@kindgi/cli 0.1.6-rc.0 → 0.1.7-rc.0

package/dist/providers/presets/azure-openai.json

@@ -0,0 +1,65 @@
+{
+  "name": "azure-openai",
+  "description": "GPT on your Azure OpenAI deployments (key: AZURE_OPENAI_API_KEY; --resource-name, --deployments). Global Standard prices. To sign in with the runtime's Entra identity, register with --spec.",
+  "adapterId": "@kindgi/adapter-model-azure-openai",
+  "secret": "AZURE_OPENAI_API_KEY",
+  "adapterConfig": [
+    {
+      "key": "resourceName",
+      "description": "The Azure OpenAI resource, as in <name>.openai.azure.com."
+    },
+    {
+      "key": "deployments",
+      "description": "The deployment serving each model you register, model=deployment,… (e.g. gpt-6.1-sol=gpt-6-1-sol,gpt-6-luna=gpt-6-luna)."
+    }
+  ],
+  "pricesCheckedAt": "2026-10-09",
+  "metadata": {
+    "id": "azure-openai",
+    "region": "unspecified",
+    "defaultModel": "gpt-6.1-sol",
+    "description": "GPT on Azure OpenAI",
+    "models": [
+      {
+        "name": "gpt-6.1-sol",
+        "contextWindow": 1050000,
+        "maxOutputTokens": 128000,
+        "thinking": { "mode": "adaptive", "lowest": "low" },
+        "sampling": false,
+        "features": ["tool-use", "parallel-tool-use", "structured-output", "long-context"],
+        "cost": {
+          "promptUsdPer1kTokens": 0.002,
+          "completionUsdPer1kTokens": 0.01,
+          "cachedPromptMultiplier": 0.05,
+          "promptCacheCreationMultiplier": 1.25,
+          "longContext": {
+            "thresholdTokens": 272000,
+            "promptUsdPer1kTokens": 0.004,
+            "completionUsdPer1kTokens": 0.015
+          }
+        },
+        "description": "Balanced performance and cost."
+      },
+      {
+        "name": "gpt-6-luna",
+        "contextWindow": 1050000,
+        "maxOutputTokens": 128000,
+        "thinking": { "mode": "adaptive", "lowest": "none" },
+        "sampling": false,
+        "features": ["tool-use", "parallel-tool-use", "structured-output", "long-context"],
+        "cost": {
+          "promptUsdPer1kTokens": 0.0001,
+          "completionUsdPer1kTokens": 0.0005,
+          "cachedPromptMultiplier": 0.1,
+          "promptCacheCreationMultiplier": 1.25,
+          "longContext": {
+            "thresholdTokens": 272000,
+            "promptUsdPer1kTokens": 0.0002,
+            "completionUsdPer1kTokens": 0.00075
+          }
+        },
+        "description": "Fastest and cheapest — routing, classification, simple calls."
+      }
+    ]
+  }
+}

