@kody-ade/kody-engine 0.4.372 → 0.4.373

package/dist/bin/kody.js

@@ -15,7 +15,7 @@ var init_package = __esm({
   "package.json"() {
     package_default = {
       name: "@kody-ade/kody-engine",
-      version: "0.4.372",
+      version: "0.4.373",
       description: "kody \u2014 autonomous development engine. Single-session Claude Code agent behind a generic executor + declarative implementation profiles.",
       license: "MIT",
       type: "module",
@@ -3451,7 +3451,10 @@ async function runAgent(opts) {
           errorMessage2 = `agent stalled: no SDK message in ${Math.round(turnTimeoutMs / 1e3)}s`;
           if (typeof iterator.return === "function") {
             try {
-              await iterator.return(void 0);
+              await Promise.race([
+                iterator.return(void 0).catch(() => void 0),
+                new Promise((resolve10) => setTimeout(resolve10, 1e4).unref())
+              ]);
             } catch {
             }
           }
@@ -6334,7 +6337,7 @@ function locateLitellmScript() {
       "python3",
       [
         "-c",
-        "import os,sys; p=os.path.join(os.path.dirname(sys.implementation),'litellm'); print(p if os.path.exists(p) else '')"
+        "import os,sys,site,sysconfig; c=[os.path.join(os.path.dirname(sys.executable),'litellm'),os.path.join(sysconfig.get_path('scripts'),'litellm'),os.path.join(site.USER_BASE,'bin','litellm')]; m=[p for p in c if os.path.exists(p)]; print(m[0] if m else '')"
       ],
       { encoding: "utf-8", timeout: 1e4 }
     ).trim();
@@ -11054,6 +11057,13 @@ var init_commitAndPush = __esm({
           if (Array.isArray(replay.changedFiles)) ctx.data.changedFiles = replay.changedFiles;
           if (typeof replay.hasCommitsAhead === "boolean") ctx.data.hasCommitsAhead = replay.hasCommitsAhead;
           if (replay.salvagedFromMissingMarker) ctx.data.salvagedFromMissingMarker = true;
+          if (typeof replay.commitCrash === "string") {
+            ctx.data.commitCrash = replay.commitCrash;
+            if (typeof replay.exitCode === "number" && (ctx.output.exitCode === void 0 || ctx.output.exitCode === 0)) {
+              ctx.output.exitCode = replay.exitCode;
+            }
+            if (!ctx.output.reason && replay.reason) ctx.output.reason = replay.reason;
+          }
           ctx.data.commitIdempotencyReplay = true;
           process.stderr.write(`[kody commitAndPush] idempotency replay (sentinel ${sentinel})
 `);
@@ -11111,6 +11121,9 @@ var init_commitAndPush = __esm({
                 changedFiles: ctx.data.changedFiles,
                 hasCommitsAhead: ctx.data.hasCommitsAhead,
                 salvagedFromMissingMarker: ctx.data.salvagedFromMissingMarker === true,
+                commitCrash: typeof ctx.data.commitCrash === "string" ? ctx.data.commitCrash : void 0,
+                exitCode: ctx.output.exitCode,
+                reason: ctx.output.reason,
                 writtenAt: (/* @__PURE__ */ new Date()).toISOString()
               },
               null,
@@ -11309,7 +11322,10 @@ var init_composePrompt = __esm({
       "issue.body",
       "issue.commentsFormatted",
       "pr.body",
-      "pr.commentsFormatted"
+      "pr.commentsFormatted",
+      // Prior-art bundles PR diffs and review/issue comments — authorable by any
+      // external GitHub user, so exactly as attacker-controllable as issue bodies.
