@kody-ade/kody-engine 0.4.292 → 0.4.294

package/dist/bin/kody.js

@@ -15,7 +15,7 @@ var init_package = __esm({
   "package.json"() {
     package_default = {
       name: "@kody-ade/kody-engine",
-      version: "0.4.292",
+      version: "0.4.294",
       description: "kody \u2014 autonomous development engine. Single-session Claude Code agent behind a generic executor + declarative executable profiles.",
       license: "MIT",
       type: "module",
@@ -45,8 +45,9 @@ var init_package = __esm({
         lint: "biome check",
         "lint:fix": "biome check --write",
         format: "biome format --write",
+        "verify:package": "node scripts/verify-package-tarball.cjs",
         "brain:publish": "docker buildx build --platform linux/amd64 -f runner/Dockerfile.brain -t ghcr.io/${KODY_BRAIN_GHCR_OWNER:-aharonyaircohen}/kody-brain:latest --push runner",
-        prepublishOnly: "pnpm typecheck && vitest run tests/unit tests/int --no-coverage && pnpm build"
+        prepublishOnly: "pnpm typecheck && vitest run tests/unit tests/int --no-coverage && pnpm build && pnpm verify:package"
       },
       dependencies: {
         "@actions/cache": "^6.0.0",
@@ -2306,6 +2307,7 @@ function listFolderCapabilityActions(root, source) {
     if (capability.config.internal === true || capability.config.public === false) continue;
     const action = capability.config.action ?? slug2;
     const { executable, cliArgs } = resolveCapabilityExecution(capability);
+    if (hasUnresolvedExplicitImplementation(capability, executable)) continue;
     out.push({
       action,
       capability: slug2,
@@ -2319,6 +2321,14 @@ function listFolderCapabilityActions(root, source) {
   }
   return out.sort((a, b) => a.action.localeCompare(b.action));
 }
+function hasUnresolvedExplicitImplementation(capability, executable) {
+  const config = capability.config;
+  const hasExplicitImplementation = Boolean(config.implementation || config.executable) || (config.implementations?.length ?? 0) > 0 || (config.executables?.length ?? 0) > 0;
+  if (!hasExplicitImplementation) return false;
+  if (config.workflow?.steps.length) return false;
+  if (config.role && PUBLIC_EXECUTABLE_ROLES.has(config.role)) return false;
+  return resolveExecutable(executable) === null;
+}
 function listBuiltinCapabilityActions(root = getBuiltinCapabilitiesRoot()) {
   if (!fs6.existsSync(root) || !fs6.statSync(root).isDirectory()) return [];
   const out = [];
@@ -3490,23 +3500,77 @@ var init_agent = __esm({
   }
 });
 
