modelrig 0.8.0 → 0.9.0

package/dist/routes/objective-loader.js

@@ -7,7 +7,9 @@
  * unit-tested directly.
  */
 Object.defineProperty(exports, "__esModule", { value: true });
+exports.DEFAULT_GRADE_PASS_THRESHOLD = void 0;
 exports.parseRb1Fields = parseRb1Fields;
+exports.parseGradeBlock = parseGradeBlock;
 exports.parseObjective = parseObjective;
 exports.parseBakeoffConfig = parseBakeoffConfig;
 exports.parseValueChecks = parseValueChecks;
@@ -19,6 +21,9 @@ function parseRb1Fields(doc, route, candidates, problems) {
     const objective = parseObjective(doc.objective, problems);
     const bakeoff = parseBakeoffConfig(doc.bakeoff, candidates, problems);
     const valueChecks = parseValueChecks(doc.value_checks, problems);
+    // Grade primitive (R2): the optional per-route pass threshold rides the same
+    // additive-route-knobs parse, keeping loader.ts under the LOC cap.
+    const grade = parseGradeBlock(doc.grade, problems);
     // Only nag routes that OPT INTO RB-1 (declare objective/bakeoff) but omit a
     // bound — a legacy route with neither block is not using regret bake-offs.
     if (objective !== undefined || bakeoff !== undefined) {
@@ -30,6 +35,7 @@ function parseRb1Fields(doc, route, candidates, problems) {
         ...(objective !== undefined ? { objective } : {}),
         ...(bakeoff !== undefined ? { bakeoff } : {}),
         ...(valueChecks !== undefined ? { valueChecks } : {}),
+        ...(grade !== undefined ? { grade } : {}),
     };
 }
 const OBJECTIVE_MODES = new Set([
@@ -40,6 +46,28 @@ const OBJECTIVE_MODES = new Set([
 function isRecord(v) {
     return typeof v === "object" && v !== null && !Array.isArray(v);
 }
+/** Default grade pass threshold when a route declares no `grade:` block (R2). */
+exports.DEFAULT_GRADE_PASS_THRESHOLD = 0.5;
+/** Parse the optional `grade:` block (grade primitive, R2). Currently one knob,
+ * `pass_threshold` (0–1). Declared + validated here but UNREAD until GP-2 wires
+ * verdict derivation. Absent ⇒ undefined (⇒ the default 0.5 is applied downstream).
+ * A malformed value pushes a teaching problem, exactly like every other field. */
+function parseGradeBlock(raw, problems) {
+    if (raw === undefined || raw === null)
+        return undefined;
+    if (!isRecord(raw)) {
+        problems.push("grade must be an object { pass_threshold: <0..1> }");
+        return undefined;
+    }
+    const t = raw.pass_threshold;
+    if (t === undefined)
+        return undefined;
+    if (typeof t !== "number" || !Number.isFinite(t) || t < 0 || t > 1) {
+        problems.push(`grade.pass_threshold must be a number in [0, 1], got ${String(t)}`);
+        return undefined;
+    }
+    return { passThreshold: t };
+}
 function parsePriceCeiling(raw, field, problems) {
     if (raw === undefined || raw === null)
         return undefined;
@@ -222,15 +250,69 @@ function parseBakeoffConfig(raw, candidates, problems) {
                 pairwise = { judge: pwJudge };
         }
     }
+    // Q1 regret monitor (spec §5) + N4 upgrade watch (spec §4) — additive, optional.
+    const regretMonitor = parseRegretMonitor(raw.regret_monitor, problems);
+    let upgradeWatch;
+    if (raw.upgrade_watch !== undefined) {
+        if (typeof raw.upgrade_watch !== "boolean") {
+            problems.push("bakeoff.upgrade_watch must be a boolean");
+        }
+        else {
+            upgradeWatch = raw.upgrade_watch;
+        }
+    }
+    // Teaching (spec §3 opt-in rule): a monitor/upgrade-watch with NO reference has
+    // nothing to measure against — warn (non-fatal), mirroring missingBoundWarning.
+    const noReference = reference === undefined;
+    if (noReference && (regretMonitor?.enabled === true || upgradeWatch === true)) {
+        console.warn(`modelrig: route bakeoff sets ${regretMonitor?.enabled === true ? "regret_monitor.enabled" : "upgrade_watch"}` +
+            " but declares no bakeoff.reference — there is no ceiling to measure regret against, so neither the" +
+            " regret monitor nor the up-swap watch can fire. Declare bakeoff.reference (auto or provider/model).");
+    }
     const out = {
         ...(reference !== undefined ? { reference } : {}),
         ...(referenceAllowExternal ? { referenceAllowExternal: true } : {}),
         ...(referenceEnvelopeUsd !== undefined ? { referenceEnvelopeUsd } : {}),
         ...(judge !== undefined ? { judge } : {}),
         ...(pairwise !== undefined ? { pairwise } : {}),
+        ...(regretMonitor !== undefined ? { regretMonitor } : {}),
+        ...(upgradeWatch !== undefined ? { upgradeWatch } : {}),
     };
     return Object.freeze(out);
 }
+/** Parse `bakeoff.regret_monitor: { enabled, sample_n?, window_days?,
+ * baseline_days? }` (spec §5). Absent ⇒ undefined. Each numeric bound must be a
+ * positive integer when present. */
+function parseRegretMonitor(raw, problems) {
+    if (raw === undefined || raw === null)
+        return undefined;
+    if (!isRecord(raw)) {
+        problems.push("bakeoff.regret_monitor must be an object { enabled, sample_n?, window_days?, baseline_days? }");
+        return undefined;
+    }
+    if (typeof raw.enabled !== "boolean") {
+        problems.push("bakeoff.regret_monitor.enabled must be a boolean");
+        return undefined;
+    }
+    const posInt = (v, field) => {
+        if (v === undefined)
+            return undefined;
+        if (typeof v !== "number" || !Number.isInteger(v) || v < 1) {
+            problems.push(`bakeoff.regret_monitor.${field} must be a positive integer`);
+            return undefined;
+        }
+        return v;
+    };
+    const sampleN = posInt(raw.sample_n, "sample_n");
+    const windowDays = posInt(raw.window_days, "window_days");
+    const baselineDays = posInt(raw.baseline_days, "baseline_days");
+    return Object.freeze({
+        enabled: raw.enabled,
+        ...(sampleN !== undefined ? { sampleN } : {}),
+        ...(windowDays !== undefined ? { windowDays } : {}),
+        ...(baselineDays !== undefined ? { baselineDays } : {}),
+    });
+}
 /** Parse a `{ model, max_samples }` judge spec (shared by `bakeoff.judge` and
  * `bakeoff.pairwise.judge`). Enforces #223 F3: the judge model must be a declared
  * candidate. Returns the parsed spec, or undefined when absent/invalid (problems

