@kody-ade/kody-engine 0.4.353 → 0.4.354

package/dist/bin/kody.js

@@ -15,7 +15,7 @@ var init_package = __esm({
   "package.json"() {
     package_default = {
       name: "@kody-ade/kody-engine",
-      version: "0.4.353",
+      version: "0.4.354",
       description: "kody \u2014 autonomous development engine. Single-session Claude Code agent behind a generic executor + declarative implementation profiles.",
       license: "MIT",
       type: "module",
@@ -2436,6 +2436,53 @@ var init_registry = __esm({
   }
 });
 
+// src/trustPolicy.ts
+function trustSubjectKey(subject) {
+  return `${subject.kind}:${subject.id}`;
+}
+function parseTrustMode(rawJson, subject) {
+  return parseTrustModeOverride(rawJson, subject) ?? "ask";
+}
+function parseTrustModeOverride(rawJson, subject) {
+  const key = trustSubjectKey(subject);
+  try {
+    const parsed = JSON.parse(rawJson);
+    const rawMode = subject.kind === "capability" ? parsed?.capabilities?.[subject.id]?.mode : parsed?.subjects?.[key]?.mode;
+    if (rawMode === "auto" || rawMode === "ask") return rawMode;
+    return null;
+  } catch {
+    return null;
+  }
+}
+function readTrustMode(stateOrRepoSlug, repoSlugOrSubject, maybeSubject) {
+  const mode = typeof stateOrRepoSlug === "string" ? readTrustModeOverride(stateOrRepoSlug, repoSlugOrSubject) : readTrustModeOverride(stateOrRepoSlug, repoSlugOrSubject, maybeSubject);
+  return mode ?? "ask";
+}
+function readTrustModeOverride(stateOrRepoSlug, repoSlugOrSubject, maybeSubject) {
+  const state = typeof stateOrRepoSlug === "string" ? void 0 : stateOrRepoSlug;
+  const repoSlug = typeof stateOrRepoSlug === "string" ? stateOrRepoSlug : typeof repoSlugOrSubject === "string" ? repoSlugOrSubject : "";
+  const subject = typeof stateOrRepoSlug === "string" ? repoSlugOrSubject : maybeSubject;
+  if (!subject?.id) return null;
+  try {
+    const loaded = readStateText({ state: state ?? defaultStateForRepoSlug(repoSlug) }, void 0, TRUST_FILE_PATH);
+    return loaded ? parseTrustModeOverride(loaded.content, subject) : null;
+  } catch {
+    return null;
+  }
+}
+function defaultStateForRepoSlug(repoSlug) {
+  const [owner, repo] = repoSlug.split("/");
+  return { repo: `${owner}/kody-state`, path: repo ?? repoSlug };
+}
+var TRUST_FILE_PATH;
+var init_trustPolicy = __esm({
+  "src/trustPolicy.ts"() {
+    "use strict";
+    init_stateRepo();
+    TRUST_FILE_PATH = "state/trust.json";
+  }
+});
+
 // src/capabilityMcp.ts
 var capabilityMcp_exports = {};
 __export(capabilityMcp_exports, {
@@ -2581,28 +2628,14 @@ function readLedger(label) {
   }
 }
 function parseCapabilityTrustMode(rawJson, capabilitySlug) {
-  try {
-    const parsed = JSON.parse(rawJson);
-    return parsed?.capabilities?.[capabilitySlug]?.mode === "auto" ? "auto" : "ask";
-  } catch {
-    return "ask";
-  }
-}
-function defaultStateForRepoSlug(repoSlug) {
-  const [owner, repo] = repoSlug.split("/");
-  return { repo: `${owner}/kody-state`, path: repo ?? repoSlug };
+  return parseTrustMode(rawJson, { kind: "capability", id: capabilitySlug });
 }
 function readCapabilityTrustMode(stateOrRepoSlug, repoSlugOrCapabilitySlug, maybeCapabilitySlug) {
   const state = typeof stateOrRepoSlug === "string" ? void 0 : stateOrRepoSlug;
   const repoSlug = typeof stateOrRepoSlug === "string" ? stateOrRepoSlug : repoSlugOrCapabilitySlug ?? "";
   const capabilitySlug = typeof stateOrRepoSlug === "string" ? repoSlugOrCapabilitySlug : maybeCapabilitySlug;
   if (!capabilitySlug) return "ask";
-  try {
-    const loaded = readStateText({ state: state ?? defaultStateForRepoSlug(repoSlug) }, void 0, TRUST_FILE_PATH);
