@kindgi/api 0.0.0-bootstrap.0 → 0.1.1

package/dist/state-store-binding.js

@@ -0,0 +1,38 @@
+// SPDX-License-Identifier: Apache-2.0
+// Copyright (C) 2026 Kindgi Inc.
+/**
+ * Trivial in-memory store — appropriate for tests + single-process dev.
+ * Entries are single-use (`take` deletes on hit) and time out on their
+ * own; the store performs a shallow expired-entry sweep on every call
+ * so long-lived processes don't leak memory when a callback never
+ * arrives.
+ */
+export function createInMemoryOauthStateStore() {
+    const entries = new Map();
+    const sweep = (now) => {
+        for (const [key, entry] of entries) {
+            if (entry.expiresAt <= now)
+                entries.delete(key);
+        }
+    };
+    return {
+        async put(entry) {
+            sweep(Date.now());
+            entries.set(entry.state, entry);
+        },
+        async take({ state, providerId }) {
+            const now = Date.now();
+            sweep(now);
+            const entry = entries.get(state);
+            if (entry === undefined)
+                return null;
+            if (providerId !== undefined && entry.providerId !== providerId)
+                return null;
+            entries.delete(state);
+            if (entry.expiresAt <= now)
+                return null;
+            return entry;
+        },
+    };
+}
+//# sourceMappingURL=state-store-binding.js.map

package/dist/state-store-binding.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"state-store-binding.js","sourceRoot":"","sources":["../src/state-store-binding.ts"],"names":[],"mappings":"AAAA,sCAAsC;AACtC,iCAAiC;AAkDjC;;;;;;GAMG;AACH,MAAM,UAAU,6BAA6B;IAC3C,MAAM,OAAO,GAAG,IAAI,GAAG,EAA2B,CAAC;IAEnD,MAAM,KAAK,GAAG,CAAC,GAAW,EAAQ,EAAE;QAClC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,OAAO,EAAE,CAAC;YACnC,IAAI,KAAK,CAAC,SAAS,IAAI,GAAG;gBAAE,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAClD,CAAC;IACH,CAAC,CAAC;IAEF,OAAO;QACL,KAAK,CAAC,GAAG,CAAC,KAAK;YACb,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;YAClB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;QAClC,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,UAAU,EAAE;YAC9B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YACvB,KAAK,CAAC,GAAG,CAAC,CAAC;YACX,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;YACjC,IAAI,KAAK,KAAK,SAAS;gBAAE,OAAO,IAAI,CAAC;YACrC,IAAI,UAAU,KAAK,SAAS,IAAI,KAAK,CAAC,UAAU,KAAK,UAAU;gBAAE,OAAO,IAAI,CAAC;YAC7E,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACtB,IAAI,KAAK,CAAC,SAAS,IAAI,GAAG;gBAAE,OAAO,IAAI,CAAC;YACxC,OAAO,KAAK,CAAC;QACf,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/supervisor-binding.d.ts

@@ -0,0 +1,526 @@
+import type { Scope } from '@kindgi/platform';
+import type { AgentId, ApprovalId, Cursor, FixProposalId, ObservationId, ProvenanceId, RunId, Semver, SupervisorId, TenantId, Timestamp } from '@kindgi/types';
+/**
+ * Caller-plugged surface for the supervisor's fix-proposal lifecycle
+ * + observation readback. Same shape as
+ * `AgentRegistryBinding` / `MemoryBinding` / `ReviewerBinding`: the API
+ * package does NOT own supervisor runtime, agent registry, HITL wiring,
+ * or eval invocation. A binding implementation composes:
+ *
+ *   - the supervisor runtime (draft, dry-run, submit for review, apply,
+ *     roll back, withdraw, list / get proposals, query observations);
+ *   - its `Supervisor` registry (`supervisorId → Supervisor`);
+ *   - its agent registry (for the dry-run baseline lookup + `apply`);
+ *   - its eval dataset + judge registries and an agent-invocation
+ *     closure (all needed by the dry-run);
+ *   - its HITL surface (submitting for review enqueues an approval —
+ *     the binding surfaces the resulting `ApprovalId` back to the route
+ *     so the response body carries it).
+ *
+ * Every proposal method is tenant-scoped AND supervisor-scoped: callers
+ * pass both `tenantId` and `supervisorId`. `supervisorId` comes from the
+ * `X-Supervisor-Id` request header — tenant flows from the token,
+ * supervisor is a per-request scope the caller supplies.
+ *
+ * State transitions are enforced by the supervisor runtime
+ * (`invalid-transition` domain error). The route layer surfaces those
+ * as `409 conflict` with error code
+ * `proposal-invalid-state-transition` — out-of-order lifecycle calls
+ * are caller/state conflicts.
+ *
+ * `queryObservations` is the supervisor readback for `/v1/observations`
+ * — a straight paginated list over the observation stream. Tenant-scoped
+ * only; `supervisorId` is an optional filter, not a mount-time scope.
+ */
+export interface SupervisorBinding {
+    /**
+     * Cursor-paginated list of proposals scoped to `(tenantId,
+     * supervisorId)`. Filters:
+     *   - `status`  — single `FixProposalStatus` value.
+     *   - `agentId` — exact match on target agent id.
+     *   - `tier`    — `'prompt' | 'retrieval' | 'tool-config'`.
+     *
+     * Sort order is binding-defined (for example `createdAt desc, id desc`).
