@kody-ade/kody-engine 0.4.250 → 0.4.251

package/dist/bin/kody.js

@@ -15,7 +15,7 @@ var init_package = __esm({
   "package.json"() {
     package_default = {
       name: "@kody-ade/kody-engine",
-      version: "0.4.250",
+      version: "0.4.251",
       description: "kody \u2014 autonomous development engine. Single-session Claude Code agent behind a generic executor + declarative agentAction profiles.",
       license: "MIT",
       type: "module",
@@ -165,15 +165,18 @@ function gh(args, options) {
   }).trim();
 }
 function getIssue(issueNumber, cwd) {
-  const output = gh(["issue", "view", String(issueNumber), "--json", "number,title,body,comments,labels"], { cwd });
+  const output = gh(["issue", "view", String(issueNumber), "--json", "number,title,body,comments,labels,url"], { cwd });
   const parsed = JSON.parse(output);
   if (typeof parsed?.title !== "string") {
     throw new Error(`Issue #${issueNumber}: unexpected response shape`);
   }
+  const url = typeof parsed.url === "string" ? parsed.url : void 0;
   return {
     number: parsed.number ?? issueNumber,
     title: parsed.title,
     body: parsed.body ?? "",
+    url,
+    isPullRequest: typeof url === "string" && /\/pull\/\d+$/.test(url),
     comments: (parsed.comments ?? []).map((c) => ({
       body: c.body ?? "",
       author: c.author?.login ?? "unknown",
@@ -1336,1482 +1339,1521 @@ var init_submitMcp = __esm({
   }
 });
 
-// src/agent-responsibilityMcp.ts
-var agent_responsibilityMcp_exports = {};
-__export(agent_responsibilityMcp_exports, {
-  AGENT_RESPONSIBILITY_MCP_TOOL_NAMES: () => AGENT_RESPONSIBILITY_MCP_TOOL_NAMES,
-  agentResponsibilityToolDefinitions: () => agentResponsibilityToolDefinitions,
-  buildAgentResponsibilityMcpServer: () => buildAgentResponsibilityMcpServer,
-  dispatchWorkflow: () => dispatchWorkflow,
-  ensureComment: () => ensureComment,
-  ensureIssue: () => ensureIssue,
-  isDispatchGated: () => isDispatchGated,
-  parseAgentResponsibilityTrustMode: () => parseAgentResponsibilityTrustMode,
-  readAgentResponsibilityTrustMode: () => readAgentResponsibilityTrustMode,
-  readCheckRuns: () => readCheckRuns,
-  readThread: () => readThread
-});
-import { createSdkMcpServer as createSdkMcpServer3, tool as tool3 } from "@anthropic-ai/claude-agent-sdk";
-import { z as z2 } from "zod";
-function summarizeCiStatus(rollup) {
-  if (!Array.isArray(rollup) || rollup.length === 0) return "UNKNOWN";
-  let hasRunning = false;
-  for (const check of rollup) {
-    const status = String(check.status ?? "").toUpperCase();
-    const conclusion = String(check.conclusion ?? "").toUpperCase();
-    if (FAIL_CONCLUSIONS.has(conclusion)) return "FAILING";
-    if (!conclusion && RUNNING_STATUSES.has(status)) hasRunning = true;
-  }
-  return hasRunning ? "RUNNING" : "PASSING";
-}
-function computeBehindBy(repoSlug, base, head) {
+// src/agent-responsibilityFolders.ts
+import * as fs4 from "fs";
+import * as path6 from "path";
+function listAgentResponsibilityFolderSlugs(absDir) {
+  if (!fs4.existsSync(absDir)) return [];
+  let entries;
   try {
-    const raw = gh(["api", `repos/${repoSlug}/compare/${base}...${head}`, "--jq", ".behind_by"]);
-    const n = Number(raw.trim());
-    return Number.isFinite(n) ? n : -1;
+    entries = fs4.readdirSync(absDir, { withFileTypes: true });
   } catch {
-    return -1;
+    return [];
   }
+  return entries.filter((e) => e.isDirectory() && !e.name.startsWith("_") && !e.name.startsWith(".")).filter((e) => isAgentResponsibilityFolder(path6.join(absDir, e.name))).map((e) => e.name).sort();
 }
-function listRepairCandidates(repoSlug) {
-  const raw = gh([
-    "pr",
-    "list",
-    "--state",
-    "open",
-    "--limit",
-    "100",
-    "--json",
-    "number,title,headRefName,headRefOid,baseRefName,isDraft,mergeable,statusCheckRollup,updatedAt"
-  ]);
-  const prs = JSON.parse(raw);
-  return prs.filter((p) => !p.isDraft).map((p) => {
-    const ciStatus = summarizeCiStatus(p.statusCheckRollup);
-    const mergeable = String(p.mergeable ?? "UNKNOWN").toUpperCase();
-    const behindBy = mergeable === "CONFLICTING" || ciStatus === "FAILING" ? 0 : computeBehindBy(repoSlug, p.baseRefName, p.headRefName);
+function isAgentResponsibilityFolder(dir) {
+  return fs4.existsSync(path6.join(dir, AGENT_RESPONSIBILITY_PROFILE_FILE)) && fs4.existsSync(path6.join(dir, AGENT_RESPONSIBILITY_BODY_FILE));
+}
+function readAgentResponsibilityFolder(root, slug2) {
+  const dir = path6.join(root, slug2);
+  const profilePath = path6.join(dir, AGENT_RESPONSIBILITY_PROFILE_FILE);
+  const bodyPath = path6.join(dir, AGENT_RESPONSIBILITY_BODY_FILE);
+  if (!fs4.existsSync(profilePath) || !fs4.statSync(profilePath).isFile()) return null;
+  if (!fs4.existsSync(bodyPath) || !fs4.statSync(bodyPath).isFile()) return null;
+  try {
+    const rawProfile = JSON.parse(fs4.readFileSync(profilePath, "utf-8"));
+    const rawBody = fs4.readFileSync(bodyPath, "utf-8");
+    const { title, body } = parseAgentResponsibilityBody(rawBody, slug2);
     return {
-      number: p.number,
-      title: p.title,
-      headSha: p.headRefOid,
-      baseRef: p.baseRefName,
-      isDraft: false,
-      mergeable,
-      ciStatus,
-      behindBy,
-      updatedAt: p.updatedAt
+      slug: slug2,
+      dir,
+      profilePath,
+      bodyPath,
+      title,
+      body,
+      rawBody,
+      config: parseAgentResponsibilityConfig(rawProfile),
+      rawProfile
     };
-  });
+  } catch {
+    return null;
+  }
 }
-function dispatchVerb(workflowFile, agentResponsibility, prNumber) {
-  return dispatchWorkflow(workflowFile, agentResponsibility, prNumber);
+function parseAgentResponsibilityConfig(raw) {
+  const tools = stringList(raw.tools ?? raw.agentResponsibilityTools);
+  return {
+    action: stringField(raw.action),
+    agentAction: stringField(raw.agentAction),
+    tickScript: stringField(raw.tickScript),
+    disabled: typeof raw.disabled === "boolean" ? raw.disabled : void 0,
+    agent: stringField(raw.agent),
+    mentions: stringList(raw.mentions).map((m) => m.replace(/^@/, "")),
+    tools,
+    agentActions: stringList(raw.agentActions),
+    capabilityKind: capabilityKindField(raw.capabilityKind),
+    describe: stringField(raw.describe),
+    stage: stringField(raw.stage),
+    readsFrom: stringList(raw.readsFrom ?? raw.reads_from),
+    writesTo: stringList(raw.writesTo ?? raw.writes_to)
+  };
 }
-function postRecommendation(prNumber, mention, message, agentResponsibilitySlug) {
-  const mentioned = mention ? `${mention} ${message}` : message;
-  const body = agentResponsibilitySlug ? `${mentioned}
-
-<!-- kody-agentResponsibility: ${agentResponsibilitySlug} -->` : mentioned;
-  try {
-    gh(["pr", "comment", String(prNumber), "--body", body]);
-    return { ok: true };
-  } catch (err) {
-    return { ok: false, error: err instanceof Error ? err.message : String(err) };
-  }
+function parseAgentResponsibilityBody(raw, slug2) {
+  const trimmed = raw.trim();
+  const firstLine2 = trimmed.split("\n", 1)[0] ?? "";
+  const h1 = /^#\s+(.+?)\s*$/.exec(firstLine2);
+  const title = h1 ? h1[1].trim() : humanizeSlug(slug2);
+  const body = stripLeadingH1(raw);
+  return { title, body };
 }
-function readLedger(label) {
-  const startTag = `<!-- ${label}:start -->`;
-  const endTag = `<!-- ${label}:end -->`;
-  try {
-    const raw = gh(["issue", "list", "--state", "open", "--label", label, "--limit", "5", "--json", "number,body"]);
-    const issues = JSON.parse(raw);
-    if (issues.length === 0) return { found: false, payload: null };
-    const issue = issues.sort((a, b) => a.number - b.number)[0];
-    const body = issue?.body ?? "";
-    const startIdx = body.indexOf(startTag);
-    const endIdx = body.indexOf(endTag);
-    if (startIdx === -1 || endIdx === -1 || endIdx <= startIdx) {
-      return { found: true, issueNumber: issue?.number, payload: null };
-    }
-    const between = body.slice(startIdx + startTag.length, endIdx);
-    const fenceMatch = between.match(/```json\s*([\s\S]*?)```/);
-    if (!fenceMatch) return { found: true, issueNumber: issue?.number, payload: null };
-    try {
-      return { found: true, issueNumber: issue?.number, payload: JSON.parse(fenceMatch[1]) };
-    } catch {
-      return { found: true, issueNumber: issue?.number, payload: null };
-    }
-  } catch (err) {
-    return { found: false, payload: { error: err instanceof Error ? err.message : String(err) } };
+function stripLeadingH1(raw) {
+  const lines = raw.replace(/^\uFEFF/, "").split("\n");
+  let i = 0;
+  for (; ; ) {
+    while (i < lines.length && lines[i].trim() === "") i++;
+    if (i < lines.length && /^#\s+.+/.test(lines[i])) i++;
+    else break;
   }
+  return lines.slice(i).join("\n");
 }
-function parseAgentResponsibilityTrustMode(rawJson, agentResponsibilitySlug) {
-  try {
-    const parsed = JSON.parse(rawJson);
-    return parsed?.agentResponsibilities?.[agentResponsibilitySlug]?.mode === "auto" ? "auto" : "ask";
-  } catch {
-    return "ask";
+function humanizeSlug(slug2) {
+  return slug2.split(/[-_]+/).filter(Boolean).map((part) => part[0].toUpperCase() + part.slice(1)).join(" ");
+}
+function stringField(value) {
+  return typeof value === "string" && value.trim().length > 0 ? value.trim() : void 0;
+}
+function stringList(value) {
+  if (Array.isArray(value)) {
+    return value.map((v) => String(v).trim()).filter(Boolean);
   }
+  if (typeof value === "string") {
+    return value.split(",").map((v) => v.trim()).filter(Boolean);
+  }
+  return [];
 }
-function defaultStateForRepoSlug(repoSlug) {
-  const [owner, repo] = repoSlug.split("/");
-  return { repo: `${owner}/kody-state`, path: repo ?? repoSlug };
+function capabilityKindField(value) {
+  if (value === "observe" || value === "act" || value === "verify") return value;
+  return void 0;
 }
-function readAgentResponsibilityTrustMode(stateOrRepoSlug, repoSlugOrAgentResponsibilitySlug, maybeAgentResponsibilitySlug) {
-  const state = typeof stateOrRepoSlug === "string" ? void 0 : stateOrRepoSlug;
-  const repoSlug = typeof stateOrRepoSlug === "string" ? stateOrRepoSlug : repoSlugOrAgentResponsibilitySlug ?? "";
-  const agentResponsibilitySlug = typeof stateOrRepoSlug === "string" ? repoSlugOrAgentResponsibilitySlug : maybeAgentResponsibilitySlug;
-  if (!agentResponsibilitySlug) return "ask";
-  try {
-    const loaded = readStateText({ state: state ?? defaultStateForRepoSlug(repoSlug) }, void 0, TRUST_FILE_PATH);
-    return loaded ? parseAgentResponsibilityTrustMode(loaded.content, agentResponsibilitySlug) : "ask";
-  } catch {
-    return "ask";
+var AGENT_RESPONSIBILITY_PROFILE_FILE, AGENT_RESPONSIBILITY_BODY_FILE;
+var init_agent_responsibilityFolders = __esm({
+  "src/agent-responsibilityFolders.ts"() {
+    "use strict";
+    AGENT_RESPONSIBILITY_PROFILE_FILE = "profile.json";
+    AGENT_RESPONSIBILITY_BODY_FILE = "agent-responsibility.md";
   }
+});
+
+// src/companyStore.ts
+import { execFileSync as execFileSync2 } from "child_process";
+import * as crypto3 from "crypto";
+import * as fs5 from "fs";
+import * as os3 from "os";
+import * as path7 from "path";
+function getCompanyStoreRoot() {
+  const store = resolveCompanyStore();
+  if (!store) return null;
+  const key = `${store.repo}#${store.ref}`;
+  if (memo?.key === key) return memo.root;
+  const root = fetchCompanyStore(store.repo, store.ref);
+  memo = { key, root };
+  return root;
 }
-function readThread(repoSlug, number, limit = 10) {
-  const meta = JSON.parse(gh(["api", `repos/${repoSlug}/issues/${number}`]));
-  const rawComments = JSON.parse(gh(["api", `repos/${repoSlug}/issues/${number}/comments?per_page=100`]));
-  const comments = rawComments.slice(-Math.max(1, limit)).map((c) => ({
-    author: c.user?.login ?? "?",
-    createdAt: c.created_at ?? "",
-    body: (c.body ?? "").slice(0, THREAD_BODY_MAX)
-  }));
-  return {
-    number,
-    title: meta.title ?? "",
-    state: meta.state ?? "",
-    labels: (meta.labels ?? []).map((l) => l.name ?? "").filter(Boolean),
-    comments
+function getCompanyStoreAssetRoot(kind) {
+  const root = getCompanyStoreRoot();
+  if (!root) return null;
+  const folderByKind = {
+    agentResponsibilities: "agent-responsibilities",
+    agentActions: "agent-actions",
+    goals: "goals",
+    agents: "agents"
   };
+  return path7.join(root, ".kody", folderByKind[kind]);
 }
-function readCheckRuns(repoSlug, ref, ignoreNames) {
-  const ghOptions = { preferRepoToken: true };
-  const sha = gh(["api", `repos/${repoSlug}/commits/${ref}`, "--jq", ".sha"], ghOptions).trim();
-  const raw = gh(
-    [
-      "api",
-      `repos/${repoSlug}/commits/${sha}/check-runs`,
-      "--paginate",
-      "--jq",
-      ".check_runs[] | {name, status, conclusion, details_url}"
-    ],
-    ghOptions
-  );
-  const ignore = new Set(ignoreNames.map((n) => n.toLowerCase()));
-  const checks = raw.split("\n").map((l) => l.trim()).filter(Boolean).map((l) => JSON.parse(l)).filter((c) => !ignore.has(String(c.name).toLowerCase()));
-  const failing = checks.filter((c) => CHECK_FAIL_CONCLUSIONS.has(String(c.conclusion ?? "").toUpperCase())).map((c) => ({ name: c.name, conclusion: String(c.conclusion), detailsUrl: c.details_url }));
-  const pending = checks.filter((c) => String(c.status).toLowerCase() !== "completed").map((c) => ({ name: c.name, status: c.status }));
-  const state = failing.length > 0 ? "RED" : pending.length > 0 ? "PENDING" : "GREEN";
-  return { sha, state, failing, pending };
+function resolveCompanyStore() {
+  const envStore = process.env[STORE_ENV]?.trim();
+  if (!envStore && process.env.VITEST) return null;
+  const repo = envStore || DEFAULT_COMPANY_STORE;
+  if (repo === "0" || repo === "false" || repo === "off") return null;
+  const ref = process.env[REF_ENV]?.trim() || DEFAULT_COMPANY_STORE_REF;
+  if (!ref) return null;
+  return { repo, ref };
 }
-function ensureIssue(repoSlug, key, title, body) {
-  const marker = trackMarker(key);
+function fetchCompanyStore(repo, ref) {
+  const localRoot = localStoreRoot(repo);
+  if (localRoot) return localRoot;
+  const url = repoToGitUrl(repo);
+  const cacheDir = path7.join(cacheRoot(), cacheKey(repo, ref));
   try {
-    const raw = gh(["issue", "list", "-R", repoSlug, "--state", "open", "--limit", "100", "--json", "number,body"]);
-    const issues = JSON.parse(raw);
-    const existing = issues.find((i) => (i.body ?? "").includes(marker));
-    if (existing) return { created: false, number: existing.number };
-    const url = gh(["issue", "create", "-R", repoSlug, "--title", title, "--body-file", "-"], {
-      input: `${body}
-
-${marker}`
-    });
-    const m = url.trim().match(/\/(\d+)\s*$/);
-    if (!m) return { error: `issue created but could not parse its number from: ${url}` };
-    return { created: true, number: Number(m[1]) };
+    if (isGitHubShorthand(repo)) setupGithubGitAuth();
+    fs5.mkdirSync(path7.dirname(cacheDir), { recursive: true });
+    if (!fs5.existsSync(path7.join(cacheDir, ".git"))) {
+      fs5.rmSync(cacheDir, { recursive: true, force: true });
+      runGit(["clone", "--no-checkout", "--filter=blob:none", url, cacheDir]);
+    }
+    runGit(["-C", cacheDir, "remote", "set-url", "origin", url]);
+    runGit(["-C", cacheDir, "fetch", "--depth=1", "origin", ref]);
+    runGit(["-C", cacheDir, "checkout", "--detach", "FETCH_HEAD"]);
+    return cacheDir;
   } catch (err) {
-    return { error: err instanceof Error ? err.message : String(err) };
+    const msg = err instanceof Error ? err.message : String(err);
+    process.stderr.write(`[company-store] failed to fetch ${repo}#${ref}: ${msg}
+`);
+    return null;
   }
 }
-function ensureComment(repoSlug, issue, key, body) {
-  const marker = commentMarker(key);
+function localStoreRoot(repo) {
+  if (!path7.isAbsolute(repo) && !repo.startsWith(".")) return null;
+  const root = path7.resolve(repo);
+  if (!fs5.existsSync(path7.join(root, ".kody"))) return null;
+  return root;