+// src/agents.ts
+import * as fs9 from "fs";
+import * as path11 from "path";
+function stripFrontmatter(raw) {
+  const match = /^---\n[\s\S]*?\n---\n?([\s\S]*)$/.exec(raw);
+  return (match ? match[1] : raw).trim();
+}
+function loadAgentIdentity(cwd, slug2, agentsDir = DEFAULT_AGENT_DIR) {
+  const trimmed = slug2.trim();
+  if (!trimmed) throw new Error("loadAgentIdentity: empty agent slug");
+  const agentPath = resolveAgentFile(cwd, trimmed, agentsDir);
+  if (fs9.existsSync(agentPath)) {
+    const body = stripFrontmatter(fs9.readFileSync(agentPath, "utf-8"));
+    if (body) return body;
+    const builtinForEmpty = BUILTIN_AGENTS[trimmed];
+    if (builtinForEmpty) return builtinForEmpty;
+    throw new Error(`loadAgentIdentity: agent '${trimmed}' agent identity body is empty (${agentPath})`);
+  }
+  const builtin = BUILTIN_AGENTS[trimmed];
+  if (builtin) return builtin;
+  throw new Error(`loadAgentIdentity: agent '${trimmed}' declared but ${agentPath} does not exist`);
+}
+function resolveAgentFile(cwd, slug2, agentsDir = DEFAULT_AGENT_DIR) {
+  const localPath = path11.join(cwd, agentsDir, `${slug2}.md`);
+  if (fs9.existsSync(localPath)) return localPath;
+  const storeAgentRoot = getCompanyStoreAssetRoot("agents");
+  if (storeAgentRoot) {
+    const storePath = path11.join(storeAgentRoot, `${slug2}.md`);
+    if (fs9.existsSync(storePath)) return storePath;
+  }
+  return localPath;
+}
+function frameAgentIdentity(slug2, agent) {
+  return [
+    `## Who you are \u2014 agent identity (authoritative identity)`,
+    ``,
+    `You are operating as agent \`${slug2}\`. This identity defines *who* you are:`,
+    `your authority, doctrine, voice, and hard limits. Honour it exactly. Where the`,
+    `this identity's restrictions are stricter than the task, **the agent wins** \u2014 a task`,
+    `can never grant you authority your agent withholds.`,
+    ``,
+    agent
+  ].join("\n");
+}
+var DEFAULT_AGENT_DIR, BUILTIN_AGENTS;
+var init_agents = __esm({
+  "src/agents.ts"() {
+    "use strict";
+    init_companyStore();
+    DEFAULT_AGENT_DIR = ".kody/agents";
+    BUILTIN_AGENTS = {};
+  }
+});
+
 // src/task-artifacts.ts
-import fs9 from "fs";
-import path11 from "path";
+import fs10 from "fs";
+import path12 from "path";
 import posixPath from "path/posix";
 function prepareTaskArtifactsDir(cwd, taskId) {
   const safeId = String(taskId).replace(/[^a-zA-Z0-9._-]/g, "_");
   const absDir = runtimeStatePath(cwd, "task-artifacts", safeId);
   const relDir = absDir;
-  fs9.mkdirSync(absDir, { recursive: true });
+  fs10.mkdirSync(absDir, { recursive: true });
   return { taskId: safeId, absDir, relDir };
 }
 function verifyTaskArtifacts(absDir) {
   const missing = [];
   for (const name of TASK_ARTIFACT_FILES) {
-    const full = path11.join(absDir, name);
+    const full = path12.join(absDir, name);
     try {
-      const stat = fs9.statSync(full);
+      const stat = fs10.statSync(full);
       if (!stat.isFile() || stat.size === 0) missing.push(name);
     } catch {
       missing.push(name);
@@ -3519,11 +3583,11 @@ function taskArtifactStatePath(taskId, file) {
 }
 function persistTaskArtifactsToState(config, cwd, artifacts) {
   for (const file of TASK_ARTIFACT_FILES) {
-    const full = path11.join(artifacts.absDir, file);
-    if (!fs9.existsSync(full)) continue;
-    const stat = fs9.statSync(full);
+    const full = path12.join(artifacts.absDir, file);
+    if (!fs10.existsSync(full)) continue;
+    const stat = fs10.statSync(full);
     if (!stat.isFile() || stat.size === 0) continue;
-    const content = fs9.readFileSync(full, "utf-8");
+    const content = fs10.readFileSync(full, "utf-8");
     upsertStateText(
       config,
       cwd,
@@ -3603,7 +3667,7 @@ var init_task_artifacts = __esm({
 
 // src/gha.ts
 import { execFileSync as execFileSync3 } from "child_process";
-import * as fs15 from "fs";
+import * as fs16 from "fs";
 function getRunUrl() {
   const server = process.env.GITHUB_SERVER_URL;
   const repo = process.env.GITHUB_REPOSITORY;
@@ -3614,10 +3678,10 @@ function getRunUrl() {
 function reactToTriggerComment(cwd) {
   if (process.env.GITHUB_EVENT_NAME !== "issue_comment") return;
   const eventPath = process.env.GITHUB_EVENT_PATH;
-  if (!eventPath || !fs15.existsSync(eventPath)) return;
+  if (!eventPath || !fs16.existsSync(eventPath)) return;
   let event = null;
   try {
-    event = JSON.parse(fs15.readFileSync(eventPath, "utf-8"));
+    event = JSON.parse(fs16.readFileSync(eventPath, "utf-8"));
   } catch {
     return;
   }
@@ -3668,60 +3732,6 @@ var init_gha = __esm({
   }
 });
 
