@kody-ade/kody-engine 0.4.305 → 0.4.306

package/dist/bin/kody.js

@@ -15,7 +15,7 @@ var init_package = __esm({
   "package.json"() {
     package_default = {
       name: "@kody-ade/kody-engine",
-      version: "0.4.305",
+      version: "0.4.306",
       description: "kody \u2014 autonomous development engine. Single-session Claude Code agent behind a generic executor + declarative executable profiles.",
       license: "MIT",
       type: "module",
@@ -1914,6 +1914,7 @@ function parseCapabilityConfig(raw) {
     mentions: stringList(raw.mentions).map((m) => m.replace(/^@/, "")),
     tools,
     capabilityTools: tools,
+    capabilityToolMode: parseCapabilityToolMode(raw.capabilityToolMode),
     implementations,
     executables: stringList(raw.executables),
     role: stringField(raw.role),
@@ -1924,6 +1925,11 @@ function parseCapabilityConfig(raw) {
     workflow: parseWorkflow(raw.workflow)
   };
 }
+function parseCapabilityToolMode(raw) {
+  if (raw === void 0 || raw === null || raw === "") return void 0;
+  if (raw === "lock" || raw === "append") return raw;
+  return void 0;
+}
 function parseCapabilityBody(raw, slug2) {
   const trimmed = raw.trim();
   const firstLine2 = trimmed.split("\n", 1)[0] ?? "";
@@ -2414,7 +2420,8 @@ __export(capabilityMcp_exports, {
   parseCapabilityTrustMode: () => parseCapabilityTrustMode,
   readCapabilityTrustMode: () => readCapabilityTrustMode,
   readCheckRuns: () => readCheckRuns,
-  readThread: () => readThread
+  readThread: () => readThread,
+  startCapability: () => startCapability
 });
 import { createSdkMcpServer as createSdkMcpServer4, tool as tool4 } from "@anthropic-ai/claude-agent-sdk";
 import { z as z3 } from "zod";
@@ -2663,6 +2670,9 @@ function dispatchWorkflow(workflowFile, capability, issueNumber, repoSlug) {
     return { ok: false, error: err instanceof Error ? err.message : String(err) };
   }
 }
+function startCapability(workflowFile, name, issue, repoSlug) {
+  return dispatchWorkflow(workflowFile, name, issue, repoSlug);
+}
 function expectedDispatchTarget(capability) {
   const route = resolveCapabilityAction(capability);
   if (!route) return null;
@@ -2835,9 +2845,31 @@ function capabilityToolDefinitions(opts) {
       return { content: [{ type: "text", text: JSON.stringify(result, null, 2) }] };
     }
   };
+  const startCapabilityTool = {
+    name: "start_capability",
+    description: "Start a known Kody capability on an issue or PR through workflow_dispatch. Use this instead of shelling out to `gh workflow run` or posting bot-authored `@kody` command comments. E.g. start_capability({name:'qa-engineer', issue:<n>}). Returns {ok} or {ok:false,error}.",
+    inputSchema: {
+      name: z3.string().min(1).describe("Capability action to start (e.g. 'qa-engineer', 'run', 'sync')."),
+      issue: z3.number().int().positive().optional().describe("Issue or PR number forwarded as issue_number."),
+      issueNumber: z3.number().int().positive().optional().describe("Deprecated alias for issue.")