+      "priorArt"
     ]);
     FENCE_END = "----- END UNTRUSTED INPUT -----";
     composePrompt = async (ctx, profile) => {
@@ -12832,23 +12848,34 @@ function firstLine(s) {
   const head = nl === -1 ? trimmed : trimmed.slice(0, nl);
   return head.length > 200 ? `${head.slice(0, 197)}\u2026` : head;
 }
-function findExistingPr(branch, cwd) {
+function lookupExistingPr(branch, cwd) {
   try {
     const output = gh(
-      ["pr", "list", "--head", branch, "--state", "open", "--json", "number,url,body", "--limit", "1"],
+      ["pr", "list", "--head", branch, "--state", "open", "--json", "number,url,body,title,isDraft", "--limit", "1"],
       { cwd, preferRepoToken: true }
     );
     const arr = JSON.parse(output);
     const first = Array.isArray(arr) ? arr[0] : null;
     if (first && typeof first.number === "number" && typeof first.url === "string") {
-      const body = typeof first.body === "string" ? first.body : "";
-      return { number: first.number, url: first.url, body };
+      return {
+        pr: {
+          number: first.number,
+          url: first.url,
+          body: typeof first.body === "string" ? first.body : "",
+          title: typeof first.title === "string" ? first.title : "",
+          isDraft: first.isDraft === true
+        },
+        error: null
+      };
     }
-    return null;
-  } catch {
-    return null;
+    return { pr: null, error: null };
+  } catch (err) {
+    return { pr: null, error: err instanceof Error ? err.message : String(err) };
   }
 }
+function findExistingPr(branch, cwd) {
+  return lookupExistingPr(branch, cwd).pr;
+}
 function recoverSourceIssueNumber(existingBody, branch, prNumber) {
   const bodyMatch = existingBody.match(/\bCloses #(\d+)\b/i);
   if (bodyMatch) {
@@ -12875,16 +12902,35 @@ function git2(args, cwd) {
     stdio: ["pipe", "pipe", "pipe"]
   }).trim();
 }
-function updateExistingPr(existing, body, draft, cwd) {
+function updateExistingPr(existing, body, draft, cwd, preserveBody) {
   const stripped = existing.url.replace(/^https:\/\/github\.com\//, "");
   const [owner, repo] = stripped.split("/");
-  try {
-    gh(["api", "--method", "PATCH", `repos/${owner}/${repo}/pulls/${existing.number}`, "-f", `body=${body}`], {
-      cwd,
-      preferRepoToken: true
-    });
-  } catch (err) {
-    throw new Error(`gh api PATCH #${existing.number} failed: ${err instanceof Error ? err.message : String(err)}`);
+  if (!preserveBody) {
+    try {
+      gh(["api", "--method", "PATCH", `repos/${owner}/${repo}/pulls/${existing.number}`, "-f", `body=${body}`], {
+        cwd,
+        preferRepoToken: true
+      });
+    } catch (err) {
+      throw new Error(`gh api PATCH #${existing.number} failed: ${err instanceof Error ? err.message : String(err)}`);
+    }
+  }
+  if (existing.isDraft === true && !draft) {
+    try {
+      gh(["pr", "ready", String(existing.number)], { cwd, preferRepoToken: true });
+      const promotedTitle = existing.title?.replace(/^\[WIP\]\s*/, "");
+      if (promotedTitle && promotedTitle !== existing.title) {
+        gh(
+          ["api", "--method", "PATCH", `repos/${owner}/${repo}/pulls/${existing.number}`, "-f", `title=${promotedTitle}`],
+          { cwd, preferRepoToken: true }
+        );
+      }
+    } catch (err) {
+      process.stderr.write(
+        `[kody ensurePr] draft\u2192ready promotion of #${existing.number} failed (non-fatal): ${err instanceof Error ? err.message : String(err)}
+`
+      );
+    }
   }
   return { url: existing.url, number: existing.number, draft, action: "updated" };
 }
@@ -12897,8 +12943,13 @@ function createPr(branch, base, title, body, draft, cwd) {
   return { url, number, draft, action: "created" };
 }
 function recoverFromExistingPr(branch, base, title, body, draft, cwd) {
-  const raced = findExistingPr(branch, cwd);
+  const { pr: raced, error: lookupError } = lookupExistingPr(branch, cwd);
   if (raced) return updateExistingPr(raced, body, draft, cwd);
+  if (lookupError) {
+    throw new Error(
+      `refusing phantom-PR recovery for '${branch}': PR lookup failed (${lookupError}) \u2014 a live PR may own this branch`
+    );
+  }
   try {
     git2(["push", "origin", "--delete", branch], cwd);
   } catch {
@@ -12916,7 +12967,7 @@ function ensurePr(opts) {
   const title = buildPrTitle(effectiveOpts.issueNumber, effectiveOpts.issueTitle, effectiveOpts.draft);
   const body = buildPrBody(effectiveOpts);
   if (existing) {
-    return updateExistingPr(existing, body, opts.draft, opts.cwd);
+    return updateExistingPr(existing, body, opts.draft, opts.cwd, opts.preserveBodyOnUpdate === true);
   }
   const base = opts.baseBranch && opts.baseBranch.length > 0 ? opts.baseBranch : opts.defaultBranch;
   try {
@@ -13032,6 +13083,9 @@ var init_ensurePr = __esm({
           changedFiles,
           agentSummary: ctx.data.prSummary,
           baseBranch,
+          // No fresh commit this run → don't rebuild the body of an existing PR;
+          // it would replace the original agent summary with the empty fallback.
