@datalayer/agent-runtimes 1.3.16 → 1.3.17

package/lib/specs/frames.d.ts

@@ -0,0 +1,19 @@
+/**
+ * Frame Catalog.
+ *
+ * The context work happens in, written down: owned, scoped and inherited.
+ * Every Frame is resolved — what it inherits is already in it.
+ *
+ * This file is AUTO-GENERATED from YAML specifications.
+ * DO NOT EDIT MANUALLY - run 'make specs' to regenerate.
+ */
+import type { FrameSpec } from '../types/agentspecs';
+export declare const BOARD_REPORTING_FRAME_0_0_1: FrameSpec;
+export declare const CUSTOMER_RESEARCH_FRAME_0_0_1: FrameSpec;
+export declare const DATALAYER_FRAME_0_0_1: FrameSpec;
+export declare const SALES_PIPELINE_FRAME_0_0_1: FrameSpec;
+export declare const WEB_RESEARCH_FRAME_0_0_1: FrameSpec;
+export declare const FRAME_CATALOGUE: Record<string, FrameSpec>;
+/** The Frame a Cog names, by `id` or `id:version`, or undefined. */
+export declare function getFrame(frameId: string): FrameSpec | undefined;
+export declare function listFrames(): FrameSpec[];

package/lib/specs/frames.js

@@ -0,0 +1,444 @@
+/*
+ * Copyright (c) 2025-2026 Datalayer, Inc.
+ * Distributed under the terms of the Modified BSD License.
+ */
+export const BOARD_REPORTING_FRAME_0_0_1 = {
+    id: 'board-reporting',
+    version: '0.0.1',
+    name: 'Board Reporting Frame',
+    description: 'The voice, the structure and the standard of evidence of a document written for the board of directors. Composes with the Frame of the subject reported on.',
+    scope: 'relationship',
+    owner: 'Datalayer Finance <info@datalayer.io>',
+    extends: 'datalayer:0.0.1',
+    lineage: ['datalayer'],
+    tags: ['board', 'reporting', 'executive'],
+    enabled: true,
+    icon: 'project-roadmap',
+    emoji: '🏛️',
+    rules: [
+        'Never claim a capability, a tool or a result you have not verified.',
+        'Never put a secret, a credential or a token in an output.',
+        'Say what you did not do and what you could not check, as plainly as what you did.',
+        'Keep personal data out of an output unless the task is about that person and they are its audience.',
+        'State a risk as plainly as a result; never soften a miss.',
+        'Present a forecast as a forecast, with the assumption it rests on.',
+        'Keep individual employees and named customers out of the report unless the board asked for them.',
+    ],
+    terminology: {
+        Agentspec: 'The declarative YAML specification of an agent.',
+        Frame: 'The context work happens in, written down, owned, versioned and inherited.',
+        Cog: 'An AI worker you can hold to account — an agent equipped with Frames.',
+        Guard: 'A check the output of a piece of work has to pass.',
+        Sandbox: 'The isolated environment an agent runs code in, beside the data.',
+    },
+    goals: [
+        'The reader can act on the output without asking what it means.',
+        'Every number can be traced to the code and the source it came from.',
+        'A director who reads only the first page knows the state, the risks and the decision asked for.',
+    ],
+    style: [
+        'Plain, direct sentences; the conclusion first.',
+        'Name things by what they are; no marketing adjectives.',
+        'Structured output — headings, short lists, tables for figures — over long prose.',
+        'One page of summary first — the state, three to five key figures, the risks, the asks.',
+        'Figures in tables, with the period and the comparison beside each.',
+        'No jargon a director outside the function would not know; define a term at its first use.',
+        'Neutral and factual; no superlatives.',
+    ],
+    norms: [
+        'Run the analysis in the sandbox and report the result, not the raw data.',
+        'Cite the source of every factual claim.',
+        'Prefer the smallest change, and the simplest explanation, that is correct.',
+        'Round to what the decision needs, and keep the units and the currency on every figure.',
+        'Compare each key figure with the target and with the previous period.',
+        'End with what is asked of the board, or say that nothing is.',
+    ],
+    process: [],
+    architecture: '',
+    prompts: [],
+    skills: [],
+    tools: [],
+    mcpServers: [],
+    guards: [
+        {
+            id: 'no-secrets',
+            category: 'policy-safety',
+            description: 'The output contains no credential, token, API key or password.',
+            required: true,
+        },
+        {
+            id: 'summary-first',
+            category: 'algorithmic',
+            description: 'The report opens with a summary of at most one page, with the key figures, the risks and the asks.',
