@kodycodes/cli 3.1.6 → 3.3.0

package/README.md

@@ -70,13 +70,35 @@ org. Git auth stays user-wide (`kody auth setup-git` once covers every repo
 across orgs). Existing single-org keychain credentials migrate silently into the
 multi-org store as the active org (no re-login).
 
+## Remote or headless machines
+
+`kody login` opens a browser and waits for it on `http://127.0.0.1:43742`, so
+the browser has to run on the same machine as the CLI. On a remote VM, a NAS, or
+over SSH, use the device flow instead:
+
+```bash
+kody login --device              # prints a URL and a code; approve on any device
+kody login --device --org acme   # same, bound to the acme org
+```
+
+The CLI prints `https://kody.codes/device` and an 8-letter code such as
+`BCDF-GHJK`, plus a link that fills the code in for you. Open either one on your
+phone or laptop, sign in, check that the code matches, and choose **Approve**.
+The CLI polls in the background and stores the same device API token
+`kody login` stores. Codes expire after 10 minutes. Only approve a code you
+started yourself on a device you control.
+
+`kody login` suggests `--device` when it detects an SSH session or no display,
+when it cannot open a browser, or when the callback port is busy. The browser
+flow stays the default.
+
 ## Commands
 
 | Command                                           | Purpose                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                 |
 | ------------------------------------------------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
 | `kody install`                                    | Detect running local MCP clients and write their remote MCP config. The host client starts OAuth when the user connects. **Recommended long-term path.**                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                |
 | `kody skill install`                              | Installs the hosted `kody-cli` skill (or the bundled stub offline) into Claude Code / Cursor / Codex / `.agents`. Later CLI runs refresh stale copies by digest.                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        |
-| `kody login`                                      | Browser OAuth (CIMD + PKCE) for the CLI itself. Adds/replaces one org login (browser picker, or `kody login --org acme`) and keeps other org logins.                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    |
+| `kody login`                                      | Browser OAuth (CIMD + PKCE) for the CLI itself. Adds/replaces one org login (browser picker, or `kody login --org acme`) and keeps other org logins. `--device` signs in from another device instead ([Remote or headless machines](#remote-or-headless-machines)).                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                     |
 | `kody org list`                                   | Lists logged-in orgs and marks the active one. `--json` for agents.                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                     |
 | `kody org use [<slug>]`                           | Switches the active org. With a slug (agents) switches directly; with no slug on a TTY opens a chooser; without a TTY pass a slug.                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      |
 | `kody logout`                                     | Removes the active org login (or `--org <slug>` for one org) and clears a stored bootstrap/API token when appropriate.                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  |

package/dist/{auth-YUFNOOTY.js → auth-KD6IT7RH.js}

@@ -5,16 +5,18 @@ import {
   ensureOpenApiCredentials,
   isAccessTokenExpired,
   login,
+  loginWithDevice,
   refreshStoredCredentials,
   resolvePendingOrgSlug
-} from "./chunk-2XSV546S.js";
-import "./chunk-CASGRYOF.js";
+} from "./chunk-FB6I4T2J.js";
 import "./chunk-GVSGNTG6.js";
 import "./chunk-CWWHR4FH.js";
-import "./chunk-2GSKFEWW.js";
+import "./chunk-CASGRYOF.js";
+import "./chunk-AWDVFTR2.js";
 import "./chunk-46IJPEID.js";
-import "./chunk-LISUPAAK.js";
 import "./chunk-BML3W5CO.js";
+import "./chunk-TZKZOMEA.js";
+import "./chunk-S3KLKZ4C.js";
 import "./chunk-NHRYNRXG.js";
 import "./chunk-CMIH7XDH.js";
 import "./chunk-V7P2QDVU.js";
@@ -25,7 +27,8 @@ export {
   ensureOpenApiCredentials,
   isAccessTokenExpired,
   login,
+  loginWithDevice,
   refreshStoredCredentials,
   resolvePendingOrgSlug
 };
-//# sourceMappingURL=auth-YUFNOOTY.js.map
+//# sourceMappingURL=auth-KD6IT7RH.js.map

