@kody-ade/kody-engine 0.4.367 → 0.4.368

package/dist/bin/kody.js

@@ -15,7 +15,7 @@ var init_package = __esm({
   "package.json"() {
     package_default = {
       name: "@kody-ade/kody-engine",
-      version: "0.4.367",
+      version: "0.4.368",
       description: "kody \u2014 autonomous development engine. Single-session Claude Code agent behind a generic executor + declarative implementation profiles.",
       license: "MIT",
       type: "module",
@@ -21827,6 +21827,26 @@ async function ghApp(jwt, apiPath2, method = "GET") {
   }
   return await res.json();
 }
+async function ghAppPage(authToken, apiPath2) {
+  const res = await fetch(`${GH_API}${apiPath2}`, {
+    headers: {
+      Authorization: `Bearer ${authToken}`,
+      Accept: "application/vnd.github+json",
+      "X-GitHub-Api-Version": "2022-11-28",
+      "User-Agent": "kody-engine"
+    }
+  });
+  if (!res.ok) {
+    const body = await res.text().catch(() => "");
+    throw new Error(
+      `GitHub App API GET ${apiPath2} \u2192 ${res.status} ${res.statusText}${body ? `: ${body.slice(0, 200)}` : ""}`
+    );
+  }
+  return {
+    data: await res.json(),
+    hasNext: /rel="next"/.test(res.headers.get("link") ?? "")
+  };
+}
 function readAppCreds(env = process.env) {
   const appId = env.KODY_APP_ID?.trim();
   const privateKey = env.KODY_APP_PRIVATE_KEY;
@@ -21851,6 +21871,36 @@ async function mintAppInstallationToken(creds) {
   const tok = await ghApp(jwt, `/app/installations/${installationId}/access_tokens`, "POST");
   return tok.token;
 }
+async function discoverAppRepositories(creds) {
+  const jwt = buildAppJwt(creds.appId, creds.privateKey);
+  const installations = [];
+  for (let page = 1; ; page++) {
+    const result = await ghAppPage(jwt, `/app/installations?per_page=100&page=${page}`);
+    installations.push(...result.data.filter((item) => Number.isInteger(item.id) && item.id > 0));
+    if (!result.hasNext) break;
+  }
+  const byRepo = /* @__PURE__ */ new Map();
+  for (const installation of installations) {
+    const token = await mintAppInstallationToken({
+      appId: creds.appId,
+      privateKey: creds.privateKey,
+      installationId: String(installation.id)
+    });
+    for (let page = 1; ; page++) {
+      const result = await ghAppPage(
+        token,
+        `/installation/repositories?per_page=100&page=${page}`
+      );
+      for (const repository of result.data.repositories ?? []) {
+        const repo = repository.full_name?.trim();
+        if (!repo || !/^[^/\s]+\/[^/\s]+$/.test(repo)) continue;
+        byRepo.set(repo.toLowerCase(), { repo, token });
+      }
+      if (!result.hasNext) break;
+    }
+  }
+  return [...byRepo.values()].sort((left, right) => left.repo.localeCompare(right.repo));
+}
 
 // src/kody-cli.ts
 init_companyStore();
@@ -24667,67 +24717,49 @@ init_registry();
 // src/servers/pool-serve.ts
 import { createServer as createServer5 } from "http";
 
