@kodycodes/cli 1.26.3 → 1.27.1

package/dist/oauth-provider.d.ts

@@ -1,21 +1,16 @@
-import { type OAuthClientMetadata, type OAuthClientProvider } from '@modelcontextprotocol/client';
-import type { StoredCredentials } from './store.js';
+import { type StoredCredentials } from './store.js';
 export { orgSlugFromFlag } from './org-slug.js';
-export declare function buildCliClientMetadata(): OAuthClientMetadata;
-/** SEP-2352 issuer stamp restored from durable CLI storage. */
+export type CliClientMetadata = {
+    client_name: string;
+    client_uri: string;
+    redirect_uris: Array<string>;
+    grant_types: Array<string>;
+    response_types: Array<string>;
+    token_endpoint_auth_method: 'none';
+    application_type: 'native';
+    scope: string;
+};
+export declare function buildCliClientMetadata(): CliClientMetadata;
+/** Issuer stamp restored from durable CLI storage. */
 export declare function issuerFromStoredCredentials(credentials: StoredCredentials): string;
-export declare function createCliOAuthProvider(input: {
-    mcpUrl: string;
-    redirectUri: URL;
-    existing?: StoredCredentials;
-    loadStoredTokens: boolean;
-    openBrowser: boolean;
-    expectedState: string;
-    /**
-     * Bind the grant to this org. Set on the authorize URL (`?org=`).
-     * Do not put it on the OAuth `resource`: production rejects a resource
-     * that adds a query (`?org=` or `?profile=`).
-     */
-    org?: string;
-    onAuthorizationUrl?: (url: URL) => void;
-}): OAuthClientProvider;
+export declare function cliMetadataUrl(mcpUrl: string): string;

package/dist/{open-api-client-DVVMLY7P.js → open-api-client-SR4B7265.js}

@@ -13,16 +13,16 @@ import {
   openApiGet,
   openApiRequest,
   searchWithApiToken,
+  toolResultFromHttpBody,
   whoamiWithApiToken
-} from "./chunk-FBVNFWR6.js";
-import "./chunk-R4IUV5P5.js";
-import "./chunk-BISUL7CE.js";
-import "./chunk-G4YN6XP5.js";
-import "./chunk-G6LJWROP.js";
-import "./chunk-RTWUNV76.js";
-import "./chunk-RM34N3KI.js";
-import "./chunk-IHP6PV6X.js";
-import "./chunk-QHBCP4OB.js";
+} from "./chunk-W2SAFAT4.js";
+import "./chunk-46IJPEID.js";
+import "./chunk-DW5UTJ6T.js";
+import "./chunk-5JIRHJQP.js";
+import "./chunk-4GIFJVGT.js";
+import "./chunk-3H72XY5R.js";
+import "./chunk-BTL3PJ2H.js";
+import "./chunk-UW6AWLXX.js";
 export {
   OpenApiError,
   apiOperationUsesQueryInputs,
@@ -37,6 +37,7 @@ export {
   openApiGet,
   openApiRequest,
   searchWithApiToken,
+  toolResultFromHttpBody,
   whoamiWithApiToken
 };
-//# sourceMappingURL=open-api-client-DVVMLY7P.js.map
+//# sourceMappingURL=open-api-client-SR4B7265.js.map

package/dist/open-api-client.d.ts

@@ -1,4 +1,4 @@
-import type { ToolCallResult } from './tool-result.js';
+import { type ToolCallResult } from './tool-result.js';
 export type OpenApiClientInput = {
     apiUrl?: string;
     token: string;
@@ -85,6 +85,7 @@ export declare function searchWithApiToken(input: OpenApiClientInput & {
     limit?: number;
     entity?: string;
 }): Promise<ToolCallResult>;
+export declare function toolResultFromHttpBody(payload: unknown): ToolCallResult;
 export declare function whoamiWithApiToken(input: OpenApiClientInput): Promise<{
     mcpUrl?: undefined;
     apiUrl: string;

package/dist/{org-X7B5BI4R.js → org-535LB4PD.js}

@@ -1,7 +1,7 @@
 import { createRequire as __createRequire } from 'node:module'; const require = __createRequire(import.meta.url);
 import {
   resolveOrgSlug
-} from "./chunk-OVGXPRSY.js";
+} from "./chunk-7PRJ36I5.js";
 import {
   orgEnvVar,
   orgSlugFromFlag
@@ -11,11 +11,11 @@ import {
   loadCredentialStore,
   promotePendingOrg,
   setActiveOrg
-} from "./chunk-RM34N3KI.js";
+} from "./chunk-3H72XY5R.js";
 import {
   defaultMcpUrl
-} from "./chunk-IHP6PV6X.js";
-import "./chunk-QHBCP4OB.js";
+} from "./chunk-BTL3PJ2H.js";
+import "./chunk-UW6AWLXX.js";
 
