@integrity-labs/agt-cli 0.28.1003 → 0.28.1004

package/dist/{chunk-CXU7NLNR.js → chunk-HHBAQ6ZV.js}

@@ -23,7 +23,7 @@ import {
   rotateDailySession,
   sessionFileExists,
   todayLocalIso
-} from "./chunk-BMDLKZHZ.js";
+} from "./chunk-532V7ZSC.js";
 import {
   classifyUnanswerablePane,
   findUsageLimitResetHint,
@@ -5776,4 +5776,4 @@ export {
   stopAllSessionsAndWait,
   getProjectDir
 };
-//# sourceMappingURL=chunk-CXU7NLNR.js.map
+//# sourceMappingURL=chunk-HHBAQ6ZV.js.map

package/dist/{chunk-PU5DFL6O.js → chunk-N4PG4TAD.js}

@@ -15,7 +15,7 @@ import {
   parseEnvFileEntries,
   parseEnvIntegrations,
   shellQuote
-} from "./chunk-CXU7NLNR.js";
+} from "./chunk-HHBAQ6ZV.js";
 import {
   BIND_FAILURE_QUARANTINE_THRESHOLD,
   INTEGRATIONS_SECTION_END,
@@ -75,7 +75,7 @@ import {
   sessionTranscriptDir,
   worseConnectivityOutcome,
   wrapScheduledTaskPrompt
-} from "./chunk-BMDLKZHZ.js";
+} from "./chunk-532V7ZSC.js";
 import {
   classifyUnanswerablePane,
   summarizeUnanswerablePane
@@ -6974,7 +6974,7 @@ function exchangeFailureKind(err) {
 }
 
 // src/lib/api-client.ts
-var agtCliVersion = true ? "0.28.1003" : "dev";
+var agtCliVersion = true ? "0.28.1004" : "dev";
 var lastConfigHash = null;
 function setConfigHash(hash) {
   lastConfigHash = hash && hash.length > 0 ? hash : null;
@@ -11725,4 +11725,4 @@ export {
   managerInstallSystemUnitCommand,
   managerUninstallSystemUnitCommand
 };
-//# sourceMappingURL=chunk-PU5DFL6O.js.map
+//# sourceMappingURL=chunk-N4PG4TAD.js.map

package/dist/{claude-pair-runtime-QUYSD5OB.js → claude-pair-runtime-EUYI3B4I.js}

@@ -259,7 +259,7 @@ async function spawnPairSession(session) {
     return { ok: true };
   } catch {
   }
-  const { resolveClaudeBinary } = await import("./persistent-session-CRF4B3SP.js");
+  const { resolveClaudeBinary } = await import("./persistent-session-JUGGNJSB.js");
   const claudeBin = resolveClaudeBinary();
   const pairEnv = {
     ...process.env,
@@ -581,4 +581,4 @@ export {
   startClaudePair,
   submitClaudePairCode
 };
-//# sourceMappingURL=claude-pair-runtime-QUYSD5OB.js.map
+//# sourceMappingURL=claude-pair-runtime-EUYI3B4I.js.map

