modelrig 0.8.1 → 0.9.0

package/dist/status.js

@@ -33,46 +33,63 @@ function exportModeOf(config) {
     return config.export?.mode ?? "local-only";
 }
 /**
- * The artifact-namespace posture as a boolean + a reason, derivable from config
- * ALONE (so both the banner and `/status` agree). The four cases the §2 flip
- * creates, each named honestly:
- *   on  + control plane → the default is now on (a sink exists to ship to)
- *   on  + local-only    → an explicit MODELRIG_ARTIFACTS opt-in
- *   off + control plane → an explicit MODELRIG_ARTIFACTS=0 opt-out
- *   off + local-only    → nothing to ship to; off is the local-only default
+ * The artifact-namespace posture as a boolean + a reason (P15 CP-3). The on/off
+ * SOURCE is the ORG's account posture (`artifact_posture`), resolved from the
+ * control plane — never an env var. The cases, each named honestly:
+ *   control plane, posture off      → capture off — your account settings
+ *   control plane, posture managed/metadata → capture on — your account settings
+ *   control plane, posture resolving (null) → capture on — account settings (resolving)
+ *   local-only, dev force-on        → MODELRIG_ARTIFACTS=1 (dev-only, local rig)
+ *   local-only, off                 → nothing to ship to; off is the local default
+ * `posture` is the resolver's current value (null until the first run resolves
+ * it, or always null for local-only / hand-built configs).
  */
-function artifactsPosture(config) {
-    const enabled = config.artifacts?.enabled === true;
+function artifactsPosture(config, posture = null) {
     const localOnly = exportModeOf(config) === "local-only";
-    if (enabled) {
+    if (localOnly) {
+        const enabled = config.artifacts?.enabled === true;
         return {
             enabled,
-            reason: localOnly ? "MODELRIG_ARTIFACTS opt-in (local-only rig)" : "control plane configured",
+            reason: enabled
+                ? "MODELRIG_ARTIFACTS=1 (dev-only, local rig)"
+                : "local-only rig — no control plane to ship to",
         };
     }
-    return {
-        enabled,
-        reason: localOnly ? "local-only rig — no control plane to ship to" : "MODELRIG_ARTIFACTS=0 opt-out",
-    };
+    // Control plane configured: the org account posture (P15) governs on/off.
+    if (posture === "off") {
+        return { enabled: false, reason: "capture off — your account settings (posture: off)" };
+    }
+    const src = posture === null ? "your account settings (resolving)" : `your account settings (posture: ${posture})`;
+    return { enabled: true, reason: `capture on — ${src}` };
+}
+/** Whether content is EFFECTIVELY stored: content transport configured AND the
+ * org posture is not one that suppresses content (P15). posture `off`/`metadata`
+ * → the server stores no content, so report it off honestly; `managed`/resolving
+ * with content configured → on (attempted; the server is the gate). */
+function contentCustodyOn(config, posture) {
+    if (config.artifacts?.content === undefined)
+        return false;
+    return posture !== "off" && posture !== "metadata";
 }
-/** Build the full status snapshot from config + the resolver's per-task cache,
- * plus (GS-1) an optional runs-recorded summary read from the local buffer. */
-function buildRigStatus(config, tasks = new Map(), runs) {
+/** Build the full status snapshot from config + the resolver's per-task cache and
+ * org posture (P15), plus (GS-1) an optional runs-recorded summary from the buffer. */
+function buildRigStatus(config, tasks = new Map(), runs, posture = null) {
     return {
         exportMode: exportModeOf(config),
-        artifacts: artifactsPosture(config),
-        contentCustody: config.artifacts?.content !== undefined,
+        artifacts: artifactsPosture(config, posture),
+        contentCustody: contentCustodyOn(config, posture),
         otlp: config.otlp ? "configured" : "disabled",
         cache: cachePosture(),
         tasks: [...tasks].map(([task, s]) => ({ task, ...s })),
         ...(runs != null ? { runs } : {}),
     };
 }
-/** The one-line boot banner (§2). Concise on purpose — mode, artifacts (+why),
- * content, otlp. */
-function formatBootBanner(config) {
-    const a = artifactsPosture(config);
-    const content = config.artifacts?.content !== undefined ? "on" : "off";
+/** The one-line boot banner (§2 + P15). Concise on purpose — mode, artifacts
+ * (+source), content, otlp. `posture` is null at boot (resolves on the first run),
+ * so the banner names the SOURCE (account settings) rather than a stale value. */
+function formatBootBanner(config, posture = null) {
+    const a = artifactsPosture(config, posture);
+    const content = contentCustodyOn(config, posture) ? "on" : "off";
     const otlp = config.otlp ? "on" : "off";
     return (`[modelrig] telemetry: ${exportModeOf(config)} · ` +
         `artifacts: ${a.enabled ? "on" : "off"} (${a.reason}) · ` +
@@ -80,10 +97,11 @@ function formatBootBanner(config) {
 }
 /**
  * Emit the boot banner to stderr — ONCE at rig construction, and ONLY when a
- * control plane is configured (the case where the §2 default flip is in effect
- * and the posture is non-obvious). A pure local-only rig with artifacts off is
- * the boring, expected default and stays silent (no banner noise in tests or
- * embedders). Stderr, so it never pollutes a command's stdout.
+ * control plane is configured (the case where capture is on by default and the
+ * posture — resolved from account settings — is non-obvious). A pure local-only
+ * rig with artifacts off is the boring, expected default and stays silent (no
+ * banner noise in tests or embedders). Stderr, so it never pollutes stdout.
+ * Posture is null at boot; the banner names its source (account settings).
  */
 function emitBootBanner(config) {
     if (config.export === undefined)

package/dist/telemetry/artifact-store.d.ts

@@ -9,11 +9,14 @@
  * a sha256 of bytes hashed-then-discarded. Rows are immutable facts: INSERT OR
  * IGNORE, read past a rowid watermark exactly like inferences.
  */
-import type { ArtifactEdgeRow, ArtifactEvaluationRow, ArtifactRow, EvalCaseRow } from "../types/telemetry";
+import type { ArtifactEdgeRow, ArtifactRow, EvalCaseRow, GradeRow } from "../types/telemetry";
 export interface ArtifactStore {
     recordArtifact(row: ArtifactRow): void;
     recordArtifactEdge(row: ArtifactEdgeRow): void;
-    recordArtifactEvaluation(row: ArtifactEvaluationRow): void;
+    /** Record a unified judgment (grade primitive, R1) — the canonical write path
+     * for a grade on an artifact/run subject, which transacts on THIS handle.
+     * Writes the shared local `grades` table (read/exported by the telemetry handle). */
+    recordGrade(row: GradeRow): void;
     /** Record a promoted eval case (E4 chunk A) — rides the `:eval_cases` export
      * stream to the control plane, exactly like the other artifact-graph rows. */
     recordEvalCase(row: EvalCaseRow): void;
@@ -25,10 +28,6 @@ export interface ArtifactStore {
         rowid: number;
         row: ArtifactEdgeRow;
     }>;
-    readEvaluationsAfter(afterRowid: number, limit: number): Array<{
-        rowid: number;
-        row: ArtifactEvaluationRow;
-    }>;
     readEvalCasesAfter(afterRowid: number, limit: number): Array<{
         rowid: number;
         row: EvalCaseRow;

