modelrig 0.1.0 → 0.2.0

package/dist/watch/proposals.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"proposals.d.ts","sourceRoot":"","sources":["../../src/watch/proposals.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,KAAK,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAEjE,MAAM,MAAM,cAAc,GACtB,WAAW,GACX,WAAW,GACX,UAAU,GACV,UAAU,GACV,UAAU,GACV,SAAS,CAAC;AAWd,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,cAAc,EAAE,EAAE,EAAE,cAAc,GAAG,IAAI,CAO/E;AAED,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,IAAI,EAAE,SAAS,GAAG,MAAM,CAAC;IAClC,QAAQ,CAAC,OAAO,EAAE,eAAe,CAAC;IAClC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IAClD,QAAQ,CAAC,MAAM,EAAE,cAAc,CAAC;IAChC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,6DAA6D;IAC7D,QAAQ,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC,iEAAiE;IACjE,QAAQ,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;CACnC;AAkCD,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,KAAK,CAAC;CACjC;AAED,MAAM,WAAW,eAAe;IAC9B;mEAC+D;IAC/D,YAAY,CAAC,MAAM,EAAE,SAAS,aAAa,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAChE;;;;;;;;;OASG;IACH,IAAI,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,EAAE,MAAM,CAAC,EAAE,cAAc,GAAG,OAAO,CAAC,cAAc,EAAE,CAAC,CAAC;IAC/E,GAAG,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,GAAG,IAAI,CAAC,CAAC;IAChD,mEAAmE;IACnE,cAAc,CAAC,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC7E;6EACyE;IACzE,SAAS,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,cAAc,EAAE,EAAE,EAAE,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC/E;;;;;;;6DAOyD;IACzD,uFAAuF;IACvF,KAAK,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IAC1C,MAAM,CACJ,EAAE,EAAE,MAAM,EACV,IAAI,EAAE,cAAc,EACpB,EAAE,EAAE,UAAU,GAAG,UAAU,EAC3B,SAAS,EAAE,MAAM,EACjB,eAAe,CAAC,EAAE,MAAM,GAAG,IAAI,EAC/B,KAAK,CAAC,EAAE,MAAM,GACb,OAAO,CAAC,OAAO,CAAC,CAAC;IACpB,wDAAwD;IACxD,aAAa,CAAC,GAAG,EAAE,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACzC;AAED,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,qBAAqB,GAAG,eAAe,CAsJpF"}
+{"version":3,"file":"proposals.d.ts","sourceRoot":"","sources":["../../src/watch/proposals.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,KAAK,EAAE,aAAa,EAAE,YAAY,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAE/E,MAAM,MAAM,cAAc,GACtB,WAAW,GACX,WAAW,GACX,UAAU,GACV,UAAU,GACV,UAAU,GACV,SAAS,CAAC;AAWd,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,cAAc,EAAE,EAAE,EAAE,cAAc,GAAG,IAAI,CAO/E;AAED,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAC;IAC5B,QAAQ,CAAC,OAAO,EAAE,eAAe,CAAC;IAClC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IAClD,QAAQ,CAAC,MAAM,EAAE,cAAc,CAAC;IAChC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,6DAA6D;IAC7D,QAAQ,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC,iEAAiE;IACjE,QAAQ,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;CACnC;AAkCD,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC;;;;;;;;;;OAUG;IACH,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,KAAK,CAAC;CACjC;AAED,MAAM,WAAW,eAAe;IAC9B;mEAC+D;IAC/D,YAAY,CAAC,MAAM,EAAE,SAAS,aAAa,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAChE;;;;;;;;;OASG;IACH,IAAI,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,EAAE,MAAM,CAAC,EAAE,cAAc,GAAG,OAAO,CAAC,cAAc,EAAE,CAAC,CAAC;IAC/E,GAAG,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,GAAG,IAAI,CAAC,CAAC;IAChD;;;;4DAIwD;IACxD,cAAc,CAAC,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAChF;6EACyE;IACzE,SAAS,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,cAAc,EAAE,EAAE,EAAE,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC/E;;;;;;;6DAOyD;IACzD,uFAAuF;IACvF,KAAK,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IAC1C,MAAM,CACJ,EAAE,EAAE,MAAM,EACV,IAAI,EAAE,cAAc,EACpB,EAAE,EAAE,UAAU,GAAG,UAAU,EAC3B,SAAS,EAAE,MAAM,EACjB,eAAe,CAAC,EAAE,MAAM,GAAG,IAAI,EAC/B,KAAK,CAAC,EAAE,MAAM,GACb,OAAO,CAAC,OAAO,CAAC,CAAC;IACpB,wDAAwD;IACxD,aAAa,CAAC,GAAG,EAAE,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACzC;AAED,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,qBAAqB,GAAG,eAAe,CAuLpF"}

