@kody-ade/kody-engine 0.4.224 → 0.4.226

package/dist/executables/goal-scheduler/scheduler.sh

@@ -1,82 +0,0 @@
-#!/usr/bin/env bash
-#
-# goal-scheduler: enumerate every goal state file under .kody/goals/ and
-# dispatch goal-tick once for each whose state == "active". Runs as a
-# scheduled executable (cron `*/5 * * * *`). No agent.
-#
-# A failed individual tick logs and continues — one stuck goal must not
-# starve the rest.
-
-set -euo pipefail
-
-goals_dir=".kody/goals"
-
-# python3 parses each goal's state.json below. It is declared as a required
-# cliTool in profile.json, but guard here too: without this check a missing
-# interpreter silently makes EVERY goal read state="" → treated as inactive →
-# nothing ticks, reported as a misleading success. Fail loud instead.
-if ! command -v python3 >/dev/null 2>&1; then
-  echo "[goal-scheduler] FATAL: python3 not found on PATH (required to read goal state)" >&2
-  exit 1
-fi
-
-# Goal state lives on the dedicated `kody-state` branch, not the default branch
-# (keeps `chore(goals): …` churn out of code history). Materialize it into the
-# working tree so the glob below sees current state. Best-effort: `kody-state`
-# may not exist yet, or carry no goals — both fall through to the checks below.
-git fetch origin kody-state --quiet 2>/dev/null || true
-git checkout origin/kody-state -- "$goals_dir" 2>/dev/null || true
-
-if [ ! -d "$goals_dir" ]; then
-  echo "[goal-scheduler] no $goals_dir — nothing to schedule"
-  echo "KODY_SKIP_AGENT=true"
-  exit 0
-fi
-
-shopt -s nullglob
-state_files=("$goals_dir"/*/state.json)
-shopt -u nullglob
-
-if [ "${#state_files[@]}" = "0" ]; then
-  echo "[goal-scheduler] no goal state files yet"
-  echo "KODY_SKIP_AGENT=true"
-  exit 0
-fi
-
-active=0
-for state_file in "${state_files[@]}"; do
-  [ -f "$state_file" ] || continue
-  goal_id=$(basename "$(dirname "$state_file")")
-
-  state=$(python3 -c "import json,sys; print(json.load(open(sys.argv[1])).get('state',''))" "$state_file" 2>/dev/null || echo "")
-
-  if [ "$state" != "active" ]; then
-    continue
-  fi
-
-  active=$((active + 1))
-  echo "[goal-scheduler] → tick $goal_id"
-
-  # NOTE: the shared goal branch is created lazily by goal-tick at the moment
-  # it's about to dispatch the first task. Goals whose ticks never dispatch
-  # (e.g. all tasks closed as won't-fix, or every task carries goal-runner:failed)
-  # never spawn an orphan goal-<id> ref on origin. The trade-off vs. the prior
-  # eager creation: the goal branch's base is "origin/<defaultBranch> at first
-  # dispatch" rather than "origin/<defaultBranch> at goal activation", which
-  # is better for short-lived QA-style goals where main may have moved on.
-
-  # Run the tick. The published CLI bin is `kody-engine` (see package.json
-  # "bin") — NOT `kody`. Calling bare `kody` here failed with
-  # `kody: command not found`, so every active goal silently failed to
-  # advance. `kody-engine` is on PATH because the workflow invokes the
-  # engine via `npx -p @kody-ade/kody-engine ... kody-engine`, and child
-  # processes inherit that PATH. A non-zero exit logs and continues so one
-  # stuck goal doesn't starve the rest of the schedule.
-  if ! kody-engine goal-tick --goal "$goal_id"; then
-    echo "[goal-scheduler] tick $goal_id failed (continuing)"
-  fi
-done
-
-echo "[goal-scheduler] ticked $active active goal(s) of ${#state_files[@]} total"
-echo "KODY_SKIP_AGENT=true"
-exit 0

