@kindgi/api 0.1.4-rc.1 → 0.1.4-rc.3

package/dist/eval-run-binding.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"eval-run-binding.d.ts","sourceRoot":"","sources":["../src/eval-run-binding.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,gBAAgB,CAAC;AAC9C,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAC;AACzD,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,eAAe,CAAC;AAEnG,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,yBAAyB,CAAC;AAExD;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,WAAW,cAAc;IAC7B;;;;OAIG;IACH,KAAK,CAAC,KAAK,EAAE,iBAAiB,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAAC;IAC9D;;;OAGG;IACH,GAAG,CAAC,KAAK,EAAE,eAAe,GAAG,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC,CAAC;IACrD;;;;OAIG;IACH,IAAI,CAAC,KAAK,EAAE,gBAAgB,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;IACpD;;;;;OAKG;IACH,MAAM,CAAC,KAAK,EAAE,kBAAkB,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAAC;CAClE;AAED;;;;GAIG;AACH,MAAM,WAAW,QAAQ;IACvB,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;CAC3B;AACD,MAAM,WAAW,OAAO;IACtB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED;;;;;GAKG;AACH,eAAO,MAAM,iBAAiB,qEAMpB,CAAC;AACX,MAAM,MAAM,aAAa,GAAG,CAAC,OAAO,iBAAiB,CAAC,CAAC,MAAM,CAAC,CAAC;AAE/D;;;;;GAKG;AACH,MAAM,WAAW,OAAO;IACtB,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC;IACtB,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC;IAC5B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC;IACxB,QAAQ,CAAC,QAAQ,CAAC,EAAE,QAAQ,CAAC;IAC7B,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC;IAC3B,QAAQ,CAAC,MAAM,EAAE,aAAa,CAAC;IAC/B,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;IACzB,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAC;IAC9B,QAAQ,CAAC,WAAW,CAAC,EAAE,SAAS,CAAC;IACjC,QAAQ,CAAC,MAAM,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IACpD,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAChC,+DAA+D;IAC/D,QAAQ,CAAC,UAAU,CAAC,EAAE,cAAc,CAAC;CACtC;AAED,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,MAAM,CAAC,EAAE,aAAa,CAAC;IAChC,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC;IAC3B,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,IAAI,CAAC,EAAE,SAAS,CAAC;IAC1B,QAAQ,CAAC,EAAE,CAAC,EAAE,SAAS,CAAC;CACzB;AAED;;;;;GAKG;AACH,MAAM,MAAM,YAAY,GACpB,UAAU,GACV;IAAE,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GACvD;IACE,QAAQ,CAAC,IAAI,EAAE;QACb,QAAQ,CAAC,SAAS,CAAC,EAAE,SAAS,CAAC;QAC/B,QAAQ,CAAC,QAAQ,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;KACtD,CAAC;CACH,CAAC;AAEN,uFAAuF;AACvF,MAAM,MAAM,SAAS,GAAG,UAAU,GAAG,MAAM,CAAC;AAE5C,qFAAqF;AACrF,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,QAAQ,EAAE,YAAY,CAAC;IAChC,QAAQ,CAAC,KAAK,EAAE,SAAS,CAAC;IAC1B,4FAA4F;IAC5F,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,qEAAqE;IACrE,QAAQ,CAAC,CAAC,EAAE,MAAM,CAAC;IACnB;;;;OAIG;IACH,QAAQ,CAAC,QAAQ,CAAC,EAAE,oBAAoB,CAAC;CAC1C;AAED,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC;IAC5B;;;;;OAKG;IACH,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAC;IAC9B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,QAAQ,CAAC,EAAE,QAAQ,CAAC;IAC7B,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC;IAC3B,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAChC,6FAA6F;IAC7F,QAAQ,CAAC,UAAU,CAAC,EAAE,cAAc,CAAC;CACtC;AAED;;;GAGG;AACH,MAAM,MAAM,mBAAmB,GAC3B;IACE,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC;IACpB,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC;IACtB,QAAQ,CAAC,aAAa,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;CAC5D,GACD;IAAE,QAAQ,CAAC,IAAI,EAAE,iBAAiB,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GAC9D;IAAE,QAAQ,CAAC,IAAI,EAAE,2BAA2B,CAAC;IAAC,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAA;CAAE,GAC3E;IAAE,QAAQ,CAAC,IAAI,EAAE,0BAA0B,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GACvE;IACE;;;;;;OAMG;IACH,QAAQ,CAAC,IAAI,EAAE,mBAAmB,CAAC;IACnC,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAC;CAC/B,CAAC;AAEN,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC;IAC5B,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC;CACvB;AAED,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC;IAC5B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,MAAM,CAAC,EAAE,aAAa,CAAC;IAChC;;;;;;;;;;;;;OAaG;IACH,QAAQ,CAAC,KAAK,CAAC,EAAE,KAAK,CAAC;IACvB;;;;;;;OAOG;IACH,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC;CAC5B;AAED,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,IAAI,EAAE,SAAS,OAAO,EAAE,CAAC;IAClC,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;CAC9B;AAED,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC;IAC5B,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC;CACvB;AAED,MAAM,MAAM,oBAAoB,GAC5B;IAAE,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAA;CAAE,GACvB;IAAE,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAA;CAAE,GAC9B;IAAE,QAAQ,CAAC,IAAI,EAAE,kBAAkB,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,aAAa,CAAA;CAAE,CAAC"}
