modelrig 0.0.1 → 0.1.0

package/dist/init/run.js

@@ -0,0 +1,281 @@
+"use strict";
+/**
+ * `modelrig init` v0 — spec WS2.
+ *
+ * Finds provider call sites in a repo, drafts a route bundle per site, and
+ * writes a MIGRATION.md mapping call site → route → the `rig.run` line that
+ * would replace it.
+ *
+ * THE HARD RULE, restated because it is the whole design: init NEVER edits
+ * the target's source. It writes under `modelrig/routes/drafts/` and nothing
+ * else. The diff is the human's to apply — spec §4 puts writing-to-source
+ * permanently out of scope for this phase, and the drafts-only property is
+ * tested, not just documented.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.routeNameFor = routeNameFor;
+exports.capabilitiesFor = capabilitiesFor;
+exports.buildCostOutlook = buildCostOutlook;
+exports.buildMigrationMarkdown = buildMigrationMarkdown;
+exports.runInit = runInit;
+const draft_1 = require("../routes/draft");
+const seed_1 = require("../registry/seed");
+const finder_1 = require("./finder");
+/** Route name from a call site: `<file stem>.<line>` namespaced by its
+ * directory, e.g. "services.asset_classifier_42". Deterministic so a second
+ * run produces the same names and therefore skips the same drafts. */
+function routeNameFor(site, basename) {
+    const parts = site.file.split("/").filter((p) => p !== "" && p !== "." && p !== "src");
+    const fileStem = basename(parts[parts.length - 1] ?? "route").replace(/\.[jt]sx?$/, "");
+    const dir = parts.length > 1 ? parts[parts.length - 2] : "app";
+    const normalize = (s) => s.replace(/[^A-Za-z0-9]+/g, "_").replace(/^_|_$/g, "").toLowerCase();
+    return `${normalize(dir)}.${normalize(fileStem)}_${site.line}`;
+}
+/** What the site's structured-output usage implies about capability needs.
+ * Conservative: a json_schema request implies native enforcement is wanted;
+ * bare JSON mode only implies conformance. */
+function capabilitiesFor(site) {
+    if (site.schemaHint === "json-schema" || site.schemaHint === "zod")
+        return ["structured-native"];
+    if (site.schemaHint === "json-mode")
+        return ["structured-coached"];
+    return [];
+}
+function placeholderPrompt(site) {
+    return (`<!-- DRAFT prompt for ${site.file}:${site.line}.\n` +
+        "     No inline system prompt was found at that call site — it is most likely built in a\n" +
+        "     variable or read from a file. Paste the real prompt here, and wrap any interpolated\n" +
+        "     value in a doubled-brace placeholder (the same syntax the route loader scans for)\n" +
+        "     so the route can declare it as a variable. -->\n\n" +
+        "TODO: paste the system prompt from " +
+        `${site.file}:${site.line}\n`);
+}
+/** {{variables}} referenced by a prompt — the loader requires them declared. */
+function variablesIn(prompt) {
+    const found = new Set();
+    for (const match of prompt.matchAll(/\{\{\s*([A-Za-z_][A-Za-z0-9_]*)\s*\}\}/g))
+        found.add(match[1]);
+    return [...found];
+}
+/** Price the incumbent against the cheapest probed challenger, honestly. */
+function buildCostOutlook(incumbentKey, challengerKeys, rows) {
+    const effectiveOf = (key) => rows.find((r) => r.key === key)?.effectiveUsdPer1k ?? null;
+    const incumbent = incumbentKey === null ? null : effectiveOf(incumbentKey);
+    const challengers = challengerKeys
+        .map((key) => ({ model: key, effectiveUsdPer1k: effectiveOf(key) }))
+        .filter((c) => c.effectiveUsdPer1k !== null)
+        .sort((a, b) => a.effectiveUsdPer1k - b.effectiveUsdPer1k);
+    const best = challengers[0] ?? null;
+    if (best === null) {
+        return {
+            incumbentEffectiveUsdPer1k: incumbent,
+            bestChallenger: null,
+            indicativeSavingsPct: null,
+            note: "No probed challenger with a cost figure — nothing to compare against yet.",
+        };
+    }
+    if (incumbent === null) {
+        return {
+            incumbentEffectiveUsdPer1k: null,
+            bestChallenger: best,
+            indicativeSavingsPct: null,
+            note: incumbentKey === null
+                ? "The model at this call site could not be read, so there is no baseline to compare."
