@kody-ade/kody-engine 0.4.271 → 0.4.273

package/dist/bin/kody.js

@@ -15,7 +15,7 @@ var init_package = __esm({
   "package.json"() {
     package_default = {
       name: "@kody-ade/kody-engine",
-      version: "0.4.271",
+      version: "0.4.273",
       description: "kody \u2014 autonomous development engine. Single-session Claude Code agent behind a generic executor + declarative executable profiles.",
       license: "MIT",
       type: "module",
@@ -2146,15 +2146,7 @@ function dispatchWorkflow(workflowFile, capability, issueNumber, repoSlug) {
     }
   }
   try {
-    gh([
-      "workflow",
-      "run",
-      workflowFile,
-      "-f",
-      `capability=${capability}`,
-      "-f",
-      `issue_number=${issueNumber}`
-    ]);
+    gh(["workflow", "run", workflowFile, "-f", `capability=${capability}`, "-f", `issue_number=${issueNumber}`]);
     return { ok: true };
   } catch (err) {
     return { ok: false, error: err instanceof Error ? err.message : String(err) };
@@ -2189,6 +2181,132 @@ function isDispatchGated(capability, mode) {
 function trustRefusal(capabilitySlug) {
   return `Not dispatched: capability \`${capabilitySlug ?? "?"}\` is in ASK mode (not trusted for autonomy). Do NOT retry the dispatch. Instead notify the operator (use recommend_to_operator, or rely on the tracking issue that already @-mentions them), then submit_state. To let this capability act on its own, grant it Auto on the dashboard Trust page.`;
 }
+function dashboardBaseUrl() {
+  const raw = process.env.KODY_CMS_DASHBOARD_URL?.trim() || process.env.KODY_DASHBOARD_URL?.trim() || process.env.DASHBOARD_URL?.trim() || "";
+  if (!raw) return null;
+  try {
+    const parsed = new URL(raw);
+    return parsed.origin;
+  } catch {
+    return null;
+  }
+}
+function dashboardCmsToken() {
+  return process.env.KODY_CMS_TOKEN?.trim() || process.env.KODY_DASHBOARD_TOKEN?.trim() || process.env.KODY_TOKEN?.trim() || process.env.GH_TOKEN?.trim() || process.env.GITHUB_TOKEN?.trim() || process.env.GH_PAT?.trim() || null;
+}
+function cmsHeaders(opts) {
+  const token = dashboardCmsToken();
+  const [owner, repo] = opts.repoSlug.split("/");
+  if (!token) {
+    return {
+      ok: false,
+      error: "missing_cms_token",
+      message: "Set KODY_CMS_TOKEN, KODY_DASHBOARD_TOKEN, KODY_TOKEN, GH_TOKEN, GITHUB_TOKEN, or GH_PAT."
+    };
+  }
+  if (!owner || !repo) {
+    return { ok: false, error: "invalid_repo", message: `Invalid repo slug: ${opts.repoSlug}` };
+  }
+  return {
+    ok: true,
+    headers: {
+      "Content-Type": "application/json",
+      "x-kody-token": token,
+      "x-kody-owner": owner,
+      "x-kody-repo": repo
+    }
+  };
+}
+async function callDashboardCms(opts, path49, init = {}) {
+  const baseUrl = dashboardBaseUrl();
+  if (!baseUrl) {
+    return {
+      ok: false,
+      error: "missing_dashboard_url",
+      message: "Set KODY_CMS_DASHBOARD_URL or KODY_DASHBOARD_URL to the Dashboard origin."
