@kody-ade/kody-engine 0.4.222 → 0.4.223

package/dist/bin/kody.js

@@ -15,7 +15,7 @@ var init_package = __esm({
   "package.json"() {
     package_default = {
       name: "@kody-ade/kody-engine",
-      version: "0.4.222",
+      version: "0.4.223",
       description: "kody \u2014 autonomous development engine. Single-session Claude Code agent behind a generic executor + declarative executable profiles.",
       license: "MIT",
       type: "module",
@@ -146,6 +146,12 @@ var init_claudeBinary = __esm({
 // src/config.ts
 import * as fs2 from "fs";
 import * as path2 from "path";
+function parseReasoningEffort(raw) {
+  if (!raw) return null;
+  const v = raw.trim().toLowerCase();
+  if (REASONING_EFFORTS.includes(v)) return v;
+  return null;
+}
 function parseProviderModel(s) {
   const slash = s.indexOf("/");
   if (slash <= 0 || slash === s.length - 1) {
@@ -198,7 +204,8 @@ function loadConfig(projectDir = process.cwd()) {
     },
     agent: {
       model: String(agent.model),
-      ...parsePerExecutable(agent.perExecutable)
+      ...parsePerExecutable(agent.perExecutable),
+      ...parseAgentReasoningEffort(agent.reasoningEffort)
     },
     issueContext: parseIssueContext(raw.issueContext),
     testRequirements: parseTestRequirements(raw.testRequirements),
@@ -275,6 +282,10 @@ function parsePerExecutable(raw) {
   }
   return Object.keys(out).length > 0 ? { perExecutable: out } : {};
 }
+function parseAgentReasoningEffort(raw) {
+  if (typeof raw !== "string") return {};
+  return { reasoningEffort: parseReasoningEffort(raw) ?? void 0 };
+}
 function parseClassifyConfig(raw) {
   if (!raw || typeof raw !== "object") return void 0;
   const r = raw;
@@ -327,10 +338,16 @@ function parseTestRequirements(raw) {
 function getAnthropicApiKeyOrDummy() {
   return process.env.ANTHROPIC_API_KEY || `sk-ant-api03-${"0".repeat(64)}`;
 }
-var LITELLM_DEFAULT_PORT, LITELLM_DEFAULT_URL, GITHUB_AUTHOR_ASSOCIATIONS, DEFAULT_ALLOWED_ASSOCIATIONS, BUILTIN_ALIASES;
+var REASONING_EFFORTS, REASONING_BUDGETS, LITELLM_DEFAULT_PORT, LITELLM_DEFAULT_URL, GITHUB_AUTHOR_ASSOCIATIONS, DEFAULT_ALLOWED_ASSOCIATIONS, BUILTIN_ALIASES;
 var init_config = __esm({
   "src/config.ts"() {
     "use strict";
+    REASONING_EFFORTS = ["off", "low", "medium", "high"];
+    REASONING_BUDGETS = {
+      low: 2048,
+      medium: 1e4,
+      high: 32e3
+    };
     LITELLM_DEFAULT_PORT = 4e3;
     LITELLM_DEFAULT_URL = `http://localhost:${LITELLM_DEFAULT_PORT}`;
     GITHUB_AUTHOR_ASSOCIATIONS = [
@@ -1664,15 +1681,19 @@ async function runAgent(opts) {
   let finalText = "";
   let getSubmitted;
   for (let attempt = 0; ; attempt++) {
+    let ndjsonWriteFailed = false;
+    let ndjsonWriteError;
     const fullLog = fs5.createWriteStream(ndjsonPath, { flags: "w" });
+    fullLog.on("error", (err) => {
+      ndjsonWriteFailed = true;
+      ndjsonWriteError = err instanceof Error ? err.message : String(err);
+    });
     const resultTexts = [];
     outcome = "failed";
     outcomeKind = "generic_failed";
     errorMessage = void 0;
     tokens = { input: 0, output: 0, cacheRead: 0, cacheCreate: 0 };
     messageCount = 0;
-    let ndjsonWriteFailed = false;
-    let ndjsonWriteError;
     let sawMutatingTool = false;
     let sawTerminalSuccess = false;
     let noWorkSuccess = false;
@@ -1747,7 +1768,13 @@ async function runAgent(opts) {
       if (typeof opts.maxTurns === "number" && opts.maxTurns > 0) {
         queryOptions.maxTurns = opts.maxTurns;
       }
-      if (typeof opts.maxThinkingTokens === "number" && opts.maxThinkingTokens > 0) {
+      if (opts.reasoningEffort !== void 0 && opts.reasoningEffort !== null) {
+        if (opts.reasoningEffort === "off") {
+        } else {
+          const budget = REASONING_BUDGETS[opts.reasoningEffort];
+          if (budget) queryOptions.maxThinkingTokens = budget;
+        }
+      } else if (typeof opts.maxThinkingTokens === "number" && opts.maxThinkingTokens > 0) {
         queryOptions.maxThinkingTokens = opts.maxThinkingTokens;
       }
       if (typeof opts.systemPromptAppend === "string" && opts.systemPromptAppend.length > 0) {
@@ -1808,12 +1835,14 @@ async function runAgent(opts) {
         if (next.done) break;
         const msg = next.value;
         messageCount++;
-        try {
-          fullLog.write(`${JSON.stringify(msg)}
+        if (!ndjsonWriteFailed) {
+          try {
+            fullLog.write(`${JSON.stringify(msg)}
 `);
-        } catch (e) {
-          ndjsonWriteFailed = true;
-          ndjsonWriteError = e instanceof Error ? e.message : String(e);
+          } catch (e) {
+            ndjsonWriteFailed = true;
+            ndjsonWriteError = e instanceof Error ? e.message : String(e);
+          }
         }
         const line = renderEvent(msg, { verbose: opts.verbose, quiet: opts.quiet });
         if (line) process.stdout.write(`${line}
@@ -2945,7 +2974,7 @@ function loadProfile(profilePath) {
   const preNames = new Set(profile.scripts.preflight.map((e) => e.script).filter(Boolean));
   const postNames = profile.scripts.postflight.map((e) => e.script).filter(Boolean);
   const needsState = postNames.includes("writeJobStateFile") || postNames.includes("parseJobStateFromAgentResult");
-  const STATE_LOADERS = ["loadDutyState", "loadJobFromFile", "runTickScript"];
+  const STATE_LOADERS = ["loadDutyState", "loadJobFromFile", "runTickScript", "runScheduledExecutableTick"];
   if (needsState && !STATE_LOADERS.some((s) => preNames.has(s))) {
     throw new ProfileError(
       profilePath,
@@ -5574,10 +5603,10 @@ var init_state2 = __esm({
     "use strict";
     VALID_STATES = /* @__PURE__ */ new Set(["active", "abandoned", "closed", "awaiting-merge", "done"]);
     GoalStateError = class extends Error {
-      constructor(path44, message) {
-        super(`Invalid goal state at ${path44}:
+      constructor(path45, message) {
+        super(`Invalid goal state at ${path45}:
   ${message}`);
-        this.path = path44;
+        this.path = path45;
         this.name = "GoalStateError";
       }
       path;
@@ -7891,9 +7920,9 @@ var init_dispatchDutyFileTicks = __esm({
     init_dutyFolders();
     init_issue();
     init_job();
-    init_scheduleEvery();
     init_jobState();
     init_planTaskJobs();
+    init_scheduleEvery();
     dispatchDutyFileTicks = async (ctx, _profile, args) => {
       ctx.skipAgent = true;
       const targetExecutable = String(args?.targetExecutable ?? "");
@@ -7986,7 +8015,7 @@ var init_dispatchDutyFileTicks = __esm({
             continue;
           }
           const slugTarget = config.tickScript ? scriptedExecutable : config.executable ?? targetExecutable;
-          const cliArgs = config.executable ? {} : { [slugArg]: slug };
+          const cliArgs = { [slugArg]: slug };
           process.stdout.write(`[jobs] \u2192 tick ${slug} (${slugTarget})
 `);
           try {
@@ -12352,11 +12381,46 @@ var init_runPreviewBuild = __esm({
   }
 });
 
