feat: npm-managed Python runtime for @kaelio/ktx (#7)

* docs: add npm managed python runtime design

* build: add bundled python runtime wheel builder

* build: make local embedding dependencies optional

* build: bundle python runtime wheel in cli artifacts

* build: track bundled python runtime release artifact

* test: verify bundled python runtime wheel

* docs: add plan for bundled python runtime wheel

* test: cover managed python runtime lifecycle

* feat: add managed python runtime installer

* feat: add runtime command runner

* feat: expose runtime management commands

* test: verify managed python runtime commands

* docs: add plan for managed python runtime installer

* feat: add managed python command helper

* feat: use managed runtime for sl query compute

* feat: route sl query managed runtime policy

* docs: add plan for managed runtime sl query integration

* feat: add managed runtime daemon metadata

* feat: manage python daemon lifecycle

* feat: add runtime daemon start stop commands

* fix: verify managed runtime daemon lifecycle

* docs: add plan for managed runtime daemon lifecycle

* feat: add managed local embeddings config marker

* feat: add managed local embeddings daemon helper

* feat: use managed runtime for local embedding setup

* feat: pass managed runtime policy through setup

* docs: add plan for managed local embeddings runtime

* feat: read CLI package metadata dynamically

* feat: assemble public kaelio ktx npm package

* feat: release one public kaelio ktx npm artifact

* test: cover public kaelio ktx package invocations

* chore: verify public kaelio ktx package artifacts

* docs: add plan for public kaelio ktx npm package

* test: verify managed runtime in public package smoke

* test: finalize managed runtime release smoke

* docs: add plan for managed runtime release smoke

* test: specify local embeddings release smoke

* feat: add local embeddings runtime smoke

* chore: register local embeddings smoke

* fix: verify local embeddings smoke

* fix: restore artifact smoke python env helper

* docs: add plan for managed local embeddings release smoke

* refactor: share managed runtime install policy parsing

* feat: use managed runtime for agent semantic queries

* feat: use managed runtime for MCP semantic compute

* docs: add plan for managed agent and MCP semantic runtime

* feat(cli): add managed daemon HTTP helpers

* feat(cli): route local adapters through managed daemon

* feat(cli): use managed daemon for ingest helpers

* feat(cli): pass managed daemon options to scan

* feat(context): pass MCP ingest pull config options

* feat(cli): pass managed daemon options to serve ingest

* test: verify managed local ingest daemon runtime

* docs: add plan for managed local ingest daemon runtime

* docs: align managed runtime examples

* docs: add plan for managed runtime docs cleanup

* test: cover published package runtime smoke commands

* test: validate published package smoke outputs

* docs: add plan for published package runtime smoke

* build: stamp public npm package version

* release: add npm public release policy

* release: add guarded npm publish script

* release: document public npm release handoff

* docs: add plan for public npm release handoff

* test: cover managed runtime prune in package smoke

* docs: document managed runtime prune

* docs: add plan for managed runtime prune smoke and docs

* chore: encode uv runtime prerequisite policy

* fix: clarify missing uv runtime error

* docs: document uv runtime prerequisite

* docs: add plan for uv runtime prerequisite contract

* refactor: limit release artifacts to public package runtime

* chore: align release policy with bundled runtime wheel

* docs: describe single public runtime artifact surface

* test: verify single public runtime artifact contract

* docs: add plan for single public runtime artifact cleanup

* fix: align local embeddings smoke with public version

* docs: add plan for local embeddings smoke public version

* release: soft-launch as @kaelio/ktx@0.1.0-rc.0 on next tag

Publish target moves to the pre-release version 0.1.0-rc.0 under the next
dist-tag so npm install @kaelio/ktx (which resolves to latest) does not
pick up the soft-launch build. Users opt in via @kaelio/ktx@next.

* Fix release script boundary checks

* Remove PostHog from public package bundle

scripts/examples-docs.test.mjs

@@ -6,6 +6,26 @@ async function readText(relativePath) {
   return readFile(new URL(`../${relativePath}`, import.meta.url), 'utf8');
 }
 
