@kody-ade/kody-engine 0.4.263 → 0.4.265

package/dist/bin/kody.js

@@ -15,7 +15,7 @@ var init_package = __esm({
   "package.json"() {
     package_default = {
       name: "@kody-ade/kody-engine",
-      version: "0.4.263",
+      version: "0.4.265",
       description: "kody \u2014 autonomous development engine. Single-session Claude Code agent behind a generic executor + declarative executable profiles.",
       license: "MIT",
       type: "module",
@@ -32,7 +32,8 @@ var init_package = __esm({
         serve: "tsx bin/kody.ts serve",
         "serve:vscode": "tsx bin/kody.ts serve vscode",
         "serve:claude": "tsx bin/kody.ts serve claude",
-        build: "tsup && node scripts/copy-assets.cjs",
+        "clean:dist": "node scripts/clean-dist.cjs",
+        build: "pnpm clean:dist && tsup && node scripts/copy-assets.cjs",
         "check:modularity": "tsx scripts/check-script-modularity.ts",
         pretest: "pnpm check:modularity",
         test: "vitest run tests/unit tests/int --coverage",
@@ -762,6 +763,8 @@ function parseReleaseConfig(raw) {
   if (typeof r.publishCommand === "string") out.publishCommand = r.publishCommand;
   if (typeof r.notifyCommand === "string") out.notifyCommand = r.notifyCommand;
   if (typeof r.e2eCommand === "string") out.e2eCommand = r.e2eCommand;
+  if (typeof r.productionUrl === "string") out.productionUrl = r.productionUrl;
+  if (typeof r.smokeCommand === "string") out.smokeCommand = r.smokeCommand;
   if (typeof r.draftRelease === "boolean") out.draftRelease = r.draftRelease;
   if (typeof r.releaseBranch === "string") out.releaseBranch = r.releaseBranch;
   if (typeof r.timeoutMs === "number" && r.timeoutMs > 0) out.timeoutMs = Math.floor(r.timeoutMs);
@@ -1406,12 +1409,12 @@ function parseCapabilityConfig(raw) {
     capabilityTools: tools,
     implementations,
     executables: stringList(raw.executables),
-    capabilityKind: capabilityKindField(raw.capabilityKind),
     role: stringField(raw.role),
     describe: stringField(raw.describe),
     stage: stringField(raw.stage),
     readsFrom: stringList(raw.readsFrom ?? raw.reads_from),
-    writesTo: stringList(raw.writesTo ?? raw.writes_to)
+    writesTo: stringList(raw.writesTo ?? raw.writes_to),
+    workflow: parseWorkflow(raw.workflow)
   };
 }
 function parseCapabilityBody(raw, slug2) {
@@ -1447,9 +1450,44 @@ function stringList(value) {
   }
   return [];
 }
-function capabilityKindField(value) {
-  if (value === "observe" || value === "act" || value === "verify") return value;
-  return void 0;
+function parseWorkflow(value) {
+  const stepsRaw = Array.isArray(value) ? value : value && typeof value === "object" && Array.isArray(value.steps) ? value.steps : [];
+  const steps = stepsRaw.map(parseWorkflowStep).filter((step) => step !== null);
+  return steps.length > 0 ? { steps } : void 0;
+}
+function parseWorkflowStep(value) {
+  if (typeof value === "string") {
+    const capability2 = value.trim();
+    return isSafeSlug(capability2) ? { capability: capability2 } : null;
+  }
+  if (!value || typeof value !== "object" || Array.isArray(value)) return null;
+  const raw = value;
+  const capability = stringField(raw.capability ?? raw.action);
+  if (!capability || !isSafeSlug(capability)) return null;
+  const executable = stringField(raw.executable ?? raw.implementation);
+  const action = stringField(raw.action);
+  const agent = stringField(raw.agent);
+  const reason = stringField(raw.reason);
+  const target = stringField(raw.target);
+  const cliArgs = raw.cliArgs;
+  return {
+    capability,
+    ...action && isSafeSlug(action) ? { action } : {},
+    ...executable && isSafeSlug(executable) ? { executable } : {},
+    ...target === "issue" || target === "pr" ? { target } : {},
+    ...agent && isSafeSlug(agent) ? { agent } : {},
+    ...reason ? { reason } : {},
+    ...cliArgs && typeof cliArgs === "object" && !Array.isArray(cliArgs) ? { cliArgs } : {},
+    ...isPlainObject(raw.runWhen) ? { runWhen: raw.runWhen } : {},
+    ...stringList(raw.continueOn ?? raw.continue_on).length > 0 ? { continueOn: stringList(raw.continueOn ?? raw.continue_on) } : {},
+    ...raw.saveReport === true ? { saveReport: true } : {}
+  };
+}
+function isPlainObject(value) {
+  return Boolean(value) && typeof value === "object" && !Array.isArray(value);
+}
+function isSafeSlug(value) {
+  return /^[a-z][a-z0-9-]*$/.test(value) && !value.includes("..");
 }
 var CAPABILITY_PROFILE_FILE, CAPABILITY_BODY_FILE;
 var init_capabilityFolders = __esm({
@@ -1482,7 +1520,8 @@ function getCompanyStoreAssetRoot(kind) {
     capabilities: "capabilities",
     executables: "executables",
     goals: "goals",
-    agents: "agents"
+    agents: "agents",
+    workflows: "workflows"
   };
   return path7.join(root, ".kody", folderByKind[kind]);
 }
@@ -1677,13 +1716,13 @@ function listCapabilityActions(projectCapabilitiesRoot = getProjectCapabilitiesR
   const projectExecutableRoots = [getProjectExecutablesRoot()];
   const storeExecutableRoot = getCompanyStoreExecutablesRoot();
   const storeExecutableRoots = storeExecutableRoot ? [storeExecutableRoot] : [];
-  for (const action of listFolderCapabilityActions(projectCapabilitiesRoot, "project-folder", true))
+  for (const action of listFolderCapabilityActions(projectCapabilitiesRoot, "project-folder"))
     add(action);
   for (const root of projectExecutableRoots) {
     for (const action of listExecutableCapabilityActions(root, "project-executable")) add(action);
   }
   if (storeCapabilitiesRoot) {
-    for (const action of listFolderCapabilityActions(storeCapabilitiesRoot, "company-store", true)) add(action);
+    for (const action of listFolderCapabilityActions(storeCapabilitiesRoot, "company-store")) add(action);
   }
   for (const root of storeExecutableRoots) {
     for (const action of listExecutableCapabilityActions(root, "company-store-executable")) add(action);
@@ -1706,7 +1745,16 @@ function resolveCapabilityFolder(slug2, projectCapabilitiesRoot = getProjectCapa
   }
   return null;
 }
+function getCapabilityActionInputs(action) {
+  const resolved = resolveCapabilityAction(action);
+  if (!resolved) return null;
+  return getProfileInputs(resolved.executable);
+}
 function resolveCapabilityExecution(capability) {
+  const firstWorkflowStep = capability.config.workflow?.steps[0];
+  if (firstWorkflowStep) {
+    return { executable: firstWorkflowStep.executable ?? firstWorkflowStep.capability, cliArgs: {} };
+  }
   const executable = capability.config.implementation ?? capability.config.executable ?? capability.config.implementations?.[0] ?? capability.config.executables?.[0] ?? (capability.config.role ? capability.slug : void 0) ?? (capability.config.tickScript ? "capability-tick-scripted" : "capability-tick");
   const cliArgs = executableDeclaresInput(executable, "capability") ? { capability: capability.slug } : {};
   return { executable, cliArgs };
@@ -1754,7 +1802,7 @@ function listExecutableCapabilityActions(root, source) {
       const action = typeof raw.action === "string" && raw.action.trim() ? raw.action.trim() : "";
       if (!action) continue;
       if (!PUBLIC_EXECUTABLE_ROLES.has(String(raw.role))) continue;
-      if (!PUBLIC_EXECUTABLE_CAPABILITY_KINDS.has(String(raw.capabilityKind))) continue;
+      if (typeof raw.kind !== "string" || !raw.kind.trim()) continue;
       if (!Array.isArray(raw.inputs)) continue;
       out.push({
         action,
@@ -1770,14 +1818,13 @@ function listExecutableCapabilityActions(root, source) {
   }
   return out.sort((a, b) => a.action.localeCompare(b.action));
 }
-function listFolderCapabilityActions(root, source, requireCapabilityKind = false) {
+function listFolderCapabilityActions(root, source) {
   if (!fs6.existsSync(root) || !fs6.statSync(root).isDirectory()) return [];
   const out = [];
   for (const slug2 of listCapabilityFolderSlugs(root)) {
     if (!isSafeName(slug2)) continue;
     const capability = readCapabilityFolder(root, slug2);
     if (!capability) continue;
-    if (requireCapabilityKind && !capability.config.capabilityKind) continue;
     const action = capability.config.action ?? slug2;
     const { executable, cliArgs } = resolveCapabilityExecution(capability);
     out.push({
@@ -1787,7 +1834,6 @@ function listFolderCapabilityActions(root, source, requireCapabilityKind = false
       cliArgs,
       source,
       describe: capability.config.describe ?? capability.title,
-      capabilityKind: capability.config.capabilityKind,
       profilePath: capability.profilePath,
       bodyPath: capability.bodyPath
     });
@@ -1810,7 +1856,6 @@ function listBuiltinCapabilityActions(root = getBuiltinCapabilitiesRoot()) {
       cliArgs: {},
       source: "builtin",
       describe: capability.config.describe ?? capability.title,
-      capabilityKind: capability.config.capabilityKind,
       profilePath: capability.profilePath,
       bodyPath: capability.bodyPath
     });
@@ -1853,14 +1898,13 @@ function parseGenericFlags(argv) {
   if (positional.length > 0) args._ = positional;
   return args;
 }
-var PUBLIC_EXECUTABLE_ROLES, PUBLIC_EXECUTABLE_CAPABILITY_KINDS;
+var PUBLIC_EXECUTABLE_ROLES;
 var init_registry = __esm({
   "src/registry.ts"() {
     "use strict";
     init_capabilityFolders();
     init_companyStore();
     PUBLIC_EXECUTABLE_ROLES = /* @__PURE__ */ new Set(["primitive", "orchestrator", "container", "watch", "utility"]);
-    PUBLIC_EXECUTABLE_CAPABILITY_KINDS = /* @__PURE__ */ new Set(["observe", "act", "verify"]);
   }
 });
 
