@warmdrift/kgauto-compiler 2.0.0-alpha.77 → 2.0.0-alpha.78

package/dist/{chunk-46U2NVOL.mjs → chunk-FT2FN6ZP.mjs}

@@ -1,6 +1,6 @@
 import {
   tryGetProfile
-} from "./chunk-N36LE3MK.mjs";
+} from "./chunk-VVRDFE6T.mjs";
 
 // src/brain-query.ts
 var FRESH_SNAPSHOT = {
@@ -323,6 +323,17 @@ function getReachabilityDiagnostic(opts = {}) {
   }
   return out;
 }
+var BRAIN_READ_ENV_NAMES = {
+  endpoint: "KGAUTO_V2_BRAIN_SUPABASE_URL",
+  jwt: "KGAUTO_V2_BRAIN_JWT",
+  anonKey: "KGAUTO_V2_BRAIN_ANON_KEY",
+  /** Accepted fallbacks, in resolution order after the canonical name. */
+  fallbacks: {
+    endpoint: ["KGAUTO_V2_BRAIN_URL"],
+    jwt: ["GLASSBOX_BRAIN_JWT"],
+    anonKey: []
+  }
+};
 function readBrainReadEnv(envSource = defaultEnv()) {
   const endpoint = readKeyValue(envSource.KGAUTO_V2_BRAIN_SUPABASE_URL) ?? readKeyValue(envSource.KGAUTO_V2_BRAIN_URL);
   const jwt = readKeyValue(envSource.KGAUTO_V2_BRAIN_JWT) ?? readKeyValue(envSource.GLASSBOX_BRAIN_JWT);
@@ -704,6 +715,7 @@ export {
   isProviderReachable,
   isModelReachable,
   getReachabilityDiagnostic,
+  BRAIN_READ_ENV_NAMES,
   readBrainReadEnv,
   isSameModelRetryEnabledFromEnv,
   loadChainsFromBrain,

package/dist/{chunk-GB7VJQ6C.mjs → chunk-QVD2QWST.mjs}

@@ -1,5 +1,5 @@
 // src/version.ts
-var LIBRARY_VERSION = "2.0.0-alpha.77";
+var LIBRARY_VERSION = "2.0.0-alpha.78";
 
 // src/key-health.ts
 var JSON_HEADERS = { "Content-Type": "application/json" };

package/dist/{chunk-N36LE3MK.mjs → chunk-VVRDFE6T.mjs}

@@ -363,6 +363,22 @@ var PROFILES_RAW = [
         threshold: 16,
         action: "drop_to_top_relevant",
         reason: "Haiku reliability degrades above ~16 tools"
+      },
+      {
+        // alpha.78 — the declared `structuredOutput: 'grammar'` does NOT
+        // hold on long-input summarize. MEASURED (brain, playbacksam):
+        // 21 disambiguated `structured_output_parse_failed` fallover rows
+        // 2026-07-22..27, tokens_in 12,280–31,450; PB's gate counted 20/20
+        // in-window failures. Clean traffic p50 sits at ~9K tokens_in, so
+        // 12K gates the failing band without touching the working one.
+        // Short-input summarize carries no failure evidence and stays
+        // ungated — this is why it's a cliff, not an archetype-wide
+        // `structuredOutputHint: 'avoid'`.
+        metric: "input_tokens",
+        threshold: 12e3,
+        action: "quality_gate_structured",
+        whenIntent: "summarize",
+        reason: "Structured-output parse failures at 100% in-window on long-input summarize (measured on playbacksam, 2026-07-25..27; haiku only led when input size made price dominate, then failed every time)."
       }
     ],
     costInputPer1m: 1,

package/dist/glassbox/index.d.mts

@@ -1,6 +1,6 @@
-import { G as GlassboxEvent } from '../types-Caq-hOIj.mjs';
-export { A as AdvisoryFiredData, C as CompileDoneData, a as CompileStartData, E as ExecuteAttemptData, b as ExecuteSuccessData, F as FallbackWalkedData, c as GLASSBOX_STREAM_TTL_MS, d as GlassboxEventKind, e as GlassboxPubSub } from '../types-Caq-hOIj.mjs';
-import '../ir-CRV1_taF.mjs';
+import { G as GlassboxEvent } from '../types-DpcAMmk-.mjs';
+export { A as AdvisoryFiredData, C as CompileDoneData, a as CompileStartData, E as ExecuteAttemptData, b as ExecuteSuccessData, F as FallbackWalkedData, c as GLASSBOX_STREAM_TTL_MS, d as GlassboxEventKind, e as GlassboxPubSub } from '../types-DpcAMmk-.mjs';
+import '../ir-BFwWhj2s.mjs';
 import '../dialect.mjs';
 
