segments: KNOWN_SEGMENTS };
+}
+
 // src/oracle.ts
 var DEFAULT_DIMENSIONS = ["correctness", "completeness", "conciseness", "format"];
 var judgeCallTimes = [];
@@ -7220,6 +7379,7 @@ function compile2(ir, opts) {
   compileForAISDKv6,
   configureBrain,
   countTokens,
+  createBrainForwardRoutes,
   deriveFamilyFromModelId,
   deriveOwnership,
   execute,

package/dist/index.mjs

@@ -1,3 +1,6 @@
+import {
+  createBrainForwardRoutes
+} from "./chunk-WVICNOLA.mjs";
 import {
   ALL_ARCHETYPES,
   DIALECT_VERSION,
@@ -4172,7 +4175,12 @@ function compileForAISDKv6(ir, opts) {
     },
     keptToolNames,
     ...providerOptions ? { providerOptions } : {},
-    ...result.diagnostics.historyCacheMarkIndex !== void 0 ? { historyCacheMarkIndex: result.diagnostics.historyCacheMarkIndex } : {},
+    // Provider-gated (alpha.55, IC finding): the marker is an Anthropic
+    // concept — Gemini/OpenAI/DeepSeek cache prefixes implicitly, and a
+    // consumer attaching Anthropic providerOptions at this index on a
+    // non-Anthropic call would ship a no-op-at-best marker. The ungated value
+    // stays on diagnostics.historyCacheMarkIndex for observability.
+    ...result.provider === "anthropic" && result.diagnostics.historyCacheMarkIndex !== void 0 ? { historyCacheMarkIndex: result.diagnostics.historyCacheMarkIndex } : {},
     mutationsApplied: result.mutationsApplied.map((m) => m.id),
     advisories: result.advisories ?? [],
     diagnostics,
@@ -4658,6 +4666,7 @@ export {
   compileForAISDKv6,
   configureBrain,
   countTokens,
+  createBrainForwardRoutes,
   deriveFamilyFromModelId,
   deriveOwnership,
   execute,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@warmdrift/kgauto-compiler",
-  "version": "2.0.0-alpha.53",
+  "version": "2.0.0-alpha.55",
   "description": "Prompt compiler + central learning brain for multi-model AI apps. Swap models without rewriting prompts.",
   "main": "./dist/index.js",
   "module": "./dist/index.mjs",
@@ -21,6 +21,11 @@
       "import": "./dist/profiles.mjs",
       "require": "./dist/profiles.js"
     },
+    "./brain-proxy": {
+      "types": "./dist/brain-proxy.d.ts",
+      "import": "./dist/brain-proxy.mjs",
+      "require": "./dist/brain-proxy.js"
+    },
     "./glassbox": {
       "types": "./dist/glassbox/index.d.ts",
       "import": "./dist/glassbox/index.mjs",
@@ -47,7 +52,7 @@
     "README.md"
   ],
   "scripts": {
-    "build": "tsup src/index.ts src/dialect.ts src/profiles.ts src/glassbox/index.ts src/glassbox-routes/index.ts src/glassbox-routes/format.ts src/glassbox-routes/react/index.ts --format cjs,esm --dts --clean --external react --external react-dom",
+    "build": "tsup src/index.ts src/dialect.ts src/profiles.ts src/brain-proxy.ts src/glassbox/index.ts src/glassbox-routes/index.ts src/glassbox-routes/format.ts src/glassbox-routes/react/index.ts --format cjs,esm --dts --clean --external react --external react-dom",
     "test": "vitest run",
     "test:watch": "vitest",
     "typecheck": "tsc --noEmit",