@kody-ade/kody-engine 0.4.251 → 0.4.253

package/dist/bin/kody.js

@@ -15,7 +15,7 @@ var init_package = __esm({
   "package.json"() {
     package_default = {
       name: "@kody-ade/kody-engine",
-      version: "0.4.251",
+      version: "0.4.253",
       description: "kody \u2014 autonomous development engine. Single-session Claude Code agent behind a generic executor + declarative agentAction profiles.",
       license: "MIT",
       type: "module",
@@ -402,8 +402,8 @@ function parseStateRepo(config) {
 }
 function stateRepoPath(config, filePath) {
   const state = resolveStateRepoConfig(config);
-  const relative5 = normalizeStatePath(filePath, "state file path");
-  return path2.posix.join(state.path, relative5);
+  const relative3 = normalizeStatePath(filePath, "state file path");
+  return path2.posix.join(state.path, relative3);
 }
 function apiPath(config, targetPath) {
   const parsed = parseStateRepo(config);
@@ -611,11 +611,11 @@ function parseJobsConfig(raw) {
   if (!raw || typeof raw !== "object") return void 0;
   const r = raw;
   const out = {};
-  if (r.stateBackend === "contents-api" || r.stateBackend === "local-file") {
+  if (r.stateBackend === "contents-api") {
     out.stateBackend = r.stateBackend;
   } else if (typeof r.stateBackend === "string") {
     throw new Error(
-      `kody.config.json: jobs.stateBackend must be "contents-api" or "local-file", got "${r.stateBackend}"`
+      `kody.config.json: jobs.stateBackend must be "contents-api"; local-file is not a supported durable storage mode`
     );
   }
   return Object.keys(out).length > 0 ? out : void 0;
@@ -936,17 +936,28 @@ var init_format = __esm({
 // src/runtimePaths.ts
 var runtimePaths_exports = {};
 __export(runtimePaths_exports, {
+  agentRunDir: () => agentRunDir,
+  lastRunLogPath: () => lastRunLogPath,
+  runtimeDirForCwd: () => runtimeDirForCwd,
   runtimeStatePath: () => runtimeStatePath
 });
-import crypto from "crypto";
-import os2 from "os";
-import path4 from "path";
-function safeKey(cwd) {
-  return crypto.createHash("sha1").update(cwd).digest("hex").slice(0, 16);
+import { createHash } from "crypto";
+import * as os2 from "os";
+import * as path4 from "path";
+function runtimeDirForCwd(cwd, ...parts) {
+  const key = createHash("sha256").update(path4.resolve(cwd)).digest("hex").slice(0, 16);
+  return path4.join(os2.tmpdir(), "kody-engine", key, ...parts);
 }
-function runtimeStatePath(cwd, ...segments) {
-  const root = process.env.KODY_RUNTIME_DIR?.trim() || path4.join(os2.tmpdir(), "kody-runtime");
-  return path4.join(root, safeKey(cwd), ...segments);
+function runtimeStatePath(cwd, ...parts) {
+  const configuredRoot = process.env.KODY_RUNTIME_DIR?.trim();
+  const base = configuredRoot ? path4.resolve(configuredRoot) : runtimeDirForCwd(cwd);
+  return path4.join(base, ...parts);
+}
+function agentRunDir(cwd) {
+  return runtimeStatePath(cwd, "agent-runs");
+}
+function lastRunLogPath(cwd) {
+  return path4.join(agentRunDir(cwd), "last-run.jsonl");
 }
 var init_runtimePaths = __esm({
   "src/runtimePaths.ts"() {
@@ -963,7 +974,7 @@ __export(events_exports, {
   readEvents: () => readEvents,
   resolveRunId: () => resolveRunId
 });
-import * as crypto2 from "crypto";
+import * as crypto from "crypto";
 import * as fs3 from "fs";
 import * as path5 from "path";
 function resolveRunId() {
@@ -976,7 +987,7 @@ function resolveRunId() {
     const attempt = process.env.GITHUB_RUN_ATTEMPT ?? "1";
     cachedRunId = `gh-${process.env.GITHUB_RUN_ID}-${attempt}`;
   } else {
-    cachedRunId = `${Date.now().toString(36)}-${crypto2.randomBytes(4).toString("hex")}`;
+    cachedRunId = `${Date.now().toString(36)}-${crypto.randomBytes(4).toString("hex")}`;
   }
   process.env.KODY_RUN_ID = cachedRunId;
   return cachedRunId;
@@ -1042,7 +1053,7 @@ var init_events = __esm({
 // src/verify.ts
 import { spawn } from "child_process";
 function runCommand(command, cwd) {
-  return new Promise((resolve7) => {
+  return new Promise((resolve8) => {
     const start = Date.now();
     const child = spawn(command, {
       cwd,
@@ -1071,11 +1082,11 @@ function runCommand(command, cwd) {
     child.on("exit", (code) => {
       clearTimeout(timer);
       const tail = Buffer.concat(buffers).toString("utf-8").slice(-TAIL_CHARS);
-      resolve7({ exitCode: code ?? -1, durationMs: Date.now() - start, tail });
+      resolve8({ exitCode: code ?? -1, durationMs: Date.now() - start, tail });
     });
     child.on("error", (err) => {
       clearTimeout(timer);
-      resolve7({ exitCode: -1, durationMs: Date.now() - start, tail: err.message });
+      resolve8({ exitCode: -1, durationMs: Date.now() - start, tail: err.message });
     });
   });
 }
@@ -1446,7 +1457,7 @@ var init_agent_responsibilityFolders = __esm({
 
