modelrig 0.1.0 → 0.3.0

package/dist/telemetry/health.d.ts

@@ -0,0 +1,76 @@
+/**
+ * Observed-health aggregation — G-4 (observed-health/spec.md §3.1, §4.1).
+ *
+ * One home for the per-endpoint latency/TTFB percentile + error-rate + min-n
+ * math, shared by the live store reader (store.ts `readEndpointHealth`) and the
+ * observed-layer rollup (registry/build-observed.ts). Keeping the math here —
+ * not in run.ts (at the 700-LOC cap) — is deliberate.
+ *
+ * THE RIGINDEX WALL (spec §4.4, load-bearing): this module feeds routing +
+ * console surfaces ONLY. It must NEVER be imported by registry/build-leaderboard.ts
+ * or the matrix/Bradley-Terry path — production telemetry never produces rank
+ * (eval-methodology-and-rigindex.md:19). The import-guard test
+ * (health-rigindex-wall.test.ts) is the tripwire; do not weaken it.
+ */
+import type { ProviderId } from "../types/provider";
+/** Spec §4.1 example: below 20 samples, percentiles/error-rate surface as null. */
+export declare const DEFAULT_HEALTH_MIN_N = 20;
+export interface HealthPercentiles {
+    readonly p50: number;
+    readonly p90: number;
+    readonly p99: number;
+}
+/**
+ * Per-endpoint observed health over a rolling window. Percentiles + errorRate
+ * are `null` under the min-n gate (thin data must not read as a confident zero);
+ * `sampleN` is always reported so the surface can say "n too low", not "healthy".
+ */
+export interface EndpointHealth {
+    readonly provider: ProviderId;
+    readonly model: string;
+    readonly windowStart: string;
+    readonly sampleN: number;
+    readonly latencyMs: HealthPercentiles | null;
+    readonly ttfbMs: HealthPercentiles | null;
+    readonly errorRate: number | null;
+}
+/**
+ * The minimal row shape the aggregation needs. Both the local SQLite store and
+ * the hosted rollup can project their rows onto this, so the math is identical
+ * on both lanes (spec §3.1).
+ */
+export interface HealthInputRow {
+    readonly provider: string;
+    readonly model: string;
+    readonly ts: string;
+    readonly latency_ms: number;
+    readonly ttfb_ms: number | null;
+    readonly failure_class: string | null;
+}
+/**
+ * Nearest-rank percentile over a pre-sorted ascending array. Matches the
+ * convention already used by build-observed.ts so the two lanes agree.
+ */
+export declare function percentile(sorted: readonly number[], p: number): number | null;
+/**
+ * p50/p90/p99 over a set of values, dropping non-positive samples (a zero or
+ * negative latency/TTFB is a non-measurement, not a fast call). `null` when no
+ * positive sample remains.
+ */
+export declare function computePercentiles(values: readonly number[]): HealthPercentiles | null;
+export interface HealthWindowOptions {
+    readonly windowMinutes: number;
+    readonly minN: number;
+    /** Reference "now" in epoch ms — injected for deterministic windowing/tests. */
+    readonly now: number;
+}
+/**
+ * Aggregate windowed telemetry rows into per-(provider, model) health.
+ *
+ * Window: rows whose ts is within [now - windowMinutes, now]. Rows with an
+ * unparseable ts are dropped, never thrown on. Output is sorted by provider then
+ * model for deterministic rollups. Below `minN`, percentiles + errorRate are
+ * `null` (min-n gate) while `sampleN` is still reported.
+ */
+export declare function aggregateEndpointHealth(rows: readonly HealthInputRow[], opts: HealthWindowOptions): EndpointHealth[];
+//# sourceMappingURL=health.d.ts.map

package/dist/telemetry/health.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"health.d.ts","sourceRoot":"","sources":["../../src/telemetry/health.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAEpD,mFAAmF;AACnF,eAAO,MAAM,oBAAoB,KAAK,CAAC;AAEvC,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;CACtB;AAED;;;;GAIG;AACH,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,QAAQ,EAAE,UAAU,CAAC;IAC9B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,SAAS,EAAE,iBAAiB,GAAG,IAAI,CAAC;IAC7C,QAAQ,CAAC,MAAM,EAAE,iBAAiB,GAAG,IAAI,CAAC;IAC1C,QAAQ,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;CACnC;AAED;;;;GAIG;AACH,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,QAAQ,CAAC,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;CACvC;AAED;;;GAGG;AACH,wBAAgB,UAAU,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,EAAE,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAI9E;AAED;;;;GAIG;AACH,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,GAAG,iBAAiB,GAAG,IAAI,CAStF;AAED,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,gFAAgF;IAChF,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;CACtB;AAMD;;;;;;;GAOG;AACH,wBAAgB,uBAAuB,CACrC,IAAI,EAAE,SAAS,cAAc,EAAE,EAC/B,IAAI,EAAE,mBAAmB,GACxB,cAAc,EAAE,CAoClB"}

package/dist/telemetry/health.js

@@ -0,0 +1,92 @@
+"use strict";
+/**
+ * Observed-health aggregation — G-4 (observed-health/spec.md §3.1, §4.1).
