@kody-ade/kody-engine 0.4.289 → 0.4.291

package/README.md

@@ -78,10 +78,6 @@ See [SECURITY.md](SECURITY.md) to report a vulnerability.
 │   src/executor.ts — runs capability implementations         │
 │   .kody/capabilities/<slug>/                                │
 │     profile.json · capability.md · optional skills/scripts  │
-│   .kody/capabilities/<slug>/                      │
-│     legacy fallback: profile.json · capability.md │
-│   .kody/executables/<name>/                               │
-│     legacy fallback: profile.json · prompt.md · *.sh        │
 │   src/scripts/*.ts — cross-cutting catalog  │
 └─────────────────────────────────────────────┘
 ```
@@ -91,10 +87,10 @@ Every top-level command is an auto-discovered capability action. The router has
 after `@kody` through `config.aliases`, then falls back to the legacy-named
 `config.defaultExecutable` / `config.defaultPrExecutable` fields as default
 capability actions. Drop a new `.kody/capabilities/<slug>/` directory with
-`profile.json` + `capability.md`; legacy `.kody/capabilities/` and
-`.kody/executables/` roots still load while repos migrate.
+`profile.json` + `capability.md`. Project/store `.kody/executables/` folders
+are obsolete and are not resolver sources.
 
-Legacy Executable directories are private implementation units and contain
+Capability implementation profiles are private implementation units and contain
 **only** three kinds of files: `profile.json` (declaration), `prompt.md` (agent
 instructions), and `.sh` scripts (mechanical side-effect work). Cross-cutting
 TypeScript lives in [src/scripts/](src/scripts/); it can't import from

package/dist/bin/kody.js

@@ -15,7 +15,7 @@ var init_package = __esm({
   "package.json"() {
     package_default = {
       name: "@kody-ade/kody-engine",
-      version: "0.4.289",
+      version: "0.4.291",
       description: "kody \u2014 autonomous development engine. Single-session Claude Code agent behind a generic executor + declarative executable profiles.",
       license: "MIT",
       type: "module",
@@ -1266,7 +1266,7 @@ var init_events = __esm({
 // src/verify.ts
 import { spawn } from "child_process";
 function runCommand(command, cwd) {
-  return new Promise((resolve9) => {
+  return new Promise((resolve10) => {
     const start = Date.now();
     const child = spawn(command, {
       cwd,
@@ -1295,11 +1295,11 @@ function runCommand(command, cwd) {
     child.on("exit", (code) => {
       clearTimeout(timer);
       const tail = Buffer.concat(buffers).toString("utf-8").slice(-TAIL_CHARS);
-      resolve9({ exitCode: code ?? -1, durationMs: Date.now() - start, tail });
+      resolve10({ exitCode: code ?? -1, durationMs: Date.now() - start, tail });
     });
     child.on("error", (err) => {
       clearTimeout(timer);
-      resolve9({ exitCode: -1, durationMs: Date.now() - start, tail: err.message });
+      resolve10({ exitCode: -1, durationMs: Date.now() - start, tail: err.message });
     });
   });
 }
@@ -1907,6 +1907,8 @@ function parseCapabilityConfig(raw) {
     executable: stringField(raw.executable),
     tickScript: stringField(raw.tickScript),
     disabled: typeof raw.disabled === "boolean" ? raw.disabled : void 0,
+    internal: typeof raw.internal === "boolean" ? raw.internal : void 0,
+    public: typeof raw.public === "boolean" ? raw.public : void 0,
     agent: stringField(raw.agent),
     mentions: stringList(raw.mentions).map((m) => m.replace(/^@/, "")),
     tools,
@@ -2022,7 +2024,6 @@ function getCompanyStoreAssetRoot(kind) {
   if (!root) return null;
   const folderByKind = {
     capabilities: "capabilities",
-    executables: "executables",
     goals: "goals",
     agents: "agents",
     workflows: "workflows"
@@ -2128,15 +2129,9 @@ function getExecutablesRoot() {
   }
   return candidates[0];
 }
-function getProjectExecutablesRoot() {
-  return path8.join(process.cwd(), ".kody", "executables");
-}
 function getProjectCapabilitiesRoot() {
   return path8.join(process.cwd(), ".kody", "capabilities");
 }
-function getCompanyStoreExecutablesRoot() {
-  return getCompanyStoreAssetRoot("executables");
-}
 function getCompanyStoreCapabilitiesRoot() {
   return getCompanyStoreAssetRoot("capabilities");
 }
@@ -2157,14 +2152,10 @@ function getBuiltinCapabilitiesRoot() {
 }
 function getExecutableRoots() {
   const projectCapabilitiesRoot = getProjectCapabilitiesRoot();
-  const projectExecutablesRoot = getProjectExecutablesRoot();
   const storeCapabilitiesRoot = getCompanyStoreCapabilitiesRoot();
-  const storeExecutablesRoot = getCompanyStoreExecutablesRoot();
   return [
     projectCapabilitiesRoot,
-    projectExecutablesRoot,
     ...storeCapabilitiesRoot ? [storeCapabilitiesRoot] : [],
