@kody-ade/kody-engine 0.4.574 → 0.4.576

package/dist/bin/kody.js

@@ -15,7 +15,7 @@ var init_package = __esm({
   "package.json"() {
     package_default = {
       name: "@kody-ade/kody-engine",
-      version: "0.4.574",
+      version: "0.4.576",
       description: "kody \u2014 autonomous development engine. Single-session Claude Code agent behind a generic executor + declarative implementation profiles.",
       license: "MIT",
       type: "module",
@@ -2188,6 +2188,7 @@ function readCapabilityFolder(root, slug) {
       rawProfile: contract ? {
         ...contract.execution ? { execution: contract.execution } : {},
         ...contract.deliveryPolicy ? { deliveryPolicy: contract.deliveryPolicy } : {},
+        ...contract.deliveryPathAllowlist ? { deliveryPathAllowlist: contract.deliveryPathAllowlist } : {},
         input: contract.input,
         output: contract.output
       } : {},
@@ -2227,8 +2228,12 @@ function parseCapabilityContract(raw) {
   if (requiredSubagents && parsed.execution !== "agent") {
     throw new Error('contract.json requiredSubagents are supported only when execution is "agent"');
   }
+  const deliveryPathAllowlist = parseDeliveryPathAllowlist(parsed.deliveryPathAllowlist);
+  if (deliveryPathAllowlist && parsed.execution !== "agent") {
+    throw new Error('contract.json deliveryPathAllowlist is supported only when execution is "agent"');
+  }
   const unsupported = Object.keys(parsed).filter(
-    (key) => key !== "execution" && key !== "deliveryPolicy" && key !== "requirements" && key !== "secrets" && key !== "timeoutMs" && key !== "requiredSubagents" && key !== "input" && key !== "output"
+    (key) => key !== "execution" && key !== "deliveryPolicy" && key !== "deliveryPathAllowlist" && key !== "requirements" && key !== "secrets" && key !== "timeoutMs" && key !== "requiredSubagents" && key !== "input" && key !== "output"
   );
   if (unsupported.length > 0) {
     throw new Error(`contract.json contains unsupported fields: ${unsupported.join(", ")}`);
@@ -2242,6 +2247,7 @@ function parseCapabilityContract(raw) {
   return {
     ...parsed.execution ? { execution: parsed.execution } : {},
     ...parsed.deliveryPolicy === "checkpoint" ? { deliveryPolicy: "checkpoint" } : {},
+    ...deliveryPathAllowlist ? { deliveryPathAllowlist } : {},
     ...requirements ? { requirements } : {},
     ...secrets ? { secrets } : {},
     ...timeoutMs !== void 0 ? { timeoutMs } : {},
@@ -2250,6 +2256,25 @@ function parseCapabilityContract(raw) {
     output: parsed.output
   };
 }
+function parseDeliveryPathAllowlist(raw) {
+  if (raw === void 0) return void 0;
+  if (!Array.isArray(raw) || raw.length === 0 || raw.length > 64) {
+    throw new Error("contract.json deliveryPathAllowlist must contain 1 to 64 paths");
+  }
+  if (!raw.every((value) => typeof value === "string")) {
+    throw new Error("contract.json deliveryPathAllowlist must contain paths");
+  }
+  const paths = [...new Set(raw)];
+  for (const value of paths) {
+    const subtree = value.endsWith("/**");
+    const base = subtree ? value.slice(0, -3) : value;
+    const segments = base.split("/");
+    if (!base || base.startsWith("/") || base.startsWith(".") && !base.startsWith(".github/") || base.includes("\\") || base.includes("..") || base.includes("*") || segments.some((segment) => !segment) || subtree && segments.length < 2 || value === ".github/**") {
+      throw new Error(`contract.json deliveryPathAllowlist contains an unsafe path: ${value}`);
+    }
+  }
+  return paths;
+}
 function parseCapabilityRequirements(raw) {
   if (raw === void 0) return void 0;
   if (!isPlainObject(raw)) throw new Error("contract.json requirements must be an object");
@@ -3043,6 +3068,12 @@ function createStateBackendFromEnv(env = process.env, client) {