@@ -3089,6 +3133,60 @@ var init_gha = __esm({
   }
 });
 
+// src/agents.ts
+import * as fs16 from "fs";
+import * as path16 from "path";
+function stripFrontmatter(raw) {
+  const match = /^---\n[\s\S]*?\n---\n?([\s\S]*)$/.exec(raw);
+  return (match ? match[1] : raw).trim();
+}
+function loadAgentIdentity(cwd, slug2, agentsDir = DEFAULT_AGENT_DIR) {
+  const trimmed = slug2.trim();
+  if (!trimmed) throw new Error("loadAgentIdentity: empty agent slug");
+  const agentPath = resolveAgentFile(cwd, trimmed, agentsDir);
+  if (fs16.existsSync(agentPath)) {
+    const body = stripFrontmatter(fs16.readFileSync(agentPath, "utf-8"));
+    if (body) return body;
+    const builtinForEmpty = BUILTIN_AGENTS[trimmed];
+    if (builtinForEmpty) return builtinForEmpty;
+    throw new Error(`loadAgentIdentity: agent '${trimmed}' agent identity body is empty (${agentPath})`);
+  }
+  const builtin = BUILTIN_AGENTS[trimmed];
+  if (builtin) return builtin;
+  throw new Error(`loadAgentIdentity: agent '${trimmed}' declared but ${agentPath} does not exist`);
+}
+function resolveAgentFile(cwd, slug2, agentsDir = DEFAULT_AGENT_DIR) {
+  const localPath = path16.join(cwd, agentsDir, `${slug2}.md`);
+  if (fs16.existsSync(localPath)) return localPath;
+  const storeAgentRoot = getCompanyStoreAssetRoot("agents");
+  if (storeAgentRoot) {
+    const storePath = path16.join(storeAgentRoot, `${slug2}.md`);
+    if (fs16.existsSync(storePath)) return storePath;
+  }
+  return localPath;
+}
+function frameAgentIdentity(slug2, agent) {
+  return [
+    `## Who you are \u2014 agent identity (authoritative identity)`,
+    ``,
+    `You are operating as agent \`${slug2}\`. This identity defines *who* you are:`,
+    `your authority, doctrine, voice, and hard limits. Honour it exactly. Where the`,
+    `this identity's restrictions are stricter than the task, **the agent wins** \u2014 a task`,
+    `can never grant you authority your agent withholds.`,
+    ``,
+    agent
+  ].join("\n");
+}
+var DEFAULT_AGENT_DIR, BUILTIN_AGENTS;
+var init_agents = __esm({
+  "src/agents.ts"() {
+    "use strict";
+    init_companyStore();
+    DEFAULT_AGENT_DIR = ".kody/agents";
+    BUILTIN_AGENTS = {};
+  }
+});
+
 // src/capabilityReport.ts
 function parseCapabilityReportsFromText(text) {
   const reports = [];
@@ -3254,60 +3352,6 @@ var init_capabilityResult = __esm({
   }
 });
 
