modelrig 0.9.0 → 0.10.0

package/dist/index.js

@@ -24,11 +24,12 @@ var __exportStar = (this && this.__exportStar) || function(m, exports) {
     for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
 };
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.bundleFromResolved = exports.runStream = exports.evalCaseCaptureStore = exports.selectEvalCaseCaptures = exports.runBakeoffFromEvalCases = exports.resolveDeterministicQuality = exports.fieldAccuracy = exports.exactMatch = exports.KEY_SHAPED_PREFIXES = exports.containsKeyShapedString = exports.scrubSecrets = exports.hasScope = exports.parseScopes = exports.redactApiKey = exports.looksLikeApiKey = exports.hashApiKeySecret = exports.API_KEY_SECRET_BYTES = exports.API_KEY_SCOPES = exports.API_KEY_PREFIX = exports.resolveArtifactsConfig = exports.resolveOtlpConfig = exports.parseOtlpHeaders = exports.decodeOtlpProtobufTraces = exports.looksLikeLogsPayload = exports.normalizeOtlpTraces = exports.startOtlpEmitterIfConfigured = exports.createOtlpEmitter = exports.TRACEPARENT_TAG = exports.parseTraceparent = exports.buildExportTraceRequest = exports.inferenceToSpan = exports.SEMCONV_VERSION = exports.SinkSendError = exports.createDirectSink = exports.createApiSink = exports.createTelemetryExporter = exports.RESERVED_TAG_KEYS = exports.resolvePipelineSha = exports.reservedTagNearMisses = exports.renderRequestForHash = exports.sanitizeMetaForWire = exports.isMetaSafeString = exports.summarizeAttemptMeta = exports.DEFAULT_INGEST_URL = exports.INGEST_PROTOCOL_VERSION_V1 = exports.INGEST_PROTOCOL_VERSION = exports.INGEST_PATH = exports.foreignOrgGrades = exports.stampBatch = exports.loadConfigFromEnv = void 0;
-exports.RigFailureError = exports.extractCitations = exports.createTavilySearchProvider = exports.sampleQuality = exports.pairedRegret = exports.wilson95 = exports.aggregateVariantMetrics = exports.OUTPUT_MAX_BYTES = exports.retentionExpiry = exports.truncateOutput = exports.selectArmsToKeep = exports.buildBakeoffSamples = exports.createBakeoffSamplesClient = exports.deriveSwapDirection = exports.bakeoffEvidence = exports.computeProposal = exports.mirrorBakeoff = exports.runBakeoff = exports.replayVariant = exports.openTelemetryStore = exports.openCaptureStore = exports.SSE_DONE = exports.MODELRIG_REQUEST_HEADERS = exports.MODELRIG_HEADERS = exports.GATEWAY_PROTOCOL_VERSION = exports.MODELS_PATH = exports.CHAT_COMPLETIONS_PATH = exports.classifyLane = exports.ALL_CAPABILITY_FLAGS = exports.PROVIDER_IDS = exports.RAW_ONLY_FIX_HINT = exports.rawOnlyRouteFailure = exports.requireRoutesDir = exports.runRawStream = exports.runRaw = exports.resolveCallConfigForRun = exports.hashUnitKey = exports.armName = exports.drawArm = exports.narrowExperiment = exports.pinFromResolved = exports.parseCallConfig = exports.narrowCallConfigPin = exports.getCallConfig = exports.createCallConfigResolver = exports.createApiCallConfigFetcher = exports.applyCallConfig = exports.assertMirrorSafe = exports.hashResolvedBundle = exports.resolveRouteBundle = void 0;
-exports.seededCachePolicyProviders = exports.getCachePolicy = exports.DEFAULT_CACHE_HYSTERESIS = exports.classifyCacheVerdict = exports.effectiveInputRate = exports.estimateCostUsd = exports.getPricingV2 = exports.getPricing = exports.resolveCandidates = exports.OPENAI_COMPAT_HOSTS = exports.shapeFireworksModelId = exports.classifyCompatFailure = exports.buildOpenAICompatParams = exports.createOpenAICompatAdapter = exports.createGrokAdapter = exports.createAnthropicAdapter = exports.createDeepSeekAdapter = exports.createOpenAIAdapter = exports.GEMINI_THINKING_CAPABLE_MODELS = exports.createGeminiAdapter = exports.PROVIDER_KEY_ENV = exports.serveabilityWarnings = exports.checkServeability = exports.writeRouteDraft = exports.buildRouteDraft = exports.splitModelKey = exports.seedCandidates = exports.loadRegistryRows = exports.signatureFor = exports.PROVIDER_SIGNATURES = exports.readObjectLiteral = exports.findCallSitesInText = exports.scanRepoForCallSites = exports.capabilitiesFor = exports.routeNameFor = exports.buildMigrationMarkdown = exports.runInit = exports.renderConfigErrorForTerminal = exports.describeConfigFailure = exports.teachConfigError = exports.classifyConfigProblem = exports.CONFIG_TEACHING = exports.mergeLoadedRoutes = exports.loadRoutesWithExtra = exports.loadRoutes = exports.RouteConfigError = exports.renderFailureForTerminal = exports.teach = exports.FAILURE_TEACHING = exports.isRigFailure = void 0;
-exports.rollupConformRate = exports.evaluateConformDegradation = exports.runMonitorCycle = exports.assertTransition = exports.createProposalsClient = exports.MONITOR_SOURCE_PREFIX = exports.MONITOR_CYCLE_MARKER = exports.REGRET_MONITOR_MARGIN = exports.REGRET_MONITOR_MIN_N = exports.REGRET_MONITOR_BASELINE_DAYS = exports.REGRET_MONITOR_WINDOW_DAYS = exports.createRegretMonitorReads = exports.regretMonitorConfig = exports.cyclePointFromArtifact = exports.aggregateRegretBand = exports.evaluateRegretDrift = exports.runRegretMonitorCycle = exports.evaluateUpgradeOpportunities = exports.explainCacheContext = exports.PROPOSAL_TTL_DAYS = exports.regretBreachTriggerHash = exports.upgradeTriggerHash = exports.manualChallengerTriggerHash = exports.triggerHash = exports.evaluateEvents = exports.RUNG1_MIN_GRADES = exports.computeCoverage = exports.computeParity = exports.factsUnderCredential = exports.factsFor = exports.PROBE_FRESHNESS_SLO_DAYS = exports.stalenessSentence = exports.probeFreshness = exports.callNotesFor = exports.evaluateChallengerEligibility = exports.requirementPredicates = exports.PREDICATE_GLOSS = exports.ALL_CAPABILITY_PREDICATES = exports.explainEmptySelection = exports.hasCapability = exports.selectModels = exports.parseCapabilityQuery = exports.capabilityFactsFromEntry = exports.loadRegistryFacts = exports.fingerprintSchema = exports.loadManifest = exports.SNAPSHOT_BASIS = exports.describePricingV2 = exports.tierRates = exports.synthesizeFromFlat = void 0;
