modelrig 0.9.0 → 0.11.0

package/dist/doctor-preflight.d.ts

@@ -0,0 +1,64 @@
+import type { RigConfig } from "./config";
+/** The subset of the whoami response we render. Every field optional/narrowed —
+ * an older or partial server response degrades to "(unknown org)", never a throw. */
+export interface WhoamiResponse {
+    readonly org?: {
+        readonly id?: string;
+        readonly name?: string;
+        readonly slug?: string;
+    } | null;
+    readonly key?: {
+        readonly name?: string;
+        readonly last_four?: string;
+    } | null;
+    readonly posture?: {
+        readonly telemetry?: string;
+        readonly artifact?: string;
+    } | null;
+}
+export interface PreflightResult {
+    readonly ok: boolean;
+    /** HTTP status; "network_error" when the request never completed;
+     * "malformed_key" when the key failed the local shape check and NOTHING was
+     * sent (QA N14); "not_rig_key" when the value is not a `rig_sk_` key at all
+     * (e.g. a deployment token) — doctor checks customer API keys only, so it
+     * is a usage error, never called "malformed", and nothing is sent (L6 NIT-6).
+     * A 2xx whose body names no org is `ok: false` with its HTTP status — it
+     * confirmed nothing. */
+    readonly status: number | "network_error" | "malformed_key" | "not_rig_key";
+    /** One human line, ready to print or log. */
+    readonly line: string;
+    readonly whoami?: WhoamiResponse;
+    /** The org's display name — present exactly when `ok` (a 2xx that names no
+     * org is not ok, QA N14). */
+    readonly orgName?: string;
+}
+/**
+ * Ask the configured api-mode sink who the key is. Returns null when there is
+ * nothing to check (no export, or a direct/local sink — whoami is an api-mode
+ * concept). Never throws: a network error is a `PreflightResult`, not an
+ * exception, so no caller can be broken by turning this on.
+ */
+export declare function runAuthPreflight(config: RigConfig, fetchFn?: typeof fetch): Promise<PreflightResult | null>;
+/**
+ * The shared whoami worker: `runAuthPreflight` (doctor) and the api sink's
+ * first-flush org line (telemetry/org-identity.ts) both call it, so the two
+ * surfaces can never disagree about what a key resolves to. Never throws.
+ */
+export declare function whoamiPreflight(ingestUrl: string, apiKey: string, fetchFn?: typeof fetch, 
+/** Abort the request (e.g. `AbortSignal.timeout(ms)`) — the sink passes one so
+ * a hanging whoami can never hold the process open. An abort is a network_error. */
+signal?: AbortSignal): Promise<PreflightResult>;
+/** The display name of a whoami org (name, else id, else slug), or null when
+ * the server named none — never a placeholder glyph (QA N14). */
+export declare function orgDisplayName(org: WhoamiResponse["org"]): string | null;
+/** The org slug a successful preflight resolved, or null when unknown. */
+export declare function resolvedOrgSlug(result: PreflightResult): string | null;
+/**
+ * Compare a resolved org with the slug the caller expects (`--expect-org`,
+ * `createRig({ expectOrg })`). Returns null when they match, or the resolved
+ * slug (`"(unknown org)"` when the server did not name one) when they do not.
+ * Comparison is exact on the slug, case-insensitive — slugs are lowercase.
+ */
+export declare function expectedOrgMismatch(result: PreflightResult, expectOrg: string): string | null;
+//# sourceMappingURL=doctor-preflight.d.ts.map

package/dist/doctor-preflight.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"doctor-preflight.d.ts","sourceRoot":"","sources":["../src/doctor-preflight.ts"],"names":[],"mappings":"AAwBA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,UAAU,CAAC;AAE1C;qFACqF;AACrF,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,GAAG,CAAC,EAAE;QAAE,QAAQ,CAAC,EAAE,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;IAC/F,QAAQ,CAAC,GAAG,CAAC,EAAE;QAAE,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;IAC9E,QAAQ,CAAC,OAAO,CAAC,EAAE;QAAE,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;CACvF;AAED,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,EAAE,EAAE,OAAO,CAAC;IACrB;;;;;;4BAMwB;IACxB,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,eAAe,GAAG,eAAe,GAAG,aAAa,CAAC;IAC5E,6CAA6C;IAC7C,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,MAAM,CAAC,EAAE,cAAc,CAAC;IACjC;iCAC6B;IAC7B,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED;;;;;GAKG;AACH,wBAAsB,gBAAgB,CACpC,MAAM,EAAE,SAAS,EACjB,OAAO,GAAE,OAAO,KAAa,GAC5B,OAAO,CAAC,eAAe,GAAG,IAAI,CAAC,CAIjC;AAED;;;;GAIG;AACH,wBAAsB,eAAe,CACnC,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,MAAM,EACd,OAAO,GAAE,OAAO,KAAa;AAC7B;oFACoF;AACpF,MAAM,CAAC,EAAE,WAAW,GACnB,OAAO,CAAC,eAAe,CAAC,CA4F1B;AAED;iEACiE;AACjE,wBAAgB,cAAc,CAAC,GAAG,EAAE,cAAc,CAAC,KAAK,CAAC,GAAG,MAAM,GAAG,IAAI,CAMxE;AAED,0EAA0E;AAC1E,wBAAgB,eAAe,CAAC,MAAM,EAAE,eAAe,GAAG,MAAM,GAAG,IAAI,CAGtE;AAED;;;;;GAKG;AACH,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,eAAe,EAAE,SAAS,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAI7F"}

