@kodycodes/cli 1.24.1 → 1.25.1

package/dist/local-runtime-bridge.js

@@ -0,0 +1,128 @@
+/**
+ * Loopback HTTP bridge between local workerd and the CLI host process.
+ *
+ * - `POST /call` — JSON CapabilityProxy hop (`{ path, args }` → `{ result|error }`)
+ * - `POST /gateway-fetch` — streaming gateway-fetch hop (raw body in/out)
+ */
+import { createServer, } from 'node:http';
+import { Readable } from 'node:stream';
+import { redact } from './redact.js';
+import { runSecretHeader } from './local-runtime-source.js';
+export const localBridgeCallPath = '/call';
+export const localBridgeGatewayFetchPath = '/gateway-fetch';
+export async function startLocalRuntimeBridge(input) {
+    const inFlight = new AbortController();
+    const server = createServer(async (request, response) => {
+        const replyJson = (status, body, headers = {}) => {
+            response.writeHead(status, {
+                'content-type': 'application/json',
+                ...headers,
+            });
+            response.end(JSON.stringify(body));
+        };
+        /** Open API-shaped error so workerd `gatewayFetchStream` throws (needs no-store). */
+        const replyGatewayFetchError = (status, message, code) => {
+            replyJson(status, { error: { code, message } }, { 'Cache-Control': 'no-store' });
+        };
+        if (request.headers[runSecretHeader] !== input.runSecret) {
+            replyJson(403, { error: 'Forbidden' });
+            return;
+        }
+        if (request.method === 'POST' && request.url === localBridgeCallPath) {
+            try {
+                const call = parseBridgeCall(await readBodyText(request));
+                const result = await input.forwardCall(call, inFlight.signal);
+                replyJson(200, { result });
+            }
+            catch (error) {
+                replyJson(200, {
+                    error: redact(error instanceof Error ? error.message : String(error)),
+                });
+            }
+            return;
+        }
+        if (request.method === 'POST' && request.url === localBridgeGatewayFetchPath) {
+            try {
+                await input.forwardGatewayFetchStream({
+                    request,
+                    response,
+                    signal: inFlight.signal,
+                });
+            }
+            catch (error) {
+                if (response.headersSent) {
+                    response.destroy(error instanceof Error ? error : new Error(String(error)));
+                    return;
+                }
+                replyGatewayFetchError(502, redact(error instanceof Error ? error.message : String(error)), 'gateway_fetch_failed');
+            }
+            return;
+        }
+        replyJson(403, { error: 'Forbidden' });
+    });
+    await new Promise((resolve, reject) => {
+        server.once('error', reject);
+        server.listen(0, '127.0.0.1', () => resolve());
+    });
+    return {
+        port: server.address().port,
+        close: () => new Promise((resolve) => {
+            inFlight.abort();
+            server.closeAllConnections();
+            server.close(() => resolve());
+        }),
+    };
+}
+export function parseBridgeCall(body) {
+    const parsed = JSON.parse(body);
+    if (!Array.isArray(parsed.path) ||
+        parsed.path.length === 0 ||
+        !parsed.path.every((segment) => typeof segment === 'string')) {
+        throw new Error('Invalid kody:runtime call path.');
+    }
+    return {
+        path: parsed.path,
+        args: Array.isArray(parsed.args) ? parsed.args : [],
+    };
+}
+export async function readBodyText(stream) {
+    const chunks = [];
+    for await (const chunk of stream) {
+        chunks.push(Buffer.isBuffer(chunk) ? chunk : Buffer.from(chunk));
+    }
+    return Buffer.concat(chunks).toString('utf8');
+}
+export async function readBodyBuffer(stream) {
+    const chunks = [];
+    for await (const chunk of stream) {
+        chunks.push(Buffer.isBuffer(chunk) ? chunk : Buffer.from(chunk));
+    }
+    return Buffer.concat(chunks);
+}
+/** Write a Web `Response` onto a Node `ServerResponse` (streams the body). */
+export async function writeWebResponse(response, web) {
+    const headers = {};
+    web.headers.forEach((value, name) => {
+        const existing = headers[name];
+        if (existing === undefined) {
+            headers[name] = value;
+            return;
+        }
+        headers[name] = Array.isArray(existing)
+            ? [...existing, value]
+            : [existing, value];
+    });
+    response.writeHead(web.status, web.statusText, headers);
+    if (!web.body) {
+        response.end();
+        return;
+    }
+    const nodeStream = Readable.fromWeb(web.body);
+    await new Promise((resolve, reject) => {
+        nodeStream.on('error', reject);
+        response.on('error', reject);
+        response.on('finish', () => resolve());
+        nodeStream.pipe(response);
+    });
+}
+//# sourceMappingURL=local-runtime-bridge.js.map