-// src/agents.ts
-import * as fs16 from "fs";
-import * as path16 from "path";
-function stripFrontmatter(raw) {
-  const match = /^---\n[\s\S]*?\n---\n?([\s\S]*)$/.exec(raw);
-  return (match ? match[1] : raw).trim();
-}
-function loadAgentIdentity(cwd, slug2, agentsDir = DEFAULT_AGENT_DIR) {
-  const trimmed = slug2.trim();
-  if (!trimmed) throw new Error("loadAgentIdentity: empty agent slug");
-  const agentPath = resolveAgentFile(cwd, trimmed, agentsDir);
-  if (fs16.existsSync(agentPath)) {
-    const body = stripFrontmatter(fs16.readFileSync(agentPath, "utf-8"));
-    if (body) return body;
-    const builtinForEmpty = BUILTIN_AGENTS[trimmed];
-    if (builtinForEmpty) return builtinForEmpty;
-    throw new Error(`loadAgentIdentity: agent '${trimmed}' agent identity body is empty (${agentPath})`);
-  }
-  const builtin = BUILTIN_AGENTS[trimmed];
-  if (builtin) return builtin;
-  throw new Error(`loadAgentIdentity: agent '${trimmed}' declared but ${agentPath} does not exist`);
-}
-function resolveAgentFile(cwd, slug2, agentsDir = DEFAULT_AGENT_DIR) {
-  const localPath = path16.join(cwd, agentsDir, `${slug2}.md`);
-  if (fs16.existsSync(localPath)) return localPath;
-  const storeAgentRoot = getCompanyStoreAssetRoot("agents");
-  if (storeAgentRoot) {
-    const storePath = path16.join(storeAgentRoot, `${slug2}.md`);
-    if (fs16.existsSync(storePath)) return storePath;
-  }
-  return localPath;
-}
-function frameAgentIdentity(slug2, agent) {
-  return [
-    `## Who you are \u2014 agent identity (authoritative identity)`,
-    ``,
-    `You are operating as agent \`${slug2}\`. This identity defines *who* you are:`,
-    `your authority, doctrine, voice, and hard limits. Honour it exactly. Where the`,
-    `this identity's restrictions are stricter than the task, **the agent wins** \u2014 a task`,
-    `can never grant you authority your agent withholds.`,
-    ``,
-    agent
-  ].join("\n");
-}
-var DEFAULT_AGENT_DIR, BUILTIN_AGENTS;
-var init_agents = __esm({
-  "src/agents.ts"() {
-    "use strict";
-    init_companyStore();
-    DEFAULT_AGENT_DIR = ".kody/agents";
-    BUILTIN_AGENTS = {};
-  }
-});
-
 // src/capabilityReport.ts
 function parseCapabilityReportsFromText(text) {
   const reports = [];
@@ -7703,8 +7713,7 @@ var init_typeDefinitions = __esm({
             stage: "publish",
             evidence: "productionDeployed",
             capability: "vercel-production-deploy",
-            executable: "vercel-production-deploy",
-            args: { goal: { fact: "goalId" } }
+            executable: "vercel-production-deploy"
           }
         ]
       },
@@ -8720,7 +8729,8 @@ var init_advanceManagedGoal = __esm({
         capability: decision.capability,
         cliArgs: decision.cliArgs,
         ...decision.executable ? { executable: decision.executable } : {},
-        ...decision.saveReport === true ? { saveReport: true } : {}
+        ...decision.saveReport === true ? { saveReport: true } : {},
+        resultTarget: { type: "goal", id: goal.id, evidence: decision.evidence }
       };
       ctx.output.reason = `dispatch ${decision.capability} for ${decision.evidence}`;
     };
@@ -9697,6 +9707,18 @@ function collectResults(raw, agentResult) {
   if (agentResult?.finalText) out.push(...parseCapabilityResultsFromText(agentResult.finalText));
   return out;
 }
+function parseResultTarget(raw) {
+  if (!raw || typeof raw !== "object" || Array.isArray(raw)) return null;
+  const target = raw;
+  if (target.type !== "goal") return null;
+  if (typeof target.id !== "string" || target.id.trim().length === 0) return null;
+  const evidence = typeof target.evidence === "string" && target.evidence.trim().length > 0 ? target.evidence.trim() : void 0;
+  return {
+    type: "goal",
+    id: target.id.trim(),
+    ...evidence ? { evidence } : {}
+  };
+}
 function collectGoalCapabilityEvidence(reports, results, fallbackGoalId, explicitEvidence) {
   const items = [];
   for (const report of reports) {
@@ -9790,8 +9812,9 @@ var init_applyCapabilityReports = __esm({
     applyCapabilityReports = async (ctx, _profile, agentResult) => {
       const reports = collectReports(ctx.data.capabilityReports, agentResult);
       const results = collectResults(ctx.data.capabilityResults ?? ctx.data.dutyResults, agentResult);
-      const resultGoalId = typeof ctx.args.goal === "string" && ctx.args.goal.length > 0 ? ctx.args.goal : null;
-      const explicitEvidence = typeof ctx.args.evidence === "string" && ctx.args.evidence.length > 0 ? ctx.args.evidence : void 0;
+      const resultTarget = parseResultTarget(ctx.data.capabilityResultTarget);
+      const resultGoalId = resultTarget?.id ?? (typeof ctx.args.goal === "string" && ctx.args.goal.length > 0 ? ctx.args.goal : null);
+      const explicitEvidence = resultTarget?.evidence ?? (typeof ctx.args.evidence === "string" && ctx.args.evidence.length > 0 ? ctx.args.evidence : void 0);
       const evidenceItems = collectGoalCapabilityEvidence(reports, results, resultGoalId, explicitEvidence);
       if (evidenceItems.length === 0) return;
       const evidenceByGoal = groupGoalEvidence(evidenceItems);
@@ -18402,7 +18425,8 @@ function handoffToJob(handoff) {
     executable: handoff.executable,
     cliArgs: handoff.cliArgs,
     flavor: "instant",
-    saveReport: handoff.saveReport === true
+    saveReport: handoff.saveReport === true,
+    resultTarget: handoff.resultTarget
   };
 }
 function clearStampedLifecycleLabels(profile, ctx) {
@@ -18817,7 +18841,20 @@ function validateJob(input) {
     cliArgs: j.cliArgs ?? {},
     flavor: j.flavor,
     force: j.force === true,
-    saveReport: j.saveReport === true
+    saveReport: j.saveReport === true,
+    resultTarget: parseCapabilityResultTarget(j.resultTarget)
+  };
+}
+function parseCapabilityResultTarget(raw) {
+  if (!raw || typeof raw !== "object" || Array.isArray(raw)) return void 0;
+  const target = raw;
+  if (target.type !== "goal") return void 0;
+  if (typeof target.id !== "string" || target.id.trim().length === 0) return void 0;
+  const evidence = typeof target.evidence === "string" && target.evidence.trim().length > 0 ? target.evidence.trim() : void 0;
+  return {
+    type: "goal",
+    id: target.id.trim(),
+    ...evidence ? { evidence } : {}
   };
 }
 async function runJob(job, base) {
@@ -18877,6 +18914,7 @@ async function runCapabilityImplementationStep(valid, profileName, capabilityIde
   preloadedData.jobExecutable = profileName;
   if (valid.schedule !== void 0 && valid.schedule.length > 0) preloadedData.jobSchedule = valid.schedule;
   if (valid.saveReport === true) preloadedData.jobSaveReport = true;
+  if (valid.resultTarget) preloadedData.capabilityResultTarget = valid.resultTarget;
   if (capabilityContext) {
     preloadedData.capabilitySlug = capabilityContext.slug;
     preloadedData.capabilityTitle = capabilityContext.title;
@@ -19241,16 +19279,17 @@ import * as path47 from "path";
 