package/dist/executables/goal-tick/profile.json

@@ -1,69 +0,0 @@
-{
-  "name": "goal-tick",
-  "role": "primitive",
-  "describe": "One deterministic tick for one goal in the stacked-PR model: read .kody/goals/<id>/state.json, dispatch @kody on the next ready task (stacked on the leaf PR), or — when all tasks are done — finalize by preparing the leaf as a single review-ready PR (retarget to default branch, mark ready, close intermediate PRs/issues) and leave it OPEN for a human to merge. The engine never auto-merges. No agent.",
-  "kind": "oneshot",
-  "inputs": [
-    {
-      "name": "goal",
-      "flag": "--goal",
-      "type": "string",
-      "required": true,
-      "describe": "Goal id — directory name under .kody/goals/."
-    }
-  ],
-  "claudeCode": {
-    "model": "inherit",
-    "permissionMode": "default",
-    "maxTurns": 0,
-    "maxThinkingTokens": null,
-    "systemPromptAppend": null,
-    "tools": [],
-    "hooks": [],
-    "skills": [],
-    "commands": [],
-    "subagents": [],
-    "plugins": [],
-    "mcpServers": []
-  },
-  "cliTools": [
-    {
-      "name": "gh",
-      "install": {
-        "required": true,
-        "checkCommand": "command -v gh"
-      },
-      "verify": "gh auth status",
-      "usage": "Read goal-labelled tasks, list stacked PRs, dispatch @kody, and squash-merge the leaf on finalize.",
-      "allowedUses": ["issue", "pr", "api"]
-    }
-  ],
-  "inputArtifacts": [],
-  "outputArtifacts": [],
-  "scripts": {
-    "preflight": [
-      { "script": "loadGoalState" },
-      {
-        "script": "handleAbandonedGoal",
-        "runWhen": { "data.goal.state": "abandoned" }
-      },
-      {
-        "script": "deriveGoalPhase",
-        "runWhen": { "data.goal.state": "active" }
-      },
-      {
-        "script": "finalizeGoal",
-        "runWhen": { "data.goal.phase": "all-done" }
-      },
-      {
-        "script": "dispatchNextTask",
-        "runWhen": { "data.goal.phase": "ready-to-dispatch" }
-      },
-      { "script": "saveGoalState" },
-      { "script": "skipAgent" }
-    ],
-    "postflight": [
-      { "script": "commitGoalState" }
-    ]
-  }
-}

package/dist/executables/init/profile.json

@@ -1,36 +0,0 @@
-{
-  "name": "init",
-  "role": "utility",
-  "describe": "Scaffold a consumer repo with kody.config.json and the @kody workflow. No agent.",
-  "inputs": [
-    {
-      "name": "force",
-      "flag": "--force",
-      "type": "bool",
-      "required": false,
-      "describe": "Overwrite existing files instead of skipping them."
-    }
-  ],
-  "claudeCode": {
-    "model": "inherit",
-    "permissionMode": "acceptEdits",
-    "maxTurns": null,
-    "systemPromptAppend": null,
-    "tools": [],
-    "hooks": [],
-    "skills": [],
-    "commands": [],
-    "subagents": [],
-    "plugins": [],
-    "mcpServers": []
-  },
-  "cliTools": [],
-  "scripts": {
-    "preflight": [
-      {
-        "script": "initFlow"
-      }
-    ],
-    "postflight": []
-  }
-}

package/dist/executables/job-live-verify/profile.json

@@ -1,36 +0,0 @@
-{
-  "name": "job-live-verify",
-  "role": "primitive",
-  "describe": "Live-test executable that verifies job reference injection, staff persona injection, synthetic skill loading, locked duty tools, and state postflight.",
-  "kind": "oneshot",
-  "dutyTools": ["ensure_issue", "ensure_comment"],
-  "inputs": [],
-  "claudeCode": {
-    "model": "inherit",
-    "permissionMode": "default",
-    "maxTurns": 20,
-    "maxThinkingTokens": null,
-    "maxTurnTimeoutSec": 180,
-    "systemPromptAppend": "You are running Kody's job-wiring live verification. Use the requested tools, then submit state exactly once.",
-    "enableSubmitTool": true,
-    "tools": ["Read"],
-    "hooks": [],
-    "skills": ["kody-live-marker"],
-    "commands": [],
-    "subagents": [],
-    "plugins": [],
-    "mcpServers": []
-  },
-  "cliTools": [],
-  "scripts": {
-    "preflight": [
-      { "script": "loadDutyState" },
-      { "script": "buildSyntheticPlugin" },
-      { "script": "composePrompt" }
-    ],
-    "postflight": [
-      { "script": "parseJobStateFromAgentResult", "with": { "fenceLabel": "kody-job-next-state" } },
-      { "script": "writeJobStateFile" }
-    ]
-  }
-}