package/dist/lib/manager-worker.js

@@ -63,7 +63,7 @@ import {
   safeWriteJsonAtomic,
   setConfigHash,
   tripClass
-} from "../chunk-PU5DFL6O.js";
+} from "../chunk-N4PG4TAD.js";
 import {
   getProjectDir as getProjectDir2,
   getReadyTasks,
@@ -141,7 +141,7 @@ import {
   takeZombieDetection,
   toOpencodeModel,
   writeEgressAllowlist
-} from "../chunk-CXU7NLNR.js";
+} from "../chunk-HHBAQ6ZV.js";
 import {
   ACCOUNT_ENFORCEMENT_MARKER_FILENAME,
   AnchorSessionClient,
@@ -240,7 +240,7 @@ import {
   subagentActivityAgeSeconds,
   sumTranscriptUsageInWindow,
   transcriptActivityAgeSeconds
-} from "../chunk-BMDLKZHZ.js";
+} from "../chunk-532V7ZSC.js";
 import "../chunk-DHWNVVX4.js";
 import {
   reapOrphanChannelMcps
@@ -13311,7 +13311,7 @@ var pendingDayRolloverReset = /* @__PURE__ */ new Set();
 var dayRolloverInboundHold = /* @__PURE__ */ new Map();
 var INBOUND_HOLD_EPISODE_GAP_MS = 12e4;
 async function channelInboundActivityAgeSecondsFor(codeName) {
-  const { newestPendingInboundActivityMtimeMs } = await import("../responsiveness-probe-4LTZNFRC.js");
+  const { newestPendingInboundActivityMtimeMs } = await import("../responsiveness-probe-QLOVCTVA.js");
   const newest = newestPendingInboundActivityMtimeMs(dirname11(paneLogPath(codeName)));
   if (newest === null) return null;
   return Math.max(0, Math.floor((Date.now() - newest) / 1e3));
@@ -14054,7 +14054,7 @@ var agentRestartTimezoneInputs = /* @__PURE__ */ new Map();
 var lastVersionCheckAt = 0;
 var VERSION_CHECK_INTERVAL_MS = 5 * 60 * 1e3;
 var lastResponsivenessProbeAt = 0;
-var agtCliVersion = true ? "0.28.1003" : "dev";
+var agtCliVersion = true ? "0.28.1004" : "dev";
 function resolveBrewPath(execFileSync2) {
   try {
     const out = execFileSync2("which", ["brew"], { timeout: 5e3 }).toString().trim();
@@ -15670,7 +15670,7 @@ function flushRestartedAgentDiagnostics(hostId, codeNames) {
   if (codeNames.length === 0) return;
   void (async () => {
     try {
-      const { collectDiagnostics } = await import("../persistent-session-CRF4B3SP.js");
+      const { collectDiagnostics } = await import("../persistent-session-JUGGNJSB.js");
       await api.post("/host/heartbeat", {
         host_id: hostId,
         agent_diagnostics: collectDiagnostics(codeNames, quarantineEntriesFor, claudeMdSizeFor, spawnOutcomeForDiagnostics, pidPressureFor, forwardedToolsFor)
@@ -15812,7 +15812,7 @@ async function pollCycleInner() {
     }
     try {
       const { detectHostSecurity } = await import("../host-security-KQYYZZVW.js");
-      const { collectDiagnostics } = await import("../persistent-session-CRF4B3SP.js");
+      const { collectDiagnostics } = await import("../persistent-session-JUGGNJSB.js");
       const diagCodeNames = [...agentState.persistentSessionAgents];
       const agentDiagnostics = diagCodeNames.length > 0 ? collectDiagnostics(diagCodeNames, quarantineEntriesFor, claudeMdSizeFor, spawnOutcomeForDiagnostics, pidPressureFor, forwardedToolsFor) : void 0;
       let tailscaleHostname;
@@ -15988,7 +15988,7 @@ async function pollCycleInner() {
         collectPanelessActivityProbes,
         getResponsivenessIntervalMs,
         occupancyQualificationClassifications
-      } = await import("../responsiveness-probe-4LTZNFRC.js");
+      } = await import("../responsiveness-probe-QLOVCTVA.js");
       const probeIntervalMs = getResponsivenessIntervalMs();
       if (now - lastResponsivenessProbeAt > probeIntervalMs) {
         const probeCodeNames = [...agentState.persistentSessionAgents];