package/dist/doctor-preflight.js

@@ -0,0 +1,167 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.runAuthPreflight = runAuthPreflight;
+exports.whoamiPreflight = whoamiPreflight;
+exports.orgDisplayName = orgDisplayName;
+exports.resolvedOrgSlug = resolvedOrgSlug;
+exports.expectedOrgMismatch = expectedOrgMismatch;
+/**
+ * Auth preflight — one legible line where there used to be silent 401 drops.
+ *
+ * Telemetry export is fire-and-forget by design: a rejected batch only logs a
+ * warning, never fails the pipeline. That is correct, but it means a WRONG key
+ * (revoked, or belonging to a different org than the console you watch) drops
+ * every run silently — the failure mode that cost InferWealth days of invisible
+ * telemetry. This module turns that into one line, by asking `GET /v1/whoami`
+ * (server-side companion) which org the key actually resolves to.
+ *
+ * `runAuthPreflight` is the pure worker: given the resolved config (config.ts is
+ * the only env reader) it returns a legible result and NEVER throws. `modelrig
+ * doctor` (doctor-cli.ts) calls it and prints the line — ✓ on success, a loud
+ * line on a rejected key.
+ *
+ * `--expect-org <slug>` (doctor) and `createRig({ expectOrg })` (the sink's
+ * first-flush line) compare the resolved slug with `expectedOrgMismatch` below.
+ *
+ * NOTE: there is no automatic boot-time preflight. The automatic safety net lives
+ * on the export path itself — the api sink emits a loud once-per-failure-streak
+ * "AUTH FAILED" warning when an ingest POST is rejected (telemetry/sinks.ts) — so
+ * a customer needs no extra env var: the one key they set is enough.
+ */
+const api_key_format_1 = require("./tenancy/api-key-format");
+/**
+ * Ask the configured api-mode sink who the key is. Returns null when there is
+ * nothing to check (no export, or a direct/local sink — whoami is an api-mode
+ * concept). Never throws: a network error is a `PreflightResult`, not an
+ * exception, so no caller can be broken by turning this on.
+ */
+async function runAuthPreflight(config, fetchFn = fetch) {
+    const exp = config.export;
+    if (exp === undefined || exp.mode !== "api")
+        return null;
+    return whoamiPreflight(exp.ingestUrl, exp.apiKey, fetchFn);
+}
+/**
+ * The shared whoami worker: `runAuthPreflight` (doctor) and the api sink's
+ * first-flush org line (telemetry/org-identity.ts) both call it, so the two
+ * surfaces can never disagree about what a key resolves to. Never throws.
+ */
+async function whoamiPreflight(ingestUrl, apiKey, fetchFn = fetch, 
+/** Abort the request (e.g. `AbortSignal.timeout(ms)`) — the sink passes one so
+ * a hanging whoami can never hold the process open. An abort is a network_error. */
+signal) {
+    const base = new URL(ingestUrl).origin;
+    const redacted = (0, api_key_format_1.redactApiKey)(apiKey);
+    // L6 NIT-6: a value that is not a rig_sk_ key at all (a deployment or other
+    // service token) is not "malformed" — it is the wrong kind of secret. Never
+    // sent over the wire.
+    // (Surrounding whitespace/quotes are a malformed rig_sk_ key, handled below.)
+    if (!apiKey.trim().replace(/^["']/, "").startsWith(api_key_format_1.API_KEY_PREFIX)) {
+        return {
+            ok: false,
+            status: "not_rig_key",
+            line: `[modelrig] not a ${api_key_format_1.API_KEY_PREFIX} key — doctor checks customer API keys. MODELRIG_API_KEY holds a ` +
+                `different kind of secret, so nothing was sent. Set it to the ${api_key_format_1.API_KEY_PREFIX} key minted at ` +
+                "app.modelrig.ai → Keys.",
+        };
+    }
+    // QA N14: a rig_sk_ key that fails the local shape check is never sent over the wire.
+    if (!(0, api_key_format_1.looksLikeApiKey)(apiKey)) {
+        return {
+            ok: false,
+            status: "malformed_key",
+            line: `[modelrig] malformed key — MODELRIG_API_KEY starts like a ${api_key_format_1.API_KEY_PREFIX} key but is truncated or ` +
+                "carries stray characters/whitespace, so nothing was sent to the server. Copy the full key from " +
+                "app.modelrig.ai → Keys and set it without quotes.",
+        };
+    }
+    try {
+        const res = await fetchFn(`${base}/v1/whoami`, {
+            headers: { authorization: `Bearer ${apiKey}` },
+            ...(signal !== undefined ? { signal } : {}),
+        });
+        if (res.status === 401 || res.status === 403) {
+            return {
+                ok: false,
+                status: res.status,
+                line: `[modelrig] AUTH FAILED (${res.status}) at ${base} — key ${redacted} is not recognized ` +
+                    "by this server/org. Check MODELRIG_API_KEY, and that the key belongs to the org you " +
+                    "expect (mint it in that org at app.modelrig.ai). Telemetry is dropping silently until this is fixed.",
+            };
+        }
+        if (!res.ok) {
+            return {
+                ok: false,
+                status: res.status,
+                line: `[modelrig] whoami ${res.status} at ${base} — could not confirm the key's org (retry \`modelrig doctor\`).`,
+            };
+        }
+        const who = (await res.json().catch(() => null));
+        // QA N14: a 2xx that does not NAME an org confirmed nothing — never a ✓.
+        if (who === null || typeof who !== "object") {
+            return {
+                ok: false,
+                status: res.status,
+                line: `[modelrig] whoami ${res.status} at ${base} returned a body that is not JSON — could not confirm ` +
+                    `key ${redacted}'s org. Check that the ingest URL points at a ModelRig server, then retry \`modelrig doctor\`.`,
+            };
+        }
+        const orgLabel = orgDisplayName(who.org);
+        if (orgLabel === null) {
+            return {
+                ok: false,
+                status: res.status,
+                line: `[modelrig] whoami ${res.status} at ${base} named no org for key ${redacted} — could not confirm ` +
+                    "where telemetry lands. The server may predate whoami's org field; retry `modelrig doctor`, " +
+                    "or check the key at app.modelrig.ai → Keys.",
+                whoami: who,
+            };
+        }
+        const orgLabelQuoted = `«${orgLabel}»`;
+        const posture = who.posture?.telemetry;
+        const postureLabel = typeof posture === "string" ? `, telemetry: ${posture}` : "";
+        return {
+            ok: true,
+            status: res.status,
+            line: `[modelrig] key ${redacted} → org ${orgLabelQuoted} ✓  (ingest ${base}${postureLabel})`,
+            whoami: who,
+            orgName: orgLabel,
+        };
+    }
+    catch (err) {
+        return {
+            ok: false,
+            status: "network_error",
+            line: `[modelrig] whoami unreachable at ${base} (${err instanceof Error ? err.message : String(err)}) — ` +
+                "export is fire-and-forget, so this only means the preflight could not confirm your key.",
+        };
+    }
+}
+/** The display name of a whoami org (name, else id, else slug), or null when
+ * the server named none — never a placeholder glyph (QA N14). */
+function orgDisplayName(org) {
+    if (org === null || org === undefined || typeof org !== "object")
+        return null;
+    for (const v of [org.name, org.id, org.slug]) {
+        if (typeof v === "string" && v.trim() !== "")
+            return v;
+    }
+    return null;
+}
+/** The org slug a successful preflight resolved, or null when unknown. */
+function resolvedOrgSlug(result) {
+    const slug = result.whoami?.org?.slug;
+    return typeof slug === "string" && slug !== "" ? slug : null;
+}
+/**
+ * Compare a resolved org with the slug the caller expects (`--expect-org`,
+ * `createRig({ expectOrg })`). Returns null when they match, or the resolved
+ * slug (`"(unknown org)"` when the server did not name one) when they do not.
+ * Comparison is exact on the slug, case-insensitive — slugs are lowercase.
+ */
+function expectedOrgMismatch(result, expectOrg) {
+    const actual = resolvedOrgSlug(result);
+    if (actual !== null && actual.toLowerCase() === expectOrg.trim().toLowerCase())
+        return null;
+    return actual ?? "(unknown org)";
+}

