modelrig 0.1.0 → 0.2.0

package/dist/types/telemetry.d.ts

@@ -13,9 +13,24 @@ export interface TelemetryRow {
     readonly model: string;
     readonly requestedTier: string;
     readonly servedTier: string;
+    /** Total input tokens. NORMALIZATION INVARIANT (WS-A / spec §2): INCLUDES
+     * `tokensCached` and `tokensCacheWrite` as subsets — mirrors
+     * {@link AdapterUsage.tokensIn}. */
     readonly tokensIn: number;
     readonly tokensOut: number;
+    /** Cache-READ input tokens (subset of `tokensIn`). */
     readonly tokensCached: number;
+    /** Cache-CREATION (write) input tokens (subset of `tokensIn`) — WS-A. Mirrors
+     * {@link AdapterUsage.tokensCacheWrite}; 0 when the provider does not write
+     * cache or does not report it. Persisted to `inferences.tokens_cache_write`
+     * (migration 00049) and read back as 0 for rows recorded before it. OPTIONAL
+     * & additive: the store binds/reads `?? 0`, so a row that omits it is a
+     * zero-write row (the fail-closed default) — no construction site is forced
+     * to change. Every SDK write path (run loop, raw lane) sets it explicitly. */
+    readonly tokensCacheWrite?: number;
+    /** 1h-TTL portion of `tokensCacheWrite` (Anthropic; bills at the 2×
+     * multiplier). Subset of `tokensCacheWrite`; 0 = all 5m-tier. Optional/additive. */
+    readonly tokensCacheWrite1h?: number;
     readonly costEstimateUsd: number;
     readonly latencyMs: number;
     /** Time to first body byte, ms (Phase 4 WS3) — null when nothing arrived
@@ -27,6 +42,14 @@ export interface TelemetryRow {
     /** Schema-fingerprint cell key (registry/fingerprint.ts) — null for
      * unstructured routes and rows recorded before the v2 migration. */
     readonly fingerprintCell: string | null;
+    /** Provider cache key / `prompt_cache_key` sent with the request, if any
+     * (WS-A substrate; the WS-C request-path opt-in fills it). null everywhere
+     * in WS-A — accounting ships dark, no request stamps a key yet. Optional &
+     * additive: the store binds/reads `?? null`. */
+    readonly cacheKey?: string | null;
+    /** Hash of the stable prompt prefix (WS-A substrate; WS-C fills it with
+     * `hash(route, template_version, toolschema_hash)`). null in WS-A. Optional. */
+    readonly prefixFingerprint?: string | null;
     /** True when this attempt's model had no pricing entry (addendum A1):
      * cost_estimate_usd stays 0 (no invented dollars) and any active envelope
      * was charged the conservative unpriced rate instead. */
@@ -77,6 +100,100 @@ export interface FeedbackRow {
      * missing data, and is never backfilled. */
     readonly createdBy: string | null;
 }
+/** One execution of a customer pipeline (Expansion E2 chunk A). Local SQLite is
+ * the write path (run.start/run.end); the exporter mirrors it to `public.runs`
+ * on its own watermark. A mutable projection: start → end. `source_id`/`org_id`
+ * are stamped at export from the principal, never held locally (one rig = one
+ * source). */
+export interface RunRow {
+    readonly id: string;
+    readonly pipeline: string;
+    readonly pipelineVersion: string | null;
+    readonly environment: string | null;
+    readonly episodeKey: string | null;
+    readonly startedAt: string;
+    readonly endedAt: string | null;
+    readonly status: "running" | "succeeded" | "failed" | "abandoned";
+}
+/** One ATTEMPT of one operation within a run (Expansion E2 chunk A, ruling c).
+ * A fact — one row per attempt, PK (run_id, step_key, attempt_no). Provenance is
+ * ground-truth (an inference reference) XOR attested (a foreign OTLP span);
+ * nothing writes attested rows this mission. */
+export interface StepRow {
+    readonly runId: string;
+    readonly stepKey: string;
+    readonly attemptNo: number;
+    readonly task: string | null;
+    readonly provenance: "ground-truth" | "attested";
+    readonly inferenceId: string | null;
+    readonly spanTraceId: string | null;
+    readonly spanId: string | null;
+    readonly startedAt: string;
+    readonly endedAt: string | null;
+    readonly failureClass: string | null;
+}
+/** Artifact METADATA (Expansion E2 chunk B). Content is never held — contentRef
+ * is the customer's opaque URI, contentHash a sha256 of bytes hashed-then-
+ * discarded. A fact; local SQLite write path (artifact.save), exporter mirrors. */
+export interface ArtifactRow {
+    readonly id: string;
+    readonly runId: string | null;
+    readonly stepKey: string | null;
+    readonly attemptNo: number | null;
+    readonly task: string | null;
+    readonly name: string;
+    readonly type: string;
+    readonly version: number;
+    readonly supersedesArtifactId: string | null;
+    readonly declaredSchema: unknown;
+    readonly fingerprintCell: string | null;
+    readonly contentRef: string | null;
+    readonly contentHash: string | null;
+    readonly contentBytes: number | null;
+    readonly dataClassification: string | null;
+    readonly expiresAt: string | null;
+    /** Per-row scrub findings (E4 chunk 0, migration 00039) — the `ScrubSummary`
+     * shape `{mode, blocked, findings:[{type,count}]}`, COUNTS never values.
+     * Absent/null ⇒ scrub did not run for this artifact (custody off, caller-
+     * supplied contentRef, or a pre-E4 row). Opaque here (T7). */
+    readonly scrub?: unknown;
+}
+/** A lineage edge between two artifacts (chunk B). */
+export interface ArtifactEdgeRow {
+    readonly fromArtifactId: string;
+    readonly toArtifactId: string;
+    readonly kind: "consumed" | "derived_from";
+}
+/** An evaluation recorded against an artifact (chunk B). */
+export interface ArtifactEvaluationRow {
+    readonly id: string;
+    /** The artifact subject — null when this evaluates a whole run (E5 chunk V). */
+    readonly artifactId: string | null;
+    /** The run subject (E5 chunk V) — null when this evaluates an artifact.
+     * Exactly one of artifactId / runId is set. */
+    readonly runId: string | null;
+    readonly evaluator: string;
+    readonly evaluatorKind: "deterministic" | "model-judge" | "human";
+    readonly score: number | null;
+    readonly passed: boolean | null;
+    readonly label: string | null;
+    readonly explanation: string | null;
+    readonly createdBy: string | null;
+}
+/** How a case entered the eval suite (E4 chunk A, migration 00040 CHECK). */
+export type EvalCaseOrigin = "promoted-failure" | "human-corrected" | "manual";
+/** A per-org regression/golden eval case (E4 chunk A). `correctedArtifactId`
+ * null ⇒ a failure-case; set ⇒ a golden-corrected pair. A fact on ingest
+ * (created via promote); edits/deletes are server-side, not on this stream. */
+export interface EvalCaseRow {
+    readonly id: string;
+    readonly task: string;
+    readonly sourceArtifactId: string;
+    readonly correctedArtifactId: string | null;
+    readonly origin: EvalCaseOrigin;
+    readonly note: string | null;
+    readonly createdBy: string | null;
+}
 export interface TelemetryStore {
     record(row: TelemetryRow): void;
     recordFeedback(row: FeedbackRow): void;