 // src/companyStore.ts
 import { execFileSync as execFileSync2 } from "child_process";
-import * as crypto3 from "crypto";
+import * as crypto2 from "crypto";
 import * as fs5 from "fs";
 import * as os3 from "os";
 import * as path7 from "path";
@@ -1522,7 +1533,7 @@ function cacheRoot() {
   return process.env[CACHE_ENV]?.trim() || path7.join(os3.homedir(), ".cache", "kody", "company-store");
 }
 function cacheKey(repo, ref) {
-  return crypto3.createHash("sha256").update(`${repo}#${ref}`).digest("hex").slice(0, 24);
+  return crypto2.createHash("sha256").update(`${repo}#${ref}`).digest("hex").slice(0, 24);
 }
 function runGit(args) {
   execFileSync2("git", args, { stdio: ["ignore", "ignore", "pipe"] });
@@ -2344,7 +2355,7 @@ var init_repoWorkspace = __esm({
     defaultCloneRepo = (repo, token, dir) => {
       fs7.mkdirSync(path9.dirname(dir), { recursive: true });
       const authUrl = token ? `https://x-access-token:${token}@github.com/${repo}.git` : `https://github.com/${repo}.git`;
-      return new Promise((resolve7, reject) => {
+      return new Promise((resolve8, reject) => {
         const child = spawn2("git", ["clone", "--depth=1", authUrl, dir], {
           stdio: "inherit"
         });
@@ -2360,7 +2371,7 @@ var init_repoWorkspace = __esm({
             spawnSync("git", ["-C", dir, "config", "user.email", email]);
           } catch {
           }
-          resolve7();
+          resolve8();
         });
         child.on("error", reject);
       });
@@ -2485,7 +2496,7 @@ function stripAgentSecrets(env) {
   return out;
 }
 async function runAgent(opts) {
-  const ndjsonDir = opts.ndjsonDir ?? path10.join(opts.cwd, ".kody");
+  const ndjsonDir = opts.ndjsonDir ?? agentRunDir(opts.cwd);
   fs8.mkdirSync(ndjsonDir, { recursive: true });
   const ndjsonPath = path10.join(ndjsonDir, "last-run.jsonl");
   const env = stripAgentSecrets({
@@ -2543,6 +2554,7 @@ async function runAgent(opts) {
         permissionMode: opts.permissionModeOverride ?? "acceptEdits",
         env
       };
+      const additionalDirectories = new Set(opts.additionalDirectories ?? []);
       const mcpEntries = [];
       if (opts.mcpServers && opts.mcpServers.length > 0) {
         for (const s of opts.mcpServers) {
@@ -2591,7 +2603,10 @@ async function runAgent(opts) {
         });
         mcpEntries.push(["kody-fetch-repo", fetchServer]);
         queryOptions.allowedTools.push("mcp__kody-fetch-repo__fetch_repo");
-        queryOptions.additionalDirectories = [opts.reposRoot];
+        additionalDirectories.add(opts.reposRoot);
+      }
+      if (additionalDirectories.size > 0) {
+        queryOptions.additionalDirectories = [...additionalDirectories];
       }
       if (mcpEntries.length > 0) {
         queryOptions.mcpServers = Object.fromEntries(mcpEntries);
@@ -2646,10 +2661,10 @@ async function runAgent(opts) {
         let timer;
         let next;
         if (turnTimeoutMs > 0) {
-          const timeoutPromise = new Promise((resolve7) => {
+          const timeoutPromise = new Promise((resolve8) => {
             timer = setTimeout(() => {
               timedOut = true;
-              resolve7({ done: true, value: void 0 });
+              resolve8({ done: true, value: void 0 });
             }, turnTimeoutMs);
           });
           next = await Promise.race([nextPromise, timeoutPromise]);
@@ -2841,6 +2856,7 @@ var init_agent = __esm({
     init_claudeBinary();
     init_config();
     init_format();
+    init_runtimePaths();
     DEFAULT_ALLOWED_TOOLS = ["Bash", "Edit", "Read", "Write", "Glob", "Grep"];
     DEFAULT_TURN_TIMEOUT_MS = 6e5;
     MAX_CONNECTION_RETRIES = 2;
@@ -2851,6 +2867,7 @@ var init_agent = __esm({
       "ANTHROPIC_API_KEY",
       "ANTHROPIC_AUTH_TOKEN",
       "ANTHROPIC_BASE_URL",
+      "CLAUDE_CODE_OAUTH_TOKEN",
       "GH_TOKEN",
       "GITHUB_TOKEN"
     ]);
@@ -2860,10 +2877,11 @@ var init_agent = __esm({
 // src/task-artifacts.ts
 import fs9 from "fs";
 import path11 from "path";
+import posixPath from "path/posix";
 function prepareTaskArtifactsDir(cwd, taskId) {
   const safeId = String(taskId).replace(/[^a-zA-Z0-9._-]/g, "_");
-  const relDir = path11.join(".kody", "tasks", safeId);
-  const absDir = path11.join(cwd, relDir);
+  const absDir = runtimeStatePath(cwd, "task-artifacts", safeId);
+  const relDir = absDir;
   fs9.mkdirSync(absDir, { recursive: true });
   return { taskId: safeId, absDir, relDir };
 }
@@ -2880,11 +2898,30 @@ function verifyTaskArtifacts(absDir) {
   }
   return missing;
 }
+function taskArtifactStatePath(taskId, file) {
+  return posixPath.join("tasks", taskId, file);
+}
+function persistTaskArtifactsToState(config, cwd, artifacts) {
+  for (const file of TASK_ARTIFACT_FILES) {
+    const full = path11.join(artifacts.absDir, file);
+    if (!fs9.existsSync(full)) continue;
+    const stat = fs9.statSync(full);
+    if (!stat.isFile() || stat.size === 0) continue;
+    const content = fs9.readFileSync(full, "utf-8");
+    upsertStateText(
+      config,
+      cwd,
+      taskArtifactStatePath(artifacts.taskId, file),
+      content,
+      `task artifacts: ${artifacts.taskId}`
+    );
+  }
+}
 function taskArtifactsPromptAddendum(opts) {
   return [
     "## Per-task artifacts (REQUIRED before your final response)",
     "",
-    `Before you finish, write these four files into \`${opts.relDir}/\`:`,
+    `Before you finish, write these four local temp files into \`${opts.relDir}/\`:`,
     "",
     `1. **context.json** \u2014 task header. Shape:`,
     "   ```json",
@@ -2898,14 +2935,14 @@ function taskArtifactsPromptAddendum(opts) {
     `     "prUrl": "<url or null>",`,
     `     "runUrl": "<url or null>",`,
     `     "filesTouched": ["path/from/repo/root.ts", ...],`,
-    `     "sessionLog": ".kody/sessions/<id>.jsonl",`,
+    `     "sessionLog": "sessions/<id>.jsonl",`,
     `     "startedAt": "<ISO>",`,
     `     "finishedAt": "<ISO>"`,
     "   }",
     "   ```",
     "",
     `2. **memory-recs.json** \u2014 array of sticky-note candidates worth promoting`,
-    `   to long-term \`.kody/memory/\`. Each item:`,
+    `   to long-term state-repo \`memory/\`. Each item:`,
     "   ```json",
     "   {",
     `     "type": "preference" | "decision" | "lesson",`,
@@ -2942,6 +2979,8 @@ var TASK_ARTIFACT_FILES;
 var init_task_artifacts = __esm({
   "src/task-artifacts.ts"() {
     "use strict";
+    init_runtimePaths();
+    init_stateRepo();
     TASK_ARTIFACT_FILES = ["context.json", "memory-recs.json", "followups.json", "handoff-notes.md"];
   }
 });
@@ -4708,7 +4747,7 @@ function sortByRecency(pages) {
 function formatBlock(pages) {
   if (pages.length === 0) return "";
   const lines = [
-    "# Project memory (`.kody/memory/`)",
+    "# Project memory (state repo `memory/`)",
     "",
     "Pages from prior memorize ticks. Treat as advisory context \u2014 confirm against the codebase before acting.",
     ""
@@ -5693,13 +5732,13 @@ function commitAndPush(branch, agentMessage, cwd) {
   }
   return { committed: true, pushed: false, sha, message, pushError: pushResult.reason };
 }
-function hasCommitsAhead(branch, defaultBranch2, cwd) {
+function hasCommitsAhead(branch, defaultBranch, cwd) {
   try {
-    const out = git(["rev-list", "--count", `origin/${defaultBranch2}..${branch}`], cwd);
+    const out = git(["rev-list", "--count", `origin/${defaultBranch}..${branch}`], cwd);
     return parseInt(out, 10) > 0;
   } catch {
     try {
-      const out = git(["rev-list", "--count", `${defaultBranch2}..${branch}`], cwd);
+      const out = git(["rev-list", "--count", `${defaultBranch}..${branch}`], cwd);
       return parseInt(out, 10) > 0;
     } catch {
       return false;
@@ -5725,7 +5764,7 @@ var init_commit = __esm({
       "dist/",
       "build/"
     ];
-    ALLOWED_PATH_PREFIXES = [".kody/memory/", ".kody/tasks/"];
+    ALLOWED_PATH_PREFIXES = [];
     FORBIDDEN_PATH_EXACT = /* @__PURE__ */ new Set([".env", ".kody-pip-requirements.txt", "kody.config.json"]);
     FORBIDDEN_PATH_SUFFIXES = [".log"];
     CONVENTIONAL_PREFIXES = [
@@ -6129,10 +6168,10 @@ var init_state2 = __esm({
     "use strict";
     VALID_STATES = /* @__PURE__ */ new Set(["active", "abandoned", "closed", "done"]);
     GoalStateError = class extends Error {
-      constructor(path46, message) {
-        super(`Invalid goal state at ${path46}:
+      constructor(path48, message) {
+        super(`Invalid goal state at ${path48}:
   ${message}`);
-        this.path = path46;
+        this.path = path48;
         this.name = "GoalStateError";
       }
       path;
@@ -7278,13 +7317,13 @@ function companyIntentPath(id) {
   assertIntentId(id);
   return `intents/${id}/intent.json`;
 }
-function normalizeCompanyIntent(path46, raw) {
+function normalizeCompanyIntent(path48, raw) {
   if (!raw || typeof raw !== "object" || Array.isArray(raw)) {
-    throw new Error(`${path46}: intent must be JSON object`);
+    throw new Error(`${path48}: intent must be JSON object`);
   }
   const input = raw;
   const id = stringField2(input.id);
-  if (!id || !isCompanyIntentId(id)) throw new Error(`${path46}: invalid intent id`);
+  if (!id || !isCompanyIntentId(id)) throw new Error(`${path48}: invalid intent id`);
   const createdAt = stringField2(input.createdAt) || nowIso();
   const updatedAt = stringField2(input.updatedAt) || createdAt;
   return {
@@ -7323,8 +7362,8 @@ function listCompanyIntents(config, cwd) {
   const records = [];
   for (const entry of entries) {
     if (entry.type !== "dir" || !entry.name || !isCompanyIntentId(entry.name)) continue;
-    const path46 = companyIntentPath(entry.name);
-    const file = readStateText(config, cwd, path46);
+    const path48 = companyIntentPath(entry.name);
+    const file = readStateText(config, cwd, path48);
     if (!file) continue;
     records.push({
       id: entry.name,
@@ -7335,8 +7374,8 @@ function listCompanyIntents(config, cwd) {
   return records.sort((a, b) => a.intent.priority - b.intent.priority || a.id.localeCompare(b.id));
 }
 function readCompanyIntent(config, cwd, id) {
-  const path46 = companyIntentPath(id);
-  const file = readStateText(config, cwd, path46);
+  const path48 = companyIntentPath(id);
+  const file = readStateText(config, cwd, path48);
   if (!file) return null;
   return { id, path: file.path, intent: normalizeCompanyIntent(file.path, JSON.parse(file.content)) };
 }
@@ -9947,12 +9986,12 @@ function restoreKodyAssets(cwd) {
   } catch {
   }
 }
-function ensureFeatureBranch(issueNumber, title, defaultBranch2, cwd, baseBranch) {
-  const result = ensureFeatureBranchInner(issueNumber, title, defaultBranch2, cwd, baseBranch);
+function ensureFeatureBranch(issueNumber, title, defaultBranch, cwd, baseBranch) {
+  const result = ensureFeatureBranchInner(issueNumber, title, defaultBranch, cwd, baseBranch);
   restoreKodyAssets(cwd);
   return result;
 }
-function ensureFeatureBranchInner(issueNumber, title, defaultBranch2, cwd, baseBranch) {
+function ensureFeatureBranchInner(issueNumber, title, defaultBranch, cwd, baseBranch) {
   const branchName = deriveBranchName(issueNumber, title);
   resetWorkingTree2(cwd);
   const current = getCurrentBranch(cwd);
@@ -9969,7 +10008,7 @@ function ensureFeatureBranchInner(issueNumber, title, defaultBranch2, cwd, baseB
     originBranchExists = true;
   } catch {
   }
-  if (originBranchExists && baseBranch && baseBranch !== defaultBranch2) {
+  if (originBranchExists && baseBranch && baseBranch !== defaultBranch) {
     let baseExists = false;
     try {
       git3(["rev-parse", "--verify", `origin/${baseBranch}`], cwd);
@@ -10010,16 +10049,16 @@ function ensureFeatureBranchInner(issueNumber, title, defaultBranch2, cwd, baseB
       git3(["pull", "origin", branchName], cwd);
     } catch {
     }
-    if (!baseBranch || baseBranch === defaultBranch2) {
+    if (!baseBranch || baseBranch === defaultBranch) {
       try {
-        git3(["merge", "--no-edit", `origin/${defaultBranch2}`], cwd);
+        git3(["merge", "--no-edit", `origin/${defaultBranch}`], cwd);
       } catch {
         try {
           git3(["merge", "--abort"], cwd);
         } catch {
         }
         throw new Error(
-          `Branch '${branchName}' has merge conflicts with 'origin/${defaultBranch2}'. Resolve manually or delete the branch to start fresh.`
+          `Branch '${branchName}' has merge conflicts with 'origin/${defaultBranch}'. Resolve manually or delete the branch to start fresh.`
         );
       }
     }
@@ -10031,8 +10070,8 @@ function ensureFeatureBranchInner(issueNumber, title, defaultBranch2, cwd, baseB
     return { branch: branchName, created: false };
   } catch {
   }
-  let forkPoint = defaultBranch2;
-  if (baseBranch && baseBranch !== defaultBranch2) {
+  let forkPoint = defaultBranch;
+  if (baseBranch && baseBranch !== defaultBranch) {
     try {
       git3(["rev-parse", "--verify", `origin/${baseBranch}`], cwd);
       forkPoint = baseBranch;
@@ -10313,11 +10352,11 @@ function detectOwnerRepo(cwd) {
   if (!m) return null;
   return { owner: m[1], repo: m[2] };
 }
-function makeConfig(pm, ownerRepo, defaultBranch2) {
+function makeConfig(pm, ownerRepo, defaultBranch) {
   return {
     $schema: schemaUrlFromPkg(),
     quality: qualityCommandsFor(pm),
-    git: { defaultBranch: defaultBranch2 },
+    git: { defaultBranch },
     github: {
       owner: ownerRepo?.owner ?? "OWNER",
       repo: ownerRepo?.repo ?? "REPO"
@@ -10352,12 +10391,12 @@ function performInit(cwd, force) {
   const skipped = [];
   const pm = detectPackageManager(cwd);
   const ownerRepo = detectOwnerRepo(cwd);
-  const defaultBranch2 = defaultBranchFromGit(cwd);
+  const defaultBranch = defaultBranchFromGit(cwd);
   const configPath = path31.join(cwd, "kody.config.json");
   if (fs31.existsSync(configPath) && !force) {
     skipped.push("kody.config.json");
   } else {
-    const cfg = makeConfig(pm, ownerRepo, defaultBranch2);
+    const cfg = makeConfig(pm, ownerRepo, defaultBranch);
     fs31.writeFileSync(configPath, `${JSON.stringify(cfg, null, 2)}
 `);
     wrote.push("kody.config.json");
@@ -10371,15 +10410,6 @@ function performInit(cwd, force) {
     fs31.writeFileSync(workflowPath, WORKFLOW_TEMPLATE);
     wrote.push(".github/workflows/kody.yml");
   }
-  const agentsDir = path31.join(cwd, ".kody", "agents");
-  const agentPath = path31.join(agentsDir, "kody.md");
-  if (fs31.existsSync(agentPath) && !force) {
-    skipped.push(".kody/agents/kody.md");
-  } else {
-    fs31.mkdirSync(agentsDir, { recursive: true });
-    fs31.writeFileSync(agentPath, DEFAULT_AGENT_IDENTITY);
-    wrote.push(".kody/agents/kody.md");
-  }
   for (const exe of listAgentActions()) {
     let profile;
     try {
@@ -10439,7 +10469,7 @@ jobs:
         run: npx -y -p @kody-ade/kody-engine@latest kody-engine exec ${name}
 `;
 }
-var WORKFLOW_TEMPLATE, DEFAULT_AGENT_IDENTITY, initFlow;
+var WORKFLOW_TEMPLATE, initFlow;
 var init_initFlow = __esm({
   "src/scripts/initFlow.ts"() {
     "use strict";
@@ -10512,13 +10542,6 @@ jobs:
       - env:
           ALL_SECRETS: \${{ toJSON(secrets) }}
         run: npx -y -p @kody-ade/kody-engine@latest kody-engine ci
-`;
-    DEFAULT_AGENT_IDENTITY = `# Kody
-
-You are Kody, the default maintenance agent for scheduled agentResponsibilities.
-
-Keep actions narrow, prefer read-only inspection, and only use the tools or commands named by the agentResponsibility.
-When a agentResponsibility writes a report or dispatches work, keep the output factual and concise.
 `;
     initFlow = async (ctx) => {
       const force = ctx.args.force === true;
@@ -10724,7 +10747,7 @@ function retryDelaysMs() {
 }
 function sleep(ms) {
   if (ms <= 0) return Promise.resolve();
-  return new Promise((resolve7) => setTimeout(resolve7, ms));
+  return new Promise((resolve8) => setTimeout(resolve8, ms));
 }
 async function fetchGoalStateWithRetry(config, goalId, cwd) {
   let state = fetchGoalState(config, goalId, cwd);
@@ -11551,7 +11574,11 @@ function normalizeBundleFiles(ctx, bundle) {
     if (file.path.startsWith("/") || file.path.includes("\\")) {
       throw new Error(`openAgentFactoryStatePr: files[${index}].path must be a relative POSIX path`);
     }
-    const relativePath = normalizeStatePath(file.path, `files[${index}].path`);
+    const normalizedPath = normalizeStatePath(file.path, `files[${index}].path`);
+    const relativePath = normalizedPath.replace(/^\.kody\/?/, "");
+    if (!relativePath) {
+      throw new Error(`openAgentFactoryStatePr: files[${index}].path must point to a state repo file`);
+    }
     if (seen.has(relativePath)) {
       throw new Error(`openAgentFactoryStatePr: duplicate generated file path: ${relativePath}`);
     }
@@ -13070,11 +13097,11 @@ var init_resolveQaUrl = __esm({
       const fallback = readKodyVariables(ctx.cwd).QA_URL?.trim();
       if (fallback && fallback.length > 0) {
         ctx.data.previewUrl = fallback;
-        ctx.data.previewUrlSource = "QA_URL variable (.kody/variables.json)";
+        ctx.data.previewUrlSource = "QA_URL variable (state repo variables.json)";
         return;
       }
       throw new Error(
-        "qa-engineer: no URL resolved. Pass --url, set --goal <id> on a goal that has a Vercel preview, set $PREVIEW_URL, or set the QA_URL variable in .kody/variables.json."
+        "qa-engineer: no URL resolved. Pass --url, set --goal <id> on a goal that has a Vercel preview, set $PREVIEW_URL, or set the QA_URL variable in the state repo variables.json."
       );
     };
   }
@@ -13307,9 +13334,9 @@ var init_runFlow = __esm({
 });
 
 // src/scripts/previewBuildHelpers.ts
-import { createDecipheriv, createHash as createHash2 } from "crypto";
+import { createDecipheriv, createHash as createHash3 } from "crypto";
 function shortHash(s) {
-  return createHash2("sha256").update(s).digest("hex").slice(0, 6);
+  return createHash3("sha256").update(s).digest("hex").slice(0, 6);
 }
 function previewAppName(repo, pr) {
   const [owner, name] = repo.split("/");
@@ -13363,7 +13390,7 @@ function formatPreviewComment(args) {
   ].join("\n");
 }
 function defaultImageTag(repo, ref) {
-  return createHash2("sha256").update(`${repo}@${ref}`).digest("hex").slice(0, 12);
+  return createHash3("sha256").update(`${repo}@${ref}`).digest("hex").slice(0, 12);
 }
 var NEVER_PASS_TO_BUILD;
 var init_previewBuildHelpers = __esm({
@@ -13383,7 +13410,7 @@ var init_previewBuildHelpers = __esm({
 // src/scripts/previewBuildRun.ts
 import { spawn as spawn4 } from "child_process";
 async function runCmd(cmd, args, opts = {}) {
-  await new Promise((resolve7, reject) => {
+  await new Promise((resolve8, reject) => {
     const child = spawn4(cmd, args, {
       cwd: opts.cwd,
       env: { ...process.env, ...opts.env ?? {} },
@@ -13395,7 +13422,7 @@ async function runCmd(cmd, args, opts = {}) {
     }
     child.on("error", reject);
     child.on("close", (code) => {
-      if (code === 0) resolve7();
+      if (code === 0) resolve8();
       else reject(new Error(`${cmd} ${args.join(" ")} exited ${code}`));
     });
   });
@@ -13465,14 +13492,196 @@ fi
   }
 });
 