+{"version":3,"file":"eval-run-binding.d.ts","sourceRoot":"","sources":["../src/eval-run-binding.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,gBAAgB,CAAC;AAC9C,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAC;AACzD,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,KAAK,EACV,MAAM,EACN,MAAM,EACN,SAAS,EACT,KAAK,EACL,YAAY,EACZ,MAAM,EACN,QAAQ,EACR,SAAS,EACV,MAAM,eAAe,CAAC;AAEvB,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,yBAAyB,CAAC;AAExD;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,WAAW,cAAc;IAC7B;;;;OAIG;IACH,KAAK,CAAC,KAAK,EAAE,iBAAiB,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAAC;IAC9D;;;OAGG;IACH,GAAG,CAAC,KAAK,EAAE,eAAe,GAAG,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC,CAAC;IACrD;;;;OAIG;IACH,IAAI,CAAC,KAAK,EAAE,gBAAgB,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;IACpD;;;;;OAKG;IACH,MAAM,CAAC,KAAK,EAAE,kBAAkB,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAAC;CAClE;AAED;;;;GAIG;AACH,MAAM,WAAW,QAAQ;IACvB,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;CAC3B;AACD,MAAM,WAAW,OAAO;IACtB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED;;;;;GAKG;AACH,eAAO,MAAM,iBAAiB,qEAMpB,CAAC;AACX,MAAM,MAAM,aAAa,GAAG,CAAC,OAAO,iBAAiB,CAAC,CAAC,MAAM,CAAC,CAAC;AAE/D;;;;;GAKG;AACH,MAAM,WAAW,OAAO;IACtB,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC;IACtB,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC;IAC5B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC;IACxB,QAAQ,CAAC,QAAQ,CAAC,EAAE,QAAQ,CAAC;IAC7B,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC;IAC3B,QAAQ,CAAC,MAAM,EAAE,aAAa,CAAC;IAC/B,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;IACzB,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAC;IAC9B,QAAQ,CAAC,WAAW,CAAC,EAAE,SAAS,CAAC;IACjC,QAAQ,CAAC,MAAM,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IACpD,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAChC,+DAA+D;IAC/D,QAAQ,CAAC,UAAU,CAAC,EAAE,cAAc,CAAC;CACtC;AAED,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,MAAM,CAAC,EAAE,aAAa,CAAC;IAChC,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC;IAC3B,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,IAAI,CAAC,EAAE,SAAS,CAAC;IAC1B,QAAQ,CAAC,EAAE,CAAC,EAAE,SAAS,CAAC;CACzB;AAED;;;;;;GAMG;AACH,MAAM,MAAM,YAAY,GACpB,UAAU,GACV;IAAE,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GACvD;IACE,QAAQ,CAAC,IAAI,EAAE;QACb,QAAQ,CAAC,SAAS,CAAC,EAAE,SAAS,CAAC;QAC/B,qDAAqD;QACrD,QAAQ,CAAC,QAAQ,CAAC,EAAE,SAAS,YAAY,EAAE,CAAC;KAC7C,CAAC;CACH,CAAC;AAEN,uFAAuF;AACvF,MAAM,MAAM,SAAS,GAAG,UAAU,GAAG,MAAM,CAAC;AAE5C;;;;;GAKG;AACH,MAAM,MAAM,gBAAgB,GAAG,aAAa,GAAG,iBAAiB,CAAC;AAEjE,qFAAqF;AACrF,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,QAAQ,EAAE,YAAY,CAAC;IAChC,QAAQ,CAAC,KAAK,EAAE,SAAS,CAAC;IAC1B,4FAA4F;IAC5F,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,qEAAqE;IACrE,QAAQ,CAAC,CAAC,EAAE,MAAM,CAAC;IACnB;;;;OAIG;IACH,QAAQ,CAAC,QAAQ,CAAC,EAAE,oBAAoB,CAAC;IACzC,qDAAqD;IACrD,QAAQ,CAAC,YAAY,CAAC,EAAE,gBAAgB,CAAC;CAC1C;AAED,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC;IAC5B;;;;;OAKG;IACH,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAC;IAC9B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,QAAQ,CAAC,EAAE,QAAQ,CAAC;IAC7B,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC;IAC3B,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAChC,6FAA6F;IAC7F,QAAQ,CAAC,UAAU,CAAC,EAAE,cAAc,CAAC;CACtC;AAED;;;GAGG;AACH,MAAM,MAAM,mBAAmB,GAC3B;IACE,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC;IACpB,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC;IACtB,QAAQ,CAAC,aAAa,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;CAC5D,GACD;IAAE,QAAQ,CAAC,IAAI,EAAE,iBAAiB,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GAC9D;IAAE,QAAQ,CAAC,IAAI,EAAE,2BAA2B,CAAC;IAAC,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAA;CAAE,GAC3E;IAAE,QAAQ,CAAC,IAAI,EAAE,0BAA0B,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GACvE;IACE;;;;;;OAMG;IACH,QAAQ,CAAC,IAAI,EAAE,mBAAmB,CAAC;IACnC,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAC;CAC/B,CAAC;AAEN,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC;IAC5B,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC;CACvB;AAED,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC;IAC5B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,MAAM,CAAC,EAAE,aAAa,CAAC;IAChC;;;;;;;;;;;;;OAaG;IACH,QAAQ,CAAC,KAAK,CAAC,EAAE,KAAK,CAAC;IACvB;;;;;;;OAOG;IACH,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC;CAC5B;AAED,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,IAAI,EAAE,SAAS,OAAO,EAAE,CAAC;IAClC,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;CAC9B;AAED,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC;IAC5B,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC;CACvB;AAED,MAAM,MAAM,oBAAoB,GAC5B;IAAE,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAA;CAAE,GACvB;IAAE,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAA;CAAE,GAC9B;IAAE,QAAQ,CAAC,IAAI,EAAE,kBAAkB,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,aAAa,CAAA;CAAE,CAAC"}

