modelrig 0.8.1 → 0.10.0

package/dist/telemetry/store-migrations.js

@@ -11,6 +11,7 @@
  */
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.runStoreMigrations = runStoreMigrations;
+const grades_sql_1 = require("./grades-sql");
 /** Apply every pending schema migration to an open telemetry database. Safe to
  * call on every open (idempotent). */
 function runStoreMigrations(db) {
@@ -142,4 +143,67 @@ function runStoreMigrations(db) {
         }
         db.pragma("user_version = 13");
     }
+    // v14 (grade primitive, R1): the unified `grades` table + a one-time backfill
+    // from the local `feedback` table (the local mirror of migration 00070). The
+    // table itself comes from SCHEMA_SQL's CREATE IF NOT EXISTS (a no-op on
+    // migrating databases); this rung backfills existing feedback rows so a
+    // pre-grade database's verdicts still export as grades. The evaluations
+    // backfill lives in artifact-store.ts (it owns that table). INSERT OR IGNORE
+    // makes the backfill idempotent even if it races a live write. Additive.
+    if (db.pragma("user_version", { simple: true }) < 14) {
+        (0, grades_sql_1.backfillGradesFromFeedback)(db);
+        db.pragma("user_version = 14");
+    }
+    // v15 (grade primitive GP-2, mirrors migration 00072): drop the three GP-1-only
+    // compat columns `legacy_score`, `origin`, `label` from the local `grades` table,
+    // folding any `label` into `scale_label` first. SQLite cannot DROP COLUMN when a
+    // CHECK constraint references the column (`origin` has one), so this rebuilds the
+    // table into the new shape (= GRADES_TABLE_SQL) and copies the surviving columns.
+    // Idempotent: guarded on the presence of the `origin` column, so a re-open no-ops.
+    if (db.pragma("user_version", { simple: true }) < 15) {
+        const gradeCols = db.pragma("table_info(grades)");
+        const hasGrades = gradeCols.length > 0;
+        const hasOrigin = gradeCols.some((c) => c.name === "origin");
+        if (hasGrades && hasOrigin) {
+            db.exec(`
+        CREATE TABLE grades_gp2 (
+          id           TEXT PRIMARY KEY,
+          ts           TEXT,
+          subject_kind TEXT NOT NULL CHECK (subject_kind IN ('inference','run','artifact')),
+          subject_id   TEXT NOT NULL,
+          score        REAL NOT NULL,
+          scale_max    REAL,
+          scale_label  TEXT,
+          comment      TEXT,
+          kind         TEXT NOT NULL CHECK (kind IN ('human','model-judge','deterministic')),
+          grader       TEXT,
+          source       TEXT,
+          org_id       TEXT,
+          created_by   TEXT
+        );
+        INSERT OR IGNORE INTO grades_gp2
+          (id, ts, subject_kind, subject_id, score, scale_max, scale_label, comment, kind, grader, source, org_id, created_by)
+        SELECT
+          id, ts, subject_kind, subject_id, score, scale_max, COALESCE(scale_label, label), comment, kind, grader, source, org_id, created_by
+        FROM grades;
+        DROP TABLE grades;
+        ALTER TABLE grades_gp2 RENAME TO grades;
+        CREATE INDEX IF NOT EXISTS idx_grades_subject ON grades (subject_kind, subject_id);
+      `);
+        }
+        db.pragma("user_version = 15");
+    }
+    // v16 (call-qa F4): the per-criterion `criteria` column on the local `grades`
+    // table — a JSON breakdown a HUMAN scorecard carries so it can ride the wire
+    // to the server's `grade_criteria` (kind=human). Additive, nullable; old rows
+    // read null ("a single-score grade, or recorded before F4"). SCHEMA_SQL's
+    // CREATE handles a fresh database; this ALTER-if-absent gives a migrating one
+    // the column. Same pattern as v6/v13.
+    if (db.pragma("user_version", { simple: true }) < 16) {
+        const gradeCols = db.prepare("PRAGMA table_info(grades)").all();
+        if (gradeCols.length > 0 && !gradeCols.some((c) => c.name === "criteria")) {
+            db.exec("ALTER TABLE grades ADD COLUMN criteria TEXT");
+        }
+        db.pragma("user_version = 16");
+    }
 }

package/dist/telemetry/store.d.ts

@@ -9,7 +9,7 @@
  * separate handle. ExportableTelemetryStore MUST NOT gain capture accessors;
  * the export-isolation tests are the tripwire.
  */
-import type { EnvelopeRow, FeedbackRow, RunRow, StepRow, TelemetryRow, TelemetryStore } from "../types/telemetry";
+import type { EnvelopeRow, GradeRow, RunRow, StepRow, TelemetryRow, TelemetryStore } from "../types/telemetry";
 import { type EndpointHealth } from "./health";
 /**
  * Superset of the TelemetryStore contract with the enumeration hooks the
@@ -23,10 +23,15 @@ export interface ExportableTelemetryStore extends TelemetryStore {
         rowid: number;
         row: TelemetryRow;
     }>;
-    /** Feedback rows past the watermark, oldest first (Phase 4 mirror). */
-    readFeedbackAfter(afterRowid: number, limit: number): Array<{
+    /** Record a unified judgment (grade primitive, R1) — the canonical write path
+     * for `rig.grade`. Writes the shared local `grades` table. */
+    recordGrade(row: GradeRow): void;
+    /** Grade rows past the watermark, oldest first (grade primitive `:grades`
+     * stream). Reads grades written by EITHER handle (telemetry + artifact) — one
+     * physical table over the shared telemetry file. */
+    readGradesAfter(afterRowid: number, limit: number): Array<{
         rowid: number;
-        row: FeedbackRow;
+        row: GradeRow;
     }>;
     /** Record a run (E2 chunk A) — run.start/run.end. Upsert: run.end overwrites
      * the running projection with its terminal status/ended_at. */
@@ -47,8 +52,6 @@ export interface ExportableTelemetryStore extends TelemetryStore {
      * non-null inference_id, or null (E4 chunk A: bake-off rehydration resolves an
      * eval case's source step to the inference that keys its captured input). */
     getStepInferenceId(runId: string, stepKey: string): string | null;
-    /** Newest-first local feedback read (console/dev inspection). */
-    listFeedback(limit: number): FeedbackRow[];
     listEnvelopes(): EnvelopeRow[];
     /** Local exporter watermark (per source instance), 0 when unset. */
     getExportWatermark(sourceId: string): number;