-// src/scripts/runTickScript.ts
+// src/scripts/tickShellRunner.ts
 import { spawnSync as spawnSync2 } from "child_process";
-import * as fs36 from "fs";
-import * as path35 from "path";
-function buildChildEnv(parent, force) {
+function runTickShellAndParse(opts) {
+  const childEnv = buildTickChildEnv(process.env, opts.force);
+  const result = spawnSync2("bash", [opts.scriptPath], {
+    cwd: opts.ctx.cwd,
+    env: childEnv,
+    stdio: ["ignore", "pipe", "pipe"],
+    encoding: "utf-8",
+    timeout: 5 * 60 * 1e3,
+    maxBuffer: 16 * 1024 * 1024
+  });
+  if (result.stdout) process.stdout.write(result.stdout);
+  if (result.stderr) process.stderr.write(result.stderr);
+  if (result.error) {
+    opts.ctx.output.exitCode = 99;
+    opts.ctx.output.reason = `${opts.displayName}: spawn error: ${result.error.message}`;
+    return;
+  }
+  if (result.signal) {
+    opts.ctx.output.exitCode = 124;
+    opts.ctx.output.reason = `${opts.displayName}: ${opts.reasonSubject ? `${opts.reasonSubject} ` : ""}killed by ${result.signal} (likely 5min timeout)`;
+    return;
+  }
+  if (result.status !== 0) {
+    opts.ctx.output.exitCode = result.status ?? 99;
+    opts.ctx.output.reason = `${opts.displayName}: ${opts.reasonSubject ? `${opts.reasonSubject} ` : ""}exited ${result.status}`;
+    return;
+  }
+  const prevRev = opts.loaded.state.rev ?? 0;
+  const parsed = extractNextStateFromText(result.stdout ?? "", opts.fenceLabel, prevRev);
+  if (parsed.error) {
+    opts.ctx.data.nextStateParseError = parsed.error;
+    opts.ctx.output.exitCode = 1;
+    opts.ctx.output.reason = `${opts.displayName}: ${parsed.error}`;
+    return;
+  }
+  opts.ctx.data.nextJobState = parsed.envelope;
+}
+function buildTickChildEnv(parent, force) {
   const allow = /* @__PURE__ */ new Set([
     "PATH",
     "HOME",
@@ -12367,45 +12431,104 @@ function buildChildEnv(parent, force) {
     "LANG",
     "LC_ALL",
     "TERM",
-    // GitHub auth — `gh` reads these.
     "GH_TOKEN",
     "GH_PAT",
     "GITHUB_TOKEN",
-    // CI metadata commonly read by tick scripts (`gh repo view`,
-    // workflow run links, etc.). All public values from GitHub Actions.
-    "GITHUB_ACTIONS",
-    "GITHUB_ACTOR",
     "GITHUB_REPOSITORY",
-    "GITHUB_REPOSITORY_OWNER",
     "GITHUB_REF",
     "GITHUB_SHA",
     "GITHUB_RUN_ID",
-    "GITHUB_RUN_NUMBER",
+    "GITHUB_RUN_ATTEMPT",
     "GITHUB_WORKFLOW",
-    "GITHUB_JOB",
-    "GITHUB_SERVER_URL",
-    "GITHUB_API_URL",
-    "GITHUB_EVENT_NAME",
-    "RUNNER_OS",
-    "RUNNER_ARCH"
+    "GITHUB_ACTIONS",
+    "CI",
+    "KODY_DRY_RUN",
+    "KODY_NO_COMMIT"
   ]);
-  const out = {};
+  const env = {};
   for (const [key, value] of Object.entries(parent)) {
     if (value === void 0) continue;
-    if (allow.has(key) || key.startsWith("KODY_PUBLIC_")) {
-      out[key] = value;
-    }
+    if (allow.has(key) || key.startsWith("KODY_PUBLIC_")) env[key] = value;
   }
-  if (force) out.KODY_FORCE = "1";
-  return out;
+  if (force) env.KODY_FORCE = "1";
+  return env;
 }
+var init_tickShellRunner = __esm({
+  "src/scripts/tickShellRunner.ts"() {
+    "use strict";
+    init_parseJobStateFromAgentResult();
+  }
+});
+
+// src/scripts/runScheduledExecutableTick.ts
+import * as fs36 from "fs";
+import * as path35 from "path";
+var runScheduledExecutableTick;
+var init_runScheduledExecutableTick = __esm({
+  "src/scripts/runScheduledExecutableTick.ts"() {
+    "use strict";
+    init_dutyFolders();
+    init_jobState();
+    init_tickShellRunner();
+    runScheduledExecutableTick = async (ctx, profile, args) => {
+      ctx.skipAgent = true;
+      const jobsDir = String(args?.jobsDir ?? ".kody/duties");
+      const slugArg = String(args?.slugArg ?? "duty");
+      const fenceLabel = String(args?.fenceLabel ?? "kody-job-next-state");
+      const shell = String(args?.shell ?? "tick.sh");
+      const slug = String(ctx.args[slugArg] ?? "").trim();
+      if (!slug) {
+        ctx.output.exitCode = 99;
+        ctx.output.reason = `runScheduledExecutableTick: ctx.args.${slugArg} must be non-empty duty slug`;
+        return;
+      }
+      const duty = readDutyFolder(path35.join(ctx.cwd, jobsDir), slug);
+      if (!duty) {
+        ctx.output.exitCode = 99;
+        ctx.output.reason = `runScheduledExecutableTick: duty folder not found or incomplete: ${path35.join(jobsDir, slug)}`;
+        return;
+      }
+      const shellPath = path35.join(profile.dir, shell);
+      if (!fs36.existsSync(shellPath)) {
+        ctx.output.exitCode = 99;
+        ctx.output.reason = `runScheduledExecutableTick: shell not found: ${shell} (looked in ${profile.dir})`;
+        return;
+      }
+      const backend = resolveBackend({ config: ctx.config, cwd: ctx.cwd, jobsDir });
+      let loaded;
+      try {
+        loaded = await backend.load(slug);
+      } catch (err) {
+        ctx.output.exitCode = 99;
+        ctx.output.reason = `runScheduledExecutableTick: state load failed: ${err instanceof Error ? err.message : String(err)}`;
+        return;
+      }
+      ctx.data.jobSlug = slug;
+      ctx.data.dutySlug = slug;
+      ctx.data.executableSlug = profile.name;
+      ctx.data.jobState = loaded;
+      runTickShellAndParse({
+        ctx,
+        loaded,
+        scriptPath: shellPath,
+        displayName: `runScheduledExecutableTick: ${shell}`,
+        fenceLabel,
+        force: Boolean(ctx.args.force)
+      });
+    };
+  }
+});
+
+// src/scripts/runTickScript.ts
+import * as fs37 from "fs";
+import * as path36 from "path";
 var runTickScript;
 var init_runTickScript = __esm({
   "src/scripts/runTickScript.ts"() {
     "use strict";
     init_dutyFolders();
     init_jobState();
-    init_parseJobStateFromAgentResult();
+    init_tickShellRunner();
     runTickScript = async (ctx, _profile, args) => {
       ctx.skipAgent = true;
       const jobsDir = String(args?.jobsDir ?? ".kody/duties");
@@ -12417,10 +12540,10 @@ var init_runTickScript = __esm({
         ctx.output.reason = `runTickScript: ctx.args.${slugArg} must be a non-empty slug`;
         return;
       }
-      const duty = readDutyFolder(path35.join(ctx.cwd, jobsDir), slug);
+      const duty = readDutyFolder(path36.join(ctx.cwd, jobsDir), slug);
       if (!duty) {
         ctx.output.exitCode = 99;
-        ctx.output.reason = `runTickScript: duty folder not found or incomplete: ${path35.join(ctx.cwd, jobsDir, slug)}`;
+        ctx.output.reason = `runTickScript: duty folder not found or incomplete: ${path36.join(ctx.cwd, jobsDir, slug)}`;
         return;
       }
       const tickScript = duty.config.tickScript;
@@ -12429,8 +12552,8 @@ var init_runTickScript = __esm({
         ctx.output.reason = `runTickScript: duty ${slug} has no \`tickScript\` in profile.json \u2014 route via duty-tick instead`;
         return;
       }
-      const scriptPath = path35.isAbsolute(tickScript) ? tickScript : path35.join(ctx.cwd, tickScript);
-      if (!fs36.existsSync(scriptPath)) {
+      const scriptPath = path36.isAbsolute(tickScript) ? tickScript : path36.join(ctx.cwd, tickScript);
+      if (!fs37.existsSync(scriptPath)) {
         ctx.output.exitCode = 99;
         ctx.output.reason = `runTickScript: tickScript not found: ${scriptPath}`;
         return;
@@ -12446,46 +12569,15 @@ var init_runTickScript = __esm({
       }
       ctx.data.jobSlug = slug;
       ctx.data.jobState = loaded;
-      const childEnv = buildChildEnv(process.env, Boolean(ctx.args.force));
-      const result = spawnSync2("bash", [scriptPath], {
-        cwd: ctx.cwd,
-        env: childEnv,
-        stdio: ["ignore", "pipe", "pipe"],
-        encoding: "utf-8",
-        timeout: 5 * 60 * 1e3,
-        // Default maxBuffer is 1MB — a chatty `gh pr list --json …` over a
-        // busy repo (or an accidental `set -x`) can blow that and silently
-        // truncate stdout, which is the exact "silent state drop" failure
-        // mode this whole executable was written to prevent. 16MB is well
-        // above any realistic tick output.
-        maxBuffer: 16 * 1024 * 1024
+      runTickShellAndParse({
+        ctx,
+        loaded,
+        scriptPath,
+        displayName: "runTickScript",
+        reasonSubject: tickScript,
+        fenceLabel,
+        force: Boolean(ctx.args.force)
       });
-      if (result.stdout) process.stdout.write(result.stdout);
-      if (result.stderr) process.stderr.write(result.stderr);
-      if (result.error) {
-        ctx.output.exitCode = 99;
-        ctx.output.reason = `runTickScript: spawn error: ${result.error.message}`;
-        return;
-      }
-      if (result.signal) {
-        ctx.output.exitCode = 124;
-        ctx.output.reason = `runTickScript: ${tickScript} killed by ${result.signal} (likely 5min timeout)`;
-        return;
-      }
-      if (result.status !== 0) {
-        ctx.output.exitCode = result.status ?? 99;
-        ctx.output.reason = `runTickScript: ${tickScript} exited ${result.status}`;
-        return;
-      }
-      const prevRev = loaded.state.rev ?? 0;
-      const parsed = extractNextStateFromText(result.stdout ?? "", fenceLabel, prevRev);
-      if (parsed.error) {
-        ctx.data.nextStateParseError = parsed.error;
-        ctx.output.exitCode = 1;
-        ctx.output.reason = `runTickScript: ${parsed.error}`;
-        return;
-      }
-      ctx.data.nextJobState = parsed.envelope;
     };
   }
 });
@@ -13394,7 +13486,7 @@ var init_writeJobStateFile = __esm({
 });
 
