@kody-ade/kody-engine 0.4.559 → 0.4.561

package/dist/bin/kody.js

@@ -15,7 +15,7 @@ var init_package = __esm({
   "package.json"() {
     package_default = {
       name: "@kody-ade/kody-engine",
-      version: "0.4.559",
+      version: "0.4.561",
       description: "kody \u2014 autonomous development engine. Single-session Claude Code agent behind a generic executor + declarative implementation profiles.",
       license: "MIT",
       type: "module",
@@ -40,6 +40,7 @@ var init_package = __esm({
         posttest: "tsx scripts/check-coverage-floor.ts",
         "test:smoke": "vitest run tests/smoke --no-coverage",
         "test:e2e": "vitest run tests/e2e --no-coverage",
+        "verify:live-release": "tsx scripts/live-release-gate.ts",
         "test:runtime-services": 'node --test "tests/runtime-services/*.test.mjs"',
         "test:all": "vitest run tests --no-coverage",
         typecheck: "tsc --noEmit",
@@ -3105,6 +3106,39 @@ function createStateBackendFromEnv(env = process.env, client) {
         state,
         updatedAt
       });
+    },
+    async acquireWorkflowRunLease(tenantId2, workflowId, runId, ownerId, nowMs, leaseDurationMs) {
+      const result = await transport.mutation(anyApi.workflowRunLeases.acquire, {
+        tenantId: requireTenant(tenantId2),
+        workflowId: requireNonEmpty(workflowId, "workflowId"),
+        runId: requireNonEmpty(runId, "runId"),
+        ownerId: requireNonEmpty(ownerId, "ownerId"),
+        nowMs,
+        leaseDurationMs
+      });
+      return result;
+    },
+    async renewWorkflowRunLease(tenantId2, workflowId, runId, ownerId, nowMs, leaseDurationMs) {
+      return Boolean(
+        await transport.mutation(anyApi.workflowRunLeases.renew, {
+          tenantId: requireTenant(tenantId2),
+          workflowId: requireNonEmpty(workflowId, "workflowId"),
+          runId: requireNonEmpty(runId, "runId"),
+          ownerId: requireNonEmpty(ownerId, "ownerId"),
+          nowMs,
+          leaseDurationMs
+        })
+      );
+    },
+    async releaseWorkflowRunLease(tenantId2, workflowId, runId, ownerId) {
+      return Boolean(
+        await transport.mutation(anyApi.workflowRunLeases.release, {
+          tenantId: requireTenant(tenantId2),
+          workflowId: requireNonEmpty(workflowId, "workflowId"),
+          runId: requireNonEmpty(runId, "runId"),
+          ownerId: requireNonEmpty(ownerId, "ownerId")
+        })
+      );
     }
   };
 }
@@ -22711,6 +22745,90 @@ var init_simpleCapabilityRuntime = __esm({
   }
 });
 
+// src/workflowDefinitionIdentity.ts
+import { createHash as createHash8 } from "crypto";
+function workflowDefinitionHash(workflow) {
+  return createHash8("sha256").update(stableJson(workflow)).digest("hex");
+}
+function workflowResumeBlocker(state, workflow) {
+  if (!state || state.status === "done") return null;
+  if (!state.definitionHash) return null;
+  if (state.definitionHash !== workflowDefinitionHash(workflow)) {
+    return "The Workflow definition changed after this run started. Start a new run instead of resuming it.";
+  }
+  return null;
+}
+function stableJson(value) {
+  if (Array.isArray(value)) return `[${value.map(stableJson).join(",")}]`;
+  if (value && typeof value === "object") {
+    return `{${Object.entries(value).sort(([left], [right]) => left.localeCompare(right)).map(([key, item]) => `${JSON.stringify(key)}:${stableJson(item)}`).join(",")}}`;
+  }
+  return JSON.stringify(value) ?? "undefined";
+}
+var init_workflowDefinitionIdentity = __esm({
+  "src/workflowDefinitionIdentity.ts"() {
+    "use strict";
+  }
+});
+
+// src/workflowRunLease.ts
+async function acquireWorkflowRunLease(store, input) {
+  const result = await store.acquireWorkflowRunLease(
+    input.tenantId,
+    input.workflowId,
+    input.runId,
+    input.ownerId,
+    input.nowMs,
+    WORKFLOW_RUN_LEASE_MS