 // src/org.ts
 import { createInterface } from "node:readline";
@@ -29,7 +29,9 @@ function formatStoredOrgsHelpBlock(orgs, options = {}) {
   for (const org of orgs) {
     const mark = org.active ? "*" : " ";
     const pending = org.pending ? "  (slug pending \u2014 run any authenticated command)" : "";
-    lines.push(`${indent}  ${mark} ${org.slug}${org.active ? "  (active)" : ""}${pending}`);
+    lines.push(
+      `${indent}  ${mark} ${org.slug}${org.active ? "  (active)" : ""}${pending}`
+    );
   }
   return `${lines.join("\n")}
 `;
@@ -129,4 +131,4 @@ export {
   resolveOrgSlug,
   useOrg
 };
-//# sourceMappingURL=org-X7B5BI4R.js.map
+//# sourceMappingURL=org-535LB4PD.js.map

package/dist/org-535LB4PD.js.map

@@ -0,0 +1,6 @@
+{
+  "version": 3,
+  "sources": ["../src/org.ts"],
+  "mappings": ";;;;;;;;;;;;;;;;;;;;AAAA,SAAS,uBAAuB;AAkBzB,SAAS,0BACf,MACA,UAA+B,CAAC,GACvB;AACT,QAAM,SAAS,QAAQ,UAAU;AACjC,MAAI,KAAK,WAAW,GAAG;AACtB,WAAO,GAAG,MAAM;AAAA;AAAA,EACjB;AACA,QAAM,QAAQ,CAAC,GAAG,MAAM,iBAAiB;AACzC,aAAW,OAAO,MAAM;AACvB,UAAM,OAAO,IAAI,SAAS,MAAM;AAChC,UAAM,UAAU,IAAI,UACjB,0DACA;AACH,UAAM;AAAA,MACL,GAAG,MAAM,KAAK,IAAI,IAAI,IAAI,IAAI,GAAG,IAAI,SAAS,eAAe,EAAE,GAAG,OAAO;AAAA,IAC1E;AAAA,EACD;AACA,SAAO,GAAG,MAAM,KAAK,IAAI,CAAC;AAAA;AAC3B;AAEO,SAAS,sBACf,SAAiB,eACjB,SACA,YACmB;AACnB,MAAI;AACH,WAAO,eAAe,QAAQ,SAAS,UAAU;AAAA,EAClD,QAAQ;AACP,WAAO,CAAC;AAAA,EACT;AACD;AAEO,SAAS,mBAAmB,MAAgC;AAClE,MAAI,KAAK,WAAW,GAAG;AACtB,WAAO;AAAA,EACR;AACA,QAAM,QAAuB,CAAC;AAC9B,aAAW,OAAO,MAAM;AACvB,UAAM,OAAO,IAAI,SAAS,MAAM;AAChC,UAAM,UAAU,IAAI,UAAU,qBAAqB;AACnD,UAAM,KAAK,GAAG,IAAI,IAAI,IAAI,IAAI,GAAG,IAAI,SAAS,eAAe,EAAE,GAAG,OAAO,EAAE;AAAA,EAC5E;AACA,SAAO,GAAG,MAAM,KAAK,IAAI,CAAC;AAAA;AAC3B;AAEO,SAAS,kBAAkB,MAAgC;AACjE,SAAO,GAAG,KAAK;AAAA,IACd;AAAA,MACC,MAAM,KAAK,IAAI,CAAC,SAAS;AAAA,QACxB,MAAM,IAAI,UAAU,OAAO,IAAI;AAAA,QAC/B,QAAQ,IAAI;AAAA,QACZ,GAAI,IAAI,UAAU,EAAE,SAAS,KAAK,IAAI,CAAC;AAAA,MACxC,EAAE;AAAA,IACH;AAAA,IACA;AAAA,IACA;AAAA,EACD,CAAC;AAAA;AACF;AAMA,eAAsB,uBAAuB,OAKzB;AACnB,QAAM,QAAQ,MAAM,SAAS,QAAQ,QAAQ,MAAM,KAAK;AACxD,MAAI,CAAC,OAAO;AACX,UAAM,IAAI;AAAA,MACT;AAAA,IACD;AAAA,EACD;AACA,QAAM,SAAS,MAAM,KAAK,OAAO,CAAC,QAAQ,CAAC,IAAI,OAAO;AACtD,MAAI,OAAO,WAAW,GAAG;AACxB,UAAM,IAAI;AAAA,MACT;AAAA,IACD;AAAA,EACD;AACA,QAAM,SAAS,MAAM,UAAU,QAAQ;AACvC,SAAO,MAAM,2BAA2B;AACxC,SAAO,QAAQ,CAAC,KAAK,UAAU;AAC9B,UAAM,SAAS,IAAI,SAAS,cAAc;AAC1C,WAAO,MAAM,KAAK,QAAQ,CAAC,KAAK,IAAI,IAAI,GAAG,MAAM;AAAA,CAAI;AAAA,EACtD,CAAC;AACD,QAAM,KAAK,gBAAgB;AAAA,IAC1B,OAAO,MAAM,SAAS,QAAQ;AAAA,IAC9B,QAAQ;AAAA,IACR,UAAU;AAAA,EACX,CAAC;AACD,MAAI;AACH,UAAM,SAAS,MAAM,IAAI,QAAgB,CAAC,YAAY;AACrD,SAAG,SAAS,sBAAsB,CAAC,SAAS,QAAQ,KAAK,KAAK,CAAC,CAAC;AAAA,IACjE,CAAC;AACD,QAAI,CAAC,QAAQ;AACZ,YAAM,IAAI,MAAM,2BAA2B;AAAA,IAC5C;AACA,UAAM,WAAW,OAAO,MAAM;AAC9B,QACC,OAAO,UAAU,QAAQ,KACzB,YAAY,KACZ,YAAY,OAAO,QAClB;AACD,aAAO,OAAO,WAAW,CAAC,EAAG;AAAA,IAC9B;AACA,WAAO,gBAAgB,MAAM;AAAA,EAC9B,UAAE;AACD,OAAG,MAAM;AAAA,EACV;AACD;AAEO,SAAS,OACf,MACA,SAAiB,eACjB,SACA,YAC0B;AAC1B,SAAO,aAAa,QAAQ,gBAAgB,IAAI,GAAG,SAAS,UAAU;AACvE;AAEO,SAAS,sBACf,QACA,SACA,SACA,YACiC;AACjC,QAAM,WAAW,oBAAoB,QAAQ,SAAS,UAAU;AAChE,MAAI,CAAC,UAAU,QAAS,QAAO;AAC/B,SAAO,kBAAkB,QAAQ,SAAS,SAAS,UAAU;AAC9D;",
+  "names": []
+}

