modelrig 0.5.0 → 0.7.0

package/dist/run/quality-gate.js

@@ -0,0 +1,70 @@
+"use strict";
+/**
+ * The quality-gate seam (Q1, quality-gate spec §4.1). Extracted from run.ts —
+ * which sits at the 700-LOC cap — so the run loop gets ONE compact call site
+ * between `outcome.valid` and the accept branch.
+ *
+ * The gate evaluates a builder predicate on a schema-VALID output. It handles the
+ * awkward bits so the loop does not: awaiting an async verdict, normalizing an
+ * optional score/reason, and rejecting fail-closed when the predicate THROWS
+ * (spec §4.1 step 4, flag F2 — reject + warn ONCE per process). The loop keeps
+ * the control flow: a passing verdict takes the existing accept path (tagged),
+ * a failing one records `quality_rejected` and falls through on its own budget,
+ * never touching the repair rung.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.resetQualityGateWarningForTest = resetQualityGateWarningForTest;
+exports.evaluateQualityGate = evaluateQualityGate;
+exports.qualityTags = qualityTags;
+exports.qualityRejectedMessage = qualityRejectedMessage;
+/** One warning per process when a predicate throws (F2). Module-level so it
+ * latches across runs; `resetQualityGateWarningForTest` clears it under test. */
+let warnedOnThrow = false;
+/** Test-only: reset the once-per-process throw-warning latch so a test can
+ * assert the single-warning behavior deterministically. */
+function resetQualityGateWarningForTest() {
+    warnedOnThrow = false;
+}
+function finiteOrNull(n) {
+    return typeof n === "number" && Number.isFinite(n) ? n : null;
+}
+/**
+ * Evaluate a quality gate on a schema-valid output. Awaits an async verdict; a
+ * throwing predicate rejects fail-closed with a `qualityGate threw: …` reason
+ * and warns exactly once per process.
+ */
+async function evaluateQualityGate(gate, output, meta) {
+    try {
+        const verdict = await gate(output, meta);
+        return { pass: verdict.ok === true, score: finiteOrNull(verdict.score), reason: verdict.reason ?? null };
+    }
+    catch (err) {
+        const message = err instanceof Error ? err.message : String(err);
+        if (!warnedOnThrow) {
+            warnedOnThrow = true;
+            console.warn(`[modelrig] qualityGate threw — treating the output as REJECTED (fail-closed): ${message}. ` +
+                "A predicate must return { ok } rather than throw; this warning fires once per process.");
+        }
+        return { pass: false, score: null, reason: `qualityGate threw: ${message}` };
+    }
+}
+/** Render a score for a tag / message — a plain decimal string, or "" when null. */
+function scoreText(score) {
+    return score === null ? "" : String(score);
+}
+/** SDK-owned telemetry tags for the attempt row (spec §2): `quality` = pass|fail
+ * and, when a score exists, `quality_score` as a decimal string. Never carries
+ * `rung` — the recorder owns that and stamps it last. */
+function qualityTags(outcome) {
+    const tags = { quality: outcome.pass ? "pass" : "fail" };
+    if (outcome.score !== null)
+        tags.quality_score = scoreText(outcome.score);
+    return tags;
+}
+/** The `quality_rejected` failure message — carries the reason and score so a
+ * stuck engineer (and the exhausted-ladder error) sees WHY it was rejected. */
+function qualityRejectedMessage(outcome) {
+    const scorePart = outcome.score === null ? "" : ` (score ${scoreText(outcome.score)})`;
+    const reasonPart = outcome.reason === null ? "" : `: ${outcome.reason}`;
+    return `output met the schema but not the quality bar${scorePart}${reasonPart}`;
+}

