modelrig 0.9.0 → 0.11.0

package/dist/run/web-search-pricing.d.ts

@@ -0,0 +1,43 @@
+/**
+ * Native web-search per-call pricing (Native Web Search lane, spec N3) — the
+ * SINGLE source of truth for the surcharge a provider bills when the model calls
+ * its native `web_search` tool, and the generator behind the published rates.
+ *
+ * WHY ITS OWN FILE: same doctrine as `raw-defaults.ts` / `raw-support.ts` — a code
+ * constant the runtime reads (to write the synthetic `rung:"search"` cost row via
+ * `recordSearchCostRow`) AND the docs generator renders, so the published rate can
+ * never drift from what we charge. A drift test asserts the rendered rate is read
+ * from THIS constant (never retyped).
+ *
+ * COST IS AN ESTIMATE, NOT A MEASUREMENT: like all ModelRig cost, `perCallUsd` is a
+ * declared list rate. Vendor rates drift and vary by context tier — the lane's live
+ * gate reconciles these against a real invoice before any public claim is un-tagged.
+ *
+ * [ARCH-TODO] (builder, Step 4): before un-tagging, replace the placeholder rates
+ * below with the verified per-search list price for each provider (research §7
+ * [verify-live]) and wire `perCallUsd` into the raw success path (raw.ts:551-556)
+ * via `recordSearchCostRow`.
+ */
+import type { ProviderId } from "../types/provider";
+/** One provider's native web-search billing facts. */
+export interface WebSearchRate {
+    /** USD billed per native `web_search` tool call (surcharge, on top of tokens). */
+    readonly perCallUsd: number;
+    /** Teaching note rendered in the docs table and the fixHint. */
+    readonly note: string;
+}
+/**
+ * Per-provider native web-search rates. Only providers whose grounding is
+ * `supported: true` in `RAW_KNOB_SUPPORT` need an entry; a provider with no native
+ * search never reaches the cost row (it uses the inject rung instead). Partial by
+ * design — a `Partial<Record<...>>` so unsupported providers are simply absent.
+ *
+ * [ARCH-TODO] rates are PLACEHOLDERS pending the [verify-live] invoice reconciliation.
+ */
+export declare const WEB_SEARCH_PRICING: Partial<Record<ProviderId, WebSearchRate>>;
+/** Lookup used by the raw success path to price the synthetic search-cost row.
+ * Returns 0 when the provider has no declared native-search rate (never throws —
+ * an absent rate must not break dispatch; it surfaces as a 0 estimate + the drift
+ * test / live gate catches a missing entry for a supported provider). */
+export declare function webSearchPerCallUsd(provider: ProviderId): number;
+//# sourceMappingURL=web-search-pricing.d.ts.map

package/dist/run/web-search-pricing.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"web-search-pricing.d.ts","sourceRoot":"","sources":["../../src/run/web-search-pricing.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAEpD,sDAAsD;AACtD,MAAM,WAAW,aAAa;IAC5B,kFAAkF;IAClF,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,gEAAgE;IAChE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;CACvB;AAED;;;;;;;GAOG;AACH,eAAO,MAAM,kBAAkB,EAAE,OAAO,CAAC,MAAM,CAAC,UAAU,EAAE,aAAa,CAAC,CAgBzE,CAAC;AAEF;;;yEAGyE;AACzE,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,UAAU,GAAG,MAAM,CAEhE"}

package/dist/run/web-search-pricing.js

@@ -0,0 +1,56 @@
+"use strict";
+/**
+ * Native web-search per-call pricing (Native Web Search lane, spec N3) — the
+ * SINGLE source of truth for the surcharge a provider bills when the model calls
+ * its native `web_search` tool, and the generator behind the published rates.
+ *
+ * WHY ITS OWN FILE: same doctrine as `raw-defaults.ts` / `raw-support.ts` — a code
+ * constant the runtime reads (to write the synthetic `rung:"search"` cost row via
+ * `recordSearchCostRow`) AND the docs generator renders, so the published rate can
+ * never drift from what we charge. A drift test asserts the rendered rate is read
+ * from THIS constant (never retyped).
+ *
+ * COST IS AN ESTIMATE, NOT A MEASUREMENT: like all ModelRig cost, `perCallUsd` is a
+ * declared list rate. Vendor rates drift and vary by context tier — the lane's live
+ * gate reconciles these against a real invoice before any public claim is un-tagged.
+ *
+ * [ARCH-TODO] (builder, Step 4): before un-tagging, replace the placeholder rates
+ * below with the verified per-search list price for each provider (research §7
+ * [verify-live]) and wire `perCallUsd` into the raw success path (raw.ts:551-556)
+ * via `recordSearchCostRow`.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.WEB_SEARCH_PRICING = void 0;
+exports.webSearchPerCallUsd = webSearchPerCallUsd;
+/**
+ * Per-provider native web-search rates. Only providers whose grounding is
+ * `supported: true` in `RAW_KNOB_SUPPORT` need an entry; a provider with no native
+ * search never reaches the cost row (it uses the inject rung instead). Partial by
+ * design — a `Partial<Record<...>>` so unsupported providers are simply absent.
+ *
+ * [ARCH-TODO] rates are PLACEHOLDERS pending the [verify-live] invoice reconciliation.
+ */
+exports.WEB_SEARCH_PRICING = {
+    // [ARCH-TODO] verify against live billing before un-tagging (research §7).
+    gemini: { perCallUsd: 0, note: "[ARCH-TODO] Google grounding rate — verify-live" },
+    openai: {
+        perCallUsd: 0.01,
+        note: "$10/1k calls (tool surcharge; tokens billed separately); verified live 2026-09-09 via Responses API web_search",
+    },
+    grok: {
+        perCallUsd: 0.005,
+        note: "$5/1k calls = $0.005 per CALL (not per-source; 'per-source' was the retired Live Search surface); retrieved content billed separately as input tokens. Verified live 2026-09-09 — 15/15 recency, 100% citation presence, avg 3.80 cites/response",
+    },
+    // Z.ai / GLM (B4a stub, consumed by B4b): native web_search is free/included, so
+    // the surcharge is 0. Present now so B4b flips zai.grounding → supported and this
+    // cost row is already wired. Grounding itself stays fail-closed until B4b.
+    zai: { perCallUsd: 0, note: "GLM native web_search is free/included" },
+    // Phase 2: anthropic (Messages web_search) — add when built.
+};
+/** Lookup used by the raw success path to price the synthetic search-cost row.
+ * Returns 0 when the provider has no declared native-search rate (never throws —
+ * an absent rate must not break dispatch; it surfaces as a 0 estimate + the drift
+ * test / live gate catches a missing entry for a supported provider). */
+function webSearchPerCallUsd(provider) {
+    return exports.WEB_SEARCH_PRICING[provider]?.perCallUsd ?? 0;
+}

package/dist/settings/grading-guide.d.ts

@@ -19,7 +19,22 @@
  * TYPES ONLY — no behavior. Validation lives at the single write boundary
  * (modelrig-server's task-settings path).
  */
-/** One binary criterion — the unit the expert authors and the judge applies. */
+/** A criterion's scale. Absent = binary pass/fail (equivalent to `{ max: 1 }`).
+ * `{ max }` is an ordinal points scale 0..max; `{ enum }` is ordered categories
+ * (index 0 = worst … last = best). Either way a per-criterion sub-score
+ * normalizes to [0,1] for the weighted roll-up (call-qa F1; grade-rollup.ts). */
+export type GradingGuideScale = {
+    readonly max: number;
+} | {
+    readonly enum: readonly string[];
+};
+/** One criterion — the unit the expert authors and the judge applies.
+ *
+ * `id`/`title`/`pass`/`fail` are the original binary shape and are all a
+ * criterion needs; the four optional fields (call-qa F1) let a QA-style
+ * scorecard carry weight, a non-binary scale, a fatal (auto-fail) flag, and an
+ * evidence requirement WITHOUT breaking any existing binary guide — every
+ * shipped template omits them and stays valid. */
 export interface GradingGuideCriterion {
     /** Stable handle, unique within the guide (per-criterion grades key on it). */
     readonly id: string;
@@ -28,6 +43,17 @@ export interface GradingGuideCriterion {
     readonly pass: string;
     /** One sentence describing what a FAIL on this criterion looks like. */
     readonly fail: string;
+    /** Relative contribution to the weighted overall score. Default 1; must be
+     * a finite number > 0. (call-qa F1) */
+    readonly weight?: number;
+    /** Scoring scale. Absent = binary pass/fail. (call-qa F1) */
+    readonly scale?: GradingGuideScale;
+    /** When true, a FAIL on this criterion forces the overall verdict to fail
+     * regardless of the weighted score — a fatal compliance miss. (call-qa F1) */
+    readonly fatal?: boolean;
+    /** When true, the scorer must cite at least one grounded evidence quote for
+     * this criterion (enforced by the F3 groundedness check). (call-qa F1) */
+    readonly evidence_required?: boolean;
 }
 /** Escalation jury knobs (ruling §7.6 — defaults: single judge for volume,
  * jury on escalation only). All optional; absent = server defaults at judge

