@kodycodes/cli 1.26.3 → 1.27.1

package/dist/{chunk-TIL35OWA.js → chunk-5YQBD7PN.js}

@@ -1,23 +1,17 @@
 import { createRequire as __createRequire } from 'node:module'; const require = __createRequire(import.meta.url);
 import {
   assertLocalExecuteNodeEngine
-} from "./chunk-SMURF26I.js";
+} from "./chunk-2XPH7L2P.js";
 import {
   isPublishedPackageInvokeSpecifier,
   resolveExecuteInvokeCode
-} from "./chunk-75RZUXQL.js";
-import {
-  formatToolResult
-} from "./chunk-46IJPEID.js";
+} from "./chunk-SLNAWWQK.js";
 import {
   hostIds
-} from "./chunk-PDWCKWQF.js";
-import {
-  resolveOrgSlug
-} from "./chunk-OVGXPRSY.js";
+} from "./chunk-YDWTXEKQ.js";
 import {
   resolveLocalExecuteBearer
-} from "./chunk-VQS5YSCI.js";
+} from "./chunk-CPS7HW4T.js";
 import {
   authBootstrap,
   authBootstrapWithScopes,
@@ -27,40 +21,42 @@ import {
   parseCliScopesFlag,
   refreshGitCredentialHelperPinIfNeeded,
   resolveCliTokenLifetime
-} from "./chunk-EOCV74B2.js";
-import {
-  parseCredentialFlags
-} from "./chunk-R4IUV5P5.js";
+} from "./chunk-OZDWOZLV.js";
 import {
   redactError
 } from "./chunk-CASGRYOF.js";
 import {
-  orgEnvVar,
-  orgSlugFromFlag
-} from "./chunk-CWWHR4FH.js";
-import {
-  readPackageVersion
-} from "./chunk-G6LJWROP.js";
+  formatToolResult
+} from "./chunk-46IJPEID.js";
 import {
   cliBootstrapMintCall,
   deleteStoredApiToken,
   hasExplicitTokenFlag,
   loadStoredApiToken,
+  parseCredentialFlags,
+  readPackageVersion,
   requireApiToken,
   resolveScopedApiToken
-} from "./chunk-RTWUNV76.js";
+} from "./chunk-5JIRHJQP.js";
+import {
+  resolveOrgSlug
+} from "./chunk-7PRJ36I5.js";
+import {
+  orgEnvVar,
+  orgSlugFromFlag
+} from "./chunk-CWWHR4FH.js";
 import {
   deleteCredentials,
   listStoredOrgs,
+  loadCredentialStore,
   loadCredentials
-} from "./chunk-RM34N3KI.js";
+} from "./chunk-3H72XY5R.js";
 import {
   apiTokenEnvVar,
   defaultApiUrl,
   defaultMcpUrl,
-  modernMcpProtocolVersion,
   onboardingUrl
-} from "./chunk-IHP6PV6X.js";
+} from "./chunk-BTL3PJ2H.js";
 
 // src/cli.ts
 import { parseArgs } from "node:util";
@@ -389,12 +385,12 @@ Environment:
 }
 
 // src/package-collaborators.ts
-var packageCollaboratorPresets = ["use", "contribute", "manage"];
-var packageCollaboratorActions = [
-  "collaborators",
-  "grant",
-  "revoke"
+var packageCollaboratorPresets = [
+  "use",
+  "contribute",
+  "manage"
 ];
+var packageCollaboratorActions = ["collaborators", "grant", "revoke"];
 function isPackageCollaboratorAction(value) {
   return packageCollaboratorActions.includes(value);
 }
@@ -429,7 +425,9 @@ ${packageCollaboratorUsage}`
 function readPreset(value) {
   const preset = readFlag(value, "preset") ?? "use";
   if (!packageCollaboratorPresets.includes(preset)) {
-    throw new Error(`--preset must be one of ${packageCollaboratorPresets.join(", ")}.`);
+    throw new Error(
+      `--preset must be one of ${packageCollaboratorPresets.join(", ")}.`
+    );
   }
   return preset;
 }
@@ -453,10 +451,16 @@ function parsePackageCollaboratorCommand(input) {
     }
     case "revoke":
       if (input.values.preset !== void 0) {
-        throw new Error(`--preset is only for grant.
-${packageCollaboratorUsage}`);
+        throw new Error(
+          `--preset is only for grant.