 // src/chat/loop.ts
 init_agent();
+init_agents();
 init_config();
 init_registry();
 init_task_artifacts();
-import * as fs13 from "fs";
-import * as path15 from "path";
+import * as fs14 from "fs";
+import * as path16 from "path";
 
 // src/chat/attachments.ts
 init_runtimePaths();
-import * as fs10 from "fs";
-import * as path12 from "path";
+import * as fs11 from "fs";
+import * as path13 from "path";
 var INLINE_ATTACHMENT_RE = /(?:\[(?:Image|File): ([^\]]*)\]\n)?data:([\w.+-]+\/[\w.+-]+);base64,([A-Za-z0-9+/=]+)/g;
 var EXT_BY_MIME = {
   "image/png": "png",
@@ -19283,11 +19322,11 @@ function prepareAttachments(turns, cwd, sessionId) {
         if (!isImage) return `[File: ${name}]`;
         try {
           if (!dirEnsured) {
-            fs10.mkdirSync(dir, { recursive: true });
+            fs11.mkdirSync(dir, { recursive: true });
             dirEnsured = true;
           }
-          const filePath = path12.join(dir, `${imageCounter}.${extFor(mime)}`);
-          fs10.writeFileSync(filePath, Buffer.from(data, "base64"));
+          const filePath = path13.join(dir, `${imageCounter}.${extFor(mime)}`);
+          fs11.writeFileSync(filePath, Buffer.from(data, "base64"));
           imageCounter += 1;
           imagePaths.push(filePath);
           return `[Image "${name}" is attached \u2014 saved to ${filePath}. Use the Read tool on that exact path to view it.]`;
@@ -19303,11 +19342,11 @@ function prepareAttachments(turns, cwd, sessionId) {
 }
 