package/dist/telemetry/store.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"store.d.ts","sourceRoot":"","sources":["../../src/telemetry/store.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAKH,OAAO,KAAK,EACV,WAAW,EACX,WAAW,EACX,MAAM,EACN,OAAO,EACP,YAAY,EACZ,cAAc,EACf,MAAM,oBAAoB,CAAC;AAE5B,OAAO,EAA2B,KAAK,cAAc,EAAuB,MAAM,UAAU,CAAC;AAG7F;;;;;GAKG;AACH,MAAM,WAAW,wBAAyB,SAAQ,cAAc;IAC9D,qEAAqE;IACrE,mBAAmB,CAAC,UAAU,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,KAAK,CAAC;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,YAAY,CAAA;KAAE,CAAC,CAAC;IACpG,uEAAuE;IACvE,iBAAiB,CAAC,UAAU,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,KAAK,CAAC;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,WAAW,CAAA;KAAE,CAAC,CAAC;IACjG;mEAC+D;IAC/D,SAAS,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,iFAAiF;IACjF,UAAU,CAAC,GAAG,EAAE,OAAO,GAAG,IAAI,CAAC;IAC/B,kEAAkE;IAClE,aAAa,CAAC,UAAU,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,KAAK,CAAC;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACxF,mEAAmE;IACnE,cAAc,CAAC,UAAU,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,KAAK,CAAC;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,OAAO,CAAA;KAAE,CAAC,CAAC;IAC1F;;iFAE6E;IAC7E,kBAAkB,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAAC;IAClE,iEAAiE;IACjE,YAAY,CAAC,KAAK,EAAE,MAAM,GAAG,WAAW,EAAE,CAAC;IAC3C,aAAa,IAAI,WAAW,EAAE,CAAC;IAC/B,oEAAoE;IACpE,kBAAkB,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAAC;IAC7C,kBAAkB,CAAC,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9D;;;;;OAKG;IACH,kBAAkB,CAAC,aAAa,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,cAAc,EAAE,CAAC;CAC3E;AAiUD,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,MAAM,GAAG,wBAAwB,CAsR3E"}
+{"version":3,"file":"store.d.ts","sourceRoot":"","sources":["../../src/telemetry/store.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAKH,OAAO,KAAK,EACV,WAAW,EACX,QAAQ,EACR,MAAM,EACN,OAAO,EACP,YAAY,EACZ,cAAc,EACf,MAAM,oBAAoB,CAAC;AAE5B,OAAO,EAA2B,KAAK,cAAc,EAAuB,MAAM,UAAU,CAAC;AAU7F;;;;;GAKG;AACH,MAAM,WAAW,wBAAyB,SAAQ,cAAc;IAC9D,qEAAqE;IACrE,mBAAmB,CAAC,UAAU,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,KAAK,CAAC;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,YAAY,CAAA;KAAE,CAAC,CAAC;IACpG;kEAC8D;IAC9D,WAAW,CAAC,GAAG,EAAE,QAAQ,GAAG,IAAI,CAAC;IACjC;;wDAEoD;IACpD,eAAe,CAAC,UAAU,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,KAAK,CAAC;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,QAAQ,CAAA;KAAE,CAAC,CAAC;IAC5F;mEAC+D;IAC/D,SAAS,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,iFAAiF;IACjF,UAAU,CAAC,GAAG,EAAE,OAAO,GAAG,IAAI,CAAC;IAC/B,kEAAkE;IAClE,aAAa,CAAC,UAAU,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,KAAK,CAAC;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACxF,mEAAmE;IACnE,cAAc,CAAC,UAAU,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,KAAK,CAAC;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,OAAO,CAAA;KAAE,CAAC,CAAC;IAC1F;;iFAE6E;IAC7E,kBAAkB,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAAC;IAClE,aAAa,IAAI,WAAW,EAAE,CAAC;IAC/B,oEAAoE;IACpE,kBAAkB,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAAC;IAC7C,kBAAkB,CAAC,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9D;;;;;OAKG;IACH,kBAAkB,CAAC,aAAa,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,cAAc,EAAE,CAAC;CAC3E;AAgSD,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,MAAM,GAAG,wBAAwB,CA6P3E"}

