@kody-ade/kody-engine 0.4.488 → 0.4.489

package/dist/bin/kody.js

@@ -15,7 +15,7 @@ var init_package = __esm({
   "package.json"() {
     package_default = {
       name: "@kody-ade/kody-engine",
-      version: "0.4.487",
+      version: "0.4.489",
       description: "kody \u2014 autonomous development engine. Single-session Claude Code agent behind a generic executor + declarative implementation profiles.",
       license: "MIT",
       type: "module",
@@ -2448,6 +2448,16 @@ async function readRuntimeSecretFromKody(name, env = process.env) {
   const body = await response.json();
   return typeof body.value === "string" ? body.value : null;
 }
+async function writeRuntimeSecretToKody(name, value, env = process.env) {
+  const token = await githubOidcToken(env);
+  const response = await fetch(`${resolveKodyApiUrl(env)}/api/kody/engine/secret`, {
+    method: "PUT",
+    headers: { Authorization: `Bearer ${token}`, "Content-Type": "application/json" },
+    body: JSON.stringify({ name, value }),
+    signal: AbortSignal.timeout(3e4)
+  });
+  if (!response.ok) throw new Error(`Kody secret upsert failed (${response.status})`);
+}
 async function readPreviewContextFromKody(env = process.env) {
   const token = await githubOidcToken(env);
   const response = await fetch(`${resolveKodyApiUrl(env)}/api/kody/engine/preview-context`, {
@@ -4316,7 +4326,7 @@ function validateCapabilityContractValue(boundary, schema, value) {
   }
 }
 function capabilityContractInput(inputs, args) {
-  const isGenericRunnerInput = inputs.some((input) => input.name === "capability") && inputs.some((input) => input.name === "input");
+  const isGenericRunnerInput = inputs.some((input) => input.name === "input") && (inputs.length === 1 || inputs.some((input) => input.name === "capability"));
   if (!isGenericRunnerInput) return args;
   const value = args.input;
   if (typeof value !== "string") return value;
@@ -15443,7 +15453,10 @@ async function resolveRuntimeSecret(name, ctx, opts = {}) {
   if (hasGitHubActionsIdentity(env)) {
     try {
       const value = await readRuntimeSecretFromKody(name, env);
-      return value ? { value, source: "vault" } : envSecret(name, env);
+      if (value) return { value, source: "vault" };
+      const fallback = envSecret(name, env);
+      if (fallback.value) await writeRuntimeSecretToKody(name, fallback.value, env);
+      return fallback;
     } catch (err) {
       const fallback = envSecret(name, env);
       return {
@@ -16728,6 +16741,7 @@ var init_parseSimpleCapabilityOutput = __esm({
           reason: reason2,
           summary: reason2
         };
+        ctx.output.exitCode = 1;
         ctx.output.reason = reason2;
         ctx.data.capabilityOutput = blocked;
         ctx.data.capabilityResults = [
@@ -16769,6 +16783,9 @@ var init_parseSimpleCapabilityOutput = __esm({
       ctx.data.capabilityOutput = output;
       const structuredResult = parseCapabilityResult(output);
       if (structuredResult) {
+        if ((structuredResult.status === "fail" || structuredResult.status === "blocked") && (ctx.output.exitCode === void 0 || ctx.output.exitCode === 0)) {
+          ctx.output.exitCode = 1;
+        }
         ctx.output.reason = structuredResult.summary;
         ctx.data.capabilityResults = [structuredResult];
         return;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kody-ade/kody-engine",
-  "version": "0.4.488",
+  "version": "0.4.489",
   "description": "kody — autonomous development engine. Single-session Claude Code agent behind a generic executor + declarative implementation profiles.",
   "license": "MIT",
   "type": "module",