package/dist/eval-run-binding.js.map

@@ -1 +1 @@
-{"version":3,"file":"eval-run-binding.js","sourceRoot":"","sources":["../src/eval-run-binding.ts"],"names":[],"mappings":"AAAA,sCAAsC;AACtC,iCAAiC;AAuEjC;;;;;GAKG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG;IAC/B,SAAS;IACT,SAAS;IACT,WAAW;IACX,QAAQ;IACR,WAAW;CACH,CAAC"}
+{"version":3,"file":"eval-run-binding.js","sourceRoot":"","sources":["../src/eval-run-binding.ts"],"names":[],"mappings":"AAAA,sCAAsC;AACtC,iCAAiC;AAgFjC;;;;;GAKG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG;IAC/B,SAAS;IACT,SAAS;IACT,WAAW;IACX,QAAQ;IACR,WAAW;CACH,CAAC"}

package/dist/flow-pins.d.ts

@@ -5,6 +5,7 @@ import type { AgentRegistryBinding } from './agent-binding.js';
 import { type UnpinnableRef } from './agent-pins.js';
 import { type DeployedVersionOutcome } from './deploy-versions.js';
 import type { FlowRegistryBinding } from './flow-binding.js';
+import type { LiveVersionBinding } from './live-version-binding.js';
 import type { ToolRegistryBinding } from './tool-binding.js';
 export type FlowPinsOutcome = {
     readonly kind: 'ok';
@@ -14,14 +15,26 @@ export type FlowPinsOutcome = {
     readonly issues: readonly UnpinnableRef[];
 };
 /**
- * Pin a flow version when it's published: each tool it runs, and each
- * agent it runs at no named version, to its latest active version now
- * (what a run would have bound), so every run of the version uses those.
- * A tool or agent with no published version makes the flow unpinnable:
- * the caller refuses the publish, naming each, rather than store a
- * partly pinned version.
+ * Where a flow version is published, so its agent pins are what a run
+ * there would get: the agents' live versions for the project.
  */
-export declare function resolveFlowPins(tools: ToolRegistryBinding, agents: AgentRegistryBinding, tenantId: TenantId, flow: Flow): Promise<FlowPinsOutcome>;
+export interface FlowPinsLive {
+    readonly binding: LiveVersionBinding;
+    readonly projectId: ProjectId;
+}
+/**
+ * Pin a flow version when it's published, to what a run would have bound
+ * then, so every run of the version uses those: each tool it runs to its
+ * latest active version, and each agent it runs at no named version to
+ * the version a run that names none gets in the flow's project. That's
+ * the agent's live version there (project, then its org, then the
+ * tenant), with `live`, else its latest. A gated agent's flow runs what
+ * its promotions let go live, not an unpromoted newer version. A tool or
+ * agent with no published version makes the flow unpinnable: the caller
+ * refuses the publish, naming each, rather than store a partly pinned
+ * version.
+ */
+export declare function resolveFlowPins(tools: ToolRegistryBinding, agents: AgentRegistryBinding, tenantId: TenantId, flow: Flow, live?: FlowPinsLive): Promise<FlowPinsOutcome>;
 export interface PublishDeployedFlowInput {
     readonly flows: FlowRegistryBinding;
     readonly tenantId: TenantId;

package/dist/flow-pins.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"flow-pins.d.ts","sourceRoot":"","sources":["../src/flow-pins.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AACtD,OAAO,EAAE,KAAK,IAAI,EAAE,KAAK,QAAQ,EAA4B,MAAM,cAAc,CAAC;AAElF,OAAO,KAAK,EAAkB,SAAS,EAAE,QAAQ,EAAU,MAAM,eAAe,CAAC;AAEjF,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AAC/D,OAAO,EAAE,KAAK,aAAa,EAAsB,MAAM,iBAAiB,CAAC;AACzE,OAAO,EAAE,KAAK,sBAAsB,EAAiB,MAAM,sBAAsB,CAAC;AAClF,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AAC7D,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AAE7D,MAAM,MAAM,eAAe,GACvB;IAAE,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAA;CAAE,GAChD;IAAE,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,SAAS,aAAa,EAAE,CAAA;CAAE,CAAC;AAE/E;;;;;;;GAOG;AACH,wBAAsB,eAAe,CACnC,KAAK,EAAE,mBAAmB,EAC1B,MAAM,EAAE,oBAAoB,EAC5B,QAAQ,EAAE,QAAQ,EAClB,IAAI,EAAE,IAAI,GACT,OAAO,CAAC,eAAe,CAAC,CA2B1B;AAED,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,KAAK,EAAE,mBAAmB,CAAC;IACpC,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC;IAC5B,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAC;IAC9B,qDAAqD;IACrD,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC;IACpB,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC;IACxB,QAAQ,CAAC,aAAa,EAAE,gBAAgB,CAAC;CAC1C;AAED,oFAAoF;AACpF,wBAAsB,mBAAmB,CACvC,KAAK,EAAE,wBAAwB,GAC9B,OAAO,CAAC,sBAAsB,CAAC,CAcjC"}
+{"version":3,"file":"flow-pins.d.ts","sourceRoot":"","sources":["../src/flow-pins.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AACtD,OAAO,EAAE,KAAK,IAAI,EAAE,KAAK,QAAQ,EAA4B,MAAM,cAAc,CAAC;AAElF,OAAO,KAAK,EAAkB,SAAS,EAAE,QAAQ,EAAU,MAAM,eAAe,CAAC;AAEjF,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AAC/D,OAAO,EAAE,KAAK,aAAa,EAAsB,MAAM,iBAAiB,CAAC;AACzE,OAAO,EAAE,KAAK,sBAAsB,EAAiB,MAAM,sBAAsB,CAAC;AAClF,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AAC7D,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AAEpE,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AAE7D,MAAM,MAAM,eAAe,GACvB;IAAE,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAA;CAAE,GAChD;IAAE,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,SAAS,aAAa,EAAE,CAAA;CAAE,CAAC;AAE/E;;;GAGG;AACH,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,OAAO,EAAE,kBAAkB,CAAC;IACrC,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAC;CAC/B;AAED;;;;;;;;;;;GAWG;AACH,wBAAsB,eAAe,CACnC,KAAK,EAAE,mBAAmB,EAC1B,MAAM,EAAE,oBAAoB,EAC5B,QAAQ,EAAE,QAAQ,EAClB,IAAI,EAAE,IAAI,EACV,IAAI,CAAC,EAAE,YAAY,GAClB,OAAO,CAAC,eAAe,CAAC,CA2B1B;AAyBD,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,KAAK,EAAE,mBAAmB,CAAC;IACpC,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC;IAC5B,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAC;IAC9B,qDAAqD;IACrD,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC;IACpB,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC;IACxB,QAAQ,CAAC,aAAa,EAAE,gBAAgB,CAAC;CAC1C;AAED,oFAAoF;AACpF,wBAAsB,mBAAmB,CACvC,KAAK,EAAE,wBAAwB,GAC9B,OAAO,CAAC,sBAAsB,CAAC,CAejC"}

