fix(dev): actionable 403s, fetch exits once on bundle errors, bare Node builtins like publish by kentcdodds · Pull Request #60 · kody-bot/cli

kentcdodds · 2026-10-15T05:56:43Z

Summary

Actionable bridge/entry 403s (missing run secret) and one-line CapabilityProxy refusal with a Fix line.
kody dev fetch prints a bundle error once (not twice) and always closes the mock; rejects with a non-zero path.
Keep bare Node builtins (and _stream_*) external like hosted publish so require('stream') bundles locally; clearer runtime errors for CommonJS builtin requires.

Stack

Based on main after #59 (ports/assets/prebuild).

Test plan

npm run validate
CI green
Bugbot clean

Note

Low Risk
Mostly CLI messaging, dev-server error handling, and esbuild externals parity; no auth or payment logic changes beyond clearer CapabilityProxy refusal text.

^{Reviewed by Cursor Bugbot for commit a7fc089. Bugbot is set up for automated code reviews on this repo. Configure here.}

kentcdodds · 2026-10-15T06:00:54Z

bugbot run

kentcdodds · 2026-10-15T06:12:06Z

bugbot run

cursor

Stale Bugbot comment from a previous run.

kentcdodds · 2026-10-15T06:15:34Z

bugbot run

cursor

Stale Bugbot comment from a previous run.

kentcdodds · 2026-10-15T06:20:34Z

bugbot run

cursor

Stale Bugbot comment from a previous run.

cursor

Stale Bugbot comment from a previous run.

…oxy refusal with a fix - kody dev bridge and entry 403s say 'missing dev run secret' and what to open instead; wrong bridge routes are 404 instead of 403. - execute --local bridge/entry 403s name the run secret too. - A token CapabilityProxy refuses outright is one line plus a Fix: line instead of a paragraph of bootstrap and tokenCreate instructions. Co-authored-by: Kent C. Dodds <me+github@kentcdodds.com>

…ways closes the mock Co-authored-by: Kent C. Dodds <me+github@kentcdodds.com>

…quire('stream') bundles locally

…ain the edge-entry fix

nodeBuiltinModuleNames already listed _http_* and _tls_* but omitted the six _stream_* builtins between them, so require('_stream_readable') still failed local bundle while publish left those specifiers external. Co-authored-by: Kent C. Dodds <me+github@kentcdodds.com>

kentcdodds · 2026-10-15T08:38:36Z

bugbot run

cursor

Stale Bugbot comment from a previous run.

auth bootstrap requires --lifetime; reuse cliBootstrapInstructions() so the Fix line matches other auth hints. Co-authored-by: Kent C. Dodds <me+github@kentcdodds.com>

kentcdodds · 2026-10-15T08:44:37Z

bugbot run

Co-authored-by: Kent C. Dodds <me+github@kentcdodds.com>

cursor

✅ Bugbot reviewed your changes and found no new issues!

Comment @cursor review or bugbot run to trigger another review on this PR

^{Reviewed by Cursor Bugbot for commit 43b4daa. Configure here.}

github-actions · 2026-10-15T08:48:22Z

🎉 This PR is included in version 1.26.1 🎉

The release is available on:

Your semantic-release bot 📦🚀

kody-bot marked this pull request as ready for review October 15, 2026 06:00

cursor Bot reviewed Oct 15, 2026

View reviewed changes

Comment thread src/dev/dev-watcher.ts Outdated

cursor Bot reviewed Oct 15, 2026

View reviewed changes

Comment thread src/dev/prebuild.ts

cursor Bot reviewed Oct 15, 2026

View reviewed changes

cursor Bot force-pushed the cursor/kody-dev-polish-354f branch from 8b55a0b to ae81acd Compare October 15, 2026 06:27

cursor Bot force-pushed the cursor/kody-dev-ports-assets-speed-354f branch from fd47e44 to 7b70202 Compare October 15, 2026 06:27

cursor Bot force-pushed the cursor/kody-dev-polish-354f branch 2 times, most recently from c5e9156 to b1a8c32 Compare October 15, 2026 06:32

cursor Bot force-pushed the cursor/kody-dev-ports-assets-speed-354f branch from ec2713b to ca1e354 Compare October 15, 2026 06:37

cursor Bot force-pushed the cursor/kody-dev-polish-354f branch from b1a8c32 to e28eec0 Compare October 15, 2026 06:37

cursor Bot reviewed Oct 15, 2026

View reviewed changes

Comment thread src/local-bundle.ts

cursor Bot force-pushed the cursor/kody-dev-ports-assets-speed-354f branch from ca1e354 to 38abb9c Compare October 15, 2026 06:43

cursor Bot force-pushed the cursor/kody-dev-polish-354f branch from e28eec0 to d14ee60 Compare October 15, 2026 06:43

cursor Bot force-pushed the cursor/kody-dev-ports-assets-speed-354f branch from 38abb9c to e813630 Compare October 15, 2026 06:46

cursor Bot force-pushed the cursor/kody-dev-polish-354f branch from d14ee60 to 31a1ede Compare October 15, 2026 06:46

cursor Bot force-pushed the cursor/kody-dev-ports-assets-speed-354f branch from e813630 to 03b005d Compare October 15, 2026 06:48

cursor Bot force-pushed the cursor/kody-dev-polish-354f branch from c15b622 to 19399c6 Compare October 15, 2026 06:49

