@kody-ade/kody-engine 0.4.119 → 0.4.121

package/dist/bin/kody.js

@@ -880,7 +880,7 @@ var init_loadPriorArt = __esm({
 // package.json
 var package_default = {
   name: "@kody-ade/kody-engine",
-  version: "0.4.119",
+  version: "0.4.121",
   description: "kody \u2014 autonomous development engine. Single-session Claude Code agent behind a generic executor + declarative executable profiles.",
   license: "MIT",
   type: "module",
@@ -900,7 +900,7 @@ var package_default = {
     build: "tsup && node scripts/copy-assets.cjs",
     "check:modularity": "tsx scripts/check-script-modularity.ts",
     pretest: "pnpm check:modularity",
-    test: "vitest run tests/unit tests/int --no-coverage",
+    test: "vitest run tests/unit tests/int --coverage",
     "test:e2e": "vitest run tests/e2e --no-coverage",
     "test:all": "vitest run tests --no-coverage",
     typecheck: "tsc --noEmit",
@@ -917,6 +917,7 @@ var package_default = {
   devDependencies: {
     "@biomejs/biome": "^2.4.12",
     "@types/node": "^22.5.4",
+    "@vitest/coverage-v8": "^4.1.4",
     tsup: "^8.5.1",
     tsx: "^4.21.0",
     typescript: "~5.7.0",
@@ -4727,6 +4728,13 @@ async function defaultRunJob(job) {
     REPO: job.repo,
     REF: branch,
     GITHUB_TOKEN: job.githubToken,
+    // GITHUB_REPOSITORY + GH_TOKEN are normally injected by GitHub Actions.
+    // The engine's interactive mode needs GITHUB_REPOSITORY to persist
+    // chat.ready / events to .kody/events via the Contents API (the durable
+    // signal the dashboard polls for readiness) — without it commitTurn bails
+    // and the session never appears "ready". GH_TOKEN auths the `gh` CLI.
+    GITHUB_REPOSITORY: job.repo,
+    GH_TOKEN: job.githubToken,
     // Issue mode bakes ISSUE_NUMBER → `kody run --issue N`. Interactive mode
     // leaves it empty and sets SESSION_ID so the engine boots a chat session.
     ISSUE_NUMBER: interactive ? "" : String(job.issueNumber),
@@ -4986,6 +4994,19 @@ var PoolManager = class {
       total: this.free.length + this.booting + this.claimsInFlight
     };
   }
+  /**
+   * Resize the warm target at runtime (per-repo, sourced from the repo's vault
+   * POOL_MIN). Raising it warms up immediately via refill; lowering it just
+   * stops topping up — surplus machines drain as they're claimed/auto-destroyed,
+   * never force-killed. No-op when unchanged or given a bad value.
+   */
+  setMin(min) {
+    if (!Number.isInteger(min) || min < 0) return;
+    if (min === this.deps.config.min) return;
+    this.deps.config.min = min;
+    this.log(`min set to ${min}`);
+    void this.refill();
+  }
   /**
    * Adopt existing pooled machines on owner (re)start: suspended ones become
    * free; anything else is left to finish/auto-destroy. Then refill to `min`.
@@ -5222,6 +5243,14 @@ async function readRepoSecrets(opts) {
 }
 
