@kodycodes/cli 1.26.2 → 1.27.0

package/dist/auth.d.ts

@@ -1,4 +1,3 @@
-import { type OAuthClientInformationMixed, type OAuthTokens } from '@modelcontextprotocol/client';
 import { type LoginIdentity } from './discover-login-identity.js';
 import { type LoginCallbackAccount } from './login-callback-page.js';
 import { type SecretBackend, type StoreResolution, type StoredCredentials } from './store.js';
@@ -18,9 +17,15 @@ export type LoginOptions = {
      * callback page can show them (and multi-org storage can name the login).
      * Defaults to `metaGetCurrentUser` via {@link discoverLoginIdentity}.
      */
+    /** Open API origin that mints the device token. Defaults to the paired API. */
+    apiUrl?: string;
+    /** Device token lifetime. Defaults to long (interactive login). */
+    lifetime?: 'short' | 'long';
     discoverIdentity?: (input: {
         mcpUrl: string;
         accessToken: string;
+        apiUrl?: string;
+        org?: string;
         fetchFn?: typeof fetch;
     }) => Promise<LoginIdentity>;
 };
@@ -29,8 +34,17 @@ export declare function credentialsFromTokens(input: {
     mcpUrl: string;
     resource: string;
     authorizationServerUrl: string;
-    client: OAuthClientInformationMixed;
-    tokens: OAuthTokens;
+    client: {
+        client_id: string;
+        client_secret?: string;
+    };
+    tokens: {
+        access_token: string;
+        token_type?: string;
+        refresh_token?: string;
+        expires_in?: number;
+        scope?: string;
+    };
     previous?: StoredCredentials;
     org?: string;
     now?: number;
@@ -41,6 +55,7 @@ export declare function refreshStoredCredentials(input: {
     resolution?: StoreResolution;
     now?: number;
     fetchFn?: typeof fetch;
+    apiUrl?: string;
 }): Promise<StoredCredentials>;
 /**
  * Finish silent v1→multi-org migration when a pending session has no slug yet.
@@ -48,6 +63,7 @@ export declare function refreshStoredCredentials(input: {
  */
 export declare function resolvePendingOrgSlug(input: {
     mcpUrl?: string;
+    apiUrl?: string;
     backend?: SecretBackend;
     resolution?: StoreResolution;
     now?: number;
@@ -60,6 +76,7 @@ export declare function resolvePendingOrgSlug(input: {
 }): Promise<string | null>;
 export declare function ensureFreshCredentials(input: {
     mcpUrl?: string;
+    apiUrl?: string;
     org?: string;
     backend?: SecretBackend;
     resolution?: StoreResolution;
@@ -71,6 +88,13 @@ export declare function ensureFreshCredentials(input: {
         fetchFn?: typeof fetch;
     }) => Promise<string>;
 }): Promise<StoredCredentials>;
+/**
+ * Credentials for Open API calls. A still-valid OAuth access token is exchanged
+ * for a device `kody_at_` immediately — Open API routes reject MCP OAuth.
+ * Local execute keeps {@link ensureFreshCredentials} so an unexpired OAuth
+ * session can still reach the local-execute routes that allow it.
+ */
+export declare function ensureOpenApiCredentials(input: Parameters<typeof ensureFreshCredentials>[0]): Promise<StoredCredentials>;
 export declare function login(options?: LoginOptions): Promise<{
     credentials: StoredCredentials;
     authorizationUrl: URL;

package/dist/bin.js

@@ -1,5 +1,29 @@
 #!/usr/bin/env node
-import { runCli } from './cli.js';
-const code = await runCli();
+import { createRequire as __createRequire } from 'node:module'; const require = __createRequire(import.meta.url);
+import {
+  runCli
+} from "./chunk-D366STO5.js";
+import "./chunk-2XPH7L2P.js";
+import "./chunk-SLNAWWQK.js";
+import "./chunk-YDWTXEKQ.js";
+import "./chunk-CPS7HW4T.js";
+import "./chunk-OZDWOZLV.js";
+import "./chunk-6ZYUGXVW.js";
+import "./chunk-5ZBJAP6G.js";
+import "./chunk-ZILB2HWE.js";
+import "./chunk-CASGRYOF.js";
+import "./chunk-W2SAFAT4.js";
+import "./chunk-46IJPEID.js";
+import "./chunk-DW5UTJ6T.js";
+import "./chunk-5JIRHJQP.js";
+import "./chunk-4GIFJVGT.js";
+import "./chunk-7PRJ36I5.js";
+import "./chunk-CWWHR4FH.js";
+import "./chunk-3H72XY5R.js";
+import "./chunk-BTL3PJ2H.js";
+import "./chunk-UW6AWLXX.js";
+
+// src/bin.ts
+var code = await runCli();
 process.exitCode = code;
-//# sourceMappingURL=bin.js.map
+//# sourceMappingURL=bin.js.map

package/dist/bin.js.map

@@ -1 +1,6 @@
-{"version":3,"file":"bin.js","sourceRoot":"","sources":["../src/bin.ts"],"names":[],"mappings":";AACA,OAAO,EAAE,MAAM,EAAE,MAAM,UAAU,CAAA;AAEjC,MAAM,IAAI,GAAG,MAAM,MAAM,EAAE,CAAA;AAC3B,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAA"}
+{
+  "version": 3,
+  "sources": ["../src/bin.ts"],
+  "mappings": ";;;;;;;;;;;;;;;;;;;;;;;;;;AAGA,IAAM,OAAO,MAAM,OAAO;AAC1B,QAAQ,WAAW;",
+  "names": []
+}

package/dist/capability-proxy.d.ts

@@ -1,4 +1,4 @@
-import type { IncomingMessage } from 'node:http';
+import { type IncomingMessage } from 'node:http';
 import { Readable } from 'node:stream';
 import { type CredentialCallMapInput } from './credential-call-map.js';
 /**