orizu 0.5.26 → 0.5.28

package/dist/index.js

@@ -16,13 +16,13 @@ import { parseDatasetFile } from './file-parser.js';
 import { streamJsonlRowChunks } from './jsonl-stream.js';
 import { parseDatasetReference } from './dataset-download.js';
 import { editDatasetRows as runEditDatasetRows } from './dataset-edit-rows.js';
-import { ensureDatasetUploadSnapshot } from './dataset-upload-snapshot.js';
 import { extractErrorMessage } from './error-response.js';
 import { describeLogoutHttpFailure, describeLogoutTransportFailure, } from './logout-diagnostic.js';
 import { parseGlobalFlags } from './global-flags.js';
 import { shouldUseHeadlessLogin, waitForHeadlessAuthorization } from './headless-login.js';
 import { getCapabilities, renderHelpForArgs, renderRootHelp } from './help.js';
 import { runLocalAppPreview } from './preview-runtime.js';
+import { formatScoreForCli } from './score-format.js';
 import { readAssignmentManifestJsonlFile } from './task-assignment-manifest.js';
 import { assertSecureTokenTransport, authedFetch, captureAuthenticatedRequestContext, credentialRequestRedirectPolicy, getBaseUrl, resolveLoginBaseUrl, setGlobalFlags, } from './http.js';
 import { computeSkillContentHash, getSkillInstallPath, getSkillTargetStatus, getTargetForAgent, installSkillTarget, isSkillInstallAgent, isSkillInstallTarget, resolveSkillSource, SKILL_INSTALL_AGENTS, SKILL_INSTALL_TARGETS, targetNeedsOverwrite, } from './skill-installer.js';
@@ -54,6 +54,7 @@ import { workspaceSyncCommand } from './workspace-sync.js';
 import { runGitCredentialInvocation } from './git-credential.js';
 import { instructionSetsCommand, syncToDisk } from './instruction-sets-cli.js';
 export { loadInstructionSet } from './instruction-set-loader.js';
+import { noSubmitScorerOutput, provenanceRequestFields, resolveInstructionSetProvenance } from './instruction-set-provenance.js';
 import { runnerInputInstructionSet, runnerInputPrompt, runnerInstructionSetSyncSet } from './runner-instruction-set-contract.js';
 import { pushPromptDraft } from './prompt-draft-push.js';
 import { readMarkdownReportInput } from './markdown-report-input.js';
@@ -130,6 +131,31 @@ function getArg(name) {
     }
     return cliArgs[index + 1];
 }
+function instructionSetProvenanceFields(project) {
+    for (const flag of ['--instructions', '--instructions-root']) {
+        if (cliArgs.some(argument => argument.startsWith(`${flag}=`))) {
+            throw new Error(`instruction_set_option_equals_form:${flag}`);
+        }
+        const index = cliArgs.indexOf(flag);
+        if (index !== -1) {
+            const value = cliArgs[index + 1];
+            if (!value || value.startsWith('-')) {
+                throw new Error(`instruction_set_option_value_missing:${flag}`);
+            }
+        }
+    }
+    const specifier = getArg('--instructions');
+    const root = getArg('--instructions-root');
+    if (root && !specifier)
+        throw new Error('instruction_set_option_orphan_root:--instructions-root');
+    if (!specifier)
+        return {};
+    return provenanceRequestFields(resolveInstructionSetProvenance({
+        specifier,
+        root: root || '.',
+        project,
+    }));
+}
 function getArchiveListStatus(command) {
     const status = getArg('--status') || 'active';
     if (!['active', 'archived', 'all'].includes(status)) {
@@ -880,9 +906,13 @@ async function showScorerDetail() {
     const scorerId = getPositionalArg(2);
     const project = getArg('--project') || await resolveProjectSlug(null);
     if (!scorerId) {
-        throw new Error('Usage: orizu scorers detail <scorer-id-or-name> --project <team/project> [--json]');
+        throw new Error('Usage: orizu scorers detail <scorer-id-or-name> --project <team/project> [--profile-version <id>] [--json]');
     }
-    const response = await authedFetch(`/api/cli/scorers/${encodeURIComponent(scorerId)}?project=${encodeURIComponent(project)}`);
