@kody-ade/kody-engine 0.2.3 → 0.2.5

package/dist/bin/kody2.js

@@ -3,7 +3,7 @@
 // package.json
 var package_default = {
   name: "@kody-ade/kody-engine",
-  version: "0.2.3",
+  version: "0.2.5",
   description: "kody2 \u2014 autonomous development engine. Single-session Claude Code agent behind a generic executor + declarative executable profiles.",
   license: "MIT",
   type: "module",
@@ -137,8 +137,8 @@ function getAnthropicApiKeyOrDummy() {
 }
 
 // src/executor.ts
-import * as fs10 from "fs";
-import * as path8 from "path";
+import * as fs11 from "fs";
+import * as path9 from "path";
 
 // src/agent.ts
 import * as fs2 from "fs";
@@ -519,9 +519,6 @@ function parseClaudeCode(p, raw) {
     throw new ProfileError(p, `claudeCode.permissionMode must be one of default|acceptEdits|plan|bypassPermissions`);
   }
   const tools = Array.isArray(r.tools) ? r.tools : [];
-  if (tools.length === 0) {
-    throw new ProfileError(p, `claudeCode.tools must declare at least one SDK tool`);
-  }
   const hooksRaw = r.hooks ?? {};
   const hooks = {
     PreToolUse: Array.isArray(hooksRaw.PreToolUse) ? hooksRaw.PreToolUse : [],
@@ -1651,6 +1648,174 @@ function tryPostPr2(prNumber, body, cwd) {
   }
 }
 