+ *
+ * One home for the per-endpoint latency/TTFB percentile + error-rate + min-n
+ * math, shared by the live store reader (store.ts `readEndpointHealth`) and the
+ * observed-layer rollup (registry/build-observed.ts). Keeping the math here —
+ * not in run.ts (at the 700-LOC cap) — is deliberate.
+ *
+ * THE RIGINDEX WALL (spec §4.4, load-bearing): this module feeds routing +
+ * console surfaces ONLY. It must NEVER be imported by registry/build-leaderboard.ts
+ * or the matrix/Bradley-Terry path — production telemetry never produces rank
+ * (eval-methodology-and-rigindex.md:19). The import-guard test
+ * (health-rigindex-wall.test.ts) is the tripwire; do not weaken it.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DEFAULT_HEALTH_MIN_N = void 0;
+exports.percentile = percentile;
+exports.computePercentiles = computePercentiles;
+exports.aggregateEndpointHealth = aggregateEndpointHealth;
+/** Spec §4.1 example: below 20 samples, percentiles/error-rate surface as null. */
+exports.DEFAULT_HEALTH_MIN_N = 20;
+/**
+ * Nearest-rank percentile over a pre-sorted ascending array. Matches the
+ * convention already used by build-observed.ts so the two lanes agree.
+ */
+function percentile(sorted, p) {
+    if (sorted.length === 0)
+        return null;
+    const index = Math.min(sorted.length - 1, Math.floor((p / 100) * sorted.length));
+    return sorted[index];
+}
+/**
+ * p50/p90/p99 over a set of values, dropping non-positive samples (a zero or
+ * negative latency/TTFB is a non-measurement, not a fast call). `null` when no
+ * positive sample remains.
+ */
+function computePercentiles(values) {
+    const sorted = values.filter((v) => v > 0).sort((a, b) => a - b);
+    if (sorted.length === 0)
+        return null;
+    return {
+        // percentile() only returns null for an empty array, ruled out above.
+        p50: percentile(sorted, 50),
+        p90: percentile(sorted, 90),
+        p99: percentile(sorted, 99),
+    };
+}
+// Grouping-key separator: neither a ProviderId nor a model id contains a pipe,
+// so the split back into (provider, model) is unambiguous.
+const KEY_SEP = "|";
+/**
+ * Aggregate windowed telemetry rows into per-(provider, model) health.
+ *
+ * Window: rows whose ts is within [now - windowMinutes, now]. Rows with an
+ * unparseable ts are dropped, never thrown on. Output is sorted by provider then
+ * model for deterministic rollups. Below `minN`, percentiles + errorRate are
+ * `null` (min-n gate) while `sampleN` is still reported.
+ */
+function aggregateEndpointHealth(rows, opts) {
+    const windowStartMs = opts.now - opts.windowMinutes * 60000;
+    const windowStart = new Date(windowStartMs).toISOString();
+    const byEndpoint = new Map();
+    for (const row of rows) {
+        const t = Date.parse(row.ts);
+        if (Number.isNaN(t) || t < windowStartMs || t > opts.now)
+            continue;
+        const key = `${row.provider}${KEY_SEP}${row.model}`;
+        const list = byEndpoint.get(key) ?? [];
+        list.push(row);
+        byEndpoint.set(key, list);
+    }
+    const out = [];
+    for (const [key, group] of byEndpoint) {
+        const [provider, model] = key.split(KEY_SEP);
+        const sampleN = group.length;
+        const gated = sampleN < opts.minN;
+        const errorCount = group.filter((r) => r.failure_class !== null).length;
+        out.push({
+            provider: provider,
+            model,
+            windowStart,
+            sampleN,
+            latencyMs: gated ? null : computePercentiles(group.map((r) => r.latency_ms)),
+            ttfbMs: gated
+                ? null
+                : computePercentiles(group.map((r) => r.ttfb_ms).filter((t) => t !== null)),
+            errorRate: gated ? null : errorCount / sampleN,
+        });
+    }
+    return out.sort((a, b) => a.provider === b.provider ? a.model.localeCompare(b.model) : a.provider.localeCompare(b.provider));
+}

package/dist/telemetry/ingest-protocol.d.ts

@@ -31,11 +31,19 @@
  * already holds a credential that can write any row in the database.
  */
 import type { FailureClass } from "../types/failures";
+import type { ResolvedRouteBundle } from "../routes/resolved-bundle";
 /** The path the api sink posts to. Spelled once. */
 export declare const INGEST_PATH = "/v1/ingest";
-/** Bumped only for a breaking change to the shapes below. A server that does
- * not recognise the version refuses the batch rather than guessing. */
-export declare const INGEST_PROTOCOL_VERSION = 1;
+/** The CURRENT protocol version — the maximum the SDK can speak (ruling d).