+    const scorerParams = new URLSearchParams({ project });
+    const profileVersionId = getArg('--profile-version');
+    if (profileVersionId)
+        scorerParams.set('profileVersionId', profileVersionId);
+    const response = await authedFetch(`/api/cli/scorers/${encodeURIComponent(scorerId)}?${scorerParams.toString()}`);
     if (!response.ok) {
         throw new Error(`Failed to fetch scorer: ${await response.text()}`);
     }
@@ -894,6 +924,44 @@ async function showScorerDetail() {
     const scorer = data.scorer;
     printLine(`${sanitizeTerminalText(String(scorer?.name || scorerId))}`);
     printLine(`Metric: ${sanitizeTerminalText(String(scorer?.metricLabel || 'Score'))}`);
+    const scoreRuns = Array.isArray(scorer?.scoreRuns) ? scorer.scoreRuns : [];
+    for (const value of scoreRuns) {
+        if (!value || typeof value !== 'object')
+            continue;
+        const scoreRun = value;
+        const formattedScore = formatScoreForCli(scoreRun.scoreValue, scoreRun.scoreFormat);
+        printLine(`Score run ${sanitizeTerminalText(String(scoreRun.id || '?'))}: ${sanitizeTerminalText(formattedScore)} (Profile Version ${sanitizeTerminalText(String(scoreRun.profileVersionId || '—'))})`);
+    }
+}
+async function listRuns() {
+    const project = getArg('--project') || await resolveProjectSlug(null);
+    const params = new URLSearchParams({ project });
+    const profileVersionId = getArg('--profile-version');
+    const promptVersionId = getArg('--prompt-version');
+    const limit = getArg('--limit');
+    if (profileVersionId)
+        params.set('profileVersionId', profileVersionId);
+    if (promptVersionId)
+        params.set('promptVersionId', promptVersionId);
+    if (limit)
+        params.set('limit', limit);
+    const response = await authedFetch(`/api/cli/runs?${params.toString()}`);
+    if (!response.ok)
+        throw new Error(`Failed to fetch runs: ${await response.text()}`);
+    const data = await parseJsonResponse(response, 'Runs list');
+    if (hasJsonFlag()) {
+        printJson(data);
+        return;
+    }
+    for (const run of data.runs) {
+        printLine([
+            sanitizeTerminalText(String(run.id ?? '?')),
+            `prompt ${sanitizeTerminalText(String(run.promptVersionId ?? '—'))}`,
+            `split ${sanitizeTerminalText(String(run.splitName ?? '—'))}`,
+            `score ${sanitizeTerminalText(formatScoreForCli(run.aggregateScore, 'number'))}`,
+            `Profile Version ${sanitizeTerminalText(String(run.profileVersionId ?? '—'))}`,
+        ].join(' | '));
+    }
 }
 async function setScorerLabel() {
     const scorerName = getPositionalArg(3);
@@ -1300,6 +1368,7 @@ async function submitRunResults() {
             judgeVersionId: getArg('--judge-version') || undefined,
             judgeRunnerVersionId: getArg('--judge-runner-version') || undefined,
             resultsJsonl,
+            ...instructionSetProvenanceFields(project),
         }),
     });
     if (!response.ok) {
@@ -1338,6 +1407,7 @@ async function submitScoreResults() {
         headers: { 'Content-Type': 'application/json' },
         body: JSON.stringify({
             ...aggregatePayload,
+            ...instructionSetProvenanceFields(project),
             scorerVersionId,
             subjectPromptVersionId: subjectPromptVersionId || undefined,
             datasetVersionId: getArg('--dataset-version') || undefined,
@@ -1458,6 +1528,8 @@ async function execScorer() {
         !splitName) {
         throw new Error('Usage: orizu scorers exec --scorer-version <id> (--subject-version <prompt-version-id> | --optimization-run <id> --candidate <id>) --dataset-version <id> --split-set <id> --split <name> [--subject-results <jsonl>] [--dependency-score-run <alias=id>] [--dependency-results <alias=path>] [--no-submit] [--out <score.json>] [--project <team/project>] [--json]');
     }
+    const instructionSetProvenance = instructionSetProvenanceFields(project);