package/dist/types/telemetry.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"telemetry.d.ts","sourceRoot":"","sources":["../../src/types/telemetry.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAC/C,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAEvC,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B;uDACmD;IACnD,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,QAAQ,CAAC,YAAY,EAAE,YAAY,GAAG,IAAI,CAAC;IAC3C,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B;wEACoE;IACpE,QAAQ,CAAC,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IACxC;;6DAEyD;IACzD,QAAQ,CAAC,cAAc,EAAE,OAAO,CAAC;IACjC;oDACgD;IAChD,QAAQ,CAAC,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IACtC;uDACmD;IACnD,QAAQ,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;CACpC;AAED,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,WAAW,CAAC;CACvC;AAED;;6EAE6E;AAC7E,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IACpC,QAAQ,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC,QAAQ,CAAC,OAAO,EAAE,IAAI,GAAG,MAAM,CAAC;IAChC,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB;;;;;;;;;;;;;;OAcG;IACH,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B;;gDAE4C;IAC5C,QAAQ,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;CACnC;AAED,MAAM,WAAW,cAAc;IAC7B,MAAM,CAAC,GAAG,EAAE,YAAY,GAAG,IAAI,CAAC;IAChC,cAAc,CAAC,GAAG,EAAE,WAAW,GAAG,IAAI,CAAC;IACvC,UAAU,CAAC,GAAG,EAAE,MAAM,OAAO,GAAG,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,YAAY,EAAE,CAAC;IACvE,WAAW,CAAC,GAAG,EAAE,MAAM,GAAG,WAAW,GAAG,IAAI,CAAC;IAC7C,MAAM,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,WAAW,CAAC;IAC9C,YAAY,CAAC,GAAG,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,WAAW,CAAC;IAC1D,KAAK,IAAI,IAAI,CAAC;CACf"}
+{"version":3,"file":"telemetry.d.ts","sourceRoot":"","sources":["../../src/types/telemetry.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAC/C,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAEvC,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B;;wCAEoC;IACpC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,sDAAsD;IACtD,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B;;;;;;kFAM8E;IAC9E,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IACnC;wFACoF;IACpF,QAAQ,CAAC,kBAAkB,CAAC,EAAE,MAAM,CAAC;IACrC,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B;uDACmD;IACnD,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,QAAQ,CAAC,YAAY,EAAE,YAAY,GAAG,IAAI,CAAC;IAC3C,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B;wEACoE;IACpE,QAAQ,CAAC,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IACxC;;;oDAGgD;IAChD,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAClC;oFACgF;IAChF,QAAQ,CAAC,iBAAiB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3C;;6DAEyD;IACzD,QAAQ,CAAC,cAAc,EAAE,OAAO,CAAC;IACjC;oDACgD;IAChD,QAAQ,CAAC,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IACtC;uDACmD;IACnD,QAAQ,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;CACpC;AAED,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,WAAW,CAAC;CACvC;AAED;;6EAE6E;AAC7E,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IACpC,QAAQ,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC,QAAQ,CAAC,OAAO,EAAE,IAAI,GAAG,MAAM,CAAC;IAChC,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB;;;;;;;;;;;;;;OAcG;IACH,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B;;gDAE4C;IAC5C,QAAQ,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;CACnC;AAED;;;;cAIc;AACd,MAAM,WAAW,MAAM;IACrB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IACxC,QAAQ,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IACpC,QAAQ,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,QAAQ,CAAC,MAAM,EAAE,SAAS,GAAG,WAAW,GAAG,QAAQ,GAAG,WAAW,CAAC;CACnE;AAED;;;gDAGgD;AAChD,MAAM,WAAW,OAAO;IACtB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,QAAQ,CAAC,UAAU,EAAE,cAAc,GAAG,UAAU,CAAC;IACjD,QAAQ,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IACpC,QAAQ,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IACpC,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,QAAQ,CAAC,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;CACtC;AAED;;mFAEmF;AACnF,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,QAAQ,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IAClC,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,oBAAoB,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7C,QAAQ,CAAC,cAAc,EAAE,OAAO,CAAC;IACjC,QAAQ,CAAC,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IACxC,QAAQ,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC,QAAQ,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IACpC,QAAQ,CAAC,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IACrC,QAAQ,CAAC,kBAAkB,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3C,QAAQ,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IAClC;;;kEAG8D;IAC9D,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC;CAC1B;AAED,sDAAsD;AACtD,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,IAAI,EAAE,UAAU,GAAG,cAAc,CAAC;CAC5C;AAED,4DAA4D;AAC5D,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,gFAAgF;IAChF,QAAQ,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC;mDAC+C;IAC/C,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,aAAa,EAAE,eAAe,GAAG,aAAa,GAAG,OAAO,CAAC;IAClE,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,QAAQ,CAAC,MAAM,EAAE,OAAO,GAAG,IAAI,CAAC;IAChC,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,QAAQ,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IACpC,QAAQ,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;CACnC;AAED,6EAA6E;AAC7E,MAAM,MAAM,cAAc,GAAG,kBAAkB,GAAG,iBAAiB,GAAG,QAAQ,CAAC;AAE/E;;+EAE+E;AAC/E,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,mBAAmB,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5C,QAAQ,CAAC,MAAM,EAAE,cAAc,CAAC;IAChC,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,QAAQ,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;CACnC;AAED,MAAM,WAAW,cAAc;IAC7B,MAAM,CAAC,GAAG,EAAE,YAAY,GAAG,IAAI,CAAC;IAChC,cAAc,CAAC,GAAG,EAAE,WAAW,GAAG,IAAI,CAAC;IACvC,UAAU,CAAC,GAAG,EAAE,MAAM,OAAO,GAAG,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,YAAY,EAAE,CAAC;IACvE,WAAW,CAAC,GAAG,EAAE,MAAM,GAAG,WAAW,GAAG,IAAI,CAAC;IAC7C,MAAM,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,WAAW,CAAC;IAC9C,YAAY,CAAC,GAAG,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,WAAW,CAAC;IAC1D,KAAK,IAAI,IAAI,CAAC;CACf"}