-    ...storeExecutablesRoot ? [storeExecutablesRoot] : [],
     getExecutablesRoot()
   ];
 }
@@ -2216,21 +2207,12 @@ function listCapabilityActions(projectCapabilitiesRoot = getProjectCapabilitiesR
     seen.add(action.action);
     out.push(action);
   };
-  const storeCapabilitiesRoot = getCompanyStoreCapabilitiesRoot();
-  const projectExecutableRoots = [getProjectExecutablesRoot()];
-  const storeExecutableRoot = getCompanyStoreExecutablesRoot();
-  const storeExecutableRoots = storeExecutableRoot ? [storeExecutableRoot] : [];
   for (const action of listFolderCapabilityActions(projectCapabilitiesRoot, "project-folder"))
     add(action);
-  for (const root of projectExecutableRoots) {
-    for (const action of listExecutableCapabilityActions(root, "project-executable")) add(action);
-  }
+  const storeCapabilitiesRoot = getCompanyStoreCapabilitiesRoot();
   if (storeCapabilitiesRoot) {
     for (const action of listFolderCapabilityActions(storeCapabilitiesRoot, "company-store")) add(action);
   }
-  for (const root of storeExecutableRoots) {
-    for (const action of listExecutableCapabilityActions(root, "company-store-executable")) add(action);
-  }
   for (const action of listBuiltinCapabilityActions(getBuiltinCapabilitiesRoot())) add(action);
   return out.sort((a, b) => a.action.localeCompare(b.action));
 }
@@ -2294,34 +2276,6 @@ function isImplementationProfile(profilePath, requireImplementationProfile) {
     return false;
   }
 }
-function listExecutableCapabilityActions(root, source) {
-  if (!fs6.existsSync(root) || !fs6.statSync(root).isDirectory()) return [];
-  const out = [];
-  for (const ent of fs6.readdirSync(root, { withFileTypes: true })) {
-    if (!ent.isDirectory() || !isSafeName(ent.name)) continue;
-    const profilePath = path8.join(root, ent.name, CAPABILITY_PROFILE_FILE);
-    if (!fs6.existsSync(profilePath) || !fs6.statSync(profilePath).isFile()) continue;
-    try {
-      const raw = JSON.parse(fs6.readFileSync(profilePath, "utf-8"));
-      const action = typeof raw.action === "string" && raw.action.trim() ? raw.action.trim() : "";
-      if (!action) continue;
-      if (!PUBLIC_EXECUTABLE_ROLES.has(String(raw.role))) continue;
-      if (typeof raw.kind !== "string" || !raw.kind.trim()) continue;
-      if (!Array.isArray(raw.inputs)) continue;
-      out.push({
-        action,
-        capability: ent.name,
-        executable: ent.name,
-        cliArgs: {},
-        source,
-        describe: typeof raw.describe === "string" ? raw.describe : void 0,
-        profilePath
-      });
-    } catch {
-    }
-  }
-  return out.sort((a, b) => a.action.localeCompare(b.action));
-}
 function listFolderCapabilityActions(root, source) {
   if (!fs6.existsSync(root) || !fs6.statSync(root).isDirectory()) return [];
   const out = [];
@@ -2329,6 +2283,7 @@ function listFolderCapabilityActions(root, source) {
     if (!isSafeName(slug2)) continue;
     const capability = readCapabilityFolder(root, slug2);
     if (!capability) continue;
+    if (capability.config.internal === true || capability.config.public === false) continue;
     const action = capability.config.action ?? slug2;
     const { executable, cliArgs } = resolveCapabilityExecution(capability);
     out.push({
@@ -2978,7 +2933,7 @@ var init_repoWorkspace = __esm({
     defaultCloneRepo = (repo, token, dir) => {
       fs7.mkdirSync(path9.dirname(dir), { recursive: true });
       const authUrl = token ? `https://x-access-token:${token}@github.com/${repo}.git` : `https://github.com/${repo}.git`;
-      return new Promise((resolve9, reject) => {
+      return new Promise((resolve10, reject) => {
         const child = spawn2("git", ["clone", "--depth=1", authUrl, dir], {
           stdio: "inherit"
         });
@@ -2994,7 +2949,7 @@ var init_repoWorkspace = __esm({
             spawnSync("git", ["-C", dir, "config", "user.email", email]);
           } catch {
           }
-          resolve9();
+          resolve10();
         });
         child.on("error", reject);
       });
@@ -3205,18 +3160,18 @@ async function runAgent(opts) {
       }
       if (opts.enableCapabilityTool) {
         const { buildCapabilityMcpServer: buildCapabilityMcpServer2 } = await Promise.resolve().then(() => (init_capabilityMcp(), capabilityMcp_exports));
-        if (!opts.dutyRepoSlug) {
+        if (!opts.capabilityRepoSlug) {
           throw new Error(
-            "enableCapabilityTool requires dutyRepoSlug (owner/name) \u2014 set kody.config.json github.{owner,repo} or GITHUB_REPOSITORY env var"
+            "enableCapabilityTool requires capabilityRepoSlug (owner/name) \u2014 set kody.config.json github.{owner,repo} or GITHUB_REPOSITORY env var"
           );