-exports.computeOdometer = exports.createSwapsClient = exports.executeSwap = exports.trialVariantName = exports.buildDeclareTrialChange = exports.buildRestoreYaml = exports.buildSwapChange = exports.runTelemetryQuery = exports.RESERVED_DIMENSION_NAMES = exports.METRIC_COLUMNS = exports.DIMENSION_COLUMNS = exports.sinceIsoFor = exports.savedQueryById = exports.SAVED_QUERIES = exports.ANALYTICS_SCAN_CAP = exports.selectableColumnsAreMetaSafe = exports.planAnalyticsRead = exports.evaluateAnalyticsQuery = exports.describeAnalyticsSchema = exports.parseQuery = exports.QueryGrammarError = exports.compileQuery = exports.writePriorsCells = exports.aggregatePairwiseFromTelemetry = exports.aggregatePriors = exports.DEFAULT_WATCH_MONTHLY_USD = exports.watchEnvelopeKey = exports.reserveWatchBudget = exports.WATCH_STATE_KEY = exports.createFileWatchStateStore = exports.createControlPlaneWatchStateStore = exports.createWatchStateStore = exports.saveWatchState = exports.loadWatchState = exports.computeWatchEvents = exports.buildPriceUniverse = exports.runWatchCycle = exports.DEFAULT_MONITOR_CONFIG = exports.createMonitorReads = void 0;
+exports.redactApiKey = exports.looksLikeApiKey = exports.hashApiKeySecret = exports.API_KEY_SECRET_BYTES = exports.API_KEY_SCOPES = exports.API_KEY_PREFIX = exports.resolveArtifactsConfig = exports.createToolRegistry = exports.SlotResolutionError = exports.assemblePrompt = exports.createEmbeddedPrompts = exports.createPromptResolver = exports.parseServedPrompt = exports.createPromptCache = exports.createApiPromptFetcher = exports.promptTemplateSha = exports.normalizeManifest = exports.parseAuthoringDoc = exports.assertValidManifest = exports.validateManifest = exports.resolveOtlpConfig = exports.parseOtlpHeaders = exports.decodeOtlpProtobufTraces = exports.looksLikeLogsPayload = exports.normalizeOtlpTraces = exports.startOtlpEmitterIfConfigured = exports.createOtlpEmitter = exports.TRACEPARENT_TAG = exports.parseTraceparent = exports.buildExportTraceRequest = exports.inferenceToSpan = exports.SEMCONV_VERSION = exports.SinkSendError = exports.createDirectSink = exports.createApiSink = exports.createTelemetryExporter = exports.RESERVED_TAG_KEYS = exports.resolvePipelineSha = exports.reservedTagNearMisses = exports.renderRequestForHash = exports.sanitizeMetaForWire = exports.isMetaSafeString = exports.summarizeAttemptMeta = exports.DEFAULT_INGEST_URL = exports.INGEST_PROTOCOL_VERSION_V1 = exports.INGEST_PROTOCOL_VERSION = exports.INGEST_PATH = exports.foreignOrgGrades = exports.stampBatch = exports.loadConfigFromEnv = void 0;
+exports.computeProposal = exports.mirrorBakeoff = exports.runBakeoff = exports.replayVariant = exports.openTelemetryStore = exports.openCaptureStore = exports.SSE_DONE = exports.MODELRIG_REQUEST_HEADERS = exports.MODELRIG_HEADERS = exports.GATEWAY_PROTOCOL_VERSION = exports.MODELS_PATH = exports.CHAT_COMPLETIONS_PATH = exports.classifyLane = exports.ALL_CAPABILITY_FLAGS = exports.PROVIDER_IDS = exports.RAW_ONLY_FIX_HINT = exports.rawOnlyRouteFailure = exports.requireRoutesDir = exports.runRawStream = exports.runRaw = exports.resolveCallConfigForRun = exports.hashUnitKey = exports.armName = exports.drawArm = exports.narrowExperiment = exports.pinFromResolved = exports.parseCallConfig = exports.narrowCallConfigPin = exports.getCallConfig = exports.createCallConfigResolver = exports.createApiCallConfigFetcher = exports.applyCallConfig = exports.assertMirrorSafe = exports.hashResolvedBundle = exports.resolveRouteBundle = exports.bundleFromResolved = exports.runStream = exports.evalCaseCaptureStore = exports.selectEvalCaseCaptures = exports.runBakeoffFromEvalCases = exports.extractEvidenceQuotes = exports.groundednessScore = exports.resolveDeterministicQuality = exports.fieldAccuracy = exports.exactMatch = exports.KEY_SHAPED_PREFIXES = exports.containsKeyShapedString = exports.scrubSecrets = exports.hasScope = exports.parseScopes = void 0;
+exports.servedDestinations = exports.DEFAULT_DESTINATION = exports.DESTINATIONS = exports.GEMINI_THINKING_CAPABLE_MODELS = exports.createGeminiAdapter = exports.PROVIDER_KEY_ENV = exports.serveabilityWarnings = exports.checkServeability = exports.writeRouteDraft = exports.buildRouteDraft = exports.splitModelKey = exports.seedCandidates = exports.loadRegistryRows = exports.signatureFor = exports.PROVIDER_SIGNATURES = exports.readObjectLiteral = exports.findCallSitesInText = exports.scanRepoForCallSites = exports.capabilitiesFor = exports.routeNameFor = exports.buildMigrationMarkdown = exports.runInit = exports.renderConfigErrorForTerminal = exports.describeConfigFailure = exports.teachConfigError = exports.classifyConfigProblem = exports.CONFIG_TEACHING = exports.mergeLoadedRoutes = exports.loadRoutesWithExtra = exports.loadRoutes = exports.RouteConfigError = exports.renderFailureForTerminal = exports.teach = exports.FAILURE_TEACHING = exports.isRigFailure = exports.RigFailureError = exports.extractCitations = exports.createTavilySearchProvider = exports.sampleQuality = exports.pairedRegret = exports.wilson95 = exports.aggregateVariantMetrics = exports.OUTPUT_MAX_BYTES = exports.retentionExpiry = exports.truncateOutput = exports.selectArmsToKeep = exports.buildBakeoffSamples = exports.createBakeoffSamplesClient = exports.deriveSwapDirection = exports.bakeoffEvidence = void 0;
