@kindgi/cli 0.1.4 → 0.1.5

package/dist/commands/dev.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"dev.d.ts","sourceRoot":"","sources":["../../src/commands/dev.ts"],"names":[],"mappings":"AA6DA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAmBpD,OAAO,EAAE,KAAK,kBAAkB,EAAqB,MAAM,oBAAoB,CAAC;AAChF,OAAO,KAAK,EAEV,WAAW,EAKZ,MAAM,mBAAmB,CAAC;AAW3B,OAAO,KAAK,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAE7D,eAAO,MAAM,UAAU,EAAE,WA+ExB,CAAC;AAEF,6CAA6C;AAC7C,eAAO,MAAM,gBAAgB,OAAO,CAAC;AACrC,wDAAwD;AACxD,eAAO,MAAM,yBAAyB,MAAM,CAAC;AA8F7C,wBAAsB,MAAM,CAAC,GAAG,EAAE,cAAc,GAAG,OAAO,CAAC,aAAa,CAAC,CAwnBxE;AAmmBD,qDAAqD;AACrD,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,MAAM,EAAE,SAAS;QAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;IACtD,QAAQ,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAC;CAC7B;AA+ED,UAAU,eAAe;IACvB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,qEAAqE;IACrE,QAAQ,CAAC,SAAS,CAAC,EAAE,SAAS,cAAc,EAAE,GAAG,SAAS,CAAC;IAC3D,6DAA6D;IAC7D,QAAQ,CAAC,uBAAuB,EAAE,MAAM,CAAC;IACzC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,SAAS,EAAE,WAAW,CAAC;IAChC,QAAQ,CAAC,UAAU,EAAE,kBAAkB,CAAC;IACxC;;;OAGG;IACH,QAAQ,CAAC,mBAAmB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACjD,kFAAkF;IAClF,QAAQ,CAAC,cAAc,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC5C,mGAAmG;IACnG,QAAQ,CAAC,WAAW,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CAC1C;AA8CD,yEAAyE;AACzE,wBAAgB,eAAe,CAAC,MAAM,EAAE,eAAe,GAAG,SAAS,MAAM,EAAE,CA4B1E"}
+{"version":3,"file":"dev.d.ts","sourceRoot":"","sources":["../../src/commands/dev.ts"],"names":[],"mappings":"AAkEA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAEpD,OAAO,EAEL,KAAK,oBAAoB,EAK1B,MAAM,8BAA8B,CAAC;AA+BtC,OAAO,EAAE,KAAK,kBAAkB,EAAqB,MAAM,oBAAoB,CAAC;AAChF,OAAO,KAAK,EAEV,WAAW,EAKZ,MAAM,mBAAmB,CAAC;AAa3B,OAAO,KAAK,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAE7D,eAAO,MAAM,UAAU,EAAE,WAqGxB,CAAC;AAEF,6CAA6C;AAC7C,eAAO,MAAM,gBAAgB,OAAO,CAAC;AACrC,wDAAwD;AACxD,eAAO,MAAM,yBAAyB,MAAM,CAAC;AAuH7C,wBAAsB,MAAM,CAAC,GAAG,EAAE,cAAc,GAAG,OAAO,CAAC,aAAa,CAAC,CAosBxE;AAgpBD,qDAAqD;AACrD,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,MAAM,EAAE,SAAS;QAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;IACtD,QAAQ,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAC;CAC7B;AA+ED,UAAU,eAAe;IACvB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,oDAAoD;IACpD,QAAQ,CAAC,cAAc,CAAC,EAAE,OAAO,CAAC;IAClC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,qEAAqE;IACrE,QAAQ,CAAC,SAAS,CAAC,EAAE,SAAS,cAAc,EAAE,GAAG,SAAS,CAAC;IAC3D,6DAA6D;IAC7D,QAAQ,CAAC,uBAAuB,EAAE,MAAM,CAAC;IACzC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,SAAS,EAAE,WAAW,CAAC;IAChC,QAAQ,CAAC,UAAU,EAAE,kBAAkB,CAAC;IACxC;;;OAGG;IACH,QAAQ,CAAC,mBAAmB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACjD,kFAAkF;IAClF,QAAQ,CAAC,cAAc,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC5C,mGAAmG;IACnG,QAAQ,CAAC,WAAW,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACzC,uGAAuG;IACvG,QAAQ,CAAC,iBAAiB,CAAC,EAAE,oBAAoB,CAAC;CACnD;AA8CD;;;;GAIG;AACH,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,MAAM,GAAG,SAAS,MAAM,EAAE,CAKrE;AAED,yEAAyE;AACzE,wBAAgB,eAAe,CAAC,MAAM,EAAE,eAAe,GAAG,SAAS,MAAM,EAAE,CAoC1E"}

package/dist/commands/dev.js

@@ -37,11 +37,13 @@ import { basename, isAbsolute, join, resolve } from 'node:path';
 import { createInterface } from 'node:readline';
 import { discoveryRoots, findKindgiConfig, packLanguage, resolveDiscovery, } from '@kindgi/handler-runtime';
 import { LOCAL_ENV_NAME, displayEnvPath, packValues, readPackEnv, runtimeValues, } from '@kindgi/secrets-dotenv';
-import { CORS_ORIGINS_VAR, PUBLIC_TOKEN_KEY_PATH_VAR, parseCorsOrigins } from '@kindgi/env-schema';
+import { CORS_ORIGINS_VAR, EXPORT_SIGNING_KEY_PATH_VAR, PUBLIC_TOKEN_KEY_PATH_VAR, parseCorsOrigins, } from '@kindgi/env-schema';
