@warmdrift/kgauto-compiler 2.0.0-alpha.77 → 2.0.0-alpha.79

package/dist/{chunk-GB7VJQ6C.mjs → chunk-DRYCOR6G.mjs}

@@ -1,5 +1,5 @@
 // src/version.ts
-var LIBRARY_VERSION = "2.0.0-alpha.77";
+var LIBRARY_VERSION = "2.0.0-alpha.79";
 
 // src/key-health.ts
 var JSON_HEADERS = { "Content-Type": "application/json" };

package/dist/{chunk-46U2NVOL.mjs → chunk-FT2FN6ZP.mjs}

@@ -1,6 +1,6 @@
 import {
   tryGetProfile
-} from "./chunk-N36LE3MK.mjs";
+} from "./chunk-VVRDFE6T.mjs";
 
 // src/brain-query.ts
 var FRESH_SNAPSHOT = {
@@ -323,6 +323,17 @@ function getReachabilityDiagnostic(opts = {}) {
   }
   return out;
 }
+var BRAIN_READ_ENV_NAMES = {
+  endpoint: "KGAUTO_V2_BRAIN_SUPABASE_URL",
+  jwt: "KGAUTO_V2_BRAIN_JWT",
+  anonKey: "KGAUTO_V2_BRAIN_ANON_KEY",
+  /** Accepted fallbacks, in resolution order after the canonical name. */
+  fallbacks: {
+    endpoint: ["KGAUTO_V2_BRAIN_URL"],
+    jwt: ["GLASSBOX_BRAIN_JWT"],
+    anonKey: []
+  }
+};
 function readBrainReadEnv(envSource = defaultEnv()) {
   const endpoint = readKeyValue(envSource.KGAUTO_V2_BRAIN_SUPABASE_URL) ?? readKeyValue(envSource.KGAUTO_V2_BRAIN_URL);
   const jwt = readKeyValue(envSource.KGAUTO_V2_BRAIN_JWT) ?? readKeyValue(envSource.GLASSBOX_BRAIN_JWT);
@@ -704,6 +715,7 @@ export {
   isProviderReachable,
   isModelReachable,
   getReachabilityDiagnostic,
+  BRAIN_READ_ENV_NAMES,
   readBrainReadEnv,
   isSameModelRetryEnabledFromEnv,
   loadChainsFromBrain,

package/dist/{chunk-N36LE3MK.mjs → chunk-VVRDFE6T.mjs}

@@ -363,6 +363,22 @@ var PROFILES_RAW = [
         threshold: 16,
         action: "drop_to_top_relevant",
         reason: "Haiku reliability degrades above ~16 tools"
+      },
+      {
+        // alpha.78 — the declared `structuredOutput: 'grammar'` does NOT
+        // hold on long-input summarize. MEASURED (brain, playbacksam):
+        // 21 disambiguated `structured_output_parse_failed` fallover rows
+        // 2026-07-22..27, tokens_in 12,280–31,450; PB's gate counted 20/20
+        // in-window failures. Clean traffic p50 sits at ~9K tokens_in, so
+        // 12K gates the failing band without touching the working one.
+        // Short-input summarize carries no failure evidence and stays
+        // ungated — this is why it's a cliff, not an archetype-wide
+        // `structuredOutputHint: 'avoid'`.
+        metric: "input_tokens",
+        threshold: 12e3,
+        action: "quality_gate_structured",
+        whenIntent: "summarize",
+        reason: "Structured-output parse failures at 100% in-window on long-input summarize (measured on playbacksam, 2026-07-25..27; haiku only led when input size made price dominate, then failed every time)."
       }
     ],
     costInputPer1m: 1,

package/dist/glassbox/index.d.mts

@@ -1,6 +1,6 @@
-import { G as GlassboxEvent } from '../types-Caq-hOIj.mjs';
-export { A as AdvisoryFiredData, C as CompileDoneData, a as CompileStartData, E as ExecuteAttemptData, b as ExecuteSuccessData, F as FallbackWalkedData, c as GLASSBOX_STREAM_TTL_MS, d as GlassboxEventKind, e as GlassboxPubSub } from '../types-Caq-hOIj.mjs';
-import '../ir-CRV1_taF.mjs';
+import { G as GlassboxEvent } from '../types-DpcAMmk-.mjs';
+export { A as AdvisoryFiredData, C as CompileDoneData, a as CompileStartData, E as ExecuteAttemptData, b as ExecuteSuccessData, F as FallbackWalkedData, c as GLASSBOX_STREAM_TTL_MS, d as GlassboxEventKind, e as GlassboxPubSub } from '../types-DpcAMmk-.mjs';
+import '../ir-BFwWhj2s.mjs';
 import '../dialect.mjs';
 
 /**

package/dist/glassbox/index.d.ts

@@ -1,6 +1,6 @@
-import { G as GlassboxEvent } from '../types-C5BX9bzi.js';
-export { A as AdvisoryFiredData, C as CompileDoneData, a as CompileStartData, E as ExecuteAttemptData, b as ExecuteSuccessData, F as FallbackWalkedData, c as GLASSBOX_STREAM_TTL_MS, d as GlassboxEventKind, e as GlassboxPubSub } from '../types-C5BX9bzi.js';
-import '../ir-C02EIElQ.js';
+import { G as GlassboxEvent } from '../types-B4kz3Vs0.js';
+export { A as AdvisoryFiredData, C as CompileDoneData, a as CompileStartData, E as ExecuteAttemptData, b as ExecuteSuccessData, F as FallbackWalkedData, c as GLASSBOX_STREAM_TTL_MS, d as GlassboxEventKind, e as GlassboxPubSub } from '../types-B4kz3Vs0.js';
+import '../ir-DZKS1tI7.js';
 import '../dialect.js';
 
 /**

package/dist/glassbox-routes/format.d.mts

@@ -1,5 +1,5 @@
-import { T as TraceHealth } from '../types-3WdGMqin.mjs';
-import '../ir-CRV1_taF.mjs';
+import { T as TraceHealth } from '../types-hjzSWxtv.mjs';
+import '../ir-BFwWhj2s.mjs';
 import '../dialect.mjs';
 
