@kodycodes/cli 1.26.2 → 1.27.0

package/dist/install.d.ts

@@ -1,6 +1,6 @@
 import { type HostId } from './host-catalog.js';
 import { type ApplyResult, type InstallRuntime } from './install-hosts.js';
-import type { ProcessInfo } from './process-info.js';
+import { type ProcessInfo } from './process-info.js';
 export type InstallOptions = {
     mcpUrl: string;
     clients?: string;

package/dist/local-execute-I3BP5NEQ.js

@@ -0,0 +1,395 @@
+import { createRequire as __createRequire } from 'node:module'; const require = __createRequire(import.meta.url);
+import {
+  forwardLocalGatewayFetchStream,
+  installMockFetchShimModules,
+  startLocalRuntimeBridge
+} from "./chunk-JOMBXQOS.js";
+import {
+  resolveMockFetchGateway,
+  tryHandleMockGatewayFetchCall
+} from "./chunk-Y4FOJETX.js";
+import {
+  bundleLocalUserModule,
+  createLocalEntrySource,
+  createLocalRuntimeModuleSource,
+  createRuntimeFlatAliasSource,
+  createWorkerdConfig,
+  hasSavedPackageImports,
+  listSavedPackageImports,
+  localExecuteGatewayFetchShimModuleName,
+  localPackageGraphPlatformIssueUrl,
+  localWorkerModuleNames,
+  resolveLocalPackageGraph,
+  runSecretEnvVar,
+  runSecretHeader,
+  writePackageModuleFiles
+} from "./chunk-2IHISXHN.js";
+import "./chunk-XV6D6HSG.js";
+import {
+  assertLocalExecuteNodeEngine
+} from "./chunk-2XPH7L2P.js";
+import {
+  redact
+} from "./chunk-CASGRYOF.js";
+import "./chunk-46IJPEID.js";
+import {
+  ensureWorkerdBinary
+} from "./chunk-DW5UTJ6T.js";
+import {
+  assertTokenSafeApiUrl,
+  callCapabilityProxy,
+  checkCredentialCallMap,
+  missingCredentialCallMapFeatureMessage,
+  openCapabilityProxySession,
+  sessionSupportsCredentialCallMap
+} from "./chunk-5JIRHJQP.js";
+import "./chunk-4GIFJVGT.js";
+import "./chunk-EJXEVGWF.js";
+import "./chunk-3H72XY5R.js";
+import {
+  apiTokenEnvVar
+} from "./chunk-BTL3PJ2H.js";
+import "./chunk-UW6AWLXX.js";
+
+// src/local-execute.ts
+import { spawn } from "node:child_process";
+import { randomBytes } from "node:crypto";
+import { rmSync } from "node:fs";
+import { mkdtemp, rm, writeFile } from "node:fs/promises";
+import { request as httpRequest } from "node:http";
+import { tmpdir } from "node:os";
+import { join } from "node:path";
+import { setTimeout as delay } from "node:timers/promises";
+var workerdStartTimeoutMs = 3e4;
+var workerdExitGraceMs = 1e3;
+var savedPackageImportLocalResolveStatus = "Module imports saved packages (kody:@\u2026). Fetching stamped package modules for local workerd bundling (no cloud kody.execute defer).";
+var localExecutePackageGraphResolveStatus = "Fetching local-execute package graph (gateway-fetch shim + any stamped kody:@ modules).";
+async function runLocalExecute(input) {
+  assertLocalExecuteNodeEngine();
+  assertTokenSafeApiUrl(input.apiUrl);
+  const code = input.modulePath !== void 0 ? await bundleLocalUserModule(input.modulePath) : input.code;
+  const client = {
+    apiUrl: input.apiUrl,
+    token: input.token,
+    fetchFn: input.fetchFn,
+    ...input.org ? { org: input.org } : {}
+  };
+  if (input.credentials) {
+    const session = await openCapabilityProxySession(client);
+    assertCredentialCallMapSupported(session, input);
+    input.onStatus?.("Checking --credential picks against CapabilityProxy\u2026");
+    const { warnings } = await checkCredentialCallMap({
+      ...client,
+      credentials: input.credentials,
+      conversationId: input.conversationId
+    });
+    for (const warning of warnings) {
+      input.onStatus?.(warning);
+    }
+  }
+  input.onStatus?.(
+    await hasSavedPackageImports(code) ? savedPackageImportLocalResolveStatus : localExecutePackageGraphResolveStatus
+  );
+  const packageGraph = await resolveLocalPackageGraph({
+    ...client,
+    code,
+    conversationId: input.conversationId,
+    ...input.depResolve ? { depResolve: input.depResolve } : {},
+    ...input.packageRoot ? { packageRoot: input.packageRoot } : {},
+    onStatus: input.onStatus
+  });
+  const workerdPath = input.workerdPath ?? await ensureWorkerdBinary({
+    onDownload: (url) => input.onStatus?.(`Downloading workerd for local execute from ${url}\u2026`)
+  });
+  const runSecret = randomBytes(32).toString("hex");
+  const workDir = await mkdtemp(join(tmpdir(), "kody-local-"));
+  let child;
+  let bridge;
+  const stopWorkerd = () => child?.kill("SIGKILL");
+  const releaseSignals = cleanupOnSignal(() => {
+    stopWorkerd();
+    rmSync(workDir, { recursive: true, force: true });
+  });
+  const startedAt = /* @__PURE__ */ new Date();
