@kody-ade/kody-engine 0.4.534 → 0.4.536

package/dist/bin/kody.js

@@ -15,7 +15,7 @@ var init_package = __esm({
   "package.json"() {
     package_default = {
       name: "@kody-ade/kody-engine",
-      version: "0.4.534",
+      version: "0.4.536",
       description: "kody \u2014 autonomous development engine. Single-session Claude Code agent behind a generic executor + declarative implementation profiles.",
       license: "MIT",
       type: "module",
@@ -1956,6 +1956,7 @@ function parseCapabilityContract(raw) {
   if (parsed.execution !== void 0 && parsed.execution !== "agent" && parsed.execution !== "script") {
     throw new Error('contract.json execution must be "agent" or "script"');
   }
+  const requirements = parseCapabilityRequirements(parsed.requirements);
   const secrets = parsed.secrets === void 0 ? void 0 : Array.isArray(parsed.secrets) && parsed.secrets.every((name) => typeof name === "string" && /^[A-Z][A-Z0-9_]*$/.test(name)) ? [...new Set(parsed.secrets)] : null;
   if (secrets === null) {
     throw new Error("contract.json secrets must contain valid environment variable names");
@@ -1978,13 +1979,14 @@ function parseCapabilityContract(raw) {
     throw new Error('contract.json requiredSubagents are supported only when execution is "agent"');
   }
   const unsupported = Object.keys(parsed).filter(
-    (key) => key !== "execution" && key !== "secrets" && key !== "timeoutMs" && key !== "requiredSubagents" && key !== "input" && key !== "output"
+    (key) => key !== "execution" && key !== "requirements" && key !== "secrets" && key !== "timeoutMs" && key !== "requiredSubagents" && key !== "input" && key !== "output"
   );
   if (unsupported.length > 0) {
     throw new Error(`contract.json contains unsupported fields: ${unsupported.join(", ")}`);
   }
   return {
     ...parsed.execution ? { execution: parsed.execution } : {},
+    ...requirements ? { requirements } : {},
     ...secrets ? { secrets } : {},
     ...timeoutMs !== void 0 ? { timeoutMs } : {},
     ...requiredSubagents ? { requiredSubagents } : {},
@@ -1992,6 +1994,28 @@ function parseCapabilityContract(raw) {
     output: parsed.output
   };
 }
+function parseCapabilityRequirements(raw) {
+  if (raw === void 0) return void 0;
+  if (!isPlainObject(raw)) throw new Error("contract.json requirements must be an object");
+  const unsupported = Object.keys(raw).filter((key) => key !== "browser" && key !== "qaCredentials");
+  if (unsupported.length > 0) {
+    throw new Error(`contract.json requirements contains unsupported fields: ${unsupported.join(", ")}`);
+  }
+  if (raw.browser !== void 0 && typeof raw.browser !== "boolean") {
+    throw new Error("contract.json requirements.browser must be boolean");
+  }
+  if (raw.qaCredentials !== void 0 && typeof raw.qaCredentials !== "boolean") {
+    throw new Error("contract.json requirements.qaCredentials must be boolean");
+  }
+  if (raw.qaCredentials === true && raw.browser !== true) {
+    throw new Error("contract.json requirements.qaCredentials requires browser");
+  }
+  const requirements = {
+    ...raw.browser === true ? { browser: true } : {},
+    ...raw.qaCredentials === true ? { qaCredentials: true } : {}
+  };
+  return Object.keys(requirements).length > 0 ? requirements : void 0;
+}
 function isRegularFile(filePath) {
   try {
     const stat = fs6.lstatSync(filePath);
@@ -2638,6 +2662,16 @@ function createKodyApiBackendClient(env = process.env) {
     mutation: (fn, args) => callKodyApi("mutation", fn, args, env)
   };
 }
+async function notifyWorkflowCompleted(notification, env = process.env) {
+  const token = await githubOidcToken(env);
+  const response = await fetch(`${resolveKodyApiUrl(env)}/api/kody/engine/workflow-completed`, {
+    method: "POST",
+    headers: { Authorization: `Bearer ${token}`, "Content-Type": "application/json" },
+    body: JSON.stringify(notification),
+    signal: AbortSignal.timeout(3e4)
+  });
+  if (!response.ok) throw new Error(`Kody workflow completion request failed (${response.status})`);
+}
 async function readRuntimeSecretFromKody(name, env = process.env) {
   const token = await githubOidcToken(env);
   const response = await fetch(`${resolveKodyApiUrl(env)}/api/kody/engine/secret`, {
@@ -15866,6 +15900,9 @@ var init_loadSimpleCapability = __esm({
       ctx.data.jobCapability = slug;
       ctx.data.capabilityInput = input;
       ctx.data.capabilityExecution = capability.contract?.execution ?? "agent";
+      if (capability.contract?.requirements) {
+        ctx.data.capabilityRequirements = capability.contract.requirements;
+      }
       if (ctx.data.capabilityExecution === "agent") {
         registerCapabilitySubagents(profile, toolRoot, toolFiles);
       }
@@ -17693,6 +17730,53 @@ var init_prepareBrowserAuth = __esm({
   }
 });
 