 /**

package/dist/glassbox-routes/format.d.ts

@@ -1,5 +1,5 @@
-import { T as TraceHealth } from '../types-CkRvjxrI.js';
-import '../ir-C02EIElQ.js';
+import { T as TraceHealth } from '../types-D_fLt_Xv.js';
+import '../ir-DZKS1tI7.js';
 import '../dialect.js';
 
 /**

package/dist/glassbox-routes/index.d.mts

@@ -1,7 +1,7 @@
-import { G as GlassboxEvent } from '../types-Caq-hOIj.mjs';
-import { a as TraceDetail, b as TraceSummary, c as TraceCounterfactual } from '../types-3WdGMqin.mjs';
-export { A as AdvisoryRecord, T as TraceHealth, d as TraceSectionRewrite } from '../types-3WdGMqin.mjs';
-import '../ir-CRV1_taF.mjs';
+import { G as GlassboxEvent } from '../types-DpcAMmk-.mjs';
+import { a as TraceDetail, b as TraceSummary, c as TraceCounterfactual } from '../types-hjzSWxtv.mjs';
+export { A as AdvisoryRecord, T as TraceHealth, d as TraceSectionRewrite } from '../types-hjzSWxtv.mjs';
+import '../ir-BFwWhj2s.mjs';
 import '../dialect.mjs';
 
 /**

package/dist/glassbox-routes/index.d.ts

@@ -1,7 +1,7 @@
-import { G as GlassboxEvent } from '../types-C5BX9bzi.js';
-import { a as TraceDetail, b as TraceSummary, c as TraceCounterfactual } from '../types-CkRvjxrI.js';
-export { A as AdvisoryRecord, T as TraceHealth, d as TraceSectionRewrite } from '../types-CkRvjxrI.js';
-import '../ir-C02EIElQ.js';
+import { G as GlassboxEvent } from '../types-B4kz3Vs0.js';
+import { a as TraceDetail, b as TraceSummary, c as TraceCounterfactual } from '../types-D_fLt_Xv.js';
+export { A as AdvisoryRecord, T as TraceHealth, d as TraceSectionRewrite } from '../types-D_fLt_Xv.js';
+import '../ir-DZKS1tI7.js';
 import '../dialect.js';
 
 /**

package/dist/glassbox-routes/index.js

@@ -417,6 +417,22 @@ var PROFILES_RAW = [
         threshold: 16,
         action: "drop_to_top_relevant",
         reason: "Haiku reliability degrades above ~16 tools"
+      },
+      {
+        // alpha.78 — the declared `structuredOutput: 'grammar'` does NOT
+        // hold on long-input summarize. MEASURED (brain, playbacksam):
+        // 21 disambiguated `structured_output_parse_failed` fallover rows
+        // 2026-07-22..27, tokens_in 12,280–31,450; PB's gate counted 20/20
+        // in-window failures. Clean traffic p50 sits at ~9K tokens_in, so
+        // 12K gates the failing band without touching the working one.
+        // Short-input summarize carries no failure evidence and stays
+        // ungated — this is why it's a cliff, not an archetype-wide
+        // `structuredOutputHint: 'avoid'`.
+        metric: "input_tokens",
+        threshold: 12e3,
+        action: "quality_gate_structured",
+        whenIntent: "summarize",
+        reason: "Structured-output parse failures at 100% in-window on long-input summarize (measured on playbacksam, 2026-07-25..27; haiku only led when input size made price dominate, then failed every time)."
       }
     ],
     costInputPer1m: 1,

package/dist/glassbox-routes/index.mjs

@@ -1,10 +1,10 @@
 import {
   ARCHETYPE_FLOOR_DEFAULT,
   getDefaultFallbackChain
-} from "../chunk-46U2NVOL.mjs";
+} from "../chunk-FT2FN6ZP.mjs";
 import {
   tryGetProfile
-} from "../chunk-N36LE3MK.mjs";
+} from "../chunk-VVRDFE6T.mjs";
 import {
   subscribe,
   subscribeApp

package/dist/glassbox-routes/react/index.d.mts

@@ -1,6 +1,6 @@
 import * as react_jsx_runtime from 'react/jsx-runtime';
-import { a as TraceDetail } from '../../types-3WdGMqin.mjs';
-import '../../ir-CRV1_taF.mjs';
+import { a as TraceDetail } from '../../types-hjzSWxtv.mjs';
+import '../../ir-BFwWhj2s.mjs';
 import '../../dialect.mjs';
 
 /**

package/dist/glassbox-routes/react/index.d.ts

@@ -1,6 +1,6 @@
 import * as react_jsx_runtime from 'react/jsx-runtime';
-import { a as TraceDetail } from '../../types-CkRvjxrI.js';
-import '../../ir-C02EIElQ.js';
+import { a as TraceDetail } from '../../types-D_fLt_Xv.js';
+import '../../ir-DZKS1tI7.js';
 import '../../dialect.js';
 
