kozou 0.0.2 → 0.1.1

package/LICENSE

@@ -1,21 +1,202 @@
-MIT License
-
-Copyright (c) 2026 Takashi Matsuyama
-
-Permission is hereby granted, free of charge, to any person obtaining a copy
-of this software and associated documentation files (the "Software"), to deal
-in the Software without restriction, including without limitation the rights
-to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
-copies of the Software, and to permit persons to whom the Software is
-furnished to do so, subject to the following conditions:
-
-The above copyright notice and this permission notice shall be included in all
-copies or substantial portions of the Software.
-
-THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
-IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
-FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
-AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
-LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
-OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
-SOFTWARE.
+
+                                 Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "[]"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright [yyyy] [name of copyright owner]
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.

package/README.md

@@ -1,30 +1,110 @@
 # kozou
 
-PostgreSQL compiler. One source, many faithful forms.
+CLI entry point for [Kozou](https://kozou.org): scaffolding,
+schema introspection, and MCP server hand-off. See *Kozou v0.1
+design spec* §9 for the command surface.
 
-Kozou reads a PostgreSQL schema once and produces every form a modern team and its AI need from it — admin UI, MCP context, TypeScript types, GraphQL endpoints, and documentation. No duplicate definitions. No drift.
+## Install
 
-## Status
+```bash
+# Global, so the bin entries are on PATH
+npm install -g kozou
 
-Pre-release (v0.0.x). Core architecture and public API are being designed. Source code and documentation will land in this package as development proceeds.
+# Or use npx without installing
+npx kozou inspect --help
 
-## Roadmap
+# `create-kozou` is a secondary bin shipped by the `kozou` package
+# (not a standalone npm package), so npx needs `-p kozou` to find
+# it on a machine that has not installed kozou globally yet.
+npx -p kozou create-kozou my-project
+```
 
-- v0.1: schema reader (DDL + comments + constraints)
-- v0.2: TypeScript type emitter
-- v0.3: MCP context emitter
-- v0.4: admin UI scaffolder
-- v0.5: GraphQL endpoint emitter
-- v0.6: documentation emitter
+The package publishes through `./dist/`. `bin` exposes two entries:
 
-## Name
+- `kozou` - the main multi-command CLI (`inspect` / `mcp` / `dev`)
+- `create-kozou` - scaffolds a project directory with
+  `docker-compose.yml`, `kozou.config.yaml`, `ui-hints.yaml`,
+  `env.example`, and a starter migration
 