+${packageCollaboratorUsage}`
+        );
       }
-      return { action: "revoke", packageId, target: readSubject(input.values, true) };
+      return {
+        action: "revoke",
+        packageId,
+        target: readSubject(input.values, true)
+      };
     default: {
       const exhaustive = input.action;
       throw new Error(`Unhandled package action: ${String(exhaustive)}`);
@@ -470,7 +474,8 @@ function collaboratorLabel(collaborator) {
   if (collaborator.subject_type === "team") {
     return collaborator.team_slug ? `${collaborator.team_slug}${collaborator.team_name ? ` (${collaborator.team_name})` : ""}` : collaborator.subject_id;
   }
-  if (!collaborator.username) return collaborator.display_name ?? collaborator.subject_id;
+  if (!collaborator.username)
+    return collaborator.display_name ?? collaborator.subject_id;
   return collaborator.display_name ? `@${collaborator.username} (${collaborator.display_name})` : `@${collaborator.username}`;
 }
 function presetLabel(collaborator) {
@@ -504,7 +509,9 @@ function findCollaborator(list, subject) {
     (collaborator) => subject.kind === "team" ? collaborator.subject_type === "team" && collaborator.team_slug === subject.slug : collaborator.subject_type === "user" && collaborator.username?.toLowerCase() === subject.username.toLowerCase()
   );
   if (!match) {
-    throw new Error(`${describeSubject(subject)} is not a collaborator on ${list.package.name}.`);
+    throw new Error(
+      `${describeSubject(subject)} is not a collaborator on ${list.package.name}.`
+    );
   }
   return match;
 }
@@ -699,7 +706,7 @@ async function dispatch(parsed, write, writeErr) {
   });
   const json = parsed.values.json === true;
   if (parsed.values["allow-private-network"] === true) {
-    const executeAllowsPrivateNetwork = parsed.command === "execute" && (parsed.values.local === true || (await import("./target-3QHY7JT4.js")).resolveTarget({
+    const executeAllowsPrivateNetwork = parsed.command === "execute" && (parsed.values.local === true || (await import("./target-33ATHDUF.js")).resolveTarget({
       command: "execute",
       flag: typeof parsed.values.target === "string" ? parsed.values.target : void 0
     }) === "mock");
@@ -710,7 +717,9 @@ async function dispatch(parsed, write, writeErr) {
     }
   }
   if (parsed.values["reset-storage"] === true && parsed.command !== "dev" && parsed.command !== "execute" && parsed.command !== "search") {
-    throw new Error("`--reset-storage` is only used with --target mock on execute, search, or dev.");
+    throw new Error(
+      "`--reset-storage` is only used with --target mock on execute, search, or dev."
+    );
   }
   if (parsed.values["dry-run"] === true && parsed.command !== "dev") {
     throw new Error(
@@ -729,7 +738,10 @@ async function dispatch(parsed, write, writeErr) {
     );
   }
   const orgFlagOnly = orgFlag !== void 0 ? orgSlugFromFlag(orgFlag) : void 0;
-  const org = resolveOrgSlug({ flag: orgFlag });
+  const org = resolveOrgSlug({
+    flag: orgFlag,
+    activeOrg: loadCredentialStore(mcpUrl)?.activeOrg
+  });
   switch (parsed.command) {
     case "help":
       write(buildUsage({ mcpUrl }));
@@ -739,10 +751,14 @@ async function dispatch(parsed, write, writeErr) {
 `);
       return 0;
     case "login": {
-      const { login } = await import("./auth-4FW6GCLG.js");
+      const { login } = await import("./auth-6ZE6QQXA.js");
       write("Opening the Kody login page in your browser\u2026\n");
       const result = await login({
         mcpUrl,
+        apiUrl: apiUrlFrom({
+          apiUrl: typeof parsed.values["api-url"] === "string" ? parsed.values["api-url"] : void 0
+        }),
+        ...typeof parsed.values.lifetime === "string" ? { lifetime: parsed.values.lifetime === "short" ? "short" : "long" } : {},
         ...orgFlagOnly ? { org: orgFlagOnly } : {},
         openBrowser: parsed.values["no-browser"] !== true,
         onAuthorizationUrl: (url) => {
@@ -753,8 +769,10 @@ ${url.href}
       });
       const orgLabel = result.org ? ` as org ${result.org}` : result.credentials.org ? ` as org ${result.credentials.org}` : "";
       const accountLabel = result.account?.email ? ` (${result.account.email})` : result.account?.displayName ? ` (${result.account.displayName})` : "";
-      write(`Logged in to ${result.credentials.mcpUrl}${orgLabel}${accountLabel}.
-`);
+      write(
+        `Logged in to ${result.credentials.mcpUrl}${orgLabel}${accountLabel}.
+`
+      );
       if (result.backendKind === "file" && result.backendPath) {
         write(
           `OS keychain was unavailable; credentials saved at ${result.backendPath} (mode 0600).
