@kody-ade/kody-engine 0.4.174 → 0.4.177

package/dist/executables/job-tick/prompts/locked.md

@@ -0,0 +1,48 @@
+You are **{{workerTitle}}** (staff `{{workerSlug}}`), running duty **`{{jobSlug}}`** — *{{jobTitle}}* — in **locked-toolbox mode**.
+
+You have NO shell. You cannot run `gh`, edit files, or post raw comments. The only actions you can take this tick are the typed tools listed below, plus `submit_state` at the end. The duty body tells you *when* to use each tool; the tools themselves do the work.
+
+## Tools available this tick
+
+{{dutyToolsList}}
+- `submit_state` (always — call exactly once at the end)
+
+Anything not in that list does not exist for this tick. If the duty body asks for an action whose tool isn't listed, skip it and note the gap in your reasoning.
+
+## Who you are — staff persona (authoritative identity)
+
+{{workerPersona}}
+
+## The duty
+
+Slug **`{{jobSlug}}`** — assigned to staff **`{{workerSlug}}`**. The body is authoritative for *what* and *when*; re-read it every tick.
+
+**Operator handle.** Where the duty refers to "the operator," the `recommend_to_operator` tool already prepends this string: `{{mentions}}`. Never type it yourself.
+
+### Duty body
+
+{{jobIntent}}
+
+## Current state
+
+```json
+{{jobStateJson}}
+```
+
+`cursor` is your enum; `data` is your free-form bag (per-PR fingerprints, attempt counters, etc.); `done: true` ends an evergreen duty (don't set it unless the duty truly retires).
+
+## Tick procedure
+
+`forceRun = {{args.force}}` — when `true`, the operator clicked "Run now"; ignore any "skip if too recent" guard in the body.
+
+1. **Check `done`.** If prior state has `done: true`, call `submit_state` with the same state and stop.
+2. **Read the body's intent.** Decide what action(s) this tick needs.
+3. **Use tools** — only the ones in the palette above. Each tool returns structured JSON; read it and decide.
+4. **Persist with `submit_state`** as the LAST action. Carry prior `data` forward; mutate only what you acted on. This is the ONLY way the next tick sees your decisions.
+
+## Rules
+
+- One action per candidate per tick. The duty fires on its cadence; if there's more to do, the next tick will see the new state.
+- Honour the dedup ledger in `data`. If you already acted on a candidate with the same fingerprint, skip it.
+- Tools handle authorization and rate-limit considerations internally. Don't try to "be careful" by skipping work the body says to do — if a tool errors, surface it in your reasoning and move on.
+- You cannot post raw `@kody` comments. That ban is structural — the toolbox doesn't contain that affordance.

package/dist/executables/preview-build/profile.json

@@ -0,0 +1,61 @@
+{
+  "name": "preview-build",
+  "role": "utility",
+  "describe": "Build a per-PR preview image on the GHA runner, push to Fly's registry, spin up a per-PR Fly Machine, post the preview URL on the PR. Scripted (no agent) — fast and deterministic.",
+  "kind": "oneshot",
+  "inputs": [
+    {
+      "name": "pr",
+      "flag": "--pr",
+      "type": "int",
+      "required": true,
+      "describe": "PR number to build a preview for."
+    }
+  ],
+  "claudeCode": {
+    "model": "inherit",
+    "permissionMode": "default",
+    "maxTurns": null,
+    "maxThinkingTokens": null,
+    "systemPromptAppend": null,
+    "tools": [],
+    "hooks": [],
+    "skills": [],
+    "commands": [],
+    "subagents": [],
+    "plugins": [],
+    "mcpServers": []
+  },
+  "cliTools": [
+    {
+      "name": "docker",
+      "install": {
+        "required": true,
+        "checkCommand": "command -v docker"
+      },
+      "verify": "docker info",
+      "usage": "Builds the per-PR preview image and pushes it to Fly's registry. Available by default on ubuntu-latest GHA runners.",
+      "allowedUses": ["build", "push", "login"]
+    },
+    {
+      "name": "gh",
+      "install": {
+        "required": true,
+        "checkCommand": "command -v gh"
+      },
+      "verify": "gh auth status",
+      "usage": "Posts the preview-ready comment on the PR.",
+      "allowedUses": ["pr", "api"]
+    }
+  ],
+  "inputArtifacts": [],
+  "outputArtifacts": [],
+  "scripts": {
+    "preflight": [
+      {
+        "script": "runPreviewBuild"
+      }
+    ],
+    "postflight": []
+  }
+}

