@kody-ade/kody-engine 0.4.573 → 0.4.575

package/dist/bin/kody.js

@@ -15,7 +15,7 @@ var init_package = __esm({
   "package.json"() {
     package_default = {
       name: "@kody-ade/kody-engine",
-      version: "0.4.573",
+      version: "0.4.575",
       description: "kody \u2014 autonomous development engine. Single-session Claude Code agent behind a generic executor + declarative implementation profiles.",
       license: "MIT",
       type: "module",
@@ -54,7 +54,7 @@ var init_package = __esm({
       dependencies: {
         "@actions/cache": "^6.0.0",
         "@anthropic-ai/claude-agent-sdk": "0.2.119",
-        "@kody-ade/engine-contracts": "0.1.0",
+        "@kody-ade/engine-contracts": "^0.2.0",
         "@modelcontextprotocol/sdk": "^1.29.0",
         ajv: "^8.18.0",
         convex: "^1.17.0",
@@ -2188,6 +2188,7 @@ function readCapabilityFolder(root, slug) {
       rawProfile: contract ? {
         ...contract.execution ? { execution: contract.execution } : {},
         ...contract.deliveryPolicy ? { deliveryPolicy: contract.deliveryPolicy } : {},
+        ...contract.deliveryPathAllowlist ? { deliveryPathAllowlist: contract.deliveryPathAllowlist } : {},
         input: contract.input,
         output: contract.output
       } : {},
@@ -2227,8 +2228,12 @@ function parseCapabilityContract(raw) {
   if (requiredSubagents && parsed.execution !== "agent") {
     throw new Error('contract.json requiredSubagents are supported only when execution is "agent"');
   }
+  const deliveryPathAllowlist = parseDeliveryPathAllowlist(parsed.deliveryPathAllowlist);
+  if (deliveryPathAllowlist && parsed.execution !== "agent") {
+    throw new Error('contract.json deliveryPathAllowlist is supported only when execution is "agent"');
+  }
   const unsupported = Object.keys(parsed).filter(
-    (key) => key !== "execution" && key !== "deliveryPolicy" && key !== "requirements" && key !== "secrets" && key !== "timeoutMs" && key !== "requiredSubagents" && key !== "input" && key !== "output"
+    (key) => key !== "execution" && key !== "deliveryPolicy" && key !== "deliveryPathAllowlist" && key !== "requirements" && key !== "secrets" && key !== "timeoutMs" && key !== "requiredSubagents" && key !== "input" && key !== "output"
   );
   if (unsupported.length > 0) {
     throw new Error(`contract.json contains unsupported fields: ${unsupported.join(", ")}`);
@@ -2242,6 +2247,7 @@ function parseCapabilityContract(raw) {
   return {
     ...parsed.execution ? { execution: parsed.execution } : {},
     ...parsed.deliveryPolicy === "checkpoint" ? { deliveryPolicy: "checkpoint" } : {},
+    ...deliveryPathAllowlist ? { deliveryPathAllowlist } : {},
     ...requirements ? { requirements } : {},
     ...secrets ? { secrets } : {},
     ...timeoutMs !== void 0 ? { timeoutMs } : {},
@@ -2250,6 +2256,25 @@ function parseCapabilityContract(raw) {
     output: parsed.output
   };
 }
+function parseDeliveryPathAllowlist(raw) {
+  if (raw === void 0) return void 0;
+  if (!Array.isArray(raw) || raw.length === 0 || raw.length > 64) {
+    throw new Error("contract.json deliveryPathAllowlist must contain 1 to 64 paths");
+  }
+  if (!raw.every((value) => typeof value === "string")) {
+    throw new Error("contract.json deliveryPathAllowlist must contain paths");
+  }
+  const paths = [...new Set(raw)];
+  for (const value of paths) {
+    const subtree = value.endsWith("/**");
+    const base = subtree ? value.slice(0, -3) : value;
+    const segments = base.split("/");
+    if (!base || base.startsWith("/") || base.startsWith(".") && !base.startsWith(".github/") || base.includes("\\") || base.includes("..") || base.includes("*") || segments.some((segment) => !segment) || subtree && segments.length < 2 || value === ".github/**") {
+      throw new Error(`contract.json deliveryPathAllowlist contains an unsafe path: ${value}`);
+    }
+  }
+  return paths;
+}
 function parseCapabilityRequirements(raw) {
   if (raw === void 0) return void 0;
   if (!isPlainObject(raw)) throw new Error("contract.json requirements must be an object");
@@ -4744,6 +4769,7 @@ var init_task_artifacts = __esm({
 });
 
