modelrig 0.8.1 → 0.10.0

package/dist/feedback/coverage.js

@@ -8,18 +8,21 @@
  *   rung 0 — implicit signals only: conformance / repair / refusal rates
  *            from telemetry. Enough confidence for schema-mechanical swap
  *            proposals (the bake-off gate).
- *   rung 1 — ≥ RUNG1_MIN_FEEDBACK human/agent verdicts attached: prose
+ *   rung 1 — ≥ RUNG1_MIN_GRADES grades attached: prose
  *            routes (no schema to conform to) gain proposal confidence.
  *   rung 2+ — judges; Phase 5+, out of scope by decision.
  */
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.RUNG1_MIN_FEEDBACK = void 0;
+exports.RUNG1_MIN_GRADES = void 0;
 exports.computeCoverage = computeCoverage;
-exports.RUNG1_MIN_FEEDBACK = 10;
-/** Attribution: a feedback row joins a route via its inference id, or via
- * its episode key matching a row's run_id tag. Unmatched feedback attaches
- * to nothing (never guessed). */
-function computeCoverage(rows, feedback) {
+exports.RUNG1_MIN_GRADES = 10;
+/** Attribution: a grade joins a route via its inference-subject id, or via its
+ * run-subject (episode) id matching a row's run_id tag. Unmatched grades attach
+ * to nothing (never guessed). Grade primitive (R6): every grade counts toward
+ * readiness — a wrapper-written feedback IS now a grade, so this is
+ * behaviour-preserving for the Rung-1 threshold. Artifact-subject grades never
+ * resolve to a route here (no artifact→route join) and simply do not count. */
+function computeCoverage(rows, grades) {
     const routeByInferenceId = new Map();
     const routeByEpisode = new Map();
     const byRoute = new Map();
@@ -42,7 +45,7 @@ function computeCoverage(rows, feedback) {
             conform: 0,
             repaired: 0,
             refused: 0,
-            feedback: 0,
+            grades: 0,
         };
         agg.samples += 1;
         if (row.failureClass === null)
@@ -63,22 +66,32 @@ function computeCoverage(rows, feedback) {
             // Unparseable tags never break coverage — the row still counts above.
         }
     }
-    for (const f of feedback) {
-        const route = (f.inferenceId !== null ? routeByInferenceId.get(f.inferenceId) : undefined) ??
-            (f.episodeKey !== null ? routeByEpisode.get(f.episodeKey) : undefined);
+    for (const g of grades) {
+        // R6 (grade primitive): EVERY grade counts toward Rung 1, not just the
+        // wrapper-written thumbs the pre-grade `feedback` table held. A grade counts
+        // only when its subject resolves to a route: an inference-subject id, or a
+        // run-subject (episode) id matching a row's run_id tag. Artifact-subject
+        // grades and native run verdicts (whose run-subject id is a run UUID, not an
+        // episode key) never resolve to a route here, so they do not over-count —
+        // behaviour-preserving for existing corpora while opening Rung 1 to
+        // model-judge/agent grades on inferences (the R6 intent).
+        const inferenceId = g.subjectKind === "inference" ? g.subjectId : null;
+        const episodeKey = g.subjectKind === "run" ? g.subjectId : null;
+        const route = (inferenceId !== null ? routeByInferenceId.get(inferenceId) : undefined) ??
+            (episodeKey !== null ? routeByEpisode.get(episodeKey) : undefined);
         if (route === undefined)
             continue;
         const agg = byRoute.get(route);
         if (agg !== undefined)
-            agg.feedback += 1;
+            agg.grades += 1;
     }
     return [...byRoute.entries()]
         .sort(([a], [b]) => a.localeCompare(b))
         .map(([route, agg]) => {
-        const rung = agg.feedback >= exports.RUNG1_MIN_FEEDBACK ? 1 : 0;
+        const rung = agg.grades >= exports.RUNG1_MIN_GRADES ? 1 : 0;
         const nextRungUnlock = rung === 0
-            ? `Attach ${exports.RUNG1_MIN_FEEDBACK - agg.feedback} more rig.feedback() verdicts ` +
-                `(${agg.feedback}/${exports.RUNG1_MIN_FEEDBACK}) to reach rung 1 — human-verdict confidence ` +
+            ? `Attach ${exports.RUNG1_MIN_GRADES - agg.grades} more rig.grade() grades ` +
+                `(${agg.grades}/${exports.RUNG1_MIN_GRADES}) to reach rung 1 — judged confidence ` +
                 "for routes without a schema to conform to."
             : "Rung 2 (LLM judges — value accuracy beyond mechanical conformance) arrives in Phase 5.";
         return {
@@ -87,7 +100,7 @@ function computeCoverage(rows, feedback) {
             conformRate: agg.samples === 0 ? 0 : agg.conform / agg.samples,
             repairRate: agg.samples === 0 ? 0 : agg.repaired / agg.samples,
             refusalRate: agg.samples === 0 ? 0 : agg.refused / agg.samples,
-            feedbackCount: agg.feedback,
+            gradeCount: agg.grades,
             rung,
             nextRungUnlock,
         };