+// src/scripts/initFlow.ts
+import { execFileSync as execFileSync9 } from "child_process";
+import * as fs9 from "fs";
+import * as path8 from "path";
+function detectPackageManager(cwd) {
+  if (fs9.existsSync(path8.join(cwd, "pnpm-lock.yaml"))) return "pnpm";
+  if (fs9.existsSync(path8.join(cwd, "yarn.lock"))) return "yarn";
+  if (fs9.existsSync(path8.join(cwd, "bun.lockb"))) return "bun";
+  return "npm";
+}
+function qualityCommandsFor(pm) {
+  return {
+    typecheck: `${pm} tsc --noEmit`,
+    lint: "",
+    testUnit: `${pm} test`
+  };
+}
+function detectOwnerRepo(cwd) {
+  let url;
+  try {
+    url = execFileSync9("git", ["remote", "get-url", "origin"], {
+      cwd,
+      encoding: "utf-8",
+      stdio: ["ignore", "pipe", "pipe"]
+    }).trim();
+  } catch {
+    return null;
+  }
+  const m = url.match(/[:/]([^/:]+)\/([^/]+?)(?:\.git)?$/) ?? null;
+  if (!m) return null;
+  return { owner: m[1], repo: m[2] };
+}
+function makeConfig(pm, ownerRepo, defaultBranch) {
+  return {
+    $schema: "https://raw.githubusercontent.com/aharonyaircohen/kody-engine/main/kody.config.schema.json",
+    quality: qualityCommandsFor(pm),
+    git: { defaultBranch },
+    github: {
+      owner: ownerRepo?.owner ?? "OWNER",
+      repo: ownerRepo?.repo ?? "REPO"
+    },
+    agent: {
+      model: "minimax/MiniMax-M2.7-highspeed"
+    }
+  };
+}
+var WORKFLOW_TEMPLATE = `# Drop this file at .github/workflows/kody2.yml in your repo.
+#
+# Triggers: @kody2 comment on an issue or PR, or manual workflow_dispatch.
+# Everything else (install deps, set up LiteLLM, run the agent, open the PR)
+# is handled inside the @kody-ade/kody-engine package.
+#
+# Required repo secrets: at least one model provider key (e.g. MINIMAX_API_KEY,
+# ANTHROPIC_API_KEY). kody2 reads any *_API_KEY secret automatically via
+# toJSON(secrets) \u2014 no need to list them here.
+#
+# Recommended: KODY_TOKEN secret \u2014 a PAT or GitHub App token with repo
+# scope so kody2's pushes trigger downstream CI and PR-body edits succeed.
+
+name: kody2
+
+on:
+  workflow_dispatch:
+    inputs:
+      issue_number:
+        description: "GitHub issue number"
+        required: true
+        type: string
+  issue_comment:
+    types: [created]
+
+jobs:
+  run:
+    if: >-
+      \${{ github.event_name == 'workflow_dispatch' ||
+          (github.event_name == 'issue_comment' &&
+            !github.event.issue.pull_request &&
+            contains(github.event.comment.body, '@kody2')) }}
+    runs-on: ubuntu-latest
+    timeout-minutes: 60
+    permissions:
+      issues: write
+      pull-requests: write
+      contents: write
+    steps:
+      - uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+          token: \${{ secrets.KODY_TOKEN || github.token }}
+
+      - uses: actions/setup-node@v4
+        with:
+          node-version: 22
+
+      - uses: actions/setup-python@v5
+        with:
+          python-version: "3.12"
+
+      - env:
+          ALL_SECRETS: \${{ toJSON(secrets) }}
+        run: npx -y -p @kody-ade/kody-engine@latest kody2 ci --issue \${{ github.event.inputs.issue_number || github.event.issue.number }}
+`;
+function defaultBranchFromGit(cwd) {
+  try {
+    const ref = execFileSync9("git", ["symbolic-ref", "refs/remotes/origin/HEAD"], {
+      cwd,
+      encoding: "utf-8",
+      stdio: ["ignore", "pipe", "pipe"]
+    }).trim();
+    return ref.replace("refs/remotes/origin/", "");
+  } catch {
+    try {
+      return execFileSync9("git", ["branch", "--show-current"], {
+        cwd,
+        encoding: "utf-8",
+        stdio: ["ignore", "pipe", "pipe"]
+      }).trim() || "main";
+    } catch {
+      return "main";
+    }
+  }
+}
+function performInit(cwd, force) {
+  const wrote = [];
+  const skipped = [];
+  const pm = detectPackageManager(cwd);
+  const ownerRepo = detectOwnerRepo(cwd);
+  const defaultBranch = defaultBranchFromGit(cwd);
+  const configPath = path8.join(cwd, "kody.config.json");
+  if (fs9.existsSync(configPath) && !force) {
+    skipped.push("kody.config.json");
+  } else {
+    const cfg = makeConfig(pm, ownerRepo, defaultBranch);
+    fs9.writeFileSync(configPath, `${JSON.stringify(cfg, null, 2)}
+`);
+    wrote.push("kody.config.json");
+  }
+  const workflowDir = path8.join(cwd, ".github", "workflows");
+  const workflowPath = path8.join(workflowDir, "kody2.yml");
+  if (fs9.existsSync(workflowPath) && !force) {
+    skipped.push(".github/workflows/kody2.yml");
+  } else {
+    fs9.mkdirSync(workflowDir, { recursive: true });
+    fs9.writeFileSync(workflowPath, WORKFLOW_TEMPLATE);
+    wrote.push(".github/workflows/kody2.yml");
+  }
+  return { wrote, skipped };
+}
+var initFlow = async (ctx) => {
+  const force = ctx.args.force === true;
+  const cwd = ctx.cwd;
+  const { wrote, skipped } = performInit(cwd, force);
+  process.stdout.write("\u2192 kody2 init\n");
+  for (const f of wrote) process.stdout.write(`  wrote    ${f}
+`);
+  for (const f of skipped) process.stdout.write(`  skipped  ${f} (already exists; pass --force to overwrite)
+`);
+  process.stdout.write(
+    wrote.length > 0 ? `
+Done. Edit kody.config.json to pick your model, then push the workflow file.
+` : `
+Nothing to do. All files already present. (Use --force to overwrite.)
+`
+  );
+  ctx.skipAgent = true;
+  ctx.output.exitCode = 0;
+};
+
 // src/scripts/loadConventions.ts
 var loadConventions = async (ctx) => {
   const conventions = loadProjectConventions(ctx.cwd);
@@ -1733,8 +1898,57 @@ function postWith(type, n, body, cwd) {
   }
 }
 