+    };
+  }
+  const headerResult = cmsHeaders(opts);
+  if (!headerResult.ok) return headerResult;
+  try {
+    const res = await fetch(`${baseUrl}${path49}`, {
+      ...init,
+      headers: {
+        ...headerResult.headers,
+        ...init.headers
+      }
+    });
+    const contentType = res.headers.get("content-type") ?? "";
+    const data = contentType.includes("application/json") ? await res.json().catch(() => null) : await res.text().catch(() => "");
+    if (!res.ok) {
+      return {
+        ok: false,
+        status: res.status,
+        error: stringFieldFromRecord(data, "error") ?? "cms_request_failed",
+        message: stringFieldFromRecord(data, "message") ?? `Dashboard CMS request failed with ${res.status}.`,
+        data
+      };
+    }
+    return { ok: true, status: res.status, data };
+  } catch (err) {
+    return {
+      ok: false,
+      error: "cms_request_error",
+      message: err instanceof Error ? err.message : String(err)
+    };
+  }
+}
+function cmsToolResponse(result) {
+  return {
+    content: [{ type: "text", text: JSON.stringify(result, null, 2) }],
+    ...result.ok ? {} : { isError: true }
+  };
+}
+function assertCmsWriteAllowed(opts) {
+  if (isDispatchGated(opts.capabilitySlug, readCapabilityTrustMode(opts.state, opts.repoSlug, opts.capabilitySlug))) {
+    return trustRefusal(opts.capabilitySlug);
+  }
+  return null;
+}
+function cmsQuery(args) {
+  const params = new URLSearchParams();
+  const q = stringArg(args.q);
+  if (q) params.set("q", q);
+  const limit = numberArg(args.limit);
+  if (limit !== void 0) params.set("limit", String(limit));
+  const offset = numberArg(args.offset);
+  if (offset !== void 0) params.set("offset", String(offset));
+  if (args.filters && typeof args.filters === "object" && !Array.isArray(args.filters)) {
+    params.set("filters", JSON.stringify(args.filters));
+  }
+  if (Array.isArray(args.sort)) {
+    const sort = args.sort.flatMap((entry) => {
+      if (!entry || typeof entry !== "object") return [];
+      const field = stringArg(entry.field);
+      if (!field) return [];
+      const direction = entry.direction === "asc" ? "asc" : "desc";
+      return [`${field}:${direction}`];
+    }).join(",");
+    if (sort) params.set("sort", sort);
+  }
+  const value = params.toString();
+  return value ? `?${value}` : "";
+}
+function stringArg(value) {
+  return typeof value === "string" ? value.trim() : "";
+}
+function numberArg(value) {
+  if (value === void 0 || value === null || value === "") return void 0;
+  const n = Number(value);
+  return Number.isFinite(n) ? n : void 0;
+}
+function documentArg(value) {
+  if (!value || typeof value !== "object" || Array.isArray(value)) return {};
+  return value;
+}
+function stringFieldFromRecord(value, field) {
+  return value && typeof value === "object" && !Array.isArray(value) && typeof value[field] === "string" ? String(value[field]) : void 0;
+}
 function capabilityToolDefinitions(opts) {
   const workflowFile = opts.workflowFile ?? "kody.yml";
   const listTool = {
@@ -2337,10 +2455,7 @@ function capabilityToolDefinitions(opts) {
     handler: async (args) => {
       const capability = String(args.capability ?? args.executable ?? "");
       const issueNumber = Number(args.issueNumber);
-      if (isDispatchGated(
-        capability,
-        readCapabilityTrustMode(opts.state, opts.repoSlug, opts.capabilitySlug)
-      )) {
+      if (isDispatchGated(capability, readCapabilityTrustMode(opts.state, opts.repoSlug, opts.capabilitySlug))) {
