release: v1.9.1 — field-report fixes (form-action error surfacing, REST search quoting) (#181)

Lockstep bump of the eight published packages 1.9.0 -> 1.9.1
(api/codegen/core/introspect/kozou/mcp/svelte-ui/ui-core), plus the
per-release pins (scaffold + quickstart docker-compose image tags; README
docker examples and the runtime-requirements heading) and a README roadmap
entry. Cross-package deps stay workspace:* (no lockfile change).

Contents:
- The reference Admin UI's create / update / delete form actions catch
  AdapterError, so a DB constraint violation (unique / FK / CHECK) or a
  privilege / RLS denial re-renders the form with the user's input and a
  readable message instead of a generic 500 (#170, PR #175).
- Free-text search under the external REST opt-out quotes the term, so a
  value with reserved characters (, ( ) .) is matched literally instead
  of corrupting the or=(...) filter grammar (#171, PR #174).
- Transitive hono bumped to >=4.12.25 for a published security advisory
  (GHSA-wwfh-h76j-fc44; hono ships in @kozou/mcp via the MCP SDK) (#176).

Patch: bug fixes + a dependency security bump only — no new features,
no breaking or wire changes.

Co-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

Author: takashi-matsuyama

README.md

@@ -88,8 +88,8 @@ Advisory only: enforcement stays in PostgreSQL (GRANTs + your RLS). See
 Use the runtime image directly:
 
 ```bash
-docker pull ghcr.io/kozou-dev/kozou:v1.9.0
-docker run --rm ghcr.io/kozou-dev/kozou:v1.9.0 mcp --help
+docker pull ghcr.io/kozou-dev/kozou:v1.9.1
+docker run --rm ghcr.io/kozou-dev/kozou:v1.9.1 mcp --help
 ```
 
 Or install the packages for library / embedded use:
@@ -124,7 +124,7 @@ via JWKS, or a minimal self-hosted issuer. See
 
 ## Requirements
 
-Runtime requirements for v1.9.0:
+Runtime requirements for v1.9.1:
 
 - **PostgreSQL 16 or later** — the canonical source of truth
 - **Docker 24 or later** (optional) — recommended for the `docker compose up` stack, which brings up PostgreSQL and a `kozou` service running `kozou dev` (the bundled Admin UI + MCP HTTP server, plus Kozou's in-house REST backend served in-process) from `ghcr.io/kozou-dev/kozou` (a multi-arch image, native on linux/amd64 and linux/arm64). The default stack needs **no separate REST container**; to opt out and use an external PostgREST instead, set `adapter.type: postgrest` and add the (commented) service in the scaffold's `docker-compose.yml`.
@@ -153,6 +153,7 @@ Contributors additionally need **pnpm 9 or later**. See [CONTRIBUTING.md](CONTRI
 - v1.8.0 (shipped): **opt-in privilege-aware AI context** — point Kozou at a role (`introspection.respectPrivileges`) and the MCP `describe_table` / `describe_view` tools and `kozou docs` now also tell the agent what that role may *touch*: each relation is annotated with the role's effective GRANTs (relation-level `SELECT`/`INSERT`/`UPDATE`/`DELETE`, plus per-column `insertable` / `updatable` on tables), and `kozou docs` grows a per-table "Security" section. Unlike the Admin UI's privilege mode, the AI surfaces **annotate rather than hide** — a table the role cannot `SELECT` still appears, marked `select: false`, so the agent is told its limits rather than left guessing. It reuses the existing privilege introspection (no new queries) and is advisory only: enforcement stays in PostgreSQL (GRANTs + your RLS). When the MCP `call` execution tool is enabled, the annotated role is tied to the execution role so describe and act never disagree. Default off ⇒ every surface stays schema-wide. `kozou docs` also now renders per-column `@ai` / `@policy` notes. See [`examples/quickstart`](examples/quickstart).
 - v1.8.1 (shipped): a security-hardening patch. The unauthenticated MCP HTTP server gains **DNS-rebinding protection** — it validates the request `Host` / `Origin` against an allowlist before handling it, so a page in the operator's browser cannot drive it by rebinding a hostname to loopback — and a **request-body size limit** (both the MCP server and `@kozou/api` reject an over-large body with `413`, and a non-JSON body with `415`, instead of buffering it unbounded). Read requests (`GET`) now run in a `READ ONLY` transaction, so a read cannot commit a write regardless of the role's grants. The bundled dev stack is **loopback by default**: the Admin UI and MCP HTTP server bind `127.0.0.1` (set `KOZOU_UI_HOST` / `KOZOU_MCP_HTTP_HOST` to expose them inside a container), and the scaffold and quickstart `docker-compose` files publish every port (Admin UI, MCP, database) on `127.0.0.1` only. See the repository's security advisory.
 - v1.9.0 (shipped): field-report fixes for the introspection and REST surfaces. Native PostgreSQL `ENUM` columns are now recognized — a column typed as a native enum gets the `enum-select` widget, a string-literal union in the generated client, and an `enum` in OpenAPI / the MCP context, matching how the same type already resolved as a function argument. Declarative **partitioned parent tables** and **materialized views** are now introspected (the parent is surfaced and reads like a normal table while its leaf partitions stay hidden; a materialized view appears as a read-only view) — previously both were silently absent from every surface. A list query with an explicit `sort` on a non-unique column now appends the primary key as a tiebreaker, so `LIMIT`/`OFFSET` pagination is stable across pages. And `kozou mcp --http` honours `server.mcp.http.{port,host}` from `kozou.config.yaml`, matching `kozou dev`.
+- v1.9.1 (shipped): field-report fixes for the reference Admin UI and the external REST adapter. A create / update / delete that the database rejects (a unique / foreign-key / check violation, or a privilege / row-level-security denial) now re-renders the form with the user's input and a readable message instead of a generic 500 that discarded it. And free-text search under the external REST (PostgREST) opt-out now quotes the term, so a value containing reserved characters (`,` `(` `)` `.`) is matched literally instead of corrupting the query. Also bumps a transitive dependency for a published security advisory.
 - Beyond v1.8: React UI exploration — optional write-path parity (a second UI driving create / edit / delete across both adapters)
 