package/dist/feedback/grade.d.ts

@@ -0,0 +1,58 @@
+/**
+ * rig.grade() — the unified judgment primitive (grade primitive, R1).
+ *
+ * A grade attaches a judgment to a SUBJECT (an inference / run / artifact):
+ * `{ score: 0–1 (primitive), scale?, comment?, kind, grader?, source? }`. The
+ * pass/fail VERDICT is DERIVED at read time (`pass = score >= threshold`), never
+ * stored. `rig.grade` writes one local `grades` row (synchronous SQLite insert,
+ * fire-and-forget); the exporter mirrors it to the cloud.
+ *
+ * `rig.grade` is the SOLE judgment write API. The temporary GP-1 compat wrappers
+ * (`rig.feedback` / `artifact.evaluate` / `run.evaluate`) and their adapters were
+ * removed in GP-3 — every judgment now builds a grade directly.
+ */
+import type { GradeCriterion, GradeRow, GradeSubject } from "../types/telemetry";
+/** Options for `rig.grade(subject, opts)`. `score` is the 0–1 primitive and is
+ * required; everything else is optional display / provenance. */
+export interface GradeOpts {
+    /** 0–1 primitive (always present). up/pass = 1.0, down/fail = 0.0, else graded. */
+    readonly score: number;
+    /** Optional DISPLAY scale — `{ max }` (e.g. out of 100) or `{ label }` (e.g. "B+").
+     * Never changes the derived verdict, which is a threshold on `score`. */
+    readonly scale?: {
+        readonly max: number;
+    } | {
+        readonly label: string;
+    };
+    /** Written guidance saved for a later improvement path (was note/explanation). */
+    readonly comment?: string;
+    readonly kind: "human" | "model-judge" | "deterministic";
+    /** Optional specific grader name (e.g. "gpt-5-judge", "schema-check"). */
+    readonly grader?: string;
+    /** Provenance (e.g. "sdk", "console", a review-agent name). */
+    readonly source?: string;
+    /** OPTIONAL per-criterion breakdown (call-qa F4). When present on a human
+     * grade it rides the wire to the server, which persists it to `grade_criteria`
+     * (kind=human) so per-criterion agreement can pair the human vs model
+     * scorecards. Absent ⇒ today's single-score grade, unchanged. The server owns
+     * the scrub + dedup/drop-empty-id/clamp guard at persist; this is carried
+     * verbatim. */
+    readonly criteria?: readonly GradeCriterion[];
+    /** The grade's own org — server-supplied ONLY, already authorized (T3). Omit
+     * from application code (a rig has one org and the exporter knows it). */
+    readonly orgId?: string;
+    /** Authenticated user who recorded it — same provenance rule as `orgId`. */
+    readonly createdBy?: string | null;
+}
+/** Build a GradeRow from a subject + opts. Validates the score bound (the one
+ * primitive — a judgment with no numeric score has no place in the grade model). */
+export declare function buildGradeRow(subject: GradeSubject, opts: GradeOpts): GradeRow;
+/** Build the rig's `grade` surface over a grade writer (the telemetry store).
+ * Kept here (not inlined in index.ts) so the SDK entrypoint stays under the LOC
+ * cap and the grade write surface lives with the primitive. */
+export declare function makeGradeApi(store: {
+    recordGrade(row: GradeRow): void;
+}): {
+    grade(subject: GradeSubject, opts: GradeOpts): GradeRow;
+};
+//# sourceMappingURL=grade.d.ts.map