@@ -801,8 +819,8 @@ ${url.href}
         formatOrgListHuman,
         formatOrgListJson,
         useOrg
-      } = await import("./org-X7B5BI4R.js");
-      const { listStoredOrgs: listStoredOrgs2 } = await import("./store-WTMRH527.js");
+      } = await import("./org-535LB4PD.js");
+      const { listStoredOrgs: listStoredOrgs2 } = await import("./store-27J4CQZ2.js");
       const action = parsed.positionals[0];
       if (action === "list") {
         const orgs = listStoredOrgs2(mcpUrl);
@@ -958,7 +976,7 @@ ${url.href}
         parseGitCredentialAction,
         parseGitCredentialInput,
         readGitCredentialStdin
-      } = await import("./git-credential-FUE3JE3T.js");
+      } = await import("./git-credential-INB2UV4C.js");
       const action = parseGitCredentialAction(parsed.positionals);
       const raw = await readGitCredentialStdin(process.stdin);
       const output = await handleGitCredential({
@@ -973,7 +991,7 @@ ${url.href}
       return 0;
     }
     case "whoami": {
-      const { resolveTarget } = await import("./target-3QHY7JT4.js");
+      const { resolveTarget } = await import("./target-33ATHDUF.js");
       const target = resolveTarget({
         command: "whoami",
         flag: typeof parsed.values.target === "string" ? parsed.values.target : void 0
@@ -983,15 +1001,18 @@ ${url.href}
         apiUrl: typeof parsed.values["api-url"] === "string" ? parsed.values["api-url"] : void 0
       });
       if (target === "mock") {
-        const { ensureMockTarget } = await import("./mock-server-SV2IKC4I.js");
+        const { ensureMockTarget } = await import("./mock-server-6BWDQQBE.js");
         const mock = await ensureMockTarget({
           resetStorage: parsed.values["reset-storage"] === true,
           ...org ? { orgSlug: org } : {}
         });
         try {
-          const me = await fetch(`${mock.apiUrl}/v1/me${org ? `?org=${encodeURIComponent(org)}` : ""}`, {
-            headers: { authorization: `Bearer ${mock.token}` }
-          });
+          const me = await fetch(
+            `${mock.apiUrl}/v1/me${org ? `?org=${encodeURIComponent(org)}` : ""}`,
+            {
+              headers: { authorization: `Bearer ${mock.token}` }
+            }
+          );
           const body = await me.json();
           if (json) {
             write(`${JSON.stringify({ target: "mock", ...body }, null, 2)}
@@ -1022,46 +1043,54 @@ ${url.href}
         allowEnvWithoutLogin: true,
         ...org ? { org } : {}
       })) {
-        const { whoamiWithApiToken } = await import("./open-api-client-DVVMLY7P.js");
-        const identity = await whoamiWithApiToken({
-          token: requireApiToken(tokenValues, process.env, "whoami", { apiUrl }),
+        const { whoamiWithApiToken: whoamiWithApiToken2 } = await import("./open-api-client-SR4B7265.js");
+        const identity2 = await whoamiWithApiToken2({
+          token: requireApiToken(tokenValues, process.env, "whoami", {
+            apiUrl
+          }),
           apiUrl,
           ...org ? { org } : {}
         });
         if (json) {
-          write(`${JSON.stringify(identity, null, 2)}
+          write(`${JSON.stringify(identity2, null, 2)}
 `);
           return 0;
         }
-        const scopeLine = identity.token.scopes.join(", ") || "(none)";
-        const userLine = identity.user ? `${identity.user.displayName} <${identity.user.email}>` : "(account:read not on this token)";
+        const scopeLine = identity2.token.scopes.join(", ") || "(none)";
+        const userLine2 = identity2.user ? `${identity2.user.displayName} <${identity2.user.email}>` : "(account:read not on this token)";
         write(
           [
-            `api: ${identity.apiUrl}`,
-            `auth: API token (${identity.token.id})`,
-            `user: ${userLine}`,
+            `api: ${identity2.apiUrl}`,
+            `auth: API token (${identity2.token.id})`,
+            `user: ${userLine2}`,
             `scopes: ${scopeLine}`,
-            `expires: ${identity.token.expiresAt ?? "unknown"}`,
+            `expires: ${identity2.token.expiresAt ?? "unknown"}`,
             ""
           ].join("\n")
         );
         return 0;
       }
-      const [{ ensureFreshCredentials }, { listKodyTools }] = await Promise.all([
-        import("./auth-4FW6GCLG.js"),
-        import("./mcp-G2AWTIXR.js")
-      ]);
-      const credentials = await ensureFreshCredentials({ mcpUrl, org });
-      const tools = await listKodyTools({ mcpUrl, org });
+      const { ensureOpenApiCredentials } = await import("./auth-6ZE6QQXA.js");
+      const credentials = await ensureOpenApiCredentials({
+        mcpUrl,
+        org,
+        apiUrl
+      });
+      const { whoamiWithApiToken } = await import("./open-api-client-SR4B7265.js");
+      const identity = await whoamiWithApiToken({
+        token: credentials.accessToken,
+        apiUrl,
+        ...org ? { org } : {}
+      });
       if (json) {
         write(
           `${JSON.stringify(
             {
-              mcpUrl: credentials.mcpUrl,
+              apiUrl: identity.apiUrl,
               org: credentials.org ?? null,
-              protocol: modernMcpProtocolVersion,
-              scope: credentials.scope ?? null,
-              tools: tools.map((tool) => tool.name)
