@warmdrift/kgauto-compiler 2.0.0-alpha.91 → 2.0.0-alpha.92

package/dist/{chunk-54IXD5BT.mjs → chunk-4G73BYES.mjs}

@@ -322,7 +322,8 @@ var SUPPORTED_PROVIDERS = Object.freeze([
   "openai",
   "deepseek",
   "zai",
-  "moonshot"
+  "moonshot",
+  "openrouter"
 ]);
 function isSupportedProvider(p) {
   return SUPPORTED_PROVIDERS.includes(p);
@@ -343,7 +344,11 @@ var PROVIDER_ENV_KEYS = Object.freeze({
   // alpha.65 — Moonshot AI (Kimi family). MOONSHOT_API_KEY is canonical
   // (api.moonshot.ai); KIMI_API_KEY covers the platform.kimi.ai rebrand
   // surface so consumers keyed under either name resolve.
-  moonshot: Object.freeze(["MOONSHOT_API_KEY", "KIMI_API_KEY"])
+  moonshot: Object.freeze(["MOONSHOT_API_KEY", "KIMI_API_KEY"]),
+  // alpha.92 — the OpenRouter gateway route (execute-leg contract). This is
+  // a ROUTE key, not a vendor key: it never makes a vendor "reachable" for
+  // chain composition — only explicit `route: 'openrouter'` calls use it.
+  openrouter: Object.freeze(["OPENROUTER_API_KEY"])
 });
 function defaultEnv() {
   return typeof process !== "undefined" && process.env ? process.env : {};

package/dist/{chunk-BVEXV5KC.mjs → chunk-FEMPY6EC.mjs}

@@ -91,6 +91,9 @@ function hashShape(s) {
 function learningKey(archetype, model, shape) {
   return `${DIALECT_VERSION}::${archetype}::${model}::${hashShape(shape)}`;
 }
+function routeScopedModel(model, route) {
+  return route === "openrouter" ? `${model}@openrouter` : model;
+}
 
 export {
   DIALECT_VERSION,
@@ -102,5 +105,6 @@ export {
   bucketToolCount,
   bucketHistory,
   hashShape,
-  learningKey
+  learningKey,
+  routeScopedModel
 };

package/dist/{chunk-AUZTO6Q5.mjs → chunk-QOQV66PU.mjs}

@@ -1,5 +1,5 @@
 // src/version.ts
-var LIBRARY_VERSION = "2.0.0-alpha.91";
+var LIBRARY_VERSION = "2.0.0-alpha.92";
 
 // src/key-health.ts
 var JSON_HEADERS = { "Content-Type": "application/json" };

package/dist/dialect.d.mts

@@ -133,5 +133,15 @@ declare function hashShape(s: ShapeSignature): string;
  * any app can produce and any app can benefit from.
  */
 declare function learningKey(archetype: IntentArchetypeName, model: string, shape: ShapeSignature): string;
+/**
+ * alpha.92 — the model segment of a learning key, route-scoped. A route is
+ * part of a measurement's identity (execute-leg contract): the same model id
+ * through a gateway is a different serving stack per host, so non-direct
+ * evidence carries the route dimension (`model@openrouter`) and can never
+ * pollute direct-vendor evidence. ONE derivation, used by compile() and
+ * registerCompile() both — two inline encodings of one concept is the s75
+ * drift shape.
+ */
+declare function routeScopedModel(model: string, route?: 'direct' | 'openrouter'): string;
 
-export { ALL_ARCHETYPES, type ContextBucket, DIALECT_VERSION, type HistoryDepth, INTENT_ARCHETYPES, type IntentArchetypeName, type OutputMode, type ShapeSignature, type ToolCountBucket, bucketContext, bucketHistory, bucketToolCount, hashShape, isArchetype, learningKey, resolveOutputMode };
+export { ALL_ARCHETYPES, type ContextBucket, DIALECT_VERSION, type HistoryDepth, INTENT_ARCHETYPES, type IntentArchetypeName, type OutputMode, type ShapeSignature, type ToolCountBucket, bucketContext, bucketHistory, bucketToolCount, hashShape, isArchetype, learningKey, resolveOutputMode, routeScopedModel };

package/dist/dialect.d.ts

@@ -133,5 +133,15 @@ declare function hashShape(s: ShapeSignature): string;
  * any app can produce and any app can benefit from.
  */
 declare function learningKey(archetype: IntentArchetypeName, model: string, shape: ShapeSignature): string;
+/**
+ * alpha.92 — the model segment of a learning key, route-scoped. A route is
+ * part of a measurement's identity (execute-leg contract): the same model id
+ * through a gateway is a different serving stack per host, so non-direct
+ * evidence carries the route dimension (`model@openrouter`) and can never
+ * pollute direct-vendor evidence. ONE derivation, used by compile() and
+ * registerCompile() both — two inline encodings of one concept is the s75
+ * drift shape.
+ */
+declare function routeScopedModel(model: string, route?: 'direct' | 'openrouter'): string;
 
-export { ALL_ARCHETYPES, type ContextBucket, DIALECT_VERSION, type HistoryDepth, INTENT_ARCHETYPES, type IntentArchetypeName, type OutputMode, type ShapeSignature, type ToolCountBucket, bucketContext, bucketHistory, bucketToolCount, hashShape, isArchetype, learningKey, resolveOutputMode };
+export { ALL_ARCHETYPES, type ContextBucket, DIALECT_VERSION, type HistoryDepth, INTENT_ARCHETYPES, type IntentArchetypeName, type OutputMode, type ShapeSignature, type ToolCountBucket, bucketContext, bucketHistory, bucketToolCount, hashShape, isArchetype, learningKey, resolveOutputMode, routeScopedModel };

package/dist/dialect.js

@@ -29,7 +29,8 @@ __export(dialect_exports, {
   hashShape: () => hashShape,
   isArchetype: () => isArchetype,
   learningKey: () => learningKey,
-  resolveOutputMode: () => resolveOutputMode
+  resolveOutputMode: () => resolveOutputMode,
+  routeScopedModel: () => routeScopedModel
 });
 module.exports = __toCommonJS(dialect_exports);
 var DIALECT_VERSION = "v1";
@@ -124,6 +125,9 @@ function hashShape(s) {
 function learningKey(archetype, model, shape) {
   return `${DIALECT_VERSION}::${archetype}::${model}::${hashShape(shape)}`;
 }
+function routeScopedModel(model, route) {
+  return route === "openrouter" ? `${model}@openrouter` : model;
+}
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {
   ALL_ARCHETYPES,
@@ -135,5 +139,6 @@ function learningKey(archetype, model, shape) {
   hashShape,
   isArchetype,
   learningKey,
-  resolveOutputMode
+  resolveOutputMode,
+  routeScopedModel
 });

package/dist/dialect.mjs

@@ -8,8 +8,9 @@ import {
   hashShape,
   isArchetype,
   learningKey,
-  resolveOutputMode
-} from "./chunk-BVEXV5KC.mjs";
+  resolveOutputMode,
+  routeScopedModel
+} from "./chunk-FEMPY6EC.mjs";
 export {
   ALL_ARCHETYPES,
   DIALECT_VERSION,
@@ -20,5 +21,6 @@ export {
   hashShape,
   isArchetype,
   learningKey,
-  resolveOutputMode
+  resolveOutputMode,
+  routeScopedModel
 };

package/dist/glassbox/index.d.mts

@@ -1,6 +1,6 @@
-import { G as GlassboxEvent } from '../types-cBzinzUR.mjs';
-export { A as AdvisoryFiredData, C as CompileDoneData, a as CompileStartData, E as ExecuteAttemptData, b as ExecuteSuccessData, F as FallbackWalkedData, c as GLASSBOX_STREAM_TTL_MS, d as GlassboxEventKind, e as GlassboxPubSub } from '../types-cBzinzUR.mjs';
-import '../ir-DeYMLWge.mjs';
+import { G as GlassboxEvent } from '../types-BgvLmT3s.mjs';
+export { A as AdvisoryFiredData, C as CompileDoneData, a as CompileStartData, E as ExecuteAttemptData, b as ExecuteSuccessData, F as FallbackWalkedData, c as GLASSBOX_STREAM_TTL_MS, d as GlassboxEventKind, e as GlassboxPubSub } from '../types-BgvLmT3s.mjs';
+import '../ir-BPYh68mv.mjs';
 import '../dialect.mjs';
 
