@kody-ade/kody-engine 0.4.597 → 0.4.599

package/dist/bin/kody.js

@@ -15,7 +15,7 @@ var init_package = __esm({
   "package.json"() {
     package_default = {
       name: "@kody-ade/kody-engine",
-      version: "0.4.597",
+      version: "0.4.599",
       description: "kody \u2014 autonomous development engine. Single-session Claude Code agent behind a generic executor + declarative implementation profiles.",
       license: "MIT",
       type: "module",
@@ -861,8 +861,30 @@ function createOutputContractPostWriteHook(contract) {
   };
 }
 function createOutputContractStopHook(contract) {
-  return async () => {
+  return async (input = {}) => {
     if (!fs4.existsSync(contract.path)) {
+      const message = input.last_assistant_message;
+      if (typeof message === "string" && message.trim()) {
+        let value;
+        try {
+          value = JSON.parse(message);
+        } catch {
+          value = void 0;
+        }
+        if (value !== void 0) {
+          try {
+            validateCapabilityContractOutput(contract.schema, value);
+            fs4.mkdirSync(path5.dirname(contract.path), { recursive: true });
+            fs4.writeFileSync(contract.path, JSON.stringify(value), { mode: 384 });
+            return {};
+          } catch (error2) {
+            return {
+              decision: "block",
+              reason: `The final JSON response does not match its required contract: ${error2 instanceof Error ? error2.message : String(error2)}. Return one corrected JSON value and finish.`
+            };
+          }
+        }
+      }
       return {
         decision: "block",
         reason: "Continue the Journey from the current page and complete the next unresolved user outcome. Do not write the result merely because you paused; write it only after the Journey passes, fails, or cannot safely continue."
@@ -18327,8 +18349,7 @@ function githubRepositoryParts(repoUrl) {
   if (!parts[0] || !repo) throw new Error("repository URL is incomplete");
   return { owner: parts[0], repo };
 }
-function browserOrigin(ctx) {
-  const raw = typeof ctx.data.previewUrl === "string" ? ctx.data.previewUrl : "";
+function browserOrigin(raw) {
   if (!raw) throw new Error("QA target URL is unavailable");
   const parsed = new URL(raw);
   if (parsed.protocol !== "https:" && parsed.protocol !== "http:") {
@@ -18413,6 +18434,17 @@ async function prepareMethod(ctx, profile, method) {
   const { repositoryKey, credentialKey } = fieldsForKodyRepository(method);
   const variables = readKodyVariables(ctx.cwd);
   const repositoryUrl = variables[repositoryKey]?.trim() ?? "";
+  const targetUrl = typeof ctx.data.previewUrl === "string" ? ctx.data.previewUrl : "";
+  return prepareKodyRepositoryBrowserAuth(ctx, profile, {
+    repositoryUrl,
+    repositoryKey,
+    credentialKey,
+    methodName: method.name,
+    targetUrl
+  });
+}
+async function prepareKodyRepositoryBrowserAuth(ctx, profile, input) {
+  const { repositoryUrl, credentialKey } = input;
   const credential = await resolveRuntimeSecret(credentialKey, ctx);
   ctx.data.qaAuthSecretSources = {
     ...ctx.data.qaAuthSecretSources ?? {},
@@ -18426,14 +18458,14 @@ async function prepareMethod(ctx, profile, method) {
   if (!repositoryUrl) {
     appendAuthMessage(
       ctx,
-      `Auth: ${method.name} is incomplete because no \`${repositoryKey}\` variable was found. Note this authenticated surface as a gap.`
+      `Auth: ${input.methodName} is incomplete because no \`${input.repositoryKey ?? "repository"}\` variable was found. Note this authenticated surface as a gap.`
     );
     return false;
   }
   if (!credential.value) {
     appendAuthMessage(
       ctx,
-      `Auth: ${method.name} is incomplete because no \`${credentialKey}\` secret was found. Note this authenticated surface as a gap.`
+      `Auth: ${input.methodName} is incomplete because no \`${credentialKey}\` secret was found. Note this authenticated surface as a gap.`
     );