package/dist/settings/grading-guide.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"grading-guide.d.ts","sourceRoot":"","sources":["../../src/settings/grading-guide.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,gFAAgF;AAChF,MAAM,WAAW,qBAAqB;IACpC,+EAA+E;IAC/E,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,wEAAwE;IACxE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,wEAAwE;IACxE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;CACvB;AAED;;4CAE4C;AAC5C,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,QAAQ,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACtC,QAAQ,CAAC,kBAAkB,CAAC,EAAE,MAAM,CAAC;CACtC;AAED,0DAA0D;AAC1D,MAAM,WAAW,sBAAsB;IACrC;gEAC4D;IAC5D,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,IAAI,CAAC,EAAE,gBAAgB,CAAC;CAClC;AAED;;gEAEgE;AAChE,MAAM,WAAW,iBAAiB;IAChC;4EACwE;IACxE,QAAQ,CAAC,QAAQ,EAAE,SAAS,qBAAqB,EAAE,CAAC;IACpD;qFACiF;IACjF,QAAQ,CAAC,eAAe,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC7C;2CACuC;IACvC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IACnC,QAAQ,CAAC,UAAU,CAAC,EAAE,sBAAsB,CAAC;CAC9C;AAED;;;gCAGgC;AAChC,MAAM,WAAW,YAAY;IAC3B;;qDAEiD;IACjD,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,QAAQ,EAAE,SAAS,qBAAqB,EAAE,CAAC;IACpD,QAAQ,CAAC,eAAe,EAAE,SAAS,MAAM,EAAE,CAAC;IAC5C,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IACnC,QAAQ,CAAC,UAAU,CAAC,EAAE,sBAAsB,CAAC;CAC9C"}
+{"version":3,"file":"grading-guide.d.ts","sourceRoot":"","sources":["../../src/settings/grading-guide.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH;;;iFAGiF;AACjF,MAAM,MAAM,iBAAiB,GAAG;IAAE,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;CAAE,GAAG;IAAE,QAAQ,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,CAAA;CAAE,CAAC;AAEhG;;;;;;kDAMkD;AAClD,MAAM,WAAW,qBAAqB;IACpC,+EAA+E;IAC/E,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,wEAAwE;IACxE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,wEAAwE;IACxE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB;2CACuC;IACvC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,6DAA6D;IAC7D,QAAQ,CAAC,KAAK,CAAC,EAAE,iBAAiB,CAAC;IACnC;kFAC8E;IAC9E,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC;IACzB;8EAC0E;IAC1E,QAAQ,CAAC,iBAAiB,CAAC,EAAE,OAAO,CAAC;CACtC;AAED;;4CAE4C;AAC5C,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,QAAQ,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACtC,QAAQ,CAAC,kBAAkB,CAAC,EAAE,MAAM,CAAC;CACtC;AAED,0DAA0D;AAC1D,MAAM,WAAW,sBAAsB;IACrC;gEAC4D;IAC5D,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,IAAI,CAAC,EAAE,gBAAgB,CAAC;CAClC;AAED;;gEAEgE;AAChE,MAAM,WAAW,iBAAiB;IAChC;4EACwE;IACxE,QAAQ,CAAC,QAAQ,EAAE,SAAS,qBAAqB,EAAE,CAAC;IACpD;qFACiF;IACjF,QAAQ,CAAC,eAAe,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC7C;2CACuC;IACvC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IACnC,QAAQ,CAAC,UAAU,CAAC,EAAE,sBAAsB,CAAC;CAC9C;AAED;;;gCAGgC;AAChC,MAAM,WAAW,YAAY;IAC3B;;qDAEiD;IACjD,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,QAAQ,EAAE,SAAS,qBAAqB,EAAE,CAAC;IACpD,QAAQ,CAAC,eAAe,EAAE,SAAS,MAAM,EAAE,CAAC;IAC5C,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IACnC,QAAQ,CAAC,UAAU,CAAC,EAAE,sBAAsB,CAAC;CAC9C"}

package/dist/status.d.ts

@@ -27,6 +27,12 @@ export interface RigStatus {
     /** Content custody (E2-C) — its own gate, unchanged by the §2 metadata flip. */
     readonly contentCustody: boolean;
     readonly otlp: "configured" | "disabled";
+    /** Managed serving (Unified Route U3, ruling D-2) — the `config.managedServing`
+     * flag (set IN CODE via `createRig`, NOT an env var; always resolved), reported
+     * honestly like `otlp`. `enabled` here means the flag is on for this rig; a run
+     * still only serves `modelrig-served` for a served-capable provider (else
+     * fail-closed). */
+    readonly managedServing: "enabled" | "disabled";
     /** Cache accounting posture (cache-aware-routing WS-A/WS-D). Derived from the
      * policy registry — config-only, so `status` shows it anywhere. Live per-route
      * hit rate + effective input rate are a control-plane read, surfaced on the

