@kindgi/api 0.1.4-rc.0 → 0.1.4-rc.2

package/dist/gate-policy-binding.d.ts

@@ -0,0 +1,164 @@
+import type { ReviewerRole } from '@kindgi/authz';
+import type { Cursor, LiveScope, Result, TenantId, Timestamp } from '@kindgi/types';
+/**
+ * Gate policies (evals step 4b): what a promotion of an agent must show
+ * before a version goes live for a scope. One policy per agent and scope;
+ * the most specific one covering a promotion's scope applies, at its
+ * latest active version. The same registry shape as retention policies:
+ * the caller names the policy and its semver versions.
+ */
+/** The metrics a policy can gate, from a comparison's summary. */
+export declare const GATE_METRICS: readonly ["weightedYesShare", "judgedCoverage", "weightedPrecisionAtK"];
+export type GateMetricName = (typeof GATE_METRICS)[number];
+export interface GateMetricSpec {
+    readonly name: GateMetricName;
+    /** `weightedPrecisionAtK` only: the summary's `k` must be this. */
+    readonly k?: number;
+    /** The candidate must reach this. */
+    readonly minCandidate?: number;
+    /** The candidate may fall at most this far below the baseline (`0`: no drop at all). */
+    readonly maxDrop?: number;
+}
+/**
+ * What a policy asks of a promotion. Every part is optional; an empty
+ * spec checks nothing (the promotion is still recorded with the policy).
+ * A promotion must name a comparison (`evalRunId`) exactly when the spec
+ * checks anything one shows: `comparison`, `evidence`, `metrics`,
+ * `replay` or `onlyRestrictedClasses`.
+ */
+export interface GatePolicySpec {
+    readonly comparison?: {
+        /** The comparison must have finished within this many hours. */
+        readonly maxAgeHours?: number;
+        /** The comparison must have run this test set (and version). */
+        readonly suite?: {
+            readonly id: string;
+            readonly version?: string;
+        };
+    };
+    /** The judged evidence behind each gated metric (`n` cases, total weight). */
+    readonly evidence?: {
+        readonly minCases?: number;
+        readonly minWeight?: number;
+    };
+    readonly metrics?: readonly GateMetricSpec[];
+    /** Replay counts; each knob left out of the block is 0. No block: no replay checks. */
+    readonly replay?: {
+        readonly maxDiverged?: number;
+        readonly maxErrors?: number;
+        readonly maxRefusedWrites?: number;
+        readonly maxStopped?: number;
+    };
+    /** A passing promotion waits for a reviewer's approval. */
+    readonly approvals?: {
+        /** The reviewer role it needs (default `senior`). */
+        readonly role?: ReviewerRole;
+        /** Whoever asked can't approve it (default `true`). */
+        readonly separateApprover?: boolean;
+    };
+    /**
+     * Only judgments recorded under a restricted judge class count (T200):
+     * the comparison must be weighted `restricted-only`, so a class anyone
+     * may assert can't move the gate.
+     */
+    readonly onlyRestrictedClasses?: boolean;
+}
+export interface GatePolicy {
+    readonly id: string;
+    readonly version: string;
+    readonly tenantId: TenantId;
+    readonly agentId: string;
+    readonly scope: LiveScope;
+    readonly spec: GatePolicySpec;
+    readonly description?: string;
+    readonly createdAt: Timestamp;
+    /** Set when this version was unregistered. */
+    readonly unregisteredAt?: Timestamp;
+}
+/** A policy version, as a promotion records which one gated it. */
+export interface GatePolicyRef {
+    readonly id: string;
+    readonly version: string;
+}
+export interface GatePolicyPublishInput {
+    readonly tenantId: TenantId;
+    readonly id: string;
+    readonly version: string;
+    readonly agentId: string;
+    readonly scope: LiveScope;
+    readonly spec: GatePolicySpec;
+    readonly description?: string;
+}
+export type GatePolicyErrorCode = 
+/** This id and version are registered already. */
+'gate-policy-already-registered'
+/** Another policy already gates this agent and scope. */
+ | 'gate-policy-scope-taken'
+/** A new version names another agent or scope than the policy's. */
+ | 'gate-policy-scope-changed'
+/**
+ * The scope resolves to the agent's latest version (no pin covers it),
+ * so publishing a version would make it live there ungated: pin a
+ * version for the scope, or one above it, first.
+ */
+ | 'gate-policy-scope-unpinned' | 'gate-policy-not-found'
+/** The scope names an org or project the tenant doesn't have. */
+ | 'scope-invalid' | 'persistence-error';
+export interface GatePolicyError {
+    readonly code: GatePolicyErrorCode;
+    readonly message: string;
+    /** `gate-policy-scope-taken`: the policy that holds the scope. */
+    readonly heldBy?: string;
+}
+export interface GatePolicyListInput {
+    readonly tenantId: TenantId;
+    readonly agentId?: string;
+    /** Only the policy of exactly this scope. */
+    readonly scope?: LiveScope;
+    readonly limit: number;
+    readonly cursor?: Cursor;
+}
+export interface GatePolicyVersionInput {
+    readonly tenantId: TenantId;
+    readonly id: string;
+    readonly version: string;
+}
+export interface GatePolicyBinding {
+    /**
+     * Register `id` at `version`: a new policy, or a new version of one
+     * (same agent and scope). A gated scope always resolves to a pin:
+     * `gate-policy-scope-unpinned` when nothing covering the scope is pinned.
+     */
+    publish(input: GatePolicyPublishInput): Promise<Result<GatePolicy, GatePolicyError>>;
+    /** The policy's latest active version, or `null`. */
+    get(input: {
+        readonly tenantId: TenantId;
+        readonly id: string;
+    }): Promise<GatePolicy | null>;
+    /** One version, unregistered ones too, or `null`. */
+    getVersion(input: GatePolicyVersionInput): Promise<GatePolicy | null>;
+    /** Every version of a policy, oldest first. */
+    listVersions(input: {
+        readonly tenantId: TenantId;
+        readonly id: string;
+    }): Promise<readonly GatePolicy[]>;
+    /** Each policy's latest active version. */
+    list(input: GatePolicyListInput): Promise<{
+        readonly data: readonly GatePolicy[];
+        readonly nextCursor?: Cursor;
+    }>;
+    unregister(input: GatePolicyVersionInput): Promise<Result<GatePolicy, GatePolicyError>>;
+    reinstate(input: GatePolicyVersionInput): Promise<Result<GatePolicy, GatePolicyError>>;
+    /**
+     * The policy that gates a promotion of `agentId` for `scope`: the most
+     * specific scope with an active policy (a segment path's longer
+     * prefixes first, then its project, the project's org, the tenant), at
+     * its latest active version. `null`: no policy, so no gate.
