@kody-ade/kody-engine 0.4.638 → 0.4.640

package/dist/bin/kody.js

@@ -15,7 +15,7 @@ var init_package = __esm({
   "package.json"() {
     package_default = {
       name: "@kody-ade/kody-engine",
-      version: "0.4.638",
+      version: "0.4.640",
       description: "kody \u2014 autonomous development engine. Single-session Claude Code agent behind a generic executor + declarative implementation profiles.",
       license: "MIT",
       repository: {
@@ -180,49 +180,6 @@ var init_completionGuard = __esm({
   }
 });
 
-// src/submitStateGuard.ts
-function createSubmitStateActivityGuard() {
-  let hasActivity = false;
-  return {
-    recordToolUse: async (input) => {
-      if (input?.tool_name !== SUBMIT_STATE_TOOL) hasActivity = true;
-      return {};
-    },
-    requireActivity: async () => hasActivity ? {} : {
-      decision: "block",
-      reason: ACTIVITY_REQUIRED_REASON
-    }
-  };
-}
-function createPostSubmitToolGuard(getSubmitted) {
-  return async () => getSubmitted() ? {
-    decision: "block",
-    reason: STATE_ALREADY_SUBMITTED_REASON
-  } : {};
-}
-function createSubmitStateStopHook(getSubmitted) {
-  let finalChanceGiven = false;
-  return async () => {
-    if (getSubmitted()) return {};
-    if (finalChanceGiven) return {};
-    finalChanceGiven = true;
-    return {
-      decision: "block",
-      reason: FINAL_STATE_CHANCE_REASON
-    };
-  };
-}
-var FINAL_STATE_CHANCE_REASON, STATE_ALREADY_SUBMITTED_REASON, ACTIVITY_REQUIRED_REASON, SUBMIT_STATE_TOOL;
-var init_submitStateGuard = __esm({
-  "src/submitStateGuard.ts"() {
-    "use strict";
-    FINAL_STATE_CHANCE_REASON = "Before finishing, call `submit_state` exactly once with the next non-empty `cursor`, compact durable `data`, and the correct `done` value. Do not perform more work; submit only the continuation state now.";
-    STATE_ALREADY_SUBMITTED_REASON = "Continuation state is already submitted for this cycle. Do not call more tools or perform more work; return your final response now.";
-    ACTIVITY_REQUIRED_REASON = "Do not submit continuation state yet. First use a tool to observe current evidence or perform the next responsibility action for this cycle.";
-    SUBMIT_STATE_TOOL = "mcp__kody-submit__submit_state";
-  }
-});
-
 // src/config.ts
 import * as fs2 from "fs";
 import * as path3 from "path";
@@ -1193,6 +1150,49 @@ var init_subagents = __esm({
   }
 });
 
+// src/submitStateGuard.ts
+function createSubmitStateActivityGuard() {
+  let hasActivity = false;
+  return {
+    recordToolUse: async (input) => {
+      if (input?.tool_name !== SUBMIT_STATE_TOOL) hasActivity = true;
+      return {};
+    },
+    requireActivity: async () => hasActivity ? {} : {
+      decision: "block",
+      reason: ACTIVITY_REQUIRED_REASON
+    }
+  };
+}
+function createPostSubmitToolGuard(getSubmitted) {
+  return async () => getSubmitted() ? {
+    decision: "block",
+    reason: STATE_ALREADY_SUBMITTED_REASON
+  } : {};
+}
+function createSubmitStateStopHook(getSubmitted) {
+  let finalChanceGiven = false;
+  return async () => {
+    if (getSubmitted()) return {};
+    if (finalChanceGiven) return {};
+    finalChanceGiven = true;
+    return {
+      decision: "block",
+      reason: FINAL_STATE_CHANCE_REASON
+    };
+  };
+}
+var FINAL_STATE_CHANCE_REASON, STATE_ALREADY_SUBMITTED_REASON, ACTIVITY_REQUIRED_REASON, SUBMIT_STATE_TOOL;
+var init_submitStateGuard = __esm({
+  "src/submitStateGuard.ts"() {
+    "use strict";
+    FINAL_STATE_CHANCE_REASON = "Before finishing, call `submit_state` exactly once with the next non-empty `cursor`, compact durable `data`, and the correct `done` value. Do not perform more work; submit only the continuation state now.";
+    STATE_ALREADY_SUBMITTED_REASON = "Continuation state is already submitted for this cycle. Do not call more tools or perform more work; return your final response now.";
+    ACTIVITY_REQUIRED_REASON = "Do not submit continuation state yet. First use a tool to observe current evidence or perform the next responsibility action for this cycle.";
+    SUBMIT_STATE_TOOL = "mcp__kody-submit__submit_state";
+  }
+});
+
 // src/events.ts
 var events_exports = {};
 __export(events_exports, {
@@ -3589,10 +3589,19 @@ __export(capabilityMcp_exports, {
   parseCapabilityTrustMode: () => parseCapabilityTrustMode,
   readCheckRuns: () => readCheckRuns,
