modelrig 0.9.0 → 0.11.0

package/dist/telemetry/grades-sql.js

@@ -36,17 +36,18 @@ CREATE TABLE IF NOT EXISTS grades (
   grader       TEXT,
   source       TEXT,
   org_id       TEXT,
-  created_by   TEXT
+  created_by   TEXT,
+  criteria     TEXT
 );
 CREATE INDEX IF NOT EXISTS idx_grades_subject ON grades (subject_kind, subject_id);
 `;
 const INSERT_GRADE_SQL = `
 INSERT OR IGNORE INTO grades (
   id, ts, subject_kind, subject_id, score, scale_max, scale_label, comment,
-  kind, grader, source, org_id, created_by
+  kind, grader, source, org_id, created_by, criteria
 ) VALUES (
   @id, @ts, @subject_kind, @subject_id, @score, @scale_max, @scale_label, @comment,
-  @kind, @grader, @source, @org_id, @created_by
+  @kind, @grader, @source, @org_id, @created_by, @criteria
 )`;
 /** Prepare the grade insert statement against an open handle. INSERT OR IGNORE:
  * a grade id is unique, and a re-inserted id (e.g. the backfill racing a live
@@ -70,6 +71,10 @@ function gradeBindParams(row) {
         source: row.source,
         org_id: row.orgId,
         created_by: row.createdBy,
+        // F4: the per-criterion breakdown is stored as a JSON string (or null for a
+        // single-score grade). One column, no sidecar table locally — the server is
+        // where it fans out to `grade_criteria`.
+        criteria: row.criteria !== undefined ? JSON.stringify(row.criteria) : null,
     };
 }
 /** Read one SQLite grade row back into a GradeRow. */
@@ -88,8 +93,26 @@ function toGradeRow(r) {
         source: r.source,
         orgId: r.org_id ?? null,
         createdBy: r.created_by ?? null,
+        // F4: parse the JSON `criteria` column back. Null (pre-F4 or single-score) ⇒
+        // the field is ABSENT on the GradeRow (spread-iff), so the wire stays
+        // byte-identical for a plain grade. A malformed value degrades to absent
+        // rather than throwing on the export read.
+        ...parseCriteriaColumn(r.criteria),
     };
 }
+/** Narrow the stored JSON `criteria` column to a spread-iff-present GradeRow
+ * fragment. Malformed / null ⇒ `{}` (field absent). Never throws on the read. */
+function parseCriteriaColumn(raw) {
+    if (raw === null)
+        return {};
+    try {
+        const parsed = JSON.parse(raw);
+        return Array.isArray(parsed) ? { criteria: parsed } : {};
+    }
+    catch {
+        return {};
+    }
+}
 /** Backfill `grades` from the local `feedback` table, if it exists (grade
  * primitive, GP-1). Same mapping as migration 00070's feedback→grades leg.
  * Idempotent (INSERT OR IGNORE keyed on the source row id). Runs inside the

package/dist/telemetry/ingest-protocol.d.ts

@@ -31,6 +31,7 @@
  * holds a credential that can write any row in the database.
  */
 import type { FailureClass } from "../types/failures";
+import type { EvalCaseOrigin } from "../types/telemetry";
 import type { ResolvedRouteBundle } from "../routes/resolved-bundle";
 export { foreignOrgGrades } from "./grade-mappers";
 /** The path the api sink posts to. Spelled once. */
@@ -129,6 +130,20 @@ export interface WireGrade {
     readonly ts: string | null;
     /** The grade's OWN org, when it differs from the exporter's (feedback doctrine). */
     readonly org_id?: string;
+    /** OPTIONAL per-criterion breakdown (call-qa F4). Carried on the wire so a
+     * client-recorded HUMAN scorecard reaches the server, which fans it out to
+     * `grade_criteria` (kind=human) after the parent grades row lands. NOT written
+     * to `public.grades` (no column there — `gradeToRow` drops it). Absent ⇒ a
+     * single-score grade. `turn_id` is optional on each evidence citation. */
+    readonly criteria?: readonly {
+        readonly id: string;
+        readonly score: number;
+        readonly evidence?: readonly {
+            readonly quote: string;
+            readonly turn_id?: number;
+        }[];
+        readonly comment?: string;
+    }[];
 }
 export interface WireEnvelope {
     readonly envelope_key: string;
@@ -244,7 +259,7 @@ export interface WireEvalCase {
     readonly task: string;
     readonly source_artifact_id: string;
     readonly corrected_artifact_id: string | null;
-    readonly origin: "promoted-failure" | "human-corrected" | "manual";
+    readonly origin: EvalCaseOrigin;
     readonly note: string | null;
     readonly created_by: string | null;
 }
@@ -305,7 +320,16 @@ export interface TableWrite {
  * telemetry row. If you are about to add a table to the export, add it here
  * and both modes gain it at once — which is the point.
  */
-export declare function stampBatch(batch: IngestBatch, tenancy: Tenancy): TableWrite[];
+/** How `stampBatch` treats route bundles. `declaredBundles` (the HOSTED ingest,
+ * RV-1): a bundle that arrived over `/v1/ingest` is stored as route CONFIG with
+ * `synced_at = null` — readable for pins/effective/bake-offs, but never picked
+ * by the hosted gateway, which serves only `synced_at`-stamped bundles (written
+ * by a trusted sync path). An `ingest`-scoped key must not decide what the
+ * gateway serves. Absent ⇒ the direct-mode behaviour (`synced_at = now`). */
+export interface StampOptions {
+    readonly declaredBundles?: boolean;
+}
+export declare function stampBatch(batch: IngestBatch, tenancy: Tenancy, opts?: StampOptions): TableWrite[];
 /** What `/v1/ingest` answers. Counts only — a per-row error list on a
  * fire-and-forget telemetry path is a payload nobody reads and a leak surface
  * nobody audits. */