 /**

package/dist/index.d.mts

@@ -1,5 +1,5 @@
-import { C as CompilePolicy, N as NormalizedResponse, A as ApiKeys, P as ProviderOverrides, a as CompiledRequest, b as PromptIR, c as CallOptions, d as CallResult, S as SystemModelMessage, e as CompileResult, B as BestPracticeAdvisory, F as FallbackReason, f as SectionRewrite, R as RecordInput, g as RecordOutcomeInput, O as OutcomeResult, h as OracleScore, i as Adapter, j as PerAxisMetrics, k as Provider, l as ChainEntry, G as Grounding } from './ir-CRV1_taF.mjs';
-export { m as CallAttempt, n as CallError, o as ChainModelEntry, p as ChainWithGrounding, q as Constraints, E as EffortLevel, r as GoldenCaptureOptions, H as HistoryCachePolicy, I as IntentDeclaration, M as Message, s as MutationApplied, t as NormalizedTokens, u as OutcomeKind, v as PerAxisMetricsByModel, w as PromptSection, x as SectionKind, y as ShadowProbeConfig, T as ToolCall, z as ToolDefinition, D as captureGoldenIr, J as parseGoldenCaptureRate, K as resolveGoldenCaptureRate, L as shouldCaptureGolden } from './ir-CRV1_taF.mjs';
+import { C as CompilePolicy, N as NormalizedResponse, A as ApiKeys, P as ProviderOverrides, a as CompiledRequest, b as PromptIR, c as CallOptions, d as CallResult, S as SystemModelMessage, e as CompileResult, B as BestPracticeAdvisory, F as FallbackReason, f as SectionRewrite, R as RecordInput, g as RecordOutcomeInput, O as OutcomeResult, h as OracleScore, i as Adapter, j as PerAxisMetrics, k as Provider, l as ChainEntry, G as Grounding } from './ir-BFwWhj2s.mjs';
+export { m as CallAttempt, n as CallError, o as ChainModelEntry, p as ChainWithGrounding, q as Constraints, E as EffortLevel, r as GoldenCaptureOptions, H as HistoryCachePolicy, I as IntentDeclaration, M as Message, s as MutationApplied, t as NormalizedTokens, u as OutcomeKind, v as PerAxisMetricsByModel, w as PromptSection, x as SectionKind, y as ShadowProbeConfig, T as ToolCall, z as ToolDefinition, D as captureGoldenIr, J as hasMutation, K as mutationId, L as parseGoldenCaptureRate, Q as resolveGoldenCaptureRate, U as shouldCaptureGolden } from './ir-BFwWhj2s.mjs';
 import { ModelProfile, ArchetypeConvention } from './profiles.mjs';
 export { ALIASES, CacheStrategy, CliffRule, LATENCY_TIER_MS, LatencyTier, LoweringSpec, RecoveryRule, StructuredOutputCapability, SystemPromptMode, allProfiles, getProfile, latencyTierOf, profilesByProvider, tryGetProfile } from './profiles.mjs';
 export { BrainForwardConfig, BrainForwardRoutes, createBrainForwardRoutes } from './brain-proxy.mjs';
@@ -74,6 +74,20 @@ interface ExecuteOptions {
      * and `!opts.noStream`.
      */
     onChunk?: (chunk: string) => void;
+    /**
+     * alpha.78 — abort signal for the provider fetch. call() composes
+     * `AbortSignal.timeout(attemptTimeoutMs)` with the caller's own
+     * `CallOptions.abortSignal`; direct execute() consumers may pass anything.
+     * TimeoutError reasons classify retryable `timeout` (chain walks);
+     * AbortError reasons classify terminal `aborted` (caller cancelled).
+     */
+    signal?: AbortSignal;
+    /**
+     * alpha.78 — per-chunk stall bound, streaming paths only (see
+     * StreamingOptions.stallTimeoutMs). Ignored on non-streaming requests,
+     * where `signal` carries the total attempt bound instead.
+     */
+    stallTimeoutMs?: number;
 }
 interface ExecuteOk {
     ok: true;
@@ -343,7 +357,20 @@ interface CompileForAISDKv6Result {
     historyCacheMarkIndex?: number;
     /** Compile handle — pass to `record()` after the call. */
     handle: string;
-    /** Mutation ids the compiler fired (informational). */
+    /**
+     * Mutation ids the compiler fired (informational).
+     *
+     * ⚠️ alpha.78 — element type differs BY SURFACE: this adapter carries
+     * `string[]` (ids), while `CompileResult`/`CallResult.mutationsApplied`
+     * carry `MutationApplied[]` (objects with `description`, `rankDelta`, …).
+     * Coding to one surface's type while reading the other's runtime is a
+     * silent false negative (PB 2026-07-25). Use the shape-proof helpers
+     * `mutationId(m)` / `hasMutation(list, 'quality-gate-measured-*')` from
+     * the package root instead of `typeof` checks. Neither element type can
+     * change without breaking a live consumer (tt-intel joins these ids;
+     * object readers want `description`), so the divergence is documented
+     * rather than unified.
+     */
     mutationsApplied: string[];
     /** Best-practice advisories (alpha.6). Empty when none fired. */
     advisories: BestPracticeAdvisory[];
@@ -1119,7 +1146,7 @@ declare function runStrategyEvalWithAttribution(opts: Omit<GoldenEvalOptions, 'a
  * guard in `tests/version.test.ts` fails the suite (and therefore
  * `prepublishOnly`) when they diverge — a stale constant cannot reach npm.
  */
-declare const LIBRARY_VERSION = "2.0.0-alpha.77";
+declare const LIBRARY_VERSION = "2.0.0-alpha.79";
 
 /**
  * Oracle contract — how an app tells the brain whether a response was good.
@@ -1223,6 +1250,155 @@ declare function resetTokenizer(): void;
  */
 declare function countTokens(text: string): number;
 