@@ -16105,7 +16105,7 @@ async function pollCycleInner() {
           collectResponsivenessProbes,
           livePendingInboundOldestAgeSeconds,
           parkPendingInbound
-        } = await import("../responsiveness-probe-4LTZNFRC.js");
+        } = await import("../responsiveness-probe-QLOVCTVA.js");
         const { getProjectDir: wedgeProjectDir } = await import("../scheduler-engine-M6AFZWNU.js");
         const wedgeNow = /* @__PURE__ */ new Date();
         const liveAgents = agentState.persistentSessionAgents;
@@ -16261,7 +16261,7 @@ async function pollCycleInner() {
     }
     try {
       const { scrapeMcpFailedBannerCount } = await import("../pane-mcp-banner-scraper-VR5QGP3J.js");
-      const { probeSessionAuth } = await import("../session-auth-dead-ZZVXXEYG.js");
+      const { probeSessionAuth } = await import("../session-auth-dead-7F2QBEAZ.js");
       const observations = [];
       const pendingCacheCommits = [];
       const modelApiErrorReportingOn = hostFlagStore().getBoolean("model-api-error-reporting");
@@ -20549,7 +20549,7 @@ async function handleRestartDoorbell(agentId, requestedAt, restartReason) {
       try {
         const freshId = rotateSessionForWedge(codeName);
         consecutiveWedgeCycles.delete(codeName);
-        const { parkPendingInbound: parkForRestart } = await import("../responsiveness-probe-4LTZNFRC.js");
+        const { parkPendingInbound: parkForRestart } = await import("../responsiveness-probe-QLOVCTVA.js");
         const { parked, deadLettered } = parkForRestart(codeName, /* @__PURE__ */ new Date());
         const parkNote = parked > 0 ? `, ${parked} inbound parked` : "";
         const deadNote = deadLettered > 0 ? `, ${deadLettered} undeliverable dead-lettered` : "";
@@ -20592,7 +20592,7 @@ async function handleRestartDoorbell(agentId, requestedAt, restartReason) {
     void api.post("/host/restart-ack", { host_id: hostId, agent_id: agentId, restart_requested_at: requestedAt }).catch((err) => log(`[restart-lane] ack failed for '${codeName}': ${err.message}`));
     void (async () => {
       try {
-        const { collectDiagnostics } = await import("../persistent-session-CRF4B3SP.js");
+        const { collectDiagnostics } = await import("../persistent-session-JUGGNJSB.js");
         await api.post("/host/heartbeat", {
           host_id: hostId,
           agent_diagnostics: collectDiagnostics([codeName], quarantineEntriesFor, claudeMdSizeFor, spawnOutcomeForDiagnostics, pidPressureFor, forwardedToolsFor)
@@ -20643,7 +20643,7 @@ async function respawnAgentAfterMcpStop(codeName, reason) {
     }
     try {
       const hostId = await getHostId();
-      const { collectDiagnostics } = await import("../persistent-session-CRF4B3SP.js");
+      const { collectDiagnostics } = await import("../persistent-session-JUGGNJSB.js");
       await api.post("/host/heartbeat", {
         host_id: hostId,
         agent_diagnostics: collectDiagnostics([codeName], quarantineEntriesFor, claudeMdSizeFor, spawnOutcomeForDiagnostics, pidPressureFor, forwardedToolsFor)
@@ -21303,7 +21303,7 @@ async function processClaudePairSessions(agents) {
     killPairSession,
     pairTmuxSession,
     finalizeClaudePairOnboarding
-  } = await import("../claude-pair-runtime-QUYSD5OB.js");
+  } = await import("../claude-pair-runtime-EUYI3B4I.js");
   for (const pairId of pendingResp.cancelled_pair_ids ?? []) {
     log(`[claude-pair] sweeping orphan tmux session for pair ${pairId.slice(0, 8)}`);
     const killed = await killPairSession(pairTmuxSession(pairId));