+function publicNpmPackageName() {
+  return `@${['kae', 'lio'].join('')}/ktx`;
+}
+
+function runtimeWheelPackageName() {
+  return `${['kae', 'lio'].join('')}-ktx`;
+}
+
+function escapeRegExp(value) {
+  return value.replace(/[.*+?^${}()|[\]\\]/g, '\\$&');
+}
+
+function publicPackagePattern(text) {
+  return new RegExp(text.replaceAll('{package}', escapeRegExp(publicNpmPackageName())));
+}
+
+function runtimeWheelPackagePattern(text) {
+  return new RegExp(text.replaceAll('{package}', escapeRegExp(runtimeWheelPackageName())));
+}
+
 describe('standalone example docs', () => {
   it('documents the local warehouse example from the examples index', async () => {
     const examples = await readText('examples/README.md');
@@ -63,6 +83,16 @@ describe('standalone example docs', () => {
     assert.match(workload, /app_user/);
     assert.match(workload, /etl_user/);
     assert.match(smoke, /pg_stat_statements_reset/);
+    assert.match(smoke, /KTX_RUNTIME_ROOT/);
+    assert.match(smoke, /managedDaemon/);
+    assert.match(smoke, /installPolicy: 'auto'/);
+    assert.match(smoke, /getKtxCliPackageInfo/);
+    assert.doesNotMatch(smoke, /python-service/);
+    assert.doesNotMatch(smoke, /PYTHON_SERVICE/);
+    assert.doesNotMatch(smoke, /uvicorn app\.main:app/);
+    assert.doesNotMatch(smoke, /export KTX_SQL_ANALYSIS_URL/);
+    assert.doesNotMatch(readme, /python-service/);
+    assert.doesNotMatch(readme, /KTX_SQL_ANALYSIS_URL/);
     assert.match(smoke, /assert_manifest "\$FIRST_MANIFEST" true/);
     assert.match(smoke, /assert_manifest "\$SECOND_MANIFEST" false/);
     assert.match(smoke, /assert_manifest "\$RESET_MANIFEST" true/);
@@ -113,6 +143,60 @@ describe('standalone example docs', () => {
     assert.match(rootReadme, /Tables: 1/);
   });
 
+  it('documents public npm and managed runtime usage in the README', async () => {
+    const rootReadme = await readText('README.md');
+
+    assert.match(rootReadme, publicPackagePattern('npx {package} setup demo --no-input'));
+    assert.match(rootReadme, publicPackagePattern('npx {package} sl query'));
+    assert.match(rootReadme, publicPackagePattern('npm install {package}'));
+    assert.match(rootReadme, publicPackagePattern('npm install -g {package}'));
+    assert.match(rootReadme, /ktx runtime install/);
+    assert.match(rootReadme, /ktx runtime status/);
+    assert.match(rootReadme, /ktx runtime doctor/);
+    assert.match(rootReadme, /ktx runtime start/);
+    assert.match(rootReadme, /ktx runtime stop/);
+    assert.match(rootReadme, /ktx runtime prune --dry-run/);
+    assert.match(rootReadme, /ktx runtime prune --yes/);
+    assert.match(rootReadme, /KTX requires `uv` on `PATH`/);
+    assert.match(rootReadme, /KTX doesn't download `uv` automatically/);
+    assert.match(
+      rootReadme,
+      runtimeWheelPackagePattern(
+        'release\\s+artifact manifest contains the public npm tarball and the\\s+bundled `{package}`\\s+runtime wheel',
+      ),
+    );
+    assert.match(rootReadme, /source packages for\s+development, not public release artifacts/);
+    assert.match(rootReadme, /ktx serve --mcp stdio/);
+    assert.doesNotMatch(rootReadme, /uv run ktx-daemon serve-http/);
+    assert.doesNotMatch(rootReadme, /--semantic-compute-url http:\/\/127\.0\.0\.1:8765/);
+  });
+
+  it('documents the public package artifact smoke shape', async () => {
+    const readme = await readText('examples/package-artifacts/README.md');
+
+    assert.match(readme, publicPackagePattern('{package}'));
+    assert.match(readme, /managed Python runtime/);
+    assert.match(
+      readme,
+      new RegExp(
+        `public \`${escapeRegExp(publicNpmPackageName())}\` npm tarball and the\\s+bundled \`${escapeRegExp(
+          runtimeWheelPackageName(),
+        )}\`\\s+runtime wheel`,
+      ),
+    );
+    assert.match(readme, /does not install standalone\s+Python packages directly/);
+    assert.doesNotMatch(readme, /standalone Python distributions/);
+    assert.doesNotMatch(readme, /installs the Python artifacts directly/);
+    assert.match(readme, /requires `uv` on `PATH`/);
+    assert.match(readme, /ktx runtime status/);
+    assert.match(readme, /ktx runtime doctor/);
+    assert.match(readme, /ktx runtime prune --dry-run/);
+    assert.match(readme, /ktx runtime prune --yes/);
+    assert.doesNotMatch(readme, /@ktx\/context/);
+    assert.doesNotMatch(readme, /@ktx\/cli/);
+    assert.doesNotMatch(readme, /python -m ktx_daemon semantic-validate/);
+  });
+
   it('replaces the fake-ingest smoke with a ktx scan walkthrough in the README', async () => {
     const rootReadme = await readText('README.md');