@kody-ade/kody-engine 0.4.117 → 0.4.119

package/dist/bin/kody.js

@@ -880,7 +880,7 @@ var init_loadPriorArt = __esm({
 // package.json
 var package_default = {
   name: "@kody-ade/kody-engine",
-  version: "0.4.117",
+  version: "0.4.119",
   description: "kody \u2014 autonomous development engine. Single-session Claude Code agent behind a generic executor + declarative executable profiles.",
   license: "MIT",
   type: "module",
@@ -1227,9 +1227,51 @@ function loadConfig(projectDir = process.cwd()) {
     classify: parseClassifyConfig(raw.classify),
     release: parseReleaseConfig(raw.release),
     jobs: parseJobsConfig(raw.jobs),
+    access: parseAccessConfig(raw.access),
     qa: parseQaConfig(raw.qa)
   };
 }
+var GITHUB_AUTHOR_ASSOCIATIONS = [
+  "OWNER",
+  "MEMBER",
+  "COLLABORATOR",
+  "CONTRIBUTOR",
+  "FIRST_TIME_CONTRIBUTOR",
+  "FIRST_TIMER",
+  "MANNEQUIN",
+  "NONE"
+];
+var DEFAULT_ALLOWED_ASSOCIATIONS = ["OWNER", "MEMBER", "COLLABORATOR"];
+function parseAccessConfig(raw) {
+  if (raw === void 0 || raw === null) {
+    return { allowedAssociations: [...DEFAULT_ALLOWED_ASSOCIATIONS] };
+  }
+  if (typeof raw !== "object") {
+    throw new Error(`kody.config.json: access must be an object`);
+  }
+  const r = raw;
+  if (r.allowedAssociations === void 0) {
+    return { allowedAssociations: [...DEFAULT_ALLOWED_ASSOCIATIONS] };
+  }
+  if (!Array.isArray(r.allowedAssociations)) {
+    throw new Error(`kody.config.json: access.allowedAssociations must be an array of strings`);
+  }
+  const valid = new Set(GITHUB_AUTHOR_ASSOCIATIONS);
+  const out = [];
+  for (const v of r.allowedAssociations) {
+    if (typeof v !== "string") {
+      throw new Error(`kody.config.json: access.allowedAssociations entries must be strings`);
+    }
+    const up = v.trim().toUpperCase();
+    if (!valid.has(up)) {
+      throw new Error(
+        `kody.config.json: access.allowedAssociations contains "${v}" \u2014 must be one of ${GITHUB_AUTHOR_ASSOCIATIONS.join(", ")}`
+      );
+    }
+    out.push(up);
+  }
+  return { allowedAssociations: out };
+}
 function parseQaConfig(raw) {
   if (!raw || typeof raw !== "object") return void 0;
   const r = raw;
@@ -2496,6 +2538,7 @@ function autoDispatch(opts) {
   const authorType = String(event.comment?.user?.type ?? "");
   if (!rawBody.toLowerCase().includes("@kody")) return null;
   if (authorLogin === "kody-bot" || authorType === "Bot") return null;
+  if (!associationAllowed(event, opts?.config)) return null;
   const body = rawBody.toLowerCase();
   const targetNum = Number(event.issue?.number ?? 0);
   const isPr = !!event.issue?.pull_request;
@@ -2571,6 +2614,10 @@ function autoDispatchTyped(opts) {
   if (authorLogin === "kody-bot" || authorType === "Bot") {
     return { kind: "silent", reason: `bot-authored comment (${authorLogin || authorType})` };
   }
+  if (!associationAllowed(event, opts?.config)) {
+    const assoc = String(event.comment?.author_association ?? "").toUpperCase() || "<none>";
+    return { kind: "silent", reason: `commenter association '${assoc}' not in access.allowedAssociations` };
+  }
   const targetNum = Number(event.issue?.number ?? 0);
   const isPr = !!event.issue?.pull_request;
   if (!targetNum) {
@@ -2622,6 +2669,12 @@ function dispatchScheduledWatches(opts) {
   }
   return out;
 }
+function associationAllowed(event, config) {
+  const allowed = config?.access?.allowedAssociations;
+  if (!allowed || allowed.length === 0) return true;
+  const assoc = String(event.comment?.author_association ?? "").toUpperCase();
+  return allowed.includes(assoc);
+}
 function extractAfterTag(body) {
   const idx = body.indexOf("@kody");
   if (idx === -1) return body;
@@ -4635,13 +4688,23 @@ function parseJob(body) {
   if (!jobId) return { error: "jobId required" };
   const repo = typeof b.repo === "string" ? b.repo.trim() : "";
   if (!/^[^/\s]+\/[^/\s]+$/.test(repo)) return { error: "repo must be 'owner/name'" };
-  const issueNumber = Number(b.issueNumber);
-  if (!Number.isInteger(issueNumber) || issueNumber <= 0) {
-    return { error: "issueNumber (positive integer) required" };
-  }
   const githubToken = typeof b.githubToken === "string" ? b.githubToken.trim() : "";
   if (!githubToken) return { error: "githubToken required" };
-  const job = { jobId, repo, issueNumber, githubToken };
+  const mode = b.mode === "interactive" ? "interactive" : "issue";
+  const job = { jobId, repo, githubToken, mode };
+  if (mode === "issue") {
+    const issueNumber = Number(b.issueNumber);
+    if (!Number.isInteger(issueNumber) || issueNumber <= 0) {
+      return { error: "issueNumber (positive integer) required for issue mode" };
+    }
+    job.issueNumber = issueNumber;
