dna-sdk 0.10.0 → 0.11.0

package/dist/bootstrap.js

@@ -38,8 +38,10 @@ import { DocExtension } from "./extensions/doc.js";
 import { ResearchExtension } from "./extensions/research.js";
 import { TestkitExtension } from "./extensions/testkit.js";
 import { ModelRegExtension } from "./extensions/modelreg.js";
+import { CloudExtension } from "./extensions/cloud.js";
 import { AutomationExtension } from "./extensions/automation.js";
 import { EvalExtension } from "./extensions/eval.js";
+import { IntelExtension } from "./extensions/intel.js";
 import { loadConfig } from "./config.js";
 import { resolveDefaultFsUrl, sourceFromUrl } from "./adapters/source-url.js";
 /**
@@ -69,8 +71,10 @@ function loadBuiltins(target) {
         new ResearchExtension(),
         new TestkitExtension(),
         new ModelRegExtension(),
+        new CloudExtension(),
         new AutomationExtension(),
         new EvalExtension(),
+        new IntelExtension(),
     ]) {
         target.load(ext);
     }

package/dist/extensions/cloud/kinds/tenant-plan.kind.yaml

@@ -0,0 +1,105 @@
+# TenantPlan — the DNA Cloud tenant→Tier assignment (record plane).
+# One doc per tenant maps it to its CURRENT Tier (free/pro/enterprise) as
+# first-class GLOBAL data, so enforcement follows billing state without a
+# redeploy. This is the billing→enforcement BRIDGE: dna-cloud's Stripe webhook
+# writes this doc on subscribe/cancel, and the MCP server reads it via
+# kernel.tenant_plan(tenant) when a token carries no explicit plan claim.
+#
+# CONTRACT — the OSS SDK only READS: zero Stripe/billing code lives here. The
+# SDK resolves tier_id from THIS doc; dna-cloud (closed source) is the only
+# writer. A missing TenantPlan is not an error — the MCP guard falls back to the
+# Free floor.
+#
+# TenantPlans live in the `_lib` scope (`tenant-plans/<tenant>.yaml`) —
+# TenantPlan is GLOBAL (base only, no per-tenant override) and NOT inheritable;
+# kernel.tenant_plan() queries `_lib` directly regardless of the caller's scope.
+#
+# PARITY-CRITICAL package data: the byte-identical mirror lives at
+# packages/sdk-{py,ts}/{dna/extensions,src/extensions}/cloud/kinds/
+# tenant-plan.kind.yaml (tests/test_descriptor_hash_parity.py enforces).
+apiVersion: github.com/ruinosus/dna/core/v1
+kind: KindDefinition
+metadata:
+  name: tenant-plan
+spec:
+  target_api_version: github.com/ruinosus/dna/cloud/v1
+  target_kind: TenantPlan
+  alias: cloud-tenant-plan
+  origin: github.com/ruinosus/dna/cloud
+  tenant_scope: global
+  plane: record
+  prompt_target: false
+  flatten_in_context: false
+  prompt_target_priority: 0
+  storage:
+    type: yaml
+    container: tenant-plans
+  schema:
+    type: object
+    additionalProperties: false
+    required:
+    - tenant
+    - tier_id
+    properties:
+      tenant:
+        type: string
+        description: The DNA tenant this assignment is for. The doc name SHOULD
+          equal the tenant; kernel.tenant_plan() matches on this field.
+      tier_id:
+        type: string
+        description: The assigned Tier's id, e.g. free, pro, enterprise. Resolved
+          to caps via kernel.tier(tier_id) — never a literal in code.
+      source:
+        type: string
+        description: Where the assignment came from, e.g. stripe / manual / trial.
+      stripe_customer_id:
+        type: string
+        description: The Stripe customer id backing the assignment (dna-cloud
+          writes it; the OSS SDK never calls Stripe).
+      stripe_subscription_id:
+        type: string
+        description: The Stripe subscription id backing the assignment (dna-cloud
+          writes it; the OSS SDK never calls Stripe).
+      status:
+        type: string
+        description: The billing status of the assignment, e.g. active / past_due
+          / canceled.
+      updated_at:
+        type: string
+        format: date-time
+        description: When dna-cloud last wrote this assignment (ISO 8601).
+      notes:
+        type:
+        - string
+        - 'null'
+        description: Free-form operator notes.
+  describe: '{tenant} → {tier_id}'
+  summary:
+    tenant: ''
+    tier_id: ''
+    status: ''
+  ui:
+    mode: govern
+    label:
+      en: Tenant Plans
+      pt-BR: Planos por Tenant
+    icon: 🎫
+    description:
+      en: DNA Cloud tenant→Tier assignments (billing→enforcement bridge).
+      pt-BR: Atribuições tenant→Tier do DNA Cloud (ponte cobrança→enforcement).
+    routes:
+      list: docs/TenantPlan
+      detail: docs/TenantPlan/:name
+    permissions:
+      list: any
+      detail: any
+    in_sidebar: true
+    display_order: 55
+  ascii_icon: 🎫
+  display_label: Tenant Plans
+  docs: A TenantPlan maps one DNA tenant to its current Tier as GLOBAL
+    declarative data, so enforcement follows billing state without a redeploy.
+    dna-cloud's Stripe webhook writes it on subscribe/cancel; the MCP server
+    reads it via kernel.tenant_plan(tenant) when the token carries no explicit
+    plan claim — zero Stripe/billing code lives in the OSS SDK, which only reads
+    the assignment.