-**Kozou** carries three meanings in three syllables:
+## Commands
 
-- **子象** (*kozō*) — the young elephant; the calf walking beside PostgreSQL's mascot Slonik
-- **構造** (*kōzō*) — structure; the structural transformation a compiler performs
-- **小僧** (*kozō*) — the apprentice; the quiet figure who serves something larger than itself
+### `kozou inspect`
+
+Introspects the configured PostgreSQL database and emits a Schema
+Context to stdout (or `--output <path>`):
+
+```bash
+DATABASE_URL=postgres://kozou:kozou@localhost:5432/kozou \
+  kozou inspect --format yaml > schema.yaml
+```
+
+### `kozou mcp --stdio`
+
+Starts an MCP server over stdio so Claude Code / other AI agents
+can call the introspect / describe-table tools:
+
+```bash
+DATABASE_URL=postgres://kozou:kozou@localhost:5432/kozou \
+  npx kozou mcp --stdio
+```
+
+The `${DATABASE_URL}` placeholder inside the bundled
+`kozou.config.yaml` template is what consumes that env var; the
+`kozou` CLI does not honor `KOZOU_DATABASE_URL` directly (an alias
+is on the roadmap). HTTP transport is available via
+`kozou mcp --http` (`--port` / `--host` configure the listener;
+stdio stays the default).
+
+### `kozou dev`
+
+Runs the bundled `@kozou/svelte-ui` Admin UI (adapter-node)
+alongside an MCP HTTP server, both wired up from
+`kozou.config.yaml`. The Admin UI listens on port 3333 and the MCP
+HTTP server on 3334 by default (override via `server.ui` /
+`server.mcp.http` in the config); `Ctrl-C` (SIGINT / SIGTERM)
+tears both down. This is the command behind the `kozou` service in
+the scaffolded `docker-compose.yml`.
+
+### `create-kozou <dir>`
+
+Scaffolds a project directory at `<dir>` from the templates
+bundled in `dist/templates/`:
+
+```bash
+npx -p kozou create-kozou my-project
+cd my-project
+cp .env.example .env
+docker compose up
+```
+
+The generated `docker-compose.yml` brings up PostgreSQL, PostgREST,
+and a `kozou` service that runs `kozou dev` to host the Admin UI +
+MCP HTTP server.
+
+## Configuration
+
+`kozou.config.yaml` (template in `dist/templates/`) drives every
+command:
+
+```yaml
+database:
+  url: ${DATABASE_URL}
+  schemas: [public]
+
+adapter:
+  type: postgrest
+  url: ${KOZOU_ADAPTER_URL:-http://postgrest:3000}
+
+uiHints:
+  path: ./ui-hints.yaml
+```
+
+The full schema also accepts `server.ui.{port,host}`,
+`server.mcp.http.{port,host}`, `server.mcp.stdio`, and
+`cache.ttlMs` overrides; defaults match the template that
+`create-kozou` writes. `${VAR}` and `${VAR:-default}` are
+expanded from the process environment at load time.
 
 ## License
 
-MIT
+Apache 2.0. See [LICENSE](../../LICENSE) at the repository root.

package/dist/cli.d.ts

@@ -0,0 +1,3 @@
+#!/usr/bin/env node
+export {};
+//# sourceMappingURL=cli.d.ts.map

package/dist/cli.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":""}

package/dist/cli.js

@@ -0,0 +1,54 @@
+#!/usr/bin/env node
+// `kozou` CLI entry point. Wires up the sub-commands defined in
+// Kozou v0.1 design spec §9.1 via commander.
+import { Command } from 'commander';
+import { inspectCommand } from './commands/inspect.js';
+import { mcpCommand } from './commands/mcp.js';
+import { devCommand } from './commands/dev.js';
+import { PACKAGE_VERSION } from './index.js';
+const program = new Command()
+    .name('kozou')
+    .description('PostgreSQL compiler. One source, many faithful forms. (Kozou v0.1 design spec §9)')
+    .version(PACKAGE_VERSION);
+program
+    .command('inspect')
+    .description('Dump the Schema Context as JSON or YAML.')
+    .option('--format <fmt>', 'output format: json | yaml', 'json')
+    .option('--output <path>', 'output file (- for stdout)', '-')
+    .option('--config <path>', 'path to kozou.config.yaml')
+    .action(async (flags) => {
+    await inspectCommand({
+        format: flags.format,
+        output: flags.output,
+        config: flags.config,
+    });
+});
+program
+    .command('mcp')
+    .description('Run the MCP server (--stdio default, or --http).')
+    .option('--stdio', 'use stdio transport (default)')
+    .option('--http', 'use Streamable HTTP transport')
+    .option('--port <n>', 'HTTP port (default 3334)', (raw) => parseInt(raw, 10))
+    .option('--host <host>', 'HTTP bind host (default 127.0.0.1)')
+    .option('--config <path>', 'path to kozou.config.yaml')
+    .action(async (flags) => {
+    await mcpCommand({
+        stdio: flags.stdio,
+        http: flags.http,
+        port: flags.port,
+        host: flags.host,
+        config: flags.config,
+    });
+});
+program
+    .command('dev')
+    .description('Run the bundled Admin UI + MCP HTTP dev server.')
+    .option('--config <path>', 'path to kozou.config.yaml')
+    .action(async (flags) => {
+    await devCommand({ config: flags.config });
+});
+program.parseAsync(process.argv).catch((err) => {
+    process.stderr.write(`${err instanceof Error ? err.message : String(err)}\n`);
+    process.exit(1);
+});
+//# sourceMappingURL=cli.js.map