+    const isNoSubmit = hasArg('--no-submit');
     const response = await authedFetch(`/api/cli/scorers/exec?project=${encodeURIComponent(project)}`, {
         method: 'POST',
         headers: { 'Content-Type': 'application/json' },
@@ -1469,22 +1541,28 @@ async function execScorer() {
             datasetVersionId,
             splitSetId,
             splitName,
-            submit: !hasArg('--no-submit'),
+            submit: !isNoSubmit,
             reuseExisting: !hasArg('--no-reuse-existing'),
             subjectResultsJsonl: readOptionalJsonlFile(getArg('--subject-results') || getArg('--outputs')),
             dependencyScoreRunIds: parseAliasAssignments(getArg('--dependency-score-run') || getArg('--dependency-score-runs')),
             dependencyResultsJsonl: readDependencyResultAssignments(getArg('--dependency-results')),
+            ...instructionSetProvenance,
         }),
     });
     if (!response.ok) {
         throw new Error(`Failed to execute scorer: ${await response.text()}`);
     }
     const data = await parseJsonResponse(response, 'Scorer exec');
+    const noSubmitOutput = isNoSubmit
+        ? noSubmitScorerOutput(data, instructionSetProvenance)
+        : null;
     if (outPath) {
-        writeFileSync(expandHomePath(outPath), `${JSON.stringify(data.scoreResult || data, null, 2)}\n`);
+        const output = noSubmitOutput ?? data.scoreResult ?? data;
+        writeFileSync(expandHomePath(outPath), `${JSON.stringify(output, null, 2)}\n`);
     }
     if (hasJsonFlag()) {
-        printJson(data);
+        const output = noSubmitOutput ?? data;
+        printJson(output);
         return;
     }
     const scoreRun = isRecord(data.scoreRun) ? data.scoreRun : null;
@@ -1512,6 +1590,9 @@ async function execScorer() {
     else {
         printLine(`Executed scorer ${sanitizeTerminalText(scorerVersionId)} (${formatPercent(numberFromUnknown(scoreValue))})${provenanceSuffix}`);
     }
+    if (isNoSubmit && Object.keys(instructionSetProvenance).length > 0) {
+        printLine(`Provenance: ${sanitizeTerminalText(String(instructionSetProvenance['orizu.instruction_set.id']))} / ${sanitizeTerminalText(String(instructionSetProvenance['orizu.profile_version.id']))} / ${sanitizeTerminalText(String(instructionSetProvenance['orizu.instruction_set.digest']))}`);
+    }
     if (outPath) {
         printLine(`Wrote scorer result to ${sanitizeTerminalText(outPath)}`);
     }
@@ -3849,88 +3930,22 @@ async function changeTeamMemberRole() {
     }
     printLine(`Updated ${sanitizeTerminalText(member.email)} role to ${sanitizeTerminalText(role)}`);
 }
-async function createDatasetFromRows(project, name, sourceType, rows, readmeMarkdown = null) {
-    const response = await authedFetch('/api/cli/datasets/upload', {
-        method: 'POST',
-        headers: {
-            'Content-Type': 'application/json',
-        },
-        body: JSON.stringify({
-            projectSlug: project,
-            name,
-            rows,
-            sourceType,
-            ...(readmeMarkdown !== null ? { readmeMarkdown } : {}),
-        }),
-    });
-    if (!response.ok) {
-        const body = await parseJsonResponse(response, 'Dataset upload');
-        throw new Error(`Upload failed: ${body.error}`);
-    }
-    return parseJsonResponse(response, 'Dataset upload');
-}
 async function uploadJsonlDatasetInChunks(file, project, datasetName, readmeMarkdown = null) {
-    let dataset = null;
-    let totalUploaded = 0;
-    let chunkIndex = 0;
-    const chunks = streamJsonlRowChunks(file)[Symbol.asyncIterator]();
-    while (true) {
-        let nextChunk;
-        try {
-            nextChunk = await chunks.next();
-        }
-        catch (error) {
-            const message = error instanceof Error ? error.message : String(error);
-            if (!dataset) {
-                throw new Error(message);
-            }
-            throw new Error(`Upload stopped while reading the next JSONL chunk: ${message}\n` +
