circle-ir-ai 2.34.0 → 2.36.0

package/CHANGELOG.md

@@ -5,6 +5,259 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [2.36.0] - 2026-07-03
+
+Cache Round 3 (`cognium-ai#189`) — model-in-path defense-in-depth.
+Motivated by the 2026-07-03 `zai-org/glm-5.2` and `minimax/minimax-m3`
+CWE-Bench-Java runs, which both produced byte-identical 65/120
+results with **zero** `llm-discovery:` attribution markers in either
+log. Investigation confirmed the real root cause is a silent LLM-
+error swallow in `src/llm/discovery.ts:524-531` (returns
+`{vulnerabilityFound: false}` for any exception → LLM failures show
+up as "no vulnerability found"). The cache-key composition IS
+correctly model-fingerprinted, so this patch does NOT fix the
+identical-result bug — it makes future model-cross-contamination
+visible in R2 dashboards and impossible under a targeted `s3 rm`.
+
+### Changed — R2/local-fs layout: `<model-slug>` path segment
+
+`CacheKey` gains a new optional `modelSlug?: string` field
+(`src/cache/backend.ts`). `renderObjectPath()` in
+`src/cache/backends/layout.ts` injects the slug between the
+namespace root and the sharded digest for the three model-dependent
+namespaces:
+
+```
+verify/<model-slug>/<4hex>/<sha>.json      (was: verify/<4hex>/<sha>.json)
+discovery/<model-slug>/<4hex>/<sha>.json   (was: discovery/<4hex>/<sha>.json)
+classifier/<model-slug>/<4hex>/<sha>.json  (was: classifier/<4hex>/<sha>.json)
+```
+
+`tree/` and `cluster/` layouts are unchanged (both are model-
+independent). When `modelSlug` is empty (no LLM configured, e.g.
+pure-static scans), the flat 2.28.x path shape is preserved for
+back-compat.
+
+`ClassificationCache.toCacheKey()` populates `modelSlug` from the
+per-phase `modelFingerprint` (already threaded through since
+2.28.0/`cognium-ai#151`) sanitized via the new exported helper
+`sanitizeModelSlug()` (replaces `=` with `-` so
+`disc=zai-org_glm-5.2` renders as `disc-zai-org_glm-5.2`).
+
+### Changed — SCHEMA_VER bumped `cic:v2` → `cic:v3`
+
+All warm entries under both local-fs and R2 backends are invalidated
+so operators re-populate under the Round-3 layout. Rollback path:
+downgrade to `2.35.x` and old entries still miss (their `cic:v2`
+envelope fails the `isValid()` schema check under the new version;
+new writes go under `cic:v2` again). No breaking API change.
+
+### Rationale
+
+Even though the digest composition already folds
+`modelFingerprint` into the SHA-256 (so `verify=opus` and
+`verify=gpt-4o-mini` land in different files), the flat 2.28.x
+layout made model-cross-contamination invisible in the R2 dashboard.
+Round 3 surfaces the model dimension as a top-level segment so:
+
+1. Operators see per-model cache footprint at a glance.
+2. Per-model eviction is a single `s3 rm --recursive s3://cognium-cache/v2/discovery/disc-gemma3-12b/`.
+3. Future digest-composition regressions (e.g. a stray refactor that
+   drops `modelFingerprint` from `computeDigest`) become visible as
+   an entry hitting under the wrong model prefix.
+
+### Tests
+
+- `tests/cache-model-in-path.test.ts` — 12 new tests covering the
+  layout renderer, `sanitizeModelSlug`, `ClassificationCache`
+  round-trip under two different discovery models, tree/cluster
+  slug-independence, and the empty-fingerprint back-compat path.
+- `tests/cache-key-shape.test.ts` — SCHEMA_VER assertion updated to
+  `'cic:v3'`.
+
+Full suite: 1340 pass + 3 skipped (was 1328 + 3), typecheck clean.
+
+### Follow-up (out of scope for this release)
+
+The silent LLM-error swallow at `src/llm/discovery.ts:524-531` is
+the actual root cause of the "identical 65/120" observation from
+the glm-5.2 + minimax-m3 runs. A separate ticket should:
+
+- Surface LLM errors on the runner side (bubble up rate rather than
+  return fake `{vulnerabilityFound: false}`)
+- Add a `llm.failureCount` metric to the CWE-Bench-Java runner's
+  summary output so a run that lost 100% of LLM calls doesn't look
+  like a legitimate static-baseline number.
+
+## [2.35.0] - 2026-07-03
+
+Sprint P2 Batch 4 — wide precision pass. Three shipping tickets
+(`cognium-ai#173`, `#127` + wide extension, `#169`) plus the
+close-out on `#172` (already-shipped, no code delta). Upstream
+resource-leak FPs (`cognium-ai#170`, `#171`) escalated to
+`cognium-dev` as tracked issues; no engine-source edits in this
+release per workspace-boundary policy.
+
+### Added — build / CI script path suppression gate (cognium-ai#173)
+
+New `isBuildOrCiScriptPath(sinkFile)` predicate in
+`src/security-scan/sink-filters.ts` wired into the
+`isSuppressedSinkShape` cascade after `isCryptoLibraryInternal` and
+before `isRequireOrImportSink`. Suppresses findings whose sink lives
+under a well-known build / documentation / example directory:
+
+- Path regex tokens (case-insensitive, anchored to a `/` boundary):
+  `docs?`, `dev`, `scripts?`, `tools`, `examples`, `samples`, `demos`,
+  `benchmarks?`. Ambiguous tokens (`example`, `sample`, `demo`) require
+  plural to avoid Java `com/example/...` package-name collisions —
+  verified by the "does NOT suppress `src/main/java/com/example/Foo.java`"
+  test case.
+- File regex (basename anywhere in tree): `conf.py`, `noxfile.py`,
+  `conftest.py`, `setup.py`, `_config.py`. These historically travel
+  standalone (Sphinx conf at repo root, per-package conftest).
+- Windows path separators normalised (`.replace(/\\/g, '/')`).
+- `test/` + `tests/` deliberately NOT included — unit tests carry
+  real sinks (integration setup that resembles prod).
+
+Complementary to `scanner.ts` file-walker exclusions: those drop the
+file entirely; this gate handles the case where a partial `--include`
+pattern or looser exclude re-admits build / CI files but the user
+still doesn't want the findings.
+
+**Tests.** 14 cases in `tests/sink-filters.test.ts`:
+
+- Positive: `docs/conf.py`, `docs/source/conf.py`, `scripts/deploy.py`,
+  `tools/generate_report.py`, `dev/lint.py`, plural
+  `examples/samples/demos/`, `benchmarks/`, standalone build files,
+  case-insensitive tokens, Windows separators.
+- Negative: substring FP guards (`docstore`, `sampler`, `toolkit`),
+  singular `example`, `sample`, `demo` (Java-package collision),
+  production `src/main/`, `lib/`, `app/`, `com/example/`, test dirs,