package/dist/status.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"status.d.ts","sourceRoot":"","sources":["../src/status.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,UAAU,CAAC;AAC1C,OAAO,KAAK,EAAE,eAAe,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAC;AAE9E,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAElD,MAAM,MAAM,UAAU,GAAG,KAAK,GAAG,QAAQ,GAAG,YAAY,CAAC;AAEzD,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B;kFAC8E;IAC9E,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,SAAS;IACxB,QAAQ,CAAC,UAAU,EAAE,UAAU,CAAC;IAChC,QAAQ,CAAC,SAAS,EAAE,gBAAgB,CAAC;IACrC,gFAAgF;IAChF,QAAQ,CAAC,cAAc,EAAE,OAAO,CAAC;IACjC,QAAQ,CAAC,IAAI,EAAE,YAAY,GAAG,UAAU,CAAC;IACzC;;;qFAGiF;IACjF,QAAQ,CAAC,KAAK,EAAE,YAAY,CAAC;IAC7B;gEAC4D;IAC5D,QAAQ,CAAC,KAAK,EAAE,aAAa,CAAC;QAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;KAAE,GAAG,YAAY,CAAC,CAAC;IACxE;iFAC6E;IAC7E,QAAQ,CAAC,IAAI,CAAC,EAAE,YAAY,CAAC;CAC9B;AAED,MAAM,WAAW,YAAY;IAC3B;6BACyB;IACzB,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B;8EAC0E;IAC1E,QAAQ,CAAC,iBAAiB,EAAE,SAAS,MAAM,EAAE,CAAC;CAC/C;AAED;;0EAE0E;AAC1E,wBAAgB,YAAY,IAAI,YAAY,CAI3C;AAED,wBAAgB,YAAY,CAAC,MAAM,EAAE,SAAS,GAAG,UAAU,CAE1D;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,gBAAgB,CAC9B,MAAM,EAAE,SAAS,EACjB,OAAO,GAAE,eAAe,GAAG,IAAW,GACrC,gBAAgB,CAkBlB;AAWD;uFACuF;AACvF,wBAAgB,cAAc,CAC5B,MAAM,EAAE,SAAS,EACjB,KAAK,GAAE,WAAW,CAAC,MAAM,EAAE,YAAY,CAAa,EACpD,IAAI,CAAC,EAAE,YAAY,GAAG,IAAI,EAC1B,OAAO,GAAE,eAAe,GAAG,IAAW,GACrC,SAAS,CAUX;AAED;;kFAEkF;AAClF,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,SAAS,EAAE,OAAO,GAAE,eAAe,GAAG,IAAW,GAAG,MAAM,CASlG;AAED;;;;;;;GAOG;AACH,wBAAgB,cAAc,CAAC,MAAM,EAAE,SAAS,GAAG,IAAI,CAGtD;AAED,gEAAgE;AAChE,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,SAAS,GAAG,MAAM,CAiC5D"}
+{"version":3,"file":"status.d.ts","sourceRoot":"","sources":["../src/status.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,UAAU,CAAC;AAC1C,OAAO,KAAK,EAAE,eAAe,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAC;AAE9E,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAElD,MAAM,MAAM,UAAU,GAAG,KAAK,GAAG,QAAQ,GAAG,YAAY,CAAC;AAEzD,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B;kFAC8E;IAC9E,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,SAAS;IACxB,QAAQ,CAAC,UAAU,EAAE,UAAU,CAAC;IAChC,QAAQ,CAAC,SAAS,EAAE,gBAAgB,CAAC;IACrC,gFAAgF;IAChF,QAAQ,CAAC,cAAc,EAAE,OAAO,CAAC;IACjC,QAAQ,CAAC,IAAI,EAAE,YAAY,GAAG,UAAU,CAAC;IACzC;;;;uBAImB;IACnB,QAAQ,CAAC,cAAc,EAAE,SAAS,GAAG,UAAU,CAAC;IAChD;;;qFAGiF;IACjF,QAAQ,CAAC,KAAK,EAAE,YAAY,CAAC;IAC7B;gEAC4D;IAC5D,QAAQ,CAAC,KAAK,EAAE,aAAa,CAAC;QAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;KAAE,GAAG,YAAY,CAAC,CAAC;IACxE;iFAC6E;IAC7E,QAAQ,CAAC,IAAI,CAAC,EAAE,YAAY,CAAC;CAC9B;AAED,MAAM,WAAW,YAAY;IAC3B;6BACyB;IACzB,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B;8EAC0E;IAC1E,QAAQ,CAAC,iBAAiB,EAAE,SAAS,MAAM,EAAE,CAAC;CAC/C;AAED;;0EAE0E;AAC1E,wBAAgB,YAAY,IAAI,YAAY,CAI3C;AAED,wBAAgB,YAAY,CAAC,MAAM,EAAE,SAAS,GAAG,UAAU,CAE1D;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,gBAAgB,CAC9B,MAAM,EAAE,SAAS,EACjB,OAAO,GAAE,eAAe,GAAG,IAAW,GACrC,gBAAgB,CAkBlB;AAWD;uFACuF;AACvF,wBAAgB,cAAc,CAC5B,MAAM,EAAE,SAAS,EACjB,KAAK,GAAE,WAAW,CAAC,MAAM,EAAE,YAAY,CAAa,EACpD,IAAI,CAAC,EAAE,YAAY,GAAG,IAAI,EAC1B,OAAO,GAAE,eAAe,GAAG,IAAW,GACrC,SAAS,CAWX;AAED;;kFAEkF;AAClF,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,SAAS,EAAE,OAAO,GAAE,eAAe,GAAG,IAAW,GAAG,MAAM,CAUlG;AAED;;;;;;;GAOG;AACH,wBAAgB,cAAc,CAAC,MAAM,EAAE,SAAS,GAAG,IAAI,CAGtD;AAED,gEAAgE;AAChE,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,SAAS,GAAG,MAAM,CAkC5D"}

package/dist/status.js

@@ -79,6 +79,7 @@ function buildRigStatus(config, tasks = new Map(), runs, posture = null) {
         artifacts: artifactsPosture(config, posture),
         contentCustody: contentCustodyOn(config, posture),
         otlp: config.otlp ? "configured" : "disabled",
+        managedServing: config.managedServing === true ? "enabled" : "disabled",
         cache: cachePosture(),
         tasks: [...tasks].map(([task, s]) => ({ task, ...s })),
         ...(runs != null ? { runs } : {}),
@@ -91,9 +92,10 @@ function formatBootBanner(config, posture = null) {
     const a = artifactsPosture(config, posture);
     const content = contentCustodyOn(config, posture) ? "on" : "off";
     const otlp = config.otlp ? "on" : "off";
+    const managedServing = config.managedServing === true ? "on" : "off";
     return (`[modelrig] telemetry: ${exportModeOf(config)} · ` +
         `artifacts: ${a.enabled ? "on" : "off"} (${a.reason}) · ` +
-        `content: ${content} · otlp: ${otlp}`);
+        `content: ${content} · otlp: ${otlp} · managed-serving: ${managedServing}`);
 }
 /**
  * Emit the boot banner to stderr — ONCE at rig construction, and ONLY when a
@@ -116,6 +118,7 @@ function formatStatusReport(status) {
         `  artifacts        : ${status.artifacts.enabled ? "enabled" : "disabled"} (${status.artifacts.reason})`,
         `  content custody  : ${status.contentCustody ? "enabled" : "disabled"}`,
         `  otlp span export : ${status.otlp}`,
+        `  managed serving  : ${status.managedServing} (config: managedServing)`,
         `  cache accounting : on (policy ${status.cache.policyVersion}) — cache-eligible: ${status.cache.eligibleProviders.length > 0 ? status.cache.eligibleProviders.join(", ") : "none"}`,
         "                     (live hit rate + effective input rate: console route cache page)",
     ];

package/dist/telemetry/artifact-store.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"artifact-store.d.ts","sourceRoot":"","sources":["../../src/telemetry/artifact-store.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAKH,OAAO,KAAK,EACV,eAAe,EACf,WAAW,EACX,WAAW,EACX,QAAQ,EACT,MAAM,oBAAoB,CAAC;AAQ5B,MAAM,WAAW,aAAa;IAC5B,cAAc,CAAC,GAAG,EAAE,WAAW,GAAG,IAAI,CAAC;IACvC,kBAAkB,CAAC,GAAG,EAAE,eAAe,GAAG,IAAI,CAAC;IAC/C;;yFAEqF;IACrF,WAAW,CAAC,GAAG,EAAE,QAAQ,GAAG,IAAI,CAAC;IACjC;kFAC8E;IAC9E,cAAc,CAAC,GAAG,EAAE,WAAW,GAAG,IAAI,CAAC;IACvC,kBAAkB,CAAC,UAAU,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,KAAK,CAAC;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,WAAW,CAAA;KAAE,CAAC,CAAC;IAClG,cAAc,CAAC,UAAU,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,KAAK,CAAC;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,eAAe,CAAA;KAAE,CAAC,CAAC;IAClG,kBAAkB,CAAC,UAAU,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,KAAK,CAAC;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,WAAW,CAAA;KAAE,CAAC,CAAC;IAClG,gFAAgF;IAChF,mBAAmB,CAAC,IAAI,EAAE,MAAM,GAAG,WAAW,EAAE,CAAC;IACjD;gEAC4D;IAC5D,eAAe,CAAC,EAAE,EAAE,MAAM,GAAG,WAAW,GAAG,IAAI,CAAC;IAChD;;oFAEgF;IAChF,KAAK,CAAC,CAAC,EAAE,EAAE,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC;IACzB,KAAK,IAAI,IAAI,CAAC;CACf;AA2DD,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,MAAM,GAAG,aAAa,CAiH/D"}
+{"version":3,"file":"artifact-store.d.ts","sourceRoot":"","sources":["../../src/telemetry/artifact-store.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAKH,OAAO,KAAK,EACV,eAAe,EACf,WAAW,EACX,WAAW,EACX,QAAQ,EACT,MAAM,oBAAoB,CAAC;AAQ5B,MAAM,WAAW,aAAa;IAC5B,cAAc,CAAC,GAAG,EAAE,WAAW,GAAG,IAAI,CAAC;IACvC,kBAAkB,CAAC,GAAG,EAAE,eAAe,GAAG,IAAI,CAAC;IAC/C;;yFAEqF;IACrF,WAAW,CAAC,GAAG,EAAE,QAAQ,GAAG,IAAI,CAAC;IACjC;kFAC8E;IAC9E,cAAc,CAAC,GAAG,EAAE,WAAW,GAAG,IAAI,CAAC;IACvC,kBAAkB,CAAC,UAAU,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,KAAK,CAAC;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,WAAW,CAAA;KAAE,CAAC,CAAC;IAClG,cAAc,CAAC,UAAU,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,KAAK,CAAC;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,eAAe,CAAA;KAAE,CAAC,CAAC;IAClG,kBAAkB,CAAC,UAAU,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,KAAK,CAAC;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,WAAW,CAAA;KAAE,CAAC,CAAC;IAClG,gFAAgF;IAChF,mBAAmB,CAAC,IAAI,EAAE,MAAM,GAAG,WAAW,EAAE,CAAC;IACjD;gEAC4D;IAC5D,eAAe,CAAC,EAAE,EAAE,MAAM,GAAG,WAAW,GAAG,IAAI,CAAC;IAChD;;oFAEgF;IAChF,KAAK,CAAC,CAAC,EAAE,EAAE,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC;IACzB,KAAK,IAAI,IAAI,CAAC;CACf;AA2DD,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,MAAM,GAAG,aAAa,CA2H/D"}

