@kindgi/api 0.0.0-bootstrap.0 → 0.1.1

package/dist/tenant-host-access.js

@@ -0,0 +1,42 @@
+// SPDX-License-Identifier: Apache-2.0
+// Copyright (C) 2026 Kindgi Inc.
+/**
+ * How far tenant configuration may reach into the server's own host:
+ * `KINDGI_TENANT_HOST_ACCESS`. A token holder registers things (MCP
+ * endpoints, providers, webhooks) the server then acts on; some of them
+ * can act on the host itself, which only a single-user machine should
+ * allow.
+ *
+ *   - `local` (the default under `KINDGI_DEV`): a developer's machine.
+ *     Tenant configuration may run commands on the host.
+ *   - `deployed` (the default otherwise): a stdio MCP endpoint, which
+ *     runs its command in the server's container as the server's user,
+ *     is refused at registration and at connect; and the server's
+ *     outbound calls to hosts a tenant chose (an MCP endpoint, a model
+ *     provider's base URL, an HTTP tool, an image registry) refuse the
+ *     cloud metadata endpoints and the server's own host.
+ *
+ * Checks ask `deniesHostReach(level, reach)`, never compare levels, so a
+ * stricter level (or a new kind of reach) is one more row or entry here.
+ */
+/** The levels, least strict first. */
+export const TENANT_HOST_ACCESS_LEVELS = ['local', 'deployed'];
+const DENIED = {
+    local: new Set(),
+    deployed: new Set(['exec', 'metadata-network', 'loopback']),
+};
+/** Whether `level` refuses tenant configuration that needs `reach`. */
+export function deniesHostReach(level, reach) {
+    return DENIED[level].has(reach);
+}
+/** `value` as a level, or `undefined` when it isn't one. */
+export function parseTenantHostAccess(value) {
+    return TENANT_HOST_ACCESS_LEVELS.includes(value)
+        ? value
+        : undefined;
+}
+/** Why a stdio MCP endpoint is refused, the same at registration and at connect. */
+export function stdioRefusal(endpointId) {
+    return `MCP endpoint "${endpointId}" uses the stdio transport, which runs a command on the server's host; KINDGI_TENANT_HOST_ACCESS=deployed refuses that. Run the MCP server over HTTP (streamable-http) instead.`;
+}
+//# sourceMappingURL=tenant-host-access.js.map

package/dist/tenant-host-access.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tenant-host-access.js","sourceRoot":"","sources":["../src/tenant-host-access.ts"],"names":[],"mappings":"AAAA,sCAAsC;AACtC,iCAAiC;AAEjC;;;;;;;;;;;;;;;;;;GAkBG;AAEH,sCAAsC;AACtC,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,OAAO,EAAE,UAAU,CAAU,CAAC;AAiBxE,MAAM,MAAM,GAA+D;IACzE,KAAK,EAAE,IAAI,GAAG,EAAE;IAChB,QAAQ,EAAE,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,kBAAkB,EAAE,UAAU,CAAC,CAAC;CAC5D,CAAC;AAEF,uEAAuE;AACvE,MAAM,UAAU,eAAe,CAAC,KAAuB,EAAE,KAAgB;IACvE,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;AAClC,CAAC;AAED,4DAA4D;AAC5D,MAAM,UAAU,qBAAqB,CAAC,KAAa;IACjD,OAAQ,yBAA+C,CAAC,QAAQ,CAAC,KAAK,CAAC;QACrE,CAAC,CAAE,KAA0B;QAC7B,CAAC,CAAC,SAAS,CAAC;AAChB,CAAC;AAED,oFAAoF;AACpF,MAAM,UAAU,YAAY,CAAC,UAAkB;IAC7C,OAAO,iBAAiB,UAAU,iLAAiL,CAAC;AACtN,CAAC"}