-                `Dataset ${sanitizeTerminalText(dataset.name)} (${sanitizeTerminalText(dataset.id)}) was created and ${totalUploaded} rows were uploaded. ` +
-                `Fix the file, remove the first ${totalUploaded} rows, and run ` +
-                `orizu datasets append --dataset ${dataset.id} --file <remaining-file>.`);
-        }
-        if (nextChunk.done) {
-            break;
-        }
-        const chunk = nextChunk.value;
-        chunkIndex += 1;
-        printLine(`Uploading chunk ${chunkIndex} (${chunk.length} rows)...`);
-        try {
-            if (!dataset) {
-                const data = await createDatasetFromRows(project, datasetName, 'jsonl', chunk, readmeMarkdown);
-                dataset = data.dataset;
-                totalUploaded = data.dataset.rowCount;
-                continue;
-            }
-            const data = await appendChunk(dataset.id, chunk);
-            totalUploaded += data.appendedCount;
-            dataset = {
-                ...dataset,
-                rowCount: data.dataset.rowCount,
-            };
-        }
-        catch (error) {
-            const message = error instanceof Error ? error.message : String(error);
-            if (!dataset) {
-                throw new Error(message);
-            }
-            throw new Error(`Chunk ${chunkIndex} failed: ${message}\n` +
-                `Dataset ${dataset.name} (${dataset.id}) was created and ${totalUploaded} rows were uploaded. ` +
-                `To retry, remove the first ${totalUploaded} rows from your file and run ` +
-                `orizu datasets append --dataset ${dataset.id} --file <remaining-file>.`);
-        }
-    }
-    if (!dataset) {
-        throw new Error('Dataset file contains no rows');
-    }
-    const version = await ensureDatasetUploadSnapshot(dataset, hasJsonFlag(), requestDatasetVersionSnapshot);
+    const { transferDatasetUpload } = await import('./dataset-transfer-upload.js');
+    const { data, version } = await transferDatasetUpload({
+        project, name: datasetName, source: { kind: 'jsonl', file }, readmeMarkdown,
+        json: hasJsonFlag(),
+        // JSON mode reserves stderr for structured recovery failures as well.
+        onChunk: (index, count) => { if (!hasJsonFlag())
+            printLine(`Uploading chunk ${index} (${count} rows)...`); },
+    });
+    const dataset = data.dataset;
     if (hasJsonFlag())
         return printJson({ dataset_id: dataset.id, dataset, dataset_version_id: version.datasetVersion.id });
     printLine(`Uploaded dataset ${sanitizeTerminalText(dataset.name)} (${sanitizeTerminalText(dataset.id)}) with ${dataset.rowCount} rows.`);
     printLine(`Created dataset version ${sanitizeTerminalText(version.datasetVersion.id)}.`);
-    if (dataset.url) {
+    if (dataset.url)
         printLine(`View dataset: ${formatTerminalLink(dataset.url)}`);
-    }
 }
 async function uploadDataset() {
     const projectArg = getArg('--project');
@@ -3949,8 +3964,11 @@ async function uploadDataset() {
         return;
     }
     const { rows, sourceType } = parseDatasetFile(file);
-    const data = await createDatasetFromRows(project, datasetName, sourceType, rows, readmeMarkdown);
-    const version = await ensureDatasetUploadSnapshot(data.dataset, hasJsonFlag(), requestDatasetVersionSnapshot);
+    const { transferDatasetUpload } = await import('./dataset-transfer-upload.js');
+    const { data, version } = await transferDatasetUpload({
+        project, name: datasetName, source: { kind: 'rows', rows, sourceType }, readmeMarkdown,
+        json: hasJsonFlag(), onChunk: () => { },
+    });
     if (hasJsonFlag())
         return printJson({ dataset_id: data.dataset.id, dataset: data.dataset, dataset_version_id: version.datasetVersion.id });
     printLine(`Uploaded dataset ${sanitizeTerminalText(data.dataset.name)} (${sanitizeTerminalText(data.dataset.id)}) with ${data.dataset.rowCount} rows.`);