 /**

package/dist/glassbox/index.d.ts

@@ -1,6 +1,6 @@
-import { G as GlassboxEvent } from '../types-C5BX9bzi.js';
-export { A as AdvisoryFiredData, C as CompileDoneData, a as CompileStartData, E as ExecuteAttemptData, b as ExecuteSuccessData, F as FallbackWalkedData, c as GLASSBOX_STREAM_TTL_MS, d as GlassboxEventKind, e as GlassboxPubSub } from '../types-C5BX9bzi.js';
-import '../ir-C02EIElQ.js';
+import { G as GlassboxEvent } from '../types-B4kz3Vs0.js';
+export { A as AdvisoryFiredData, C as CompileDoneData, a as CompileStartData, E as ExecuteAttemptData, b as ExecuteSuccessData, F as FallbackWalkedData, c as GLASSBOX_STREAM_TTL_MS, d as GlassboxEventKind, e as GlassboxPubSub } from '../types-B4kz3Vs0.js';
+import '../ir-DZKS1tI7.js';
 import '../dialect.js';
 
 /**

package/dist/glassbox-routes/format.d.mts

@@ -1,5 +1,5 @@
-import { T as TraceHealth } from '../types-3WdGMqin.mjs';
-import '../ir-CRV1_taF.mjs';
+import { T as TraceHealth } from '../types-hjzSWxtv.mjs';
+import '../ir-BFwWhj2s.mjs';
 import '../dialect.mjs';
 
 /**

package/dist/glassbox-routes/format.d.ts

@@ -1,5 +1,5 @@
-import { T as TraceHealth } from '../types-CkRvjxrI.js';
-import '../ir-C02EIElQ.js';
+import { T as TraceHealth } from '../types-D_fLt_Xv.js';
+import '../ir-DZKS1tI7.js';
 import '../dialect.js';
 
 /**

package/dist/glassbox-routes/index.d.mts

@@ -1,7 +1,7 @@
-import { G as GlassboxEvent } from '../types-Caq-hOIj.mjs';
-import { a as TraceDetail, b as TraceSummary, c as TraceCounterfactual } from '../types-3WdGMqin.mjs';
-export { A as AdvisoryRecord, T as TraceHealth, d as TraceSectionRewrite } from '../types-3WdGMqin.mjs';
-import '../ir-CRV1_taF.mjs';
+import { G as GlassboxEvent } from '../types-DpcAMmk-.mjs';
+import { a as TraceDetail, b as TraceSummary, c as TraceCounterfactual } from '../types-hjzSWxtv.mjs';
+export { A as AdvisoryRecord, T as TraceHealth, d as TraceSectionRewrite } from '../types-hjzSWxtv.mjs';
+import '../ir-BFwWhj2s.mjs';
 import '../dialect.mjs';
 
 /**

package/dist/glassbox-routes/index.d.ts

@@ -1,7 +1,7 @@
-import { G as GlassboxEvent } from '../types-C5BX9bzi.js';
-import { a as TraceDetail, b as TraceSummary, c as TraceCounterfactual } from '../types-CkRvjxrI.js';
-export { A as AdvisoryRecord, T as TraceHealth, d as TraceSectionRewrite } from '../types-CkRvjxrI.js';
-import '../ir-C02EIElQ.js';
+import { G as GlassboxEvent } from '../types-B4kz3Vs0.js';
+import { a as TraceDetail, b as TraceSummary, c as TraceCounterfactual } from '../types-D_fLt_Xv.js';
+export { A as AdvisoryRecord, T as TraceHealth, d as TraceSectionRewrite } from '../types-D_fLt_Xv.js';
+import '../ir-DZKS1tI7.js';
 import '../dialect.js';
 
 /**

package/dist/glassbox-routes/index.js

@@ -417,6 +417,22 @@ var PROFILES_RAW = [
         threshold: 16,
         action: "drop_to_top_relevant",
         reason: "Haiku reliability degrades above ~16 tools"
+      },
+      {
+        // alpha.78 — the declared `structuredOutput: 'grammar'` does NOT
+        // hold on long-input summarize. MEASURED (brain, playbacksam):
+        // 21 disambiguated `structured_output_parse_failed` fallover rows
+        // 2026-07-22..27, tokens_in 12,280–31,450; PB's gate counted 20/20
+        // in-window failures. Clean traffic p50 sits at ~9K tokens_in, so
+        // 12K gates the failing band without touching the working one.
+        // Short-input summarize carries no failure evidence and stays
+        // ungated — this is why it's a cliff, not an archetype-wide
+        // `structuredOutputHint: 'avoid'`.
+        metric: "input_tokens",
+        threshold: 12e3,
+        action: "quality_gate_structured",
+        whenIntent: "summarize",
+        reason: "Structured-output parse failures at 100% in-window on long-input summarize (measured on playbacksam, 2026-07-25..27; haiku only led when input size made price dominate, then failed every time)."
       }
     ],
     costInputPer1m: 1,

package/dist/glassbox-routes/index.mjs

@@ -1,10 +1,10 @@
 import {
   ARCHETYPE_FLOOR_DEFAULT,
   getDefaultFallbackChain
-} from "../chunk-46U2NVOL.mjs";
+} from "../chunk-FT2FN6ZP.mjs";
 import {
   tryGetProfile
-} from "../chunk-N36LE3MK.mjs";
+} from "../chunk-VVRDFE6T.mjs";
 import {
   subscribe,
   subscribeApp

package/dist/glassbox-routes/react/index.d.mts

@@ -1,6 +1,6 @@
 import * as react_jsx_runtime from 'react/jsx-runtime';
-import { a as TraceDetail } from '../../types-3WdGMqin.mjs';
-import '../../ir-CRV1_taF.mjs';
+import { a as TraceDetail } from '../../types-hjzSWxtv.mjs';
+import '../../ir-BFwWhj2s.mjs';
 import '../../dialect.mjs';
 