         }
-        const dutyHandle = buildCapabilityMcpServer2({
-          repoSlug: opts.dutyRepoSlug,
+        const capabilityHandle = buildCapabilityMcpServer2({
+          repoSlug: opts.capabilityRepoSlug,
           state: opts.capabilityState,
           operatorMention: opts.capabilityOperatorMention ?? "",
           ...opts.capabilitySlug ? { capabilitySlug: opts.capabilitySlug } : {}
         });
-        mcpEntries.push(["kody-capability", dutyHandle.server]);
+        mcpEntries.push(["kody-capability", capabilityHandle.server]);
       }
       if (opts.enableDashboardCmsTool) {
         const { buildDashboardCmsMcpServer: buildDashboardCmsMcpServer2, DASHBOARD_CMS_MCP_TOOL_NAMES: DASHBOARD_CMS_MCP_TOOL_NAMES2 } = await Promise.resolve().then(() => (init_dashboardCmsMcp(), dashboardCmsMcp_exports));
@@ -3302,10 +3257,10 @@ async function runAgent(opts) {
         let timer;
         let next;
         if (turnTimeoutMs > 0) {
-          const timeoutPromise = new Promise((resolve9) => {
+          const timeoutPromise = new Promise((resolve10) => {
             timer = setTimeout(() => {
               timedOut = true;
-              resolve9({ done: true, value: void 0 });
+              resolve10({ done: true, value: void 0 });
             }, turnTimeoutMs);
           });
           next = await Promise.race([nextPromise, timeoutPromise]);
@@ -4255,18 +4210,29 @@ function loadProfile(profilePath) {
     if (!refPath) {
       throw new ProfileError(profilePath, `capability references unknown executable '${execRef}'`);
     }
-    const base = loadProfile(refPath);
-    return {
-      ...base,
-      name: requireString(profilePath, r, "name"),
-      action: typeof r.action === "string" && r.action.trim() ? r.action.trim() : void 0,
-      implementation: execRef,
-      executable: execRef,
-      describe: typeof r.describe === "string" ? r.describe : base.describe,
-      agent: typeof r.agent === "string" && r.agent.trim() ? r.agent.trim() : base.agent,
-      capabilityTools: parseStringArray2(r.capabilityTools ?? r.capabilityTools ?? r.tools) ?? base.capabilityTools,
-      mentions: Array.isArray(r.mentions) ? r.mentions.map((m) => String(m).trim()).filter(Boolean) : base.mentions
-    };
+    if (path19.resolve(refPath) === path19.resolve(profilePath)) {
+    } else {
+      const base = loadProfile(refPath);
+      return {
+        ...base,
+        name: requireString(profilePath, r, "name"),
+        action: typeof r.action === "string" && r.action.trim() ? r.action.trim() : void 0,
+        implementation: execRef,
+        executable: execRef,
+        internal: typeof r.internal === "boolean" ? r.internal : base.internal,
+        public: typeof r.public === "boolean" ? r.public : base.public,
+        capabilityKind: parseCapabilityKind(r.capabilityKind) ?? base.capabilityKind,
+        slug: typeof r.slug === "string" && r.slug.trim() ? r.slug.trim() : base.slug,
+        title: typeof r.title === "string" && r.title.trim() ? r.title.trim() : base.title,
+        skills: parseStringArray2(r.skills) ?? base.skills,
+        prompt: typeof r.prompt === "string" && r.prompt.trim() ? r.prompt.trim() : base.prompt,
+        chatTools: parseStringArray2(r.chatTools) ?? base.chatTools,
+        describe: typeof r.describe === "string" ? r.describe : base.describe,
+        agent: typeof r.agent === "string" && r.agent.trim() ? r.agent.trim() : base.agent,
+        capabilityTools: parseStringArray2(r.capabilityTools ?? r.capabilityTools ?? r.tools) ?? base.capabilityTools,
+        mentions: Array.isArray(r.mentions) ? r.mentions.map((m) => String(m).trim()).filter(Boolean) : base.mentions
+      };
+    }
   }
   const kind = r.kind === "scheduled" ? "scheduled" : "oneshot";
   if (kind === "scheduled" && typeof r.schedule !== "string") {
@@ -4306,6 +4272,14 @@ function loadProfile(profilePath) {
     action: typeof r.action === "string" && r.action.trim() ? r.action.trim() : void 0,
     implementation: void 0,
     executable: void 0,
+    internal: typeof r.internal === "boolean" ? r.internal : void 0,
+    public: typeof r.public === "boolean" ? r.public : void 0,
+    capabilityKind: parseCapabilityKind(r.capabilityKind),
+    slug: typeof r.slug === "string" && r.slug.trim() ? r.slug.trim() : void 0,
+    title: typeof r.title === "string" && r.title.trim() ? r.title.trim() : void 0,
+    skills: parseStringArray2(r.skills),
+    prompt: typeof r.prompt === "string" && r.prompt.trim() ? r.prompt.trim() : void 0,
+    chatTools: parseStringArray2(r.chatTools),
     describe: typeof r.describe === "string" ? r.describe : "",
     // Optional agent to run as. Empty/blank string → undefined (no agent).