-// src/github-health.ts
-var STATUS_URL = "https://www.githubstatus.com/api/v2/components.json";
-var STATUS_CACHE_TTL_MS = 3e4;
-var statusCache = null;
-async function probeActionsStatus(fetchImpl = fetch) {
-  if (statusCache && statusCache.expiresAt > Date.now()) return statusCache.probe;
-  try {
-    const res = await fetchImpl(STATUS_URL, { headers: { "User-Agent": "kody-engine" } });
-    if (!res.ok) return { degraded: false, label: `http_${res.status}` };
-    const body = await res.json();
-    const actions = (body.components ?? []).find((c) => (c.name ?? "").trim().toLowerCase() === "actions");
-    const label = actions?.status ?? "unknown";
-    const degraded = !!actions && label !== "operational";
-    const probe = { degraded, label };
-    statusCache = { probe, expiresAt: Date.now() + STATUS_CACHE_TTL_MS };
-    return probe;
-  } catch {
-    return { degraded: false, label: "probe_error" };
+// src/pool/agency-loop-tick.ts
+function normalizeRepositories(repositories) {
+  const unique = /* @__PURE__ */ new Set();
+  for (const raw of repositories) {
+    const repo = raw.trim().toLowerCase();
+    if (/^[^/\s]+\/[^/\s]+$/.test(repo)) unique.add(repo);
   }
+  return [...unique].sort();
 }
-async function gitHubActionsDegraded(fetchImpl = fetch) {
-  return (await probeActionsStatus(fetchImpl)).degraded;
-}
-
-// src/pool/capability-fallback-tick.ts
-async function runCapabilityFallbackTick(deps) {
-  if (!await deps.isDegraded()) {
-    return { ran: false, claimed: 0 };
-  }
-  const repos = deps.activeRepos();
-  if (repos.length === 0) {
-    deps.log("GitHub Actions degraded but no active repo pools \u2014 nothing to tick");
-    return { ran: true, claimed: 0 };
+async function runAgencyLoopTick(deps) {
+  const repositories = normalizeRepositories(await deps.discover());
+  if (repositories.length === 0) {
+    deps.log("no consumer agencies discovered \u2014 nothing to tick");
+    return { discovered: 0, claimed: 0 };
   }
-  deps.log(`GitHub Actions degraded \u2014 running scheduled fan-out on Fly for ${repos.length} repo(s)`);
+  deps.log(
+    `running scheduled fan-out for ${repositories.length} consumer agenc${repositories.length === 1 ? "y" : "ies"}`
+  );
   const clock = deps.now ?? Date.now;
   let claimed = 0;
-  for (const tag of repos) {
-    const [owner, repo] = tag.split("/");
-    if (!owner || !repo) continue;
+  for (const repository of repositories) {
+    const [owner, repo] = repository.split("/");
     try {
-      const res = await deps.claim(owner, repo, {
+      const result = await deps.claim(owner, repo, {
         jobId: `sched-${owner}-${repo}-${clock()}`,
-        repo: tag,
+        repo: repository,
         runRequest: {
           target: { type: "workflow", id: "scheduled-fanout" },
           intent: "tick",
           source: "schedule"
         }
       });
-      if (res.ok) {
+      if (result.ok) {
         claimed++;
-        deps.log(`[${tag}] scheduled fan-out claimed ${res.machineId}`);
+        deps.log(`[${repository}] scheduled fan-out claimed ${result.machineId}`);
       } else {
-        deps.log(`[${tag}] scheduled fan-out skipped: ${res.reason ?? "pool unavailable"}`);
+        deps.log(`[${repository}] scheduled fan-out skipped: ${result.reason ?? "runner unavailable"}`);
       }
-    } catch (err) {
-      deps.log(`[${tag}] scheduled fan-out error: ${err instanceof Error ? err.message : String(err)}`);
+    } catch (error) {
+      deps.log(`[${repository}] scheduled fan-out error: ${error instanceof Error ? error.message : String(error)}`);
     }
   }
-  return { ran: true, claimed };
+  return { discovered: repositories.length, claimed };
 }
 
