@kindgi/sdk 0.0.0-bootstrap.0 → 0.1.0

package/LICENSE

@@ -0,0 +1,201 @@
+                                 Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for describing the origin of the Work and
+      reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "[]"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2026 Kindgi Inc.
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.

package/README.md

@@ -1,3 +1,169 @@
 # @kindgi/sdk
 
-A placeholder. Releases come from https://github.com/kindgi/kindgi-sdk.
+The **public developer surface** for Kindgi.
+
+One package with five sub-paths — `/define` for pack authoring, `/client`
+for callsite HTTP and following runs, `/types` for branded identifiers,
+`/webhooks` for receiving Kindgi's webhooks (server only), `/build` for a
+pack image's build extensions (`kindgi.config`'s `image`) — plus a flat
+barrel for callers who prefer a single import. An application lists
+`@kindgi/sdk` and `@kindgi/cli` (dev); it needs no other `@kindgi/*`
+package. Zero behavior of its own: this
+package is a re-export facade over the individual `@kindgi/*` packages,
+with every name preserved verbatim.
+
+Framework contributors can import from the individual packages directly
+(`@kindgi/tools`, `@kindgi/agents`, `@kindgi/guardrails`, `@kindgi/flow`,
+`@kindgi/client`, `@kindgi/types`, `@kindgi/schema`). Application code
+(packs, deploy tooling, external callers) should import from
+`@kindgi/sdk` — the recommended public surface.
+
+## Sub-paths
+
+### `@kindgi/sdk/define` — pack authoring
+
+```ts
+import { defineTool, defineCheck, defineAgent } from '@kindgi/sdk/define';
+import type { Tool, Agent, DefinedTool, DefineCheckSpec } from '@kindgi/sdk/define';
+```
+
+Re-exports:
+
+| Symbol | Source | Kind |
+|---|---|---|
+| `defineTool`, `defineToolAsync`, `invokeTool`, `registerToolSpecSynthesizer` | `@kindgi/tools` | value |
+| `Tool`, `ToolManifest`, `ToolContext`, `DefineToolSpec`, `DefinedTool`, `InferInput`, `InferOutput`, `ToolSpec`, `ToolSpecSynthesizer`, `ToolSecretRef`, `HttpToolSpec`, `HttpAuthSpec`, `HttpHeaderSpec`, `HttpMethod`, `HttpRequestBodySpec` | `@kindgi/tools` | type |
+| `defineCheck` | `@kindgi/guardrails` | value |
+| `DefineCheckSpec`, `DefinedCheck`, `InferCheckConfig` | `@kindgi/guardrails` | type |
+| `defineAgent` | `@kindgi/agents` | value |
+| `Agent`, `DefineAgentSpec` | `@kindgi/agents` | type |
+| `defineFlow` | `@kindgi/flow` | value |
+| `Flow`, `FlowSpec`, `LoopNode`, `FanoutNode`, `SubflowNode`, `EdgePolicy` | `@kindgi/flow` | type |
+| `isZodSchema`, `toJSONSchema` | `@kindgi/schema` | value |
+| `AnySchema`, `ZodLikeSchema` | `@kindgi/schema` | type |
+
+`defineFlow` mirrors `defineTool` / `defineCheck` / `defineAgent` — a
+thin wrapper over `loadFlow` that runs the same validation gauntlet and
+returns `Result<Flow, FlowError>`. Pack authors reach for
+`defineFlow` in TypeScript; `loadFlow` remains the wire-form entry
+point for JSON coming off disk / network.
+
+### `@kindgi/sdk/client` — client callsites
+
+```ts
+import { createClient } from '@kindgi/sdk/client';
+import type { AgentId } from '@kindgi/sdk/types';
+
+const client = createClient({
+  apiUrl: process.env.KINDGI_API_URL!,
+  auth: { kind: 'apiToken', token: process.env.KINDGI_API_TOKEN! },
+});
+
+const run = await client.runs.start({
+  agent: 'acme.drafting' as AgentId,
+  input: { contractText },
+});
+```
+
+Re-exports:
+
+- `createClient`, `KindgiClient`.
+- Every resource client type — `AgentsClient`, `RunsClient`, `ToolsClient`,
+  `ApprovalsClient`, `SupervisorClient`, `ProposalsClient`, `ObservationsClient`,
+  `FlowsClient`, `GuardrailsClient`, `ConversationsClient`, `MemoryClient`,
+  `ProvenanceClient`, `TenantClient`, `CostClient`, `CapabilitiesClient`,
+  `AdaptersClient`, `PoliciesClient`, `UsersClient`, `TeamsClient`, `OrgsClient`,
+  `PacksClient`, `TokensClient`, `McpClient`, `EventsClient`, `ArtifactsClient`,
+  `WebhooksClient`, plus each resource's per-method input types.
+- `Transport`, `TransportRequest`, `ClientOptions`.
+- Error surface — `KindgiApiError` (value), `fromWire`, `notImplementedInPreview`,
+  `notYetWired`, plus `KindgiError`, `AuthError`, `ConflictError`,
