@kindgi/cli 0.0.0-bootstrap.0 → 0.1.0

package/dist/dev/pack-service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pack-service.js","sourceRoot":"","sources":["../../src/dev/pack-service.ts"],"names":[],"mappings":"AAAA,sCAAsC;AACtC,iCAAiC;AAEjC;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAEH,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC9D,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAQpC,OAAO,EAAE,YAAY,EAAE,kBAAkB,EAAE,sBAAsB,EAAE,MAAM,YAAY,CAAC;AA8BtF,MAAM,UAAU,mBAAmB,CAAC,IAAuB;IACzD,IAAI,IAAI,GAAqB,OAAO,CAAC,OAAO,EAAE,CAAC;IAC/C,IAAI,OAA4B,CAAC;IACjC,IAAI,QAA+B,CAAC;IAEpC,KAAK,UAAU,WAAW,CAAC,KAA4B;QACrD,MAAM,KAAK,GAAG,KAAK,IAAI,QAAQ,IAAI,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC;QAChE,IAAI,KAAK,CAAC,IAAI,KAAK,KAAK,EAAE,CAAC;YACzB,OAAO;gBACL,IAAI,EAAE,KAAK;gBACX,IAAI,EAAE,eAAe;gBACrB,OAAO,EAAE,yCAAyC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE;aAClF,CAAC;QACJ,CAAC;QACD,QAAQ,GAAG,KAAK,CAAC;QACjB,MAAM,MAAM,GAAG,kBAAkB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAChD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE;YAC9D,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,GAAG,EAAE,IAAI,CAAC,GAAG;YACb,IAAI,EAAE,IAAI,CAAC,IAAI;SAChB,CAAC,CAAC;QACH,IAAI,OAAO,CAAC,IAAI,KAAK,IAAI,EAAE,CAAC;YAC1B,IAAI,OAAO,CAAC,IAAI,KAAK,iBAAiB;gBAAE,MAAM,YAAY,EAAE,CAAC;YAC7D,OAAO,OAAO,CAAC;QACjB,CAAC;QAED,MAAM,SAAS,GAAG,sBAAsB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACvD,MAAM,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACrD,MAAM,SAAS,CACb,SAAS,EACT,IAAI,CAAC,SAAS,CAAC,gBAAgB,CAAC,OAAO,CAAC,KAAK,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC,EAChE,MAAM,CACP,CAAC;QACF,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QACjD,IAAI,OAAO,CAAC,IAAI,KAAK,KAAK,EAAE,CAAC;YAC3B,OAAO;gBACL,IAAI,EAAE,KAAK;gBACX,IAAI,EAAE,0BAA0B;gBAChC,OAAO,EAAE,iCAAiC,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;aAC9E,CAAC;QACJ,CAAC;QACD,MAAM,IAAI,CAAC,GAAG,CAAC,YAAY,CAAC,MAAM,EAAE,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;QAChE,OAAO,OAAO,CAAC;IACjB,CAAC;IAED;;;;;;OAMG;IACH,KAAK,UAAU,YAAY;QACzB,MAAM,SAAS,GAAG,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC7C,IAAI,QAAiC,CAAC;QACtC,IAAI,CAAC;YACH,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC,CAA4B,CAAC;QACtF,CAAC;QAAC,MAAM,CAAC;YACP,OAAO;QACT,CAAC;QACD,MAAM,KAAK,GAAG,CAAC,OAAO,EAAE,YAAY,EAAE,QAAQ,EAAE,OAAO,CAAU,CAAC;QAClE,MAAM,MAAM,GAAG,CAAC,IAA4B,EAAW,EAAE;YACvD,MAAM,OAAO,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;YAC/B,OAAO,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC;QACtD,CAAC,CAAC;QACF,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC;YAAE,OAAO;QAChC,MAAM,MAAM,GAAG,kBAAkB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAChD,MAAM,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAClD,MAAM,SAAS,CACb,MAAM,EACN,IAAI,CAAC,SAAS,CAAC;YACb,GAAG,QAAQ;YACX,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACrC,KAAK,EAAE,EAAE;YACT,UAAU,EAAE,EAAE;YACd,MAAM,EAAE,EAAE;YACV,KAAK,EAAE,EAAE;SACV,CAAC,EACF,MAAM,CACP,CAAC;QACF,MAAM,IAAI,CAAC,GAAG,CAAC,YAAY,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;IACjD,CAAC;IAED,KAAK,UAAU,OAAO,CAAC,KAA4B;QACjD,IAAI,CAAC;YACH,OAAO,MAAM,WAAW,CAAC,KAAK,CAAC,CAAC;QAClC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO;gBACL,IAAI,EAAE,KAAK;gBACX,IAAI,EAAE,gBAAgB;gBACtB,OAAO,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;aAChE,CAAC;QACJ,CAAC;IACH,CAAC;IAED,OAAO;QACL,OAAO,CAAC,KAAK;YACX,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;gBAC1B,4DAA4D;gBAC5D,IAAI,KAAK,KAAK,SAAS;oBAAE,OAAO,CAAC,KAAK,GAAG,KAAK,CAAC;gBAC/C,OAAO,OAAO,CAAC,MAAM,CAAC;YACxB,CAAC;YACD,MAAM,OAAO,GAAY,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,OAAO,CAAC,SAAkB,CAAC,EAAE,CAAC;YAChF,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBAC9B,IAAI,OAAO,KAAK,OAAO;oBAAE,OAAO,GAAG,SAAS,CAAC;gBAC7C,OAAO,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;YAChC,CAAC,CAAC,CAAC;YACH,OAAO,GAAG,OAAO,CAAC;YAClB,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC;YACtB,OAAO,OAAO,CAAC,MAAM,CAAC;QACxB,CAAC;QACD,KAAK,CAAC,IAAI;YACR,MAAM,IAAI,CAAC;QACb,CAAC;KACF,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,gBAAgB,CAC9B,KAAc,EACd,SAA2C;IAE3C,MAAM,GAAG,GAAG,KAGX,CAAC;IACF,MAAM,OAAO,GAAG,CAAC,IAAa,EAAW,EAAE,CACzC,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC9D,OAAO;QACL,GAAG,GAAG;QACN,GAAG,CAAC,GAAG,CAAC,KAAK,KAAK,SAAS,IAAI;YAC7B,KAAK,EAAE,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,UAAU,EAAE,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;SAC3E,CAAC;QACF,GAAG,CAAC,GAAG,CAAC,UAAU,KAAK,SAAS,IAAI;YAClC,UAAU,EAAE,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBACrC,GAAG,CAAC;gBACJ,eAAe,EAAE,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC;aAC5C,CAAC,CAAC;SACJ,CAAC;KACH,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,+FAA+F;AAC/F,SAAS,eAAe,CAAC,KAAc;IACrC,MAAM,CAAC,GAAG,KAA6E,CAAC;IACxF,IAAI,CAAC,CAAC,IAAI,KAAK,aAAa,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC;QACvD,MAAM,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAClC,MAAM,GAAG,GAAG,KAAK,CAAC,MAAM,KAAK,CAAC,CAAC;QAC/B,OAAO,+BAA+B,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,IAAI,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,iEAAiE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC;IACvO,CAAC;IACD,OAAO,CAAC,CAAC,IAAI,KAAK,MAAM,IAAI,CAAC,CAAC,OAAO,KAAK,IAAI;QAC5C,CAAC,CAAC,cAAc,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE;QACpD,CAAC,CAAC,SAAS,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,KAAiC;IACjE,QAAQ,KAAK,CAAC,IAAI,EAAE,CAAC;QACnB,KAAK,QAAQ;YACX,OAAO,4BAA4B,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,IAAI,gBAAgB,CAAC;QAChF,KAAK,SAAS;YACZ,OAAO,kCAAkC,KAAK,CAAC,QAAQ,6CAA6C,CAAC;QACvG,KAAK,KAAK;YACR,OAAO,eAAe,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACtC;YACE,OAAO,SAAS,CAAC;IACrB,CAAC;AACH,CAAC"}