package/dist/providers/presets/bedrock.json

@@ -0,0 +1,102 @@
+{
+  "name": "bedrock",
+  "description": "Claude, Nova and GPT on Amazon Bedrock, as the runtime's AWS identity (KINDGI_AWS_IDENTITY; --region=<a US region>). The models are US cross-region inference profiles.",
+  "adapterId": "@kindgi/adapter-model-bedrock",
+  "adapterConfig": [
+    {
+      "key": "region",
+      "description": "The US region Bedrock runs in, e.g. us-east-2: the preset's models are us. cross-region inference profiles.",
+      "in": "metadata"
+    }
+  ],
+  "pricesCheckedAt": "2026-10-09",
+  "metadata": {
+    "id": "bedrock",
+    "defaultModel": "us.amazon.nova-pro-v1:0",
+    "description": "Amazon Bedrock",
+    "models": [
+      {
+        "name": "us.anthropic.claude-sonnet-5-5",
+        "contextWindow": 1000000,
+        "maxOutputTokens": 16000,
+        "thinking": { "mode": "adaptive", "lowest": "between_tools" },
+        "sampling": false,
+        "features": ["tool-use", "parallel-tool-use", "structured-output", "long-context"],
+        "cost": {
+          "promptUsdPer1kTokens": 0.0022,
+          "completionUsdPer1kTokens": 0.011,
+          "cachedPromptMultiplier": 0.05,
+          "promptCacheCreationMultiplier": 1.25
+        },
+        "description": "Balanced performance and cost."
+      },
+      {
+        "name": "us.anthropic.claude-haiku-4-5-20251001-v1:0",
+        "contextWindow": 200000,
+        "maxOutputTokens": 16000,
+        "features": ["tool-use", "parallel-tool-use"],
+        "cost": {
+          "promptUsdPer1kTokens": 0.0011,
+          "completionUsdPer1kTokens": 0.0055,
+          "cachedPromptMultiplier": 0.1,
+          "promptCacheCreationMultiplier": 1.25
+        },
+        "description": "Claude's fast, inexpensive model."
+      },
+      {
+        "name": "us.amazon.nova-pro-v1:0",
+        "contextWindow": 300000,
+        "maxOutputTokens": 10000,
+        "sampling": true,
+        "features": ["tool-use", "structured-output"],
+        "cost": {
+          "promptUsdPer1kTokens": 0.0008,
+          "completionUsdPer1kTokens": 0.0032,
+          "cachedPromptMultiplier": 0.25,
+          "promptCacheCreationMultiplier": 0
+        },
+        "description": "Amazon's own; inexpensive."
+      },
+      {
+        "name": "us.openai.gpt-6.1-sol",
+        "contextWindow": 1000000,
+        "maxOutputTokens": 128000,
+        "thinking": { "mode": "adaptive", "lowest": "low" },
+        "sampling": false,
+        "features": ["tool-use", "parallel-tool-use", "structured-output", "long-context"],
+        "cost": {
+          "promptUsdPer1kTokens": 0.0022,
+          "completionUsdPer1kTokens": 0.011,
+          "cachedPromptMultiplier": 0.05,
+          "promptCacheCreationMultiplier": 1.25,
+          "longContext": {
+            "thresholdTokens": 272000,
+            "promptUsdPer1kTokens": 0.0044,
+            "completionUsdPer1kTokens": 0.0165
+          }
+        },
+        "description": "GPT's balanced model."
+      },
+      {
+        "name": "us.openai.gpt-6-luna",
+        "contextWindow": 1050000,
+        "maxOutputTokens": 128000,
+        "thinking": { "mode": "adaptive", "lowest": "none" },
+        "sampling": false,
+        "features": ["tool-use", "parallel-tool-use", "structured-output", "long-context"],
+        "cost": {
+          "promptUsdPer1kTokens": 0.00011,
+          "completionUsdPer1kTokens": 0.00055,
+          "cachedPromptMultiplier": 0.1,
+          "promptCacheCreationMultiplier": 1.25,
+          "longContext": {
+            "thresholdTokens": 272000,
+            "promptUsdPer1kTokens": 0.00022,
+            "completionUsdPer1kTokens": 0.000825
+          }
+        },
+        "description": "Fastest and cheapest — routing, classification, simple calls."
+      }
+    ]
+  }
+}

package/dist/sdk-skills/kindgi-authoring-agents/SKILL.md

@@ -12,8 +12,8 @@ description: >
   kindgi-authoring-guardrails.
 type: core
 library: "@kindgi/sdk"
-version: "0.4.5"
-sdk_version: "0.1.6-rc.0"
+version: "0.4.6"
+sdk_version: "0.1.7-rc.0"
 pack_languages: [node]
 sources:
   - packages/agents/src/types.ts
@@ -24,7 +24,7 @@ sources:
 
 > **Running `kindgi`:** the CLI is a devDependency of the project (`@kindgi/cli`),
 > not a global command. Run it through the project's package manager —
-> `pnpm exec kindgi …`, `npx --no kindgi …` (npm), `yarn kindgi …` or
+> `pnpm exec kindgi …`, `npx --no -- kindgi …` (npm), `yarn kindgi …` or
 > `bun run kindgi …`. Commands below are written `kindgi …` for brevity.
 