+}
+function repoToGitUrl(repo) {
+  if (/^(https?:|ssh:|git@|file:)/.test(repo)) return repo;
+  if (isGitHubShorthand(repo)) {
+    return `https://github.com/${repo}.git`;
+  }
+  return repo;
+}
+function isGitHubShorthand(repo) {
+  return /^[A-Za-z0-9_.-]+\/[A-Za-z0-9_.-]+$/.test(repo);
+}
+function cacheRoot() {
+  return process.env[CACHE_ENV]?.trim() || path7.join(os3.homedir(), ".cache", "kody", "company-store");
+}
+function cacheKey(repo, ref) {
+  return crypto3.createHash("sha256").update(`${repo}#${ref}`).digest("hex").slice(0, 24);
+}
+function runGit(args) {
+  execFileSync2("git", args, { stdio: ["ignore", "ignore", "pipe"] });
+}
+function setupGithubGitAuth() {
+  const token = process.env.KODY_TOKEN || process.env.GH_TOKEN || process.env.GITHUB_TOKEN || process.env.GH_PAT;
+  if (!token) return;
   try {
-    const raw = gh(["issue", "view", String(issue), "-R", repoSlug, "--json", "comments"]);
-    const parsed = JSON.parse(raw);
-    const already = (parsed.comments ?? []).some((c) => (c.body ?? "").includes(marker));
-    if (already) return { posted: false };
-    gh(["issue", "comment", String(issue), "-R", repoSlug, "--body-file", "-"], { input: `${body}
+    execFileSync2("gh", ["auth", "setup-git", "--hostname", "github.com"], {
+      env: { ...process.env, GH_TOKEN: token },
+      stdio: ["ignore", "ignore", "pipe"]
+    });
+  } catch {
+  }
+}
+var DEFAULT_COMPANY_STORE, DEFAULT_COMPANY_STORE_REF, STORE_ENV, REF_ENV, CACHE_ENV, memo;
+var init_companyStore = __esm({
+  "src/companyStore.ts"() {
+    "use strict";
+    DEFAULT_COMPANY_STORE = "aharonyaircohen/kody-company-store";
+    DEFAULT_COMPANY_STORE_REF = "stable";
+    STORE_ENV = "KODY_COMPANY_STORE";
+    REF_ENV = "KODY_COMPANY_STORE_REF";
+    CACHE_ENV = "KODY_COMPANY_STORE_CACHE";
+    memo = null;
+  }
+});
 
-${marker}` });
-    return { posted: true };
-  } catch (err) {
-    return { error: err instanceof Error ? err.message : String(err) };
+// src/registry.ts
+import * as fs6 from "fs";
+import * as path8 from "path";
+function getAgentActionsRoot() {
+  const here = path8.dirname(new URL(import.meta.url).pathname);
+  const candidates = [
+    path8.join(here, "agent-actions"),
+    // dev: src/
+    path8.join(here, "..", "agent-actions"),
+    // built: dist/bin → dist/agent-actions
+    path8.join(here, "..", "src", "agent-actions")
+    // fallback
+  ];
+  for (const c of candidates) {
+    if (fs6.existsSync(c) && fs6.statSync(c).isDirectory()) return c;
   }
+  return candidates[0];
 }
-function dispatchWorkflow(workflowFile, agentResponsibility, issueNumber) {
-  try {
-    gh([
-      "workflow",
-      "run",
-      workflowFile,
-      "-f",
-      `agentResponsibility=${agentResponsibility}`,
-      "-f",
-      `issue_number=${issueNumber}`
-    ]);
-    return { ok: true };
-  } catch (err) {
-    return { ok: false, error: err instanceof Error ? err.message : String(err) };
+function getProjectAgentActionsRoot() {
+  return path8.join(process.cwd(), ".kody", "agent-actions");
+}
+function getProjectAgentResponsibilitiesRoot() {
+  return path8.join(process.cwd(), ".kody", "agent-responsibilities");
+}
+function getCompanyStoreAgentActionsRoot() {
+  return getCompanyStoreAssetRoot("agentActions");
+}
+function getCompanyStoreAgentResponsibilitiesRoot() {
+  return getCompanyStoreAssetRoot("agentResponsibilities");
+}
+function getBuiltinAgentResponsibilitiesRoot() {
+  const here = path8.dirname(new URL(import.meta.url).pathname);
+  const candidates = [
+    path8.join(here, "agent-responsibilities"),
+    // dev: src/
+    path8.join(here, "..", "agent-responsibilities"),
+    // built: dist/bin → dist/agent-responsibilities
+    path8.join(here, "..", "src", "agent-responsibilities")
+    // fallback
+  ];
+  for (const c of candidates) {
+    if (fs6.existsSync(c) && fs6.statSync(c).isDirectory()) return c;
   }
+  return candidates[0];
 }
-function isDispatchGated(agentResponsibility, mode) {
-  if (mode === "auto") return false;
-  if (agentResponsibility && GATE_EXEMPT_DUTIES.has(agentResponsibility)) return false;
-  return true;
+function getAgentActionRoots() {
+  const storeRoot = getCompanyStoreAgentActionsRoot();
+  return [getProjectAgentActionsRoot(), ...storeRoot ? [storeRoot] : [], getAgentActionsRoot()];
 }
-function trustRefusal(agentResponsibilitySlug) {
-  return `Not dispatched: agentResponsibility \`${agentResponsibilitySlug ?? "?"}\` is in ASK mode (not trusted for autonomy). Do NOT retry the dispatch. Instead notify the operator (use recommend_to_operator, or rely on the tracking issue that already @-mentions them), then submit_state. To let this agentResponsibility act on its own, grant it Auto on the dashboard Trust page.`;
+function getAgentResponsibilityRoots(projectAgentResponsibilitiesRoot = getProjectAgentResponsibilitiesRoot()) {
+  const storeRoot = getCompanyStoreAgentResponsibilitiesRoot();
+  return [projectAgentResponsibilitiesRoot, ...storeRoot ? [storeRoot] : [], getBuiltinAgentResponsibilitiesRoot()];
 }
-function agentResponsibilityToolDefinitions(opts) {
-  const workflowFile = opts.workflowFile ?? "kody.yml";
-  const listTool = {
-    name: "list_prs_to_repair",
-    description: "Return open non-draft PRs with the signals you need to pick a repair: number, title, headSha, baseRef, mergeable (CONFLICTING/MERGEABLE/UNKNOWN), ciStatus (PASSING/FAILING/RUNNING/UNKNOWN), behindBy (commits behind base; 0 for PRs that already match conflicts or CI-failure rules), updatedAt. Drafts are excluded. One call returns everything \u2014 do not iterate or paginate.",
-    inputSchema: {},
-    handler: async () => {
-      const candidates = listRepairCandidates(opts.repoSlug);
-      return {
-        content: [
-          {
-            type: "text",
-            text: JSON.stringify({ prs: candidates }, null, 2)
-          }
-        ]
-      };
-    }
-  };
-  const makeDispatch = (verb, describe) => ({
-    name: `${verb.replace("-", "_")}_pr`,
-    description: describe,
-    inputSchema: {
-      pr: z2.number().int().positive().describe("PR number to repair.")
-    },
-    handler: async (args) => {
-      const pr = Number(args.pr);
-      if (isDispatchGated(verb, readAgentResponsibilityTrustMode(opts.state, opts.repoSlug, opts.agentResponsibilitySlug))) {
-        return { content: [{ type: "text", text: trustRefusal(opts.agentResponsibilitySlug) }] };
+function listAgentActions(roots = getAgentActionRoots()) {
+  const rootList = typeof roots === "string" ? [roots] : roots;
+  const seen = /* @__PURE__ */ new Set();
+  const out = [];
+  for (const root of rootList) {
+    if (!fs6.existsSync(root)) continue;
+    const entries = fs6.readdirSync(root, { withFileTypes: true });
+    for (const ent of entries) {
+      if (!ent.isDirectory()) continue;
+      if (seen.has(ent.name)) continue;
+      const profilePath = path8.join(root, ent.name, AGENT_RESPONSIBILITY_PROFILE_FILE);
+      if (fs6.existsSync(profilePath) && fs6.statSync(profilePath).isFile()) {
+        out.push({ name: ent.name, profilePath });
+        seen.add(ent.name);
       }
-      const result = dispatchVerb(workflowFile, verb, pr);
-      const text = result.ok ? `Dispatched \`${verb}\` on PR #${pr}. The repair runs in its own workflow_dispatch \u2014 wait for the next tick to see the new headSha.` : `Dispatch failed for \`${verb}\` on PR #${pr}: ${result.error}`;
-      return { content: [{ type: "text", text }] };
-    }
-  });
-  const syncTool = makeDispatch(
-    "sync",
-    "Bring a stale PR up to date with its base branch (merges base \u2192 head + pushes). Use when behindBy > 10 AND mergeable !== CONFLICTING AND ciStatus !== FAILING. Returns immediately \u2014 the actual merge runs in a separate workflow."
-  );
-  const fixCiTool = makeDispatch(
-    "fix-ci",
-    "Repair a PR whose CI is failing. Use when ciStatus === FAILING. The repair runs in a separate workflow."
-  );
-  const resolveTool = makeDispatch(
-    "resolve",
-    "Resolve merge conflicts on a PR. Use when mergeable === CONFLICTING. The repair runs in a separate workflow."
-  );
-  const recommendTool = {
-    name: "recommend_to_operator",
-    description: "Post ONE comment on a PR with the operator @-mention prepended. Use this when a agentResponsibility is in ASK mode and you want the operator to confirm via the dashboard inbox. The mention handle is substituted from kody.config.json `github.operators` \u2014 do not type it yourself.",
-    inputSchema: {
-      pr: z2.number().int().positive().describe("PR number to comment on."),
-      body: z2.string().min(1).describe("Comment body (markdown). Do not include the operator mention \u2014 the engine prepends it.")
-    },
-    handler: async (args) => {
-      const pr = Number(args.pr);
-      const body = String(args.body ?? "");
-      const result = postRecommendation(pr, opts.operatorMention, body, opts.agentResponsibilitySlug);
-      const text = result.ok ? `Recommendation posted on PR #${pr}.` : `Recommendation failed on PR #${pr}: ${result.error}`;
-      return { content: [{ type: "text", text }] };
-    }
-  };
-  const ledgerTool = {
-    name: "read_ledger",
-    description: "Read any sentinel-fenced JSON manifest stored on a labeled issue. Returns `{found, issueNumber, payload}` where payload is the parsed JSON between `<!-- <label>:start -->` and `<!-- <label>:end -->` sentinels.",
-    inputSchema: {
-      label: z2.string().min(1).describe("GitHub issue label that identifies the manifest issue.")
-    },
-    handler: async (args) => {
-      const label = String(args.label ?? "");
-      const result = readLedger(label);
-      return { content: [{ type: "text", text: JSON.stringify(result, null, 2) }] };
     }
-  };
-  const checkRunsTool = {
-    name: "read_check_runs",
-    description: "Read CI for a branch or commit ref (e.g. 'dev'). Returns {sha, state, failing:[{name,conclusion,detailsUrl}], pending:[{name,status}]}. state is RED (\u22651 check has a terminal-failure conclusion: failure/timed_out/startup_failure/action_required), PENDING (none failed but some still running), or GREEN (all completed, none failed). Kody's own job check-runs (run/kody/agent-responsibility-tick/\u2026) are excluded by default. This reads the commit's authoritative check-runs \u2014 use it instead of guessing CI health from a run list.",
-    inputSchema: {
-      ref: z2.string().min(1).describe("Branch name or commit SHA to read CI for (e.g. 'dev')."),
-      ignoreNames: z2.array(z2.string()).optional().describe("Check names to exclude (default: Kody's own job names).")
-    },
-    handler: async (args) => {
-      const ref = String(args.ref ?? "");
-      const ignoreNames = Array.isArray(args.ignoreNames) ? args.ignoreNames : DEFAULT_IGNORE_CHECKS;
-      const result = readCheckRuns(opts.repoSlug, ref, ignoreNames);
-      return { content: [{ type: "text", text: JSON.stringify(result, null, 2) }] };
+  }
+  return out.sort((a, b) => a.name.localeCompare(b.name));
+}
+function resolveAgentAction(name, roots = getAgentActionRoots()) {
+  if (!isSafeName(name)) return null;
+  const rootList = typeof roots === "string" ? [roots] : roots;
+  for (const root of rootList) {
+    const profilePath = path8.join(root, name, "profile.json");
+    if (fs6.existsSync(profilePath) && fs6.statSync(profilePath).isFile()) {
+      return profilePath;
     }
+  }
+  return null;
+}
+function listAgentResponsibilityActions(projectAgentResponsibilitiesRoot = getProjectAgentResponsibilitiesRoot()) {
+  const seen = /* @__PURE__ */ new Set();
+  const out = [];
+  const add = (action) => {
+    if (!isSafeName(action.action) || !isSafeName(action.agentResponsibility) || !isSafeName(action.agentAction)) return;
+    if (seen.has(action.action)) return;
+    seen.add(action.action);
+    out.push(action);
   };
-  const readThreadTool = {
-    name: "read_thread",
-    description: "Read an issue or PR's recent comments + labels + title/state. Returns {number, title, state, labels:[...], comments:[{author, createdAt, body}]} (newest last, body truncated). Use this to read a verdict a dispatched check posted back \u2014 e.g. qa-engineer's report or ui-review's PASS/CONCERNS/FAIL \u2014 on a later tick. Read-only; works for both issues AND PRs.",
-    inputSchema: {
-      number: z2.number().int().positive().describe("Issue or PR number to read."),
-      limit: z2.number().int().positive().optional().describe("Max recent comments to return (default 10).")
-    },
-    handler: async (args) => {
-      const number = Number(args.number);
-      const limit = args.limit ? Number(args.limit) : 10;
-      const result = readThread(opts.repoSlug, number, limit);
-      return { content: [{ type: "text", text: JSON.stringify(result, null, 2) }] };
-    }
-  };
-  const ensureIssueTool = {
-    name: "ensure_issue",
-    description: "Idempotently ensure ONE open tracking issue exists for `key`. Searches OPEN issues (issues API, not the laggy search index) for `key`'s hidden marker; if found, returns {created:false, number} and creates NOTHING; otherwise creates the issue (title + body, marker appended) and returns {created:true, number}. This is the anti-duplication primitive: use one stable `key` per recurring finding so re-ticks reuse the same issue. Only take follow-up actions (dispatch/comment) when created===true.",
-    inputSchema: {
-      key: z2.string().min(1).describe(
-        "Stable dedup identity for this finding (e.g. 'dev-ci-red', 'docs-drift:<feature>'). Same key across ticks = same issue."
-      ),
-      title: z2.string().min(1).describe("Issue title (used only on first creation)."),
-      body: z2.string().min(1).describe(
-        "Issue body markdown (used only on first creation). Include the operator mention verbatim if the agentResponsibility body has one."
-      )
-    },
-    handler: async (args) => {
-      const key = String(args.key ?? "");
-      const title = String(args.title ?? "");
-      const body = String(args.body ?? "");
-      const result = ensureIssue(opts.repoSlug, key, title, body);
-      return { content: [{ type: "text", text: JSON.stringify(result, null, 2) }] };
-    }
-  };
-  const ensureCommentTool = {
-    name: "ensure_comment",
-    description: "Idempotently post ONE comment on an issue for `key`. If a comment carrying `key`'s marker already exists on the issue, returns {posted:false}; otherwise posts the comment (marker appended) and returns {posted:true}. Use for a notify/audit comment that must appear exactly once.",
-    inputSchema: {
-      issue: z2.number().int().positive().describe("Issue number to comment on."),
-      key: z2.string().min(1).describe("Stable dedup identity for this comment (e.g. 'dev-ci-red:dispatched')."),
-      body: z2.string().min(1).describe("Comment body markdown.")
-    },
-    handler: async (args) => {
-      const issue = Number(args.issue);
-      const key = String(args.key ?? "");
-      const body = String(args.body ?? "");
-      const result = ensureComment(opts.repoSlug, issue, key, body);
-      return { content: [{ type: "text", text: JSON.stringify(result, null, 2) }] };
-    }
-  };
-  const dispatchTool = {
-    name: "dispatch_workflow",
-    description: "Dispatch a kody.yml workflow_dispatch run for a agentResponsibility action against an issue (the cross-run bot\u2192engine path; a bot `@kody` comment would be dropped). E.g. dispatch_workflow({agentResponsibility:'run', issueNumber:<n>}) opens a fix PR from a tracking issue. Returns {ok} or {ok:false,error}.",
-    inputSchema: {
-      agentResponsibility: z2.string().min(1).optional().describe("AgentResponsibility action to run (e.g. 'run')."),
-      agentAction: z2.string().min(1).optional().describe("Deprecated alias for agentResponsibility."),
-      issueNumber: z2.number().int().positive().describe("Issue (or PR) number forwarded as issue_number.")