package/dist/telemetry/store.js

@@ -20,6 +20,7 @@ const node_fs_1 = require("node:fs");
 const node_path_1 = require("node:path");
 const health_1 = require("./health");
 const store_migrations_1 = require("./store-migrations");
+const grades_sql_1 = require("./grades-sql");
 const SCHEMA_SQL = `
 CREATE TABLE IF NOT EXISTS inferences (
   id                TEXT PRIMARY KEY,
@@ -154,7 +155,7 @@ CREATE TABLE IF NOT EXISTS steps (
   PRIMARY KEY (run_id, step_key, attempt_no)
 );
 CREATE INDEX IF NOT EXISTS idx_steps_run ON steps (run_id);
-`;
+${grades_sql_1.GRADES_TABLE_SQL}`;
 function toRunRow(r) {
     return {
         id: r.id,
@@ -185,25 +186,6 @@ function toStepRow(r) {
         failureClass: r.failure_class,
     };
 }
-function toFeedbackRow(r) {
-    return {
-        id: r.id,
-        ts: r.ts,
-        inferenceId: r.inference_id,
-        episodeKey: r.episode_key,
-        verdict: r.verdict,
-        score: r.score,
-        note: r.note,
-        source: r.source,
-        // `?? null` rather than a bare read: a v6 database returns `undefined`
-        // for a column that did not exist when its rows were written, and
-        // `undefined` would serialize to a MISSING key on the wire rather than an
-        // explicit null — which reads to the server as "no opinion" instead of
-        // "no org", a distinction that matters exactly once and expensively.
-        orgId: r.org_id ?? null,
-        createdBy: r.created_by ?? null,
-    };
-}
 function toTelemetryRow(r) {
     return {
         id: r.id,
@@ -288,14 +270,6 @@ function openTelemetryStore(dbPath) {
     INSERT INTO envelopes (envelope_key, budget_usd, spent_usd, status)
     VALUES (?, ?, 0, 'open')
     ON CONFLICT (envelope_key) DO NOTHING
-  `);
-    const insertFeedback = db.prepare(`
-    INSERT INTO feedback (
-      id, ts, inference_id, episode_key, verdict, score, note, source, org_id, created_by
-    )
-    VALUES (
-      @id, @ts, @inference_id, @episode_key, @verdict, @score, @note, @source, @org_id, @created_by
-    )
   `);
     const accrueEnvelope = db.prepare(`
     UPDATE envelopes
@@ -321,6 +295,7 @@ function openTelemetryStore(dbPath) {
       export_seq = excluded.export_seq,
       meta_json = excluded.meta_json
   `);
+    const insertGrade = (0, grades_sql_1.prepareGradeInsert)(db);
     const insertStep = db.prepare(`
     INSERT OR IGNORE INTO steps (
       run_id, step_key, attempt_no, task, provenance, inference_id, span_trace_id, span_id,
@@ -374,25 +349,14 @@ function openTelemetryStore(dbPath) {
                 mask_json: row.mask != null ? JSON.stringify(row.mask) : null,
             });
         },
-        recordFeedback(row) {
-            insertFeedback.run({
-                id: row.id,
-                ts: row.ts,
-                inference_id: row.inferenceId,
-                episode_key: row.episodeKey,
-                verdict: row.verdict,
-                score: row.score,
-                note: row.note,
-                source: row.source,
-                org_id: row.orgId,
-                created_by: row.createdBy,
-            });
+        recordGrade(row) {
+            insertGrade.run((0, grades_sql_1.gradeBindParams)(row));
         },
-        readFeedbackAfter(afterRowid, limit) {
+        readGradesAfter(afterRowid, limit) {
             const rows = db
-                .prepare("SELECT rowid AS __rowid, * FROM feedback WHERE rowid > ? ORDER BY rowid LIMIT ?")
+                .prepare("SELECT rowid AS __rowid, * FROM grades WHERE rowid > ? ORDER BY rowid LIMIT ?")
                 .all(afterRowid, limit);
-            return rows.map((r) => ({ rowid: r.__rowid, row: toFeedbackRow(r) }));
+            return rows.map((r) => ({ rowid: r.__rowid, row: (0, grades_sql_1.toGradeRow)(r) }));
         },
         recordRun(row) {
             const seq = nextRunSeq.get().n;
@@ -446,12 +410,6 @@ function openTelemetryStore(dbPath) {
                 .get(runId, stepKey);
             return r === undefined ? null : r.inference_id;
         },
-        listFeedback(limit) {
-            const rows = db
-                .prepare("SELECT * FROM feedback ORDER BY ts DESC, rowid DESC LIMIT ?")
-                .all(limit);
-            return rows.map(toFeedbackRow);
-        },
         queryByTag(tag, value) {
             return selectByTag.all(tag, value).map(toTelemetryRow);
         },