package/dist/watch/proposals.js

@@ -67,16 +67,30 @@ function createProposalsClient(config) {
         async submitDrafts(drafts) {
             if (drafts.length === 0)
                 return 0;
-            const response = await request(`proposals?on_conflict=${encodeURIComponent("route,trigger_hash")}`, {
+            // Dedupe on the REAL unique index. 00013 made it tenant-first
+            // `(org_id, route, trigger_hash)` and DROPPED the old `(route, trigger_hash)`
+            // index — so the on_conflict target is ALWAYS the composite, in both lanes:
+            //  - hosted cron: org_id is stamped below;
+            //  - CLI/self-host: org_id is omitted and the row's house-org column DEFAULT
+            //    applies, and Postgres evaluates ON CONFLICT against the final row, so the
+            //    composite index still matches. Naming `(route, trigger_hash)` here — a
+            //    unique index that no longer exists — would 42P10 the CLI's own watch run.
+            const onConflict = "org_id,route,trigger_hash";
+            const response = await request(`proposals?on_conflict=${encodeURIComponent(onConflict)}`, {
                 method: "POST",
                 headers: { prefer: "resolution=ignore-duplicates,return=representation" },
                 body: JSON.stringify(drafts.map((d) => ({
+                    ...(config.orgId !== undefined ? { org_id: config.orgId } : {}),
                     route: d.route,
                     kind: d.kind,
                     trigger: d.trigger,
                     trigger_hash: d.triggerHash,
                     status: "suggested",
                     expires_at: d.expiresAt,
+                    // Analyst insights carry their summary as evidence at insert (E6
+                    // Chunk B). ignore-duplicates means a re-seen trigger_hash is a
+                    // no-op — an existing row's evidence is never clobbered.
+                    ...(d.evidence !== undefined ? { evidence: d.evidence } : {}),
                 }))),
             });
             const inserted = (await response.json().catch(() => []));
@@ -98,14 +112,24 @@ function createProposalsClient(config) {
             return rows.length > 0 ? toRecord(rows[0]) : null;
         },
         async attachEvidence(id, evidence) {
-            await request(`proposals?id=eq.${encodeURIComponent(id)}`, {
+            // Status-scoped, like setStatus/decide: a terminal proposal matches zero
+            // rows, so attaching evidence can never flip an executed/rejected proposal
+            // back to `evidenced` (which would make it re-executable — a double-swap /
+            // audit-corruption path an oracle-act caller could otherwise reach on their
+            // own org's rows). org_id predicate is defense-in-depth on the scoped path.
+            const orgPredicate = config.orgId !== undefined ? `&org_id=eq.${encodeURIComponent(config.orgId)}` : "";
+            const response = await request(`proposals?id=eq.${encodeURIComponent(id)}` +
+                `&status=in.${encodeURIComponent("(suggested,evidenced)")}${orgPredicate}`, {
                 method: "PATCH",
+                headers: { prefer: "return=representation" },
                 body: JSON.stringify({
                     status: "evidenced",
                     evidence,
                     updated_at: new Date().toISOString(),
                 }),
             });
+            const rows = (await response.json().catch(() => []));
+            return Array.isArray(rows) && rows.length > 0;
         },
         async setStatus(id, from, to) {
             assertTransition(from, to);
@@ -159,8 +183,12 @@ function createProposalsClient(config) {
         },
         async expireOverdue(now) {
             const cutoff = now.toISOString();
+            // Org-scoped when this client carries a tenant — one org's cron never
+            // sweeps another's rows (the sweep is idempotent, but touching a foreign
+            // tenant's proposals is the confused-deputy shape we refuse on principle).
+            const orgPredicate = config.orgId !== undefined ? `&org_id=eq.${encodeURIComponent(config.orgId)}` : "";
             await request(`proposals?status=in.${encodeURIComponent("(suggested,evidenced)")}` +
-                `&expires_at=lt.${encodeURIComponent(cutoff)}`, {
+                `&expires_at=lt.${encodeURIComponent(cutoff)}${orgPredicate}`, {
                 method: "PATCH",
                 body: JSON.stringify({ status: "expired", updated_at: cutoff }),
             });