package/dist/telemetry/ingest-protocol.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ingest-protocol.d.ts","sourceRoot":"","sources":["../../src/telemetry/ingest-protocol.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AACtD,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,2BAA2B,CAAC;AAIrE,OAAO,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AAEnD,oDAAoD;AACpD,eAAO,MAAM,WAAW,eAAe,CAAC;AAExC;;;;6DAI6D;AAC7D,eAAO,MAAM,uBAAuB,IAAI,CAAC;AAEzC;;+EAE+E;AAC/E,eAAO,MAAM,0BAA0B,IAAI,CAAC;AAE5C,kEAAkE;AAClE,eAAO,MAAM,kBAAkB,4BAA4B,CAAC;AAE5D;kBACkB;AAClB,MAAM,WAAW,OAAO;IACtB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;IACnC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,QAAQ,CAAC,aAAa,EAAE,YAAY,GAAG,IAAI,CAAC;IAC5C,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;IAC3B,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IACvB,QAAQ,CAAC,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;IACzC,QAAQ,CAAC,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IACvC,QAAQ,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IACpC,QAAQ,CAAC,eAAe,EAAE,OAAO,CAAC;IAClC;;;+EAG2E;IAC3E,QAAQ,CAAC,kBAAkB,CAAC,EAAE,MAAM,CAAC;IACrC,QAAQ,CAAC,qBAAqB,CAAC,EAAE,MAAM,CAAC;IACxC,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC,QAAQ,CAAC,kBAAkB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5C;;;2EAGuE;IACvE,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;IAClC;;;;;mEAK+D;IAC/D,QAAQ,CAAC,IAAI,CAAC,EAAE,OAAO,CAAC;IACxB;;;;;;oDAMgD;IAChD,QAAQ,CAAC,IAAI,CAAC,EAAE,OAAO,CAAC;CACzB;AAED;;;;;;GAMG;AACH,MAAM,WAAW,SAAS;IACxB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,YAAY,EAAE,WAAW,GAAG,KAAK,GAAG,UAAU,CAAC;IACxD,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IAClC,QAAQ,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IACpC,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,QAAQ,CAAC,IAAI,EAAE,OAAO,GAAG,aAAa,GAAG,eAAe,CAAC;IACzD,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,QAAQ,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC,QAAQ,CAAC,EAAE,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,oFAAoF;IACpF,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,WAAW,CAAC;CACvC;AAED,MAAM,WAAW,SAAS;IACxB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,UAAU,EAAE,aAAa,CAAC;QAAE,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC1F,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B;;;;2EAIuE;IACvE,QAAQ,CAAC,MAAM,CAAC,EAAE,mBAAmB,CAAC;IACtC;sBACkB;IAClB,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;CAC9B;AAED;;oDAEoD;AACpD,MAAM,WAAW,OAAO;IACtB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;IACzC,QAAQ,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IACpC,QAAQ,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IACpC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,QAAQ,CAAC,MAAM,EAAE,SAAS,GAAG,WAAW,GAAG,QAAQ,GAAG,WAAW,CAAC;IAClE;;kFAE8E;IAC9E,QAAQ,CAAC,IAAI,CAAC,EAAE,OAAO,CAAC;CACzB;AAED;;;;;oEAKoE;AACpE,MAAM,WAAW,QAAQ;IACvB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,QAAQ,CAAC,UAAU,EAAE,cAAc,GAAG,UAAU,CAAC;IACjD,QAAQ,CAAC,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IACrC,QAAQ,CAAC,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IACtC,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,QAAQ,CAAC,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IACtC;;;;;;;;;;OAUG;IACH,QAAQ,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAC;CAC7B;AAED;;oEAEoE;AACpE,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,QAAQ,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,sBAAsB,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/C,QAAQ,CAAC,eAAe,EAAE,OAAO,CAAC;IAClC,QAAQ,CAAC,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;IACzC,QAAQ,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IACpC,QAAQ,CAAC,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IACrC,QAAQ,CAAC,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IACtC,QAAQ,CAAC,mBAAmB,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5C,QAAQ,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC;;;yEAGqE;IACrE,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC;CAC1B;AAED,8DAA8D;AAC9D,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,IAAI,EAAE,UAAU,GAAG,cAAc,CAAC;CAC5C;AAED;;;;kBAIkB;AAClB,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,kBAAkB,EAAE,MAAM,CAAC;IACpC,QAAQ,CAAC,qBAAqB,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9C,QAAQ,CAAC,MAAM,EAAE,kBAAkB,GAAG,iBAAiB,GAAG,QAAQ,CAAC;IACnE,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,QAAQ,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;CACpC;AAED,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAC;IAC7B,QAAQ,CAAC,YAAY,EAAE,OAAO,CAAC;IAC/B,QAAQ,CAAC,YAAY,EAAE,SAAS,OAAO,EAAE,CAAC;IAC1C;;;;wBAIoB;IACpB,QAAQ,CAAC,WAAW,CAAC,EAAE,SAAS,OAAO,EAAE,CAAC;CAC3C;AAED;gDACgD;AAChD,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,CAAC,EAAE,MAAM,CAAC;IACnB;;8CAE0C;IAC1C,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,UAAU,CAAC,EAAE,SAAS,aAAa,EAAE,CAAC;IAC/C;2CACuC;IACvC,QAAQ,CAAC,MAAM,CAAC,EAAE,SAAS,SAAS,EAAE,CAAC;IACvC,QAAQ,CAAC,SAAS,CAAC,EAAE,SAAS,YAAY,EAAE,CAAC;IAC7C,QAAQ,CAAC,MAAM,CAAC,EAAE,SAAS,SAAS,EAAE,CAAC;IACvC;gFAC4E;IAC5E,QAAQ,CAAC,IAAI,CAAC,EAAE,SAAS,OAAO,EAAE,CAAC;IACnC,QAAQ,CAAC,KAAK,CAAC,EAAE,SAAS,QAAQ,EAAE,CAAC;IACrC,QAAQ,CAAC,SAAS,CAAC,EAAE,SAAS,YAAY,EAAE,CAAC;IAC7C,QAAQ,CAAC,cAAc,CAAC,EAAE,SAAS,gBAAgB,EAAE,CAAC;IACtD;oFACgF;IAChF,QAAQ,CAAC,UAAU,CAAC,EAAE,SAAS,YAAY,EAAE,CAAC;IAC9C,QAAQ,CAAC,QAAQ,CAAC,EAAE,YAAY,CAAC;IACjC,2EAA2E;IAC3E,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;CAC/B;AAED;mEACmE;AACnE,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,IAAI,EAAE,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,CAAC;IAClD,0DAA0D;IAC1D,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B;2EACuE;IACvE,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC;CACzB;AAED;;;;;;GAMG;AACH,wBAAgB,UAAU,CAAC,KAAK,EAAE,WAAW,EAAE,OAAO,EAAE,OAAO,GAAG,UAAU,EAAE,CAsR7E;AAED;;oBAEoB;AACpB,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IACpD,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IACnD;qCACiC;IACjC,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;CACpD"}
