@kodycodes/cli 1.3.0 → 1.5.0

package/dist/workerd-binary.js

@@ -0,0 +1,98 @@
+import { createHash } from 'node:crypto';
+import { createReadStream, createWriteStream, existsSync } from 'node:fs';
+import { chmod, mkdir, rename, rm } from 'node:fs/promises';
+import { homedir } from 'node:os';
+import { dirname, join } from 'node:path';
+import { Readable, Transform } from 'node:stream';
+import { pipeline } from 'node:stream/promises';
+import { createGunzip } from 'node:zlib';
+import { describeNetworkError } from './network-error.js';
+/** Matches the workerd the Kody platform runs; bump together with the digests. */
+export const workerdVersion = '1.20260815.1';
+/** sha256 of each gzipped release asset on github.com/cloudflare/workerd. */
+export const workerdAssetDigests = {
+    'linux-64': '05099ec6f50832fcbc327490e5a971d682c97231fb01943b61726db07677e559',
+    'linux-arm64': '0331597b53771170df2ab8344d9ae81d38bad4959e47152dd86592eedd9264c7',
+    'darwin-64': '752ec91c01dfc44d660de6e3a654879cfc1277caa7f3c5312871c608c4c2d6df',
+    'darwin-arm64': 'c189fc08f691739c37d8784945e943e33b66cbd4e14635a061fe516dc95f2b39',
+};
+export function workerdTargetFor(platform = process.platform, arch = process.arch) {
+    const os = platform === 'linux' ? 'linux' : platform === 'darwin' ? 'darwin' : null;
+    const cpu = arch === 'x64' ? '64' : arch === 'arm64' ? 'arm64' : null;
+    if (!os || !cpu) {
+        throw new Error(`execute --local supports Linux and macOS on x64 or arm64 (this machine is ${platform}-${arch}).`);
+    }
+    return `${os}-${cpu}`;
+}
+export function workerdAssetUrl(target, version = workerdVersion) {
+    return `https://github.com/cloudflare/workerd/releases/download/v${version}/workerd-${target}.gz`;
+}
+export function userCacheDir(env = process.env, platform = process.platform, home = homedir()) {
+    if (env.KODY_CACHE_DIR)
+        return env.KODY_CACHE_DIR;
+    if (platform === 'darwin')
+        return join(home, 'Library', 'Caches', 'kody');
+    return join(env.XDG_CACHE_HOME || join(home, '.cache'), 'kody');
+}
+export function cachedWorkerdPath(cacheDir, target) {
+    return join(cacheDir, 'workerd', `${workerdVersion}-${target}`, 'workerd');
+}
+/**
+ * Returns a runnable workerd path: `KODY_WORKERD_PATH` when set, otherwise the
+ * pinned release under the user cache dir (downloaded and verified on first use).
+ */
+export async function ensureWorkerdBinary(input = {}) {
+    const env = input.env ?? process.env;
+    if (env.KODY_WORKERD_PATH)
+        return env.KODY_WORKERD_PATH;
+    const target = input.target ?? workerdTargetFor();
+    const binaryPath = cachedWorkerdPath(input.cacheDir ?? userCacheDir(env), target);
+    if (existsSync(binaryPath))
+        return binaryPath;
+    const url = workerdAssetUrl(target);
+    input.onDownload?.(url);
+    await downloadVerifiedGzip({
+        url,
+        sha256: workerdAssetDigests[target],
+        destination: binaryPath,
+        fetchFn: input.fetchFn ?? fetch,
+    });
+    return binaryPath;
+}
+export async function downloadVerifiedGzip(input) {
+    let response;
+    try {
+        response = await input.fetchFn(input.url);
+    }
+    catch (error) {
+        throw new Error(`Could not download workerd from ${input.url} (${describeNetworkError(error)}).`);
+    }
+    if (!response.ok || !response.body) {
+        throw new Error(`Could not download workerd from ${input.url} (HTTP ${response.status}).`);
+    }
+    await mkdir(dirname(input.destination), { recursive: true });
+    const gzipPath = `${input.destination}.${process.pid}.gz`;
+    const partialPath = `${input.destination}.${process.pid}.partial`;
+    const hash = createHash('sha256');
+    const hashing = new Transform({
+        transform(chunk, _encoding, callback) {
+            hash.update(chunk);
+            callback(null, chunk);
+        },
+    });
+    try {
+        await pipeline(Readable.fromWeb(response.body), hashing, createWriteStream(gzipPath));
+        const digest = hash.digest('hex');
+        if (digest !== input.sha256) {
+            throw new Error(`workerd download from ${input.url} failed verification (sha256 ${digest}, expected ${input.sha256}).`);
+        }
+        await pipeline(createReadStream(gzipPath), createGunzip(), createWriteStream(partialPath));
+        await chmod(partialPath, 0o755);
+        await rename(partialPath, input.destination);
+    }
+    finally {
+        await rm(gzipPath, { force: true });
+        await rm(partialPath, { force: true });
+    }
+}
+//# sourceMappingURL=workerd-binary.js.map

