modelrig 0.8.1 → 0.10.0

package/dist/types/route.d.ts

@@ -3,9 +3,13 @@
  * routes/loader.ts; frozen after load.
  */
 import type { FailureClass } from "./failures";
+import type { Destination } from "../run/destination";
 import type { ProviderId, SamplingParams, ServiceTier, ToolCall, ToolChoice, ToolDefinition } from "./provider";
 import type { QualityGate } from "./quality";
 import type { MaskReceipt, ResolvedMaskPolicy } from "../mask/types";
+import type { ResolvedScreenPolicy, ScreenReceipt } from "../screen/types";
+import type { DataClassification } from "../artifacts/classification";
+import type { Manifest } from "../prompts/manifest";
 export interface CandidateSpec {
     readonly provider: ProviderId;
     readonly model: string;
@@ -166,17 +170,78 @@ export interface BakeoffConfig {
             readonly maxSamples: number;
         };
     };
+    /**
+     * Q1 regret monitor (near-optimal spec §5) — additive & optional, DEFAULT OFF.
+     * When `enabled`, a scheduled cron replays a sample of recent captures against
+     * the route's reference arm and maintains a regret band, filing a `regret_breach`
+     * bake-off proposal when the band breaches ε / drifts up. Requires
+     * `bakeoff.reference` to be set (nothing to measure against otherwise — `validate`
+     * warns). All bounds default to the house constants when omitted. */
+    readonly regretMonitor?: {
+        readonly enabled: boolean;
+        /** Captures sampled per cycle (capped by the reference envelope). */
+        readonly sampleN?: number;
+        readonly windowDays?: number;
+        readonly baselineDays?: number;
+    };
+    /**
+     * N4 up-swap watch (near-optimal spec §4) — additive & optional. When true (and
+     * a reference resolves), the watch loop files an `upgrade_opportunity` bake-off
+     * when the route's ceiling rises. Absent ⇒ opt-in default: a route WITH a
+     * reference watches by default; a route with no reference can never fire it, and
+     * cost-first routes (no objective/bakeoff block) are always off. `validate` warns
+     * when set true on a route with no reference. */
+    readonly upgradeWatch?: boolean;
 }
+/**
+ * Route OUTPUT KIND (GitLab issue #1, incident 2026-10-11). `json` (the default)
+ * is today's contract: the response MUST parse as JSON, then conform to
+ * `outputSchema` when one is declared. `text` is the prose/markdown contract:
+ * the response is returned VERBATIM as `output` (a string) with no JSON parse,
+ * so a route serving prose is never rejected `content_invalid` for not being
+ * JSON. Declared in the bundle YAML as `output: text` (see route-bundles.md).
+ */
+export type OutputKind = "json" | "text";
 export interface RouteBundle {
     readonly route: string;
     readonly version: number;
     /** Resolved, parsed JSON Schema (null = unstructured route). */
     readonly outputSchema: object | null;
+    /** Output kind (issue #1). ONLY ever carried as `"text"` — the loader OMITS
+     * the field for a JSON route (absent ⇒ `json` ⇒ BYTE-IDENTICAL behaviour and
+     * an unchanged `bundle_sha` for every existing route). A `text` route has a
+     * null `outputSchema` (the loader refuses `output: text` + `schema:`), skips
+     * JSON parsing in `validateOutput`, and never enters the JSON repair rung.
+     * Carried on the resolved (mirror) bundle so the hosted lane honours it.
+     * Additive & optional. */
+    readonly outputKind?: OutputKind;
+    /** `output: { kind: text, min_chars: N }` — the one declared, fail-closed check
+     * a prose route may carry: a response shorter than N characters (untrimmed)
+     * is `content_invalid` (retried per the class budget, never JSON-repaired).
+     * Absent ⇒ no floor (any string, including empty, is accepted verbatim).
+     * Text routes only (load error otherwise). */
+    readonly outputMinChars?: number;
     readonly candidates: readonly CandidateSpec[];
     readonly require: readonly Requirement[];
     readonly prefer: readonly Preference[];
     /** Raw template text with {{var}} and {{#if capability.X}} blocks. */
     readonly systemTemplate: string;
+    /**
+     * Per-call USER-turn template (GitLab issue #5, R1) — `prompt.user:` in the
+     * bundle YAML, rendered with the SAME `variables` / capability conditionals /
+     * `x-trust` removal as `systemTemplate`. When present, the rendered text IS the
+     * user turn of every primary attempt (replacing the fixed trigger sentence),
+     * and a same-model repair re-ask carries it ahead of the repair directive.
+     * This is how a route carries the per-call DELTA next to a customer cache
+     * handle: on a Gemini dispatch that sets `cachedContent` the adapter cannot
+     * send `systemInstruction` (the API rejects both), so the cache holds the
+     * shared prefix and `prompt.user` holds what changes per call — nothing is
+     * dropped. Present ONLY when declared (absent ⇒ the fixed trigger ⇒
+     * BYTE-IDENTICAL behaviour and an unchanged `bundle_sha`). Carried on the
+     * resolved (mirror) bundle so the hosted lane renders the same turn.
+     * Additive & optional.
+     */
+    readonly userTemplate?: string;
     readonly variables: readonly string[];
     readonly policy: RoutePolicy;
     /** Base-config repair rung (Phase 3 WS2) — variants may override. */
@@ -225,6 +290,46 @@ export interface RouteBundle {
      * route load (mask-loader.ts + policy.ts) so an unreadable dictionary or an
      * unknown type is a load error, never a runtime surprise. Additive & optional. */
     readonly mask?: ResolvedMaskPolicy;
+    /** Screening SC-1a (spec §4) — the resolved `screen:` block: mode, per-source
+     * tiers, built detectors (T0 always + any available T1 classifier), per-tier
+     * actions, threshold, output controls, and `policy_hash`. Absent ⇒ `mode: off`
+     * ⇒ screening off and BYTE-IDENTICAL behaviour (the golden test). Resolved at
+     * route load (screen-loader.ts + screen/policy.ts) so an unknown detector /
+     * action or a loosening `sources` key is a load error, never a runtime
+     * surprise. Additive & optional. */
+    readonly screen?: ResolvedScreenPolicy;
+    /** SC-2 (spec-sc2 §4) — the route-level data classification. A `phi` value
+     * gates the route posture at load (phi-gate.ts): the route must mask (≥ redact)
+     * AND (`require: zero_retention` OR a `sidecar` detector present), else it
+     * refuses to load with a teaching message. Rides the existing
+     * `data_classification` enum (00058) — zero-DDL. Additive & optional. */
+    readonly classification?: DataClassification;