+// src/scripts/postReviewResult.ts
+function detectVerdict(body) {
+  const m = body.match(/##\s*Verdict\s*:\s*(PASS|CONCERNS|FAIL)\b/i);
+  if (!m) return "UNKNOWN";
+  return m[1].toUpperCase();
+}
+var postReviewResult = async (ctx, _profile, agentResult) => {
+  const prNumber = ctx.data.commentTargetNumber;
+  if (!prNumber) {
+    ctx.output.exitCode = 99;
+    ctx.output.reason = "review postflight: no PR number in context";
+    return;
+  }
+  if (!agentResult || agentResult.outcome !== "completed") {
+    const reason = agentResult?.error ?? "agent did not complete";
+    try {
+      postPrReviewComment(prNumber, `\u26A0\uFE0F kody2 review FAILED: ${truncate2(reason, 1e3)}`, ctx.cwd);
+    } catch {
+    }
+    ctx.output.exitCode = 1;
+    ctx.output.reason = reason;
+    return;
+  }
+  const reviewBody = agentResult.finalText.trim();
+  if (!reviewBody) {
+    try {
+      postPrReviewComment(prNumber, `\u26A0\uFE0F kody2 review FAILED: agent produced no review body`, ctx.cwd);
+    } catch {
+    }
+    ctx.output.exitCode = 1;
+    ctx.output.reason = "empty review body";
+    return;
+  }
+  try {
+    postPrReviewComment(prNumber, reviewBody, ctx.cwd);
+  } catch (err) {
+    const msg = err instanceof Error ? err.message : String(err);
+    ctx.output.exitCode = 4;
+    ctx.output.reason = `failed to post review comment: ${msg}`;
+    return;
+  }
+  const verdict = detectVerdict(reviewBody);
+  ctx.data.reviewVerdict = verdict;
+  ctx.output.exitCode = verdict === "FAIL" ? 1 : 0;
+  process.stdout.write(`
+REVIEW_POSTED=https://github.com/${ctx.config.github.owner}/${ctx.config.github.repo}/pull/${prNumber} (verdict: ${verdict})
+`);
+};
+
 // src/scripts/resolveFlow.ts
-import { execFileSync as execFileSync9 } from "child_process";
+import { execFileSync as execFileSync10 } from "child_process";
 var CONFLICT_DIFF_MAX_BYTES = 4e4;
 var resolveFlow = async (ctx) => {
   const prNumber = ctx.args.pr;
@@ -1786,7 +2000,7 @@ var resolveFlow = async (ctx) => {
 };
 function getConflictedFiles(cwd) {
   try {
-    const out = execFileSync9("git", ["diff", "--name-only", "--diff-filter=U"], {
+    const out = execFileSync10("git", ["diff", "--name-only", "--diff-filter=U"], {
       encoding: "utf-8",
       cwd,
       env: { ...process.env, HUSKY: "0" }
@@ -1801,7 +2015,7 @@ function getConflictMarkersPreview(files, cwd, maxBytes = CONFLICT_DIFF_MAX_BYTE
   let total = 0;
   for (const f of files) {
     try {
-      const content = execFileSync9("cat", [f], { encoding: "utf-8", cwd }).toString();
+      const content = execFileSync10("cat", [f], { encoding: "utf-8", cwd }).toString();
       const snippet = `### ${f}
 
 \`\`\`
@@ -1823,6 +2037,33 @@ function tryPostPr3(prNumber, body, cwd) {
   }
 }
 
+// src/scripts/reviewFlow.ts
+var reviewFlow = async (ctx) => {
+  const prNumber = ctx.args.pr;
+  const pr = getPr(prNumber, ctx.cwd);
+  if (pr.state !== "OPEN") {
+    ctx.output.exitCode = 1;
+    ctx.output.reason = `PR #${prNumber} is not OPEN (state: ${pr.state})`;
+    ctx.skipAgent = true;
+    return;
+  }
+  ctx.data.pr = pr;
+  ctx.data.commentTargetType = "pr";
+  ctx.data.commentTargetNumber = prNumber;
+  checkoutPrBranch(prNumber, ctx.cwd);
+  ctx.data.branch = getCurrentBranch(ctx.cwd);
+  ctx.data.prDiff = getPrDiff(prNumber, ctx.cwd);
+  const runUrl = getRunUrl();
+  const runSuffix = runUrl ? `, run ${runUrl}` : "";
+  tryPostPr4(prNumber, `\u{1F440} kody2 review started on PR #${prNumber}${runSuffix}`, ctx.cwd);
+};
+function tryPostPr4(prNumber, body, cwd) {
+  try {
+    postPrReviewComment(prNumber, body, cwd);
+  } catch {
+  }
+}
+
 // src/scripts/runFlow.ts
 var runFlow = async (ctx) => {
   const issueNumber = ctx.args.issue;
@@ -1939,7 +2180,7 @@ var verify = async (ctx) => {
 };
 