package/dist/telemetry/artifact-store.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"artifact-store.d.ts","sourceRoot":"","sources":["../../src/telemetry/artifact-store.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAKH,OAAO,KAAK,EACV,eAAe,EACf,qBAAqB,EACrB,WAAW,EACX,WAAW,EACZ,MAAM,oBAAoB,CAAC;AAE5B,MAAM,WAAW,aAAa;IAC5B,cAAc,CAAC,GAAG,EAAE,WAAW,GAAG,IAAI,CAAC;IACvC,kBAAkB,CAAC,GAAG,EAAE,eAAe,GAAG,IAAI,CAAC;IAC/C,wBAAwB,CAAC,GAAG,EAAE,qBAAqB,GAAG,IAAI,CAAC;IAC3D;kFAC8E;IAC9E,cAAc,CAAC,GAAG,EAAE,WAAW,GAAG,IAAI,CAAC;IACvC,kBAAkB,CAAC,UAAU,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,KAAK,CAAC;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,WAAW,CAAA;KAAE,CAAC,CAAC;IAClG,cAAc,CAAC,UAAU,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,KAAK,CAAC;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,eAAe,CAAA;KAAE,CAAC,CAAC;IAClG,oBAAoB,CAClB,UAAU,EAAE,MAAM,EAClB,KAAK,EAAE,MAAM,GACZ,KAAK,CAAC;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,qBAAqB,CAAA;KAAE,CAAC,CAAC;IACxD,kBAAkB,CAAC,UAAU,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,KAAK,CAAC;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,WAAW,CAAA;KAAE,CAAC,CAAC;IAClG,gFAAgF;IAChF,mBAAmB,CAAC,IAAI,EAAE,MAAM,GAAG,WAAW,EAAE,CAAC;IACjD;gEAC4D;IAC5D,eAAe,CAAC,EAAE,EAAE,MAAM,GAAG,WAAW,GAAG,IAAI,CAAC;IAChD;;oFAEgF;IAChF,KAAK,CAAC,CAAC,EAAE,EAAE,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC;IACzB,KAAK,IAAI,IAAI,CAAC;CACf;AAwED,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,MAAM,GAAG,aAAa,CAwH/D"}
+{"version":3,"file":"artifact-store.d.ts","sourceRoot":"","sources":["../../src/telemetry/artifact-store.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAKH,OAAO,KAAK,EACV,eAAe,EACf,WAAW,EACX,WAAW,EACX,QAAQ,EACT,MAAM,oBAAoB,CAAC;AAQ5B,MAAM,WAAW,aAAa;IAC5B,cAAc,CAAC,GAAG,EAAE,WAAW,GAAG,IAAI,CAAC;IACvC,kBAAkB,CAAC,GAAG,EAAE,eAAe,GAAG,IAAI,CAAC;IAC/C;;yFAEqF;IACrF,WAAW,CAAC,GAAG,EAAE,QAAQ,GAAG,IAAI,CAAC;IACjC;kFAC8E;IAC9E,cAAc,CAAC,GAAG,EAAE,WAAW,GAAG,IAAI,CAAC;IACvC,kBAAkB,CAAC,UAAU,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,KAAK,CAAC;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,WAAW,CAAA;KAAE,CAAC,CAAC;IAClG,cAAc,CAAC,UAAU,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,KAAK,CAAC;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,eAAe,CAAA;KAAE,CAAC,CAAC;IAClG,kBAAkB,CAAC,UAAU,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,KAAK,CAAC;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,WAAW,CAAA;KAAE,CAAC,CAAC;IAClG,gFAAgF;IAChF,mBAAmB,CAAC,IAAI,EAAE,MAAM,GAAG,WAAW,EAAE,CAAC;IACjD;gEAC4D;IAC5D,eAAe,CAAC,EAAE,EAAE,MAAM,GAAG,WAAW,GAAG,IAAI,CAAC;IAChD;;oFAEgF;IAChF,KAAK,CAAC,CAAC,EAAE,EAAE,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC;IACzB,KAAK,IAAI,IAAI,CAAC;CACf;AA2DD,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,MAAM,GAAG,aAAa,CAiH/D"}