package/dist/local-runtime-bridge.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"local-runtime-bridge.js","sourceRoot":"","sources":["../src/local-runtime-bridge.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EACN,YAAY,GAIZ,MAAM,WAAW,CAAA;AAElB,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAA;AACtC,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAA;AACpC,OAAO,EAAE,eAAe,EAAE,MAAM,2BAA2B,CAAA;AAE3D,MAAM,CAAC,MAAM,mBAAmB,GAAG,OAAO,CAAA;AAC1C,MAAM,CAAC,MAAM,2BAA2B,GAAG,gBAAgB,CAAA;AA6B3D,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC5C,KAA8B;IAE9B,MAAM,QAAQ,GAAG,IAAI,eAAe,EAAE,CAAA;IACtC,MAAM,MAAM,GAAW,YAAY,CAAC,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE;QAC/D,MAAM,SAAS,GAAG,CACjB,MAAc,EACd,IAAa,EACb,UAAkC,EAAE,EACnC,EAAE;YACH,QAAQ,CAAC,SAAS,CAAC,MAAM,EAAE;gBAC1B,cAAc,EAAE,kBAAkB;gBAClC,GAAG,OAAO;aACV,CAAC,CAAA;YACF,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAA;QACnC,CAAC,CAAA;QACD,qFAAqF;QACrF,MAAM,sBAAsB,GAAG,CAAC,MAAc,EAAE,OAAe,EAAE,IAAY,EAAE,EAAE;YAChF,SAAS,CACR,MAAM,EACN,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAC5B,EAAE,eAAe,EAAE,UAAU,EAAE,CAC/B,CAAA;QACF,CAAC,CAAA;QACD,IAAI,OAAO,CAAC,OAAO,CAAC,eAAe,CAAC,KAAK,KAAK,CAAC,SAAS,EAAE,CAAC;YAC1D,SAAS,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAA;YACtC,OAAM;QACP,CAAC;QACD,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM,IAAI,OAAO,CAAC,GAAG,KAAK,mBAAmB,EAAE,CAAC;YACtE,IAAI,CAAC;gBACJ,MAAM,IAAI,GAAG,eAAe,CAAC,MAAM,YAAY,CAAC,OAAO,CAAC,CAAC,CAAA;gBACzD,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,WAAW,CAAC,IAAI,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAA;gBAC7D,SAAS,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,CAAC,CAAA;YAC3B,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBAChB,SAAS,CAAC,GAAG,EAAE;oBACd,KAAK,EAAE,MAAM,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;iBACrE,CAAC,CAAA;YACH,CAAC;YACD,OAAM;QACP,CAAC;QACD,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM,IAAI,OAAO,CAAC,GAAG,KAAK,2BAA2B,EAAE,CAAC;YAC9E,IAAI,CAAC;gBACJ,MAAM,KAAK,CAAC,yBAAyB,CAAC;oBACrC,OAAO;oBACP,QAAQ;oBACR,MAAM,EAAE,QAAQ,CAAC,MAAM;iBACvB,CAAC,CAAA;YACH,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBAChB,IAAI,QAAQ,CAAC,WAAW,EAAE,CAAC;oBAC1B,QAAQ,CAAC,OAAO,CACf,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CACzD,CAAA;oBACD,OAAM;gBACP,CAAC;gBACD,sBAAsB,CACrB,GAAG,EACH,MAAM,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAC9D,sBAAsB,CACtB,CAAA;YACF,CAAC;YACD,OAAM;QACP,CAAC;QACD,SAAS,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAA;IACvC,CAAC,CAAC,CAAA;IACF,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QAC3C,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAA;QAC5B,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,WAAW,EAAE,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAA;IAC/C,CAAC,CAAC,CAAA;IACF,OAAO;QACN,IAAI,EAAG,MAAM,CAAC,OAAO,EAAkB,CAAC,IAAI;QAC5C,KAAK,EAAE,GAAG,EAAE,CACX,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;YAC7B,QAAQ,CAAC,KAAK,EAAE,CAAA;YAChB,MAAM,CAAC,mBAAmB,EAAE,CAAA;YAC5B,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAA;QAC9B,CAAC,CAAC;KACH,CAAA;AACF,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,IAAY;IAC3C,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAuC,CAAA;IACrE,IACC,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC;QAC3B,MAAM,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC;QACxB,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,OAAO,KAAK,QAAQ,CAAC,EAC3D,CAAC;QACF,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAA;IACnD,CAAC;IACD,OAAO;QACN,IAAI,EAAE,MAAM,CAAC,IAAqB;QAClC,IAAI,EAAE,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE;KACnD,CAAA;AACF,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,MAAuB;IACzD,MAAM,MAAM,GAAkB,EAAE,CAAA;IAChC,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAClC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAA;IACjE,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAA;AAC9C,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,MAAuB;IAC3D,MAAM,MAAM,GAAkB,EAAE,CAAA;IAChC,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAClC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAA;IACjE,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;AAC7B,CAAC;AAED,8EAA8E;AAC9E,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACrC,QAAwB,EACxB,GAAa;IAEb,MAAM,OAAO,GAA2C,EAAE,CAAA;IAC1D,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;QACnC,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;QAC9B,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC5B,OAAO,CAAC,IAAI,CAAC,GAAG,KAAK,CAAA;YACrB,OAAM;QACP,CAAC;QACD,OAAO,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC;YACtC,CAAC,CAAC,CAAC,GAAG,QAAQ,EAAE,KAAK,CAAC;YACtB,CAAC,CAAC,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAA;IACrB,CAAC,CAAC,CAAA;IACF,QAAQ,CAAC,SAAS,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,UAAU,EAAE,OAAO,CAAC,CAAA;IACvD,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;QACf,QAAQ,CAAC,GAAG,EAAE,CAAA;QACd,OAAM;IACP,CAAC;IACD,MAAM,UAAU,GAAG,QAAQ,CAAC,OAAO,CAClC,GAAG,CAAC,IAAgD,CACpD,CAAA;IACD,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QAC3C,UAAU,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAA;QAC9B,QAAQ,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAA;QAC5B,QAAQ,CAAC,EAAE,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAA;QACtC,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;IAC1B,CAAC,CAAC,CAAA;AACH,CAAC"}