+                : `${incumbentKey} is not in the probed registry, so there is no measured baseline to ` +
+                    "compare against. A bake-off measures both arms on your own inputs and settles it.",
+        };
+    }
+    const pct = ((incumbent - best.effectiveUsdPer1k) / incumbent) * 100;
+    return {
+        incumbentEffectiveUsdPer1k: incumbent,
+        bestChallenger: best,
+        indicativeSavingsPct: pct,
+        note: pct > 0
+            ? "Indicative only — measured on a generic schema task, not your traffic. A bake-off on " +
+                "your own captured inputs is the number that should decide anything."
+            : "The incumbent is already at or below the cheapest probed alternative on this measure.",
+    };
+}
+function replacementSnippet(route, variables) {
+    const input = variables.length === 0
+        ? "{ /* the values your prompt needs */ }"
+        : `{ ${variables.map((v) => `${v}`).join(", ")} }`;
+    return (`const { output } = await rig.run(${JSON.stringify(route)}, {\n` +
+        `  input: ${input},\n` +
+        `  tags: { run_id: runId },\n` +
+        `  budget: { envelope: runId },\n` +
+        `});`);
+}
+function buildMigrationMarkdown(drafts, result) {
+    const lines = [
+        "# ModelRig migration map",
+        "",
+        `Found **${result.sitesFound} provider call site(s)** across ${result.filesScanned} scanned files.`,
+        "",
+        "**Nothing in your repo has changed.** `modelrig init` writes drafts and a map; applying them",
+        "is your call, one call site at a time. A sensible order: pick the site you understand best,",
+        "move its draft up into `modelrig/routes/`, swap the call, run it once, and compare.",
+        "",
+        "Every draft lists your current model FIRST, so the route reproduces today's behavior before",
+        "you change anything. The cheaper candidates beneath it are challengers a bake-off can test —",
+        "they never serve until you say so.",
+        "",
+    ];
+    if (result.filesSkipped.length > 0) {
+        lines.push(`> ${result.filesSkipped.length} file(s) were skipped (too large or unreadable) and were NOT`, "> searched: " + result.filesSkipped.slice(0, 10).join(", ") + ".", "");
+    }
+    if (drafts.length === 0) {
+        lines.push("## No call sites found", "", "That means no direct SDK call or provider-host fetch matched in the scanned files. If you", "know there are model calls here, they may be wrapped in a helper that hides the SDK — point", "init at the file that actually calls the provider, or draft a route by hand:", "", "```bash", "modelrig init path/to/that/directory", "```", "");
+        return `${lines.join("\n")}\n`;
+    }
+    // The cost opportunity, up front — shown, not taken. Parity first is a
+    // sequencing decision, not a decision to hide the money.
+    const priced = drafts.filter((d) => d.costOutlook.indicativeSavingsPct !== null);
+    if (priced.length > 0) {
+        const best = [...priced].sort((a, b) => (b.costOutlook.indicativeSavingsPct ?? 0) - (a.costOutlook.indicativeSavingsPct ?? 0))[0];
+        lines.push("## What this could save", "", `Of ${drafts.length} drafted route(s), **${priced.length}** have both a probed incumbent and a`, "cheaper probed alternative. The largest indicative gap:", "", `- \`${best.route}\` — ${best.site.model} at $${(best.costOutlook.incumbentEffectiveUsdPer1k ?? 0).toFixed(4)} ` +
+            `vs ${best.costOutlook.bestChallenger?.model} at $${(best.costOutlook.bestChallenger?.effectiveUsdPer1k ?? 0).toFixed(4)} ` +
