@kody-ade/kody-engine 0.4.473 → 0.4.474

package/dist/bin/kody.js

@@ -15,7 +15,7 @@ var init_package = __esm({
   "package.json"() {
     package_default = {
       name: "@kody-ade/kody-engine",
-      version: "0.4.473",
+      version: "0.4.474",
       description: "kody \u2014 autonomous development engine. Single-session Claude Code agent behind a generic executor + declarative implementation profiles.",
       license: "MIT",
       type: "module",
@@ -454,6 +454,7 @@ function parseReleaseConfig(raw) {
   if (typeof r.productionUrl === "string") out.productionUrl = r.productionUrl;
   if (typeof r.smokeCommand === "string") out.smokeCommand = r.smokeCommand;
   if (typeof r.draftRelease === "boolean") out.draftRelease = r.draftRelease;
+  if (typeof r.allowAdminMerge === "boolean") out.allowAdminMerge = r.allowAdminMerge;
   if (typeof r.releaseBranch === "string") out.releaseBranch = r.releaseBranch;
   if (typeof r.timeoutMs === "number" && r.timeoutMs > 0) out.timeoutMs = Math.floor(r.timeoutMs);
   return Object.keys(out).length > 0 ? out : void 0;
@@ -1729,12 +1730,22 @@ function parseCapabilityContract(raw) {
   if (parsed.execution !== void 0 && parsed.execution !== "agent" && parsed.execution !== "script") {
     throw new Error('contract.json execution must be "agent" or "script"');
   }
-  const unsupported = Object.keys(parsed).filter((key) => key !== "execution" && key !== "input" && key !== "output");
+  const secrets = parsed.secrets === void 0 ? void 0 : Array.isArray(parsed.secrets) && parsed.secrets.every((name) => typeof name === "string" && /^[A-Z][A-Z0-9_]*$/.test(name)) ? [...new Set(parsed.secrets)] : null;
+  if (secrets === null) {
+    throw new Error("contract.json secrets must contain valid environment variable names");
+  }
+  if (secrets && parsed.execution !== "script") {
+    throw new Error('contract.json secrets are supported only when execution is "script"');
+  }
+  const unsupported = Object.keys(parsed).filter(
+    (key) => key !== "execution" && key !== "secrets" && key !== "input" && key !== "output"
+  );
   if (unsupported.length > 0) {
     throw new Error(`contract.json contains unsupported fields: ${unsupported.join(", ")}`);
   }
   return {
     ...parsed.execution ? { execution: parsed.execution } : {},
+    ...secrets ? { secrets } : {},
     input: parsed.input,
     output: parsed.output
   };
@@ -15552,6 +15563,7 @@ var init_loadSimpleCapability = __esm({
       ctx.data.capabilityExecution = capability.contract?.execution ?? "agent";
       if (capability.contract?.execution === "script") {
         ctx.data.capabilityScriptPath = path40.join(capability.dir, "tools", "run.sh");
+        ctx.data.capabilitySecretNames = capability.contract.secrets ?? [];
       }
       if (capability.config.outputSchema) {
         ctx.data.capabilityOutputSchema = capability.config.outputSchema;
@@ -16577,6 +16589,7 @@ var init_parseSimpleCapabilityOutput = __esm({
   "src/scripts/parseSimpleCapabilityOutput.ts"() {
     "use strict";
     init_capability_contract_validation();
+    init_capabilityResult();
     parseSimpleCapabilityOutput = async (ctx, _profile, agentResult) => {
       const output = Object.hasOwn(ctx.data, "capabilityScriptOutput") ? ctx.data.capabilityScriptOutput : parseOutput(agentResult?.finalText);
       if (output === void 0) {
@@ -16625,6 +16638,12 @@ var init_parseSimpleCapabilityOutput = __esm({
         }
       }
       ctx.data.capabilityOutput = output;
+      const structuredResult = parseCapabilityResult(output);
+      if (structuredResult) {
+        ctx.output.reason = structuredResult.summary;
+        ctx.data.capabilityResults = [structuredResult];
+        return;
+      }
       const result = isObject2(output) ? output : {};
       const data = isObject2(result.data) ? result.data : isObject2(output) ? output : { output };
