@kody-ade/kody-engine 0.4.117 → 0.4.118

package/dist/bin/kody.js

@@ -880,7 +880,7 @@ var init_loadPriorArt = __esm({
 // package.json
 var package_default = {
   name: "@kody-ade/kody-engine",
-  version: "0.4.117",
+  version: "0.4.118",
   description: "kody \u2014 autonomous development engine. Single-session Claude Code agent behind a generic executor + declarative executable profiles.",
   license: "MIT",
   type: "module",
@@ -1227,9 +1227,43 @@ function loadConfig(projectDir = process.cwd()) {
     classify: parseClassifyConfig(raw.classify),
     release: parseReleaseConfig(raw.release),
     jobs: parseJobsConfig(raw.jobs),
+    access: parseAccessConfig(raw.access),
     qa: parseQaConfig(raw.qa)
   };
 }
+var GITHUB_AUTHOR_ASSOCIATIONS = [
+  "OWNER",
+  "MEMBER",
+  "COLLABORATOR",
+  "CONTRIBUTOR",
+  "FIRST_TIME_CONTRIBUTOR",
+  "FIRST_TIMER",
+  "MANNEQUIN",
+  "NONE"
+];
+function parseAccessConfig(raw) {
+  if (!raw || typeof raw !== "object") return void 0;
+  const r = raw;
+  if (r.allowedAssociations === void 0) return void 0;
+  if (!Array.isArray(r.allowedAssociations)) {
+    throw new Error(`kody.config.json: access.allowedAssociations must be an array of strings`);
+  }
+  const valid = new Set(GITHUB_AUTHOR_ASSOCIATIONS);
+  const out = [];
+  for (const v of r.allowedAssociations) {
+    if (typeof v !== "string") {
+      throw new Error(`kody.config.json: access.allowedAssociations entries must be strings`);
+    }
+    const up = v.trim().toUpperCase();
+    if (!valid.has(up)) {
+      throw new Error(
+        `kody.config.json: access.allowedAssociations contains "${v}" \u2014 must be one of ${GITHUB_AUTHOR_ASSOCIATIONS.join(", ")}`
+      );
+    }
+    out.push(up);
+  }
+  return out.length > 0 ? { allowedAssociations: out } : void 0;
+}
 function parseQaConfig(raw) {
   if (!raw || typeof raw !== "object") return void 0;
   const r = raw;
@@ -2496,6 +2530,7 @@ function autoDispatch(opts) {
   const authorType = String(event.comment?.user?.type ?? "");
   if (!rawBody.toLowerCase().includes("@kody")) return null;
   if (authorLogin === "kody-bot" || authorType === "Bot") return null;
+  if (!associationAllowed(event, opts?.config)) return null;
   const body = rawBody.toLowerCase();
   const targetNum = Number(event.issue?.number ?? 0);
   const isPr = !!event.issue?.pull_request;
@@ -2571,6 +2606,10 @@ function autoDispatchTyped(opts) {
   if (authorLogin === "kody-bot" || authorType === "Bot") {
     return { kind: "silent", reason: `bot-authored comment (${authorLogin || authorType})` };
   }
+  if (!associationAllowed(event, opts?.config)) {
+    const assoc = String(event.comment?.author_association ?? "").toUpperCase() || "<none>";
+    return { kind: "silent", reason: `commenter association '${assoc}' not in access.allowedAssociations` };
+  }
   const targetNum = Number(event.issue?.number ?? 0);
   const isPr = !!event.issue?.pull_request;
   if (!targetNum) {
@@ -2622,6 +2661,12 @@ function dispatchScheduledWatches(opts) {
   }
   return out;
 }
+function associationAllowed(event, config) {
+  const allowed = config?.access?.allowedAssociations;
+  if (!allowed || allowed.length === 0) return true;
+  const assoc = String(event.comment?.author_association ?? "").toUpperCase();
+  return allowed.includes(assoc);
+}
 function extractAfterTag(body) {
   const idx = body.indexOf("@kody");
   if (idx === -1) return body;
@@ -4635,13 +4680,23 @@ function parseJob(body) {
   if (!jobId) return { error: "jobId required" };
   const repo = typeof b.repo === "string" ? b.repo.trim() : "";
   if (!/^[^/\s]+\/[^/\s]+$/.test(repo)) return { error: "repo must be 'owner/name'" };
-  const issueNumber = Number(b.issueNumber);
-  if (!Number.isInteger(issueNumber) || issueNumber <= 0) {
-    return { error: "issueNumber (positive integer) required" };
-  }
   const githubToken = typeof b.githubToken === "string" ? b.githubToken.trim() : "";
   if (!githubToken) return { error: "githubToken required" };
-  const job = { jobId, repo, issueNumber, githubToken };
+  const mode = b.mode === "interactive" ? "interactive" : "issue";
+  const job = { jobId, repo, githubToken, mode };
+  if (mode === "issue") {
+    const issueNumber = Number(b.issueNumber);
+    if (!Number.isInteger(issueNumber) || issueNumber <= 0) {
+      return { error: "issueNumber (positive integer) required for issue mode" };
+    }
+    job.issueNumber = issueNumber;
+  } else {
+    const sessionId = typeof b.sessionId === "string" ? b.sessionId.trim() : "";
+    if (!sessionId) return { error: "sessionId required for interactive mode" };
+    job.sessionId = sessionId;
+    if (Number.isFinite(Number(b.idleExitMs))) job.idleExitMs = Number(b.idleExitMs);
