@aid-framework/ir 0.0.0 → 0.1.48

package/dist/gates/cost.js

@@ -0,0 +1,167 @@
+/**
+ * Gate 4 — cost.
+ *
+ * Cost profiles are resolved from the offline catalog in `src/catalog/models.json`, so
+ * an estimate is deterministic and reproducible on a machine with no network. The gate
+ * fails *closed* on an unpriced model that someone declared a budget for: an unpriced
+ * model cannot be shown to fit a budget, and silently assuming it does is the failure
+ * mode this gate exists to prevent.
+ *
+ * A retrieval path is not free by omission: the candidate chunks a retriever materialises
+ * are charged to the model that embeds them, so a retriever with a wide `topK` over large
+ * chunks shows up in the estimate and can exceed a declared budget on its own.
+ */
+import { catalogCostProfile } from '../catalog/index.js';
+import { IR_DIAGNOSTIC_CODES } from '../diagnostics.js';
+import { reporter } from './contract.js';
+const SUPPRESSED = [];
+/** Rough tokens-per-character for a natural-language prompt. Fixed, so estimates compare. */
+const CHARS_PER_TOKEN = 4;
+/** Output tokens assumed when neither the params nor the catalog bound them. */
+const DEFAULT_OUTPUT_TOKENS = 512;
+export function costGate(ir, options) {
+    const diagnostics = [];
+    const report = reporter(options);
+    for (const evalShape of ir.evals) {
+        const estimate = estimateEvalCost(ir, evalShape);
+        if (estimate.models.length === 0)
+            continue;
+        if (estimate.cost === undefined) {
+            const unpriced = estimate.models.filter((model) => model.cost === undefined);
+            const named = unpriced.map((model) => model.model).join(', ');
+            if (estimate.budget !== undefined) {
+                diagnostics.push(report.error({
+                    code: IR_DIAGNOSTIC_CODES.costProfileUnknown,
+                    message: `the cost gate rejected this eval: "${evalShape.id}" declares a budget of ${estimate.budget}, but the costProfile of ${named} is unknown, so the budget cannot be enforced`,
+                    path: ['evals', evalShape.id, 'metrics'],
+                    hint: 'add the model to src/catalog/models.json, set models.<alias>.costProfile, or drop the budget',
+                }));
+            }
+            else {
+                diagnostics.push(report.warn({
+                    code: IR_DIAGNOSTIC_CODES.costProfileUnknown,
+                    message: `the cost gate could not price this eval: the costProfile of ${named} is unknown, so "${evalShape.id}" has no cost estimate`,
+                    path: ['evals', evalShape.id, 'target'],
+                    hint: 'add the model to src/catalog/models.json, or set models.<alias>.costProfile',
+                }));
+            }
+            continue;
+        }
+        if (estimate.budget === undefined || estimate.cost <= estimate.budget)
+            continue;
+        diagnostics.push(report.warn({
+            code: IR_DIAGNOSTIC_CODES.costBudgetExceeded,
+            message: `the cost gate flagged this eval: "${evalShape.id}" is estimated at ${estimate.cost.toFixed(6)} per run, above its declared budget of ${estimate.budget}`,
+            path: ['evals', evalShape.id, 'metrics'],
+            hint: 'raise the budget, shorten the prompt, or cap maxTokens',
+        }));
+    }
+    return { diagnostics, suppressed: SUPPRESSED };
+}
+/**
+ * The estimated per-run cost of one eval target: the sum over the models on the
+ * target's path of its prompt tokens and its bounded output tokens, plus the work the
+ * target's retrievers do.
+ */
+export function estimateEvalCost(ir, evalShape) {
+    const prompts = new Map(ir.prompts.map((prompt) => [prompt.id, prompt]));
+    const models = new Map(ir.models.map((model) => [model.id, model]));
+    const used = promptsForTarget(ir, evalShape, prompts);
+    const budget = evalShape.costBudget;
+    const estimates = new Map();
+    for (const prompt of used) {
+        const model = models.get(prompt.model);
+        if (model === undefined)
+            continue;
+        addEstimate(estimates, model, Math.ceil(prompt.template.length / CHARS_PER_TOKEN), model.params?.maxTokens ?? model.limits?.maxOutputTokens ?? DEFAULT_OUTPUT_TOKENS);
+    }
+    for (const part of retrievalParts(ir, evalShape, models)) {
+        addEstimate(estimates, part.model, part.inputTokens, 0);
+    }
+    const parts = [...estimates.values()].sort((left, right) => left.model < right.model ? -1 : left.model > right.model ? 1 : 0);
+    const inputTokens = parts.reduce((total, part) => total + part.inputTokens, 0);
+    const outputTokens = parts.reduce((total, part) => total + part.outputTokens, 0);
+    const priced = parts.every((part) => part.cost !== undefined);
+    const result = { inputTokens, outputTokens, models: parts };
+    if (priced) {
+        result.cost = parts.reduce((total, part) => total + (part.cost ?? 0), 0);
+    }
+    if (budget !== undefined)
+        result.budget = budget;
+    return result;
+}
+function addEstimate(estimates, model, inputTokens, outputTokens) {
+    const existing = estimates.get(model.id);
+    if (existing === undefined) {
+        estimates.set(model.id, {
+            model: model.id,
+            inputTokens,
+            outputTokens,
+            cost: priceRun(model, inputTokens, outputTokens),
+        });
+        return;
+    }
+    existing.inputTokens += inputTokens;
+    existing.outputTokens += outputTokens;
+    existing.cost = priceRun(model, existing.inputTokens, existing.outputTokens);
+}
+function priceRun(model, inputTokens, outputTokens) {
+    const profile = modelProfile(model);
+    if (profile === undefined)
+        return undefined;
+    return ((inputTokens / 1_000_000) * profile.inputPerMTok +
+        (outputTokens / 1_000_000) * profile.outputPerMTok);
+}
+function modelProfile(model) {
+    return model.costProfile ?? catalogCostProfile(model.modelId, model.costProfileId)?.profile;
+}
+/**
+ * The per-run work a target's retrievers do: a retriever materialises `topK` candidate
+ * chunks, and each chunk is `chunking.size` characters, so the candidate set is
+ * `topK * ceil(size / CHARS_PER_TOKEN)` tokens. Those tokens are charged to the
+ * retriever's embedding model -- the model that produces them -- and not again to the
+ * generation model, whose estimate prices its prompt template.
+ *
+ * A reranker is charged only when its model is *modelled*: a model the catalog prices,
+ * or one the spec gives a costProfile. Phase 1 ships a deterministic lexical reranker
+ * that costs nothing to run, so charging an unpriced reranker would fail a declared
+ * budget closed on a model that has no rate to exceed it.
+ */
+function retrievalParts(ir, evalShape, models) {
+    const parts = [];
+    for (const step of stepsForTarget(ir, evalShape)) {
+        if (step.kind !== 'retrieve')
+            continue;
+        const retriever = ir.retrievers.find((entry) => entry.id === step.retriever);
+        if (retriever === undefined)
+            continue;
+        const inputTokens = retriever.topK * Math.ceil(retriever.chunking.size / CHARS_PER_TOKEN);
+        const embedModel = models.get(retriever.embedModel);
+        if (embedModel !== undefined)
+            parts.push({ model: embedModel, inputTokens });
+        const rerankModel = retriever.rerank === undefined ? undefined : models.get(retriever.rerank.model);
+        if (rerankModel !== undefined && modelProfile(rerankModel) !== undefined) {
+            parts.push({ model: rerankModel, inputTokens });
+        }
+    }
+    return parts;
+}
+/** The steps of the pipeline an eval target names, or none for a prompt target. */
+function stepsForTarget(ir, evalShape) {
+    if (evalShape.target.kind === 'prompt')
+        return [];
+    const pipeline = ir.pipelines.find((entry) => entry.id === evalShape.target.id);
+    return pipeline === undefined ? [] : pipeline.steps;
+}
+function promptsForTarget(ir, evalShape, prompts) {
+    const found = [];
+    for (const step of stepsForTarget(ir, evalShape)) {
+        if (step.kind !== 'generate')
+            continue;
+        const prompt = prompts.get(step.prompt);
+        if (prompt !== undefined)
+            found.push(prompt);
+    }
+    return found;
+}
+//# sourceMappingURL=cost.js.map