 // src/scripts/writeRunSummary.ts
-import * as fs37 from "fs";
+import * as fs38 from "fs";
 var writeRunSummary;
 var init_writeRunSummary = __esm({
   "src/scripts/writeRunSummary.ts"() {
@@ -13420,7 +13512,7 @@ var init_writeRunSummary = __esm({
       if (reason) lines.push(`- **Reason:** ${reason}`);
       lines.push("");
       try {
-        fs37.appendFileSync(summaryPath, `${lines.join("\n")}
+        fs38.appendFileSync(summaryPath, `${lines.join("\n")}
 `);
       } catch {
       }
@@ -13507,6 +13599,7 @@ var init_scripts = __esm({
     init_reviewFlow();
     init_runFlow();
     init_runPreviewBuild();
+    init_runScheduledExecutableTick();
     init_runTickScript();
     init_saveGoalState();
     init_saveTaskState();
@@ -13565,6 +13658,7 @@ var init_scripts = __esm({
       dispatchDutyFileTicks,
       planTaskJobs,
       dispatchNextTaskJob,
+      runScheduledExecutableTick,
       runTickScript,
       runPreviewBuild,
       loadGoalState,
@@ -13627,8 +13721,8 @@ var init_scripts = __esm({
 });
 
 // src/staff.ts
-import * as fs38 from "fs";
-import * as path36 from "path";
+import * as fs39 from "fs";
+import * as path37 from "path";
 function stripFrontmatter(raw) {
   const match = /^---\n[\s\S]*?\n---\n?([\s\S]*)$/.exec(raw);
   return (match ? match[1] : raw).trim();
@@ -13636,9 +13730,9 @@ function stripFrontmatter(raw) {
 function loadStaffPersona(cwd, slug, staffDir = DEFAULT_STAFF_DIR) {
   const trimmed = slug.trim();
   if (!trimmed) throw new Error("loadStaffPersona: empty staff slug");
-  const staffPath = path36.join(cwd, staffDir, `${trimmed}.md`);
-  if (fs38.existsSync(staffPath)) {
-    const body = stripFrontmatter(fs38.readFileSync(staffPath, "utf-8"));
+  const staffPath = path37.join(cwd, staffDir, `${trimmed}.md`);
+  if (fs39.existsSync(staffPath)) {
+    const body = stripFrontmatter(fs39.readFileSync(staffPath, "utf-8"));
     if (body) return body;
     const builtinForEmpty = BUILTIN_PERSONAS[trimmed];
     if (builtinForEmpty) return builtinForEmpty;
@@ -13751,8 +13845,8 @@ var init_tools = __esm({
 