package/dist/dev/paths.d.ts

@@ -0,0 +1,22 @@
+/**
+ * Where `kindgi dev` writes the pack index and the dev api-server reads
+ * it — inside Kindgi's own `.kindgi/` (gitignored), never the pack root,
+ * which may be an existing application's root.
+ */
+export declare function devIndexPath(packDir: string): string;
+/**
+ * Where a re-index writes before the pack service has loaded it. It
+ * becomes `devIndexPath` only once a pack service is serving that code,
+ * so the api-server never lists tools whose code isn't running.
+ */
+export declare function devStagedIndexPath(packDir: string): string;
+/** Where `kindgi dev` bundles the pack's code. */
+export declare function devDistDir(packDir: string): string;
+/**
+ * The staged index as the pack service reads it: the same index, with
+ * each module path pointing at its bundle.
+ */
+export declare function devStagedPackIndexPath(packDir: string): string;
+/** The source → bundle map the indexer child reads. */
+export declare function devBundleMapPath(packDir: string): string;
+//# sourceMappingURL=paths.d.ts.map

package/dist/dev/paths.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"paths.d.ts","sourceRoot":"","sources":["../../src/dev/paths.ts"],"names":[],"mappings":"AAKA;;;;GAIG;AACH,wBAAgB,YAAY,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAEpD;AAED;;;;GAIG;AACH,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAE1D;AAED,kDAAkD;AAClD,wBAAgB,UAAU,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAElD;AAED;;;GAGG;AACH,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAE9D;AAED,uDAAuD;AACvD,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAExD"}

package/dist/dev/paths.js

@@ -0,0 +1,35 @@
+// SPDX-License-Identifier: Apache-2.0
+// Copyright (C) 2026 Kindgi Inc.
+import { join } from 'node:path';
+/**
+ * Where `kindgi dev` writes the pack index and the dev api-server reads
+ * it — inside Kindgi's own `.kindgi/` (gitignored), never the pack root,
+ * which may be an existing application's root.
+ */
+export function devIndexPath(packDir) {
+    return join(packDir, '.kindgi', 'dev', 'index.json');
+}
+/**
+ * Where a re-index writes before the pack service has loaded it. It
+ * becomes `devIndexPath` only once a pack service is serving that code,
+ * so the api-server never lists tools whose code isn't running.
+ */
+export function devStagedIndexPath(packDir) {
+    return join(packDir, '.kindgi', 'dev', 'index.next.json');
+}
+/** Where `kindgi dev` bundles the pack's code. */
+export function devDistDir(packDir) {
+    return join(packDir, '.kindgi', 'dev', 'dist');
+}
+/**
+ * The staged index as the pack service reads it: the same index, with
+ * each module path pointing at its bundle.
+ */
+export function devStagedPackIndexPath(packDir) {
+    return join(packDir, '.kindgi', 'dev', 'index.next.pack.json');
+}
+/** The source → bundle map the indexer child reads. */
+export function devBundleMapPath(packDir) {
+    return join(packDir, '.kindgi', 'dev', 'bundle-map.json');
+}
+//# sourceMappingURL=paths.js.map