package/dist/routes/resolved-bundle.d.ts

@@ -25,6 +25,8 @@
  * schema it fingerprints.
  */
 import type { LoadedRoutes } from "./loader";
+import type { ScreenPolicy } from "../screen/types";
+import type { ResolvedMaskPolicy } from "../mask/types";
 import type { CandidateSpec, Preference, RepairPolicy, Requirement, RouteBundle, RoutePolicy, RouteVariant } from "../types/route";
 /**
  * The canonical, JSON-serialisable form of a resolved route bundle. Every field
@@ -48,10 +50,58 @@ export interface ResolvedRouteBundle {
     readonly variants: readonly RouteVariant[];
     readonly capture: boolean;
     readonly groundingQuery?: string;
+    /** S1 grounding assembly mode (`legacy` | `spotlight`). Carried so a route's
+     * spotlight opt-in survives to the hosted (mirror) lane. Absent ⇒ legacy. */
+    readonly groundingAssembly?: "legacy" | "spotlight";
+    /** S2 per-variable `x-trust` annotation. S3 mirror plumbing (spec §11.3, gap
+     * #3): previously DROPPED on the round-trip, so any bundle-borne trust signal
+     * was `undefined` on every mirror-lane run. Carried now so route `x-trust`
+     * annotations survive to the hosted lane. Absent ⇒ every variable stays `semi`
+     * (byte-identical). */
+    readonly variableTrust?: Readonly<Record<string, "untrusted">>;
+    /** SC-1b mirror fix (spec §4, SC-1b req 1 — the #322 QA finding). Previously
+     * DROPPED on the round-trip: `route.screen` was `undefined` on every
+     * mirror-lane run, so screening was silently INERT (a fail-open) — an
+     * `enforce` route did not screen at all on the hosted lane. Carried now as the
+     * RAW `ScreenPolicy` (the serialisable `.policy` — the built detector closures
+     * on `ResolvedScreenPolicy` cannot cross the wire); `bundleFromResolved`
+     * RE-RESOLVES it with `resolveScreenPolicy`, which always rebuilds the T0
+     * pattern detector deterministically. Absent ⇒ no screening (byte-identical).
+     * A `screen: enforce` route that relies on a T1 `classifier:` detector is
+     * REFUSED at export by {@link assertMirrorSafe} (weights can't be guaranteed on
+     * the gateway ⇒ it would silently degrade to T0 — never a silent inert
+     * enforce). */
+    readonly screenPolicy?: ScreenPolicy;
+    /** SC-1b mirror fix (spec §3, SC-1b req 1). The `mask:` block had the IDENTICAL
+     * drop gap — `route.mask` was `undefined` on the mirror lane, so masking was
+     * silently INERT. Carried now as the FULLY-RESOLVED policy: unlike screen, a
+     * `ResolvedMaskPolicy` has its dictionary `entries` INLINED and is fully
+     * serialisable, so it is passed straight through (no re-resolve, no filesystem
+     * on the gateway) and re-materialises byte-identically — so `mask: block`
+     * always re-resolves on the mirror and needs no export refusal. Absent ⇒ no
+     * masking (byte-identical). */
+    readonly mask?: ResolvedMaskPolicy;
 }
 /** Project an already-loaded (resolved) bundle to its serialisable form. Pure —
  * no filesystem; the loader already followed every file reference. */
 export declare function resolveRouteBundle(bundle: RouteBundle): ResolvedRouteBundle;
+/**
+ * Refuse-on-export guard (SC-1b req 1 — the #322 QA finding). A route that
+ * declares `screen: enforce` MUST be guaranteed to re-resolve its enforcement on
+ * the hosted (mirror) lane, or the hosted lane silently fails open. The mirror
+ * rebuilds the screen policy with `resolveScreenPolicy`, which ALWAYS builds the
+ * T0 pattern detector deterministically (no filesystem) — so a pure-T0 enforce
+ * policy re-resolves identically and mirrors safely. A T1 `classifier:` detector,
+ * though, depends on gateway-local weights the mirror cannot guarantee: there it
+ * would DEGRADE to T0 SILENTLY, weaker than what was authored and proven. Rather
+ * than ship a silently-degraded enforce we REFUSE at export with a teaching
+ * error. `mask` needs no guard: its resolved policy (dictionary entries inlined)
+ * crosses the wire whole and re-materialises identically.
+ *
+ * Called from the exporter (`buildExportedRouteMirrors`) — a hard failure at
+ * SYNC, on the developer's machine, never a silent inert enforce at request.
+ */
+export declare function assertMirrorSafe(bundle: RouteBundle): void;
 /** The canonical serialisation whose hash becomes `bundle_sha`. */
 export declare function canonicalBundleJson(bundle: ResolvedRouteBundle): string;
 /** Content hash of the canonical bundle — `sha256:<hex>`. Self-describing so a