 // src/executor.ts
 import { spawn as spawn7 } from "child_process";
-import * as fs39 from "fs";
-import * as path37 from "path";
+import * as fs40 from "fs";
+import * as path38 from "path";
 function isMutatingPostflight(scriptName) {
   return MUTATING_POSTFLIGHTS.has(scriptName ?? "");
 }
@@ -13865,17 +13959,7 @@ async function runExecutable(profileName, input) {
       reason: `agent.model invalid: ${err instanceof Error ? err.message : String(err)}`
     });
   }
-  let litellm = null;
-  if (profileName !== "preview-build") {
-    try {
-      litellm = await startLitellmIfNeeded(model, input.cwd);
-    } catch (err) {
-      return finishAndEnd({
-        exitCode: 99,
-        reason: `litellm startup failed: ${err instanceof Error ? err.message : String(err)}`
-      });
-    }
-  }
+  let litellm;
   const ctx = {
     args,
     cwd: input.cwd,
@@ -13903,16 +13987,23 @@ async function runExecutable(profileName, input) {
       })
     };
   })() : null;
-  const ndjsonDir = path37.join(input.cwd, ".kody");
+  const ndjsonDir = path38.join(input.cwd, ".kody");
   const personaSlug = typeof profile.staff === "string" && profile.staff.length > 0 ? profile.staff : typeof ctx.data.jobPersona === "string" && ctx.data.jobPersona.length > 0 ? ctx.data.jobPersona : null;
   const staffPersona = personaSlug ? framePersona(personaSlug, loadStaffPersona(input.cwd, personaSlug)) : null;
   const jobWhyBlock = typeof ctx.data.jobWhy === "string" ? operatorRequestBlock(ctx.data.jobWhy) : null;
   const jobRefBlock = jobReferenceBlock(profileName, profile, ctx.data);
   const invokeAgent = async (prompt) => {
-    const externalPlugins = (profile.claudeCode.plugins ?? []).map((p) => path37.isAbsolute(p) ? p : path37.resolve(profile.dir, p)).filter((p) => p.length > 0);
+    const externalPlugins = (profile.claudeCode.plugins ?? []).map((p) => path38.isAbsolute(p) ? p : path38.resolve(profile.dir, p)).filter((p) => p.length > 0);
     const syntheticPath = ctx.data.syntheticPluginPath;
     const pluginPaths = [...externalPlugins, ...syntheticPath ? [syntheticPath] : []];
     const agents = loadSubagents(profile);
+    if (litellm === void 0) {
+      try {
+        litellm = await startLitellmIfNeeded(model, input.cwd);
+      } catch (err) {
+        throw new Error(`litellm startup failed: ${err instanceof Error ? err.message : String(err)}`);
+      }
+    }
     const lm = litellm;
     return runAgent({
       prompt,
@@ -14020,7 +14111,14 @@ async function runExecutable(profileName, input) {
         });
       }
       emitEvent(input.cwd, { executable: profileName, kind: "agent_start" });
-      agentResult = await invokeAgent(prompt);
+      try {
+        agentResult = await invokeAgent(prompt);
+      } catch (err) {
+        return finishAndEnd({
+          exitCode: 99,
+          reason: err instanceof Error ? err.message : String(err)
+        });
+      }
       emitEvent(input.cwd, {
         executable: profileName,
         kind: "agent_end",
@@ -14274,17 +14372,17 @@ function clearStampedLifecycleLabels(profile, ctx) {
 function resolveProfilePath(profileName) {
   const found = resolveExecutable(profileName);
   if (found) return found;
-  const here = path37.dirname(new URL(import.meta.url).pathname);
+  const here = path38.dirname(new URL(import.meta.url).pathname);
   const candidates = [
-    path37.join(here, "executables", profileName, "profile.json"),
+    path38.join(here, "executables", profileName, "profile.json"),
     // same-dir sibling (dev)
-    path37.join(here, "..", "executables", profileName, "profile.json"),
+    path38.join(here, "..", "executables", profileName, "profile.json"),
     // up one (prod: dist/bin → dist/executables)
-    path37.join(here, "..", "src", "executables", profileName, "profile.json")
+    path38.join(here, "..", "src", "executables", profileName, "profile.json")
     // fallback
   ];
   for (const c of candidates) {
-    if (fs39.existsSync(c)) return c;
+    if (fs40.existsSync(c)) return c;
   }
   return candidates[0];
 }
@@ -14382,8 +14480,8 @@ function resolveShellTimeoutMs(entry) {
 }
 async function runShellEntry(entry, ctx, profile) {
   const shellName = entry.shell;
-  const shellPath = path37.join(profile.dir, shellName);
-  if (!fs39.existsSync(shellPath)) {
+  const shellPath = path38.join(profile.dir, shellName);
+  if (!fs40.existsSync(shellPath)) {
     ctx.skipAgent = true;
     ctx.output.exitCode = 99;
     ctx.output.reason = `shell script not found: ${shellName} (looked in ${profile.dir})`;
@@ -14542,7 +14640,7 @@ __export(job_exports, {
   stableJobKey: () => stableJobKey,
   validateJob: () => validateJob
 });
-import * as path38 from "path";
+import * as path39 from "path";
 function newJobId(flavor) {
   localJobSeq += 1;
   const runId = process.env.GITHUB_RUN_ID;
@@ -14579,7 +14677,7 @@ function validateJob(input) {
 async function runJob(job, base) {
   const valid = validateJob(job);
   const action = valid.action ?? valid.duty;
-  const projectDutiesRoot = path38.join(base.cwd, ".kody", "duties");
+  const projectDutiesRoot = path39.join(base.cwd, ".kody", "duties");
   const resolvedDuty = action ? resolveDutyAction(action, projectDutiesRoot) : null;
   const dutyIdentity = valid.duty ?? resolvedDuty?.duty;
   const dutyContext = loadDutyContext(dutyIdentity, base.cwd);
@@ -14635,7 +14733,7 @@ async function runJob(job, base) {
 }
 function loadDutyContext(slug, cwd) {
   if (!slug) return null;
-  return readDutyFolder(path38.join(cwd, ".kody", "duties"), slug) ?? readDutyFolder(getProjectDutiesRoot(), slug) ?? readDutyFolder(getBuiltinDutiesRoot(), slug);
+  return readDutyFolder(path39.join(cwd, ".kody", "duties"), slug) ?? readDutyFolder(getProjectDutiesRoot(), slug) ?? readDutyFolder(getBuiltinDutiesRoot(), slug);
 }
 function mintInstantJob(dispatch2, opts) {
   return {
@@ -14787,9 +14885,9 @@ function translateOpenAISseToBrain(opts) {
 }
 
 // src/servers/brain-serve.ts
-import * as fs42 from "fs";
+import * as fs43 from "fs";
 import { createServer } from "http";
-import * as path41 from "path";
+import * as path42 from "path";
 
 // src/chat/loop.ts
 init_agent();
@@ -15158,6 +15256,7 @@ async function runChatTurn(opts) {
     verbose: opts.verbose,
     quiet: opts.quiet,
     systemPromptAppend: systemPrompt,
+    ...opts.reasoningEffort ? { reasoningEffort: opts.reasoningEffort } : {},
     // Let the agent clone + work on OTHER repos mid-conversation (a
     // repo-less Brain serves many). Enabled whenever we know where repos
     // live; grants read access to that root via additionalDirectories.
@@ -15330,8 +15429,8 @@ init_config();
 
 // src/kody-cli.ts
 import { execFileSync as execFileSync26 } from "child_process";
-import * as fs40 from "fs";
-import * as path39 from "path";
+import * as fs41 from "fs";
+import * as path40 from "path";
 
 // src/app-auth.ts
 import { createSign } from "crypto";
@@ -15926,9 +16025,9 @@ async function resolveAuthToken(env = process.env) {
   return void 0;
 }
 function detectPackageManager2(cwd) {
-  if (fs40.existsSync(path39.join(cwd, "pnpm-lock.yaml"))) return "pnpm";
-  if (fs40.existsSync(path39.join(cwd, "yarn.lock"))) return "yarn";
-  if (fs40.existsSync(path39.join(cwd, "bun.lockb"))) return "bun";
+  if (fs41.existsSync(path40.join(cwd, "pnpm-lock.yaml"))) return "pnpm";
+  if (fs41.existsSync(path40.join(cwd, "yarn.lock"))) return "yarn";
+  if (fs41.existsSync(path40.join(cwd, "bun.lockb"))) return "bun";
   return "npm";
 }
 function shellOut(cmd, args, cwd, stream = true) {
@@ -16015,11 +16114,11 @@ function configureGitIdentity(cwd) {
 }
 function postFailureTail(issueNumber, cwd, reason) {
   if (!issueNumber) return;
-  const logPath = path39.join(cwd, ".kody", "last-run.jsonl");
+  const logPath = path40.join(cwd, ".kody", "last-run.jsonl");
   let tail = "";
   try {
-    if (fs40.existsSync(logPath)) {
-      const content = fs40.readFileSync(logPath, "utf-8");
+    if (fs41.existsSync(logPath)) {
+      const content = fs41.readFileSync(logPath, "utf-8");
       tail = content.slice(-3e3);
     }
   } catch {
@@ -16044,7 +16143,7 @@ async function runCi(argv) {
     return 0;
   }
   const args = parseCiArgs(argv);
-  const cwd = args.cwd ? path39.resolve(args.cwd) : process.cwd();
+  const cwd = args.cwd ? path40.resolve(args.cwd) : process.cwd();
   let earlyConfig;
   let earlyConfigError;
   try {
@@ -16057,9 +16156,9 @@ async function runCi(argv) {
   const dispatchEventPath = process.env.GITHUB_EVENT_PATH;
   let manualWorkflowDispatch = false;
   let forceRunAction = null;
-  if (!args.issueNumber && !autoFallback && eventName === "workflow_dispatch" && dispatchEventPath && fs40.existsSync(dispatchEventPath)) {
+  if (!args.issueNumber && !autoFallback && eventName === "workflow_dispatch" && dispatchEventPath && fs41.existsSync(dispatchEventPath)) {
     try {
-      const evt = JSON.parse(fs40.readFileSync(dispatchEventPath, "utf-8"));
+      const evt = JSON.parse(fs41.readFileSync(dispatchEventPath, "utf-8"));
       const issueInput = parseInt(String(evt?.inputs?.issue_number ?? ""), 10);
       const sessionInput = String(evt?.inputs?.sessionId ?? "");
       const dutyInput = String(evt?.inputs?.duty ?? evt?.inputs?.executable ?? "").trim();
@@ -16359,16 +16458,16 @@ init_litellm();
 init_repoWorkspace();
 