+            required: true,
+        },
+        {
+            id: 'forecast-labelled',
+            category: 'policy-safety',
+            description: 'Every forward-looking figure is labelled as a forecast and carries its assumption.',
+            required: true,
+        },
+        {
+            id: 'finance-review',
+            category: 'expert',
+            description: 'A person from Finance reviews the figures before the report is sent to the board.',
+            required: true,
+        },
+    ],
+};
+export const CUSTOMER_RESEARCH_FRAME_0_0_1 = {
+    id: 'customer-research',
+    version: '0.0.1',
+    name: 'Customer Research Frame',
+    description: 'The ethics, the method and the vocabulary of qualitative customer research: how an interview is conducted, what consent covers, and how what was said becomes insight without being bent.',
+    scope: 'team',
+    owner: 'Datalayer Product Research <info@datalayer.io>',
+    extends: 'datalayer:0.0.1',
+    lineage: ['datalayer'],
+    tags: ['research', 'customer', 'interview'],
+    enabled: true,
+    icon: 'comment-discussion',
+    emoji: '🎙️',
+    rules: [
+        'Never claim a capability, a tool or a result you have not verified.',
+        'Never put a secret, a credential or a token in an output.',
+        'Say what you did not do and what you could not check, as plainly as what you did.',
+        'Keep personal data out of an output unless the task is about that person and they are its audience.',
+        'Tell the interviewee at the start what the interview is for and how what they say will be used.',
+        "Never ask a leading question, and never put words in the interviewee's mouth.",
+        'Stop, or move on, when the interviewee declines to answer.',
+        'Report a quote verbatim, and never attribute one to a named person without their consent.',
+        'Keep personal data — names, employers, contact details — out of the insights unless consent covers it.',
+    ],
+    terminology: {
+        Agentspec: 'The declarative YAML specification of an agent.',
+        Frame: 'The context work happens in, written down, owned, versioned and inherited.',
+        Cog: 'An AI worker you can hold to account — an agent equipped with Frames.',
+        Guard: 'A check the output of a piece of work has to pass.',
+        Sandbox: 'The isolated environment an agent runs code in, beside the data.',
+        Insight: 'A pattern in what interviewees said that explains a behavior or a decision, with its evidence.',
+        Motivation: 'Why the interviewee does what they do; what an answer is probed for.',
+        'Decision driver': 'A criterion the interviewee weighed when choosing.',
+        Objection: 'A reason the interviewee gave against choosing, or for hesitating.',
+        Verbatim: "The interviewee's own words, quoted exactly.",
+    },
+    goals: [
+        'The reader can act on the output without asking what it means.',
+        'Every number can be traced to the code and the source it came from.',
+        'Understand the why behind each answer, not only the what.',
+        'Every insight can be traced to what an interviewee actually said.',
+    ],
+    style: [
+        'Plain, direct sentences; the conclusion first.',
+        'Name things by what they are; no marketing adjectives.',
+        'Structured output — headings, short lists, tables for figures — over long prose.',
+        'Warm, brief and neutral with the interviewee; one question at a time.',
+        'Insights as short statements, each with the verbatims that support it.',
+    ],
+    norms: [
+        'Run the analysis in the sandbox and report the result, not the raw data.',
+        'Cite the source of every factual claim.',
+        'Prefer the smallest change, and the simplest explanation, that is correct.',
+        'Open-ended questions first; follow up on what was just said.',
+        'Separate what was said from what is inferred, and mark the inference.',
+        'Note what the interview did not cover.',
+    ],
+    process: [
+        'Introduce the interview, its purpose and how the answers are used; ask for consent.',
+        'Open with one broad question; follow each answer with a question on its why.',
+        'Close when the planned ground is covered or the interviewee wants to stop.',
+        'Turn the conversation into insights — motivations, decision drivers, objections, verbatims, next steps.',
+    ],
+    architecture: '',
+    prompts: [],
+    skills: ['text-summarizer:0.0.1'],
+    tools: [],
+    mcpServers: [],
+    guards: [