         return { content: [{ type: "text", text: trustRefusal(opts.capabilitySlug) }] };
       }
       const result = dispatchWorkflow(workflowFile, capability, issueNumber, opts.repoSlug);
@@ -2348,6 +2463,86 @@ function capabilityToolDefinitions(opts) {
       return { content: [{ type: "text", text }] };
     }
   };
+  const cmsListCollectionsTool = {
+    name: "cms_list_collections",
+    description: "List configured Dashboard CMS collections and their supported operations. Read-only.",
+    inputSchema: {},
+    handler: async () => cmsToolResponse(await callDashboardCms(opts, "/api/kody/cms"))
+  };
+  const cmsListDocumentsTool = {
+    name: "cms_list_documents",
+    description: "List or search Dashboard CMS documents from one configured collection. Read-only.",
+    inputSchema: {
+      collection: z2.string().min(1).describe("CMS collection name."),
+      q: z2.string().optional().describe("Optional search query."),
+      filters: z2.record(z2.string(), z2.unknown()).optional().describe("Optional filter object keyed by field."),
+      sort: z2.array(
+        z2.object({
+          field: z2.string().min(1),
+          direction: z2.enum(["asc", "desc"]).default("desc")
+        })
+      ).optional(),
+      limit: z2.number().int().min(1).max(100).optional(),
+      offset: z2.number().int().min(0).optional()
+    },
+    handler: async (args) => {
+      const collection = encodeURIComponent(stringArg(args.collection));
+      return cmsToolResponse(await callDashboardCms(opts, `/api/kody/cms/${collection}${cmsQuery(args)}`));
+    }
+  };
+  const cmsGetDocumentTool = {
+    name: "cms_get_document",
+    description: "Get one Dashboard CMS document by collection and id. Read-only.",
+    inputSchema: {
+      collection: z2.string().min(1).describe("CMS collection name."),
+      id: z2.string().min(1).describe("Document id.")
+    },
+    handler: async (args) => {
+      const collection = encodeURIComponent(stringArg(args.collection));
+      const id = encodeURIComponent(stringArg(args.id));
+      return cmsToolResponse(await callDashboardCms(opts, `/api/kody/cms/${collection}/${id}`));
+    }
+  };
+  const cmsCreateDocumentTool = {
+    name: "cms_create_document",
+    description: "Create one Dashboard CMS document when the capability is trusted and the CMS collection allows create.",
+    inputSchema: {
+      collection: z2.string().min(1).describe("CMS collection name."),
+      data: z2.record(z2.string(), z2.unknown()).describe("Document fields to create.")
+    },
+    handler: async (args) => {
+      const refusal = assertCmsWriteAllowed(opts);
+      if (refusal) return { content: [{ type: "text", text: refusal }] };
+      const collection = encodeURIComponent(stringArg(args.collection));
+      return cmsToolResponse(
+        await callDashboardCms(opts, `/api/kody/cms/${collection}`, {
+          method: "POST",
+          body: JSON.stringify(documentArg(args.data))
+        })
+      );
+    }
+  };
+  const cmsUpdateDocumentTool = {
+    name: "cms_update_document",
+    description: "Update one Dashboard CMS document when the capability is trusted and the CMS collection allows update.",
+    inputSchema: {
+      collection: z2.string().min(1).describe("CMS collection name."),
+      id: z2.string().min(1).describe("Document id."),
+      data: z2.record(z2.string(), z2.unknown()).describe("Partial document fields to update.")
