@kody-ade/kody-engine 0.4.223 → 0.4.224

package/dist/duties/npm-publish/duty.md

@@ -0,0 +1,17 @@
+# NPM Publish
+
+## Purpose
+
+Publish current `package.json` version to npm from the repository CI sandbox.
+
+## Requirements
+
+- Store npm automation token as `NPM_TOKEN` in `.kody/secrets.enc`.
+- Kody must load that secret into the `NPM_TOKEN` environment variable before the executable runs.
+- The executable must not read or decrypt `.kody/secrets.enc` directly.
+- Run only after version in `package.json` is ready to publish.
+
+## Instructions
+
+Use the `npm-publish` executable for the implementation details.
+The duty owns the public action name and the reason this action exists; the executable owns the method.

package/dist/duties/npm-publish/profile.json

@@ -0,0 +1,6 @@
+{
+  "name": "npm-publish",
+  "action": "npm-publish",
+  "executable": "npm-publish",
+  "describe": "Publish the current package.json version to npm."
+}

package/dist/executables/npm-publish/profile.json

@@ -0,0 +1,73 @@
+{
+  "name": "npm-publish",
+  "role": "utility",
+  "phase": "shipped",
+  "describe": "Publish the current package.json version to npm using NPM_TOKEN. No agent.",
+  "inputs": [
+    {
+      "name": "dry-run",
+      "flag": "--dry-run",
+      "type": "bool",
+      "required": false,
+      "describe": "Print the publish plan without requiring NPM_TOKEN or publishing."
+    },
+    {
+      "name": "tag",
+      "flag": "--tag",
+      "type": "string",
+      "required": false,
+      "describe": "npm dist-tag to publish under. Defaults to latest."
+    },
+    {
+      "name": "access",
+      "flag": "--access",
+      "type": "enum",
+      "values": ["public", "restricted"],
+      "required": false,
+      "describe": "npm package access. Defaults to public."
+    },
+    {
+      "name": "issue",
+      "flag": "--issue",
+      "type": "int",
+      "required": false,
+      "describe": "Issue/PR number to post terminal notice on."
+    }
+  ],
+  "claudeCode": {
+    "model": "inherit",
+    "permissionMode": "acceptEdits",
+    "maxTurns": 0,
+    "maxThinkingTokens": null,
+    "systemPromptAppend": null,
+    "tools": [],
+    "hooks": [],
+    "skills": [],
+    "commands": [],
+    "subagents": [],
+    "plugins": [],
+    "mcpServers": []
+  },
+  "cliTools": [],
+  "inputArtifacts": [],
+  "outputArtifacts": [],
+  "scripts": {
+    "preflight": [
+      { "script": "setCommentTarget", "with": { "type": "issue" } },
+      { "script": "loadTaskState" },
+      { "shell": "publish.sh", "timeoutSec": 900 },
+      { "script": "skipAgent" }
+    ],
+    "postflight": [
+      { "script": "recordOutcome" },
+      { "script": "saveTaskState" },
+      { "script": "notifyTerminal", "with": { "label": "npm publish" } }
+    ]
+  },
+  "output": {
+    "actionTypes": [
+      "NPM_PUBLISH_COMPLETED",
+      "NPM_PUBLISH_FAILED"
+    ]
+  }
+}

