@kodycodes/cli 1.26.2 → 1.26.3

package/dist/chunk-RTWUNV76.js

@@ -0,0 +1,309 @@
+import { createRequire as __createRequire } from 'node:module'; const require = __createRequire(import.meta.url);
+import {
+  createFileBackend,
+  secretServiceKeyringOptions
+} from "./chunk-RM34N3KI.js";
+import {
+  apiTokenEnvVar,
+  defaultApiUrl,
+  defaultMcpUrl,
+  keyringService
+} from "./chunk-IHP6PV6X.js";
+
+// src/api-token-store.ts
+import { Entry } from "@napi-rs/keyring";
+import { homedir } from "node:os";
+import { join } from "node:path";
+function accountForApiUrl(apiUrl) {
+  return `cli-api-token:${new URL(apiUrl).origin}`;
+}
+function apiTokenFileStorePath(apiUrl, home = homedir()) {
+  const origin = new URL(apiUrl).host.replace(/[^a-zA-Z0-9.-]/g, "_");
+  const base = process.platform === "win32" ? join(process.env.APPDATA || join(home, "AppData", "Roaming"), "kody") : process.platform === "darwin" ? join(home, "Library", "Application Support", "kody") : join(process.env.XDG_CONFIG_HOME || join(home, ".config"), "kody");
+  return join(base, `api-token-${origin}.json`);
+}
+function createApiTokenKeyringBackend(apiUrl) {
+  const entry = new Entry(
+    keyringService,
+    accountForApiUrl(apiUrl),
+    secretServiceKeyringOptions
+  );
+  return {
+    kind: "keyring",
+    get() {
+      try {
+        return entry.getPassword();
+      } catch {
+        return null;
+      }
+    },
+    set(value) {
+      entry.setPassword(value);
+    },
+    delete() {
+      try {
+        return entry.deleteCredential();
+      } catch {
+        return false;
+      }
+    }
+  };
+}
+function fileBackendFor(apiUrl, resolution) {
+  const path = resolution?.fileStorePath?.(apiUrl) ?? apiTokenFileStorePath(apiUrl);
+  return createFileBackend(path);
+}
+function resolveApiTokenBackend(apiUrl, preferred, resolution) {
+  if (preferred) return preferred;
+  try {
+    return (resolution?.createKeyring ?? createApiTokenKeyringBackend)(apiUrl);
+  } catch {
+    return fileBackendFor(apiUrl, resolution);
+  }
+}
+function parseStoredApiToken(raw) {
+  const parsed = JSON.parse(raw);
+  if (parsed.version !== 1 || typeof parsed.token !== "string" || !parsed.token.startsWith("kody_at_") || typeof parsed.apiUrl !== "string" || typeof parsed.tokenId !== "string") {
+    throw new Error(
+      "Stored Kody API token is invalid. Run `kody auth bootstrap --code \u2026` again."
+    );
+  }
+  return parsed;
+}
+function readParsed(store) {
+  const raw = store.get();
+  if (!raw) return null;
+  return parseStoredApiToken(raw);
+}
+function loadStoredApiToken(apiUrl = defaultApiUrl, backend, resolution) {
+  const store = resolveApiTokenBackend(apiUrl, backend, resolution);
+  try {
+    const loaded = readParsed(store);
+    if (loaded) return loaded;
+  } catch (error) {
+    if (!(store.kind === "keyring" && !backend)) throw error;
+  }
+  if (store.kind === "keyring" && !backend) {
+    return readParsed(fileBackendFor(apiUrl, resolution));
+  }
+  return null;
+}
+function saveStoredApiToken(credentials, backend, resolution) {
+  const store = resolveApiTokenBackend(credentials.apiUrl, backend, resolution);
+  try {
+    store.set(JSON.stringify(credentials));
+    return { backend: store };
+  } catch (error) {
+    if (store.kind === "keyring" && !backend) {
+      const fallback = fileBackendFor(credentials.apiUrl, resolution);
+      fallback.set(JSON.stringify(credentials));
+      return { backend: fallback };
+    }
+    throw error;
+  }
+}
+function deleteStoredApiToken(apiUrl = defaultApiUrl, backend, resolution) {
