modelrig 0.9.0 → 0.10.0

package/dist/artifacts/artifact.js

@@ -22,6 +22,7 @@ const run_context_1 = require("./run-context");
 const scrub_1 = require("./scrub");
 const classification_1 = require("./classification");
 const task_settings_1 = require("../settings/task-settings");
+const manifest_1 = require("../prompts/manifest");
 /** The configured scrub mode for one artifact save (BEFORE the S8-c PII/PHI
  * floor). Resolved EXACTLY as capture-write.ts / samples.ts do: a configured
  * control plane WINS (`resolver.get(task).scrub`), else the rig's default. A
@@ -43,6 +44,9 @@ function contentTypeFor(type) {
         return "text/csv";
     if (t === "html")
         return "text/html; charset=utf-8";
+    // PSR-1: a structure-only assembly manifest is stored as a linked JSON artifact.
+    if (t === "manifest")
+        return "application/json";
     return "application/octet-stream";
 }
 function idOf(ref) {
@@ -56,6 +60,7 @@ function warn(scope, err) {
 function inertApi() {
     return {
         save: () => null,
+        saveManifest: () => null,
         load: () => { },
         link: () => { },
         promoteToEval: () => null,
@@ -160,188 +165,219 @@ function createArtifactApi(deps) {
             }
         }
     }
-    return {
-        save(value, opts) {
-            const ctx = (0, run_context_1.getActiveRunContext)();
-            // zeroRetention: refuse fail-closed BEFORE hashing or building any row.
-            if (ctx !== null && ctx.zeroRetention) {
-                skippedZeroRetention += 1;
-                console.warn(`[modelrig artifacts] zeroRetention run — artifact "${opts.name}" NOT recorded ` +
-                    "(fail-closed at the SDK gate; no metadata, no hash persisted).");
-                return null;
-            }
-            // Hash the serialization, then DISCARD the bytes — metadata + hash only.
-            const serialized = typeof value === "string" ? value : JSON.stringify(value ?? null);
-            const bytes = Buffer.byteLength(serialized, "utf8");
-            const contentHash = `sha256:${(0, node_crypto_1.createHash)("sha256").update(serialized).digest("hex")}`;
-            const schema = opts.schema ?? null;
-            const id = (0, node_crypto_1.randomUUID)();
-            const version = opts.supersedes !== undefined ? opts.supersedes.version + 1 : 1;
-            // G1 (spec §3): an explicit stepKey wins; absent, the artifact lands in the
-            // AMBIENT step — the most recent auto-step in this run context — so
-            // `artifact.save` and the run/@step graph compose. Null outside a step (or
-            // outside a run context), exactly as before.
-            const stepKey = opts.stepKey ?? ctx?.currentStepKey() ?? null;
-            // S8-b: validate data_classification against the shared enum. A bad value
-            // would fail the DB CHECK (00058) and drop the row at ingest, so catch it
-            // here with a teaching warning and drop the LABEL (the artifact still
-            // saves — a metadata typo must not lose the artifact). Normalize first so
-            // "PHI"/" pii " keep their meaning (and their scrub floor) rather than
-            // silently dropping.
-            let classification = (0, classification_1.normalizeClassification)(opts.classification);
-            if (opts.classification !== undefined && classification !== null && !(0, classification_1.isDataClassification)(classification)) {
-                console.warn(`[modelrig artifacts] artifact "${opts.name}" has an unknown data_classification ` +
-                    `${JSON.stringify(opts.classification)} — label dropped (artifact still saved). ` +
-                    `fix_hint: use one of ${classification_1.DATA_CLASSIFICATIONS.join(", ")}.`);
-                classification = null;
-            }
-            // Custody applies only when a rig content policy exists AND the caller left
-            // the bytes to us (a caller-supplied contentRef = their own store; managed
-            // custody must not double-home it).
-            const custodyApplies = content !== undefined && opts.contentRef === undefined;
-            // Scrub is computed HERE (before the row is written) so its counts-only
-            // summary can ride the immutable artifact row (00039). Only when custody
-            // applies; null otherwise (custody off ⇒ nothing was scanned). The
-            // configured mode comes from the per-task/account control-plane setting
-            // (P15 CP-3b — resolver wins; `content.defaultScrub` fallback local/direct).
-            // S8-c: a `pii`/`phi` artifact forces the scrub mode to a floor of
-            // `redact`, so PII/PHI content is never uploaded verbatim even when the
-            // task's configured mode is `off`/`detect`. A stronger `block` stays.