-// src/agents.ts
-import * as fs16 from "fs";
-import * as path16 from "path";
-function stripFrontmatter(raw) {
-  const match = /^---\n[\s\S]*?\n---\n?([\s\S]*)$/.exec(raw);
-  return (match ? match[1] : raw).trim();
-}
-function loadAgentIdentity(cwd, slug2, agentsDir = DEFAULT_AGENT_DIR) {
-  const trimmed = slug2.trim();
-  if (!trimmed) throw new Error("loadAgentIdentity: empty agent slug");
-  const agentPath = resolveAgentFile(cwd, trimmed, agentsDir);
-  if (fs16.existsSync(agentPath)) {
-    const body = stripFrontmatter(fs16.readFileSync(agentPath, "utf-8"));
-    if (body) return body;
-    const builtinForEmpty = BUILTIN_AGENTS[trimmed];
-    if (builtinForEmpty) return builtinForEmpty;
-    throw new Error(`loadAgentIdentity: agent '${trimmed}' agent identity body is empty (${agentPath})`);
-  }
-  const builtin = BUILTIN_AGENTS[trimmed];
-  if (builtin) return builtin;
-  throw new Error(`loadAgentIdentity: agent '${trimmed}' declared but ${agentPath} does not exist`);
-}
-function resolveAgentFile(cwd, slug2, agentsDir = DEFAULT_AGENT_DIR) {
-  const localPath = path16.join(cwd, agentsDir, `${slug2}.md`);
-  if (fs16.existsSync(localPath)) return localPath;
-  const storeAgentRoot = getCompanyStoreAssetRoot("agents");
-  if (storeAgentRoot) {
-    const storePath = path16.join(storeAgentRoot, `${slug2}.md`);
-    if (fs16.existsSync(storePath)) return storePath;
-  }
-  return localPath;
-}
-function frameAgentIdentity(slug2, agent) {
-  return [
-    `## Who you are \u2014 agent identity (authoritative identity)`,
-    ``,
-    `You are operating as agent \`${slug2}\`. This identity defines *who* you are:`,
-    `your authority, doctrine, voice, and hard limits. Honour it exactly. Where the`,
-    `this identity's restrictions are stricter than the task, **the agent wins** \u2014 a task`,
-    `can never grant you authority your agent withholds.`,
-    ``,
-    agent
-  ].join("\n");
-}
-var DEFAULT_AGENT_DIR, BUILTIN_AGENTS;
-var init_agents = __esm({
-  "src/agents.ts"() {
-    "use strict";
-    init_companyStore();
-    DEFAULT_AGENT_DIR = ".kody/agents";
-    BUILTIN_AGENTS = {};
-  }
-});
-
 // src/profile-error.ts
 var ProfileError;
 var init_profile_error = __esm({
@@ -3659,7 +3703,6 @@ function loadProfile(profilePath) {
       implementation: execRef,
       executable: execRef,
       describe: typeof r.describe === "string" ? r.describe : base.describe,
-      capabilityKind: parseCapabilityKind(profilePath, r.capabilityKind) ?? base.capabilityKind,
       agent: typeof r.agent === "string" && r.agent.trim() ? r.agent.trim() : base.agent,
       capabilityTools: parseStringArray2(r.capabilityTools ?? r.capabilityTools ?? r.tools) ?? base.capabilityTools,
       mentions: Array.isArray(r.mentions) ? r.mentions.map((m) => String(m).trim()).filter(Boolean) : base.mentions
@@ -3704,7 +3747,6 @@ function loadProfile(profilePath) {
     implementation: void 0,
     executable: void 0,
     describe: typeof r.describe === "string" ? r.describe : "",
-    capabilityKind: parseCapabilityKind(profilePath, r.capabilityKind),
     // Optional agent to run as. Empty/blank string → undefined (no agent).
     agent: typeof r.agent === "string" && r.agent.trim() ? r.agent.trim() : void 0,
     // Locked-toolbox palette + mentions from folder-capability profile metadata.
@@ -3799,13 +3841,6 @@ function requireString(p, r, key) {
   }
   return v;
 }
-function parseCapabilityKind(p, raw) {
-  if (raw === void 0 || raw === null || raw === "") return void 0;
-  if (typeof raw !== "string" || !VALID_CAPABILITY_KINDS.has(raw)) {
-    throw new ProfileError(p, `"capabilityKind" must be one of: observe | act | verify`);
-  }
-  return raw;
-}
 function parseStringArray2(raw) {
   if (!Array.isArray(raw)) return void 0;
   const values = raw.map((t) => String(t).trim()).filter(Boolean);
@@ -4052,7 +4087,7 @@ function parseScriptList(p, key, raw) {
   }
   return out;
 }
-var VALID_INPUT_TYPES, VALID_PERMISSION_MODES, VALID_ROLES, VALID_CONTAINER_CHILD_TARGETS, VALID_PHASES, VALID_CAPABILITY_KINDS, KNOWN_PROFILE_KEYS;
+var VALID_INPUT_TYPES, VALID_PERMISSION_MODES, VALID_ROLES, VALID_CONTAINER_CHILD_TARGETS, VALID_PHASES, KNOWN_PROFILE_KEYS;
 var init_profile = __esm({
   "src/profile.ts"() {
     "use strict";
@@ -4068,7 +4103,6 @@ var init_profile = __esm({
     VALID_ROLES = /* @__PURE__ */ new Set(["primitive", "orchestrator", "container", "watch", "utility"]);
     VALID_CONTAINER_CHILD_TARGETS = /* @__PURE__ */ new Set(["issue", "pr"]);
     VALID_PHASES = /* @__PURE__ */ new Set(["research", "planning", "implementing", "reviewing", "shipped", "failed", "idle"]);
-    VALID_CAPABILITY_KINDS = /* @__PURE__ */ new Set(["observe", "act", "verify"]);
     KNOWN_PROFILE_KEYS = /* @__PURE__ */ new Set([
       "name",
       "action",
@@ -4082,10 +4116,10 @@ var init_profile = __esm({
       "capabilityTools",
       "tools",
       "mentions",
-      "capabilityKind",
       "stage",
       "readsFrom",
       "writesTo",
+      "workflow",
       "describe",
       "role",
       "kind",
@@ -6077,7 +6111,7 @@ function asPreferredRunTime(value) {
 function asLoopTarget(value) {
   const raw = asRecord(value);
   if (!raw) return void 0;
-  if (raw.type !== "goal" && raw.type !== "capability") return void 0;
+  if (raw.type !== "goal" && raw.type !== "capability" && raw.type !== "workflow") return void 0;
   if (typeof raw.id !== "string" || raw.id.trim().length === 0) return void 0;
   return { type: raw.type, id: raw.id };
 }
@@ -6173,10 +6207,10 @@ var init_state2 = __esm({
     "use strict";
     VALID_STATES = /* @__PURE__ */ new Set(["active", "abandoned", "closed", "done"]);
     GoalStateError = class extends Error {
-      constructor(path48, message) {
-        super(`Invalid goal state at ${path48}:
+      constructor(path49, message) {
+        super(`Invalid goal state at ${path49}:
   ${message}`);
-        this.path = path48;
+        this.path = path49;
         this.name = "GoalStateError";
       }
       path;
@@ -6189,17 +6223,12 @@ import * as fs25 from "fs";
 function stageGoalRunLogEvent(data, goalId, event, at = nowIso()) {
   const logs = goalRunLogs(data);
   const existing = logs[goalId];
-  const path48 = existing?.path ?? goalRunLogPath(goalId, data);
+  const path49 = existing?.path ?? goalRunLogPath(goalId, data);
   logs[goalId] = {
-    path: path48,
+    path: path49,
     events: [
       ...existing?.events ?? [],
-      {
-        version: 1,
-        time: at,
-        goalId,
-        ...event
-      }
+      buildGoalRunLogEvent(data, goalId, event, at)
     ]
   };
 }
@@ -6297,15 +6326,33 @@ function githubRunId() {
   const attempt = process.env.GITHUB_RUN_ATTEMPT?.trim();
   return attempt ? `gh-${runId}-${attempt}` : `gh-${runId}`;
 }
+function buildGoalRunLogEvent(data, goalId, event, at) {
+  const trigger = event.trigger ?? triggerContext();
+  const job = event.job ?? jobContext(data);
+  const base = {
+    version: 1,
+    time: at,
+    goalId,
+    ...event
+  };
+  if (trigger !== void 0) base.trigger = trigger;
+  if (job !== void 0) base.job = job;
+  const context = event.dispatchContext ?? dispatchContext(base, trigger, job);
+  if (context !== void 0) base.dispatchContext = context;
+  return base;
+}
 function enrichGoalRunLogEvent(config, data, logPath, event) {
   const stateRepo = stateRepoContext(config, event.goalId, logPath);
+  const trigger = event.trigger ?? triggerContext();
+  const job = event.job ?? jobContext(data);
   return pruneUndefined({
     ...event,
     run: event.run ?? runContext(data),
     repo: event.repo ?? repoContext(config),
     stateRepo: event.stateRepo ?? stateRepo,
-    trigger: event.trigger ?? triggerContext(),
-    job: event.job ?? jobContext(data),
+    trigger,
+    job,
+    dispatchContext: event.dispatchContext ?? dispatchContext(event, trigger, job),
     links: event.links ?? linkContext(stateRepo)
   });
 }
@@ -6352,9 +6399,16 @@ function stateRepoContext(config, goalId, logPath) {
 function triggerContext() {
   const event = readGithubEvent();
   const inputs = recordValue2(event?.inputs);
-  return pruneUndefined({
-    eventName: process.env.GITHUB_EVENT_NAME?.trim() || void 0,
-    actor: process.env.GITHUB_ACTOR?.trim() || void 0,
+  const eventName = process.env.GITHUB_EVENT_NAME?.trim() || void 0;
+  const githubActor = process.env.GITHUB_ACTOR?.trim() || void 0;
+  if (!eventName && !githubActor && !process.env.GITHUB_EVENT_PATH) return void 0;
+  const trigger = pruneUndefined({
+    source: eventName ? "github-actions" : "local",
+    kind: triggerKind(eventName),
+    eventName,
+    actor: githubActor,
+    githubActor,
+    actorRole: triggerActorRole(eventName),
     eventPath: process.env.GITHUB_EVENT_PATH?.trim() || void 0,
     issue: numberValue(recordValue2(event?.issue)?.number),
     pullRequest: numberValue(recordValue2(event?.pull_request)?.number),
@@ -6362,23 +6416,70 @@ function triggerContext() {
     schedule: stringValue(event?.schedule),
     inputs: inputs ? pickRecord(inputs, ["issue_number", "sessionId", "message", "model", "title", "executable", "base"]) : void 0
   });
+  return Object.keys(trigger).length > 0 ? trigger : void 0;
+}
+function triggerKind(eventName) {
+  if (!eventName) return "local";
+  if (eventName === "schedule") return "schedule";
+  if (eventName === "workflow_dispatch") return "manual-workflow-dispatch";
+  return eventName;
+}
+function triggerActorRole(eventName) {
+  if (!eventName) return void 0;
+  if (eventName === "schedule") return "github workflow run actor; not the manual dispatcher";
+  if (eventName === "workflow_dispatch") return "manual workflow dispatcher";
+  return "github event actor";
 }
 function jobContext(data) {
   const job = pruneUndefined({
-    id: stringValue(data.jobId),
-    key: stringValue(data.jobKey),
-    flavor: stringValue(data.jobFlavor),
-    action: stringValue(data.jobAction),
-    capability: stringValue(data.jobCapability),
-    executable: stringValue(data.jobExecutable),
-    agent: stringValue(data.jobAgent),
-    schedule: stringValue(data.jobSchedule),
-    target: data.jobTarget,
+    id: stringValue(data.jobId) ?? void 0,
+    key: stringValue(data.jobKey) ?? void 0,
+    flavor: stringValue(data.jobFlavor) ?? void 0,
+    action: stringValue(data.jobAction) ?? void 0,
+    capability: stringValue(data.jobCapability) ?? void 0,
+    executable: stringValue(data.jobExecutable) ?? void 0,
+    agent: stringValue(data.jobAgent) ?? void 0,
+    schedule: stringValue(data.jobSchedule) ?? void 0,
+    target: data.jobTarget ?? void 0,
     why: truncateString(stringValue(data.jobWhy), 1e3),
     saveReport: data.jobSaveReport === true ? true : void 0
   });
   return Object.keys(job).length > 0 ? job : void 0;
 }
+function dispatchContext(event, trigger, job) {
+  if (!event.dispatch && event.status !== "dispatch") return void 0;
+  const dispatch2 = event.dispatch ?? {};
+  const context = pruneUndefined({
+    triggeredBy: triggerLabel(trigger),
+    triggerKind: stringValue(trigger?.kind),
+    dispatchMode: dispatchMode(trigger),
+    githubActor: stringValue(trigger?.githubActor) ?? stringValue(trigger?.actor),
+    githubActorRole: stringValue(trigger?.actorRole),
+    decidedBy: event.source,
+    dispatchedBy: event.source,
+    target: event.target,
+    action: dispatch2.action ?? stringValue(job?.action),
+    capability: dispatch2.capability ?? stringValue(job?.capability),
+    reason: event.reason
+  });
+  return Object.keys(context).length > 0 ? context : void 0;
+}
+function triggerLabel(trigger) {
+  const kind = stringValue(trigger?.kind);
+  if (kind === "schedule") return "GitHub schedule";
+  if (kind === "manual-workflow-dispatch") return "manual workflow dispatch";
+  if (kind === "issue_comment") return "GitHub issue comment";
+  if (kind === "pull_request") return "GitHub pull request";
+  if (kind) return `GitHub ${kind}`;
+  return "local run";
+}
+function dispatchMode(trigger) {
+  const kind = stringValue(trigger?.kind);
+  if (kind === "schedule") return "automated";
+  if (kind === "manual-workflow-dispatch") return "manual";
+  if (kind) return "event-driven";
+  return "local";
+}
 function linkContext(stateRepo) {
   const links = {};
   const runId = process.env.GITHUB_RUN_ID?.trim();
@@ -7003,12 +7104,20 @@ function isCapabilityCadenceGoal(goal, extra) {
 function isGoalTargetLoop(goal) {
   return goal.type === "agentLoop" && goal.loopTarget?.type === "goal" && goal.loopTarget.id.trim().length > 0;
 }
-function planGoalTargetLoopSchedule(opts) {
+function isWorkflowTargetLoop(goal) {
+  return goal.type === "agentLoop" && goal.loopTarget?.type === "workflow" && goal.loopTarget.id.trim().length > 0;
+}
+function planTargetLoopSchedule(opts) {
   const now = opts.now ?? /* @__PURE__ */ new Date();
   const at = now.toISOString();
-  const targetId = opts.goal.loopTarget?.type === "goal" ? opts.goal.loopTarget.id.trim() : "";
+  const target = opts.goal.loopTarget;
+  const targetId = target?.id.trim() ?? "";
   if (!targetId) {
-    const reason = "goal target loop missing target goal";
+    const reason = "loop missing target";
+    return targetLoopDecision("blocked", reason, at);
+  }
+  if (target?.type !== "goal" && target?.type !== "workflow") {
+    const reason = `unsupported loop target: ${String(target?.type ?? "missing")}`;
     return targetLoopDecision("blocked", reason, at);
   }
   const preferred = opts.goal.preferredRunTime;
@@ -7016,18 +7125,22 @@ function planGoalTargetLoopSchedule(opts) {
     const gate = preferredRunTimeGate(preferred, now, opts.previousScheduleState);
     if (!gate.ok) return targetLoopDecision("idle", gate.reason, at);
   }
+  const dispatch2 = target.type === "goal" ? { action: "goal-manager", executable: "goal-manager", cliArgs: { goal: targetId } } : { workflow: targetId, cliArgs: {} };
   return {
     kind: "dispatch",
-    reason: `dispatch goal ${targetId}`,
-    dispatch: { action: "goal-manager", executable: "goal-manager", cliArgs: { goal: targetId } },
+    reason: `dispatch ${target.type} ${targetId}`,
+    dispatch: dispatch2,
     scheduleState: {
       mode: "agentLoop",
       lastGoalTickAt: at,
       lastDecision: {
         kind: "dispatch",
-        targetType: "goal",
+        targetType: target.type,
         targetId,
-        executable: "goal-manager",
+        ...dispatch2.action ? { action: dispatch2.action } : {},
+        ...dispatch2.capability ? { capability: dispatch2.capability } : {},
+        ...dispatch2.workflow ? { workflow: dispatch2.workflow } : {},
+        ...dispatch2.executable ? { executable: dispatch2.executable } : {},
         reason: preferred ? `preferred time ${preferred.time} ${preferred.timezone}` : "ready target loop tick",
         at
       },
@@ -7237,8 +7350,8 @@ function stageManagedGoalDecision(data, goalId, goal, goalState, decision, detai
       status: decision.kind,
       dispatch: {
         capability: decision.capability,
-        executable: decision.executable,
-        cliArgs: decision.cliArgs
+        cliArgs: decision.cliArgs,
+        ...decision.executable ? { executable: decision.executable } : {}
       },
       goal: details.goalSnapshot,
       inspection: details.inspection,
@@ -7247,8 +7360,8 @@ function stageManagedGoalDecision(data, goalId, goal, goalState, decision, detai
         evidence: decision.evidence,
         stage: decision.stage,
         capability: decision.capability,
-        executable: decision.executable,
-        cliArgs: decision.cliArgs
+        cliArgs: decision.cliArgs,
+        ...decision.executable ? { executable: decision.executable } : {}
       },
       change: details.change
     });
@@ -7443,18 +7556,20 @@ var init_advanceManagedGoal = __esm({
         ctx.output.reason = reason;
         return;
       }
-      if (isGoalTargetLoop(managed)) {
+      if (isGoalTargetLoop(managed) || isWorkflowTargetLoop(managed)) {
         const beforeSnapshot = goalRunLogSnapshot(goal.id, goal.state, managed);
         const previousScheduleState = goal.raw.extra.scheduleState && typeof goal.raw.extra.scheduleState === "object" ? goal.raw.extra.scheduleState : void 0;
-        const decision2 = planGoalTargetLoopSchedule({ goal: managed, previousScheduleState });
+        const decision2 = planTargetLoopSchedule({ goal: managed, previousScheduleState });
         restoreGoalIdFact();
         goal.raw = writeManagedGoalToState({ ...goal.raw, state: goal.state }, managed);
         goal.raw.extra.scheduleState = decision2.scheduleState;
         ctx.data.managedGoalDecision = decision2;
         if (decision2.kind === "dispatch" && decision2.dispatch) {
           ctx.output.nextDispatch = {
-            action: decision2.dispatch.action,
-            executable: decision2.dispatch.executable,
+            ...decision2.dispatch.action ? { action: decision2.dispatch.action } : {},
+            ...decision2.dispatch.capability ? { capability: decision2.dispatch.capability } : {},
+            ...decision2.dispatch.workflow ? { workflow: decision2.dispatch.workflow } : {},
+            ...decision2.dispatch.executable ? { executable: decision2.dispatch.executable } : {},
             cliArgs: decision2.dispatch.cliArgs
           };
         }
@@ -7575,8 +7690,8 @@ var init_advanceManagedGoal = __esm({
       }
       ctx.output.nextDispatch = {
         capability: decision.capability,
-        executable: decision.executable,
         cliArgs: decision.cliArgs,
+        ...decision.executable ? { executable: decision.executable } : {},
         ...decision.saveReport === true ? { saveReport: true } : {}
       };
       ctx.output.reason = `dispatch ${decision.capability} for ${decision.evidence}`;
@@ -7816,13 +7931,13 @@ function companyIntentPath(id) {
   assertIntentId(id);
   return `intents/${id}/intent.json`;
 }
-function normalizeCompanyIntent(path48, raw) {
+function normalizeCompanyIntent(path49, raw) {
   if (!raw || typeof raw !== "object" || Array.isArray(raw)) {
-    throw new Error(`${path48}: intent must be JSON object`);
+    throw new Error(`${path49}: intent must be JSON object`);
   }
   const input = raw;
   const id = stringField2(input.id);
-  if (!id || !isCompanyIntentId(id)) throw new Error(`${path48}: invalid intent id`);
+  if (!id || !isCompanyIntentId(id)) throw new Error(`${path49}: invalid intent id`);
   const createdAt = stringField2(input.createdAt) || nowIso();
   const updatedAt = stringField2(input.updatedAt) || createdAt;
   return {
@@ -7861,8 +7976,8 @@ function listCompanyIntents(config, cwd) {
   const records = [];
   for (const entry of entries) {
     if (entry.type !== "dir" || !entry.name || !isCompanyIntentId(entry.name)) continue;
-    const path48 = companyIntentPath(entry.name);
-    const file = readStateText(config, cwd, path48);
+    const path49 = companyIntentPath(entry.name);
+    const file = readStateText(config, cwd, path49);
     if (!file) continue;
     records.push({
       id: entry.name,
@@ -7873,8 +7988,8 @@ function listCompanyIntents(config, cwd) {
   return records.sort((a, b) => a.intent.priority - b.intent.priority || a.id.localeCompare(b.id));
 }
 function readCompanyIntent(config, cwd, id) {
-  const path48 = companyIntentPath(id);
-  const file = readStateText(config, cwd, path48);
+  const path49 = companyIntentPath(id);
+  const file = readStateText(config, cwd, path49);
   if (!file) return null;
   return { id, path: file.path, intent: normalizeCompanyIntent(file.path, JSON.parse(file.content)) };
 }
@@ -8361,6 +8476,9 @@ function goalReportBody(goalId, state, snapshot, latestEvent, evidenceItems) {
     `- Missing evidence: ${listOrNone(missingEvidence)}`,
     `- Blockers: ${listOrNone(blockers)}`,
     "",
+    "## Dispatch",
+    ...dispatchContextMarkdown(latestEvent),
+    "",
     "## Capability Evidence",
     ...capabilityEvidenceMarkdown(outputs),
     "",
@@ -8398,6 +8516,27 @@ function evidenceOutputMarkdown(index, output) {
     ""
   ];
 }
+function dispatchContextMarkdown(latestEvent) {
+  const context = recordField2(latestEvent, "dispatchContext");
+  if (!context) return ["- none"];
+  const githubActor = stringField3(context, "githubActor");
+  const githubActorRole = stringField3(context, "githubActorRole");
+  const target = dispatchTargetLabel(recordField2(context, "target"));
+  return [
+    `- Triggered by: ${stringField3(context, "triggeredBy") ?? "unknown"}`,
+    `- Mode: ${stringField3(context, "dispatchMode") ?? "unknown"}`,
+    `- GitHub actor: ${githubActor ? `${githubActor}${githubActorRole ? ` (${githubActorRole})` : ""}` : "none"}`,
+    `- Decided by: ${stringField3(context, "decidedBy") ?? "unknown"}`,
+    `- Dispatched by: ${stringField3(context, "dispatchedBy") ?? "unknown"}`,
+    `- Target: ${target ?? "none"}`
+  ];
+}
+function dispatchTargetLabel(target) {
+  const type = stringField3(target, "type");
+  const id = stringField3(target, "id");
+  if (type && id) return `${type} ${id}`;
+  return id ?? type;
+}
 function artifactMarkdown(artifacts) {
   if (artifacts.length === 0) return ["- none"];
   return artifacts.map((artifact) => {
@@ -10444,10 +10583,9 @@ var init_dispatchClassified = __esm({
 
