@kodycodes/cli 1.17.0 → 1.18.0

package/dist/org.d.ts

@@ -0,0 +1,22 @@
+import { type ListedOrg, type MultiOrgCredentialStore, type SecretBackend, type StoreResolution } from './store.js';
+export { orgEnvVar, orgSlugFromFlag } from './org-slug.js';
+export { resolveOrgSlug } from './org-resolve.js';
+/** Offline help / listing block. No network. */
+export declare function formatStoredOrgsHelpBlock(orgs: Array<ListedOrg>, options?: {
+    indent?: string;
+}): string;
+export declare function readStoredOrgsForHelp(mcpUrl?: string, backend?: SecretBackend, resolution?: StoreResolution): Array<ListedOrg>;
+export declare function formatOrgListHuman(orgs: Array<ListedOrg>): string;
+export declare function formatOrgListJson(orgs: Array<ListedOrg>): string;
+/**
+ * Interactive org picker for humans. Requires a TTY. Agents should pass a slug
+ * to `kody org use <slug>` instead.
+ */
+export declare function chooseOrgInteractively(input: {
+    orgs: Array<ListedOrg>;
+    stdin?: NodeJS.ReadableStream;
+    stdout?: NodeJS.WritableStream;
+    isTTY?: boolean;
+}): Promise<string>;
+export declare function useOrg(slug: string, mcpUrl?: string, backend?: SecretBackend, resolution?: StoreResolution): MultiOrgCredentialStore;
+export declare function promoteLegacyIfNeeded(mcpUrl: string, orgSlug: string, backend?: SecretBackend, resolution?: StoreResolution): MultiOrgCredentialStore | null;

package/dist/org.js

@@ -0,0 +1,100 @@
+import { createInterface } from 'node:readline';
+import { defaultMcpUrl } from './defaults.js';
+import { orgSlugFromFlag } from './org-slug.js';
+import { listStoredOrgs, loadCredentialStore, promotePendingOrg, setActiveOrg, } from './store.js';
+export { orgEnvVar, orgSlugFromFlag } from './org-slug.js';
+export { resolveOrgSlug } from './org-resolve.js';
+/** Offline help / listing block. No network. */
+export function formatStoredOrgsHelpBlock(orgs, options = {}) {
+    const indent = options.indent ?? '  ';
+    if (orgs.length === 0) {
+        return `${indent}Not logged in. Run \`kody login\`.\n`;
+    }
+    const lines = [`${indent}Logged-in orgs:`];
+    for (const org of orgs) {
+        const mark = org.active ? '*' : ' ';
+        const pending = org.pending ? '  (slug pending — run any authenticated command)' : '';
+        lines.push(`${indent}  ${mark} ${org.slug}${org.active ? '  (active)' : ''}${pending}`);
+    }
+    return `${lines.join('\n')}\n`;
+}
+export function readStoredOrgsForHelp(mcpUrl = defaultMcpUrl, backend, resolution) {
+    try {
+        return listStoredOrgs(mcpUrl, backend, resolution);
+    }
+    catch {
+        return [];
+    }
+}
+export function formatOrgListHuman(orgs) {
+    if (orgs.length === 0) {
+        return 'Not logged in. Run `kody login`.\n';
+    }
+    const lines = [];
+    for (const org of orgs) {
+        const mark = org.active ? '*' : ' ';
+        const pending = org.pending ? '  (slug pending)' : '';
+        lines.push(`${mark} ${org.slug}${org.active ? '  (active)' : ''}${pending}`);
+    }
+    return `${lines.join('\n')}\n`;
+}
+export function formatOrgListJson(orgs) {
+    return `${JSON.stringify({
+        orgs: orgs.map((org) => ({
+            slug: org.pending ? null : org.slug,
+            active: org.active,
+            ...(org.pending ? { pending: true } : {}),
+        })),
+    }, null, 2)}\n`;
+}
+/**
+ * Interactive org picker for humans. Requires a TTY. Agents should pass a slug
+ * to `kody org use <slug>` instead.
+ */
+export async function chooseOrgInteractively(input) {
+    const isTTY = input.isTTY ?? Boolean(process.stdin.isTTY);
+    if (!isTTY) {
+        throw new Error('`kody org use` without a slug requires a TTY. Pass an org slug: `kody org use <slug>`.');
+    }
+    const usable = input.orgs.filter((org) => !org.pending);
+    if (usable.length === 0) {
+        throw new Error('No named org logins yet. Run `kody login`, or an authenticated command to finish migrating a legacy session.');
+    }
+    const stdout = input.stdout ?? process.stdout;
+    stdout.write('Select an organization:\n');
+    usable.forEach((org, index) => {
+        const active = org.active ? ' (active)' : '';
+        stdout.write(`  ${index + 1}) ${org.slug}${active}\n`);
+    });
+    const rl = createInterface({
+        input: input.stdin ?? process.stdin,
+        output: stdout,
+        terminal: true,
+    });
+    try {
+        const answer = await new Promise((resolve) => {
+            rl.question('Number (or slug): ', (line) => resolve(line.trim()));
+        });
+        if (!answer) {
+            throw new Error('No organization selected.');
+        }
+        const asNumber = Number(answer);
+        if (Number.isInteger(asNumber) && asNumber >= 1 && asNumber <= usable.length) {
+            return usable[asNumber - 1].slug;
+        }
+        return orgSlugFromFlag(answer);
+    }
+    finally {
+        rl.close();
+    }
+}
+export function useOrg(slug, mcpUrl = defaultMcpUrl, backend, resolution) {
+    return setActiveOrg(mcpUrl, orgSlugFromFlag(slug), backend, resolution);
+}
+export function promoteLegacyIfNeeded(mcpUrl, orgSlug, backend, resolution) {
+    const snapshot = loadCredentialStore(mcpUrl, backend, resolution);
+    if (!snapshot?.pending)
+        return snapshot;
+    return promotePendingOrg(mcpUrl, orgSlug, backend, resolution);
+}
+//# sourceMappingURL=org.js.map