   readThread: () => readThread,
+  selectCapabilityToolDefinitions: () => selectCapabilityToolDefinitions,
   startCapability: () => startCapability
 });
 import { createSdkMcpServer as createSdkMcpServer4, tool as tool4 } from "@anthropic-ai/claude-agent-sdk";
 import { z as z3 } from "zod";
+function selectCapabilityToolDefinitions(definitions, allowedToolNames) {
+  if (!allowedToolNames) return definitions;
+  const available = new Set(definitions.map((definition) => definition.name));
+  const unknown = allowedToolNames.filter((name) => !available.has(name));
+  if (unknown.length > 0) throw new Error(`Unknown capability MCP tools: ${unknown.join(", ")}`);
+  const allowed = new Set(allowedToolNames);
+  return definitions.filter((definition) => allowed.has(definition.name));
+}
 function summarizeCiStatus(rollup) {
   if (!Array.isArray(rollup) || rollup.length === 0) return "UNKNOWN";
   let hasRunning = false;
@@ -4099,46 +4108,71 @@ function capabilityToolDefinitions(opts) {
       const reportRunId = typeof args.reportRunId === "string" ? args.reportRunId : void 0;
       const evidence = typeof args.evidence === "string" ? args.evidence.trim() : "";
       const backend = createStateBackendFromEnv();
-      const existing = await backend.getRepoDoc(opts.repoSlug, `todo:${slug}`);
       const now = (/* @__PURE__ */ new Date()).toISOString();
-      const current = existing?.doc && typeof existing.doc === "object" && !Array.isArray(existing.doc) ? existing.doc : {};
-      const currentItems = Array.isArray(current.items) ? current.items.filter((item) => Boolean(item && typeof item === "object" && !Array.isArray(item))) : [];
-      const previous = currentItems.find((item) => item.id === itemId);
       const completed = status === "resolved";
-      const previousMeta = previous?.meta && typeof previous.meta === "object" && !Array.isArray(previous.meta) ? previous.meta : {};
-      const unchanged = Boolean(
-        previous && previous.completed === completed && previous.title === title && String(previous.body ?? "") === evidence && previousMeta.reportSlug === reportSlug
-      );
-      if (unchanged) {
-        return { content: [{ type: "text", text: JSON.stringify({ changed: false, slug, status }) }] };
-      }
-      const nextItem = {
-        id: itemId,
-        title,
-        body: evidence,
-        assignee: null,
-        completed,
-        createdAt: typeof previous?.createdAt === "string" ? previous.createdAt : now,
-        completedAt: completed ? now : null,
-        meta: {
-          ...previousMeta,
-          source: "live-agent",
-          reportSlug,
-          ...reportRunId ? { reportRunId } : {},
-          status
+      let lastError = new Error(`Todo ${slug}/${itemId} was not visible after reconciliation`);
+      for (let attempt = 0; attempt < 3; attempt += 1) {
+        try {
+          const existing = await backend.getRepoDoc(opts.repoSlug, `todo:${slug}`);
+          const current = existing?.doc && typeof existing.doc === "object" && !Array.isArray(existing.doc) ? existing.doc : {};
+          const currentItems = Array.isArray(current.items) ? current.items.filter(
+            (item) => Boolean(item && typeof item === "object" && !Array.isArray(item))
+          ) : [];
+          const previous = currentItems.find((item) => item.id === itemId);
+          const previousMeta = previous?.meta && typeof previous.meta === "object" && !Array.isArray(previous.meta) ? previous.meta : {};
+          const unchanged = Boolean(
+            previous && previous.completed === completed && previous.title === title && String(previous.body ?? "") === evidence && previousMeta.reportSlug === reportSlug
+          );
+          if (unchanged) {
+            return {
+              content: [{ type: "text", text: JSON.stringify({ changed: false, verified: true, slug, status }) }]
+            };
+          }
+          const nextItem = {
+            id: itemId,
+            title,
+            body: evidence,
+            assignee: null,
+            completed,
+            createdAt: typeof previous?.createdAt === "string" ? previous.createdAt : now,
+            completedAt: completed ? now : null,
+            meta: {
+              ...previousMeta,
+              source: "live-agent",
+              reportSlug,
+              ...reportRunId ? { reportRunId } : {},
