kozou 0.1.0 → 0.2.0

package/dist/commands/dev.js

@@ -1,21 +1,172 @@
 // `kozou dev` command implementation.
 //
-// In v0.1 this is a deliberate stub: the Admin UI (`@kozou/svelte-ui`) is
-// scheduled for v0.1.1 per the Kozou v0.1 design spec §16.1.1 B, so there is nothing for the
-// dev server to host yet. Until the UI lands, we print a hand-off message
-// pointing adopters at `kozou mcp --stdio` for AI agent access.
-const DEV_HANDOFF_MESSAGE = 'kozou dev: the bundled Admin UI is scheduled for v0.1.1.\n' +
-    '  See Kozou v0.1 design spec §16.1.1 B for the roadmap and §8 for the\n' +
-    '  @kozou/svelte-ui specification.\n' +
-    '\n' +
-    '  Available today:\n' +
-    '    kozou mcp --stdio   Run the MCP server for AI agent access.\n' +
-    '    kozou inspect       Dump the Schema Context as JSON or YAML.\n';
-// The leading underscore on `_opts` flags this as a deliberately ignored
-// parameter (eslint argsIgnorePattern: ^_). The full DevOptions shape is
-// kept in the signature so it matches the v0.1.1 implementation that
-// will actually consume the config.
-export async function devCommand(_opts = {}) {
-    process.stderr.write(DEV_HANDOFF_MESSAGE);
+// Brings up the full local runtime described in Kozou v0.1 spec §9.1:
+//   - the bundled @kozou/svelte-ui Admin UI, spawned as a child process
+//     (`node <svelte-ui>/build/index.js` — the adapter-node standalone
+//     server, the same entry the svelte-ui E2E suite exercises);
+//   - the MCP Streamable HTTP server, run in-process via @kozou/mcp's
+//     startHttpServer (spec §7.1).
+//
+// Both default to 0.0.0.0 (spec §9.1, so `docker compose` port mapping
+// works); a loud warning fires on a non-loopback bind because neither
+// surface authenticates in v0.1 (spec §18.5).
+//
+// The Admin UI is an adapter-node (SvelteKit) server: without ORIGIN it
+// assumes https and rejects every form POST over plain http with a 403.
+// We default ORIGIN to http://localhost:<ui-port>; override via the
+// ORIGIN / KOZOU_ORIGIN env when serving on a different public URL.
+import { spawn } from 'node:child_process';
+import { existsSync } from 'node:fs';
+import { SchemaCache, startHttpServer, isLoopbackHost } from '@kozou/mcp';
+import { loadConfig } from '../config.js';
+import { buildAdminUiEnv, resolveAdminUiEntry, resolveAdminUiToken, resolveOrigin, } from './dev-runtime.js';
+const PREFIX = '[kozou dev]';
+// The in-house @kozou/api server is reached only by the Admin UI's
+// server-side fetch (same host), so bind it to loopback — no need to
+// expose it to the browser or the network.
+const API_HOST = '127.0.0.1';
+const DEFAULT_API_PORT = 3335;
+// Start the in-house @kozou/api server in-process: introspect the
+// configured database, build its SchemaContext, and serve it over a pg
+// pool. @kozou/api is an experimental, unpublished workspace package, so
+// it is imported dynamically and is only resolvable from a source /
+// workspace checkout — a published `kozou` install gets a clear error.
+async function startInhouseApi(config, port) {
+    let apiModule;
+    try {
+        apiModule = await import('@kozou/api');
+    }
+    catch {
+        throw new Error(`${PREFIX} --adapter api needs the experimental @kozou/api package, which is ` +
+            'not bundled in this release. Run kozou from a source / workspace checkout ' +
+            'to use it, or drop --adapter api to use the default REST adapter.');
+    }
+    const { introspect } = await import('@kozou/introspect');
+    const { buildSchemaContext } = await import('@kozou/core');
+    const { default: pg } = await import('pg');
+    const raw = await introspect({
+        connection: config.database.url,
+        schemas: config.database.schemas,
+    });
+    const schema = await buildSchemaContext({ raw });
+    const pool = new pg.Pool({ connectionString: config.database.url });
+    const server = await apiModule.startApiServer({
+        schema,
+        db: { query: (text, values) => pool.query(text, values) },
+        // When `auth` is configured the API verifies a JWT and runs each request
+        // under SET LOCAL ROLE, which needs a dedicated client per request — pass
+        // the pool. With no `auth`, the pool is unused and the API stays
+        // unauthenticated (loopback-only), exactly as before.
+        pool,
+        auth: config.auth,
+        host: API_HOST,
+        port,
+        logPrefix: `${PREFIX} api`,
+    });
+    return {
+        url: `http://${API_HOST}:${server.port}`,
+        close: async () => {
+            await server.close();
+            await pool.end();
+        },
+    };
+}
+function warnIfPublic(label, host) {
+    if (isLoopbackHost(host))
+        return;
+    process.stderr.write(`${PREFIX} WARNING: ${label} bound to non-loopback host "${host}".\n` +