 /**

package/dist/glassbox/index.d.ts

@@ -1,6 +1,6 @@
-import { G as GlassboxEvent } from '../types-BKbRtmUb.js';
-export { A as AdvisoryFiredData, C as CompileDoneData, a as CompileStartData, E as ExecuteAttemptData, b as ExecuteSuccessData, F as FallbackWalkedData, c as GLASSBOX_STREAM_TTL_MS, d as GlassboxEventKind, e as GlassboxPubSub } from '../types-BKbRtmUb.js';
-import '../ir-CTx026t0.js';
+import { G as GlassboxEvent } from '../types-BhxC4hdx.js';
+export { A as AdvisoryFiredData, C as CompileDoneData, a as CompileStartData, E as ExecuteAttemptData, b as ExecuteSuccessData, F as FallbackWalkedData, c as GLASSBOX_STREAM_TTL_MS, d as GlassboxEventKind, e as GlassboxPubSub } from '../types-BhxC4hdx.js';
+import '../ir-BWnE6LaB.js';
 import '../dialect.js';
 
 /**

package/dist/glassbox-routes/format.d.mts

@@ -1,5 +1,5 @@
-import { T as TraceHealth } from '../types-DD36cCbZ.mjs';
-import '../ir-DeYMLWge.mjs';
+import { T as TraceHealth } from '../types-eLelJBj-.mjs';
+import '../ir-BPYh68mv.mjs';
 import '../dialect.mjs';
 
 /**

package/dist/glassbox-routes/format.d.ts

@@ -1,5 +1,5 @@
-import { T as TraceHealth } from '../types-Cp9ot1HV.js';
-import '../ir-CTx026t0.js';
+import { T as TraceHealth } from '../types-BCHv34P7.js';
+import '../ir-BWnE6LaB.js';
 import '../dialect.js';
 
 /**

package/dist/glassbox-routes/index.d.mts

@@ -1,7 +1,7 @@
-import { G as GlassboxEvent } from '../types-cBzinzUR.mjs';
-import { a as TraceDetail, b as TraceSummary, c as TraceCounterfactual } from '../types-DD36cCbZ.mjs';
-export { A as AdvisoryRecord, T as TraceHealth, d as TraceSectionRewrite } from '../types-DD36cCbZ.mjs';
-import '../ir-DeYMLWge.mjs';
+import { G as GlassboxEvent } from '../types-BgvLmT3s.mjs';
+import { a as TraceDetail, b as TraceSummary, c as TraceCounterfactual } from '../types-eLelJBj-.mjs';
+export { A as AdvisoryRecord, T as TraceHealth, d as TraceSectionRewrite } from '../types-eLelJBj-.mjs';
+import '../ir-BPYh68mv.mjs';
 import '../dialect.mjs';
 
 /**

package/dist/glassbox-routes/index.d.ts

@@ -1,7 +1,7 @@
-import { G as GlassboxEvent } from '../types-BKbRtmUb.js';
-import { a as TraceDetail, b as TraceSummary, c as TraceCounterfactual } from '../types-Cp9ot1HV.js';
-export { A as AdvisoryRecord, T as TraceHealth, d as TraceSectionRewrite } from '../types-Cp9ot1HV.js';
-import '../ir-CTx026t0.js';
+import { G as GlassboxEvent } from '../types-BhxC4hdx.js';
+import { a as TraceDetail, b as TraceSummary, c as TraceCounterfactual } from '../types-BCHv34P7.js';
+export { A as AdvisoryRecord, T as TraceHealth, d as TraceSectionRewrite } from '../types-BCHv34P7.js';
+import '../ir-BWnE6LaB.js';
 import '../dialect.js';
 
 /**

package/dist/glassbox-routes/index.js

@@ -1979,7 +1979,8 @@ var SUPPORTED_PROVIDERS = Object.freeze([
   "openai",
   "deepseek",
   "zai",
-  "moonshot"
+  "moonshot",
+  "openrouter"
 ]);
 function isSupportedProvider(p) {
   return SUPPORTED_PROVIDERS.includes(p);
@@ -2000,7 +2001,11 @@ var PROVIDER_ENV_KEYS = Object.freeze({
   // alpha.65 — Moonshot AI (Kimi family). MOONSHOT_API_KEY is canonical
   // (api.moonshot.ai); KIMI_API_KEY covers the platform.kimi.ai rebrand
   // surface so consumers keyed under either name resolve.
-  moonshot: Object.freeze(["MOONSHOT_API_KEY", "KIMI_API_KEY"])
+  moonshot: Object.freeze(["MOONSHOT_API_KEY", "KIMI_API_KEY"]),
+  // alpha.92 — the OpenRouter gateway route (execute-leg contract). This is
+  // a ROUTE key, not a vendor key: it never makes a vendor "reachable" for
+  // chain composition — only explicit `route: 'openrouter'` calls use it.
+  openrouter: Object.freeze(["OPENROUTER_API_KEY"])
 });
 function defaultEnv() {
   return typeof process !== "undefined" && process.env ? process.env : {};

package/dist/glassbox-routes/index.mjs

@@ -1,7 +1,7 @@
 import {
   ARCHETYPE_FLOOR_DEFAULT,
   getDefaultFallbackChain
-} from "../chunk-54IXD5BT.mjs";
+} from "../chunk-4G73BYES.mjs";
 import {
   tryGetProfile
 } from "../chunk-T53ISC2F.mjs";

package/dist/glassbox-routes/react/index.d.mts

@@ -1,6 +1,6 @@
 import * as react_jsx_runtime from 'react/jsx-runtime';
-import { a as TraceDetail } from '../../types-DD36cCbZ.mjs';
-import '../../ir-DeYMLWge.mjs';
+import { a as TraceDetail } from '../../types-eLelJBj-.mjs';
+import '../../ir-BPYh68mv.mjs';
 import '../../dialect.mjs';
 
 /**

package/dist/glassbox-routes/react/index.d.ts

@@ -1,6 +1,6 @@
 import * as react_jsx_runtime from 'react/jsx-runtime';
-import { a as TraceDetail } from '../../types-Cp9ot1HV.js';
-import '../../ir-CTx026t0.js';
+import { a as TraceDetail } from '../../types-BCHv34P7.js';
+import '../../ir-BWnE6LaB.js';
 import '../../dialect.js';
 
 /**

package/dist/index.d.mts

@@ -1,5 +1,5 @@
-import { C as CompilePolicy, N as NormalizedResponse, A as ApiKeys, P as ProviderOverrides, a as CompiledRequest, b as PromptIR, c as CallOptions, d as CallResult, S as SystemModelMessage, e as CompileResult, B as BestPracticeAdvisory, F as FallbackReason, f as SectionRewrite, R as RecordInput, g as RecordOutcomeInput, O as OutcomeResult, h as OutcomeSource, i as OracleScore, j as Adapter, k as PerAxisMetrics, l as Provider, m as ChainEntry, G as Grounding } from './ir-DeYMLWge.mjs';
-export { n as CallAttempt, o as CallError, p as ChainModelEntry, q as ChainWithGrounding, r as Constraints, E as EffortLevel, s as GoldenCaptureOptions, H as HistoryCachePolicy, I as IntentDeclaration, M as Message, t as MutationApplied, u as NormalizedTokens, v as OutcomeKind, w as PerAxisMetricsByModel, x as PromptSection, y as SectionKind, z as ShadowProbeConfig, T as ToolCall, D as ToolDefinition, J as captureGoldenIr, K as hasMutation, L as mutationId, Q as parseGoldenCaptureRate, U as resolveGoldenCaptureRate, V as shouldCaptureGolden } from './ir-DeYMLWge.mjs';
+import { C as CompilePolicy, N as NormalizedResponse, A as ApiKeys, P as ProviderOverrides, a as CompiledRequest, b as PromptIR, c as CallOptions, d as CallResult, S as SystemModelMessage, e as CompileResult, B as BestPracticeAdvisory, F as FallbackReason, f as SectionRewrite, R as RecordInput, g as RecordOutcomeInput, O as OutcomeResult, h as OutcomeSource, i as OracleScore, j as Adapter, k as PerAxisMetrics, l as Provider, m as ChainEntry, G as Grounding } from './ir-BPYh68mv.mjs';
+export { n as CallAttempt, o as CallError, p as ChainModelEntry, q as ChainWithGrounding, r as Constraints, E as EffortLevel, s as GoldenCaptureOptions, H as HistoryCachePolicy, I as IntentDeclaration, M as Message, t as MutationApplied, u as NormalizedTokens, v as OutcomeKind, w as PerAxisMetricsByModel, x as PromptSection, y as SectionKind, z as ShadowProbeConfig, T as ToolCall, D as ToolDefinition, J as captureGoldenIr, K as hasMutation, L as mutationId, Q as parseGoldenCaptureRate, U as resolveGoldenCaptureRate, V as shouldCaptureGolden } from './ir-BPYh68mv.mjs';
 import { ModelProfile, ArchetypeConvention } from './profiles.mjs';
 export { ALIASES, CacheStrategy, CliffRule, LATENCY_TIER_MS, LatencyTier, LoweringSpec, RecoveryRule, StructuredOutputCapability, SystemPromptMode, _testClearConsumerProfiles, allProfiles, bestEffortProfile, getProfile, inferProviderFromId, latencyTierOf, profilesByProvider, registerProfiles, resolveModelAlias, tryGetProfile } from './profiles.mjs';
 export { BrainForwardConfig, BrainForwardRoutes, createBrainForwardRoutes } from './brain-proxy.mjs';
@@ -47,6 +47,13 @@ interface CompileOptions {
      * time. `registerCompile` reads it to derive the linkage. Absent ⇒ root call.
      */
     parentHandle?: string;
+    /**
+     * alpha.92 — lower for a gateway route (execute-leg contract). Threaded
+     * from `CallOptions.route`. The canonical profile drives every pass
+     * (cliffs, scoring, budgets) unchanged; only the wire destination and the
+     * learning-key encoding change. Absent ⇒ direct vendor wire.
+     */
+    route?: 'direct' | 'openrouter';
 }
 