+  `GuardrailViolationError`, `GuardrailViolation`, `InvalidRequestError`,
+  `NetworkError`, `NotFoundError`, `RateLimitedError`, `ServerError`,
+  `NotImplementedInPreviewError`, `NotYetWiredError` types.
+- Streaming — `readSse`, `unwrapSseData` (values), `SseEvent`, `SseReadOptions` (types).
+- Following a run — `subscribeToRun` (a browser page follows a run with a
+  public run token, reconnecting by itself), `followRun`, and
+  `SubscribeToRunOptions`, `FollowRunOptions`, `RunProgressEvent`,
+  `RunProgress`. Browser-safe, like the rest of this sub-path.
+
+This sub-path deliberately does NOT re-export the branded ID types
+(`AgentId`, `RunId`, etc.) that `@kindgi/client` also happens to
+surface — those live in `@kindgi/sdk/types` so the flat barrel is
+collision-free.
+
+### `@kindgi/sdk/types` — branded identifiers + primitives
+
+```ts
+import type { RunId, AgentId, Result, Cursor } from '@kindgi/sdk/types';
+```
+
+Re-exports every branded `…Id` type from `@kindgi/types` (41 IDs incl.
+`TenantId`, `RunId`, `AgentId`, `ToolId`, `PackId`, `SigningKeyId`, …),
+the `Result<T, E>` envelope + `OkOf` / `ErrOf` narrowing helpers, `Brand`,
+pagination (`Filter`, `Page`, `Cursor`), refs (`BlobRef`, `DatasetRef`,
+`VersionedRef`), temporal (`Timestamp`, `DurationMs`, `IsoDuration`),
+version + hash (`SchemaMajor`, `Semver`, `ContentHash`, `SignatureValue`).
+
+`ConversationId` is one of them. `@kindgi/agents` also re-exports
+`ConversationId`; import it from `@kindgi/sdk/types` (or `@kindgi/types`
+directly).
+
+### `@kindgi/sdk/webhooks` — receiving Kindgi's webhooks (server only)
+
+```ts
+import { verifyWebhook } from '@kindgi/sdk/webhooks';
+
+const result = verifyWebhook({ secret, headers: request.headers, body: rawBody });
+if (result.kind !== 'ok') return new Response(null, { status: 401 });
+```
+
+Re-exports the Standard Webhooks helpers from `@kindgi/crypto`:
+`verifyWebhook` (and its `VerifyWebhookInput` / `VerifyWebhookResult` /
+`VerifyWebhookFailure` / `WebhookRequestHeaders` types),
+`generateWebhookSecret` and `isStrongWebhookSecret` for the secret an app
+registers by name, `signWebhook` / `webhookHeaders` to test a receiver, and
+the constants `WEBHOOK_HEADERS`, `WEBHOOK_SECRET_PREFIX`,
+`WEBHOOK_SECRET_MIN_BYTES`, `DEFAULT_WEBHOOK_TOLERANCE_SECONDS`. It uses
+`node:crypto`, so it is not in the flat barrel.
+
+### `@kindgi/sdk/build` — a pack image's build extensions
+
+```ts
+import { prisma, defineBuildExtension } from '@kindgi/sdk/build';
+import type { BuildExtension, ImageConfig } from '@kindgi/sdk/build';
+```
+
+For `image` in `kindgi.config.*`: `systemPackages`, `extensions` (`prisma()`, or your own with `defineBuildExtension()`), and `buildEnv`. These are data only, and `kindgi build` renders them into the image. They're re-exported from `@kindgi/handler-runtime/build-extensions`. The flat barrel doesn't include them: only a config imports them.
+
+### Flat barrel — `@kindgi/sdk`
+
+```ts
+import { defineTool, createClient } from '@kindgi/sdk';
+import type { RunId, DefinedTool } from '@kindgi/sdk';
+```
+
+Convenience alias. Every symbol from `/define`, `/client` and `/types` is
+re-exported here; names are disjoint across the three so there is no
+collision. `/webhooks` is server only and stays out of the barrel.
+
+## Design decisions
+
+- **A facade, not a replacement.** `@kindgi/client` (`sdks/typescript/`)
+  stays its own package; the facade re-exports from it.
+- **Every re-export preserves the source name.** No renaming at the
+  facade boundary. Symbols in this package's docs match the source
+  package's docs exactly.
+- **`@kindgi/sdk` is recommended, not enforced.** The individual
+  packages remain importable for framework contributors and for
+  consumers that need a specific primitive without pulling the full
+  facade dep tree.
+- **Sub-paths are primary; the barrel is a convenience.** Applications
+  that only need pack authoring can `import from '@kindgi/sdk/define'`
+  and never pay for the client resource-type surface at build time
+  (tree-shaken).
+
+## Cross-references
+
+- `packages/tools/README.md` — `defineTool` Zod-optional authoring.
+- `packages/guardrails/README.md` — `defineCheck` Zod-optional authoring.

