modelrig 0.5.0 → 0.7.0

package/CHANGELOG.md

@@ -10,6 +10,131 @@ published package diverge.
 This project adheres to [Semantic Versioning](https://semver.org/). Dates are
 UTC.
 
+## [0.7.0] — 2026-08-23
+
+Released with the docs/registry mirror in one R-A ceremony. Headline: wrap a
+pipeline in `rig.artifacts.run.start({ pipeline, episodeKey })` and that is the
+whole instrumentation story — the SDK stamps `tags.run_id` on every call of both
+lanes, so `/runs` AND `/projects` fill with no per-call tag plumbing.
+
+Run-context tags (RC-1) — inside `rig.artifacts.run.start` / `run.scope`, the SDK
+stamps `tags.run_id` (the run's `episodeKey`, else its id) on every attempt row of
+both lanes when the caller passed none; a caller-supplied `run_id` always wins,
+and outside a run context rows are byte-identical. The console `/projects` tree
+joins a uuid-valued `run_id` by `runs.id` as well as by `episode_key`, so a
+pipeline that calls `run.start({ pipeline })` alone now fills `/runs` AND
+`/projects`. `ActiveRunContext.episodeKey` is exposed; `withRunIdTag` is the one
+rule. ZERO DDL.
+
+## [0.6.0] — 2026-08-23
+
+Released with the docs/registry mirror in one R-A ceremony. Headline for router
+codebases: the candidate ladder can now fall through on **quality** (`qualityGate`
+→ `quality_rejected`), bake-offs measure **regret against a reference arm** under a
+declared objective (legacy routes stay cost-first, byte-identical), the console
+gains the **project tree** (`/projects`) and the **analytics API**
+(`/v1/analytics/meta` + `/query`, metadata only — never content), and the
+OpenAI-compatible proxy accepts the `developer` role. ZERO DDL across the line.
+
+Regret-bounded bake-offs (RB-1, near-optimal) — the bake-off objective flips from
+"cheapest that passes" to **near-optimal at a reasonable price**. New additive
+route YAML: `objective` (`mode: quality-first | balanced | cost-first`,
+`max_regret`, `price_ceiling`, `lambda`), `bakeoff` (`reference: auto | provider/model`,
+`reference_envelope_usd`, `judge: { model, max_samples }`), and `value_checks`
+(JSON-pointer assertions). Every bake-off can run a **reference (ceiling) arm**
+and report each arm's **regret vs the reference with a seeded-bootstrap CI and n**.
+Quality per sample resolves eval-case golden → `value_checks` → an opt-in capped,
+metered judge (judge model ∈ declared candidates) → 1/0 conformance; it composes
+with Q1's `qualityGate` (deterministic checks first, then the gate/judge). The
+proposal gate is objective-aware: `cost-first` keeps Q1's gate byte-identical
+(golden); a declared `quality-first`/`balanced` objective with no bound reports
+regret but proposes nothing (no silent actuation). `modelrig bakeoff --objective
+<mode>` overrides per run. The report/PR body state regret, cost and the ceiling
+on one line. ZERO DDL. See `docs/bakeoffs.md` §5.
+
+Analytics surface (WI-1b) — the read side of the attempt envelope. `GET
+/v1/analytics/meta` describes every dimension and metric with its classification
+and `since` version; `POST /v1/analytics/query` runs the SELECT-only grammar over
+an org's inferences (metadata only — enums, numbers, hashes, identifiers; never
+content; bake-off replay rows excluded). `modelrig query "<grammar>"` /
+`--saved <id>` run the same grammar locally. Console: saved questions on
+`/costs`, `/coverage`, `/routes/[route]`. OTLP-out gains `modelrig.meta.*` span
+attributes for the metadata-safe envelope fields. Behaviour change: a free-text
+`actor` is dropped with one warning (metadata-safe rule). New root exports:
+`parseQuery`, `compileQuery`, `evaluateAnalyticsQuery`, `describeAnalyticsSchema`,
+`planAnalyticsRead`, `runTelemetryQuery`, `SAVED_QUERIES`, `savedQueryById`, the
+column registries and their types.
+ZERO DDL.
+
+Quality gate (#223, Q1) — the candidate ladder can now fall through on *quality*,
+not just shape. Pass `rig.run(route, { qualityGate })` and a schema-valid output
+your predicate rejects is recorded as a new `quality_rejected` failure (its own
+retry budget, never the repair rung) and the ladder advances. The same predicate
+scores bake-offs (`rig.bakeoff({ qualityGate })`) — a quality pass rate and an
+`effectiveUsdPer1kPassing` metric beside the conformant one. SDK lane only: a
+function cannot cross the hosted boundary; the route-declared hosted judge is Q2.
+
+### Added — quality gate (#223, Q1)
+
+- **`RunOptions.qualityGate?`** — a builder predicate
+  `(output, meta) => { ok, score?, reason? }` (sync or async) evaluated on a
+  schema-VALID output before it is accepted. `ok:false` records a
+  `quality_rejected` attempt (message carries the reason + score), captures the
+  rejected text for replay, and falls the ladder through on the class's OWN retry
+  budget (`policy.retries.quality_rejected`, default 0) — the repair rung is NEVER
+  entered from this path. A throwing predicate rejects fail-closed (`reason:
+  "qualityGate threw: …"`, one warning per process). Tool-call turns and
+  `schema: null` routes are handled per spec §4.1. `runStream` inherits it.
+- **`FailureClass "quality_rejected"`** — retryable (own non-fungible budget),
+  never terminal, with an errors-that-teach entry (`docsUrl`
+  → routing-reliability.html#quality_rejected) and a suggested `policy.retries`
+  edit. `policy.retries.quality_rejected` is accepted by the loader.
+- **`RunMeta.quality?`** `{ score, verdict, judgedBy }` — present when a gate ran
+  (`verdict: "pass"` on a returned run; `judgedBy: null` for an SDK predicate).
+  SDK-owned `tags.quality` / `tags.quality_score` are stamped on the attempt row.
+- **`rig.bakeoff` / `rig.bakeoffFromEvalCases` gain `qualityGate?`** — scored on
+  each replayed sample into `ReplaySampleResult.valueAccuracy` + `qualityPassed`;
+  `VariantMetrics` gains `qualityPassCi95` and `effectiveUsdPer1kPassing` (beside,
+  never redefining, `effectiveUsdPer1kConformant`), and `computeProposal` gains a
+  third clause (challenger quality-pass CI-lower ≥ incumbent's). The `modelrig
+  bakeoff` CLI cannot carry a function — use programmatic `rig.bakeoff` until Q2.
+- **Exports:** `QualityGate`, `QualityVerdict`, `QualityGateMeta` from the root.
+- **Boundary B1 rewritten** to "Route-declared judge (hosted lane)" (`not_built`,
+  tripwire `/\bjudge\??\s*:/`) now the SDK predicate ships; the routing-reliability
+  page, llms.txt (C11), README, `/definitions`, and the v4 setup prompt are swept
+  to match.
+
+Project tree (G2b) — the console gains `/projects` (picker) and `/projects/[value]`
+(project → run → step → call → attempts, cost + quality + lane on every node) over
+one new read, `GET /v1/console/tree`. Server + console only; the SDK change below
+is documentation. ZERO DDL.
+
+- **`@step` / `step()` sets the ambient step key.** Documented in `step.ts` that
+  entering a step scope mints `label#n` and makes it the run context's ambient
+  step: an `artifact.save` with no explicit `stepKey` attaches to it — for saves
+  inside the scope AND for saves after it, until the next step mints a new key
+  (the ambient key is a running "most recent step", not a lexical bracket).
+  `run-context.ts` clarifies that within one run's parallel step waves only an
+  explicit `stepKey` prevents cross-attribution (`run.scope()` separates distinct
+  runs, not overlapping steps in one run).
+
+Screening (B0 + B1) — two bug-class fixes and a shared detector contract.
+- **Bake-off review samples are scrubbed before they persist.** A `--keep-outputs`
+  bake-off now runs each sample's input and output through the rig's content-custody
+  scrub mode (`detect` counts onto `arm_meta.scrub`, `redact` masks, `block` keeps a
+  metadata-only sample). Default `off` ⇒ rows byte-identical to before.
+- **Proxy role enum.** `messages[].role` must be `system|developer|user|assistant|tool`
+  (`developer` normalises to the system slot); anything else is rejected with a
+  teaching message before dispatch (HTTP 422). Previously an arbitrary role was cast
+  through.
+- **Raw-lane multi-turn encoding (behaviour change).** A genuine multi-turn transcript
+  is now flattened into the adapter's user prompt as one JSON object per line instead
+  of `role: content` text, so a crafted turn can never read as a synthetic system
+  line. Single-user-turn (and system + single user) requests are byte-identical.
+- **Shared `Detector` interface.** `Detector`, `DetectionSpan`, `detectSpans`, and
+  `scrubDetectors` are exported from the package root; `scrubContent` is unchanged.
+  `buildBakeoffSamples` gains a scrub-resolver argument.
+
 ## [0.5.0] — 2026-08-22
 
