modelrig 0.11.0 → 0.12.0

package/dist/telemetry/otel-normalize.js

@@ -26,7 +26,7 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.normalizeOtlpTraces = normalizeOtlpTraces;
 exports.looksLikeLogsPayload = looksLikeLogsPayload;
-const node_crypto_1 = require("node:crypto");
+const otel_hierarchy_1 = require("./otel-hierarchy");
 // ── value coercion (learnings §1.2, ported fresh) ────────────────────────────
 /** OTLP AnyValue → plain JS. Numeric strings coerce EXCEPT NaN/±Infinity which
  * stay as their string form (invalid JSON must never enter the envelope). int64
@@ -296,22 +296,6 @@ function classify(map) {
         return "chat";
     return "span";
 }
-// ── structure helpers ────────────────────────────────────────────────────────
-const WS_RE = /\s+/g;
-/** span name → step_key: trimmed, whitespace-collapsed, length-capped, never
- * empty (the step PK forbids it). */
-function toStepKey(name) {
-    const raw = typeof name === "string" ? name.trim().replace(WS_RE, " ") : "";
-    if (raw === "")
-        return "span";
-    return raw.slice(0, 200);
-}
-/** 32-hex trace id → canonical UUID string (runs.id is uuid; 16 bytes ≡ a UUID).
- * A trace id that is not 16 bytes gets a deterministic UUID derived from it. */
-function traceIdToRunUuid(traceHex) {
-    const hex = traceHex.length === 32 ? traceHex : (0, node_crypto_1.createHash)("sha256").update(traceHex).digest("hex").slice(0, 32);
-    return `${hex.slice(0, 8)}-${hex.slice(8, 12)}-${hex.slice(12, 16)}-${hex.slice(16, 20)}-${hex.slice(20, 32)}`;
-}
 function bump(drops, reason, by = 1) {
     drops[reason] = (drops[reason] ?? 0) + by;
 }
@@ -374,7 +358,7 @@ function normalizeOtlpTraces(data, nowMs = Date.now()) {
                 }
                 const { map, keys } = attrMap(span.attributes);
                 const timing = resolveTiming(span, nowMs, drops);
-                const runId = traceIdToRunUuid(traceHex);
+                const runId = (0, otel_hierarchy_1.traceIdToRunUuid)(traceHex);
                 // ── envelope (identity/structure/usage ONLY; NO content) ──
                 const operation = classify(map);
                 const isAgentAggregate = AGENT_OPERATIONS.has(operation);
@@ -383,10 +367,14 @@ function normalizeOtlpTraces(data, nowMs = Date.now()) {
                     ? "unknown"
                     : (firstAttr(map, PROVIDER_CHAIN) ?? "unknown");
                 const usage = isAgentAggregate ? undefined : extractUsage(map);
+                const parentHex = toHexId(span.parentSpanId ?? span.parent_span_id, 8);
+                const operationClass = (0, otel_hierarchy_1.operationClassOf)(operation);
                 const envelope = {
                     model,
                     provider,
                     operation,
+                    operation_class: operationClass,
+                    parent_span_id: parentHex,
                     ...(usage !== undefined ? { usage } : {}),
                     scope: { name: scopeName, version: scopeVersion },
                 };
@@ -397,7 +385,7 @@ function normalizeOtlpTraces(data, nowMs = Date.now()) {
                 const failureClass = statusCode === 2 ? "attested_error" : null;
                 const step = {
                     run_id: runId,
-                    step_key: toStepKey(span.name),
+                    step_key: (0, otel_hierarchy_1.toStepKey)(span.name),
                     attempt_no: 1, // assigned per (trace, step_key) below
                     task: null,
                     provenance: "attested",
@@ -413,6 +401,13 @@ function normalizeOtlpTraces(data, nowMs = Date.now()) {
                 const acc = runs.get(runId);
                 const endMs = timing.endedAt !== null ? Date.parse(timing.endedAt) : timing.startMs;
                 const episodeKey = firstAttr(map, EPISODE_CHAIN) ?? null;
+                const conversation = firstAttr(map, ["gen_ai.conversation.id"]) !== undefined;
+                const pendingStep = {
+                    step,
+                    stepKey: step.step_key,
+                    startMs: timing.startMs,
+                    span: { id: spanHex, parent: parentHex, operation, operationClass },
+                };
                 if (acc === undefined) {
                     runs.set(runId, {
                         runId,
@@ -423,7 +418,8 @@ function normalizeOtlpTraces(data, nowMs = Date.now()) {
                         minStartMs: timing.startMs,
                         maxEndMs: endMs,
                         anyError: failureClass !== null,
-                        pending: [{ step, stepKey: step.step_key, startMs: timing.startMs }],
+                        conversation,
+                        pending: [pendingStep],
                     });
                 }
                 else {
@@ -432,13 +428,17 @@ function normalizeOtlpTraces(data, nowMs = Date.now()) {
                     acc.anyError = acc.anyError || failureClass !== null;
                     if (acc.episodeKey === null && episodeKey !== null)
                         acc.episodeKey = episodeKey;
-                    acc.pending.push({ step, stepKey: step.step_key, startMs: timing.startMs });
+                    acc.conversation = acc.conversation || conversation;
+                    acc.pending.push(pendingStep);
                 }
             }
         }
     }
     const runRows = [];
     for (const acc of runs.values()) {
+        // ARC-6: a conversation trace (gen_ai.conversation.id + invoke_agent spans)
+        // numbers its generations into ARC-α turn steps and marks the run.
+        const turned = acc.conversation ? (0, otel_hierarchy_1.numberTurns)(acc.pending) : { pending: acc.pending, turns: 0 };
         runRows.push({
             id: acc.runId,
             pipeline: acc.pipeline,
@@ -449,25 +449,10 @@ function normalizeOtlpTraces(data, nowMs = Date.now()) {
             ended_at: new Date(acc.maxEndMs).toISOString(),
             // The trace has completed (we only see finished spans); status is honest.
             status: acc.anyError ? "failed" : "succeeded",
+            ...(turned.turns > 0 ? { meta: { v: 1, trigger: "conversation" } } : {}),
         });
-        // Assign attempt_no per (run, step_key): repeated same-named spans become
-        // attempts in start-time (then span-id) order — deterministic within a
-        // trace. v0 limitation: a trace split across batches is not deduped (no
-        // seen-store); one trace = one batch is the common, correct case.
-        const perKey = new Map();
-        for (const p of acc.pending) {
-            const list = perKey.get(p.stepKey) ?? [];
-            list.push({ step: p.step, startMs: p.startMs });
-            perKey.set(p.stepKey, list);
-        }
-        for (const list of perKey.values()) {
-            list.sort((a, b) => a.startMs !== b.startMs
-                ? a.startMs - b.startMs
-                : (a.step.span_id ?? "") < (b.step.span_id ?? "")
-                    ? -1
-                    : 1);
-            list.forEach(({ step }, i) => steps.push({ ...step, attempt_no: i + 1 }));
-        }
+        // attempt_no per (run, step_key) — the hierarchy module (otel-hierarchy.ts).
+        steps.push(...(0, otel_hierarchy_1.assignAttempts)(turned.pending));
     }
     return { runs: runRows, steps, drops, spanCount, scopeNames: [...scopeNames] };
 }

