modelrig 0.5.0 → 0.6.0

package/dist/run/quality-gate.js

@@ -0,0 +1,70 @@
+"use strict";
+/**
+ * The quality-gate seam (Q1, quality-gate spec §4.1). Extracted from run.ts —
+ * which sits at the 700-LOC cap — so the run loop gets ONE compact call site
+ * between `outcome.valid` and the accept branch.
+ *
+ * The gate evaluates a builder predicate on a schema-VALID output. It handles the
+ * awkward bits so the loop does not: awaiting an async verdict, normalizing an
+ * optional score/reason, and rejecting fail-closed when the predicate THROWS
+ * (spec §4.1 step 4, flag F2 — reject + warn ONCE per process). The loop keeps
+ * the control flow: a passing verdict takes the existing accept path (tagged),
+ * a failing one records `quality_rejected` and falls through on its own budget,
+ * never touching the repair rung.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.resetQualityGateWarningForTest = resetQualityGateWarningForTest;
+exports.evaluateQualityGate = evaluateQualityGate;
+exports.qualityTags = qualityTags;
+exports.qualityRejectedMessage = qualityRejectedMessage;
+/** One warning per process when a predicate throws (F2). Module-level so it
+ * latches across runs; `resetQualityGateWarningForTest` clears it under test. */
+let warnedOnThrow = false;
+/** Test-only: reset the once-per-process throw-warning latch so a test can
+ * assert the single-warning behavior deterministically. */
+function resetQualityGateWarningForTest() {
+    warnedOnThrow = false;
+}
+function finiteOrNull(n) {
+    return typeof n === "number" && Number.isFinite(n) ? n : null;
+}
+/**
+ * Evaluate a quality gate on a schema-valid output. Awaits an async verdict; a
+ * throwing predicate rejects fail-closed with a `qualityGate threw: …` reason
+ * and warns exactly once per process.
+ */
+async function evaluateQualityGate(gate, output, meta) {
+    try {
+        const verdict = await gate(output, meta);
+        return { pass: verdict.ok === true, score: finiteOrNull(verdict.score), reason: verdict.reason ?? null };
+    }
+    catch (err) {
+        const message = err instanceof Error ? err.message : String(err);
+        if (!warnedOnThrow) {
+            warnedOnThrow = true;
+            console.warn(`[modelrig] qualityGate threw — treating the output as REJECTED (fail-closed): ${message}. ` +
+                "A predicate must return { ok } rather than throw; this warning fires once per process.");
+        }
+        return { pass: false, score: null, reason: `qualityGate threw: ${message}` };
+    }
+}
+/** Render a score for a tag / message — a plain decimal string, or "" when null. */
+function scoreText(score) {
+    return score === null ? "" : String(score);
+}
+/** SDK-owned telemetry tags for the attempt row (spec §2): `quality` = pass|fail
+ * and, when a score exists, `quality_score` as a decimal string. Never carries
+ * `rung` — the recorder owns that and stamps it last. */
+function qualityTags(outcome) {
+    const tags = { quality: outcome.pass ? "pass" : "fail" };
+    if (outcome.score !== null)
+        tags.quality_score = scoreText(outcome.score);
+    return tags;
+}
+/** The `quality_rejected` failure message — carries the reason and score so a
+ * stuck engineer (and the exhausted-ladder error) sees WHY it was rejected. */
+function qualityRejectedMessage(outcome) {
+    const scorePart = outcome.score === null ? "" : ` (score ${scoreText(outcome.score)})`;
+    const reasonPart = outcome.reason === null ? "" : `: ${outcome.reason}`;
+    return `output met the schema but not the quality bar${scorePart}${reasonPart}`;
+}

package/dist/run/raw.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"raw.d.ts","sourceRoot":"","sources":["../../src/run/raw.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA0CG;AAuBH,OAAO,EAAiC,KAAK,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACrF,OAAO,KAAK,EACV,cAAc,EAGd,YAAY,EAGZ,UAAU,EACV,eAAe,EACf,WAAW,EACX,UAAU,EACV,cAAc,EACf,MAAM,mBAAmB,CAAC;AAC3B,OAAO,KAAK,EAAW,SAAS,EAAE,OAAO,EAAE,MAAM,gBAAgB,CAAC;AAClE,OAAO,KAAK,EAAkB,eAAe,EAAE,MAAM,UAAU,CAAC;AAChE,OAAO,KAAK,EAA+B,cAAc,EAAE,MAAM,oBAAoB,CAAC;AAEtF;;;sCAGsC;AACtC,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,QAAQ,EAAE,UAAU,CAAC;IAC9B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB;iFAC6E;IAC7E,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,IAAI,CAAC,EAAE,OAAO,CAAC;IACxB;;;;;iFAK6E;IAC7E,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;IAClC;;;6EAGyE;IACzE,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,KAAK,CAAC,EAAE,SAAS,cAAc,EAAE,CAAC;IAC3C,QAAQ,CAAC,UAAU,CAAC,EAAE,UAAU,CAAC;IACjC;;;;;;;0BAOsB;IACtB,QAAQ,CAAC,KAAK,CAAC,EAAE;QAAE,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IACxE;;;;;;;iDAO6C;IAC7C,QAAQ,CAAC,SAAS,CAAC,EAAE;QAAE,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAA;KAAE,CAAC;IACjD;;;;mFAI+E;IAC/E,QAAQ,CAAC,WAAW,CAAC,EAAE,WAAW,CAAC;IACnC;;;;qFAIiF;IACjF,QAAQ,CAAC,SAAS,CAAC,EAAE,eAAe,CAAC;IACrC;;;;;;;;sEAQkE;IAClE,QAAQ,CAAC,cAAc,CAAC,EAAE,aAAa,CAAC;CACzC;AAED,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,SAAS,EAAE,cAAc,CAAC;IACnC;;+EAE2E;IAC3E,QAAQ,CAAC,sBAAsB,CAAC,EAAE,MAAM,CAAC;IACzC;;sEAEkE;IAClE,QAAQ,CAAC,QAAQ,CAAC,EAAE,WAAW,GAAG,IAAI,CAAC;CACxC;AAiED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,WAAW,GAAG,IAAI,CAiDhE;AAED,4EAA4E;AAC5E,wBAAgB,eAAe,CAAC,SAAS,EAAE,YAAY,EAAE,KAAK,EAAE,WAAW,GAAG,cAAc,CAsC3F;AAoOD;wDACwD;AACxD,wBAAsB,MAAM,CAAC,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,WAAW,GAAG,OAAO,CAAC,SAAS,CAAC,CAYrF;AAcD;;;;;;;GAOG;AACH,wBAAgB,YAAY,CAAC,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,WAAW,GAAG,eAAe,CAiDlF"}
+{"version":3,"file":"raw.d.ts","sourceRoot":"","sources":["../../src/run/raw.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA0CG;AAuBH,OAAO,EAAiC,KAAK,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACrF,OAAO,KAAK,EACV,cAAc,EAGd,YAAY,EAGZ,UAAU,EACV,eAAe,EACf,WAAW,EACX,UAAU,EACV,cAAc,EACf,MAAM,mBAAmB,CAAC;AAC3B,OAAO,KAAK,EAAW,SAAS,EAAE,OAAO,EAAE,MAAM,gBAAgB,CAAC;AAGlE,OAAO,KAAK,EAAkB,eAAe,EAAE,MAAM,UAAU,CAAC;AAChE,OAAO,KAAK,EAA+B,cAAc,EAAE,MAAM,oBAAoB,CAAC;AAEtF;;;sCAGsC;AACtC,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,QAAQ,EAAE,UAAU,CAAC;IAC9B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB;iFAC6E;IAC7E,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,IAAI,CAAC,EAAE,OAAO,CAAC;IACxB;;;;;iFAK6E;IAC7E,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;IAClC;;;6EAGyE;IACzE,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,KAAK,CAAC,EAAE,SAAS,cAAc,EAAE,CAAC;IAC3C,QAAQ,CAAC,UAAU,CAAC,EAAE,UAAU,CAAC;IACjC;;;;;;;0BAOsB;IACtB,QAAQ,CAAC,KAAK,CAAC,EAAE;QAAE,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IACxE;;;;;;;iDAO6C;IAC7C,QAAQ,CAAC,SAAS,CAAC,EAAE;QAAE,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAA;KAAE,CAAC;IACjD;;;;mFAI+E;IAC/E,QAAQ,CAAC,WAAW,CAAC,EAAE,WAAW,CAAC;IACnC;;;;qFAIiF;IACjF,QAAQ,CAAC,SAAS,CAAC,EAAE,eAAe,CAAC;IACrC;;;;;;;;sEAQkE;IAClE,QAAQ,CAAC,cAAc,CAAC,EAAE,aAAa,CAAC;CACzC;AAED,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,SAAS,EAAE,cAAc,CAAC;IACnC;;+EAE2E;IAC3E,QAAQ,CAAC,sBAAsB,CAAC,EAAE,MAAM,CAAC;IACzC;;sEAEkE;IAClE,QAAQ,CAAC,QAAQ,CAAC,EAAE,WAAW,GAAG,IAAI,CAAC;CACxC;AAiED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,WAAW,GAAG,IAAI,CAiDhE;AAED,4EAA4E;AAC5E,wBAAgB,eAAe,CAAC,SAAS,EAAE,YAAY,EAAE,KAAK,EAAE,WAAW,GAAG,cAAc,CAsC3F;AAyPD;wDACwD;AACxD,wBAAsB,MAAM,CAAC,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,WAAW,GAAG,OAAO,CAAC,SAAS,CAAC,CAYrF;AAcD;;;;;;;GAOG;AACH,wBAAgB,YAAY,CAAC,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,WAAW,GAAG,eAAe,CAiDlF"}