-    },
-    handler: async (args) => {
-      const agentResponsibility = String(args.agentResponsibility ?? args.agentAction ?? "");
-      const issueNumber = Number(args.issueNumber);
-      if (isDispatchGated(
-        agentResponsibility,
-        readAgentResponsibilityTrustMode(opts.state, opts.repoSlug, opts.agentResponsibilitySlug)
-      )) {
-        return { content: [{ type: "text", text: trustRefusal(opts.agentResponsibilitySlug) }] };
-      }
-      const result = dispatchWorkflow(workflowFile, agentResponsibility, issueNumber);
-      const text = result.ok ? `Dispatched agentResponsibility \`${agentResponsibility}\` on #${issueNumber} via workflow_dispatch.` : `Dispatch failed for agentResponsibility \`${agentResponsibility}\` on #${issueNumber}: ${result.error}`;
-      return { content: [{ type: "text", text }] };
-    }
-  };
-  return [
-    listTool,
-    syncTool,
-    fixCiTool,
-    resolveTool,
-    recommendTool,
-    ledgerTool,
-    checkRunsTool,
-    readThreadTool,
-    ensureIssueTool,
-    ensureCommentTool,
-    dispatchTool
-  ];
+  const roots = getAgentResponsibilityRoots(projectAgentResponsibilitiesRoot);
+  const executableRoots = getAgentActionRoots();
+  for (const action of listFolderAgentResponsibilityActions(roots[0], "project-folder")) add(action);
+  for (const action of listAgentActionResponsibilityActions(executableRoots[0], "project-agentAction")) add(action);
+  if (roots.length === 3) {
+    for (const action of listFolderAgentResponsibilityActions(roots[1], "company-store")) add(action);
+    for (const action of listAgentActionResponsibilityActions(executableRoots[1], "company-store-agentAction"))
+      add(action);
+    for (const action of listBuiltinAgentResponsibilityActions(roots[2])) add(action);
+  } else {
+    for (const action of listBuiltinAgentResponsibilityActions(roots[1])) add(action);
+  }
+  return out.sort((a, b) => a.action.localeCompare(b.action));
 }
-function buildAgentResponsibilityMcpServer(opts) {
-  const definitions = agentResponsibilityToolDefinitions(opts);
-  const tools = definitions.map(
-    (def) => tool3(
-      def.name,
-      def.description,
-      def.inputSchema,
-      async (args) => def.handler(args)
-    )
-  );
-  const server = createSdkMcpServer3({
-    name: "kody-agentResponsibility",
-    version: "0.1.0",
-    tools
-  });
-  return { server };
+function resolveAgentResponsibilityAction(action, projectAgentResponsibilitiesRoot = getProjectAgentResponsibilitiesRoot()) {
+  if (!isSafeName(action)) return null;
+  return listAgentResponsibilityActions(projectAgentResponsibilitiesRoot).find((d) => d.action === action) ?? null;
 }
-var FAIL_CONCLUSIONS, RUNNING_STATUSES, TRUST_FILE_PATH, THREAD_BODY_MAX, CHECK_FAIL_CONCLUSIONS, DEFAULT_IGNORE_CHECKS, trackMarker, commentMarker, GATE_EXEMPT_DUTIES, AGENT_RESPONSIBILITY_MCP_TOOL_NAMES;
-var init_agent_responsibilityMcp = __esm({
-  "src/agent-responsibilityMcp.ts"() {
-    "use strict";
-    init_issue();
-    init_stateRepo();
-    FAIL_CONCLUSIONS = /* @__PURE__ */ new Set(["FAILURE", "TIMED_OUT", "ACTION_REQUIRED", "STARTUP_FAILURE", "CANCELLED"]);
-    RUNNING_STATUSES = /* @__PURE__ */ new Set(["IN_PROGRESS", "QUEUED", "PENDING", "WAITING", "REQUESTED"]);
-    TRUST_FILE_PATH = "state/trust.json";
-    THREAD_BODY_MAX = 4e3;
-    CHECK_FAIL_CONCLUSIONS = /* @__PURE__ */ new Set(["FAILURE", "TIMED_OUT", "STARTUP_FAILURE", "ACTION_REQUIRED"]);
-    DEFAULT_IGNORE_CHECKS = ["run", "kody", "agent-responsibility-tick", "agent-ask", "chat"];
-    trackMarker = (key) => `<!-- kody-track:${key} -->`;
-    commentMarker = (key) => `<!-- kody-track-comment:${key} -->`;
-    GATE_EXEMPT_DUTIES = /* @__PURE__ */ new Set(["qa-engineer", "ui-review"]);
-    AGENT_RESPONSIBILITY_MCP_TOOL_NAMES = [
-      "list_prs_to_repair",
-      "sync_pr",
-      "fix_ci_pr",
-      "resolve_pr",
-      "recommend_to_operator",
-      "read_ledger",
-      "read_check_runs",
-      "read_thread",
-      "ensure_issue",
-      "ensure_comment",
-      "dispatch_workflow"
-    ];
-  }
-});
-
-// src/repoWorkspace.ts
-import { spawn as spawn2, spawnSync } from "child_process";
-import * as fs4 from "fs";
-import * as path6 from "path";
-async function resolveAndClone(reposRoot, repo, repoToken, cloneRepo) {
-  const name = repo?.trim();
-  if (!name || !REPO_RE.test(name)) return null;
-  const root = path6.resolve(reposRoot);
-  const dir = path6.resolve(root, name);
-  if (dir !== root && !dir.startsWith(root + path6.sep)) return null;
-  if (fs4.existsSync(path6.join(dir, ".git"))) return dir;
-  const inflight = repoClones.get(dir);
-  if (inflight) {
-    await inflight;
-    return dir;
+function hasAgentResponsibilityAction(action, projectAgentResponsibilitiesRoot = getProjectAgentResponsibilitiesRoot()) {
+  return resolveAgentResponsibilityAction(action, projectAgentResponsibilitiesRoot) !== null;
+}
+function resolveAgentResponsibilityFolder(slug2, projectAgentResponsibilitiesRoot = getProjectAgentResponsibilitiesRoot()) {
+  if (!isSafeName(slug2)) return null;
+  for (const root of getAgentResponsibilityRoots(projectAgentResponsibilitiesRoot)) {
+    const agentResponsibility = readAgentResponsibilityFolder(root, slug2);
+    if (agentResponsibility) return agentResponsibility;
   }
-  const p = cloneRepo(name, repoToken, dir).finally(() => {
-    if (repoClones.get(dir) === p) repoClones.delete(dir);
-  });
-  repoClones.set(dir, p);
-  await p;
-  return dir;
+  return null;
 }
-async function ensureRepoCwd(opts) {
-  const dir = await resolveAndClone(opts.reposRoot, opts.repo, opts.repoToken, opts.cloneRepo);
-  return dir ?? opts.baseCwd;
+function resolveAgentResponsibilityExecution(agentResponsibility) {
+  const agentAction = agentResponsibility.config.agentAction ?? agentResponsibility.config.agentActions?.[0] ?? (agentResponsibility.config.tickScript ? "agent-responsibility-tick-scripted" : "agent-responsibility-tick");
+  const cliArgs = agentActionDeclaresInput(agentAction, "agentResponsibility") ? { agentResponsibility: agentResponsibility.slug } : {};
+  return { agentAction, cliArgs };
 }
-async function fetchRepo(opts) {
-  const dir = await resolveAndClone(opts.reposRoot, opts.repo, opts.repoToken, opts.cloneRepo ?? defaultCloneRepo);
-  if (!dir) {
-    throw new Error(`invalid repo "${opts.repo}" \u2014 expected "owner/name" with no path escapes`);
+function agentActionDeclaresInput(agentAction, inputName) {
+  const profilePath = resolveAgentAction(agentAction);
+  if (!profilePath) return false;
+  try {
+    const raw = JSON.parse(fs6.readFileSync(profilePath, "utf-8"));
+    if (!Array.isArray(raw.inputs)) return false;
+    return raw.inputs.some((entry) => {
+      if (!entry || typeof entry !== "object" || Array.isArray(entry)) return false;
+      const input = entry;
+      return input.name === inputName || input.flag === `--${inputName}`;
+    });
+  } catch {
+    return false;
   }
-  return dir;
 }
-var REPO_RE, repoClones, defaultCloneRepo;
-var init_repoWorkspace = __esm({
-  "src/repoWorkspace.ts"() {
-    "use strict";
-    REPO_RE = /^[A-Za-z0-9_.-]+\/[A-Za-z0-9_.-]+$/;
-    repoClones = /* @__PURE__ */ new Map();
-    defaultCloneRepo = (repo, token, dir) => {
-      fs4.mkdirSync(path6.dirname(dir), { recursive: true });
-      const authUrl = token ? `https://x-access-token:${token}@github.com/${repo}.git` : `https://github.com/${repo}.git`;
-      return new Promise((resolve7, reject) => {
-        const child = spawn2("git", ["clone", "--depth=1", authUrl, dir], {
-          stdio: "inherit"
-        });
-        child.on("exit", (code) => {
-          if (code !== 0) {
-            reject(new Error(`git clone ${repo} failed (exit ${code})`));
-            return;
-          }
-          try {
-            const name = process.env.GIT_AUTHOR_NAME ?? "Kody Bot";
-            const email = process.env.GIT_AUTHOR_EMAIL ?? "kody-bot@users.noreply.github.com";
-            spawnSync("git", ["-C", dir, "config", "user.name", name]);
-            spawnSync("git", ["-C", dir, "config", "user.email", email]);
-          } catch {
-          }
-          resolve7();
-        });
-        child.on("error", reject);
+function isSafeName(name) {
+  return /^[a-z][a-z0-9-]*$/.test(name) && !name.includes("..");
+}
+function listAgentActionResponsibilityActions(root, source) {
+  if (!fs6.existsSync(root) || !fs6.statSync(root).isDirectory()) return [];
+  const out = [];
+  for (const ent of fs6.readdirSync(root, { withFileTypes: true })) {
+    if (!ent.isDirectory() || !isSafeName(ent.name)) continue;
+    const profilePath = path8.join(root, ent.name, AGENT_RESPONSIBILITY_PROFILE_FILE);
+    if (!fs6.existsSync(profilePath) || !fs6.statSync(profilePath).isFile()) continue;
+    try {
+      const raw = JSON.parse(fs6.readFileSync(profilePath, "utf-8"));
+      const action = typeof raw.action === "string" && raw.action.trim() ? raw.action.trim() : "";
+      if (!action) continue;
+      if (!PUBLIC_AGENT_ACTION_ACTION_ROLES.has(String(raw.role))) continue;
+      if (!PUBLIC_AGENT_ACTION_CAPABILITY_KINDS.has(String(raw.capabilityKind))) continue;
+      if (!Array.isArray(raw.inputs)) continue;
+      out.push({
+        action,
+        agentResponsibility: ent.name,
+        agentAction: ent.name,
+        cliArgs: {},
+        source,
+        describe: typeof raw.describe === "string" ? raw.describe : void 0,
+        profilePath
       });
-    };
+    } catch {
+    }
   }
-});
-
-// src/fetchRepoMcp.ts
-var fetchRepoMcp_exports = {};
-__export(fetchRepoMcp_exports, {
-  buildFetchRepoMcpServer: () => buildFetchRepoMcpServer,
-  fetchRepoToolDefinition: () => fetchRepoToolDefinition
-});
-import { createSdkMcpServer as createSdkMcpServer4, tool as tool4 } from "@anthropic-ai/claude-agent-sdk";
-import { z as z3 } from "zod";
-function fetchRepoToolDefinition(opts) {
-  return {
-    name: "fetch_repo",
-    description: DESCRIPTION3,
-    inputSchema: INPUT_SCHEMA3,
-    handler: async (args) => {
-      const repo = String(args.repo ?? "").trim();
-      try {
-        const dir = await fetchRepo({
-          reposRoot: opts.reposRoot,
-          repo,
-          repoToken: opts.repoToken
-        });
-        return {
-          content: [
-            {
-              type: "text",
-              text: `Cloned ${repo} \u2192 ${dir}
-Use Read/Grep/Glob/Bash at that absolute path to explore it. It now lives in your workspace alongside any other repos you've fetched.`
-            }
-          ]
-        };
-      } catch (err) {
-        const msg = err instanceof Error ? err.message : String(err);
-        return {
-          content: [{ type: "text", text: `Could not fetch ${repo}: ${msg}` }],
-          isError: true
-        };
-      }
-    }
-  };
+  return out.sort((a, b) => a.action.localeCompare(b.action));
 }
-function buildFetchRepoMcpServer(opts) {
-  const def = fetchRepoToolDefinition(opts);
-  const fetchTool = tool4(def.name, def.description, def.inputSchema, async (args) => {
-    return def.handler({ repo: String(args.repo ?? "") });
-  });
-  return createSdkMcpServer4({
-    name: "kody-fetch-repo",
-    version: "0.1.0",
-    tools: [fetchTool]
-  });
+function listFolderAgentResponsibilityActions(root, source) {
+  if (!fs6.existsSync(root) || !fs6.statSync(root).isDirectory()) return [];
+  const out = [];
+  for (const slug2 of listAgentResponsibilityFolderSlugs(root)) {
+    if (!isSafeName(slug2)) continue;
+    const agentResponsibility = readAgentResponsibilityFolder(root, slug2);
+    if (!agentResponsibility) continue;
+    const action = agentResponsibility.config.action ?? slug2;
+    const { agentAction, cliArgs } = resolveAgentResponsibilityExecution(agentResponsibility);
+    out.push({
+      action,
+      agentResponsibility: slug2,
+      agentAction,
+      cliArgs,
+      source,
+      describe: agentResponsibility.config.describe ?? agentResponsibility.title,
+      capabilityKind: agentResponsibility.config.capabilityKind,
+      profilePath: agentResponsibility.profilePath,
+      bodyPath: agentResponsibility.bodyPath
+    });
+  }
+  return out.sort((a, b) => a.action.localeCompare(b.action));
 }
-var DESCRIPTION3, INPUT_SCHEMA3;
-var init_fetchRepoMcp = __esm({
-  "src/fetchRepoMcp.ts"() {
+function listBuiltinAgentResponsibilityActions(root = getBuiltinAgentResponsibilitiesRoot()) {
+  if (!fs6.existsSync(root) || !fs6.statSync(root).isDirectory()) return [];
+  const out = [];
+  for (const slug2 of listAgentResponsibilityFolderSlugs(root)) {
+    if (!isSafeName(slug2)) continue;
+    const agentResponsibility = readAgentResponsibilityFolder(root, slug2);
+    if (!agentResponsibility) continue;
+    const action = agentResponsibility.config.action ?? slug2;
+    const agentAction = agentResponsibility.config.agentAction ?? slug2;
+    out.push({
+      action,
+      agentResponsibility: slug2,
+      agentAction,
+      cliArgs: {},
+      source: "builtin",
+      describe: agentResponsibility.config.describe ?? agentResponsibility.title,
+      capabilityKind: agentResponsibility.config.capabilityKind,
+      profilePath: agentResponsibility.profilePath,
+      bodyPath: agentResponsibility.bodyPath
+    });
+  }
+  return out.sort((a, b) => a.action.localeCompare(b.action));
+}
+function getProfileInputs(name, roots = getAgentActionRoots()) {
+  const profilePath = resolveAgentAction(name, roots);
+  if (!profilePath) return null;
+  try {
+    const raw = JSON.parse(fs6.readFileSync(profilePath, "utf-8"));
+    if (!raw || typeof raw !== "object" || !Array.isArray(raw.inputs)) return [];
+    return raw.inputs;
+  } catch {
+    return null;
+  }
+}
+function parseGenericFlags(argv) {
+  const args = {};
+  const positional = [];
+  for (let i = 0; i < argv.length; i++) {
+    const arg = argv[i];
+    if (!arg.startsWith("--")) {
+      positional.push(arg);
+      continue;
+    }
+    const key = arg.slice(2);
+    const next = argv[i + 1];
+    let value = true;
+    if (next !== void 0 && !next.startsWith("--")) {
+      value = next;
+      i++;
+    }
+    args[key] = value;
+    if (key.includes("-")) {
+      const camel = key.replace(/-([a-z0-9])/g, (_, c) => c.toUpperCase());
+      if (camel !== key && args[camel] === void 0) args[camel] = value;
+    }
+  }
+  if (positional.length > 0) args._ = positional;
+  return args;
+}
+var PUBLIC_AGENT_ACTION_ACTION_ROLES, PUBLIC_AGENT_ACTION_CAPABILITY_KINDS;
+var init_registry = __esm({
+  "src/registry.ts"() {
     "use strict";
-    init_repoWorkspace();
-    DESCRIPTION3 = 'Clone another GitHub repository into your workspace so you can read and work on it. Pass `repo` as "owner/name" (e.g. "A-Guy-educ/A-Guy"). Returns the absolute path of the clone \u2014 then use your Read/Grep/Glob/Bash tools at that path to inspect it. Already-fetched repos are reused instantly. Use this whenever the user asks about a repository other than your current one \u2014 you are NOT limited to a single repo.';
-    INPUT_SCHEMA3 = {
-      repo: z3.string().describe('GitHub repository as "owner/name", e.g. "A-Guy-educ/A-Guy".')