+          preserveBodyOnUpdate: !commitResult?.committed,
           cwd: ctx.cwd
         });
         if (!result.url || result.url.trim().length === 0) {
@@ -18369,7 +18423,9 @@ function validateModelBundle(bundle, expectedKind) {
 function readExpectedModelKind(args) {
   const value = args?.modelKind;
   if (typeof value === "string" && isModelKind(value)) return value;
-  throw new Error("validateAgencyModelProposal: with.modelKind must be agent, capability, goal, agentLoop, or workflow");
+  throw new Error(
+    "validateAgencyModelProposal: with.modelKind must be intent, operation, agent, capability, goal, agentLoop, or workflow"
+  );
 }
 function validateOneModel(rawModel, files, label, strictSingleModel, failures, expectedKind) {
   if (!rawModel || typeof rawModel !== "object" || Array.isArray(rawModel)) {
@@ -18378,7 +18434,9 @@ function validateOneModel(rawModel, files, label, strictSingleModel, failures, e
   }
   const model = rawModel;
   const kind = stringField6(model.kind);
-  if (!isModelKind(kind)) failures.push(`${label}.kind must be agent, capability, goal, agentLoop, or workflow`);
+  if (!isModelKind(kind)) {
+    failures.push(`${label}.kind must be intent, operation, agent, capability, goal, agentLoop, or workflow`);
+  }
   if (expectedKind && kind !== expectedKind) failures.push(`proposal must output model.kind ${expectedKind}`);
   const slug = stringField6(model.slug);
   if (!isSlug(slug)) failures.push(`${label}.slug must be a lowercase slug`);
@@ -18396,6 +18454,14 @@ function validateFilesForKind(kind, slug, files, strictSingleModel, failures) {
   if (paths.some((filePath) => filePath === "implementations" || filePath.startsWith("implementations/"))) {
     failures.push("files must not use obsolete implementation storage");
   }
+  if (kind === "intent") {
+    requirePath(paths, `intents/${slug}/intent.json`, "intent state", failures);
+    if (strictSingleModel) rejectOtherRoots(paths, [`intents/${slug}/`], "intent", failures);
+  }
+  if (kind === "operation") {
+    requirePath(paths, `operations/${slug}/operation.json`, "operation contract", failures);
+    if (strictSingleModel) rejectOtherRoots(paths, [`operations/${slug}/`], "operation", failures);
+  }
   if (kind === "agent") {
     requirePath(paths, `agents/${slug}.md`, "agent file", failures);
     if (strictSingleModel) rejectOtherRoots(paths, ["agents/"], "agent", failures);
@@ -18444,6 +18510,44 @@ function validateFilesForKind(kind, slug, files, strictSingleModel, failures) {
   }
 }
 function validateModelShape(kind, model, files, slug, failures) {
+  if (kind === "intent") {
+    const intent = parseJsonFile(files, `intents/${slug}/intent.json`, failures);
+    if (!stringField6(model.direction)) failures.push("intent model must declare direction");
+    if (!stringField6(intent?.for)) failures.push("intent file must declare direction");
+    if (!isFiniteNumber(model.priority)) failures.push("intent model must declare numeric priority");
+    if (!isFiniteNumber(intent?.priority)) failures.push("intent file must declare numeric priority");
+    if (!hasScope(model.scope)) failures.push("intent model scope must include a repo or area");
+    if (!hasScope(intent?.scope)) failures.push("intent file scope must include a repo or area");
+    if (stringArray4(model.principles).length === 0) failures.push("intent model principles must be non-empty");
+    if (stringArray4(intent?.principles).length === 0) failures.push("intent file principles must be non-empty");
+    if (stringArray4(model.successMeasures).length === 0) {