 /**

package/dist/glassbox-routes/react/index.d.ts

@@ -1,6 +1,6 @@
 import * as react_jsx_runtime from 'react/jsx-runtime';
-import { a as TraceDetail } from '../../types-CkRvjxrI.js';
-import '../../ir-C02EIElQ.js';
+import { a as TraceDetail } from '../../types-D_fLt_Xv.js';
+import '../../ir-DZKS1tI7.js';
 import '../../dialect.js';
 
 /**

package/dist/index.d.mts

@@ -1,5 +1,5 @@
-import { C as CompilePolicy, N as NormalizedResponse, A as ApiKeys, P as ProviderOverrides, a as CompiledRequest, b as PromptIR, c as CallOptions, d as CallResult, S as SystemModelMessage, e as CompileResult, B as BestPracticeAdvisory, F as FallbackReason, f as SectionRewrite, R as RecordInput, g as RecordOutcomeInput, O as OutcomeResult, h as OracleScore, i as Adapter, j as PerAxisMetrics, k as Provider, l as ChainEntry, G as Grounding } from './ir-CRV1_taF.mjs';
-export { m as CallAttempt, n as CallError, o as ChainModelEntry, p as ChainWithGrounding, q as Constraints, E as EffortLevel, r as GoldenCaptureOptions, H as HistoryCachePolicy, I as IntentDeclaration, M as Message, s as MutationApplied, t as NormalizedTokens, u as OutcomeKind, v as PerAxisMetricsByModel, w as PromptSection, x as SectionKind, y as ShadowProbeConfig, T as ToolCall, z as ToolDefinition, D as captureGoldenIr, J as parseGoldenCaptureRate, K as resolveGoldenCaptureRate, L as shouldCaptureGolden } from './ir-CRV1_taF.mjs';
+import { C as CompilePolicy, N as NormalizedResponse, A as ApiKeys, P as ProviderOverrides, a as CompiledRequest, b as PromptIR, c as CallOptions, d as CallResult, S as SystemModelMessage, e as CompileResult, B as BestPracticeAdvisory, F as FallbackReason, f as SectionRewrite, R as RecordInput, g as RecordOutcomeInput, O as OutcomeResult, h as OracleScore, i as Adapter, j as PerAxisMetrics, k as Provider, l as ChainEntry, G as Grounding } from './ir-BFwWhj2s.mjs';
+export { m as CallAttempt, n as CallError, o as ChainModelEntry, p as ChainWithGrounding, q as Constraints, E as EffortLevel, r as GoldenCaptureOptions, H as HistoryCachePolicy, I as IntentDeclaration, M as Message, s as MutationApplied, t as NormalizedTokens, u as OutcomeKind, v as PerAxisMetricsByModel, w as PromptSection, x as SectionKind, y as ShadowProbeConfig, T as ToolCall, z as ToolDefinition, D as captureGoldenIr, J as hasMutation, K as mutationId, L as parseGoldenCaptureRate, Q as resolveGoldenCaptureRate, U as shouldCaptureGolden } from './ir-BFwWhj2s.mjs';
 import { ModelProfile, ArchetypeConvention } from './profiles.mjs';
 export { ALIASES, CacheStrategy, CliffRule, LATENCY_TIER_MS, LatencyTier, LoweringSpec, RecoveryRule, StructuredOutputCapability, SystemPromptMode, allProfiles, getProfile, latencyTierOf, profilesByProvider, tryGetProfile } from './profiles.mjs';
 export { BrainForwardConfig, BrainForwardRoutes, createBrainForwardRoutes } from './brain-proxy.mjs';
@@ -74,6 +74,20 @@ interface ExecuteOptions {
      * and `!opts.noStream`.
      */
     onChunk?: (chunk: string) => void;
+    /**
+     * alpha.78 — abort signal for the provider fetch. call() composes
+     * `AbortSignal.timeout(attemptTimeoutMs)` with the caller's own
+     * `CallOptions.abortSignal`; direct execute() consumers may pass anything.
+     * TimeoutError reasons classify retryable `timeout` (chain walks);
+     * AbortError reasons classify terminal `aborted` (caller cancelled).
+     */
+    signal?: AbortSignal;
+    /**
+     * alpha.78 — per-chunk stall bound, streaming paths only (see
+     * StreamingOptions.stallTimeoutMs). Ignored on non-streaming requests,
+     * where `signal` carries the total attempt bound instead.
+     */
+    stallTimeoutMs?: number;
 }
 interface ExecuteOk {
     ok: true;
@@ -343,7 +357,20 @@ interface CompileForAISDKv6Result {
     historyCacheMarkIndex?: number;
     /** Compile handle — pass to `record()` after the call. */
     handle: string;
-    /** Mutation ids the compiler fired (informational). */
+    /**
+     * Mutation ids the compiler fired (informational).
+     *
+     * ⚠️ alpha.78 — element type differs BY SURFACE: this adapter carries
+     * `string[]` (ids), while `CompileResult`/`CallResult.mutationsApplied`
+     * carry `MutationApplied[]` (objects with `description`, `rankDelta`, …).
+     * Coding to one surface's type while reading the other's runtime is a
+     * silent false negative (PB 2026-07-25). Use the shape-proof helpers
+     * `mutationId(m)` / `hasMutation(list, 'quality-gate-measured-*')` from
+     * the package root instead of `typeof` checks. Neither element type can
+     * change without breaking a live consumer (tt-intel joins these ids;
+     * object readers want `description`), so the divergence is documented
+     * rather than unified.
+     */
     mutationsApplied: string[];
     /** Best-practice advisories (alpha.6). Empty when none fired. */
     advisories: BestPracticeAdvisory[];
@@ -1119,7 +1146,7 @@ declare function runStrategyEvalWithAttribution(opts: Omit<GoldenEvalOptions, 'a
  * guard in `tests/version.test.ts` fails the suite (and therefore
  * `prepublishOnly`) when they diverge — a stale constant cannot reach npm.
  */
-declare const LIBRARY_VERSION = "2.0.0-alpha.77";
+declare const LIBRARY_VERSION = "2.0.0-alpha.78";
 