package/dist/feedback/coverage.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"coverage.d.ts","sourceRoot":"","sources":["../../src/feedback/coverage.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,KAAK,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAEjE,eAAO,MAAM,gBAAgB,KAAK,CAAC;AAEnC,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,6EAA6E;IAC7E,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC;IACrB,oEAAoE;IACpE,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;CACjC;AAED;;;;;+EAK+E;AAC/E,wBAAgB,eAAe,CAC7B,IAAI,EAAE,SAAS,YAAY,EAAE,EAC7B,MAAM,EAAE,SAAS,QAAQ,EAAE,GAC1B,aAAa,EAAE,CAqFjB"}
+{"version":3,"file":"coverage.d.ts","sourceRoot":"","sources":["../../src/feedback/coverage.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,KAAK,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAGjE,eAAO,MAAM,gBAAgB,KAAK,CAAC;AAEnC,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,6EAA6E;IAC7E,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC;IACrB,oEAAoE;IACpE,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;CACjC;AAED;;;;;+EAK+E;AAC/E,wBAAgB,eAAe,CAC7B,IAAI,EAAE,SAAS,YAAY,EAAE,EAC7B,MAAM,EAAE,SAAS,QAAQ,EAAE,GAC1B,aAAa,EAAE,CA2FjB"}