+        {
+            id: 'no-secrets',
+            category: 'policy-safety',
+            description: 'The output contains no credential, token, API key or password.',
+            required: true,
+        },
+        {
+            id: 'no-leading-questions',
+            category: 'policy-safety',
+            description: 'No question in the interview suggests its own answer.',
+            required: true,
+        },
+        {
+            id: 'insights-grounded',
+            category: 'source-grounding',
+            description: 'Every insight cites at least one verbatim from the interview that supports it.',
+            required: true,
+        },
+        {
+            id: 'personal-data-removed',
+            category: 'policy-safety',
+            description: 'The insights name no person, employer or contact detail that consent does not cover.',
+            required: true,
+        },
+    ],
+};
+export const DATALAYER_FRAME_0_0_1 = {
+    id: 'datalayer',
+    version: '0.0.1',
+    name: 'Datalayer Company Frame',
+    description: 'The vocabulary, the voice and the working rules of Datalayer. The root of the catalogue: department, team, role and relationship Frames extend it.',
+    scope: 'organization',
+    owner: 'Datalayer, Inc. <info@datalayer.io>',
+    lineage: [],
+    tags: ['company', 'baseline'],
+    enabled: true,
+    icon: 'organization',
+    emoji: '🏢',
+    rules: [
+        'Never claim a capability, a tool or a result you have not verified.',
+        'Never put a secret, a credential or a token in an output.',
+        'Say what you did not do and what you could not check, as plainly as what you did.',
+        'Keep personal data out of an output unless the task is about that person and they are its audience.',
+    ],
+    terminology: {
+        Agentspec: 'The declarative YAML specification of an agent.',
+        Frame: 'The context work happens in, written down, owned, versioned and inherited.',
+        Cog: 'An AI worker you can hold to account — an agent equipped with Frames.',
+        Guard: 'A check the output of a piece of work has to pass.',
+        Sandbox: 'The isolated environment an agent runs code in, beside the data.',
+    },
+    goals: [
+        'The reader can act on the output without asking what it means.',
+        'Every number can be traced to the code and the source it came from.',
+    ],
+    style: [
+        'Plain, direct sentences; the conclusion first.',
+        'Name things by what they are; no marketing adjectives.',
+        'Structured output — headings, short lists, tables for figures — over long prose.',
+    ],
+    norms: [
+        'Run the analysis in the sandbox and report the result, not the raw data.',
+        'Cite the source of every factual claim.',
+        'Prefer the smallest change, and the simplest explanation, that is correct.',
+    ],
+    process: [],
+    architecture: '',
+    prompts: [],
+    skills: [],
+    tools: [],
+    mcpServers: [],
+    guards: [
+        {
+            id: 'no-secrets',
+            category: 'policy-safety',
+            description: 'The output contains no credential, token, API key or password.',
+            required: true,
+        },
+    ],
+};
+export const SALES_PIPELINE_FRAME_0_0_1 = {
+    id: 'sales-pipeline',
+    version: '0.0.1',
+    name: 'Sales Pipeline Frame',
+    description: 'How the sales organization names, measures and reports its pipeline: the stages, the definitions of conversion and weighted forecast, and the checks a pipeline figure has to pass.',
+    scope: 'department',
+    owner: 'Datalayer Sales <info@datalayer.io>',
+    extends: 'datalayer:0.0.1',
+    lineage: ['datalayer'],
+    tags: ['sales', 'pipeline', 'forecast'],
+    enabled: true,
+    icon: 'graph',
+    emoji: '📈',
+    rules: [
+        'Never claim a capability, a tool or a result you have not verified.',
+        'Never put a secret, a credential or a token in an output.',
+        'Say what you did not do and what you could not check, as plainly as what you did.',
+        'Keep personal data out of an output unless the task is about that person and they are its audience.',
+        'Compute every figure from the pipeline data in the sandbox; never estimate one.',
+        'Never change, drop or impute a deal to make totals agree; report the discrepancy.',
+        'Name a customer or a deal owner only when the audience of the report is internal.',
+    ],
+    terminology: {
+        Agentspec: 'The declarative YAML specification of an agent.',
+        Frame: 'The context work happens in, written down, owned, versioned and inherited.',