package/dist/run/raw.js

@@ -61,6 +61,7 @@ const raw_support_1 = require("./raw-support");
 const failures_1 = require("../types/failures");
 const run_context_1 = require("../artifacts/run-context");
 const manifest_1 = require("../routes/manifest");
+const attempt_meta_1 = require("../telemetry/attempt-meta");
 /**
  * R1 — resolve the effective raw-lane timeout. An explicit `timeoutMs` always
  * wins; absent, the fallback is TIER-AWARE (`RAW_TIMEOUT_DEFAULT_MS`), because a
@@ -267,6 +268,7 @@ function recordRawRow(telemetry, p) {
         callId: p.callId,
         attemptSeq: 1,
         candidateIndex: 0,
+        meta: p.meta,
     };
     telemetry.record(row);
 }
@@ -308,6 +310,19 @@ function finalizeRaw(deps, input, result, latencyMs, step) {
     const requestedTier = input.serviceTier ?? "standard";
     // lane is SDK-owned and cannot be overridden by a caller-supplied tag.
     const tags = { ...(input.tags ?? {}), lane: "raw" };
+    // WI-1 (spec §2, §6.3 lane parity): the attempt envelope, built by the SAME
+    // producer + rendered-request canonicalization the routed lane uses. The raw
+    // lane never sends an output schema (unvalidated by design), so schema = null.
+    const declaredToolNames = input.tools?.map((t) => t.function.name);
+    const rawMeta = (usage) => (0, attempt_meta_1.summarizeAttemptMeta)({
+        ...(result.meta !== undefined ? { adapterMeta: result.meta } : {}),
+        renderedRequest: (0, attempt_meta_1.renderRequestForHash)({ system: input.systemPrompt, user: input.userPrompt, schema: null }),
+        outputText: result.ok ? result.text : null,
+        ...(declaredToolNames !== undefined ? { declaredToolNames } : {}),
+        provider: input.provider,
+        model: input.model,
+        ...(usage !== undefined ? { usage } : {}),
+    });
     // G1: mirror this raw inference into a ground-truth step (parity with the
     // routed lane's record-attempt). task = tags.step ?? provider/model (spec F1).
     // Fail-open is handled inside emitGroundTruthStep (buffer errors are swallowed).
@@ -345,6 +360,7 @@ function finalizeRaw(deps, input, result, latencyMs, step) {
             tags,
             pricingMissing,
             callId,
+            meta: rawMeta(result.usage),
             ...(input.cache !== undefined ? { cacheKey: input.cache.key } : {}),
         });
         emitStep(failId, result.failure.class);
@@ -374,6 +390,7 @@ function finalizeRaw(deps, input, result, latencyMs, step) {
         tags,
         pricingMissing,
         callId,
+        meta: rawMeta(result.usage),
         ...(input.cache !== undefined ? { cacheKey: input.cache.key } : {}),
     });
     emitStep(id, null);