package/dist/cli.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.js","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":";AACA,gEAAgE;AAChE,6CAA6C;AAE7C,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACvD,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAC/C,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAC/C,OAAO,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAoB7C,MAAM,OAAO,GAAG,IAAI,OAAO,EAAE;KAC1B,IAAI,CAAC,OAAO,CAAC;KACb,WAAW,CACV,mFAAmF,CACpF;KACA,OAAO,CAAC,eAAe,CAAC,CAAC;AAE5B,OAAO;KACJ,OAAO,CAAC,SAAS,CAAC;KAClB,WAAW,CAAC,0CAA0C,CAAC;KACvD,MAAM,CAAC,gBAAgB,EAAE,4BAA4B,EAAE,MAAM,CAAC;KAC9D,MAAM,CAAC,iBAAiB,EAAE,4BAA4B,EAAE,GAAG,CAAC;KAC5D,MAAM,CAAC,iBAAiB,EAAE,2BAA2B,CAAC;KACtD,MAAM,CAAC,KAAK,EAAE,KAAmB,EAAE,EAAE;IACpC,MAAM,cAAc,CAAC;QACnB,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,MAAM,EAAE,KAAK,CAAC,MAAM;KACrB,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEL,OAAO;KACJ,OAAO,CAAC,KAAK,CAAC;KACd,WAAW,CAAC,kDAAkD,CAAC;KAC/D,MAAM,CAAC,SAAS,EAAE,+BAA+B,CAAC;KAClD,MAAM,CAAC,QAAQ,EAAE,+BAA+B,CAAC;KACjD,MAAM,CAAC,YAAY,EAAE,0BAA0B,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,QAAQ,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;KAC5E,MAAM,CAAC,eAAe,EAAE,oCAAoC,CAAC;KAC7D,MAAM,CAAC,iBAAiB,EAAE,2BAA2B,CAAC;KACtD,MAAM,CAAC,KAAK,EAAE,KAAe,EAAE,EAAE;IAChC,MAAM,UAAU,CAAC;QACf,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,MAAM,EAAE,KAAK,CAAC,MAAM;KACrB,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEL,OAAO;KACJ,OAAO,CAAC,KAAK,CAAC;KACd,WAAW,CAAC,iDAAiD,CAAC;KAC9D,MAAM,CAAC,iBAAiB,EAAE,2BAA2B,CAAC;KACtD,MAAM,CAAC,KAAK,EAAE,KAAe,EAAE,EAAE;IAChC,MAAM,UAAU,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;AAC7C,CAAC,CAAC,CAAC;AAEL,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;IAC7C,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAC9E,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC"}

package/dist/commands/dev-runtime.d.ts

@@ -0,0 +1,5 @@
+import type { KozouConfig } from '../config.js';
+export declare function resolveAdminUiEntry(): string;
+export declare function resolveOrigin(config: KozouConfig, env: NodeJS.ProcessEnv): string;
+export declare function buildAdminUiEnv(config: KozouConfig, origin: string, baseEnv: NodeJS.ProcessEnv): NodeJS.ProcessEnv;
+//# sourceMappingURL=dev-runtime.d.ts.map

package/dist/commands/dev-runtime.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"dev-runtime.d.ts","sourceRoot":"","sources":["../../src/commands/dev-runtime.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAOhD,wBAAgB,mBAAmB,IAAI,MAAM,CAI5C;AAMD,wBAAgB,aAAa,CAAC,MAAM,EAAE,WAAW,EAAE,GAAG,EAAE,MAAM,CAAC,UAAU,GAAG,MAAM,CAEjF;AAID,wBAAgB,eAAe,CAC7B,MAAM,EAAE,WAAW,EACnB,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,MAAM,CAAC,UAAU,GACzB,MAAM,CAAC,UAAU,CAUnB"}