package/dist/feedback/coverage.js

@@ -15,6 +15,7 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.RUNG1_MIN_GRADES = void 0;
 exports.computeCoverage = computeCoverage;
+const lanes_1 = require("../telemetry/lanes");
 exports.RUNG1_MIN_GRADES = 10;
 /** Attribution: a grade joins a route via its inference-subject id, or via its
  * run-subject (episode) id matching a row's run_id tag. Unmatched grades attach
@@ -31,14 +32,20 @@ function computeCoverage(rows, grades) {
         // view): bake-off replays are candidate-variant experiments, not the
         // route's production serving — counting them skews conformance/repair
         // rates with losing variants that never served a real request.
+        // OBS-1 L6 MUST-1: coverage is ROUTE readiness — raw passthroughs and
+        // recorded calls (`tags.lane` raw / external) walked no route and never
+        // contribute samples, conformance or a rung.
         let replayTagged = false;
+        let unrouted = false;
         try {
-            replayTagged = JSON.parse(row.tagsJson).replay !== undefined;
+            const tags = JSON.parse(row.tagsJson);
+            replayTagged = tags.replay !== undefined;
+            unrouted = !(0, lanes_1.isRoutedLane)(tags.lane);
         }
         catch {
             replayTagged = false;
         }
-        if (replayTagged)
+        if (replayTagged || unrouted)
             continue;
         const agg = byRoute.get(row.route) ?? {
             samples: 0,

package/dist/feedback/grade.d.ts

@@ -11,7 +11,7 @@
  * (`rig.feedback` / `artifact.evaluate` / `run.evaluate`) and their adapters were
  * removed in GP-3 — every judgment now builds a grade directly.
  */
-import type { GradeRow, GradeSubject } from "../types/telemetry";
+import type { GradeCriterion, GradeRow, GradeSubject } from "../types/telemetry";
 /** Options for `rig.grade(subject, opts)`. `score` is the 0–1 primitive and is
  * required; everything else is optional display / provenance. */
 export interface GradeOpts {
@@ -31,6 +31,13 @@ export interface GradeOpts {
     readonly grader?: string;
     /** Provenance (e.g. "sdk", "console", a review-agent name). */
     readonly source?: string;
+    /** OPTIONAL per-criterion breakdown (call-qa F4). When present on a human
+     * grade it rides the wire to the server, which persists it to `grade_criteria`
+     * (kind=human) so per-criterion agreement can pair the human vs model
+     * scorecards. Absent ⇒ today's single-score grade, unchanged. The server owns
+     * the scrub + dedup/drop-empty-id/clamp guard at persist; this is carried
+     * verbatim. */
+    readonly criteria?: readonly GradeCriterion[];
     /** The grade's own org — server-supplied ONLY, already authorized (T3). Omit
      * from application code (a rig has one org and the exporter knows it). */
     readonly orgId?: string;

package/dist/feedback/grade.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"grade.d.ts","sourceRoot":"","sources":["../../src/feedback/grade.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAGH,OAAO,KAAK,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAEjE;iEACiE;AACjE,MAAM,WAAW,SAAS;IACxB,mFAAmF;IACnF,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB;6EACyE;IACzE,QAAQ,CAAC,KAAK,CAAC,EAAE;QAAE,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;KAAE,GAAG;QAAE,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;IACvE,kFAAkF;IAClF,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,IAAI,EAAE,OAAO,GAAG,aAAa,GAAG,eAAe,CAAC;IACzD,0EAA0E;IAC1E,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,+DAA+D;IAC/D,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB;8EAC0E;IAC1E,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,4EAA4E;IAC5E,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACpC;AAQD;oFACoF;AACpF,wBAAgB,aAAa,CAAC,OAAO,EAAE,YAAY,EAAE,IAAI,EAAE,SAAS,GAAG,QAAQ,CAuB9E;AAED;;+DAE+D;AAC/D,wBAAgB,YAAY,CAAC,KAAK,EAAE;IAAE,WAAW,CAAC,GAAG,EAAE,QAAQ,GAAG,IAAI,CAAA;CAAE,GAAG;IACzE,KAAK,CAAC,OAAO,EAAE,YAAY,EAAE,IAAI,EAAE,SAAS,GAAG,QAAQ,CAAC;CACzD,CAQA"}
+{"version":3,"file":"grade.d.ts","sourceRoot":"","sources":["../../src/feedback/grade.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAGH,OAAO,KAAK,EAAE,cAAc,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAEjF;iEACiE;AACjE,MAAM,WAAW,SAAS;IACxB,mFAAmF;IACnF,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB;6EACyE;IACzE,QAAQ,CAAC,KAAK,CAAC,EAAE;QAAE,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;KAAE,GAAG;QAAE,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;IACvE,kFAAkF;IAClF,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,IAAI,EAAE,OAAO,GAAG,aAAa,GAAG,eAAe,CAAC;IACzD,0EAA0E;IAC1E,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,+DAA+D;IAC/D,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB;;;;;mBAKe;IACf,QAAQ,CAAC,QAAQ,CAAC,EAAE,SAAS,cAAc,EAAE,CAAC;IAC9C;8EAC0E;IAC1E,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,4EAA4E;IAC5E,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACpC;AAQD;oFACoF;AACpF,wBAAgB,aAAa,CAAC,OAAO,EAAE,YAAY,EAAE,IAAI,EAAE,SAAS,GAAG,QAAQ,CA2B9E;AAED;;+DAE+D;AAC/D,wBAAgB,YAAY,CAAC,KAAK,EAAE;IAAE,WAAW,CAAC,GAAG,EAAE,QAAQ,GAAG,IAAI,CAAA;CAAE,GAAG;IACzE,KAAK,CAAC,OAAO,EAAE,YAAY,EAAE,IAAI,EAAE,SAAS,GAAG,QAAQ,CAAC;CACzD,CAQA"}