+ * v2 = v1 + the optional runs/steps/artifacts sections. A server that does not
+ * recognise the version refuses the batch rather than guessing; the SDK sends
+ * v2 ONLY when the artifact namespace is active (spec §1.3), otherwise it keeps
+ * sending v1 batches byte-identical to before v2 existed. */
+export declare const INGEST_PROTOCOL_VERSION = 2;
+/** The v1 baseline — batches carrying only the pre-artifact sections announce
+ * this and remain valid forever. The exporter uses it when artifacts are
+ * disabled (byte-identical to today) and for the pre-loop load-error batch. */
+export declare const INGEST_PROTOCOL_VERSION_V1 = 1;
 /** Default ingest host — telemetry-ingestion-boundary.md §2.1. */
 export declare const DEFAULT_INGEST_URL = "https://api.modelrig.ai";
 /** The tenant stamped onto every row. Resolved from the principal, never from
@@ -67,6 +75,14 @@ export interface WireInference {
     readonly served_variant: string | null;
     readonly repaired_by: string | null;
     readonly pricing_missing: boolean;
+    /** Cache accounting (WS-A). OPTIONAL on the wire: an older SDK never sends
+     * them, and the server defaults writes to 0 and key/fingerprint to null on
+     * absence (ingest.validInference). A current SDK always sends them; they map
+     * straight into `inferences.tokens_cache_write` etc. (migration 00049). */
+    readonly tokens_cache_write?: number;
+    readonly tokens_cache_write_1h?: number;
+    readonly cache_key?: string | null;
+    readonly prefix_fingerprint?: string | null;
 }
 export interface WireFeedback {
     readonly id: string;
@@ -98,12 +114,135 @@ export interface WireRoute {
         readonly model: string;
     }>;
     readonly capture: boolean;
+    /** Phase D (spec §13.1 rule 3): the RESOLVED bundle, file references followed
+     * and inlined at sync time, mirrored so the hosted gateway can serve the
+     * route without the customer's filesystem. Optional so a pre-Phase-D SDK
+     * still validates; a batch WITHOUT it leaves any existing mirrored bundle
+     * untouched (the routes upsert only writes the columns it carries). */
+    readonly bundle?: ResolvedRouteBundle;
+    /** Content hash of the canonical bundle (`sha256:<hex>`). Present iff
+     * `bundle` is. */
+    readonly bundle_sha?: string;
+}
+/** A run — one execution of a customer pipeline (protocol v2, spec §1.1).
+ * A mutable projection (start → end); `source_id` and `org_id` are stamped from
+ * the principal, never carried on the wire (T3). */
+export interface WireRun {
+    readonly id: string;
+    readonly pipeline: string;
+    readonly pipeline_version: string | null;
+    readonly environment: string | null;
+    readonly episode_key: string | null;
+    readonly started_at: string;
+    readonly ended_at: string | null;
+    readonly status: "running" | "succeeded" | "failed" | "abandoned";
+}
+/** A step — one ATTEMPT of one operation within a run (protocol v2, spec §1.1).
+ * A fact (merge=false). Provenance is ground-truth (an `inferences` reference)
+ * XOR attested (a foreign OTLP span); the server drops a reference shape that
+ * violates the exactly-one CHECK (`bad_step_reference`) rather than guessing.
+ * `org_id` is stamped from the principal; for a ground-truth step
+ * `inference_source_id` is stamped to the principal's source_id. */
+export interface WireStep {
+    readonly run_id: string;
+    readonly step_key: string;
+    readonly attempt_no: number;
+    readonly task: string | null;
+    readonly provenance: "ground-truth" | "attested";
+    readonly inference_id: string | null;
+    readonly span_trace_id: string | null;
+    readonly span_id: string | null;
+    readonly started_at: string;
+    readonly ended_at: string | null;
+    readonly failure_class: string | null;
+    /**
+     * The normalized OTLP envelope for an ATTESTED step (Expansion E3-Harvest,
+     * migration 00038: `steps.attested jsonb`). Carries `{model, provider,
+     * operation, usage{…}, scope}` for foreign-span-ingested steps; steps
+     * deliberately have no usage COLUMNS because ground-truth usage lives on
+     * `inferences`, and attested usage has nowhere else honest to live. Absent on
+     * every SDK-emitted (ground-truth) step, so v1/v2 SDK batches are unchanged
+     * and the `steps.attested` CHECK (`provenance='attested' or attested is null`)
+     * holds. Opaque `unknown` at the wire boundary (T7 — jsonb is not proof of
+     * shape); the strongly-typed producer is `otel-normalize.ts`.