+    /** Per-route grade pass threshold (grade primitive, R2) — the score at or above
+     * which a grade's DERIVED verdict is `pass`. Declared here (YAML: `grade: {
+     * pass_threshold: 0.7 }`) and mirrored, but UNREAD until GP-2 wires verdict
+     * derivation; a subject with no route (raw lane) uses 0.5. Absent ⇒ default 0.5.
+     * Additive & optional. */
+    readonly grade?: {
+        readonly passThreshold: number;
+    };
+    /** PSR-2 (spec §2.1/§3) — the served prompt's assembly manifest, structure-only.
+     * A promote writes the promoted `prompt_versions` row's `manifest` THROUGH into
+     * this bundle (+ recomputes `bundle_sha`) so `routes.bundle` is the served
+     * projection of the SoR. Carried on the wire so the SDK's client-fill engine
+     * (PSR-2b) can resolve each slot locally. Absent ⇒ no PSR manifest for this
+     * route (pre-PSR behavior, byte-identical). Structure only — no resolved values
+     * (D6). Additive & optional. */
+    readonly manifest?: Manifest;
+    /** Unified Route U2 (ruling D-2) — the serving `destination` for this route:
+     * `direct` (today's behaviour: the configured/BYOK key) or `modelrig-served`
+     * (ModelRig serves the model on its OWN managed key). Validated at load
+     * (routes/loader.ts) against the DESTINATIONS vocabulary. Absent ⇒ resolves to
+     * `direct` ⇒ BYTE-IDENTICAL (the top acceptance bar). A `RunOptions.destination`
+     * per-run override wins over this. In U2 a resolved `modelrig-served` FAILS
+     * CLOSED (managed serving is gated behind the `config.managedServing` flag, U3)
+     * rather than silently serving `direct` — fail-closed-but-discoverable. Additive
+     * & optional. */
+    readonly destination?: Destination;
 }
 export interface RunTags {
     readonly run_id?: string;
@@ -252,6 +357,12 @@ export interface RunOptions {
     /** Named variant to serve (Phase 3 WS1); omitted = the default variant
      * (the route's base config). Unknown names are config errors. */
     readonly variant?: string;
+    /** LRE-2 (live A/B): the experiment arm this call was drawn onto, stamped onto
+     * every recorded row's `inferences.meta.arm` so the console's A/B readout groups
+     * outcomes by arm. Set by the caller after `resolveCallConfigForRun` draws an
+     * arm locally; ABSENT ⇒ no `meta.arm` (byte-identical to a non-experiment run).
+     * A pure identifier — non-meta-safe values are dropped by the meta producer. */
+    readonly arm?: string;
     /** Per-run data-governance opt-in (G-3). `true` demands zero-retention
      * routing for THIS run — `zero_retention` is unioned into the run's effective
      * `require`, so it routes only to ZDR-designated endpoints (empty set →
@@ -317,10 +428,34 @@ export interface RunOptions {
      * hosted equivalent is the route-declared judge (Q2). See boundary B1.
      */
     readonly qualityGate?: QualityGate;
+    /**
+     * S3 proxy-role validation (spec §11.3) — per-call input-variable names to
+     * treat as `proxy_user` (untrusted) for THIS run. Distinct from the route-level
+     * `variableTrust` (`x-trust`, a bundle annotation): `proxyTrust` is a per-call
+     * signal the SERVER owns, because the slug/proxy-lane default flip is a lane
+     * default (B3b), not a route annotation, and it rides on `RunOptions` (which the
+     * server builds and passes to `run`/`runBundle`) rather than through the mirror
+     * bundle. Each named variable present in `input` is:
+     *   (1) removed from the trusted system slot — its `{{name}}` renders empty,
+     *       reusing the exact x-trust removal path (routes/template.ts); and
+     *   (2) emitted as a `{ source: "proxy_user", tier: "untrusted" }` segment,
+     *       spotlighted into the untrusted user block by the provenance assembler.
+     * Additive & optional; ABSENT ⇒ unchanged behaviour (byte-identical). The seam
+     * is INERT until a caller sets it — S3 sets it NOWHERE (the request-edge trust
+     * rule ships as validation + tests; the structural flip is B3b).
+     */
+    readonly proxyTrust?: readonly string[];
+    /** Unified Route U2 (ruling D-2) — per-run serving `destination` override. Wins
+     * over the route's declared `destination` when resolving the effective served
+     * destination (RunOptions > route > default `direct`). Absent ⇒ the route's
+     * declared `destination` stands (itself absent ⇒ `direct` ⇒ BYTE-IDENTICAL).
+     * The hosted gateway's YAML→RunOptions mapping of this key is a
+     * `modelrig-server` follow-up, out of this package's scope. Additive & optional. */
+    readonly destination?: Destination;
 }
 export interface RunMeta {
-    /** Telemetry row id of the serving attempt — the handle rig.feedback()
-     * takes (Phase 4 WS2). */
+    /** Telemetry row id of the serving attempt — the id a grade attaches to via
+     * `rig.grade({ kind: "inference", id })`. */
     readonly inferenceId: string;
     readonly route: string;
     readonly routeVersion: number;
@@ -377,6 +512,23 @@ export interface RunMeta {
      * issued/rehydrated/unresolved). Present only when the route has an active
      * `mask:` policy; NEVER carries a matched value. Additive & optional. */
     readonly mask?: MaskReceipt;
+    /** Screening SC-1a receipt (spec §5) — the counts-only screen summary for this
+     * run's serving inference (policy hash, detectors, findings by type × source,
+     * risk bucket, action, and any quarantine/canary/citation/degraded counts).
+     * Present only when the route has an active `screen:` policy; NEVER carries a
+     * matched value. Rides `inferences.meta.screen` in telemetry (spec §5, §8 — no
+     * new column). Additive & optional. */
+    readonly screen?: ScreenReceipt;
+    /** Unified Route U2 (ruling D-2) — the RESOLVED served destination for this run
+     * (RunOptions override > route > default `direct`). Additive RESULT metadata,
+     * like `servedTier`: the routed lane populates it on every returned run so
+     * telemetry/console can read WHERE the call was served. This is NOT the wire
+     * telemetry row — stamping `destination` on the row is gated to a NON-default
+     * value (destinationTag), so an absent/`direct` route's row is byte-identical.
+     * The raw inline on-ramp omits it (its destination is always `direct`
+     * implicitly). In U2 a returned run's value is always `direct` (a resolved
+     * `modelrig-served` fails closed pre-dispatch). Additive & optional. */
+    readonly destination?: Destination;
 }
 export interface RunResult {
     readonly output: unknown;

