modelrig 0.5.0 → 0.7.0

package/dist/artifacts/classification.js

@@ -0,0 +1,38 @@
+"use strict";
+/**
+ * The `data_classification` enum — the ONE place the vocabulary is spelled
+ * (screening SC-0 S8). Backs three enforcement points that must agree:
+ *   • the SDK save gate (`artifact.ts` — teaching warn + drop on a bad value),
+ *   • the server ingest validator (`ingest-artifacts.ts` — enum-only, counted),
+ *   • the DB CHECK (`00058_artifacts_data_classification_enum.sql`).
+ * Keeping the list here (not re-spelled at each site) is what keeps the three
+ * from drifting; the migration and this constant are diffed by eye in review.
+ *
+ * `pii`/`phi` are the SENSITIVE tiers: an artifact tagged either resolves an
+ * effective scrub mode of at least `redact` regardless of the task's configured
+ * mode (S8-c, `settings/task-settings.ts effectiveScrubMode`). NULL stays a
+ * valid "unclassified" state — the column is nullable and the SDK sends null
+ * when no classification is given; the enum constrains only NON-null values.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SENSITIVE_CLASSIFICATIONS = exports.DATA_CLASSIFICATIONS = void 0;
+exports.normalizeClassification = normalizeClassification;
+exports.isDataClassification = isDataClassification;
+exports.DATA_CLASSIFICATIONS = ["public", "internal", "confidential", "pii", "phi"];
+/** The tiers that force the scrub floor (S8-c). A set for O(1) membership. */
+exports.SENSITIVE_CLASSIFICATIONS = new Set(["pii", "phi"]);
+/** Normalize a caller-supplied classification the way both enforcement sides
+ * do BEFORE the enum check — trim and lowercase, so `"PHI"`/`" phi "` resolve to
+ * `phi` (and keep their scrub floor) rather than silently dropping. Non-strings
+ * return null. */
+function normalizeClassification(value) {
+    if (typeof value !== "string")
+        return null;
+    const norm = value.trim().toLowerCase();
+    return norm === "" ? null : norm;
+}
+/** True when `value` is one of the enum values (after normalization). */
+function isDataClassification(value) {
+    const norm = normalizeClassification(value);
+    return norm !== null && exports.DATA_CLASSIFICATIONS.includes(norm);
+}

package/dist/artifacts/index.d.ts

@@ -18,8 +18,10 @@ export type { ArtifactStore } from "../telemetry/artifact-store";
 export type { ArtifactApi, ArtifactHandle, ArtifactSaveOptions, ArtifactEvaluateOptions, ArtifactPromoteOptions, ArtifactContentDeps, ArtifactContentUploader, } from "./artifact";
 export { uploadArtifactContent } from "./content-uploader";
 export type { ContentUploadConfig, ContentUploadInput, ContentUploadOutcome, } from "./content-uploader";
-export { scrubContent, luhnValid } from "./scrub";
+export { scrubContent, luhnValid, detectSpans, scrubDetectors } from "./scrub";
 export type { ScrubMode, ScrubFinding, ScrubResult, ScrubDetectorType } from "./scrub";
+export { DATA_CLASSIFICATIONS, SENSITIVE_CLASSIFICATIONS, isDataClassification, normalizeClassification, } from "./classification";
+export type { DataClassification } from "./classification";
 export { computeDownstreamClosure, TAINT_DEFAULT_MAX_DEPTH, TAINT_DEFAULT_CAP, } from "./taint";
 export type { TaintEdge, Supersession, TaintNode, TaintClosure, TaintOptions, } from "./taint";
 export type { RunRow, StepRow, ArtifactRow, ArtifactEdgeRow, ArtifactEvaluationRow, EvalCaseRow, EvalCaseOrigin, } from "../types/telemetry";