 ## Name

examples/quickstart/docker-compose.yml

@@ -36,7 +36,7 @@ services:
       retries: 10
 
   kozou:
-    image: ghcr.io/kozou-dev/kozou:v1.9.0
+    image: ghcr.io/kozou-dev/kozou:v1.9.1
     command: ["dev"]
     environment:
       DATABASE_URL: postgres://${POSTGRES_USER:-kozou}:${POSTGRES_PASSWORD:-kozou}@postgres:5432/${POSTGRES_DB:-kozou}

packages/api/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kozou/api",
-  "version": "1.9.0",
+  "version": "1.9.1",
   "description": "Kozou's own REST layer: serves table CRUD / VIEW reads / OpenAPI from a SchemaContext.",
   "license": "Apache-2.0",
   "repository": {

packages/codegen/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kozou/codegen",
-  "version": "1.9.0",
+  "version": "1.9.1",
   "description": "Kozou TypeScript codegen: emit row / entity types from a SchemaContext (experimental).",
   "license": "Apache-2.0",
   "repository": {

packages/core/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kozou/core",
-  "version": "1.9.0",
+  "version": "1.9.1",
   "description": "Kozou core: Schema Context, type definitions, UI Hints zod schema, DataAdapter interface.",
   "license": "Apache-2.0",
   "repository": {

packages/introspect/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kozou/introspect",
-  "version": "1.9.0",
+  "version": "1.9.1",
   "description": "PostgreSQL DDL / COMMENT / VIEW introspection.",
   "license": "Apache-2.0",
   "repository": {

packages/kozou/package.json

@@ -1,6 +1,6 @@
 {
   "name": "kozou",
-  "version": "1.9.0",
+  "version": "1.9.1",
   "description": "Kozou CLI: scaffolding, schema introspection, and MCP server entry points.",
   "license": "Apache-2.0",
   "repository": {

packages/kozou/src/templates/docker-compose.yml

@@ -37,7 +37,7 @@ services:
     # `kozou dev` spawns the bundled @kozou/svelte-ui Admin UI, the MCP HTTP
     # server, and Kozou's in-house REST backend (all in-process). Each binds
     # 0.0.0.0 inside the container so the port mappings below reach your host.
-    image: ghcr.io/kozou-dev/kozou:v1.9.0
+    image: ghcr.io/kozou-dev/kozou:v1.9.1
     command: ["dev"]
     environment:
       DATABASE_URL: postgres://${POSTGRES_USER:-kozou}:${POSTGRES_PASSWORD:-kozou}@postgres:5432/${POSTGRES_DB:-kozou}

packages/mcp/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kozou/mcp",
-  "version": "1.9.0",
+  "version": "1.9.1",
   "description": "Kozou MCP server for AI agents (stdio + HTTP)",
   "license": "Apache-2.0",
   "repository": {

packages/svelte-ui/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kozou/svelte-ui",
-  "version": "1.9.0",
+  "version": "1.9.1",
   "description": "Kozou reference Admin UI. SvelteKit + Svelte 5 admin UI that consumes SchemaContext via @kozou/core and talks to a backend via the DataAdapter interface.",
   "license": "Apache-2.0",
   "repository": {