 An **agent** is a versioned LLM-powered orchestrator: instructions (a

package/dist/sdk-skills/kindgi-authoring-flows/SKILL.md

@@ -13,8 +13,8 @@ description: >
   kindgi-authoring-agents.
 type: core
 library: "@kindgi/sdk"
-version: "0.1.2"
-sdk_version: "0.1.6-rc.0"
+version: "0.1.3"
+sdk_version: "0.1.7-rc.0"
 pack_languages: [node]
 sources:
   - packages/flow/src/types.ts
@@ -25,7 +25,7 @@ sources:
 
 > **Running `kindgi`:** the CLI is a devDependency of the project (`@kindgi/cli`),
 > not a global command. Run it through the project's package manager —
-> `pnpm exec kindgi …`, `npx --no kindgi …` (npm), `yarn kindgi …` or
+> `pnpm exec kindgi …`, `npx --no -- kindgi …` (npm), `yarn kindgi …` or
 > `bun run kindgi …`. Commands below are written `kindgi …` for brevity.
 
 A **flow** is a versioned, durable graph of steps: tools (your code) and

package/dist/sdk-skills/kindgi-authoring-guardrails/SKILL.md

@@ -15,8 +15,8 @@ description: >
   kindgi-authoring-agents.
 type: core
 library: "@kindgi/sdk"
-version: "0.3.8"
-sdk_version: "0.1.6-rc.0"
+version: "0.3.9"
+sdk_version: "0.1.7-rc.0"
 pack_languages: [node]
 sources:
   - packages/guardrails/src/types.ts
@@ -32,7 +32,7 @@ sources:
 
 > **Running `kindgi`:** the CLI is a devDependency of the project (`@kindgi/cli`),
 > not a global command. Run it through the project's package manager —
-> `pnpm exec kindgi …`, `npx --no kindgi …` (npm), `yarn kindgi …` or
+> `pnpm exec kindgi …`, `npx --no -- kindgi …` (npm), `yarn kindgi …` or
 > `bun run kindgi …`. Commands below are written `kindgi …` for brevity.
 
 A **guardrail** is a safety rule an agent turn must satisfy. It combines
@@ -215,13 +215,14 @@ available to the runtime that evaluates it.
 - **`check`** — the id of a registered check (built-in, or one built
   with `defineCheck`). In a pack file it may also be the check object.
 - **`config`** — the check's parameters, validated against the check's
-  `configSchema` by `defineGuardrail`. In a pack, the declaration's
-  `config` goes into the index and the check runs with it; without one
-  it runs with `{}`. A declaration a pack file default-exports isn't run
-  through `defineGuardrail`, so nothing validates its `config`: keep it
-  valid against the schema yourself. `evaluate` receives the config as
-  declared —
-  schema defaults are not filled in — so handle absent optional fields.
+  `configSchema`: by `defineGuardrail`, and in a pack when the pack is
+  indexed (a config that doesn't fit is a file error naming where, and
+  `kindgi build` refuses the pack; see "How the pack tooling reads this
+  file"). In a pack, the declaration's `config` goes into the index and
+  the check runs with it; without one it runs with `{}`. A `defineCheck`
+  check's `evaluate` receives the config its schema resolves, with the
+  schema's defaults applied; a check written without `defineCheck` gets
+  the config as declared.
 - **`action.on-violation`** — `'halt'`, `'retry'` (with
   `retry.maxAttempts`, 1–10), `'escalate'` (with `escalateTo`),
   `'log-only'`, `'compensate'` (with `compensateWith`, a tool id). In an

package/dist/sdk-skills/kindgi-authoring-mcp-servers/SKILL.md

@@ -17,8 +17,8 @@ description: >
   `kindgi secrets set` flow.
 type: core
 library: "@kindgi/sdk"
-version: "0.3.2"
-sdk_version: "0.1.6-rc.0"
+version: "0.3.3"
+sdk_version: "0.1.7-rc.0"
 pack_languages: [node, python, java, scala]
 ---
 
@@ -26,7 +26,7 @@ pack_languages: [node, python, java, scala]
 