+  nullish inputs.
+- Integration: `isSuppressedSinkShape` returns true when sink lives
+  under a build path even if all other gates would pass through.
+
+### Added — wide TIER_1 supertype extension (cognium-ai#127 + wide)
+
+`TIER_1_BY_SUPERTYPE` in `src/analysis/entry-point-detection.ts`
+extends to five new framework families. Every entry below is an
+accepted external trust boundary — the JVM invokes the method with
+attacker-controlled data from a network / transport surface:
+
+- **Netty** — `ChannelInboundHandler.channelRead[/Complete]`,
+  `SimpleChannelInboundHandler.channelRead0`,
+  `ChannelInboundHandlerAdapter.channelRead`,
+  `exceptionCaught`, `userEventTriggered`.
+- **Vert.x** — `Handler.handle`, gated on a Vert.x-shaped parameter
+  type (`RoutingContext`, `HttpServerRequest`, `Message`, `Buffer`,
+  `AsyncResult`, `Promise`, etc.). `Handler` alone is a common name
+  (SLF4J, `java.util.logging`), so the raw supertype hit is
+  disambiguated via `matchesVertxHandlerParam(method)`. Non-matching
+  Handler.handle hits fall through with a one-time `console.warn`
+  keyed on `cognium-ai#127` so we can tune `VERTX_HANDLER_PARAM_TYPES`
+  from real corpus signal. A test-only `resetHandlerWarnState()`
+  export drops the once-latch so tests can spy on the warning.
+- **gRPC** — `ServerCallHandler.startCall`, `ServerCall.Listener.{onMessage,
+  onHalfClose, onCancel, onComplete, onReady}`, `BindableService.bindService`.
+- **Spring WebFlux** — `HandlerFunction.handle`, `WebFilter.filter`.
+- **JAX-WS** — `Provider.invoke`.
+
+Complementary to shipped `#128` (verifier reachability tags) and the
+`interprocedural_param` gate in `runMerge`: this batch's additions flip
+previously-uncaught taint flows into detected findings when the
+enclosing class extends / implements one of these supertypes.
+
+**Semver.** This is the reason `2.34.0` → `2.35.0` (minor bump, not
+patch): behavioral additive change flips previously-uncaught sinks
+into TP, not pure FP suppression.
+
+**Tests.** 16 cases in `tests/analysis/entry-point-detection.test.ts`:
+
+- 13 supertype coverage tests (Netty inbound handlers x3 + non-lifecycle
+  helper control, Vert.x with 3 param-type variants incl. package-qualified,
+  gRPC ServerCallHandler / Listener / BindableService, WebFlux
+  HandlerFunction / WebFilter, JAX-WS Provider).
+- 3 Vert.x disambiguation tests (`java.util.logging.Handler` with
+  `LogRecord` param falls through to TIER_3, warn emitted only once
+  across multiple non-Vert.x hits, warn NOT emitted on genuine Vert.x
+  bindings).
+
+### Changed — verifier prompt directive hardening for gemma3:12b (cognium-ai#169)
+
+`BATCH_VERIFICATION_PROMPT` in `src/llm/verification.ts` rewrites the
+`Entry-point tier` block from advisory language into explicit
+directives. Root cause: on the 2026-06-24 top-100 Java baseline
+gemma3:12b passed 495/496 CRIT+HIGH through as `exploitable: true`
+because it treated "requires a Tier-1 call chain" as guidance rather
+than a rule.
+
+Prompt changes:
+
+- Prefaces the tier block with *"These are DIRECTIVES — treat them as
+  reachability facts, not hints, unless the code clearly contradicts
+  them (cognium-ai#169)"*.
+- **TIER_1_ENTRY_POINT** — affirmative directive: *"Sources here ARE
+  attacker-reachable. Do NOT downgrade to UNCERTAIN or FALSE_POSITIVE
+  just because you can't trace the full network path — the classifier
+  already did that."* Enumerates Batch 4's new supertype set (Netty,
+  Vert.x, gRPC, WebFlux, JAX-WS) so the LLM knows the classifier
+  scope matches.
+- **TIER_3_LIBRARY_API** — hard rule: *"You MUST answer FALSE_POSITIVE
+  unless BOTH conditions hold: (1) the sink writes to a public-facing
+  target, AND (2) the code shows the tainted value reaches that target
+  unmodified."* Pins the short-reasoning template
+  `"TIER_3_LIBRARY_API: no external entry"` for grouping.
+- Explicit ban on hypothetical-caller invention: *"Do NOT invent a
+  hypothetical Tier-1 caller."*
+
+**Tests.** New `tests/regression/verifier-tier-directive.test.ts`
+snapshots the five prompt substrings so accidental drift is caught
+in `npm test` (~seconds) instead of showing up as an under-filter
+regression on the next sweep. Same-model gemma3:12b sweep is the
+ground-truth verification, tracked post-2.35.0.
+
+### Closed — cognium-ai#172 (JSON content-type in scope suppresses XSS)
+
+Already implemented in `hasJsonContentTypeInScope()` at
+`sink-filters.ts:819-854`. Suppresses `xss` / `reflected_xss` /
+`dom_xss` findings when `setContentType("application/json...")` fires
+in the same method scope before the sink. Uses
+`TypeShape.methods[].{start_line,end_line}` for method bounds. Called
+from `runReport` at `workflow.ts:846` via `isSuppressedSinkShape()`.
+Landed silently in earlier work; ticket closed with pointer.
+
+### Escalated — cognium-dev issues for resource-leak FPs (cognium-ai#170, #171)
+
+Filed as tracked issues on `cognium-dev` per workspace-boundary policy
+(no engine-source edits in this repo):
+
+- **#170** — calcite-avatica `AvaticaConnection#createStatement` — the
+  try/finally sits inside a lambda passed to `SecureUtils.doAs()`.
+  circle-ir's resource-leak pass doesn't see the finally-close because
+  the lambda body isn't inlined into the outer scope.
+- **#171** — angus-mail `MailHandler#send` opens
+  `FileInputStream → BufferedInputStream → wrap()` — the outer wrap is
+  closed but circle-ir tracks the inner `FileInputStream` as leaked.
+
+Both cross-referenced from the cognium-ai tickets. Retire the
+cognium-ai tickets after the upstream engine ships the fix and we
+bump the `circle-ir` dep range.
+
+### Impact
+
+Projected against the 2.34.0 → 2.35.0 top-10 Java re-sweep (post-ship
+validation):
+
+- CRIT ≤ 185 (vs 200 baseline; ≥ −15 from `#173` build-script gate +
+  Netty proper-shape).
+- HIGH ≤ 20 (vs 24 baseline).
+- jedis TLS-verify-disabled known-TP must remain flagged — verifier
+  hardening must not over-filter genuine external entry points.
+- `verifyBatch` call volume expected near-flat at 627, possibly
+  slightly lower if `#173` gate suppresses pre-verify.
+
+Sweep evidence lands as `testharness/java/results-top10-2.35.0-<date>/`.
+
 ## [2.34.0] - 2026-07-02
 