 Released with the docs/registry mirror in one R-A ceremony. Headline for router

package/README.md

@@ -145,7 +145,8 @@ provider's list price (zero ModelRig margin) and throws a typed `RigFailureError
 on failure, exactly like `rig.run`.
 
 Called inside a `rig.artifacts.run.start` context, `runRaw`/`runRawStream` also
-records a ground-truth **step** in the run's graph (`/runs/[id]`) — since
+records a ground-truth **step** in the run's graph (`/runs/[id]`) and carries the
+run's `run_id` tag — since
 modelrig 0.5.0, on success and on failure. Name it with `stepKey` (the same field
 `RunOptions` exposes on the routed lane; precedence `stepKey` > `tags.step` > an
 auto `provider/model#n` key), so a raw call and the artifacts you `save` around it
@@ -179,9 +180,55 @@ Every attempt is recorded in a local SQLite file (`.modelrig/telemetry.db`)
 tagged with your `tags`. Failures are typed —
 `RigFailureError.failure.class` is one of `content_invalid`, `capacity_shed`,
 `network`, `refusal`, `cache_invalid`, `timeout`, `config_auth`, `budget_exhausted`,
-`invariant_violation` — with a separate retry budget per class, so a flaky
+`invariant_violation`, `quality_rejected` — with a separate retry budget per class, so a flaky
 network never spends your content-validation retries. What each class means, whether it retries, and how it backs off is on [Routing & reliability](https://modelrig.dev/routing-reliability.html#5-failure-classes).
 