 /**
  * Oracle contract — how an app tells the brain whether a response was good.
@@ -1651,18 +1678,30 @@ interface GetActionableAdvisoriesOptions {
     severity?: AdvisorySeverity;
     /** Status filter; defaults to 'open'. Pass 'all' for the full set. */
     status?: 'open' | 'snoozed' | 'resolved' | 'all';
-    brainEndpoint: string;
-    brainJwt: string;
-    brainAnonKey: string;
+    /**
+     * alpha.78 (PB adoption-gap ask 2): the trio now DEFAULTS from
+     * `readBrainReadEnv()` when omitted, so a consumer that passes nothing
+     * gets correct behavior from the canonical env names instead of a
+     * self-authored config error. Explicit values still win.
+     */
+    brainEndpoint?: string;
+    brainJwt?: string;
+    brainAnonKey?: string;
     fetch?: typeof fetch;
 }
 interface MarkAdvisoryResolvedOptions {
     /** Stable id from a prior `getActionableAdvisories` call. */
     id: string;
     resolutionNote?: string;
-    brainEndpoint: string;
-    brainJwt: string;
-    brainAnonKey: string;
+    /**
+     * alpha.78 (PB adoption-gap ask 2): the trio now DEFAULTS from
+     * `readBrainReadEnv()` when omitted, so a consumer that passes nothing
+     * gets correct behavior from the canonical env names instead of a
+     * self-authored config error. Explicit values still win.
+     */
+    brainEndpoint?: string;
+    brainJwt?: string;
+    brainAnonKey?: string;
     fetch?: typeof fetch;
 }
 /**
@@ -1686,8 +1725,10 @@ declare function getActionableAdvisories(opts: GetActionableAdvisoriesOptions):
  * Lookup strategy:
  *   1. Query `actionable_advisories_v?id=eq.<id>` to find the (app_id, code)
  *      tuple for this advisory.
- *   2. PATCH the latest unresolved firing in `compile_outcome_advisories`
- *      matching that tuple via the underlying outcome's app_id.
+ *   2. PATCH EVERY unresolved firing in `compile_outcome_advisories`
+ *      matching that tuple via the underlying outcome's app_id. (One call
+ *      closes the whole rollup — the alpha.71-era docblock said "latest
+ *      firing", which was never what the code did; corrected alpha.78.)
  *
  * The (app_id, code) lookup is necessary because `compile_outcome_advisories`
  * has no `app_id` column — it inherits scope via the FK to compile_outcomes.
@@ -1696,16 +1737,27 @@ declare function getActionableAdvisories(opts: GetActionableAdvisoriesOptions):
  * acceptable because marks are low-frequency operator actions, not per-call
  * hot path.
  *
- * Idempotent re-marks: if the advisory is already resolved (no unresolved
- * firings match), the PATCH affects zero rows and the call still returns
- * `ok: true`. The function returns `ok: false` only on transport / auth /
- * lookup failures.
+ * alpha.78 envelope (PB `resolve-envelope-cannot-close-a-rollup`, 2026-07-25):
+ * the return now reports WHAT HAPPENED, not that the request was received —
+ * `firingsResolved` is the count of rows this call actually flipped, and
+ * `status` is the rollup's state after the write. PB measured the old
+ * `ok: true` live against prod: the PATCH was being RLS-filtered to zero
+ * rows (consumer JWTs had read-grant but no update-grant — migration 049
+ * adds it) and the envelope reported success anyway. "When an API can
+ * succeed without doing anything, the return value should distinguish those
+ * cases" — this is that distinction. `firingsResolved: 0, status: 'open'`
+ * on a rollup you expected to close now points at the write grant.
+ *
+ * Idempotent re-marks stay ok: an already-resolved advisory returns
+ * `{ ok: true, firingsResolved: 0, status: 'resolved' }`.
  *
  * Returns ok/reason envelope (vs throwing) because consumer Admin UIs
  * typically want to render the failure inline rather than crash.
  */
 declare function markAdvisoryResolved(opts: MarkAdvisoryResolvedOptions): Promise<{
     ok: true;
+    firingsResolved: number;
+    status: 'open' | 'resolved' | 'unknown';
 } | {
     ok: false;
     reason: string;
@@ -1748,14 +1800,17 @@ interface MarkExclusionFindingHandledOptions {
      *  digests + dashboards alongside the resolution_source. */
     resolutionNote?: string;
     /** Brain Supabase URL base (e.g. `https://<project>.supabase.co`). The
-     *  function appends `/rest/v1/exclusion_findings?...`. */
-    brainEndpoint: string;
+     *  function appends `/rest/v1/exclusion_findings?...`.
+     *  alpha.78: defaults from `readBrainReadEnv()` when omitted. */
+    brainEndpoint?: string;
     /** Consumer-scoped JWT carrying the `app_id` claim. The brain's RLS
      *  policy enforces that the JWT's app_id matches the finding's app_id;
-     *  cross-tenant writes fail at the database layer regardless of input. */
-    brainJwt: string;
-    /** Supabase anon key for the `apikey` header (PostgREST requires it). */
-    brainAnonKey: string;
+     *  cross-tenant writes fail at the database layer regardless of input.
+     *  alpha.78: defaults from `readBrainReadEnv()` when omitted. */
+    brainJwt?: string;
+    /** Supabase anon key for the `apikey` header (PostgREST requires it).
+     *  alpha.78: defaults from `readBrainReadEnv()` when omitted. */
+    brainAnonKey?: string;
