@kody-ade/kody-engine 0.4.270 → 0.4.272

package/dist/bin/kody.js

@@ -15,7 +15,7 @@ var init_package = __esm({
   "package.json"() {
     package_default = {
       name: "@kody-ade/kody-engine",
-      version: "0.4.270",
+      version: "0.4.272",
       description: "kody \u2014 autonomous development engine. Single-session Claude Code agent behind a generic executor + declarative executable profiles.",
       license: "MIT",
       type: "module",
@@ -2146,15 +2146,7 @@ function dispatchWorkflow(workflowFile, capability, issueNumber, repoSlug) {
     }
   }
   try {
-    gh([
-      "workflow",
-      "run",
-      workflowFile,
-      "-f",
-      `capability=${capability}`,
-      "-f",
-      `issue_number=${issueNumber}`
-    ]);
+    gh(["workflow", "run", workflowFile, "-f", `capability=${capability}`, "-f", `issue_number=${issueNumber}`]);
     return { ok: true };
   } catch (err) {
     return { ok: false, error: err instanceof Error ? err.message : String(err) };
@@ -2189,6 +2181,132 @@ function isDispatchGated(capability, mode) {
 function trustRefusal(capabilitySlug) {
   return `Not dispatched: capability \`${capabilitySlug ?? "?"}\` is in ASK mode (not trusted for autonomy). Do NOT retry the dispatch. Instead notify the operator (use recommend_to_operator, or rely on the tracking issue that already @-mentions them), then submit_state. To let this capability act on its own, grant it Auto on the dashboard Trust page.`;
 }
+function dashboardBaseUrl() {
+  const raw = process.env.KODY_CMS_DASHBOARD_URL?.trim() || process.env.KODY_DASHBOARD_URL?.trim() || process.env.DASHBOARD_URL?.trim() || "";
+  if (!raw) return null;
+  try {
+    const parsed = new URL(raw);
+    return parsed.origin;
+  } catch {
+    return null;
+  }
+}
+function dashboardCmsToken() {
+  return process.env.KODY_CMS_TOKEN?.trim() || process.env.KODY_DASHBOARD_TOKEN?.trim() || process.env.KODY_TOKEN?.trim() || process.env.GH_TOKEN?.trim() || process.env.GITHUB_TOKEN?.trim() || process.env.GH_PAT?.trim() || null;
+}
+function cmsHeaders(opts) {
+  const token = dashboardCmsToken();
+  const [owner, repo] = opts.repoSlug.split("/");
+  if (!token) {
+    return {
+      ok: false,
+      error: "missing_cms_token",
+      message: "Set KODY_CMS_TOKEN, KODY_DASHBOARD_TOKEN, KODY_TOKEN, GH_TOKEN, GITHUB_TOKEN, or GH_PAT."
+    };
+  }
+  if (!owner || !repo) {
+    return { ok: false, error: "invalid_repo", message: `Invalid repo slug: ${opts.repoSlug}` };
+  }
+  return {
+    ok: true,
+    headers: {
+      "Content-Type": "application/json",
+      "x-kody-token": token,
+      "x-kody-owner": owner,
+      "x-kody-repo": repo
+    }
+  };
+}
+async function callDashboardCms(opts, path49, init = {}) {
+  const baseUrl = dashboardBaseUrl();
+  if (!baseUrl) {
+    return {
+      ok: false,
+      error: "missing_dashboard_url",
+      message: "Set KODY_CMS_DASHBOARD_URL or KODY_DASHBOARD_URL to the Dashboard origin."