+              scope: identity.token.scopes,
+              token: identity.token,
+              user: identity.user
             },
             null,
             2
@@ -1072,15 +1101,17 @@ ${url.href}
       }
       const orgLine = credentials.org ? `
 org: ${credentials.org}` : "";
+      const userLine = identity.user ? `${identity.user.displayName} <${identity.user.email}>` : "(no profile)";
       write(
-        `Connected to ${credentials.mcpUrl} (${modernMcpProtocolVersion})${orgLine}
-Tools: ${tools.map((tool) => tool.name).join(", ") || "(none)"}
+        `Logged in at ${identity.apiUrl}${orgLine}
+user: ${userLine}
+scopes: ${identity.token.scopes.join(", ") || "(none)"}
 `
       );
       return 0;
     }
     case "search": {
-      const { resolveTarget } = await import("./target-3QHY7JT4.js");
+      const { resolveTarget } = await import("./target-33ATHDUF.js");
       const target = resolveTarget({
         command: "search",
         flag: typeof parsed.values.target === "string" ? parsed.values.target : void 0
@@ -1093,14 +1124,14 @@ Tools: ${tools.map((tool) => tool.name).join(", ") || "(none)"}
       let closeMock;
       try {
         if (target === "mock") {
-          const { ensureMockTarget } = await import("./mock-server-SV2IKC4I.js");
+          const { ensureMockTarget } = await import("./mock-server-6BWDQQBE.js");
           const mock = await ensureMockTarget({
             resetStorage: parsed.values["reset-storage"] === true
           });
           apiUrl = mock.apiUrl;
           closeMock = mock.started ? () => mock.server.close() : void 0;
-          const { searchWithApiToken } = await import("./open-api-client-DVVMLY7P.js");
-          const result2 = await searchWithApiToken({
+          const { searchWithApiToken: searchWithApiToken2 } = await import("./open-api-client-SR4B7265.js");
+          const result2 = await searchWithApiToken2({
             token: mock.token,
             apiUrl,
             query: query || void 0,
@@ -1118,9 +1149,11 @@ Tools: ${tools.map((tool) => tool.name).join(", ") || "(none)"}
           allowEnvWithoutLogin: true,
           ...org ? { org } : {}
         })) {
-          const { searchWithApiToken } = await import("./open-api-client-DVVMLY7P.js");
-          const result2 = await searchWithApiToken({
-            token: requireApiToken(tokenValues, process.env, "search", { apiUrl }),
+          const { searchWithApiToken: searchWithApiToken2 } = await import("./open-api-client-SR4B7265.js");
+          const result2 = await searchWithApiToken2({
+            token: requireApiToken(tokenValues, process.env, "search", {
+              apiUrl
+            }),
             apiUrl,
             ...org ? { org } : {},
             query: query || void 0,
@@ -1131,17 +1164,21 @@ Tools: ${tools.map((tool) => tool.name).join(", ") || "(none)"}
           write(formatToolResult(result2, json));
           return result2.isError ? 1 : 0;
         }
-        const args = {};
-        if (query) args.query = query;
-        if (typeof parsed.values.entity === "string") args.entity = parsed.values.entity;
-        if (typeof parsed.values.domain === "string") args.domain = parsed.values.domain;
-        if (typeof parsed.values.limit === "string") args.limit = Number(parsed.values.limit);
-        const { callKodyTool } = await import("./mcp-G2AWTIXR.js");
-        const result = await callKodyTool({
-          name: "search",
-          args,
+        const { ensureOpenApiCredentials } = await import("./auth-6ZE6QQXA.js");
+        const credentials = await ensureOpenApiCredentials({
           mcpUrl,
-          ...org ? { org } : {}
+          org,
+          apiUrl
+        });
+        const { searchWithApiToken } = await import("./open-api-client-SR4B7265.js");
+        const result = await searchWithApiToken({
+          token: credentials.accessToken,
+          apiUrl,
+          ...org ? { org } : {},
+          query: query || void 0,
+          entity: typeof parsed.values.entity === "string" ? parsed.values.entity : void 0,
+          domain: typeof parsed.values.domain === "string" ? parsed.values.domain : void 0,
+          limit: typeof parsed.values.limit === "string" ? Number(parsed.values.limit) : void 0
         });
         write(formatToolResult(result, json));
         return result.isError ? 1 : 0;
@@ -1150,7 +1187,7 @@ Tools: ${tools.map((tool) => tool.name).join(", ") || "(none)"}
       }
     }
     case "execute": {
-      const { resolveTarget } = await import("./target-3QHY7JT4.js");
+      const { resolveTarget } = await import("./target-33ATHDUF.js");
       const target = resolveTarget({
         command: "execute",
         flag: typeof parsed.values.target === "string" ? parsed.values.target : void 0
@@ -1172,7 +1209,12 @@ Tools: ${tools.map((tool) => tool.name).join(", ") || "(none)"}
           );
         }
       }
-      if (executeSourcesConflict({ invoke, hasCodeFlag, hasFileFlag, positionalModule })) {
+      if (executeSourcesConflict({
+        invoke,
+        hasCodeFlag,
+        hasFileFlag,
+        positionalModule
+      })) {
         throw new Error(
           "--invoke cannot be combined with --code, --file, or a module string."