package/dist/telemetry/sinks.d.ts

@@ -57,7 +57,10 @@ export declare class SinkSendError extends Error {
      * poison-skip candidate). Derived once, from the status, so the classification
      * lives in exactly one place. */
     readonly retriable: boolean;
-    constructor(message: string, status: number | undefined);
+    /** COV-1c: the server's 422 `reason_code` — a PostgREST/PG error CODE
+     * (`PGRST102`, `23514`) and nothing else, shape-checked; null when absent. */
+    readonly reasonCode: string | null;
+    constructor(message: string, status: number | undefined, reasonCode?: string | null);
 }
 export interface DirectSinkConfig {
     readonly supabaseUrl: string;

package/dist/telemetry/sinks.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sinks.d.ts","sourceRoot":"","sources":["../../src/telemetry/sinks.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAIH,OAAO,KAAK,EAAE,WAAW,EAAE,aAAa,EAAE,OAAO,EAAE,MAAM,mBAAmB,CAAC;AAC7E,OAAO,KAAK,EAAE,eAAe,EAAE,kBAAkB,EAAE,MAAM,WAAW,CAAC;AAmBrE;6CAC6C;AAC7C,wBAAgB,6BAA6B,IAAI,IAAI,CAEpD;AAED,MAAM,WAAW,aAAa;IAC5B;;yDAEqD;IACrD,QAAQ,CAAC,IAAI,EAAE,QAAQ,GAAG,KAAK,CAAC;IAChC;;6EAEyE;IACzE,IAAI,CAAC,KAAK,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACzC;AAED;;;;;;;;;;;;;;;GAeG;AACH,qBAAa,aAAc,SAAQ,KAAK;IACtC,wEAAwE;IACxE,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB;;qCAEiC;IACjC,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;gBAEhB,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,SAAS;CAMxD;AAMD,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,oEAAoE;IACpE,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,yEAAyE;IACzE,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,KAAK,CAAC;CACjC;AAED,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,gBAAgB,GAAG,aAAa,CA0CxE;AAMD,MAAM,WAAW,aAAa;IAC5B,mEAAmE;IACnE,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B;4EACwE;IACxE,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,KAAK,CAAC;IAChC;;;wDAGoD;IACpD,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC,OAAO,EAAE,aAAa,KAAK,IAAI,CAAC;IACtD;;oDAEgD;IAChD,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;CAC7B;AAKD,wBAAgB,aAAa,CAAC,MAAM,EAAE,aAAa,GAAG,aAAa,CAsElE;AAED;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CAChC,YAAY,EAAE,eAAe,GAAG,kBAAkB,EAClD,QAAQ,EAAE,MAAM,EAChB,IAAI,GAAE;IAAE,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAA;CAAO,GACzC,aAAa,CA2Bf"}
+{"version":3,"file":"sinks.d.ts","sourceRoot":"","sources":["../../src/telemetry/sinks.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAIH,OAAO,KAAK,EAAE,WAAW,EAAE,aAAa,EAAc,OAAO,EAAE,MAAM,mBAAmB,CAAC;AACzF,OAAO,KAAK,EAAE,eAAe,EAAE,kBAAkB,EAAE,MAAM,WAAW,CAAC;AAmBrE;6CAC6C;AAC7C,wBAAgB,6BAA6B,IAAI,IAAI,CAEpD;AAED,MAAM,WAAW,aAAa;IAC5B;;yDAEqD;IACrD,QAAQ,CAAC,IAAI,EAAE,QAAQ,GAAG,KAAK,CAAC;IAChC;;6EAEyE;IACzE,IAAI,CAAC,KAAK,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACzC;AAED;;;;;;;;;;;;;;;GAeG;AACH,qBAAa,aAAc,SAAQ,KAAK;IACtC,wEAAwE;IACxE,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB;;qCAEiC;IACjC,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;IAC5B;kFAC8E;IAC9E,QAAQ,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;gBAEvB,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,SAAS,EAAE,UAAU,GAAE,MAAM,GAAG,IAAW;CAO1F;AAcD,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,oEAAoE;IACpE,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,yEAAyE;IACzE,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,KAAK,CAAC;CACjC;AAED,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,gBAAgB,GAAG,aAAa,CAkDxE;AAMD,MAAM,WAAW,aAAa;IAC5B,mEAAmE;IACnE,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B;4EACwE;IACxE,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,KAAK,CAAC;IAChC;;;wDAGoD;IACpD,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC,OAAO,EAAE,aAAa,KAAK,IAAI,CAAC;IACtD;;oDAEgD;IAChD,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;CAC7B;AAKD,wBAAgB,aAAa,CAAC,MAAM,EAAE,aAAa,GAAG,aAAa,CA4ElE;AAED;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CAChC,YAAY,EAAE,eAAe,GAAG,kBAAkB,EAClD,QAAQ,EAAE,MAAM,EAChB,IAAI,GAAE;IAAE,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAA;CAAO,GACzC,aAAa,CA2Bf"}

