@kody-ade/kody-engine 0.4.202 → 0.4.203

package/dist/bin/kody.js

@@ -551,7 +551,9 @@ __export(dutyMcp_exports, {
   dispatchWorkflow: () => dispatchWorkflow,
   ensureComment: () => ensureComment,
   ensureIssue: () => ensureIssue,
-  readCheckRuns: () => readCheckRuns
+  parseDutyTrustMode: () => parseDutyTrustMode,
+  readCheckRuns: () => readCheckRuns,
+  readDutyTrustMode: () => readDutyTrustMode
 });
 import { createSdkMcpServer as createSdkMcpServer3, tool as tool3 } from "@anthropic-ai/claude-agent-sdk";
 import { z as z3 } from "zod";
@@ -645,6 +647,24 @@ function readLedger(label) {
     return { found: false, payload: { error: err instanceof Error ? err.message : String(err) } };
   }
 }
+function parseDutyTrustMode(rawJson, dutySlug) {
+  try {
+    const parsed = JSON.parse(rawJson);
+    return parsed?.duties?.[dutySlug]?.mode === "auto" ? "auto" : "ask";
+  } catch {
+    return "ask";
+  }
+}
+function readDutyTrustMode(repoSlug, dutySlug) {
+  if (!dutySlug) return "ask";
+  try {
+    const b64 = gh(["api", `repos/${repoSlug}/contents/${TRUST_FILE_PATH}?ref=${TRUST_STATE_BRANCH}`, "--jq", ".content"]);
+    const json = Buffer.from(b64.trim(), "base64").toString("utf-8");
+    return parseDutyTrustMode(json, dutySlug);
+  } catch {
+    return "ask";
+  }
+}
 function readCheckRuns(repoSlug, ref, ignoreNames) {
   const sha = gh(["api", `repos/${repoSlug}/commits/${ref}`, "--jq", ".sha"]).trim();
   const raw = gh([
@@ -703,6 +723,9 @@ function dispatchWorkflow(workflowFile, executable, issueNumber) {
     return { ok: false, error: err instanceof Error ? err.message : String(err) };
   }
 }
+function trustRefusal(dutySlug) {
+  return `Not dispatched: duty \`${dutySlug ?? "?"}\` is in ASK mode (not trusted for autonomy). Do NOT retry the dispatch. Instead notify the operator (use recommend_to_operator, or rely on the tracking issue that already @-mentions them), then submit_state. To let this duty act on its own, grant it Auto on the dashboard Trust page.`;
+}
 function buildDutyMcpServer(opts) {
   const workflowFile = opts.workflowFile ?? "kody.yml";
   const listTool = tool3(
@@ -728,6 +751,9 @@ function buildDutyMcpServer(opts) {
       pr: z3.number().int().positive().describe("PR number to repair.")
     },
     async (args) => {
+      if (readDutyTrustMode(opts.repoSlug, opts.dutySlug) !== "auto") {
+        return { content: [{ type: "text", text: trustRefusal(opts.dutySlug) }] };
+      }
       const result = dispatchVerb(workflowFile, verb, args.pr);
       const text = result.ok ? `Dispatched \`${verb}\` on PR #${args.pr}. The repair runs in its own workflow_dispatch \u2014 wait for the next tick to see the new headSha.` : `Dispatch failed for \`${verb}\` on PR #${args.pr}: ${result.error}`;
       return {
@@ -830,6 +856,9 @@ function buildDutyMcpServer(opts) {
       issueNumber: z3.number().int().positive().describe("Issue (or PR) number forwarded as issue_number.")