package/dist/routes/resolved-bundle.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"resolved-bundle.d.ts","sourceRoot":"","sources":["../../src/routes/resolved-bundle.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAIH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,UAAU,CAAC;AAE7C,OAAO,KAAK,EACV,aAAa,EACb,UAAU,EACV,YAAY,EACZ,WAAW,EACX,WAAW,EACX,WAAW,EACX,YAAY,EACb,MAAM,gBAAgB,CAAC;AAExB;;;;;GAKG;AACH,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,iFAAiF;IACjF,QAAQ,CAAC,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IACrC,QAAQ,CAAC,UAAU,EAAE,SAAS,aAAa,EAAE,CAAC;IAC9C,QAAQ,CAAC,OAAO,EAAE,SAAS,WAAW,EAAE,CAAC;IACzC,QAAQ,CAAC,MAAM,EAAE,SAAS,UAAU,EAAE,CAAC;IACvC,4DAA4D;IAC5D,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,SAAS,EAAE,SAAS,MAAM,EAAE,CAAC;IACtC,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC;IAC7B,QAAQ,CAAC,MAAM,CAAC,EAAE,YAAY,CAAC;IAC/B,QAAQ,CAAC,QAAQ,EAAE,SAAS,YAAY,EAAE,CAAC;IAC3C,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;CAClC;AAED;sEACsE;AACtE,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,WAAW,GAAG,mBAAmB,CAgB3E;AAiBD,mEAAmE;AACnE,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,mBAAmB,GAAG,MAAM,CAEvE;AAED;gFACgF;AAChF,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,mBAAmB,GAAG,MAAM,CAEtE;AAED;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,OAAO,GAAG,WAAW,CAsC5D;AAED;;;;;;;;;GASG;AACH,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,WAAW,GAAG,YAAY,CAclE"}
+{"version":3,"file":"resolved-bundle.d.ts","sourceRoot":"","sources":["../../src/routes/resolved-bundle.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAIH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,UAAU,CAAC;AAG7C,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AACpD,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AACxD,OAAO,KAAK,EACV,aAAa,EACb,UAAU,EACV,YAAY,EACZ,WAAW,EACX,WAAW,EACX,WAAW,EACX,YAAY,EACb,MAAM,gBAAgB,CAAC;AAExB;;;;;GAKG;AACH,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,iFAAiF;IACjF,QAAQ,CAAC,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IACrC,QAAQ,CAAC,UAAU,EAAE,SAAS,aAAa,EAAE,CAAC;IAC9C,QAAQ,CAAC,OAAO,EAAE,SAAS,WAAW,EAAE,CAAC;IACzC,QAAQ,CAAC,MAAM,EAAE,SAAS,UAAU,EAAE,CAAC;IACvC,4DAA4D;IAC5D,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,SAAS,EAAE,SAAS,MAAM,EAAE,CAAC;IACtC,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC;IAC7B,QAAQ,CAAC,MAAM,CAAC,EAAE,YAAY,CAAC;IAC/B,QAAQ,CAAC,QAAQ,EAAE,SAAS,YAAY,EAAE,CAAC;IAC3C,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IACjC;iFAC6E;IAC7E,QAAQ,CAAC,iBAAiB,CAAC,EAAE,QAAQ,GAAG,WAAW,CAAC;IACpD;;;;2BAIuB;IACvB,QAAQ,CAAC,aAAa,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC,CAAC;IAC/D;;;;;;;;;;;mBAWe;IACf,QAAQ,CAAC,YAAY,CAAC,EAAE,YAAY,CAAC;IACrC;;;;;;;mCAO+B;IAC/B,QAAQ,CAAC,IAAI,CAAC,EAAE,kBAAkB,CAAC;CACpC;AAED;sEACsE;AACtE,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,WAAW,GAAG,mBAAmB,CAuB3E;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,WAAW,GAAG,IAAI,CAe1D;AAiBD,mEAAmE;AACnE,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,mBAAmB,GAAG,MAAM,CAEvE;AAED;gFACgF;AAChF,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,mBAAmB,GAAG,MAAM,CAEtE;AAED;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,OAAO,GAAG,WAAW,CAkD5D;AAED;;;;;;;;;GASG;AACH,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,WAAW,GAAG,YAAY,CAclE"}

package/dist/routes/resolved-bundle.js

@@ -27,6 +27,7 @@
  */
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.resolveRouteBundle = resolveRouteBundle;
+exports.assertMirrorSafe = assertMirrorSafe;
 exports.canonicalBundleJson = canonicalBundleJson;
 exports.hashResolvedBundle = hashResolvedBundle;
 exports.bundleFromResolved = bundleFromResolved;
@@ -34,6 +35,7 @@ exports.singleRouteStore = singleRouteStore;
 const node_crypto_1 = require("node:crypto");
 const fingerprint_1 = require("../registry/fingerprint");
 const loader_1 = require("./loader");
+const policy_1 = require("../screen/policy");
 /** Project an already-loaded (resolved) bundle to its serialisable form. Pure —
  * no filesystem; the loader already followed every file reference. */
 function resolveRouteBundle(bundle) {
@@ -51,8 +53,46 @@ function resolveRouteBundle(bundle) {
         variants: bundle.variants,
         capture: bundle.capture,
         ...(bundle.groundingQuery !== undefined ? { groundingQuery: bundle.groundingQuery } : {}),
+        ...(bundle.groundingAssembly !== undefined ? { groundingAssembly: bundle.groundingAssembly } : {}),
+        ...(bundle.variableTrust !== undefined ? { variableTrust: bundle.variableTrust } : {}),
+        // SC-1b mirror fix (req 1): carry the RAW screen policy (re-resolved on the
+        // gateway) + the fully-resolved mask policy (entries inlined) so neither is
+        // silently inert on the hosted lane. Absent ⇒ omitted ⇒ byte-identical.
+        ...(bundle.screen !== undefined ? { screenPolicy: bundle.screen.policy } : {}),
+        ...(bundle.mask !== undefined ? { mask: bundle.mask } : {}),
     };
 }
+/**
+ * Refuse-on-export guard (SC-1b req 1 — the #322 QA finding). A route that
+ * declares `screen: enforce` MUST be guaranteed to re-resolve its enforcement on
+ * the hosted (mirror) lane, or the hosted lane silently fails open. The mirror
+ * rebuilds the screen policy with `resolveScreenPolicy`, which ALWAYS builds the
+ * T0 pattern detector deterministically (no filesystem) — so a pure-T0 enforce
+ * policy re-resolves identically and mirrors safely. A T1 `classifier:` detector,
+ * though, depends on gateway-local weights the mirror cannot guarantee: there it
+ * would DEGRADE to T0 SILENTLY, weaker than what was authored and proven. Rather
+ * than ship a silently-degraded enforce we REFUSE at export with a teaching
+ * error. `mask` needs no guard: its resolved policy (dictionary entries inlined)
+ * crosses the wire whole and re-materialises identically.
+ *
+ * Called from the exporter (`buildExportedRouteMirrors`) — a hard failure at
+ * SYNC, on the developer's machine, never a silent inert enforce at request.
+ */
+function assertMirrorSafe(bundle) {
+    const screen = bundle.screen;
+    if (screen === undefined || screen.policy.mode !== "enforce")
+        return;
+    const classifiers = (screen.policy.detectors ?? []).filter((d) => d.startsWith("classifier:"));
+    if (classifiers.length > 0) {
+        throw new loader_1.RouteConfigError(`route "${bundle.route}" declares screen.mode: enforce with a classifier detector ` +
+            `(${classifiers.join(", ")}), which cannot be guaranteed to re-resolve on the hosted ` +
+            `(mirror) lane: the gateway has no access to the local classifier weights and would ` +
+            `silently DEGRADE to the T0 pattern tier — an enforce weaker than the one you authored ` +
+            `and proved. Fix: self-host this route, or drop the classifier from the enforce policy ` +
+            `(T0 patterns re-resolve deterministically on the mirror; the classifier stays a signal ` +
+            `under detect). Spec: screening §4.3, SC-1b req 1.`);
+    }
+}
 /** Deterministic JSON: object keys sorted recursively, array order preserved.
  * The whole point is that the SAME bundle always produces the SAME bytes, so
  * the content hash is stable across processes and machines. */
@@ -119,6 +159,18 @@ function bundleFromResolved(raw) {
         variants: Object.freeze([...(b.variants ?? [])]),
         capture: b.capture === true,
         ...(b.groundingQuery !== undefined ? { groundingQuery: b.groundingQuery } : {}),
+        ...(b.groundingAssembly !== undefined ? { groundingAssembly: b.groundingAssembly } : {}),
+        ...(b.variableTrust !== undefined ? { variableTrust: Object.freeze({ ...b.variableTrust }) } : {}),
+        // SC-1b mirror fix (req 1): RE-RESOLVE the raw screen policy so `route.screen`
+        // is a live `ResolvedScreenPolicy` (built detectors) on the hosted lane — no
+        // longer `undefined` (the silent fail-open). `resolveScreenPolicy` always
+        // builds the T0 pattern detector; a configured-but-absent T1 classifier
+        // degrades to T0 with `degraded: true` (never a silent inert enforce — and
+        // `assertMirrorSafe` already refused a T1-classifier enforce at export).
+        ...(b.screenPolicy !== undefined ? { screen: (0, policy_1.resolveScreenPolicy)(b.screenPolicy) } : {}),
+        // Mask carries its FULLY-RESOLVED policy (entries inlined) — passed through,
+        // re-materialising byte-identically so `mask: block` is never inert.
+        ...(b.mask !== undefined ? { mask: b.mask } : {}),
         // Recomputed, never trusted from the wire — cannot drift from the schema.
         fingerprintCell: (0, fingerprint_1.fingerprintSchema)(outputSchema)?.cellKey ?? null,
     });

