@kody-ade/kody-engine 0.4.352 → 0.4.354

package/dist/bin/kody.js

@@ -15,7 +15,7 @@ var init_package = __esm({
   "package.json"() {
     package_default = {
       name: "@kody-ade/kody-engine",
-      version: "0.4.352",
+      version: "0.4.354",
       description: "kody \u2014 autonomous development engine. Single-session Claude Code agent behind a generic executor + declarative implementation profiles.",
       license: "MIT",
       type: "module",
@@ -2436,6 +2436,53 @@ var init_registry = __esm({
   }
 });
 
+// src/trustPolicy.ts
+function trustSubjectKey(subject) {
+  return `${subject.kind}:${subject.id}`;
+}
+function parseTrustMode(rawJson, subject) {
+  return parseTrustModeOverride(rawJson, subject) ?? "ask";
+}
+function parseTrustModeOverride(rawJson, subject) {
+  const key = trustSubjectKey(subject);
+  try {
+    const parsed = JSON.parse(rawJson);
+    const rawMode = subject.kind === "capability" ? parsed?.capabilities?.[subject.id]?.mode : parsed?.subjects?.[key]?.mode;
+    if (rawMode === "auto" || rawMode === "ask") return rawMode;
+    return null;
+  } catch {
+    return null;
+  }
+}
+function readTrustMode(stateOrRepoSlug, repoSlugOrSubject, maybeSubject) {
+  const mode = typeof stateOrRepoSlug === "string" ? readTrustModeOverride(stateOrRepoSlug, repoSlugOrSubject) : readTrustModeOverride(stateOrRepoSlug, repoSlugOrSubject, maybeSubject);
+  return mode ?? "ask";
+}
+function readTrustModeOverride(stateOrRepoSlug, repoSlugOrSubject, maybeSubject) {
+  const state = typeof stateOrRepoSlug === "string" ? void 0 : stateOrRepoSlug;
+  const repoSlug = typeof stateOrRepoSlug === "string" ? stateOrRepoSlug : typeof repoSlugOrSubject === "string" ? repoSlugOrSubject : "";
+  const subject = typeof stateOrRepoSlug === "string" ? repoSlugOrSubject : maybeSubject;
+  if (!subject?.id) return null;
+  try {
+    const loaded = readStateText({ state: state ?? defaultStateForRepoSlug(repoSlug) }, void 0, TRUST_FILE_PATH);
+    return loaded ? parseTrustModeOverride(loaded.content, subject) : null;
+  } catch {
+    return null;
+  }
+}
+function defaultStateForRepoSlug(repoSlug) {
+  const [owner, repo] = repoSlug.split("/");
+  return { repo: `${owner}/kody-state`, path: repo ?? repoSlug };
+}
+var TRUST_FILE_PATH;
+var init_trustPolicy = __esm({
+  "src/trustPolicy.ts"() {
+    "use strict";
+    init_stateRepo();
+    TRUST_FILE_PATH = "state/trust.json";
+  }
+});
+
 // src/capabilityMcp.ts
 var capabilityMcp_exports = {};
 __export(capabilityMcp_exports, {
@@ -2581,28 +2628,14 @@ function readLedger(label) {
   }
 }
 function parseCapabilityTrustMode(rawJson, capabilitySlug) {
-  try {
-    const parsed = JSON.parse(rawJson);
-    return parsed?.capabilities?.[capabilitySlug]?.mode === "auto" ? "auto" : "ask";
-  } catch {
-    return "ask";
-  }
-}
-function defaultStateForRepoSlug(repoSlug) {
-  const [owner, repo] = repoSlug.split("/");
-  return { repo: `${owner}/kody-state`, path: repo ?? repoSlug };
+  return parseTrustMode(rawJson, { kind: "capability", id: capabilitySlug });
 }
 function readCapabilityTrustMode(stateOrRepoSlug, repoSlugOrCapabilitySlug, maybeCapabilitySlug) {
   const state = typeof stateOrRepoSlug === "string" ? void 0 : stateOrRepoSlug;
   const repoSlug = typeof stateOrRepoSlug === "string" ? stateOrRepoSlug : repoSlugOrCapabilitySlug ?? "";
   const capabilitySlug = typeof stateOrRepoSlug === "string" ? repoSlugOrCapabilitySlug : maybeCapabilitySlug;
   if (!capabilitySlug) return "ask";
-  try {
-    const loaded = readStateText({ state: state ?? defaultStateForRepoSlug(repoSlug) }, void 0, TRUST_FILE_PATH);
-    return loaded ? parseCapabilityTrustMode(loaded.content, capabilitySlug) : "ask";