+## Metadata capture ("capture now, analyze later")
+
+Every inference records a versioned, **metadata-safe** attempt envelope
+(`AttemptMeta@v1`) on `inferences.meta` — in both the routed and the raw lane,
+from the same producer. It is the metadata the adapters already see and used to
+discard: finish reason, refusal, reasoning tokens, the provider-reported model
+snapshot and request id, coarse HTTP status / error code, sampling echo, tool
+names (declared kept, undeclared hashed) with counts, per-component cost, request
+and output **hashes** (never the content), request/response byte sizes, response
+char count, and a coarse context bucket.
+
+**It never contains free text.** Every field is an enum, a number, a boolean, a
+hash, or an identifier. The producer drops any string that is over 128 chars or
+contains whitespace, and the hosted ingest endpoint re-applies the same rule as a
+backstop — so analysis later is possible without prompts or outputs ever being
+stored here. Building the envelope never blocks or changes a run: on any failure
+it is simply absent (`meta` is null).
+
+Runs carry a companion `RunMeta@v1` on `runs.meta`, set at `run.start`:
+
+```ts
+const h = rig.run.start({
+  pipeline: "nightly-report",
+  meta: { v: 1, trigger: "cron", actor: "scheduler", config_hash: "…" },
+  // pipeline_sha auto-fills from git when you don't set it (never fails the run)
+});
+```
+
+### Reserved dimensions
+
+Business dimensions live in `tags`. Five keys are **well-known** and become
+first-class group-bys in cost and coverage views — use them verbatim so your data
+lines up with the console's built-ins:
+
+| key | meaning |
+|---|---|
+| `subject` | the customer/tenant the work is for — an **opaque** id, hashed if it looks like PII |
+| `feature` | the product feature the call serves |
+| `user` | the end user (an opaque id) |
+| `session` | the conversation/session the call belongs to |
+| `cost_center` | the team/budget to attribute spend to |
+
+`modelrig validate` warns on near-misses — a declared `rig.yaml` dimension named
+`customer`, `tenant`, `user_id`, `team`, … is nudged toward the reserved key it
+resembles. They stay ordinary tags; nothing is required.
+
 ## CLI
 
 The package ships a `modelrig` binary:
@@ -217,8 +264,11 @@ on the quickstart:
 - **`modelrig serve` needs the `modelrig-server` package** — it is not bundled
   here.
 - **What the ladder does and does not do.** Fall-through is structural and
-  infrastructural, never a quality judgment; the full boundary (quality gate,
-  raw-lane structure, latency ordering…) is generated and tripwire-tested on
+  infrastructural, plus an OPTIONAL SDK-lane `qualityGate` predicate you supply
+  (a schema-valid output it rejects becomes
+  `quality_rejected`); the route-declared
+  hosted judge is not built yet, and the full boundary (raw-lane structure, latency
+  ordering…) is generated and tripwire-tested on
   [Routing & reliability](https://modelrig.dev/routing-reliability.html#10-not-yet-implemented-the-boundary).
 
 ## License

package/dist/adapters/anthropic.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"anthropic.d.ts","sourceRoot":"","sources":["../../src/adapters/anthropic.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAGH,OAAO,KAAK,EAIV,cAAc,EACd,eAAe,EAEhB,MAAM,mBAAmB,CAAC;AAE3B,OAAO,KAAK,EAAE,iBAAiB,EAAE,YAAY,EAAE,MAAM,UAAU,CAAC;AAEhE,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,gBAAgB,CAAC;AAG9D,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB;AASD;yDACyD;AACzD,wBAAgB,uBAAuB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAEhE;AAED,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,cAAc,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAclF;AAED,wBAAgB,wBAAwB,CAAC,OAAO,EAAE,MAAM,GAAG,iBAAiB,CAwB3E;AAED,UAAU,aAAa;IACrB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,sDAAsD;IACtD,QAAQ,CAAC,MAAM,CAAC,EAAE,IAAI,CAAC;CACxB;AAED;;mEAEmE;AACnE,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,aAAa,CAAC,EAAE;QAAE,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAA;KAAE,CAAC;CACzD;AAED,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B;wFACoF;IACpF,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB;+DAC2D;IAC3D,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,oBAAoB,EAAE,CAAC;IAC3D,QAAQ,CAAC,QAAQ,EAAE,aAAa,CAAC;QAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACtF,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC;IACtB,QAAQ,CAAC,KAAK,CAAC,EAAE,SAAS,aAAa,EAAE,CAAC;IAC1C,QAAQ,CAAC,WAAW,CAAC,EAAE;QAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;KAAE,GAAG,uBAAuB,CAAC;CACnG;AAED,wBAAgB,oBAAoB,CAClC,KAAK,EAAE,MAAM,EACb,GAAG,EAAE,YAAY,EACjB,MAAM,UAAQ,GACb,qBAAqB,CAuDvB;AAED;iEACiE;AACjE,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,uBAAuB,CAAC,EAAE,MAAM,CAAC;IAC1C,QAAQ,CAAC,2BAA2B,CAAC,EAAE,MAAM,CAAC;IAC9C,QAAQ,CAAC,cAAc,CAAC,EAAE;QACxB,QAAQ,CAAC,yBAAyB,CAAC,EAAE,MAAM,CAAC;QAC5C,QAAQ,CAAC,yBAAyB,CAAC,EAAE,MAAM,CAAC;KAC7C,CAAC;CACH;AAED,0EAA0E;AAC1E,MAAM,WAAW,6BAA6B;IAC5C,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,kBAAkB,EAAE,MAAM,CAAC;CACrC;AAED;;;;;;GAMG;AACH,wBAAgB,4BAA4B,CAC1C,CAAC,EAAE,sBAAsB,GACxB,6BAA6B,CAa/B;AAED,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,sBAAsB,GAAG,eAAe,CAuMtF"}
+{"version":3,"file":"anthropic.d.ts","sourceRoot":"","sources":["../../src/adapters/anthropic.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAGH,OAAO,KAAK,EAIV,cAAc,EACd,eAAe,EAEhB,MAAM,mBAAmB,CAAC;AAE3B,OAAO,KAAK,EAAE,iBAAiB,EAAE,YAAY,EAAE,MAAM,UAAU,CAAC;AAEhE,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,gBAAgB,CAAC;AAK9D,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB;AASD;yDACyD;AACzD,wBAAgB,uBAAuB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAEhE;AAED,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,cAAc,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAclF;AAED,wBAAgB,wBAAwB,CAAC,OAAO,EAAE,MAAM,GAAG,iBAAiB,CAwB3E;AAED,UAAU,aAAa;IACrB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,sDAAsD;IACtD,QAAQ,CAAC,MAAM,CAAC,EAAE,IAAI,CAAC;CACxB;AAED;;mEAEmE;AACnE,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,aAAa,CAAC,EAAE;QAAE,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAA;KAAE,CAAC;CACzD;AAED,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B;wFACoF;IACpF,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB;+DAC2D;IAC3D,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,oBAAoB,EAAE,CAAC;IAC3D,QAAQ,CAAC,QAAQ,EAAE,aAAa,CAAC;QAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACtF,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC;IACtB,QAAQ,CAAC,KAAK,CAAC,EAAE,SAAS,aAAa,EAAE,CAAC;IAC1C,QAAQ,CAAC,WAAW,CAAC,EAAE;QAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;KAAE,GAAG,uBAAuB,CAAC;CACnG;AAED,wBAAgB,oBAAoB,CAClC,KAAK,EAAE,MAAM,EACb,GAAG,EAAE,YAAY,EACjB,MAAM,UAAQ,GACb,qBAAqB,CAuDvB;AAED;iEACiE;AACjE,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,uBAAuB,CAAC,EAAE,MAAM,CAAC;IAC1C,QAAQ,CAAC,2BAA2B,CAAC,EAAE,MAAM,CAAC;IAC9C,QAAQ,CAAC,cAAc,CAAC,EAAE;QACxB,QAAQ,CAAC,yBAAyB,CAAC,EAAE,MAAM,CAAC;QAC5C,QAAQ,CAAC,yBAAyB,CAAC,EAAE,MAAM,CAAC;KAC7C,CAAC;CACH;AAED,0EAA0E;AAC1E,MAAM,WAAW,6BAA6B;IAC5C,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,kBAAkB,EAAE,MAAM,CAAC;CACrC;AAED;;;;;;GAMG;AACH,wBAAgB,4BAA4B,CAC1C,CAAC,EAAE,sBAAsB,GACxB,6BAA6B,CAa/B;AAED,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,sBAAsB,GAAG,eAAe,CAsOtF"}