package/dist/flow-pins.js

@@ -4,15 +4,20 @@ import { flowPinsDigest, flowRefs } from '@kindgi/flow';
 import { latestVersion } from '@kindgi/tools';
 import { activeToolVersions } from './agent-pins.js';
 import { deployVersion } from './deploy-versions.js';
+import { PublishRefused } from './publish-refused.js';
 /**
- * Pin a flow version when it's published: each tool it runs, and each
- * agent it runs at no named version, to its latest active version now
- * (what a run would have bound), so every run of the version uses those.
- * A tool or agent with no published version makes the flow unpinnable:
- * the caller refuses the publish, naming each, rather than store a
- * partly pinned version.
+ * Pin a flow version when it's published, to what a run would have bound
+ * then, so every run of the version uses those: each tool it runs to its
+ * latest active version, and each agent it runs at no named version to
+ * the version a run that names none gets in the flow's project. That's
+ * the agent's live version there (project, then its org, then the
+ * tenant), with `live`, else its latest. A gated agent's flow runs what
+ * its promotions let go live, not an unpromoted newer version. A tool or
+ * agent with no published version makes the flow unpinnable: the caller
+ * refuses the publish, naming each, rather than store a partly pinned
+ * version.
  */
-export async function resolveFlowPins(tools, agents, tenantId, flow) {
+export async function resolveFlowPins(tools, agents, tenantId, flow, live) {
     const refs = flowRefs(flow);
     const pinned = {
         tools: {},
@@ -30,9 +35,9 @@ export async function resolveFlowPins(tools, agents, tenantId, flow) {
             });
     }
     for (const id of refs.agents) {
-        const latest = await agents.get({ tenantId, agentId: id });
-        if (latest !== null)
-            pinned.agents[id] = latest.version;
+        const version = await implicitAgentVersion(agents, live, tenantId, id);
+        if (version !== undefined)
+            pinned.agents[id] = version;
         else
             issues.push({
                 path: '/nodes',
@@ -43,6 +48,24 @@ export async function resolveFlowPins(tools, agents, tenantId, flow) {
         return { kind: 'unpinnable', issues };
     return { kind: 'ok', pins: pinned };
 }
+/**
+ * The version a run of agent `id` that names none gets now: its live
+ * version for `live`'s project when one is pinned on the way up, else its
+ * latest; `undefined` when it has no published version.
+ */
+async function implicitAgentVersion(agents, live, tenantId, id) {
+    if (live !== undefined) {
+        const resolved = await live.binding.resolve({
+            tenantId,
+            agentId: id,
+            projectId: live.projectId,
+        });
+        if (resolved !== null)
+            return resolved.version;
+    }
+    const latest = await agents.get({ tenantId, agentId: id });
+    return latest === null ? undefined : latest.version;
+}
 /** Register a deployed flow with its pins, by the deploy rule (`deployVersion`). */
 export async function publishDeployedFlow(input) {
     const { flows, tenantId, projectId, flow, pins, enqueueTuples } = input;
@@ -56,7 +79,9 @@ export async function publishDeployedFlow(input) {
             const outcome = await flows.publish({ tenantId, projectId, flow: version, enqueueTuples });
             if (outcome.kind === 'ok')
                 return 'ok';
-            return outcome.kind === 'project-not-found' ? 'skipped' : 'taken';
+            if (outcome.kind === 'already-registered')
+                return 'taken';
+            throw new PublishRefused('flow', `${flow.id}@${version.version}`, outcome.kind);
         },
     });
 }