package/dist/org-resolve.d.ts

@@ -6,4 +6,6 @@ export { orgEnvVar, orgSlugFromFlag } from './org-slug.js';
 export declare function resolveOrgSlug(input: {
     flag?: string;
     env?: NodeJS.ProcessEnv;
+    /** Active org from the credential store. Used when flag and env are absent. */
+    activeOrg?: string | null;
 }): string | undefined;

package/dist/package-app-dev.d.ts

@@ -11,8 +11,8 @@
 import { type DevEvent } from './dev/dev-events.js';
 import { type DevServerStatus } from './dev/dev-registry.js';
 import { type PackageLocalContext } from './package-local-runtime-source.js';
-import type { KodyPackageManifest } from './package-manifest.js';
-import type { KodyTarget } from './target.js';
+import { type KodyPackageManifest } from './package-manifest.js';
+import { type KodyTarget } from './target.js';
 export type PackageAppDevOptions = {
     manifest: KodyPackageManifest;
     token: string;

package/dist/{package-manifest-QH2RU64C.js → package-manifest-DFF6XCPV.js}

@@ -3,12 +3,13 @@ import {
   loadPackageManifest,
   resolveExportModulePath,
   resolvePackagePath
-} from "./chunk-64IM6G4Z.js";
-import "./chunk-BPGY4IE7.js";
-import "./chunk-QHBCP4OB.js";
+} from "./chunk-TUUFQYWP.js";
+import "./chunk-XV6D6HSG.js";
+import "./chunk-EJXEVGWF.js";
+import "./chunk-UW6AWLXX.js";
 export {
   loadPackageManifest,
   resolveExportModulePath,
   resolvePackagePath
 };
-//# sourceMappingURL=package-manifest-QH2RU64C.js.map
+//# sourceMappingURL=package-manifest-DFF6XCPV.js.map