+{"version":3,"file":"ingest-protocol.d.ts","sourceRoot":"","sources":["../../src/telemetry/ingest-protocol.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AACtD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AACzD,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,2BAA2B,CAAC;AAIrE,OAAO,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AAEnD,oDAAoD;AACpD,eAAO,MAAM,WAAW,eAAe,CAAC;AAExC;;;;6DAI6D;AAC7D,eAAO,MAAM,uBAAuB,IAAI,CAAC;AAEzC;;+EAE+E;AAC/E,eAAO,MAAM,0BAA0B,IAAI,CAAC;AAE5C,kEAAkE;AAClE,eAAO,MAAM,kBAAkB,4BAA4B,CAAC;AAE5D;kBACkB;AAClB,MAAM,WAAW,OAAO;IACtB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;IACnC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,QAAQ,CAAC,aAAa,EAAE,YAAY,GAAG,IAAI,CAAC;IAC5C,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;IAC3B,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IACvB,QAAQ,CAAC,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;IACzC,QAAQ,CAAC,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IACvC,QAAQ,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IACpC,QAAQ,CAAC,eAAe,EAAE,OAAO,CAAC;IAClC;;;+EAG2E;IAC3E,QAAQ,CAAC,kBAAkB,CAAC,EAAE,MAAM,CAAC;IACrC,QAAQ,CAAC,qBAAqB,CAAC,EAAE,MAAM,CAAC;IACxC,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC,QAAQ,CAAC,kBAAkB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5C;;;2EAGuE;IACvE,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;IAClC;;;;;mEAK+D;IAC/D,QAAQ,CAAC,IAAI,CAAC,EAAE,OAAO,CAAC;IACxB;;;;;;oDAMgD;IAChD,QAAQ,CAAC,IAAI,CAAC,EAAE,OAAO,CAAC;CACzB;AAED;;;;;;GAMG;AACH,MAAM,WAAW,SAAS;IACxB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,YAAY,EAAE,WAAW,GAAG,KAAK,GAAG,UAAU,CAAC;IACxD,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IAClC,QAAQ,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IACpC,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,QAAQ,CAAC,IAAI,EAAE,OAAO,GAAG,aAAa,GAAG,eAAe,CAAC;IACzD,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,QAAQ,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC,QAAQ,CAAC,EAAE,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,oFAAoF;IACpF,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB;;;;8EAI0E;IAC1E,QAAQ,CAAC,QAAQ,CAAC,EAAE,SAAS;QAC3B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;QACpB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;QACvB,QAAQ,CAAC,QAAQ,CAAC,EAAE,SAAS;YAAE,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;YAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAA;SAAE,EAAE,CAAC;QACrF,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;KAC3B,EAAE,CAAC;CACL;AAED,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,WAAW,CAAC;CACvC;AAED,MAAM,WAAW,SAAS;IACxB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,UAAU,EAAE,aAAa,CAAC;QAAE,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC1F,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B;;;;2EAIuE;IACvE,QAAQ,CAAC,MAAM,CAAC,EAAE,mBAAmB,CAAC;IACtC;sBACkB;IAClB,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;CAC9B;AAED;;oDAEoD;AACpD,MAAM,WAAW,OAAO;IACtB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;IACzC,QAAQ,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IACpC,QAAQ,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IACpC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,QAAQ,CAAC,MAAM,EAAE,SAAS,GAAG,WAAW,GAAG,QAAQ,GAAG,WAAW,CAAC;IAClE;;kFAE8E;IAC9E,QAAQ,CAAC,IAAI,CAAC,EAAE,OAAO,CAAC;CACzB;AAED;;;;;oEAKoE;AACpE,MAAM,WAAW,QAAQ;IACvB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,QAAQ,CAAC,UAAU,EAAE,cAAc,GAAG,UAAU,CAAC;IACjD,QAAQ,CAAC,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IACrC,QAAQ,CAAC,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IACtC,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,QAAQ,CAAC,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IACtC;;;;;;;;;;OAUG;IACH,QAAQ,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAC;CAC7B;AAED;;oEAEoE;AACpE,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,QAAQ,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,sBAAsB,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/C,QAAQ,CAAC,eAAe,EAAE,OAAO,CAAC;IAClC,QAAQ,CAAC,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;IACzC,QAAQ,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IACpC,QAAQ,CAAC,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IACrC,QAAQ,CAAC,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IACtC,QAAQ,CAAC,mBAAmB,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5C,QAAQ,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC;;;yEAGqE;IACrE,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC;CAC1B;AAED,8DAA8D;AAC9D,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,IAAI,EAAE,UAAU,GAAG,cAAc,CAAC;CAC5C;AAED;;;;kBAIkB;AAClB,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,kBAAkB,EAAE,MAAM,CAAC;IACpC,QAAQ,CAAC,qBAAqB,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9C,QAAQ,CAAC,MAAM,EAAE,cAAc,CAAC;IAChC,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,QAAQ,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;CACpC;AAED,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAC;IAC7B,QAAQ,CAAC,YAAY,EAAE,OAAO,CAAC;IAC/B,QAAQ,CAAC,YAAY,EAAE,SAAS,OAAO,EAAE,CAAC;IAC1C;;;;wBAIoB;IACpB,QAAQ,CAAC,WAAW,CAAC,EAAE,SAAS,OAAO,EAAE,CAAC;CAC3C;AAED;gDACgD;AAChD,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,CAAC,EAAE,MAAM,CAAC;IACnB;;8CAE0C;IAC1C,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,UAAU,CAAC,EAAE,SAAS,aAAa,EAAE,CAAC;IAC/C;2CACuC;IACvC,QAAQ,CAAC,MAAM,CAAC,EAAE,SAAS,SAAS,EAAE,CAAC;IACvC,QAAQ,CAAC,SAAS,CAAC,EAAE,SAAS,YAAY,EAAE,CAAC;IAC7C,QAAQ,CAAC,MAAM,CAAC,EAAE,SAAS,SAAS,EAAE,CAAC;IACvC;gFAC4E;IAC5E,QAAQ,CAAC,IAAI,CAAC,EAAE,SAAS,OAAO,EAAE,CAAC;IACnC,QAAQ,CAAC,KAAK,CAAC,EAAE,SAAS,QAAQ,EAAE,CAAC;IACrC,QAAQ,CAAC,SAAS,CAAC,EAAE,SAAS,YAAY,EAAE,CAAC;IAC7C,QAAQ,CAAC,cAAc,CAAC,EAAE,SAAS,gBAAgB,EAAE,CAAC;IACtD;oFACgF;IAChF,QAAQ,CAAC,UAAU,CAAC,EAAE,SAAS,YAAY,EAAE,CAAC;IAC9C,QAAQ,CAAC,QAAQ,CAAC,EAAE,YAAY,CAAC;IACjC,2EAA2E;IAC3E,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;CAC/B;AAED;mEACmE;AACnE,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,IAAI,EAAE,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,CAAC;IAClD,0DAA0D;IAC1D,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B;2EACuE;IACvE,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC;CACzB;AAED;;;;;;GAMG;AACH;;;;;6EAK6E;AAC7E,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,eAAe,CAAC,EAAE,OAAO,CAAC;CACpC;AAED,wBAAgB,UAAU,CAAC,KAAK,EAAE,WAAW,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,GAAE,YAAiB,GAAG,UAAU,EAAE,CA+RtG;AAED;;oBAEoB;AACpB,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IACpD,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IACnD;qCACiC;IACjC,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;CACpD"}