package/dist/validate-cli.d.ts

@@ -0,0 +1,12 @@
+/**
+ * `modelrig validate` (CE-6, spec §1, walkthrough §8.7a) — extracted from
+ * cli.ts to keep it under the 700-LOC cap. Structurally loads rig.yaml + every
+ * route bundle and reports per-route OK / config error, exiting nonzero on any
+ * failure. Requires NO provider key: this bypasses the serveable-candidate gate
+ * (which needs keys and stays fail-closed for SERVING) so a newbie can check
+ * their authoring before wiring credentials. A bare
+ * `createRig(loadConfigFromEnv())` fail-closes keyless with "no serveable
+ * candidate" — this is the dry structural check that doesn't.
+ */
+export declare function runValidateCli(): number;
+//# sourceMappingURL=validate-cli.d.ts.map

package/dist/validate-cli.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"validate-cli.d.ts","sourceRoot":"","sources":["../src/validate-cli.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAOH,wBAAgB,cAAc,IAAI,MAAM,CAmCvC"}

package/dist/validate-cli.js

@@ -0,0 +1,57 @@
+"use strict";
+/**
+ * `modelrig validate` (CE-6, spec §1, walkthrough §8.7a) — extracted from
+ * cli.ts to keep it under the 700-LOC cap. Structurally loads rig.yaml + every
+ * route bundle and reports per-route OK / config error, exiting nonzero on any
+ * failure. Requires NO provider key: this bypasses the serveable-candidate gate
+ * (which needs keys and stays fail-closed for SERVING) so a newbie can check
+ * their authoring before wiring credentials. A bare
+ * `createRig(loadConfigFromEnv())` fail-closes keyless with "no serveable
+ * candidate" — this is the dry structural check that doesn't.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.runValidateCli = runValidateCli;
+const node_path_1 = require("node:path");
+const config_1 = require("./config");
+const loader_1 = require("./routes/loader");
+const manifest_1 = require("./routes/manifest");
+function runValidateCli() {
+    const config = (0, config_1.loadConfigFromEnv)();
+    const rigDir = (0, node_path_1.dirname)(config.routesDir);
+    let failures = 0;
+    // rig.yaml (manifest) — absence is fine (never gates); a malformed one is a
+    // config error surfaced like any route.
+    try {
+        const manifest = (0, manifest_1.loadManifest)(rigDir);
+        console.log(manifest === null ? `—  rig.yaml (none at ${rigDir})` : "OK rig.yaml");
+    }
+    catch (err) {
+        failures += 1;
+        console.error(`FAIL rig.yaml: ${configErrorText(err)}`);
+    }
+    // Every route bundle — one bad file never hides the rest.
+    const results = (0, loader_1.validateRoutesDir)(config.routesDir);
+    if (results.length === 0) {
+        console.log(`(no route bundles in ${config.routesDir})`);
+    }
+    for (const r of results) {
+        if (r.ok) {
+            console.log(`OK ${r.route}  (${r.file})`);
+        }
+        else {
+            failures += 1;
+            console.error(`FAIL ${r.route ?? r.file}: ${r.problems.join("; ")}`);
+        }
+    }
+    if (failures === 0) {
+        console.log(`\n${results.length} route(s) valid — no provider key required for this check.`);
+        return 0;
+    }
+    console.error(`\n${failures} problem(s) found.`);
+    return 1;
+}
+function configErrorText(err) {
+    if (err instanceof loader_1.RouteConfigError && err.problems.length > 0)
+        return err.problems.join("; ");
+    return err instanceof Error ? err.message : String(err);
+}

package/dist/verify/capture.d.ts

@@ -0,0 +1,66 @@
+/**
+ * The capture step — records N invocations of the ORIGINAL call site's
+ * inputs/outputs LOCALLY (spec §9 Tier-2 verify). Two surfaces:
+ *
+ *  - `captureOriginal(site, originalFn, inputs)` — invoke the original call
+ *    (a black-box function the skill/harness wraps around the customer's real
+ *    call) once per input and record the I/O into a fixture. Honest refusal is
+ *    built in: a streaming or dynamically-assembled-prompt call site is REFUSED
+ *    up front (those are T0/T1 territory), and an input the original throws on
+ *    is recorded as a per-input refusal, never a lost sample.
+ *  - `openShadowCaptureStore(dbPath)` — a durable local SQLite buffer for the
+ *    same captures, the same posture as telemetry/capture.ts: a plain
+ *    better-sqlite3 handle with record/readAll/close and NO network or upload
+ *    accessor. Captures stay in the SDK process; nothing here uploads.
+ *
+ * The portable `ShadowCaptureFixture` (JSON) is the hand-off the CLI reads and
+ * the skill embeds context from — the only thing that leaves this module, and
+ * only to local disk.
+ */
+import type { CandidateSpec } from "../types/route";
+import type { ShadowCapture, ShadowCaptureFixture } from "./types";
+/** A call site being captured. `streaming`/`dynamicPrompt` are the skill's
+ * honest declarations that this site cannot be captured/replayed as a
+ * task-shaped bundle — refusing is the correct output. */
+export interface OriginalCallSite {
+    readonly callSiteId: string;
+    /** provider+model of the original call — the route must pin exactly this. */
+    readonly original: CandidateSpec;
+    readonly streaming?: boolean;
+    readonly dynamicPrompt?: boolean;
+    readonly nondeterministicPaths?: readonly string[];
+}
+/** The original call, wrapped as a pure input→output-text function. */
+export type OriginalCallFn = (input: Record<string, unknown>) => Promise<string>;
+export interface CaptureOptions {
+    readonly now?: () => string;
+}
+/**
+ * Capture N original invocations into a fixture. Streaming/dynamic sites are
+ * refused before any call; per-input failures become `uncapturable` refusals.
+ */
+export declare function captureOriginal(site: OriginalCallSite, originalFn: OriginalCallFn, inputs: readonly Record<string, unknown>[], opts?: CaptureOptions): Promise<ShadowCaptureFixture>;
+export interface ShadowCaptureRecord {
+    readonly callSiteId: string;
+    readonly provider: string;
+    readonly model: string;
+    readonly input: Record<string, unknown>;
+    readonly output: string;
+}
+export interface ShadowCaptureStore {
+    record(row: ShadowCaptureRecord): void;
+    /** Captures for a call site, in insertion order (the replay input set). */
+    readAll(callSiteId: string): ShadowCapture[];
+    close(): void;
+}
+/**
+ * A separate better-sqlite3 handle — deliberately NOT wired to any exporter or
+ * upload path. Shadow captures are original-call outputs used only to prove
+ * equivalence locally; nothing here ever leaves the machine (the SDK's
+ * export-isolation posture, extended to the verifier).
+ */
+export declare function openShadowCaptureStore(dbPath: string): ShadowCaptureStore;
+export declare function serializeFixture(fixture: ShadowCaptureFixture): string;
+/** Parse + shape-validate a fixture (errors teach — the CLI surfaces them). */
+export declare function parseFixture(json: string): ShadowCaptureFixture;
+//# sourceMappingURL=capture.d.ts.map

