@kody-ade/kody-engine 0.4.408 → 0.4.409

package/dist/bin/kody.js

@@ -15,7 +15,7 @@ var init_package = __esm({
   "package.json"() {
     package_default = {
       name: "@kody-ade/kody-engine",
-      version: "0.4.408",
+      version: "0.4.409",
       description: "kody \u2014 autonomous development engine. Single-session Claude Code agent behind a generic executor + declarative implementation profiles.",
       license: "MIT",
       type: "module",
@@ -2990,6 +2990,17 @@ var init_capabilityMcp = __esm({
 import { spawn as spawn2, spawnSync } from "child_process";
 import * as fs7 from "fs";
 import * as path8 from "path";
+function buildCloneProcess(repo, token, baseEnv = process.env) {
+  const url = `https://github.com/${repo}.git`;
+  const env = { ...baseEnv };
+  if (!token) return { url, env };
+  const parsedCount = Number.parseInt(env.GIT_CONFIG_COUNT ?? "0", 10);
+  const count = Number.isInteger(parsedCount) && parsedCount >= 0 ? parsedCount : 0;
+  env.GIT_CONFIG_COUNT = String(count + 1);
+  env[`GIT_CONFIG_KEY_${count}`] = "http.https://github.com/.extraHeader";
+  env[`GIT_CONFIG_VALUE_${count}`] = `Authorization: Basic ${Buffer.from(`x-access-token:${token}`).toString("base64")}`;
+  return { url, env };
+}
 async function resolveAndClone(reposRoot, repo, repoToken, cloneRepo) {
   const name = repo?.trim();
   if (!name || !REPO_RE.test(name)) return null;
@@ -3020,17 +3031,19 @@ async function fetchRepo(opts) {
   }
   return dir;
 }
-var REPO_RE, repoClones, defaultCloneRepo;
+var REPO_RE, repoClones, GIT_CREDENTIAL_HELPER, defaultCloneRepo;
 var init_repoWorkspace = __esm({
   "src/repoWorkspace.ts"() {
     "use strict";
     REPO_RE = /^[A-Za-z0-9_.-]+\/[A-Za-z0-9_.-]+$/;
     repoClones = /* @__PURE__ */ new Map();
+    GIT_CREDENTIAL_HELPER = `!f() { if [ "$1" = get ] && [ -n "$GITHUB_TOKEN" ]; then printf '%s\\n' username=x-access-token "password=$GITHUB_TOKEN"; fi; }; f`;
     defaultCloneRepo = (repo, token, dir) => {
       fs7.mkdirSync(path8.dirname(dir), { recursive: true });
-      const authUrl = token ? `https://x-access-token:${token}@github.com/${repo}.git` : `https://github.com/${repo}.git`;
+      const clone = buildCloneProcess(repo, token);
       return new Promise((resolve16, reject) => {
-        const child = spawn2("git", ["clone", "--depth=1", authUrl, dir], {
+        const child = spawn2("git", ["clone", "--depth=1", clone.url, dir], {
+          env: clone.env,
           stdio: "inherit"
         });
         child.on("exit", (code) => {
@@ -3043,6 +3056,9 @@ var init_repoWorkspace = __esm({
             const email = process.env.GIT_AUTHOR_EMAIL ?? "kody-bot@users.noreply.github.com";
             spawnSync("git", ["-C", dir, "config", "user.name", name]);
             spawnSync("git", ["-C", dir, "config", "user.email", email]);
+            if (token) {
+              spawnSync("git", ["-C", dir, "config", "credential.helper", GIT_CREDENTIAL_HELPER]);
+            }
           } catch {
           }
           resolve16();
@@ -3169,24 +3185,26 @@ function stripAgentSecrets(env) {
   }
   return out;
 }
-async function runAgent(opts) {
-  const ndjsonDir = opts.ndjsonDir ?? agentRunDir(opts.cwd);
-  fs8.mkdirSync(ndjsonDir, { recursive: true });
-  const ndjsonPath = path9.join(ndjsonDir, "last-run.jsonl");
+function buildAgentEnvironment(baseEnv, repoToken) {
   const env = stripAgentSecrets({
-    ...process.env,
+    ...baseEnv,
     SKIP_HOOKS: "1",
     HUSKY: "0",
-    CI: process.env.CI ?? "1",
-    // MCP servers are spawned asynchronously by the SDK. With the default
-    // non-blocking behavior, the SDK announces its tool list at session
-    // init while servers are still in `pending`, so their tools never
-    // reach the model. Block until each MCP completes its handshake (or
-    // the timeout below elapses) so the tool list is complete on first
-    // turn.
-    MCP_CONNECTION_NONBLOCKING: process.env.MCP_CONNECTION_NONBLOCKING ?? "false",
-    MCP_TIMEOUT: process.env.MCP_TIMEOUT ?? "60000"
+    CI: baseEnv.CI ?? "1",
+    MCP_CONNECTION_NONBLOCKING: baseEnv.MCP_CONNECTION_NONBLOCKING ?? "false",
+    MCP_TIMEOUT: baseEnv.MCP_TIMEOUT ?? "60000"
   });
+  if (repoToken) {
+    env.GITHUB_TOKEN = repoToken;
+    env.GH_TOKEN = repoToken;
+  }
+  return env;
+}
+async function runAgent(opts) {
+  const ndjsonDir = opts.ndjsonDir ?? agentRunDir(opts.cwd);
+  fs8.mkdirSync(ndjsonDir, { recursive: true });
+  const ndjsonPath = path9.join(ndjsonDir, "last-run.jsonl");
+  const env = buildAgentEnvironment(process.env, opts.repoToken);
   if (opts.litellmUrl) {
     env.ANTHROPIC_BASE_URL = opts.litellmUrl;
     env.ANTHROPIC_API_KEY = getAnthropicApiKeyOrDummy();
@@ -22371,6 +22389,7 @@ async function runChatTurn(opts) {
     ],
     systemPromptAppend: systemPrompt,
     ...opts.reasoningEffort ? { reasoningEffort: opts.reasoningEffort } : {},
+    ...opts.repoToken ? { repoToken: opts.repoToken } : {},
     // Cross-repo work is opt-in. Repo Brain's default path remains focused
     // on the selected repo even though the server stores clones under
     // reposRoot.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kody-ade/kody-engine",
-  "version": "0.4.408",
+  "version": "0.4.409",
   "description": "kody — autonomous development engine. Single-session Claude Code agent behind a generic executor + declarative implementation profiles.",
   "license": "MIT",
   "type": "module",