package/dist/token-admin.d.ts

@@ -0,0 +1,99 @@
+import type { ApiTokenId, ProjectId, TenantId } from '@kindgi/types';
+/**
+ * Admin surface for API keys: mint, list, read, revoke. Distinct from
+ * `TokenResolver`, which is the read path used by the auth middleware.
+ * Splitting keeps the auth hot path free of write concerns and lets
+ * deployments plug in different implementations.
+ *
+ * An API key is a machine credential: a service account
+ * (`service_account:<tokenId>`) with a role in its tenant and an explicit
+ * list of framework capabilities. `POST /v1/tokens` mints;
+ * `GET /v1/tokens` and `GET /v1/tokens/:tokenId` read (never the secret);
+ * `POST /v1/tokens/:tokenId/revoke` revokes.
+ */
+export interface TokenAdmin {
+    mint(input: TokenMintInput): Promise<TokenMintOutput>;
+    list(input: TokenListInput): Promise<readonly ApiTokenRecord[]>;
+    get(input: TokenGetInput): Promise<ApiTokenRecord | undefined>;
+    revoke(input: TokenRevokeInput): Promise<TokenRevokeOutcome>;
+}
+/**
+ * A key's role in its tenant. `admin` administers the tenant (and mints,
+ * lists and revokes keys); `member` belongs to it and administers nothing.
+ */
+export type ApiTokenRole = 'admin' | 'member';
+export declare const API_TOKEN_ROLES: readonly ApiTokenRole[];
+export interface TokenMintInput {
+    readonly tenantId: TenantId;
+    readonly role: ApiTokenRole;
+    /**
+     * Framework capabilities the key carries (`env:write`, `secrets:write`,
+     * …). The route only lets a caller grant capabilities it holds itself.
+     */
+    readonly capabilities: readonly string[];
+    /** Optional human-readable label. Shown in admin UIs. */
+    readonly label?: string;
+    /** Optional expiration date. */
+    readonly expiresAt?: Date;
+    /** Optional project scope; when set, tokens are only valid for that project. */
+    readonly projectId?: ProjectId;
+    /**
+     * Who minted it, as a principal reference: `user:<id>` or
+     * `service_account:<tokenId>`.
+     */
+    readonly createdBy?: string;
+}
+export interface TokenMintOutput {
+    /** The new key, as `list` and `get` will show it. */
+    readonly record: ApiTokenRecord;
+    /**
+     * The plaintext bearer token. Returned to the caller ONCE, at mint
+     * time. Stores must persist a hash — not the plaintext — so lost
+     * tokens can only be replaced, not recovered.
+     */
+    readonly token: string;
+}
+/** What a key looks like after minting: everything but its secret. */
+export interface ApiTokenRecord {
+    readonly tokenId: ApiTokenId;
+    readonly role: ApiTokenRole;
+    readonly capabilities: readonly string[];
+    readonly label?: string;
+    readonly projectId?: ProjectId;
+    readonly createdBy?: string;
+    readonly createdAt: Date;
+    readonly expiresAt?: Date;
+    /** Set once revoked. A revoked key never resolves again. */
+    readonly revokedAt?: Date;
+    /** When the key last authenticated a request (updated at most once a minute). */
+    readonly lastUsedAt?: Date;
+}
+/**
+ * A page of keys, newest first (`createdAt` then `tokenId`, descending).
+ * The store returns up to `limit` records strictly after `after` in that
+ * order; the route asks for one more than it shows, to know whether more
+ * remain.
+ */
+export interface TokenListInput {
+    readonly tenantId: TenantId;
+    readonly limit: number;
+    /** The last record of the previous page. */
+    readonly after?: {
+        readonly createdAt: Date;
+        readonly tokenId: ApiTokenId;
+    };
+}
+export interface TokenGetInput {
+    readonly tenantId: TenantId;
+    readonly tokenId: ApiTokenId;
+}
+export interface TokenRevokeInput {
+    readonly tenantId: TenantId;
+    readonly tokenId: ApiTokenId;
+}
+export type TokenRevokeOutcome = {
+    readonly kind: 'ok';
+} | {
+    readonly kind: 'not-found';
+};
+//# sourceMappingURL=token-admin.d.ts.map