+  } else {
+    const sessionId = typeof b.sessionId === "string" ? b.sessionId.trim() : "";
+    if (!sessionId) return { error: "sessionId required for interactive mode" };
+    job.sessionId = sessionId;
+    if (Number.isFinite(Number(b.idleExitMs))) job.idleExitMs = Number(b.idleExitMs);
+    if (Number.isFinite(Number(b.hardCapMs))) job.hardCapMs = Number(b.hardCapMs);
+  }
   if (typeof b.ref === "string" && b.ref.trim()) job.ref = b.ref.trim();
   if (typeof b.model === "string" && b.model.trim()) job.model = b.model.trim();
   if (typeof b.sessionId === "string" && b.sessionId.trim()) job.sessionId = b.sessionId.trim();
@@ -4658,16 +4721,21 @@ async function defaultRunJob(job) {
   fs19.rmSync(workdir, { recursive: true, force: true });
   fs19.mkdirSync(workdir, { recursive: true });
   const allSecrets = typeof job.allSecrets === "string" ? job.allSecrets : JSON.stringify(job.allSecrets ?? {});
+  const interactive = job.mode === "interactive";
   const childEnv = {
     ...process.env,
     REPO: job.repo,
     REF: branch,
     GITHUB_TOKEN: job.githubToken,
-    ISSUE_NUMBER: String(job.issueNumber),
+    // Issue mode bakes ISSUE_NUMBER → `kody run --issue N`. Interactive mode
+    // leaves it empty and sets SESSION_ID so the engine boots a chat session.
+    ISSUE_NUMBER: interactive ? "" : String(job.issueNumber),
     ALL_SECRETS: allSecrets,
     SESSION_ID: job.sessionId ?? "",
     DASHBOARD_URL: job.dashboardUrl ?? "",
-    MODEL: job.model ?? ""
+    MODEL: job.model ?? "",
+    ...interactive && job.idleExitMs ? { KODY_IDLE_EXIT_MS: String(job.idleExitMs) } : {},
+    ...interactive && job.hardCapMs ? { KODY_HARD_CAP_MS: String(job.hardCapMs) } : {}
   };
   const run = (cmd, args, cwd) => new Promise((resolve4) => {
     const child = spawn3(cmd, args, { stdio: "inherit", env: childEnv, cwd });
@@ -4699,9 +4767,12 @@ async function defaultRunJob(job) {
   const authorEmail = process.env.GIT_AUTHOR_EMAIL ?? "kody-bot@users.noreply.github.com";
   await run("git", ["config", "user.name", authorName], workdir);
   await run("git", ["config", "user.email", authorEmail], workdir);
-  process.stdout.write(`[runner-serve] job ${job.jobId}: running issue #${job.issueNumber}
-`);
-  const runCode = await run("kody", ["run", "--issue", String(job.issueNumber)], workdir);
+  const runArgs = interactive ? [] : ["run", "--issue", String(job.issueNumber)];
+  process.stdout.write(
+    `[runner-serve] job ${job.jobId}: ${interactive ? `interactive session ${job.sessionId}` : `running issue #${job.issueNumber}`}
+`
+  );
+  const runCode = await run("kody", runArgs, workdir);
   process.stdout.write(`[runner-serve] job ${job.jobId}: finished (exit ${runCode})
 `);
   process.exit(runCode);
@@ -5215,12 +5286,15 @@ var PoolRegistry = class {
     const job = {
       jobId: req.jobId,
       repo: `${owner}/${repo}`,
-      issueNumber: req.issueNumber,
       githubToken: this.cfg.githubToken,
+      mode: req.mode ?? "issue",
+      issueNumber: req.issueNumber,
+      sessionId: req.sessionId,
+      idleExitMs: req.idleExitMs,
+      hardCapMs: req.hardCapMs,
       ref: req.ref,
       allSecrets,
       model: req.model,
-      sessionId: req.sessionId,
       dashboardUrl: req.dashboardUrl
     };
     return pm.claim(job);
@@ -5318,9 +5392,19 @@ function parseClaimRequest(body) {
   if (!jobId) return { error: "jobId required" };
   const repo = typeof b.repo === "string" ? b.repo.trim() : "";
   if (!/^[^/\s]+\/[^/\s]+$/.test(repo)) return { error: "repo must be 'owner/name'" };
-  const issueNumber = Number(b.issueNumber);
-  if (!Number.isInteger(issueNumber) || issueNumber <= 0) return { error: "issueNumber required" };
-  const req = { jobId, repo, issueNumber };
+  const mode = b.mode === "interactive" ? "interactive" : "issue";
+  const req = { jobId, repo, mode };
+  if (mode === "issue") {
+    const issueNumber = Number(b.issueNumber);
+    if (!Number.isInteger(issueNumber) || issueNumber <= 0) return { error: "issueNumber required for issue mode" };
+    req.issueNumber = issueNumber;
+  } else {
+    const sessionId = typeof b.sessionId === "string" ? b.sessionId.trim() : "";
+    if (!sessionId) return { error: "sessionId required for interactive mode" };
+    req.sessionId = sessionId;
+    if (Number.isFinite(Number(b.idleExitMs))) req.idleExitMs = Number(b.idleExitMs);
+    if (Number.isFinite(Number(b.hardCapMs))) req.hardCapMs = Number(b.hardCapMs);
+  }
   if (typeof b.ref === "string" && b.ref.trim()) req.ref = b.ref.trim();
   if (typeof b.model === "string" && b.model.trim()) req.model = b.model.trim();
   if (typeof b.sessionId === "string" && b.sessionId.trim()) req.sessionId = b.sessionId.trim();