+  const finish = (sandbox) => buildLocalExecuteResult({
+    sandbox,
+    startedAt,
+    endedAt: /* @__PURE__ */ new Date(),
+    conversationId: input.conversationId
+  });
+  try {
+    const mockFetchGateway = await resolveMockFetchGateway({
+      target: input.target ?? "prod",
+      packageRoot: input.packageRoot,
+      passthroughHosts: input.passthroughHosts,
+      allowPrivateNetwork: input.allowPrivateNetwork,
+      onStatus: input.onStatus
+    });
+    bridge = await startLocalRuntimeBridge({
+      runSecret,
+      forwardCall: async (call, signal) => {
+        const mocked = tryHandleMockGatewayFetchCall({
+          gateway: mockFetchGateway,
+          path: call.path,
+          args: call.args,
+          signal
+        });
+        if (mocked) return await mocked;
+        return await callCapabilityProxy({
+          ...client,
+          ...call,
+          conversationId: input.conversationId,
+          ...input.credentials !== void 0 ? { credentials: input.credentials } : {},
+          signal
+        });
+      },
+      forwardGatewayFetchStream: async ({ request, response: response2, signal }) => {
+        await forwardLocalGatewayFetchStream({
+          request,
+          response: response2,
+          signal,
+          client,
+          ...mockFetchGateway ? { mockFetchGateway } : {}
+        });
+      }
+    });
+    const files = { entry: "entry.js", user: "main.js", runtime: "runtime.js" };
+    let packageModules = await writePackageModuleFiles2(workDir, packageGraph);
+    let gatewayFetchShimModules = packageGraph.modules.map((module) => module.name).filter((name) => name === localExecuteGatewayFetchShimModuleName);
+    if (mockFetchGateway) {
+      const installed = await installMockFetchShimModules({
+        workDir,
+        packageModules
+      });
+      packageModules = installed.packageModules;
+      gatewayFetchShimModules = installed.sideEffectModules;
+    }
+    await writeFile(
+      join(workDir, files.entry),
+      createLocalEntrySource({ sideEffectModules: gatewayFetchShimModules })
+    );
+    await writeFile(join(workDir, files.user), code);
+    await writeFile(
+      join(workDir, files.runtime),
+      createLocalRuntimeModuleSource()
+    );
+    await writeFile(
+      join(workDir, localWorkerModuleNames.runtimeFlatAlias),
+      createRuntimeFlatAliasSource()
+    );
+    const configPath = join(workDir, "config.capnp");
+    await writeFile(
+      configPath,
+      createWorkerdConfig({
+        bridgePort: bridge.port,
+        files,
+        packageModules,
+        allowPrivateNetwork: input.allowPrivateNetwork
+      })
+    );
+    const env = {
+      ...process.env,
+      [runSecretEnvVar]: runSecret
+    };
+    delete env[apiTokenEnvVar];
+    child = spawn(workerdPath, ["serve", configPath, "--control-fd=3"], {
+      cwd: workDir,
+      env,
+      stdio: ["ignore", "pipe", "pipe", "pipe"]
+    });
+    const workerd = watchWorkerd(child);
+    const started = await workerd.listening;
+    if ("exitDetail" in started) {
+      return finish({
+        error: `Local execute could not load the module${started.exitDetail}`
+      });
+    }
+    let response;
+    try {
+      response = await postToWorkerd({
+        port: started.port,
+        runSecret,
+        body: JSON.stringify({ params: input.params ?? {} })
+      });
+    } catch (error) {
+      const exitDetail = await Promise.race([
+        workerd.exited,
+        delay(workerdExitGraceMs, null)
+      ]);
+      if (exitDetail !== null)
+        throw new Error(`workerd exited during the run${exitDetail}`);
+      const reason = error instanceof Error ? error.message : String(error);
+      throw new Error(
+        `Local execute run failed (${reason}).${workerd.stderr()}`
+      );
+    }
+    if (response.status !== 200) {
+      throw new Error(
+        `Local execute runtime returned HTTP ${response.status}.${workerd.stderr()}`
+      );
+    }
+    return finish(JSON.parse(response.body));
+  } finally {
+    releaseSignals();
+    stopWorkerd();
+    await bridge?.close();
+    await rm(workDir, { recursive: true, force: true });
+  }
+}
+async function writePackageModuleFiles2(workDir, graph) {
+  return await writePackageModuleFiles(workDir, graph, writeFile, join);
+}
+function buildLocalExecuteResult(input) {
+  const { sandbox } = input;
+  const logs = sandbox.logs ?? [];
+  const base = {
+    ...input.conversationId !== void 0 ? { conversationId: input.conversationId } : {},