+  const store = resolveApiTokenBackend(apiUrl, backend, resolution);
+  let deleted = false;
+  try {
+    deleted = store.delete();
+  } catch {
+    deleted = false;
+  }
+  if (store.kind === "keyring" && !backend) {
+    const file = fileBackendFor(apiUrl, resolution);
+    deleted = file.delete() || deleted;
+  }
+  return { deleted, backend: store };
+}
+
+// src/api-token.ts
+var shortAbsoluteLifetimeMs = 24 * 60 * 60 * 1e3;
+var localExecuteOauthPlatformIssueUrl = "https://github.com/kentcdodds/kody/issues/2812";
+var loopbackHosts = /* @__PURE__ */ new Set(["localhost", "127.0.0.1", "[::1]", "::1"]);
+function tryParseUrl(value) {
+  try {
+    return new URL(value);
+  } catch {
+    return null;
+  }
+}
+function isWorkersDevHostname(hostname) {
+  return hostname.endsWith(".workers.dev");
+}
+function isPairedApiUrl(apiUrl = defaultApiUrl, mcpUrl = defaultMcpUrl) {
+  const api = tryParseUrl(apiUrl);
+  const mcp = tryParseUrl(mcpUrl);
+  if (!api || !mcp) return false;
+  const apiIsLoopback = loopbackHosts.has(api.hostname.toLowerCase());
+  const mcpIsLoopback = loopbackHosts.has(mcp.hostname.toLowerCase());
+  if (apiIsLoopback && mcpIsLoopback) {
+    return ["http:", "https:"].includes(api.protocol) && ["http:", "https:"].includes(mcp.protocol);
+  }
+  if (api.protocol !== "https:" || mcp.protocol !== "https:") return false;
+  const apiIsWorkersDev = isWorkersDevHostname(api.hostname);
+  const mcpIsWorkersDev = isWorkersDevHostname(mcp.hostname);
+  if (apiIsWorkersDev || mcpIsWorkersDev) {
+    if (!apiIsWorkersDev || !mcpIsWorkersDev) return false;
+    const apiLabels = api.hostname.toLowerCase().split(".");
+    const mcpLabels = mcp.hostname.toLowerCase().split(".");
+    return apiLabels.length === mcpLabels.length && apiLabels.slice(1).join(".") === mcpLabels.slice(1).join(".") && apiLabels[0] === `${mcpLabels[0]}-api`;
+  }
+  return api.hostname.toLowerCase() === `api.${mcp.hostname.toLowerCase()}`;
+}
+function expectedPairedApiOrigin(mcpUrl) {
+  const mcp = tryParseUrl(mcpUrl);
+  if (!mcp) return "a paired API origin";
+  if (loopbackHosts.has(mcp.hostname.toLowerCase())) {
+    return "a loopback API origin";
+  }
+  const hostname = mcp.hostname.toLowerCase();
+  if (isWorkersDevHostname(hostname)) {
+    const labels = hostname.split(".");
+    labels[0] = `${labels[0]}-api`;
+    return `https://${labels.join(".")}`;
+  }
+  return `https://api.${hostname}`;
+}
+function readApiToken(values = {}, env = process.env) {
+  const token = (values.token ?? env[apiTokenEnvVar] ?? "").trim();
+  return token.length > 0 ? token : null;
+}
+function resolveScopedApiToken(input = {}) {
+  const token = readApiToken(input.tokenValues, input.env);
+  if (token) return token;
+  const apiUrl = input.apiUrl || defaultApiUrl;
+  const loadApi = input.loadApiToken ?? loadStoredApiToken;
+  return loadApi(apiUrl, input.apiTokenBackend, input.apiTokenResolution)?.token ?? null;
+}
+function isScopedApiToken(token) {
+  return token.startsWith("kody_at_");
+}
+function apiTokenMintInstructions() {
+  return `For CI/headless only: mint with the Kody MCP \`api\` tool \`tokenCreate\` (include \`org:execute\` plus the capability scopes this command needs, e.g. \`package:execute\` / \`integration:read\`) and pass --token or set ${apiTokenEnvVar}.`;
+}
+function capabilityProxyForbiddenMessage(input) {
+  const reason = input.serverMessage ? `: ${input.serverMessage}` : "";
+  return `The API token is not allowed to use CapabilityProxy (${input.code ?? "forbidden"})${reason}.