package/dist/types/route.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"route.d.ts","sourceRoot":"","sources":["../../src/types/route.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAC/C,OAAO,KAAK,EAAE,UAAU,EAAE,cAAc,EAAE,WAAW,EAAE,QAAQ,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAChH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AAC7C,OAAO,KAAK,EAAE,WAAW,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AAErE,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,QAAQ,EAAE,UAAU,CAAC;IAC9B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB;;;;;;;;;;;;;;;OAeG;IACH,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC;CAC1B;AAED,MAAM,MAAM,WAAW,GAAG,mBAAmB,GAAG,UAAU,GAAG,gBAAgB,GAAG,eAAe,CAAC;AAChG,MAAM,MAAM,UAAU,GAAG,MAAM,GAAG,SAAS,CAAC;AAE5C,MAAM,WAAW,WAAW;IAC1B,0EAA0E;IAC1E,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC,MAAM,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC,CAAC;IACxD,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC;IAC3B,QAAQ,CAAC,IAAI,EAAE,QAAQ,GAAG,WAAW,CAAC;IACtC;;;;;;;mCAO+B;IAC/B,QAAQ,CAAC,QAAQ,CAAC,EAAE,cAAc,CAAC;CACpC;AAED,uDAAuD;AACvD,MAAM,WAAW,YAAY;IAC3B;;;kCAG8B;IAC9B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B;oEACgE;IAChE,QAAQ,CAAC,WAAW,CAAC,EAAE,aAAa,CAAC;CACtC;AAED;6EAC6E;AAC7E,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB;;wBAEoB;IACpB,QAAQ,CAAC,UAAU,CAAC,EAAE,SAAS,aAAa,EAAE,CAAC;IAC/C;6EACyE;IACzE,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IACjC;gCAC4B;IAC5B,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B;4DACwD;IACxD,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,2CAA2C;IAC3C,QAAQ,CAAC,IAAI,CAAC,EAAE,QAAQ,GAAG,WAAW,CAAC;IACvC,QAAQ,CAAC,MAAM,CAAC,EAAE,YAAY,CAAC;IAC/B;;;;;;OAMG;IACH,QAAQ,CAAC,SAAS,CAAC,EAAE,OAAO,CAAC;CAC9B;AAED;;;;+CAI+C;AAC/C,MAAM,MAAM,aAAa,GAAG,eAAe,GAAG,UAAU,GAAG,YAAY,CAAC;AAExE;;;8BAG8B;AAC9B,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;CAC7B;AAED,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAC;IAC7B,gFAAgF;IAChF,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,YAAY,CAAC,EAAE,YAAY,CAAC;IACrC,kFAAkF;IAClF,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB;;;;;;;OAOG;IACH,QAAQ,CAAC,aAAa,CAAC,EAAE,OAAO,CAAC;CAClC;AAED;;;+EAG+E;AAC/E,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,MAAM,EAAE;QAAE,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAA;KAAE,GAAG;QAAE,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;CAC7E;AAED;0DAC0D;AAC1D,MAAM,WAAW,aAAa;IAC5B;;wFAEoF;IACpF,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG;QAAE,QAAQ,CAAC,QAAQ,EAAE,UAAU,CAAC;QAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;IACxF,2EAA2E;IAC3E,QAAQ,CAAC,sBAAsB,CAAC,EAAE,OAAO,CAAC;IAC1C,qEAAqE;IACrE,QAAQ,CAAC,oBAAoB,CAAC,EAAE,MAAM,CAAC;IACvC;;;+BAG2B;IAC3B,QAAQ,CAAC,KAAK,CAAC,EAAE;QAAE,QAAQ,CAAC,KAAK,EAAE,aAAa,CAAC;QAAC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;KAAE,CAAC;IAChF;;;;;;;;;OASG;IACH,QAAQ,CAAC,QAAQ,CAAC,EAAE;QAAE,QAAQ,CAAC,KAAK,CAAC,EAAE;YAAE,QAAQ,CAAC,KAAK,EAAE,aAAa,CAAC;YAAC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;SAAE,CAAA;KAAE,CAAC;CACzG;AAED,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,gEAAgE;IAChE,QAAQ,CAAC,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IACrC,QAAQ,CAAC,UAAU,EAAE,SAAS,aAAa,EAAE,CAAC;IAC9C,QAAQ,CAAC,OAAO,EAAE,SAAS,WAAW,EAAE,CAAC;IACzC,QAAQ,CAAC,MAAM,EAAE,SAAS,UAAU,EAAE,CAAC;IACvC,sEAAsE;IACtE,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,SAAS,EAAE,SAAS,MAAM,EAAE,CAAC;IACtC,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC;IAC7B,qEAAqE;IACrE,QAAQ,CAAC,MAAM,CAAC,EAAE,YAAY,CAAC;IAC/B,mEAAmE;IACnE,QAAQ,CAAC,QAAQ,EAAE,SAAS,YAAY,EAAE,CAAC;IAC3C,sEAAsE;IACtE,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B;;;;;;uCAMmC;IACnC,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC;IACzB;;wEAEoE;IACpE,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IACjC;kEAC8D;IAC9D,QAAQ,CAAC,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IACxC;4BACwB;IACxB,QAAQ,CAAC,SAAS,CAAC,EAAE,cAAc,CAAC;IACpC,sDAAsD;IACtD,QAAQ,CAAC,OAAO,CAAC,EAAE,aAAa,CAAC;IACjC,kEAAkE;IAClE,QAAQ,CAAC,WAAW,CAAC,EAAE,SAAS,UAAU,EAAE,CAAC;IAC7C;;;;;0EAKsE;IACtE,QAAQ,CAAC,iBAAiB,CAAC,EAAE,QAAQ,GAAG,WAAW,CAAC;IACpD;;;iFAG6E;IAC7E,QAAQ,CAAC,aAAa,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC,CAAC;IAC/D;;;;sFAIkF;IAClF,QAAQ,CAAC,IAAI,CAAC,EAAE,kBAAkB,CAAC;CACpC;AAED,MAAM,WAAW,OAAO;IACtB,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAAC;CAC5C;AAED,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACxC,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IACvB;;;;mFAI+E;IAC/E,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,MAAM,CAAC,EAAE;QAChB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;QAC1B;;;;kFAI0E;QAC1E,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;KAC7B,CAAC;IACF;qEACiE;IACjE,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B;;;;;;oCAMgC;IAChC,QAAQ,CAAC,aAAa,CAAC,EAAE,OAAO,CAAC;IACjC;;;;wEAIoE;IACpE,QAAQ,CAAC,kBAAkB,CAAC,EAAE,MAAM,CAAC;IACrC,0EAA0E;IAC1E,QAAQ,CAAC,SAAS,CAAC,EAAE;QACnB,QAAQ,CAAC,IAAI,CAAC,EAAE,SAAS,UAAU,EAAE,CAAC;QACtC,QAAQ,CAAC,MAAM,CAAC,EAAE,SAAS,UAAU,EAAE,CAAC;KACzC,CAAC;IACF;;;uDAGmD;IACnD,QAAQ,CAAC,KAAK,CAAC,EAAE,SAAS,cAAc,EAAE,CAAC;IAC3C,QAAQ,CAAC,UAAU,CAAC,EAAE,UAAU,CAAC;IACjC;;;;;;;;;;OAUG;IACH,QAAQ,CAAC,KAAK,CAAC,EAAE;QACf,iEAAiE;QACjE,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;QACrB;;;;;;iCAMyB;QACzB,QAAQ,CAAC,QAAQ,EAAE,UAAU,CAAC;QAC9B;2EACmE;QACnE,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;KAC9B,CAAC;IACF;;;;;;;;;;;;OAYG;IACH,QAAQ,CAAC,WAAW,CAAC,EAAE,WAAW,CAAC;CACpC;AAED,MAAM,WAAW,OAAO;IACtB;8BAC0B;IAC1B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,QAAQ,EAAE,UAAU,CAAC;IAC9B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,aAAa,EAAE,WAAW,CAAC;IACpC,QAAQ,CAAC,UAAU,EAAE,WAAW,CAAC;IACjC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;IAC5B,QAAQ,CAAC,eAAe,EAAE,OAAO,CAAC,MAAM,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC,CAAC;IAChE,2EAA2E;IAC3E,QAAQ,CAAC,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IACtC;wBACoB;IACpB,QAAQ,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC;;;+EAG2E;IAC3E,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB;gDAC4C;IAC5C,QAAQ,CAAC,SAAS,CAAC,EAAE,aAAa,CAAC;QACjC,QAAQ,CAAC,IAAI,EAAE,cAAc,CAAC;QAC9B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;QACrB,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;KACzB,CAAC,CAAC;IACH;;iFAE6E;IAC7E,QAAQ,CAAC,SAAS,CAAC,EAAE;QAAE,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAA;KAAE,CAAC;IAC5D;;gFAE4E;IAC5E,QAAQ,CAAC,SAAS,CAAC,EAAE,SAAS,QAAQ,EAAE,CAAC;IACzC;;;;iFAI6E;IAC7E,QAAQ,CAAC,OAAO,CAAC,EAAE;QACjB,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;QAC9B,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAAC;QAClC,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;KAClC,CAAC;IACF;;;6EAGyE;IACzE,QAAQ,CAAC,IAAI,CAAC,EAAE,WAAW,CAAC;CAC7B;AAED,MAAM,WAAW,SAAS;IACxB,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;IACzB,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;CACxB"}