+// src/stateRepoGithub.ts
+import * as fs37 from "fs";
+import * as path36 from "path";
+function recordValue2(value) {
+  return value && typeof value === "object" && !Array.isArray(value) ? value : null;
+}
+function contentsUrl(owner, repo, filePath) {
+  const encodedPath = filePath.split("/").filter(Boolean).map((part) => encodeURIComponent(part)).join("/");
+  return `${GITHUB_API}/repos/${encodeURIComponent(owner)}/${encodeURIComponent(repo)}/contents/${encodedPath}`;
+}
+async function githubContentsFile(opts) {
+  const doFetch = opts.fetchImpl ?? fetch;
+  const res = await doFetch(contentsUrl(opts.owner, opts.repo, opts.path), {
+    headers: {
+      Authorization: `Bearer ${opts.githubToken}`,
+      Accept: "application/vnd.github+json",
+      "X-GitHub-Api-Version": "2022-11-28",
+      "User-Agent": "kody-engine"
+    },
+    signal: AbortSignal.timeout(REQ_TIMEOUT_MS2)
+  });
+  if (res.status === 404) return null;
+  if (!res.ok) {
+    throw new Error(
+      `GitHub ${opts.owner}/${opts.repo}:${opts.path}: ${res.status} ${(await res.text().catch(() => "")).slice(0, 160)}`
+    );
+  }
+  return await res.json();
+}
+function decodeContentsFile(file, label) {
+  if (file.type !== "file" || file.encoding !== "base64" || typeof file.content !== "string") {
+    throw new Error(`${label} is not a base64 file`);
+  }
+  if (typeof file.sha !== "string") {
+    throw new Error(`${label} response missing sha`);
+  }
+  return {
+    path: label,
+    content: Buffer.from(file.content, "base64").toString("utf-8"),
+    sha: file.sha
+  };
+}
+async function loadGithubStateConfig(opts) {
+  const configFile = await githubContentsFile({
+    owner: opts.owner,
+    repo: opts.repo,
+    path: "kody.config.json",
+    githubToken: opts.githubToken,
+    fetchImpl: opts.fetchImpl
+  });
+  let raw = {};
+  if (configFile) {
+    const decoded = decodeContentsFile(configFile, "kody.config.json");
+    try {
+      raw = JSON.parse(decoded.content);
+    } catch (err) {
+      throw new Error(`kody.config.json is invalid JSON: ${err instanceof Error ? err.message : String(err)}`);
+    }
+  }
+  const githubRaw = recordValue2(raw.github) ?? {};
+  const github = {
+    owner: typeof githubRaw.owner === "string" && githubRaw.owner.trim() ? githubRaw.owner.trim() : opts.owner,
+    repo: typeof githubRaw.repo === "string" && githubRaw.repo.trim() ? githubRaw.repo.trim() : opts.repo
+  };
+  const nestedState = recordValue2(raw.state) ?? {};
+  const repoRaw = typeof raw.stateRepo === "string" ? raw.stateRepo : nestedState.repo;
+  const pathRaw = typeof raw.statePath === "string" ? raw.statePath : nestedState.path;
+  const stateRepo = typeof repoRaw === "string" && repoRaw.trim().length > 0 ? repoRaw.trim() : `https://github.com/${github.owner}/kody-state`;
+  parseStateRepoSlug(stateRepo);
+  const statePath2 = typeof pathRaw === "string" && pathRaw.trim().length > 0 ? pathRaw.trim() : github.repo;
+  return {
+    github,
+    state: {
+      repo: stateRepo,
+      path: normalizeStatePath(statePath2)
+    }
+  };
+}
+async function readGithubStateText(opts) {
+  const config = await loadGithubStateConfig(opts);
+  return readGithubStateTextWithConfig({
+    config,
+    filePath: opts.filePath,
+    githubToken: opts.githubToken,
+    fetchImpl: opts.fetchImpl
+  });
+}
+async function readGithubStateTextWithConfig(opts) {
+  const target = stateRepoPath(opts.config, opts.filePath);
+  const parsed = parseStateRepo(opts.config);
+  const file = await githubContentsFile({
+    owner: parsed.owner,
+    repo: parsed.repo,
+    path: target,
+    githubToken: opts.githubToken,
+    fetchImpl: opts.fetchImpl
+  });
+  return file ? decodeContentsFile(file, target) : null;
+}
+async function writeGithubStateTextWithConfig(opts) {
+  const target = stateRepoPath(opts.config, opts.filePath);
+  const parsed = parseStateRepo(opts.config);
+  const payload = {
+    message: opts.message,
+    content: Buffer.from(opts.content, "utf-8").toString("base64")
+  };
+  if (opts.sha) payload.sha = opts.sha;
+  const doFetch = opts.fetchImpl ?? fetch;
+  const res = await doFetch(contentsUrl(parsed.owner, parsed.repo, target), {
+    method: "PUT",
+    headers: {
+      Authorization: `Bearer ${opts.githubToken}`,
+      Accept: "application/vnd.github+json",
+      "Content-Type": "application/json",
+      "X-GitHub-Api-Version": "2022-11-28",
+      "User-Agent": "kody-engine"
+    },
+    body: JSON.stringify(payload),
+    signal: AbortSignal.timeout(REQ_TIMEOUT_MS2)
+  });
+  if (!res.ok) {
+    throw new Error(
+      `GitHub write ${parsed.owner}/${parsed.repo}:${target}: ${res.status} ${(await res.text().catch(() => "")).slice(0, 160)}`
+    );
+  }
+}
+function jsonlLines(text) {
+  return text.split("\n").filter((line) => line.length > 0);
+}
+function renderJsonl(lines) {
+  return lines.length > 0 ? `${lines.join("\n")}
+` : "";
+}
+function mergeJsonl(localText, remoteText) {
+  const remoteLines = jsonlLines(remoteText);
+  const seen = new Set(remoteLines);
+  const localOnly = jsonlLines(localText).filter((line) => !seen.has(line));
+  return renderJsonl([...remoteLines, ...localOnly]);
+}
+async function syncJsonlFileFromGithubState(opts) {
+  const remote = await readGithubStateTextWithConfig(opts);
+  if (!remote) return;
+  const local = fs37.existsSync(opts.localPath) ? fs37.readFileSync(opts.localPath, "utf-8") : "";
+  const next = mergeJsonl(local, remote.content);
+  if (next === local) return;
+  fs37.mkdirSync(path36.dirname(opts.localPath), { recursive: true });
+  fs37.writeFileSync(opts.localPath, next);
+}
+async function persistJsonlFileToGithubState(opts) {
+  if (!fs37.existsSync(opts.localPath)) return;
+  const localText = fs37.readFileSync(opts.localPath, "utf-8");
+  for (let attempt = 1; attempt <= 3; attempt += 1) {
+    const remote = await readGithubStateTextWithConfig(opts);
+    const body = mergeJsonl(localText, remote?.content ?? "");
+    try {
+      await writeGithubStateTextWithConfig({
+        config: opts.config,
+        filePath: opts.filePath,
+        content: body,
+        message: opts.message,
+        githubToken: opts.githubToken,
+        sha: remote?.sha,
+        fetchImpl: opts.fetchImpl
+      });
+      return;
+    } catch (err) {
+      const msg = err instanceof Error ? err.message : String(err);
+      const conflict = /409|422|does not match|is at|but expected/i.test(msg);
+      if (!conflict || attempt === 3) throw err;
+    }
+  }
+}
+var GITHUB_API, REQ_TIMEOUT_MS2;
+var init_stateRepoGithub = __esm({
+  "src/stateRepoGithub.ts"() {
+    "use strict";
+    init_stateRepo();
+    GITHUB_API = "https://api.github.com";
+    REQ_TIMEOUT_MS2 = 3e4;
+  }
+});
+
 // src/scripts/runPreviewBuild.ts
 import { copyFile, writeFile } from "fs/promises";
-import * as path36 from "path";
+import * as path37 from "path";
 import { fileURLToPath } from "url";
 function bundledDockerfilePath(mode) {
-  const here = path36.dirname(fileURLToPath(import.meta.url));
+  const here = path37.dirname(fileURLToPath(import.meta.url));
   const file = mode === "dev" ? "default-Dockerfile.preview.dev" : "default-Dockerfile.preview.prod";
-  return path36.join(here, "preview-build-templates", file);
+  return path37.join(here, "preview-build-templates", file);
 }
 function required(name) {
   const v = (process.env[name] ?? "").trim();
@@ -13485,33 +13694,24 @@ function flyHeaders(token) {
     "Content-Type": "application/json"
   };
 }
-async function ghJSON(url, token) {
-  const res = await fetch(url, {
-    headers: {
-      Authorization: `Bearer ${token}`,
-      Accept: "application/vnd.github+json",
-      "X-GitHub-Api-Version": "2022-11-28"
-    },
-    signal: AbortSignal.timeout(REQ_TIMEOUT_MS2)
-  });
-  if (!res.ok) {
-    throw new Error(`GitHub ${url}: ${res.status} ${res.statusText}`);
-  }
-  return await res.json();
-}
 async function fetchVaultDoc(repo, ghToken3, masterKey) {
-  const meta = await ghJSON(
-    `https://api.github.com/repos/${repo}/contents/.kody/secrets.enc`,
-    ghToken3
-  );
-  const payload = Buffer.from(meta.content, "base64").toString("utf8");
+  const [owner, name] = repo.split("/", 2);
+  if (!owner || !name) throw new Error(`invalid GITHUB_REPOSITORY "${repo}"`);
+  const meta = await readGithubStateText({
+    owner,
+    repo: name,
+    filePath: "secrets.enc",
+    githubToken: ghToken3
+  });
+  if (!meta) throw new Error("state repo has no secrets.enc \u2014 save secrets from the dashboard first");
+  const payload = meta.content;
   const plaintext = decryptVaultPayload(payload, masterKey);
   return JSON.parse(plaintext);
 }
 async function flyAppExists(name, token) {
   const res = await fetch(`${FLY_MACHINES}/apps/${encodeURIComponent(name)}`, {
     headers: flyHeaders(token),
-    signal: AbortSignal.timeout(REQ_TIMEOUT_MS2)
+    signal: AbortSignal.timeout(REQ_TIMEOUT_MS3)
   });
   if (res.status === 404) return false;
   if (!res.ok) {
@@ -13524,7 +13724,7 @@ async function flyCreateApp(name, orgSlug, token) {
     method: "POST",
     headers: flyHeaders(token),
     body: JSON.stringify({ app_name: name, org_slug: orgSlug }),
-    signal: AbortSignal.timeout(REQ_TIMEOUT_MS2)
+    signal: AbortSignal.timeout(REQ_TIMEOUT_MS3)
   });
   if (res.status === 422) return;
   if (!res.ok) {
@@ -13543,7 +13743,7 @@ async function flyAllocateSharedIps(appName, token) {
     method: "POST",
     headers: flyHeaders(token),
     body: JSON.stringify({ query: mutation, variables: { appId: appName } }),
-    signal: AbortSignal.timeout(REQ_TIMEOUT_MS2)
+    signal: AbortSignal.timeout(REQ_TIMEOUT_MS3)
   });
   if (!res.ok) {
     throw new Error(`allocateSharedIps ${appName}: ${res.status}`);
@@ -13559,7 +13759,7 @@ async function flyAllocateSharedIps(appName, token) {
 async function flyListMachines(appName, token) {
   const res = await fetch(`${FLY_MACHINES}/apps/${encodeURIComponent(appName)}/machines`, {
     headers: flyHeaders(token),
-    signal: AbortSignal.timeout(REQ_TIMEOUT_MS2)
+    signal: AbortSignal.timeout(REQ_TIMEOUT_MS3)
   });
   if (res.status === 404) return [];
   if (!res.ok) {
@@ -13572,14 +13772,14 @@ async function flyDestroyMachine(appName, machineId, token) {
   await fetch(`${FLY_MACHINES}/apps/${encodeURIComponent(appName)}/machines/${encodeURIComponent(machineId)}/stop`, {
     method: "POST",
     headers: flyHeaders(token),
-    signal: AbortSignal.timeout(REQ_TIMEOUT_MS2)
+    signal: AbortSignal.timeout(REQ_TIMEOUT_MS3)
   }).catch(() => void 0);
   const res = await fetch(
     `${FLY_MACHINES}/apps/${encodeURIComponent(appName)}/machines/${encodeURIComponent(machineId)}?force=true`,
     {
       method: "DELETE",
       headers: flyHeaders(token),
-      signal: AbortSignal.timeout(REQ_TIMEOUT_MS2)
+      signal: AbortSignal.timeout(REQ_TIMEOUT_MS3)
     }
   );
   if (res.status === 404) return;
@@ -13630,7 +13830,7 @@ async function flyCreatePreviewMachine(args, token) {
       method: "POST",
       headers: flyHeaders(token),
       body: JSON.stringify(body),
-      signal: AbortSignal.timeout(REQ_TIMEOUT_MS2)
+      signal: AbortSignal.timeout(REQ_TIMEOUT_MS3)
     });
     if (res.ok) {
       const { id } = await res.json();
@@ -13654,7 +13854,7 @@ async function postOrUpdatePreviewComment(args) {
   };
   const listRes = await fetch(`${base}?per_page=100`, {
     headers,
-    signal: AbortSignal.timeout(REQ_TIMEOUT_MS2)
+    signal: AbortSignal.timeout(REQ_TIMEOUT_MS3)
   }).catch(() => null);
   let existingId = null;
   if (listRes?.ok) {
@@ -13667,7 +13867,7 @@ async function postOrUpdatePreviewComment(args) {
       method: "PATCH",
       headers,
       body: JSON.stringify({ body: args.body }),
-      signal: AbortSignal.timeout(REQ_TIMEOUT_MS2)
+      signal: AbortSignal.timeout(REQ_TIMEOUT_MS3)
     });
     return;
   }
@@ -13675,19 +13875,20 @@ async function postOrUpdatePreviewComment(args) {
     method: "POST",
     headers,
     body: JSON.stringify({ body: args.body }),
-    signal: AbortSignal.timeout(REQ_TIMEOUT_MS2)
+    signal: AbortSignal.timeout(REQ_TIMEOUT_MS3)
   });
 }
-var FLY_MACHINES, FLY_GRAPHQL, REQ_TIMEOUT_MS2, runPreviewBuild;
+var FLY_MACHINES, FLY_GRAPHQL, REQ_TIMEOUT_MS3, runPreviewBuild;
 var init_runPreviewBuild = __esm({
   "src/scripts/runPreviewBuild.ts"() {
     "use strict";
     init_previewBuildHelpers();
     init_previewBuildNamespace();
     init_previewBuildRun();
+    init_stateRepoGithub();
     FLY_MACHINES = "https://api.machines.dev/v1";
     FLY_GRAPHQL = "https://api.fly.io/graphql";
-    REQ_TIMEOUT_MS2 = 3e4;
+    REQ_TIMEOUT_MS3 = 3e4;
     runPreviewBuild = async (ctx, _profile, _args) => {
       ctx.skipAgent = true;
       const pr = Number(ctx.args.pr);
@@ -13731,10 +13932,10 @@ var init_runPreviewBuild = __esm({
         console.log(`[preview-build] vault: ${Object.keys(buildEnv).length} secrets, mode=${buildMode}`);
         if (Object.keys(buildEnv).length > 0) {
           const lines = Object.entries(buildEnv).map(([k, v]) => `${k}=${JSON.stringify(v)}`);
-          await writeFile(path36.join(ctx.cwd, ".env.production.local"), `${lines.join("\n")}
+          await writeFile(path37.join(ctx.cwd, ".env.production.local"), `${lines.join("\n")}
 `, "utf8");
         }
-        const consumerDockerfile = path36.join(ctx.cwd, "Dockerfile.preview");
+        const consumerDockerfile = path37.join(ctx.cwd, "Dockerfile.preview");
         const { stat } = await import("fs/promises");
         let hasConsumerDockerfile = false;
         try {
@@ -13918,8 +14119,8 @@ var init_tickShellRunner = __esm({
 });
 