package/dist/telemetry/ingest-protocol.js

@@ -52,14 +52,7 @@ exports.INGEST_PROTOCOL_VERSION = 2;
 exports.INGEST_PROTOCOL_VERSION_V1 = 1;
 /** Default ingest host — telemetry-ingestion-boundary.md §2.1. */
 exports.DEFAULT_INGEST_URL = "https://api.modelrig.ai";
-/**
- * Turn a batch plus a tenant into the writes it becomes.
- *
- * THE conformance seam. Both transports call this; nothing else builds a
- * telemetry row. If you are about to add a table to the export, add it here
- * and both modes gain it at once — which is the point.
- */
-function stampBatch(batch, tenancy) {
+function stampBatch(batch, tenancy, opts = {}) {
     const writes = [];
     const now = new Date().toISOString();
     if (batch.routes !== undefined && batch.routes.length > 0) {
@@ -103,28 +96,38 @@ function stampBatch(batch, tenancy) {
             merge: true,
             rows: taskRows,
         });
-        writes.push({
-            table: "routes",
-            onConflict: "org_id,route,version",
-            merge: true,
-            rows: batch.routes.map((r) => ({
-                org_id: tenancy.org_id,
-                route: r.route,
-                version: r.version,
-                candidates: r.candidates,
-                capture: r.capture,
-                updated_at: now,
-                // Phase D (spec §13): the resolved bundle + its hash + the sync stamp.
-                // Written only when the batch carries a bundle, so an older SDK's
-                // metadata-only mirror leaves any existing bundle intact (a merge
-                // upsert touches only the columns present in the row). `synced_at` is
-                // the BUNDLE's timestamp — stamped iff a bundle synced — distinct from
-                // `updated_at`, the row's metadata timestamp.
-                ...(r.bundle !== undefined
-                    ? { bundle: r.bundle, bundle_sha: r.bundle_sha ?? null, synced_at: now }
-                    : {}),
-            })),
+        const routeRow = (r) => ({
+            org_id: tenancy.org_id,
+            route: r.route,
+            version: r.version,
+            candidates: r.candidates,
+            capture: r.capture,
+            updated_at: now,
+            // Phase D (spec §13): the resolved bundle + its hash + the sync stamp.
+            // Written only when the route carries a bundle, so an older SDK's
+            // metadata-only mirror leaves any existing bundle intact (a merge
+            // upsert touches only the columns present in the row). `synced_at` is
+            // the BUNDLE's timestamp — stamped iff a bundle synced through a trusted
+            // path — distinct from `updated_at`, the row's metadata timestamp.
+            ...(r.bundle !== undefined
+                ? { bundle: r.bundle, bundle_sha: r.bundle_sha ?? null, synced_at: opts.declaredBundles === true ? null : now }
+                : {}),
         });
+        // TWO writes, split by bundle presence: a PostgREST bulk insert requires
+        // every row to carry the SAME keys (PGRST102), so one route whose bundle was
+        // dropped must not fail — or null out — its neighbours' bundles.
+        const withBundle = batch.routes.filter((r) => r.bundle !== undefined);
+        const withoutBundle = batch.routes.filter((r) => r.bundle === undefined);
+        for (const group of [withBundle, withoutBundle]) {
+            if (group.length === 0)
+                continue;
+            writes.push({
+                table: "routes",
+                onConflict: "org_id,route,version",
+                merge: true,
+                rows: group.map(routeRow),
+            });
+        }
     }
     if (batch.runs !== undefined && batch.runs.length > 0) {
         writes.push({

package/dist/telemetry/lanes.d.ts

@@ -0,0 +1,31 @@
+/**
+ * The ONE lane classifier every read surface uses (OBS-1). A telemetry row's
+ * `tags.lane` names how ModelRig came to hold it:
+ *   • absent / anything else — a ROUTED call (it walked a route's ladder; its
+ *     quality signal is schema conformance).
+ *   • `"raw"`      — a raw-lane BYOK passthrough ModelRig dispatched but never
+ *     validated (`rig.runRaw`).
+ *   • `"external"` — a RECORDED call: the customer's own code made it and
+ *     reported it through `rig.recordCall`; ModelRig neither dispatched nor
+ *     validated it.
+ * Raw and external rows are never routed: they never enter ladder or
+ * conformance math, and their quality signal is `rig.grade`.
+ *
+ * Pure, dependency-free (the console imports it through `@modelrig-core`).
+ * The billing path (`modelrig-server` usage-aggregation `laneOf`) deliberately
+ * keeps its own literal so a money decision imports nothing from here.
+ */
+export declare const RAW_LANE = "raw";
+export declare const EXTERNAL_LANE = "external";
+/** The call lane a read surface renders. */
+export type CallLane = "routes" | "raw" | "external";
+/** True when a row with this `tags.lane` walked a route (enters ladder and
+ * conformance math). False for `raw` and `external`. */
+export declare function isRoutedLane(lane: unknown): boolean;
+/** Three-way classification of a `tags.lane` value. */
+export declare function callLaneOf(lane: unknown): CallLane;
+/** Console badge copy for a recorded (external) call. User-facing copy says
+ * "recorded call", never "lane". */
+export declare const RECORDED_BADGE = "recorded \u00B7 unverified";
+export declare const RECORDED_TOOLTIP = "Your code made this call; ModelRig recorded what you reported (tokens, tier, latency). It did not dispatch or validate it.";
+//# sourceMappingURL=lanes.d.ts.map