+      failures.push("intent model successMeasures must be non-empty");
+    }
+    if (stringArray4(intent?.metrics).length === 0) failures.push("intent file metrics must be non-empty");
+    if (!recordField7(model.policy)) failures.push("intent model must declare policy");
+    if (!recordField7(intent?.policy)) failures.push("intent file must declare policy");
+    if (stringField6(model.status) !== "paused" || stringField6(intent?.status) !== "paused") {
+      failures.push("intent proposal status must be paused");
+    }
+    if (intent?.version !== 1) failures.push("intent file version must be 1");
+    if (intent && stringField6(intent.id) !== slug) failures.push("intent id must match model.slug");
+    requireStringArrayIncludes(model.doesNotOwn, "operations", "intent doesNotOwn", failures);
+    requireStringArrayIncludes(model.doesNotOwn, "capability implementation", "intent doesNotOwn", failures);
+  }
+  if (kind === "operation") {
+    const operation = parseJsonFile(files, `operations/${slug}/operation.json`, failures);
+    if (!stringField6(model.responsibility)) failures.push("operation model must declare responsibility");
+    if (!stringField6(operation?.responsibility)) failures.push("operation file must declare responsibility");
+    if (stringArray4(model.intentIds).length === 0) failures.push("operation model intentIds must be non-empty");
+    if (stringArray4(operation?.intentIds).length === 0) failures.push("operation file intentIds must be non-empty");
+    if (stringArray4(model.doesNotOwn).length === 0) failures.push("operation model doesNotOwn must be non-empty");
+    if (stringArray4(operation?.doesNotOwn).length === 0) failures.push("operation file doesNotOwn must be non-empty");
+    if (stringField6(model.status) !== "proposed" || stringField6(operation?.status) !== "proposed") {
+      failures.push("operation proposal status must be proposed");
+    }
+    if (operation?.version !== 1) failures.push("operation file version must be 1");
+    if (operation && stringField6(operation.id) !== slug) failures.push("operation id must match model.slug");
+  }
   if (kind === "agent") {
     const agentFile = textFile(files, `agents/${slug}.md`);
     if (!stringArray4(model.owns).includes("identity") && !containsWord(agentFile, "identity")) {
@@ -18565,6 +18669,16 @@ function stringArray4(value) {
   if (!Array.isArray(value)) return [];
   return value.filter((item) => typeof item === "string").map((item) => item.trim()).filter(Boolean);
 }
+function recordField7(value) {
+  return value && typeof value === "object" && !Array.isArray(value) ? value : null;
+}
+function isFiniteNumber(value) {
+  return typeof value === "number" && Number.isFinite(value);
+}
+function hasScope(value) {
+  const scope = recordField7(value);
+  return stringArray4(scope?.repos).length > 0 || stringArray4(scope?.areas).length > 0;
+}
 function requireStringArrayIncludes(value, expected, label, failures) {
   if (!stringArray4(value).includes(expected)) failures.push(`${label} must include ${expected}`);
 }
@@ -18572,7 +18686,7 @@ function isSlug(value) {
   return /^[a-z][a-z0-9-]{0,63}$/.test(value);
 }
 function isModelKind(value) {
-  return value === "agent" || value === "capability" || value === "goal" || value === "agentLoop" || value === "workflow";
+  return value === "intent" || value === "operation" || value === "agent" || value === "capability" || value === "goal" || value === "agentLoop" || value === "workflow";
 }
 var REQUIRED_DOCS, validateAgencyModelProposal;
 var init_validateAgencyModelProposal = __esm({