+     */
+    readonly attested?: unknown;
+}
+/** An artifact — durable work product METADATA (protocol v2, spec §2). Content
+ * is NEVER carried: `content_ref` is the customer's opaque URI, `content_hash`
+ * a sha256 of bytes hashed-then-discarded. A fact (merge=false). */
+export interface WireArtifact {
+    readonly id: string;
+    readonly run_id: string | null;
+    readonly step_key: string | null;
+    readonly attempt_no: number | null;
+    readonly task: string | null;
+    readonly name: string;
+    readonly type: string;
+    readonly version: number;
+    readonly supersedes_artifact_id: string | null;
+    readonly declared_schema: unknown;
+    readonly fingerprint_cell: string | null;
+    readonly content_ref: string | null;
+    readonly content_hash: string | null;
+    readonly content_bytes: number | null;
+    readonly data_classification: string | null;
+    readonly expires_at: string | null;
+    /** Per-row scrub findings (E4 chunk 0, migration 00039) — counts-by-type +
+     * mode, NEVER matched values. Optional: absent ⇒ scrub did not run (older SDK,
+     * custody off), and the column stays null via spread-iff-present in stampBatch
+     * so v1/older artifact rows are byte-identical. Opaque here (T7). */
+    readonly scrub?: unknown;
+}
+/** A lineage edge between two artifacts (spec §2). A fact. */
+export interface WireArtifactEdge {
+    readonly from_artifact_id: string;
+    readonly to_artifact_id: string;
+    readonly kind: "consumed" | "derived_from";
+}
+/** A promoted eval case (E4 chunk A). `corrected_artifact_id` null ⇒ a
+ * failure-case; set ⇒ a golden-corrected pair. A fact on ingest (create via
+ * promote); edits/deletes are server-side, never on this stream. `org_id` is
+ * stamped from the principal (T3), `created_by` when an authenticated user
+ * promoted it. */
+export interface WireEvalCase {
+    readonly id: string;
+    readonly task: string;
+    readonly source_artifact_id: string;
+    readonly corrected_artifact_id: string | null;
+    readonly origin: "promoted-failure" | "human-corrected" | "manual";
+    readonly note: string | null;
+    readonly created_by: string | null;
+}
+/** An evaluation recorded against a SUBJECT — one of an artifact or a whole run
+ * (E5 chunk V, subject-one-of per trajectory F3). Exactly one of artifact_id /
+ * run_id is non-null; the server's validEvaluation enforces the XOR and the
+ * 00051 CHECK is the backstop. A fact. */
+export interface WireArtifactEvaluation {
+    readonly id: string;
+    /** The artifact subject — null when this evaluates a whole run instead. */
+    readonly artifact_id: string | null;
+    /** The run subject (E5 V) — null when this evaluates an artifact. */
+    readonly run_id?: string | null;
+    readonly evaluator: string;
+    readonly evaluator_kind: "deterministic" | "model-judge" | "human";
+    readonly score: number | null;
+    readonly passed: boolean | null;
+    readonly label: string | null;
+    readonly explanation: string | null;
+    readonly created_by: string | null;
 }
 export interface WireManifest {
     readonly name: string;
     readonly dimensions: unknown;
     readonly contribution: boolean;
     readonly serveability: readonly unknown[];
+    /** Load-time RouteConfigError diagnostics for THIS deployment (follow-up #2)
+     * — the describeConfigFailure shape, names/diagnostics only. Optional so a
+     * pre-load_errors SDK still validates; absent is treated as `[]` (clean). A
+     * successful load sends `[]`, which clears a stale failure from a prior
+     * broken deploy. */
+    readonly load_errors?: readonly unknown[];
 }
 /** One flush's worth of telemetry. Every collection is optional — a flush that
  * has only inferences sends only inferences. */
@@ -117,6 +256,16 @@ export interface IngestBatch {
     readonly feedback?: readonly WireFeedback[];
     readonly envelopes?: readonly WireEnvelope[];
     readonly routes?: readonly WireRoute[];
+    /** Protocol v2 (spec §1). Present only when the SDK's artifact namespace is
+     * active; a v1 batch never carries them and is byte-identical to before. */
+    readonly runs?: readonly WireRun[];
+    readonly steps?: readonly WireStep[];
+    readonly artifacts?: readonly WireArtifact[];
+    readonly artifact_edges?: readonly WireArtifactEdge[];
+    readonly artifact_evaluations?: readonly WireArtifactEvaluation[];
+    /** Promoted eval cases (E4 chunk A). Present only when the SDK's artifact
+     * namespace is active and a promote happened; a v1 batch never carries them. */
+    readonly eval_cases?: readonly WireEvalCase[];
     readonly manifest?: WireManifest;
     /** Present when this batch advanced the exporter's inference watermark. */
     readonly watermarkAt?: string;