 // src/workflowValidation.ts
+import { validateExecutableWorkflow } from "@kody-ade/engine-contracts";
 function validateWorkflow(value, options = {}) {
   const issues = [];
   const workflow = asRecord(value);
@@ -4762,6 +4788,7 @@ function validateWorkflow(value, options = {}) {
     const step = asRecord(entry);
     return Boolean(step && (step.id !== void 0 || step.next !== void 0));
   });
+  const sharedIssues = graphMode ? validateExecutableWorkflow(value, options) : [];
   const steps = rawSteps.map(
     (entry) => typeof entry === "string" ? { capability: entry } : asRecord(entry)
   );
@@ -4822,7 +4849,7 @@ function validateWorkflow(value, options = {}) {
       capability ? options.capabilityInputs?.get(capability) : void 0
     );
   });
-  if (!graphMode) return issues;
+  if (!graphMode) return uniqueIssues([...issues, ...sharedIssues]);
   const seen = /* @__PURE__ */ new Set();
   ids.forEach((id, index) => {
     if (seen.has(id)) issue(issues, "duplicate_step_id", `steps[${index}].id`, `workflow step id ${id} is duplicated`);
@@ -4965,7 +4992,16 @@ function validateWorkflow(value, options = {}) {
       issue(issues, "missing_terminal_step", "steps", "workflow has no reachable final step");
     }
   }
-  return issues;
+  return uniqueIssues([...issues, ...sharedIssues]);
+}
+function uniqueIssues(issues) {
+  const seen = /* @__PURE__ */ new Set();
+  return issues.filter((entry) => {
+    const key = `${entry.code}\0${entry.path}`;
+    if (seen.has(key)) return false;
+    seen.add(key);
+    return true;
+  });
 }
 function validateInputBindings(value, path59, issues, declaredInputs) {
   if (value === void 0) return;
@@ -8644,12 +8680,18 @@ function abortUnfinishedGitOps(cwd) {
   }
   return aborted;
 }
-function isForbiddenPath(p) {
+function isExplicitlyAllowed(p, allowlist) {
+  return allowlist.some(
+    (entry) => entry.endsWith("/**") ? p.startsWith(entry.slice(0, -2)) : p === entry
+  );
+}
+function isForbiddenPath(p, deliveryPathAllowlist = []) {
   if (FORBIDDEN_PATH_EXACT.has(p)) return true;
-  if (isGitHubYamlPath(p)) return true;
-  for (const pre of ALLOWED_PATH_PREFIXES) if (p.startsWith(pre)) return false;
   for (const pre of FORBIDDEN_PATH_PREFIXES) if (p.startsWith(pre)) return true;
   for (const suf of FORBIDDEN_PATH_SUFFIXES) if (p.endsWith(suf)) return true;
+  if (isExplicitlyAllowed(p, deliveryPathAllowlist)) return false;
+  if (isGitHubYamlPath(p)) return true;
+  for (const pre of ALLOWED_PATH_PREFIXES) if (p.startsWith(pre)) return false;
   return false;
 }
 function listChangedFiles(cwd) {
@@ -8685,14 +8727,14 @@ function normalizeCommitMessage(raw) {
   }
   return `chore: ${trimmed}`;
 }
-function commitAndPush(branch, agentMessage, cwd) {
+function commitAndPush(branch, agentMessage, cwd, deliveryPathAllowlist = []) {
   const allChanged = listChangedFiles(cwd);
-  const allowedFiles = allChanged.filter((f) => !isForbiddenPath(f));
+  const allowedFiles = allChanged.filter((f) => !isForbiddenPath(f, deliveryPathAllowlist));
   const mergeHeadExists = fs29.existsSync(path28.join(cwd ?? process.cwd(), ".git", "MERGE_HEAD"));
   if (allowedFiles.length === 0 && !mergeHeadExists) {
     return { committed: false, pushed: false, sha: "", message: "" };
   }
-  const forbiddenFiles = allChanged.filter((f) => isForbiddenPath(f));
+  const forbiddenFiles = allChanged.filter((f) => isForbiddenPath(f, deliveryPathAllowlist));
   for (const f of forbiddenFiles) {
     try {
       git(["reset", "-q", "--", f], cwd);
@@ -12351,11 +12393,14 @@ var init_commitAndPush = __esm({
         ctx.data.salvagedFromMissingMarker = true;
       }
       const message = ctx.data.commitMessage || DEFAULT_COMMIT_MESSAGE;
+      const deliveryPathAllowlist = Array.isArray(ctx.data.deliveryPathAllowlist) ? ctx.data.deliveryPathAllowlist : [];
       try {
-        const result2 = commitAndPush(branch, message, ctx.cwd);
+        const result2 = commitAndPush(branch, message, ctx.cwd, deliveryPathAllowlist);
         ctx.data.commitResult = result2;
         const postCommitFiles = result2.committed ? listFilesInCommit("HEAD", ctx.cwd) : listChangedFiles(ctx.cwd);
-        ctx.data.changedFiles = postCommitFiles.filter((f) => !isForbiddenPath(f));
+        ctx.data.changedFiles = postCommitFiles.filter(
+          (f) => !isForbiddenPath(f, deliveryPathAllowlist)
+        );
         if (result2.committed && !result2.pushed) {
           const reason = result2.pushError ?? "push failed (no error detail)";
           ctx.data.commitCrash = reason;
@@ -16315,6 +16360,9 @@ var init_loadSimpleCapability = __esm({
       if (capability.contract?.deliveryPolicy) {
         ctx.data.capabilityDeliveryPolicy = capability.contract.deliveryPolicy;
       }
+      if (capability.contract?.deliveryPathAllowlist) {
+        ctx.data.deliveryPathAllowlist = capability.contract.deliveryPathAllowlist;
+      }
       if (capability.contract?.requirements) {
         ctx.data.capabilityRequirements = capability.contract.requirements;
       }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kody-ade/kody-engine",
-  "version": "0.4.573",
+  "version": "0.4.575",
   "description": "kody — autonomous development engine. Single-session Claude Code agent behind a generic executor + declarative implementation profiles.",
   "license": "MIT",
   "type": "module",
@@ -15,7 +15,7 @@
   "dependencies": {
     "@actions/cache": "^6.0.0",
     "@anthropic-ai/claude-agent-sdk": "0.2.119",
-    "@kody-ade/engine-contracts": "0.1.0",
+    "@kody-ade/engine-contracts": "^0.2.0",
     "@modelcontextprotocol/sdk": "^1.29.0",
     "ajv": "^8.18.0",
     "convex": "^1.17.0",