 ### Added — XPath / XXE / crypto library-internal FP gates (cognium-ai#167)

package/dist/analysis/entry-point-detection.d.ts

@@ -77,6 +77,11 @@ export interface EntryPointContext {
      */
     callGraph?: unknown;
 }
+/**
+ * Test-only reset for the Handler WARN once-latch.
+ * @internal
+ */
+export declare function resetHandlerWarnState(): void;
 /**
  * Classify a method's entry-point tier.
  *

package/dist/analysis/entry-point-detection.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"entry-point-detection.d.ts","sourceRoot":"","sources":["../../src/analysis/entry-point-detection.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiEG;AAEH,OAAO,KAAK,EACV,SAAS,EACT,WAAW,EAEZ,MAAM,uCAAuC,CAAC;AAM/C,MAAM,MAAM,cAAc,GACtB,oBAAoB,GACpB,kBAAkB,GAClB,oBAAoB,GACpB,cAAc,CAAC;AAEnB,MAAM,WAAW,iBAAiB;IAChC,yCAAyC;IACzC,KAAK,CAAC,EAAE,aAAa,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC;IACxC,+DAA+D;IAC/D,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB;;;OAGG;IACH,SAAS,CAAC,EAAE,OAAO,CAAC;CACrB;AAuJD;;;;;;;;;;;GAWG;AACH,wBAAgB,sBAAsB,CACpC,MAAM,EAAE,WAAW,GAAG,SAAS,EAC/B,aAAa,EAAE,SAAS,GAAG,SAAS,EACpC,GAAG,EAAE,iBAAiB,GACrB,cAAc,CAgChB;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,8BAA8B,CAC5C,UAAU,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,EACrC,eAAe,EAAE,WAAW,GAAG,SAAS,EACxC,aAAa,EAAE,SAAS,GAAG,SAAS,EACpC,GAAG,EAAE,iBAAiB,GACrB,OAAO,CAKT"}
+{"version":3,"file":"entry-point-detection.d.ts","sourceRoot":"","sources":["../../src/analysis/entry-point-detection.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiEG;AAEH,OAAO,KAAK,EACV,SAAS,EACT,WAAW,EAEZ,MAAM,uCAAuC,CAAC;AAM/C,MAAM,MAAM,cAAc,GACtB,oBAAoB,GACpB,kBAAkB,GAClB,oBAAoB,GACpB,cAAc,CAAC;AAEnB,MAAM,WAAW,iBAAiB;IAChC,yCAAyC;IACzC,KAAK,CAAC,EAAE,aAAa,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC;IACxC,+DAA+D;IAC/D,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB;;;OAGG;IACH,SAAS,CAAC,EAAE,OAAO,CAAC;CACrB;AA6ID;;;GAGG;AACH,wBAAgB,qBAAqB,IAAI,IAAI,CAE5C;AAoGD;;;;;;;;;;;GAWG;AACH,wBAAgB,sBAAsB,CACpC,MAAM,EAAE,WAAW,GAAG,SAAS,EAC/B,aAAa,EAAE,SAAS,GAAG,SAAS,EACpC,GAAG,EAAE,iBAAiB,GACrB,cAAc,CAgChB;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,8BAA8B,CAC5C,UAAU,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,EACrC,eAAe,EAAE,WAAW,GAAG,SAAS,EACxC,aAAa,EAAE,SAAS,GAAG,SAAS,EACpC,GAAG,EAAE,iBAAiB,GACrB,OAAO,CAKT"}

package/dist/analysis/entry-point-detection.js

@@ -140,7 +140,82 @@ const TIER_1_BY_SUPERTYPE = new Map([
     // Spring boot CLI entry points
     ['CommandLineRunner', new Set(['run'])],
     ['ApplicationRunner', new Set(['run'])],
+    // ---------------------------------------------------------------------
+    // cognium-ai#127 + Batch 4 wide supertype extension.
+    //
+    // Every entry below is an accepted external trust boundary: the JVM
+    // invokes the method with attacker-controlled data from a network /
+    // transport surface. Users of this map should treat any hit as a
+    // hard TIER_1 signal.
+    // ---------------------------------------------------------------------
+    // Netty — inbound handlers see raw network bytes on the pipeline
+    ['ChannelInboundHandler', new Set(['channelRead', 'channelReadComplete', 'exceptionCaught', 'userEventTriggered'])],
+    ['SimpleChannelInboundHandler', new Set(['channelRead0', 'channelReadComplete', 'exceptionCaught'])],
+    ['ChannelInboundHandlerAdapter', new Set(['channelRead', 'channelReadComplete', 'exceptionCaught'])],
+    // Vert.x — Handler<T>.handle(T) is the universal Vert.x callback shape.
+    // `Handler` is a common short name (java.util.logging.Handler etc.), so
+    // the raw map hit is validated against a Vert.x-looking parameter type
+    // in `matchesVertxHandlerParam` before we classify as TIER_1.
+    ['Handler', new Set(['handle'])],
+    // gRPC — server-side callback surfaces
+    ['ServerCallHandler', new Set(['startCall'])],
+    ['ServerCall.Listener', new Set(['onMessage', 'onHalfClose', 'onCancel', 'onComplete', 'onReady'])],
+    ['BindableService', new Set(['bindService'])],
+    // Spring WebFlux reactive server-side entry points
+    ['HandlerFunction', new Set(['handle'])],
+    ['WebFilter', new Set(['filter'])],
+    // JAX-WS provider-style endpoint
+    ['Provider', new Set(['invoke'])],
 ]);
+/**
+ * Simple-name substrings of parameter types that indicate a Vert.x
+ * `Handler<T>.handle(T)` binding. Used to disambiguate the generic
+ * `Handler` supertype match from unrelated `Handler` names in the JDK
+ * or SLF4J. If none match, `methodIsSupertypeLifecycleEntryPoint`
+ * falls through and emits a one-time WARN so we can tune the list.
+ */
+const VERTX_HANDLER_PARAM_TYPES = new Set([
+    'RoutingContext',
+    'HttpServerRequest',
+    'HttpServerResponse',
+    'HttpClientRequest',
+    'HttpClientResponse',
+    'ServerWebSocket',
+    'WebSocket',
+    'Message',
+    'NetSocket',
+    'Buffer',
+    'AsyncResult',
+    'Promise',
+    'Future',
+    'Event',
+]);
+/**
+ * One-time WARN gate for `Handler.handle` hits that do NOT look like
+ * Vert.x. Emitted via `console.warn` so hosts (including tests via a
+ * spy) can observe without pulling in a full logger dep. Reset by
+ * calling `resetHandlerWarnState()` from tests.
+ */
+let handlerWarnedOnce = false;
+/**
+ * Test-only reset for the Handler WARN once-latch.
+ * @internal
+ */
+export function resetHandlerWarnState() {
+    handlerWarnedOnce = false;
+}
+function matchesVertxHandlerParam(method) {
+    const params = method.parameters ?? [];
+    if (params.length !== 1)
+        return false;
+    const paramType = simpleTypeName(params[0].type ?? '');
+    if (!paramType)
+        return false;
+    // The simple-name may be qualified (`io.vertx.ext.web.RoutingContext`)
+    // — strip package prefix before comparing.
+    const bare = paramType.split('.').pop() ?? paramType;
+    return VERTX_HANDLER_PARAM_TYPES.has(bare);
+}
 // ---------------------------------------------------------------------------
 // Helpers
 // ---------------------------------------------------------------------------
@@ -198,8 +273,26 @@ function methodIsSupertypeLifecycleEntryPoint(method, enclosingType) {
         candidates.push(simpleTypeName(i));
     for (const supertype of candidates) {
         const lifecycleMethods = TIER_1_BY_SUPERTYPE.get(supertype);
-        if (lifecycleMethods?.has(method.name))
-            return true;
+        if (!lifecycleMethods?.has(method.name))
+            continue;
+        // Batch 4 disambiguation gate for Vert.x `Handler.handle`. The bare
+        // supertype name `Handler` collides with unrelated JDK / SLF4J
+        // interfaces; only treat as TIER_1 when the parameter shape looks
+        // Vert.x. Falls through with a one-time WARN otherwise so we can
+        // tune the param-type list from real corpus signal.
+        if (supertype === 'Handler') {
+            if (matchesVertxHandlerParam(method))
+                return true;
+            if (!handlerWarnedOnce) {
+                handlerWarnedOnce = true;
+                // eslint-disable-next-line no-console
+                console.warn(`[entry-point-detection] cognium-ai#127: Handler.handle hit ` +
+                    `with non-Vert.x param shape on ${enclosingType.name}. ` +
+                    `First occurrence only; extend VERTX_HANDLER_PARAM_TYPES if this is a real Vert.x binding.`);
+            }
+            continue;
+        }
+        return true;
     }
     return false;
 }