package/dist/{remote-execute-QMQDVHOY.js → remote-execute-JN6DRFEU.js}

@@ -1,50 +1,69 @@
 import { createRequire as __createRequire } from 'node:module'; const require = __createRequire(import.meta.url);
 import {
   resolveExecuteInvokeCode
-} from "./chunk-75RZUXQL.js";
+} from "./chunk-SLNAWWQK.js";
 import {
-  assertTokenSafeApiUrl,
-  callCapabilityProxy,
-  openCapabilityProxySession
-} from "./chunk-R4IUV5P5.js";
-import "./chunk-G4YN6XP5.js";
-import "./chunk-G6LJWROP.js";
-import "./chunk-RTWUNV76.js";
-import "./chunk-RM34N3KI.js";
-import "./chunk-IHP6PV6X.js";
-import "./chunk-QHBCP4OB.js";
+  openApiRequest
+} from "./chunk-W2SAFAT4.js";
+import "./chunk-46IJPEID.js";
+import "./chunk-DW5UTJ6T.js";
+import {
+  assertTokenSafeApiUrl
+} from "./chunk-5JIRHJQP.js";
+import "./chunk-4GIFJVGT.js";
+import "./chunk-3H72XY5R.js";
+import "./chunk-BTL3PJ2H.js";
+import "./chunk-UW6AWLXX.js";
 
 // src/remote-execute.ts
-var credentialFlagRequiresLocalOrMcpMessage = "--credential picks a credential for this run, but token-auth cloud execute goes through CapabilityProxy \u2192 kody.execute, which does not take a call map (package code must not pick by name). Use `execute --local --credential \u2026`, or omit --token / KODY_API_TOKEN and use a `kody login` MCP session so execute receives credentials.";
+var credentialFlagRequiresLocalOrMcpMessage = "--credential picks a credential for this run. Cloud execute sends it on POST /v1/execute. Use `execute --local --credential \u2026` when the module must run on this machine.";
 async function runRemoteExecuteWithToken(input) {
   assertTokenSafeApiUrl(input.apiUrl);
-  if (input.credentials) {
-    throw new Error(credentialFlagRequiresLocalOrMcpMessage);
+  const invoke = input.invoke?.trim();
+  const body = {};
+  if (invoke) {
+    if (input.code?.trim()) {
+      throw new Error(
+        "--invoke cannot be combined with --code, --file, or a module string."
+      );
+    }
+    body.invoke = invoke;
+  } else {
+    body.code = resolveRemoteExecuteCode(input);
   }
-  const code = resolveRemoteExecuteCode(input);
-  const client = {
-    apiUrl: input.apiUrl,
+  if (input.params !== void 0) body.params = input.params;
+  if (input.conversationId !== void 0)
+    body.conversationId = input.conversationId;
+  if (input.credentials !== void 0) body.credentials = input.credentials;
+  const payload = await openApiRequest({
     token: input.token,
+    apiUrl: input.apiUrl,
     fetchFn: input.fetchFn,
-    ...input.org ? { org: input.org } : {}
-  };
-  await openCapabilityProxySession(client);
-  const args = { code };
-  if (input.params !== void 0) args.params = input.params;
-  if (input.conversationId !== void 0) args.conversationId = input.conversationId;
-  const payload = await callCapabilityProxy({
-    ...client,
-    path: ["kody", "execute"],
-    args: [args],
-    conversationId: input.conversationId
+    ...input.org ? { org: input.org } : {},
+    method: "POST",
+    path: "v1/execute",
+    body
   });
+  return toolResultFromExecuteBody(payload);
+}
+function toolResultFromExecuteBody(payload) {
+  if (payload && typeof payload === "object" && !Array.isArray(payload) && "content" in payload && Array.isArray(payload.content)) {
+    const record = payload;
+    return {
+      content: record.content,
+      structuredContent: record.structuredContent,
+      isError: record.isError === true
+    };
+  }
   return formatExecuteCapabilityResult(payload);
 }
 function resolveRemoteExecuteCode(input) {
   const code = input.code?.trim() ? input.code : void 0;
   const invoke = input.invoke?.trim() ? input.invoke : void 0;
   if (code && invoke) {
-    throw new Error("--invoke cannot be combined with --code, --file, or a module string.");
+    throw new Error(
+      "--invoke cannot be combined with --code, --file, or a module string."
+    );
   }
   if (invoke) return resolveExecuteInvokeCode(invoke);
   if (code) return code;
@@ -107,4 +126,4 @@ export {
   resolveRemoteExecuteCode,
   runRemoteExecuteWithToken
 };
-//# sourceMappingURL=remote-execute-QMQDVHOY.js.map
+//# sourceMappingURL=remote-execute-JN6DRFEU.js.map