package/dist/token-admin.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"token-admin.d.ts","sourceRoot":"","sources":["../src/token-admin.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,UAAU,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAErE;;;;;;;;;;;GAWG;AACH,MAAM,WAAW,UAAU;IACzB,IAAI,CAAC,KAAK,EAAE,cAAc,GAAG,OAAO,CAAC,eAAe,CAAC,CAAC;IACtD,IAAI,CAAC,KAAK,EAAE,cAAc,GAAG,OAAO,CAAC,SAAS,cAAc,EAAE,CAAC,CAAC;IAChE,GAAG,CAAC,KAAK,EAAE,aAAa,GAAG,OAAO,CAAC,cAAc,GAAG,SAAS,CAAC,CAAC;IAC/D,MAAM,CAAC,KAAK,EAAE,gBAAgB,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAAC;CAC9D;AAED;;;GAGG;AACH,MAAM,MAAM,YAAY,GAAG,OAAO,GAAG,QAAQ,CAAC;AAE9C,eAAO,MAAM,eAAe,EAAE,SAAS,YAAY,EAAwB,CAAC;AAE5E,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC;IAC5B,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAC;IAC5B;;;OAGG;IACH,QAAQ,CAAC,YAAY,EAAE,SAAS,MAAM,EAAE,CAAC;IACzC,yDAAyD;IACzD,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,gCAAgC;IAChC,QAAQ,CAAC,SAAS,CAAC,EAAE,IAAI,CAAC;IAC1B,gFAAgF;IAChF,QAAQ,CAAC,SAAS,CAAC,EAAE,SAAS,CAAC;IAC/B;;;OAGG;IACH,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;CAC7B;AAED,MAAM,WAAW,eAAe;IAC9B,qDAAqD;IACrD,QAAQ,CAAC,MAAM,EAAE,cAAc,CAAC;IAChC;;;;OAIG;IACH,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;CACxB;AAED,sEAAsE;AACtE,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,OAAO,EAAE,UAAU,CAAC;IAC7B,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAC;IAC5B,QAAQ,CAAC,YAAY,EAAE,SAAS,MAAM,EAAE,CAAC;IACzC,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,SAAS,CAAC,EAAE,SAAS,CAAC;IAC/B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,SAAS,EAAE,IAAI,CAAC;IACzB,QAAQ,CAAC,SAAS,CAAC,EAAE,IAAI,CAAC;IAC1B,4DAA4D;IAC5D,QAAQ,CAAC,SAAS,CAAC,EAAE,IAAI,CAAC;IAC1B,iFAAiF;IACjF,QAAQ,CAAC,UAAU,CAAC,EAAE,IAAI,CAAC;CAC5B;AAED;;;;;GAKG;AACH,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC;IAC5B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,4CAA4C;IAC5C,QAAQ,CAAC,KAAK,CAAC,EAAE;QAAE,QAAQ,CAAC,SAAS,EAAE,IAAI,CAAC;QAAC,QAAQ,CAAC,OAAO,EAAE,UAAU,CAAA;KAAE,CAAC;CAC7E;AAED,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC;IAC5B,QAAQ,CAAC,OAAO,EAAE,UAAU,CAAC;CAC9B;AAED,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC;IAC5B,QAAQ,CAAC,OAAO,EAAE,UAAU,CAAC;CAC9B;AAED,MAAM,MAAM,kBAAkB,GAAG;IAAE,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAA;CAAE,GAAG;IAAE,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAA;CAAE,CAAC"}

package/dist/token-admin.js

@@ -0,0 +1,4 @@
+// SPDX-License-Identifier: Apache-2.0
+// Copyright (C) 2026 Kindgi Inc.
+export const API_TOKEN_ROLES = ['admin', 'member'];
+//# sourceMappingURL=token-admin.js.map

package/dist/token-admin.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"token-admin.js","sourceRoot":"","sources":["../src/token-admin.ts"],"names":[],"mappings":"AAAA,sCAAsC;AACtC,iCAAiC;AA6BjC,MAAM,CAAC,MAAM,eAAe,GAA4B,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC"}