+     */
+    listProposals(input: SupervisorListProposalsInput): Promise<SupervisorProposalPage>;
+    /**
+     * Get a proposal by id, or `null` when unknown. The route surfaces
+     * `null` as `404 proposal-not-found`. The binding MUST also return
+     * `null` when the proposal exists but is not owned by the caller's
+     * supervisor id — cross-supervisor reads leak tier boundaries the
+     * same way cross-tenant reads leak resource existence (avoid via
+     * `null → 404` per `docs/API-ROUTE-CONVENTIONS.md` §2.4).
+     */
+    getProposal(input: SupervisorGetProposalInput): Promise<FixProposal | null>;
+    /**
+     * Draft a new proposal in `draft` state. The dedup fingerprint is
+     * computed from `(tier, agentId, agentVersion, canonical(change))`;
+     * duplicate proposals short-circuit to the existing non-terminal row —
+     * discriminated on `SupervisorDraftOutcome.kind`.
+     */
+    draftProposal(input: SupervisorDraftProposalInput): Promise<SupervisorDraftOutcome>;
+    /**
+     * Trigger a dry-run for a proposal. A dry-run needs a dataset, judges,
+     * eval bindings and an agent-invocation closure — all of which the
+     * binding assembles from `input.datasetId` / `input.datasetVersion`
+     * and its own runtime wiring. Returns the updated proposal (`dry-run-passed` or
+     * `dry-run-failed`) or a discriminated error outcome so the route
+     * can map `invalid-transition` → `409` without touching the runtime
+     * error union directly.
+     */
+    dryRunProposal(input: SupervisorDryRunProposalInput): Promise<SupervisorDryRunOutcome>;
+    /**
+     * Submit an approved dry-run proposal for HITL review. The binding
+     * forwards the resolved `Supervisor` (for ground-layer enforcement +
+     * meta-fix detection) and enqueues the approval. Returns the updated proposal (in
+     * `proposed-for-review` state) plus the created approval id so the
+     * route can surface it in the response body (the SDK correlates
+     * proposal → approval via that id).
+     */
+    submitReview(input: SupervisorSubmitReviewInput): Promise<SupervisorSubmitReviewOutcome>;
+    /**
+     * Apply an `approved` proposal — registers a new agent version.
+     * Returns a minimal ack shape
+     * (`proposalId`, `appliedVersion`, `appliedAt`) rather than the
+     * full runtime result — the route body stays lean; callers who
+     * need the full `Agent` snapshot can `GET /v1/agents/:agentId`.
+     */
+    applyProposal(input: SupervisorApplyProposalInput): Promise<SupervisorApplyOutcome>;
+    /**
+     * Roll back an `applied` proposal — unregisters the applied
+     * version from the agent registry + transitions to `rolled-back`.
+     */
+    rollbackProposal(input: SupervisorRollbackProposalInput): Promise<SupervisorRollbackOutcome>;
+    /**
+     * Withdraw a non-terminal proposal. Legal from any of
+     * `draft | dry-running | dry-run-passed | dry-run-failed |
+     * proposed-for-review`. Terminal states surface as
+     * `invalid-transition` (which the route maps to 409).
+     */
+    withdrawProposal(input: SupervisorWithdrawProposalInput): Promise<SupervisorWithdrawOutcome>;
+    /**
+     * Cursor-paginated observation readback for `/v1/observations`.
+     * Tenant-scoped; supervisor/agent/conversation/time-window filters
+     * are optional. Returns a discriminated `err` outcome for the runtime
+     * failure paths
+     * (persistence + envelope decode); the route surfaces those via
+     * `statusFor(code)`.
+     */
+    queryObservations(input: SupervisorQueryObservationsInput): Promise<SupervisorQueryObservationsOutcome>;
+}
+export interface SupervisorListProposalsInput {
+    readonly tenantId: TenantId;
+    readonly supervisorId: SupervisorId;
+    readonly limit: number;
+    readonly cursor?: Cursor;
+    readonly status?: FixProposalStatus;
+    readonly agentId?: AgentId;
+    readonly tier?: ProposedChange['tier'];
+    /**
+     * Narrow the list to a specific scope. Absent = no scope narrow
+     * (return every row in the tenant the caller can see — admin/audit
+     * default).
+     *
+     * Content-scoped semantics (this binding — fix-proposals attribute
+     * to the project of the agent they target):
+     * - `{ kind: 'project', projectId }` — rows in that project.
+     * - `{ kind: 'org', orgId }` — rows in every project belonging to
+     *   that org.
+     * - `{ kind: 'tenant', tenantId }` — every row in the tenant.
+     *
+     * Proposals are content: every row belongs to a project, so `inherit`
+     * has no effect here.
+     */
+    readonly scope?: Scope;
+    /**
+     * `false` = literal-at-this-scope only (admin/audit view).
+     * `true` (default) = inheritance walk (user-facing view).
+     * No-op for content-scoped bindings (rows only exist at
+     * project-level — there is no upward hierarchy to walk). Kept for
+     * uniformity: scope-aware bindings share one filter shape across the
+     * SDK and OpenAPI schemas.
+     */
+    readonly inherit?: boolean;
+}
+export interface SupervisorGetProposalInput {
+    readonly tenantId: TenantId;
+    readonly supervisorId: SupervisorId;
+    readonly proposalId: FixProposalId;
+}
+export interface SupervisorDraftProposalInput {
+    readonly tenantId: TenantId;
+    readonly supervisorId: SupervisorId;
+    readonly agentId: AgentId;
+    readonly agentVersion: string;
+    readonly tier: ProposedChange['tier'];
+    readonly change: ProposedChange['change'];
+    readonly patternRefs: readonly PatternRef[];
+    readonly hypothesis: string;
+    readonly proposerRuleId: string;
+}
+export interface SupervisorDryRunProposalInput {
+    readonly tenantId: TenantId;
+    readonly supervisorId: SupervisorId;
+    readonly proposalId: FixProposalId;
+    /**
+     * Dataset the binding uses for the dry-run.