+    };
+  }
+  const headerResult = cmsHeaders(opts);
+  if (!headerResult.ok) return headerResult;
+  try {
+    const res = await fetch(`${baseUrl}${path49}`, {
+      ...init,
+      headers: {
+        ...headerResult.headers,
+        ...init.headers
+      }
+    });
+    const contentType = res.headers.get("content-type") ?? "";
+    const data = contentType.includes("application/json") ? await res.json().catch(() => null) : await res.text().catch(() => "");
+    if (!res.ok) {
+      return {
+        ok: false,
+        status: res.status,
+        error: stringFieldFromRecord(data, "error") ?? "cms_request_failed",
+        message: stringFieldFromRecord(data, "message") ?? `Dashboard CMS request failed with ${res.status}.`,
+        data
+      };
+    }
+    return { ok: true, status: res.status, data };
+  } catch (err) {
+    return {
+      ok: false,
+      error: "cms_request_error",
+      message: err instanceof Error ? err.message : String(err)
+    };
+  }
+}
+function cmsToolResponse(result) {
+  return {
+    content: [{ type: "text", text: JSON.stringify(result, null, 2) }],
+    ...result.ok ? {} : { isError: true }
+  };
+}
+function assertCmsWriteAllowed(opts) {
+  if (isDispatchGated(opts.capabilitySlug, readCapabilityTrustMode(opts.state, opts.repoSlug, opts.capabilitySlug))) {
+    return trustRefusal(opts.capabilitySlug);
+  }
+  return null;
+}
+function cmsQuery(args) {
+  const params = new URLSearchParams();
+  const q = stringArg(args.q);
+  if (q) params.set("q", q);
+  const limit = numberArg(args.limit);
+  if (limit !== void 0) params.set("limit", String(limit));
+  const offset = numberArg(args.offset);
+  if (offset !== void 0) params.set("offset", String(offset));
+  if (args.filters && typeof args.filters === "object" && !Array.isArray(args.filters)) {
+    params.set("filters", JSON.stringify(args.filters));
+  }
+  if (Array.isArray(args.sort)) {
+    const sort = args.sort.flatMap((entry) => {
+      if (!entry || typeof entry !== "object") return [];
+      const field = stringArg(entry.field);
+      if (!field) return [];
+      const direction = entry.direction === "asc" ? "asc" : "desc";
+      return [`${field}:${direction}`];
+    }).join(",");
+    if (sort) params.set("sort", sort);
+  }
+  const value = params.toString();
+  return value ? `?${value}` : "";
+}
+function stringArg(value) {
+  return typeof value === "string" ? value.trim() : "";
+}
+function numberArg(value) {
+  if (value === void 0 || value === null || value === "") return void 0;
+  const n = Number(value);
+  return Number.isFinite(n) ? n : void 0;
+}
+function documentArg(value) {
+  if (!value || typeof value !== "object" || Array.isArray(value)) return {};
+  return value;
+}
+function stringFieldFromRecord(value, field) {
+  return value && typeof value === "object" && !Array.isArray(value) && typeof value[field] === "string" ? String(value[field]) : void 0;
+}
 function capabilityToolDefinitions(opts) {
   const workflowFile = opts.workflowFile ?? "kody.yml";
   const listTool = {
@@ -2337,10 +2455,7 @@ function capabilityToolDefinitions(opts) {
     handler: async (args) => {
       const capability = String(args.capability ?? args.executable ?? "");
       const issueNumber = Number(args.issueNumber);
-      if (isDispatchGated(
-        capability,
-        readCapabilityTrustMode(opts.state, opts.repoSlug, opts.capabilitySlug)
-      )) {
+      if (isDispatchGated(capability, readCapabilityTrustMode(opts.state, opts.repoSlug, opts.capabilitySlug))) {
         return { content: [{ type: "text", text: trustRefusal(opts.capabilitySlug) }] };
       }
       const result = dispatchWorkflow(workflowFile, capability, issueNumber, opts.repoSlug);
@@ -2348,6 +2463,86 @@ function capabilityToolDefinitions(opts) {
       return { content: [{ type: "text", text }] };
     }
   };
+  const cmsListCollectionsTool = {
+    name: "cms_list_collections",
+    description: "List configured Dashboard CMS collections and their supported operations. Read-only.",
+    inputSchema: {},
+    handler: async () => cmsToolResponse(await callDashboardCms(opts, "/api/kody/cms"))
+  };
+  const cmsListDocumentsTool = {
+    name: "cms_list_documents",
+    description: "List or search Dashboard CMS documents from one configured collection. Read-only.",
+    inputSchema: {
+      collection: z2.string().min(1).describe("CMS collection name."),
+      q: z2.string().optional().describe("Optional search query."),
+      filters: z2.record(z2.string(), z2.unknown()).optional().describe("Optional filter object keyed by field."),
+      sort: z2.array(
+        z2.object({
+          field: z2.string().min(1),
+          direction: z2.enum(["asc", "desc"]).default("desc")
+        })
+      ).optional(),
+      limit: z2.number().int().min(1).max(100).optional(),
+      offset: z2.number().int().min(0).optional()
+    },
+    handler: async (args) => {
+      const collection = encodeURIComponent(stringArg(args.collection));
+      return cmsToolResponse(await callDashboardCms(opts, `/api/kody/cms/${collection}${cmsQuery(args)}`));
+    }
+  };
+  const cmsGetDocumentTool = {
+    name: "cms_get_document",
+    description: "Get one Dashboard CMS document by collection and id. Read-only.",
+    inputSchema: {
+      collection: z2.string().min(1).describe("CMS collection name."),
+      id: z2.string().min(1).describe("Document id.")