package/dist/build.d.ts

@@ -0,0 +1,10 @@
+/**
+ * `@kindgi/sdk/build` — a TypeScript pack image's build extensions, for
+ * `image` in `kindgi.config.*` (`systemPackages`, `extensions`,
+ * `buildEnv`).
+ *
+ * Re-exports `@kindgi/handler-runtime/build-extensions` verbatim.
+ */
+export { defineBuildExtension, prisma } from '@kindgi/handler-runtime/build-extensions';
+export type { BuildExtension, BuildStep, ImageConfig, PrismaExtensionOptions, } from '@kindgi/handler-runtime/build-extensions';
+//# sourceMappingURL=build.d.ts.map

package/dist/build.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"build.d.ts","sourceRoot":"","sources":["../src/build.ts"],"names":[],"mappings":"AAGA;;;;;;GAMG;AAEH,OAAO,EAAE,oBAAoB,EAAE,MAAM,EAAE,MAAM,0CAA0C,CAAC;AACxF,YAAY,EACV,cAAc,EACd,SAAS,EACT,WAAW,EACX,sBAAsB,GACvB,MAAM,0CAA0C,CAAC"}

package/dist/build.js

@@ -0,0 +1,11 @@
+// SPDX-License-Identifier: Apache-2.0
+// Copyright (C) 2026 Kindgi Inc.
+/**
+ * `@kindgi/sdk/build` — a TypeScript pack image's build extensions, for
+ * `image` in `kindgi.config.*` (`systemPackages`, `extensions`,
+ * `buildEnv`).
+ *
+ * Re-exports `@kindgi/handler-runtime/build-extensions` verbatim.
+ */
+export { defineBuildExtension, prisma } from '@kindgi/handler-runtime/build-extensions';
+//# sourceMappingURL=build.js.map

package/dist/build.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"build.js","sourceRoot":"","sources":["../src/build.ts"],"names":[],"mappings":"AAAA,sCAAsC;AACtC,iCAAiC;AAEjC;;;;;;GAMG;AAEH,OAAO,EAAE,oBAAoB,EAAE,MAAM,EAAE,MAAM,0CAA0C,CAAC"}