+/**
+ * delegate — Release D, the R2 primitive (delegation-fanout accelerator §5.2,
+ * design contract advisory/kgauto/2026-07-24_delegation-fanout-accelerator-design.md).
+ *
+ * A consumer-mountable TOOL the orchestrating model calls mid-loop:
+ * `{ sub_archetype, input, quality_floor? }`. kgauto selects the executor
+ * from evidence, runs the sub-call through the compiler + call(), returns
+ * the result into the loop, links parent↔child rows (R0), and enforces
+ * `policy.maxCostPerTraceUsd` against the running trace spend — the field
+ * that shipped INERT in Release A precisely so this release could turn it on.
+ *
+ * THE AUTHORITY SPLIT IS THE CONTAINMENT (§3):
+ *   - the MODEL decides whether and what to delegate (kgauto never
+ *     decomposes uninvited — §10);
+ *   - KGAUTO decides only who runs it — and never selects a model absent
+ *     from the consumer's declared `ir.models`;
+ *   - the CONSUMER consents: default OFF, `KGAUTO_AUTO_PROMOTE` posture
+ *     (explicit option beats `KGAUTO_DELEGATE` env; neither ⇒ the handler
+ *     refuses observably, never silently).
+ *
+ * Budget refusals and floor refusals are RETURNED to the model as
+ * structured tool results, never thrown — the orchestrator must be able to
+ * compose with what it has (a refusal mid-loop that crashes the loop would
+ * convert a budget into an outage).
+ *
+ * Composition-verification (§7a): every sub-result is 'trusted' until the
+ * orchestrator/consumer reports otherwise via `reportComposition` —
+ * absence-of-report IS the recorded state (migration 052). Rung 3 reads
+ * this to attribute composition failures to stitching, not executor choice.
+ *
+ * Trace-budget honesty (v1 limits, stated where consumers read):
+ *   - the in-process ledger sums DELEGATED spend for this trace (parent's
+ *     own root-call spend is not visible to a library ledger until a
+ *     brain-informed ledger lands; documented on `maxCostPerTraceUsd`);
+ *   - enforcement is estimate-ahead: a sub-call whose compile-time estimate
+ *     would cross the ceiling is refused BEFORE any spend;
+ *   - realized spend is computed from actual tokens × the executor
+ *     profile's prices after each sub-call.
+ */
+
+declare function isDelegateEnabledFromEnv(envSource?: Record<string, string | undefined>): boolean;
+/** Arguments the ORCHESTRATING MODEL supplies when it calls the tool. */
+interface DelegateToolArgs {
+    /** The sub-task's archetype — its own learning_key downstream. */
+    sub_archetype: IntentArchetypeName | string;
+    /** Complete, self-contained sub-task input. The model owns fidelity here
+     *  (authority split): kgauto runs exactly what it is handed. */
+    input: string;
+    /**
+     * Minimum archetype-perf score (0..10) the executor must carry for this
+     * sub-archetype. Candidates below the floor are excluded BEFORE ranking;
+     * if nothing in the parent's declared pool clears it, the tool refuses
+     * with the scores so the model can lower the floor or do the work itself.
+     */
+    quality_floor?: number;
+}
+type DelegateRefusalReason = 'delegate_not_enabled' | 'invalid_sub_archetype' | 'no_qualified_executor' | 'trace_budget_exhausted' | 'call_failed';
+type DelegateResult = {
+    ok: true;
+    /** The sub-result text (or serialized structured output). */
+    output: string;
+    /** Branch handle — pass to reportComposition; joins the brain row. */
+    subHandle: string;
+    executorModel: string;
+    costUsd: number;
+    latencyMs: number;
+    /** Always 'trusted' at return time — flips only via reportComposition. */
+    verification: 'trusted';
+} | {
+    ok: false;
+    reason: DelegateRefusalReason;
+    /** Human/model-readable detail — written to be COMPOSABLE (“continue
+     *  without this sub-result”), never a stack trace. */
+    detail: string;
+};
+/**
+ * Provider-agnostic tool definition. Consumers adapt `inputSchema` to their
+ * SDK's tool shape (AI-SDK `parameters`, Anthropic `input_schema`, …). The
+ * description IS prompt surface — it teaches the model the authority split
+ * and the compose-on-refusal discipline (gates 4/5 of discipline-gates-v1
+ * in tool-description form).
+ */
+declare const DELEGATE_TOOL_DEFINITION: {
+    readonly name: "delegate";
+    readonly description: string;
+    readonly inputSchema: {
+        readonly type: "object";
+        readonly properties: {
+            readonly sub_archetype: {
+                readonly type: "string";
+                readonly enum: ("ask" | "hunt" | "classify" | "summarize" | "generate" | "extract" | "plan" | "critique" | "transform" | "judge")[];
+                readonly description: "What kind of work the sub-task is (its routing archetype).";
+            };
+            readonly input: {
+                readonly type: "string";
+                readonly description: "Complete, self-contained sub-task input. Include everything the executor needs — it sees nothing else.";
+            };
+            readonly quality_floor: {
+                readonly type: "number";
+                readonly minimum: 0;
+                readonly maximum: 10;
+                readonly description: "Optional minimum executor quality score (0-10) for this archetype. Omit to accept the evidence-ranked default.";
+            };
+        };
+        readonly required: readonly ["sub_archetype", "input"];
+        readonly additionalProperties: false;
+    };
+};
+interface CreateDelegateOpts {
+    /** The PARENT call's IR — supplies the declared model pool (the containment
+     *  boundary), appId, and dialect context. */
+    parentIr: PromptIR;
+    /** The parent's compile/call handle — R0 linkage root. Branch rows record
+     *  `parent_handle=<this>` and inherit `trace_id`. */
+    parentHandle: string;