 // src/chat/events.ts
-import * as fs11 from "fs";
-import * as path13 from "path";
+import * as fs12 from "fs";
+import * as path14 from "path";
 import posixPath2 from "path/posix";
 function eventsFilePath(cwd, sessionId) {
-  return path13.join(cwd, ".kody", "events", `${sessionId}.jsonl`);
+  return path14.join(cwd, ".kody", "events", `${sessionId}.jsonl`);
 }
 function eventsStatePath(sessionId) {
   return posixPath2.join("events", `${sessionId}.jsonl`);
@@ -19318,8 +19357,8 @@ var FileSink = class {
   }
   file;
   async emit(event) {
-    fs11.mkdirSync(path13.dirname(this.file), { recursive: true });
-    fs11.appendFileSync(this.file, `${JSON.stringify(event)}
+    fs12.mkdirSync(path14.dirname(this.file), { recursive: true });
+    fs12.appendFileSync(this.file, `${JSON.stringify(event)}
 `);
   }
 };
@@ -19373,18 +19412,18 @@ function makeRunId(sessionId, suffix) {
 }
 
 // src/chat/session.ts
-import * as fs12 from "fs";
-import * as path14 from "path";
+import * as fs13 from "fs";
+import * as path15 from "path";
 import posixPath3 from "path/posix";
 function sessionFilePath(cwd, sessionId) {
-  return path14.join(cwd, ".kody", "sessions", `${sessionId}.jsonl`);
+  return path15.join(cwd, ".kody", "sessions", `${sessionId}.jsonl`);
 }
 function sessionStatePath(sessionId) {
   return posixPath3.join("sessions", `${sessionId}.jsonl`);
 }
 function readMeta(file) {
-  if (!fs12.existsSync(file)) return null;
-  const raw = fs12.readFileSync(file, "utf-8");
+  if (!fs13.existsSync(file)) return null;
+  const raw = fs13.readFileSync(file, "utf-8");
   const firstLine2 = raw.split("\n", 1)[0]?.trim();
   if (!firstLine2) return null;
   try {
@@ -19397,8 +19436,8 @@ function readMeta(file) {
   }
 }
 function readSession(file) {
-  if (!fs12.existsSync(file)) return [];
-  const raw = fs12.readFileSync(file, "utf-8").trim();
+  if (!fs13.existsSync(file)) return [];
+  const raw = fs13.readFileSync(file, "utf-8").trim();
   if (!raw) return [];
   const turns = [];
   for (const line of raw.split("\n")) {
@@ -19414,14 +19453,14 @@ function readSession(file) {
   return turns;
 }
 function appendTurn(file, turn) {
-  fs12.mkdirSync(path14.dirname(file), { recursive: true });
+  fs13.mkdirSync(path15.dirname(file), { recursive: true });
   const line = JSON.stringify({
     role: turn.role,
     content: turn.content,
     timestamp: turn.timestamp,
     toolCalls: turn.toolCalls ?? []
   });
-  fs12.appendFileSync(file, `${line}
+  fs13.appendFileSync(file, `${line}
 `);
 }
 function seedInitialMessage(file, message) {
@@ -19556,7 +19595,7 @@ function buildExecutableCatalog() {
   const entries = [];
   for (const { name, profilePath } of discovered) {
     try {
-      const raw = JSON.parse(fs13.readFileSync(profilePath, "utf-8"));
+      const raw = JSON.parse(fs14.readFileSync(profilePath, "utf-8"));
       const describe = typeof raw.describe === "string" ? raw.describe : "";
       const firstSentence = describe.split(/(?<=[.!?])\s+/, 1)[0] ?? "";
       entries.push({ name, describe: firstSentence.trim() });
@@ -19593,6 +19632,7 @@ async function runChatTurn(opts) {
   }
   const { turns: promptTurns, imagePaths } = prepareAttachments(turns, opts.cwd, opts.sessionId);
   const basePrompt = opts.systemPrompt ?? (opts.model.protocol === "openai" ? OPENAI_CHAT_SYSTEM_PROMPT : CHAT_SYSTEM_PROMPT);
+  const agentIdentityBlock = readAgentIdentityBlock(opts.cwd, opts.agentIdentity);
   const catalog = buildExecutableCatalog();
   const taskArtifactsPaths = prepareTaskArtifactsDir(opts.cwd, opts.sessionId);
   const artifactAddendum = taskArtifactsPromptAddendum({