 // src/pool/registry.ts
+var POOL_MIN_VAULT_KEY = "POOL_MIN";
+var POOL_MIN_MAX = 10;
+function parsePoolMin(raw, dflt) {
+  if (raw == null || raw.trim() === "") return dflt;
+  const n = Number(raw);
+  if (!Number.isInteger(n) || n < 0) return dflt;
+  return Math.min(n, POOL_MIN_MAX);
+}
 var PoolRegistry = class {
   constructor(cfg) {
     this.cfg = cfg;
@@ -5234,10 +5263,21 @@ var PoolRegistry = class {
       repo,
       name: "FLY_API_TOKEN"
     }));
+    this.resolvePoolMin = cfg.resolvePoolMin ?? (async (owner, repo) => parsePoolMin(
+      await readRepoSecret({
+        githubToken: cfg.githubToken,
+        masterKey: cfg.masterKey,
+        owner,
+        repo,
+        name: POOL_MIN_VAULT_KEY
+      }),
+      cfg.base.min
+    ));
   }
   cfg;
   pools = /* @__PURE__ */ new Map();
   resolveFlyToken;
+  resolvePoolMin;
   log;
   key(owner, repo) {
     return `${owner}/${repo}`.toLowerCase();
@@ -5258,10 +5298,16 @@ var PoolRegistry = class {
       this.log(`registry: ${repoTag} has no FLY_API_TOKEN \u2014 no pool`);
       return null;
     }
+    let min = this.cfg.base.min;
+    try {
+      min = await this.resolvePoolMin(owner, repo);
+    } catch (err) {
+      this.log(`registry: pool-min read failed for ${repoTag}, using default ${min}: ${err instanceof Error ? err.message : String(err)}`);
+    }
     const fly = new FlyClient({ token: flyToken, app: this.cfg.base.app });
     const pm = new PoolManager({
       fly,
-      config: { ...this.cfg.base, repoTag },
+      config: { ...this.cfg.base, repoTag, min },
       log: (m) => this.log(`[${repoTag}] ${m}`)
     });
     this.pools.set(repoTag, pm);
@@ -5279,7 +5325,10 @@ var PoolRegistry = class {
         owner,
         repo
       });
-      allSecrets = Object.fromEntries(Object.entries(vault).filter(([k]) => k !== "FLY_API_TOKEN"));
+      pm.setMin(parsePoolMin(vault[POOL_MIN_VAULT_KEY], this.cfg.base.min));
+      allSecrets = Object.fromEntries(
+        Object.entries(vault).filter(([k]) => k !== "FLY_API_TOKEN" && k !== POOL_MIN_VAULT_KEY)
+      );
     } catch (err) {
       this.log(`[${this.key(owner, repo)}] vault secrets read failed: ${err instanceof Error ? err.message : String(err)}`);
     }
@@ -5303,9 +5352,17 @@ var PoolRegistry = class {
   status(owner, repo) {
     return this.pools.get(this.key(owner, repo))?.status() ?? null;
   }
-  /** Resync every active repo pool (periodic self-heal). */
+  /** Resync every active repo pool (periodic self-heal). Also re-reads each
+   * repo's POOL_MIN from its vault so a dashboard resize warms up/drains within
+   * one tick — no owner restart needed. */
   async resyncAll() {
     for (const [repoTag, pm] of this.pools) {
+      const [owner, repo] = repoTag.split("/");
+      try {
+        pm.setMin(await this.resolvePoolMin(owner, repo));
+      } catch (err) {
+        this.log(`[${repoTag}] pool-min refresh: ${err instanceof Error ? err.message : String(err)}`);
+      }
       await pm.resync().catch((err) => this.log(`[${repoTag}] resync: ${err instanceof Error ? err.message : String(err)}`));
     }
   }