     agent: typeof r.agent === "string" && r.agent.trim() ? r.agent.trim() : void 0,
@@ -4406,6 +4380,9 @@ function parseStringArray2(raw) {
   const values = raw.map((t) => String(t).trim()).filter(Boolean);
   return values.length > 0 ? values : void 0;
 }
+function parseCapabilityKind(raw) {
+  return raw === "observe" || raw === "act" || raw === "verify" ? raw : void 0;
+}
 function parseInputs(p, raw) {
   if (!Array.isArray(raw)) throw new ProfileError(p, `"inputs" must be an array`);
   const out = [];
@@ -4670,6 +4647,14 @@ var init_profile = __esm({
       "implementations",
       "executable",
       "executables",
+      "internal",
+      "public",
+      "capabilityKind",
+      "slug",
+      "title",
+      "skills",
+      "prompt",
+      "chatTools",
       "agent",
       "every",
       "capabilityTools",
@@ -8145,7 +8130,7 @@ async function planGoalCapabilitySchedule(opts) {
       }
     };
   }
-  const dispatch2 = dutyDispatch(capability);
+  const dispatch2 = capabilityDispatch(capability);
   statuses[due.slug] = markCapabilitySelected(statuses[due.slug], now);
   return {
     kind: "dispatch",
@@ -8205,7 +8190,7 @@ async function describeCapabilitySchedule(capability, slug2, backend, previous)
     lastFiredAt
   };
 }
-function dutyDispatch(capability) {
+function capabilityDispatch(capability) {
   const { executable, cliArgs } = resolveCapabilityExecution(capability);
   return { capability: capability.slug, executable, cliArgs };
 }
@@ -9739,7 +9724,7 @@ var init_applyCapabilityReports = __esm({
     init_stateStore();
     applyCapabilityReports = async (ctx, _profile, agentResult) => {
       const reports = collectReports(ctx.data.capabilityReports, agentResult);
-      const results = collectResults(ctx.data.dutyResults, agentResult);
+      const results = collectResults(ctx.data.capabilityResults ?? ctx.data.dutyResults, agentResult);
       const resultGoalId = typeof ctx.args.goal === "string" && ctx.args.goal.length > 0 ? ctx.args.goal : null;
       const explicitEvidence = typeof ctx.args.evidence === "string" && ctx.args.evidence.length > 0 ? ctx.args.evidence : void 0;
       const evidenceItems = collectGoalCapabilityEvidence(reports, results, resultGoalId, explicitEvidence);
@@ -10258,7 +10243,7 @@ function formatCapabilityReference(data, profileName) {
   if (capabilitySchedule) {
     lines.push(`- Cadence: \`${capabilitySchedule}\``);
   }
-  const capabilityBody = pickToken(data, "dutyIntent", "jobIntent");
+  const capabilityBody = pickToken(data, "capabilityIntent", "jobIntent", "dutyIntent");
   if (capabilityBody) {
     lines.push("", "## Capability body", "", capabilityBody);
   }
@@ -12961,7 +12946,7 @@ function retryDelaysMs() {
 }
 function sleep(ms) {
   if (ms <= 0) return Promise.resolve();
-  return new Promise((resolve9) => setTimeout(resolve9, ms));
+  return new Promise((resolve10) => setTimeout(resolve10, ms));
 }
 async function fetchGoalStateWithRetry(config, goalId, cwd) {
   let state = fetchGoalState(config, goalId, cwd);
@@ -13798,6 +13783,11 @@ function normalizeBundleFiles(ctx, bundle) {
     if (!relativePath) {
       throw new Error(`openAgentFactoryStatePr: files[${index}].path must point to a state repo file`);
     }
+    if (relativePath === "executables" || relativePath.startsWith("executables/")) {
+      throw new Error(
+        `openAgentFactoryStatePr: files[${index}].path uses obsolete executables storage; use capabilities/<slug>/ instead`
+      );
+    }
     if (seen.has(relativePath)) {
       throw new Error(`openAgentFactoryStatePr: duplicate generated file path: ${relativePath}`);
     }
@@ -15637,7 +15627,7 @@ var init_previewBuildHelpers = __esm({
 // src/scripts/previewBuildRun.ts
 import { spawn as spawn4 } from "child_process";
 async function runCmd(cmd, args, opts = {}) {
-  await new Promise((resolve9, reject) => {
+  await new Promise((resolve10, reject) => {
     const child = spawn4(cmd, args, {
       cwd: opts.cwd,
       env: { ...process.env, ...opts.env ?? {} },
@@ -15649,7 +15639,7 @@ async function runCmd(cmd, args, opts = {}) {
     }
     child.on("error", reject);
     child.on("close", (code) => {
-      if (code === 0) resolve9();
+      if (code === 0) resolve10();
       else reject(new Error(`${cmd} ${args.join(" ")} exited ${code}`));
     });
   });
@@ -16773,7 +16763,7 @@ function stripAnsi2(s) {
   return s.replace(ANSI_RE2, "");
 }
 function runCommand2(command, cwd) {
-  return new Promise((resolve9) => {
+  return new Promise((resolve10) => {
     const child = spawn5(command, {
       cwd,
       shell: true,
@@ -16800,11 +16790,11 @@ function runCommand2(command, cwd) {
     }, TEST_TIMEOUT_MS);
     child.on("exit", (code) => {
       clearTimeout(timer);
-      resolve9({ exitCode: code ?? -1, output: Buffer.concat(buffers).toString("utf-8") });
+      resolve10({ exitCode: code ?? -1, output: Buffer.concat(buffers).toString("utf-8") });
     });
     child.on("error", (err) => {
       clearTimeout(timer);
-      resolve9({ exitCode: -1, output: err.message });