+Fix: run \`npx @kodycodes/cli login\` (agents on Kody MCP: ${cliBootstrapInstructions()}; CI: tokenCreate with \`org:execute\`, passed via --token or ${apiTokenEnvVar}).`;
+}
+function cliBootstrapInstructions(lifetime = "short") {
+  return `From MCP, call \`cliCredentialBootstrap\` (MCP \`api\` / \`kody.cliCredentialBootstrap\`), then run \`npx @kodycodes/cli auth bootstrap --code <kody_bc_\u2026> --lifetime ${lifetime}\``;
+}
+function inferCliTokenLifetimeAlias(stored, nowMs = Date.now()) {
+  if (!stored) return "short";
+  const absoluteMs = Date.parse(stored.maxExpiresAt ?? "") || Date.parse(stored.expiresAt ?? "");
+  if (!Number.isFinite(absoluteMs)) return "short";
+  return absoluteMs - nowMs > shortAbsoluteLifetimeMs ? "long" : "short";
+}
+function cliBootstrapLifetimeFlags(lifetime = "short") {
+  return `--lifetime ${lifetime}`;
+}
+function cliBootstrapLifetimeMintFields(lifetime = "short") {
+  return { lifetime };
+}
+function currentStoredTokenLifetimeAlias(apiUrl = defaultApiUrl, nowMs = Date.now(), loadApiToken = loadStoredApiToken) {
+  return inferCliTokenLifetimeAlias(loadApiToken(apiUrl), nowMs);
+}
+function missingApiTokenMessage(purpose) {
+  return `${purpose} needs a scoped Kody API token. ${cliBootstrapInstructions()}, or ${apiTokenMintInstructions()}`;
+}
+function missingLocalExecuteAuthMessage(purpose = "execute --local") {
+  return `${purpose} needs auth. ${cliBootstrapInstructions()}; or run \`kody login\`; or for CI/headless, ${apiTokenMintInstructions()}`;
+}
+function missingCliAuthMessage() {
+  return `Not logged in, and no API token is set. ${cliBootstrapInstructions()}; or run \`kody login\` for browser OAuth (search, whoami, cloud execute, and login-backed \`execute --local\`); or for CI/headless, ${apiTokenMintInstructions()}`;
+}
+function rejectedOauthBearerMessage() {
+  return `Kody rejected the bearer from \`kody login\`: the Open API still accepts only scoped \`kody_at_\u2026\` API tokens on CapabilityProxy / package-graph (not MCP OAuth). See ${localExecuteOauthPlatformIssueUrl}. Until that lands, ${apiTokenMintInstructions()}`;
+}
+function readInsufficientScopeDetails(body) {
+  const details = isRecord(body) && isRecord(body.error) && isRecord(body.error.details) ? body.error.details : null;
+  if (!details) return { requiredScope: null, mintScopes: null, denial: null };
+  const requiredScope = readNonEmptyString(details.required_scope) ?? readNonEmptyString(details.required_permission) ?? readStringList(details.required_scopes)?.join(", ") ?? null;
+  return {
+    requiredScope,
+    mintScopes: readStringList(details.mint_scopes),
+    denial: readNonEmptyString(details.denial)
+  };
+}
+function cliBootstrapScopesCommand(scopes, lifetimeFlags = "short") {