package/dist/auth.d.ts

@@ -118,3 +118,27 @@ export declare function login(options?: LoginOptions): Promise<{
     org?: string;
     account?: LoginCallbackAccount;
 }>;
+export type DeviceLoginPrompt = {
+    userCode: string;
+    verificationUri: string;
+    verificationUriComplete?: string;
+    expiresIn: number;
+};
+export type DeviceLoginOptions = Omit<LoginOptions, 'openBrowser' | 'onAuthorizationUrl' | 'onBrowserOpenResult' | 'openUrlFn'> & {
+    /** Called once with the code and URLs the person must open elsewhere. */
+    onDeviceCode?: (prompt: DeviceLoginPrompt) => void;
+    /** Test seam for the poll wait. */
+    sleep?: (ms: number) => Promise<void>;
+};
+/**
+ * `kody login --device`: OAuth 2.0 Device Authorization Grant (RFC 8628,
+ * ADR 0082) for machines whose browser cannot reach the localhost callback.
+ * The result is stored exactly like the browser flow (device API token).
+ */
+export declare function loginWithDevice(options?: DeviceLoginOptions): Promise<{
+    credentials: StoredCredentials;
+    backendKind: 'keyring' | 'file';
+    backendPath?: string;
+    org?: string;
+    account?: LoginCallbackAccount;
+}>;

package/dist/bin.js

@@ -2,22 +2,23 @@
 import { createRequire as __createRequire } from 'node:module'; const require = __createRequire(import.meta.url);
 import {
   runCli
-} from "./chunk-AFGRPGHE.js";
-import "./chunk-2XPH7L2P.js";
-import "./chunk-SLNAWWQK.js";
+} from "./chunk-2DCCAVPD.js";
 import "./chunk-YDWTXEKQ.js";
 import "./chunk-7PRJ36I5.js";
-import "./chunk-BQOJGN24.js";
-import "./chunk-OWIJPBAX.js";
+import "./chunk-F7MVIDV6.js";
+import "./chunk-SLNAWWQK.js";
+import "./chunk-2XPH7L2P.js";
+import "./chunk-Y6JYX35N.js";
 import "./chunk-6ZYUGXVW.js";
-import "./chunk-2XSV546S.js";
-import "./chunk-CASGRYOF.js";
+import "./chunk-FB6I4T2J.js";
 import "./chunk-GVSGNTG6.js";
 import "./chunk-CWWHR4FH.js";
-import "./chunk-2GSKFEWW.js";
+import "./chunk-CASGRYOF.js";
+import "./chunk-AWDVFTR2.js";
 import "./chunk-46IJPEID.js";
-import "./chunk-LISUPAAK.js";
 import "./chunk-BML3W5CO.js";
+import "./chunk-TZKZOMEA.js";
+import "./chunk-S3KLKZ4C.js";
 import "./chunk-NHRYNRXG.js";
 import "./chunk-CMIH7XDH.js";
 import "./chunk-V7P2QDVU.js";

package/dist/bin.js.map

@@ -1,6 +1,6 @@
 {
   "version": 3,
   "sources": ["../src/bin.ts"],
-  "mappings": ";;;;;;;;;;;;;;;;;;;;;;;;;;AAGA,IAAM,OAAO,MAAM,OAAO;AAC1B,QAAQ,WAAW;",
+  "mappings": ";;;;;;;;;;;;;;;;;;;;;;;;;;;AAGA,IAAM,OAAO,MAAM,OAAO;AAC1B,QAAQ,WAAW;",
   "names": []
 }