 /**
@@ -666,6 +673,10 @@ interface OutcomePayload {
     provider?: string;
     shape_key?: string;
     learning_key?: string;
+    /** alpha.92 (migration 067) — route identity: 'direct' | 'openrouter'. */
+    route?: string;
+    /** alpha.92 — gateway-reported serving host (OpenRouter `provider` field). */
+    route_host?: string;
     mutations_applied: string[];
     tokens_in: number;
     tokens_out: number;
@@ -1270,7 +1281,7 @@ declare function runStrategyEvalWithAttribution(opts: Omit<GoldenEvalOptions, 'a
  * guard in `tests/version.test.ts` fails the suite (and therefore
  * `prepublishOnly`) when they diverge — a stale constant cannot reach npm.
  */
-declare const LIBRARY_VERSION = "2.0.0-alpha.91";
+declare const LIBRARY_VERSION = "2.0.0-alpha.92";
 
 /**
  * Oracle contract — how an app tells the brain whether a response was good.
@@ -2668,7 +2679,7 @@ declare function getPerAxisMetrics(opts: GetPerAxisMetricsOpts): Promise<PerAxis
  * no execute() handler, no env-var convention). Narrowing here keeps the
  * reachability check structurally honest.
  */
-type SupportedProvider = 'anthropic' | 'google' | 'openai' | 'deepseek' | 'zai' | 'moonshot';
+type SupportedProvider = 'anthropic' | 'google' | 'openai' | 'deepseek' | 'zai' | 'moonshot' | 'openrouter';
 /**
  * Per-provider env var names kgauto recognizes. Order doesn't matter —
  * first-present wins. Multiple names per provider supported because Google

package/dist/index.d.ts

@@ -1,5 +1,5 @@
-import { C as CompilePolicy, N as NormalizedResponse, A as ApiKeys, P as ProviderOverrides, a as CompiledRequest, b as PromptIR, c as CallOptions, d as CallResult, S as SystemModelMessage, e as CompileResult, B as BestPracticeAdvisory, F as FallbackReason, f as SectionRewrite, R as RecordInput, g as RecordOutcomeInput, O as OutcomeResult, h as OutcomeSource, i as OracleScore, j as Adapter, k as PerAxisMetrics, l as Provider, m as ChainEntry, G as Grounding } from './ir-CTx026t0.js';
-export { n as CallAttempt, o as CallError, p as ChainModelEntry, q as ChainWithGrounding, r as Constraints, E as EffortLevel, s as GoldenCaptureOptions, H as HistoryCachePolicy, I as IntentDeclaration, M as Message, t as MutationApplied, u as NormalizedTokens, v as OutcomeKind, w as PerAxisMetricsByModel, x as PromptSection, y as SectionKind, z as ShadowProbeConfig, T as ToolCall, D as ToolDefinition, J as captureGoldenIr, K as hasMutation, L as mutationId, Q as parseGoldenCaptureRate, U as resolveGoldenCaptureRate, V as shouldCaptureGolden } from './ir-CTx026t0.js';
+import { C as CompilePolicy, N as NormalizedResponse, A as ApiKeys, P as ProviderOverrides, a as CompiledRequest, b as PromptIR, c as CallOptions, d as CallResult, S as SystemModelMessage, e as CompileResult, B as BestPracticeAdvisory, F as FallbackReason, f as SectionRewrite, R as RecordInput, g as RecordOutcomeInput, O as OutcomeResult, h as OutcomeSource, i as OracleScore, j as Adapter, k as PerAxisMetrics, l as Provider, m as ChainEntry, G as Grounding } from './ir-BWnE6LaB.js';
+export { n as CallAttempt, o as CallError, p as ChainModelEntry, q as ChainWithGrounding, r as Constraints, E as EffortLevel, s as GoldenCaptureOptions, H as HistoryCachePolicy, I as IntentDeclaration, M as Message, t as MutationApplied, u as NormalizedTokens, v as OutcomeKind, w as PerAxisMetricsByModel, x as PromptSection, y as SectionKind, z as ShadowProbeConfig, T as ToolCall, D as ToolDefinition, J as captureGoldenIr, K as hasMutation, L as mutationId, Q as parseGoldenCaptureRate, U as resolveGoldenCaptureRate, V as shouldCaptureGolden } from './ir-BWnE6LaB.js';
 import { ModelProfile, ArchetypeConvention } from './profiles.js';
 export { ALIASES, CacheStrategy, CliffRule, LATENCY_TIER_MS, LatencyTier, LoweringSpec, RecoveryRule, StructuredOutputCapability, SystemPromptMode, _testClearConsumerProfiles, allProfiles, bestEffortProfile, getProfile, inferProviderFromId, latencyTierOf, profilesByProvider, registerProfiles, resolveModelAlias, tryGetProfile } from './profiles.js';
 export { BrainForwardConfig, BrainForwardRoutes, createBrainForwardRoutes } from './brain-proxy.js';
@@ -47,6 +47,13 @@ interface CompileOptions {
      * time. `registerCompile` reads it to derive the linkage. Absent ⇒ root call.
      */
     parentHandle?: string;
+    /**
+     * alpha.92 — lower for a gateway route (execute-leg contract). Threaded
+     * from `CallOptions.route`. The canonical profile drives every pass
+     * (cliffs, scoring, budgets) unchanged; only the wire destination and the
+     * learning-key encoding change. Absent ⇒ direct vendor wire.
+     */
+    route?: 'direct' | 'openrouter';
 }
 
 /**
@@ -666,6 +673,10 @@ interface OutcomePayload {
     provider?: string;
     shape_key?: string;
     learning_key?: string;
+    /** alpha.92 (migration 067) — route identity: 'direct' | 'openrouter'. */
+    route?: string;
+    /** alpha.92 — gateway-reported serving host (OpenRouter `provider` field). */
+    route_host?: string;
     mutations_applied: string[];
     tokens_in: number;
     tokens_out: number;
@@ -1270,7 +1281,7 @@ declare function runStrategyEvalWithAttribution(opts: Omit<GoldenEvalOptions, 'a
  * guard in `tests/version.test.ts` fails the suite (and therefore
  * `prepublishOnly`) when they diverge — a stale constant cannot reach npm.
  */
-declare const LIBRARY_VERSION = "2.0.0-alpha.91";
+declare const LIBRARY_VERSION = "2.0.0-alpha.92";
 