-            const effScrub = content !== undefined
-                ? (0, task_settings_1.effectiveScrubMode)(resolveContentScrubMode(content, opts.task), classification)
-                : null;
-            const scrubbed = custodyApplies && content !== undefined && effScrub !== null ? (0, scrub_1.scrubContent)(serialized, effScrub) : null;
-            const scrubSummary = scrubbed !== null && effScrub !== null ? (0, scrub_1.summarizeScrub)(effScrub, scrubbed) : null;
-            if (scrubbed !== null)
-                scrubFindings += scrubbed.findings.reduce((n, f) => n + f.count, 0);
-            try {
-                store.recordArtifact({
-                    id,
-                    runId: ctx?.runId ?? null,
-                    // E3: step attribution is an explicit caller-supplied key; G1 adds the
-                    // ambient-step fallback (resolved above) so a save with no stepKey joins
-                    // the current run/@step. Absent both ⇒ null, exactly as before.
-                    stepKey,
-                    attemptNo: opts.attemptNo ?? null,
-                    task: opts.task ?? null,
-                    name: opts.name,
-                    type: opts.type,
-                    version,
-                    supersedesArtifactId: opts.supersedes?.id ?? null,
-                    declaredSchema: schema,
-                    fingerprintCell: (0, fingerprint_1.fingerprintSchema)(schema)?.cellKey ?? null,
-                    contentRef: opts.contentRef ?? null,
-                    contentHash,
-                    contentBytes: bytes,
-                    dataClassification: classification,
-                    expiresAt: opts.expiresAt ?? null,
-                    // Per-row scrub findings ride the original (scanned) row (00039).
-                    scrub: scrubSummary,
-                });
-                saves += 1;
-                if (opts.task !== undefined)
-                    savedTasks.set(id, opts.task); // for promoteToEval (chunk A)
-                // Lineage v0: derived_from edges to everything loaded since the last save.
-                if (ctx !== null) {
-                    for (const loadedId of ctx.takeLoadedIds()) {
-                        if (loadedId === id)
-                            continue; // edges_no_self
-                        store.recordArtifactEdge({ fromArtifactId: id, toArtifactId: loadedId, kind: "derived_from" });
-                        inferredEdges += 1;
-                    }
+    // Extracted so `saveManifest` (PSR-1) can compose them without re-implementing
+    // the custody/lineage save path or the edges_no_self link. The bodies are the
+    // original `save`/`link` verbatim — the returned object references these.
+    const save = (value, opts) => {
+        const ctx = (0, run_context_1.getActiveRunContext)();
+        // zeroRetention: refuse fail-closed BEFORE hashing or building any row.
+        if (ctx !== null && ctx.zeroRetention) {
+            skippedZeroRetention += 1;
+            console.warn(`[modelrig artifacts] zeroRetention run — artifact "${opts.name}" NOT recorded ` +
+                "(fail-closed at the SDK gate; no metadata, no hash persisted).");
+            return null;
+        }
+        // Hash the serialization, then DISCARD the bytes — metadata + hash only.
+        const serialized = typeof value === "string" ? value : JSON.stringify(value ?? null);
+        const bytes = Buffer.byteLength(serialized, "utf8");
+        const contentHash = `sha256:${(0, node_crypto_1.createHash)("sha256").update(serialized).digest("hex")}`;
+        const schema = opts.schema ?? null;
+        const id = (0, node_crypto_1.randomUUID)();
+        const version = opts.supersedes !== undefined ? opts.supersedes.version + 1 : 1;
+        // G1 (spec §3): an explicit stepKey wins; absent, the artifact lands in the
+        // AMBIENT step — the most recent auto-step in this run context — so
+        // `artifact.save` and the run/@step graph compose. Null outside a step (or
+        // outside a run context), exactly as before.
+        const stepKey = opts.stepKey ?? ctx?.currentStepKey() ?? null;
+        // S8-b: validate data_classification against the shared enum. A bad value
+        // would fail the DB CHECK (00058) and drop the row at ingest, so catch it
+        // here with a teaching warning and drop the LABEL (the artifact still
+        // saves — a metadata typo must not lose the artifact). Normalize first so
+        // "PHI"/" pii " keep their meaning (and their scrub floor) rather than
+        // silently dropping.
+        let classification = (0, classification_1.normalizeClassification)(opts.classification);
+        if (opts.classification !== undefined && classification !== null && !(0, classification_1.isDataClassification)(classification)) {
+            console.warn(`[modelrig artifacts] artifact "${opts.name}" has an unknown data_classification ` +
+                `${JSON.stringify(opts.classification)} — label dropped (artifact still saved). ` +
+                `fix_hint: use one of ${classification_1.DATA_CLASSIFICATIONS.join(", ")}.`);
+            classification = null;
+        }
+        // Custody applies only when a rig content policy exists AND the caller left
+        // the bytes to us (a caller-supplied contentRef = their own store; managed
+        // custody must not double-home it).