-  } catch {
-    return "ask";
-  }
+  return readTrustMode(state, repoSlug, { kind: "capability", id: capabilitySlug });
 }
 function readThread(repoSlug, number, limit = 10) {
   const meta = JSON.parse(gh(["api", `repos/${repoSlug}/issues/${number}`]));
@@ -2932,17 +2965,16 @@ function buildCapabilityMcpServer(opts) {
   });
   return { server };
 }
-var FAIL_CONCLUSIONS, RUNNING_STATUSES, TRUST_FILE_PATH, THREAD_BODY_MAX, CHECK_FAIL_CONCLUSIONS, DEFAULT_IGNORE_CHECKS, trackMarker, commentMarker, GATE_EXEMPT_CAPABILITIES, CAPABILITY_MCP_TOOL_NAMES;
+var FAIL_CONCLUSIONS, RUNNING_STATUSES, THREAD_BODY_MAX, CHECK_FAIL_CONCLUSIONS, DEFAULT_IGNORE_CHECKS, trackMarker, commentMarker, GATE_EXEMPT_CAPABILITIES, CAPABILITY_MCP_TOOL_NAMES;
 var init_capabilityMcp = __esm({
   "src/capabilityMcp.ts"() {
     "use strict";
     init_dashboardCmsMcp();
     init_issue();
     init_registry();
-    init_stateRepo();
+    init_trustPolicy();
     FAIL_CONCLUSIONS = /* @__PURE__ */ new Set(["FAILURE", "TIMED_OUT", "ACTION_REQUIRED", "STARTUP_FAILURE", "CANCELLED"]);
     RUNNING_STATUSES = /* @__PURE__ */ new Set(["IN_PROGRESS", "QUEUED", "PENDING", "WAITING", "REQUESTED"]);
-    TRUST_FILE_PATH = "state/trust.json";
     THREAD_BODY_MAX = 4e3;
     CHECK_FAIL_CONCLUSIONS = /* @__PURE__ */ new Set(["FAILURE", "TIMED_OUT", "STARTUP_FAILURE", "ACTION_REQUIRED"]);
     DEFAULT_IGNORE_CHECKS = ["run", "kody", "capability-tick", "agent-ask", "chat"];
@@ -9335,14 +9367,16 @@ function scalarFacts(facts) {
     )
   );
 }
-function autonomyBlockReason(ctx, goalId, goal, dispatch2) {
+function autonomyBlockReason(ctx, goalId, goal, goalState, dispatch2) {
   if (ctx.data.jobForce === true) return null;
-  if (goal.runWithoutApproval !== true) {
+  const selfMode = firstTrustOverride(ctx, subjectCandidates(managedModelSubjectKind(goal), goalId, goalState));
+  if (selfMode === "ask" || selfMode !== "auto" && goal.runWithoutApproval !== true) {
     return `Run without approval is off for ${managedModelKind(goal)} ${goalId}`;
   }
   if (dispatch2.workflow) {
-    const workflow = readWorkflowDefinition(ctx.config, ctx.cwd, dispatch2.workflow);
-    if (workflow && workflow.runWithoutApproval !== true) {
+    const workflowMode = firstTrustOverride(ctx, [{ kind: "workflow", id: dispatch2.workflow }]);
+    const workflow = workflowMode === "auto" ? null : readWorkflowDefinition(ctx.config, ctx.cwd, dispatch2.workflow);
+    if (workflowMode === "ask" || workflowMode !== "auto" && workflow && workflow.runWithoutApproval !== true) {
       return `Run without approval is off for workflow ${dispatch2.workflow}`;
     }
   }
@@ -9350,7 +9384,8 @@ function autonomyBlockReason(ctx, goalId, goal, dispatch2) {
   if (targetGoal && targetGoal !== goalId) {
     const target = fetchGoalState(ctx.config, targetGoal, ctx.cwd);
     const targetManaged = target ? managedGoalFromState(expandManagedGoalState(target)) : null;
-    if (targetManaged && targetManaged.runWithoutApproval !== true) {
+    const targetMode = targetManaged ? firstTrustOverride(ctx, subjectCandidates(managedModelSubjectKind(targetManaged), targetGoal, target)) : null;
+    if (targetMode === "ask" || targetMode !== "auto" && targetManaged && targetManaged.runWithoutApproval !== true) {
       return `Run without approval is off for goal ${targetGoal}`;
     }
   }
@@ -9359,6 +9394,29 @@ function autonomyBlockReason(ctx, goalId, goal, dispatch2) {
 function managedModelKind(goal) {
   return goal.loopTarget || goal.schedule ? "Loop" : "Goal";
 }
+function managedModelSubjectKind(goal) {
+  return managedModelKind(goal) === "Loop" ? "loop" : "goal";
+}
+function subjectCandidates(kind, id, state) {
