@kody-ade/kody-engine 0.4.574 → 0.4.575

package/dist/bin/kody.js

@@ -15,7 +15,7 @@ var init_package = __esm({
   "package.json"() {
     package_default = {
       name: "@kody-ade/kody-engine",
-      version: "0.4.574",
+      version: "0.4.575",
       description: "kody \u2014 autonomous development engine. Single-session Claude Code agent behind a generic executor + declarative implementation profiles.",
       license: "MIT",
       type: "module",
@@ -2188,6 +2188,7 @@ function readCapabilityFolder(root, slug) {
       rawProfile: contract ? {
         ...contract.execution ? { execution: contract.execution } : {},
         ...contract.deliveryPolicy ? { deliveryPolicy: contract.deliveryPolicy } : {},
+        ...contract.deliveryPathAllowlist ? { deliveryPathAllowlist: contract.deliveryPathAllowlist } : {},
         input: contract.input,
         output: contract.output
       } : {},
@@ -2227,8 +2228,12 @@ function parseCapabilityContract(raw) {
   if (requiredSubagents && parsed.execution !== "agent") {
     throw new Error('contract.json requiredSubagents are supported only when execution is "agent"');
   }
+  const deliveryPathAllowlist = parseDeliveryPathAllowlist(parsed.deliveryPathAllowlist);
+  if (deliveryPathAllowlist && parsed.execution !== "agent") {
+    throw new Error('contract.json deliveryPathAllowlist is supported only when execution is "agent"');
+  }
   const unsupported = Object.keys(parsed).filter(
-    (key) => key !== "execution" && key !== "deliveryPolicy" && key !== "requirements" && key !== "secrets" && key !== "timeoutMs" && key !== "requiredSubagents" && key !== "input" && key !== "output"
+    (key) => key !== "execution" && key !== "deliveryPolicy" && key !== "deliveryPathAllowlist" && key !== "requirements" && key !== "secrets" && key !== "timeoutMs" && key !== "requiredSubagents" && key !== "input" && key !== "output"
   );
   if (unsupported.length > 0) {
     throw new Error(`contract.json contains unsupported fields: ${unsupported.join(", ")}`);
@@ -2242,6 +2247,7 @@ function parseCapabilityContract(raw) {
   return {
     ...parsed.execution ? { execution: parsed.execution } : {},
     ...parsed.deliveryPolicy === "checkpoint" ? { deliveryPolicy: "checkpoint" } : {},
+    ...deliveryPathAllowlist ? { deliveryPathAllowlist } : {},
     ...requirements ? { requirements } : {},
     ...secrets ? { secrets } : {},
     ...timeoutMs !== void 0 ? { timeoutMs } : {},
@@ -2250,6 +2256,25 @@ function parseCapabilityContract(raw) {
     output: parsed.output
   };
 }
+function parseDeliveryPathAllowlist(raw) {
+  if (raw === void 0) return void 0;
+  if (!Array.isArray(raw) || raw.length === 0 || raw.length > 64) {
+    throw new Error("contract.json deliveryPathAllowlist must contain 1 to 64 paths");
+  }
+  if (!raw.every((value) => typeof value === "string")) {
+    throw new Error("contract.json deliveryPathAllowlist must contain paths");
+  }
+  const paths = [...new Set(raw)];
+  for (const value of paths) {
+    const subtree = value.endsWith("/**");
+    const base = subtree ? value.slice(0, -3) : value;
+    const segments = base.split("/");
+    if (!base || base.startsWith("/") || base.startsWith(".") && !base.startsWith(".github/") || base.includes("\\") || base.includes("..") || base.includes("*") || segments.some((segment) => !segment) || subtree && segments.length < 2 || value === ".github/**") {
+      throw new Error(`contract.json deliveryPathAllowlist contains an unsafe path: ${value}`);
+    }
+  }
+  return paths;