 // src/scripts/brainTurnLog.ts
-import * as fs41 from "fs";
-import * as path40 from "path";
+import * as fs42 from "fs";
+import * as path41 from "path";
 var live = /* @__PURE__ */ new Map();
 function eventsPath(dir, chatId) {
-  return path40.join(dir, ".kody", "brain-events", `${chatId}.jsonl`);
+  return path41.join(dir, ".kody", "brain-events", `${chatId}.jsonl`);
 }
 function lastPersistedSeq(dir, chatId) {
   const p = eventsPath(dir, chatId);
-  if (!fs41.existsSync(p)) return 0;
-  const lines = fs41.readFileSync(p, "utf-8").split("\n").filter(Boolean);
+  if (!fs42.existsSync(p)) return 0;
+  const lines = fs42.readFileSync(p, "utf-8").split("\n").filter(Boolean);
   if (lines.length === 0) return 0;
   try {
     return JSON.parse(lines[lines.length - 1]).seq || 0;
@@ -16378,9 +16477,9 @@ function lastPersistedSeq(dir, chatId) {
 }
 function readSince(dir, chatId, since) {
   const p = eventsPath(dir, chatId);
-  if (!fs41.existsSync(p)) return [];
+  if (!fs42.existsSync(p)) return [];
   const out = [];
-  for (const line of fs41.readFileSync(p, "utf-8").split("\n")) {
+  for (const line of fs42.readFileSync(p, "utf-8").split("\n")) {
     if (!line) continue;
     try {
       const rec = JSON.parse(line);
@@ -16406,12 +16505,12 @@ function beginTurn(dir, chatId) {
   };
   live.set(chatId, state);
   const p = eventsPath(dir, chatId);
-  fs41.mkdirSync(path40.dirname(p), { recursive: true });
+  fs42.mkdirSync(path41.dirname(p), { recursive: true });
   return (event) => {
     state.seq += 1;
     const rec = { seq: state.seq, turn, ts: Date.now(), event };
     try {
-      fs41.appendFileSync(p, `${JSON.stringify(rec)}
+      fs42.appendFileSync(p, `${JSON.stringify(rec)}
 `);
     } catch (err) {
       process.stderr.write(
@@ -16450,7 +16549,7 @@ function endTurnIfUnterminated(dir, chatId, errMessage) {
     event: { type: "error", error: errMessage || "turn ended unexpectedly", chatId }
   };
   try {
-    fs41.appendFileSync(eventsPath(dir, chatId), `${JSON.stringify(rec)}
+    fs42.appendFileSync(eventsPath(dir, chatId), `${JSON.stringify(rec)}
 `);
   } catch {
   }
@@ -16681,7 +16780,7 @@ async function handleChatTurn(req, res, chatId, opts) {
   const repo = strField(body, "repo");
   const repoToken = strField(body, "repoToken");
   const sessionFile = sessionFilePath(opts.cwd, chatId);
-  fs42.mkdirSync(path41.dirname(sessionFile), { recursive: true });
+  fs43.mkdirSync(path42.dirname(sessionFile), { recursive: true });
   appendTurn(sessionFile, {
     role: "user",
     content: message,
@@ -16728,7 +16827,7 @@ async function handleChatTurn(req, res, chatId, opts) {
 function buildServer(opts) {
   const runTurn = opts.runTurn ?? runChatTurn;
   const cloneRepo = opts.cloneRepo ?? defaultCloneRepo;
-  const reposRoot = opts.reposRoot ?? path41.join(path41.dirname(path41.resolve(opts.cwd)), "repos");
+  const reposRoot = opts.reposRoot ?? path42.join(path42.dirname(path42.resolve(opts.cwd)), "repos");
   return createServer(async (req, res) => {
     if (!req.method || !req.url) {
       sendJson(res, 400, { error: "bad request" });
@@ -17321,14 +17420,14 @@ async function loadConfigSafe() {
 
 // src/chat-cli.ts
 import { execFileSync as execFileSync29 } from "child_process";
-import * as fs44 from "fs";
-import * as path43 from "path";
+import * as fs45 from "fs";
+import * as path44 from "path";
 
 // src/chat/modes/interactive.ts
 init_issue();
 import { execFileSync as execFileSync28 } from "child_process";
-import * as fs43 from "fs";
-import * as path42 from "path";
+import * as fs44 from "fs";
+import * as path43 from "path";
 
 // src/chat/inbox.ts
 import { execFileSync as execFileSync27 } from "child_process";
@@ -17461,7 +17560,8 @@ async function runInteractiveMode(opts) {
         sink: opts.sink,
         verbose: opts.verbose,
         quiet: opts.quiet,
-        invokeAgent: opts.invokeAgent
+        invokeAgent: opts.invokeAgent,
+        ...opts.reasoningEffort ? { reasoningEffort: opts.reasoningEffort } : {}
       });
     } catch (err) {
       const msg = err instanceof Error ? err.message : String(err);
@@ -17487,9 +17587,9 @@ function findNextUserTurn(turns, fromIdx) {
   return -1;
 }
 function commitTurn(cwd, sessionId, _verbose) {
-  const sessionRel = path42.relative(cwd, sessionFilePath(cwd, sessionId));
-  const eventsRel = path42.relative(cwd, eventsFilePath(cwd, sessionId));
-  const rels = [sessionRel, eventsRel].filter((p) => fs43.existsSync(path42.join(cwd, p)));
+  const sessionRel = path43.relative(cwd, sessionFilePath(cwd, sessionId));
+  const eventsRel = path43.relative(cwd, eventsFilePath(cwd, sessionId));
+  const rels = [sessionRel, eventsRel].filter((p) => fs44.existsSync(path43.join(cwd, p)));
   if (rels.length === 0) return;
   const repository = process.env.GITHUB_REPOSITORY;
   if (!repository) {
@@ -17501,8 +17601,8 @@ function commitTurn(cwd, sessionId, _verbose) {
   }
   const branch = defaultBranch(cwd) ?? "main";
   for (const rel of rels) {
-    const repoPath = rel.split(path42.sep).join("/");
-    const localText = fs43.readFileSync(path42.join(cwd, rel), "utf-8");
+    const repoPath = rel.split(path43.sep).join("/");
+    const localText = fs44.readFileSync(path43.join(cwd, rel), "utf-8");
     putJsonlViaContents(repository, branch, repoPath, localText, sessionId, cwd);
   }
 }
@@ -17600,11 +17700,17 @@ var CHAT_HELP = `kody chat \u2014 dashboard-driven chat session
 
 Usage:
   kody chat [--session <id>] [--message <text>] [--model <provider/model>]
+             [--reasoning-effort <off|low|medium|high>]
              [--dashboard-url <url>] [--cwd <path>] [--verbose|--quiet]
 
-All inputs may also come from env: SESSION_ID, INIT_MESSAGE, MODEL, DASHBOARD_URL.
+All inputs may also come from env: SESSION_ID, INIT_MESSAGE, MODEL, REASONING_EFFORT, DASHBOARD_URL.
 CLI flags take precedence over env. SESSION_ID is required.
 
