@kody-ade/kody-engine 0.4.581 → 0.4.583

package/dist/bin/kody.js

@@ -15,7 +15,7 @@ var init_package = __esm({
   "package.json"() {
     package_default = {
       name: "@kody-ade/kody-engine",
-      version: "0.4.581",
+      version: "0.4.583",
       description: "kody \u2014 autonomous development engine. Single-session Claude Code agent behind a generic executor + declarative implementation profiles.",
       license: "MIT",
       type: "module",
@@ -8711,11 +8711,19 @@ function isSafeConfigActivationChange(before, after) {
   if (!isRecord(before) || !isRecord(after)) return false;
   const beforeRest = { ...before };
   const afterRest = { ...after };
+  const beforeCompany = before.company;
+  const afterCompany = after.company;
+  if (!isRecord(beforeCompany) || !isRecord(afterCompany)) return false;
+  delete beforeRest.company;
+  delete afterRest.company;
+  if (!isDeepStrictEqual(beforeRest, afterRest)) return false;
+  const beforeCompanyRest = { ...beforeCompany };
+  const afterCompanyRest = { ...afterCompany };
   for (const field of ACTIVATION_FIELDS) {
-    const previous = before[field];
-    const next = after[field];
-    delete beforeRest[field];
-    delete afterRest[field];
+    const previous = beforeCompany[field];
+    const next = afterCompany[field];
+    delete beforeCompanyRest[field];
+    delete afterCompanyRest[field];
     if (previous === void 0 && next === void 0) continue;
     if (!Array.isArray(previous ?? []) || !Array.isArray(next)) return false;
     if (!next.every((value) => typeof value === "string")) return false;
@@ -8723,7 +8731,7 @@ function isSafeConfigActivationChange(before, after) {
     const nextValues = new Set(next);
     if (!previous.every((value) => nextValues.has(value))) return false;
   }
-  return isDeepStrictEqual(beforeRest, afterRest);
+  return isDeepStrictEqual(beforeCompanyRest, afterCompanyRest);
 }
 function isTrustedConfigActivationChange(filePath, deliveryPathAllowlist, cwd) {
   if (filePath !== "kody.config.json" || !deliveryPathAllowlist.includes(filePath)) return false;

package/dist/plugins/hooks/block-git.json

@@ -7,7 +7,7 @@
         "hooks": [
           {
             "type": "command",
-            "command": "node -e 'let s=\"\";process.stdin.on(\"data\",c=>s+=c).on(\"end\",()=>{try{const d=JSON.parse(s);const cmd=(d.tool_input&&d.tool_input.command)||\"\";const wrap=new Set([\"command\",\"exec\",\"xargs\",\"env\",\"nohup\",\"time\",\"nice\",\"sudo\",\"doas\"]);const readGit=new Set([\"status\",\"log\",\"diff\",\"show\",\"rev-parse\",\"ls-files\"]);const blocked=cmd.split(/[;&|\\n]+/).some(p=>{const t=p.trim().split(/\\s+/).filter(Boolean);let i=0;while(i<t.length&&(wrap.has(t[i])||/^[A-Za-z_][A-Za-z0-9_]*=/.test(t[i])))i++;const tool=(t[i]||\"\").split(\"/\").pop();if(tool===\"gh\")return true;if(tool!==\"git\")return false;return !readGit.has(t[i+1])});const shc=/\\b(?:ba|z|da|k)?sh\\s+[^;|&]*-c\\s*[\"\\x27`]+\\s*(?:\\S*\\/)?(?:git|gh)\\b/.test(cmd);const sub=/[$`]\\(?\\s*(?:\\S*\\/)?(?:git|gh)\\s/.test(cmd);if(blocked||shc||sub){process.stderr.write(\"kody blocks Git and GitHub writes — the delivery wrapper owns VCS mutations\\n\");process.exit(2)}}catch{}})'"
+            "command": "node -e 'let s=\"\";process.stdin.on(\"data\",c=>s+=c).on(\"end\",()=>{try{const d=JSON.parse(s);const cmd=(d.tool_input&&d.tool_input.command)||\"\";const wrap=new Set([\"command\",\"exec\",\"xargs\",\"env\",\"nohup\",\"time\",\"nice\",\"sudo\",\"doas\"]);const readGit=new Set([\"status\",\"log\",\"diff\",\"show\",\"rev-parse\",\"ls-files\"]);const blocked=cmd.split(/[;&|\\n]+/).some(p=>{const t=p.trim().split(/\\s+/).filter(Boolean);let i=0;while(i<t.length&&(wrap.has(t[i])||/^[A-Za-z_][A-Za-z0-9_]*=/.test(t[i])))i++;const tool=(t[i]||\"\").split(\"/\").pop();if(tool===\"gh\")return true;if(tool!==\"git\")return false;return !readGit.has(t[i+1])});const shc=/\\b(?:ba|z|da|k)?sh\\s+[^;|&]*-c\\s*[\"\\x27`]+\\s*(?:\\S*\\/)?(?:git|gh)\\b/.test(cmd);const sub=/[$`]\\(?\\s*(?:\\S*\\/)?(?:git|gh)\\s/.test(cmd);if(blocked||shc||sub){process.stderr.write(\"kody blocks Git and GitHub writes — the delivery wrapper owns VCS mutations. Do not treat this expected block as a task failure; the delivery wrapper will commit and create the pull request. Continue verification and finish your result normally.\\n\");process.exit(2)}}catch{}})'"
           }
         ]
       }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kody-ade/kody-engine",
-  "version": "0.4.581",
+  "version": "0.4.583",
   "description": "kody — autonomous development engine. Single-session Claude Code agent behind a generic executor + declarative implementation profiles.",
   "license": "MIT",
   "type": "module",