 /**
  * Oracle contract — how an app tells the brain whether a response was good.
@@ -2668,7 +2679,7 @@ declare function getPerAxisMetrics(opts: GetPerAxisMetricsOpts): Promise<PerAxis
  * no execute() handler, no env-var convention). Narrowing here keeps the
  * reachability check structurally honest.
  */
-type SupportedProvider = 'anthropic' | 'google' | 'openai' | 'deepseek' | 'zai' | 'moonshot';
+type SupportedProvider = 'anthropic' | 'google' | 'openai' | 'deepseek' | 'zai' | 'moonshot' | 'openrouter';
 /**
  * Per-provider env var names kgauto recognizes. Order doesn't matter —
  * first-present wins. Multiple names per provider supported because Google

package/dist/index.js

@@ -2977,6 +2977,9 @@ function hashShape(s) {
 function learningKey(archetype, model, shape) {
   return `${DIALECT_VERSION}::${archetype}::${model}::${hashShape(shape)}`;
 }
+function routeScopedModel(model, route) {
+  return route === "openrouter" ? `${model}@openrouter` : model;
+}
 
 // src/passes.ts
 function passSlice(ir) {
@@ -3634,7 +3637,26 @@ function passApplyConventions(ir, profile) {
 }
 
 // src/lower.ts
+var OPENROUTER_VENDOR_SLUG = {
+  anthropic: "anthropic",
+  google: "google",
+  openai: "openai",
+  deepseek: "deepseek",
+  zai: "z-ai",
+  moonshot: "moonshotai"
+};
+var OPENROUTER_ID_OVERRIDES = Object.freeze({});
+function openRouterModelId(profile) {
+  const override = OPENROUTER_ID_OVERRIDES[profile.id];
+  if (override) return override;
+  const slug = OPENROUTER_VENDOR_SLUG[profile.provider];
+  if (!slug) throw new Error(`No OpenRouter vendor slug for provider ${profile.provider} (model ${profile.id})`);
+  return `${slug}/${profile.id}`;
+}
 function lower(ir, profile, hints = {}) {
+  if (hints.route === "openrouter") {
+    return lowerOpenRouter(ir, profile);
+  }
   switch (profile.provider) {
     case "anthropic":
       return lowerAnthropic(ir, profile, hints);
@@ -3987,6 +4009,23 @@ function lowerZai(ir, profile, hints) {
     }
   };
 }
+function lowerOpenRouter(ir, profile) {
+  const parts = buildOpenAICompatibleParts(ir);
+  return {
+    request: {
+      provider: "openrouter",
+      model: openRouterModelId(profile),
+      messages: parts.messages,
+      tools: parts.tools,
+      response_format: parts.response_format
+    },
+    diagnostics: {
+      cacheableTokens: 0,
+      historyCacheableTokens: parts.historyCacheableTokens,
+      estimatedCacheSavingsUsd: 0
+    }
+  };
+}
 function lowerMoonshot(ir, profile) {
   const parts = buildOpenAICompatibleParts(ir);
   return {
@@ -4088,7 +4127,8 @@ var SUPPORTED_PROVIDERS = Object.freeze([
   "openai",
   "deepseek",
   "zai",
-  "moonshot"
+  "moonshot",
+  "openrouter"
 ]);
 function isSupportedProvider(p) {
   return SUPPORTED_PROVIDERS.includes(p);
@@ -4109,7 +4149,11 @@ var PROVIDER_ENV_KEYS = Object.freeze({
   // alpha.65 — Moonshot AI (Kimi family). MOONSHOT_API_KEY is canonical
   // (api.moonshot.ai); KIMI_API_KEY covers the platform.kimi.ai rebrand
   // surface so consumers keyed under either name resolve.
-  moonshot: Object.freeze(["MOONSHOT_API_KEY", "KIMI_API_KEY"])
+  moonshot: Object.freeze(["MOONSHOT_API_KEY", "KIMI_API_KEY"]),
+  // alpha.92 — the OpenRouter gateway route (execute-leg contract). This is
+  // a ROUTE key, not a vendor key: it never makes a vendor "reachable" for
+  // chain composition — only explicit `route: 'openrouter'` calls use it.
+  openrouter: Object.freeze(["OPENROUTER_API_KEY"])
 });
 function defaultEnv() {
   return typeof process !== "undefined" && process.env ? process.env : {};
@@ -6187,12 +6231,13 @@ function compile(ir, opts = {}) {
   const lowered = lower(workingIR, profile, {
     forceThinkingZero: cliffs.value.loweringHints.forceThinkingZero,
     forceTerseOutput: cliffs.value.loweringHints.forceTerseOutput,
-    wireOverrides
+    wireOverrides,
+    route: opts.route
   });
   validateFinalFit(workingIR, profile, inputTokens);
   const handle = makeHandle();
   const finalShape = computeShape(workingIR, inputTokens);
-  const _learningKey = learningKey(ir.intent.archetype, profile.id, finalShape);
+  const _learningKey = learningKey(ir.intent.archetype, routeScopedModel(profile.id, opts.route), finalShape);
   const historyCacheMarkIndex = computeHistoryCacheMarkIndex(workingIR);
   const systemMessages = buildSystemMessages(workingIR, profile.provider);
   const systemCacheMarkIndex = lastCacheableSystemIndex(systemMessages);
@@ -6419,7 +6464,7 @@ function validateFinalFit(ir, profile, tokens) {
 }
 
 // src/version.ts
-var LIBRARY_VERSION = "2.0.0-alpha.91";
+var LIBRARY_VERSION = "2.0.0-alpha.92";
 