 // src/scripts/writeRunSummary.ts
-import * as fs9 from "fs";
+import * as fs10 from "fs";
 var writeRunSummary = async (ctx) => {
   const summaryPath = process.env.GITHUB_STEP_SUMMARY;
   if (!summaryPath) return;
@@ -1961,7 +2202,7 @@ var writeRunSummary = async (ctx) => {
   if (reason) lines.push(`- **Reason:** ${reason}`);
   lines.push("");
   try {
-    fs9.appendFileSync(summaryPath, `${lines.join("\n")}
+    fs10.appendFileSync(summaryPath, `${lines.join("\n")}
 `);
   } catch {
   }
@@ -1973,6 +2214,8 @@ var preflightScripts = {
   fixFlow,
   fixCiFlow,
   resolveFlow,
+  reviewFlow,
+  initFlow,
   loadConventions,
   loadCoverageRules,
   composePrompt
@@ -1984,6 +2227,7 @@ var postflightScripts = {
   commitAndPush: commitAndPush2,
   ensurePr: ensurePr2,
   postIssueComment: postIssueComment2,
+  postReviewResult,
   writeRunSummary
 };
 var allScriptNames = /* @__PURE__ */ new Set([
@@ -1992,7 +2236,7 @@ var allScriptNames = /* @__PURE__ */ new Set([
 ]);
 
 // src/tools.ts
-import { execFileSync as execFileSync10 } from "child_process";
+import { execFileSync as execFileSync11 } from "child_process";
 function verifyCliTools(tools, cwd) {
   const out = [];
   for (const t of tools) out.push(verifyOne(t, cwd));
@@ -2025,7 +2269,7 @@ function verifyOne(tool, cwd) {
 }
 function runShell(cmd, cwd, timeoutMs = 3e4) {
   try {
-    execFileSync10("sh", ["-c", cmd], { cwd, stdio: "pipe", timeout: timeoutMs });
+    execFileSync11("sh", ["-c", cmd], { cwd, stdio: "pipe", timeout: timeoutMs });
     return true;
   } catch {
     return false;
@@ -2076,7 +2320,7 @@ async function runExecutable(profileName, input) {
     data: {},
     output: { exitCode: 0 }
   };
-  const ndjsonDir = path8.join(input.cwd, ".kody2");
+  const ndjsonDir = path9.join(input.cwd, ".kody2");
   const invokeAgent = async (prompt) => runAgent({
     prompt,
     model,
@@ -2135,17 +2379,17 @@ async function runExecutable(profileName, input) {
   }
 }
 function resolveProfilePath(profileName) {
-  const here = path8.dirname(new URL(import.meta.url).pathname);
+  const here = path9.dirname(new URL(import.meta.url).pathname);
   const candidates = [
-    path8.join(here, "executables", profileName, "profile.json"),
+    path9.join(here, "executables", profileName, "profile.json"),
     // same-dir sibling (dev)
-    path8.join(here, "..", "executables", profileName, "profile.json"),
+    path9.join(here, "..", "executables", profileName, "profile.json"),
     // up one (prod: dist/bin → dist/executables)
-    path8.join(here, "..", "src", "executables", profileName, "profile.json")
+    path9.join(here, "..", "src", "executables", profileName, "profile.json")
     // fallback
   ];
   for (const c of candidates) {
-    if (fs10.existsSync(c)) return c;
+    if (fs11.existsSync(c)) return c;
   }
   return candidates[0];
 }
@@ -2223,12 +2467,12 @@ function finish(out) {
 }
 
 // src/kody2-cli.ts
-import { execFileSync as execFileSync11 } from "child_process";
-import * as fs12 from "fs";
-import * as path9 from "path";
+import { execFileSync as execFileSync12 } from "child_process";
+import * as fs13 from "fs";
+import * as path10 from "path";
 