       const summary = typeof result.summary === "string" ? result.summary : "Capability completed";
@@ -19011,6 +19030,16 @@ var init_runScheduledImplementationTick = __esm({
 // src/scripts/runSimpleCapabilityScript.ts
 import { spawnSync as spawnSync3 } from "child_process";
 import * as fs47 from "fs";
+function declaredSecrets(names, parent) {
+  if (!Array.isArray(names)) return {};
+  const secrets = {};
+  for (const name of names) {
+    if (typeof name !== "string" || !/^[A-Z][A-Z0-9_]*$/.test(name)) continue;
+    const value = parent[name];
+    if (value !== void 0) secrets[name] = value;
+  }
+  return secrets;
+}
 function isRegularFile2(filePath) {
   try {
     const stat = fs47.lstatSync(filePath);
@@ -19038,10 +19067,12 @@ var init_runSimpleCapabilityScript = __esm({
         return;
       }
       const capabilityEnvironment2 = isStringRecord(ctx.data.capabilityEnvironment) ? ctx.data.capabilityEnvironment : {};
+      const capabilitySecrets = declaredSecrets(ctx.data.capabilitySecretNames, process.env);
       const result = spawnSync3("bash", [scriptPath], {
         cwd: ctx.cwd,
         env: {
           ...buildTickChildEnv(process.env, false),
+          ...capabilitySecrets,
           ...capabilityEnvironment2
         },
         stdio: ["ignore", "pipe", "pipe"],
@@ -22259,11 +22290,7 @@ async function runGraphCapabilityWorkflow(parent, workflow, capability, base, ch
       return withWorkflowBoundaryEval(capability, { ...result, workflowState: state });
     }
     if (!step.next || step.next.length === 0) {
-      state.status = "done";
-      delete state.currentStepId;
-      delete state.blocker;
-      await checkpoint?.(state);
-      return withWorkflowBoundaryEval(capability, { ...result, workflowState: state });
+      return completeWorkflowAtTerminal(capability, state, result, checkpoint);
     }
     const resultConditionPaths = workflowResultConditionPaths(step.next);
     if (resultConditionPaths.length > 0 && !result.capabilityResults?.at(-1)) {
@@ -22286,11 +22313,7 @@ async function runGraphCapabilityWorkflow(parent, workflow, capability, base, ch
       state.transitionCounts[key] = (state.transitionCounts[key] ?? 0) + 1;
     }
     if (transition.to === "$end") {
-      state.status = "done";
-      delete state.currentStepId;
-      delete state.blocker;
-      await checkpoint?.(state);
-      return withWorkflowBoundaryEval(capability, { ...result, workflowState: state });
+      return completeWorkflowAtTerminal(capability, state, result, checkpoint);
     }
     state.currentStepId = transition.to;
     state.status = "running";
@@ -22301,6 +22324,25 @@ async function runGraphCapabilityWorkflow(parent, workflow, capability, base, ch
   await checkpoint?.(state);
   return withWorkflowBoundaryEval(capability, { ...result, workflowState: state });
 }
+async function completeWorkflowAtTerminal(capability, state, output, checkpoint) {
+  const result = output.capabilityResults?.at(-1);
+  if (result?.status === "fail" || result?.status === "blocked") {
+    state.status = result.status === "fail" ? "failed" : "blocked";
+    state.blocker = result.summary;
+    await checkpoint?.(state);
+    return withWorkflowBoundaryEval(capability, {
+      ...output,
+      exitCode: result.status === "fail" ? 1 : 64,
+      reason: result.summary,
+      workflowState: state
+    });
+  }
+  state.status = "done";
+  delete state.currentStepId;
+  delete state.blocker;
+  await checkpoint?.(state);
+  return withWorkflowBoundaryEval(capability, { ...output, workflowState: state });
+}
 function graphWorkflowExecutionKey(parentExecutionKey, workflowSlug, stepId, transitionCounts) {
   const transitionHistory = Object.entries(transitionCounts).filter(([, count]) => count > 0).sort(([left], [right]) => left.localeCompare(right)).map(([transition, count]) => `${transition}=${count}`).join(",");
   return [