package/dist/extensions/cloud/kinds/tier.kind.yaml

@@ -0,0 +1,135 @@
+# Tier — DNA Cloud pricing-tier registry (record plane).
+# One doc per plan (free/pro/enterprise): hard caps (calls_per_day, rate_per_sec,
+# max_tenants) + which feature families it unlocks + price, as first-class GLOBAL
+# data so a limit change is a file edit, never a redeploy. NOT named `Plan` — that
+# alias belongs to the SDLC implementation-plan Kind; a pricing plan is a Tier.
+#
+# CONTRACT — never hardcode caps: the quota enforcer reads calls_per_day /
+# rate_per_sec / max_tenants from THIS registry via kernel.tier(id_or_alias); a
+# cap literal in code is a bug.
+#
+# Tiers live in the `_lib` scope (`tiers/<tier_id>.yaml`) — Tier is GLOBAL (base
+# only, no per-tenant override) and NOT inheritable; kernel.tier() queries `_lib`
+# directly regardless of the caller's scope.
+#
+# PARITY-CRITICAL package data: the byte-identical mirror lives at
+# packages/sdk-{py,ts}/{dna/extensions,src/extensions}/cloud/kinds/
+# tier.kind.yaml (tests/test_descriptor_hash_parity.py enforces).
+apiVersion: github.com/ruinosus/dna/core/v1
+kind: KindDefinition
+metadata:
+  name: tier
+spec:
+  target_api_version: github.com/ruinosus/dna/cloud/v1
+  target_kind: Tier
+  alias: cloud-tier
+  origin: github.com/ruinosus/dna/cloud
+  tenant_scope: global
+  plane: record
+  prompt_target: false
+  flatten_in_context: false
+  prompt_target_priority: 0
+  storage:
+    type: yaml
+    container: tiers
+  schema:
+    type: object
+    additionalProperties: false
+    required:
+    - tier_id
+    - display_name
+    properties:
+      tier_id:
+        type: string
+        description: Canonical tier id, e.g. free, pro, enterprise. The doc name
+          SHOULD equal the tier_id; kernel.tier() matches on this field first.
+      display_name:
+        type: string
+        description: Human-facing plan name, e.g. Free, Pro, Enterprise.
+      price_usd_month:
+        type: number
+        default: 0
+        description: Flat monthly price in USD (0 for the free tier).
+      calls_per_day:
+        type:
+        - integer
+        - 'null'
+        description: Daily call quota. Null = unlimited (enterprise). THE value
+          the quota enforcer reads — never hardcode it in code.
+      rate_per_sec:
+        type:
+        - integer
+        - 'null'
+        description: Per-second rate limit. Null = unmetered.
+      max_tenants:
+        type:
+        - integer
+        - 'null'
+        description: Number of tenants the plan allows. Null = unlimited.
+      feature_families:
+        type: array
+        items:
+          type: string
+        description: Tool families this tier unlocks, e.g.
+          [definitions, sdlc, memory, emit].
+      memory_mode:
+        type: string
+        enum:
+        - none
+        - read
+        - write
+        default: none
+        description: Memory access level granted by the tier — none, read, or
+          write.
+      overage_per_1k_usd:
+        type:
+        - number
+        - 'null'
+        description: USD charged per 1k calls above the daily quota. Null = no
+          overage (hard cap).
+      sla:
+        type: boolean
+        default: false
+        description: True when the tier includes a support/uptime SLA
+          (enterprise).
+      aliases:
+        type: array
+        items:
+          type: string
+        description: Alternate ids that resolve to this tier (legacy plan names).
+          kernel.tier() matches these on pass 2.
+      notes:
+        type:
+        - string
+        - 'null'
+        description: Free-form operator notes.
+  describe: '{display_name} (${price_usd_month}/mo)'
+  summary:
+    tier_id: ''
+    display_name: ''
+    price_usd_month: 0
+    calls_per_day: null
+  ui:
+    mode: govern
+    label:
+      en: Tiers
+      pt-BR: Planos
+    icon: 💳
+    description:
+      en: DNA Cloud pricing tiers (caps + feature families).
+      pt-BR: Planos do DNA Cloud (limites + famílias de features).
+    routes:
+      list: docs/Tier
+      detail: docs/Tier/:name
+    permissions:
+      list: any
+      detail: any
+    in_sidebar: true
+    display_order: 54
+  ascii_icon: 💳
+  display_label: Tiers
+  docs: A Tier declares one DNA Cloud plan's hard caps (calls/day, rate, tenants)
+    and which feature families it unlocks, as GLOBAL declarative data so changing
+    a limit is a file edit, not a redeploy. Resolve it via
+    kernel.tier(id_or_alias); the quota enforcer reads the caps from here and
+    never hardcodes them.