package/dist/routes/screen-loader.d.ts

@@ -4,6 +4,34 @@
  * Pure functions that push into the shared `problems[]`; unit-tested directly.
  * Spec: docs/ModelRig/screening/spec.md §2.4 (S1 assembly knob, S2 x-trust).
  */
+import type { ResolvedScreenPolicy } from "../screen/types";
+import type { DataClassification } from "../artifacts/classification";
+import type { ResolvedMaskPolicy } from "../mask/types";
+import type { Requirement } from "../types/route";
+/**
+ * Parse + resolve the optional `screen:` block (SC-1a, spec §4.1). Returns the
+ * resolved policy, or `undefined` when the block is absent OR `mode: off` (both
+ * ⇒ byte-identical, no screening). Pushes teaching-style problems for a
+ * malformed block: an unknown detector / action, or a `sources` key that loosens
+ * a default tier, is a LOAD error (validated at the SAME point as `require:` /
+ * `mask:`). A configured-but-unavailable optional classifier is NOT a load error
+ * — resolution degrades to T0 (spec §4.3), surfaced later on the receipt.
+ */
+export declare function parseScreenBlock(raw: unknown, problems: string[]): ResolvedScreenPolicy | undefined;
+/**
+ * SC-2 (spec-sc2 §4): parse the route-level `classification` (rides the 00058
+ * `data_classification` enum — zero-DDL) and, for a `phi` value, GATE the route
+ * posture at load. A `phi` route must mask (≥ redact) AND (`require:
+ * zero_retention` OR a `sidecar` detector present), else it refuses to load with
+ * the specific teaching message (checkPhiPosture). Returns the parsed
+ * classification, or `undefined` when absent/invalid (an invalid value is a
+ * pushed problem). Runs at the same point as `require:` / `mask:` / `screen:`.
+ */
+export declare function parseClassificationAndPhiGate(raw: unknown, ctx: {
+    mask?: ResolvedMaskPolicy;
+    screen?: ResolvedScreenPolicy;
+    require: readonly Requirement[];
+}, problems: string[]): DataClassification | undefined;
 /** Push a problem for every `{{var}}` referenced in the system template or the
  * grounding query that was not declared in `prompt.variables`. Colocated with
  * the variable parser it validates. */

package/dist/routes/screen-loader.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"screen-loader.d.ts","sourceRoot":"","sources":["../../src/routes/screen-loader.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAQH;;uCAEuC;AACvC,wBAAgB,8BAA8B,CAC5C,cAAc,EAAE,MAAM,EACtB,cAAc,EAAE,MAAM,GAAG,SAAS,EAClC,SAAS,EAAE,SAAS,MAAM,EAAE,EAC5B,QAAQ,EAAE,MAAM,EAAE,GACjB,IAAI,CAcN;AAED;;;iFAGiF;AACjF,wBAAgB,cAAc,CAC5B,OAAO,EAAE,OAAO,EAChB,QAAQ,EAAE,MAAM,EAAE,GACjB;IAAE,QAAQ,CAAC,KAAK,EAAE,MAAM,EAAE,CAAC;IAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,CAAA;CAAE,CAwB5E;AAED;;iFAEiF;AACjF,wBAAgB,sBAAsB,CACpC,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAClC,QAAQ,EAAE,MAAM,EAAE,GACjB,QAAQ,GAAG,WAAW,GAAG,SAAS,CAQpC"}
+{"version":3,"file":"screen-loader.d.ts","sourceRoot":"","sources":["../../src/routes/screen-loader.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAIH,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,iBAAiB,CAAC;AAG5D,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,6BAA6B,CAAC;AACtE,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AACxD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAMlD;;;;;;;;GAQG;AACH,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,oBAAoB,GAAG,SAAS,CAUnG;AAED;;;;;;;;GAQG;AACH,wBAAgB,6BAA6B,CAC3C,GAAG,EAAE,OAAO,EACZ,GAAG,EAAE;IAAE,IAAI,CAAC,EAAE,kBAAkB,CAAC;IAAC,MAAM,CAAC,EAAE,oBAAoB,CAAC;IAAC,OAAO,EAAE,SAAS,WAAW,EAAE,CAAA;CAAE,EAClG,QAAQ,EAAE,MAAM,EAAE,GACjB,kBAAkB,GAAG,SAAS,CAYhC;AAED;;uCAEuC;AACvC,wBAAgB,8BAA8B,CAC5C,cAAc,EAAE,MAAM,EACtB,cAAc,EAAE,MAAM,GAAG,SAAS,EAClC,SAAS,EAAE,SAAS,MAAM,EAAE,EAC5B,QAAQ,EAAE,MAAM,EAAE,GACjB,IAAI,CAcN;AAED;;;iFAGiF;AACjF,wBAAgB,cAAc,CAC5B,OAAO,EAAE,OAAO,EAChB,QAAQ,EAAE,MAAM,EAAE,GACjB;IAAE,QAAQ,CAAC,KAAK,EAAE,MAAM,EAAE,CAAC;IAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,CAAA;CAAE,CAwB5E;AAED;;iFAEiF;AACjF,wBAAgB,sBAAsB,CACpC,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAClC,QAAQ,EAAE,MAAM,EAAE,GACjB,QAAQ,GAAG,WAAW,GAAG,SAAS,CAQpC"}