package/dist/run/record-attempt.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"record-attempt.d.ts","sourceRoot":"","sources":["../../src/run/record-attempt.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAGH,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AACnD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AACjE,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AAE3C,OAAO,KAAK,EAAE,WAAW,EAAE,UAAU,EAAE,OAAO,EAAE,MAAM,gBAAgB,CAAC;AACvE,OAAO,KAAK,EAAgB,aAAa,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AAGtF,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAEpD,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,SAAS,EAAE,cAAc,CAAC;IACnC,QAAQ,CAAC,KAAK,EAAE,WAAW,CAAC;IAC5B,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC;IAC7B;;;gDAG4C;IAC5C,QAAQ,CAAC,MAAM,EAAE,eAAe,CAAC;IACjC,QAAQ,CAAC,aAAa,EAAE,OAAO,CAAC;IAChC,QAAQ,CAAC,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IACtC,kFAAkF;IAClF,QAAQ,CAAC,MAAM,EAAE,gBAAgB,GAAG,IAAI,CAAC;IACzC,QAAQ,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IACpC;;qFAEiF;IACjF,QAAQ,CAAC,KAAK,CAAC,EAAE,UAAU,CAAC,OAAO,CAAC,CAAC;IACrC;;;wEAGoE;IACpE,QAAQ,CAAC,kBAAkB,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;CAClD;AAED;;;;;GAKG;AACH,wBAAgB,MAAM,CACpB,OAAO,EAAE,gBAAgB,EACzB,WAAW,EAAE,OAAO,EACpB,cAAc,EAAE,MAAM,GAAG,IAAI,EAC7B,iBAAiB,EAAE,GAAG,CAAC,MAAM,CAAC,GAC7B,aAAa,CAUf;AAED;;yCAEyC;AACzC,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,iBAAiB,GAAG,CAAC,OAAO,EAAE,gBAAgB,KAAK,MAAM,CA+FlG"}
+{"version":3,"file":"record-attempt.d.ts","sourceRoot":"","sources":["../../src/run/record-attempt.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAGH,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AACnD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AACjE,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AAE3C,OAAO,KAAK,EAAE,WAAW,EAAE,UAAU,EAAE,OAAO,EAAE,MAAM,gBAAgB,CAAC;AACvE,OAAO,KAAK,EAAgB,aAAa,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AAGtF,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAGpD,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,SAAS,EAAE,cAAc,CAAC;IACnC,QAAQ,CAAC,KAAK,EAAE,WAAW,CAAC;IAC5B,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC;IAC7B;;;gDAG4C;IAC5C,QAAQ,CAAC,MAAM,EAAE,eAAe,CAAC;IACjC,QAAQ,CAAC,aAAa,EAAE,OAAO,CAAC;IAChC,QAAQ,CAAC,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IACtC,kFAAkF;IAClF,QAAQ,CAAC,MAAM,EAAE,gBAAgB,GAAG,IAAI,CAAC;IACzC,QAAQ,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IACpC;;qFAEiF;IACjF,QAAQ,CAAC,KAAK,CAAC,EAAE,UAAU,CAAC,OAAO,CAAC,CAAC;IACrC;;;wEAGoE;IACpE,QAAQ,CAAC,kBAAkB,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;CAClD;AAED;;;;;GAKG;AACH,wBAAgB,MAAM,CACpB,OAAO,EAAE,gBAAgB,EACzB,WAAW,EAAE,OAAO,EACpB,cAAc,EAAE,MAAM,GAAG,IAAI,EAC7B,iBAAiB,EAAE,GAAG,CAAC,MAAM,CAAC,GAC7B,aAAa,CAUf;AAED;;yCAEyC;AACzC,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,iBAAiB,GAAG,CAAC,OAAO,EAAE,gBAAgB,KAAK,MAAM,CAmHlG"}

package/dist/run/record-attempt.js

@@ -17,6 +17,7 @@ const node_crypto_1 = require("node:crypto");
 const failures_1 = require("../types/failures");
 const cache_stamp_1 = require("./cache-stamp");
 const cache_handle_1 = require("./cache-handle");
+const attempt_meta_1 = require("../telemetry/attempt-meta");
 /**
  * Classify a recorded row's ladder rung (R1 review, F1). `primaryDispatched`
  * carries the candidate indices already given a primary dispatch on this call —
@@ -91,6 +92,23 @@ function createRecordAttempt(deps) {
         // pre-dispatch terminal failure, then primary-vs-retry by whether this
         // candidate index was already dispatched on this call.
         const rung = rungOf(attempt, preDispatch, ladderKey.candidateIndex, primaryDispatched);
+        // WI-1 (spec §2): the metadata-safe attempt envelope. The single producer
+        // hashes the rendered request/output, computes cost components + context
+        // bucket, and enforces the classification rule; it never throws (a failure
+        // returns null — the row is byte-identical). Built from the adapter's native
+        // meta (metaInputs) plus THIS row's provider/model/usage.
+        const meta = (0, attempt_meta_1.summarizeAttemptMeta)({
+            ...(attempt.metaInputs ?? {}),
+            provider: attempt.candidate.provider,
+            model: attempt.candidate.model,
+            usage: {
+                tokensIn: attempt.tokensIn,
+                tokensOut: attempt.tokensOut,
+                tokensCached: attempt.tokensCached,
+                ...(attempt.tokensCacheWrite !== undefined ? { tokensCacheWrite: attempt.tokensCacheWrite } : {}),
+                ...(attempt.tokensCacheWrite1h !== undefined ? { tokensCacheWrite1h: attempt.tokensCacheWrite1h } : {}),
+            },
+        });
         const row = {
             id: (0, node_crypto_1.randomUUID)(),
             ts: new Date().toISOString(),
@@ -113,7 +131,9 @@ function createRecordAttempt(deps) {
             ttfbMs: attempt.ttfbMs ?? null,
             failureClass: attempt.failure?.class ?? null,
             attemptsJson: JSON.stringify(ledger.snapshot()),
-            tagsJson: JSON.stringify({ ...effectiveTags, rung }),
+            // `rung` is stamped LAST so a caller's extraTags (Q1 quality tags) can
+            // never override the recorder-owned rung.
+            tagsJson: JSON.stringify({ ...effectiveTags, ...attempt.extraTags, rung }),
             fingerprintCell: route.fingerprintCell,
             servedVariant,
             repairedBy: attempt.repairedBy ?? null,
@@ -121,6 +141,7 @@ function createRecordAttempt(deps) {
             callId: ladderKey.callId,
             attemptSeq: ladderKey.attemptSeq,
             candidateIndex: ladderKey.candidateIndex,
+            meta,
         };
         telemetry.record(row);
         // Mirror this inference into a ground-truth step attempt (fail-open — the

package/dist/run/routing-docs.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"routing-docs.d.ts","sourceRoot":"","sources":["../../src/run/routing-docs.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAItD,MAAM,MAAM,cAAc,GAAG,WAAW,GAAG,UAAU,GAAG,QAAQ,GAAG,WAAW,CAAC;AAE/E,MAAM,WAAW,gBAAgB;IAC/B,sEAAsE;IACtE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,6DAA6D;IAC7D,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B,yEAAyE;IACzE,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;CAC7B;AAED,MAAM,WAAW,aAAa;IAC5B,6EAA6E;IAC7E,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,MAAM,EAAE,cAAc,CAAC;IAChC,kBAAkB;IAClB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,uDAAuD;IACvD,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,kDAAkD;IAClD,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,QAAQ,CAAC,EAAE,gBAAgB,GAAG;QAAE,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAA;KAAE,CAAC;CAC3E;AAED,yCAAyC;AACzC,eAAO,MAAM,qBAAqB,EAAE,QAAQ,CAAC,MAAM,CAAC,cAAc,EAAE,MAAM,CAAC,CAK1E,CAAC;AAEF;;;;;;GAMG;AACH,eAAO,MAAM,gBAAgB,EAAE,SAAS,aAAa,EA0FpD,CAAC;AAwBF;;;;;;;;GAQG;AACH,wBAAgB,qBAAqB,CAAC,SAAS,CAAC,EAAE,WAAW,CAAC,MAAM,CAAC,GAAG,MAAM,CAoB7E;AAED;;;;+DAI+D;AAC/D,wBAAgB,iBAAiB,IAAI,SAAS,YAAY,EAAE,CAE3D;AA0BD;;;;;GAKG;AACH,wBAAgB,oBAAoB,IAAI,MAAM,CAW7C;AAED,gFAAgF;AAChF,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,YAAY,GAAG,MAAM,CAE5D"}
+{"version":3,"file":"routing-docs.d.ts","sourceRoot":"","sources":["../../src/run/routing-docs.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAItD,MAAM,MAAM,cAAc,GAAG,WAAW,GAAG,UAAU,GAAG,QAAQ,GAAG,WAAW,CAAC;AAE/E,MAAM,WAAW,gBAAgB;IAC/B,sEAAsE;IACtE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,6DAA6D;IAC7D,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B,yEAAyE;IACzE,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;CAC7B;AAED,MAAM,WAAW,aAAa;IAC5B,6EAA6E;IAC7E,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,MAAM,EAAE,cAAc,CAAC;IAChC,kBAAkB;IAClB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,uDAAuD;IACvD,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,kDAAkD;IAClD,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,QAAQ,CAAC,EAAE,gBAAgB,GAAG;QAAE,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAA;KAAE,CAAC;CAC3E;AAED,yCAAyC;AACzC,eAAO,MAAM,qBAAqB,EAAE,QAAQ,CAAC,MAAM,CAAC,cAAc,EAAE,MAAM,CAAC,CAK1E,CAAC;AAEF;;;;;;GAMG;AACH,eAAO,MAAM,gBAAgB,EAAE,SAAS,aAAa,EAiGpD,CAAC;AAwBF;;;;;;;;GAQG;AACH,wBAAgB,qBAAqB,CAAC,SAAS,CAAC,EAAE,WAAW,CAAC,MAAM,CAAC,GAAG,MAAM,CAoB7E;AAED;;;;+DAI+D;AAC/D,wBAAgB,iBAAiB,IAAI,SAAS,YAAY,EAAE,CAE3D;AA0BD;;;;;GAKG;AACH,wBAAgB,oBAAoB,IAAI,MAAM,CAW7C;AAED,gFAAgF;AAChF,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,YAAY,GAAG,MAAM,CAE5D"}