package/dist/tenancy/api-key-format.d.ts

@@ -38,8 +38,52 @@ export declare const API_KEY_BODY_MIN_LENGTH = 43;
  * (capture / artifacts / content / scrub). Held by a coding agent flipping
  * settings for the user. READING settings needs no scope — any org-scoped key
  * may read, since settings ride the already-readable task row.
+ *
+ * `route-config` (live-routing-evals, 00063): PATCH a route's live call-config
+ * (which model/provider + sampling; POST rollback). Held by a coding agent
+ * editing routing for the user. READING call-config needs no scope — it rides
+ * the already-readable route + config rows (contrast: a write is an actuation).
+ *
+ * `org-settings` (content-capture Phase 2, 00065): PATCH an org's governance
+ * settings (artifact_posture / telemetry_posture / contribution — the org-wide
+ * content-custody + telemetry master gate). The KEY/API twin of the Phase-1
+ * console posture control. Owner-only to MINT (stricter than the admin/owner
+ * gate on decision/oracle-act — a key delegates what its creator has, and only
+ * an owner may flip org-wide governance) and owner-only to WRITE. READING org
+ * settings needs no scope — any org-scoped key may read, since they ride the
+ * already-readable orgs row.
+ *
+ * `serve` (managed-serving-keyless K2, 00084): SERVE a managed inference on the
+ * hosted gateway's MANAGED mirror lane (`POST /v1/chat/completions` resolving an
+ * org's mirrored route against OUR managed provider keys). This is the first-class
+ * inference authority the mirror lane was always meant to gate on — it replaces the
+ * overloaded `oracle-act` placeholder there (gateway-routes.ts flagged that as an
+ * interim stand-in for a real inference/serve scope). It is an ORDINARY machine
+ * grant (not owner-only to mint): serving is a delegated coding-agent act, like
+ * `route-config`/`prompt-write`, not a money/deletion authority. It is DISTINCT
+ * from per-org PROVISIONING: a key may carry `serve` and still be refused because
+ * the org is not provisioned for managed serving (orgs.managed_serving_enabled,
+ * 00085) — the scope says "this key may serve", the column says "this org may".
+ * During the K2 deprecation window the mirror lane still ALSO accepts `oracle-act`
+ * so keys minted before the remint keep working; that acceptance is removed once
+ * keys are reminted with `serve`.
+ *
+ * `artifact-delete` (CD-1 / R-7, 00068): DELETE an org's own stored artifact
+ * CONTENT (`DELETE /v1/artifacts/:id/content`) or PURGE the record
+ * (`DELETE /v1/artifacts/:id`). Held by an automation deleting on the org's
+ * behalf — the machine twin of the console's owner-only delete controls.
+ *
+ * **This is the most dangerous grant in the set, and it is dangerous for a
+ * structural reason the others are not:** every other scope's damage is
+ * recoverable or additive, and every other consequential act ALSO has a role
+ * gate behind it. Deletion is irreversible, and a key has no role — so for the
+ * machine path this scope is not *a* gate, it is the *only* gate. It is
+ * therefore owner-only to MINT (`OWNER_ONLY_SCOPES` in modelrig-server's
+ * key-admin, alongside `org-settings`): if a member could mint it, the
+ * owner-only session gate on the routes would be decorative, since the cheapest
+ * way past a role check would be to issue yourself a credential that has none.
  */
-export declare const API_KEY_SCOPES: readonly ["ingest", "query", "feedback", "decision", "oracle-act", "artifact-write", "artifact-read", "task-settings"];
+export declare const API_KEY_SCOPES: readonly ["ingest", "query", "grade", "decision", "oracle-act", "artifact-write", "artifact-read", "task-settings", "route-config", "org-settings", "artifact-delete", "prompt-write", "serve"];
 export type ApiKeyScope = (typeof API_KEY_SCOPES)[number];
 /** sha256 of the WHOLE presented string, prefix included — so a caller cannot
  * strip the prefix and land on a different row. */

package/dist/tenancy/api-key-format.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"api-key-format.d.ts","sourceRoot":"","sources":["../../src/tenancy/api-key-format.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAIH;;;GAGG;AACH,eAAO,MAAM,cAAc,YAAY,CAAC;AAExC;;6EAE6E;AAC7E,eAAO,MAAM,oBAAoB,KAAK,CAAC;AAEvC,oFAAoF;AACpF,eAAO,MAAM,uBAAuB,KAAK,CAAC;AAE1C;;;;;;;;;;;;;;;GAeG;AACH,eAAO,MAAM,cAAc,wHASjB,CAAC;AAEX,MAAM,MAAM,WAAW,GAAG,CAAC,OAAO,cAAc,CAAC,CAAC,MAAM,CAAC,CAAC;AAE1D;mDACmD;AACnD,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAEvD;AAED;;;;;;;GAOG;AACH,wBAAgB,eAAe,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAI1D;AAED;;;;;;GAMG;AACH,wBAAgB,YAAY,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAGtD;AAED;;;;;;;;GAQG;AACH,wBAAgB,WAAW,CAAC,GAAG,EAAE,OAAO,GAAG,WAAW,EAAE,CAIvD;AAED;gEACgE;AAChE,wBAAgB,QAAQ,CAAC,OAAO,EAAE,SAAS,WAAW,EAAE,EAAE,QAAQ,EAAE,WAAW,GAAG,OAAO,CAExF"}
+{"version":3,"file":"api-key-format.d.ts","sourceRoot":"","sources":["../../src/tenancy/api-key-format.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAIH;;;GAGG;AACH,eAAO,MAAM,cAAc,YAAY,CAAC;AAExC;;6EAE6E;AAC7E,eAAO,MAAM,oBAAoB,KAAK,CAAC;AAEvC,oFAAoF;AACpF,eAAO,MAAM,uBAAuB,KAAK,CAAC;AAE1C;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2DG;AACH,eAAO,MAAM,cAAc,iMAcjB,CAAC;AAEX,MAAM,MAAM,WAAW,GAAG,CAAC,OAAO,cAAc,CAAC,CAAC,MAAM,CAAC,CAAC;AAE1D;mDACmD;AACnD,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAEvD;AAED;;;;;;;GAOG;AACH,wBAAgB,eAAe,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAI1D;AAED;;;;;;GAMG;AACH,wBAAgB,YAAY,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAGtD;AAED;;;;;;;;GAQG;AACH,wBAAgB,WAAW,CAAC,GAAG,EAAE,OAAO,GAAG,WAAW,EAAE,CAIvD;AAED;gEACgE;AAChE,wBAAgB,QAAQ,CAAC,OAAO,EAAE,SAAS,WAAW,EAAE,EAAE,QAAQ,EAAE,WAAW,GAAG,OAAO,CAExF"}