package/dist/extensions/cloud.d.ts

@@ -0,0 +1,31 @@
+/**
+ * CloudExtension — DNA Cloud pricing + billing→enforcement registry.
+ *
+ * 1:1 parity with Python `dna.extensions.cloud`.
+ *
+ * Registers 2 Kinds, from descriptors (F3 — record Kinds are data, not
+ * classes):
+ *
+ *   - Tier (`cloud-tier`) — one DNA Cloud plan's hard caps
+ *     (`calls_per_day`, `rate_per_sec`, `max_tenants`) + the feature
+ *     families it unlocks + price, as a first-class GLOBAL Kind so limits
+ *     are project data, not implicit knowledge. NOT named `Plan` — that
+ *     alias belongs to the SDLC implementation-plan Kind; a pricing plan is
+ *     a Tier. Free / Pro / Enterprise are tiers.
+ *   - TenantPlan (`cloud-tenant-plan`) — the tenant→Tier assignment: which
+ *     Tier a given tenant is currently on. The billing→enforcement bridge:
+ *     dna-cloud's Stripe webhook writes it on subscribe/cancel; the MCP
+ *     server reads it via `kernel.tenantPlan(tenant)` when a token carries no
+ *     explicit plan claim. The OSS SDK only READS — zero Stripe/billing code.
+ *
+ * CONTRACT — never hardcode caps. The single source of truth for a plan's
+ * limits is its Tier doc (`_lib` scope, `tiers/<tier_id>.yaml`), resolved
+ * via `kernel.tier(idOrAlias)`. The quota enforcer reads calls/day, rate
+ * and tenant caps from there — a cap literal in code is a bug.
+ */
+import type { ExtensionHost, Extension } from "../kernel/protocols.js";
+export declare class CloudExtension implements Extension {
+    name: string;
+    version: string;
+    register(kernel: ExtensionHost): void;
+}

