@kody-ade/kody-engine 0.4.604 → 0.4.606

package/dist/bin/kody.js

@@ -15,7 +15,7 @@ var init_package = __esm({
   "package.json"() {
     package_default = {
       name: "@kody-ade/kody-engine",
-      version: "0.4.604",
+      version: "0.4.606",
       description: "kody \u2014 autonomous development engine. Single-session Claude Code agent behind a generic executor + declarative implementation profiles.",
       license: "MIT",
       type: "module",
@@ -2353,7 +2353,7 @@ function parseCapabilityRequirements(raw) {
   if (raw === void 0) return void 0;
   if (!isPlainObject(raw)) throw new Error("contract.json requirements must be an object");
   const unsupported = Object.keys(raw).filter(
-    (key) => key !== "browser" && key !== "qaCredentials" && key !== "githubTestToken" && key !== "browserOnly"
+    (key) => key !== "browser" && key !== "qaCredentials" && key !== "githubTestToken" && key !== "qaAccountCredentials" && key !== "browserOnly"
   );
   if (unsupported.length > 0) {
     throw new Error(`contract.json requirements contains unsupported fields: ${unsupported.join(", ")}`);
@@ -2367,16 +2367,22 @@ function parseCapabilityRequirements(raw) {
   if (raw.githubTestToken !== void 0 && typeof raw.githubTestToken !== "boolean") {
     throw new Error("contract.json requirements.githubTestToken must be boolean");
   }
+  if (raw.qaAccountCredentials !== void 0 && (!Array.isArray(raw.qaAccountCredentials) || raw.qaAccountCredentials.length === 0 || !raw.qaAccountCredentials.every(
+    (name) => typeof name === "string" && /^[A-Z][A-Z0-9_]{0,127}$/.test(name)
+  ))) {
+    throw new Error("contract.json requirements.qaAccountCredentials must contain valid credential names");
+  }
   if (raw.browserOnly !== void 0 && typeof raw.browserOnly !== "boolean") {
     throw new Error("contract.json requirements.browserOnly must be boolean");
   }
-  if ((raw.qaCredentials === true || raw.githubTestToken === true || raw.browserOnly === true) && raw.browser !== true) {
+  if ((raw.qaCredentials === true || raw.githubTestToken === true || raw.qaAccountCredentials !== void 0 || raw.browserOnly === true) && raw.browser !== true) {
     throw new Error("contract.json authentication requirements require browser");
   }
   const requirements = {
     ...raw.browser === true ? { browser: true } : {},
     ...raw.qaCredentials === true ? { qaCredentials: true } : {},
     ...raw.githubTestToken === true ? { githubTestToken: true } : {},
+    ...Array.isArray(raw.qaAccountCredentials) ? { qaAccountCredentials: [...new Set(raw.qaAccountCredentials)] } : {},
     ...raw.browserOnly === true ? { browserOnly: true } : {}
   };
   return Object.keys(requirements).length > 0 ? requirements : void 0;
@@ -18481,6 +18487,36 @@ async function saveAccountRepositoryAuth(targetUrl, cookie, auth) {
   });
   if (!response.ok) throw new Error(`app repository setup returned ${response.status}`);
 }
+async function prepareAccountCredentials(ctx, profile, input) {
+  const cookie = browserSessionCookieHeader(profile, input.targetUrl);
+  if (!cookie) {
+    appendAuthMessage(ctx, "Auth: QA account credentials could not be prepared because the app session is missing.");
+    return false;
+  }
+  const origin = browserOrigin(input.targetUrl);
+  for (const name of input.names) {
+    if (!/^[A-Z][A-Z0-9_]{0,127}$/.test(name)) {
+      appendAuthMessage(ctx, "Auth: QA account credentials contain an invalid credential name.");
+      return false;
+    }
+    const credential = await resolveRuntimeSecret(name, ctx);
+    if (!credential.value) {
+      appendAuthMessage(ctx, `Auth: QA account setup is incomplete because no \`${name}\` secret was found.`);
+      return false;
+    }
+    const response = await fetch(`${origin}/api/kody/account/credentials`, {
+      method: "PUT",
+      headers: { "content-type": "application/json", cookie, origin },
+      body: JSON.stringify({ name, value: credential.value })
+    });
+    if (!response.ok) {
+      appendAuthMessage(ctx, `Auth: QA account credential setup returned ${response.status}.`);
+      return false;
+    }
+  }
+  appendAuthMessage(ctx, "Auth: the QA account's required model credentials are already prepared by the engine.");
+  return true;
+}
 function mergeStorageStates(existingPath, nextPath) {
   if (existingPath === nextPath || !fs48.existsSync(existingPath)) return;
   const existing = JSON.parse(fs48.readFileSync(existingPath, "utf-8"));
@@ -18872,6 +18908,12 @@ var init_prepareSimpleCapabilityRuntime = __esm({
           login: String(ctx.data.qaLogin ?? ""),
           targetUrl
         });
+        if (requirements.qaAccountCredentials?.length) {
+          await prepareAccountCredentials(ctx, profile, {
+            names: requirements.qaAccountCredentials,
+            targetUrl
+          });
+        }
       }
       if (requirements.githubTestToken) {
         const capabilityInput = ctx.data.capabilityInput && typeof ctx.data.capabilityInput === "object" && !Array.isArray(ctx.data.capabilityInput) ? ctx.data.capabilityInput : {};

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kody-ade/kody-engine",
-  "version": "0.4.604",
+  "version": "0.4.606",
   "description": "kody — autonomous development engine. Single-session Claude Code agent behind a generic executor + declarative implementation profiles.",
   "license": "MIT",
   "type": "module",

package/templates/kody.yml

@@ -82,6 +82,7 @@ jobs:
           GH_PAT: ${{ secrets.GH_PAT }}
           KODY_TOKEN: ${{ secrets.KODY_TOKEN }}
           E2E_GITHUB_TOKEN: ${{ secrets.E2E_GITHUB_TOKEN }}
+          OPENROUTER_API_KEY: ${{ secrets.OPENROUTER_API_KEY }}
           KODY_APP_ID: ${{ secrets.KODY_APP_ID }}
           KODY_APP_PRIVATE_KEY: ${{ secrets.KODY_APP_PRIVATE_KEY }}
           SESSION_ID: ${{ inputs.sessionId }}