@kody-ade/kody-engine 0.4.128 → 0.4.130

package/dist/bin/kody.js

@@ -880,7 +880,7 @@ var init_loadPriorArt = __esm({
 // package.json
 var package_default = {
   name: "@kody-ade/kody-engine",
-  version: "0.4.128",
+  version: "0.4.130",
   description: "kody \u2014 autonomous development engine. Single-session Claude Code agent behind a generic executor + declarative executable profiles.",
   license: "MIT",
   type: "module",
@@ -12073,7 +12073,7 @@ var writeIssueStateComment = async (ctx, _profile, _agentResult, args) => {
 };
 
 // src/scripts/writeJobStateFile.ts
-var writeJobStateFile = async (ctx, _profile, _agentResult, args) => {
+var writeJobStateFile = async (ctx, _profile, agentResult, args) => {
   const parseError = ctx.data.nextStateParseError;
   if (parseError) {
     process.stderr.write(`[kody] job state write skipped: ${parseError}
@@ -12094,7 +12094,11 @@ var writeJobStateFile = async (ctx, _profile, _agentResult, args) => {
     ...next,
     data: {
       ...next.data,
-      lastFiredAt: (/* @__PURE__ */ new Date()).toISOString()
+      lastFiredAt: (/* @__PURE__ */ new Date()).toISOString(),
+      ...agentResult ? {
+        lastOutcome: agentResult.outcome,
+        lastDurationMs: agentResult.durationMs ?? null
+      } : {}
     }
   };
   const jobsDir = String(args?.jobsDir ?? ".kody/duties");

package/dist/executables/qa-engineer/prompt.md

@@ -128,6 +128,7 @@ If you don't include this block, the postflight falls back to opening a single r
 
 # Rules
 
+- **Never write credentials anywhere.** The QA login is provided only so you can sign in — you MUST NOT put the password (or any token/secret) into the report, findings, steps, evidence captions, or any text posted to GitHub. Issues are often public. When describing an authenticated step, write "log in as the QA account" — never quote the username or the password.
 - No commits. No `git` / `gh`. No edits outside `.kody/qa-reports/`.
 - Verdict **PASS** only when every UI surface you exercised behaved as the user would expect.
 - Be specific in every finding: route + concrete steps + screenshot path (or DOM snapshot reference). No "consider improving X" advice.

package/dist/executables/ui-review/prompt.md

@@ -111,6 +111,7 @@ _UI review by kody — browsed {{previewUrl}}_
 
 # Rules
 
+- **Never write credentials anywhere.** The QA login is provided only so you can sign in — you MUST NOT put the password (or any token/secret) into the review, findings, steps, or any text posted to GitHub. PRs and issues are often public. When describing an authenticated step, write "log in as the QA account" — never quote the username or the password.
 - No commits. No `git` / `gh` invocations. No edits to files outside `.kody/ui-review/`.
 - Verdict **FAIL** only for clear visual regressions, broken flows, or correctness/accessibility issues that block merge.
 - Verdict **CONCERNS** for clarity/polish/edge-case gaps that shouldn't block.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kody-ade/kody-engine",
-  "version": "0.4.128",
+  "version": "0.4.130",
   "description": "kody — autonomous development engine. Single-session Claude Code agent behind a generic executor + declarative executable profiles.",
   "license": "MIT",
   "type": "module",