 // src/scripts/runScheduledAgentActionTick.ts
-import * as fs37 from "fs";
-import * as path37 from "path";
+import * as fs38 from "fs";
+import * as path38 from "path";
 var runScheduledAgentActionTick;
 var init_runScheduledAgentActionTick = __esm({
   "src/scripts/runScheduledAgentActionTick.ts"() {
@@ -13939,14 +14140,14 @@ var init_runScheduledAgentActionTick = __esm({
         ctx.output.reason = `runScheduledAgentActionTick: args.slug or ctx.args.${slugArg} must be non-empty agentResponsibility slug`;
         return;
       }
-      const agentResponsibility = resolveAgentResponsibilityFolder(slug2, path37.join(ctx.cwd, jobsDir));
+      const agentResponsibility = resolveAgentResponsibilityFolder(slug2, path38.join(ctx.cwd, jobsDir));
       if (!agentResponsibility) {
         ctx.output.exitCode = 99;
         ctx.output.reason = `runScheduledAgentActionTick: agentResponsibility folder not found or incomplete: ${slug2} (searched ${jobsDir} and company store)`;
         return;
       }
-      const shellPath = path37.join(profile.dir, shell);
-      if (!fs37.existsSync(shellPath)) {
+      const shellPath = path38.join(profile.dir, shell);
+      if (!fs38.existsSync(shellPath)) {
         ctx.output.exitCode = 99;
         ctx.output.reason = `runScheduledAgentActionTick: shell not found: ${shell} (looked in ${profile.dir})`;
         return;
@@ -13977,8 +14178,8 @@ var init_runScheduledAgentActionTick = __esm({
 });
 
 // src/scripts/runTickScript.ts
-import * as fs38 from "fs";
-import * as path38 from "path";
+import * as fs39 from "fs";
+import * as path39 from "path";
 var runTickScript;
 var init_runTickScript = __esm({
   "src/scripts/runTickScript.ts"() {
@@ -13997,10 +14198,10 @@ var init_runTickScript = __esm({
         ctx.output.reason = `runTickScript: ctx.args.${slugArg} must be a non-empty slug`;
         return;
       }
-      const agentResponsibility = readAgentResponsibilityFolder(path38.join(ctx.cwd, jobsDir), slug2);
+      const agentResponsibility = readAgentResponsibilityFolder(path39.join(ctx.cwd, jobsDir), slug2);
       if (!agentResponsibility) {
         ctx.output.exitCode = 99;
-        ctx.output.reason = `runTickScript: agentResponsibility folder not found or incomplete: ${path38.join(ctx.cwd, jobsDir, slug2)}`;
+        ctx.output.reason = `runTickScript: agentResponsibility folder not found or incomplete: ${path39.join(ctx.cwd, jobsDir, slug2)}`;
         return;
       }
       const tickScript = agentResponsibility.config.tickScript;
@@ -14009,8 +14210,8 @@ var init_runTickScript = __esm({
         ctx.output.reason = `runTickScript: agentResponsibility ${slug2} has no \`tickScript\` in profile.json \u2014 route via agent-responsibility-tick instead`;
         return;
       }
-      const scriptPath = path38.isAbsolute(tickScript) ? tickScript : path38.join(ctx.cwd, tickScript);
-      if (!fs38.existsSync(scriptPath)) {
+      const scriptPath = path39.isAbsolute(tickScript) ? tickScript : path39.join(ctx.cwd, tickScript);
+      if (!fs39.existsSync(scriptPath)) {
         ctx.output.exitCode = 99;
         ctx.output.reason = `runTickScript: tickScript not found: ${scriptPath}`;
         return;
@@ -14345,7 +14546,7 @@ function stripAnsi2(s) {
   return s.replace(ANSI_RE2, "");
 }
 function runCommand2(command, cwd) {
-  return new Promise((resolve7) => {
+  return new Promise((resolve8) => {
     const child = spawn5(command, {
       cwd,
       shell: true,
@@ -14372,11 +14573,11 @@ function runCommand2(command, cwd) {
     }, TEST_TIMEOUT_MS);
     child.on("exit", (code) => {
       clearTimeout(timer);
-      resolve7({ exitCode: code ?? -1, output: Buffer.concat(buffers).toString("utf-8") });
+      resolve8({ exitCode: code ?? -1, output: Buffer.concat(buffers).toString("utf-8") });
     });
     child.on("error", (err) => {
       clearTimeout(timer);
-      resolve7({ exitCode: -1, output: err.message });
+      resolve8({ exitCode: -1, output: err.message });
     });
   });
 }
@@ -14781,21 +14982,21 @@ function lineStream(stream) {
     tryDeliver();
   });
   return {
-    next: (timeoutMs) => new Promise((resolve7) => {
+    next: (timeoutMs) => new Promise((resolve8) => {
       if (queue.length > 0) {
-        resolve7(queue.shift());
+        resolve8(queue.shift());
         return;
       }
       if (ended) {
-        resolve7(null);
+        resolve8(null);
         return;
       }
-      waiter = resolve7;
+      waiter = resolve8;
       const t = setTimeout(
         () => {
-          if (waiter === resolve7) {
+          if (waiter === resolve8) {
             waiter = null;
-            resolve7(null);
+            resolve8(null);
           }
         },
         Math.max(0, timeoutMs)
@@ -14832,7 +15033,7 @@ var init_warmupMcp = __esm({
 });
 
 // src/scripts/writeAgentRunSummary.ts
-import * as fs39 from "fs";
+import * as fs40 from "fs";
 var writeAgentRunSummary;
 var init_writeAgentRunSummary = __esm({
   "src/scripts/writeAgentRunSummary.ts"() {
@@ -14858,7 +15059,7 @@ var init_writeAgentRunSummary = __esm({
       if (reason) lines.push(`- **Reason:** ${reason}`);
       lines.push("");
       try {
-        fs39.appendFileSync(summaryPath, `${lines.join("\n")}
+        fs40.appendFileSync(summaryPath, `${lines.join("\n")}
 `);
       } catch {
       }
@@ -15259,6 +15460,59 @@ var init_scripts = __esm({
   }
 });
 
+// src/stateWorkspace.ts
+import * as fs41 from "fs";
+import * as path40 from "path";
+function writeLocalFile(cwd, relativePath, content) {
+  const fullPath = path40.join(cwd, relativePath);
+  fs41.mkdirSync(path40.dirname(fullPath), { recursive: true });
+  fs41.writeFileSync(fullPath, content);
+}
+function hydrateDirectory(config, cwd, stateDir, localDir) {
+  const entries = listStateDirectory(config, cwd, stateDir);
+  if (entries.length === 0) return;
+  fs41.rmSync(path40.join(cwd, localDir), { recursive: true, force: true });
+  for (const entry of entries) {
+    if (!entry.name || !entry.type) continue;
+    const childState = path40.posix.join(stateDir, entry.name);
+    const childLocal = path40.join(localDir, entry.name);
+    if (entry.type === "dir") {
+      hydrateDirectory(config, cwd, childState, childLocal);
+    } else if (entry.type === "file") {
+      const file = readStateText(config, cwd, childState);
+      if (file) writeLocalFile(cwd, childLocal, file.content);
+    }
+  }
+}
+function hydrateStateWorkspace(config, cwd) {
+  for (const mapping of DIR_MAPPINGS) {
+    hydrateDirectory(config, cwd, mapping.stateDir, mapping.localDir);
+  }
+  for (const mapping of FILE_MAPPINGS) {
+    const file = readStateText(config, cwd, mapping.statePath);
+    if (file) writeLocalFile(cwd, mapping.localPath, file.content);
+  }
+}
+var DIR_MAPPINGS, FILE_MAPPINGS;
+var init_stateWorkspace = __esm({
+  "src/stateWorkspace.ts"() {
+    "use strict";
+    init_stateRepo();
+    DIR_MAPPINGS = [
+      { stateDir: "agent-actions", localDir: path40.join(".kody", "agent-actions") },
+      { stateDir: "agent-responsibilities", localDir: path40.join(".kody", "agent-responsibilities") },
+      { stateDir: "agents", localDir: path40.join(".kody", "agents") },
+      { stateDir: "context", localDir: path40.join(".kody", "context") },
+      { stateDir: "memory", localDir: path40.join(".kody", "memory") }
+    ];
+    FILE_MAPPINGS = [
+      { statePath: "instructions.md", localPath: path40.join(".kody", "instructions.md") },
+      { statePath: "variables.json", localPath: path40.join(".kody", "variables.json") },
+      { statePath: "secrets.enc", localPath: path40.join(".kody", "secrets.enc") }
+    ];
+  }
+});
+
 // src/tools.ts
 import { execFileSync as execFileSync24 } from "child_process";
 function verifyCliTools(tools, cwd) {
@@ -15325,8 +15579,8 @@ var init_tools = __esm({
 