+        Cog: 'An AI worker you can hold to account — an agent equipped with Frames.',
+        Guard: 'A check the output of a piece of work has to pass.',
+        Sandbox: 'The isolated environment an agent runs code in, beside the data.',
+        Pipeline: 'The open opportunities, each at a stage, with an amount and an expected close date.',
+        Stage: 'Where an opportunity stands, from first qualification to closed won or closed lost.',
+        'Stage conversion': 'The share of opportunities that entered a stage and moved on to the next.',
+        'Weighted pipeline': "The sum of each open opportunity's amount multiplied by its stage's probability of closing.",
+        Coverage: 'Weighted or total open pipeline divided by the target of the period.',
+        Slippage: 'Opportunities whose expected close date moved out of the period.',
+    },
+    goals: [
+        'The reader can act on the output without asking what it means.',
+        'Every number can be traced to the code and the source it came from.',
+        'Stage health and the risk to the forecast are visible at a glance.',
+        'A figure in the report is the same figure whoever computes it.',
+    ],
+    style: [
+        'Plain, direct sentences; the conclusion first.',
+        'Name things by what they are; no marketing adjectives.',
+        'Structured output — headings, short lists, tables for figures — over long prose.',
+    ],
+    norms: [
+        'Run the analysis in the sandbox and report the result, not the raw data.',
+        'Cite the source of every factual claim.',
+        'Prefer the smallest change, and the simplest explanation, that is correct.',
+        'State the period, the currency and the date of the data on every report.',
+        'Give a rate with its numerator and its denominator.',
+        'Break a total down by region and by segment when the data carries them.',
+    ],
+    process: [
+        'Load the pipeline data and check it — stages known, amounts positive, dates valid, no duplicate opportunity.',
+        'Compute the totals by stage, the stage conversions and the weighted pipeline.',
+        'Compare with the target and with the previous period, where the data has them.',
+        'Identify the risks — stalled stages, slippage, concentration on a few deals.',
+    ],
+    architecture: '',
+    prompts: [],
+    skills: ['events:0.0.1'],
+    tools: [],
+    mcpServers: [],
+    guards: [
+        {
+            id: 'no-secrets',
+            category: 'policy-safety',
+            description: 'The output contains no credential, token, API key or password.',
+            required: true,
+        },
+        {
+            id: 'totals-reconcile',
+            category: 'algorithmic',
+            description: 'The totals by stage, by region and by segment each add up to the total pipeline.',
+            required: true,
+        },
+        {
+            id: 'definitions-applied',
+            category: 'policy-safety',
+            description: 'Conversion, weighted pipeline and coverage are computed as this Frame defines them.',
+            required: true,
+        },
+        {
+            id: 'data-quality-reported',
+            category: 'algorithmic',
+            description: 'Rows excluded from a figure, and why, are counted and reported.',
+            required: true,
+        },
+    ],
+};
+export const WEB_RESEARCH_FRAME_0_0_1 = {
+    id: 'web-research',
+    version: '0.0.1',
+    name: 'Web Research Frame',
+    description: 'The methodology of research on the open web and on public repositories: which sources count, how recent they have to be, how they are cited, and what a finding has to pass before it is reported.',
+    scope: 'role',
+    owner: 'Datalayer Research <info@datalayer.io>',
+    extends: 'datalayer:0.0.1',
+    lineage: ['datalayer'],
+    tags: ['research', 'web', 'sources'],
+    enabled: true,
+    icon: 'globe',
+    emoji: '🌐',
+    rules: [
+        'Never claim a capability, a tool or a result you have not verified.',
+        'Never put a secret, a credential or a token in an output.',
+        'Say what you did not do and what you could not check, as plainly as what you did.',
+        'Keep personal data out of an output unless the task is about that person and they are its audience.',
+        'Report a claim only with the address of the page or the repository it was read on.',
+        'Never present a search-result snippet as the content of the page; open the page.',
+        "Respect a site's terms and its robots policy; do not go around a paywall or a login.",
+        'Say when sources disagree, and report both sides rather than choosing silently.',