package/dist/run/routing-docs.js

@@ -38,10 +38,17 @@ exports.ROUTING_BOUNDARY = [
     {
         id: "B1",
         status: "not_built",
-        capability: "Quality / value-accuracy gate in the ladder",
-        statement: "Fall-through is triggered by structure and infrastructure only; no builder-defined predicate or judge can reject a schema-valid output at run time — value accuracy exists offline, in bake-offs.",
-        tracking: "customer request on file (2026-08-21); not scheduled",
-        tripwire: { file: "src/types/route.ts", mustNotMatch: /qualityGate|"judged"/ },
+        capability: "Route-declared judge (hosted lane)",
+        statement: "The SDK-lane `qualityGate` predicate (it rejects a schema-valid output as `quality_rejected`) ships; a route-DECLARED judge that runs on the hosted lane — a `judge:` block in the bundle with a rubric — is not built, and the bake-off-scoped `bakeoff.judge` (offline scoring) (which only measures value accuracy during a bake-off) is a separate SDK feature that never serves the hosted lane.",
+        tracking: "Route-declared judge — customer request on file (2026-08-21); follows the SDK predicate",
+        // The SDK predicate flipped this entry: adding `qualityGate` to route.ts would
+        // fire the old /qualityGate|"judged"/ tripwire, so it watches for the
+        // HOSTED declared-judge shape — a `judge?: JudgePolicy` field or a judge block
+        // carrying a `rubric` (spec §3). RB-1 added `bakeoff.judge?: { model,
+        // maxSamples }` (no rubric, nested in BakeoffConfig) — deliberately NOT the
+        // hosted judge, so the regex requires the rubric/JudgePolicy shape to avoid a
+        // false positive. `judgedBy:` and prose mentions of "judge" still do not match.
+        tripwire: { file: "src/types/route.ts", mustNotMatch: /\bjudge\??\s*:\s*JudgePolicy\b|\brubric\s*:/ },
     },
     {
         id: "B2",

package/dist/run/run.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"run.d.ts","sourceRoot":"","sources":["../../src/run/run.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAMrD,OAAO,KAAK,EAAE,eAAe,EAAgB,MAAM,mBAAmB,CAAC;AAGvE,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAEtD,OAAO,KAAK,EAAW,UAAU,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AACrE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AACzD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AACzD,OAAO,KAAK,EAAE,gBAAgB,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAS3D,OAAO,KAAK,EAAE,cAAc,EAAoC,MAAM,aAAa,CAAC;AAUpF,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAKlD,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAC;AAEtE,MAAM,WAAW,OAAO;IACtB,QAAQ,CAAC,MAAM,EAAE,YAAY,CAAC;IAC9B,QAAQ,CAAC,QAAQ,EAAE,WAAW,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC;IACxD,QAAQ,CAAC,SAAS,EAAE,cAAc,CAAC;IACnC,QAAQ,CAAC,YAAY,EAAE,gBAAgB,CAAC;IACxC,+EAA+E;IAC/E,QAAQ,CAAC,iBAAiB,CAAC,EAAE,MAAM,CAAC;IACpC;;gDAE4C;IAC5C,QAAQ,CAAC,sBAAsB,CAAC,EAAE,MAAM,CAAC;IACzC,0EAA0E;IAC1E,QAAQ,CAAC,QAAQ,CAAC,EAAE,WAAW,GAAG,IAAI,CAAC;IACvC;2EACuE;IACvE,QAAQ,CAAC,QAAQ,CAAC,EAAE,YAAY,GAAG,IAAI,CAAC;IACxC;;0BAEsB;IACtB,QAAQ,CAAC,MAAM,CAAC,EAAE,cAAc,GAAG,IAAI,CAAC;IACxC,qDAAqD;IACrD,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAC/C;;;mFAG+E;IAC/E,QAAQ,CAAC,aAAa,CAAC,EAAE,eAAe,CAAC;IACzC;;;;;uDAKmD;IACnD,QAAQ,CAAC,QAAQ,CAAC,EAAE,oBAAoB,GAAG,IAAI,CAAC;IAChD;;;;2EAIuE;IACvE,QAAQ,CAAC,IAAI,CAAC,EAAE,OAAO,CAAC;CACzB;AAsBD,wBAAsB,GAAG,CAAC,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,GAAG,OAAO,CAAC,SAAS,CAAC,CAgkBhG"}
+{"version":3,"file":"run.d.ts","sourceRoot":"","sources":["../../src/run/run.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAMrD,OAAO,KAAK,EAAE,eAAe,EAAgB,MAAM,mBAAmB,CAAC;AAGvE,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAEtD,OAAO,KAAK,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAC5D,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AACzD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AACzD,OAAO,KAAK,EAAE,gBAAgB,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAS3D,OAAO,KAAK,EAAE,cAAc,EAAoC,MAAM,aAAa,CAAC;AAWpF,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAOlD,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAC;AAEtE,MAAM,WAAW,OAAO;IACtB,QAAQ,CAAC,MAAM,EAAE,YAAY,CAAC;IAC9B,QAAQ,CAAC,QAAQ,EAAE,WAAW,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC;IACxD,QAAQ,CAAC,SAAS,EAAE,cAAc,CAAC;IACnC,QAAQ,CAAC,YAAY,EAAE,gBAAgB,CAAC;IACxC,+EAA+E;IAC/E,QAAQ,CAAC,iBAAiB,CAAC,EAAE,MAAM,CAAC;IACpC;;gDAE4C;IAC5C,QAAQ,CAAC,sBAAsB,CAAC,EAAE,MAAM,CAAC;IACzC,0EAA0E;IAC1E,QAAQ,CAAC,QAAQ,CAAC,EAAE,WAAW,GAAG,IAAI,CAAC;IACvC;2EACuE;IACvE,QAAQ,CAAC,QAAQ,CAAC,EAAE,YAAY,GAAG,IAAI,CAAC;IACxC;;0BAEsB;IACtB,QAAQ,CAAC,MAAM,CAAC,EAAE,cAAc,GAAG,IAAI,CAAC;IACxC,qDAAqD;IACrD,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAC/C;;;mFAG+E;IAC/E,QAAQ,CAAC,aAAa,CAAC,EAAE,eAAe,CAAC;IACzC;;;;;uDAKmD;IACnD,QAAQ,CAAC,QAAQ,CAAC,EAAE,oBAAoB,GAAG,IAAI,CAAC;IAChD;;;;2EAIuE;IACvE,QAAQ,CAAC,IAAI,CAAC,EAAE,OAAO,CAAC;CACzB;AAsBD,wBAAsB,GAAG,CAAC,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,GAAG,OAAO,CAAC,SAAS,CAAC,CAqkBhG"}