package/dist/feedback/grade.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"grade.d.ts","sourceRoot":"","sources":["../../src/feedback/grade.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAGH,OAAO,KAAK,EAAE,cAAc,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAEjF;iEACiE;AACjE,MAAM,WAAW,SAAS;IACxB,mFAAmF;IACnF,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB;6EACyE;IACzE,QAAQ,CAAC,KAAK,CAAC,EAAE;QAAE,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;KAAE,GAAG;QAAE,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;IACvE,kFAAkF;IAClF,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,IAAI,EAAE,OAAO,GAAG,aAAa,GAAG,eAAe,CAAC;IACzD,0EAA0E;IAC1E,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,+DAA+D;IAC/D,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB;;;;;mBAKe;IACf,QAAQ,CAAC,QAAQ,CAAC,EAAE,SAAS,cAAc,EAAE,CAAC;IAC9C;8EAC0E;IAC1E,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,4EAA4E;IAC5E,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACpC;AAQD;oFACoF;AACpF,wBAAgB,aAAa,CAAC,OAAO,EAAE,YAAY,EAAE,IAAI,EAAE,SAAS,GAAG,QAAQ,CA2B9E;AAED;;+DAE+D;AAC/D,wBAAgB,YAAY,CAAC,KAAK,EAAE;IAAE,WAAW,CAAC,GAAG,EAAE,QAAQ,GAAG,IAAI,CAAA;CAAE,GAAG;IACzE,KAAK,CAAC,OAAO,EAAE,YAAY,EAAE,IAAI,EAAE,SAAS,GAAG,QAAQ,CAAC;CACzD,CAQA"}

package/dist/feedback/grade.js

@@ -0,0 +1,67 @@
+"use strict";
+/**
+ * rig.grade() — the unified judgment primitive (grade primitive, R1).
+ *
+ * A grade attaches a judgment to a SUBJECT (an inference / run / artifact):
+ * `{ score: 0–1 (primitive), scale?, comment?, kind, grader?, source? }`. The
+ * pass/fail VERDICT is DERIVED at read time (`pass = score >= threshold`), never
+ * stored. `rig.grade` writes one local `grades` row (synchronous SQLite insert,
+ * fire-and-forget); the exporter mirrors it to the cloud.
+ *
+ * `rig.grade` is the SOLE judgment write API. The temporary GP-1 compat wrappers
+ * (`rig.feedback` / `artifact.evaluate` / `run.evaluate`) and their adapters were
+ * removed in GP-3 — every judgment now builds a grade directly.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.buildGradeRow = buildGradeRow;
+exports.makeGradeApi = makeGradeApi;
+const node_crypto_1 = require("node:crypto");
+function scaleFields(scale) {
+    if (scale === undefined)
+        return { scaleMax: null, scaleLabel: null };
+    if ("max" in scale)
+        return { scaleMax: scale.max, scaleLabel: null };
+    return { scaleMax: null, scaleLabel: scale.label };
+}
+/** Build a GradeRow from a subject + opts. Validates the score bound (the one
+ * primitive — a judgment with no numeric score has no place in the grade model). */
+function buildGradeRow(subject, opts) {
+    if (subject.id === "") {
+        throw new Error("grade subject must have a non-empty id");
+    }
+    if (!Number.isFinite(opts.score) || opts.score < 0 || opts.score > 1) {
+        throw new Error(`grade score must be in [0, 1], got ${opts.score}`);
+    }
+    const { scaleMax, scaleLabel } = scaleFields(opts.scale);
+    return {
+        id: (0, node_crypto_1.randomUUID)(),
+        subjectKind: subject.kind,
+        subjectId: subject.id,
+        score: opts.score,
+        scaleMax,
+        scaleLabel,
+        comment: opts.comment ?? null,
+        kind: opts.kind,
+        grader: opts.grader ?? null,
+        source: opts.source ?? null,
+        orgId: opts.orgId !== undefined && opts.orgId !== "" ? opts.orgId : null,
+        createdBy: opts.createdBy ?? null,
+        ts: new Date().toISOString(),
+        // F4: carry the per-criterion breakdown verbatim iff present (spread-iff so
+        // a single-score grade's row is byte-identical to pre-F4). Structural
+        // normalization (dedup/clamp/scrub) is the server's job at persist.
+        ...(opts.criteria !== undefined ? { criteria: opts.criteria } : {}),
+    };
+}
+/** Build the rig's `grade` surface over a grade writer (the telemetry store).
+ * Kept here (not inlined in index.ts) so the SDK entrypoint stays under the LOC
+ * cap and the grade write surface lives with the primitive. */
+function makeGradeApi(store) {
+    return {
+        grade(subject, opts) {
+            const row = buildGradeRow(subject, opts);
+            store.recordGrade(row);
+            return row;
+        },
+    };
+}