package/dist/telemetry/ingest-protocol.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ingest-protocol.d.ts","sourceRoot":"","sources":["../../src/telemetry/ingest-protocol.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAEtD,oDAAoD;AACpD,eAAO,MAAM,WAAW,eAAe,CAAC;AAExC;uEACuE;AACvE,eAAO,MAAM,uBAAuB,IAAI,CAAC;AAEzC,kEAAkE;AAClE,eAAO,MAAM,kBAAkB,4BAA4B,CAAC;AAE5D;kBACkB;AAClB,MAAM,WAAW,OAAO;IACtB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;IACnC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,QAAQ,CAAC,aAAa,EAAE,YAAY,GAAG,IAAI,CAAC;IAC5C,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;IAC3B,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IACvB,QAAQ,CAAC,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;IACzC,QAAQ,CAAC,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IACvC,QAAQ,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IACpC,QAAQ,CAAC,eAAe,EAAE,OAAO,CAAC;CACnC;AAED,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IACrC,QAAQ,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IACpC,QAAQ,CAAC,OAAO,EAAE,IAAI,GAAG,MAAM,CAAC;IAChC,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,wEAAwE;IACxE,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,2DAA2D;IAC3D,QAAQ,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC;gFAC4E;IAC5E,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,WAAW,CAAC;CACvC;AAED,MAAM,WAAW,SAAS;IACxB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,UAAU,EAAE,aAAa,CAAC;QAAE,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC1F,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;CAC3B;AAED,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAC;IAC7B,QAAQ,CAAC,YAAY,EAAE,OAAO,CAAC;IAC/B,QAAQ,CAAC,YAAY,EAAE,SAAS,OAAO,EAAE,CAAC;CAC3C;AAED;gDACgD;AAChD,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,CAAC,EAAE,MAAM,CAAC;IACnB;;8CAE0C;IAC1C,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,UAAU,CAAC,EAAE,SAAS,aAAa,EAAE,CAAC;IAC/C,QAAQ,CAAC,QAAQ,CAAC,EAAE,SAAS,YAAY,EAAE,CAAC;IAC5C,QAAQ,CAAC,SAAS,CAAC,EAAE,SAAS,YAAY,EAAE,CAAC;IAC7C,QAAQ,CAAC,MAAM,CAAC,EAAE,SAAS,SAAS,EAAE,CAAC;IACvC,QAAQ,CAAC,QAAQ,CAAC,EAAE,YAAY,CAAC;IACjC,2EAA2E;IAC3E,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;CAC/B;AAED;mEACmE;AACnE,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,IAAI,EAAE,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,CAAC;IAClD,0DAA0D;IAC1D,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B;2EACuE;IACvE,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC;CACzB;AAED;;;;;;GAMG;AACH,wBAAgB,UAAU,CAAC,KAAK,EAAE,WAAW,EAAE,OAAO,EAAE,OAAO,GAAG,UAAU,EAAE,CA0G7E;AAED;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CAChC,IAAI,EAAE,SAAS,YAAY,EAAE,EAC7B,QAAQ,EAAE,MAAM,GACf,SAAS,MAAM,EAAE,CAInB;AAED;;oBAEoB;AACpB,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IACpD,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IACnD;qCACiC;IACjC,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;CACpD"}
+{"version":3,"file":"ingest-protocol.d.ts","sourceRoot":"","sources":["../../src/telemetry/ingest-protocol.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AACtD,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,2BAA2B,CAAC;AAGrE,oDAAoD;AACpD,eAAO,MAAM,WAAW,eAAe,CAAC;AAExC;;;;6DAI6D;AAC7D,eAAO,MAAM,uBAAuB,IAAI,CAAC;AAEzC;;+EAE+E;AAC/E,eAAO,MAAM,0BAA0B,IAAI,CAAC;AAE5C,kEAAkE;AAClE,eAAO,MAAM,kBAAkB,4BAA4B,CAAC;AAE5D;kBACkB;AAClB,MAAM,WAAW,OAAO;IACtB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;IACnC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,QAAQ,CAAC,aAAa,EAAE,YAAY,GAAG,IAAI,CAAC;IAC5C,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;IAC3B,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IACvB,QAAQ,CAAC,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;IACzC,QAAQ,CAAC,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IACvC,QAAQ,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IACpC,QAAQ,CAAC,eAAe,EAAE,OAAO,CAAC;IAClC;;;+EAG2E;IAC3E,QAAQ,CAAC,kBAAkB,CAAC,EAAE,MAAM,CAAC;IACrC,QAAQ,CAAC,qBAAqB,CAAC,EAAE,MAAM,CAAC;IACxC,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC,QAAQ,CAAC,kBAAkB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC7C;AAED,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IACrC,QAAQ,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IACpC,QAAQ,CAAC,OAAO,EAAE,IAAI,GAAG,MAAM,CAAC;IAChC,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,wEAAwE;IACxE,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,2DAA2D;IAC3D,QAAQ,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC;gFAC4E;IAC5E,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,WAAW,CAAC;CACvC;AAED,MAAM,WAAW,SAAS;IACxB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,UAAU,EAAE,aAAa,CAAC;QAAE,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC1F,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B;;;;2EAIuE;IACvE,QAAQ,CAAC,MAAM,CAAC,EAAE,mBAAmB,CAAC;IACtC;sBACkB;IAClB,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;CAC9B;AAED;;oDAEoD;AACpD,MAAM,WAAW,OAAO;IACtB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;IACzC,QAAQ,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IACpC,QAAQ,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IACpC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,QAAQ,CAAC,MAAM,EAAE,SAAS,GAAG,WAAW,GAAG,QAAQ,GAAG,WAAW,CAAC;CACnE;AAED;;;;;oEAKoE;AACpE,MAAM,WAAW,QAAQ;IACvB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,QAAQ,CAAC,UAAU,EAAE,cAAc,GAAG,UAAU,CAAC;IACjD,QAAQ,CAAC,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IACrC,QAAQ,CAAC,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IACtC,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,QAAQ,CAAC,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IACtC;;;;;;;;;;OAUG;IACH,QAAQ,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAC;CAC7B;AAED;;oEAEoE;AACpE,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,QAAQ,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,sBAAsB,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/C,