+  );
+  if (!result.acquired) return result;
+  return { acquired: true, lease: new WorkflowRunLease(store, input) };
+}
+var WORKFLOW_RUN_LEASE_MS, WorkflowRunLeaseLostError, WorkflowRunLease;
+var init_workflowRunLease = __esm({
+  "src/workflowRunLease.ts"() {
+    "use strict";
+    WORKFLOW_RUN_LEASE_MS = 8 * 60 * 60 * 1e3;
+    WorkflowRunLeaseLostError = class extends Error {
+      constructor() {
+        super("Workflow run ownership was lost; execution stopped to prevent duplicate work.");
+        this.name = "WorkflowRunLeaseLostError";
+      }
+    };
+    WorkflowRunLease = class {
+      constructor(store, identity) {
+        this.store = store;
+        this.identity = identity;
+      }
+      store;
+      identity;
+      released = false;
+      async checkpoint(nowMs = Date.now()) {
+        if (this.released) throw new WorkflowRunLeaseLostError();
+        const renewed = await this.store.renewWorkflowRunLease(
+          this.identity.tenantId,
+          this.identity.workflowId,
+          this.identity.runId,
+          this.identity.ownerId,
+          nowMs,
+          WORKFLOW_RUN_LEASE_MS
+        );
+        if (!renewed) throw new WorkflowRunLeaseLostError();
+      }
+      async release() {
+        if (this.released) return;
+        this.released = true;
+        await this.store.releaseWorkflowRunLease(
+          this.identity.tenantId,
+          this.identity.workflowId,
+          this.identity.runId,
+          this.identity.ownerId
+        );
+      }
+    };
+  }
+});
+
 // src/workflowRunState.ts
 function workflowRunStatePath(workflowId, runId) {
   if (!SAFE_ID.test(workflowId)) throw new Error(`invalid workflow id ${workflowId}`);
@@ -22770,21 +22888,21 @@ function parseWorkflowSteps(value) {
   return Object.keys(steps).length > 0 ? steps : void 0;
 }
 async function readWorkflowRunState(config, _cwd, workflowId, runId) {
-  const tenantId2 = runtimeTenant(config);
+  const tenantId2 = workflowRuntimeTenant(config);
   const row = await createStateBackendFromEnv().getWorkflowRun(tenantId2, workflowId, runId);
   return row ? parseWorkflowRunState(row.state) : null;
 }
 async function writeWorkflowRunState(config, _cwd, workflowId, runId, state) {
   workflowRunStatePath(workflowId, runId);
   await createStateBackendFromEnv().saveWorkflowRun(
-    runtimeTenant(config),
+    workflowRuntimeTenant(config),
     workflowId,
     runId,
     state,
     (/* @__PURE__ */ new Date()).toISOString()
   );
 }
-function runtimeTenant(config) {
+function workflowRuntimeTenant(config) {
   if (config.github?.owner && config.github.repo) return `${config.github.owner}/${config.github.repo}`;
   const tenantId2 = process.env.GITHUB_REPOSITORY?.trim();
   if (!tenantId2) throw new Error("Repository identity is required for workflow run state");
@@ -22811,7 +22929,7 @@ __export(job_exports, {
   stableJobKey: () => stableJobKey,
   validateJob: () => validateJob
 });
-import { createHash as createHash8 } from "crypto";
+import { randomUUID as randomUUID3 } from "crypto";
 function newJobId(flavor) {
   localJobSeq += 1;
   const runId = process.env.GITHUB_RUN_ID;
@@ -22901,75 +23019,100 @@ async function runJob(job, base) {
   const capabilitySelectedImplementation = simpleCapabilityRuntime?.implementation ?? resolvedCapability?.implementation ?? capabilityContext?.config.implementation ?? capabilityContext?.config.implementations?.[0] ?? (capabilityContext?.config.role ? capabilityContext.slug : void 0) ?? (capabilityContext?.config.tickScript ? "capability-tick-scripted" : void 0);
   const profileName = explicitImplementation ?? capabilitySelectedImplementation;
   if (workflow && shouldRunCapabilityWorkflow(valid, workflow, workflowIdentity, capabilitySelectedImplementation, base)) {
-    const workflowCapability = capabilityContext ?? workflowContext;