package/dist/gateway/http-protocol.d.ts

@@ -42,7 +42,7 @@ export declare const MODELRIG_HEADERS: {
     /** "provider/model" that repaired the output, when repair fired. */
     readonly repairedBy: "x-modelrig-repaired-by";
     readonly costUsd: "x-modelrig-cost-usd";
-    /** The `rig.feedback()` handle (telemetry inference id). */
+    /** The `rig.grade()` inference handle (telemetry inference id). */
     readonly inferenceId: "x-modelrig-inference-id";
 };
 export declare const MODELRIG_REQUEST_HEADERS: {
@@ -114,6 +114,25 @@ export interface ChatCompletionRequest {
         readonly envelope?: string;
         readonly variant?: string;
         readonly stream?: "buffered";
+        /**
+         * K1b (managed-serving-keyless) — the FAITHFUL carrier for a TEMPLATED /
+         * NON-CHAT route's named template variables. A provider-neutral JSON object
+         * of the route's `{{variable}}` bindings, DISTINCT from OpenAI `messages`:
+         * `messages` is the chat-relay bridge (the server derives `message`/`messages`
+         * from it), whereas `input` carries the route's OWN declared variables
+         * verbatim (e.g. a report route's structured `{ topic, holdings, … }`), so the
+         * server renders the route template exactly as a local `rig.run` would — no
+         * lossy messages round-trip.
+         *
+         * PRECEDENCE (server bind): when present, `modelrig.input` WINS — the run's
+         * `input` is these named variables; the chat `messages` binding is the
+         * fallback used only when it is absent. The server validates the object shape
+         * fail-closed (a non-object, or a prototype-polluting key, is a teaching 422)
+         * — a request that cannot be faithfully served is refused, never served with
+         * a silently-wrong prompt. ADDITIVE: a chat request that omits it is
+         * byte-identical to the K1 wire.
+         */
+        readonly input?: Readonly<Record<string, unknown>>;
     };
 }
 export interface ChatCompletionUsage {