package/dist/{chunk-AFGRPGHE.js → chunk-2DCCAVPD.js}

@@ -1,11 +1,4 @@
 import { createRequire as __createRequire } from 'node:module'; const require = __createRequire(import.meta.url);
-import {
-  assertLocalExecuteNodeEngine
-} from "./chunk-2XPH7L2P.js";
-import {
-  isPublishedPackageInvokeSpecifier,
-  resolveExecuteInvokeCode
-} from "./chunk-SLNAWWQK.js";
 import {
   hostIds
 } from "./chunk-YDWTXEKQ.js";
@@ -14,7 +7,14 @@ import {
 } from "./chunk-7PRJ36I5.js";
 import {
   resolveLocalExecuteBearer
-} from "./chunk-BQOJGN24.js";
+} from "./chunk-F7MVIDV6.js";
+import {
+  isPublishedPackageInvokeSpecifier,
+  resolveExecuteInvokeCode
+} from "./chunk-SLNAWWQK.js";
+import {
+  assertLocalExecuteNodeEngine
+} from "./chunk-2XPH7L2P.js";
 import {
   authBootstrap,
   authBootstrapWithScopes,
@@ -24,27 +24,29 @@ import {
   parseCliScopesFlag,
   refreshGitCredentialHelperPinIfNeeded,
   resolveCliTokenLifetime
-} from "./chunk-OWIJPBAX.js";
-import {
-  redactError
-} from "./chunk-CASGRYOF.js";
+} from "./chunk-Y6JYX35N.js";
 import {
   orgEnvVar,
   orgSlugFromFlag
 } from "./chunk-CWWHR4FH.js";
+import {
+  redactError
+} from "./chunk-CASGRYOF.js";
 import {
   formatToolResult
 } from "./chunk-46IJPEID.js";
 import {
   cliBootstrapMintCall,
-  deleteStoredApiToken,
   hasExplicitTokenFlag,
-  loadStoredApiToken,
   parseCredentialFlags,
   readPackageVersion,
   requireApiToken,
   resolveScopedApiToken
-} from "./chunk-LISUPAAK.js";
+} from "./chunk-TZKZOMEA.js";
+import {
+  deleteStoredApiToken,
+  loadStoredApiToken
+} from "./chunk-S3KLKZ4C.js";
 import {
   deleteCredentials,
   listStoredOrgs,
@@ -95,7 +97,7 @@ function buildUsage(input = {}) {
 Install Kody as a remote MCP server in local agents, or use this CLI as a local client.
 