package/dist/analysis/entry-point-detection.js.map

@@ -1 +1 @@
-{"version":3,"file":"entry-point-detection.js","sourceRoot":"","sources":["../../src/analysis/entry-point-detection.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiEG;AA8BH,8EAA8E;AAC9E,0CAA0C;AAC1C,8EAA8E;AAE9E;;;GAGG;AACH,MAAM,yBAAyB,GAAG,IAAI,GAAG,CAAC;IACxC,aAAa;IACb,gBAAgB;IAChB,YAAY;IACZ,aAAa;IACb,YAAY;IACZ,eAAe;IACf,cAAc;IACd,+BAA+B;IAC/B,gBAAgB;IAChB,kBAAkB;IAClB,6BAA6B;IAC7B,eAAe;IACf,cAAc;IACd,gBAAgB;IAChB,eAAe;IACf,aAAa;IACb,gBAAgB;IAChB,mBAAmB;IACnB,aAAa;IACb,YAAY;IACZ,+DAA+D;IAC/D,eAAe;IACf,mBAAmB;IACnB,WAAW;IACX,SAAS;IACT,MAAM;IACN,KAAK;IACL,MAAM;IACN,KAAK;IACL,QAAQ;IACR,OAAO;IACP,MAAM;IACN,SAAS;CACV,CAAC,CAAC;AAEH;;;GAGG;AACH,MAAM,wBAAwB,GAAG,IAAI,GAAG,CAAC;IACvC,aAAa;IACb,gBAAgB;IAChB,YAAY;IACZ,wBAAwB;IACxB,MAAM;IACN,uCAAuC;IACvC,YAAY;IACZ,6BAA6B;IAC7B,gBAAgB;IAChB,8EAA8E;IAC9E,6DAA6D;IAC7D,aAAa;CACd,CAAC,CAAC;AAEH;;;;GAIG;AACH,MAAM,mBAAmB,GAA6C,IAAI,GAAG,CAAC;IAC5E,cAAc;IACd,CAAC,aAAa,EAAE,IAAI,GAAG,CAAC,CAAC,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,WAAW,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC,CAAC;IAC/G,CAAC,gBAAgB,EAAE,IAAI,GAAG,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC;IACxC,CAAC,QAAQ,EAAE,IAAI,GAAG,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC;IACjC,aAAa;IACb,CAAC,oBAAoB,EAAE,IAAI,GAAG,CAAC,CAAC,WAAW,EAAE,YAAY,EAAE,iBAAiB,CAAC,CAAC,CAAC;IAC/E,CAAC,yBAAyB,EAAE,IAAI,GAAG,CAAC,CAAC,WAAW,EAAE,YAAY,EAAE,iBAAiB,EAAE,gCAAgC,CAAC,CAAC,CAAC;IACtH,+BAA+B;IAC/B,CAAC,mBAAmB,EAAE,IAAI,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;IACvC,CAAC,mBAAmB,EAAE,IAAI,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;CACxC,CAAC,CAAC;AAEH,8EAA8E;AAC9E,UAAU;AACV,8EAA8E;AAE9E;;;GAGG;AACH,SAAS,kBAAkB,CACzB,WAA8C,EAC9C,OAA4B;IAE5B,IAAI,CAAC,WAAW,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAC3D,KAAK,MAAM,GAAG,IAAI,WAAW,EAAE,CAAC;QAC9B,MAAM,MAAM,GAAG,GAAG;aACf,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC;aACjB,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC;aACtB,IAAI,EAAE,CAAC;QACV,IAAI,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC;YAAE,OAAO,IAAI,CAAC;IACvC,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;GAEG;AACH,SAAS,cAAc,CAAC,GAAW;IACjC,OAAO,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;AACxC,CAAC;AAED;;;;GAIG;AACH,SAAS,mBAAmB,CAAC,MAAmB;IAC9C,IAAI,MAAM,CAAC,IAAI,KAAK,MAAM;QAAE,OAAO,KAAK,CAAC;IACzC,MAAM,MAAM,GAAG,MAAM,CAAC,UAAU,IAAI,EAAE,CAAC;IACvC,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACtC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACrD,OAAO,CAAC,KAAK,UAAU,IAAI,CAAC,KAAK,WAAW,IAAI,CAAC,KAAK,oBAAoB,CAAC;AAC7E,CAAC;AAED;;;;GAIG;AACH,SAAS,oCAAoC,CAC3C,MAAmB,EACnB,aAAoC;IAEpC,IAAI,CAAC,MAAM,CAAC,IAAI;QAAE,OAAO,KAAK,CAAC;IAC/B,IAAI,CAAC,aAAa;QAAE,OAAO,KAAK,CAAC;IACjC,MAAM,UAAU,GAAa,EAAE,CAAC;IAChC,IAAI,aAAa,CAAC,OAAO;QAAE,UAAU,CAAC,IAAI,CAAC,cAAc,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC,CAAC;IAClF,KAAK,MAAM,CAAC,IAAI,aAAa,CAAC,UAAU,IAAI,EAAE;QAAE,UAAU,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,CAAC;IACnF,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;QACnC,MAAM,gBAAgB,GAAG,mBAAmB,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC5D,IAAI,gBAAgB,EAAE,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC;YAAE,OAAO,IAAI,CAAC;IACtD,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,8EAA8E;AAC9E,oBAAoB;AACpB,8EAA8E;AAE9E;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,sBAAsB,CACpC,MAA+B,EAC/B,aAAoC,EACpC,GAAsB;IAEtB,uEAAuE;IACvE,MAAM,QAAQ,GAAG,CAAC,GAAG,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;IACpD,IAAI,QAAQ,KAAK,MAAM;QAAE,OAAO,cAAc,CAAC;IAE/C,IAAI,CAAC,MAAM;QAAE,OAAO,cAAc,CAAC;IAEnC,6BAA6B;IAC7B,IAAI,kBAAkB,CAAC,MAAM,CAAC,WAAW,EAAE,yBAAyB,CAAC,EAAE,CAAC;QACtE,OAAO,oBAAoB,CAAC;IAC9B,CAAC;IAED,4EAA4E;IAC5E,IAAI,aAAa,IAAI,kBAAkB,CAAC,aAAa,CAAC,WAAW,EAAE,wBAAwB,CAAC,EAAE,CAAC;QAC7F,OAAO,oBAAoB,CAAC;IAC9B,CAAC;IAED,gCAAgC;IAChC,IAAI,oCAAoC,CAAC,MAAM,EAAE,aAAa,CAAC,EAAE,CAAC;QAChE,OAAO,oBAAoB,CAAC;IAC9B,CAAC;IAED,yCAAyC;IACzC,IAAI,mBAAmB,CAAC,MAAM,CAAC,EAAE,CAAC;QAChC,OAAO,oBAAoB,CAAC;IAC9B,CAAC;IAED,qDAAqD;IACrD,mEAAmE;IAEnE,cAAc;IACd,OAAO,oBAAoB,CAAC;AAC9B,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,8BAA8B,CAC5C,UAAqC,EACrC,eAAwC,EACxC,aAAoC,EACpC,GAAsB;IAEtB,IAAI,UAAU,KAAK,uBAAuB;QAAE,OAAO,KAAK,CAAC;IACzD,IAAI,CAAC,eAAe;QAAE,OAAO,KAAK,CAAC,CAAC,mCAAmC;IACvE,MAAM,IAAI,GAAG,sBAAsB,CAAC,eAAe,EAAE,aAAa,EAAE,GAAG,CAAC,CAAC;IACzE,OAAO,IAAI,KAAK,oBAAoB,CAAC;AACvC,CAAC"}
+{"version":3,"file":"entry-point-detection.js","sourceRoot":"","sources":["../../src/analysis/entry-point-detection.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiEG;AA8BH,8EAA8E;AAC9E,0CAA0C;AAC1C,8EAA8E;AAE9E;;;GAGG;AACH,MAAM,yBAAyB,GAAG,IAAI,GAAG,CAAC;IACxC,aAAa;IACb,gBAAgB;IAChB,YAAY;IACZ,aAAa;IACb,YAAY;IACZ,eAAe;IACf,cAAc;IACd,+BAA+B;IAC/B,gBAAgB;IAChB,kBAAkB;IAClB,6BAA6B;IAC7B,eAAe;IACf,cAAc;IACd,gBAAgB;IAChB,eAAe;IACf,aAAa;IACb,gBAAgB;IAChB,mBAAmB;IACnB,aAAa;IACb,YAAY;IACZ,+DAA+D;IAC/D,eAAe;IACf,mBAAmB;IACnB,WAAW;IACX,SAAS;IACT,MAAM;IACN,KAAK;IACL,MAAM;IACN,KAAK;IACL,QAAQ;IACR,OAAO;IACP,MAAM;IACN,SAAS;CACV,CAAC,CAAC;AAEH;;;GAGG;AACH,MAAM,wBAAwB,GAAG,IAAI,GAAG,CAAC;IACvC,aAAa;IACb,gBAAgB;IAChB,YAAY;IACZ,wBAAwB;IACxB,MAAM;IACN,uCAAuC;IACvC,YAAY;IACZ,6BAA6B;IAC7B,gBAAgB;IAChB,8EAA8E;IAC9E,6DAA6D;IAC7D,aAAa;CACd,CAAC,CAAC;AAEH;;;;GAIG;AACH,MAAM,mBAAmB,GAA6C,IAAI,GAAG,CAAC;IAC5E,cAAc;IACd,CAAC,aAAa,EAAE,IAAI,GAAG,CAAC,CAAC,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,WAAW,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC,CAAC;IAC/G,CAAC,gBAAgB,EAAE