package/dist/gateway/http-protocol.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"http-protocol.d.ts","sourceRoot":"","sources":["../../src/gateway/http-protocol.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAGH,OAAO,KAAK,EAAE,QAAQ,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAE9E,uCAAuC;AACvC,eAAO,MAAM,qBAAqB,yBAAyB,CAAC;AAC5D,2EAA2E;AAC3E,eAAO,MAAM,WAAW,eAAe,CAAC;AAExC,6DAA6D;AAC7D,eAAO,MAAM,wBAAwB,IAAI,CAAC;AAO1C,eAAO,MAAM,gBAAgB;IAC3B,0EAA0E;;IAE1E;;;;eAIW;;;;IAIX,yEAAyE;;IAEzE,oEAAoE;;;IAGpE,4DAA4D;;CAEpD,CAAC;AAGX,eAAO,MAAM,wBAAwB;IACnC,qCAAqC;;IAErC,oCAAoC;;IAEpC,8EAA8E;;CAEtE,CAAC;AAEX,MAAM,MAAM,IAAI,GAAG,MAAM,GAAG,KAAK,CAAC;AAElC,4EAA4E;AAC5E,MAAM,MAAM,cAAc,GACtB;IAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAChD;IAAE,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAC;IAAC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GAC3E;IAAE,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAE1D;;;;;;;;;;GAUG;AACH,wBAAgB,YAAY,CAC1B,KAAK,EAAE,MAAM,EACb,eAAe,GAAE,WAAW,CAAC,MAAM,CAAa,GAC/C,cAAc,CA6BhB;AAID,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,IAAI,EAAE,QAAQ,GAAG,MAAM,GAAG,WAAW,GAAG,MAAM,CAAC;IACxD,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,0EAA0E;IAC1E,QAAQ,CAAC,UAAU,CAAC,EAAE,SAAS,QAAQ,EAAE,CAAC;IAC1C,0DAA0D;IAC1D,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,QAAQ,EAAE,SAAS,WAAW,EAAE,CAAC;IAC1C,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,KAAK,CAAC,EAAE,SAAS,cAAc,EAAE,CAAC;IAC3C,QAAQ,CAAC,WAAW,CAAC,EAAE,UAAU,CAAC;IAClC,4EAA4E;IAC5E,QAAQ,CAAC,eAAe,CAAC,EACrB;QAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;KAAE,GACzB;QAAE,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAA;KAAE,GAChC;QACE,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAC;QAC7B,QAAQ,CAAC,WAAW,EAAE;YAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;YAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;YAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,CAAA;SAAE,CAAC;KACrG,CAAC;IACN,wEAAwE;IACxE,QAAQ,CAAC,QAAQ,CAAC,EAAE;QAClB,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;QAC3B,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;QAC1B,QAAQ,CAAC,MAAM,CAAC,EAAE,UAAU,CAAC;KAC9B,CAAC;CACH;AAID,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;IACnC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;CAC/B;AAED,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,OAAO,EAAE;QAChB,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC;QAC3B,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;QAChC,QAAQ,CAAC,UAAU,CAAC,EAAE,SAAS,QAAQ,EAAE,CAAC;KAC3C,CAAC;IACF,QAAQ,CAAC,aAAa,EAAE,MAAM,GAAG,QAAQ,GAAG,YAAY,GAAG,gBAAgB,GAAG,IAAI,CAAC;CACpF;AAED,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,MAAM,EAAE,iBAAiB,CAAC;IACnC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,OAAO,EAAE,SAAS,oBAAoB,EAAE,CAAC;IAClD,QAAQ,CAAC,KAAK,EAAE,mBAAmB,CAAC;CACrC;AAID,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,KAAK,EAAE;QACd,QAAQ,CAAC,IAAI,CAAC,EAAE,WAAW,CAAC;QAC5B,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QACjC,QAAQ,CAAC,UAAU,CAAC,EAAE,SAAS,QAAQ,EAAE,CAAC;KAC3C,CAAC;IACF,QAAQ,CAAC,aAAa,EAAE,oBAAoB,CAAC,eAAe,CAAC,CAAC;CAC/D;AAED,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,MAAM,EAAE,uBAAuB,CAAC;IACzC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,OAAO,EAAE,SAAS,yBAAyB,EAAE,CAAC;CACxD;AAED;;;;;;GAMG;AACH,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,MAAM,EAAE,qBAAqB,CAAC;IACvC,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;IAC5B,2DAA2D;IAC3D,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;IACzB,QAAQ,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,MAAM,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CACrC;AAED,gEAAgE;AAChE,eAAO,MAAM,QAAQ,WAAW,CAAC"}