     transport = createConvexClientFromEnv(env);
   }
   return {
+    async listLoops(tenantId2) {
+      const result = await transport.query(anyApi.agencyRequestLoops.list, {
+        tenantId: requireTenant(tenantId2)
+      });
+      return Array.isArray(result) ? result : [];
+    },
     async get(tenantId2, taskKey, kind) {
       const result = await transport.query(anyApi.taskState.get, {
         tenantId: requireTenant(tenantId2),
@@ -8655,12 +8686,18 @@ function abortUnfinishedGitOps(cwd) {
   }
   return aborted;
 }
-function isForbiddenPath(p) {
+function isExplicitlyAllowed(p, allowlist) {
+  return allowlist.some(
+    (entry) => entry.endsWith("/**") ? p.startsWith(entry.slice(0, -2)) : p === entry
+  );
+}
+function isForbiddenPath(p, deliveryPathAllowlist = []) {
   if (FORBIDDEN_PATH_EXACT.has(p)) return true;
-  if (isGitHubYamlPath(p)) return true;
-  for (const pre of ALLOWED_PATH_PREFIXES) if (p.startsWith(pre)) return false;
   for (const pre of FORBIDDEN_PATH_PREFIXES) if (p.startsWith(pre)) return true;
   for (const suf of FORBIDDEN_PATH_SUFFIXES) if (p.endsWith(suf)) return true;
+  if (isExplicitlyAllowed(p, deliveryPathAllowlist)) return false;
+  if (isGitHubYamlPath(p)) return true;
+  for (const pre of ALLOWED_PATH_PREFIXES) if (p.startsWith(pre)) return false;
   return false;
 }
 function listChangedFiles(cwd) {
@@ -8696,14 +8733,14 @@ function normalizeCommitMessage(raw) {
   }
   return `chore: ${trimmed}`;
 }
-function commitAndPush(branch, agentMessage, cwd) {
+function commitAndPush(branch, agentMessage, cwd, deliveryPathAllowlist = []) {
   const allChanged = listChangedFiles(cwd);
-  const allowedFiles = allChanged.filter((f) => !isForbiddenPath(f));
+  const allowedFiles = allChanged.filter((f) => !isForbiddenPath(f, deliveryPathAllowlist));
   const mergeHeadExists = fs29.existsSync(path28.join(cwd ?? process.cwd(), ".git", "MERGE_HEAD"));
   if (allowedFiles.length === 0 && !mergeHeadExists) {
     return { committed: false, pushed: false, sha: "", message: "" };
   }
-  const forbiddenFiles = allChanged.filter((f) => isForbiddenPath(f));
+  const forbiddenFiles = allChanged.filter((f) => isForbiddenPath(f, deliveryPathAllowlist));
   for (const f of forbiddenFiles) {
     try {
       git(["reset", "-q", "--", f], cwd);
@@ -12362,11 +12399,14 @@ var init_commitAndPush = __esm({
         ctx.data.salvagedFromMissingMarker = true;
       }
       const message = ctx.data.commitMessage || DEFAULT_COMMIT_MESSAGE;
+      const deliveryPathAllowlist = Array.isArray(ctx.data.deliveryPathAllowlist) ? ctx.data.deliveryPathAllowlist : [];
       try {
-        const result2 = commitAndPush(branch, message, ctx.cwd);
+        const result2 = commitAndPush(branch, message, ctx.cwd, deliveryPathAllowlist);
         ctx.data.commitResult = result2;
         const postCommitFiles = result2.committed ? listFilesInCommit("HEAD", ctx.cwd) : listChangedFiles(ctx.cwd);
-        ctx.data.changedFiles = postCommitFiles.filter((f) => !isForbiddenPath(f));
+        ctx.data.changedFiles = postCommitFiles.filter(
+          (f) => !isForbiddenPath(f, deliveryPathAllowlist)
+        );
         if (result2.committed && !result2.pushed) {
           const reason = result2.pushError ?? "push failed (no error detail)";
           ctx.data.commitCrash = reason;
@@ -14181,7 +14221,7 @@ async function dispatchLoopsWith(input) {
     let reason = "target did not complete";
     let runFailed = false;
     try {
-      const result = await input.run(loopJob(loop), runId);
+      const result = await input.run(loopJob(loop, runId), runId, loop.id);
       exitCode = result.exitCode;
       reason = result.reason ?? (exitCode === 0 ? "dispatched" : "target failed");