+Thinking level maps to the Claude Agent SDK's maxThinkingTokens (Anthropic
+extended thinking). Default is unset (no thinking \u2014 cheapest). Set via the
+dashboard's chat-level thinking dropdown, the REASONING_EFFORT env var,
+or this flag.
+
 Exit codes:
   0   reply emitted successfully
   64  bad inputs (missing session, empty history)
@@ -17617,6 +17723,7 @@ function parseChatArgs(argv, env = process.env) {
     if (arg === "--session") result.sessionId = argv[++i];
     else if (arg === "--message") result.initMessage = argv[++i];
     else if (arg === "--model") result.model = argv[++i];
+    else if (arg === "--reasoning-effort") result.reasoningEffort = parseReasoningEffort(argv[++i]) ?? void 0;
     else if (arg === "--dashboard-url") result.dashboardUrl = argv[++i];
     else if (arg === "--cwd") result.cwd = argv[++i];
     else if (arg === "--verbose") result.verbose = true;
@@ -17629,22 +17736,23 @@ function parseChatArgs(argv, env = process.env) {
   result.initMessage = result.initMessage ?? env.INIT_MESSAGE ?? void 0;
   result.model = result.model ?? env.MODEL ?? void 0;
   result.dashboardUrl = result.dashboardUrl ?? env.DASHBOARD_URL ?? void 0;
+  result.reasoningEffort = result.reasoningEffort ?? parseReasoningEffort(env.REASONING_EFFORT) ?? void 0;
   for (const key of ["sessionId", "initMessage", "model", "dashboardUrl"]) {
     const v = result[key];
     if (typeof v === "string" && v.trim() === "") result[key] = void 0;
   }
   if (!result.sessionId && !result.errors.includes("__HELP__")) {
-    result.errors.push("--session <id> (or SESSION_ID env) is required");
+    result.errors.push("--session <id> (or SESSION_ID env) is required)");
   }
   return result;
 }
 function commitChatFiles(cwd, sessionId, verbose) {
-  const sessionFile = path43.relative(cwd, sessionFilePath(cwd, sessionId));
-  const eventsFile = path43.relative(cwd, eventsFilePath(cwd, sessionId));
+  const sessionFile = path44.relative(cwd, sessionFilePath(cwd, sessionId));
+  const eventsFile = path44.relative(cwd, eventsFilePath(cwd, sessionId));
   const safeSession = sessionId.replace(/[^a-zA-Z0-9._-]/g, "_");
-  const tasksDir = path43.join(".kody", "tasks", safeSession);
+  const tasksDir = path44.join(".kody", "tasks", safeSession);
   const candidatePaths = [sessionFile, eventsFile, tasksDir];
-  const paths = candidatePaths.filter((p) => fs44.existsSync(path43.join(cwd, p)));
+  const paths = candidatePaths.filter((p) => fs45.existsSync(path44.join(cwd, p)));
   if (paths.length === 0) return;
   const opts = { cwd, stdio: verbose ? "inherit" : "pipe" };
   try {
@@ -17688,7 +17796,7 @@ async function runChat(argv) {
 ${CHAT_HELP}`);
     return 64;
   }
-  const cwd = args.cwd ? path43.resolve(args.cwd) : process.cwd();
+  const cwd = args.cwd ? path44.resolve(args.cwd) : process.cwd();
   const sessionId = args.sessionId;
   const unpackedSecrets = unpackAllSecrets();
   if (unpackedSecrets > 0) {
@@ -17699,6 +17807,7 @@ ${CHAT_HELP}`);
   configureGitIdentity(cwd);
   const config = tryLoadConfig(cwd);
   const modelSpec = args.model ?? config?.agent.model ?? DEFAULT_MODEL2;
+  const reasoningEffort = args.reasoningEffort ?? config?.agent.reasoningEffort ?? void 0;
   let model;
   try {
     model = parseProviderModel(modelSpec);
@@ -17740,7 +17849,7 @@ ${CHAT_HELP}`);
   const sink = buildSink(cwd, sessionId, args.dashboardUrl);
   const meta = readMeta(sessionFile);
   process.stdout.write(
-    `\u2192 kody:chat: session file=${sessionFile} exists=${fs44.existsSync(sessionFile)} meta=${meta ? meta.mode : "none"}
+    `\u2192 kody:chat: session file=${sessionFile} exists=${fs45.existsSync(sessionFile)} meta=${meta ? meta.mode : "none"}
 `
   );
   try {
@@ -17753,7 +17862,8 @@ ${CHAT_HELP}`);
         sink,
         meta,
         verbose: args.verbose,
-        quiet: args.quiet
+        quiet: args.quiet,
+        ...reasoningEffort ? { reasoningEffort } : {}
       });
       return result2.exitCode;
     }
@@ -17765,7 +17875,8 @@ ${CHAT_HELP}`);
       litellmUrl: litellm?.url ?? null,
       sink,
       verbose: args.verbose,
-      quiet: args.quiet
+      quiet: args.quiet,
+      ...reasoningEffort ? { reasoningEffort } : {}
     });
     commitChatFiles(cwd, sessionId, args.verbose ?? false);
     return result.exitCode;
@@ -17896,8 +18007,8 @@ var FlyClient = class {
   get fetch() {
     return this.opts.fetchImpl ?? fetch;
   }
-  async call(path44, init = {}) {
-    const res = await this.fetch(`${FLY_API_BASE}${path44}`, {
+  async call(path45, init = {}) {
+    const res = await this.fetch(`${FLY_API_BASE}${path45}`, {
       method: init.method ?? "GET",
       headers: {
         Authorization: `Bearer ${this.opts.token}`,
@@ -17908,7 +18019,7 @@ var FlyClient = class {
     if (res.status === 404 && init.allow404) return null;
     if (!res.ok) {
       const text = await res.text().catch(() => "");
-      throw new Error(`Fly API ${res.status} on ${path44}: ${text.slice(0, 200) || res.statusText}`);
+      throw new Error(`Fly API ${res.status} on ${path45}: ${text.slice(0, 200) || res.statusText}`);
     }
     if (res.status === 204) return null;
     const raw = await res.text();
@@ -18134,7 +18245,9 @@ var PoolManager = class {
     const destroyedSurplus = await this.destroySurplus(surplus);
     const destroyed = destroyedTracked + destroyedSurplus;
     if (pruned > 0 || adopted > 0 || destroyed > 0) {
-      this.log(`resync: pruned ${pruned} stale, adopted ${adopted}, destroyed ${destroyed} surplus (free=${this.free.length})`);
+      this.log(
+        `resync: pruned ${pruned} stale, adopted ${adopted}, destroyed ${destroyed} surplus (free=${this.free.length})`
+      );
     }
     await this.refill();
   }
@@ -18631,7 +18744,7 @@ async function poolServe() {
 
 // src/servers/runner-serve.ts
 import { spawn as spawn8 } from "child_process";
-import * as fs45 from "fs";
+import * as fs46 from "fs";
 import { createServer as createServer5 } from "http";
 var DEFAULT_PORT2 = 8080;
 var DEFAULT_WORKDIR = "/workspace/repo";
@@ -18711,8 +18824,8 @@ async function defaultRunJob(job) {
   const workdir = process.env.RUNNER_WORKDIR ?? DEFAULT_WORKDIR;
   const branch = job.ref ?? "main";
   const authUrl = `https://x-access-token:${job.githubToken}@github.com/${job.repo}.git`;
-  fs45.rmSync(workdir, { recursive: true, force: true });
-  fs45.mkdirSync(workdir, { recursive: true });
+  fs46.rmSync(workdir, { recursive: true, force: true });
+  fs46.mkdirSync(workdir, { recursive: true });
   const allSecrets = typeof job.allSecrets === "string" ? job.allSecrets : JSON.stringify(job.allSecrets ?? {});
   const interactive = job.mode === "interactive";
   const scheduled = job.mode === "scheduled";