 > **Running `kindgi`:** in a Node project the CLI is a devDependency
 > (`@kindgi/cli`), not a global command. Run it through the project's
-> package manager — `pnpm exec kindgi …`, `npx --no kindgi …` (npm),
+> package manager — `pnpm exec kindgi …`, `npx --no -- kindgi …` (npm),
 > `yarn kindgi …` or `bun run kindgi …`. A Python pack (`[tool.kindgi]` in
 > `pyproject.toml`) has no Node project: run the `kindgi` on `PATH`. A Java
 > or Scala pack (`kindgi.config.json`) runs the CLI it pins: `./kindgiw …`.
@@ -89,7 +89,7 @@ Three moving parts:
    `kindgi mcp add`. Every entry runs the project's own `kindgi
    mcp-launch -- <launcher-flags>...` through its package manager
    (`"command": "pnpm", "args": ["exec", "kindgi", "mcp-launch", …]`;
-   npm: `npx --no kindgi …`) — never a global `kindgi`, never a
+   npm: `npx --no -- kindgi …`) — never a global `kindgi`, never a
    download. A Python pack has no Node project, so its entries run the
    `kindgi` on `PATH` (`"command": "kindgi", "args": ["mcp-launch", …]`). A
    Java or Scala pack's run the CLI it pins (`"command": "./kindgiw"`).

package/dist/sdk-skills/kindgi-authoring-providers/SKILL.md

@@ -23,8 +23,8 @@ description: >
   kindgi-getting-started.
 type: core
 library: "@kindgi/sdk"
-version: "0.9.11"
-sdk_version: "0.1.6-rc.0"
+version: "0.9.13"
+sdk_version: "0.1.7-rc.0"
 pack_languages: [node, python, java, scala]
 sources:
   - packages/adapters/model-anthropic/src/provider.ts
@@ -39,7 +39,7 @@ sources:
 
 > **Running `kindgi`:** in a Node project the CLI is a devDependency
 > (`@kindgi/cli`), not a global command. Run it through the project's
-> package manager — `pnpm exec kindgi …`, `npx --no kindgi …` (npm),
+> package manager — `pnpm exec kindgi …`, `npx --no -- kindgi …` (npm),
 > `yarn kindgi …` or `bun run kindgi …`. A Python pack (`[tool.kindgi]` in
 > `pyproject.toml`) has no Node project: run the `kindgi` on `PATH`. A Java
 > or Scala pack (`kindgi.config.json`) runs the CLI it pins: `./kindgiw …`.
@@ -149,9 +149,10 @@ The Claude 5.5 and GPT-6 models take no `temperature` (`"sampling": false`:
 the call goes without it, with a `sampling-unsupported` warning), and a
 model's `thinking` says how it thinks; thinking counts against
 `maxOutputTokens` and bills as output.
-The preset carries the models, context windows, output limits and current
-prices (`kindgi providers presets` lists the presets and when their prices
-were checked); `--max-output-tokens=<n>` sets another output limit. In a pack it refuses until the key is in the pack's env files —
+The preset carries the models, context windows, default output caps (what
+a call asks for when its agent sets no `maxOutputTokens`; not the model's own
+limit) and current prices (`kindgi providers presets` lists the presets and
+when their prices were checked); `--max-output-tokens=<n>` sets another cap. In a pack it refuses until the key is in the pack's env files —
 step 1. That's all for Anthropic; go to step 4. The rest of this path is
 the same registration by hand, for a spec of your own.
 