package/dist/executables/job-live-verify/prompt.md

@@ -1,42 +0,0 @@
-You are Kody's live job-wiring verification agent.
-
-Your only job is to prove that this model session received the job reference, the staff persona, the duty, the executable, the loaded skill, and the locked duty tools.
-
-## Evidence to collect
-
-1. Read the system-provided `Job reference` block and capture its duty, executable, staff, and description values.
-2. Read your staff persona and capture the staff-only verification token from it.
-3. Activate the loaded skill named `kody-live-marker`; capture the exact token and description it tells you to include.
-4. Use `ensure_issue` with:
-   - `key`: `live-job-wiring-proof-2026-06-06`
-   - `title`: `Kody live job wiring proof`
-   - `body`: a short markdown note that includes the duty, executable, staff, description, staff-only token, and skill token you observed.
-5. Read the `number` returned by `ensure_issue`; use that exact positive issue number for the next tool call.
-6. Use `ensure_comment` on that issue with:
-   - `key`: `live-job-wiring-proof-comment-2026-06-06`
-   - `body`: one markdown line beginning `live job wiring proof:` and including the same observed values.
-7. Call `submit_state` exactly once, as your final action.
-
-## State to submit
-
-Submit:
-
-- `cursor`: `verified`
-- `done`: `true`
-- `data`: an object containing:
-  - `duty`
-  - `executable`
-  - `staff`
-  - `description`
-  - `staffToken`
-  - `skillToken`
-  - `skillDescription`
-  - `issueNumber`
-  - `commentStatus`: `posted` when `ensure_comment` returns `posted: true`, or `already-existed` when it returns `posted: false`
-  - `toolsUsed`, exactly `["ensure_issue", "ensure_comment", "submit_state"]`
-
-## Rules
-
-- Do not use shell, git, or file editing.
-- If a value is missing, write `MISSING` for that value and still submit state.
-- The proof is the tool calls plus submitted state; no prose summary is needed after `submit_state`.

package/dist/executables/merge/profile.json

@@ -1,54 +0,0 @@
-{
-  "name": "merge",
-  "role": "primitive",
-  "kind": "oneshot",
-  "describe": "Self-gating squash-merge of an open PR into its base. Deterministic, no agent: merges only when GitHub reports the PR CLEAN (mergeable + required checks/reviews satisfied); otherwise refuses and comments why. Used by the CTO qa-merge duty once a QA-goal PR has graduated.",
-  "inputs": [
-    {
-      "name": "pr",
-      "flag": "--pr",
-      "type": "int",
-      "required": true,
-      "describe": "GitHub PR number to merge. No-op (MERGE_SKIPPED) if already closed/merged; refuses (MERGE_BLOCKED) if draft, conflicting, or not yet CLEAN."
-    }
-  ],
-  "claudeCode": {
-    "model": "inherit",
-    "permissionMode": "default",
-    "maxTurns": null,
-    "maxThinkingTokens": null,
-    "systemPromptAppend": null,
-    "tools": [],
-    "hooks": [],
-    "skills": [],
-    "commands": [],
-    "subagents": [],
-    "plugins": [],
-    "mcpServers": []
-  },
-  "cliTools": [
-    {
-      "name": "gh",
-      "install": {
-        "required": true,
-        "checkCommand": "command -v gh"
-      },
-      "verify": "gh auth status",
-      "usage": "Reads PR mergeability (`gh pr view --json`) and merges (`gh pr merge --squash --delete-branch`).",
-      "allowedUses": ["pr", "api"]
-    }
-  ],
-  "inputArtifacts": [],
-  "outputArtifacts": [],
-  "scripts": {
-    "preflight": [
-      {
-        "script": "mergeFlow"
-      }
-    ],
-    "postflight": []
-  },
-  "output": {
-    "actionTypes": ["MERGE_COMPLETED", "MERGE_BLOCKED", "MERGE_SKIPPED"]
-  }
-}