package/dist/client.d.ts

@@ -0,0 +1,28 @@
+/**
+ * `@kindgi/sdk/client` — client callsite surface.
+ *
+ * Re-exports `createClient` plus every resource-client type, the error
+ * surface, transport primitives, and streaming helpers from the
+ * `@kindgi/client` package (`sdks/typescript/` in this repository).
+ * Names preserved verbatim.
+ *
+ * This sub-path intentionally does NOT re-export the branded ID types
+ * (`AgentId`, `RunId`, etc.) that `@kindgi/client` also happens to
+ * surface — those live in `@kindgi/sdk/types` to keep the flat barrel
+ * (`import { ... } from '@kindgi/sdk'`) collision-free.
+ *
+ * Callsite examples target
+ * `import { createClient } from '@kindgi/sdk/client'`.
+ *
+ * @module @kindgi/sdk/client
+ */
+export { createClient } from '@kindgi/client';
+export type { KindgiClient } from '@kindgi/client';
+export type { AdapterConfigureInput, AdapterFilter, AdapterTestInput, AdaptersClient, AddMembershipInput, AgentsClient, ApplyProposalInput, ApprovalFilter, ApprovalsClient, ArtifactFilter, ArtifactsClient, AuditClient, AuditExportInput, BatchDecideInput, BudgetsClient, CapabilitiesClient, CapabilityFilter, ClientOptions, CompleteTokenInput, ConversationFilter, ConversationsClient, CostClient, DecideInput, DraftProposalsInput, EventsClient, FactsClient, FlowFilter, FlowsClient, FlowValidateResult, GuardrailFilter, GuardrailsClient, LogsClient, McpClient, McpEndpointFilter, McpEndpointsClient, TeamMembershipsClient, MemoryClient, MessageFilter, ObservationFilter, ObservationsClient, OrgsClient, PackFilter, PacksClient, PageFilter, PatternsInput, PoliciesClient, PolicyListFilter, PolicyVersionsFilter, ProposalDryRunInput, ProposalListInput, ProposalsClient, ProvenanceClient, ProvenanceExportInput, ProviderFilter, ProvidersClient, ReflectReviewInput, RegistryClient, RegistryFilter, ResumeRunInput, ReviewerFilter, ReviewersClient, RollbackProposalInput, Run, RunsClient, SchedulesClient, SessionsClient, StartRunInput, SubmitForReviewInput, SubscriptionsClient, SupervisorClient, ListTeamsFilter, TeamsClient, TenantClient, TenantConfigClient, TokenFilter, TokensClient, ReinstateToolVersionResult, ToolFilter, ToolVersionFilter, ToolsClient, Transport, TransportRequest, UsageClient, UsageSummaryInput, UserFilter, UsersClient, WebhooksClient, WithdrawProposalInput, } from '@kindgi/client';
+export { KindgiApiError, fromWire, notImplementedInPreview, notYetWired } from '@kindgi/client';
+export type { AuthError, ConflictError, GuardrailViolation, GuardrailViolationError, InvalidRequestError, NetworkError, NotFoundError, NotImplementedInPreviewError, NotYetWiredError, RateLimitedError, ServerError, KindgiError, } from '@kindgi/client';
+export { readSse, unwrapSseData } from '@kindgi/client';
+export type { SseEvent, SseReadOptions } from '@kindgi/client';
+export { followRun, subscribeToRun } from '@kindgi/client';
+export type { FollowRunOptions, RunProgress, RunProgressEvent, SubscribeToRunOptions, } from '@kindgi/client';
+//# sourceMappingURL=client.d.ts.map

