KeiSeiKit-1.0/_primitives/_rust/kei-model-router/src/main.rs
Parfii-bot 3b03fb7bc3 fix(kei-model-router): close 10 audit-blocker findings
Codex CRITICAL + 4 HIGH + 5 MEDIUM/LOW from RULE 0.23 dual-review and
RULE 0.25 multi-critic swarm — all closed.

CRITICAL fix
  - Model::slug() ledger compatibility: posterior.rs + select_kernel.rs
    query `WHERE model = ?2 OR model = ?3`, binding canonical + legacy
    slug pair via new `Model::legacy_slug()`. Production ledger rows
    written under "haiku"/"sonnet"/"opus" remain visible to posterior
    aggregation. Regression test ledger_legacy_slug_counted.

HIGH fixes
  - cmd_select(): no longer early-returns on profile match. Profile's
    default_model_ref now becomes DecisionInput.fallback; select() always
    runs, posterior/kernel evidence wins if present. RULE 0.20 cost
    optimisation restored for all 18 registered agents.
  - Registry pricing SSoT: DecisionInput now carries Option<Arc<Registry>>.
    estimated_cost() tries registry first; hardcoded match is documented
    fallback only. select_posterior.rs no longer duplicates models.toml
    constants.
  - registry.rs portability: include_str!() embeds the three TOMLs at
    compile time. load_embedded() new; disk path tried first via
    KEI_REGISTRIES_DIR, embedded as fallback. `cargo install`d binaries
    now find registries unconditionally. embedded_registry_matches_disk
    test ensures embedded ≡ disk source.
  - next_model() ambiguity: replaced Option<&Model> with EscalationResult
    enum (Next(&Model) / AtTop / NotFound). Callers can distinguish typo
    from ceiling. 5 new tests.

MEDIUM fixes
  - posterior.rs u32 overflow: `(n_plus + n_minus) as u32` →
    `u32::try_from(n_plus.saturating_add(n_minus)).unwrap_or(u32::MAX)`.
    overflow_guard_on_huge_n test with i64::MAX.
  - pick() unknown-model: now returns None when default_model_ref's model
    is absent from registry. Inverted the deprecation guard.
  - HOME unset: disk_registries_dir() returns None on empty HOME and
    falls through to embedded registries. open_ledger() logs warning
    and returns None instead of opening at malformed path.
  - SQLite WAL + busy_timeout: applied to ledger connection in
    open_ledger() — concurrent CLI invocations no longer SQLITE_BUSY.

LOW fixes
  - impl Model consolidation: next_tier() moved to pricing.rs.
    escalate.rs uses current.next_tier() instead of duplicating logic.
  - complexity.rs: removed duplicate "ml-implementer" in HEAVY_ROLES.
  - dna_class.rs: role("") now returns None instead of Some("").

Verification (orchestrator-side, RULE 0.13 §Verify-before-commit):
  - cargo check        → clean
  - cargo test --release → 63 passed / 0 failed (was 58 → +5 new tests
    cover legacy-slug, EscalationResult, overflow, unknown-model, embedded)
  - Constructor Pattern → all files ≤ 200 LOC (max registry.rs 196)
  - Largest fn from_ledger 28 LOC / limit 30

DNA-INDEX.md regenerated by kei-registry hook (cosmetic).

=== STATUS-TRUTH MARKER ===
shipped: functional
stubs: 0
cargo-check: PASS
behaviour-verified: yes
follow-up-required:
  - (none from this commit; next audit pass before merge to main)
2026-05-13 22:09:19 +08:00