+    timing: {
+      startedAt: input.startedAt.toISOString(),
+      endedAt: input.endedAt.toISOString(),
+      durationMs: input.endedAt.getTime() - input.startedAt.getTime()
+    }
+  };
+  if (typeof sandbox.error === "string") {
+    return {
+      content: [{ type: "text", text: `Error: ${sandbox.error}` }],
+      structuredContent: {
+        ...base,
+        returnedBytes: 0,
+        error: sandbox.error,
+        logs
+      },
+      isError: true
+    };
+  }
+  const text = typeof sandbox.result === "string" ? sandbox.result : JSON.stringify(sandbox.result, null, 2) ?? "undefined";
+  const serialized = typeof sandbox.result === "string" ? sandbox.result : JSON.stringify(sandbox.result) ?? "undefined";
+  return {
+    content: [{ type: "text", text }],
+    structuredContent: {
+      ...base,
+      returnedBytes: Buffer.byteLength(serialized),
+      result: sandbox.result,
+      logs
+    },
+    isError: false
+  };
+}
+function cleanupOnSignal(cleanup) {
+  const signals = ["SIGINT", "SIGTERM", "SIGHUP"];
+  const release = () => {
+    for (const signal of signals) process.off(signal, handler);
+  };
+  const handler = (signal) => {
+    release();
+    cleanup();
+    process.kill(process.pid, signal);
+  };
+  for (const signal of signals) process.once(signal, handler);
+  return release;
+}
+function watchWorkerd(child) {
+  let stderrText = "";
+  child.stderr?.on("data", (chunk) => {
+    stderrText += chunk.toString("utf8");
+  });
+  child.stdout?.resume();
+  const stderr = () => {
+    const trimmed = redact(stderrText.trim());
+    return trimmed ? `
+${trimmed}` : "";
+  };
+  const exited = new Promise((resolve) => {
+    child.once("exit", (code, signal) => {
+      resolve(` (workerd exit ${signal ?? code})${stderr()}`);
+    });
+  });
+  const listening = new Promise(
+    (resolve, reject) => {
+      const control = child.stdio[3];
+      let buffered = "";
+      const timer = setTimeout(() => {
+        reject(
+          new Error(
+            `workerd did not start within ${workerdStartTimeoutMs / 1e3}s.${stderr()}`
+          )
+        );
+      }, workerdStartTimeoutMs);
+      control?.on("data", (chunk) => {
+        buffered += chunk.toString("utf8");
+        for (const line of buffered.split("\n")) {
+          const port = parseListenPort(line);
+          if (port !== null) {
+            clearTimeout(timer);
+            resolve({ port });
+          }
+        }
+      });
+      child.once("error", (error) => {
+        clearTimeout(timer);
+        reject(new Error(`Could not start workerd: ${error.message}`));
+      });
+      void exited.then((exitDetail) => {
+        clearTimeout(timer);
+        resolve({ exitDetail });
+      });
+    }
+  );
+  return { listening, exited, stderr };
+}
+function parseListenPort(line) {
+  if (!line.trim()) return null;
+  try {
+    const event = JSON.parse(line);
+    return event.event === "listen" && event.socket === "http" && typeof event.port === "number" ? event.port : null;
+  } catch {
+    return null;
+  }
+}
+function postToWorkerd(input) {
+  return new Promise((resolve, reject) => {
+    const request = httpRequest(
+      {
+        host: "127.0.0.1",
+        port: input.port,
+        method: "POST",
+        path: "/",
+        headers: {
+          "content-type": "application/json",
+          "content-length": Buffer.byteLength(input.body),
+          [runSecretHeader]: input.runSecret
+        }
+      },
+      (response) => {
+        readBody(response).then(
+          (body) => resolve({ status: response.statusCode ?? 0, body }),
+          reject
+        );
+      }
+    );
+    request.on("error", reject);
+    request.end(input.body);
+  });
+}
+function assertCredentialCallMapSupported(session, input) {
+  if (!input.credentials) return;
+  if (sessionSupportsCredentialCallMap(session.features)) return;
+  throw new Error(missingCredentialCallMapFeatureMessage());
+}
+async function readBody(stream) {
+  const chunks = [];
+  for await (const chunk of stream) {
+    chunks.push(Buffer.isBuffer(chunk) ? chunk : Buffer.from(chunk));
+  }
+  return Buffer.concat(chunks).toString("utf8");
+}
+export {
+  buildLocalExecuteResult,
+  hasSavedPackageImports,
+  listSavedPackageImports,
+  localExecutePackageGraphResolveStatus,
+  localPackageGraphPlatformIssueUrl,
+  runLocalExecute,
+  savedPackageImportLocalResolveStatus
+};
+//# sourceMappingURL=local-execute-I3BP5NEQ.js.map