+}
 function parseCapabilityRequirements(raw) {
   if (raw === void 0) return void 0;
   if (!isPlainObject(raw)) throw new Error("contract.json requirements must be an object");
@@ -8655,12 +8680,18 @@ function abortUnfinishedGitOps(cwd) {
   }
   return aborted;
 }
-function isForbiddenPath(p) {
+function isExplicitlyAllowed(p, allowlist) {
+  return allowlist.some(
+    (entry) => entry.endsWith("/**") ? p.startsWith(entry.slice(0, -2)) : p === entry
+  );
+}
+function isForbiddenPath(p, deliveryPathAllowlist = []) {
   if (FORBIDDEN_PATH_EXACT.has(p)) return true;
-  if (isGitHubYamlPath(p)) return true;
-  for (const pre of ALLOWED_PATH_PREFIXES) if (p.startsWith(pre)) return false;
   for (const pre of FORBIDDEN_PATH_PREFIXES) if (p.startsWith(pre)) return true;
   for (const suf of FORBIDDEN_PATH_SUFFIXES) if (p.endsWith(suf)) return true;
+  if (isExplicitlyAllowed(p, deliveryPathAllowlist)) return false;
+  if (isGitHubYamlPath(p)) return true;
+  for (const pre of ALLOWED_PATH_PREFIXES) if (p.startsWith(pre)) return false;
   return false;
 }
 function listChangedFiles(cwd) {
@@ -8696,14 +8727,14 @@ function normalizeCommitMessage(raw) {
   }
   return `chore: ${trimmed}`;
 }
-function commitAndPush(branch, agentMessage, cwd) {
+function commitAndPush(branch, agentMessage, cwd, deliveryPathAllowlist = []) {
   const allChanged = listChangedFiles(cwd);
-  const allowedFiles = allChanged.filter((f) => !isForbiddenPath(f));
+  const allowedFiles = allChanged.filter((f) => !isForbiddenPath(f, deliveryPathAllowlist));
   const mergeHeadExists = fs29.existsSync(path28.join(cwd ?? process.cwd(), ".git", "MERGE_HEAD"));
   if (allowedFiles.length === 0 && !mergeHeadExists) {
     return { committed: false, pushed: false, sha: "", message: "" };
   }
-  const forbiddenFiles = allChanged.filter((f) => isForbiddenPath(f));
+  const forbiddenFiles = allChanged.filter((f) => isForbiddenPath(f, deliveryPathAllowlist));
   for (const f of forbiddenFiles) {
     try {
       git(["reset", "-q", "--", f], cwd);
@@ -12362,11 +12393,14 @@ var init_commitAndPush = __esm({
         ctx.data.salvagedFromMissingMarker = true;
       }
       const message = ctx.data.commitMessage || DEFAULT_COMMIT_MESSAGE;
+      const deliveryPathAllowlist = Array.isArray(ctx.data.deliveryPathAllowlist) ? ctx.data.deliveryPathAllowlist : [];
       try {
-        const result2 = commitAndPush(branch, message, ctx.cwd);
+        const result2 = commitAndPush(branch, message, ctx.cwd, deliveryPathAllowlist);
         ctx.data.commitResult = result2;
         const postCommitFiles = result2.committed ? listFilesInCommit("HEAD", ctx.cwd) : listChangedFiles(ctx.cwd);
-        ctx.data.changedFiles = postCommitFiles.filter((f) => !isForbiddenPath(f));
+        ctx.data.changedFiles = postCommitFiles.filter(
+          (f) => !isForbiddenPath(f, deliveryPathAllowlist)
+        );
         if (result2.committed && !result2.pushed) {
           const reason = result2.pushError ?? "push failed (no error detail)";
           ctx.data.commitCrash = reason;
@@ -16326,6 +16360,9 @@ var init_loadSimpleCapability = __esm({
       if (capability.contract?.deliveryPolicy) {
         ctx.data.capabilityDeliveryPolicy = capability.contract.deliveryPolicy;
       }
+      if (capability.contract?.deliveryPathAllowlist) {
+        ctx.data.deliveryPathAllowlist = capability.contract.deliveryPathAllowlist;
+      }
       if (capability.contract?.requirements) {
         ctx.data.capabilityRequirements = capability.contract.requirements;