package/dist/run/run.js

@@ -26,6 +26,8 @@ const validate_1 = require("./validate");
 const dispatch_1 = require("./dispatch");
 const record_attempt_1 = require("./record-attempt");
 const ladder_key_1 = require("./ladder-key");
+const quality_gate_1 = require("./quality-gate");
+const accept_1 = require("./accept");
 const run_context_1 = require("../artifacts/run-context");
 const capture_write_1 = require("./capture-write");
 /** Phase 1 prompt convention: the bundle's system template carries the whole
@@ -171,6 +173,7 @@ async function run(deps, routeName, opts) {
                 failure: result.failure,
                 repairedBy,
                 pricingMissing: repairFailurePricingMissing,
+                metaInputs: (0, dispatch_1.attemptMetaInputs)({ systemPrompt, userDirective: REPAIR_DIRECTIVE, outputSchema: route.outputSchema, result }),
             });
             if (failures_1.TERMINAL_CLASSES.has(result.failure.class)) {
                 throw new failures_1.RigFailureError(result.failure);
@@ -202,6 +205,7 @@ async function run(deps, routeName, opts) {
             failure,
             repairedBy,
             pricingMissing: repairPricingMissing,
+            metaInputs: (0, dispatch_1.attemptMetaInputs)({ systemPrompt, userDirective: REPAIR_DIRECTIVE, outputSchema: route.outputSchema, result }),
         });
         captureAttempt(inferenceId, result.text);
         if (!outcome.valid) {
@@ -386,47 +390,45 @@ async function run(deps, routeName, opts) {
                     servedVariant,
                     pricingMissing,
                     callId: ladder.callId,
+                    metaInputs: (0, dispatch_1.attemptMetaInputs)({ systemPrompt, userDirective: USER_DIRECTIVE, outputSchema: route.outputSchema, result, tools: opts.tools }),
                 });
             }
             const outcome = (0, validate_1.validateOutput)(route, result.text);
+            const metaInputs = (0, dispatch_1.attemptMetaInputs)({ systemPrompt, userDirective: USER_DIRECTIVE, outputSchema: route.outputSchema, result, tools: opts.tools });
             if (outcome.valid) {
-                const inferenceId = recordAttempt({
-                    candidate,
-                    servedTier: result.usage.servedTier,
-                    tokensIn: result.usage.tokensIn,
-                    tokensOut: result.usage.tokensOut,
-                    tokensCached: result.usage.tokensCached,
-                    tokensCacheWrite: result.usage.tokensCacheWrite ?? 0,
-                    tokensCacheWrite1h: result.usage.tokensCacheWrite1h ?? 0,
-                    costUsd,
-                    latencyMs,
-                    ...(result.usage.ttfbMs !== undefined ? { ttfbMs: result.usage.ttfbMs } : {}),
-                    failure: null,
-                    pricingMissing,
-                });
+                // Q1 quality gate (spec §4.1): a schema-valid output must still clear the
+                // builder's bar before it is accepted. Tool-call turns never reach here;
+                // a `schema: null` route gates on the parsed JSON just the same. Gate
+                // logic (async await, fail-closed throw, tag/message shaping) lives in
+                // ./quality-gate.ts so this stays ONE seam.
+                const gateMeta = { route: route.route, provider: candidate.provider, model: candidate.model,
+                    candidateIndex: iter.index, attemptSeq: ladder.peekNextSeq(), servedVariant };
+                const gate = opts.qualityGate === undefined
+                    ? null
+                    : await (0, quality_gate_1.evaluateQualityGate)(opts.qualityGate, outcome.parsed, gateMeta);
+                if (gate !== null && !gate.pass) {
+                    // Rejected on quality: its OWN class + budget; the repair rung is NEVER
+                    // entered from here (spec §4.1 step 3). The rejected text is captured
+                    // so it stays replayable.
+                    const failure = { class: "quality_rejected",
+                        message: (0, quality_gate_1.qualityRejectedMessage)(gate), provider: candidate.provider, model: candidate.model };
+                    const rejectedId = recordAttempt((0, accept_1.successAttemptRow)(candidate, result.usage, costUsd, latencyMs, pricingMissing, failure, metaInputs, (0, quality_gate_1.qualityTags)(gate)));
+                    captureAttempt(rejectedId, result.text);
+                    lastFailure = failure;
+                    if (ledger.consume("quality_rejected"))
+                        continue; // re-sample the SAME candidate
+                    candidate = nextCandidate();
+                    continue;
+                }
+                const acceptTags = gate !== null ? (0, quality_gate_1.qualityTags)(gate) : undefined;
+                const inferenceId = recordAttempt((0, accept_1.successAttemptRow)(candidate, result.usage, costUsd, latencyMs, pricingMissing, null, metaInputs, acceptTags));
                 captureAttempt(inferenceId, result.text);
-                const meta = {
-                    inferenceId,
-                    route: route.route,
-                    routeVersion: route.version,
-                    provider: candidate.provider,
-                    model: candidate.model,
-                    requestedTier: route.policy.tier,
-                    servedTier: result.usage.servedTier,
-                    tokensIn: result.usage.tokensIn,
-                    tokensOut: result.usage.tokensOut,
-                    tokensCached: result.usage.tokensCached,
-                    costEstimateUsd: costUsd,
-                    latencyMs,
-                    validated: true,
-                    attemptsByClass: ledger.snapshot(),
-                    servedVariant,
-                    repairedBy: null,
-                    callId: ladder.callId,
-                    ...(injectedSources !== null
-                        ? { citations: (0, grounding_1.extractCitations)(result.text, injectedSources) }
-                        : {}),
-                };
+                const meta = (0, accept_1.buildSuccessMeta)({
+                    inferenceId, route, candidate, usage: result.usage, costUsd, latencyMs,
+                    attemptsByClass: ledger.snapshot(), servedVariant, callId: ladder.callId,
+                    ...(injectedSources !== null ? { citations: (0, grounding_1.extractCitations)(result.text, injectedSources) } : {}),
+                    ...(gate !== null ? { quality: { score: gate.score, verdict: "pass", judgedBy: null } } : {}),
+                });
                 return { output: outcome.parsed, meta };
             }
             // Schema-invalid output — a real (billed) attempt that failed.
@@ -449,6 +451,7 @@ async function run(deps, routeName, opts) {
                 ...(result.usage.ttfbMs !== undefined ? { ttfbMs: result.usage.ttfbMs } : {}),
                 failure,
                 pricingMissing,
+                metaInputs, // computed once above (same `result`) — reused across valid/invalid
             });
             captureAttempt(invalidId, result.text);
             lastFailure = failure;
@@ -501,6 +504,7 @@ async function run(deps, routeName, opts) {
             ...(result.usage?.ttfbMs !== undefined ? { ttfbMs: result.usage.ttfbMs } : {}),
             failure,
             pricingMissing: failurePricingMissing,
+            metaInputs: (0, dispatch_1.attemptMetaInputs)({ systemPrompt, userDirective: USER_DIRECTIVE, outputSchema: route.outputSchema, result, tools: opts.tools }),
         });
         if (failures_1.TERMINAL_CLASSES.has(failure.class)) {
             throw new failures_1.RigFailureError(failure);