 // src/dispatch.ts
-import * as fs11 from "fs";
+import * as fs12 from "fs";
 function autoDispatch(explicit) {
   if (explicit?.mode && explicit.target) {
     return {
@@ -2238,10 +2482,10 @@ function autoDispatch(explicit) {
   }
   const eventName = process.env.GITHUB_EVENT_NAME;
   const eventPath = process.env.GITHUB_EVENT_PATH;
-  if (!eventName || !eventPath || !fs11.existsSync(eventPath)) return null;
+  if (!eventName || !eventPath || !fs12.existsSync(eventPath)) return null;
   let event = {};
   try {
-    event = JSON.parse(fs11.readFileSync(eventPath, "utf-8"));
+    event = JSON.parse(fs12.readFileSync(eventPath, "utf-8"));
   } catch {
     return null;
   }
@@ -2360,15 +2604,15 @@ function resolveAuthToken(env = process.env) {
   if (token && !env.GH_TOKEN) env.GH_TOKEN = token;
   return token;
 }
-function detectPackageManager(cwd) {
-  if (fs12.existsSync(path9.join(cwd, "pnpm-lock.yaml"))) return "pnpm";
-  if (fs12.existsSync(path9.join(cwd, "yarn.lock"))) return "yarn";
-  if (fs12.existsSync(path9.join(cwd, "bun.lockb"))) return "bun";
+function detectPackageManager2(cwd) {
+  if (fs13.existsSync(path10.join(cwd, "pnpm-lock.yaml"))) return "pnpm";
+  if (fs13.existsSync(path10.join(cwd, "yarn.lock"))) return "yarn";
+  if (fs13.existsSync(path10.join(cwd, "bun.lockb"))) return "bun";
   return "npm";
 }
 function shellOut(cmd, args, cwd, stream = true) {
   try {
-    execFileSync11(cmd, args, {
+    execFileSync12(cmd, args, {
       cwd,
       stdio: stream ? "inherit" : "pipe",
       env: { ...process.env, HUSKY: "0", SKIP_HOOKS: "1", CI: process.env.CI ?? "1" }
@@ -2381,7 +2625,7 @@ function shellOut(cmd, args, cwd, stream = true) {
 }
 function isOnPath(bin) {
   try {
-    execFileSync11("which", [bin], { stdio: "pipe" });
+    execFileSync12("which", [bin], { stdio: "pipe" });
     return true;
   } catch {
     return false;
@@ -2415,7 +2659,7 @@ function installLitellmIfNeeded(cwd) {
   } catch {
   }
   try {
-    execFileSync11("python3", ["-c", "import litellm"], { stdio: "pipe" });
+    execFileSync12("python3", ["-c", "import litellm"], { stdio: "pipe" });
     process.stdout.write("\u2192 kody2: litellm already installed\n");
     return 0;
   } catch {
@@ -2425,26 +2669,26 @@ function installLitellmIfNeeded(cwd) {
 }
 function configureGitIdentity(cwd) {
   try {
-    const name = execFileSync11("git", ["config", "user.name"], { cwd, stdio: "pipe", encoding: "utf-8" }).trim();
+    const name = execFileSync12("git", ["config", "user.name"], { cwd, stdio: "pipe", encoding: "utf-8" }).trim();
     if (name) return;
   } catch {
   }
   try {
-    execFileSync11("git", ["config", "user.name", "kody2-bot"], { cwd, stdio: "pipe" });
+    execFileSync12("git", ["config", "user.name", "kody2-bot"], { cwd, stdio: "pipe" });
   } catch {
   }
   try {
-    execFileSync11("git", ["config", "user.email", "kody2-bot@users.noreply.github.com"], { cwd, stdio: "pipe" });
+    execFileSync12("git", ["config", "user.email", "kody2-bot@users.noreply.github.com"], { cwd, stdio: "pipe" });
   } catch {
   }
 }
 function postFailureTail(issueNumber, cwd, reason) {
   if (!issueNumber) return;
-  const logPath = path9.join(cwd, ".kody2", "last-run.jsonl");
+  const logPath = path10.join(cwd, ".kody2", "last-run.jsonl");
   let tail = "";
   try {
-    if (fs12.existsSync(logPath)) {
-      const content = fs12.readFileSync(logPath, "utf-8");
+    if (fs13.existsSync(logPath)) {
+      const content = fs13.readFileSync(logPath, "utf-8");
       tail = content.slice(-3e3);
     }
   } catch {
@@ -2481,7 +2725,7 @@ async function runCi(argv) {
 ${CI_HELP}`);
     return 64;
   }
-  const cwd = args.cwd ? path9.resolve(args.cwd) : process.cwd();
+  const cwd = args.cwd ? path10.resolve(args.cwd) : process.cwd();
   const dispatch = autoFallback ?? {
     mode: "run",
     target: args.issueNumber,
@@ -2496,7 +2740,7 @@ ${CI_HELP}`);
 `);
     resolveAuthToken();
     reactToTriggerComment(cwd);
-    const pm = args.packageManager ?? detectPackageManager(cwd);
+    const pm = args.packageManager ?? detectPackageManager2(cwd);
     process.stdout.write(`\u2192 kody2: package manager = ${pm}
 `);
     if (!args.skipInstall) {
@@ -2557,31 +2801,31 @@ ${CI_HELP}`);
 }
 