+{"version":3,"file":"http-protocol.d.ts","sourceRoot":"","sources":["../../src/gateway/http-protocol.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAGH,OAAO,KAAK,EAAE,QAAQ,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAE9E,uCAAuC;AACvC,eAAO,MAAM,qBAAqB,yBAAyB,CAAC;AAC5D,2EAA2E;AAC3E,eAAO,MAAM,WAAW,eAAe,CAAC;AAExC,6DAA6D;AAC7D,eAAO,MAAM,wBAAwB,IAAI,CAAC;AAO1C,eAAO,MAAM,gBAAgB;IAC3B,0EAA0E;;IAE1E;;;;eAIW;;;;IAIX,yEAAyE;;IAEzE,oEAAoE;;;IAGpE,mEAAmE;;CAE3D,CAAC;AAGX,eAAO,MAAM,wBAAwB;IACnC,qCAAqC;;IAErC,oCAAoC;;IAEpC,8EAA8E;;CAEtE,CAAC;AAEX,MAAM,MAAM,IAAI,GAAG,MAAM,GAAG,KAAK,CAAC;AAElC,4EAA4E;AAC5E,MAAM,MAAM,cAAc,GACtB;IAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAChD;IAAE,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAC;IAAC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GAC3E;IAAE,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAE1D;;;;;;;;;;GAUG;AACH,wBAAgB,YAAY,CAC1B,KAAK,EAAE,MAAM,EACb,eAAe,GAAE,WAAW,CAAC,MAAM,CAAa,GAC/C,cAAc,CA6BhB;AAID,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,IAAI,EAAE,QAAQ,GAAG,MAAM,GAAG,WAAW,GAAG,MAAM,CAAC;IACxD,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,0EAA0E;IAC1E,QAAQ,CAAC,UAAU,CAAC,EAAE,SAAS,QAAQ,EAAE,CAAC;IAC1C,0DAA0D;IAC1D,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,QAAQ,EAAE,SAAS,WAAW,EAAE,CAAC;IAC1C,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,KAAK,CAAC,EAAE,SAAS,cAAc,EAAE,CAAC;IAC3C,QAAQ,CAAC,WAAW,CAAC,EAAE,UAAU,CAAC;IAClC,4EAA4E;IAC5E,QAAQ,CAAC,eAAe,CAAC,EACrB;QAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;KAAE,GACzB;QAAE,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAA;KAAE,GAChC;QACE,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAC;QAC7B,QAAQ,CAAC,WAAW,EAAE;YAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;YAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;YAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,CAAA;SAAE,CAAC;KACrG,CAAC;IACN,wEAAwE;IACxE,QAAQ,CAAC,QAAQ,CAAC,EAAE;QAClB,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;QAC3B,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;QAC1B,QAAQ,CAAC,MAAM,CAAC,EAAE,UAAU,CAAC;QAC7B;;;;;;;;;;;;;;;;;WAiBG;QACH,QAAQ,CAAC,KAAK,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;KACpD,CAAC;CACH;AAID,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;IACnC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;CAC/B;AAED,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,OAAO,EAAE;QAChB,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC;QAC3B,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;QAChC,QAAQ,CAAC,UAAU,CAAC,EAAE,SAAS,QAAQ,EAAE,CAAC;KAC3C,CAAC;IACF,QAAQ,CAAC,aAAa,EAAE,MAAM,GAAG,QAAQ,GAAG,YAAY,GAAG,gBAAgB,GAAG,IAAI,CAAC;CACpF;AAED,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,MAAM,EAAE,iBAAiB,CAAC;IACnC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,OAAO,EAAE,SAAS,oBAAoB,EAAE,CAAC;IAClD,QAAQ,CAAC,KAAK,EAAE,mBAAmB,CAAC;CACrC;AAID,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,KAAK,EAAE;QACd,QAAQ,CAAC,IAAI,CAAC,EAAE,WAAW,CAAC;QAC5B,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QACjC,QAAQ,CAAC,UAAU,CAAC,EAAE,SAAS,QAAQ,EAAE,CAAC;KAC3C,CAAC;IACF,QAAQ,CAAC,aAAa,EAAE,oBAAoB,CAAC,eAAe,CAAC,CAAC;CAC/D;AAED,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,MAAM,EAAE,uBAAuB,CAAC;IACzC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,OAAO,EAAE,SAAS,yBAAyB,EAAE,CAAC;CACxD;AAED;;;;;;GAMG;AACH,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,MAAM,EAAE,qBAAqB,CAAC;IACvC,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;IAC5B,2DAA2D;IAC3D,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;IACzB,QAAQ,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,MAAM,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CACrC;AAED,gEAAgE;AAChE,eAAO,MAAM,QAAQ,WAAW,CAAC"}