package/dist/local-runtime-source.d.ts

@@ -38,6 +38,11 @@ export declare const kodyRuntimeStorageSymbolDescription = "kody.runtimeStorage"
  * `export *` omits `default`, so re-export it explicitly.
  */
 export declare function createRuntimeFlatAliasSource(): string;
+/** Workerd-side `kody.gatewayFetchStream` + bridge install helpers (shared shape). */
+export declare function localGatewayFetchStreamRuntimeSource(options: {
+    /** Error when the JSON/call bridge is missing. */
+    callUnavailableMessage: string;
+}): string;
 export declare function createLocalRuntimeModuleSource(): string;
 /**
  * Local workerd entry. Optional `sideEffectModules` are imported for their

package/dist/local-runtime-source.js

@@ -42,21 +42,136 @@ export function createRuntimeFlatAliasSource() {
     const runtime = JSON.stringify(localWorkerModuleNames.runtime);
     return `export * from ${runtime};\nexport { default } from ${runtime};\n`;
 }
-export function createLocalRuntimeModuleSource() {
+/** Workerd-side `kody.gatewayFetchStream` + bridge install helpers (shared shape). */
+export function localGatewayFetchStreamRuntimeSource(options) {
     return `
-import { AsyncLocalStorage } from 'node:async_hooks';
-
 let __kodyBridge = null;
 
 export function __kodyInstallLocalBridge(bridge) {
-	__kodyBridge = bridge;
+	// Object form: { call, gatewayFetch }. Legacy function form still works for /call.
+	__kodyBridge =
+		typeof bridge === 'function' ? { call: bridge, gatewayFetch: null } : bridge;
 }
 
