@kodycodes/cli 3.1.5 → 3.2.0

package/README.md

@@ -70,13 +70,35 @@ org. Git auth stays user-wide (`kody auth setup-git` once covers every repo
 across orgs). Existing single-org keychain credentials migrate silently into the
 multi-org store as the active org (no re-login).
 
+## Remote or headless machines
+
+`kody login` opens a browser and waits for it on `http://127.0.0.1:43742`, so
+the browser has to run on the same machine as the CLI. On a remote VM, a NAS, or
+over SSH, use the device flow instead:
+
+```bash
+kody login --device              # prints a URL and a code; approve on any device
+kody login --device --org acme   # same, bound to the acme org
+```
+
+The CLI prints `https://kody.codes/device` and an 8-letter code such as
+`BCDF-GHJK`, plus a link that fills the code in for you. Open either one on your
+phone or laptop, sign in, check that the code matches, and choose **Approve**.
+The CLI polls in the background and stores the same device API token
+`kody login` stores. Codes expire after 10 minutes. Only approve a code you
+started yourself on a device you control.
+
+`kody login` suggests `--device` when it detects an SSH session or no display,
+when it cannot open a browser, or when the callback port is busy. The browser
+flow stays the default.
+
 ## Commands
 
 | Command                                           | Purpose                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                 |
 | ------------------------------------------------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
 | `kody install`                                    | Detect running local MCP clients and write their remote MCP config. The host client starts OAuth when the user connects. **Recommended long-term path.**                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                |
 | `kody skill install`                              | Installs the hosted `kody-cli` skill (or the bundled stub offline) into Claude Code / Cursor / Codex / `.agents`. Later CLI runs refresh stale copies by digest.                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        |
-| `kody login`                                      | Browser OAuth (CIMD + PKCE) for the CLI itself. Adds/replaces one org login (browser picker, or `kody login --org acme`) and keeps other org logins.                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    |
+| `kody login`                                      | Browser OAuth (CIMD + PKCE) for the CLI itself. Adds/replaces one org login (browser picker, or `kody login --org acme`) and keeps other org logins. `--device` signs in from another device instead ([Remote or headless machines](#remote-or-headless-machines)).                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                     |
 | `kody org list`                                   | Lists logged-in orgs and marks the active one. `--json` for agents.                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                     |
 | `kody org use [<slug>]`                           | Switches the active org. With a slug (agents) switches directly; with no slug on a TTY opens a chooser; without a TTY pass a slug.                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      |
 | `kody logout`                                     | Removes the active org login (or `--org <slug>` for one org) and clears a stored bootstrap/API token when appropriate.                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  |
@@ -111,7 +133,7 @@ you pass `--token` explicitly):
 
 ```bash
 # Preferred for agents on MCP (no tokenCreate, no second OAuth):
-# 1. MCP api / kody.cliCredentialBootstrap → { bootstrap_code, cli_command }
+# 1. MCP api tool, operationId cliCredentialBootstrap → { bootstrap_code, cli_command }
 npx @kodycodes/cli auth bootstrap --code 'kody_bc_…' --lifetime short
 npx @kodycodes/cli execute --local --file ./task.js
 

package/dist/{auth-NTZANX2B.js → auth-GVBMBBDV.js}

@@ -5,15 +5,16 @@ import {
   ensureOpenApiCredentials,
   isAccessTokenExpired,
   login,
+  loginWithDevice,
   refreshStoredCredentials,
   resolvePendingOrgSlug
-} from "./chunk-Z4OZYLCE.js";
+} from "./chunk-VEYAO5OE.js";
 import "./chunk-CASGRYOF.js";
 import "./chunk-GVSGNTG6.js";
 import "./chunk-CWWHR4FH.js";
-import "./chunk-AEJ6ZT67.js";
+import "./chunk-2GSKFEWW.js";
 import "./chunk-46IJPEID.js";
-import "./chunk-2YTCP3WU.js";
+import "./chunk-LISUPAAK.js";
 import "./chunk-BML3W5CO.js";
 import "./chunk-NHRYNRXG.js";
 import "./chunk-CMIH7XDH.js";
@@ -25,7 +26,8 @@ export {
   ensureOpenApiCredentials,
   isAccessTokenExpired,
   login,
+  loginWithDevice,
   refreshStoredCredentials,
   resolvePendingOrgSlug
 };
-//# sourceMappingURL=auth-NTZANX2B.js.map
+//# sourceMappingURL=auth-GVBMBBDV.js.map

package/dist/auth.d.ts

@@ -118,3 +118,27 @@ export declare function login(options?: LoginOptions): Promise<{
     org?: string;
     account?: LoginCallbackAccount;
 }>;
+export type DeviceLoginPrompt = {
+    userCode: string;
+    verificationUri: string;
+    verificationUriComplete?: string;
+    expiresIn: number;
+};
+export type DeviceLoginOptions = Omit<LoginOptions, 'openBrowser' | 'onAuthorizationUrl' | 'onBrowserOpenResult' | 'openUrlFn'> & {
+    /** Called once with the code and URLs the person must open elsewhere. */
+    onDeviceCode?: (prompt: DeviceLoginPrompt) => void;
+    /** Test seam for the poll wait. */
+    sleep?: (ms: number) => Promise<void>;
+};
+/**
+ * `kody login --device`: OAuth 2.0 Device Authorization Grant (RFC 8628,
+ * ADR 0082) for machines whose browser cannot reach the localhost callback.