package/dist/adapters/anthropic.js

@@ -22,6 +22,7 @@ exports.normalizeAnthropicInputUsage = normalizeAnthropicInputUsage;
 exports.createAnthropicAdapter = createAnthropicAdapter;
 const sdk_1 = __importDefault(require("@anthropic-ai/sdk"));
 const tool_mapping_1 = require("./tool-mapping");
+const attempt_meta_map_1 = require("./attempt-meta-map");
 const sampling_1 = require("./sampling");
 const DEFAULT_MAX_TOKENS = 32000;
 const OUTPUT_TOOL_NAME = "route_output";
@@ -159,6 +160,8 @@ function createAnthropicAdapter(config) {
         supportsTools: () => true,
         async call(req) {
             const model = req.candidate.model;
+            // WI-1: native attempt envelope for this call (see openai.ts for the pattern).
+            let attemptMeta;
             // F1: post-stream failures still billed tokens — attach usage.
             const fail = (cls, message, fixHint, usage) => ({
                 ok: false,
@@ -170,6 +173,7 @@ function createAnthropicAdapter(config) {
                     ...(fixHint !== undefined ? { fixHint } : {}),
                 },
                 ...(usage !== undefined ? { usage } : {}),
+                ...(attemptMeta !== undefined ? { meta: attemptMeta } : {}),
             });
             const wantJson = req.outputSchema !== null;
             try {
@@ -210,9 +214,20 @@ function createAnthropicAdapter(config) {
                 };
                 let completionTokens = 0;
                 let stopReason = null;
+                // WI-1 native fields: message.id + message.model arrive at message_start.
+                let responseModel = "";
+                let responseId = "";
                 for await (const event of events) {
-                    if (event.type === "message_start" && event.message?.usage !== undefined) {
-                        inputUsage = normalizeAnthropicInputUsage(event.message.usage);
+                    if (event.type === "message_start") {
+                        if (event.message?.usage !== undefined) {
+                            inputUsage = normalizeAnthropicInputUsage(event.message.usage);
+                        }
+                        if (responseModel === "" && typeof event.message?.model === "string") {
+                            responseModel = event.message.model;
+                        }
+                        if (responseId === "" && typeof event.message?.id === "string") {
+                            responseId = event.message.id;
+                        }
                     }
                     else if (event.type === "content_block_start" &&
                         wantTools &&
@@ -257,13 +272,25 @@ function createAnthropicAdapter(config) {
                 };
                 // Tool-call turn (spec §4.4): `arguments` is the raw JSON string the
                 // model streamed (OpenAI parity) — text may be empty, skip the guards.
-                if (wantTools && toolBlocks.size > 0) {
-                    const toolCalls = [...toolBlocks.values()].map((b, i) => ({
+                const toolCalls = wantTools && toolBlocks.size > 0
+                    ? [...toolBlocks.values()].map((b, i) => ({
                         id: b.id !== "" ? b.id : `call_${i}`,
                         type: "function",
                         function: { name: b.name, arguments: b.json === "" ? "{}" : b.json },
-                    }));
-                    return { ok: true, text, usage, toolCalls };
+                    }))
+                    : undefined;
+                // WI-1: native attempt envelope. refusal derives from stop_reason=refusal.
+                attemptMeta = (0, attempt_meta_map_1.buildAdapterMeta)("anthropic", {
+                    req,
+                    finishReasonRaw: stopReason,
+                    refusal: stopReason === "refusal",
+                    modelSnapshot: responseModel,
+                    providerRequestId: responseId,
+                    toolCalls,
+                    streaming: false,
+                });
+                if (toolCalls !== undefined) {
+                    return { ok: true, text, usage, toolCalls, meta: attemptMeta };
                 }
                 if (stopReason === "refusal") {
                     return fail("refusal", "Anthropic refused this request (stop_reason=refusal)", undefined, usage);
@@ -274,11 +301,12 @@ function createAnthropicAdapter(config) {
                 if (stopReason === "max_tokens" && wantJson) {
                     return fail("content_invalid", "Anthropic structured output truncated (stop_reason=max_tokens)", "raise maxOutputTokens for this route", usage);
                 }
-                return { ok: true, text, usage };
+                return { ok: true, text, usage, meta: attemptMeta };
             }
             catch (error) {
                 const message = error instanceof Error ? error.message : String(error);
                 const { cls, fixHint } = classifyAnthropicFailure(message);
+                attemptMeta = (0, attempt_meta_map_1.transportErrorMeta)(error);
                 return {
                     ok: false,
                     failure: {
@@ -289,6 +317,7 @@ function createAnthropicAdapter(config) {
                         cause: error,
                         ...(fixHint !== undefined ? { fixHint } : {}),
                     },
+                    meta: attemptMeta,
                 };
             }
         },