+        `${PREFIX} v0.1 has NO authentication (spec §18.5). Anyone who can reach\n` +
+        `${PREFIX} ${host} can use it. This is expected inside docker compose;\n` +
+        `${PREFIX} avoid it on an untrusted network or put an auth proxy in front.\n`);
+}
+export async function devCommand(opts = {}) {
+    if (opts.adapter !== undefined && opts.adapter !== 'api') {
+        throw new Error(`${PREFIX} unknown --adapter "${opts.adapter}" ` +
+            '(the only supported value is "api"; omit it for the default REST adapter).');
+    }
+    const config = await loadConfig({ path: opts.config });
+    const adminUiEntry = resolveAdminUiEntry();
+    if (!existsSync(adminUiEntry)) {
+        throw new Error(`${PREFIX} Admin UI build not found at ${adminUiEntry}. ` +
+            'Reinstall @kozou/svelte-ui (its `build/` output ships in the package), ' +
+            'or in a workspace checkout run `pnpm --filter @kozou/svelte-ui run build`.');
+    }
+    // Optional in-house @kozou/api backend (--adapter api), started before
+    // the other servers so its URL can be wired into the UI environment.
+    const api = opts.adapter === 'api'
+        ? await startInhouseApi(config, opts.apiPort ?? DEFAULT_API_PORT)
+        : null;
+    if (api) {
+        process.stderr.write(`${PREFIX} in-house @kozou/api on ${api.url}\n`);
+    }
+    // When the in-house API enforces auth, resolve the token the bundled Admin
+    // UI presents to it: a minted HS256 token, a supplied RS256 / external one,
+    // or none (with a warning) when neither is available. @kozou/api is already
+    // imported (startInhouseApi succeeded), so this dynamic import is cached.
+    let apiToken;
+    if (api && config.auth) {
+        const apiModule = await import('@kozou/api');
+        const resolved = await resolveAdminUiToken(config, apiModule, process.env);
+        if (resolved.warning) {
+            process.stderr.write(`${PREFIX} WARNING: ${resolved.warning}\n`);
+        }
+        apiToken = resolved.token;
+    }
+    const cache = new SchemaCache({
+        connection: config.database.url,
+        schemas: config.database.schemas,
+        ttlMs: config.cache.ttlMs,
+    });
+    // 1. MCP HTTP, in-process. startHttpServer already warns on a
+    //    non-loopback bind, so we do not double-warn for it.
+    const mcp = await startHttpServer(cache, {
+        port: config.server.mcp.http.port,
+        host: config.server.mcp.http.host,
+        logPrefix: `${PREFIX} mcp`,
+    });
+    // 2. Admin UI, as a child process.
+    warnIfPublic('Admin UI', config.server.ui.host);
+    const origin = resolveOrigin(config, process.env);
+    const child = spawn('node', [adminUiEntry], {
+        env: buildAdminUiEnv(config, origin, process.env, api?.url, apiToken),
+        stdio: ['ignore', 'pipe', 'pipe'],
+    });
+    child.stdout?.on('data', (b) => process.stdout.write(`${PREFIX} ui | ${b}`));
+    child.stderr?.on('data', (b) => process.stderr.write(`${PREFIX} ui | ${b}`));
+    process.stderr.write(`${PREFIX} Admin UI on http://${config.server.ui.host}:${config.server.ui.port}` +
+        ` (origin ${origin})\n`);
+    // 3. Lifecycle: tear everything down together. Resolve the promise (and
+    //    thus let the CLI exit) only once everything has stopped.
+    const closeBackends = () => Promise.allSettled([mcp.close(), api ? api.close() : Promise.resolve()]);
+    await new Promise((resolve) => {
+        let shuttingDown = false;
+        const shutdown = (reason) => {
+            if (shuttingDown)
+                return;
+            shuttingDown = true;
+            process.stderr.write(`${PREFIX} ${reason}, shutting down\n`);
+            if (child.exitCode === null && child.signalCode === null) {
+                child.kill('SIGTERM');
+            }
+            void closeBackends().finally(() => resolve());
+        };
+        process.on('SIGINT', () => shutdown('SIGINT received'));
+        process.on('SIGTERM', () => shutdown('SIGTERM received'));
+        child.on('exit', (code, signal) => {
+            if (shuttingDown)
+                return;
+            // The Admin UI process died on its own — surface its exit status
+            // and bring the MCP server down with it.
+            process.stderr.write(`${PREFIX} Admin UI exited (code=${code ?? 'null'}, signal=${signal ?? 'null'})\n`);
+            process.exitCode = code ?? 1;
+            shuttingDown = true;
+            void closeBackends().finally(() => resolve());
+        });
+        child.on('error', (err) => {
+            process.stderr.write(`${PREFIX} failed to spawn Admin UI: ${err.message}\n`);
+            process.exitCode = 1;
+            shutdown('spawn error');
+        });
+    });
 }
 //# sourceMappingURL=dev.js.map