package/dist/gates/cost.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cost.js","sourceRoot":"","sources":["../../src/gates/cost.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AACzD,OAAO,EAAE,mBAAmB,EAAqB,MAAM,mBAAmB,CAAC;AAE3E,OAAO,EAAqC,QAAQ,EAAwB,MAAM,eAAe,CAAC;AAElG,MAAM,UAAU,GAAsB,EAAE,CAAC;AAEzC,6FAA6F;AAC7F,MAAM,eAAe,GAAG,CAAC,CAAC;AAE1B,gFAAgF;AAChF,MAAM,qBAAqB,GAAG,GAAG,CAAC;AAqBlC,MAAM,UAAU,QAAQ,CAAC,EAAM,EAAE,OAAoB;IACnD,MAAM,WAAW,GAAmB,EAAE,CAAC;IACvC,MAAM,MAAM,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC;IAEjC,KAAK,MAAM,SAAS,IAAI,EAAE,CAAC,KAAK,EAAE,CAAC;QACjC,MAAM,QAAQ,GAAG,gBAAgB,CAAC,EAAE,EAAE,SAAS,CAAC,CAAC;QACjD,IAAI,QAAQ,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC;YAAE,SAAS;QAE3C,IAAI,QAAQ,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YAChC,MAAM,QAAQ,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC;YAC7E,MAAM,KAAK,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC9D,IAAI,QAAQ,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;gBAClC,WAAW,CAAC,IAAI,CACd,MAAM,CAAC,KAAK,CAAC;oBACX,IAAI,EAAE,mBAAmB,CAAC,kBAAkB;oBAC5C,OAAO,EAAE,sCAAsC,SAAS,CAAC,EAAE,0BAA0B,QAAQ,CAAC,MAAM,4BAA4B,KAAK,+CAA+C;oBACpL,IAAI,EAAE,CAAC,OAAO,EAAE,SAAS,CAAC,EAAE,EAAE,SAAS,CAAC;oBACxC,IAAI,EAAE,8FAA8F;iBACrG,CAAC,CACH,CAAC;YACJ,CAAC;iBAAM,CAAC;gBACN,WAAW,CAAC,IAAI,CACd,MAAM,CAAC,IAAI,CAAC;oBACV,IAAI,EAAE,mBAAmB,CAAC,kBAAkB;oBAC5C,OAAO,EAAE,+DAA+D,KAAK,oBAAoB,SAAS,CAAC,EAAE,wBAAwB;oBACrI,IAAI,EAAE,CAAC,OAAO,EAAE,SAAS,CAAC,EAAE,EAAE,QAAQ,CAAC;oBACvC,IAAI,EAAE,6EAA6E;iBACpF,CAAC,CACH,CAAC;YACJ,CAAC;YACD,SAAS;QACX,CAAC;QAED,IAAI,QAAQ,CAAC,MAAM,KAAK,SAAS,IAAI,QAAQ,CAAC,IAAI,IAAI,QAAQ,CAAC,MAAM;YAAE,SAAS;QAChF,WAAW,CAAC,IAAI,CACd,MAAM,CAAC,IAAI,CAAC;YACV,IAAI,EAAE,mBAAmB,CAAC,kBAAkB;YAC5C,OAAO,EAAE,qCAAqC,SAAS,CAAC,EAAE,qBAAqB,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,0CAA0C,QAAQ,CAAC,MAAM,EAAE;YAClK,IAAI,EAAE,CAAC,OAAO,EAAE,SAAS,CAAC,EAAE,EAAE,SAAS,CAAC;YACxC,IAAI,EAAE,wDAAwD;SAC/D,CAAC,CACH,CAAC;IACJ,CAAC;IAED,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,UAAU,EAAE,CAAC;AACjD,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,gBAAgB,CAAC,EAAM,EAAE,SAAoB;IAC3D,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;IACzE,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC;IACpE,MAAM,IAAI,GAAG,gBAAgB,CAAC,EAAE,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;IACtD,MAAM,MAAM,GAAG,SAAS,CAAC,UAAU,CAAC;IAEpC,MAAM,SAAS,GAAG,IAAI,GAAG,EAA6B,CAAC;IACvD,KAAK,MAAM,MAAM,IAAI,IAAI,EAAE,CAAC;QAC1B,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACvC,IAAI,KAAK,KAAK,SAAS;YAAE,SAAS;QAClC,WAAW,CACT,SAAS,EACT,KAAK,EACL,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,GAAG,eAAe,CAAC,EACnD,KAAK,CAAC,MAAM,EAAE,SAAS,IAAI,KAAK,CAAC,MAAM,EAAE,eAAe,IAAI,qBAAqB,CAClF,CAAC;IACJ,CAAC;IAED,KAAK,MAAM,IAAI,IAAI,cAAc,CAAC,EAAE,EAAE,SAAS,EAAE,MAAM,CAAC,EAAE,CAAC;QACzD,WAAW,CAAC,SAAS,EAAE,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;IAC1D,CAAC;IAED,MAAM,KAAK,GAAG,CAAC,GAAG,SAAS,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CACzD,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CACjE,CAAC;IACF,MAAM,WAAW,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,KAAK,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;IAC/E,MAAM,YAAY,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,KAAK,GAAG,IAAI,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC;IACjF,MAAM,MAAM,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC;IAC9D,MAAM,MAAM,GAAqB,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;IAC9E,IAAI,MAAM,EAAE,CAAC;QACX,MAAM,CAAC,IAAI,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,KAAK,GAAG,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAC3E,CAAC;IACD,IAAI,MAAM,KAAK,SAAS;QAAE,MAAM,CAAC,MAAM,GAAG,MAAM,CAAC;IACjD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,WAAW,CAClB,SAAyC,EACzC,KAAiB,EACjB,WAAmB,EACnB,YAAoB;IAEpB,MAAM,QAAQ,GAAG,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IACzC,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC3B,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,EAAE;YACtB,KAAK,EAAE,KAAK,CAAC,EAAE;YACf,WAAW;YACX,YAAY;YACZ,IAAI,EAAE,QAAQ,CAAC,KAAK,EAAE,WAAW,EAAE,YAAY,CAAC;SACjD,CAAC,CAAC;QACH,OAAO;IACT,CAAC;IACD,QAAQ,CAAC,WAAW,IAAI,WAAW,CAAC;IACpC,QAAQ,CAAC,YAAY,IAAI,YAAY,CAAC;IACtC,QAAQ,CAAC,IAAI,GAAG,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC,WAAW,EAAE,QAAQ,CAAC,YAAY,CAAC,CAAC;AAC/E,CAAC;AAED,SAAS,QAAQ,CACf,KAAiB,EACjB,WAAmB,EACnB,YAAoB;IAEpB,MAAM,OAAO,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC;IACpC,IAAI,OAAO,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC5C,OAAO,CACL,CAAC,WAAW,GAAG,SAAS,CAAC,GAAG,OAAO,CAAC,YAAY;QAChD,CAAC,YAAY,GAAG,SAAS,CAAC,GAAG,OAAO,CAAC,aAAa,CACnD,CAAC;AACJ,CAAC;AAED,SAAS,YAAY,CAAC,KAAiB;IACrC,OAAO,KAAK,CAAC,WAAW,IAAI,kBAAkB,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,aAAa,CAAC,EAAE,OAAO,CAAC;AAC9F,CAAC;AAQD;;;;;;;;;;;GAWG;AACH,SAAS,cAAc,CACrB,EAAM,EACN,SAAoB,EACpB,MAA+B;IAE/B,MAAM,KAAK,GAAoB,EAAE,CAAC;IAClC,KAAK,MAAM,IAAI,IAAI,cAAc,CAAC,EAAE,EAAE,SAAS,CAAC,EAAE,CAAC;QACjD,IAAI,IAAI,CAAC,IAAI,KAAK,UAAU;YAAE,SAAS;QACvC,MAAM,SAAS,GAAG,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,KAAK,IAAI,CAAC,SAAS,CAAC,CAAC;QAC7E,IAAI,SAAS,KAAK,SAAS;YAAE,SAAS;QACtC,MAAM,WAAW,GAAG,SAAS,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,GAAG,eAAe,CAAC,CAAC;QAC1F,MAAM,UAAU,GAAG,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;QACpD,IAAI,UAAU,KAAK,SAAS;YAAE,KAAK,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,UAAU,EAAE,WAAW,EAAE,CAAC,CAAC;QAC7E,MAAM,WAAW,GACf,SAAS,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAClF,IAAI,WAAW,KAAK,SAAS,IAAI,YAAY,CAAC,WAAW,CAAC,KAAK,SAAS,EAAE,CAAC;YACzE,KAAK,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,WAAW,EAAE,CAAC,CAAC;QAClD,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,mFAAmF;AACnF,SAAS,cAAc,CAAC,EAAM,EAAE,SAAoB;IAClD,IAAI,SAAS,CAAC,MAAM,CAAC,IAAI,KAAK,QAAQ;QAAE,OAAO,EAAE,CAAC;IAClD,MAAM,QAAQ,GAAG,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,KAAK,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IAChF,OAAO,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC;AACtD,CAAC;AAED,SAAS,gBAAgB,CACvB,EAAM,EACN,SAAoB,EACpB,OAAiC;IAEjC,MAAM,KAAK,GAAkB,EAAE,CAAC;IAChC,KAAK,MAAM,IAAI,IAAI,cAAc,CAAC,EAAE,EAAE,SAAS,CAAC,EAAE,CAAC;QACjD,IAAI,IAAI,CAAC,IAAI,KAAK,UAAU;YAAE,SAAS;QACvC,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACxC,IAAI,MAAM,KAAK,SAAS;YAAE,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC/C,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/gates/deploy.d.ts