package/dist/telemetry/artifact-store.js

@@ -77,6 +77,17 @@ function openArtifactStore(dbPath) {
     // IGNORE) so pre-grade evaluations still export as grades. Additive.
     db.exec(grades_sql_1.GRADES_TABLE_SQL);
     (0, grades_sql_1.backfillGradesFromEvaluations)(db);
+    // F4: additive per-criterion `criteria` column on a dev DB that predates it
+    // and was created by THIS handle (so the telemetry store's v16 rung may not
+    // have run). CREATE IF NOT EXISTS above won't add it to an existing table;
+    // gradeBindParams now binds @criteria, so the column must exist before any
+    // insert. Same swallow-on-duplicate pattern as scrub/run_id.
+    try {
+        db.exec("ALTER TABLE grades ADD COLUMN criteria TEXT");
+    }
+    catch {
+        /* column already present — no-op */
+    }
     // Additive column for a dev DB that predates E4 (CREATE TABLE IF NOT EXISTS
     // won't add it to an existing table). SQLite has no ADD COLUMN IF NOT EXISTS;
     // a duplicate-column error on re-run is expected and swallowed.

package/dist/telemetry/attempt-meta.d.ts

@@ -12,9 +12,33 @@
  * enum/identifier/hash (length > 128 or containing whitespace).
  */
 import type { AdapterUsage, ProviderId } from "../types/provider";
+import type { OutputKind } from "../types/route";
 import type { ScreenReceipt } from "../screen/types";
 export type FinishReason = "stop" | "length" | "tool_calls" | "content_filter" | "refusal" | "error" | "other";
 export type ContextBucket = "≤4k" | "≤16k" | "≤64k" | "≤200k" | ">200k";
+/**
+ * How the rendered prompt reached the model on ONE attempt (GitLab issue #5,
+ * R1) — the proof surface for the cache-handle rule, stamped on
+ * `inferences.meta.prompt_delivery` by the adapter that made the call:
+ *   • `system`     — the rendered system prompt went as the provider's system
+ *                    instruction; the user turn carried the trigger / `prompt.user`.
+ *   • `user`       — no system instruction was sent because the rendered system
+ *                    prompt was EMPTY; the user turn alone carried the prompt.
+ *   • `user+cache` — a cache HANDLE was sent (Gemini `cachedContent`), so the
+ *                    system instruction could not be: everything rendered — the
+ *                    system prompt (if any), then the user turn — was delivered
+ *                    AS the user turn. Nothing was dropped.
+ * Stamped today by the Gemini adapter (the one provider where a handle changes
+ * delivery); absent on other providers' rows (⇒ delivered as declared).
+ */
+export type PromptDelivery = "system" | "user" | "user+cache";
+export declare const PROMPT_DELIVERIES: ReadonlySet<string>;
+/** The output contract a ROUTE-lane attempt was held to (issue #1 / plan §7.3,
+ * QA-S7): `json` (parsed + schema-checked) or `text` (returned verbatim). Same
+ * producer/enum pattern as {@link PromptDelivery}; stamped on
+ * `inferences.meta.output_kind` for every dispatched route-lane row, absent on
+ * raw-lane rows (the raw lane has no route contract). */
+export declare const OUTPUT_KINDS: ReadonlySet<string>;
 /** D1 egress receipt — shape RESERVED here; populated by the D1 mission. */
 export interface EgressReceiptV1 {
     readonly endpoint?: string;
@@ -27,6 +51,7 @@ export interface EgressReceiptV1 {
     readonly search_provider?: string;
     readonly tool_calls?: number;
 }
+export type ServedTierSource = "provider" | "requested_fallback";
 export interface AttemptMetaV1 {
     readonly v: 1;
     readonly finish_reason?: FinishReason;
@@ -51,6 +76,13 @@ export interface AttemptMetaV1 {
         readonly search_provider?: string;
     };
     readonly model_snapshot?: string;
+    /** Issue #2 (L6 F5): where `servedTier` came from — `provider` (the response
+     * echoed a tier: openai `service_tier`, gemini `serviceTier` /
+     * `usageMetadata.trafficType`) or `requested_fallback` (no echo; the adapter
+     * assumed the requested tier). Pricing reads the served tier, so a
+     * fallback-priced row is identifiable here. Absent on adapters without the
+     * signal. */
+    readonly served_tier_source?: ServedTierSource;
     readonly provider_request_id?: string;
     readonly http_status?: number;
     readonly error_code?: string;
@@ -66,6 +98,11 @@ export interface AttemptMetaV1 {
     /** sha256 of the RENDERED request — a hash, never content. */
     readonly input_hash?: string;
     readonly output_hash?: string;
+    /** R2 (issue #6): `sha256:<hex>` of the CANONICAL (sorted-key) JSON of the
+     * schema this attempt was asked to conform to — the raw lane's declared
+     * `responseSchema` today. A hash, never content; lets declared-vs-served
+     * schema drift be queried on `inferences.meta`. Absent ⇒ no schema declared. */
+    readonly schema_sha?: string;
     readonly context_bucket?: ContextBucket;
     readonly egress?: EgressReceiptV1;
     /** LRE-2: the live A/B experiment arm this call was drawn onto (an identifier —
@@ -81,7 +118,21 @@ export interface AttemptMetaV1 {
      * single producer `summarizeScreen`; NEVER carries a matched value. Reserved &
      * additive. */
     readonly screen?: ScreenReceipt;
+    /** Issue #5 (R1): how the rendered prompt reached the model — see
+     * {@link PromptDelivery}. Absent ⇒ the adapter did not report it. */
+    readonly prompt_delivery?: PromptDelivery;
+    /** QA-S7 (issue #1, plan §7.3): the route's output contract on this attempt —
+     * `json` | `text`. Route lane only; absent on raw rows. */
+    readonly output_kind?: OutputKind;
+    /** OBS-1: where this row's numbers came from. `caller-reported` ⇒ the
+     * customer's own code made the provider call and reported its usage through
+     * `rig.recordCall()`; ModelRig neither dispatched nor validated it. Absent ⇒
+     * ModelRig dispatched the attempt and measured it (every other row). Additive
+     * — no version bump. */
+    readonly provenance?: AttemptProvenance;
 }
+/** OBS-1: the one non-default provenance value (see {@link AttemptMetaV1.provenance}). */
+export type AttemptProvenance = "caller-reported";
 export interface RunMetaV1 {
     readonly v: 1;
     readonly pipeline_sha?: string;
@@ -103,6 +154,8 @@ export interface AttemptMetaSource {
     readonly renderedRequest?: string;
     readonly outputText?: string | null;
     readonly declaredToolNames?: readonly string[];
+    /** QA-S7: the route's output contract (route lane only). */
+    readonly outputKind?: OutputKind;
 }
 /** Canonicalize the RENDERED request for `input_hash` (spec §2) — system + user
  * + schema, joined the SAME way in both lanes so a routed and a raw call with
@@ -125,10 +178,19 @@ export interface AttemptMetaInputs {
     readonly outputText?: string | null;
     /** Declared tool ids; any tool_call name NOT in this set is hashed. */
     readonly declaredToolNames?: readonly string[];
+    /** R2: the canonical schema sha (`sha256:<hex>`) to stamp on `meta.schema_sha`.
+     * Already a hash — gated by the classification rule like any identifier.
+     * Absent ⇒ no key ⇒ byte-identical to a schema-free row. */
+    readonly schemaSha?: string;
+    /** QA-S7: the route-lane output contract to stamp on `meta.output_kind`.
+     * Absent (the raw lane) ⇒ no key ⇒ byte-identical. */
+    readonly outputKind?: OutputKind;
     /** For the cost components (via src/run/cost.ts). */
     readonly provider?: ProviderId;
     readonly model?: string;
-    readonly usage?: Pick<AdapterUsage, "tokensIn" | "tokensOut" | "tokensCached" | "tokensCacheWrite" | "tokensCacheWrite1h">;
+    readonly usage?: Pick<AdapterUsage, "tokensIn" | "tokensOut" | "tokensCached" | "tokensCacheWrite" | "tokensCacheWrite1h"> & 
+    /** issue #2: the served tier, so `meta.cost` components price like the row. */
+    Partial<Pick<AdapterUsage, "servedTier">>;
     /** Whether the caller streamed deltas (run loop stream() path). */
     readonly streaming?: boolean;
     /** Repair-rung count carried by the run loop, if any. */
@@ -140,6 +202,9 @@ export interface AttemptMetaInputs {
      * through verbatim (already counts/enums/hashes — no free text). Absent ⇒ no
      * `screen` key ⇒ byte-identical to a non-screened row. */
     readonly screen?: ScreenReceipt;
+    /** OBS-1: stamp `meta.provenance` (`rig.recordCall` rows only). Absent ⇒ no
+     * key ⇒ byte-identical to every dispatched row. */
+    readonly provenance?: AttemptProvenance;
 }
 /** The classification-rule string test (spec §2, §5 wire backstop): a value is
  * an ENUM / IDENTIFIER / HASH only if it is at most 128 chars AND contains no