package/dist/artifacts/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/artifacts/index.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAElE,OAAO,KAAK,EAAE,WAAW,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC;AAGnE,OAAO,KAAK,EAAE,qBAAqB,EAAE,eAAe,EAAE,MAAM,WAAW,CAAC;AACxE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAC;AAEjE,OAAO,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AACxE,YAAY,EACV,YAAY,EACZ,SAAS,EACT,eAAe,EACf,kBAAkB,EAClB,SAAS,EACT,gBAAgB,EAChB,cAAc,EACd,oBAAoB,GACrB,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,IAAI,EAAE,MAAM,QAAQ,CAAC;AAC9B,OAAO,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAC/C,OAAO,EAAE,iBAAiB,EAAE,MAAM,6BAA6B,CAAC;AAChE,YAAY,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAC;AACjE,YAAY,EACV,WAAW,EACX,cAAc,EACd,mBAAmB,EACnB,uBAAuB,EACvB,sBAAsB,EACtB,mBAAmB,EACnB,uBAAuB,GACxB,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,qBAAqB,EAAE,MAAM,oBAAoB,CAAC;AAC3D,YAAY,EACV,mBAAmB,EACnB,kBAAkB,EAClB,oBAAoB,GACrB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,YAAY,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AAClD,YAAY,EAAE,SAAS,EAAE,YAAY,EAAE,WAAW,EAAE,iBAAiB,EAAE,MAAM,SAAS,CAAC;AACvF,OAAO,EACL,wBAAwB,EACxB,uBAAuB,EACvB,iBAAiB,GAClB,MAAM,SAAS,CAAC;AACjB,YAAY,EACV,SAAS,EACT,YAAY,EACZ,SAAS,EACT,YAAY,EACZ,YAAY,GACb,MAAM,SAAS,CAAC;AACjB,YAAY,EACV,MAAM,EACN,OAAO,EACP,WAAW,EACX,eAAe,EACf,qBAAqB,EACrB,WAAW,EACX,cAAc,GACf,MAAM,oBAAoB,CAAC;AAE5B;oDACoD;AACpD,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC;IAC3B,QAAQ,CAAC,QAAQ,EAAE,WAAW,CAAC;CAChC;AAED;;;2DAG2D;AAC3D,wBAAgB,gBAAgB,CAAC,IAAI,EAAE;IACrC,QAAQ,CAAC,MAAM,EAAE,cAAc,CAAC;IAChC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,aAAa,EAAE,aAAa,GAAG,IAAI,CAAC;IAC7C,QAAQ,CAAC,SAAS,CAAC,EAAE,eAAe,CAAC;CACtC,GAAG;IAAE,QAAQ,CAAC,SAAS,EAAE,iBAAiB,CAAC;IAAC,QAAQ,CAAC,kBAAkB,CAAC,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAA;CAAE,CAY/F;AAED;;;;GAIG;AACH,wBAAgB,wBAAwB,CACtC,OAAO,EAAE,qBAAqB,GAAG,SAAS,GACzC,mBAAmB,GAAG,SAAS,CAWjC;AAED;;2EAE2E;AAC3E,wBAAgB,uBAAuB,CAAC,IAAI,EAAE;IAC5C,QAAQ,CAAC,MAAM,EAAE,cAAc,CAAC;IAChC,QAAQ,CAAC,aAAa,CAAC,EAAE,aAAa,CAAC;IACvC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B;;4BAEwB;IACxB,QAAQ,CAAC,OAAO,CAAC,EAAE,qBAAqB,CAAC;CAC1C,GAAG,iBAAiB,CAYpB"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/artifacts/index.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAElE,OAAO,KAAK,EAAE,WAAW,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC;AAGnE,OAAO,KAAK,EAAE,qBAAqB,EAAE,eAAe,EAAE,MAAM,WAAW,CAAC;AACxE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAC;AAEjE,OAAO,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AACxE,YAAY,EACV,YAAY,EACZ,SAAS,EACT,eAAe,EACf,kBAAkB,EAClB,SAAS,EACT,gBAAgB,EAChB,cAAc,EACd,oBAAoB,GACrB,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,IAAI,EAAE,MAAM,QAAQ,CAAC;AAC9B,OAAO,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAC/C,OAAO,EAAE,iBAAiB,EAAE,MAAM,6BAA6B,CAAC;AAChE,YAAY,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAC;AACjE,YAAY,EACV,WAAW,EACX,cAAc,EACd,mBAAmB,EACnB,uBAAuB,EACvB,sBAAsB,EACtB,mBAAmB,EACnB,uBAAuB,GACxB,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,qBAAqB,EAAE,MAAM,oBAAoB,CAAC;AAC3D,YAAY,EACV,mBAAmB,EACnB,kBAAkB,EAClB,oBAAoB,GACrB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,YAAY,EAAE,SAAS,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,SAAS,CAAC;AAC/E,YAAY,EAAE,SAAS,EAAE,YAAY,EAAE,WAAW,EAAE,iBAAiB,EAAE,MAAM,SAAS,CAAC;AAGvF,OAAO,EACL,oBAAoB,EACpB,yBAAyB,EACzB,oBAAoB,EACpB,uBAAuB,GACxB,MAAM,kBAAkB,CAAC;AAC1B,YAAY,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AAC3D,OAAO,EACL,wBAAwB,EACxB,uBAAuB,EACvB,iBAAiB,GAClB,MAAM,SAAS,CAAC;AACjB,YAAY,EACV,SAAS,EACT,YAAY,EACZ,SAAS,EACT,YAAY,EACZ,YAAY,GACb,MAAM,SAAS,CAAC;AACjB,YAAY,EACV,MAAM,EACN,OAAO,EACP,WAAW,EACX,eAAe,EACf,qBAAqB,EACrB,WAAW,EACX,cAAc,GACf,MAAM,oBAAoB,CAAC;AAE5B;oDACoD;AACpD,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC;IAC3B,QAAQ,CAAC,QAAQ,EAAE,WAAW,CAAC;CAChC;AAED;;;2DAG2D;AAC3D,wBAAgB,gBAAgB,CAAC,IAAI,EAAE;IACrC,QAAQ,CAAC,MAAM,EAAE,cAAc,CAAC;IAChC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,aAAa,EAAE,aAAa,GAAG,IAAI,CAAC;IAC7C,QAAQ,CAAC,SAAS,CAAC,EAAE,eAAe,CAAC;CACtC,GAAG;IAAE,QAAQ,CAAC,SAAS,EAAE,iBAAiB,CAAC;IAAC,QAAQ,CAAC,kBAAkB,CAAC,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAA;CAAE,CAY/F;AAED;;;;GAIG;AACH,wBAAgB,wBAAwB,CACtC,OAAO,EAAE,qBAAqB,GAAG,SAAS,GACzC,mBAAmB,GAAG,SAAS,CAWjC;AAED;;2EAE2E;AAC3E,wBAAgB,uBAAuB,CAAC,IAAI,EAAE;IAC5C,QAAQ,CAAC,MAAM,EAAE,cAAc,CAAC;IAChC,QAAQ,CAAC,aAAa,CAAC,EAAE,aAAa,CAAC;IACvC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B;;4BAEwB;IACxB,QAAQ,CAAC,OAAO,CAAC,EAAE,qBAAqB,CAAC;CAC1C,GAAG,iBAAiB,CAYpB"}

package/dist/artifacts/index.js

@@ -7,7 +7,7 @@
  * lifecycle + `@step`; chunk B adds the artifact primitives (save/load/evaluate).
  */
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.TAINT_DEFAULT_CAP = exports.TAINT_DEFAULT_MAX_DEPTH = exports.computeDownstreamClosure = exports.luhnValid = exports.scrubContent = exports.uploadArtifactContent = exports.openArtifactStore = exports.createArtifactApi = exports.step = exports.createRunNamespace = exports.getActiveRunContext = void 0;
+exports.TAINT_DEFAULT_CAP = exports.TAINT_DEFAULT_MAX_DEPTH = exports.computeDownstreamClosure = exports.normalizeClassification = exports.isDataClassification = exports.SENSITIVE_CLASSIFICATIONS = exports.DATA_CLASSIFICATIONS = exports.scrubDetectors = exports.detectSpans = exports.luhnValid = exports.scrubContent = exports.uploadArtifactContent = exports.openArtifactStore = exports.createArtifactApi = exports.step = exports.createRunNamespace = exports.getActiveRunContext = void 0;
 exports.wireRigArtifacts = wireRigArtifacts;
 exports.buildArtifactContentDeps = buildArtifactContentDeps;
 exports.createArtifactNamespace = createArtifactNamespace;
@@ -28,6 +28,15 @@ Object.defineProperty(exports, "uploadArtifactContent", { enumerable: true, get:
 var scrub_1 = require("./scrub");
 Object.defineProperty(exports, "scrubContent", { enumerable: true, get: function () { return scrub_1.scrubContent; } });
 Object.defineProperty(exports, "luhnValid", { enumerable: true, get: function () { return scrub_1.luhnValid; } });
+Object.defineProperty(exports, "detectSpans", { enumerable: true, get: function () { return scrub_1.detectSpans; } });
+Object.defineProperty(exports, "scrubDetectors", { enumerable: true, get: function () { return scrub_1.scrubDetectors; } });
+// data_classification enum (screening SC-0 S8) — shared by the SDK save gate,
+// the server ingest validator, and the DB CHECK so the three cannot drift.
+var classification_1 = require("./classification");
+Object.defineProperty(exports, "DATA_CLASSIFICATIONS", { enumerable: true, get: function () { return classification_1.DATA_CLASSIFICATIONS; } });
+Object.defineProperty(exports, "SENSITIVE_CLASSIFICATIONS", { enumerable: true, get: function () { return classification_1.SENSITIVE_CLASSIFICATIONS; } });
+Object.defineProperty(exports, "isDataClassification", { enumerable: true, get: function () { return classification_1.isDataClassification; } });
+Object.defineProperty(exports, "normalizeClassification", { enumerable: true, get: function () { return classification_1.normalizeClassification; } });
 var taint_1 = require("./taint");
 Object.defineProperty(exports, "computeDownstreamClosure", { enumerable: true, get: function () { return taint_1.computeDownstreamClosure; } });
 Object.defineProperty(exports, "TAINT_DEFAULT_MAX_DEPTH", { enumerable: true, get: function () { return taint_1.TAINT_DEFAULT_MAX_DEPTH; } });