@@ -0,0 +1,23 @@
+/**
+ * Deployment — one gate, `deploy/streaming`.
+ *
+ * A deployment that asks for streaming asks for something a target can only honour if
+ * it declares the capability. The Python `ModelGateway.stream()` produces SSE bytes
+ * (Phase 2 L5) and the py-fastapi generator now emits a `text/event-stream` branch on
+ * the pipeline route (P7a), so py-fastapi declares `streaming` and this gate passes for
+ * it. The TypeScript gateway still raises `FeatureDeferredError` (ratified L6), so the
+ * TypeScript target still declares nothing and still fails closed here.
+ *
+ * The decision is read from the injected declarations rather than hard-coded, which is
+ * what keeps the gate honest in both directions: it fails while a target has no
+ * streaming route, and it passes only once that target actually declares the capability
+ * -- declaring it is what removes the false declaration this layer exists to catch
+ * (defect D-1).
+ *
+ * The check covers every configured target: a project that generates for two targets
+ * and asks for streaming must not ship a deployment one of them silently cannot serve.
+ */
+import type { IR } from '../shapes.js';
+import { type GateOptions, type GateResult } from './contract.js';
+export declare function deployStreamingGate(ir: IR, options: GateOptions): GateResult;
+//# sourceMappingURL=deploy.d.ts.map

package/dist/gates/deploy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"deploy.d.ts","sourceRoot":"","sources":["../../src/gates/deploy.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAIH,OAAO,KAAK,EAAE,EAAE,EAAE,MAAM,cAAc,CAAC;AACvC,OAAO,EAAE,KAAK,WAAW,EAAE,KAAK,UAAU,EAA6B,MAAM,eAAe,CAAC;AAE7F,wBAAgB,mBAAmB,CAAC,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE,WAAW,GAAG,UAAU,CAuB5E"}

package/dist/gates/deploy.js

@@ -0,0 +1,44 @@
+/**
+ * Deployment — one gate, `deploy/streaming`.
+ *
+ * A deployment that asks for streaming asks for something a target can only honour if
+ * it declares the capability. The Python `ModelGateway.stream()` produces SSE bytes
+ * (Phase 2 L5) and the py-fastapi generator now emits a `text/event-stream` branch on
+ * the pipeline route (P7a), so py-fastapi declares `streaming` and this gate passes for
+ * it. The TypeScript gateway still raises `FeatureDeferredError` (ratified L6), so the
+ * TypeScript target still declares nothing and still fails closed here.
+ *
+ * The decision is read from the injected declarations rather than hard-coded, which is
+ * what keeps the gate honest in both directions: it fails while a target has no
+ * streaming route, and it passes only once that target actually declares the capability
+ * -- declaring it is what removes the false declaration this layer exists to catch
+ * (defect D-1).
+ *
+ * The check covers every configured target: a project that generates for two targets
+ * and asks for streaming must not ship a deployment one of them silently cannot serve.
+ */
+import { resolveRequiredCapability } from '../capabilities.js';
+import { IR_DIAGNOSTIC_CODES } from '../diagnostics.js';
+import { NO_SUPPRESSIONS, reporter } from './contract.js';
+export function deployStreamingGate(ir, options) {
+    const diagnostics = [];
+    const report = reporter(options);
+    for (const deployment of ir.deployments) {
+        if (!deployment.streaming)
+            continue;
+        const unable = ir.project.targets.filter((target) => {
+            const declared = options.targetCapabilities[target] ?? [];
+            return !declared.some((entry) => resolveRequiredCapability(entry) === 'streaming');
+        });
+        if (unable.length === 0)
+            continue;
+        diagnostics.push(report.error({
+            code: IR_DIAGNOSTIC_CODES.deployStreaming,
+            message: `the deploy gate rejected "${deployment.id}": it requests streaming, but ${unable.map((target) => `"${target}"`).join(', ')} ${unable.length === 1 ? 'does' : 'do'} not declare the "streaming" capability`,
+            path: ['deployments', deployment.id, 'streaming'],
+            hint: 'set streaming: false until a target implements it, or generate for a target that declares it',
+        }));
+    }
+    return { diagnostics, suppressed: NO_SUPPRESSIONS };
+}
+//# sourceMappingURL=deploy.js.map