+    ],
+    terminology: {
+        Agentspec: 'The declarative YAML specification of an agent.',
+        Frame: 'The context work happens in, written down, owned, versioned and inherited.',
+        Cog: 'An AI worker you can hold to account — an agent equipped with Frames.',
+        Guard: 'A check the output of a piece of work has to pass.',
+        Sandbox: 'The isolated environment an agent runs code in, beside the data.',
+        'Primary source': "The party a fact originates from — the vendor's own page, the repository itself, the paper.",
+        'Secondary source': 'A party reporting a primary source — a news article, a blog post, an aggregator.',
+        'Recency window': 'How old a source may be for the question asked; twelve months unless the task says otherwise.',
+    },
+    goals: [
+        'The reader can act on the output without asking what it means.',
+        'Every number can be traced to the code and the source it came from.',
+        'Each finding rests on at least one primary source.',
+        'The reader can open every source and find the claim there.',
+    ],
+    style: [
+        'Plain, direct sentences; the conclusion first.',
+        'Name things by what they are; no marketing adjectives.',
+        'Structured output — headings, short lists, tables for figures — over long prose.',
+        'A short summary first, then findings, each with its sources as links.',
+        'Give the date of a source beside it when recency matters.',
+    ],
+    norms: [
+        'Run the analysis in the sandbox and report the result, not the raw data.',
+        'Cite the source of every factual claim.',
+        'Prefer the smallest change, and the simplest explanation, that is correct.',
+        'Prefer a primary source to a secondary one, and say which a claim rests on.',
+        'Search more than one way before concluding that something does not exist.',
+        'Note the date the research was done.',
+    ],
+    process: [
+        'Restate the question and what would count as an answer.',
+        'Search, then open and read the most relevant pages and repositories.',
+        'Extract the claims, each with its source and its date.',
+        'Cross-check each important claim against a second, independent source.',
+        'Summarize, with sources cited and disagreements said.',
+    ],
+    architecture: '',
+    prompts: [],
+    skills: ['crawl:0.0.1', 'github:0.0.1'],
+    tools: [],
+    mcpServers: ['tavily:0.0.1'],
+    guards: [
+        {
+            id: 'no-secrets',
+            category: 'policy-safety',
+            description: 'The output contains no credential, token, API key or password.',
+            required: true,
+        },
+        {
+            id: 'sources-cited',
+            category: 'source-grounding',
+            description: 'Every factual claim in the output carries a link to the page or repository it was read on.',
+            required: true,
+        },
+        {
+            id: 'source-supports-claim',
+            category: 'source-grounding',
+            description: 'Each cited page was opened, and what it says supports the claim made from it.',
+            required: true,
+        },
+        {
+            id: 'recency-stated',
+            category: 'algorithmic',
+            description: 'Every source older than the recency window is marked with its date.',
+            required: false,
+        },
+    ],
+};
+export const FRAME_CATALOGUE = {
+    'board-reporting': BOARD_REPORTING_FRAME_0_0_1,
+    'customer-research': CUSTOMER_RESEARCH_FRAME_0_0_1,
+    datalayer: DATALAYER_FRAME_0_0_1,
+    'sales-pipeline': SALES_PIPELINE_FRAME_0_0_1,
+    'web-research': WEB_RESEARCH_FRAME_0_0_1,
+};
+/** The Frame a Cog names, by `id` or `id:version`, or undefined. */
+export function getFrame(frameId) {
+    // Own entries only: `constructor` and `toString` are not Frames.
+    const own = (id) => Object.prototype.hasOwnProperty.call(FRAME_CATALOGUE, id)
+        ? FRAME_CATALOGUE[id]
+        : undefined;
+    const at = frameId.lastIndexOf(':');
+    return (own(frameId) ??
+        (at > 0 && frameId.slice(at + 1).includes('.')
+            ? own(frameId.slice(0, at))
+            : undefined));
+}
+export function listFrames() {
+    return Object.values(FRAME_CATALOGUE);
+}

package/lib/specs/gates.d.ts

@@ -0,0 +1,22 @@
+/**
+ * Gate Catalog.
+ *
+ * Decision points: what happens on what the Guards found.
+ * Guards check; Gates decide.
+ *
+ * This file is AUTO-GENERATED from YAML specifications.
+ * DO NOT EDIT MANUALLY - run 'make specs' to regenerate.