package/dist/artifacts/run-context.d.ts

@@ -19,6 +19,7 @@
  * v1 wire, zero new rows, zero behaviour change (spec §1.4).
  */
 import type { ArtifactEvaluationRow, RunRow, StepRow } from "../types/telemetry";
+import type { RunMetaV1 } from "../telemetry/attempt-meta";
 /** The narrow buffer the run/artifact namespace writes through — the local
  * telemetry store satisfies it. Kept narrow so this module depends on the row
  * shapes, not the whole store surface (and cannot reach captures). */
@@ -43,7 +44,15 @@ export interface RunStartOptions {
      * counted, logged skip. Set by the caller or derived from a route's
      * `require: zero_retention`. */
     readonly zeroRetention?: boolean;
+    /** The run metadata envelope (WI-1, spec §3) — pipeline sha, config hash,
+     * trigger, actor, input hash. `pipeline_sha` AUTO-FILLS from git when the
+     * caller leaves it unset (never fails the run — {@link resolvePipelineSha} is
+     * try/catch'd). Absent ⇒ the run still auto-fills a git sha when one resolves,
+     * else `runs.meta` is null. */
+    readonly meta?: RunMetaV1;
 }
+/** Test-only: clear the once-per-process RunMeta-sanitize warning latch. */
+export declare function resetRunMetaWarningsForTest(): void;
 /** One ground-truth step attempt the run loop asks the context to record. The
  * context assigns `attempt_no` per step key so the caller need not track it. */
 export interface GroundTruthStepInput {
@@ -56,6 +65,8 @@ export interface GroundTruthStepInput {
 }
 export interface ActiveRunContext {
     readonly runId: string;
+    /** The `episodeKey` given to run.start/run.scope, or null (RC-1). */
+    readonly episodeKey: string | null;
     /** Trace id adopted from a traceparent at run.start, if any (chunk B use). */
     readonly traceId: string | null;
     /** Zero-retention gate (chunk B): true ⇒ artifact.save refuses fail-closed. */
@@ -75,15 +86,26 @@ export interface ActiveRunContext {
      * `artifact.save` without an explicit `stepKey` attaches to (G1 spec §3). Set
      * by both `nextStepKey` (auto-steps, `@step` scopes) and `emitGroundTruthStep`
      * (a raw-lane call with a caller-supplied key that never minted). Null before
-     * any step in this run. NOTE: a single mutable current-step cross-attributes
-     * under parallel step waves on ONE context — use `run.scope()` (each concurrent
-     * run gets its own context) or an explicit `stepKey` when steps overlap. */
+     * any step in this run. NOTE: the ambient key is a single mutable "most recent
+     * step" on this context, so within ONE run's parallel step waves only an
+     * explicit `stepKey` (routed `RunOptions.stepKey` / raw `RawRunInput.stepKey`,
+     * or a `tags.step`) prevents cross-attribution — the ambient key alone races.
+     * (`run.scope()` gives each concurrent run its own context, so it separates
+     * DISTINCT runs, not overlapping steps within one run.) */
     currentStepKey(): string | null;
     /** Record one ground-truth step attempt (the rig.run auto-step). attempt_no is
      * assigned here, per step key. Fail-open — a buffer error is logged, dropped,
      * and never thrown into the run loop. Marks its key as the ambient step. */
     emitGroundTruthStep(input: GroundTruthStepInput): void;
 }
+/** RC-1: the `run_id` tag value an active run context stamps on every attempt
+ * row of BOTH lanes when the caller supplied none — the run's `episodeKey`
+ * (what the `/projects` tree joins on) or, without one, the run's id. Never
+ * overrides a caller-supplied `run_id`; no context ⇒ tags unchanged. */
+export declare function withRunIdTag<T extends {
+    readonly run_id?: string;
+    readonly [key: string]: string | undefined;
+}>(tags: T, ctx: ActiveRunContext | null): T;
 /** The active run context, or null when none is set (namespace disabled, or no
  * run.start on this async path). Read by the run loop's auto-step seam. */
 export declare function getActiveRunContext(): ActiveRunContext | null;