package/dist/dev/paths.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"paths.js","sourceRoot":"","sources":["../../src/dev/paths.ts"],"names":[],"mappings":"AAAA,sCAAsC;AACtC,iCAAiC;AAEjC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC;;;;GAIG;AACH,MAAM,UAAU,YAAY,CAAC,OAAe;IAC1C,OAAO,IAAI,CAAC,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,YAAY,CAAC,CAAC;AACvD,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,kBAAkB,CAAC,OAAe;IAChD,OAAO,IAAI,CAAC,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,iBAAiB,CAAC,CAAC;AAC5D,CAAC;AAED,kDAAkD;AAClD,MAAM,UAAU,UAAU,CAAC,OAAe;IACxC,OAAO,IAAI,CAAC,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;AACjD,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,sBAAsB,CAAC,OAAe;IACpD,OAAO,IAAI,CAAC,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,sBAAsB,CAAC,CAAC;AACjE,CAAC;AAED,uDAAuD;AACvD,MAAM,UAAU,gBAAgB,CAAC,OAAe;IAC9C,OAAO,IAAI,CAAC,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,iBAAiB,CAAC,CAAC;AAC5D,CAAC"}

package/dist/dev/python-builder.d.ts

@@ -0,0 +1,16 @@
+import { watch } from 'node:fs';
+import type { PackBuilder } from './runners.js';
+export interface PythonPackBuilderOptions {
+    readonly packDir: string;
+    /** The pack's interpreter (an argv prefix). */
+    readonly python: readonly [string, ...string[]];
+    /** The pack's environment. */
+    readonly env: () => Promise<Readonly<Record<string, string>>>;
+    readonly debounceMs?: number;
+    /** Test seam: `node:fs.watch`. */
+    readonly watchFs?: typeof watch;
+}
+/** Whether a change to `relPath` (relative to the pack root) is a change to the pack's code. */
+export declare function isPythonSourceChange(relPath: string): boolean;
+export declare function createPythonPackBuilder(options: PythonPackBuilderOptions): PackBuilder;
+//# sourceMappingURL=python-builder.d.ts.map

package/dist/dev/python-builder.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"python-builder.d.ts","sourceRoot":"","sources":["../../src/dev/python-builder.ts"],"names":[],"mappings":"AAgBA,OAAO,EAAkB,KAAK,EAAE,MAAM,SAAS,CAAC;AAEhD,OAAO,KAAK,EAAa,WAAW,EAAE,MAAM,cAAc,CAAC;AAgC3D,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,+CAA+C;IAC/C,QAAQ,CAAC,MAAM,EAAE,SAAS,CAAC,MAAM,EAAE,GAAG,MAAM,EAAE,CAAC,CAAC;IAChD,8BAA8B;IAC9B,QAAQ,CAAC,GAAG,EAAE,MAAM,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;IAC9D,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,kCAAkC;IAClC,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,KAAK,CAAC;CACjC;AAED,gGAAgG;AAChG,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAM7D;AAED,wBAAgB,uBAAuB,CAAC,OAAO,EAAE,wBAAwB,GAAG,WAAW,CAmEtF"}

package/dist/dev/python-builder.js

@@ -0,0 +1,122 @@
+// SPDX-License-Identifier: Apache-2.0
+// Copyright (C) 2026 Kindgi Inc.
+/**
+ * The `PackBuilder` of a Python pack. Python runs its sources, so a build
+ * produces no bundles (an empty bundle map); what it does is the job the
+ * bundler's parse does for a Node pack: compile every `.py` file under the
+ * pack root with the pack's own interpreter and report syntax errors
+ * located `file:line:col`. A build with errors leaves the previous pack
+ * service and index in place, as a bundle error does.
+ *
+ * The watch covers any `.py` file under the pack root — shared modules
+ * outside the discovery folders included — and `pyproject.toml`.
+ */
+import { spawn } from 'node:child_process';
+import { watch } from 'node:fs';
+const SKIPPED_DIRS = ['__pycache__', 'node_modules', 'venv', 'site-packages'];
+const DEFAULT_DEBOUNCE_MS = 150;
+/**
+ * Compiles every source under the pack root (argv[1]); prints a JSON list of
+ * `{file, line, col, message}` for the ones that don't. Self-contained:
+ * nothing of the pack is imported.
+ */
+const COMPILE_SCRIPT = `
+import json, os, sys
+root = sys.argv[1]
+skip = set(${JSON.stringify(SKIPPED_DIRS)})
+errors = []
+for dirpath, dirnames, filenames in os.walk(root):
+    dirnames[:] = sorted(d for d in dirnames if not d.startswith(".") and d not in skip)
+    for name in sorted(filenames):
+        if not name.endswith(".py") or name.startswith("."):
+            continue
+        path = os.path.join(dirpath, name)
+        rel = os.path.relpath(path, root).replace(os.sep, "/")
+        try:
+            with open(path, "rb") as f:
+                compile(f.read(), rel, "exec", dont_inherit=True)
+        except SyntaxError as e:
+            errors.append({"file": rel, "line": e.lineno or 0, "col": e.offset or 0, "message": f"{type(e).__name__}: {e.msg}"})
+        except (ValueError, OSError) as e:
+            errors.append({"file": rel, "line": 0, "col": 0, "message": f"{type(e).__name__}: {e}"})
+print(json.dumps(errors))
+`;
+/** Whether a change to `relPath` (relative to the pack root) is a change to the pack's code. */
+export function isPythonSourceChange(relPath) {
+    const segments = relPath.split(/[\\/]/);
+    const dirs = segments.slice(0, -1);
+    if (dirs.some((s) => s.startsWith('.') || SKIPPED_DIRS.includes(s)))
+        return false;
+    const name = segments[segments.length - 1] ?? '';
+    return relPath === 'pyproject.toml' || (name.endsWith('.py') && !name.startsWith('.'));
+}
+export function createPythonPackBuilder(options) {
+    const watchFs = options.watchFs ?? watch;
+    let watcher;
+    let timer;
+    async function build() {
+        const [program, ...prefix] = options.python;
+        const env = await options.env();
+        const run = await new Promise((resolve) => {
+            const child = spawn(program, [...prefix, '-c', COMPILE_SCRIPT, options.packDir], {
+                env,
+                stdio: ['ignore', 'pipe', 'pipe'],
+            });
+            let stdout = '';
+            let stderr = '';
+            child.stdout.on('data', (chunk) => {
+                stdout += chunk.toString('utf8');
+            });
+            child.stderr.on('data', (chunk) => {
+                stderr += chunk.toString('utf8');
+            });
+            child.once('error', (cause) => resolve({ code: null, stdout, stderr: cause.message }));
+            child.once('close', (code) => resolve({ code, stdout, stderr }));
+        });
+        let errors;
+        try {
+            errors = JSON.parse(run.stdout.trim().split('\n').pop() ?? '');
+        }
+        catch {
+            return {
+                kind: 'err',
+                errors: [
+                    `the pack's Python could not check the sources (${run.code}): ${run.stderr.trim()}`,
+                ],
+            };
+        }
+        if (errors.length > 0) {
+            return {
+                kind: 'err',
+                errors: errors.map((e) => `${e.file}:${e.line}:${e.col}: ${e.message}`),
+            };
+        }
+        return { kind: 'ok', bundleMap: {} };
+    }
+    return {
+        build,
+        async watch(onBuild) {
+            if (watcher !== undefined)
+                return;
+            watcher = watchFs(options.packDir, { recursive: true }, (_event, filename) => {
+                if (filename === null || !isPythonSourceChange(filename.toString()))
+                    return;
+                if (timer !== undefined)
+                    clearTimeout(timer);
+                timer = setTimeout(() => {
+                    timer = undefined;
+                    void build().then(onBuild);
+                }, options.debounceMs ?? DEFAULT_DEBOUNCE_MS);
+            });
+        },
+        // New or removed files need no entry list: the next build sees what is there.
+        syncEntries: () => Promise.resolve(false),
+        async dispose() {
+            if (timer !== undefined)
+                clearTimeout(timer);
+            watcher?.close();
+            watcher = undefined;
+        },
+    };
+}
+//# sourceMappingURL=python-builder.js.map