+exports.PROPOSAL_TTL_DAYS = exports.regretBreachTriggerHash = exports.upgradeTriggerHash = exports.manualChallengerTriggerHash = exports.triggerHash = exports.evaluateEvents = exports.RUNG1_MIN_GRADES = exports.computeCoverage = exports.computeParity = exports.factsUnderCredential = exports.factsFor = exports.PROBE_FRESHNESS_SLO_DAYS = exports.stalenessSentence = exports.probeFreshness = exports.callNotesFor = exports.evaluateChallengerEligibility = exports.requirementPredicates = exports.PREDICATE_GLOSS = exports.ALL_CAPABILITY_PREDICATES = exports.explainEmptySelection = exports.hasCapability = exports.selectModels = exports.parseCapabilityQuery = exports.capabilityFactsFromEntry = exports.loadRegistryFacts = exports.fingerprintSchema = exports.loadManifest = exports.SNAPSHOT_BASIS = exports.describePricingV2 = exports.tierRates = exports.synthesizeFromFlat = exports.seededCachePolicyProviders = exports.getCachePolicy = exports.DEFAULT_CACHE_HYSTERESIS = exports.classifyCacheVerdict = exports.effectiveInputRate = exports.estimateCostUsd = exports.getPricingV2 = exports.getPricing = exports.resolveCandidates = exports.OPENAI_COMPAT_HOSTS = exports.shapeFireworksModelId = exports.classifyCompatFailure = exports.buildOpenAICompatParams = exports.createOpenAICompatAdapter = exports.createGrokAdapter = exports.createAnthropicAdapter = exports.createDeepSeekAdapter = exports.createOpenAIAdapter = exports.destinationSupported = void 0;
+exports.RESERVED_DIMENSION_NAMES = exports.METRIC_COLUMNS = exports.DIMENSION_COLUMNS = exports.sinceIsoFor = exports.savedQueryById = exports.SAVED_QUERIES = exports.ANALYTICS_SCAN_CAP = exports.selectableColumnsAreMetaSafe = exports.planAnalyticsRead = exports.evaluateAnalyticsQuery = exports.describeAnalyticsSchema = exports.parseQuery = exports.QueryGrammarError = exports.compileQuery = exports.writePriorsCells = exports.aggregatePairwiseFromTelemetry = exports.aggregatePriors = exports.DEFAULT_WATCH_MONTHLY_USD = exports.watchEnvelopeKey = exports.reserveWatchBudget = exports.WATCH_STATE_KEY = exports.createFileWatchStateStore = exports.createControlPlaneWatchStateStore = exports.createWatchStateStore = exports.saveWatchState = exports.loadWatchState = exports.computeWatchEvents = exports.buildPriceUniverse = exports.runWatchCycle = exports.DEFAULT_MONITOR_CONFIG = exports.createMonitorReads = exports.rollupConformRate = exports.evaluateConformDegradation = exports.runMonitorCycle = exports.assertTransition = exports.createProposalsClient = exports.MONITOR_SOURCE_PREFIX = exports.MONITOR_CYCLE_MARKER = exports.REGRET_MONITOR_MARGIN = exports.REGRET_MONITOR_MIN_N = exports.REGRET_MONITOR_BASELINE_DAYS = exports.REGRET_MONITOR_WINDOW_DAYS = exports.createRegretMonitorReads = exports.regretMonitorConfig = exports.cyclePointFromArtifact = exports.aggregateRegretBand = exports.evaluateRegretDrift = exports.runRegretMonitorCycle = exports.evaluateUpgradeOpportunities = exports.explainCacheContext = void 0;
+exports.computeOdometer = exports.createSwapsClient = exports.executeSwap = exports.trialVariantName = exports.buildDeclareTrialChange = exports.buildRestoreYaml = exports.buildSwapChange = exports.runTelemetryQuery = void 0;
 exports.createRig = createRig;
 const build_adapters_1 = require("./adapters/build-adapters");
 const config_1 = require("./config");
@@ -36,6 +37,7 @@ const rawonly_1 = require("./run/rawonly");
 const resolved_bundle_1 = require("./routes/resolved-bundle");
 const serveability_1 = require("./routes/serveability");
 const manifest_1 = require("./routes/manifest");
+const tools_register_1 = require("./prompts/tools-register");
 const run_1 = require("./run/run");
 const stream_1 = require("./run/stream");
 const raw_1 = require("./run/raw");
@@ -150,6 +152,7 @@ function createRig(config) {
             artifactsEnabled,
             artifactStore,
             ...(onArtifactsFlushed !== undefined ? { onArtifactsFlushed } : {}),
+            ...(config.expectOrg !== undefined ? { expectOrg: config.expectOrg } : {}),
         })
         : null;
     // Boot banner (§2) + one-time deprecation warnings (§3): posture, plus a loud
@@ -171,6 +174,16 @@ function createRig(config) {
         captures,
         search,
         settings, // §1.5 resolver (null local-only); capture-WRITE gate consults it
+        managedServingEnabled: config.managedServing === true, // U3 (D-2): `config.managedServing`, set IN CODE via createRig (NOT an env var); default off ⇒ `modelrig-served` fails closed pre-dispatch
+        // K1 (managed-serving-keyless §2/§3): the hosted-gateway serving transport,
+        // resolved from the SAME `api`-mode export the telemetry sink uses — the
+        // ingest host (MODELRIG_INGEST_URL ‖ default) as `baseUrl`, the `rig_sk_` key
+        // as the Bearer credential (NO provider key ever). Absent for local-only /
+        // direct rigs ⇒ a `modelrig-served` run fails closed (no control plane to
+        // serve it), never a silent `direct` fall back. Read ONLY on the served path.
+        ...(config.export?.mode === "api"
+            ? { serve: { baseUrl: config.export.ingestUrl, apiKey: config.export.apiKey } }
+            : {}),
         ...(config.envelopeBudgetUsd !== undefined
             ? { envelopeBudgetUsd: config.envelopeBudgetUsd }
             : {}),
@@ -197,11 +210,16 @@ function createRig(config) {
     // Bake-off review-sample sink (addendum A3) — direct mode only (see buildDirectSamplesSink; undefined for api/local rigs). S7: scrubs input+output with the task ScrubMode before persist.
     const samplesSink = config.export?.mode === "direct" ? (0, samples_1.buildDirectSamplesSink)({ ...config.export, resolver: settings, defaultScrub: config.artifacts?.content !== undefined ? config_1.DEFAULT_CONTENT_SCRUB_MODE : "off" }) : undefined;
     const resolveReferenceAuto = (0, reference_1.makeReferenceAutoResolver)(config.registryPath); // RB-1 reference:auto
+    // PSR-2b (spec §4 ADJ-2): the client-fill tool registry backing rig.tools.
+    // One per rig; empty until the app calls rig.tools.register. In-process only —
+    // no network/telemetry reach, so bound tool keys never leave the process.