package/dist/telemetry/lanes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"lanes.d.ts","sourceRoot":"","sources":["../../src/telemetry/lanes.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,eAAO,MAAM,QAAQ,QAAQ,CAAC;AAC9B,eAAO,MAAM,aAAa,aAAa,CAAC;AAExC,4CAA4C;AAC5C,MAAM,MAAM,QAAQ,GAAG,QAAQ,GAAG,KAAK,GAAG,UAAU,CAAC;AAErD;wDACwD;AACxD,wBAAgB,YAAY,CAAC,IAAI,EAAE,OAAO,GAAG,OAAO,CAEnD;AAED,uDAAuD;AACvD,wBAAgB,UAAU,CAAC,IAAI,EAAE,OAAO,GAAG,QAAQ,CAIlD;AAED;oCACoC;AACpC,eAAO,MAAM,cAAc,+BAA0B,CAAC;AACtD,eAAO,MAAM,gBAAgB,+HACiG,CAAC"}

package/dist/telemetry/lanes.js

@@ -0,0 +1,41 @@
+"use strict";
+/**
+ * The ONE lane classifier every read surface uses (OBS-1). A telemetry row's
+ * `tags.lane` names how ModelRig came to hold it:
+ *   • absent / anything else — a ROUTED call (it walked a route's ladder; its
+ *     quality signal is schema conformance).
+ *   • `"raw"`      — a raw-lane BYOK passthrough ModelRig dispatched but never
+ *     validated (`rig.runRaw`).
+ *   • `"external"` — a RECORDED call: the customer's own code made it and
+ *     reported it through `rig.recordCall`; ModelRig neither dispatched nor
+ *     validated it.
+ * Raw and external rows are never routed: they never enter ladder or
+ * conformance math, and their quality signal is `rig.grade`.
+ *
+ * Pure, dependency-free (the console imports it through `@modelrig-core`).
+ * The billing path (`modelrig-server` usage-aggregation `laneOf`) deliberately
+ * keeps its own literal so a money decision imports nothing from here.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.RECORDED_TOOLTIP = exports.RECORDED_BADGE = exports.EXTERNAL_LANE = exports.RAW_LANE = void 0;
+exports.isRoutedLane = isRoutedLane;
+exports.callLaneOf = callLaneOf;
+exports.RAW_LANE = "raw";
+exports.EXTERNAL_LANE = "external";
+/** True when a row with this `tags.lane` walked a route (enters ladder and
+ * conformance math). False for `raw` and `external`. */
+function isRoutedLane(lane) {
+    return lane !== exports.RAW_LANE && lane !== exports.EXTERNAL_LANE;
+}
+/** Three-way classification of a `tags.lane` value. */
+function callLaneOf(lane) {
+    if (lane === exports.RAW_LANE)
+        return "raw";
+    if (lane === exports.EXTERNAL_LANE)
+        return "external";
+    return "routes";
+}
+/** Console badge copy for a recorded (external) call. User-facing copy says
+ * "recorded call", never "lane". */
+exports.RECORDED_BADGE = "recorded · unverified";
+exports.RECORDED_TOOLTIP = "Your code made this call; ModelRig recorded what you reported (tokens, tier, latency). It did not dispatch or validate it.";

package/dist/telemetry/org-identity.d.ts

@@ -0,0 +1,47 @@
+/**
+ * The first-flush org line + the `expectOrg` mismatch signal (REL-1, ruling M5).
+ *
+ * A VALID key minted in the WRONG org is the failure the AUTH FAILED latch in
+ * sinks.ts cannot see: every POST is a 200, and the runs land in someone else's
+ * console. (Six weeks of InferWealth pipeline telemetry went to Nunexa this
+ * way.) So on the first successful flush in each process the api sink asks
+ * `GET /v1/whoami` once — through the same `whoamiPreflight` helper that
+ * `modelrig doctor` uses — and logs which org it is exporting to:
+ *
+ *   [modelrig] exporting to org «InferWealth» (inferwealth) as key «InferWealth2» …ab12
+ *
+ * With `createRig({ expectOrg: "<slug>" })` a different resolved slug logs
+ * `ORG MISMATCH` loudly on EVERY successful flush (ruling M5), because nobody
+ * reads boot logs. It is a code option, not an env var (P15).
+ *
+ * Contract: non-blocking (never awaited by the sink), once per process per
+ * key, never throws, never drops or delays telemetry. A failed whoami is
+ * SILENT: a 401 already has its own loud line, and a network blip must not
+ * become noise.
+ */
+import { type PreflightResult } from "../doctor-preflight";
+/** The whoami call is aborted after this long, so it can never hold a
+ * process open (AbortSignal.timeout's timer is unref'd by Node). */
+export declare const WHOAMI_TIMEOUT_MS = 5000;
+/** TESTS ONLY — forget every key, so "once per process" cases are independent. */
+export declare function __resetOrgIdentityForTest(): void;
+export interface OrgIdentityInput {
+    readonly ingestUrl: string;
+    readonly apiKey: string;
+    readonly expectOrg?: string;
+    readonly fetchFn: typeof fetch;
+    /** Override WHOAMI_TIMEOUT_MS (tests). */
+    readonly timeoutMs?: number;
+}
+/** Build the one-line org banner from a successful whoami. Only an ok result
+ * reaches here, and an ok result always NAMES its org (QA N14: a 2xx without
+ * one is not ok), so `orgName` is required. Never prints a placeholder glyph:
+ * the slug is shown only when the server sent one that differs from the name. */
+export declare function formatOrgLine(orgName: string, result: PreflightResult, apiKey: string): string;
+/**
+ * Record one successful flush. Returns immediately; the whoami (first flush
+ * only) runs in the background. Exposed as a promise-returning helper ONLY so
+ * tests can await the background work — the sink calls it with `void`.
+ */
+export declare function noteSuccessfulFlush(input: OrgIdentityInput): Promise<void>;
+//# sourceMappingURL=org-identity.d.ts.map

package/dist/telemetry/org-identity.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"org-identity.d.ts","sourceRoot":"","sources":["../../src/telemetry/org-identity.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,OAAO,EAAwC,KAAK,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAGjG;oEACoE;AACpE,eAAO,MAAM,iBAAiB,OAAO,CAAC;AAYtC,kFAAkF;AAClF,wBAAgB,yBAAyB,IAAI,IAAI,CAEhD;AAED,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,OAAO,EAAE,OAAO,KAAK,CAAC;IAC/B,0CAA0C;IAC1C,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;CAC7B;AAED;;;iFAGiF;AACjF,wBAAgB,aAAa,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,eAAe,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,CAM9F;AAgBD;;;;GAIG;AACH,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,gBAAgB,GAAG,OAAO,CAAC,IAAI,CAAC,CA+B1E"}