package/dist/extensions/cloud.js

@@ -0,0 +1,39 @@
+/**
+ * CloudExtension — DNA Cloud pricing + billing→enforcement registry.
+ *
+ * 1:1 parity with Python `dna.extensions.cloud`.
+ *
+ * Registers 2 Kinds, from descriptors (F3 — record Kinds are data, not
+ * classes):
+ *
+ *   - Tier (`cloud-tier`) — one DNA Cloud plan's hard caps
+ *     (`calls_per_day`, `rate_per_sec`, `max_tenants`) + the feature
+ *     families it unlocks + price, as a first-class GLOBAL Kind so limits
+ *     are project data, not implicit knowledge. NOT named `Plan` — that
+ *     alias belongs to the SDLC implementation-plan Kind; a pricing plan is
+ *     a Tier. Free / Pro / Enterprise are tiers.
+ *   - TenantPlan (`cloud-tenant-plan`) — the tenant→Tier assignment: which
+ *     Tier a given tenant is currently on. The billing→enforcement bridge:
+ *     dna-cloud's Stripe webhook writes it on subscribe/cancel; the MCP
+ *     server reads it via `kernel.tenantPlan(tenant)` when a token carries no
+ *     explicit plan claim. The OSS SDK only READS — zero Stripe/billing code.
+ *
+ * CONTRACT — never hardcode caps. The single source of truth for a plan's
+ * limits is its Tier doc (`_lib` scope, `tiers/<tier_id>.yaml`), resolved
+ * via `kernel.tier(idOrAlias)`. The quota enforcer reads calls/day, rate
+ * and tenant caps from there — a cap literal in code is a bug.
+ */
+import { loadDescriptors } from "../kernel/descriptor-loader.js";
+export class CloudExtension {
+    name = "cloud";
+    version = "1.0.0";
+    register(kernel) {
+        // F3: Tier ships as kinds/tier.kind.yaml package data (byte-identical
+        // Py↔TS mirror), registered through the SAME funnel as per-scope
+        // KindDefinitions (plane lint + digest idempotency + builtin conflict
+        // marker).
+        for (const raw of loadDescriptors(import.meta.url, "cloud/kinds")) {
+            kernel.kindFromDescriptor(raw);
+        }
+    }
+}

package/dist/extensions/intel/kinds/insight.kind.yaml

@@ -0,0 +1,148 @@
+# IntelInsight — the dissemination unit (record plane; a ranked, actionable
+# insight). Produced from an IntelSource; the ranker/digest/dedup/feedback stages
+# all reference it. Named IntelInsight (NOT Insight) — the bare `Insight` name
+# already belongs to the SDLC oracle Kind (alias sdlc-insight); two Kinds sharing
+# a name makes every bare-name lookup ambiguous (i-195). The cross-stage contract
+# is the alias `intel-insight`.
+#
+# TENANTED — per-tenant generated data (the tenant's own insight stream), NOT a
+# shared `_lib` default. Deliberately NOT inheritable (never in
+# DEFAULT_INHERITABLE_KINDS_V1); TENANTED is correct.
+#
+# Embeddable (embed: [title, fact]) so the later dedup story can do semantic
+# recall over the insight text.
+#
+# PARITY-CRITICAL package data: the byte-identical mirror lives at
+# packages/sdk-{py,ts}/{dna/extensions,src/extensions}/intel/kinds/
+# insight.kind.yaml (tests/test_descriptor_hash_parity.py enforces).
+apiVersion: github.com/ruinosus/dna/core/v1
+kind: KindDefinition
+metadata:
+  name: insight
+spec:
+  target_api_version: github.com/ruinosus/dna/intel/v1
+  target_kind: IntelInsight
+  alias: intel-insight
+  origin: github.com/ruinosus/dna/intel
+  tenant_scope: tenanted
+  plane: record
+  prompt_target: false
+  flatten_in_context: false
+  prompt_target_priority: 0
+  storage:
+    type: yaml
+    container: intel-insights
+  schema:
+    type: object
+    additionalProperties: false
+    required:
+    - title
+    - fact
+    - score
+    - state
+    properties:
+      title:
+        type: string
+        description: The insight headline.
+      fact:
+        type: string
+        description: What happened / the cited fact.
+      why:
+        type:
+        - string
+        - 'null'
+        description: Why it matters to this source.
+      action:
+        type:
+        - string
+        - 'null'
+        description: The single suggested action.
+      score:
+        type: number
+        default: 0
+        description: Actionability score (0..1). The ranker sets this; the digest
+          suppresses insights scoring below the source's threshold.
+      source_ref:
+        type:
+        - string
+        - 'null'
+        description: The IntelSource name this insight came from.
+      pirs:
+        type: array
+        items:
+          type: string
+        description: Which Priority Intelligence Requirements this insight matches.
+      citations:
+        type: array
+        items:
+          type: object
+          additionalProperties: false
+          required:
+          - url
+          properties:
+            url:
+              type: string
+            title:
+              type:
+              - string
+              - 'null'
+        description: Sources backing the fact — each a {url, title} pair.
+      state:
+        type: string
+        enum:
+        - new
+        - actioned
+        - dismissed
+        - snoozed
+        default: new
+        description: The feedback disposition — the reader's response to the insight.
+      evidence_rating:
+        type: string
+        enum:
+        - evidence-based
+        - opinion-practice
+        - anecdotal
+        default: anecdotal
+        description: How well-grounded the fact is — evidence-based, opinion/practice,
+          or anecdotal.
+      created_at:
+        type:
+        - string
+        - 'null'
+        description: ISO-8601 timestamp, stamped by the writer (not defaulted here).
+  describe: '{title}'
+  summary:
+    title: ''
+    score: 0
+    state: ''
+    source_ref: null
+  embed:
+  - title
+  - fact
+  ui:
+    mode: govern
+    label:
+      en: Intel Insights
+      pt-BR: Insights de Inteligência
+    icon: 💡
+    description:
+      en: Ranked, actionable insights (the dissemination unit of the intel layer).
+      pt-BR: Insights acionáveis e ranqueados (a unidade de disseminação da camada
+        de inteligência).
+    routes:
+      list: docs/IntelInsight
+      detail: docs/IntelInsight/:name
+    permissions:
+      list: any
+      detail: any
+    in_sidebar: true
+    display_order: 57
+  ascii_icon: 💡
+  display_label: Intel Insights
+  docs: An IntelInsight is the dissemination unit of the intelligence layer — a
+    ranked, actionable insight produced from an IntelSource, carrying its headline,
+    cited fact, suggested action, actionability score, matched PIRs, citations,
+    evidence rating and feedback state. The ranker sets the score; the digest
+    suppresses insights below the source threshold; the feedback stage records the
+    state (new/actioned/dismissed/snoozed). Embeddable so a later dedup stage can
+    recall semantically similar insights.