+ * The result is stored exactly like the browser flow (device API token).
+ */
+export declare function loginWithDevice(options?: DeviceLoginOptions): Promise<{
+    credentials: StoredCredentials;
+    backendKind: 'keyring' | 'file';
+    backendPath?: string;
+    org?: string;
+    account?: LoginCallbackAccount;
+}>;

package/dist/bin.js

@@ -2,21 +2,21 @@
 import { createRequire as __createRequire } from 'node:module'; const require = __createRequire(import.meta.url);
 import {
   runCli
-} from "./chunk-V52NRCIT.js";
+} from "./chunk-FMBLQ7J2.js";
 import "./chunk-2XPH7L2P.js";
 import "./chunk-SLNAWWQK.js";
 import "./chunk-YDWTXEKQ.js";
 import "./chunk-7PRJ36I5.js";
-import "./chunk-PWFCXE4N.js";
-import "./chunk-3ANPXKS3.js";
+import "./chunk-H4BN6EPW.js";
+import "./chunk-OWIJPBAX.js";
 import "./chunk-6ZYUGXVW.js";
-import "./chunk-Z4OZYLCE.js";
+import "./chunk-VEYAO5OE.js";
 import "./chunk-CASGRYOF.js";
 import "./chunk-GVSGNTG6.js";
 import "./chunk-CWWHR4FH.js";
-import "./chunk-AEJ6ZT67.js";
+import "./chunk-2GSKFEWW.js";
 import "./chunk-46IJPEID.js";
-import "./chunk-2YTCP3WU.js";
+import "./chunk-LISUPAAK.js";
 import "./chunk-BML3W5CO.js";
 import "./chunk-NHRYNRXG.js";
 import "./chunk-CMIH7XDH.js";

package/dist/{chunk-AEJ6ZT67.js → chunk-2GSKFEWW.js}

@@ -7,7 +7,7 @@ import {
   readInsufficientScopeDetails,
   readPackageVersion,
   rejectedApiTokenMessage
-} from "./chunk-2YTCP3WU.js";
+} from "./chunk-LISUPAAK.js";
 import {
   userCacheDir
 } from "./chunk-BML3W5CO.js";
@@ -1687,4 +1687,4 @@ export {
   toolResultFromHttpBody,
   whoamiWithApiToken
 };
-//# sourceMappingURL=chunk-AEJ6ZT67.js.map
+//# sourceMappingURL=chunk-2GSKFEWW.js.map

package/dist/{chunk-V52NRCIT.js → chunk-FMBLQ7J2.js}

@@ -14,7 +14,7 @@ import {
 } from "./chunk-7PRJ36I5.js";
 import {
   resolveLocalExecuteBearer
-} from "./chunk-PWFCXE4N.js";
+} from "./chunk-H4BN6EPW.js";
 import {
   authBootstrap,
   authBootstrapWithScopes,
@@ -24,7 +24,7 @@ import {
   parseCliScopesFlag,
   refreshGitCredentialHelperPinIfNeeded,
   resolveCliTokenLifetime
-} from "./chunk-3ANPXKS3.js";
+} from "./chunk-OWIJPBAX.js";
 import {
   redactError
 } from "./chunk-CASGRYOF.js";
@@ -44,7 +44,7 @@ import {
   readPackageVersion,
   requireApiToken,
   resolveScopedApiToken
-} from "./chunk-2YTCP3WU.js";
+} from "./chunk-LISUPAAK.js";
 import {
   deleteCredentials,
   listStoredOrgs,
@@ -95,7 +95,7 @@ function buildUsage(input = {}) {
 Install Kody as a remote MCP server in local agents, or use this CLI as a local client.