+    },
+    handler: async (args) => {
+      const refusal = assertCmsWriteAllowed(opts);
+      if (refusal) return { content: [{ type: "text", text: refusal }] };
+      const collection = encodeURIComponent(stringArg(args.collection));
+      const id = encodeURIComponent(stringArg(args.id));
+      return cmsToolResponse(
+        await callDashboardCms(opts, `/api/kody/cms/${collection}/${id}`, {
+          method: "PATCH",
+          body: JSON.stringify(documentArg(args.data))
+        })
+      );
+    }
+  };
   return [
     listTool,
     syncTool,
@@ -2359,7 +2554,12 @@ function capabilityToolDefinitions(opts) {
     readThreadTool,
     ensureIssueTool,
     ensureCommentTool,
-    dispatchTool
+    dispatchTool,
+    cmsListCollectionsTool,
+    cmsListDocumentsTool,
+    cmsGetDocumentTool,
+    cmsCreateDocumentTool,
+    cmsUpdateDocumentTool
   ];
 }
 function buildCapabilityMcpServer(opts) {
@@ -2406,7 +2606,12 @@ var init_capabilityMcp = __esm({
       "read_thread",
       "ensure_issue",
       "ensure_comment",
-      "dispatch_workflow"
+      "dispatch_workflow",
+      "cms_list_collections",
+      "cms_list_documents",
+      "cms_get_document",
+      "cms_create_document",
+      "cms_update_document"
     ];
   }
 });
@@ -19470,7 +19675,15 @@ async function runCi(argv) {
   let manualWorkflowDispatch = false;
   let forceRunAction = null;
   let forceRunCliArgs = {};
-  if (!args.issueNumber && !autoFallback && eventName === "workflow_dispatch" && dispatchEventPath && fs45.existsSync(dispatchEventPath)) {
+  const envForceAction = (process.env.KODY_FORCE_ACTION ?? "").trim();
+  const envForceMessage = (process.env.KODY_FORCE_MESSAGE ?? "").trim();
+  if (!args.issueNumber && !autoFallback && envForceAction) {
+    forceRunAction = envForceAction;
+    if (envForceAction === "goal-manager" && envForceMessage) {
+      forceRunCliArgs = { goal: envForceMessage };
+    }
+  }
+  if (!args.issueNumber && !autoFallback && !forceRunAction && eventName === "workflow_dispatch" && dispatchEventPath && fs45.existsSync(dispatchEventPath)) {
     try {
       const evt = JSON.parse(fs45.readFileSync(dispatchEventPath, "utf-8"));
       const issueInput = parseInt(String(evt?.inputs?.issue_number ?? ""), 10);
@@ -22241,6 +22454,9 @@ function parseJob(body) {
   }
   if (typeof b.ref === "string" && b.ref.trim()) job.ref = b.ref.trim();
   if (typeof b.model === "string" && b.model.trim()) job.model = b.model.trim();
+  if (typeof b.reasoningEffort === "string" && b.reasoningEffort.trim()) job.reasoningEffort = b.reasoningEffort.trim();
+  if (typeof b.action === "string" && b.action.trim()) job.action = b.action.trim();
+  if (typeof b.message === "string" && b.message.trim()) job.message = b.message.trim();
   if (typeof b.sessionId === "string" && b.sessionId.trim()) job.sessionId = b.sessionId.trim();
   if (typeof b.dashboardUrl === "string" && b.dashboardUrl.trim()) job.dashboardUrl = b.dashboardUrl.trim();
   if (b.allSecrets && (typeof b.allSecrets === "object" || typeof b.allSecrets === "string")) {
@@ -22257,14 +22473,18 @@ async function defaultRunJob(job) {
   const allSecrets = typeof job.allSecrets === "string" ? job.allSecrets : JSON.stringify(job.allSecrets ?? {});
   const interactive = job.mode === "interactive";
   const scheduled = job.mode === "scheduled";
+  const runMode = interactive ? "interactive" : scheduled ? "scheduled" : "issue";
   const childEnv = {
     ...process.env,
     REPO: job.repo,
     REF: branch,
     GITHUB_TOKEN: job.githubToken,
+    KODY_RUN_MODE: runMode,
     // Scheduled mode drives the engine down the same path GitHub Actions' cron
     // takes (runScheduledFanOut → due capabilities/goals). Bare `kody` routes on this.
     ...scheduled ? { GITHUB_EVENT_NAME: "schedule" } : {},
+    ...job.action ? { KODY_FORCE_ACTION: job.action } : {},
+    ...job.message ? { KODY_FORCE_MESSAGE: job.message } : {},
     // GITHUB_REPOSITORY + GH_TOKEN are normally injected by GitHub Actions.
     // The engine's interactive mode needs GITHUB_REPOSITORY to resolve the
     // configured state repo and persist chat.ready / events (the durable signal
@@ -22272,13 +22492,14 @@ async function defaultRunJob(job) {
     // and the session never appears "ready". GH_TOKEN auths the `gh` CLI.