+{"version":3,"file":"route.d.ts","sourceRoot":"","sources":["../../src/types/route.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAC/C,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACtD,OAAO,KAAK,EAAE,UAAU,EAAE,cAAc,EAAE,WAAW,EAAE,QAAQ,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAChH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AAC7C,OAAO,KAAK,EAAE,WAAW,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AACrE,OAAO,KAAK,EAAE,oBAAoB,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAC3E,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,6BAA6B,CAAC;AACtE,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AAEpD,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,QAAQ,EAAE,UAAU,CAAC;IAC9B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB;;;;;;;;;;;;;;;OAeG;IACH,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC;CAC1B;AAED,MAAM,MAAM,WAAW,GAAG,mBAAmB,GAAG,UAAU,GAAG,gBAAgB,GAAG,eAAe,CAAC;AAChG,MAAM,MAAM,UAAU,GAAG,MAAM,GAAG,SAAS,CAAC;AAE5C,MAAM,WAAW,WAAW;IAC1B,0EAA0E;IAC1E,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC,MAAM,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC,CAAC;IACxD,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC;IAC3B,QAAQ,CAAC,IAAI,EAAE,QAAQ,GAAG,WAAW,CAAC;IACtC;;;;;;;mCAO+B;IAC/B,QAAQ,CAAC,QAAQ,CAAC,EAAE,cAAc,CAAC;CACpC;AAED,uDAAuD;AACvD,MAAM,WAAW,YAAY;IAC3B;;;kCAG8B;IAC9B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B;oEACgE;IAChE,QAAQ,CAAC,WAAW,CAAC,EAAE,aAAa,CAAC;CACtC;AAED;6EAC6E;AAC7E,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB;;wBAEoB;IACpB,QAAQ,CAAC,UAAU,CAAC,EAAE,SAAS,aAAa,EAAE,CAAC;IAC/C;6EACyE;IACzE,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IACjC;gCAC4B;IAC5B,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B;4DACwD;IACxD,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,2CAA2C;IAC3C,QAAQ,CAAC,IAAI,CAAC,EAAE,QAAQ,GAAG,WAAW,CAAC;IACvC,QAAQ,CAAC,MAAM,CAAC,EAAE,YAAY,CAAC;IAC/B;;;;;;OAMG;IACH,QAAQ,CAAC,SAAS,CAAC,EAAE,OAAO,CAAC;CAC9B;AAED;;;;+CAI+C;AAC/C,MAAM,MAAM,aAAa,GAAG,eAAe,GAAG,UAAU,GAAG,YAAY,CAAC;AAExE;;;8BAG8B;AAC9B,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;CAC7B;AAED,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAC;IAC7B,gFAAgF;IAChF,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,YAAY,CAAC,EAAE,YAAY,CAAC;IACrC,kFAAkF;IAClF,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB;;;;;;;OAOG;IACH,QAAQ,CAAC,aAAa,CAAC,EAAE,OAAO,CAAC;CAClC;AAED;;;+EAG+E;AAC/E,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,MAAM,EAAE;QAAE,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAA;KAAE,GAAG;QAAE,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;CAC7E;AAED;0DAC0D;AAC1D,MAAM,WAAW,aAAa;IAC5B;;wFAEoF;IACpF,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG;QAAE,QAAQ,CAAC,QAAQ,EAAE,UAAU,CAAC;QAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;IACxF,2EAA2E;IAC3E,QAAQ,CAAC,sBAAsB,CAAC,EAAE,OAAO,CAAC;IAC1C,qEAAqE;IACrE,QAAQ,CAAC,oBAAoB,CAAC,EAAE,MAAM,CAAC;IACvC;;;+BAG2B;IAC3B,QAAQ,CAAC,KAAK,CAAC,EAAE;QAAE,QAAQ,CAAC,KAAK,EAAE,aAAa,CAAC;QAAC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;KAAE,CAAC;IAChF;;;;;;;;;OASG;IACH,QAAQ,CAAC,QAAQ,CAAC,EAAE;QAAE,QAAQ,CAAC,KAAK,CAAC,EAAE;YAAE,QAAQ,CAAC,KAAK,EAAE,aAAa,CAAC;YAAC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;SAAE,CAAA;KAAE,CAAC;IACxG;;;;;;yEAMqE;IACrE,QAAQ,CAAC,aAAa,CAAC,EAAE;QACvB,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;QAC1B,qEAAqE;QACrE,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;QAC1B,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;QAC7B,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;KAChC,CAAC;IACF;;;;;;qDAMiD;IACjD,QAAQ,CAAC,YAAY,CAAC,EAAE,OAAO,CAAC;CACjC;AAED;;;;;;;GAOG;AACH,MAAM,MAAM,UAAU,GAAG,MAAM,GAAG,MAAM,CAAC;AAEzC,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,gEAAgE;IAChE,QAAQ,CAAC,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IACrC;;;;;;8BAM0B;IAC1B,QAAQ,CAAC,UAAU,CAAC,EAAE,UAAU,CAAC;IACjC;;;;kDAI8C;IAC9C,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,UAAU,EAAE,SAAS,aAAa,EAAE,CAAC;IAC9C,QAAQ,CAAC,OAAO,EAAE,SAAS,WAAW,EAAE,CAAC;IACzC,QAAQ,CAAC,MAAM,EAAE,SAAS,UAAU,EAAE,CAAC;IACvC,sEAAsE;IACtE,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC;;;;;;;;;;;;;;OAcG;IACH,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,SAAS,EAAE,SAAS,MAAM,EAAE,CAAC;IACtC,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC;IAC7B,qEAAqE;IACrE,QAAQ,CAAC,MAAM,CAAC,EAAE,YAAY,CAAC;IAC/B,mEAAmE;IACnE,QAAQ,CAAC,QAAQ,EAAE,SAAS,YAAY,EAAE,CAAC;IAC3C,sEAAsE;IACtE,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B;;;;;;uCAMmC;IACnC,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC;IACzB;;wEAEoE;IACpE,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IACjC;kEAC8D;IAC9D,QAAQ,CAAC,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IACxC;4BACwB;IACxB,QAAQ,CAAC,SAAS,CAAC,EAAE,cAAc,CAAC;IACpC,sDAAsD;IACtD,QAAQ,CAAC,OAAO,CAAC,EAAE,aAAa,CAAC;IACjC,kEAAkE;IAClE,QAAQ,CAAC,WAAW,CAAC,EAAE,SAAS,UAAU,EAAE,CAAC;IAC7C;;;;;0EAKsE;IACtE,QAAQ,CAAC,iBAAiB,CAAC,EAAE,QAAQ,GAAG,WAAW,CAAC;IACpD;;;iFAG6E;IAC7E,QAAQ,CAAC,aAAa,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC,CAAC;IAC/D;;;;sFAIkF;IAClF,QAAQ,CAAC,IAAI,CAAC,EAAE,kBAAkB,CAAC;IACnC;;;;;;wCAMoC;IACpC,QAAQ,CAAC,MAAM,CAAC,EAAE,oBAAoB,CAAC;IACvC;;;;6EAIyE;IACzE,QAAQ,CAAC,cAAc,CAAC,EAAE,kBAAkB,CAAC;IAC7C;;;;8BAI0B;IAC1B,QAAQ,CAAC,KAAK,CAAC,EAAE;QAAE,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAA;KAAE,CAAC;IACpD;;;;;;oCAMgC;IAChC,QAAQ,CAAC,QAAQ,CAAC,EAAE,QAAQ,CAAC;IAC7B;;;;;;;;qBAQiB;IACjB,QAAQ,CAAC,WAAW,CAAC,EAAE,WAAW,CAAC;CACpC;AAED,MAAM,WAAW,OAAO;IACtB,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAAC;CAC5C;AAED,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACxC,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IACvB;;;;mFAI+E;IAC/E,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,MAAM,CAAC,EAAE;QAChB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;QAC1B;;;;kFAI0E;QAC1E,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;KAC7B,CAAC;IACF;qEACiE;IACjE,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B;;;;oFAIgF;IAChF,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IACtB;;;;;;oCAMgC;IAChC,QAAQ,CAAC,aAAa,CAAC,EAAE,OAAO,CAAC;IACjC;;;;wEAIoE;IACpE,QAAQ,CAAC,kBAAkB,CAAC,EAAE,MAAM,CAAC;IACrC,0EAA0E;IAC1E,QAAQ,CAAC,SAAS,CAAC,EAAE;QACnB,QAAQ,CAAC,IAAI,CAAC,EAAE,SAAS,UAAU,EAAE,CAAC;QACtC,QAAQ,CAAC,MAAM,CAAC,EAAE,SAAS,UAAU,EAAE,CAAC;KACzC,CAAC;IACF;;;uDAGmD;IACnD,QAAQ,CAAC,KAAK,CAAC,EAAE,SAAS,cAAc,EAAE,CAAC;IAC3C,QAAQ,CAAC,UAAU,CAAC,EAAE,UAAU,CAAC;IACjC;;;;;;;;;;OAUG;IACH,QAAQ,CAAC,KAAK,CAAC,EAAE;QACf,iEAAiE;QACjE,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;QACrB;;;;;;iCAMyB;QACzB,QAAQ,CAAC,QAAQ,EAAE,UAAU,CAAC;QAC9B;2EACmE;QACnE,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;KAC9B,CAAC;IACF;;;;;;;;;;;;OAYG;IACH,QAAQ,CAAC,WAAW,CAAC,EAAE,WAAW,CAAC;IACnC;;;;;;;;;;;;;;;OAeG;IACH,QAAQ,CAAC,UAAU,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACxC;;;;;wFAKoF;IACpF,QAAQ,CAAC,WAAW,CAAC,EAAE,WAAW,CAAC;CACpC;AAED,MAAM,WAAW,OAAO;IACtB;iDAC6C;IAC7C,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,QAAQ,EAAE,UAAU,CAAC;IAC9B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,aAAa,EAAE,WAAW,CAAC;IACpC,QAAQ,CAAC,UAAU,EAAE,WAAW,CAAC;IACjC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;IAC5B,QAAQ,CAAC,eAAe,EAAE,OAAO,CAAC,MAAM,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC,CAAC;IAChE,2EAA2E;IAC3E,QAAQ,CAAC,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IACtC;wBACoB;IACpB,QAAQ,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC;;;+EAG2E;IAC3E,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB;gDAC4C;IAC5C,QAAQ,CAAC,SAAS,CAAC,EAAE,aAAa,CAAC;QACjC,QAAQ,CAAC,IAAI,EAAE,cAAc,CAAC;QAC9B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;QACrB,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;KACzB,CAAC,CAAC;IACH;;iFAE6E;IAC7E,QAAQ,CAAC,SAAS,CAAC,EAAE;QAAE,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAA;KAAE,CAAC;IAC5D;;gFAE4E;IAC5E,QAAQ,CAAC,SAAS,CAAC,EAAE,SAAS,QAAQ,EAAE,CAAC;IACzC;;;;iFAI6E;IAC7E,QAAQ,CAAC,OAAO,CAAC,EAAE;QACjB,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;QAC9B,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAAC;QAClC,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;KAClC,CAAC;IACF;;;6EAGyE;IACzE,QAAQ,CAAC,IAAI,CAAC,EAAE,WAAW,CAAC;IAC5B;;;;;2CAKuC;IACvC,QAAQ,CAAC,MAAM,CAAC,EAAE,aAAa,CAAC;IAChC;;;;;;;;4EAQwE;IACxE,QAAQ,CAAC,WAAW,CAAC,EAAE,WAAW,CAAC;CACpC;AAED,MAAM,WAAW,SAAS;IACxB,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;IACzB,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;CACxB"}