 import { createDevOnlyImportsCheck } from '../dev/dev-only-imports.js';
-import { resolvePackCode } from '../dev/pack-code.js';
+import { DEV_GOOGLE_CREDENTIALS_VAR, VERTEX_PROVIDER_ID, isVertexRegistration, resolveDevGoogleCredentials, vertexCredentialsHint, } from '../dev/google-credentials.js';
+import { DEFAULT_DEV_LOG_VIEW, parseDevLogFlags, resolveDevLogView, runtimeLogLevels, showIndexerLine, showLine, showText, sourceLogEnv, } from '../dev/log-view.js';
+import { isJvmPackCode, resolvePackCode } from '../dev/pack-code.js';
 import { devPackEnv, devPackEnvFiles } from '../dev/pack-env.js';
-import { createPackRefresher, describePackEvent } from '../dev/pack-service.js';
+import { createPackRefresher, showPackEvent } from '../dev/pack-service.js';
 import { PORT_SEARCH_SPAN, firstFreePort } from '../dev/port.js';
 import { resolveDevProject } from '../dev/project.js';
 import { adoptLegacyBundledEntries, declaredProviders, describeReconcile, devProvidersKey, devProvidersRecordPath, readOwnedProviders, reconcileProviders, writeOwnedProviders, } from '../dev/providers.js';
@@ -50,17 +52,19 @@ import { RuntimeStartStopped } from '../dev/runtime-container.js';
 import { DEFAULT_RUNTIME_IMAGE } from '../dev/runtime-image.js';
 import { describeEnvDiagnostics, loadLocalEnvSettings } from '../env/project-env.js';
 import { PYPI_NO_BUNDLER } from '../esbuild-loader.js';
+import { openUrlInBrowser } from '../open-url.js';
 import { renderJson } from '../output.js';
 import { binDisplay, cliInstall, detectBinRunner } from '../package-manager.js';
 import { loadProviderPresets } from '../providers/preset-loader.js';
 import { CLI_VERSION } from '../version-info.js';
+import { consoleUrlOf, couldNotOpen } from './console.js';
 import { defaultSdkSkillsRoot } from './init.js';
 import { detectSkillDrift } from './skills.js';
 export const devCommand = {
     kind: 'leaf',
     name: 'dev',
     description: 'Run the Kindgi runtime as a container + hot-reload the pack under cwd.',
-    usage: 'kindgi dev [--port <n>] [--database-url <url>] [--tenant <id>] [--dev-token <token>] [--no-watch] [--path <dir>] [--reset [--yes]] [--recreate-services] [--runtime-image <ref> | --runtime-url <url>]',
+    usage: 'kindgi dev [--port <n>] [--database-url <url>] [--tenant <id>] [--dev-token <token>] [--no-watch] [--open] [--path <dir>] [--reset [--yes]] [--recreate-services] [--runtime-image <ref> | --runtime-url <url>] [--log-level <level>] [--log <subsystem>=<level>]... [--log-format pretty|json] [--quiet]',
     optionSpec: {
         port: {
             type: 'string',
@@ -100,9 +104,13 @@ export const devCommand = {
             type: 'boolean',
             description: 'Start, index and register once, then exit. For smoke tests and CI.',
         },
+        open: {
+            type: 'boolean',
+            description: 'Open the console in your browser once Kindgi is up.',
+        },
         path: {
             type: 'string',
-            description: 'The pack root, with a `kindgi.config.ts` (or `.mts`) or a `pyproject.toml` with `[tool.kindgi]`. Default: the current directory.',
+            description: 'The pack root, with a `kindgi.config.ts` (or `.mts`), a `pyproject.toml` with `[tool.kindgi]`, or a `kindgi.config.json` (Java). Default: the current directory.',
         },
         // --reset: a fresh start for the project. With the bundled Postgres it
         // drops the project's database (asking first) and makes a new token;
@@ -123,6 +131,21 @@ export const devCommand = {
             type: 'boolean',
             description: 'Let `docker compose` recreate the bundled Postgres if its definition changed (needs compose). By default an existing container is reused.',
         },
+        // The runtime's and the pack service's records: what's shown, and how.