     /** Injected fetch for tests. Defaults to global fetch. */
     fetch?: typeof fetch;
 }
@@ -2153,6 +2208,23 @@ interface BrainReadEnv {
      */
     missingEnv: string[];
 }
+/**
+ * alpha.78 (PB adoption-gap ask 2) — the canonical brain-read env names as
+ * an exported constant, so consumers reference them instead of retyping
+ * (PB invented three plausible-but-wrong names and carried the resulting
+ * self-authored 503 for two months).
+ */
+declare const BRAIN_READ_ENV_NAMES: {
+    readonly endpoint: "KGAUTO_V2_BRAIN_SUPABASE_URL";
+    readonly jwt: "KGAUTO_V2_BRAIN_JWT";
+    readonly anonKey: "KGAUTO_V2_BRAIN_ANON_KEY";
+    /** Accepted fallbacks, in resolution order after the canonical name. */
+    readonly fallbacks: {
+        readonly endpoint: readonly ["KGAUTO_V2_BRAIN_URL"];
+        readonly jwt: readonly ["GLASSBOX_BRAIN_JWT"];
+        readonly anonKey: readonly [];
+    };
+};
 /**
  * Resolve brain-read env vars. Defaults to `process.env`; pass `envSource`
  * for hermetic tests. Trims surrounding whitespace and treats
@@ -2984,6 +3056,18 @@ interface PromotionRow {
     suppressQualityGate: boolean;
     /** ISO timestamp the promotion went active. */
     promotedAt: string;
+    /**
+     * alpha.78 — lifecycle status. The endpoint serves rolled_back rows only
+     * when the library asks (`with_rollbacks=1`), so pre-.78 clients can
+     * never receive one. Every reader that APPLIES a promotion must filter
+     * to 'active'; rolled_back rows exist so advisors can see what the guard
+     * already adjudicated instead of re-recommending it (PB Finding 3).
+     */
+    status: 'active' | 'rolled_back';
+    /** ISO timestamp of the guard's revert, rolled_back rows only. */
+    rolledBackAt?: string;
+    /** Guard's classification ('latency' | 'economics' | 'strategy' | …). */
+    rollbackClass?: string;
 }
 interface PromotionsRuntime {
     /** Endpoint base URL. The library appends `?app_id=<id>`. */
@@ -3038,6 +3122,30 @@ interface GetApplicablePromotionOpts {
  * NEVER throws. Not configured / brain down / cold → undefined.
  */
 declare function getApplicablePromotion(opts: GetApplicablePromotionOpts): PromotionRow | undefined;
+/**
+ * alpha.78 — how long a guard rollback suppresses re-recommending the same
+ * model on the same surface. Matches the measured-failure evidence window:
+ * a `rollback_class='latency'` revert deliberately keeps the model ELIGIBLE
+ * long-term (traffic patterns change), so the suppression is windowed, not
+ * permanent.
+ */
+declare const ROLLBACK_SUPPRESSION_WINDOW_DAYS = 28;
+/**
+ * alpha.78 (PB Finding 3) — sync reader: did the promotion guard recently
+ * roll back `model` on `(appId, archetype)`? The cost advisor consults this
+ * so it stops recommending "exactly the downswap your own machinery
+ * auto-reverted three days ago" — an advisory acting on it would
+ * re-litigate a decision the guard already made correctly. Same SWR
+ * posture as `getApplicablePromotion`: cold/unconfigured → undefined
+ * (advisor proceeds without rollback knowledge, as before alpha.78).
+ */
+declare function getRecentRollback(opts: {
+    appId: string;
+    archetype: IntentArchetypeName | string;
+    model: string;
+    windowDays?: number;
+    nowMs?: number;
+}): PromotionRow | undefined;
 /** Reset module state. Tests must call between cases. */
 declare function _testResetPromotions(): void;
 /** Wait for any in-flight refresh to settle. */
@@ -3141,11 +3249,30 @@ interface MeasuredFailureVerdict {
     n: number;
     nFail: number;
 }
+/**
+ * alpha.78 — public row normalizer (PB 2026-07-25 trap): the counts
+ * endpoint speaks snake_case (`intent_archetype`, `n_fail`) and this module
+ * speaks camelCase. A consumer reproducing a gate decision by hand from the
+ * endpoint previously got a silent `gated: false` — `wilsonLowerBound(
+ * undefined, 13)` returns a clean 0 rather than throwing. Exported so the
+ * bridge exists exactly once.
+ */
+declare function mapMeasuredFailureRows(rows: unknown[]): SurfaceFailureRow[];
 /**
  * Pure decision, exported for tests and for the advisory text. Separated
  * from the I/O so the policy can be exercised without a brain.
+ *
+ * alpha.78 — accepts BOTH row shapes: the module's camelCase
+ * `SurfaceFailureRow` and the counts endpoint's raw snake_case row. A
+ * snake_case row previously slipped through the type system (all fields
+ * `undefined`) and judged `gated: false` silently.
  */
-declare function judgeMeasuredFailure(row: SurfaceFailureRow | undefined, cfg?: typeof MEASURED_FAILURE_CFG): MeasuredFailureVerdict | undefined;
+declare function judgeMeasuredFailure(row: SurfaceFailureRow | {
+    intent_archetype: string;
+    model: string;
+    n: number | string;
+    n_fail: number | string;
+} | undefined, cfg?: typeof MEASURED_FAILURE_CFG): MeasuredFailureVerdict | undefined;
 interface MeasuredFailureRuntime {
     /** Endpoint base URL. The library appends `?app_id=<id>`. */
     endpoint: string;
@@ -3404,4 +3531,4 @@ declare function planDecomposition(args: PlanDecompositionArgs): DecompositionPl
  */
 declare function compile(ir: PromptIR, opts?: CompileOptions): CompileResult;
 