package/dist/telemetry/artifact-store.js

@@ -18,6 +18,7 @@ exports.openArtifactStore = openArtifactStore;
 const better_sqlite3_1 = __importDefault(require("better-sqlite3"));
 const node_fs_1 = require("node:fs");
 const node_path_1 = require("node:path");
+const grades_sql_1 = require("./grades-sql");
 const ARTIFACTS_SQL = `
 CREATE TABLE IF NOT EXISTS artifacts (
   id TEXT PRIMARY KEY, run_id TEXT, step_key TEXT, attempt_no INTEGER, task TEXT,
@@ -53,14 +54,6 @@ function toArtifact(r) {
 function toEdge(r) {
     return { fromArtifactId: r.from_artifact_id, toArtifactId: r.to_artifact_id, kind: r.kind };
 }
-function toEval(r) {
-    return {
-        id: r.id, artifactId: r.artifact_id, runId: r.run_id, evaluator: r.evaluator,
-        evaluatorKind: r.evaluator_kind,
-        score: r.score, passed: r.passed === null ? null : r.passed !== 0,
-        label: r.label, explanation: r.explanation, createdBy: r.created_by,
-    };
-}
 function toEvalCase(r) {
     return {
         id: r.id, task: r.task, sourceArtifactId: r.source_artifact_id,
@@ -78,6 +71,12 @@ function openArtifactStore(dbPath) {
     // telemetry guarantee; the cloud exporter is the durable copy.
     db.pragma("synchronous = NORMAL");
     db.exec(ARTIFACTS_SQL);
+    // Grade primitive (R1): the unified `grades` table is shared with the telemetry
+    // handle (same file). CREATE IF NOT EXISTS so whichever handle opens first wins;
+    // then backfill this store's evaluations into grades (idempotent, INSERT OR
+    // IGNORE) so pre-grade evaluations still export as grades. Additive.
+    db.exec(grades_sql_1.GRADES_TABLE_SQL);
+    (0, grades_sql_1.backfillGradesFromEvaluations)(db);
     // Additive column for a dev DB that predates E4 (CREATE TABLE IF NOT EXISTS
     // won't add it to an existing table). SQLite has no ADD COLUMN IF NOT EXISTS;
     // a duplicate-column error on re-run is expected and swallowed.
@@ -110,14 +109,11 @@ function openArtifactStore(dbPath) {
       @data_classification, @expires_at, @scrub
     )`);
     const insEdge = db.prepare("INSERT OR IGNORE INTO artifact_edges (from_artifact_id, to_artifact_id, kind) VALUES (@from_artifact_id, @to_artifact_id, @kind)");
-    const insEval = db.prepare(`
-    INSERT OR IGNORE INTO artifact_evaluations (
-      id, artifact_id, run_id, evaluator, evaluator_kind, score, passed, label, explanation, created_by
-    ) VALUES (@id, @artifact_id, @run_id, @evaluator, @evaluator_kind, @score, @passed, @label, @explanation, @created_by)`);
     const insEvalCase = db.prepare(`
     INSERT OR IGNORE INTO eval_cases (
       id, task, source_artifact_id, corrected_artifact_id, origin, note, created_by
     ) VALUES (@id, @task, @source_artifact_id, @corrected_artifact_id, @origin, @note, @created_by)`);
+    const insGrade = (0, grades_sql_1.prepareGradeInsert)(db);
     return {
         recordArtifact(row) {
             insArtifact.run({
@@ -135,13 +131,8 @@ function openArtifactStore(dbPath) {
         recordArtifactEdge(row) {
             insEdge.run({ from_artifact_id: row.fromArtifactId, to_artifact_id: row.toArtifactId, kind: row.kind });
         },
-        recordArtifactEvaluation(row) {
-            insEval.run({
-                id: row.id, artifact_id: row.artifactId, run_id: row.runId, evaluator: row.evaluator,
-                evaluator_kind: row.evaluatorKind, score: row.score,
-                passed: row.passed === null ? null : row.passed ? 1 : 0,
-                label: row.label, explanation: row.explanation, created_by: row.createdBy,
-            });
+        recordGrade(row) {
+            insGrade.run((0, grades_sql_1.gradeBindParams)(row));
         },
         recordEvalCase(row) {
             insEvalCase.run({
@@ -160,11 +151,6 @@ function openArtifactStore(dbPath) {
                 .all(afterRowid, limit);
             return rows.map((r) => ({ rowid: r.__r, row: toEdge(r) }));
         },
-        readEvaluationsAfter(afterRowid, limit) {
-            const rows = db.prepare("SELECT rowid AS __r, * FROM artifact_evaluations WHERE rowid > ? ORDER BY rowid LIMIT ?")
-                .all(afterRowid, limit);
-            return rows.map((r) => ({ rowid: r.__r, row: toEval(r) }));
-        },
         readEvalCasesAfter(afterRowid, limit) {
             const rows = db.prepare("SELECT rowid AS __r, * FROM eval_cases WHERE rowid > ? ORDER BY rowid LIMIT ?")
                 .all(afterRowid, limit);

package/dist/telemetry/attempt-meta.d.ts

@@ -12,6 +12,7 @@
  * enum/identifier/hash (length > 128 or containing whitespace).
  */
 import type { AdapterUsage, ProviderId } from "../types/provider";
+import type { ScreenReceipt } from "../screen/types";
 export type FinishReason = "stop" | "length" | "tool_calls" | "content_filter" | "refusal" | "error" | "other";
 export type ContextBucket = "≤4k" | "≤16k" | "≤64k" | "≤200k" | ">200k";
 /** D1 egress receipt — shape RESERVED here; populated by the D1 mission. */
@@ -67,6 +68,19 @@ export interface AttemptMetaV1 {
     readonly output_hash?: string;
     readonly context_bucket?: ContextBucket;
     readonly egress?: EgressReceiptV1;
+    /** LRE-2: the live A/B experiment arm this call was drawn onto (an identifier —
+     * `provider/model` or a variant/arm name), or absent for a non-experiment call.
+     * The A/B readout groups `inferences` by `meta.arm`. Meta-safe by construction
+     * (an identifier, no whitespace); a non-conforming value is dropped like any. */
+    readonly arm?: string;
+    /** Screening SC-1a receipt (spec §5) — the counts-only screen summary rides
+     * HERE, on `inferences.meta.screen`, so SC-1 adds ZERO migration (§8). Every
+     * field is an enum / count / hash (findings are `{detector,type,source,count}`
+     * with no-whitespace labels), so the classification rule and the server ingest
+     * backstop (`sanitizeMetaForWire`) pass it through intact. Produced by the
+     * single producer `summarizeScreen`; NEVER carries a matched value. Reserved &
+     * additive. */
+    readonly screen?: ScreenReceipt;
 }
 export interface RunMetaV1 {
     readonly v: 1;
@@ -119,6 +133,13 @@ export interface AttemptMetaInputs {
     readonly streaming?: boolean;
     /** Repair-rung count carried by the run loop, if any. */
     readonly repairCount?: number;
+    /** LRE-2: the drawn A/B arm name (RunOptions.arm), stamped onto `meta.arm` when
+     * meta-safe. Absent ⇒ no `arm` key ⇒ byte-identical to a non-experiment call. */
+    readonly arm?: string;
+    /** SC-1a: the counts-only screen receipt to ride on `meta.screen`. Passed
+     * through verbatim (already counts/enums/hashes — no free text). Absent ⇒ no
+     * `screen` key ⇒ byte-identical to a non-screened row. */
+    readonly screen?: ScreenReceipt;
 }
 /** The classification-rule string test (spec §2, §5 wire backstop): a value is
  * an ENUM / IDENTIFIER / HASH only if it is at most 128 chars AND contains no