package/dist/routes/screen-loader.js

@@ -6,13 +6,64 @@
  * Spec: docs/ModelRig/screening/spec.md §2.4 (S1 assembly knob, S2 x-trust).
  */
 Object.defineProperty(exports, "__esModule", { value: true });
+exports.parseScreenBlock = parseScreenBlock;
+exports.parseClassificationAndPhiGate = parseClassificationAndPhiGate;
 exports.pushUndeclaredVariableProblems = pushUndeclaredVariableProblems;
 exports.parseVariables = parseVariables;
 exports.parseGroundingAssembly = parseGroundingAssembly;
 const template_1 = require("./template");
+const policy_1 = require("../screen/policy");
+const phi_gate_1 = require("../screen/phi-gate");
+const classification_1 = require("../artifacts/classification");
 function isRecord(v) {
     return typeof v === "object" && v !== null && !Array.isArray(v);
 }
+/**
+ * Parse + resolve the optional `screen:` block (SC-1a, spec §4.1). Returns the
+ * resolved policy, or `undefined` when the block is absent OR `mode: off` (both
+ * ⇒ byte-identical, no screening). Pushes teaching-style problems for a
+ * malformed block: an unknown detector / action, or a `sources` key that loosens
+ * a default tier, is a LOAD error (validated at the SAME point as `require:` /
+ * `mask:`). A configured-but-unavailable optional classifier is NOT a load error
+ * — resolution degrades to T0 (spec §4.3), surfaced later on the receipt.
+ */
+function parseScreenBlock(raw, problems) {
+    if (raw === undefined)
+        return undefined;
+    const shapeProblems = (0, policy_1.validateScreenPolicyShape)(raw);
+    if (shapeProblems.length > 0) {
+        for (const p of shapeProblems)
+            problems.push(`screen: ${p}`);
+        return undefined;
+    }
+    const policy = (0, policy_1.parseScreenPolicy)(raw);
+    if (policy.mode === "off")
+        return undefined; // off ⇒ no screening, byte-identical
+    return (0, policy_1.resolveScreenPolicy)(policy);
+}
+/**
+ * SC-2 (spec-sc2 §4): parse the route-level `classification` (rides the 00058
+ * `data_classification` enum — zero-DDL) and, for a `phi` value, GATE the route
+ * posture at load. A `phi` route must mask (≥ redact) AND (`require:
+ * zero_retention` OR a `sidecar` detector present), else it refuses to load with
+ * the specific teaching message (checkPhiPosture). Returns the parsed
+ * classification, or `undefined` when absent/invalid (an invalid value is a
+ * pushed problem). Runs at the same point as `require:` / `mask:` / `screen:`.
+ */
+function parseClassificationAndPhiGate(raw, ctx, problems) {
+    if (raw === undefined || raw === null)
+        return undefined;
+    const norm = (0, classification_1.normalizeClassification)(raw);
+    if (norm === null || !classification_1.DATA_CLASSIFICATIONS.includes(norm)) {
+        problems.push(`classification "${String(raw)}" is not one of ${classification_1.DATA_CLASSIFICATIONS.join(" | ")}`);
+        return undefined;
+    }
+    const classification = norm;
+    for (const p of (0, phi_gate_1.checkPhiPosture)({ classification, mask: ctx.mask, screen: ctx.screen, require: ctx.require })) {
+        problems.push(`phi posture: ${p}`);
+    }
+    return classification;
+}
 /** Push a problem for every `{{var}}` referenced in the system template or the
  * grounding query that was not declared in `prompt.variables`. Colocated with
  * the variable parser it validates. */

package/dist/run/accept.d.ts

@@ -40,6 +40,8 @@ export interface SuccessMetaInput {
     readonly quality?: RunMeta["quality"];
     /** CS-1 mask receipt (spec §6) — counts-only, when the route masks. */
     readonly mask?: RunMeta["mask"];
+    /** SC-1a screen receipt (spec §5) — counts-only, when the route screens. */
+    readonly screen?: RunMeta["screen"];
 }
 /** The validated `RunMeta` for the accept path — `repairedBy` is null here (the
  * repair path builds its own meta), `validated` is always true. */

package/dist/run/accept.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"accept.d.ts","sourceRoot":"","sources":["../../src/run/accept.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AACtD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AACtD,OAAO,KAAK,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAClE,OAAO,KAAK,EAAE,WAAW,EAAE,OAAO,EAAE,MAAM,gBAAgB,CAAC;AAC3D,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AACnD,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AAEnE;;;iDAGiD;AACjD,wBAAgB,iBAAiB,CAC/B,SAAS,EAAE,YAAY,EACvB,KAAK,EAAE,YAAY,EACnB,OAAO,EAAE,MAAM,EACf,SAAS,EAAE,MAAM,EACjB,cAAc,EAAE,OAAO,EACvB,OAAO,EAAE,UAAU,GAAG,IAAI,EAC1B,UAAU,EAAE,iBAAiB,EAC7B,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GACjC,gBAAgB,CAiBlB;AAED,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,KAAK,EAAE,WAAW,CAAC;IAC5B,QAAQ,CAAC,SAAS,EAAE,YAAY,CAAC;IACjC,QAAQ,CAAC,KAAK,EAAE,YAAY,CAAC;IAC7B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,eAAe,EAAE,OAAO,CAAC,MAAM,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC,CAAC;IAChE,QAAQ,CAAC,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IACtC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,wEAAwE;IACxE,QAAQ,CAAC,SAAS,CAAC,EAAE,OAAO,CAAC,WAAW,CAAC,CAAC;IAC1C,wEAAwE;IACxE,QAAQ,CAAC,SAAS,CAAC,EAAE,OAAO,CAAC,WAAW,CAAC,CAAC;IAC1C,uDAAuD;IACvD,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC;IACtC,uEAAuE;IACvE,QAAQ,CAAC,IAAI,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;CACjC;AAED;mEACmE;AACnE,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,gBAAgB,GAAG,OAAO,CAyBjE"}
+{"version":3,"file":"accept.d.ts","sourceRoot":"","sources":["../../src/run/accept.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AACtD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AACtD,OAAO,KAAK,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAClE,OAAO,KAAK,EAAE,WAAW,EAAE,OAAO,EAAE,MAAM,gBAAgB,CAAC;AAC3D,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AACnD,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AAEnE;;;iDAGiD;AACjD,wBAAgB,iBAAiB,CAC/B,SAAS,EAAE,YAAY,EACvB,KAAK,EAAE,YAAY,EACnB,OAAO,EAAE,MAAM,EACf,SAAS,EAAE,MAAM,EACjB,cAAc,EAAE,OAAO,EACvB,OAAO,EAAE,UAAU,GAAG,IAAI,EAC1B,UAAU,EAAE,iBAAiB,EAC7B,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GACjC,gBAAgB,CAiBlB;AAED,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,KAAK,EAAE,WAAW,CAAC;IAC5B,QAAQ,CAAC,SAAS,EAAE,YAAY,CAAC;IACjC,QAAQ,CAAC,KAAK,EAAE,YAAY,CAAC;IAC7B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,eAAe,EAAE,OAAO,CAAC,MAAM,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC,CAAC;IAChE,QAAQ,CAAC,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IACtC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,wEAAwE;IACxE,QAAQ,CAAC,SAAS,CAAC,EAAE,OAAO,CAAC,WAAW,CAAC,CAAC;IAC1C,wEAAwE;IACxE,QAAQ,CAAC,SAAS,CAAC,EAAE,OAAO,CAAC,WAAW,CAAC,CAAC;IAC1C,uDAAuD;IACvD,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC;IACtC,uEAAuE;IACvE,QAAQ,CAAC,IAAI,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;IAChC,4EAA4E;IAC5E,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC;CACrC;AAED;mEACmE;AACnE,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,gBAAgB,GAAG,OAAO,CA0BjE"}