 function __kodyCall(path, args) {
-	if (__kodyBridge === null) {
-		throw new Error('kody:runtime is only available while an execute --local run is in progress.');
+	if (__kodyBridge === null || typeof __kodyBridge.call !== 'function') {
+		throw new Error(${JSON.stringify(options.callUnavailableMessage)});
 	}
-	return __kodyBridge(path, args);
+	return __kodyBridge.call(path, args);
+}
+
+const __kodyGatewayNullBodyStatuses = new Set([101, 103, 204, 205, 304]);
+const __kodySecretResolutionHeader = 'x-kody-secret-resolution';
+
+/**
+ * Streaming CapabilityProxy hop (POST /v1/capability-proxy/gateway-fetch via the
+ * loopback bridge). Returns a real Response — not the JSON gatewayFetch envelope.
+ * See kentcdodds/kody docs/contributing/contracts/cli-streaming-gateway-fetch.md.
+ */
+async function gatewayFetchStream(input) {
+	if (__kodyBridge === null || typeof __kodyBridge.gatewayFetch !== 'function') {
+		throw new Error(
+			'Local execute needs kody.gatewayFetchStream on the host runtime to stream a secret-aware fetch body (multipart, large, or ReadableStream). Upgrade @kodycodes/cli, or buffer the body under 4 MiB for the JSON gatewayFetch hop.',
+		);
+	}
+	const record = input != null && typeof input === 'object' && !Array.isArray(input) ? input : null;
+	if (!record) {
+		throw new Error('gatewayFetchStream requires a single object argument: { request, packageId? }.');
+	}
+	const requestValue = record.request;
+	if (requestValue == null || typeof requestValue !== 'object' || Array.isArray(requestValue)) {
+		throw new Error('gatewayFetchStream requires request: { url, method?, headers?, body? }.');
+	}
+	const url = typeof requestValue.url === 'string' ? requestValue.url.trim() : '';
+	if (!url) {
+		throw new Error('gatewayFetchStream request.url must be a non-empty absolute URL.');
+	}
+	const method =
+		typeof requestValue.method === 'string' && requestValue.method.trim()
+			? requestValue.method.trim()
+			: 'GET';
+	const packageId =
+		typeof record.packageId === 'string' && record.packageId.trim()
+			? record.packageId.trim()
+			: undefined;
+	const rawHeaders =
+		requestValue.headers != null &&
+		typeof requestValue.headers === 'object' &&
+		!Array.isArray(requestValue.headers)
+			? { ...requestValue.headers }
+			: {};
+	const outboundHeaders = {};
+	let contentType = null;
+	let secretResolution = null;
+	for (const [key, value] of Object.entries(rawHeaders)) {
+		if (typeof value !== 'string') continue;
+		const lower = key.toLowerCase();
+		if (lower === 'content-type') {
+			contentType = value;
+			continue;
+		}
+		if (lower === __kodySecretResolutionHeader) {
+			secretResolution = value;
+			continue;
+		}
+		outboundHeaders[key] = value;
+	}
+	const headers = {
+		'X-Kody-Gateway-Url': url,
+		'X-Kody-Gateway-Method': method,
+	};
+	if (packageId) headers['X-Kody-Gateway-Package-Id'] = packageId;
+	if (Object.keys(outboundHeaders).length > 0) {
+		headers['X-Kody-Gateway-Headers'] = JSON.stringify(outboundHeaders);
+	}
+	if (contentType) headers['Content-Type'] = contentType;
+	if (secretResolution) headers[__kodySecretResolutionHeader] = secretResolution;
+	const body = Object.hasOwn(requestValue, 'body') ? requestValue.body : null;
+	const init = {
+		method: 'POST',
+		headers,
+	};
+	const upper = method.toUpperCase();
+	if (body != null && upper !== 'GET' && upper !== 'HEAD') {
+		init.body = body;
+		init.duplex = 'half';
+	}
+	if (requestValue.signal != null) init.signal = requestValue.signal;
+	if (requestValue.redirect != null) init.redirect = requestValue.redirect;
+	const response = await __kodyBridge.gatewayFetch(init);
+	const cacheControl = response.headers.get('cache-control') ?? '';
+	const contentTypeHeader = response.headers.get('content-type') ?? '';
+	if (response.status === 413 && !contentTypeHeader.includes('application/json')) {
+		throw new Error(
+			'Request body exceeds the Worker upload limit of 104857600 bytes (100 MiB).',
+		);
+	}
+	if (cacheControl.includes('no-store') && contentTypeHeader.includes('application/json')) {
+		const text = await response.clone().text();
+		try {
+			const parsed = JSON.parse(text);
+			if (parsed != null && typeof parsed === 'object' && parsed.error != null) {
+				const err = parsed.error;
+				const message =
+					typeof err === 'string'
+						? err
+						: typeof err?.message === 'string'
+							? err.message
+							: 'gatewayFetchStream failed.';
+				throw new Error(message);
+			}
+		} catch (error) {
+			if (!(error instanceof SyntaxError)) throw error;
+		}
+	}
+	if (__kodyGatewayNullBodyStatuses.has(response.status)) {
+		return new Response(null, {
+			status: response.status,
+			statusText: response.statusText,
+			headers: response.headers,
+		});
+	}
+	return response;
 }
 
 function __kodyNamespace(path) {
@@ -67,6 +182,13 @@ function __kodyNamespace(path) {
 				return undefined;
 			}
 			if (property === 'toString' || property === 'inspect') return () => label;
+			if (
+				path.length === 1 &&
+				path[0] === 'kody' &&
+				property === 'gatewayFetchStream'
+			) {
+				return gatewayFetchStream;
+			}
 			return __kodyNamespace([...path, property]);
 		},
 		apply(_target, _thisArg, args) {
@@ -74,6 +196,15 @@ function __kodyNamespace(path) {
 		},
 	});
 }
+`.trimStart();
+}
+export function createLocalRuntimeModuleSource() {
+    return `
+import { AsyncLocalStorage } from 'node:async_hooks';
+
+${localGatewayFetchStreamRuntimeSource({
+        callUnavailableMessage: 'kody:runtime is only available while an execute --local run is in progress.',
+    })}
 
 export const kody = __kodyNamespace(['kody']);
 