package/dist/telemetry/attempt-meta.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"attempt-meta.d.ts","sourceRoot":"","sources":["../../src/telemetry/attempt-meta.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAOH,OAAO,KAAK,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAClE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAErD,MAAM,MAAM,YAAY,GACpB,MAAM,GACN,QAAQ,GACR,YAAY,GACZ,gBAAgB,GAChB,SAAS,GACT,OAAO,GACP,OAAO,CAAC;AAEZ,MAAM,MAAM,aAAa,GAAG,KAAK,GAAG,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,OAAO,CAAC;AAExE,4EAA4E;AAC5E,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,GAAG,CAAC,EAAE;QAAE,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAC;QAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IACnG,QAAQ,CAAC,iBAAiB,CAAC,EAAE,MAAM,CAAC;IACpC,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;CAC9B;AAED,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC;IACd,QAAQ,CAAC,aAAa,CAAC,EAAE,YAAY,CAAC;IACtC,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC;IAC3B,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,SAAS,CAAC,EAAE,OAAO,CAAC;IAC7B,QAAQ,CAAC,QAAQ,CAAC,EAAE;QAAE,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,iBAAiB,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IACpH,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IACnC,8EAA8E;IAC9E,QAAQ,CAAC,UAAU,CAAC,EAAE,SAAS;QAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;IACnF,QAAQ,CAAC,SAAS,CAAC,EAAE;QAAE,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IACxF,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,mBAAmB,CAAC,EAAE,MAAM,CAAC;IACtC,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,IAAI,CAAC,EAAE;QACd,QAAQ,CAAC,EAAE,CAAC,EAAE,MAAM,CAAC;QACrB,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;QACtB,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;QAC7B,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;QAC9B,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;KACzB,CAAC;IACF,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B,8DAA8D;IAC9D,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,cAAc,CAAC,EAAE,aAAa,CAAC;IACxC,QAAQ,CAAC,MAAM,CAAC,EAAE,eAAe,CAAC;IAClC;;;qFAGiF;IACjF,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IACtB;;;;;;mBAMe;IACf,QAAQ,CAAC,MAAM,CAAC,EAAE,aAAa,CAAC;CACjC;AAED,MAAM,WAAW,SAAS;IACxB,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC;IACd,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,KAAK,GAAG,QAAQ,GAAG,QAAQ,GAAG,OAAO,CAAC;IAClE,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;CAC9B;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,WAAW,CAAC,EAAE,OAAO,CAAC,aAAa,CAAC,CAAC;IAC9C,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACpC,QAAQ,CAAC,iBAAiB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CAChD;AAED;;;;uEAIuE;AACvE,wBAAgB,oBAAoB,CAAC,KAAK,EAAE;IAC1C,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACjC,GAAG,MAAM,CAMT;AAED;;uEAEuE;AACvE,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,WAAW,CAAC,EAAE,OAAO,CAAC,aAAa,CAAC,CAAC;IAC9C,4EAA4E;IAC5E,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;IAClC,8DAA8D;IAC9D,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACpC,uEAAuE;IACvE,QAAQ,CAAC,iBAAiB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC/C,qDAAqD;IACrD,QAAQ,CAAC,QAAQ,CAAC,EAAE,UAAU,CAAC;IAC/B,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,KAAK,CAAC,EAAE,IAAI,CACnB,YAAY,EACZ,UAAU,GAAG,WAAW,GAAG,cAAc,GAAG,kBAAkB,GAAG,oBAAoB,CACtF,CAAC;IACF,mEAAmE;IACnE,QAAQ,CAAC,SAAS,CAAC,EAAE,OAAO,CAAC;IAC7B,yDAAyD;IACzD,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B;qFACiF;IACjF,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IACtB;;8DAE0D;IAC1D,QAAQ,CAAC,MAAM,CAAC,EAAE,aAAa,CAAC;CACjC;AAID;;;;+BAI+B;AAC/B,wBAAgB,gBAAgB,CAAC,CAAC,EAAE,OAAO,GAAG,CAAC,IAAI,MAAM,CAExD;AAOD;;;;;;;;GAQG;AACH,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,OAAO,GAAG;IAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAgCrG;AAID;gEACgE;AAChE,eAAO,MAAM,iBAAiB,mEAAoE,CAAC;AACnG,MAAM,MAAM,cAAc,GAAG,CAAC,OAAO,iBAAiB,CAAC,CAAC,MAAM,CAAC,CAAC;AA4BhE;;;;;GAKG;AACH,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,GAAG;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,cAAc,CAAA;CAAE,EAAE,CAS5G;AAID;;;;;;;GAOG;AACH,wBAAgB,kBAAkB,CAAC,GAAG,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAInE;AAED;;;2CAG2C;AAC3C,wBAAgB,qBAAqB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAkBrE;AAwCD;;;;;;GAMG;AACH,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,iBAAiB,GAAG,aAAa,GAAG,IAAI,CAyFpF"}
+{"version":3,"file":"attempt-meta.d.ts","sourceRoot":"","sources":["../../src/telemetry/attempt-meta.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAOH,OAAO,KAAK,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAClE,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AACjD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAErD,MAAM,MAAM,YAAY,GACpB,MAAM,GACN,QAAQ,GACR,YAAY,GACZ,gBAAgB,GAChB,SAAS,GACT,OAAO,GACP,OAAO,CAAC;AAEZ,MAAM,MAAM,aAAa,GAAG,KAAK,GAAG,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,OAAO,CAAC;AAExE;;;;;;;;;;;;;;GAcG;AACH,MAAM,MAAM,cAAc,GAAG,QAAQ,GAAG,MAAM,GAAG,YAAY,CAAC;AAC9D,eAAO,MAAM,iBAAiB,EAAE,WAAW,CAAC,MAAM,CAA6D,CAAC;AAEhH;;;;yDAIyD;AACzD,eAAO,MAAM,YAAY,EAAE,WAAW,CAAC,MAAM,CAAyC,CAAC;AAEvF,4EAA4E;AAC5E,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,GAAG,CAAC,EAAE;QAAE,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAC;QAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IACnG,QAAQ,CAAC,iBAAiB,CAAC,EAAE,MAAM,CAAC;IACpC,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;CAC9B;AAED,MAAM,MAAM,gBAAgB,GAAG,UAAU,GAAG,oBAAoB,CAAC;AAEjE,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC;IACd,QAAQ,CAAC,aAAa,CAAC,EAAE,YAAY,CAAC;IACtC,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC;IAC3B,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,SAAS,CAAC,EAAE,OAAO,CAAC;IAC7B,QAAQ,CAAC,QAAQ,CAAC,EAAE;QAAE,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,iBAAiB,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IACpH,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IACnC,8EAA8E;IAC9E,QAAQ,CAAC,UAAU,CAAC,EAAE,SAAS;QAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;IACnF,QAAQ,CAAC,SAAS,CAAC,EAAE;QAAE,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IACxF,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IACjC;;;;;iBAKa;IACb,QAAQ,CAAC,kBAAkB,CAAC,EAAE,gBAAgB,CAAC;IAC/C,QAAQ,CAAC,mBAAmB,CAAC,EAAE,MAAM,CAAC;IACtC,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,IAAI,CAAC,EAAE;QACd,QAAQ,CAAC,EAAE,CAAC,EAAE,MAAM,CAAC;QACrB,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;QACtB,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;QAC7B,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;QAC9B,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;KACzB,CAAC;IACF,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B,8DAA8D;IAC9D,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B;;;oFAGgF;IAChF,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,cAAc,CAAC,EAAE,aAAa,CAAC;IACxC,QAAQ,CAAC,MAAM,CAAC,EAAE,eAAe,CAAC;IAClC;;;qFAGiF;IACjF,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IACtB;;;;;;mBAMe;IACf,QAAQ,CAAC,MAAM,CAAC,EAAE,aAAa,CAAC;IAChC;yEACqE;IACrE,QAAQ,CAAC,eAAe,CAAC,EAAE,cAAc,CAAC;IAC1C;+DAC2D;IAC3D,QAAQ,CAAC,WAAW,CAAC,EAAE,UAAU,CAAC;IAClC;;;;4BAIwB;IACxB,QAAQ,CAAC,UAAU,CAAC,EAAE,iBAAiB,CAAC;CACzC;AAED,0FAA0F;AAC1F,MAAM,MAAM,iBAAiB,GAAG,iBAAiB,CAAC;AAElD,MAAM,WAAW,SAAS;IACxB,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC;IACd,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,KAAK,GAAG,QAAQ,GAAG,QAAQ,GAAG,OAAO,CAAC;IAClE,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;CAC9B;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,WAAW,CAAC,EAAE,OAAO,CAAC,aAAa,CAAC,CAAC;IAC9C,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACpC,QAAQ,CAAC,iBAAiB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC/C,4DAA4D;IAC5D,QAAQ,CAAC,UAAU,CAAC,EAAE,UAAU,CAAC;CAClC;AAED;;;;uEAIuE;AACvE,wBAAgB,oBAAoB,CAAC,KAAK,EAAE;IAC1C,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACjC,GAAG,MAAM,CAMT;AAED;;uEAEuE;AACvE,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,WAAW,CAAC,EAAE,OAAO,CAAC,aAAa,CAAC,CAAC;IAC9C,4EAA4E;IAC5E,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;IAClC,8DAA8D;IAC9D,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACpC,uEAAuE;IACvE,QAAQ,CAAC,iBAAiB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC/C;;gEAE4D;IAC5D,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B;0DACsD;IACtD,QAAQ,CAAC,UAAU,CAAC,EAAE,UAAU,CAAC;IACjC,qDAAqD;IACrD,QAAQ,CAAC,QAAQ,CAAC,EAAE,UAAU,CAAC;IAC/B,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,KAAK,CAAC,EAAE,IAAI,CACnB,YAAY,EACZ,UAAU,GAAG,WAAW,GAAG,cAAc,GAAG,kBAAkB,GAAG,oBAAoB,CACtF;IACC,+EAA+E;IAC/E,OAAO,CAAC,IAAI,CAAC,YAAY,EAAE,YAAY,CAAC,CAAC,CAAC;IAC5C,mEAAmE;IACnE,QAAQ,CAAC,SAAS,CAAC,EAAE,OAAO,CAAC;IAC7B,yDAAyD;IACzD,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B;qFACiF;IACjF,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IACtB;;8DAE0D;IAC1D,QAAQ,CAAC,MAAM,CAAC,EAAE,aAAa,CAAC;IAChC;uDACmD;IACnD,QAAQ,CAAC,UAAU,CAAC,EAAE,iBAAiB,CAAC;CACzC;AAID;;;;+BAI+B;AAC/B,wBAAgB,gBAAgB,CAAC,CAAC,EAAE,OAAO,GAAG,CAAC,IAAI,MAAM,CAExD;AAOD;;;;;;;;GAQG;AACH,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,OAAO,GAAG;IAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAgCrG;AAID;gEACgE;AAChE,eAAO,MAAM,iBAAiB,mEAAoE,CAAC;AACnG,MAAM,MAAM,cAAc,GAAG,CAAC,OAAO,iBAAiB,CAAC,CAAC,MAAM,CAAC,CAAC;AA4BhE;;;;;GAKG;AACH,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,GAAG;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,cAAc,CAAA;CAAE,EAAE,CAS5G;AAID;;;;;;;GAOG;AACH,wBAAgB,kBAAkB,CAAC,GAAG,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAInE;AAED;;;2CAG2C;AAC3C,wBAAgB,qBAAqB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAkBrE;AAwCD;;;;;;GAMG;AACH,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,iBAAiB,GAAG,aAAa,GAAG,IAAI,CA6GpF"}