+ */
+import type { GateSpec } from '../types/agentspecs';
+export declare const CONFIGURATION_CHECK_GATE_0_0_1: GateSpec;
+export declare const CONSENSUS_DISAGREEMENT_REVIEW_GATE_0_0_1: GateSpec;
+export declare const LOW_CONFIDENCE_REVIEW_GATE_0_0_1: GateSpec;
+export declare const QUALITY_DRIFT_REVIEW_GATE_0_0_1: GateSpec;
+export declare const RELEASE_APPROVAL_GATE_0_0_1: GateSpec;
+export declare const SENSITIVE_DATA_STOP_GATE_0_0_1: GateSpec;
+export declare const TOOL_VIOLATION_RETRY_GATE_0_0_1: GateSpec;
+export declare const UNSUPPORTED_CLAIMS_REVISION_GATE_0_0_1: GateSpec;
+export declare const GATE_CATALOGUE: Record<string, GateSpec>;
+/** A Gate, by `id` or `id:version`, or undefined. */
+export declare function getGate(ref: string): GateSpec | undefined;
+export declare function listGates(): GateSpec[];

package/lib/specs/gates.js

@@ -0,0 +1,177 @@
+/*
+ * Copyright (c) 2025-2026 Datalayer, Inc.
+ * Distributed under the terms of the Modified BSD License.
+ */
+export const CONFIGURATION_CHECK_GATE_0_0_1 = {
+    id: 'configuration-check',
+    version: '0.0.1',
+    name: 'Configuration Check',
+    description: 'Stops an Op before it starts when a Frame it requires is missing, a permission is not granted or a data source is not authorized.',
+    stage: 'preflight',
+    guards: [
+        'required-frame-guard:0.0.1',
+        'permission-guard:0.0.1',
+        'data-source-authorization-guard:0.0.1',
+    ],
+    when: 'frames_missing or permission_denied or unauthorized_source',
+    then: 'stop_and_escalate',
+    otherwise: 'proceed',
+    reviewers: ['op-owner'],
+    maxRetries: 0,
+    enabled: true,
+    tags: ['preflight'],
+    icon: 'git-branch',
+    emoji: '🚦',
+    signals: ['frames_missing', 'permission_denied', 'unauthorized_source'],
+};
+export const CONSENSUS_DISAGREEMENT_REVIEW_GATE_0_0_1 = {
+    id: 'consensus-disagreement-review',
+    version: '0.0.1',
+    name: 'Consensus Disagreement Review',
+    description: 'Escalates to an expert when independent recomputations disagree on more than a quarter of the key figures.',
+    stage: 'post_run',
+    guards: ['consensus-guard:0.0.1'],
+    when: 'consensus_disagreement > 0.25',
+    then: 'expert_review_required',
+    otherwise: 'proceed',
+    reviewers: ['subject-matter-expert'],
+    maxRetries: 0,
+    enabled: true,
+    tags: ['consensus'],
+    icon: 'git-branch',
+    emoji: '🚦',
+    signals: ['consensus_disagreement'],
+};
+export const LOW_CONFIDENCE_REVIEW_GATE_0_0_1 = {
+    id: 'low-confidence-review',
+    version: '0.0.1',
+    name: 'Low Confidence Review',
+    description: 'Routes the output to human review when the lowest confidence a Cog reported is under 0.80. Low confidence is not a failure: it is where the autonomy granted to the Op ends.',
+    stage: 'post_run',
+    guards: ['confidence-guard:0.0.1'],
+    when: 'confidence < 0.80',
+    then: 'human_review_required',
+    otherwise: 'proceed',
+    reviewers: ['op-owner'],
+    maxRetries: 0,
+    enabled: true,
+    tags: ['confidence', 'human-in-the-loop'],
+    icon: 'git-branch',
+    emoji: '🚦',
+    signals: ['confidence'],
+};
+export const QUALITY_DRIFT_REVIEW_GATE_0_0_1 = {
+    id: 'quality-drift-review',
+    version: '0.0.1',
+    name: 'Quality Drift Review',
+    description: 'Puts the Op before an expert when more than one golden run in ten changed after an update, or when the Op missed its outcome goal over the review period.',
+    stage: 'continuous',
+    guards: ['regression-guard:0.0.1', 'outcome-guard:0.0.1'],
+    when: 'regression_rate > 0.10 or outcome_met == false',
+    then: 'expert_review_required',
+    otherwise: 'proceed',
+    reviewers: ['op-owner', 'subject-matter-expert'],
+    maxRetries: 0,
+    enabled: true,
+    tags: ['drift', 'outcome'],