package/dist/gates/deploy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"deploy.js","sourceRoot":"","sources":["../../src/gates/deploy.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,EAAE,yBAAyB,EAAE,MAAM,oBAAoB,CAAC;AAC/D,OAAO,EAAE,mBAAmB,EAAqB,MAAM,mBAAmB,CAAC;AAE3E,OAAO,EAAqC,eAAe,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAE7F,MAAM,UAAU,mBAAmB,CAAC,EAAM,EAAE,OAAoB;IAC9D,MAAM,WAAW,GAAmB,EAAE,CAAC;IACvC,MAAM,MAAM,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC;IAEjC,KAAK,MAAM,UAAU,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QACxC,IAAI,CAAC,UAAU,CAAC,SAAS;YAAE,SAAS;QACpC,MAAM,MAAM,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE;YAClD,MAAM,QAAQ,GAAG,OAAO,CAAC,kBAAkB,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;YAC1D,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,yBAAyB,CAAC,KAAK,CAAC,KAAK,WAAW,CAAC,CAAC;QACrF,CAAC,CAAC,CAAC;QACH,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;YAAE,SAAS;QAElC,WAAW,CAAC,IAAI,CACd,MAAM,CAAC,KAAK,CAAC;YACX,IAAI,EAAE,mBAAmB,CAAC,eAAe;YACzC,OAAO,EAAE,6BAA6B,UAAU,CAAC,EAAE,iCAAiC,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,MAAM,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,yCAAyC;YACpN,IAAI,EAAE,CAAC,aAAa,EAAE,UAAU,CAAC,EAAE,EAAE,WAAW,CAAC;YACjD,IAAI,EAAE,8FAA8F;SACrG,CAAC,CACH,CAAC;IACJ,CAAC;IAED,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,eAAe,EAAE,CAAC;AACtD,CAAC"}

package/dist/gates/eval-coverage.d.ts

@@ -0,0 +1,11 @@
+/**
+ * Gate 6 — eval coverage.
+ *
+ * A pipeline Phase 0 actually serves and that no CI-gating eval covers is a warning,
+ * not an error: a partially evaluated app is legitimate, a *silently* uncovered
+ * endpoint is not.
+ */
+import type { IR } from '../shapes.js';
+import { type GateOptions, type GateResult } from './contract.js';
+export declare function evalCoverageGate(ir: IR, options: GateOptions): GateResult;
+//# sourceMappingURL=eval-coverage.d.ts.map

package/dist/gates/eval-coverage.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"eval-coverage.d.ts","sourceRoot":"","sources":["../../src/gates/eval-coverage.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAGH,OAAO,KAAK,EAAE,EAAE,EAAE,MAAM,cAAc,CAAC;AACvC,OAAO,EAAE,KAAK,WAAW,EAAE,KAAK,UAAU,EAAkC,MAAM,eAAe,CAAC;AAMlG,wBAAgB,gBAAgB,CAAC,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE,WAAW,GAAG,UAAU,CAyBzE"}

package/dist/gates/eval-coverage.js

@@ -0,0 +1,50 @@
+/**
+ * Gate 6 — eval coverage.
+ *
+ * A pipeline Phase 0 actually serves and that no CI-gating eval covers is a warning,
+ * not an error: a partially evaluated app is legitimate, a *silently* uncovered
+ * endpoint is not.
+ */
+import { IR_DIAGNOSTIC_CODES } from '../diagnostics.js';
+import { reporter } from './contract.js';
+const SUPPRESSED = [];
+export function evalCoverageGate(ir, options) {
+    const diagnostics = [];
+    const report = reporter(options);
+    const covered = new Set(ir.evals
+        .filter((evalShape) => evalShape.gate.ci && evalShape.target.kind === 'pipeline')
+        .map((evalShape) => evalShape.target.id));
+    for (const pipeline of ir.pipelines) {
+        if (pipeline.trigger.kind !== 'http' || covered.has(pipeline.id))
+            continue;
+        diagnostics.push(report.warn({
+            code: IR_DIAGNOSTIC_CODES.evalUncovered,
+            message: `the eval-coverage gate flagged this pipeline: "${pipeline.id}" is served over HTTP but no eval with gate.ci: true targets it`,
+            path: ['pipelines', pipeline.id],
+            hint: `add an eval targeting "pipeline:${pipeline.id}" and set gate.ci: true`,
+        }));
+    }
+    checkRetrievalCoverage(ir, diagnostics, report);
+    return { diagnostics, suppressed: SUPPRESSED };
+}
+/**
+ * A retrieval surface with no retrieval metric is unmeasured: an `exact-match` eval says
+ * nothing about whether the right chunks were retrieved, because it only sees the answer
+ * that retrieval fed into. The rule is spec-wide rather than per-retriever because a
+ * `retrieval` metric names no retriever -- it asserts what a query should bring back.
+ */
+function checkRetrievalCoverage(ir, diagnostics, report) {
+    if (ir.retrievers.length === 0)
+        return;
+    const measured = ir.evals.some((evalShape) => evalShape.metrics.some((metric) => metric.kind === 'retrieval'));
+    if (measured)
+        return;
+    const names = ir.retrievers.map((retriever) => retriever.id).join(', ');
+    diagnostics.push(report.warn({
+        code: IR_DIAGNOSTIC_CODES.evalUncovered,
+        message: `the eval-coverage gate flagged this retrieval surface: the IR declares the retriever(s) ${names} but no eval carries a "retrieval" metric, so nothing measures what they retrieve`,
+        path: ['retrievers'],
+        hint: 'add an eval with a metric of kind "retrieval", and gate it in CI so the measurement runs',
+    }));
+}
+//# sourceMappingURL=eval-coverage.js.map

package/dist/gates/eval-coverage.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"eval-coverage.js","sourceRoot":"","sources":["../../src/gates/eval-coverage.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,mBAAmB,EAAqB,MAAM,mBAAmB,CAAC;AAE3E,OAAO,EAAqC,QAAQ,EAAwB,MAAM,eAAe,CAAC;AAElG,MAAM,UAAU,GAAsB,EAAE,CAAC;AAIzC,MAAM,UAAU,gBAAgB,CAAC,EAAM,EAAE,OAAoB;IAC3D,MAAM,WAAW,GAAmB,EAAE,CAAC;IACvC,MAAM,MAAM,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC;IAEjC,MAAM,OAAO,GAAG,IAAI,GAAG,CACrB,EAAE,CAAC,KAAK;SACL,MAAM,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,IAAI,SAAS,CAAC,MAAM,CAAC,IAAI,KAAK,UAAU,CAAC;SAChF,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC,CAC3C,CAAC;IAEF,KAAK,MAAM,QAAQ,IAAI,EAAE,CAAC,SAAS,EAAE,CAAC;QACpC,IAAI,QAAQ,CAAC,OAAO,CAAC,IAAI,KAAK,MAAM,IAAI,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;YAAE,SAAS;QAC3E,WAAW,CAAC,IAAI,CACd,MAAM,CAAC,IAAI,CAAC;YACV,IAAI,EAAE,mBAAmB,CAAC,aAAa;YACvC,OAAO,EAAE,kDAAkD,QAAQ,CAAC,EAAE,iEAAiE;YACvI,IAAI,EAAE,CAAC,WAAW,EAAE,QAAQ,CAAC,EAAE,CAAC;YAChC,IAAI,EAAE,mCAAmC,QAAQ,CAAC,EAAE,yBAAyB;SAC9E,CAAC,CACH,CAAC;IACJ,CAAC;IAED,sBAAsB,CAAC,EAAE,EAAE,WAAW,EAAE,MAAM,CAAC,CAAC;IAEhD,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,UAAU,EAAE,CAAC;AACjD,CAAC;AAED;;;;;GAKG;AACH,SAAS,sBAAsB,CAAC,EAAM,EAAE,WAA2B,EAAE,MAAgB;IACnF,IAAI,EAAE,CAAC,UAAU,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO;IACvC,MAAM,QAAQ,GAAG,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAC3C,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,WAAW,CAAC,CAChE,CAAC;IACF,IAAI,QAAQ;QAAE,OAAO;IACrB,MAAM,KAAK,GAAG,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACxE,WAAW,CAAC,IAAI,CACd,MAAM,CAAC,IAAI,CAAC;QACV,IAAI,EAAE,mBAAmB,CAAC,aAAa;QACvC,OAAO,EAAE,2FAA2F,KAAK,mFAAmF;QAC5L,IAAI,EAAE,CAAC,YAAY,CAAC;QACpB,IAAI,EAAE,0FAA0F;KACjG,CAAC,CACH,CAAC;AACJ,CAAC"}