-    return loaded ? parseCapabilityTrustMode(loaded.content, capabilitySlug) : "ask";
-  } catch {
-    return "ask";
-  }
+  return readTrustMode(state, repoSlug, { kind: "capability", id: capabilitySlug });
 }
 function readThread(repoSlug, number, limit = 10) {
   const meta = JSON.parse(gh(["api", `repos/${repoSlug}/issues/${number}`]));
@@ -2932,17 +2965,16 @@ function buildCapabilityMcpServer(opts) {
   });
   return { server };
 }
-var FAIL_CONCLUSIONS, RUNNING_STATUSES, TRUST_FILE_PATH, THREAD_BODY_MAX, CHECK_FAIL_CONCLUSIONS, DEFAULT_IGNORE_CHECKS, trackMarker, commentMarker, GATE_EXEMPT_CAPABILITIES, CAPABILITY_MCP_TOOL_NAMES;
+var FAIL_CONCLUSIONS, RUNNING_STATUSES, THREAD_BODY_MAX, CHECK_FAIL_CONCLUSIONS, DEFAULT_IGNORE_CHECKS, trackMarker, commentMarker, GATE_EXEMPT_CAPABILITIES, CAPABILITY_MCP_TOOL_NAMES;
 var init_capabilityMcp = __esm({
   "src/capabilityMcp.ts"() {
     "use strict";
     init_dashboardCmsMcp();
     init_issue();
     init_registry();
-    init_stateRepo();
+    init_trustPolicy();
     FAIL_CONCLUSIONS = /* @__PURE__ */ new Set(["FAILURE", "TIMED_OUT", "ACTION_REQUIRED", "STARTUP_FAILURE", "CANCELLED"]);
     RUNNING_STATUSES = /* @__PURE__ */ new Set(["IN_PROGRESS", "QUEUED", "PENDING", "WAITING", "REQUESTED"]);
-    TRUST_FILE_PATH = "state/trust.json";
     THREAD_BODY_MAX = 4e3;
     CHECK_FAIL_CONCLUSIONS = /* @__PURE__ */ new Set(["FAILURE", "TIMED_OUT", "STARTUP_FAILURE", "ACTION_REQUIRED"]);
     DEFAULT_IGNORE_CHECKS = ["run", "kody", "capability-tick", "agent-ask", "chat"];
@@ -9335,14 +9367,16 @@ function scalarFacts(facts) {
     )
   );
 }
-function autonomyBlockReason(ctx, goalId, goal, dispatch2) {
+function autonomyBlockReason(ctx, goalId, goal, goalState, dispatch2) {
   if (ctx.data.jobForce === true) return null;
-  if (goal.runWithoutApproval !== true) {
+  const selfMode = firstTrustOverride(ctx, subjectCandidates(managedModelSubjectKind(goal), goalId, goalState));
+  if (selfMode === "ask" || selfMode !== "auto" && goal.runWithoutApproval !== true) {
     return `Run without approval is off for ${managedModelKind(goal)} ${goalId}`;
   }
   if (dispatch2.workflow) {
-    const workflow = readWorkflowDefinition(ctx.config, ctx.cwd, dispatch2.workflow);
-    if (workflow && workflow.runWithoutApproval !== true) {
+    const workflowMode = firstTrustOverride(ctx, [{ kind: "workflow", id: dispatch2.workflow }]);
+    const workflow = workflowMode === "auto" ? null : readWorkflowDefinition(ctx.config, ctx.cwd, dispatch2.workflow);
+    if (workflowMode === "ask" || workflowMode !== "auto" && workflow && workflow.runWithoutApproval !== true) {
       return `Run without approval is off for workflow ${dispatch2.workflow}`;
     }
   }
@@ -9350,7 +9384,8 @@ function autonomyBlockReason(ctx, goalId, goal, dispatch2) {
   if (targetGoal && targetGoal !== goalId) {
     const target = fetchGoalState(ctx.config, targetGoal, ctx.cwd);
     const targetManaged = target ? managedGoalFromState(expandManagedGoalState(target)) : null;
-    if (targetManaged && targetManaged.runWithoutApproval !== true) {
+    const targetMode = targetManaged ? firstTrustOverride(ctx, subjectCandidates(managedModelSubjectKind(targetManaged), targetGoal, target)) : null;
+    if (targetMode === "ask" || targetMode !== "auto" && targetManaged && targetManaged.runWithoutApproval !== true) {
       return `Run without approval is off for goal ${targetGoal}`;
     }
   }
@@ -9359,6 +9394,29 @@ function autonomyBlockReason(ctx, goalId, goal, dispatch2) {
 function managedModelKind(goal) {
   return goal.loopTarget || goal.schedule ? "Loop" : "Goal";
 }
+function managedModelSubjectKind(goal) {