 // src/jobIdentity.ts
 function stableJobKey(job) {
-  const capability = job.capability ?? job.action;
+  const capability = job.workflow ?? job.capability ?? job.action;
   const executable = job.executable ?? capability ?? "unknown";
-  if (job.flavor === "scheduled" && job.capability)
-    return `scheduled:${job.capability}:${executable}`;
+  if (job.flavor === "scheduled" && job.capability) return `scheduled:${job.capability}:${executable}`;
   const target = typeof job.target === "number" ? job.target : targetFromCliArgs(job.cliArgs);
   const work = capability && executable && executable !== capability ? `${capability}:${executable}` : capability ?? executable;
   return target === void 0 ? `${job.flavor}:${work}` : `${job.flavor}:${work}:${target}`;
@@ -16622,14 +16760,16 @@ function jobReferenceBlock(profileName, profile, data) {
   const jobId = typeof data.jobId === "string" && data.jobId.length > 0 ? data.jobId : null;
   const flavor = typeof data.jobFlavor === "string" && data.jobFlavor.length > 0 ? data.jobFlavor : null;
   const schedule = typeof data.jobSchedule === "string" && data.jobSchedule.length > 0 ? data.jobSchedule : null;
-  const isJob2 = Boolean(
-    jobId || flavor || schedule || data.jobCapability || data.jobExecutable || data.jobWhy
-  );
+  const isJob2 = Boolean(jobId || flavor || schedule || data.jobCapability || data.jobExecutable || data.jobWhy);
   if (!isJob2) return null;
   const capability = typeof data.jobCapability === "string" && data.jobCapability.length > 0 ? data.jobCapability : profile.executable ? profile.name : null;
   const executable = typeof profile.executable === "string" && profile.executable.length > 0 ? profile.executable : typeof data.jobExecutable === "string" && data.jobExecutable.length > 0 ? data.jobExecutable : profileName;
   const agent = typeof profile.agent === "string" && profile.agent.length > 0 ? profile.agent : typeof data.jobAgent === "string" && data.jobAgent.length > 0 ? data.jobAgent : null;
   const description = profile.describe.trim();
+  const workflow = typeof data.workflowCapability === "string" && data.workflowCapability.length > 0 ? data.workflowCapability : null;
+  const workflowStep = typeof data.workflowStep === "string" && data.workflowStep.length > 0 ? data.workflowStep : null;
+  const workflowStepIndex = typeof data.workflowStepIndex === "number" && Number.isFinite(data.workflowStepIndex) ? data.workflowStepIndex : null;
+  const workflowStepCount = typeof data.workflowStepCount === "number" && Number.isFinite(data.workflowStepCount) ? data.workflowStepCount : null;
   const lines = [
     "## Job reference",
     "",
@@ -16641,7 +16781,9 @@ function jobReferenceBlock(profileName, profile, data) {
     `- Capability: ${capability ?? "(none)"}`,
     `- Executable: ${executable}`,
     `- Agent: ${agent ?? "(none)"}`,
-    `- Description: ${description || "(none)"}`
+    `- Description: ${description || "(none)"}`,
+    ...workflow ? [`- Workflow: ${workflow}`] : [],
+    ...workflowStep ? [`- Workflow step: ${workflowStepIndex ?? "?"}/${workflowStepCount ?? "?"} ${workflowStep}`] : []
   ];
   return lines.join("\n");
 }
@@ -17056,7 +17198,7 @@ async function runExecutableChain(profileName, input) {
           };
         }
         process.stdout.write(
-          `\u2192 kody: in-process return \u2192 ${afterJob.action ?? afterJob.capability} (hop ${hops}/${MAX_CHAIN_HOPS})
+          `\u2192 kody: in-process return \u2192 ${afterJob.action ?? afterJob.capability ?? afterJob.workflow} (hop ${hops}/${MAX_CHAIN_HOPS})
 