+        // `--quiet` (a global flag) keeps errors only.
+        'log-level': {
+            type: 'string',
+            description: "The lowest level of the log records shown: error, warn, info, debug or trace. Default: `KINDGI_LOG_LEVEL` (the shell's, then the env files'), else info; with `--quiet`, error.",
+        },
+        log: {
+            type: 'string',
+            multiple: true,
+            description: "A subsystem's own level, `<subsystem>=<level>` (e.g. `--log=http=debug`, `--log=pack=debug`); repeat it, or give a comma list. A dotted child inherits its parent's (`pack` covers `pack.tool`).",
+        },
+        'log-format': {
+            type: 'string',
+            description: 'How log records are shown: `pretty` (the default: tagged `[runtime]` / `[pack]`, coloured on a terminal unless `NO_COLOR` is set) or `json` (each record as written, one per line on stdout, for `| jq`; everything else stays on stderr).',
+        },
     },
     run: async (ctx) => runDev(ctx),
 };
@@ -146,9 +169,31 @@ export const DEFAULT_WATCH_DEBOUNCE_MS = 200;
  * so nothing to intercept.
  */
 function emitProgress(msg) {
+    if (logView.quiet)
+        return;
+    emitProblem(msg);
+}
+/** A progress line that's an error: shown under `--quiet` too. */
+function emitProblem(msg) {
     process.stderr.write(`${stoppingLineOpen ? '\n' : ''}  ${msg}\n`);
     stoppingLineOpen = false;
 }
+/**
+ * How logs show this session (`dev/log-view.ts`): set from the flags as
+ * `runDev` starts, and again once the env files are read.
+ */
+let logView = DEFAULT_DEV_LOG_VIEW;
+/** A source's line as the view shows it: records on stdout with `--log-format=json`. */
+function emitOutput(output) {
+    if (output === undefined)
+        return;
+    for (const line of output.lines) {
+        if (output.stream === 'stdout')
+            process.stdout.write(`${line}\n`);
+        else
+            emitProblem(`  ${line}`);
+    }
+}
 /**
  * Shutdown is one line: "Stopping kindgi dev..." the moment the signal
  * arrives, finished with "stopped." once the runtime and the pack service
@@ -177,7 +222,7 @@ async function withHeartbeat(label, intervalMs, work) {
     const started = Date.now();
     const tick = setInterval(() => {
         const elapsed = Math.round((Date.now() - started) / 1000);
-        process.stderr.write(`  ⋯ ${label} (${elapsed}s elapsed)\n`);
+        emitProgress(`⋯ ${label} (${elapsed}s elapsed)`);
     }, intervalMs);
     try {
         return await work();
@@ -194,6 +239,14 @@ export async function runDev(ctx) {
     if (parsed.kind === 'error')
         return parsed;
     const args = parsed.args;
+    // How logs show: the flags and the shell's settings now, the env files'
+    // once they're read.