@@ -19603,7 +19643,8 @@ async function runChatTurn(opts) {
   const contextBlock = readContextBlock(opts.cwd);
   const memoryBlock = readMemoryIndexBlock(opts.cwd);
   const instructionsBlock = readInstructionsBlock(opts.cwd);
-  const crossRepoBlock = opts.reposRoot ? CROSS_REPO_PROMPT : null;
+  const fetchRepoEnabled = Boolean(opts.enableFetchRepoTool && opts.reposRoot);
+  const crossRepoBlock = fetchRepoEnabled ? CROSS_REPO_PROMPT : null;
   const dashboardCmsEnabled = Boolean(opts.cmsDashboardUrl && opts.cmsRepoSlug && opts.cmsToken);
   const dashboardCmsBlock = dashboardCmsEnabled ? DASHBOARD_CMS_PROMPT : null;
   const imageBlock = imagePaths.length > 0 ? [
@@ -19616,6 +19657,7 @@ async function runChatTurn(opts) {
   ].join("\n") : null;
   const systemPrompt = [
     basePrompt,
+    agentIdentityBlock,
     contextBlock,
     memoryBlock,
     instructionsBlock,
@@ -19644,14 +19686,14 @@ async function runChatTurn(opts) {
     quiet: opts.quiet,
     additionalDirectories: [
       taskArtifactsPaths.absDir,
-      ...Array.from(new Set(imagePaths.map((p2) => path15.dirname(p2))))
+      ...Array.from(new Set(imagePaths.map((p2) => path16.dirname(p2))))
     ],
     systemPromptAppend: systemPrompt,
     ...opts.reasoningEffort ? { reasoningEffort: opts.reasoningEffort } : {},
-    // Let the agent clone + work on OTHER repos mid-conversation (a
-    // repo-less Brain serves many). Enabled whenever we know where repos
-    // live; grants read access to that root via additionalDirectories.
-    ...opts.reposRoot ? {
+    // Cross-repo work is opt-in. Repo Brain's default path remains focused
+    // on the selected repo even though the server stores clones under
+    // reposRoot.
+    ...fetchRepoEnabled ? {
       enableFetchRepoTool: true,
       reposRoot: opts.reposRoot,
       repoToken: opts.repoToken
@@ -19736,6 +19778,12 @@ async function runChatTurn(opts) {
   }
   return { exitCode: 0, reply };
 }
+function readAgentIdentityBlock(cwd, agentIdentity) {
+  const slug2 = agentIdentity?.slug?.trim();
+  if (!slug2) return null;
+  const body = agentIdentity?.body?.trim() || loadAgentIdentity(cwd, slug2);
+  return frameAgentIdentity(slug2, body);
+}
 async function runOpenAIChatTurn(args) {
   const { opts, turns, systemPrompt, sessionFile } = args;
   const doFetch = opts.fetchImpl ?? fetch;
@@ -19821,10 +19869,10 @@ async function emit(sink, type, sessionId, suffix, payload) {
 var MEMORY_INDEX_REL = ".kody/memory/INDEX.md";
 var MAX_INDEX_BYTES = 8e3;
 function readMemoryIndexBlock(cwd) {
-  const indexPath = path15.join(cwd, MEMORY_INDEX_REL);
+  const indexPath = path16.join(cwd, MEMORY_INDEX_REL);
   let raw;
   try {
-    raw = fs13.readFileSync(indexPath, "utf-8");
+    raw = fs14.readFileSync(indexPath, "utf-8");
   } catch {
     return "";
   }
@@ -19844,17 +19892,17 @@ _\u2026 (memory index truncated; use recall_search to read more)_` : trimmed;
 var CONTEXT_DIR_REL = ".kody/context";
 var MAX_CONTEXT_BYTES = 12e3;
 function readContextBlock(cwd) {
-  const dir = path15.join(cwd, CONTEXT_DIR_REL);
+  const dir = path16.join(cwd, CONTEXT_DIR_REL);
   let files;
   try {
-    files = fs13.readdirSync(dir).filter((f) => f.endsWith(".md")).sort();
+    files = fs14.readdirSync(dir).filter((f) => f.endsWith(".md")).sort();
   } catch {
     return "";
   }
   const sections = [];
   for (const file of files) {
     try {
-      const content = fs13.readFileSync(path15.join(dir, file), "utf-8").trim();
+      const content = fs14.readFileSync(path16.join(dir, file), "utf-8").trim();
       if (content) sections.push(`### ${file.replace(/\.md$/, "")}
 