package/dist/feedback/grade.js

@@ -47,6 +47,10 @@ function buildGradeRow(subject, opts) {
         orgId: opts.orgId !== undefined && opts.orgId !== "" ? opts.orgId : null,
         createdBy: opts.createdBy ?? null,
         ts: new Date().toISOString(),
+        // F4: carry the per-criterion breakdown verbatim iff present (spread-iff so
+        // a single-score grade's row is byte-identical to pre-F4). Structural
+        // normalization (dedup/clamp/scrub) is the server's job at persist.
+        ...(opts.criteria !== undefined ? { criteria: opts.criteria } : {}),
     };
 }
 /** Build the rig's `grade` surface over a grade writer (the telemetry store).

package/dist/gateway/http-protocol.d.ts

@@ -114,6 +114,25 @@ export interface ChatCompletionRequest {
         readonly envelope?: string;
         readonly variant?: string;
         readonly stream?: "buffered";
+        /**
+         * K1b (managed-serving-keyless) — the FAITHFUL carrier for a TEMPLATED /
+         * NON-CHAT route's named template variables. A provider-neutral JSON object
+         * of the route's `{{variable}}` bindings, DISTINCT from OpenAI `messages`:
+         * `messages` is the chat-relay bridge (the server derives `message`/`messages`
+         * from it), whereas `input` carries the route's OWN declared variables
+         * verbatim (e.g. a report route's structured `{ topic, holdings, … }`), so the
+         * server renders the route template exactly as a local `rig.run` would — no
+         * lossy messages round-trip.
+         *
+         * PRECEDENCE (server bind): when present, `modelrig.input` WINS — the run's
+         * `input` is these named variables; the chat `messages` binding is the
+         * fallback used only when it is absent. The server validates the object shape
+         * fail-closed (a non-object, or a prototype-polluting key, is a teaching 422)
+         * — a request that cannot be faithfully served is refused, never served with
+         * a silently-wrong prompt. ADDITIVE: a chat request that omits it is
+         * byte-identical to the K1 wire.
+         */
+        readonly input?: Readonly<Record<string, unknown>>;
     };
 }
 export interface ChatCompletionUsage {