package/dist/dev/python-builder.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"python-builder.js","sourceRoot":"","sources":["../../src/dev/python-builder.ts"],"names":[],"mappings":"AAAA,sCAAsC;AACtC,iCAAiC;AAEjC;;;;;;;;;;GAUG;AAEH,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAC3C,OAAO,EAAkB,KAAK,EAAE,MAAM,SAAS,CAAC;AAIhD,MAAM,YAAY,GAAG,CAAC,aAAa,EAAE,cAAc,EAAE,MAAM,EAAE,eAAe,CAAC,CAAC;AAC9E,MAAM,mBAAmB,GAAG,GAAG,CAAC;AAEhC;;;;GAIG;AACH,MAAM,cAAc,GAAG;;;aAGV,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC;;;;;;;;;;;;;;;;;CAiBxC,CAAC;AAaF,gGAAgG;AAChG,MAAM,UAAU,oBAAoB,CAAC,OAAe;IAClD,MAAM,QAAQ,GAAG,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACxC,MAAM,IAAI,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IACnC,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,YAAY,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IAClF,MAAM,IAAI,GAAG,QAAQ,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;IACjD,OAAO,OAAO,KAAK,gBAAgB,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC;AACzF,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,OAAiC;IACvE,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,KAAK,CAAC;IACzC,IAAI,OAA8B,CAAC;IACnC,IAAI,KAAgD,CAAC;IAErD,KAAK,UAAU,KAAK;QAClB,MAAM,CAAC,OAAO,EAAE,GAAG,MAAM,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC;QAC5C,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,GAAG,EAAE,CAAC;QAChC,MAAM,GAAG,GAAG,MAAM,IAAI,OAAO,CAC3B,CAAC,OAAO,EAAE,EAAE;YACV,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,EAAE,CAAC,GAAG,MAAM,EAAE,IAAI,EAAE,cAAc,EAAE,OAAO,CAAC,OAAO,CAAC,EAAE;gBAC/E,GAAG;gBACH,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC;aAClC,CAAC,CAAC;YACH,IAAI,MAAM,GAAG,EAAE,CAAC;YAChB,IAAI,MAAM,GAAG,EAAE,CAAC;YAChB,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;gBACxC,MAAM,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;YACnC,CAAC,CAAC,CAAC;YACH,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;gBACxC,MAAM,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;YACnC,CAAC,CAAC,CAAC;YACH,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;YACvF,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC;QACnE,CAAC,CACF,CAAC;QACF,IAAI,MAAsE,CAAC;QAC3E,IAAI,CAAC;YACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE,CAAkB,CAAC;QAClF,CAAC;QAAC,MAAM,CAAC;YACP,OAAO;gBACL,IAAI,EAAE,KAAK;gBACX,MAAM,EAAE;oBACN,kDAAkD,GAAG,CAAC,IAAI,MAAM,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE;iBACpF;aACF,CAAC;QACJ,CAAC;QACD,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACtB,OAAO;gBACL,IAAI,EAAE,KAAK;gBACX,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC;aACxE,CAAC;QACJ,CAAC;QACD,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC;IACvC,CAAC;IAED,OAAO;QACL,KAAK;QACL,KAAK,CAAC,KAAK,CAAC,OAAO;YACjB,IAAI,OAAO,KAAK,SAAS;gBAAE,OAAO;YAClC,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,EAAE,CAAC,MAAM,EAAE,QAAQ,EAAE,EAAE;gBAC3E,IAAI,QAAQ,KAAK,IAAI,IAAI,CAAC,oBAAoB,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC;oBAAE,OAAO;gBAC5E,IAAI,KAAK,KAAK,SAAS;oBAAE,YAAY,CAAC,KAAK,CAAC,CAAC;gBAC7C,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;oBACtB,KAAK,GAAG,SAAS,CAAC;oBAClB,KAAK,KAAK,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;gBAC7B,CAAC,EAAE,OAAO,CAAC,UAAU,IAAI,mBAAmB,CAAC,CAAC;YAChD,CAAC,CAAC,CAAC;QACL,CAAC;QACD,8EAA8E;QAC9E,WAAW,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC;QACzC,KAAK,CAAC,OAAO;YACX,IAAI,KAAK,KAAK,SAAS;gBAAE,YAAY,CAAC,KAAK,CAAC,CAAC;YAC7C,OAAO,EAAE,KAAK,EAAE,CAAC;YACjB,OAAO,GAAG,SAAS,CAAC;QACtB,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/dev/register.d.ts