+        const custodyApplies = content !== undefined && opts.contentRef === undefined;
+        // Scrub is computed HERE (before the row is written) so its counts-only
+        // summary can ride the immutable artifact row (00039). Only when custody
+        // applies; null otherwise (custody off ⇒ nothing was scanned). The
+        // configured mode comes from the per-task/account control-plane setting
+        // (P15 CP-3b — resolver wins; `content.defaultScrub` fallback local/direct).
+        // S8-c: a `pii`/`phi` artifact forces the scrub mode to a floor of
+        // `redact`, so PII/PHI content is never uploaded verbatim even when the
+        // task's configured mode is `off`/`detect`. A stronger `block` stays.
+        const effScrub = content !== undefined
+            ? (0, task_settings_1.effectiveScrubMode)(resolveContentScrubMode(content, opts.task), classification)
+            : null;
+        const scrubbed = custodyApplies && content !== undefined && effScrub !== null ? (0, scrub_1.scrubContent)(serialized, effScrub) : null;
+        const scrubSummary = scrubbed !== null && effScrub !== null ? (0, scrub_1.summarizeScrub)(effScrub, scrubbed) : null;
+        if (scrubbed !== null)
+            scrubFindings += scrubbed.findings.reduce((n, f) => n + f.count, 0);
+        try {
+            store.recordArtifact({
+                id,
+                runId: ctx?.runId ?? null,
+                // E3: step attribution is an explicit caller-supplied key; G1 adds the
+                // ambient-step fallback (resolved above) so a save with no stepKey joins
+                // the current run/@step. Absent both ⇒ null, exactly as before.
+                stepKey,
+                attemptNo: opts.attemptNo ?? null,
+                task: opts.task ?? null,
+                name: opts.name,
+                type: opts.type,
+                version,
+                supersedesArtifactId: opts.supersedes?.id ?? null,
+                declaredSchema: schema,
+                fingerprintCell: (0, fingerprint_1.fingerprintSchema)(schema)?.cellKey ?? null,
+                contentRef: opts.contentRef ?? null,
+                contentHash,
+                contentBytes: bytes,
+                dataClassification: classification,
+                expiresAt: opts.expiresAt ?? null,
+                // Per-row scrub findings ride the original (scanned) row (00039).
+                scrub: scrubSummary,
+            });
+            saves += 1;
+            if (opts.task !== undefined)
+                savedTasks.set(id, opts.task); // for promoteToEval (chunk A)
+            // Lineage v0: derived_from edges to everything loaded since the last save.
+            if (ctx !== null) {
+                for (const loadedId of ctx.takeLoadedIds()) {
+                    if (loadedId === id)
+                        continue; // edges_no_self
+                    store.recordArtifactEdge({ fromArtifactId: id, toArtifactId: loadedId, kind: "derived_from" });
+                    inferredEdges += 1;
                 }
             }
-            catch (err) {
-                warn("save", err);
-                return null;
+        }
+        catch (err) {
+            warn("save", err);
+            return null;
+        }
+        // ── Content custody (E2-C) ──────────────────────────────────────────
+        // Off by default: only when a rig has configured content custody. The
+        // metadata row above is written regardless — content is layered on, never
+        // a precondition. zeroRetention already returned above, so we never reach
+        // here for a zeroRetention run (structural, not re-checked).
+        if (content !== undefined && scrubbed !== null) {
+            if (scrubbed.blocked) {
+                // `block` mode found PII/PHI → content upload refused (counted). The
+                // artifact keeps its metadata + hash; it simply stores no content.
+                contentBlocked += 1;
+                console.warn(`[modelrig artifacts] scrub blocked content for "${opts.name}" ` +
+                    `(${scrubbed.findings.length} finding type(s)); metadata + hash kept, no content stored.`);
             }
-            // ── Content custody (E2-C) ──────────────────────────────────────────
-            // Off by default: only when a rig has configured content custody. The
-            // metadata row above is written regardless — content is layered on, never
-            // a precondition. zeroRetention already returned above, so we never reach
-            // here for a zeroRetention run (structural, not re-checked).
-            if (content !== undefined && scrubbed !== null) {
-                if (scrubbed.blocked) {
-                    // `block` mode found PII/PHI → content upload refused (counted). The
-                    // artifact keeps its metadata + hash; it simply stores no content.
-                    contentBlocked += 1;
-                    console.warn(`[modelrig artifacts] scrub blocked content for "${opts.name}" ` +
-                        `(${scrubbed.findings.length} finding type(s)); metadata + hash kept, no content stored.`);
-                }
-                else if (effScrub === "redact" && scrubbed.findings.length > 0 && scrubbed.text !== null) {
-                    // Redaction is a SUPERSEDING version (immutability): the original row
-                    // keeps its hash and stores NO content; a new version records the
-                    // masked content's hash and uploads the masked bytes.