QAAQ,CAAC,eAAe,EAAE,OAAO,CAAC;IAClC,QAAQ,CAAC,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;IACzC,QAAQ,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IACpC,QAAQ,CAAC,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IACrC,QAAQ,CAAC,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IACtC,QAAQ,CAAC,mBAAmB,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5C,QAAQ,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC;;;yEAGqE;IACrE,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC;CAC1B;AAED,8DAA8D;AAC9D,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,IAAI,EAAE,UAAU,GAAG,cAAc,CAAC;CAC5C;AAED;;;;kBAIkB;AAClB,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,kBAAkB,EAAE,MAAM,CAAC;IACpC,QAAQ,CAAC,qBAAqB,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9C,QAAQ,CAAC,MAAM,EAAE,kBAAkB,GAAG,iBAAiB,GAAG,QAAQ,CAAC;IACnE,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,QAAQ,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;CACpC;AAED;;;0CAG0C;AAC1C,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,2EAA2E;IAC3E,QAAQ,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IACpC,qEAAqE;IACrE,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,cAAc,EAAE,eAAe,GAAG,aAAa,GAAG,OAAO,CAAC;IACnE,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,QAAQ,CAAC,MAAM,EAAE,OAAO,GAAG,IAAI,CAAC;IAChC,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,QAAQ,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IACpC,QAAQ,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;CACpC;AAED,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAC;IAC7B,QAAQ,CAAC,YAAY,EAAE,OAAO,CAAC;IAC/B,QAAQ,CAAC,YAAY,EAAE,SAAS,OAAO,EAAE,CAAC;IAC1C;;;;wBAIoB;IACpB,QAAQ,CAAC,WAAW,CAAC,EAAE,SAAS,OAAO,EAAE,CAAC;CAC3C;AAED;gDACgD;AAChD,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,CAAC,EAAE,MAAM,CAAC;IACnB;;8CAE0C;IAC1C,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,UAAU,CAAC,EAAE,SAAS,aAAa,EAAE,CAAC;IAC/C,QAAQ,CAAC,QAAQ,CAAC,EAAE,SAAS,YAAY,EAAE,CAAC;IAC5C,QAAQ,CAAC,SAAS,CAAC,EAAE,SAAS,YAAY,EAAE,CAAC;IAC7C,QAAQ,CAAC,MAAM,CAAC,EAAE,SAAS,SAAS,EAAE,CAAC;IACvC;gFAC4E;IAC5E,QAAQ,CAAC,IAAI,CAAC,EAAE,SAAS,OAAO,EAAE,CAAC;IACnC,QAAQ,CAAC,KAAK,CAAC,EAAE,SAAS,QAAQ,EAAE,CAAC;IACrC,QAAQ,CAAC,SAAS,CAAC,EAAE,SAAS,YAAY,EAAE,CAAC;IAC7C,QAAQ,CAAC,cAAc,CAAC,EAAE,SAAS,gBAAgB,EAAE,CAAC;IACtD,QAAQ,CAAC,oBAAoB,CAAC,EAAE,SAAS,sBAAsB,EAAE,CAAC;IAClE;oFACgF;IAChF,QAAQ,CAAC,UAAU,CAAC,EAAE,SAAS,YAAY,EAAE,CAAC;IAC9C,QAAQ,CAAC,QAAQ,CAAC,EAAE,YAAY,CAAC;IACjC,2EAA2E;IAC3E,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;CAC/B;AAED;mEACmE;AACnE,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,IAAI,EAAE,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,CAAC;IAClD,0DAA0D;IAC1D,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B;2EACuE;IACvE,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC;CACzB;AAED;;;;;;GAMG;AACH,wBAAgB,UAAU,CAAC,KAAK,EAAE,WAAW,EAAE,OAAO,EAAE,OAAO,GAAG,UAAU,EAAE,CAgT7E;AAED;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CAChC,IAAI,EAAE,SAAS,YAAY,EAAE,EAC7B,QAAQ,EAAE,MAAM,GACf,SAAS,MAAM,EAAE,CAInB;AAED;;oBAEoB;AACpB,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IACpD,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IACnD;qCACiC;IACjC,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;CACpD"}

package/dist/telemetry/ingest-protocol.js

@@ -32,14 +32,22 @@
  * already holds a credential that can write any row in the database.
  */
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.DEFAULT_INGEST_URL = exports.INGEST_PROTOCOL_VERSION = exports.INGEST_PATH = void 0;
+exports.DEFAULT_INGEST_URL = exports.INGEST_PROTOCOL_VERSION_V1 = exports.INGEST_PROTOCOL_VERSION = exports.INGEST_PATH = void 0;
 exports.stampBatch = stampBatch;
 exports.foreignOrgFeedback = foreignOrgFeedback;
+const fingerprint_1 = require("../registry/fingerprint");
 /** The path the api sink posts to. Spelled once. */
 exports.INGEST_PATH = "/v1/ingest";
-/** Bumped only for a breaking change to the shapes below. A server that does
- * not recognise the version refuses the batch rather than guessing. */
-exports.INGEST_PROTOCOL_VERSION = 1;
+/** The CURRENT protocol version — the maximum the SDK can speak (ruling d).
+ * v2 = v1 + the optional runs/steps/artifacts sections. A server that does not
+ * recognise the version refuses the batch rather than guessing; the SDK sends
+ * v2 ONLY when the artifact namespace is active (spec §1.3), otherwise it keeps
+ * sending v1 batches byte-identical to before v2 existed. */
+exports.INGEST_PROTOCOL_VERSION = 2;
+/** The v1 baseline — batches carrying only the pre-artifact sections announce
+ * this and remain valid forever. The exporter uses it when artifacts are
+ * disabled (byte-identical to today) and for the pre-loop load-error batch. */
+exports.INGEST_PROTOCOL_VERSION_V1 = 1;
 /** Default ingest host — telemetry-ingestion-boundary.md §2.1. */
 exports.DEFAULT_INGEST_URL = "https://api.modelrig.ai";
 /**
@@ -53,6 +61,46 @@ function stampBatch(batch, tenancy) {
     const writes = [];
     const now = new Date().toISOString();
     if (batch.routes !== undefined && batch.routes.length > 0) {
+        // Derive task identities BEFORE the routes write (spec §4, ruling a): a
+        // route implies a task. This is the derivation, not FK surgery — `routes`
+        // is untouched; the identity is a projection kept current by the same sync.