+  const ids = /* @__PURE__ */ new Set();
+  ids.add(id);
+  if (state?.extra) {
+    for (const key of ["sourceTemplate", "templateId", "template"]) {
+      const value = state.extra[key];
+      if (typeof value === "string" && value.trim()) ids.add(value.trim());
+    }
+  }
+  return [...ids].map((candidate) => ({ kind, id: candidate }));
+}
+function firstTrustOverride(ctx, subjects) {
+  if (!ctx.config.state) return null;
+  const repoSlug = ctx.config.github?.owner && ctx.config.github?.repo ? `${ctx.config.github.owner}/${ctx.config.github.repo}` : "";
+  for (const subject of subjects) {
+    const mode = readTrustModeOverride(ctx.config.state, repoSlug, subject);
+    if (mode) return mode;
+  }
+  return null;
+}
 function stageAutonomyBlocked(data, goalId, goal, goalState, reason) {
   stageGoalRunLogEvent(data, goalId, {
     source: "goal-manager",
@@ -9550,6 +9608,7 @@ var init_advanceManagedGoal = __esm({
     init_targetLoopResolution();
     init_typeDefinitions();
     init_issue();
+    init_trustPolicy();
     init_workflowDefinitions();
     init_goalCapabilityScheduling();
     advanceManagedGoal = async (ctx) => {
@@ -9645,7 +9704,7 @@ var init_advanceManagedGoal = __esm({
         goal.raw = writeManagedGoalToState({ ...goal.raw, state: goal.state }, managed);
         goal.raw.extra.scheduleState = decision2.scheduleState;
         ctx.data.managedGoalDecision = decision2;
-        const autonomyBlock = decision2.kind === "dispatch" && decision2.dispatch ? autonomyBlockReason(ctx, goal.id, managed, decision2.dispatch) : null;
+        const autonomyBlock = decision2.kind === "dispatch" && decision2.dispatch ? autonomyBlockReason(ctx, goal.id, managed, goal.raw, decision2.dispatch) : null;
         if (autonomyBlock) {
           stageAutonomyBlocked(ctx.data, goal.id, managed, goal.state, autonomyBlock);
           ctx.output.reason = autonomyBlock;
@@ -9707,7 +9766,7 @@ var init_advanceManagedGoal = __esm({
         goal.raw = writeManagedGoalToState({ ...goal.raw, state: goal.state }, managed);
         goal.raw.extra.scheduleState = decision2.scheduleState;
         ctx.data.managedGoalDecision = decision2;
-        const autonomyBlock = decision2.kind === "dispatch" && decision2.dispatch ? autonomyBlockReason(ctx, goal.id, managed, decision2.dispatch) : null;
+        const autonomyBlock = decision2.kind === "dispatch" && decision2.dispatch ? autonomyBlockReason(ctx, goal.id, managed, goal.raw, decision2.dispatch) : null;
         if (autonomyBlock) {
           stageAutonomyBlocked(ctx.data, goal.id, managed, goal.state, autonomyBlock);
           ctx.output.reason = autonomyBlock;
@@ -9772,7 +9831,7 @@ var init_advanceManagedGoal = __esm({
           ...decision.implementation ? { implementation: decision.implementation } : {},
           cliArgs: decision.cliArgs
         };
-        const autonomyBlock = autonomyBlockReason(ctx, goal.id, managed, planned);
+        const autonomyBlock = autonomyBlockReason(ctx, goal.id, managed, goal.raw, planned);
         if (autonomyBlock) {
           stageAutonomyBlocked(ctx.data, goal.id, managed, goal.state, autonomyBlock);
           ctx.output.reason = autonomyBlock;
@@ -9800,8 +9859,9 @@ var init_advanceManagedGoal = __esm({
           workflow: decision.workflow,
           cliArgs: decision.cliArgs,
           workflowFacts: scalarFacts(managed.facts),
+          evidence: decision.evidence,
           ...decision.saveReport === true ? { saveReport: true } : {},
-          resultTarget: { type: "goal", id: goal.id, evidence: decision.evidence }
+          resultTarget: { type: "goal", id: goal.id }
         };
         ctx.output.reason = `dispatch workflow ${decision.workflow} for ${decision.evidence}`;
