@kody-ade/kody-engine 0.4.603 → 0.4.605

package/dist/bin/kody.js

@@ -15,7 +15,7 @@ var init_package = __esm({
   "package.json"() {
     package_default = {
       name: "@kody-ade/kody-engine",
-      version: "0.4.603",
+      version: "0.4.605",
       description: "kody \u2014 autonomous development engine. Single-session Claude Code agent behind a generic executor + declarative implementation profiles.",
       license: "MIT",
       type: "module",
@@ -18385,7 +18385,8 @@ function writeKodyStorageState(input) {
     repo: input.repo,
     token: input.token,
     addedAt: now,
-    isLogin: true
+    isLogin: true,
+    ...input.user ? { user: input.user } : {}
   };
   const unresolvedUser = { login: "", avatar_url: "", id: 0 };
   const auth = {
@@ -18393,7 +18394,7 @@ function writeKodyStorageState(input) {
     owner: input.owner,
     repo: input.repo,
     token: input.token,
-    user: unresolvedUser,
+    user: input.user ?? unresolvedUser,
     loggedInAt: now,
     repos: [repoEntry],
     currentRepoIndex: 0
@@ -18408,7 +18409,7 @@ function writeKodyStorageState(input) {
     ]
   };
   fs48.writeFileSync(file, JSON.stringify(storageState), { mode: 384 });
-  return { directory, file };
+  return { directory, file, auth };
 }
 function parseSetCookie(value, hostname) {
   const parts = value.split(";").map((part) => part.trim());
@@ -18458,6 +18459,58 @@ function currentStorageStatePath(args) {
   }
   return void 0;
 }
+function browserSessionCookieHeader(profile, targetUrl) {
+  const playwright = profile.claudeCode.mcpServers.find((server) => server.name === "playwright");
+  const storagePath = currentStorageStatePath(playwright?.args ?? []);
+  if (!storagePath || !fs48.existsSync(storagePath)) return void 0;
+  const hostname = new URL(targetUrl).hostname;
+  const state = JSON.parse(fs48.readFileSync(storagePath, "utf-8"));
+  const cookies = (state.cookies ?? []).filter((cookie) => {
+    const domain = cookie.domain.replace(/^\./, "");
+    return hostname === domain || hostname.endsWith(`.${domain}`);
+  });
+  if (cookies.length === 0) return void 0;
+  return cookies.map((cookie) => `${cookie.name}=${String(cookie.value)}`).join("; ");
+}
+async function saveAccountRepositoryAuth(targetUrl, cookie, auth) {
+  const origin = browserOrigin(targetUrl);
+  const response = await fetch(`${origin}/api/kody/account/repositories`, {
+    method: "PUT",
+    headers: { "content-type": "application/json", cookie, origin },
+    body: JSON.stringify({ auth })
+  });
+  if (!response.ok) throw new Error(`app repository setup returned ${response.status}`);
+}
+async function prepareAccountCredentials(ctx, profile, input) {
+  const cookie = browserSessionCookieHeader(profile, input.targetUrl);
+  if (!cookie) {
+    appendAuthMessage(ctx, "Auth: QA account credentials could not be prepared because the app session is missing.");
+    return false;
+  }
+  const origin = browserOrigin(input.targetUrl);
+  for (const name of input.names) {
+    if (!/^[A-Z][A-Z0-9_]{0,127}$/.test(name)) {
+      appendAuthMessage(ctx, "Auth: QA account credentials contain an invalid credential name.");
+      return false;
+    }
+    const credential = await resolveRuntimeSecret(name, ctx);
+    if (!credential.value) {
+      appendAuthMessage(ctx, `Auth: QA account setup is incomplete because no \`${name}\` secret was found.`);
+      return false;
+    }
+    const response = await fetch(`${origin}/api/kody/account/credentials`, {
+      method: "PUT",
+      headers: { "content-type": "application/json", cookie, origin },
+      body: JSON.stringify({ name, value: credential.value })
+    });
+    if (!response.ok) {
+      appendAuthMessage(ctx, `Auth: QA account credential setup returned ${response.status}.`);
+      return false;
+    }
+  }
+  appendAuthMessage(ctx, "Auth: the QA account's required model credentials are already prepared by the engine.");
+  return true;
+}
 function mergeStorageStates(existingPath, nextPath) {
   if (existingPath === nextPath || !fs48.existsSync(existingPath)) return;
   const existing = JSON.parse(fs48.readFileSync(existingPath, "utf-8"));
@@ -18558,13 +18611,17 @@ async function prepareKodyRepositoryBrowserAuth(ctx, profile, input) {
     );
     const [owner, repo] = repository.full_name.split("/");
     if (!owner || !repo) throw new Error("GitHub returned incomplete repository data");
+    const appCookie = browserSessionCookieHeader(profile, input.targetUrl);
+    const user = appCookie ? await githubJson("https://api.github.com/user", credential.value, "user") : void 0;
     state = writeKodyStorageState({
       origin: browserOrigin(input.targetUrl),
       repoUrl: `https://github.com/${encodeURIComponent(owner)}/${encodeURIComponent(repo)}`,
       owner,
       repo,
-      token: credential.value
+      token: credential.value,
+      user
     });
+    if (appCookie) await saveAccountRepositoryAuth(input.targetUrl, appCookie, state.auth);
     configurePlaywright(profile, state.file);
     const authDirectory = state.directory;
     registerRuntimeCleanup(ctx, () => {
@@ -18845,6 +18902,12 @@ var init_prepareSimpleCapabilityRuntime = __esm({
           login: String(ctx.data.qaLogin ?? ""),
           targetUrl
         });
+        if (requirements.qaAccountCredentials?.length) {
+          await prepareAccountCredentials(ctx, profile, {
+            names: requirements.qaAccountCredentials,
+            targetUrl
+          });
+        }
       }
       if (requirements.githubTestToken) {
         const capabilityInput = ctx.data.capabilityInput && typeof ctx.data.capabilityInput === "object" && !Array.isArray(ctx.data.capabilityInput) ? ctx.data.capabilityInput : {};

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kody-ade/kody-engine",
-  "version": "0.4.603",
+  "version": "0.4.605",
   "description": "kody — autonomous development engine. Single-session Claude Code agent behind a generic executor + declarative implementation profiles.",
   "license": "MIT",
   "type": "module",

package/templates/kody.yml

@@ -82,6 +82,7 @@ jobs:
           GH_PAT: ${{ secrets.GH_PAT }}
           KODY_TOKEN: ${{ secrets.KODY_TOKEN }}
           E2E_GITHUB_TOKEN: ${{ secrets.E2E_GITHUB_TOKEN }}
+          OPENROUTER_API_KEY: ${{ secrets.OPENROUTER_API_KEY }}
           KODY_APP_ID: ${{ secrets.KODY_APP_ID }}
           KODY_APP_PRIVATE_KEY: ${{ secrets.KODY_APP_PRIVATE_KEY }}
           SESSION_ID: ${{ inputs.sessionId }}