package/dist/executables/npm-publish/profile.json

@@ -1,73 +0,0 @@
-{
-  "name": "npm-publish",
-  "role": "utility",
-  "phase": "shipped",
-  "describe": "Publish the current package.json version to npm using NPM_TOKEN. No agent.",
-  "inputs": [
-    {
-      "name": "dry-run",
-      "flag": "--dry-run",
-      "type": "bool",
-      "required": false,
-      "describe": "Print the publish plan without requiring NPM_TOKEN or publishing."
-    },
-    {
-      "name": "tag",
-      "flag": "--tag",
-      "type": "string",
-      "required": false,
-      "describe": "npm dist-tag to publish under. Defaults to latest."
-    },
-    {
-      "name": "access",
-      "flag": "--access",
-      "type": "enum",
-      "values": ["public", "restricted"],
-      "required": false,
-      "describe": "npm package access. Defaults to public."
-    },
-    {
-      "name": "issue",
-      "flag": "--issue",
-      "type": "int",
-      "required": false,
-      "describe": "Issue/PR number to post terminal notice on."
-    }
-  ],
-  "claudeCode": {
-    "model": "inherit",
-    "permissionMode": "acceptEdits",
-    "maxTurns": 0,
-    "maxThinkingTokens": null,
-    "systemPromptAppend": null,
-    "tools": [],
-    "hooks": [],
-    "skills": [],
-    "commands": [],
-    "subagents": [],
-    "plugins": [],
-    "mcpServers": []
-  },
-  "cliTools": [],
-  "inputArtifacts": [],
-  "outputArtifacts": [],
-  "scripts": {
-    "preflight": [
-      { "script": "setCommentTarget", "with": { "type": "issue" } },
-      { "script": "loadTaskState" },
-      { "shell": "publish.sh", "timeoutSec": 900 },
-      { "script": "skipAgent" }
-    ],
-    "postflight": [
-      { "script": "recordOutcome" },
-      { "script": "saveTaskState" },
-      { "script": "notifyTerminal", "with": { "label": "npm publish" } }
-    ]
-  },
-  "output": {
-    "actionTypes": [
-      "NPM_PUBLISH_COMPLETED",
-      "NPM_PUBLISH_FAILED"
-    ]
-  }
-}