package/dist/org.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"org.js","sourceRoot":"","sources":["../src/org.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAA;AAC/C,OAAO,EAAE,aAAa,EAAE,MAAM,eAAe,CAAA;AAC7C,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAA;AAC/C,OAAO,EACN,cAAc,EACd,mBAAmB,EACnB,iBAAiB,EACjB,YAAY,GAKZ,MAAM,YAAY,CAAA;AAEnB,OAAO,EAAE,SAAS,EAAE,eAAe,EAAE,MAAM,eAAe,CAAA;AAC1D,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAA;AAEjD,gDAAgD;AAChD,MAAM,UAAU,yBAAyB,CACxC,IAAsB,EACtB,UAA+B,EAAE;IAEjC,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,IAAI,CAAA;IACrC,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,OAAO,GAAG,MAAM,sCAAsC,CAAA;IACvD,CAAC;IACD,MAAM,KAAK,GAAG,CAAC,GAAG,MAAM,iBAAiB,CAAC,CAAA;IAC1C,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACxB,MAAM,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAA;QACnC,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,kDAAkD,CAAC,CAAC,CAAC,EAAE,CAAA;QACrF,KAAK,CAAC,IAAI,CAAC,GAAG,MAAM,KAAK,IAAI,IAAI,GAAG,CAAC,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,GAAG,OAAO,EAAE,CAAC,CAAA;IACxF,CAAC;IACD,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAA;AAC/B,CAAC;AAED,MAAM,UAAU,qBAAqB,CACpC,SAAiB,aAAa,EAC9B,OAAuB,EACvB,UAA4B;IAE5B,IAAI,CAAC;QACJ,OAAO,cAAc,CAAC,MAAM,EAAE,OAAO,EAAE,UAAU,CAAC,CAAA;IACnD,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,EAAE,CAAA;IACV,CAAC;AACF,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,IAAsB;IACxD,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,OAAO,oCAAoC,CAAA;IAC5C,CAAC;IACD,MAAM,KAAK,GAAkB,EAAE,CAAA;IAC/B,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACxB,MAAM,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAA;QACnC,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,EAAE,CAAA;QACrD,KAAK,CAAC,IAAI,CAAC,GAAG,IAAI,IAAI,GAAG,CAAC,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,GAAG,OAAO,EAAE,CAAC,CAAA;IAC7E,CAAC;IACD,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAA;AAC/B,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,IAAsB;IACvD,OAAO,GAAG,IAAI,CAAC,SAAS,CACvB;QACC,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;YACxB,IAAI,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI;YACnC,MAAM,EAAE,GAAG,CAAC,MAAM;YAClB,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACzC,CAAC,CAAC;KACH,EACD,IAAI,EACJ,CAAC,CACD,IAAI,CAAA;AACN,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAAC,KAK5C;IACA,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,IAAI,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAA;IACzD,IAAI,CAAC,KAAK,EAAE,CAAC;QACZ,MAAM,IAAI,KAAK,CACd,wFAAwF,CACxF,CAAA;IACF,CAAC;IACD,MAAM,MAAM,GAAG,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAA;IACvD,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,MAAM,IAAI,KAAK,CACd,8GAA8G,CAC9G,CAAA;IACF,CAAC;IACD,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,IAAI,OAAO,CAAC,MAAM,CAAA;IAC7C,MAAM,CAAC,KAAK,CAAC,2BAA2B,CAAC,CAAA;IACzC,MAAM,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE;QAC7B,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,CAAA;QAC5C,MAAM,CAAC,KAAK,CAAC,KAAK,KAAK,GAAG,CAAC,KAAK,GAAG,CAAC,IAAI,GAAG,MAAM,IAAI,CAAC,CAAA;IACvD,CAAC,CAAC,CAAA;IACF,MAAM,EAAE,GAAG,eAAe,CAAC;QAC1B,KAAK,EAAE,KAAK,CAAC,KAAK,IAAI,OAAO,CAAC,KAAK;QACnC,MAAM,EAAE,MAAM;QACd,QAAQ,EAAE,IAAI;KACd,CAAC,CAAA;IACF,IAAI,CAAC;QACJ,MAAM,MAAM,GAAG,MAAM,IAAI,OAAO,CAAS,CAAC,OAAO,EAAE,EAAE;YACpD,EAAE,CAAC,QAAQ,CAAC,oBAAoB,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAA;QAClE,CAAC,CAAC,CAAA;QACF,IAAI,CAAC,MAAM,EAAE,CAAC;YACb,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAA;QAC7C,CAAC;QACD,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,CAAA;QAC/B,IAAI,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,QAAQ,IAAI,CAAC,IAAI,QAAQ,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;YAC9E,OAAO,MAAM,CAAC,QAAQ,GAAG,CAAC,CAAE,CAAC,IAAI,CAAA;QAClC,CAAC;QACD,OAAO,eAAe,CAAC,MAAM,CAAC,CAAA;IAC/B,CAAC;YAAS,CAAC;QACV,EAAE,CAAC,KAAK,EAAE,CAAA;IACX,CAAC;AACF,CAAC;AAED,MAAM,UAAU,MAAM,CACrB,IAAY,EACZ,SAAiB,aAAa,EAC9B,OAAuB,EACvB,UAA4B;IAE5B,OAAO,YAAY,CAAC,MAAM,EAAE,eAAe,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,UAAU,CAAC,CAAA;AACxE,CAAC;AAED,MAAM,UAAU,qBAAqB,CACpC,MAAc,EACd,OAAe,EACf,OAAuB,EACvB,UAA4B;IAE5B,MAAM,QAAQ,GAAG,mBAAmB,CAAC,MAAM,EAAE,OAAO,EAAE,UAAU,CAAC,CAAA;IACjE,IAAI,CAAC,QAAQ,EAAE,OAAO;QAAE,OAAO,QAAQ,CAAA;IACvC,OAAO,iBAAiB,CAAC,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,UAAU,CAAC,CAAA;AAC/D,CAAC"}