package/dist/artifacts/run-context.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"run-context.d.ts","sourceRoot":"","sources":["../../src/artifacts/run-context.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAIH,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,oBAAoB,CAAC;AAGjF;;sEAEsE;AACtE,MAAM,WAAW,cAAc;IAC7B,SAAS,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,UAAU,CAAC,GAAG,EAAE,OAAO,GAAG,IAAI,CAAC;CAChC;AAED,MAAM,MAAM,SAAS,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC;AAEzC,MAAM,WAAW,eAAe;IAC9B,8DAA8D;IAC9D,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,mEAAmE;IACnE,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B;;wEAEoE;IACpE,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B;;;oCAGgC;IAChC,QAAQ,CAAC,aAAa,CAAC,EAAE,OAAO,CAAC;CAClC;AAED;gFACgF;AAChF,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;CACtC;AAED,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,8EAA8E;IAC9E,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,+EAA+E;IAC/E,QAAQ,CAAC,aAAa,EAAE,OAAO,CAAC;IAChC,+EAA+E;IAC/E,QAAQ,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC;;uFAEmF;IACnF,aAAa,IAAI,MAAM,EAAE,CAAC;IAC1B;;;wEAGoE;IACpE,WAAW,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAAC;IACnC;;;;;;gFAM4E;IAC5E,cAAc,IAAI,MAAM,GAAG,IAAI,CAAC;IAChC;;gFAE4E;IAC5E,mBAAmB,CAAC,KAAK,EAAE,oBAAoB,GAAG,IAAI,CAAC;CACxD;AAaD;2EAC2E;AAC3E,wBAAgB,mBAAmB,IAAI,gBAAgB,GAAG,IAAI,CAG7D;AAQD,qEAAqE;AACrE,wBAAgB,cAAc,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAEnD;AAID;;;;8EAI8E;AAC9E,wBAAgB,cAAc,CAC5B,QAAQ,EAAE,MAAM,GAAG,SAAS,EAC5B,OAAO,EAAE,MAAM,GAAG,SAAS,EAC3B,IAAI,EAAE,MAAM,MAAM,GACjB,MAAM,CAYR;AAED,2EAA2E;AAC3E,wBAAgB,2BAA2B,IAAI,IAAI,CAElD;AAED;oFACoF;AACpF,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,IAAI,EAAE,eAAe,GAAG,aAAa,GAAG,OAAO,CAAC;IACzD,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;CAC/B;AAED,uDAAuD;AACvD,MAAM,WAAW,SAAS;IACxB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,GAAG,CAAC,MAAM,CAAC,EAAE,SAAS,GAAG,IAAI,CAAC;IAC9B;mFAC+E;IAC/E,QAAQ,CAAC,IAAI,EAAE,kBAAkB,GAAG,IAAI,CAAC;CAC1C;AAED,+EAA+E;AAC/E,MAAM,WAAW,YAAY;IAC3B;;;;2EAIuE;IACvE,KAAK,CAAC,IAAI,EAAE,eAAe,GAAG,SAAS,CAAC;IACxC,uEAAuE;IACvE,GAAG,CAAC,MAAM,CAAC,EAAE,SAAS,GAAG,IAAI,CAAC;IAC9B;oFACgF;IAChF,QAAQ,CAAC,IAAI,EAAE,kBAAkB,GAAG,IAAI,CAAC;IACzC;;;;qBAIiB;IACjB,KAAK,CAAC,CAAC,EAAE,IAAI,EAAE,eAAe,EAAE,EAAE,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;CACnE;AASD,wBAAgB,kBAAkB,CAAC,IAAI,EAAE;IACvC,QAAQ,CAAC,MAAM,EAAE,cAAc,CAAC;IAChC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B;;qFAEiF;IACjF,QAAQ,CAAC,aAAa,CAAC,EAAE;QAAE,wBAAwB,CAAC,GAAG,EAAE,qBAAqB,GAAG,IAAI,CAAA;KAAE,CAAC;CACzF,GAAG,YAAY,CAmLf"}
+{"version":3,"file":"run-context.d.ts","sourceRoot":"","sources":["../../src/artifacts/run-context.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAIH,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,oBAAoB,CAAC;AAEjF,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,2BAA2B,CAAC;AAI3D;;sEAEsE;AACtE,MAAM,WAAW,cAAc;IAC7B,SAAS,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,UAAU,CAAC,GAAG,EAAE,OAAO,GAAG,IAAI,CAAC;CAChC;AAED,MAAM,MAAM,SAAS,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC;AAEzC,MAAM,WAAW,eAAe;IAC9B,8DAA8D;IAC9D,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,mEAAmE;IACnE,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B;;wEAEoE;IACpE,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B;;;oCAGgC;IAChC,QAAQ,CAAC,aAAa,CAAC,EAAE,OAAO,CAAC;IACjC;;;;mCAI+B;IAC/B,QAAQ,CAAC,IAAI,CAAC,EAAE,SAAS,CAAC;CAC3B;AA4CD,4EAA4E;AAC5E,wBAAgB,2BAA2B,IAAI,IAAI,CAElD;AAED;gFACgF;AAChF,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;CACtC;AAED,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,qEAAqE;IACrE,QAAQ,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC,8EAA8E;IAC9E,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,+EAA+E;IAC/E,QAAQ,CAAC,aAAa,EAAE,OAAO,CAAC;IAChC,+EAA+E;IAC/E,QAAQ,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC;;uFAEmF;IACnF,aAAa,IAAI,MAAM,EAAE,CAAC;IAC1B;;;wEAGoE;IACpE,WAAW,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAAC;IACnC;;;;;;;;;+DAS2D;IAC3D,cAAc,IAAI,MAAM,GAAG,IAAI,CAAC;IAChC;;gFAE4E;IAC5E,mBAAmB,CAAC,KAAK,EAAE,oBAAoB,GAAG,IAAI,CAAC;CACxD;AAaD;;;wEAGwE;AACxE,wBAAgB,YAAY,CAAC,CAAC,SAAS;IAAE,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAAA;CAAE,EAC7G,IAAI,EAAE,CAAC,EACP,GAAG,EAAE,gBAAgB,GAAG,IAAI,GAC3B,CAAC,CAGH;AAED;2EAC2E;AAC3E,wBAAgB,mBAAmB,IAAI,gBAAgB,GAAG,IAAI,CAG7D;AAQD,qEAAqE;AACrE,wBAAgB,cAAc,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAEnD;AAID;;;;8EAI8E;AAC9E,wBAAgB,cAAc,CAC5B,QAAQ,EAAE,MAAM,GAAG,SAAS,EAC5B,OAAO,EAAE,MAAM,GAAG,SAAS,EAC3B,IAAI,EAAE,MAAM,MAAM,GACjB,MAAM,CAYR;AAED,2EAA2E;AAC3E,wBAAgB,2BAA2B,IAAI,IAAI,CAElD;AAED;oFACoF;AACpF,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,IAAI,EAAE,eAAe,GAAG,aAAa,GAAG,OAAO,CAAC;IACzD,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;CAC/B;AAED,uDAAuD;AACvD,MAAM,WAAW,SAAS;IACxB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,GAAG,CAAC,MAAM,CAAC,EAAE,SAAS,GAAG,IAAI,CAAC;IAC9B;mFAC+E;IAC/E,QAAQ,CAAC,IAAI,EAAE,kBAAkB,GAAG,IAAI,CAAC;CAC1C;AAED,+EAA+E;AAC/E,MAAM,WAAW,YAAY;IAC3B;;;;2EAIuE;IACvE,KAAK,CAAC,IAAI,EAAE,eAAe,GAAG,SAAS,CAAC;IACxC,uEAAuE;IACvE,GAAG,CAAC,MAAM,CAAC,EAAE,SAAS,GAAG,IAAI,CAAC;IAC9B;oFACgF;IAChF,QAAQ,CAAC,IAAI,EAAE,kBAAkB,GAAG,IAAI,CAAC;IACzC;;;;qBAIiB;IACjB,KAAK,CAAC,CAAC,EAAE,IAAI,EAAE,eAAe,EAAE,EAAE,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;CACnE;AASD,wBAAgB,kBAAkB,CAAC,IAAI,EAAE;IACvC,QAAQ,CAAC,MAAM,EAAE,cAAc,CAAC;IAChC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B;;qFAEiF;IACjF,QAAQ,CAAC,aAAa,CAAC,EAAE;QAAE,wBAAwB,CAAC,GAAG,EAAE,qBAAqB,GAAG,IAAI,CAAA;KAAE,CAAC;CACzF,GAAG,YAAY,CAwLf"}