package/dist/telemetry/attempt-meta.js

@@ -13,7 +13,7 @@
  * enum/identifier/hash (length > 128 or containing whitespace).
  */
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.RESERVED_TAG_KEYS = void 0;
+exports.RESERVED_TAG_KEYS = exports.OUTPUT_KINDS = exports.PROMPT_DELIVERIES = void 0;
 exports.renderRequestForHash = renderRequestForHash;
 exports.isMetaSafeString = isMetaSafeString;
 exports.sanitizeMetaForWire = sanitizeMetaForWire;
@@ -26,6 +26,13 @@ const node_fs_1 = require("node:fs");
 const node_path_1 = require("node:path");
 const cost_1 = require("../run/cost");
 const config_1 = require("../config");
+exports.PROMPT_DELIVERIES = new Set(["system", "user", "user+cache"]);
+/** The output contract a ROUTE-lane attempt was held to (issue #1 / plan §7.3,
+ * QA-S7): `json` (parsed + schema-checked) or `text` (returned verbatim). Same
+ * producer/enum pattern as {@link PromptDelivery}; stamped on
+ * `inferences.meta.output_kind` for every dispatched route-lane row, absent on
+ * raw-lane rows (the raw lane has no route contract). */
+exports.OUTPUT_KINDS = new Set(["json", "text"]);
 /** Canonicalize the RENDERED request for `input_hash` (spec §2) — system + user
  * + schema, joined the SAME way in both lanes so a routed and a raw call with
  * the identical prompt+schema hash identically (lane parity, spec §6.3). The
@@ -234,6 +241,9 @@ function summarizeAttemptMeta(inputs) {
             meta.finish_reason = a.finish_reason;
         if (typeof a.refusal === "boolean")
             meta.refusal = a.refusal;
+        if (a.served_tier_source === "provider" || a.served_tier_source === "requested_fallback") {
+            meta.served_tier_source = a.served_tier_source;
+        }
         if (typeof a.streaming === "boolean")
             meta.streaming = a.streaming;
         else if (typeof inputs.streaming === "boolean")
@@ -242,11 +252,27 @@ function summarizeAttemptMeta(inputs) {
         // no key ⇒ byte-identical to a non-experiment row).
         if (isMetaSafeString(inputs.arm))
             meta.arm = inputs.arm;
+        // R2 declared-schema hash — a `sha256:` string (71 chars, no whitespace).
+        if (isMetaSafeString(inputs.schemaSha))
+            meta.schema_sha = inputs.schemaSha;
         // SC-1a screen receipt (spec §5, §8) — the counts-only screen summary rides
         // on meta.screen (ZERO migration). Already counts/enums/hashes; passed
         // through verbatim (absent ⇒ no key ⇒ byte-identical to a non-screened row).
         if (inputs.screen !== undefined)
             meta.screen = inputs.screen;
+        // Issue #5 (R1): prompt delivery — an enum our adapters produce; anything
+        // outside the vocabulary is dropped (absent ⇒ no key ⇒ byte-identical).
+        if (typeof a.prompt_delivery === "string" && exports.PROMPT_DELIVERIES.has(a.prompt_delivery)) {
+            meta.prompt_delivery = a.prompt_delivery;
+        }
+        // QA-S7: route-lane output contract — the same enum discipline; anything
+        // outside `json` | `text` is dropped (absent ⇒ no key ⇒ byte-identical).
+        if (typeof inputs.outputKind === "string" && exports.OUTPUT_KINDS.has(inputs.outputKind)) {
+            meta.output_kind = inputs.outputKind;
+        }
+        // OBS-1: caller-reported provenance — an enum; anything else is dropped.
+        if (inputs.provenance === "caller-reported")
+            meta.provenance = inputs.provenance;
         // Externally-sourced identifiers — gated by the classification rule.
         if (isMetaSafeString(a.model_snapshot))
             meta.model_snapshot = a.model_snapshot;