package/dist/remote-execute.d.ts

@@ -13,6 +13,8 @@ export type RemoteExecuteInput = {
     token: string;
     apiUrl: string;
     fetchFn?: typeof fetch;
+    /** User-owned token org selection (`?org=`). */
+    org?: string;
 };
 export declare const credentialFlagRequiresLocalOrMcpMessage = "--credential picks a credential for this run, but token-auth cloud execute goes through CapabilityProxy \u2192 kody.execute, which does not take a call map (package code must not pick by name). Use `execute --local --credential \u2026`, or omit --token / KODY_API_TOKEN and use a `kody login` MCP session so execute receives credentials.";
 /**

package/dist/remote-execute.js

@@ -15,7 +15,12 @@ export async function runRemoteExecuteWithToken(input) {
         throw new Error(credentialFlagRequiresLocalOrMcpMessage);
     }
     const code = resolveRemoteExecuteCode(input);
-    const client = { apiUrl: input.apiUrl, token: input.token, fetchFn: input.fetchFn };
+    const client = {
+        apiUrl: input.apiUrl,
+        token: input.token,
+        fetchFn: input.fetchFn,
+        ...(input.org ? { org: input.org } : {}),
+    };
     await openCapabilityProxySession(client);
     const args = { code };
     if (input.params !== undefined)