package/dist/commands/dev.js.map

@@ -1 +1 @@
-{"version":3,"file":"dev.js","sourceRoot":"","sources":["../../src/commands/dev.ts"],"names":[],"mappings":"AAAA,sCAAsC;AACtC,EAAE;AACF,0EAA0E;AAC1E,6FAA6F;AAC7F,0EAA0E;AAC1E,gEAAgE;AAMhE,MAAM,mBAAmB,GACvB,4DAA4D;IAC5D,yEAAyE;IACzE,qCAAqC;IACrC,IAAI;IACJ,sBAAsB;IACtB,mEAAmE;IACnE,oEAAoE,CAAC;AAEvE,yEAAyE;AACzE,yEAAyE;AACzE,qEAAqE;AACrE,oCAAoC;AACpC,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,QAAoB,EAAE;IACrD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC;AAC5C,CAAC"}
+{"version":3,"file":"dev.js","sourceRoot":"","sources":["../../src/commands/dev.ts"],"names":[],"mappings":"AAAA,sCAAsC;AACtC,EAAE;AACF,sEAAsE;AACtE,wEAAwE;AACxE,uEAAuE;AACvE,iEAAiE;AACjE,sEAAsE;AACtE,mCAAmC;AACnC,EAAE;AACF,uEAAuE;AACvE,sEAAsE;AACtE,8CAA8C;AAC9C,EAAE;AACF,wEAAwE;AACxE,wEAAwE;AACxE,oEAAoE;AACpE,oEAAoE;AAEpE,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAC3C,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAErC,OAAO,EAAE,WAAW,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAE1E,OAAO,EAAE,UAAU,EAAoB,MAAM,cAAc,CAAC;AAC5D,OAAO,EACL,eAAe,EACf,mBAAmB,EACnB,mBAAmB,EACnB,aAAa,GACd,MAAM,kBAAkB,CAAC;AAU1B,MAAM,MAAM,GAAG,aAAa,CAAC;AAE7B,mEAAmE;AACnE,qEAAqE;AACrE,2CAA2C;AAC3C,MAAM,QAAQ,GAAG,WAAW,CAAC;AAC7B,MAAM,gBAAgB,GAAG,IAAI,CAAC;AAI9B,kEAAkE;AAClE,uEAAuE;AACvE,yEAAyE;AACzE,oEAAoE;AACpE,uEAAuE;AACvE,KAAK,UAAU,eAAe,CAAC,MAAmB,EAAE,IAAY;IAC9D,IAAI,SAAsC,CAAC;IAC3C,IAAI,CAAC;QACH,SAAS,GAAG,MAAM,MAAM,CAAC,YAAY,CAAC,CAAC;IACzC,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CACb,GAAG,MAAM,qEAAqE;YAC5E,4EAA4E;YAC5E,mEAAmE,CACtE,CAAC;IACJ,CAAC;IAED,MAAM,EAAE,UAAU,EAAE,GAAG,MAAM,MAAM,CAAC,mBAAmB,CAAC,CAAC;IACzD,MAAM,EAAE,kBAAkB,EAAE,GAAG,MAAM,MAAM,CAAC,aAAa,CAAC,CAAC;IAC3D,MAAM,EAAE,OAAO,EAAE,EAAE,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC;IAE3C,MAAM,GAAG,GAAG,MAAM,UAAU,CAAC;QAC3B,UAAU,EAAE,MAAM,CAAC,QAAQ,CAAC,GAAG;QAC/B,OAAO,EAAE,MAAM,CAAC,QAAQ,CAAC,OAAO;KACjC,CAAC,CAAC;IACH,MAAM,MAAM,GAAG,MAAM,kBAAkB,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC;IACjD,MAAM,IAAI,GAAG,IAAI,EAAE,CAAC,IAAI,CAAC,EAAE,gBAAgB,EAAE,MAAM,CAAC,QAAQ,CAAC,GAAG,EAAE,CAAC,CAAC;IACpE,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,cAAc,CAAC;QAC5C,MAAM;QACN,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,IAAY,EAAE,MAAkB,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE;QAC7E,yEAAyE;QACzE,0EAA0E;QAC1E,iEAAiE;QACjE,sDAAsD;QACtD,IAAI;QACJ,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,IAAI,EAAE,QAAQ;QACd,IAAI;QACJ,SAAS,EAAE,GAAG,MAAM,MAAM;KAC3B,CAAC,CAAC;IAEH,OAAO;QACL,GAAG,EAAE,UAAU,QAAQ,IAAI,MAAM,CAAC,IAAI,EAAE;QACxC,KAAK,EAAE,KAAK,IAAI,EAAE;YAChB,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;YACrB,MAAM,IAAI,CAAC,GAAG,EAAE,CAAC;QACnB,CAAC;KACF,CAAC;AACJ,CAAC;AAED,SAAS,YAAY,CAAC,KAAa,EAAE,IAAY;IAC/C,IAAI,cAAc,CAAC,IAAI,CAAC;QAAE,OAAO;IACjC,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,GAAG,MAAM,aAAa,KAAK,gCAAgC,IAAI,MAAM;QACnE,GAAG,MAAM,kEAAkE;QAC3E,GAAG,MAAM,IAAI,IAAI,wDAAwD;QACzE,GAAG,MAAM,oEAAoE,CAChF,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,OAAmB,EAAE;IACpD,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS,IAAI,IAAI,CAAC,OAAO,KAAK,KAAK,EAAE,CAAC;QACzD,MAAM,IAAI,KAAK,CACb,GAAG,MAAM,uBAAuB,IAAI,CAAC,OAAO,IAAI;YAC9C,4EAA4E,CAC/E,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;IAEvD,MAAM,YAAY,GAAG,mBAAmB,EAAE,CAAC;IAC3C,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;QAC9B,MAAM,IAAI,KAAK,CACb,GAAG,MAAM,gCAAgC,YAAY,IAAI;YACvD,yEAAyE;YACzE,4EAA4E,CAC/E,CAAC;IACJ,CAAC;IAED,uEAAuE;IACvE,qEAAqE;IACrE,MAAM,GAAG,GACP,IAAI,CAAC,OAAO,KAAK,KAAK;QACpB,CAAC,CAAC,MAAM,eAAe,CAAC,MAAM,EAAE,IAAI,CAAC,OAAO,IAAI,gBAAgB,CAAC;QACjE,CAAC,CAAC,IAAI,CAAC;IACX,IAAI,GAAG,EAAE,CAAC;QACR,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,MAAM,2BAA2B,GAAG,CAAC,GAAG,IAAI,CAAC,CAAC;IACxE,CAAC;IAED,2EAA2E;IAC3E,4EAA4E;IAC5E,4EAA4E;IAC5E,0EAA0E;IAC1E,IAAI,QAA4B,CAAC;IACjC,IAAI,GAAG,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC;QACvB,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,YAAY,CAAC,CAAC;QAC7C,MAAM,QAAQ,GAAG,MAAM,mBAAmB,CAAC,MAAM,EAAE,SAAS,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC;QAC3E,IAAI,QAAQ,CAAC,OAAO,EAAE,CAAC;YACrB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,MAAM,aAAa,QAAQ,CAAC,OAAO,IAAI,CAAC,CAAC;QACnE,CAAC;QACD,QAAQ,GAAG,QAAQ,CAAC,KAAK,CAAC;IAC5B,CAAC;IAED,MAAM,KAAK,GAAG,IAAI,WAAW,CAAC;QAC5B,UAAU,EAAE,MAAM,CAAC,QAAQ,CAAC,GAAG;QAC/B,OAAO,EAAE,MAAM,CAAC,QAAQ,CAAC,OAAO;QAChC,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,KAAK;KAC1B,CAAC,CAAC;IAEH,8DAA8D;IAC9D,yDAAyD;IACzD,MAAM,GAAG,GAAG,MAAM,eAAe,CAAC,KAAK,EAAE;QACvC,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI;QACjC,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI;QACjC,SAAS,EAAE,GAAG,MAAM,MAAM;KAC3B,CAAC,CAAC;IAEH,mCAAmC;IACnC,YAAY,CAAC,UAAU,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC;IAChD,MAAM,MAAM,GAAG,aAAa,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC;IAClD,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,YAAY,CAAC,EAAE;QAC1C,GAAG,EAAE,eAAe,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,QAAQ,CAAC;QACrE,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC;KAClC,CAAC,CAAC;IACH,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,CAAS,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,MAAM,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC;IACrF,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,CAAS,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,MAAM,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC;IAErF,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,GAAG,MAAM,uBAAuB,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,IAAI,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,EAAE;QAC9E,YAAY,MAAM,KAAK,CAC1B,CAAC;IAEF,wEAAwE;IACxE,8DAA8D;IAC9D,MAAM,aAAa,GAAG,GAAqB,EAAE,CAC3C,OAAO,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;IAE3E,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;QAClC,IAAI,YAAY,GAAG,KAAK,CAAC;QAEzB,MAAM,QAAQ,GAAG,CAAC,MAAc,EAAQ,EAAE;YACxC,IAAI,YAAY;gBAAE,OAAO;YACzB,YAAY,GAAG,IAAI,CAAC;YACpB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,MAAM,IAAI,MAAM,mBAAmB,CAAC,CAAC;YAC7D,IAAI,KAAK,CAAC,QAAQ,KAAK,IAAI,IAAI,KAAK,CAAC,UAAU,KAAK,IAAI,EAAE,CAAC;gBACzD,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YACxB,CAAC;YACD,KAAK,aAAa,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;QAChD,CAAC,CAAC;QAEF,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,iBAAiB,CAAC,CAAC,CAAC;QACxD,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,kBAAkB,CAAC,CAAC,CAAC;QAE1D,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE;YAChC,IAAI,YAAY;gBAAE,OAAO;YACzB,iEAAiE;YACjE,yCAAyC;YACzC,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,GAAG,MAAM,0BAA0B,IAAI,IAAI,MAAM,YAAY,MAAM,IAAI,MAAM,KAAK,CACnF,CAAC;YACF,OAAO,CAAC,QAAQ,GAAG,IAAI,IAAI,CAAC,CAAC;YAC7B,YAAY,GAAG,IAAI,CAAC;YACpB,KAAK,aAAa,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;QAChD,CAAC,CAAC,CAAC;QAEH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;YACxB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,MAAM,8BAA8B,GAAG,CAAC,OAAO,IAAI,CAAC,CAAC;YAC7E,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;YACrB,QAAQ,CAAC,aAAa,CAAC,CAAC;QAC1B,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/commands/docs.d.ts