 // src/executor.ts
 import { spawn as spawn7 } from "child_process";
-import * as fs40 from "fs";
-import * as path39 from "path";
+import * as fs42 from "fs";
+import * as path41 from "path";
 function isMutatingPostflight(scriptName) {
   return MUTATING_POSTFLIGHTS.has(scriptName ?? "");
 }
@@ -15450,6 +15704,9 @@ async function runAgentAction(profileName, input) {
       return finishAndEnd({ exitCode: 99, reason: `config error: ${err instanceof Error ? err.message : String(err)}` });
     }
   }
+  if (!input.skipConfig && config.github.owner && config.github.repo) {
+    hydrateStateWorkspace(config, input.cwd);
+  }
   const perAgentActionModel = config.agent.perAgentAction?.[profileName];
   const modelSpec = perAgentActionModel ? perAgentActionModel : profile.claudeCode.model === "inherit" ? config.agent.model : profile.claudeCode.model;
   const profileHasThinkingTokens = typeof profile.claudeCode.maxThinkingTokens === "number" && profile.claudeCode.maxThinkingTokens > 0;
@@ -15491,13 +15748,13 @@ async function runAgentAction(profileName, input) {
       })
     };
   })() : null;
-  const ndjsonDir = path39.join(input.cwd, ".kody");
+  const ndjsonDir = agentRunDir(input.cwd);
   const agentSlug = typeof profile.agent === "string" && profile.agent.length > 0 ? profile.agent : typeof ctx.data.jobAgent === "string" && ctx.data.jobAgent.length > 0 ? ctx.data.jobAgent : null;
   const agentIdentityBlock = agentSlug ? frameAgentIdentity(agentSlug, loadAgentIdentity(input.cwd, agentSlug)) : null;
   const jobWhyBlock = typeof ctx.data.jobWhy === "string" ? operatorRequestBlock(ctx.data.jobWhy) : null;
   const jobRefBlock = jobReferenceBlock(profileName, profile, ctx.data);
   const invokeAgent = async (prompt) => {
-    const externalPlugins = (profile.claudeCode.plugins ?? []).map((p) => path39.isAbsolute(p) ? p : path39.resolve(profile.dir, p)).filter((p) => p.length > 0);
+    const externalPlugins = (profile.claudeCode.plugins ?? []).map((p) => path41.isAbsolute(p) ? p : path41.resolve(profile.dir, p)).filter((p) => p.length > 0);
     const syntheticPath = ctx.data.syntheticPluginPath;
     const pluginPaths = [...externalPlugins, ...syntheticPath ? [syntheticPath] : []];
     const agents = loadSubagents(profile);
@@ -15523,6 +15780,7 @@ async function runAgentAction(profileName, input) {
       verbose: input.verbose,
       quiet: input.quiet,
       ndjsonDir,
+      additionalDirectories: taskArtifacts ? [taskArtifacts.absDir] : void 0,
       allowedToolsOverride: profile.claudeCode.tools,
       permissionModeOverride: profile.claudeCode.permissionMode,
       mcpServers: profile.claudeCode.mcpServers.length > 0 ? profile.claudeCode.mcpServers : void 0,
@@ -15751,7 +16009,14 @@ async function runAgentAction(profileName, input) {
           process.stderr.write(`[task-artifacts] task ${taskArtifacts.taskId} missing: ${missing2.join(", ")}
 `);
         }
-      } catch {
+        if (!input.skipConfig && (config.state || config.github.owner && config.github.repo)) {
+          persistTaskArtifactsToState(config, input.cwd, taskArtifacts);
+        }
+      } catch (err) {
+        process.stderr.write(
+          `[task-artifacts] persist failed for task ${taskArtifacts.taskId}: ${err instanceof Error ? err.message : String(err)}
+`
+        );
       }
     }
     try {
@@ -15881,17 +16146,17 @@ function clearStampedLifecycleLabels(profile, ctx) {
 function resolveProfilePath(profileName) {
   const found = resolveAgentAction(profileName);
   if (found) return found;
-  const here = path39.dirname(new URL(import.meta.url).pathname);
+  const here = path41.dirname(new URL(import.meta.url).pathname);
   const candidates = [
-    path39.join(here, "agent-actions", profileName, "profile.json"),
+    path41.join(here, "agent-actions", profileName, "profile.json"),
     // same-dir sibling (dev)
-    path39.join(here, "..", "agent-actions", profileName, "profile.json"),
+    path41.join(here, "..", "agent-actions", profileName, "profile.json"),
     // up one (prod: dist/bin → dist/agent-actions)
-    path39.join(here, "..", "src", "agent-actions", profileName, "profile.json")
+    path41.join(here, "..", "src", "agent-actions", profileName, "profile.json")
     // fallback
   ];
   for (const c of candidates) {
-    if (fs40.existsSync(c)) return c;
+    if (fs42.existsSync(c)) return c;
   }
   return candidates[0];
 }
@@ -15989,8 +16254,8 @@ function resolveShellTimeoutMs(entry) {
 }
 async function runShellEntry(entry, ctx, profile) {
   const shellName = entry.shell;
-  const shellPath = path39.join(profile.dir, shellName);
-  if (!fs40.existsSync(shellPath)) {
+  const shellPath = path41.join(profile.dir, shellName);
+  if (!fs42.existsSync(shellPath)) {
     ctx.skipAgent = true;
     ctx.output.exitCode = 99;
     ctx.output.reason = `shell script not found: ${shellName} (looked in ${profile.dir})`;
@@ -16028,14 +16293,14 @@ async function runShellEntry(entry, ctx, profile) {
   let killTimer;
   let escalateTimer;
   const result = await new Promise(
-    (resolve7) => {
+    (resolve8) => {
       let settled = false;
       const settle = (code, signal, spawnErr) => {
         if (settled) return;
         settled = true;
         if (killTimer) clearTimeout(killTimer);
         if (escalateTimer) clearTimeout(escalateTimer);
-        resolve7({ code, signal, spawnErr });
+        resolve8({ code, signal, spawnErr });
       };
       child.on("error", (err) => settle(null, null, err));
       child.on("close", (code, signal) => settle(code, signal));
@@ -16121,9 +16386,11 @@ var init_executor = __esm({
     init_litellm();
     init_profile();
     init_registry();
+    init_runtimePaths();
     init_scripts();
     init_writeResponsibilityReport();
     init_subagents();
+    init_stateWorkspace();
     init_task_artifacts();
     init_tools();
     MUTATING_POSTFLIGHTS = /* @__PURE__ */ new Set([
@@ -16150,7 +16417,7 @@ __export(job_exports, {
   stableJobKey: () => stableJobKey,
   validateJob: () => validateJob
 });
-import * as path40 from "path";
+import * as path42 from "path";
 function newJobId(flavor) {
   localJobSeq += 1;
   const runId = process.env.GITHUB_RUN_ID;
@@ -16188,7 +16455,7 @@ function validateJob(input) {
 async function runJob(job, base) {
   const valid = validateJob(job);
   const action = valid.action ?? valid.agentResponsibility;
-  const projectAgentResponsibilitiesRoot = path40.join(base.cwd, ".kody", "agent-responsibilities");
+  const projectAgentResponsibilitiesRoot = path42.join(base.cwd, ".kody", "agent-responsibilities");
   const resolvedAgentResponsibility = action ? resolveAgentResponsibilityAction(action, projectAgentResponsibilitiesRoot) : null;
   const agentResponsibilityIdentity = valid.agentResponsibility ?? resolvedAgentResponsibility?.agentResponsibility;
   const agentResponsibilityContext = loadAgentResponsibilityContext(agentResponsibilityIdentity, base.cwd);
@@ -16248,7 +16515,7 @@ async function runJob(job, base) {
 }
 function loadAgentResponsibilityContext(slug2, cwd) {
   if (!slug2) return null;
-  return resolveAgentResponsibilityFolder(slug2, path40.join(cwd, ".kody", "agent-responsibilities"));
+  return resolveAgentResponsibilityFolder(slug2, path42.join(cwd, ".kody", "agent-responsibilities"));
 }
 function mintInstantJob(dispatch2, opts) {
   return {
@@ -16400,9 +16667,9 @@ function translateOpenAISseToBrain(opts) {
 }
 
 // src/servers/brain-serve.ts
-import * as fs43 from "fs";
+import * as fs45 from "fs";
 import { createServer } from "http";
-import * as path43 from "path";
+import * as path45 from "path";
 
 // src/chat/loop.ts
 init_agent();
@@ -16412,6 +16679,7 @@ import * as fs13 from "fs";
 import * as path15 from "path";
 
 // src/chat/attachments.ts
+init_runtimePaths();
 import * as fs10 from "fs";
 import * as path12 from "path";
 var INLINE_ATTACHMENT_RE = /(?:\[(?:Image|File): ([^\]]*)\]\n)?data:([\w.+-]+\/[\w.+-]+);base64,([A-Za-z0-9+/=]+)/g;
@@ -16429,7 +16697,7 @@ function extFor(mime) {
   return EXT_BY_MIME[mime.toLowerCase()] ?? mime.split("/")[1]?.replace(/[^\w]/g, "") ?? "bin";
 }
 function attachmentsDir(cwd, sessionId) {
-  return path12.join(cwd, ".kody", "tmp", "attachments", sessionId);
+  return runtimeStatePath(cwd, "attachments", sessionId);
 }
 function prepareAttachments(turns, cwd, sessionId) {
   const imagePaths = [];
@@ -16468,9 +16736,13 @@ function prepareAttachments(turns, cwd, sessionId) {
 // src/chat/events.ts
 import * as fs11 from "fs";
 import * as path13 from "path";
+import posixPath2 from "path/posix";
 function eventsFilePath(cwd, sessionId) {
   return path13.join(cwd, ".kody", "events", `${sessionId}.jsonl`);
 }
+function eventsStatePath(sessionId) {
+  return posixPath2.join("events", `${sessionId}.jsonl`);
+}
 var FileSink = class {
   constructor(file) {
     this.file = file;
@@ -16534,9 +16806,13 @@ function makeRunId(sessionId, suffix) {
 // src/chat/session.ts
 import * as fs12 from "fs";
 import * as path14 from "path";
+import posixPath3 from "path/posix";
 function sessionFilePath(cwd, sessionId) {
   return path14.join(cwd, ".kody", "sessions", `${sessionId}.jsonl`);
 }
+function sessionStatePath(sessionId) {
+  return posixPath3.join("sessions", `${sessionId}.jsonl`);
+}
 function readMeta(file) {
   if (!fs12.existsSync(file)) return null;
   const raw = fs12.readFileSync(file, "utf-8");
@@ -16770,6 +17046,10 @@ async function runChatTurn(opts) {
     litellmUrl: opts.litellmUrl,
     verbose: opts.verbose,
     quiet: opts.quiet,
+    additionalDirectories: [
+      taskArtifactsPaths.absDir,
+      ...Array.from(new Set(imagePaths.map((p2) => path15.dirname(p2))))
+    ],
     systemPromptAppend: systemPrompt,
     ...opts.reasoningEffort ? { reasoningEffort: opts.reasoningEffort } : {},
     // Let the agent clone + work on OTHER repos mid-conversation (a
@@ -16843,7 +17123,12 @@ async function runChatTurn(opts) {
 `
       );
     }
-  } catch {
+    if (opts.stateConfig) persistTaskArtifactsToState(opts.stateConfig, opts.cwd, taskArtifactsPaths);
+  } catch (err) {
+    process.stderr.write(
+      `[task-artifacts] chat session ${taskArtifactsPaths.taskId} persist failed: ${err instanceof Error ? err.message : String(err)}
+`
+    );
   }
   return { exitCode: 0, reply };
 }
@@ -16873,9 +17158,9 @@ function readMemoryIndexBlock(cwd) {
   }
   const trimmed = raw.trim();
   if (!trimmed) return "";
-  const body = trimmed.length > MAX_INDEX_BYTES ? trimmed.slice(0, MAX_INDEX_BYTES) + "\n\n_\u2026 (memory index truncated; open individual files under `.kody/memory/` to read more)_" : trimmed;
+  const body = trimmed.length > MAX_INDEX_BYTES ? trimmed.slice(0, MAX_INDEX_BYTES) + "\n\n_\u2026 (memory index truncated; use recall_search to read more)_" : trimmed;
   return [
-    "# Project memory index (`.kody/memory/INDEX.md`)",
+    "# Project memory index (state repo `memory/INDEX.md`)",
     "",
     "These are the lessons, decisions, and preferences already captured for this repo. Skim before acting; read individual files only if a line looks relevant to the current task.",
     "",
@@ -16906,9 +17191,9 @@ ${content}`);
   if (!joined) return "";
   const body = joined.length > MAX_CONTEXT_BYTES ? `${joined.slice(0, MAX_CONTEXT_BYTES)}
 
-_\u2026 (context truncated; see \`.kody/context/\` for the full text)_` : joined;
+_\u2026 (context truncated; use the state repo context files for the full text)_` : joined;
   return [
-    "# Context (`.kody/context/`) \u2014 your default frame",
+    "# Context (state repo `context/`) \u2014 your default frame",
     "",
     "You are this company's in-house assistant, not a general-purpose chatbot. The text below describes who the company is, what it builds, its domain, customers, and vocabulary. This is your DEFAULT and PRIMARY frame: if a question matches or could refer to the company, its product, this repo, or its domain \u2014 even a single bare word or name, any casing or spacing \u2014 answer about THAT directly from this context. Such a question is NOT ambiguous: do NOT lead with or also mention the generic/dictionary meaning, and do NOT ask the user 'which one did you mean?'. Just answer about the company's thing. Give a general-knowledge answer only when the question is plainly unrelated to the company, and keep it brief.",
     "",
@@ -16931,7 +17216,7 @@ function readInstructionsBlock(cwd) {
 
 _\u2026 (instructions truncated)_` : trimmed;
   return [
-    "# User instructions for this repo (`.kody/instructions.md`)",
+    "# User instructions for this repo (state repo `instructions.md`)",
     "",
     "The user's explicit preferences for how you should behave \u2014 tone, length, formatting. Apply them automatically; they override the default style. If one conflicts with a hard rule above, the hard rule still wins.",
     "",
@@ -16944,8 +17229,8 @@ init_config();
 
 // src/kody-cli.ts
 import { execFileSync as execFileSync25 } from "child_process";
-import * as fs41 from "fs";
-import * as path41 from "path";
+import * as fs43 from "fs";
+import * as path43 from "path";
 
 // src/app-auth.ts
 import { createSign } from "crypto";
@@ -17431,6 +17716,8 @@ init_gha();
 init_issue();
 init_job();
 init_registry();
+init_runtimePaths();
+init_stateWorkspace();
 var CI_HELP = `kody ci \u2014 minimal-YAML autonomous engineer (CI preflight + run)
 
 Usage:
@@ -17564,11 +17851,14 @@ async function resolveAuthToken(env = process.env) {
   return void 0;
 }
 function detectPackageManager2(cwd) {
-  if (fs41.existsSync(path41.join(cwd, "pnpm-lock.yaml"))) return "pnpm";
-  if (fs41.existsSync(path41.join(cwd, "yarn.lock"))) return "yarn";
-  if (fs41.existsSync(path41.join(cwd, "bun.lockb"))) return "bun";
+  if (fs43.existsSync(path43.join(cwd, "pnpm-lock.yaml"))) return "pnpm";
+  if (fs43.existsSync(path43.join(cwd, "yarn.lock"))) return "yarn";
+  if (fs43.existsSync(path43.join(cwd, "bun.lockb"))) return "bun";
   return "npm";
 }
+function shouldChainScheduledWatch(match) {
+  return match.action === "goal-scheduler" || match.agentResponsibility === "goal-scheduler" || match.agentAction === "goal-scheduler";
+}
 function shellOut(cmd, args, cwd, stream = true) {
   try {
     execFileSync25(cmd, args, {
@@ -17653,11 +17943,11 @@ function configureGitIdentity(cwd) {
 }
 function postFailureTail(issueNumber, cwd, reason) {
   if (!issueNumber) return;
-  const logPath = path41.join(cwd, ".kody", "last-run.jsonl");
+  const logPath = lastRunLogPath(cwd);
   let tail = "";
   try {
-    if (fs41.existsSync(logPath)) {
-      const content = fs41.readFileSync(logPath, "utf-8");
+    if (fs43.existsSync(logPath)) {
+      const content = fs43.readFileSync(logPath, "utf-8");
       tail = content.slice(-3e3);
     }
   } catch {
@@ -17682,11 +17972,12 @@ async function runCi(argv) {
     return 0;
   }
   const args = parseCiArgs(argv);
-  const cwd = args.cwd ? path41.resolve(args.cwd) : process.cwd();
+  const cwd = args.cwd ? path43.resolve(args.cwd) : process.cwd();
   let earlyConfig;
   let earlyConfigError;
   try {
     earlyConfig = loadConfig(cwd);
+    hydrateStateWorkspace(earlyConfig, cwd);
   } catch (err) {
     earlyConfigError = err instanceof Error ? err : new Error(String(err));
   }
@@ -17696,9 +17987,9 @@ async function runCi(argv) {
   let manualWorkflowDispatch = false;
   let forceRunAction = null;
   let forceRunCliArgs = {};
-  if (!args.issueNumber && !autoFallback && eventName === "workflow_dispatch" && dispatchEventPath && fs41.existsSync(dispatchEventPath)) {
+  if (!args.issueNumber && !autoFallback && eventName === "workflow_dispatch" && dispatchEventPath && fs43.existsSync(dispatchEventPath)) {
     try {
-      const evt = JSON.parse(fs41.readFileSync(dispatchEventPath, "utf-8"));
+      const evt = JSON.parse(fs43.readFileSync(dispatchEventPath, "utf-8"));
       const issueInput = parseInt(String(evt?.inputs?.issue_number ?? ""), 10);
       const sessionInput = String(evt?.inputs?.sessionId ?? "");
       const dutyInput = String(evt?.inputs?.agentResponsibility ?? evt?.inputs?.agentAction ?? "").trim();
@@ -17829,9 +18120,9 @@ async function runCi(argv) {
 `);
       return 64;
     }
-    process.stdout.write(`\u2192 kody: no action for event ${process.env.GITHUB_EVENT_NAME} \u2014 exiting cleanly
+    process.stdout.write(`\u2192 kody: no action for event ${process.env.GITHUB_EVENT_NAME} \u2014 checking scheduled watches
 `);
-    return 0;
+    return runScheduledFanOut(cwd, args, { force: false });
   }
   if (!args.issueNumber && !autoFallback) {
   } else {
@@ -17985,7 +18276,13 @@ async function runScheduledFanOut(cwd, args, opts) {
           agentAction: match.agentAction,
           cliArgs: match.cliArgs
         }),
-        { cwd, config, verbose: args.verbose, quiet: args.quiet, chain: false }
+        {
+          cwd,
+          config,
+          verbose: args.verbose,
+          quiet: args.quiet,
+          chain: shouldChainScheduledWatch(match)
+        }
       );
       if (result.exitCode !== 0) {
         process.stderr.write(
@@ -18023,16 +18320,21 @@ init_litellm();
 init_repoWorkspace();
 