 `
         );
@@ -17090,7 +17232,7 @@ async function runExecutableChain(profileName, input) {
       };
     }
     process.stdout.write(
-      `\u2192 kody: in-process hand-off \u2192 ${nextJob.action ?? nextJob.capability} (hop ${hops}/${MAX_CHAIN_HOPS})
+      `\u2192 kody: in-process hand-off \u2192 ${nextJob.action ?? nextJob.capability ?? nextJob.workflow} (hop ${hops}/${MAX_CHAIN_HOPS})
 
 `
     );
@@ -17108,18 +17250,19 @@ async function runExecutableChain(profileName, input) {
     };
   }
   if (result.nextDispatch || result.nextJob) {
-    const pending = result.nextDispatch?.executable ?? result.nextJob?.executable ?? result.nextJob?.capability ?? "unknown";
+    const pending = result.nextDispatch?.executable ?? result.nextDispatch?.workflow ?? result.nextJob?.executable ?? result.nextJob?.workflow ?? result.nextJob?.capability ?? "unknown";
     process.stderr.write(`[kody] in-process hand-off cap (${MAX_CHAIN_HOPS}) reached; not running ${pending}
 `);
   }
   return result;
 }
 function handoffToJob(handoff) {
-  const dutyOrAction = handoff.action ?? handoff.capability;
+  const dutyOrAction = handoff.workflow ?? handoff.action ?? handoff.capability;
   if (!dutyOrAction) return null;
   return {
     action: handoff.action ?? handoff.capability,
     capability: handoff.capability,
+    workflow: handoff.workflow,
     executable: handoff.executable,
     cliArgs: handoff.cliArgs,
     flavor: "instant",
@@ -17371,9 +17514,9 @@ var init_executor = __esm({
   "src/executor.ts"() {
     "use strict";
     init_agent();
+    init_agents();
     init_capabilityReport();
     init_capabilityResult();
-    init_agents();
     init_config();
     init_container();
     init_discipline();
@@ -17400,6 +17543,99 @@ var init_executor = __esm({
   }
 });
 