 // src/pricing-brain.ts
 function isPricingRow(x) {
@@ -6694,7 +6739,7 @@ async function flushBrainDeadLetter() {
 }
 var compileRegistry = /* @__PURE__ */ new Map();
 var REGISTRY_MAX_ENTRIES = 1e4;
-function registerCompile(appId, archetype, ir, result, parentHandle) {
+function registerCompile(appId, archetype, ir, result, parentHandle, route) {
   if (compileRegistry.size >= REGISTRY_MAX_ENTRIES) {
     const cutoff = Math.floor(REGISTRY_MAX_ENTRIES * 0.25);
     let evicted = 0;
@@ -6726,7 +6771,10 @@ function registerCompile(appId, archetype, ir, result, parentHandle) {
     model: result.target,
     provider: result.provider,
     shapeKey,
-    learningKey: learningKey(archetype, result.target, shape),
+    route: route ?? "direct",
+    // alpha.92 — route-scoped for non-direct routes: the same model id on a
+    // gateway is a different serving stack (Venice/StreamLake, 2026-08-26).
+    learningKey: learningKey(archetype, routeScopedModel(result.target, route), shape),
     estimatedTokensIn: tokens,
     mutationsApplied: result.mutationsApplied.map((m) => m.id),
     // alpha.30: cache the in-memory advisories so record() can auto-persist
@@ -6920,6 +6968,11 @@ function buildPayload(input, reg) {
     provider: reg?.provider,
     shape_key: reg?.shapeKey,
     learning_key: reg?.learningKey,
+    // alpha.92 (migration 067) — route identity on every row. Input wins
+    // (a manual record() replaying through a gateway states its own route);
+    // registry fills the call() path; column default covers legacy writers.
+    route: input.route ?? reg?.route ?? "direct",
+    route_host: input.routeHost,
     mutations_applied: mutationsApplied,
     tokens_in: input.tokensIn,
     tokens_out: input.tokensOut,
@@ -7714,6 +7767,7 @@ var OPENAI_URL = "https://api.openai.com/v1/chat/completions";
 var DEEPSEEK_URL = "https://api.deepseek.com/chat/completions";
 var ZAI_URL = "https://api.z.ai/api/paas/v4/chat/completions";
 var MOONSHOT_URL = "https://api.moonshot.ai/v1/chat/completions";
+var OPENROUTER_URL = "https://openrouter.ai/api/v1/chat/completions";
 async function execute(request, opts = {}) {
   const merged = applyOverrides(request, opts.providerOverrides);
   switch (merged.provider) {
@@ -7737,6 +7791,12 @@ async function execute(request, opts = {}) {
         opts,
         { provider: "moonshot", url: MOONSHOT_URL, missingKeyMessage: "MOONSHOT_API_KEY missing" }
       );
+    case "openrouter":
+      return executeOpenAICompatible(
+        merged,
+        opts,
+        { provider: "openrouter", url: OPENROUTER_URL, missingKeyMessage: "OPENROUTER_API_KEY missing" }
+      );
     default: {
       const _exhaustive = merged;
       throw new Error(`execute(): no executor for provider: ${JSON.stringify(_exhaustive)}`);
@@ -7936,6 +7996,7 @@ function normalizeOpenAILike(raw) {
   const r = raw;
   const choice = r.choices?.[0];
   const text = choice?.message?.content ?? "";
+  const routeHost = typeof raw?.provider === "string" ? raw.provider : void 0;
   const toolCalls = (choice?.message?.tool_calls ?? []).filter((tc) => tc.function?.name).map((tc, i) => ({
     id: tc.id ?? `tc-${i}`,
     name: tc.function.name,
@@ -7948,7 +8009,7 @@ function normalizeOpenAILike(raw) {
     total: u.total_tokens ?? (u.prompt_tokens ?? 0) + (u.completion_tokens ?? 0),
     cached: u.prompt_tokens_details?.cached_tokens
   };
-  return { text, structuredOutput: null, toolCalls, tokens, finishReason: choice?.finish_reason, raw };
+  return { text, structuredOutput: null, toolCalls, tokens, finishReason: choice?.finish_reason, routeHost, raw };
 }
 function applyOverrides(request, overrides) {
   if (!overrides) return request;
@@ -8387,6 +8448,7 @@ async function call(ir, opts = {}) {
         handle: initial.handle,
         source: opts.source,
         endUserId: opts.endUserId,
+        route: opts.route,
         tokensIn: 0,
         tokensOut: 0,
         latencyMs: latencyMs2,
@@ -8441,6 +8503,7 @@ async function call(ir, opts = {}) {
         handle: initial.handle,
         source: opts.source,
         endUserId: opts.endUserId,
+        route: opts.route,
         tokensIn: 0,
         tokensOut: 0,
         latencyMs: latencyMs2,
@@ -8584,6 +8647,11 @@ async function call(ir, opts = {}) {
         handle: initial.handle,
         source: opts.source,
         endUserId: opts.endUserId,
+        // alpha.92 — route identity on the row (registry also carries it;
+        // input wins in buildPayload, so state it explicitly here with the
+        // host the gateway reported for the WINNING attempt).
+        route: opts.route,
+        routeHost: validated.response.routeHost,
         tokensIn: validated.response.tokens.input,
         tokensOut: validated.response.tokens.output,
         latencyMs: latencyMs2,
@@ -8664,6 +8732,12 @@ async function call(ir, opts = {}) {
         provider: activeCompile.provider,
         response: validated.response,
         latencyMs: latencyMs2,
+        // alpha.92 — route identity + the served profile's cliffs flagged
+        // route-unverified on a non-direct route (guards still fired; their
+        // evidence is vendor-route evidence — see the execute-leg contract).
+        route: opts.route ?? "direct",
+        routeHost: validated.response.routeHost,
+        routeUnverifiedCliffs: opts.route === "openrouter" ? (tryGetProfile(targetModel)?.cliffs ?? []).map((c) => c.metric) : void 0,
         mutationsApplied: activeCompile.mutationsApplied,
         attempts,
         servedBy: targetModel,
@@ -8708,6 +8782,7 @@ async function call(ir, opts = {}) {
     handle: initial.handle,
     source: opts.source,
     endUserId: opts.endUserId,
+    route: opts.route,
     tokensIn: lastErr?.tokens?.input ?? 0,
     tokensOut: lastErr?.tokens?.output ?? 0,
     latencyMs,
@@ -8751,9 +8826,12 @@ function compileAndRegister(ir, opts) {
     toolRelevanceThreshold: opts.toolRelevanceThreshold,
     compressHistoryAfter: opts.compressHistoryAfter,
     // alpha.68 / Release A — carry the fan-out parent handle through to compile.
-    parentHandle: opts.parentHandle
+    parentHandle: opts.parentHandle,
+    // alpha.92 — gateway route (execute-leg contract): changes the wire +
+    // learning-key encoding, never the pass pipeline.
+    route: opts.route
   });
-  registerCompile(ir.appId, ir.intent.archetype, ir, result, opts.parentHandle);
+  registerCompile(ir.appId, ir.intent.archetype, ir, result, opts.parentHandle, opts.route);
   return result;
 }
 function extractPromptPreview(ir) {
@@ -11192,7 +11270,7 @@ function planDecomposition(args) {
 // src/index.ts
 function compile2(ir, opts) {
   const result = compile(ir, opts);
-  registerCompile(ir.appId, ir.intent.archetype, ir, result, opts?.parentHandle);
+  registerCompile(ir.appId, ir.intent.archetype, ir, result, opts?.parentHandle, opts?.route);
   return result;
 }
 // Annotate the CommonJS export names for ESM import in node:

package/dist/index.mjs

@@ -11,15 +11,16 @@ import {
   hashShape,
   isArchetype,
   learningKey,
-  resolveOutputMode
-} from "./chunk-BVEXV5KC.mjs";
+  resolveOutputMode,
+  routeScopedModel
+} from "./chunk-FEMPY6EC.mjs";
 import {
   KEY_FINGERPRINT_DOMAIN,
   KEY_FINGERPRINT_LENGTH,
   LIBRARY_VERSION,
   createKeyHealthRoute,
   keyFingerprint
-} from "./chunk-AUZTO6Q5.mjs";
+} from "./chunk-QOQV66PU.mjs";
 import {
   ABSOLUTE_FLOOR,
   ARCHETYPE_FLOOR_DEFAULT,
@@ -57,7 +58,7 @@ import {
   policySetHas,
   readBrainReadEnv,
   resolveProviderKey
-} from "./chunk-54IXD5BT.mjs";
+} from "./chunk-4G73BYES.mjs";
 import {
   ALIASES,
   LATENCY_TIER_MS,
@@ -1169,7 +1170,26 @@ function passApplyConventions(ir, profile) {
 }
 
