@kodycodes/cli 1.17.0 → 1.19.0

package/dist/package-local-runtime-source.js

@@ -0,0 +1,317 @@
+/**
+ * `kody:runtime` for unpublished package runs (`kody dev`, local export/job/
+ * webhook/subscription). Same CapabilityProxy bridge as local-execute, plus a
+ * real `packageContext` and mock-backed `packageStorage()` hops.
+ */
+import { credentialClientRuntimeSource } from './credential-client-runtime-source.js';
+import { kodyRuntimeStorageSymbolDescription, localExecuteCompatibilityDate, localExecuteCompatibilityFlags, localWorkerModuleNames, runSecretEnvVar, runSecretHeader, } from './local-runtime-source.js';
+export { localExecuteCompatibilityDate, localExecuteCompatibilityFlags, localWorkerModuleNames, runSecretEnvVar, runSecretHeader, };
+/**
+ * Runtime module for package-local workerd. `packageStorage()` hops through the
+ * bridge to mock `__mockPackageStorage*` (or refuses clearly on prod until the
+ * package is published).
+ */
+export function createPackageLocalRuntimeModuleSource(input) {
+    const ctxLiteral = JSON.stringify(input.packageContext);
+    const storageBlock = input.mockStorage
+        ? `
+export function packageStorage() {
+	return {
+		async get(key) {
+			const result = await __kodyCall(['kody', '__mockPackageStorageGet'], [{ key: String(key) }]);
+			return result?.value ?? null;
+		},
+		async set(key, value) {
+			await __kodyCall(['kody', '__mockPackageStorageSet'], [{ key: String(key), value }]);
+		},
+		async delete(key) {
+			const result = await __kodyCall(['kody', '__mockPackageStorageDelete'], [{ key: String(key) }]);
+			return Boolean(result?.deleted);
+		},
+		async list() {
+			const result = await __kodyCall(['kody', '__mockPackageStorageList'], [{}]);
+			return result?.entries ?? [];
+		},
+	};
+}
+`
+        : `
+export function packageStorage() {
+	throw new Error(
+		'packageStorage() against --target prod requires a published package with real storage. ' +
+			'Use \`--target mock\` for scratch storage while iterating on an unpublished package.',
+	);
+}
+`;
+    return `
+import { AsyncLocalStorage } from 'node:async_hooks';
+
+let __kodyBridge = null;
+
+export function __kodyInstallLocalBridge(bridge) {
+	__kodyBridge = bridge;
+}
+
+function __kodyCall(path, args) {
+	if (__kodyBridge === null) {
+		throw new Error('kody:runtime is only available while a local package run is in progress.');
+	}
+	return __kodyBridge(path, args);
+}
+
+function __kodyNamespace(path) {
+	const label = '[KodyRuntime:' + path.join('.') + ']';
+	return new Proxy(function () {}, {
+		get(_target, property) {
+			if (typeof property === 'symbol' || property === 'then' || property === 'toJSON') {
+				return undefined;
+			}
+			if (property === 'toString' || property === 'inspect') return () => label;
+			return __kodyNamespace([...path, property]);
+		},
+		apply(_target, _thisArg, args) {
+			return __kodyCall(path, args);
+		},
+	});
+}
+
+export const kody = __kodyNamespace(['kody']);
+
+export const workflows = {
+	create: async (input) => await __kodyCall(['workflows', 'create'], [input ?? {}]),
+};
+
+export const packages = null;
+${storageBlock}
+
+function __kodyPackageSecretsUnavailable() {
+	throw new Error(
+		'packageSecrets is not available in this local package context on the CLI mock/prod bridge yet.',
+	);
+}
+
+export const packageSecrets = {
+	get: async () => __kodyPackageSecretsUnavailable(),
+	has: async () => __kodyPackageSecretsUnavailable(),
+};
+export const packageContext = Object.freeze(${ctxLiteral});
+export const email = null;
+export const events = null;
+
+const __kodyNullBodyStatuses = new Set([204, 205, 304]);
+
+function __kodyBytesToBase64(bytes) {
+	let binary = '';
+	for (let i = 0; i < bytes.length; i += 1) {
+		binary += String.fromCharCode(bytes[i]);
+	}
+	return btoa(binary);
+}
+
+function __kodyBase64ToBytes(value) {
+	const binary = atob(value);
+	const bytes = new Uint8Array(binary.length);
+	for (let i = 0; i < binary.length; i += 1) {
+		bytes[i] = binary.charCodeAt(i);
+	}
+	return bytes;
+}
+
+export function createAuthenticatedFetch(input) {
+	return async (resource, init) => {
+		return await __kodyCall(['kody', 'createAuthenticatedFetch'], [
+			{ input, resource: String(resource), init: init ?? {} },
+		]);
+	};
+}
+
+export const secretHeaders = {
+	bearer(input) {
+		const name = String(input?.name ?? input ?? '').trim();
+		if (!name) throw new Error('secretHeaders.bearer requires a secret name.');
+		const scope =
+			typeof input?.scope === 'string' && input.scope.trim()
+				? input.scope.trim()
+				: null;
+		return scope
+			? \`{{secret-bearer:\${name}|scope=\${scope}}}\`
+			: \`{{secret-bearer:\${name}}}\`;
+	},
+	basic(input) {
+		const usernameSecret = String(input?.usernameSecret ?? '').trim();
+		const passwordSecret = String(input?.passwordSecret ?? '').trim();
+		if (!usernameSecret || !passwordSecret) {
+			throw new Error(
+				'secretHeaders.basic requires usernameSecret and passwordSecret.',
+			);
+		}
+		const scope =
+			typeof input?.scope === 'string' && input.scope.trim()
+				? input.scope.trim()
+				: null;
+		return scope
+			? \`{{secret-basic:username=\${usernameSecret},password=\${passwordSecret}|scope=\${scope}}}\`
+			: \`{{secret-basic:username=\${usernameSecret},password=\${passwordSecret}}}\`;
+	},
+};
+
+export async function oauthClientCredentials(input) {
+	return await __kodyCall(['kody', 'oauthClientCredentials'], [input ?? {}]);
+}
+
+${credentialClientRuntimeSource}
+const __kodyCredentialRuntime = __kodyCreateCredentialRuntime((name, args) =>
+	__kodyCall(['kody', name], [args ?? {}]),
+);
+export const credential = __kodyCredentialRuntime.credential;
+export const credentials = __kodyCredentialRuntime.credentials;
+
+const __kodyRuntimeStorageSymbol = Symbol.for(${JSON.stringify(kodyRuntimeStorageSymbolDescription)});
+const __globalAny = globalThis;
+const __kodyRuntimeStorage =
+	__globalAny[__kodyRuntimeStorageSymbol] ??