+        const seenTasks = new Set();
+        const taskRows = [];
+        for (const r of batch.routes) {
+            // Dedup by route NAME: a batch may carry several versions of one route,
+            // but they share a single task identity ((org_id, task) PK).
+            if (seenTasks.has(r.route))
+                continue;
+            seenTasks.add(r.route);
+            // Built field-by-field from the PRINCIPAL's tenancy, never spread from
+            // wire input — a client-supplied org_id must not ride in (ingest.ts:170
+            // doctrine, T3).
+            const taskRow = {
+                org_id: tenancy.org_id,
+                task: r.route,
+                source: "route-sync",
+            };
+            // spread-iff-bundle-present (the 00027 pattern): a metadata-only sync
+            // (no bundle) must NOT null-out an existing schema/fingerprint — a merge
+            // upsert touches only the columns present in the row. The fingerprint is
+            // computed server-side from the inlined schema with the SAME pure
+            // function the loader uses (fingerprintSchema); the parity golden locks
+            // the two call sites to identical output.
+            if (r.bundle !== undefined) {
+                taskRow.declared_schema = r.bundle.outputSchema ?? null;
+                taskRow.fingerprint_cell = (0, fingerprint_1.fingerprintSchema)(r.bundle.outputSchema)?.cellKey ?? null;
+                taskRow.updated_at = now;
+            }
+            taskRows.push(taskRow);
+        }
+        writes.push({
+            // merge=true: a task row is a mutable projection of the latest sync, like
+            // the routes mirror, unlike inferences. onConflict on the PK (S5).
+            table: "tasks",
+            onConflict: "org_id,task",
+            merge: true,
+            rows: taskRows,
+        });
         writes.push({
             table: "routes",
             onConflict: "org_id,route,version",
@@ -64,6 +112,155 @@ function stampBatch(batch, tenancy) {
                 candidates: r.candidates,
                 capture: r.capture,
                 updated_at: now,
+                // Phase D (spec §13): the resolved bundle + its hash + the sync stamp.
+                // Written only when the batch carries a bundle, so an older SDK's
+                // metadata-only mirror leaves any existing bundle intact (a merge
+                // upsert touches only the columns present in the row). `synced_at` is
+                // the BUNDLE's timestamp — stamped iff a bundle synced — distinct from
+                // `updated_at`, the row's metadata timestamp.
+                ...(r.bundle !== undefined
+                    ? { bundle: r.bundle, bundle_sha: r.bundle_sha ?? null, synced_at: now }
+                    : {}),
+            })),
+        });
+    }
+    if (batch.runs !== undefined && batch.runs.length > 0) {
+        writes.push({
+            // runs are a mutable projection (start → end): merge=true on the PK (S5).
+            table: "runs",
+            onConflict: "org_id,id",
+            merge: true,
+            rows: batch.runs.map((r) => ({
+                // Field-by-field from the principal's tenancy — org_id and source_id are
+                // NEVER carried on the wire (T3). source_id identifies the rig instance,
+                // exactly like inferences.
+                org_id: tenancy.org_id,
+                id: r.id,
+                source_id: tenancy.source_id,
+                pipeline: r.pipeline,
+                pipeline_version: r.pipeline_version,
+                environment: r.environment,
+                episode_key: r.episode_key,
+                started_at: r.started_at,
+                ended_at: r.ended_at,
+                status: r.status,
+                updated_at: now,
+            })),
+        });
+    }
+    if (batch.steps !== undefined && batch.steps.length > 0) {
+        writes.push({
+            // A step is a FACT (one row per attempt): merge=false on the composite PK.
+            // A retry must not rewrite what already landed.
+            table: "steps",
+            onConflict: "org_id,run_id,step_key,attempt_no",
+            merge: false,
+            rows: batch.steps.map((s) => ({
+                org_id: tenancy.org_id,
+                run_id: s.run_id,
+                step_key: s.step_key,
+                attempt_no: s.attempt_no,
+                task: s.task,
+                provenance: s.provenance,
+                // A ground-truth step joins inferences(org_id, source_id, id); the
+                // source_id is the principal's, stamped here (not trusted from the wire).
+                // Attested steps carry no inference reference (span only) — null.
+                inference_source_id: s.provenance === "ground-truth" ? tenancy.source_id : null,
+                inference_id: s.inference_id,
+                span_trace_id: s.span_trace_id,
+                span_id: s.span_id,
+                started_at: s.started_at,
+                ended_at: s.ended_at,
+                failure_class: s.failure_class,
+                // spread-iff-present (the 00027 pattern): the attested envelope is
+                // written ONLY for attested steps (OTLP ingest, E3-Harvest). A
+                // ground-truth step carries no `attested`, so the column stays null and
+                // the 00038 CHECK holds. An SDK batch never sets it → byte-identical.