 // src/lower.ts
+var OPENROUTER_VENDOR_SLUG = {
+  anthropic: "anthropic",
+  google: "google",
+  openai: "openai",
+  deepseek: "deepseek",
+  zai: "z-ai",
+  moonshot: "moonshotai"
+};
+var OPENROUTER_ID_OVERRIDES = Object.freeze({});
+function openRouterModelId(profile) {
+  const override = OPENROUTER_ID_OVERRIDES[profile.id];
+  if (override) return override;
+  const slug = OPENROUTER_VENDOR_SLUG[profile.provider];
+  if (!slug) throw new Error(`No OpenRouter vendor slug for provider ${profile.provider} (model ${profile.id})`);
+  return `${slug}/${profile.id}`;
+}
 function lower(ir, profile, hints = {}) {
+  if (hints.route === "openrouter") {
+    return lowerOpenRouter(ir, profile);
+  }
   switch (profile.provider) {
     case "anthropic":
       return lowerAnthropic(ir, profile, hints);
@@ -1522,6 +1542,23 @@ function lowerZai(ir, profile, hints) {
     }
   };
 }
+function lowerOpenRouter(ir, profile) {
+  const parts = buildOpenAICompatibleParts(ir);
+  return {
+    request: {
+      provider: "openrouter",
+      model: openRouterModelId(profile),
+      messages: parts.messages,
+      tools: parts.tools,
+      response_format: parts.response_format
+    },
+    diagnostics: {
+      cacheableTokens: 0,
+      historyCacheableTokens: parts.historyCacheableTokens,
+      estimatedCacheSavingsUsd: 0
+    }
+  };
+}
 function lowerMoonshot(ir, profile) {
   const parts = buildOpenAICompatibleParts(ir);
   return {
@@ -3173,12 +3210,13 @@ function compile(ir, opts = {}) {
   const lowered = lower(workingIR, profile, {
     forceThinkingZero: cliffs.value.loweringHints.forceThinkingZero,
     forceTerseOutput: cliffs.value.loweringHints.forceTerseOutput,
-    wireOverrides
+    wireOverrides,
+    route: opts.route
   });
   validateFinalFit(workingIR, profile, inputTokens);
   const handle = makeHandle();
   const finalShape = computeShape(workingIR, inputTokens);
-  const _learningKey = learningKey(ir.intent.archetype, profile.id, finalShape);
+  const _learningKey = learningKey(ir.intent.archetype, routeScopedModel(profile.id, opts.route), finalShape);
   const historyCacheMarkIndex = computeHistoryCacheMarkIndex(workingIR);
   const systemMessages = buildSystemMessages(workingIR, profile.provider);
   const systemCacheMarkIndex = lastCacheableSystemIndex(systemMessages);
@@ -3677,7 +3715,7 @@ async function flushBrainDeadLetter() {
 }
 var compileRegistry = /* @__PURE__ */ new Map();
 var REGISTRY_MAX_ENTRIES = 1e4;
-function registerCompile(appId, archetype, ir, result, parentHandle) {
+function registerCompile(appId, archetype, ir, result, parentHandle, route) {
   if (compileRegistry.size >= REGISTRY_MAX_ENTRIES) {
     const cutoff = Math.floor(REGISTRY_MAX_ENTRIES * 0.25);
     let evicted = 0;
@@ -3709,7 +3747,10 @@ function registerCompile(appId, archetype, ir, result, parentHandle) {
     model: result.target,
     provider: result.provider,
     shapeKey,
-    learningKey: learningKey(archetype, result.target, shape),
+    route: route ?? "direct",
+    // alpha.92 — route-scoped for non-direct routes: the same model id on a
+    // gateway is a different serving stack (Venice/StreamLake, 2026-08-26).
+    learningKey: learningKey(archetype, routeScopedModel(result.target, route), shape),
     estimatedTokensIn: tokens,
     mutationsApplied: result.mutationsApplied.map((m) => m.id),
     // alpha.30: cache the in-memory advisories so record() can auto-persist
@@ -3903,6 +3944,11 @@ function buildPayload(input, reg) {
     provider: reg?.provider,
     shape_key: reg?.shapeKey,
     learning_key: reg?.learningKey,
+    // alpha.92 (migration 067) — route identity on every row. Input wins
+    // (a manual record() replaying through a gateway states its own route);
+    // registry fills the call() path; column default covers legacy writers.
+    route: input.route ?? reg?.route ?? "direct",
+    route_host: input.routeHost,
     mutations_applied: mutationsApplied,
     tokens_in: input.tokensIn,
     tokens_out: input.tokensOut,
@@ -4697,6 +4743,7 @@ var OPENAI_URL = "https://api.openai.com/v1/chat/completions";
 var DEEPSEEK_URL = "https://api.deepseek.com/chat/completions";
 var ZAI_URL = "https://api.z.ai/api/paas/v4/chat/completions";
 var MOONSHOT_URL = "https://api.moonshot.ai/v1/chat/completions";
+var OPENROUTER_URL = "https://openrouter.ai/api/v1/chat/completions";
 async function execute(request, opts = {}) {
   const merged = applyOverrides(request, opts.providerOverrides);
   switch (merged.provider) {
@@ -4720,6 +4767,12 @@ async function execute(request, opts = {}) {
         opts,
         { provider: "moonshot", url: MOONSHOT_URL, missingKeyMessage: "MOONSHOT_API_KEY missing" }
       );
+    case "openrouter":
+      return executeOpenAICompatible(
+        merged,
+        opts,
+        { provider: "openrouter", url: OPENROUTER_URL, missingKeyMessage: "OPENROUTER_API_KEY missing" }
+      );
     default: {
       const _exhaustive = merged;
       throw new Error(`execute(): no executor for provider: ${JSON.stringify(_exhaustive)}`);
@@ -4919,6 +4972,7 @@ function normalizeOpenAILike(raw) {
   const r = raw;
   const choice = r.choices?.[0];
   const text = choice?.message?.content ?? "";
+  const routeHost = typeof raw?.provider === "string" ? raw.provider : void 0;
   const toolCalls = (choice?.message?.tool_calls ?? []).filter((tc) => tc.function?.name).map((tc, i) => ({
     id: tc.id ?? `tc-${i}`,
     name: tc.function.name,
@@ -4931,7 +4985,7 @@ function normalizeOpenAILike(raw) {
     total: u.total_tokens ?? (u.prompt_tokens ?? 0) + (u.completion_tokens ?? 0),
     cached: u.prompt_tokens_details?.cached_tokens
   };
-  return { text, structuredOutput: null, toolCalls, tokens, finishReason: choice?.finish_reason, raw };
+  return { text, structuredOutput: null, toolCalls, tokens, finishReason: choice?.finish_reason, routeHost, raw };
 }
 function applyOverrides(request, overrides) {
   if (!overrides) return request;
@@ -5069,6 +5123,7 @@ async function call(ir, opts = {}) {
         handle: initial.handle,
         source: opts.source,
         endUserId: opts.endUserId,
+        route: opts.route,
         tokensIn: 0,
         tokensOut: 0,
         latencyMs: latencyMs2,
@@ -5123,6 +5178,7 @@ async function call(ir, opts = {}) {
         handle: initial.handle,
         source: opts.source,
         endUserId: opts.endUserId,
+        route: opts.route,
         tokensIn: 0,
         tokensOut: 0,
         latencyMs: latencyMs2,
@@ -5266,6 +5322,11 @@ async function call(ir, opts = {}) {
         handle: initial.handle,
         source: opts.source,
         endUserId: opts.endUserId,
+        // alpha.92 — route identity on the row (registry also carries it;
+        // input wins in buildPayload, so state it explicitly here with the
+        // host the gateway reported for the WINNING attempt).
+        route: opts.route,
+        routeHost: validated.response.routeHost,
         tokensIn: validated.response.tokens.input,
         tokensOut: validated.response.tokens.output,
         latencyMs: latencyMs2,
@@ -5346,6 +5407,12 @@ async function call(ir, opts = {}) {
         provider: activeCompile.provider,
         response: validated.response,
         latencyMs: latencyMs2,
+        // alpha.92 — route identity + the served profile's cliffs flagged
+        // route-unverified on a non-direct route (guards still fired; their
+        // evidence is vendor-route evidence — see the execute-leg contract).
+        route: opts.route ?? "direct",
+        routeHost: validated.response.routeHost,
+        routeUnverifiedCliffs: opts.route === "openrouter" ? (tryGetProfile(targetModel)?.cliffs ?? []).map((c) => c.metric) : void 0,
         mutationsApplied: activeCompile.mutationsApplied,
         attempts,
         servedBy: targetModel,
@@ -5390,6 +5457,7 @@ async function call(ir, opts = {}) {
     handle: initial.handle,
     source: opts.source,
     endUserId: opts.endUserId,
+    route: opts.route,
     tokensIn: lastErr?.tokens?.input ?? 0,
     tokensOut: lastErr?.tokens?.output ?? 0,
     latencyMs,
@@ -5433,9 +5501,12 @@ function compileAndRegister(ir, opts) {
     toolRelevanceThreshold: opts.toolRelevanceThreshold,
     compressHistoryAfter: opts.compressHistoryAfter,
     // alpha.68 / Release A — carry the fan-out parent handle through to compile.
-    parentHandle: opts.parentHandle
+    parentHandle: opts.parentHandle,
+    // alpha.92 — gateway route (execute-leg contract): changes the wire +
+    // learning-key encoding, never the pass pipeline.
+    route: opts.route
   });
-  registerCompile(ir.appId, ir.intent.archetype, ir, result, opts.parentHandle);
+  registerCompile(ir.appId, ir.intent.archetype, ir, result, opts.parentHandle, opts.route);
   return result;
 }
 function extractPromptPreview(ir) {
@@ -7499,7 +7570,7 @@ function planDecomposition(args) {
 // src/index.ts
 function compile2(ir, opts) {
   const result = compile(ir, opts);
-  registerCompile(ir.appId, ir.intent.archetype, ir, result, opts?.parentHandle);
+  registerCompile(ir.appId, ir.intent.archetype, ir, result, opts?.parentHandle, opts?.route);
   return result;
 }
 export {