@@ -303,15 +434,26 @@ export default {
 		}
 		__kodyClaimed = true;
 		const { params } = await request.json();
-		__kodyInstallLocalBridge(async (path, args) => {
-			const response = await env.KODY_BRIDGE.fetch('http://kody-bridge/call', {
-				method: 'POST',
-				headers: { 'content-type': 'application/json', [__kodyRunSecretHeader]: secret },
-				body: JSON.stringify({ path, args }),
-			});
-			const data = await response.json();
-			if (data.error) throw new Error(data.error);
-			return data.result;
+		__kodyInstallLocalBridge({
+			call: async (path, args) => {
+				const response = await env.KODY_BRIDGE.fetch('http://kody-bridge/call', {
+					method: 'POST',
+					headers: { 'content-type': 'application/json', [__kodyRunSecretHeader]: secret },
+					body: JSON.stringify({ path, args }),
+				});
+				const data = await response.json();
+				if (data.error) throw new Error(data.error);
+				return data.result;
+			},
+			gatewayFetch: async (init) => {
+				const headers = new Headers(init?.headers);
+				headers.set(__kodyRunSecretHeader, secret);
+				return await env.KODY_BRIDGE.fetch('http://kody-bridge/gateway-fetch', {
+					...init,
+					method: 'POST',
+					headers,
+				});
+			},
 		});
 		const logs = [];
 		const nativeConsole = globalThis.console;