,IAAI,GAAG,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC;IACxC,CAAC,QAAQ,EAAE,IAAI,GAAG,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC;IACjC,aAAa;IACb,CAAC,oBAAoB,EAAE,IAAI,GAAG,CAAC,CAAC,WAAW,EAAE,YAAY,EAAE,iBAAiB,CAAC,CAAC,CAAC;IAC/E,CAAC,yBAAyB,EAAE,IAAI,GAAG,CAAC,CAAC,WAAW,EAAE,YAAY,EAAE,iBAAiB,EAAE,gCAAgC,CAAC,CAAC,CAAC;IACtH,+BAA+B;IAC/B,CAAC,mBAAmB,EAAE,IAAI,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;IACvC,CAAC,mBAAmB,EAAE,IAAI,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;IACvC,wEAAwE;IACxE,qDAAqD;IACrD,EAAE;IACF,oEAAoE;IACpE,oEAAoE;IACpE,iEAAiE;IACjE,sBAAsB;IACtB,wEAAwE;IACxE,iEAAiE;IACjE,CAAC,uBAAuB,EAAE,IAAI,GAAG,CAAC,CAAC,aAAa,EAAE,qBAAqB,EAAE,iBAAiB,EAAE,oBAAoB,CAAC,CAAC,CAAC;IACnH,CAAC,6BAA6B,EAAE,IAAI,GAAG,CAAC,CAAC,cAAc,EAAE,qBAAqB,EAAE,iBAAiB,CAAC,CAAC,CAAC;IACpG,CAAC,8BAA8B,EAAE,IAAI,GAAG,CAAC,CAAC,aAAa,EAAE,qBAAqB,EAAE,iBAAiB,CAAC,CAAC,CAAC;IACpG,wEAAwE;IACxE,wEAAwE;IACxE,uEAAuE;IACvE,8DAA8D;IAC9D,CAAC,SAAS,EAAE,IAAI,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC;IAChC,uCAAuC;IACvC,CAAC,mBAAmB,EAAE,IAAI,GAAG,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC;IAC7C,CAAC,qBAAqB,EAAE,IAAI,GAAG,CAAC,CAAC,WAAW,EAAE,aAAa,EAAE,UAAU,EAAE,YAAY,EAAE,SAAS,CAAC,CAAC,CAAC;IACnG,CAAC,iBAAiB,EAAE,IAAI,GAAG,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC;IAC7C,mDAAmD;IACnD,CAAC,iBAAiB,EAAE,IAAI,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC;IACxC,CAAC,WAAW,EAAE,IAAI,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC;IAClC,iCAAiC;IACjC,CAAC,UAAU,EAAE,IAAI,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC;CAClC,CAAC,CAAC;AAEH;;;;;;GAMG;AACH,MAAM,yBAAyB,GAAwB,IAAI,GAAG,CAAC;IAC7D,gBAAgB;IAChB,mBAAmB;IACnB,oBAAoB;IACpB,mBAAmB;IACnB,oBAAoB;IACpB,iBAAiB;IACjB,WAAW;IACX,SAAS;IACT,WAAW;IACX,QAAQ;IACR,aAAa;IACb,SAAS;IACT,QAAQ;IACR,OAAO;CACR,CAAC,CAAC;AAEH;;;;;GAKG;AACH,IAAI,iBAAiB,GAAG,KAAK,CAAC;AAE9B;;;GAGG;AACH,MAAM,UAAU,qBAAqB;IACnC,iBAAiB,GAAG,KAAK,CAAC;AAC5B,CAAC;AAED,SAAS,wBAAwB,CAAC,MAAmB;IACnD,MAAM,MAAM,GAAG,MAAM,CAAC,UAAU,IAAI,EAAE,CAAC;IACvC,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACtC,MAAM,SAAS,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;IACvD,IAAI,CAAC,SAAS;QAAE,OAAO,KAAK,CAAC;IAC7B,uEAAuE;IACvE,2CAA2C;IAC3C,MAAM,IAAI,GAAG,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,IAAI,SAAS,CAAC;IACrD,OAAO,yBAAyB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;AAC7C,CAAC;AAED,8EAA8E;AAC9E,UAAU;AACV,8EAA8E;AAE9E;;;GAGG;AACH,SAAS,kBAAkB,CACzB,WAA8C,EAC9C,OAA4B;IAE5B,IAAI,CAAC,WAAW,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAC3D,KAAK,MAAM,GAAG,IAAI,WAAW,EAAE,CAAC;QAC9B,MAAM,MAAM,GAAG,GAAG;aACf,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC;aACjB,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC;aACtB,IAAI,EAAE,CAAC;QACV,IAAI,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC;YAAE,OAAO,IAAI,CAAC;IACvC,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;GAEG;AACH,SAAS,cAAc,CAAC,GAAW;IACjC,OAAO,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;AACxC,CAAC;AAED;;;;GAIG;AACH,SAAS,mBAAmB,CAAC,MAAmB;IAC9C,IAAI,MAAM,CAAC,IAAI,KAAK,MAAM;QAAE,OAAO,KAAK,CAAC;IACzC,MAAM,MAAM,GAAG,MAAM,CAAC,UAAU,IAAI,EAAE,CAAC;IACvC,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACtC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACrD,OAAO,CAAC,KAAK,UAAU,IAAI,CAAC,KAAK,WAAW,IAAI,CAAC,KAAK,oBAAoB,CAAC;AAC7E,CAAC;AAED;;;;GAIG;AACH,SAAS,oCAAoC,CAC3C,MAAmB,EACnB,aAAoC;IAEpC,IAAI,CAAC,MAAM,CAAC,IAAI;QAAE,OAAO,KAAK,CAAC;IAC/B,IAAI,CAAC,aAAa;QAAE,OAAO,KAAK,CAAC;IACjC,MAAM,UAAU,GAAa,EAAE,CAAC;IAChC,IAAI,aAAa,CAAC,OAAO;QAAE,UAAU,CAAC,IAAI,CAAC,cAAc,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC,CAAC;IAClF,KAAK,MAAM,CAAC,IAAI,aAAa,CAAC,UAAU,IAAI,EAAE;QAAE,UAAU,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,CAAC;IACnF,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;QACnC,MAAM,gBAAgB,GAAG,mBAAmB,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC5D,IAAI,CAAC,gBAAgB,EAAE,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC;YAAE,SAAS;QAClD,oEAAoE;QACpE,+DAA+D;QAC/D,kEAAkE;QAClE,iEAAiE;QACjE,oDAAoD;QACpD,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;YAC5B,IAAI,wBAAwB,CAAC,MAAM,CAAC;gBAAE,OAAO,IAAI,CAAC;YAClD,IAAI,CAAC,iBAAiB,EAAE,CAAC;gBACvB,iBAAiB,GAAG,IAAI,CAAC;gBACzB,sCAAsC;gBACtC,OAAO,CAAC,IAAI,CACV,6DAA6D;oBAC3D,kCAAkC,aAAa,CAAC,IAAI,IAAI;oBACxD,2FAA2F,CAC9F,CAAC;YACJ,CAAC;YACD,SAAS;QACX,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,8EAA8E;AAC9E,oBAAoB;AACpB,8EAA8E;AAE9E;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,sBAAsB,CACpC,MAA+B,EAC/B,aAAoC,EACpC,GAAsB;IAEtB,uEAAuE;IACvE,MAAM,QAAQ,GAAG,CAAC,GAAG,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;IACpD,IAAI,QAAQ,KAAK,MAAM;QAAE,OAAO,cAAc,CAAC;IAE/C,IAAI,CAAC,MAAM;QAAE,OAAO,cAAc,CAAC;IAEnC,6BAA6B;IAC7B,IAAI,kBAAkB,CAAC,MAAM,CAAC,WAAW,EAAE,yBAAyB,CAAC,EAAE,CAAC;QACtE,OAAO,oBAAoB,CAAC;IAC9B,CAAC;IAED,4EAA4E;IAC5E,IAAI,aAAa,IAAI,kBAAkB,CAAC,aAAa,CAAC,WAAW,EAAE,wBAAwB,CAAC,EAAE,CAAC;QAC7F,OAAO,oBAAoB,CAAC;IAC9B,CAAC;IAED,gCAAgC;IAChC,IAAI,oCAAoC,CAAC,MAAM,EAAE,aAAa,CAAC,EAAE,CAAC;QAChE,OAAO,oBAAoB,CAAC;IAC9B,CAAC;IAED,yCAAyC;IACzC,IAAI,mBAAmB,CAAC,MAAM,CAAC,EAAE,CAAC;QAChC,OAAO,oBAAoB,CAAC;IAC9B,CAAC;IAED,qDAAqD;IACrD,mEAAmE;IAEnE,cAAc;IACd,OAAO,oBAAoB,CAAC;AAC9B,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,8BAA8B,CAC5C,UAAqC,EACrC,eAAwC,EACxC,aAAoC,EACpC,GAAsB;IAEtB,IAAI,UAAU,KAAK,uBAAuB;QAAE,OAAO,KAAK,CAAC;IACzD,IAAI,CAAC,eAAe;QAAE,OAAO,KAAK,CAAC,CAAC,mCAAmC;IACvE,MAAM,IAAI,GAAG,sBAAsB,CAAC,eAAe,EAAE,aAAa,EAAE,GAAG,CAAC,CAAC;IACzE,OAAO,IAAI,KAAK,oBAAoB,CAAC;AACvC,CAAC"}