package/dist/telemetry/attempt-meta.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"attempt-meta.d.ts","sourceRoot":"","sources":["../../src/telemetry/attempt-meta.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAOH,OAAO,KAAK,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAElE,MAAM,MAAM,YAAY,GACpB,MAAM,GACN,QAAQ,GACR,YAAY,GACZ,gBAAgB,GAChB,SAAS,GACT,OAAO,GACP,OAAO,CAAC;AAEZ,MAAM,MAAM,aAAa,GAAG,KAAK,GAAG,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,OAAO,CAAC;AAExE,4EAA4E;AAC5E,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,GAAG,CAAC,EAAE;QAAE,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAC;QAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IACnG,QAAQ,CAAC,iBAAiB,CAAC,EAAE,MAAM,CAAC;IACpC,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;CAC9B;AAED,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC;IACd,QAAQ,CAAC,aAAa,CAAC,EAAE,YAAY,CAAC;IACtC,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC;IAC3B,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,SAAS,CAAC,EAAE,OAAO,CAAC;IAC7B,QAAQ,CAAC,QAAQ,CAAC,EAAE;QAAE,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,iBAAiB,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IACpH,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IACnC,8EAA8E;IAC9E,QAAQ,CAAC,UAAU,CAAC,EAAE,SAAS;QAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;IACnF,QAAQ,CAAC,SAAS,CAAC,EAAE;QAAE,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IACxF,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,mBAAmB,CAAC,EAAE,MAAM,CAAC;IACtC,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,IAAI,CAAC,EAAE;QACd,QAAQ,CAAC,EAAE,CAAC,EAAE,MAAM,CAAC;QACrB,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;QACtB,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;QAC7B,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;QAC9B,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;KACzB,CAAC;IACF,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B,8DAA8D;IAC9D,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,cAAc,CAAC,EAAE,aAAa,CAAC;IACxC,QAAQ,CAAC,MAAM,CAAC,EAAE,eAAe,CAAC;CACnC;AAED,MAAM,WAAW,SAAS;IACxB,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC;IACd,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,KAAK,GAAG,QAAQ,GAAG,QAAQ,GAAG,OAAO,CAAC;IAClE,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;CAC9B;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,WAAW,CAAC,EAAE,OAAO,CAAC,aAAa,CAAC,CAAC;IAC9C,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACpC,QAAQ,CAAC,iBAAiB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CAChD;AAED;;;;uEAIuE;AACvE,wBAAgB,oBAAoB,CAAC,KAAK,EAAE;IAC1C,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACjC,GAAG,MAAM,CAMT;AAED;;uEAEuE;AACvE,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,WAAW,CAAC,EAAE,OAAO,CAAC,aAAa,CAAC,CAAC;IAC9C,4EAA4E;IAC5E,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;IAClC,8DAA8D;IAC9D,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACpC,uEAAuE;IACvE,QAAQ,CAAC,iBAAiB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC/C,qDAAqD;IACrD,QAAQ,CAAC,QAAQ,CAAC,EAAE,UAAU,CAAC;IAC/B,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,KAAK,CAAC,EAAE,IAAI,CACnB,YAAY,EACZ,UAAU,GAAG,WAAW,GAAG,cAAc,GAAG,kBAAkB,GAAG,oBAAoB,CACtF,CAAC;IACF,mEAAmE;IACnE,QAAQ,CAAC,SAAS,CAAC,EAAE,OAAO,CAAC;IAC7B,yDAAyD;IACzD,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;CAC/B;AAID;;;;+BAI+B;AAC/B,wBAAgB,gBAAgB,CAAC,CAAC,EAAE,OAAO,GAAG,CAAC,IAAI,MAAM,CAExD;AAOD;;;;;;;;GAQG;AACH,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,OAAO,GAAG;IAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAgCrG;AAID;gEACgE;AAChE,eAAO,MAAM,iBAAiB,mEAAoE,CAAC;AACnG,MAAM,MAAM,cAAc,GAAG,CAAC,OAAO,iBAAiB,CAAC,CAAC,MAAM,CAAC,CAAC;AA4BhE;;;;;GAKG;AACH,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,GAAG;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,cAAc,CAAA;CAAE,EAAE,CAS5G;AAID;;;;;;;GAOG;AACH,wBAAgB,kBAAkB,CAAC,GAAG,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAInE;AAED;;;2CAG2C;AAC3C,wBAAgB,qBAAqB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAkBrE;AAwCD;;;;;;GAMG;AACH,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,iBAAiB,GAAG,aAAa,GAAG,IAAI,CAgFpF"}
+{"version":3,"file":"attempt-meta.d.ts","sourceRoot":"","sources":["../../src/telemetry/attempt-meta.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAOH,OAAO,KAAK,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAClE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAErD,MAAM,MAAM,YAAY,GACpB,MAAM,GACN,QAAQ,GACR,YAAY,GACZ,gBAAgB,GAChB,SAAS,GACT,OAAO,GACP,OAAO,CAAC;AAEZ,MAAM,MAAM,aAAa,GAAG,KAAK,GAAG,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,OAAO,CAAC;AAExE,4EAA4E;AAC5E,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,GAAG,CAAC,EAAE;QAAE,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAC;QAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IACnG,QAAQ,CAAC,iBAAiB,CAAC,EAAE,MAAM,CAAC;IACpC,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;CAC9B;AAED,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC;IACd,QAAQ,CAAC,aAAa,CAAC,EAAE,YAAY,CAAC;IACtC,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC;IAC3B,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,SAAS,CAAC,EAAE,OAAO,CAAC;IAC7B,QAAQ,CAAC,QAAQ,CAAC,EAAE;QAAE,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,iBAAiB,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IACpH,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IACnC,8EAA8E;IAC9E,QAAQ,CAAC,UAAU,CAAC,EAAE,SAAS;QAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;IACnF,QAAQ,CAAC,SAAS,CAAC,EAAE;QAAE,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IACxF,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,mBAAmB,CAAC,EAAE,MAAM,CAAC;IACtC,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,IAAI,CAAC,EAAE;QACd,QAAQ,CAAC,EAAE,CAAC,EAAE,MAAM,CAAC;QACrB,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;QACtB,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;QAC7B,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;QAC9B,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;KACzB,CAAC;IACF,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B,8DAA8D;IAC9D,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,cAAc,CAAC,EAAE,aAAa,CAAC;IACxC,QAAQ,CAAC,MAAM,CAAC,EAAE,eAAe,CAAC;IAClC;;;qFAGiF;IACjF,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IACtB;;;;;;mBAMe;IACf,QAAQ,CAAC,MAAM,CAAC,EAAE,aAAa,CAAC;CACjC;AAED,MAAM,WAAW,SAAS;IACxB,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC;IACd,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,KAAK,GAAG,QAAQ,GAAG,QAAQ,GAAG,OAAO,CAAC;IAClE,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;CAC9B;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,WAAW,CAAC,EAAE,OAAO,CAAC,aAAa,CAAC,CAAC;IAC9C,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACpC,QAAQ,CAAC,iBAAiB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CAChD;AAED;;;;uEAIuE;AACvE,wBAAgB,oBAAoB,CAAC,KAAK,EAAE;IAC1C,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACjC,GAAG,MAAM,CAMT;AAED;;uEAEuE;AACvE,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,WAAW,CAAC,EAAE,OAAO,CAAC,aAAa,CAAC,CAAC;IAC9C,4EAA4E;IAC5E,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;IAClC,8DAA8D;IAC9D,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACpC,uEAAuE;IACvE,QAAQ,CAAC,iBAAiB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC/C,qDAAqD;IACrD,QAAQ,CAAC,QAAQ,CAAC,EAAE,UAAU,CAAC;IAC/B,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,KAAK,CAAC,EAAE,IAAI,CACnB,YAAY,EACZ,UAAU,GAAG,WAAW,GAAG,cAAc,GAAG,kBAAkB,GAAG,oBAAoB,CACtF,CAAC;IACF,mEAAmE;IACnE,QAAQ,CAAC,SAAS,CAAC,EAAE,OAAO,CAAC;IAC7B,yDAAyD;IACzD,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B;qFACiF;IACjF,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IACtB;;8DAE0D;IAC1D,QAAQ,CAAC,MAAM,CAAC,EAAE,aAAa,CAAC;CACjC;AAID;;;;+BAI+B;AAC/B,wBAAgB,gBAAgB,CAAC,CAAC,EAAE,OAAO,GAAG,CAAC,IAAI,MAAM,CAExD;AAOD;;;;;;;;GAQG;AACH,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,OAAO,GAAG;IAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAgCrG;AAID;gEACgE;AAChE,eAAO,MAAM,iBAAiB,mEAAoE,CAAC;AACnG,MAAM,MAAM,cAAc,GAAG,CAAC,OAAO,iBAAiB,CAAC,CAAC,MAAM,CAAC,CAAC;AA4BhE;;;;;GAKG;AACH,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,GAAG;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,cAAc,CAAA;CAAE,EAAE,CAS5G;AAID;;;;;;;GAOG;AACH,wBAAgB,kBAAkB,CAAC,GAAG,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAInE;AAED;;;2CAG2C;AAC3C,wBAAgB,qBAAqB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAkBrE;AAwCD;;;;;;GAMG;AACH,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,iBAAiB,GAAG,aAAa,GAAG,IAAI,CAyFpF"}