package/dist/remote-execute.js.map

@@ -1 +1 @@
-{"version":3,"file":"remote-execute.js","sourceRoot":"","sources":["../src/remote-execute.ts"],"names":[],"mappings":"AAAA,OAAO,EACN,qBAAqB,EACrB,mBAAmB,EACnB,0BAA0B,GAC1B,MAAM,uBAAuB,CAAA;AAG9B,OAAO,EAAE,wBAAwB,EAAE,MAAM,yBAAyB,CAAA;AAiBlE,MAAM,CAAC,MAAM,uCAAuC,GACnD,yUAAyU,CAAA;AAE1U;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC9C,KAAyB;IAEzB,qBAAqB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAA;IACnC,IAAI,KAAK,CAAC,WAAW,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAA;IACzD,CAAC;IACD,MAAM,IAAI,GAAG,wBAAwB,CAAC,KAAK,CAAC,CAAA;IAC5C,MAAM,MAAM,GAAG,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAA;IACnF,MAAM,0BAA0B,CAAC,MAAM,CAAC,CAAA;IAExC,MAAM,IAAI,GAA4B,EAAE,IAAI,EAAE,CAAA;IAC9C,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS;QAAE,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,CAAA;IAC1D,IAAI,KAAK,CAAC,cAAc,KAAK,SAAS;QAAE,IAAI,CAAC,cAAc,GAAG,KAAK,CAAC,cAAc,CAAA;IAElF,MAAM,OAAO,GAAG,MAAM,mBAAmB,CAAC;QACzC,GAAG,MAAM;QACT,IAAI,EAAE,CAAC,MAAM,EAAE,SAAS,CAAC;QACzB,IAAI,EAAE,CAAC,IAAI,CAAC;QACZ,cAAc,EAAE,KAAK,CAAC,cAAc;KACpC,CAAC,CAAA;IAEF,OAAO,6BAA6B,CAAC,OAAO,CAAC,CAAA;AAC9C,CAAC;AAED,MAAM,UAAU,wBAAwB,CAAC,KAGxC;IACA,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAA;IACxD,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAA;IAC9D,IAAI,IAAI,IAAI,MAAM,EAAE,CAAC;QACpB,MAAM,IAAI,KAAK,CAAC,sEAAsE,CAAC,CAAA;IACxF,CAAC;IACD,IAAI,MAAM;QAAE,OAAO,wBAAwB,CAAC,MAAM,CAAC,CAAA;IACnD,IAAI,IAAI;QAAE,OAAO,IAAI,CAAA;IACrB,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAA;AACzE,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,6BAA6B,CAAC,OAAgB;IAC7D,MAAM,MAAM,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAA;IACjD,IAAI,CAAC,MAAM,EAAE,CAAC;QACb,MAAM,IAAI,GACT,OAAO,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,WAAW,CAAA;QACxF,OAAO;YACN,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;YACjC,iBAAiB,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE;YACtC,OAAO,EAAE,KAAK;SACd,CAAA;IACF,CAAC;IAED,MAAM,EAAE,GAAG,MAAM,CAAC,EAAE,KAAK,KAAK,IAAI,OAAO,MAAM,CAAC,KAAK,KAAK,QAAQ,CAAA;IAClE,MAAM,cAAc,GACnB,OAAO,MAAM,CAAC,cAAc,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS,CAAA;IAC9E,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAA;IAC1D,MAAM,IAAI,GAA4B;QACrC,GAAG,CAAC,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3D,IAAI;KACJ,CAAA;IACD,KAAK,MAAM,GAAG,IAAI;QACjB,QAAQ;QACR,OAAO;QACP,UAAU;QACV,YAAY;QACZ,QAAQ;QACR,eAAe;QACf,WAAW;QACX,MAAM;QACN,cAAc;QACd,aAAa;QACb,cAAc;KACL,EAAE,CAAC;QACZ,IAAI,MAAM,CAAC,GAAG,CAAC,KAAK,SAAS;YAAE,IAAI,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,CAAA;IACvD,CAAC;IAED,IAAI,CAAC,EAAE,EAAE,CAAC;QACT,MAAM,KAAK,GACV,OAAO,MAAM,CAAC,KAAK,KAAK,QAAQ;YAC/B,CAAC,CAAC,MAAM,CAAC,KAAK;YACd,CAAC,CAAC,0CAA0C,CAAA;QAC9C,OAAO;YACN,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,KAAK,EAAE,EAAE,CAAC;YACpD,iBAAiB,EAAE,EAAE,GAAG,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE;YAC5D,OAAO,EAAE,IAAI;SACb,CAAA;IACF,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAA;IAC5B,MAAM,IAAI,GACT,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,WAAW,CAAC,CAAA;IACvF,OAAO;QACN,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;QACjC,iBAAiB,EAAE,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE;QACtC,OAAO,EAAE,KAAK;KACd,CAAA;AACF,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC/B,OAAO,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAA;AAC5E,CAAC"}