+    },
+    handler: async (args) => {
+      const name = String(args.name ?? "");
+      const issue = Number(args.issue ?? args.issueNumber);
+      if (!Number.isFinite(issue) || issue <= 0) {
+        return { content: [{ type: "text", text: "Start failed: `issue` is required and must be a positive number." }] };
+      }
+      if (isDispatchGated(name, readCapabilityTrustMode(opts.state, opts.repoSlug, opts.capabilitySlug))) {
+        return { content: [{ type: "text", text: trustRefusal(opts.capabilitySlug) }] };
+      }
+      const result = startCapability(workflowFile, name, issue, opts.repoSlug);
+      const text = result.ok ? `Started capability \`${name}\` on #${issue} via workflow_dispatch.` : `Start failed for capability \`${name}\` on #${issue}: ${result.error}`;
+      return { content: [{ type: "text", text }] };
+    }
+  };
   const dispatchTool = {
     name: "dispatch_workflow",
-    description: "Dispatch a kody.yml workflow_dispatch run for a capability action against an issue (the cross-run bot\u2192engine path; a bot `@kody` comment would be dropped). E.g. dispatch_workflow({capability:'run', issueNumber:<n>}) opens a fix PR from a tracking issue. Returns {ok} or {ok:false,error}.",
+    description: "Legacy alias for start_capability. Dispatches a kody.yml workflow_dispatch run for a capability action against an issue. Prefer start_capability({name:'run', issue:<n>}). Returns {ok} or {ok:false,error}.",
     inputSchema: {
       capability: z3.string().min(1).optional().describe("Capability action to run (e.g. 'run')."),
       executable: z3.string().min(1).optional().describe("Deprecated alias for capability."),
@@ -2849,7 +2881,7 @@ function capabilityToolDefinitions(opts) {
       if (isDispatchGated(capability, readCapabilityTrustMode(opts.state, opts.repoSlug, opts.capabilitySlug))) {
         return { content: [{ type: "text", text: trustRefusal(opts.capabilitySlug) }] };
       }
-      const result = dispatchWorkflow(workflowFile, capability, issueNumber, opts.repoSlug);
+      const result = startCapability(workflowFile, capability, issueNumber, opts.repoSlug);
       const text = result.ok ? `Dispatched capability \`${capability}\` on #${issueNumber} via workflow_dispatch.` : `Dispatch failed for capability \`${capability}\` on #${issueNumber}: ${result.error}`;
       return { content: [{ type: "text", text }] };
     }
@@ -2869,6 +2901,7 @@ function capabilityToolDefinitions(opts) {
     readThreadTool,
     ensureIssueTool,
     ensureCommentTool,
+    startCapabilityTool,
     dispatchTool,
     ...cmsTools
   ];
@@ -2918,6 +2951,7 @@ var init_capabilityMcp = __esm({
       "read_thread",
       "ensure_issue",
       "ensure_comment",
+      "start_capability",
       "dispatch_workflow",
       ...DASHBOARD_CMS_MCP_TOOL_NAMES
     ];
@@ -4264,6 +4298,7 @@ function loadProfile(profilePath) {
         describe: typeof r.describe === "string" ? r.describe : base.describe,
         agent: typeof r.agent === "string" && r.agent.trim() ? r.agent.trim() : base.agent,
         capabilityTools: parseStringArray2(r.capabilityTools ?? r.capabilityTools ?? r.tools) ?? base.capabilityTools,
+        capabilityToolMode: parseCapabilityToolMode2(profilePath, r.capabilityToolMode) ?? base.capabilityToolMode,
         mentions: Array.isArray(r.mentions) ? r.mentions.map((m) => String(m).trim()).filter(Boolean) : base.mentions
       };
     }
@@ -4319,6 +4354,7 @@ function loadProfile(profilePath) {
     agent: typeof r.agent === "string" && r.agent.trim() ? r.agent.trim() : void 0,
     // Locked-toolbox palette + mentions from folder-capability profile metadata.
     capabilityTools: parseStringArray2(r.capabilityTools ?? r.capabilityTools ?? r.tools),
+    capabilityToolMode: parseCapabilityToolMode2(profilePath, r.capabilityToolMode),
     mentions: Array.isArray(r.mentions) ? r.mentions.map((m) => String(m).trim()).filter(Boolean) : void 0,
     role,
     kind,
@@ -4360,12 +4396,7 @@ function loadProfile(profilePath) {
   const preNames = new Set(profile.scripts.preflight.map((e) => e.script).filter(Boolean));
   const postNames = profile.scripts.postflight.map((e) => e.script).filter(Boolean);
   const needsState = postNames.includes("writeJobStateFile") || postNames.includes("parseJobStateFromAgentResult");
-  const STATE_LOADERS = [
-    "loadCapabilityState",
-    "loadJobFromFile",
-    "runTickScript",
-    "runScheduledExecutableTick"
-  ];