+	(__globalAny[__kodyRuntimeStorageSymbol] = new AsyncLocalStorage());
+
+const __kodyRuntimeDefault = Object.freeze({
+	kody,
+	packageStorage,
+	createAuthenticatedFetch,
+	secretHeaders,
+	oauthClientCredentials,
+	credential,
+	credentials,
+	packageContext,
+	packageSecrets,
+	email,
+	workflows,
+	packages,
+	events,
+});
+export default __kodyRuntimeDefault;
+export const KodyRuntime = Object.freeze({ defaultValue: __kodyRuntimeDefault });
+
+export function __kodyRunInLocalRuntime(callback) {
+	return __kodyRuntimeStorage.run(__kodyRuntimeDefault, callback);
+}
+
+// Keep unused helpers referenced so esbuild/workerd does not strip them in future.
+void __kodyNullBodyStatuses;
+void __kodyBytesToBase64;
+void __kodyBase64ToBytes;
+`.trimStart();
+}
+/** Execute-style entry: default export function(params). */
+export function createPackageModuleEntrySource() {
+    return `
+import {
+	__kodyInstallLocalBridge,
+	__kodyRunInLocalRuntime,
+} from ${JSON.stringify(localWorkerModuleNames.runtime)};
+
+const __kodyRunSecretHeader = ${JSON.stringify(runSecretHeader)};
+let __kodyClaimed = false;
+
+function __kodyFormatLogArgs(args) {
+	return args.map(String).join(' ');
+}
+
+export default {
+	async fetch(request, env) {
+		const secret = env.${runSecretEnvVar};
+		if (__kodyClaimed || !secret || request.headers.get(__kodyRunSecretHeader) !== secret) {
+			return new Response('Forbidden', { status: 403 });
+		}
+		__kodyClaimed = true;
+		const { params } = await request.json();
+		__kodyInstallLocalBridge(async (path, args) => {
+			const response = await env.KODY_BRIDGE.fetch('http://kody-bridge/call', {
+				method: 'POST',
+				headers: { 'content-type': 'application/json', [__kodyRunSecretHeader]: secret },
+				body: JSON.stringify({ path, args }),
+			});
+			const data = await response.json();
+			if (data.error) throw new Error(data.error);
+			return data.result;
+		});
+		const logs = [];
+		const nativeConsole = globalThis.console;
+		globalThis.console = {
+			...nativeConsole,
+			log: (...a) => { logs.push(__kodyFormatLogArgs(a)); },
+			info: (...a) => { logs.push('[info] ' + __kodyFormatLogArgs(a)); },
+			debug: (...a) => { logs.push('[debug] ' + __kodyFormatLogArgs(a)); },
+			warn: (...a) => { logs.push('[warn] ' + __kodyFormatLogArgs(a)); },
+			error: (...a) => { logs.push('[error] ' + __kodyFormatLogArgs(a)); },
+		};
+		try {
+			const result = await __kodyRunInLocalRuntime(async () => {
+				const module = await import(${JSON.stringify(`./${localWorkerModuleNames.user}`)});
+				if (typeof module?.default !== 'function') {
+					throw new Error('Package modules must default export a function.');
+				}
+				return await module.default(params);
+			});
+			return new Response(JSON.stringify({ result, logs }), {
+				headers: { 'content-type': 'application/json' },
+			});
+		} catch (error) {
+			const message = error instanceof Error ? error.message : String(error);
+			return Response.json({ error: message, logs });
+		} finally {
+			globalThis.console = nativeConsole;
+		}
+	},
+};
+`.trimStart();
+}
+/**
+ * App fetch entry: wraps user `kody.app.entry` so the host always sees a Worker
+ * `{ fetch }` export. Mount is already stripped by the Node proxy before this
+ * request reaches workerd (pathname is the rest path).