package/dist/mcp/direct-chat-channel.js

@@ -34746,6 +34746,52 @@ var INTEGRATION_REGISTRY = [
       }]
     }
   },
+  {
+    // ENG-10854 / ADR-0110. The POLICY half of the catalog definition: this
+    // registry is what `isPremiumDefinition` reads, so the premium descriptor
+    // here is what makes the per-org opt-in required at all. The CUSTOMER-FACING
+    // half - the seeded `integration_definitions` row that the Add Integration
+    // picker lists - is deliberately NOT in this change. `/integrations/installs`
+    // reads the DB catalog with a status filter; this registry is not a listing.
+    //
+    // The order matters and is not bookkeeping: `isOrgEntitledToPremium` returns
+    // TRUE for a definition it does not know as premium, because a free
+    // integration has no opt-in concept. So a broker shipped ahead of this entry
+    // would serve an org that had never opted in. The broker additionally fails
+    // closed on `isPremiumDefinition` being false, so the two halves cannot come
+    // apart in that direction either.
+    id: "typed-evaluation",
+    name: "Typed Evaluation",
+    category: "knowledge",
+    description: "Ask closed questions about a piece of text and get calibrated answers back \u2014 yes/no, pick-one, or a position on your own scale \u2014 with a probability for each. It never writes text and cannot answer outside the set of options you give it, which is what makes it safe to point at content you do not trust. Typical uses: is this message a repeat request, which category does this belong to, how urgent does this sound. Answers arrive in about half a second, so an agent can branch on one without spending a model turn.",
+    // No customer credential exists: the call runs on Ninjafy's own gateway key.
+    supported_auth_types: ["none"],
+    capabilities: [
+      {
+        id: "typed-evaluation:evaluate",
+        name: "Evaluate Text",
+        description: "Ask closed questions about text the agent already holds and receive typed answers with probabilities (evaluate_text).",
+        access: "read"
+      }
+    ],
+    beta: true,
+    // ENG-8842's `included`, and the reason is the consent dialog rather than
+    // the price. `pricing` drives the org admin's acknowledgement modal, where
+    // `usage` renders as "manages and bills by usage" and `monthly` as a
+    // subscription. Both would be false statements here: a call costs about
+    // $0.000076 and nothing is metered or billed, so the opt-in exists to record
+    // a decision about a SUB-PROCESSOR, not about money.
+    //
+    // ADR-0110 Decision 11 keeps the door open deliberately: if a genuinely
+    // high-volume capability arrives later - bulk classification of a customer's
+    // own corpus - it is priced at THAT capability's grain and this definition
+    // stays `included`. Ninja Notes is the precedent (ENG-9278): it acquired a
+    // metered capability and did not flip.
+    premium: {
+      pricing: "included",
+      note: "Typed evaluation is included in your plan \u2014 nothing is metered per question. Turning it on is a decision about data, not cost: the text an agent asks about is sent to Typesafe, through our own gateway, to be scored. It is never used to train a model and we store only the answers, never the text."
+    }
+  },
   {
     // Ninja Notes (ADR-0063, ENG-8842). Meeting capture on the user's own Mac,
     // delivered to an agent as a tag-granted note the agent reads and summarises.
@@ -37264,6 +37310,33 @@ var FLAG_REGISTRY = [
     // "these hosts are unreadable". Both outlive this particular version.
     since: "0.28.667"
   },
+  {
+    // ADR-0110 Decision 5 (ENG-10854). Gates PLATFORM-INTERNAL consumers of the
+    // typed evaluation capability - inbound triage, kanban classification,
+    // memory-extraction sensitivity gating, and later the conversation
+    // evaluator. Nobody "installs" those; they are ours, so they are gated
+    // centrally.
+    //
+    // IT DOES NOT GATE THE AGENT TOOL, and that separation is the point. The
+    // agent tool's gate is the customer's own premium opt-in plus a per-agent
+    // install (Decision 4). Pointing this flag at the tool as well would give
+    // it two masters and let a staff flag silently override a decision the
+    // customer made about their own data reaching a sub-processor.
+    //
+    // Ships with no readers: the consumers land in later slices, and the flag
+    // exists now so the first of them has a gate to be born behind rather than
+    // acquiring one afterwards.
+    key: "typed-evaluation",
+    description: "ADR-0110: platform-internal consumers of the typed evaluation model (Jev, via our AI Gateway). OFF (default) = no internal consumer calls it; ON = consumers that have shipped may call, each still subject to the per-org quota, per-agent rate limit and audit row enforced in the broker. Does NOT gate the agent-facing tool, which is governed by the premium opt-in and a per-agent install instead. Customer orgs stay off until the Decision 9 vendor gates close (sub-processor listing with DPA coverage, the legal read on emotion inference, and a recorded disclosure).",
+    flagType: "boolean",
+    // Ships dark. Every consumer degrades to its current behaviour when off,
+    // so the safe value and the no-op value are the same one.
+    defaultValue: false,
+    // Turning it on starts sending customer text to an external sub-processor
+    // on paths the customer did not individually opt into, which is exactly the
+    // class ADR-0022 section 4 reserves the confirmation for.
+    sensitive: true
+  },
   {
     key: "conversation-eval-backend",
     description: "Backend for host-side conversation-success scoring AND memory extraction (ENG-6581), which share one scorer: anthropic-api = Haiku via a direct Anthropic Messages API fetch (no subprocess); claude-p = Haiku via the `claude -p` subprocess (reuses the agent auth, effectively free under Max but a heavy spawn); local = an OpenAI-compatible loopback endpoint (transcript never leaves the host). Auth for the anthropic-api path comes from AGT_CONV_EVAL_ANTHROPIC_API_KEY (falls back to ANTHROPIC_API_KEY); with no key that path fails closed (eval disabled) rather than reverting to claude-p. Enum.",