package/dist/extensions/intel/kinds/intel-source.kind.yaml

@@ -0,0 +1,117 @@
+# IntelSource — a watched portfolio source (record plane; the "Direction" stage).
+# One doc per source (a repo, a scope, or an external URL) declares what the DNA
+# observes: its research cadence, actionability threshold, Priority Intelligence
+# Requirements (PIRs) and mute state.
+#
+# TENANTED — a source is the tenant's OWN watchlist (per-tenant user data), NOT a
+# shared `_lib` default consumed by other scopes. It is deliberately NOT
+# inheritable (never in DEFAULT_INHERITABLE_KINDS_V1); TENANTED is the correct
+# tenancy for per-tenant data without a platform default (the maxim
+# "inheritable ⇒ never TENANTED" does not apply — this Kind is not inheritable).
+#
+# PARITY-CRITICAL package data: the byte-identical mirror lives at
+# packages/sdk-{py,ts}/{dna/extensions,src/extensions}/intel/kinds/
+# intel-source.kind.yaml (tests/test_descriptor_hash_parity.py enforces).
+apiVersion: github.com/ruinosus/dna/core/v1
+kind: KindDefinition
+metadata:
+  name: intel-source
+spec:
+  target_api_version: github.com/ruinosus/dna/intel/v1
+  target_kind: IntelSource
+  alias: intel-source
+  origin: github.com/ruinosus/dna/intel
+  tenant_scope: tenanted
+  plane: record
+  prompt_target: false
+  flatten_in_context: false
+  prompt_target_priority: 0
+  storage:
+    type: yaml
+    container: intel-sources
+  schema:
+    type: object
+    additionalProperties: false
+    required:
+    - name
+    - type
+    properties:
+      name:
+        type: string
+        description: The source name, e.g. copiloto-medico. The doc name SHOULD
+          equal this.
+      type:
+        type: string
+        enum:
+        - repo
+        - scope
+        - external
+        description: What kind of source this is — a code repo, a DNA scope, or an
+          external URL/feed.
+      uri:
+        type:
+        - string
+        - 'null'
+        description: Path / URL / scope id the source points at. Null when the name
+          alone identifies it.
+      cadence:
+        type: string
+        enum:
+        - manual
+        - event
+        - daily
+        - weekly
+        default: weekly
+        description: How often the source is researched — manual (on demand), event
+          (on a trigger), daily, or weekly.
+      threshold:
+        type: number
+        default: 0.6
+        description: Actionability threshold (0..1) below which insights from this
+          source are suppressed. Insights scoring under it are not disseminated.
+      pirs:
+        type: array
+        items:
+          type: string
+        description: Priority Intelligence Requirements — focus areas that get
+          prioritized when researching this source.
+      muted:
+        type: boolean
+        default: false
+        description: True to pause research on this source without deleting it.
+      notes:
+        type:
+        - string
+        - 'null'
+        description: Free-form operator notes.
+  describe: '{name} ({type})'
+  summary:
+    name: ''
+    type: ''
+    cadence: ''
+    muted: false
+  ui:
+    mode: govern
+    label:
+      en: Intel Sources
+      pt-BR: Fontes de Inteligência
+    icon: 📡
+    description:
+      en: Watched portfolio sources (the Direction stage — what the DNA observes).
+      pt-BR: Fontes observadas do portfólio (estágio Direção — o que o DNA observa).
+    routes:
+      list: docs/IntelSource
+      detail: docs/IntelSource/:name
+    permissions:
+      list: any
+      detail: any
+    in_sidebar: true
+    display_order: 56
+  ascii_icon: 📡
+  display_label: Intel Sources
+  docs: An IntelSource declares one watched portfolio source (a repo, a scope, or an
+    external URL) the DNA observes — its research cadence, actionability threshold,
+    Priority Intelligence Requirements (PIRs) and mute state, as per-tenant
+    declarative data. It is the Direction stage of the intelligence layer — the
+    research → ranked insights → feedback pipeline reads active IntelSources and
+    researches each on its cadence.