+{"version":3,"file":"remote-execute.js","sourceRoot":"","sources":["../src/remote-execute.ts"],"names":[],"mappings":"AAAA,OAAO,EACN,qBAAqB,EACrB,mBAAmB,EACnB,0BAA0B,GAC1B,MAAM,uBAAuB,CAAA;AAG9B,OAAO,EAAE,wBAAwB,EAAE,MAAM,yBAAyB,CAAA;AAmBlE,MAAM,CAAC,MAAM,uCAAuC,GACnD,yUAAyU,CAAA;AAE1U;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC9C,KAAyB;IAEzB,qBAAqB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAA;IACnC,IAAI,KAAK,CAAC,WAAW,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAA;IACzD,CAAC;IACD,MAAM,IAAI,GAAG,wBAAwB,CAAC,KAAK,CAAC,CAAA;IAC5C,MAAM,MAAM,GAAG;QACd,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACxC,CAAA;IACD,MAAM,0BAA0B,CAAC,MAAM,CAAC,CAAA;IAExC,MAAM,IAAI,GAA4B,EAAE,IAAI,EAAE,CAAA;IAC9C,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS;QAAE,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,CAAA;IAC1D,IAAI,KAAK,CAAC,cAAc,KAAK,SAAS;QAAE,IAAI,CAAC,cAAc,GAAG,KAAK,CAAC,cAAc,CAAA;IAElF,MAAM,OAAO,GAAG,MAAM,mBAAmB,CAAC;QACzC,GAAG,MAAM;QACT,IAAI,EAAE,CAAC,MAAM,EAAE,SAAS,CAAC;QACzB,IAAI,EAAE,CAAC,IAAI,CAAC;QACZ,cAAc,EAAE,KAAK,CAAC,cAAc;KACpC,CAAC,CAAA;IAEF,OAAO,6BAA6B,CAAC,OAAO,CAAC,CAAA;AAC9C,CAAC;AAED,MAAM,UAAU,wBAAwB,CAAC,KAGxC;IACA,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAA;IACxD,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAA;IAC9D,IAAI,IAAI,IAAI,MAAM,EAAE,CAAC;QACpB,MAAM,IAAI,KAAK,CAAC,sEAAsE,CAAC,CAAA;IACxF,CAAC;IACD,IAAI,MAAM;QAAE,OAAO,wBAAwB,CAAC,MAAM,CAAC,CAAA;IACnD,IAAI,IAAI;QAAE,OAAO,IAAI,CAAA;IACrB,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAA;AACzE,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,6BAA6B,CAAC,OAAgB;IAC7D,MAAM,MAAM,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAA;IACjD,IAAI,CAAC,MAAM,EAAE,CAAC;QACb,MAAM,IAAI,GACT,OAAO,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,WAAW,CAAA;QACxF,OAAO;YACN,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;YACjC,iBAAiB,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE;YACtC,OAAO,EAAE,KAAK;SACd,CAAA;IACF,CAAC;IAED,MAAM,EAAE,GAAG,MAAM,CAAC,EAAE,KAAK,KAAK,IAAI,OAAO,MAAM,CAAC,KAAK,KAAK,QAAQ,CAAA;IAClE,MAAM,cAAc,GACnB,OAAO,MAAM,CAAC,cAAc,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS,CAAA;IAC9E,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAA;IAC1D,MAAM,IAAI,GAA4B;QACrC,GAAG,CAAC,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3D,IAAI;KACJ,CAAA;IACD,KAAK,MAAM,GAAG,IAAI;QACjB,QAAQ;QACR,OAAO;QACP,UAAU;QACV,YAAY;QACZ,QAAQ;QACR,eAAe;QACf,WAAW;QACX,MAAM;QACN,cAAc;QACd,aAAa;QACb,cAAc;KACL,EAAE,CAAC;QACZ,IAAI,MAAM,CAAC,GAAG,CAAC,KAAK,SAAS;YAAE,IAAI,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,CAAA;IACvD,CAAC;IAED,IAAI,CAAC,EAAE,EAAE,CAAC;QACT,MAAM,KAAK,GACV,OAAO,MAAM,CAAC,KAAK,KAAK,QAAQ;YAC/B,CAAC,CAAC,MAAM,CAAC,KAAK;YACd,CAAC,CAAC,0CAA0C,CAAA;QAC9C,OAAO;YACN,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,KAAK,EAAE,EAAE,CAAC;YACpD,iBAAiB,EAAE,EAAE,GAAG,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE;YAC5D,OAAO,EAAE,IAAI;SACb,CAAA;IACF,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAA;IAC5B,MAAM,IAAI,GACT,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,WAAW,CAAC,CAAA;IACvF,OAAO;QACN,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;QACjC,iBAAiB,EAAE,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE;QACtC,OAAO,EAAE,KAAK;KACd,CAAA;AACF,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC/B,OAAO,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAA;AAC5E,CAAC"}