+     */
+    resolve(input: {
+        readonly tenantId: TenantId;
+        readonly agentId: string;
+        readonly scope: LiveScope;
+    }): Promise<GatePolicy | null>;
+}
+//# sourceMappingURL=gate-policy-binding.d.ts.map

package/dist/gate-policy-binding.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"gate-policy-binding.d.ts","sourceRoot":"","sources":["../src/gate-policy-binding.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAClD,OAAO,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,eAAe,CAAC;AAEpF;;;;;;GAMG;AAEH,kEAAkE;AAClE,eAAO,MAAM,YAAY,yEAA0E,CAAC;AACpG,MAAM,MAAM,cAAc,GAAG,CAAC,OAAO,YAAY,CAAC,CAAC,MAAM,CAAC,CAAC;AAE3D,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,IAAI,EAAE,cAAc,CAAC;IAC9B,mEAAmE;IACnE,QAAQ,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC;IACpB,qCAAqC;IACrC,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B,wFAAwF;IACxF,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED;;;;;;GAMG;AACH,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,UAAU,CAAC,EAAE;QACpB,gEAAgE;QAChE,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;QAC9B,gEAAgE;QAChE,QAAQ,CAAC,KAAK,CAAC,EAAE;YAAE,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;YAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAA;SAAE,CAAC;KACrE,CAAC;IACF,8EAA8E;IAC9E,QAAQ,CAAC,QAAQ,CAAC,EAAE;QAAE,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAChF,QAAQ,CAAC,OAAO,CAAC,EAAE,SAAS,cAAc,EAAE,CAAC;IAC7C,uFAAuF;IACvF,QAAQ,CAAC,MAAM,CAAC,EAAE;QAChB,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;QAC9B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;QAC5B,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;QACnC,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;KAC9B,CAAC;IACF,2DAA2D;IAC3D,QAAQ,CAAC,SAAS,CAAC,EAAE;QACnB,qDAAqD;QACrD,QAAQ,CAAC,IAAI,CAAC,EAAE,YAAY,CAAC;QAC7B,uDAAuD;QACvD,QAAQ,CAAC,gBAAgB,CAAC,EAAE,OAAO,CAAC;KACrC,CAAC;IACF;;;;OAIG;IACH,QAAQ,CAAC,qBAAqB,CAAC,EAAE,OAAO,CAAC;CAC1C;AAED,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC;IAC5B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,KAAK,EAAE,SAAS,CAAC;IAC1B,QAAQ,CAAC,IAAI,EAAE,cAAc,CAAC;IAC9B,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAC;IAC9B,8CAA8C;IAC9C,QAAQ,CAAC,cAAc,CAAC,EAAE,SAAS,CAAC;CACrC;AAED,mEAAmE;AACnE,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC;IAC5B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,KAAK,EAAE,SAAS,CAAC;IAC1B,QAAQ,CAAC,IAAI,EAAE,cAAc,CAAC;IAC9B,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;CAC/B;AAED,MAAM,MAAM,mBAAmB;AAC7B,kDAAkD;AAChD,gCAAgC;AAClC,yDAAyD;GACvD,yBAAyB;AAC3B,oEAAoE;GAClE,2BAA2B;AAC7B;;;;GAIG;GACD,4BAA4B,GAC5B,uBAAuB;AACzB,iEAAiE;GAC/D,eAAe,GACf,mBAAmB,CAAC;AAExB,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,IAAI,EAAE,mBAAmB,CAAC;IACnC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,kEAAkE;IAClE,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC;IAC5B,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,6CAA6C;IAC7C,QAAQ,CAAC,KAAK,CAAC,EAAE,SAAS,CAAC;IAC3B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC;IAC5B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,iBAAiB;IAChC;;;;OAIG;IACH,OAAO,CAAC,KAAK,EAAE,sBAAsB,GAAG,OAAO,CAAC,MAAM,CAAC,UAAU,EAAE,eAAe,CAAC,CAAC,CAAC;IACrF,qDAAqD;IACrD,GAAG,CAAC,KAAK,EAAE;QAAE,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC;QAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,CAAC;IAC7F,qDAAqD;IACrD,UAAU,CAAC,KAAK,EAAE,sBAAsB,GAAG,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,CAAC;IACtE,+CAA+C;IAC/C,YAAY,CAAC,KAAK,EAAE;QAClB,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC;QAC5B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;KACrB,GAAG,OAAO,CAAC,SAAS,UAAU,EAAE,CAAC,CAAC;IACnC,2CAA2C;IAC3C,IAAI,CAAC,KAAK,EAAE,mBAAmB,GAAG,OAAO,CAAC;QACxC,QAAQ,CAAC,IAAI,EAAE,SAAS,UAAU,EAAE,CAAC;QACrC,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;KAC9B,CAAC,CAAC;IACH,UAAU,CAAC,KAAK,EAAE,sBAAsB,GAAG,OAAO,CAAC,MAAM,CAAC,UAAU,EAAE,eAAe,CAAC,CAAC,CAAC;IACxF,SAAS,CAAC,KAAK,EAAE,sBAAsB,GAAG,OAAO,CAAC,MAAM,CAAC,UAAU,EAAE,eAAe,CAAC,CAAC,CAAC;IACvF;;;;;OAKG;IACH,OAAO,CAAC,KAAK,EAAE;QACb,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC;QAC5B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;QACzB,QAAQ,CAAC,KAAK,EAAE,SAAS,CAAC;KAC3B,GAAG,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,CAAC;CAChC"}

package/dist/gate-policy-binding.js

@@ -0,0 +1,12 @@
+// SPDX-License-Identifier: Apache-2.0
+// Copyright (C) 2026 Kindgi Inc.
+/**
+ * Gate policies (evals step 4b): what a promotion of an agent must show
+ * before a version goes live for a scope. One policy per agent and scope;
+ * the most specific one covering a promotion's scope applies, at its
+ * latest active version. The same registry shape as retention policies:
+ * the caller names the policy and its semver versions.
+ */
+/** The metrics a policy can gate, from a comparison's summary. */
+export const GATE_METRICS = ['weightedYesShare', 'judgedCoverage', 'weightedPrecisionAtK'];
+//# sourceMappingURL=gate-policy-binding.js.map

package/dist/gate-policy-binding.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"gate-policy-binding.js","sourceRoot":"","sources":["../src/gate-policy-binding.ts"],"names":[],"mappings":"AAAA,sCAAsC;AACtC,iCAAiC;AAKjC;;;;;;GAMG;AAEH,kEAAkE;AAClE,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,kBAAkB,EAAE,gBAAgB,EAAE,sBAAsB,CAAU,CAAC"}

package/dist/gate.d.ts

@@ -0,0 +1,56 @@
+import type { ReviewerRole } from '@kindgi/authz';
+import type { LiveScope } from '@kindgi/types';
+import type { GatePolicySpec } from './gate-policy-binding.js';
+import type { JudgedComparisonSummary } from './judged-dispatcher.js';
+/**
+ * The promotion gate (evals step 4b): a policy's checks against a
+ * comparison's summary. Pure; the promotion route and `…/check` both
+ * call it, so a check answers exactly what a promotion would.