+ */
+export function createPackageAppEntrySource() {
+    return `
+import {
+	__kodyInstallLocalBridge,
+	__kodyRunInLocalRuntime,
+} from ${JSON.stringify(localWorkerModuleNames.runtime)};
+
+const __kodyRunSecretHeader = ${JSON.stringify(runSecretHeader)};
+
+function __kodyResolveFetch(module) {
+	if (typeof module?.default === 'function') return module.default.bind(module);
+	if (module?.default && typeof module.default.fetch === 'function') {
+		return module.default.fetch.bind(module.default);
+	}
+	if (typeof module?.fetch === 'function') return module.fetch.bind(module);
+	throw new Error(
+		'kody.app.entry must default-export a fetch handler, { fetch }, or a named fetch export.',
+	);
+}
+
+export default {
+	async fetch(request, env) {
+		const secret = env.${runSecretEnvVar};
+		if (!secret || request.headers.get(__kodyRunSecretHeader) !== secret) {
+			return new Response('Forbidden', { status: 403 });
+		}
+		__kodyInstallLocalBridge(async (path, args) => {
+			const response = await env.KODY_BRIDGE.fetch('http://kody-bridge/call', {
+				method: 'POST',
+				headers: { 'content-type': 'application/json', [__kodyRunSecretHeader]: secret },
+				body: JSON.stringify({ path, args }),
+			});
+			const data = await response.json();
+			if (data.error) throw new Error(data.error);
+			return data.result;
+		});
+		return await __kodyRunInLocalRuntime(async () => {
+			const module = await import(${JSON.stringify(`./${localWorkerModuleNames.user}`)});
+			const fetchHandler = __kodyResolveFetch(module);
+			return await fetchHandler(request, env);
+		});
+	},
+};
+`.trimStart();
+}
+//# sourceMappingURL=package-local-runtime-source.js.map

package/dist/package-local-runtime-source.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"package-local-runtime-source.js","sourceRoot":"","sources":["../src/package-local-runtime-source.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,6BAA6B,EAAE,MAAM,uCAAuC,CAAA;AACrF,OAAO,EACN,mCAAmC,EACnC,6BAA6B,EAC7B,8BAA8B,EAC9B,sBAAsB,EACtB,eAAe,EACf,eAAe,GACf,MAAM,2BAA2B,CAAA;AAalC,OAAO,EACN,6BAA6B,EAC7B,8BAA8B,EAC9B,sBAAsB,EACtB,eAAe,EACf,eAAe,GACf,CAAA;AAED;;;;GAIG;AACH,MAAM,UAAU,qCAAqC,CAAC,KAIrD;IACA,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,cAAc,CAAC,CAAA;IACvD,MAAM,YAAY,GAAG,KAAK,CAAC,WAAW;QACrC,CAAC,CAAC;;;;;;;;;;;;;;;;;;;;CAoBH;QACC,CAAC,CAAC;;;;;;;CAOH,CAAA;IAEA,OAAO;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAuCN,YAAY;;;;;;;;;;;;8CAYgC,UAAU;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAiEtD,6BAA6B;;;;;;;gDAOiB,IAAI,CAAC,SAAS,CAAC,mCAAmC,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAgClG,CAAC,SAAS,EAAE,CAAA;AACb,CAAC;AAED,4DAA4D;AAC5D,MAAM,UAAU,8BAA8B;IAC7C,OAAO;;;;SAIC,IAAI,CAAC,SAAS,CAAC,sBAAsB,CAAC,OAAO,CAAC;;gCAEvB,IAAI,CAAC,SAAS,CAAC,eAAe,CAAC;;;;;;;;;uBASxC,eAAe;;;;;;;;;;;;;;;;;;;;;;;;;;;;kCA4BJ,IAAI,CAAC,SAAS,CAAC,KAAK,sBAAsB,CAAC,IAAI,EAAE,CAAC;;;;;;;;;;;;;;;;;CAiBnF,CAAC,SAAS,EAAE,CAAA;AACb,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,2BAA2B;IAC1C,OAAO;;;;SAIC,IAAI,CAAC,SAAS,CAAC,sBAAsB,CAAC,OAAO,CAAC;;gCAEvB,IAAI,CAAC,SAAS,CAAC,eAAe,CAAC;;;;;;;;;;;;;;;uBAexC,eAAe;;;;;;;;;;;;;;;iCAeL,IAAI,CAAC,SAAS,CAAC,KAAK,sBAAsB,CAAC,IAAI,EAAE,CAAC;;;;;;CAMlF,CAAC,SAAS,EAAE,CAAA;AACb,CAAC"}

package/dist/package-manifest.d.ts

@@ -0,0 +1,43 @@
+/**
+ * Read and validate the authored package.json `kody` surface used by `kody dev`.