package/dist/store.d.ts

@@ -1,6 +1,39 @@
+/**
+ * Per-org OAuth credentials used by login / MCP / local-execute Bearer.
+ * `org` is the bound organization slug (ADR 0064). Legacy single-org payloads
+ * may omit it until silent migration discovers the slug via metaGetCurrentUser.
+ */
 export type StoredCredentials = {
     version: 1;
     mcpUrl: string;
+    /** Organization slug this grant is bound to. */
+    org?: string;
+    resource: string;
+    authorizationServerUrl: string;
+    clientId: string;
+    clientSecret?: string;
+    accessToken: string;
+    refreshToken?: string;
+    tokenType: string;
+    expiresAt?: number;
+    scope?: string;
+};
+/** On-disk / keychain envelope for one or more org logins (same MCP origin). */
+export type MultiOrgCredentialStore = {
+    version: 2;
+    mcpUrl: string;
+    /** Active org slug; null while a legacy v1 session awaits slug discovery. */
+    activeOrg: string | null;
+    /** Org slug → credentials (without version/mcpUrl envelope fields). */
+    orgs: Record<string, OrgCredentialRecord>;
+    /**
+     * Legacy single-org tokens waiting for an org slug. At most one. Cleared
+     * once metaGetCurrentUser (or login --org) promotes them into `orgs`.
+     */
+    pending?: OrgCredentialRecord;
+};
+export type OrgCredentialRecord = {
+    org?: string;
     resource: string;
     authorizationServerUrl: string;
     clientId: string;
@@ -28,17 +61,74 @@ export type StoreResolution = {
     createKeyring?: (mcpUrl: string) => SecretBackend;
     fileStorePath?: (mcpUrl: string) => string;
 };
+export type LoadCredentialsOptions = {
+    /** Prefer this org slug (already normalized). */
+    org?: string;
+    backend?: SecretBackend;
+    resolution?: StoreResolution;
+};
 export declare function accountForMcpUrl(mcpUrl: string): string;
 export declare function fileStorePath(mcpUrl: string, home?: string): string;
 export declare function createFileBackend(path: string): SecretBackend;
 export declare function createKeyringBackend(mcpUrl: string): SecretBackend;
 export declare function resolveBackend(mcpUrl: string, preferred?: SecretBackend, resolution?: StoreResolution): SecretBackend;
+/** Parse v1 single-org or v2 multi-org JSON from the credential backend. */
+export declare function parseCredentialStore(raw: string, fallbackMcpUrl?: string): MultiOrgCredentialStore;
+/**
+ * Silent offline migration: wrap a v1 single-org payload as a multi-org store.
+ * When `org` is already known, it becomes the active org; otherwise tokens sit
+ * in `pending` until metaGetCurrentUser (or login) supplies the slug.
+ */
+export declare function migrateV1ToMultiOrg(credentials: StoredCredentials): MultiOrgCredentialStore;
+/** @deprecated Prefer parseCredentialStore; kept for tests and callers that expect v1. */
 export declare function parseCredentials(raw: string): StoredCredentials;
-export declare function loadCredentials(mcpUrl?: string, backend?: SecretBackend, resolution?: StoreResolution): StoredCredentials | null;