package/dist/telemetry/sinks.js

@@ -66,55 +66,72 @@ function __resetApiSinkWarningsForTest() {
  * gate), so the body a failed write returns is logged nowhere.
  */
 class SinkSendError extends Error {
-    constructor(message, status) {
+    constructor(message, status, reasonCode = null) {
         super(message);
         this.name = "SinkSendError";
         if (status !== undefined)
             this.status = status;
         this.retriable = status === undefined || status >= 500 || status === 429;
+        this.reasonCode = reasonCode;
     }
 }
 exports.SinkSendError = SinkSendError;
+/** The 422 body's `reason_code`, iff it is code-shaped — never any other body text. */
+async function reasonCodeOf(response) {
+    if (response.status !== 422)
+        return null;
+    const body = (await response.json().catch(() => null));
+    const code = body?.reason_code;
+    return typeof code === "string" && /^(PGRST\d{3}|[0-9A-Z]{5})$/.test(code) ? code : null;
+}
 function createDirectSink(config) {
     const base = config.supabaseUrl.replace(/\/$/, "");
     const fetchFn = config.fetchFn ?? fetch;
     return {
         mode: "direct",
         async send(batch) {
-            for (const write of (0, ingest_protocol_1.stampBatch)(batch, config.tenancy)) {
-                let response;
-                try {
-                    response = await fetchFn(
-                    // S5: the upsert names a real unique constraint. A single-argument
-                    // upsert targets the primary key and 23505s later.
-                    `${base}/rest/v1/${write.table}?on_conflict=${encodeURIComponent(write.onConflict)}`, {
-                        method: "POST",
-                        headers: {
-                            "content-type": "application/json",
-                            apikey: config.serviceRoleKey,
-                            authorization: `Bearer ${config.serviceRoleKey}`,
-                            prefer: write.merge
-                                ? "resolution=merge-duplicates,return=minimal"
-                                : "resolution=ignore-duplicates,return=minimal",
-                        },
-                        body: JSON.stringify(write.rows),
-                    });
-                }
-                catch {
-                    // Network-level throw — no status, so TRANSIENT (the exporter retries
-                    // forever). The raw error can carry the control-plane host, so it is
-                    // NOT echoed (C2); the table + "network error" is the whole message.
-                    throw new SinkSendError(`sink POST ${write.table} → network error`, undefined);
-                }
-                if (!response.ok) {
-                    // Status + table only — never the PostgREST body (it carries the
-                    // control-plane host and, on some failures, header fragments; C2).
-                    // The status is what the exporter classifies on (spec §2.3.1).
-                    throw new SinkSendError(`sink POST ${write.table} → ${response.status}`, response.status);
-                }
-            }
+            await sendWrites((0, ingest_protocol_1.stampBatch)(batch, config.tenancy));
+            // GRADE-RAW S2-1: step-task registration is best-effort and AFTER the
+            // batch landed — a refused registration never fails (or re-sends) it.
+            const registration = (0, ingest_protocol_1.stepTaskRegistration)(batch, config.tenancy);
+            if (registration !== null)
+                await sendWrites([registration]).catch(() => undefined);
         },
     };
+    async function sendWrites(writes) {
+        for (const write of writes) {
+            let response;
+            try {
+                response = await fetchFn(
+                // S5: the upsert names a real unique constraint. A single-argument
+                // upsert targets the primary key and 23505s later.
+                `${base}/rest/v1/${write.table}?on_conflict=${encodeURIComponent(write.onConflict)}`, {
+                    method: "POST",
+                    headers: {
+                        "content-type": "application/json",
+                        apikey: config.serviceRoleKey,
+                        authorization: `Bearer ${config.serviceRoleKey}`,
+                        prefer: write.merge
+                            ? "resolution=merge-duplicates,return=minimal"
+                            : "resolution=ignore-duplicates,return=minimal",
+                    },
+                    body: JSON.stringify(write.rows),
+                });
+            }
+            catch {
+                // Network-level throw — no status, so TRANSIENT (the exporter retries
+                // forever). The raw error can carry the control-plane host, so it is
+                // NOT echoed (C2); the table + "network error" is the whole message.
+                throw new SinkSendError(`sink POST ${write.table} → network error`, undefined);
+            }
+            if (!response.ok) {
+                // Status + table only — never the PostgREST body (it carries the
+                // control-plane host and, on some failures, header fragments; C2).
+                // The status is what the exporter classifies on (spec §2.3.1).
+                throw new SinkSendError(`sink POST ${write.table} → ${response.status}`, response.status);
+            }
+        }
+    }
 }
 /** Below this, gzip costs more than it saves. */
 const GZIP_MIN_BYTES = 1024;
@@ -166,7 +183,9 @@ function createApiSink(config) {
                 // someone else's log aggregator. The status is the exporter's transient-
                 // vs-poison signal: the server sends 422 for a deterministic control-plane
                 // rejection, 503 for a transient one (spec §2.2/§2.3.1).
-                throw new SinkSendError(`ingest POST → ${response.status}`, response.status);
+                // COV-1c: a 422 may name the PostgREST/PG code (shape-checked, code only).
+                const reasonCode = await reasonCodeOf(response);
+                throw new SinkSendError(`ingest POST → ${response.status}${reasonCode !== null ? ` (${reasonCode})` : ""}`, response.status, reasonCode);
             }
             // A good send clears the auth-failure latch, so a later key breakage
             // re-alerts instead of staying silent behind a once-per-process guard.