@@ -0,0 +1,8 @@
+export type DocsOptions = {
+    /** Output destination. '-' = stdout (default), otherwise a file path. */
+    output?: string;
+    /** Path to kozou.config.yaml. Default: ./kozou.config.yaml. */
+    config?: string;
+};
+export declare function docsCommand(opts?: DocsOptions): Promise<void>;
+//# sourceMappingURL=docs.d.ts.map

package/dist/commands/docs.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"docs.d.ts","sourceRoot":"","sources":["../../src/commands/docs.ts"],"names":[],"mappings":"AAoBA,MAAM,MAAM,WAAW,GAAG;IACxB,yEAAyE;IACzE,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,+DAA+D;IAC/D,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB,CAAC;AAEF,wBAAsB,WAAW,CAAC,IAAI,GAAE,WAAgB,GAAG,OAAO,CAAC,IAAI,CAAC,CA8BvE"}

package/dist/commands/docs.js

@@ -0,0 +1,44 @@
+// `kozou docs` command implementation.
+//
+// Pipeline (mirrors `kozou inspect`):
+//   1. Load the kozou.config.yaml (or fall back to defaults).
+//   2. Introspect the target Postgres schema (@kozou/introspect).
+//   3. Optionally load UI hints (@kozou/core.loadUIHints).
+//   4. Build a SchemaContext (@kozou/core.buildSchemaContext).
+//   5. Render a Markdown schema document and write it out.
+//
+// See product_architecture_v3 §3.4 (the "docs" emit target).
+import { writeFile } from 'node:fs/promises';
+import { buildSchemaContext, loadUIHints } from '@kozou/core';
+import { introspect } from '@kozou/introspect';
+import { loadConfig } from '../config.js';
+import { emitMarkdown } from '../docs.js';
+const PREFIX = '[kozou docs]';
+export async function docsCommand(opts = {}) {
+    const output = opts.output ?? '-';
+    const config = await loadConfig({ path: opts.config });
+    const raw = await introspect({
+        connection: config.database.url,
+        schemas: config.database.schemas,
+    });
+    let uiHints;
+    if (config.uiHints.path !== null && config.uiHints.path !== '') {
+        try {
+            uiHints = await loadUIHints(config.uiHints.path);
+        }
+        catch (err) {
+            // UI hints are optional; warn but continue without them.
+            const message = err instanceof Error ? err.message : String(err);
+            process.stderr.write(`${PREFIX} could not load UI hints: ${message}\n`);
+        }
+    }
+    const ctx = await buildSchemaContext({ raw, uiHints });
+    const serialized = emitMarkdown(ctx);
+    const payload = serialized.endsWith('\n') ? serialized : serialized + '\n';
+    if (output === '-') {
+        process.stdout.write(payload);
+        return;
+    }
+    await writeFile(output, payload, 'utf8');
+}
+//# sourceMappingURL=docs.js.map

package/dist/commands/docs.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"docs.js","sourceRoot":"","sources":["../../src/commands/docs.ts"],"names":[],"mappings":"AAAA,uCAAuC;AACvC,EAAE;AACF,sCAAsC;AACtC,8DAA8D;AAC9D,kEAAkE;AAClE,2DAA2D;AAC3D,+DAA+D;AAC/D,2DAA2D;AAC3D,EAAE;AACF,6DAA6D;AAE7D,OAAO,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC7C,OAAO,EAAE,kBAAkB,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAE9D,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAC/C,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAC1C,OAAO,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAE1C,MAAM,MAAM,GAAG,cAAc,CAAC;AAS9B,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,OAAoB,EAAE;IACtD,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,GAAG,CAAC;IAElC,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;IAEvD,MAAM,GAAG,GAAG,MAAM,UAAU,CAAC;QAC3B,UAAU,EAAE,MAAM,CAAC,QAAQ,CAAC,GAAG;QAC/B,OAAO,EAAE,MAAM,CAAC,QAAQ,CAAC,OAAO;KACjC,CAAC,CAAC;IAEH,IAAI,OAA4B,CAAC;IACjC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,KAAK,IAAI,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,KAAK,EAAE,EAAE,CAAC;QAC/D,IAAI,CAAC;YACH,OAAO,GAAG,MAAM,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACnD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,yDAAyD;YACzD,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACjE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,MAAM,6BAA6B,OAAO,IAAI,CAAC,CAAC;QAC1E,CAAC;IACH,CAAC;IAED,MAAM,GAAG,GAAG,MAAM,kBAAkB,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC;IACvD,MAAM,UAAU,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;IACrC,MAAM,OAAO,GAAG,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,UAAU,GAAG,IAAI,CAAC;IAE3E,IAAI,MAAM,KAAK,GAAG,EAAE,CAAC;QACnB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAC9B,OAAO;IACT,CAAC;IACD,MAAM,SAAS,CAAC,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;AAC3C,CAAC"}