 
 Usage:
-  kody login [--mcp-url <url>] [--org <slug>] [--no-browser]
+  kody login [--mcp-url <url>] [--org <slug>] [--no-browser | --device]
   kody logout [--org <slug>] [--mcp-url <url>] [--api-url <url>]
   kody org list [--json] [--mcp-url <url>]
   kody org use [<slug>] [--mcp-url <url>]
@@ -156,10 +156,10 @@ ${orgBlock}
   --clients  Comma-separated ids: ${hostIds.join(", ")}
 
   auth bootstrap
-             Agents on Kody MCP: call \`cliCredentialBootstrap\` (MCP
-             \`execute\` with \`kody.cliCredentialBootstrap({ lifetime:
-             "short", scopes: [...] })\`, or MCP \`api\` with operationId
-             \`cliCredentialBootstrap\`) and run the returned \`cli_command\`
+             Agents on Kody MCP: call the MCP \`api\` tool with operationId
+             \`cliCredentialBootstrap\` and params \`{ lifetime: "short",
+             scopes: [...] }\` (\`execute\` is refused) and run the returned
+             \`cli_command\`
              (never ask a human to paste a token). Humans: \`kody login\`.
              This command redeems a one-shot \`kody_bc_\u2026\` (POST
              /v1/tokens/bootstrap/redeem, no Authorization header).
@@ -711,7 +711,57 @@ function formatLoginUrlNotice(input) {
 Waiting for you to finish signing in\u2026
 `;
 }
-var loginBrowserOpenFailedNotice = "Kody could not open your browser automatically. Copy the link above into your browser to continue.\n";
+var loginBrowserOpenFailedNotice = "Kody could not open your browser automatically. Copy the link above into your browser to continue.\nIf that browser is on another machine, press Ctrl+C and run `kody login --device` instead.\n";
+function detectHeadlessLoginReason(env = process.env, platform = process.platform) {
+  if (env.SSH_CONNECTION || env.SSH_CLIENT || env.SSH_TTY) return "ssh";
+  if (platform !== "darwin" && platform !== "win32" && !env.DISPLAY && !env.WAYLAND_DISPLAY) {
+    return "no_display";
+  }
+  return null;
+}
+function formatDeviceLoginSuggestion(reason) {
+  const why = reason === "ssh" ? "This looks like an SSH session" : "No display was found on this machine";
+  return `${why}, so a browser here may not be able to finish the sign-in.
+If it can't, press Ctrl+C and run \`kody login --device\` to sign in from any other device.
+
+`;
+}
+function formatDeviceLoginNotice(input) {
+  const minutes = Math.max(1, Math.round(input.expiresIn / 60));
+  const direct = input.verificationUriComplete ? `
+Or open this link, which fills in the code for you:
+
+  ${input.verificationUriComplete}
+` : "";
+  return `To sign in, open this page on any device:
+
+  ${input.verificationUri}
+
+and enter the code:
+
+  ${input.userCode}
+${direct}
+Only approve it if the page shows this same code. The code expires in ${minutes} minutes.
+Waiting for approval\u2026
+`;
+}
+function formatLoginSuccess(result) {
+  const orgLabel = result.org ? ` as org ${result.org}` : result.credentials.org ? ` as org ${result.credentials.org}` : "";
+  const accountLabel = result.account?.email ? ` (${result.account.email})` : result.account?.displayName ? ` (${result.account.displayName})` : "";
+  const lines = [
+    `Logged in to ${result.credentials.mcpUrl}${orgLabel}${accountLabel}.
+`
+  ];
+  if (result.backendKind === "file" && result.backendPath) {
+    lines.push(
+      `OS keychain was unavailable; credentials saved at ${result.backendPath} (mode 0600).