+  const flags = lifetimeFlags === "short" || lifetimeFlags === "long" ? cliBootstrapLifetimeFlags(lifetimeFlags) : lifetimeFlags;
+  return `npx @kodycodes/cli auth bootstrap ${flags} --scopes ${scopes.join(",")}`;
+}
+function cliBootstrapMintCall(scopes, lifetime = "short") {
+  const fieldsRecord = lifetime === "short" || lifetime === "long" ? cliBootstrapLifetimeMintFields(lifetime) : lifetime;
+  const fields = [
+    ...Object.entries(fieldsRecord).map(
+      ([key, value]) => `${key}: ${JSON.stringify(value)}`
+    ),
+    `scopes: [${scopes.map((scope) => JSON.stringify(scope)).join(", ")}]`
+  ];
+  return `cliCredentialBootstrap({ ${fields.join(", ")} })`;
+}
+function insufficientScopeMessage(input) {
+  const required = input.requiredScope ?? null;
+  const lifetime = input.currentLifetime === "long" || input.currentLifetime === "short" ? input.currentLifetime : "short";
+  const lifetimeFlags = cliBootstrapLifetimeFlags(lifetime);
+  const lifetimeMint = cliBootstrapLifetimeMintFields(lifetime);
+  if (input.denial === "missing_permission") {
+    return `Kody returned insufficient_scope: your org role does not grant ${required ? `"${required}"` : "the required permission"}. A new token cannot add it; an org Owner can grant it.`;
+  }
+  if (!required) {
+    return `Kody returned insufficient_scope. Mint a token that includes the missing scope: run \`${cliBootstrapScopesCommand(["<scope>", "\u2026"], lifetimeFlags)}\` after \`kody login\`, or from Kody MCP call \`${cliBootstrapMintCall(["<scope>", "\u2026"], lifetimeMint)}\` and run its cli_command. Scopes replace the defaults, so list every scope you need. For CI/headless, mint with tokenCreate and pass --token or set ${apiTokenEnvVar}.`;
+  }
+  const mintScopes = input.mintScopes && input.mintScopes.length > 0 ? input.mintScopes : input.currentScopes && input.currentScopes.length > 0 ? [.../* @__PURE__ */ new Set([...input.currentScopes, ...required.split(/,\s*/)])].sort() : null;
+  if (!mintScopes) {
+    return `Kody returned insufficient_scope: this token is missing "${required}". Mint a token whose scopes include "${required}" plus the ones you already use (scopes replace the defaults): run \`${cliBootstrapScopesCommand(["<current scopes>", required], lifetimeFlags)}\` after \`kody login\`, or from Kody MCP call \`${cliBootstrapMintCall(["<current scopes>", required], lifetimeMint)}\` and run its cli_command. For CI/headless, mint with tokenCreate including "${required}" and pass --token or set ${apiTokenEnvVar}.`;
+  }
+  return `Kody returned insufficient_scope: this token is missing "${required}". Mint one that includes it: run \`${cliBootstrapScopesCommand(mintScopes, lifetimeFlags)}\` after \`kody login\`, or from Kody MCP call \`${cliBootstrapMintCall(mintScopes, lifetimeMint)}\` and run its cli_command. For CI/headless, mint with tokenCreate using those scopes and pass --token or set ${apiTokenEnvVar}.`;