@@ -3972,8 +3990,11 @@ async function pushDataset() {
     const project = await resolveProjectSlug(projectArg);
     const datasetName = name || basename(file);
     const { rows, sourceType } = parseDatasetFile(file);
-    const data = await createDatasetFromRows(project, datasetName, sourceType, rows, readmeMarkdown);
-    const version = await ensureDatasetUploadSnapshot(data.dataset, hasJsonFlag(), requestDatasetVersionSnapshot);
+    const { transferDatasetUpload } = await import('./dataset-transfer-upload.js');
+    const { data, version } = await transferDatasetUpload({
+        project, name: datasetName, source: { kind: 'rows', rows, sourceType }, readmeMarkdown,
+        json: hasJsonFlag(), onChunk: () => { },
+    });
     if (hasJsonFlag()) {
         const payload = {
             dataset_id: data.dataset.id,
@@ -4052,15 +4073,11 @@ async function downloadDataset() {
         const selected = await selectDatasetInteractively(projectArg);
         datasetId = selected.datasetId;
     }
-    const response = await authedFetch(`/api/cli/datasets/${encodeURIComponent(datasetId)}/download?format=${encodeURIComponent(format)}`);
-    if (!response.ok) {
-        throw new Error(`Download failed: ${await response.text()}`);
-    }
     const filename = outPathArg
         ? expandHomePath(outPathArg)
         : `${datasetId}.${format}`;
-    const bytes = new Uint8Array(await response.arrayBuffer());
-    writeFileSync(filename, bytes);
+    const { transferDatasetDownload } = await import('./dataset-transfer-download.js');
+    await transferDatasetDownload(datasetId, format, filename);
     if (hasJsonFlag()) {
         printJson({ datasetId, format, savedTo: filename });
         return;
@@ -4837,6 +4854,10 @@ export async function main(rawArgs = process.argv.slice(2)) {
         await submitRunResults();
         return;
     }
+    if (command === 'runs' && subcommand === 'list') {
+        await listRuns();
+        return;
+    }
     if (command === 'scores' && subcommand === 'submit') {
         await submitScoreResults();
         return;

package/dist/instruction-set-gepa-launch.d.ts

@@ -1,3 +1,3 @@
-/** Resolve the same production-or-default tuple served for a model identity. */
+/** Resolve the requested Profile's Production tuple for optimization. */
 export declare function resolveGepaInstructionSetProfileVersion(instructionSetName: string, modelConfigIdentity: string, project: string): Promise<string>;
 //# sourceMappingURL=instruction-set-gepa-launch.d.ts.map

package/dist/instruction-set-gepa-launch.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"instruction-set-gepa-launch.d.ts","sourceRoot":"","sources":["../src/instruction-set-gepa-launch.ts"],"names":[],"mappings":"AAaA,gFAAgF;AAChF,wBAAsB,uCAAuC,CAC3D,kBAAkB,EAAE,MAAM,EAC1B,mBAAmB,EAAE,MAAM,EAC3B,OAAO,EAAE,MAAM,GACd,OAAO,CAAC,MAAM,CAAC,CASjB"}
+{"version":3,"file":"instruction-set-gepa-launch.d.ts","sourceRoot":"","sources":["../src/instruction-set-gepa-launch.ts"],"names":[],"mappings":"AAYA,yEAAyE;AACzE,wBAAsB,uCAAuC,CAC3D,kBAAkB,EAAE,MAAM,EAC1B,mBAAmB,EAAE,MAAM,EAC3B,OAAO,EAAE,MAAM,GACd,OAAO,CAAC,MAAM,CAAC,CAUjB"}

package/dist/instruction-set-gepa-launch.js

@@ -1,6 +1,6 @@
 import { authedFetch } from './http.js';
 import { parseJsonResponse } from './json-response.js';
-/** Resolve the same production-or-default tuple served for a model identity. */
+/** Resolve the requested Profile's Production tuple for optimization. */
 export async function resolveGepaInstructionSetProfileVersion(instructionSetName, modelConfigIdentity, project) {
     const response = await authedFetch(`/api/cli/instruction-sets/${encodeURIComponent(instructionSetName)}?project=${encodeURIComponent(project)}`);
     if (!response.ok)
@@ -8,8 +8,10 @@ export async function resolveGepaInstructionSetProfileVersion(instructionSetName
     const payload = await parseJsonResponse(response, 'Instruction set resolution');