package/dist/run/raw.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"raw.d.ts","sourceRoot":"","sources":["../../src/run/raw.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA0CG;AAuBH,OAAO,EAAiC,KAAK,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACrF,OAAO,KAAK,EACV,cAAc,EAGd,YAAY,EAGZ,UAAU,EACV,eAAe,EACf,WAAW,EACX,UAAU,EACV,cAAc,EACf,MAAM,mBAAmB,CAAC;AAC3B,OAAO,KAAK,EAAW,SAAS,EAAE,OAAO,EAAE,MAAM,gBAAgB,CAAC;AAClE,OAAO,KAAK,EAAkB,eAAe,EAAE,MAAM,UAAU,CAAC;AAChE,OAAO,KAAK,EAA+B,cAAc,EAAE,MAAM,oBAAoB,CAAC;AAEtF;;;sCAGsC;AACtC,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,QAAQ,EAAE,UAAU,CAAC;IAC9B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB;iFAC6E;IAC7E,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,IAAI,CAAC,EAAE,OAAO,CAAC;IACxB;;;;;iFAK6E;IAC7E,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;IAClC;;;6EAGyE;IACzE,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,KAAK,CAAC,EAAE,SAAS,cAAc,EAAE,CAAC;IAC3C,QAAQ,CAAC,UAAU,CAAC,EAAE,UAAU,CAAC;IACjC;;;;;;;0BAOsB;IACtB,QAAQ,CAAC,KAAK,CAAC,EAAE;QAAE,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IACxE;;;;;;;iDAO6C;IAC7C,QAAQ,CAAC,SAAS,CAAC,EAAE;QAAE,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAA;KAAE,CAAC;IACjD;;;;mFAI+E;IAC/E,QAAQ,CAAC,WAAW,CAAC,EAAE,WAAW,CAAC;IACnC;;;;qFAIiF;IACjF,QAAQ,CAAC,SAAS,CAAC,EAAE,eAAe,CAAC;IACrC;;;;;;;;sEAQkE;IAClE,QAAQ,CAAC,cAAc,CAAC,EAAE,aAAa,CAAC;CACzC;AAED,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,SAAS,EAAE,cAAc,CAAC;IACnC;;+EAE2E;IAC3E,QAAQ,CAAC,sBAAsB,CAAC,EAAE,MAAM,CAAC;IACzC;;sEAEkE;IAClE,QAAQ,CAAC,QAAQ,CAAC,EAAE,WAAW,GAAG,IAAI,CAAC;CACxC;AAiED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,WAAW,GAAG,IAAI,CAiDhE;AAED,4EAA4E;AAC5E,wBAAgB,eAAe,CAAC,SAAS,EAAE,YAAY,EAAE,KAAK,EAAE,WAAW,GAAG,cAAc,CAsC3F;AAoOD;wDACwD;AACxD,wBAAsB,MAAM,CAAC,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,WAAW,GAAG,OAAO,CAAC,SAAS,CAAC,CAYrF;AAcD;;;;;;;GAOG;AACH,wBAAgB,YAAY,CAAC,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,WAAW,GAAG,eAAe,CAiDlF"}
+{"version":3,"file":"raw.d.ts","sourceRoot":"","sources":["../../src/run/raw.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA0CG;AAwBH,OAAO,EAAiC,KAAK,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACrF,OAAO,KAAK,EACV,cAAc,EAGd,YAAY,EAGZ,UAAU,EACV,eAAe,EACf,WAAW,EACX,UAAU,EACV,cAAc,EACf,MAAM,mBAAmB,CAAC;AAC3B,OAAO,KAAK,EAAW,SAAS,EAAE,OAAO,EAAE,MAAM,gBAAgB,CAAC;AAGlE,OAAO,KAAK,EAAkB,eAAe,EAAE,MAAM,UAAU,CAAC;AAChE,OAAO,KAAK,EAA+B,cAAc,EAAE,MAAM,oBAAoB,CAAC;AAEtF;;;sCAGsC;AACtC,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,QAAQ,EAAE,UAAU,CAAC;IAC9B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB;iFAC6E;IAC7E,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,IAAI,CAAC,EAAE,OAAO,CAAC;IACxB;;;;;iFAK6E;IAC7E,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;IAClC;;;6EAGyE;IACzE,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,KAAK,CAAC,EAAE,SAAS,cAAc,EAAE,CAAC;IAC3C,QAAQ,CAAC,UAAU,CAAC,EAAE,UAAU,CAAC;IACjC;;;;;;;0BAOsB;IACtB,QAAQ,CAAC,KAAK,CAAC,EAAE;QAAE,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IACxE;;;;;;;iDAO6C;IAC7C,QAAQ,CAAC,SAAS,CAAC,EAAE;QAAE,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAA;KAAE,CAAC;IACjD;;;;mFAI+E;IAC/E,QAAQ,CAAC,WAAW,CAAC,EAAE,WAAW,CAAC;IACnC;;;;qFAIiF;IACjF,QAAQ,CAAC,SAAS,CAAC,EAAE,eAAe,CAAC;IACrC;;;;;;;;sEAQkE;IAClE,QAAQ,CAAC,cAAc,CAAC,EAAE,aAAa,CAAC;CACzC;AAED,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,SAAS,EAAE,cAAc,CAAC;IACnC;;+EAE2E;IAC3E,QAAQ,CAAC,sBAAsB,CAAC,EAAE,MAAM,CAAC;IACzC;;sEAEkE;IAClE,QAAQ,CAAC,QAAQ,CAAC,EAAE,WAAW,GAAG,IAAI,CAAC;CACxC;AAiED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,WAAW,GAAG,IAAI,CAiDhE;AAED,4EAA4E;AAC5E,wBAAgB,eAAe,CAAC,SAAS,EAAE,YAAY,EAAE,KAAK,EAAE,WAAW,GAAG,cAAc,CAsC3F;AA2PD;wDACwD;AACxD,wBAAsB,MAAM,CAAC,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,WAAW,GAAG,OAAO,CAAC,SAAS,CAAC,CAYrF;AAcD;;;;;;;GAOG;AACH,wBAAgB,YAAY,CAAC,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,WAAW,GAAG,eAAe,CAiDlF"}

package/dist/run/raw.js

@@ -61,6 +61,7 @@ const raw_support_1 = require("./raw-support");
 const failures_1 = require("../types/failures");
 const run_context_1 = require("../artifacts/run-context");
 const manifest_1 = require("../routes/manifest");
+const attempt_meta_1 = require("../telemetry/attempt-meta");
 /**
  * R1 — resolve the effective raw-lane timeout. An explicit `timeoutMs` always
  * wins; absent, the fallback is TIER-AWARE (`RAW_TIMEOUT_DEFAULT_MS`), because a
@@ -267,6 +268,7 @@ function recordRawRow(telemetry, p) {
         callId: p.callId,
         attemptSeq: 1,
         candidateIndex: 0,
+        meta: p.meta,
     };
     telemetry.record(row);
 }
@@ -279,8 +281,9 @@ function recordRawRow(telemetry, p) {
  * step is ever recorded; the dispatch is byte-identical to pre-G1.
  */
 function prepareRawStep(deps, input) {
-    (0, manifest_1.warnMissingRequiredDimensions)(deps.manifest ?? null, input.tags ?? {});
     const runCtx = (0, run_context_1.getActiveRunContext)();
+    // Warn on the EFFECTIVE tags: an auto-stamped run_id (RC-1) is not missing.
+    (0, manifest_1.warnMissingRequiredDimensions)(deps.manifest ?? null, (0, run_context_1.withRunIdTag)(input.tags ?? {}, runCtx));
     if (runCtx === null)
         return null;
     const rawModelId = `${input.provider}/${input.model}`;
@@ -306,8 +309,22 @@ function finalizeRaw(deps, input, result, latencyMs, step) {
     const callId = (0, node_crypto_1.randomUUID)();
     // CE-2 F2: the declared tier is reported truthfully on the row AND the meta.
     const requestedTier = input.serviceTier ?? "standard";
-    // lane is SDK-owned and cannot be overridden by a caller-supplied tag.
-    const tags = { ...(input.tags ?? {}), lane: "raw" };
+    // RC-1: `run_id` from the ambient run (caller's value wins); lane is SDK-owned
+    // and cannot be overridden by a caller-supplied tag.
+    const tags = { ...(0, run_context_1.withRunIdTag)(input.tags ?? {}, step?.runCtx ?? null), lane: "raw" };
+    // WI-1 (spec §2, §6.3 lane parity): the attempt envelope, built by the SAME
+    // producer + rendered-request canonicalization the routed lane uses. The raw
+    // lane never sends an output schema (unvalidated by design), so schema = null.
+    const declaredToolNames = input.tools?.map((t) => t.function.name);
+    const rawMeta = (usage) => (0, attempt_meta_1.summarizeAttemptMeta)({
+        ...(result.meta !== undefined ? { adapterMeta: result.meta } : {}),
+        renderedRequest: (0, attempt_meta_1.renderRequestForHash)({ system: input.systemPrompt, user: input.userPrompt, schema: null }),
+        outputText: result.ok ? result.text : null,
+        ...(declaredToolNames !== undefined ? { declaredToolNames } : {}),
+        provider: input.provider,
+        model: input.model,
+        ...(usage !== undefined ? { usage } : {}),
+    });
     // G1: mirror this raw inference into a ground-truth step (parity with the
     // routed lane's record-attempt). task = tags.step ?? provider/model (spec F1).
     // Fail-open is handled inside emitGroundTruthStep (buffer errors are swallowed).
@@ -345,6 +362,7 @@ function finalizeRaw(deps, input, result, latencyMs, step) {
             tags,
             pricingMissing,
             callId,
+            meta: rawMeta(result.usage),
             ...(input.cache !== undefined ? { cacheKey: input.cache.key } : {}),
         });
         emitStep(failId, result.failure.class);
@@ -374,6 +392,7 @@ function finalizeRaw(deps, input, result, latencyMs, step) {
         tags,
         pricingMissing,
         callId,
+        meta: rawMeta(result.usage),
         ...(input.cache !== undefined ? { cacheKey: input.cache.key } : {}),
     });
     emitStep(id, null);