package/dist/tenancy/api-key-format.js

@@ -47,16 +47,65 @@ exports.API_KEY_BODY_MIN_LENGTH = 43;
  * (capture / artifacts / content / scrub). Held by a coding agent flipping
  * settings for the user. READING settings needs no scope — any org-scoped key
  * may read, since settings ride the already-readable task row.
+ *
+ * `route-config` (live-routing-evals, 00063): PATCH a route's live call-config
+ * (which model/provider + sampling; POST rollback). Held by a coding agent
+ * editing routing for the user. READING call-config needs no scope — it rides
+ * the already-readable route + config rows (contrast: a write is an actuation).
+ *
+ * `org-settings` (content-capture Phase 2, 00065): PATCH an org's governance
+ * settings (artifact_posture / telemetry_posture / contribution — the org-wide
+ * content-custody + telemetry master gate). The KEY/API twin of the Phase-1
+ * console posture control. Owner-only to MINT (stricter than the admin/owner
+ * gate on decision/oracle-act — a key delegates what its creator has, and only
+ * an owner may flip org-wide governance) and owner-only to WRITE. READING org
+ * settings needs no scope — any org-scoped key may read, since they ride the
+ * already-readable orgs row.
+ *
+ * `serve` (managed-serving-keyless K2, 00084): SERVE a managed inference on the
+ * hosted gateway's MANAGED mirror lane (`POST /v1/chat/completions` resolving an
+ * org's mirrored route against OUR managed provider keys). This is the first-class
+ * inference authority the mirror lane was always meant to gate on — it replaces the
+ * overloaded `oracle-act` placeholder there (gateway-routes.ts flagged that as an
+ * interim stand-in for a real inference/serve scope). It is an ORDINARY machine
+ * grant (not owner-only to mint): serving is a delegated coding-agent act, like
+ * `route-config`/`prompt-write`, not a money/deletion authority. It is DISTINCT
+ * from per-org PROVISIONING: a key may carry `serve` and still be refused because
+ * the org is not provisioned for managed serving (orgs.managed_serving_enabled,
+ * 00085) — the scope says "this key may serve", the column says "this org may".
+ * During the K2 deprecation window the mirror lane still ALSO accepts `oracle-act`
+ * so keys minted before the remint keep working; that acceptance is removed once
+ * keys are reminted with `serve`.
+ *
+ * `artifact-delete` (CD-1 / R-7, 00068): DELETE an org's own stored artifact
+ * CONTENT (`DELETE /v1/artifacts/:id/content`) or PURGE the record
+ * (`DELETE /v1/artifacts/:id`). Held by an automation deleting on the org's
+ * behalf — the machine twin of the console's owner-only delete controls.
+ *
+ * **This is the most dangerous grant in the set, and it is dangerous for a
+ * structural reason the others are not:** every other scope's damage is
+ * recoverable or additive, and every other consequential act ALSO has a role
+ * gate behind it. Deletion is irreversible, and a key has no role — so for the
+ * machine path this scope is not *a* gate, it is the *only* gate. It is
+ * therefore owner-only to MINT (`OWNER_ONLY_SCOPES` in modelrig-server's
+ * key-admin, alongside `org-settings`): if a member could mint it, the
+ * owner-only session gate on the routes would be decorative, since the cheapest
+ * way past a role check would be to issue yourself a credential that has none.
  */
 exports.API_KEY_SCOPES = [
     "ingest",
     "query",
-    "feedback",
+    "grade",
     "decision",
     "oracle-act",
     "artifact-write",
     "artifact-read",
     "task-settings",
+    "route-config",
+    "org-settings",
+    "artifact-delete",
+    "prompt-write",
+    "serve",
 ];
 /** sha256 of the WHOLE presented string, prefix included — so a caller cannot
  * strip the prefix and land on a different row. */

package/dist/types/provider.d.ts

@@ -5,13 +5,13 @@
  */
 import type { RigFailure } from "./failures";
 import type { AttemptMetaV1 } from "../telemetry/attempt-meta";
-export type ProviderId = "gemini" | "openai" | "deepseek" | "anthropic" | "grok" | "deepinfra" | "fireworks";
+export type ProviderId = "gemini" | "openai" | "deepseek" | "anthropic" | "grok" | "deepinfra" | "fireworks" | "zai";
 /** Runtime enumeration of every ProviderId — the single list a raw-model lane
  * (`provider/model`) validates against (http gateway spec §3.3). Kept in sync
  * with the `ProviderId` union by the two compile-time assertions below: adding
  * a provider to the union without adding it here (or vice-versa) fails the
  * type-check. */
-export declare const PROVIDER_IDS: readonly ["gemini", "openai", "deepseek", "anthropic", "grok", "deepinfra", "fireworks"];
+export declare const PROVIDER_IDS: readonly ["gemini", "openai", "deepseek", "anthropic", "grok", "deepinfra", "fireworks", "zai"];
 export type CapabilityFlag = "structured_native" | "json_mode" | "grounded_native" | "context_cache_explicit" | "prompt_cache_key" | "prefix_cache_implicit" | "tier_flex" | "trace_visible" | "zero_retention";
 /** The canonical flag enumeration — the single list every static capability
  * materialization iterates (index.ts, template validation, tests). */
@@ -27,6 +27,9 @@ export type UntrustedBlockShape = "tool_result" | "user_json";
 /** The untrusted-block shape for a provider; `user_json` for any provider that
  * does not declare a preference. */
 export declare function untrustedBlockFor(provider: ProviderId): UntrustedBlockShape;
+/** Whether `quarantine` can gate tool calls via `tool_choice: "none"` on this
+ * provider (else the run drops + counts them post-dispatch, A7). */
+export declare function toolChoiceNoneCapable(provider: ProviderId): boolean;
 declare const candidateBrand: unique symbol;
 /**
  * A (provider, model) pair validated against a route's candidate list.
@@ -109,7 +112,9 @@ export interface AdapterRequest {
     readonly candidate: CandidateRef;
     readonly systemPrompt: string;
     readonly userPrompt: string;
-    /** JSON Schema for native structured output; null => prompt/json_mode path. */
+    /** JSON Schema for native structured output; null => prompt/json_mode path.
+     * Set by the routed lane from the bundle's `schema`, and by the raw lane from
+     * a declared `RawRunInput.responseSchema` (R2) — the SAME adapter path. */
     readonly outputSchema: object | null;
     readonly requestedTier: ServiceTier;
     readonly timeoutMs: number;
@@ -211,6 +216,21 @@ export type AdapterResult = {
      * A tool-call turn carries these instead of (or alongside) `text`; the
      * run loop surfaces them and does NOT schema-validate the turn. */
     readonly toolCalls?: readonly ToolCall[];
+    /** Native web-grounding citations (Native Web Search lane, spec N2) —
+     * present only on a grounded Responses-API attempt (openai/grok), in the
+     * inject rung's `url_citation` shape (run/grounding.ts). ADDITIVE: absent on
+     * every non-grounded call, so nothing else changes. The raw lane surfaces
+     * these on `RunMeta.citations`; a zero-citation grounded response carries an
+     * empty array (surfaced, never thrown). */
+    readonly citations?: readonly {
+        readonly type: "url_citation";
+        readonly url: string;
+        readonly title?: string;
+    }[];
+    /** Native web_search tool calls billed on this grounded attempt (spec N3) —
+     * used by the raw success path to price the synthetic `rung:"search"` cost
+     * row. ADDITIVE: absent ⇒ the raw path assumes 1 (disclosed). */
+    readonly searchCalls?: number;
     /** NATIVE attempt metadata (WI-1, spec §2) — finish reason, refusal,
      * reasoning tokens, model snapshot, provider request id, sampling echo,
      * tool-call names/counts. ADDITIVE: an adapter that reports nothing omits