     return false;
   }
@@ -18452,7 +18484,7 @@ async function prepareMethod(ctx, profile, method) {
       throw new Error("GitHub returned incomplete identity data");
     }
     state = writeKodyStorageState({
-      origin: browserOrigin(ctx),
+      origin: browserOrigin(input.targetUrl),
       repoUrl: `https://github.com/${encodeURIComponent(owner)}/${encodeURIComponent(repo)}`,
       owner,
       repo,
@@ -18466,7 +18498,7 @@ async function prepareMethod(ctx, profile, method) {
     });
     appendAuthMessage(
       ctx,
-      `Auth: ${method.name} is already authenticated by the engine-provided browser session. The credential is not available to you; never request, reveal, or report it.`
+      `Auth: ${input.methodName} is already authenticated by the engine-provided browser session. The credential is not available to you; never request, reveal, or report it.`
     );
     return true;
   } catch (error) {
@@ -18474,7 +18506,7 @@ async function prepareMethod(ctx, profile, method) {
     const reason = error instanceof Error ? error.message : String(error);
     appendAuthMessage(
       ctx,
-      `Auth: the engine could not prepare ${method.name} (${reason}). Note this authenticated surface as a gap.`
+      `Auth: the engine could not prepare ${input.methodName} (${reason}). Note this authenticated surface as a gap.`
     );
     return false;
   }
@@ -18693,7 +18725,7 @@ var init_prepareSimpleCapabilityRuntime = __esm({
   "src/scripts/prepareSimpleCapabilityRuntime.ts"() {
     "use strict";
     init_loadQaContext();
-    init_runtimeSecrets();
+    init_prepareBrowserAuth();
     PLAYWRIGHT_SERVER = {
       name: "playwright",
       command: "npx",
@@ -18705,6 +18737,18 @@ var init_prepareSimpleCapabilityRuntime = __esm({
       configureBrowser(ctx, profile, requirements);
       if (requirements.qaCredentials) {
         await loadQaContext(ctx, profile);
+      }
+      if (requirements.githubTestToken) {
+        const capabilityInput = ctx.data.capabilityInput && typeof ctx.data.capabilityInput === "object" && !Array.isArray(ctx.data.capabilityInput) ? ctx.data.capabilityInput : {};
+        const targetUrl = typeof capabilityInput.url === "string" ? capabilityInput.url : typeof capabilityInput.targetUrl === "string" ? capabilityInput.targetUrl : "";
+        await prepareKodyRepositoryBrowserAuth(ctx, profile, {
+          repositoryUrl: `https://github.com/${ctx.config.github.owner}/${ctx.config.github.repo}`,
+          credentialKey: "E2E_GITHUB_TOKEN",
+          methodName: "Kody protected QA login",
+          targetUrl
+        });
+      }
+      if (requirements.qaCredentials || requirements.githubTestToken) {
         appendPrompt(
           ctx,
           [
@@ -18716,22 +18760,6 @@ var init_prepareSimpleCapabilityRuntime = __esm({
           ].join("\n")
         );
       }
-      if (requirements.githubTestToken) {
-        const token = await resolveRuntimeSecret("E2E_GITHUB_TOKEN", ctx);
-        appendPrompt(
-          ctx,
-          token.value ? [
-            "## Protected GitHub test login",
-            "",
-            `A protected GitHub test token is available: \`${token.value}\``,
-            "Use it only if the target application asks for a GitHub personal access token; never include the token in screenshots, output, logs, files, or messages."
-          ].join("\n") : [
-            "## Protected GitHub test login",
-            "",
-            "E2E_GITHUB_TOKEN is not configured. If this Quality Scenario requires GitHub token authentication, return a blocked result."
-          ].join("\n")
-        );
-      }
     };
   }
 });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kody-ade/kody-engine",
-  "version": "0.4.597",
+  "version": "0.4.599",
   "description": "kody — autonomous development engine. Single-session Claude Code agent behind a generic executor + declarative implementation profiles.",
   "license": "MIT",
   "type": "module",