+}
+function isRecord(value) {
+  return value !== null && typeof value === "object" && !Array.isArray(value);
+}
+function readNonEmptyString(value) {
+  return typeof value === "string" && value.trim() ? value.trim() : null;
+}
+function readStringList(value) {
+  if (!Array.isArray(value)) return null;
+  const list = value.filter((item) => typeof item === "string").map((item) => item.trim()).filter(Boolean);
+  return list.length > 0 ? list : null;
+}
+function featureDisabledMessage() {
+  return "Kody returned feature_disabled: CapabilityProxy is not enabled for this Kody account (feature flag `local-execute`). `execute --local` and token-auth cloud execute both stop here; minting another token does not bypass the flag. Browser `kody login` can still run cloud execute over MCP.";
+}
+function requireApiToken(values = {}, env = process.env, purpose = "this command", options = {}) {
+  const token = resolveScopedApiToken({
+    tokenValues: values,
+    env,
+    ...options
+  });
+  if (!token) throw new Error(missingApiTokenMessage(purpose));
+  return token;
+}
+function hasExplicitTokenFlag(values) {
+  return typeof values.token === "string" && values.token.trim().length > 0;
+}
+
+export {
+  loadStoredApiToken,
+  saveStoredApiToken,
+  deleteStoredApiToken,
+  isPairedApiUrl,
+  expectedPairedApiOrigin,
+  readApiToken,
+  resolveScopedApiToken,
+  isScopedApiToken,
+  capabilityProxyForbiddenMessage,
+  currentStoredTokenLifetimeAlias,
+  missingLocalExecuteAuthMessage,
+  missingCliAuthMessage,
+  rejectedOauthBearerMessage,
+  readInsufficientScopeDetails,
+  cliBootstrapMintCall,
+  insufficientScopeMessage,
+  featureDisabledMessage,
+  requireApiToken,
+  hasExplicitTokenFlag
+};
+//# sourceMappingURL=chunk-RTWUNV76.js.map

package/dist/chunk-RTWUNV76.js.map

@@ -0,0 +1,6 @@
+{
+  "version": 3,
+  "sources": ["../src/api-token-store.ts", "../src/api-token.ts"],
+  "mappings": ";;;;;;;;;;;;;AAAA,SAAS,aAAa;AACtB,SAAS,eAAe;AACxB,SAAS,YAAY;AA0Bd,SAAS,iBAAiB,QAAwB;AACxD,SAAO,iBAAiB,IAAI,IAAI,MAAM,EAAE,MAAM;AAC/C;AAEO,SAAS,sBACf,QACA,OAAe,QAAQ,GACd;AACT,QAAM,SAAS,IAAI,IAAI,MAAM,EAAE,KAAK,QAAQ,mBAAmB,GAAG;AAClE,QAAM,OACL,QAAQ,aAAa,UAClB,KAAK,QAAQ,IAAI,WAAW,KAAK,MAAM,WAAW,SAAS,GAAG,MAAM,IACpE,QAAQ,aAAa,WACpB,KAAK,MAAM,WAAW,uBAAuB,MAAM,IACnD,KAAK,QAAQ,IAAI,mBAAmB,KAAK,MAAM,SAAS,GAAG,MAAM;AACtE,SAAO,KAAK,MAAM,aAAa,MAAM,OAAO;AAC7C;AAEO,SAAS,6BAA6B,QAA+B;AAC3E,QAAM,QAAQ,IAAI;AAAA,IACjB;AAAA,IACA,iBAAiB,MAAM;AAAA,IACvB;AAAA,EACD;AACA,SAAO;AAAA,IACN,MAAM;AAAA,IACN,MAAM;AACL,UAAI;AACH,eAAO,MAAM,YAAY;AAAA,MAC1B,QAAQ;AACP,eAAO;AAAA,MACR;AAAA,IACD;AAAA,IACA,IAAI,OAAe;AAClB,YAAM,YAAY,KAAK;AAAA,IACxB;AAAA,IACA,SAAS;AACR,UAAI;AACH,eAAO,MAAM,iBAAiB