package/dist/{ir-DeYMLWge.d.mts → ir-BPYh68mv.d.mts}

@@ -440,7 +440,21 @@ interface PromptIR {
      */
     historyCachePolicy?: HistoryCachePolicy;
 }
-type Provider = 'anthropic' | 'google' | 'openai' | 'deepseek' | 'zai' | 'moonshot' | 'mistral' | 'xai';
+type Provider = 'anthropic' | 'google' | 'openai' | 'deepseek' | 'zai' | 'moonshot' | 'mistral' | 'xai' | 'openrouter';
+/**
+ * alpha.92 — the route a call travels, part of a measurement's identity
+ * (execute-leg design contract, 2026-08-26). `'direct'` = the vendor's own
+ * API (every measurement before this release; the default, and the only
+ * route consumer production traffic uses unless a consumer explicitly opts
+ * in later). `'openrouter'` = the OpenRouter gateway — the STARTER tier for
+ * eval and candidate admission. The route matters because the model behind
+ * a name is a different serving stack per gateway host: the same
+ * `deepseek-v4-flash` id was served by "Venice" and by "StreamLake"
+ * emitting PARALLEL tool calls — behavior opposite to the vendor-API
+ * evidence our cliff rests on. Vendor-keyed evidence does not transfer
+ * through a gateway, so verdicts never silently transfer across routes.
+ */
+type CallRoute = 'direct' | 'openrouter';
 /**
  * Mutation IDs that fired during compile. Empty in v1 (no mutation engine
  * yet). Populated when the brain is online and pushing mutations.
@@ -592,6 +606,22 @@ type CompiledRequest = {
     }>;
     tools?: unknown[];
     response_format?: unknown;
+} | {
+    /**
+     * alpha.92 — the OpenRouter gateway route. OpenAI-compatible wire;
+     * `model` is the OpenRouter id (`vendor/model`, e.g.
+     * `deepseek/deepseek-v4-flash`), mapped from the CANONICAL profile id
+     * by `openRouterModelId()` — the canonical id stays the measurement
+     * identity everywhere else.
+     */
+    provider: 'openrouter';
+    model: string;
+    messages: Array<{
+        role: string;
+        content: unknown;
+    }>;
+    tools?: unknown[];
+    response_format?: unknown;
 };
 /**
  * Best-practice advisory emitted by the compiler at compile time. Non-fatal —
@@ -1065,6 +1095,14 @@ interface NormalizedResponse {
     tokens: NormalizedTokens;
     /** Provider-specific finish reason, passed through unchanged. */
     finishReason?: string;
+    /**
+     * alpha.92 — the serving host a gateway reported (OpenRouter's response
+     * `provider` field, captured verbatim: "Venice", "StreamLake", …).
+     * Undefined on direct vendor calls and on gateways that don't report it.
+     * Discarding this would be the L-073 silent-drop at birth — the gateway
+     * itself tells us which stack served the call.
+     */
+    routeHost?: string;
     /** Untouched provider response — escape hatch for consumers needing fields not yet normalized. */
     raw: unknown;
     /** Set when structuredOutput parsing was attempted and failed. */
@@ -1077,6 +1115,8 @@ interface ApiKeys {
     deepseek?: string;
     zai?: string;
     moonshot?: string;
+    /** alpha.92 — the OpenRouter gateway route's key (a route key, not a vendor key). */
+    openrouter?: string;
 }
 /**
  * Per-provider override fields shallow-merged into the lowered request before
@@ -1090,6 +1130,8 @@ interface ProviderOverrides {
     deepseek?: Record<string, unknown>;
     zai?: Record<string, unknown>;
     moonshot?: Record<string, unknown>;
+    /** alpha.92 — overrides for requests traveling the OpenRouter route. */
+    openrouter?: Record<string, unknown>;
 }
 /**
  * Full-IR inline shadow-probe config (Shape B, Phase 1 — 2026-05-29 s51).
@@ -1180,6 +1222,24 @@ interface CallOptions {
      * money attributable to the customer). See {@link RecordInput.endUserId}.
      */
     endUserId?: string;
+    /**
+     * alpha.92 — route this call through a gateway instead of the vendor's
+     * own API. Omit (or `'direct'`) for normal calls — this is the STARTER
+     * tier for eval and candidate admission, NOT a consumer routing surface:
+     * production traffic stays direct-vendor-only by default per the
+     * execute-leg design contract. When `'openrouter'`:
+     *   - lowering emits the OpenAI-compatible wire with the OpenRouter id
+     *     (canonical id stays the measurement identity),
+     *   - the outcome row records `route='openrouter'` + `route_host` (the
+     *     serving host OpenRouter reports),
+     *   - the learning key gains the route dimension (`…::model@openrouter`),
+     *     so gateway evidence never pollutes direct-vendor evidence,
+     *   - cliff guards still apply but are route-unverified (see
+     *     {@link CallResult.routeUnverifiedCliffs}) — never assume a host
+     *     fixed a vendor cliff.
+     * Requires `OPENROUTER_API_KEY`.
+     */
+    route?: CallRoute;
     /**
      * alpha.84 — fires once per FAILED attempt during the fallback walk, before
      * the walk continues. IC-Cairn's filing, 2026-07-29.
@@ -1429,6 +1489,28 @@ interface CallResult {
     provider: Provider;
     response: NormalizedResponse;
     latencyMs: number;
+    /**
+     * alpha.92 — the route this call traveled. `'direct'` unless the caller
+     * passed `CallOptions.route`. Part of the measurement's identity: the
+     * outcome row and learning key are route-scoped, and verdicts never
+     * silently transfer across routes.
+     */
+    route: CallRoute;
+    /**
+     * alpha.92 — the serving host the gateway reported for the winning
+     * attempt (OpenRouter's `provider` field: "Venice", "StreamLake", …).
+     * Undefined on direct calls.
+     */
+    routeHost?: string;
+    /**
+     * alpha.92 — cliff metrics of the served profile that applied on a
+     * non-direct route. The guards STILL FIRED (conservative default: never
+     * assume a host fixed a vendor cliff) but their evidence is vendor-route
+     * evidence — a different serving stack may not share the cliff. The
+     * probe-suite can promote/demote per (cliff × route). Undefined on
+     * direct calls or when the served profile has no cliffs.
+     */
+    routeUnverifiedCliffs?: string[];
     /** Mutations that fired during compile (informational, mirrors CompileResult.mutationsApplied). */
     mutationsApplied: MutationApplied[];
     /** One entry per provider attempt — observability for retry/fallback walks. */
@@ -1592,6 +1674,18 @@ interface RecordInput {
      * Omit for traffic that has no end user.
      */
     endUserId?: string;
+    /**
+     * alpha.92 — the route the call traveled (migration 067). `call()` sets
+     * this automatically from `CallOptions.route`; manual `record()` callers
+     * replaying through a gateway set it themselves. Omit for direct calls —
+     * the column defaults to `'direct'`.
+     */
+    route?: CallRoute;
+    /**
+     * alpha.92 — the gateway-reported serving host ("Venice", "StreamLake").
+     * Only meaningful with a non-direct `route`.
+     */
+    routeHost?: string;
     /** Actual tokens consumed (post-call). */
     tokensIn: number;
     tokensOut: number;