     } catch (error) {
@@ -14251,6 +14291,14 @@ function selectRunnableLoops(loops, now, options) {
     (loop) => loop.enabled && (!options.loopId || loop.id === options.loopId) && (options.force || loop.trigger.type === "schedule" && dueSlot(loop, now) !== null)
   );
 }
+function mergeLoopDefinitions(repositoryLoops, runtimeLoops) {
+  const byId = new Map(repositoryLoops.map((loop) => [loop.id, loop]));
+  for (const candidate of runtimeLoops) {
+    const loop = normalizeLoopDefinition(candidate);
+    if (loop) byId.set(loop.id, loop);
+  }
+  return [...byId.values()].sort((left, right) => left.id.localeCompare(right.id));
+}
 function loopDispatchSlot(loop, now, force, nonce) {
   return force ? `manual:${now.toISOString()}:${nonce}` : dueSlot(loop, now);
 }
@@ -14284,9 +14332,9 @@ function dueSlot(loop, now) {
   const day = parts.find((part) => part.type === "day")?.value;
   return `${year}-${month}-${day}T${loop.trigger.at.time}[${loop.trigger.at.timezone}]`;
 }
-function loopJob(loop) {
+function loopJob(loop, runId) {
   const cliArgs = { ...loop.input };
-  return loop.target.kind === "workflow" ? { workflow: loop.target.id, cliArgs, flavor: "scheduled" } : { capability: loop.target.id, cliArgs, flavor: "scheduled" };
+  return loop.target.kind === "workflow" ? { workflow: loop.target.id, workflowRunId: runId, cliArgs, flavor: "scheduled" } : { capability: loop.target.id, cliArgs, flavor: "scheduled" };
 }
 function repositoryTenant(config) {
   const [envOwner, envRepo] = (process.env.GITHUB_REPOSITORY ?? "").split("/");
@@ -14309,13 +14357,14 @@ var init_dispatchLoops = __esm({
       const now = /* @__PURE__ */ new Date();
       const force = ctx.data.jobForce === true;
       const requestedLoopId = typeof ctx.args.loop === "string" ? ctx.args.loop.trim() : "";
-      const due = selectRunnableLoops(listLoopDefinitions(ctx.cwd), now, {
+      const backend = createStateBackendFromEnv();
+      const loops = mergeLoopDefinitions(listLoopDefinitions(ctx.cwd), await backend.listLoops(tenantId2));
+      const due = selectRunnableLoops(loops, now, {
         force,
         ...requestedLoopId ? { loopId: requestedLoopId } : {}
       });
       process.stdout.write(`\u2192 kody: Loop scheduler found ${due.length} runnable Loop(s)${force ? " (manual)" : ""}
 `);
-      const backend = createStateBackendFromEnv();
       const results = await dispatchLoopsWith({
         loops: due,
         tenantId: tenantId2,
@@ -14323,13 +14372,13 @@ var init_dispatchLoops = __esm({
         now,
         force,
         nonce: randomUUID,
-        run: (job, parentRunId) => runJob(job, {
+        run: (job, parentRunId, loopId) => runJob(job, {
           cwd: ctx.cwd,
           config: ctx.config,
           verbose: ctx.verbose,
           quiet: ctx.quiet,
           chain: false,
-          preloadedData: { parentRunId }
+          preloadedData: { parentRunId, loopId }
         })
       });
       for (const result of results) {
@@ -16326,6 +16375,9 @@ var init_loadSimpleCapability = __esm({
       if (capability.contract?.deliveryPolicy) {
         ctx.data.capabilityDeliveryPolicy = capability.contract.deliveryPolicy;
       }
+      if (capability.contract?.deliveryPathAllowlist) {
+        ctx.data.deliveryPathAllowlist = capability.contract.deliveryPathAllowlist;
+      }
       if (capability.contract?.requirements) {
         ctx.data.capabilityRequirements = capability.contract.requirements;
       }
@@ -23327,6 +23379,7 @@ async function runJob(job, base) {
         await notifyWorkflowCompleted({
           workflowId: workflowIdentity,
           runId: valid.workflowRunId,
+          ...typeof base.preloadedData?.loopId === "string" ? { loopId: base.preloadedData.loopId } : {},