+    const tools = (0, tools_register_1.createToolRegistry)();
     return {
         serveability,
         capabilities,
         searchAvailable: search !== null && search !== undefined,
         artifacts: artifactNamespace,
+        tools,
         exporterStats: () => (exporter !== null ? exporter.stats() : { poisonSkipped: {} }),
         status: () => (0, status_1.buildRigStatus)(config, settings?.snapshot() ?? new Map(), undefined, settings?.posture() ?? null),
         run(route, opts) {
@@ -363,6 +381,33 @@ Object.defineProperty(exports, "resolveOtlpConfig", { enumerable: true, get: fun
 // Artifact / execution-graph namespace (Expansion E2) — the barrel re-exports
 // step/run-context/types; the run lifecycle is bound per-rig via rig.artifacts.
 __exportStar(require("./artifacts"), exports);
+// PSR-1 — the structure-only assembly-manifest model (spec §2.1), re-exported
+// EXPLICITLY from the package entry (not only transitively via the artifacts
+// star-export) so an external consumer resolving the built `dist/index.d.ts`
+// gets `Manifest`/`Slot` + the validators on the public surface unambiguously.
+var manifest_2 = require("./prompts/manifest");
+Object.defineProperty(exports, "validateManifest", { enumerable: true, get: function () { return manifest_2.validateManifest; } });
+Object.defineProperty(exports, "assertValidManifest", { enumerable: true, get: function () { return manifest_2.assertValidManifest; } });
+Object.defineProperty(exports, "parseAuthoringDoc", { enumerable: true, get: function () { return manifest_2.parseAuthoringDoc; } });
+Object.defineProperty(exports, "normalizeManifest", { enumerable: true, get: function () { return manifest_2.normalizeManifest; } });
+// PSR-2 — the content-hash id (`template_sha`) the version store dedupes on.
+var version_hash_1 = require("./prompts/version-hash");
+Object.defineProperty(exports, "promptTemplateSha", { enumerable: true, get: function () { return version_hash_1.promptTemplateSha; } });
+// PSR-2b — SDK fetch-by-label + content cache + fail-open resolver + the
+// client-fill engine (slot resolver) + the tool-binding registry (rig.tools).
+// All client-side / in-process (spec §3–§4).
+var prompt_fetch_1 = require("./prompts/prompt-fetch");
+Object.defineProperty(exports, "createApiPromptFetcher", { enumerable: true, get: function () { return prompt_fetch_1.createApiPromptFetcher; } });
+Object.defineProperty(exports, "createPromptCache", { enumerable: true, get: function () { return prompt_fetch_1.createPromptCache; } });
+Object.defineProperty(exports, "parseServedPrompt", { enumerable: true, get: function () { return prompt_fetch_1.parseServedPrompt; } });
+var prompt_resolve_1 = require("./prompts/prompt-resolve");
+Object.defineProperty(exports, "createPromptResolver", { enumerable: true, get: function () { return prompt_resolve_1.createPromptResolver; } });
+Object.defineProperty(exports, "createEmbeddedPrompts", { enumerable: true, get: function () { return prompt_resolve_1.createEmbeddedPrompts; } });
+var slot_resolver_1 = require("./prompts/slot-resolver");
+Object.defineProperty(exports, "assemblePrompt", { enumerable: true, get: function () { return slot_resolver_1.assemblePrompt; } });
+Object.defineProperty(exports, "SlotResolutionError", { enumerable: true, get: function () { return slot_resolver_1.SlotResolutionError; } });
+var tools_register_2 = require("./prompts/tools-register");
+Object.defineProperty(exports, "createToolRegistry", { enumerable: true, get: function () { return tools_register_2.createToolRegistry; } });
 var config_4 = require("./config");
 Object.defineProperty(exports, "resolveArtifactsConfig", { enumerable: true, get: function () { return config_4.resolveArtifactsConfig; } });
 __exportStar(require("./detect/detector"), exports); // shared Detector interface (screening A1, types-only)
@@ -391,6 +436,9 @@ var quality_1 = require("./bakeoff/quality"); // LRE-1b graders
 Object.defineProperty(exports, "exactMatch", { enumerable: true, get: function () { return quality_1.exactMatch; } });
 Object.defineProperty(exports, "fieldAccuracy", { enumerable: true, get: function () { return quality_1.fieldAccuracy; } });
 Object.defineProperty(exports, "resolveDeterministicQuality", { enumerable: true, get: function () { return quality_1.resolveDeterministicQuality; } });
+var groundedness_1 = require("./bakeoff/groundedness"); // call-QA F3/G6 evidence-grounded grader
+Object.defineProperty(exports, "groundednessScore", { enumerable: true, get: function () { return groundedness_1.groundednessScore; } });
+Object.defineProperty(exports, "extractEvidenceQuotes", { enumerable: true, get: function () { return groundedness_1.extractEvidenceQuotes; } });
 // LRE-1b server runner: the from-eval-cases orchestrator + injected-store contract so modelrig-server drives a cross-plane golden bake-off with the rig's keyed adapters (rig.bakeoffFromEvalCasesWith).
 var eval_cases_1 = require("./bakeoff/eval-cases");
 Object.defineProperty(exports, "runBakeoffFromEvalCases", { enumerable: true, get: function () { return eval_cases_1.runBakeoffFromEvalCases; } });
@@ -525,8 +573,14 @@ Object.defineProperty(exports, "PROVIDER_KEY_ENV", { enumerable: true, get: func
 var gemini_1 = require("./adapters/gemini");
 Object.defineProperty(exports, "createGeminiAdapter", { enumerable: true, get: function () { return gemini_1.createGeminiAdapter; } });
 Object.defineProperty(exports, "GEMINI_THINKING_CAPABLE_MODELS", { enumerable: true, get: function () { return gemini_1.GEMINI_THINKING_CAPABLE_MODELS; } });
-// CE-9 R5/R6 — the raw-lane provider × knob support matrix (single source of truth for the guard AND the docs) + `rawKnobSupport(p)` so customers don't duplicate our provider lists.
+// CE-9 R5/R6 + Unified Route U1 — the one provider × capability vocabulary (single source of truth for the guard, the docs matrix, AND the serving-destination lookups) + `rawKnobSupport(p)` / `destinationSupport(p)` so customers don't duplicate our provider lists.
 __exportStar(require("./run/raw-support"), exports);
+// Unified Route U1 (ruling D-2) — the serving `destination` vocabulary; its lookups read the `serving` cell of the capability table above (one source of truth). Managed serving is gated behind the `config.managedServing` flag (set in code via createRig, default off; U3).