179 lines
6.6 KiB
Rust

//! kei-model-router CLI.
//!
//! Subcommands:
//! pricing — print pricing table from models.toml
//! select <agent> [--prompt P]
//! — query router decision for given agent spawn
//! calibrate — re-fit kernel weights against ledger outcomes
//! --help
use kei_model_router::{
calibrate, pick, select, DecisionInput, KernelWeights, Model, Registry,
OPUS_47_TOKENIZER_OVERHEAD,
};
use rusqlite::Connection;
fn main() {
let args: Vec<String> = std::env::args().collect();
match args.get(1).map(String::as_str) {
Some("pricing") | None => print_pricing(),
Some("select") => cmd_select(&args[2..]),
Some("calibrate") => cmd_calibrate(),
Some("--help") | Some("-h") => print_help(),
Some(other) => {
eprintln!("unknown command: {other}");
print_help();
std::process::exit(2);
}
}
}
fn print_help() {
print!(concat!(
"kei-model-router — model selection for Claude Code Agent spawns\n\n",
"Usage:\n",
" kei-model-router [pricing] print pricing table from models.toml\n",
" kei-model-router select <agent> [--prompt P]\n",
" kei-model-router calibrate re-fit kernel weights\n",
" kei-model-router --help\n\n",
"Env:\n",
" KEI_LEDGER_DB override ledger path\n",
" KEI_REGISTRIES_DIR override registries dir\n",
));
}
fn print_pricing() {
let reg = match Registry::load() {
Ok(r) => r,
Err(e) => { eprintln!("registry load error: {e}"); std::process::exit(1); }
};
println!("kei-model-router — pricing from models.toml\n");
println!("{:<30} {:>12} {:>12} {:>12}", "model", "input/M", "output/M", "cache_r");
for m in &reg.models {
println!(
"{:<30} {:>12} {:>12} {:>12}",
m.id,
fmt_micro(m.cost_input_per_mtok_micro),
fmt_micro(m.cost_output_per_mtok_micro),
fmt_micro(m.cache_read_per_mtok_micro),
);
}
println!("\nNote: Opus 4.7 tokenizer may use up to {:.0}% more tokens vs Sonnet/Haiku.",
(OPUS_47_TOKENIZER_OVERHEAD - 1.0) * 100.0);
}
fn cmd_select(args: &[String]) {
let agent = args.first().unwrap_or_else(|| {
eprintln!("usage: kei-model-router select <agent> [--prompt PROMPT]");
std::process::exit(2);
});
let prompt = parse_prompt_flag(args);
let synthetic_dna = format!("{agent}::?::00000000::00000000-00000000");
// Finding 2: always proceed through select(); profile default_model_ref
// becomes the fallback rather than an early-return shortcut.
let mut input = DecisionInput::new(synthetic_dna.clone(), prompt.clone());
input.kernel_weights = KernelWeights::default();
input.pinned = read_pinned_for_agent(agent);
// If registry loads and profile resolves, use its model as fallback.
if let Ok(reg) = Registry::load() {
if let Some((_, model_id)) = pick(agent, &reg) {
if let Some(m) = Model::from_slug(&model_id) {
input.fallback = m;
}
}
}
let conn = match open_ledger() {
Some(c) => c,
None => {
eprintln!("warning: ledger not available; falling back to default");
print_decision_no_ledger(&synthetic_dna, &prompt);
return;
}
};
let d = match select(&input, &conn) {
Ok(d) => d,
Err(e) => { eprintln!("ledger query failed: {e}"); std::process::exit(1); }
};
println!("agent: {agent}");
println!("model: {}", d.model.slug());
println!("expected_cost ${:.4} (microcents={})",
d.expected_cost_micro_cents as f64 / 100_000_000.0, d.expected_cost_micro_cents);
println!("q_lower_bound {:.3} (posterior n={})", d.quality_lower_bound, d.posterior_n);
println!("reason: {}", d.reason);
}
fn parse_prompt_flag(args: &[String]) -> String {
let mut i = 1;
while i < args.len() {
if args[i] == "--prompt" {
if let Some(p) = args.get(i + 1) { return p.clone(); }
}
i += 1;
}
String::new()
}
fn print_decision_no_ledger(dna: &str, prompt: &str) {
let inp = DecisionInput::new(dna.to_string(), prompt.to_string());
let est = kei_model_router::complexity::estimate(
prompt, kei_model_router::dna_class::role(dna));
println!("model: {}\nτ: {:.2}\nreason: no_ledger_fallback",
inp.fallback.slug(), est.tau);
}
fn cmd_calibrate() {
let conn = match open_ledger() {
Some(c) => c,
None => { eprintln!("ledger not found; aborting calibration"); std::process::exit(1); }
};
let r = match calibrate::calibrate(&conn) {
Ok(r) => r,
Err(e) => { eprintln!("calibration query failed: {e}"); std::process::exit(1); }
};
println!("rows evaluated: {}", r.rows_evaluated);
if r.rows_evaluated < 5 {
println!("(too few rows for calibration; using default weights)");
return;
}
println!("baseline MSE: {:.4}\nbest MSE: {:.4}\nimprovement: {:.4}",
r.baseline_mse, r.best_mse, r.baseline_mse - r.best_mse);
println!("calibrated weights:\n alpha_role: {:.2}\n alpha_caps: {:.2}\n alpha_scope: {:.2}\n alpha_body: {:.2}",
r.best_weights.alpha_role, r.best_weights.alpha_caps,
r.best_weights.alpha_scope, r.best_weights.alpha_body);
}
fn open_ledger() -> Option<Connection> {
let path = if let Ok(p) = std::env::var("KEI_LEDGER_DB") {
p
} else {
// Finding 8: HOME unset → emit warning and bail; don't open a garbled path.
let home = std::env::var("HOME").unwrap_or_default();
if home.is_empty() {
eprintln!("[kei-model-router] HOME unset; cannot resolve ledger path");
return None;
}
format!("{home}/.claude/agents/ledger.sqlite")
};
let conn = Connection::open(&path).ok()?;
// Finding 9: WAL mode + busy timeout prevent SQLITE_BUSY for concurrent readers.
conn.pragma_update(None, "journal_mode", "WAL").ok();
conn.busy_timeout(std::time::Duration::from_secs(5)).ok();
Some(conn)
}
fn read_pinned_for_agent(agent: &str) -> Option<Model> {
let home = std::env::var("HOME").ok()?;
let raw = std::fs::read_to_string(format!("{home}/.claude/settings.json")).ok()?;
let json: serde_json::Value = serde_json::from_str(&raw).ok()?;
let model_slug = json.get("router")?.get("pinned")?.get(agent)?.as_str()?;
Model::from_slug(model_slug)
}
fn fmt_micro(uc: u64) -> String {
format!("${:.2}", uc as f64 / 100_000_000.0)
}