+      resolve10({ exitCode: -1, output: err.message });
     });
   });
 }
@@ -17209,21 +17199,21 @@ function lineStream(stream) {
     tryDeliver();
   });
   return {
-    next: (timeoutMs) => new Promise((resolve9) => {
+    next: (timeoutMs) => new Promise((resolve10) => {
       if (queue.length > 0) {
-        resolve9(queue.shift());
+        resolve10(queue.shift());
         return;
       }
       if (ended) {
-        resolve9(null);
+        resolve10(null);
         return;
       }
-      waiter = resolve9;
+      waiter = resolve10;
       const t = setTimeout(
         () => {
-          if (waiter === resolve9) {
+          if (waiter === resolve10) {
             waiter = null;
-            resolve9(null);
+            resolve10(null);
           }
         },
         Math.max(0, timeoutMs)
@@ -17712,7 +17702,6 @@ var init_stateWorkspace = __esm({
     "use strict";
     init_stateRepo();
     DIR_MAPPINGS = [
-      { stateDir: "executables", localDir: path41.join(".kody", "executables") },
       { stateDir: "capabilities", localDir: path41.join(".kody", "capabilities") },
       { stateDir: "agents", localDir: path41.join(".kody", "agents") },
       { stateDir: "context", localDir: path41.join(".kody", "context") },
@@ -17817,10 +17806,11 @@ function collectShellSideChannels(ctx, stdout) {
     const prior = Array.isArray(ctx.data.capabilityReports) ? ctx.data.capabilityReports : [];
     ctx.data.capabilityReports = [...prior, ...capabilityReports];
   }
-  const dutyResults = parseCapabilityResultsFromText(stdout);
-  if (dutyResults.length > 0) {
-    const prior = Array.isArray(ctx.data.dutyResults) ? ctx.data.dutyResults : [];
-    ctx.data.dutyResults = [...prior, ...dutyResults];
+  const capabilityResults = parseCapabilityResultsFromText(stdout);
+  if (capabilityResults.length > 0) {
+    const prior = Array.isArray(ctx.data.capabilityResults) ? ctx.data.capabilityResults : Array.isArray(ctx.data.dutyResults) ? ctx.data.dutyResults : [];
+    ctx.data.capabilityResults = [...prior, ...capabilityResults];
+    ctx.data.dutyResults = ctx.data.capabilityResults;
   }
 }
 function operatorRequestBlock(why) {
@@ -18036,7 +18026,7 @@ async function runExecutable(profileName, input) {
       // owner/repo from kody.config.json; envelope falls back to GITHUB_REPOSITORY
       // for tester repos that don't set config.github (the file isn't always
       // checked in). Either way, capabilityMcp needs "owner/name" to hit the compare API.
-      dutyRepoSlug: config.github?.owner && config.github?.repo ? `${config.github.owner}/${config.github.repo}` : process.env.GITHUB_REPOSITORY?.trim() || void 0,
+      capabilityRepoSlug: config.github?.owner && config.github?.repo ? `${config.github.owner}/${config.github.repo}` : process.env.GITHUB_REPOSITORY?.trim() || void 0,
       verifyToolMaxAttempts: profile.claudeCode.verifyAttempts ?? null,
       verifyConfig: profile.claudeCode.enableVerifyTool ? config : void 0,
       executableName: profileName,
@@ -18513,14 +18503,14 @@ async function runShellEntry(entry, ctx, profile) {
   let killTimer;
   let escalateTimer;
   const result = await new Promise(
-    (resolve9) => {
+    (resolve10) => {
       let settled = false;
       const settle = (code, signal, spawnErr) => {
         if (settled) return;
         settled = true;
         if (killTimer) clearTimeout(killTimer);
         if (escalateTimer) clearTimeout(escalateTimer);
-        resolve9({ code, signal, spawnErr });
+        resolve10({ code, signal, spawnErr });
       };
       child.on("error", (err) => settle(null, null, err));
       child.on("close", (code, signal) => settle(code, signal));
@@ -18781,7 +18771,7 @@ async function runJob(job, base) {
   }
   const workflow = capabilityContext?.config.workflow ?? workflowContext?.config.workflow;
   const workflowIdentity = valid.workflow ?? capabilityIdentity ?? workflowContext?.slug;
-  const capabilitySelectedExecutable = resolvedCapability?.executable ?? capabilityContext?.config.executable ?? capabilityContext?.config.executables?.[0] ?? (capabilityContext?.config.tickScript ? "capability-tick-scripted" : void 0);
+  const capabilitySelectedExecutable = resolvedCapability?.executable ?? capabilityContext?.config.executable ?? capabilityContext?.config.executables?.[0] ?? (capabilityContext?.config.role ? capabilityContext.slug : void 0) ?? (capabilityContext?.config.tickScript ? "capability-tick-scripted" : void 0);
   const profileName = valid.executable ?? capabilitySelectedExecutable;
   if (workflow && shouldRunCapabilityWorkflow(valid, workflow, workflowIdentity, capabilitySelectedExecutable, base)) {
     const workflowCapability = capabilityContext ?? workflowContext;
@@ -18825,6 +18815,7 @@ async function runCapabilityImplementationStep(valid, profileName, capabilityIde
   if (capabilityContext) {
     preloadedData.capabilitySlug = capabilityContext.slug;
     preloadedData.capabilityTitle = capabilityContext.title;
+    preloadedData.capabilityIntent = capabilityContext.body;