 // src/registry.ts
-import * as fs13 from "fs";
-import * as path10 from "path";
+import * as fs14 from "fs";
+import * as path11 from "path";
 function getExecutablesRoot() {
-  const here = path10.dirname(new URL(import.meta.url).pathname);
+  const here = path11.dirname(new URL(import.meta.url).pathname);
   const candidates = [
-    path10.join(here, "executables"),
+    path11.join(here, "executables"),
     // dev: src/
-    path10.join(here, "..", "executables"),
+    path11.join(here, "..", "executables"),
     // built: dist/bin → dist/executables
-    path10.join(here, "..", "src", "executables")
+    path11.join(here, "..", "src", "executables")
     // fallback
   ];
   for (const c of candidates) {
-    if (fs13.existsSync(c) && fs13.statSync(c).isDirectory()) return c;
+    if (fs14.existsSync(c) && fs14.statSync(c).isDirectory()) return c;
   }
   return candidates[0];
 }
 function listExecutables(root = getExecutablesRoot()) {
-  if (!fs13.existsSync(root)) return [];
-  const entries = fs13.readdirSync(root, { withFileTypes: true });
+  if (!fs14.existsSync(root)) return [];
+  const entries = fs14.readdirSync(root, { withFileTypes: true });
   const out = [];
   for (const ent of entries) {
     if (!ent.isDirectory()) continue;
-    const profilePath = path10.join(root, ent.name, "profile.json");
-    if (fs13.existsSync(profilePath) && fs13.statSync(profilePath).isFile()) {
+    const profilePath = path11.join(root, ent.name, "profile.json");
+    if (fs14.existsSync(profilePath) && fs14.statSync(profilePath).isFile()) {
       out.push({ name: ent.name, profilePath });
     }
   }
@@ -2589,8 +2833,8 @@ function listExecutables(root = getExecutablesRoot()) {
 }
 function hasExecutable(name, root = getExecutablesRoot()) {
   if (!isSafeName(name)) return false;
-  const profilePath = path10.join(root, name, "profile.json");
-  return fs13.existsSync(profilePath) && fs13.statSync(profilePath).isFile();
+  const profilePath = path11.join(root, name, "profile.json");
+  return fs14.existsSync(profilePath) && fs14.statSync(profilePath).isFile();
 }
 function isSafeName(name) {
   return /^[a-z][a-z0-9-]*$/.test(name) && !name.includes("..");
@@ -2728,16 +2972,27 @@ ${HELP_TEXT}`);
     }
   }
   const cwd = args.cwd ?? process.cwd();
+  const configlessCommands = /* @__PURE__ */ new Set(["init"]);
+  const needsConfig = !(args.command === "__executable__" && configlessCommands.has(args.executableName ?? ""));
   let config;
-  try {
-    config = loadConfig(cwd);
-  } catch (err) {
-    const msg = err instanceof Error ? err.message : String(err);
-    process.stderr.write(`[kody2] config error: ${msg}
+  if (needsConfig) {
+    try {
+      config = loadConfig(cwd);
+    } catch (err) {
+      const msg = err instanceof Error ? err.message : String(err);
+      process.stderr.write(`[kody2] config error: ${msg}
 `);
-    process.stdout.write(`PR_URL=FAILED: config error: ${msg}
+      process.stdout.write(`PR_URL=FAILED: config error: ${msg}
 `);
-    return 99;
+      return 99;
+    }
+  } else {
+    config = {
+      quality: { typecheck: "", lint: "", testUnit: "" },
+      git: { defaultBranch: "main" },
+      github: { owner: "", repo: "" },
+      agent: { model: "claude/claude-haiku-4-5-20251001" }
+    };
   }
   if (args.command === "__executable__") {
     try {