package/dist/verify/capture.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"capture.d.ts","sourceRoot":"","sources":["../../src/verify/capture.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAKH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AACpD,OAAO,KAAK,EAAkB,aAAa,EAAE,oBAAoB,EAAE,MAAM,SAAS,CAAC;AAEnF;;0DAE0D;AAC1D,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,6EAA6E;IAC7E,QAAQ,CAAC,QAAQ,EAAE,aAAa,CAAC;IACjC,QAAQ,CAAC,SAAS,CAAC,EAAE,OAAO,CAAC;IAC7B,QAAQ,CAAC,aAAa,CAAC,EAAE,OAAO,CAAC;IACjC,QAAQ,CAAC,qBAAqB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CACpD;AAED,uEAAuE;AACvE,MAAM,MAAM,cAAc,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;AAEjF,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;CAC7B;AAED;;;GAGG;AACH,wBAAsB,eAAe,CACnC,IAAI,EAAE,gBAAgB,EACtB,UAAU,EAAE,cAAc,EAC1B,MAAM,EAAE,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,EAC1C,IAAI,GAAE,cAAmB,GACxB,OAAO,CAAC,oBAAoB,CAAC,CAwC/B;AAwBD,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACxC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,kBAAkB;IACjC,MAAM,CAAC,GAAG,EAAE,mBAAmB,GAAG,IAAI,CAAC;IACvC,2EAA2E;IAC3E,OAAO,CAAC,UAAU,EAAE,MAAM,GAAG,aAAa,EAAE,CAAC;IAC7C,KAAK,IAAI,IAAI,CAAC;CACf;AAmBD;;;;;GAKG;AACH,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,MAAM,GAAG,kBAAkB,CAuCzE;AAID,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,oBAAoB,GAAG,MAAM,CAEtE;AAOD,+EAA+E;AAC/E,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,oBAAoB,CA0B/D"}