+            `per 1,000 conformant outputs — **~${(best.costOutlook.indicativeSavingsPct ?? 0).toFixed(0)}% cheaper**.`, "", "**These drafts do not take that saving.** Each one routes to your current model so the", "first run reproduces today's behavior — otherwise a changed output leaves you unable to", "tell a migration bug from a model difference. Prove the cheaper model separately, on your", "own traffic:", "", "```bash", `modelrig bakeoff --route ${best.route} --variants <challenger> --replay-last 50`, "```", "", "Those numbers come from probes on a generic schema task, not from your inputs. The", "bake-off is the one that should decide anything.", "");
+    }
+    lines.push("## Call site → route", "", "| call site | provider | model today | drafted route | indicative saving |", "|---|---|---|---|---|");
+    for (const d of drafts) {
+        const pct = d.costOutlook.indicativeSavingsPct;
+        const saving = pct === null ? "—" : pct > 0 ? `~${pct.toFixed(0)}%` : "none";
+        lines.push(`| \`${d.site.file}:${d.site.line}\` | ${d.site.provider} | ` +
+            `${d.site.model ?? `_(from \`${d.site.modelExpression ?? "a variable"}\`)_`} | ` +
+            `\`${d.route}\` | ${saving} |`);
+    }
+    lines.push("");
+    for (const d of drafts) {
+        lines.push(`### \`${d.route}\``, "", `From \`${d.site.file}:${d.site.line}\` (${d.site.provider}, matched by ${d.site.matchedBy === "sdk" ? "SDK call shape" : "provider API host"}).`, "", "Replace the call with:", "", "```ts", d.replacement, "```", "");
+        if (d.site.notes.length > 0) {
+            lines.push("**Before this draft will run:**", "");
+            for (const note of d.site.notes)
+                lines.push(`- ${note}`);
+            lines.push("");
+        }
+        lines.push("Candidates were chosen like this:", "");
+        for (const reason of d.candidateReasoning)
+            lines.push(`- ${reason}`);
+        lines.push("");
+        const outlook = d.costOutlook;
+        if (outlook.indicativeSavingsPct !== null && outlook.bestChallenger !== null) {
+            lines.push(`**Cost:** ${d.site.model} measures $${(outlook.incumbentEffectiveUsdPer1k ?? 0).toFixed(4)} per 1,000 ` +
+                `conformant outputs; ${outlook.bestChallenger.model} measures ` +
+                `$${outlook.bestChallenger.effectiveUsdPer1k.toFixed(4)} — indicatively ` +
+                `**${outlook.indicativeSavingsPct.toFixed(0)}% cheaper**. ${outlook.note}`, "");
+        }
+        else {
+            lines.push(`**Cost:** ${outlook.note}`, "");
+        }
+    }
+    lines.push("## After you move a draft", "", "```bash", "modelrig serve            # boot with the new route loaded", "modelrig bakeoff --route <route> --variants <name> --replay-last-n 50", "```", "", "The bake-off replays YOUR inputs through a challenger and reports the effective cost of", "conformance for each. Nothing switches without `modelrig swap execute <id> --approve`.", "");
+    return `${lines.join("\n")}\n`;
+}
+function runInit(deps, options = {}) {
+    const scan = (0, finder_1.scanRepoForCallSites)(deps.root, deps.fs, deps.path, options);
+    const registryRows = options.registryRows ?? [];
+    const drafts = [];
+    const usedNames = new Set();
+    for (const site of scan.sites) {
+        let route = routeNameFor(site, deps.path.basename);
+        while (usedNames.has(route))
+            route = `${route}_x`;
+        usedNames.add(route);
+        const prompt = site.systemPrompt ?? placeholderPrompt(site);
+        const variables = variablesIn(prompt);
+        const capabilities = capabilitiesFor(site);
+        const incumbent = site.model === null ? null : `${site.provider}/${site.model}`;
+        const seeded = (0, seed_1.seedCandidates)(registryRows, {
+            capabilities,
+            incumbent,
+            maxInputUsdPerMtok: null,
+            explicit: null,
+            ...(options.challengerCount !== undefined ? { challengerCount: options.challengerCount } : {}),
+        });
+        // A site whose model we could not read and that seeded nothing would
+        // produce an unloadable draft — record a placeholder candidate and say so.