package/dist/settings/index.d.ts

@@ -3,7 +3,7 @@
  * Re-exported from the SDK entrypoint so `index.ts` stays under the LOC cap and
  * the settings surface has one home.
  */
-export { createTaskSettingsResolver, effectiveCapture, DEFAULT_TASK_SETTINGS, } from "./task-settings";
+export { createTaskSettingsResolver, effectiveCapture, effectiveScrubMode, DEFAULT_TASK_SETTINGS, } from "./task-settings";
 export type { TaskSettings, TaskSettingsResolver, TaskSettingsFetcher } from "./task-settings";
 export { createApiTaskSettingsFetcher, startApiSettings } from "./api-fetcher";
 export type { ApiTaskSettingsFetcherConfig } from "./api-fetcher";

package/dist/settings/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/settings/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EACL,0BAA0B,EAC1B,gBAAgB,EAChB,qBAAqB,GACtB,MAAM,iBAAiB,CAAC;AACzB,YAAY,EAAE,YAAY,EAAE,oBAAoB,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAC;AAC/F,OAAO,EAAE,4BAA4B,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AAC/E,YAAY,EAAE,4BAA4B,EAAE,MAAM,eAAe,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/settings/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EACL,0BAA0B,EAC1B,gBAAgB,EAChB,kBAAkB,EAClB,qBAAqB,GACtB,MAAM,iBAAiB,CAAC;AACzB,YAAY,EAAE,YAAY,EAAE,oBAAoB,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAC;AAC/F,OAAO,EAAE,4BAA4B,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AAC/E,YAAY,EAAE,4BAA4B,EAAE,MAAM,eAAe,CAAC"}

package/dist/settings/index.js

@@ -5,10 +5,11 @@
  * the settings surface has one home.
  */
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.startApiSettings = exports.createApiTaskSettingsFetcher = exports.DEFAULT_TASK_SETTINGS = exports.effectiveCapture = exports.createTaskSettingsResolver = void 0;
+exports.startApiSettings = exports.createApiTaskSettingsFetcher = exports.DEFAULT_TASK_SETTINGS = exports.effectiveScrubMode = exports.effectiveCapture = exports.createTaskSettingsResolver = void 0;
 var task_settings_1 = require("./task-settings");
 Object.defineProperty(exports, "createTaskSettingsResolver", { enumerable: true, get: function () { return task_settings_1.createTaskSettingsResolver; } });
 Object.defineProperty(exports, "effectiveCapture", { enumerable: true, get: function () { return task_settings_1.effectiveCapture; } });
+Object.defineProperty(exports, "effectiveScrubMode", { enumerable: true, get: function () { return task_settings_1.effectiveScrubMode; } });
 Object.defineProperty(exports, "DEFAULT_TASK_SETTINGS", { enumerable: true, get: function () { return task_settings_1.DEFAULT_TASK_SETTINGS; } });
 var api_fetcher_1 = require("./api-fetcher");
 Object.defineProperty(exports, "createApiTaskSettingsFetcher", { enumerable: true, get: function () { return api_fetcher_1.createApiTaskSettingsFetcher; } });

package/dist/settings/task-settings.d.ts

@@ -88,4 +88,14 @@ export declare function createTaskSettingsResolver(config: TaskSettingsResolverC
  * because there is no control-plane row to resolve.
  */
 export declare function effectiveCapture(resolver: TaskSettingsResolver | null, task: string | undefined, yamlCapture: boolean): boolean;
+/**
+ * The EFFECTIVE scrub mode for an artifact, given the task's configured mode and
+ * the artifact's `data_classification` (screening SC-0 S8-c). A `pii`/`phi`
+ * artifact resolves a FLOOR of `redact` — content carrying PII/PHI is never
+ * uploaded verbatim just because the task's mode was `off`/`detect`. A stronger
+ * configured mode wins: `block` stays `block` (block ≥ redact — it refuses the
+ * upload entirely). A non-sensitive (or absent) classification leaves the
+ * configured mode untouched. Pure; the single place the floor is spelled.
+ */
+export declare function effectiveScrubMode(configured: ScrubMode, classification: string | null | undefined): ScrubMode;
 //# sourceMappingURL=task-settings.d.ts.map