 // src/scripts/brainTurnLog.ts
-import * as fs42 from "fs";
-import * as path42 from "path";
+init_runtimePaths();
+import * as fs44 from "fs";
+import * as path44 from "path";
+import posixPath4 from "path/posix";
 var live = /* @__PURE__ */ new Map();
-function eventsPath2(dir, chatId) {
-  return path42.join(dir, ".kody", "brain-events", `${chatId}.jsonl`);
+function brainEventsFilePath(dir, chatId) {
+  return runtimeStatePath(dir, "brain-events", `${chatId}.jsonl`);
+}
+function brainEventsStatePath(chatId) {
+  return posixPath4.join("brain-events", `${chatId}.jsonl`);
 }
 function lastPersistedSeq(dir, chatId) {
-  const p = eventsPath2(dir, chatId);
-  if (!fs42.existsSync(p)) return 0;
-  const lines = fs42.readFileSync(p, "utf-8").split("\n").filter(Boolean);
+  const p = brainEventsFilePath(dir, chatId);
+  if (!fs44.existsSync(p)) return 0;
+  const lines = fs44.readFileSync(p, "utf-8").split("\n").filter(Boolean);
   if (lines.length === 0) return 0;
   try {
     return JSON.parse(lines[lines.length - 1]).seq || 0;
@@ -18041,10 +18343,10 @@ function lastPersistedSeq(dir, chatId) {
   }
 }
 function readSince(dir, chatId, since) {
-  const p = eventsPath2(dir, chatId);
-  if (!fs42.existsSync(p)) return [];
+  const p = brainEventsFilePath(dir, chatId);
+  if (!fs44.existsSync(p)) return [];
   const out = [];
-  for (const line of fs42.readFileSync(p, "utf-8").split("\n")) {
+  for (const line of fs44.readFileSync(p, "utf-8").split("\n")) {
     if (!line) continue;
     try {
       const rec = JSON.parse(line);
@@ -18069,13 +18371,13 @@ function beginTurn(dir, chatId) {
     subscribers: /* @__PURE__ */ new Set()
   };
   live.set(chatId, state);
-  const p = eventsPath2(dir, chatId);
-  fs42.mkdirSync(path42.dirname(p), { recursive: true });
+  const p = brainEventsFilePath(dir, chatId);
+  fs44.mkdirSync(path44.dirname(p), { recursive: true });
   return (event) => {
     state.seq += 1;
     const rec = { seq: state.seq, turn, ts: Date.now(), event };
     try {
-      fs42.appendFileSync(p, `${JSON.stringify(rec)}
+      fs44.appendFileSync(p, `${JSON.stringify(rec)}
 `);
     } catch (err) {
       process.stderr.write(
@@ -18114,7 +18416,7 @@ function endTurnIfUnterminated(dir, chatId, errMessage) {
     event: { type: "error", error: errMessage || "turn ended unexpectedly", chatId }
   };
   try {
-    fs42.appendFileSync(eventsPath2(dir, chatId), `${JSON.stringify(rec)}
+    fs44.appendFileSync(brainEventsFilePath(dir, chatId), `${JSON.stringify(rec)}
 `);
   } catch {
   }
@@ -18183,6 +18485,7 @@ function getLastSeq(dir, chatId) {
 }
 
 // src/servers/brain-serve.ts
+init_stateRepoGithub();
 var DEFAULT_PORT = 8080;
 function getApiKey() {
   const key = (process.env.BRAIN_API_KEY ?? "").trim();
@@ -18207,17 +18510,17 @@ function authOk(req, expected) {
   return false;
 }
 function readJsonBody(req) {
-  return new Promise((resolve7, reject) => {
+  return new Promise((resolve8, reject) => {
     const chunks = [];
     req.on("data", (c) => chunks.push(c));
     req.on("end", () => {
       const raw = Buffer.concat(chunks).toString("utf-8");
       if (!raw.trim()) {
-        resolve7({});
+        resolve8({});
         return;
       }
       try {
-        resolve7(JSON.parse(raw));
+        resolve8(JSON.parse(raw));
       } catch (err) {
         reject(err instanceof Error ? err : new Error(String(err)));
       }
@@ -18249,6 +18552,25 @@ function emitSse(res, event) {
 
 `);
 }
+function envGithubToken() {
+  return (process.env.KODY_TOKEN ?? process.env.GH_TOKEN ?? process.env.GITHUB_TOKEN ?? process.env.GH_PAT ?? "").trim();
+}
+function parseRepoSlug(repo) {
+  if (!repo) return null;
+  const [owner, name] = repo.split("/", 2);
+  if (!owner || !name) return null;
+  return { owner, repo: name };
+}
+function streamStartupError(res, dir, chatId, err) {
+  const sinceFloor = getLastSeq(dir, chatId);
+  const emitToLog = beginTurn(dir, chatId);
+  emitToLog({
+    type: "error",
+    chatId,
+    error: err instanceof Error ? err.message : String(err)
+  });
+  streamToRes(res, dir, chatId, sinceFloor);
+}
 function translateChatEvent(event, chatId) {
   switch (event.event) {
     case "chat.message": {
@@ -18344,25 +18666,73 @@ async function handleChatTurn(req, res, chatId, opts) {
   }
   const repo = strField(body, "repo");
   const repoToken = strField(body, "repoToken");
-  const sessionFile = sessionFilePath(opts.cwd, chatId);
-  fs43.mkdirSync(path43.dirname(sessionFile), { recursive: true });
+  let agentCwd;
+  try {
+    agentCwd = await ensureRepoCwd({
+      baseCwd: opts.cwd,
+      reposRoot: opts.reposRoot,
+      repo,
+      repoToken,
+      cloneRepo: opts.cloneRepo
+    });
+  } catch (err) {
+    streamStartupError(res, opts.cwd, chatId, err);
+    return;
+  }
+  const stateToken = repoToken || envGithubToken();
+  const parsedRepo = parseRepoSlug(repo);
+  let stateConfig = null;
+  if (parsedRepo && stateToken) {
+    try {
+      stateConfig = await loadGithubStateConfig({
+        owner: parsedRepo.owner,
+        repo: parsedRepo.repo,
+        githubToken: stateToken,
+        fetchImpl: opts.stateFetch
+      });
+    } catch (err) {
+      process.stderr.write(
+        `[brain-serve] state config unavailable for ${repo}: ${err instanceof Error ? err.message : String(err)}
+`
+      );
+    }
+  }
+  const sessionFile = sessionFilePath(agentCwd, chatId);
+  const brainEventsFile = brainEventsFilePath(agentCwd, chatId);
+  if (stateConfig && stateToken) {
+    try {
+      await syncJsonlFileFromGithubState({
+        config: stateConfig,
+        filePath: sessionStatePath(chatId),
+        localPath: sessionFile,
+        githubToken: stateToken,
+        fetchImpl: opts.stateFetch
+      });
+      await syncJsonlFileFromGithubState({
+        config: stateConfig,
+        filePath: brainEventsStatePath(chatId),
+        localPath: brainEventsFile,
+        githubToken: stateToken,
+        fetchImpl: opts.stateFetch
+      });
+    } catch (err) {
+      process.stderr.write(
+        `[brain-serve] state sync failed for ${repo ?? "local"}:${chatId}: ${err instanceof Error ? err.message : String(err)}
+`
+      );
+    }
+  }
+  fs45.mkdirSync(path45.dirname(sessionFile), { recursive: true });
   appendTurn(sessionFile, {
     role: "user",
     content: message,
     timestamp: (/* @__PURE__ */ new Date()).toISOString()
   });
-  const sinceFloor = getLastSeq(opts.cwd, chatId);
-  const emitToLog = beginTurn(opts.cwd, chatId);
+  const sinceFloor = getLastSeq(agentCwd, chatId);
+  const emitToLog = beginTurn(agentCwd, chatId);
   const sink = new BrokerSink(emitToLog, chatId);
   void enqueue(chatId, async () => {
     try {
-      const agentCwd = await ensureRepoCwd({
-        baseCwd: opts.cwd,
-        reposRoot: opts.reposRoot,
-        repo,
-        repoToken,
-        cloneRepo: opts.cloneRepo
-      });
       await opts.runTurn({
         sessionId: chatId,
         sessionFile,
@@ -18378,21 +18748,46 @@ async function handleChatTurn(req, res, chatId, opts) {
       const errMsg3 = err instanceof Error ? err.message : String(err);
       process.stderr.write(`[brain-serve] chat turn failed: ${errMsg3}
 `);
-      endTurnIfUnterminated(opts.cwd, chatId, errMsg3);
+      endTurnIfUnterminated(agentCwd, chatId, errMsg3);
     } finally {
       endTurnIfUnterminated(
-        opts.cwd,
+        agentCwd,
         chatId,
         "Brain turn ended without a reply (the machine may have restarted mid-turn) \u2014 please resend your message"
       );
+      if (stateConfig && stateToken) {
+        try {
+          await persistJsonlFileToGithubState({
+            config: stateConfig,
+            filePath: sessionStatePath(chatId),
+            localPath: sessionFile,
+            message: `brain: session ${chatId}`,
+            githubToken: stateToken,
+            fetchImpl: opts.stateFetch
+          });
+          await persistJsonlFileToGithubState({
+            config: stateConfig,
+            filePath: brainEventsStatePath(chatId),
+            localPath: brainEventsFile,
+            message: `brain: events ${chatId}`,
+            githubToken: stateToken,
+            fetchImpl: opts.stateFetch
+          });
+        } catch (err) {
+          process.stderr.write(
+            `[brain-serve] state persist failed for ${repo ?? "local"}:${chatId}: ${err instanceof Error ? err.message : String(err)}
+`
+          );
+        }
+      }
     }
   });
-  streamToRes(res, opts.cwd, chatId, sinceFloor);
+  streamToRes(res, agentCwd, chatId, sinceFloor);
 }
 function buildServer(opts) {
   const runTurn = opts.runTurn ?? runChatTurn;
   const cloneRepo = opts.cloneRepo ?? defaultCloneRepo;
-  const reposRoot = opts.reposRoot ?? path43.join(path43.dirname(path43.resolve(opts.cwd)), "repos");
+  const reposRoot = opts.reposRoot ?? path45.join(path45.dirname(path45.resolve(opts.cwd)), "repos");
   return createServer(async (req, res) => {
     if (!req.method || !req.url) {
       sendJson(res, 400, { error: "bad request" });
@@ -18420,7 +18815,8 @@ function buildServer(opts) {
         cloneRepo,
         model: opts.model,
         litellmUrl: opts.litellmUrl,
-        runTurn
+        runTurn,
+        stateFetch: opts.stateFetch
       });
       return;
     }
@@ -18466,11 +18862,11 @@ async function brainServe(opts) {
     model,
     litellmUrl
   });
-  await new Promise((resolve7) => {
+  await new Promise((resolve8) => {
     server.listen(port, "0.0.0.0", () => {
       process.stdout.write(`[brain-serve] listening on 0.0.0.0:${port} (cwd=${opts.cwd})
 `);
-      resolve7();
+      resolve8();
     });
   });
   const shutdown = (signal) => {
@@ -18720,14 +19116,14 @@ async function startBrainProxy(opts) {
   const { httpServer, handler } = buildBrainProxy(opts);
   const port = opts.port ?? 0;
   const host = opts.host ?? "127.0.0.1";
-  await new Promise((resolve7) => httpServer.listen(port, host, () => resolve7()));
+  await new Promise((resolve8) => httpServer.listen(port, host, () => resolve8()));
   const addr = httpServer.address();
   return {
     httpServer,
     port: addr.port,
     url: `http://${host}:${addr.port}`,
-    stop: () => new Promise((resolve7) => {
-      httpServer.close(() => resolve7());
+    stop: () => new Promise((resolve8) => {
+      httpServer.close(() => resolve8());
     }),
     handler
   };
@@ -18877,23 +19273,23 @@ function buildMcpHttpServer(opts) {
     httpServer,
     routes,
     port,
-    stop: () => new Promise((resolve7) => {
+    stop: () => new Promise((resolve8) => {
       let pending = transports.size;
       if (pending === 0) {
-        httpServer.close(() => resolve7());
+        httpServer.close(() => resolve8());
         return;
       }
       for (const transport of transports.values()) {
         void transport.close().finally(() => {
           pending--;
-          if (pending === 0) httpServer.close(() => resolve7());
+          if (pending === 0) httpServer.close(() => resolve8());
         });
       }
     })
   };
 }
 function listenMcpHttpServer(server, host = "127.0.0.1") {
-  return new Promise((resolve7, reject) => {
+  return new Promise((resolve8, reject) => {
     server.httpServer.once("error", reject);
     server.httpServer.listen(server.port, host, () => {
       server.httpServer.off("error", reject);
@@ -18901,7 +19297,7 @@ function listenMcpHttpServer(server, host = "127.0.0.1") {
       if (addr && typeof addr === "object") {
         server.port = addr.port;
       }
-      resolve7();
+      resolve8();
     });
   });
 }
@@ -18986,15 +19382,8 @@ async function loadConfigSafe() {
 }
 