+ */
+/** One check, as the promotion records it and every client shows it. */
+export interface GateCheck {
+    /** Stable: `metric.weightedPrecisionAtK.minCandidate`, `replay.maxDiverged`, … */
+    readonly name: string;
+    readonly passed: boolean;
+    /** A plain sentence saying what was found against what the policy asks. */
+    readonly message: string;
+    readonly value?: number | string;
+    readonly threshold?: number | string;
+}
+/** What a passing promotion still needs: a reviewer's approval. */
+export interface GateApproval {
+    readonly role: ReviewerRole;
+    /** How many reviewers decide (one, today). */
+    readonly count: number;
+    readonly separateApprover: boolean;
+}
+export interface GateInput {
+    readonly spec: GatePolicySpec;
+    /** What's being promoted. */
+    readonly promotion: {
+        readonly agentId: string;
+        readonly version: string;
+        /** The promoted version's `pinsDigest`; `null` for a version published before pins. */
+        readonly pinsDigest: string | null;
+        readonly scope: LiveScope;
+    };
+    /** The comparison named by `evalRunId`; `null` when none was. */
+    readonly summary: JudgedComparisonSummary | null;
+    /** The version serving the promotion's scope now: what "no regression" is measured against. */
+    readonly servingVersion: string;
+    /**
+     * The org of the project the comparison's judgments came from (for an
+     * org promotion). Absent: that project has no org, or none was looked up.
+     */
+    readonly summaryProjectOrgId?: string;
+    readonly now: Date;
+}
+export interface GateResult {
+    readonly checks: readonly GateCheck[];
+    readonly passed: boolean;
+    /** Set when the policy asks for an approval. */
+    readonly approval?: GateApproval;
+}
+export declare function gateApproval(spec: GatePolicySpec): GateApproval | undefined;
+export declare function evaluateGate(input: GateInput): GateResult;
+//# sourceMappingURL=gate.d.ts.map

package/dist/gate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"gate.d.ts","sourceRoot":"","sources":["../src/gate.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAClD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,eAAe,CAAC;AAE/C,OAAO,KAAK,EAAkC,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAC/F,OAAO,KAAK,EAAoB,uBAAuB,EAAE,MAAM,wBAAwB,CAAC;AAExF;;;;GAIG;AAEH,wEAAwE;AACxE,MAAM,WAAW,SAAS;IACxB,kFAAkF;IAClF,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;IACzB,2EAA2E;IAC3E,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IACjC,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;CACtC;AAED,mEAAmE;AACnE,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAC;IAC5B,8CAA8C;IAC9C,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,gBAAgB,EAAE,OAAO,CAAC;CACpC;AAED,MAAM,WAAW,SAAS;IACxB,QAAQ,CAAC,IAAI,EAAE,cAAc,CAAC;IAC9B,6BAA6B;IAC7B,QAAQ,CAAC,SAAS,EAAE;QAClB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;QACzB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;QACzB,uFAAuF;QACvF,QAAQ,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;QACnC,QAAQ,CAAC,KAAK,EAAE,SAAS,CAAC;KAC3B,CAAC;IACF,iEAAiE;IACjE,QAAQ,CAAC,OAAO,EAAE,uBAAuB,GAAG,IAAI,CAAC;IACjD,+FAA+F;IAC/F,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC;;;OAGG;IACH,QAAQ,CAAC,mBAAmB,CAAC,EAAE,MAAM,CAAC;IACtC,QAAQ,CAAC,GAAG,EAAE,IAAI,CAAC;CACpB;AAED,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,MAAM,EAAE,SAAS,SAAS,EAAE,CAAC;IACtC,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;IACzB,gDAAgD;IAChD,QAAQ,CAAC,QAAQ,CAAC,EAAE,YAAY,CAAC;CAClC;AAgBD,wBAAgB,YAAY,CAAC,IAAI,EAAE,cAAc,GAAG,YAAY,GAAG,SAAS,CAO3E;AAED,wBAAgB,YAAY,CAAC,KAAK,EAAE,SAAS,GAAG,UAAU,CAiDzD"}

package/dist/gate.js

@@ -0,0 +1,359 @@
+// SPDX-License-Identifier: Apache-2.0
+// Copyright (C) 2026 Kindgi Inc.
+/** Room for float rounding in the metric comparisons. */
+const EPSILON = 1e-9;
+/** Whether the spec checks anything only a comparison shows. */
+function needsComparison(spec) {
+    return (spec.comparison !== undefined ||
+        spec.evidence !== undefined ||
+        (spec.metrics?.length ?? 0) > 0 ||
+        spec.replay !== undefined ||
+        spec.onlyRestrictedClasses === true);
+}
+export function gateApproval(spec) {
+    if (spec.approvals === undefined)
+        return undefined;
+    return {
+        role: spec.approvals.role ?? 'senior',
+        count: 1,
+        separateApprover: spec.approvals.separateApprover ?? true,
+    };
+}
+export function evaluateGate(input) {
+    const { spec, summary } = input;
+    const checks = [];
+    const approval = gateApproval(spec);
+    const required = needsComparison(spec);
+    if (summary === null) {
+        if (required) {
+            checks.push({
+                name: 'comparison.required',
+                passed: false,
+                message: 'This policy needs a comparison: name one with `evalRunId` (a finished comparison eval run of this version).',
+            });
+        }
+        return result(checks, approval);
+    }
+    if (required) {
+        checks.push({
+            name: 'comparison.required',
+            passed: true,
+            message: `Comparison ${summary.evalRunId} is named.`,
+        });
+    }
+    checks.push(statusCheck(spec, summary));
+    if (spec.comparison?.maxAgeHours !== undefined) {
+        checks.push(freshnessCheck(spec.comparison.maxAgeHours, summary, input.now));
+    }
+    if (spec.comparison?.suite !== undefined)
+        checks.push(suiteCheck(spec.comparison.suite, summary));
+    checks.push(sameContentsCheck(input));
+    checks.push(baselineCheck(summary, input));
+    checks.push(scopeCheck(summary, input));
+    if (spec.onlyRestrictedClasses === true) {
+        const counted = summary.classWeights ?? 'as-recorded';
+        checks.push({
+            name: 'classWeights.restrictedOnly',
+            passed: counted === 'restricted-only',
+            message: counted === 'restricted-only'
+                ? 'The comparison counted only restricted judge classes.'
+                : "The policy counts only restricted judge classes; the comparison counted every class. Re-run it with `classWeights: 'restricted-only'`.",
+            value: counted,
+            threshold: 'restricted-only',
+        });
+    }
+    if (spec.replay !== undefined)
+        checks.push(...replayChecks(spec.replay, summary));
+    for (const metric of spec.metrics ?? [])
+        checks.push(...metricChecks(metric, spec, summary));
+    return result(checks, approval);
+}
+function result(checks, approval) {
+    return {
+        checks,
+        passed: checks.every((c) => c.passed),
+        ...(approval !== undefined && { approval }),
+    };
+}
+function statusCheck(spec, summary) {
+    const maxErrors = spec.replay?.maxErrors ?? 0;
+    const base = { name: 'comparison.status', value: summary.status };
+    if (summary.status === 'completed') {
+        return { ...base, passed: true, message: 'The comparison completed.' };
+    }
+    if (summary.status === 'partial' && summary.errors <= maxErrors) {
+        return {
+            ...base,
+            passed: true,
+            message: `The comparison finished with ${count(summary.errors, 'case')} in error; the policy allows ${maxErrors}.`,
+            threshold: maxErrors,
+        };
+    }
+    return {
+        ...base,
+        passed: false,
+        message: summary.status === 'failed'
+            ? 'The comparison failed.'