+    const stderrIsTTY = process.stderr.isTTY === true;
+    const earlyView = resolveDevLogView(args.log, { env: ctx.env, files: {}, isTTY: stderrIsTTY });
+    if (earlyView.kind === 'error') {
+        return { kind: 'error', stderr: `kindgi dev: ${earlyView.message}\n`, exitCode: 1 };
+    }
+    logView = earlyView.value;
     const runners = pickRunners(ctx);
     if (runners.kind === 'error')
         return runners;
@@ -205,7 +258,7 @@ export async function runDev(ctx) {
     if (configFile === undefined) {
         return {
             kind: 'error',
-            stderr: `kindgi dev could not find a kindgi.config.ts (or a pyproject.toml with a [tool.kindgi] table) at ${args.packDir}.\nRun \`kindgi init <pack-name>\` to scaffold a pack, or pass --path=<dir> to point at an existing one.\n`,
+            stderr: `kindgi dev could not find a kindgi.config.ts (or a pyproject.toml with a [tool.kindgi] table, or a kindgi.config.json) at ${args.packDir}.\nRun \`kindgi init <pack-name>\` to scaffold a pack, or pass --path=<dir> to point at an existing one.\n`,
             exitCode: 1,
         };
     }
@@ -215,6 +268,15 @@ export async function runDev(ctx) {
     const projectEnv = await loadDevProjectEnv(ctx, args.packDir);
     if (projectEnv.kind === 'error')
         return projectEnv;
+    const view = resolveDevLogView(args.log, {
+        env: ctx.env,
+        files: projectEnv.runtime,
+        isTTY: stderrIsTTY,
+    });
+    if (view.kind === 'error') {
+        return { kind: 'error', stderr: `kindgi dev: ${view.message}\n`, exitCode: 1 };
+    }
+    logView = view.value;
     // The PyPI CLI (kindgi-cli) has no TypeScript bundler: say so before anything starts.
     if (projectEnv.language === 'node' && cliInstall(ctx.env) === 'pypi') {
         return { kind: 'error', stderr: `kindgi dev: ${PYPI_NO_BUNDLER}\n`, exitCode: 1 };
@@ -231,6 +293,22 @@ export async function runDev(ctx) {
     if (declared.kind === 'invalid') {
         return { kind: 'error', stderr: `kindgi dev: ${declared.message}\n`, exitCode: 1 };
     }
+    // Google credentials for Vertex AI: only the ones KINDGI_DEV_GOOGLE_CREDENTIALS
+    // names (the shell, then the env files) reach the runtime. A declared
+    // Vertex provider without them is said now, before anything starts.
+    const google = resolveDevGoogleCredentials(ctx.env[DEV_GOOGLE_CREDENTIALS_VAR] ?? projectEnv.runtime[DEV_GOOGLE_CREDENTIALS_VAR], ctx.env);
+    if (google.kind === 'error') {
+        return { kind: 'error', stderr: `kindgi dev: ${google.message}\n`, exitCode: 1 };
+    }
+    const declaredVertex = declared.providers
+        .filter((p) => isVertexRegistration(p.input))
+        .map((p) => p.id);
+    if (google.credentials !== undefined) {
+        emitProgress(`✓ Google credentials: ${google.credentials.path} (${google.credentials.who}), mounted read-only for Vertex AI`);
+    }
+    else if (declaredVertex.length > 0) {
+        emitProgress(`⚠ ${vertexCredentialsHint(declaredVertex, ctx.env)}`);
+    }
     // The runtime's port, before anything starts. Taken without `--port`
     // (another `kindgi dev`, say): the next free one, which `.kindgirc.json`
     // then records for every client. Taken with `--port`: refused.
@@ -375,12 +453,16 @@ export async function runDev(ctx) {
     // The pack's code is bundled and runs in a local pack service. It
     // starts once the pack is bundled and indexed; the api-server gets
     // its transport now.
-    const packEnv = () => devPackEnv({
-        packDir: args.packDir,
-        ...(projectEnv.localEnvFiles !== undefined && { localEnvFiles: projectEnv.localEnvFiles }),
-        hostEnv: ctx.env,
+    // The pack service and the indexer write records at the levels shown.