package/dist/executables/init/profile.json

@@ -0,0 +1,37 @@
+{
+  "name": "init",
+  "describe": "Scaffold a consumer repo with kody.config.json and the @kody2 workflow. No agent.",
+
+  "inputs": [
+    {
+      "name": "force",
+      "flag": "--force",
+      "type": "bool",
+      "required": false,
+      "describe": "Overwrite existing files instead of skipping them."
+    }
+  ],
+
+  "claudeCode": {
+    "model": "inherit",
+    "permissionMode": "acceptEdits",
+    "maxTurns": null,
+    "systemPromptAppend": null,
+    "tools": [],
+    "hooks": { "PreToolUse": [], "PostToolUse": [], "Stop": [] },
+    "skills": [],
+    "commands": [],
+    "subagents": [],
+    "plugins": [],
+    "mcpServers": []
+  },
+
+  "cliTools": [],
+
+  "scripts": {
+    "preflight": [
+      { "script": "initFlow" }
+    ],
+    "postflight": []
+  }
+}

package/dist/executables/review/profile.json

@@ -0,0 +1,41 @@
+{
+  "name": "review",
+  "describe": "Read-only structured review of an open PR. Posts one comment, never commits.",
+
+  "inputs": [
+    {
+      "name": "pr",
+      "flag": "--pr",
+      "type": "int",
+      "required": true,
+      "describe": "GitHub PR number to review."
+    }
+  ],
+
+  "claudeCode": {
+    "model": "inherit",
+    "permissionMode": "default",
+    "maxTurns": null,
+    "systemPromptAppend": null,
+    "tools": ["Read", "Grep", "Glob", "Bash"],
+    "hooks": { "PreToolUse": [], "PostToolUse": [], "Stop": [] },
+    "skills": [],
+    "commands": [],
+    "subagents": [],
+    "plugins": [],
+    "mcpServers": []
+  },
+
+  "cliTools": [],
+
+  "scripts": {
+    "preflight": [
+      { "script": "reviewFlow" },
+      { "script": "loadConventions" },
+      { "script": "composePrompt" }
+    ],
+    "postflight": [
+      { "script": "postReviewResult" }
+    ]
+  }
+}

package/dist/executables/review/prompt.md

@@ -0,0 +1,47 @@
+You are Kody, a senior code reviewer. Review PR #{{pr.number}} carefully and post ONE structured review comment. Do NOT edit any files. Do NOT run any `git` or `gh` commands. Use Read / Grep / Glob / Bash only to inspect the diff and surrounding code.
+
+# PR #{{pr.number}}: {{pr.title}}
+
+Base: {{pr.baseRefName}} ← Head: {{pr.headRefName}}
+
+{{pr.body}}
+
+{{conventionsBlock}}
+
+# Diff
+
+```diff
+{{prDiff}}
+```
+
+# Required output
+
+Your FINAL message must be a markdown-formatted review comment, **structured exactly as below** — no preamble, no DONE / COMMIT_MSG / PR_SUMMARY markers. The entire final message IS the review comment and will be posted verbatim:
+
+```
+## Verdict: PASS | CONCERNS | FAIL
+
+### Summary
+<2-3 sentences: what this PR does, is the approach sound>
+
+### Strengths
+- <bullet>
+- <bullet>
+
+### Concerns
+- <bullet, or "None" if none>
+
+### Suggestions
+- <bullet with file:line reference where possible>
+
+### Bottom line
+<one sentence>
+```
+
+# Rules
+
+- No file edits. No `git`/`gh` invocations. Read-only investigation.
+- Be specific: cite file paths and line numbers. No generic advice.
+- Verdict **FAIL** only for clear correctness / security / regression risks.
+- Verdict **CONCERNS** for style / clarity / test-coverage gaps that shouldn't block.
+- Verdict **PASS** when the PR meets spec with no blocking issues.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kody-ade/kody-engine",
-  "version": "0.2.3",
+  "version": "0.2.5",
   "description": "kody2 — autonomous development engine. Single-session Claude Code agent behind a generic executor + declarative executable profiles.",
   "license": "MIT",
   "type": "module",