+     * The wire carries just `(datasetId, datasetVersion)` — the binding
+     * resolves both to the actual `Dataset<TInput, TExpected>` from its
+     * own registry.
+     */
+    readonly datasetId: string;
+    readonly datasetVersion: string;
+    readonly criterion: PassCriterion;
+}
+export interface SupervisorSubmitReviewInput {
+    readonly tenantId: TenantId;
+    readonly supervisorId: SupervisorId;
+    readonly proposalId: FixProposalId;
+    readonly requiredRole?: 'standard' | 'senior' | 'admin';
+    readonly expiresAt?: Timestamp;
+}
+export interface SupervisorApplyProposalInput {
+    readonly tenantId: TenantId;
+    readonly supervisorId: SupervisorId;
+    readonly proposalId: FixProposalId;
+    readonly newVersion?: string;
+}
+export interface SupervisorRollbackProposalInput {
+    readonly tenantId: TenantId;
+    readonly supervisorId: SupervisorId;
+    readonly proposalId: FixProposalId;
+    readonly reason: string;
+}
+export interface SupervisorWithdrawProposalInput {
+    readonly tenantId: TenantId;
+    readonly supervisorId: SupervisorId;
+    readonly proposalId: FixProposalId;
+    readonly reason: string;
+}
+/**
+ * Observation readback filter. Tenant-scoped; every other filter is
+ * optional. `since` / `until` bound `observedAt`; `cursor` is an opaque
+ * ISO timestamp from a prior page's `nextCursor`. `limit` is clamped by
+ * the binding.
+ */
+export interface SupervisorQueryObservationsInput {
+    readonly tenantId: TenantId;
+    readonly limit: number;
+    readonly cursor?: Cursor;
+    readonly status?: ObservationStatus;
+    readonly supervisorId?: SupervisorId;
+    readonly agentId?: AgentId;
+    readonly agentVersion?: Semver;
+    readonly conversationId?: RunId;
+    readonly since?: Timestamp;
+    readonly until?: Timestamp;
+}
+export interface SupervisorProposalPage {
+    readonly data: readonly FixProposal[];
+    readonly nextCursor?: Cursor;
+}
+/**
+ * Result of a draft attempt. Deduplication is by
+ * `(supervisorId, fingerprint)`:
+ *
+ *   - `ok`      — a new draft row was inserted.
+ *   - `dedup`   — an existing non-terminal proposal has the same
+ *                 fingerprint; caller can treat it as their own
+ *                 draft. `proposal` is the pre-existing row.
+ */
+export type SupervisorDraftOutcome = {
+    readonly kind: 'ok';
+    readonly proposal: FixProposal;
+} | {
+    readonly kind: 'dedup';
+    readonly proposal: FixProposal;
+};
+/**
+ * Result of a dry-run attempt. `ok` carries the updated proposal
+ * (either `dry-run-passed` or `dry-run-failed` — both are legitimate
+ * outcomes; `failed` means "the criterion was not met," not "the
+ * request errored"). Failure outcomes surface as discriminated errors
+ * the route layer maps to specific HTTP statuses.
+ */
+export type SupervisorDryRunOutcome = {
+    readonly kind: 'ok';
+    readonly proposal: FixProposal;
+    readonly passed: boolean;
+} | {
+    readonly kind: 'not-found';
+    readonly proposalId: FixProposalId;
+} | {
+    readonly kind: 'invalid-transition';
+    readonly proposalId: FixProposalId;
+    readonly from: FixProposalStatus;
+    readonly to: FixProposalStatus;
+} | {
+    /**
+     * Wire back `apply-change-failed` (change couldn't be applied
+     * against the current baseline), `baseline-mismatch` (proposal
+     * targets a stale version), or any other runtime failure. The
+     * route maps the code through `statusFor`: the two named codes are
+     * `422 unprocessable` (the request was well-formed but the domain
+     * state prevents dry-running); unknown codes are `500`.
+     */
+    readonly kind: 'runtime-error';
+    readonly code: string;
+    readonly message: string;
+};
+export type SupervisorSubmitReviewOutcome = {
+    readonly kind: 'ok';
+    readonly proposal: FixProposal;
+    readonly approvalId: ApprovalId;
+    readonly metaFix: boolean;
+} | {
+    readonly kind: 'not-found';
+    readonly proposalId: FixProposalId;
+} | {
+    readonly kind: 'invalid-transition';
+    readonly proposalId: FixProposalId;
+    readonly from: FixProposalStatus;
+    readonly to: FixProposalStatus;
+} | {
+    readonly kind: 'ground-layer-violation';
+    readonly proposalId: FixProposalId;
+    readonly guardrailId: string;
+    readonly reason: string;
+} | {
+    readonly kind: 'runtime-error';
+    readonly code: string;
+    readonly message: string;
+};
+export type SupervisorApplyOutcome = {
+    readonly kind: 'ok';
+    readonly proposalId: FixProposalId;
+    readonly appliedVersion: string;
+    readonly appliedAt: Timestamp;
+} | {
+    readonly kind: 'not-found';
+    readonly proposalId: FixProposalId;
+} | {
+    readonly kind: 'invalid-transition';
+    readonly proposalId: FixProposalId;
+    readonly from: FixProposalStatus;
+    readonly to: FixProposalStatus;
+} | {
+    readonly kind: 'runtime-error';
+    readonly code: string;
+    readonly message: string;
+};
+export type SupervisorRollbackOutcome = {
+    readonly kind: 'ok';
+    readonly proposalId: FixProposalId;
+    readonly rolledBackAt: Timestamp;
+} | {
+    readonly kind: 'not-found';
+    readonly proposalId: FixProposalId;
+} | {
+    readonly kind: 'invalid-transition';
+    readonly proposalId: FixProposalId;
+    readonly from: FixProposalStatus;
+    readonly to: FixProposalStatus;
+} | {
+    readonly kind: 'runtime-error';
+    readonly code: string;
+    readonly message: string;
+};
+export type SupervisorWithdrawOutcome = {
+    readonly kind: 'ok';
+    readonly proposal: FixProposal;
+} | {
+    readonly kind: 'not-found';
+    readonly proposalId: FixProposalId;
+} | {
+    readonly kind: 'invalid-transition';
+    readonly proposalId: FixProposalId;
+    readonly from: FixProposalStatus;
+    readonly to: FixProposalStatus;
+} | {
+    readonly kind: 'runtime-error';
+    readonly code: string;
+    readonly message: string;
+};
+export interface SupervisorObservationPage {
+    readonly data: readonly Observation[];
+    readonly nextCursor?: Cursor;
+}
+export type SupervisorQueryObservationsOutcome = {
+    readonly kind: 'ok';
+    readonly page: SupervisorObservationPage;
+} | {
+    readonly kind: 'runtime-error';
+    readonly code: string;
+    readonly message: string;
+};
+/**
+ * Lifecycle of a fix proposal.