package/dist/mcp/index.js

@@ -27328,6 +27328,52 @@ var INTEGRATION_REGISTRY = [
       }]
     }
   },
+  {
+    // ENG-10854 / ADR-0110. The POLICY half of the catalog definition: this
+    // registry is what `isPremiumDefinition` reads, so the premium descriptor
+    // here is what makes the per-org opt-in required at all. The CUSTOMER-FACING
+    // half - the seeded `integration_definitions` row that the Add Integration
+    // picker lists - is deliberately NOT in this change. `/integrations/installs`
+    // reads the DB catalog with a status filter; this registry is not a listing.
+    //
+    // The order matters and is not bookkeeping: `isOrgEntitledToPremium` returns
+    // TRUE for a definition it does not know as premium, because a free
+    // integration has no opt-in concept. So a broker shipped ahead of this entry
+    // would serve an org that had never opted in. The broker additionally fails
+    // closed on `isPremiumDefinition` being false, so the two halves cannot come
+    // apart in that direction either.
+    id: "typed-evaluation",
+    name: "Typed Evaluation",
+    category: "knowledge",
+    description: "Ask closed questions about a piece of text and get calibrated answers back \u2014 yes/no, pick-one, or a position on your own scale \u2014 with a probability for each. It never writes text and cannot answer outside the set of options you give it, which is what makes it safe to point at content you do not trust. Typical uses: is this message a repeat request, which category does this belong to, how urgent does this sound. Answers arrive in about half a second, so an agent can branch on one without spending a model turn.",
+    // No customer credential exists: the call runs on Ninjafy's own gateway key.
+    supported_auth_types: ["none"],
+    capabilities: [
+      {
+        id: "typed-evaluation:evaluate",
+        name: "Evaluate Text",
+        description: "Ask closed questions about text the agent already holds and receive typed answers with probabilities (evaluate_text).",
+        access: "read"
+      }
+    ],
+    beta: true,
+    // ENG-8842's `included`, and the reason is the consent dialog rather than
+    // the price. `pricing` drives the org admin's acknowledgement modal, where
+    // `usage` renders as "manages and bills by usage" and `monthly` as a
+    // subscription. Both would be false statements here: a call costs about
+    // $0.000076 and nothing is metered or billed, so the opt-in exists to record
+    // a decision about a SUB-PROCESSOR, not about money.
+    //
+    // ADR-0110 Decision 11 keeps the door open deliberately: if a genuinely
+    // high-volume capability arrives later - bulk classification of a customer's
+    // own corpus - it is priced at THAT capability's grain and this definition
+    // stays `included`. Ninja Notes is the precedent (ENG-9278): it acquired a
+    // metered capability and did not flip.
+    premium: {
+      pricing: "included",
+      note: "Typed evaluation is included in your plan \u2014 nothing is metered per question. Turning it on is a decision about data, not cost: the text an agent asks about is sent to Typesafe, through our own gateway, to be scored. It is never used to train a model and we store only the answers, never the text."
+    }
+  },
   {
     // Ninja Notes (ADR-0063, ENG-8842). Meeting capture on the user's own Mac,
     // delivered to an agent as a tag-granted note the agent reads and summarises.
@@ -29561,6 +29607,33 @@ var FLAG_REGISTRY = [
     // "these hosts are unreadable". Both outlive this particular version.
     since: "0.28.667"
   },
+  {
+    // ADR-0110 Decision 5 (ENG-10854). Gates PLATFORM-INTERNAL consumers of the
+    // typed evaluation capability - inbound triage, kanban classification,
+    // memory-extraction sensitivity gating, and later the conversation
+    // evaluator. Nobody "installs" those; they are ours, so they are gated
+    // centrally.
+    //
+    // IT DOES NOT GATE THE AGENT TOOL, and that separation is the point. The
+    // agent tool's gate is the customer's own premium opt-in plus a per-agent
+    // install (Decision 4). Pointing this flag at the tool as well would give
+    // it two masters and let a staff flag silently override a decision the
+    // customer made about their own data reaching a sub-processor.
+    //
+    // Ships with no readers: the consumers land in later slices, and the flag
+    // exists now so the first of them has a gate to be born behind rather than
+    // acquiring one afterwards.
+    key: "typed-evaluation",
+    description: "ADR-0110: platform-internal consumers of the typed evaluation model (Jev, via our AI Gateway). OFF (default) = no internal consumer calls it; ON = consumers that have shipped may call, each still subject to the per-org quota, per-agent rate limit and audit row enforced in the broker. Does NOT gate the agent-facing tool, which is governed by the premium opt-in and a per-agent install instead. Customer orgs stay off until the Decision 9 vendor gates close (sub-processor listing with DPA coverage, the legal read on emotion inference, and a recorded disclosure).",
+    flagType: "boolean",
+    // Ships dark. Every consumer degrades to its current behaviour when off,
+    // so the safe value and the no-op value are the same one.
+    defaultValue: false,
+    // Turning it on starts sending customer text to an external sub-processor
+    // on paths the customer did not individually opt into, which is exactly the
+    // class ADR-0022 section 4 reserves the confirmation for.
+    sensitive: true
+  },
   {
     key: "conversation-eval-backend",
     description: "Backend for host-side conversation-success scoring AND memory extraction (ENG-6581), which share one scorer: anthropic-api = Haiku via a direct Anthropic Messages API fetch (no subprocess); claude-p = Haiku via the `claude -p` subprocess (reuses the agent auth, effectively free under Max but a heavy spawn); local = an OpenAI-compatible loopback endpoint (transcript never leaves the host). Auth for the anthropic-api path comes from AGT_CONV_EVAL_ANTHROPIC_API_KEY (falls back to ANTHROPIC_API_KEY); with no key that path fails closed (eval disabled) rather than reverting to claude-p. Enum.",