package/dist/flow-pins.js.map

@@ -1 +1 @@
-{"version":3,"file":"flow-pins.js","sourceRoot":"","sources":["../src/flow-pins.ts"],"names":[],"mappings":"AAAA,sCAAsC;AACtC,iCAAiC;AAIjC,OAAO,EAA4B,cAAc,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAC;AAClF,OAAO,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAI9C,OAAO,EAAsB,kBAAkB,EAAE,MAAM,iBAAiB,CAAC;AACzE,OAAO,EAA+B,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAQlF;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,KAA0B,EAC1B,MAA4B,EAC5B,QAAkB,EAClB,IAAU;IAEV,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;IAC5B,MAAM,MAAM,GAAsE;QAChF,KAAK,EAAE,EAAE;QACT,MAAM,EAAE,EAAE;KACX,CAAC;IACF,MAAM,MAAM,GAAoB,EAAE,CAAC;IACnC,KAAK,MAAM,EAAE,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;QAC5B,MAAM,MAAM,GAAG,aAAa,CAAC,MAAM,kBAAkB,CAAC,KAAK,EAAE,QAAQ,EAAE,EAAY,CAAC,CAAC,CAAC;QACtF,IAAI,MAAM,KAAK,SAAS;YAAE,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC;;YAElD,MAAM,CAAC,IAAI,CAAC;gBACV,IAAI,EAAE,QAAQ;gBACd,OAAO,EAAE,SAAS,EAAE,oDAAoD;aACzE,CAAC,CAAC;IACP,CAAC;IACD,KAAK,MAAM,EAAE,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;QAC7B,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,GAAG,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,EAAa,EAAE,CAAC,CAAC;QACtE,IAAI,MAAM,KAAK,IAAI;YAAE,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,OAA4B,CAAC;;YAE3E,MAAM,CAAC,IAAI,CAAC;gBACV,IAAI,EAAE,QAAQ;gBACd,OAAO,EAAE,UAAU,EAAE,qDAAqD;aAC3E,CAAC,CAAC;IACP,CAAC;IACD,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,MAAM,EAAE,CAAC;IAC7D,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;AACtC,CAAC;AAYD,oFAAoF;AACpF,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,KAA+B;IAE/B,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,aAAa,EAAE,GAAG,KAAK,CAAC;IACxE,OAAO,aAAa,CAAO;QACzB,KAAK,EAAE,SAAS,IAAI,CAAC,EAAuB,GAAG;QAC/C,UAAU,EAAE,IAAI;QAChB,IAAI;QACJ,UAAU,EAAE,cAAc,CAAC,IAAI,CAAC;QAChC,QAAQ,EAAE,MAAM,eAAe,CAAC,KAAK,EAAE,QAAQ,EAAE,IAAI,CAAC,EAAE,CAAC;QACzD,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;YACzB,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,OAAO,CAAC,EAAE,QAAQ,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,EAAE,aAAa,EAAE,CAAC,CAAC;YAC3F,IAAI,OAAO,CAAC,IAAI,KAAK,IAAI;gBAAE,OAAO,IAAI,CAAC;YACvC,OAAO,OAAO,CAAC,IAAI,KAAK,mBAAmB,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC;QACpE,CAAC;KACF,CAAC,CAAC;AACL,CAAC;AAED,+CAA+C;AAC/C,MAAM,aAAa,GAAG,GAAG,CAAC;AAE1B,sCAAsC;AACtC,KAAK,UAAU,eAAe,CAC5B,KAA0B,EAC1B,QAAkB,EAClB,MAAc;IAEd,MAAM,QAAQ,GAAW,EAAE,CAAC;IAC5B,IAAI,MAA0B,CAAC;IAC/B,GAAG,CAAC;QACF,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,YAAY,CAAC;YACpC,QAAQ;YACR,MAAM;YACN,KAAK,EAAE,aAAa;YACpB,GAAG,CAAC,MAAM,KAAK,SAAS,IAAI,EAAE,MAAM,EAAE,CAAC;SACxC,CAAC,CAAC;QACH,QAAQ,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC;QAC5B,MAAM,GAAG,IAAI,CAAC,UAAU,CAAC;IAC3B,CAAC,QAAQ,MAAM,KAAK,SAAS,EAAE;IAC/B,OAAO,QAAQ,CAAC;AAClB,CAAC"}
+{"version":3,"file":"flow-pins.js","sourceRoot":"","sources":["../src/flow-pins.ts"],"names":[],"mappings":"AAAA,sCAAsC;AACtC,iCAAiC;AAIjC,OAAO,EAA4B,cAAc,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAC;AAClF,OAAO,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAI9C,OAAO,EAAsB,kBAAkB,EAAE,MAAM,iBAAiB,CAAC;AACzE,OAAO,EAA+B,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAGlF,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAgBtD;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,KAA0B,EAC1B,MAA4B,EAC5B,QAAkB,EAClB,IAAU,EACV,IAAmB;IAEnB,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;IAC5B,MAAM,MAAM,GAAsE;QAChF,KAAK,EAAE,EAAE;QACT,MAAM,EAAE,EAAE;KACX,CAAC;IACF,MAAM,MAAM,GAAoB,EAAE,CAAC;IACnC,KAAK,MAAM,EAAE,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;QAC5B,MAAM,MAAM,GAAG,aAAa,CAAC,MAAM,kBAAkB,CAAC,KAAK,EAAE,QAAQ,EAAE,EAAY,CAAC,CAAC,CAAC;QACtF,IAAI,MAAM,KAAK,SAAS;YAAE,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC;;YAElD,MAAM,CAAC,IAAI,CAAC;gBACV,IAAI,EAAE,QAAQ;gBACd,OAAO,EAAE,SAAS,EAAE,oDAAoD;aACzE,CAAC,CAAC;IACP,CAAC;IACD,KAAK,MAAM,EAAE,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;QAC7B,MAAM,OAAO,GAAG,MAAM,oBAAoB,CAAC,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,CAAC,CAAC;QACvE,IAAI,OAAO,KAAK,SAAS;YAAE,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,GAAG,OAAO,CAAC;;YAErD,MAAM,CAAC,IAAI,CAAC;gBACV,IAAI,EAAE,QAAQ;gBACd,OAAO,EAAE,UAAU,EAAE,qDAAqD;aAC3E,CAAC,CAAC;IACP,CAAC;IACD,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,MAAM,EAAE,CAAC;IAC7D,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;AACtC,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,oBAAoB,CACjC,MAA4B,EAC5B,IAA8B,EAC9B,QAAkB,EAClB,EAAU;IAEV,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QACvB,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC;YAC1C,QAAQ;YACR,OAAO,EAAE,EAAE;YACX,SAAS,EAAE,IAAI,CAAC,SAAS;SAC1B,CAAC,CAAC;QACH,IAAI,QAAQ,KAAK,IAAI;YAAE,OAAO,QAAQ,CAAC,OAA4B,CAAC;IACtE,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,GAAG,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,EAAa,EAAE,CAAC,CAAC;IACtE,OAAO,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAE,MAAM,CAAC,OAA6B,CAAC;AAC7E,CAAC;AAYD,oFAAoF;AACpF,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,KAA+B;IAE/B,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,aAAa,EAAE,GAAG,KAAK,CAAC;IACxE,OAAO,aAAa,CAAO;QACzB,KAAK,EAAE,SAAS,IAAI,CAAC,EAAuB,GAAG;QAC/C,UAAU,EAAE,IAAI;QAChB,IAAI;QACJ,UAAU,EAAE,cAAc,CAAC,IAAI,CAAC;QAChC,QAAQ,EAAE,MAAM,eAAe,CAAC,KAAK,EAAE,QAAQ,EAAE,IAAI,CAAC,EAAE,CAAC;QACzD,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;YACzB,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,OAAO,CAAC,EAAE,QAAQ,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,EAAE,aAAa,EAAE,CAAC,CAAC;YAC3F,IAAI,OAAO,CAAC,IAAI,KAAK,IAAI;gBAAE,OAAO,IAAI,CAAC;YACvC,IAAI,OAAO,CAAC,IAAI,KAAK,oBAAoB;gBAAE,OAAO,OAAO,CAAC;YAC1D,MAAM,IAAI,cAAc,CAAC,MAAM,EAAE,GAAG,IAAI,CAAC,EAAE,IAAI,OAAO,CAAC,OAAO,EAAE,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;QAClF,CAAC;KACF,CAAC,CAAC;AACL,CAAC;AAED,+CAA+C;AAC/C,MAAM,aAAa,GAAG,GAAG,CAAC;AAE1B,sCAAsC;AACtC,KAAK,UAAU,eAAe,CAC5B,KAA0B,EAC1B,QAAkB,EAClB,MAAc;IAEd,MAAM,QAAQ,GAAW,EAAE,CAAC;IAC5B,IAAI,MAA0B,CAAC;IAC/B,GAAG,CAAC;QACF,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,YAAY,CAAC;YACpC,QAAQ;YACR,MAAM;YACN,KAAK,EAAE,aAAa;YACpB,GAAG,CAAC,MAAM,KAAK,SAAS,IAAI,EAAE,MAAM,EAAE,CAAC;SACxC,CAAC,CAAC;QACH,QAAQ,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC;QAC5B,MAAM,GAAG,IAAI,CAAC,UAAU,CAAC;IAC3B,CAAC,QAAQ,MAAM,KAAK,SAAS,EAAE;IAC/B,OAAO,QAAQ,CAAC;AAClB,CAAC"}