package/dist/remote-execute-JN6DRFEU.js.map

@@ -0,0 +1,6 @@
+{
+  "version": 3,
+  "sources": ["../src/remote-execute.ts"],
+  "mappings": ";;;;;;;;;;;;;;;;;;AAuBO,IAAM,0CACZ;AAUD,eAAsB,0BACrB,OAC0B;AAC1B,wBAAsB,MAAM,MAAM;AAClC,QAAM,SAAS,MAAM,QAAQ,KAAK;AAClC,QAAM,OAAgC,CAAC;AACvC,MAAI,QAAQ;AACX,QAAI,MAAM,MAAM,KAAK,GAAG;AACvB,YAAM,IAAI;AAAA,QACT;AAAA,MACD;AAAA,IACD;AAGA,SAAK,SAAS;AAAA,EACf,OAAO;AACN,SAAK,OAAO,yBAAyB,KAAK;AAAA,EAC3C;AACA,MAAI,MAAM,WAAW,OAAW,MAAK,SAAS,MAAM;AACpD,MAAI,MAAM,mBAAmB;AAC5B,SAAK,iBAAiB,MAAM;AAC7B,MAAI,MAAM,gBAAgB,OAAW,MAAK,cAAc,MAAM;AAC9D,QAAM,UAAU,MAAM,eAAe;AAAA,IACpC,OAAO,MAAM;AAAA,IACb,QAAQ,MAAM;AAAA,IACd,SAAS,MAAM;AAAA,IACf,GAAI,MAAM,MAAM,EAAE,KAAK,MAAM,IAAI,IAAI,CAAC;AAAA,IACtC,QAAQ;AAAA,IACR,MAAM;AAAA,IACN;AAAA,EACD,CAAC;AACD,SAAO,0BAA0B,OAAO;AACzC;AAEA,SAAS,0BAA0B,SAAkC;AACpE,MACC,WACA,OAAO,YAAY,YACnB,CAAC,MAAM,QAAQ,OAAO,KACtB,aAAa,WACb,MAAM,QAAS,QAAiC,OAAO,GACtD;AACD,UAAM,SAAS;AAKf,WAAO;AAAA,MACN,SAAS,OAAO;AAAA,MAChB,mBAAmB,OAAO;AAAA,MAC1B,SAAS,OAAO,YAAY;AAAA,IAC7B;AAAA,EACD;AACA,SAAO,8BAA8B,OAAO;AAC7C;AAEO,SAAS,yBAAyB,OAG9B;AACV,QAAM,OAAO,MAAM,MAAM,KAAK,IAAI,MAAM,OAAO;AAC/C,QAAM,SAAS,MAAM,QAAQ,KAAK,IAAI,MAAM,SAAS;AACrD,MAAI,QAAQ,QAAQ;AACnB,UAAM,IAAI;AAAA,MACT;AAAA,IACD;AAAA,EACD;AACA,MAAI,OAAQ,QAAO,yBAAyB,MAAM;AAClD,MAAI,KAAM,QAAO;AACjB,QAAM,IAAI,MAAM,uDAAuD;AACxE;AAMO,SAAS,8BACf,SACiB;AACjB,QAAM,SAAS,SAAS,OAAO,IAAI,UAAU;AAC7C,MAAI,CAAC,QAAQ;AACZ,UAAMA,QACL,OAAO,YAAY,WAChB,UACC,KAAK,UAAU,SAAS,MAAM,CAAC,KAAK;AACzC,WAAO;AAAA,MACN,SAAS,CAAC,EAAE,MAAM,QAAQ,MAAAA,MAAK,CAAC;AAAA,MAChC,mBAAmB,EAAE,QAAQ,QAAQ;AAAA,MACrC,SAAS;AAAA,IACV;AAAA,EACD;AAEA,QAAM,KAAK,OAAO,OAAO,SAAS,OAAO,OAAO,UAAU;AAC1D,QAAM,iBACL,OAAO,OAAO,mBAAmB,WAC9B,OAAO,iBACP;AACJ,QAAM,OAAO,MAAM,QAAQ,OAAO,IAAI,IAAI,OAAO,OAAO,CAAC;AACzD,QAAM,OAAgC;AAAA,IACrC,GAAI,mBAAmB,SAAY,EAAE,eAAe,IAAI,CAAC;AAAA,IACzD;AAAA,EACD;AACA,aAAW,OAAO;AAAA,IACjB;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACD,GAAY;AACX,QAAI,OAAO,GAAG,MAAM,OAAW,MAAK,GAAG,IAAI,OAAO,GAAG;AAAA,EACtD;AAEA,MAAI,CAAC,IAAI;AACR,UAAM,QACL,OAAO,OAAO,UAAU,WACrB,OAAO,QACP;AACJ,WAAO;AAAA,MACN,SAAS,CAAC,EAAE,MAAM,QAAQ,MAAM,UAAU,KAAK,GAAG,CAAC;AAAA,MACnD,mBAAmB,EAAE,GAAG,MAAM,OAAO,QAAQ,OAAO,OAAO;AAAA,MAC3D,SAAS;AAAA,IACV;AAAA,EACD;AAEA,QAAM,SAAS,OAAO;AACtB,QAAM,OACL,OAAO,WAAW,WACf,SACC,KAAK,UAAU,QAAQ,MAAM,CAAC,KAAK;AACxC,SAAO;AAAA,IACN,SAAS,CAAC,EAAE,MAAM,QAAQ,KAAK,CAAC;AAAA,IAChC,mBAAmB,EAAE,GAAG,MAAM,OAAO;AAAA,IACrC,SAAS;AAAA,EACV;AACD;AAEA,SAAS,SAAS,OAAkD;AACnE,SAAO,UAAU,QAAQ,OAAO,UAAU,YAAY,CAAC,MAAM,QAAQ,KAAK;AAC3E;",
+  "names": ["text"]
+}