package/dist/gateway/http-protocol.js

@@ -51,7 +51,7 @@ exports.MODELRIG_HEADERS = {
     /** "provider/model" that repaired the output, when repair fired. */
     repairedBy: "x-modelrig-repaired-by",
     costUsd: "x-modelrig-cost-usd",
-    /** The `rig.feedback()` handle (telemetry inference id). */
+    /** The `rig.grade()` inference handle (telemetry inference id). */
     inferenceId: "x-modelrig-inference-id",
 };
 // Request-side extension headers (spec §3.4).

package/dist/gateway/serve-client.d.ts

@@ -0,0 +1,99 @@
+/**
+ * K1 (managed-serving-keyless §2/§3) — the SDK-side KEYLESS serving transport.
+ *
+ * This is the client half of `destination: modelrig-served`: instead of the
+ * local adapter dispatch, a served run is POSTed to the HOSTED gateway's
+ * `POST /v1/chat/completions` (the org's mirrored bundle, resolved BY SLUG and
+ * driven server-side through `runBundle` — see modelrig-server
+ * `handleMirroredSlugLane`). The gateway spends ModelRig's OWN managed provider
+ * key; the SDK sends ONLY its `rig_sk_` control-plane key (Bearer), NEVER a
+ * provider key.
+ *
+ * ONE wire contract: everything here is expressed in the SHARED
+ * `gateway/http-protocol.ts` shapes (`CHAT_COMPLETIONS_PATH`,
+ * `ChatCompletionRequest`, `ChatCompletionResponse`, `MODELRIG_HEADERS`,
+ * `MODELRIG_REQUEST_HEADERS`) — the same module `modelrig-server` compiles
+ * against, so the request this produces is exactly the one the endpoint
+ * consumes and the response it parses is exactly the one the endpoint emits.
+ *
+ * FAIL-CLOSED-BUT-DISCOVERABLE (spec §3 K1, ruling R3): a transport error, a
+ * non-2xx, a 402 (no prepaid balance), or a 403 (no serve entitlement) throws a
+ * TEACHING `RigFailureError` (class `invariant_violation`, TERMINAL) whose
+ * `fixHint` names the cause and the fix — NEVER a silent fall back to `direct`
+ * or a local key. `fetch` is injected (`fetchFn`) so tests mock the transport
+ * with no live network and no real key.
+ *
+ * TRANSPORT + MAPPING ONLY. The flag/capability gate + the run.ts branch point
+ * live in `run/resolve-destination.ts` / `run/run.ts`; this module is reached
+ * only AFTER the guard has passed.
+ */
+import type { ChatMessage } from "./http-protocol";
+import type { RouteBundle, RunOptions, RunResult } from "../types/route";
+/** Injected transport — the global `fetch` in production, a mock in tests. */
+export type ServeFetch = typeof fetch;
+/**
+ * Where + how to reach the hosted gateway. Resolved (in `index.ts`) from the
+ * SAME `api`-mode export config the telemetry sink uses: `baseUrl` is the ingest
+ * host (`MODELRIG_INGEST_URL` ‖ `DEFAULT_INGEST_URL`) and `apiKey` is the
+ * `rig_sk_` key. ABSENT ⇒ no hosted control plane is configured ⇒ a served run
+ * fails closed (there is nowhere to serve it, and we never invent a key).
+ */
+export interface ServeTransportConfig {
+    /** Ingest host base, e.g. `https://api.modelrig.ai` (no path). */
+    readonly baseUrl: string;
+    /** `rig_sk_…` control-plane key. The ONLY credential sent — never a provider key. */
+    readonly apiKey: string;
+}
+export interface ServeRunInput {
+    readonly route: RouteBundle;
+    readonly opts: RunOptions;
+    /** The resolved variant name (Phase 3 WS1) — served via `x-modelrig-variant`. */
+    readonly servedVariant: string | null;
+    /** Resolved transport; `undefined` ⇒ fail closed (no hosted control plane). */
+    readonly serve: ServeTransportConfig | undefined;
+    /** Injected fetch (tests); defaults to the global `fetch`. */
+    readonly fetchFn?: ServeFetch;
+}
+/**
+ * Is this run's `input` a CHAT-SHAPED input — the shape the OpenAI `messages`
+ * bridge carries faithfully (`input.messages` a transcript, or `input.message` a
+ * single user turn)? A route authored for the OpenAI-compatible surface declares
+ * exactly these variables (PROXY_RELAYED_VARS, server-side). Anything else is a
+ * NAMED-variable input carried by `modelrig.input` (K1b) instead.
+ */
+export declare function isChatShapedInput(input: RunOptions["input"]): boolean;
+/**
+ * Map the run's CHAT-shaped `input` into OpenAI `messages` — the chat-relay
+ * bridge (the server rebuilds `message`/`messages` from it). Faithful for a
+ * chat-shaped route:
+ *   - `input.messages` (an array of `{role, content}`) → the transcript verbatim;
+ *   - else `input.message` (a string)                  → a single user turn.
+ *
+ * K1b: a route that templates over OTHER named variables is NO LONGER fails-closed
+ * here — `serveViaGateway` carries those faithfully via `modelrig.input`
+ * (`buildServedNamedInput`). This function is reached only for a chat-shaped
+ * input, so the final fail-closed branch stays as a defensive teaching error for
+ * a caller who invokes it directly on a non-chat input.
+ */
+export declare function buildServedMessages(route: RouteBundle, input: RunOptions["input"]): readonly ChatMessage[];
+/**
+ * K1b — carry a NAMED-variable route's `input` faithfully as `modelrig.input`,
+ * INSTEAD of the K1 fail-closed. A templated/non-chat route (an InferWealth
+ * report route, say) declares structured variables (`{ topic, holdings, … }`),
+ * not `message`/`messages`; this is the provider-neutral object the server binds
+ * so the route template renders exactly as a local `rig.run` would.
+ *
+ * Still fail-closed-but-discoverable (K1's guarantee preserved): the only reason
+ * to refuse now is a genuinely UN-SERIALIZABLE input — one JSON cannot carry
+ * losslessly, which would degrade to a silently-wrong prompt server-side.
+ * `assertJsonFaithful` names the exact offending value; we wrap it as a teaching
+ * error, never a silent drop.
+ */
+export declare function buildServedNamedInput(route: RouteBundle, input: RunOptions["input"]): Readonly<Record<string, unknown>>;
+/**
+ * Serve a run through the hosted gateway and map the completion back into a
+ * normal `RunResult`. Reached only after `assertDestinationServable` has passed
+ * (flag on + served-capable provider). Fail-closed-but-discoverable throughout.
+ */
+export declare function serveViaGateway(input: ServeRunInput): Promise<RunResult>;
+//# sourceMappingURL=serve-client.d.ts.map