package/dist/executables/preview-health/profile.json

@@ -0,0 +1,48 @@
+{
+  "name": "preview-health",
+  "role": "watch",
+  "kind": "oneshot",
+  "describe": "Scan open PRs and dispatch mechanical preview repairs.",
+  "inputs": [],
+  "claudeCode": {
+    "model": "inherit",
+    "permissionMode": "default",
+    "maxTurns": 0,
+    "maxThinkingTokens": null,
+    "systemPromptAppend": null,
+    "tools": [],
+    "hooks": [],
+    "skills": [],
+    "commands": [],
+    "subagents": [],
+    "plugins": [],
+    "mcpServers": []
+  },
+  "cliTools": [
+    {
+      "name": "gh",
+      "install": {
+        "required": true,
+        "checkCommand": "command -v gh"
+      },
+      "verify": "gh auth status",
+      "usage": "Reads open PRs, reads the CTO trust ledger, dispatches Kody workflows, and posts PR audit/recommendation comments.",
+      "allowedUses": ["pr", "api", "issue", "workflow"]
+    }
+  ],
+  "inputArtifacts": [],
+  "outputArtifacts": [],
+  "scripts": {
+    "preflight": [
+      {
+        "shell": "tick.sh",
+        "with": {
+          "jobsDir": ".kody/duties",
+          "duty": "preview-health"
+        },
+        "timeoutSec": 300
+      }
+    ],
+    "postflight": []
+  }
+}

package/dist/executables/preview-health/tick.sh

@@ -0,0 +1,319 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+jobs_dir="${1:-.kody/duties}"
+duty="${2:-preview-health}"
+
+export KODY_PREVIEW_HEALTH_JOBS_DIR="$jobs_dir"
+export KODY_PREVIEW_HEALTH_DUTY="$duty"
+
+python3 <<'PY'
+import base64
+import json
+import os
+import re
+import subprocess
+import sys
+from datetime import datetime, timezone
+
+DECISIONS_LABEL = "kody:cto-decisions"
+LEDGER_START = "<!-- kody-cto-decisions:start -->"
+LEDGER_END = "<!-- kody-cto-decisions:end -->"
+VERBS = ("fix-ci", "sync", "resolve")
+AUTO_VERBS = {"resolve"}
+MAX_ACTIONS_PER_TICK = 5
+FAIL_CONCLUSIONS = {"FAILURE", "TIMED_OUT", "ACTION_REQUIRED", "STARTUP_FAILURE"}
+RUNNING_STATUSES = {"IN_PROGRESS", "QUEUED"}
+STALE_THRESHOLD = 10
+STATE_BRANCH = "kody-state"
+
+
+def log(message):
+    print(f"[preview-health] {message}", file=sys.stderr)
+
+
+def now_iso():
+    return datetime.now(timezone.utc).replace(microsecond=0).isoformat().replace("+00:00", "Z")
+
+
+def run_gh(args, input_text=None, check=True):
+    result = subprocess.run(
+        ["gh", *args],
+        input=input_text,
+        text=True,
+        stdout=subprocess.PIPE,
+        stderr=subprocess.PIPE,
+        cwd=os.getcwd(),
+    )
+    if check and result.returncode != 0:
+        raise RuntimeError(result.stderr.strip() or result.stdout.strip() or f"gh {' '.join(args)} failed")
+    return result.stdout
+
+
+def repo_slug():
+    owner = os.environ.get("KODY_CFG_GITHUB_OWNER", "").strip()
+    repo = os.environ.get("KODY_CFG_GITHUB_REPO", "").strip()
+    if owner and repo:
+        return f"{owner}/{repo}"
+    return run_gh(["repo", "view", "--json", "nameWithOwner", "--jq", ".nameWithOwner"]).strip()
+
+
+def default_branch(slug):
+    configured = os.environ.get("KODY_CFG_GIT_DEFAULTBRANCH", "").strip()
+    if configured:
+        return configured
+    return run_gh(["repo", "view", slug, "--json", "defaultBranchRef", "--jq", ".defaultBranchRef.name"]).strip()
+
+
+def ensure_state_branch(slug):
+    if run_gh(["api", f"/repos/{slug}/git/ref/heads/{STATE_BRANCH}"], check=False).strip():
+        return
+    branch = default_branch(slug)
+    sha = run_gh(["api", f"/repos/{slug}/git/ref/heads/{branch}", "--jq", ".object.sha"]).strip()
+    payload = json.dumps({"ref": f"refs/heads/{STATE_BRANCH}", "sha": sha})
+    run_gh(["api", "--method", "POST", f"/repos/{slug}/git/refs", "--input", "-"], input_text=payload)
+
+
+def initial_state():
+    return {"version": 1, "rev": 0, "cursor": "seed", "data": {}, "done": False}
+
+
+def load_state(slug, path):
+    result = run_gh(
+        ["api", f"/repos/{slug}/contents/{path}?ref={STATE_BRANCH}"],
+        check=False,
+    )
+    if not result.strip():
+        return {"path": path, "sha": None, "state": initial_state(), "created": True}
+    obj = json.loads(result)
+    raw = base64.b64decode(obj["content"]).decode("utf-8")
+    return {"path": path, "sha": obj.get("sha"), "state": json.loads(raw), "created": False}
+
+
+def state_unchanged(prev, next_state):
+    return (
+        prev.get("cursor") == next_state.get("cursor")
+        and prev.get("done") == next_state.get("done")
+        and prev.get("data") == next_state.get("data")
+    )
+
+
+def save_state(slug, loaded, next_state):
+    if not loaded["created"] and state_unchanged(loaded["state"], next_state):
+        return False
+    ensure_state_branch(slug)
+    body = json.dumps(next_state, indent=2) + "\n"
+    payload = {
+        "message": f"chore(jobs): update state for {os.environ['KODY_PREVIEW_HEALTH_DUTY']} (rev {next_state['rev']})",
+        "content": base64.b64encode(body.encode("utf-8")).decode("ascii"),
+        "branch": STATE_BRANCH,
+    }
+    if loaded.get("sha"):
+        payload["sha"] = loaded["sha"]
+    result = run_gh(
+        ["api", "--method", "PUT", f"/repos/{slug}/contents/{loaded['path']}", "--input", "-"],
+        input_text=json.dumps(payload),
+        check=False,
+    )
+    if result.strip():
+        return True
+    reloaded = load_state(slug, loaded["path"])
+    if not reloaded["created"] and state_unchanged(reloaded["state"], next_state):
+        return False
+    if reloaded.get("sha"):
+        payload["sha"] = reloaded["sha"]
+    else:
+        payload.pop("sha", None)
+    run_gh(["api", "--method", "PUT", f"/repos/{slug}/contents/{loaded['path']}", "--input", "-"], input_text=json.dumps(payload))
+    return True
+
+
+def read_ledger_modes():
+    modes = {verb: "ask" for verb in VERBS}
+    try:
+        raw = run_gh(["issue", "list", "--label", DECISIONS_LABEL, "--state", "open", "--limit", "20", "--json", "number,body"])
+        issues = json.loads(raw or "[]")
+        if not issues:
+            return modes
+        body = sorted(issues, key=lambda x: x.get("number", 10**9))[0].get("body", "")
+        if LEDGER_START not in body or LEDGER_END not in body:
+            return modes
+        inner = body.split(LEDGER_START, 1)[1].split(LEDGER_END, 1)[0]
+        match = re.search(r"```(?:json)?\s*(\{[\s\S]*?\})\s*```", inner)
+        if not match:
+            return modes
+        ledger = json.loads(match.group(1))
+        cto = ledger.get("staff", {}).get("cto", {})
+        for verb in VERBS:
+            if cto.get(verb, {}).get("mode") == "auto":
+                modes[verb] = "auto"
+    except Exception as err:
+        log(f"ledger read failed; treating all verbs as ask: {err}")
+    return modes
+
+
+def ci_failing(rollup):
+    if not isinstance(rollup, list):
+        return False
+    has_fail = any(str(check.get("conclusion", "")) in FAIL_CONCLUSIONS for check in rollup if isinstance(check, dict))
+    running = any(str(check.get("status", "")) in RUNNING_STATUSES for check in rollup if isinstance(check, dict))
+    return has_fail and not running
+
+
+def behind_by(slug, base, head):
+    try:
+        raw = run_gh(["api", f"repos/{slug}/compare/{base}...{head}", "--jq", ".behind_by"])
+        return int(raw.strip() or "0")
+    except Exception as err:
+        log(f"compare {base}...{head} failed: {err}")
+        return 0
+
+
+def detect_repair(slug, pr):
+    mergeable = str(pr.get("mergeable") or "").upper()
+    if mergeable == "UNKNOWN":
+        return ("defer", f"PR #{pr['number']} mergeability still UNKNOWN; retry next tick.")
+    if mergeable == "CONFLICTING":
+        return ("resolve", f"PR #{pr['number']} has merge conflicts with `{pr['baseRefName']}`.")
+    if ci_failing(pr.get("statusCheckRollup")):
+        return ("fix-ci", f"PR #{pr['number']} has failing CI checks.")
+    drift = behind_by(slug, pr["baseRefName"], pr["headRefName"])
+    if drift >= STALE_THRESHOLD:
+        return ("sync", f"PR #{pr['number']}'s branch is {drift} commits behind `{pr['baseRefName']}`.")
+    return None
+
+
+def duty_operator(jobs_dir, duty):
+    try:
+        with open(os.path.join(os.getcwd(), jobs_dir, duty, "profile.json"), "r", encoding="utf-8") as f:
+            profile = json.load(f)
+        mentions = profile.get("mentions", [])
+        return mentions[0] if isinstance(mentions, list) and mentions else ""
+    except Exception:
+        return ""
+
+
+def post_comment(pr_number, body):
+    if os.environ.get("KODY_DRY_RUN") == "1":
+        log(f"[dry-run] would comment on #{pr_number}: {body.splitlines()[0]}")
+        return True
+    try:
+        run_gh(["pr", "comment", str(pr_number), "--body", body])
+        return True
+    except Exception as err:
+        log(f"comment failed on #{pr_number}: {err}")
+        return False
+
+
+def recommend(pr_number, verb, reason, operator):
+    mention = f"@{operator} " if operator else ""
+    body = (
+        f"{mention}**CTO recommendation** - `{verb}`\n\n"
+        f"{reason} Recommended action: `{verb}` for PR #{pr_number}.\n\n"
+        "_Confirm in dashboard inbox or run the action manually. CTO will not act on its own._"
+    )
+    return post_comment(pr_number, body)
+
+
+def auto_run(pr_number, verb, reason):
+    if os.environ.get("KODY_DRY_RUN") == "1":
+        log(f"[dry-run] would dispatch kody.yml executable={verb} issue_number={pr_number}")
+    else:
+        try:
+            run_gh(["workflow", "run", "kody.yml", "-f", f"executable={verb}", "-f", f"issue_number={pr_number}"])
+        except Exception as err:
+            log(f"workflow_dispatch failed #{pr_number} ({verb}): {err}")
+            return False
+    auto_reason = (
+        "Policy: preview-health auto-runs `resolve` for merge conflicts."
+        if verb in AUTO_VERBS
+        else f"Graduated: operator approved `{verb}` repeatedly. A **Reject** on any `{verb}` returns me asking."
+    )
+    return post_comment(pr_number, f"**CTO action** - `{verb}` dispatched\n\n{reason}\n\n{auto_reason}")
+
+
+def print_row(pr, verb, fp, action, note):
+    print(f"| #{pr} | {verb} | {fp} | {action} | {note} |")
+
+
+def main():
+    slug = repo_slug()
+    jobs_dir = os.environ["KODY_PREVIEW_HEALTH_JOBS_DIR"].rstrip("/")
+    duty = os.environ["KODY_PREVIEW_HEALTH_DUTY"]
+    state_path = f"{jobs_dir}/{duty}/state.json"
+    loaded = load_state(slug, state_path)
+    modes = read_ledger_modes()
+    operator = duty_operator(jobs_dir, duty)
+
+    prs = json.loads(
+        run_gh([
+            "pr",
+            "list",
+            "--state",
+            "open",
+            "--limit",
+            "100",
+            "--json",
+            "number,title,headRefName,headRefOid,baseRefName,isDraft,mergeable,statusCheckRollup,updatedAt",
+        ])
+        or "[]"
+    )
+
+    prior = loaded["state"].get("data", {}).get("prs", {})
+    open_numbers = {str(pr["number"]) for pr in prs}
+    next_prs = {key: value for key, value in prior.items() if key in open_numbers and isinstance(value, dict)}
+
+    print("| PR | verb | fingerprint | action | note |")
+    print("|----|------|-------------|--------|------|")
+
+    priority = {"resolve": 0, "fix-ci": 1, "sync": 2}
+    queue = []
+    for pr in prs:
+        if pr.get("isDraft"):
+            print_row(pr["number"], "-", "-", "skip", "draft")
+            continue
+        repair = detect_repair(slug, pr)
+        if not repair:
+            print_row(pr["number"], "-", "-", "skip", "healthy")
+            continue
+        verb, reason = repair
+        if verb == "defer":
+            print_row(pr["number"], "-", "-", "defer", "mergeable=UNKNOWN")
+            continue
+        queue.append((priority[verb], pr["number"], pr, verb, reason))
+
+    actions_taken = 0
+    for _, number, pr, verb, reason in sorted(queue):
+        key = str(number)
+        fp = f"{verb}|{pr.get('headRefOid', '')}"
+        graduated = verb in AUTO_VERBS or modes.get(verb) == "auto"
+        intended_stage = f"{verb}-auto" if graduated else f"{verb}-recommended"
+        prev = next_prs.get(key, {})
+        if prev.get("fp") == fp and prev.get("stage") == intended_stage:
+            print_row(number, verb, fp[:24], "skip", "dedup")
+            continue
+        if actions_taken >= MAX_ACTIONS_PER_TICK:
+            print_row(number, verb, fp[:24], "defer", "tick cap")
+            continue
+
+        ok = auto_run(number, verb, reason) if graduated else recommend(number, verb, reason, operator)
+        action = "auto-ran" if graduated and ok else "auto-failed" if graduated else "recommended" if ok else "recommend-failed"
+        if ok:
+            actions_taken += 1
+            next_prs[key] = {"fp": fp, "stage": intended_stage, "lastActAt": now_iso()}
+        print_row(number, verb, fp[:24], action, "auto" if graduated else "advisory")
+
+    next_state = {
+        "version": 1,
+        "rev": int(loaded["state"].get("rev", 0)) + 1,
+        "cursor": "idle",
+        "data": {"prs": next_prs, "lastFiredAt": now_iso()},
+        "done": False,
+    }
+    save_state(slug, loaded, next_state)
+    log(f"tick complete: {actions_taken} action(s), {len(next_prs)} tracked PR(s)")
+    print("KODY_SKIP_AGENT=true")
+
+
+main()
+PY

