@kody-ade/kody-engine 0.2.58 → 0.2.60

package/dist/executables/approve/profile.json

@@ -0,0 +1,47 @@
+{
+  "name": "approve",
+  "role": "utility",
+  "describe": "Acknowledge pending risk gate(s) on an issue or PR: applies kody-approve:* labels on both the issue and its PR (if discoverable via task state), then re-triggers the paused flow. Invoked by `@kody2 approve`.",
+  "inputs": [
+    {
+      "name": "issue",
+      "flag": "--issue",
+      "type": "int",
+      "required": false,
+      "describe": "Issue number (when approving on the originating issue)."
+    },
+    {
+      "name": "pr",
+      "flag": "--pr",
+      "type": "int",
+      "required": false,
+      "describe": "PR number (when approving on the PR side)."
+    }
+  ],
+  "claudeCode": {
+    "model": "inherit",
+    "permissionMode": "default",
+    "maxTurns": 0,
+    "maxThinkingTokens": null,
+    "systemPromptAppend": null,
+    "tools": [],
+    "hooks": [],
+    "skills": [],
+    "commands": [],
+    "subagents": [],
+    "plugins": [],
+    "mcpServers": []
+  },
+  "cliTools": [],
+  "scripts": {
+    "preflight": [
+      { "script": "skipAgent" }
+    ],
+    "postflight": [
+      { "script": "applyApprovals" }
+    ]
+  },
+  "output": {
+    "actionTypes": []
+  }
+}

package/dist/executables/approve/prompt.md

@@ -0,0 +1 @@
+(approve is an agent-less utility; this file is a placeholder kept to satisfy the profile layout convention.)

package/dist/executables/fix/profile.json

@@ -66,40 +66,17 @@
       }
     ],
     "postflight": [
-      {
-        "script": "parseAgentResult"
-      },
-      {
-        "script": "requireFeedbackActions"
-      },
-      {
-        "script": "verify"
-      },
-      {
-        "script": "checkCoverageWithRetry"
-      },
-      {
-        "script": "commitAndPush"
-      },
-      {
-        "script": "ensurePr"
-      },
-      {
-        "script": "postIssueComment"
-      },
-      {
-        "script": "writeRunSummary"
-      },
-      {
-        "script": "saveTaskState"
-      },
-      {
-        "script": "riskGate"
-      },
-      {
-        "script": "advanceFlow",
-        "runWhen": { "data.riskGate.decision": "allow" }
-      }
+      { "script": "parseAgentResult" },
+      { "script": "requireFeedbackActions" },
+      { "script": "verify" },
+      { "script": "checkCoverageWithRetry" },
+      { "script": "commitAndPush" },
+      { "script": "riskGate" },
+      { "script": "ensurePr",         "runWhen": { "data.riskGate.decision": "allow" } },
+      { "script": "postIssueComment", "runWhen": { "data.riskGate.decision": "allow" } },
+      { "script": "writeRunSummary" },
+      { "script": "saveTaskState",    "runWhen": { "data.riskGate.decision": "allow" } },
+      { "script": "advanceFlow",      "runWhen": { "data.riskGate.decision": "allow" } }
     ]
   },
   "output": {

package/dist/executables/release/profile.json

@@ -1,6 +1,7 @@
 {
   "name": "release",
   "role": "utility",
+  "phase": "shipped",
   "describe": "Version bump + changelog + release PR (prepare), or tag + publish + GH release (finalize). No agent.",
   "inputs": [
     {

package/dist/executables/review/profile.json

@@ -1,6 +1,7 @@
 {
   "name": "review",
   "role": "primitive",
+  "phase": "reviewing",
   "describe": "Read-only structured review of an open PR. Posts one comment, never commits.",
   "inputs": [
     {

package/dist/executables/run/profile.json

@@ -62,43 +62,18 @@
       }
     ],
     "postflight": [
-      {
-        "script": "parseAgentResult"
-      },
-      {
-        "script": "requirePlanDeviations"
-      },
-      {
-        "script": "verify"
-      },
-      {
-        "script": "checkCoverageWithRetry"
-      },
-      {
-        "script": "commitAndPush"
-      },
-      {
-        "script": "ensurePr"
-      },
-      {
-        "script": "postIssueComment"
-      },
-      {
-        "script": "writeRunSummary"
-      },
-      {
-        "script": "saveTaskState"
-      },
-      {
-        "script": "mirrorStateToPr"
-      },
-      {
-        "script": "riskGate"
-      },
-      {
-        "script": "advanceFlow",
-        "runWhen": { "data.riskGate.decision": "allow" }
-      }
+      { "script": "parseAgentResult" },
+      { "script": "requirePlanDeviations" },
+      { "script": "verify" },
+      { "script": "checkCoverageWithRetry" },
+      { "script": "commitAndPush" },
+      { "script": "riskGate" },
+      { "script": "ensurePr",          "runWhen": { "data.riskGate.decision": "allow" } },
+      { "script": "postIssueComment",  "runWhen": { "data.riskGate.decision": "allow" } },
+      { "script": "writeRunSummary" },
+      { "script": "saveTaskState",     "runWhen": { "data.riskGate.decision": "allow" } },
+      { "script": "mirrorStateToPr",   "runWhen": { "data.riskGate.decision": "allow" } },
+      { "script": "advanceFlow",       "runWhen": { "data.riskGate.decision": "allow" } }
     ]
   },
   "input": {

package/dist/executables/types.ts

@@ -9,6 +9,7 @@
 
 import type { AgentResult } from "../agent.js"
 import type { Kody2Config } from "../config.js"
+import type { Phase } from "../state.js"
 
 // ────────────────────────────────────────────────────────────────────────────
 // Profile shape (mirrors the JSON on disk).
@@ -37,6 +38,12 @@ export interface Profile {
   kind: "oneshot" | "scheduled"
   /** Cron expression for scheduled profiles (e.g. "0 8 * * MON"). */
   schedule?: string
+  /**
+   * Task-state phase label emitted when this executable completes successfully.
+   * Failing actions always set phase to "failed" regardless. Omitted → "idle".
+   * Lets state.ts stay generic — phase semantics live on the profile.
+   */
+  phase?: Phase
   inputs: InputSpec[]
   claudeCode: ClaudeCodeSpec
   cliTools: CliToolSpec[]

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kody-ade/kody-engine",
-  "version": "0.2.58",
+  "version": "0.2.60",
   "description": "kody2 — autonomous development engine. Single-session Claude Code agent behind a generic executor + declarative executable profiles.",
   "license": "MIT",
   "type": "module",

package/templates/kody2.yml

@@ -14,10 +14,14 @@
 # toJSON(secrets) — no need to list them here.
 #
 # Recommended: KODY_TOKEN secret — a fine-grained PAT or GitHub App token
-# with `repo` + `read:org` scopes. Without it, kody2's commits/PR-creation
-# still work via github.token, but two things degrade:
+# with `repo` + `read:org` + `workflow` scopes. Without it, kody2's
+# commits/PR-creation still work via github.token, but three things degrade:
 #   1. PR body updates fail with "token lacks read:org scope" (cosmetic).
 #   2. Pushes from kody2 won't trigger downstream workflows.
+#   3. Any commit that modifies `.github/workflows/*` is REJECTED by
+#      GitHub — the default GITHUB_TOKEN can't touch workflow files.
+#      (The `workflow-edit` risk gate is effectively unreachable without
+#      a token carrying the `workflow` scope.)
 # Set KODY_TOKEN in repo Settings → Secrets → Actions.
 
 name: kody2