-    const persistedState = valid.workflowRunId && workflowIdentity && base.config ? await readWorkflowRunState(base.config, base.cwd, workflowIdentity, valid.workflowRunId) : null;
-    const workflowJob = {
-      ...workflowContext && !valid.why ? { ...valid, why: workflowContext.body } : valid,
-      ...workflowCapability.config.agent ? { agent: workflowCapability.config.agent } : {},
-      ...valid.workflowState ?? persistedState ? { workflowState: valid.workflowState ?? persistedState ?? void 0 } : {}
-    };
-    const checkpoint = valid.workflowRunId && workflowIdentity && base.config ? (state) => writeWorkflowRunState(base.config, base.cwd, workflowIdentity, valid.workflowRunId, state) : void 0;
-    const parentRunId = `workflow:${workflowIdentity}:${valid.workflowRunId ?? newJobId(valid.flavor)}`;
-    const startedAt = (/* @__PURE__ */ new Date()).toISOString();
-    const parentRow = {
-      version: 1,
-      id: parentRunId,
-      subjectType: "workflow",
-      subjectId: workflowIdentity,
-      subjectLabel: workflowCapability.title,
-      status: "running",
-      title: workflowCapability.title,
-      startedAt,
-      updatedAt: startedAt,
-      workflow: workflowIdentity,
-      kodyRunId: valid.workflowRunId,
-      parentRunId: typeof base.preloadedData?.parentRunId === "string" ? base.preloadedData.parentRunId : void 0,
-      sourceType: "job"
-    };
-    const persistRun = Boolean(base.config && !base.skipConfig && hasStateBackendConfig());
-    if (base.config && persistRun) {
-      await upsertRunIndexRowBestEffortAsync(base.config, base.cwd, parentRow);
+    const leaseResult = valid.workflowRunId && workflowIdentity && base.config && hasStateBackendConfig() ? await acquireWorkflowRunLease(createStateBackendFromEnv(), {
+      tenantId: workflowRuntimeTenant(base.config),
+      workflowId: workflowIdentity,
+      runId: valid.workflowRunId,
+      ownerId: `${process.env.GITHUB_RUN_ID ?? "local"}:${process.env.GITHUB_RUN_ATTEMPT ?? "1"}:${randomUUID3()}`,
+      nowMs: Date.now()
+    }) : null;
+    if (leaseResult && !leaseResult.acquired) {
+      return {
+        exitCode: 75,
+        reason: `Workflow ${workflowIdentity} run ${valid.workflowRunId} is already running.`
+      };
     }
-    const workflowBase = {
-      ...base,
-      preloadedData: { ...base.preloadedData ?? {}, parentRunId }
-    };
-    let result;
+    const lease = leaseResult?.acquired ? leaseResult.lease : null;
     try {
-      result = await runCapabilityWorkflow(workflowJob, workflow, workflowCapability, workflowBase, checkpoint);
-    } catch (error) {
+      const workflowCapability = capabilityContext ?? workflowContext;
+      const persistedState = valid.workflowRunId && workflowIdentity && base.config ? await readWorkflowRunState(base.config, base.cwd, workflowIdentity, valid.workflowRunId) : null;
+      const workflowJob = {
+        ...workflowContext && !valid.why ? { ...valid, why: workflowContext.body } : valid,
+        ...workflowCapability.config.agent ? { agent: workflowCapability.config.agent } : {},
+        ...valid.workflowState ?? persistedState ? { workflowState: valid.workflowState ?? persistedState ?? void 0 } : {}
+      };
+      const checkpoint = valid.workflowRunId && workflowIdentity && base.config ? async (state) => {
+        await lease?.checkpoint();
+        await writeWorkflowRunState(base.config, base.cwd, workflowIdentity, valid.workflowRunId, state);
+      } : void 0;
+      const parentRunId = `workflow:${workflowIdentity}:${valid.workflowRunId ?? newJobId(valid.flavor)}`;
+      const startedAt = (/* @__PURE__ */ new Date()).toISOString();
+      const parentRow = {
+        version: 1,
+        id: parentRunId,
+        subjectType: "workflow",
+        subjectId: workflowIdentity,
+        subjectLabel: workflowCapability.title,
+        status: "running",