package/dist/tool-binding.d.ts

@@ -0,0 +1,247 @@
+import type { TupleEnqueueHook } from '@kindgi/authz';
+import type { Scope } from '@kindgi/platform';
+import type { ToolManifest } from '@kindgi/tools';
+import type { Cursor, ProjectId, Semver, TenantId, ToolId } from '@kindgi/types';
+/**
+ * Caller-plugged surface for the tool catalog. Versioned CRUD mirroring
+ * `AgentRegistryBinding` — the API package does NOT own registry
+ * persistence. Deployments wire a `ToolRegistry` (from `@kindgi/tools`)
+ * — or a durable store — through this binding.
+ *
+ * The surface is metadata-only: a `Tool` runtime value carries a
+ * `handler` closure, which cannot cross HTTP. The wire body is a
+ * `ToolManifest` (Tool minus handler); the actual handler must already
+ * be registered with the runtime. Handler code is not uploaded over
+ * this surface.
+ *
+ * `publish` is versioned — each call adds a new `(toolId,
+ * version)` row. `get(toolId)` returns the latest active version;
+ * agents reference tools via `{ id, version: <semver-range> }` and
+ * `resolve(toolId, versionSpec)` walks active versions to pick the
+ * highest satisfying via `semver.maxSatisfying`. Retirement follows the
+ * versioned soft-tombstone pattern: `unregister(toolId, version)`
+ * soft-tombstones one version; `reinstateVersion` un-tombstones; when no
+ * active versions remain, the tool has no latest version and
+ * `GET /v1/tools/{id}` returns 410 gone (distinct from 404
+ * not-found via `headExists`).
+ */
+export interface ToolRegistryBinding {
+    /**
+     * Cursor-paginated list of tools (latest active version per id).
+     * Optional `nameFilter` is a prefix match on the tool id — tools use
+     * dotted namespaces (`acme.verify-citation`), so prefix matching is
+     * the natural filter shape. Derived-retired tools (no active
+     * versions) are hidden from list by default.
+     */
+    list(input: ToolListInput): Promise<ToolPage>;
+    /**
+     * The manifest of the LATEST active version for the given tool id,
+     * or `null` if the id is unknown OR every version is tombstoned.
+     * The route uses `headExists` to distinguish 410 gone from 404
+     * not-found.
+     */
+    get(input: ToolGetInput): Promise<ToolManifest | null>;
+    /**
+     * Exact `(toolId, version)` lookup, including tombstoned versions.
+     * Provenance paths use this to resolve historical run references.
+     */
+    getVersion(input: ToolGetVersionInput): Promise<ToolManifest | null>;
+    /**
+     * Cursor-paginated list of versions for a specific tool id. Sort
+     * order is binding-defined (for example, publish timestamp
+     * descending). Returns an empty page (no
+     * error) when the id is unknown — the route flips that to 404 via
+     * a prior `headExists`.
+     *
+     * By default returns only active versions. Set
+     * `includeTombstoned = true` to include soft-tombstoned rows too;
+     * tombstoned rows carry `unregisteredAt` on the wire (ISO string),
+     * active rows do not.
+     */
+    listVersions(input: ToolListVersionsInput): Promise<ToolVersionPage>;
+    /**
+     * Head-row existence probe. Lets `GET /v1/tools/{id}` distinguish
+     * `410 gone` (identity exists, no active version) from `404 not-
+     * found` (never registered). Same shape as
+     * `AgentRegistryBinding.headExists`.
+     */
+    headExists(input: ToolGetInput): Promise<boolean>;
+    /**
+     * Resolve a semver range against active versions and return the
+     * highest satisfying manifest via `semver.maxSatisfying`. When
+     * `versionSpec` is absent, returns the latest active version (same
+     * as `get`). `not-satisfiable` fires when the range parses but no
+     * active version matches. `invalid-range` fires when the range
+     * itself is not valid semver grammar. `not-found` fires when the
+     * tool id is unknown.
+     */
+    resolve(input: ToolResolveInput): Promise<ToolResolveOutcome>;
+    /**
+     * Publish a validated tool manifest. Every publish adds a version
+     * row; the tool's latest version is recomputed across active
+     * versions. Bindings MAY reject with `already-registered` when the
+     * same `(toolId, version)` is re-published; the route maps that to
+     * `409`. Semver hygiene: version numbers are single-use even after
+     * unregister — reinstate instead of republishing the same bytes.
+     */
+    publish(input: ToolPublishInput): Promise<ToolPublishOutcome>;
+    /**
+     * Soft-tombstone a specific `(toolId, version)`. When this leaves
+     * NO active versions, the tool has no latest version — it enters the
+     * derived "retired" state (GET returns 410 gone).
+     * Publish of a new version reactivates. Version is REQUIRED
+     * (there are no bare-tool-id semantics).
+     */
+    unregister(input: ToolUnregisterInput): Promise<ToolUnregisterOutcome>;
+    /**
+     * Un-tombstone a specific `(toolId, version)`. Recomputes the tool's
+     * latest version across active versions. Restores the manifest
+     * bytes verbatim (semver hygiene). Idempotent.