 ${content}`);
@@ -19877,10 +19925,10 @@ _\u2026 (context truncated; use the state repo context files for the full text)_
 var INSTRUCTIONS_REL = ".kody/instructions.md";
 var MAX_INSTRUCTIONS_BYTES = 8e3;
 function readInstructionsBlock(cwd) {
-  const instructionsPath = path15.join(cwd, INSTRUCTIONS_REL);
+  const instructionsPath = path16.join(cwd, INSTRUCTIONS_REL);
   let raw;
   try {
-    raw = fs13.readFileSync(instructionsPath, "utf-8");
+    raw = fs14.readFileSync(instructionsPath, "utf-8");
   } catch {
     return "";
   }
@@ -19981,7 +20029,7 @@ init_config();
 
 // src/dispatch.ts
 init_config();
-import * as fs14 from "fs";
+import * as fs15 from "fs";
 
 // src/cron-match.ts
 var FIELD_BOUNDS = [
@@ -20083,10 +20131,10 @@ function autoDispatch(opts) {
   }
   const eventName = process.env.GITHUB_EVENT_NAME;
   const eventPath = process.env.GITHUB_EVENT_PATH;
-  if (!eventName || !eventPath || !fs14.existsSync(eventPath)) return null;
+  if (!eventName || !eventPath || !fs15.existsSync(eventPath)) return null;
   let event = {};
   try {
-    event = JSON.parse(fs14.readFileSync(eventPath, "utf-8"));
+    event = JSON.parse(fs15.readFileSync(eventPath, "utf-8"));
   } catch {
     return null;
   }
@@ -20197,7 +20245,7 @@ function autoDispatchTyped(opts) {
   if (legacy) return { kind: "route", ...legacy };
   const eventName = process.env.GITHUB_EVENT_NAME;
   const eventPath = process.env.GITHUB_EVENT_PATH;
-  if (!eventName || !eventPath || !fs14.existsSync(eventPath)) {
+  if (!eventName || !eventPath || !fs15.existsSync(eventPath)) {
     return { kind: "silent", reason: "no GHA event context" };
   }
   if (eventName !== "issue_comment") {
@@ -20205,7 +20253,7 @@ function autoDispatchTyped(opts) {
   }
   let event = {};
   try {
-    event = JSON.parse(fs14.readFileSync(eventPath, "utf-8"));
+    event = JSON.parse(fs15.readFileSync(eventPath, "utf-8"));
   } catch {
     return { kind: "silent", reason: "GHA event payload unreadable" };
   }
@@ -20249,7 +20297,7 @@ function dispatchScheduledWatches(opts) {
   for (const exe of listExecutables()) {
     let raw;
     try {
-      raw = fs14.readFileSync(exe.profilePath, "utf-8");
+      raw = fs15.readFileSync(exe.profilePath, "utf-8");
     } catch {
       continue;
     }
@@ -21332,6 +21380,19 @@ function strField(body, key) {
   }
   return void 0;
 }
+function boolField(body, key) {
+  return typeof body === "object" && body !== null && body[key] === true;
+}
+function agentIdentityField(body) {
+  if (typeof body !== "object" || body === null || !("agentIdentity" in body)) return void 0;
+  const value = body.agentIdentity;
+  if (typeof value !== "object" || value === null || Array.isArray(value)) return void 0;
+  const record2 = value;
+  const slug2 = typeof record2.slug === "string" ? record2.slug.trim() : "";
+  const bodyText = typeof record2.body === "string" ? record2.body.trim() : "";
+  if (!slug2 || !bodyText) return void 0;
+  return { slug: slug2, body: bodyText };
+}
 function sendJson(res, status, body) {
   res.writeHead(status, { "content-type": "application/json" });
   res.end(JSON.stringify(body));
@@ -21466,6 +21527,8 @@ async function handleChatTurn(req, res, chatId, opts) {
   const dashboardUrl = strField(body, "dashboardUrl");
   const storeRepoUrl = strField(body, "storeRepoUrl");
   const storeRef = strField(body, "storeRef");
+  const allowCrossRepo = boolField(body, "allowCrossRepo");
+  const agentIdentity = agentIdentityField(body);
   let agentCwd;
   try {
     agentCwd = await ensureRepoCwd({
@@ -21540,9 +21603,12 @@ async function handleChatTurn(req, res, chatId, opts) {
         model: opts.model,
         litellmUrl: opts.litellmUrl,
         sink,
-        // Let the agent clone + work on OTHER repos via the fetch_repo tool.
         reposRoot: opts.reposRoot,
+        // Repo Brain is selected-repo focused by default. Higher-level
+        // coordinator flows can opt into fetch_repo explicitly.
+        ...allowCrossRepo ? { enableFetchRepoTool: true } : {},
         repoToken,
+        ...agentIdentity ? { agentIdentity } : {},
         ...dashboardUrl && repo && stateToken ? {
           cmsDashboardUrl: dashboardUrl,
           cmsRepoSlug: repo,
@@ -21812,7 +21878,9 @@ async function proxyToBrainServe(args) {
       ...args.body.repoToken ? { repoToken: args.body.repoToken } : {},
       ...args.body.dashboardUrl ? { dashboardUrl: args.body.dashboardUrl } : {},
       ...args.body.storeRepoUrl ? { storeRepoUrl: args.body.storeRepoUrl } : {},
-      ...args.body.storeRef ? { storeRef: args.body.storeRef } : {}
+      ...args.body.storeRef ? { storeRef: args.body.storeRef } : {},
+      ...args.body.allowCrossRepo === true ? { allowCrossRepo: true } : {},
+      ...args.body.agentIdentity ? { agentIdentity: args.body.agentIdentity } : {}
     })
   });
   if (!upstream.ok || !upstream.body) {