+ *
+ * `draft` — initial state after `POST /v1/proposals`.
+ * `dry-running` — transient state while a dry-run executes.
+ * `dry-run-passed` / `dry-run-failed` — dry-run terminated with a
+ *   criterion result. `failed` is a legitimate domain outcome, not an
+ *   error.
+ * `proposed-for-review` — submitted for HITL. `reviewApprovalId` is set.
+ * `approved` / `rejected` — HITL terminal states.
+ * `applied` — the change materialized. `appliedVersion` + `appliedAt` set.
+ * `rolled-back` — a prior `applied` proposal was undone.
+ * `withdrawn` — the caller withdrew the proposal before terminal review.
+ */
+export type FixProposalStatus = 'draft' | 'dry-running' | 'dry-run-passed' | 'dry-run-failed' | 'proposed-for-review' | 'approved' | 'rejected' | 'applied' | 'rolled-back' | 'withdrawn';
+/** The aggregated fingerprint kind for a failure pattern. */
+export type PatternKind = 'guardrail-violation' | 'tool-error' | 'budget-exceeded' | 'model-error' | 'aborted';
+/**
+ * A change to an agent's prompt (the `instructions` string). Three
+ * kinds cover the common shapes. Extensible via the `kind` discriminant.
+ */
+export type PromptChange = {
+    readonly kind: 'append';
+    readonly text: string;
+} | {
+    readonly kind: 'replace-section';
+    readonly section: string;
+    readonly newText: string;
+} | {
+    readonly kind: 'replace';
+    readonly beforeText: string;
+    readonly afterText: string;
+};
+/**
+ * A retrieval intent — mirror of `Agent.retrieval[]` shape.
+ */
+export interface RetrievalIntentShape {
+    readonly types: readonly string[];
+    readonly scope: 'same-conversation' | 'same-project' | 'tenant';
+    readonly limit?: number;
+}
+export type RetrievalChange = {
+    readonly kind: 'add-intent';
+    readonly intent: RetrievalIntentShape;
+} | {
+    readonly kind: 'remove-intent';
+    readonly index: number;
+} | {
+    readonly kind: 'replace-intent';
+    readonly index: number;
+    readonly intent: RetrievalIntentShape;
+} | {
+    readonly kind: 'update-limit';
+    readonly index: number;
+    readonly limit: number;
+};
+export type ToolConfigChange = {
+    readonly kind: 'add-tool';
+    readonly toolId: string;
+    readonly toolVersion: string;
+} | {
+    readonly kind: 'remove-tool';
+    readonly toolId: string;
+} | {
+    readonly kind: 'set-tools';
+    readonly tools: readonly {
+        readonly id: string;
+        readonly version: string;
+    }[];
+};
+/**
+ * The change payload — polymorphic over tier.
+ */
+export type ProposedChange = {
+    readonly tier: 'prompt';
+    readonly change: PromptChange;
+} | {
+    readonly tier: 'retrieval';
+    readonly change: RetrievalChange;
+} | {
+    readonly tier: 'tool-config';
+    readonly change: ToolConfigChange;
+};
+/**
+ * A reference to a failure pattern that motivated a proposal.
+ */
+export interface PatternRef {
+    readonly kind: PatternKind;
+    readonly key: string;
+    readonly count: number;
+    readonly firstSeenAt: Timestamp;
+    readonly lastSeenAt: Timestamp;
+    readonly sampleConversations: readonly RunId[];
+}
+/**
+ * A fix proposal drafted by the supervisor. Every field is declared here
+ * so the API package does not depend on the supervisor runtime's types.
+ */
+export interface FixProposal {
+    readonly id: FixProposalId;
+    readonly tenantId: TenantId;
+    readonly supervisorId: SupervisorId;
+    readonly agentId: AgentId;
+    readonly agentVersion: string;
+    readonly tier: ProposedChange['tier'];
+    readonly change: ProposedChange['change'];
+    readonly patternRefs: readonly PatternRef[];
+    readonly hypothesis: string;
+    readonly proposerRuleId: string;
+    readonly status: FixProposalStatus;
+    readonly fingerprint: string;
+    readonly resolutionReason?: string;
+    readonly reviewApprovalId?: ApprovalId;
+    readonly appliedVersion?: string;
+    readonly appliedAt?: Timestamp;
+    readonly rolledBackAt?: Timestamp;
+    readonly createdAt: Timestamp;
+    readonly updatedAt: Timestamp;
+    readonly resolvedAt?: Timestamp;
+}
+/** Dry-run pass criterion. */
+export type PassCriterion = {
+    readonly kind: 'min-pass-rate';
+    readonly minPassRate: number;
+} | {
+    readonly kind: 'strict-improvement';
+    readonly baselinePassRate: number;
+    readonly minDelta: number;
+};
+/**
+ * Classified outcome of an observed turn. The observations route
+ * validates the query param against this union.