+// src/scripts/prepareSimpleCapabilityRuntime.ts
+function requirementsFrom(ctx) {
+  const raw = ctx.data.capabilityRequirements;
+  return raw && typeof raw === "object" && !Array.isArray(raw) ? raw : {};
+}
+function configureBrowser(profile) {
+  if (!profile.claudeCode.tools.includes("mcp__playwright")) {
+    profile.claudeCode.tools = [...profile.claudeCode.tools, "mcp__playwright"];
+  }
+  if (!profile.claudeCode.mcpServers.some(({ name }) => name === PLAYWRIGHT_SERVER.name)) {
+    profile.claudeCode.mcpServers = [...profile.claudeCode.mcpServers, PLAYWRIGHT_SERVER];
+  }
+}
+function appendPrompt(ctx, section) {
+  const prompt = typeof ctx.data.prompt === "string" ? ctx.data.prompt.trim() : "";
+  ctx.data.prompt = [prompt, section.trim()].filter(Boolean).join("\n\n");
+}
+var PLAYWRIGHT_SERVER, prepareSimpleCapabilityRuntime;
+var init_prepareSimpleCapabilityRuntime = __esm({
+  "src/scripts/prepareSimpleCapabilityRuntime.ts"() {
+    "use strict";
+    init_loadQaContext();
+    PLAYWRIGHT_SERVER = {
+      name: "playwright",
+      command: "npx",
+      args: ["-y", "--package=@playwright/mcp@latest", "--", "playwright-mcp", "--headless"]
+    };
+    prepareSimpleCapabilityRuntime = async (ctx, profile) => {
+      const requirements = requirementsFrom(ctx);
+      if (!requirements.browser) return;
+      configureBrowser(profile);
+      if (!requirements.qaCredentials) return;
+      await loadQaContext(ctx, profile);
+      appendPrompt(
+        ctx,
+        [
+          "## QA authentication",
+          "",
+          String(ctx.data.qaAuthBlock ?? ""),
+          "",
+          "If the changed surface requires authentication and the credentials are missing or the login is rejected, return a blocked result with a safe explanation. Do not include usernames, passwords, tokens, or other credential values in the result."
+        ].join("\n")
+      );
+    };
+  }
+});
+
 // src/capabilityDelivery.ts
 function capabilityDeliveryTarget(input) {
   if (!input || typeof input !== "object" || Array.isArray(input)) return null;
@@ -20973,6 +21057,7 @@ var init_scripts = __esm({
     init_postResearchComment();
     init_postReviewResult();
     init_prepareBrowserAuth();
+    init_prepareSimpleCapabilityRuntime();
     init_prepareCapabilityDelivery();
     init_promoteQaGoal();
     init_publishReport();
@@ -21036,6 +21121,7 @@ var init_scripts = __esm({
       loadPriorArt,
       loadQaContext,
       prepareBrowserAuth,
+      prepareSimpleCapabilityRuntime,
       prepareCapabilityDelivery,
       buildSyntheticPlugin,
       resolveArtifacts,
@@ -22554,6 +22640,18 @@ async function runJob(job, base) {
     if (valid.workflowRunId && workflowIdentity && base.config && result.workflowState) {
       await writeWorkflowRunState(base.config, base.cwd, workflowIdentity, valid.workflowRunId, result.workflowState);
     }
+    if (valid.workflowRunId && workflowIdentity && hasGitHubActionsIdentity()) {
+      const facts = result.workflowState?.facts ?? {};
+      const pr = typeof facts.pr === "number" ? facts.pr : typeof valid.cliArgs.pr === "number" ? valid.cliArgs.pr : void 0;
+      const headSha = typeof facts.headSha === "string" ? facts.headSha : typeof valid.cliArgs.headSha === "string" ? valid.cliArgs.headSha : void 0;
+      await notifyWorkflowCompleted({
+        workflowId: workflowIdentity,
+        runId: valid.workflowRunId,