package/dist/telemetry/attempt-meta.js

@@ -238,6 +238,15 @@ function summarizeAttemptMeta(inputs) {
             meta.streaming = a.streaming;
         else if (typeof inputs.streaming === "boolean")
             meta.streaming = inputs.streaming;
+        // LRE-2 A/B arm — an identifier, gated by the classification rule (absent ⇒
+        // no key ⇒ byte-identical to a non-experiment row).
+        if (isMetaSafeString(inputs.arm))
+            meta.arm = inputs.arm;
+        // SC-1a screen receipt (spec §5, §8) — the counts-only screen summary rides
+        // on meta.screen (ZERO migration). Already counts/enums/hashes; passed
+        // through verbatim (absent ⇒ no key ⇒ byte-identical to a non-screened row).
+        if (inputs.screen !== undefined)
+            meta.screen = inputs.screen;
         // Externally-sourced identifiers — gated by the classification rule.
         if (isMetaSafeString(a.model_snapshot))
             meta.model_snapshot = a.model_snapshot;

package/dist/telemetry/exporter.d.ts

@@ -83,8 +83,8 @@ export interface ExporterConfig {
     readonly artifacts?: boolean;
     /** The local artifact-metadata buffer (chunk B). A SEPARATE handle from the
      * telemetry store; present only when the namespace is enabled. Its rows ride
-     * the `:artifacts`/`:edges`/`:evals` watermark streams (watermarks live in the
-     * main store's export_state, rows are read from here). */
+     * the `:artifacts`/`:edges`/`:eval_cases` watermark streams (watermarks live in
+     * the main store's export_state, rows are read from here). */
     readonly artifactStore?: ArtifactStore;
     /**
      * Post-flush hook fired AFTER a confirmed export of the artifacts stream (E4