package/dist/commands/mcp.d.ts

@@ -2,6 +2,7 @@ export type McpOptions = {
     stdio?: boolean;
     http?: boolean;
     port?: number;
+    host?: string;
     config?: string;
 };
 export declare function mcpCommand(opts?: McpOptions): Promise<void>;

package/dist/commands/mcp.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"mcp.d.ts","sourceRoot":"","sources":["../../src/commands/mcp.ts"],"names":[],"mappings":"AAYA,MAAM,MAAM,UAAU,GAAG;IACvB,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB,CAAC;AAOF,wBAAsB,UAAU,CAAC,IAAI,GAAE,UAAe,GAAG,OAAO,CAAC,IAAI,CAAC,CAiBrE"}
+{"version":3,"file":"mcp.d.ts","sourceRoot":"","sources":["../../src/commands/mcp.ts"],"names":[],"mappings":"AAaA,MAAM,MAAM,UAAU,GAAG;IACvB,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB,CAAC;AAEF,wBAAsB,UAAU,CAAC,IAAI,GAAE,UAAe,GAAG,OAAO,CAAC,IAAI,CAAC,CAmBrE"}

package/dist/commands/mcp.js

@@ -2,28 +2,28 @@
 //
 // --stdio: spins up the @kozou/mcp server with a stdio transport, reading
 //   connection details from kozou.config.yaml / environment.
-// --http: deferred to v0.1.1 per the Kozou v0.1 design spec §16.1.1 B.
-//   Prints a hand-off note to stderr and exits cleanly.
+// --http: spins up the @kozou/mcp server with the Streamable HTTP
+//   transport (Kozou v0.1 spec §7.1), binding to localhost by default and
+//   exposing POST /admin/refresh for cache invalidation (§7.5).
 //
 // See Kozou v0.1 design spec §9.1 and §7.
-import { SchemaCache, startStdioServer } from '@kozou/mcp';
+import { SchemaCache, startHttpServer, startStdioServer } from '@kozou/mcp';
 import { loadConfig } from '../config.js';
-const HTTP_HANDOFF_MESSAGE = 'kozou mcp --http: HTTP transport is scheduled for v0.1.1.\n' +
-    '  See Kozou v0.1 design spec §16.1.1 B for the roadmap.\n' +
-    '  Use --stdio for now (the default).\n';
 export async function mcpCommand(opts = {}) {
-    // --http is deferred to v0.1.1 (HTTP transport not yet implemented in
-    // the underlying @kozou/mcp package).
-    if (opts.http === true) {
-        process.stderr.write(HTTP_HANDOFF_MESSAGE);
-        return;
-    }
     const config = await loadConfig({ path: opts.config });
     const cache = new SchemaCache({
         connection: config.database.url,
         schemas: config.database.schemas,
         ttlMs: config.cache.ttlMs,
     });
+    if (opts.http === true) {
+        await startHttpServer(cache, {
+            port: opts.port,
+            host: opts.host,
+            logPrefix: '[kozou mcp]',
+        });
+        return;
+    }
     await startStdioServer(cache, { logPrefix: '[kozou mcp]' });
 }
 //# sourceMappingURL=mcp.js.map