+    const packEnv = async () => ({
+        ...(await devPackEnv({
+            packDir: args.packDir,
+            ...(projectEnv.localEnvFiles !== undefined && { localEnvFiles: projectEnv.localEnvFiles }),
+            hostEnv: ctx.env,
+        })),
+        ...sourceLogEnv(logView),
     });
-    const code = await resolveDevPackCode(dev, projectEnv.language, args.packDir, projectEnv.config, packEnv);
+    const code = await resolveDevPackCode(dev, projectEnv.language, args.packDir, projectEnv.config, packEnv, ctx.env);
     if (code.kind === 'error') {
         return code;
     }
@@ -392,11 +474,10 @@ export async function runDev(ctx) {
         packDir: args.packDir,
         code: code.value,
         env: packEnv,
-        onLog: (line) => emitProgress(`  [pack] ${line}`),
+        onLog: (line, stream) => emitOutput(showText('pack', line, logView, stream)),
         onEvent: (event) => {
-            const line = describePackEvent(event);
-            if (line !== undefined)
-                emitProgress(line);
+            for (const output of showPackEvent(event, logView))
+                emitOutput(output);
         },
     };
     // The front listens for the whole session; children come and go behind
@@ -434,6 +515,7 @@ export async function runDev(ctx) {
         packDir: args.packDir,
         env: packEnv,
         code: code.value,
+        onIndexerOutput: (line) => emitOutput(showIndexerLine(line, logView)),
         ...(devOnly !== undefined && {
             onBuild: async (build) => {
                 if (build.externals === undefined)
@@ -467,12 +549,19 @@ export async function runDev(ctx) {
             ...(publicRunTokens.keyPath !== undefined && {
                 publicRunTokenKeyPath: publicRunTokens.keyPath,
             }),
+            ...(publicRunTokens.exportKeyPath !== undefined && {
+                exportSigningKeyPath: publicRunTokens.exportKeyPath,
+            }),
             ...(publicRunTokens.corsOrigins.length > 0 && {
                 corsOrigins: publicRunTokens.corsOrigins,
             }),
+            ...(google.credentials !== undefined && {
+                googleCredentialsPath: google.credentials.path,
+            }),
             runtimeImage: args.runtimeImage,
             ...(args.runtimeUrl !== undefined && { runtimeUrl: args.runtimeUrl }),
-            onLog: (line) => emitProgress(`  [runtime] ${line}`),
+            logLevels: runtimeLogLevels(logView),
+            onLog: (line, stream) => emitOutput(showLine('runtime', line, logView, stream)),
             onProgress: emitProgress,
             ...(ctx.stopSignal !== undefined && { signal: ctx.stopSignal }),
         }));
@@ -537,8 +626,18 @@ export async function runDev(ctx) {
     });
     const providers = await registeredProviders(client);
     const registerProviderCommand = await registerProviderHint(kindgi);
+    // A Vertex provider registered by hand (the `gemini` preset) has no
+    // credentials either; a declared one was named before the start.
+    if (google.credentials === undefined) {
+        const byHand = (providers ?? [])
+            .map((p) => p.id)
+            .filter((id) => id === VERTEX_PROVIDER_ID && !declaredVertex.includes(id));
+        if (byHand.length > 0)
+            emitProgress(`⚠ ${vertexCredentialsHint(byHand, ctx.env)}`);
+    }
     const bannerLines = renderDevBanner({
         baseUrl: server.baseUrl,
+        consoleMounted: server.consoleMounted === true,
         tenantId: server.tenantId,
         token: server.token,
         providers,
@@ -549,6 +648,7 @@ export async function runDev(ctx) {
         discoveryRoots: discoveryRoots(projectEnv.discoveryPatterns),
         ...(servicesHandle !== undefined && { autoStartedServices: servicesHandle.services }),
         corsOrigins: publicRunTokens.corsOrigins,
+        ...(google.credentials !== undefined && { googleCredentials: google.credentials }),
     });
     // Write `.kindgirc.json` to the pack root so a SECOND terminal in
     // the same directory (`cd <pack>; kindgi runs start ...`) picks up
@@ -594,13 +694,14 @@ export async function runDev(ctx) {
     emitProgress('════════════════════════════════════════');
     emitProgress('  ✓ Kindgi is up');
     emitProgress('════════════════════════════════════════');
+    if (server.consoleMounted === true) {
+        for (const line of renderConsoleLines(server.baseUrl))