package/dist/types/telemetry.d.ts

@@ -113,38 +113,75 @@ export interface EnvelopeRow {
     readonly spentUsd: number;
     readonly status: "open" | "exhausted";
 }
-/** One rig.feedback() judgment (Phase 4 WS2) — attached to a single
- * inference OR an episode (= run-level key), or both. Local SQLite is the
- * write path; the exporter mirrors (dual-store symmetry with inferences). */
-export interface FeedbackRow {
+/** One evidence citation on a per-criterion grade — a verbatim quote drawn from
+ * the subject, optionally anchored to a transcript turn (call-qa F2/F4). */
+export interface GradeCriterionEvidence {
+    readonly quote: string;
+    readonly turn_id?: number;
+}
+/** One criterion's outcome on a HUMAN scorecard (call-qa F4 — the human twin of
+ * the server's model-emitted ScorecardCriterion). `score` is the normalized 0–1
+ * sub-score; `evidence`/`comment` are the analyst's grounded justification. A
+ * human grade may OPTIONALLY carry an array of these; when present the server
+ * persists them to `grade_criteria` (kind semantics = human) so per-criterion
+ * agreement (F4 calibration) has a human side to pair. Absent ⇒ today's
+ * single-score human grade, unchanged. */
+export interface GradeCriterion {
     readonly id: string;
-    readonly ts: string;
-    readonly inferenceId: string | null;
-    readonly episodeKey: string | null;
-    readonly verdict: "up" | "down";
-    readonly score: number | null;
-    readonly note: string | null;
-    readonly source: string;
-    /**
-     * The org this verdict belongs to — Phase 6 WS2, and the reason this field
-     * exists at all.
-     *
-     * A verdict recorded through OUR hosted server belongs to the org of the
-     * person who recorded it, and one SQLite store serves every org that reaches
-     * that server. Without a per-row org the exporter stamps its OWN, which
-     * files a customer's judgment into somebody else's corpus — unrecomputable
-     * evidence, silently wrong. WS1 shipped a 409 refusal rather than misfile;
-     * this column is what replaces the refusal with routing (QA-P6-010).
-     *
-     * NULL is the ordinary case and means "whatever org this exporter is": a
-     * self-hosted rig has exactly one, and `rig.feedback()` from application
-     * code has no notion of orgs at all.
-     */
+    readonly score: number;
+    readonly evidence?: readonly GradeCriterionEvidence[];
+    readonly comment?: string;
+}
+/** The subject a grade attaches to (grade primitive) — an inference, a run
+ * (episode), or an artifact. Exactly one, by construction. */
+export type GradeSubject = {
+    readonly kind: "inference";
+    readonly id: string;
+} | {
+    readonly kind: "run";
+    readonly id: string;
+} | {
+    readonly kind: "artifact";
+    readonly id: string;
+};
+/** One unified judgment (grade primitive, R1) — the local mirror of `public.grades`.
+ * `score` is the 0–1 PRIMITIVE (always present; up/pass=1.0, down/fail=0.0, else
+ * the graded value). The pass/fail verdict is DERIVED at read time (`pass = score
+ * >= threshold`), never stored. `rig.grade` is the sole write API that builds one
+ * of these (the legacy feedback/evaluation shapes were removed in GP-3). */
+export interface GradeRow {
+    readonly id: string;
+    readonly subjectKind: "inference" | "run" | "artifact";
+    readonly subjectId: string;
+    /** 0–1 primitive; ALWAYS present. A human thumbs-up is 1.0, thumbs-down 0.0
+     * (GP-2 dropped the nullable `legacyScore` shadow — score is the sole primitive). */
+    readonly score: number;
+    /** Optional display scale MAX (grade model `scale.max`) — e.g. out of 100. */
+    readonly scaleMax: number | null;
+    /** Optional display LABEL (grade model `scale.label`, e.g. "B+"). GP-2 also folds
+     * the legacy verdict `label` (a native run-outcome / evaluate summary) into this
+     * field, so it is the one display-label column readers read. */
+    readonly scaleLabel: string | null;
+    /** Written guidance (was feedback.note / evaluation.explanation). */
+    readonly comment: string | null;
+    readonly kind: "human" | "model-judge" | "deterministic";
+    /** The specific grader name (was evaluation.evaluator / the feedback source). */
+    readonly grader: string | null;
+    /** Provenance (was feedback.source) — "sdk", "console", a review-agent name. */
+    readonly source: string | null;
+    /** The grade's own org, when recorded through a server on behalf of another
+     * org (the feedback.org_id doctrine, QA-P6-010). Null = the exporter's org. */
     readonly orgId: string | null;
-    /** Authenticated user who recorded it (00017's `feedback.created_by`), or
-     * null for an SDK-recorded verdict — which is a fact about the row, not
-     * missing data, and is never backfilled. */
     readonly createdBy: string | null;
+    /** Judgment timestamp (feedback carried one; evaluations fall back to created_at). */
+    readonly ts: string | null;
+    /** OPTIONAL per-criterion scorecard (call-qa F4). Present only on a human grade
+     * carrying a breakdown; the exporter mirrors it on the wire (WireGrade.criteria)
+     * and the server persists it to `grade_criteria` (kind=human) after the parent
+     * grades row lands. Absent ⇒ today's single-score grade — no grade_criteria.
+     * Additive: stored locally as a JSON `criteria` TEXT column (v16), read back as
+     * null for any row written before F4. */
+    readonly criteria?: readonly GradeCriterion[];
 }
 /** One execution of a customer pipeline (Expansion E2 chunk A). Local SQLite is
  * the write path (run.start/run.end); the exporter mirrors it to `public.runs`
@@ -215,24 +252,10 @@ export interface ArtifactEdgeRow {
     readonly toArtifactId: string;
     readonly kind: "consumed" | "derived_from";
 }
-/** An evaluation recorded against an artifact (chunk B). */
-export interface ArtifactEvaluationRow {
-    readonly id: string;
-    /** The artifact subject — null when this evaluates a whole run (E5 chunk V). */
-    readonly artifactId: string | null;
-    /** The run subject (E5 chunk V) — null when this evaluates an artifact.
-     * Exactly one of artifactId / runId is set. */
-    readonly runId: string | null;
-    readonly evaluator: string;
-    readonly evaluatorKind: "deterministic" | "model-judge" | "human";
-    readonly score: number | null;
-    readonly passed: boolean | null;
-    readonly label: string | null;
-    readonly explanation: string | null;
-    readonly createdBy: string | null;
-}
-/** How a case entered the eval suite (E4 chunk A, migration 00040 CHECK). */
-export type EvalCaseOrigin = "promoted-failure" | "human-corrected" | "manual";
+/** How a case entered the eval suite (E4 chunk A, migration 00040 CHECK; the
+ * imported-* origins added by the dataset-source ingest thread, migration 00078
+ * CHECK). */
+export type EvalCaseOrigin = "promoted-failure" | "human-corrected" | "manual" | "imported-ticket" | "imported-chat";
 /** A per-org regression/golden eval case (E4 chunk A). `correctedArtifactId`
  * null ⇒ a failure-case; set ⇒ a golden-corrected pair. A fact on ingest
  * (created via promote); edits/deletes are server-side, not on this stream. */
@@ -247,7 +270,9 @@ export interface EvalCaseRow {
 }
 export interface TelemetryStore {
     record(row: TelemetryRow): void;
-    recordFeedback(row: FeedbackRow): void;
+    /** Record a unified judgment (grade primitive, R1) — the canonical write path
+     * that `rig.grade` uses. */
+    recordGrade(row: GradeRow): void;
     queryByTag(tag: keyof RunTags & string, value: string): TelemetryRow[];
     getEnvelope(key: string): EnvelopeRow | null;
     accrue(key: string, usd: number): EnvelopeRow;

