kozou 0.1.0 → 0.2.0

package/dist/templates/docker-compose.yml

@@ -1,15 +1,12 @@
 # Docker Compose stack for a kozou project.
 #
-# Brings up (v0.1.0):
+# Brings up:
 #   - postgres   PostgreSQL 16 (the source of truth)
 #   - postgrest  REST adapter consumed by the Kozou DataAdapter
 #                (MIT-licensed external dependency, not bundled)
-#
-# The `kozou` service block is commented out for v0.1.0: the
-# published `ghcr.io/kozou-dev/kozou:v0.1.0` image's entrypoint is
-# the `kozou` CLI, which does not bind a port. Host integration
-# (`kozou dev` spawning the bundled Admin UI + MCP HTTP server)
-# lands in v0.1.1; uncomment the block then.
+#   - kozou      `kozou dev` - the bundled Admin UI + MCP HTTP server
+#                (ghcr.io/kozou-dev/kozou). Binds 0.0.0.0 inside the
+#                container so the port mappings below reach your host.
 #
 # Customize the credentials in .env before running `docker compose up`.
 
@@ -42,22 +39,26 @@ services:
       postgres:
         condition: service_healthy
 
-  # kozou:
-  #   # v0.1.1: reactivate once `kozou dev` spawns the bundled
-  #   # @kozou/svelte-ui Admin UI + MCP HTTP server. v0.1.0 only
-  #   # ships the CLI entrypoint, which exits immediately when
-  #   # run without arguments and therefore would bring no port
-  #   # online.
-  #   image: ghcr.io/kozou-dev/kozou:v0.1.0
-  #   command: ["dev"]
-  #   environment:
-  #     DATABASE_URL: postgres://${POSTGRES_USER:-kozou}:${POSTGRES_PASSWORD:-kozou}@postgres:5432/${POSTGRES_DB:-kozou}
-  #     KOZOU_ADAPTER_URL: http://postgrest:3000
-  #   depends_on:
-  #     postgres:
-  #       condition: service_healthy
-  #     postgrest:
-  #       condition: service_started
-  #   ports:
-  #     - "3333:3333"   # Admin UI
-  #     - "3334:3334"   # MCP HTTP
+  kozou:
+    # `kozou dev` spawns the bundled @kozou/svelte-ui Admin UI and the
+    # MCP HTTP server (Kozou v0.1 spec §9.1). Both bind 0.0.0.0 inside
+    # the container so the port mappings below reach your host.
+    image: ghcr.io/kozou-dev/kozou:v0.2.0
+    command: ["dev"]
+    environment:
+      DATABASE_URL: postgres://${POSTGRES_USER:-kozou}:${POSTGRES_PASSWORD:-kozou}@postgres:5432/${POSTGRES_DB:-kozou}
+      KOZOU_ADAPTER_URL: http://postgrest:3000
+      # The Admin UI is a SvelteKit (adapter-node) app. Without ORIGIN
+      # it assumes https and rejects every form POST (create / edit /
+      # delete) over plain http with a 403 "Cross-site POST forbidden".
+      # Set it to the exact URL you open in the browser; override if you
+      # publish the Admin UI on a different host or port.
+      ORIGIN: ${KOZOU_ORIGIN:-http://localhost:3333}
+    depends_on:
+      postgres:
+        condition: service_healthy
+      postgrest:
+        condition: service_started
+    ports:
+      - "3333:3333"   # Admin UI
+      - "3334:3334"   # MCP HTTP

package/dist/templates/env.example

@@ -9,3 +9,17 @@ POSTGRES_PORT=5432
 # Used by kozou + postgrest at runtime; defaults match the compose stack.
 DATABASE_URL=postgres://kozou:change-me@postgres:5432/kozou
 KOZOU_ADAPTER_URL=http://postgrest:3000
+
+# Public URL you open the Admin UI on (v0.2.0). The bundled SvelteKit
+# (adapter-node) server needs this to accept form submissions over plain
+# http — without it, create / edit / delete are rejected with a 403
+# "Cross-site POST forbidden". Override if you serve the UI elsewhere.
+KOZOU_ORIGIN=http://localhost:3333
+
+# JWT auth for the experimental in-house API (`kozou dev --adapter api`).
+# Leave unset to keep it unauthenticated and loopback-only (the default).
+# KOZOU_JWT_SECRET=your-hs256-secret   # HS256 — or KOZOU_JWT_PUBLIC_KEY / KOZOU_JWT_JWKS_URI
+# KOZOU_JWT_JWKS_URI=https://your-idp/.well-known/jwks.json  # Auth0 / Clerk / Supabase
+# KOZOU_JWT_ANON_ROLE=web_anon         # role for requests with no token (else 401)
+# KOZOU_UI_ROLE=app_admin              # role the bundled Admin UI runs as (HS256)
+# KOZOU_ADAPTER_TOKEN=                 # RS256 / external IdP: a ready-made UI token

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "kozou",
-  "version": "0.1.0",
+  "version": "0.2.0",
   "description": "Kozou CLI: scaffolding, schema introspection, and MCP server entry points. See Kozou v0.1 design spec §9.",
   "license": "Apache-2.0",
   "repository": {
@@ -36,17 +36,29 @@
   "dependencies": {
     "commander": "^14.0.0",
     "yaml": "^2.9.0",
-    "zod": "^3.23.0",
-    "@kozou/core": "0.1.0",
-    "@kozou/introspect": "0.1.0",
-    "@kozou/mcp": "0.1.0"
+    "zod": "^4.4.3",
+    "@kozou/core": "0.2.0",
+    "@kozou/introspect": "0.2.0",
+    "@kozou/mcp": "0.2.0",
+    "@kozou/svelte-ui": "0.2.0"
   },
   "devDependencies": {
-    "tsx": "^4.19.0"
+    "@modelcontextprotocol/sdk": "^1.0.0",
+    "@playwright/test": "^1.50.0",
+    "@testcontainers/postgresql": "^12.0.0",
+    "@types/pg": "^8.11.10",
+    "pg": "^8.13.0",
+    "testcontainers": "^12.0.0",
+    "tsx": "^4.19.0",
+    "@kozou/api": "0.0.0",
+    "@kozou/codegen": "0.0.0"
   },
   "scripts": {
     "typecheck": "tsc --noEmit",
     "build": "tsc && node scripts/copy-templates.mjs",
-    "test": "vitest run --coverage"
+    "test": "vitest run --coverage",
+    "test:e2e": "playwright test",
+    "test:e2e:api": "playwright test --config playwright.kozou-api.config.ts",
+    "test:e2e:api:auth": "playwright test --config playwright.kozou-api-auth.config.ts"
   }
 }