package/dist/artifacts/run-context.js

@@ -20,6 +20,8 @@
  * v1 wire, zero new rows, zero behaviour change (spec §1.4).
  */
 Object.defineProperty(exports, "__esModule", { value: true });
+exports.resetRunMetaWarningsForTest = resetRunMetaWarningsForTest;
+exports.withRunIdTag = withRunIdTag;
 exports.getActiveRunContext = getActiveRunContext;
 exports.isValidStepKey = isValidStepKey;
 exports.resolveStepKey = resolveStepKey;
@@ -28,7 +30,61 @@ exports.createRunNamespace = createRunNamespace;
 const node_async_hooks_1 = require("node:async_hooks");
 const node_crypto_1 = require("node:crypto");
 const otel_map_1 = require("../telemetry/otel-map");
+const attempt_meta_1 = require("../telemetry/attempt-meta");
+const attempt_meta_2 = require("../telemetry/attempt-meta");
+/** Once-per-process latch for the run-envelope sanitize warning (Ruling A,
+ * PR #262). Mirrors {@link warnedStepKeys}: a dropped field is named ONCE, so a
+ * mislabelled `actor` teaches without spamming the run loop. */
+const warnedRunMetaFields = new Set();
+/**
+ * Build a run's `RunMeta@v1` (spec §3): the caller's envelope with
+ * `pipeline_sha` auto-filled from git when unset, then SANITIZED at the same
+ * boundary the wire is (Ruling A, PR #262) — every string field must be an
+ * enum/identifier/hash (≤128 chars, no whitespace), so a free-text `actor`
+ * ("Jane Doe") is DROPPED, counted, and named in one once-per-process warning,
+ * never smuggled into `runs.meta`. Returns null only when the caller supplied no
+ * meta AND no sha resolves — a plain `run.start()` in a git tree still stamps the
+ * sha. NEVER throws (resolvePipelineSha + sanitizeMetaForWire are both safe); the
+ * recorded run row is byte-identical to the un-sanitized path for a clean envelope.
+ */
+function buildRunMeta(meta) {
+    const sha = meta?.pipeline_sha ?? (0, attempt_meta_2.resolvePipelineSha)();
+    if (meta === undefined && sha === undefined)
+        return null;
+    const merged = {
+        v: 1,
+        ...(meta ?? {}),
+        ...(sha !== undefined ? { pipeline_sha: sha } : {}),
+    };
+    const { meta: cleaned, dropped } = (0, attempt_meta_1.sanitizeMetaForWire)(merged);
+    if (dropped > 0) {
+        // RunMeta is flat, so a dropped string is a named top-level field (e.g.
+        // `actor`). Name each once — instrumentation teaches, never throws.
+        for (const key of Object.keys(merged)) {
+            if (typeof merged[key] === "string" && (cleaned === undefined || !(key in cleaned)) && !warnedRunMetaFields.has(key)) {
+                warnedRunMetaFields.add(key);
+                const tip = key === "actor" ? " `actor` must be an opaque identifier, not a display name." : "";
+                console.warn(`[modelrig run] RunMeta.${key} is not metadata-safe (an enum/identifier/hash: ≤128 chars, no ` +
+                    `whitespace) — dropped from runs.meta.${tip}`);
+            }
+        }
+    }
+    return (cleaned ?? { v: 1 });
+}
+/** Test-only: clear the once-per-process RunMeta-sanitize warning latch. */
+function resetRunMetaWarningsForTest() {
+    warnedRunMetaFields.clear();
+}
 const storage = new node_async_hooks_1.AsyncLocalStorage();
+/** RC-1: the `run_id` tag value an active run context stamps on every attempt
+ * row of BOTH lanes when the caller supplied none — the run's `episodeKey`
+ * (what the `/projects` tree joins on) or, without one, the run's id. Never
+ * overrides a caller-supplied `run_id`; no context ⇒ tags unchanged. */
+function withRunIdTag(tags, ctx) {
+    if (ctx === null || (typeof tags.run_id === "string" && tags.run_id !== ""))
+        return tags;
+    return { ...tags, run_id: ctx.episodeKey ?? ctx.runId };
+}
 /** The active run context, or null when none is set (namespace disabled, or no
  * run.start on this async path). Read by the run loop's auto-step seam. */
 function getActiveRunContext() {
@@ -99,6 +155,7 @@ function createRunNamespace(deps) {
     const inertHandle = { runId: "", end() { }, evaluate() { } };
     function buildContext(startRow, traceId, zeroRetention) {
         const runId = startRow.id;
+        const episodeKey = startRow.episodeKey;
         const attemptByStep = new Map();
         const loaded = new Set();
         let stepSeq = 0;
@@ -107,6 +164,7 @@ function createRunNamespace(deps) {
         let lastStepKey = null;
         return {
             runId,
+            episodeKey,
             traceId,
             zeroRetention,
             ended: false,
@@ -167,6 +225,9 @@ function createRunNamespace(deps) {
             startedAt: new Date().toISOString(),
             endedAt: null,
             status: "running",
+            // WI-1 (spec §3): the run envelope, git-sha auto-filled. endContext spreads
+            // ...ctx.startRow, so the terminal projection re-exports the same meta.
+            meta: buildRunMeta(opts.meta),
         };
         const traceId = opts.traceparent !== undefined
             ? ((0, otel_map_1.parseTraceparent)(opts.traceparent)?.traceId ?? null)

package/dist/artifacts/scrub.d.ts

@@ -20,7 +20,17 @@
  * `detect` result as a guarantee of no PII.
  *
  * NEVER logs a matched value. Findings are `{type, count}` only.
+ *
+ * ── SHARED DETECTOR INTERFACE (screening review A1, 2026-08-22) ─────────────
+ * The same patterns are ALSO exposed as span-producing `Detector`s
+ * (`detectSpans`, `scrubDetectors`) so the mask (CS-1) and screen (SC-1) lanes
+ * reuse this ONE corpus instead of twinning it (spec docs/ModelRig/screening §3;
+ * S1: extend, don't twin). `scrubContent`'s behaviour is unchanged — the span
+ * exports are additive and share the same DETECTORS table, so a matched value
+ * never leaves the process there either (a span is offsets + type + confidence,
+ * never a value).
  */
+import type { DetectionSpan, Detector } from "../detect/detector";
 export type ScrubMode = "off" | "detect" | "redact" | "block";
 /** A finding is a COUNT by type — never a value (the load-bearing invariant). */
 export interface ScrubFinding {
@@ -57,4 +67,20 @@ export declare function luhnValid(digits: string): boolean;
  * Never returns or logs a matched value.
  */
 export declare function scrubContent(text: string, mode: ScrubMode): ScrubResult;
+/**
+ * Detect scrub v1 spans across ALL patterns, sorted by start offset. Deterministic
+ * (confidence 1). Offsets index into the exact `text` passed. Overlap resolution
+ * (e.g. PAN vs phone) is the CONSUMER's job (CS-1 §4 "earlier stages win") — this
+ * reports every pattern's raw hits, never a value.
+ */
+export declare function detectSpans(text: string): DetectionSpan[];
+/**
+ * The scrub v1 patterns presented as the shared `Detector` contract
+ * (`src/detect/detector.ts`) — one detector per type, `kind: "deterministic"`,
+ * `confidence: 1`. The mask (CS-1) and screen (SC-1) lanes consume these so all
+ * three policies (`mask` / `scrub` / `screen`) run over ONE detection engine.
+ * The `source`/`tier` on the input are ignored by the deterministic PII patterns
+ * (they scan any tier); a tier-aware detector would branch on them.
+ */
+export declare function scrubDetectors(): Detector[];
 //# sourceMappingURL=scrub.d.ts.map