+// src/workflowDefinitions.ts
+import * as fs44 from "fs";
+import * as path42 from "path";
+function isWorkflowDefinitionId(value) {
+  return WORKFLOW_ID_PATTERN.test(value);
+}
+function workflowDefinitionPath(id) {
+  if (!isWorkflowDefinitionId(id)) {
+    throw new Error(`Invalid workflow id "${id}"`);
+  }
+  return `workflows/${id}/workflow.json`;
+}
+function normalizeWorkflowDefinition(value) {
+  if (!value || typeof value !== "object" || Array.isArray(value)) return null;
+  const raw = value;
+  const name = typeof raw.name === "string" ? raw.name.trim() : "";
+  const instructions = typeof raw.instructions === "string" ? raw.instructions.trim() : "";
+  const capabilities = normalizeWorkflowCapabilities(raw.capabilities);
+  if (!name || !instructions || capabilities.length === 0) return null;
+  return {
+    version: 1,
+    name,
+    instructions,
+    capabilities,
+    ...typeof raw.createdAt === "string" ? { createdAt: raw.createdAt } : {},
+    ...typeof raw.updatedAt === "string" ? { updatedAt: raw.updatedAt } : {}
+  };
+}
+function readWorkflowDefinition(config, cwd, id) {
+  const file = readStateText(config, cwd, workflowDefinitionPath(id));
+  if (!file) return readCompanyStoreWorkflowDefinition(id);
+  return parseWorkflowDefinition(file.content);
+}
+function workflowDefinitionToCapabilityFolder(id, workflow, source = workflowDefinitionPath(id)) {
+  return {
+    slug: id,
+    dir: path42.dirname(source),
+    profilePath: source,
+    bodyPath: source,
+    title: workflow.name,
+    body: workflow.instructions,
+    rawBody: workflow.instructions,
+    rawProfile: { name: id, workflow },
+    config: {
+      action: id,
+      workflow: workflowDefinitionToConfig(workflow),
+      describe: workflow.instructions
+    }
+  };
+}
+function normalizeWorkflowCapabilities(value) {
+  if (!Array.isArray(value)) return [];
+  const seen = /* @__PURE__ */ new Set();
+  const capabilities = [];
+  for (const item of value) {
+    if (typeof item !== "string") continue;
+    const slug2 = item.trim();
+    if (!CAPABILITY_ID_PATTERN.test(slug2) || seen.has(slug2)) continue;
+    seen.add(slug2);
+    capabilities.push(slug2);
+  }
+  return capabilities;
+}
+function workflowDefinitionToConfig(workflow) {
+  return {
+    steps: workflow.capabilities.map((capability) => ({ capability }))
+  };
+}
+function readCompanyStoreWorkflowDefinition(id) {
+  const root = getCompanyStoreAssetRoot("workflows");
+  if (!root) return null;
+  const filePath = path42.join(root, id, "workflow.json");
+  if (!fs44.existsSync(filePath)) return null;
+  return parseWorkflowDefinition(fs44.readFileSync(filePath, "utf8"));
+}
+function parseWorkflowDefinition(content) {
+  try {
+    return normalizeWorkflowDefinition(JSON.parse(content));
+  } catch {
+    return null;
+  }
+}
+var WORKFLOW_ID_PATTERN, CAPABILITY_ID_PATTERN;
+var init_workflowDefinitions = __esm({
+  "src/workflowDefinitions.ts"() {
+    "use strict";
+    init_companyStore();
+    init_stateRepo();
+    WORKFLOW_ID_PATTERN = /^[a-z0-9][a-z0-9_-]{0,79}$/;
+    CAPABILITY_ID_PATTERN = /^[A-Za-z0-9][A-Za-z0-9_-]{0,79}$/;
+  }
+});
+
 // src/job.ts
 var job_exports = {};
 __export(job_exports, {
@@ -17412,7 +17648,7 @@ __export(job_exports, {
   stableJobKey: () => stableJobKey,
   validateJob: () => validateJob
 });
-import * as path42 from "path";
+import * as path43 from "path";
 function newJobId(flavor) {
   localJobSeq += 1;
   const runId = process.env.GITHUB_RUN_ID;
@@ -17424,8 +17660,8 @@ function validateJob(input) {
     throw new InvalidJobError("job must be an object");
   }
   const j = input;
-  if (typeof j.capability !== "string" && typeof j.action !== "string") {
-    throw new InvalidJobError("job must reference a capability action or capability");
+  if (typeof j.capability !== "string" && typeof j.action !== "string" && typeof j.workflow !== "string") {
+    throw new InvalidJobError("job must reference a capability action, capability, or workflow");
   }
   if (j.flavor !== "instant" && j.flavor !== "scheduled") {
     throw new InvalidJobError(`job.flavor must be "instant" or "scheduled" (got ${String(j.flavor)})`);
@@ -17437,6 +17673,7 @@ function validateJob(input) {
     action: typeof j.action === "string" ? j.action : void 0,
     executable: typeof j.executable === "string" ? j.executable : void 0,
     capability: typeof j.capability === "string" ? j.capability : void 0,
+    workflow: typeof j.workflow === "string" ? j.workflow : void 0,
     why: typeof j.why === "string" ? j.why : void 0,
     agent: typeof j.agent === "string" ? j.agent : void 0,
     schedule: typeof j.schedule === "string" ? j.schedule : void 0,
@@ -17450,21 +17687,49 @@ function validateJob(input) {
 async function runJob(job, base) {
   const valid = validateJob(job);
   const action = valid.action ?? valid.capability;
-  const projectCapabilitiesRoot = path42.join(base.cwd, ".kody", "capabilities");
-  const resolvedCapability = action ? resolveCapabilityAction(action, projectCapabilitiesRoot) : null;
+  const projectCapabilitiesRoot = path43.join(base.cwd, ".kody", "capabilities");
+  const resolvedCapability = !valid.workflow && action ? resolveCapabilityAction(action, projectCapabilitiesRoot) : null;
   const capabilityIdentity = valid.capability ?? resolvedCapability?.capability;
-  const capabilityContext = loadCapabilityContext(capabilityIdentity, base.cwd);
+  const capabilityContext = valid.workflow ? null : loadCapabilityContext(capabilityIdentity, base.cwd);
+  const workflowContext = valid.workflow ? loadWorkflowContext(valid.workflow, base) : !capabilityContext && !resolvedCapability ? loadWorkflowContext(capabilityIdentity ?? action, base) : null;
   const explicitExecutableOnly = valid.executable !== void 0 && (valid.action === void 0 || valid.action === valid.executable) && (valid.capability === void 0 || valid.capability === valid.executable);
-  if (!resolvedCapability && !capabilityContext && !explicitExecutableOnly) {
-    throw new InvalidJobError(`job capability not found: ${action ?? valid.capability ?? "<none>"}`);
+  if (!resolvedCapability && !capabilityContext && !workflowContext && !explicitExecutableOnly) {
+    throw new InvalidJobError(
+      `job capability/workflow not found: ${valid.workflow ?? action ?? valid.capability ?? "<none>"}`
+    );
   }
+  const workflow = capabilityContext?.config.workflow ?? workflowContext?.config.workflow;
+  const workflowIdentity = valid.workflow ?? capabilityIdentity ?? workflowContext?.slug;
   const capabilitySelectedExecutable = resolvedCapability?.executable ?? capabilityContext?.config.executable ?? capabilityContext?.config.executables?.[0] ?? (capabilityContext?.config.tickScript ? "capability-tick-scripted" : void 0);
   const profileName = valid.executable ?? capabilitySelectedExecutable;
-  if (!profileName) {
-    throw new InvalidJobError(
-      `job capability resolves to no executable: ${capabilityIdentity ?? action}`
-    );
+  if (workflow && shouldRunCapabilityWorkflow(valid, workflow, workflowIdentity, capabilitySelectedExecutable, base)) {
+    const workflowCapability = capabilityContext ?? workflowContext;
+    const workflowJob = workflowContext && !valid.why ? { ...valid, why: workflowContext.body } : valid;
+    return runCapabilityWorkflow(workflowJob, workflow, workflowCapability, base);
   }
+  if (!profileName) {
+    throw new InvalidJobError(`job capability resolves to no executable: ${capabilityIdentity ?? action}`);
+  }
+  return runDefaultCapabilityWorkflow(
+    valid,
+    profileName,
+    capabilityIdentity,
+    capabilityContext,
+    resolvedCapability,
+    base
+  );
+}
+async function runDefaultCapabilityWorkflow(job, profileName, capabilityIdentity, capabilityContext, resolvedCapability, base) {
+  return runCapabilityImplementationStep(
+    job,
+    profileName,
+    capabilityIdentity,
+    capabilityContext,
+    resolvedCapability,
+    base
+  );
+}
+async function runCapabilityImplementationStep(valid, profileName, capabilityIdentity, capabilityContext, resolvedCapability, base) {
   const preloadedData = { ...base.preloadedData ?? {} };
   preloadedData.jobId = newJobId(valid.flavor);
   preloadedData.jobKey = stableJobKey(valid);
@@ -17473,9 +17738,7 @@ async function runJob(job, base) {
   if (valid.action !== void 0 && valid.action.length > 0) preloadedData.jobAction = valid.action;
   if (capabilityIdentity !== void 0 && capabilityIdentity.length > 0)
     preloadedData.jobCapability = capabilityIdentity;
-  const executableIdentity = profileName;
-  if (executableIdentity !== void 0 && executableIdentity.length > 0)
-    preloadedData.jobExecutable = executableIdentity;
+  preloadedData.jobExecutable = profileName;
   if (valid.schedule !== void 0 && valid.schedule.length > 0) preloadedData.jobSchedule = valid.schedule;
   if (valid.saveReport === true) preloadedData.jobSaveReport = true;
   if (capabilityContext) {
@@ -17483,8 +17746,7 @@ async function runJob(job, base) {
     preloadedData.capabilityTitle = capabilityContext.title;
     preloadedData.dutyIntent = capabilityContext.body;
     preloadedData.jobIntent = capabilityContext.body;
-    if (preloadedData.jobCapability === void 0)
-      preloadedData.jobCapability = capabilityContext.slug;
+    if (preloadedData.jobCapability === void 0) preloadedData.jobCapability = capabilityContext.slug;
     if (capabilityContext.config.agent && preloadedData.jobAgent === void 0) {
       preloadedData.jobAgent = capabilityContext.config.agent;
     }
@@ -17508,9 +17770,182 @@ async function runJob(job, base) {
   const run = base.chain === false ? runExecutable : runExecutableChain;
   return run(profileName, input);
 }
+function shouldRunCapabilityWorkflow(job, workflow, capabilityIdentity, selectedExecutable, base) {
+  if (workflow.steps.length === 0) return false;
+  if (!capabilityIdentity) return false;
+  const stack = Array.isArray(base.preloadedData?.workflowStack) ? base.preloadedData.workflowStack.filter((entry) => typeof entry === "string") : [];
+  if (stack.includes(capabilityIdentity)) return false;
+  if (!job.executable) return true;
+  return job.executable === selectedExecutable || job.executable === capabilityIdentity || job.executable === job.action;
+}
+async function runCapabilityWorkflow(parent, workflow, capability, base) {
+  let chainData = {
+    ...base.preloadedData ?? {},
+    workflowCapability: capability.slug,
+    workflowTitle: capability.title,
+    workflowStepCount: workflow.steps.length,
+    workflowIssueNumber: workflowIssueNumber(parent),
+    workflowStack: [
+      ...Array.isArray(base.preloadedData?.workflowStack) ? base.preloadedData.workflowStack.filter((entry) => typeof entry === "string") : [],
+      capability.slug
+    ]
+  };
+  let result = { exitCode: 0 };
+  for (let index = 0; index < workflow.steps.length; index++) {
+    const step = workflow.steps[index];
+    const label = step.action ?? step.capability;
+    if (!shouldRunWorkflowStep(step, chainData)) {
+      process.stdout.write(
+        `\u2192 kody: workflow ${capability.slug} step ${index + 1}/${workflow.steps.length} \u2192 ${label} (skipped)
+
+`
+      );
+      continue;
+    }
+    const child = workflowStepToJob(step, parent, chainData);
+    process.stdout.write(
+      `\u2192 kody: workflow ${capability.slug} step ${index + 1}/${workflow.steps.length} \u2192 ${label}
+
+`
+    );
+    result = await runJob(child, {
+      ...base,
+      preloadedData: {
+        ...chainData,
+        workflowStep: label,
+        workflowStepIndex: index + 1,
+        workflowStepReason: step.reason
+      }
+    });
+    const outcome = workflowOutcome(result);
+    const prUrl = result.taskState?.core.prUrl ?? (typeof chainData.workflowPrUrl === "string" ? chainData.workflowPrUrl : void 0);
+    chainData = {
+      ...chainData,
+      ...result.taskState ? { taskState: result.taskState } : {},
+      ...outcome ? { workflowLastOutcome: outcome } : {},
+      ...prUrl ? { workflowPrUrl: prUrl } : {},
+      ...parsePrNumber5(prUrl) ? { workflowPrNumber: parsePrNumber5(prUrl) } : {}
+    };
+    if (result.exitCode !== 0 && !canContinueWorkflow(step, outcome)) {
+      return {
+        ...result,
+        reason: result.reason ?? `workflow ${capability.slug} stopped at step ${index + 1}/${workflow.steps.length}: ${label}`
+      };
+    }
+  }
+  return result;
+}
+function workflowStepToJob(step, parent, chainData) {
+  const action = step.action ?? step.capability;
+  const rawArgs = {
+    ...parent.cliArgs,
+    ...step.cliArgs ?? {}
+  };
+  const targetNumber = workflowStepTargetNumber(step, parent, chainData);
+  if (step.target === "pr") {
+    if (typeof targetNumber !== "number") {
+      throw new InvalidJobError(`workflow step ${action} needs a PR target but no prior PR URL is available`);
+    }
+    rawArgs.pr = targetNumber;
+  } else if (step.target === "issue" && typeof targetNumber === "number") {
+    rawArgs.issue = targetNumber;
+  }
+  const cliArgs = filterCliArgsForStep(action, rawArgs);
+  const target = typeof targetNumber === "number" ? targetNumber : typeof parent.target === "number" ? parent.target : targetFromCliArgs(cliArgs);
+  return {
+    action,
+    capability: step.capability,
+    ...step.executable ? { executable: step.executable } : {},
+    ...composeStepWhy(parent.why, step) ? { why: composeStepWhy(parent.why, step) } : {},
+    ...step.agent ?? parent.agent ? { agent: step.agent ?? parent.agent } : {},
+    ...parent.schedule ? { schedule: parent.schedule } : {},
+    ...typeof target === "number" ? { target } : {},
+    cliArgs,
+    flavor: parent.flavor,
+    force: parent.force,
+    saveReport: step.saveReport === true || parent.saveReport === true
+  };
+}
+function shouldRunWorkflowStep(step, data) {
+  if (!step.runWhen) return true;
+  const context = workflowConditionContext(data);
+  return Object.entries(step.runWhen).every(
+    ([path49, expected]) => valueMatches(resolveDottedPath2(context, path49), expected)
+  );
+}
+function canContinueWorkflow(step, outcome) {
+  if (!outcome || !step.continueOn || step.continueOn.length === 0) return false;
+  return step.continueOn.includes(outcome.type);
+}
+function workflowOutcome(result) {
+  return result.taskState?.core.lastOutcome ?? null;
+}
+function workflowConditionContext(data) {
+  const lastOutcome = data.workflowLastOutcome;
+  return {
+    ...data,
+    workflow: {
+      lastOutcome,
+      issueNumber: data.workflowIssueNumber,
+      prNumber: data.workflowPrNumber,
+      prUrl: data.workflowPrUrl
+    },
+    lastOutcome
+  };
+}
+function resolveDottedPath2(root, dotted) {
+  return dotted.split(".").reduce((cur, part) => {
+    if (!cur || typeof cur !== "object") return void 0;
+    return cur[part];
+  }, root);
+}
+function valueMatches(actual, expected) {
+  if (Array.isArray(expected)) return expected.some((entry) => valueMatches(actual, entry));
+  return actual === expected;
+}
+function workflowStepTargetNumber(step, parent, chainData) {
+  if (step.target === "pr") return workflowPrNumber(chainData) ?? targetFromCliArgs(step.cliArgs ?? {});
+  if (step.target === "issue") return workflowIssueNumber(parent);
+  return typeof parent.target === "number" ? parent.target : targetFromCliArgs({ ...parent.cliArgs, ...step.cliArgs ?? {} });
+}
+function workflowIssueNumber(parent) {
+  return typeof parent.target === "number" ? parent.target : targetFromCliArgs(parent.cliArgs);
+}
+function workflowPrNumber(data) {
+  if (typeof data.workflowPrNumber === "number" && Number.isFinite(data.workflowPrNumber)) return data.workflowPrNumber;
+  const prUrl = typeof data.workflowPrUrl === "string" ? data.workflowPrUrl : typeof data.taskState?.core?.prUrl === "string" ? data.taskState.core.prUrl : void 0;
+  return parsePrNumber5(prUrl) ?? void 0;
+}
+function parsePrNumber5(url) {
+  if (!url) return null;
+  const m = url.match(/\/pull\/(\d+)(?:[/?#]|$)/);
+  if (!m) return null;
+  const n = parseInt(m[1], 10);
+  return Number.isFinite(n) ? n : null;
+}
+function filterCliArgsForStep(action, raw) {
+  const inputs = getCapabilityActionInputs(action);
+  if (!inputs) return raw;
+  const allowed = /* @__PURE__ */ new Set(["_", "cwd", "verbose", "quiet"]);
+  for (const input of inputs) {
+    const flagKey = input.flag.replace(/^--/, "");
+    allowed.add(input.name);
+    allowed.add(flagKey);
+    if (flagKey.includes("-")) allowed.add(flagKey.replace(/-([a-z0-9])/g, (_, c) => c.toUpperCase()));
+  }
+  return Object.fromEntries(Object.entries(raw).filter(([key]) => allowed.has(key)));
+}
+function composeStepWhy(parentWhy, step) {
+  return [parentWhy?.trim(), step.reason ? `Workflow step: ${step.reason}` : ""].filter((part) => Boolean(part)).join("\n\n");
+}
 function loadCapabilityContext(slug2, cwd) {
   if (!slug2) return null;
-  return resolveCapabilityFolder(slug2, path42.join(cwd, ".kody", "capabilities"));
+  return resolveCapabilityFolder(slug2, path43.join(cwd, ".kody", "capabilities"));
+}
+function loadWorkflowContext(slug2, base) {
+  if (!slug2 || !base.config || !isWorkflowDefinitionId(slug2)) return null;
+  const workflow = readWorkflowDefinition(base.config, base.cwd, slug2);
+  return workflow ? workflowDefinitionToCapabilityFolder(slug2, workflow) : null;
 }
 function mintInstantJob(dispatch2, opts) {
   return {
@@ -17542,6 +17977,7 @@ var init_job = __esm({
     "use strict";
     init_executor();
     init_registry();
+    init_workflowDefinitions();
     init_jobIdentity();
     init_jobIdentity();
     DEFAULT_INSTANT_AGENT = "kody";
@@ -17662,9 +18098,9 @@ function translateOpenAISseToBrain(opts) {
 }
 