 // src/servers/pool-serve.ts
@@ -25113,8 +25145,9 @@ var PoolRegistry = class {
     this.cfg = cfg;
     this.log = cfg.log ?? (() => {
     });
-    this.resolveFlyToken = cfg.resolveFlyToken ?? ((owner, repo) => readRepoSecret({
-      githubToken: cfg.githubToken,
+    this.resolveGithubToken = cfg.resolveGithubToken ?? (async () => cfg.githubToken);
+    this.resolveFlyToken = cfg.resolveFlyToken ?? (async (owner, repo) => readRepoSecret({
+      githubToken: await this.resolveGithubToken(owner, repo),
       masterKey: cfg.masterKey,
       owner,
       repo,
@@ -25122,7 +25155,7 @@ var PoolRegistry = class {
     }));
     this.resolvePoolMin = cfg.resolvePoolMin ?? (async (owner, repo) => parsePoolMin(
       await readRepoSecret({
-        githubToken: cfg.githubToken,
+        githubToken: await this.resolveGithubToken(owner, repo),
         masterKey: cfg.masterKey,
         owner,
         repo,
@@ -25134,6 +25167,7 @@ var PoolRegistry = class {
   cfg;
   pools = /* @__PURE__ */ new Map();
   poolCreates = /* @__PURE__ */ new Map();
+  resolveGithubToken;
   resolveFlyToken;
   resolvePoolMin;
   log;
@@ -25186,10 +25220,17 @@ var PoolRegistry = class {
   async claim(owner, repo, req) {
     const pm = await this.getPool(owner, repo);
     if (!pm) return { ok: false, reason: "repo has no FLY_API_TOKEN (no pool)" };
+    let githubToken2;
+    try {
+      githubToken2 = await this.resolveGithubToken(owner, repo);
+    } catch (err) {
+      this.log(`[${this.key(owner, repo)}] repository auth failed: ${err instanceof Error ? err.message : String(err)}`);
+      return { ok: false, reason: "repository authentication failed" };
+    }
     let allSecrets = {};
     try {
       const vault = await readRepoSecrets({
-        githubToken: this.cfg.githubToken,
+        githubToken: githubToken2,
         masterKey: this.cfg.masterKey,
         owner,
         repo
@@ -25206,7 +25247,7 @@ var PoolRegistry = class {
     const job = {
       jobId: req.jobId,
       repo: `${owner}/${repo}`,
-      githubToken: this.cfg.githubToken,
+      githubToken: githubToken2,
       runRequest: req.runRequest,
       issueNumber: req.issueNumber,
       sessionId: req.sessionId,
@@ -25368,8 +25409,24 @@ function synthesizeLegacyClaimRequest(input) {
 async function poolServe() {
   const masterRaw = process.env.KODY_MASTER_KEY?.trim();
   if (!masterRaw) throw new Error("KODY_MASTER_KEY required for pool-serve");
-  const githubToken2 = process.env.GITHUB_TOKEN?.trim();
-  if (!githubToken2) throw new Error("GITHUB_TOKEN required for pool-serve (reads per-repo vaults)");
+  const appCreds = readAppCreds();
+  const fallbackGithubToken = process.env.GITHUB_TOKEN?.trim() ?? "";
+  if (!appCreds && !fallbackGithubToken) {
+    throw new Error("GitHub App credentials or GITHUB_TOKEN required for pool-serve");
+  }
+  const repoTokens = /* @__PURE__ */ new Map();
+  const resolveGithubToken = async (owner, repo) => {
+    const key = `${owner}/${repo}`.toLowerCase();
+    const discovered = repoTokens.get(key);
+    if (discovered) return discovered;
+    if (appCreds) {
+      const token = await mintAppInstallationToken({ ...appCreds, repo: `${owner}/${repo}` });
+      repoTokens.set(key, token);
+      return token;
+    }
+    if (fallbackGithubToken) return fallbackGithubToken;
+    throw new Error(`no unattended GitHub token for ${key}`);
+  };
   const master = masterKeyBytes(masterRaw);
   const poolApiKey = derivePoolApiKey(master);
   const runnerApiKey = deriveRunnerApiKey(master);
@@ -25382,7 +25439,8 @@ async function poolServe() {
   const apiPort = envInt2("POOL_API_PORT", 4100);
   const healthTimeoutMs = envInt2("POOL_HEALTH_TIMEOUT_MS", 12e4);
   const registry = new PoolRegistry({
-    githubToken: githubToken2,
+    githubToken: fallbackGithubToken,
+    resolveGithubToken,
     masterKey: master,
     base: {
       min,
@@ -25400,16 +25458,30 @@ async function poolServe() {
   const tick = setInterval(() => {
     registry.resyncAll().catch((err) => log(`resync tick failed: ${err instanceof Error ? err.message : String(err)}`));
   }, refillMs);
-  const capabilityTickEnabled = (process.env.POOL_CAPABILITY_TICK ?? "1") !== "0";
-  const capabilityTickMs = envInt2("POOL_CAPABILITY_TICK_MS", 15 * 6e4);
-  const capabilityTick = capabilityTickEnabled ? setInterval(() => {
-    runCapabilityFallbackTick({
-      isDegraded: () => gitHubActionsDegraded(),
-      activeRepos: () => registry.activeRepos(),
+  const discoverAgencies = async () => {
+    if (!appCreds) return registry.activeRepos();
+    const repositories = await discoverAppRepositories(appCreds);
+    for (const access of repositories) repoTokens.set(access.repo.toLowerCase(), access.token);
+    return [.../* @__PURE__ */ new Set([...repositories.map((access) => access.repo), ...registry.activeRepos()])];
+  };
+  let agencyTickInFlight = null;
+  const runLoopTick = () => {
+    if (agencyTickInFlight) return agencyTickInFlight;
+    agencyTickInFlight = runAgencyLoopTick({
+      discover: discoverAgencies,
       claim: (owner, repo, req) => registry.claim(owner, repo, req),
       log
-    }).catch((err) => log(`capability fallback tick failed: ${err instanceof Error ? err.message : String(err)}`));
-  }, capabilityTickMs) : null;
+    }).catch((err) => log(`agency Loop tick failed: ${err instanceof Error ? err.message : String(err)}`)).finally(() => {
+      agencyTickInFlight = null;
+    });
+    return agencyTickInFlight;
+  };
+  const loopTickEnabled = (process.env.POOL_LOOP_TICK ?? process.env.POOL_CAPABILITY_TICK ?? "1") !== "0";
+  const loopTickMs = envInt2(
+    process.env.POOL_LOOP_TICK_MS ? "POOL_LOOP_TICK_MS" : "POOL_CAPABILITY_TICK_MS",
+    15 * 6e4
+  );
+  const loopTick = loopTickEnabled ? setInterval(() => void runLoopTick(), loopTickMs) : null;
   const server = createServer5(async (req, res) => {
     try {
       if (!req.method || !req.url) return sendJson2(res, 400, { error: "bad request" });
@@ -25463,10 +25535,11 @@ async function poolServe() {
       resolve10();
     });
   });
+  if (loopTickEnabled) void runLoopTick();
   const shutdown = (signal) => {
     log(`${signal} \u2014 shutting down`);
     clearInterval(tick);
-    if (capabilityTick) clearInterval(capabilityTick);
+    if (loopTick) clearInterval(loopTick);
     server.close(() => process.exit(0));
   };
   process.once("SIGINT", () => shutdown("SIGINT"));

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kody-ade/kody-engine",
-  "version": "0.4.367",
+  "version": "0.4.368",
   "description": "kody — autonomous development engine. Single-session Claude Code agent behind a generic executor + declarative implementation profiles.",
   "license": "MIT",
   "type": "module",