     const instructionSet = payload.instructionSet;
     const profile = instructionSet?.profiles?.find(candidate => candidate.modelConfigIdentity === modelConfigIdentity);
-    const profileVersionId = profile?.production?.profileVersionId || instructionSet?.default?.profileVersionId;
+    if (!profile)
+        throw new Error(`instruction_set_profile_not_found: ${modelConfigIdentity}`);
+    const profileVersionId = profile.production?.profileVersionId;
     if (!profileVersionId)
-        throw new Error('instruction_set_profile_version_unresolvable');
+        throw new Error(`instruction_set_profile_not_promoted: ${modelConfigIdentity}`);
     return profileVersionId;
 }

package/dist/instruction-set-loader.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"instruction-set-loader.d.ts","sourceRoot":"","sources":["../src/instruction-set-loader.ts"],"names":[],"mappings":"AAGA,qBAAa,yBAA0B,SAAQ,KAAK;IACtC,QAAQ,CAAC,IAAI,EAAE,MAAM;gBAAZ,IAAI,EAAE,MAAM;CAClC;AA2DD,wBAAgB,kBAAkB,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,mBAAmB,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAsBvH"}
+{"version":3,"file":"instruction-set-loader.d.ts","sourceRoot":"","sources":["../src/instruction-set-loader.ts"],"names":[],"mappings":"AAGA,qBAAa,yBAA0B,SAAQ,KAAK;IACtC,QAAQ,CAAC,IAAI,EAAE,MAAM;gBAAZ,IAAI,EAAE,MAAM;CAClC;AA2GD,wBAAgB,kBAAkB,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,mBAAmB,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAyBvH"}

package/dist/instruction-set-loader.js

@@ -8,6 +8,7 @@ export class InstructionSetLoaderError extends Error {
         this.name = 'InstructionSetLoaderError';
     }
 }
+const LEGACY_LOADER_RETIRED = 'instruction_set_legacy_loader_retired: this tree was synced by the paved path; see docs/cli.md#migrating-the-legacy-sync-layout';
 function inside(root, candidate) { return candidate === root || candidate.startsWith(`${root}${sep}`); }
 function manifestMatchesReference(candidate, reference) {
     try {
@@ -18,6 +19,46 @@ function manifestMatchesReference(candidate, reference) {
         return false;
     }
 }
+function pavedTreeMatchesDisplayName(directoryRoot, reference) {
+    const setsRoots = [
+        resolve(directoryRoot, 'orizu', 'instruction-sets'),
+        resolve(directoryRoot, 'instruction-sets'),
+    ];
+    for (const setsRoot of setsRoots) {
+        try {
+            for (const setEntry of readdirSync(setsRoot, { withFileTypes: true })) {
+                if (!setEntry.isDirectory())
+                    continue;
+                const setRoot = realpathSync(resolve(setsRoot, setEntry.name));
+                if (!inside(directoryRoot, setRoot))
+                    continue;
+                for (const profileEntry of readdirSync(setRoot, { withFileTypes: true })) {
+                    if (!profileEntry.isDirectory())
+                        continue;
+                    const profileRoot = realpathSync(resolve(setRoot, profileEntry.name));
+                    if (!inside(directoryRoot, profileRoot))
+                        continue;
+                    for (const versionEntry of readdirSync(profileRoot, { withFileTypes: true })) {
+                        if (!versionEntry.isDirectory() || !/^v[1-9][0-9]*$/u.test(versionEntry.name))
+                            continue;
+                        try {
+                            const manifest = JSON.parse(readFileSync(resolve(profileRoot, versionEntry.name, 'manifest.json'), 'utf8'));
+                            if (manifest.instructionSetName === reference || manifest.instructionSetSlug === reference)
+                                return true;
+                        }
+                        catch {
+                            // Inspect another paved Version.
+                        }
+                    }
+                }
+            }
+        }
+        catch {
+            // Inspect the other paved root.