+ */
+export type PackageAppManifest = {
+    entry: string;
+    client?: string;
+    assets?: string;
+};
+export type PackageJobManifest = {
+    entry: string;
+    schedule: string;
+    timezone?: string;
+    enabled?: boolean;
+};
+export type PackageWebhookManifest = {
+    export: string;
+    description?: string;
+    inputMode?: 'request' | 'params';
+};
+export type PackageSubscriptionManifest = {
+    handler: string;
+    description?: string;
+    filters?: unknown;
+};
+export type KodyPackageManifest = {
+    /** Absolute path to package.json */
+    packageJsonPath: string;
+    /** Package root directory */
+    root: string;
+    name: string;
+    kodyId: string;
+    description?: string;
+    exports: Record<string, string>;
+    app?: PackageAppManifest;
+    jobs: Record<string, PackageJobManifest>;
+    webhooks: Record<string, PackageWebhookManifest>;
+    subscriptions: Record<string, PackageSubscriptionManifest>;
+};
+export declare function loadPackageManifest(cwd?: string): Promise<KodyPackageManifest>;
+/** Resolve a package-relative path against the package root. */
+export declare function resolvePackagePath(manifest: KodyPackageManifest, relativePath: string): string;
+/** Resolve an export key (`.` / `./foo`) or filesystem-ish ref to an absolute module path. */
+export declare function resolveExportModulePath(manifest: KodyPackageManifest, exportRef: string): string;

package/dist/package-manifest.js

@@ -0,0 +1,264 @@
+/**
+ * Read and validate the authored package.json `kody` surface used by `kody dev`.
+ */
+import { readFile } from 'node:fs/promises';
+import { dirname, join, resolve } from 'node:path';
+import { StructuredCliError } from './structured-error.js';
+export async function loadPackageManifest(cwd = process.cwd()) {
+    const packageJsonPath = await findPackageJson(cwd);
+    const root = dirname(packageJsonPath);
+    let raw;
+    try {
+        raw = JSON.parse(await readFile(packageJsonPath, 'utf8'));
+    }
+    catch (error) {
+        throw new StructuredCliError({
+            code: 'package_manifest_invalid',
+            message: `Could not read package.json at ${packageJsonPath}.`,
+            where: packageJsonPath,
+            fix: 'Run `kody dev` from a package directory with a valid package.json.',
+            details: { cause: error instanceof Error ? error.message : String(error) },
+        });
+    }
+    if (!raw || typeof raw !== 'object' || Array.isArray(raw)) {
+        throw new StructuredCliError({
+            code: 'package_manifest_invalid',
+            message: 'package.json must be a JSON object.',
+            where: packageJsonPath,
+        });
+    }
+    const pkg = raw;
+    const name = typeof pkg.name === 'string' ? pkg.name : '';
+    const kody = asRecord(pkg.kody) ?? {};
+    const kodyId = typeof kody.id === 'string' && kody.id.trim()
+        ? kody.id.trim()
+        : name.includes('/')
+            ? name.slice(name.lastIndexOf('/') + 1)
+            : name || 'local-package';
+    const exportsField = normalizeExports(pkg.exports);
+    const app = parseApp(kody.app, packageJsonPath);
+    const jobs = parseJobs(kody.jobs, packageJsonPath);
+    const webhooks = parseWebhooks(kody.webhooks, packageJsonPath);
+    const subscriptions = parseSubscriptions(kody.subscriptions, packageJsonPath);
+    return {
+        packageJsonPath,
+        root,
+        name: name || `@local/${kodyId}`,
+        kodyId,
+        description: typeof kody.description === 'string' ? kody.description : undefined,
+        exports: exportsField,
+        app,
+        jobs,
+        webhooks,
+        subscriptions,
+    };
+}
+async function findPackageJson(start) {
+    let dir = resolve(start);
+    for (;;) {
+        const candidate = join(dir, 'package.json');
+        try {
+            await readFile(candidate);
+            return candidate;
+        }
+        catch {
+            const parent = dirname(dir);
+            if (parent === dir) {
+                throw new StructuredCliError({
+                    code: 'package_manifest_invalid',
+                    message: `No package.json found from ${start}.`,
+                    fix: 'cd into a Kody package directory (one with package.json and a kody block).',
+                });
+            }
+            dir = parent;
+        }
+    }
+}
+function normalizeExports(exportsField) {
+    const out = {};
+    if (typeof exportsField === 'string') {