package/dist/settings/task-settings.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"task-settings.d.ts","sourceRoot":"","sources":["../../src/settings/task-settings.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAEH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAE3C;0EAC0E;AAC1E,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,2EAA2E;IAC3E,QAAQ,CAAC,iBAAiB,EAAE,OAAO,GAAG,IAAI,CAAC;IAC3C,QAAQ,CAAC,gBAAgB,EAAE,OAAO,CAAC;IACnC,QAAQ,CAAC,KAAK,EAAE,SAAS,CAAC;CAC3B;AAED;;;uCAGuC;AACvC,eAAO,MAAM,qBAAqB,EAAE,YAKnC,CAAC;AAEF;;;2EAG2E;AAC3E,MAAM,WAAW,mBAAmB;IAClC,KAAK,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,GAAG,IAAI,CAAC,CAAC;CACnD;AAED,MAAM,WAAW,oBAAoB;IACnC;sFACkF;IAClF,GAAG,CAAC,IAAI,EAAE,MAAM,GAAG,YAAY,CAAC;IAChC;oEACgE;IAChE,QAAQ,IAAI,WAAW,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;IAC9C;;gEAE4D;IAC5D,KAAK,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B;2EACuE;IACvE,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IACzB,4CAA4C;IAC5C,KAAK,IAAI,IAAI,CAAC;IACd,2CAA2C;IAC3C,IAAI,IAAI,IAAI,CAAC;CACd;AAED,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,OAAO,EAAE,mBAAmB,CAAC;IACtC;gFAC4E;IAC5E,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,yDAAyD;IACzD,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,IAAI,EAAE,EAAE,EAAE,MAAM,KAAK,UAAU,CAAC,OAAO,WAAW,CAAC,CAAC;IACtF,QAAQ,CAAC,aAAa,CAAC,EAAE,CAAC,MAAM,EAAE,UAAU,CAAC,OAAO,WAAW,CAAC,KAAK,IAAI,CAAC;CAC3E;AAED;;;;;GAKG;AACH,wBAAgB,0BAA0B,CACxC,MAAM,EAAE,0BAA0B,GACjC,oBAAoB,CA4DtB;AAED;;;;;;;GAOG;AACH,wBAAgB,gBAAgB,CAC9B,QAAQ,EAAE,oBAAoB,GAAG,IAAI,EACrC,IAAI,EAAE,MAAM,GAAG,SAAS,EACxB,WAAW,EAAE,OAAO,GACnB,OAAO,CAGT"}
+{"version":3,"file":"task-settings.d.ts","sourceRoot":"","sources":["../../src/settings/task-settings.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAEH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAG3C;0EAC0E;AAC1E,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,2EAA2E;IAC3E,QAAQ,CAAC,iBAAiB,EAAE,OAAO,GAAG,IAAI,CAAC;IAC3C,QAAQ,CAAC,gBAAgB,EAAE,OAAO,CAAC;IACnC,QAAQ,CAAC,KAAK,EAAE,SAAS,CAAC;CAC3B;AAED;;;uCAGuC;AACvC,eAAO,MAAM,qBAAqB,EAAE,YAKnC,CAAC;AAEF;;;2EAG2E;AAC3E,MAAM,WAAW,mBAAmB;IAClC,KAAK,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,GAAG,IAAI,CAAC,CAAC;CACnD;AAED,MAAM,WAAW,oBAAoB;IACnC;sFACkF;IAClF,GAAG,CAAC,IAAI,EAAE,MAAM,GAAG,YAAY,CAAC;IAChC;oEACgE;IAChE,QAAQ,IAAI,WAAW,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;IAC9C;;gEAE4D;IAC5D,KAAK,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B;2EACuE;IACvE,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IACzB,4CAA4C;IAC5C,KAAK,IAAI,IAAI,CAAC;IACd,2CAA2C;IAC3C,IAAI,IAAI,IAAI,CAAC;CACd;AAED,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,OAAO,EAAE,mBAAmB,CAAC;IACtC;gFAC4E;IAC5E,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,yDAAyD;IACzD,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,IAAI,EAAE,EAAE,EAAE,MAAM,KAAK,UAAU,CAAC,OAAO,WAAW,CAAC,CAAC;IACtF,QAAQ,CAAC,aAAa,CAAC,EAAE,CAAC,MAAM,EAAE,UAAU,CAAC,OAAO,WAAW,CAAC,KAAK,IAAI,CAAC;CAC3E;AAED;;;;;GAKG;AACH,wBAAgB,0BAA0B,CACxC,MAAM,EAAE,0BAA0B,GACjC,oBAAoB,CA4DtB;AAED;;;;;;;GAOG;AACH,wBAAgB,gBAAgB,CAC9B,QAAQ,EAAE,oBAAoB,GAAG,IAAI,EACrC,IAAI,EAAE,MAAM,GAAG,SAAS,EACxB,WAAW,EAAE,OAAO,GACnB,OAAO,CAGT;AAED;;;;;;;;GAQG;AACH,wBAAgB,kBAAkB,CAChC,UAAU,EAAE,SAAS,EACrB,cAAc,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GACxC,SAAS,CAIX"}

package/dist/settings/task-settings.js

@@ -27,6 +27,8 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.DEFAULT_TASK_SETTINGS = void 0;
 exports.createTaskSettingsResolver = createTaskSettingsResolver;
 exports.effectiveCapture = effectiveCapture;
+exports.effectiveScrubMode = effectiveScrubMode;
+const classification_1 = require("../artifacts/classification");
 /** The safe floor for a task the control plane has not answered for yet: capture
  * OFF, artifacts inherit the default, content OFF, scrub the schema default. A
  * run that reaches the cache before the first fetch lands sees this — never a
@@ -114,3 +116,18 @@ function effectiveCapture(resolver, task, yamlCapture) {
         return yamlCapture;
     return resolver.get(task).capture;
 }
+/**
+ * The EFFECTIVE scrub mode for an artifact, given the task's configured mode and
+ * the artifact's `data_classification` (screening SC-0 S8-c). A `pii`/`phi`
+ * artifact resolves a FLOOR of `redact` — content carrying PII/PHI is never
+ * uploaded verbatim just because the task's mode was `off`/`detect`. A stronger
+ * configured mode wins: `block` stays `block` (block ≥ redact — it refuses the
+ * upload entirely). A non-sensitive (or absent) classification leaves the
+ * configured mode untouched. Pure; the single place the floor is spelled.
+ */
+function effectiveScrubMode(configured, classification) {
+    if (classification == null || !classification_1.SENSITIVE_CLASSIFICATIONS.has(classification))
+        return configured;
+    // Sensitive tier: never below `redact`. `block` is stronger and stays.
+    return configured === "block" ? "block" : "redact";
+}