-export declare function saveCredentials(credentials: StoredCredentials, backend?: SecretBackend, resolution?: StoreResolution): {
+export declare function loadCredentialStore(mcpUrl?: string, backend?: SecretBackend, resolution?: StoreResolution): MultiOrgCredentialStore | null;
+export declare function saveCredentialStore(snapshot: MultiOrgCredentialStore, backend?: SecretBackend, resolution?: StoreResolution): {
+    backend: SecretBackend;
+};
+/**
+ * Resolve one org's credentials. Precedence for which org: explicit `org`
+ * option, else the store's active org, else the sole pending legacy session.
+ */
+export declare function loadCredentials(mcpUrl?: string, backend?: SecretBackend, resolution?: StoreResolution, options?: {
+    org?: string;
+}): StoredCredentials | null;
+/** Legacy pending session only (not the active named org). */
+export declare function loadPendingCredentials(mcpUrl?: string, backend?: SecretBackend, resolution?: StoreResolution): StoredCredentials | null;
+export declare function pickCredentialsFromStore(snapshot: MultiOrgCredentialStore, org?: string): StoredCredentials | null;
+/**
+ * Upsert one org's credentials. Replaces that org's prior tokens when the slug
+ * already exists; leaves other orgs untouched.
+ *
+ * `activate` (default true) makes the saved org active — used by `kody login`.
+ * Pass `activate: false` for token refresh so a one-shot `--org` / `KODY_ORG`
+ * refresh does not steal the active org from `kody org use`.
+ */
+export declare function saveCredentials(credentials: StoredCredentials, backend?: SecretBackend, resolution?: StoreResolution, options?: {
+    activate?: boolean;
+}): {
     backend: SecretBackend;
 };
-export declare function deleteCredentials(mcpUrl?: string, backend?: SecretBackend, resolution?: StoreResolution): {
+/**
+ * Promote pending legacy tokens into `orgs[slug]`.
+ * Never overwrites an existing named login (a fresh `kody login` wins), and
+ * never steals `activeOrg` away from an already-active named org.
+ */
+export declare function promotePendingOrg(mcpUrl: string, org: string, backend?: SecretBackend, resolution?: StoreResolution): MultiOrgCredentialStore | null;
+export declare function setActiveOrg(mcpUrl: string, org: string, backend?: SecretBackend, resolution?: StoreResolution): MultiOrgCredentialStore;
+export declare function listOrgSlugs(snapshot: MultiOrgCredentialStore): Array<string>;
+export type ListedOrg = {
+    slug: string;
+    active: boolean;
+    /** True when this row is the unresolved legacy session (no slug yet). */
+    pending?: boolean;
+};
+/** Local-only listing for help / `org list` (no network). */
+export declare function listStoredOrgs(mcpUrl?: string, backend?: SecretBackend, resolution?: StoreResolution): Array<ListedOrg>;
+export declare function deleteCredentials(mcpUrl?: string, backend?: SecretBackend, resolution?: StoreResolution, options?: {
+    org?: string;
+}): {
     deleted: boolean;
     backend: SecretBackend;
+    remaining: number;
 };