package/dist/telemetry/exporter.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"exporter.d.ts","sourceRoot":"","sources":["../../src/telemetry/exporter.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACtD,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,2BAA2B,CAAC;AAErE,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAClD,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,wBAAwB,CAAC;AAClE,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAYlE,OAAO,KAAK,EACV,WAAW,EASZ,MAAM,mBAAmB,CAAC;AAE3B,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAC7C,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AACtD,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,SAAS,CAAC;AAExD,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,UAAU,EAAE,aAAa,CAAC;QAAE,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC1F;8BAC0B;IAC1B,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC;IAC3B;;6EAEyE;IACzE,QAAQ,CAAC,MAAM,CAAC,EAAE,mBAAmB,CAAC;IACtC,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;CAC7B;AAED;;;;;;;GAOG;AACH,wBAAgB,yBAAyB,CACvC,OAAO,EAAE,SAAS,WAAW,EAAE,GAC9B,mBAAmB,EAAE,CAYvB;AAED,MAAM,WAAW,cAAc;IAC7B,oEAAoE;IACpE,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAC;IAC7B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,4EAA4E;IAC5E,QAAQ,CAAC,MAAM,CAAC,EAAE,SAAS,mBAAmB,EAAE,CAAC;IACjD;6EACyE;IACzE,QAAQ,CAAC,QAAQ,CAAC,EAAE,WAAW,GAAG,IAAI,CAAC;IACvC;;;0CAGsC;IACtC,QAAQ,CAAC,YAAY,CAAC,EAAE,SAAS,mBAAmB,EAAE,CAAC;IACvD;;;;6CAIyC;IACzC,QAAQ,CAAC,UAAU,CAAC,EAAE,SAAS,iBAAiB,EAAE,CAAC;IACnD;;;;;;;OAOG;IACH,QAAQ,CAAC,SAAS,CAAC,EAAE,OAAO,CAAC;IAC7B;;;8DAG0D;IAC1D,QAAQ,CAAC,aAAa,CAAC,EAAE,aAAa,CAAC;IACvC;;;;;;;;OAQG;IACH,QAAQ,CAAC,kBAAkB,CAAC,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;CACnD;AAED;;;sEAGsE;AACtE,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,aAAa,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;CAC1D;AAED,MAAM,WAAW,QAAQ;IACvB;;oCAEgC;IAChC,QAAQ,CAAC,IAAI,EAAE,QAAQ,GAAG,KAAK,CAAC;IAChC,KAAK,IAAI,IAAI,CAAC;IACd,qEAAqE;IACrE,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IACvB,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IACtB;;iEAE6D;IAC7D,KAAK,IAAI,aAAa,CAAC;CACxB;AAGD;iFACiF;AACjF,eAAO,MAAM,mBAAmB,QAAS,CAAC;AAmK1C,wBAAgB,uBAAuB,CACrC,KAAK,EAAE,wBAAwB,EAC/B,MAAM,EAAE,cAAc,GACrB,QAAQ,CAyTV;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,mBAAmB,CACjC,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,IAAI,CAAC,WAAW,EAAE,MAAM,GAAG,YAAY,GAAG,cAAc,CAAC,GAAG,IAAI,EAC1E,UAAU,EAAE,SAAS,iBAAiB,EAAE,GACvC,WAAW,CAcb"}
+{"version":3,"file":"exporter.d.ts","sourceRoot":"","sources":["../../src/telemetry/exporter.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACtD,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,2BAA2B,CAAC;AAErE,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAClD,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,wBAAwB,CAAC;AAClE,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAWlE,OAAO,KAAK,EACV,WAAW,EAOZ,MAAM,mBAAmB,CAAC;AAE3B,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAC7C,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AACtD,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,SAAS,CAAC;AAExD,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,UAAU,EAAE,aAAa,CAAC;QAAE,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC1F;8BAC0B;IAC1B,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC;IAC3B;;6EAEyE;IACzE,QAAQ,CAAC,MAAM,CAAC,EAAE,mBAAmB,CAAC;IACtC,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;CAC7B;AAED;;;;;;;GAOG;AACH,wBAAgB,yBAAyB,CACvC,OAAO,EAAE,SAAS,WAAW,EAAE,GAC9B,mBAAmB,EAAE,CAgBvB;AAED,MAAM,WAAW,cAAc;IAC7B,oEAAoE;IACpE,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAC;IAC7B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,4EAA4E;IAC5E,QAAQ,CAAC,MAAM,CAAC,EAAE,SAAS,mBAAmB,EAAE,CAAC;IACjD;6EACyE;IACzE,QAAQ,CAAC,QAAQ,CAAC,EAAE,WAAW,GAAG,IAAI,CAAC;IACvC;;;0CAGsC;IACtC,QAAQ,CAAC,YAAY,CAAC,EAAE,SAAS,mBAAmB,EAAE,CAAC;IACvD;;;;6CAIyC;IACzC,QAAQ,CAAC,UAAU,CAAC,EAAE,SAAS,iBAAiB,EAAE,CAAC;IACnD;;;;;;;OAOG;IACH,QAAQ,CAAC,SAAS,CAAC,EAAE,OAAO,CAAC;IAC7B;;;kEAG8D;IAC9D,QAAQ,CAAC,aAAa,CAAC,EAAE,aAAa,CAAC;IACvC;;;;;;;;OAQG;IACH,QAAQ,CAAC,kBAAkB,CAAC,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;CACnD;AAED;;;sEAGsE;AACtE,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,aAAa,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;CAC1D;AAED,MAAM,WAAW,QAAQ;IACvB;;oCAEgC;IAChC,QAAQ,CAAC,IAAI,EAAE,QAAQ,GAAG,KAAK,CAAC;IAChC,KAAK,IAAI,IAAI,CAAC;IACd,qEAAqE;IACrE,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IACvB,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IACtB;;iEAE6D;IAC7D,KAAK,IAAI,aAAa,CAAC;CACxB;AAGD;iFACiF;AACjF,eAAO,MAAM,mBAAmB,QAAS,CAAC;AA0I1C,wBAAgB,uBAAuB,CACrC,KAAK,EAAE,wBAAwB,EAC/B,MAAM,EAAE,cAAc,GACrB,QAAQ,CAwTV;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,mBAAmB,CACjC,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,IAAI,CAAC,WAAW,EAAE,MAAM,GAAG,YAAY,GAAG,cAAc,CAAC,GAAG,IAAI,EAC1E,UAAU,EAAE,SAAS,iBAAiB,EAAE,GACvC,WAAW,CAcb"}