@@ -0,0 +1,71 @@
+/**
+ * Registration bridge — reports the four pack primitives from the
+ * parsed `index.json` produced by `runIndexer`. This is a pure
+ * read-side reporter: the api-server's disk bindings serve
+ * tool / agent / guardrail / flow manifests directly from disk, so
+ * the CLI doesn't need to POST anything for these primitives.
+ *
+ * Kept as a boundary so `dev.ts` still gets a `RegistrationReport`
+ * shape for boot + watch-tick summaries. Prod deploy path (when
+ * `kindgi deploy` lands) will bring back the transformation +
+ * POST loop this file used to contain, likely in a dedicated
+ * server-side helper rather than the CLI.
+ */
+import type { KindgiClient } from '@kindgi/client';
+import type { AgentId, FlowId, GuardrailId, Semver, ToolId } from '@kindgi/types';
+export interface RegistrationOutcome {
+    readonly kind: 'tool' | 'guardrail' | 'agent' | 'flow';
+    readonly id: string;
+    readonly ok: boolean;
+    readonly message?: string;
+    /**
+     * Non-fatal advisory the CLI surfaces even when `ok === true`.
+     * Currently unused: it used to carry the "bump version to
+     * publish local edits" nudge on `already-registered` outcomes,
+     * but the authoring-tools skill (v0.3.0) explicitly
+     * teaches "don't bump on save" — the advice contradicted itself
+     * and fired every watch tick regardless of whether the primitive
+     * had actually changed. Kept on the interface for future
+     * drift-detection use (compare stored vs. local hash → warn only
+     * on real drift).
+     */
+    readonly warning?: string;
+}
+export interface RegistrationReport {
+    readonly registered: RegistrationOutcome[];
+    readonly failed: RegistrationOutcome[];
+}
+export interface RegisterInputs {
+    readonly index: unknown;
+    readonly apiUrl: string;
+    readonly token: string;
+    readonly client: KindgiClient;
+    readonly fetchImpl: typeof fetch;
+    /**
+     * Tenant's Default project id, resolved by `kindgi dev` from
+     * `RunningApiServer.defaultProjectId`. Included in every POST body
+     * because tools/agents/guardrails/flows routes require it.
+     * Without this, all registrations fail with
+     * `bad-input: projectId is required`.
+     */
+    readonly projectId: string;
+    /**
+     * Absolute path to the pack root. Used to resolve indexer-emitted
+     * relative `modulePath` / `checkModulePath` into absolute paths
+     * before they land in `codeArtifactRef.modulePath` — the sandbox
+     * worker imports them by absolute path, so relative-to-pack won't
+     * resolve after the api-server process (a different cwd) picks
+     * them up.
+     */
+    readonly packDir: string;
+}
+/**
+ * Register every primitive in the parsed index into the running
+ * api-server. Never throws; per-primitive failures land in
+ * `report.failed`. Idempotent-friendly: `409 tool-already-registered`
+ * outcomes are treated as success — dev mode is meant to be safe to
+ * re-run after a save.
+ */
+export declare function registerFromIndex(inputs: RegisterInputs): Promise<RegistrationReport>;
+export type { AgentId, FlowId, GuardrailId, Semver, ToolId };
+//# sourceMappingURL=register.d.ts.map

package/dist/dev/register.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"register.d.ts","sourceRoot":"","sources":["../../src/dev/register.ts"],"names":[],"mappings":"AAGA;;;;;;;;;;;;GAYG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AACnD,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,eAAe,CAAC;AAElF,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,WAAW,GAAG,OAAO,GAAG,MAAM,CAAC;IACvD,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,EAAE,OAAO,CAAC;IACrB,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B;;;;;;;;;;OAUG;IACH,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,UAAU,EAAE,mBAAmB,EAAE,CAAC;IAC3C,QAAQ,CAAC,MAAM,EAAE,mBAAmB,EAAE,CAAC;CACxC;AAED,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC;IACxB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,MAAM,EAAE,YAAY,CAAC;IAC9B,QAAQ,CAAC,SAAS,EAAE,OAAO,KAAK,CAAC;IACjC;;;;;;OAMG;IACH,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B;;;;;;;OAOG;IACH,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B;AASD;;;;;;GAMG;AACH,wBAAsB,iBAAiB,CAAC,MAAM,EAAE,cAAc,GAAG,OAAO,CAAC,kBAAkB,CAAC,CA6C3F;AAKD,YAAY,EAAE,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC"}