package/dist/watch/run.d.ts

@@ -13,6 +13,9 @@ import type { RouteEconomics, WatchEvent } from "./evaluate";
 import type { ProposalsClient } from "./proposals";
 import type { PriceUniverse } from "./state";
 import type { WatchStateStore } from "./state-store";
+import type { CacheStatsRollup } from "../savings/cache-stats";
+import type { CachePredictionDrift, ReconcileOptions } from "../savings/cache-reconcile";
+import type { TelemetryRow } from "../types/telemetry";
 export interface WatchCycleOptions {
     readonly routes: readonly RouteEconomics[];
     /** Local-file state path — the self-host fallback. Ignored when `store`
@@ -37,4 +40,34 @@ export interface WatchCycleResult {
     readonly inserted: number;
 }
 export declare function runWatchCycle(opts: WatchCycleOptions): Promise<WatchCycleResult>;
+/**
+ * Predicted cache-read tokens for one (route, candidate) — the ledger/simulator
+ * estimate that a reconciliation cycle checks against observed ground truth.
+ * Keyed by (route, provider, model) to join to a rollup.
+ */
+export interface CacheReadPrediction {
+    readonly route: string;
+    readonly provider: string;
+    readonly model: string;
+    readonly predictedReadTokens: number;
+}
+export interface CacheReconciliationResult {
+    readonly rollups: readonly CacheStatsRollup[];
+    readonly drift: readonly CachePredictionDrift[];
+}
+/**
+ * The cache half of a watch cycle (cache-aware-routing spec §5.2, step 6):
+ * ROLL UP production cache stats from telemetry rows ONCE, then RECONCILE the
+ * ledger/simulator predictions against the observed reads, emitting
+ * `cache_prediction_drift` events (G-4 pattern). Pure over its inputs — the
+ * caller (a cron/CLI) supplies the window's rows and the predictions from the
+ * derived ledger/simulator. Deliberately SEPARATE from `runWatchCycle`: the
+ * price-move loop is untouched and byte-identical; this is an additive,
+ * independently-testable cache concern that a cron runs alongside it.
+ */
+export declare function runCacheReconciliation(rows: readonly TelemetryRow[], predictions: readonly CacheReadPrediction[], opts: {
+    now: number;
+    windowDays?: number;
+    reconcile?: ReconcileOptions;
+}): CacheReconciliationResult;
 //# sourceMappingURL=run.d.ts.map