package/dist/executables/npm-publish/publish.sh

@@ -0,0 +1,93 @@
+#!/usr/bin/env bash
+#
+# npm-publish: publish the current package.json version to npm.
+#
+# Secrets:
+# - NPM_TOKEN must be present in the environment.
+#   Kody loads secrets before executables run; this script must not read or
+#   decrypt .kody/secrets.enc directly.
+#
+# Inputs:
+# - KODY_ARG_DRY_RUN true|false
+# - KODY_ARG_TAG npm dist-tag, default latest
+# - KODY_ARG_ACCESS public|restricted, default public
+#
+# Stdout markers:
+# - KODY_REASON=<text>
+# - KODY_SKIP_AGENT=true
+
+set -euo pipefail
+
+dry_run="${KODY_ARG_DRY_RUN:-false}"
+tag="${KODY_ARG_TAG:-latest}"
+access="${KODY_ARG_ACCESS:-public}"
+registry="${NPM_CONFIG_REGISTRY:-https://registry.npmjs.org/}"
+
+fail() {
+  echo "KODY_REASON=$1"
+  echo "KODY_SKIP_AGENT=true"
+  exit "${2:-1}"
+}
+
+json_eval() {
+  node -e "$1"
+}
+
+[[ -f package.json ]] || fail "npm publish: package.json not found" 99
+
+pkg_name="$(json_eval "const p=require('./package.json'); if(!p.name) process.exit(1); console.log(p.name)")" \
+  || fail "npm publish: package.json missing name" 99
+pkg_version="$(json_eval "const p=require('./package.json'); if(!p.version) process.exit(1); console.log(p.version)")" \
+  || fail "npm publish: package.json missing version" 99
+
+if [[ "$access" != "public" && "$access" != "restricted" ]]; then
+  fail "npm publish: --access must be public or restricted" 64
+fi
+
+echo "→ npm publish: ${pkg_name}@${pkg_version} tag=${tag} access=${access}"
+
+if [[ "$dry_run" == "true" ]]; then
+  echo "KODY_REASON=dry-run — would publish ${pkg_name}@${pkg_version} to npm with tag ${tag}"
+  echo "KODY_SKIP_AGENT=true"
+  exit 0
+fi
+
+[[ -n "${NPM_TOKEN:-}" ]] || fail "npm publish: missing NPM_TOKEN secret" 64
+
+tmp_npmrc="$(mktemp)"
+auth_host="${registry#http://}"
+auth_host="${auth_host#https://}"
+auth_host="${auth_host%/}"
+cleanup() {
+  rm -f "$tmp_npmrc"
+}
+trap cleanup EXIT
+
+chmod 600 "$tmp_npmrc"
+printf '%s\n' "registry=${registry}" >"$tmp_npmrc"
+printf '%s\n' "//${auth_host}/:_authToken=${NPM_TOKEN}" >>"$tmp_npmrc"
+
+export NODE_AUTH_TOKEN="$NPM_TOKEN"
+export NPM_CONFIG_USERCONFIG="$tmp_npmrc"
+export HUSKY=0
+export SKIP_HOOKS=1
+export CI="${CI:-1}"
+
+if npm view "${pkg_name}@${pkg_version}" version --registry "$registry" >/dev/null 2>&1; then
+  echo "KODY_REASON=${pkg_name}@${pkg_version} is already published"
+  echo "KODY_SKIP_AGENT=true"
+  exit 0
+fi
+
+publish_args=(publish --access "$access" --tag "$tag" --registry "$registry")
+
+if [[ -f pnpm-lock.yaml && -x "$(command -v pnpm)" ]]; then
+  echo " publish: pnpm ${publish_args[*]}"
+  pnpm "${publish_args[@]}"
+else
+  echo " publish: npm ${publish_args[*]}"
+  npm "${publish_args[@]}"
+fi
+
+echo "KODY_REASON=published ${pkg_name}@${pkg_version} to npm with tag ${tag}"
+echo "KODY_SKIP_AGENT=true"

package/dist/executables/release/release.sh

@@ -44,6 +44,7 @@ dry_run="${KODY_ARG_DRY_RUN:-false}"
 prefer="${KODY_ARG_PREFER:-}"
 
 default_branch="${KODY_CFG_GIT_DEFAULTBRANCH:-main}"
+release_branch="${KODY_CFG_RELEASE_RELEASEBRANCH:-}"
 notify_cmd="${KODY_CFG_RELEASE_NOTIFYCOMMAND:-}"
 notify_timeout_s=$(( ${KODY_CFG_RELEASE_TIMEOUTMS:-600000} / 1000 ))
 