package/dist/extensions/intel.d.ts

@@ -0,0 +1,30 @@
+/**
+ * IntelExtension — DNA intelligence-layer data foundation.
+ *
+ * 1:1 parity with Python `dna.extensions.intel`.
+ *
+ * Registers 2 record Kinds, from descriptors (F3 — record Kinds are data, not
+ * classes):
+ *
+ *   - IntelSource (`intel-source`) — a watched portfolio source (the
+ *     "Direction" stage: what the DNA observes). One doc per source (a repo, a
+ *     scope, or an external URL) carrying its research cadence, actionability
+ *     threshold, Priority Intelligence Requirements (PIRs) and mute state.
+ *     TENANTED — a source is the tenant's OWN watchlist (per-tenant user
+ *     data), NOT a shared `_lib` default. It is deliberately NOT inheritable
+ *     (never in DEFAULT_INHERITABLE_KINDS_V1), so TENANTED is correct.
+ *   - Insight (`intel-insight`, kind name `IntelInsight`) — the
+ *     dissemination unit: a ranked, actionable insight that the
+ *     ranker/digest/dedup/feedback stages reference. TENANTED for the same
+ *     reason (per-tenant generated data). Embeddable (`embed: [title, fact]`)
+ *     so a later dedup story can do semantic recall.
+ *
+ * This is the foundation ONLY — the research/ranker/digest/feedback stages
+ * land in later stories; here we ship just the two data Kinds.
+ */
+import type { ExtensionHost, Extension } from "../kernel/protocols.js";
+export declare class IntelExtension implements Extension {
+    name: string;
+    version: string;
+    register(kernel: ExtensionHost): void;
+}

package/dist/extensions/intel.js

@@ -0,0 +1,38 @@
+/**
+ * IntelExtension — DNA intelligence-layer data foundation.
+ *
+ * 1:1 parity with Python `dna.extensions.intel`.
+ *
+ * Registers 2 record Kinds, from descriptors (F3 — record Kinds are data, not
+ * classes):
+ *
+ *   - IntelSource (`intel-source`) — a watched portfolio source (the
+ *     "Direction" stage: what the DNA observes). One doc per source (a repo, a
+ *     scope, or an external URL) carrying its research cadence, actionability
+ *     threshold, Priority Intelligence Requirements (PIRs) and mute state.
+ *     TENANTED — a source is the tenant's OWN watchlist (per-tenant user
+ *     data), NOT a shared `_lib` default. It is deliberately NOT inheritable
+ *     (never in DEFAULT_INHERITABLE_KINDS_V1), so TENANTED is correct.
+ *   - Insight (`intel-insight`, kind name `IntelInsight`) — the
+ *     dissemination unit: a ranked, actionable insight that the
+ *     ranker/digest/dedup/feedback stages reference. TENANTED for the same
+ *     reason (per-tenant generated data). Embeddable (`embed: [title, fact]`)
+ *     so a later dedup story can do semantic recall.
+ *
+ * This is the foundation ONLY — the research/ranker/digest/feedback stages
+ * land in later stories; here we ship just the two data Kinds.
+ */
+import { loadDescriptors } from "../kernel/descriptor-loader.js";
+export class IntelExtension {
+    name = "intel";
+    version = "1.0.0";
+    register(kernel) {
+        // F3: both Kinds ship as kinds/*.kind.yaml package data (byte-identical
+        // Py↔TS mirror), registered through the SAME funnel as per-scope
+        // KindDefinitions (plane lint + digest idempotency + builtin conflict
+        // marker).
+        for (const raw of loadDescriptors(import.meta.url, "intel/kinds")) {
+            kernel.kindFromDescriptor(raw);
+        }
+    }
+}