         );
@@ -1198,7 +1240,7 @@ Tools: ${tools.map((tool) => tool.name).join(", ") || "(none)"}
         apiUrl: typeof parsed.values["api-url"] === "string" ? parsed.values["api-url"] : void 0
       });
       let apiUrl = prodApiUrl;
-      const { parsePassthroughHosts } = await import("./mock-fetch-gateway-B5TFGGQS.js");
+      const { parsePassthroughHosts } = await import("./mock-fetch-gateway-FWVNTLP2.js");
       const passthroughHosts = parsePassthroughHosts(
         typeof parsed.values.passthrough === "string" ? parsed.values.passthrough : void 0
       );
@@ -1213,7 +1255,7 @@ Tools: ${tools.map((tool) => tool.name).join(", ") || "(none)"}
       let localPackageRun = localPackageInvoke;
       if (!localPackageRun && local && modulePath !== void 0) {
         try {
-          const { loadPackageManifest } = await import("./package-manifest-QH2RU64C.js");
+          const { loadPackageManifest } = await import("./package-manifest-DFF6XCPV.js");
           const manifest = await loadPackageManifest(process.cwd());
           localPackageRun = {
             modulePath,
@@ -1226,7 +1268,7 @@ Tools: ${tools.map((tool) => tool.name).join(", ") || "(none)"}
       }
       try {
         if (target === "mock") {
-          const { ensureMockTarget } = await import("./mock-server-SV2IKC4I.js");
+          const { ensureMockTarget } = await import("./mock-server-6BWDQQBE.js");
           const mock = await ensureMockTarget({
             resetStorage: parsed.values["reset-storage"] === true,
             packageId: localPackageRun ? `local:${localPackageRun.kodyId}` : void 0,
@@ -1235,7 +1277,7 @@ Tools: ${tools.map((tool) => tool.name).join(", ") || "(none)"}
           apiUrl = mock.apiUrl;
           mockToken = mock.token;
           closeMock = mock.started ? () => mock.server.close() : void 0;
-          const { tryResolveMockDepResolve } = await import("./mock-dep-resolve-TVABDNR7.js");
+          const { tryResolveMockDepResolve } = await import("./mock-dep-resolve-B5ZH4U3H.js");
           mockDepResolve = await tryResolveMockDepResolve({
             tokenValues,
             apiUrl: prodApiUrl,
@@ -1244,7 +1286,7 @@ Tools: ${tools.map((tool) => tool.name).join(", ") || "(none)"}
           });
         }
         if (localPackageRun) {
-          const { buildLocalPackageContext, runLocalPackageModule } = await import("./local-package-run-2TMCAZZ2.js");
+          const { buildLocalPackageContext, runLocalPackageModule } = await import("./local-package-run-WZVZAHK3.js");
           const result2 = await runLocalPackageModule({
             modulePath: localPackageRun.modulePath,
             params: args.params,
@@ -1282,13 +1324,13 @@ Tools: ${tools.map((tool) => tool.name).join(", ") || "(none)"}
         let packageRootForMocks;
         if (target === "mock") {
           try {
-            const { loadPackageManifest } = await import("./package-manifest-QH2RU64C.js");
+            const { loadPackageManifest } = await import("./package-manifest-DFF6XCPV.js");
             packageRootForMocks = (await loadPackageManifest(process.cwd())).root;
           } catch {
             packageRootForMocks = void 0;
           }
         }
-        const result = local ? await (await import("./local-execute-SZV6XN4T.js")).runLocalExecute({
+        const result = local ? await (await import("./local-execute-YCXHVAVM.js")).runLocalExecute({
           code: args.code,
           ...modulePath !== void 0 ? { modulePath } : {},
           params: args.params,
@@ -1310,7 +1352,7 @@ Tools: ${tools.map((tool) => tool.name).join(", ") || "(none)"}
           allowPrivateNetwork: parsed.values["allow-private-network"] === true,
           onStatus: (message) => writeErr(`${message}
 `)
-        }) : useToken ? await (await import("./remote-execute-QMQDVHOY.js")).runRemoteExecuteWithToken({
+        }) : useToken ? await (await import("./remote-execute-JN6DRFEU.js")).runRemoteExecuteWithToken({
           code: typeof args.code === "string" ? args.code : void 0,
           invoke,
           params: args.params,
@@ -1324,12 +1366,24 @@ Tools: ${tools.map((tool) => tool.name).join(", ") || "(none)"}
           ),
           apiUrl,
           ...org ? { org } : {}
-        }) : await (await import("./mcp-G2AWTIXR.js")).callKodyTool({
-          name: "execute",
-          args,
-          mcpUrl,
-          ...org ? { org } : {}
-        });
+        }) : await (async () => {