package/dist/local-runtime-source.js.map

@@ -1 +1 @@
-{"version":3,"file":"local-runtime-source.js","sourceRoot":"","sources":["../src/local-runtime-source.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,EAAE,6BAA6B,EAAE,MAAM,uCAAuC,CAAA;AAErF,MAAM,CAAC,MAAM,6BAA6B,GAAG,YAAY,CAAA;AACzD,MAAM,CAAC,MAAM,8BAA8B,GAAG,CAAC,eAAe,CAAU,CAAA;AAExE,MAAM,CAAC,MAAM,sBAAsB,GAAG;IACrC,KAAK,EAAE,uBAAuB;IAC9B,IAAI,EAAE,SAAS;IACf,OAAO,EAAE,cAAc;IACvB;;;;;OAKG;IACH,gBAAgB,EAAE,sBAAsB;CAC/B,CAAA;AAEV,qFAAqF;AACrF,MAAM,CAAC,MAAM,eAAe,GAAG,mBAAmB,CAAA;AAClD,MAAM,CAAC,MAAM,eAAe,GAAG,iBAAiB,CAAA;AAEhD,+EAA+E;AAC/E,MAAM,CAAC,MAAM,mCAAmC,GAAG,qBAAqB,CAAA;AAExE;;;;;GAKG;AACH,MAAM,UAAU,4BAA4B;IAC3C,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,sBAAsB,CAAC,OAAO,CAAC,CAAA;IAC9D,OAAO,iBAAiB,OAAO,8BAA8B,OAAO,KAAK,CAAA;AAC1E,CAAC;AAED,MAAM,UAAU,8BAA8B;IAC7C,OAAO;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EA8LN,6BAA6B;;;;;;;gDAOiB,IAAI,CAAC,SAAS,CAAC,mCAAmC,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA4BlG,CAAC,SAAS,EAAE,CAAA;AACb,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,sBAAsB,CAAC,QAEnC,EAAE;IACL,MAAM,iBAAiB,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,iBAAiB,IAAI,EAAE,CAAC,CAAC;SACnE,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC;SACpE,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,UAAU,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC;SAChD,IAAI,CAAC,IAAI,CAAC,CAAA;IACZ,MAAM,eAAe,GAAG,iBAAiB,CAAC,CAAC,CAAC,GAAG,iBAAiB,IAAI,CAAC,CAAC,CAAC,EAAE,CAAA;IACzE,OAAO;EACN,eAAe;;;SAGR,IAAI,CAAC,SAAS,CAAC,sBAAsB,CAAC,OAAO,CAAC;;gCAEvB,IAAI,CAAC,SAAS,CAAC,eAAe,CAAC;;;;;;;;;uBASxC,eAAe;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kCA8BJ,IAAI,CAAC,SAAS,CAAC,KAAK,sBAAsB,CAAC,IAAI,EAAE,CAAC;;;;;;;;;;;;;;;;;CAiBnF,CAAC,SAAS,EAAE,CAAA;AACb,CAAC;AASD;;;;;;;;GAQG;AACH,MAAM,UAAU,mBAAmB,CAAC,KAKnC;IACA,MAAM,KAAK,GAAG,8BAA8B,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IAC3F,MAAM,YAAY,GAAG,KAAK,CAAC,mBAAmB;QAC7C,CAAC,CAAC,gCAAgC;QAClC,CAAC,CAAC,YAAY,CAAA;IACf,MAAM,cAAc,GAAG,CAAC,KAAK,CAAC,cAAc,IAAI,EAAE,CAAC;SACjD,GAAG,CACH,CAAC,MAAM,EAAE,EAAE,CACV,eAAe,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,sBAAsB,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAChG;SACA,IAAI,CAAC,IAAI,CAAC,CAAA;IACZ,MAAM,YAAY,GAAG,cAAc,CAAC,CAAC,CAAC,KAAK,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAA;IAChE,4EAA4E;IAC5E,kEAAkE;IAClE,MAAM,oBAAoB,GAAG,sBAAsB,CAAC,gBAAgB,CAAA;IACpE,MAAM,gBAAgB,GAAG,eAAe,IAAI,CAAC,SAAS,CAAC,sBAAsB,CAAC,gBAAgB,CAAC,sBAAsB,IAAI,CAAC,SAAS,CAAC,oBAAoB,CAAC,IAAI,CAAA;IAC7J,OAAO;;;;;8DAKsD,KAAK,CAAC,UAAU;6CACjC,YAAY;;;;;;;cAO3C,IAAI,CAAC,SAAS,CAAC,sBAAsB,CAAC,KAAK,CAAC,sBAAsB,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC;cACnG,IAAI,CAAC,SAAS,CAAC,sBAAsB,CAAC,IAAI,CAAC,sBAAsB,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC;cACjG,IAAI,CAAC,SAAS,CAAC,sBAAsB,CAAC,OAAO,CAAC,sBAAsB,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC;EACnH,gBAAgB,GAAG,YAAY;;wBAET,IAAI,CAAC,SAAS,CAAC,6BAA6B,CAAC;0BAC3C,KAAK;;;;cAIjB,IAAI,CAAC,SAAS,CAAC,eAAe,CAAC,uBAAuB,IAAI,CAAC,SAAS,CAAC,eAAe,CAAC;;;CAGlG,CAAA;AACD,CAAC"}
+{"version":3,"file":"local-runtime-source.js","sourceRoot":"","sources":["../src/local-runtime-source.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,EAAE,6BAA6B,EAAE,MAAM,uCAAuC,CAAA;AAErF,MAAM,CAAC,MAAM,6BAA6B,GAAG,YAAY,CAAA;AACzD,MAAM,CAAC,MAAM,8BAA8B,GAAG,CAAC,eAAe,CAAU,CAAA;AAExE,MAAM,CAAC,MAAM,sBAAsB,GAAG;IACrC,KAAK,EAAE,uBAAuB;IAC9B,IAAI,EAAE,SAAS;IACf,OAAO,EAAE,cAAc;IACvB;;;;;OAKG;IACH,gBAAgB,EAAE,sBAAsB;CAC/B,CAAA;AAEV,qFAAqF;AACrF,MAAM,CAAC,MAAM,eAAe,GAAG,mBAAmB,CAAA;AAClD,MAAM,CAAC,MAAM,eAAe,GAAG,iBAAiB,CAAA;AAEhD,+EAA+E;AAC/E,MAAM,CAAC,MAAM,mCAAmC,GAAG,qBAAqB,CAAA;AAExE;;;;;GAKG;AACH,MAAM,UAAU,4BAA4B;IAC3C,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,sBAAsB,CAAC,OAAO,CAAC,CAAA;IAC9D,OAAO,iBAAiB,OAAO,8BAA8B,OAAO,KAAK,CAAA;AAC1E,CAAC;AAED,sFAAsF;AACtF,MAAM,UAAU,oCAAoC,CAAC,OAGpD;IACA,OAAO;;;;;;;;;;;oBAWY,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,sBAAsB,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA6IjE,CAAC,SAAS,EAAE,CAAA;AACb,CAAC;AAED,MAAM,UAAU,8BAA8B;IAC7C,OAAO;;;EAGN,oCAAoC,CAAC;QACtC,sBAAsB,EACrB,6EAA6E;KAC9E,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAgKA,6BAA6B;;;;;;;gDAOiB,IAAI,CAAC,SAAS,CAAC,mCAAmC,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA4BlG,CAAC,SAAS,EAAE,CAAA;AACb,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,sBAAsB,CAAC,QAEnC,EAAE;IACL,MAAM,iBAAiB,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,iBAAiB,IAAI,EAAE,CAAC,CAAC;SACnE,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC;SACpE,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,UAAU,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC;SAChD,IAAI,CAAC,IAAI,CAAC,CAAA;IACZ,MAAM,eAAe,GAAG,iBAAiB,CAAC,CAAC,CAAC,GAAG,iBAAiB,IAAI,CAAC,CAAC,CAAC,EAAE,CAAA;IACzE,OAAO;EACN,eAAe;;;SAGR,IAAI,CAAC,SAAS,CAAC,sBAAsB,CAAC,OAAO,CAAC;;gCAEvB,IAAI,CAAC,SAAS,CAAC,eAAe,CAAC;;;;;;;;;uBASxC,eAAe;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kCAyCJ,IAAI,CAAC,SAAS,CAAC,KAAK,sBAAsB,CAAC,IAAI,EAAE,CAAC;;;;;;;;;;;;;;;;;CAiBnF,CAAC,SAAS,EAAE,CAAA;AACb,CAAC;AASD;;;;;;;;GAQG;AACH,MAAM,UAAU,mBAAmB,CAAC,KAKnC;IACA,MAAM,KAAK,GAAG,8BAA8B,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IAC3F,MAAM,YAAY,GAAG,KAAK,CAAC,mBAAmB;QAC7C,CAAC,CAAC,gCAAgC;QAClC,CAAC,CAAC,YAAY,CAAA;IACf,MAAM,cAAc,GAAG,CAAC,KAAK,CAAC,cAAc,IAAI,EAAE,CAAC;SACjD,GAAG,CACH,CAAC,MAAM,EAAE,EAAE,CACV,eAAe,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,sBAAsB,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAChG;SACA,IAAI,CAAC,IAAI,CAAC,CAAA;IACZ,MAAM,YAAY,GAAG,cAAc,CAAC,CAAC,CAAC,KAAK,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAA;IAChE,4EAA4E;IAC5E,kEAAkE;IAClE,MAAM,oBAAoB,GAAG,sBAAsB,CAAC,gBAAgB,CAAA;IACpE,MAAM,gBAAgB,GAAG,eAAe,IAAI,CAAC,SAAS,CAAC,sBAAsB,CAAC,gBAAgB,CAAC,sBAAsB,IAAI,CAAC,SAAS,CAAC,oBAAoB,CAAC,IAAI,CAAA;IAC7J,OAAO;;;;;8DAKsD,KAAK,CAAC,UAAU;6CACjC,YAAY;;;;;;;cAO3C,IAAI,CAAC,SAAS,CAAC,sBAAsB,CAAC,KAAK,CAAC,sBAAsB,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC;cACnG,IAAI,CAAC,SAAS,CAAC,sBAAsB,CAAC,IAAI,CAAC,sBAAsB,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC;cACjG,IAAI,CAAC,SAAS,CAAC,sBAAsB,CAAC,OAAO,CAAC,sBAAsB,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC;EACnH,gBAAgB,GAAG,YAAY;;wBAET,IAAI,CAAC,SAAS,CAAC,6BAA6B,CAAC;0BAC3C,KAAK;;;;cAIjB,IAAI,CAAC,SAAS,CAAC,eAAe,CAAC,uBAAuB,IAAI,CAAC,SAAS,CAAC,eAAe,CAAC;;;CAGlG,CAAA;AACD,CAAC"}