+        }
+    }
+    return false;
+}
 function resolveSetRoot(directory, reference) {
     let directoryRoot;
     try {
@@ -26,6 +67,21 @@ function resolveSetRoot(directory, reference) {
     catch {
         throw new InstructionSetLoaderError('instruction_set_not_synced');
     }
+    const pavedCandidates = [
+        resolve(directoryRoot, 'orizu', 'instruction-sets', reference),
+        resolve(directoryRoot, 'instruction-sets', reference),
+    ];
+    if (pavedCandidates.some(candidate => {
+        try {
+            return inside(directoryRoot, realpathSync(candidate)) && statSync(candidate).isDirectory();
+        }
+        catch {
+            return false;
+        }
+    }) || (!/^[a-z0-9]+(?:-[a-z0-9]+)*$/u.test(reference)
+        && pavedTreeMatchesDisplayName(directoryRoot, reference))) {
+        throw new InstructionSetLoaderError(LEGACY_LOADER_RETIRED);
+    }
     const direct = resolve(directoryRoot, reference);
     try {
         if (inside(directoryRoot, direct) && existsSync(direct) && statSync(direct).isDirectory()) {
@@ -80,8 +136,13 @@ export function loadInstructionSet(directory, name, modelConfigIdentity) {
         throw new InstructionSetLoaderError('instruction_set_manifest_version_unsupported');
     if (manifest.filteredTo && !manifest.filteredTo.includes(modelConfigIdentity))
         throw new InstructionSetLoaderError('instruction_set_profile_not_synced');
-    const selected = manifest.profiles.find(profile => profile.modelConfigIdentity === modelConfigIdentity)?.production || manifest.default;
-    const result = {};
+    const profile = manifest.profiles.find(profile => profile.modelConfigIdentity === modelConfigIdentity);
+    if (!profile)
+        throw new InstructionSetLoaderError('instruction_set_profile_not_found');
+    if (!profile.production)
+        throw new InstructionSetLoaderError('instruction_set_profile_not_promoted');
+    const selected = profile.production;
+    const result = Object.create(null);
     for (const key of manifest.shape) {
         if (selected.pinnedComponents?.[key])
             throw new InstructionSetLoaderError('instruction_set_component_unavailable');

package/dist/instruction-set-lock/index.d.ts

@@ -0,0 +1,51 @@
+export interface SyncedVersionLock {
+    profileVersionId: string;
+    versionNumber: number;
+    digest: string;
+    components: Record<string, string>;
+    syncedAt: string;
+}
+export interface ProfileLock {
+    modelConfigIdentity?: string;
+    production: string | null;
+    versions: Record<string, SyncedVersionLock>;
+}
+export interface InstructionSetLock {
+    instructionSetId: string;
+    default: string;
+    profiles: Record<string, ProfileLock>;
+}
+export interface InstructionSetLockV1 {
+    lockfileVersion: 1;
+    project: string;
+    instructionSets: Record<string, InstructionSetLock>;
+    helpers?: Record<string, string>;
+    pins?: string[];
+}
+export type LockParseErrorCode = 'lock_invalid_json' | 'lock_unsupported_version' | 'lock_production_not_a_version' | `lock_component_key_unsafe:${string}` | `lock_component_key_reserved:${string}` | `lock_helper_path_invalid:${string}` | `lock_set_slug_invalid:${string}` | `lock_profile_slug_invalid:${string}` | `lock_default_slug_invalid:${string}` | `lock_instruction_set_id_duplicate:${string}` | `lock_profile_version_id_duplicate:${string}` | `instruction_set_lock_component_key_collision:${string},${string}` | `instruction_set_lock_helper_path_collision:${string},${string}` | `lock_schema_violation:${string}` | `lock_pin_invalid:${string}:${SpecifierParseErrorCode}`;
+export declare class LockParseError extends Error {