+    /**
+     * Options forwarded to the sub-`call()` (apiKeys, fetchImpl,
+     * attemptTimeoutMs, policy…). `policy.maxCostPerTraceUsd` here is what the
+     * ledger enforces. `parentHandle` is set by the factory — a value passed
+     * in callOpts is overridden.
+     */
+    callOpts?: CallOptions & {
+        policy?: CompilePolicy;
+    };
+    /** Explicit consent — beats KGAUTO_DELEGATE env (AUTO_PROMOTE posture). */
+    enabled?: boolean;
+}
+interface DelegateHandle {
+    toolDefinition: typeof DELEGATE_TOOL_DEFINITION;
+    handler: (args: DelegateToolArgs) => Promise<DelegateResult>;
+    /**
+     * §7a — report what the orchestrator did with a sub-result. Writes a
+     * migration-052 row via the brain-read env trio (RLS-scoped to appId).
+     * Unreported sub-results are 'trusted' by definition — report only
+     * 'verified' and 'discarded'.
+     */
+    reportComposition: (report: {
+        subHandle: string;
+        disposition: 'verified' | 'discarded';
+        note?: string;
+    }) => Promise<{
+        ok: boolean;
+        reason?: string;
+    }>;
+    /** Ledger introspection: delegated spend recorded for this trace so far. */
+    traceSpendUsd: () => number;
+}
+declare function createDelegate(opts: CreateDelegateOpts): DelegateHandle;
+
 /**
  * archetype-fits — alpha.43.
  *
@@ -1651,18 +1827,30 @@ interface GetActionableAdvisoriesOptions {
     severity?: AdvisorySeverity;
     /** Status filter; defaults to 'open'. Pass 'all' for the full set. */
     status?: 'open' | 'snoozed' | 'resolved' | 'all';
-    brainEndpoint: string;
-    brainJwt: string;
-    brainAnonKey: string;
+    /**
+     * alpha.78 (PB adoption-gap ask 2): the trio now DEFAULTS from
+     * `readBrainReadEnv()` when omitted, so a consumer that passes nothing
+     * gets correct behavior from the canonical env names instead of a
+     * self-authored config error. Explicit values still win.
+     */
+    brainEndpoint?: string;
+    brainJwt?: string;
+    brainAnonKey?: string;
     fetch?: typeof fetch;
 }
 interface MarkAdvisoryResolvedOptions {
     /** Stable id from a prior `getActionableAdvisories` call. */
     id: string;
     resolutionNote?: string;
-    brainEndpoint: string;
-    brainJwt: string;
-    brainAnonKey: string;
+    /**
+     * alpha.78 (PB adoption-gap ask 2): the trio now DEFAULTS from
+     * `readBrainReadEnv()` when omitted, so a consumer that passes nothing
+     * gets correct behavior from the canonical env names instead of a
+     * self-authored config error. Explicit values still win.
+     */
+    brainEndpoint?: string;
+    brainJwt?: string;
+    brainAnonKey?: string;
     fetch?: typeof fetch;
 }
 /**
@@ -1686,8 +1874,10 @@ declare function getActionableAdvisories(opts: GetActionableAdvisoriesOptions):
  * Lookup strategy:
  *   1. Query `actionable_advisories_v?id=eq.<id>` to find the (app_id, code)
  *      tuple for this advisory.
- *   2. PATCH the latest unresolved firing in `compile_outcome_advisories`
- *      matching that tuple via the underlying outcome's app_id.
+ *   2. PATCH EVERY unresolved firing in `compile_outcome_advisories`
+ *      matching that tuple via the underlying outcome's app_id. (One call
+ *      closes the whole rollup — the alpha.71-era docblock said "latest
+ *      firing", which was never what the code did; corrected alpha.78.)
  *
  * The (app_id, code) lookup is necessary because `compile_outcome_advisories`
  * has no `app_id` column — it inherits scope via the FK to compile_outcomes.
@@ -1696,16 +1886,27 @@ declare function getActionableAdvisories(opts: GetActionableAdvisoriesOptions):
  * acceptable because marks are low-frequency operator actions, not per-call
  * hot path.
  *
- * Idempotent re-marks: if the advisory is already resolved (no unresolved
- * firings match), the PATCH affects zero rows and the call still returns
- * `ok: true`. The function returns `ok: false` only on transport / auth /
- * lookup failures.
+ * alpha.78 envelope (PB `resolve-envelope-cannot-close-a-rollup`, 2026-07-25):
+ * the return now reports WHAT HAPPENED, not that the request was received —
+ * `firingsResolved` is the count of rows this call actually flipped, and
+ * `status` is the rollup's state after the write. PB measured the old
+ * `ok: true` live against prod: the PATCH was being RLS-filtered to zero
+ * rows (consumer JWTs had read-grant but no update-grant — migration 049
+ * adds it) and the envelope reported success anyway. "When an API can
+ * succeed without doing anything, the return value should distinguish those
+ * cases" — this is that distinction. `firingsResolved: 0, status: 'open'`
+ * on a rollup you expected to close now points at the write grant.
+ *
+ * Idempotent re-marks stay ok: an already-resolved advisory returns
+ * `{ ok: true, firingsResolved: 0, status: 'resolved' }`.
  *
  * Returns ok/reason envelope (vs throwing) because consumer Admin UIs
  * typically want to render the failure inline rather than crash.
  */
 declare function markAdvisoryResolved(opts: MarkAdvisoryResolvedOptions): Promise<{
     ok: true;
+    firingsResolved: number;
+    status: 'open' | 'resolved' | 'unknown';
 } | {
     ok: false;
     reason: string;
@@ -1748,14 +1949,17 @@ interface MarkExclusionFindingHandledOptions {
      *  digests + dashboards alongside the resolution_source. */
     resolutionNote?: string;
     /** Brain Supabase URL base (e.g. `https://<project>.supabase.co`). The
-     *  function appends `/rest/v1/exclusion_findings?...`. */
-    brainEndpoint: string;
+     *  function appends `/rest/v1/exclusion_findings?...`.
+     *  alpha.78: defaults from `readBrainReadEnv()` when omitted. */
+    brainEndpoint?: string;
     /** Consumer-scoped JWT carrying the `app_id` claim. The brain's RLS