package/dist/types/telemetry.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"telemetry.d.ts","sourceRoot":"","sources":["../../src/types/telemetry.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAC/C,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,KAAK,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,2BAA2B,CAAC;AAC1E,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAEjD;;;;;;;;;;;;;GAaG;AACH,MAAM,MAAM,aAAa,GACrB,SAAS,GACT,OAAO,GACP,QAAQ,GACR,QAAQ,GACR,WAAW,GACX,kBAAkB,CAAC;AAEvB,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B;;wCAEoC;IACpC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,sDAAsD;IACtD,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B;;;;;;kFAM8E;IAC9E,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IACnC;wFACoF;IACpF,QAAQ,CAAC,kBAAkB,CAAC,EAAE,MAAM,CAAC;IACrC,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B;uDACmD;IACnD,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,QAAQ,CAAC,YAAY,EAAE,YAAY,GAAG,IAAI,CAAC;IAC3C,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B;wEACoE;IACpE,QAAQ,CAAC,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IACxC;;;oDAGgD;IAChD,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAClC;oFACgF;IAChF,QAAQ,CAAC,iBAAiB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3C;;6DAEyD;IACzD,QAAQ,CAAC,cAAc,EAAE,OAAO,CAAC;IACjC;oDACgD;IAChD,QAAQ,CAAC,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IACtC;uDACmD;IACnD,QAAQ,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC;;;;;;+EAM2E;IAC3E,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC;mEAC+D;IAC/D,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACpC;;;sDAGkD;IAClD,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACxC;;;;;uDAKmD;IACnD,QAAQ,CAAC,IAAI,CAAC,EAAE,aAAa,GAAG,IAAI,CAAC;IACrC;;;;uEAImE;IACnE,QAAQ,CAAC,IAAI,CAAC,EAAE,WAAW,GAAG,IAAI,CAAC;CACpC;AAED,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,WAAW,CAAC;CACvC;AAED;;6EAE6E;AAC7E,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IACpC,QAAQ,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC,QAAQ,CAAC,OAAO,EAAE,IAAI,GAAG,MAAM,CAAC;IAChC,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB;;;;;;;;;;;;;;OAcG;IACH,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B;;gDAE4C;IAC5C,QAAQ,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;CACnC;AAED;;;;cAIc;AACd,MAAM,WAAW,MAAM;IACrB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IACxC,QAAQ,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IACpC,QAAQ,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,QAAQ,CAAC,MAAM,EAAE,SAAS,GAAG,WAAW,GAAG,QAAQ,GAAG,WAAW,CAAC;IAClE;;;6EAGyE;IACzE,QAAQ,CAAC,IAAI,CAAC,EAAE,SAAS,GAAG,IAAI,CAAC;CAClC;AAED;;;gDAGgD;AAChD,MAAM,WAAW,OAAO;IACtB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,QAAQ,CAAC,UAAU,EAAE,cAAc,GAAG,UAAU,CAAC;IACjD,QAAQ,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IACpC,QAAQ,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IACpC,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,QAAQ,CAAC,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;CACtC;AAED;;mFAEmF;AACnF,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,QAAQ,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IAClC,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,oBAAoB,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7C,QAAQ,CAAC,cAAc,EAAE,OAAO,CAAC;IACjC,QAAQ,CAAC,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IACxC,QAAQ,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC,QAAQ,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IACpC,QAAQ,CAAC,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IACrC,QAAQ,CAAC,kBAAkB,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3C,QAAQ,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IAClC;;;kEAG8D;IAC9D,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC;CAC1B;AAED,sDAAsD;AACtD,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,IAAI,EAAE,UAAU,GAAG,cAAc,CAAC;CAC5C;AAED,4DAA4D;AAC5D,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,gFAAgF;IAChF,QAAQ,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC;mDAC+C;IAC/C,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,aAAa,EAAE,eAAe,GAAG,aAAa,GAAG,OAAO,CAAC;IAClE,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,QAAQ,CAAC,MAAM,EAAE,OAAO,GAAG,IAAI,CAAC;IAChC,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,QAAQ,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IACpC,QAAQ,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;CACnC;AAED,6EAA6E;AAC7E,MAAM,MAAM,cAAc,GAAG,kBAAkB,GAAG,iBAAiB,GAAG,QAAQ,CAAC;AAE/E;;+EAE+E;AAC/E,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,mBAAmB,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5C,QAAQ,CAAC,MAAM,EAAE,cAAc,CAAC;IAChC,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,QAAQ,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;CACnC;AAED,MAAM,WAAW,cAAc;IAC7B,MAAM,CAAC,GAAG,EAAE,YAAY,GAAG,IAAI,CAAC;IAChC,cAAc,CAAC,GAAG,EAAE,WAAW,GAAG,IAAI,CAAC;IACvC,UAAU,CAAC,GAAG,EAAE,MAAM,OAAO,GAAG,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,YAAY,EAAE,CAAC;IACvE,WAAW,CAAC,GAAG,EAAE,MAAM,GAAG,WAAW,GAAG,IAAI,CAAC;IAC7C,MAAM,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,WAAW,CAAC;IAC9C,YAAY,CAAC,GAAG,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,WAAW,CAAC;IAC1D,KAAK,IAAI,IAAI,CAAC;CACf"}
+{"version":3,"file":"telemetry.d.ts","sourceRoot":"","sources":["../../src/types/telemetry.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAC/C,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,KAAK,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,2BAA2B,CAAC;AAC1E,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAEjD;;;;;;;;;;;;;GAaG;AACH,MAAM,MAAM,aAAa,GACrB,SAAS,GACT,OAAO,GACP,QAAQ,GACR,QAAQ,GACR,WAAW,GACX,kBAAkB,CAAC;AAEvB,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B;;wCAEoC;IACpC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,sDAAsD;IACtD,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B;;;;;;kFAM8E;IAC9E,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IACnC;wFACoF;IACpF,QAAQ,CAAC,kBAAkB,CAAC,EAAE,MAAM,CAAC;IACrC,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B;uDACmD;IACnD,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,QAAQ,CAAC,YAAY,EAAE,YAAY,GAAG,IAAI,CAAC;IAC3C,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B;wEACoE;IACpE,QAAQ,CAAC,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IACxC;;;oDAGgD;IAChD,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAClC;oFACgF;IAChF,QAAQ,CAAC,iBAAiB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3C;;6DAEyD;IACzD,QAAQ,CAAC,cAAc,EAAE,OAAO,CAAC;IACjC;oDACgD;IAChD,QAAQ,CAAC,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IACtC;uDACmD;IACnD,QAAQ,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC;;;;;;+EAM2E;IAC3E,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC;mEAC+D;IAC/D,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACpC;;;sDAGkD;IAClD,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACxC;;;;;uDAKmD;IACnD,QAAQ,CAAC,IAAI,CAAC,EAAE,aAAa,GAAG,IAAI,CAAC;IACrC;;;;uEAImE;IACnE,QAAQ,CAAC,IAAI,CAAC,EAAE,WAAW,GAAG,IAAI,CAAC;CACpC;AAED,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,WAAW,CAAC;CACvC;AAED;4EAC4E;AAC5E,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED;;;;;;0CAM0C;AAC1C,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,QAAQ,CAAC,EAAE,SAAS,sBAAsB,EAAE,CAAC;IACtD,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED;8DAC8D;AAC9D,MAAM,MAAM,YAAY,GACpB;IAAE,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC;IAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;CAAE,GACnD;IAAE,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAC;IAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;CAAE,GAC7C;IAAE,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;IAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;CAAE,CAAC;AAEvD;;;;4EAI4E;AAC5E,MAAM,WAAW,QAAQ;IACvB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,WAAW,EAAE,WAAW,GAAG,KAAK,GAAG,UAAU,CAAC;IACvD,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B;yFACqF;IACrF,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,8EAA8E;IAC9E,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC;;oEAEgE;IAChE,QAAQ,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC,qEAAqE;IACrE,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,QAAQ,CAAC,IAAI,EAAE,OAAO,GAAG,aAAa,GAAG,eAAe,CAAC;IACzD,iFAAiF;IACjF,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,gFAAgF;IAChF,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B;mFAC+E;IAC/E,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,QAAQ,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IAClC,sFAAsF;IACtF,QAAQ,CAAC,EAAE,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B;;;;;6CAKyC;IACzC,QAAQ,CAAC,QAAQ,CAAC,EAAE,SAAS,cAAc,EAAE,CAAC;CAC/C;AAED;;;;cAIc;AACd,MAAM,WAAW,MAAM;IACrB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IACxC,QAAQ,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IACpC,QAAQ,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,QAAQ,CAAC,MAAM,EAAE,SAAS,GAAG,WAAW,GAAG,QAAQ,GAAG,WAAW,CAAC;IAClE;;;6EAGyE;IACzE,QAAQ,CAAC,IAAI,CAAC,EAAE,SAAS,GAAG,IAAI,CAAC;CAClC;AAED;;;gDAGgD;AAChD,MAAM,WAAW,OAAO;IACtB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,QAAQ,CAAC,UAAU,EAAE,cAAc,GAAG,UAAU,CAAC;IACjD,QAAQ,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IACpC,QAAQ,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IACpC,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,QAAQ,CAAC,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;CACtC;AAED;;mFAEmF;AACnF,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,QAAQ,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IAClC,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,oBAAoB,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7C,QAAQ,CAAC,cAAc,EAAE,OAAO,CAAC;IACjC,QAAQ,CAAC,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IACxC,QAAQ,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC,QAAQ,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IACpC,QAAQ,CAAC,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IACrC,QAAQ,CAAC,kBAAkB,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3C,QAAQ,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IAClC;;;kEAG8D;IAC9D,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC;CAC1B;AAED,sDAAsD;AACtD,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,IAAI,EAAE,UAAU,GAAG,cAAc,CAAC;CAC5C;AAED;;aAEa;AACb,MAAM,MAAM,cAAc,GACtB,kBAAkB,GAClB,iBAAiB,GACjB,QAAQ,GACR,iBAAiB,GACjB,eAAe,CAAC;AAEpB;;+EAE+E;AAC/E,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,mBAAmB,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5C,QAAQ,CAAC,MAAM,EAAE,cAAc,CAAC;IAChC,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,QAAQ,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;CACnC;AAED,MAAM,WAAW,cAAc;IAC7B,MAAM,CAAC,GAAG,EAAE,YAAY,GAAG,IAAI,CAAC;IAChC;gCAC4B;IAC5B,WAAW,CAAC,GAAG,EAAE,QAAQ,GAAG,IAAI,CAAC;IACjC,UAAU,CAAC,GAAG,EAAE,MAAM,OAAO,GAAG,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,YAAY,EAAE,CAAC;IACvE,WAAW,CAAC,GAAG,EAAE,MAAM,GAAG,WAAW,GAAG,IAAI,CAAC;IAC7C,MAAM,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,WAAW,CAAC;IAC9C,YAAY,CAAC,GAAG,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,WAAW,CAAC;IAC1D,KAAK,IAAI,IAAI,CAAC;CACf"}