package/dist/dev/register.js

@@ -0,0 +1,54 @@
+// SPDX-License-Identifier: Apache-2.0
+// Copyright (C) 2026 Kindgi Inc.
+/**
+ * Register every primitive in the parsed index into the running
+ * api-server. Never throws; per-primitive failures land in
+ * `report.failed`. Idempotent-friendly: `409 tool-already-registered`
+ * outcomes are treated as success — dev mode is meant to be safe to
+ * re-run after a save.
+ */
+export async function registerFromIndex(inputs) {
+    const idx = (inputs.index ?? {});
+    const registered = [];
+    const failed = [];
+    // All four pack primitives are served from disk in dev — the api-
+    // server's disk bindings (tools, agents, guardrails, flows) read
+    // `index.json` directly. POSTing them
+    // here would round-trip to read-only endpoints. Reporting as
+    // `from-disk` `ok` outcomes so the boot / watch-tick summary line
+    // still shows accurate counts.
+    for (const rawTool of idx.tools ?? []) {
+        registered.push({
+            kind: 'tool',
+            id: String(rawTool.id ?? '(unknown-tool)'),
+            ok: true,
+            message: 'from-disk',
+        });
+    }
+    for (const rawInv of idx.guardrails ?? []) {
+        registered.push({
+            kind: 'guardrail',
+            id: String(rawInv.id ?? '(unknown-guardrail)'),
+            ok: true,
+            message: 'from-disk',
+        });
+    }
+    for (const rawAgent of idx.agents ?? []) {
+        registered.push({
+            kind: 'agent',
+            id: String(rawAgent.id ?? '(unknown-agent)'),
+            ok: true,
+            message: 'from-disk',
+        });
+    }
+    for (const rawGraph of idx.flows ?? []) {
+        registered.push({
+            kind: 'flow',
+            id: String(rawGraph.id ?? '(unknown-flow)'),
+            ok: true,
+            message: 'from-disk',
+        });
+    }
+    return { registered, failed };
+}
+//# sourceMappingURL=register.js.map

package/dist/dev/register.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"register.js","sourceRoot":"","sources":["../../src/dev/register.ts"],"names":[],"mappings":"AAAA,sCAAsC;AACtC,iCAAiC;AA2EjC;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,MAAsB;IAC5D,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,KAAK,IAAI,EAAE,CAAe,CAAC;IAC/C,MAAM,UAAU,GAA0B,EAAE,CAAC;IAC7C,MAAM,MAAM,GAA0B,EAAE,CAAC;IAEzC,kEAAkE;IAClE,iEAAiE;IACjE,sCAAsC;IACtC,6DAA6D;IAC7D,kEAAkE;IAClE,+BAA+B;IAC/B,KAAK,MAAM,OAAO,IAAI,GAAG,CAAC,KAAK,IAAI,EAAE,EAAE,CAAC;QACtC,UAAU,CAAC,IAAI,CAAC;YACd,IAAI,EAAE,MAAM;YACZ,EAAE,EAAE,MAAM,CAAC,OAAO,CAAC,EAAE,IAAI,gBAAgB,CAAC;YAC1C,EAAE,EAAE,IAAI;YACR,OAAO,EAAE,WAAW;SACrB,CAAC,CAAC;IACL,CAAC;IACD,KAAK,MAAM,MAAM,IAAI,GAAG,CAAC,UAAU,IAAI,EAAE,EAAE,CAAC;QAC1C,UAAU,CAAC,IAAI,CAAC;YACd,IAAI,EAAE,WAAW;YACjB,EAAE,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,qBAAqB,CAAC;YAC9C,EAAE,EAAE,IAAI;YACR,OAAO,EAAE,WAAW;SACrB,CAAC,CAAC;IACL,CAAC;IACD,KAAK,MAAM,QAAQ,IAAI,GAAG,CAAC,MAAM,IAAI,EAAE,EAAE,CAAC;QACxC,UAAU,CAAC,IAAI,CAAC;YACd,IAAI,EAAE,OAAO;YACb,EAAE,EAAE,MAAM,CAAC,QAAQ,CAAC,EAAE,IAAI,iBAAiB,CAAC;YAC5C,EAAE,EAAE,IAAI;YACR,OAAO,EAAE,WAAW;SACrB,CAAC,CAAC;IACL,CAAC;IACD,KAAK,MAAM,QAAQ,IAAI,GAAG,CAAC,KAAK,IAAI,EAAE,EAAE,CAAC;QACvC,UAAU,CAAC,IAAI,CAAC;YACd,IAAI,EAAE,MAAM;YACZ,EAAE,EAAE,MAAM,CAAC,QAAQ,CAAC,EAAE,IAAI,gBAAgB,CAAC;YAC3C,EAAE,EAAE,IAAI;YACR,OAAO,EAAE,WAAW;SACrB,CAAC,CAAC;IACL,CAAC;IAED,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC;AAChC,CAAC"}