package/dist/run/record-attempt.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"record-attempt.d.ts","sourceRoot":"","sources":["../../src/run/record-attempt.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAGH,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AACnD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AACjE,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AAE3C,OAAO,KAAK,EAAE,WAAW,EAAE,UAAU,EAAE,OAAO,EAAE,MAAM,gBAAgB,CAAC;AACvE,OAAO,KAAK,EAAgB,aAAa,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AAGtF,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAEpD,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,SAAS,EAAE,cAAc,CAAC;IACnC,QAAQ,CAAC,KAAK,EAAE,WAAW,CAAC;IAC5B,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC;IAC7B;;;gDAG4C;IAC5C,QAAQ,CAAC,MAAM,EAAE,eAAe,CAAC;IACjC,QAAQ,CAAC,aAAa,EAAE,OAAO,CAAC;IAChC,QAAQ,CAAC,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IACtC,kFAAkF;IAClF,QAAQ,CAAC,MAAM,EAAE,gBAAgB,GAAG,IAAI,CAAC;IACzC,QAAQ,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IACpC;;qFAEiF;IACjF,QAAQ,CAAC,KAAK,CAAC,EAAE,UAAU,CAAC,OAAO,CAAC,CAAC;IACrC;;;wEAGoE;IACpE,QAAQ,CAAC,kBAAkB,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;CAClD;AAED;;;;;GAKG;AACH,wBAAgB,MAAM,CACpB,OAAO,EAAE,gBAAgB,EACzB,WAAW,EAAE,OAAO,EACpB,cAAc,EAAE,MAAM,GAAG,IAAI,EAC7B,iBAAiB,EAAE,GAAG,CAAC,MAAM,CAAC,GAC7B,aAAa,CAUf;AAED;;yCAEyC;AACzC,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,iBAAiB,GAAG,CAAC,OAAO,EAAE,gBAAgB,KAAK,MAAM,CA+FlG"}
+{"version":3,"file":"record-attempt.d.ts","sourceRoot":"","sources":["../../src/run/record-attempt.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAGH,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AACnD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AACjE,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AAE3C,OAAO,KAAK,EAAE,WAAW,EAAE,UAAU,EAAE,OAAO,EAAE,MAAM,gBAAgB,CAAC;AACvE,OAAO,KAAK,EAAgB,aAAa,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AAGtF,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAGpD,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,SAAS,EAAE,cAAc,CAAC;IACnC,QAAQ,CAAC,KAAK,EAAE,WAAW,CAAC;IAC5B,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC;IAC7B;;;gDAG4C;IAC5C,QAAQ,CAAC,MAAM,EAAE,eAAe,CAAC;IACjC,QAAQ,CAAC,aAAa,EAAE,OAAO,CAAC;IAChC,QAAQ,CAAC,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IACtC,kFAAkF;IAClF,QAAQ,CAAC,MAAM,EAAE,gBAAgB,GAAG,IAAI,CAAC;IACzC,QAAQ,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IACpC;;qFAEiF;IACjF,QAAQ,CAAC,KAAK,CAAC,EAAE,UAAU,CAAC,OAAO,CAAC,CAAC;IACrC;;;wEAGoE;IACpE,QAAQ,CAAC,kBAAkB,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;CAClD;AAED;;;;;GAKG;AACH,wBAAgB,MAAM,CACpB,OAAO,EAAE,gBAAgB,EACzB,WAAW,EAAE,OAAO,EACpB,cAAc,EAAE,MAAM,GAAG,IAAI,EAC7B,iBAAiB,EAAE,GAAG,CAAC,MAAM,CAAC,GAC7B,aAAa,CAUf;AAED;;yCAEyC;AACzC,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,iBAAiB,GAAG,CAAC,OAAO,EAAE,gBAAgB,KAAK,MAAM,CAmHlG"}

package/dist/run/record-attempt.js

@@ -17,6 +17,7 @@ const node_crypto_1 = require("node:crypto");
 const failures_1 = require("../types/failures");
 const cache_stamp_1 = require("./cache-stamp");
 const cache_handle_1 = require("./cache-handle");
+const attempt_meta_1 = require("../telemetry/attempt-meta");
 /**
  * Classify a recorded row's ladder rung (R1 review, F1). `primaryDispatched`
  * carries the candidate indices already given a primary dispatch on this call —
@@ -91,6 +92,23 @@ function createRecordAttempt(deps) {
         // pre-dispatch terminal failure, then primary-vs-retry by whether this
         // candidate index was already dispatched on this call.
         const rung = rungOf(attempt, preDispatch, ladderKey.candidateIndex, primaryDispatched);
+        // WI-1 (spec §2): the metadata-safe attempt envelope. The single producer
+        // hashes the rendered request/output, computes cost components + context
+        // bucket, and enforces the classification rule; it never throws (a failure
+        // returns null — the row is byte-identical). Built from the adapter's native
+        // meta (metaInputs) plus THIS row's provider/model/usage.
+        const meta = (0, attempt_meta_1.summarizeAttemptMeta)({
+            ...(attempt.metaInputs ?? {}),
+            provider: attempt.candidate.provider,
+            model: attempt.candidate.model,
+            usage: {
+                tokensIn: attempt.tokensIn,
+                tokensOut: attempt.tokensOut,
+                tokensCached: attempt.tokensCached,
+                ...(attempt.tokensCacheWrite !== undefined ? { tokensCacheWrite: attempt.tokensCacheWrite } : {}),
+                ...(attempt.tokensCacheWrite1h !== undefined ? { tokensCacheWrite1h: attempt.tokensCacheWrite1h } : {}),
+            },
+        });
         const row = {
             id: (0, node_crypto_1.randomUUID)(),
             ts: new Date().toISOString(),
@@ -113,7 +131,9 @@ function createRecordAttempt(deps) {
             ttfbMs: attempt.ttfbMs ?? null,
             failureClass: attempt.failure?.class ?? null,
             attemptsJson: JSON.stringify(ledger.snapshot()),
-            tagsJson: JSON.stringify({ ...effectiveTags, rung }),
+            // `rung` is stamped LAST so a caller's extraTags (Q1 quality tags) can
+            // never override the recorder-owned rung.
+            tagsJson: JSON.stringify({ ...effectiveTags, ...attempt.extraTags, rung }),
             fingerprintCell: route.fingerprintCell,
             servedVariant,
             repairedBy: attempt.repairedBy ?? null,
@@ -121,6 +141,7 @@ function createRecordAttempt(deps) {
             callId: ladderKey.callId,
             attemptSeq: ladderKey.attemptSeq,
             candidateIndex: ladderKey.candidateIndex,
+            meta,
         };
         telemetry.record(row);
         // Mirror this inference into a ground-truth step attempt (fail-open — the