package/dist/telemetry/attempt-meta.d.ts

@@ -0,0 +1,178 @@
+/**
+ * WI-1 Metadata Capture — the attempt envelope (spec §2–§3, wired 2026-08-22).
+ *
+ * Classification rule (the load-bearing invariant): every field is an enum, a
+ * number, a boolean, a hash, or an identifier — NEVER free text, never
+ * content. `summarizeAttemptMeta` is the ONLY producer (same discipline as
+ * `summarizeScrub` / `summarizeMask`); it must never throw into the run loop
+ * (absent envelope = unknown, byte-identical run result). Adapters expose only
+ * NATIVE fields as `AdapterResult.meta` (adapters/attempt-meta-map.ts); this
+ * producer adds the hashes, byte/char sizes, context bucket, and cost
+ * components, hashes undeclared tool names, and drops any string that is not an
+ * enum/identifier/hash (length > 128 or containing whitespace).
+ */
+import type { AdapterUsage, ProviderId } from "../types/provider";
+export type FinishReason = "stop" | "length" | "tool_calls" | "content_filter" | "refusal" | "error" | "other";
+export type ContextBucket = "≤4k" | "≤16k" | "≤64k" | "≤200k" | ">200k";
+/** D1 egress receipt — shape RESERVED here; populated by the D1 mission. */
+export interface EgressReceiptV1 {
+    readonly endpoint?: string;
+    readonly zdr?: {
+        readonly designated: boolean;
+        readonly source?: string;
+        readonly as_of?: string;
+    };
+    readonly cache_retention_s?: number;
+    readonly search_provider?: string;
+    readonly tool_calls?: number;
+}
+export interface AttemptMetaV1 {
+    readonly v: 1;
+    readonly finish_reason?: FinishReason;
+    readonly refusal?: boolean;
+    readonly response_chars?: number;
+    readonly request_bytes?: number;
+    readonly response_bytes?: number;
+    readonly streaming?: boolean;
+    readonly sampling?: {
+        readonly temperature?: number;
+        readonly top_p?: number;
+        readonly max_output_tokens?: number;
+    };
+    readonly reasoning_tokens?: number;
+    /** `name` = declared tool id; undeclared names are hashed by the producer. */
+    readonly tool_calls?: readonly {
+        readonly name: string;
+        readonly count: number;
+    }[];
+    readonly grounding?: {
+        readonly citations?: number;
+        readonly search_provider?: string;
+    };
+    readonly model_snapshot?: string;
+    readonly provider_request_id?: string;
+    readonly http_status?: number;
+    readonly error_code?: string;
+    readonly region?: string;
+    readonly cost?: {
+        readonly in?: number;
+        readonly out?: number;
+        readonly cache_read?: number;
+        readonly cache_write?: number;
+        readonly other?: number;
+    };
+    readonly repair_count?: number;
+    /** sha256 of the RENDERED request — a hash, never content. */
+    readonly input_hash?: string;
+    readonly output_hash?: string;
+    readonly context_bucket?: ContextBucket;
+    readonly egress?: EgressReceiptV1;
+}
+export interface RunMetaV1 {
+    readonly v: 1;
+    readonly pipeline_sha?: string;
+    readonly config_hash?: string;
+    readonly trigger?: "cron" | "api" | "manual" | "replay" | "other";
+    readonly actor?: string;
+    readonly input_hash?: string;
+}
+/**
+ * The per-attempt content the RECORDER carries from the run/raw loop to the
+ * producer: the adapter's native meta plus the rendered request / output text /
+ * declared tool names. Threaded on `AttemptTelemetry.metaInputs` (routed lane)
+ * or assembled inline (raw lane). Content is used ONLY to compute hashes/sizes —
+ * it is never stored. Both lanes build `renderedRequest` via
+ * {@link renderRequestForHash} so the input_hash is lane-identical (spec §6.3).
+ */
+export interface AttemptMetaSource {
+    readonly adapterMeta?: Partial<AttemptMetaV1>;
+    readonly renderedRequest?: string;
+    readonly outputText?: string | null;
+    readonly declaredToolNames?: readonly string[];
+}
+/** Canonicalize the RENDERED request for `input_hash` (spec §2) — system + user
+ * + schema, joined the SAME way in both lanes so a routed and a raw call with
+ * the identical prompt+schema hash identically (lane parity, spec §6.3). The
+ * schema is JSON-stringified with sorted keys is NOT required (v1): the loader
+ * emits a stable object and JSON.stringify is deterministic for it. */
+export declare function renderRequestForHash(parts: {
+    readonly system?: string;
+    readonly user?: string;
+    readonly schema?: object | null;
+}): string;
+/** Inputs the producer may see. Adapters expose `Partial<AttemptMetaV1>` as
+ * `AdapterResult.meta` (native fields only); the producer adds hashes, byte
+ * sizes, context bucket, cost, and applies the classification rule. */
+export interface AttemptMetaInputs {
+    readonly adapterMeta?: Partial<AttemptMetaV1>;
+    /** The RENDERED request (system + user + schema) — hashed, never stored. */
+    readonly renderedRequest?: string;
+    /** The raw model output — hashed + measured, never stored. */
+    readonly outputText?: string | null;
+    /** Declared tool ids; any tool_call name NOT in this set is hashed. */
+    readonly declaredToolNames?: readonly string[];
+    /** For the cost components (via src/run/cost.ts). */
+    readonly provider?: ProviderId;
+    readonly model?: string;
+    readonly usage?: Pick<AdapterUsage, "tokensIn" | "tokensOut" | "tokensCached" | "tokensCacheWrite" | "tokensCacheWrite1h">;
+    /** Whether the caller streamed deltas (run loop stream() path). */
+    readonly streaming?: boolean;
+    /** Repair-rung count carried by the run loop, if any. */
+    readonly repairCount?: number;
+}
+/** The classification-rule string test (spec §2, §5 wire backstop): a value is
+ * an ENUM / IDENTIFIER / HASH only if it is at most 128 chars AND contains no
+ * whitespace. Anything else is free text and is dropped. Shared by the producer
+ * (SDK) and the server ingest backstop (`sanitizeMetaForWire`), so both planes
+ * apply the identical rule. */
+export declare function isMetaSafeString(v: unknown): v is string;
+/**
+ * Deep-clean an inbound `meta` envelope at the ingest boundary (spec §5): walk
+ * the object and DROP every string leaf that fails {@link isMetaSafeString}
+ * (too long or containing whitespace), counting each drop. Numbers, booleans,
+ * nulls, and safe strings pass through; nested objects/arrays recurse. The
+ * server-side belt for the SDK's classification rule — a client that bypasses
+ * the SDK producer still cannot smuggle free text into `inferences.meta`.
+ * Returns the cleaned value (undefined when not an object) and the drop count.
+ */
+export declare function sanitizeMetaForWire(raw: unknown): {
+    meta?: Record<string, unknown>;
+    dropped: number;
+};
+/** Well-known tag keys that become first-class group-bys (spec §4). Documented
+ * in the SDK docs; `modelrig validate` warns on near-misses. */
+export declare const RESERVED_TAG_KEYS: readonly ["subject", "feature", "user", "session", "cost_center"];
+export type ReservedTagKey = (typeof RESERVED_TAG_KEYS)[number];
+/**
+ * Reserved-dimension near-misses among declared dimension/tag keys (spec §4).
+ * Returns `{ key, suggestion }` for every key that is a known synonym of a
+ * reserved key but is not itself reserved — so `modelrig validate` can nudge
+ * `customer` ⇒ `subject`. Pure; unit-tested directly.
+ */
+export declare function reservedTagNearMisses(keys: readonly string[]): {
+    key: string;
+    suggestion: ReservedTagKey;
+}[];
+/**
+ * Best-effort pipeline git sha for `RunMeta.pipeline_sha` (spec §3) — NEVER
+ * throws (instrumentation must not fail a run). Reads, in order: an explicit
+ * deployment env var (via {@link pipelineShaFromEnv} — env reads live in
+ * config.ts, the process.env invariant), then the working tree's `.git/HEAD`
+ * (following a ref). Returns undefined when nothing resolves. No child process,
+ * no new dependency. `cwd` defaults to the process working directory.
+ */
+export declare function resolvePipelineSha(cwd?: string): string | undefined;
+/** Read the commit sha from a working tree's `.git/HEAD` (following a ref) —
+ * the fs half of {@link resolvePipelineSha}, exported so it is unit-testable
+ * without touching process.env. Never throws; returns undefined when no `.git`
+ * is present or the head is unreadable. */
+export declare function pipelineShaFromGitDir(cwd: string): string | undefined;
+/**
+ * Build the attempt envelope (spec §2). Single producer. Wraps everything in a
+ * try/catch — ANY failure returns null (a counted warning is the caller's; the
+ * run result is byte-identical). Applies the classification rule to every
+ * externally-sourced string; a value that is not enum/identifier/hash is dropped
+ * (absent = unknown, never inferred).
+ */
+export declare function summarizeAttemptMeta(inputs: AttemptMetaInputs): AttemptMetaV1 | null;
+//# sourceMappingURL=attempt-meta.d.ts.map