package/dist/telemetry/exporter.js

@@ -24,6 +24,7 @@ exports.createTelemetryExporter = createTelemetryExporter;
 exports.buildLoadErrorBatch = buildLoadErrorBatch;
 const resolved_bundle_1 = require("../routes/resolved-bundle");
 const ingest_protocol_1 = require("./ingest-protocol");
+const grade_mappers_1 = require("./grade-mappers");
 const sinks_1 = require("./sinks");
 /**
  * Build the `routes` mirror payload from loaded bundles (Phase D, spec §13).
@@ -35,6 +36,10 @@ const sinks_1 = require("./sinks");
  */
 function buildExportedRouteMirrors(bundles) {
     return bundles.map((b) => {
+        // SC-1b req 1: refuse to mirror a `screen: enforce` route whose enforcement
+        // can't be guaranteed to re-resolve on the hosted lane (a T1 classifier) —
+        // a teaching failure at sync, never a silent inert enforce at request.
+        (0, resolved_bundle_1.assertMirrorSafe)(b);
         const bundle = (0, resolved_bundle_1.resolveRouteBundle)(b);
         return {
             route: b.route,
@@ -104,6 +109,14 @@ function toWireInference(row) {
         // (pre-WI-1a, or a null envelope) emits nothing, so the payload is
         // byte-identical to before and the server leaves inferences.meta null.
         ...(row.meta != null ? { meta: row.meta } : {}),
+        // CS-1 Chunk B (spec §6): the counts-only MaskReceipt. spread-iff-present —
+        // an unmasked route (no receipt) emits NOTHING, so the payload is
+        // byte-identical to before CS-1 and the server leaves inferences.mask null.
+        // Requires migration 00062 (inferences.mask jsonb) server-side; apply it
+        // BEFORE deploying this build (migrate-first) or the insert 4xx's and the
+        // exporter poison-skips the batch. NEVER a matched value (summarizeMask is
+        // counts-only; counts-never-values property test covers the wire).
+        ...(row.mask != null ? { mask: row.mask } : {}),
     };
 }
 function toWireRun(row) {
@@ -172,37 +185,6 @@ function toWireEvalCase(row) {
         created_by: row.createdBy,
     };
 }
-function toWireEvaluation(row) {
-    return {
-        id: row.id,
-        artifact_id: row.artifactId,
-        run_id: row.runId,
-        evaluator: row.evaluator,
-        evaluator_kind: row.evaluatorKind,
-        score: row.score,
-        passed: row.passed,
-        label: row.label,
-        explanation: row.explanation,
-        created_by: row.createdBy,
-    };
-}
-function toWireFeedback(row) {
-    return {
-        id: row.id,
-        ts: row.ts,
-        inference_id: row.inferenceId,
-        episode_key: row.episodeKey,
-        verdict: row.verdict,
-        score: row.score,
-        note: row.note,
-        source: row.source,
-        created_by: row.createdBy,
-        // Present only when the verdict names its own org. Omitted (not null) so
-        // that `stampBatch` can fall back to the exporter's tenant without having
-        // to distinguish "no org" from "explicitly no org".
-        ...(row.orgId !== null ? { org_id: row.orgId } : {}),
-    };
-}
 function createTelemetryExporter(store, config) {
     const batchSize = config.batchSize ?? DEFAULT_BATCH_SIZE;
     const intervalMs = config.intervalMs ?? exports.DEFAULT_INTERVAL_MS;
@@ -330,8 +312,8 @@ function createTelemetryExporter(store, config) {
         let header = pendingHeader();
         /**
          * Drain one watermarked stream to exhaustion, batch by batch, through the
-         * poison-pill state machine. Every stream (inferences, feedback, runs,
-         * steps, artifacts, edges, evals) is the SAME at-least-once dance behind its
+         * poison-pill state machine. Every stream (inferences, grades, runs,
+         * steps, artifacts, edges) is the SAME at-least-once dance behind its
          * own export_state key — factored here so the watermark/header/poison
          * bookkeeping lives in exactly one place and no stream can drift from
          * another. A "skip" advances the watermark past a poison batch WITHOUT
@@ -371,11 +353,13 @@ function createTelemetryExporter(store, config) {
             inferences: rows.map((row) => toWireInference(row)),
             watermarkAt: new Date().toISOString(),
         }));
-        // Feedback, runs, steps, artifacts, edges, evals: the same dance, each
-        // behind its own export_state key so no stream ever blocks another — a
-        // poison in one is skipped past without touching the rest.
-        await drainStream(`${sourceId}:feedback`, (w, n) => store.readFeedbackAfter(w, n), (rows) => ({
-            feedback: rows.map((row) => toWireFeedback(row)),
+        // Grades (grade primitive, R1) — the unified judgment stream, the SDK's
+        // sole write path. Same at-least-once dance behind its own watermark key;
+        // a grade lands in `public.grades` (idempotent by id). Runs, steps,
+        // artifacts, edges: the same dance, each behind its own export_state key so
+        // no stream ever blocks another — a poison in one is skipped past.
+        await drainStream(`${sourceId}:grades`, (w, n) => store.readGradesAfter(w, n), (rows) => ({
+            grades: rows.map((row) => (0, grade_mappers_1.toWireGrade)(row)),
         }));
         // Execution graph (Expansion E2 chunk A) — ONLY when the artifact namespace
         // is active. When artifacts are off these streams never drain and no
@@ -397,9 +381,6 @@ function createTelemetryExporter(store, config) {
                 await drainStream(`${sourceId}:edges`, (w, n) => artStore.readEdgesAfter(w, n), (rows) => ({
                     artifact_edges: rows.map((row) => toWireEdge(row)),
                 }));
-                await drainStream(`${sourceId}:evals`, (w, n) => artStore.readEvaluationsAfter(w, n), (rows) => ({
-                    artifact_evaluations: rows.map((row) => toWireEvaluation(row)),
-                }));
                 // Promoted eval cases (E4 chunk A) — same at-least-once dance behind its
                 // own watermark key.
                 await drainStream(`${sourceId}:eval_cases`, (w, n) => artStore.readEvalCasesAfter(w, n), (rows) => ({

package/dist/telemetry/grade-mappers.d.ts

@@ -0,0 +1,22 @@
+/**
+ * Wire → `grades` row mappers (grade primitive, 00070). Extracted from
+ * ingest-protocol.ts so stampBatch stays under the LOC cap (P1). A `WireGrade`
+ * lands in the ONE `grades` table; the pass/fail verdict is DERIVED at read
+ * time, never stored. Tenancy is stamped from the principal (T3); a grade may
+ * name its OWN org (QA-P6-010), verified by foreignOrgGrades before the write.
+ */
+import type { GradeRow } from "../types/telemetry";
+import type { Tenancy } from "./ingest-protocol";
+import type { WireGrade } from "./ingest-protocol";
+/** GradeRow → WireGrade (the exporter's `:grades` stream mapper). org_id is
+ * spread-iff-present so stampBatch falls back to the exporter's tenant. */
+export declare function toWireGrade(row: GradeRow): WireGrade;
+/** WireGrade → a grades row (the SDK's sole judgment write path). */
+export declare function gradeToRow({ org_id, ...g }: WireGrade, tenancy: Tenancy): Record<string, unknown>;
+/**
+ * Grades naming an org other than the presented key's. The ingest endpoint drops
+ * and COUNTS these so a caller cannot file a judgment into another tenant's corpus
+ * (QA-P6-010). Returns the offending ids. A service-role exporter needs no such check.
+ */
+export declare function foreignOrgGrades(rows: readonly WireGrade[], keyOrgId: string): readonly string[];
+//# sourceMappingURL=grade-mappers.d.ts.map

package/dist/telemetry/grade-mappers.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"grade-mappers.d.ts","sourceRoot":"","sources":["../../src/telemetry/grade-mappers.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AACnD,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,mBAAmB,CAAC;AACjD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC;AAEnD;2EAC2E;AAC3E,wBAAgB,WAAW,CAAC,GAAG,EAAE,QAAQ,GAAG,SAAS,CAgBpD;AAED,qEAAqE;AACrE,wBAAgB,UAAU,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,EAAE,EAAE,SAAS,EAAE,OAAO,EAAE,OAAO,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAiBjG;AAED;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,SAAS,SAAS,EAAE,EAAE,QAAQ,EAAE,MAAM,GAAG,SAAS,MAAM,EAAE,CAEhG"}