package/dist/commands/dev-runtime.js

@@ -0,0 +1,38 @@
+// Pure wiring helpers for `kozou dev` (see commands/dev.ts).
+//
+// Kept separate from the spawn / lifecycle shell in dev.ts so the
+// config -> child-process-env / origin / entry-path mapping can be unit
+// tested without launching any servers.
+import { createRequire } from 'node:module';
+import { dirname, join } from 'node:path';
+// Resolve the Admin UI's adapter-node standalone server entry. The
+// `build/` directory ships in @kozou/svelte-ui's published `files`, and
+// resolving the package's own package.json works whether kozou runs from
+// a flat node_modules tree (Docker / npm install) or a workspace symlink
+// (local dev).
+export function resolveAdminUiEntry() {
+    const require = createRequire(import.meta.url);
+    const pkgJsonPath = require.resolve('@kozou/svelte-ui/package.json');
+    return join(dirname(pkgJsonPath), 'build', 'index.js');
+}
+// The browser-facing origin the Admin UI must accept form posts from.
+// An explicit ORIGIN / KOZOU_ORIGIN wins; otherwise default to localhost
+// on the UI port (host stays 0.0.0.0 for binding, but browsers reach it
+// as localhost in the common single-host case).
+export function resolveOrigin(config, env) {
+    return env.ORIGIN ?? env.KOZOU_ORIGIN ?? `http://localhost:${config.server.ui.port}`;
+}
+// Build the child-process environment for the Admin UI server. Keeping
+// it pure makes the wiring unit-testable without spawning anything.
+export function buildAdminUiEnv(config, origin, baseEnv) {
+    return {
+        ...baseEnv,
+        DATABASE_URL: config.database.url,
+        KOZOU_ADAPTER_URL: config.adapter.url,
+        PORT: String(config.server.ui.port),
+        HOST: config.server.ui.host,
+        ORIGIN: origin,
+        NODE_ENV: 'production',
+    };
+}
+//# sourceMappingURL=dev-runtime.js.map

package/dist/commands/dev-runtime.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dev-runtime.js","sourceRoot":"","sources":["../../src/commands/dev-runtime.ts"],"names":[],"mappings":"AAAA,6DAA6D;AAC7D,EAAE;AACF,kEAAkE;AAClE,wEAAwE;AACxE,wCAAwC;AAExC,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAI1C,mEAAmE;AACnE,wEAAwE;AACxE,yEAAyE;AACzE,yEAAyE;AACzE,eAAe;AACf,MAAM,UAAU,mBAAmB;IACjC,MAAM,OAAO,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC/C,MAAM,WAAW,GAAG,OAAO,CAAC,OAAO,CAAC,+BAA+B,CAAC,CAAC;IACrE,OAAO,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,OAAO,EAAE,UAAU,CAAC,CAAC;AACzD,CAAC;AAED,sEAAsE;AACtE,yEAAyE;AACzE,wEAAwE;AACxE,gDAAgD;AAChD,MAAM,UAAU,aAAa,CAAC,MAAmB,EAAE,GAAsB;IACvE,OAAO,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,YAAY,IAAI,oBAAoB,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC;AACvF,CAAC;AAED,uEAAuE;AACvE,oEAAoE;AACpE,MAAM,UAAU,eAAe,CAC7B,MAAmB,EACnB,MAAc,EACd,OAA0B;IAE1B,OAAO;QACL,GAAG,OAAO;QACV,YAAY,EAAE,MAAM,CAAC,QAAQ,CAAC,GAAG;QACjC,iBAAiB,EAAE,MAAM,CAAC,OAAO,CAAC,GAAG;QACrC,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC;QACnC,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI;QAC3B,MAAM,EAAE,MAAM;QACd,QAAQ,EAAE,YAAY;KACvB,CAAC;AACJ,CAAC"}

package/dist/commands/dev.d.ts

@@ -0,0 +1,5 @@
+export type DevOptions = {
+    config?: string;
+};
+export declare function devCommand(opts?: DevOptions): Promise<void>;
+//# sourceMappingURL=dev.d.ts.map