package/dist/dev/runners.d.ts

@@ -0,0 +1,287 @@
+/**
+ * Injectable seams for `kindgi dev`. The command consumes only these
+ * interfaces so tests can hand in a mock runtime / indexer / watcher
+ * without touching Docker, Postgres, the filesystem, or `fs.watch`'s
+ * cross-platform caveats. Production callers wire the real ones from
+ * `packages/cli/src/dev/defaults.ts`: the Kindgi runtime as a container,
+ * `runIndexer` (`@kindgi/handler-runtime`), and an `fs.watch` bridge.
+ */
+import type { PackServiceSupervisor, PackServiceSupervisorEvent } from '@kindgi/handler-runtime/pack-service';
+import type { PackCode } from './pack-code.js';
+/** The running Kindgi runtime `kindgi dev` talks to. */
+export interface RunningApiServer {
+    readonly baseUrl: string;
+    readonly port: number;
+    readonly tenantId: string;
+    /** The user the dev token resolves to. */
+    readonly userId: string;
+    /**
+     * Default project id for the boot tenant. Required for POST-body
+     * primitive-registration routes. `kindgi dev`
+     * threads this into `registerFromIndex` so scaffolded packs land
+     * under the tenant's Default project.
+     */
+    readonly defaultProjectId: string;
+    readonly token: string;
+    readonly banner: string;
+    /**
+     * True when the api-server has the console SPA mounted at
+     * `${baseUrl}/console/`. Depends on the bundled console-assets
+     * directory being present next to the CLI dist — the shipped CLI
+     * ships them; a broken install may not. Absent = console URL
+     * should not be advertised.
+     */
+    readonly consoleMounted?: boolean;
+    shutdown(): Promise<void>;
+}
+export interface StartApiServerOptions {
+    /** The host port the API is reached on (`127.0.0.1` only). */
+    readonly port: number;
+    /** Postgres, as this machine reaches it. */
+    readonly databaseUrl: string;
+    readonly tenantId: string;
+    readonly token: string;
+    /** The user the dev token resolves to — the previous boot's, so reviewer registrations carry over. */
+    readonly userId: string;
+    /** The pack directory: the runtime reads its index and its `.env` files there. */
+    readonly packDir: string;
+    /** `dev.envFiles` from `kindgi.config.ts`; default `.env`, `.env.local`. */
+    readonly localEnvFiles?: readonly string[];
+    /**
+     * The CLI's environment: values for `${VAR}` references the env files
+     * don't define, and `HOME` (Google credentials).
+     */
+    readonly hostEnv: Readonly<Record<string, string | undefined>>;
+    /** The local pack service's front, which the runtime calls the pack's code through. */
+    readonly packService: {
+        readonly url: string;
+        readonly token: string;
+    };
+    /** `KINDGI_PUBLIC_TOKEN_SIGNING_KEY_PATH`: the developer's key file, if set. Otherwise the runtime makes one. */
+    readonly publicRunTokenKeyPath?: string;
+    /** `KINDGI_CORS_ORIGINS`: the browser app's origins, allowed on the run progress routes. */
+    readonly corsOrigins?: readonly string[];
+    /** The runtime image (`--runtime-image`). */
+    readonly runtimeImage: string;
+    /**
+     * `--runtime-url`: a runtime the developer runs themselves (from
+     * source). No container: `kindgi dev` writes `runtime.env` for it and
+     * waits until it serves with this session's dev token.
+     */
+    readonly runtimeUrl?: string;
+    /** Lines the runtime writes. */
+    readonly onLog?: (line: string) => void;
+    /** Progress while preparing (an image pull). */
+    readonly onProgress?: (line: string) => void;
+}
+/**
+ * One bundle of the pack's code: each primitive's source path (as the
+ * index records it) mapped to its bundle, both relative to the pack
+ * root — or the build errors, located `file:line:column`.
+ */
+export type PackBuild = {
+    readonly kind: 'ok';
+    readonly bundleMap: Readonly<Record<string, string>>;
+} | {
+    readonly kind: 'err';
+    readonly errors: readonly string[];
+};
+/**
+ * Makes the pack's code ready for the pack service: esbuild bundles for a
+ * Node pack, the sources themselves for a Python one.
+ */
+export interface PackBuilder {
+    /** Build once; picks up added or removed primitive files. */
+    build(): Promise<PackBuild>;
+    /** Rebuild whenever a file any bundle read changes, reporting every build. */
+    watch(onBuild: (build: PackBuild) => void): Promise<void>;
+    /** Pick up added or removed primitive files; resolves `true` when the entries changed. */
+    syncEntries(): Promise<boolean>;
+    dispose(): Promise<void>;
+}
+export interface IndexerRunOptions {
+    /** Import each primitive's bundle instead of its source (source path → bundle path). */
+    readonly bundleMap?: Readonly<Record<string, string>>;
+    /** Run the indexer in a child process with this environment. */
+    readonly env?: () => Promise<Readonly<Record<string, string>>>;
+    /** Which indexer: the TypeScript one (default) or the pack's Python. */
+    readonly code?: PackCode;
+}
+/** The local pack service `kindgi dev` runs the pack's code in. */
+export interface DevPackServiceOptions {
+    readonly packDir: string;
+    /** Which pack service runs the code: the Node one, or the pack's Python. */
+    readonly code: PackCode;
+    /** The pack service's whole environment, read at every start. */
+    readonly env: () => Promise<Readonly<Record<string, string>>>;
+    /** Lines the pack's code writes. */
+    readonly onLog: (line: string, stream: 'stdout' | 'stderr') => void;
+    readonly onEvent: (event: PackServiceSupervisorEvent) => void;
+    /**
+     * The front's port and token: the previous session's, so a runtime
+     * started with them (`--runtime-url`) keeps reaching it. Default: any
+     * free port, a new token.
+     */
+    readonly port?: number;
+    readonly token?: string;
+}
+/**
+ * The local pack service: the public supervisor, children behind a
+ * stable front. The runtime calls the front by URL and token.
+ */
+export type DevPackService = PackServiceSupervisor;
+/**
+ * Shape of `IndexerReport.counts` — kept structural so tests can hand
+ * back plain objects without importing `@kindgi/handler-runtime`.
+ */
+export interface IndexedCounts {
+    readonly tools: number;
+    readonly guardrails: number;
