@kody-ade/kody-engine 0.4.494 → 0.4.495

package/dist/bin/kody.js

@@ -15,7 +15,7 @@ var init_package = __esm({
   "package.json"() {
     package_default = {
       name: "@kody-ade/kody-engine",
-      version: "0.4.494",
+      version: "0.4.495",
       description: "kody \u2014 autonomous development engine. Single-session Claude Code agent behind a generic executor + declarative implementation profiles.",
       license: "MIT",
       type: "module",
@@ -2448,12 +2448,12 @@ async function readRuntimeSecretFromKody(name, env = process.env) {
   const body = await response.json();
   return typeof body.value === "string" ? body.value : null;
 }
-async function writeRuntimeSecretsToKody(secrets, env = process.env) {
+async function writeRuntimeSecretToKody(name, value, env = process.env) {
   const token = await githubOidcToken(env);
   const response = await fetch(`${resolveKodyApiUrl(env)}/api/kody/engine/secret`, {
     method: "PUT",
     headers: { Authorization: `Bearer ${token}`, "Content-Type": "application/json" },
-    body: JSON.stringify({ secrets }),
+    body: JSON.stringify({ name, value }),
     signal: AbortSignal.timeout(3e4)
   });
   if (!response.ok) throw new Error(`Kody secret upsert failed (${response.status})`);
@@ -15460,7 +15460,9 @@ async function resolveRuntimeSecret(name, ctx, opts = {}) {
     try {
       const value = await readRuntimeSecretFromKody(name, env);
       if (value) return { value, source: "vault" };
-      return envSecret(name, env);
+      const fallback = envSecret(name, env);
+      if (fallback.value) await writeRuntimeSecretToKody(name, fallback.value, env);
+      return fallback;
     } catch (err) {
       const fallback = envSecret(name, env);
       return {
@@ -15498,22 +15500,11 @@ async function resolveRuntimeSecrets(names, ctx, opts = {}) {
   for (const name of declared) {
     resolved.push({ name, result: await resolveRuntimeSecret(name, ctx, opts) });
   }
-  const warnings = resolved.flatMap(({ result }) => result.warning ? [result.warning] : []);
-  const fallbackSecrets = Object.fromEntries(
-    resolved.flatMap(({ name, result }) => result.source === "env" && result.value ? [[name, result.value]] : [])
-  );
-  if (hasGitHubActionsIdentity(opts.env ?? process.env) && Object.keys(fallbackSecrets).length > 0) {
-    try {
-      await writeRuntimeSecretsToKody(fallbackSecrets, opts.env ?? process.env);
-    } catch (err) {
-      warnings.push(`Kody secret migration failed: ${err instanceof Error ? err.message : String(err)}`);
-    }
-  }
   return {
     environment: Object.fromEntries(
       resolved.flatMap(({ name, result }) => result.value ? [[name, result.value]] : [])
     ),
-    warnings
+    warnings: resolved.flatMap(({ result }) => result.warning ? [result.warning] : [])
   };
 }
 var init_runtimeSecrets = __esm({

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kody-ade/kody-engine",
-  "version": "0.4.494",
+  "version": "0.4.495",
   "description": "kody — autonomous development engine. Single-session Claude Code agent behind a generic executor + declarative implementation profiles.",
   "license": "MIT",
   "type": "module",