;AAAA,MAC/B,QAAQ;AACP,eAAO;AAAA,MACR;AAAA,IACD;AAAA,EACD;AACD;AAEA,SAAS,eACR,QACA,YACgB;AAChB,QAAM,OACL,YAAY,gBAAgB,MAAM,KAAK,sBAAsB,MAAM;AACpE,SAAO,kBAAkB,IAAI;AAC9B;AAEA,SAAS,uBACR,QACA,WACA,YACgB;AAChB,MAAI,UAAW,QAAO;AACtB,MAAI;AACH,YAAQ,YAAY,iBAAiB,8BAA8B,MAAM;AAAA,EAC1E,QAAQ;AACP,WAAO,eAAe,QAAQ,UAAU;AAAA,EACzC;AACD;AAEO,SAAS,oBAAoB,KAA6B;AAChE,QAAM,SAAS,KAAK,MAAM,GAAG;AAC7B,MACC,OAAO,YAAY,KACnB,OAAO,OAAO,UAAU,YACxB,CAAC,OAAO,MAAM,WAAW,UAAU,KACnC,OAAO,OAAO,WAAW,YACzB,OAAO,OAAO,YAAY,UACzB;AACD,UAAM,IAAI;AAAA,MACT;AAAA,IACD;AAAA,EACD;AACA,SAAO;AACR;AAEA,SAAS,WAAW,OAA6C;AAChE,QAAM,MAAM,MAAM,IAAI;AACtB,MAAI,CAAC,IAAK,QAAO;AACjB,SAAO,oBAAoB,GAAG;AAC/B;AAEO,SAAS,mBACf,SAAiB,eACjB,SACA,YACwB;AACxB,QAAM,QAAQ,uBAAuB,QAAQ,SAAS,UAAU;AAChE,MAAI;AACH,UAAM,SAAS,WAAW,KAAK;AAC/B,QAAI,OAAQ,QAAO;AAAA,EACpB,SAAS,OAAO;AACf,QAAI,EAAE,MAAM,SAAS,aAAa,CAAC,SAAU,OAAM;AAAA,EACpD;AACA,MAAI,MAAM,SAAS,aAAa,CAAC,SAAS;AACzC,WAAO,WAAW,eAAe,QAAQ,UAAU,CAAC;AAAA,EACrD;AACA,SAAO;AACR;AAEO,SAAS,mBACf,aACA,SACA,YAC6B;AAC7B,QAAM,QAAQ,uBAAuB,YAAY,QAAQ,SAAS,UAAU;AAC5E,MAAI;AACH,UAAM,IAAI,KAAK,UAAU,WAAW,CAAC;AACrC,WAAO,EAAE,SAAS,MAAM;AAAA,EACzB,SAAS,OAAO;AACf,QAAI,MAAM,SAAS,aAAa,CAAC,SAAS;AACzC,YAAM,WAAW,eAAe,YAAY,QAAQ,UAAU;AAC9D,eAAS,IAAI,KAAK,UAAU,WAAW,CAAC;AACxC,aAAO,EAAE,SAAS,SAAS;AAAA,IAC5B;AACA,UAAM;AAAA,EACP;AACD;AAEO,SAAS,qBACf,SAAiB,eACjB,SACA,YAC+C;AAC/C,QAAM,QAAQ,uBAAuB,QAAQ,SAAS,UAAU;AAChE,MAAI,UAAU;AACd,MAAI;AACH,cAAU,MAAM,OAAO;AAAA,EACxB,QAAQ;AACP,cAAU;AAAA,EACX;AACA,MAAI,MAAM,SAAS,aAAa,CAAC,SAAS;AACzC,UAAM,OAAO,eAAe,QAAQ,UAAU;AAC9C,cAAU,KAAK,OAAO,KAAK;AAAA,EAC5B;AACA,SAAO,EAAE,SAAS,SAAS,MAAM;AAClC;;;AC7JA,IAAM,0BAA0B,KAAK,KAAK,KAAK;AAGxC,IAAM,oCACZ;AAYD,IAAM,gBAAgB,oBAAI,IAAI,CAAC,aAAa,aAAa,SAAS,KAAK,CAAC;AAExE,SAAS,YAAY,OAA2B;AAC/C,MAAI;AACH,WAAO,IAAI,IAAI,KAAK;AAAA,EACrB,QAAQ;AACP,WAAO;AAAA,EACR;AACD;AAEA,SAAS,qBAAqB,UAA2B;AACxD,SAAO,SAAS,SAAS,cAAc;AACxC;AAGO,SAAS,eACf,SAAiB,eACjB,SAAiB,eACP;AACV,QAAM,MAAM,YAAY,MAAM;AAC9B,QAAM,MAAM,YAAY,MAAM;AAC9B,MAAI,CAAC,OAAO,CAAC,IAAK,QAAO;AAEzB,QAAM,gBAAgB,cAAc,IAAI,IAAI,SAAS,YAAY,CAAC;AAClE,QAAM,gBAAgB,cAAc,IAAI,IAAI,SAAS,YAAY,CAAC;AAClE,MAAI,iBAAiB,eAAe;AACnC,WAAO,CAAC,SAAS,QAAQ,EAAE,SAAS,IAAI,QAAQ,KAC/C,CAAC,SAAS,QAAQ,EAAE,SAAS,IAAI,QAAQ;AAAA,EAC3C;AACA,MAAI,IAAI,aAAa,YAAY,IAAI,aAAa,SAAU,QAAO;AACnE,QAAM,kBAAkB,qBAAqB,IAAI,QAAQ;AACzD,QAAM,kBAAkB,qBAAqB,IAAI,QAAQ;AACzD,MAAI,mBAAmB,iBAAiB;AACvC,QAAI,CAAC,mBAAmB,CAAC,gBAAiB,QAAO;AACjD,UAAM,YAAY,IAAI,SAAS,YAAY,EAAE,MAAM,GAAG;AACtD,UAAM,YAAY,IAAI,SAAS,YAAY,EAAE,MAAM,GAAG;AACtD,WACC,UAAU,WAAW,UAAU,UAC/B,UAAU,MAAM,CAAC,EAAE,KAAK,GAAG,MAAM,UAAU,MAAM,CAAC,EAAE,KAAK,GAAG,KAC5D,UAAU,CAAC,MAAM,GAAG,UAAU,CAAC,CAAC;AAAA,EAElC;AACA,SAAO,IAAI,SAAS,YAAY,MAAM,OAAO,IAAI,SAAS,YAAY,CAAC;AACxE;AAEO,SAAS,wBAAwB,QAAwB;AAC/D,QAAM,MAAM,YAAY,MAAM;AAC9B,MAAI,CAAC,IAAK,QAAO;AACjB,MAAI,cAAc,IAAI,IAAI,SAAS,YAAY,CAAC,GAAG;AAClD,WAAO;AAAA,EACR;AACA,QAAM,WAAW,IAAI,SAAS,YAAY;AAC1C,MAAI,qBAAqB,QAAQ,GAAG;AACnC,UAAM,SAAS,SAAS,MAAM,GAAG;AACjC,WAAO,CAAC,IAAI,GAAG,OAAO,CAAC,CAAC;AACxB,WAAO,WAAW,OAAO,KAAK,GAAG,CAAC;AAAA,EACnC;AACA,SAAO,eAAe,QAAQ;AAC/B;AAMO,SAAS,aACf,SAA6B,CAAC,GAC9B,MAAyB,QAAQ,KACjB;AAChB,QAAM,SAAS,OAAO,SAAS,IAAI,cAAc,KAAK,IAAI,KAAK;AAC/D,SAAO,MAAM,SAAS,IAAI,QAAQ;AACnC;AAMO,SAAS,sBACf,QAAoC,CAAC,GACrB;AAChB,QAAM,QAAQ,aAAa,MAAM,aAAa,MAAM,GAAG;AACvD,MAAI,MAAO,QAAO;AAClB,QAAM,SAAS,MAAM,UAAU;AAC/B,QAAM,UAAU,MAAM,gBAAgB;AACtC,SAAO,QAAQ,QAAQ,MAAM,iBAAiB,MAAM,kBAAkB,GAAG,SAAS;AACnF;AAGO,SAAS,iBAAiB,OAAwB;AACxD,SAAO,MAAM,WAAW,UAAU;AACnC;AAMO,SAAS,2BAAmC;AAClD,SAAO,8NAA8N,cAAc;AACpP;AAMO,SAAS,gCAAgC,OAGrC;AACV,QAAM,SAAS,MAAM,gBAAgB,KAAK,MAAM,aAAa,KAAK;AAClE,SACC,wDAAwD,MAAM,QAAQ,WAAW,IAAI,MAAM;AAAA,6DAC7B,yBAAyB,CAAC,iEAAiE,cAAc;AAEzK;AAGO,SAAS,yBACf,WAAkC,SACzB;AACT,SAAO,8KAAyK,QAAQ;AACzL;AAOO,SAAS,2BACf,QACA,QAAgB,KAAK,IAAI,GACD;AACxB,MAAI,CAAC,OAAQ,QAAO;AACpB,QAAM,aACL,KAAK,MAAM,OAAO,gBAAgB,EAAE,KAAK,KAAK,MAAM,OAAO,aAAa,EAAE;AAC3E,MAAI,CAAC,OAAO,SAAS,UAAU,EAAG,QAAO;AACzC,SAAO,aAAa,QAAQ,0BAA0B,SAAS;AAChE;AAGO,SAAS,0BACf,WAAkC,SACzB;AACT,SAAO,cAAc,QAAQ;AAC9B;AAGO,SAAS,+BACf,WAAkC,SACA;AAClC,SAAO,EAAE,SAAS;AACnB;AAGO,SAAS,gCACf,SAAiB,eACjB,QAAgB,KAAK,IAAI,GACzB,eAA0C,oBAClB;AACxB,SAAO,2BAA2B,aAAa,MAAM,GAAG,KAAK;AAC9D;AAGO,SAAS,uBAAuB,SAAyB;AAC/D,SAAO,GAAG,OAAO,mCAAmC,yBAAyB,CAAC,QAAQ,yBAAyB,CAAC;AACjH;AAMO,SAAS,+BACf,UAAkB,mBACT;AACT,SAAO,GAAG,OAAO,gBAAgB,yBAAyB,CAAC,gDAAgD,yBAAyB,CAAC;AACtI;AAGO,SAAS,wBAAgC;AAC/C,SAAO,2CAA2C,yBAAyB,CAAC,wIAAwI,yBAAyB,CAAC;AAC/O;AAGO,SAAS,6BAAqC;AACpD,SAAO,8KAAyK,iCAAiC,uBAAuB,yBAAyB,CAAC;AACnQ;AAWO,SAAS,6BAA6B,MAAyC;AACrF,QAAM,UACL,SAAS,IAAI,KAAK,SAAS,KAAK,KAAK,KAAK,SAAS,KAAK,MAAM,OAAO,IAClE,KAAK,MAAM,UACX;AACJ,MAAI,CAAC,QAAS,QAAO,EAAE,eAAe,MAAM,YAAY,MAAM,QAAQ,KAAK;AAC3E,QAAM,gBACL,mBAAmB,QAAQ,cAAc,KACzC,mBAAmB,QAAQ,mBAAmB,KAC9C,eAAe,QAAQ,eAAe,GAAG,KAAK,IAAI,KAClD;AACD,SAAO;AAAA,IACN;AAAA,IACA,YAAY,eAAe,QAAQ,WAAW;AAAA,IAC9C,QAAQ,mBAAmB,QAAQ,MAAM;AAAA,EAC1C;AACD;AAGO,SAAS,0BACf,QACA,gBAAgD,SACvC;AACT,QAAM,QACL,kBAAkB,WAAW,kBAAkB,SAC5C,0BAA0B,aAAa,IACvC;AACJ,SAAO,qCAAqC,KAAK,aAAa,OAAO,KAAK,GAAG,CAAC;AAC/E;AAGO,SAAS,qBACf,QACA,WAAoE,SAC3D;AACT,QAAM,eACL,aAAa,WAAW,aAAa,SAClC,+BAA+B,QAAQ,IACvC;AACJ,QAAM,SAAS;AAAA,IACd,GAAG,OAAO,QAAQ,YAAY,EAAE;AAAA,MAC/B,CAAC,CAAC,KAAK,KAAK,MAAM,GAAG,GAAG,KAAK,KAAK,UAAU,KAAK,CAAC;AAAA,IACnD;AAAA,IACA,YAAY,OAAO,IAAI,CAAC,UAAU,KAAK,UAAU,KAAK,CAAC,EAAE,KAAK,IAAI,CAAC;AAAA,EACpE;AACA,SAAO,4BAA4B,OAAO,KAAK,IAAI,CAAC;AACrD;AAEO,SAAS,yBACf,OASS;AACT,QAAM,WAAW,MAAM,iBAAiB;AACxC,QAAM,WACL,MAAM,oBAAoB,UAAU,MAAM,oBAAoB,UAC3D,MAAM,kBACN;AACJ,QAAM,gBAAgB,0BAA0B,QAAQ;AACxD,QAAM,eAAe,+BAA+B,QAAQ;AAC5D,MAAI,MAAM,WAAW,sBAAsB;AAC1C,WAAO,kEACN,WAAW,IAAI,QAAQ,MAAM,yBAC9B;AAAA,EACD;AACA,MAAI,CAAC,UAAU;AACd,WAAO,yFAAyF,0BAA0B,CAAC,WAAW,QAAG,GAAG,aAAa,CAAC,oDAAoD,qBAAqB,CAAC,WAAW,QAAG,GAAG,YAAY,CAAC,yJAAyJ,cAAc;AAAA,EAC1a;AACA,QAAM,aACL,MAAM,cAAc,MAAM,WAAW,SAAS,IAC3C,MAAM,aACN,MAAM,iBAAiB,MAAM,cAAc,SAAS,IACnD,CAAC,GAAG,oBAAI,IAAI,CAAC,GAAG,MAAM,eAAe,GAAG,SAAS,MAAM,MAAM,CAAC,CAAC,CAAC,EAAE,KAAK,IACvE;AACL,MAAI,CAAC,YAAY;AAChB,WAAO,4DAA4D,QAAQ,yCAAyC,QAAQ,wEAAwE,0BAA0B,CAAC,oBAAoB,QAAQ,GAAG,aAAa,CAAC,oDAAoD,qBAAqB,CAAC,oBAAoB,QAAQ,GAAG,YAAY,CAAC,iFAAiF,QAAQ,6BAA6B,cAAc;AAAA,EACvgB;AACA,SAAO,4DAA4D,QAAQ,uCAAuC,0BAA0B,YAAY,aAAa,CAAC,oDAAoD,qBAAqB,YAAY,YAAY,CAAC,iHAAiH,cAAc;AACxY;AAEA,SAAS,SAAS,OAAkD;AACnE,SAAO,UAAU,QAAQ,OAAO,UAAU,YAAY,CAAC,MAAM,QAAQ,KAAK;AAC3E;AAEA,SAAS,mBAAmB,OAA+B;AAC1D,SAAO,OAAO,UAAU,YAAY,MAAM,KAAK,IAAI,MAAM,KAAK,IAAI;AACnE;AAEA,SAAS,eAAe,OAAsC;AAC7D,MAAI,CAAC,MAAM,QAAQ,KAAK,EAAG,QAAO;AAClC,QAAM,OAAO,MACX,OAAO,CAAC,SAAyB,OAAO,SAAS,QAAQ,EACzD,IAAI,CAAC,SAAS,KAAK,KAAK,CAAC,EACzB,OAAO,OAAO;AAChB,SAAO,KAAK,SAAS,IAAI,OAAO;AACjC;AAEO,SAAS,yBAAiC;AAChD,SAAO;AACR;AAEO,SAAS,gBACf,SAA6B,CAAC,GAC9B,MAAyB,QAAQ,KACjC,UAAkB,gBAClB,UAAmE,CAAC,GAC3D;AACT,QAAM,QAAQ,sBAAsB;AAAA,IACnC,aAAa;AAAA,IACb;AAAA,IACA,GAAG;AAAA,EACJ,CAAC;AACD,MAAI,CAAC,MAAO,OAAM,IAAI,MAAM,uBAAuB,OAAO,CAAC;AAC3D,SAAO;AACR;AAGO,SAAS,qBAAqB,QAAqC;AACzE,SAAO,OAAO,OAAO,UAAU,YAAY,OAAO,MAAM,KAAK,EAAE,SAAS;AACzE;",
+  "names": []
+}

package/dist/chunk-SMURF26I.js

@@ -0,0 +1,23 @@
+import { createRequire as __createRequire } from 'node:module'; const require = __createRequire(import.meta.url);
+
+// src/node-engine.ts
+var minimumLocalExecuteNodeMajor = 22;
+function assertLocalExecuteNodeEngine(version = process.versions.node) {
+  const major = nodeMajor(version);
+  if (major !== null && major >= minimumLocalExecuteNodeMajor) return;
+  const reported = version.trim() || "unknown";
+  throw new Error(
+    `execute --local needs Node.js ${minimumLocalExecuteNodeMajor} or newer (this process is v${reported}). Local execute runs your module in workerd. Upgrade Node.js and retry.`
+  );
+}
+function nodeMajor(version) {
+  const match = /^v?(\d+)/.exec(version.trim());
+  if (!match) return null;
+  const major = Number(match[1]);
+  return Number.isInteger(major) ? major : null;
+}
+
+export {
+  assertLocalExecuteNodeEngine
+};
+//# sourceMappingURL=chunk-SMURF26I.js.map

package/dist/chunk-SMURF26I.js.map

@@ -0,0 +1,6 @@
+{
+  "version": 3,
+  "sources": ["../src/node-engine.ts"],
+  "mappings": ";;;AACO,IAAM,+BAA+B;AAMrC,SAAS,6BAA6B,UAAkB,QAAQ,SAAS,MAAY;AAC3F,QAAM,QAAQ,UAAU,OAAO;AAC/B,MAAI,UAAU,QAAQ,SAAS,6BAA8B;AAC7D,QAAM,WAAW,QAAQ,KAAK,KAAK;AACnC,QAAM,IAAI;AAAA,IACT,iCAAiC,4BAA4B,+BAA+B,QAAQ;AAAA,EACrG;AACD;AAEA,SAAS,UAAU,SAAgC;AAClD,QAAM,QAAQ,WAAW,KAAK,QAAQ,KAAK,CAAC;AAC5C,MAAI,CAAC,MAAO,QAAO;AACnB,QAAM,QAAQ,OAAO,MAAM,CAAC,CAAC;AAC7B,SAAO,OAAO,UAAU,KAAK,IAAI,QAAQ;AAC1C;",
+  "names": []
+}