package/dist/validate-cli.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"validate-cli.d.ts","sourceRoot":"","sources":["../src/validate-cli.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAUH,wBAAgB,cAAc,IAAI,MAAM,CAwEvC"}
+{"version":3,"file":"validate-cli.d.ts","sourceRoot":"","sources":["../src/validate-cli.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAWH,wBAAgB,cAAc,IAAI,MAAM,CAwGvC"}

package/dist/validate-cli.js

@@ -18,6 +18,7 @@ const loader_1 = require("./routes/loader");
 const manifest_1 = require("./routes/manifest");
 const attempt_meta_1 = require("./telemetry/attempt-meta");
 const status_runs_1 = require("./status-runs");
+const phi_gate_1 = require("./screen/phi-gate");
 function runValidateCli() {
     const config = (0, config_1.loadConfigFromEnv)();
     const routesDir = (0, rawonly_1.requireRoutesDir)(config, "modelrig validate");
@@ -67,6 +68,37 @@ function runValidateCli() {
             console.error(`FAIL ${r.route ?? r.file}: ${r.problems.join("; ")}`);
         }
     }
+    // SC-1a (spec §9): print the EFFECTIVE `screen:` policy per route so an author
+    // sees exactly what will run (mode, detectors + versions, per-tier actions,
+    // threshold, and any DEGRADED optional detector). The `x-trust` warnings are
+    // already emitted at load time (loader.ts). Best-effort: only when every route
+    // loaded cleanly (a failing route has no bundle to read).
+    if (failures === 0) {
+        try {
+            for (const b of (0, loader_1.loadRoutes)(routesDir).list()) {
+                // SC-2 (spec-sc2 §4): print the resolved `phi` posture (mask/zdr/sidecar)
+                // and, if unmet, the specific requirement — even a phi route with no
+                // screen block (a mis-postured one already failed to load above, so this
+                // prints only for a route that passed the gate: the OK posture).
+                if (b.classification === "phi") {
+                    const posture = (0, phi_gate_1.describePhiPosture)({ classification: b.classification, mask: b.mask, screen: b.screen, require: b.require });
+                    console.log(`   ${b.route}: ${posture}`);
+                }
+                if (b.screen === undefined)
+                    continue;
+                const p = b.screen.policy;
+                console.log(`   screen ${b.route}: mode=${p.mode} · detectors=[${b.screen.detectorMeta.map((d) => d.id).join(", ")}]` +
+                    ` · threshold=${p.threshold ?? 0.8}` +
+                    (b.screen.degraded ? " · DEGRADED (an optional detector is unavailable — running T0 only)" : ""));
+                if (p.on !== undefined && Object.keys(p.on).length > 0) {
+                    console.log(`     actions: ${Object.entries(p.on).map(([t, a]) => `${t}→${a}`).join(", ")}`);
+                }
+            }
+        }
+        catch {
+            /* a bundle failed to reload — already surfaced as a FAIL line above */
+        }
+    }
     // GS-1 teaching hint: a rig that is USED (has recorded inferences) but never
     // wrapped an execution in run.start / run.scope records no runs, so /runs stays
     // empty and /projects shows "(no run)". A WARN, never a failure — the config is

package/dist/verify/verify.d.ts

@@ -24,6 +24,11 @@ export interface VerifySwapRequest {
     readonly envelopeUsd?: number;
     /** Injectable clock for a deterministic `ranAt` (tests). */
     readonly now?: () => string;
+    /** CS-1 Chunk B (spec §7.4): what this equivalence run is FOR — `swap`
+     * (default), `mask-policy` (a Tier-2 migration PR that adds masking, so the
+     * PR carries equivalence semantics for the masked route), or `screen-assembly`
+     * (SC-0 B3). Additive & optional; stamped verbatim onto the report. */
+    readonly subject?: EquivalenceReport["subject"];
 }
 export declare function verifySwap(deps: RunDeps, req: VerifySwapRequest): Promise<EquivalenceReport>;
 //# sourceMappingURL=verify.d.ts.map