package/dist/telemetry/store-migrations.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"store-migrations.d.ts","sourceRoot":"","sources":["../../src/telemetry/store-migrations.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,KAAK,QAAQ,MAAM,gBAAgB,CAAC;AAG3C;sCACsC;AACtC,wBAAgB,kBAAkB,CAAC,EAAE,EAAE,QAAQ,CAAC,QAAQ,GAAG,IAAI,CAgM9D"}
+{"version":3,"file":"store-migrations.d.ts","sourceRoot":"","sources":["../../src/telemetry/store-migrations.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,KAAK,QAAQ,MAAM,gBAAgB,CAAC;AAG3C;sCACsC;AACtC,wBAAgB,kBAAkB,CAAC,EAAE,EAAE,QAAQ,CAAC,QAAQ,GAAG,IAAI,CAwM9D"}

package/dist/telemetry/store-migrations.js

@@ -206,4 +206,12 @@ function runStoreMigrations(db) {
         }
         db.pragma("user_version = 16");
     }
+    // v17 (ARC-3, mirrors 00089): `grades.kind` gains 'outcome' (table rebuild —
+    // SQLite cannot ALTER a CHECK) and the nullable `value` column. The rebuild
+    // copies each row's ROWID too, so the exporter's `:grades` rowid watermark is
+    // exactly as valid after the rung as before. See migrateGradesToV17.
+    if (db.pragma("user_version", { simple: true }) < 17) {
+        (0, grades_sql_1.migrateGradesToV17)(db);
+        db.pragma("user_version = 17");
+    }
 }

package/dist/telemetry/store.d.ts

@@ -52,6 +52,15 @@ export interface ExportableTelemetryStore extends TelemetryStore {
      * non-null inference_id, or null (E4 chunk A: bake-off rehydration resolves an
      * eval case's source step to the inference that keys its captured input). */
     getStepInferenceId(runId: string, stepKey: string): string | null;
+    /** ARC-1 conversation re-entry: the newest `running` run for (pipeline,
+     * episode_key) in THIS local store, with its recorded step keys (the caller
+     * derives the turn counter from `turn:<n>.<k>` keys), or null. Local only —
+     * cross-process re-entry is out of scope (duplicate runs per episode are
+     * tolerated, 00031). */
+    findOpenRun?(pipeline: string, episodeKey: string): {
+        readonly row: RunRow;
+        readonly stepKeys: readonly string[];
+    } | null;
     listEnvelopes(): EnvelopeRow[];
     /** Local exporter watermark (per source instance), 0 when unset. */
     getExportWatermark(sourceId: string): number;

package/dist/telemetry/store.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"store.d.ts","sourceRoot":"","sources":["../../src/telemetry/store.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAKH,OAAO,KAAK,EACV,WAAW,EACX,QAAQ,EACR,MAAM,EACN,OAAO,EACP,YAAY,EACZ,cAAc,EACf,MAAM,oBAAoB,CAAC;AAE5B,OAAO,EAA2B,KAAK,cAAc,EAAuB,MAAM,UAAU,CAAC;AAU7F;;;;;GAKG;AACH,MAAM,WAAW,wBAAyB,SAAQ,cAAc;IAC9D,qEAAqE;IACrE,mBAAmB,CAAC,UAAU,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,KAAK,CAAC;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,YAAY,CAAA;KAAE,CAAC,CAAC;IACpG;kEAC8D;IAC9D,WAAW,CAAC,GAAG,EAAE,QAAQ,GAAG,IAAI,CAAC;IACjC;;wDAEoD;IACpD,eAAe,CAAC,UAAU,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,KAAK,CAAC;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,QAAQ,CAAA;KAAE,CAAC,CAAC;IAC5F;mEAC+D;IAC/D,SAAS,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,iFAAiF;IACjF,UAAU,CAAC,GAAG,EAAE,OAAO,GAAG,IAAI,CAAC;IAC/B,kEAAkE;IAClE,aAAa,CAAC,UAAU,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,KAAK,CAAC;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACxF,mEAAmE;IACnE,cAAc,CAAC,UAAU,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,KAAK,CAAC;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,OAAO,CAAA;KAAE,CAAC,CAAC;IAC1F;;iFAE6E;IAC7E,kBAAkB,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAAC;IAClE,aAAa,IAAI,WAAW,EAAE,CAAC;IAC/B,oEAAoE;IACpE,kBAAkB,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAAC;IAC7C,kBAAkB,CAAC,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9D;;;;;OAKG;IACH,kBAAkB,CAAC,aAAa,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,cAAc,EAAE,CAAC;CAC3E;AAgSD,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,MAAM,GAAG,wBAAwB,CA6P3E"}
+{"version":3,"file":"store.d.ts","sourceRoot":"","sources":["../../src/telemetry/store.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAKH,OAAO,KAAK,EACV,WAAW,EACX,QAAQ,EACR,MAAM,EACN,OAAO,EACP,YAAY,EACZ,cAAc,EACf,MAAM,oBAAoB,CAAC;AAE5B,OAAO,EAA2B,KAAK,cAAc,EAAuB,MAAM,UAAU,CAAC;AAU7F;;;;;GAKG;AACH,MAAM,WAAW,wBAAyB,SAAQ,cAAc;IAC9D,qEAAqE;IACrE,mBAAmB,CAAC,UAAU,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,KAAK,CAAC;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,YAAY,CAAA;KAAE,CAAC,CAAC;IACpG;kEAC8D;IAC9D,WAAW,CAAC,GAAG,EAAE,QAAQ,GAAG,IAAI,CAAC;IACjC;;wDAEoD;IACpD,eAAe,CAAC,UAAU,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,KAAK,CAAC;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,QAAQ,CAAA;KAAE,CAAC,CAAC;IAC5F;mEAC+D;IAC/D,SAAS,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,iFAAiF;IACjF,UAAU,CAAC,GAAG,EAAE,OAAO,GAAG,IAAI,CAAC;IAC/B,kEAAkE;IAClE,aAAa,CAAC,UAAU,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,KAAK,CAAC;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACxF,mEAAmE;IACnE,cAAc,CAAC,UAAU,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,KAAK,CAAC;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,OAAO,CAAA;KAAE,CAAC,CAAC;IAC1F;;iFAE6E;IAC7E,kBAAkB,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAAC;IAClE;;;;4BAIwB;IACxB,WAAW,CAAC,CAAC,QAAQ,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG;QAAE,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAA;KAAE,GAAG,IAAI,CAAC;IAC1H,aAAa,IAAI,WAAW,EAAE,CAAC;IAC/B,oEAAoE;IACpE,kBAAkB,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAAC;IAC7C,kBAAkB,CAAC,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9D;;;;;OAKG;IACH,kBAAkB,CAAC,aAAa,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,cAAc,EAAE,CAAC;CAC3E;AAgSD,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,MAAM,GAAG,wBAAwB,CAyQ3E"}