package/dist/run/routing-docs.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"routing-docs.d.ts","sourceRoot":"","sources":["../../src/run/routing-docs.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAItD,MAAM,MAAM,cAAc,GAAG,WAAW,GAAG,UAAU,GAAG,QAAQ,GAAG,WAAW,CAAC;AAE/E,MAAM,WAAW,gBAAgB;IAC/B,sEAAsE;IACtE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,6DAA6D;IAC7D,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B,yEAAyE;IACzE,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;CAC7B;AAED,MAAM,WAAW,aAAa;IAC5B,6EAA6E;IAC7E,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,MAAM,EAAE,cAAc,CAAC;IAChC,kBAAkB;IAClB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,uDAAuD;IACvD,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,kDAAkD;IAClD,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,QAAQ,CAAC,EAAE,gBAAgB,GAAG;QAAE,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAA;KAAE,CAAC;CAC3E;AAED,yCAAyC;AACzC,eAAO,MAAM,qBAAqB,EAAE,QAAQ,CAAC,MAAM,CAAC,cAAc,EAAE,MAAM,CAAC,CAK1E,CAAC;AAEF;;;;;;GAMG;AACH,eAAO,MAAM,gBAAgB,EAAE,SAAS,aAAa,EA0FpD,CAAC;AAwBF;;;;;;;;GAQG;AACH,wBAAgB,qBAAqB,CAAC,SAAS,CAAC,EAAE,WAAW,CAAC,MAAM,CAAC,GAAG,MAAM,CAoB7E;AAED;;;;+DAI+D;AAC/D,wBAAgB,iBAAiB,IAAI,SAAS,YAAY,EAAE,CAE3D;AA0BD;;;;;GAKG;AACH,wBAAgB,oBAAoB,IAAI,MAAM,CAW7C;AAED,gFAAgF;AAChF,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,YAAY,GAAG,MAAM,CAE5D"}
+{"version":3,"file":"routing-docs.d.ts","sourceRoot":"","sources":["../../src/run/routing-docs.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAItD,MAAM,MAAM,cAAc,GAAG,WAAW,GAAG,UAAU,GAAG,QAAQ,GAAG,WAAW,CAAC;AAE/E,MAAM,WAAW,gBAAgB;IAC/B,sEAAsE;IACtE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,6DAA6D;IAC7D,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B,yEAAyE;IACzE,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;CAC7B;AAED,MAAM,WAAW,aAAa;IAC5B,6EAA6E;IAC7E,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,MAAM,EAAE,cAAc,CAAC;IAChC,kBAAkB;IAClB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,uDAAuD;IACvD,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,kDAAkD;IAClD,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,QAAQ,CAAC,EAAE,gBAAgB,GAAG;QAAE,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAA;KAAE,CAAC;CAC3E;AAED,yCAAyC;AACzC,eAAO,MAAM,qBAAqB,EAAE,QAAQ,CAAC,MAAM,CAAC,cAAc,EAAE,MAAM,CAAC,CAK1E,CAAC;AAEF;;;;;;GAMG;AACH,eAAO,MAAM,gBAAgB,EAAE,SAAS,aAAa,EAiGpD,CAAC;AAwBF;;;;;;;;GAQG;AACH,wBAAgB,qBAAqB,CAAC,SAAS,CAAC,EAAE,WAAW,CAAC,MAAM,CAAC,GAAG,MAAM,CAoB7E;AAED;;;;+DAI+D;AAC/D,wBAAgB,iBAAiB,IAAI,SAAS,YAAY,EAAE,CAE3D;AA0BD;;;;;GAKG;AACH,wBAAgB,oBAAoB,IAAI,MAAM,CAW7C;AAED,gFAAgF;AAChF,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,YAAY,GAAG,MAAM,CAE5D"}

package/dist/run/routing-docs.js

@@ -38,10 +38,17 @@ exports.ROUTING_BOUNDARY = [
     {
         id: "B1",
         status: "not_built",
-        capability: "Quality / value-accuracy gate in the ladder",
-        statement: "Fall-through is triggered by structure and infrastructure only; no builder-defined predicate or judge can reject a schema-valid output at run time — value accuracy exists offline, in bake-offs.",
-        tracking: "customer request on file (2026-08-21); not scheduled",
-        tripwire: { file: "src/types/route.ts", mustNotMatch: /qualityGate|"judged"/ },
+        capability: "Route-declared judge (hosted lane)",
+        statement: "The SDK-lane `qualityGate` predicate (it rejects a schema-valid output as `quality_rejected`) ships; a route-DECLARED judge that runs on the hosted lane — a `judge:` block in the bundle with a rubric — is not built, and the bake-off-scoped `bakeoff.judge` (offline scoring) (which only measures value accuracy during a bake-off) is a separate SDK feature that never serves the hosted lane.",
+        tracking: "Route-declared judge — customer request on file (2026-08-21); follows the SDK predicate",
+        // The SDK predicate flipped this entry: adding `qualityGate` to route.ts would
+        // fire the old /qualityGate|"judged"/ tripwire, so it watches for the
+        // HOSTED declared-judge shape — a `judge?: JudgePolicy` field or a judge block
+        // carrying a `rubric` (spec §3). RB-1 added `bakeoff.judge?: { model,
+        // maxSamples }` (no rubric, nested in BakeoffConfig) — deliberately NOT the
+        // hosted judge, so the regex requires the rubric/JudgePolicy shape to avoid a
+        // false positive. `judgedBy:` and prose mentions of "judge" still do not match.
+        tripwire: { file: "src/types/route.ts", mustNotMatch: /\bjudge\??\s*:\s*JudgePolicy\b|\brubric\s*:/ },
     },
     {
         id: "B2",