+          const { ensureOpenApiCredentials } = await import("./auth-6ZE6QQXA.js");
+          const session = await ensureOpenApiCredentials({
+            mcpUrl,
+            org,
+            apiUrl
+          });
+          return (await import("./remote-execute-JN6DRFEU.js")).runRemoteExecuteWithToken({
+            code: typeof args.code === "string" ? args.code : void 0,
+            invoke,
+            params: args.params,
+            conversationId: args.conversationId,
+            ...credentials !== void 0 ? { credentials } : {},
+            token: session.accessToken,
+            apiUrl,
+            ...org ? { org } : {}
+          });
+        })();
         write(formatToolResult(result, json));
         return result.isError ? 1 : 0;
       } finally {
@@ -1337,7 +1391,7 @@ Tools: ${tools.map((tool) => tool.name).join(", ") || "(none)"}
       }
     }
     case "dev": {
-      const { resolveTarget } = await import("./target-3QHY7JT4.js");
+      const { resolveTarget } = await import("./target-33ATHDUF.js");
       const {
         parseDevPort,
         parseDevSubcommand,
@@ -1349,7 +1403,7 @@ Tools: ${tools.map((tool) => tool.name).join(", ") || "(none)"}
         runDevServe,
         runDevWebhook,
         tryAttachedDevFetch
-      } = await import("./dev-command-3LX234N6.js");
+      } = await import("./dev-command-TZ2EB4J3.js");
       const target = resolveTarget({
         command: "dev",
         flag: typeof parsed.values.target === "string" ? parsed.values.target : void 0
@@ -1388,9 +1442,7 @@ Tools: ${tools.map((tool) => tool.name).join(", ") || "(none)"}
           case "webhook": {
             const webhookName = rest[0];
             if (!webhookName || !bodyPath) {
-              throw new Error(
-                "Usage: kody dev webhook <name> --body file.json"
-              );
+              throw new Error("Usage: kody dev webhook <name> --body file.json");
             }
             return await runDevWebhook({
               target,
@@ -1405,9 +1457,7 @@ Tools: ${tools.map((tool) => tool.name).join(", ") || "(none)"}
           case "emit": {
             const event = rest[0];
             if (!event || !bodyPath) {
-              throw new Error(
-                "Usage: kody dev emit <event> --body event.json"
-              );
+              throw new Error("Usage: kody dev emit <event> --body event.json");
             }
             return await runDevEmit({
               target,
@@ -1444,13 +1494,13 @@ Tools: ${tools.map((tool) => tool.name).join(", ") || "(none)"}
         purpose: "kody dev",
         ...org ? { org } : {}
       }) : "mock";
-      const mockDepResolve = target === "mock" ? await (await import("./mock-dep-resolve-TVABDNR7.js")).tryResolveMockDepResolve({
+      const mockDepResolve = target === "mock" ? await (await import("./mock-dep-resolve-B5ZH4U3H.js")).tryResolveMockDepResolve({
         tokenValues,
         apiUrl: prodApiUrl,
         mcpUrl,
         ...org ? { org } : {}
       }) : void 0;
-      const { parsePassthroughHosts } = await import("./mock-fetch-gateway-B5TFGGQS.js");
+      const { parsePassthroughHosts } = await import("./mock-fetch-gateway-FWVNTLP2.js");
       const passthroughHosts = parsePassthroughHosts(
         typeof parsed.values.passthrough === "string" ? parsed.values.passthrough : void 0
       );
@@ -1462,7 +1512,7 @@ Tools: ${tools.map((tool) => tool.name).join(", ") || "(none)"}
       const allowPrivateNetwork = parsed.values["allow-private-network"] === true;
       let packageId;
       try {
-        const { loadPackageManifest } = await import("./package-manifest-QH2RU64C.js");
+        const { loadPackageManifest } = await import("./package-manifest-DFF6XCPV.js");
         const manifest = await loadPackageManifest(process.cwd());
         packageId = `local:${manifest.kodyId}`;
       } catch {
@@ -1532,9 +1582,7 @@ Tools: ${tools.map((tool) => tool.name).join(", ") || "(none)"}
           case "webhook": {
             const webhookName = rest[0];
             if (!webhookName || !bodyPath) {
-              throw new Error(
-                "Usage: kody dev webhook <name> --body file.json"
-              );
+              throw new Error("Usage: kody dev webhook <name> --body file.json");
             }
             return await runDevWebhook({
               target,
@@ -1549,9 +1597,7 @@ Tools: ${tools.map((tool) => tool.name).join(", ") || "(none)"}
           case "emit": {
             const event = rest[0];