package/dist/extensions/sdlc/kinds/lesson-learned.kind.yaml

@@ -25,7 +25,6 @@ spec:
   target_kind: LessonLearned
   alias: sdlc-lesson-learned
   origin: github.com/ruinosus/dna/sdlc
-  tenant_scope: global
   plane: record
   prompt_target: false
   flatten_in_context: false

package/dist/kernel/index.d.ts

@@ -55,6 +55,18 @@ export declare const MODEL_REGISTRY_SCOPE = "_lib";
  * 1:1 parity with Python `Kernel._VOICE_POLICY_SCOPE`.
  */
 export declare const VOICE_POLICY_SCOPE = "_lib";
+/**
+ * The scope that owns the canonical Tier (DNA Cloud pricing) registry.
+ * GLOBAL like ModelProfile — queried directly regardless of the caller's
+ * scope. 1:1 parity with Python `RegistryAccessor._TIER_REGISTRY_SCOPE`.
+ */
+export declare const TIER_REGISTRY_SCOPE = "_lib";
+/**
+ * The scope that owns the canonical TenantPlan (tenant→Tier assignment)
+ * registry. GLOBAL like Tier — queried directly regardless of the caller's
+ * scope. 1:1 parity with Python `RegistryAccessor._TENANT_PLAN_REGISTRY_SCOPE`.
+ */
+export declare const TENANT_PLAN_REGISTRY_SCOPE = "_lib";
 export declare class Kernel {
     private static readonly _BOOTSTRAP_KINDS;
     private static readonly _LEGACY_NON_INHERITABLE;
@@ -611,6 +623,38 @@ export declare class Kernel {
      * @returns The matching Document, or null on miss or error.
      */
     modelProfile(modelIdOrAlias: string): Promise<import("./document.js").Document | null>;
+    /**
+     * Resolve a Tier (DNA Cloud pricing plan) from the `_lib` scope by
+     * `tier_id` (pass 1) or `aliases[]` (pass 2). Returns the matching
+     * Document or null on miss.
+     *
+     * Always queries `TIER_REGISTRY_SCOPE` ("_lib") directly — Tier is GLOBAL
+     * and NOT in `INHERITABLE_KINDS`; any caller scope is irrelevant. The
+     * quota enforcer reads the caps from here — never hardcode calls_per_day /
+     * rate_per_sec / max_tenants in code.
+     *
+     * 1:1 parity with Python `Kernel.tier(tier_id_or_alias)`.
+     *
+     * @param idOrAlias - The tier_id string or an alias declared on the tier.
+     * @returns The matching Document, or null on miss or error.
+     */
+    tier(idOrAlias: string): Promise<import("./document.js").Document | null>;
+    /**
+     * Resolve a TenantPlan (a tenant→Tier assignment) from the `_lib` scope by
+     * `spec.tenant`. Returns the matching Document or null when no assignment
+     * exists for `tenant`.
+     *
+     * Always queries `TENANT_PLAN_REGISTRY_SCOPE` ("_lib") directly — TenantPlan
+     * is GLOBAL and NOT in `INHERITABLE_KINDS`; any caller scope is irrelevant.
+     * The billing→enforcement bridge: dna-cloud's Stripe webhook writes the doc;
+     * the SDK only reads it here. No alias pass — the match is on `tenant`.
+     *
+     * 1:1 parity with Python `Kernel.tenant_plan(tenant)`.
+     *
+     * @param tenant - The DNA tenant to resolve the plan assignment for.
+     * @returns The matching Document, or null on miss or error.
+     */
+    tenantPlan(tenant: string): Promise<import("./document.js").Document | null>;
     /**
      * Resolve a VoicePolicy from the `_lib` scope by metadata name.
      * Returns the matching Document, the first policy as a fallback, or null