 Usage:
-  kody login [--mcp-url <url>] [--org <slug>] [--no-browser]
+  kody login [--mcp-url <url>] [--org <slug>] [--no-browser | --device]
   kody logout [--org <slug>] [--mcp-url <url>] [--api-url <url>]
   kody org list [--json] [--mcp-url <url>]
   kody org use [<slug>] [--mcp-url <url>]
@@ -113,6 +115,9 @@ Usage:
   kody package grant <package> (--team <slug> | --user <username>) [--preset use|contribute|manage] [--org <slug>] [--json]
   kody package revoke <package> (--team <slug> | --user <username> | --grant <grant_id>) [--org <slug>] [--json]
   kody execute [--org <slug>] [--invoke <ref> | --code <esm> | --file <path>] [--params <json>] [--conversation-id <id>] [--json]
+  kody context register --name <name> [--org <slug>] | kody context list [--json]
+  kody chain show | add <name> | remove <name> [--org <slug>] [--json]
+  kody daemon [--context <ec id>]
                [--credential <key=name>]\u2026 [--target prod|mock] [--token <token>] [--api-url <url>] [--local] [--allow-private-network]
   kody dev [serve] [--org <slug>] [--target prod|mock] [--reset-storage] [--port <n>] [--app-base-path <path>] [--allow-private-network] [--no-live-reload] [--json] [--ready-file <path>]
   kody dev fetch <path> [--method <verb>] [--body <file>] [--target prod|mock] [--json] [--no-attach]
@@ -711,10 +716,62 @@ function formatLoginUrlNotice(input) {
 Waiting for you to finish signing in\u2026
 `;
 }
-var loginBrowserOpenFailedNotice = "Kody could not open your browser automatically. Copy the link above into your browser to continue.\n";
+var loginBrowserOpenFailedNotice = "Kody could not open your browser automatically. Copy the link above into your browser to continue.\nIf that browser is on another machine, press Ctrl+C and run `kody login --device` instead.\n";
+function detectHeadlessLoginReason(env = process.env, platform = process.platform) {
+  if (env.SSH_CONNECTION || env.SSH_CLIENT || env.SSH_TTY) return "ssh";
+  if (platform !== "darwin" && platform !== "win32" && !env.DISPLAY && !env.WAYLAND_DISPLAY) {
+    return "no_display";
+  }
+  return null;
+}
+function formatDeviceLoginSuggestion(reason) {
+  const why = reason === "ssh" ? "This looks like an SSH session" : "No display was found on this machine";
+  return `${why}, so a browser here may not be able to finish the sign-in.
+If it can't, press Ctrl+C and run \`kody login --device\` to sign in from any other device.
+
+`;
+}
+function formatDeviceLoginNotice(input) {
+  const minutes = Math.max(1, Math.round(input.expiresIn / 60));
+  const direct = input.verificationUriComplete ? `
+Or open this link, which fills in the code for you:
+
+  ${input.verificationUriComplete}
+` : "";
+  return `To sign in, open this page on any device:
+
+  ${input.verificationUri}
+
+and enter the code:
+
+  ${input.userCode}
+${direct}
+Only approve it if the page shows this same code. The code expires in ${minutes} minutes.
+Waiting for approval\u2026
+`;
+}
+function formatLoginSuccess(result) {
+  const orgLabel = result.org ? ` as org ${result.org}` : result.credentials.org ? ` as org ${result.credentials.org}` : "";
+  const accountLabel = result.account?.email ? ` (${result.account.email})` : result.account?.displayName ? ` (${result.account.displayName})` : "";
+  const lines = [
+    `Logged in to ${result.credentials.mcpUrl}${orgLabel}${accountLabel}.
+`
+  ];
+  if (result.backendKind === "file" && result.backendPath) {
+    lines.push(
+      `OS keychain was unavailable; credentials saved at ${result.backendPath} (mode 0600).
+`
+    );
+  } else {
+    lines.push("Credentials stored in the OS keychain.\n");
+  }
+  return lines.join("");
+}
 