package/dist/client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":"AAGA;;;;;;;;;;;;;;;;;GAiBG;AAGH,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAC9C,YAAY,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAGnD,YAAY,EACV,qBAAqB,EACrB,aAAa,EACb,gBAAgB,EAChB,cAAc,EACd,kBAAkB,EAClB,YAAY,EACZ,kBAAkB,EAClB,cAAc,EACd,eAAe,EACf,cAAc,EACd,eAAe,EACf,WAAW,EACX,gBAAgB,EAChB,gBAAgB,EAChB,aAAa,EACb,kBAAkB,EAClB,gBAAgB,EAChB,aAAa,EACb,kBAAkB,EAClB,kBAAkB,EAClB,mBAAmB,EACnB,UAAU,EACV,WAAW,EACX,mBAAmB,EACnB,YAAY,EACZ,WAAW,EACX,UAAU,EACV,WAAW,EACX,kBAAkB,EAClB,eAAe,EACf,gBAAgB,EAChB,UAAU,EACV,SAAS,EACT,iBAAiB,EACjB,kBAAkB,EAClB,qBAAqB,EACrB,YAAY,EACZ,aAAa,EACb,iBAAiB,EACjB,kBAAkB,EAClB,UAAU,EACV,UAAU,EACV,WAAW,EACX,UAAU,EACV,aAAa,EACb,cAAc,EACd,gBAAgB,EAChB,oBAAoB,EACpB,mBAAmB,EACnB,iBAAiB,EACjB,eAAe,EACf,gBAAgB,EAChB,qBAAqB,EACrB,cAAc,EACd,eAAe,EACf,kBAAkB,EAClB,cAAc,EACd,cAAc,EACd,cAAc,EACd,cAAc,EACd,eAAe,EACf,qBAAqB,EACrB,GAAG,EACH,UAAU,EACV,eAAe,EACf,cAAc,EACd,aAAa,EACb,oBAAoB,EACpB,mBAAmB,EACnB,gBAAgB,EAChB,eAAe,EACf,WAAW,EACX,YAAY,EACZ,kBAAkB,EAClB,WAAW,EACX,YAAY,EACZ,0BAA0B,EAC1B,UAAU,EACV,iBAAiB,EACjB,WAAW,EACX,SAAS,EACT,gBAAgB,EAChB,WAAW,EACX,iBAAiB,EACjB,UAAU,EACV,WAAW,EACX,cAAc,EACd,qBAAqB,GACtB,MAAM,gBAAgB,CAAC;AAGxB,OAAO,EAAE,cAAc,EAAE,QAAQ,EAAE,uBAAuB,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAChG,YAAY,EACV,SAAS,EACT,aAAa,EACb,kBAAkB,EAClB,uBAAuB,EACvB,mBAAmB,EACnB,YAAY,EACZ,aAAa,EACb,4BAA4B,EAC5B,gBAAgB,EAChB,gBAAgB,EAChB,WAAW,EACX,WAAW,GACZ,MAAM,gBAAgB,CAAC;AAGxB,OAAO,EAAE,OAAO,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AACxD,YAAY,EAAE,QAAQ,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAG/D,OAAO,EAAE,SAAS,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAC3D,YAAY,EACV,gBAAgB,EAChB,WAAW,EACX,gBAAgB,EAChB,qBAAqB,GACtB,MAAM,gBAAgB,CAAC"}

package/dist/client.js

@@ -0,0 +1,29 @@
+// SPDX-License-Identifier: Apache-2.0
+// Copyright (C) 2026 Kindgi Inc.
+/**
+ * `@kindgi/sdk/client` — client callsite surface.
+ *
+ * Re-exports `createClient` plus every resource-client type, the error
+ * surface, transport primitives, and streaming helpers from the
+ * `@kindgi/client` package (`sdks/typescript/` in this repository).
+ * Names preserved verbatim.
+ *
+ * This sub-path intentionally does NOT re-export the branded ID types
+ * (`AgentId`, `RunId`, etc.) that `@kindgi/client` also happens to
+ * surface — those live in `@kindgi/sdk/types` to keep the flat barrel
+ * (`import { ... } from '@kindgi/sdk'`) collision-free.
+ *
+ * Callsite examples target
+ * `import { createClient } from '@kindgi/sdk/client'`.
+ *
+ * @module @kindgi/sdk/client
+ */
+// ---- Client factory + top-level shape ----
+export { createClient } from '@kindgi/client';
+// ---- Error surface ----
+export { KindgiApiError, fromWire, notImplementedInPreview, notYetWired } from '@kindgi/client';
+// ---- Streaming helpers (SSE parser + resume) ----
+export { readSse, unwrapSseData } from '@kindgi/client';
+// ---- Following a run (browser-safe: a page follows a run with a public token) ----
+export { followRun, subscribeToRun } from '@kindgi/client';
+//# sourceMappingURL=client.js.map

package/dist/client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.js","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":"AAAA,sCAAsC;AACtC,iCAAiC;AAEjC;;;;;;;;;;;;;;;;;GAiBG;AAEH,6CAA6C;AAC7C,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AA+F9C,0BAA0B;AAC1B,OAAO,EAAE,cAAc,EAAE,QAAQ,EAAE,uBAAuB,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAgBhG,oDAAoD;AACpD,OAAO,EAAE,OAAO,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAGxD,qFAAqF;AACrF,OAAO,EAAE,SAAS,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC"}