+            emitProgress(line);
+    }
     emitProgress(`  API        ${server.baseUrl}`);
     if (project !== undefined) {
         emitProgress(`  Project    ${project.name} · database ${project.database}`);
     }
-    if (server.consoleMounted === true) {
-        emitProgress(`  Console    ${server.baseUrl}/console/`);
-    }
     emitProgress(`  Tenant     ${server.tenantId}`);
     emitProgress(`  Token      ${server.token}`);
     if (providers !== undefined) {
@@ -637,6 +738,16 @@ export async function runDev(ctx) {
         emitProgress('  Ctrl+C to stop.');
         emitProgress('');
     }
+    if (args.open) {
+        if (server.consoleMounted === true) {
+            const opened = await (ctx.openUrl ?? openUrlInBrowser)(consoleUrlOf(server.baseUrl));
+            emitProgress(opened.ok ? '  Opened the console in your browser.' : `  ${couldNotOpen(opened.reason)}`);
+        }
+        else {
+            emitProgress('  --open: this runtime serves no console, so there is nothing to open.');
+        }
+        emitProgress('');
+    }
     const watchHandles = [];
     let watchTicks = 0;
     let lastWatchOutcome;
@@ -684,7 +795,7 @@ export async function runDev(ctx) {
                 }
                 else {
                     lastWatchReport = undefined;
-                    emitProgress(`  ✗ refresh failed [${outcome.code}] ${outcome.message}`);
+                    emitProblem(`  ✗ refresh failed [${outcome.code}] ${outcome.message}`);
                 }
             })();
             inFlightTicks.add(tick);
@@ -738,6 +849,7 @@ export async function runDev(ctx) {
     // stood when kindgi dev stopped.
     const summary = {
         apiUrl: server.baseUrl,
+        ...(server.consoleMounted === true && { consoleUrl: consoleUrlOf(server.baseUrl) }),
         tenantId: server.tenantId,
         token: server.token,
         port: server.port,
@@ -756,14 +868,19 @@ export async function runDev(ctx) {
     const stdout = ctx.globals.formatRequested ? renderJson(summary, ctx.globals.format).stdout : '';
     return {
         kind: 'ok',
-        rendered: { stdout, stderr: args.watch ? '' : `${bannerLines.join('\n')}\n` },
+        // --quiet: errors only, so no summary.
+        rendered: {
+            stdout,
+            stderr: args.watch || logView.quiet ? '' : `${bannerLines.join('\n')}\n`,
+        },
     };
 }
 /**
  * Public run tokens for the browser app under development: signed with
  * the key file when `KINDGI_PUBLIC_TOKEN_SIGNING_KEY_PATH` is set,
  * otherwise with a key made now (tokens stop working when `kindgi dev`
- * stops). `KINDGI_CORS_ORIGINS` lists the app's origins
+ * stops). Exports the same way: `KINDGI_EXPORT_SIGNING_KEY_PATH`'s key
+ * file, otherwise a key the runtime makes at startup. `KINDGI_CORS_ORIGINS` lists the app's origins
  * (`http://localhost:3000`). Both come from the shell, then the env files,
  * like `KINDGI_DATABASE_URL`.
  */
@@ -773,11 +890,19 @@ async function resolveDevPublicRunTokens(shell, files) {
         return value === undefined || value.trim() === '' ? undefined : value.trim();
     };
     try {
-        const keyPath = pick(PUBLIC_TOKEN_KEY_PATH_VAR);
-        if (keyPath !== undefined && (!isAbsolute(keyPath) || !existsSync(keyPath))) {
-            throw new Error(`${PUBLIC_TOKEN_KEY_PATH_VAR} must be the absolute path of an existing key file. Got "${keyPath}".`);
-        }
-        return { kind: 'ok', keyPath, corsOrigins: parseCorsOrigins(pick(CORS_ORIGINS_VAR)) };
+        const keyFile = (name) => {
+            const path = pick(name);
+            if (path !== undefined && (!isAbsolute(path) || !existsSync(path))) {
+                throw new Error(`${name} must be the absolute path of an existing key file. Got "${path}".`);
+            }
+            return path;
+        };
+        return {
+            kind: 'ok',
+            keyPath: keyFile(PUBLIC_TOKEN_KEY_PATH_VAR),
+            exportKeyPath: keyFile(EXPORT_SIGNING_KEY_PATH_VAR),
+            corsOrigins: parseCorsOrigins(pick(CORS_ORIGINS_VAR)),
+        };
     }
     catch (err) {
         return { kind: 'error', stderr: `kindgi dev: ${err.message}\n`, exitCode: 1 };
@@ -902,6 +1027,16 @@ function resolveDevArgs(ctx) {
         };
     }
     const watch = !watchOff;
+    // --open — the console in the browser; with --no-watch the runtime
+    // stops as kindgi dev exits, so there'd be nothing to open.