+              status
+            }
+          };
+          const items = previous ? currentItems.map((item) => item.id === itemId ? nextItem : item) : [...currentItems, nextItem];
+          const doc = {
+            ...current,
+            version: 1,
+            title,
+            description,
+            createdAt: typeof current.createdAt === "string" ? current.createdAt : now,
+            items
+          };
+          await backend.saveRepoDoc(opts.repoSlug, `todo:${slug}`, doc, existing?.updatedAt);
+          const saved = await backend.getRepoDoc(opts.repoSlug, `todo:${slug}`);
+          const savedItems = saved?.doc && typeof saved.doc === "object" && !Array.isArray(saved.doc) && Array.isArray(saved.doc.items) ? saved.doc.items : [];
+          const savedItem = savedItems.find(
+            (item) => Boolean(
+              item && typeof item === "object" && !Array.isArray(item) && item.id === itemId
+            )
+          );
+          const savedMeta = savedItem?.meta && typeof savedItem.meta === "object" && !Array.isArray(savedItem.meta) ? savedItem.meta : {};
+          if (savedItem && savedItem.completed === completed && savedItem.title === title && String(savedItem.body ?? "") === evidence && savedMeta.reportSlug === reportSlug) {
+            return {
+              content: [{ type: "text", text: JSON.stringify({ changed: true, verified: true, slug, status }) }]
+            };
+          }
+          lastError = new Error(`Todo ${slug}/${itemId} was not visible after reconciliation attempt ${attempt + 1}`);
+        } catch (error) {
+          lastError = error;
         }
-      };
-      const items = previous ? currentItems.map((item) => item.id === itemId ? nextItem : item) : [...currentItems, nextItem];
-      const doc = {
-        ...current,
-        version: 1,
-        title,
-        description,
-        createdAt: typeof current.createdAt === "string" ? current.createdAt : now,
-        items
-      };
-      await backend.saveRepoDoc(opts.repoSlug, `todo:${slug}`, doc, existing?.updatedAt);
-      return { content: [{ type: "text", text: JSON.stringify({ changed: true, slug, status }) }] };
+      }
+      throw lastError;
     }
   };
   const cmsTools = dashboardCmsToolDefinitions({
@@ -4163,7 +4197,7 @@ function capabilityToolDefinitions(opts) {
   ];
 }
 function buildCapabilityMcpServer(opts) {
-  const definitions = capabilityToolDefinitions(opts);
+  const definitions = selectCapabilityToolDefinitions(capabilityToolDefinitions(opts), opts.allowedToolNames);
   const tools = definitions.map(
     (def) => tool4(
       def.name,
@@ -4186,8 +4220,8 @@ var init_capabilityMcp = __esm({
     init_dashboardCmsMcp();
     init_issue();
     init_registry();
-    init_trustPolicy();
     init_state_backend();
+    init_trustPolicy();
     FAIL_CONCLUSIONS = /* @__PURE__ */ new Set(["FAILURE", "TIMED_OUT", "ACTION_REQUIRED", "STARTUP_FAILURE", "CANCELLED"]);
     RUNNING_STATUSES = /* @__PURE__ */ new Set(["IN_PROGRESS", "QUEUED", "PENDING", "WAITING", "REQUESTED"]);
     THREAD_BODY_MAX = 4e3;
@@ -4588,6 +4622,7 @@ async function runAgent(opts) {
         const capabilityHandle = buildCapabilityMcpServer2({
           repoSlug: opts.capabilityRepoSlug,
           operatorMention: opts.capabilityOperatorMention ?? "",
+          ...opts.capabilityToolNames ? { allowedToolNames: opts.capabilityToolNames } : {},
           ...opts.capabilityDefaultBranch ? { defaultBranch: opts.capabilityDefaultBranch } : {},
           ...opts.capabilitySlug ? { capabilitySlug: opts.capabilitySlug } : {}
         });
@@ -4904,13 +4939,13 @@ var init_agent = __esm({
     "use strict";
     init_claudeBinary();
     init_completionGuard();
-    init_submitStateGuard();
     init_config();
     init_fileEditGuards();
     init_format();
     init_outputContractHooks();
     init_runtimePaths();
     init_subagents();
+    init_submitStateGuard();
     DEFAULT_ALLOWED_TOOLS = ["Bash", "Edit", "Read", "Write", "Glob", "Grep"];
     DEFAULT_TURN_TIMEOUT_MS = 6e5;
     MAX_CONNECTION_RETRIES = 2;
@@ -23396,6 +23431,7 @@ async function runImplementation(profileName, input) {
         // to know the palette — it just forwards the flag so agent.ts can spin
         // up the in-process `kody-capability` MCP server with the right context.