-    };
+    init_agent_responsibilityFolders();
+    init_companyStore();
+    PUBLIC_AGENT_ACTION_ACTION_ROLES = /* @__PURE__ */ new Set(["primitive", "orchestrator", "container", "watch", "utility"]);
+    PUBLIC_AGENT_ACTION_CAPABILITY_KINDS = /* @__PURE__ */ new Set(["observe", "act", "verify"]);
   }
 });
 
-// src/agent.ts
-import * as fs5 from "fs";
-import * as path7 from "path";
-import { query } from "@anthropic-ai/claude-agent-sdk";
-function classifySubtype(subtype) {
-  if (!subtype) return "generic_failed";
-  const lower = subtype.toLowerCase();
-  if (lower === "success") return "ok";
-  if (lower.includes("max_turns") || lower.includes("max-turns")) return "out_of_turns";
-  if (lower.includes("rate_limit") || lower.includes("rate-limit")) return "rate_limit";
-  if (lower.includes("tool")) return "tool_error";
-  if (lower.includes("error")) return "model_error";
-  return "generic_failed";
-}
-function isClaudeLoginRequiredText(text) {
-  const normalized = text.toLowerCase();
-  return normalized.includes("not logged in") && normalized.includes("/login");
+// src/agent-responsibilityMcp.ts
+var agent_responsibilityMcp_exports = {};
+__export(agent_responsibilityMcp_exports, {
+  AGENT_RESPONSIBILITY_MCP_TOOL_NAMES: () => AGENT_RESPONSIBILITY_MCP_TOOL_NAMES,
+  agentResponsibilityToolDefinitions: () => agentResponsibilityToolDefinitions,
+  buildAgentResponsibilityMcpServer: () => buildAgentResponsibilityMcpServer,
+  dispatchWorkflow: () => dispatchWorkflow,
+  ensureComment: () => ensureComment,
+  ensureIssue: () => ensureIssue,
+  isDispatchGated: () => isDispatchGated,
+  parseAgentResponsibilityTrustMode: () => parseAgentResponsibilityTrustMode,
+  readAgentResponsibilityTrustMode: () => readAgentResponsibilityTrustMode,
+  readCheckRuns: () => readCheckRuns,
+  readThread: () => readThread
+});
+import { createSdkMcpServer as createSdkMcpServer3, tool as tool3 } from "@anthropic-ai/claude-agent-sdk";
+import { z as z2 } from "zod";
+function summarizeCiStatus(rollup) {
+  if (!Array.isArray(rollup) || rollup.length === 0) return "UNKNOWN";
+  let hasRunning = false;
+  for (const check of rollup) {
+    const status = String(check.status ?? "").toUpperCase();
+    const conclusion = String(check.conclusion ?? "").toUpperCase();
+    if (FAIL_CONCLUSIONS.has(conclusion)) return "FAILING";
+    if (!conclusion && RUNNING_STATUSES.has(status)) hasRunning = true;
+  }
+  return hasRunning ? "RUNNING" : "PASSING";
 }
-function resolveTurnTimeoutMs(opts) {
-  if (opts.maxTurnTimeoutMs !== void 0 && opts.maxTurnTimeoutMs !== null) {
-    return opts.maxTurnTimeoutMs > 0 ? opts.maxTurnTimeoutMs : 0;
+function computeBehindBy(repoSlug, base, head) {
+  try {
+    const raw = gh(["api", `repos/${repoSlug}/compare/${base}...${head}`, "--jq", ".behind_by"]);
+    const n = Number(raw.trim());
+    return Number.isFinite(n) ? n : -1;
+  } catch {
+    return -1;
   }
-  const envSec = Number(process.env.KODY_TURN_TIMEOUT_SEC);
-  if (Number.isFinite(envSec) && envSec > 0) return Math.floor(envSec * 1e3);
-  if (Number.isFinite(envSec) && envSec <= 0) return 0;
-  return DEFAULT_TURN_TIMEOUT_MS;
 }
-function isTransientConnectionError(msg) {
-  if (!msg) return false;
-  return /ConnectionRefused|ECONNREFUSED|ECONNRESET|ETIMEDOUT|EHOSTUNREACH|ENOTFOUND|socket hang up|Unable to connect to API|fetch failed/i.test(
-    msg
-  );
+function listRepairCandidates(repoSlug) {
+  const raw = gh([
+    "pr",
+    "list",
+    "--state",
+    "open",
+    "--limit",
+    "100",
+    "--json",
+    "number,title,headRefName,headRefOid,baseRefName,isDraft,mergeable,statusCheckRollup,updatedAt"
+  ]);
+  const prs = JSON.parse(raw);
+  return prs.filter((p) => !p.isDraft).map((p) => {
+    const ciStatus = summarizeCiStatus(p.statusCheckRollup);
+    const mergeable = String(p.mergeable ?? "UNKNOWN").toUpperCase();
+    const behindBy = mergeable === "CONFLICTING" || ciStatus === "FAILING" ? 0 : computeBehindBy(repoSlug, p.baseRefName, p.headRefName);
+    return {
+      number: p.number,
+      title: p.title,
+      headSha: p.headRefOid,
+      baseRef: p.baseRefName,
+      isDraft: false,
+      mergeable,
+      ciStatus,
+      behindBy,
+      updatedAt: p.updatedAt
+    };
+  });
 }
-function toolMayMutate(name, input) {
-  if (!name) return false;
-  if (MUTATING_FILE_TOOLS.has(name)) return true;
-  if (name === "Bash") return BASH_WRITE_VERB.test(String(input?.command ?? ""));
-  return false;
+function dispatchVerb(workflowFile, repoSlug, agentResponsibility, prNumber) {
+  return dispatchWorkflow(workflowFile, agentResponsibility, prNumber, repoSlug);
 }
-function stripAgentSecrets(env) {
-  const out = { ...env };
-  const raw = out.ALL_SECRETS;
-  delete out.ALL_SECRETS;
-  if (!raw) return out;
+function postRecommendation(prNumber, mention, message, agentResponsibilitySlug) {
+  const mentioned = mention ? `${mention} ${message}` : message;
+  const body = agentResponsibilitySlug ? `${mentioned}
+
+<!-- kody-agentResponsibility: ${agentResponsibilitySlug} -->` : mentioned;
   try {
-    const parsed = JSON.parse(raw);
-    for (const key of Object.keys(parsed)) {
-      if (!AGENT_KEEP_SECRETS.has(key)) delete out[key];
-    }
-  } catch {
+    gh(["pr", "comment", String(prNumber), "--body", body]);
+    return { ok: true };
+  } catch (err) {
+    return { ok: false, error: err instanceof Error ? err.message : String(err) };
   }
-  return out;
 }
-async function runAgent(opts) {
-  const ndjsonDir = opts.ndjsonDir ?? path7.join(opts.cwd, ".kody");
-  fs5.mkdirSync(ndjsonDir, { recursive: true });
-  const ndjsonPath = path7.join(ndjsonDir, "last-run.jsonl");
-  const env = stripAgentSecrets({
-    ...process.env,
-    SKIP_HOOKS: "1",
-    HUSKY: "0",
-    CI: process.env.CI ?? "1",
-    // MCP servers are spawned asynchronously by the SDK. With the default
-    // non-blocking behavior, the SDK announces its tool list at session
-    // init while servers are still in `pending`, so their tools never
-    // reach the model. Block until each MCP completes its handshake (or
-    // the timeout below elapses) so the tool list is complete on first
-    // turn.
-    MCP_CONNECTION_NONBLOCKING: process.env.MCP_CONNECTION_NONBLOCKING ?? "false",
-    MCP_TIMEOUT: process.env.MCP_TIMEOUT ?? "60000"
-  });
-  if (opts.litellmUrl) {
-    env.ANTHROPIC_BASE_URL = opts.litellmUrl;
-    env.ANTHROPIC_API_KEY = getAnthropicApiKeyOrDummy();
+function readLedger(label) {
+  const startTag = `<!-- ${label}:start -->`;
+  const endTag = `<!-- ${label}:end -->`;
+  try {
+    const raw = gh(["issue", "list", "--state", "open", "--label", label, "--limit", "5", "--json", "number,body"]);
+    const issues = JSON.parse(raw);
+    if (issues.length === 0) return { found: false, payload: null };
+    const issue = issues.sort((a, b) => a.number - b.number)[0];
+    const body = issue?.body ?? "";
+    const startIdx = body.indexOf(startTag);
+    const endIdx = body.indexOf(endTag);
+    if (startIdx === -1 || endIdx === -1 || endIdx <= startIdx) {
+      return { found: true, issueNumber: issue?.number, payload: null };
+    }
+    const between = body.slice(startIdx + startTag.length, endIdx);
+    const fenceMatch = between.match(/```json\s*([\s\S]*?)```/);
+    if (!fenceMatch) return { found: true, issueNumber: issue?.number, payload: null };
+    try {
+      return { found: true, issueNumber: issue?.number, payload: JSON.parse(fenceMatch[1]) };
+    } catch {
+      return { found: true, issueNumber: issue?.number, payload: null };
+    }
+  } catch (err) {
+    return { found: false, payload: { error: err instanceof Error ? err.message : String(err) } };
   }
-  const startedAt = Date.now();
-  const turnTimeoutMs = resolveTurnTimeoutMs(opts);
-  let outcome = "failed";
-  let outcomeKind = "generic_failed";
-  let errorMessage;
-  let tokens = { input: 0, output: 0, cacheRead: 0, cacheCreate: 0 };
-  let messageCount = 0;
-  let finalText = "";
-  let getSubmitted;
-  for (let attempt = 0; ; attempt++) {
-    let ndjsonWriteFailed = false;
-    let ndjsonWriteError;
-    const fullLog = fs5.createWriteStream(ndjsonPath, { flags: "w" });
-    fullLog.on("error", (err) => {
-      ndjsonWriteFailed = true;
-      ndjsonWriteError = err instanceof Error ? err.message : String(err);
+}
+function parseAgentResponsibilityTrustMode(rawJson, agentResponsibilitySlug) {
+  try {
+    const parsed = JSON.parse(rawJson);
+    return parsed?.agentResponsibilities?.[agentResponsibilitySlug]?.mode === "auto" ? "auto" : "ask";
+  } catch {
+    return "ask";
+  }
+}
+function defaultStateForRepoSlug(repoSlug) {
+  const [owner, repo] = repoSlug.split("/");
+  return { repo: `${owner}/kody-state`, path: repo ?? repoSlug };
+}
+function readAgentResponsibilityTrustMode(stateOrRepoSlug, repoSlugOrAgentResponsibilitySlug, maybeAgentResponsibilitySlug) {
+  const state = typeof stateOrRepoSlug === "string" ? void 0 : stateOrRepoSlug;
+  const repoSlug = typeof stateOrRepoSlug === "string" ? stateOrRepoSlug : repoSlugOrAgentResponsibilitySlug ?? "";
+  const agentResponsibilitySlug = typeof stateOrRepoSlug === "string" ? repoSlugOrAgentResponsibilitySlug : maybeAgentResponsibilitySlug;
+  if (!agentResponsibilitySlug) return "ask";
+  try {
+    const loaded = readStateText({ state: state ?? defaultStateForRepoSlug(repoSlug) }, void 0, TRUST_FILE_PATH);
+    return loaded ? parseAgentResponsibilityTrustMode(loaded.content, agentResponsibilitySlug) : "ask";
+  } catch {
+    return "ask";
+  }
+}
+function readThread(repoSlug, number, limit = 10) {
+  const meta = JSON.parse(gh(["api", `repos/${repoSlug}/issues/${number}`]));
+  const rawComments = JSON.parse(gh(["api", `repos/${repoSlug}/issues/${number}/comments?per_page=100`]));
+  const comments = rawComments.slice(-Math.max(1, limit)).map((c) => ({
+    author: c.user?.login ?? "?",
+    createdAt: c.created_at ?? "",
+    body: (c.body ?? "").slice(0, THREAD_BODY_MAX)
+  }));
+  return {
+    number,
+    title: meta.title ?? "",
+    state: meta.state ?? "",
+    labels: (meta.labels ?? []).map((l) => l.name ?? "").filter(Boolean),
+    comments
+  };
+}
+function readCheckRuns(repoSlug, ref, ignoreNames) {
+  const ghOptions = { preferRepoToken: true };
+  const sha = gh(["api", `repos/${repoSlug}/commits/${ref}`, "--jq", ".sha"], ghOptions).trim();
+  const raw = gh(
+    [
+      "api",
+      `repos/${repoSlug}/commits/${sha}/check-runs`,
+      "--paginate",
+      "--jq",
+      ".check_runs[] | {name, status, conclusion, details_url}"
+    ],
+    ghOptions
+  );
+  const ignore = new Set(ignoreNames.map((n) => n.toLowerCase()));
+  const checks = raw.split("\n").map((l) => l.trim()).filter(Boolean).map((l) => JSON.parse(l)).filter((c) => !ignore.has(String(c.name).toLowerCase()));
+  const failing = checks.filter((c) => CHECK_FAIL_CONCLUSIONS.has(String(c.conclusion ?? "").toUpperCase())).map((c) => ({ name: c.name, conclusion: String(c.conclusion), detailsUrl: c.details_url }));
+  const pending = checks.filter((c) => String(c.status).toLowerCase() !== "completed").map((c) => ({ name: c.name, status: c.status }));
+  const state = failing.length > 0 ? "RED" : pending.length > 0 ? "PENDING" : "GREEN";
+  return { sha, state, failing, pending };
+}
+function ensureIssue(repoSlug, key, title, body) {
+  const marker = trackMarker(key);
+  try {
+    const raw = gh(["issue", "list", "-R", repoSlug, "--state", "open", "--limit", "100", "--json", "number,body"]);
+    const issues = JSON.parse(raw);
+    const existing = issues.find((i) => (i.body ?? "").includes(marker));
+    if (existing) return { created: false, number: existing.number };
+    const url = gh(["issue", "create", "-R", repoSlug, "--title", title, "--body-file", "-"], {
+      input: `${body}
+
+${marker}`
     });
-    const resultTexts = [];
-    outcome = "failed";
-    outcomeKind = "generic_failed";
-    errorMessage = void 0;
-    tokens = { input: 0, output: 0, cacheRead: 0, cacheCreate: 0 };
-    messageCount = 0;
-    let sawMutatingTool = false;
-    let sawTerminalSuccess = false;
-    let sawLoginRequired = false;
-    let noWorkSuccess = false;
-    try {
-      const queryOptions = {
-        model: opts.model.model,
-        cwd: opts.cwd,
-        // Fresh array (never mutate the shared DEFAULT_ALLOWED_TOOLS const) so
-        // opt-in tools like fetch_repo can be appended below.
-        allowedTools: [...opts.allowedToolsOverride ?? DEFAULT_ALLOWED_TOOLS],
-        permissionMode: opts.permissionModeOverride ?? "acceptEdits",
-        env
+    const m = url.trim().match(/\/(\d+)\s*$/);
+    if (!m) return { error: `issue created but could not parse its number from: ${url}` };
+    return { created: true, number: Number(m[1]) };
+  } catch (err) {
+    return { error: err instanceof Error ? err.message : String(err) };
+  }
+}
+function ensureComment(repoSlug, issue, key, body) {
+  const marker = commentMarker(key);
+  try {
+    const raw = gh(["issue", "view", String(issue), "-R", repoSlug, "--json", "comments"]);
+    const parsed = JSON.parse(raw);
+    const already = (parsed.comments ?? []).some((c) => (c.body ?? "").includes(marker));
+    if (already) return { posted: false };
+    gh(["issue", "comment", String(issue), "-R", repoSlug, "--body-file", "-"], { input: `${body}
+
+${marker}` });
+    return { posted: true };
+  } catch (err) {
+    return { error: err instanceof Error ? err.message : String(err) };
+  }
+}
+function dispatchWorkflow(workflowFile, agentResponsibility, issueNumber, repoSlug) {
+  const expected = expectedDispatchTarget(agentResponsibility);
+  if (repoSlug && expected) {
+    const target = readDispatchTargetKind(repoSlug, issueNumber);
+    if (!target.ok) return target;
+    if (expected === "issue" && target.kind === "pr") {
+      return {
+        ok: false,
+        error: `refusing to dispatch ${agentResponsibility} on PR #${issueNumber}; dispatch the source issue or use a PR action`
       };
-      const mcpEntries = [];
-      if (opts.mcpServers && opts.mcpServers.length > 0) {
-        for (const s of opts.mcpServers) {
-          const cfg = { command: s.command };
-          if (s.args) cfg.args = s.args;
-          if (s.env) cfg.env = s.env;
-          mcpEntries.push([s.name, cfg]);
-        }
-      }
-      if (opts.enableVerifyTool && opts.verifyConfig) {
-        const { buildVerifyMcpServer: buildVerifyMcpServer2 } = await Promise.resolve().then(() => (init_verifyMcp(), verifyMcp_exports));
-        const verifyServer = buildVerifyMcpServer2({
-          config: opts.verifyConfig,
-          cwd: opts.cwd,
-          agentAction: opts.agentActionName ?? "agent",
-          maxAttempts: typeof opts.verifyToolMaxAttempts === "number" && opts.verifyToolMaxAttempts > 0 ? opts.verifyToolMaxAttempts : void 0
-        });
-        mcpEntries.push(["kody-verify", verifyServer]);
-      }
-      if (opts.enableSubmitTool) {
-        const { buildSubmitMcpServer: buildSubmitMcpServer2 } = await Promise.resolve().then(() => (init_submitMcp(), submitMcp_exports));
-        const submitHandle = buildSubmitMcpServer2();
-        getSubmitted = submitHandle.getSubmitted;
-        mcpEntries.push(["kody-submit", submitHandle.server]);
+    }
+    if (expected === "pr" && target.kind === "issue") {
+      return {
+        ok: false,
+        error: `refusing to dispatch ${agentResponsibility} on issue #${issueNumber}; expected a PR target`
+      };
+    }
+  }
+  try {
+    gh([
+      "workflow",
+      "run",
+      workflowFile,
+      "-f",
+      `agentResponsibility=${agentResponsibility}`,
+      "-f",
+      `issue_number=${issueNumber}`
+    ]);
+    return { ok: true };
+  } catch (err) {
+    return { ok: false, error: err instanceof Error ? err.message : String(err) };
+  }
+}
+function expectedDispatchTarget(agentResponsibility) {
+  const route = resolveAgentResponsibilityAction(agentResponsibility);
+  if (!route) return null;
+  const inputs = getProfileInputs(route.agentAction);
+  const numeric = inputs?.find((input) => input.type === "int" && input.required);
+  if (numeric?.name === "issue") return "issue";
+  if (numeric?.name === "pr") return "pr";
+  return null;
+}
+function readDispatchTargetKind(repoSlug, issueNumber) {
+  try {
+    const raw = gh(["api", `repos/${repoSlug}/issues/${issueNumber}`]);
+    const parsed = JSON.parse(raw);
+    return { ok: true, kind: parsed.pull_request ? "pr" : "issue" };
+  } catch (err) {
+    return {
+      ok: false,
+      error: `could not verify target #${issueNumber}: ${err instanceof Error ? err.message : String(err)}`
+    };
+  }
+}
+function isDispatchGated(agentResponsibility, mode) {
+  if (mode === "auto") return false;
+  if (agentResponsibility && GATE_EXEMPT_DUTIES.has(agentResponsibility)) return false;
+  return true;
+}
+function trustRefusal(agentResponsibilitySlug) {
+  return `Not dispatched: agentResponsibility \`${agentResponsibilitySlug ?? "?"}\` is in ASK mode (not trusted for autonomy). Do NOT retry the dispatch. Instead notify the operator (use recommend_to_operator, or rely on the tracking issue that already @-mentions them), then submit_state. To let this agentResponsibility act on its own, grant it Auto on the dashboard Trust page.`;
+}
+function agentResponsibilityToolDefinitions(opts) {
+  const workflowFile = opts.workflowFile ?? "kody.yml";
+  const listTool = {
+    name: "list_prs_to_repair",
+    description: "Return open non-draft PRs with the signals you need to pick a repair: number, title, headSha, baseRef, mergeable (CONFLICTING/MERGEABLE/UNKNOWN), ciStatus (PASSING/FAILING/RUNNING/UNKNOWN), behindBy (commits behind base; 0 for PRs that already match conflicts or CI-failure rules), updatedAt. Drafts are excluded. One call returns everything \u2014 do not iterate or paginate.",
+    inputSchema: {},
+    handler: async () => {
+      const candidates = listRepairCandidates(opts.repoSlug);
+      return {
+        content: [
+          {
+            type: "text",
+            text: JSON.stringify({ prs: candidates }, null, 2)
+          }
+        ]
+      };
+    }
+  };
+  const makeDispatch = (verb, describe) => ({
+    name: `${verb.replace("-", "_")}_pr`,
+    description: describe,
+    inputSchema: {
+      pr: z2.number().int().positive().describe("PR number to repair.")