package/dist/scripts/preview-build-templates/default-Dockerfile.preview.dev

@@ -0,0 +1,43 @@
+# syntax=docker/dockerfile:1.7
+#
+# Bundled default Dockerfile.preview — DEV-MODE variant.
+#
+# Previews run `next dev`, NOT `next build` + `next start`. This skips
+# the 5–10 min webpack production compile entirely. Trade-offs:
+#   - First request to each route lags 2–5s (compile-on-demand)
+#   - Subsequent requests are fast
+#   - Memory hungry at runtime (webpack alive)
+# For PR previews this is the right trade — reviewers click a handful
+# of pages, never need prod optimizations. Production stays on Vercel.
+#
+# When BASE_IMAGE is set, deps are inherited from the per-repo base
+# image; the install layer just verifies the lockfile.
+
+ARG BASE_IMAGE=node:22-alpine
+
+FROM ${BASE_IMAGE}
+WORKDIR /app
+
+RUN corepack enable 2>/dev/null || true
+
+COPY package.json pnpm-lock.yaml* package-lock.json* yarn.lock* ./
+RUN --mount=type=cache,id=kp-pnpm-store,target=/root/.local/share/pnpm/store \
+    --mount=type=cache,id=kp-npm-cache,target=/root/.npm \
+    if [ -f pnpm-lock.yaml ]; then pnpm install --frozen-lockfile --ignore-scripts; \
+    elif [ -f package-lock.json ]; then npm ci --ignore-scripts; \
+    elif [ -f yarn.lock ]; then yarn install --frozen-lockfile --ignore-scripts; \
+    else npm install --ignore-scripts; fi
+
+# Overwrite source files with the PR's version. node_modules and any
+# prior .next directory from the base image are preserved as warm
+# caches for the dev server's first compile.
+COPY . ./
+RUN mkdir -p public
+
+ENV NEXT_TELEMETRY_DISABLED=1
+ENV NODE_ENV=development
+ENV PORT=8080
+ENV HOSTNAME=0.0.0.0
+
+EXPOSE 8080
+CMD ["sh", "-c", "if [ -f pnpm-lock.yaml ]; then pnpm exec next dev -H 0.0.0.0 -p 8080; else npx next dev -H 0.0.0.0 -p 8080; fi"]

package/dist/scripts/preview-build-templates/default-Dockerfile.preview.prod

@@ -0,0 +1,40 @@
+# syntax=docker/dockerfile:1.7
+#
+# Bundled default Dockerfile.preview — PROD-MODE variant.
+#
+# Runs `next build` + `next start` — same shape as Vercel. Slower
+# first build (~5–10 min webpack) but instant per-page response.
+# Pick this mode for repos where reviewers test production-only
+# behaviour (SSG, static optimization, edge runtime parity).
+
+ARG BASE_IMAGE=node:22-alpine
+
+FROM ${BASE_IMAGE}
+WORKDIR /app
+
+RUN corepack enable 2>/dev/null || true
+
+COPY package.json pnpm-lock.yaml* package-lock.json* yarn.lock* ./
+RUN --mount=type=cache,id=kp-pnpm-store,target=/root/.local/share/pnpm/store \
+    --mount=type=cache,id=kp-npm-cache,target=/root/.npm \
+    if [ -f pnpm-lock.yaml ]; then pnpm install --frozen-lockfile --ignore-scripts; \
+    elif [ -f package-lock.json ]; then npm ci --ignore-scripts; \
+    elif [ -f yarn.lock ]; then yarn install --frozen-lockfile --ignore-scripts; \
+    else npm install --ignore-scripts; fi
+
+COPY . ./
+RUN mkdir -p public
+
+ENV NEXT_TELEMETRY_DISABLED=1
+ENV NODE_ENV=production
+ENV PORT=8080
+ENV HOSTNAME=0.0.0.0
+ENV NODE_OPTIONS="--max-old-space-size=7168"
+
+RUN --mount=type=cache,id=kp-next-cache,target=/app/.next/cache \
+    if [ -f pnpm-lock.yaml ]; then pnpm exec next build; \
+    else npx next build; \
+    fi
+
+EXPOSE 8080
+CMD ["sh", "-c", "if [ -f pnpm-lock.yaml ]; then pnpm exec next start -H 0.0.0.0 -p 8080; else npx next start -H 0.0.0.0 -p 8080; fi"]

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kody-ade/kody-engine",
-  "version": "0.4.174",
+  "version": "0.4.177",
   "description": "kody — autonomous development engine. Single-session Claude Code agent behind a generic executor + declarative executable profiles.",
   "license": "MIT",
   "type": "module",