     GITHUB_REPOSITORY: job.repo,
     GH_TOKEN: job.githubToken,
-    // Issue mode bakes ISSUE_NUMBER → `kody run --issue N`. Interactive mode
-    // leaves it empty and sets SESSION_ID so the engine boots a chat session.
+    // Issue mode carries ISSUE_NUMBER. Interactive mode leaves it empty and
+    // sets SESSION_ID so the engine boots a chat session.
     ISSUE_NUMBER: interactive || scheduled ? "" : String(job.issueNumber),
     ALL_SECRETS: allSecrets,
     SESSION_ID: job.sessionId ?? "",
     DASHBOARD_URL: job.dashboardUrl ?? "",
     MODEL: job.model ?? "",
+    REASONING_EFFORT: job.reasoningEffort ?? "",
     ...interactive && job.idleExitMs ? { KODY_IDLE_EXIT_MS: String(job.idleExitMs) } : {},
     ...interactive && job.hardCapMs ? { KODY_HARD_CAP_MS: String(job.hardCapMs) } : {}
   };
@@ -22304,11 +22525,10 @@ async function defaultRunJob(job) {
   const authorEmail = process.env.GIT_AUTHOR_EMAIL ?? "kody-bot@users.noreply.github.com";
   await run("git", ["config", "user.name", authorName], workdir);
   await run("git", ["config", "user.email", authorEmail], workdir);
-  const runArgs = interactive || scheduled ? [] : ["run", "--issue", String(job.issueNumber)];
   const jobDesc = interactive ? `interactive session ${job.sessionId}` : scheduled ? "scheduled fan-out" : `running issue #${job.issueNumber}`;
   process.stdout.write(`[runner-serve] job ${job.jobId}: ${jobDesc}
 `);
-  const runCode = await run("kody", runArgs, workdir);
+  const runCode = await run("kody", [], workdir);
   process.stdout.write(`[runner-serve] job ${job.jobId}: finished (exit ${runCode})
 `);
   process.exit(runCode);
@@ -22698,6 +22918,25 @@ function formatMs(ms) {
 }
 
 // src/entry.ts
+function envRunMode(env = process.env) {
+  const result = { command: "help", errors: [] };
+  const mode = (env.KODY_RUN_MODE ?? "").trim().toLowerCase();
+  if (!mode) return null;
+  if (mode === "chat" || mode === "interactive") {
+    return { ...result, command: "chat", chatArgv: [] };
+  }
+  if (mode === "ci" || mode === "scheduled" || mode === "manual") {
+    return { ...result, command: "ci", ciArgv: [] };
+  }
+  if (mode === "issue") {
+    const issue = (env.ISSUE_NUMBER ?? "").trim();
+    if (!issue) {
+      return { ...result, errors: ["KODY_RUN_MODE=issue requires ISSUE_NUMBER"] };
+    }
+    return { ...result, command: "ci", ciArgv: ["--issue", issue] };
+  }
+  return { ...result, errors: [`unknown KODY_RUN_MODE: ${mode}`] };
+}
 var HELP_TEXT = `kody-engine \u2014 single-session autonomous engineer
 
 Usage:
@@ -22734,6 +22973,8 @@ Exit codes:
 function parseArgs(argv) {
   const result = { command: "help", errors: [] };
   if (argv.length === 0) {
+    const mode = envRunMode();
+    if (mode) return mode;
     if (process.env.SESSION_ID) return { ...result, command: "chat", chatArgv: [] };
     if (process.env.GITHUB_EVENT_NAME) return { ...result, command: "ci", ciArgv: [] };
     return result;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kody-ade/kody-engine",
-  "version": "0.4.271",
+  "version": "0.4.273",
   "description": "kody — autonomous development engine. Single-session Claude Code agent behind a generic executor + declarative executable profiles.",
   "license": "MIT",
   "type": "module",