package/kody.config.schema.json

@@ -149,6 +149,7 @@
         "e2eCommand": { "type": "string" },
         "draftRelease": { "type": "boolean" },
         "releaseBranch": { "type": "string" },
+        "allowAdminMerge": { "type": "boolean" },
         "timeoutMs": {
           "type": "integer",
           "minimum": 1

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kody-ade/kody-engine",
-  "version": "0.4.473",
+  "version": "0.4.474",
   "description": "kody — autonomous development engine. Single-session Claude Code agent behind a generic executor + declarative implementation profiles.",
   "license": "MIT",
   "type": "module",
@@ -12,6 +12,29 @@
     "templates",
     "kody.config.schema.json"
   ],
+  "scripts": {
+    "kody:run": "tsx bin/kody.ts",
+    "serve": "tsx bin/kody.ts serve",
+    "serve:vscode": "tsx bin/kody.ts serve vscode",
+    "serve:claude": "tsx bin/kody.ts serve claude",
+    "clean:dist": "node scripts/clean-dist.cjs",
+    "build": "pnpm clean:dist && tsup && node scripts/copy-assets.cjs",
+    "check:modularity": "tsx scripts/check-script-modularity.ts",
+    "pretest": "pnpm check:modularity",
+    "test": "vitest run tests/unit tests/int --coverage",
+    "posttest": "tsx scripts/check-coverage-floor.ts",
+    "test:smoke": "vitest run tests/smoke --no-coverage",
+    "test:e2e": "vitest run tests/e2e --no-coverage",
+    "test:runtime-services": "node --test \"tests/runtime-services/*.test.mjs\"",
+    "test:all": "vitest run tests --no-coverage",
+    "typecheck": "tsc --noEmit",
+    "lint": "biome check",
+    "lint:fix": "biome check --write",
+    "format": "biome format --write",
+    "verify:package": "node scripts/verify-package-tarball.cjs",
+    "brain:publish": "docker buildx build --platform linux/amd64 -f runner/Dockerfile.brain --build-arg KODY_ENGINE_REF=$(git rev-parse HEAD) -t ghcr.io/${KODY_BRAIN_GHCR_OWNER:-aharonyaircohen}/kody-brain:latest --push runner",
+    "prepublishOnly": "pnpm typecheck && vitest run tests/unit tests/int --no-coverage && pnpm test:runtime-services && pnpm build && pnpm verify:package"
+  },
   "dependencies": {
     "@actions/cache": "^6.0.0",
     "@anthropic-ai/claude-agent-sdk": "0.2.119",
@@ -38,27 +61,5 @@
     "url": "git+https://github.com/aharonyaircohen/kody-engine.git"
   },
   "homepage": "https://github.com/aharonyaircohen/kody-engine",
-  "bugs": "https://github.com/aharonyaircohen/kody-engine/issues",
-  "scripts": {
-    "kody:run": "tsx bin/kody.ts",
-    "serve": "tsx bin/kody.ts serve",
-    "serve:vscode": "tsx bin/kody.ts serve vscode",
-    "serve:claude": "tsx bin/kody.ts serve claude",
-    "clean:dist": "node scripts/clean-dist.cjs",
-    "build": "pnpm clean:dist && tsup && node scripts/copy-assets.cjs",
-    "check:modularity": "tsx scripts/check-script-modularity.ts",
-    "pretest": "pnpm check:modularity",
-    "test": "vitest run tests/unit tests/int --coverage",
-    "posttest": "tsx scripts/check-coverage-floor.ts",
-    "test:smoke": "vitest run tests/smoke --no-coverage",
-    "test:e2e": "vitest run tests/e2e --no-coverage",
-    "test:runtime-services": "node --test \"tests/runtime-services/*.test.mjs\"",
-    "test:all": "vitest run tests --no-coverage",
-    "typecheck": "tsc --noEmit",
-    "lint": "biome check",
-    "lint:fix": "biome check --write",
-    "format": "biome format --write",
-    "verify:package": "node scripts/verify-package-tarball.cjs",
-    "brain:publish": "docker buildx build --platform linux/amd64 -f runner/Dockerfile.brain --build-arg KODY_ENGINE_REF=$(git rev-parse HEAD) -t ghcr.io/${KODY_BRAIN_GHCR_OWNER:-aharonyaircohen}/kody-brain:latest --push runner"
-  }
-}
+  "bugs": "https://github.com/aharonyaircohen/kody-engine/issues"
+}