package/dist/executables/npm-publish/publish.sh

@@ -1,93 +0,0 @@
-#!/usr/bin/env bash
-#
-# npm-publish: publish the current package.json version to npm.
-#
-# Secrets:
-# - NPM_TOKEN must be present in the environment.
-#   Kody loads secrets before executables run; this script must not read or
-#   decrypt .kody/secrets.enc directly.
-#
-# Inputs:
-# - KODY_ARG_DRY_RUN true|false
-# - KODY_ARG_TAG npm dist-tag, default latest
-# - KODY_ARG_ACCESS public|restricted, default public
-#
-# Stdout markers:
-# - KODY_REASON=<text>
-# - KODY_SKIP_AGENT=true
-
-set -euo pipefail
-
-dry_run="${KODY_ARG_DRY_RUN:-false}"
-tag="${KODY_ARG_TAG:-latest}"
-access="${KODY_ARG_ACCESS:-public}"
-registry="${NPM_CONFIG_REGISTRY:-https://registry.npmjs.org/}"
-
-fail() {
-  echo "KODY_REASON=$1"
-  echo "KODY_SKIP_AGENT=true"
-  exit "${2:-1}"
-}
-
-json_eval() {
-  node -e "$1"
-}
-
-[[ -f package.json ]] || fail "npm publish: package.json not found" 99
-
-pkg_name="$(json_eval "const p=require('./package.json'); if(!p.name) process.exit(1); console.log(p.name)")" \
-  || fail "npm publish: package.json missing name" 99
-pkg_version="$(json_eval "const p=require('./package.json'); if(!p.version) process.exit(1); console.log(p.version)")" \
-  || fail "npm publish: package.json missing version" 99
-
-if [[ "$access" != "public" && "$access" != "restricted" ]]; then
-  fail "npm publish: --access must be public or restricted" 64
-fi
-
-echo "→ npm publish: ${pkg_name}@${pkg_version} tag=${tag} access=${access}"
-
-if [[ "$dry_run" == "true" ]]; then
-  echo "KODY_REASON=dry-run — would publish ${pkg_name}@${pkg_version} to npm with tag ${tag}"
-  echo "KODY_SKIP_AGENT=true"
-  exit 0
-fi
-
-[[ -n "${NPM_TOKEN:-}" ]] || fail "npm publish: missing NPM_TOKEN secret" 64
-
-tmp_npmrc="$(mktemp)"
-auth_host="${registry#http://}"
-auth_host="${auth_host#https://}"
-auth_host="${auth_host%/}"
-cleanup() {
-  rm -f "$tmp_npmrc"
-}
-trap cleanup EXIT
-
-chmod 600 "$tmp_npmrc"
-printf '%s\n' "registry=${registry}" >"$tmp_npmrc"
-printf '%s\n' "//${auth_host}/:_authToken=${NPM_TOKEN}" >>"$tmp_npmrc"
-
-export NODE_AUTH_TOKEN="$NPM_TOKEN"
-export NPM_CONFIG_USERCONFIG="$tmp_npmrc"
-export HUSKY=0
-export SKIP_HOOKS=1
-export CI="${CI:-1}"
-
-if npm view "${pkg_name}@${pkg_version}" version --registry "$registry" >/dev/null 2>&1; then
-  echo "KODY_REASON=${pkg_name}@${pkg_version} is already published"
-  echo "KODY_SKIP_AGENT=true"
-  exit 0
-fi
-
-publish_args=(publish --access "$access" --tag "$tag" --registry "$registry")
-
-if [[ -f pnpm-lock.yaml && -x "$(command -v pnpm)" ]]; then
-  echo " publish: pnpm ${publish_args[*]}"
-  pnpm "${publish_args[@]}"
-else
-  echo " publish: npm ${publish_args[*]}"
-  npm "${publish_args[@]}"
-fi
-
-echo "KODY_REASON=published ${pkg_name}@${pkg_version} to npm with tag ${tag}"
-echo "KODY_SKIP_AGENT=true"

package/dist/executables/plan-verify/profile.json

@@ -1,38 +0,0 @@
-{
-  "name": "plan-verify",
-  "role": "utility",
-  "describe": "Live-test executable. Loads kody-live-marker skill, /kody-live-probe command, kody-live-trace hook, and the bundled test-plugin. Asks the agent to emit confirmation tokens for each feature so Kody can validate plugin wiring end-to-end.",
-  "inputs": [
-    { "name": "issue", "flag": "--issue", "type": "int", "required": true, "describe": "GitHub issue number to verify against." }
-  ],
-  "claudeCode": {
-    "model": "inherit",
-    "permissionMode": "default",
-    "maxTurns": 15,
-    "systemPromptAppend": "You are running Kody's plugin-wiring live verification. Emit confirmation tokens exactly as the prompt instructs.",
-    "tools": ["Read", "Grep", "Glob", "Bash"],
-    "hooks": ["kody-live-trace"],
-    "skills": ["kody-live-marker"],
-    "commands": ["kody-live-probe"],
-    "subagents": [],
-    "plugins": ["../../plugins/test-plugin"],
-    "mcpServers": []
-  },
-  "cliTools": [],
-  "scripts": {
-    "preflight": [
-      { "script": "loadIssueContext" },
-      { "script": "loadTaskState" },
-      { "script": "buildSyntheticPlugin" },
-      { "script": "composePrompt" }
-    ],
-    "postflight": [
-      { "script": "parseAgentResult" },
-      { "script": "writeRunSummary" },
-      { "script": "saveTaskState" }
-    ]
-  },
-  "output": {
-    "actionTypes": ["VERIFY_COMPLETED", "VERIFY_FAILED"]
-  }
-}