+    },
+    handler: async (args) => {
+      const collection = encodeURIComponent(stringArg(args.collection));
+      const id = encodeURIComponent(stringArg(args.id));
+      return cmsToolResponse(await callDashboardCms(opts, `/api/kody/cms/${collection}/${id}`));
+    }
+  };
+  const cmsCreateDocumentTool = {
+    name: "cms_create_document",
+    description: "Create one Dashboard CMS document when the capability is trusted and the CMS collection allows create.",
+    inputSchema: {
+      collection: z2.string().min(1).describe("CMS collection name."),
+      data: z2.record(z2.string(), z2.unknown()).describe("Document fields to create.")
+    },
+    handler: async (args) => {
+      const refusal = assertCmsWriteAllowed(opts);
+      if (refusal) return { content: [{ type: "text", text: refusal }] };
+      const collection = encodeURIComponent(stringArg(args.collection));
+      return cmsToolResponse(
+        await callDashboardCms(opts, `/api/kody/cms/${collection}`, {
+          method: "POST",
+          body: JSON.stringify(documentArg(args.data))
+        })
+      );
+    }
+  };
+  const cmsUpdateDocumentTool = {
+    name: "cms_update_document",
+    description: "Update one Dashboard CMS document when the capability is trusted and the CMS collection allows update.",
+    inputSchema: {
+      collection: z2.string().min(1).describe("CMS collection name."),
+      id: z2.string().min(1).describe("Document id."),
+      data: z2.record(z2.string(), z2.unknown()).describe("Partial document fields to update.")
+    },
+    handler: async (args) => {
+      const refusal = assertCmsWriteAllowed(opts);
+      if (refusal) return { content: [{ type: "text", text: refusal }] };
+      const collection = encodeURIComponent(stringArg(args.collection));
+      const id = encodeURIComponent(stringArg(args.id));
+      return cmsToolResponse(
+        await callDashboardCms(opts, `/api/kody/cms/${collection}/${id}`, {
+          method: "PATCH",
+          body: JSON.stringify(documentArg(args.data))
+        })
+      );
+    }
+  };
   return [
     listTool,
     syncTool,
@@ -2359,7 +2554,12 @@ function capabilityToolDefinitions(opts) {
     readThreadTool,
     ensureIssueTool,
     ensureCommentTool,
-    dispatchTool
+    dispatchTool,
+    cmsListCollectionsTool,
+    cmsListDocumentsTool,
+    cmsGetDocumentTool,
+    cmsCreateDocumentTool,
+    cmsUpdateDocumentTool
   ];
 }
 function buildCapabilityMcpServer(opts) {
@@ -2406,7 +2606,12 @@ var init_capabilityMcp = __esm({
       "read_thread",
       "ensure_issue",
       "ensure_comment",
-      "dispatch_workflow"
+      "dispatch_workflow",
+      "cms_list_collections",
+      "cms_list_documents",
+      "cms_get_document",
+      "cms_create_document",
+      "cms_update_document"
     ];
   }
 });
@@ -9428,6 +9633,8 @@ function inferVerdictFromReviewText(body) {
   if (/\b(blocking|blocker|must fix|should not merge|regression|breaks|security risk)\b/i.test(body)) return "FAIL";
   if (/\b(actionable item|suggestions?|worth clarifying|worth checking|minor note|non-blocking|deserves a comment)\b/i.test(
     body
+  ) || /\b(improvement opportunit(?:y|ies)|more useful if|would be more useful|would be better|incomplete as standalone|leaving a gap)\b/i.test(
+    body
   )) {
     return "CONCERNS";
   }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kody-ade/kody-engine",
-  "version": "0.4.270",
+  "version": "0.4.272",
   "description": "kody — autonomous development engine. Single-session Claude Code agent behind a generic executor + declarative executable profiles.",
   "license": "MIT",
   "type": "module",