+        title: workflowCapability.title,
+        startedAt,
+        updatedAt: startedAt,
+        workflow: workflowIdentity,
+        kodyRunId: valid.workflowRunId,
+        parentRunId: typeof base.preloadedData?.parentRunId === "string" ? base.preloadedData.parentRunId : void 0,
+        sourceType: "job"
+      };
+      const persistRun = Boolean(base.config && !base.skipConfig && hasStateBackendConfig());
+      if (base.config && persistRun) {
+        await upsertRunIndexRowBestEffortAsync(base.config, base.cwd, parentRow);
+      }
+      const workflowBase = {
+        ...base,
+        preloadedData: { ...base.preloadedData ?? {}, parentRunId }
+      };
+      let result;
+      try {
+        result = await runCapabilityWorkflow(workflowJob, workflow, workflowCapability, workflowBase, checkpoint);
+      } catch (error) {
+        if (base.config && persistRun) {
+          await upsertRunIndexRowBestEffortAsync(base.config, base.cwd, {
+            ...parentRow,
+            status: "failed",
+            summary: error instanceof Error ? error.message : String(error),
+            updatedAt: (/* @__PURE__ */ new Date()).toISOString()
+          });
+        }
+        throw error;
+      }
       if (base.config && persistRun) {
         await upsertRunIndexRowBestEffortAsync(base.config, base.cwd, {
           ...parentRow,
-          status: "failed",
-          summary: error instanceof Error ? error.message : String(error),
+          status: result.exitCode === 0 ? "success" : "failed",
+          summary: result.reason,
           updatedAt: (/* @__PURE__ */ new Date()).toISOString()
         });
       }
-      throw error;
-    }
-    if (base.config && persistRun) {
-      await upsertRunIndexRowBestEffortAsync(base.config, base.cwd, {
-        ...parentRow,
-        status: result.exitCode === 0 ? "success" : "failed",
-        summary: result.reason,
-        updatedAt: (/* @__PURE__ */ new Date()).toISOString()
-      });
-    }
-    if (valid.workflowRunId && workflowIdentity && base.config && result.workflowState) {
-      await writeWorkflowRunState(base.config, base.cwd, workflowIdentity, valid.workflowRunId, result.workflowState);
-    }
-    if (valid.workflowRunId && workflowIdentity && hasGitHubActionsIdentity()) {
-      const facts = result.workflowState?.facts ?? {};
-      await notifyWorkflowCompleted({
-        workflowId: workflowIdentity,
-        runId: valid.workflowRunId,
-        status: result.workflowState?.status === "blocked" ? "blocked" : result.exitCode === 0 ? "success" : "failed",
-        ...result.reason ? { summary: result.reason } : {},
-        ...Object.keys(facts).length > 0 ? { output: facts } : {}
+      if (valid.workflowRunId && workflowIdentity && base.config && result.workflowState) {
+        await lease?.checkpoint();
+        await writeWorkflowRunState(base.config, base.cwd, workflowIdentity, valid.workflowRunId, result.workflowState);
+      }
+      if (valid.workflowRunId && workflowIdentity && hasGitHubActionsIdentity()) {
+        const facts = result.workflowState?.facts ?? {};
+        await notifyWorkflowCompleted({
+          workflowId: workflowIdentity,
+          runId: valid.workflowRunId,
+          status: result.workflowState?.status === "blocked" ? "blocked" : result.exitCode === 0 ? "success" : "failed",
+          ...result.reason ? { summary: result.reason } : {},
+          ...Object.keys(facts).length > 0 ? { output: facts } : {}
+        });
+      }
+      return result;
+    } finally {
+      await lease?.release().catch((error) => {
+        process.stderr.write(`warning: failed to release Workflow run ownership: ${String(error)}
+`);
       });
     }
-    return result;
   }
   if (!profileName) {
     throw new InvalidJobError(`job capability resolves to no implementation: ${capabilityIdentity ?? action}`);