+  const STATE_LOADERS = ["loadCapabilityState", "loadJobFromFile", "runTickScript", "runScheduledExecutableTick"];
   if (needsState && !STATE_LOADERS.some((s) => preNames.has(s))) {
     throw new ProfileError(
       profilePath,
@@ -4375,6 +4406,11 @@ function loadProfile(profilePath) {
   profile.subagentTemplates = captureSubagentTemplates(profile);
   return profile;
 }
+function parseCapabilityToolMode2(profilePath, raw) {
+  if (raw === void 0 || raw === null || raw === "") return void 0;
+  if (raw === "lock" || raw === "append") return raw;
+  throw new ProfileError(profilePath, `"capabilityToolMode" must be "lock" or "append"`);
+}
 function readPromptTemplates(dir) {
   const out = {};
   const read = (p) => {
@@ -4694,6 +4730,7 @@ var init_profile = __esm({
       "capabilityTools",
       "capabilityTools",
       "tools",
+      "capabilityToolMode",
       "mentions",
       "stage",
       "readsFrom",
@@ -13074,10 +13111,16 @@ var init_loadCapabilityState = __esm({
             `loadCapabilityState: capability '${slug2}' declared capabilityTools not in the kody-capability palette: ${unknown.join(", ")}. Available: ${[...CAPABILITY_MCP_TOOL_NAMES].join(", ")}`
           );
         }
+        const mode = profile.capabilityToolMode ?? "lock";
         ctx.data.capabilityTools = declaredTools;
+        ctx.data.capabilityToolMode = mode;
         ctx.data.capabilityToolsList = declaredTools.map((name) => `- \`${name}\``).join("\n");
         ctx.data.capabilityOperatorMention = mentions;
         const mcpToolNames = declaredTools.map((name) => `mcp__kody-capability__${name}`);
+        if (mode === "append") {
+          profile.claudeCode.tools = [.../* @__PURE__ */ new Set([...profile.claudeCode.tools ?? [], ...mcpToolNames])];
+          return;
+        }
         profile.claudeCode.tools = [...mcpToolNames, "mcp__kody-submit__submit_state"];
         profile.claudeCode.enableSubmitTool = true;
       }
@@ -13289,8 +13332,8 @@ var CAPABILITY_TOOL_PALETTE2, loadJobFromFile;
 var init_loadJobFromFile = __esm({
   "src/scripts/loadJobFromFile.ts"() {
     "use strict";
-    init_capabilityMcp();
     init_agents();
+    init_capabilityMcp();
     init_registry();
     init_jobState();
     CAPABILITY_TOOL_PALETTE2 = new Set(CAPABILITY_MCP_TOOL_NAMES);
@@ -13304,9 +13347,7 @@ var init_loadJobFromFile = __esm({
       }
       const capability = resolveCapabilityFolder(slug2, path33.join(ctx.cwd, jobsDir));
       if (!capability) {
-        throw new Error(
-          `loadJobFromFile: capability folder not found or incomplete: ${path33.join(ctx.cwd, jobsDir, slug2)}`
-        );
+        throw new Error(`loadJobFromFile: capability folder not found or incomplete: ${path33.join(ctx.cwd, jobsDir, slug2)}`);
       }
       const { title, body, config } = capability;
       const mentions = (config.mentions ?? []).map((login) => `@${login}`).join(" ");
@@ -13351,10 +13392,16 @@ var init_loadJobFromFile = __esm({
           );
         }
         const mcpToolNames = declaredTools.map((name) => `mcp__kody-capability__${name}`);
-        profile.claudeCode.tools = [...mcpToolNames, "mcp__kody-submit__submit_state"];
+        const mode = config.capabilityToolMode ?? "lock";
+        if (mode === "append") {
+          profile.claudeCode.tools = [.../* @__PURE__ */ new Set([...profile.claudeCode.tools ?? [], ...mcpToolNames])];
+        } else {
+          profile.claudeCode.tools = [...mcpToolNames, "mcp__kody-submit__submit_state"];
+          ctx.data.promptTemplate = "prompts/locked.md";
+        }
         ctx.data.capabilityTools = declaredTools;
+        ctx.data.capabilityToolMode = mode;
         ctx.data.capabilityOperatorMention = mentions;
-        ctx.data.promptTemplate = "prompts/locked.md";
         ctx.data.capabilityToolsList = declaredTools.map((name) => `- \`${name}\``).join("\n");
       }
     };

package/dist/executables/types.ts

@@ -76,13 +76,20 @@ export interface Profile {
    */
   kind: "oneshot" | "scheduled"
   /**
-   * Locked-toolbox palette (unified successor to a markdown capability's `tools:`
+   * Capability MCP palette (unified successor to a markdown capability's `tools:`
    * metadata). When non-empty, loadCapabilityState sets ctx.data.capabilityTools so the
-   * executor spins up the in-process kody-capability MCP server and the agent runs
-   * MCP-only (Bash/Read revoked unless also in claudeCode.tools). Absent →
-   * normal SDK tools.