package/dist/remote-execute.d.ts

@@ -1,5 +1,5 @@
-import type { CredentialCallMapInput } from './credential-call-map.js';
-import type { ToolCallResult } from './tool-result.js';
+import { type CredentialCallMapInput } from './credential-call-map.js';
+import { type ToolCallResult } from './tool-result.js';
 export type RemoteExecuteInput = {
     code?: string;
     invoke?: string;
@@ -16,7 +16,7 @@ export type RemoteExecuteInput = {
     /** User-owned token org selection (`?org=`). */
     org?: string;
 };
-export declare const credentialFlagRequiresLocalOrMcpMessage = "--credential picks a credential for this run, but token-auth cloud execute goes through CapabilityProxy \u2192 kody.execute, which does not take a call map (package code must not pick by name). Use `execute --local --credential \u2026`, or omit --token / KODY_API_TOKEN and use a `kody login` MCP session so execute receives credentials.";
+export declare const credentialFlagRequiresLocalOrMcpMessage = "--credential picks a credential for this run. Cloud execute sends it on POST /v1/execute. Use `execute --local --credential \u2026` when the module must run on this machine.";
 /**
  * Cloud (non-`--local`) execute authenticated only with a scoped API token:
  * CapabilityProxy session + `kody.execute`. The module runs in Kody's cloud

package/dist/{setup-git-5KCUBYPB.js → setup-git-MHK563LB.js}

@@ -36,17 +36,16 @@ import {
   setupGitConfigScopes,
   setupGitDefaultScopes,
   setupGitRequiredScopes
-} from "./chunk-EOCV74B2.js";
-import "./chunk-6XQP5SWX.js";
-import "./chunk-FBVNFWR6.js";
-import "./chunk-R4IUV5P5.js";
-import "./chunk-BISUL7CE.js";
-import "./chunk-G4YN6XP5.js";
-import "./chunk-G6LJWROP.js";
-import "./chunk-RTWUNV76.js";
-import "./chunk-RM34N3KI.js";
-import "./chunk-IHP6PV6X.js";
-import "./chunk-QHBCP4OB.js";
+} from "./chunk-OZDWOZLV.js";
+import "./chunk-6ZYUGXVW.js";
+import "./chunk-W2SAFAT4.js";
+import "./chunk-46IJPEID.js";
+import "./chunk-DW5UTJ6T.js";
+import "./chunk-5JIRHJQP.js";
+import "./chunk-4GIFJVGT.js";
+import "./chunk-3H72XY5R.js";
+import "./chunk-BTL3PJ2H.js";
+import "./chunk-UW6AWLXX.js";
 export {
   apiTokenNeedsRefresh,
   assertUserOwnedTokensLive,
@@ -85,4 +84,4 @@ export {
   setupGitDefaultScopes,
   setupGitRequiredScopes
 };
-//# sourceMappingURL=setup-git-5KCUBYPB.js.map
+//# sourceMappingURL=setup-git-MHK563LB.js.map

package/dist/setup-git.d.ts

@@ -1,6 +1,6 @@
 import { cliTokenLifetimeAliases, type ResolvedCliTokenLifetime } from './auth-bootstrap.js';
 import { type StoredApiToken } from './api-token-store.js';
-import type { SecretBackend, StoreResolution } from './store.js';
+import { type SecretBackend, type StoreResolution } from './store.js';
 import { which as whichOnPath } from './which.js';
 /** Scopes setup-git always requires for clone/fetch (+ push). */
 export declare const setupGitRequiredScopes: readonly ["package:read", "package:write"];

package/dist/{skill-ENPATRIW.js → skill-D74XVI6T.js}

@@ -1,5 +1,5 @@
 import { createRequire as __createRequire } from 'node:module'; const require = __createRequire(import.meta.url);
-import "./chunk-QHBCP4OB.js";
+import "./chunk-UW6AWLXX.js";
 