package/dist/adapters/attempt-meta-map.d.ts

@@ -0,0 +1,63 @@
+/**
+ * Per-adapter NATIVE metadata mapping (WI-1, spec §2). ONE place that turns a
+ * provider's native finish/refusal/usage/id signals into the additive
+ * `AdapterResult.meta` (`Partial<AttemptMetaV1>`). Adapters map ONLY what the
+ * provider reports; the producer (`telemetry/attempt-meta.ts`) adds
+ * hashes/sizes/cost and enforces the classification rule. Absent = unknown;
+ * nothing here is inferred.
+ *
+ * `refusal` derivation, per adapter:
+ *  - openai / grok / deepseek / deepinfra / fireworks (OpenAI dialect): the
+ *    stream carried a non-empty `choices[].delta.refusal` string, OR
+ *    `finish_reason === "content_filter"`.
+ *  - anthropic: `stop_reason === "refusal"`.
+ *  - gemini: `finishReason` is `SAFETY` / `PROHIBITED_CONTENT` / `RECITATION`.
+ * The refusal TEXT itself is never carried (content) — only the boolean.
+ */
+import type { AttemptMetaV1, FinishReason } from "../telemetry/attempt-meta";
+import type { AdapterRequest, ProviderId, ToolCall } from "../types/provider";
+/** Map a provider's native finish/stop reason to the `FinishReason` enum
+ * (spec §2). Unknown/absent ⇒ undefined (never inferred); an unrecognised
+ * non-empty value ⇒ `"other"`. */
+export declare function mapFinishReason(provider: ProviderId, raw: string | null | undefined): FinishReason | undefined;
+/** The declared sampling echo (spec §2 `sampling`) — the values ModelRig sent,
+ * read back from the request. topP → top_p, maxOutputTokens → max_output_tokens
+ * (the raw lane's top-level or the routed lane's `sampling` block). Numbers
+ * only; undefined when the caller declared none. */
+export declare function samplingEcho(req: AdapterRequest): {
+    temperature?: number;
+    top_p?: number;
+    max_output_tokens?: number;
+} | undefined;
+/** Aggregate normalized tool calls into `{ name, count }` (RAW names — the
+ * producer hashes undeclared ones). Undefined when the turn made none. */
+export declare function aggregateToolCalls(toolCalls: readonly ToolCall[] | undefined): {
+    name: string;
+    count: number;
+}[] | undefined;
+/** The signals an adapter collects on ONE completed call. All optional. */
+export interface AdapterMetaSignals {
+    readonly req: AdapterRequest;
+    readonly finishReasonRaw?: string | null;
+    readonly refusal?: boolean;
+    readonly reasoningTokens?: number;
+    readonly modelSnapshot?: string;
+    readonly providerRequestId?: string;
+    readonly region?: string;
+    readonly toolCalls?: readonly ToolCall[];
+    readonly grounding?: {
+        citations?: number;
+        searchProvider?: string;
+    };
+    /** true = the run loop streamed deltas (stream()); false/absent = buffered. */
+    readonly streaming?: boolean;
+}
+/** Build one adapter's NATIVE `meta` (spec §2). Only defined signals appear —
+ * everything else is unknown and omitted. The producer takes it from here. */
+export declare function buildAdapterMeta(provider: ProviderId, s: AdapterMetaSignals): Partial<AttemptMetaV1>;
+/** A transport/SDK error's coarse envelope (spec §2 `http_status`/`error_code`).
+ * Reads `error.status` (number) and a short `error.code` / `error.error.code`
+ * slug — NEVER the message (that is free text). The producer's classification
+ * rule drops a code that turns out to be free text. */
+export declare function transportErrorMeta(error: unknown): Partial<AttemptMetaV1>;
+//# sourceMappingURL=attempt-meta-map.d.ts.map