 // src/servers/brain-serve.ts
-import * as fs46 from "fs";
+import * as fs47 from "fs";
 import { createServer } from "http";
-import * as path45 from "path";
+import * as path46 from "path";
 
 // src/chat/loop.ts
 init_agent();
@@ -18224,8 +18660,8 @@ init_config();
 
 // src/kody-cli.ts
 import { execFileSync as execFileSync25 } from "child_process";
-import * as fs44 from "fs";
-import * as path43 from "path";
+import * as fs45 from "fs";
+import * as path44 from "path";
 
 // src/app-auth.ts
 import { createSign } from "crypto";
@@ -18846,9 +19282,9 @@ async function resolveAuthToken(env = process.env) {
   return void 0;
 }
 function detectPackageManager2(cwd) {
-  if (fs44.existsSync(path43.join(cwd, "pnpm-lock.yaml"))) return "pnpm";
-  if (fs44.existsSync(path43.join(cwd, "yarn.lock"))) return "yarn";
-  if (fs44.existsSync(path43.join(cwd, "bun.lockb"))) return "bun";
+  if (fs45.existsSync(path44.join(cwd, "pnpm-lock.yaml"))) return "pnpm";
+  if (fs45.existsSync(path44.join(cwd, "yarn.lock"))) return "yarn";
+  if (fs45.existsSync(path44.join(cwd, "bun.lockb"))) return "bun";
   return "npm";
 }
 function shouldChainScheduledWatch(match) {
@@ -18941,8 +19377,8 @@ function postFailureTail(issueNumber, cwd, reason) {
   const logPath = lastRunLogPath(cwd);
   let tail = "";
   try {
-    if (fs44.existsSync(logPath)) {
-      const content = fs44.readFileSync(logPath, "utf-8");
+    if (fs45.existsSync(logPath)) {
+      const content = fs45.readFileSync(logPath, "utf-8");
       tail = content.slice(-3e3);
     }
   } catch {
@@ -18967,7 +19403,7 @@ async function runCi(argv) {
     return 0;
   }
   const args = parseCiArgs(argv);
-  const cwd = args.cwd ? path43.resolve(args.cwd) : process.cwd();
+  const cwd = args.cwd ? path44.resolve(args.cwd) : process.cwd();
   let earlyConfig;
   let earlyConfigError;
   try {
@@ -18982,9 +19418,9 @@ async function runCi(argv) {
   let manualWorkflowDispatch = false;
   let forceRunAction = null;
   let forceRunCliArgs = {};
-  if (!args.issueNumber && !autoFallback && eventName === "workflow_dispatch" && dispatchEventPath && fs44.existsSync(dispatchEventPath)) {
+  if (!args.issueNumber && !autoFallback && eventName === "workflow_dispatch" && dispatchEventPath && fs45.existsSync(dispatchEventPath)) {
     try {
-      const evt = JSON.parse(fs44.readFileSync(dispatchEventPath, "utf-8"));
+      const evt = JSON.parse(fs45.readFileSync(dispatchEventPath, "utf-8"));
       const issueInput = parseInt(String(evt?.inputs?.issue_number ?? ""), 10);
       const sessionInput = String(evt?.inputs?.sessionId ?? "");
       const dutyInput = String(evt?.inputs?.capability ?? evt?.inputs?.executable ?? "").trim();
@@ -19316,8 +19752,8 @@ init_repoWorkspace();
 