      *  policy enforces that the JWT's app_id matches the finding's app_id;
-     *  cross-tenant writes fail at the database layer regardless of input. */
-    brainJwt: string;
-    /** Supabase anon key for the `apikey` header (PostgREST requires it). */
-    brainAnonKey: string;
+     *  cross-tenant writes fail at the database layer regardless of input.
+     *  alpha.78: defaults from `readBrainReadEnv()` when omitted. */
+    brainJwt?: string;
+    /** Supabase anon key for the `apikey` header (PostgREST requires it).
+     *  alpha.78: defaults from `readBrainReadEnv()` when omitted. */
+    brainAnonKey?: string;
     /** Injected fetch for tests. Defaults to global fetch. */
     fetch?: typeof fetch;
 }
@@ -2153,6 +2357,23 @@ interface BrainReadEnv {
      */
     missingEnv: string[];
 }
+/**
+ * alpha.78 (PB adoption-gap ask 2) — the canonical brain-read env names as
+ * an exported constant, so consumers reference them instead of retyping
+ * (PB invented three plausible-but-wrong names and carried the resulting
+ * self-authored 503 for two months).
+ */
+declare const BRAIN_READ_ENV_NAMES: {
+    readonly endpoint: "KGAUTO_V2_BRAIN_SUPABASE_URL";
+    readonly jwt: "KGAUTO_V2_BRAIN_JWT";
+    readonly anonKey: "KGAUTO_V2_BRAIN_ANON_KEY";
+    /** Accepted fallbacks, in resolution order after the canonical name. */
+    readonly fallbacks: {
+        readonly endpoint: readonly ["KGAUTO_V2_BRAIN_URL"];
+        readonly jwt: readonly ["GLASSBOX_BRAIN_JWT"];
+        readonly anonKey: readonly [];
+    };
+};
 /**
  * Resolve brain-read env vars. Defaults to `process.env`; pass `envSource`
  * for hermetic tests. Trims surrounding whitespace and treats
@@ -2984,6 +3205,18 @@ interface PromotionRow {
     suppressQualityGate: boolean;
     /** ISO timestamp the promotion went active. */
     promotedAt: string;
+    /**
+     * alpha.78 — lifecycle status. The endpoint serves rolled_back rows only
+     * when the library asks (`with_rollbacks=1`), so pre-.78 clients can
+     * never receive one. Every reader that APPLIES a promotion must filter
+     * to 'active'; rolled_back rows exist so advisors can see what the guard
+     * already adjudicated instead of re-recommending it (PB Finding 3).
+     */
+    status: 'active' | 'rolled_back';
+    /** ISO timestamp of the guard's revert, rolled_back rows only. */
+    rolledBackAt?: string;
+    /** Guard's classification ('latency' | 'economics' | 'strategy' | …). */
+    rollbackClass?: string;
 }
 interface PromotionsRuntime {
     /** Endpoint base URL. The library appends `?app_id=<id>`. */
@@ -3038,6 +3271,30 @@ interface GetApplicablePromotionOpts {
  * NEVER throws. Not configured / brain down / cold → undefined.
  */
 declare function getApplicablePromotion(opts: GetApplicablePromotionOpts): PromotionRow | undefined;
+/**
+ * alpha.78 — how long a guard rollback suppresses re-recommending the same
+ * model on the same surface. Matches the measured-failure evidence window:
+ * a `rollback_class='latency'` revert deliberately keeps the model ELIGIBLE
+ * long-term (traffic patterns change), so the suppression is windowed, not
+ * permanent.
+ */
+declare const ROLLBACK_SUPPRESSION_WINDOW_DAYS = 28;
+/**
+ * alpha.78 (PB Finding 3) — sync reader: did the promotion guard recently
+ * roll back `model` on `(appId, archetype)`? The cost advisor consults this
+ * so it stops recommending "exactly the downswap your own machinery
+ * auto-reverted three days ago" — an advisory acting on it would
+ * re-litigate a decision the guard already made correctly. Same SWR
+ * posture as `getApplicablePromotion`: cold/unconfigured → undefined
+ * (advisor proceeds without rollback knowledge, as before alpha.78).
+ */
+declare function getRecentRollback(opts: {
+    appId: string;
+    archetype: IntentArchetypeName | string;
+    model: string;
+    windowDays?: number;
+    nowMs?: number;
+}): PromotionRow | undefined;
 /** Reset module state. Tests must call between cases. */
 declare function _testResetPromotions(): void;
 /** Wait for any in-flight refresh to settle. */
@@ -3141,11 +3398,30 @@ interface MeasuredFailureVerdict {
     n: number;
     nFail: number;
 }
+/**
+ * alpha.78 — public row normalizer (PB 2026-07-25 trap): the counts
+ * endpoint speaks snake_case (`intent_archetype`, `n_fail`) and this module
+ * speaks camelCase. A consumer reproducing a gate decision by hand from the
+ * endpoint previously got a silent `gated: false` — `wilsonLowerBound(
+ * undefined, 13)` returns a clean 0 rather than throwing. Exported so the
+ * bridge exists exactly once.
+ */
+declare function mapMeasuredFailureRows(rows: unknown[]): SurfaceFailureRow[];
 /**
  * Pure decision, exported for tests and for the advisory text. Separated
  * from the I/O so the policy can be exercised without a brain.
+ *
+ * alpha.78 — accepts BOTH row shapes: the module's camelCase
+ * `SurfaceFailureRow` and the counts endpoint's raw snake_case row. A
+ * snake_case row previously slipped through the type system (all fields
+ * `undefined`) and judged `gated: false` silently.
  */
-declare function judgeMeasuredFailure(row: SurfaceFailureRow | undefined, cfg?: typeof MEASURED_FAILURE_CFG): MeasuredFailureVerdict | undefined;
+declare function judgeMeasuredFailure(row: SurfaceFailureRow | {
+    intent_archetype: string;
+    model: string;
+    n: number | string;
+    n_fail: number | string;
+} | undefined, cfg?: typeof MEASURED_FAILURE_CFG): MeasuredFailureVerdict | undefined;
 interface MeasuredFailureRuntime {
     /** Endpoint base URL. The library appends `?app_id=<id>`. */
     endpoint: string;
@@ -3404,4 +3680,4 @@ declare function planDecomposition(args: PlanDecompositionArgs): DecompositionPl
  */
 declare function compile(ir: PromptIR, opts?: CompileOptions): CompileResult;
 