cursor Bot force-pushed the cursor/kody-dev-ports-assets-speed-354f branch from 03b005d to 7d9acfa Compare October 15, 2026 06:50

cursor Bot force-pushed the cursor/kody-dev-polish-354f branch from 19399c6 to 2733ec0 Compare October 15, 2026 06:50

cursor Bot force-pushed the cursor/kody-dev-ports-assets-speed-354f branch from 7d9acfa to 5aa3010 Compare October 15, 2026 06:51

cursor Bot force-pushed the cursor/kody-dev-polish-354f branch from 2733ec0 to 8a9099a Compare October 15, 2026 06:52

cursor Bot force-pushed the cursor/kody-dev-ports-assets-speed-354f branch from 5aa3010 to 758da87 Compare October 15, 2026 07:05

cursor Bot force-pushed the cursor/kody-dev-polish-354f branch from 05c49f5 to d22804b Compare October 15, 2026 07:30

cursor Bot force-pushed the cursor/kody-dev-ports-assets-speed-354f branch from 1baeecd to e60c74f Compare October 15, 2026 07:48

cursor Bot force-pushed the cursor/kody-dev-polish-354f branch from d22804b to 9e15f9a Compare October 15, 2026 07:48

cursor Bot force-pushed the cursor/kody-dev-ports-assets-speed-354f branch from e60c74f to 69a01dd Compare October 15, 2026 07:50

cursor Bot force-pushed the cursor/kody-dev-polish-354f branch from 9e15f9a to db8f1c7 Compare October 15, 2026 07:50

cursor Bot force-pushed the cursor/kody-dev-ports-assets-speed-354f branch from 69a01dd to e1d1de4 Compare October 15, 2026 07:57

cursor Bot force-pushed the cursor/kody-dev-polish-354f branch from db8f1c7 to e36e51c Compare October 15, 2026 07:57

cursor Bot force-pushed the cursor/kody-dev-ports-assets-speed-354f branch from e1d1de4 to fb400c0 Compare October 15, 2026 08:00

cursor Bot force-pushed the cursor/kody-dev-polish-354f branch 2 times, most recently from a75713c to 02619f9 Compare October 15, 2026 08:05

Base automatically changed from cursor/kody-dev-ports-assets-speed-354f to main October 15, 2026 08:35

cursoragent and others added 5 commits October 15, 2026 08:36

fix(dev): kody dev fetch exits non-zero once on a bundle error and al…

9d0228e

…ways closes the mock Co-authored-by: Kent C. Dodds <me+github@kentcdodds.com>

fix(dev): keep bare Node builtins external like hosted publish, so re…

94db3bf

…quire('stream') bundles locally

feat(dev): runtime errors from a CommonJS require() of a builtin expl…

be57aef

…ain the edge-entry fix

cursor Bot changed the title ~~fix(dev): actionable errors — 403s, dev fetch exits on bundle errors, bare Node builtins bundle like publish~~ fix(dev): actionable 403s, fetch exits once on bundle errors, bare Node builtins like publish Oct 15, 2026

cursor Bot force-pushed the cursor/kody-dev-polish-354f branch from 02619f9 to 69d9270 Compare October 15, 2026 08:37

cursor Bot reviewed Oct 15, 2026

View reviewed changes

Comment thread src/api-token.ts

fix(dev): include --lifetime in CapabilityProxy forbidden Fix line

43b4daa

auth bootstrap requires --lifetime; reuse cliBootstrapInstructions() so the Fix line matches other auth hints. Co-authored-by: Kent C. Dodds <me+github@kentcdodds.com>

test(dev): assert CapabilityProxy forbidden Fix includes --lifetime

a7fc089

Co-authored-by: Kent C. Dodds <me+github@kentcdodds.com>

cursor Bot reviewed Oct 15, 2026

View reviewed changes

kody-bot merged commit 56be6e6 into main Oct 15, 2026
7 checks passed

kody-bot deleted the cursor/kody-dev-polish-354f branch October 15, 2026 08:46

This was referenced Oct 15, 2026

fix(dev): emit build_error JSON on stdout for dev fetch --json #67

Merged

fix(dev): keep error overlay CSS in adoptedStyleSheets #68

Merged

github-actions Bot added the released label Oct 15, 2026

Conversation

kentcdodds commented Oct 15, 2026 • edited by cursor Bot Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Summary

Stack

Test plan

Uh oh!

kentcdodds commented Oct 15, 2026

Uh oh!

kentcdodds commented Oct 15, 2026

Uh oh!

cursor Bot left a comment • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Uh oh!

kentcdodds commented Oct 15, 2026

Uh oh!

cursor Bot left a comment • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Uh oh!

kentcdodds commented Oct 15, 2026

Uh oh!

cursor Bot left a comment • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Choose a reason for hiding this comment

Uh oh!

cursor Bot left a comment • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Uh oh!

kentcdodds commented Oct 15, 2026

Uh oh!

cursor Bot left a comment • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Uh oh!

kentcdodds commented Oct 15, 2026

Uh oh!

cursor Bot left a comment

Choose a reason for hiding this comment

Uh oh!

Uh oh!

github-actions Bot commented Oct 15, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

kentcdodds commented Oct 15, 2026 •

edited by cursor Bot

Loading

cursor Bot left a comment •

edited

Loading

cursor Bot left a comment •

edited

Loading

cursor Bot left a comment •

edited

Loading

cursor Bot left a comment •

edited

Loading

cursor Bot left a comment •

edited

Loading