package/dist/executables/release/prepare.sh

@@ -261,8 +261,10 @@ open_prepare_pr() {
   fi
 
   # Bump version files.
-  local files
-  mapfile -t files < <(resolve_version_files)
+  local files=()
+  while IFS= read -r f; do
+    files+=("$f")
+  done < <(resolve_version_files)
   local touched=()
   for f in "${files[@]}"; do
     local res

package/kody.config.schema.json

@@ -63,6 +63,11 @@
           "pattern": "^[^/]+/.+$",
           "description": "Base provider/model string, for example minimax/MiniMax-M3 or claude/claude-sonnet-4-6."
         },
+        "reasoningEffort": {
+          "type": "string",
+          "enum": ["off", "low", "medium", "high"],
+          "description": "Default thinking effort for the Claude Agent SDK. Maps to maxThinkingTokens. 'off' (default) skips the thinking block entirely — no reasoning preamble, no extra tokens. 'low'/'medium'/'high' enable extended thinking with budgets 2_048/10_000/32_000. Overridable per-session via the REASONING_EFFORT env var or the dashboard's chat-level thinking dropdown."
+        },
         "perExecutable": {
           "type": "object",
           "description": "Optional provider/model override by executable name.",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kody-ade/kody-engine",
-  "version": "0.4.222",
+  "version": "0.4.223",
   "description": "kody — autonomous development engine. Single-session Claude Code agent behind a generic executor + declarative executable profiles.",
   "license": "MIT",
   "type": "module",