+    },
+    handler: async (args) => {
+      const pr = Number(args.pr);
+      if (isDispatchGated(verb, readAgentResponsibilityTrustMode(opts.state, opts.repoSlug, opts.agentResponsibilitySlug))) {
+        return { content: [{ type: "text", text: trustRefusal(opts.agentResponsibilitySlug) }] };
       }
-      if (opts.enableAgentResponsibilityTool) {
-        const { buildAgentResponsibilityMcpServer: buildAgentResponsibilityMcpServer2 } = await Promise.resolve().then(() => (init_agent_responsibilityMcp(), agent_responsibilityMcp_exports));
-        if (!opts.dutyRepoSlug) {
-          throw new Error(
-            "enableAgentResponsibilityTool requires dutyRepoSlug (owner/name) \u2014 set kody.config.json github.{owner,repo} or GITHUB_REPOSITORY env var"
-          );
-        }
-        const dutyHandle = buildAgentResponsibilityMcpServer2({
-          repoSlug: opts.dutyRepoSlug,
-          state: opts.agentResponsibilityState,
-          operatorMention: opts.agentResponsibilityOperatorMention ?? "",
-          ...opts.agentResponsibilitySlug ? { agentResponsibilitySlug: opts.agentResponsibilitySlug } : {}
-        });
-        mcpEntries.push(["kody-agentResponsibility", dutyHandle.server]);
-      }
-      if (opts.enableFetchRepoTool && opts.reposRoot) {
-        const { buildFetchRepoMcpServer: buildFetchRepoMcpServer2 } = await Promise.resolve().then(() => (init_fetchRepoMcp(), fetchRepoMcp_exports));
-        const fetchServer = buildFetchRepoMcpServer2({
-          reposRoot: opts.reposRoot,
-          repoToken: opts.repoToken
-        });
-        mcpEntries.push(["kody-fetch-repo", fetchServer]);
-        queryOptions.allowedTools.push("mcp__kody-fetch-repo__fetch_repo");
-        queryOptions.additionalDirectories = [opts.reposRoot];
-      }
-      if (mcpEntries.length > 0) {
-        queryOptions.mcpServers = Object.fromEntries(mcpEntries);
-      }
-      if (opts.pluginPaths && opts.pluginPaths.length > 0) {
-        queryOptions.plugins = opts.pluginPaths.map((p) => ({ type: "local", path: p }));
-      }
-      if (opts.agents && Object.keys(opts.agents).length > 0) {
-        queryOptions.agents = opts.agents;
-      }
-      if (typeof opts.maxTurns === "number" && opts.maxTurns > 0) {
-        queryOptions.maxTurns = opts.maxTurns;
-      }
-      if (opts.reasoningEffort !== void 0 && opts.reasoningEffort !== null) {
-        if (opts.reasoningEffort === "off") {
-        } else {
-          const budget = REASONING_BUDGETS[opts.reasoningEffort];
-          if (budget) queryOptions.maxThinkingTokens = budget;
-        }
-      } else if (typeof opts.maxThinkingTokens === "number" && opts.maxThinkingTokens > 0) {
-        queryOptions.maxThinkingTokens = opts.maxThinkingTokens;
-      }
-      if (typeof opts.systemPromptAppend === "string" && opts.systemPromptAppend.length > 0) {
-        const systemPrompt = {
-          type: "preset",
-          preset: "claude_code",
-          append: opts.systemPromptAppend
-        };
-        if (opts.cacheable) systemPrompt.excludeDynamicSections = true;
-        queryOptions.systemPrompt = systemPrompt;
-      } else if (opts.cacheable) {
-        queryOptions.systemPrompt = {
-          type: "preset",
-          preset: "claude_code",
-          excludeDynamicSections: true
-        };
-      }
-      queryOptions.settingSources = opts.settingSources ?? ["project", "local"];
-      const stableBinary = ensureStableClaudeBinary();
-      if (stableBinary) {
-        queryOptions.pathToClaudeCodeExecutable = stableBinary;
-      }
-      const result = query({
-        prompt: opts.prompt,
-        // biome-ignore lint/suspicious/noExplicitAny: SDK options type is narrow; mcpServers is runtime-passthrough.
-        options: queryOptions
-      });
-      const iterator = typeof result[Symbol.asyncIterator] === "function" ? result[Symbol.asyncIterator]() : result;
-      while (true) {
-        const nextPromise = iterator.next();
-        let timedOut = false;
-        let timer;
-        let next;
-        if (turnTimeoutMs > 0) {
-          const timeoutPromise = new Promise((resolve7) => {
-            timer = setTimeout(() => {
-              timedOut = true;
-              resolve7({ done: true, value: void 0 });
-            }, turnTimeoutMs);
-          });
-          next = await Promise.race([nextPromise, timeoutPromise]);
-          if (timer) clearTimeout(timer);
-        } else {
-          next = await nextPromise;
-        }
-        if (timedOut) {
-          outcome = "failed";
-          outcomeKind = "stalled";
-          errorMessage = `agent stalled: no SDK message in ${Math.round(turnTimeoutMs / 1e3)}s`;
-          if (typeof iterator.return === "function") {
-            try {
-              await iterator.return(void 0);
-            } catch {
-            }
-          }
-          break;
-        }
-        if (next.done) break;
-        const msg = next.value;
-        messageCount++;
-        if (!ndjsonWriteFailed) {
-          try {
-            fullLog.write(`${JSON.stringify(msg)}
-`);
-          } catch (e) {
-            ndjsonWriteFailed = true;
-            ndjsonWriteError = e instanceof Error ? e.message : String(e);
-          }
-        }
-        const line = renderEvent(msg, { verbose: opts.verbose, quiet: opts.quiet });
-        if (line) {
-          if (isClaudeLoginRequiredText(line)) sawLoginRequired = true;
-          process.stdout.write(`${line}
-`);
-        }
-        const m = msg;
-        if (opts.onProgress) {
-          const blocks = m.message?.content ?? [];
-          for (const block of blocks) {
-            try {
-              if (block.type === "thinking") {
-                const t = block.thinking;
-                if (typeof t === "string" && t.length > 0) {
-                  await opts.onProgress({ kind: "thinking", thinking: t });
-                }
-              } else if (block.type === "tool_use") {
-                const b = block;
-                await opts.onProgress({
-                  kind: "tool_use",
-                  name: b.name ?? "tool",
-                  input: b.input,
-                  id: b.id
-                });
-              } else if (block.type === "tool_result") {
-                const b = block;
-                const content = typeof b.content === "string" ? b.content : (() => {
-                  try {
-                    return JSON.stringify(b.content);
-                  } catch {
-                    return "";
-                  }
-                })();
-                await opts.onProgress({
-                  kind: "tool_result",
-                  toolUseId: b.tool_use_id,
-                  content,
-                  isError: b.is_error
-                });
-              } else if (block.type === "text") {
-                const b = block;
-                if (typeof b.text === "string" && b.text.length > 0) {
-                  await opts.onProgress({ kind: "text", text: b.text });
-                }
-              }
-            } catch {
-            }
-          }
-        }
-        const usage = m.usage;
-        if (usage && typeof usage === "object") {
-          const i = Number(usage.input_tokens ?? 0);
-          const o = Number(usage.output_tokens ?? 0);
-          const cr = Number(usage.cache_read_input_tokens ?? 0);
-          const cc = Number(usage.cache_creation_input_tokens ?? 0);
-          if (Number.isFinite(i)) tokens.input += i;
-          if (Number.isFinite(o)) tokens.output += o;
-          if (Number.isFinite(cr)) tokens.cacheRead += cr;
-          if (Number.isFinite(cc)) tokens.cacheCreate += cc;
-        }
-        if (!sawMutatingTool) {
-          const blocks = m.message?.content ?? [];
-          for (const block of blocks) {
-            if (block.type === "tool_use") {
-              const b = block;
-              if (toolMayMutate(b.name, b.input)) {
-                sawMutatingTool = true;
-                break;
-              }
-            }
-          }
-        }
-        if (m.type === "result") {
-          if (m.subtype === "success") {
-            outcome = "completed";
-            outcomeKind = "ok";
-            sawTerminalSuccess = true;
-            const text = (typeof m.result === "string" ? m.result : "").trim();
-            if (isClaudeLoginRequiredText(text)) sawLoginRequired = true;
-            if (text) resultTexts.push(text);
-          } else {
-            outcome = "failed";
-            outcomeKind = classifySubtype(m.subtype);
-            errorMessage = `result subtype: ${m.subtype ?? "unknown"}`;
-          }
-        }
-      }
-    } catch (e) {
-      if (sawTerminalSuccess) {
-        errorMessage = e instanceof Error ? e.message : String(e);
-      } else {
-        outcome = "failed";
-        outcomeKind = "model_error";
-        errorMessage = e instanceof Error ? e.message : String(e);
-      }
-    } finally {
-      try {
-        fullLog.end();
-      } catch {
-      }
-    }
-    if (ndjsonWriteFailed) {
-      process.stderr.write(
-        `[kody agent] NDJSON write failed (post-mortem may be incomplete): ${ndjsonWriteError ?? "unknown error"}
-`
-      );
+      const result = dispatchVerb(workflowFile, opts.repoSlug, verb, pr);
+      const text = result.ok ? `Dispatched \`${verb}\` on PR #${pr}. The repair runs in its own workflow_dispatch \u2014 wait for the next tick to see the new headSha.` : `Dispatch failed for \`${verb}\` on PR #${pr}: ${result.error}`;
+      return { content: [{ type: "text", text }] };
     }
-    finalText = resultTexts.join("\n\n---\n\n");
-    if (outcome === "completed" && sawLoginRequired) {
-      outcome = "failed";
-      outcomeKind = "model_error";
-      errorMessage = "Claude Code reported it is not logged in; refusing to mark agent run successful";
+  });
+  const syncTool = makeDispatch(
+    "sync",
+    "Bring a stale PR up to date with its base branch (merges base \u2192 head + pushes). Use when behindBy > 10 AND mergeable !== CONFLICTING AND ciStatus !== FAILING. Returns immediately \u2014 the actual merge runs in a separate workflow."
+  );
+  const fixCiTool = makeDispatch(
+    "fix-ci",
+    "Repair a PR whose CI is failing. Use when ciStatus === FAILING. The repair runs in a separate workflow."
+  );
+  const resolveTool = makeDispatch(
+    "resolve",
+    "Resolve merge conflicts on a PR. Use when mergeable === CONFLICTING. The repair runs in a separate workflow."
+  );
+  const recommendTool = {
+    name: "recommend_to_operator",
+    description: "Post ONE comment on a PR with the operator @-mention prepended. Use this when a agentResponsibility is in ASK mode and you want the operator to confirm via the dashboard inbox. The mention handle is substituted from kody.config.json `github.operators` \u2014 do not type it yourself.",
+    inputSchema: {
+      pr: z2.number().int().positive().describe("PR number to comment on."),
+      body: z2.string().min(1).describe("Comment body (markdown). Do not include the operator mention \u2014 the engine prepends it.")
+    },
+    handler: async (args) => {
+      const pr = Number(args.pr);
+      const body = String(args.body ?? "");
+      const result = postRecommendation(pr, opts.operatorMention, body, opts.agentResponsibilitySlug);
+      const text = result.ok ? `Recommendation posted on PR #${pr}.` : `Recommendation failed on PR #${pr}: ${result.error}`;
+      return { content: [{ type: "text", text }] };
     }
-    if (outcome === "completed" && !sawMutatingTool) {
-      const backendDead = opts.isBackendHealthy ? !await opts.isBackendHealthy() : false;
-      const zeroOutput = tokens.output === 0 && finalText === "";
-      if (backendDead || zeroOutput) {
-        outcome = "failed";
-        outcomeKind = "model_error";
-        noWorkSuccess = true;
-        errorMessage = errorMessage ?? (backendDead ? "model backend unreachable after a reported success \u2014 proxy crashed mid-request (hollow success)" : "session reported success but produced no model output (0 output tokens) \u2014 backend likely unreachable");
-      }
+  };
+  const ledgerTool = {
+    name: "read_ledger",
+    description: "Read any sentinel-fenced JSON manifest stored on a labeled issue. Returns `{found, issueNumber, payload}` where payload is the parsed JSON between `<!-- <label>:start -->` and `<!-- <label>:end -->` sentinels.",
+    inputSchema: {
+      label: z2.string().min(1).describe("GitHub issue label that identifies the manifest issue.")
+    },
+    handler: async (args) => {
+      const label = String(args.label ?? "");
+      const result = readLedger(label);
+      return { content: [{ type: "text", text: JSON.stringify(result, null, 2) }] };
     }
-    const shouldRetry = outcome === "failed" && attempt < MAX_CONNECTION_RETRIES && !sawMutatingTool && (isTransientConnectionError(errorMessage) || noWorkSuccess);
-    if (!shouldRetry) break;
-    const delayMs = CONNECTION_RETRY_BASE_MS * 2 ** attempt;
-    process.stderr.write(
-      `[kody agent] transient connection error (attempt ${attempt + 1}/${MAX_CONNECTION_RETRIES + 1}); retrying in ${Math.round(delayMs / 1e3)}s: ${errorMessage}
-`
-    );
-    if (opts.ensureBackend) {
-      try {
-        await opts.ensureBackend();
-      } catch (e) {
-        process.stderr.write(`[kody agent] backend recovery failed: ${e instanceof Error ? e.message : String(e)}
-`);
+  };
+  const checkRunsTool = {
+    name: "read_check_runs",
+    description: "Read CI for a branch or commit ref (e.g. 'dev'). Returns {sha, state, failing:[{name,conclusion,detailsUrl}], pending:[{name,status}]}. state is RED (\u22651 check has a terminal-failure conclusion: failure/timed_out/startup_failure/action_required), PENDING (none failed but some still running), or GREEN (all completed, none failed). Kody's own job check-runs (run/kody/agent-responsibility-tick/\u2026) are excluded by default. This reads the commit's authoritative check-runs \u2014 use it instead of guessing CI health from a run list.",
+    inputSchema: {
+      ref: z2.string().min(1).describe("Branch name or commit SHA to read CI for (e.g. 'dev')."),
+      ignoreNames: z2.array(z2.string()).optional().describe("Check names to exclude (default: Kody's own job names).")
+    },
+    handler: async (args) => {
+      const ref = String(args.ref ?? "");
+      const ignoreNames = Array.isArray(args.ignoreNames) ? args.ignoreNames : DEFAULT_IGNORE_CHECKS;
+      const result = readCheckRuns(opts.repoSlug, ref, ignoreNames);
+      return { content: [{ type: "text", text: JSON.stringify(result, null, 2) }] };
+    }
+  };
+  const readThreadTool = {
+    name: "read_thread",
+    description: "Read an issue or PR's recent comments + labels + title/state. Returns {number, title, state, labels:[...], comments:[{author, createdAt, body}]} (newest last, body truncated). Use this to read a verdict a dispatched check posted back \u2014 e.g. qa-engineer's report or ui-review's PASS/CONCERNS/FAIL \u2014 on a later tick. Read-only; works for both issues AND PRs.",
+    inputSchema: {
+      number: z2.number().int().positive().describe("Issue or PR number to read."),
+      limit: z2.number().int().positive().optional().describe("Max recent comments to return (default 10).")
+    },
+    handler: async (args) => {
+      const number = Number(args.number);
+      const limit = args.limit ? Number(args.limit) : 10;
+      const result = readThread(opts.repoSlug, number, limit);
+      return { content: [{ type: "text", text: JSON.stringify(result, null, 2) }] };
+    }
+  };
+  const ensureIssueTool = {
+    name: "ensure_issue",
+    description: "Idempotently ensure ONE open tracking issue exists for `key`. Searches OPEN issues (issues API, not the laggy search index) for `key`'s hidden marker; if found, returns {created:false, number} and creates NOTHING; otherwise creates the issue (title + body, marker appended) and returns {created:true, number}. This is the anti-duplication primitive: use one stable `key` per recurring finding so re-ticks reuse the same issue. Only take follow-up actions (dispatch/comment) when created===true.",
+    inputSchema: {
+      key: z2.string().min(1).describe(
+        "Stable dedup identity for this finding (e.g. 'dev-ci-red', 'docs-drift:<feature>'). Same key across ticks = same issue."
+      ),
+      title: z2.string().min(1).describe("Issue title (used only on first creation)."),
+      body: z2.string().min(1).describe(
+        "Issue body markdown (used only on first creation). Include the operator mention verbatim if the agentResponsibility body has one."
+      )
+    },
+    handler: async (args) => {
+      const key = String(args.key ?? "");
+      const title = String(args.title ?? "");
+      const body = String(args.body ?? "");
+      const result = ensureIssue(opts.repoSlug, key, title, body);
+      return { content: [{ type: "text", text: JSON.stringify(result, null, 2) }] };
+    }
+  };
+  const ensureCommentTool = {
+    name: "ensure_comment",
+    description: "Idempotently post ONE comment on an issue for `key`. If a comment carrying `key`'s marker already exists on the issue, returns {posted:false}; otherwise posts the comment (marker appended) and returns {posted:true}. Use for a notify/audit comment that must appear exactly once.",
+    inputSchema: {
+      issue: z2.number().int().positive().describe("Issue number to comment on."),
+      key: z2.string().min(1).describe("Stable dedup identity for this comment (e.g. 'dev-ci-red:dispatched')."),
+      body: z2.string().min(1).describe("Comment body markdown.")