-                    const maskedSerialized = scrubbed.text;
-                    const maskedBytes = Buffer.byteLength(maskedSerialized, "utf8");
-                    const maskedHash = `sha256:${(0, node_crypto_1.createHash)("sha256").update(maskedSerialized).digest("hex")}`;
-                    const redactedId = (0, node_crypto_1.randomUUID)();
-                    const redactedVersion = version + 1;
-                    try {
-                        store.recordArtifact({
-                            id: redactedId,
-                            runId: ctx?.runId ?? null,
-                            // Same ambient-step resolution as the original row it supersedes.
-                            stepKey,
-                            attemptNo: opts.attemptNo ?? null,
-                            task: opts.task ?? null,
-                            name: opts.name,
-                            type: opts.type,
-                            version: redactedVersion,
-                            supersedesArtifactId: id, // supersedes the original (ruling c column)
-                            declaredSchema: schema,
-                            fingerprintCell: (0, fingerprint_1.fingerprintSchema)(schema)?.cellKey ?? null,
-                            contentRef: null,
-                            contentHash: maskedHash,
-                            contentBytes: maskedBytes,
-                            dataClassification: classification,
-                            expiresAt: opts.expiresAt ?? null,
-                            // Findings ride the original scanned row; the masked version stores
-                            // no PII, so its own scrub is null (avoid double-counting).
-                            scrub: null,
-                        });
-                        saves += 1;
-                        fireUpload({
-                            artifactId: redactedId,
-                            contentType: contentTypeFor(opts.type),
-                            body: Buffer.from(maskedSerialized, "utf8"),
-                            contentHash: maskedHash,
-                        }, content.upload);
-                        // The live version is the redacted one — hand its handle back.
-                        return { id: redactedId, name: opts.name, type: opts.type, version: redactedVersion };
-                    }
-                    catch (err) {
-                        warn("save (redacted version)", err);
-                        // Fall through to returning the original handle (metadata-only).
-                    }
-                }
-                else {
-                    // off / detect / redact-with-no-findings: upload the bytes verbatim.
+            else if (effScrub === "redact" && scrubbed.findings.length > 0 && scrubbed.text !== null) {
+                // Redaction is a SUPERSEDING version (immutability): the original row
+                // keeps its hash and stores NO content; a new version records the
+                // masked content's hash and uploads the masked bytes.
+                const maskedSerialized = scrubbed.text;
+                const maskedBytes = Buffer.byteLength(maskedSerialized, "utf8");
+                const maskedHash = `sha256:${(0, node_crypto_1.createHash)("sha256").update(maskedSerialized).digest("hex")}`;
+                const redactedId = (0, node_crypto_1.randomUUID)();
+                const redactedVersion = version + 1;
+                try {
+                    store.recordArtifact({
+                        id: redactedId,
+                        runId: ctx?.runId ?? null,
+                        // Same ambient-step resolution as the original row it supersedes.
+                        stepKey,
+                        attemptNo: opts.attemptNo ?? null,
+                        task: opts.task ?? null,
+                        name: opts.name,
+                        type: opts.type,
+                        version: redactedVersion,
+                        supersedesArtifactId: id, // supersedes the original (ruling c column)
+                        declaredSchema: schema,
+                        fingerprintCell: (0, fingerprint_1.fingerprintSchema)(schema)?.cellKey ?? null,
+                        contentRef: null,
+                        contentHash: maskedHash,
+                        contentBytes: maskedBytes,
+                        dataClassification: classification,
+                        expiresAt: opts.expiresAt ?? null,
+                        // Findings ride the original scanned row; the masked version stores
+                        // no PII, so its own scrub is null (avoid double-counting).
+                        scrub: null,
+                    });
+                    saves += 1;
                     fireUpload({
-                        artifactId: id,
+                        artifactId: redactedId,
                         contentType: contentTypeFor(opts.type),
-                        body: Buffer.from(scrubbed.text ?? serialized, "utf8"),
-                        contentHash,
+                        body: Buffer.from(maskedSerialized, "utf8"),
+                        contentHash: maskedHash,
                     }, content.upload);
+                    // The live version is the redacted one — hand its handle back.
+                    return { id: redactedId, name: opts.name, type: opts.type, version: redactedVersion };
+                }
+                catch (err) {
+                    warn("save (redacted version)", err);
+                    // Fall through to returning the original handle (metadata-only).
                 }
             }
-            return { id, name: opts.name, type: opts.type, version };
-        },
+            else {
+                // off / detect / redact-with-no-findings: upload the bytes verbatim.
+                fireUpload({
+                    artifactId: id,
+                    contentType: contentTypeFor(opts.type),
+                    body: Buffer.from(scrubbed.text ?? serialized, "utf8"),
+                    contentHash,
+                }, content.upload);
+            }
+        }
+        return { id, name: opts.name, type: opts.type, version };
+    };
+    const link = (from, to, kind) => {
+        const fromId = idOf(from);
+        const toId = idOf(to);
+        if (fromId === toId)
+            return; // edges_no_self
+        try {
+            store.recordArtifactEdge({ fromArtifactId: fromId, toArtifactId: toId, kind });
+        }
+        catch (err) {
+            warn("link", err);
+        }
+    };
+    // PSR-1: validate a structure-only manifest, save it as a linked `manifest`
+    // artifact (ZERO-DDL free-text type), and chain `prompt → manifest` via
+    // derived_from. Never throws; an invalid manifest is a counted, teaching warn.