package/dist/cache/backend.d.ts

@@ -12,22 +12,34 @@
  * fingerprint composition stays in `ClassificationCache` so a backend
  * swap doesn't change observable cache semantics.
  *
- * # CacheKey shape (Round 2 — 2.28.0)
+ * # CacheKey shape (Round 3 — 2.36.0, cognium-ai#189)
  *
  * The Round-1 interface (`get(key: string)`) wasn't enough to express
  * the per-namespace package-coordinate layout the R2 backend needs to
  * surface in dashboards. We now pass a structured `{ namespace, digest,
- * coordinate? }` so backends can render the path however they want:
+ * coordinate?, modelSlug? }` so backends can render the path however
+ * they want:
  *
- *   tree    → `<prefix>/tree/<eco>/<name>@<ver>/<4hex>/<sha>.json`  (coord present)
- *           → `<prefix>/tree/_unowned/<2hex>/<sha>.json`            (no coord)
- *   verify  → `<prefix>/verify/<2hex>/<sha>.json`                   (always flat)
- *   discovery → `<prefix>/discovery/<2hex>/<sha>.json`              (always flat)
+ *   tree      → `<prefix>/tree/<eco>/<name>@<ver>/<4hex>/<sha>.json`  (coord)
+ *             → `<prefix>/tree/_unowned/<4hex>/<sha>.json`            (no coord)
+ *   verify    → `<prefix>/verify/<model-slug>/<4hex>/<sha>.json`      (slug present)
+ *             → `<prefix>/verify/<4hex>/<sha>.json`                   (no slug)
+ *   discovery → `<prefix>/discovery/<model-slug>/<4hex>/<sha>.json`   (slug present)
+ *             → `<prefix>/discovery/<4hex>/<sha>.json`                (no slug)
+ *   classifier → analogous to verify/discovery
+ *   cluster   → `<prefix>/cluster/<4hex>/<sha>.json`                  (model-independent)
  *
  * Coordinate is intentionally tree-only: discovery and verify are
  * keyed on method/batch content + model fingerprint, which already
  * collide-correctly across packages without a coordinate prefix.
  *
+ * `modelSlug` is intentionally non-tree: the tree cache is pattern-
+ * match (SAST) output that doesn't depend on any LLM. Splitting it by
+ * model would just fragment the cache. verify/discovery/classifier
+ * results are model-dependent and MUST NOT be shared between different
+ * discovery/verify models — a defense-in-depth against the digest-
+ * composition regressions that motivated Round 3 (cognium-ai#189).
+ *
  * Selection: `LLM_CACHE_BACKEND` env (`local` | `memory` | `r2`).
  * Default = `local` (back-compat). See `./backends/index.ts` factory.
  */
@@ -66,9 +78,29 @@ export interface CacheKey {
     /**
      * Optional package coordinate. Only consulted by tree-namespace keys;
      * verify/discovery backends ignore it. When absent or `_unowned`,
-     * tree falls back to `_unowned/<2hex>/<sha>` layout.
+     * tree falls back to `_unowned/<4hex>/<sha>` layout.
      */
     coordinate?: PackageCoordinate;
+    /**
+     * Optional filesystem/URL-safe model identity for the cache path
+     * (cognium-ai#189, Round 3). Only consulted by non-tree namespaces
+     * (verify / discovery / classifier). When present, injected between
+     * the namespace root and the sharded digest:
+     *   `<namespace>/<modelSlug>/<4hex>/<sha>.json`
+     * When absent (unset in the caller or empty string), the layout is
+     * flat `<namespace>/<4hex>/<sha>.json` (2.28.x back-compat).
+     *
+     * Motivation: even though `digest` is already model-fingerprinted
+     * (see classification-cache.ts `computeDigest`), surfacing the model
+     * segment in the path makes model-cross-contamination visible in R2
+     * dashboards, protects against future digest-composition regressions,
+     * and makes per-model cache eviction a `s3 rm` on a single prefix.
+     *
+     * Populated by `ClassificationCache.toCacheKey()` from the per-phase
+     * `modelFingerprint` (which is the same value already folded into the
+     * digest). MUST be URL/path-safe: the caller sanitizes `=` → `-`.
+     */
+    modelSlug?: string;
 }
 export interface CacheBackend {
     /**