+    readonly agents: number;
+    readonly flows: number;
+}
+/**
+ * The subset of `IndexerReport` `kindgi dev` needs at the callsite.
+ * The full runtime report (published-at, artifact version, etc.) is
+ * present in the manifest but the CLI only surfaces counts + the read
+ * `index.json` bytes.
+ */
+export interface IndexOutcome {
+    readonly kind: 'ok';
+    readonly packId: string;
+    readonly packVersion: string;
+    readonly counts: IndexedCounts;
+    /**
+     * Per-file errors accumulated during indexing. One bad file no
+     * longer aborts the whole pass — registration proceeds on healthy
+     * primitives and the errors surface here for `kindgi dev` to
+     * print. Empty on a fully-clean pass.
+     */
+    readonly fileErrors: readonly {
+        readonly code: string;
+        readonly message: string;
+        readonly filePath?: string;
+    }[];
+    /**
+     * The parsed `index.json` payload — passed straight to the
+     * registration bridge. Kept as `unknown` because the CLI does not
+     * re-validate the shape (`runIndexer` is the authority).
+     */
+    readonly index: unknown;
+}
+export interface IndexFailure {
+    readonly kind: 'err';
+    readonly code: string;
+    readonly message: string;
+    readonly filePath?: string;
+}
+export type IndexResult = IndexOutcome | IndexFailure;
+/**
+ * Watcher handle. `close()` is idempotent — the command may call it
+ * from the graceful-shutdown path after the abort-signal has fired.
+ */
+export interface WatchHandle {
+    close(): Promise<void>;
+}
+/**
+ * Handle returned by `startServices` when auto-start succeeded.
+ * `databaseUrl` is the connection string the runtime should use;
+ * `services` names what runs, for the banner.
+ *
+ * The services aren't stopped when `kindgi dev` exits: every `kindgi dev`
+ * on the machine shares the one `kindgi-dev` compose project, so another
+ * session's runtime may be using them. The next boot picks them up;
+ * `kindgi dev --reset` removes them and their data.
+ */
+export interface StartedServicesHandle {
+    readonly databaseUrl: string;
+    readonly services: readonly string[];
+}
+/**
+ * Outcome of `startServices`. `kind: 'ok'` = docker-compose available
+ * AND all containers healthy. `kind: 'unavailable'` = docker-compose
+ * not detected (or docker not installed); caller falls back to the
+ * missing-KINDGI_DATABASE_URL error. `kind: 'error'` = docker-compose was
+ * available but the boot failed (image pull, port collision, health
+ * timeout) — caller surfaces the reason.
+ */
+export type StartServicesResult = {
+    readonly kind: 'ok';
+    readonly handle: StartedServicesHandle;
+} | {
+    readonly kind: 'unavailable';
+    readonly reason: string;
+} | {
+    readonly kind: 'error';
+    readonly message: string;
+};
+/**
+ * Injected fixture-friendly runners. Every field has a real
+ * implementation in `dev/defaults.ts`; tests replace individual fields
+ * to bypass Postgres, real file watchers, or the real indexer.
+ */
+export interface DevRunners {
+    /** Boot the api-server. Resolves once the HTTP listener is bound. */
+    readonly startApiServer: (opts: StartApiServerOptions) => Promise<RunningApiServer>;
+    /**
+     * Run the indexer against a pack root + return the parsed
+     * `index.json`, written to `outputPath` (default: the dev index).
+     * Failures are captured — this function never throws.
+     */
+    readonly runIndexer: (packDir: string, outputPath?: string, options?: IndexerRunOptions) => Promise<IndexResult>;
+    /** The builder for the pack's code (esbuild for Node, the sources for Python). */
+    readonly createPackBuilder: (opts: {
+        readonly packDir: string;
+        readonly patterns: readonly string[];
+        readonly code: PackCode;
+        /** The pack's environment (a Python build runs the pack's interpreter with it). */
+        readonly env: () => Promise<Readonly<Record<string, string>>>;
+    }) => PackBuilder;
+    /** The local pack service (not yet started). */
+    readonly createPackService: (opts: DevPackServiceOptions) => DevPackService;
+    /**
+     * Check a Python pack's interpreter can run pack code (`import kindgi`),
+     * with the pack's environment: a one-line description, or why not.
+     */
+    readonly checkPackPython: (python: readonly [string, ...string[]], env: Readonly<Record<string, string>>, packDir?: string) => Promise<{
+        readonly kind: 'ok';
+        readonly value: string;
+    } | {
+        readonly kind: 'err';
+        readonly message: string;
+    }>;
+    /** Make a staged index the one the api-server reads. */
+    readonly publishIndex: (stagedPath: string, indexPath: string) => Promise<void>;
+    /**
+     * Start watching the pack's discovery patterns (default: the
+     * indexer's `DEFAULT_DISCOVERY`). The callback fires (debounced) when
+     * a file a pattern matches changes, or one of `files` (absolute
+     * paths — the env files). Returns a handle with an idempotent
+     * `close()`.
+     */
+    readonly watchPack: (packDir: string, onChange: () => void, opts?: {
+        readonly debounceMs?: number;
+        readonly patterns?: readonly string[];
+        readonly files?: readonly string[];
+    }) => Promise<WatchHandle>;
+    /**
+     * Auto-start the bundled `docker-compose.dev.yml` (Postgres) with
+     * `docker compose`, in the `kindgi-dev` project. Called only when the user did NOT
+     * provide `--database-url` / `KINDGI_DATABASE_URL`. Returns an outcome
+     * enum: `ok` (fall through with the container's URL), `unavailable`
+     * (docker-compose not detected — caller falls back to the manual
+     * error), or `error` (docker was available but boot failed).
+     *
+     * Optional so tests can leave it unset (falls through to the
+     * current "manual KINDGI_DATABASE_URL required" error).
+     */
+    /**
+     * `recreate`: let compose recreate the shared Postgres when its
+     * definition changed (`--recreate-services`). Default: an existing
+     * container is reused as it is — another `kindgi dev` may be using it.
+     */
+    readonly startServices?: (options: {
+        readonly recreate: boolean;
+    }) => Promise<StartServicesResult>;
+}
+//# sourceMappingURL=runners.d.ts.map