+    const saveManifest = (prompt, manifest, opts) => {
+        const result = (0, manifest_1.validateManifest)(manifest);
+        if (!result.ok) {
+            console.warn(`[modelrig artifacts] manifest for prompt "${idOf(prompt)}" is invalid — not emitted: ` +
+                `${result.errors.join("; ")}`);
+            return null;
+        }
+        const promptName = typeof prompt === "string" ? undefined : prompt.name;
+        const name = opts?.name ?? (promptName !== undefined ? `${promptName}.manifest` : "manifest");
+        const handle = save(JSON.stringify(result.manifest), {
+            name,
+            type: "manifest",
+            ...(opts?.task !== undefined ? { task: opts.task } : {}),
+            ...(opts?.stepKey !== undefined ? { stepKey: opts.stepKey } : {}),
+            ...(opts?.attemptNo !== undefined ? { attemptNo: opts.attemptNo } : {}),
+        });
+        if (handle === null)
+            return null; // custody/zeroRetention refused — no edge.
+        // Chain prompt → manifest: the prompt is assembled per this manifest recipe.
+        link(prompt, handle, "derived_from");
+        return handle;
+    };
+    return {
+        save,
+        saveManifest,
         load(ref) {
             (0, run_context_1.getActiveRunContext)()?.noteLoad(idOf(ref));
         },
-        link(from, to, kind) {
-            const fromId = idOf(from);
-            const toId = idOf(to);
-            if (fromId === toId)
-                return; // edges_no_self
-            try {
-                store.recordArtifactEdge({ fromArtifactId: fromId, toArtifactId: toId, kind });
-            }
-            catch (err) {
-                warn("link", err);
-            }
-        },
+        link,
         promoteToEval(ref, opts) {
             const sourceArtifactId = idOf(ref);
             // Resolve the task: explicit wins, else the task this artifact was saved

package/dist/artifacts/index.d.ts

@@ -16,7 +16,9 @@ export { step } from "./step";
 export { createArtifactApi } from "./artifact";
 export { openArtifactStore } from "../telemetry/artifact-store";
 export type { ArtifactStore } from "../telemetry/artifact-store";
-export type { ArtifactApi, ArtifactHandle, ArtifactSaveOptions, ArtifactPromoteOptions, ArtifactContentDeps, ArtifactContentUploader, } from "./artifact";
+export type { ArtifactApi, ArtifactHandle, ArtifactSaveOptions, ArtifactManifestOptions, ArtifactPromoteOptions, ArtifactContentDeps, ArtifactContentUploader, } from "./artifact";
+export { validateManifest, assertValidManifest, parseAuthoringDoc } from "../prompts/manifest";
+export type { Slot, SlotKind, Manifest, DynamicSource, DynamicSourceKind, CachePolicy, StaticFrom, ManifestValidation, AuthoringDoc, } from "../prompts/manifest";
 export { uploadArtifactContent } from "./content-uploader";
 export type { ContentUploadConfig, ContentUploadInput, ContentUploadOutcome, } from "./content-uploader";
 export { scrubContent, luhnValid, detectSpans, scrubDetectors } from "./scrub";