package/dist/gate-policy-binding.d.ts

@@ -0,0 +1,164 @@
+import type { ReviewerRole } from '@kindgi/authz';
+import type { Cursor, LiveScope, Result, TenantId, Timestamp } from '@kindgi/types';
+/**
+ * Gate policies (evals step 4b): what a promotion of an agent must show
+ * before a version goes live for a scope. One policy per agent and scope;
+ * the most specific one covering a promotion's scope applies, at its
+ * latest active version. The same registry shape as retention policies:
+ * the caller names the policy and its semver versions.
+ */
+/** The metrics a policy can gate, from a comparison's summary. */
+export declare const GATE_METRICS: readonly ["weightedYesShare", "judgedCoverage", "weightedPrecisionAtK"];
+export type GateMetricName = (typeof GATE_METRICS)[number];
+export interface GateMetricSpec {
+    readonly name: GateMetricName;
+    /** `weightedPrecisionAtK` only: the summary's `k` must be this. */
+    readonly k?: number;
+    /** The candidate must reach this. */
+    readonly minCandidate?: number;
+    /** The candidate may fall at most this far below the baseline (`0`: no drop at all). */
+    readonly maxDrop?: number;
+}
+/**
+ * What a policy asks of a promotion. Every part is optional; an empty
+ * spec checks nothing (the promotion is still recorded with the policy).
+ * A promotion must name a comparison (`evalRunId`) exactly when the spec
+ * checks anything one shows: `comparison`, `evidence`, `metrics`,
+ * `replay` or `onlyRestrictedClasses`.
+ */
+export interface GatePolicySpec {
+    readonly comparison?: {
+        /** The comparison must have finished within this many hours. */
+        readonly maxAgeHours?: number;
+        /** The comparison must have run this test set (and version). */
+        readonly suite?: {
+            readonly id: string;
+            readonly version?: string;
+        };
+    };
+    /** The judged evidence behind each gated metric (`n` cases, total weight). */
+    readonly evidence?: {
+        readonly minCases?: number;
+        readonly minWeight?: number;
+    };
+    readonly metrics?: readonly GateMetricSpec[];
+    /** Replay counts; each knob left out of the block is 0. No block: no replay checks. */
+    readonly replay?: {
+        readonly maxDiverged?: number;
+        readonly maxErrors?: number;
+        readonly maxRefusedWrites?: number;
+        readonly maxStopped?: number;
+    };
+    /** A passing promotion waits for a reviewer's approval. */
+    readonly approvals?: {
+        /** The reviewer role it needs (default `senior`). */
+        readonly role?: ReviewerRole;
+        /** Whoever asked can't approve it (default `true`). */
+        readonly separateApprover?: boolean;
+    };
+    /**
+     * Only judgments recorded under a restricted judge class count (T200):
+     * the comparison must be weighted `restricted-only`, so a class anyone
+     * may assert can't move the gate.
+     */
+    readonly onlyRestrictedClasses?: boolean;
+}
+export interface GatePolicy {
+    readonly id: string;
+    readonly version: string;
+    readonly tenantId: TenantId;
+    readonly agentId: string;
+    readonly scope: LiveScope;
+    readonly spec: GatePolicySpec;
+    readonly description?: string;
+    readonly createdAt: Timestamp;
+    /** Set when this version was unregistered. */
+    readonly unregisteredAt?: Timestamp;
+}
+/** A policy version, as a promotion records which one gated it. */
+export interface GatePolicyRef {
+    readonly id: string;
+    readonly version: string;
+}
+export interface GatePolicyPublishInput {
+    readonly tenantId: TenantId;
+    readonly id: string;
+    readonly version: string;
+    readonly agentId: string;
+    readonly scope: LiveScope;
+    readonly spec: GatePolicySpec;
+    readonly description?: string;
+}
+export type GatePolicyErrorCode = 
+/** This id and version are registered already. */
+'gate-policy-already-registered'
+/** Another policy already gates this agent and scope. */
+ | 'gate-policy-scope-taken'
+/** A new version names another agent or scope than the policy's. */
+ | 'gate-policy-scope-changed'
+/**
+ * The scope resolves to the agent's latest version (no pin covers it),
+ * so publishing a version would make it live there ungated: pin a
+ * version for the scope, or one above it, first.
+ */
+ | 'gate-policy-scope-unpinned' | 'gate-policy-not-found'
+/** The scope names an org or project the tenant doesn't have. */
+ | 'scope-invalid' | 'persistence-error';
+export interface GatePolicyError {
+    readonly code: GatePolicyErrorCode;
+    readonly message: string;
+    /** `gate-policy-scope-taken`: the policy that holds the scope. */
+    readonly heldBy?: string;
+}
+export interface GatePolicyListInput {
+    readonly tenantId: TenantId;
+    readonly agentId?: string;
+    /** Only the policy of exactly this scope. */
+    readonly scope?: LiveScope;
+    readonly limit: number;
+    readonly cursor?: Cursor;
+}
+export interface GatePolicyVersionInput {
+    readonly tenantId: TenantId;
+    readonly id: string;
+    readonly version: string;
+}
+export interface GatePolicyBinding {
+    /**
+     * Register `id` at `version`: a new policy, or a new version of one
+     * (same agent and scope). A gated scope always resolves to a pin:
+     * `gate-policy-scope-unpinned` when nothing covering the scope is pinned.
+     */
+    publish(input: GatePolicyPublishInput): Promise<Result<GatePolicy, GatePolicyError>>;
+    /** The policy's latest active version, or `null`. */
+    get(input: {
+        readonly tenantId: TenantId;
+        readonly id: string;
+    }): Promise<GatePolicy | null>;
+    /** One version, unregistered ones too, or `null`. */
+    getVersion(input: GatePolicyVersionInput): Promise<GatePolicy | null>;
+    /** Every version of a policy, oldest first. */
+    listVersions(input: {
+        readonly tenantId: TenantId;
+        readonly id: string;
+    }): Promise<readonly GatePolicy[]>;
+    /** Each policy's latest active version. */
+    list(input: GatePolicyListInput): Promise<{
+        readonly data: readonly GatePolicy[];
+        readonly nextCursor?: Cursor;
+    }>;
+    unregister(input: GatePolicyVersionInput): Promise<Result<GatePolicy, GatePolicyError>>;
+    reinstate(input: GatePolicyVersionInput): Promise<Result<GatePolicy, GatePolicyError>>;
+    /**
+     * The policy that gates a promotion of `agentId` for `scope`: the most
+     * specific scope with an active policy (a segment path's longer
+     * prefixes first, then its project, the project's org, the tenant), at
+     * its latest active version. `null`: no policy, so no gate.
+     */
+    resolve(input: {
+        readonly tenantId: TenantId;
+        readonly agentId: string;
+        readonly scope: LiveScope;
+    }): Promise<GatePolicy | null>;
+}
+//# sourceMappingURL=gate-policy-binding.d.ts.map