package/dist/cache/backend.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"backend.d.ts","sourceRoot":"","sources":["../../src/cache/backend.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AAEH,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AAEzD;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,MAAM,cAAc,GAAG,MAAM,GAAG,QAAQ,GAAG,WAAW,GAAG,YAAY,GAAG,SAAS,CAAC;AAExF,MAAM,WAAW,QAAQ;IACvB;;;OAGG;IACH,SAAS,EAAE,cAAc,CAAC;IAC1B;;;;OAIG;IACH,MAAM,EAAE,MAAM,CAAC;IACf;;;;OAIG;IACH,UAAU,CAAC,EAAE,iBAAiB,CAAC;CAChC;AAED,MAAM,WAAW,YAAY;IAC3B;;;;;;OAMG;IACH,GAAG,CAAC,GAAG,EAAE,QAAQ,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IAE3C;;;;;;OAMG;IACH,GAAG,CAAC,GAAG,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAEjD,4EAA4E;IAC5E,GAAG,CAAC,CAAC,GAAG,EAAE,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAEtC,6DAA6D;IAC7D,MAAM,CAAC,CAAC,GAAG,EAAE,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAEtC;;;;OAIG;IACH,KAAK,CAAC,IAAI,OAAO,CAAC,MAAM,CAAC,CAAC;IAE1B;;;OAGG;IACH,KAAK,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IAExB,2EAA2E;IAC3E,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;CACvB"}
+{"version":3,"file":"backend.d.ts","sourceRoot":"","sources":["../../src/cache/backend.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4CG;AAEH,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AAEzD;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,MAAM,cAAc,GAAG,MAAM,GAAG,QAAQ,GAAG,WAAW,GAAG,YAAY,GAAG,SAAS,CAAC;AAExF,MAAM,WAAW,QAAQ;IACvB;;;OAGG;IACH,SAAS,EAAE,cAAc,CAAC;IAC1B;;;;OAIG;IACH,MAAM,EAAE,MAAM,CAAC;IACf;;;;OAIG;IACH,UAAU,CAAC,EAAE,iBAAiB,CAAC;IAC/B;;;;;;;;;;;;;;;;;;OAkBG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,YAAY;IAC3B;;;;;;OAMG;IACH,GAAG,CAAC,GAAG,EAAE,QAAQ,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IAE3C;;;;;;OAMG;IACH,GAAG,CAAC,GAAG,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAEjD,4EAA4E;IAC5E,GAAG,CAAC,CAAC,GAAG,EAAE,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAEtC,6DAA6D;IAC7D,MAAM,CAAC,CAAC,GAAG,EAAE,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAEtC;;;;OAIG;IACH,KAAK,CAAC,IAAI,OAAO,CAAC,MAAM,CAAC,CAAC;IAE1B;;;OAGG;IACH,KAAK,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IAExB,2EAA2E;IAC3E,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;CACvB"}

package/dist/cache/backend.js

@@ -12,22 +12,34 @@
  * fingerprint composition stays in `ClassificationCache` so a backend
  * swap doesn't change observable cache semantics.
  *
- * # CacheKey shape (Round 2 — 2.28.0)
+ * # CacheKey shape (Round 3 — 2.36.0, cognium-ai#189)
  *
  * The Round-1 interface (`get(key: string)`) wasn't enough to express
  * the per-namespace package-coordinate layout the R2 backend needs to
  * surface in dashboards. We now pass a structured `{ namespace, digest,
- * coordinate? }` so backends can render the path however they want:
+ * coordinate?, modelSlug? }` so backends can render the path however
+ * they want:
  *
- *   tree    → `<prefix>/tree/<eco>/<name>@<ver>/<4hex>/<sha>.json`  (coord present)
- *           → `<prefix>/tree/_unowned/<2hex>/<sha>.json`            (no coord)
- *   verify  → `<prefix>/verify/<2hex>/<sha>.json`                   (always flat)
- *   discovery → `<prefix>/discovery/<2hex>/<sha>.json`              (always flat)
+ *   tree      → `<prefix>/tree/<eco>/<name>@<ver>/<4hex>/<sha>.json`  (coord)
+ *             → `<prefix>/tree/_unowned/<4hex>/<sha>.json`            (no coord)
+ *   verify    → `<prefix>/verify/<model-slug>/<4hex>/<sha>.json`      (slug present)
+ *             → `<prefix>/verify/<4hex>/<sha>.json`                   (no slug)
+ *   discovery → `<prefix>/discovery/<model-slug>/<4hex>/<sha>.json`   (slug present)
+ *             → `<prefix>/discovery/<4hex>/<sha>.json`                (no slug)
+ *   classifier → analogous to verify/discovery
+ *   cluster   → `<prefix>/cluster/<4hex>/<sha>.json`                  (model-independent)
  *
  * Coordinate is intentionally tree-only: discovery and verify are
  * keyed on method/batch content + model fingerprint, which already
  * collide-correctly across packages without a coordinate prefix.
  *
+ * `modelSlug` is intentionally non-tree: the tree cache is pattern-
+ * match (SAST) output that doesn't depend on any LLM. Splitting it by
+ * model would just fragment the cache. verify/discovery/classifier
+ * results are model-dependent and MUST NOT be shared between different
+ * discovery/verify models — a defense-in-depth against the digest-
+ * composition regressions that motivated Round 3 (cognium-ai#189).
+ *
  * Selection: `LLM_CACHE_BACKEND` env (`local` | `memory` | `r2`).
  * Default = `local` (back-compat). See `./backends/index.ts` factory.
  */

package/dist/cache/backend.js.map

@@ -1 +1 @@
-{"version":3,"file":"backend.js","sourceRoot":"","sources":["../../src/cache/backend.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG"}
+{"version":3,"file":"backend.js","sourceRoot":"","sources":["../../src/cache/backend.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4CG"}

package/dist/cache/backends/index.d.ts

@@ -11,14 +11,19 @@
  * the backend, the structured `CacheKey` is rendered to a path via
  * `renderObjectPath()`:
  *
- *   tree+coord   → `<eco>/<name>@<ver>/<4hex>/<sha>.json`
- *   tree+nocoord → `_unowned/<2hex>/<sha>.json`
- *   verify       → `<2hex>/<sha>.json`
- *   discovery    → `<2hex>/<sha>.json`
+ *   tree+coord            → `<eco>/<name>@<ver>/<4hex>/<sha>.json`
+ *   tree+nocoord          → `_unowned/<4hex>/<sha>.json`
+ *   verify+slug           → `<model-slug>/<4hex>/<sha>.json`
+ *   verify+no slug        → `<4hex>/<sha>.json`
+ *   discovery+slug        → `<model-slug>/<4hex>/<sha>.json`
+ *   discovery+no slug     → `<4hex>/<sha>.json`
+ *   classifier+slug       → `<model-slug>/<4hex>/<sha>.json`
+ *   cluster (flat)        → `<4hex>/<sha>.json`
  *
- * `R2_PREFIX` default bumped `v1` → `v2` for the Round 2 layout. Operators
- * who want the old keys back can pin `R2_PREFIX=v1` (the 2.27.0 layout is
- * read-only at that prefix; new writes use `v2`).
+ * `R2_PREFIX` default kept at `v2` for the Round 3 layout. The path-
+ * shape change is additive — flat 2.28.x entries stay readable, they
+ * just miss against Round-3 writes because `SCHEMA_VER` bumped v2→v3.
+ * Operators who want the pre-2.28 keys back can pin `R2_PREFIX=v1`.
  */
 import type { CacheBackend, CacheNamespace } from '../backend.js';
 import { LocalFSBackend } from './local-fs.js';