@@ -68,6 +69,97 @@ if [[ ! -f package.json ]]; then
   exit 1
 fi
 
+read_pkg_version_from_ref() {
+  local ref="$1"
+  git show "${ref}:package.json" 2>/dev/null | node -e 'let s=""; process.stdin.on("data", c => s += c); process.stdin.on("end", () => { try { console.log(JSON.parse(s).version || "") } catch { process.exit(1) } })'
+}
+
+finish_release_with_deploy() {
+  local version="$1"
+  local tag="$2"
+  local release_url="${3:-}"
+
+  current_step="deploy"
+  set +e
+  deploy_pr_url=$(open_deploy_pr "$version" "$issue")
+  deploy_rc=$?
+  set -e
+  if [[ "$deploy_rc" -ne 0 ]]; then
+    echo "[release] deploy step failed (rc=${deploy_rc}) — published v${version} but ${default_branch}→${release_branch} promotion PR was not opened" >&2
+    echo "KODY_REASON=release v${version}: published, but ${default_branch}→${release_branch} deploy PR failed"
+    echo "RELEASE_TAG=${tag}"
+    [[ -n "$release_url" ]] && echo "RELEASE_URL=${release_url}"
+    echo "RELEASE_FAILED=true"
+    exit 1
+  fi
+  if [[ -z "$deploy_pr_url" ]]; then
+    echo " (deploy: no-op — single-branch repo)"
+  else
+    echo "✓ deploy: ${deploy_pr_url}"
+  fi
+
+  current_step="notify"
+  notify_status="skipped"
+  if [[ -n "$notify_cmd" ]]; then
+    cmd="${notify_cmd//\$VERSION/$version}"
+    cmd="${cmd//\$DEPLOY_PR_URL/${deploy_pr_url:-}}"
+    echo " notify: ${cmd}"
+    if timeout "$notify_timeout_s" bash -c "$cmd"; then
+      notify_status="ok"
+    else
+      notify_status="failed"
+      echo "[release] notifyCommand failed (non-fatal)" >&2
+    fi
+  fi
+
+  current_step="done"
+  [[ -n "$deploy_pr_url" ]] && echo "KODY_PR_URL=${deploy_pr_url}"
+  echo "RELEASE_TAG=${tag}"
+  [[ -n "$release_url" ]] && echo "RELEASE_URL=${release_url}"
+  [[ -n "$deploy_pr_url" ]] && echo "RELEASE_DEPLOY_PR=${deploy_pr_url}"
+  echo "KODY_REASON=release v${version} complete (notify=${notify_status})"
+  echo "RELEASE_COMPLETED=true"
+  echo "KODY_SKIP_AGENT=true"
+}
+
+resume_prepared_release_if_needed() {
+  [[ -n "$release_branch" && "$release_branch" != "$default_branch" ]] || return 1
+
+  current_step="resume-check"
+  git fetch origin "$default_branch" "$release_branch" --tags
+
+  local default_version release_version
+  default_version=$(read_pkg_version_from_ref "origin/${default_branch}" || echo "")
+  release_version=$(read_pkg_version_from_ref "origin/${release_branch}" || echo "")
+  [[ -n "$default_version" && -n "$release_version" ]] || return 1
+  [[ "$default_version" != "$release_version" ]] || return 1
+
+  local version="$default_version"
+  local tag="v${version}"
+  echo "→ release: resuming prepared ${tag}; ${default_branch} is not promoted to ${release_branch}"
+
+  current_step="publish"
+  git checkout "$default_branch"
+  git reset --hard "origin/$default_branch"
+
+  local publish_status release_url
+  publish_status=$(tag_and_publish "$version")
+  release_url=$(create_gh_release "$tag" || echo "")
+  echo "✓ publish: tag=${tag} status=${publish_status} release_url=${release_url:-<none>}"
+  if [[ "$publish_status" == "failed" ]]; then
+    echo "[release] publishCommand failed but tag + GH release exist" >&2
+    echo "KODY_REASON=tag + GH release created, but publishCommand failed"
+    echo "RELEASE_FAILED=true"
+    echo "KODY_SKIP_AGENT=true"
+    exit 1
+  fi
+
+  finish_release_with_deploy "$version" "$tag" "$release_url"
+  exit 0
+}
+
+resume_prepared_release_if_needed
+
 # ── 1. Prepare ────────────────────────────────────────────────────────────
 current_step="prepare"
 old_version=$(read_pkg_version)
@@ -134,50 +226,5 @@ if [[ "$publish_status" == "failed" ]]; then
   exit 1
 fi
 