package/dist/run/run.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"run.d.ts","sourceRoot":"","sources":["../../src/run/run.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAMrD,OAAO,KAAK,EAAE,eAAe,EAAgB,MAAM,mBAAmB,CAAC;AAGvE,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAEtD,OAAO,KAAK,EAAW,UAAU,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AACrE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AACzD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AACzD,OAAO,KAAK,EAAE,gBAAgB,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAS3D,OAAO,KAAK,EAAE,cAAc,EAAoC,MAAM,aAAa,CAAC;AAUpF,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAKlD,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAC;AAEtE,MAAM,WAAW,OAAO;IACtB,QAAQ,CAAC,MAAM,EAAE,YAAY,CAAC;IAC9B,QAAQ,CAAC,QAAQ,EAAE,WAAW,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC;IACxD,QAAQ,CAAC,SAAS,EAAE,cAAc,CAAC;IACnC,QAAQ,CAAC,YAAY,EAAE,gBAAgB,CAAC;IACxC,+EAA+E;IAC/E,QAAQ,CAAC,iBAAiB,CAAC,EAAE,MAAM,CAAC;IACpC;;gDAE4C;IAC5C,QAAQ,CAAC,sBAAsB,CAAC,EAAE,MAAM,CAAC;IACzC,0EAA0E;IAC1E,QAAQ,CAAC,QAAQ,CAAC,EAAE,WAAW,GAAG,IAAI,CAAC;IACvC;2EACuE;IACvE,QAAQ,CAAC,QAAQ,CAAC,EAAE,YAAY,GAAG,IAAI,CAAC;IACxC;;0BAEsB;IACtB,QAAQ,CAAC,MAAM,CAAC,EAAE,cAAc,GAAG,IAAI,CAAC;IACxC,qDAAqD;IACrD,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAC/C;;;mFAG+E;IAC/E,QAAQ,CAAC,aAAa,CAAC,EAAE,eAAe,CAAC;IACzC;;;;;uDAKmD;IACnD,QAAQ,CAAC,QAAQ,CAAC,EAAE,oBAAoB,GAAG,IAAI,CAAC;IAChD;;;;2EAIuE;IACvE,QAAQ,CAAC,IAAI,CAAC,EAAE,OAAO,CAAC;CACzB;AAsBD,wBAAsB,GAAG,CAAC,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,GAAG,OAAO,CAAC,SAAS,CAAC,CAgkBhG"}
+{"version":3,"file":"run.d.ts","sourceRoot":"","sources":["../../src/run/run.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAMrD,OAAO,KAAK,EAAE,eAAe,EAAgB,MAAM,mBAAmB,CAAC;AAGvE,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAEtD,OAAO,KAAK,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAC5D,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AACzD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AACzD,OAAO,KAAK,EAAE,gBAAgB,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAS3D,OAAO,KAAK,EAAE,cAAc,EAAoC,MAAM,aAAa,CAAC;AAWpF,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAOlD,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAC;AAEtE,MAAM,WAAW,OAAO;IACtB,QAAQ,CAAC,MAAM,EAAE,YAAY,CAAC;IAC9B,QAAQ,CAAC,QAAQ,EAAE,WAAW,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC;IACxD,QAAQ,CAAC,SAAS,EAAE,cAAc,CAAC;IACnC,QAAQ,CAAC,YAAY,EAAE,gBAAgB,CAAC;IACxC,+EAA+E;IAC/E,QAAQ,CAAC,iBAAiB,CAAC,EAAE,MAAM,CAAC;IACpC;;gDAE4C;IAC5C,QAAQ,CAAC,sBAAsB,CAAC,EAAE,MAAM,CAAC;IACzC,0EAA0E;IAC1E,QAAQ,CAAC,QAAQ,CAAC,EAAE,WAAW,GAAG,IAAI,CAAC;IACvC;2EACuE;IACvE,QAAQ,CAAC,QAAQ,CAAC,EAAE,YAAY,GAAG,IAAI,CAAC;IACxC;;0BAEsB;IACtB,QAAQ,CAAC,MAAM,CAAC,EAAE,cAAc,GAAG,IAAI,CAAC;IACxC,qDAAqD;IACrD,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAC/C;;;mFAG+E;IAC/E,QAAQ,CAAC,aAAa,CAAC,EAAE,eAAe,CAAC;IACzC;;;;;uDAKmD;IACnD,QAAQ,CAAC,QAAQ,CAAC,EAAE,oBAAoB,GAAG,IAAI,CAAC;IAChD;;;;2EAIuE;IACvE,QAAQ,CAAC,IAAI,CAAC,EAAE,OAAO,CAAC;CACzB;AAsBD,wBAAsB,GAAG,CAAC,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,GAAG,OAAO,CAAC,SAAS,CAAC,CAwkBhG"}