package/dist/verify/verify.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"verify.d.ts","sourceRoot":"","sources":["../../src/verify/verify.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,YAAY,CAAC;AAK1C,OAAO,KAAK,EACV,iBAAiB,EAIjB,oBAAoB,EACrB,MAAM,SAAS,CAAC;AAWjB,MAAM,WAAW,iBAAiB;IAChC,+EAA+E;IAC/E,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,2EAA2E;IAC3E,QAAQ,CAAC,OAAO,EAAE,oBAAoB,CAAC;IACvC,wDAAwD;IACxD,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,4DAA4D;IAC5D,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;CAC7B;AAiCD,wBAAsB,UAAU,CAC9B,IAAI,EAAE,OAAO,EACb,GAAG,EAAE,iBAAiB,GACrB,OAAO,CAAC,iBAAiB,CAAC,CAsH5B"}
+{"version":3,"file":"verify.d.ts","sourceRoot":"","sources":["../../src/verify/verify.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,YAAY,CAAC;AAK1C,OAAO,KAAK,EACV,iBAAiB,EAIjB,oBAAoB,EACrB,MAAM,SAAS,CAAC;AAWjB,MAAM,WAAW,iBAAiB;IAChC,+EAA+E;IAC/E,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,2EAA2E;IAC3E,QAAQ,CAAC,OAAO,EAAE,oBAAoB,CAAC;IACvC,wDAAwD;IACxD,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,4DAA4D;IAC5D,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;IAC5B;;;2EAGuE;IACvE,QAAQ,CAAC,OAAO,CAAC,EAAE,iBAAiB,CAAC,SAAS,CAAC,CAAC;CACjD;AAkCD,wBAAsB,UAAU,CAC9B,IAAI,EAAE,OAAO,EACb,GAAG,EAAE,iBAAiB,GACrB,OAAO,CAAC,iBAAiB,CAAC,CAuH5B"}

package/dist/verify/verify.js

@@ -34,6 +34,7 @@ function refused(req, routeVersion, pinnedModel, reason, nowIso) {
     return {
         schemaVersion: 1,
         kind: "shadow-equivalence",
+        ...(req.subject !== undefined ? { subject: req.subject } : {}),
         callSiteId: req.fixture.callSiteId,
         route: req.route,
         routeVersion,
@@ -132,6 +133,7 @@ async function verifySwap(deps, req) {
     return {
         schemaVersion: 1,
         kind: "shadow-equivalence",
+        ...(req.subject !== undefined ? { subject: req.subject } : {}),
         callSiteId: req.fixture.callSiteId,
         route: req.route,
         routeVersion: bundle.version,

package/dist/watch/evaluate.d.ts

@@ -56,7 +56,28 @@ export interface WatchConfig {
  * Analyst's triggers ride the widened kinds (`insight`/`promote-eval`) or reuse
  * `bakeoff` for an Analyst-initiated bake-off — all through the SAME proposals
  * machinery and the SAME `submitDrafts` seam (trajectory F1/F4, one emission path). */
-export type ProposalTrigger = EconomicsTrigger | ConformDegradationTrigger | AnalystClusterTrigger | AnalystPromoteEvalTrigger | AnalystBakeoffTrigger | ManualChallengerTrigger;
+export type ProposalTrigger = EconomicsTrigger | ConformDegradationTrigger | AnalystClusterTrigger | AnalystPromoteEvalTrigger | AnalystBakeoffTrigger | ManualChallengerTrigger | UpgradeOpportunityTrigger | RegretBreachTrigger | OptimizerImprovementTrigger;
+/**
+ * IP-2a-2: an EXPLICIT optimizer run raised this (the /graders/[route] console
+ * action or the `run_optimizer` MCP tool — spec-ip2 §2; no cron, no sweep).
+ * `kind` stays `"swap"`: the winning arm is a variant swap in the wide sense
+ * (a model pin, a prompt override, or both), delivered through the SAME
+ * never-silent machinery — the change_spec on the evidence is the
+ * machine-readable half. `bakeoffId` (the eval run that PROVED the winner) is
+ * deliberately INSIDE the hash: each explicit run is its own decision record,
+ * never deduped against an earlier run's.
+ */
+export interface OptimizerImprovementTrigger {
+    readonly type: "optimizer_improvement";
+    readonly route: string;
+    /** Which inputs the engine ran on: prompt bytes (G1 open) or config-only. */
+    readonly mode: "prompt" | "config";
+    /** The bake-off (eval run) this run scored candidates through. */
+    readonly bakeoffId: string;
+    /** Honest input counts at trigger time. */
+    readonly evalCasesN: number;
+    readonly gradesN: number;
+}
 /**
  * A human-initiated declare-first challenger (routing-console spec §2.4 / §3, R3)
  * — the console picker (or the oracle) proposes trialing a specific model on a
@@ -149,6 +170,68 @@ export interface EconomicsTrigger {
     readonly newRates?: TokenRates;
     readonly pricing?: TokenRates | null;
 }
+/** An aggregate regret band over one window — the quality twin of the cost
+ * odometer's savings band (spec §2). Carries ONLY aggregate regret numbers +
+ * the paired n (content-custody: no capture content, ever). `regretCi95` is a
+ * seeded paired bootstrap; `nPaired` is the window's paired-sample count. */
+export interface RegretBandSummary {
+    /** Window bounds — inclusive-from / exclusive-to ISO days. */
+    readonly from: string;
+    readonly to: string;
+    readonly regretMean: number;
+    readonly regretCi95: readonly [number, number];
+    readonly nPaired: number;
+}
+/** N4 upgrade trigger (spec §4.1): the route's reference/ceiling ROSE — a new
+ * registry model, a new snapshot of the reference, or a Q1 regret breach — so a
+ * bake-off is proposed to measure the opportunity. The mirror image of
+ * `price_change`/`new_model`. Fires ONLY for a route that resolves a reference
+ * (invariant `upswap-opt-in-only`). */
+export interface UpgradeOpportunityTrigger {
+    readonly type: "upgrade_opportunity";
+    readonly route: string;
+    /** The model that raised the ceiling (new registry entry, or a new snapshot). */
+    readonly reference: CandidateEconomics;
+    /** Why it fired — console/audit context; the idempotency hash keys on the ref
+     * identity (+ snapshot) + cause, NOT the whole trigger. */
+    readonly cause: "new_reference" | "reference_snapshot" | "regret_breach";
+    /** Present when the fire came from Q1 (cause=regret_breach): the band that
+     * tripped ε — so the console shows WHY without a second read. */
+    readonly band?: RegretBandSummary;
+}
+/** Q1 regret-breach trigger (spec §5.2): the recent window's regret upper-CI
+ * exceeded ε, OR drifted up from baseline by ≥ the ruled margin, with min-n on
+ * BOTH sides. Emits `kind: "bakeoff"` — the sampled monitor number is the ALARM,
+ * a fresh bake-off is the EVIDENCE (and, on an opted-in route, where an up-swap
+ * winner is found → Q1 feeds N4). */
+export interface RegretBreachTrigger {
+    readonly type: "regret_breach";
+    readonly route: string;
+    /** What we measured against. */
+    readonly reference: CandidateEconomics;
+    readonly recent: RegretBandSummary;
+    readonly baseline: RegretBandSummary;
+    /** The route's `max_regret` (null ⇒ drift-only breach). */
+    readonly epsilon: number | null;
+    readonly breachKind: "over_epsilon" | "drift_up";
+    readonly minN: number;
+}
+/**
+ * Idempotency key for an `upgrade_opportunity` — per (route, reference, cause,
+ * snapshot) ONLY (spec §4.1), so the `band`/audit context never splits a dedupe.
+ * A re-run over the SAME ceiling is a no-op via the `(org_id, route,
+ * trigger_hash)` unique index; a NEWER snapshot (distinct `snapshotId`) is a
+ * genuinely new opportunity and a distinct hash.
+ */
+export declare function upgradeTriggerHash(route: string, reference: CandidateEconomics, cause: UpgradeOpportunityTrigger["cause"], snapshotId?: string): string;
+/**
+ * Idempotency key for a `regret_breach` — per (route, reference, window bounds,
+ * breachKind) ONLY (spec §5.2), so the sampled band's noisy per-run regret
+ * numbers never split a dedupe. The window bounds are day-quantized off the
+ * injected `now`, so a re-run the SAME day is a no-op via the `(org_id, route,
+ * trigger_hash)` unique index.
+ */
+export declare function regretBreachTriggerHash(route: string, reference: CandidateEconomics, windowFrom: string, windowTo: string, breachKind: RegretBreachTrigger["breachKind"]): string;
 /** One side of the degradation comparison (E4 chunk B) — a window's conform
  * rate over its evaluations. Dates are inclusive-from / exclusive-to ISO days. */
 export interface ConformWindow {