package/dist/mock/mock-supported.d.ts

@@ -15,4 +15,4 @@ export type MockCapabilityPath = (typeof mockCapabilityPaths)[number];
 export declare function isMockOpenApiOperation(id: string): id is MockOpenApiOperationId;
 export declare function isMockCapabilityPath(pathKey: string): pathKey is MockCapabilityPath;
 /** CapabilityProxy routes always present on every target. */
-export declare const mockCapabilityProxyRoutes: readonly ["GET /v1/capability-proxy/session", "POST /v1/capability-proxy/call", "POST /v1/local-execute/package-graph"];
+export declare const mockCapabilityProxyRoutes: readonly ["GET /v1/capability-proxy/session", "POST /v1/capability-proxy/call", "POST /v1/capability-proxy/gateway-fetch", "POST /v1/local-execute/package-graph"];

package/dist/mock/mock-supported.js

@@ -57,6 +57,7 @@ export function isMockCapabilityPath(pathKey) {
 export const mockCapabilityProxyRoutes = [
     'GET /v1/capability-proxy/session',
     'POST /v1/capability-proxy/call',
+    'POST /v1/capability-proxy/gateway-fetch',
     'POST /v1/local-execute/package-graph',
 ];
 //# sourceMappingURL=mock-supported.js.map