+var destination_1 = require("./run/destination");
+Object.defineProperty(exports, "DESTINATIONS", { enumerable: true, get: function () { return destination_1.DESTINATIONS; } });
+Object.defineProperty(exports, "DEFAULT_DESTINATION", { enumerable: true, get: function () { return destination_1.DEFAULT_DESTINATION; } });
+Object.defineProperty(exports, "servedDestinations", { enumerable: true, get: function () { return destination_1.servedDestinations; } });
+Object.defineProperty(exports, "destinationSupported", { enumerable: true, get: function () { return destination_1.destinationSupported; } });
 var openai_1 = require("./adapters/openai");
 Object.defineProperty(exports, "createOpenAIAdapter", { enumerable: true, get: function () { return openai_1.createOpenAIAdapter; } });
 var deepseek_1 = require("./adapters/deepseek");
@@ -561,8 +615,8 @@ Object.defineProperty(exports, "synthesizeFromFlat", { enumerable: true, get: fu
 Object.defineProperty(exports, "tierRates", { enumerable: true, get: function () { return pricing_shape_1.tierRates; } });
 Object.defineProperty(exports, "describePricingV2", { enumerable: true, get: function () { return pricing_shape_1.describePricingV2; } });
 Object.defineProperty(exports, "SNAPSHOT_BASIS", { enumerable: true, get: function () { return pricing_shape_1.SNAPSHOT_BASIS; } });
-var manifest_2 = require("./routes/manifest");
-Object.defineProperty(exports, "loadManifest", { enumerable: true, get: function () { return manifest_2.loadManifest; } });
+var manifest_3 = require("./routes/manifest");
+Object.defineProperty(exports, "loadManifest", { enumerable: true, get: function () { return manifest_3.loadManifest; } });
 var fingerprint_1 = require("./registry/fingerprint");
 Object.defineProperty(exports, "fingerprintSchema", { enumerable: true, get: function () { return fingerprint_1.fingerprintSchema; } });
 var facts_2 = require("./registry/facts");

package/dist/prompts/manifest.d.ts

@@ -0,0 +1,128 @@
+/**
+ * PSR-1 — the assembly-manifest model (spec §2.1, authoring-guide §2–§3).
+ *
+ * A prompt in ModelRig is TWO things: the authored `template` text and the
+ * `manifest` — the ordered recipe for assembling the final prompt at call time.
+ * This module is the **structure-only** manifest: its `Slot[]` records HOW each
+ * part of the prompt is filled, never the filled value (the privacy guarantee —
+ * a `dynamic·tool` slot names `search_tickets`, never what it returned).
+ *
+ * PSR-1 is ZERO-DDL and validate-only: nothing here serves or stores a version.
+ * It exists to prove the model against real prompts (the InferWealth inference)
+ * and a hand-authored doc (ADJ-1) before PSR-2 builds the `prompt_versions`
+ * store. Pure + dependency-free (no YAML dep — the authoring doc is accepted as
+ * JSON per §7; YAML is an optional future add).
+ */
+/** A slot is either authored text (`static`) or filled at run time (`dynamic`). */
+export type SlotKind = "static" | "dynamic";
+/** How a `dynamic` slot is filled (authoring-guide §2). Never the value. */
+export type DynamicSourceKind = "tool" | "cache" | "upstream" | "variable";
+/** Cache placement for a slot's content — `prefix` puts it at the front so the
+ * provider caches it across calls (maps to inferences.cache_key / prefix
+ * fingerprint); `none` is uncached. */
+export type CachePolicy = "prefix" | "none";
+/** Which authored field a `static` slot pulls its text from when it is not
+ * inlined (authoring-guide §3: the first static slot is `from: system`, the
+ * task instructions are `from: template`). */
+export type StaticFrom = "system" | "template";
+/** A `dynamic` slot's fill declaration — the source kind, the reference it
+ * resolves (tool name / cache handle / upstream step key / variable name), and
+ * an optional cache policy. Structure only; carries no resolved data (D6). */
+export interface DynamicSource {
+    readonly kind: DynamicSourceKind;
+    readonly ref: string;
+    readonly cache_policy?: CachePolicy;
+}
+/**
+ * One slot in the assembly manifest.
+ *
+ * A `static` slot carries EITHER inline `text` OR a `from` reference to the
+ * doc's authored `system` / `template` field — exactly one (text XOR from;
+ * authoring-guide §3 uses `from`, spec §2.1 uses inline `text` — both are
+ * reconciled here). A `dynamic` slot carries a `source`.
+ */
+export interface Slot {
+    readonly id: string;
+    readonly kind: SlotKind;
+    /** static only — inline authored text (XOR `from`). */
+    readonly text?: string;
+    /** static only — pull the text from the doc's `system`/`template` (XOR `text`). */
+    readonly from?: StaticFrom;
+    /** dynamic only — how the slot is filled at run time. */
+    readonly source?: DynamicSource;
+}
+/** The assembly manifest — an ordered list of slots; list order = send order.
+ * No resolved values are ever present (structure only, D6). */
+export interface Manifest {
+    readonly slots: readonly Slot[];
+}
+/** Result of {@link validateManifest} — a discriminated union so callers get the
+ * narrowed `Manifest` on success and a teaching error list on failure. */
+export type ManifestValidation = {
+    readonly ok: true;
+    readonly manifest: Manifest;
+} | {
+    readonly ok: false;
+    readonly errors: readonly string[];
+};
+/** Validate an untrusted value as a {@link Manifest} (spec §4). Rejects: an
+ * unknown slot kind, a `static` slot with BOTH or NEITHER `text`/`from`, a
+ * `dynamic` slot missing its `source` (or with a bad source kind / empty ref /
+ * bad cache_policy), a slot carrying fields of the wrong kind, and duplicate
+ * slot ids. Never throws — returns a result. */
+export declare function validateManifest(input: unknown): ManifestValidation;
+/** Throwing form of {@link validateManifest} — returns the narrowed manifest or
+ * throws with the joined error list. Use where an invalid manifest is a bug the
+ * caller wants surfaced (tests, the emit path's guard). */
+export declare function assertValidManifest(input: unknown): Manifest;
+/**
+ * Reduce a validated {@link Manifest} to ITS CANONICAL SHAPE — the ONE clean
+ * projection PSR-2 persists (spec §4 "re-validate + normalize on ingest").
+ *
+ * WHY (a PSR-1 QA finding): {@link validateManifest} NARROWS an untrusted value
+ * to `Manifest` but casts `slots as Slot[]` — it does NOT strip unknown keys, so
+ * a raw artifact blob can carry extra fields (`text` alongside a `from`, a stray
+ * `note`, a `source` on a static slot) that pass validation and would be stored
+ * verbatim. The ingest path (prompt-ingest.ts) must NEVER trust the artifact blob
+ * as-is: it re-validates AND normalizes here so `template_sha` (computed over the
+ * normalized manifest) is stable — identical content always dedupes to one row,
+ * regardless of incidental key noise in the source artifact.
+ *
+ * Each slot is rebuilt from scratch keeping ONLY the canonical keys:
+ *   static  → { id, kind, text }  XOR  { id, kind, from }
+ *   dynamic → { id, kind, source: { kind, ref, cache_policy? } }
+ * Slot order is preserved (order = send order, D6). The rebuilt manifest is
+ * re-validated ({@link assertValidManifest}) so a caller that skipped validation
+ * still cannot persist a malformed shape.