+    readonly code: LockParseErrorCode;
+    readonly path?: string;
+    constructor(code: LockParseErrorCode, path?: string);
+}
+export type SpecifierParseErrorCode = 'specifier_empty' | 'specifier_invalid_set' | 'specifier_profile_missing' | 'specifier_invalid_profile' | 'specifier_version_without_profile' | 'specifier_invalid_version';
+export declare class SpecifierParseError extends Error {
+    readonly code: SpecifierParseErrorCode;
+    constructor(code: SpecifierParseErrorCode);
+}
+export interface ParsedSpecifier {
+    set: string;
+    profile?: string;
+    versionNumber?: number;
+}
+export declare const INSTRUCTION_SET_SLUG: RegExp;
+export declare const INSTRUCTION_SET_PROFILE_SLUG: RegExp;
+export declare const INSTRUCTION_SET_COMPONENT_KEY: RegExp;
+export declare const INSTRUCTION_SET_HELPER_PATH: RegExp;
+export declare const MAX_VERSION_NUMBER = 2147483647;
+export declare function windowsPathIdentity(value: string): string;
+export declare function validateInstructionSetComponentKeys(componentKeys: string[], pathPrefix?: string, rejectWindowsReserved?: boolean): void;
+export declare function parseLock(text: string): InstructionSetLockV1;
+export declare function serializeLock(lock: InstructionSetLockV1): string;
+export declare function parseSpecifier(text: string): ParsedSpecifier;
+//# sourceMappingURL=index.d.ts.map

package/dist/instruction-set-lock/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/instruction-set-lock/index.ts"],"names":[],"mappings":"AAEA,MAAM,WAAW,iBAAiB;IAChC,gBAAgB,EAAE,MAAM,CAAA;IACxB,aAAa,EAAE,MAAM,CAAA;IACrB,MAAM,EAAE,MAAM,CAAA;IACd,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IAClC,QAAQ,EAAE,MAAM,CAAA;CACjB;AAED,MAAM,WAAW,WAAW;IAC1B,mBAAmB,CAAC,EAAE,MAAM,CAAA;IAC5B,UAAU,EAAE,MAAM,GAAG,IAAI,CAAA;IACzB,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAAA;CAC5C;AAED,MAAM,WAAW,kBAAkB;IACjC,gBAAgB,EAAE,MAAM,CAAA;IACxB,OAAO,EAAE,MAAM,CAAA;IACf,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,CAAA;CACtC;AAED,MAAM,WAAW,oBAAoB;IACnC,eAAe,EAAE,CAAC,CAAA;IAClB,OAAO,EAAE,MAAM,CAAA;IACf,eAAe,EAAE,MAAM,CAAC,MAAM,EAAE,kBAAkB,CAAC,CAAA;IACnD,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IAChC,IAAI,CAAC,EAAE,MAAM,EAAE,CAAA;CAChB;AAED,MAAM,MAAM,kBAAkB,GAC1B,mBAAmB,GACnB,0BAA0B,GAC1B,+BAA+B,GAC/B,6BAA6B,MAAM,EAAE,GACrC,+BAA+B,MAAM,EAAE,GACvC,4BAA4B,MAAM,EAAE,GACpC,yBAAyB,MAAM,EAAE,GACjC,6BAA6B,MAAM,EAAE,GACrC,6BAA6B,MAAM,EAAE,GACrC,qCAAqC,MAAM,EAAE,GAC7C,qCAAqC,MAAM,EAAE,GAC7C,gDAAgD,MAAM,IAAI,MAAM,EAAE,GAClE,8CAA8C,MAAM,IAAI,MAAM,EAAE,GAChE,yBAAyB,MAAM,EAAE,GACjC,oBAAoB,MAAM,IAAI,uBAAuB,EAAE,CAAA;AAE3D,qBAAa,cAAe,SAAQ,KAAK;IACvC,QAAQ,CAAC,IAAI,EAAE,kBAAkB,CAAA;IACjC,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAA;gBAEV,IAAI,EAAE,kBAAkB,EAAE,IAAI,CAAC,EAAE,MAAM;CAMpD;AAED,MAAM,MAAM,uBAAuB,GAC/B,iBAAiB,GACjB,uBAAuB,GACvB,2BAA2B,GAC3B,2BAA2B,GAC3B,mCAAmC,GACnC,2BAA2B,CAAA;AAE/B,qBAAa,mBAAoB,SAAQ,KAAK;IAC5C,QAAQ,CAAC,IAAI,EAAE,uBAAuB,CAAA;gBAE1B,IAAI,EAAE,uBAAuB;CAK1C;AAED,MAAM,WAAW,eAAe;IAC9B,GAAG,EAAE,MAAM,CAAA;IACX,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,aAAa,CAAC,EAAE,MAAM,CAAA;CACvB;AAuBD,eAAO,MAAM,oBAAoB,QAAgC,CAAA;AACjE,eAAO,MAAM,4BAA4B,QAAkD,CAAA;AAC3F,eAAO,MAAM,6BAA6B,QAA6B,CAAA;AAEvE,eAAO,MAAM,2BAA2B,QAAgG,CAAA;AACxI,eAAO,MAAM,kBAAkB,aAAgB,CAAA;AAG/C,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAEzD;AA6HD,wBAAgB,mCAAmC,CACjD,aAAa,EAAE,MAAM,EAAE,EACvB,UAAU,SAAgB,EAC1B,qBAAqB,UAAQ,GAC5B,IAAI,CAmBN;AA+LD,wBAAgB,SAAS,CAAC,IAAI,EAAE,MAAM,GAAG,oBAAoB,CAQ5D;AAqCD,wBAAgB,aAAa,CAAC,IAAI,EAAE,oBAAoB,GAAG,MAAM,CA8BhE;AAED,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,eAAe,CA8B5D"}