@kody-ade/kody-engine 0.4.620 → 0.4.622

package/README.md

@@ -57,7 +57,9 @@ key. It's built to keep that blast radius small:
   downstream CI.
 - **Write allowlist.** The agent commits through `commitAndPush`, which blocks
   writes to engine runtime or configuration paths — it can't touch your
-  runtime state.
+  runtime state. See [Delivery boundary](docs/delivery-boundary.md) for what is
+  silently discarded, what fails visibly, and how an approved workflow file is
+  delivered.
 - **Locked-toolbox mode.** A job can declare `tools: [...]` to drop `Bash` and
   shell entirely, running only a fixed set of high-level intents.
 - **Review like any contributor.** kody opens PRs; you merge them.

package/dist/bin/kody.js

@@ -15,7 +15,7 @@ var init_package = __esm({
   "package.json"() {
     package_default = {
       name: "@kody-ade/kody-engine",
-      version: "0.4.620",
+      version: "0.4.622",
       description: "kody \u2014 autonomous development engine. Single-session Claude Code agent behind a generic executor + declarative implementation profiles.",
       license: "MIT",
       repository: {
@@ -29,6 +29,7 @@ var init_package = __esm({
       files: [
         "dist",
         "templates",
+        "docs/delivery-boundary.md",
         "kody.config.schema.json"
       ],
       scripts: {
@@ -8927,6 +8928,9 @@ function isForbiddenPath(p, deliveryPathAllowlist = []) {
   for (const pre of ALLOWED_PATH_PREFIXES) if (p.startsWith(pre)) return false;
   return false;
 }
+function isReportableDeliveryOmission(p) {
+  return !GENERATED_PATH_PREFIXES.some((prefix) => p.startsWith(prefix)) && !FORBIDDEN_PATH_SUFFIXES.some((suffix) => p.endsWith(suffix));
+}
 function isRecord(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
@@ -9042,9 +9046,10 @@ function commitAndPush(branch, agentMessage, cwd, deliveryPathAllowlist = [], de
   const forbiddenFiles = allChanged.filter(
     (f) => isForbiddenPath(f, deliveryPathAllowlist) && !isTrustedConfigActivationChange(f, deliveryPathAllowlist, deliveryConfigAllowlist, cwd)
   );
+  const omittedFiles = forbiddenFiles.filter(isReportableDeliveryOmission);
   const mergeHeadExists = fs29.existsSync(path28.join(cwd ?? process.cwd(), ".git", "MERGE_HEAD"));
   if (allowedFiles.length === 0 && !mergeHeadExists) {
-    return { committed: false, pushed: false, sha: "", message: "", omittedFiles: forbiddenFiles };
+    return { committed: false, pushed: false, sha: "", message: "", omittedFiles };
   }
   for (const f of forbiddenFiles) {
     try {
@@ -9072,9 +9077,9 @@ function commitAndPush(branch, agentMessage, cwd, deliveryPathAllowlist = [], de
   const sha = git(["rev-parse", "HEAD"], cwd).slice(0, 7);
   const pushResult = pushWithRetry({ cwd, branch, setUpstream: true });
   if (pushResult.ok) {
-    return { committed: true, pushed: true, sha, message, omittedFiles: forbiddenFiles };
+    return { committed: true, pushed: true, sha, message, omittedFiles };
   }
-  return { committed: true, pushed: false, sha, message, pushError: pushResult.reason, omittedFiles: forbiddenFiles };
+  return { committed: true, pushed: false, sha, message, pushError: pushResult.reason, omittedFiles };
 }
 function hasCommitsAhead(branch, defaultBranch, cwd) {
   try {
@@ -9089,7 +9094,7 @@ function hasCommitsAhead(branch, defaultBranch, cwd) {
     }
   }
 }
-var GIT_MAX_BUFFER_BYTES, FORBIDDEN_PATH_PREFIXES, ALLOWED_PATH_PREFIXES, FORBIDDEN_PATH_EXACT, FORBIDDEN_PATH_SUFFIXES, ACTIVATION_FIELDS, CONVENTIONAL_PREFIXES;
+var GIT_MAX_BUFFER_BYTES, FORBIDDEN_PATH_PREFIXES, ALLOWED_PATH_PREFIXES, FORBIDDEN_PATH_EXACT, FORBIDDEN_PATH_SUFFIXES, GENERATED_PATH_PREFIXES, ACTIVATION_FIELDS, CONVENTIONAL_PREFIXES;
 var init_commit = __esm({
   "src/commit.ts"() {
     "use strict";
@@ -9113,6 +9118,14 @@ var init_commit = __esm({
     ALLOWED_PATH_PREFIXES = [];
     FORBIDDEN_PATH_EXACT = /* @__PURE__ */ new Set([".env", ".kody-pip-requirements.txt", "kody.config.json"]);
     FORBIDDEN_PATH_SUFFIXES = [".log"];
+    GENERATED_PATH_PREFIXES = [
+      ".kody-engine/",
+      ".kody-lean/",
+      ".codegraph/",
+      "node_modules/",
+      "dist/",
+      "build/"
+    ];
     ACTIVATION_FIELDS = [
       "activeAgents",
       "activeCapabilities",

package/docs/delivery-boundary.md

@@ -0,0 +1,29 @@
+# Delivery boundary
+
+Kody may inspect the whole checkout, but it does not commit every changed file.
+The postflight delivery step separates product work from runtime state and
+operator-owned configuration before creating the PR.
+
+## What happens to each kind of change
+
+| Change | Result |
+|---|---|
+| Normal source, test, or documentation file | Committed and pushed to the task branch |
+| Engine-generated cache or runtime state (`.kody-engine/`, `.kody-lean/`, `.codegraph/`, `node_modules/`, `dist/`, `build/`, logs) | Discarded from delivery without failing otherwise valid product work |
+| Protected operator or security configuration (`.github/*.yml`, `.env`, `kody.config.json`, legacy `.kody/` state) | Excluded from the commit and reported as a blocked delivery; the run fails visibly instead of claiming full completion |
+
+This distinction matters because definition hydration updates
+`.kody-engine/definitions/manifest.json` on normal runs. That file belongs to
+the Engine runtime; it is not work the agent attempted to deliver.
+
+## Delivering an approved protected file
+
+Do not weaken the global boundary. A capability that legitimately owns a
+GitHub workflow or a repository loop definition must declare the exact path in
+its delivery contract. The Engine validates that allowlist and only then stages
+the ignored file. Ordinary `run` work cannot opt itself into that permission.
+
+When a requested protected change is blocked, the issue status names the exact
+omitted path and the workflow exits nonzero. The PR can still contain the safe
+files that were successfully delivered; treat it as partial work until an
+approved owner supplies the protected file.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kody-ade/kody-engine",
-  "version": "0.4.620",
+  "version": "0.4.622",
   "description": "kody — autonomous development engine. Single-session Claude Code agent behind a generic executor + declarative implementation profiles.",
   "license": "MIT",
   "repository": {
@@ -14,6 +14,7 @@
   "files": [
     "dist",
     "templates",
+    "docs/delivery-boundary.md",
     "kody.config.schema.json"
   ],
   "scripts": {