 // src/skill.ts
 import { mkdir, readFile, writeFile } from "node:fs/promises";
@@ -12,16 +12,34 @@ function bundledSkillPath() {
 }
 function userSkillTargets(home = homedir()) {
   return [
-    { host: "Claude Code", path: join(home, ".claude", "skills", "kody", "SKILL.md") },
-    { host: "Cursor", path: join(home, ".cursor", "skills", "kody", "SKILL.md") },
-    { host: "Agents", path: join(home, ".agents", "skills", "kody", "SKILL.md") }
+    {
+      host: "Claude Code",
+      path: join(home, ".claude", "skills", "kody", "SKILL.md")
+    },
+    {
+      host: "Cursor",
+      path: join(home, ".cursor", "skills", "kody", "SKILL.md")
+    },
+    {
+      host: "Agents",
+      path: join(home, ".agents", "skills", "kody", "SKILL.md")
+    }
   ];
 }
 function projectSkillTargets(cwd = process.cwd()) {
   return [
-    { host: "Agents", path: join(cwd, ".agents", "skills", "kody", "SKILL.md") },
-    { host: "Cursor", path: join(cwd, ".cursor", "skills", "kody", "SKILL.md") },
-    { host: "Claude Code", path: join(cwd, ".claude", "skills", "kody", "SKILL.md") }
+    {
+      host: "Agents",
+      path: join(cwd, ".agents", "skills", "kody", "SKILL.md")
+    },
+    {
+      host: "Cursor",
+      path: join(cwd, ".cursor", "skills", "kody", "SKILL.md")
+    },
+    {
+      host: "Claude Code",
+      path: join(cwd, ".claude", "skills", "kody", "SKILL.md")
+    }
   ];
 }
 async function installSkill(input) {
@@ -40,4 +58,4 @@ export {
   projectSkillTargets,
   userSkillTargets
 };
-//# sourceMappingURL=skill-ENPATRIW.js.map
+//# sourceMappingURL=skill-D74XVI6T.js.map

package/dist/skill-D74XVI6T.js.map

@@ -0,0 +1,6 @@
+{
+  "version": 3,
+  "sources": ["../src/skill.ts"],
+  "mappings": ";;;;AAAA,SAAS,OAAO,UAAU,iBAAiB;AAC3C,SAAS,SAAS,YAAY;AAC9B,SAAS,qBAAqB;AAC9B,SAAS,eAAe;AAExB,IAAM,oBAAoB;AAEnB,SAAS,mBAA2B;AAC1C,SAAO,KAAK,cAAc,IAAI,IAAI,OAAO,YAAY,GAAG,CAAC,GAAG,iBAAiB;AAC9E;AAEO,SAAS,iBAAiB,OAAe,QAAQ,GAGrD;AACF,SAAO;AAAA,IACN;AAAA,MACC,MAAM;AAAA,MACN,MAAM,KAAK,MAAM,WAAW,UAAU,QAAQ,UAAU;AAAA,IACzD;AAAA,IACA;AAAA,MACC,MAAM;AAAA,MACN,MAAM,KAAK,MAAM,WAAW,UAAU,QAAQ,UAAU;AAAA,IACzD;AAAA,IACA;AAAA,MACC,MAAM;AAAA,MACN,MAAM,KAAK,MAAM,WAAW,UAAU,QAAQ,UAAU;AAAA,IACzD;AAAA,EACD;AACD;AAEO,SAAS,oBAAoB,MAAc,QAAQ,IAAI,GAG3D;AACF,SAAO;AAAA,IACN;AAAA,MACC,MAAM;AAAA,MACN,MAAM,KAAK,KAAK,WAAW,UAAU,QAAQ,UAAU;AAAA,IACxD;AAAA,IACA;AAAA,MACC,MAAM;AAAA,MACN,MAAM,KAAK,KAAK,WAAW,UAAU,QAAQ,UAAU;AAAA,IACxD;AAAA,IACA;AAAA,MACC,MAAM;AAAA,MACN,MAAM,KAAK,KAAK,WAAW,UAAU,QAAQ,UAAU;AAAA,IACxD;AAAA,EACD;AACD;AAEA,eAAsB,aAAa,OAKgB;AAClD,QAAM,SAAS,MAAM,cAAc,iBAAiB;AACpD,QAAM,OAAO,MAAM,SAAS,QAAQ,MAAM;AAC1C,QAAM,UAAU,MAAM,UACnB,oBAAoB,MAAM,GAAG,IAC7B,iBAAiB,MAAM,IAAI;AAC9B,aAAW,UAAU,SAAS;AAC7B,UAAM,MAAM,QAAQ,OAAO,IAAI,GAAG,EAAE,WAAW,KAAK,CAAC;AACrD,UAAM,UAAU,OAAO,MAAM,MAAM,MAAM;AAAA,EAC1C;AACA,SAAO;AACR;",
+  "names": []
+}