package/dist/artifacts/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/artifacts/index.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAElE,OAAO,KAAK,EAAE,WAAW,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC;AAGnE,OAAO,KAAK,EAAE,qBAAqB,EAAE,eAAe,EAAE,MAAM,WAAW,CAAC;AAExE,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAC;AACtE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAC;AAEjE,OAAO,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AACxE,YAAY,EACV,YAAY,EACZ,SAAS,EACT,eAAe,EACf,SAAS,EACT,gBAAgB,EAChB,cAAc,EACd,oBAAoB,GACrB,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,IAAI,EAAE,MAAM,QAAQ,CAAC;AAC9B,OAAO,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAC/C,OAAO,EAAE,iBAAiB,EAAE,MAAM,6BAA6B,CAAC;AAChE,YAAY,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAC;AACjE,YAAY,EACV,WAAW,EACX,cAAc,EACd,mBAAmB,EACnB,sBAAsB,EACtB,mBAAmB,EACnB,uBAAuB,GACxB,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,qBAAqB,EAAE,MAAM,oBAAoB,CAAC;AAC3D,YAAY,EACV,mBAAmB,EACnB,kBAAkB,EAClB,oBAAoB,GACrB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,YAAY,EAAE,SAAS,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,SAAS,CAAC;AAC/E,YAAY,EAAE,SAAS,EAAE,YAAY,EAAE,WAAW,EAAE,iBAAiB,EAAE,MAAM,SAAS,CAAC;AAGvF,OAAO,EACL,oBAAoB,EACpB,yBAAyB,EACzB,oBAAoB,EACpB,uBAAuB,GACxB,MAAM,kBAAkB,CAAC;AAC1B,YAAY,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AAC3D,OAAO,EACL,wBAAwB,EACxB,uBAAuB,EACvB,iBAAiB,GAClB,MAAM,SAAS,CAAC;AACjB,YAAY,EACV,SAAS,EACT,YAAY,EACZ,SAAS,EACT,YAAY,EACZ,YAAY,GACb,MAAM,SAAS,CAAC;AACjB,YAAY,EACV,MAAM,EACN,OAAO,EACP,WAAW,EACX,eAAe,EACf,WAAW,EACX,cAAc,GACf,MAAM,oBAAoB,CAAC;AAE5B;oDACoD;AACpD,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC;IAC3B,QAAQ,CAAC,QAAQ,EAAE,WAAW,CAAC;CAChC;AAED;;;2DAG2D;AAC3D,wBAAgB,gBAAgB,CAAC,IAAI,EAAE;IACrC,QAAQ,CAAC,MAAM,EAAE,cAAc,CAAC;IAChC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,aAAa,EAAE,aAAa,GAAG,IAAI,CAAC;IAC7C,QAAQ,CAAC,SAAS,CAAC,EAAE,eAAe,CAAC;IACrC;6EACyE;IACzE,QAAQ,CAAC,QAAQ,CAAC,EAAE,oBAAoB,GAAG,IAAI,CAAC;CACjD,GAAG;IAAE,QAAQ,CAAC,SAAS,EAAE,iBAAiB,CAAC;IAAC,QAAQ,CAAC,kBAAkB,CAAC,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAA;CAAE,CAa/F;AAED;;;;GAIG;AACH,wBAAgB,wBAAwB,CACtC,OAAO,EAAE,qBAAqB,GAAG,SAAS,EAC1C,QAAQ,EAAE,oBAAoB,GAAG,IAAI,GACpC,mBAAmB,GAAG,SAAS,CAcjC;AAED;;2EAE2E;AAC3E,wBAAgB,uBAAuB,CAAC,IAAI,EAAE;IAC5C,QAAQ,CAAC,MAAM,EAAE,cAAc,CAAC;IAChC,QAAQ,CAAC,aAAa,CAAC,EAAE,aAAa,CAAC;IACvC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B;;4BAEwB;IACxB,QAAQ,CAAC,OAAO,CAAC,EAAE,qBAAqB,CAAC;IACzC;;kEAE8D;IAC9D,QAAQ,CAAC,QAAQ,CAAC,EAAE,oBAAoB,GAAG,IAAI,CAAC;CACjD,GAAG,iBAAiB,CAcpB"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/artifacts/index.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAElE,OAAO,KAAK,EAAE,WAAW,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC;AAGnE,OAAO,KAAK,EAAE,qBAAqB,EAAE,eAAe,EAAE,MAAM,WAAW,CAAC;AAExE,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAC;AACtE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAC;AAEjE,OAAO,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AACxE,YAAY,EACV,YAAY,EACZ,SAAS,EACT,eAAe,EACf,SAAS,EACT,gBAAgB,EAChB,cAAc,EACd,oBAAoB,GACrB,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,IAAI,EAAE,MAAM,QAAQ,CAAC;AAC9B,OAAO,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAC/C,OAAO,EAAE,iBAAiB,EAAE,MAAM,6BAA6B,CAAC;AAChE,YAAY,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAC;AACjE,YAAY,EACV,WAAW,EACX,cAAc,EACd,mBAAmB,EACnB,uBAAuB,EACvB,sBAAsB,EACtB,mBAAmB,EACnB,uBAAuB,GACxB,MAAM,YAAY,CAAC;AAIpB,OAAO,EAAE,gBAAgB,EAAE,mBAAmB,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AAC/F,YAAY,EACV,IAAI,EACJ,QAAQ,EACR,QAAQ,EACR,aAAa,EACb,iBAAiB,EACjB,WAAW,EACX,UAAU,EACV,kBAAkB,EAClB,YAAY,GACb,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,qBAAqB,EAAE,MAAM,oBAAoB,CAAC;AAC3D,YAAY,EACV,mBAAmB,EACnB,kBAAkB,EAClB,oBAAoB,GACrB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,YAAY,EAAE,SAAS,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