+        const candidates = seeded.candidates.length > 0
+            ? seeded.candidates
+            : [
+                {
+                    provider: site.provider,
+                    model: "TODO-set-the-model",
+                    note: "could not read the model at the call site — set it before running",
+                },
+            ];
+        const draft = (0, draft_1.buildRouteDraft)({
+            route,
+            candidates,
+            systemPrompt: prompt,
+            variables,
+            outputSchema: site.wantsStructuredOutput
+                ? {
+                    type: "object",
+                    description: `TODO: paste the real output schema for ${site.file}:${site.line}. The call site ` +
+                        `asked for structured output (${site.schemaHint ?? "schema requested"}), so the ` +
+                        "route should enforce the same shape.",
+                }
+                : null,
+            provenance: [
+                `found at ${site.file}:${site.line} — ${site.provider} call, matched by ${site.matchedBy === "sdk" ? "SDK call shape" : "provider API host"}`,
+                "drafted by `modelrig init`; nothing in your source was changed",
+            ],
+            ...(site.params.temperature !== undefined || site.params.maxTokens !== undefined
+                ? {
+                    policy: {
+                        ...(site.params.timeoutMs !== undefined ? { timeoutMs: site.params.timeoutMs } : {}),
+                    },
+                }
+                : {}),
+        });
+        drafts.push({
+            route,
+            site,
+            draft,
+            candidateReasoning: seeded.reasoning,
+            replacement: replacementSnippet(route, variables),
+            costOutlook: buildCostOutlook(incumbent, candidates
+                .filter((c) => `${c.provider}/${c.model}` !== incumbent)
+                .map((c) => `${c.provider}/${c.model}`), registryRows),
+        });
+    }
+    const migrationMarkdown = buildMigrationMarkdown(drafts, {
+        sitesFound: scan.sites.length,
+        filesScanned: scan.filesScanned,
+        filesSkipped: scan.filesSkipped,
+    });
+    if (options.dryRun === true) {
+        return {
+            drafts,
+            sitesFound: scan.sites.length,
+            filesScanned: scan.filesScanned,
+            filesSkipped: scan.filesSkipped,
+            written: [],
+            skipped: [],
+            migrationMarkdown,
+        };
+    }
+    const written = [];
+    const skipped = [];
+    for (const d of drafts) {
+        const result = (0, draft_1.writeRouteDraft)(d.draft, deps.draftsDir, deps.fs, deps.path);
+        written.push(...result.written);
+        skipped.push(...result.skipped);
+    }
+    const migrationPath = deps.path.join(deps.draftsDir, "MIGRATION.md");
+    // MIGRATION.md is regenerated every run — it is a report, not a draft
+    // someone edits, and a stale map is worse than none.
+    deps.fs.mkdirSync(deps.path.dirname(migrationPath), { recursive: true });
+    deps.fs.writeFileSync(migrationPath, migrationMarkdown, "utf8");
+    written.push(migrationPath);
+    return {
+        drafts,
+        sitesFound: scan.sites.length,
+        filesScanned: scan.filesScanned,
+        filesSkipped: scan.filesSkipped,
+        written,
+        skipped,
+        migrationMarkdown,
+    };
+}

package/dist/init/signatures.d.ts

@@ -0,0 +1,39 @@
+/**
+ * Provider call signatures — the table `modelrig init` scans for.
+ *
+ * GENERIC BY CONSTRUCTION (spec WS2 / SD8). There is not one line in this
+ * file about InferWealth, its pipeline, or its 16 steps: customer zero is
+ * the acceptance FIXTURE, never a special case. Any repo calling these SDKs
+ * the ordinary way gets the same treatment.
+ *
+ * Adding a provider means adding a row here — no new code path.
+ */
+export interface ProviderSignature {
+    /** Provider id as ModelRig knows it (matches registry model keys). */
+    readonly provider: string;
+    /** npm package names whose import marks this SDK as present. */
+    readonly packages: readonly string[];
+    /** Call expressions that mean "a model is being called". */
+    readonly callPatterns: readonly RegExp[];
+    /** API hosts, for the fetch()-instead-of-SDK fallback. */
+    readonly hosts: readonly string[];
+    /** Keys holding the model id inside the call's options object. */