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kody-ade/kody-engine",
-  "version": "0.4.117",
+  "version": "0.4.119",
   "description": "kody — autonomous development engine. Single-session Claude Code agent behind a generic executor + declarative executable profiles.",
   "license": "MIT",
   "type": "module",
@@ -12,23 +12,6 @@
     "templates",
     "kody.config.schema.json"
   ],
-  "scripts": {
-    "kody:run": "tsx bin/kody.ts",
-    "serve": "tsx bin/kody.ts serve",
-    "serve:vscode": "tsx bin/kody.ts serve vscode",
-    "serve:claude": "tsx bin/kody.ts serve claude",
-    "build": "tsup && node scripts/copy-assets.cjs",
-    "check:modularity": "tsx scripts/check-script-modularity.ts",
-    "pretest": "pnpm check:modularity",
-    "test": "vitest run tests/unit tests/int --no-coverage",
-    "test:e2e": "vitest run tests/e2e --no-coverage",
-    "test:all": "vitest run tests --no-coverage",
-    "typecheck": "tsc --noEmit",
-    "lint": "biome check",
-    "lint:fix": "biome check --write",
-    "format": "biome format --write",
-    "prepublishOnly": "pnpm build"
-  },
   "dependencies": {
     "@actions/cache": "^6.0.0",
     "@anthropic-ai/claude-agent-sdk": "0.2.119",
@@ -50,5 +33,21 @@
     "url": "git+https://github.com/aharonyaircohen/kody-engine.git"
   },
   "homepage": "https://github.com/aharonyaircohen/kody-engine",
-  "bugs": "https://github.com/aharonyaircohen/kody-engine/issues"
-}
+  "bugs": "https://github.com/aharonyaircohen/kody-engine/issues",
+  "scripts": {
+    "kody:run": "tsx bin/kody.ts",
+    "serve": "tsx bin/kody.ts serve",
+    "serve:vscode": "tsx bin/kody.ts serve vscode",
+    "serve:claude": "tsx bin/kody.ts serve claude",
+    "build": "tsup && node scripts/copy-assets.cjs",
+    "check:modularity": "tsx scripts/check-script-modularity.ts",
+    "pretest": "pnpm check:modularity",
+    "test": "vitest run tests/unit tests/int --no-coverage",
+    "test:e2e": "vitest run tests/e2e --no-coverage",
+    "test:all": "vitest run tests --no-coverage",
+    "typecheck": "tsc --noEmit",
+    "lint": "biome check",
+    "lint:fix": "biome check --write",
+    "format": "biome format --write"
+  }
+}

package/templates/kody.yml

@@ -90,4 +90,4 @@ jobs:
           INIT_MESSAGE:  ${{ inputs.message }}
           MODEL:         ${{ inputs.model }}
           DASHBOARD_URL: ${{ inputs.dashboardUrl }}
-        run: npx -y -p @kody-ade/kody-engine@0.4.109 kody-engine
+        run: npx -y -p @kody-ade/kody-engine@0.4.119 kody-engine