+`
+    );
+  } else {
+    lines.push("Credentials stored in the OS keychain.\n");
+  }
+  return lines.join("");
+}
 
 // src/cli.ts
 var orgScopedCommands = /* @__PURE__ */ new Set([
@@ -755,6 +805,7 @@ var cliFlagOptions = {
   scopes: { type: "string" },
   project: { type: "boolean" },
   "no-browser": { type: "boolean" },
+  device: { type: "boolean" },
   org: { type: "string" },
   target: { type: "string" },
   "reset-storage": { type: "boolean" },
@@ -948,14 +999,31 @@ async function dispatch(parsed, write, writeErr) {
 `);
       return 0;
     case "login": {
-      const { login } = await import("./auth-NTZANX2B.js");
+      const { login, loginWithDevice } = await import("./auth-GVBMBBDV.js");
       const openBrowser = parsed.values["no-browser"] !== true;
+      const lifetimeOption = typeof parsed.values.lifetime === "string" ? {
+        lifetime: parsed.values.lifetime === "short" ? "short" : "long"
+      } : {};
+      const loginApiUrl = apiUrlFrom({
+        apiUrl: typeof parsed.values["api-url"] === "string" ? parsed.values["api-url"] : void 0
+      });
+      if (parsed.values.device === true) {
+        const result2 = await loginWithDevice({
+          mcpUrl,
+          apiUrl: loginApiUrl,
+          ...lifetimeOption,
+          ...orgFlagOnly ? { org: orgFlagOnly } : {},
+          onDeviceCode: (prompt) => write(formatDeviceLoginNotice(prompt))
+        });
+        write(formatLoginSuccess(result2));
+        return 0;
+      }
+      const headlessReason = openBrowser ? detectHeadlessLoginReason() : null;
+      if (headlessReason) write(formatDeviceLoginSuggestion(headlessReason));
       const result = await login({
         mcpUrl,
-        apiUrl: apiUrlFrom({
-          apiUrl: typeof parsed.values["api-url"] === "string" ? parsed.values["api-url"] : void 0
-        }),
-        ...typeof parsed.values.lifetime === "string" ? { lifetime: parsed.values.lifetime === "short" ? "short" : "long" } : {},
+        apiUrl: loginApiUrl,
+        ...lifetimeOption,
         ...orgFlagOnly ? { org: orgFlagOnly } : {},
         openBrowser,
         onAuthorizationUrl: (url) => {
@@ -965,20 +1033,7 @@ async function dispatch(parsed, write, writeErr) {
           if (!opened) write(loginBrowserOpenFailedNotice);
         }
       });
-      const orgLabel = result.org ? ` as org ${result.org}` : result.credentials.org ? ` as org ${result.credentials.org}` : "";
-      const accountLabel = result.account?.email ? ` (${result.account.email})` : result.account?.displayName ? ` (${result.account.displayName})` : "";
-      write(
-        `Logged in to ${result.credentials.mcpUrl}${orgLabel}${accountLabel}.
-`
-      );
-      if (result.backendKind === "file" && result.backendPath) {
-        write(
-          `OS keychain was unavailable; credentials saved at ${result.backendPath} (mode 0600).
-`
-        );
-      } else {
-        write("Credentials stored in the OS keychain.\n");
-      }
+      write(formatLoginSuccess(result));
       return 0;
     }
     case "logout": {
@@ -1112,7 +1167,7 @@ async function dispatch(parsed, write, writeErr) {
       );
       if (!code && !scopes) {
         throw new Error(
-          "Provide --code <kody_bc_\u2026> from cliCredentialBootstrap (MCP api / kody.cliCredentialBootstrap), or --scopes <list> to mint one with the current kody login session or API token."
+          "Provide --code <kody_bc_\u2026> from cliCredentialBootstrap (MCP api tool), or --scopes <list> to mint one with the current kody login session or API token."