package/dist/run/run.js

@@ -26,6 +26,8 @@ const validate_1 = require("./validate");
 const dispatch_1 = require("./dispatch");
 const record_attempt_1 = require("./record-attempt");
 const ladder_key_1 = require("./ladder-key");
+const quality_gate_1 = require("./quality-gate");
+const accept_1 = require("./accept");
 const run_context_1 = require("../artifacts/run-context");
 const capture_write_1 = require("./capture-write");
 /** Phase 1 prompt convention: the bundle's system template carries the whole
@@ -50,9 +52,13 @@ async function run(deps, routeName, opts) {
     const variant = (0, variant_1.resolveVariant)(baseRoute, opts.variant, mode);
     const servedVariant = variant?.name ?? null;
     const route = (0, resolve_1.applyRunRequirements)((0, variant_1.effectiveRoute)(baseRoute, variant), opts.zeroRetention === true);
-    const effectiveTags = route.require.includes("zero_retention") ? { ...opts.tags, zdr_enforced: "true" } : opts.tags;
+    // RC-1: inside a run context the SDK stamps `run_id` (episodeKey, else run id)
+    // when the caller passed none — the bridge between tags and the run graph.
+    const runCtx = (0, run_context_1.getActiveRunContext)();
+    const runTags = (0, run_context_1.withRunIdTag)(opts.tags, runCtx);
+    const effectiveTags = route.require.includes("zero_retention") ? { ...runTags, zdr_enforced: "true" } : runTags;
     // Data-hygiene warning (spec WS5): once per process per dimension.
-    (0, manifest_1.warnMissingRequiredDimensions)(deps.manifest ?? null, opts.tags);
+    (0, manifest_1.warnMissingRequiredDimensions)(deps.manifest ?? null, effectiveTags);
     const ledger = (0, retry_1.createRetryLedger)(route.policy);
     const sleep = deps.sleep ?? DEFAULT_SLEEP;
     const guard = opts.budget
@@ -68,7 +74,6 @@ async function run(deps, routeName, opts) {
     // Auto-step (E2 chunk A, spec §1.4): with an active run context, each attempt
     // exit that records an inference also records a ground-truth step referencing
     // it (attempt-per-row, ruling c). Inert without a run.start on this path.
-    const runCtx = (0, run_context_1.getActiveRunContext)();
     const autoStepKey = runCtx !== null ? (0, run_context_1.resolveStepKey)(opts.stepKey, opts.tags.step, () => runCtx.nextStepKey(route.route)) : null;
     // Per-call ladder key (spec §2.1 R0): one call_id, a monotonic attempt_seq per
     // row, and the current candidate_index (advanced by nextCandidate below).
@@ -171,6 +176,7 @@ async function run(deps, routeName, opts) {
                 failure: result.failure,
                 repairedBy,
                 pricingMissing: repairFailurePricingMissing,
+                metaInputs: (0, dispatch_1.attemptMetaInputs)({ systemPrompt, userDirective: REPAIR_DIRECTIVE, outputSchema: route.outputSchema, result }),
             });
             if (failures_1.TERMINAL_CLASSES.has(result.failure.class)) {
                 throw new failures_1.RigFailureError(result.failure);
@@ -202,6 +208,7 @@ async function run(deps, routeName, opts) {
             failure,
             repairedBy,
             pricingMissing: repairPricingMissing,
+            metaInputs: (0, dispatch_1.attemptMetaInputs)({ systemPrompt, userDirective: REPAIR_DIRECTIVE, outputSchema: route.outputSchema, result }),
         });
         captureAttempt(inferenceId, result.text);
         if (!outcome.valid) {
@@ -386,47 +393,45 @@ async function run(deps, routeName, opts) {
                     servedVariant,
                     pricingMissing,
                     callId: ladder.callId,
+                    metaInputs: (0, dispatch_1.attemptMetaInputs)({ systemPrompt, userDirective: USER_DIRECTIVE, outputSchema: route.outputSchema, result, tools: opts.tools }),
                 });
             }
             const outcome = (0, validate_1.validateOutput)(route, result.text);
+            const metaInputs = (0, dispatch_1.attemptMetaInputs)({ systemPrompt, userDirective: USER_DIRECTIVE, outputSchema: route.outputSchema, result, tools: opts.tools });
             if (outcome.valid) {
-                const inferenceId = recordAttempt({
-                    candidate,
-                    servedTier: result.usage.servedTier,
-                    tokensIn: result.usage.tokensIn,
-                    tokensOut: result.usage.tokensOut,
-                    tokensCached: result.usage.tokensCached,
-                    tokensCacheWrite: result.usage.tokensCacheWrite ?? 0,
-                    tokensCacheWrite1h: result.usage.tokensCacheWrite1h ?? 0,
-                    costUsd,
-                    latencyMs,
-                    ...(result.usage.ttfbMs !== undefined ? { ttfbMs: result.usage.ttfbMs } : {}),
-                    failure: null,
-                    pricingMissing,
-                });
+                // Q1 quality gate (spec §4.1): a schema-valid output must still clear the
+                // builder's bar before it is accepted. Tool-call turns never reach here;
+                // a `schema: null` route gates on the parsed JSON just the same. Gate
+                // logic (async await, fail-closed throw, tag/message shaping) lives in
+                // ./quality-gate.ts so this stays ONE seam.
+                const gateMeta = { route: route.route, provider: candidate.provider, model: candidate.model,
+                    candidateIndex: iter.index, attemptSeq: ladder.peekNextSeq(), servedVariant };
+                const gate = opts.qualityGate === undefined
+                    ? null
+                    : await (0, quality_gate_1.evaluateQualityGate)(opts.qualityGate, outcome.parsed, gateMeta);
+                if (gate !== null && !gate.pass) {
+                    // Rejected on quality: its OWN class + budget; the repair rung is NEVER
+                    // entered from here (spec §4.1 step 3). The rejected text is captured
+                    // so it stays replayable.
+                    const failure = { class: "quality_rejected",
+                        message: (0, quality_gate_1.qualityRejectedMessage)(gate), provider: candidate.provider, model: candidate.model };
+                    const rejectedId = recordAttempt((0, accept_1.successAttemptRow)(candidate, result.usage, costUsd, latencyMs, pricingMissing, failure, metaInputs, (0, quality_gate_1.qualityTags)(gate)));
+                    captureAttempt(rejectedId, result.text);
+                    lastFailure = failure;
+                    if (ledger.consume("quality_rejected"))
+                        continue; // re-sample the SAME candidate
+                    candidate = nextCandidate();
+                    continue;
+                }
+                const acceptTags = gate !== null ? (0, quality_gate_1.qualityTags)(gate) : undefined;
+                const inferenceId = recordAttempt((0, accept_1.successAttemptRow)(candidate, result.usage, costUsd, latencyMs, pricingMissing, null, metaInputs, acceptTags));
                 captureAttempt(inferenceId, result.text);
-                const meta = {
-                    inferenceId,
-                    route: route.route,
-                    routeVersion: route.version,
-                    provider: candidate.provider,
-                    model: candidate.model,
-                    requestedTier: route.policy.tier,
-                    servedTier: result.usage.servedTier,
-                    tokensIn: result.usage.tokensIn,
-                    tokensOut: result.usage.tokensOut,
-                    tokensCached: result.usage.tokensCached,
-                    costEstimateUsd: costUsd,
-                    latencyMs,
-                    validated: true,
-                    attemptsByClass: ledger.snapshot(),
-                    servedVariant,
-                    repairedBy: null,
-                    callId: ladder.callId,
-                    ...(injectedSources !== null
-                        ? { citations: (0, grounding_1.extractCitations)(result.text, injectedSources) }
-                        : {}),
-                };
+                const meta = (0, accept_1.buildSuccessMeta)({
+                    inferenceId, route, candidate, usage: result.usage, costUsd, latencyMs,
+                    attemptsByClass: ledger.snapshot(), servedVariant, callId: ladder.callId,
+                    ...(injectedSources !== null ? { citations: (0, grounding_1.extractCitations)(result.text, injectedSources) } : {}),
+                    ...(gate !== null ? { quality: { score: gate.score, verdict: "pass", judgedBy: null } } : {}),
+                });
                 return { output: outcome.parsed, meta };
             }
             // Schema-invalid output — a real (billed) attempt that failed.
@@ -449,6 +454,7 @@ async function run(deps, routeName, opts) {
                 ...(result.usage.ttfbMs !== undefined ? { ttfbMs: result.usage.ttfbMs } : {}),
                 failure,
                 pricingMissing,
+                metaInputs, // computed once above (same `result`) — reused across valid/invalid
             });
             captureAttempt(invalidId, result.text);
             lastFailure = failure;
@@ -501,6 +507,7 @@ async function run(deps, routeName, opts) {
             ...(result.usage?.ttfbMs !== undefined ? { ttfbMs: result.usage.ttfbMs } : {}),
             failure,
             pricingMissing: failurePricingMissing,
+            metaInputs: (0, dispatch_1.attemptMetaInputs)({ systemPrompt, userDirective: USER_DIRECTIVE, outputSchema: route.outputSchema, result, tools: opts.tools }),
         });
         if (failures_1.TERMINAL_CLASSES.has(failure.class)) {
             throw new failures_1.RigFailureError(failure);