@@ -175,9 +176,15 @@ models = ["claude-sonnet-5-5"]
 ```
 In a Java or Scala pack's `kindgi.config.json`, the same keys:
 `"providers": [{"preset": "anthropic", "models": ["claude-sonnet-5-5"]}]`.
-- A preset entry takes `models`, `project`, `secret` (the key's name, in place
-  of the preset's) and `maxOutputTokens`, spelled the same in `pyproject.toml`
-  and `kindgi.config.json`;
+- A preset entry takes `models`, the settings its preset asks for (`project`
+  for `gemini`; `resourceName` and `deployments` for `azure-openai`; `region`
+  for `bedrock`), `secret` (the key's name, in place of the preset's) and
+  `maxOutputTokens`, spelled the same in `pyproject.toml` and
+  `kindgi.config.json`. Its own settings are required and another preset's
+  are refused. `deployments` is a map of model to deployment
+  (`{ "gpt-6.1-sol": "gpt-6-1-sol" }`, a `[tool.kindgi.providers.deployments]`
+  table in `pyproject.toml`, model names quoted), not the `--deployments` flag's
+  `model=deployment,…`, and it names exactly the models the entry registers;
   a `spec` entry is a `--spec` body. A
   key is always a secret's name (`secret_ref`); a credential in
   `adapter_config` is refused.

package/dist/sdk-skills/kindgi-authoring-tools/SKILL.md

@@ -12,8 +12,8 @@ description: >
   authoring agents is covered by kindgi-authoring-agents.
 type: core
 library: "@kindgi/sdk"
-version: "0.4.5"
-sdk_version: "0.1.6-rc.0"
+version: "0.4.8"
+sdk_version: "0.1.7-rc.0"
 pack_languages: [node]
 sources:
   - packages/tools/src/types.ts
@@ -24,7 +24,7 @@ sources:
 
 > **Running `kindgi`:** the CLI is a devDependency of the project (`@kindgi/cli`),
 > not a global command. Run it through the project's package manager —
-> `pnpm exec kindgi …`, `npx --no kindgi …` (npm), `yarn kindgi …` or
+> `pnpm exec kindgi …`, `npx --no -- kindgi …` (npm), `yarn kindgi …` or
 > `bun run kindgi …`. Commands below are written `kindgi …` for brevity.
 
 A **tool** is a callable unit of work an agent invokes: a function with a
@@ -168,7 +168,7 @@ const defined = defineTool({
   ```
 - **Not secret:** env values are recorded with each run that uses them and shown in its journal. A credential is a secret (`needsSpec.secrets`), never an env value.
 - **Schemas compile strictly:** each `needsSpec` schema must compile as the runtime compiles it (an unknown keyword is refused), and an env `default` is a string; otherwise `defineTool` returns `invalid-tool-definition`, and a deploy fails with `deployment-validation-failed`.
-- **In a unit test:** pass `env: { … }` in the context `invokeTool` gets.
+- **In a unit test:** call it with `invokeToolForTest(tool, input, { env: { … } })` (`@kindgi/sdk/define`). It decides the values as a run does: a name you don't set takes its schema's `default`, each value is checked, and the handler sees the declared names only. A missing or invalid one is `precondition-failed` (`env-value-missing`, `env-value-invalid`). Plain `invokeTool` passes `ctx.env` as given (the runtime decides a pack tool's env itself).
 
 Everything else comes from the process environment: `process.env.CITATOR_URL`. The pack service runs with the pack's env files in `kindgi dev` (less any secret stored with `kindgi secrets set`, which a tool declares and reads from `ctx.secrets`, and any model provider's key, which no tool gets), and with the container's environment in an image. Declare the names your code reads in `kindgi.config.ts`, `env: { required: ['CITATOR_URL'], optional: [...] }`: a deployment injects exactly those, a pack service missing a required one isn't ready and says which, and `kindgi dev` warns about it. In an image the pack service also drops every variable the pack doesn't declare before your code loads (`kindgi dev` keeps them), so an undeclared name works locally and is unset once deployed: declare every name the code reads. Values per environment go in `environments.<name>.env`, secrets only as references.
 
@@ -261,18 +261,16 @@ the agent-author to opt in.
 
 ## Testing a tool
 
-Put a tool's tests beside it, `tools/<tool>/index.test.ts`. Discovery skips `*.test.*` and `*.spec.*` files (`.ts`, `.js`, `.mjs`, `.cjs`), so the indexer never loads a test as a primitive: don't move tests elsewhere to keep them out. `invokeTool(tool, input, ctx)` from `@kindgi/sdk/define` calls the tool the way Kindgi does, schemas included, and returns a `Result`. Its `ctx` needs a `tenantId` and an `abortSignal` (`ToolContext` in `@kindgi/tools`); the rest is optional. vitest doesn't typecheck, so a context missing them still passes the test: run `tsc --noEmit` too.
+Put a tool's tests beside it, `tools/<tool>/index.test.ts`. Discovery skips `*.test.*` and `*.spec.*` files (`.ts`, `.js`, `.mjs`, `.cjs`), so the indexer never loads a test as a primitive: don't move tests elsewhere to keep them out. `invokeTool(tool, input, ctx)` from `@kindgi/sdk/define` calls the tool the way Kindgi does, schemas included, and returns a `Result`. `toolContextForTest()` builds its `ctx` (tenant `tenant-test`, run `run-test`, an abort signal) and takes what to change: `env`, `secrets`, `projectId`.
 
 ```ts
-import { invokeTool } from '@kindgi/sdk/define';
-import type { TenantId } from '@kindgi/sdk/types';
+import { invokeTool, toolContextForTest } from '@kindgi/sdk/define';
 
-const ctx = { tenantId: 'test' as TenantId, abortSignal: new AbortController().signal };
-// add `env: { STORE_URL: '…' }` for a tool that reads a declared env value
-const result = await invokeTool(lookupOrder, { orderId: 'ord_1001' }, ctx);
+const result = await invokeTool(lookupOrder, { orderId: 'ord_1001' }, toolContextForTest());
+// a tool with env values: invokeToolForTest(tool, input, { env: { STORE_URL: '…' } })
 ```
 