@@ -18580,6 +18694,8 @@ var init_validateAgencyModelProposal = __esm({
     "use strict";
     init_openAgencyModelReviewPr();
     REQUIRED_DOCS = {
+      intent: ["docs/intents.md", "docs/engine-company.md"],
+      operation: ["docs/operations.md", "docs/engine-company.md"],
       agent: ["docs/agents.md"],
       capability: ["docs/capabilities.md", "docs/capability-kind-map.md", "docs/capability-implementations.md"],
       goal: ["docs/goals.md", "docs/jobs-model.md", "docs/capabilities.md"],
@@ -19678,6 +19794,7 @@ var init_tools = __esm({
 // src/executor.ts
 import { spawn as spawn7 } from "child_process";
 import * as fs46 from "fs";
+import * as os8 from "os";
 import * as path44 from "path";
 function isMutatingPostflight(scriptName) {
   return MUTATING_POSTFLIGHTS.has(scriptName ?? "");
@@ -19972,6 +20089,11 @@ async function runImplementation(profileName, input) {
     });
   };
   ctx.data.__invokeAgent = invokeAgent;
+  const cc = profile.claudeCode;
+  const declaresPluginParts = cc.skills.length > 0 || cc.commands.length > 0 || cc.hooks.length > 0;
+  if (declaresPluginParts && !profile.scripts.preflight.some((e) => e.script === "buildSyntheticPlugin")) {
+    profile.scripts.preflight = [{ script: "buildSyntheticPlugin" }, ...profile.scripts.preflight];
+  }
   try {
     for (const entry of profile.scripts.preflight) {
       const preLabel = entry.script ?? entry.shell ?? "<unknown>";
@@ -20147,6 +20269,9 @@ async function runImplementation(profileName, input) {
       afterNextJob: ctx.output.afterNextJob,
       taskState: ctx.data.taskState
     });
+  } catch (err) {
+    const msg = err instanceof Error ? err.message : String(err);
+    return finishAndEnd({ exitCode: 99, reason: ctx.output.reason ?? msg });
   } finally {
     clearStampedLifecycleLabels(profile, ctx);
     if (taskArtifacts) {
@@ -20463,7 +20588,11 @@ async function runShellEntry(entry, ctx, profile) {
     return;
   }
   const positional = entry.with ? Object.values(entry.with).map((v) => String(v)) : [];
-  const env = { ...process.env, HUSKY: "0", SKIP_HOOKS: "1" };
+  const outputFile = path44.join(
+    os8.tmpdir(),
+    `kody-shell-output-${process.pid}-${Date.now()}-${Math.random().toString(36).slice(2, 8)}`
+  );
+  const env = { ...process.env, HUSKY: "0", SKIP_HOOKS: "1", KODY_OUTPUT: outputFile };
   for (const [k, v] of Object.entries(ctx.args)) {
     if (v === void 0 || v === null) continue;
     env[`KODY_ARG_${envKey(k)}`] = String(v);
@@ -20529,7 +20658,25 @@ async function runShellEntry(entry, ctx, profile) {
     ctx.output.reason = `shell '${shellName}' failed to spawn: ${result.spawnErr.message}`;
     return;
   }
-  collectShellSideChannels(ctx, stdout);
+  let sideChannelText = "";
+  try {
+    if (fs46.existsSync(outputFile)) {
+      sideChannelText = fs46.readFileSync(outputFile, "utf-8");
+      fs46.rmSync(outputFile, { force: true });
+    }
+  } catch {
+  }
+  if (sideChannelText.trim().length > 0) {
+    collectShellSideChannels(ctx, sideChannelText);
+  } else {
+    if (SHELL_MARKER_RE.test(stdout)) {
+      process.stderr.write(
+        `[kody] shell '${shellName}': KODY_* markers read from stdout are deprecated \u2014 write them to "$KODY_OUTPUT" instead (stdout markers are forgeable by echoed untrusted text)
+`
+      );
+    }
+    collectShellSideChannels(ctx, stdout);
+  }
   if (timedOut) {
     ctx.skipAgent = true;
     const seconds = Math.round(timeoutMs / 1e3);
@@ -20571,7 +20718,7 @@ function flattenConfig(obj, prefix = "") {
   }
   return out;
 }