package/dist/gate-policy-binding.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"gate-policy-binding.d.ts","sourceRoot":"","sources":["../src/gate-policy-binding.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAClD,OAAO,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,eAAe,CAAC;AAEpF;;;;;;GAMG;AAEH,kEAAkE;AAClE,eAAO,MAAM,YAAY,yEAA0E,CAAC;AACpG,MAAM,MAAM,cAAc,GAAG,CAAC,OAAO,YAAY,CAAC,CAAC,MAAM,CAAC,CAAC;AAE3D,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,IAAI,EAAE,cAAc,CAAC;IAC9B,mEAAmE;IACnE,QAAQ,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC;IACpB,qCAAqC;IACrC,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B,wFAAwF;IACxF,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED;;;;;;GAMG;AACH,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,UAAU,CAAC,EAAE;QACpB,gEAAgE;QAChE,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;QAC9B,gEAAgE;QAChE,QAAQ,CAAC,KAAK,CAAC,EAAE;YAAE,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;YAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAA;SAAE,CAAC;KACrE,CAAC;IACF,8EAA8E;IAC9E,QAAQ,CAAC,QAAQ,CAAC,EAAE;QAAE,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAChF,QAAQ,CAAC,OAAO,CAAC,EAAE,SAAS,cAAc,EAAE,CAAC;IAC7C,uFAAuF;IACvF,QAAQ,CAAC,MAAM,CAAC,EAAE;QAChB,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;QAC9B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;QAC5B,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;QACnC,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;KAC9B,CAAC;IACF,2DAA2D;IAC3D,QAAQ,CAAC,SAAS,CAAC,EAAE;QACnB,qDAAqD;QACrD,QAAQ,CAAC,IAAI,CAAC,EAAE,YAAY,CAAC;QAC7B,uDAAuD;QACvD,QAAQ,CAAC,gBAAgB,CAAC,EAAE,OAAO,CAAC;KACrC,CAAC;IACF;;;;OAIG;IACH,QAAQ,CAAC,qBAAqB,CAAC,EAAE,OAAO,CAAC;CAC1C;AAED,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC;IAC5B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,KAAK,EAAE,SAAS,CAAC;IAC1B,QAAQ,CAAC,IAAI,EAAE,cAAc,CAAC;IAC9B,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAC;IAC9B,8CAA8C;IAC9C,QAAQ,CAAC,cAAc,CAAC,EAAE,SAAS,CAAC;CACrC;AAED,mEAAmE;AACnE,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC;IAC5B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,KAAK,EAAE,SAAS,CAAC;IAC1B,QAAQ,CAAC,IAAI,EAAE,cAAc,CAAC;IAC9B,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;CAC/B;AAED,MAAM,MAAM,mBAAmB;AAC7B,kDAAkD;AAChD,gCAAgC;AAClC,yDAAyD;GACvD,yBAAyB;AAC3B,oEAAoE;GAClE,2BAA2B;AAC7B;;;;GAIG;GACD,4BAA4B,GAC5B,uBAAuB;AACzB,iEAAiE;GAC/D,eAAe,GACf,mBAAmB,CAAC;AAExB,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,IAAI,EAAE,mBAAmB,CAAC;IACnC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,kEAAkE;IAClE,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC;IAC5B,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,6CAA6C;IAC7C,QAAQ,CAAC,KAAK,CAAC,EAAE,SAAS,CAAC;IAC3B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC;IAC5B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,iBAAiB;IAChC;;;;OAIG;IACH,OAAO,CAAC,KAAK,EAAE,sBAAsB,GAAG,OAAO,CAAC,MAAM,CAAC,UAAU,EAAE,eAAe,CAAC,CAAC,CAAC;IACrF,qDAAqD;IACrD,GAAG,CAAC,KAAK,EAAE;QAAE,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC;QAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,CAAC;IAC7F,qDAAqD;IACrD,UAAU,CAAC,KAAK,EAAE,sBAAsB,GAAG,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,CAAC;IACtE,+CAA+C;IAC/C,YAAY,CAAC,KAAK,EAAE;QAClB,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC;QAC5B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;KACrB,GAAG,OAAO,CAAC,SAAS,UAAU,EAAE,CAAC,CAAC;IACnC,2CAA2C;IAC3C,IAAI,CAAC,KAAK,EAAE,mBAAmB,GAAG,OAAO,CAAC;QACxC,QAAQ,CAAC,IAAI,EAAE,SAAS,UAAU,EAAE,CAAC;QACrC,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;KAC9B,CAAC,CAAC;IACH,UAAU,CAAC,KAAK,EAAE,sBAAsB,GAAG,OAAO,CAAC,MAAM,CAAC,UAAU,EAAE,eAAe,CAAC,CAAC,CAAC;IACxF,SAAS,CAAC,KAAK,EAAE,sBAAsB,GAAG,OAAO,CAAC,MAAM,CAAC,UAAU,EAAE,eAAe,CAAC,CAAC,CAAC;IACvF;;;;;OAKG;IACH,OAAO,CAAC,KAAK,EAAE;QACb,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC;QAC5B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;QACzB,QAAQ,CAAC,KAAK,EAAE,SAAS,CAAC;KAC3B,GAAG,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,CAAC;CAChC"}