+     */
+    reinstateVersion(input: ToolReinstateVersionInput): Promise<ToolReinstateVersionOutcome>;
+}
+export interface ToolListInput {
+    readonly tenantId: TenantId;
+    readonly limit: number;
+    readonly cursor?: Cursor;
+    /** Prefix match on `ToolManifest.id`. Undefined = no filter. */
+    readonly nameFilter?: string;
+    /**
+     * Narrow the list to a specific scope. Absent = no scope narrow
+     * (return every row in the tenant the caller can see).
+     */
+    readonly scope?: Scope;
+    /**
+     * `false` = literal-at-this-scope only. `true` (default) =
+     * inheritance walk — no-op for content-scoped bindings
+     * (documented for uniformity).
+     */
+    readonly inherit?: boolean;
+}
+export interface ToolGetInput {
+    readonly tenantId: TenantId;
+    readonly toolId: ToolId;
+}
+export interface ToolGetVersionInput {
+    readonly tenantId: TenantId;
+    readonly toolId: ToolId;
+    readonly version: Semver;
+}
+export interface ToolListVersionsInput {
+    readonly tenantId: TenantId;
+    readonly toolId: ToolId;
+    readonly limit: number;
+    readonly cursor?: Cursor;
+    /**
+     * `false` (default) → return only active versions. `true` → return
+     * active + tombstoned rows; tombstoned entries carry `unregisteredAt`
+     * on the wire, active entries do not. Aligns with the soft-tombstone
+     * pattern used by agents / flows / eval suites / policies.
+     */
+    readonly includeTombstoned?: boolean;
+}
+export interface ToolResolveInput {
+    readonly tenantId: TenantId;
+    readonly toolId: ToolId;
+    /**
+     * Semver range (npm grammar): `'1.2.3'` exact pin, `'^1.2.3'`
+     * compatible-updates, `'~1.2.3'` patch-updates, `'>=1.0.0 <2.0.0'`
+     * explicit range. Absent = latest active (behaves like `get`).
+     */
+    readonly versionSpec?: string;
+}
+export interface ToolPublishInput {
+    readonly tenantId: TenantId;
+    /**
+     * Project the tool is registered into. REQUIRED. Callers
+     * that don't naturally know a projectId (deployment
+     * route, boot-time dev-echo seed, MCP bridge) resolve the tenant's
+     * Default via `projectBinding.getDefault(tenantId)` at THEIR layer.
+     */
+    readonly projectId: ProjectId;
+    readonly tool: ToolManifest;
+    /**
+     * REQUIRED. Called inside the binding's write tx after row insert,
+     * receiving the business `toolId`. Returns tuples for the same tx.
+     * See `AgentPublishInput.enqueueTuples` for the design rationale.
+     */
+    readonly enqueueTuples: TupleEnqueueHook;
+}
+export interface ToolUnregisterInput {
+    readonly tenantId: TenantId;
+    readonly toolId: ToolId;
+    /** REQUIRED — no bare-id unregister under the versioned model. */
+    readonly version: Semver;
+}
+export interface ToolReinstateVersionInput {
+    readonly tenantId: TenantId;
+    readonly toolId: ToolId;
+    readonly version: Semver;
+}
+export interface ToolPage {
+    readonly data: readonly ToolManifest[];
+    readonly nextCursor?: Cursor;
+}
+/**
+ * A single row in a `listVersions` result. Manifest fields plus an
+ * optional `unregisteredAt` timestamp — present iff the version has
+ * been soft-tombstoned via `unregister`. Callers that ignore the extra
+ * field see a plain `ToolManifest`.
+ */
+export type ToolVersionRow = ToolManifest & {
+    readonly unregisteredAt?: string;
+};
+export interface ToolVersionPage {
+    readonly data: readonly ToolVersionRow[];
+    readonly nextCursor?: Cursor;
+}
+export type ToolPublishOutcome = {
+    readonly kind: 'ok';
+    readonly toolId: ToolId;
+    readonly version: Semver;
+} | {
+    readonly kind: 'already-registered';
+    readonly toolId: ToolId;
+    readonly version: Semver;
+} | {
+    readonly kind: 'project-not-found';
+    readonly toolId: ToolId;
+    readonly version: Semver;
+    readonly projectId: ProjectId;
+};
+export type ToolUnregisterOutcome = {
+    readonly unregistered: boolean;
+};
+export type ToolReinstateVersionOutcome = {
+    readonly kind: 'ok';
+    readonly toolId: ToolId;
+    readonly version: Semver;
+    readonly wasTombstoned: boolean;
+} | {
+    readonly kind: 'not-found';
+    readonly toolId: ToolId;
+    readonly version: Semver;
+};
+export type ToolResolveOutcome = {
+    readonly kind: 'ok';
+    readonly toolId: ToolId;
+    readonly resolvedVersion: Semver;
+    readonly manifest: ToolManifest;
+} | {
+    /** No `(toolId)` head row — tool id was never published. */
+    readonly kind: 'not-found';
+    readonly toolId: ToolId;
+} | {
+    /** Head exists but no active versions match the requested range. */
+    readonly kind: 'not-satisfiable';
+    readonly toolId: ToolId;
+    readonly versionSpec: string;
+    /** Active semver strings — helps the caller diagnose. */
+    readonly candidateVersions: readonly string[];
+} | {
+    /** `versionSpec` failed `semver.validRange`. */
+    readonly kind: 'invalid-range';
+    readonly toolId: ToolId;
+    readonly versionSpec: string;
+};
+//# sourceMappingURL=tool-binding.d.ts.map