 // src/chat-cli.ts
-import { execFileSync as execFileSync28 } from "child_process";
-import * as fs45 from "fs";
-import * as path45 from "path";
-
-// src/chat/modes/interactive.ts
-init_issue();
-import { execFileSync as execFileSync27 } from "child_process";
-import * as fs44 from "fs";
-import * as path44 from "path";
+import * as fs47 from "fs";
+import * as path47 from "path";
 
 // src/chat/inbox.ts
 import { execFileSync as execFileSync26 } from "child_process";
@@ -19010,7 +19399,14 @@ async function waitForNextUserMessage(opts) {
     const now = Date.now();
     if (now >= opts.deadlineMs) return { kind: "deadline" };
     if (now - idleStart >= opts.idleTimeoutMs) return { kind: "idle-timeout" };
-    if (!opts.skipPull) {
+    if (opts.sync && !opts.skipPull) {
+      try {
+        opts.sync();
+      } catch (err) {
+        const msg = err instanceof Error ? err.message : String(err);
+        logger.warn(`state sync failed (will retry): ${msg}`);
+      }
+    } else if (!opts.skipPull) {
       try {
         const branch = currentBranch(opts.cwd);
         if (branch) {
@@ -19042,7 +19438,7 @@ async function waitForNextUserMessage(opts) {
   }
 }
 function sleep3(ms) {
-  return new Promise((resolve7) => setTimeout(resolve7, ms));
+  return new Promise((resolve8) => setTimeout(resolve8, ms));
 }
 function currentBranch(cwd) {
   try {
@@ -19057,6 +19453,87 @@ function currentBranch(cwd) {
   }
 }
 
+// src/chat/state-sync.ts
+init_stateRepo();
+import * as fs46 from "fs";
+import * as path46 from "path";
+function jsonlLines2(text) {
+  return text.split("\n").filter((line) => line.length > 0);
+}
+function renderJsonl2(lines) {
+  return lines.length > 0 ? `${lines.join("\n")}
+` : "";
+}
+function mergeJsonl2(localText, remoteText) {
+  const localLines = jsonlLines2(localText);
+  const seen = new Set(localLines);
+  const remoteOnly = jsonlLines2(remoteText).filter((line) => !seen.has(line));
+  return renderJsonl2([...localLines, ...remoteOnly]);
+}
+function syncJsonlFileFromState(opts) {
+  const remote = readStateText(opts.config, opts.cwd, opts.statePath);
+  if (!remote) return;
+  const local = fs46.existsSync(opts.localPath) ? fs46.readFileSync(opts.localPath, "utf-8") : "";
+  const next = mergeJsonl2(local, remote.content);
+  if (next === local) return;
+  fs46.mkdirSync(path46.dirname(opts.localPath), { recursive: true });
+  fs46.writeFileSync(opts.localPath, next);
+}
+function persistJsonlFileToState(opts) {
+  if (!fs46.existsSync(opts.localPath)) return;
+  const localText = fs46.readFileSync(opts.localPath, "utf-8");
+  for (let attempt = 1; attempt <= 3; attempt += 1) {
+    const remote = readStateText(opts.config, opts.cwd, opts.statePath);
+    const body = mergeJsonl2(localText, remote?.content ?? "");
+    try {
+      writeStateText(opts.config, opts.cwd, opts.statePath, body, opts.message, remote?.sha);
+      return;
+    } catch (err) {
+      const msg = err instanceof Error ? err.message : String(err);
+      const conflict = /HTTP 409/i.test(msg) || /HTTP 422/i.test(msg) || /does not match|is at|but expected/i.test(msg);
+      if (!conflict || attempt === 3) throw err;
+    }
+  }
+}
+function syncChatFilesFromState(config, cwd, sessionId) {
+  syncJsonlFileFromState({
+    config,
+    cwd,
+    statePath: sessionStatePath(sessionId),
+    localPath: sessionFilePath(cwd, sessionId)
+  });
+  syncJsonlFileFromState({
+    config,
+    cwd,
+    statePath: eventsStatePath(sessionId),
+    localPath: eventsFilePath(cwd, sessionId)
+  });
+}
+function syncChatSessionFromState(config, cwd, sessionId) {
+  syncJsonlFileFromState({
+    config,
+    cwd,
+    statePath: sessionStatePath(sessionId),
+    localPath: sessionFilePath(cwd, sessionId)
+  });
+}
+function persistChatFilesToState(config, cwd, sessionId, message = `chat: reply for ${sessionId}`) {
+  persistJsonlFileToState({
+    config,
+    cwd,
+    statePath: sessionStatePath(sessionId),
+    localPath: sessionFilePath(cwd, sessionId),
+    message
+  });
+  persistJsonlFileToState({
+    config,
+    cwd,
+    statePath: eventsStatePath(sessionId),
+    localPath: eventsFilePath(cwd, sessionId),
+    message
+  });
+}
+
 // src/chat/modes/interactive.ts
 var DEFAULT_IDLE_EXIT_MS = 5 * 6e4;
 var DEFAULT_HARD_CAP_MS = 30 * 6e4;
@@ -19086,13 +19563,16 @@ async function runInteractiveMode(opts) {
   if (!opts.skipGit) {
     process.stdout.write(`\u2192 kody:chat:interactive: committing chat.ready event to git
 `);
-    commitTurn(opts.cwd, opts.sessionId, opts.verbose ?? false);
+    commitTurn(opts.cwd, opts.sessionId, opts.verbose ?? false, opts.stateConfig ?? null);
     process.stdout.write(`\u2192 kody:chat:interactive: chat.ready committed; entering poll loop
 `);
   }
   let watermark = 0;
   let turnsCompleted = 0;
   while (true) {
+    if (opts.stateConfig && !opts.skipGit) {
+      syncChatSessionFromState(opts.stateConfig, opts.cwd, opts.sessionId);
+    }
     const turns = readSession(sessionFile);
     const pendingIdx = findNextUserTurn(turns, watermark);
     if (pendingIdx === -1) {
@@ -19103,16 +19583,19 @@ async function runInteractiveMode(opts) {
         idleTimeoutMs: idleExitMs,
         deadlineMs,
         pollIntervalMs: opts.pollIntervalMs ?? DEFAULT_POLL_MS2,
-        skipPull: opts.skipGit
+        skipPull: opts.skipGit,
+        ...opts.stateConfig ? {
+          sync: () => syncChatSessionFromState(opts.stateConfig, opts.cwd, opts.sessionId)
+        } : {}
       });
       if (result.kind === "idle-timeout") {
         await emitExit(opts, "idle-timeout", turnsCompleted);
-        if (!opts.skipGit) commitTurn(opts.cwd, opts.sessionId, opts.verbose ?? false);
+        if (!opts.skipGit) commitTurn(opts.cwd, opts.sessionId, opts.verbose ?? false, opts.stateConfig ?? null);
         return { exitCode: 0, reason: "idle-timeout", turnsCompleted };
       }
       if (result.kind === "deadline") {
         await emitExit(opts, "deadline", turnsCompleted);
-        if (!opts.skipGit) commitTurn(opts.cwd, opts.sessionId, opts.verbose ?? false);
+        if (!opts.skipGit) commitTurn(opts.cwd, opts.sessionId, opts.verbose ?? false, opts.stateConfig ?? null);
         return { exitCode: 0, reason: "deadline", turnsCompleted };
       }
     }
@@ -19128,20 +19611,21 @@ async function runInteractiveMode(opts) {
         verbose: opts.verbose,
         quiet: opts.quiet,
         invokeAgent: opts.invokeAgent,
+        stateConfig: opts.stateConfig,
         ...opts.reasoningEffort ? { reasoningEffort: opts.reasoningEffort } : {}
       });
     } catch (err) {
       const msg = err instanceof Error ? err.message : String(err);
       await emit2(opts.sink, "chat.error", opts.sessionId, `loop-${turnsCompleted}`, { error: msg });
       await emitExit(opts, "fatal", turnsCompleted);
-      if (!opts.skipGit) commitTurn(opts.cwd, opts.sessionId, opts.verbose ?? false);
+      if (!opts.skipGit) commitTurn(opts.cwd, opts.sessionId, opts.verbose ?? false, opts.stateConfig ?? null);
       return { exitCode: 99, reason: "fatal", turnsCompleted };
     }
     if (turnResult.exitCode === 64) {
     } else if (turnResult.exitCode !== 0) {
     } else {
       turnsCompleted += 1;
-      if (!opts.skipGit) commitTurn(opts.cwd, opts.sessionId, opts.verbose ?? false);
+      if (!opts.skipGit) commitTurn(opts.cwd, opts.sessionId, opts.verbose ?? false, opts.stateConfig ?? null);
     }
     watermark = readSession(sessionFile).length;
   }
@@ -19153,93 +19637,12 @@ function findNextUserTurn(turns, fromIdx) {
   if (turns.length > 0 && turns[turns.length - 1].role === "user") return turns.length - 1;
   return -1;
 }
-function commitTurn(cwd, sessionId, _verbose) {
-  const sessionRel = path44.relative(cwd, sessionFilePath(cwd, sessionId));
-  const eventsRel = path44.relative(cwd, eventsFilePath(cwd, sessionId));
-  const rels = [sessionRel, eventsRel].filter((p) => fs44.existsSync(path44.join(cwd, p)));
-  if (rels.length === 0) return;
-  const repository = process.env.GITHUB_REPOSITORY;
-  if (!repository) {
-    process.stderr.write(
-      `[kody:chat:interactive] GITHUB_REPOSITORY unset; cannot persist session/events via Contents API
-`
-    );
+function commitTurn(cwd, sessionId, _verbose, stateConfig) {
+  if (stateConfig) {
+    persistChatFilesToState(stateConfig, cwd, sessionId, `chat: interactive turn for ${sessionId}`);
     return;
   }
-  const branch = defaultBranch(cwd) ?? "main";
-  for (const rel of rels) {
-    const repoPath = rel.split(path44.sep).join("/");
-    const localText = fs44.readFileSync(path44.join(cwd, rel), "utf-8");
-    putJsonlViaContents(repository, branch, repoPath, localText, sessionId, cwd);
-  }
-}
-function jsonlLines(text) {
-  return text.split("\n").filter((l) => l.length > 0);
-}
-function getRemoteBlob(repository, branch, repoPath, cwd) {
-  try {
-    const raw = gh(["api", `/repos/${repository}/contents/${repoPath}?ref=${encodeURIComponent(branch)}`], { cwd });
-    const o = JSON.parse(raw);
-    if (o.type === "file" && o.encoding === "base64" && typeof o.content === "string" && typeof o.sha === "string") {
-      return { sha: o.sha, lines: jsonlLines(Buffer.from(o.content, "base64").toString("utf-8")) };
-    }
-    return { sha: null, lines: [] };
-  } catch (err) {
-    const msg = err instanceof Error ? err.message : String(err);
-    if (/HTTP 404/i.test(msg) || /Not Found/i.test(msg)) return { sha: null, lines: [] };
-    throw err;
-  }
-}
-function putJsonlViaContents(repository, branch, repoPath, localText, sessionId, cwd) {
-  for (let attempt = 1; attempt <= 3; attempt++) {
-    const remote = getRemoteBlob(repository, branch, repoPath, cwd);
-    let body = localText;
-    if (attempt > 1 && remote.lines.length > 0) {
-      const localLines = jsonlLines(localText);
-      const localSet = new Set(localLines);
-      const extra = remote.lines.filter((l) => !localSet.has(l));
-      if (extra.length > 0) body = `${[...localLines, ...extra].join("\n")}
-`;
-    }
-    const payload = {
-      message: `chat: interactive turn for ${sessionId}`,
-      content: Buffer.from(body, "utf-8").toString("base64"),
-      branch
-    };
-    if (remote.sha) payload.sha = remote.sha;
-    try {
-      gh(["api", "--method", "PUT", `/repos/${repository}/contents/${repoPath}`, "--input", "-"], {
-        cwd,
-        input: JSON.stringify(payload)
-      });
-      return;
-    } catch (err) {
-      const msg = err instanceof Error ? err.message : String(err);
-      const isConflict = /HTTP 409/i.test(msg) || /HTTP 422/i.test(msg) || /does not match|but expected/i.test(msg);
-      if (!isConflict || attempt === 3) {
-        process.stderr.write(`[kody:chat:interactive] Contents PUT failed (${repoPath}, attempt ${attempt}): ${msg}
-`);
-        return;
-      }
-      process.stderr.write(
-        `[kody:chat:interactive] Contents PUT conflict (${repoPath}, attempt ${attempt}); refetch+union+retry
-`
-      );
-    }
-  }
-}
-function defaultBranch(cwd) {
-  try {
-    const out = execFileSync27("git", ["symbolic-ref", "--quiet", "--short", "refs/remotes/origin/HEAD"], {
-      cwd,
-      stdio: ["ignore", "pipe", "ignore"]
-    });
-    const symbolic = out.toString("utf-8").trim();
-    if (symbolic.startsWith("origin/")) return symbolic.slice("origin/".length);
-    return symbolic || null;
-  } catch {
-    return null;
-  }
+  throw new Error(`kody chat interactive requires state repo config for session ${sessionId}`);
 }
 async function emitExit(opts, reason, turnsCompleted) {
   await emit2(opts.sink, "chat.exit", opts.sessionId, "exit", {
@@ -19261,7 +19664,7 @@ async function emit2(sink, type, sessionId, suffix, payload) {
 // src/chat-cli.ts
 init_config();
 init_litellm();
-init_pushWithRetry();
+init_stateWorkspace();
 var DEFAULT_MODEL2 = "claude/claude-haiku-4-5-20251001";
 var CHAT_HELP = `kody chat \u2014 dashboard-driven chat session
 