package/dist/local-execute-I3BP5NEQ.js.map

@@ -0,0 +1,6 @@
+{
+  "version": 3,
+  "sources": ["../src/local-execute.ts"],
+  "mappings": ";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,SAAS,aAAgC;AACzC,SAAS,mBAAmB;AAC5B,SAAS,cAAc;AACvB,SAAS,SAAS,IAAI,iBAAiB;AACvC,SAAS,WAAW,mBAAyC;AAC7D,SAAS,cAAc;AACvB,SAAS,YAAY;AAErB,SAAS,cAAc,aAAa;AAyGpC,IAAM,wBAAwB;AAC9B,IAAM,qBAAqB;AAEpB,IAAM,uCACZ;AAEM,IAAM,wCACZ;AAED,eAAsB,gBACrB,OAC0B;AAC1B,+BAA6B;AAC7B,wBAAsB,MAAM,MAAM;AAClC,QAAM,OACL,MAAM,eAAe,SAClB,MAAM,sBAAsB,MAAM,UAAU,IAC5C,MAAM;AACV,QAAM,SAAS;AAAA,IACd,QAAQ,MAAM;AAAA,IACd,OAAO,MAAM;AAAA,IACb,SAAS,MAAM;AAAA,IACf,GAAI,MAAM,MAAM,EAAE,KAAK,MAAM,IAAI,IAAI,CAAC;AAAA,EACvC;AAGA,MAAI,MAAM,aAAa;AACtB,UAAM,UAAU,MAAM,2BAA2B,MAAM;AACvD,qCAAiC,SAAS,KAAK;AAC/C,UAAM,WAAW,2DAAsD;AACvE,UAAM,EAAE,SAAS,IAAI,MAAM,uBAAuB;AAAA,MACjD,GAAG;AAAA,MACH,aAAa,MAAM;AAAA,MACnB,gBAAgB,MAAM;AAAA,IACvB,CAAC;AACD,eAAW,WAAW,UAAU;AAC/B,YAAM,WAAW,OAAO;AAAA,IACzB;AAAA,EACD;AAKA,QAAM;AAAA,IACJ,MAAM,uBAAuB,IAAI,IAC/B,uCACA;AAAA,EACJ;AACA,QAAM,eAAe,MAAM,yBAAyB;AAAA,IACnD,GAAG;AAAA,IACH;AAAA,IACA,gBAAgB,MAAM;AAAA,IACtB,GAAI,MAAM,aAAa,EAAE,YAAY,MAAM,WAAW,IAAI,CAAC;AAAA,IAC3D,GAAI,MAAM,cAAc,EAAE,aAAa,MAAM,YAAY,IAAI,CAAC;AAAA,IAC9D,UAAU,MAAM;AAAA,EACjB,CAAC;AAED,QAAM,cACL,MAAM,eACL,MAAM,oBAAoB;AAAA,IAC1B,YAAY,CAAC,QACZ,MAAM,WAAW,8CAA8C,GAAG,QAAG;AAAA,EACvE,CAAC;AAEF,QAAM,YAAY,YAAY,EAAE,EAAE,SAAS,KAAK;AAChD,QAAM,UAAU,MAAM,QAAQ,KAAK,OAAO,GAAG,aAAa,CAAC;AAC3D,MAAI;AACJ,MAAI;AAEJ,QAAM,cAAc,MAAM,OAAO,KAAK,SAAS;AAC/C,QAAM,iBAAiB,gBAAgB,MAAM;AAC5C,gBAAY;AACZ,WAAO,SAAS,EAAE,WAAW,MAAM,OAAO,KAAK,CAAC;AAAA,EACjD,CAAC;AACD,QAAM,YAAY,oBAAI,KAAK;AAC3B,QAAM,SAAS,CAAC,YACf,wBAAwB;AAAA,IACvB;AAAA,IACA;AAAA,IACA,SAAS,oBAAI,KAAK;AAAA,IAClB,gBAAgB,MAAM;AAAA,EACvB,CAAC;AACF,MAAI;AACH,UAAM,mBAAmB,MAAM,wBAAwB;AAAA,MACtD,QAAQ,MAAM,UAAU;AAAA,MACxB,aAAa,MAAM;AAAA,MACnB,kBAAkB,MAAM;AAAA,MACxB,qBAAqB,MAAM;AAAA,MAC3B,UAAU,MAAM;AAAA,IACjB,CAAC;AACD,aAAS,MAAM,wBAAwB;AAAA,MACtC;AAAA,MACA,aAAa,OAAO,MAAM,WAAW;AACpC,cAAM,SAAS,8BAA8B;AAAA,UAC5C,SAAS;AAAA,UACT,MAAM,KAAK;AAAA,UACX,MAAM,KAAK;AAAA,UACX;AAAA,QACD,CAAC;AACD,YAAI,OAAQ,QAAO,MAAM;AACzB,eAAO,MAAM,oBAAoB;AAAA,UAChC,GAAG;AAAA,UACH,GAAG;AAAA,UACH,gBAAgB,MAAM;AAAA,UACtB,GAAI,MAAM,gBAAgB,SACvB,EAAE,aAAa,MAAM,YAAY,IACjC,CAAC;AAAA,UACJ;AAAA,QACD,CAAC;AAAA,MACF;AAAA,MACA,2BAA2B,OAAO,EAAE,SAAS,UAAAA,WAAU,OAAO,MAAM;AACnE,cAAM,+BAA+B;AAAA,UACpC;AAAA,UACA,UAAAA;AAAA,UACA;AAAA,UACA;AAAA,UACA,GAAI,mBAAmB,EAAE,iBAAiB,IAAI,CAAC;AAAA,QAChD,CAAC;AAAA,MACF;AAAA,IACD,CAAC;AACD,UAAM,QAAQ,EAAE,OAAO,YAAY,MAAM,WAAW,SAAS,aAAa;AAC1E,QAAI,iBAAiB,MAAMC,yBAAwB,SAAS,YAAY;AACxE,QAAI,0BAAyC,aAAa,QACxD,IAAI,CAAC,WAAW,OAAO,IAAI,EAC3B,OAAO,CAAC,SAAS,SAAS,sCAAsC;AAClE,QAAI,kBAAkB;AACrB,YAAM,YAAY,MAAM,4BAA4B;AAAA,QACnD;AAAA,QACA;AAAA,MACD,CAAC;AACD,uBAAiB,UAAU;AAC3B,gCAA0B,UAAU;AAAA,IACrC;AACA,UAAM;AAAA,MACL,KAAK,SAAS,MAAM,KAAK;AAAA,MACzB,uBAAuB,EAAE,mBAAmB,wBAAwB,CAAC;AAAA,IACtE;AACA,UAAM,UAAU,KAAK,SAAS,MAAM,IAAI,GAAG,IAAI;AAC/C,UAAM;AAAA,MACL,KAAK,SAAS,MAAM,OAAO;AAAA,MAC3B,+BAA+B;AAAA,IAChC;AACA,UAAM;AAAA,MACL,KAAK,SAAS,uBAAuB,gBAAgB;AAAA,MACrD,6BAA6B;AAAA,IAC9B;AACA,UAAM,aAAa,KAAK,SAAS,cAAc;AAC/C,UAAM;AAAA,MACL;AAAA,MACA,oBAAoB;AAAA,QACnB,YAAY,OAAO;AAAA,QACnB;AAAA,QACA;AAAA,QACA,qBAAqB,MAAM;AAAA,MAC5B,CAAC;AAAA,IACF;AAEA,UAAM,MAAyB;AAAA,MAC9B,GAAG,QAAQ;AAAA,MACX,CAAC,eAAe,GAAG;AAAA,IACpB;AACA,WAAO,IAAI,cAAc;AACzB,YAAQ,MAAM,aAAa,CAAC,SAAS,YAAY,gBAAgB,GAAG;AAAA,MACnE,KAAK;AAAA,MACL;AAAA,MACA,OAAO,CAAC,UAAU,QAAQ,QAAQ,MAAM;AAAA,IACzC,CAAC;AACD,UAAM,UAAU,aAAa,KAAK;AAClC,UAAM,UAAU,MAAM,QAAQ;AAC9B,QAAI,gBAAgB,SAAS;AAC5B,aAAO,OAAO;AAAA,QACb,OAAO,0CAA0C,QAAQ,UAAU;AAAA,MACpE,CAAC;AAAA,IACF;AACA,QAAI;AACJ,QAAI;AACH,iBAAW,MAAM,cAAc;AAAA,QAC9B,MAAM,QAAQ;AAAA,QACd;AAAA,QACA,MAAM,KAAK,UAAU,EAAE,QAAQ,MAAM,UAAU,CAAC,EAAE,CAAC;AAAA,MACpD,CAAC;AAAA,IACF,SAAS,OAAO;AACf,YAAM,aAAa,MAAM,QAAQ,KAAK;AAAA,QACrC,QAAQ;AAAA,QACR,MAAM,oBAAoB,IAAI;AAAA,MAC/B,CAAC;AACD,UAAI,eAAe;AAClB,cAAM,IAAI,MAAM,gCAAgC,UAAU,EAAE;AAC7D,YAAM,SAAS,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;AACpE,YAAM,IAAI;AAAA,QACT,6BAA6B,MAAM,KAAK,QAAQ,OAAO,CAAC;AAAA,MACzD;AAAA,IACD;AACA,QAAI,SAAS,WAAW,KAAK;AAC5B,YAAM,IAAI;AAAA,QACT,uCAAuC,SAAS,MAAM,IAAI,QAAQ,OAAO,CAAC;AAAA,MAC3E;AAAA,IACD;AACA,WAAO,OAAO,KAAK,MAAM,SAAS,IAAI,CAAoB;AAAA,EAC3D,UAAE;AACD,mBAAe;AACf,gBAAY;AACZ,UAAM,QAAQ,MAAM;AACpB,UAAM,GAAG,SAAS,EAAE,WAAW,MAAM,OAAO,KAAK,CAAC;AAAA,EACnD;AACD;AAEA,eAAeA,yBACd,SACA,OAC2C;AAC3C,SAAO,MAAM,wBAAsB,SAAS,OAAO,WAAW,IAAI;AACnE;AAGO,SAAS,wBAAwB,OAKrB;AAClB,QAAM,EAAE,QAAQ,IAAI;AACpB,QAAM,OAAO,QAAQ,QAAQ,CAAC;AAC9B,QAAM,OAAO;AAAA,IACZ,GAAI,MAAM,mBAAmB,SAC1B,EAAE,gBAAgB,MAAM,eAAe,IACvC,CAAC;AAAA,IACJ,QAAQ;AAAA,MACP,WAAW,MAAM,UAAU,YAAY;AAAA,MACvC,SAAS,MAAM,QAAQ,YAAY;AAAA,MACnC,YAAY,MAAM,QAAQ,QAAQ,IAAI,MAAM,UAAU,QAAQ;AAAA,IAC/D;AAAA,EACD;AACA,MAAI,OAAO,QAAQ,UAAU,UAAU;AACtC,WAAO;AAAA,MACN,SAAS,CAAC,EAAE,MAAM,QAAQ,MAAM,UAAU,QAAQ,KAAK,GAAG,CAAC;AAAA,MAC3D,mBAAmB;AAAA,QAClB,GAAG;AAAA,QACH,eAAe;AAAA,QACf,OAAO,QAAQ;AAAA,QACf;AAAA,MACD;AAAA,MACA,SAAS;AAAA,IACV;AAAA,EACD;AACA,QAAM,OACL,OAAO,QAAQ,WAAW,WACvB,QAAQ,SACP,KAAK,UAAU,QAAQ,QAAQ,MAAM,CAAC,KAAK;AAChD,QAAM,aACL,OAAO,QAAQ,WAAW,WACvB,QAAQ,SACP,KAAK,UAAU,QAAQ,MAAM,KAAK;AACvC,SAAO;AAAA,IACN,SAAS,CAAC,EAAE,MAAM,QAAQ,KAAK,CAAC;AAAA,IAChC,mBAAmB;AAAA,MAClB,GAAG;AAAA,MACH,eAAe,OAAO,WAAW,UAAU;AAAA,MAC3C,QAAQ,QAAQ;AAAA,MAChB;AAAA,IACD;AAAA,IACA,SAAS;AAAA,EACV;AACD;AAMA,SAAS,gBAAgB,SAAiC;AACzD,QAAM,UAAiC,CAAC,UAAU,WAAW,QAAQ;AACrE,QAAM,UAAU,MAAM;AACrB,eAAW,UAAU,QAAS,SAAQ,IAAI,QAAQ,OAAO;AAAA,EAC1D;AACA,QAAM,UAAU,CAAC,WAA2B;AAC3C,YAAQ;AACR,YAAQ;AACR,YAAQ,KAAK,QAAQ,KAAK,MAAM;AAAA,EACjC;AACA,aAAW,UAAU,QAAS,SAAQ,KAAK,QAAQ,OAAO;AAC1D,SAAO;AACR;AAEA,SAAS,aAAa,OAAqB;AAC1C,MAAI,aAAa;AACjB,QAAM,QAAQ,GAAG,QAAQ,CAAC,UAAkB;AAC3C,kBAAc,MAAM,SAAS,MAAM;AAAA,EACpC,CAAC;AACD,QAAM,QAAQ,OAAO;AACrB,QAAM,SAAS,MAAM;AACpB,UAAM,UAAU,OAAO,WAAW,KAAK,CAAC;AACxC,WAAO,UAAU;AAAA,EAAK,OAAO,KAAK;AAAA,EACnC;AACA,QAAM,SAAS,IAAI,QAAgB,CAAC,YAAY;AAC/C,UAAM,KAAK,QAAQ,CAAC,MAAM,WAAW;AACpC,cAAQ,kBAAkB,UAAU,IAAI,IAAI,OAAO,CAAC,EAAE;AAAA,IACvD,CAAC;AAAA,EACF,CAAC;AACD,QAAM,YAAY,IAAI;AAAA,IACrB,CAAC,SAAS,WAAW;AACpB,YAAM,UAAU,MAAM,MAAM,CAAC;AAC7B,UAAI,WAAW;AACf,YAAM,QAAQ,WAAW,MAAM;AAC9B;AAAA,UACC,IAAI;AAAA,YACH,gCAAgC,wBAAwB,GAAI,KAAK,OAAO,CAAC;AAAA,UAC1E;AAAA,QACD;AAAA,MACD,GAAG,qBAAqB;AACxB,eAAS,GAAG,QAAQ,CAAC,UAAkB;AACtC,oBAAY,MAAM,SAAS,MAAM;AACjC,mBAAW,QAAQ,SAAS,MAAM,IAAI,GAAG;AACxC,gBAAM,OAAO,gBAAgB,IAAI;AACjC,cAAI,SAAS,MAAM;AAClB,yBAAa,KAAK;AAClB,oBAAQ,EAAE,KAAK,CAAC;AAAA,UACjB;AAAA,QACD;AAAA,MACD,CAAC;AACD,YAAM,KAAK,SAAS,CAAC,UAAU;AAC9B,qBAAa,KAAK;AAClB,eAAO,IAAI,MAAM,4BAA4B,MAAM,OAAO,EAAE,CAAC;AAAA,MAC9D,CAAC;AACD,WAAK,OAAO,KAAK,CAAC,eAAe;AAChC,qBAAa,KAAK;AAClB,gBAAQ,EAAE,WAAW,CAAC;AAAA,MACvB,CAAC;AAAA,IACF;AAAA,EACD;AACA,SAAO,EAAE,WAAW,QAAQ,OAAO;AACpC;AAEA,SAAS,gBAAgB,MAA6B;AACrD,MAAI,CAAC,KAAK,KAAK,EAAG,QAAO;AACzB,MAAI;AACH,UAAM,QAAQ,KAAK,MAAM,IAAI;AAK7B,WAAO,MAAM,UAAU,YACtB,MAAM,WAAW,UACjB,OAAO,MAAM,SAAS,WACpB,MAAM,OACN;AAAA,EACJ,QAAQ;AACP,WAAO;AAAA,EACR;AACD;AAGA,SAAS,cAAc,OAIuB;AAC7C,SAAO,IAAI,QAAQ,CAAC,SAAS,WAAW;AACvC,UAAM,UAAU;AAAA,MACf;AAAA,QACC,MAAM;AAAA,QACN,MAAM,MAAM;AAAA,QACZ,QAAQ;AAAA,QACR,MAAM;AAAA,QACN,SAAS;AAAA,UACR,gBAAgB;AAAA,UAChB,kBAAkB,OAAO,WAAW,MAAM,IAAI;AAAA,UAC9C,CAAC,eAAe,GAAG,MAAM;AAAA,QAC1B;AAAA,MACD;AAAA,MACA,CAAC,aAAa;AACb,iBAAS,QAAQ,EAAE;AAAA,UAClB,CAAC,SAAS,QAAQ,EAAE,QAAQ,SAAS,cAAc,GAAG,KAAK,CAAC;AAAA,UAC5D;AAAA,QACD;AAAA,MACD;AAAA,IACD;AACA,YAAQ,GAAG,SAAS,MAAM;AAC1B,YAAQ,IAAI,MAAM,IAAI;AAAA,EACvB,CAAC;AACF;AAEA,SAAS,iCACR,SACA,OACO;AACP,MAAI,CAAC,MAAM,YAAa;AACxB,MAAI,iCAAiC,QAAQ,QAAQ,EAAG;AACxD,QAAM,IAAI,MAAM,uCAAuC,CAAC;AACzD;AAEA,eAAe,SAAS,QAA0C;AACjE,QAAM,SAAwB,CAAC;AAC/B,mBAAiB,SAAS,QAAQ;AACjC,WAAO,KAAK,OAAO,SAAS,KAAK,IAAI,QAAQ,OAAO,KAAK,KAAK,CAAC;AAAA,EAChE;AACA,SAAO,OAAO,OAAO,MAAM,EAAE,SAAS,MAAM;AAC7C;",
+  "names": ["response", "writePackageModuleFiles"]
+}