package/dist/watch/run.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"run.d.ts","sourceRoot":"","sources":["../../src/watch/run.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAGH,OAAO,KAAK,EAAE,cAAc,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAC7D,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAEnD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAE7C,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAErD,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,MAAM,EAAE,SAAS,cAAc,EAAE,CAAC;IAC3C;iEAC6D;IAC7D,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B;;kDAE8C;IAC9C,QAAQ,CAAC,KAAK,CAAC,EAAE,eAAe,CAAC;IACjC,QAAQ,CAAC,QAAQ,EAAE,aAAa,CAAC;IACjC,QAAQ,CAAC,MAAM,EAAE,eAAe,CAAC;IACjC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B;8DAC0D;IAC1D,QAAQ,CAAC,cAAc,CAAC,EAAE,SAAS,UAAU,EAAE,CAAC;IAChD,QAAQ,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC;CACrB;AAED,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;IACzB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;CAC3B;AAED,wBAAsB,aAAa,CAAC,IAAI,EAAE,iBAAiB,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAiCtF"}
+{"version":3,"file":"run.d.ts","sourceRoot":"","sources":["../../src/watch/run.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAGH,OAAO,KAAK,EAAE,cAAc,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAC7D,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAEnD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAE7C,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAErD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAE/D,OAAO,KAAK,EACV,oBAAoB,EAEpB,gBAAgB,EACjB,MAAM,4BAA4B,CAAC;AACpC,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAEvD,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,MAAM,EAAE,SAAS,cAAc,EAAE,CAAC;IAC3C;iEAC6D;IAC7D,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B;;kDAE8C;IAC9C,QAAQ,CAAC,KAAK,CAAC,EAAE,eAAe,CAAC;IACjC,QAAQ,CAAC,QAAQ,EAAE,aAAa,CAAC;IACjC,QAAQ,CAAC,MAAM,EAAE,eAAe,CAAC;IACjC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B;8DAC0D;IAC1D,QAAQ,CAAC,cAAc,CAAC,EAAE,SAAS,UAAU,EAAE,CAAC;IAChD,QAAQ,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC;CACrB;AAED,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;IACzB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;CAC3B;AAED,wBAAsB,aAAa,CAAC,IAAI,EAAE,iBAAiB,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAiCtF;AAED;;;;GAIG;AACH,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,mBAAmB,EAAE,MAAM,CAAC;CACtC;AAED,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,OAAO,EAAE,SAAS,gBAAgB,EAAE,CAAC;IAC9C,QAAQ,CAAC,KAAK,EAAE,SAAS,oBAAoB,EAAE,CAAC;CACjD;AAED;;;;;;;;;GASG;AACH,wBAAgB,sBAAsB,CACpC,IAAI,EAAE,SAAS,YAAY,EAAE,EAC7B,WAAW,EAAE,SAAS,mBAAmB,EAAE,EAC3C,IAAI,EAAE;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAAC,SAAS,CAAC,EAAE,gBAAgB,CAAA;CAAE,GACvE,yBAAyB,CAyB3B"}