package/dist/adapters/attempt-meta-map.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"attempt-meta-map.d.ts","sourceRoot":"","sources":["../../src/adapters/attempt-meta-map.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,KAAK,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;AAC7E,OAAO,KAAK,EAAE,cAAc,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAE9E;;kCAEkC;AAClC,wBAAgB,eAAe,CAC7B,QAAQ,EAAE,UAAU,EACpB,GAAG,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAC7B,YAAY,GAAG,SAAS,CA6C1B;AAED;;;oDAGoD;AACpD,wBAAgB,YAAY,CAC1B,GAAG,EAAE,cAAc,GAClB;IAAE,WAAW,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,iBAAiB,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,SAAS,CAOlF;AAED;0EAC0E;AAC1E,wBAAgB,kBAAkB,CAChC,SAAS,EAAE,SAAS,QAAQ,EAAE,GAAG,SAAS,GACzC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,EAAE,GAAG,SAAS,CAQ/C;AAED,2EAA2E;AAC3E,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,GAAG,EAAE,cAAc,CAAC;IAC7B,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACzC,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC;IAC3B,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,iBAAiB,CAAC,EAAE,MAAM,CAAC;IACpC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,SAAS,CAAC,EAAE,SAAS,QAAQ,EAAE,CAAC;IACzC,QAAQ,CAAC,SAAS,CAAC,EAAE;QAAE,SAAS,CAAC,EAAE,MAAM,CAAC;QAAC,cAAc,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IACrE,+EAA+E;IAC/E,QAAQ,CAAC,SAAS,CAAC,EAAE,OAAO,CAAC;CAC9B;AAED;8EAC8E;AAC9E,wBAAgB,gBAAgB,CAC9B,QAAQ,EAAE,UAAU,EACpB,CAAC,EAAE,kBAAkB,GACpB,OAAO,CAAC,aAAa,CAAC,CAyBxB;AAED;;;uDAGuD;AACvD,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAAC,aAAa,CAAC,CASzE"}

package/dist/adapters/attempt-meta-map.js

@@ -0,0 +1,154 @@
+"use strict";
+/**
+ * Per-adapter NATIVE metadata mapping (WI-1, spec §2). ONE place that turns a
+ * provider's native finish/refusal/usage/id signals into the additive
+ * `AdapterResult.meta` (`Partial<AttemptMetaV1>`). Adapters map ONLY what the
+ * provider reports; the producer (`telemetry/attempt-meta.ts`) adds
+ * hashes/sizes/cost and enforces the classification rule. Absent = unknown;
+ * nothing here is inferred.
+ *
+ * `refusal` derivation, per adapter:
+ *  - openai / grok / deepseek / deepinfra / fireworks (OpenAI dialect): the
+ *    stream carried a non-empty `choices[].delta.refusal` string, OR
+ *    `finish_reason === "content_filter"`.
+ *  - anthropic: `stop_reason === "refusal"`.
+ *  - gemini: `finishReason` is `SAFETY` / `PROHIBITED_CONTENT` / `RECITATION`.
+ * The refusal TEXT itself is never carried (content) — only the boolean.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.mapFinishReason = mapFinishReason;
+exports.samplingEcho = samplingEcho;
+exports.aggregateToolCalls = aggregateToolCalls;
+exports.buildAdapterMeta = buildAdapterMeta;
+exports.transportErrorMeta = transportErrorMeta;
+/** Map a provider's native finish/stop reason to the `FinishReason` enum
+ * (spec §2). Unknown/absent ⇒ undefined (never inferred); an unrecognised
+ * non-empty value ⇒ `"other"`. */
+function mapFinishReason(provider, raw) {
+    if (raw === null || raw === undefined || raw === "")
+        return undefined;
+    if (provider === "anthropic") {
+        switch (raw) {
+            case "end_turn":
+            case "stop_sequence":
+                return "stop";
+            case "max_tokens":
+                return "length";
+            case "tool_use":
+                return "tool_calls";
+            case "refusal":
+                return "refusal";
+            default:
+                return "other";
+        }
+    }
+    if (provider === "gemini") {
+        switch (raw) {
+            case "STOP":
+                return "stop";
+            case "MAX_TOKENS":
+                return "length";
+            case "SAFETY":
+            case "PROHIBITED_CONTENT":
+            case "RECITATION":
+                return "content_filter";
+            default:
+                return "other";
+        }
+    }
+    // OpenAI dialect (openai / grok / deepseek / deepinfra / fireworks).
+    switch (raw) {
+        case "stop":
+            return "stop";
+        case "length":
+            return "length";
+        case "tool_calls":
+        case "function_call":
+            return "tool_calls";
+        case "content_filter":
+            return "content_filter";
+        default:
+            return "other";
+    }
+}
+/** The declared sampling echo (spec §2 `sampling`) — the values ModelRig sent,
+ * read back from the request. topP → top_p, maxOutputTokens → max_output_tokens
+ * (the raw lane's top-level or the routed lane's `sampling` block). Numbers
+ * only; undefined when the caller declared none. */
+function samplingEcho(req) {
+    const s = {};
+    if (typeof req.sampling?.temperature === "number")
+        s.temperature = req.sampling.temperature;
+    if (typeof req.sampling?.topP === "number")
+        s.top_p = req.sampling.topP;
+    const maxOut = req.sampling?.maxOutputTokens ?? req.maxOutputTokens;
+    if (typeof maxOut === "number")
+        s.max_output_tokens = maxOut;
+    return Object.keys(s).length > 0 ? s : undefined;
+}
+/** Aggregate normalized tool calls into `{ name, count }` (RAW names — the
+ * producer hashes undeclared ones). Undefined when the turn made none. */
+function aggregateToolCalls(toolCalls) {
+    if (toolCalls === undefined || toolCalls.length === 0)
+        return undefined;
+    const counts = new Map();
+    for (const tc of toolCalls) {
+        const name = tc.function.name;
+        counts.set(name, (counts.get(name) ?? 0) + 1);
+    }
+    return [...counts.entries()].map(([name, count]) => ({ name, count }));
+}
+/** Build one adapter's NATIVE `meta` (spec §2). Only defined signals appear —
+ * everything else is unknown and omitted. The producer takes it from here. */
+function buildAdapterMeta(provider, s) {
+    const meta = {};
+    const finish = mapFinishReason(provider, s.finishReasonRaw);
+    if (finish !== undefined)
+        meta.finish_reason = finish;
+    if (typeof s.refusal === "boolean")
+        meta.refusal = s.refusal;
+    if (typeof s.reasoningTokens === "number" && s.reasoningTokens > 0) {
+        meta.reasoning_tokens = s.reasoningTokens;
+    }
+    if (typeof s.modelSnapshot === "string" && s.modelSnapshot !== "")
+        meta.model_snapshot = s.modelSnapshot;
+    if (typeof s.providerRequestId === "string" && s.providerRequestId !== "") {
+        meta.provider_request_id = s.providerRequestId;
+    }
+    if (typeof s.region === "string" && s.region !== "")
+        meta.region = s.region;
+    const sampling = samplingEcho(s.req);
+    if (sampling !== undefined)
+        meta.sampling = sampling;
+    const tools = aggregateToolCalls(s.toolCalls);
+    if (tools !== undefined)
+        meta.tool_calls = tools;
+    if (s.grounding !== undefined) {
+        const g = {};
+        if (typeof s.grounding.citations === "number")
+            g.citations = s.grounding.citations;
+        if (typeof s.grounding.searchProvider === "string")
+            g.search_provider = s.grounding.searchProvider;
+        if (Object.keys(g).length > 0)
+            meta.grounding = g;
+    }
+    if (typeof s.streaming === "boolean")
+        meta.streaming = s.streaming;
+    return meta;
+}
+/** A transport/SDK error's coarse envelope (spec §2 `http_status`/`error_code`).
+ * Reads `error.status` (number) and a short `error.code` / `error.error.code`
+ * slug — NEVER the message (that is free text). The producer's classification
+ * rule drops a code that turns out to be free text. */
+function transportErrorMeta(error) {
+    const meta = {};
+    if (typeof error === "object" && error !== null) {
+        const e = error;
+        if (typeof e.status === "number" && Number.isFinite(e.status))
+            meta.http_status = e.status;
+        const code = typeof e.code === "string" ? e.code : e.error?.code;
+        if (typeof code === "string" && code !== "")
+            meta.error_code = code;
+    }
+    return meta;
+}