@@ -23049,7 +23192,35 @@ async function runCapabilityImplementationStep(valid, profileName, capabilityIde
     input.cliArgs = simpleCapabilityRuntimeArgs(simpleCapabilityRuntime, capabilityIdentity, capabilityInput);
   }
   const run = base.chain === false ? runImplementation : runImplementationChain;
-  return run(profileName, input);
+  const result = await run(profileName, input);
+  return enforceCapabilityOutputContract(capabilityContext, result);
+}
+function enforceCapabilityOutputContract(capability, result) {
+  const schema = capability?.config.outputSchema;
+  if (result.exitCode !== 0 || !schema || !Object.hasOwn(result, "capabilityOutput")) {
+    return result;
+  }
+  try {
+    validateCapabilityContractValue("output", schema, result.capabilityOutput);
+    return result;
+  } catch (error) {
+    const reason = error instanceof Error ? error.message : String(error);
+    const blocked = {
+      version: 1,
+      status: "blocked",
+      summary: reason,
+      facts: {},
+      artifacts: [],
+      missingEvidence: [],
+      blockers: [reason]
+    };
+    return {
+      ...result,
+      exitCode: 64,
+      reason,
+      capabilityResults: [blocked]
+    };
+  }
 }
 function shouldRunCapabilityWorkflow(job, workflow, capabilityIdentity, selectedImplementation, base) {
   if (workflow.steps.length === 0) return false;
@@ -23072,6 +23243,14 @@ async function runCapabilityWorkflow(parent, workflow, capability, base, checkpo
     }
     return { exitCode: 64, reason: invalid };
   }
+  const resumeBlocker = workflowResumeBlocker(parent.workflowState, workflow);
+  if (resumeBlocker) {
+    const state = initialWorkflowState(parent, workflow);
+    state.status = "blocked";
+    state.blocker = resumeBlocker;
+    await checkpoint?.(state);
+    return { exitCode: 64, reason: resumeBlocker, workflowState: state };
+  }
   if (isGraphWorkflow(workflow)) {
     const result = await runGraphCapabilityWorkflow(parent, workflow, capability, base, checkpoint);
     if (workflow.report && result.workflowState) {
@@ -23548,16 +23727,6 @@ function capabilityInputNames(folder) {
   if (!properties || typeof properties !== "object" || Array.isArray(properties)) return /* @__PURE__ */ new Set();
   return new Set(Object.keys(properties));
 }
-function workflowDefinitionHash(workflow) {
-  return createHash8("sha256").update(stableJson(workflow)).digest("hex");
-}
-function stableJson(value) {
-  if (Array.isArray(value)) return `[${value.map(stableJson).join(",")}]`;
-  if (value && typeof value === "object") {
-    return `{${Object.entries(value).sort(([left], [right]) => left.localeCompare(right)).map(([key, item]) => `${JSON.stringify(key)}:${stableJson(item)}`).join(",")}}`;
-  }
-  return JSON.stringify(value);
-}
 function cloneWorkflowSteps(steps) {
   return Object.fromEntries(Object.entries(steps).map(([id, step]) => [id, { ...step }]));
 }
@@ -23769,6 +23938,7 @@ var init_job = __esm({
   "src/job.ts"() {
     "use strict";
     init_agencyBoundaryEval();
+    init_capability_contract_validation();
     init_capabilityFolders();
     init_config();
     init_definition_paths();
@@ -23779,7 +23949,9 @@ var init_job = __esm({
     init_publishReport();
     init_simpleCapabilityRuntime();
     init_state_backend();
+    init_workflowDefinitionIdentity();
     init_workflowDefinitions();
+    init_workflowRunLease();
     init_workflowRunState();
     init_workflowValidation();
     init_jobIdentity();
@@ -27476,7 +27648,7 @@ init_config();
 init_fetchRepoMcp();
 
 // src/servers/mcpHttpServer.ts
-import { randomUUID as randomUUID3 } from "crypto";
+import { randomUUID as randomUUID4 } from "crypto";
 import { createServer as createServer4 } from "http";
 import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
 import { StreamableHTTPServerTransport } from "@modelcontextprotocol/sdk/server/streamableHttp.js";