package/dist/settings/index.d.ts

@@ -3,7 +3,7 @@
  * Re-exported from the SDK entrypoint so `index.ts` stays under the LOC cap and
  * the settings surface has one home.
  */
-export { createTaskSettingsResolver, effectiveCapture, DEFAULT_TASK_SETTINGS, } from "./task-settings";
+export { createTaskSettingsResolver, effectiveCapture, effectiveScrubMode, DEFAULT_TASK_SETTINGS, } from "./task-settings";
 export type { TaskSettings, TaskSettingsResolver, TaskSettingsFetcher } from "./task-settings";
 export { createApiTaskSettingsFetcher, startApiSettings } from "./api-fetcher";
 export type { ApiTaskSettingsFetcherConfig } from "./api-fetcher";

package/dist/settings/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/settings/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EACL,0BAA0B,EAC1B,gBAAgB,EAChB,qBAAqB,GACtB,MAAM,iBAAiB,CAAC;AACzB,YAAY,EAAE,YAAY,EAAE,oBAAoB,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAC;AAC/F,OAAO,EAAE,4BAA4B,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AAC/E,YAAY,EAAE,4BAA4B,EAAE,MAAM,eAAe,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/settings/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EACL,0BAA0B,EAC1B,gBAAgB,EAChB,kBAAkB,EAClB,qBAAqB,GACtB,MAAM,iBAAiB,CAAC;AACzB,YAAY,EAAE,YAAY,EAAE,oBAAoB,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAC;AAC/F,OAAO,EAAE,4BAA4B,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AAC/E,YAAY,EAAE,4BAA4B,EAAE,MAAM,eAAe,CAAC"}

package/dist/settings/index.js

@@ -5,10 +5,11 @@
  * the settings surface has one home.
  */
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.startApiSettings = exports.createApiTaskSettingsFetcher = exports.DEFAULT_TASK_SETTINGS = exports.effectiveCapture = exports.createTaskSettingsResolver = void 0;
+exports.startApiSettings = exports.createApiTaskSettingsFetcher = exports.DEFAULT_TASK_SETTINGS = exports.effectiveScrubMode = exports.effectiveCapture = exports.createTaskSettingsResolver = void 0;
 var task_settings_1 = require("./task-settings");
 Object.defineProperty(exports, "createTaskSettingsResolver", { enumerable: true, get: function () { return task_settings_1.createTaskSettingsResolver; } });
 Object.defineProperty(exports, "effectiveCapture", { enumerable: true, get: function () { return task_settings_1.effectiveCapture; } });
+Object.defineProperty(exports, "effectiveScrubMode", { enumerable: true, get: function () { return task_settings_1.effectiveScrubMode; } });
 Object.defineProperty(exports, "DEFAULT_TASK_SETTINGS", { enumerable: true, get: function () { return task_settings_1.DEFAULT_TASK_SETTINGS; } });
 var api_fetcher_1 = require("./api-fetcher");
 Object.defineProperty(exports, "createApiTaskSettingsFetcher", { enumerable: true, get: function () { return api_fetcher_1.createApiTaskSettingsFetcher; } });

package/dist/settings/task-settings.d.ts

@@ -88,4 +88,14 @@ export declare function createTaskSettingsResolver(config: TaskSettingsResolverC
  * because there is no control-plane row to resolve.
  */
 export declare function effectiveCapture(resolver: TaskSettingsResolver | null, task: string | undefined, yamlCapture: boolean): boolean;
+/**
+ * The EFFECTIVE scrub mode for an artifact, given the task's configured mode and
+ * the artifact's `data_classification` (screening SC-0 S8-c). A `pii`/`phi`
+ * artifact resolves a FLOOR of `redact` — content carrying PII/PHI is never
+ * uploaded verbatim just because the task's mode was `off`/`detect`. A stronger
+ * configured mode wins: `block` stays `block` (block ≥ redact — it refuses the
+ * upload entirely). A non-sensitive (or absent) classification leaves the
+ * configured mode untouched. Pure; the single place the floor is spelled.
+ */
+export declare function effectiveScrubMode(configured: ScrubMode, classification: string | null | undefined): ScrubMode;
 //# sourceMappingURL=task-settings.d.ts.map