+        out['.'] = exportsField;
+        return out;
+    }
+    if (!exportsField || typeof exportsField !== 'object' || Array.isArray(exportsField)) {
+        return out;
+    }
+    for (const [key, value] of Object.entries(exportsField)) {
+        if (typeof value === 'string') {
+            out[key] = value;
+            continue;
+        }
+        if (value && typeof value === 'object' && !Array.isArray(value)) {
+            const cond = value;
+            const pick = (typeof cond.default === 'string' && cond.default) ||
+                (typeof cond.import === 'string' && cond.import) ||
+                (typeof cond.require === 'string' && cond.require);
+            if (pick)
+                out[key] = pick;
+        }
+    }
+    return out;
+}
+function parseApp(raw, where) {
+    if (raw === undefined || raw === null)
+        return undefined;
+    const record = asRecord(raw);
+    if (!record || typeof record.entry !== 'string' || !record.entry.trim()) {
+        throw new StructuredCliError({
+            code: 'package_manifest_invalid',
+            message: 'kody.app.entry must be a non-empty string path.',
+            where,
+            fix: 'Set `"kody": { "app": { "entry": "./app/router.ts" } }` in package.json.',
+        });
+    }
+    return {
+        entry: record.entry,
+        client: typeof record.client === 'string' ? record.client : undefined,
+        assets: typeof record.assets === 'string' ? record.assets : undefined,
+    };
+}
+function parseJobs(raw, where) {
+    if (raw === undefined || raw === null)
+        return {};
+    const record = asRecord(raw);
+    if (!record) {
+        throw new StructuredCliError({
+            code: 'package_manifest_invalid',
+            message: 'kody.jobs must be an object.',
+            where,
+        });
+    }
+    const out = {};
+    for (const [name, value] of Object.entries(record)) {
+        const job = asRecord(value);
+        if (!job || typeof job.entry !== 'string' || typeof job.schedule !== 'string') {
+            throw new StructuredCliError({
+                code: 'package_manifest_invalid',
+                message: `kody.jobs.${name} requires entry and schedule strings.`,
+                where,
+            });
+        }
+        out[name] = {
+            entry: job.entry,
+            schedule: job.schedule,
+            timezone: typeof job.timezone === 'string' ? job.timezone : undefined,
+            enabled: typeof job.enabled === 'boolean' ? job.enabled : undefined,
+        };
+    }
+    return out;
+}
+function parseWebhooks(raw, where) {
+    if (raw === undefined || raw === null)
+        return {};
+    if (Array.isArray(raw)) {
+        const out = {};
+        for (const item of raw) {
+            const webhook = asRecord(item);
+            if (!webhook || typeof webhook.name !== 'string' || typeof webhook.export !== 'string') {
+                throw new StructuredCliError({
+                    code: 'package_manifest_invalid',
+                    message: 'Each kody.webhooks[] entry needs name and export.',
+                    where,
+                });
+            }
+            out[webhook.name] = {
+                export: webhook.export,
+                description: typeof webhook.description === 'string' ? webhook.description : undefined,
+                inputMode: webhook.inputMode === 'params' ? 'params' : 'request',
+            };
+        }
+        return out;
+    }
+    const record = asRecord(raw);
+    if (!record) {
+        throw new StructuredCliError({
+            code: 'package_manifest_invalid',
+            message: 'kody.webhooks must be an object or array.',
+            where,
+        });
+    }
+    const out = {};
+    for (const [name, value] of Object.entries(record)) {
+        const webhook = asRecord(value);
+        if (!webhook || typeof webhook.export !== 'string') {
+            throw new StructuredCliError({
+                code: 'package_manifest_invalid',
+                message: `kody.webhooks.${name} requires an export string.`,
+                where,
+            });
+        }
+        out[name] = {
+            export: webhook.export,
+            description: typeof webhook.description === 'string' ? webhook.description : undefined,
+            inputMode: webhook.inputMode === 'params' ? 'params' : 'request',
+        };
+    }
+    return out;
+}
+function parseSubscriptions(raw, where) {