package/dist/telemetry/store.js

@@ -403,6 +403,16 @@ function openTelemetryStore(dbPath) {
                 .all(afterRowid, limit);
             return rows.map((r) => ({ rowid: r.__rowid, row: toStepRow(r) }));
         },
+        findOpenRun(pipeline, episodeKey) {
+            const r = db
+                .prepare("SELECT * FROM runs WHERE pipeline = ? AND episode_key = ? AND status = 'running' " +
+                "ORDER BY started_at DESC LIMIT 1")
+                .get(pipeline, episodeKey);
+            if (r === undefined)
+                return null;
+            const keys = db.prepare("SELECT DISTINCT step_key FROM steps WHERE run_id = ?").all(r.id);
+            return { row: toRunRow(r), stepKeys: keys.map((k) => k.step_key) };
+        },
         getStepInferenceId(runId, stepKey) {
             const r = db
                 .prepare("SELECT inference_id FROM steps WHERE run_id = ? AND step_key = ? AND inference_id IS NOT NULL " +

package/dist/telemetry/uniform-rows.d.ts

@@ -0,0 +1,43 @@
+/**
+ * Uniform key sets for `stampBatch`'s bulk writes (COV-1c). Extracted from
+ * ingest-protocol.ts so stampBatch stays under the LOC cap (P1).
+ *
+ * A PostgREST bulk insert requires every row in the array to carry the SAME
+ * keys — one row that omits a key the others carry fails the whole POST with
+ * PGRST102 ("All object keys must match") before any SQL runs. The wire is
+ * spread-iff-present by design (an older SDK's payload stays byte-identical),
+ * so rows in one batch legitimately differ: a web-search surcharge row carries
+ * `meta: null` (no `meta` key after validation) beside metered rows that carry
+ * one. Two remedies, chosen by the write's conflict policy:
+ *
+ *  - merge=false (an immutable fact: inferences, steps, artifacts) — FILL every
+ *    absent optional column with its DB default (null, or the NOT NULL column's
+ *    default). Safe because ignore-duplicates never rewrites a landed row.
+ *  - merge=true (a mutable projection: tasks, runs) — SPLIT into one write per
+ *    key set (the routes precedent). Filling would null out a column a merge
+ *    upsert must leave untouched.
+ *
+ * `undefined` values count as absent: JSON.stringify drops the key, so a row
+ * holding `{ meta: undefined }` reaches PostgREST without `meta`.
+ */
+import type { Tenancy, WireInference } from "./ingest-protocol";
+/** Every `inferences` column the wire can carry, plus the stamped tenancy. ONE
+ * list — the uniform key set of every inferences write. */
+export declare const INFERENCE_WRITE_COLUMNS: readonly ["org_id", "project_id", "source_id", "id", "ts", "route", "route_version", "provider", "model", "requested_tier", "served_tier", "tokens_in", "tokens_out", "tokens_cached", "cost_estimate_usd", "latency_ms", "ttfb_ms", "failure_class", "attempts", "tags", "fingerprint_cell", "served_variant", "repaired_by", "pricing_missing", "tokens_cache_write", "tokens_cache_write_1h", "cache_key", "prefix_fingerprint", "call_id", "attempt_seq", "candidate_index", "meta", "mask"];
+export type InferenceWriteColumn = (typeof INFERENCE_WRITE_COLUMNS)[number];
+/** A wire inference → its `inferences` row with EXACTLY `INFERENCE_WRITE_COLUMNS`
+ * as keys. Tenancy is stamped from the principal and never read from the row
+ * (T3) — the list order puts it first, and the wire type cannot carry it. */
+export declare function normalizeInferenceRow(row: WireInference, tenancy: Tenancy): Record<string, unknown>;
+/** merge=false fill: for each of `optional` that ANY row in the write carries,
+ * give the rows lacking it an explicit null, so rows that differ only in those
+ * spread-iff-present columns share one key set. A write where no row carries
+ * the column is returned key-for-key unchanged (byte-identical to pre-COV-1c). */
+export declare function fillNulls(rows: readonly Record<string, unknown>[], optional: readonly string[]): Record<string, unknown>[];
+/** The key set a row reaches PostgREST with (undefined-valued keys dropped, as
+ * JSON.stringify drops them), sorted — the PGRST102 comparison. */
+export declare function wireKeySet(row: Record<string, unknown>): string;
+/** merge=true split: group rows by key set, first-seen order, so each bulk POST
+ * is uniform without writing a null a merge upsert would apply. */
+export declare function splitByKeySet(rows: readonly Record<string, unknown>[]): Record<string, unknown>[][];
+//# sourceMappingURL=uniform-rows.d.ts.map

