What dev enables
- Single binary, single port.
- The
localauth adapter (any non-empty token is accepted). - All MCP built-in tools enabled.
- SQLite coordinator at
./data/.
What dev refuses
Starting flocks dev with --bind 0.0.0.0:7700 is a startup error.
Dev mode is loopback-only because the auth posture isn’t safe off the
machine.