package/dist/cache/backends/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/cache/backends/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAGH,OAAO,KAAK,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAClE,OAAO,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAC/C,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AAEpC,OAAO,EAAE,cAAc,EAAE,aAAa,EAAE,SAAS,EAAE,CAAC;AAEpD,wBAAgB,cAAc,IAAI,OAAO,GAAG,QAAQ,GAAG,IAAI,CAK1D;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,WAAW,CAAC,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,cAAc,GAAG,YAAY,CAoCrF"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/cache/backends/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAGH,OAAO,KAAK,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAClE,OAAO,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAC/C,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AAEpC,OAAO,EAAE,cAAc,EAAE,aAAa,EAAE,SAAS,EAAE,CAAC;AAEpD,wBAAgB,cAAc,IAAI,OAAO,GAAG,QAAQ,GAAG,IAAI,CAK1D;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,WAAW,CAAC,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,cAAc,GAAG,YAAY,CAoCrF"}

package/dist/cache/backends/index.js

@@ -11,14 +11,19 @@
  * the backend, the structured `CacheKey` is rendered to a path via
  * `renderObjectPath()`:
  *
- *   tree+coord   → `<eco>/<name>@<ver>/<4hex>/<sha>.json`
- *   tree+nocoord → `_unowned/<2hex>/<sha>.json`
- *   verify       → `<2hex>/<sha>.json`
- *   discovery    → `<2hex>/<sha>.json`
+ *   tree+coord            → `<eco>/<name>@<ver>/<4hex>/<sha>.json`
+ *   tree+nocoord          → `_unowned/<4hex>/<sha>.json`
+ *   verify+slug           → `<model-slug>/<4hex>/<sha>.json`
+ *   verify+no slug        → `<4hex>/<sha>.json`
+ *   discovery+slug        → `<model-slug>/<4hex>/<sha>.json`
+ *   discovery+no slug     → `<4hex>/<sha>.json`
+ *   classifier+slug       → `<model-slug>/<4hex>/<sha>.json`
+ *   cluster (flat)        → `<4hex>/<sha>.json`
  *
- * `R2_PREFIX` default bumped `v1` → `v2` for the Round 2 layout. Operators
- * who want the old keys back can pin `R2_PREFIX=v1` (the 2.27.0 layout is
- * read-only at that prefix; new writes use `v2`).
+ * `R2_PREFIX` default kept at `v2` for the Round 3 layout. The path-
+ * shape change is additive — flat 2.28.x entries stay readable, they
+ * just miss against Round-3 writes because `SCHEMA_VER` bumped v2→v3.
+ * Operators who want the pre-2.28 keys back can pin `R2_PREFIX=v1`.
  */
 import * as path from 'path';
 import { LocalFSBackend } from './local-fs.js';

package/dist/cache/backends/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/cache/backends/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,OAAO,KAAK,IAAI,MAAM,MAAM,CAAC;AAE7B,OAAO,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAC/C,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AAEpC,OAAO,EAAE,cAAc,EAAE,aAAa,EAAE,SAAS,EAAE,CAAC;AAEpD,MAAM,UAAU,cAAc;IAC5B,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,iBAAiB,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,IAAI,EAAE,CAAC;IACvE,IAAI,GAAG,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAC9B,IAAI,GAAG,KAAK,QAAQ;QAAE,OAAO,QAAQ,CAAC;IACtC,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,WAAW,CAAC,QAAgB,EAAE,SAAyB;IACrE,MAAM,IAAI,GAAG,cAAc,EAAE,CAAC;IAC9B,IAAI,IAAI,KAAK,QAAQ;QAAE,OAAO,IAAI,aAAa,EAAE,CAAC;IAElD,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;QAClB,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC;QACzC,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC;QACrC,MAAM,WAAW,GAAG,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC;QACjD,MAAM,eAAe,GAAG,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC;QACzD,IAAI,CAAC,QAAQ,IAAI,CAAC,MAAM,IAAI,CAAC,WAAW,IAAI,CAAC,eAAe,EAAE,CAAC;YAC7D,uDAAuD;YACvD,sCAAsC;YACtC,OAAO,CAAC,IAAI,CACV,6DAA6D;gBAC7D,wDAAwD;gBACxD,yCAAyC,CAC1C,CAAC;YACF,OAAO,IAAI,cAAc,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC;QAC1C,CAAC;QACD,MAAM,UAAU,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,IAAI,IAAI,CAAC,CAAC,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC;QAC7E,OAAO,IAAI,SAAS,CAAC;YACnB,QAAQ;YACR,MAAM;YACN,WAAW;YACX,eAAe;YACf,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,SAAS,IAAI,MAAM;YACvC,MAAM,EAAE,GAAG,UAAU,IAAI,SAAS,EAAE;SACrC,CAAC,CAAC;IACL,CAAC;IAED,oEAAoE;IACpE,+DAA+D;IAC/D,mCAAmC;IACnC,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,WAAW,EAAE,CAAC;IACnD,MAAM,MAAM,GAAG,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;IAC9E,OAAO,IAAI,cAAc,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;AAClD,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/cache/backends/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAEH,OAAO,KAAK,IAAI,MAAM,MAAM,CAAC;AAE7B,OAAO,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAC/C,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AAEpC,OAAO,EAAE,cAAc,EAAE,aAAa,EAAE,SAAS,EAAE,CAAC;AAEpD,MAAM,UAAU,cAAc;IAC5B,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,iBAAiB,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,IAAI,EAAE,CAAC;IACvE,IAAI,GAAG,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAC9B,IAAI,GAAG,KAAK,QAAQ;QAAE,OAAO,QAAQ,CAAC;IACtC,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,WAAW,CAAC,QAAgB,EAAE,SAAyB;IACrE,MAAM,IAAI,GAAG,cAAc,EAAE,CAAC;IAC9B,IAAI,IAAI,KAAK,QAAQ;QAAE,OAAO,IAAI,aAAa,EAAE,CAAC;IAElD,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;QAClB,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC;QACzC,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC;QACrC,MAAM,WAAW,GAAG,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC;QACjD,MAAM,eAAe,GAAG,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC;QACzD,IAAI,CAAC,QAAQ,IAAI,CAAC,MAAM,IAAI,CAAC,WAAW,IAAI,CAAC,eAAe,EAAE,CAAC;YAC7D,uDAAuD;YACvD,sCAAsC;YACtC,OAAO,CAAC,IAAI,CACV,6DAA6D;gBAC7D,wDAAwD;gBACxD,yCAAyC,CAC1C,CAAC;YACF,OAAO,IAAI,cAAc,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC;QAC1C,CAAC;QACD,MAAM,UAAU,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,IAAI,IAAI,CAAC,CAAC,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC;QAC7E,OAAO,IAAI,SAAS,CAAC;YACnB,QAAQ;YACR,MAAM;YACN,WAAW;YACX,eAAe;YACf,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,SAAS,IAAI,MAAM;YACvC,MAAM,EAAE,GAAG,UAAU,IAAI,SAAS,EAAE;SACrC,CAAC,CAAC;IACL,CAAC;IAED,oEAAoE;IACpE,+DAA+D;IAC/D,mCAAmC;IACnC,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,WAAW,EAAE,CAAC;IACnD,MAAM,MAAM,GAAG,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;IAC9E,OAAO,IAAI,cAAc,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;AAClD,CAAC"}