+ */
+export declare function normalizeManifest(input: Manifest): Manifest;
+/** The declared authoring document (authoring-guide §3). A superset of the
+ * manifest: the authored `system`/`template` text a `from`-slot references, plus
+ * the route metadata PSR-2/PSR-3 persist. PSR-1 reads only `manifest.slots`
+ * (validating that every `from` resolves to a present field). */
+export interface AuthoringDoc {
+    readonly route?: string;
+    readonly segment?: string;
+    readonly system?: string;
+    readonly template?: string;
+    readonly manifest?: {
+        readonly slots?: unknown;
+    };
+    readonly output_schema?: unknown;
+    readonly candidates?: unknown;
+}
+/**
+ * ADJ-1 — the "author from scratch" on-ramp. Parse a declared authoring doc
+ * (authoring-guide §3) into a validated {@link Manifest}. Accepts the doc as a
+ * JSON string OR an already-parsed object (§7: the MCP tool takes JSON; YAML is
+ * an optional future add and is NOT parsed here — a YAML string throws a
+ * teaching error). Beyond {@link validateManifest} it cross-checks that every
+ * `static` slot's `from: system|template` resolves to a present top-level field,
+ * so an author cannot reference authored text the doc does not carry.
+ *
+ * Structure-only: the returned manifest's slots are the authored slots verbatim
+ * (a `from`-slot keeps its `from`; the authored text is NOT inlined), so
+ * `parseAuthoringDoc` round-trips a hand-authored doc.
+ */
+export declare function parseAuthoringDoc(input: string | AuthoringDoc): Manifest;
+//# sourceMappingURL=manifest.d.ts.map

package/dist/prompts/manifest.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"manifest.d.ts","sourceRoot":"","sources":["../../src/prompts/manifest.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,mFAAmF;AACnF,MAAM,MAAM,QAAQ,GAAG,QAAQ,GAAG,SAAS,CAAC;AAE5C,4EAA4E;AAC5E,MAAM,MAAM,iBAAiB,GAAG,MAAM,GAAG,OAAO,GAAG,UAAU,GAAG,UAAU,CAAC;AAE3E;;uCAEuC;AACvC,MAAM,MAAM,WAAW,GAAG,QAAQ,GAAG,MAAM,CAAC;AAE5C;;8CAE8C;AAC9C,MAAM,MAAM,UAAU,GAAG,QAAQ,GAAG,UAAU,CAAC;AAE/C;;8EAE8E;AAC9E,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,IAAI,EAAE,iBAAiB,CAAC;IACjC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,YAAY,CAAC,EAAE,WAAW,CAAC;CACrC;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,IAAI;IACnB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC;IACxB,uDAAuD;IACvD,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,mFAAmF;IACnF,QAAQ,CAAC,IAAI,CAAC,EAAE,UAAU,CAAC;IAC3B,yDAAyD;IACzD,QAAQ,CAAC,MAAM,CAAC,EAAE,aAAa,CAAC;CACjC;AAED;+DAC+D;AAC/D,MAAM,WAAW,QAAQ;IACvB,QAAQ,CAAC,KAAK,EAAE,SAAS,IAAI,EAAE,CAAC;CACjC;AAED;0EAC0E;AAC1E,MAAM,MAAM,kBAAkB,GAC1B;IAAE,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAC;IAAC,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAA;CAAE,GAClD;IAAE,QAAQ,CAAC,EAAE,EAAE,KAAK,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,CAAA;CAAE,CAAC;AAmB/D;;;;gDAIgD;AAChD,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,OAAO,GAAG,kBAAkB,CA2DnE;AAkBD;;2DAE2D;AAC3D,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,OAAO,GAAG,QAAQ,CAM5D;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,QAAQ,GAAG,QAAQ,CAiB3D;AAED;;;iEAGiE;AACjE,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,QAAQ,CAAC,EAAE;QAAE,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,CAAA;KAAE,CAAC;IACjD,QAAQ,CAAC,aAAa,CAAC,EAAE,OAAO,CAAC;IACjC,QAAQ,CAAC,UAAU,CAAC,EAAE,OAAO,CAAC;CAC/B;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,MAAM,GAAG,YAAY,GAAG,QAAQ,CAmCxE"}

package/dist/prompts/manifest.js

@@ -0,0 +1,214 @@
+"use strict";
+/**
+ * PSR-1 — the assembly-manifest model (spec §2.1, authoring-guide §2–§3).
+ *
+ * A prompt in ModelRig is TWO things: the authored `template` text and the
+ * `manifest` — the ordered recipe for assembling the final prompt at call time.
+ * This module is the **structure-only** manifest: its `Slot[]` records HOW each
+ * part of the prompt is filled, never the filled value (the privacy guarantee —
+ * a `dynamic·tool` slot names `search_tickets`, never what it returned).
+ *
+ * PSR-1 is ZERO-DDL and validate-only: nothing here serves or stores a version.
+ * It exists to prove the model against real prompts (the InferWealth inference)
+ * and a hand-authored doc (ADJ-1) before PSR-2 builds the `prompt_versions`
+ * store. Pure + dependency-free (no YAML dep — the authoring doc is accepted as
+ * JSON per §7; YAML is an optional future add).