package/dist/watch/run.js

@@ -12,9 +12,12 @@
  */
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.runWatchCycle = runWatchCycle;
+exports.runCacheReconciliation = runCacheReconciliation;
 const evaluate_1 = require("./evaluate");
 const state_1 = require("./state");
 const state_store_1 = require("./state-store");
+const cache_stats_1 = require("../savings/cache-stats");
+const cache_reconcile_1 = require("../savings/cache-reconcile");
 async function runWatchCycle(opts) {
     const now = opts.now ?? new Date();
     const store = opts.store ??
@@ -42,3 +45,39 @@ async function runWatchCycle(opts) {
     }
     return { seeded, events: events.length, drafts: drafts.length, inserted };
 }
+/**
+ * The cache half of a watch cycle (cache-aware-routing spec §5.2, step 6):
+ * ROLL UP production cache stats from telemetry rows ONCE, then RECONCILE the
+ * ledger/simulator predictions against the observed reads, emitting
+ * `cache_prediction_drift` events (G-4 pattern). Pure over its inputs — the
+ * caller (a cron/CLI) supplies the window's rows and the predictions from the
+ * derived ledger/simulator. Deliberately SEPARATE from `runWatchCycle`: the
+ * price-move loop is untouched and byte-identical; this is an additive,
+ * independently-testable cache concern that a cron runs alongside it.
+ */
+function runCacheReconciliation(rows, predictions, opts) {
+    const rollups = (0, cache_stats_1.rollupCacheStats)(rows, {
+        now: opts.now,
+        ...(opts.windowDays !== undefined ? { windowDays: opts.windowDays } : {}),
+    });
+    // Join predictions to their rollup (observed ground truth) by candidate key.
+    const byKey = new Map();
+    for (const r of rollups)
+        byKey.set(`${r.route}\n${r.provider}\n${r.model}`, r);
+    const samples = [];
+    for (const p of predictions) {
+        const rollup = byKey.get(`${p.route}\n${p.provider}\n${p.model}`);
+        if (rollup === undefined)
+            continue; // no observed traffic → nothing to reconcile
+        samples.push({
+            route: p.route,
+            provider: p.provider,
+            model: p.model,
+            predictedReadTokens: p.predictedReadTokens,
+            observedReadTokens: rollup.tokensCached,
+            windowInputTokens: rollup.tokensIn,
+            sampleN: rollup.sampleN,
+        });
+    }
+    return { rollups, drift: (0, cache_reconcile_1.reconcileCacheDrift)(samples, opts.reconcile) };
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "modelrig",
-  "version": "0.1.0",
+  "version": "0.2.0",
   "private": false,
   "description": "ModelRig — capability-aware AI gateway: routes-as-code, provider adapters, typed failures, budget envelopes, and local-first telemetry.",
   "license": "Apache-2.0",
@@ -25,9 +25,15 @@
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
   "//files": "ALLOWLIST, not a denylist, and the difference is not academic. Without this field npm falls back to .npmignore, then to THIS DIRECTORY's .gitignore — never the repo root's. The root ignores `.env.*`, which is why git has never committed .env.local; the package-level .gitignore says nothing about it, so `npm pack` happily included it. A publish would have shipped 13 live secrets, the Supabase service-role key among them, into an immutable public tarball. Anything added here must be something we would hand a stranger. See __tests__/publish-safety.test.ts.",
+  "//files-registry": "registry/{registry,leaderboard}.json are fail-open runtime reads (facts.ts/rows.ts degrade to the static baseline when absent) — shipped by R-1 F2 RULING so a clean install routes on the PROBED capability profile the docs and the DVP report describe, not the static fallback. Enumerated file entries, NOT the registry/ dir (it also holds build scripts + tests). Public CC BY 4.0.",
+  "//files-data": "`data/` is a RUNTIME dependency, not a build input (R-1 clean-room audit, A1): getPricing() reads data/pricing-map.json from the package root at first cost lookup, with NO existsSync guard — so an absent data/ throws, not degrades. 0.1.0 shipped dist-only and broke the flagship 'effective cost' story on a clean `npm i`. It is public CC BY 4.0 pricing data (data/PROVENANCE.md) — safe to hand a stranger. The tarball clean-room test (__tests__/tarball-cleanroom.test.ts) installs the packed artifact and asserts getPricing() returns a real rate, so this can never silently regress again.",
   "files": [
     "dist",
+    "data",
+    "registry/registry.json",
+    "registry/leaderboard.json",
     "README.md",
+    "CHANGELOG.md",
     "LICENSE"
   ],
   "scripts": {

package/registry/LICENSE

@@ -0,0 +1,20 @@
+The ModelRig registry data (registry.json, layers/, leaderboard.json, and all
+probe-derived data files in this directory) is licensed under the Creative
+Commons Attribution 4.0 International License (CC BY 4.0).
+
+You are free to share and adapt this data for any purpose, including
+commercially, provided you give appropriate credit to ModelRig
+(https://modelrig.dev), link to the license, and indicate if changes were made.
+
+Full license text: https://creativecommons.org/licenses/by/4.0/legalcode
+
+Attribution example:
+  "Model capability data from the ModelRig registry (https://modelrig.dev),
+   CC BY 4.0."
+
+The build scripts in this directory (build-*.ts) are code, licensed under the
+repository's Apache-2.0 LICENSE.
+
+The pricing snapshot under data/ is derived from BerriAI/litellm's
+model_prices_and_context_window.json (MIT License, Copyright (c) 2023 Berri AI)
+at the pinned SHA recorded in data/PROVENANCE.md.