package/dist/telemetry/org-identity.js

@@ -0,0 +1,100 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.WHOAMI_TIMEOUT_MS = void 0;
+exports.__resetOrgIdentityForTest = __resetOrgIdentityForTest;
+exports.formatOrgLine = formatOrgLine;
+exports.noteSuccessfulFlush = noteSuccessfulFlush;
+/**
+ * The first-flush org line + the `expectOrg` mismatch signal (REL-1, ruling M5).
+ *
+ * A VALID key minted in the WRONG org is the failure the AUTH FAILED latch in
+ * sinks.ts cannot see: every POST is a 200, and the runs land in someone else's
+ * console. (Six weeks of InferWealth pipeline telemetry went to Nunexa this
+ * way.) So on the first successful flush in each process the api sink asks
+ * `GET /v1/whoami` once — through the same `whoamiPreflight` helper that
+ * `modelrig doctor` uses — and logs which org it is exporting to:
+ *
+ *   [modelrig] exporting to org «InferWealth» (inferwealth) as key «InferWealth2» …ab12
+ *
+ * With `createRig({ expectOrg: "<slug>" })` a different resolved slug logs
+ * `ORG MISMATCH` loudly on EVERY successful flush (ruling M5), because nobody
+ * reads boot logs. It is a code option, not an env var (P15).
+ *
+ * Contract: non-blocking (never awaited by the sink), once per process per
+ * key, never throws, never drops or delays telemetry. A failed whoami is
+ * SILENT: a 401 already has its own loud line, and a network blip must not
+ * become noise.
+ */
+const doctor_preflight_1 = require("../doctor-preflight");
+const api_key_format_1 = require("../tenancy/api-key-format");
+/** The whoami call is aborted after this long, so it can never hold a
+ * process open (AbortSignal.timeout's timer is unref'd by Node). */
+exports.WHOAMI_TIMEOUT_MS = 5000;
+/** Keyed by ingest origin + key, so two rigs sharing a key share one whoami. */
+const states = new Map();
+/** TESTS ONLY — forget every key, so "once per process" cases are independent. */
+function __resetOrgIdentityForTest() {
+    states.clear();
+}
+/** Build the one-line org banner from a successful whoami. Only an ok result
+ * reaches here, and an ok result always NAMES its org (QA N14: a 2xx without
+ * one is not ok), so `orgName` is required. Never prints a placeholder glyph:
+ * the slug is shown only when the server sent one that differs from the name. */
+function formatOrgLine(orgName, result, apiKey) {
+    const slugRaw = result.whoami?.org?.slug;
+    const slug = typeof slugRaw === "string" && slugRaw !== "" && slugRaw !== orgName ? ` (${slugRaw})` : "";
+    const keyName = result.whoami?.key?.name;
+    const keyLabel = typeof keyName === "string" && keyName !== "" ? `«${keyName}» ` : "";
+    return `[modelrig] exporting to org «${orgName}»${slug} as key ${keyLabel}${(0, api_key_format_1.redactApiKey)(apiKey)}`;
+}
+function mismatchLine(actual, expectOrg) {
+    return (`[modelrig] ORG MISMATCH: key resolves to «${actual}», expectOrg is «${expectOrg}» — ` +
+        `telemetry is landing in «${actual}»`);
+}
+function warnIfMismatch(result, expectOrg) {
+    const expected = expectOrg?.trim();
+    if (expected === undefined || expected === "")
+        return;
+    const actual = (0, doctor_preflight_1.expectedOrgMismatch)(result, expected);
+    if (actual !== null)
+        console.warn(mismatchLine(actual, expected));
+}
+/**
+ * Record one successful flush. Returns immediately; the whoami (first flush
+ * only) runs in the background. Exposed as a promise-returning helper ONLY so
+ * tests can await the background work — the sink calls it with `void`.
+ */
+function noteSuccessfulFlush(input) {
+    let origin;
+    try {
+        origin = new URL(input.ingestUrl).origin;
+    }
+    catch {
+        return Promise.resolve();
+    }
+    const id = `${origin}|${input.apiKey}`;
+    let state = states.get(id);
+    if (state === undefined) {
+        state = { flushes: 0, resolved: null };
+        states.set(id, state);
+    }
+    state.flushes += 1;
+    const s = state;
+    if (s.flushes === 1) {
+        return (0, doctor_preflight_1.whoamiPreflight)(input.ingestUrl, input.apiKey, input.fetchFn, AbortSignal.timeout(input.timeoutMs ?? exports.WHOAMI_TIMEOUT_MS))
+            .then((result) => {
+            if (!result.ok || result.orgName === undefined)
+                return; // silent: a 401 has its own loud line
+            s.resolved = result;
+            console.log(formatOrgLine(result.orgName, result, input.apiKey));
+            warnIfMismatch(result, input.expectOrg);
+        })
+            .catch(() => {
+            // whoamiPreflight never throws, and logging must never break the sink.
+        });
+    }
+    // M5: loud on EVERY flush once the org is known (flush 1 warns when whoami lands).
+    if (s.resolved !== null)
+        warnIfMismatch(s.resolved, input.expectOrg);
+    return Promise.resolve();
+}