+    if (raw === undefined || raw === null)
+        return {};
+    const record = asRecord(raw);
+    if (!record) {
+        throw new StructuredCliError({
+            code: 'package_manifest_invalid',
+            message: 'kody.subscriptions must be an object keyed by event topic.',
+            where,
+        });
+    }
+    const out = {};
+    for (const [topic, value] of Object.entries(record)) {
+        const sub = asRecord(value);
+        if (!sub || typeof sub.handler !== 'string') {
+            throw new StructuredCliError({
+                code: 'package_manifest_invalid',
+                message: `kody.subscriptions[${JSON.stringify(topic)}] requires a handler path.`,
+                where,
+            });
+        }
+        out[topic] = {
+            handler: sub.handler,
+            description: typeof sub.description === 'string' ? sub.description : undefined,
+            filters: sub.filters,
+        };
+    }
+    return out;
+}
+function asRecord(value) {
+    if (typeof value !== 'object' || value === null || Array.isArray(value))
+        return null;
+    return value;
+}
+/** Resolve a package-relative path against the package root. */
+export function resolvePackagePath(manifest, relativePath) {
+    return resolve(manifest.root, relativePath);
+}
+/** Resolve an export key (`.` / `./foo`) or filesystem-ish ref to an absolute module path. */
+export function resolveExportModulePath(manifest, exportRef) {
+    const trimmed = exportRef.trim();
+    if (!trimmed) {
+        throw new StructuredCliError({
+            code: 'dev_surface_missing',
+            message: 'Export reference is empty.',
+            fix: 'Pass an export key from package.json#exports (e.g. `.` or `./on-user-deleted`).',
+        });
+    }
+    if (trimmed in manifest.exports) {
+        return resolvePackagePath(manifest, manifest.exports[trimmed]);
+    }
+    const withDot = trimmed.startsWith('./') ? trimmed : `./${trimmed}`;
+    if (withDot in manifest.exports) {
+        return resolvePackagePath(manifest, manifest.exports[withDot]);
+    }
+    // Bare path into the package
+    if (trimmed.startsWith('.') || trimmed.startsWith('/')) {
+        return resolvePackagePath(manifest, trimmed);
+    }
+    throw new StructuredCliError({
+        code: 'dev_surface_missing',
+        message: `No package export ${JSON.stringify(trimmed)}.`,
+        where: manifest.packageJsonPath,
+        fix: `Known exports: ${Object.keys(manifest.exports).join(', ') || '(none)'}.`,
+    });
+}
+//# sourceMappingURL=package-manifest.js.map

package/dist/package-manifest.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"package-manifest.js","sourceRoot":"","sources":["../src/package-manifest.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAA;AAC3C,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AAClD,OAAO,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAA;AA0C1D,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACxC,MAAc,OAAO,CAAC,GAAG,EAAE;IAE3B,MAAM,eAAe,GAAG,MAAM,eAAe,CAAC,GAAG,CAAC,CAAA;IAClD,MAAM,IAAI,GAAG,OAAO,CAAC,eAAe,CAAC,CAAA;IACrC,IAAI,GAAY,CAAA;IAChB,IAAI,CAAC;QACJ,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC,CAAC,CAAA;IAC1D,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,MAAM,IAAI,kBAAkB,CAAC;YAC5B,IAAI,EAAE,0BAA0B;YAChC,OAAO,EAAE,kCAAkC,eAAe,GAAG;YAC7D,KAAK,EAAE,eAAe;YACtB,GAAG,EAAE,oEAAoE;YACzE,OAAO,EAAE,EAAE,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE;SAC1E,CAAC,CAAA;IACH,CAAC;IACD,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QAC3D,MAAM,IAAI,kBAAkB,CAAC;YAC5B,IAAI,EAAE,0BAA0B;YAChC,OAAO,EAAE,qCAAqC;YAC9C,KAAK,EAAE,eAAe;SACtB,CAAC,CAAA;IACH,CAAC;IACD,MAAM,GAAG,GAAG,GAA8B,CAAA;IAC1C,MAAM,IAAI,GAAG,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAA;IACzD,MAAM,IAAI,GAAG,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,CAAA;IACrC,MAAM,MAAM,GACX,OAAO,IAAI,CAAC,EAAE,KAAK,QAAQ,IAAI,IAAI,CAAC,EAAE,CAAC,IAAI,EAAE;QAC5C,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,EAAE;QAChB,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC;YACnB,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YACvC,CAAC,CAAC,IAAI,IAAI,eAAe,CAAA;IAE5B,MAAM,YAAY,GAAG,gBAAgB,CAAC,GAAG,CAAC,OAAO,CAAC,CAAA;IAClD,MAAM,GAAG,GAAG,QAAQ,CAAC,IAAI,CAAC,GAAG,EAAE,eAAe,CAAC,CAAA;IAC/C,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,eAAe,CAAC,CAAA;IAClD,MAAM,QAAQ,GAAG,aAAa,CAAC,IAAI,CAAC,QAAQ,EAAE,eAAe,CAAC,CAAA;IAC9D,MAAM,aAAa