     preloadedData.dutyIntent = capabilityContext.body;
     preloadedData.jobIntent = capabilityContext.body;
     if (preloadedData.jobCapability === void 0) preloadedData.jobCapability = capabilityContext.slug;
@@ -19509,11 +19500,11 @@ function buildExecutableCatalog() {
   if (entries.length === 0) return "";
   const lines = [
     "",
-    "# Available executables",
+    "# Available capability implementations",
     "These run inside the engine, NOT inside this chat. You cannot invoke them",
-    "directly \u2014 to run one, tell the user to post `@kody <name>` (with any flags)",
+    "directly \u2014 to run one, tell the user to post the matching `@kody <action>`",
     "as a comment on the relevant issue or PR. The dispatcher binds the issue/PR",
-    "number to the executable's inputs automatically.",
+    "number to the implementation inputs automatically.",
     ""
   ];
   for (const e of entries) {
@@ -20729,12 +20720,12 @@ async function runCi(argv) {
       const evt = JSON.parse(fs46.readFileSync(dispatchEventPath, "utf-8"));
       const issueInput = parseInt(String(evt?.inputs?.issue_number ?? ""), 10);
       const sessionInput = String(evt?.inputs?.sessionId ?? "");
-      const dutyInput = String(evt?.inputs?.capability ?? evt?.inputs?.executable ?? "").trim();
+      const capabilityInput = String(evt?.inputs?.capability ?? evt?.inputs?.executable ?? "").trim();
       const messageInput = String(evt?.inputs?.message ?? "").trim();
       const noTarget = !sessionInput && !(Number.isFinite(issueInput) && issueInput > 0);
-      if (noTarget && dutyInput) {
-        forceRunAction = dutyInput;
-        if (dutyInput === "goal-manager" && messageInput) {
+      if (noTarget && capabilityInput) {
+        forceRunAction = capabilityInput;
+        if (capabilityInput === "goal-manager" && messageInput) {
           forceRunCliArgs = { goal: messageInput };
         }
       } else {
@@ -20747,8 +20738,8 @@ async function runCi(argv) {
   if (forceRunAction) {
     const config = earlyConfig ?? loadConfig(cwd);
     const manualGoalManager = forceRunAction === "goal-manager";
-    const dutyRoute = manualGoalManager ? null : resolveCapabilityAction(forceRunAction);
-    const scheduledWatchRoute = manualGoalManager || dutyRoute ? void 0 : dispatchScheduledWatches({ force: true }).find(
+    const capabilityRoute = manualGoalManager ? null : resolveCapabilityAction(forceRunAction);
+    const scheduledWatchRoute = manualGoalManager || capabilityRoute ? void 0 : dispatchScheduledWatches({ force: true }).find(
       (match) => match.action === forceRunAction || match.executable === forceRunAction
     );
     const route = manualGoalManager ? {
@@ -20756,7 +20747,7 @@ async function runCi(argv) {
       capability: "goal-manager",
       executable: "goal-manager",
       cliArgs: forceRunCliArgs
-    } : dutyRoute ?? scheduledWatchRoute;
+    } : capabilityRoute ?? scheduledWatchRoute;
     if (!route) {
       process.stderr.write(`[kody] manual one-shot action '${forceRunAction}' has no capability action
 `);
@@ -21250,17 +21241,17 @@ function authOk(req, expected) {
   return false;
 }
 function readJsonBody(req) {
-  return new Promise((resolve9, reject) => {
+  return new Promise((resolve10, reject) => {
     const chunks = [];
     req.on("data", (c) => chunks.push(c));
     req.on("end", () => {
       const raw = Buffer.concat(chunks).toString("utf-8");
       if (!raw.trim()) {
-        resolve9({});
+        resolve10({});
         return;
       }
       try {
-        resolve9(JSON.parse(raw));
+        resolve10(JSON.parse(raw));
       } catch (err) {
         reject(err instanceof Error ? err : new Error(String(err)));
       }
@@ -21615,11 +21606,11 @@ async function brainServe(opts) {
     model,
     litellmUrl
   });
-  await new Promise((resolve9) => {
+  await new Promise((resolve10) => {
     server.listen(port, "0.0.0.0", () => {
       process.stdout.write(`[brain-serve] listening on 0.0.0.0:${port} (cwd=${opts.cwd})
 `);
-      resolve9();
+      resolve10();
     });
   });
   const shutdown = (signal) => {
@@ -21872,14 +21863,14 @@ async function startBrainProxy(opts) {
   const { httpServer, handler } = buildBrainProxy(opts);
   const port = opts.port ?? 0;
   const host = opts.host ?? "127.0.0.1";
-  await new Promise((resolve9) => httpServer.listen(port, host, () => resolve9()));
+  await new Promise((resolve10) => httpServer.listen(port, host, () => resolve10()));
   const addr = httpServer.address();
   return {
     httpServer,
     port: addr.port,
     url: `http://${host}:${addr.port}`,
-    stop: () => new Promise((resolve9) => {
-      httpServer.close(() => resolve9());
+    stop: () => new Promise((resolve10) => {
+      httpServer.close(() => resolve10());
     }),
     handler
   };
@@ -22029,23 +22020,23 @@ function buildMcpHttpServer(opts) {
     httpServer,
     routes,
     port,
-    stop: () => new Promise((resolve9) => {
+    stop: () => new Promise((resolve10) => {
       let pending = transports.size;
       if (pending === 0) {
-        httpServer.close(() => resolve9());