package/dist/kernel/index.js

@@ -59,6 +59,18 @@ export const MODEL_REGISTRY_SCOPE = SYSTEM_SCOPE;
  * 1:1 parity with Python `Kernel._VOICE_POLICY_SCOPE`.
  */
 export const VOICE_POLICY_SCOPE = SYSTEM_SCOPE;
+/**
+ * The scope that owns the canonical Tier (DNA Cloud pricing) registry.
+ * GLOBAL like ModelProfile — queried directly regardless of the caller's
+ * scope. 1:1 parity with Python `RegistryAccessor._TIER_REGISTRY_SCOPE`.
+ */
+export const TIER_REGISTRY_SCOPE = SYSTEM_SCOPE;
+/**
+ * The scope that owns the canonical TenantPlan (tenant→Tier assignment)
+ * registry. GLOBAL like Tier — queried directly regardless of the caller's
+ * scope. 1:1 parity with Python `RegistryAccessor._TENANT_PLAN_REGISTRY_SCOPE`.
+ */
+export const TENANT_PLAN_REGISTRY_SCOPE = SYSTEM_SCOPE;
 export class Kernel {
     // ── Kind classification — DERIVED from KindPort attributes ──────────────
     // s-kernel-kindport-classification-attrs: the kernel no longer hardcodes
@@ -1610,6 +1622,79 @@ export class Kernel {
         }
         return null;
     }
+    /**
+     * Resolve a Tier (DNA Cloud pricing plan) from the `_lib` scope by
+     * `tier_id` (pass 1) or `aliases[]` (pass 2). Returns the matching
+     * Document or null on miss.
+     *
+     * Always queries `TIER_REGISTRY_SCOPE` ("_lib") directly — Tier is GLOBAL
+     * and NOT in `INHERITABLE_KINDS`; any caller scope is irrelevant. The
+     * quota enforcer reads the caps from here — never hardcode calls_per_day /
+     * rate_per_sec / max_tenants in code.
+     *
+     * 1:1 parity with Python `Kernel.tier(tier_id_or_alias)`.
+     *
+     * @param idOrAlias - The tier_id string or an alias declared on the tier.
+     * @returns The matching Document, or null on miss or error.
+     */
+    async tier(idOrAlias) {
+        let rows;
+        try {
+            const mi = await this.instance(TIER_REGISTRY_SCOPE);
+            rows = mi._all("Tier");
+        }
+        catch {
+            return null;
+        }
+        // Pass 1: exact tier_id match
+        for (const row of rows) {
+            const spec = (row.spec ?? {});
+            if (spec.tier_id === idOrAlias) {
+                return row;
+            }
+        }
+        // Pass 2: aliases[]
+        for (const row of rows) {
+            const spec = (row.spec ?? {});
+            const aliases = (spec.aliases ?? []);
+            if (aliases.includes(idOrAlias)) {
+                return row;
+            }
+        }
+        return null;
+    }
+    /**
+     * Resolve a TenantPlan (a tenant→Tier assignment) from the `_lib` scope by
+     * `spec.tenant`. Returns the matching Document or null when no assignment
+     * exists for `tenant`.
+     *
+     * Always queries `TENANT_PLAN_REGISTRY_SCOPE` ("_lib") directly — TenantPlan
+     * is GLOBAL and NOT in `INHERITABLE_KINDS`; any caller scope is irrelevant.
+     * The billing→enforcement bridge: dna-cloud's Stripe webhook writes the doc;
+     * the SDK only reads it here. No alias pass — the match is on `tenant`.
+     *
+     * 1:1 parity with Python `Kernel.tenant_plan(tenant)`.
+     *
+     * @param tenant - The DNA tenant to resolve the plan assignment for.
+     * @returns The matching Document, or null on miss or error.
+     */
+    async tenantPlan(tenant) {
+        let rows;
+        try {
+            const mi = await this.instance(TENANT_PLAN_REGISTRY_SCOPE);
+            rows = mi._all("TenantPlan");
+        }
+        catch {
+            return null;
+        }
+        for (const row of rows) {
+            const spec = (row.spec ?? {});
+            if (spec.tenant === tenant) {
+                return row;
+            }
+        }
+        return null;
+    }
     /**
      * Resolve a VoicePolicy from the `_lib` scope by metadata name.
      * Returns the matching Document, the first policy as a fallback, or null

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dna-sdk",
-  "version": "0.10.0",
+  "version": "0.11.0",
   "description": "DNA — Domain Notation of Anything (TypeScript SDK)",
   "type": "module",
   "license": "MIT",