-export { ABSOLUTE_FLOOR, type AISDKConvertedMessage, ARCHETYPE_FAMILY_FITS, ARCHETYPE_FLOOR_DEFAULT, type ActionableAdvisory, Adapter, type AdvisoryResolutionSource, type AdvisorySeverity, type AdvisoryStatus, type AdvisorySuggestedFix, ApiKeys, type AppOracle, type ApplySectionRewritesArgs, type ApplySectionRewritesResult, ArchetypeConvention, type ArchetypeFamilyFit, type ArchetypePerfMap, type ArchetypePerfNMap, type ArchetypePerfScoreResult, type AttachCacheControlResult, BestPracticeAdvisory, type BrainConfig, type BrainDeadLetterEntry, type BrainHealthSnapshot, type BrainQueryConfig, type BrainReadEnv, COACH_CFG, CallOptions, CallResult, ChainEntry, type CompatibilityIntent, type CompileForAISDKv6Result, type CompileOptions, CompilePolicy, CompileResult, CompiledRequest, DECOMPOSITION_TEMPLATES, DECOMPOSITION_TEMPLATES_VERSION, DEFAULT_FINDINGS_ENDPOINT, DEFAULT_MEASURED_FAILURE_ENDPOINT, DEFAULT_PROMOTIONS_ENDPOINT, DISCIPLINE_GATES_V1_ALT_HEADER, type DecompositionPlan, type DecompositionStep, type DecompositionTemplate, type ExclusionFindingRow, type ExclusionResolutionSource, type ExecuteErr, type ExecuteOk, type ExecuteOptions, type ExecuteResult, type ExecutorCandidate, type FallbackPosture, FallbackReason, FamilyResolutionError, type GetActionableAdvisoriesOptions, type GetApplicablePromotionOpts, type GetDefaultFallbackChainOpts, type GetMeasuredFailureOpts, type GetPerAxisMetricsOpts, type GetRecommendedPrimaryOptions, type GoldenEvalAxis, type GoldenEvalCase, type GoldenEvalOptions, type GoldenEvalRunResult, type GoldenEvalStrategyId, type GoldenIrRecordInput, Grounding, IntentArchetypeName, JUDGE_RUBRICS, LIBRARY_VERSION, type LLMJudgeOptions, MEASURED_FAILURE_CFG, MEASURED_GROUNDING_MIN_N, type MarkAdvisoryResolvedOptions, type MarkExclusionFindingHandledOptions, type MarkPromoteReadyHandledOptions, type MeasuredFailureRuntime, type MeasuredFailureVerdict, type ModelBrainRow, type ModelCompatibility, ModelProfile, NormalizedResponse, type OracleContext, OracleScore, type OutcomePayload, OutcomeResult, OutputMode, PRODUCER_OWNED_RULE_CODES, PROVIDER_ENV_KEYS, PerAxisMetrics, type PlannedStep, type PricingRow, type ProbeShadowOptions, type ProbeShadowServed, type ProfileToRowOptions, type PromoteReadyFindingRow, type PromoteReadyResolution, type PromotionRow, type PromotionsRuntime, PromptIR, Provider, ProviderOverrides, type ProviderReachability, RULE_DISCIPLINE_GATES_V1, RULE_DISCIPLINE_GATES_V1_STRUCTURED, RULE_SEQUENTIAL_TOOL_CLIFF, type ReachabilityOpts, RecordInput, RecordOutcomeInput, type RunAdvisorPhase2Context, STRATEGY_AUTHORSHIP_LIMITATION, SectionRewrite, type ShadowProbeRecordInput, type StrategyAttribution, type StrategyAttributionResult, type StrategyOutcome, type SupportedProvider, type SurfaceFailureRow, type