+        httpServer.close(() => resolve10());
         return;
       }
       for (const transport of transports.values()) {
         void transport.close().finally(() => {
           pending--;
-          if (pending === 0) httpServer.close(() => resolve9());
+          if (pending === 0) httpServer.close(() => resolve10());
         });
       }
     })
   };
 }
 function listenMcpHttpServer(server, host = "127.0.0.1") {
-  return new Promise((resolve9, reject) => {
+  return new Promise((resolve10, reject) => {
     server.httpServer.once("error", reject);
     server.httpServer.listen(server.port, host, () => {
       server.httpServer.off("error", reject);
@@ -22053,7 +22044,7 @@ function listenMcpHttpServer(server, host = "127.0.0.1") {
       if (addr && typeof addr === "object") {
         server.port = addr.port;
       }
-      resolve9();
+      resolve10();
     });
   });
 }
@@ -22194,7 +22185,7 @@ async function waitForNextUserMessage(opts) {
   }
 }
 function sleep3(ms) {
-  return new Promise((resolve9) => setTimeout(resolve9, ms));
+  return new Promise((resolve10) => setTimeout(resolve10, ms));
 }
 function currentBranch(cwd) {
   try {
@@ -23297,14 +23288,14 @@ function sendJson2(res, status, body) {
   res.end(JSON.stringify(body));
 }
 function readJsonBody2(req) {
-  return new Promise((resolve9, reject) => {
+  return new Promise((resolve10, reject) => {
     const chunks = [];
     req.on("data", (c) => chunks.push(c));
     req.on("end", () => {
       const raw = Buffer.concat(chunks).toString("utf-8");
-      if (!raw.trim()) return resolve9({});
+      if (!raw.trim()) return resolve10({});
       try {
-        resolve9(JSON.parse(raw));
+        resolve10(JSON.parse(raw));
       } catch (err) {
         reject(err instanceof Error ? err : new Error(String(err)));
       }
@@ -23427,9 +23418,9 @@ async function poolServe() {
   const tick = setInterval(() => {
     registry.resyncAll().catch((err) => log(`resync tick failed: ${err instanceof Error ? err.message : String(err)}`));
   }, refillMs);
-  const dutyTickEnabled = (process.env.POOL_CAPABILITY_TICK ?? "1") !== "0";
-  const dutyTickMs = envInt2("POOL_CAPABILITY_TICK_MS", 15 * 6e4);
-  const dutyTick = dutyTickEnabled ? setInterval(() => {
+  const capabilityTickEnabled = (process.env.POOL_CAPABILITY_TICK ?? "1") !== "0";
+  const capabilityTickMs = envInt2("POOL_CAPABILITY_TICK_MS", 15 * 6e4);
+  const capabilityTick = capabilityTickEnabled ? setInterval(() => {
     runCapabilityFallbackTick({
       isDegraded: () => gitHubActionsDegraded(),
       activeRepos: () => registry.activeRepos(),
@@ -23438,7 +23429,7 @@ async function poolServe() {
     }).catch(
       (err) => log(`capability fallback tick failed: ${err instanceof Error ? err.message : String(err)}`)
     );
-  }, dutyTickMs) : null;
+  }, capabilityTickMs) : null;
   const server = createServer4(async (req, res) => {
     try {
       if (!req.method || !req.url) return sendJson2(res, 400, { error: "bad request" });
@@ -23486,16 +23477,16 @@ async function poolServe() {
     }
   });
   const apiHost = process.env.POOL_API_HOST ?? "::";
-  await new Promise((resolve9) => {
+  await new Promise((resolve10) => {
     server.listen(apiPort, apiHost, () => {
       log(`listening on ${apiHost}:${apiPort} (min=${min}, app=${app}, region=${region})`);
-      resolve9();
+      resolve10();
     });
   });
   const shutdown = (signal) => {
     log(`${signal} \u2014 shutting down`);
     clearInterval(tick);
-    if (dutyTick) clearInterval(dutyTick);
+    if (capabilityTick) clearInterval(capabilityTick);
     server.close(() => process.exit(0));
   };
   process.once("SIGINT", () => shutdown("SIGINT"));
@@ -23528,17 +23519,17 @@ function authOk2(req, expected) {
   return false;
 }
 function readJsonBody3(req) {
-  return new Promise((resolve9, reject) => {
+  return new Promise((resolve10, reject) => {
     const chunks = [];
     req.on("data", (c) => chunks.push(c));
     req.on("end", () => {
       const raw = Buffer.concat(chunks).toString("utf-8");
       if (!raw.trim()) {
-        resolve9({});
+        resolve10({});
         return;
       }
       try {
-        resolve9(JSON.parse(raw));
+        resolve10(JSON.parse(raw));
       } catch (err) {
         reject(err instanceof Error ? err : new Error(String(err)));
       }
@@ -23672,13 +23663,13 @@ async function defaultRunJob(job) {
     ...interactive && job.idleExitMs ? { KODY_IDLE_EXIT_MS: String(job.idleExitMs) } : {},
     ...interactive && job.hardCapMs ? { KODY_HARD_CAP_MS: String(job.hardCapMs) } : {}
   };
-  const run = (cmd, args, cwd) => new Promise((resolve9) => {
+  const run = (cmd, args, cwd) => new Promise((resolve10) => {
     const child = spawn8(cmd, args, { stdio: "inherit", env: childEnv, cwd });
-    child.on("exit", (code) => resolve9(code ?? 0));
+    child.on("exit", (code) => resolve10(code ?? 0));
     child.on("error", (err) => {
       process.stderr.write(`[runner-serve] ${cmd} failed: ${err.message}
 `);
-      resolve9(1);
+      resolve10(1);