package/dist/verify/capture.js

@@ -0,0 +1,180 @@
+"use strict";
+/**
+ * The capture step — records N invocations of the ORIGINAL call site's
+ * inputs/outputs LOCALLY (spec §9 Tier-2 verify). Two surfaces:
+ *
+ *  - `captureOriginal(site, originalFn, inputs)` — invoke the original call
+ *    (a black-box function the skill/harness wraps around the customer's real
+ *    call) once per input and record the I/O into a fixture. Honest refusal is
+ *    built in: a streaming or dynamically-assembled-prompt call site is REFUSED
+ *    up front (those are T0/T1 territory), and an input the original throws on
+ *    is recorded as a per-input refusal, never a lost sample.
+ *  - `openShadowCaptureStore(dbPath)` — a durable local SQLite buffer for the
+ *    same captures, the same posture as telemetry/capture.ts: a plain
+ *    better-sqlite3 handle with record/readAll/close and NO network or upload
+ *    accessor. Captures stay in the SDK process; nothing here uploads.
+ *
+ * The portable `ShadowCaptureFixture` (JSON) is the hand-off the CLI reads and
+ * the skill embeds context from — the only thing that leaves this module, and
+ * only to local disk.
+ */
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.captureOriginal = captureOriginal;
+exports.openShadowCaptureStore = openShadowCaptureStore;
+exports.serializeFixture = serializeFixture;
+exports.parseFixture = parseFixture;
+const better_sqlite3_1 = __importDefault(require("better-sqlite3"));
+const node_fs_1 = require("node:fs");
+const node_path_1 = require("node:path");
+/**
+ * Capture N original invocations into a fixture. Streaming/dynamic sites are
+ * refused before any call; per-input failures become `uncapturable` refusals.
+ */
+async function captureOriginal(site, originalFn, inputs, opts = {}) {
+    const capturedAt = (opts.now ?? (() => new Date().toISOString()))();
+    const nd = site.nondeterministicPaths;
+    const upfront = refuseUpFront(site);
+    if (upfront !== null) {
+        return {
+            callSiteId: site.callSiteId,
+            original: site.original,
+            capturedAt,
+            samples: [],
+            refusals: [upfront],
+            ...(nd !== undefined ? { nondeterministicPaths: nd } : {}),
+        };
+    }
+    const samples = [];
+    const refusals = [];
+    for (const input of inputs) {
+        try {
+            const output = await originalFn(input);
+            samples.push({ input, output });
+        }
+        catch (err) {
+            refusals.push({
+                reason: "uncapturable",
+                detail: `input ${JSON.stringify(input)} could not be captured: ` +
+                    (err instanceof Error ? err.message : String(err)),
+            });
+        }
+    }
+    return {
+        callSiteId: site.callSiteId,
+        original: site.original,
+        capturedAt,
+        samples,
+        ...(refusals.length > 0 ? { refusals } : {}),
+        ...(nd !== undefined ? { nondeterministicPaths: nd } : {}),
+    };
+}
+function refuseUpFront(site) {
+    if (site.streaming === true) {
+        return {
+            reason: "streaming",
+            detail: `call site ${site.callSiteId} streams tokens — a streaming call has no single ` +
+                "terminal output to replay against; per the batch-first deferral this is T0/T1 territory",
+        };
+    }
+    if (site.dynamicPrompt === true) {
+        return {
+            reason: "dynamic-prompt",
+            detail: `call site ${site.callSiteId} assembles its prompt dynamically — it does not map to a ` +
+                "stable template + variables, so it cannot be replayed through a task route (T0/T1 territory)",
+        };
+    }
+    return null;
+}