+    if (Number.isFinite(Number(b.hardCapMs))) job.hardCapMs = Number(b.hardCapMs);
+  }
   if (typeof b.ref === "string" && b.ref.trim()) job.ref = b.ref.trim();
   if (typeof b.model === "string" && b.model.trim()) job.model = b.model.trim();
   if (typeof b.sessionId === "string" && b.sessionId.trim()) job.sessionId = b.sessionId.trim();
@@ -4658,16 +4713,21 @@ async function defaultRunJob(job) {
   fs19.rmSync(workdir, { recursive: true, force: true });
   fs19.mkdirSync(workdir, { recursive: true });
   const allSecrets = typeof job.allSecrets === "string" ? job.allSecrets : JSON.stringify(job.allSecrets ?? {});
+  const interactive = job.mode === "interactive";
   const childEnv = {
     ...process.env,
     REPO: job.repo,
     REF: branch,
     GITHUB_TOKEN: job.githubToken,
-    ISSUE_NUMBER: String(job.issueNumber),
+    // Issue mode bakes ISSUE_NUMBER → `kody run --issue N`. Interactive mode
+    // leaves it empty and sets SESSION_ID so the engine boots a chat session.
+    ISSUE_NUMBER: interactive ? "" : String(job.issueNumber),
     ALL_SECRETS: allSecrets,
     SESSION_ID: job.sessionId ?? "",
     DASHBOARD_URL: job.dashboardUrl ?? "",
-    MODEL: job.model ?? ""
+    MODEL: job.model ?? "",
+    ...interactive && job.idleExitMs ? { KODY_IDLE_EXIT_MS: String(job.idleExitMs) } : {},
+    ...interactive && job.hardCapMs ? { KODY_HARD_CAP_MS: String(job.hardCapMs) } : {}
   };
   const run = (cmd, args, cwd) => new Promise((resolve4) => {
     const child = spawn3(cmd, args, { stdio: "inherit", env: childEnv, cwd });
@@ -4699,9 +4759,12 @@ async function defaultRunJob(job) {
   const authorEmail = process.env.GIT_AUTHOR_EMAIL ?? "kody-bot@users.noreply.github.com";
   await run("git", ["config", "user.name", authorName], workdir);
   await run("git", ["config", "user.email", authorEmail], workdir);
-  process.stdout.write(`[runner-serve] job ${job.jobId}: running issue #${job.issueNumber}
-`);
-  const runCode = await run("kody", ["run", "--issue", String(job.issueNumber)], workdir);
+  const runArgs = interactive ? [] : ["run", "--issue", String(job.issueNumber)];
+  process.stdout.write(
+    `[runner-serve] job ${job.jobId}: ${interactive ? `interactive session ${job.sessionId}` : `running issue #${job.issueNumber}`}
+`
+  );
+  const runCode = await run("kody", runArgs, workdir);
   process.stdout.write(`[runner-serve] job ${job.jobId}: finished (exit ${runCode})
 `);
   process.exit(runCode);
@@ -5215,12 +5278,15 @@ var PoolRegistry = class {
     const job = {
       jobId: req.jobId,
       repo: `${owner}/${repo}`,
-      issueNumber: req.issueNumber,
       githubToken: this.cfg.githubToken,
+      mode: req.mode ?? "issue",
+      issueNumber: req.issueNumber,
+      sessionId: req.sessionId,
+      idleExitMs: req.idleExitMs,
+      hardCapMs: req.hardCapMs,
       ref: req.ref,
       allSecrets,
       model: req.model,
-      sessionId: req.sessionId,
       dashboardUrl: req.dashboardUrl
     };
     return pm.claim(job);
@@ -5318,9 +5384,19 @@ function parseClaimRequest(body) {
   if (!jobId) return { error: "jobId required" };
   const repo = typeof b.repo === "string" ? b.repo.trim() : "";
   if (!/^[^/\s]+\/[^/\s]+$/.test(repo)) return { error: "repo must be 'owner/name'" };
-  const issueNumber = Number(b.issueNumber);
-  if (!Number.isInteger(issueNumber) || issueNumber <= 0) return { error: "issueNumber required" };
-  const req = { jobId, repo, issueNumber };
+  const mode = b.mode === "interactive" ? "interactive" : "issue";
+  const req = { jobId, repo, mode };
+  if (mode === "issue") {
+    const issueNumber = Number(b.issueNumber);
+    if (!Number.isInteger(issueNumber) || issueNumber <= 0) return { error: "issueNumber required for issue mode" };
+    req.issueNumber = issueNumber;
+  } else {
+    const sessionId = typeof b.sessionId === "string" ? b.sessionId.trim() : "";
+    if (!sessionId) return { error: "sessionId required for interactive mode" };
+    req.sessionId = sessionId;
+    if (Number.isFinite(Number(b.idleExitMs))) req.idleExitMs = Number(b.idleExitMs);
+    if (Number.isFinite(Number(b.hardCapMs))) req.hardCapMs = Number(b.hardCapMs);
+  }
   if (typeof b.ref === "string" && b.ref.trim()) req.ref = b.ref.trim();
   if (typeof b.model === "string" && b.model.trim()) req.model = b.model.trim();
   if (typeof b.sessionId === "string" && b.sessionId.trim()) req.sessionId = b.sessionId.trim();

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kody-ade/kody-engine",
-  "version": "0.4.117",
+  "version": "0.4.118",
   "description": "kody — autonomous development engine. Single-session Claude Code agent behind a generic executor + declarative executable profiles.",
   "license": "MIT",
   "type": "module",