package/dist/local-execute-auth.d.ts

@@ -1,6 +1,6 @@
-import type { ensureFreshCredentials } from './auth.js';
+import { type ensureFreshCredentials } from './auth.js';
 import { type ResolveScopedApiTokenInput } from './api-token.js';
-import type { SecretBackend } from './store.js';
+import { type SecretBackend } from './store.js';
 /**
  * Bearer for CapabilityProxy / package-graph under `execute --local`.
  *

package/dist/local-execute.d.ts

@@ -1,5 +1,5 @@
 import { type CredentialCallMapInput } from './credential-call-map.js';
-import type { ToolCallResult } from './tool-result.js';
+import { type ToolCallResult } from './tool-result.js';
 export { hasSavedPackageImports, listSavedPackageImports, localPackageGraphPlatformIssueUrl, } from './local-package-graph.js';
 export type LocalExecuteInput = {
     code: string;

package/dist/local-gateway-fetch-forward.d.ts

@@ -2,9 +2,9 @@
  * Node-side handlers for the workerd → bridge `POST /gateway-fetch` hop:
  * mock MSW path (buffered) or prod CapabilityProxy streaming hop.
  */
-import type { IncomingMessage, ServerResponse } from 'node:http';
+import { type IncomingMessage, type ServerResponse } from 'node:http';
 import { type CapabilityProxyClientInput } from './capability-proxy.js';
-import type { MockFetchGateway } from './mock/mock-fetch-gateway.js';
+import { type MockFetchGateway } from './mock/mock-fetch-gateway.js';
 export declare function forwardLocalGatewayFetchStream(input: {
     request: IncomingMessage;
     response: ServerResponse;

package/dist/local-package-run-JFKNSNWM.js

@@ -0,0 +1,23 @@
+import { createRequire as __createRequire } from 'node:module'; const require = __createRequire(import.meta.url);
+import {
+  buildLocalPackageContext,
+  runLocalPackageModule
+} from "./chunk-LU7I7CQ4.js";
+import "./chunk-JOMBXQOS.js";
+import "./chunk-Y4FOJETX.js";
+import "./chunk-2IHISXHN.js";
+import "./chunk-XV6D6HSG.js";
+import "./chunk-CASGRYOF.js";
+import "./chunk-46IJPEID.js";
+import "./chunk-DW5UTJ6T.js";
+import "./chunk-5JIRHJQP.js";
+import "./chunk-4GIFJVGT.js";
+import "./chunk-EJXEVGWF.js";
+import "./chunk-3H72XY5R.js";
+import "./chunk-BTL3PJ2H.js";
+import "./chunk-UW6AWLXX.js";
+export {
+  buildLocalPackageContext,
+  runLocalPackageModule
+};
+//# sourceMappingURL=local-package-run-JFKNSNWM.js.map

package/dist/local-package-run-JFKNSNWM.js.map

@@ -0,0 +1,6 @@
+{
+  "version": 3,
+  "sources": [],
+  "mappings": "",
+  "names": []
+}

package/dist/local-package-run.d.ts

@@ -3,8 +3,8 @@
  * in local workerd against `--target prod|mock`.
  */
 import { type PackageLocalContext } from './package-local-runtime-source.js';
-import type { KodyTarget } from './target.js';
-import type { ToolCallResult } from './tool-result.js';
+import { type KodyTarget } from './target.js';
+import { type ToolCallResult } from './tool-result.js';
 export type LocalPackageRunInput = {
     modulePath: string;
     params?: unknown;

package/dist/mock/mock-fetch-gateway.d.ts

@@ -10,9 +10,9 @@
  * (authenticatedFetch still fails closed). With `.kody/mocks.ts`, unmatched
  * hosts fail closed with `unmocked_request`.
  */
-import type { RequestHandler } from 'msw';
+import { type RequestHandler } from 'msw';
 import { StructuredCliError } from '../structured-error.js';
-import type { KodyTarget } from '../target.js';
+import { type KodyTarget } from '../target.js';
 import { type EnsureMswInput, mswPackageSpec } from './ensure-msw.js';
 export type MockGatewayFetchRequest = {
     url?: string;

package/dist/mock/mock-supported.d.ts

@@ -7,7 +7,7 @@
  * plus CapabilityProxy paths. When adding a mock handler, add its id here.
  */
 /** Open API operationIds the mock answers. */
-export declare const mockOpenApiOperationIds: readonly ["search", "metaGetCurrentUser", "usageGet"];
+export declare const mockOpenApiOperationIds: readonly ["search", "searchTool", "metaGetCurrentUser", "usageGet"];
 /** CapabilityProxy `path` joins (dot form) the mock answers under kody.*. */
 export declare const mockCapabilityPaths: readonly ["kody.metaGetCurrentUser", "kody.search", "kody.execute", "kody.usageGet", "kody.__mockPackageStorageGet", "kody.__mockPackageStorageSet", "kody.__mockPackageStorageDelete", "kody.__mockPackageStorageList", "kody.__mockPackageStorageSql", "kody.packageStorageGet", "kody.packageStorageSet", "kody.packageStorageDelete", "kody.packageStorageList", "kody.packageStorageSql", "kody.credentialClientOpen", "kody.credentialClientOpenAll", "kody.credentialClientCheck", "kody.credentialClientRefresh", "kody.authenticatedFetch", "kody.gatewayFetch", "kody.gatewayFetchStream", "kody.adminUserList"];
 export type MockOpenApiOperationId = (typeof mockOpenApiOperationIds)[number];