-`kindgi test` runs the pack's tests with vitest (`vitest run`; `--watch` keeps watching).
+`kindgi test` runs the pack's tests with vitest (`vitest run`; `--watch` keeps watching). In an app Kindgi was added to, `kindgi init` wrote the vitest config (`vitest.config.mts`, or `.ts` in a `"type": "module"` app): it runs `kindgi/**/*.test.ts`, and its `resolve.alias` copies `tsconfig.json`'s `paths`, which vitest doesn't read. A test that can't resolve an alias the app's code uses (`@/…`) means the two differ: update the config's alias, not the import.
 
 ## Shared code
 

package/dist/sdk-skills/kindgi-framework-feedback/SKILL.md

@@ -14,8 +14,8 @@ description: >
   diagnostic output into durable input for framework improvement.
 type: core
 library: "@kindgi/sdk"
-version: "0.4.2"
-sdk_version: "0.1.6-rc.0"
+version: "0.4.3"
+sdk_version: "0.1.7-rc.0"
 pack_languages: [node, python, java, scala]
 ---
 
@@ -23,7 +23,7 @@ pack_languages: [node, python, java, scala]
 
 > **Running `kindgi`:** in a Node project the CLI is a devDependency
 > (`@kindgi/cli`), not a global command. Run it through the project's
-> package manager — `pnpm exec kindgi …`, `npx --no kindgi …` (npm),
+> package manager — `pnpm exec kindgi …`, `npx --no -- kindgi …` (npm),
 > `yarn kindgi …` or `bun run kindgi …`. A Python pack (`[tool.kindgi]` in
 > `pyproject.toml`) has no Node project: run the `kindgi` on `PATH`. A Java
 > or Scala pack (`kindgi.config.json`) runs the CLI it pins: `./kindgiw …`.

package/dist/sdk-skills/kindgi-getting-started/SKILL.md

@@ -14,8 +14,8 @@ description: >
   primitive.
 type: core
 library: "@kindgi/sdk"
-version: "0.3.8"
-sdk_version: "0.1.6-rc.0"
+version: "0.3.11"
+sdk_version: "0.1.7-rc.0"
 pack_languages: [node]
 ---
 
@@ -23,7 +23,7 @@ pack_languages: [node]
 
 > **Running `kindgi`:** the CLI is a devDependency of the project (`@kindgi/cli`),
 > not a global command. Run it through the project's package manager —
-> `pnpm exec kindgi …`, `npx --no kindgi …` (npm), `yarn kindgi …` or
+> `pnpm exec kindgi …`, `npx --no -- kindgi …` (npm), `yarn kindgi …` or
 > `bun run kindgi …`. Commands below are written `kindgi …` for brevity.
 