 // src/cli.ts
 var orgScopedCommands = /* @__PURE__ */ new Set([
+  "context",
+  "chain",
   "login",
   "logout",
   "whoami",
@@ -755,7 +812,10 @@ var cliFlagOptions = {
   scopes: { type: "string" },
   project: { type: "boolean" },
   "no-browser": { type: "boolean" },
+  device: { type: "boolean" },
   org: { type: "string" },
+  name: { type: "string" },
+  context: { type: "string" },
   target: { type: "string" },
   "reset-storage": { type: "boolean" },
   "dry-run": { type: "boolean" },
@@ -815,6 +875,9 @@ function resolveCommand(argv) {
     case "skill":
     case "help":
     case "version":
+    case "context":
+    case "chain":
+    case "daemon":
       return { command: raw, positionals: positionals.slice(1), values };
     default:
       throw new Error(
@@ -947,15 +1010,59 @@ async function dispatch(parsed, write, writeErr) {
       write(`${readPackageVersion()}
 `);
       return 0;
+    case "context":
+    case "chain":
+    case "daemon": {
+      const apiUrl = apiUrlFrom({
+        apiUrl: typeof parsed.values["api-url"] === "string" ? parsed.values["api-url"] : void 0
+      });
+      const { runExecutionContextCommand } = await import("./commands-RPUZAOAB.js");
+      return await runExecutionContextCommand({
+        command: parsed.command,
+        positionals: parsed.positionals,
+        values: {
+          ...typeof parsed.values.name === "string" ? { name: parsed.values.name } : {},
+          ...typeof parsed.values.context === "string" ? { context: parsed.values.context } : {},
+          json
+        },
+        apiUrl,
+        ...org ? { org } : {},
+        token: () => accessTokenForOpenApi({
+          tokenValues: tokenFlagValues(parsed.values),
+          apiUrl,
+          mcpUrl,
+          ...org ? { org } : {}
+        }),
+        clientVersion: readPackageVersion(),
+        write
+      });
+    }
     case "login": {
-      const { login } = await import("./auth-YUFNOOTY.js");
+      const { login, loginWithDevice } = await import("./auth-KD6IT7RH.js");
       const openBrowser = parsed.values["no-browser"] !== true;
+      const lifetimeOption = typeof parsed.values.lifetime === "string" ? {
+        lifetime: parsed.values.lifetime === "short" ? "short" : "long"
+      } : {};
+      const loginApiUrl = apiUrlFrom({
+        apiUrl: typeof parsed.values["api-url"] === "string" ? parsed.values["api-url"] : void 0
+      });
+      if (parsed.values.device === true) {
+        const result2 = await loginWithDevice({
+          mcpUrl,
+          apiUrl: loginApiUrl,
+          ...lifetimeOption,
+          ...orgFlagOnly ? { org: orgFlagOnly } : {},
+          onDeviceCode: (prompt) => write(formatDeviceLoginNotice(prompt))
+        });
+        write(formatLoginSuccess(result2));
+        return 0;
+      }
+      const headlessReason = openBrowser ? detectHeadlessLoginReason() : null;
+      if (headlessReason) write(formatDeviceLoginSuggestion(headlessReason));
       const result = await login({
         mcpUrl,
-        apiUrl: apiUrlFrom({
-          apiUrl: typeof parsed.values["api-url"] === "string" ? parsed.values["api-url"] : void 0
-        }),
-        ...typeof parsed.values.lifetime === "string" ? { lifetime: parsed.values.lifetime === "short" ? "short" : "long" } : {},
+        apiUrl: loginApiUrl,
+        ...lifetimeOption,
         ...orgFlagOnly ? { org: orgFlagOnly } : {},
         openBrowser,
         onAuthorizationUrl: (url) => {
@@ -965,20 +1072,7 @@ async function dispatch(parsed, write, writeErr) {
           if (!opened) write(loginBrowserOpenFailedNotice);
         }
       });
-      const orgLabel = result.org ? ` as org ${result.org}` : result.credentials.org ? ` as org ${result.credentials.org}` : "";
-      const accountLabel = result.account?.email ? ` (${result.account.email})` : result.account?.displayName ? ` (${result.account.displayName})` : "";
-      write(
-        `Logged in to ${result.credentials.mcpUrl}${orgLabel}${accountLabel}.
-`
-      );
-      if (result.backendKind === "file" && result.backendPath) {
-        write(
-          `OS keychain was unavailable; credentials saved at ${result.backendPath} (mode 0600).