           status: result.workflowState?.status === "blocked" ? "blocked" : result.exitCode === 0 ? "success" : "failed",
           ...result.reason ? { summary: result.reason } : {},
           ...Object.keys(facts).length > 0 ? { output: facts } : {}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kody-ade/kody-engine",
-  "version": "0.4.574",
+  "version": "0.4.576",
   "description": "kody — autonomous development engine. Single-session Claude Code agent behind a generic executor + declarative implementation profiles.",
   "license": "MIT",
   "type": "module",
@@ -12,30 +12,6 @@
     "templates",
     "kody.config.schema.json"
   ],
-  "scripts": {
-    "kody:run": "tsx bin/kody.ts",
-    "serve": "tsx bin/kody.ts serve",
-    "serve:vscode": "tsx bin/kody.ts serve vscode",
-    "serve:claude": "tsx bin/kody.ts serve claude",
-    "clean:dist": "node scripts/clean-dist.cjs",
-    "build": "pnpm clean:dist && tsup && node scripts/copy-assets.cjs",
-    "check:modularity": "tsx scripts/check-script-modularity.ts",
-    "pretest": "pnpm check:modularity",
-    "test": "vitest run tests/unit tests/int --coverage",
-    "posttest": "tsx scripts/check-coverage-floor.ts",
-    "test:smoke": "vitest run tests/smoke --no-coverage",
-    "test:e2e": "vitest run tests/e2e --no-coverage",
-    "verify:live-release": "tsx scripts/live-release-gate.ts",
-    "test:runtime-services": "node --test \"tests/runtime-services/*.test.mjs\"",
-    "test:all": "vitest run tests --no-coverage",
-    "typecheck": "tsc --noEmit",
-    "lint": "biome check",
-    "lint:fix": "biome check --write",
-    "format": "biome format --write",
-    "verify:package": "node scripts/verify-package-tarball.cjs",
-    "brain:publish": "docker buildx build --platform linux/amd64 -f runner/Dockerfile.brain --build-arg KODY_ENGINE_REF=$(git rev-parse HEAD) -t ghcr.io/${KODY_BRAIN_GHCR_OWNER:-aharonyaircohen}/kody-brain:latest --push runner",
-    "prepublishOnly": "pnpm typecheck && pnpm test:runtime-services && pnpm build && pnpm verify:package"
-  },
   "dependencies": {
     "@actions/cache": "^6.0.0",
     "@anthropic-ai/claude-agent-sdk": "0.2.119",
@@ -62,5 +38,28 @@
     "url": "git+https://github.com/aharonyaircohen/kody-engine.git"
   },
   "homepage": "https://github.com/aharonyaircohen/kody-engine",
-  "bugs": "https://github.com/aharonyaircohen/kody-engine/issues"
-}
+  "bugs": "https://github.com/aharonyaircohen/kody-engine/issues",
+  "scripts": {
+    "kody:run": "tsx bin/kody.ts",
+    "serve": "tsx bin/kody.ts serve",
+    "serve:vscode": "tsx bin/kody.ts serve vscode",
+    "serve:claude": "tsx bin/kody.ts serve claude",
+    "clean:dist": "node scripts/clean-dist.cjs",
+    "build": "pnpm clean:dist && tsup && node scripts/copy-assets.cjs",
+    "check:modularity": "tsx scripts/check-script-modularity.ts",
+    "pretest": "pnpm check:modularity",
+    "test": "vitest run tests/unit tests/int --coverage",
+    "posttest": "tsx scripts/check-coverage-floor.ts",
+    "test:smoke": "vitest run tests/smoke --no-coverage",
+    "test:e2e": "vitest run tests/e2e --no-coverage",
+    "verify:live-release": "tsx scripts/live-release-gate.ts",
+    "test:runtime-services": "node --test \"tests/runtime-services/*.test.mjs\"",
+    "test:all": "vitest run tests --no-coverage",
+    "typecheck": "tsc --noEmit",
+    "lint": "biome check",
+    "lint:fix": "biome check --write",
+    "format": "biome format --write",
+    "verify:package": "node scripts/verify-package-tarball.cjs",
+    "brain:publish": "docker buildx build --platform linux/amd64 -f runner/Dockerfile.brain --build-arg KODY_ENGINE_REF=$(git rev-parse HEAD) -t ghcr.io/${KODY_BRAIN_GHCR_OWNER:-aharonyaircohen}/kody-brain:latest --push runner"
+  }
+}