             if (!event || !bodyPath) {
-              throw new Error(
-                "Usage: kody dev emit <event> --body event.json"
-              );
+              throw new Error("Usage: kody dev emit <event> --body event.json");
             }
             return await runDevEmit({
               target,
@@ -1589,11 +1635,16 @@ Tools: ${tools.map((tool) => tool.name).join(", ") || "(none)"}
       const params = parseApiParamsJson(
         typeof parsed.values.params === "string" ? parsed.values.params : void 0
       );
-      const { callOpenApiOperation } = await import("./open-api-client-DVVMLY7P.js");
+      const { callOpenApiOperation } = await import("./open-api-client-SR4B7265.js");
       const result = await callOpenApiOperation({
         operationId,
         params,
-        token: requireApiToken(tokenValues, process.env, "api", { apiUrl }),
+        token: await accessTokenForOpenApi({
+          tokenValues,
+          apiUrl,
+          mcpUrl,
+          org
+        }),
         apiUrl,
         ...org ? { org } : {}
       });
@@ -1613,10 +1664,13 @@ Tools: ${tools.map((tool) => tool.name).join(", ") || "(none)"}
           positionals: parsed.positionals.slice(1),
           values: parsed.values
         });
-        const token = requireApiToken(tokenValues, process.env, `package ${action}`, {
-          apiUrl
+        const token = await accessTokenForOpenApi({
+          tokenValues,
+          apiUrl,
+          mcpUrl,
+          org
         });
-        const { callOpenApiOperation: callOpenApiOperation2 } = await import("./open-api-client-DVVMLY7P.js");
+        const { callOpenApiOperation: callOpenApiOperation2 } = await import("./open-api-client-SR4B7265.js");
         write(
           await runPackageCollaboratorPlan({
             plan,
@@ -1642,9 +1696,12 @@ ${packageCollaboratorUsage}`
         positional: parsed.positionals[1],
         paramsJson: typeof parsed.values.params === "string" ? parsed.values.params : void 0
       });
-      const { callOpenApiOperation } = await import("./open-api-client-DVVMLY7P.js");
-      const publishToken = requireApiToken(tokenValues, process.env, "package publish", {
-        apiUrl
+      const { callOpenApiOperation } = await import("./open-api-client-SR4B7265.js");
+      const publishToken = await accessTokenForOpenApi({
+        tokenValues,
+        apiUrl,
+        mcpUrl,
+        org
       });
       const call = (operationId, operationParams) => callOpenApiOperation({
         operationId,
@@ -1662,7 +1719,7 @@ ${packageCollaboratorUsage}`
       return 0;
     }
     case "install": {
-      const { runInstall } = await import("./install-ZML2TCDG.js");
+      const { runInstall } = await import("./install-ONEJRYZ3.js");
       const result = await runInstall(
         {
           mcpUrl,
@@ -1680,8 +1737,10 @@ ${packageCollaboratorUsage}`
       if (action !== "install") {
         throw new Error("Usage: kody skill install [--project]");
       }
-      const { installSkill } = await import("./skill-ENPATRIW.js");
-      const targets = await installSkill({ project: parsed.values.project === true });
+      const { installSkill } = await import("./skill-D74XVI6T.js");
+      const targets = await installSkill({
+        project: parsed.values.project === true
+      });
       write(
         `Installed the Kody skill to:
 ${targets.map((target) => `- ${target.host}: ${target.path}`).join("\n")}
@@ -1706,8 +1765,8 @@ async function tryResolveLocalPackageInvoke(invoke) {
   const trimmed = invoke.trim();
   if (!trimmed) return null;
   if (isPublishedPackageInvokeSpecifier(trimmed)) return null;
-  const { loadPackageManifest, resolveExportModulePath } = await import("./package-manifest-QH2RU64C.js");
-  const { StructuredCliError } = await import("./structured-error-C65GQ53Z.js");
+  const { loadPackageManifest, resolveExportModulePath } = await import("./package-manifest-DFF6XCPV.js");
+  const { StructuredCliError } = await import("./structured-error-5MLWXYR3.js");
   let manifest;
   try {
     manifest = await loadPackageManifest(process.cwd());
@@ -1742,7 +1801,9 @@ function buildExecuteToolArgs(input) {
   const invoke = input.invoke;
   const code = input.code;
   if (invoke !== void 0 && code !== void 0 && code.length > 0) {
-    throw new Error("--invoke cannot be combined with --code, --file, or a module string.");
+    throw new Error(
+      "--invoke cannot be combined with --code, --file, or a module string."