package/dist/telemetry/uniform-rows.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"uniform-rows.d.ts","sourceRoot":"","sources":["../../src/telemetry/uniform-rows.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAEhE;2DAC2D;AAC3D,eAAO,MAAM,uBAAuB,keAkC1B,CAAC;AAEX,MAAM,MAAM,oBAAoB,GAAG,CAAC,OAAO,uBAAuB,CAAC,CAAC,MAAM,CAAC,CAAC;AAwB5E;;6EAE6E;AAC7E,wBAAgB,qBAAqB,CAAC,GAAG,EAAE,aAAa,EAAE,OAAO,EAAE,OAAO,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAanG;AAED;;;kFAGkF;AAClF,wBAAgB,SAAS,CACvB,IAAI,EAAE,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,EACxC,QAAQ,EAAE,SAAS,MAAM,EAAE,GAC1B,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,CAO3B;AAED;mEACmE;AACnE,wBAAgB,UAAU,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CAK/D;AAED;mEACmE;AACnE,wBAAgB,aAAa,CAAC,IAAI,EAAE,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,EAAE,CASnG"}

package/dist/telemetry/uniform-rows.js

@@ -0,0 +1,139 @@
+"use strict";
+/**
+ * Uniform key sets for `stampBatch`'s bulk writes (COV-1c). Extracted from
+ * ingest-protocol.ts so stampBatch stays under the LOC cap (P1).
+ *
+ * A PostgREST bulk insert requires every row in the array to carry the SAME
+ * keys — one row that omits a key the others carry fails the whole POST with
+ * PGRST102 ("All object keys must match") before any SQL runs. The wire is
+ * spread-iff-present by design (an older SDK's payload stays byte-identical),
+ * so rows in one batch legitimately differ: a web-search surcharge row carries
+ * `meta: null` (no `meta` key after validation) beside metered rows that carry
+ * one. Two remedies, chosen by the write's conflict policy:
+ *
+ *  - merge=false (an immutable fact: inferences, steps, artifacts) — FILL every
+ *    absent optional column with its DB default (null, or the NOT NULL column's
+ *    default). Safe because ignore-duplicates never rewrites a landed row.
+ *  - merge=true (a mutable projection: tasks, runs) — SPLIT into one write per
+ *    key set (the routes precedent). Filling would null out a column a merge
+ *    upsert must leave untouched.
+ *
+ * `undefined` values count as absent: JSON.stringify drops the key, so a row
+ * holding `{ meta: undefined }` reaches PostgREST without `meta`.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.INFERENCE_WRITE_COLUMNS = void 0;
+exports.normalizeInferenceRow = normalizeInferenceRow;
+exports.fillNulls = fillNulls;
+exports.wireKeySet = wireKeySet;
+exports.splitByKeySet = splitByKeySet;
+/** Every `inferences` column the wire can carry, plus the stamped tenancy. ONE
+ * list — the uniform key set of every inferences write. */
+exports.INFERENCE_WRITE_COLUMNS = [
+    "org_id",
+    "project_id",
+    "source_id",
+    "id",
+    "ts",
+    "route",
+    "route_version",
+    "provider",
+    "model",
+    "requested_tier",
+    "served_tier",
+    "tokens_in",
+    "tokens_out",
+    "tokens_cached",
+    "cost_estimate_usd",
+    "latency_ms",
+    "ttfb_ms",
+    "failure_class",
+    "attempts",
+    "tags",
+    "fingerprint_cell",
+    "served_variant",
+    "repaired_by",
+    "pricing_missing",
+    "tokens_cache_write",
+    "tokens_cache_write_1h",
+    "cache_key",
+    "prefix_fingerprint",
+    "call_id",
+    "attempt_seq",
+    "candidate_index",
+    "meta",
+    "mask",
+];
+// Compile-time drift lock: a WireInference field missing from the list above
+// fails tsc here, rather than being silently dropped from the write.
+const _everyWireFieldListed = true;
+void _everyWireFieldListed;
+/** The value written for an ABSENT column: the NOT NULL columns' DB defaults
+ * (00001 / 00005 / 00049), null for every nullable one (00002/00003/00007/
+ * 00049/00054/00056/00062 add them nullable with no default). Writing the
+ * default explicitly is what the omitted key produced before. */
+const ABSENT_DEFAULTS = {
+    tokens_in: 0,
+    tokens_out: 0,
+    tokens_cached: 0,
+    cost_estimate_usd: 0,
+    latency_ms: 0,
+    attempts: {},
+    tags: {},
+    pricing_missing: false,
+    tokens_cache_write: 0,
+    tokens_cache_write_1h: 0,
+};
+/** A wire inference → its `inferences` row with EXACTLY `INFERENCE_WRITE_COLUMNS`
+ * as keys. Tenancy is stamped from the principal and never read from the row
+ * (T3) — the list order puts it first, and the wire type cannot carry it. */
+function normalizeInferenceRow(row, tenancy) {
+    const source = {
+        ...row,
+        org_id: tenancy.org_id,
+        project_id: tenancy.project_id,
+        source_id: tenancy.source_id,
+    };
+    const out = {};
+    for (const col of exports.INFERENCE_WRITE_COLUMNS) {
+        const v = source[col];
+        out[col] = v !== undefined ? v : (ABSENT_DEFAULTS[col] ?? null);
+    }
+    return out;
+}
+/** merge=false fill: for each of `optional` that ANY row in the write carries,
+ * give the rows lacking it an explicit null, so rows that differ only in those
+ * spread-iff-present columns share one key set. A write where no row carries
+ * the column is returned key-for-key unchanged (byte-identical to pre-COV-1c). */
+function fillNulls(rows, optional) {
+    const carried = optional.filter((k) => rows.some((r) => r[k] !== undefined));
+    return rows.map((r) => {
+        const out = { ...r };
+        for (const k of carried)
+            if (out[k] === undefined)
+                out[k] = null;
+        return out;
+    });
+}
+/** The key set a row reaches PostgREST with (undefined-valued keys dropped, as
+ * JSON.stringify drops them), sorted — the PGRST102 comparison. */
+function wireKeySet(row) {
+    return Object.keys(row)
+        .filter((k) => row[k] !== undefined)
+        .sort()
+        .join(",");
+}
+/** merge=true split: group rows by key set, first-seen order, so each bulk POST
+ * is uniform without writing a null a merge upsert would apply. */
+function splitByKeySet(rows) {
+    const groups = new Map();
+    for (const r of rows) {
+        const key = wireKeySet(r);
+        const g = groups.get(key);
+        if (g === undefined)
+            groups.set(key, [r]);
+        else
+            g.push(r);
+    }
+    return [...groups.values()];
+}