package/dist/tool-binding.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tool-binding.d.ts","sourceRoot":"","sources":["../src/tool-binding.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AACtD,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAClD,OAAO,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,eAAe,CAAC;AAEjF;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,MAAM,WAAW,mBAAmB;IAClC;;;;;;OAMG;IACH,IAAI,CAAC,KAAK,EAAE,aAAa,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC9C;;;;;OAKG;IACH,GAAG,CAAC,KAAK,EAAE,YAAY,GAAG,OAAO,CAAC,YAAY,GAAG,IAAI,CAAC,CAAC;IACvD;;;OAGG;IACH,UAAU,CAAC,KAAK,EAAE,mBAAmB,GAAG,OAAO,CAAC,YAAY,GAAG,IAAI,CAAC,CAAC;IACrE;;;;;;;;;;;OAWG;IACH,YAAY,CAAC,KAAK,EAAE,qBAAqB,GAAG,OAAO,CAAC,eAAe,CAAC,CAAC;IACrE;;;;;OAKG;IACH,UAAU,CAAC,KAAK,EAAE,YAAY,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAClD;;;;;;;;OAQG;IACH,OAAO,CAAC,KAAK,EAAE,gBAAgB,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAAC;IAC9D;;;;;;;OAOG;IACH,OAAO,CAAC,KAAK,EAAE,gBAAgB,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAAC;IAC9D;;;;;;OAMG;IACH,UAAU,CAAC,KAAK,EAAE,mBAAmB,GAAG,OAAO,CAAC,qBAAqB,CAAC,CAAC;IACvE;;;;OAIG;IACH,gBAAgB,CAAC,KAAK,EAAE,yBAAyB,GAAG,OAAO,CAAC,2BAA2B,CAAC,CAAC;CAC1F;AAED,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC;IAC5B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,gEAAgE;IAChE,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B;;;OAGG;IACH,QAAQ,CAAC,KAAK,CAAC,EAAE,KAAK,CAAC;IACvB;;;;OAIG;IACH,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC;CAC5B;AAED,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC;IAC5B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC;IAC5B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC;IAC5B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB;;;;;OAKG;IACH,QAAQ,CAAC,iBAAiB,CAAC,EAAE,OAAO,CAAC;CACtC;AAED,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC;IAC5B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB;;;;OAIG;IACH,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;CAC/B;AAED,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC;IAC5B;;;;;OAKG;IACH,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAC;IAC9B,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAC;IAC5B;;;;OAIG;IACH,QAAQ,CAAC,aAAa,EAAE,gBAAgB,CAAC;CAC1C;AAED,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC;IAC5B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,kEAAkE;IAClE,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC;IAC5B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,QAAQ;IACvB,QAAQ,CAAC,IAAI,EAAE,SAAS,YAAY,EAAE,CAAC;IACvC,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;CAC9B;AAED;;;;;GAKG;AACH,MAAM,MAAM,cAAc,GAAG,YAAY,GAAG;IAC1C,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;CAClC,CAAC;AAEF,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,IAAI,EAAE,SAAS,cAAc,EAAE,CAAC;IACzC,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;CAC9B;AAED,MAAM,MAAM,kBAAkB,GAC1B;IACE,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC;IACpB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B,GACD;IACE,QAAQ,CAAC,IAAI,EAAE,oBAAoB,CAAC;IACpC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B,GACD;IACE,QAAQ,CAAC,IAAI,EAAE,mBAAmB,CAAC;IACnC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAC;CAC/B,CAAC;AAEN,MAAM,MAAM,qBAAqB,GAAG;IAClC,QAAQ,CAAC,YAAY,EAAE,OAAO,CAAC;CAChC,CAAC;AAEF,MAAM,MAAM,2BAA2B,GACnC;IACE,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC;IACpB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,aAAa,EAAE,OAAO,CAAC;CACjC,GACD;IACE,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC;IAC3B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B,CAAC;AAEN,MAAM,MAAM,kBAAkB,GAC1B;IACE,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC;IACpB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,QAAQ,EAAE,YAAY,CAAC;CACjC,GACD;IACE,4DAA4D;IAC5D,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC;IAC3B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB,GACD;IACE,oEAAoE;IACpE,QAAQ,CAAC,IAAI,EAAE,iBAAiB,CAAC;IACjC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,yDAAyD;IACzD,QAAQ,CAAC,iBAAiB,EAAE,SAAS,MAAM,EAAE,CAAC;CAC/C,GACD;IACE,gDAAgD;IAChD,QAAQ,CAAC,IAAI,EAAE,eAAe,CAAC;IAC/B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;CAC9B,CAAC"}