package/dist/mcp/origami.js

@@ -41479,6 +41479,52 @@ var INTEGRATION_REGISTRY = [
       }]
     }
   },
+  {
+    // ENG-10854 / ADR-0110. The POLICY half of the catalog definition: this
+    // registry is what `isPremiumDefinition` reads, so the premium descriptor
+    // here is what makes the per-org opt-in required at all. The CUSTOMER-FACING
+    // half - the seeded `integration_definitions` row that the Add Integration
+    // picker lists - is deliberately NOT in this change. `/integrations/installs`
+    // reads the DB catalog with a status filter; this registry is not a listing.
+    //
+    // The order matters and is not bookkeeping: `isOrgEntitledToPremium` returns
+    // TRUE for a definition it does not know as premium, because a free
+    // integration has no opt-in concept. So a broker shipped ahead of this entry
+    // would serve an org that had never opted in. The broker additionally fails
+    // closed on `isPremiumDefinition` being false, so the two halves cannot come
+    // apart in that direction either.
+    id: "typed-evaluation",
+    name: "Typed Evaluation",
+    category: "knowledge",
+    description: "Ask closed questions about a piece of text and get calibrated answers back \u2014 yes/no, pick-one, or a position on your own scale \u2014 with a probability for each. It never writes text and cannot answer outside the set of options you give it, which is what makes it safe to point at content you do not trust. Typical uses: is this message a repeat request, which category does this belong to, how urgent does this sound. Answers arrive in about half a second, so an agent can branch on one without spending a model turn.",
+    // No customer credential exists: the call runs on Ninjafy's own gateway key.
+    supported_auth_types: ["none"],
+    capabilities: [
+      {
+        id: "typed-evaluation:evaluate",
+        name: "Evaluate Text",
+        description: "Ask closed questions about text the agent already holds and receive typed answers with probabilities (evaluate_text).",
+        access: "read"
+      }
+    ],
+    beta: true,
+    // ENG-8842's `included`, and the reason is the consent dialog rather than
+    // the price. `pricing` drives the org admin's acknowledgement modal, where
+    // `usage` renders as "manages and bills by usage" and `monthly` as a
+    // subscription. Both would be false statements here: a call costs about
+    // $0.000076 and nothing is metered or billed, so the opt-in exists to record
+    // a decision about a SUB-PROCESSOR, not about money.
+    //
+    // ADR-0110 Decision 11 keeps the door open deliberately: if a genuinely
+    // high-volume capability arrives later - bulk classification of a customer's
+    // own corpus - it is priced at THAT capability's grain and this definition
+    // stays `included`. Ninja Notes is the precedent (ENG-9278): it acquired a
+    // metered capability and did not flip.
+    premium: {
+      pricing: "included",
+      note: "Typed evaluation is included in your plan \u2014 nothing is metered per question. Turning it on is a decision about data, not cost: the text an agent asks about is sent to Typesafe, through our own gateway, to be scored. It is never used to train a model and we store only the answers, never the text."
+    }
+  },
   {
     // Ninja Notes (ADR-0063, ENG-8842). Meeting capture on the user's own Mac,
     // delivered to an agent as a tag-granted note the agent reads and summarises.
@@ -43509,6 +43555,33 @@ var FLAG_REGISTRY = [
     // "these hosts are unreadable". Both outlive this particular version.
     since: "0.28.667"
   },
+  {
+    // ADR-0110 Decision 5 (ENG-10854). Gates PLATFORM-INTERNAL consumers of the
+    // typed evaluation capability - inbound triage, kanban classification,
+    // memory-extraction sensitivity gating, and later the conversation
+    // evaluator. Nobody "installs" those; they are ours, so they are gated
+    // centrally.
+    //
+    // IT DOES NOT GATE THE AGENT TOOL, and that separation is the point. The
+    // agent tool's gate is the customer's own premium opt-in plus a per-agent
+    // install (Decision 4). Pointing this flag at the tool as well would give
+    // it two masters and let a staff flag silently override a decision the
+    // customer made about their own data reaching a sub-processor.
+    //
+    // Ships with no readers: the consumers land in later slices, and the flag
+    // exists now so the first of them has a gate to be born behind rather than
+    // acquiring one afterwards.
+    key: "typed-evaluation",
+    description: "ADR-0110: platform-internal consumers of the typed evaluation model (Jev, via our AI Gateway). OFF (default) = no internal consumer calls it; ON = consumers that have shipped may call, each still subject to the per-org quota, per-agent rate limit and audit row enforced in the broker. Does NOT gate the agent-facing tool, which is governed by the premium opt-in and a per-agent install instead. Customer orgs stay off until the Decision 9 vendor gates close (sub-processor listing with DPA coverage, the legal read on emotion inference, and a recorded disclosure).",
+    flagType: "boolean",
+    // Ships dark. Every consumer degrades to its current behaviour when off,
+    // so the safe value and the no-op value are the same one.
+    defaultValue: false,
+    // Turning it on starts sending customer text to an external sub-processor
+    // on paths the customer did not individually opt into, which is exactly the
+    // class ADR-0022 section 4 reserves the confirmation for.
+    sensitive: true
+  },
   {
     key: "conversation-eval-backend",
     description: "Backend for host-side conversation-success scoring AND memory extraction (ENG-6581), which share one scorer: anthropic-api = Haiku via a direct Anthropic Messages API fetch (no subprocess); claude-p = Haiku via the `claude -p` subprocess (reuses the agent auth, effectively free under Max but a heavy spawn); local = an OpenAI-compatible loopback endpoint (transcript never leaves the host). Auth for the anthropic-api path comes from AGT_CONV_EVAL_ANTHROPIC_API_KEY (falls back to ANTHROPIC_API_KEY); with no key that path fails closed (eval disabled) rather than reverting to claude-p. Enum.",