package/dist/{ir-CTx026t0.d.ts → ir-BWnE6LaB.d.ts}

@@ -440,7 +440,21 @@ interface PromptIR {
      */
     historyCachePolicy?: HistoryCachePolicy;
 }
-type Provider = 'anthropic' | 'google' | 'openai' | 'deepseek' | 'zai' | 'moonshot' | 'mistral' | 'xai';
+type Provider = 'anthropic' | 'google' | 'openai' | 'deepseek' | 'zai' | 'moonshot' | 'mistral' | 'xai' | 'openrouter';
+/**
+ * alpha.92 — the route a call travels, part of a measurement's identity
+ * (execute-leg design contract, 2026-08-26). `'direct'` = the vendor's own
+ * API (every measurement before this release; the default, and the only
+ * route consumer production traffic uses unless a consumer explicitly opts
+ * in later). `'openrouter'` = the OpenRouter gateway — the STARTER tier for
+ * eval and candidate admission. The route matters because the model behind
+ * a name is a different serving stack per gateway host: the same
+ * `deepseek-v4-flash` id was served by "Venice" and by "StreamLake"
+ * emitting PARALLEL tool calls — behavior opposite to the vendor-API
+ * evidence our cliff rests on. Vendor-keyed evidence does not transfer
+ * through a gateway, so verdicts never silently transfer across routes.
+ */
+type CallRoute = 'direct' | 'openrouter';
 /**
  * Mutation IDs that fired during compile. Empty in v1 (no mutation engine
  * yet). Populated when the brain is online and pushing mutations.
@@ -592,6 +606,22 @@ type CompiledRequest = {
     }>;
     tools?: unknown[];
     response_format?: unknown;
+} | {
+    /**
+     * alpha.92 — the OpenRouter gateway route. OpenAI-compatible wire;
+     * `model` is the OpenRouter id (`vendor/model`, e.g.
+     * `deepseek/deepseek-v4-flash`), mapped from the CANONICAL profile id
+     * by `openRouterModelId()` — the canonical id stays the measurement
+     * identity everywhere else.
+     */
+    provider: 'openrouter';
+    model: string;
+    messages: Array<{
+        role: string;
+        content: unknown;
+    }>;
+    tools?: unknown[];
+    response_format?: unknown;
 };
 /**
  * Best-practice advisory emitted by the compiler at compile time. Non-fatal —
@@ -1065,6 +1095,14 @@ interface NormalizedResponse {
     tokens: NormalizedTokens;
     /** Provider-specific finish reason, passed through unchanged. */
     finishReason?: string;
+    /**
+     * alpha.92 — the serving host a gateway reported (OpenRouter's response
+     * `provider` field, captured verbatim: "Venice", "StreamLake", …).
+     * Undefined on direct vendor calls and on gateways that don't report it.
+     * Discarding this would be the L-073 silent-drop at birth — the gateway
+     * itself tells us which stack served the call.
+     */
+    routeHost?: string;
     /** Untouched provider response — escape hatch for consumers needing fields not yet normalized. */
     raw: unknown;
     /** Set when structuredOutput parsing was attempted and failed. */
@@ -1077,6 +1115,8 @@ interface ApiKeys {
     deepseek?: string;
     zai?: string;
     moonshot?: string;
+    /** alpha.92 — the OpenRouter gateway route's key (a route key, not a vendor key). */
+    openrouter?: string;
 }
 /**
  * Per-provider override fields shallow-merged into the lowered request before
@@ -1090,6 +1130,8 @@ interface ProviderOverrides {
     deepseek?: Record<string, unknown>;
     zai?: Record<string, unknown>;
     moonshot?: Record<string, unknown>;
+    /** alpha.92 — overrides for requests traveling the OpenRouter route. */
+    openrouter?: Record<string, unknown>;
 }
 /**
  * Full-IR inline shadow-probe config (Shape B, Phase 1 — 2026-05-29 s51).
@@ -1180,6 +1222,24 @@ interface CallOptions {
      * money attributable to the customer). See {@link RecordInput.endUserId}.
      */
     endUserId?: string;
+    /**
+     * alpha.92 — route this call through a gateway instead of the vendor's
+     * own API. Omit (or `'direct'`) for normal calls — this is the STARTER
+     * tier for eval and candidate admission, NOT a consumer routing surface:
+     * production traffic stays direct-vendor-only by default per the
+     * execute-leg design contract. When `'openrouter'`:
+     *   - lowering emits the OpenAI-compatible wire with the OpenRouter id
+     *     (canonical id stays the measurement identity),
+     *   - the outcome row records `route='openrouter'` + `route_host` (the
+     *     serving host OpenRouter reports),
+     *   - the learning key gains the route dimension (`…::model@openrouter`),
+     *     so gateway evidence never pollutes direct-vendor evidence,
+     *   - cliff guards still apply but are route-unverified (see
+     *     {@link CallResult.routeUnverifiedCliffs}) — never assume a host
+     *     fixed a vendor cliff.
+     * Requires `OPENROUTER_API_KEY`.
+     */
+    route?: CallRoute;
     /**
      * alpha.84 — fires once per FAILED attempt during the fallback walk, before
      * the walk continues. IC-Cairn's filing, 2026-07-29.
@@ -1429,6 +1489,28 @@ interface CallResult {
     provider: Provider;
     response: NormalizedResponse;
     latencyMs: number;
+    /**
+     * alpha.92 — the route this call traveled. `'direct'` unless the caller
+     * passed `CallOptions.route`. Part of the measurement's identity: the
+     * outcome row and learning key are route-scoped, and verdicts never
+     * silently transfer across routes.
+     */
+    route: CallRoute;
+    /**
+     * alpha.92 — the serving host the gateway reported for the winning
+     * attempt (OpenRouter's `provider` field: "Venice", "StreamLake", …).
+     * Undefined on direct calls.
+     */
+    routeHost?: string;
+    /**
+     * alpha.92 — cliff metrics of the served profile that applied on a
+     * non-direct route. The guards STILL FIRED (conservative default: never
+     * assume a host fixed a vendor cliff) but their evidence is vendor-route
+     * evidence — a different serving stack may not share the cliff. The
+     * probe-suite can promote/demote per (cliff × route). Undefined on
+     * direct calls or when the served profile has no cliffs.
+     */
+    routeUnverifiedCliffs?: string[];
     /** Mutations that fired during compile (informational, mirrors CompileResult.mutationsApplied). */
     mutationsApplied: MutationApplied[];
     /** One entry per provider attempt — observability for retry/fallback walks. */
@@ -1592,6 +1674,18 @@ interface RecordInput {
      * Omit for traffic that has no end user.
      */
     endUserId?: string;
+    /**
+     * alpha.92 — the route the call traveled (migration 067). `call()` sets
+     * this automatically from `CallOptions.route`; manual `record()` callers
+     * replaying through a gateway set it themselves. Omit for direct calls —
+     * the column defaults to `'direct'`.
+     */
+    route?: CallRoute;
+    /**
+     * alpha.92 — the gateway-reported serving host ("Venice", "StreamLake").
+     * Only meaningful with a non-direct `route`.
+     */
+    routeHost?: string;
     /** Actual tokens consumed (post-call). */
     tokensIn: number;
     tokensOut: number;

package/dist/key-health.js

@@ -28,7 +28,7 @@ __export(key_health_exports, {
 module.exports = __toCommonJS(key_health_exports);
 
 // src/version.ts
-var LIBRARY_VERSION = "2.0.0-alpha.91";
+var LIBRARY_VERSION = "2.0.0-alpha.92";
 
 // src/key-health.ts
 var JSON_HEADERS = { "Content-Type": "application/json" };

package/dist/key-health.mjs

@@ -3,7 +3,7 @@ import {
   KEY_FINGERPRINT_LENGTH,
   createKeyHealthRoute,
   keyFingerprint
-} from "./chunk-AUZTO6Q5.mjs";
+} from "./chunk-QOQV66PU.mjs";
 export {
   KEY_FINGERPRINT_DOMAIN,
   KEY_FINGERPRINT_LENGTH,

package/dist/profiles.d.mts

@@ -1,4 +1,4 @@
-import { l as Provider } from './ir-DeYMLWge.mjs';
+import { l as Provider } from './ir-BPYh68mv.mjs';
 import { IntentArchetypeName } from './dialect.mjs';
 
 /**

package/dist/profiles.d.ts

@@ -1,4 +1,4 @@
-import { l as Provider } from './ir-CTx026t0.js';
+import { l as Provider } from './ir-BWnE6LaB.js';
 import { IntentArchetypeName } from './dialect.js';
 
 /**

package/dist/{types-Cp9ot1HV.d.ts → types-BCHv34P7.d.ts}

@@ -1,4 +1,4 @@
-import { j as Adapter, F as FallbackReason, y as SectionKind } from './ir-CTx026t0.js';
+import { j as Adapter, F as FallbackReason, y as SectionKind } from './ir-BWnE6LaB.js';
 
 /**
  * Wire contract for the Glass-Box Chrome extension's brain-poll endpoint.

package/dist/{types-cBzinzUR.d.mts → types-BgvLmT3s.d.mts}

@@ -1,4 +1,4 @@
-import { t as MutationApplied, B as BestPracticeAdvisory, F as FallbackReason, n as CallAttempt } from './ir-DeYMLWge.mjs';
+import { t as MutationApplied, B as BestPracticeAdvisory, F as FallbackReason, n as CallAttempt } from './ir-BPYh68mv.mjs';
 
 /**
  * Glass-Box observability types (alpha.17).

package/dist/{types-BKbRtmUb.d.ts → types-BhxC4hdx.d.ts}

@@ -1,4 +1,4 @@
-import { t as MutationApplied, B as BestPracticeAdvisory, F as FallbackReason, n as CallAttempt } from './ir-CTx026t0.js';
+import { t as MutationApplied, B as BestPracticeAdvisory, F as FallbackReason, n as CallAttempt } from './ir-BWnE6LaB.js';
 
 /**
  * Glass-Box observability types (alpha.17).

package/dist/{types-DD36cCbZ.d.mts → types-eLelJBj-.d.mts}

@@ -1,4 +1,4 @@
-import { j as Adapter, F as FallbackReason, y as SectionKind } from './ir-DeYMLWge.mjs';
+import { j as Adapter, F as FallbackReason, y as SectionKind } from './ir-BPYh68mv.mjs';
 
 /**
  * Wire contract for the Glass-Box Chrome extension's brain-poll endpoint.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@warmdrift/kgauto-compiler",
-  "version": "2.0.0-alpha.91",
+  "version": "2.0.0-alpha.92",
   "description": "Prompt compiler with executable provider knowledge for multi-model AI apps: normalized multi-provider transport with fallback chains, compile-time cliff guards, a curated model registry, and a telemetry flight recorder. Swap models without rewriting prompts.",
   "main": "./dist/index.js",
   "module": "./dist/index.mjs",