 Scaffold a Kindgi pack — a versioned, deployable bundle
@@ -69,7 +69,9 @@ pnpm install          # or the app's own package manager
 ```
 
 This adds `kindgi.config.ts` and a `kindgi/` folder beside the app's code,
-and never creates env files: `kindgi dev` reads the app's own `.env` /
+and `vitest.config.mts` for the tests `kindgi test` runs (`kindgi/**/*.test.ts`,
+with the app's tsconfig path aliases) unless the app runs vitest already. It
+never creates env files: `kindgi dev` reads the app's own `.env` /
 `.env.local`. A package a tool imports must be in the app's `dependencies`,
 not `devDependencies`: the deployed pack installs production dependencies
 only (see `kindgi-authoring-tools`).
@@ -79,12 +81,20 @@ Either way, `init` adds `@kindgi/sdk` and `@kindgi/cli` to the project's
 one. (`npx @kindgi/cli` is the scoped package; a bare `npx kindgi` would
 fetch an unrelated package.)
 
-Two templates:
+Four templates:
 
 - `--template=minimal` (default) — folder structure only, no example
   primitives. Right when you know what you want to build.
 - `--template=sample` — worked kitchen-sink example (echo tool + agent
   + guardrail + flow). Right for exploring the primitive kinds.
+- `--template=woocommerce` — agents for a WooCommerce store: typed store
+  tools, approvals for large refunds and store changes, and a flow that
+  checks each order event before an agent sees it. Its README explains
+  each choice.
+- `--template=drupal` — agents for a Drupal site, through its MCP
+  Server signed in with OAuth: house-style fixes as drafts with every
+  change approved, and a flow that checks each saved article before an
+  agent sees it. Its README explains each choice.
 
 ## Boot the dev harness
 
@@ -97,6 +107,19 @@ needs on first run), indexes the pack, registers every primitive, and
 re-registers on every save. The banner prints the API URL, the seeded
 bearer token, and (if the console is bundled) the `/console/` URL.
 
+One `kindgi dev` per pack. When one is already running (the person's
+terminal, say), `kindgi dev` exits with code 3 and prints where it is
+(its pid, the console and the API): use that one. Don't start another,
+and don't stop theirs.
+
+Give the person the console's address as the banner prints it (its
+`Console` line). Never guess a console URL: an approval's own link is
+`/console/approvals/<approval id>`, which finds its tenant and project by
+itself, and every other page's address starts with the tenant and the
+project, `/console/tenants/<tenant>/projects/<project id>/…`, both taken
+from the CLI's answers (`kindgi auth whoami`'s `identity.tenantId`,
+`kindgi projects get-default`'s `id`), never made up.
+
 Until a model provider is registered, agents answer with `dev-echo`, a
 stand-in that calls the agent's first tool with `{"message": <userMessage>}`
 and replies with what the tool returned. It checks the wiring only: it can't

package/dist/sdk-skills/kindgi-java-authoring-agents/SKILL.md

@@ -16,7 +16,7 @@ description: >
 type: core
 library: "kindgi-pack (Java)"
 version: "0.1.0"
-sdk_version: "0.1.6-rc.0"
+sdk_version: "0.1.7-rc.0"
 pack_languages: [java]
 sources:
   - sdks/java/kindgi-pack/README.md

package/dist/sdk-skills/kindgi-java-authoring-flows/SKILL.md

@@ -16,7 +16,7 @@ description: >
 type: core
 library: "kindgi-pack (Java)"
 version: "0.1.0"
-sdk_version: "0.1.6-rc.0"
+sdk_version: "0.1.7-rc.0"
 pack_languages: [java]
 sources:
   - sdks/java/kindgi-pack/README.md

package/dist/sdk-skills/kindgi-java-authoring-guardrails/SKILL.md

@@ -15,7 +15,7 @@ description: >
 type: core
 library: "kindgi-pack (Java)"
 version: "0.1.0"
-sdk_version: "0.1.6-rc.0"
+sdk_version: "0.1.7-rc.0"
 pack_languages: [java]
 sources:
   - sdks/java/kindgi-pack/README.md

package/dist/sdk-skills/kindgi-java-authoring-tools/SKILL.md

@@ -15,7 +15,7 @@ description: >
 type: core
 library: "kindgi-pack (Java)"
 version: "0.1.0"
-sdk_version: "0.1.6-rc.0"
+sdk_version: "0.1.7-rc.0"
 pack_languages: [java]
 sources:
   - sdks/java/kindgi-pack/README.md

package/dist/sdk-skills/kindgi-java-getting-started/SKILL.md

@@ -17,7 +17,7 @@ description: >
 type: core
 library: "kindgi-pack (Java)"
 version: "0.1.0"
-sdk_version: "0.1.6-rc.0"
+sdk_version: "0.1.7-rc.0"
 pack_languages: [java]
 sources:
   - sdks/java/kindgi-pack/README.md
@@ -70,6 +70,11 @@ cd my-pack
 ./kindgiw dev      # boots Kindgi locally and runs this pack, recompiling on save
 ```
 