 // src/scripts/brainTurnLog.ts
 init_runtimePaths();
-import * as fs45 from "fs";
-import * as path44 from "path";
+import * as fs46 from "fs";
+import * as path45 from "path";
 import posixPath4 from "path/posix";
 var live = /* @__PURE__ */ new Map();
 function brainEventsFilePath(dir, chatId) {
@@ -19328,8 +19764,8 @@ function brainEventsStatePath(chatId) {
 }
 function lastPersistedSeq(dir, chatId) {
   const p = brainEventsFilePath(dir, chatId);
-  if (!fs45.existsSync(p)) return 0;
-  const lines = fs45.readFileSync(p, "utf-8").split("\n").filter(Boolean);
+  if (!fs46.existsSync(p)) return 0;
+  const lines = fs46.readFileSync(p, "utf-8").split("\n").filter(Boolean);
   if (lines.length === 0) return 0;
   try {
     return JSON.parse(lines[lines.length - 1]).seq || 0;
@@ -19339,9 +19775,9 @@ function lastPersistedSeq(dir, chatId) {
 }
 function readSince(dir, chatId, since) {
   const p = brainEventsFilePath(dir, chatId);
-  if (!fs45.existsSync(p)) return [];
+  if (!fs46.existsSync(p)) return [];
   const out = [];
-  for (const line of fs45.readFileSync(p, "utf-8").split("\n")) {
+  for (const line of fs46.readFileSync(p, "utf-8").split("\n")) {
     if (!line) continue;
     try {
       const rec = JSON.parse(line);
@@ -19367,12 +19803,12 @@ function beginTurn(dir, chatId) {
   };
   live.set(chatId, state);
   const p = brainEventsFilePath(dir, chatId);
-  fs45.mkdirSync(path44.dirname(p), { recursive: true });
+  fs46.mkdirSync(path45.dirname(p), { recursive: true });
   return (event) => {
     state.seq += 1;
     const rec = { seq: state.seq, turn, ts: Date.now(), event };
     try {
-      fs45.appendFileSync(p, `${JSON.stringify(rec)}
+      fs46.appendFileSync(p, `${JSON.stringify(rec)}
 `);
     } catch (err) {
       process.stderr.write(
@@ -19411,7 +19847,7 @@ function endTurnIfUnterminated(dir, chatId, errMessage) {
     event: { type: "error", error: errMessage || "turn ended unexpectedly", chatId }
   };
   try {
-    fs45.appendFileSync(brainEventsFilePath(dir, chatId), `${JSON.stringify(rec)}
+    fs46.appendFileSync(brainEventsFilePath(dir, chatId), `${JSON.stringify(rec)}
 `);
   } catch {
   }
@@ -19717,7 +20153,7 @@ async function handleChatTurn(req, res, chatId, opts) {
       );
     }
   }
-  fs46.mkdirSync(path45.dirname(sessionFile), { recursive: true });
+  fs47.mkdirSync(path46.dirname(sessionFile), { recursive: true });
   appendTurn(sessionFile, {
     role: "user",
     content: message,
@@ -19782,7 +20218,7 @@ async function handleChatTurn(req, res, chatId, opts) {
 function buildServer(opts) {
   const runTurn = opts.runTurn ?? runChatTurn;
   const cloneRepo = opts.cloneRepo ?? defaultCloneRepo;
-  const reposRoot = opts.reposRoot ?? path45.join(path45.dirname(path45.resolve(opts.cwd)), "repos");
+  const reposRoot = opts.reposRoot ?? path46.join(path46.dirname(path46.resolve(opts.cwd)), "repos");
   return createServer(async (req, res) => {
     if (!req.method || !req.url) {
       sendJson(res, 400, { error: "bad request" });
@@ -20377,8 +20813,8 @@ async function loadConfigSafe() {
 }
 
 // src/chat-cli.ts
-import * as fs48 from "fs";
-import * as path47 from "path";
+import * as fs49 from "fs";
+import * as path48 from "path";
 
 // src/chat/inbox.ts
 import { execFileSync as execFileSync26 } from "child_process";
@@ -20450,8 +20886,8 @@ function currentBranch(cwd) {
 
 // src/chat/state-sync.ts
 init_stateRepo();
-import * as fs47 from "fs";
-import * as path46 from "path";
+import * as fs48 from "fs";
+import * as path47 from "path";
 function jsonlLines2(text) {
   return text.split("\n").filter((line) => line.length > 0);
 }
@@ -20468,15 +20904,15 @@ function mergeJsonl2(localText, remoteText) {
 function syncJsonlFileFromState(opts) {
   const remote = readStateText(opts.config, opts.cwd, opts.statePath);
   if (!remote) return;
-  const local = fs47.existsSync(opts.localPath) ? fs47.readFileSync(opts.localPath, "utf-8") : "";
+  const local = fs48.existsSync(opts.localPath) ? fs48.readFileSync(opts.localPath, "utf-8") : "";
   const next = mergeJsonl2(local, remote.content);
   if (next === local) return;
-  fs47.mkdirSync(path46.dirname(opts.localPath), { recursive: true });
-  fs47.writeFileSync(opts.localPath, next);
+  fs48.mkdirSync(path47.dirname(opts.localPath), { recursive: true });
+  fs48.writeFileSync(opts.localPath, next);
 }
 function persistJsonlFileToState(opts) {
-  if (!fs47.existsSync(opts.localPath)) return;
-  const localText = fs47.readFileSync(opts.localPath, "utf-8");
+  if (!fs48.existsSync(opts.localPath)) return;
+  const localText = fs48.readFileSync(opts.localPath, "utf-8");
   for (let attempt = 1; attempt <= 3; attempt += 1) {
     const remote = readStateText(opts.config, opts.cwd, opts.statePath);
     const body = mergeJsonl2(localText, remote?.content ?? "");
@@ -20736,7 +21172,7 @@ async function runChat(argv) {
 ${CHAT_HELP}`);
     return 64;
   }
-  const cwd = args.cwd ? path47.resolve(args.cwd) : process.cwd();
+  const cwd = args.cwd ? path48.resolve(args.cwd) : process.cwd();
   const sessionId = args.sessionId;
   const unpackedSecrets = unpackAllSecrets();
   if (unpackedSecrets > 0) {
@@ -20797,7 +21233,7 @@ ${CHAT_HELP}`);
   const sink = buildSink(cwd, sessionId, args.dashboardUrl);
   const meta = readMeta(sessionFile);
   process.stdout.write(
-    `\u2192 kody:chat: session file=${sessionFile} exists=${fs48.existsSync(sessionFile)} meta=${meta ? meta.mode : "none"}
+    `\u2192 kody:chat: session file=${sessionFile} exists=${fs49.existsSync(sessionFile)} meta=${meta ? meta.mode : "none"}
 `
   );
   try {
@@ -20957,8 +21393,8 @@ var FlyClient = class {
   get fetch() {
     return this.opts.fetchImpl ?? fetch;
   }
-  async call(path48, init = {}) {
-    const res = await this.fetch(`${FLY_API_BASE}${path48}`, {
+  async call(path49, init = {}) {
+    const res = await this.fetch(`${FLY_API_BASE}${path49}`, {
       method: init.method ?? "GET",
       headers: {
         Authorization: `Bearer ${this.opts.token}`,
@@ -20969,7 +21405,7 @@ var FlyClient = class {
     if (res.status === 404 && init.allow404) return null;
     if (!res.ok) {
       const text = await res.text().catch(() => "");
-      throw new Error(`Fly API ${res.status} on ${path48}: ${text.slice(0, 200) || res.statusText}`);
+      throw new Error(`Fly API ${res.status} on ${path49}: ${text.slice(0, 200) || res.statusText}`);
     }
     if (res.status === 204) return null;
     const raw = await res.text();
@@ -21684,7 +22120,7 @@ async function poolServe() {
 
 // src/servers/runner-serve.ts
 import { spawn as spawn8 } from "child_process";
-import * as fs49 from "fs";
+import * as fs50 from "fs";
 import { createServer as createServer5 } from "http";
 var DEFAULT_PORT2 = 8080;
 var DEFAULT_WORKDIR = "/workspace/repo";
@@ -21764,8 +22200,8 @@ async function defaultRunJob(job) {
   const workdir = process.env.RUNNER_WORKDIR ?? DEFAULT_WORKDIR;
   const branch = job.ref ?? "main";
   const authUrl = `https://x-access-token:${job.githubToken}@github.com/${job.repo}.git`;
-  fs49.rmSync(workdir, { recursive: true, force: true });
-  fs49.mkdirSync(workdir, { recursive: true });
+  fs50.rmSync(workdir, { recursive: true, force: true });
+  fs50.mkdirSync(workdir, { recursive: true });
   const allSecrets = typeof job.allSecrets === "string" ? job.allSecrets : JSON.stringify(job.allSecrets ?? {});
   const interactive = job.mode === "interactive";
   const scheduled = job.mode === "scheduled";