package/dist/telemetry/route-registration.d.ts

@@ -0,0 +1,48 @@
+/**
+ * RV-1 declare-on-startup — a rig with routes AND a control plane tells the
+ * control plane which routes it serves the moment it is created, so a route is
+ * visible (console, MCP `get_call_config`, `GET /v1/routes/:route/call-config
+ * ?include=effective`) BEFORE its first call.
+ *
+ * ── WHY A SEPARATE ONE-SHOT, WHEN THE EXPORTER ALREADY MIRRORS ROUTES ─────
+ * The exporter folds the routes mirror into its FIRST flush (one interval —
+ * 10s — after start). A short-lived process (a CLI, a cron, a lazily-built
+ * pipeline rig) that exits before that tick without `close()` never mirrors, and
+ * a long-lived one is invisible for the first interval. This sends the same
+ * metadata once, immediately. The exporter's header stays as the at-least-once
+ * retry path: the routes upsert is a merge on (org_id, route, version), so the
+ * duplicate is harmless.
+ *
+ * ── WHAT IT CARRIES (and does not) ────────────────────────────────────────
+ * route, version, candidates (provider/model), capture flag, AND the declared
+ * resolved bundle + its `bundle_sha` — the same payload the exporter's
+ * first-flush mirror has always carried (Matt's RV-1 ruling 1, 2026-10-10). The
+ * bundle is ROUTE CONFIGURATION (the authored prompt TEMPLATE with its
+ * placeholders, schema, candidates, policy — never per-call values); the control
+ * plane needs it so a call-config pin passes the eligibility gate (`loadBundle`)
+ * on a mirror-mode server. The server re-validates the bundle and recomputes the
+ * sha; once a PSR prompt has been promoted for the route, PSR's template wins
+ * over the declared one (modelrig-server ingest-route-config.ts). The org is
+ * never on the wire — the server stamps it from the key's principal (T3/T11).
+ * It travels through the SAME sink as telemetry, so in `api` mode it is a
+ * `POST /v1/ingest` with the rig's own key and needs only the `ingest` scope.
+ *
+ * ── FAIL-OPEN BY CONSTRUCTION ─────────────────────────────────────────────
+ * Fire-and-forget. Never awaited by createRig, never throws (sync or async),
+ * one console.warn on failure. It cannot change what THIS process serves (the
+ * SDK serves from its local bundles); it writes only the control-plane `routes`
+ * mirror, exactly as the exporter's first flush already does.
+ */
+import type { IngestBatch } from "./ingest-protocol";
+import type { ExportedRouteMirror } from "./exporter";
+import type { TelemetrySink } from "./sinks";
+/** The routes-only batch (metadata + declared bundle). v1 so any server vintage
+ * accepts it (an older server keeps the metadata and ignores the bundle). */
+export declare function buildRouteRegistrationBatch(sourceId: string, routes: readonly ExportedRouteMirror[]): IngestBatch;
+/**
+ * Register `routes` with the control plane through `sink`, once, now. Returns
+ * the in-flight promise (always resolves — for tests and callers that want to
+ * await it); createRig ignores it. No routes ⇒ no request.
+ */
+export declare function registerRoutesOnStartup(sink: TelemetrySink, sourceId: string, routes: readonly ExportedRouteMirror[]): Promise<void>;
+//# sourceMappingURL=route-registration.d.ts.map

package/dist/telemetry/route-registration.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"route-registration.d.ts","sourceRoot":"","sources":["../../src/telemetry/route-registration.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkCG;AAGH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AACrD,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC;AACtD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAE7C;6EAC6E;AAC7E,wBAAgB,2BAA2B,CACzC,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,SAAS,mBAAmB,EAAE,GACrC,WAAW,CAYb;AAED;;;;GAIG;AACH,wBAAgB,uBAAuB,CACrC,IAAI,EAAE,aAAa,EACnB,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,SAAS,mBAAmB,EAAE,GACrC,OAAO,CAAC,IAAI,CAAC,CAgBf"}

package/dist/telemetry/route-registration.js

@@ -0,0 +1,77 @@
+"use strict";
+/**
+ * RV-1 declare-on-startup — a rig with routes AND a control plane tells the
+ * control plane which routes it serves the moment it is created, so a route is
+ * visible (console, MCP `get_call_config`, `GET /v1/routes/:route/call-config
+ * ?include=effective`) BEFORE its first call.
+ *
+ * ── WHY A SEPARATE ONE-SHOT, WHEN THE EXPORTER ALREADY MIRRORS ROUTES ─────
+ * The exporter folds the routes mirror into its FIRST flush (one interval —
+ * 10s — after start). A short-lived process (a CLI, a cron, a lazily-built
+ * pipeline rig) that exits before that tick without `close()` never mirrors, and
+ * a long-lived one is invisible for the first interval. This sends the same
+ * metadata once, immediately. The exporter's header stays as the at-least-once
+ * retry path: the routes upsert is a merge on (org_id, route, version), so the
+ * duplicate is harmless.
+ *
+ * ── WHAT IT CARRIES (and does not) ────────────────────────────────────────
+ * route, version, candidates (provider/model), capture flag, AND the declared
+ * resolved bundle + its `bundle_sha` — the same payload the exporter's
+ * first-flush mirror has always carried (Matt's RV-1 ruling 1, 2026-10-10). The
+ * bundle is ROUTE CONFIGURATION (the authored prompt TEMPLATE with its
+ * placeholders, schema, candidates, policy — never per-call values); the control
+ * plane needs it so a call-config pin passes the eligibility gate (`loadBundle`)
+ * on a mirror-mode server. The server re-validates the bundle and recomputes the
+ * sha; once a PSR prompt has been promoted for the route, PSR's template wins
+ * over the declared one (modelrig-server ingest-route-config.ts). The org is
+ * never on the wire — the server stamps it from the key's principal (T3/T11).
+ * It travels through the SAME sink as telemetry, so in `api` mode it is a
+ * `POST /v1/ingest` with the rig's own key and needs only the `ingest` scope.
+ *
+ * ── FAIL-OPEN BY CONSTRUCTION ─────────────────────────────────────────────
+ * Fire-and-forget. Never awaited by createRig, never throws (sync or async),
+ * one console.warn on failure. It cannot change what THIS process serves (the
+ * SDK serves from its local bundles); it writes only the control-plane `routes`
+ * mirror, exactly as the exporter's first flush already does.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.buildRouteRegistrationBatch = buildRouteRegistrationBatch;
+exports.registerRoutesOnStartup = registerRoutesOnStartup;
+const ingest_protocol_1 = require("./ingest-protocol");
+/** The routes-only batch (metadata + declared bundle). v1 so any server vintage
+ * accepts it (an older server keeps the metadata and ignores the bundle). */
+function buildRouteRegistrationBatch(sourceId, routes) {
+    return {
+        v: ingest_protocol_1.INGEST_PROTOCOL_VERSION_V1,
+        source: sourceId,
+        routes: routes.map((r) => ({
+            route: r.route,
+            version: r.version,
+            candidates: r.candidates.map((c) => ({ provider: c.provider, model: c.model })),
+            capture: r.capture ?? false,
+            ...(r.bundle !== undefined ? { bundle: r.bundle, bundle_sha: r.bundleSha } : {}),
+        })),
+    };
+}
+/**
+ * Register `routes` with the control plane through `sink`, once, now. Returns
+ * the in-flight promise (always resolves — for tests and callers that want to
+ * await it); createRig ignores it. No routes ⇒ no request.
+ */
+function registerRoutesOnStartup(sink, sourceId, routes) {
+    if (routes.length === 0)
+        return Promise.resolve();
+    let batch;
+    try {
+        batch = buildRouteRegistrationBatch(sourceId, routes);
+    }
+    catch {
+        return Promise.resolve();
+    }
+    return Promise.resolve()
+        .then(() => sink.send(batch))
+        .catch((err) => {
+        console.warn(`[modelrig] route registration (declare-on-startup) failed — routes will still be mirrored ` +
+            `by the exporter's first flush: ${err instanceof Error ? err.message : String(err)}`);
+    });
+}