-export { ABSOLUTE_FLOOR, type AISDKConvertedMessage, ARCHETYPE_FAMILY_FITS, ARCHETYPE_FLOOR_DEFAULT, type ActionableAdvisory, Adapter, type AdvisoryResolutionSource, type AdvisorySeverity, type AdvisoryStatus, type AdvisorySuggestedFix, ApiKeys, type AppOracle, type ApplySectionRewritesArgs, type ApplySectionRewritesResult, ArchetypeConvention, type ArchetypeFamilyFit, type ArchetypePerfMap, type ArchetypePerfNMap, type ArchetypePerfScoreResult, type AttachCacheControlResult, BestPracticeAdvisory, type BrainConfig, type BrainDeadLetterEntry, type BrainHealthSnapshot, type BrainQueryConfig, type BrainReadEnv, COACH_CFG, CallOptions, CallResult, ChainEntry, type CompatibilityIntent, type CompileForAISDKv6Result, type CompileOptions, CompilePolicy, CompileResult, CompiledRequest, DECOMPOSITION_TEMPLATES, DECOMPOSITION_TEMPLATES_VERSION, DEFAULT_FINDINGS_ENDPOINT, DEFAULT_MEASURED_FAILURE_ENDPOINT, DEFAULT_PROMOTIONS_ENDPOINT, DISCIPLINE_GATES_V1_ALT_HEADER, type DecompositionPlan, type DecompositionStep, type DecompositionTemplate, type ExclusionFindingRow, type ExclusionResolutionSource, type ExecuteErr, type ExecuteOk, type ExecuteOptions, type ExecuteResult, type ExecutorCandidate, type FallbackPosture, FallbackReason, FamilyResolutionError, type GetActionableAdvisoriesOptions, type GetApplicablePromotionOpts, type GetDefaultFallbackChainOpts, type GetMeasuredFailureOpts, type GetPerAxisMetricsOpts, type GetRecommendedPrimaryOptions, type GoldenEvalAxis, type GoldenEvalCase, type GoldenEvalOptions, type GoldenEvalRunResult, type GoldenEvalStrategyId, type GoldenIrRecordInput, Grounding, IntentArchetypeName, JUDGE_RUBRICS, LIBRARY_VERSION, type LLMJudgeOptions, MEASURED_FAILURE_CFG, MEASURED_GROUNDING_MIN_N, type MarkAdvisoryResolvedOptions, type MarkExclusionFindingHandledOptions, type MarkPromoteReadyHandledOptions, type MeasuredFailureRuntime, type MeasuredFailureVerdict, type ModelBrainRow, type ModelCompatibility, ModelProfile, NormalizedResponse, type OracleContext, OracleScore, type OutcomePayload, OutcomeResult, OutputMode, PRODUCER_OWNED_RULE_CODES, PROVIDER_ENV_KEYS, PerAxisMetrics, type PlannedStep, type PricingRow, type ProbeShadowOptions, type ProbeShadowServed, type ProfileToRowOptions, type PromoteReadyFindingRow, type PromoteReadyResolution, type PromotionRow, type PromotionsRuntime, PromptIR, Provider, ProviderOverrides, type ProviderReachability, RULE_DISCIPLINE_GATES_V1, RULE_DISCIPLINE_GATES_V1_STRUCTURED, RULE_SEQUENTIAL_TOOL_CLIFF, type ReachabilityOpts, RecordInput, RecordOutcomeInput, type RunAdvisorPhase2Context, STRATEGY_AUTHORSHIP_LIMITATION, SectionRewrite, type ShadowProbeRecordInput, type StrategyAttribution, type StrategyAttributionResult, type StrategyOutcome, type SupportedProvider, type SurfaceFailureRow, type SurfaceStats, SystemModelMessage, TRANSLATOR_FLOOR, _testResetMeasuredFailure, _testResetPromotions, _testWaitForMeasuredFailureRefresh, _testWaitForPromotionsRefresh, altGatesBlockFor, applyArchetypeConvention, applySectionRewrites, attachCacheControlToStreamTextInput, awaitMeasuredFailureReady, brainHealth, buildGoldenIrRow, buildLLMJudge, buildPairwiseJudgePrompt, buildShadowProbeRow, call, classifyStrategyOutcome, clearBrain, combineOrderSwappedVerdicts, compile, compileForAISDKv6, configureBrain, configureMeasuredFailureBrain, configurePromotionsBrain, countTokens, deriveFamilyFromModelId, deriveOwnership, execute, findBetterFit, flushBrainDeadLetter, getActionableAdvisories, getAllStarterChains, getAllStarterChainsWithGrounding, getApplicablePromotion, getArchetypePerfScore, getDefaultFallbackChain, getDefaultFallbackChainWithGrounding, getMeasuredFailureVerdict, getModelCompatibility, getPerAxisMetrics, getReachabilityDiagnostic, getRecommendedPrimary, getSequentialStarterChain, getSequentialStarterChainWithGrounding, getStaleExclusionFindings, getStarterChain, getStarterChainWithGrounding, isAutoPromoteEnabledFromEnv, isBrainQueryActiveFor, isBrainSync, isExclusionFindingsBrainActive, isMeasuredFailureBrainActive, isMeasuredFailureGateEnabledFromEnv, isModelReachable, isPromotionsBrainActive, isProviderReachable, judgeMeasuredFailure, loadAliasesFromBrain, loadArchetypePerfFromBrain, loadArchetypePerfNFromBrain, loadChainsFromBrain, loadModelsFromBrain, loadPricingFromBrain, markAdvisoryResolved, markExclusionFindingHandled, markPromoteReadyHandled, parseJudgeVerdict, peekBrainDeadLetter, planDecomposition, prefetchMeasuredFailure, probeShadow, profileToRow, readBrainReadEnv, record, recordGoldenIr, recordOutcome, recordShadowProbe, renderIrForJudge, resetTokenizer, resolveConventionsForProfile, resolvePricingAt, resolveProviderKey, rubricFor, runAdvisor, runGoldenEval, runStrategyEvalWithAttribution, setTokenizer, wilsonLowerBound, withAltDisciplineContract, withDisciplineContract };