SurfaceStats, SystemModelMessage, TRANSLATOR_FLOOR, _testResetMeasuredFailure, _testResetPromotions, _testWaitForMeasuredFailureRefresh, _testWaitForPromotionsRefresh, altGatesBlockFor, applyArchetypeConvention, applySectionRewrites, attachCacheControlToStreamTextInput, awaitMeasuredFailureReady, brainHealth, buildGoldenIrRow, buildLLMJudge, buildPairwiseJudgePrompt, buildShadowProbeRow, call, classifyStrategyOutcome, clearBrain, combineOrderSwappedVerdicts, compile, compileForAISDKv6, configureBrain, configureMeasuredFailureBrain, configurePromotionsBrain, countTokens, deriveFamilyFromModelId, deriveOwnership, execute, findBetterFit, flushBrainDeadLetter, getActionableAdvisories, getAllStarterChains, getAllStarterChainsWithGrounding, getApplicablePromotion, getArchetypePerfScore, getDefaultFallbackChain, getDefaultFallbackChainWithGrounding, getMeasuredFailureVerdict, getModelCompatibility, getPerAxisMetrics, getReachabilityDiagnostic, getRecommendedPrimary, getSequentialStarterChain, getSequentialStarterChainWithGrounding, getStaleExclusionFindings, getStarterChain, getStarterChainWithGrounding, isAutoPromoteEnabledFromEnv, isBrainQueryActiveFor, isBrainSync, isExclusionFindingsBrainActive, isMeasuredFailureBrainActive, isMeasuredFailureGateEnabledFromEnv, isModelReachable, isPromotionsBrainActive, isProviderReachable, judgeMeasuredFailure, loadAliasesFromBrain, loadArchetypePerfFromBrain, loadArchetypePerfNFromBrain, loadChainsFromBrain, loadModelsFromBrain, loadPricingFromBrain, markAdvisoryResolved, markExclusionFindingHandled, markPromoteReadyHandled, parseJudgeVerdict, peekBrainDeadLetter, planDecomposition, prefetchMeasuredFailure, probeShadow, profileToRow, readBrainReadEnv, record, recordGoldenIr, recordOutcome, recordShadowProbe, renderIrForJudge, resetTokenizer, resolveConventionsForProfile, resolvePricingAt, resolveProviderKey, rubricFor, runAdvisor, runGoldenEval, runStrategyEvalWithAttribution, setTokenizer, wilsonLowerBound, withAltDisciplineContract, withDisciplineContract };
+export { ABSOLUTE_FLOOR, type AISDKConvertedMessage, ARCHETYPE_FAMILY_FITS, ARCHETYPE_FLOOR_DEFAULT, type ActionableAdvisory, Adapter, type AdvisoryResolutionSource, type AdvisorySeverity, type AdvisoryStatus, type AdvisorySuggestedFix, ApiKeys, type AppOracle, type ApplySectionRewritesArgs, type ApplySectionRewritesResult, ArchetypeConvention, type ArchetypeFamilyFit, type ArchetypePerfMap, type ArchetypePerfNMap, type ArchetypePerfScoreResult, type AttachCacheControlResult, BRAIN_READ_ENV_NAMES, BestPracticeAdvisory, type BrainConfig, type BrainDeadLetterEntry, type BrainHealthSnapshot, type BrainQueryConfig, type BrainReadEnv, COACH_CFG, CallOptions, CallResult, ChainEntry, type CompatibilityIntent, type CompileForAISDKv6Result, type CompileOptions, CompilePolicy, CompileResult, CompiledRequest, DECOMPOSITION_TEMPLATES, DECOMPOSITION_TEMPLATES_VERSION, DEFAULT_FINDINGS_ENDPOINT, DEFAULT_MEASURED_FAILURE_ENDPOINT, DEFAULT_PROMOTIONS_ENDPOINT, DISCIPLINE_GATES_V1_ALT_HEADER, type DecompositionPlan, type DecompositionStep, type DecompositionTemplate, type ExclusionFindingRow, type ExclusionResolutionSource, type ExecuteErr, type ExecuteOk, type ExecuteOptions, type ExecuteResult, type ExecutorCandidate, type FallbackPosture, FallbackReason, FamilyResolutionError, type GetActionableAdvisoriesOptions, type GetApplicablePromotionOpts, type GetDefaultFallbackChainOpts, type GetMeasuredFailureOpts, type GetPerAxisMetricsOpts, type GetRecommendedPrimaryOptions, type GoldenEvalAxis, type GoldenEvalCase, type GoldenEvalOptions, type GoldenEvalRunResult, type GoldenEvalStrategyId, type GoldenIrRecordInput, Grounding, IntentArchetypeName, JUDGE_RUBRICS, LIBRARY_VERSION, type