package/dist/commands/mcp.js.map

@@ -1 +1 @@
-{"version":3,"file":"mcp.js","sourceRoot":"","sources":["../../src/commands/mcp.ts"],"names":[],"mappings":"AAAA,sCAAsC;AACtC,EAAE;AACF,0EAA0E;AAC1E,6DAA6D;AAC7D,uEAAuE;AACvE,wDAAwD;AACxD,EAAE;AACF,0CAA0C;AAE1C,OAAO,EAAE,WAAW,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAC3D,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAS1C,MAAM,oBAAoB,GACxB,6DAA6D;IAC7D,2DAA2D;IAC3D,wCAAwC,CAAC;AAE3C,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,OAAmB,EAAE;IACpD,sEAAsE;IACtE,sCAAsC;IACtC,IAAI,IAAI,CAAC,IAAI,KAAK,IAAI,EAAE,CAAC;QACvB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC;QAC3C,OAAO;IACT,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;IAEvD,MAAM,KAAK,GAAG,IAAI,WAAW,CAAC;QAC5B,UAAU,EAAE,MAAM,CAAC,QAAQ,CAAC,GAAG;QAC/B,OAAO,EAAE,MAAM,CAAC,QAAQ,CAAC,OAAO;QAChC,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,KAAK;KAC1B,CAAC,CAAC;IAEH,MAAM,gBAAgB,CAAC,KAAK,EAAE,EAAE,SAAS,EAAE,aAAa,EAAE,CAAC,CAAC;AAC9D,CAAC"}
+{"version":3,"file":"mcp.js","sourceRoot":"","sources":["../../src/commands/mcp.ts"],"names":[],"mappings":"AAAA,sCAAsC;AACtC,EAAE;AACF,0EAA0E;AAC1E,6DAA6D;AAC7D,kEAAkE;AAClE,0EAA0E;AAC1E,gEAAgE;AAChE,EAAE;AACF,0CAA0C;AAE1C,OAAO,EAAE,WAAW,EAAE,eAAe,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAC5E,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAU1C,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,OAAmB,EAAE;IACpD,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;IAEvD,MAAM,KAAK,GAAG,IAAI,WAAW,CAAC;QAC5B,UAAU,EAAE,MAAM,CAAC,QAAQ,CAAC,GAAG;QAC/B,OAAO,EAAE,MAAM,CAAC,QAAQ,CAAC,OAAO;QAChC,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,KAAK;KAC1B,CAAC,CAAC;IAEH,IAAI,IAAI,CAAC,IAAI,KAAK,IAAI,EAAE,CAAC;QACvB,MAAM,eAAe,CAAC,KAAK,EAAE;YAC3B,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,SAAS,EAAE,aAAa;SACzB,CAAC,CAAC;QACH,OAAO;IACT,CAAC;IAED,MAAM,gBAAgB,CAAC,KAAK,EAAE,EAAE,SAAS,EAAE,aAAa,EAAE,CAAC,CAAC;AAC9D,CAAC"}

package/dist/config.d.ts

@@ -2,156 +2,54 @@ import { z } from 'zod';
 declare const configSchema: z.ZodObject<{
     database: z.ZodObject<{
         url: z.ZodString;
-        schemas: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
-    }, "strip", z.ZodTypeAny, {
-        url: string;
-        schemas: string[];
-    }, {
-        url: string;
-        schemas?: string[] | undefined;
-    }>;
-    server: z.ZodDefault<z.ZodObject<{
-        ui: z.ZodDefault<z.ZodObject<{
+        schemas: z.ZodDefault<z.ZodArray<z.ZodString>>;
+    }, z.core.$strip>;
+    server: z.ZodPrefault<z.ZodObject<{
+        ui: z.ZodPrefault<z.ZodObject<{
             port: z.ZodDefault<z.ZodNumber>;
             host: z.ZodDefault<z.ZodString>;
-        }, "strip", z.ZodTypeAny, {
-            port: number;
-            host: string;
-        }, {
-            port?: number | undefined;
-            host?: string | undefined;
-        }>>;
-        mcp: z.ZodDefault<z.ZodObject<{
-            http: z.ZodDefault<z.ZodObject<{
+        }, z.core.$strip>>;
+        mcp: z.ZodPrefault<z.ZodObject<{
+            http: z.ZodPrefault<z.ZodObject<{
                 port: z.ZodDefault<z.ZodNumber>;
                 host: z.ZodDefault<z.ZodString>;
-            }, "strip", z.ZodTypeAny, {
-                port: number;
-                host: string;
-            }, {
-                port?: number | undefined;
-                host?: string | undefined;
-            }>>;
+            }, z.core.$strip>>;
             stdio: z.ZodDefault<z.ZodBoolean>;
-        }, "strip", z.ZodTypeAny, {
-            http: {
-                port: number;
-                host: string;
-            };
-            stdio: boolean;
-        }, {
-            http?: {
-                port?: number | undefined;
-                host?: string | undefined;
-            } | undefined;
-            stdio?: boolean | undefined;
-        }>>;
-    }, "strip", z.ZodTypeAny, {
-        ui: {
-            port: number;
-            host: string;
-        };
-        mcp: {
-            http: {
-                port: number;
-                host: string;
-            };
-            stdio: boolean;
-        };
-    }, {
-        ui?: {
-            port?: number | undefined;
-            host?: string | undefined;
-        } | undefined;
-        mcp?: {
-            http?: {
-                port?: number | undefined;
-                host?: string | undefined;
-            } | undefined;
-            stdio?: boolean | undefined;
-        } | undefined;
-    }>>;
-    adapter: z.ZodDefault<z.ZodObject<{
+        }, z.core.$strip>>;
+    }, z.core.$strip>>;
+    adapter: z.ZodPrefault<z.ZodObject<{
         type: z.ZodDefault<z.ZodLiteral<"postgrest">>;
         url: z.ZodDefault<z.ZodString>;
-    }, "strip", z.ZodTypeAny, {
-        type: "postgrest";
-        url: string;
-    }, {
-        type?: "postgrest" | undefined;
-        url?: string | undefined;
-    }>>;
-    uiHints: z.ZodDefault<z.ZodObject<{
+    }, z.core.$strip>>;
+    uiHints: z.ZodPrefault<z.ZodObject<{
         path: z.ZodDefault<z.ZodNullable<z.ZodString>>;
-    }, "strip", z.ZodTypeAny, {
-        path: string | null;
-    }, {
-        path?: string | null | undefined;
-    }>>;
-    cache: z.ZodDefault<z.ZodObject<{
+    }, z.core.$strip>>;
+    cache: z.ZodPrefault<z.ZodObject<{
         ttlMs: z.ZodDefault<z.ZodNumber>;
-    }, "strip", z.ZodTypeAny, {
-        ttlMs: number;
-    }, {
-        ttlMs?: number | undefined;
-    }>>;
-}, "strip", z.ZodTypeAny, {
-    database: {
-        url: string;
-        schemas: string[];
-    };
-    server: {
-        ui: {
-            port: number;
-            host: string;
-        };
-        mcp: {
-            http: {
-                port: number;
-                host: string;
-            };
-            stdio: boolean;
-        };
-    };
-    adapter: {
-        type: "postgrest";
-        url: string;
-    };
-    uiHints: {
-        path: string | null;
-    };
-    cache: {
-        ttlMs: number;
-    };
-}, {
-    database: {
-        url: string;
-        schemas?: string[] | undefined;
-    };
-    server?: {
-        ui?: {
-            port?: number | undefined;
-            host?: string | undefined;
-        } | undefined;
-        mcp?: {
-            http?: {
-                port?: number | undefined;
-                host?: string | undefined;
-            } | undefined;
-            stdio?: boolean | undefined;
-        } | undefined;
-    } | undefined;
-    adapter?: {
-        type?: "postgrest" | undefined;
-        url?: string | undefined;
-    } | undefined;
-    uiHints?: {
-        path?: string | null | undefined;
-    } | undefined;
-    cache?: {
-        ttlMs?: number | undefined;
-    } | undefined;
-}>;
+    }, z.core.$strip>>;
+    auth: z.ZodOptional<z.ZodObject<{
+        jwt: z.ZodObject<{
+            secret: z.ZodOptional<z.ZodString>;
+            publicKey: z.ZodOptional<z.ZodString>;
+            jwksUri: z.ZodOptional<z.ZodString>;
+            algorithms: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+                HS256: "HS256";
+                RS256: "RS256";
+            }>>>;
+            issuer: z.ZodOptional<z.ZodString>;
+            audience: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodArray<z.ZodString>]>>;
+        }, z.core.$strip>;
+        roleClaim: z.ZodOptional<z.ZodString>;
+        allowedRoles: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        defaultRole: z.ZodOptional<z.ZodString>;
+        anonRole: z.ZodOptional<z.ZodString>;
+        claimsGuc: z.ZodOptional<z.ZodString>;
+        ui: z.ZodOptional<z.ZodObject<{
+            role: z.ZodOptional<z.ZodString>;
+            token: z.ZodOptional<z.ZodString>;
+        }, z.core.$strip>>;
+    }, z.core.$strip>>;
+}, z.core.$strip>;
 export type KozouConfig = z.infer<typeof configSchema>;
 export type KozouConfigIssue = {
     path: string;