package/dist/telemetry/grade-mappers.js

@@ -0,0 +1,58 @@
+"use strict";
+/**
+ * Wire → `grades` row mappers (grade primitive, 00070). Extracted from
+ * ingest-protocol.ts so stampBatch stays under the LOC cap (P1). A `WireGrade`
+ * lands in the ONE `grades` table; the pass/fail verdict is DERIVED at read
+ * time, never stored. Tenancy is stamped from the principal (T3); a grade may
+ * name its OWN org (QA-P6-010), verified by foreignOrgGrades before the write.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.toWireGrade = toWireGrade;
+exports.gradeToRow = gradeToRow;
+exports.foreignOrgGrades = foreignOrgGrades;
+/** GradeRow → WireGrade (the exporter's `:grades` stream mapper). org_id is
+ * spread-iff-present so stampBatch falls back to the exporter's tenant. */
+function toWireGrade(row) {
+    return {
+        id: row.id,
+        subject_kind: row.subjectKind,
+        subject_id: row.subjectId,
+        score: row.score,
+        scale_max: row.scaleMax,
+        scale_label: row.scaleLabel,
+        comment: row.comment,
+        kind: row.kind,
+        grader: row.grader,
+        source: row.source,
+        created_by: row.createdBy,
+        ts: row.ts,
+        ...(row.orgId !== null ? { org_id: row.orgId } : {}),
+    };
+}
+/** WireGrade → a grades row (the SDK's sole judgment write path). */
+function gradeToRow({ org_id, ...g }, tenancy) {
+    return {
+        org_id: org_id ?? tenancy.org_id,
+        project_id: tenancy.project_id,
+        id: g.id,
+        subject_kind: g.subject_kind,
+        subject_id: g.subject_id,
+        score: g.score,
+        scale_max: g.scale_max,
+        scale_label: g.scale_label,
+        comment: g.comment,
+        kind: g.kind,
+        grader: g.grader,
+        source: g.source,
+        created_by: g.created_by,
+        ts: g.ts,
+    };
+}
+/**
+ * Grades naming an org other than the presented key's. The ingest endpoint drops
+ * and COUNTS these so a caller cannot file a judgment into another tenant's corpus
+ * (QA-P6-010). Returns the offending ids. A service-role exporter needs no such check.
+ */
+function foreignOrgGrades(rows, keyOrgId) {
+    return rows.filter((r) => r.org_id !== undefined && r.org_id !== keyOrgId).map((r) => r.id);
+}

package/dist/telemetry/grades-sql.d.ts

@@ -0,0 +1,53 @@
+/**
+ * Shared SQLite DDL + row mapping for the local `grades` table (grade primitive).
+ *
+ * The unified judgment table is written by TWO better-sqlite3 handles over the
+ * same telemetry file — the main telemetry store (`store.ts`, for inference/run
+ * grades via `rig.grade`) and the artifact store (`artifact-store.ts`, for
+ * artifact-subject grades, which already transact on that handle). Both must
+ * agree on the table shape and the bind mapping, so both live here once (DRY,
+ * and the two cannot drift). The telemetry handle owns the READ side (the
+ * exporter's `:grades` stream).
+ *
+ * project_id is NOT stored locally: like every telemetry row, it is stamped at
+ * export from the principal, never held on the row (one rig = one tenant).
+ */
+import type Database from "better-sqlite3";
+import type { GradeRow } from "../types/telemetry";
+/** `CREATE TABLE IF NOT EXISTS grades …` — safe to run on every open. Mirrors
+ * `public.grades` minus the export-stamped columns (org handling below). */
+export declare const GRADES_TABLE_SQL = "\nCREATE TABLE IF NOT EXISTS grades (\n  id           TEXT PRIMARY KEY,\n  ts           TEXT,\n  subject_kind TEXT NOT NULL CHECK (subject_kind IN ('inference','run','artifact')),\n  subject_id   TEXT NOT NULL,\n  score        REAL NOT NULL,\n  scale_max    REAL,\n  scale_label  TEXT,\n  comment      TEXT,\n  kind         TEXT NOT NULL CHECK (kind IN ('human','model-judge','deterministic')),\n  grader       TEXT,\n  source       TEXT,\n  org_id       TEXT,\n  created_by   TEXT\n);\nCREATE INDEX IF NOT EXISTS idx_grades_subject ON grades (subject_kind, subject_id);\n";
+/** The row shape as it sits in SQLite (snake_case, nullable columns as read back). */
+export interface GradeDbRow {
+    id: string;
+    ts: string | null;
+    subject_kind: string;
+    subject_id: string;
+    score: number;
+    scale_max: number | null;
+    scale_label: string | null;
+    comment: string | null;
+    kind: string;
+    grader: string | null;
+    source: string | null;
+    org_id: string | null;
+    created_by: string | null;
+}
+/** Prepare the grade insert statement against an open handle. INSERT OR IGNORE:
+ * a grade id is unique, and a re-inserted id (e.g. the backfill racing a live
+ * write) is a harmless no-op. */
+export declare function prepareGradeInsert(db: Database.Database): Database.Statement;
+/** Bind a GradeRow to the insert statement's named params. */
+export declare function gradeBindParams(row: GradeRow): Record<string, unknown>;
+/** Read one SQLite grade row back into a GradeRow. */
+export declare function toGradeRow(r: GradeDbRow): GradeRow;
+/** Backfill `grades` from the local `feedback` table, if it exists (grade
+ * primitive, GP-1). Same mapping as migration 00070's feedback→grades leg.
+ * Idempotent (INSERT OR IGNORE keyed on the source row id). Runs inside the
+ * telemetry store's migration ladder. */
+export declare function backfillGradesFromFeedback(db: Database.Database): void;
+/** Backfill `grades` from the local `artifact_evaluations` table, if it exists
+ * (grade primitive, GP-1). Same mapping as migration 00070's evaluation leg.
+ * Idempotent. Runs when the artifact store opens (it owns that table). */
+export declare function backfillGradesFromEvaluations(db: Database.Database): void;
+//# sourceMappingURL=grades-sql.d.ts.map

package/dist/telemetry/grades-sql.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"grades-sql.d.ts","sourceRoot":"","sources":["../../src/telemetry/grades-sql.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,KAAK,QAAQ,MAAM,gBAAgB,CAAC;AAC3C,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAEnD;4EAC4E;AAC5E,eAAO,MAAM,gBAAgB,ikBAiB5B,CAAC;AAEF,sFAAsF;AACtF,MAAM,WAAW,UAAU;IACzB,EAAE,EAAE,MAAM,CAAC;IACX,EAAE,EAAE,MAAM,GAAG,IAAI,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;CAC3B;AAWD;;iCAEiC;AACjC,wBAAgB,kBAAkB,CAAC,EAAE,EAAE,QAAQ,CAAC,QAAQ,GAAG,QAAQ,CAAC,SAAS,CAE5E;AAED,8DAA8D;AAC9D,wBAAgB,eAAe,CAAC,GAAG,EAAE,QAAQ,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAgBtE;AAED,sDAAsD;AACtD,wBAAgB,UAAU,CAAC,CAAC,EAAE,UAAU,GAAG,QAAQ,CAgBlD;AAED;;;yCAGyC;AACzC,wBAAgB,0BAA0B,CAAC,EAAE,EAAE,QAAQ,CAAC,QAAQ,GAAG,IAAI,CAetE;AAED;;0EAE0E;AAC1E,wBAAgB,6BAA6B,CAAC,EAAE,EAAE,QAAQ,CAAC,QAAQ,GAAG,IAAI,CAgBzE"}