+    readonly modelKeys: readonly string[];
+    /** Keys holding the system prompt. */
+    readonly systemKeys: readonly string[];
+    /** Keys whose presence means the caller asked for structured output. */
+    readonly schemaKeys: readonly string[];
+}
+/** `g` flags are deliberate: the finder scans whole files. Each RegExp is
+ * re-created per scan by `freshPattern` so lastIndex never leaks between
+ * files. */
+export declare const PROVIDER_SIGNATURES: readonly ProviderSignature[];
+/** Every option key any provider uses for a model id — used when a call
+ * matched by host rather than by SDK shape. */
+export declare const ALL_MODEL_KEYS: readonly string[];
+/** Generation parameters worth carrying into a drafted route's policy. */
+export declare const PARAM_KEYS: Readonly<Record<string, string>>;
+/** A fresh, zero-lastIndex copy — global regexes are stateful. */
+export declare function freshPattern(pattern: RegExp): RegExp;
+export declare function signatureFor(provider: string): ProviderSignature | null;
+//# sourceMappingURL=signatures.d.ts.map

package/dist/init/signatures.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"signatures.d.ts","sourceRoot":"","sources":["../../src/init/signatures.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,MAAM,WAAW,iBAAiB;IAChC,sEAAsE;IACtE,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,gEAAgE;IAChE,QAAQ,CAAC,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAC;IACrC,4DAA4D;IAC5D,QAAQ,CAAC,YAAY,EAAE,SAAS,MAAM,EAAE,CAAC;IACzC,0DAA0D;IAC1D,QAAQ,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,CAAC;IAClC,kEAAkE;IAClE,QAAQ,CAAC,SAAS,EAAE,SAAS,MAAM,EAAE,CAAC;IACtC,sCAAsC;IACtC,QAAQ,CAAC,UAAU,EAAE,SAAS,MAAM,EAAE,CAAC;IACvC,wEAAwE;IACxE,QAAQ,CAAC,UAAU,EAAE,SAAS,MAAM,EAAE,CAAC;CACxC;AAED;;YAEY;AACZ,eAAO,MAAM,mBAAmB,EAAE,SAAS,iBAAiB,EAyE3D,CAAC;AAEF;+CAC+C;AAC/C,eAAO,MAAM,cAAc,EAAE,SAAS,MAAM,EAE3C,CAAC;AAEF,0EAA0E;AAC1E,eAAO,MAAM,UAAU,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAUvD,CAAC;AAEF,kEAAkE;AAClE,wBAAgB,YAAY,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAEpD;AAED,wBAAgB,YAAY,CAAC,QAAQ,EAAE,MAAM,GAAG,iBAAiB,GAAG,IAAI,CAEvE"}

package/dist/init/signatures.js

@@ -0,0 +1,116 @@
+"use strict";
+/**
+ * Provider call signatures — the table `modelrig init` scans for.
+ *
+ * GENERIC BY CONSTRUCTION (spec WS2 / SD8). There is not one line in this
+ * file about InferWealth, its pipeline, or its 16 steps: customer zero is
+ * the acceptance FIXTURE, never a special case. Any repo calling these SDKs
+ * the ordinary way gets the same treatment.
+ *
+ * Adding a provider means adding a row here — no new code path.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.PARAM_KEYS = exports.ALL_MODEL_KEYS = exports.PROVIDER_SIGNATURES = void 0;
+exports.freshPattern = freshPattern;
+exports.signatureFor = signatureFor;
+/** `g` flags are deliberate: the finder scans whole files. Each RegExp is
+ * re-created per scan by `freshPattern` so lastIndex never leaks between
+ * files. */
+exports.PROVIDER_SIGNATURES = [
+    {
+        provider: "openai",
+        packages: ["openai", "@ai-sdk/openai"],
+        callPatterns: [
+            /\.chat\.completions\.create\s*\(/g,
+            /\.responses\.create\s*\(/g,
+            /\.completions\.create\s*\(/g,
+        ],
+        hosts: ["api.openai.com"],
+        modelKeys: ["model"],
+        systemKeys: ["system", "instructions"],
+        schemaKeys: ["response_format", "text", "json_schema"],
+    },
+    {
+        provider: "anthropic",
+        packages: ["@anthropic-ai/sdk", "@ai-sdk/anthropic"],
+        callPatterns: [/\.messages\.create\s*\(/g, /\.messages\.stream\s*\(/g],
+        hosts: ["api.anthropic.com"],
+        modelKeys: ["model"],
+        systemKeys: ["system"],
+        schemaKeys: ["tools", "tool_choice", "output_schema"],
+    },
+    {
+        provider: "gemini",
+        packages: ["@google/genai", "@google/generative-ai", "@ai-sdk/google"],
+        callPatterns: [
+            /\.models\.generateContent\s*\(/g,
+            /\.models\.generateContentStream\s*\(/g,
+            /\.generateContent\s*\(/g,
+        ],
+        hosts: ["generativelanguage.googleapis.com"],
+        modelKeys: ["model"],
+        systemKeys: ["systemInstruction"],
+        schemaKeys: ["responseSchema", "responseJsonSchema", "responseMimeType"],
+    },
+    {
+        provider: "deepseek",
+        // DeepSeek ships an OpenAI-compatible API; the host is the tell.