-`
-        );
-      } else {
-        write("Credentials stored in the OS keychain.\n");
-      }
+      write(formatLoginSuccess(result));
       return 0;
     }
     case "logout": {
@@ -1174,7 +1268,7 @@ async function dispatch(parsed, write, writeErr) {
         parseGitCredentialAction,
         parseGitCredentialInput,
         readGitCredentialStdin
-      } = await import("./git-credential-SL4Y6YKO.js");
+      } = await import("./git-credential-WTF6ZIL4.js");
       const action = parseGitCredentialAction(parsed.positionals);
       const raw = await readGitCredentialStdin(process.stdin);
       const output = await handleGitCredential({
@@ -1241,7 +1335,7 @@ async function dispatch(parsed, write, writeErr) {
         allowEnvWithoutLogin: true,
         ...org ? { org } : {}
       })) {
-        const { whoamiWithApiToken: whoamiWithApiToken2 } = await import("./open-api-client-K2BEQBO3.js");
+        const { whoamiWithApiToken: whoamiWithApiToken2 } = await import("./open-api-client-L472YVI6.js");
         const identity2 = await whoamiWithApiToken2({
           token: requireApiToken(tokenValues, process.env, "whoami", {
             apiUrl
@@ -1268,13 +1362,13 @@ async function dispatch(parsed, write, writeErr) {
         );
         return 0;
       }
-      const { ensureOpenApiCredentials } = await import("./auth-YUFNOOTY.js");
+      const { ensureOpenApiCredentials } = await import("./auth-KD6IT7RH.js");
       const credentials = await ensureOpenApiCredentials({
         mcpUrl,
         org,
         apiUrl
       });
-      const { whoamiWithApiToken } = await import("./open-api-client-K2BEQBO3.js");
+      const { whoamiWithApiToken } = await import("./open-api-client-L472YVI6.js");
       const identity = await whoamiWithApiToken({
         token: credentials.accessToken,
         apiUrl,
@@ -1328,7 +1422,7 @@ scopes: ${identity.token.scopes.join(", ") || "(none)"}
           });
           apiUrl = mock.apiUrl;
           closeMock = mock.started ? () => mock.server.close() : void 0;
-          const { searchWithApiToken: searchWithApiToken2 } = await import("./open-api-client-K2BEQBO3.js");
+          const { searchWithApiToken: searchWithApiToken2 } = await import("./open-api-client-L472YVI6.js");
           const result2 = await searchWithApiToken2({
             token: mock.token,
             apiUrl,
@@ -1347,7 +1441,7 @@ scopes: ${identity.token.scopes.join(", ") || "(none)"}
           allowEnvWithoutLogin: true,
           ...org ? { org } : {}
         })) {
-          const { searchWithApiToken: searchWithApiToken2 } = await import("./open-api-client-K2BEQBO3.js");
+          const { searchWithApiToken: searchWithApiToken2 } = await import("./open-api-client-L472YVI6.js");
           const result2 = await searchWithApiToken2({
             token: requireApiToken(tokenValues, process.env, "search", {
               apiUrl
@@ -1362,13 +1456,13 @@ scopes: ${identity.token.scopes.join(", ") || "(none)"}
           write(formatToolResult(result2, json));
           return result2.isError ? 1 : 0;
         }
-        const { ensureOpenApiCredentials } = await import("./auth-YUFNOOTY.js");
+        const { ensureOpenApiCredentials } = await import("./auth-KD6IT7RH.js");
         const credentials = await ensureOpenApiCredentials({
           mcpUrl,
           org,
           apiUrl
         });
-        const { searchWithApiToken } = await import("./open-api-client-K2BEQBO3.js");
+        const { searchWithApiToken } = await import("./open-api-client-L472YVI6.js");
         const result = await searchWithApiToken({
           token: credentials.accessToken,
           apiUrl,
@@ -1475,7 +1569,7 @@ scopes: ${identity.token.scopes.join(", ") || "(none)"}
           apiUrl = mock.apiUrl;
           mockToken = mock.token;
           closeMock = mock.started ? () => mock.server.close() : void 0;
-          const { tryResolveMockDepResolve } = await import("./mock-dep-resolve-QRMNGDHM.js");
+          const { tryResolveMockDepResolve } = await import("./mock-dep-resolve-BSFBRPO6.js");
           mockDepResolve = await tryResolveMockDepResolve({
             tokenValues,