+const SHADOW_SQL = `
+CREATE TABLE IF NOT EXISTS shadow_captures (
+  call_site_id TEXT NOT NULL,
+  seq          INTEGER NOT NULL,
+  provider     TEXT NOT NULL,
+  model        TEXT NOT NULL,
+  input_json   TEXT NOT NULL,
+  output_text  TEXT NOT NULL,
+  PRIMARY KEY (call_site_id, seq)
+);
+`;
+/**
+ * A separate better-sqlite3 handle — deliberately NOT wired to any exporter or
+ * upload path. Shadow captures are original-call outputs used only to prove
+ * equivalence locally; nothing here ever leaves the machine (the SDK's
+ * export-isolation posture, extended to the verifier).
+ */
+function openShadowCaptureStore(dbPath) {
+    (0, node_fs_1.mkdirSync)((0, node_path_1.dirname)(dbPath), { recursive: true });
+    const db = new better_sqlite3_1.default(dbPath);
+    db.pragma("journal_mode = WAL");
+    db.exec(SHADOW_SQL);
+    const nextSeq = db.prepare("SELECT COALESCE(MAX(seq), -1) + 1 AS n FROM shadow_captures WHERE call_site_id = ?");
+    const insert = db.prepare(`
+    INSERT INTO shadow_captures (call_site_id, seq, provider, model, input_json, output_text)
+    VALUES (@call_site_id, @seq, @provider, @model, @input_json, @output_text)
+  `);
+    const selectAll = db.prepare("SELECT input_json, output_text FROM shadow_captures WHERE call_site_id = ? ORDER BY seq ASC");
+    return {
+        record(row) {
+            const seq = nextSeq.get(row.callSiteId).n;
+            insert.run({
+                call_site_id: row.callSiteId,
+                seq,
+                provider: row.provider,
+                model: row.model,
+                input_json: JSON.stringify(row.input),
+                output_text: row.output,
+            });
+        },
+        readAll(callSiteId) {
+            return selectAll.all(callSiteId).map((r) => ({
+                input: JSON.parse(r.input_json),
+                output: r.output_text,
+            }));
+        },
+        close() {
+            db.close();
+        },
+    };
+}
+// ── Portable fixture JSON (the CLI hand-off) ─────────────────────────────────
+function serializeFixture(fixture) {
+    return `${JSON.stringify(fixture, null, 2)}\n`;
+}
+/** A non-null, non-array object (the shape a JSON `{...}` decodes to). */
+function isPlainObject(v) {
+    return v !== null && typeof v === "object" && !Array.isArray(v);
+}
+/** Parse + shape-validate a fixture (errors teach — the CLI surfaces them). */
+function parseFixture(json) {
+    let raw;
+    try {
+        raw = JSON.parse(json);
+    }
+    catch (err) {
+        throw new Error(`capture fixture is not valid JSON: ${err.message}`);
+    }
+    if (raw === null || typeof raw !== "object") {
+        throw new Error("capture fixture must be a JSON object");
+    }
+    const o = raw;
+    if (typeof o.callSiteId !== "string")
+        throw new Error('capture fixture is missing "callSiteId"');
+    const original = o.original;
+    if (!isPlainObject(original) || typeof original.provider !== "string" || typeof original.model !== "string") {
+        throw new Error('capture fixture is missing a valid "original" { provider, model }');
+    }
+    if (!Array.isArray(o.samples))
+        throw new Error('capture fixture is missing a "samples" array');
+    for (const [i, s] of o.samples.entries()) {
+        const sample = s;
+        // `input` must be a plain object of template variables — null and arrays
+        // pass a bare `typeof === "object"` check but break render/replay downstream.
+        if (!isPlainObject(sample) || typeof sample.output !== "string" || !isPlainObject(sample.input)) {
+            throw new Error(`capture fixture sample ${i} must be { input: object, output: string }`);
+        }
+    }
+    return raw;
+}