       }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kody-ade/kody-engine",
-  "version": "0.4.574",
+  "version": "0.4.575",
   "description": "kody — autonomous development engine. Single-session Claude Code agent behind a generic executor + declarative implementation profiles.",
   "license": "MIT",
   "type": "module",
@@ -12,30 +12,6 @@
     "templates",
     "kody.config.schema.json"
   ],
-  "scripts": {
-    "kody:run": "tsx bin/kody.ts",
-    "serve": "tsx bin/kody.ts serve",
-    "serve:vscode": "tsx bin/kody.ts serve vscode",
-    "serve:claude": "tsx bin/kody.ts serve claude",
-    "clean:dist": "node scripts/clean-dist.cjs",
-    "build": "pnpm clean:dist && tsup && node scripts/copy-assets.cjs",
-    "check:modularity": "tsx scripts/check-script-modularity.ts",
-    "pretest": "pnpm check:modularity",
-    "test": "vitest run tests/unit tests/int --coverage",
-    "posttest": "tsx scripts/check-coverage-floor.ts",
-    "test:smoke": "vitest run tests/smoke --no-coverage",
-    "test:e2e": "vitest run tests/e2e --no-coverage",
-    "verify:live-release": "tsx scripts/live-release-gate.ts",
-    "test:runtime-services": "node --test \"tests/runtime-services/*.test.mjs\"",
-    "test:all": "vitest run tests --no-coverage",
-    "typecheck": "tsc --noEmit",
-    "lint": "biome check",
-    "lint:fix": "biome check --write",
-    "format": "biome format --write",
-    "verify:package": "node scripts/verify-package-tarball.cjs",
-    "brain:publish": "docker buildx build --platform linux/amd64 -f runner/Dockerfile.brain --build-arg KODY_ENGINE_REF=$(git rev-parse HEAD) -t ghcr.io/${KODY_BRAIN_GHCR_OWNER:-aharonyaircohen}/kody-brain:latest --push runner",
-    "prepublishOnly": "pnpm typecheck && pnpm test:runtime-services && pnpm build && pnpm verify:package"
-  },
   "dependencies": {
     "@actions/cache": "^6.0.0",
     "@anthropic-ai/claude-agent-sdk": "0.2.119",
@@ -62,5 +38,28 @@
     "url": "git+https://github.com/aharonyaircohen/kody-engine.git"
   },
   "homepage": "https://github.com/aharonyaircohen/kody-engine",
-  "bugs": "https://github.com/aharonyaircohen/kody-engine/issues"
-}
+  "bugs": "https://github.com/aharonyaircohen/kody-engine/issues",
+  "scripts": {
+    "kody:run": "tsx bin/kody.ts",
+    "serve": "tsx bin/kody.ts serve",
+    "serve:vscode": "tsx bin/kody.ts serve vscode",
+    "serve:claude": "tsx bin/kody.ts serve claude",
+    "clean:dist": "node scripts/clean-dist.cjs",
+    "build": "pnpm clean:dist && tsup && node scripts/copy-assets.cjs",
+    "check:modularity": "tsx scripts/check-script-modularity.ts",
+    "pretest": "pnpm check:modularity",
+    "test": "vitest run tests/unit tests/int --coverage",
+    "posttest": "tsx scripts/check-coverage-floor.ts",
+    "test:smoke": "vitest run tests/smoke --no-coverage",
+    "test:e2e": "vitest run tests/e2e --no-coverage",
+    "verify:live-release": "tsx scripts/live-release-gate.ts",
+    "test:runtime-services": "node --test \"tests/runtime-services/*.test.mjs\"",
+    "test:all": "vitest run tests --no-coverage",
+    "typecheck": "tsc --noEmit",
+    "lint": "biome check",
+    "lint:fix": "biome check --write",
+    "format": "biome format --write",
+    "verify:package": "node scripts/verify-package-tarball.cjs",
+    "brain:publish": "docker buildx build --platform linux/amd64 -f runner/Dockerfile.brain --build-arg KODY_ENGINE_REF=$(git rev-parse HEAD) -t ghcr.io/${KODY_BRAIN_GHCR_OWNER:-aharonyaircohen}/kody-brain:latest --push runner"
+  }
+}