package/dist/tool-binding.js

@@ -0,0 +1,4 @@
+// SPDX-License-Identifier: Apache-2.0
+// Copyright (C) 2026 Kindgi Inc.
+export {};
+//# sourceMappingURL=tool-binding.js.map

package/dist/tool-binding.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tool-binding.js","sourceRoot":"","sources":["../src/tool-binding.ts"],"names":[],"mappings":"AAAA,sCAAsC;AACtC,iCAAiC"}

package/dist/trigger-binding.d.ts

@@ -0,0 +1,13 @@
+/**
+ * Trigger registry — API-layer view of the runtime-owned CRUD contract.
+ *
+ * The interface lives in `@kindgi/runtime` (public wire vocabulary);
+ * the Kindgi runtime provides an implementation. The API layer
+ * re-exports the contract here for parity with the other caller-plugged
+ * bindings (`AdapterRegistryBinding`, `ProviderRegistryBinding`, etc.) —
+ * routes import from this file, deployments plug in a satisfying impl
+ * (their own, if they want bespoke persistence).
+ */
+export type { CronTriggerRecord, EventTriggerRecord, GetTriggerInput, ListTriggersInput, RegisterCronTriggerInput, RegisterEventTriggerInput, RegisterTriggerError, RegisterTriggerInput, RegisterWebhookTriggerInput, TriggerKind, TriggerLifecycleError, TriggerLifecycleInput, TriggerListPage, TriggerRecord, TriggerRegistryBinding, UpdateCronTriggerInput, UpdateEventTriggerInput, UpdateTriggerError, UpdateTriggerInput, UpdateWebhookTriggerInput, WebhookTriggerRecord, } from '@kindgi/runtime';
+export { TRIGGER_KINDS } from '@kindgi/runtime';
+//# sourceMappingURL=trigger-binding.d.ts.map

package/dist/trigger-binding.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"trigger-binding.d.ts","sourceRoot":"","sources":["../src/trigger-binding.ts"],"names":[],"mappings":"AAGA;;;;;;;;;GASG;AAEH,YAAY,EACV,iBAAiB,EACjB,kBAAkB,EAClB,eAAe,EACf,iBAAiB,EACjB,wBAAwB,EACxB,yBAAyB,EACzB,oBAAoB,EACpB,oBAAoB,EACpB,2BAA2B,EAC3B,WAAW,EACX,qBAAqB,EACrB,qBAAqB,EACrB,eAAe,EACf,aAAa,EACb,sBAAsB,EACtB,sBAAsB,EACtB,uBAAuB,EACvB,kBAAkB,EAClB,kBAAkB,EAClB,yBAAyB,EACzB,oBAAoB,GACrB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC"}

package/dist/trigger-binding.js

@@ -0,0 +1,4 @@
+// SPDX-License-Identifier: Apache-2.0
+// Copyright (C) 2026 Kindgi Inc.
+export { TRIGGER_KINDS } from '@kindgi/runtime';
+//# sourceMappingURL=trigger-binding.js.map

package/dist/trigger-binding.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"trigger-binding.js","sourceRoot":"","sources":["../src/trigger-binding.ts"],"names":[],"mappings":"AAAA,sCAAsC;AACtC,iCAAiC;AAoCjC,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC"}