,SAAS,CAAC;AAC/E,YAAY,EAAE,SAAS,EAAE,YAAY,EAAE,WAAW,EAAE,iBAAiB,EAAE,MAAM,SAAS,CAAC;AAGvF,OAAO,EACL,oBAAoB,EACpB,yBAAyB,EACzB,oBAAoB,EACpB,uBAAuB,GACxB,MAAM,kBAAkB,CAAC;AAC1B,YAAY,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AAC3D,OAAO,EACL,wBAAwB,EACxB,uBAAuB,EACvB,iBAAiB,GAClB,MAAM,SAAS,CAAC;AACjB,YAAY,EACV,SAAS,EACT,YAAY,EACZ,SAAS,EACT,YAAY,EACZ,YAAY,GACb,MAAM,SAAS,CAAC;AACjB,YAAY,EACV,MAAM,EACN,OAAO,EACP,WAAW,EACX,eAAe,EACf,WAAW,EACX,cAAc,GACf,MAAM,oBAAoB,CAAC;AAE5B;oDACoD;AACpD,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC;IAC3B,QAAQ,CAAC,QAAQ,EAAE,WAAW,CAAC;CAChC;AAED;;;2DAG2D;AAC3D,wBAAgB,gBAAgB,CAAC,IAAI,EAAE;IACrC,QAAQ,CAAC,MAAM,EAAE,cAAc,CAAC;IAChC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,aAAa,EAAE,aAAa,GAAG,IAAI,CAAC;IAC7C,QAAQ,CAAC,SAAS,CAAC,EAAE,eAAe,CAAC;IACrC;6EACyE;IACzE,QAAQ,CAAC,QAAQ,CAAC,EAAE,oBAAoB,GAAG,IAAI,CAAC;CACjD,GAAG;IAAE,QAAQ,CAAC,SAAS,EAAE,iBAAiB,CAAC;IAAC,QAAQ,CAAC,kBAAkB,CAAC,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAA;CAAE,CAa/F;AAED;;;;GAIG;AACH,wBAAgB,wBAAwB,CACtC,OAAO,EAAE,qBAAqB,GAAG,SAAS,EAC1C,QAAQ,EAAE,oBAAoB,GAAG,IAAI,GACpC,mBAAmB,GAAG,SAAS,CAcjC;AAED;;2EAE2E;AAC3E,wBAAgB,uBAAuB,CAAC,IAAI,EAAE;IAC5C,QAAQ,CAAC,MAAM,EAAE,cAAc,CAAC;IAChC,QAAQ,CAAC,aAAa,CAAC,EAAE,aAAa,CAAC;IACvC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B;;4BAEwB;IACxB,QAAQ,CAAC,OAAO,CAAC,EAAE,qBAAqB,CAAC;IACzC;;kEAE8D;IAC9D,QAAQ,CAAC,QAAQ,CAAC,EAAE,oBAAoB,GAAG,IAAI,CAAC;CACjD,GAAG,iBAAiB,CAcpB"}

package/dist/artifacts/index.js

@@ -7,7 +7,7 @@
  * lifecycle + `@step`; chunk B adds the artifact primitives (save/load/link).
  */
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.TAINT_DEFAULT_CAP = exports.TAINT_DEFAULT_MAX_DEPTH = exports.computeDownstreamClosure = exports.normalizeClassification = exports.isDataClassification = exports.SENSITIVE_CLASSIFICATIONS = exports.DATA_CLASSIFICATIONS = exports.scrubDetectors = exports.detectSpans = exports.luhnValid = exports.scrubContent = exports.uploadArtifactContent = exports.openArtifactStore = exports.createArtifactApi = exports.step = exports.createRunNamespace = exports.getActiveRunContext = void 0;
+exports.TAINT_DEFAULT_CAP = exports.TAINT_DEFAULT_MAX_DEPTH = exports.computeDownstreamClosure = exports.normalizeClassification = exports.isDataClassification = exports.SENSITIVE_CLASSIFICATIONS = exports.DATA_CLASSIFICATIONS = exports.scrubDetectors = exports.detectSpans = exports.luhnValid = exports.scrubContent = exports.uploadArtifactContent = exports.parseAuthoringDoc = exports.assertValidManifest = exports.validateManifest = exports.openArtifactStore = exports.createArtifactApi = exports.step = exports.createRunNamespace = exports.getActiveRunContext = void 0;
 exports.wireRigArtifacts = wireRigArtifacts;
 exports.buildArtifactContentDeps = buildArtifactContentDeps;
 exports.createArtifactNamespace = createArtifactNamespace;
@@ -24,6 +24,13 @@ var artifact_2 = require("./artifact");
 Object.defineProperty(exports, "createArtifactApi", { enumerable: true, get: function () { return artifact_2.createArtifactApi; } });
 var artifact_store_1 = require("../telemetry/artifact-store");
 Object.defineProperty(exports, "openArtifactStore", { enumerable: true, get: function () { return artifact_store_1.openArtifactStore; } });
+// PSR-1 — the structure-only assembly-manifest model (spec §2.1). Re-exported
+// here so `export * from "./artifacts"` in index.ts puts it on the public
+// `modelrig` surface for the InferWealth inference + a future MCP write path.