package/dist/gates/guardrails.d.ts

@@ -0,0 +1,24 @@
+/**
+ * Guardrails — two gates.
+ *
+ * `guardrails/coverage`: a tool that writes or destroys must reach a guardrail stage
+ * that can inspect the call before it happens. The check is conditional on the IR
+ * declaring at least one guardrail, and that condition is reported as a suppressed
+ * check rather than left implicit. The suppression covers two different populations,
+ * and since v0.2 exists it is no longer accurate to describe them as one: a 0.1 spec
+ * predates the section and cannot opt in at all, while a 0.2 spec that declares none
+ * has made a choice. Neither can be enforced here, because no Phase 2 L1 runtime
+ * evaluates a policy — demanding the declaration would be unbuildable rather than
+ * fail-closed, and calling that "enforced" would be the same false assurance as
+ * suppressing it silently.
+ *
+ * `guardrails/policies`: the closed policy vocabulary is re-checked here because the IR
+ * is a published contract a non-TypeScript producer can write directly, plus the two
+ * rules the schema deliberately leaves to this layer — a `redact` action must name what
+ * it redacts, and a guardrail may only cover tools that exist.
+ */
+import { type IR } from '../shapes.js';
+import { type GateOptions, type GateResult } from './contract.js';
+export declare function guardrailCoverageGate(ir: IR, options: GateOptions): GateResult;
+export declare function guardrailPolicyGate(ir: IR, options: GateOptions): GateResult;
+//# sourceMappingURL=guardrails.d.ts.map

package/dist/gates/guardrails.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"guardrails.d.ts","sourceRoot":"","sources":["../../src/gates/guardrails.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAGH,OAAO,EAA0B,KAAK,EAAE,EAAyB,MAAM,cAAc,CAAC;AACtF,OAAO,EACL,KAAK,WAAW,EAChB,KAAK,UAAU,EAIhB,MAAM,eAAe,CAAC;AAUvB,wBAAgB,qBAAqB,CAAC,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE,WAAW,GAAG,UAAU,CAwB9E;AAED,wBAAgB,mBAAmB,CAAC,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE,WAAW,GAAG,UAAU,CAyE5E"}

package/dist/gates/guardrails.js

@@ -0,0 +1,112 @@
+/**
+ * Guardrails — two gates.
+ *
+ * `guardrails/coverage`: a tool that writes or destroys must reach a guardrail stage
+ * that can inspect the call before it happens. The check is conditional on the IR
+ * declaring at least one guardrail, and that condition is reported as a suppressed
+ * check rather than left implicit. The suppression covers two different populations,
+ * and since v0.2 exists it is no longer accurate to describe them as one: a 0.1 spec
+ * predates the section and cannot opt in at all, while a 0.2 spec that declares none
+ * has made a choice. Neither can be enforced here, because no Phase 2 L1 runtime
+ * evaluates a policy — demanding the declaration would be unbuildable rather than
+ * fail-closed, and calling that "enforced" would be the same false assurance as
+ * suppressing it silently.
+ *
+ * `guardrails/policies`: the closed policy vocabulary is re-checked here because the IR
+ * is a published contract a non-TypeScript producer can write directly, plus the two
+ * rules the schema deliberately leaves to this layer — a `redact` action must name what
+ * it redacts, and a guardrail may only cover tools that exist.
+ */
+import { IR_DIAGNOSTIC_CODES } from '../diagnostics.js';
+import { GUARDRAIL_POLICY_KINDS, isGuardrailPolicyKind } from '../shapes.js';
+import { NO_SUPPRESSIONS, reporter, } from './contract.js';
+const SUPPRESSED = [
+    {
+        check: 'guardrails/coverage-without-declaration',
+        reason: 'Whether a spec that declares no guardrail at all should still be required to add one is a decision for the guardrails engine layer (design §7.4): no Phase 2 L1 runtime evaluates a policy, so requiring a declaration here would protect nothing. It would also fail two different populations for different reasons — a 0.1 spec predates the section and cannot opt in at all, while a 0.2 spec that declares none has made a choice this layer cannot yet enforce. What this layer can decide — that a declared guardrail actually covers the side-effecting tools it exists for — is enforced below.',
+    },
+];
+export function guardrailCoverageGate(ir, options) {
+    const diagnostics = [];
+    const report = reporter(options);
+    if (ir.guardrails.length === 0)
+        return { diagnostics, suppressed: SUPPRESSED };
+    for (const tool of ir.tools) {
+        if (tool.sideEffects !== 'write' && tool.sideEffects !== 'destructive')
+            continue;
+        const covered = ir.guardrails.some((guardrail) => guardrail.stages.includes('tool-call') &&
+            (guardrail.tools.length === 0 || guardrail.tools.includes(tool.id)));
+        if (covered)
+            continue;
+        diagnostics.push(report.error({
+            code: IR_DIAGNOSTIC_CODES.guardrailCoverage,
+            message: `the guardrails gate rejected "${tool.id}": the tool has sideEffects "${tool.sideEffects}" but no declared guardrail covers it at the "tool-call" stage`,
+            path: ['tools', tool.id, 'sideEffects'],
+            hint: `add a guardrail with stages: [tool-call] whose tools list is empty or names "${tool.id}"`,
+        }));
+    }
+    return { diagnostics, suppressed: SUPPRESSED };
+}
+export function guardrailPolicyGate(ir, options) {
+    const diagnostics = [];
+    const report = reporter(options);
+    const tools = new Set(ir.tools.map((tool) => tool.id));
+    const prompts = new Set(ir.prompts.map((prompt) => prompt.id));
+    for (const guardrail of ir.guardrails) {
+        if (guardrail.stages.length === 0) {
+            diagnostics.push(report.error({
+                code: IR_DIAGNOSTIC_CODES.guardrailPolicy,
+                message: `the guardrails gate rejected "${guardrail.id}": it declares no stage, so no runtime could ever invoke it`,
+                path: ['guardrails', guardrail.id, 'stages'],
+                hint: 'name at least one of input, output, retrieval, tool-call',
+            }));
+        }
+        if (guardrail.policies.length === 0) {
+            diagnostics.push(report.error({
+                code: IR_DIAGNOSTIC_CODES.policyEmpty,
+                message: `the guardrails gate rejected "${guardrail.id}": it declares no policy, so there is nothing for the stage to evaluate`,
+                path: ['guardrails', guardrail.id, 'policies'],
+                hint: `name one of ${GUARDRAIL_POLICY_KINDS.join(', ')}`,
+            }));
+        }
+        guardrail.policies.forEach((policy, index) => {
+            if (isGuardrailPolicyKind(policy))
+                return;
+            diagnostics.push(report.error({
+                code: IR_DIAGNOSTIC_CODES.guardrailPolicy,
+                message: `the guardrails gate rejected "${guardrail.id}": policy "${policy}" is not in the closed vocabulary (${GUARDRAIL_POLICY_KINDS.join(', ')})`,
+                path: ['guardrails', guardrail.id, 'policies', index],
+                hint: 'name a policy the guardrails engine implements, or extend the vocabulary deliberately',
+            }));
+        });
+        if (guardrail.action === 'redact' && guardrail.redact.length === 0) {
+            diagnostics.push(report.error({
+                code: IR_DIAGNOSTIC_CODES.guardrailPolicy,
+                message: `the guardrails gate rejected "${guardrail.id}": action is "redact" but it names no field to redact, so the action cannot be executed or tested`,
+                path: ['guardrails', guardrail.id, 'redact'],
+                hint: 'list the field names the redaction removes',
+            }));
+        }
+        guardrail.tools.forEach((tool, index) => {
+            if (tools.has(tool))
+                return;
+            diagnostics.push(report.error({
+                code: IR_DIAGNOSTIC_CODES.guardrailPolicy,
+                message: `the guardrails gate rejected "${guardrail.id}": tools names "${tool}", which is not a declared tool`,
+                path: ['guardrails', guardrail.id, 'tools', index],
+                hint: `declared tools: ${[...tools].sort().join(', ') || 'none'}`,
+            }));
+        });
+        const fallback = guardrail.onFail.fallbackPrompt;
+        if (fallback !== undefined && !prompts.has(fallback)) {
+            diagnostics.push(report.error({
+                code: IR_DIAGNOSTIC_CODES.guardrailPolicy,
+                message: `the guardrails gate rejected "${guardrail.id}": onFail.fallbackPrompt names "${fallback}", which is not a declared prompt`,
+                path: ['guardrails', guardrail.id, 'onFail', 'fallbackPrompt'],
+                hint: `declared prompts: ${[...prompts].sort().join(', ') || 'none'}`,
+            }));
+        }
+    }
+    return { diagnostics, suppressed: NO_SUPPRESSIONS };
+}
+//# sourceMappingURL=guardrails.js.map