             apiUrl: prodApiUrl,
@@ -1484,7 +1578,7 @@ scopes: ${identity.token.scopes.join(", ") || "(none)"}
           });
         }
         if (localPackageRun) {
-          const { buildLocalPackageContext, runLocalPackageModule } = await import("./local-package-run-OPC7VXO3.js");
+          const { buildLocalPackageContext, runLocalPackageModule } = await import("./local-package-run-C2XX2U5D.js");
           const result2 = await runLocalPackageModule({
             modulePath: localPackageRun.modulePath,
             params: args.params,
@@ -1528,7 +1622,7 @@ scopes: ${identity.token.scopes.join(", ") || "(none)"}
             packageRootForMocks = void 0;
           }
         }
-        const result = local ? await (await import("./local-execute-5J53ZM5Z.js")).runLocalExecute({
+        const result = local ? await (await import("./local-execute-3H2ROHTP.js")).runLocalExecute({
           code: args.code,
           ...modulePath !== void 0 ? { modulePath } : {},
           params: args.params,
@@ -1550,7 +1644,7 @@ scopes: ${identity.token.scopes.join(", ") || "(none)"}
           allowPrivateNetwork: parsed.values["allow-private-network"] === true,
           onStatus: (message) => writeErr(`${message}
 `)
-        }) : useToken ? await (await import("./remote-execute-BRXK2NIJ.js")).runRemoteExecuteWithToken({
+        }) : useToken ? await (await import("./remote-execute-J4SASOP2.js")).runRemoteExecuteWithToken({
           code: typeof args.code === "string" ? args.code : void 0,
           invoke,
           params: args.params,
@@ -1565,13 +1659,13 @@ scopes: ${identity.token.scopes.join(", ") || "(none)"}
           apiUrl,
           ...org ? { org } : {}
         }) : await (async () => {
-          const { ensureOpenApiCredentials } = await import("./auth-YUFNOOTY.js");
+          const { ensureOpenApiCredentials } = await import("./auth-KD6IT7RH.js");
           const session = await ensureOpenApiCredentials({
             mcpUrl,
             org,
             apiUrl
           });
-          return (await import("./remote-execute-BRXK2NIJ.js")).runRemoteExecuteWithToken({
+          return (await import("./remote-execute-J4SASOP2.js")).runRemoteExecuteWithToken({
             code: typeof args.code === "string" ? args.code : void 0,
             invoke,
             params: args.params,
@@ -1586,7 +1680,7 @@ scopes: ${identity.token.scopes.join(", ") || "(none)"}
         return result.isError ? 1 : 0;
       } catch (error) {
         if (json && local) {
-          const { LocalPackageGraphError, packageGraphErrorToolResult } = await import("./local-package-graph-7TEPDAGV.js");
+          const { LocalPackageGraphError, packageGraphErrorToolResult } = await import("./local-package-graph-657CN4KN.js");
           if (error instanceof LocalPackageGraphError) {
             const redacted = redactError(error).message;
             const result = packageGraphErrorToolResult(error);
@@ -1616,7 +1710,7 @@ scopes: ${identity.token.scopes.join(", ") || "(none)"}
         runDevServe,
         runDevWebhook,
         tryAttachedDevFetch
-      } = await import("./dev-command-NUN5HHRC.js");
+      } = await import("./dev-command-Y2TN23BI.js");
       const target = resolveTarget({
         command: "dev",
         flag: typeof parsed.values.target === "string" ? parsed.values.target : void 0
@@ -1642,8 +1736,8 @@ scopes: ${identity.token.scopes.join(", ") || "(none)"}
                 { callOpenApiOperation, formatOpenApiHttpDebugLine },
                 { parsePackageCheckResult, PublishChecksAuthError }
               ] = await Promise.all([
-                import("./open-api-client-K2BEQBO3.js"),
-                import("./dev-command-NUN5HHRC.js")
+                import("./open-api-client-L472YVI6.js"),
+                import("./dev-command-Y2TN23BI.js")
               ]);
               let token2;
               try {
@@ -1754,7 +1848,7 @@ scopes: ${identity.token.scopes.join(", ") || "(none)"}
         purpose: "kody dev",
         ...org ? { org } : {}
       }) : "mock";
-      const mockDepResolve = target === "mock" ? await (await import("./mock-dep-resolve-QRMNGDHM.js")).tryResolveMockDepResolve({