package/dist/telemetry/exporter-setup.d.ts

@@ -19,6 +19,8 @@ export interface ExporterSetupExtras {
     readonly artifactStore: ArtifactStore | null;
     /** E4 chunk 0: retry 404'd content after a confirmed artifacts flush. */
     readonly onArtifactsFlushed?: () => Promise<void>;
+    /** `createRig({ expectOrg })` (M5) — threaded to the api sink's org line. */
+    readonly expectOrg?: string;
 }
 /**
  * Construct the sink for the configured mode, wire the exporter, and start its

package/dist/telemetry/exporter-setup.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"exporter-setup.d.ts","sourceRoot":"","sources":["../../src/telemetry/exporter-setup.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAIH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACtD,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,wBAAwB,CAAC;AAClE,OAAO,KAAK,EAAE,eAAe,EAAE,kBAAkB,EAAE,MAAM,WAAW,CAAC;AAErE,OAAO,KAAK,EAAE,QAAQ,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC;AAEhE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AACtD,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,SAAS,CAAC;AAExD,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,MAAM,EAAE,SAAS,mBAAmB,EAAE,CAAC;IAChD,QAAQ,CAAC,QAAQ,EAAE,WAAW,GAAG,IAAI,CAAC;IACtC,QAAQ,CAAC,YAAY,EAAE,SAAS,mBAAmB,EAAE,CAAC;IACtD,gFAAgF;IAChF,QAAQ,CAAC,gBAAgB,EAAE,OAAO,CAAC;IACnC,QAAQ,CAAC,aAAa,EAAE,aAAa,GAAG,IAAI,CAAC;IAC7C,yEAAyE;IACzE,QAAQ,CAAC,kBAAkB,CAAC,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;CACnD;AAED;;;GAGG;AACH,wBAAgB,sBAAsB,CACpC,SAAS,EAAE,wBAAwB,EACnC,YAAY,EAAE,eAAe,GAAG,kBAAkB,EAClD,MAAM,EAAE,mBAAmB,GAC1B,QAAQ,CAiBV"}
+{"version":3,"file":"exporter-setup.d.ts","sourceRoot":"","sources":["../../src/telemetry/exporter-setup.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAIH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACtD,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,wBAAwB,CAAC;AAClE,OAAO,KAAK,EAAE,eAAe,EAAE,kBAAkB,EAAE,MAAM,WAAW,CAAC;AAErE,OAAO,KAAK,EAAE,QAAQ,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC;AAGhE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AACtD,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,SAAS,CAAC;AAExD,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,MAAM,EAAE,SAAS,mBAAmB,EAAE,CAAC;IAChD,QAAQ,CAAC,QAAQ,EAAE,WAAW,GAAG,IAAI,CAAC;IACtC,QAAQ,CAAC,YAAY,EAAE,SAAS,mBAAmB,EAAE,CAAC;IACtD,gFAAgF;IAChF,QAAQ,CAAC,gBAAgB,EAAE,OAAO,CAAC;IACnC,QAAQ,CAAC,aAAa,EAAE,aAAa,GAAG,IAAI,CAAC;IAC7C,yEAAyE;IACzE,QAAQ,CAAC,kBAAkB,CAAC,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IAClD,6EAA6E;IAC7E,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;CAC7B;AAED;;;GAGG;AACH,wBAAgB,sBAAsB,CACpC,SAAS,EAAE,wBAAwB,EACnC,YAAY,EAAE,eAAe,GAAG,kBAAkB,EAClD,MAAM,EAAE,mBAAmB,GAC1B,QAAQ,CAyBV"}

package/dist/telemetry/exporter-setup.js

@@ -10,13 +10,14 @@ exports.startTelemetryExporter = startTelemetryExporter;
 const node_os_1 = require("node:os");
 const exporter_1 = require("./exporter");
 const sinks_1 = require("./sinks");
+const route_registration_1 = require("./route-registration");
 /**
  * Construct the sink for the configured mode, wire the exporter, and start its
  * flush loop. Returns the running exporter (the caller stops it on close()).
  */
 function startTelemetryExporter(telemetry, exportConfig, extras) {
     const sourceId = exportConfig.sourceId ?? (0, node_os_1.hostname)();
-    const sink = (0, sinks_1.buildTelemetrySink)(exportConfig, sourceId);
+    const sink = (0, sinks_1.buildTelemetrySink)(exportConfig, sourceId, extras.expectOrg !== undefined ? { expectOrg: extras.expectOrg } : {});
     const exporter = (0, exporter_1.createTelemetryExporter)(telemetry, {
         sink,
         sourceId,
@@ -30,5 +31,9 @@ function startTelemetryExporter(telemetry, exportConfig, extras) {
         ...(extras.onArtifactsFlushed !== undefined ? { onArtifactsFlushed: extras.onArtifactsFlushed } : {}),
     });
     exporter.start();
+    // RV-1 declare-on-startup: the declared routes (metadata + bundle) go out now,
+    // fire-and-forget, so a route is visible before its first call / first flush.
+    // Never awaited, never throws — createRig cannot block or fail on it.
+    void (0, route_registration_1.registerRoutesOnStartup)(sink, sourceId, extras.routes);
     return exporter;
 }

package/dist/telemetry/grade-mappers.d.ts

@@ -11,8 +11,11 @@ import type { WireGrade } from "./ingest-protocol";
 /** GradeRow → WireGrade (the exporter's `:grades` stream mapper). org_id is
  * spread-iff-present so stampBatch falls back to the exporter's tenant. */
 export declare function toWireGrade(row: GradeRow): WireGrade;
-/** WireGrade → a grades row (the SDK's sole judgment write path). */
-export declare function gradeToRow({ org_id, ...g }: WireGrade, tenancy: Tenancy): Record<string, unknown>;
+/** WireGrade → a grades row (the SDK's sole judgment write path). `criteria`
+ * (F4) is deliberately destructured OUT here: `public.grades` has no criteria
+ * column — the per-criterion breakdown fans out to `grade_criteria` in a
+ * separate best-effort write at the ingest boundary, keyed to this grade's id. */
+export declare function gradeToRow({ org_id, criteria: _criteria, ...g }: WireGrade, tenancy: Tenancy): Record<string, unknown>;
 /**
  * Grades naming an org other than the presented key's. The ingest endpoint drops
  * and COUNTS these so a caller cannot file a judgment into another tenant's corpus