package/dist/gates/guardrails.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"guardrails.js","sourceRoot":"","sources":["../../src/gates/guardrails.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,EAAE,mBAAmB,EAAqB,MAAM,mBAAmB,CAAC;AAC3E,OAAO,EAAE,sBAAsB,EAAW,qBAAqB,EAAE,MAAM,cAAc,CAAC;AACtF,OAAO,EAGL,eAAe,EACf,QAAQ,GAET,MAAM,eAAe,CAAC;AAEvB,MAAM,UAAU,GAAsB;IACpC;QACE,KAAK,EAAE,yCAAyC;QAChD,MAAM,EACJ,2kBAA2kB;KAC9kB;CACF,CAAC;AAEF,MAAM,UAAU,qBAAqB,CAAC,EAAM,EAAE,OAAoB;IAChE,MAAM,WAAW,GAAmB,EAAE,CAAC;IACvC,MAAM,MAAM,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC;IACjC,IAAI,EAAE,CAAC,UAAU,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,UAAU,EAAE,CAAC;IAE/E,KAAK,MAAM,IAAI,IAAI,EAAE,CAAC,KAAK,EAAE,CAAC;QAC5B,IAAI,IAAI,CAAC,WAAW,KAAK,OAAO,IAAI,IAAI,CAAC,WAAW,KAAK,aAAa;YAAE,SAAS;QACjF,MAAM,OAAO,GAAG,EAAE,CAAC,UAAU,CAAC,IAAI,CAChC,CAAC,SAAS,EAAE,EAAE,CACZ,SAAS,CAAC,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC;YACtC,CAAC,SAAS,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,SAAS,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CACtE,CAAC;QACF,IAAI,OAAO;YAAE,SAAS;QACtB,WAAW,CAAC,IAAI,CACd,MAAM,CAAC,KAAK,CAAC;YACX,IAAI,EAAE,mBAAmB,CAAC,iBAAiB;YAC3C,OAAO,EAAE,iCAAiC,IAAI,CAAC,EAAE,gCAAgC,IAAI,CAAC,WAAW,gEAAgE;YACjK,IAAI,EAAE,CAAC,OAAO,EAAE,IAAI,CAAC,EAAE,EAAE,aAAa,CAAC;YACvC,IAAI,EAAE,gFAAgF,IAAI,CAAC,EAAE,GAAG;SACjG,CAAC,CACH,CAAC;IACJ,CAAC;IAED,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,UAAU,EAAE,CAAC;AACjD,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,EAAM,EAAE,OAAoB;IAC9D,MAAM,WAAW,GAAmB,EAAE,CAAC;IACvC,MAAM,MAAM,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC;IACjC,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;IACvD,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;IAE/D,KAAK,MAAM,SAAS,IAAI,EAAE,CAAC,UAAU,EAAE,CAAC;QACtC,IAAI,SAAS,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAClC,WAAW,CAAC,IAAI,CACd,MAAM,CAAC,KAAK,CAAC;gBACX,IAAI,EAAE,mBAAmB,CAAC,eAAe;gBACzC,OAAO,EAAE,iCAAiC,SAAS,CAAC,EAAE,6DAA6D;gBACnH,IAAI,EAAE,CAAC,YAAY,EAAE,SAAS,CAAC,EAAE,EAAE,QAAQ,CAAC;gBAC5C,IAAI,EAAE,0DAA0D;aACjE,CAAC,CACH,CAAC;QACJ,CAAC;QACD,IAAI,SAAS,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACpC,WAAW,CAAC,IAAI,CACd,MAAM,CAAC,KAAK,CAAC;gBACX,IAAI,EAAE,mBAAmB,CAAC,WAAW;gBACrC,OAAO,EAAE,iCAAiC,SAAS,CAAC,EAAE,yEAAyE;gBAC/H,IAAI,EAAE,CAAC,YAAY,EAAE,SAAS,CAAC,EAAE,EAAE,UAAU,CAAC;gBAC9C,IAAI,EAAE,eAAe,sBAAsB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;aACzD,CAAC,CACH,CAAC;QACJ,CAAC;QACD,SAAS,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE;YAC3C,IAAI,qBAAqB,CAAC,MAAM,CAAC;gBAAE,OAAO;YAC1C,WAAW,CAAC,IAAI,CACd,MAAM,CAAC,KAAK,CAAC;gBACX,IAAI,EAAE,mBAAmB,CAAC,eAAe;gBACzC,OAAO,EAAE,iCAAiC,SAAS,CAAC,EAAE,cAAc,MAAM,sCAAsC,sBAAsB,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG;gBACpJ,IAAI,EAAE,CAAC,YAAY,EAAE,SAAS,CAAC,EAAE,EAAE,UAAU,EAAE,KAAK,CAAC;gBACrD,IAAI,EAAE,uFAAuF;aAC9F,CAAC,CACH,CAAC;QACJ,CAAC,CAAC,CAAC;QACH,IAAI,SAAS,CAAC,MAAM,KAAK,QAAQ,IAAI,SAAS,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACnE,WAAW,CAAC,IAAI,CACd,MAAM,CAAC,KAAK,CAAC;gBACX,IAAI,EAAE,mBAAmB,CAAC,eAAe;gBACzC,OAAO,EAAE,iCAAiC,SAAS,CAAC,EAAE,mGAAmG;gBACzJ,IAAI,EAAE,CAAC,YAAY,EAAE,SAAS,CAAC,EAAE,EAAE,QAAQ,CAAC;gBAC5C,IAAI,EAAE,4CAA4C;aACnD,CAAC,CACH,CAAC;QACJ,CAAC;QACD,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE;YACtC,IAAI,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC;gBAAE,OAAO;YAC5B,WAAW,CAAC,IAAI,CACd,MAAM,CAAC,KAAK,CAAC;gBACX,IAAI,EAAE,mBAAmB,CAAC,eAAe;gBACzC,OAAO,EAAE,iCAAiC,SAAS,CAAC,EAAE,mBAAmB,IAAI,iCAAiC;gBAC9G,IAAI,EAAE,CAAC,YAAY,EAAE,SAAS,CAAC,EAAE,EAAE,OAAO,EAAE,KAAK,CAAC;gBAClD,IAAI,EAAE,mBAAmB,CAAC,GAAG,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,MAAM,EAAE;aAClE,CAAC,CACH,CAAC;QACJ,CAAC,CAAC,CAAC;QACH,MAAM,QAAQ,GAAG,SAAS,CAAC,MAAM,CAAC,cAAc,CAAC;QACjD,IAAI,QAAQ,KAAK,SAAS,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;YACrD,WAAW,CAAC,IAAI,CACd,MAAM,CAAC,KAAK,CAAC;gBACX,IAAI,EAAE,mBAAmB,CAAC,eAAe;gBACzC,OAAO,EAAE,iCAAiC,SAAS,CAAC,EAAE,mCAAmC,QAAQ,mCAAmC;gBACpI,IAAI,EAAE,CAAC,YAAY,EAAE,SAAS,CAAC,EAAE,EAAE,QAAQ,EAAE,gBAAgB,CAAC;gBAC9D,IAAI,EAAE,qBAAqB,CAAC,GAAG,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,MAAM,EAAE;aACtE,CAAC,CACH,CAAC;QACJ,CAAC;IACH,CAAC;IAED,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,eAAe,EAAE,CAAC;AACtD,CAAC"}