+    },
+    handler: async (args) => {
+      const issue = Number(args.issue);
+      const key = String(args.key ?? "");
+      const body = String(args.body ?? "");
+      const result = ensureComment(opts.repoSlug, issue, key, body);
+      return { content: [{ type: "text", text: JSON.stringify(result, null, 2) }] };
+    }
+  };
+  const dispatchTool = {
+    name: "dispatch_workflow",
+    description: "Dispatch a kody.yml workflow_dispatch run for a agentResponsibility action against an issue (the cross-run bot\u2192engine path; a bot `@kody` comment would be dropped). E.g. dispatch_workflow({agentResponsibility:'run', issueNumber:<n>}) opens a fix PR from a tracking issue. Returns {ok} or {ok:false,error}.",
+    inputSchema: {
+      agentResponsibility: z2.string().min(1).optional().describe("AgentResponsibility action to run (e.g. 'run')."),
+      agentAction: z2.string().min(1).optional().describe("Deprecated alias for agentResponsibility."),
+      issueNumber: z2.number().int().positive().describe("Issue (or PR) number forwarded as issue_number.")
+    },
+    handler: async (args) => {
+      const agentResponsibility = String(args.agentResponsibility ?? args.agentAction ?? "");
+      const issueNumber = Number(args.issueNumber);
+      if (isDispatchGated(
+        agentResponsibility,
+        readAgentResponsibilityTrustMode(opts.state, opts.repoSlug, opts.agentResponsibilitySlug)
+      )) {
+        return { content: [{ type: "text", text: trustRefusal(opts.agentResponsibilitySlug) }] };
       }
+      const result = dispatchWorkflow(workflowFile, agentResponsibility, issueNumber, opts.repoSlug);
+      const text = result.ok ? `Dispatched agentResponsibility \`${agentResponsibility}\` on #${issueNumber} via workflow_dispatch.` : `Dispatch failed for agentResponsibility \`${agentResponsibility}\` on #${issueNumber}: ${result.error}`;
+      return { content: [{ type: "text", text }] };
     }
-    await new Promise((r) => setTimeout(r, delayMs));
-  }
-  const submittedState = getSubmitted?.();
-  return {
-    outcome,
-    outcomeKind,
-    finalText,
-    ...submittedState ? { submittedState } : {},
-    error: errorMessage,
-    ndjsonPath,
-    durationMs: Date.now() - startedAt,
-    tokens,
-    messageCount
   };
+  return [
+    listTool,
+    syncTool,
+    fixCiTool,
+    resolveTool,
+    recommendTool,
+    ledgerTool,
+    checkRunsTool,
+    readThreadTool,
+    ensureIssueTool,
+    ensureCommentTool,
+    dispatchTool
+  ];
 }
-var DEFAULT_ALLOWED_TOOLS, DEFAULT_TURN_TIMEOUT_MS, MAX_CONNECTION_RETRIES, CONNECTION_RETRY_BASE_MS, MUTATING_FILE_TOOLS, BASH_WRITE_VERB, AGENT_KEEP_SECRETS;
-var init_agent = __esm({
-  "src/agent.ts"() {
+function buildAgentResponsibilityMcpServer(opts) {
+  const definitions = agentResponsibilityToolDefinitions(opts);
+  const tools = definitions.map(
+    (def) => tool3(
+      def.name,
+      def.description,
+      def.inputSchema,
+      async (args) => def.handler(args)
+    )
+  );
+  const server = createSdkMcpServer3({
+    name: "kody-agentResponsibility",
+    version: "0.1.0",
+    tools
+  });
+  return { server };
+}
+var FAIL_CONCLUSIONS, RUNNING_STATUSES, TRUST_FILE_PATH, THREAD_BODY_MAX, CHECK_FAIL_CONCLUSIONS, DEFAULT_IGNORE_CHECKS, trackMarker, commentMarker, GATE_EXEMPT_DUTIES, AGENT_RESPONSIBILITY_MCP_TOOL_NAMES;
+var init_agent_responsibilityMcp = __esm({
+  "src/agent-responsibilityMcp.ts"() {
     "use strict";
-    init_claudeBinary();
-    init_config();
-    init_format();
-    DEFAULT_ALLOWED_TOOLS = ["Bash", "Edit", "Read", "Write", "Glob", "Grep"];
-    DEFAULT_TURN_TIMEOUT_MS = 6e5;
-    MAX_CONNECTION_RETRIES = 2;
-    CONNECTION_RETRY_BASE_MS = 2e3;
-    MUTATING_FILE_TOOLS = /* @__PURE__ */ new Set(["Edit", "Write", "MultiEdit", "NotebookEdit"]);
-    BASH_WRITE_VERB = /\b(git\s+(commit|push|merge|rebase|tag|reset|cherry-pick)|gh\s+(pr|issue|release)\s+(create|comment|edit|close|merge|review|reopen)|gh\s+api\b[^|&]*-X\s*(POST|PUT|PATCH|DELETE)|npm\s+publish)\b/i;
-    AGENT_KEEP_SECRETS = /* @__PURE__ */ new Set([
-      "ANTHROPIC_API_KEY",
-      "ANTHROPIC_AUTH_TOKEN",
-      "ANTHROPIC_BASE_URL",
-      "GH_TOKEN",
-      "GITHUB_TOKEN"
-    ]);
+    init_issue();
+    init_registry();
+    init_stateRepo();
+    FAIL_CONCLUSIONS = /* @__PURE__ */ new Set(["FAILURE", "TIMED_OUT", "ACTION_REQUIRED", "STARTUP_FAILURE", "CANCELLED"]);
+    RUNNING_STATUSES = /* @__PURE__ */ new Set(["IN_PROGRESS", "QUEUED", "PENDING", "WAITING", "REQUESTED"]);
+    TRUST_FILE_PATH = "state/trust.json";
+    THREAD_BODY_MAX = 4e3;
+    CHECK_FAIL_CONCLUSIONS = /* @__PURE__ */ new Set(["FAILURE", "TIMED_OUT", "STARTUP_FAILURE", "ACTION_REQUIRED"]);
+    DEFAULT_IGNORE_CHECKS = ["run", "kody", "agent-responsibility-tick", "agent-ask", "chat"];
+    trackMarker = (key) => `<!-- kody-track:${key} -->`;
+    commentMarker = (key) => `<!-- kody-track-comment:${key} -->`;
+    GATE_EXEMPT_DUTIES = /* @__PURE__ */ new Set(["qa-engineer", "ui-review"]);
+    AGENT_RESPONSIBILITY_MCP_TOOL_NAMES = [
+      "list_prs_to_repair",
+      "sync_pr",
+      "fix_ci_pr",
+      "resolve_pr",
+      "recommend_to_operator",
+      "read_ledger",
+      "read_check_runs",
+      "read_thread",
+      "ensure_issue",
+      "ensure_comment",
+      "dispatch_workflow"
+    ];
   }
 });
 
-// src/agent-responsibilityFolders.ts
-import * as fs6 from "fs";
-import * as path8 from "path";
-function listAgentResponsibilityFolderSlugs(absDir) {
-  if (!fs6.existsSync(absDir)) return [];
-  let entries;
-  try {
-    entries = fs6.readdirSync(absDir, { withFileTypes: true });
-  } catch {
-    return [];
+// src/repoWorkspace.ts
+import { spawn as spawn2, spawnSync } from "child_process";
+import * as fs7 from "fs";
+import * as path9 from "path";
+async function resolveAndClone(reposRoot, repo, repoToken, cloneRepo) {
+  const name = repo?.trim();
+  if (!name || !REPO_RE.test(name)) return null;
+  const root = path9.resolve(reposRoot);
+  const dir = path9.resolve(root, name);
+  if (dir !== root && !dir.startsWith(root + path9.sep)) return null;
+  if (fs7.existsSync(path9.join(dir, ".git"))) return dir;
+  const inflight = repoClones.get(dir);
+  if (inflight) {
+    await inflight;
+    return dir;
   }
-  return entries.filter((e) => e.isDirectory() && !e.name.startsWith("_") && !e.name.startsWith(".")).filter((e) => isAgentResponsibilityFolder(path8.join(absDir, e.name))).map((e) => e.name).sort();
+  const p = cloneRepo(name, repoToken, dir).finally(() => {
+    if (repoClones.get(dir) === p) repoClones.delete(dir);
+  });
+  repoClones.set(dir, p);
+  await p;
+  return dir;
 }
-function isAgentResponsibilityFolder(dir) {
-  return fs6.existsSync(path8.join(dir, AGENT_RESPONSIBILITY_PROFILE_FILE)) && fs6.existsSync(path8.join(dir, AGENT_RESPONSIBILITY_BODY_FILE));
+async function ensureRepoCwd(opts) {
+  const dir = await resolveAndClone(opts.reposRoot, opts.repo, opts.repoToken, opts.cloneRepo);
+  return dir ?? opts.baseCwd;
 }
-function readAgentResponsibilityFolder(root, slug2) {
-  const dir = path8.join(root, slug2);
-  const profilePath = path8.join(dir, AGENT_RESPONSIBILITY_PROFILE_FILE);
-  const bodyPath = path8.join(dir, AGENT_RESPONSIBILITY_BODY_FILE);
-  if (!fs6.existsSync(profilePath) || !fs6.statSync(profilePath).isFile()) return null;
-  if (!fs6.existsSync(bodyPath) || !fs6.statSync(bodyPath).isFile()) return null;
-  try {
-    const rawProfile = JSON.parse(fs6.readFileSync(profilePath, "utf-8"));
-    const rawBody = fs6.readFileSync(bodyPath, "utf-8");
-    const { title, body } = parseAgentResponsibilityBody(rawBody, slug2);
-    return {
-      slug: slug2,
-      dir,
-      profilePath,
-      bodyPath,
-      title,
-      body,
-      rawBody,
-      config: parseAgentResponsibilityConfig(rawProfile),
-      rawProfile
-    };
-  } catch {
-    return null;
+async function fetchRepo(opts) {
+  const dir = await resolveAndClone(opts.reposRoot, opts.repo, opts.repoToken, opts.cloneRepo ?? defaultCloneRepo);
+  if (!dir) {
+    throw new Error(`invalid repo "${opts.repo}" \u2014 expected "owner/name" with no path escapes`);
   }
+  return dir;
 }
-function parseAgentResponsibilityConfig(raw) {
-  const tools = stringList(raw.tools ?? raw.agentResponsibilityTools);
-  return {
-    action: stringField(raw.action),
-    agentAction: stringField(raw.agentAction),
-    tickScript: stringField(raw.tickScript),
-    disabled: typeof raw.disabled === "boolean" ? raw.disabled : void 0,
-    agent: stringField(raw.agent),
-    mentions: stringList(raw.mentions).map((m) => m.replace(/^@/, "")),
-    tools,
-    agentActions: stringList(raw.agentActions),
-    capabilityKind: capabilityKindField(raw.capabilityKind),
-    describe: stringField(raw.describe),
-    stage: stringField(raw.stage),
-    readsFrom: stringList(raw.readsFrom ?? raw.reads_from),
-    writesTo: stringList(raw.writesTo ?? raw.writes_to)
-  };
-}
-function parseAgentResponsibilityBody(raw, slug2) {
-  const trimmed = raw.trim();
-  const firstLine2 = trimmed.split("\n", 1)[0] ?? "";
-  const h1 = /^#\s+(.+?)\s*$/.exec(firstLine2);
-  const title = h1 ? h1[1].trim() : humanizeSlug(slug2);
-  const body = stripLeadingH1(raw);
-  return { title, body };
-}
-function stripLeadingH1(raw) {
-  const lines = raw.replace(/^\uFEFF/, "").split("\n");
-  let i = 0;
-  for (; ; ) {
-    while (i < lines.length && lines[i].trim() === "") i++;
-    if (i < lines.length && /^#\s+.+/.test(lines[i])) i++;
-    else break;
-  }
-  return lines.slice(i).join("\n");
-}
-function humanizeSlug(slug2) {
-  return slug2.split(/[-_]+/).filter(Boolean).map((part) => part[0].toUpperCase() + part.slice(1)).join(" ");
-}
-function stringField(value) {
-  return typeof value === "string" && value.trim().length > 0 ? value.trim() : void 0;
-}
-function stringList(value) {
-  if (Array.isArray(value)) {
-    return value.map((v) => String(v).trim()).filter(Boolean);
-  }
-  if (typeof value === "string") {
-    return value.split(",").map((v) => v.trim()).filter(Boolean);
-  }
-  return [];
-}
-function capabilityKindField(value) {
-  if (value === "observe" || value === "act" || value === "verify") return value;
-  return void 0;
-}
-var AGENT_RESPONSIBILITY_PROFILE_FILE, AGENT_RESPONSIBILITY_BODY_FILE;
-var init_agent_responsibilityFolders = __esm({
-  "src/agent-responsibilityFolders.ts"() {
+var REPO_RE, repoClones, defaultCloneRepo;
+var init_repoWorkspace = __esm({
+  "src/repoWorkspace.ts"() {
     "use strict";
-    AGENT_RESPONSIBILITY_PROFILE_FILE = "profile.json";
-    AGENT_RESPONSIBILITY_BODY_FILE = "agent-responsibility.md";
+    REPO_RE = /^[A-Za-z0-9_.-]+\/[A-Za-z0-9_.-]+$/;
+    repoClones = /* @__PURE__ */ new Map();
+    defaultCloneRepo = (repo, token, dir) => {
+      fs7.mkdirSync(path9.dirname(dir), { recursive: true });
+      const authUrl = token ? `https://x-access-token:${token}@github.com/${repo}.git` : `https://github.com/${repo}.git`;
+      return new Promise((resolve7, reject) => {
+        const child = spawn2("git", ["clone", "--depth=1", authUrl, dir], {
+          stdio: "inherit"
+        });
+        child.on("exit", (code) => {
+          if (code !== 0) {
+            reject(new Error(`git clone ${repo} failed (exit ${code})`));
+            return;
+          }
+          try {
+            const name = process.env.GIT_AUTHOR_NAME ?? "Kody Bot";
+            const email = process.env.GIT_AUTHOR_EMAIL ?? "kody-bot@users.noreply.github.com";
+            spawnSync("git", ["-C", dir, "config", "user.name", name]);
+            spawnSync("git", ["-C", dir, "config", "user.email", email]);
+          } catch {
+          }
+          resolve7();
+        });
+        child.on("error", reject);
+      });
+    };
   }
 });
 
-// src/companyStore.ts
-import { execFileSync as execFileSync2 } from "child_process";
-import * as crypto3 from "crypto";
-import * as fs7 from "fs";
-import * as os3 from "os";
-import * as path9 from "path";
-function getCompanyStoreRoot() {
-  const store = resolveCompanyStore();
-  if (!store) return null;
-  const key = `${store.repo}#${store.ref}`;
-  if (memo?.key === key) return memo.root;
-  const root = fetchCompanyStore(store.repo, store.ref);
-  memo = { key, root };
-  return root;
-}
-function getCompanyStoreAssetRoot(kind) {
-  const root = getCompanyStoreRoot();
-  if (!root) return null;
-  const folderByKind = {
-    agentResponsibilities: "agent-responsibilities",
-    agentActions: "agent-actions",
-    goals: "goals",
-    agents: "agents"
+// src/fetchRepoMcp.ts
+var fetchRepoMcp_exports = {};
+__export(fetchRepoMcp_exports, {
+  buildFetchRepoMcpServer: () => buildFetchRepoMcpServer,
+  fetchRepoToolDefinition: () => fetchRepoToolDefinition
+});
+import { createSdkMcpServer as createSdkMcpServer4, tool as tool4 } from "@anthropic-ai/claude-agent-sdk";
+import { z as z3 } from "zod";
+function fetchRepoToolDefinition(opts) {
+  return {
+    name: "fetch_repo",
+    description: DESCRIPTION3,
+    inputSchema: INPUT_SCHEMA3,
+    handler: async (args) => {
+      const repo = String(args.repo ?? "").trim();
+      try {
+        const dir = await fetchRepo({
+          reposRoot: opts.reposRoot,
+          repo,
+          repoToken: opts.repoToken
+        });
+        return {
+          content: [
+            {
+              type: "text",
+              text: `Cloned ${repo} \u2192 ${dir}
+Use Read/Grep/Glob/Bash at that absolute path to explore it. It now lives in your workspace alongside any other repos you've fetched.`
+            }
+          ]
+        };
+      } catch (err) {
+        const msg = err instanceof Error ? err.message : String(err);
+        return {
+          content: [{ type: "text", text: `Could not fetch ${repo}: ${msg}` }],
+          isError: true
+        };
+      }
+    }
   };
-  return path9.join(root, ".kody", folderByKind[kind]);
 }
-function resolveCompanyStore() {
-  const envStore = process.env[STORE_ENV]?.trim();
-  if (!envStore && process.env.VITEST) return null;
-  const repo = envStore || DEFAULT_COMPANY_STORE;
-  if (repo === "0" || repo === "false" || repo === "off") return null;
-  const ref = process.env[REF_ENV]?.trim() || DEFAULT_COMPANY_STORE_REF;
-  if (!ref) return null;
-  return { repo, ref };
+function buildFetchRepoMcpServer(opts) {
+  const def = fetchRepoToolDefinition(opts);
+  const fetchTool = tool4(def.name, def.description, def.inputSchema, async (args) => {
+    return def.handler({ repo: String(args.repo ?? "") });
+  });
+  return createSdkMcpServer4({
+    name: "kody-fetch-repo",
+    version: "0.1.0",
+    tools: [fetchTool]
+  });
 }
-function fetchCompanyStore(repo, ref) {
-  const localRoot = localStoreRoot(repo);
-  if (localRoot) return localRoot;
-  const url = repoToGitUrl(repo);
-  const cacheDir = path9.join(cacheRoot(), cacheKey(repo, ref));
-  try {
-    if (isGitHubShorthand(repo)) setupGithubGitAuth();
-    fs7.mkdirSync(path9.dirname(cacheDir), { recursive: true });
-    if (!fs7.existsSync(path9.join(cacheDir, ".git"))) {
-      fs7.rmSync(cacheDir, { recursive: true, force: true });
-      runGit(["clone", "--no-checkout", "--filter=blob:none", url, cacheDir]);
-    }
-    runGit(["-C", cacheDir, "remote", "set-url", "origin", url]);
-    runGit(["-C", cacheDir, "fetch", "--depth=1", "origin", ref]);
-    runGit(["-C", cacheDir, "checkout", "--detach", "FETCH_HEAD"]);
-    return cacheDir;
-  } catch (err) {
-    const msg = err instanceof Error ? err.message : String(err);
-    process.stderr.write(`[company-store] failed to fetch ${repo}#${ref}: ${msg}
-`);
-    return null;
+var DESCRIPTION3, INPUT_SCHEMA3;
+var init_fetchRepoMcp = __esm({
+  "src/fetchRepoMcp.ts"() {
+    "use strict";
+    init_repoWorkspace();
+    DESCRIPTION3 = 'Clone another GitHub repository into your workspace so you can read and work on it. Pass `repo` as "owner/name" (e.g. "A-Guy-educ/A-Guy"). Returns the absolute path of the clone \u2014 then use your Read/Grep/Glob/Bash tools at that path to inspect it. Already-fetched repos are reused instantly. Use this whenever the user asks about a repository other than your current one \u2014 you are NOT limited to a single repo.';
+    INPUT_SCHEMA3 = {
+      repo: z3.string().describe('GitHub repository as "owner/name", e.g. "A-Guy-educ/A-Guy".')