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.validateManifest = validateManifest;
+exports.assertValidManifest = assertValidManifest;
+exports.normalizeManifest = normalizeManifest;
+exports.parseAuthoringDoc = parseAuthoringDoc;
+const DYNAMIC_KINDS = new Set([
+    "tool",
+    "cache",
+    "upstream",
+    "variable",
+]);
+const CACHE_POLICIES = new Set(["prefix", "none"]);
+const STATIC_FROMS = new Set(["system", "template"]);
+function isRecord(v) {
+    return typeof v === "object" && v !== null && !Array.isArray(v);
+}
+function isNonEmptyString(v) {
+    return typeof v === "string" && v.length > 0;
+}
+/** Validate an untrusted value as a {@link Manifest} (spec §4). Rejects: an
+ * unknown slot kind, a `static` slot with BOTH or NEITHER `text`/`from`, a
+ * `dynamic` slot missing its `source` (or with a bad source kind / empty ref /
+ * bad cache_policy), a slot carrying fields of the wrong kind, and duplicate
+ * slot ids. Never throws — returns a result. */
+function validateManifest(input) {
+    const errors = [];
+    if (!isRecord(input)) {
+        return { ok: false, errors: ["manifest must be an object with a `slots` array"] };
+    }
+    const slots = input["slots"];
+    if (!Array.isArray(slots)) {
+        return { ok: false, errors: ["manifest.slots must be an array"] };
+    }
+    const seenIds = new Set();
+    slots.forEach((raw, i) => {
+        const at = `slots[${i}]`;
+        if (!isRecord(raw)) {
+            errors.push(`${at} must be an object`);
+            return;
+        }
+        const id = raw["id"];
+        if (!isNonEmptyString(id)) {
+            errors.push(`${at}.id must be a non-empty string`);
+        }
+        else if (seenIds.has(id)) {
+            errors.push(`${at}.id "${id}" is a duplicate — slot ids must be unique`);
+        }
+        else {
+            seenIds.add(id);
+        }
+        const kind = raw["kind"];
+        const hasText = raw["text"] !== undefined;
+        const hasFrom = raw["from"] !== undefined;
+        const hasSource = raw["source"] !== undefined;
+        if (kind === "static") {
+            if (hasSource)
+                errors.push(`${at} is static but carries a dynamic \`source\``);
+            if (hasText && hasFrom) {
+                errors.push(`${at} static slot has BOTH \`text\` and \`from\` — exactly one is allowed`);
+            }
+            else if (!hasText && !hasFrom) {
+                errors.push(`${at} static slot has NEITHER \`text\` nor \`from\` — exactly one is required`);
+            }
+            else if (hasText && typeof raw["text"] !== "string") {
+                errors.push(`${at}.text must be a string`);
+            }
+            else if (hasFrom && !STATIC_FROMS.has(raw["from"])) {
+                errors.push(`${at}.from must be one of system, template`);
+            }
+        }
+        else if (kind === "dynamic") {
+            if (hasText || hasFrom) {
+                errors.push(`${at} is dynamic but carries static \`text\`/\`from\``);
+            }
+            if (!hasSource) {
+                errors.push(`${at} dynamic slot is missing its \`source\``);
+            }
+            else {
+                validateSource(raw["source"], at, errors);
+            }
+        }
+        else {
+            errors.push(`${at}.kind must be one of static, dynamic (got ${JSON.stringify(kind)})`);
+        }
+    });
+    if (errors.length > 0)
+        return { ok: false, errors };
+    return { ok: true, manifest: { slots: slots } };
+}
+function validateSource(source, at, errors) {
+    if (!isRecord(source)) {
+        errors.push(`${at}.source must be an object`);
+        return;
+    }
+    if (!DYNAMIC_KINDS.has(source["kind"])) {
+        errors.push(`${at}.source.kind must be one of tool, cache, upstream, variable`);
+    }
+    if (!isNonEmptyString(source["ref"])) {
+        errors.push(`${at}.source.ref must be a non-empty string`);
+    }
+    if (source["cache_policy"] !== undefined && !CACHE_POLICIES.has(source["cache_policy"])) {
+        errors.push(`${at}.source.cache_policy must be one of prefix, none`);
+    }
+}
+/** Throwing form of {@link validateManifest} — returns the narrowed manifest or
+ * throws with the joined error list. Use where an invalid manifest is a bug the
+ * caller wants surfaced (tests, the emit path's guard). */
+function assertValidManifest(input) {
+    const result = validateManifest(input);
+    if (!result.ok) {
+        throw new Error(`invalid manifest: ${result.errors.join("; ")}`);
+    }
+    return result.manifest;
+}
+/**
+ * Reduce a validated {@link Manifest} to ITS CANONICAL SHAPE — the ONE clean
+ * projection PSR-2 persists (spec §4 "re-validate + normalize on ingest").
+ *
+ * WHY (a PSR-1 QA finding): {@link validateManifest} NARROWS an untrusted value
+ * to `Manifest` but casts `slots as Slot[]` — it does NOT strip unknown keys, so
+ * a raw artifact blob can carry extra fields (`text` alongside a `from`, a stray
+ * `note`, a `source` on a static slot) that pass validation and would be stored
+ * verbatim. The ingest path (prompt-ingest.ts) must NEVER trust the artifact blob
+ * as-is: it re-validates AND normalizes here so `template_sha` (computed over the
+ * normalized manifest) is stable — identical content always dedupes to one row,
+ * regardless of incidental key noise in the source artifact.
+ *
+ * Each slot is rebuilt from scratch keeping ONLY the canonical keys:
+ *   static  → { id, kind, text }  XOR  { id, kind, from }
+ *   dynamic → { id, kind, source: { kind, ref, cache_policy? } }
+ * Slot order is preserved (order = send order, D6). The rebuilt manifest is
+ * re-validated ({@link assertValidManifest}) so a caller that skipped validation
+ * still cannot persist a malformed shape.
+ */
+function normalizeManifest(input) {
+    const slots = input.slots.map((slot) => {
+        if (slot.kind === "static") {
+            // text XOR from — validation guarantees exactly one is present.
+            if (slot.text !== undefined) {
+                return { id: slot.id, kind: "static", text: slot.text };
+            }
+            return { id: slot.id, kind: "static", from: slot.from };
+        }
+        const src = slot.source;
+        const source = src.cache_policy !== undefined
+            ? { kind: src.kind, ref: src.ref, cache_policy: src.cache_policy }
+            : { kind: src.kind, ref: src.ref };
+        return { id: slot.id, kind: "dynamic", source };
+    });
+    return assertValidManifest({ slots });
+}
+/**
+ * ADJ-1 — the "author from scratch" on-ramp. Parse a declared authoring doc
+ * (authoring-guide §3) into a validated {@link Manifest}. Accepts the doc as a
+ * JSON string OR an already-parsed object (§7: the MCP tool takes JSON; YAML is
+ * an optional future add and is NOT parsed here — a YAML string throws a
+ * teaching error). Beyond {@link validateManifest} it cross-checks that every
+ * `static` slot's `from: system|template` resolves to a present top-level field,
+ * so an author cannot reference authored text the doc does not carry.
+ *
+ * Structure-only: the returned manifest's slots are the authored slots verbatim
+ * (a `from`-slot keeps its `from`; the authored text is NOT inlined), so
+ * `parseAuthoringDoc` round-trips a hand-authored doc.
+ */
+function parseAuthoringDoc(input) {
+    let doc = input;
+    if (typeof input === "string") {
+        try {
+            doc = JSON.parse(input);
+        }
+        catch (err) {
+            throw new Error("authoring doc must be JSON (YAML is not parsed here — pass JSON per authoring-guide §7): " +
+                (err instanceof Error ? err.message : String(err)));
+        }
+    }
+    if (!isRecord(doc)) {
+        throw new Error("authoring doc must be an object");
+    }
+    const manifestBlock = doc["manifest"];
+    if (!isRecord(manifestBlock)) {
+        throw new Error("authoring doc is missing a `manifest` block");
+    }
+    const manifest = assertValidManifest(manifestBlock);
+    // ADJ-1 cross-check: a `from` slot must reference a present authored field.