+One `kindgi dev` per pack. When one is already running (the person's
+terminal, say), `kindgi dev` exits with code 3 and prints where it is
+(its pid, the console and the API): use that one. Don't start another,
+and don't stop theirs.
+
 `kindgi dev` needs Docker and Postgres. It starts Postgres in Docker unless
 `KINDGI_DATABASE_URL` points at yours. It checks the JDK (`JAVA_HOME`'s, or
 `dev.javaHome` in `kindgi.config.json`) and Maven (the pack's `mvnw`, or

package/dist/sdk-skills/kindgi-python-authoring-agents/SKILL.md

@@ -16,7 +16,7 @@ description: >
 type: core
 library: "kindgi (Python)"
 version: "0.1.5"
-sdk_version: "0.1.6-rc.0"
+sdk_version: "0.1.7-rc.0"
 pack_languages: [python]
 sources:
   - sdks/python/src/kindgi/pack/define.py

package/dist/sdk-skills/kindgi-python-authoring-flows/SKILL.md

@@ -17,7 +17,7 @@ description: >
 type: core
 library: "kindgi (Python)"
 version: "0.1.2"
-sdk_version: "0.1.6-rc.0"
+sdk_version: "0.1.7-rc.0"
 pack_languages: [python]
 sources:
   - sdks/python/src/kindgi/pack/define.py

package/dist/sdk-skills/kindgi-python-authoring-guardrails/SKILL.md

@@ -15,7 +15,7 @@ description: >
 type: core
 library: "kindgi (Python)"
 version: "0.1.4"
-sdk_version: "0.1.6-rc.0"
+sdk_version: "0.1.7-rc.0"
 pack_languages: [python]
 sources:
   - sdks/python/src/kindgi/pack/define.py

package/dist/sdk-skills/kindgi-python-authoring-tools/SKILL.md

@@ -15,7 +15,7 @@ description: >
 type: core
 library: "kindgi (Python)"
 version: "0.1.3"
-sdk_version: "0.1.6-rc.0"
+sdk_version: "0.1.7-rc.0"
 pack_languages: [python]
 sources:
   - sdks/python/src/kindgi/pack/define.py

package/dist/sdk-skills/kindgi-python-getting-started/SKILL.md

@@ -15,7 +15,7 @@ description: >
 type: core
 library: "kindgi (Python)"
 version: "0.1.7"
-sdk_version: "0.1.6-rc.0"
+sdk_version: "0.1.7-rc.0"
 pack_languages: [python]
 sources:
   - sdks/python/README.md
@@ -61,6 +61,11 @@ uv run pytest
 uv run kindgi dev  # boots Kindgi locally and runs this pack, reloading on save
 ```
 
+One `kindgi dev` per pack. When one is already running (the person's
+terminal, say), `kindgi dev` exits with code 3 and prints where it is
+(its pid, the console and the API): use that one. Don't start another,
+and don't stop theirs.
+
 `kindgi dev` needs Postgres: it starts one in Docker unless
 `KINDGI_DATABASE_URL` points at yours. It runs the pack with
 `.venv/bin/python` (or `dev.python` in `[tool.kindgi]`, e.g.

package/dist/sdk-skills/kindgi-scala-authoring-agents/SKILL.md

@@ -17,7 +17,7 @@ description: >
 type: core
 library: "kindgi-pack-scala"
 version: "0.1.0"
-sdk_version: "0.1.6-rc.0"
+sdk_version: "0.1.7-rc.0"
 pack_languages: [scala]
 sources:
   - sdks/scala/README.md

package/dist/sdk-skills/kindgi-scala-authoring-flows/SKILL.md

@@ -17,7 +17,7 @@ description: >
 type: core
 library: "kindgi-pack-scala"
 version: "0.1.0"
-sdk_version: "0.1.6-rc.0"
+sdk_version: "0.1.7-rc.0"
 pack_languages: [scala]
 sources:
   - sdks/scala/README.md

package/dist/sdk-skills/kindgi-scala-authoring-guardrails/SKILL.md

@@ -16,7 +16,7 @@ description: >
 type: core
 library: "kindgi-pack-scala"
 version: "0.1.0"
-sdk_version: "0.1.6-rc.0"
+sdk_version: "0.1.7-rc.0"
 pack_languages: [scala]
 sources:
   - sdks/scala/README.md