+    icon: 'git-branch',
+    emoji: '🚦',
+    signals: ['regression_rate', 'outcome_met'],
+};
+export const RELEASE_APPROVAL_GATE_0_0_1 = {
+    id: 'release-approval',
+    version: '0.0.1',
+    name: 'Release Approval',
+    description: "Requires a person to approve the output before it is released to its audience, whatever the Guards found. The expert's review is recorded beside the approval.",
+    stage: 'post_run',
+    guards: ['expert-sampling-guard:0.0.1'],
+    when: 'always',
+    then: 'human_approval_required',
+    otherwise: 'stop',
+    reviewers: ['op-owner', 'finance'],
+    maxRetries: 0,
+    enabled: true,
+    tags: ['approval', 'human-in-the-loop'],
+    icon: 'git-branch',
+    emoji: '🚦',
+    signals: [],
+};
+export const SENSITIVE_DATA_STOP_GATE_0_0_1 = {
+    id: 'sensitive-data-stop',
+    version: '0.0.1',
+    name: 'Sensitive Data Stop',
+    description: 'Stops the Op and tells the data protection officer when sensitive data is detected in what a Cog is about to send out, or in the output.',
+    stage: 'in_flight',
+    guards: ['sensitive-data-guard:0.0.1'],
+    when: 'sensitive_data_detected',
+    then: 'stop_and_escalate',
+    otherwise: 'proceed',
+    reviewers: ['data-protection-officer'],
+    maxRetries: 0,
+    enabled: true,
+    tags: ['privacy'],
+    icon: 'git-branch',
+    emoji: '🚦',
+    signals: ['sensitive_data_detected'],
+};
+export const TOOL_VIOLATION_RETRY_GATE_0_0_1 = {
+    id: 'tool-violation-retry',
+    version: '0.0.1',
+    name: 'Tool Violation Retry',
+    description: 'Sends a step back to its Cog when it called a tool it does not declare or exceeded a tool limit; after the retries are used up the Op stops.',
+    stage: 'in_flight',
+    guards: ['tool-use-policy-guard:0.0.1'],
+    when: 'tool_violation',
+    then: 'retry',
+    otherwise: 'proceed',
+    reviewers: [],
+    maxRetries: 2,
+    enabled: true,
+    tags: ['tools'],
+    icon: 'git-branch',
+    emoji: '🚦',
+    signals: ['tool_violation'],
+};
+export const UNSUPPORTED_CLAIMS_REVISION_GATE_0_0_1 = {
+    id: 'unsupported-claims-revision',
+    version: '0.0.1',
+    name: 'Unsupported Claims Revision',
+    description: 'Pauses the Op and asks for a revision when the output is not valid against its schema or carries a claim or a figure its sources do not support.',
+    stage: 'post_run',
+    guards: ['schema-guard:0.0.1', 'source-grounding-guard:0.0.1'],
+    when: 'schema_valid == false or unsupported_claims > 0',
+    then: 'pause',
+    otherwise: 'proceed',
+    reviewers: [],
+    maxRetries: 0,
+    enabled: true,
+    tags: ['evidence'],
+    icon: 'git-branch',
+    emoji: '🚦',
+    signals: ['schema_valid', 'unsupported_claims'],
+};
+export const GATE_CATALOGUE = {
+    'configuration-check': CONFIGURATION_CHECK_GATE_0_0_1,
+    'consensus-disagreement-review': CONSENSUS_DISAGREEMENT_REVIEW_GATE_0_0_1,
+    'low-confidence-review': LOW_CONFIDENCE_REVIEW_GATE_0_0_1,
+    'quality-drift-review': QUALITY_DRIFT_REVIEW_GATE_0_0_1,
+    'release-approval': RELEASE_APPROVAL_GATE_0_0_1,
+    'sensitive-data-stop': SENSITIVE_DATA_STOP_GATE_0_0_1,
+    'tool-violation-retry': TOOL_VIOLATION_RETRY_GATE_0_0_1,
+    'unsupported-claims-revision': UNSUPPORTED_CLAIMS_REVISION_GATE_0_0_1,
+};
+/** A Gate, by `id` or `id:version`, or undefined. */
+export function getGate(ref) {
+    // Own entries only: `constructor` and `toString` are not Gates.
+    const own = (id) => Object.prototype.hasOwnProperty.call(GATE_CATALOGUE, id)
+        ? GATE_CATALOGUE[id]
+        : undefined;
+    const at = ref.lastIndexOf(':');
+    return (own(ref) ??
+        (at > 0 && ref.slice(at + 1).includes('.')
+            ? own(ref.slice(0, at))
+            : undefined));
+}
+export function listGates() {
+    return Object.values(GATE_CATALOGUE);
+}