-# ── 5. Deploy PR (default → release branch) ───────────────────────────────
-# Distinguish three outcomes: rc!=0 is a real failure (do NOT mask as no-op);
-# rc==0 + empty URL is a genuine single-branch no-op; rc==0 + URL is success.
-current_step="deploy"
-set +e
-deploy_pr_url=$(open_deploy_pr "$new_version" "$issue")
-deploy_rc=$?
-set -e
-release_branch="${KODY_CFG_RELEASE_RELEASEBRANCH:-}"
-if [[ "$deploy_rc" -ne 0 ]]; then
-  echo "[release] deploy step failed (rc=${deploy_rc}) — published v${new_version} but the ${default_branch}→${release_branch} promotion PR was not opened" >&2
-  echo "KODY_REASON=release v${new_version}: published, but the ${default_branch}→${release_branch} deploy PR failed"
-  echo "RELEASE_TAG=${tag}"
-  [[ -n "$release_url" ]] && echo "RELEASE_URL=${release_url}"
-  echo "RELEASE_FAILED=true"
-  exit 1
-fi
-if [[ -z "$deploy_pr_url" ]]; then
-  echo "  (deploy: no-op — single-branch repo)"
-else
-  echo "✓ deploy: ${deploy_pr_url}"
-fi
-
-# ── 6. Notify ─────────────────────────────────────────────────────────────
-current_step="notify"
-notify_status="skipped"
-if [[ -n "$notify_cmd" ]]; then
-  cmd="${notify_cmd//\$VERSION/$new_version}"
-  cmd="${cmd//\$DEPLOY_PR_URL/${deploy_pr_url:-}}"
-  echo "  notify: ${cmd}"
-  if timeout "$notify_timeout_s" bash -c "$cmd"; then
-    notify_status="ok"
-  else
-    notify_status="failed"
-    echo "[release] notifyCommand failed (non-fatal)" >&2
-  fi
-fi
-
-# ── 7. Done ───────────────────────────────────────────────────────────────
-current_step="done"
-[[ -n "$deploy_pr_url" ]] && echo "KODY_PR_URL=${deploy_pr_url}"
-echo "RELEASE_TAG=${tag}"
-[[ -n "$release_url" ]] && echo "RELEASE_URL=${release_url}"
-[[ -n "$deploy_pr_url" ]] && echo "RELEASE_DEPLOY_PR=${deploy_pr_url}"
-echo "KODY_REASON=release v${new_version} complete (notify=${notify_status})"
-echo "RELEASE_COMPLETED=true"
-echo "KODY_SKIP_AGENT=true"
+finish_release_with_deploy "$new_version" "$tag" "$release_url"
+exit 0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kody-ade/kody-engine",
-  "version": "0.4.223",
+  "version": "0.4.224",
   "description": "kody — autonomous development engine. Single-session Claude Code agent behind a generic executor + declarative executable profiles.",
   "license": "MIT",
   "type": "module",
@@ -12,6 +12,26 @@
     "templates",
     "kody.config.schema.json"
   ],
+  "scripts": {
+    "kody:run": "tsx bin/kody.ts",
+    "serve": "tsx bin/kody.ts serve",
+    "serve:vscode": "tsx bin/kody.ts serve vscode",
+    "serve:claude": "tsx bin/kody.ts serve claude",
+    "build": "tsup && node scripts/copy-assets.cjs",
+    "check:modularity": "tsx scripts/check-script-modularity.ts",
+    "pretest": "pnpm check:modularity",
+    "test": "vitest run tests/unit tests/int --coverage",
+    "posttest": "tsx scripts/check-coverage-floor.ts",
+    "test:smoke": "vitest run tests/smoke --no-coverage",
+    "test:e2e": "vitest run tests/e2e --no-coverage",
+    "test:all": "vitest run tests --no-coverage",
+    "typecheck": "tsc --noEmit",
+    "lint": "biome check",
+    "lint:fix": "biome check --write",
+    "format": "biome format --write",
+    "brain:publish": "docker buildx build --platform linux/amd64 -f runner/Dockerfile.brain -t ghcr.io/${KODY_BRAIN_GHCR_OWNER:-aharonyaircohen}/kody-brain:latest --push runner",
+    "prepublishOnly": "pnpm typecheck && vitest run tests/unit tests/int --no-coverage && pnpm build"
+  },
   "dependencies": {
     "@actions/cache": "^6.0.0",
     "@anthropic-ai/claude-agent-sdk": "0.2.119",
@@ -35,24 +55,5 @@
     "url": "git+https://github.com/aharonyaircohen/kody-engine.git"
   },
   "homepage": "https://github.com/aharonyaircohen/kody-engine",
-  "bugs": "https://github.com/aharonyaircohen/kody-engine/issues",
-  "scripts": {
-    "kody:run": "tsx bin/kody.ts",
-    "serve": "tsx bin/kody.ts serve",
-    "serve:vscode": "tsx bin/kody.ts serve vscode",
-    "serve:claude": "tsx bin/kody.ts serve claude",
-    "build": "tsup && node scripts/copy-assets.cjs",
-    "check:modularity": "tsx scripts/check-script-modularity.ts",
-    "pretest": "pnpm check:modularity",
-    "test": "vitest run tests/unit tests/int --coverage",
-    "posttest": "tsx scripts/check-coverage-floor.ts",
-    "test:smoke": "vitest run tests/smoke --no-coverage",
-    "test:e2e": "vitest run tests/e2e --no-coverage",
-    "test:all": "vitest run tests --no-coverage",
-    "typecheck": "tsc --noEmit",
-    "lint": "biome check",
-    "lint:fix": "biome check --write",
-    "format": "biome format --write",
-    "brain:publish": "docker buildx build --platform linux/amd64 -f runner/Dockerfile.brain -t ghcr.io/${KODY_BRAIN_GHCR_OWNER:-aharonyaircohen}/kody-brain:latest --push runner"
-  }
-}
+  "bugs": "https://github.com/aharonyaircohen/kody-engine/issues"
+}