package/dist/config.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAWA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAwDxB,QAAA,MAAM,YAAY;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAMhB,CAAC;AAEH,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,YAAY,CAAC,CAAC;AAIvD,MAAM,MAAM,gBAAgB,GAAG;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC;AAEjE,qBAAa,gBAAiB,SAAQ,KAAK;IACzC,QAAQ,CAAC,MAAM,EAAE,gBAAgB,EAAE,CAAC;IACpC,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;gBACrB,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,IAAI,EAAE,MAAM,EAAE,gBAAgB,EAAE;CAMjF;AAMD,MAAM,MAAM,iBAAiB,GAAG;IAC9B,+EAA+E;IAC/E,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,wEAAwE;IACxE,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;IACxB;;;OAGG;IACH,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB,CAAC;AA6CF,wBAAsB,UAAU,CAAC,IAAI,GAAE,iBAAsB,GAAG,OAAO,CAAC,WAAW,CAAC,CA2CnF"}
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAiBA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AA+FxB,QAAA,MAAM,YAAY;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAOhB,CAAC;AAEH,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,YAAY,CAAC,CAAC;AAIvD,MAAM,MAAM,gBAAgB,GAAG;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC;AAEjE,qBAAa,gBAAiB,SAAQ,KAAK;IACzC,QAAQ,CAAC,MAAM,EAAE,gBAAgB,EAAE,CAAC;IACpC,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;gBACrB,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,IAAI,EAAE,MAAM,EAAE,gBAAgB,EAAE;CAMjF;AAMD,MAAM,MAAM,iBAAiB,GAAG;IAC9B,+EAA+E;IAC/E,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,wEAAwE;IACxE,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;IACxB;;;OAGG;IACH,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB,CAAC;AA4GF,wBAAsB,UAAU,CAAC,IAAI,GAAE,iBAAsB,GAAG,OAAO,CAAC,WAAW,CAAC,CA6CnF"}