         return;
@@ -9809,9 +9869,10 @@ var init_advanceManagedGoal = __esm({
       ctx.output.nextDispatch = {
         capability: decision.capability,
         cliArgs: decision.cliArgs,
+        evidence: decision.evidence,
         ...decision.implementation ? { implementation: decision.implementation } : {},
         ...decision.saveReport === true ? { saveReport: true } : {},
-        resultTarget: { type: "goal", id: goal.id, evidence: decision.evidence }
+        resultTarget: { type: "goal", id: goal.id }
       };
       ctx.output.reason = `dispatch ${decision.capability} for ${decision.evidence}`;
     };
@@ -10950,6 +11011,12 @@ function parseResultTarget(raw) {
     ...evidence ? { evidence } : {}
   };
 }
+function parseEvidenceContext(raw) {
+  if (!raw || typeof raw !== "object" || Array.isArray(raw)) return null;
+  const context = raw;
+  const evidence = typeof context.evidence === "string" && context.evidence.trim().length > 0 ? context.evidence.trim() : void 0;
+  return evidence ? { evidence } : null;
+}
 function collectGoalCapabilityEvidence(reports, results, fallbackGoalId, explicitEvidence) {
   const items = [];
   for (const report of reports) {
@@ -11054,8 +11121,9 @@ var init_applyCapabilityReports = __esm({
       const reports = collectReports(ctx.data.capabilityReports, agentResult);
       const results = collectResults2(ctx.data.capabilityResults, agentResult);
       const resultTarget = parseResultTarget(ctx.data.capabilityResultTarget);
+      const evidenceContext = parseEvidenceContext(ctx.data.capabilityEvidence);
       const resultGoalId = resultTarget?.id ?? (typeof ctx.args.goal === "string" && ctx.args.goal.length > 0 ? ctx.args.goal : null);
-      const explicitEvidence = resultTarget?.evidence ?? (typeof ctx.args.evidence === "string" && ctx.args.evidence.length > 0 ? ctx.args.evidence : void 0);
+      const explicitEvidence = evidenceContext?.evidence ?? resultTarget?.evidence ?? (typeof ctx.args.evidence === "string" && ctx.args.evidence.length > 0 ? ctx.args.evidence : void 0);
       const evidenceItems = collectGoalCapabilityEvidence(reports, results, resultGoalId, explicitEvidence);
       if (evidenceItems.length === 0) return;
       const evidenceByGoal = groupGoalEvidence(evidenceItems);
@@ -20483,6 +20551,7 @@ function handoffToJob(handoff) {
     implementation: handoff.implementation,
     cliArgs: handoff.cliArgs,
     workflowFacts: handoff.workflowFacts,
+    evidence: handoff.evidence,
     flavor: "instant",
     saveReport: handoff.saveReport === true,
     resultTarget: handoff.resultTarget
@@ -20828,6 +20897,7 @@ function validateJob(input) {
     target: typeof j.target === "number" ? j.target : void 0,
     cliArgs: j.cliArgs ?? {},
     workflowFacts: j.workflowFacts && typeof j.workflowFacts === "object" && !Array.isArray(j.workflowFacts) ? j.workflowFacts : void 0,
+    evidence: parseJobEvidence(j),
     flavor: j.flavor,
     force: j.force === true,
     saveReport: j.saveReport === true,
@@ -20839,13 +20909,18 @@ function parseCapabilityResultTarget(raw) {
   const target = raw;
   if (target.type !== "goal") return void 0;
   if (typeof target.id !== "string" || target.id.trim().length === 0) return void 0;
-  const evidence = typeof target.evidence === "string" && target.evidence.trim().length > 0 ? target.evidence.trim() : void 0;
   return {
     type: "goal",
-    id: target.id.trim(),
-    ...evidence ? { evidence } : {}
+    id: target.id.trim()
   };
 }
+function parseJobEvidence(job) {
+  if (typeof job.evidence === "string" && job.evidence.trim().length > 0) return job.evidence.trim();