package/dist/types/failures-teaching.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"failures-teaching.d.ts","sourceRoot":"","sources":["../../src/types/failures-teaching.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAE3D,2EAA2E;AAC3E,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,EAAE,EAAE,KAAK,GAAG,SAAS,GAAG,QAAQ,CAAC;IAC1C,+EAA+E;IAC/E,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC;IACzB,8DAA8D;IAC9D,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,KAAK,EAAE,YAAY,CAAC;IAC7B,kEAAkE;IAClE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB;4EACwE;IACxE,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,iEAAiE;IACjE,QAAQ,CAAC,eAAe,CAAC,EAAE,CAAC,OAAO,EAAE,UAAU,KAAK,eAAe,GAAG,IAAI,CAAC;CAC5E;AAID,eAAO,MAAM,gBAAgB,EAAE,QAAQ,CAAC,MAAM,CAAC,YAAY,EAAE,eAAe,CAAC,CAuK5E,CAAC;AAiBF;6EAC6E;AAC7E,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,KAAK,EAAE,YAAY,CAAC;IAC7B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,eAAe,EAAE,eAAe,GAAG,IAAI,CAAC;CAClD;AAED,wBAAgB,KAAK,CAAC,OAAO,EAAE,UAAU,GAAG,gBAAgB,CAU3D;AAED;gEACgE;AAChE,wBAAgB,wBAAwB,CAAC,OAAO,EAAE,UAAU,GAAG,MAAM,CAapE"}
+{"version":3,"file":"failures-teaching.d.ts","sourceRoot":"","sources":["../../src/types/failures-teaching.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAE3D,2EAA2E;AAC3E,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,EAAE,EAAE,KAAK,GAAG,SAAS,GAAG,QAAQ,CAAC;IAC1C,+EAA+E;IAC/E,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC;IACzB,8DAA8D;IAC9D,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,KAAK,EAAE,YAAY,CAAC;IAC7B,kEAAkE;IAClE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB;4EACwE;IACxE,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,iEAAiE;IACjE,QAAQ,CAAC,eAAe,CAAC,EAAE,CAAC,OAAO,EAAE,UAAU,KAAK,eAAe,GAAG,IAAI,CAAC;CAC5E;AAID,eAAO,MAAM,gBAAgB,EAAE,QAAQ,CAAC,MAAM,CAAC,YAAY,EAAE,eAAe,CAAC,CAqL5E,CAAC;AAiBF;6EAC6E;AAC7E,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,KAAK,EAAE,YAAY,CAAC;IAC7B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,eAAe,EAAE,eAAe,GAAG,IAAI,CAAC;CAClD;AAED,wBAAgB,KAAK,CAAC,OAAO,EAAE,UAAU,GAAG,gBAAgB,CAU3D;AAED;gEACgE;AAChE,wBAAgB,wBAAwB,CAAC,OAAO,EAAE,UAAU,GAAG,MAAM,CAapE"}

package/dist/types/failures-teaching.js

@@ -157,6 +157,17 @@ exports.FAILURE_TEACHING = {
                 "falling through, at the cost of one extra call.",
         }),
     },
+    limit_exceeded: {
+        class: "limit_exceeded",
+        what: "The run reached one of the limits you set on it (maxUsd, maxCalls, maxWallMs or " +
+            "maxRepeatToolCall), so ModelRig refused the next call in-process and ended the run as failed " +
+            "with failure_reason `limit:<which>` (e.g. `limit:max_usd`). Nothing was sent to a provider for the refused call.",
+        fixHint: "Look at the run before raising the limit: a stuck tool loop (the same tool with the same " +
+            "arguments again and again) or a runaway agent looks exactly like an under-sized limit. If the " +
+            "run was legitimately bigger, raise that one limit on run.start({ limits }) or " +
+            "rig.conversation(id, { limits }).",
+        docsUrl: `${DOCS_BASE}#limit_exceeded`,
+    },
 };
 /** Provider → the env var that keys it. Mirrors config.ts's PROVIDER_KEY_ENV;
  * kept as a local lookup so this table has no import cycle with config. */

package/dist/types/failures.d.ts

@@ -4,7 +4,7 @@
  * errors never cross the adapter boundary. Retry budgets are per-class and
  * non-fungible (see run/retry.ts).
  */
-export type FailureClass = "content_invalid" | "capacity_shed" | "network" | "refusal" | "cache_invalid" | "timeout" | "config_auth" | "budget_exhausted" | "invariant_violation" | "quality_rejected";
+export type FailureClass = "content_invalid" | "capacity_shed" | "network" | "refusal" | "cache_invalid" | "timeout" | "config_auth" | "budget_exhausted" | "invariant_violation" | "quality_rejected" | "limit_exceeded";
 export interface RigFailure {
     readonly class: FailureClass;
     readonly message: string;

package/dist/types/failures.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"failures.d.ts","sourceRoot":"","sources":["../../src/types/failures.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,MAAM,MAAM,YAAY,GACpB,iBAAiB,GACjB,eAAe,GACf,SAAS,GACT,SAAS,GACT,eAAe,GACf,SAAS,GACT,aAAa,GACb,kBAAkB,GAClB,qBAAqB,GACrB,kBAAkB,CAAC;AAEvB,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,KAAK,EAAE,YAAY,CAAC;IAC7B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,iEAAiE;IACjE,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,yEAAyE;IACzE,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC;IACzB,+EAA+E;IAC/E,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED,eAAO,MAAM,gBAAgB,EAAE,WAAW,CAAC,YAAY,CAGrD,CAAC;AAeH;kFACkF;AAClF,qBAAa,eAAgB,SAAQ,KAAK;IACxC,QAAQ,CAAC,OAAO,EAAE,UAAU,CAAC;gBAEjB,OAAO,EAAE,UAAU;CAKhC;AAED,wBAAgB,YAAY,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,UAAU,CAIhE"}
+{"version":3,"file":"failures.d.ts","sourceRoot":"","sources":["../../src/types/failures.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,MAAM,MAAM,YAAY,GACpB,iBAAiB,GACjB,eAAe,GACf,SAAS,GACT,SAAS,GACT,eAAe,GACf,SAAS,GACT,aAAa,GACb,kBAAkB,GAClB,qBAAqB,GACrB,kBAAkB,GAClB,gBAAgB,CAAC;AAErB,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,KAAK,EAAE,YAAY,CAAC;IAC7B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,iEAAiE;IACjE,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,yEAAyE;IACzE,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC;IACzB,+EAA+E;IAC/E,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED,eAAO,MAAM,gBAAgB,EAAE,WAAW,CAAC,YAAY,CAIrD,CAAC;AAgBH;kFACkF;AAClF,qBAAa,eAAgB,SAAQ,KAAK;IACxC,QAAQ,CAAC,OAAO,EAAE,UAAU,CAAC;gBAEjB,OAAO,EAAE,UAAU;CAKhC;AAED,wBAAgB,YAAY,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,UAAU,CAIhE"}

package/dist/types/failures.js

@@ -11,6 +11,7 @@ exports.isRigFailure = isRigFailure;
 exports.TERMINAL_CLASSES = new Set([
     "budget_exhausted",
     "invariant_violation",
+    "limit_exceeded",
 ]);
 const FAILURE_CLASSES = new Set([
     "content_invalid",
@@ -23,6 +24,7 @@ const FAILURE_CLASSES = new Set([
     "budget_exhausted",
     "invariant_violation",
     "quality_rejected",
+    "limit_exceeded",
 ]);
 /** Error subclass for the rare paths that must throw (config errors, terminal
  * failures surfacing to the caller). The failure travels intact on `.failure`. */

package/dist/types/provider.d.ts

@@ -5,6 +5,7 @@
  */
 import type { RigFailure } from "./failures";
 import type { AttemptMetaV1 } from "../telemetry/attempt-meta";
+import type { HistoryMessage } from "../run/messages";
 export type ProviderId = "gemini" | "openai" | "deepseek" | "anthropic" | "grok" | "deepinfra" | "fireworks" | "zai";
 /** Runtime enumeration of every ProviderId — the single list a raw-model lane
  * (`provider/model`) validates against (http gateway spec §3.3). Kept in sync
@@ -171,6 +172,17 @@ export interface AdapterRequest {
     readonly tools?: readonly ToolDefinition[];
     /** Tool-selection directive; only meaningful alongside `tools`. */
     readonly toolChoice?: ToolChoice;
+    /**
+     * ARC-β messages lane (agent-archetypes spec §4) — the conversation history,
+     * validated by `run/messages.ts`. Identical semantics in every adapter:
+     *  - ABSENT ⇒ today's single-turn code path, BYTE-IDENTICAL request (pinned by
+     *    adapters/one-turn-parity.test.ts).
+     *  - PRESENT ⇒ provider messages = system(`systemPrompt`) + map(history), and a
+     *    NON-EMPTY `userPrompt` is appended as a final user message (a route
+     *    template's final instruction); an empty `userPrompt` appends nothing.
+     * Per-family mapping lives in adapters/history-mapping.ts.
+     */
+    readonly history?: readonly HistoryMessage[];
 }
 export interface AdapterUsage {
     /**