package/dist/run/accept.js

@@ -63,5 +63,6 @@ function buildSuccessMeta(input) {
         ...(input.grounding !== undefined ? { grounding: input.grounding } : {}),
         ...(input.quality !== undefined ? { quality: input.quality } : {}),
         ...(input.mask !== undefined ? { mask: input.mask } : {}),
+        ...(input.screen !== undefined ? { screen: input.screen } : {}),
     };
 }

package/dist/run/dispatch.d.ts

@@ -17,6 +17,8 @@ import type { LadderKeyMinter } from "./ladder-key";
 import type { MaskReceipt, ResolvedMaskPolicy } from "../mask/types";
 import type { RunVault } from "../mask/vault";
 import { type MaskSeam } from "../mask/seam";
+import { type SearchResultItem } from "./grounding";
+import type { ResolvedScreenPolicy, ScreenReceipt } from "../screen/types";
 /** One telemetry attempt row's inputs — shared with run.ts's recordAttempt so
  * the tool-call helper here can record through the same closure. */
 export interface AttemptTelemetry {
@@ -56,6 +58,11 @@ export interface AttemptTelemetry {
      * this attempt, written to `inferences.mask` by record-attempt.ts. Present
      * only on a masked route; NEVER a matched value. Additive & optional. */
     readonly mask?: MaskReceipt;
+    /** SC-1a screen receipt (spec §5) — the counts-only screen summary for this
+     * attempt, merged onto `inferences.meta.screen` by record-attempt.ts (ZERO
+     * migration, §8). Present only on a screened route; NEVER a matched value.
+     * Additive & optional. */
+    readonly screen?: ScreenReceipt;
 }
 /** Assemble the recorder's `metaInputs` from a completed dispatch (WI-1) — the
  * adapter's native meta plus the rendered request (system+user+schema, hashed)
@@ -93,6 +100,11 @@ export interface PrimaryRequestParts {
     /** True when this candidate has native grounding AND the route requires it. */
     readonly nativeGrounded: boolean;
     readonly opts: RunOptions;
+    /** Screening SC-1a (spec §2.2): the grounding-inject results for THIS candidate
+     * (or null/absent when the run is not spotlight-grounded). Threaded so the
+     * dispatch helper can collect the `search`-source untrusted segments the screen
+     * engine scans + the assembler spotlights. Optional ⇒ treated as null. */
+    readonly injectedSources?: readonly SearchResultItem[] | null;
     /** CE-1 retry-drop: suppress a customer cache handle on THIS dispatch after a
      * prior `cache_invalid` on the same candidate carried it. Additive; absent /
      * false = normal (the handle applies when provider matches). */
@@ -118,28 +130,45 @@ export interface MaskContext {
     readonly policy: ResolvedMaskPolicy;
     readonly vault: RunVault;
 }
-/** The outcome of a build+mask+dispatch (CS-1 seam, spec §1.2). Carries the
- * (possibly masked) request, the adapter result, measured latency, and the
- * per-attempt {@link MaskSeam} the run loop uses to rehydrate the response and
- * build the receipt. `maskRefusal` is set when masking FAILED CLOSED
- * pre-dispatch (`block` found a match, or a detector threw in mask/block) — no
- * request was sent, and the run loop fails the run with `invariant_violation`. */
+/** The per-run guards the run loop hands the dispatch seam: the CS-1 mask
+ * context and the SC-1a resolved screen policy (spec §4). Both null ⇒ the
+ * dispatch path is byte-identical to `buildAdapterRequest` + `dispatchCandidate`
+ * over the assembled request (the golden test). */
+export interface RunGuards {
+    readonly mask: MaskContext | null;
+    readonly screen: ResolvedScreenPolicy | null;
+}
+/** Build the per-run guards for a route (called ONCE at run start). The mask
+ * vault is run-scoped (shared across attempts); the screen policy is resolved at
+ * load and reused. Null members ⇒ that guard is inert (byte-identical). */
+export declare function buildRunGuards(route: RouteBundle, newVault: () => RunVault): RunGuards;
+/** The outcome of an assemble+screen+mask+dispatch (CS-1/SC-1a seam). Carries the
+ * (possibly rewritten) request, the adapter result, measured latency, the
+ * per-attempt {@link MaskSeam} the run loop uses to rehydrate, and the counts-only
+ * screen receipt for `meta.screen`. `maskRefusal` is set when masking failed
+ * closed; `screenRefusal` when screening resolved `block` (spec §4.3) — in both
+ * cases NO request was sent and the run loop fails the run with
+ * `invariant_violation`. */
 export interface DispatchOutcome {
     readonly request: AdapterRequest;
     readonly result: AdapterResult;
     readonly latencyMs: number;
     readonly seam: MaskSeam | null;
     readonly maskRefusal?: "blocked" | "error";
+    readonly screenRefusal?: "block";
+    readonly screenReceipt?: ScreenReceipt;
 }
 /**
- * Build the primary AdapterRequest, mask its outgoing user slot when the route
- * has an active policy (spec §1.2 — "rewrites the AdapterRequest before dispatch
- * and rehydrates the AdapterResult after"), dispatch, and time it. With no mask
- * context this is byte-identical to `buildAdapterRequest` + `dispatchCandidate`
- * (the golden test). The trusted system slot is never masked (B3 keeps untrusted
- * content in the user path).
+ * Assemble the untrusted block, SCREEN it (spec §4 — the request-side seam),
+ * MASK the user slot (CS-1, screening runs BEFORE masking so mask tokens never
+ * confuse a detector), dispatch, and apply the output-side screen (canary /
+ * citations / Unicode strip + quarantine drop-count). With both guards null this
+ * is byte-identical to `buildAdapterRequest(assembled)` + `dispatchCandidate`
+ * (the golden test) — the untrusted-block assembly moved here from run.ts so the
+ * loop stays under the LOC cap (spec §10(i)). The trusted system slot is never
+ * masked (B3 keeps untrusted content in the user path).
  */
-export declare function buildDispatchMaybeMasked(adapter: ProviderAdapter, parts: PrimaryRequestParts, onDelta: StreamDeltaSink | undefined, mask: MaskContext | null): Promise<DispatchOutcome>;
+export declare function buildDispatchMaybeMasked(adapter: ProviderAdapter, parts: PrimaryRequestParts, onDelta: StreamDeltaSink | undefined, guards: RunGuards): Promise<DispatchOutcome>;
 export interface ToolCallResultParts {
     readonly route: RouteBundle;
     readonly candidate: CandidateRef;