package/dist/define.d.ts

@@ -0,0 +1,25 @@
+/**
+ * `@kindgi/sdk/define` — pack authoring surface.
+ *
+ * Re-exports the authoring primitives from the individual packages
+ * (`@kindgi/tools`, `@kindgi/guardrails`, `@kindgi/agents`,
+ * `@kindgi/flow`, `@kindgi/schema`) verbatim — no renaming, no
+ * behavior. Consumers reading those packages' docs find matching
+ * symbols here.
+ *
+ * The SDK facade is the recommended public developer surface. The
+ * individual packages remain importable directly.
+ *
+ * @module @kindgi/sdk/define
+ */
+export { defineTool, defineToolAsync, invokeTool, registerToolSpecSynthesizer, } from '@kindgi/tools';
+export type { DefinedTool, DefineToolSpec, HttpAuthSpec, HttpHeaderSpec, HttpMethod, HttpRequestBodySpec, HttpToolSpec, InferInput, InferOutput, Tool, ToolContext, ToolManifest, ToolSecretRef, ToolSpec, ToolSpecSynthesizer, } from '@kindgi/tools';
+export { defineCheck } from '@kindgi/guardrails';
+export type { DefineCheckSpec, DefinedCheck, InferCheckConfig } from '@kindgi/guardrails';
+export { defineAgent } from '@kindgi/agents';
+export type { Agent, DefineAgentSpec } from '@kindgi/agents';
+export { defineFlow } from '@kindgi/flow';
+export type { EdgePolicy, FanoutNode, Flow, FlowSpec, LoopNode, SubflowNode, } from '@kindgi/flow';
+export { isZodSchema, toJSONSchema } from '@kindgi/schema';
+export type { AnySchema, ZodLikeSchema } from '@kindgi/schema';
+//# sourceMappingURL=define.d.ts.map

package/dist/define.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"define.d.ts","sourceRoot":"","sources":["../src/define.ts"],"names":[],"mappings":"AAGA;;;;;;;;;;;;;GAaG;AAGH,OAAO,EACL,UAAU,EACV,eAAe,EACf,UAAU,EACV,2BAA2B,GAC5B,MAAM,eAAe,CAAC;AACvB,YAAY,EACV,WAAW,EACX,cAAc,EACd,YAAY,EACZ,cAAc,EACd,UAAU,EACV,mBAAmB,EACnB,YAAY,EACZ,UAAU,EACV,WAAW,EACX,IAAI,EACJ,WAAW,EACX,YAAY,EACZ,aAAa,EACb,QAAQ,EACR,mBAAmB,GACpB,MAAM,eAAe,CAAC;AAGvB,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,YAAY,EAAE,eAAe,EAAE,YAAY,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAG1F,OAAO,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAC7C,YAAY,EAAE,KAAK,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AAU7D,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAC1C,YAAY,EACV,UAAU,EACV,UAAU,EACV,IAAI,EACJ,QAAQ,EACR,QAAQ,EACR,WAAW,GACZ,MAAM,cAAc,CAAC;AAMtB,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAC3D,YAAY,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC"}

package/dist/define.js

@@ -0,0 +1,37 @@
+// SPDX-License-Identifier: Apache-2.0
+// Copyright (C) 2026 Kindgi Inc.
+/**
+ * `@kindgi/sdk/define` — pack authoring surface.
+ *
+ * Re-exports the authoring primitives from the individual packages
+ * (`@kindgi/tools`, `@kindgi/guardrails`, `@kindgi/agents`,
+ * `@kindgi/flow`, `@kindgi/schema`) verbatim — no renaming, no
+ * behavior. Consumers reading those packages' docs find matching
+ * symbols here.
+ *
+ * The SDK facade is the recommended public developer surface. The
+ * individual packages remain importable directly.
+ *
+ * @module @kindgi/sdk/define
+ */
+// ---- Tools ----
+export { defineTool, defineToolAsync, invokeTool, registerToolSpecSynthesizer, } from '@kindgi/tools';
+// ---- Guardrails (checks) ----
+export { defineCheck } from '@kindgi/guardrails';
+// ---- Agents ----
+export { defineAgent } from '@kindgi/agents';
+// ---- Flow ----
+//
+// `defineFlow` is the author-facing primitive that mirrors `defineTool`
+// / `defineCheck` / `defineAgent` — a thin wrapper over `loadFlow` that
+// runs the same validation gauntlet and returns `Result<Flow,
+// FlowError>`. Pack authors reach for `defineFlow` in TypeScript;
+// `loadFlow` remains the wire-form entry point for JSON coming off disk
+// / network.
+export { defineFlow } from '@kindgi/flow';
+// ---- Zod-optional helpers ----
+//
+// Direct access for callers that prefer to convert / inspect schemas
+// themselves rather than let `defineTool` / `defineCheck` do it implicitly.
+export { isZodSchema, toJSONSchema } from '@kindgi/schema';
+//# sourceMappingURL=define.js.map