@@ -19313,31 +19716,6 @@ function parseChatArgs(argv, env = process.env) {
   }
   return result;
 }
-function commitChatFiles(cwd, sessionId, verbose) {
-  const sessionFile = path45.relative(cwd, sessionFilePath(cwd, sessionId));
-  const eventsFile = path45.relative(cwd, eventsFilePath(cwd, sessionId));
-  const safeSession = sessionId.replace(/[^a-zA-Z0-9._-]/g, "_");
-  const tasksDir = path45.join(".kody", "tasks", safeSession);
-  const candidatePaths = [sessionFile, eventsFile, tasksDir];
-  const paths = candidatePaths.filter((p) => fs45.existsSync(path45.join(cwd, p)));
-  if (paths.length === 0) return;
-  const opts = { cwd, stdio: verbose ? "inherit" : "pipe" };
-  try {
-    execFileSync28("git", ["add", "-f", ...paths], opts);
-    execFileSync28("git", ["commit", "--quiet", "-m", `chat: reply for ${sessionId}`], opts);
-  } catch (err) {
-    const msg = err instanceof Error ? err.message : String(err);
-    process.stderr.write(`[kody:chat] commit skipped: ${msg}
-`);
-    return;
-  }
-  const result = pushWithRetry({ cwd });
-  if (!result.ok) {
-    process.stderr.write(`[kody:chat] push FAILED after ${result.attempts} attempt(s): ${result.reason}
-`);
-    throw new Error(`chat push failed: ${result.reason}`);
-  }
-}
 function tryLoadConfig(cwd) {
   try {
     return loadConfig(cwd);
@@ -19363,7 +19741,7 @@ async function runChat(argv) {
 ${CHAT_HELP}`);
     return 64;
   }
-  const cwd = args.cwd ? path45.resolve(args.cwd) : process.cwd();
+  const cwd = args.cwd ? path47.resolve(args.cwd) : process.cwd();
   const sessionId = args.sessionId;
   const unpackedSecrets = unpackAllSecrets();
   if (unpackedSecrets > 0) {
@@ -19373,6 +19751,11 @@ ${CHAT_HELP}`);
   await resolveAuthToken();
   configureGitIdentity(cwd);
   const config = tryLoadConfig(cwd);
+  if (!config) {
+    process.stderr.write("error: kody chat requires kody.config.json with configured state.repo/state.path\n");
+    return 64;
+  }
+  hydrateStateWorkspace(config, cwd);
   const modelSpec = args.model ?? config?.agent.model ?? DEFAULT_MODEL2;
   const reasoningEffort = args.reasoningEffort ?? config?.agent.reasoningEffort ?? void 0;
   let model;
@@ -19412,11 +19795,14 @@ ${CHAT_HELP}`);
   process.stdout.write(`\u2192 kody:chat: litellm proxy ready (url=${litellm?.url ?? "skipped"})
 `);
   const sessionFile = sessionFilePath(cwd, sessionId);
+  if (config) {
+    syncChatFilesFromState(config, cwd, sessionId);
+  }
   if (args.initMessage) seedInitialMessage(sessionFile, args.initMessage);
   const sink = buildSink(cwd, sessionId, args.dashboardUrl);
   const meta = readMeta(sessionFile);
   process.stdout.write(
-    `\u2192 kody:chat: session file=${sessionFile} exists=${fs45.existsSync(sessionFile)} meta=${meta ? meta.mode : "none"}
+    `\u2192 kody:chat: session file=${sessionFile} exists=${fs47.existsSync(sessionFile)} meta=${meta ? meta.mode : "none"}
 `
   );
   try {
@@ -19430,6 +19816,7 @@ ${CHAT_HELP}`);
         meta,
         verbose: args.verbose,
         quiet: args.quiet,
+        stateConfig: config,
         ...reasoningEffort ? { reasoningEffort } : {}
       });
       return result2.exitCode;
@@ -19443,9 +19830,10 @@ ${CHAT_HELP}`);
       sink,
       verbose: args.verbose,
       quiet: args.quiet,
+      stateConfig: config,
       ...reasoningEffort ? { reasoningEffort } : {}
     });
-    commitChatFiles(cwd, sessionId, args.verbose ?? false);
+    persistChatFilesToState(config, cwd, sessionId);
     return result.exitCode;
   } finally {
     try {
@@ -19574,8 +19962,8 @@ var FlyClient = class {
   get fetch() {
     return this.opts.fetchImpl ?? fetch;
   }
-  async call(path46, init = {}) {
-    const res = await this.fetch(`${FLY_API_BASE}${path46}`, {
+  async call(path48, init = {}) {
+    const res = await this.fetch(`${FLY_API_BASE}${path48}`, {
       method: init.method ?? "GET",
       headers: {
         Authorization: `Bearer ${this.opts.token}`,
@@ -19586,7 +19974,7 @@ var FlyClient = class {
     if (res.status === 404 && init.allow404) return null;
     if (!res.ok) {
       const text = await res.text().catch(() => "");
-      throw new Error(`Fly API ${res.status} on ${path46}: ${text.slice(0, 200) || res.statusText}`);
+      throw new Error(`Fly API ${res.status} on ${path48}: ${text.slice(0, 200) || res.statusText}`);
     }
     if (res.status === 204) return null;
     const raw = await res.text();
@@ -19923,9 +20311,9 @@ function isSuspendedWithIp(m) {
 }
 
 // src/pool/vault.ts
+init_stateRepoGithub();
 import { createDecipheriv as createDecipheriv2 } from "crypto";
-var GITHUB_API = "https://api.github.com";
-var VAULT_PATH = ".kody/secrets.enc";
+var VAULT_PATH = "secrets.enc";
 var CACHE_TTL_MS = 6e4;
 var cache = /* @__PURE__ */ new Map();
 function decryptVault(payload, masterKey) {
@@ -19945,30 +20333,18 @@ async function readVaultSecrets(opts) {
   const key = `${opts.owner}/${opts.repo}`.toLowerCase();
   const hit = cache.get(key);
   if (hit && hit.expiresAt > Date.now()) return hit.secrets;
-  const doFetch = opts.fetchImpl ?? fetch;
-  const res = await doFetch(
-    `${GITHUB_API}/repos/${encodeURIComponent(opts.owner)}/${encodeURIComponent(opts.repo)}/contents/${VAULT_PATH}`,
-    {
-      headers: {
-        Authorization: `Bearer ${opts.githubToken}`,
-        Accept: "application/vnd.github+json",
-        "User-Agent": "kody-pool-serve"
-      }
-    }
-  );
-  if (res.status === 404) {
-    cache.set(key, { secrets: {}, expiresAt: Date.now() + CACHE_TTL_MS });
-    return {};
-  }
-  if (!res.ok) {
-    throw new Error(`vault read ${res.status} for ${key}: ${(await res.text().catch(() => "")).slice(0, 160)}`);
-  }
-  const body = await res.json();
-  if (!body.content) {
+  const file = await readGithubStateText({
+    owner: opts.owner,
+    repo: opts.repo,
+    filePath: VAULT_PATH,
+    githubToken: opts.githubToken,
+    fetchImpl: opts.fetchImpl
+  });
+  if (!file) {
     cache.set(key, { secrets: {}, expiresAt: Date.now() + CACHE_TTL_MS });
     return {};
   }
-  const ciphertext = Buffer.from(body.content, body.encoding ?? "base64").toString("utf8").trim();
+  const ciphertext = file.content.trim();
   const doc = JSON.parse(decryptVault(ciphertext, opts.masterKey));
   const flat = {};
   for (const [name, entry] of Object.entries(doc.secrets ?? {})) {
@@ -20157,14 +20533,14 @@ function sendJson2(res, status, body) {
   res.end(JSON.stringify(body));
 }
 function readJsonBody2(req) {
-  return new Promise((resolve7, reject) => {
+  return new Promise((resolve8, reject) => {
     const chunks = [];
     req.on("data", (c) => chunks.push(c));
     req.on("end", () => {
       const raw = Buffer.concat(chunks).toString("utf-8");
-      if (!raw.trim()) return resolve7({});
+      if (!raw.trim()) return resolve8({});
       try {
-        resolve7(JSON.parse(raw));
+        resolve8(JSON.parse(raw));
       } catch (err) {
         reject(err instanceof Error ? err : new Error(String(err)));
       }
@@ -20292,10 +20668,10 @@ async function poolServe() {
     }
   });
   const apiHost = process.env.POOL_API_HOST ?? "::";
-  await new Promise((resolve7) => {
+  await new Promise((resolve8) => {
     server.listen(apiPort, apiHost, () => {
       log(`listening on ${apiHost}:${apiPort} (min=${min}, app=${app}, region=${region})`);
-      resolve7();
+      resolve8();
     });
   });
   const shutdown = (signal) => {
@@ -20313,7 +20689,7 @@ async function poolServe() {
 
 // src/servers/runner-serve.ts
 import { spawn as spawn8 } from "child_process";
-import * as fs46 from "fs";
+import * as fs48 from "fs";
 import { createServer as createServer5 } from "http";
 var DEFAULT_PORT2 = 8080;
 var DEFAULT_WORKDIR = "/workspace/repo";
@@ -20334,17 +20710,17 @@ function authOk2(req, expected) {
   return false;
 }
 function readJsonBody3(req) {
-  return new Promise((resolve7, reject) => {
+  return new Promise((resolve8, reject) => {
     const chunks = [];
     req.on("data", (c) => chunks.push(c));
     req.on("end", () => {
       const raw = Buffer.concat(chunks).toString("utf-8");
       if (!raw.trim()) {
-        resolve7({});
+        resolve8({});
         return;
       }
       try {
-        resolve7(JSON.parse(raw));
+        resolve8(JSON.parse(raw));
       } catch (err) {
         reject(err instanceof Error ? err : new Error(String(err)));
       }
@@ -20393,8 +20769,8 @@ async function defaultRunJob(job) {
   const workdir = process.env.RUNNER_WORKDIR ?? DEFAULT_WORKDIR;
   const branch = job.ref ?? "main";
   const authUrl = `https://x-access-token:${job.githubToken}@github.com/${job.repo}.git`;
-  fs46.rmSync(workdir, { recursive: true, force: true });
-  fs46.mkdirSync(workdir, { recursive: true });
+  fs48.rmSync(workdir, { recursive: true, force: true });
+  fs48.mkdirSync(workdir, { recursive: true });
   const allSecrets = typeof job.allSecrets === "string" ? job.allSecrets : JSON.stringify(job.allSecrets ?? {});
   const interactive = job.mode === "interactive";
   const scheduled = job.mode === "scheduled";
@@ -20407,9 +20783,9 @@ async function defaultRunJob(job) {
     // takes (runScheduledFanOut → due agentResponsibilities/goals). Bare `kody` routes on this.
     ...scheduled ? { GITHUB_EVENT_NAME: "schedule" } : {},
     // GITHUB_REPOSITORY + GH_TOKEN are normally injected by GitHub Actions.
-    // The engine's interactive mode needs GITHUB_REPOSITORY to persist
-    // chat.ready / events to .kody/events via the Contents API (the durable
-    // signal the dashboard polls for readiness) — without it commitTurn bails
+    // The engine's interactive mode needs GITHUB_REPOSITORY to resolve the
+    // configured state repo and persist chat.ready / events (the durable signal
+    // the dashboard polls for readiness) — without it commitTurn bails
     // and the session never appears "ready". GH_TOKEN auths the `gh` CLI.
     GITHUB_REPOSITORY: job.repo,
     GH_TOKEN: job.githubToken,
@@ -20423,13 +20799,13 @@ async function defaultRunJob(job) {
     ...interactive && job.idleExitMs ? { KODY_IDLE_EXIT_MS: String(job.idleExitMs) } : {},
     ...interactive && job.hardCapMs ? { KODY_HARD_CAP_MS: String(job.hardCapMs) } : {}
   };
-  const run = (cmd, args, cwd) => new Promise((resolve7) => {
+  const run = (cmd, args, cwd) => new Promise((resolve8) => {
     const child = spawn8(cmd, args, { stdio: "inherit", env: childEnv, cwd });
-    child.on("exit", (code) => resolve7(code ?? 0));
+    child.on("exit", (code) => resolve8(code ?? 0));
     child.on("error", (err) => {
       process.stderr.write(`[runner-serve] ${cmd} failed: ${err.message}
 `);
-      resolve7(1);
+      resolve8(1);
     });
   });
   process.stdout.write(`[runner-serve] job ${job.jobId}: cloning ${job.repo}@${branch}
@@ -20506,11 +20882,11 @@ async function runnerServe() {
   const port = Number(process.env.PORT ?? DEFAULT_PORT2);
   const server = buildServer2({ apiKey });
   const host = process.env.RUNNER_HOST ?? "::";
-  await new Promise((resolve7) => {
+  await new Promise((resolve8) => {
     server.listen(port, host, () => {
       process.stdout.write(`[runner-serve] listening on ${host}:${port} (idle, awaiting job)
 `);
-      resolve7();
+      resolve8();
     });
   });
   const shutdown = (signal) => {
@@ -20579,14 +20955,14 @@ async function serve(opts) {
 `);
     const args = ["--dangerously-skip-permissions", "--model", model.model];
     const child = spawn9("claude", args, { stdio: "inherit", env: editorEnv, cwd: opts.cwd });
-    const exitCode = await new Promise((resolve7) => {
-      child.on("exit", (code) => resolve7(code ?? 0));
+    const exitCode = await new Promise((resolve8) => {
+      child.on("exit", (code) => resolve8(code ?? 0));
       child.on("error", (err) => {
         process.stderr.write(`[kody serve] failed to launch Claude Code: ${err.message}
 `);
         process.stderr.write(`  Install: https://docs.anthropic.com/claude/docs/claude-code
 `);
-        resolve7(1);
+        resolve8(1);
       });
     });
     killProxy();