package/dist/gates/hitl.d.ts

@@ -0,0 +1,17 @@
+/**
+ * Human-in-the-loop — one gate.
+ *
+ * An agent that can reach a tool which writes or destroys has two acceptable states:
+ * it declares a HITL policy (so the run stops for a human), or every such tool
+ * declares `requiresConfirmation: true` (so the approval is attached to the tool
+ * itself, where it cannot be forgotten when a new agent is added). Anything else is a
+ * side effect reachable with nobody in the loop, which fails closed.
+ *
+ * The gate deliberately does not evaluate the HITL policy expression: that is the
+ * parser's job at build time and the runtime's job at run time. It checks presence,
+ * because absence is the failure this layer can decide.
+ */
+import type { IR } from '../shapes.js';
+import { type GateOptions, type GateResult } from './contract.js';
+export declare function hitlSideEffectGate(ir: IR, options: GateOptions): GateResult;
+//# sourceMappingURL=hitl.d.ts.map

package/dist/gates/hitl.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"hitl.d.ts","sourceRoot":"","sources":["../../src/gates/hitl.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAGH,OAAO,KAAK,EAAE,EAAE,EAAa,MAAM,cAAc,CAAC;AAClD,OAAO,EAAE,KAAK,WAAW,EAAE,KAAK,UAAU,EAA6B,MAAM,eAAe,CAAC;AAE7F,wBAAgB,kBAAkB,CAAC,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE,WAAW,GAAG,UAAU,CA0B3E"}

package/dist/gates/hitl.js

@@ -0,0 +1,40 @@
+/**
+ * Human-in-the-loop — one gate.
+ *
+ * An agent that can reach a tool which writes or destroys has two acceptable states:
+ * it declares a HITL policy (so the run stops for a human), or every such tool
+ * declares `requiresConfirmation: true` (so the approval is attached to the tool
+ * itself, where it cannot be forgotten when a new agent is added). Anything else is a
+ * side effect reachable with nobody in the loop, which fails closed.
+ *
+ * The gate deliberately does not evaluate the HITL policy expression: that is the
+ * parser's job at build time and the runtime's job at run time. It checks presence,
+ * because absence is the failure this layer can decide.
+ */
+import { IR_DIAGNOSTIC_CODES } from '../diagnostics.js';
+import { NO_SUPPRESSIONS, reporter } from './contract.js';
+export function hitlSideEffectGate(ir, options) {
+    const diagnostics = [];
+    const report = reporter(options);
+    const tools = new Map(ir.tools.map((tool) => [tool.id, tool]));
+    for (const agent of ir.agents) {
+        if (agent.humanInTheLoop !== undefined)
+            continue;
+        const ungranted = agent.tools
+            .map((id) => tools.get(id))
+            .filter((tool) => tool !== undefined)
+            .filter((tool) => tool.sideEffects === 'write' || tool.sideEffects === 'destructive')
+            .filter((tool) => !tool.requiresConfirmation);
+        if (ungranted.length === 0)
+            continue;
+        const names = ungranted.map((tool) => `"${tool.id}" (${tool.sideEffects})`).join(', ');
+        diagnostics.push(report.error({
+            code: IR_DIAGNOSTIC_CODES.hitlSideEffect,
+            message: `the HITL gate rejected "${agent.id}": it can call ${names}, which ${ungranted.length === 1 ? 'has' : 'have'} side effects, but it declares no humanInTheLoop policy and the tool does not require confirmation`,
+            path: ['agents', agent.id, 'humanInTheLoop'],
+            hint: 'declare humanInTheLoop, or set requiresConfirmation: true on the tool',
+        }));
+    }
+    return { diagnostics, suppressed: NO_SUPPRESSIONS };
+}
+//# sourceMappingURL=hitl.js.map

package/dist/gates/hitl.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hitl.js","sourceRoot":"","sources":["../../src/gates/hitl.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAE,mBAAmB,EAAqB,MAAM,mBAAmB,CAAC;AAE3E,OAAO,EAAqC,eAAe,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAE7F,MAAM,UAAU,kBAAkB,CAAC,EAAM,EAAE,OAAoB;IAC7D,MAAM,WAAW,GAAmB,EAAE,CAAC;IACvC,MAAM,MAAM,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC;IACjC,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;IAE/D,KAAK,MAAM,KAAK,IAAI,EAAE,CAAC,MAAM,EAAE,CAAC;QAC9B,IAAI,KAAK,CAAC,cAAc,KAAK,SAAS;YAAE,SAAS;QACjD,MAAM,SAAS,GAAG,KAAK,CAAC,KAAK;aAC1B,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;aAC1B,MAAM,CAAC,CAAC,IAAI,EAAqB,EAAE,CAAC,IAAI,KAAK,SAAS,CAAC;aACvD,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,WAAW,KAAK,OAAO,IAAI,IAAI,CAAC,WAAW,KAAK,aAAa,CAAC;aACpF,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;QAChD,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC;YAAE,SAAS;QAErC,MAAM,KAAK,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,IAAI,CAAC,EAAE,MAAM,IAAI,CAAC,WAAW,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACvF,WAAW,CAAC,IAAI,CACd,MAAM,CAAC,KAAK,CAAC;YACX,IAAI,EAAE,mBAAmB,CAAC,cAAc;YACxC,OAAO,EAAE,2BAA2B,KAAK,CAAC,EAAE,kBAAkB,KAAK,WAAW,SAAS,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,oGAAoG;YACzN,IAAI,EAAE,CAAC,QAAQ,EAAE,KAAK,CAAC,EAAE,EAAE,gBAAgB,CAAC;YAC5C,IAAI,EAAE,uEAAuE;SAC9E,CAAC,CACH,CAAC;IACJ,CAAC;IAED,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,eAAe,EAAE,CAAC;AACtD,CAAC"}