+            : `The comparison finished with ${count(summary.errors, 'case')} in error; the policy allows ${maxErrors}.`,
+        ...(summary.status === 'partial' && { threshold: maxErrors }),
+    };
+}
+function freshnessCheck(maxAgeHours, summary, now) {
+    const ageHours = (now.getTime() - new Date(summary.completedAt).getTime()) / 3_600_000;
+    const passed = ageHours <= maxAgeHours;
+    return {
+        name: 'comparison.freshness',
+        passed,
+        message: `The comparison finished ${round(ageHours)} hours ago; the policy accepts up to ${maxAgeHours}.`,
+        value: round(ageHours),
+        threshold: maxAgeHours,
+    };
+}
+function suiteCheck(suite, summary) {
+    const ran = `${summary.suite.id} ${summary.suite.version}`;
+    const wanted = suite.version === undefined ? suite.id : `${suite.id} ${suite.version}`;
+    const passed = summary.suite.id === suite.id &&
+        (suite.version === undefined || summary.suite.version === suite.version);
+    return {
+        name: 'comparison.suite',
+        passed,
+        message: passed
+            ? `The comparison ran test set ${ran}.`
+            : `The comparison ran test set ${ran}; the policy needs ${wanted}.`,
+        value: ran,
+        threshold: wanted,
+    };
+}
+function sameContentsCheck(input) {
+    const { promotion, summary } = input;
+    const candidate = summary?.candidate;
+    const name = 'sameContents';
+    const promoted = `${promotion.agentId} ${promotion.version}`;
+    if (candidate === undefined || candidate.kind !== 'agent') {
+        return {
+            name,
+            passed: false,
+            message: `The comparison ran a flow; compare the agent itself (${promoted}).`,
+        };
+    }
+    const compared = `${candidate.agentId} ${candidate.version}`;
+    if (candidate.agentId !== promotion.agentId || candidate.version !== promotion.version) {
+        return {
+            name,
+            passed: false,
+            message: `The comparison ran ${compared}, not ${promoted}.`,
+            value: compared,
+            threshold: promoted,
+        };
+    }
+    if (promotion.pinsDigest === null) {
+        return {
+            name,
+            passed: false,
+            message: `${promoted} was published before versions recorded their pins: republish it to pin it, then compare that version.`,
+        };
+    }
+    if (candidate.pinsDigest === undefined) {
+        return {
+            name,
+            passed: false,
+            message: 'The comparison predates recording what the candidate ran (its pinsDigest): re-run the comparison.',
+        };
+    }
+    const passed = candidate.pinsDigest === promotion.pinsDigest;
+    return {
+        name,
+        passed,
+        message: passed
+            ? `The comparison ran ${promoted} with the same pins.`
+            : `The comparison ran ${promoted} with other pins than it has now: re-run the comparison.`,
+        value: candidate.pinsDigest,
+        threshold: promotion.pinsDigest,
+    };
+}
+function baselineCheck(summary, input) {
+    const name = 'baselineIsLive';
+    const serving = `${input.promotion.agentId} ${input.servingVersion}`;
+    const versions = summary.baseline.kind === 'recorded'
+        ? summary.baseline.versions.map((v) => 'agentId' in v ? `${v.agentId} ${v.version}` : `flow ${v.flowId} ${v.version}`)
+        : [`${summary.baseline.agentId} ${summary.baseline.version}`];
+    if (versions.length !== 1) {
+        return {
+            name,
+            passed: false,
+            message: `The comparison's baseline mixes ${versions.length} versions (${versions.join(', ')}); it must be the one live for the scope, ${serving}.`,
+            value: versions.join(', '),
+            threshold: serving,
+        };
+    }
+    const passed = versions[0] === serving;
+    return {
+        name,
+        passed,
+        message: passed
+            ? `The baseline is ${serving}, the version live for the scope.`
+            : `The baseline is ${versions[0]}; the version live for the scope is ${serving}. Re-run the comparison against it.`,
+        value: versions[0] ?? '',
+        threshold: serving,
+    };
+}
+function scopeCheck(summary, input) {
+    const name = 'scopeCovered';
+    const from = summary.scope.projectId;
+    const scope = input.promotion.scope;
+    const judgedIn = from === undefined ? 'the whole tenant' : `project ${from}`;
+    switch (scope.kind) {
+        case 'tenant':
+            return { name, passed: true, message: `The judgments came from ${judgedIn}.` };
+        case 'org': {
+            const passed = from === undefined || input.summaryProjectOrgId === scope.orgId;
+            return {
+                name,
+                passed,
+                message: passed
+                    ? `The judgments came from ${judgedIn}, within org ${scope.orgId}.`
+                    : `The judgments came from ${judgedIn}, outside org ${scope.orgId}.`,
+            };
+        }
+        case 'project':
+        case 'segment': {
+            const passed = from === scope.projectId;
+            return {
+                name,
+                passed,