+    const open = ctx.options.open === true;
+    if (open && !watch) {
+        return {
+            kind: 'error',
+            stderr: "Contradictory flags: --open and --no-watch. With --no-watch the runtime stops when kindgi dev exits, so there's no console to open.\n",
+            exitCode: 1,
+        };
+    }
     // --path — pack root. Default is cwd.
     const pathFlag = ctx.options.path;
     const rawPath = typeof pathFlag === 'string' && pathFlag !== '' ? pathFlag : ctx.cwd;
@@ -929,6 +1064,16 @@ function resolveDevArgs(ctx) {
         };
     }
     const runtimeImage = typeof imageFlag === 'string' && imageFlag !== '' ? imageFlag : DEFAULT_RUNTIME_IMAGE;
+    // --log-level / --log / --log-format / --quiet — what the logs show, and how.
+    const log = parseDevLogFlags({
+        level: ctx.options['log-level'],
+        log: ctx.options.log,
+        format: ctx.options['log-format'],
+        quiet: ctx.globals.format === 'quiet',
+    });
+    if (log.kind === 'error') {
+        return { kind: 'error', stderr: `kindgi dev: ${log.message}\n`, exitCode: 1 };
+    }
     return {
         kind: 'ok',
         args: {
@@ -938,12 +1083,14 @@ function resolveDevArgs(ctx) {
             tenantId,
             token,
             watch,
+            open,
             packDir,
             reset,
             yes,
             recreateServices,
             runtimeImage,
             runtimeUrl,
+            log: log.value,
         },
     };
 }
@@ -1049,19 +1196,20 @@ async function readPersistedRc(kindgircPath) {
 /** What the boot loaded, live: the counts and failures, no primitives yet, or the indexer's error. */
 function emitBootIndex(bootIndex, bootReport, roots) {
     if (bootIndex.kind !== 'ok') {
-        // Dev stays up either way; the section says so.
+        // Dev stays up either way; the section says so. No primitives yet isn't an error.
+        const emit = bootIndex.code === 'discovery-empty' ? emitProgress : emitProblem;
         for (const line of renderIndexSection({ bootIndex, bootReport, discoveryRoots: roots })) {
-            emitProgress(line.replace(/^ {2}/, ''));
+            emit(line.replace(/^ {2}/, ''));
         }
         return;
     }
     const c = bootIndex.counts;
     emitProgress(`✓ loaded: ${c.tools} tools, ${c.guardrails} guardrails, ${c.agents} agents, ${c.flows} flows`);
     for (const e of bootIndex.fileErrors) {
-        emitProgress(`  ⚠ indexer: ${e.filePath ?? '?'} [${e.code}] ${e.message}`);
+        emitProblem(`  ⚠ indexer: ${e.filePath ?? '?'} [${e.code}] ${e.message}`);
     }
     for (const f of bootReport.failed) {
-        emitProgress(`  ⚠ ${f.kind}: ${f.id} — ${f.message ?? 'unknown reason'}`);
+        emitProblem(`  ⚠ ${f.kind}: ${f.id} — ${f.message ?? 'unknown reason'}`);
     }
 }
 /**
@@ -1161,12 +1309,12 @@ function emitWatchTick(input) {
         emitProgress(`  ✓ loaded ${registered} primitives (${totals}) in ${elapsedMs}ms`);
         return;
     }
-    emitProgress(`  ⚠ loaded ${registered} of ${registered + failed.length} in ${elapsedMs}ms — ${totals}`);
+    emitProblem(`  ⚠ loaded ${registered} of ${registered + failed.length} in ${elapsedMs}ms — ${totals}`);
     for (const e of fileErrors) {
-        emitProgress(`    ✗ indexer: ${e.filePath ?? '?'} [${e.code}] ${e.message}`);
+        emitProblem(`    ✗ indexer: ${e.filePath ?? '?'} [${e.code}] ${e.message}`);
     }
     for (const f of failed) {
-        emitProgress(`    ✗ ${f.kind}: ${f.id} — ${f.message ?? 'unknown reason'}`);
+        emitProblem(`    ✗ ${f.kind}: ${f.id} — ${f.message ?? 'unknown reason'}`);
     }
 }
 /**
@@ -1200,11 +1348,11 @@ async function emitSkillDriftHint(packDir, language, syncCommand) {
 }
 /**
  * How this pack's code runs (`dev/pack-code.ts`). For a Python pack, the
- * interpreter is resolved and checked — with the pack's own environment —
- * before anything boots.