+var manifest_1 = require("../prompts/manifest");
+Object.defineProperty(exports, "validateManifest", { enumerable: true, get: function () { return manifest_1.validateManifest; } });
+Object.defineProperty(exports, "assertValidManifest", { enumerable: true, get: function () { return manifest_1.assertValidManifest; } });
+Object.defineProperty(exports, "parseAuthoringDoc", { enumerable: true, get: function () { return manifest_1.parseAuthoringDoc; } });
 var content_uploader_2 = require("./content-uploader");
 Object.defineProperty(exports, "uploadArtifactContent", { enumerable: true, get: function () { return content_uploader_2.uploadArtifactContent; } });
 var scrub_1 = require("./scrub");

package/dist/bakeoff/groundedness.d.ts

@@ -0,0 +1,58 @@
+/**
+ * Evidence groundedness grader (call-QA F3 / research §4 G6, spec §5). A
+ * DETERMINISTIC bake-off tier that scores a scorecard OUTPUT by whether its
+ * evidence quotes are actually present in the replayed INPUT (the transcript /
+ * source). A scorer that invents justifications — quotes that never appear in
+ * the input — is penalized; this is what stops a model from fabricating
+ * evidence to defend a score.
+ *
+ * Unlike the golden tiers (exact / field-level / llm-judge in quality.ts), this
+ * grades the output against the INPUT, not a corrected golden, so it applies
+ * whether or not an eval-case `expected` value is present.
+ *
+ * The scorecard OUTPUT shape (call-QA F2 emit):
+ *   { criteria: [{ id, score, evidence: [{ quote, turn_id? }], comment }], score, comment }
+ *
+ * Grounding is a normalized SUBSTRING match against the DECODED input values
+ * (inputHaystack): the string leaf values the model was actually shown — never
+ * the JSON envelope's escaping or its keys — so a truthful quote spanning escaped
+ * chars is grounded and a fabricated quote equal to a key is not. Trivially short
+ * quotes never ground (MIN_GROUNDED_QUOTE_LEN).
+ *
+ * SCOPE NOTE (F3 vs F5): `turn_id` on an evidence entry is carried but NOT
+ * hard-validated — turn-scoped matching against the diarized transcript-with-
+ * turns artifact is F5's job (spec §7). F3 is substring grounding only.
+ *
+ * Pure; no I/O. Unit-tested directly (groundedness.test.ts).
+ */
+/**
+ * Pull every `criteria[].evidence[].quote` string from a scorecard output.
+ * Tolerant of missing / malformed shapes: a non-object output, a missing or
+ * non-array `criteria`, a criterion without an `evidence` array, or an evidence
+ * entry without a string `quote` are all skipped rather than throwing. Returns
+ * [] for anything it cannot read. Empty (whitespace-only) quotes are dropped —
+ * they carry no evidence to ground.
+ */
+export declare function extractEvidenceQuotes(output: unknown): string[];
+/**
+ * The fraction in [0,1] of a scorecard's evidence quotes that are grounded in
+ * the input, or null when there is nothing to ground.
+ *
+ * A quote is GROUNDED when its whitespace-collapsed, case-insensitive form is a
+ * substring of the DECODED input's whitespace-collapsed, case-insensitive text
+ * ({@link inputHaystack} — the string leaf VALUES the model was shown, not the
+ * serialized envelope or its keys) AND it is at least {@link MIN_GROUNDED_QUOTE_LEN}
+ * chars long (a too-trivial quote is never grounded).
+ *
+ * Edge cases (explicit, tested):
+ *   • ZERO evidence quotes across the whole scorecard (none present, or a
+ *     malformed shape yields none) ⇒ null. There is nothing to ground, so the
+ *     caller falls through to the next quality tier — NOT a spurious 1.0 or 0.0.
+ *   • An empty / absent input WITH quotes ⇒ every quote is ungrounded ⇒ 0.
+ *   • Quotes present but ALL below the min length ⇒ 0, NOT null — they were
+ *     emitted, they just carry no evidentiary weight (null is only for ZERO
+ *     emitted quotes).
+ *   • All quotes grounded ⇒ 1; some grounded ⇒ grounded / total.
+ */
+export declare function groundednessScore(output: unknown, input: unknown): number | null;
+//# sourceMappingURL=groundedness.d.ts.map

package/dist/bakeoff/groundedness.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"groundedness.d.ts","sourceRoot":"","sources":["../../src/bakeoff/groundedness.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAoEH;;;;;;;GAOG;AACH,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,OAAO,GAAG,MAAM,EAAE,CAgB/D;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,GAAG,MAAM,GAAG,IAAI,CAYhF"}