LLMJudgeOptions, MEASURED_FAILURE_CFG, MEASURED_GROUNDING_MIN_N, type MarkAdvisoryResolvedOptions, type MarkExclusionFindingHandledOptions, type MarkPromoteReadyHandledOptions, type MeasuredFailureRuntime, type MeasuredFailureVerdict, type ModelBrainRow, type ModelCompatibility, ModelProfile, NormalizedResponse, type OracleContext, OracleScore, type OutcomePayload, OutcomeResult, OutputMode, PRODUCER_OWNED_RULE_CODES, PROVIDER_ENV_KEYS, PerAxisMetrics, type PlannedStep, type PricingRow, type ProbeShadowOptions, type ProbeShadowServed, type ProfileToRowOptions, type PromoteReadyFindingRow, type PromoteReadyResolution, type PromotionRow, type PromotionsRuntime, PromptIR, Provider, ProviderOverrides, type ProviderReachability, ROLLBACK_SUPPRESSION_WINDOW_DAYS, RULE_DISCIPLINE_GATES_V1, RULE_DISCIPLINE_GATES_V1_STRUCTURED, RULE_SEQUENTIAL_TOOL_CLIFF, type ReachabilityOpts, RecordInput, RecordOutcomeInput, type RunAdvisorPhase2Context, STRATEGY_AUTHORSHIP_LIMITATION, SectionRewrite, type ShadowProbeRecordInput, type StrategyAttribution, type StrategyAttributionResult, type StrategyOutcome, type SupportedProvider, type SurfaceFailureRow, type SurfaceStats, SystemModelMessage, TRANSLATOR_FLOOR, _testResetMeasuredFailure, _testResetPromotions, _testWaitForMeasuredFailureRefresh, _testWaitForPromotionsRefresh, altGatesBlockFor, applyArchetypeConvention, applySectionRewrites, attachCacheControlToStreamTextInput, awaitMeasuredFailureReady, brainHealth, buildGoldenIrRow, buildLLMJudge, buildPairwiseJudgePrompt, buildShadowProbeRow, call, classifyStrategyOutcome, clearBrain, combineOrderSwappedVerdicts, compile, compileForAISDKv6, configureBrain, configureMeasuredFailureBrain, configurePromotionsBrain, countTokens, deriveFamilyFromModelId, deriveOwnership, execute, findBetterFit, flushBrainDeadLetter, getActionableAdvisories, getAllStarterChains, getAllStarterChainsWithGrounding, getApplicablePromotion, getArchetypePerfScore, getDefaultFallbackChain, getDefaultFallbackChainWithGrounding, getMeasuredFailureVerdict, getModelCompatibility, getPerAxisMetrics, getReachabilityDiagnostic, getRecentRollback, getRecommendedPrimary, getSequentialStarterChain, getSequentialStarterChainWithGrounding, getStaleExclusionFindings, getStarterChain, getStarterChainWithGrounding, isAutoPromoteEnabledFromEnv, isBrainQueryActiveFor, isBrainSync, isExclusionFindingsBrainActive, isMeasuredFailureBrainActive, isMeasuredFailureGateEnabledFromEnv, isModelReachable, isPromotionsBrainActive, isProviderReachable, judgeMeasuredFailure, loadAliasesFromBrain, loadArchetypePerfFromBrain, loadArchetypePerfNFromBrain, loadChainsFromBrain, loadModelsFromBrain, loadPricingFromBrain, mapMeasuredFailureRows, markAdvisoryResolved, markExclusionFindingHandled, markPromoteReadyHandled, parseJudgeVerdict, peekBrainDeadLetter, planDecomposition, prefetchMeasuredFailure, probeShadow, profileToRow, readBrainReadEnv, record, recordGoldenIr, recordOutcome, recordShadowProbe, renderIrForJudge, resetTokenizer, resolveConventionsForProfile, resolvePricingAt, resolveProviderKey, rubricFor, runAdvisor, runGoldenEval, runStrategyEvalWithAttribution, setTokenizer, wilsonLowerBound, withAltDisciplineContract, withDisciplineContract };