package/dist/{store-WTMRH527.js → store-27J4CQZ2.js}

@@ -20,9 +20,9 @@ import {
   saveCredentials,
   secretServiceKeyringOptions,
   setActiveOrg
-} from "./chunk-RM34N3KI.js";
-import "./chunk-IHP6PV6X.js";
-import "./chunk-QHBCP4OB.js";
+} from "./chunk-3H72XY5R.js";
+import "./chunk-BTL3PJ2H.js";
+import "./chunk-UW6AWLXX.js";
 export {
   accountForMcpUrl,
   createFileBackend,
@@ -45,4 +45,4 @@ export {
   secretServiceKeyringOptions,
   setActiveOrg
 };
-//# sourceMappingURL=store-WTMRH527.js.map
+//# sourceMappingURL=store-27J4CQZ2.js.map

package/dist/{structured-error-C65GQ53Z.js → structured-error-5MLWXYR3.js}

@@ -3,11 +3,12 @@ import {
   StructuredCliError,
   formatStructuredErrorMessage,
   notImplementedInMock
-} from "./chunk-BPGY4IE7.js";
-import "./chunk-QHBCP4OB.js";
+} from "./chunk-XV6D6HSG.js";
+import "./chunk-EJXEVGWF.js";
+import "./chunk-UW6AWLXX.js";
 export {
   StructuredCliError,
   formatStructuredErrorMessage,
   notImplementedInMock
 };
-//# sourceMappingURL=structured-error-C65GQ53Z.js.map
+//# sourceMappingURL=structured-error-5MLWXYR3.js.map

package/dist/structured-error.d.ts

@@ -2,7 +2,7 @@
  * Agent-facing structured errors for local testing (design 2026-10-13).
  * Stable `code`, optional `where` / `fix`, and which `target` produced it.
  */
-import type { KodyTarget } from './target.js';
+import { type KodyTarget } from './target.js';
 export type StructuredErrorCode = 'not_implemented_in_mock' | 'unmocked_request' | 'unresolved_import' | 'missing_secret' | 'bundle_failed' | 'package_manifest_invalid' | 'dev_handler_missing' | 'dev_surface_missing' | 'invalid_target' | 'invalid_port' | 'dev_port_in_use' | 'dev_already_running';
 export type StructuredErrorBody = {
     code: StructuredErrorCode | string;

package/dist/target-33ATHDUF.js

@@ -0,0 +1,17 @@
+import { createRequire as __createRequire } from 'node:module'; const require = __createRequire(import.meta.url);
+import {
+  commandAcceptsTarget,
+  defaultTargetFor,
+  parseTargetFlag,
+  resolveTarget,
+  targetEnvVar
+} from "./chunk-EJXEVGWF.js";
+import "./chunk-UW6AWLXX.js";
+export {
+  commandAcceptsTarget,
+  defaultTargetFor,
+  parseTargetFlag,
+  resolveTarget,
+  targetEnvVar
+};
+//# sourceMappingURL=target-33ATHDUF.js.map

package/package.json

@@ -1,7 +1,7 @@
 {
 	"name": "@kodycodes/cli",
-	"version": "1.26.3",
-	"description": "Official Kody MCP client CLI: login, secure token storage, search, and execute.",
+	"version": "1.27.1",
+	"description": "Official Kody CLI: login, secure token storage, search, and execute over the OpenAPI.",
 	"type": "module",
 	"bin": {
 		"kody": "dist/bin.js"
@@ -38,10 +38,11 @@
 	"license": "MIT",
 	"repository": {
 		"type": "git",
-		"url": "git+https://github.com/kody-bot/cli.git"
+		"url": "git+https://github.com/kentcdodds/kody.git",
+		"directory": "packages/cli"
 	},
 	"bugs": {
-		"url": "https://github.com/kody-bot/cli/issues"
+		"url": "https://github.com/kentcdodds/kody/issues"
 	},
 	"homepage": "https://kody.codes",
 	"publishConfig": {
@@ -55,8 +56,8 @@
 	"devDependencies": {
 		"@inquirer/checkbox": "^5.2.2",
 		"@jridgewell/trace-mapping": "^0.3.31",
-		"@modelcontextprotocol/client": "2.0.0",
 		"@types/node": "^24.5.2",
+		"oauth4webapi": "^3.8.6",
 		"add-mcp": "^2.4.0",
 		"chokidar": "^4.0.3",
 		"es-module-lexer": "^3.0.3",