package/dist/workerd-binary.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"workerd-binary.js","sourceRoot":"","sources":["../src/workerd-binary.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACxC,OAAO,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,UAAU,EAAE,MAAM,SAAS,CAAA;AACzE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,kBAAkB,CAAA;AAC3D,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAA;AACjC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AACzC,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,aAAa,CAAA;AACjD,OAAO,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAA;AAC/C,OAAO,EAAE,YAAY,EAAE,MAAM,WAAW,CAAA;AACxC,OAAO,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAA;AAEzD,kFAAkF;AAClF,MAAM,CAAC,MAAM,cAAc,GAAG,cAAc,CAAA;AAE5C,6EAA6E;AAC7E,MAAM,CAAC,MAAM,mBAAmB,GAAG;IAClC,UAAU,EAAE,kEAAkE;IAC9E,aAAa,EAAE,kEAAkE;IACjF,WAAW,EAAE,kEAAkE;IAC/E,cAAc,EAAE,kEAAkE;CACzE,CAAA;AAIV,MAAM,UAAU,gBAAgB,CAC/B,WAA4B,OAAO,CAAC,QAAQ,EAC5C,OAAe,OAAO,CAAC,IAAI;IAE3B,MAAM,EAAE,GAAG,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAA;IACnF,MAAM,GAAG,GAAG,IAAI,KAAK,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAA;IACrE,IAAI,CAAC,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC;QACjB,MAAM,IAAI,KAAK,CACd,6EAA6E,QAAQ,IAAI,IAAI,IAAI,CACjG,CAAA;IACF,CAAC;IACD,OAAO,GAAG,EAAE,IAAI,GAAG,EAAE,CAAA;AACtB,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,MAAqB,EAAE,UAAkB,cAAc;IACtF,OAAO,4DAA4D,OAAO,YAAY,MAAM,KAAK,CAAA;AAClG,CAAC;AAED,MAAM,UAAU,YAAY,CAC3B,MAAyB,OAAO,CAAC,GAAG,EACpC,WAA4B,OAAO,CAAC,QAAQ,EAC5C,OAAe,OAAO,EAAE;IAExB,IAAI,GAAG,CAAC,cAAc;QAAE,OAAO,GAAG,CAAC,cAAc,CAAA;IACjD,IAAI,QAAQ,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAA;IACzE,OAAO,IAAI,CAAC,GAAG,CAAC,cAAc,IAAI,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,EAAE,MAAM,CAAC,CAAA;AAChE,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,QAAgB,EAAE,MAAqB;IACxE,OAAO,IAAI,CAAC,QAAQ,EAAE,SAAS,EAAE,GAAG,cAAc,IAAI,MAAM,EAAE,EAAE,SAAS,CAAC,CAAA;AAC3E,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACxC,QAMI,EAAE;IAEN,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAA;IACpC,IAAI,GAAG,CAAC,iBAAiB;QAAE,OAAO,GAAG,CAAC,iBAAiB,CAAA;IACvD,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,IAAI,gBAAgB,EAAE,CAAA;IACjD,MAAM,UAAU,GAAG,iBAAiB,CAAC,KAAK,CAAC,QAAQ,IAAI,YAAY,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,CAAA;IACjF,IAAI,UAAU,CAAC,UAAU,CAAC;QAAE,OAAO,UAAU,CAAA;IAE7C,MAAM,GAAG,GAAG,eAAe,CAAC,MAAM,CAAC,CAAA;IACnC,KAAK,CAAC,UAAU,EAAE,CAAC,GAAG,CAAC,CAAA;IACvB,MAAM,oBAAoB,CAAC;QAC1B,GAAG;QACH,MAAM,EAAE,mBAAmB,CAAC,MAAM,CAAC;QACnC,WAAW,EAAE,UAAU;QACvB,OAAO,EAAE,KAAK,CAAC,OAAO,IAAI,KAAK;KAC/B,CAAC,CAAA;IACF,OAAO,UAAU,CAAA;AAClB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,KAK1C;IACA,IAAI,QAAkB,CAAA;IACtB,IAAI,CAAC;QACJ,QAAQ,GAAG,MAAM,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;IAC1C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,MAAM,IAAI,KAAK,CACd,mCAAmC,KAAK,CAAC,GAAG,KAAK,oBAAoB,CAAC,KAAK,CAAC,IAAI,CAChF,CAAA;IACF,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;QACpC,MAAM,IAAI,KAAK,CAAC,mCAAmC,KAAK,CAAC,GAAG,UAAU,QAAQ,CAAC,MAAM,IAAI,CAAC,CAAA;IAC3F,CAAC;IACD,MAAM,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;IAC5D,MAAM,QAAQ,GAAG,GAAG,KAAK,CAAC,WAAW,IAAI,OAAO,CAAC,GAAG,KAAK,CAAA;IACzD,MAAM,WAAW,GAAG,GAAG,KAAK,CAAC,WAAW,IAAI,OAAO,CAAC,GAAG,UAAU,CAAA;IACjE,MAAM,IAAI,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAA;IACjC,MAAM,OAAO,GAAG,IAAI,SAAS,CAAC;QAC7B,SAAS,CAAC,KAAa,EAAE,SAAS,EAAE,QAAQ;YAC3C,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;YAClB,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAC,CAAA;QACtB,CAAC;KACD,CAAC,CAAA;IACF,IAAI,CAAC;QACJ,MAAM,QAAQ,CACb,QAAQ,CAAC,OAAO,CAAC,QAAQ,CAAC,IAA8C,CAAC,EACzE,OAAO,EACP,iBAAiB,CAAC,QAAQ,CAAC,CAC3B,CAAA;QACD,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;QACjC,IAAI,MAAM,KAAK,KAAK,CAAC,MAAM,EAAE,CAAC;YAC7B,MAAM,IAAI,KAAK,CACd,yBAAyB,KAAK,CAAC,GAAG,gCAAgC,MAAM,cAAc,KAAK,CAAC,MAAM,IAAI,CACtG,CAAA;QACF,CAAC;QACD,MAAM,QAAQ,CAAC,gBAAgB,CAAC,QAAQ,CAAC,EAAE,YAAY,EAAE,EAAE,iBAAiB,CAAC,WAAW,CAAC,CAAC,CAAA;QAC1F,MAAM,KAAK,CAAC,WAAW,EAAE,KAAK,CAAC,CAAA;QAC/B,MAAM,MAAM,CAAC,WAAW,EAAE,KAAK,CAAC,WAAW,CAAC,CAAA;IAC7C,CAAC;YAAS,CAAC;QACV,MAAM,EAAE,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;QACnC,MAAM,EAAE,CAAC,WAAW,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;IACvC,CAAC;AACF,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@kodycodes/cli",
-	"version": "1.3.0",
+	"version": "1.5.0",
 	"description": "Official Kody MCP client CLI: login, secure token storage, search, and execute.",
 	"type": "module",
 	"bin": {

package/skills/kody/SKILL.md

@@ -69,3 +69,14 @@ Never ask the user to paste tokens into chat.
 
 Override the MCP URL with `--mcp-url` or `KODY_MCP_URL` for preview or local
 servers. Default: `https://kody.codes/mcp`.
+
+To run execute with a scoped API token and **no** `kody login`, set
+`KODY_API_TOKEN` (or `--token`). Cloud execute (no `--local`) goes through
+CapabilityProxy → `kody.execute`. Add `--local` to run the module on this
+machine instead. Mint the token with Kody's `api` tool — never read MCP OAuth
+tokens from the host.
+
+```bash
+KODY_API_TOKEN=… npx @kodycodes/cli execute --file ./task.js --params '{"q":"email"}'
+KODY_API_TOKEN=… npx @kodycodes/cli execute --local --file ./task.js --params '{"q":"email"}'
+```