,GAAG,kBAAkB,CAAC,IAAI,CAAC,aAAa,EAAE,eAAe,CAAC,CAAA;IAE7E,OAAO;QACN,eAAe;QACf,IAAI;QACJ,IAAI,EAAE,IAAI,IAAI,UAAU,MAAM,EAAE;QAChC,MAAM;QACN,WAAW,EAAE,OAAO,IAAI,CAAC,WAAW,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS;QAChF,OAAO,EAAE,YAAY;QACrB,GAAG;QACH,IAAI;QACJ,QAAQ;QACR,aAAa;KACb,CAAA;AACF,CAAC;AAED,KAAK,UAAU,eAAe,CAAC,KAAa;IAC3C,IAAI,GAAG,GAAG,OAAO,CAAC,KAAK,CAAC,CAAA;IACxB,SAAS,CAAC;QACT,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC,CAAA;QAC3C,IAAI,CAAC;YACJ,MAAM,QAAQ,CAAC,SAAS,CAAC,CAAA;YACzB,OAAO,SAAS,CAAA;QACjB,CAAC;QAAC,MAAM,CAAC;YACR,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,CAAA;YAC3B,IAAI,MAAM,KAAK,GAAG,EAAE,CAAC;gBACpB,MAAM,IAAI,kBAAkB,CAAC;oBAC5B,IAAI,EAAE,0BAA0B;oBAChC,OAAO,EAAE,8BAA8B,KAAK,GAAG;oBAC/C,GAAG,EAAE,4EAA4E;iBACjF,CAAC,CAAA;YACH,CAAC;YACD,GAAG,GAAG,MAAM,CAAA;QACb,CAAC;IACF,CAAC;AACF,CAAC;AAED,SAAS,gBAAgB,CAAC,YAAqB;IAC9C,MAAM,GAAG,GAA2B,EAAE,CAAA;IACtC,IAAI,OAAO,YAAY,KAAK,QAAQ,EAAE,CAAC;QACtC,GAAG,CAAC,GAAG,CAAC,GAAG,YAAY,CAAA;QACvB,OAAO,GAAG,CAAA;IACX,CAAC;IACD,IAAI,CAAC,YAAY,IAAI,OAAO,YAAY,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,CAAC;QACtF,OAAO,GAAG,CAAA;IACX,CAAC;IACD,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,YAAuC,CAAC,EAAE,CAAC;QACpF,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC/B,GAAG,CAAC,GAAG,CAAC,GAAG,KAAK,CAAA;YAChB,SAAQ;QACT,CAAC;QACD,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YACjE,MAAM,IAAI,GAAG,KAAgC,CAAA;YAC7C,MAAM,IAAI,GACT,CAAC,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ,IAAI,IAAI,CAAC,OAAO,CAAC;gBAClD,CAAC,OAAO,IAAI,CAAC,MAAM,KAAK,QAAQ,IAAI,IAAI,CAAC,MAAM,CAAC;gBAChD,CAAC,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ,IAAI,IAAI,CAAC,OAAO,CAAC,CAAA;YACnD,IAAI,IAAI;gBAAE,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,CAAA;QAC1B,CAAC;IACF,CAAC;IACD,OAAO,GAAG,CAAA;AACX,CAAC;AAED,SAAS,QAAQ,CAAC,GAAY,EAAE,KAAa;IAC5C,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI;QAAE,OAAO,SAAS,CAAA;IACvD,MAAM,MAAM,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAA;IAC5B,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,CAAC,KAAK,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,CAAC;QACzE,MAAM,IAAI,kBAAkB,CAAC;YAC5B,IAAI,EAAE,0BAA0B;YAChC,OAAO,EAAE,iDAAiD;YAC1D,KAAK;YACL,GAAG,EAAE,0EAA0E;SAC/E,CAAC,CAAA;IACH,CAAC;IACD,OAAO;QACN,KAAK,EAAE,MAAM,CAAC,KAAK;QACnB,MAAM,EAAE,OAAO,MAAM,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS;QACrE,MAAM,EAAE,OAAO,MAAM,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS;KACrE,CAAA;AACF,CAAC;AAED,SAAS,SAAS,CAAC,GAAY,EAAE,KAAa;IAC7C,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI;QAAE,OAAO,EAAE,CAAA;IAChD,MAAM,MAAM,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAA;IAC5B,IAAI,CAAC,MAAM,EAAE,CAAC;QACb,MAAM,IAAI,kBAAkB,CAAC;YAC5B,IAAI,EAAE,0BAA0B;YAChC,OAAO,EAAE,8BAA8B;YACvC,KAAK;SACL,CAAC,CAAA;IACH,CAAC;IACD,MAAM,GAAG,GAAuC,EAAE,CAAA;IAClD,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QACpD,MAAM,GAAG,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAA;QAC3B,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,CAAC,KAAK,KAAK,QAAQ,IAAI,OAAO,GAAG,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;YAC/E,MAAM,IAAI,kBAAkB,CAAC;gBAC5B,IAAI,EAAE,0BAA0B;gBAChC,OAAO,EAAE,aAAa,IAAI,uCAAuC;gBACjE,KAAK;aACL,CAAC,CAAA;QACH,CAAC;QACD,GAAG,CAAC,IAAI,CAAC,GAAG;YACX,KAAK,EAAE,GAAG,CAAC,KAAK;YAChB,QAAQ,EAAE,GAAG,CAAC,QAAQ;YACtB,QAAQ,EAAE,OAAO,GAAG,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS;YACrE,OAAO,EAAE,OAAO,GAAG,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS;SACnE,CAAA;IACF,CAAC;IACD,OAAO,GAAG,CAAA;AACX,CAAC;AAED,SAAS,aAAa,CAAC,GAAY,EAAE,KAAa;IACjD,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI;QAAE,OAAO,EAAE,CAAA;IAChD,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QACxB,MAAM,GAAG,GAA2C,EAAE,CAAA;QACtD,KAAK,MAAM,IAAI,IAAI,GAAG,EAAE,CAAC;YACxB,MAAM,OAAO,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAA;YAC9B,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,CAAC,IAAI,KAAK,QAAQ,IAAI,OAAO,OAAO,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;gBACxF,MAAM,IAAI,kBAAkB,CAAC;oBAC5B,IAAI,EAAE,0BAA0B;oBAChC,OAAO,EAAE,mDAAmD;oBAC5D,KAAK;iBACL,CAAC,CAAA;YACH,CAAC;YACD,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG;gBACnB,MAAM,EAAE,OAAO,CAAC,MAAM;gBACtB,WAAW,EAAE,OAAO,OAAO,CAAC,WAAW,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS;gBACtF,SAAS,EAAE,OAAO,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS;aAChE,CAAA;QACF,CAAC;QACD,OAAO,GAAG,CAAA;IACX,CAAC;IACD,MAAM,MAAM,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAA;IAC5B,IAAI,CAAC,MAAM,EAAE,CAAC;QACb,MAAM,IAAI,kBAAkB,CAAC;YAC5B,IAAI,EAAE,0BAA0B;YAChC,OAAO,EAAE,2CAA2C;YACpD,KAAK;SACL,CAAC,CAAA;IACH,CAAC;IACD,MAAM,GAAG,GAA2C,EAAE,CAAA;IACtD,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QACpD,MAAM,OAAO,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAA;QAC/B,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;YACpD,MAAM,IAAI,kBAAkB,CAAC;gBAC5B,IAAI,EAAE,0BAA0B;gBAChC,OAAO,EAAE,iBAAiB,IAAI,6BAA6B;gBAC3D,KAAK;aACL,CAAC,CAAA;QACH,CAAC;QACD,GAAG,CAAC,IAAI,CAAC,GAAG;YACX,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,WAAW,EAAE,OAAO,OAAO,CAAC,WAAW,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS;YACtF,SAAS,EAAE,OAAO,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS;SAChE,CAAA;IACF,CAAC;IACD,OAAO,GAAG,CAAA;AACX,CAAC;AAED,SAAS,kBAAkB,CAC1B,GAAY,EACZ,KAAa;IAEb,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI;QAAE,OAAO,EAAE,CAAA;IAChD,MAAM,MAAM,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAA;IAC5B,IAAI,CAAC,MAAM,EAAE,CAAC;QACb,MAAM,IAAI,kBAAkB,CAAC;YAC5B,IAAI,EAAE,0BAA0B;YAChC,OAAO,EAAE,4DAA4D;YACrE,KAAK;SACL,CAAC,CAAA;IACH,CAAC;IACD,MAAM,GAAG,GAAgD,EAAE,CAAA;IAC3D,KAAK,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QACrD,MAAM,GAAG,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAA;QAC3B,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;YAC7C,MAAM,IAAI,kBAAkB,CAAC;gBAC5B,IAAI,EAAE,0BAA0B;gBAChC,OAAO,EAAE,sBAAsB,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,4BAA4B;gBAChF,KAAK;aACL,CAAC,CAAA;QACH,CAAC;QACD,GAAG,CAAC,KAAK,CAAC,GAAG;YACZ,OAAO,EAAE,GAAG,CAAC,OAAO;YACpB,WAAW,EAAE,OAAO,GAAG,CAAC,WAAW,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS;YAC9E,OAAO,EAAE,GAAG,CAAC,OAAO;SACpB,CAAA;IACF,CAAC;IACD,OAAO,GAAG,CAAA;AACX,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC/B,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAA;IACpF,OAAO,KAAgC,CAAA;AACxC,CAAC;AAED,gEAAgE;AAChE,MAAM,UAAU,kBAAkB,CAAC,QAA6B,EAAE,YAAoB;IACrF,OAAO,OAAO,CAAC,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAC,CAAA;AAC5C,CAAC;AAED,8FAA8F;AAC9F,MAAM,UAAU,uBAAuB,CACtC,QAA6B,EAC7B,SAAiB;IAEjB,MAAM,OAAO,GAAG,SAAS,CAAC,IAAI,EAAE,CAAA;IAChC,IAAI,CAAC,OAAO,EAAE,CAAC;QACd,MAAM,IAAI,kBAAkB,CAAC;YAC5B,IAAI,EAAE,qBAAqB;YAC3B,OAAO,EAAE,4BAA4B;YACrC,GAAG,EAAE,iFAAiF;SACtF,CAAC,CAAA;IACH,CAAC;IACD,IAAI,OAAO,IAAI,QAAQ,CAAC,OAAO,EAAE,CAAC;QACjC,OAAO,kBAAkB,CAAC,QAAQ,EAAE,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAE,CAAC,CAAA;IAChE,CAAC;IACD,MAAM,OAAO,GAAG,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,OAAO,EAAE,CAAA;IACnE,IAAI,OAAO,IAAI,QAAQ,CAAC,OAAO,EAAE,CAAC;QACjC,OAAO,kBAAkB,CAAC,QAAQ,EAAE,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAE,CAAC,CAAA;IAChE,CAAC;IACD,6BAA6B;IAC7B,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACxD,OAAO,kBAAkB,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAA;IAC7C,CAAC;IACD,MAAM,IAAI,kBAAkB,CAAC;QAC5B,IAAI,EAAE,qBAAqB;QAC3B,OAAO,EAAE,qBAAqB,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,GAAG;QACxD,KAAK,EAAE,QAAQ,CAAC,eAAe;QAC/B,GAAG,EAAE,kBAAkB,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,QAAQ,GAAG;KAC9E,CAAC,CAAA;AACH,CAAC"}

package/dist/remote-execute.d.ts

@@ -13,6 +13,8 @@ export type RemoteExecuteInput = {
     token: string;
     apiUrl: string;
     fetchFn?: typeof fetch;
+    /** User-owned token org selection (`?org=`). */
+    org?: string;
 };
 export declare const credentialFlagRequiresLocalOrMcpMessage = "--credential picks a credential for this run, but token-auth cloud execute goes through CapabilityProxy \u2192 kody.execute, which does not take a call map (package code must not pick by name). Use `execute --local --credential \u2026`, or omit --token / KODY_API_TOKEN and use a `kody login` MCP session so execute receives credentials.";
 /**

package/dist/remote-execute.js

@@ -15,7 +15,12 @@ export async function runRemoteExecuteWithToken(input) {
         throw new Error(credentialFlagRequiresLocalOrMcpMessage);
     }
     const code = resolveRemoteExecuteCode(input);
-    const client = { apiUrl: input.apiUrl, token: input.token, fetchFn: input.fetchFn };
+    const client = {
+        apiUrl: input.apiUrl,
+        token: input.token,
+        fetchFn: input.fetchFn,
+        ...(input.org ? { org: input.org } : {}),
+    };
     await openCapabilityProxySession(client);
     const args = { code };
     if (input.params !== undefined)