package/dist/verify/cli-run.d.ts

@@ -0,0 +1,23 @@
+/**
+ * `modelrig verify-swap` runner — reads a local capture fixture, replays it
+ * through the drafted same-model route, and writes BOTH report forms: the
+ * machine-readable JSON (the skill parses it) and the human-readable Markdown
+ * (the Tier-2 PR embeds it). Lives here (not cli.ts) for the LOC cap (P1),
+ * beside the report renderer it drives — same split as bakeoff/report.ts.
+ *
+ * Exit code is the gate the skill reads: 0 = equivalent / equivalent-modulo,
+ * 1 = DIVERGENT (do not merge), 2 = REFUSED (not a Tier-2 replacement — a
+ * correct outcome that needs a human's T0/T1 rethink, not a merge).
+ */
+import type { RigConfig } from "../config";
+export interface VerifySwapCliOptions {
+    readonly route: string;
+    readonly fixturePath: string;
+    readonly envelopeUsd?: number;
+    /** Print the machine-readable JSON to stdout instead of the Markdown. */
+    readonly asJson?: boolean;
+    /** Also write the Markdown report to this path (the PR body source). */
+    readonly outPath?: string;
+}
+export declare function runVerifySwapCli(config: RigConfig, opts: VerifySwapCliOptions): Promise<number>;
+//# sourceMappingURL=cli-run.d.ts.map

package/dist/verify/cli-run.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli-run.d.ts","sourceRoot":"","sources":["../../src/verify/cli-run.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAIH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAM3C,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,yEAAyE;IACzE,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC;IAC1B,wEAAwE;IACxE,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;CAC3B;AAQD,wBAAsB,gBAAgB,CACpC,MAAM,EAAE,SAAS,EACjB,IAAI,EAAE,oBAAoB,GACzB,OAAO,CAAC,MAAM,CAAC,CA+BjB"}

package/dist/verify/cli-run.js

@@ -0,0 +1,57 @@
+"use strict";
+/**
+ * `modelrig verify-swap` runner — reads a local capture fixture, replays it
+ * through the drafted same-model route, and writes BOTH report forms: the
+ * machine-readable JSON (the skill parses it) and the human-readable Markdown
+ * (the Tier-2 PR embeds it). Lives here (not cli.ts) for the LOC cap (P1),
+ * beside the report renderer it drives — same split as bakeoff/report.ts.
+ *
+ * Exit code is the gate the skill reads: 0 = equivalent / equivalent-modulo,
+ * 1 = DIVERGENT (do not merge), 2 = REFUSED (not a Tier-2 replacement — a
+ * correct outcome that needs a human's T0/T1 rethink, not a merge).
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.runVerifySwapCli = runVerifySwapCli;
+const node_fs_1 = require("node:fs");
+const node_path_1 = require("node:path");
+const index_1 = require("../index");
+const capture_1 = require("./capture");
+const report_1 = require("./report");
+function exitFor(report) {
+    if (report.overall === "divergent")
+        return 1;
+    if (report.overall === "refused")
+        return 2;
+    return 0;
+}
+async function runVerifySwapCli(config, opts) {
+    const fixture = (0, capture_1.parseFixture)((0, node_fs_1.readFileSync)(opts.fixturePath, "utf8"));
+    const rig = (0, index_1.createRig)(config);
+    try {
+        const report = await rig.verifySwap(opts.route, fixture, {
+            ...(opts.envelopeUsd !== undefined ? { envelopeUsd: opts.envelopeUsd } : {}),
+        });
+        // Persist both forms next to the telemetry db (captures never travel; the
+        // report is aggregate + local).
+        const outDir = (0, node_path_1.join)((0, node_path_1.dirname)(config.telemetryDbPath), "verify");
+        (0, node_fs_1.mkdirSync)(outDir, { recursive: true });
+        const stem = (0, node_path_1.join)(outDir, `${report.route}@${report.routeVersion}`);
+        (0, node_fs_1.writeFileSync)(`${stem}.json`, `${JSON.stringify(report, null, 2)}\n`);
+        const markdown = (0, report_1.renderReportMarkdown)(report);
+        (0, node_fs_1.writeFileSync)(`${stem}.md`, markdown);
+        if (opts.outPath !== undefined) {
+            (0, node_fs_1.mkdirSync)((0, node_path_1.dirname)(opts.outPath), { recursive: true });
+            (0, node_fs_1.writeFileSync)(opts.outPath, markdown);
+        }
+        if (opts.asJson)
+            console.log(JSON.stringify(report, null, 2));
+        else
+            console.log(markdown);
+        console.log(`report → ${stem}.json · ${stem}.md` + (opts.outPath !== undefined ? ` · ${opts.outPath}` : ""));
+        return exitFor(report);
+    }
+    finally {
+        // One-shot CLI: await the settled drain so the exporter's final batch lands.
+        await rig.close();
+    }
+}