+  return managedModelKind(goal) === "Loop" ? "loop" : "goal";
+}
+function subjectCandidates(kind, id, state) {
+  const ids = /* @__PURE__ */ new Set();
+  ids.add(id);
+  if (state?.extra) {
+    for (const key of ["sourceTemplate", "templateId", "template"]) {
+      const value = state.extra[key];
+      if (typeof value === "string" && value.trim()) ids.add(value.trim());
+    }
+  }
+  return [...ids].map((candidate) => ({ kind, id: candidate }));
+}
+function firstTrustOverride(ctx, subjects) {
+  if (!ctx.config.state) return null;
+  const repoSlug = ctx.config.github?.owner && ctx.config.github?.repo ? `${ctx.config.github.owner}/${ctx.config.github.repo}` : "";
+  for (const subject of subjects) {
+    const mode = readTrustModeOverride(ctx.config.state, repoSlug, subject);
+    if (mode) return mode;
+  }
+  return null;
+}
 function stageAutonomyBlocked(data, goalId, goal, goalState, reason) {
   stageGoalRunLogEvent(data, goalId, {
     source: "goal-manager",
@@ -9550,6 +9608,7 @@ var init_advanceManagedGoal = __esm({
     init_targetLoopResolution();
     init_typeDefinitions();
     init_issue();
+    init_trustPolicy();
     init_workflowDefinitions();
     init_goalCapabilityScheduling();
     advanceManagedGoal = async (ctx) => {
@@ -9645,7 +9704,7 @@ var init_advanceManagedGoal = __esm({
         goal.raw = writeManagedGoalToState({ ...goal.raw, state: goal.state }, managed);
         goal.raw.extra.scheduleState = decision2.scheduleState;
         ctx.data.managedGoalDecision = decision2;
-        const autonomyBlock = decision2.kind === "dispatch" && decision2.dispatch ? autonomyBlockReason(ctx, goal.id, managed, decision2.dispatch) : null;
+        const autonomyBlock = decision2.kind === "dispatch" && decision2.dispatch ? autonomyBlockReason(ctx, goal.id, managed, goal.raw, decision2.dispatch) : null;
         if (autonomyBlock) {
           stageAutonomyBlocked(ctx.data, goal.id, managed, goal.state, autonomyBlock);
           ctx.output.reason = autonomyBlock;
@@ -9707,7 +9766,7 @@ var init_advanceManagedGoal = __esm({
         goal.raw = writeManagedGoalToState({ ...goal.raw, state: goal.state }, managed);
         goal.raw.extra.scheduleState = decision2.scheduleState;
         ctx.data.managedGoalDecision = decision2;
-        const autonomyBlock = decision2.kind === "dispatch" && decision2.dispatch ? autonomyBlockReason(ctx, goal.id, managed, decision2.dispatch) : null;
+        const autonomyBlock = decision2.kind === "dispatch" && decision2.dispatch ? autonomyBlockReason(ctx, goal.id, managed, goal.raw, decision2.dispatch) : null;
         if (autonomyBlock) {
           stageAutonomyBlocked(ctx.data, goal.id, managed, goal.state, autonomyBlock);
           ctx.output.reason = autonomyBlock;
@@ -9772,7 +9831,7 @@ var init_advanceManagedGoal = __esm({
           ...decision.implementation ? { implementation: decision.implementation } : {},
           cliArgs: decision.cliArgs
         };
-        const autonomyBlock = autonomyBlockReason(ctx, goal.id, managed, planned);
+        const autonomyBlock = autonomyBlockReason(ctx, goal.id, managed, goal.raw, planned);
         if (autonomyBlock) {
           stageAutonomyBlocked(ctx.data, goal.id, managed, goal.state, autonomyBlock);
           ctx.output.reason = autonomyBlock;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kody-ade/kody-engine",
-  "version": "0.4.353",
+  "version": "0.4.354",
   "description": "kody — autonomous development engine. Single-session Claude Code agent behind a generic executor + declarative implementation profiles.",
   "license": "MIT",
   "type": "module",