package/dist/commands/dev.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"dev.d.ts","sourceRoot":"","sources":["../../src/commands/dev.ts"],"names":[],"mappings":"AA8BA,MAAM,MAAM,UAAU,GAAG;IACvB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB,CAAC;AAcF,wBAAsB,UAAU,CAAC,IAAI,GAAE,UAAe,GAAG,OAAO,CAAC,IAAI,CAAC,CA6ErE"}

package/dist/commands/dev.js

@@ -0,0 +1,96 @@
+// `kozou dev` command implementation.
+//
+// Brings up the full local runtime described in Kozou v0.1 spec §9.1:
+//   - the bundled @kozou/svelte-ui Admin UI, spawned as a child process
+//     (`node <svelte-ui>/build/index.js` — the adapter-node standalone
+//     server, the same entry the svelte-ui E2E suite exercises);
+//   - the MCP Streamable HTTP server, run in-process via @kozou/mcp's
+//     startHttpServer (spec §7.1).
+//
+// Both default to 0.0.0.0 (spec §9.1, so `docker compose` port mapping
+// works); a loud warning fires on a non-loopback bind because neither
+// surface authenticates in v0.1 (spec §18.5).
+//
+// The Admin UI is an adapter-node (SvelteKit) server: without ORIGIN it
+// assumes https and rejects every form POST over plain http with a 403.
+// We default ORIGIN to http://localhost:<ui-port>; override via the
+// ORIGIN / KOZOU_ORIGIN env when serving on a different public URL.
+import { spawn } from 'node:child_process';
+import { existsSync } from 'node:fs';
+import { SchemaCache, startHttpServer, isLoopbackHost } from '@kozou/mcp';
+import { loadConfig } from '../config.js';
+import { buildAdminUiEnv, resolveAdminUiEntry, resolveOrigin, } from './dev-runtime.js';
+const PREFIX = '[kozou dev]';
+function warnIfPublic(label, host) {
+    if (isLoopbackHost(host))
+        return;
+    process.stderr.write(`${PREFIX} WARNING: ${label} bound to non-loopback host "${host}".\n` +
+        `${PREFIX} v0.1 has NO authentication (spec §18.5). Anyone who can reach\n` +
+        `${PREFIX} ${host} can use it. This is expected inside docker compose;\n` +
+        `${PREFIX} avoid it on an untrusted network or put an auth proxy in front.\n`);
+}
+export async function devCommand(opts = {}) {
+    const config = await loadConfig({ path: opts.config });
+    const adminUiEntry = resolveAdminUiEntry();
+    if (!existsSync(adminUiEntry)) {
+        throw new Error(`${PREFIX} Admin UI build not found at ${adminUiEntry}. ` +
+            'Reinstall @kozou/svelte-ui (its `build/` output ships in the package), ' +
+            'or in a workspace checkout run `pnpm --filter @kozou/svelte-ui run build`.');
+    }
+    const cache = new SchemaCache({
+        connection: config.database.url,
+        schemas: config.database.schemas,
+        ttlMs: config.cache.ttlMs,
+    });
+    // 1. MCP HTTP, in-process. startHttpServer already warns on a
+    //    non-loopback bind, so we do not double-warn for it.
+    const mcp = await startHttpServer(cache, {
+        port: config.server.mcp.http.port,
+        host: config.server.mcp.http.host,
+        logPrefix: `${PREFIX} mcp`,
+    });
+    // 2. Admin UI, as a child process.
+    warnIfPublic('Admin UI', config.server.ui.host);
+    const origin = resolveOrigin(config, process.env);
+    const child = spawn('node', [adminUiEntry], {
+        env: buildAdminUiEnv(config, origin, process.env),
+        stdio: ['ignore', 'pipe', 'pipe'],
+    });
+    child.stdout?.on('data', (b) => process.stdout.write(`${PREFIX} ui | ${b}`));
+    child.stderr?.on('data', (b) => process.stderr.write(`${PREFIX} ui | ${b}`));
+    process.stderr.write(`${PREFIX} Admin UI on http://${config.server.ui.host}:${config.server.ui.port}` +
+        ` (origin ${origin})\n`);
+    // 3. Lifecycle: tear both down together. Resolve the promise (and thus
+    //    let the CLI exit) only once everything has stopped.
+    await new Promise((resolve) => {
+        let shuttingDown = false;
+        const shutdown = (reason) => {
+            if (shuttingDown)
+                return;
+            shuttingDown = true;
+            process.stderr.write(`${PREFIX} ${reason}, shutting down\n`);
+            if (child.exitCode === null && child.signalCode === null) {
+                child.kill('SIGTERM');
+            }
+            void mcp.close().finally(() => resolve());
+        };
+        process.on('SIGINT', () => shutdown('SIGINT received'));
+        process.on('SIGTERM', () => shutdown('SIGTERM received'));
+        child.on('exit', (code, signal) => {
+            if (shuttingDown)
+                return;
+            // The Admin UI process died on its own — surface its exit status
+            // and bring the MCP server down with it.
+            process.stderr.write(`${PREFIX} Admin UI exited (code=${code ?? 'null'}, signal=${signal ?? 'null'})\n`);
+            process.exitCode = code ?? 1;
+            shuttingDown = true;
+            void mcp.close().finally(() => resolve());
+        });
+        child.on('error', (err) => {
+            process.stderr.write(`${PREFIX} failed to spawn Admin UI: ${err.message}\n`);
+            process.exitCode = 1;
+            shutdown('spawn error');
+        });
+    });
+}
+//# sourceMappingURL=dev.js.map