package/dist/types/provider.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"provider.d.ts","sourceRoot":"","sources":["../../src/types/provider.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAC7C,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,2BAA2B,CAAC;AAE/D,MAAM,MAAM,UAAU,GAClB,QAAQ,GACR,QAAQ,GACR,UAAU,GACV,WAAW,GACX,MAAM,GAGN,WAAW,GACX,WAAW,CAAC;AAEhB;;;;iBAIiB;AACjB,eAAO,MAAM,YAAY,0FAQf,CAAC;AAYX,MAAM,MAAM,cAAc,GACtB,mBAAmB,GACnB,WAAW,GACX,iBAAiB,GACjB,wBAAwB,GACxB,kBAAkB,GAClB,uBAAuB,GACvB,WAAW,GACX,eAAe,GACf,gBAAgB,CAAC;AAErB;sEACsE;AACtE,eAAO,MAAM,oBAAoB,EAAE,SAAS,cAAc,EAUzD,CAAC;AAEF;;;;;;4EAM4E;AAC5E,MAAM,MAAM,mBAAmB,GAAG,aAAa,GAAG,WAAW,CAAC;AAM9D;oCACoC;AACpC,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,UAAU,GAAG,mBAAmB,CAE3E;AAED,OAAO,CAAC,MAAM,cAAc,EAAE,OAAO,MAAM,CAAC;AAE5C;;;;GAIG;AACH,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,QAAQ,EAAE,UAAU,CAAC;IAC9B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,CAAC,cAAc,CAAC,EAAE,IAAI,CAAC;CACjC;AAED,MAAM,MAAM,WAAW,GAAG,UAAU,GAAG,MAAM,GAAG,UAAU,CAAC;AAE3D;;;;;;;;;;;GAWG;AACH,MAAM,WAAW,cAAc;IAC7B,2EAA2E;IAC3E,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,8EAA8E;IAC9E,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB;8EAC0E;IAC1E,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;CACnC;AAED;;;;;;;;;2DAS2D;AAC3D,MAAM,MAAM,cAAc,GAAG,SAAS,GAAG,KAAK,GAAG,QAAQ,GAAG,MAAM,CAAC;AAEnE,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,KAAK,EAAE,cAAc,CAAC;CAChC;AASD;yDACyD;AACzD,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;IAC1B,QAAQ,CAAC,QAAQ,EAAE;QACjB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QACtB,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;QAC9B,4CAA4C;QAC5C,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;KAC9B,CAAC;CACH;AAED;+EAC+E;AAC/E,MAAM,MAAM,UAAU,GAClB,MAAM,GACN,MAAM,GACN,UAAU,GACV;IAAE,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;IAAC,QAAQ,CAAC,QAAQ,EAAE;QAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAA;CAAE,CAAC;AAEhF;;;gBAGgB;AAChB,MAAM,WAAW,QAAQ;IACvB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;IAC1B,QAAQ,CAAC,QAAQ,EAAE;QACjB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QACtB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;KAC5B,CAAC;CACH;AAED,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,SAAS,EAAE,YAAY,CAAC;IACjC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,+EAA+E;IAC/E,QAAQ,CAAC,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IACrC,QAAQ,CAAC,aAAa,EAAE,WAAW,CAAC;IACpC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,2EAA2E;IAC3E,QAAQ,CAAC,KAAK,CAAC,EAAE;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,UAAU,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IACtD;;;;;;OAMG;IACH,QAAQ,CAAC,SAAS,CAAC,EAAE,OAAO,CAAC;IAC7B,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;IAClC;;;;;;;;iCAQ6B;IAC7B,QAAQ,CAAC,QAAQ,CAAC,EAAE,cAAc,CAAC;IACnC;;;;;;;;;OASG;IACH,QAAQ,CAAC,SAAS,CAAC,EAAE,eAAe,CAAC;IACrC;;;;;;;;;;;8EAW0E;IAC1E,QAAQ,CAAC,cAAc,CAAC,EAAE,aAAa,CAAC;IACxC;gFAC4E;IAC5E,QAAQ,CAAC,KAAK,CAAC,EAAE,SAAS,cAAc,EAAE,CAAC;IAC3C,mEAAmE;IACnE,QAAQ,CAAC,UAAU,CAAC,EAAE,UAAU,CAAC;CAClC;AAED,MAAM,WAAW,YAAY;IAC3B;;;;;;;;OAQG;IACH,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,iFAAiF;IACjF,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B;;;;;;;OAOG;IACH,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IACnC;;qEAEiE;IACjE,QAAQ,CAAC,kBAAkB,CAAC,EAAE,MAAM,CAAC;IACrC,QAAQ,CAAC,UAAU,EAAE,WAAW,CAAC;IACjC;;;;gCAI4B;IAC5B,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,MAAM,aAAa,GACrB;IACE,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAC;IAClB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,KAAK,EAAE,YAAY,CAAC;IAC7B;;;uEAGmE;IACnE,QAAQ,CAAC,SAAS,CAAC,EAAE,SAAS,QAAQ,EAAE,CAAC;IACzC;;;;;wCAKoC;IACpC,QAAQ,CAAC,IAAI,CAAC,EAAE,OAAO,CAAC,aAAa,CAAC,CAAC;CACxC;AACH;;;8EAG8E;GAC5E;IAAE,QAAQ,CAAC,EAAE,EAAE,KAAK,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,UAAU,CAAC;IAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,YAAY,CAAC;IAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,OAAO,CAAC,aAAa,CAAC,CAAA;CAAE,CAAC;AAEhI;;;;4BAI4B;AAC5B,MAAM,MAAM,kBAAkB,GAC1B;IAAE,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GACjD;IAAE,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,aAAa,CAAA;CAAE,CAAC;AAE/D,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,EAAE,EAAE,UAAU,CAAC;IACxB,QAAQ,CAAC,OAAO,EAAE,cAAc,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC;IAC1D;;;qFAGiF;IACjF,aAAa,CAAC,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC;IACvC,IAAI,CAAC,GAAG,EAAE,cAAc,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC;IAClD;mFAC+E;IAC/E,MAAM,CAAC,CAAC,GAAG,EAAE,cAAc,GAAG,aAAa,CAAC,kBAAkB,CAAC,CAAC;CACjE"}
