@kindgi/api 0.1.4 → 0.1.5-rc.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kindgi/api",
-  "version": "0.1.4",
+  "version": "0.1.5-rc.0",
   "description": "REST + SSE HTTP surface for Kindgi™. createApp assembles a Hono app serving the /v1/* REST API (bearer or session-token auth; OpenAPI 3.1 document at /v1/openapi.json) and an optional S3-compatible /s3/* surface (SigV4), over caller-plugged bindings for the runtime (runs, agents, flows, HITL, supervisor) and for storage. Route conventions: docs/API-ROUTE-CONVENTIONS.md.",
   "license": "Apache-2.0",
   "repository": {
@@ -21,6 +21,11 @@
       "import": "./dist/index.js",
       "default": "./dist/index.js"
     },
+    "./testing": {
+      "types": "./dist/testing/index.d.ts",
+      "import": "./dist/testing/index.js",
+      "default": "./dist/testing/index.js"
+    },
     "./openapi.json": "./openapi.json",
     "./package.json": "./package.json"
   },
@@ -32,31 +37,30 @@
     "openapi.json"
   ],
   "dependencies": {
-    "@kindgi/agents": "0.1.4",
-    "@kindgi/audit-events": "0.1.4",
-    "@kindgi/compliance": "0.1.4",
-    "@kindgi/authz": "0.1.4",
-    "@kindgi/blob-binding": "0.1.4",
-    "@kindgi/capabilities": "0.1.4",
-    "@kindgi/crypto": "0.1.4",
-    "@kindgi/flow": "0.1.4",
-    "@kindgi/guardrails": "0.1.4",
-    "@kindgi/log": "0.1.4",
-    "@kindgi/memory": "0.1.4",
-    "@kindgi/platform": "0.1.4",
-    "@kindgi/provenance": "0.1.4",
-    "@kindgi/runtime": "0.1.4",
-    "@kindgi/policy-contract": "0.1.4",
-    "@kindgi/schema": "0.1.4",
-    "@kindgi/tools": "0.1.4",
-    "@kindgi/types": "0.1.4",
+    "@kindgi/agents": "0.1.5-rc.0",
+    "@kindgi/audit-events": "0.1.5-rc.0",
+    "@kindgi/compliance": "0.1.5-rc.0",
+    "@kindgi/authz": "0.1.5-rc.0",
+    "@kindgi/blob-binding": "0.1.5-rc.0",
+    "@kindgi/capabilities": "0.1.5-rc.0",
+    "@kindgi/crypto": "0.1.5-rc.0",
+    "@kindgi/flow": "0.1.5-rc.0",
+    "@kindgi/guardrails": "0.1.5-rc.0",
+    "@kindgi/log": "0.1.5-rc.0",
+    "@kindgi/memory": "0.1.5-rc.0",
+    "@kindgi/platform": "0.1.5-rc.0",
+    "@kindgi/provenance": "0.1.5-rc.0",
+    "@kindgi/runtime": "0.1.5-rc.0",
+    "@kindgi/policy-contract": "0.1.5-rc.0",
+    "@kindgi/schema": "0.1.5-rc.0",
+    "@kindgi/tools": "0.1.5-rc.0",
+    "@kindgi/types": "0.1.5-rc.0",
     "@scalar/hono-api-reference": "^0.12.2",
     "hono": "^4.6.14"
   },
   "devDependencies": {
-    "@kindgi/audit-events-inmemory": "0.1.4",
-    "@kindgi/specs": "0.1.4",
-    "@kindgi/testing": "0.1.4",
+    "@kindgi/audit-events-inmemory": "0.1.5-rc.0",
+    "@kindgi/specs": "0.1.5-rc.0",
     "@types/aws4": "^1.11.6",
     "@types/node": "^22.10.5",
     "aws4": "^1.13.2",

package/src/agent-binding.ts

@@ -74,6 +74,8 @@ export interface AgentRegistryBinding {
    * a well-formed `Agent`. Bindings MAY reject with `already-registered`
    * when the same `(agentId, version)` is re-published; the route
    * maps that to `409`.
+   * A version of an agent whose versions live in another project is
+   * `project-mismatch` (agents never move between projects; `409 agent-project-mismatch`).
    */
   publish(input: AgentPublishInput): Promise<AgentPublishOutcome>;
   /**
@@ -235,6 +237,18 @@ export type AgentPublishOutcome =
       readonly agentId: AgentId;
       readonly version: Semver;
       readonly projectId: ProjectId;
+    }
+  | {
+      /**
+       * The agent's versions live in another project: an agent belongs to
+       * the project its first version was published into, and never
+       * moves. Nothing is written (the route answers `409 agent-project-mismatch`).
+       */
+      readonly kind: 'project-mismatch';
+      readonly agentId: AgentId;
+      readonly version: Semver;
+      /** The project the agent belongs to. */
+      readonly projectId: ProjectId;
     };
 
 export type AgentUnregisterOutcome = {

package/src/agent-pins.ts

@@ -112,17 +112,33 @@ export async function publishDeployedAgent(
   input: PublishDeployedAgentInput,
 ): Promise<DeployedVersionOutcome> {
   const { agents, tenantId, projectId, agent, pins, enqueueTuples } = input;
+  const existing = await activeAgentVersions(agents, tenantId, agent.id);
+  // An agent never moves, even by a deploy that writes nothing (an
+  // unchanged or reused version): one of another project is refused. A
+  // registry that doesn't record the project refuses only a write.
+  const held = existing[0];
+  if (held !== undefined) {
+    const record = await agents.getVersion({ tenantId, agentId: agent.id, version: held.version });
+    if (record?.projectId !== undefined && record.projectId !== projectId) {
+      throw new PublishRefused('agent', `${agent.id}@${agent.version}`, {
+        kind: 'project-mismatch',
+        agentId: agent.id,
+        version: agent.version,
+        projectId: record.projectId,
+      });
+    }
+  }
   return deployVersion<Agent>({
     label: `agent "${agent.id as unknown as string}"`,
     definition: agent,
     pins,
     pinsDigest: pinsDigest(pins),
-    existing: await activeAgentVersions(agents, tenantId, agent.id),
+    existing,
     publish: async (version) => {
       const outcome = await agents.publish({ tenantId, projectId, agent: version, enqueueTuples });
       if (outcome.kind === 'ok') return 'ok';
       if (outcome.kind === 'already-registered') return 'taken';
-      throw new PublishRefused('agent', `${agent.id}@${version.version}`, outcome.kind);
+      throw new PublishRefused('agent', `${agent.id}@${version.version}`, outcome);
     },
   });
 }