package/dist/executables/plan-verify/prompt.md

@@ -1,72 +0,0 @@
-You are Kody's plugin-wiring live verification agent. Your ONLY job is to prove that each of the four extension mechanisms (plugins, skills, commands, hooks) is successfully loaded into your session. Do NOT address the issue's actual work.
-
-Issue #{{issue.number}}: {{issue.title}}
-
----
-
-# What to do, in order
-
-Perform these four checks, then emit the final report.
-
-## Check 1 — Plugin
-
-Look at your available skills. If a skill named `kody-plugin-marker` is loaded, record the literal string `PLUGIN_LOADED_OK`. Otherwise record `MISSING`.
-
-## Check 2 — Skill
-
-Look at your available skills. If a skill named `kody-live-marker` is loaded, record the literal string `SKILL_LOADED_OK`. Otherwise record `MISSING`.
-
-## Check 3 — Command
-
-Look at your available slash commands. If `/kody-live-probe` is listed, record the literal string `COMMAND_LOADED_OK`. Otherwise record `MISSING`.
-
-## Check 4 — Hook
-
-Run these Bash steps, in order:
-
-1. `rm -f /tmp/kody-hook-signal.txt`
-2. Use the Read tool to read `README.md` (or any file). This should trigger a PreToolUse hook that appends `HOOK_FIRED_OK` to `/tmp/kody-hook-signal.txt`.
-3. `cat /tmp/kody-hook-signal.txt`
-
-If step 3 prints a line containing `HOOK_FIRED_OK`, record `HOOK_FIRED_OK`. Otherwise record `MISSING`.
-
----
-
-# Output
-
-Your FINAL message must use this exact structure. Replace each `<...>` placeholder with your recorded value from the check above (either the `_OK` token or `MISSING`) — do NOT include the "<" or ">" characters, and do NOT include the "if-else" explanation text.
-
-```
-DONE
-COMMIT_MSG: verify: plugin-wiring live check for #{{issue.number}}
-PR_SUMMARY:
-# Plugin-Wiring Verification Report
-
-- Plugin: <check-1-value>
-- Skill: <check-2-value>
-- Command: <check-3-value>
-- Hook: <check-4-value>
-```
-
-Example of a valid filled-in output (if all four worked):
-
-```
-DONE
-COMMIT_MSG: verify: plugin-wiring live check for #{{issue.number}}
-PR_SUMMARY:
-# Plugin-Wiring Verification Report
-
-- Plugin: PLUGIN_LOADED_OK
-- Skill: SKILL_LOADED_OK
-- Command: COMMAND_LOADED_OK
-- Hook: HOOK_FIRED_OK
-```
-
----
-
-# Rules
-
-- Read-only. Do NOT modify any file.
-- Do NOT run git or gh.
-- Do NOT perform the issue's actual work.
-- Emit the final report even if some checks report `MISSING` — the whole point is to learn which mechanisms work.

package/dist/executables/preview-build/profile.json

@@ -1,61 +0,0 @@
-{
-  "name": "preview-build",
-  "role": "utility",
-  "describe": "Build a per-PR preview image on the GHA runner, push to Fly's registry, spin up a per-PR Fly Machine, post the preview URL on the PR. Scripted (no agent) — fast and deterministic.",
-  "kind": "oneshot",
-  "inputs": [
-    {
-      "name": "pr",
-      "flag": "--pr",
-      "type": "int",
-      "required": true,
-      "describe": "PR number to build a preview for."
-    }
-  ],
-  "claudeCode": {
-    "model": "inherit",
-    "permissionMode": "default",
-    "maxTurns": null,
-    "maxThinkingTokens": null,
-    "systemPromptAppend": null,
-    "tools": [],
-    "hooks": [],
-    "skills": [],
-    "commands": [],
-    "subagents": [],
-    "plugins": [],
-    "mcpServers": []
-  },
-  "cliTools": [
-    {
-      "name": "docker",
-      "install": {
-        "required": true,
-        "checkCommand": "command -v docker"
-      },
-      "verify": "docker info",
-      "usage": "Builds the per-PR preview image and pushes it to Fly's registry. Available by default on ubuntu-latest GHA runners.",
-      "allowedUses": ["build", "push", "login"]
-    },
-    {
-      "name": "gh",
-      "install": {
-        "required": true,
-        "checkCommand": "command -v gh"
-      },
-      "verify": "gh auth status",
-      "usage": "Posts the preview-ready comment on the PR.",
-      "allowedUses": ["pr", "api"]
-    }
-  ],
-  "inputArtifacts": [],
-  "outputArtifacts": [],
-  "scripts": {
-    "preflight": [
-      {
-        "script": "runPreviewBuild"
-      }
-    ],
-    "postflight": []
-  }
-}