+{"version":3,"file":"provider.d.ts","sourceRoot":"","sources":["../../src/types/provider.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAC7C,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,2BAA2B,CAAC;AAE/D,MAAM,MAAM,UAAU,GAClB,QAAQ,GACR,QAAQ,GACR,UAAU,GACV,WAAW,GACX,MAAM,GAGN,WAAW,GACX,WAAW,GAIX,KAAK,CAAC;AAEV;;;;iBAIiB;AACjB,eAAO,MAAM,YAAY,iGASf,CAAC;AAYX,MAAM,MAAM,cAAc,GACtB,mBAAmB,GACnB,WAAW,GACX,iBAAiB,GACjB,wBAAwB,GACxB,kBAAkB,GAClB,uBAAuB,GACvB,WAAW,GACX,eAAe,GACf,gBAAgB,CAAC;AAErB;sEACsE;AACtE,eAAO,MAAM,oBAAoB,EAAE,SAAS,cAAc,EAUzD,CAAC;AAEF;;;;;;4EAM4E;AAC5E,MAAM,MAAM,mBAAmB,GAAG,aAAa,GAAG,WAAW,CAAC;AAM9D;oCACoC;AACpC,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,UAAU,GAAG,mBAAmB,CAE3E;AAsBD;oEACoE;AACpE,wBAAgB,qBAAqB,CAAC,QAAQ,EAAE,UAAU,GAAG,OAAO,CAEnE;AAED,OAAO,CAAC,MAAM,cAAc,EAAE,OAAO,MAAM,CAAC;AAE5C;;;;GAIG;AACH,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,QAAQ,EAAE,UAAU,CAAC;IAC9B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,CAAC,cAAc,CAAC,EAAE,IAAI,CAAC;CACjC;AAED,MAAM,MAAM,WAAW,GAAG,UAAU,GAAG,MAAM,GAAG,UAAU,CAAC;AAE3D;;;;;;;;;;;GAWG;AACH,MAAM,WAAW,cAAc;IAC7B,2EAA2E;IAC3E,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,8EAA8E;IAC9E,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB;8EAC0E;IAC1E,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;CACnC;AAED;;;;;;;;;2DAS2D;AAC3D,MAAM,MAAM,cAAc,GAAG,SAAS,GAAG,KAAK,GAAG,QAAQ,GAAG,MAAM,CAAC;AAEnE,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,KAAK,EAAE,cAAc,CAAC;CAChC;AASD;yDACyD;AACzD,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;IAC1B,QAAQ,CAAC,QAAQ,EAAE;QACjB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QACtB,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;QAC9B,4CAA4C;QAC5C,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;KAC9B,CAAC;CACH;AAED;+EAC+E;AAC/E,MAAM,MAAM,UAAU,GAClB,MAAM,GACN,MAAM,GACN,UAAU,GACV;IAAE,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;IAAC,QAAQ,CAAC,QAAQ,EAAE;QAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAA;CAAE,CAAC;AAEhF;;;gBAGgB;AAChB,MAAM,WAAW,QAAQ;IACvB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;IAC1B,QAAQ,CAAC,QAAQ,EAAE;QACjB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QACtB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;KAC5B,CAAC;CACH;AAED,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,SAAS,EAAE,YAAY,CAAC;IACjC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B;;+EAE2E;IAC3E,QAAQ,CAAC,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IACrC,QAAQ,CAAC,aAAa,EAAE,WAAW,CAAC;IACpC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,2EAA2E;IAC3E,QAAQ,CAAC,KAAK,CAAC,EAAE;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,UAAU,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IACtD;;;;;;OAMG;IACH,QAAQ,CAAC,SAAS,CAAC,EAAE,OAAO,CAAC;IAC7B,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;IAClC;;;;;;;;iCAQ6B;IAC7B,QAAQ,CAAC,QAAQ,CAAC,EAAE,cAAc,CAAC;IACnC;;;;;;;;;OASG;IACH,QAAQ,CAAC,SAAS,CAAC,EAAE,eAAe,CAAC;IACrC;;;;;;;;;;;8EAW0E;IAC1E,QAAQ,CAAC,cAAc,CAAC,EAAE,aAAa,CAAC;IACxC;gFAC4E;IAC5E,QAAQ,CAAC,KAAK,CAAC,EAAE,SAAS,cAAc,EAAE,CAAC;IAC3C,mEAAmE;IACnE,QAAQ,CAAC,UAAU,CAAC,EAAE,UAAU,CAAC;CAClC;AAED,MAAM,WAAW,YAAY;IAC3B;;;;;;;;OAQG;IACH,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,iFAAiF;IACjF,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B;;;;;;;OAOG;IACH,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IACnC;;qEAEiE;IACjE,QAAQ,CAAC,kBAAkB,CAAC,EAAE,MAAM,CAAC;IACrC,QAAQ,CAAC,UAAU,EAAE,WAAW,CAAC;IACjC;;;;gCAI4B;IAC5B,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,MAAM,aAAa,GACrB;IACE,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAC;IAClB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,KAAK,EAAE,YAAY,CAAC;IAC7B;;;uEAGmE;IACnE,QAAQ,CAAC,SAAS,CAAC,EAAE,SAAS,QAAQ,EAAE,CAAC;IACzC;;;;;+CAK2C;IAC3C,QAAQ,CAAC,SAAS,CAAC,EAAE,SAAS;QAAE,QAAQ,CAAC,IAAI,EAAE,cAAc,CAAC;QAAC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;IACjH;;qEAEiE;IACjE,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B;;;;;wCAKoC;IACpC,QAAQ,CAAC,IAAI,CAAC,EAAE,OAAO,CAAC,aAAa,CAAC,CAAC;CACxC;AACH;;;8EAG8E;GAC5E;IAAE,QAAQ,CAAC,EAAE,EAAE,KAAK,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,UAAU,CAAC;IAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,YAAY,CAAC;IAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,OAAO,CAAC,aAAa,CAAC,CAAA;CAAE,CAAC;AAEhI;;;;4BAI4B;AAC5B,MAAM,MAAM,kBAAkB,GAC1B;IAAE,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GACjD;IAAE,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,aAAa,CAAA;CAAE,CAAC;AAE/D,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,EAAE,EAAE,UAAU,CAAC;IACxB,QAAQ,CAAC,OAAO,EAAE,cAAc,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC;IAC1D;;;qFAGiF;IACjF,aAAa,CAAC,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC;IACvC,IAAI,CAAC,GAAG,EAAE,cAAc,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC;IAClD;mFAC+E;IAC/E,MAAM,CAAC,CAAC,GAAG,EAAE,cAAc,GAAG,aAAa,CAAC,kBAAkB,CAAC,CAAC;CACjE"}