package/dist/mock/mock-supported.js.map

@@ -1 +1 @@
-{"version":3,"file":"mock-supported.js","sourceRoot":"","sources":["../../src/mock/mock-supported.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,8CAA8C;AAC9C,MAAM,CAAC,MAAM,uBAAuB,GAAG;IACtC,QAAQ;IACR,oBAAoB;IACpB,UAAU;CACD,CAAA;AAEV,6EAA6E;AAC7E,MAAM,CAAC,MAAM,mBAAmB,GAAG;IAClC,yBAAyB;IACzB,aAAa;IACb,cAAc;IACd,eAAe;IACf,6EAA6E;IAC7E,gEAAgE;IAChE,8BAA8B;IAC9B,8BAA8B;IAC9B,iCAAiC;IACjC,+BAA+B;IAC/B,8BAA8B;IAC9B,yEAAyE;IACzE,8DAA8D;IAC9D,wBAAwB;IACxB,wBAAwB;IACxB,2BAA2B;IAC3B,yBAAyB;IACzB,wBAAwB;IACxB,wEAAwE;IACxE,2BAA2B;IAC3B,8BAA8B;IAC9B,4BAA4B;IAC5B,8BAA8B;IAC9B,yEAAyE;IACzE,4EAA4E;IAC5E,wEAAwE;IACxE,0DAA0D;IAC1D,yBAAyB;IACzB,mBAAmB;IACnB,yBAAyB;IACzB,8EAA8E;IAC9E,oBAAoB;CACX,CAAA;AAKV,MAAM,UAAU,sBAAsB,CAAC,EAAU;IAChD,OAAQ,uBAAiD,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAA;AACvE,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,OAAe;IACnD,OAAQ,mBAA6C,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAA;AACxE,CAAC;AAED,6DAA6D;AAC7D,MAAM,CAAC,MAAM,yBAAyB,GAAG;IACxC,kCAAkC;IAClC,gCAAgC;IAChC,sCAAsC;CAC7B,CAAA"}
+{"version":3,"file":"mock-supported.js","sourceRoot":"","sources":["../../src/mock/mock-supported.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,8CAA8C;AAC9C,MAAM,CAAC,MAAM,uBAAuB,GAAG;IACtC,QAAQ;IACR,oBAAoB;IACpB,UAAU;CACD,CAAA;AAEV,6EAA6E;AAC7E,MAAM,CAAC,MAAM,mBAAmB,GAAG;IAClC,yBAAyB;IACzB,aAAa;IACb,cAAc;IACd,eAAe;IACf,6EAA6E;IAC7E,gEAAgE;IAChE,8BAA8B;IAC9B,8BAA8B;IAC9B,iCAAiC;IACjC,+BAA+B;IAC/B,8BAA8B;IAC9B,yEAAyE;IACzE,8DAA8D;IAC9D,wBAAwB;IACxB,wBAAwB;IACxB,2BAA2B;IAC3B,yBAAyB;IACzB,wBAAwB;IACxB,wEAAwE;IACxE,2BAA2B;IAC3B,8BAA8B;IAC9B,4BAA4B;IAC5B,8BAA8B;IAC9B,yEAAyE;IACzE,4EAA4E;IAC5E,wEAAwE;IACxE,0DAA0D;IAC1D,yBAAyB;IACzB,mBAAmB;IACnB,yBAAyB;IACzB,8EAA8E;IAC9E,oBAAoB;CACX,CAAA;AAKV,MAAM,UAAU,sBAAsB,CAAC,EAAU;IAChD,OAAQ,uBAAiD,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAA;AACvE,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,OAAe;IACnD,OAAQ,mBAA6C,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAA;AACxE,CAAC;AAED,6DAA6D;AAC7D,MAAM,CAAC,MAAM,yBAAyB,GAAG;IACxC,kCAAkC;IAClC,gCAAgC;IAChC,yCAAyC;IACzC,sCAAsC;CAC7B,CAAA"}

package/dist/package-app-dev.d.ts

@@ -9,6 +9,7 @@
  * so a save is never answered by a 503 or a stale bundle.
  */
 import { type DevEvent } from './dev/dev-events.js';
+import { type DevServerStatus } from './dev/dev-registry.js';
 import { type PackageLocalContext } from './package-local-runtime-source.js';
 import type { KodyPackageManifest } from './package-manifest.js';
 import type { KodyTarget } from './target.js';
@@ -73,6 +74,8 @@ export type PackageAppDevServer = {
         headers: Record<string, string>;
         body: string;
     }>;
+    /** Same JSON as `GET /__kody/dev/status`. */
+    status: () => DevServerStatus;
     close: () => Promise<void>;
 };
 export declare function startPackageAppDev(options: PackageAppDevOptions): Promise<PackageAppDevServer>;