         enableCapabilityTool: Array.isArray(ctx.data.capabilityTools) && ctx.data.capabilityTools.length > 0,
+        capabilityToolNames: Array.isArray(ctx.data.capabilityTools) ? ctx.data.capabilityTools.filter((name) => typeof name === "string") : void 0,
         enableDashboardCmsTool: Boolean(
           ctx.data.capabilityRequirements && typeof ctx.data.capabilityRequirements === "object" && !Array.isArray(ctx.data.capabilityRequirements) && ctx.data.capabilityRequirements.cms === true
         ),

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kody-ade/kody-engine",
-  "version": "0.4.638",
+  "version": "0.4.640",
   "description": "kody — autonomous development engine. Single-session Claude Code agent behind a generic executor + declarative implementation profiles.",
   "license": "MIT",
   "repository": {
@@ -17,6 +17,30 @@
     "docs/delivery-boundary.md",
     "kody.config.schema.json"
   ],
+  "scripts": {
+    "kody:run": "tsx bin/kody.ts",
+    "serve": "tsx bin/kody.ts serve",
+    "serve:vscode": "tsx bin/kody.ts serve vscode",
+    "serve:claude": "tsx bin/kody.ts serve claude",
+    "clean:dist": "node scripts/clean-dist.cjs",
+    "build": "pnpm clean:dist && tsup && node scripts/copy-assets.cjs",
+    "check:modularity": "tsx scripts/check-script-modularity.ts",
+    "pretest": "pnpm check:modularity",
+    "test": "vitest run tests/unit tests/int --coverage",
+    "posttest": "tsx scripts/check-coverage-floor.ts",
+    "test:smoke": "vitest run tests/smoke --no-coverage",
+    "test:e2e": "vitest run tests/e2e --no-coverage",
+    "verify:live-release": "tsx scripts/live-release-gate.ts",
+    "test:runtime-services": "node --test \"tests/runtime-services/*.test.mjs\"",
+    "test:all": "vitest run tests --no-coverage",
+    "typecheck": "tsc --noEmit",
+    "lint": "biome check",
+    "lint:fix": "biome check --write",
+    "format": "biome format --write",
+    "verify:package": "node scripts/verify-package-tarball.cjs",
+    "brain:publish": "docker buildx build --platform linux/amd64 -f runner/Dockerfile.brain --build-arg KODY_ENGINE_REF=$(git rev-parse HEAD) -t ghcr.io/${KODY_BRAIN_GHCR_OWNER:-aharonyaircohen}/kody-brain:latest --push runner",
+    "prepublishOnly": "pnpm typecheck && pnpm test:runtime-services && pnpm build && pnpm verify:package"
+  },
   "dependencies": {
     "@actions/cache": "^6.0.0",
     "@anthropic-ai/claude-agent-sdk": "0.2.119",
@@ -39,28 +63,5 @@
     "node": ">=22"
   },
   "homepage": "https://github.com/aharonyaircohen/kody-engine",
-  "bugs": "https://github.com/aharonyaircohen/kody-engine/issues",
-  "scripts": {
-    "kody:run": "tsx bin/kody.ts",
-    "serve": "tsx bin/kody.ts serve",
-    "serve:vscode": "tsx bin/kody.ts serve vscode",
-    "serve:claude": "tsx bin/kody.ts serve claude",
-    "clean:dist": "node scripts/clean-dist.cjs",
-    "build": "pnpm clean:dist && tsup && node scripts/copy-assets.cjs",
-    "check:modularity": "tsx scripts/check-script-modularity.ts",
-    "pretest": "pnpm check:modularity",
-    "test": "vitest run tests/unit tests/int --coverage",
-    "posttest": "tsx scripts/check-coverage-floor.ts",
-    "test:smoke": "vitest run tests/smoke --no-coverage",
-    "test:e2e": "vitest run tests/e2e --no-coverage",
-    "verify:live-release": "tsx scripts/live-release-gate.ts",
-    "test:runtime-services": "node --test \"tests/runtime-services/*.test.mjs\"",
-    "test:all": "vitest run tests --no-coverage",
-    "typecheck": "tsc --noEmit",
-    "lint": "biome check",
-    "lint:fix": "biome check --write",
-    "format": "biome format --write",
-    "verify:package": "node scripts/verify-package-tarball.cjs",
-    "brain:publish": "docker buildx build --platform linux/amd64 -f runner/Dockerfile.brain --build-arg KODY_ENGINE_REF=$(git rev-parse HEAD) -t ghcr.io/${KODY_BRAIN_GHCR_OWNER:-aharonyaircohen}/kody-brain:latest --push runner"
-  }
-}
+  "bugs": "https://github.com/aharonyaircohen/kody-engine/issues"
+}