package/dist/gateway/http-protocol.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"http-protocol.d.ts","sourceRoot":"","sources":["../../src/gateway/http-protocol.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAGH,OAAO,KAAK,EAAE,QAAQ,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAE9E,uCAAuC;AACvC,eAAO,MAAM,qBAAqB,yBAAyB,CAAC;AAC5D,2EAA2E;AAC3E,eAAO,MAAM,WAAW,eAAe,CAAC;AAExC,6DAA6D;AAC7D,eAAO,MAAM,wBAAwB,IAAI,CAAC;AAO1C,eAAO,MAAM,gBAAgB;IAC3B,0EAA0E;;IAE1E;;;;eAIW;;;;IAIX,yEAAyE;;IAEzE,oEAAoE;;;IAGpE,mEAAmE;;CAE3D,CAAC;AAGX,eAAO,MAAM,wBAAwB;IACnC,qCAAqC;;IAErC,oCAAoC;;IAEpC,8EAA8E;;CAEtE,CAAC;AAEX,MAAM,MAAM,IAAI,GAAG,MAAM,GAAG,KAAK,CAAC;AAElC,4EAA4E;AAC5E,MAAM,MAAM,cAAc,GACtB;IAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAChD;IAAE,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAC;IAAC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GAC3E;IAAE,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAE1D;;;;;;;;;;GAUG;AACH,wBAAgB,YAAY,CAC1B,KAAK,EAAE,MAAM,EACb,eAAe,GAAE,WAAW,CAAC,MAAM,CAAa,GAC/C,cAAc,CA6BhB;AAID,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,IAAI,EAAE,QAAQ,GAAG,MAAM,GAAG,WAAW,GAAG,MAAM,CAAC;IACxD,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,0EAA0E;IAC1E,QAAQ,CAAC,UAAU,CAAC,EAAE,SAAS,QAAQ,EAAE,CAAC;IAC1C,0DAA0D;IAC1D,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,QAAQ,EAAE,SAAS,WAAW,EAAE,CAAC;IAC1C,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,KAAK,CAAC,EAAE,SAAS,cAAc,EAAE,CAAC;IAC3C,QAAQ,CAAC,WAAW,CAAC,EAAE,UAAU,CAAC;IAClC,4EAA4E;IAC5E,QAAQ,CAAC,eAAe,CAAC,EACrB;QAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;KAAE,GACzB;QAAE,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAA;KAAE,GAChC;QACE,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAC;QAC7B,QAAQ,CAAC,WAAW,EAAE;YAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;YAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;YAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,CAAA;SAAE,CAAC;KACrG,CAAC;IACN,wEAAwE;IACxE,QAAQ,CAAC,QAAQ,CAAC,EAAE;QAClB,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;QAC3B,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;QAC1B,QAAQ,CAAC,MAAM,CAAC,EAAE,UAAU,CAAC;KAC9B,CAAC;CACH;AAID,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;IACnC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;CAC/B;AAED,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,OAAO,EAAE;QAChB,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC;QAC3B,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;QAChC,QAAQ,CAAC,UAAU,CAAC,EAAE,SAAS,QAAQ,EAAE,CAAC;KAC3C,CAAC;IACF,QAAQ,CAAC,aAAa,EAAE,MAAM,GAAG,QAAQ,GAAG,YAAY,GAAG,gBAAgB,GAAG,IAAI,CAAC;CACpF;AAED,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,MAAM,EAAE,iBAAiB,CAAC;IACnC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,OAAO,EAAE,SAAS,oBAAoB,EAAE,CAAC;IAClD,QAAQ,CAAC,KAAK,EAAE,mBAAmB,CAAC;CACrC;AAID,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,KAAK,EAAE;QACd,QAAQ,CAAC,IAAI,CAAC,EAAE,WAAW,CAAC;QAC5B,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QACjC,QAAQ,CAAC,UAAU,CAAC,EAAE,SAAS,QAAQ,EAAE,CAAC;KAC3C,CAAC;IACF,QAAQ,CAAC,aAAa,EAAE,oBAAoB,CAAC,eAAe,CAAC,CAAC;CAC/D;AAED,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,MAAM,EAAE,uBAAuB,CAAC;IACzC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,OAAO,EAAE,SAAS,yBAAyB,EAAE,CAAC;CACxD;AAED;;;;;;GAMG;AACH,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,MAAM,EAAE,qBAAqB,CAAC;IACvC,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;IAC5B,2DAA2D;IAC3D,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;IACzB,QAAQ,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,MAAM,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CACrC;AAED,gEAAgE;AAChE,eAAO,MAAM,QAAQ,WAAW,CAAC"}