package/dist/gates/index.d.ts

@@ -0,0 +1,66 @@
+/**
+ * The build-time gates, run as one report.
+ *
+ * Error-severity diagnostics fail the build; warnings do not. Suppressed checks are
+ * merged alongside the diagnostics so a caller can always see what was *not* enforced.
+ *
+ * The nine gates Phase 2 L1 adds are named by the id the plan's P5 table gives them,
+ * because that id is what appears in mutation evidence and in a reviewer's search for
+ * "which gate stopped this". A gate whose name drifts from the plan is a gate nobody
+ * can find.
+ */
+import type { IrDiagnostic } from '../diagnostics.js';
+import type { IR } from '../shapes.js';
+import { agentsBudgetDegradeGate, agentsBudgetGate, agentsHandoffGate, agentsRefsGate } from './agents.js';
+import { capabilityGate } from './capability.js';
+import type { Gate, GateOptions, GateReporter, GateResult, SuppressedCheck } from './contract.js';
+import { costGate } from './cost.js';
+import { deployStreamingGate } from './deploy.js';
+import { evalCoverageGate } from './eval-coverage.js';
+import { guardrailCoverageGate, guardrailPolicyGate } from './guardrails.js';
+import { hitlSideEffectGate } from './hitl.js';
+import { memoryRefsGate } from './memory.js';
+import { normalizeGate } from './normalize.js';
+import { orchestrationDeepagentsGate } from './orchestration.js';
+import { referentialGate } from './referential.js';
+import { securityGate } from './security.js';
+export declare const GATES: {
+    readonly referential: typeof referentialGate;
+    readonly normalize: typeof normalizeGate;
+    readonly capability: typeof capabilityGate;
+    readonly cost: typeof costGate;
+    readonly security: typeof securityGate;
+    readonly 'eval-coverage': typeof evalCoverageGate;
+    readonly 'agents/refs-resolve': typeof agentsRefsGate;
+    readonly 'agents/handoff-cycles': typeof agentsHandoffGate;
+    readonly 'agents/budgets': typeof agentsBudgetGate;
+    readonly 'agents/budget-degrade': typeof agentsBudgetDegradeGate;
+    readonly 'guardrails/coverage': typeof guardrailCoverageGate;
+    readonly 'guardrails/policies': typeof guardrailPolicyGate;
+    readonly 'hitl/side-effects': typeof hitlSideEffectGate;
+    readonly 'memory/refs': typeof memoryRefsGate;
+    readonly 'deploy/streaming': typeof deployStreamingGate;
+    readonly 'orchestration/deepagents': typeof orchestrationDeepagentsGate;
+};
+export type GateName = keyof typeof GATES;
+export interface GateRunResult {
+    /** False when any gate emitted an error-severity diagnostic. */
+    ok: boolean;
+    diagnostics: IrDiagnostic[];
+    suppressed: SuppressedCheck[];
+    byGate: Record<GateName, GateResult>;
+}
+/**
+ * Runs every gate against the IR. The capability set the gates check is derived here
+ * from the IR's own content, so the value a generator consumes is the value that was
+ * checked rather than whatever the caller happened to pass in.
+ */
+export declare function runGates(ir: IR, options?: Partial<GateOptions>): GateRunResult;
+export { reporter } from './contract.js';
+export type { EvalCostEstimate, ModelCostEstimate } from './cost.js';
+export { estimateEvalCost } from './cost.js';
+export { diffPaths, isNormalized, normalize } from './normalize.js';
+export { policyAuthenticates } from './security.js';
+export type { Gate, GateName as GateId, GateOptions, GateReporter, GateResult, SuppressedCheck };
+export { agentsBudgetDegradeGate, agentsBudgetGate, agentsHandoffGate, agentsRefsGate, capabilityGate, costGate, deployStreamingGate, evalCoverageGate, GATES as GATE_REGISTRY, guardrailCoverageGate, guardrailPolicyGate, hitlSideEffectGate, memoryRefsGate, normalizeGate, orchestrationDeepagentsGate, referentialGate, securityGate, };
+//# sourceMappingURL=index.d.ts.map

package/dist/gates/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/gates/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAKH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AACtD,OAAO,KAAK,EAAE,EAAE,EAAE,MAAM,cAAc,CAAC;AACvC,OAAO,EACL,uBAAuB,EACvB,gBAAgB,EAChB,iBAAiB,EACjB,cAAc,EACf,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AACjD,OAAO,KAAK,EAAE,IAAI,EAAE,WAAW,EAAE,YAAY,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAClG,OAAO,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AACrC,OAAO,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAClD,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AACtD,OAAO,EAAE,qBAAqB,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAC;AAC7E,OAAO,EAAE,kBAAkB,EAAE,MAAM,WAAW,CAAC;AAC/C,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAC7C,OAAO,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAC/C,OAAO,EAAE,2BAA2B,EAAE,MAAM,oBAAoB,CAAC;AACjE,OAAO,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AACnD,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAE7C,eAAO,MAAM,KAAK;;;;;;;;;;;;;;;;;CAiBuB,CAAC;AAE1C,MAAM,MAAM,QAAQ,GAAG,MAAM,OAAO,KAAK,CAAC;AAE1C,MAAM,WAAW,aAAa;IAC5B,gEAAgE;IAChE,EAAE,EAAE,OAAO,CAAC;IACZ,WAAW,EAAE,YAAY,EAAE,CAAC;IAC5B,UAAU,EAAE,eAAe,EAAE,CAAC;IAC9B,MAAM,EAAE,MAAM,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;CACtC;AAED;;;;GAIG;AACH,wBAAgB,QAAQ,CAAC,EAAE,EAAE,EAAE,EAAE,OAAO,GAAE,OAAO,CAAC,WAAW,CAAM,GAAG,aAAa,CAwBlF;AAED,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AACzC,YAAY,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAC;AACrE,OAAO,EAAE,gBAAgB,EAAE,MAAM,WAAW,CAAC;AAC7C,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AACpE,OAAO,EAAE,mBAAmB,EAAE,MAAM,eAAe,CAAC;AACpD,YAAY,EAAE,IAAI,EAAE,QAAQ,IAAI,MAAM,EAAE,WAAW,EAAE,YAAY,EAAE,UAAU,EAAE,eAAe,EAAE,CAAC;AACjG,OAAO,EACL,uBAAuB,EACvB,gBAAgB,EAChB,iBAAiB,EACjB,cAAc,EACd,cAAc,EACd,QAAQ,EACR,mBAAmB,EACnB,gBAAgB,EAChB,KAAK,IAAI,aAAa,EACtB,qBAAqB,EACrB,mBAAmB,EACnB,kBAAkB,EAClB,cAAc,EACd,aAAa,EACb,2BAA2B,EAC3B,eAAe,EACf,YAAY,GACb,CAAC"}