+ */
+export type ObservationStatus = 'succeeded' | 'guardrail-violation' | 'guardrail-warning' | 'tool-error' | 'model-error' | 'budget-exceeded' | 'aborted' | 'other';
+export interface ObservedViolation {
+    readonly guardrailId: string;
+    readonly action: string;
+    readonly severity: string;
+    readonly passed: boolean;
+    readonly reason?: string;
+}
+/**
+ * Wire shape of a supervisor observation — the atomic unit persisted
+ * per observed agent turn. Serialized 1:1 into the `/v1/observations`
+ * response body.
+ */
+export interface Observation {
+    readonly id: ObservationId;
+    readonly tenantId: TenantId;
+    readonly supervisorId: SupervisorId;
+    readonly agentId: AgentId;
+    readonly agentVersion: string;
+    readonly conversationId: RunId;
+    readonly turnNumber: number;
+    readonly status: ObservationStatus;
+    readonly failureCode?: string;
+    readonly violations: readonly ObservedViolation[];
+    readonly failureDetail?: Readonly<Record<string, unknown>>;
+    readonly durationMs: number;
+    readonly costUsd: string;
+    readonly provider?: {
+        readonly id: string;
+        readonly model: string;
+    };
+    readonly provenanceRef?: {
+        readonly runId: RunId;
+        readonly provenanceId?: ProvenanceId;
+    };
+    readonly observedAt: Timestamp;
+}
+//# sourceMappingURL=supervisor-binding.d.ts.map

package/dist/supervisor-binding.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"supervisor-binding.d.ts","sourceRoot":"","sources":["../src/supervisor-binding.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,KAAK,EACV,OAAO,EACP,UAAU,EACV,MAAM,EACN,aAAa,EACb,aAAa,EACb,YAAY,EACZ,KAAK,EACL,MAAM,EACN,YAAY,EACZ,QAAQ,EACR,SAAS,EACV,MAAM,eAAe,CAAC;AAEvB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AACH,MAAM,WAAW,iBAAiB;IAChC;;;;;;;;OAQG;IACH,aAAa,CAAC,KAAK,EAAE,4BAA4B,GAAG,OAAO,CAAC,sBAAsB,CAAC,CAAC;IACpF;;;;;;;OAOG;IACH,WAAW,CAAC,KAAK,EAAE,0BAA0B,GAAG,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC,CAAC;IAC5E;;;;;OAKG;IACH,aAAa,CAAC,KAAK,EAAE,4BAA4B,GAAG,OAAO,CAAC,sBAAsB,CAAC,CAAC;IACpF;;;;;;;;OAQG;IACH,cAAc,CAAC,KAAK,EAAE,6BAA6B,GAAG,OAAO,CAAC,uBAAuB,CAAC,CAAC;IACvF;;;;;;;OAOG;IACH,YAAY,CAAC,KAAK,EAAE,2BAA2B,GAAG,OAAO,CAAC,6BAA6B,CAAC,CAAC;IACzF;;;;;;OAMG;IACH,aAAa,CAAC,KAAK,EAAE,4BAA4B,GAAG,OAAO,CAAC,sBAAsB,CAAC,CAAC;IACpF;;;OAGG;IACH,gBAAgB,CAAC,KAAK,EAAE,+BAA+B,GAAG,OAAO,CAAC,yBAAyB,CAAC,CAAC;IAC7F;;;;;OAKG;IACH,gBAAgB,CAAC,KAAK,EAAE,+BAA+B,GAAG,OAAO,CAAC,yBAAyB,CAAC,CAAC;IAC7F;;;;;;;OAOG;IACH,iBAAiB,CACf,KAAK,EAAE,gCAAgC,GACtC,OAAO,CAAC,kCAAkC,CAAC,CAAC;CAChD;AAID,MAAM,WAAW,4BAA4B;IAC3C,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC;IAC5B,QAAQ,CAAC,YAAY,EAAE,YAAY,CAAC;IACpC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,MAAM,CAAC,EAAE,iBAAiB,CAAC;IACpC,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC;IAC3B,QAAQ,CAAC,IAAI,CAAC,EAAE,cAAc,CAAC,MAAM,CAAC,CAAC;IACvC;;;;;;;;;;;;;;OAcG;IACH,QAAQ,CAAC,KAAK,CAAC,EAAE,KAAK,CAAC;IACvB;;;;;;;OAOG;IACH,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC;CAC5B;AAED,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC;IAC5B,QAAQ,CAAC,YAAY,EAAE,YAAY,CAAC;IACpC,QAAQ,CAAC,UAAU,EAAE,aAAa,CAAC;CACpC;AAED,MAAM,WAAW,4BAA4B;IAC3C,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC;IAC5B,QAAQ,CAAC,YAAY,EAAE,YAAY,CAAC;IACpC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,IAAI,EAAE,cAAc,CAAC,MAAM,CAAC,CAAC;IACtC,QAAQ,CAAC,MAAM,EAAE,cAAc,CAAC,QAAQ,CAAC,CAAC;IAC1C,QAAQ,CAAC,WAAW,EAAE,SAAS,UAAU,EAAE,CAAC;IAC5C,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;CACjC;AAED,MAAM,WAAW,6BAA6B;IAC5C,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC;IAC5B,QAAQ,CAAC,YAAY,EAAE,YAAY,CAAC;IACpC,QAAQ,CAAC,UAAU,EAAE,aAAa,CAAC;IACnC;;;;;OAKG;IACH,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,SAAS,EAAE,aAAa,CAAC;CACnC;AAED,MAAM,WAAW,2BAA2B;IAC1C,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC;IAC5B,QAAQ,CAAC,YAAY,EAAE,YAAY,CAAC;IACpC,QAAQ,CAAC,UAAU,EAAE,aAAa,CAAC;IACnC,QAAQ,CAAC,YAAY,CAAC,EAAE,UAAU,GAAG,QAAQ,GAAG,OAAO,CAAC;IACxD,QAAQ,CAAC,SAAS,CAAC,EAAE,SAAS,CAAC;CAChC;AAED,MAAM,WAAW,4BAA4B;IAC3C,