+                message: passed
+                    ? `The judgments came from project ${scope.projectId}, the one promoted in.`
+                    : `The judgments came from ${judgedIn}; this promotion is for project ${scope.projectId}, so it needs that project's judgments.`,
+            };
+        }
+    }
+}
+const REPLAY_KNOBS = [
+    [
+        'maxDiverged',
+        'diverged',
+        'case diverged from its recorded reads',
+        'cases diverged from their recorded reads',
+    ],
+    ['maxErrors', 'errors', 'case errored', 'cases errored'],
+    ['maxRefusedWrites', 'refusedWrites', 'write was refused', 'writes were refused'],
+    ['maxStopped', 'stopped', 'case stopped at a refused write', 'cases stopped at a refused write'],
+];
+function replayChecks(replay, summary) {
+    return REPLAY_KNOBS.map(([knob, field, one, many]) => {
+        const max = replay[knob] ?? 0;
+        const value = summary[field];
+        return {
+            name: `replay.${knob}`,
+            passed: value <= max,
+            message: `${value} ${value === 1 ? one : many}; the policy allows ${max}.`,
+            value,
+            threshold: max,
+        };
+    });
+}
+function metricLabel(name, metric) {
+    switch (name) {
+        case 'weightedYesShare':
+            return 'The weighted yes share';
+        case 'judgedCoverage':
+            return 'Judged coverage';
+        case 'weightedPrecisionAtK':
+            return `Precision at ${metric.k ?? 'k'}`;
+    }
+}
+function metricChecks(spec, policy, summary) {
+    const metric = summary.metrics[spec.name];
+    const label = metricLabel(spec.name, metric);
+    const at = `metric.${spec.name}`;
+    const checks = [];
+    if (spec.name === 'weightedPrecisionAtK' && spec.k !== undefined) {
+        checks.push({
+            name: `${at}.k`,
+            passed: metric.k === spec.k,
+            message: metric.k === spec.k
+                ? `The comparison ranked the top ${spec.k}, as the policy asks.`
+                : `The comparison ranked the top ${metric.k ?? '?'}; the policy gates the top ${spec.k}. Re-run it with \`k: ${spec.k}\`.`,
+            ...(metric.k !== undefined && { value: metric.k }),
+            threshold: spec.k,
+        });
+    }
+    checks.push(...evidenceChecks(spec, policy, metric, label));
+    if (spec.minCandidate !== undefined) {
+        const value = metric.candidate;
+        checks.push({
+            name: `${at}.minCandidate`,
+            passed: value !== null && value + EPSILON >= spec.minCandidate,
+            message: value === null
+                ? `${label} has no judged evidence for the candidate; the policy needs at least ${fmt(spec.minCandidate)}.`
+                : `${label} is ${fmt(value)}; the policy needs at least ${fmt(spec.minCandidate)}.`,
+            ...(value !== null && { value: round(value) }),
+            threshold: spec.minCandidate,
+        });
+    }
+    if (spec.maxDrop !== undefined) {
+        const { candidate, baseline } = metric;
+        const floor = baseline === null ? null : baseline - spec.maxDrop;
+        checks.push({
+            name: `${at}.maxDrop`,
+            passed: candidate !== null && floor !== null && candidate + EPSILON >= floor,
+            message: candidate === null || baseline === null
+                ? `${label} can't be compared: the ${candidate === null ? 'candidate' : 'baseline'} has no judged evidence.`
+                : `${label} is ${fmt(candidate)} against the live version's ${fmt(baseline)}; the policy allows a drop of at most ${fmt(spec.maxDrop)}.`,
+            ...(candidate !== null && baseline !== null && { value: round(candidate - baseline) }),
+            threshold: -spec.maxDrop,
+        });
+    }
+    return checks;
+}
+function evidenceChecks(spec, policy, metric, label) {
+    const evidence = policy.evidence;
+    if (evidence === undefined)
+        return [];
+    const at = `evidence.${spec.name}`;
+    const sides = [
+        { prefix: '', whose: 'the candidate', n: metric.n, weight: metric.weight },
+    ];
+    // "No regression" means nothing on a baseline with two judgments.
+    if (spec.maxDrop !== undefined) {
+        sides.push({
+            prefix: 'baseline',
+            whose: 'the baseline',
+            n: metric.baselineN,
+            weight: metric.baselineWeight,
+        });
+    }
+    const checks = [];
+    for (const side of sides) {
+        const key = (k) => side.prefix === '' ? `${at}.${k[0]?.toLowerCase()}${k.slice(1)}` : `${at}.${side.prefix}${k}`;
+        if (evidence.minCases !== undefined) {
+            checks.push({
+                name: key('MinCases'),
+                passed: side.n >= evidence.minCases,
+                message: `${label} rests on ${count(side.n, 'judged case')} for ${side.whose}; the policy needs at least ${evidence.minCases}.`,
+                value: side.n,
+                threshold: evidence.minCases,
+            });
+        }
+        if (evidence.minWeight !== undefined) {
+            checks.push({
+                name: key('MinWeight'),
+                passed: side.weight + EPSILON >= evidence.minWeight,