package/dist/artifacts/scrub.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"scrub.d.ts","sourceRoot":"","sources":["../../src/artifacts/scrub.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAEH,MAAM,MAAM,SAAS,GAAG,KAAK,GAAG,QAAQ,GAAG,QAAQ,GAAG,OAAO,CAAC;AAE9D,iFAAiF;AACjF,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,IAAI,EAAE,iBAAiB,CAAC;IACjC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,MAAM,iBAAiB,GAAG,KAAK,GAAG,KAAK,GAAG,OAAO,GAAG,OAAO,GAAG,KAAK,CAAC;AAE1E,MAAM,WAAW,WAAW;IAC1B,8EAA8E;IAC9E,QAAQ,CAAC,QAAQ,EAAE,SAAS,YAAY,EAAE,CAAC;IAC3C;iEAC6D;IAC7D,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,oEAAoE;IACpE,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;CAC3B;AAED;;;0EAG0E;AAC1E,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;IACzB,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,QAAQ,EAAE,SAAS,YAAY,EAAE,CAAC;CAC5C;AAED;;kFAEkF;AAClF,wBAAgB,cAAc,CAAC,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,WAAW,GAAG,YAAY,CAEjF;AAWD,8EAA8E;AAC9E,wBAAgB,SAAS,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAejD;AA0CD;;;GAGG;AACH,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,GAAG,WAAW,CA6CvE"}
+{"version":3,"file":"scrub.d.ts","sourceRoot":"","sources":["../../src/artifacts/scrub.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AAEH,OAAO,KAAK,EAAkB,aAAa,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAElF,MAAM,MAAM,SAAS,GAAG,KAAK,GAAG,QAAQ,GAAG,QAAQ,GAAG,OAAO,CAAC;AAE9D,iFAAiF;AACjF,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,IAAI,EAAE,iBAAiB,CAAC;IACjC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,MAAM,iBAAiB,GAAG,KAAK,GAAG,KAAK,GAAG,OAAO,GAAG,OAAO,GAAG,KAAK,CAAC;AAE1E,MAAM,WAAW,WAAW;IAC1B,8EAA8E;IAC9E,QAAQ,CAAC,QAAQ,EAAE,SAAS,YAAY,EAAE,CAAC;IAC3C;iEAC6D;IAC7D,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,oEAAoE;IACpE,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;CAC3B;AAED;;;0EAG0E;AAC1E,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;IACzB,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,QAAQ,EAAE,SAAS,YAAY,EAAE,CAAC;CAC5C;AAED;;kFAEkF;AAClF,wBAAgB,cAAc,CAAC,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,WAAW,GAAG,YAAY,CAEjF;AAaD,8EAA8E;AAC9E,wBAAgB,SAAS,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAejD;AA0CD;;;GAGG;AACH,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,GAAG,WAAW,CA6CvE;AAqBD;;;;;GAKG;AACH,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG,aAAa,EAAE,CAIzD;AAED;;;;;;;GAOG;AACH,wBAAgB,cAAc,IAAI,QAAQ,EAAE,CAS3C"}

package/dist/artifacts/scrub.js

@@ -21,11 +21,22 @@
  * `detect` result as a guarantee of no PII.
  *
  * NEVER logs a matched value. Findings are `{type, count}` only.
+ *
+ * ── SHARED DETECTOR INTERFACE (screening review A1, 2026-08-22) ─────────────
+ * The same patterns are ALSO exposed as span-producing `Detector`s
+ * (`detectSpans`, `scrubDetectors`) so the mask (CS-1) and screen (SC-1) lanes
+ * reuse this ONE corpus instead of twinning it (spec docs/ModelRig/screening §3;
+ * S1: extend, don't twin). `scrubContent`'s behaviour is unchanged — the span
+ * exports are additive and share the same DETECTORS table, so a matched value
+ * never leaves the process there either (a span is offsets + type + confidence,
+ * never a value).
  */
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.summarizeScrub = summarizeScrub;
 exports.luhnValid = luhnValid;
 exports.scrubContent = scrubContent;
+exports.detectSpans = detectSpans;
+exports.scrubDetectors = scrubDetectors;
 /** Build the persisted summary from a scrub result. The only producer of the
  * `artifacts.scrub` value, so the counts-not-values invariant lives in one
  * place — it simply forwards `ScrubResult.findings`, which are already counts. */
@@ -137,3 +148,45 @@ function scrubContent(text, mode) {
     // detect (or block with no findings): upload verbatim, report counts.
     return { findings, text, blocked: false };
 }
+// ── Shared Detector interface (screening review A1) ─────────────────────────
+// Span-producing views over the SAME `DETECTORS` table. Additive: `scrubContent`
+// above is untouched, and these never surface a matched value (a span is offsets
+// + type + confidence, per the load-bearing invariant).
+/** Spans for one pattern in `text` — offsets + type + confidence 1. A fresh
+ * RegExp per call keeps the /g `lastIndex` from leaking across calls. */
+function spansForPattern(det, text) {
+    const re = new RegExp(det.re.source, det.re.flags);
+    const spans = [];
+    for (const m of text.matchAll(re)) {
+        const value = m[0];
+        if (det.accept && !det.accept(value))
+            continue;
+        const start = m.index ?? 0;
+        spans.push({ start, end: start + value.length, type: det.type, confidence: 1 });
+    }
+    return spans;
+}
+/**
+ * Detect scrub v1 spans across ALL patterns, sorted by start offset. Deterministic
+ * (confidence 1). Offsets index into the exact `text` passed. Overlap resolution
+ * (e.g. PAN vs phone) is the CONSUMER's job (CS-1 §4 "earlier stages win") — this
+ * reports every pattern's raw hits, never a value.
+ */
+function detectSpans(text) {
+    return DETECTORS.flatMap((det) => spansForPattern(det, text)).sort((a, b) => a.start - b.start || a.end - b.end);
+}
+/**
+ * The scrub v1 patterns presented as the shared `Detector` contract
+ * (`src/detect/detector.ts`) — one detector per type, `kind: "deterministic"`,
+ * `confidence: 1`. The mask (CS-1) and screen (SC-1) lanes consume these so all
+ * three policies (`mask` / `scrub` / `screen`) run over ONE detection engine.
+ * The `source`/`tier` on the input are ignored by the deterministic PII patterns
+ * (they scan any tier); a tier-aware detector would branch on them.
+ */
+function scrubDetectors() {
+    return DETECTORS.map((det) => ({
+        id: `scrub:${det.type}@v1`,
+        kind: "deterministic",
+        detect: (input) => Promise.resolve(spansForPattern(det, input.text)),
+    }));
+}