package/dist/adapters/deepseek.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"deepseek.d.ts","sourceRoot":"","sources":["../../src/adapters/deepseek.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAGH,OAAO,KAAK,EAIV,cAAc,EACd,eAAe,EAChB,MAAM,mBAAmB,CAAC;AAE3B,OAAO,KAAK,EAAE,iBAAiB,EAAE,YAAY,EAAE,MAAM,UAAU,CAAC;AAMhE,OAAO,KAAK,EAAuB,cAAc,EAAE,oBAAoB,EAAE,MAAM,gBAAgB,CAAC;AAMhG,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB;AAKD,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,cAAc,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAMhF;AAED,wBAAgB,uBAAuB,CAAC,OAAO,EAAE,MAAM,GAAG,iBAAiB,CAiB1E;AAED,UAAU,WAAW;IACnB,QAAQ,CAAC,IAAI,EAAE,QAAQ,GAAG,MAAM,CAAC;IACjC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,QAAQ,EAAE,SAAS,WAAW,EAAE,CAAC;IAC1C,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC;IACtB,QAAQ,CAAC,cAAc,EAAE;QAAE,QAAQ,CAAC,aAAa,EAAE,IAAI,CAAA;KAAE,CAAC;IAC1D,8EAA8E;IAC9E,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,eAAe,CAAC,EAAE;QAAE,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAA;KAAE,CAAC;IAC5D,QAAQ,CAAC,KAAK,CAAC,EAAE,SAAS,cAAc,EAAE,CAAC;IAC3C,QAAQ,CAAC,WAAW,CAAC,EAAE,oBAAoB,CAAC;CAC7C;AAOD,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,YAAY,GAAG,oBAAoB,CAkC1F;AAED,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,qBAAqB,GAAG,eAAe,CA8JpF"}
+{"version":3,"file":"deepseek.d.ts","sourceRoot":"","sources":["../../src/adapters/deepseek.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAGH,OAAO,KAAK,EAIV,cAAc,EACd,eAAe,EAChB,MAAM,mBAAmB,CAAC;AAE3B,OAAO,KAAK,EAAE,iBAAiB,EAAE,YAAY,EAAE,MAAM,UAAU,CAAC;AAMhE,OAAO,KAAK,EAAuB,cAAc,EAAE,oBAAoB,EAAE,MAAM,gBAAgB,CAAC;AAQhG,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB;AAKD,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,cAAc,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAMhF;AAED,wBAAgB,uBAAuB,CAAC,OAAO,EAAE,MAAM,GAAG,iBAAiB,CAiB1E;AAED,UAAU,WAAW;IACnB,QAAQ,CAAC,IAAI,EAAE,QAAQ,GAAG,MAAM,CAAC;IACjC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,QAAQ,EAAE,SAAS,WAAW,EAAE,CAAC;IAC1C,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC;IACtB,QAAQ,CAAC,cAAc,EAAE;QAAE,QAAQ,CAAC,aAAa,EAAE,IAAI,CAAA;KAAE,CAAC;IAC1D,8EAA8E;IAC9E,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,eAAe,CAAC,EAAE;QAAE,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAA;KAAE,CAAC;IAC5D,QAAQ,CAAC,KAAK,CAAC,EAAE,SAAS,cAAc,EAAE,CAAC;IAC3C,QAAQ,CAAC,WAAW,CAAC,EAAE,oBAAoB,CAAC;CAC7C;AAOD,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,YAAY,GAAG,oBAAoB,CAkC1F;AAED,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,qBAAqB,GAAG,eAAe,CAoLpF"}