+        packages: [],
+        callPatterns: [],
+        hosts: ["api.deepseek.com"],
+        modelKeys: ["model"],
+        systemKeys: ["system"],
+        schemaKeys: ["response_format"],
+    },
+    {
+        provider: "grok",
+        packages: [],
+        callPatterns: [],
+        hosts: ["api.x.ai"],
+        modelKeys: ["model"],
+        systemKeys: ["system"],
+        schemaKeys: ["response_format"],
+    },
+    {
+        provider: "deepinfra",
+        packages: [],
+        callPatterns: [],
+        hosts: ["api.deepinfra.com"],
+        modelKeys: ["model"],
+        systemKeys: ["system"],
+        schemaKeys: ["response_format"],
+    },
+    {
+        provider: "fireworks",
+        packages: [],
+        callPatterns: [],
+        hosts: ["api.fireworks.ai"],
+        modelKeys: ["model"],
+        systemKeys: ["system"],
+        schemaKeys: ["response_format"],
+    },
+];
+/** Every option key any provider uses for a model id — used when a call
+ * matched by host rather than by SDK shape. */
+exports.ALL_MODEL_KEYS = [
+    ...new Set(exports.PROVIDER_SIGNATURES.flatMap((s) => s.modelKeys)),
+];
+/** Generation parameters worth carrying into a drafted route's policy. */
+exports.PARAM_KEYS = {
+    temperature: "temperature",
+    top_p: "topP",
+    topP: "topP",
+    max_tokens: "maxTokens",
+    maxTokens: "maxTokens",
+    max_output_tokens: "maxTokens",
+    maxOutputTokens: "maxTokens",
+    timeout: "timeoutMs",
+    timeoutMs: "timeoutMs",
+};
+/** A fresh, zero-lastIndex copy — global regexes are stateful. */
+function freshPattern(pattern) {
+    return new RegExp(pattern.source, pattern.flags);
+}
+function signatureFor(provider) {
+    return exports.PROVIDER_SIGNATURES.find((s) => s.provider === provider) ?? null;
+}

package/dist/matrix/aggregate.d.ts

@@ -0,0 +1,89 @@
+/**
+ * Matrix aggregation job — Phase 4 WS6 (plan §4). Pure fold: telemetry
+ * rows → priors cells keyed (fingerprint_cell × model), each carrying
+ * outcome stats. Writes go to priors_cells ONLY (deny-all RLS, no UI, no
+ * cross-account use — standing decision 7; the gate stays off).
+ *
+ * Contribution discipline (spec WS6): the flag decides whether a cell may
+ * ever aggregate beyond its own account — respected here in code even
+ * though today's deployment is single-tenant. Non-contributing sources
+ * produce "account"-scoped cells, full stop.
+ */
+import type { TelemetryRow } from "../types/telemetry";
+/** A2 (eval-methodology §8): one model's paired record against ONE
+ * opponent within a cell — win/loss/tie from this model's perspective,
+ * plus how many distinct source accounts contributed pairs. */
+export interface PairwiseRecord {
+    readonly wins: number;
+    readonly losses: number;
+    readonly ties: number;
+    readonly samples: number;
+    readonly sources: number;
+}
+export interface PriorsCellStats {
+    readonly samples: number;
+    readonly conform_rate: number;
+    readonly repair_rate: number;
+    /** Mean cost over PRICED samples only — unpriced $0 rows never dilute. */
+    readonly mean_cost_usd: number | null;
+    readonly scope: "account" | "community";
+    /** A2: paired outcomes keyed by opponent model_key — the Bradley-Terry
+     * raw material. Absent when this (cell, model) has no paired replays. */
+    readonly pairwise?: Readonly<Record<string, PairwiseRecord>>;
+}
+export interface PriorsCell {
+    readonly cellKey: string;
+    readonly modelKey: string;
+    readonly stats: PriorsCellStats;
+}
+export interface AggregateOptions {
+    /** The source's rig-manifest contribution flag. */
+    readonly contribution: boolean;
+    /**
+     * The ORG's telemetry posture — C6 review ruling §7.1a, and the first
+     * consumer this column has ever had.