+   * executor spins up the in-process kody-capability MCP server. By default this
+   * is locked mode: Bash/Read are revoked and only the declared MCP tools plus
+   * submit_state remain.
    */
   capabilityTools?: string[]
+  /**
+   * `lock` (default) replaces the normal toolbox with capability MCP tools.
+   * `append` keeps the normal toolbox and adds the declared MCP tools. Use append
+   * only for coordinator capabilities that still own repo state edits but must use
+   * an engine primitive for a narrow side effect such as starting another capability.
+   */
+  capabilityToolMode?: "lock" | "append"
   /**
    * GitHub logins (no leading `@`) this capability's output should mention. Rendered
    * to `@a @b` and exposed to the prompt as {{mentions}} (and as the capability-MCP

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kody-ade/kody-engine",
-  "version": "0.4.305",
+  "version": "0.4.306",
   "description": "kody — autonomous development engine. Single-session Claude Code agent behind a generic executor + declarative executable profiles.",
   "license": "MIT",
   "type": "module",
@@ -12,6 +12,28 @@
     "templates",
     "kody.config.schema.json"
   ],
+  "scripts": {
+    "kody:run": "tsx bin/kody.ts",
+    "serve": "tsx bin/kody.ts serve",
+    "serve:vscode": "tsx bin/kody.ts serve vscode",
+    "serve:claude": "tsx bin/kody.ts serve claude",
+    "clean:dist": "node scripts/clean-dist.cjs",
+    "build": "pnpm clean:dist && tsup && node scripts/copy-assets.cjs",
+    "check:modularity": "tsx scripts/check-script-modularity.ts",
+    "pretest": "pnpm check:modularity",
+    "test": "vitest run tests/unit tests/int --coverage",
+    "posttest": "tsx scripts/check-coverage-floor.ts",
+    "test:smoke": "vitest run tests/smoke --no-coverage",
+    "test:e2e": "vitest run tests/e2e --no-coverage",
+    "test:all": "vitest run tests --no-coverage",
+    "typecheck": "tsc --noEmit",
+    "lint": "biome check",
+    "lint:fix": "biome check --write",
+    "format": "biome format --write",
+    "verify:package": "node scripts/verify-package-tarball.cjs",
+    "brain:publish": "docker buildx build --platform linux/amd64 -f runner/Dockerfile.brain -t ghcr.io/${KODY_BRAIN_GHCR_OWNER:-aharonyaircohen}/kody-brain:latest --push runner",
+    "prepublishOnly": "pnpm typecheck && vitest run tests/unit tests/int --no-coverage && pnpm build && pnpm verify:package"
+  },
   "dependencies": {
     "@actions/cache": "^6.0.0",
     "@anthropic-ai/claude-agent-sdk": "0.2.119",
@@ -35,26 +57,5 @@
     "url": "git+https://github.com/aharonyaircohen/kody-engine.git"
   },
   "homepage": "https://github.com/aharonyaircohen/kody-engine",
-  "bugs": "https://github.com/aharonyaircohen/kody-engine/issues",
-  "scripts": {
-    "kody:run": "tsx bin/kody.ts",
-    "serve": "tsx bin/kody.ts serve",
-    "serve:vscode": "tsx bin/kody.ts serve vscode",
-    "serve:claude": "tsx bin/kody.ts serve claude",
-    "clean:dist": "node scripts/clean-dist.cjs",
-    "build": "pnpm clean:dist && tsup && node scripts/copy-assets.cjs",
-    "check:modularity": "tsx scripts/check-script-modularity.ts",
-    "pretest": "pnpm check:modularity",
-    "test": "vitest run tests/unit tests/int --coverage",
-    "posttest": "tsx scripts/check-coverage-floor.ts",
-    "test:smoke": "vitest run tests/smoke --no-coverage",
-    "test:e2e": "vitest run tests/e2e --no-coverage",
-    "test:all": "vitest run tests --no-coverage",
-    "typecheck": "tsc --noEmit",
-    "lint": "biome check",
-    "lint:fix": "biome check --write",
-    "format": "biome format --write",
-    "verify:package": "node scripts/verify-package-tarball.cjs",
-    "brain:publish": "docker buildx build --platform linux/amd64 -f runner/Dockerfile.brain -t ghcr.io/${KODY_BRAIN_GHCR_OWNER:-aharonyaircohen}/kody-brain:latest --push runner"
-  }
-}
+  "bugs": "https://github.com/aharonyaircohen/kody-engine/issues"
+}