package/dist/gateway/serve-client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"serve-client.d.ts","sourceRoot":"","sources":["../../src/gateway/serve-client.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AAOH,OAAO,KAAK,EAGV,WAAW,EACZ,MAAM,iBAAiB,CAAC;AAIzB,OAAO,KAAK,EAAE,WAAW,EAAW,UAAU,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAElF,8EAA8E;AAC9E,MAAM,MAAM,UAAU,GAAG,OAAO,KAAK,CAAC;AAEtC;;;;;;GAMG;AACH,MAAM,WAAW,oBAAoB;IACnC,kEAAkE;IAClE,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,qFAAqF;IACrF,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,KAAK,EAAE,WAAW,CAAC;IAC5B,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;IAC1B,iFAAiF;IACjF,QAAQ,CAAC,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IACtC,+EAA+E;IAC/E,QAAQ,CAAC,KAAK,EAAE,oBAAoB,GAAG,SAAS,CAAC;IACjD,8DAA8D;IAC9D,QAAQ,CAAC,OAAO,CAAC,EAAE,UAAU,CAAC;CAC/B;AAMD;;;;;;GAMG;AACH,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,UAAU,CAAC,OAAO,CAAC,GAAG,OAAO,CAErE;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,WAAW,EAAE,KAAK,EAAE,UAAU,CAAC,OAAO,CAAC,GAAG,SAAS,WAAW,EAAE,CAoC1G;AAsDD;;;;;;;;;;;;GAYG;AACH,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,WAAW,EAAE,KAAK,EAAE,UAAU,CAAC,OAAO,CAAC,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAYvH;AA2FD;;;;GAIG;AACH,wBAAsB,eAAe,CAAC,KAAK,EAAE,aAAa,GAAG,OAAO,CAAC,SAAS,CAAC,CA0F9E"}