package/dist/types/provider.js

@@ -7,6 +7,7 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.ALL_CAPABILITY_FLAGS = exports.PROVIDER_IDS = void 0;
 exports.untrustedBlockFor = untrustedBlockFor;
+exports.toolChoiceNoneCapable = toolChoiceNoneCapable;
 /** Runtime enumeration of every ProviderId — the single list a raw-model lane
  * (`provider/model`) validates against (http gateway spec §3.3). Kept in sync
  * with the `ProviderId` union by the two compile-time assertions below: adding
@@ -20,6 +21,7 @@ exports.PROVIDER_IDS = [
     "grok",
     "deepinfra",
     "fireworks",
+    "zai",
 ];
 // Every entry is a valid ProviderId …
 const _providerIdsAreValid = exports.PROVIDER_IDS;
@@ -47,3 +49,27 @@ const UNTRUSTED_BLOCK = {
 function untrustedBlockFor(provider) {
     return UNTRUSTED_BLOCK[provider] ?? "user_json";
 }
+/** Screening SC-1a (spec §4.2) — whether a provider can serve `tool_choice:
+ * "none"` so a QUARANTINED turn is prevented from actuating a tool call
+ * pre-dispatch. A provider WITHOUT parity forces the fallback: dispatch, then
+ * DROP + COUNT any tool calls in the response (A7, honest). Kept as its own
+ * additive registry map (mirrors {@link UNTRUSTED_BLOCK} / `untrustedBlockFor`)
+ * rather than a boolean `CapabilityFlag`, so the exhaustively-materialized flag
+ * union and every adapter's `supports()` stay untouched. A provider absent from
+ * the map is treated as NOT capable (fail safe — drop+count is always honest;
+ * silently trusting tool_choice:none on a provider that ignores it would not
+ * be). The screen engine takes the resolved boolean, so both paths unit-test. */
+const TOOL_CHOICE_NONE = {
+    openai: true,
+    anthropic: true,
+    gemini: true,
+    deepseek: true,
+    grok: true,
+    // deepinfra/fireworks: aggregator hosts — parity varies per served model, so
+    // they fall back to the honest drop+count path (never a silent trust).
+};
+/** Whether `quarantine` can gate tool calls via `tool_choice: "none"` on this
+ * provider (else the run drops + counts them post-dispatch, A7). */
+function toolChoiceNoneCapable(provider) {
+    return TOOL_CHOICE_NONE[provider] ?? false;
+}