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC;IAC5B,QAAQ,CAAC,YAAY,EAAE,YAAY,CAAC;IACpC,QAAQ,CAAC,UAAU,EAAE,aAAa,CAAC;IACnC,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;CAC9B;AAED,MAAM,WAAW,+BAA+B;IAC9C,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC;IAC5B,QAAQ,CAAC,YAAY,EAAE,YAAY,CAAC;IACpC,QAAQ,CAAC,UAAU,EAAE,aAAa,CAAC;IACnC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,+BAA+B;IAC9C,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC;IAC5B,QAAQ,CAAC,YAAY,EAAE,YAAY,CAAC;IACpC,QAAQ,CAAC,UAAU,EAAE,aAAa,CAAC;IACnC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB;AAED;;;;;GAKG;AACH,MAAM,WAAW,gCAAgC;IAC/C,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC;IAC5B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,MAAM,CAAC,EAAE,iBAAiB,CAAC;IACpC,QAAQ,CAAC,YAAY,CAAC,EAAE,YAAY,CAAC;IACrC,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC;IAC3B,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,cAAc,CAAC,EAAE,KAAK,CAAC;IAChC,QAAQ,CAAC,KAAK,CAAC,EAAE,SAAS,CAAC;IAC3B,QAAQ,CAAC,KAAK,CAAC,EAAE,SAAS,CAAC;CAC5B;AAID,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,IAAI,EAAE,SAAS,WAAW,EAAE,CAAC;IACtC,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;CAC9B;AAED;;;;;;;;GAQG;AACH,MAAM,MAAM,sBAAsB,GAC9B;IAAE,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC;IAAC,QAAQ,CAAC,QAAQ,EAAE,WAAW,CAAA;CAAE,GACvD;IAAE,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IAAC,QAAQ,CAAC,QAAQ,EAAE,WAAW,CAAA;CAAE,CAAC;AAE/D;;;;;;GAMG;AACH,MAAM,MAAM,uBAAuB,GAC/B;IAAE,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC;IAAC,QAAQ,CAAC,QAAQ,EAAE,WAAW,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAA;CAAE,GACjF;IAAE,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC;IAAC,QAAQ,CAAC,UAAU,EAAE,aAAa,CAAA;CAAE,GAClE;IACE,QAAQ,CAAC,IAAI,EAAE,oBAAoB,CAAC;IACpC,QAAQ,CAAC,UAAU,EAAE,aAAa,CAAC;IACnC,QAAQ,CAAC,IAAI,EAAE,iBAAiB,CAAC;IACjC,QAAQ,CAAC,EAAE,EAAE,iBAAiB,CAAC;CAChC,GACD;IACE;;;;;;;OAOG;IACH,QAAQ,CAAC,IAAI,EAAE,eAAe,CAAC;IAC/B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B,CAAC;AAEN,MAAM,MAAM,6BAA6B,GACrC;IACE,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC;IACpB,QAAQ,CAAC,QAAQ,EAAE,WAAW,CAAC;IAC/B,QAAQ,CAAC,UAAU,EAAE,UAAU,CAAC;IAChC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;CAC3B,GACD;IAAE,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC;IAAC,QAAQ,CAAC,UAAU,EAAE,aAAa,CAAA;CAAE,GAClE;IACE,QAAQ,CAAC,IAAI,EAAE,oBAAoB,CAAC;IACpC,QAAQ,CAAC,UAAU,EAAE,aAAa,CAAC;IACnC,QAAQ,CAAC,IAAI,EAAE,iBAAiB,CAAC;IACjC,QAAQ,CAAC,EAAE,EAAE,iBAAiB,CAAC;CAChC,GACD;IACE,QAAQ,CAAC,IAAI,EAAE,wBAAwB,CAAC;IACxC,QAAQ,CAAC,UAAU,EAAE,aAAa,CAAC;IACnC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB,GACD;IAAE,QAAQ,CAAC,IAAI,EAAE,eAAe,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC;AAExF,MAAM,MAAM,sBAAsB,GAC9B;IACE,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC;IACpB,QAAQ,CAAC,UAAU,EAAE,aAAa,CAAC;IACnC,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAC;CAC/B,GACD;IAAE,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC;IAAC,QAAQ,CAAC,UAAU,EAAE,aAAa,CAAA;CAAE,GAClE;IACE,QAAQ,CAAC,IAAI,EAAE,oBAAoB,CAAC;IACpC,QAAQ,CAAC,UAAU,EAAE,aAAa,CAAC;IACnC,QAAQ,CAAC,IAAI,EAAE,iBAAiB,CAAC;IACjC,QAAQ,CAAC,EAAE,EAAE,iBAAiB,CAAC;CAChC,GACD;IAAE,QAAQ,CAAC,IAAI,EAAE,eAAe,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC;AAExF,MAAM,MAAM,yBAAyB,GACjC;IACE,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC;IACpB,QAAQ,CAAC,UAAU,EAAE,aAAa,CAAC;IACnC,QAAQ,CAAC,YAAY,EAAE,SAAS,CAAC;CAClC,GACD;IAAE,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC;IAAC,QAAQ,CAAC,UAAU,EAAE,aAAa,CAAA;CAAE,GAClE;IACE,QAAQ,CAAC,IAAI,EAAE,oBAAoB,CAAC;IACpC,QAAQ,CAAC,UAAU,EAAE,aAAa,CAAC;IACnC,QAAQ,CAAC,IAAI,EAAE,iBAAiB,CAAC;IACjC,QAAQ,CAAC,EAAE,EAAE,iBAAiB,CAAC;CAChC,GACD;IAAE,QAAQ,CAAC,IAAI,EAAE,eAAe,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC;AAExF,MAAM,MAAM,yBAAyB,GACjC;IAAE,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC;IAAC,QAAQ,CAAC,QAAQ,EAAE,WAAW,CAAA;CAAE,GACvD;IAAE,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC;IAAC,QAAQ,CAAC,UAAU,EAAE,aAAa,CAAA;CAAE,GAClE;IACE,QAAQ,CAAC,IAAI,EAAE,oBAAoB,CAAC;IACpC,QAAQ,CAAC,UAAU,EAAE,aAAa,CAAC;IACnC,QAAQ,CAAC,IAAI,EAAE,iBAAiB,CAAC;IACjC,QAAQ,CAAC,EAAE,EAAE,iBAAiB,CAAC;CAChC,GACD;IAAE,QAAQ,CAAC,IAAI,EAAE,eAAe,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC;AAExF,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,IAAI,EAAE,SAAS,WAAW,EAAE,CAAC;IACtC,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;CAC9B;AAED,MAAM,MAAM,kCAAkC,GAC1C;IAAE,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,yBAAyB,CAAA;CAAE,GACjE;IAAE,QAAQ,CAAC,IAAI,EAAE,eAAe,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC;AAQxF;;;;;;;;;;;;;GAaG;AACH,MAAM,MAAM,iBAAiB,GACzB,OAAO,GACP,aAAa,GACb,gBAAgB,GAChB,gBAAgB,GAChB,qBAAqB,GACrB,UAAU,GACV,UAAU,GACV,SAAS,GACT,aAAa,GACb,WAAW,CAAC;AAEhB,6DAA6D;AAC7D,MAAM,MAAM,WAAW,GACnB,qBAAqB,GACrB,YAAY,GACZ,iBAAiB,GACjB,aAAa,GACb,SAAS,CAAC;AAEd;;;GAGG;AACH,MAAM,MAAM,YAAY,GACpB;IAAE,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAClD;IAAE,QAAQ,CAAC,IAAI,EAAE,iBAAiB,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GACxF;IAAE,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;IAAC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;CAAE,CAAC;AAE1F;;GAEG;AACH,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,CAAC;IAClC,QAAQ,CAAC,KAAK,EAAE,mBAAmB,GAAG,cAAc,GAAG,QAAQ,CAAC;IAChE,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,MAAM,eAAe,GACvB;IAAE,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,oBAAoB,CAAA;CAAE,GACtE;IAAE,QAAQ,CAAC,IAAI,EAAE,eAAe,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GAC1D;IACE,QAAQ,CAAC,IAAI,EAAE,gBAAgB,CAAC;IAChC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,MAAM,EAAE,oBAAoB,CAAC;CACvC,GACD;IAAE,QAAQ,CAAC,IAAI,EAAE,cAAc,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC;AAEtF,MAAM,MAAM,gBAAgB,GACxB;IACE,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;IAC1B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;CAC9B,GACD;IAAE,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GACzD;IACE,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC;IAC3B,QAAQ,CAAC,KAAK,EAAE,SAAS;QAAE,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;CAC9E,CAAC;AAEN;;GAEG;AACH,MAAM,MAAM,cAAc,GACtB;IAAE,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,YAAY,CAAA;CAAE,GAC1D;IAAE,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,eAAe,CAAA;CAAE,GAChE;IAAE,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,gBAAgB,CAAA;CAAE,CAAC;AAExE;;GAEG;AACH,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC;IAC3B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,WAAW,EAAE,SAAS,CAAC;IAChC,QAAQ,CAAC,UAAU,EAAE,SAAS,CAAC;IAC/B,QAAQ,CAAC,mBAAmB,EAAE,SAAS,KAAK,EAAE,CAAC;CAChD;AAED;;;GAGG;AACH,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,EAAE,EAAE,aAAa,CAAC;IAC3B,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC;IAC5B,QAAQ,CAAC,YAAY,EAAE,YAAY,CAAC;IACpC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,IAAI,EAAE,cAAc,CAAC,MAAM,CAAC,CAAC;IACtC,QAAQ,CAAC,MAAM,EAAE,cAAc,CAAC,QAAQ,CAAC,CAAC;IAC1C,QAAQ,CAAC,WAAW,EAAE,SAAS,UAAU,EAAE,CAAC;IAC5C,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,MAAM,EAAE,iBAAiB,CAAC;IACnC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IACnC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,UAAU,CAAC;IACvC,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,SAAS,CAAC,EAAE,SAAS,CAAC;IAC/B,QAAQ,CAAC,YAAY,CAAC,EAAE,SAAS,CAAC;IAClC,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAC;IAC9B,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAC;IAC9B,QAAQ,CAAC,UAAU,CAAC,EAAE,SAAS,CAAC;CACjC;AAED,8BAA8B;AAC9B,MAAM,MAAM,aAAa,GACrB;IAAE,QAAQ,CAAC,IAAI,EAAE,eAAe,CAAC;IAAC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;CAAE,GAChE;IACE,QAAQ,CAAC,IAAI,EAAE,oBAAoB,CAAC;IACpC,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;CAC3B,CAAC;AAEN;;;GAGG;AACH,MAAM,MAAM,iBAAiB,GACzB,WAAW,GACX,qBAAqB,GACrB,mBAAmB,GACnB,YAAY,GACZ,aAAa,GACb,iBAAiB,GACjB,SAAS,GACT,OAAO,CAAC;AAEZ,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;IACzB,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED;;;;GAIG;AACH,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,EAAE,EAAE,aAAa,CAAC;IAC3B,