package/dist/define.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"define.js","sourceRoot":"","sources":["../src/define.ts"],"names":[],"mappings":"AAAA,sCAAsC;AACtC,iCAAiC;AAEjC;;;;;;;;;;;;;GAaG;AAEH,kBAAkB;AAClB,OAAO,EACL,UAAU,EACV,eAAe,EACf,UAAU,EACV,2BAA2B,GAC5B,MAAM,eAAe,CAAC;AAmBvB,gCAAgC;AAChC,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAGjD,mBAAmB;AACnB,OAAO,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAG7C,iBAAiB;AACjB,EAAE;AACF,wEAAwE;AACxE,wEAAwE;AACxE,8DAA8D;AAC9D,kEAAkE;AAClE,wEAAwE;AACxE,aAAa;AACb,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAU1C,iCAAiC;AACjC,EAAE;AACF,qEAAqE;AACrE,4EAA4E;AAC5E,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,17 @@
+/**
+ * `@kindgi/sdk` — public developer facade.
+ *
+ * Flat barrel that re-exports the three sub-paths for callers who prefer
+ * a single import: `import { defineTool, createClient, type RunId } from
+ * '@kindgi/sdk'`.
+ *
+ * Sub-paths are the primary developer-facing shape (`@kindgi/sdk/define`,
+ * `@kindgi/sdk/client`, `@kindgi/sdk/types`); this barrel is a
+ * convenience alias.
+ *
+ * @module @kindgi/sdk
+ */
+export * from './define.js';
+export * from './client.js';
+export * from './types.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAGA;;;;;;;;;;;;GAYG;AAEH,cAAc,aAAa,CAAC;AAC5B,cAAc,aAAa,CAAC;AAC5B,cAAc,YAAY,CAAC"}

package/dist/index.js

@@ -0,0 +1,19 @@
+// SPDX-License-Identifier: Apache-2.0
+// Copyright (C) 2026 Kindgi Inc.
+/**
+ * `@kindgi/sdk` — public developer facade.
+ *
+ * Flat barrel that re-exports the three sub-paths for callers who prefer
+ * a single import: `import { defineTool, createClient, type RunId } from
+ * '@kindgi/sdk'`.
+ *
+ * Sub-paths are the primary developer-facing shape (`@kindgi/sdk/define`,
+ * `@kindgi/sdk/client`, `@kindgi/sdk/types`); this barrel is a
+ * convenience alias.
+ *
+ * @module @kindgi/sdk
+ */
+export * from './define.js';
+export * from './client.js';
+export * from './types.js';
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,sCAAsC;AACtC,iCAAiC;AAEjC;;;;;;;;;;;;GAYG;AAEH,cAAc,aAAa,CAAC;AAC5B,cAAc,aAAa,CAAC;AAC5B,cAAc,YAAY,CAAC"}

package/dist/types.d.ts

@@ -0,0 +1,16 @@
+/**
+ * `@kindgi/sdk/types` — branded IDs, framework-wide result envelope,
+ * pagination, refs, temporal + version primitives.
+ *
+ * Re-exports types from `@kindgi/types` under their own names. These
+ * are the workspace-wide identifiers callers pass across the SDK
+ * boundary.
+ *
+ * The /types sub-path is where branded identifiers live in the public
+ * facade.
+ *
+ * @module @kindgi/sdk/types
+ */
+export type { BlobRef, Brand, ContentHash, Cursor, DatasetRef, DurationMs, ErrOf, Filter, IsoDuration, OkOf, Page, Result, SchemaMajor, Semver, SignatureValue, Timestamp, VersionedRef, } from '@kindgi/types';
+export type { AgentId, ApiTokenId, ApprovalId, ArtifactId, AuditBundleId, ComplianceEvidenceId, ConversationId, DatasetId, EdgeId, EventId, FactId, FixProposalId, FlowId, InstallationId, GuardrailId, KeyId, LogEntryId, NodeId, ObservationId, OrgId, PackId, PolicyId, ProjectId, ProvenanceId, ProviderId, ReviewerId, RunId, ScheduleId, SessionId, SigningKeyId, SubscriptionId, SupervisorId, TeamId, TenantId, ThreadId, ToolId, TriggerId, UserId, WaitTokenId, WebhookDeliveryId, WebhookId, } from '@kindgi/types';
+//# sourceMappingURL=types.d.ts.map