+                message: `${label} rests on judgments weighing ${fmt(side.weight)} for ${side.whose}; the policy needs at least ${fmt(evidence.minWeight)}.`,
+                value: round(side.weight),
+                threshold: evidence.minWeight,
+            });
+        }
+    }
+    return checks;
+}
+function round(n) {
+    return Math.round(n * 1000) / 1000;
+}
+function fmt(n) {
+    return String(round(n));
+}
+function count(n, noun) {
+    return `${n} ${noun}${n === 1 ? '' : 's'}`;
+}
+//# sourceMappingURL=gate.js.map

package/dist/gate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"gate.js","sourceRoot":"","sources":["../src/gate.ts"],"names":[],"mappings":"AAAA,sCAAsC;AACtC,iCAAiC;AA8DjC,yDAAyD;AACzD,MAAM,OAAO,GAAG,IAAI,CAAC;AAErB,gEAAgE;AAChE,SAAS,eAAe,CAAC,IAAoB;IAC3C,OAAO,CACL,IAAI,CAAC,UAAU,KAAK,SAAS;QAC7B,IAAI,CAAC,QAAQ,KAAK,SAAS;QAC3B,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,IAAI,CAAC,CAAC,GAAG,CAAC;QAC/B,IAAI,CAAC,MAAM,KAAK,SAAS;QACzB,IAAI,CAAC,qBAAqB,KAAK,IAAI,CACpC,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,IAAoB;IAC/C,IAAI,IAAI,CAAC,SAAS,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IACnD,OAAO;QACL,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,IAAI,QAAQ;QACrC,KAAK,EAAE,CAAC;QACR,gBAAgB,EAAE,IAAI,CAAC,SAAS,CAAC,gBAAgB,IAAI,IAAI;KAC1D,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,KAAgB;IAC3C,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,KAAK,CAAC;IAChC,MAAM,MAAM,GAAgB,EAAE,CAAC;IAC/B,MAAM,QAAQ,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;IACpC,MAAM,QAAQ,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC;IAEvC,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;QACrB,IAAI,QAAQ,EAAE,CAAC;YACb,MAAM,CAAC,IAAI,CAAC;gBACV,IAAI,EAAE,qBAAqB;gBAC3B,MAAM,EAAE,KAAK;gBACb,OAAO,EACL,6GAA6G;aAChH,CAAC,CAAC;QACL,CAAC;QACD,OAAO,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;IAClC,CAAC;IAED,IAAI,QAAQ,EAAE,CAAC;QACb,MAAM,CAAC,IAAI,CAAC;YACV,IAAI,EAAE,qBAAqB;YAC3B,MAAM,EAAE,IAAI;YACZ,OAAO,EAAE,cAAc,OAAO,CAAC,SAAS,YAAY;SACrD,CAAC,CAAC;IACL,CAAC;IACD,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC;IACxC,IAAI,IAAI,CAAC,UAAU,EAAE,WAAW,KAAK,SAAS,EAAE,CAAC;QAC/C,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,UAAU,CAAC,WAAW,EAAE,OAAO,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;IAC/E,CAAC;IACD,IAAI,IAAI,CAAC,UAAU,EAAE,KAAK,KAAK,SAAS;QAAE,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC;IAClG,MAAM,CAAC,IAAI,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAC,CAAC;IACtC,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC;IAC3C,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC;IACxC,IAAI,IAAI,CAAC,qBAAqB,KAAK,IAAI,EAAE,CAAC;QACxC,MAAM,OAAO,GAAG,OAAO,CAAC,YAAY,IAAI,aAAa,CAAC;QACtD,MAAM,CAAC,IAAI,CAAC;YACV,IAAI,EAAE,6BAA6B;YACnC,MAAM,EAAE,OAAO,KAAK,iBAAiB;YACrC,OAAO,EACL,OAAO,KAAK,iBAAiB;gBAC3B,CAAC,CAAC,uDAAuD;gBACzD,CAAC,CAAC,wIAAwI;YAC9I,KAAK,EAAE,OAAO;YACd,SAAS,EAAE,iBAAiB;SAC7B,CAAC,CAAC;IACL,CAAC;IACD,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS;QAAE,MAAM,CAAC,IAAI,CAAC,GAAG,YAAY,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IAClF,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,OAAO,IAAI,EAAE;QAAE,MAAM,CAAC,IAAI,CAAC,GAAG,YAAY,CAAC,MAAM,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC;IAC7F,OAAO,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;AAClC,CAAC;AAED,SAAS,MAAM,CAAC,MAA4B,EAAE,QAAkC;IAC9E,OAAO;QACL,MAAM;QACN,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC;QACrC,GAAG,CAAC,QAAQ,KAAK,SAAS,IAAI,EAAE,QAAQ,EAAE,CAAC;KAC5C,CAAC;AACJ,CAAC;AAED,SAAS,WAAW,CAAC,IAAoB,EAAE,OAAgC;IACzE,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,EAAE,SAAS,IAAI,CAAC,CAAC;IAC9C,MAAM,IAAI,GAAG,EAAE,IAAI,EAAE,mBAAmB,EAAE,KAAK,EAAE,OAAO,CAAC,MAAM,EAAW,CAAC;IAC3E,IAAI,OAAO,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;QACnC,OAAO,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,2BAA2B,EAAE,CAAC;IACzE,CAAC;IACD,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS,IAAI,OAAO,CAAC,MAAM,IAAI,SAAS,EAAE,CAAC;QAChE,OAAO;YACL,GAAG,IAAI;YACP,MAAM,EAAE,IAAI;YACZ,OAAO,EAAE,gCAAgC,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,MAAM,CAAC,gCAAgC,SAAS,GAAG;YAClH,SAAS,EAAE,SAAS;SACrB,CAAC;IACJ,CAAC;IACD,OAAO;QACL,GAAG,IAAI;QACP,MAAM,EAAE,KAAK;QACb,OAAO,EACL,OAAO,CAAC,MAAM,KAAK,QAAQ;YACzB,CAAC,CAAC,wBAAwB;YAC1B,CAAC,CAAC,gCAAgC,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,MAAM,CAAC,gCAAgC,SAAS,GAAG;QAC/G,GAAG,CAAC,OAAO,CAAC,MAAM,KAAK,SAAS,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC;KAC9D,CAAC;AACJ,CAAC;AAED,SAAS,cAAc,CACrB,WAAmB,EACnB,OAAgC,EAChC,GAAS;IAET,MAAM,QAAQ,GAAG,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,IAAI,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,OAAO,EAAE,CAAC,GAAG,SAAS,CAAC;IACvF,MAAM,MAAM,GAAG,QAAQ,IAAI,WAAW,CAAC;IACvC,OAAO;QACL,IAAI,EAAE,sBAAsB;QAC5B,MAAM;QACN,OAAO,EAAE,2BAA2B,KAAK,CAAC,QAAQ,CAAC,wCAAwC,WAAW,GAAG;QACzG,KAAK,EAAE,KAAK,CAAC,QAAQ,CAAC;QACtB,SAAS,EAAE,WAAW;KACvB,CAAC;AACJ,CAAC;AAED,SAAS,UAAU,CACjB,KAAyD,EACzD,OAAgC;IAEhC,MAAM,GAAG,GAAG,GAAG,OAAO,CAAC,KAAK,CAAC,EAAE,IAAI,OAAO,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;IAC3D,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,EAAE,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