@@ -27485,7 +27657,7 @@ function buildMcpHttpServer(opts) {
   const transports = /* @__PURE__ */ new Map();
   for (const route of opts.routes) {
     const transport = new StreamableHTTPServerTransport({
-      sessionIdGenerator: () => randomUUID3()
+      sessionIdGenerator: () => randomUUID4()
     });
     transports.set(route.path, transport);
     routes.set(route.path, route.name);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kody-ade/kody-engine",
-  "version": "0.4.559",
+  "version": "0.4.561",
   "description": "kody — autonomous development engine. Single-session Claude Code agent behind a generic executor + declarative implementation profiles.",
   "license": "MIT",
   "type": "module",
@@ -12,6 +12,30 @@
     "templates",
     "kody.config.schema.json"
   ],
+  "scripts": {
+    "kody:run": "tsx bin/kody.ts",
+    "serve": "tsx bin/kody.ts serve",
+    "serve:vscode": "tsx bin/kody.ts serve vscode",
+    "serve:claude": "tsx bin/kody.ts serve claude",
+    "clean:dist": "node scripts/clean-dist.cjs",
+    "build": "pnpm clean:dist && tsup && node scripts/copy-assets.cjs",
+    "check:modularity": "tsx scripts/check-script-modularity.ts",
+    "pretest": "pnpm check:modularity",
+    "test": "vitest run tests/unit tests/int --coverage",
+    "posttest": "tsx scripts/check-coverage-floor.ts",
+    "test:smoke": "vitest run tests/smoke --no-coverage",
+    "test:e2e": "vitest run tests/e2e --no-coverage",
+    "verify:live-release": "tsx scripts/live-release-gate.ts",
+    "test:runtime-services": "node --test \"tests/runtime-services/*.test.mjs\"",
+    "test:all": "vitest run tests --no-coverage",
+    "typecheck": "tsc --noEmit",
+    "lint": "biome check",
+    "lint:fix": "biome check --write",
+    "format": "biome format --write",
+    "verify:package": "node scripts/verify-package-tarball.cjs",
+    "brain:publish": "docker buildx build --platform linux/amd64 -f runner/Dockerfile.brain --build-arg KODY_ENGINE_REF=$(git rev-parse HEAD) -t ghcr.io/${KODY_BRAIN_GHCR_OWNER:-aharonyaircohen}/kody-brain:latest --push runner",
+    "prepublishOnly": "pnpm typecheck && pnpm test:runtime-services && pnpm build && pnpm verify:package"
+  },
   "dependencies": {
     "@actions/cache": "^6.0.0",
     "@anthropic-ai/claude-agent-sdk": "0.2.119",
@@ -38,27 +62,5 @@
     "url": "git+https://github.com/aharonyaircohen/kody-engine.git"
   },
   "homepage": "https://github.com/aharonyaircohen/kody-engine",
-  "bugs": "https://github.com/aharonyaircohen/kody-engine/issues",
-  "scripts": {
-    "kody:run": "tsx bin/kody.ts",
-    "serve": "tsx bin/kody.ts serve",
-    "serve:vscode": "tsx bin/kody.ts serve vscode",
-    "serve:claude": "tsx bin/kody.ts serve claude",
-    "clean:dist": "node scripts/clean-dist.cjs",
-    "build": "pnpm clean:dist && tsup && node scripts/copy-assets.cjs",
-    "check:modularity": "tsx scripts/check-script-modularity.ts",
-    "pretest": "pnpm check:modularity",
-    "test": "vitest run tests/unit tests/int --coverage",
-    "posttest": "tsx scripts/check-coverage-floor.ts",
-    "test:smoke": "vitest run tests/smoke --no-coverage",
-    "test:e2e": "vitest run tests/e2e --no-coverage",
-    "test:runtime-services": "node --test \"tests/runtime-services/*.test.mjs\"",
-    "test:all": "vitest run tests --no-coverage",
-    "typecheck": "tsc --noEmit",
-    "lint": "biome check",
-    "lint:fix": "biome check --write",
-    "format": "biome format --write",
-    "verify:package": "node scripts/verify-package-tarball.cjs",
-    "brain:publish": "docker buildx build --platform linux/amd64 -f runner/Dockerfile.brain --build-arg KODY_ENGINE_REF=$(git rev-parse HEAD) -t ghcr.io/${KODY_BRAIN_GHCR_OWNER:-aharonyaircohen}/kody-brain:latest --push runner"
-  }
-}
+  "bugs": "https://github.com/aharonyaircohen/kody-engine/issues"
+}