package/dist/settings/task-settings.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"task-settings.d.ts","sourceRoot":"","sources":["../../src/settings/task-settings.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAEH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAE3C;0EAC0E;AAC1E,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,2EAA2E;IAC3E,QAAQ,CAAC,iBAAiB,EAAE,OAAO,GAAG,IAAI,CAAC;IAC3C,QAAQ,CAAC,gBAAgB,EAAE,OAAO,CAAC;IACnC,QAAQ,CAAC,KAAK,EAAE,SAAS,CAAC;CAC3B;AAED;;;uCAGuC;AACvC,eAAO,MAAM,qBAAqB,EAAE,YAKnC,CAAC;AAEF;;;2EAG2E;AAC3E,MAAM,WAAW,mBAAmB;IAClC,KAAK,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,GAAG,IAAI,CAAC,CAAC;CACnD;AAED,MAAM,WAAW,oBAAoB;IACnC;sFACkF;IAClF,GAAG,CAAC,IAAI,EAAE,MAAM,GAAG,YAAY,CAAC;IAChC;oEACgE;IAChE,QAAQ,IAAI,WAAW,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;IAC9C;;gEAE4D;IAC5D,KAAK,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B;2EACuE;IACvE,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IACzB,4CAA4C;IAC5C,KAAK,IAAI,IAAI,CAAC;IACd,2CAA2C;IAC3C,IAAI,IAAI,IAAI,CAAC;CACd;AAED,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,OAAO,EAAE,mBAAmB,CAAC;IACtC;gFAC4E;IAC5E,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,yDAAyD;IACzD,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,IAAI,EAAE,EAAE,EAAE,MAAM,KAAK,UAAU,CAAC,OAAO,WAAW,CAAC,CAAC;IACtF,QAAQ,CAAC,aAAa,CAAC,EAAE,CAAC,MAAM,EAAE,UAAU,CAAC,OAAO,WAAW,CAAC,KAAK,IAAI,CAAC;CAC3E;AAED;;;;;GAKG;AACH,wBAAgB,0BAA0B,CACxC,MAAM,EAAE,0BAA0B,GACjC,oBAAoB,CA4DtB;AAED;;;;;;;GAOG;AACH,wBAAgB,gBAAgB,CAC9B,QAAQ,EAAE,oBAAoB,GAAG,IAAI,EACrC,IAAI,EAAE,MAAM,GAAG,SAAS,EACxB,WAAW,EAAE,OAAO,GACnB,OAAO,CAGT"}
+{"version":3,"file":"task-settings.d.ts","sourceRoot":"","sources":["../../src/settings/task-settings.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAEH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAG3C;0EAC0E;AAC1E,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,2EAA2E;IAC3E,QAAQ,CAAC,iBAAiB,EAAE,OAAO,GAAG,IAAI,CAAC;IAC3C,QAAQ,CAAC,gBAAgB,EAAE,OAAO,CAAC;IACnC,QAAQ,CAAC,KAAK,EAAE,SAAS,CAAC;CAC3B;AAED;;;uCAGuC;AACvC,eAAO,MAAM,qBAAqB,EAAE,YAKnC,CAAC;AAEF;;;2EAG2E;AAC3E,MAAM,WAAW,mBAAmB;IAClC,KAAK,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,GAAG,IAAI,CAAC,CAAC;CACnD;AAED,MAAM,WAAW,oBAAoB;IACnC;sFACkF;IAClF,GAAG,CAAC,IAAI,EAAE,MAAM,GAAG,YAAY,CAAC;IAChC;oEACgE;IAChE,QAAQ,IAAI,WAAW,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;IAC9C;;gEAE4D;IAC5D,KAAK,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B;2EACuE;IACvE,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IACzB,4CAA4C;IAC5C,KAAK,IAAI,IAAI,CAAC;IACd,2CAA2C;IAC3C,IAAI,IAAI,IAAI,CAAC;CACd;AAED,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,OAAO,EAAE,mBAAmB,CAAC;IACtC;gFAC4E;IAC5E,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,yDAAyD;IACzD,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,IAAI,EAAE,EAAE,EAAE,MAAM,KAAK,UAAU,CAAC,OAAO,WAAW,CAAC,CAAC;IACtF,QAAQ,CAAC,aAAa,CAAC,EAAE,CAAC,MAAM,EAAE,UAAU,CAAC,OAAO,WAAW,CAAC,KAAK,IAAI,CAAC;CAC3E;AAED;;;;;GAKG;AACH,wBAAgB,0BAA0B,CACxC,MAAM,EAAE,0BAA0B,GACjC,oBAAoB,CA4DtB;AAED;;;;;;;GAOG;AACH,wBAAgB,gBAAgB,CAC9B,QAAQ,EAAE,oBAAoB,GAAG,IAAI,EACrC,IAAI,EAAE,MAAM,GAAG,SAAS,EACxB,WAAW,EAAE,OAAO,GACnB,OAAO,CAGT;AAED;;;;;;;;GAQG;AACH,wBAAgB,kBAAkB,CAChC,UAAU,EAAE,SAAS,EACrB,cAAc,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GACxC,SAAS,CAIX"}

package/dist/settings/task-settings.js

@@ -27,6 +27,8 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.DEFAULT_TASK_SETTINGS = void 0;
 exports.createTaskSettingsResolver = createTaskSettingsResolver;
 exports.effectiveCapture = effectiveCapture;
+exports.effectiveScrubMode = effectiveScrubMode;
+const classification_1 = require("../artifacts/classification");
 /** The safe floor for a task the control plane has not answered for yet: capture
  * OFF, artifacts inherit the default, content OFF, scrub the schema default. A
  * run that reaches the cache before the first fetch lands sees this — never a
@@ -114,3 +116,18 @@ function effectiveCapture(resolver, task, yamlCapture) {
         return yamlCapture;
     return resolver.get(task).capture;
 }
+/**
+ * The EFFECTIVE scrub mode for an artifact, given the task's configured mode and
+ * the artifact's `data_classification` (screening SC-0 S8-c). A `pii`/`phi`
+ * artifact resolves a FLOOR of `redact` — content carrying PII/PHI is never
+ * uploaded verbatim just because the task's mode was `off`/`detect`. A stronger
+ * configured mode wins: `block` stays `block` (block ≥ redact — it refuses the
+ * upload entirely). A non-sensitive (or absent) classification leaves the
+ * configured mode untouched. Pure; the single place the floor is spelled.
+ */
+function effectiveScrubMode(configured, classification) {
+    if (classification == null || !classification_1.SENSITIVE_CLASSIFICATIONS.has(classification))
+        return configured;
+    // Sensitive tier: never below `redact`. `block` is stronger and stays.
+    return configured === "block" ? "block" : "redact";
+}