;IACvF,MAAM,MAAM,GACV,OAAO,CAAC,KAAK,CAAC,EAAE,KAAK,KAAK,CAAC,EAAE;QAC7B,CAAC,KAAK,CAAC,OAAO,KAAK,SAAS,IAAI,OAAO,CAAC,KAAK,CAAC,OAAO,KAAK,KAAK,CAAC,OAAO,CAAC,CAAC;IAC3E,OAAO;QACL,IAAI,EAAE,kBAAkB;QACxB,MAAM;QACN,OAAO,EAAE,MAAM;YACb,CAAC,CAAC,+BAA+B,GAAG,GAAG;YACvC,CAAC,CAAC,+BAA+B,GAAG,sBAAsB,MAAM,GAAG;QACrE,KAAK,EAAE,GAAG;QACV,SAAS,EAAE,MAAM;KAClB,CAAC;AACJ,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAgB;IACzC,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,GAAG,KAAK,CAAC;IACrC,MAAM,SAAS,GAAG,OAAO,EAAE,SAAS,CAAC;IACrC,MAAM,IAAI,GAAG,cAAc,CAAC;IAC5B,MAAM,QAAQ,GAAG,GAAG,SAAS,CAAC,OAAO,IAAI,SAAS,CAAC,OAAO,EAAE,CAAC;IAC7D,IAAI,SAAS,KAAK,SAAS,IAAI,SAAS,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;QAC1D,OAAO;YACL,IAAI;YACJ,MAAM,EAAE,KAAK;YACb,OAAO,EAAE,wDAAwD,QAAQ,IAAI;SAC9E,CAAC;IACJ,CAAC;IACD,MAAM,QAAQ,GAAG,GAAG,SAAS,CAAC,OAAO,IAAI,SAAS,CAAC,OAAO,EAAE,CAAC;IAC7D,IAAI,SAAS,CAAC,OAAO,KAAK,SAAS,CAAC,OAAO,IAAI,SAAS,CAAC,OAAO,KAAK,SAAS,CAAC,OAAO,EAAE,CAAC;QACvF,OAAO;YACL,IAAI;YACJ,MAAM,EAAE,KAAK;YACb,OAAO,EAAE,sBAAsB,QAAQ,SAAS,QAAQ,GAAG;YAC3D,KAAK,EAAE,QAAQ;YACf,SAAS,EAAE,QAAQ;SACpB,CAAC;IACJ,CAAC;IACD,IAAI,SAAS,CAAC,UAAU,KAAK,IAAI,EAAE,CAAC;QAClC,OAAO;YACL,IAAI;YACJ,MAAM,EAAE,KAAK;YACb,OAAO,EAAE,GAAG,QAAQ,wGAAwG;SAC7H,CAAC;IACJ,CAAC;IACD,IAAI,SAAS,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;QACvC,OAAO;YACL,IAAI;YACJ,MAAM,EAAE,KAAK;YACb,OAAO,EACL,mGAAmG;SACtG,CAAC;IACJ,CAAC;IACD,MAAM,MAAM,GAAG,SAAS,CAAC,UAAU,KAAK,SAAS,CAAC,UAAU,CAAC;IAC7D,OAAO;QACL,IAAI;QACJ,MAAM;QACN,OAAO,EAAE,MAAM;YACb,CAAC,CAAC,sBAAsB,QAAQ,sBAAsB;YACtD,CAAC,CAAC,sBAAsB,QAAQ,0DAA0D;QAC5F,KAAK,EAAE,SAAS,CAAC,UAAU;QAC3B,SAAS,EAAE,SAAS,CAAC,UAAU;KAChC,CAAC;AACJ,CAAC;AAED,SAAS,aAAa,CAAC,OAAgC,EAAE,KAAgB;IACvE,MAAM,IAAI,GAAG,gBAAgB,CAAC;IAC9B,MAAM,OAAO,GAAG,GAAG,KAAK,CAAC,SAAS,CAAC,OAAO,IAAI,KAAK,CAAC,cAAc,EAAE,CAAC;IACrE,MAAM,QAAQ,GACZ,OAAO,CAAC,QAAQ,CAAC,IAAI,KAAK,UAAU;QAClC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAClC,SAAS,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,OAAO,EAAE,CAC/E;QACH,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,QAAQ,CAAC,OAAO,IAAI,OAAO,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC;IAClE,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1B,OAAO;YACL,IAAI;YACJ,MAAM,EAAE,KAAK;YACb,OAAO,EAAE,mCAAmC,QAAQ,CAAC,MAAM,cAAc,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,6CAA6C,OAAO,GAAG;YACnJ,KAAK,EAAE,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC;YAC1B,SAAS,EAAE,OAAO;SACnB,CAAC;IACJ,CAAC;IACD,MAAM,MAAM,GAAG,QAAQ,CAAC,CAAC,CAAC,KAAK,OAAO,CAAC;IACvC,OAAO;QACL,IAAI;QACJ,MAAM;QACN,OAAO,EAAE,MAAM;YACb,CAAC,CAAC,mBAAmB,OAAO,mCAAmC;YAC/D,CAAC,CAAC,mBAAmB,QAAQ,CAAC,CAAC,CAAC,uCAAuC,OAAO,qCAAqC;QACrH,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAC,IAAI,EAAE;QACxB,SAAS,EAAE,OAAO;KACnB,CAAC;AACJ,CAAC;AAED,SAAS,UAAU,CAAC,OAAgC,EAAE,KAAgB;IACpE,MAAM,IAAI,GAAG,cAAc,CAAC;IAC5B,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC;IACrC,MAAM,KAAK,GAAG,KAAK,CAAC,SAAS,CAAC,KAAK,CAAC;IACpC,MAAM,QAAQ,GAAG,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,WAAW,IAAI,EAAE,CAAC;IAC7E,QAAQ,KAAK,CAAC,IAAI,EAAE,CAAC;QACnB,KAAK,QAAQ;YACX,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,2BAA2B,QAAQ,GAAG,EAAE,CAAC;QACjF,KAAK,KAAK,CAAC,CAAC,CAAC;YACX,MAAM,MAAM,GAAG,IAAI,KAAK,SAAS,IAAI,KAAK,CAAC,mBAAmB,KAAK,KAAK,CAAC,KAAK,CAAC;YAC/E,OAAO;gBACL,IAAI;gBACJ,MAAM;gBACN,OAAO,EAAE,MAAM;oBACb,CAAC,CAAC,2BAA2B,QAAQ,gBAAgB,KAAK,CAAC,KAAK,GAAG;oBACnE,CAAC,CAAC,2BAA2B,QAAQ,iBAAiB,KAAK,CAAC,KAAK,GAAG;aACvE,CAAC;QACJ,CAAC;QACD,KAAK,SAAS,CAAC;QACf,KAAK,SAAS,CAAC,CAAC,CAAC;YACf,MAAM,MAAM,GAAG,IAAI,KAAK,KAAK,CAAC,SAAS,CAAC;YACxC,OAAO;gBACL,IAAI;gBACJ,MAAM;gBACN,OAAO,EAAE,MAAM;oBACb,CAAC,CAAC,mCAAmC,KAAK,CAAC,SAAS,wBAAwB;oBAC5E,CAAC,CAAC,2BAA2B,QAAQ,mCAAmC,KAAK,CAAC,SAAS,yCAAyC;aACnI,CAAC;QACJ,CAAC;IACH,CAAC;AACH,CAAC;AAED,MAAM,YAAY,GAAG;IACnB;QACE,aAAa;QACb,UAAU;QACV,uCAAuC;QACvC,0CAA0C;KAC3C;IACD,CAAC,WAAW,EAAE,QAAQ,EAAE,cAAc,EAAE,eAAe,CAAC;IACxD,CAAC,kBAAkB,EAAE,eAAe,EAAE,mBAAmB,EAAE,qBAAqB,CAAC;IACjF,CAAC,YAAY,EAAE,SAAS,EAAE,iCAAiC,EAAE,kCAAkC,CAAC;CACxF,CAAC;AAEX,SAAS,YAAY,CACnB,MAA6C,EAC7C,OAAgC;IAEhC,OAAO,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,CAAC,EAAE,EAAE;QACnD,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC9B,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC;QAC7B,OAAO;YACL,IAAI,EAAE,UAAU,IAAI,EAAE;YACtB,MAAM,EAAE,KAAK,IAAI,GAAG;YACpB,OAAO,EAAE,GAAG,KAAK,IAAI,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,uBAAuB,GAAG,GAAG;YAC1E,KAAK;YACL,SAAS,EAAE,GAAG;SACf,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,WAAW,CAAC,IAAoB,EAAE,MAAwB;IACjE,QAAQ,IAAI,EAAE,CAAC;QACb,KAAK,kBAAkB;YACrB,OAAO,wBAAwB,CAAC;QAClC,KAAK,gBAAgB;YACnB,OAAO,iBAAiB,CAAC;QAC3B,KAAK,sBAAsB;YACzB,OAAO,gBAAgB,MAAM,CAAC,CAAC,IAAI,GAAG,EAAE,CAAC;IAC7C,CAAC;AACH,CAAC;AAED,SAAS,YAAY,CACnB,IAAoB,EACpB,MAAsB,EACtB,OAAgC;IAEhC,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC1C,MAAM,KAAK,GAAG,WAAW,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAC7C,MAAM,EAAE,GAAG,UAAU,IAAI,CAAC,IAAI,EAAE,CAAC;IACjC,MAAM,MAAM,GAAgB,EAAE,CAAC;IAC/B,IAAI,IAAI,CAAC,IAAI,KAAK,sBAAsB,IAAI,IAAI,CAAC,CAAC,KAAK,SAAS,EAAE,CAAC;QACjE,MAAM,CAAC,IAAI,CAAC;YACV,IAAI,EAAE,GAAG,EAAE,IAAI;