+                ...(s.attested !== undefined ? { attested: s.attested } : {}),
+            })),
+        });
+    }
+    if (batch.artifacts !== undefined && batch.artifacts.length > 0) {
+        writes.push({
+            table: "artifacts",
+            onConflict: "org_id,id",
+            merge: false, // an artifact metadata row is a fact; a retry must not rewrite it
+            rows: batch.artifacts.map((a) => ({
+                org_id: tenancy.org_id,
+                id: a.id,
+                run_id: a.run_id,
+                step_key: a.step_key,
+                attempt_no: a.attempt_no,
+                task: a.task,
+                name: a.name,
+                type: a.type,
+                version: a.version,
+                supersedes_artifact_id: a.supersedes_artifact_id,
+                declared_schema: a.declared_schema,
+                fingerprint_cell: a.fingerprint_cell,
+                content_ref: a.content_ref,
+                content_hash: a.content_hash,
+                content_bytes: a.content_bytes,
+                data_classification: a.data_classification,
+                expires_at: a.expires_at,
+                // spread-iff-present (00027 pattern): a batch without `scrub` (older SDK,
+                // custody off) leaves the column null rather than overwriting it.
+                ...(a.scrub !== undefined ? { scrub: a.scrub } : {}),
+            })),
+        });
+    }
+    if (batch.artifact_edges !== undefined && batch.artifact_edges.length > 0) {
+        writes.push({
+            table: "artifact_edges",
+            onConflict: "org_id,from_artifact_id,to_artifact_id,kind",
+            merge: false,
+            rows: batch.artifact_edges.map((e) => ({
+                org_id: tenancy.org_id,
+                from_artifact_id: e.from_artifact_id,
+                to_artifact_id: e.to_artifact_id,
+                kind: e.kind,
+            })),
+        });
+    }
+    if (batch.artifact_evaluations !== undefined && batch.artifact_evaluations.length > 0) {
+        writes.push({
+            table: "artifact_evaluations",
+            onConflict: "org_id,id",
+            merge: false,
+            rows: batch.artifact_evaluations.map((v) => ({
+                org_id: tenancy.org_id,
+                id: v.id,
+                artifact_id: v.artifact_id,
+                // Subject-one-of (00051): a run-subject row carries run_id, artifact_id
+                // null; the CHECK rejects a row that sets both or neither.
+                run_id: v.run_id ?? null,
+                evaluator: v.evaluator,
+                evaluator_kind: v.evaluator_kind,
+                score: v.score,
+                passed: v.passed,
+                label: v.label,
+                explanation: v.explanation,
+                created_by: v.created_by,
+            })),
+        });
+    }
+    if (batch.eval_cases !== undefined && batch.eval_cases.length > 0) {
+        writes.push({
+            // An eval case is created once (via promote); a retry must not rewrite it.
+            // Edits/deletes are a server-side owner action, not this stream. merge=false
+            // on the PK — idempotent by doing nothing (S5).
+            table: "eval_cases",
+            onConflict: "org_id,id",
+            merge: false,
+            rows: batch.eval_cases.map((c) => ({
+                org_id: tenancy.org_id,
+                id: c.id,
+                task: c.task,
+                source_artifact_id: c.source_artifact_id,
+                corrected_artifact_id: c.corrected_artifact_id,
+                origin: c.origin,
+                note: c.note,
+                created_by: c.created_by,
             })),
         });
     }
@@ -80,6 +277,9 @@ function stampBatch(batch, tenancy) {
                     dimensions: batch.manifest.dimensions,
                     contribution: batch.manifest.contribution,
                     serveability: batch.manifest.serveability,
+                    // [] when the load was clean — a merge upsert then clears any stale
+                    // failure a prior broken deploy left on the row (follow-up #2).
+                    load_errors: batch.manifest.load_errors ?? [],
                     updated_at: now,
                 },
             ],

package/dist/telemetry/load-error-report.d.ts

@@ -0,0 +1,24 @@
+/**
+ * Load-error console reporting — follow-up #2.
+ *
+ * When a route bundle fails to load, tell the console WHY. `loadRoutes` throws
+ * before the exporter loop exists, so the run-loop path never gets a chance to
+ * mirror the failure. This sends a one-shot manifest batch carrying
+ * `describeConfigFailure(error)` onto `rig_manifests.load_errors`, which drives
+ * /setup's "Define your first route" step to `failed` with what we looked for
+ * and what we found.
+ *
+ * Fire-and-forget, and best-effort by design: `createRig` is synchronous and
+ * re-throws (the rig genuinely cannot run), and telemetry must never change the
+ * error the caller sees. KNOWN LIMITATION: this only reaches the console once
+ * the app runs with an export configured (MODELRIG_API_KEY / direct creds); a
+ * first-timer who hasn't connected yet still gets the full diagnosis at their
+ * terminal via `renderConfigErrorForTerminal`.
+ *
+ * Lives here rather than in index.ts to keep that file under the LOC cap (P1) —
+ * the same relocation `buildTelemetrySink` made to `sinks.ts`.
+ */
+import type { RigConfig } from "../config";
+import { RouteConfigError } from "../routes/loader";
+export declare function reportLoadError(config: RigConfig, error: RouteConfigError): void;
+//# sourceMappingURL=load-error-report.d.ts.map

package/dist/telemetry/load-error-report.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"load-error-report.d.ts","sourceRoot":"","sources":["../../src/telemetry/load-error-report.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAIH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAC3C,OAAO,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AAOpD,wBAAgB,eAAe,CAAC,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,gBAAgB,GAAG,IAAI,CAoBhF"}