package/dist/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAGA;;;;;;;;;;;;GAYG;AAEH,YAAY,EACV,OAAO,EACP,KAAK,EACL,WAAW,EACX,MAAM,EACN,UAAU,EACV,UAAU,EACV,KAAK,EACL,MAAM,EACN,WAAW,EACX,IAAI,EACJ,IAAI,EACJ,MAAM,EACN,WAAW,EACX,MAAM,EACN,cAAc,EACd,SAAS,EACT,YAAY,GACb,MAAM,eAAe,CAAC;AAQvB,YAAY,EACV,OAAO,EACP,UAAU,EACV,UAAU,EACV,UAAU,EACV,aAAa,EACb,oBAAoB,EACpB,cAAc,EACd,SAAS,EACT,MAAM,EACN,OAAO,EACP,MAAM,EACN,aAAa,EACb,MAAM,EACN,cAAc,EACd,WAAW,EACX,KAAK,EACL,UAAU,EACV,MAAM,EACN,aAAa,EACb,KAAK,EACL,MAAM,EACN,QAAQ,EACR,SAAS,EACT,YAAY,EACZ,UAAU,EACV,UAAU,EACV,KAAK,EACL,UAAU,EACV,SAAS,EACT,YAAY,EACZ,cAAc,EACd,YAAY,EACZ,MAAM,EACN,QAAQ,EACR,QAAQ,EACR,MAAM,EACN,SAAS,EACT,MAAM,EACN,WAAW,EACX,iBAAiB,EACjB,SAAS,GACV,MAAM,eAAe,CAAC"}

package/dist/types.js

@@ -0,0 +1,4 @@
+// SPDX-License-Identifier: Apache-2.0
+// Copyright (C) 2026 Kindgi Inc.
+export {};
+//# sourceMappingURL=types.js.map

package/dist/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA,sCAAsC;AACtC,iCAAiC"}

package/dist/webhooks.d.ts

@@ -0,0 +1,15 @@
+/**
+ * `@kindgi/sdk/webhooks` — receiving Kindgi's webhooks. Server only: it
+ * uses `node:crypto`, so it stays out of `/client` (browser-safe) and the
+ * flat barrel.
+ *
+ * Re-exports the Standard Webhooks helpers from `@kindgi/crypto`:
+ * `verifyWebhook` for a receiver, `generateWebhookSecret` for the secret an
+ * app registers by name, and `signWebhook` / `webhookHeaders` to test a
+ * receiver.
+ *
+ * @module @kindgi/sdk/webhooks
+ */
+export { DEFAULT_WEBHOOK_TOLERANCE_SECONDS, generateWebhookSecret, isStrongWebhookSecret, signWebhook, verifyWebhook, WEBHOOK_HEADERS, WEBHOOK_SECRET_MIN_BYTES, WEBHOOK_SECRET_PREFIX, webhookHeaders, } from '@kindgi/crypto';
+export type { SignWebhookInput, VerifyWebhookFailure, VerifyWebhookInput, VerifyWebhookResult, WebhookRequestHeaders, } from '@kindgi/crypto';
+//# sourceMappingURL=webhooks.d.ts.map

package/dist/webhooks.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"webhooks.d.ts","sourceRoot":"","sources":["../src/webhooks.ts"],"names":[],"mappings":"AAGA;;;;;;;;;;;GAWG;AAEH,OAAO,EACL,iCAAiC,EACjC,qBAAqB,EACrB,qBAAqB,EACrB,WAAW,EACX,aAAa,EACb,eAAe,EACf,wBAAwB,EACxB,qBAAqB,EACrB,cAAc,GACf,MAAM,gBAAgB,CAAC;AACxB,YAAY,EACV,gBAAgB,EAChB,oBAAoB,EACpB,kBAAkB,EAClB,mBAAmB,EACnB,qBAAqB,GACtB,MAAM,gBAAgB,CAAC"}