package/dist/verify/diff.d.ts

@@ -0,0 +1,48 @@
+/**
+ * The diff engine — the honest verdict vocabulary that makes the verifier's
+ * report trustworthy. Pure (no adapters, no run loop): it compares an
+ * original output against a routed one and returns one of three verdicts.
+ *
+ * Design decision (flagged for architect review): the routed output arrives
+ * as PARSED JSON — `run()` only returns after the output validated against the
+ * route schema (or it throws), so a routed sample is guaranteed schema-
+ * conformant and JSON. We therefore compare STRUCTURE, not raw bytes. For JSON,
+ * key order and whitespace are not behavior, so "byte-identical where
+ * deterministic" is operationalized as CANONICAL identity (sorted-key
+ * serialization). Structured-field equality — with declared nondeterministic
+ * fields excluded — is the fallback, exactly as the spec's §6 evaluation
+ * contract prescribes.
+ */
+import type { SampleDiff } from "./types";
+/** Deterministic JSON serialization: object keys sorted recursively, arrays
+ * left in order (order is semantic). The operative notion of "byte-identical"
+ * for JSON outputs. */
+export declare function canonicalJson(value: unknown): string;
+export interface Divergence {
+    /** JSON-pointer path to the first differing node. */
+    readonly path: string;
+    readonly originalValue: unknown;
+    readonly routedValue: unknown;
+}
+/**
+ * First point at which `original` and `routed` structurally differ, in a
+ * stable depth-first order, or null when they are deep-equal after masking the
+ * declared nondeterministic paths. Object keys are visited in sorted order so
+ * the "first" differing field is deterministic across runs.
+ */
+export declare function firstDivergence(original: unknown, routed: unknown, nondeterministicPaths: readonly string[], path?: string): Divergence | null;
+/**
+ * Diff an original output (raw text) against a routed output (already parsed by
+ * `run()`), returning the verdict. `routedParsed` is guaranteed schema-
+ * conformant JSON by the run loop; `originalText` is whatever the original call
+ * site emitted.
+ *
+ *  - byte / canonical identity ⇒ `equivalent`
+ *  - structurally equal after masking declared nd-paths ⇒
+ *    `equivalent-modulo-nondeterminism`
+ *  - a real structured field differs ⇒ `divergent` (first field named)
+ *  - the original is not JSON ⇒ `divergent` (a free-text call site — this
+ *    isn't route-shaped work; T0/T1 territory, honestly flagged not forced)
+ */
+export declare function diffOutputs(originalText: string, routedParsed: unknown, routedText: string, nondeterministicPaths: readonly string[]): SampleDiff;
+//# sourceMappingURL=diff.d.ts.map

package/dist/verify/diff.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"diff.d.ts","sourceRoot":"","sources":["../../src/verify/diff.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAE1C;;uBAEuB;AACvB,wBAAgB,aAAa,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAEpD;AAcD,MAAM,WAAW,UAAU;IACzB,qDAAqD;IACrD,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,aAAa,EAAE,OAAO,CAAC;IAChC,QAAQ,CAAC,WAAW,EAAE,OAAO,CAAC;CAC/B;AAQD;;;;;GAKG;AACH,wBAAgB,eAAe,CAC7B,QAAQ,EAAE,OAAO,EACjB,MAAM,EAAE,OAAO,EACf,qBAAqB,EAAE,SAAS,MAAM,EAAE,EACxC,IAAI,SAAK,GACR,UAAU,GAAG,IAAI,CAuCnB;AAwBD;;;;;;;;;;;;GAYG;AACH,wBAAgB,WAAW,CACzB,YAAY,EAAE,MAAM,EACpB,YAAY,EAAE,OAAO,EACrB,UAAU,EAAE,MAAM,EAClB,qBAAqB,EAAE,SAAS,MAAM,EAAE,GACvC,UAAU,CAyCZ"}