+    };
   }
+});
+
+// src/agent.ts
+import * as fs8 from "fs";
+import * as path10 from "path";
+import { query } from "@anthropic-ai/claude-agent-sdk";
+function classifySubtype(subtype) {
+  if (!subtype) return "generic_failed";
+  const lower = subtype.toLowerCase();
+  if (lower === "success") return "ok";
+  if (lower.includes("max_turns") || lower.includes("max-turns")) return "out_of_turns";
+  if (lower.includes("rate_limit") || lower.includes("rate-limit")) return "rate_limit";
+  if (lower.includes("tool")) return "tool_error";
+  if (lower.includes("error")) return "model_error";
+  return "generic_failed";
 }
-function localStoreRoot(repo) {
-  if (!path9.isAbsolute(repo) && !repo.startsWith(".")) return null;
-  const root = path9.resolve(repo);
-  if (!fs7.existsSync(path9.join(root, ".kody"))) return null;
-  return root;
+function isClaudeLoginRequiredText(text) {
+  const normalized = text.toLowerCase();
+  return normalized.includes("not logged in") && normalized.includes("/login");
 }
-function repoToGitUrl(repo) {
-  if (/^(https?:|ssh:|git@|file:)/.test(repo)) return repo;
-  if (isGitHubShorthand(repo)) {
-    return `https://github.com/${repo}.git`;
+function resolveTurnTimeoutMs(opts) {
+  if (opts.maxTurnTimeoutMs !== void 0 && opts.maxTurnTimeoutMs !== null) {
+    return opts.maxTurnTimeoutMs > 0 ? opts.maxTurnTimeoutMs : 0;
   }
-  return repo;
-}
-function isGitHubShorthand(repo) {
-  return /^[A-Za-z0-9_.-]+\/[A-Za-z0-9_.-]+$/.test(repo);
-}
-function cacheRoot() {
-  return process.env[CACHE_ENV]?.trim() || path9.join(os3.homedir(), ".cache", "kody", "company-store");
+  const envSec = Number(process.env.KODY_TURN_TIMEOUT_SEC);
+  if (Number.isFinite(envSec) && envSec > 0) return Math.floor(envSec * 1e3);
+  if (Number.isFinite(envSec) && envSec <= 0) return 0;
+  return DEFAULT_TURN_TIMEOUT_MS;
 }
-function cacheKey(repo, ref) {
-  return crypto3.createHash("sha256").update(`${repo}#${ref}`).digest("hex").slice(0, 24);
+function isTransientConnectionError(msg) {
+  if (!msg) return false;
+  return /ConnectionRefused|ECONNREFUSED|ECONNRESET|ETIMEDOUT|EHOSTUNREACH|ENOTFOUND|socket hang up|Unable to connect to API|fetch failed/i.test(
+    msg
+  );
 }
-function runGit(args) {
-  execFileSync2("git", args, { stdio: ["ignore", "ignore", "pipe"] });
+function toolMayMutate(name, input) {
+  if (!name) return false;
+  if (MUTATING_FILE_TOOLS.has(name)) return true;
+  if (name === "Bash") return BASH_WRITE_VERB.test(String(input?.command ?? ""));
+  return false;
 }
-function setupGithubGitAuth() {
-  const token = process.env.KODY_TOKEN || process.env.GH_TOKEN || process.env.GITHUB_TOKEN || process.env.GH_PAT;
-  if (!token) return;
+function stripAgentSecrets(env) {
+  const out = { ...env };
+  const raw = out.ALL_SECRETS;
+  delete out.ALL_SECRETS;
+  if (!raw) return out;
   try {
-    execFileSync2("gh", ["auth", "setup-git", "--hostname", "github.com"], {
-      env: { ...process.env, GH_TOKEN: token },
-      stdio: ["ignore", "ignore", "pipe"]
-    });
+    const parsed = JSON.parse(raw);
+    for (const key of Object.keys(parsed)) {
+      if (!AGENT_KEEP_SECRETS.has(key)) delete out[key];
+    }
   } catch {
   }
+  return out;
 }
-var DEFAULT_COMPANY_STORE, DEFAULT_COMPANY_STORE_REF, STORE_ENV, REF_ENV, CACHE_ENV, memo;
-var init_companyStore = __esm({
-  "src/companyStore.ts"() {
-    "use strict";
-    DEFAULT_COMPANY_STORE = "aharonyaircohen/kody-company-store";
-    DEFAULT_COMPANY_STORE_REF = "stable";
-    STORE_ENV = "KODY_COMPANY_STORE";
-    REF_ENV = "KODY_COMPANY_STORE_REF";
-    CACHE_ENV = "KODY_COMPANY_STORE_CACHE";
-    memo = null;
-  }
-});
-
-// src/registry.ts
-import * as fs8 from "fs";
-import * as path10 from "path";
-function getAgentActionsRoot() {
-  const here = path10.dirname(new URL(import.meta.url).pathname);
-  const candidates = [
-    path10.join(here, "agent-actions"),
-    // dev: src/
-    path10.join(here, "..", "agent-actions"),
-    // built: dist/bin → dist/agent-actions
-    path10.join(here, "..", "src", "agent-actions")
-    // fallback
-  ];
-  for (const c of candidates) {
-    if (fs8.existsSync(c) && fs8.statSync(c).isDirectory()) return c;
-  }
-  return candidates[0];
-}
-function getProjectAgentActionsRoot() {
-  return path10.join(process.cwd(), ".kody", "agent-actions");
-}
-function getProjectAgentResponsibilitiesRoot() {
-  return path10.join(process.cwd(), ".kody", "agent-responsibilities");
-}
-function getCompanyStoreAgentActionsRoot() {
-  return getCompanyStoreAssetRoot("agentActions");
-}
-function getCompanyStoreAgentResponsibilitiesRoot() {
-  return getCompanyStoreAssetRoot("agentResponsibilities");
-}
-function getBuiltinAgentResponsibilitiesRoot() {
-  const here = path10.dirname(new URL(import.meta.url).pathname);
-  const candidates = [
-    path10.join(here, "agent-responsibilities"),
-    // dev: src/
-    path10.join(here, "..", "agent-responsibilities"),
-    // built: dist/bin → dist/agent-responsibilities
-    path10.join(here, "..", "src", "agent-responsibilities")
-    // fallback
-  ];
-  for (const c of candidates) {
-    if (fs8.existsSync(c) && fs8.statSync(c).isDirectory()) return c;
+async function runAgent(opts) {
+  const ndjsonDir = opts.ndjsonDir ?? path10.join(opts.cwd, ".kody");
+  fs8.mkdirSync(ndjsonDir, { recursive: true });
+  const ndjsonPath = path10.join(ndjsonDir, "last-run.jsonl");
+  const env = stripAgentSecrets({
+    ...process.env,
+    SKIP_HOOKS: "1",
+    HUSKY: "0",
+    CI: process.env.CI ?? "1",
+    // MCP servers are spawned asynchronously by the SDK. With the default
+    // non-blocking behavior, the SDK announces its tool list at session
+    // init while servers are still in `pending`, so their tools never
+    // reach the model. Block until each MCP completes its handshake (or
+    // the timeout below elapses) so the tool list is complete on first
+    // turn.
+    MCP_CONNECTION_NONBLOCKING: process.env.MCP_CONNECTION_NONBLOCKING ?? "false",
+    MCP_TIMEOUT: process.env.MCP_TIMEOUT ?? "60000"
+  });
+  if (opts.litellmUrl) {
+    env.ANTHROPIC_BASE_URL = opts.litellmUrl;
+    env.ANTHROPIC_API_KEY = getAnthropicApiKeyOrDummy();
   }
-  return candidates[0];
-}
-function getAgentActionRoots() {
-  const storeRoot = getCompanyStoreAgentActionsRoot();
-  return [getProjectAgentActionsRoot(), ...storeRoot ? [storeRoot] : [], getAgentActionsRoot()];
-}
-function getAgentResponsibilityRoots(projectAgentResponsibilitiesRoot = getProjectAgentResponsibilitiesRoot()) {
-  const storeRoot = getCompanyStoreAgentResponsibilitiesRoot();
-  return [projectAgentResponsibilitiesRoot, ...storeRoot ? [storeRoot] : [], getBuiltinAgentResponsibilitiesRoot()];
-}
-function listAgentActions(roots = getAgentActionRoots()) {
-  const rootList = typeof roots === "string" ? [roots] : roots;
-  const seen = /* @__PURE__ */ new Set();
-  const out = [];
-  for (const root of rootList) {
-    if (!fs8.existsSync(root)) continue;
-    const entries = fs8.readdirSync(root, { withFileTypes: true });
-    for (const ent of entries) {
-      if (!ent.isDirectory()) continue;
-      if (seen.has(ent.name)) continue;
-      const profilePath = path10.join(root, ent.name, AGENT_RESPONSIBILITY_PROFILE_FILE);
-      if (fs8.existsSync(profilePath) && fs8.statSync(profilePath).isFile()) {
-        out.push({ name: ent.name, profilePath });
-        seen.add(ent.name);
+  const startedAt = Date.now();
+  const turnTimeoutMs = resolveTurnTimeoutMs(opts);
+  let outcome = "failed";
+  let outcomeKind = "generic_failed";
+  let errorMessage;
+  let tokens = { input: 0, output: 0, cacheRead: 0, cacheCreate: 0 };
+  let messageCount = 0;
+  let finalText = "";
+  let getSubmitted;
+  for (let attempt = 0; ; attempt++) {
+    let ndjsonWriteFailed = false;
+    let ndjsonWriteError;
+    const fullLog = fs8.createWriteStream(ndjsonPath, { flags: "w" });
+    fullLog.on("error", (err) => {
+      ndjsonWriteFailed = true;
+      ndjsonWriteError = err instanceof Error ? err.message : String(err);
+    });
+    const resultTexts = [];
+    outcome = "failed";
+    outcomeKind = "generic_failed";
+    errorMessage = void 0;
+    tokens = { input: 0, output: 0, cacheRead: 0, cacheCreate: 0 };
+    messageCount = 0;
+    let sawMutatingTool = false;
+    let sawTerminalSuccess = false;
+    let sawLoginRequired = false;
+    let noWorkSuccess = false;
+    try {
+      const queryOptions = {
+        model: opts.model.model,
+        cwd: opts.cwd,
+        // Fresh array (never mutate the shared DEFAULT_ALLOWED_TOOLS const) so
+        // opt-in tools like fetch_repo can be appended below.
+        allowedTools: [...opts.allowedToolsOverride ?? DEFAULT_ALLOWED_TOOLS],
+        permissionMode: opts.permissionModeOverride ?? "acceptEdits",
+        env
+      };
+      const mcpEntries = [];
+      if (opts.mcpServers && opts.mcpServers.length > 0) {
+        for (const s of opts.mcpServers) {
+          const cfg = { command: s.command };
+          if (s.args) cfg.args = s.args;
+          if (s.env) cfg.env = s.env;
+          mcpEntries.push([s.name, cfg]);
+        }
+      }
+      if (opts.enableVerifyTool && opts.verifyConfig) {
+        const { buildVerifyMcpServer: buildVerifyMcpServer2 } = await Promise.resolve().then(() => (init_verifyMcp(), verifyMcp_exports));
+        const verifyServer = buildVerifyMcpServer2({
+          config: opts.verifyConfig,
+          cwd: opts.cwd,
+          agentAction: opts.agentActionName ?? "agent",
+          maxAttempts: typeof opts.verifyToolMaxAttempts === "number" && opts.verifyToolMaxAttempts > 0 ? opts.verifyToolMaxAttempts : void 0
+        });
+        mcpEntries.push(["kody-verify", verifyServer]);
+      }
+      if (opts.enableSubmitTool) {
+        const { buildSubmitMcpServer: buildSubmitMcpServer2 } = await Promise.resolve().then(() => (init_submitMcp(), submitMcp_exports));
+        const submitHandle = buildSubmitMcpServer2();
+        getSubmitted = submitHandle.getSubmitted;
+        mcpEntries.push(["kody-submit", submitHandle.server]);
+      }
+      if (opts.enableAgentResponsibilityTool) {
+        const { buildAgentResponsibilityMcpServer: buildAgentResponsibilityMcpServer2 } = await Promise.resolve().then(() => (init_agent_responsibilityMcp(), agent_responsibilityMcp_exports));
+        if (!opts.dutyRepoSlug) {
+          throw new Error(
+            "enableAgentResponsibilityTool requires dutyRepoSlug (owner/name) \u2014 set kody.config.json github.{owner,repo} or GITHUB_REPOSITORY env var"
+          );
+        }
+        const dutyHandle = buildAgentResponsibilityMcpServer2({
+          repoSlug: opts.dutyRepoSlug,
+          state: opts.agentResponsibilityState,
+          operatorMention: opts.agentResponsibilityOperatorMention ?? "",
+          ...opts.agentResponsibilitySlug ? { agentResponsibilitySlug: opts.agentResponsibilitySlug } : {}
+        });
+        mcpEntries.push(["kody-agentResponsibility", dutyHandle.server]);
+      }
+      if (opts.enableFetchRepoTool && opts.reposRoot) {
+        const { buildFetchRepoMcpServer: buildFetchRepoMcpServer2 } = await Promise.resolve().then(() => (init_fetchRepoMcp(), fetchRepoMcp_exports));
+        const fetchServer = buildFetchRepoMcpServer2({
+          reposRoot: opts.reposRoot,
+          repoToken: opts.repoToken
+        });
+        mcpEntries.push(["kody-fetch-repo", fetchServer]);
+        queryOptions.allowedTools.push("mcp__kody-fetch-repo__fetch_repo");
+        queryOptions.additionalDirectories = [opts.reposRoot];
+      }
+      if (mcpEntries.length > 0) {
+        queryOptions.mcpServers = Object.fromEntries(mcpEntries);
+      }
+      if (opts.pluginPaths && opts.pluginPaths.length > 0) {
+        queryOptions.plugins = opts.pluginPaths.map((p) => ({ type: "local", path: p }));
+      }
+      if (opts.agents && Object.keys(opts.agents).length > 0) {
+        queryOptions.agents = opts.agents;
+      }
+      if (typeof opts.maxTurns === "number" && opts.maxTurns > 0) {
+        queryOptions.maxTurns = opts.maxTurns;
+      }
+      if (opts.reasoningEffort !== void 0 && opts.reasoningEffort !== null) {
+        if (opts.reasoningEffort === "off") {
+        } else {
+          const budget = REASONING_BUDGETS[opts.reasoningEffort];
+          if (budget) queryOptions.maxThinkingTokens = budget;
+        }
+      } else if (typeof opts.maxThinkingTokens === "number" && opts.maxThinkingTokens > 0) {
+        queryOptions.maxThinkingTokens = opts.maxThinkingTokens;
+      }
+      if (typeof opts.systemPromptAppend === "string" && opts.systemPromptAppend.length > 0) {
+        const systemPrompt = {
+          type: "preset",
+          preset: "claude_code",
+          append: opts.systemPromptAppend
+        };
+        if (opts.cacheable) systemPrompt.excludeDynamicSections = true;
+        queryOptions.systemPrompt = systemPrompt;
+      } else if (opts.cacheable) {
+        queryOptions.systemPrompt = {
+          type: "preset",
+          preset: "claude_code",
+          excludeDynamicSections: true
+        };
+      }
+      queryOptions.settingSources = opts.settingSources ?? ["project", "local"];
+      const stableBinary = ensureStableClaudeBinary();
+      if (stableBinary) {
+        queryOptions.pathToClaudeCodeExecutable = stableBinary;
+      }
+      const result = query({
+        prompt: opts.prompt,
+        // biome-ignore lint/suspicious/noExplicitAny: SDK options type is narrow; mcpServers is runtime-passthrough.