package/dist/adapters/deepseek.js

@@ -24,6 +24,7 @@ exports.createDeepSeekAdapter = createDeepSeekAdapter;
 const openai_1 = __importDefault(require("openai"));
 const tool_mapping_1 = require("./tool-mapping");
 const openai_stream_1 = require("./openai-stream");
+const attempt_meta_map_1 = require("./attempt-meta-map");
 const sampling_1 = require("./sampling");
 const DEEPSEEK_BASE_URL = "https://api.deepseek.com";
 const DEFAULT_MAX_TOKENS = 64000; // R1/V3 max — full capacity for long reports (ported)
@@ -102,6 +103,8 @@ function createDeepSeekAdapter(config) {
         supportsTools: () => true,
         async call(req) {
             const model = req.candidate.model;
+            // WI-1: native attempt envelope for this call (see openai.ts for the pattern).
+            let attemptMeta;
             // F1: post-stream failures still billed tokens — attach usage.
             const fail = (cls, message, fixHint, usage) => ({
                 ok: false,
@@ -113,6 +116,7 @@ function createDeepSeekAdapter(config) {
                     ...(fixHint !== undefined ? { fixHint } : {}),
                 },
                 ...(usage !== undefined ? { usage } : {}),
+                ...(attemptMeta !== undefined ? { meta: attemptMeta } : {}),
             });
             try {
                 const client = new openai_1.default({
@@ -130,12 +134,18 @@ function createDeepSeekAdapter(config) {
                 let finishReason = null;
                 // TTFB (Phase 4 WS3): first streamed chunk = first body byte.
                 let ttfbMs;
+                let responseModel = "";
+                let responseId = "";
                 const toolCallAcc = (0, tool_mapping_1.createOpenAIToolCallAccumulator)();
                 // Only delta.content is accumulated — a reasoner's reasoning_content
                 // (chain-of-thought) must never leak into the JSON buffer (ported).
                 for await (const chunk of stream) {
                     if (ttfbMs === undefined)
                         ttfbMs = Date.now() - dispatchedAt;
+                    if (responseModel === "" && typeof chunk.model === "string")
+                        responseModel = chunk.model;
+                    if (responseId === "" && typeof chunk.id === "string")
+                        responseId = chunk.id;
                     const choice = chunk.choices[0];
                     if (choice?.delta?.content)
                         text += choice.delta.content;
@@ -159,8 +169,19 @@ function createDeepSeekAdapter(config) {
                 };
                 // Tool-call turn (spec §4.4): surface normalized calls, skip content guards.
                 const toolCalls = toolCallAcc.finalize();
+                // WI-1: native attempt envelope. DeepSeek has no `refusal` delta — a
+                // refusal surfaces as finish_reason content_filter.
+                attemptMeta = (0, attempt_meta_map_1.buildAdapterMeta)("deepseek", {
+                    req,
+                    finishReasonRaw: finishReason,
+                    refusal: finishReason === "content_filter",
+                    modelSnapshot: responseModel,
+                    providerRequestId: responseId,
+                    toolCalls,
+                    streaming: false,
+                });
                 if (toolCalls !== undefined) {
-                    return { ok: true, text, usage, toolCalls };
+                    return { ok: true, text, usage, toolCalls, meta: attemptMeta };
                 }
                 if (text.trim().length === 0) {
                     return fail("content_invalid", `empty response from DeepSeek (finish_reason=${finishReason ?? "none"})`, undefined, usage);
@@ -168,11 +189,12 @@ function createDeepSeekAdapter(config) {
                 if (finishReason === "length" && req.outputSchema !== null) {
                     return fail("content_invalid", "DeepSeek JSON output truncated (finish_reason=length)", "raise maxOutputTokens for this route", usage);
                 }
-                return { ok: true, text, usage };
+                return { ok: true, text, usage, meta: attemptMeta };
             }
             catch (error) {
                 const message = error instanceof Error ? error.message : String(error);
                 const { cls, fixHint } = classifyDeepSeekFailure(message);
+                attemptMeta = (0, attempt_meta_map_1.transportErrorMeta)(error);
                 return {
                     ok: false,
                     failure: {
@@ -183,6 +205,7 @@ function createDeepSeekAdapter(config) {
                         cause: error,
                         ...(fixHint !== undefined ? { fixHint } : {}),
                     },
+                    meta: attemptMeta,
                 };
             }
         },