+     *
+     * The ruling is careful about what posture does NOT do: it never gates
+     * telemetry ingest. Metering rows are the billing substrate (2%-of-list
+     * computes from them), so a posture that stopped telemetry would be a
+     * self-inflicted billing hole, and it is not what a customer chooses when
+     * they choose pure-router. What they choose is that their traffic does not
+     * become community knowledge — which is decided here.
+     *
+     * Enforced IN ADDITION to `contribution`, deliberately. The flag is a rig
+     * manifest setting, editable in a repo by anyone with commit access; the
+     * posture is an account setting chosen at signup and stored on the org row.
+     * Two independent facts, either of which is a veto.
+     *
+     * OMITTED means `pure_router`. The dangerous default is the permissive one,
+     * so it is not the default: a caller written before this option existed must
+     * not silently start contributing.
+     */
+    readonly telemetryPosture?: "optimized" | "pure_router";
+}
+/**
+ * Whether these rows may become community knowledge.
+ *
+ * One function so the two-veto rule has a single home and a name, rather than
+ * living as a `&&` inside a ternary inside a map.
+ */
+export declare function aggregationScope(opts: AggregateOptions): "account" | "community";
+/** cell → model → opponent → record. */
+export type PairwiseByModel = Map<string, Map<string, Map<string, PairwiseRecord>>>;
+/** A2: fold paired replay outcomes from telemetry. A pair exists where the
+ * SAME captureId was replayed through two different models within a cell.
+ * Sample outcome = did ANY attempt of the latest replay run for that
+ * (capture, model) conform — sample-level, retry-inclusive, matching the
+ * bake-off's own conformance notion. Single-source deployment folds
+ * sources: 1; cross-account distinct counts arrive with the community job. */
+export declare function aggregatePairwiseFromTelemetry(rows: readonly TelemetryRow[]): PairwiseByModel;
+export declare function aggregatePriors(rows: readonly TelemetryRow[], opts: AggregateOptions): PriorsCell[];
+export interface PriorsWriterConfig {
+    readonly supabaseUrl: string;
+    readonly serviceRoleKey: string;
+    readonly fetchFn?: typeof fetch;
+}
+/** Upsert cells into priors_cells (service role — the ONLY principal that
+ * can touch the table; RLS denies everyone else including anon). */
+export declare function writePriorsCells(cells: readonly PriorsCell[], config: PriorsWriterConfig): Promise<void>;
+//# sourceMappingURL=aggregate.d.ts.map

package/dist/matrix/aggregate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"aggregate.d.ts","sourceRoot":"","sources":["../../src/matrix/aggregate.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAEvD;;+DAE+D;AAC/D,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,0EAA0E;IAC1E,QAAQ,CAAC,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IACtC,QAAQ,CAAC,KAAK,EAAE,SAAS,GAAG,WAAW,CAAC;IACxC;6EACyE;IACzE,QAAQ,CAAC,QAAQ,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC,CAAC;CAC9D;AAED,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,KAAK,EAAE,eAAe,CAAC;CACjC;AAED,MAAM,WAAW,gBAAgB;IAC/B,mDAAmD;IACnD,QAAQ,CAAC,YAAY,EAAE,OAAO,CAAC;IAC/B;;;;;;;;;;;;;;;;;;;OAmBG;IACH,QAAQ,CAAC,gBAAgB,CAAC,EAAE,WAAW,GAAG,aAAa,CAAC;CACzD;AAED;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,gBAAgB,GAAG,SAAS,GAAG,WAAW,CAGhF;AAED,wCAAwC;AACxC,MAAM,MAAM,eAAe,GAAG,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC,CAAC,CAAC;AAQpF;;;;;8EAK8E;AAC9E,wBAAgB,8BAA8B,CAAC,IAAI,EAAE,SAAS,YAAY,EAAE,GAAG,eAAe,CAoF7F;AAED,wBAAgB,eAAe,CAC7B,IAAI,EAAE,SAAS,YAAY,EAAE,EAC7B,IAAI,EAAE,gBAAgB,GACrB,UAAU,EAAE,CA+Cd;AAED,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,KAAK,CAAC;CACjC;AAED;oEACoE;AACpE,wBAAsB,gBAAgB,CACpC,KAAK,EAAE,SAAS,UAAU,EAAE,EAC5B,MAAM,EAAE,kBAAkB,GACzB,OAAO,CAAC,IAAI,CAAC,CA0Bf"}