+{"version":3,"file":"http-protocol.d.ts","sourceRoot":"","sources":["../../src/gateway/http-protocol.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAGH,OAAO,KAAK,EAAE,QAAQ,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAE9E,uCAAuC;AACvC,eAAO,MAAM,qBAAqB,yBAAyB,CAAC;AAC5D,2EAA2E;AAC3E,eAAO,MAAM,WAAW,eAAe,CAAC;AAExC,6DAA6D;AAC7D,eAAO,MAAM,wBAAwB,IAAI,CAAC;AAO1C,eAAO,MAAM,gBAAgB;IAC3B,0EAA0E;;IAE1E;;;;eAIW;;;;IAIX,yEAAyE;;IAEzE,oEAAoE;;;IAGpE,mEAAmE;;CAE3D,CAAC;AAGX,eAAO,MAAM,wBAAwB;IACnC,qCAAqC;;IAErC,oCAAoC;;IAEpC,8EAA8E;;CAEtE,CAAC;AAEX,MAAM,MAAM,IAAI,GAAG,MAAM,GAAG,KAAK,CAAC;AAElC,4EAA4E;AAC5E,MAAM,MAAM,cAAc,GACtB;IAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAChD;IAAE,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAC;IAAC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GAC3E;IAAE,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAE1D;;;;;;;;;;GAUG;AACH,wBAAgB,YAAY,CAC1B,KAAK,EAAE,MAAM,EACb,eAAe,GAAE,WAAW,CAAC,MAAM,CAAa,GAC/C,cAAc,CA6BhB;AAID,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,IAAI,EAAE,QAAQ,GAAG,MAAM,GAAG,WAAW,GAAG,MAAM,CAAC;IACxD,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,0EAA0E;IAC1E,QAAQ,CAAC,UAAU,CAAC,EAAE,SAAS,QAAQ,EAAE,CAAC;IAC1C,0DAA0D;IAC1D,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,QAAQ,EAAE,SAAS,WAAW,EAAE,CAAC;IAC1C,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,KAAK,CAAC,EAAE,SAAS,cAAc,EAAE,CAAC;IAC3C,QAAQ,CAAC,WAAW,CAAC,EAAE,UAAU,CAAC;IAClC,4EAA4E;IAC5E,QAAQ,CAAC,eAAe,CAAC,EACrB;QAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;KAAE,GACzB;QAAE,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAA;KAAE,GAChC;QACE,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAC;QAC7B,QAAQ,CAAC,WAAW,EAAE;YAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;YAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;YAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,CAAA;SAAE,CAAC;KACrG,CAAC;IACN,wEAAwE;IACxE,QAAQ,CAAC,QAAQ,CAAC,EAAE;QAClB,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;QAC3B,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;QAC1B,QAAQ,CAAC,MAAM,CAAC,EAAE,UAAU,CAAC;QAC7B;;;;;;;;;;;;;;;;;WAiBG;QACH,QAAQ,CAAC,KAAK,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;KACpD,CAAC;CACH;AAID,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;IACnC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;CAC/B;AAED,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,OAAO,EAAE;QAChB,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC;QAC3B,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;QAChC,QAAQ,CAAC,UAAU,CAAC,EAAE,SAAS,QAAQ,EAAE,CAAC;KAC3C,CAAC;IACF,QAAQ,CAAC,aAAa,EAAE,MAAM,GAAG,QAAQ,GAAG,YAAY,GAAG,gBAAgB,GAAG,IAAI,CAAC;CACpF;AAED,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,MAAM,EAAE,iBAAiB,CAAC;IACnC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,OAAO,EAAE,SAAS,oBAAoB,EAAE,CAAC;IAClD,QAAQ,CAAC,KAAK,EAAE,mBAAmB,CAAC;CACrC;AAID,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,KAAK,EAAE;QACd,QAAQ,CAAC,IAAI,CAAC,EAAE,WAAW,CAAC;QAC5B,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QACjC,QAAQ,CAAC,UAAU,CAAC,EAAE,SAAS,QAAQ,EAAE,CAAC;KAC3C,CAAC;IACF,QAAQ,CAAC,aAAa,EAAE,oBAAoB,CAAC,eAAe,CAAC,CAAC;CAC/D;AAED,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,MAAM,EAAE,uBAAuB,CAAC;IACzC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,OAAO,EAAE,SAAS,yBAAyB,EAAE,CAAC;CACxD;AAED;;;;;;GAMG;AACH,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,MAAM,EAAE,qBAAqB,CAAC;IACvC,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;IAC5B,2DAA2D;IAC3D,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;IACzB,QAAQ,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,MAAM,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CACrC;AAED,gEAAgE;AAChE,eAAO,MAAM,QAAQ,WAAW,CAAC"}