+        options: queryOptions
+      });
+      const iterator = typeof result[Symbol.asyncIterator] === "function" ? result[Symbol.asyncIterator]() : result;
+      while (true) {
+        const nextPromise = iterator.next();
+        let timedOut = false;
+        let timer;
+        let next;
+        if (turnTimeoutMs > 0) {
+          const timeoutPromise = new Promise((resolve7) => {
+            timer = setTimeout(() => {
+              timedOut = true;
+              resolve7({ done: true, value: void 0 });
+            }, turnTimeoutMs);
+          });
+          next = await Promise.race([nextPromise, timeoutPromise]);
+          if (timer) clearTimeout(timer);
+        } else {
+          next = await nextPromise;
+        }
+        if (timedOut) {
+          outcome = "failed";
+          outcomeKind = "stalled";
+          errorMessage = `agent stalled: no SDK message in ${Math.round(turnTimeoutMs / 1e3)}s`;
+          if (typeof iterator.return === "function") {
+            try {
+              await iterator.return(void 0);
+            } catch {
+            }
+          }
+          break;
+        }
+        if (next.done) break;
+        const msg = next.value;
+        messageCount++;
+        if (!ndjsonWriteFailed) {
+          try {
+            fullLog.write(`${JSON.stringify(msg)}
+`);
+          } catch (e) {
+            ndjsonWriteFailed = true;
+            ndjsonWriteError = e instanceof Error ? e.message : String(e);
+          }
+        }
+        const line = renderEvent(msg, { verbose: opts.verbose, quiet: opts.quiet });
+        if (line) {
+          if (isClaudeLoginRequiredText(line)) sawLoginRequired = true;
+          process.stdout.write(`${line}
+`);
+        }
+        const m = msg;
+        if (opts.onProgress) {
+          const blocks = m.message?.content ?? [];
+          for (const block of blocks) {
+            try {
+              if (block.type === "thinking") {
+                const t = block.thinking;
+                if (typeof t === "string" && t.length > 0) {
+                  await opts.onProgress({ kind: "thinking", thinking: t });
+                }
+              } else if (block.type === "tool_use") {
+                const b = block;
+                await opts.onProgress({
+                  kind: "tool_use",
+                  name: b.name ?? "tool",
+                  input: b.input,
+                  id: b.id
+                });
+              } else if (block.type === "tool_result") {
+                const b = block;
+                const content = typeof b.content === "string" ? b.content : (() => {
+                  try {
+                    return JSON.stringify(b.content);
+                  } catch {
+                    return "";
+                  }
+                })();
+                await opts.onProgress({
+                  kind: "tool_result",
+                  toolUseId: b.tool_use_id,
+                  content,
+                  isError: b.is_error
+                });
+              } else if (block.type === "text") {
+                const b = block;
+                if (typeof b.text === "string" && b.text.length > 0) {
+                  await opts.onProgress({ kind: "text", text: b.text });
+                }
+              }
+            } catch {
+            }
+          }
+        }
+        const usage = m.usage;
+        if (usage && typeof usage === "object") {
+          const i = Number(usage.input_tokens ?? 0);
+          const o = Number(usage.output_tokens ?? 0);
+          const cr = Number(usage.cache_read_input_tokens ?? 0);
+          const cc = Number(usage.cache_creation_input_tokens ?? 0);
+          if (Number.isFinite(i)) tokens.input += i;
+          if (Number.isFinite(o)) tokens.output += o;
+          if (Number.isFinite(cr)) tokens.cacheRead += cr;
+          if (Number.isFinite(cc)) tokens.cacheCreate += cc;
+        }
+        if (!sawMutatingTool) {
+          const blocks = m.message?.content ?? [];
+          for (const block of blocks) {
+            if (block.type === "tool_use") {
+              const b = block;
+              if (toolMayMutate(b.name, b.input)) {
+                sawMutatingTool = true;
+                break;
+              }
+            }
+          }
+        }
+        if (m.type === "result") {
+          if (m.subtype === "success") {
+            outcome = "completed";
+            outcomeKind = "ok";
+            sawTerminalSuccess = true;
+            const text = (typeof m.result === "string" ? m.result : "").trim();
+            if (isClaudeLoginRequiredText(text)) sawLoginRequired = true;
+            if (text) resultTexts.push(text);
+          } else {
+            outcome = "failed";
+            outcomeKind = classifySubtype(m.subtype);
+            errorMessage = `result subtype: ${m.subtype ?? "unknown"}`;
+          }
+        }
+      }
+    } catch (e) {
+      if (sawTerminalSuccess) {
+        errorMessage = e instanceof Error ? e.message : String(e);
+      } else {
+        outcome = "failed";
+        outcomeKind = "model_error";
+        errorMessage = e instanceof Error ? e.message : String(e);
+      }
+    } finally {
+      try {
+        fullLog.end();
+      } catch {
       }
     }
-  }
-  return out.sort((a, b) => a.name.localeCompare(b.name));
-}
-function resolveAgentAction(name, roots = getAgentActionRoots()) {
-  if (!isSafeName(name)) return null;
-  const rootList = typeof roots === "string" ? [roots] : roots;
-  for (const root of rootList) {
-    const profilePath = path10.join(root, name, "profile.json");
-    if (fs8.existsSync(profilePath) && fs8.statSync(profilePath).isFile()) {
-      return profilePath;
-    }
-  }
-  return null;
-}
-function listAgentResponsibilityActions(projectAgentResponsibilitiesRoot = getProjectAgentResponsibilitiesRoot()) {
-  const seen = /* @__PURE__ */ new Set();
-  const out = [];
-  const add = (action) => {
-    if (!isSafeName(action.action) || !isSafeName(action.agentResponsibility) || !isSafeName(action.agentAction)) return;
-    if (seen.has(action.action)) return;
-    seen.add(action.action);
-    out.push(action);
-  };
-  const roots = getAgentResponsibilityRoots(projectAgentResponsibilitiesRoot);
-  const executableRoots = getAgentActionRoots();
-  for (const action of listFolderAgentResponsibilityActions(roots[0], "project-folder")) add(action);
-  for (const action of listAgentActionResponsibilityActions(executableRoots[0], "project-agentAction")) add(action);
-  if (roots.length === 3) {
-    for (const action of listFolderAgentResponsibilityActions(roots[1], "company-store")) add(action);
-    for (const action of listAgentActionResponsibilityActions(executableRoots[1], "company-store-agentAction"))
-      add(action);
-    for (const action of listBuiltinAgentResponsibilityActions(roots[2])) add(action);
-  } else {
-    for (const action of listBuiltinAgentResponsibilityActions(roots[1])) add(action);
-  }
-  return out.sort((a, b) => a.action.localeCompare(b.action));
-}
-function resolveAgentResponsibilityAction(action, projectAgentResponsibilitiesRoot = getProjectAgentResponsibilitiesRoot()) {
-  if (!isSafeName(action)) return null;
-  return listAgentResponsibilityActions(projectAgentResponsibilitiesRoot).find((d) => d.action === action) ?? null;
-}
-function hasAgentResponsibilityAction(action, projectAgentResponsibilitiesRoot = getProjectAgentResponsibilitiesRoot()) {
-  return resolveAgentResponsibilityAction(action, projectAgentResponsibilitiesRoot) !== null;
-}
-function resolveAgentResponsibilityFolder(slug2, projectAgentResponsibilitiesRoot = getProjectAgentResponsibilitiesRoot()) {
-  if (!isSafeName(slug2)) return null;
-  for (const root of getAgentResponsibilityRoots(projectAgentResponsibilitiesRoot)) {
-    const agentResponsibility = readAgentResponsibilityFolder(root, slug2);
-    if (agentResponsibility) return agentResponsibility;
-  }
-  return null;
-}
-function resolveAgentResponsibilityExecution(agentResponsibility) {
-  const agentAction = agentResponsibility.config.agentAction ?? agentResponsibility.config.agentActions?.[0] ?? (agentResponsibility.config.tickScript ? "agent-responsibility-tick-scripted" : "agent-responsibility-tick");
-  const cliArgs = agentActionDeclaresInput(agentAction, "agentResponsibility") ? { agentResponsibility: agentResponsibility.slug } : {};
-  return { agentAction, cliArgs };
-}
-function agentActionDeclaresInput(agentAction, inputName) {
-  const profilePath = resolveAgentAction(agentAction);
-  if (!profilePath) return false;
-  try {
-    const raw = JSON.parse(fs8.readFileSync(profilePath, "utf-8"));
-    if (!Array.isArray(raw.inputs)) return false;
-    return raw.inputs.some((entry) => {
-      if (!entry || typeof entry !== "object" || Array.isArray(entry)) return false;
-      const input = entry;
-      return input.name === inputName || input.flag === `--${inputName}`;
-    });
-  } catch {
-    return false;
-  }
-}
-function isSafeName(name) {
-  return /^[a-z][a-z0-9-]*$/.test(name) && !name.includes("..");
-}
-function listAgentActionResponsibilityActions(root, source) {
-  if (!fs8.existsSync(root) || !fs8.statSync(root).isDirectory()) return [];
-  const out = [];
-  for (const ent of fs8.readdirSync(root, { withFileTypes: true })) {
-    if (!ent.isDirectory() || !isSafeName(ent.name)) continue;
-    const profilePath = path10.join(root, ent.name, AGENT_RESPONSIBILITY_PROFILE_FILE);
-    if (!fs8.existsSync(profilePath) || !fs8.statSync(profilePath).isFile()) continue;
-    try {
-      const raw = JSON.parse(fs8.readFileSync(profilePath, "utf-8"));
-      const action = typeof raw.action === "string" && raw.action.trim() ? raw.action.trim() : "";
-      if (!action) continue;
-      if (!PUBLIC_AGENT_ACTION_ACTION_ROLES.has(String(raw.role))) continue;
-      if (!PUBLIC_AGENT_ACTION_CAPABILITY_KINDS.has(String(raw.capabilityKind))) continue;
-      if (!Array.isArray(raw.inputs)) continue;
-      out.push({
-        action,
-        agentResponsibility: ent.name,
-        agentAction: ent.name,
-        cliArgs: {},
-        source,
-        describe: typeof raw.describe === "string" ? raw.describe : void 0,
-        profilePath
-      });
-    } catch {
+    if (ndjsonWriteFailed) {
+      process.stderr.write(
+        `[kody agent] NDJSON write failed (post-mortem may be incomplete): ${ndjsonWriteError ?? "unknown error"}
+`
+      );
     }
-  }
-  return out.sort((a, b) => a.action.localeCompare(b.action));
-}
-function listFolderAgentResponsibilityActions(root, source) {
-  if (!fs8.existsSync(root) || !fs8.statSync(root).isDirectory()) return [];
-  const out = [];
-  for (const slug2 of listAgentResponsibilityFolderSlugs(root)) {
-    if (!isSafeName(slug2)) continue;
-    const agentResponsibility = readAgentResponsibilityFolder(root, slug2);
-    if (!agentResponsibility) continue;
-    const action = agentResponsibility.config.action ?? slug2;
-    const { agentAction, cliArgs } = resolveAgentResponsibilityExecution(agentResponsibility);
-    out.push({
-      action,
-      agentResponsibility: slug2,
-      agentAction,
-      cliArgs,
-      source,
-      describe: agentResponsibility.config.describe ?? agentResponsibility.title,
-      capabilityKind: agentResponsibility.config.capabilityKind,
-      profilePath: agentResponsibility.profilePath,
-      bodyPath: agentResponsibility.bodyPath
-    });
-  }
-  return out.sort((a, b) => a.action.localeCompare(b.action));
-}
-function listBuiltinAgentResponsibilityActions(root = getBuiltinAgentResponsibilitiesRoot()) {
-  if (!fs8.existsSync(root) || !fs8.statSync(root).isDirectory()) return [];
-  const out = [];
-  for (const slug2 of listAgentResponsibilityFolderSlugs(root)) {
-    if (!isSafeName(slug2)) continue;
-    const agentResponsibility = readAgentResponsibilityFolder(root, slug2);
-    if (!agentResponsibility) continue;
-    const action = agentResponsibility.config.action ?? slug2;
-    const agentAction = agentResponsibility.config.agentAction ?? slug2;
-    out.push({
-      action,
-      agentResponsibility: slug2,
-      agentAction,
-      cliArgs: {},
-      source: "builtin",
-      describe: agentResponsibility.config.describe ?? agentResponsibility.title,
-      capabilityKind: agentResponsibility.config.capabilityKind,
-      profilePath: agentResponsibility.profilePath,
-      bodyPath: agentResponsibility.bodyPath
-    });
-  }
-  return out.sort((a, b) => a.action.localeCompare(b.action));
-}
-function getProfileInputs(name, roots = getAgentActionRoots()) {
-  const profilePath = resolveAgentAction(name, roots);
-  if (!profilePath) return null;
-  try {
-    const raw = JSON.parse(fs8.readFileSync(profilePath, "utf-8"));
-    if (!raw || typeof raw !== "object" || !Array.isArray(raw.inputs)) return [];
-    return raw.inputs;
-  } catch {
-    return null;
-  }
-}
-function parseGenericFlags(argv) {
-  const args = {};
-  const positional = [];
-  for (let i = 0; i < argv.length; i++) {
-    const arg = argv[i];
-    if (!arg.startsWith("--")) {
-      positional.push(arg);
-      continue;
+    finalText = resultTexts.join("\n\n---\n\n");
+    if (outcome === "completed" && sawLoginRequired) {
+      outcome = "failed";
+      outcomeKind = "model_error";
+      errorMessage = "Claude Code reported it is not logged in; refusing to mark agent run successful";
     }
-    const key = arg.slice(2);
-    const next = argv[i + 1];
-    let value = true;
-    if (next !== void 0 && !next.startsWith("--")) {
-      value = next;
-      i++;
+    if (outcome === "completed" && !sawMutatingTool) {
+      const backendDead = opts.isBackendHealthy ? !await opts.isBackendHealthy() : false;
+      const zeroOutput = tokens.output === 0 && finalText === "";
+      if (backendDead || zeroOutput) {
+        outcome = "failed";
+        outcomeKind = "model_error";
+        noWorkSuccess = true;
+        errorMessage = errorMessage ?? (backendDead ? "model backend unreachable after a reported success \u2014 proxy crashed mid-request (hollow success)" : "session reported success but produced no model output (0 output tokens) \u2014 backend likely unreachable");
+      }
     }
-    args[key] = value;
-    if (key.includes("-")) {
-      const camel = key.replace(/-([a-z0-9])/g, (_, c) => c.toUpperCase());
-      if (camel !== key && args[camel] === void 0) args[camel] = value;
+    const shouldRetry = outcome === "failed" && attempt < MAX_CONNECTION_RETRIES && !sawMutatingTool && (isTransientConnectionError(errorMessage) || noWorkSuccess);
+    if (!shouldRetry) break;
+    const delayMs = CONNECTION_RETRY_BASE_MS * 2 ** attempt;
+    process.stderr.write(
+      `[kody agent] transient connection error (attempt ${attempt + 1}/${MAX_CONNECTION_RETRIES + 1}); retrying in ${Math.round(delayMs / 1e3)}s: ${errorMessage}
+`
+    );
+    if (opts.ensureBackend) {
+      try {
+        await opts.ensureBackend();
+      } catch (e) {
+        process.stderr.write(`[kody agent] backend recovery failed: ${e instanceof Error ? e.message : String(e)}
+`);
+      }
     }
+    await new Promise((r) => setTimeout(r, delayMs));
   }
-  if (positional.length > 0) args._ = positional;
-  return args;
+  const submittedState = getSubmitted?.();
+  return {
+    outcome,
+    outcomeKind,
+    finalText,
+    ...submittedState ? { submittedState } : {},
+    error: errorMessage,
+    ndjsonPath,
+    durationMs: Date.now() - startedAt,
+    tokens,
+    messageCount
+  };
 }
-var PUBLIC_AGENT_ACTION_ACTION_ROLES, PUBLIC_AGENT_ACTION_CAPABILITY_KINDS;
-var init_registry = __esm({
-  "src/registry.ts"() {
+var DEFAULT_ALLOWED_TOOLS, DEFAULT_TURN_TIMEOUT_MS, MAX_CONNECTION_RETRIES, CONNECTION_RETRY_BASE_MS, MUTATING_FILE_TOOLS, BASH_WRITE_VERB, AGENT_KEEP_SECRETS;
+var init_agent = __esm({
+  "src/agent.ts"() {
     "use strict";
-    init_agent_responsibilityFolders();
-    init_companyStore();
-    PUBLIC_AGENT_ACTION_ACTION_ROLES = /* @__PURE__ */ new Set(["primitive", "orchestrator", "container", "watch", "utility"]);
-    PUBLIC_AGENT_ACTION_CAPABILITY_KINDS = /* @__PURE__ */ new Set(["observe", "act", "verify"]);
+    init_claudeBinary();
+    init_config();
+    init_format();
+    DEFAULT_ALLOWED_TOOLS = ["Bash", "Edit", "Read", "Write", "Glob", "Grep"];
+    DEFAULT_TURN_TIMEOUT_MS = 6e5;
+    MAX_CONNECTION_RETRIES = 2;
+    CONNECTION_RETRY_BASE_MS = 2e3;
+    MUTATING_FILE_TOOLS = /* @__PURE__ */ new Set(["Edit", "Write", "MultiEdit", "NotebookEdit"]);
+    BASH_WRITE_VERB = /\b(git\s+(commit|push|merge|rebase|tag|reset|cherry-pick)|gh\s+(pr|issue|release)\s+(create|comment|edit|close|merge|review|reopen)|gh\s+api\b[^|&]*-X\s*(POST|PUT|PATCH|DELETE)|npm\s+publish)\b/i;
+    AGENT_KEEP_SECRETS = /* @__PURE__ */ new Set([
+      "ANTHROPIC_API_KEY",
+      "ANTHROPIC_AUTH_TOKEN",
+      "ANTHROPIC_BASE_URL",
+      "GH_TOKEN",
+      "GITHUB_TOKEN"
+    ]);
   }
 });
 
@@ -13227,6 +13269,14 @@ var init_runFlow = __esm({
         cfgCtx.commentMaxBytes ?? DEFAULT_COMMENT_MAX_BYTES
       );
       ctx.data.issue = { ...issue, commentsFormatted };
+      if (issue.isPullRequest) {
+        ctx.data.commentTargetType = "pr";
+        ctx.data.commentTargetNumber = issueNumber;
+        ctx.skipAgent = true;
+        ctx.output.exitCode = 1;
+        ctx.output.reason = `run target #${issueNumber} is a pull request; dispatch a PR action or the source issue instead`;
+        return;
+      }
       ctx.data.commentTargetType = "issue";
       ctx.data.commentTargetNumber = issueNumber;
       const argBase = resolveBaseOverride(ctx.args.base);