package/dist/run/dispatch.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"dispatch.d.ts","sourceRoot":"","sources":["../../src/run/dispatch.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,KAAK,EACV,cAAc,EACd,aAAa,EACb,YAAY,EACZ,eAAe,EACf,cAAc,EACf,MAAM,mBAAmB,CAAC;AAE3B,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AACpD,OAAO,KAAK,EAAE,WAAW,EAAE,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,gBAAgB,CAAC;AAC3F,OAAO,KAAK,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AACxE,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AAInE,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AACpD,OAAO,KAAK,EAAE,WAAW,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AACrE,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAC9C,OAAO,EAAkB,KAAK,QAAQ,EAAE,MAAM,cAAc,CAAC;AAE7D;oEACoE;AACpE,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,SAAS,EAAE,YAAY,CAAC;IACjC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B;6DACyD;IACzD,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IACnC,QAAQ,CAAC,kBAAkB,CAAC,EAAE,MAAM,CAAC;IACrC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B;0BACsB;IACtB,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,OAAO,EAAE,UAAU,GAAG,IAAI,CAAC;IACpC,6EAA6E;IAC7E,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,2EAA2E;IAC3E,QAAQ,CAAC,cAAc,CAAC,EAAE,OAAO,CAAC;IAClC;;gEAE4D;IAC5D,QAAQ,CAAC,IAAI,CAAC,EAAE,aAAa,CAAC;IAC9B;;;uFAGmF;IACnF,QAAQ,CAAC,UAAU,CAAC,EAAE,iBAAiB,CAAC;IACxC;;0DAEsD;IACtD,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC5C;;6EAEyE;IACzE,QAAQ,CAAC,IAAI,CAAC,EAAE,WAAW,CAAC;CAC7B;AAED;;;+DAG+D;AAC/D,wBAAgB,iBAAiB,CAAC,IAAI,EAAE;IACtC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IACrC,QAAQ,CAAC,MAAM,EAAE,aAAa,CAAC;IAC/B,QAAQ,CAAC,KAAK,CAAC,EAAE,SAAS,cAAc,EAAE,CAAC;CAC5C,GAAG,iBAAiB,CAWpB;AAED;gEACgE;AAChE,MAAM,MAAM,aAAa,GAAG,CAAC,OAAO,EAAE,gBAAgB,KAAK,MAAM,CAAC;AAElE;;4EAE4E;AAC5E,wBAAgB,mBAAmB,CACjC,SAAS,EAAE,cAAc,EACzB,KAAK,EAAE,WAAW,EAClB,aAAa,EAAE,OAAO,EACtB,aAAa,EAAE,MAAM,GAAG,IAAI,EAC5B,gBAAgB,EAAE,MAAM,EACxB,OAAO,EAAE,MAAM,EACf,MAAM,EAAE,eAAe,GACtB,IAAI,CAoCN;AAED;;8EAE8E;AAC9E,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAYvD;AAED;;0CAE0C;AAC1C,MAAM,MAAM,eAAe,GAAG,CAAC,KAAK,EAAE;IAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;CAAE,KAAK,IAAI,CAAC;AAEzE,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,KAAK,EAAE,WAAW,CAAC;IAC5B,QAAQ,CAAC,SAAS,EAAE,YAAY,CAAC;IACjC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,+EAA+E;IAC/E,QAAQ,CAAC,cAAc,EAAE,OAAO,CAAC;IACjC,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;IAC1B;;oEAEgE;IAChE,QAAQ,CAAC,qBAAqB,CAAC,EAAE,OAAO,CAAC;CAC1C;AAED;uDACuD;AACvD,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,mBAAmB,GAAG,cAAc,CAgC9E;AAED;4CAC4C;AAC5C,wBAAgB,yBAAyB,CACvC,KAAK,EAAE,WAAW,EAClB,SAAS,EAAE,YAAY,EACvB,YAAY,EAAE,MAAM,EACpB,eAAe,EAAE,MAAM,GACtB,cAAc,CAmBhB;AAED;;;;;;GAMG;AACH,wBAAsB,iBAAiB,CACrC,OAAO,EAAE,eAAe,EACxB,GAAG,EAAE,cAAc,EACnB,OAAO,CAAC,EAAE,eAAe,GACxB,OAAO,CAAC,aAAa,CAAC,CAuBxB;AAED;2EAC2E;AAC3E,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,MAAM,EAAE,kBAAkB,CAAC;IACpC,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC;CAC1B;AAED;;;;;kFAKkF;AAClF,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,OAAO,EAAE,cAAc,CAAC;IACjC,QAAQ,CAAC,MAAM,EAAE,aAAa,CAAC;IAC/B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,IAAI,EAAE,QAAQ,GAAG,IAAI,CAAC;IAC/B,QAAQ,CAAC,WAAW,CAAC,EAAE,SAAS,GAAG,OAAO,CAAC;CAC5C;AAED;;;;;;;GAOG;AACH,wBAAsB,wBAAwB,CAC5C,OAAO,EAAE,eAAe,EACxB,KAAK,EAAE,mBAAmB,EAC1B,OAAO,EAAE,eAAe,GAAG,SAAS,EACpC,IAAI,EAAE,WAAW,GAAG,IAAI,GACvB,OAAO,CAAC,eAAe,CAAC,CAsB1B;AAED,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,KAAK,EAAE,WAAW,CAAC;IAC5B,QAAQ,CAAC,SAAS,EAAE,YAAY,CAAC;IACjC,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC,aAAa,EAAE;QAAE,EAAE,EAAE,IAAI,CAAA;KAAE,CAAC,CAAC;IACtD,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,eAAe,EAAE,OAAO,CAAC,iBAAiB,CAAC,CAAC;IACrD,QAAQ,CAAC,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IACtC,QAAQ,CAAC,cAAc,EAAE,OAAO,CAAC;IACjC;kDAC8C;IAC9C,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,wEAAwE;IACxE,QAAQ,CAAC,UAAU,CAAC,EAAE,iBAAiB,CAAC;CACzC;AAED;;;;;;;GAOG;AACH,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,aAAa,EAAE,KAAK,EAAE,mBAAmB,GAAG,SAAS,CAiD/F"}
+{"version":3,"file":"dispatch.d.ts","sourceRoot":"","sources":["../../src/run/dispatch.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,KAAK,EACV,cAAc,EACd,aAAa,EACb,YAAY,EACZ,eAAe,EACf,cAAc,EACf,MAAM,mBAAmB,CAAC;AAG3B,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AACpD,OAAO,KAAK,EAAE,WAAW,EAAE,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,gBAAgB,CAAC;AAC3F,OAAO,KAAK,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AACxE,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AAInE,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AACpD,OAAO,KAAK,EAAE,WAAW,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AACrE,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAC9C,OAAO,EAAkB,KAAK,QAAQ,EAAE,MAAM,cAAc,CAAC;AAC7D,OAAO,EAAsD,KAAK,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAExG,OAAO,KAAK,EAAE,oBAAoB,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAG3E;oEACoE;AACpE,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,SAAS,EAAE,YAAY,CAAC;IACjC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B;6DACyD;IACzD,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IACnC,QAAQ,CAAC,kBAAkB,CAAC,EAAE,MAAM,CAAC;IACrC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B;0BACsB;IACtB,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,OAAO,EAAE,UAAU,GAAG,IAAI,CAAC;IACpC,6EAA6E;IAC7E,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,2EAA2E;IAC3E,QAAQ,CAAC,cAAc,CAAC,EAAE,OAAO,CAAC;IAClC;;gEAE4D;IAC5D,QAAQ,CAAC,IAAI,CAAC,EAAE,aAAa,CAAC;IAC9B;;;uFAGmF;IACnF,QAAQ,CAAC,UAAU,CAAC,EAAE,iBAAiB,CAAC;IACxC;;0DAEsD;IACtD,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC5C;;6EAEyE;IACzE,QAAQ,CAAC,IAAI,CAAC,EAAE,WAAW,CAAC;IAC5B;;;8BAG0B;IAC1B,QAAQ,CAAC,MAAM,CAAC,EAAE,aAAa,CAAC;CACjC;AAED;;;+DAG+D;AAC/D,wBAAgB,iBAAiB,CAAC,IAAI,EAAE;IACtC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IACrC,QAAQ,CAAC,MAAM,EAAE,aAAa,CAAC;IAC/B,QAAQ,CAAC,KAAK,CAAC,EAAE,SAAS,cAAc,EAAE,CAAC;CAC5C,GAAG,iBAAiB,CAWpB;AAED;gEACgE;AAChE,MAAM,MAAM,aAAa,GAAG,CAAC,OAAO,EAAE,gBAAgB,KAAK,MAAM,CAAC;AAElE;;4EAE4E;AAC5E,wBAAgB,mBAAmB,CACjC,SAAS,EAAE,cAAc,EACzB,KAAK,EAAE,WAAW,EAClB,aAAa,EAAE,OAAO,EACtB,aAAa,EAAE,MAAM,GAAG,IAAI,EAC5B,gBAAgB,EAAE,MAAM,EACxB,OAAO,EAAE,MAAM,EACf,MAAM,EAAE,eAAe,GACtB,IAAI,CAoCN;AAED;;8EAE8E;AAC9E,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAYvD;AAED;;0CAE0C;AAC1C,MAAM,MAAM,eAAe,GAAG,CAAC,KAAK,EAAE;IAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;CAAE,KAAK,IAAI,CAAC;AAEzE,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,KAAK,EAAE,WAAW,CAAC;IAC5B,QAAQ,CAAC,SAAS,EAAE,YAAY,CAAC;IACjC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,+EAA+E;IAC/E,QAAQ,CAAC,cAAc,EAAE,OAAO,CAAC;IACjC,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;IAC1B;;;8EAG0E;IAC1E,QAAQ,CAAC,eAAe,CAAC,EAAE,SAAS,gBAAgB,EAAE,GAAG,IAAI,CAAC;IAC9D;;oEAEgE;IAChE,QAAQ,CAAC,qBAAqB,CAAC,EAAE,OAAO,CAAC;CAC1C;AAED;uDACuD;AACvD,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,mBAAmB,GAAG,cAAc,CAgC9E;AAED;4CAC4C;AAC5C,wBAAgB,yBAAyB,CACvC,KAAK,EAAE,WAAW,EAClB,SAAS,EAAE,YAAY,EACvB,YAAY,EAAE,MAAM,EACpB,eAAe,EAAE,MAAM,GACtB,cAAc,CAmBhB;AAED;;;;;;GAMG;AACH,wBAAsB,iBAAiB,CACrC,OAAO,EAAE,eAAe,EACxB,GAAG,EAAE,cAAc,EACnB,OAAO,CAAC,EAAE,eAAe,GACxB,OAAO,CAAC,aAAa,CAAC,CAuBxB;AAED;2EAC2E;AAC3E,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,MAAM,EAAE,kBAAkB,CAAC;IACpC,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC;CAC1B;AAED;;;mDAGmD;AACnD,MAAM,WAAW,SAAS;IACxB,QAAQ,CAAC,IAAI,EAAE,WAAW,GAAG,IAAI,CAAC;IAClC,QAAQ,CAAC,MAAM,EAAE,oBAAoB,GAAG,IAAI,CAAC;CAC9C;AAED;;2EAE2E;AAC3E,wBAAgB,cAAc,CAAC,KAAK,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,QAAQ,GAAG,SAAS,CAKtF;AAED;;;;;;4BAM4B;AAC5B,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,OAAO,EAAE,cAAc,CAAC;IACjC,QAAQ,CAAC,MAAM,EAAE,aAAa,CAAC;IAC/B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,IAAI,EAAE,QAAQ,GAAG,IAAI,CAAC;IAC/B,QAAQ,CAAC,WAAW,CAAC,EAAE,SAAS,GAAG,OAAO,CAAC;IAC3C,QAAQ,CAAC,aAAa,CAAC,EAAE,OAAO,CAAC;IACjC,QAAQ,CAAC,aAAa,CAAC,EAAE,aAAa,CAAC;CACxC;AASD;;;;;;;;;GASG;AACH,wBAAsB,wBAAwB,CAC5C,OAAO,EAAE,eAAe,EACxB,KAAK,EAAE,mBAAmB,EAC1B,OAAO,EAAE,eAAe,GAAG,SAAS,EACpC,MAAM,EAAE,SAAS,GAChB,OAAO,CAAC,eAAe,CAAC,CAwF1B;AAED,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,KAAK,EAAE,WAAW,CAAC;IAC5B,QAAQ,CAAC,SAAS,EAAE,YAAY,CAAC;IACjC,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC,aAAa,EAAE;QAAE,EAAE,EAAE,IAAI,CAAA;KAAE,CAAC,CAAC;IACtD,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,eAAe,EAAE,OAAO,CAAC,iBAAiB,CAAC,CAAC;IACrD,QAAQ,CAAC,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IACtC,QAAQ,CAAC,cAAc,EAAE,OAAO,CAAC;IACjC;kDAC8C;IAC9C,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,wEAAwE;IACxE,QAAQ,CAAC,UAAU,CAAC,EAAE,iBAAiB,CAAC;CACzC;AAED;;;;;;;GAOG;AACH,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,aAAa,EAAE,KAAK,EAAE,mBAAmB,GAAG,SAAS,CAiD/F"}