+ * interpreter, and for a JVM pack, the JDK and Maven or sbt, are resolved
+ * and checked — with the pack's own environment — before anything boots.
  */
-async function resolveDevPackCode(dev, language, packDir, config, packEnv) {
-    const resolved = await resolvePackCode(language, packDir, config);
+async function resolveDevPackCode(dev, language, packDir, config, packEnv, hostEnv) {
+    const resolved = await resolvePackCode(language, packDir, config, hostEnv);
     if (resolved.kind === 'err') {
         return { kind: 'error', stderr: `kindgi dev: ${resolved.message}\n`, exitCode: 1 };
     }
@@ -1215,6 +1363,13 @@ async function resolveDevPackCode(dev, language, packDir, config, packEnv) {
         }
         emitProgress(`✓ pack code: ${checked.value}`);
     }
+    if (isJvmPackCode(resolved.value)) {
+        const checked = await dev.checkPackJvm(resolved.value, await packEnv(), packDir);
+        if (checked.kind === 'err') {
+            return { kind: 'error', stderr: `kindgi dev: ${checked.message}\n`, exitCode: 1 };
+        }
+        emitProgress(`✓ pack code: ${checked.value}`);
+    }
     return { kind: 'ok', value: resolved.value };
 }
 function getEnv(ctx, key) {
@@ -1311,7 +1466,7 @@ async function registerProviderHint(kindgi) {
  */
 function describeProviders(providers, registerProviderCommand) {
     if (providers.length === 0) {
-        return `none — agent turns fail until one is registered: ${registerProviderCommand}`;
+        return `none — this runtime has no dev-echo fallback, so agent turns fail until one is registered: ${registerProviderCommand}`;
     }
     const named = providers
         .map((p) => p.fallback === true
@@ -1322,11 +1477,25 @@ function describeProviders(providers, registerProviderCommand) {
         return named;
     return `${named} — canned replies; for a real model: ${registerProviderCommand}`;
 }
+/**
+ * The ready block's first lines: the console, and how to sign in to it
+ * (T374). First, so the URL a person opens is the console's: the API's
+ * own address used to be the first one printed, and answered 404.
+ */
+export function renderConsoleLines(baseUrl) {
+    return [
+        `  Console    ${consoleUrlOf(baseUrl)}   (open in your browser)`,
+        '             Sign in: "Sign in as seeded user" on the sign-in page (the dev token, below)',
+    ];
+}
 /** The banner `kindgi dev --no-watch` prints to stderr when it exits. */
 export function renderDevBanner(inputs) {
     const lines = [];
     lines.push('');
     lines.push('  Starting Kindgi locally (dev: the runtime in a container, your code on this machine)');
+    if (inputs.consoleMounted === true) {
+        lines.push(`    Console            ${consoleUrlOf(inputs.baseUrl)}`);
+    }
     lines.push(`    API server         ${inputs.baseUrl}`);
     lines.push(`    Tenant             ${inputs.tenantId}`);
     lines.push(`    Bearer token       ${inputs.token}`);
@@ -1340,6 +1509,9 @@ export function renderDevBanner(inputs) {
     if (inputs.corsOrigins !== undefined) {
         lines.push(`    Browser origins    ${describeBrowserOrigins(inputs.corsOrigins)}`);
     }
+    if (inputs.googleCredentials !== undefined) {
+        lines.push(`    Google credentials ${inputs.googleCredentials.path} (${inputs.googleCredentials.who}), read-only, for Vertex AI`);
+    }
     lines.push('');
     lines.push(...renderIndexSection(inputs));
     lines.push('');