+      const mockDepResolve = target === "mock" ? await (await import("./mock-dep-resolve-BSFBRPO6.js")).tryResolveMockDepResolve({
         tokenValues,
         apiUrl: prodApiUrl,
         mcpUrl,
@@ -1895,7 +1989,7 @@ scopes: ${identity.token.scopes.join(", ") || "(none)"}
       const params = parseApiParamsJson(
         typeof parsed.values.params === "string" ? parsed.values.params : void 0
       );
-      const { callOpenApiOperation } = await import("./open-api-client-K2BEQBO3.js");
+      const { callOpenApiOperation } = await import("./open-api-client-L472YVI6.js");
       const result = await callOpenApiOperation({
         operationId,
         params,
@@ -1930,7 +2024,7 @@ scopes: ${identity.token.scopes.join(", ") || "(none)"}
           mcpUrl,
           org
         });
-        const { callOpenApiOperation: callOpenApiOperation2 } = await import("./open-api-client-K2BEQBO3.js");
+        const { callOpenApiOperation: callOpenApiOperation2 } = await import("./open-api-client-L472YVI6.js");
         write(
           await runPackageCollaboratorPlan({
             plan,
@@ -1956,7 +2050,7 @@ ${packageCollaboratorUsage}`
         positional: parsed.positionals[1],
         paramsJson: typeof parsed.values.params === "string" ? parsed.values.params : void 0
       });
-      const { callOpenApiOperation } = await import("./open-api-client-K2BEQBO3.js");
+      const { callOpenApiOperation } = await import("./open-api-client-L472YVI6.js");
       const publishToken = await accessTokenForOpenApi({
         tokenValues,
         apiUrl,
@@ -2094,7 +2188,7 @@ function attachExecuteCommonArgs(args, input) {
   return args;
 }
 async function runAuthSetupGit(input) {
-  const { authSetupGit, setupGitDefaultScopes } = await import("./setup-git-DCMWZYIG.js");
+  const { authSetupGit, setupGitDefaultScopes } = await import("./setup-git-WDMOJAFN.js");
   const apiUrl = apiUrlFrom({
     apiUrl: typeof input.values["api-url"] === "string" ? input.values["api-url"] : void 0
   });
@@ -2151,7 +2245,7 @@ async function runAuthSetupGit(input) {
   return 0;
 }
 async function runAuthRemoveGit(input) {
-  const { authRemoveGit, formatAuthRemoveGitReport } = await import("./setup-git-DCMWZYIG.js");
+  const { authRemoveGit, formatAuthRemoveGitReport } = await import("./setup-git-WDMOJAFN.js");
   const apiUrl = apiUrlFrom({
     apiUrl: typeof input.values["api-url"] === "string" ? input.values["api-url"] : void 0
   });
@@ -2179,7 +2273,7 @@ function bootstrapMinter(input) {
           apiUrl: input.apiUrl
         }
       );
-      const { callOpenApiOperation } = await import("./open-api-client-K2BEQBO3.js");
+      const { callOpenApiOperation } = await import("./open-api-client-L472YVI6.js");
       try {
         return await callOpenApiOperation({
           token,
@@ -2200,13 +2294,13 @@ function bootstrapMinter(input) {
     if (loadCredentials(input.mcpUrl, void 0, void 0, {
       org: input.org
     })) {
-      const { ensureOpenApiCredentials } = await import("./auth-YUFNOOTY.js");
+      const { ensureOpenApiCredentials } = await import("./auth-KD6IT7RH.js");
       const session = await ensureOpenApiCredentials({
         mcpUrl: input.mcpUrl,
         apiUrl: input.apiUrl,
         ...input.org ? { org: input.org } : {}
       });
-      const { callOpenApiOperation } = await import("./open-api-client-K2BEQBO3.js");
+      const { callOpenApiOperation } = await import("./open-api-client-L472YVI6.js");
       return callOpenApiOperation({
         operationId: cliCredentialBootstrapOperationId,
         params,
@@ -2232,7 +2326,7 @@ async function accessTokenForOpenApi(input) {
     apiUrl: input.apiUrl
   });
   if (explicit) return explicit;
-  const { ensureOpenApiCredentials } = await import("./auth-YUFNOOTY.js");
+  const { ensureOpenApiCredentials } = await import("./auth-KD6IT7RH.js");
   const session = await ensureOpenApiCredentials({
     mcpUrl: input.mcpUrl,
     apiUrl: input.apiUrl,
@@ -2317,4 +2411,4 @@ export {
   resolvePackagePublishTarget,
   shouldUseApiToken
 };
-//# sourceMappingURL=chunk-AFGRPGHE.js.map
+//# sourceMappingURL=chunk-2DCCAVPD.js.map