     });
   });
   process.stdout.write(`[runner-serve] job ${job.jobId}: cloning ${job.repo}@${branch}
@@ -23754,11 +23745,11 @@ async function runnerServe() {
   const port = Number(process.env.PORT ?? DEFAULT_PORT2);
   const server = buildServer2({ apiKey });
   const host = process.env.RUNNER_HOST ?? "::";
-  await new Promise((resolve9) => {
+  await new Promise((resolve10) => {
     server.listen(port, host, () => {
       process.stdout.write(`[runner-serve] listening on ${host}:${port} (idle, awaiting job)
 `);
-      resolve9();
+      resolve10();
     });
   });
   const shutdown = (signal) => {
@@ -23827,14 +23818,14 @@ async function serve(opts) {
 `);
     const args = ["--dangerously-skip-permissions", "--model", model.model];
     const child = spawn9("claude", args, { stdio: "inherit", env: editorEnv, cwd: opts.cwd });
-    const exitCode = await new Promise((resolve9) => {
-      child.on("exit", (code) => resolve9(code ?? 0));
+    const exitCode = await new Promise((resolve10) => {
+      child.on("exit", (code) => resolve10(code ?? 0));
       child.on("error", (err) => {
         process.stderr.write(`[kody serve] failed to launch Claude Code: ${err.message}
 `);
         process.stderr.write(`  Install: https://docs.anthropic.com/claude/docs/claude-code
 `);
-        resolve9(1);
+        resolve10(1);
       });
     });
     killProxy();

package/dist/executables/agent-factory/prompt.md

@@ -18,7 +18,7 @@ You are Kody's agent factory. Convert the operator request into review-ready Kod
 
 # Task
 
-Design the smallest Kody model structure that satisfies the request. You may create or assemble simple executables, capabilities, loops, goals, and agents.
+Design the smallest Kody model structure that satisfies the request. You may create or assemble simple capability implementation profiles, capabilities, loops, goals, and agents.
 
 Use the current Kody vocabulary:
 
@@ -31,7 +31,7 @@ Use the current Kody vocabulary:
 Use current storage names when producing files:
 
 - capability: capability contract, public action ownership, kind, agent, cadence, and output contract
-- executable: capability implementation
+- implementation profile: capability implementation stored under `capabilities/<slug>/`
 
 # Boundaries
 
@@ -40,7 +40,8 @@ Use current storage names when producing files:
 - Do not activate generated definitions yourself.
 - Do not create a consumer-repo PR.
 - The deterministic postflight will open a review PR in the configured state repo under the configured state path.
-- Put generated file paths relative to the configured state path, for example `executables/...`, `capabilities/...`, `agents/...`, `goals/...`, or `memory/...`.
+- Put generated file paths relative to the configured state path, for example `capabilities/...`, `agents/...`, `goals/...`, or `memory/...`.
+- Do not create `executables/...` paths. External executables are obsolete; implementation profiles live in capability folders.
 - Produce complete file contents. Do not describe patches.
 - Prefer a small bundle over a broad framework. Include assumptions in the summary.
 
@@ -59,7 +60,7 @@ PR_SUMMARY:
   "summary": "human explanation and assumptions",
   "files": [
     {
-      "path": "executables/example/profile.json",
+      "path": "capabilities/example/profile.json",
       "content": "{\n  \"name\": \"example\"\n}\n"
     }
   ]

package/dist/executables/types.ts

@@ -56,6 +56,18 @@ export interface Profile {
   executable?: string
   implementations?: string[]
   executables?: string[]
+  /** Hide a capability implementation profile from public action discovery. */
+  internal?: boolean
+  /** Explicit public-action flag for capability profiles. */
+  public?: boolean
+  /** Public capability output class when the profile also serves as a capability contract. */
+  capabilityKind?: "observe" | "act" | "verify"
+  /** Optional dashboard-facing capability metadata. The executor does not act on these fields. */
+  slug?: string
+  title?: string
+  skills?: string[]
+  prompt?: string
+  chatTools?: string[]
   /**
    * Execution model — orthogonal to `role`.
    * `oneshot` (default): single invocation on demand.
@@ -160,7 +172,7 @@ export interface Profile {
    * preflight runs. composePrompt prefers these over a fresh disk read so the
    * template survives working-tree churn from runFlow's branch setup — on the CI
    * runner a branch checkout can drop the tracked-but-ignore-negated
-   * `.kody/executables/<name>/` dir, and reading prompt.md afterwards fails with
+   * `.kody/capabilities/<name>/` dir, and reading prompt.md afterwards fails with
    * ENOENT even though profile.json (read here, earlier) loaded fine.
    */
   promptTemplates?: Record<string, string>

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kody-ade/kody-engine",
-  "version": "0.4.289",
+  "version": "0.4.291",
   "description": "kody — autonomous development engine. Single-session Claude Code agent behind a generic executor + declarative executable profiles.",
   "license": "MIT",
   "type": "module",