package/dist/commands/dev.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dev.js","sourceRoot":"","sources":["../../src/commands/dev.ts"],"names":[],"mappings":"AAAA,sCAAsC;AACtC,EAAE;AACF,sEAAsE;AACtE,wEAAwE;AACxE,uEAAuE;AACvE,iEAAiE;AACjE,sEAAsE;AACtE,mCAAmC;AACnC,EAAE;AACF,uEAAuE;AACvE,sEAAsE;AACtE,8CAA8C;AAC9C,EAAE;AACF,wEAAwE;AACxE,wEAAwE;AACxE,oEAAoE;AACpE,oEAAoE;AAEpE,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAC3C,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAErC,OAAO,EAAE,WAAW,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAE1E,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAC1C,OAAO,EACL,eAAe,EACf,mBAAmB,EACnB,aAAa,GACd,MAAM,kBAAkB,CAAC;AAM1B,MAAM,MAAM,GAAG,aAAa,CAAC;AAE7B,SAAS,YAAY,CAAC,KAAa,EAAE,IAAY;IAC/C,IAAI,cAAc,CAAC,IAAI,CAAC;QAAE,OAAO;IACjC,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,GAAG,MAAM,aAAa,KAAK,gCAAgC,IAAI,MAAM;QACnE,GAAG,MAAM,kEAAkE;QAC3E,GAAG,MAAM,IAAI,IAAI,wDAAwD;QACzE,GAAG,MAAM,oEAAoE,CAChF,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,OAAmB,EAAE;IACpD,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;IAEvD,MAAM,YAAY,GAAG,mBAAmB,EAAE,CAAC;IAC3C,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;QAC9B,MAAM,IAAI,KAAK,CACb,GAAG,MAAM,gCAAgC,YAAY,IAAI;YACvD,yEAAyE;YACzE,4EAA4E,CAC/E,CAAC;IACJ,CAAC;IAED,MAAM,KAAK,GAAG,IAAI,WAAW,CAAC;QAC5B,UAAU,EAAE,MAAM,CAAC,QAAQ,CAAC,GAAG;QAC/B,OAAO,EAAE,MAAM,CAAC,QAAQ,CAAC,OAAO;QAChC,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,KAAK;KAC1B,CAAC,CAAC;IAEH,8DAA8D;IAC9D,yDAAyD;IACzD,MAAM,GAAG,GAAG,MAAM,eAAe,CAAC,KAAK,EAAE;QACvC,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI;QACjC,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI;QACjC,SAAS,EAAE,GAAG,MAAM,MAAM;KAC3B,CAAC,CAAC;IAEH,mCAAmC;IACnC,YAAY,CAAC,UAAU,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC;IAChD,MAAM,MAAM,GAAG,aAAa,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC;IAClD,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,YAAY,CAAC,EAAE;QAC1C,GAAG,EAAE,eAAe,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC;QACjD,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC;KAClC,CAAC,CAAC;IACH,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,CAAS,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,MAAM,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC;IACrF,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,CAAS,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,MAAM,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC;IAErF,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,GAAG,MAAM,uBAAuB,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,IAAI,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,EAAE;QAC9E,YAAY,MAAM,KAAK,CAC1B,CAAC;IAEF,uEAAuE;IACvE,yDAAyD;IACzD,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;QAClC,IAAI,YAAY,GAAG,KAAK,CAAC;QAEzB,MAAM,QAAQ,GAAG,CAAC,MAAc,EAAQ,EAAE;YACxC,IAAI,YAAY;gBAAE,OAAO;YACzB,YAAY,GAAG,IAAI,CAAC;YACpB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,MAAM,IAAI,MAAM,mBAAmB,CAAC,CAAC;YAC7D,IAAI,KAAK,CAAC,QAAQ,KAAK,IAAI,IAAI,KAAK,CAAC,UAAU,KAAK,IAAI,EAAE,CAAC;gBACzD,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YACxB,CAAC;YACD,KAAK,GAAG,CAAC,KAAK,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;QAC5C,CAAC,CAAC;QAEF,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,iBAAiB,CAAC,CAAC,CAAC;QACxD,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,kBAAkB,CAAC,CAAC,CAAC;QAE1D,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE;YAChC,IAAI,YAAY;gBAAE,OAAO;YACzB,iEAAiE;YACjE,yCAAyC;YACzC,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,GAAG,MAAM,0BAA0B,IAAI,IAAI,MAAM,YAAY,MAAM,IAAI,MAAM,KAAK,CACnF,CAAC;YACF,OAAO,CAAC,QAAQ,GAAG,IAAI,IAAI,CAAC,CAAC;YAC7B,YAAY,GAAG,IAAI,CAAC;YACpB,KAAK,GAAG,CAAC,KAAK,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;QAC5C,CAAC,CAAC,CAAC;QAEH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;YACxB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,MAAM,8BAA8B,GAAG,CAAC,OAAO,IAAI,CAAC,CAAC;YAC7E,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;YACrB,QAAQ,CAAC,aAAa,CAAC,CAAC;QAC1B,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/commands/inspect.d.ts

@@ -0,0 +1,10 @@
+export type InspectOptions = {
+    /** Output format. Default: 'json'. */
+    format?: 'json' | 'yaml';
+    /** Output destination. '-' = stdout (default), otherwise a file path. */
+    output?: string;
+    /** Path to kozou.config.yaml. Default: ./kozou.config.yaml. */
+    config?: string;
+};
+export declare function inspectCommand(opts?: InspectOptions): Promise<void>;
+//# sourceMappingURL=inspect.d.ts.map

package/dist/commands/inspect.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"inspect.d.ts","sourceRoot":"","sources":["../../src/commands/inspect.ts"],"names":[],"mappings":"AAkBA,MAAM,MAAM,cAAc,GAAG;IAC3B,sCAAsC;IACtC,MAAM,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IACzB,yEAAyE;IACzE,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,+DAA+D;IAC/D,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB,CAAC;AAEF,wBAAsB,cAAc,CAAC,IAAI,GAAE,cAAmB,GAAG,OAAO,CAAC,IAAI,CAAC,CAkC7E"}