packages

Update mutable settings for a saved package: hidden search-discovery, publish lock (`changes.locked: true`; agents ca...

Update mutable settings for a saved package: hidden search-discovery, publish lock (changes.locked: true; agents cannot unlock), repo visibility / forkable (changes.visibility), and internet-visible app serving (changes.internet_visible). Making a package public lists it on /community with full source and fork. Before setting visibility public, review source, README, Intent, description, tags, examples, and hardcoded identifiers for overly personal material. If anything looks personal or household-specific, do not publish yet — tell the user what you found, suggest how to generalize, and wait for explicit go-ahead. No MIT, logo, or Intent platform gates. Making it private unlists it (public URLs 404; forks keep their copies) — pass confirm_name matching the package slug after the owner typed that name. Internet-visible is independent of forkable and requires owner capability approval on the website. Canonical package metadata such as name, description, and tags remains derived from package.json. Visibility is not package.json#private.

Org permission: package:write.

patch/v1/packages/{package_id}

Request

  • Base URL: https://api.kody.codes
  • URL: https://api.kody.codes/v1/packages/{package_id}
  • Auth: HTTP bearer

Path parameters

package_idstring required

Saved package id.

Request body

confirm_namestring

Required when changes.visibility is private or changes.internet_visible is false. Must equal the package slug (URL name). Confirm with the user first.

Response

Success.

oktrue required
approval_urlstring

Present when internet_visible was requested and is waiting on owner Approve (went_public). One Approve on that page records the capability set and turns internet-visible on.

internet_visible_pendingboolean

True when other package changes applied but internet-visible is waiting on owner Approve.

self_publishedtrue

Present when internet_visible was turned on without owner Approve because the package declares no credential or capability. The package cannot use any credential while public this way.

self_publish_blocker'unpublished' | 'stale_dependencies' | 'declares_credentials' | 'declares_capabilities' | 'not_audited' | 'audit_concerns' | 'not_permitted'

Why internet_visible waits on owner Approve instead of self-publishing: the capability set has credentials or storage to approve, a package in the tree is unpublished, a dependency republished since this package's publish (stale_dependencies: publish this package again), the tree declares credentials, the tree declares other capabilities, the current published commit + fingerprint has no security audit (not_audited) or one with verdict concerns (audit_concerns), or the caller may not publish this package. For not_audited: audit, record verdict pass with packageSecurityAuditRecord; that re-evaluates the pending request.

self_publish_errorstring

Present when self-publish applied but its approval failed; internet_visible waits on owner Approve at approval_url instead.

Changes

No recorded changes to this operation across all 1 revision of this API.