+export { ABSOLUTE_FLOOR, type AISDKConvertedMessage, ARCHETYPE_FAMILY_FITS, ARCHETYPE_FLOOR_DEFAULT, type ActionableAdvisory, Adapter, type AdvisoryResolutionSource, type AdvisorySeverity, type AdvisoryStatus, type AdvisorySuggestedFix, ApiKeys, type AppOracle, type ApplySectionRewritesArgs, type ApplySectionRewritesResult, ArchetypeConvention, type ArchetypeFamilyFit, type ArchetypePerfMap, type ArchetypePerfNMap, type ArchetypePerfScoreResult, type AttachCacheControlResult, BRAIN_READ_ENV_NAMES, BestPracticeAdvisory, type BrainConfig, type BrainDeadLetterEntry, type BrainHealthSnapshot, type BrainQueryConfig, type BrainReadEnv, COACH_CFG, CallOptions, CallResult, ChainEntry, type CompatibilityIntent, type CompileForAISDKv6Result, type CompileOptions, CompilePolicy, CompileResult, CompiledRequest, type CreateDelegateOpts, DECOMPOSITION_TEMPLATES, DECOMPOSITION_TEMPLATES_VERSION, DEFAULT_FINDINGS_ENDPOINT, DEFAULT_MEASURED_FAILURE_ENDPOINT, DEFAULT_PROMOTIONS_ENDPOINT, DELEGATE_TOOL_DEFINITION, DISCIPLINE_GATES_V1_ALT_HEADER, type DecompositionPlan, type DecompositionStep, type DecompositionTemplate, type DelegateHandle, type DelegateRefusalReason, type DelegateResult, type DelegateToolArgs, type ExclusionFindingRow, type ExclusionResolutionSource, type ExecuteErr, type ExecuteOk, type ExecuteOptions, type ExecuteResult, type ExecutorCandidate, type FallbackPosture, FallbackReason, FamilyResolutionError, type GetActionableAdvisoriesOptions, type GetApplicablePromotionOpts, type GetDefaultFallbackChainOpts, type GetMeasuredFailureOpts, type GetPerAxisMetricsOpts, type GetRecommendedPrimaryOptions, type GoldenEvalAxis, type GoldenEvalCase, type GoldenEvalOptions, type GoldenEvalRunResult, type GoldenEvalStrategyId, type GoldenIrRecordInput, Grounding, IntentArchetypeName, JUDGE_RUBRICS, LIBRARY_VERSION, type LLMJudgeOptions, MEASURED_FAILURE_CFG, MEASURED_GROUNDING_MIN_N, type MarkAdvisoryResolvedOptions, type MarkExclusionFindingHandledOptions, type MarkPromoteReadyHandledOptions, type MeasuredFailureRuntime, type MeasuredFailureVerdict, type ModelBrainRow, type ModelCompatibility, ModelProfile, NormalizedResponse, type OracleContext, OracleScore, type OutcomePayload, OutcomeResult, OutputMode, PRODUCER_OWNED_RULE_CODES, PROVIDER_ENV_KEYS, PerAxisMetrics, type PlannedStep, type PricingRow, type ProbeShadowOptions, type ProbeShadowServed, type ProfileToRowOptions, type PromoteReadyFindingRow, type PromoteReadyResolution, type PromotionRow, type PromotionsRuntime, PromptIR, Provider, ProviderOverrides, type ProviderReachability, ROLLBACK_SUPPRESSION_WINDOW_DAYS, RULE_DISCIPLINE_GATES_V1, RULE_DISCIPLINE_GATES_V1_STRUCTURED, RULE_SEQUENTIAL_TOOL_CLIFF, type ReachabilityOpts, RecordInput, RecordOutcomeInput, type RunAdvisorPhase2Context, STRATEGY_AUTHORSHIP_LIMITATION, SectionRewrite, type ShadowProbeRecordInput, type StrategyAttribution, type StrategyAttributionResult, type StrategyOutcome, type SupportedProvider, type SurfaceFailureRow, type SurfaceStats, SystemModelMessage, TRANSLATOR_FLOOR, _testResetMeasuredFailure, _testResetPromotions, _testWaitForMeasuredFailureRefresh, _testWaitForPromotionsRefresh, altGatesBlockFor, applyArchetypeConvention, applySectionRewrites, attachCacheControlToStreamTextInput, awaitMeasuredFailureReady, brainHealth, buildGoldenIrRow, buildLLMJudge, buildPairwiseJudgePrompt, buildShadowProbeRow, call, classifyStrategyOutcome, clearBrain, combineOrderSwappedVerdicts, compile, compileForAISDKv6, configureBrain, configureMeasuredFailureBrain, configurePromotionsBrain, countTokens, createDelegate, deriveFamilyFromModelId, deriveOwnership, execute, findBetterFit, flushBrainDeadLetter, getActionableAdvisories, getAllStarterChains, getAllStarterChainsWithGrounding, getApplicablePromotion, getArchetypePerfScore, getDefaultFallbackChain, getDefaultFallbackChainWithGrounding, getMeasuredFailureVerdict, getModelCompatibility, getPerAxisMetrics, getReachabilityDiagnostic, getRecentRollback, getRecommendedPrimary, getSequentialStarterChain, getSequentialStarterChainWithGrounding, getStaleExclusionFindings, getStarterChain, getStarterChainWithGrounding, isAutoPromoteEnabledFromEnv, isBrainQueryActiveFor, isBrainSync, isDelegateEnabledFromEnv, isExclusionFindingsBrainActive, isMeasuredFailureBrainActive, isMeasuredFailureGateEnabledFromEnv, isModelReachable, isPromotionsBrainActive, isProviderReachable, judgeMeasuredFailure, loadAliasesFromBrain, loadArchetypePerfFromBrain, loadArchetypePerfNFromBrain, loadChainsFromBrain, loadModelsFromBrain, loadPricingFromBrain, mapMeasuredFailureRows, markAdvisoryResolved, markExclusionFindingHandled, markPromoteReadyHandled, parseJudgeVerdict, peekBrainDeadLetter, planDecomposition, prefetchMeasuredFailure, probeShadow, profileToRow, readBrainReadEnv, record, recordGoldenIr, recordOutcome, recordShadowProbe, renderIrForJudge, resetTokenizer, resolveConventionsForProfile, resolvePricingAt, resolveProviderKey, rubricFor, runAdvisor, runGoldenEval, runStrategyEvalWithAttribution, setTokenizer, wilsonLowerBound, withAltDisciplineContract, withDisciplineContract };