         );
       }
       const lifetime = resolveCliTokenLifetime({
@@ -1174,7 +1229,7 @@ async function dispatch(parsed, write, writeErr) {
         parseGitCredentialAction,
         parseGitCredentialInput,
         readGitCredentialStdin
-      } = await import("./git-credential-AGGSKTO3.js");
+      } = await import("./git-credential-XTJ5JZ6V.js");
       const action = parseGitCredentialAction(parsed.positionals);
       const raw = await readGitCredentialStdin(process.stdin);
       const output = await handleGitCredential({
@@ -1241,7 +1296,7 @@ async function dispatch(parsed, write, writeErr) {
         allowEnvWithoutLogin: true,
         ...org ? { org } : {}
       })) {
-        const { whoamiWithApiToken: whoamiWithApiToken2 } = await import("./open-api-client-TIXO6ZXH.js");
+        const { whoamiWithApiToken: whoamiWithApiToken2 } = await import("./open-api-client-K2BEQBO3.js");
         const identity2 = await whoamiWithApiToken2({
           token: requireApiToken(tokenValues, process.env, "whoami", {
             apiUrl
@@ -1268,13 +1323,13 @@ async function dispatch(parsed, write, writeErr) {
         );
         return 0;
       }
-      const { ensureOpenApiCredentials } = await import("./auth-NTZANX2B.js");
+      const { ensureOpenApiCredentials } = await import("./auth-GVBMBBDV.js");
       const credentials = await ensureOpenApiCredentials({
         mcpUrl,
         org,
         apiUrl
       });
-      const { whoamiWithApiToken } = await import("./open-api-client-TIXO6ZXH.js");
+      const { whoamiWithApiToken } = await import("./open-api-client-K2BEQBO3.js");
       const identity = await whoamiWithApiToken({
         token: credentials.accessToken,
         apiUrl,
@@ -1328,7 +1383,7 @@ scopes: ${identity.token.scopes.join(", ") || "(none)"}
           });
           apiUrl = mock.apiUrl;
           closeMock = mock.started ? () => mock.server.close() : void 0;
-          const { searchWithApiToken: searchWithApiToken2 } = await import("./open-api-client-TIXO6ZXH.js");
+          const { searchWithApiToken: searchWithApiToken2 } = await import("./open-api-client-K2BEQBO3.js");
           const result2 = await searchWithApiToken2({
             token: mock.token,
             apiUrl,
@@ -1347,7 +1402,7 @@ scopes: ${identity.token.scopes.join(", ") || "(none)"}
           allowEnvWithoutLogin: true,
           ...org ? { org } : {}
         })) {
-          const { searchWithApiToken: searchWithApiToken2 } = await import("./open-api-client-TIXO6ZXH.js");
+          const { searchWithApiToken: searchWithApiToken2 } = await import("./open-api-client-K2BEQBO3.js");
           const result2 = await searchWithApiToken2({
             token: requireApiToken(tokenValues, process.env, "search", {
               apiUrl
@@ -1362,13 +1417,13 @@ scopes: ${identity.token.scopes.join(", ") || "(none)"}
           write(formatToolResult(result2, json));
           return result2.isError ? 1 : 0;
         }
-        const { ensureOpenApiCredentials } = await import("./auth-NTZANX2B.js");
+        const { ensureOpenApiCredentials } = await import("./auth-GVBMBBDV.js");
         const credentials = await ensureOpenApiCredentials({
           mcpUrl,
           org,
           apiUrl
         });
-        const { searchWithApiToken } = await import("./open-api-client-TIXO6ZXH.js");
+        const { searchWithApiToken } = await import("./open-api-client-K2BEQBO3.js");
         const result = await searchWithApiToken({
           token: credentials.accessToken,
           apiUrl,
@@ -1475,7 +1530,7 @@ scopes: ${identity.token.scopes.join(", ") || "(none)"}
           apiUrl = mock.apiUrl;
           mockToken = mock.token;
           closeMock = mock.started ? () => mock.server.close() : void 0;
-          const { tryResolveMockDepResolve } = await import("./mock-dep-resolve-VWFSGZ5U.js");
+          const { tryResolveMockDepResolve } = await import("./mock-dep-resolve-RRR74F7X.js");
           mockDepResolve = await tryResolveMockDepResolve({
             tokenValues,
             apiUrl: prodApiUrl,
@@ -1484,7 +1539,7 @@ scopes: ${identity.token.scopes.join(", ") || "(none)"}