+    const hasSystem = typeof doc["system"] === "string";
+    const hasTemplate = typeof doc["template"] === "string";
+    const missing = [];
+    for (const slot of manifest.slots) {
+        if (slot.from === "system" && !hasSystem)
+            missing.push(`slot "${slot.id}" references \`system\``);
+        if (slot.from === "template" && !hasTemplate)
+            missing.push(`slot "${slot.id}" references \`template\``);
+    }
+    if (missing.length > 0) {
+        throw new Error(`authoring doc has \`from\` slots with no matching authored field: ${missing.join("; ")}`);
+    }
+    return manifest;
+}

package/dist/prompts/prompt-fetch.d.ts

@@ -0,0 +1,84 @@
+/**
+ * PSR-2b — SDK fetch-by-label + the content-addressed prompt cache (spec §3
+ * "SDK read", §4). The remote half of serving a prompt by its movable `prod`
+ * label.
+ *
+ * The gateway already serves the promoted version's template+manifest through
+ * `routes.bundle` (PSR-2a's write-through). This module adds the OPTIONAL
+ * explicit read the SDK uses when it wants a prompt by label directly:
+ *   GET /v1/prompts/:route?label=prod   (key-auth, org-scoped)
+ *     → { version, template, manifest, template_sha }
+ *   ETag: <template_sha>                (304 Not Modified when it matches)
+ *
+ * The fetcher mirrors `call-config.ts`'s leak discipline: header-only auth, no
+ * body/URL in an error (C2), and it NEVER throws — a network/HTTP failure
+ * resolves `null`, a 304 resolves `"not-modified"`, a malformed 200 resolves
+ * `null`. So the fail-open resolver ({@link ./prompt-resolve}) always stays
+ * fail-open around it.
+ *
+ * The cache is CONTENT-ADDRESSED, keyed `label+template_sha` (spec §3): the
+ * same served content is one entry regardless of how many times it is fetched,
+ * and a per-(route,label) pointer records the last-known-good sha — the tier the
+ * resolver falls back to when the control plane is unreachable.
+ */
+import { type Manifest } from "./manifest";
+/** A prompt served by label — the explicit endpoint's body and the unit the
+ * client cache holds. `template_sha` is both the content id and the ETag. */
+export interface ServedPrompt {
+    readonly version: number;
+    readonly template: string;
+    readonly manifest: Manifest;
+    readonly template_sha: string;
+}
+/** Pulls one route's prompt for a label, ETag-aware. Returns the prompt, `"not-
+ * modified"` (304 — keep the cache), or `null` (miss/error — the resolver keeps
+ * last-known-good). NEVER throws. */
+export interface PromptFetcher {
+    fetch(route: string, label: string, etag: string | undefined): Promise<ServedPrompt | "not-modified" | null>;
+}
+/**
+ * Narrow an untrusted endpoint body into a {@link ServedPrompt}, or null when the
+ * shape is not what the endpoint promises (a malformed 200 is a miss, never
+ * trusted — we never fabricate a served prompt from junk). The manifest is
+ * validated with the shared {@link validateManifest} so a structurally-broken
+ * manifest can never reach the client-fill engine.
+ */
+export declare function parseServedPrompt(body: unknown): ServedPrompt | null;
+/**
+ * The content-addressed prompt cache (spec §3). Holds served content keyed
+ * `label+template_sha`, plus a per-(route,label) pointer to the last-known-good
+ * sha. `put` stores the content AND advances the pointer (a fetched version is
+ * now the last-known-good); `lastKnown` reads the current content for a label —
+ * the fail-open tier the resolver serves when a fetch cannot complete.
+ */
+export interface PromptCache {
+    /** The served content for an exact (route,label,sha), if held. */
+    get(route: string, label: string, sha: string): ServedPrompt | undefined;
+    /** The last-known-good served content for (route,label), if any has landed. */
+    lastKnown(route: string, label: string): ServedPrompt | undefined;
+    /** The last-known-good sha for (route,label) — the ETag to revalidate with. */
+    lastKnownSha(route: string, label: string): string | undefined;
+    /** Store content and advance the last-known-good pointer to its sha. */
+    put(route: string, label: string, prompt: ServedPrompt): void;
+}
+/** Build an empty {@link PromptCache}. One per rig. In-memory only — a prompt
+ * cache is a per-process convenience, never durable state. */
+export declare function createPromptCache(): PromptCache;
+export interface ApiPromptFetcherConfig {
+    /** Base URL of the hosted control plane — the SAME `ingestUrl` the api sink
+     * and call-config fetcher use (the prompt path hangs off the host). */
+    readonly ingestUrl: string;
+    /** `rig_sk_…` key. A read rides the readable route + prompt rows; header only,
+     * never a URL (C2). */
+    readonly apiKey: string;
+    readonly fetchFn?: typeof fetch;
+}
+/**
+ * The api-mode prompt fetcher: one authenticated, ETag-aware GET per (route,
+ * label). Mirrors the api sink's leak discipline (status only, never the
+ * body/URL in an error — C2). NEVER throws: a network/HTTP failure resolves
+ * null, a 304 resolves "not-modified", a malformed 200 resolves null — so the
+ * resolver stays fail-open.
+ */
+export declare function createApiPromptFetcher(config: ApiPromptFetcherConfig): PromptFetcher;
+//# sourceMappingURL=prompt-fetch.d.ts.map

package/dist/prompts/prompt-fetch.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"prompt-fetch.d.ts","sourceRoot":"","sources":["../../src/prompts/prompt-fetch.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAEH,OAAO,EAAoB,KAAK,QAAQ,EAAE,MAAM,YAAY,CAAC;AAE7D;6EAC6E;AAC7E,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC;IAC5B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;CAC/B;AAED;;qCAEqC;AACrC,MAAM,WAAW,aAAa;IAC5B,KAAK,CACH,KAAK,EAAE,MAAM,EACb,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,MAAM,GAAG,SAAS,GACvB,OAAO,CAAC,YAAY,GAAG,cAAc,GAAG,IAAI,CAAC,CAAC;CAClD;AAED;;;;;;GAMG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,OAAO,GAAG,YAAY,GAAG,IAAI,CAcpE;AAYD;;;;;;GAMG;AACH,MAAM,WAAW,WAAW;IAC1B,kEAAkE;IAClE,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,YAAY,GAAG,SAAS,CAAC;IACzE,+EAA+E;IAC/E,SAAS,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,YAAY,GAAG,SAAS,CAAC;IAClE,+EAA+E;IAC/E,YAAY,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAAC;IAC/D,wEAAwE;IACxE,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,YAAY,GAAG,IAAI,CAAC;CAC/D;AAED;8DAC8D;AAC9D,wBAAgB,iBAAiB,IAAI,WAAW,CAmB/C;AAED,MAAM,WAAW,sBAAsB;IACrC;2EACuE;IACvE,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B;2BACuB;IACvB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,KAAK,CAAC;CACjC;AAED;;;;;;GAMG;AACH,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,sBAAsB,GAAG,aAAa,CA4BpF"}