     },
     async (args) => {
+      if (readDutyTrustMode(opts.repoSlug, opts.dutySlug) !== "auto") {
+        return { content: [{ type: "text", text: trustRefusal(opts.dutySlug) }] };
+      }
       const result = dispatchWorkflow(workflowFile, args.executable, args.issueNumber);
       const text = result.ok ? `Dispatched \`${args.executable}\` on #${args.issueNumber} via workflow_dispatch.` : `Dispatch failed for \`${args.executable}\` on #${args.issueNumber}: ${result.error}`;
       return { content: [{ type: "text", text }] };
@@ -853,13 +882,15 @@ function buildDutyMcpServer(opts) {
   });
   return { server };
 }
-var FAIL_CONCLUSIONS, RUNNING_STATUSES, CHECK_FAIL_CONCLUSIONS, DEFAULT_IGNORE_CHECKS, trackMarker, commentMarker, DUTY_MCP_TOOL_NAMES;
+var FAIL_CONCLUSIONS, RUNNING_STATUSES, TRUST_FILE_PATH, TRUST_STATE_BRANCH, CHECK_FAIL_CONCLUSIONS, DEFAULT_IGNORE_CHECKS, trackMarker, commentMarker, DUTY_MCP_TOOL_NAMES;
 var init_dutyMcp = __esm({
   "src/dutyMcp.ts"() {
     "use strict";
     init_issue();
     FAIL_CONCLUSIONS = /* @__PURE__ */ new Set(["FAILURE", "TIMED_OUT", "ACTION_REQUIRED", "STARTUP_FAILURE", "CANCELLED"]);
     RUNNING_STATUSES = /* @__PURE__ */ new Set(["IN_PROGRESS", "QUEUED", "PENDING", "WAITING", "REQUESTED"]);
+    TRUST_FILE_PATH = ".kody/state/trust.json";
+    TRUST_STATE_BRANCH = "kody-state";
     CHECK_FAIL_CONCLUSIONS = /* @__PURE__ */ new Set(["FAILURE", "TIMED_OUT", "STARTUP_FAILURE", "ACTION_REQUIRED"]);
     DEFAULT_IGNORE_CHECKS = ["run", "kody", "job-tick", "goal-tick", "worker-ask", "chat"];
     trackMarker = (key) => `<!-- kody-track:${key} -->`;
@@ -1411,7 +1442,7 @@ var init_loadCoverageRules = __esm({
 // package.json
 var package_default = {
   name: "@kody-ade/kody-engine",
-  version: "0.4.202",
+  version: "0.4.203",
   description: "kody \u2014 autonomous development engine. Single-session Claude Code agent behind a generic executor + declarative executable profiles.",
   license: "MIT",
   type: "module",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kody-ade/kody-engine",
-  "version": "0.4.202",
+  "version": "0.4.203",
   "description": "kody — autonomous development engine. Single-session Claude Code agent behind a generic executor + declarative executable profiles.",
   "license": "MIT",
   "type": "module",
@@ -12,6 +12,25 @@
     "templates",
     "kody.config.schema.json"
   ],
+  "scripts": {
+    "kody:run": "tsx bin/kody.ts",
+    "serve": "tsx bin/kody.ts serve",
+    "serve:vscode": "tsx bin/kody.ts serve vscode",
+    "serve:claude": "tsx bin/kody.ts serve claude",
+    "build": "tsup && node scripts/copy-assets.cjs",
+    "check:modularity": "tsx scripts/check-script-modularity.ts",
+    "pretest": "pnpm check:modularity",
+    "test": "vitest run tests/unit tests/int --coverage",
+    "test:smoke": "vitest run tests/smoke --no-coverage",
+    "test:e2e": "vitest run tests/e2e --no-coverage",
+    "test:all": "vitest run tests --no-coverage",
+    "typecheck": "tsc --noEmit",
+    "lint": "biome check",
+    "lint:fix": "biome check --write",
+    "format": "biome format --write",
+    "brain:publish": "docker buildx build --platform linux/amd64 -f runner/Dockerfile.brain -t ghcr.io/${KODY_BRAIN_GHCR_OWNER:-aharonyaircohen}/kody-brain:latest --push runner",
+    "prepublishOnly": "pnpm typecheck && vitest run tests/unit tests/int --no-coverage && pnpm build"
+  },
   "dependencies": {
     "@actions/cache": "^6.0.0",
     "@anthropic-ai/claude-agent-sdk": "0.2.119",
@@ -34,23 +53,5 @@
     "url": "git+https://github.com/aharonyaircohen/kody-engine.git"
   },
   "homepage": "https://github.com/aharonyaircohen/kody-engine",
-  "bugs": "https://github.com/aharonyaircohen/kody-engine/issues",
-  "scripts": {
-    "kody:run": "tsx bin/kody.ts",
-    "serve": "tsx bin/kody.ts serve",
-    "serve:vscode": "tsx bin/kody.ts serve vscode",
-    "serve:claude": "tsx bin/kody.ts serve claude",
-    "build": "tsup && node scripts/copy-assets.cjs",
-    "check:modularity": "tsx scripts/check-script-modularity.ts",
-    "pretest": "pnpm check:modularity",
-    "test": "vitest run tests/unit tests/int --coverage",
-    "test:smoke": "vitest run tests/smoke --no-coverage",
-    "test:e2e": "vitest run tests/e2e --no-coverage",
-    "test:all": "vitest run tests --no-coverage",
-    "typecheck": "tsc --noEmit",
-    "lint": "biome check",
-    "lint:fix": "biome check --write",
-    "format": "biome format --write",
-    "brain:publish": "docker buildx build --platform linux/amd64 -f runner/Dockerfile.brain -t ghcr.io/${KODY_BRAIN_GHCR_OWNER:-aharonyaircohen}/kody-brain:latest --push runner"
-  }
-}
+  "bugs": "https://github.com/aharonyaircohen/kody-engine/issues"
+}