package/dist/artifacts/step.d.ts

@@ -14,6 +14,15 @@
  * active run context (chunk B attributes artifact save/load lineage to it) and
  * runs the body; it does not persist a row until it has a valid reference.
  *
+ * ── AMBIENT STEP KEY (G1) ─────────────────────────────────────────────────
+ * Entering a `@step` / `step()` scope MINTS a unique key (`label#n`) and sets it
+ * as the run context's AMBIENT step. An `artifact.save` with no explicit
+ * `stepKey` attaches to that ambient key — not only for saves INSIDE the scope,
+ * but for every save AFTER it too, until the next step mints a new ambient key
+ * (the ambient key is a running "most recent step", not a lexical bracket). So a
+ * post-step save lands on the step just run; to detach it, open the next step or
+ * pass an explicit `stepKey`.
+ *
  * Instrumentation never changes the wrapped function's return value, and never
  * throws into it — a disabled or absent run context just runs the body.
  */

package/dist/artifacts/step.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"step.d.ts","sourceRoot":"","sources":["../../src/artifacts/step.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAIH;;;;GAIG;AACH,wBAAgB,IAAI,CAAC,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,CAAC,GAAG,CAAC,CAOnD"}
+{"version":3,"file":"step.d.ts","sourceRoot":"","sources":["../../src/artifacts/step.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AAIH;;;;GAIG;AACH,wBAAgB,IAAI,CAAC,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,CAAC,GAAG,CAAC,CAOnD"}

package/dist/artifacts/step.js

@@ -15,6 +15,15 @@
  * active run context (chunk B attributes artifact save/load lineage to it) and
  * runs the body; it does not persist a row until it has a valid reference.
  *
+ * ── AMBIENT STEP KEY (G1) ─────────────────────────────────────────────────
+ * Entering a `@step` / `step()` scope MINTS a unique key (`label#n`) and sets it
+ * as the run context's AMBIENT step. An `artifact.save` with no explicit
+ * `stepKey` attaches to that ambient key — not only for saves INSIDE the scope,
+ * but for every save AFTER it too, until the next step mints a new ambient key
+ * (the ambient key is a running "most recent step", not a lexical bracket). So a
+ * post-step save lands on the step just run; to detach it, open the next step or
+ * pass an explicit `stepKey`.
+ *
  * Instrumentation never changes the wrapped function's return value, and never
  * throws into it — a disabled or absent run context just runs the body.
  */

package/dist/bakeoff/engine.d.ts

@@ -12,8 +12,14 @@
  */
 import type { CaptureStore } from "../telemetry/capture";
 import type { RunDeps } from "../run/run";
+import type { CandidateSpec, ObjectiveMode, RouteBundle } from "../types/route";
+import type { QualityGate } from "../types/quality";
 import type { ArmSamples, KeepOutputsMode } from "./samples";
-import type { BakeoffArtifact, VariantMetrics } from "./types";
+import type { BakeoffArtifact, BakeoffObjective, VariantMetrics } from "./types";
+/** The arm name carrying the reference (ceiling) metrics. Reserved — a user
+ * variant may not be named this (they cannot start a name with "__"; and it is
+ * never in `req.variants`). */
+export declare const REFERENCE_ARM = "__reference__";
 /** Sink for retained review samples (addendum A3). The engine assembles the
  * arms to persist (incumbent + winner, or all); the caller — createRig with
  * the service-role config — does the truncation + PostgREST insert. Keeps
@@ -34,11 +40,40 @@ export interface BakeoffRequest {
      * winning challenger; "all" = every arm. Undefined = keep nothing (the
      * default pure-metrics path). Requires a samplesSink to persist. */
     readonly keepOutputs?: KeepOutputsMode;
+    /** RB-1: objective-mode override (CLI `--objective`). Absent ⇒ the route's
+     * `objective.mode`, else quality-first (spec §3 default). */
+    readonly objectiveMode?: ObjectiveMode;
+    /** RB-1: resolver for `reference: auto` → a concrete declared candidate. The
+     * rig injects a registry-backed resolver (bakeoff/reference.ts); absent ⇒ an
+     * `auto` reference cannot be resolved and no reference arm runs. */
+    readonly resolveReferenceAuto?: (route: RouteBundle) => CandidateSpec | null;
+    /** RB-1: eval-case expected values keyed by captureId (from-eval-cases path);
+     * feeds quality tier 1. */
+    readonly expected?: ReadonlyMap<string, {
+        readonly value: unknown;
+    }>;
+    /** Q1 quality gate (spec §4.2): scored on every replayed sample to populate
+     * valueAccuracy + the quality pass rate, unlocking computeProposal's cost-first
+     * third clause. A function, so it rides `rig.bakeoff` (programmatic) only — the
+     * `modelrig bakeoff` CLI cannot carry one until Q2's declared judge. When a
+     * route also declares a `bakeoff.judge`, the SDK gate wins the value tier (both
+     * are caller-quality signals; F5 deterministic checks still run first). */
+    readonly qualityGate?: QualityGate;
 }
 export declare function runBakeoff(deps: RunDeps, captures: CaptureStore, req: BakeoffRequest, samplesSink?: BakeoffSamplesSink): Promise<BakeoffArtifact>;
-/** Winner among gate-passing challengers; null when nobody beats the
- * incumbent. Exported for direct unit testing. */
-export declare function computeProposal(requested: readonly string[], metrics: readonly VariantMetrics[]): BakeoffArtifact["proposal"];
+/** Objective context for the gate (RB-1). Absent ⇒ the legacy cost-first path
+ * (byte-identical to pre-RB-1, so the existing goldens hold). */
+export interface ProposalContext {
+    readonly objective?: BakeoffObjective;
+    /** The reference arm's name — excluded from the challenger set. */
+    readonly referenceVariant?: string;
+}
+/**
+ * Winner among gate-passing challengers; null when nobody beats the incumbent.
+ * Exported for direct unit testing. `ctx` absent OR `ctx.objective` absent ⇒ the
+ * legacy cost-first gate (goldens). Otherwise per the objective's mode.
+ */
+export declare function computeProposal(requested: readonly string[], metrics: readonly VariantMetrics[], ctx?: ProposalContext): BakeoffArtifact["proposal"];
 export interface BakeoffMirrorConfig {
     readonly supabaseUrl: string;
     readonly serviceRoleKey: string;
@@ -49,4 +84,11 @@ export interface BakeoffMirrorConfig {
  * Same PostgREST transport pattern as the telemetry exporter; captures have
  * no cloud surface — ONLY aggregate metrics travel. */
 export declare function mirrorBakeoff(artifact: BakeoffArtifact, config: BakeoffMirrorConfig): Promise<void>;
+/**
+ * The proposal-evidence jsonb for a bake-off artifact (near-optimal spec §4.6) —
+ * the winning variant, the RB-1 objective/reference/regret/quality_metric, and a
+ * per-arm matrix (with per-arm regret). Built here so the CLI stays thin; the PR
+ * body reads these fields back off `proposal.evidence`. ZERO DDL — freeform jsonb.
+ */
+export declare function bakeoffEvidence(artifact: BakeoffArtifact, spentUsd: number): Record<string, unknown>;
 //# sourceMappingURL=engine.d.ts.map