package/dist/mcp/slack-channel.js

@@ -35702,6 +35702,52 @@ var INTEGRATION_REGISTRY = [
       }]
     }
   },
+  {
+    // ENG-10854 / ADR-0110. The POLICY half of the catalog definition: this
+    // registry is what `isPremiumDefinition` reads, so the premium descriptor
+    // here is what makes the per-org opt-in required at all. The CUSTOMER-FACING
+    // half - the seeded `integration_definitions` row that the Add Integration
+    // picker lists - is deliberately NOT in this change. `/integrations/installs`
+    // reads the DB catalog with a status filter; this registry is not a listing.
+    //
+    // The order matters and is not bookkeeping: `isOrgEntitledToPremium` returns
+    // TRUE for a definition it does not know as premium, because a free
+    // integration has no opt-in concept. So a broker shipped ahead of this entry
+    // would serve an org that had never opted in. The broker additionally fails
+    // closed on `isPremiumDefinition` being false, so the two halves cannot come
+    // apart in that direction either.
+    id: "typed-evaluation",
+    name: "Typed Evaluation",
+    category: "knowledge",
+    description: "Ask closed questions about a piece of text and get calibrated answers back \u2014 yes/no, pick-one, or a position on your own scale \u2014 with a probability for each. It never writes text and cannot answer outside the set of options you give it, which is what makes it safe to point at content you do not trust. Typical uses: is this message a repeat request, which category does this belong to, how urgent does this sound. Answers arrive in about half a second, so an agent can branch on one without spending a model turn.",
+    // No customer credential exists: the call runs on Ninjafy's own gateway key.
+    supported_auth_types: ["none"],
+    capabilities: [
+      {
+        id: "typed-evaluation:evaluate",
+        name: "Evaluate Text",
+        description: "Ask closed questions about text the agent already holds and receive typed answers with probabilities (evaluate_text).",
+        access: "read"
+      }
+    ],
+    beta: true,
+    // ENG-8842's `included`, and the reason is the consent dialog rather than
+    // the price. `pricing` drives the org admin's acknowledgement modal, where
+    // `usage` renders as "manages and bills by usage" and `monthly` as a
+    // subscription. Both would be false statements here: a call costs about
+    // $0.000076 and nothing is metered or billed, so the opt-in exists to record
+    // a decision about a SUB-PROCESSOR, not about money.
+    //
+    // ADR-0110 Decision 11 keeps the door open deliberately: if a genuinely
+    // high-volume capability arrives later - bulk classification of a customer's
+    // own corpus - it is priced at THAT capability's grain and this definition
+    // stays `included`. Ninja Notes is the precedent (ENG-9278): it acquired a
+    // metered capability and did not flip.
+    premium: {
+      pricing: "included",
+      note: "Typed evaluation is included in your plan \u2014 nothing is metered per question. Turning it on is a decision about data, not cost: the text an agent asks about is sent to Typesafe, through our own gateway, to be scored. It is never used to train a model and we store only the answers, never the text."
+    }
+  },
   {
     // Ninja Notes (ADR-0063, ENG-8842). Meeting capture on the user's own Mac,
     // delivered to an agent as a tag-granted note the agent reads and summarises.
@@ -38148,6 +38194,33 @@ var FLAG_REGISTRY = [
     // "these hosts are unreadable". Both outlive this particular version.
     since: "0.28.667"
   },
+  {
+    // ADR-0110 Decision 5 (ENG-10854). Gates PLATFORM-INTERNAL consumers of the
+    // typed evaluation capability - inbound triage, kanban classification,
+    // memory-extraction sensitivity gating, and later the conversation
+    // evaluator. Nobody "installs" those; they are ours, so they are gated
+    // centrally.
+    //
+    // IT DOES NOT GATE THE AGENT TOOL, and that separation is the point. The
+    // agent tool's gate is the customer's own premium opt-in plus a per-agent
+    // install (Decision 4). Pointing this flag at the tool as well would give
+    // it two masters and let a staff flag silently override a decision the
+    // customer made about their own data reaching a sub-processor.
+    //
+    // Ships with no readers: the consumers land in later slices, and the flag
+    // exists now so the first of them has a gate to be born behind rather than
+    // acquiring one afterwards.
+    key: "typed-evaluation",
+    description: "ADR-0110: platform-internal consumers of the typed evaluation model (Jev, via our AI Gateway). OFF (default) = no internal consumer calls it; ON = consumers that have shipped may call, each still subject to the per-org quota, per-agent rate limit and audit row enforced in the broker. Does NOT gate the agent-facing tool, which is governed by the premium opt-in and a per-agent install instead. Customer orgs stay off until the Decision 9 vendor gates close (sub-processor listing with DPA coverage, the legal read on emotion inference, and a recorded disclosure).",
+    flagType: "boolean",
+    // Ships dark. Every consumer degrades to its current behaviour when off,
+    // so the safe value and the no-op value are the same one.
+    defaultValue: false,
+    // Turning it on starts sending customer text to an external sub-processor
+    // on paths the customer did not individually opt into, which is exactly the
+    // class ADR-0022 section 4 reserves the confirmation for.
+    sensitive: true
+  },
   {
     key: "conversation-eval-backend",
     description: "Backend for host-side conversation-success scoring AND memory extraction (ENG-6581), which share one scorer: anthropic-api = Haiku via a direct Anthropic Messages API fetch (no subprocess); claude-p = Haiku via the `claude -p` subprocess (reuses the agent auth, effectively free under Max but a heavy spawn); local = an OpenAI-compatible loopback endpoint (transcript never leaves the host). Auth for the anthropic-api path comes from AGT_CONV_EVAL_ANTHROPIC_API_KEY (falls back to ANTHROPIC_API_KEY); with no key that path fails closed (eval disabled) rather than reverting to claude-p. Enum.",