package/dist/gate-policy-binding.js

@@ -0,0 +1,12 @@
+// SPDX-License-Identifier: Apache-2.0
+// Copyright (C) 2026 Kindgi Inc.
+/**
+ * Gate policies (evals step 4b): what a promotion of an agent must show
+ * before a version goes live for a scope. One policy per agent and scope;
+ * the most specific one covering a promotion's scope applies, at its
+ * latest active version. The same registry shape as retention policies:
+ * the caller names the policy and its semver versions.
+ */
+/** The metrics a policy can gate, from a comparison's summary. */
+export const GATE_METRICS = ['weightedYesShare', 'judgedCoverage', 'weightedPrecisionAtK'];
+//# sourceMappingURL=gate-policy-binding.js.map

package/dist/gate-policy-binding.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"gate-policy-binding.js","sourceRoot":"","sources":["../src/gate-policy-binding.ts"],"names":[],"mappings":"AAAA,sCAAsC;AACtC,iCAAiC;AAKjC;;;;;;GAMG;AAEH,kEAAkE;AAClE,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,kBAAkB,EAAE,gBAAgB,EAAE,sBAAsB,CAAU,CAAC"}

package/dist/gate.d.ts

@@ -0,0 +1,56 @@
+import type { ReviewerRole } from '@kindgi/authz';
+import type { LiveScope } from '@kindgi/types';
+import type { GatePolicySpec } from './gate-policy-binding.js';
+import type { JudgedComparisonSummary } from './judged-dispatcher.js';
+/**
+ * The promotion gate (evals step 4b): a policy's checks against a
+ * comparison's summary. Pure; the promotion route and `…/check` both
+ * call it, so a check answers exactly what a promotion would.
+ */
+/** One check, as the promotion records it and every client shows it. */
+export interface GateCheck {
+    /** Stable: `metric.weightedPrecisionAtK.minCandidate`, `replay.maxDiverged`, … */
+    readonly name: string;
+    readonly passed: boolean;
+    /** A plain sentence saying what was found against what the policy asks. */
+    readonly message: string;
+    readonly value?: number | string;
+    readonly threshold?: number | string;
+}
+/** What a passing promotion still needs: a reviewer's approval. */
+export interface GateApproval {
+    readonly role: ReviewerRole;
+    /** How many reviewers decide (one, today). */
+    readonly count: number;
+    readonly separateApprover: boolean;
+}
+export interface GateInput {
+    readonly spec: GatePolicySpec;
+    /** What's being promoted. */
+    readonly promotion: {
+        readonly agentId: string;
+        readonly version: string;
+        /** The promoted version's `pinsDigest`; `null` for a version published before pins. */
+        readonly pinsDigest: string | null;
+        readonly scope: LiveScope;
+    };
+    /** The comparison named by `evalRunId`; `null` when none was. */
+    readonly summary: JudgedComparisonSummary | null;
+    /** The version serving the promotion's scope now: what "no regression" is measured against. */
+    readonly servingVersion: string;
+    /**
+     * The org of the project the comparison's judgments came from (for an
+     * org promotion). Absent: that project has no org, or none was looked up.
+     */
+    readonly summaryProjectOrgId?: string;
+    readonly now: Date;
+}
+export interface GateResult {
+    readonly checks: readonly GateCheck[];
+    readonly passed: boolean;
+    /** Set when the policy asks for an approval. */
+    readonly approval?: GateApproval;
+}
+export declare function gateApproval(spec: GatePolicySpec): GateApproval | undefined;
+export declare function evaluateGate(input: GateInput): GateResult;
+//# sourceMappingURL=gate.d.ts.map

package/dist/gate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"gate.d.ts","sourceRoot":"","sources":["../src/gate.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAClD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,eAAe,CAAC;AAE/C,OAAO,KAAK,EAAkC,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAC/F,OAAO,KAAK,EAAoB,uBAAuB,EAAE,MAAM,wBAAwB,CAAC;AAExF;;;;GAIG;AAEH,wEAAwE;AACxE,MAAM,WAAW,SAAS;IACxB,kFAAkF;IAClF,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;IACzB,2EAA2E;IAC3E,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IACjC,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;CACtC;AAED,mEAAmE;AACnE,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAC;IAC5B,8CAA8C;IAC9C,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,gBAAgB,EAAE,OAAO,CAAC;CACpC;AAED,MAAM,WAAW,SAAS;IACxB,QAAQ,CAAC,IAAI,EAAE,cAAc,CAAC;IAC9B,6BAA6B;IAC7B,QAAQ,CAAC,SAAS,EAAE;QAClB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;QACzB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;QACzB,uFAAuF;QACvF,QAAQ,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;QACnC,QAAQ,CAAC,KAAK,EAAE,SAAS,CAAC;KAC3B,CAAC;IACF,iEAAiE;IACjE,QAAQ,CAAC,OAAO,EAAE,uBAAuB,GAAG,IAAI,CAAC;IACjD,+FAA+F;IAC/F,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC;;;OAGG;IACH,QAAQ,CAAC,mBAAmB,CAAC,EAAE,MAAM,CAAC;IACtC,QAAQ,CAAC,GAAG,EAAE,IAAI,CAAC;CACpB;AAED,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,MAAM,EAAE,SAAS,SAAS,EAAE,CAAC;IACtC,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;IACzB,gDAAgD;IAChD,QAAQ,CAAC,QAAQ,CAAC,EAAE,YAAY,CAAC;CAClC;AAgBD,wBAAgB,YAAY,CAAC,IAAI,EAAE,cAAc,GAAG,YAAY,GAAG,SAAS,CAO3E;AAED,wBAAgB,YAAY,CAAC,KAAK,EAAE,SAAS,GAAG,UAAU,CAiDzD"}