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC;IAC5B,QAAQ,CAAC,YAAY,EAAE,YAAY,CAAC;IACpC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,cAAc,EAAE,KAAK,CAAC;IAC/B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,MAAM,EAAE,iBAAiB,CAAC;IACnC,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,UAAU,EAAE,SAAS,iBAAiB,EAAE,CAAC;IAClD,QAAQ,CAAC,aAAa,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IAC3D,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,QAAQ,CAAC,EAAE;QAAE,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;IACpE,QAAQ,CAAC,aAAa,CAAC,EAAE;QACvB,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC;QACtB,QAAQ,CAAC,YAAY,CAAC,EAAE,YAAY,CAAC;KACtC,CAAC;IACF,QAAQ,CAAC,UAAU,EAAE,SAAS,CAAC;CAChC"}

package/dist/supervisor-binding.js

@@ -0,0 +1,4 @@
+// SPDX-License-Identifier: Apache-2.0
+// Copyright (C) 2026 Kindgi Inc.
+export {};
+//# sourceMappingURL=supervisor-binding.js.map

package/dist/supervisor-binding.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"supervisor-binding.js","sourceRoot":"","sources":["../src/supervisor-binding.ts"],"names":[],"mappings":"AAAA,sCAAsC;AACtC,iCAAiC"}

package/dist/tenant-host-access.d.ts

@@ -0,0 +1,41 @@
+/**
+ * How far tenant configuration may reach into the server's own host:
+ * `KINDGI_TENANT_HOST_ACCESS`. A token holder registers things (MCP
+ * endpoints, providers, webhooks) the server then acts on; some of them
+ * can act on the host itself, which only a single-user machine should
+ * allow.
+ *
+ *   - `local` (the default under `KINDGI_DEV`): a developer's machine.
+ *     Tenant configuration may run commands on the host.
+ *   - `deployed` (the default otherwise): a stdio MCP endpoint, which
+ *     runs its command in the server's container as the server's user,
+ *     is refused at registration and at connect; and the server's
+ *     outbound calls to hosts a tenant chose (an MCP endpoint, a model
+ *     provider's base URL, an HTTP tool, an image registry) refuse the
+ *     cloud metadata endpoints and the server's own host.
+ *
+ * Checks ask `deniesHostReach(level, reach)`, never compare levels, so a
+ * stricter level (or a new kind of reach) is one more row or entry here.
+ */
+/** The levels, least strict first. */
+export declare const TENANT_HOST_ACCESS_LEVELS: readonly ["local", "deployed"];
+export type TenantHostAccess = (typeof TENANT_HOST_ACCESS_LEVELS)[number];
+/** What tenant configuration can make the server do on its own host. */
+export type HostReach = 
+/** Run a command: a `stdio` MCP endpoint. */
+'exec'
+/**
+ * Connect to a link-local address (169.254.0.0/16, fe80::/10,
+ * fd00:ec2::254), where the cloud metadata endpoints hand out the
+ * server's own credentials.
+ */
+ | 'metadata-network'
+/** Connect to the server's own host: 127.0.0.0/8, ::1, 0.0.0.0/8, `::`. */
+ | 'loopback';
+/** Whether `level` refuses tenant configuration that needs `reach`. */
+export declare function deniesHostReach(level: TenantHostAccess, reach: HostReach): boolean;
+/** `value` as a level, or `undefined` when it isn't one. */
+export declare function parseTenantHostAccess(value: string): TenantHostAccess | undefined;
+/** Why a stdio MCP endpoint is refused, the same at registration and at connect. */
+export declare function stdioRefusal(endpointId: string): string;
+//# sourceMappingURL=tenant-host-access.d.ts.map

package/dist/tenant-host-access.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tenant-host-access.d.ts","sourceRoot":"","sources":["../src/tenant-host-access.ts"],"names":[],"mappings":"AAGA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,sCAAsC;AACtC,eAAO,MAAM,yBAAyB,gCAAiC,CAAC;AAExE,MAAM,MAAM,gBAAgB,GAAG,CAAC,OAAO,yBAAyB,CAAC,CAAC,MAAM,CAAC,CAAC;AAE1E,wEAAwE;AACxE,MAAM,MAAM,SAAS;AACnB,6CAA6C;AAC3C,MAAM;AACR;;;;GAIG;GACD,kBAAkB;AACpB,2EAA2E;GACzE,UAAU,CAAC;AAOf,uEAAuE;AACvE,wBAAgB,eAAe,CAAC,KAAK,EAAE,gBAAgB,EAAE,KAAK,EAAE,SAAS,GAAG,OAAO,CAElF;AAED,4DAA4D;AAC5D,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,MAAM,GAAG,gBAAgB,GAAG,SAAS,CAIjF;AAED,oFAAoF;AACpF,wBAAgB,YAAY,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,CAEvD"}