package/dist/telemetry/sinks.d.ts

@@ -21,6 +21,9 @@
  */
 import type { IngestBatch, IngestOutcome, Tenancy } from "./ingest-protocol";
 import type { ApiExportConfig, DirectExportConfig } from "../config";
+/** Reset the auth-failure latch — TESTS ONLY, so warn-once cases are independent
+ * of run order (mirrors deprecations.ts). */
+export declare function __resetApiSinkWarningsForTest(): void;
 export interface TelemetrySink {
     /** Named so a boot banner and `/status` can say which lane is live without
      * inspecting config — the "which mode am I in?" question got asked enough
@@ -77,6 +80,10 @@ export interface ApiSinkConfig {
      * rows are being dropped must hear about it from their own process rather
      * than by noticing a gap in a chart weeks later. */
     readonly onOutcome?: (outcome: IngestOutcome) => void;
+    /** `createRig({ expectOrg })` (M5): the org slug this process expects its key
+     * to resolve to. A mismatch logs ORG MISMATCH on every flush (org-identity.ts);
+     * it never throws and never drops telemetry. */
+    readonly expectOrg?: string;
 }
 export declare function createApiSink(config: ApiSinkConfig): TelemetrySink;
 /**
@@ -86,5 +93,7 @@ export declare function createApiSink(config: ApiSinkConfig): TelemetrySink;
  * index.ts until Phase D; moved here — its natural home — to keep that file
  * under the LOC cap.)
  */
-export declare function buildTelemetrySink(exportConfig: ApiExportConfig | DirectExportConfig, sourceId: string): TelemetrySink;
+export declare function buildTelemetrySink(exportConfig: ApiExportConfig | DirectExportConfig, sourceId: string, opts?: {
+    readonly expectOrg?: string;
+}): TelemetrySink;
 //# sourceMappingURL=sinks.d.ts.map

package/dist/telemetry/sinks.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sinks.d.ts","sourceRoot":"","sources":["../../src/telemetry/sinks.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAIH,OAAO,KAAK,EAAE,WAAW,EAAE,aAAa,EAAE,OAAO,EAAE,MAAM,mBAAmB,CAAC;AAC7E,OAAO,KAAK,EAAE,eAAe,EAAE,kBAAkB,EAAE,MAAM,WAAW,CAAC;AAGrE,MAAM,WAAW,aAAa;IAC5B;;yDAEqD;IACrD,QAAQ,CAAC,IAAI,EAAE,QAAQ,GAAG,KAAK,CAAC;IAChC;;6EAEyE;IACzE,IAAI,CAAC,KAAK,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACzC;AAED;;;;;;;;;;;;;;;GAeG;AACH,qBAAa,aAAc,SAAQ,KAAK;IACtC,wEAAwE;IACxE,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB;;qCAEiC;IACjC,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;gBAEhB,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,SAAS;CAMxD;AAMD,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,oEAAoE;IACpE,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,yEAAyE;IACzE,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,KAAK,CAAC;CACjC;AAED,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,gBAAgB,GAAG,aAAa,CA0CxE;AAMD,MAAM,WAAW,aAAa;IAC5B,mEAAmE;IACnE,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B;4EACwE;IACxE,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,KAAK,CAAC;IAChC;;;wDAGoD;IACpD,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC,OAAO,EAAE,aAAa,KAAK,IAAI,CAAC;CACvD;AAKD,wBAAgB,aAAa,CAAC,MAAM,EAAE,aAAa,GAAG,aAAa,CA4ClE;AAED;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CAChC,YAAY,EAAE,eAAe,GAAG,kBAAkB,EAClD,QAAQ,EAAE,MAAM,GACf,aAAa,CA0Bf"}
+{"version":3,"file":"sinks.d.ts","sourceRoot":"","sources":["../../src/telemetry/sinks.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAIH,OAAO,KAAK,EAAE,WAAW,EAAE,aAAa,EAAE,OAAO,EAAE,MAAM,mBAAmB,CAAC;AAC7E,OAAO,KAAK,EAAE,eAAe,EAAE,kBAAkB,EAAE,MAAM,WAAW,CAAC;AAmBrE;6CAC6C;AAC7C,wBAAgB,6BAA6B,IAAI,IAAI,CAEpD;AAED,MAAM,WAAW,aAAa;IAC5B;;yDAEqD;IACrD,QAAQ,CAAC,IAAI,EAAE,QAAQ,GAAG,KAAK,CAAC;IAChC;;6EAEyE;IACzE,IAAI,CAAC,KAAK,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACzC;AAED;;;;;;;;;;;;;;;GAeG;AACH,qBAAa,aAAc,SAAQ,KAAK;IACtC,wEAAwE;IACxE,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB;;qCAEiC;IACjC,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;gBAEhB,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,SAAS;CAMxD;AAMD,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,oEAAoE;IACpE,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,yEAAyE;IACzE,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,KAAK,CAAC;CACjC;AAED,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,gBAAgB,GAAG,aAAa,CA0CxE;AAMD,MAAM,WAAW,aAAa;IAC5B,mEAAmE;IACnE,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B;4EACwE;IACxE,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,KAAK,CAAC;IAChC;;;wDAGoD;IACpD,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC,OAAO,EAAE,aAAa,KAAK,IAAI,CAAC;IACtD;;oDAEgD;IAChD,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;CAC7B;AAKD,wBAAgB,aAAa,CAAC,MAAM,EAAE,aAAa,GAAG,aAAa,CAsElE;AAED;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CAChC,YAAY,EAAE,eAAe,GAAG,kBAAkB,EAClD,QAAQ,EAAE,MAAM,EAChB,IAAI,GAAE;IAAE,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAA;CAAO,GACzC,aAAa,CA2Bf"}