YACf,MAAM,EAAE,MAAM,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC;YAC3B,OAAO,EACL,MAAM,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC;gBACjB,CAAC,CAAC,iCAAiC,IAAI,CAAC,CAAC,uBAAuB;gBAChE,CAAC,CAAC,iCAAiC,MAAM,CAAC,CAAC,IAAI,GAAG,8BAA8B,IAAI,CAAC,CAAC,yBAAyB,IAAI,CAAC,CAAC,KAAK;YAC9H,GAAG,CAAC,MAAM,CAAC,CAAC,KAAK,SAAS,IAAI,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC,EAAE,CAAC;YAClD,SAAS,EAAE,IAAI,CAAC,CAAC;SAClB,CAAC,CAAC;IACL,CAAC;IACD,MAAM,CAAC,IAAI,CAAC,GAAG,cAAc,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC;IAC5D,IAAI,IAAI,CAAC,YAAY,KAAK,SAAS,EAAE,CAAC;QACpC,MAAM,KAAK,GAAG,MAAM,CAAC,SAAS,CAAC;QAC/B,MAAM,CAAC,IAAI,CAAC;YACV,IAAI,EAAE,GAAG,EAAE,eAAe;YAC1B,MAAM,EAAE,KAAK,KAAK,IAAI,IAAI,KAAK,GAAG,OAAO,IAAI,IAAI,CAAC,YAAY;YAC9D,OAAO,EACL,KAAK,KAAK,IAAI;gBACZ,CAAC,CAAC,GAAG,KAAK,wEAAwE,GAAG,CAAC,IAAI,CAAC,YAAY,CAAC,GAAG;gBAC3G,CAAC,CAAC,GAAG,KAAK,OAAO,GAAG,CAAC,KAAK,CAAC,+BAA+B,GAAG,CAAC,IAAI,CAAC,YAAY,CAAC,GAAG;YACvF,GAAG,CAAC,KAAK,KAAK,IAAI,IAAI,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;YAC9C,SAAS,EAAE,IAAI,CAAC,YAAY;SAC7B,CAAC,CAAC;IACL,CAAC;IACD,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;QAC/B,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,GAAG,MAAM,CAAC;QACvC,MAAM,KAAK,GAAG,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC;QACjE,MAAM,CAAC,IAAI,CAAC;YACV,IAAI,EAAE,GAAG,EAAE,UAAU;YACrB,MAAM,EAAE,SAAS,KAAK,IAAI,IAAI,KAAK,KAAK,IAAI,IAAI,SAAS,GAAG,OAAO,IAAI,KAAK;YAC5E,OAAO,EACL,SAAS,KAAK,IAAI,IAAI,QAAQ,KAAK,IAAI;gBACrC,CAAC,CAAC,GAAG,KAAK,2BAA2B,SAAS,KAAK,IAAI,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,UAAU,0BAA0B;gBAC5G,CAAC,CAAC,GAAG,KAAK,OAAO,GAAG,CAAC,SAAS,CAAC,+BAA+B,GAAG,CAAC,QAAQ,CAAC,yCAAyC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG;YAC5I,GAAG,CAAC,SAAS,KAAK,IAAI,IAAI,QAAQ,KAAK,IAAI,IAAI,EAAE,KAAK,EAAE,KAAK,CAAC,SAAS,GAAG,QAAQ,CAAC,EAAE,CAAC;YACtF,SAAS,EAAE,CAAC,IAAI,CAAC,OAAO;SACzB,CAAC,CAAC;IACL,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,cAAc,CACrB,IAAoB,EACpB,MAAsB,EACtB,MAAwB,EACxB,KAAa;IAEb,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC;IACjC,IAAI,QAAQ,KAAK,SAAS;QAAE,OAAO,EAAE,CAAC;IACtC,MAAM,EAAE,GAAG,YAAY,IAAI,CAAC,IAAI,EAAE,CAAC;IACnC,MAAM,KAAK,GAAmE;QAC5E,EAAE,MAAM,EAAE,EAAE,EAAE,KAAK,EAAE,eAAe,EAAE,CAAC,EAAE,MAAM,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE;KAC3E,CAAC;IACF,kEAAkE;IAClE,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;QAC/B,KAAK,CAAC,IAAI,CAAC;YACT,MAAM,EAAE,UAAU;YAClB,KAAK,EAAE,cAAc;YACrB,CAAC,EAAE,MAAM,CAAC,SAAS;YACnB,MAAM,EAAE,MAAM,CAAC,cAAc;SAC9B,CAAC,CAAC;IACL,CAAC;IACD,MAAM,MAAM,GAAgB,EAAE,CAAC;IAC/B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,GAAG,GAAG,CAAC,CAA2B,EAAE,EAAE,CAC1C,IAAI,CAAC,MAAM,KAAK,EAAE,CAAC,CAAC,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,EAAE,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAChG,IAAI,QAAQ,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;YACpC,MAAM,CAAC,IAAI,CAAC;gBACV,IAAI,EAAE,GAAG,CAAC,UAAU,CAAC;gBACrB,MAAM,EAAE,IAAI,CAAC,CAAC,IAAI,QAAQ,CAAC,QAAQ;gBACnC,OAAO,EAAE,GAAG,KAAK,aAAa,KAAK,CAAC,IAAI,CAAC,CAAC,EAAE,aAAa,CAAC,QAAQ,IAAI,CAAC,KAAK,+BAA+B,QAAQ,CAAC,QAAQ,GAAG;gBAC/H,KAAK,EAAE,IAAI,CAAC,CAAC;gBACb,SAAS,EAAE,QAAQ,CAAC,QAAQ;aAC7B,CAAC,CAAC;QACL,CAAC;QACD,IAAI,QAAQ,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;YACrC,MAAM,CAAC,IAAI,CAAC;gBACV,IAAI,EAAE,GAAG,CAAC,WAAW,CAAC;gBACtB,MAAM,EAAE,IAAI,CAAC,MAAM,GAAG,OAAO,IAAI,QAAQ,CAAC,SAAS;gBACnD,OAAO,EAAE,GAAG,KAAK,gCAAgC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,IAAI,CAAC,KAAK,+BAA+B,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,GAAG;gBAC5I,KAAK,EAAE,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC;gBACzB,SAAS,EAAE,QAAQ,CAAC,SAAS;aAC9B,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,KAAK,CAAC,CAAS;IACtB,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC;AACrC,CAAC;AAED,SAAS,GAAG,CAAC,CAAS;IACpB,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;AAC1B,CAAC;AAED,SAAS,KAAK,CAAC,CAAS,EAAE,IAAY;IACpC,OAAO,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC;AAC7C,CAAC"}

package/dist/guardrail-binding.d.ts

@@ -2,6 +2,7 @@ import type { TupleEnqueueHook } from '@kindgi/authz';
 import type { Guardrail } from '@kindgi/guardrails';
 import type { Scope } from '@kindgi/platform';
 import type { Cursor, GuardrailId, ProjectId, TenantId } from '@kindgi/types';
+import type { RegistryReadOnly } from './registry-read-only.js';
 /**
  * Caller-plugged surface for the guardrail catalog. Same shape as
  * `AgentRegistryBinding` / `ToolRegistryBinding`: the API package does
@@ -23,6 +24,13 @@ import type { Cursor, GuardrailId, ProjectId, TenantId } from '@kindgi/types';
  * inspects the payload.
  */
 export interface GuardrailRegistryBinding {
+    /**
+     * Set when this registry takes no writes (under `kindgi dev`, the
+     * pack's files are the source of its guardrails): every write is refused
+     * with `409 registry-read-only` and this reason, before the binding is
+     * called. See `RegistryReadOnly`.
+     */
+    readonly readOnly?: RegistryReadOnly;
     /**
      * Cursor-paginated list of guardrails sorted by id ascending.
      * Optional `nameFilter` is a prefix match on the guardrail id —