package/dist/mcp/telegram-channel.js

@@ -35716,6 +35716,52 @@ var INTEGRATION_REGISTRY = [
       }]
     }
   },
+  {
+    // ENG-10854 / ADR-0110. The POLICY half of the catalog definition: this
+    // registry is what `isPremiumDefinition` reads, so the premium descriptor
+    // here is what makes the per-org opt-in required at all. The CUSTOMER-FACING
+    // half - the seeded `integration_definitions` row that the Add Integration
+    // picker lists - is deliberately NOT in this change. `/integrations/installs`
+    // reads the DB catalog with a status filter; this registry is not a listing.
+    //
+    // The order matters and is not bookkeeping: `isOrgEntitledToPremium` returns
+    // TRUE for a definition it does not know as premium, because a free
+    // integration has no opt-in concept. So a broker shipped ahead of this entry
+    // would serve an org that had never opted in. The broker additionally fails
+    // closed on `isPremiumDefinition` being false, so the two halves cannot come
+    // apart in that direction either.
+    id: "typed-evaluation",
+    name: "Typed Evaluation",
+    category: "knowledge",
+    description: "Ask closed questions about a piece of text and get calibrated answers back \u2014 yes/no, pick-one, or a position on your own scale \u2014 with a probability for each. It never writes text and cannot answer outside the set of options you give it, which is what makes it safe to point at content you do not trust. Typical uses: is this message a repeat request, which category does this belong to, how urgent does this sound. Answers arrive in about half a second, so an agent can branch on one without spending a model turn.",
+    // No customer credential exists: the call runs on Ninjafy's own gateway key.
+    supported_auth_types: ["none"],
+    capabilities: [
+      {
+        id: "typed-evaluation:evaluate",
+        name: "Evaluate Text",
+        description: "Ask closed questions about text the agent already holds and receive typed answers with probabilities (evaluate_text).",
+        access: "read"
+      }
+    ],
+    beta: true,
+    // ENG-8842's `included`, and the reason is the consent dialog rather than
+    // the price. `pricing` drives the org admin's acknowledgement modal, where
+    // `usage` renders as "manages and bills by usage" and `monthly` as a
+    // subscription. Both would be false statements here: a call costs about
+    // $0.000076 and nothing is metered or billed, so the opt-in exists to record
+    // a decision about a SUB-PROCESSOR, not about money.
+    //
+    // ADR-0110 Decision 11 keeps the door open deliberately: if a genuinely
+    // high-volume capability arrives later - bulk classification of a customer's
+    // own corpus - it is priced at THAT capability's grain and this definition
+    // stays `included`. Ninja Notes is the precedent (ENG-9278): it acquired a
+    // metered capability and did not flip.
+    premium: {
+      pricing: "included",
+      note: "Typed evaluation is included in your plan \u2014 nothing is metered per question. Turning it on is a decision about data, not cost: the text an agent asks about is sent to Typesafe, through our own gateway, to be scored. It is never used to train a model and we store only the answers, never the text."
+    }
+  },
   {
     // Ninja Notes (ADR-0063, ENG-8842). Meeting capture on the user's own Mac,
     // delivered to an agent as a tag-granted note the agent reads and summarises.
@@ -38162,6 +38208,33 @@ var FLAG_REGISTRY = [
     // "these hosts are unreadable". Both outlive this particular version.
     since: "0.28.667"
   },
+  {
+    // ADR-0110 Decision 5 (ENG-10854). Gates PLATFORM-INTERNAL consumers of the
+    // typed evaluation capability - inbound triage, kanban classification,
+    // memory-extraction sensitivity gating, and later the conversation
+    // evaluator. Nobody "installs" those; they are ours, so they are gated
+    // centrally.
+    //
+    // IT DOES NOT GATE THE AGENT TOOL, and that separation is the point. The
+    // agent tool's gate is the customer's own premium opt-in plus a per-agent
+    // install (Decision 4). Pointing this flag at the tool as well would give
+    // it two masters and let a staff flag silently override a decision the
+    // customer made about their own data reaching a sub-processor.
+    //
+    // Ships with no readers: the consumers land in later slices, and the flag
+    // exists now so the first of them has a gate to be born behind rather than
+    // acquiring one afterwards.
+    key: "typed-evaluation",
+    description: "ADR-0110: platform-internal consumers of the typed evaluation model (Jev, via our AI Gateway). OFF (default) = no internal consumer calls it; ON = consumers that have shipped may call, each still subject to the per-org quota, per-agent rate limit and audit row enforced in the broker. Does NOT gate the agent-facing tool, which is governed by the premium opt-in and a per-agent install instead. Customer orgs stay off until the Decision 9 vendor gates close (sub-processor listing with DPA coverage, the legal read on emotion inference, and a recorded disclosure).",
+    flagType: "boolean",
+    // Ships dark. Every consumer degrades to its current behaviour when off,
+    // so the safe value and the no-op value are the same one.
+    defaultValue: false,
+    // Turning it on starts sending customer text to an external sub-processor
+    // on paths the customer did not individually opt into, which is exactly the
+    // class ADR-0022 section 4 reserves the confirmation for.
+    sensitive: true
+  },
   {
     key: "conversation-eval-backend",
     description: "Backend for host-side conversation-success scoring AND memory extraction (ENG-6581), which share one scorer: anthropic-api = Haiku via a direct Anthropic Messages API fetch (no subprocess); claude-p = Haiku via the `claude -p` subprocess (reuses the agent auth, effectively free under Max but a heavy spawn); local = an OpenAI-compatible loopback endpoint (transcript never leaves the host). Auth for the anthropic-api path comes from AGT_CONV_EVAL_ANTHROPIC_API_KEY (falls back to ANTHROPIC_API_KEY); with no key that path fails closed (eval disabled) rather than reverting to claude-p. Enum.",