package/dist/executables/types.ts

@@ -394,6 +394,12 @@ export interface OutputContract {
   }
 }
 
+export interface CapabilityResultTarget {
+  type: "goal"
+  id: string
+  evidence?: string
+}
+
 // ────────────────────────────────────────────────────────────────────────────
 // Run-time context passed to every script.
 // ────────────────────────────────────────────────────────────────────────────
@@ -429,6 +435,7 @@ export interface Context {
       executable?: string
       cliArgs: Record<string, unknown>
       saveReport?: boolean
+      resultTarget?: CapabilityResultTarget
     }
     /** In-process hand-off to a full Job, preserving job identity in task state. */
     nextJob?: Job
@@ -440,6 +447,7 @@ export interface Context {
       executable?: string
       cliArgs: Record<string, unknown>
       saveReport?: boolean
+      resultTarget?: CapabilityResultTarget
     }
   }
   /**
@@ -512,4 +520,6 @@ export interface Job {
   force?: boolean
   /** Ask the owning goal/loop to write a report run after its persisted decision. */
   saveReport?: boolean
+  /** Internal parent context used by postflights to attach neutral capability output. */
+  resultTarget?: CapabilityResultTarget
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kody-ade/kody-engine",
-  "version": "0.4.292",
+  "version": "0.4.294",
   "description": "kody — autonomous development engine. Single-session Claude Code agent behind a generic executor + declarative executable profiles.",
   "license": "MIT",
   "type": "module",
@@ -54,6 +54,7 @@
     "lint": "biome check",
     "lint:fix": "biome check --write",
     "format": "biome format --write",
+    "verify:package": "node scripts/verify-package-tarball.cjs",
     "brain:publish": "docker buildx build --platform linux/amd64 -f runner/Dockerfile.brain -t ghcr.io/${KODY_BRAIN_GHCR_OWNER:-aharonyaircohen}/kody-brain:latest --push runner"
   }
 }