           });
         }
         if (localPackageRun) {
-          const { buildLocalPackageContext, runLocalPackageModule } = await import("./local-package-run-3NQ3N5JJ.js");
+          const { buildLocalPackageContext, runLocalPackageModule } = await import("./local-package-run-OPC7VXO3.js");
           const result2 = await runLocalPackageModule({
             modulePath: localPackageRun.modulePath,
             params: args.params,
@@ -1528,7 +1583,7 @@ scopes: ${identity.token.scopes.join(", ") || "(none)"}
             packageRootForMocks = void 0;
           }
         }
-        const result = local ? await (await import("./local-execute-VQBMQ3DE.js")).runLocalExecute({
+        const result = local ? await (await import("./local-execute-5J53ZM5Z.js")).runLocalExecute({
           code: args.code,
           ...modulePath !== void 0 ? { modulePath } : {},
           params: args.params,
@@ -1550,7 +1605,7 @@ scopes: ${identity.token.scopes.join(", ") || "(none)"}
           allowPrivateNetwork: parsed.values["allow-private-network"] === true,
           onStatus: (message) => writeErr(`${message}
 `)
-        }) : useToken ? await (await import("./remote-execute-WUSAX4OB.js")).runRemoteExecuteWithToken({
+        }) : useToken ? await (await import("./remote-execute-BRXK2NIJ.js")).runRemoteExecuteWithToken({
           code: typeof args.code === "string" ? args.code : void 0,
           invoke,
           params: args.params,
@@ -1565,13 +1620,13 @@ scopes: ${identity.token.scopes.join(", ") || "(none)"}
           apiUrl,
           ...org ? { org } : {}
         }) : await (async () => {
-          const { ensureOpenApiCredentials } = await import("./auth-NTZANX2B.js");
+          const { ensureOpenApiCredentials } = await import("./auth-GVBMBBDV.js");
           const session = await ensureOpenApiCredentials({
             mcpUrl,
             org,
             apiUrl
           });
-          return (await import("./remote-execute-WUSAX4OB.js")).runRemoteExecuteWithToken({
+          return (await import("./remote-execute-BRXK2NIJ.js")).runRemoteExecuteWithToken({
             code: typeof args.code === "string" ? args.code : void 0,
             invoke,
             params: args.params,
@@ -1586,7 +1641,7 @@ scopes: ${identity.token.scopes.join(", ") || "(none)"}
         return result.isError ? 1 : 0;
       } catch (error) {
         if (json && local) {
-          const { LocalPackageGraphError, packageGraphErrorToolResult } = await import("./local-package-graph-YHDXLH3V.js");
+          const { LocalPackageGraphError, packageGraphErrorToolResult } = await import("./local-package-graph-7TEPDAGV.js");
           if (error instanceof LocalPackageGraphError) {
             const redacted = redactError(error).message;
             const result = packageGraphErrorToolResult(error);
@@ -1616,7 +1671,7 @@ scopes: ${identity.token.scopes.join(", ") || "(none)"}
         runDevServe,
         runDevWebhook,
         tryAttachedDevFetch
-      } = await import("./dev-command-XY5SDMPO.js");
+      } = await import("./dev-command-NUN5HHRC.js");
       const target = resolveTarget({
         command: "dev",
         flag: typeof parsed.values.target === "string" ? parsed.values.target : void 0
@@ -1642,8 +1697,8 @@ scopes: ${identity.token.scopes.join(", ") || "(none)"}
                 { callOpenApiOperation, formatOpenApiHttpDebugLine },
                 { parsePackageCheckResult, PublishChecksAuthError }
               ] = await Promise.all([
-                import("./open-api-client-TIXO6ZXH.js"),
-                import("./dev-command-XY5SDMPO.js")
+                import("./open-api-client-K2BEQBO3.js"),
+                import("./dev-command-NUN5HHRC.js")
               ]);
               let token2;
               try {
@@ -1754,7 +1809,7 @@ scopes: ${identity.token.scopes.join(", ") || "(none)"}
         purpose: "kody dev",
         ...org ? { org } : {}
       }) : "mock";
-      const mockDepResolve = target === "mock" ? await (await import("./mock-dep-resolve-VWFSGZ5U.js")).tryResolveMockDepResolve({