+        status: result.workflowState?.status === "blocked" ? "blocked" : result.exitCode === 0 ? "success" : "failed",
+        ...result.reason ? { summary: result.reason } : {},
+        ...pr !== void 0 || headSha !== void 0 ? { output: { ...pr !== void 0 ? { pr } : {}, ...headSha ? { headSha } : {} } } : {}
+      });
+    }
     return result;
   }
   if (!profileName) {
@@ -22886,7 +22984,8 @@ async function runGraphCapabilityWorkflow(parent, workflow, capability, base, ch
     };
     if (!state.completedStepIds.includes(step.id)) state.completedStepIds.push(step.id);
     if (result.exitCode !== 0 && !canContinueWorkflow(step, outcome)) {
-      state.status = "failed";
+      const lastResult = result.capabilityResults?.at(-1);
+      state.status = lastResult?.status === "blocked" ? "blocked" : "failed";
       state.blocker = result.reason ?? `workflow step ${step.id} failed`;
       await checkpoint?.(state);
       return withWorkflowBoundaryEval(capability, { ...result, workflowState: state });
@@ -22929,14 +23028,17 @@ async function runGraphCapabilityWorkflow(parent, workflow, capability, base, ch
 }
 async function completeWorkflowAtTerminal(capability, state, output, checkpoint) {
   const result = output.capabilityResults?.at(-1);
-  if (result?.status === "fail" || result?.status === "blocked") {
-    state.status = result.status === "fail" ? "failed" : "blocked";
-    state.blocker = result.summary;
+  const customStatus = output.capabilityOutput && typeof output.capabilityOutput === "object" && !Array.isArray(output.capabilityOutput) && typeof output.capabilityOutput.status === "string" ? output.capabilityOutput.status : void 0;
+  const terminalFailure = result?.status === "fail" || customStatus === "fail" ? "failed" : result?.status === "blocked" || customStatus === "blocked" ? "blocked" : null;
+  if (terminalFailure) {
+    const summary = result?.summary ?? (typeof output.capabilityOutput?.summary === "string" ? output.capabilityOutput.summary : "Workflow ended without a usable result");
+    state.status = terminalFailure;
+    state.blocker = summary;
     await checkpoint?.(state);
     return withWorkflowBoundaryEval(capability, {
       ...output,
-      exitCode: result.status === "fail" ? 1 : 64,
-      reason: result.summary,
+      exitCode: terminalFailure === "failed" ? 1 : 64,
+      reason: summary,
       workflowState: state
     });
   }
@@ -23239,6 +23341,7 @@ var init_job = __esm({
     init_registry();
     init_runIndex();
     init_publishReport();
+    init_kody_api_client();
     init_simpleCapabilityRuntime();
     init_state_backend();
     init_workflowDefinitions();

package/dist/runtime-services/capability-run/profile.json

@@ -38,6 +38,10 @@
   "scripts": {
     "preflight": [
       { "script": "loadSimpleCapability" },
+      {
+        "script": "prepareSimpleCapabilityRuntime",
+        "runWhen": { "data.capabilityExecution": "agent" }
+      },
       {
         "script": "runSimpleCapabilityScript",
         "runWhen": { "data.capabilityExecution": "script" }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kody-ade/kody-engine",
-  "version": "0.4.534",
+  "version": "0.4.536",
   "description": "kody \u2014 autonomous development engine. Single-session Claude Code agent behind a generic executor + declarative implementation profiles.",
   "license": "MIT",
   "type": "module",