package/dist/telemetry/grade-mappers.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"grade-mappers.d.ts","sourceRoot":"","sources":["../../src/telemetry/grade-mappers.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AACnD,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,mBAAmB,CAAC;AACjD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC;AAEnD;2EAC2E;AAC3E,wBAAgB,WAAW,CAAC,GAAG,EAAE,QAAQ,GAAG,SAAS,CAgBpD;AAED,qEAAqE;AACrE,wBAAgB,UAAU,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,EAAE,EAAE,SAAS,EAAE,OAAO,EAAE,OAAO,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAiBjG;AAED;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,SAAS,SAAS,EAAE,EAAE,QAAQ,EAAE,MAAM,GAAG,SAAS,MAAM,EAAE,CAEhG"}
+{"version":3,"file":"grade-mappers.d.ts","sourceRoot":"","sources":["../../src/telemetry/grade-mappers.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AACnD,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,mBAAmB,CAAC;AACjD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC;AAEnD;2EAC2E;AAC3E,wBAAgB,WAAW,CAAC,GAAG,EAAE,QAAQ,GAAG,SAAS,CAmBpD;AAED;;;kFAGkF;AAClF,wBAAgB,UAAU,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,GAAG,CAAC,EAAE,EAAE,SAAS,EAAE,OAAO,EAAE,OAAO,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAiBtH;AAED;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,SAAS,SAAS,EAAE,EAAE,QAAQ,EAAE,MAAM,GAAG,SAAS,MAAM,EAAE,CAEhG"}

package/dist/telemetry/grade-mappers.js

@@ -27,10 +27,16 @@ function toWireGrade(row) {
         created_by: row.createdBy,
         ts: row.ts,
         ...(row.orgId !== null ? { org_id: row.orgId } : {}),
+        // F4: mirror the per-criterion breakdown iff present (spread-iff — a
+        // single-score grade's wire shape is byte-identical to pre-F4).
+        ...(row.criteria !== undefined ? { criteria: row.criteria } : {}),
     };
 }
-/** WireGrade → a grades row (the SDK's sole judgment write path). */
-function gradeToRow({ org_id, ...g }, tenancy) {
+/** WireGrade → a grades row (the SDK's sole judgment write path). `criteria`
+ * (F4) is deliberately destructured OUT here: `public.grades` has no criteria
+ * column — the per-criterion breakdown fans out to `grade_criteria` in a
+ * separate best-effort write at the ingest boundary, keyed to this grade's id. */
+function gradeToRow({ org_id, criteria: _criteria, ...g }, tenancy) {
     return {
         org_id: org_id ?? tenancy.org_id,
         project_id: tenancy.project_id,

package/dist/telemetry/grades-sql.d.ts

@@ -16,7 +16,7 @@ import type Database from "better-sqlite3";
 import type { GradeRow } from "../types/telemetry";
 /** `CREATE TABLE IF NOT EXISTS grades …` — safe to run on every open. Mirrors
  * `public.grades` minus the export-stamped columns (org handling below). */
-export declare const GRADES_TABLE_SQL = "\nCREATE TABLE IF NOT EXISTS grades (\n  id           TEXT PRIMARY KEY,\n  ts           TEXT,\n  subject_kind TEXT NOT NULL CHECK (subject_kind IN ('inference','run','artifact')),\n  subject_id   TEXT NOT NULL,\n  score        REAL NOT NULL,\n  scale_max    REAL,\n  scale_label  TEXT,\n  comment      TEXT,\n  kind         TEXT NOT NULL CHECK (kind IN ('human','model-judge','deterministic')),\n  grader       TEXT,\n  source       TEXT,\n  org_id       TEXT,\n  created_by   TEXT\n);\nCREATE INDEX IF NOT EXISTS idx_grades_subject ON grades (subject_kind, subject_id);\n";
+export declare const GRADES_TABLE_SQL = "\nCREATE TABLE IF NOT EXISTS grades (\n  id           TEXT PRIMARY KEY,\n  ts           TEXT,\n  subject_kind TEXT NOT NULL CHECK (subject_kind IN ('inference','run','artifact')),\n  subject_id   TEXT NOT NULL,\n  score        REAL NOT NULL,\n  scale_max    REAL,\n  scale_label  TEXT,\n  comment      TEXT,\n  kind         TEXT NOT NULL CHECK (kind IN ('human','model-judge','deterministic')),\n  grader       TEXT,\n  source       TEXT,\n  org_id       TEXT,\n  created_by   TEXT,\n  criteria     TEXT\n);\nCREATE INDEX IF NOT EXISTS idx_grades_subject ON grades (subject_kind, subject_id);\n";
 /** The row shape as it sits in SQLite (snake_case, nullable columns as read back). */
 export interface GradeDbRow {
     id: string;
@@ -32,6 +32,9 @@ export interface GradeDbRow {
     source: string | null;
     org_id: string | null;
     created_by: string | null;
+    /** JSON-encoded per-criterion breakdown (call-qa F4), or null for a
+     * single-score grade / a row written before the v16 rung. */
+    criteria: string | null;
 }
 /** Prepare the grade insert statement against an open handle. INSERT OR IGNORE:
  * a grade id is unique, and a re-inserted id (e.g. the backfill racing a live

package/dist/telemetry/grades-sql.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"grades-sql.d.ts","sourceRoot":"","sources":["../../src/telemetry/grades-sql.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,KAAK,QAAQ,MAAM,gBAAgB,CAAC;AAC3C,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAEnD;4EAC4E;AAC5E,eAAO,MAAM,gBAAgB,ikBAiB5B,CAAC;AAEF,sFAAsF;AACtF,MAAM,WAAW,UAAU;IACzB,EAAE,EAAE,MAAM,CAAC;IACX,EAAE,EAAE,MAAM,GAAG,IAAI,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;CAC3B;AAWD;;iCAEiC;AACjC,wBAAgB,kBAAkB,CAAC,EAAE,EAAE,QAAQ,CAAC,QAAQ,GAAG,QAAQ,CAAC,SAAS,CAE5E;AAED,8DAA8D;AAC9D,wBAAgB,eAAe,CAAC,GAAG,EAAE,QAAQ,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAgBtE;AAED,sDAAsD;AACtD,wBAAgB,UAAU,CAAC,CAAC,EAAE,UAAU,GAAG,QAAQ,CAgBlD;AAED;;;yCAGyC;AACzC,wBAAgB,0BAA0B,CAAC,EAAE,EAAE,QAAQ,CAAC,QAAQ,GAAG,IAAI,CAetE;AAED;;0EAE0E;AAC1E,wBAAgB,6BAA6B,CAAC,EAAE,EAAE,QAAQ,CAAC,QAAQ,GAAG,IAAI,CAgBzE"}
+{"version":3,"file":"grades-sql.d.ts","sourceRoot":"","sources":["../../src/telemetry/grades-sql.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,KAAK,QAAQ,MAAM,gBAAgB,CAAC;AAC3C,OAAO,KAAK,EAAkB,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAEnE;4EAC4E;AAC5E,eAAO,MAAM,gBAAgB,ulBAkB5B,CAAC;AAEF,sFAAsF;AACtF,MAAM,WAAW,UAAU;IACzB,EAAE,EAAE,MAAM,CAAC;IACX,EAAE,EAAE,MAAM,GAAG,IAAI,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B;iEAC6D;IAC7D,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;CACzB;AAWD;;iCAEiC;AACjC,wBAAgB,kBAAkB,CAAC,EAAE,EAAE,QAAQ,CAAC,QAAQ,GAAG,QAAQ,CAAC,SAAS,CAE5E;AAED,8DAA8D;AAC9D,wBAAgB,eAAe,CAAC,GAAG,EAAE,QAAQ,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAoBtE;AAED,sDAAsD;AACtD,wBAAgB,UAAU,CAAC,CAAC,EAAE,UAAU,GAAG,QAAQ,CAqBlD;AAcD;;;yCAGyC;AACzC,wBAAgB,0BAA0B,CAAC,EAAE,EAAE,QAAQ,CAAC,QAAQ,GAAG,IAAI,CAetE;AAED;;0EAE0E;AAC1E,wBAAgB,6BAA6B,CAAC,EAAE,EAAE,QAAQ,CAAC,QAAQ,GAAG,IAAI,CAgBzE"}