+      const mockDepResolve = target === "mock" ? await (await import("./mock-dep-resolve-RRR74F7X.js")).tryResolveMockDepResolve({
         tokenValues,
         apiUrl: prodApiUrl,
         mcpUrl,
@@ -1895,7 +1950,7 @@ scopes: ${identity.token.scopes.join(", ") || "(none)"}
       const params = parseApiParamsJson(
         typeof parsed.values.params === "string" ? parsed.values.params : void 0
       );
-      const { callOpenApiOperation } = await import("./open-api-client-TIXO6ZXH.js");
+      const { callOpenApiOperation } = await import("./open-api-client-K2BEQBO3.js");
       const result = await callOpenApiOperation({
         operationId,
         params,
@@ -1930,7 +1985,7 @@ scopes: ${identity.token.scopes.join(", ") || "(none)"}
           mcpUrl,
           org
         });
-        const { callOpenApiOperation: callOpenApiOperation2 } = await import("./open-api-client-TIXO6ZXH.js");
+        const { callOpenApiOperation: callOpenApiOperation2 } = await import("./open-api-client-K2BEQBO3.js");
         write(
           await runPackageCollaboratorPlan({
             plan,
@@ -1956,7 +2011,7 @@ ${packageCollaboratorUsage}`
         positional: parsed.positionals[1],
         paramsJson: typeof parsed.values.params === "string" ? parsed.values.params : void 0
       });
-      const { callOpenApiOperation } = await import("./open-api-client-TIXO6ZXH.js");
+      const { callOpenApiOperation } = await import("./open-api-client-K2BEQBO3.js");
       const publishToken = await accessTokenForOpenApi({
         tokenValues,
         apiUrl,
@@ -2094,7 +2149,7 @@ function attachExecuteCommonArgs(args, input) {
   return args;
 }
 async function runAuthSetupGit(input) {
-  const { authSetupGit, setupGitDefaultScopes } = await import("./setup-git-S5WSARSD.js");
+  const { authSetupGit, setupGitDefaultScopes } = await import("./setup-git-DCMWZYIG.js");
   const apiUrl = apiUrlFrom({
     apiUrl: typeof input.values["api-url"] === "string" ? input.values["api-url"] : void 0
   });
@@ -2151,7 +2206,7 @@ async function runAuthSetupGit(input) {
   return 0;
 }
 async function runAuthRemoveGit(input) {
-  const { authRemoveGit, formatAuthRemoveGitReport } = await import("./setup-git-S5WSARSD.js");
+  const { authRemoveGit, formatAuthRemoveGitReport } = await import("./setup-git-DCMWZYIG.js");
   const apiUrl = apiUrlFrom({
     apiUrl: typeof input.values["api-url"] === "string" ? input.values["api-url"] : void 0
   });
@@ -2179,7 +2234,7 @@ function bootstrapMinter(input) {
           apiUrl: input.apiUrl
         }
       );
-      const { callOpenApiOperation } = await import("./open-api-client-TIXO6ZXH.js");
+      const { callOpenApiOperation } = await import("./open-api-client-K2BEQBO3.js");
       try {
         return await callOpenApiOperation({
           token,
@@ -2200,13 +2255,13 @@ function bootstrapMinter(input) {
     if (loadCredentials(input.mcpUrl, void 0, void 0, {
       org: input.org
     })) {
-      const { ensureOpenApiCredentials } = await import("./auth-NTZANX2B.js");
+      const { ensureOpenApiCredentials } = await import("./auth-GVBMBBDV.js");
       const session = await ensureOpenApiCredentials({
         mcpUrl: input.mcpUrl,
         apiUrl: input.apiUrl,
         ...input.org ? { org: input.org } : {}
       });
-      const { callOpenApiOperation } = await import("./open-api-client-TIXO6ZXH.js");
+      const { callOpenApiOperation } = await import("./open-api-client-K2BEQBO3.js");
       return callOpenApiOperation({
         operationId: cliCredentialBootstrapOperationId,
         params,
@@ -2232,7 +2287,7 @@ async function accessTokenForOpenApi(input) {
     apiUrl: input.apiUrl
   });
   if (explicit) return explicit;
-  const { ensureOpenApiCredentials } = await import("./auth-NTZANX2B.js");
+  const { ensureOpenApiCredentials } = await import("./auth-GVBMBBDV.js");
   const session = await ensureOpenApiCredentials({
     mcpUrl: input.mcpUrl,
     apiUrl: input.apiUrl,
@@ -2317,4 +2372,4 @@ export {
   resolvePackagePublishTarget,
   shouldUseApiToken
 };
-//# sourceMappingURL=chunk-V52NRCIT.js.map
+//# sourceMappingURL=chunk-FMBLQ7J2.js.map