package/dist/gateway/serve-client.d.ts

@@ -0,0 +1,99 @@
+/**
+ * K1 (managed-serving-keyless §2/§3) — the SDK-side KEYLESS serving transport.
+ *
+ * This is the client half of `destination: modelrig-served`: instead of the
+ * local adapter dispatch, a served run is POSTed to the HOSTED gateway's
+ * `POST /v1/chat/completions` (the org's mirrored bundle, resolved BY SLUG and
+ * driven server-side through `runBundle` — see modelrig-server
+ * `handleMirroredSlugLane`). The gateway spends ModelRig's OWN managed provider
+ * key; the SDK sends ONLY its `rig_sk_` control-plane key (Bearer), NEVER a
+ * provider key.
+ *
+ * ONE wire contract: everything here is expressed in the SHARED
+ * `gateway/http-protocol.ts` shapes (`CHAT_COMPLETIONS_PATH`,
+ * `ChatCompletionRequest`, `ChatCompletionResponse`, `MODELRIG_HEADERS`,
+ * `MODELRIG_REQUEST_HEADERS`) — the same module `modelrig-server` compiles
+ * against, so the request this produces is exactly the one the endpoint
+ * consumes and the response it parses is exactly the one the endpoint emits.
+ *
+ * FAIL-CLOSED-BUT-DISCOVERABLE (spec §3 K1, ruling R3): a transport error, a
+ * non-2xx, a 402 (no prepaid balance), or a 403 (no serve entitlement) throws a
+ * TEACHING `RigFailureError` (class `invariant_violation`, TERMINAL) whose
+ * `fixHint` names the cause and the fix — NEVER a silent fall back to `direct`
+ * or a local key. `fetch` is injected (`fetchFn`) so tests mock the transport
+ * with no live network and no real key.
+ *
+ * TRANSPORT + MAPPING ONLY. The flag/capability gate + the run.ts branch point
+ * live in `run/resolve-destination.ts` / `run/run.ts`; this module is reached
+ * only AFTER the guard has passed.
+ */
+import type { ChatMessage } from "./http-protocol";
+import type { RouteBundle, RunOptions, RunResult } from "../types/route";
+/** Injected transport — the global `fetch` in production, a mock in tests. */
+export type ServeFetch = typeof fetch;
+/**
+ * Where + how to reach the hosted gateway. Resolved (in `index.ts`) from the
+ * SAME `api`-mode export config the telemetry sink uses: `baseUrl` is the ingest
+ * host (`MODELRIG_INGEST_URL` ‖ `DEFAULT_INGEST_URL`) and `apiKey` is the
+ * `rig_sk_` key. ABSENT ⇒ no hosted control plane is configured ⇒ a served run
+ * fails closed (there is nowhere to serve it, and we never invent a key).
+ */
+export interface ServeTransportConfig {
+    /** Ingest host base, e.g. `https://api.modelrig.ai` (no path). */
+    readonly baseUrl: string;
+    /** `rig_sk_…` control-plane key. The ONLY credential sent — never a provider key. */
+    readonly apiKey: string;
+}
+export interface ServeRunInput {
+    readonly route: RouteBundle;
+    readonly opts: RunOptions;
+    /** The resolved variant name (Phase 3 WS1) — served via `x-modelrig-variant`. */
+    readonly servedVariant: string | null;
+    /** Resolved transport; `undefined` ⇒ fail closed (no hosted control plane). */
+    readonly serve: ServeTransportConfig | undefined;
+    /** Injected fetch (tests); defaults to the global `fetch`. */
+    readonly fetchFn?: ServeFetch;
+}
+/**
+ * Is this run's `input` a CHAT-SHAPED input — the shape the OpenAI `messages`
+ * bridge carries faithfully (`input.messages` a transcript, or `input.message` a
+ * single user turn)? A route authored for the OpenAI-compatible surface declares
+ * exactly these variables (PROXY_RELAYED_VARS, server-side). Anything else is a
+ * NAMED-variable input carried by `modelrig.input` (K1b) instead.
+ */
+export declare function isChatShapedInput(input: RunOptions["input"]): boolean;
+/**
+ * Map the run's CHAT-shaped `input` into OpenAI `messages` — the chat-relay
+ * bridge (the server rebuilds `message`/`messages` from it). Faithful for a
+ * chat-shaped route:
+ *   - `input.messages` (an array of `{role, content}`) → the transcript verbatim;
+ *   - else `input.message` (a string)                  → a single user turn.
+ *
+ * K1b: a route that templates over OTHER named variables is NO LONGER fails-closed
+ * here — `serveViaGateway` carries those faithfully via `modelrig.input`
+ * (`buildServedNamedInput`). This function is reached only for a chat-shaped
+ * input, so the final fail-closed branch stays as a defensive teaching error for
+ * a caller who invokes it directly on a non-chat input.
+ */
+export declare function buildServedMessages(route: RouteBundle, input: RunOptions["input"]): readonly ChatMessage[];
+/**
+ * K1b — carry a NAMED-variable route's `input` faithfully as `modelrig.input`,
+ * INSTEAD of the K1 fail-closed. A templated/non-chat route (an InferWealth
+ * report route, say) declares structured variables (`{ topic, holdings, … }`),
+ * not `message`/`messages`; this is the provider-neutral object the server binds
+ * so the route template renders exactly as a local `rig.run` would.
+ *
+ * Still fail-closed-but-discoverable (K1's guarantee preserved): the only reason
+ * to refuse now is a genuinely UN-SERIALIZABLE input — one JSON cannot carry
+ * losslessly, which would degrade to a silently-wrong prompt server-side.
+ * `assertJsonFaithful` names the exact offending value; we wrap it as a teaching
+ * error, never a silent drop.
+ */
+export declare function buildServedNamedInput(route: RouteBundle, input: RunOptions["input"]): Readonly<Record<string, unknown>>;
+/**
+ * Serve a run through the hosted gateway and map the completion back into a
+ * normal `RunResult`. Reached only after `assertDestinationServable` has passed
+ * (flag on + served-capable provider). Fail-closed-but-discoverable throughout.
+ */
+export declare function serveViaGateway(input: ServeRunInput): Promise<RunResult>;
+//# sourceMappingURL=serve-client.d.ts.map

package/dist/gateway/serve-client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"serve-client.d.ts","sourceRoot":"","sources":["../../src/gateway/serve-client.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AAOH,OAAO,KAAK,EAGV,WAAW,EACZ,MAAM,iBAAiB,CAAC;AAIzB,OAAO,KAAK,EAAE,WAAW,EAAW,UAAU,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAElF,8EAA8E;AAC9E,MAAM,MAAM,UAAU,GAAG,OAAO,KAAK,CAAC;AAEtC;;;;;;GAMG;AACH,MAAM,WAAW,oBAAoB;IACnC,kEAAkE;IAClE,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,qFAAqF;IACrF,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,KAAK,EAAE,WAAW,CAAC;IAC5B,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;IAC1B,iFAAiF;IACjF,QAAQ,CAAC,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IACtC,+EAA+E;IAC/E,QAAQ,CAAC,KAAK,EAAE,oBAAoB,GAAG,SAAS,CAAC;IACjD,8DAA8D;IAC9D,QAAQ,CAAC,OAAO,CAAC,EAAE,UAAU,CAAC;CAC/B;AAMD;;;;;;GAMG;AACH,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,UAAU,CAAC,OAAO,CAAC,GAAG,OAAO,CAErE;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,WAAW,EAAE,KAAK,EAAE,UAAU,CAAC,OAAO,CAAC,GAAG,SAAS,WAAW,EAAE,CAoC1G;AAsDD;;;;;;;;;;;;GAYG;AACH,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,WAAW,EAAE,KAAK,EAAE,UAAU,CAAC,OAAO,CAAC,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAYvH;AA2FD;;;;GAIG;AACH,wBAAsB,eAAe,CAAC,KAAK,EAAE,aAAa,GAAG,OAAO,CAAC,SAAS,CAAC,CA0F9E"}