package/dist/types.d.ts

@@ -0,0 +1,71 @@
+import type { Principal, ReviewerRole } from '@kindgi/authz';
+import type { ApiTokenId, RunId, SessionId, TenantId, UserId } from '@kindgi/types';
+/**
+ * Hono environment shape — variables the middleware chain populates
+ * and route handlers consume via `c.get(...)`.
+ */
+export interface AppEnv {
+    Variables: {
+        requestId: string;
+        /** Set by `bearerAuthMiddleware` on authenticated routes. */
+        tenantId: TenantId;
+        /**
+         * Set by `bearerAuthMiddleware` when the token's `TokenResolution`
+         * carried a `reviewerRole`. Approvals routes gate visibility +
+         * decisions on this: `standard < senior < admin`. Absent for
+         * tokens that were never provisioned with a reviewer role.
+         */
+        reviewerRole?: ReviewerRole;
+        /**
+         * Set by `bearerAuthMiddleware` when the token resolution carries
+         * a `userId`. Approvals routes hand it to `ReviewerBinding` to
+         * translate `UserId → ReviewerId` before calling `submitReview`.
+         */
+        userId?: UserId;
+        /**
+         * Set by `bearerAuthMiddleware` when the caller authenticated with a
+         * durable API key: the key's id. The principal is the key's service
+         * account.
+         */
+        tokenId?: ApiTokenId;
+        /**
+         * Set by `bearerAuthMiddleware` when the caller presented a
+         * framework-issued OAuth session token (`kgi_sk_*`).
+         * `/v1/identity/whoami` + `/v1/auth/logout` read this to introspect /
+         * revoke without a second lookup. Absent for static bearer tokens.
+         */
+        sessionId?: SessionId;
+        /** Identity-provider id behind a session token. Absent for bearer. */
+        providerId?: string;
+        /** Set by `sigv4Middleware` on `/s3/*`: the bucket the credential may access. */
+        bucket?: string;
+        /** Set by `sigv4Middleware` on `/s3/*`: the access key that signed the request. */
+        s3AccessKeyId?: string;
+        /** OAuth scopes granted to a session token. Absent for bearer. */
+        scopes?: readonly string[];
+        /**
+         * Framework capabilities granted to the bearer. Route handlers
+         * call `hasCapability(c, '<name>')` to gate
+         * writes / reveals; missing capability → 403 `permission-denied`.
+         * Absent = no capabilities granted.
+         */
+        capabilities?: readonly string[];
+        /**
+         * Composite authz Principal built by `principalMiddleware` from
+         * the token resolution. Present on every route mounted BELOW that
+         * middleware (i.e. all `/v1/*` routes). Consumed by the
+         * `authorize()` middleware factory and any route handler that
+         * needs to make conditional authz checks.
+         */
+        principal?: Principal;
+        /**
+         * Set when the request authenticated with a public run token
+         * (`kgi_pt_…`): such a request may only read the runs in
+         * `publicRunIds` and their descendants, on the progress routes.
+         */
+        tokenKind?: 'public-run';
+        /** The runs a public run token names. */
+        publicRunIds?: readonly RunId[];
+    };
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAC7D,OAAO,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,eAAe,CAAC;AAEpF;;;GAGG;AACH,MAAM,WAAW,MAAM;IACrB,SAAS,EAAE;QACT,SAAS,EAAE,MAAM,CAAC;QAClB,6DAA6D;QAC7D,QAAQ,EAAE,QAAQ,CAAC;QACnB;;;;;WAKG;QACH,YAAY,CAAC,EAAE,YAAY,CAAC;QAC5B;;;;WAIG;QACH,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB;;;;WAIG;QACH,OAAO,CAAC,EAAE,UAAU,CAAC;QACrB;;;;;WAKG;QACH,SAAS,CAAC,EAAE,SAAS,CAAC;QACtB,sEAAsE;QACtE,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,iFAAiF;QACjF,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,mFAAmF;QACnF,aAAa,CAAC,EAAE,MAAM,CAAC;QACvB,kEAAkE;QAClE,MAAM,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;QAC3B;;;;;WAKG;QACH,YAAY,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;QACjC;;;;;;WAMG;QACH,SAAS,CAAC,EAAE,SAAS,CAAC;QACtB;;;;WAIG;QACH,SAAS,CAAC,EAAE,YAAY,CAAC;QACzB,yCAAyC;QACzC,YAAY,CAAC,EAAE,SAAS,KAAK,EAAE,CAAC;KACjC,CAAC;CACH"}

package/dist/types.js

@@ -0,0 +1,4 @@
+// SPDX-License-Identifier: Apache-2.0
+// Copyright (C) 2026 Kindgi Inc.
+export {};
+//# sourceMappingURL=types.js.map

package/dist/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA,sCAAsC;AACtC,iCAAiC"}