package/dist/bakeoff/engine.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"engine.d.ts","sourceRoot":"","sources":["../../src/bakeoff/engine.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAGH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AACzD,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,YAAY,CAAC;AAO1C,OAAO,KAAK,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,WAAW,CAAC;AAC7D,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,SAAS,CAAC;AAE/D;;;gFAGgF;AAChF,MAAM,MAAM,kBAAkB,GAAG,CAAC,KAAK,EAAE;IACvC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,IAAI,EAAE,SAAS,UAAU,EAAE,CAAC;CACtC,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;AAgBpB,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,qEAAqE;IACrE,QAAQ,CAAC,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAC;IACrC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,2EAA2E;IAC3E,QAAQ,CAAC,qBAAqB,EAAE,MAAM,CAAC;IACvC;;wEAEoE;IACpE,QAAQ,CAAC,WAAW,CAAC,EAAE,eAAe,CAAC;CACxC;AAED,wBAAsB,UAAU,CAC9B,IAAI,EAAE,OAAO,EACb,QAAQ,EAAE,YAAY,EACtB,GAAG,EAAE,cAAc,EACnB,WAAW,CAAC,EAAE,kBAAkB,GAC/B,OAAO,CAAC,eAAe,CAAC,CA2E1B;AAED;kDACkD;AAClD,wBAAgB,eAAe,CAC7B,SAAS,EAAE,SAAS,MAAM,EAAE,EAC5B,OAAO,EAAE,SAAS,cAAc,EAAE,GACjC,eAAe,CAAC,UAAU,CAAC,CA4B7B;AAED,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,KAAK,CAAC;CACjC;AAED;;uDAEuD;AACvD,wBAAsB,aAAa,CACjC,QAAQ,EAAE,eAAe,EACzB,MAAM,EAAE,mBAAmB,GAC1B,OAAO,CAAC,IAAI,CAAC,CA6Bf"}
+{"version":3,"file":"engine.d.ts","sourceRoot":"","sources":["../../src/bakeoff/engine.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAGH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AACzD,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,YAAY,CAAC;AAG1C,OAAO,KAAK,EAAE,aAAa,EAAE,aAAa,EAAE,WAAW,EAAgB,MAAM,gBAAgB,CAAC;AAM9F,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAEpD,OAAO,KAAK,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,WAAW,CAAC;AAC7D,OAAO,KAAK,EAAE,eAAe,EAAE,gBAAgB,EAAmC,cAAc,EAAE,MAAM,SAAS,CAAC;AAElH;;+BAE+B;AAC/B,eAAO,MAAM,aAAa,kBAAkB,CAAC;AAE7C;;;gFAGgF;AAChF,MAAM,MAAM,kBAAkB,GAAG,CAAC,KAAK,EAAE;IACvC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,IAAI,EAAE,SAAS,UAAU,EAAE,CAAC;CACtC,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;AAgBpB,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,qEAAqE;IACrE,QAAQ,CAAC,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAC;IACrC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,2EAA2E;IAC3E,QAAQ,CAAC,qBAAqB,EAAE,MAAM,CAAC;IACvC;;wEAEoE;IACpE,QAAQ,CAAC,WAAW,CAAC,EAAE,eAAe,CAAC;IACvC;iEAC6D;IAC7D,QAAQ,CAAC,aAAa,CAAC,EAAE,aAAa,CAAC;IACvC;;wEAEoE;IACpE,QAAQ,CAAC,oBAAoB,CAAC,EAAE,CAAC,KAAK,EAAE,WAAW,KAAK,aAAa,GAAG,IAAI,CAAC;IAC7E;+BAC2B;IAC3B,QAAQ,CAAC,QAAQ,CAAC,EAAE,WAAW,CAAC,MAAM,EAAE;QAAE,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAA;KAAE,CAAC,CAAC;IACrE;;;;;+EAK2E;IAC3E,QAAQ,CAAC,WAAW,CAAC,EAAE,WAAW,CAAC;CACpC;AAsBD,wBAAsB,UAAU,CAC9B,IAAI,EAAE,OAAO,EACb,QAAQ,EAAE,YAAY,EACtB,GAAG,EAAE,cAAc,EACnB,WAAW,CAAC,EAAE,kBAAkB,GAC/B,OAAO,CAAC,eAAe,CAAC,CAiJ1B;AAsCD;iEACiE;AACjE,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,SAAS,CAAC,EAAE,gBAAgB,CAAC;IACtC,mEAAmE;IACnE,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;CACpC;AAoBD;;;;GAIG;AACH,wBAAgB,eAAe,CAC7B,SAAS,EAAE,SAAS,MAAM,EAAE,EAC5B,OAAO,EAAE,SAAS,cAAc,EAAE,EAClC,GAAG,CAAC,EAAE,eAAe,GACpB,eAAe,CAAC,UAAU,CAAC,CA4G7B;AAED,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,KAAK,CAAC;CACjC;AAED;;uDAEuD;AACvD,wBAAsB,aAAa,CACjC,QAAQ,EAAE,eAAe,EACzB,MAAM,EAAE,mBAAmB,GAC1B,OAAO,CAAC,IAAI,CAAC,CA6Bf;AAED;;;;;GAKG;AACH,wBAAgB,eAAe,CAAC,QAAQ,EAAE,eAAe,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CA2BpG"}