package/dist/mock-dep-resolve-B5ZH4U3H.js

@@ -0,0 +1,60 @@
+import { createRequire as __createRequire } from 'node:module'; const require = __createRequire(import.meta.url);
+import {
+  resolveLocalExecuteBearer
+} from "./chunk-CPS7HW4T.js";
+import "./chunk-5ZBJAP6G.js";
+import "./chunk-ZILB2HWE.js";
+import "./chunk-CASGRYOF.js";
+import "./chunk-W2SAFAT4.js";
+import "./chunk-46IJPEID.js";
+import "./chunk-DW5UTJ6T.js";
+import {
+  resolveScopedApiToken
+} from "./chunk-5JIRHJQP.js";
+import "./chunk-4GIFJVGT.js";
+import "./chunk-CWWHR4FH.js";
+import "./chunk-3H72XY5R.js";
+import {
+  defaultApiUrl,
+  defaultMcpUrl
+} from "./chunk-BTL3PJ2H.js";
+import "./chunk-UW6AWLXX.js";
+
+// src/mock-dep-resolve.ts
+async function tryResolveMockDepResolve(input) {
+  const apiUrl = input.apiUrl ?? defaultApiUrl;
+  const mcpUrl = input.mcpUrl ?? defaultMcpUrl;
+  const scoped = resolveScopedApiToken({
+    tokenValues: input.tokenValues,
+    apiUrl,
+    env: input.env
+  });
+  if (scoped) {
+    return {
+      apiUrl,
+      token: scoped,
+      ...input.org ? { org: input.org } : {}
+    };
+  }
+  try {
+    const token = await resolveLocalExecuteBearer({
+      tokenValues: input.tokenValues,
+      apiUrl,
+      mcpUrl,
+      purpose: "mock kody:@ dependency resolve",
+      ...input.org ? { org: input.org } : {},
+      env: input.env
+    });
+    return {
+      apiUrl,
+      token,
+      ...input.org ? { org: input.org } : {}
+    };
+  } catch {
+    return void 0;
+  }
+}
+export {
+  tryResolveMockDepResolve
+};
+//# sourceMappingURL=mock-dep-resolve-B5ZH4U3H.js.map

package/dist/mock-dep-resolve-B5ZH4U3H.js.map

@@ -0,0 +1,6 @@
+{
+  "version": 3,
+  "sources": ["../src/mock-dep-resolve.ts"],
+  "mappings": ";;;;;;;;;;;;;;;;;;;;;;;AAoBA,eAAsB,yBAAyB,OAMD;AAC7C,QAAM,SAAS,MAAM,UAAU;AAC/B,QAAM,SAAS,MAAM,UAAU;AAC/B,QAAM,SAAS,sBAAsB;AAAA,IACpC,aAAa,MAAM;AAAA,IACnB;AAAA,IACA,KAAK,MAAM;AAAA,EACZ,CAAC;AACD,MAAI,QAAQ;AACX,WAAO;AAAA,MACN;AAAA,MACA,OAAO;AAAA,MACP,GAAI,MAAM,MAAM,EAAE,KAAK,MAAM,IAAI,IAAI,CAAC;AAAA,IACvC;AAAA,EACD;AACA,MAAI;AACH,UAAM,QAAQ,MAAM,0BAA0B;AAAA,MAC7C,aAAa,MAAM;AAAA,MACnB;AAAA,MACA;AAAA,MACA,SAAS;AAAA,MACT,GAAI,MAAM,MAAM,EAAE,KAAK,MAAM,IAAI,IAAI,CAAC;AAAA,MACtC,KAAK,MAAM;AAAA,IACZ,CAAC;AACD,WAAO;AAAA,MACN;AAAA,MACA;AAAA,MACA,GAAI,MAAM,MAAM,EAAE,KAAK,MAAM,IAAI,IAAI,CAAC;AAAA,IACvC;AAAA,EACD,QAAQ;AACP,WAAO;AAAA,EACR;AACD;",
+  "names": []
+}

package/dist/mock-fetch-gateway-S2ULVFAI.js

@@ -0,0 +1,35 @@
+import { createRequire as __createRequire } from 'node:module'; const require = __createRequire(import.meta.url);
+import {
+  assertOutboundAllowed,
+  buildHandlerLine,
+  buildHandlerStub,
+  createMockFetchGateway,
+  dispatchMockGatewayFetch,
+  hostMatchesPassthrough,
+  isPrivateOrLocalHost,
+  mswPackageSpec,
+  parsePassthroughHosts,
+  resolveMockFetchGateway,
+  tryHandleMockGatewayFetchCall,
+  unmockedRequestError
+} from "./chunk-Y4FOJETX.js";
+import "./chunk-XV6D6HSG.js";
+import "./chunk-DW5UTJ6T.js";
+import "./chunk-4GIFJVGT.js";
+import "./chunk-EJXEVGWF.js";
+import "./chunk-UW6AWLXX.js";
+export {
+  assertOutboundAllowed,
+  buildHandlerLine,
+  buildHandlerStub,
+  createMockFetchGateway,
+  dispatchMockGatewayFetch,
+  hostMatchesPassthrough,
+  isPrivateOrLocalHost,
+  mswPackageSpec,
+  parsePassthroughHosts,
+  resolveMockFetchGateway,
+  tryHandleMockGatewayFetchCall,
+  unmockedRequestError
+};
+//# sourceMappingURL=mock-fetch-gateway-S2ULVFAI.js.map

package/dist/mock-fetch-gateway-S2ULVFAI.js.map

@@ -0,0 +1,6 @@
+{
+  "version": 3,
+  "sources": [],
+  "mappings": "",
+  "names": []
+}