+  const target = job.resultTarget;
+  if (!target || typeof target !== "object" || Array.isArray(target)) return void 0;
+  const evidence = target.evidence;
+  return typeof evidence === "string" && evidence.trim().length > 0 ? evidence.trim() : void 0;
+}
 async function runJob(job, base) {
   const valid = validateJob(job);
   const action = valid.action ?? valid.capability;
@@ -20905,6 +20980,7 @@ async function runCapabilityImplementationStep(valid, profileName, capabilityIde
   if (valid.schedule !== void 0 && valid.schedule.length > 0) preloadedData.jobSchedule = valid.schedule;
   if (valid.saveReport === true) preloadedData.jobSaveReport = true;
   if (valid.force === true) preloadedData.jobForce = true;
+  if (valid.evidence) preloadedData.capabilityEvidence = { evidence: valid.evidence };
   if (valid.resultTarget) preloadedData.capabilityResultTarget = valid.resultTarget;
   if (capabilityContext) {
     preloadedData.capabilitySlug = capabilityContext.slug;
@@ -20964,7 +21040,7 @@ async function runCapabilityWorkflow(parent, workflow, capability, base) {
     ]
   };
   let result = { exitCode: 0 };
-  const startIndex = workflowResumeStartIndex(workflow.steps, parent.resultTarget?.evidence);
+  const startIndex = workflowResumeStartIndex(workflow.steps, parent.evidence);
   for (let index = startIndex; index < workflow.steps.length; index++) {
     const step = workflow.steps[index];
     const label = step.action ?? step.capability;
@@ -21054,9 +21130,11 @@ function workflowStepToJob(step, parent, chainData) {
     ...parent.schedule ? { schedule: parent.schedule } : {},
     ...typeof target === "number" ? { target } : {},
     cliArgs,
+    ...step.evidence ? { evidence: step.evidence } : parent.evidence ? { evidence: parent.evidence } : {},
     flavor: parent.flavor,
     force: parent.force,
-    saveReport: step.saveReport === true || parent.saveReport === true
+    saveReport: step.saveReport === true || parent.saveReport === true,
+    ...parent.resultTarget ? { resultTarget: parent.resultTarget } : {}
   };
 }
 function shouldRunWorkflowStep(step, data) {

package/dist/implementations/types.ts

@@ -401,7 +401,6 @@ export interface OutputContract {
 export interface CapabilityResultTarget {
   type: "goal"
   id: string
-  evidence?: string
 }
 
 // ────────────────────────────────────────────────────────────────────────────
@@ -439,6 +438,7 @@ export interface Context {
       implementation?: string
       cliArgs: Record<string, unknown>
       workflowFacts?: Record<string, unknown>
+      evidence?: string
       saveReport?: boolean
       resultTarget?: CapabilityResultTarget
     }
@@ -452,6 +452,7 @@ export interface Context {
       implementation?: string
       cliArgs: Record<string, unknown>
       workflowFacts?: Record<string, unknown>
+      evidence?: string
       saveReport?: boolean
       resultTarget?: CapabilityResultTarget
     }
@@ -521,6 +522,8 @@ export interface Job {
   cliArgs: Record<string, unknown>
   /** Internal workflow resume context. Not passed to capability CLI args. */
   workflowFacts?: Record<string, unknown>
+  /** Evidence this capability run is expected to report, independent of who consumes it. */
+  evidence?: string
   /** Run once now ("instant") or on the schedule ("scheduled"). */
   flavor: JobFlavor
   /** Manual force-run (bypass cadence) for a scheduled job. */

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kody-ade/kody-engine",
-  "version": "0.4.352",
+  "version": "0.4.354",
   "description": "kody — autonomous development engine. Single-session Claude Code agent behind a generic executor + declarative implementation profiles.",
   "license": "MIT",
   "type": "module",