package/kody.config.schema.json

@@ -404,6 +404,22 @@
       },
       "additionalProperties": false
     },
+    "access": {
+      "type": "object",
+      "description": "Who may trigger kody via an @kody comment. Gates on the GitHub comment.author_association already present on the issue_comment event (no API call, no read:org token).",
+      "properties": {
+        "allowedAssociations": {
+          "type": "array",
+          "items": {
+            "type": "string",
+            "enum": ["OWNER", "MEMBER", "COLLABORATOR", "CONTRIBUTOR", "FIRST_TIME_CONTRIBUTOR", "FIRST_TIMER", "MANNEQUIN", "NONE"]
+          },
+          "description": "Allowlist of author_association values permitted to trigger kody. OMIT this key for the secure default — only the team (OWNER, MEMBER, COLLABORATOR) may trigger; public drive-by comments are silently ignored. A non-empty list overrides which associations are allowed. An explicit empty list ([]) DISABLES the gate (anyone may trigger). MEMBER applies only to org-owned repos; on a user-owned repo the owner is OWNER and invited people are COLLABORATOR.",
+          "default": ["OWNER", "MEMBER", "COLLABORATOR"]
+        }
+      },
+      "additionalProperties": false
+    },
     "qa": {
       "type": "object",
       "description": "qa-engineer defaults. Used by the resolveQaUrl preflight when no explicit --url is passed and no $PREVIEW_URL env var is set.",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kody-ade/kody-engine",
-  "version": "0.4.119",
+  "version": "0.4.121",
   "description": "kody — autonomous development engine. Single-session Claude Code agent behind a generic executor + declarative executable profiles.",
   "license": "MIT",
   "type": "module",
@@ -12,6 +12,23 @@
     "templates",
     "kody.config.schema.json"
   ],
+  "scripts": {
+    "kody:run": "tsx bin/kody.ts",
+    "serve": "tsx bin/kody.ts serve",
+    "serve:vscode": "tsx bin/kody.ts serve vscode",
+    "serve:claude": "tsx bin/kody.ts serve claude",
+    "build": "tsup && node scripts/copy-assets.cjs",
+    "check:modularity": "tsx scripts/check-script-modularity.ts",
+    "pretest": "pnpm check:modularity",
+    "test": "vitest run tests/unit tests/int --coverage",
+    "test:e2e": "vitest run tests/e2e --no-coverage",
+    "test:all": "vitest run tests --no-coverage",
+    "typecheck": "tsc --noEmit",
+    "lint": "biome check",
+    "lint:fix": "biome check --write",
+    "format": "biome format --write",
+    "prepublishOnly": "pnpm build"
+  },
   "dependencies": {
     "@actions/cache": "^6.0.0",
     "@anthropic-ai/claude-agent-sdk": "0.2.119",
@@ -20,6 +37,7 @@
   "devDependencies": {
     "@biomejs/biome": "^2.4.12",
     "@types/node": "^22.5.4",
+    "@vitest/coverage-v8": "^4.1.4",
     "tsup": "^8.5.1",
     "tsx": "^4.21.0",
     "typescript": "~5.7.0",
@@ -33,21 +51,5 @@
     "url": "git+https://github.com/aharonyaircohen/kody-engine.git"
   },
   "homepage": "https://github.com/aharonyaircohen/kody-engine",
-  "bugs": "https://github.com/aharonyaircohen/kody-engine/issues",
-  "scripts": {
-    "kody:run": "tsx bin/kody.ts",
-    "serve": "tsx bin/kody.ts serve",
-    "serve:vscode": "tsx bin/kody.ts serve vscode",
-    "serve:claude": "tsx bin/kody.ts serve claude",
-    "build": "tsup && node scripts/copy-assets.cjs",
-    "check:modularity": "tsx scripts/check-script-modularity.ts",
-    "pretest": "pnpm check:modularity",
-    "test": "vitest run tests/unit tests/int --no-coverage",
-    "test:e2e": "vitest run tests/e2e --no-coverage",
-    "test:all": "vitest run tests --no-coverage",
-    "typecheck": "tsc --noEmit",
-    "lint": "biome check",
-    "lint:fix": "biome check --write",
-    "format": "biome format --write"
-  }
-}
+  "bugs": "https://github.com/aharonyaircohen/kody-engine/issues"
+}

package/templates/kody.yml

@@ -90,4 +90,4 @@ jobs:
           INIT_MESSAGE:  ${{ inputs.message }}
           MODEL:         ${{ inputs.model }}
           DASHBOARD_URL: ${{ inputs.dashboardUrl }}
-        run: npx -y -p @kody-ade/kody-engine@0.4.119 kody-engine
+        run: npx -y -p @kody-ade/kody-engine@0.4.120 kody-engine