+    );
   }
   if (invoke !== void 0) {
     if (!invoke) {
@@ -1768,7 +1829,7 @@ function attachExecuteCommonArgs(args, input) {
   return args;
 }
 async function runAuthSetupGit(input) {
-  const { authSetupGit, setupGitDefaultScopes } = await import("./setup-git-5KCUBYPB.js");
+  const { authSetupGit, setupGitDefaultScopes } = await import("./setup-git-MHK563LB.js");
   const apiUrl = apiUrlFrom({
     apiUrl: typeof input.values["api-url"] === "string" ? input.values["api-url"] : void 0
   });
@@ -1825,7 +1886,7 @@ async function runAuthSetupGit(input) {
   return 0;
 }
 async function runAuthRemoveGit(input) {
-  const { authRemoveGit, formatAuthRemoveGitReport } = await import("./setup-git-5KCUBYPB.js");
+  const { authRemoveGit, formatAuthRemoveGitReport } = await import("./setup-git-MHK563LB.js");
   const apiUrl = apiUrlFrom({
     apiUrl: typeof input.values["api-url"] === "string" ? input.values["api-url"] : void 0
   });
@@ -1845,10 +1906,15 @@ function bootstrapMinter(input) {
       allowEnvWithoutLogin: true,
       ...input.org ? { org: input.org } : {}
     })) {
-      const token = requireApiToken(input.tokenValues, process.env, "auth bootstrap --scopes", {
-        apiUrl: input.apiUrl
-      });
-      const { callOpenApiOperation } = await import("./open-api-client-DVVMLY7P.js");
+      const token = requireApiToken(
+        input.tokenValues,
+        process.env,
+        "auth bootstrap --scopes",
+        {
+          apiUrl: input.apiUrl
+        }
+      );
+      const { callOpenApiOperation } = await import("./open-api-client-SR4B7265.js");
       try {
         return await callOpenApiOperation({
           token,
@@ -1869,10 +1935,18 @@ function bootstrapMinter(input) {
     if (loadCredentials(input.mcpUrl, void 0, void 0, {
       org: input.org
     })) {
-      return (await import("./mcp-G2AWTIXR.js")).callKodyApiOperation({
+      const { ensureOpenApiCredentials } = await import("./auth-6ZE6QQXA.js");
+      const session = await ensureOpenApiCredentials({
+        mcpUrl: input.mcpUrl,
+        apiUrl: input.apiUrl,
+        ...input.org ? { org: input.org } : {}
+      });
+      const { callOpenApiOperation } = await import("./open-api-client-SR4B7265.js");
+      return callOpenApiOperation({
         operationId: cliCredentialBootstrapOperationId,
         params,
-        mcpUrl: input.mcpUrl,
+        token: session.accessToken,
+        apiUrl: input.apiUrl,
         ...input.org ? { org: input.org } : {}
       });
     }
@@ -1886,6 +1960,21 @@ function tokenFlagValues(values) {
     token: typeof values.token === "string" ? values.token : void 0
   };
 }
+async function accessTokenForOpenApi(input) {
+  const explicit = resolveScopedApiToken({
+    tokenValues: input.tokenValues,
+    env: process.env,
+    apiUrl: input.apiUrl
+  });
+  if (explicit) return explicit;
+  const { ensureOpenApiCredentials } = await import("./auth-6ZE6QQXA.js");
+  const session = await ensureOpenApiCredentials({
+    mcpUrl: input.mcpUrl,
+    apiUrl: input.apiUrl,
+    ...input.org ? { org: input.org } : {}
+  });
+  return session.accessToken;
+}
 function parseApiParamsJson(paramsJson) {
   if (paramsJson === void 0) return {};
   let parsed;
@@ -1895,7 +1984,9 @@ function parseApiParamsJson(paramsJson) {
     throw new Error("--params must be valid JSON (a flat object).");
   }
   if (parsed === null || typeof parsed !== "object" || Array.isArray(parsed)) {
-    throw new Error(`--params must be a JSON object (e.g. '{"query":"email"}').`);
+    throw new Error(
+      `--params must be a JSON object (e.g. '{"query":"email"}').`
+    );
   }
   return parsed;
 }
@@ -1912,7 +2003,8 @@ function packagePublishParams(input) {
   return params;
 }
 async function resolvePackagePublishTarget(params, call) {
-  if (params.package_id !== void 0 || typeof params.kody_id !== "string") return params;
+  if (params.package_id !== void 0 || typeof params.kody_id !== "string")
+    return params;
   const ref = params.kody_id.trim();
   const listed = await call("packageList", {});
   const packages = listed.packages ?? [];
@@ -1956,4 +2048,4 @@ export {
   resolvePackagePublishTarget,
   shouldUseApiToken
 };
-//# sourceMappingURL=chunk-TIL35OWA.js.map
+//# sourceMappingURL=chunk-5YQBD7PN.js.map