-var MUTATING_POSTFLIGHTS, MAX_CHAIN_HOPS, DEFAULT_SHELL_TIMEOUT_MS, SIGKILL_GRACE_MS;
+var MUTATING_POSTFLIGHTS, SHELL_MARKER_RE, MAX_CHAIN_HOPS, DEFAULT_SHELL_TIMEOUT_MS, SIGKILL_GRACE_MS;
 var init_executor = __esm({
   "src/executor.ts"() {
     "use strict";
@@ -20602,6 +20749,7 @@ var init_executor = __esm({
       "publishReport",
       "openAgencyModelReviewPr"
     ]);
+    SHELL_MARKER_RE = /^KODY_(SKIP_AGENT|PR_URL|REASON|CAPABILITY_REPORT|CAPABILITY_RESULT)=/m;
     MAX_CHAIN_HOPS = 60;
     DEFAULT_SHELL_TIMEOUT_MS = 3e5;
     SIGKILL_GRACE_MS = 5e3;
@@ -22116,7 +22264,7 @@ function autoDispatch(opts) {
   if (!hasKodyMention(rawBody)) return null;
   const isBotAuthor = authorLogin === "kody-bot" || authorType === "Bot";
   if (!associationAllowed(event, opts?.config)) return null;
-  const body = rawBody.toLowerCase();
+  const body = rawBody;
   const targetNum = Number(issue?.number ?? 0);
   const isPr = !!issue?.pull_request;
   if (!targetNum) return null;
@@ -22215,7 +22363,7 @@ function autoDispatchTyped(opts) {
   if (!targetNum) {
     return { kind: "silent", reason: "comment has no associated issue/PR number" };
   }
-  const afterTag = extractAfterTag(rawBody.toLowerCase());
+  const afterTag = extractAfterTag(rawBody);
   const tokenRaw = extractSubcommand(afterTag) ?? "";
   if ((authorLogin === "kody-bot" || authorType === "Bot") && tokenRaw && !POLITE_WORDS.has(tokenRaw)) {
     return {
@@ -22315,12 +22463,12 @@ function hasKodyMention(body) {
 function extractAfterTag(body) {
   const m = body.match(KODY_MENTION_RE);
   if (!m || m.index === void 0) return "";
-  const at = body.indexOf("@kody", m.index);
+  const at = body.toLowerCase().indexOf("@kody", m.index);
   return body.slice(at + "@kody".length).trim();
 }
 function extractSubcommand(afterTag) {
-  const match = afterTag.match(/^([a-z][a-z0-9-]{1,40})\b/);
-  return match ? match[1] : null;
+  const match = afterTag.match(/^([a-zA-Z][a-zA-Z0-9-]{1,40})\b/);
+  return match ? match[1].toLowerCase() : null;
 }
 function extractCommentRest(afterTag, consumedToken) {
   let rest = afterTag;
@@ -22339,7 +22487,7 @@ function parseCommentArgs(rest, inputs) {
     const t = tokens[i];
     if (t.startsWith("--")) {
       const eq = t.indexOf("=");
-      const key = eq >= 0 ? t.slice(2, eq) : t.slice(2);
+      const key = (eq >= 0 ? t.slice(2, eq) : t.slice(2)).toLowerCase();
       const inlineValue = eq >= 0 ? t.slice(eq + 1) : void 0;
       const spec = findInputByFlag(inputs, key);
       if (!spec) {
@@ -22359,9 +22507,12 @@ function parseCommentArgs(rest, inputs) {
       if (inlineValue === void 0) i++;
       continue;
     }
-    const enumHit = inputs.find((s) => s.type === "enum" && s.values?.includes(t) && args[s.name] === void 0);
+    const tLower = t.toLowerCase();
+    const enumHit = inputs.find(
+      (s) => s.type === "enum" && s.values?.some((v) => v.toLowerCase() === tLower) && args[s.name] === void 0
+    );
     if (enumHit) {
-      args[enumHit.name] = t;
+      args[enumHit.name] = enumHit.values.find((v) => v.toLowerCase() === tLower);
       continue;
     }
     if (/^-?\d+$/.test(t)) {
@@ -22371,7 +22522,7 @@ function parseCommentArgs(rest, inputs) {
         continue;
       }
     }
-    const boolHit = inputs.find((s) => s.type === "bool" && s.flag === `--${t}` && args[s.name] === void 0);
+    const boolHit = inputs.find((s) => s.type === "bool" && s.flag === `--${tLower}` && args[s.name] === void 0);
     if (boolHit) {
       args[boolHit.name] = true;
       continue;

package/dist/implementations/types.ts

@@ -364,9 +364,12 @@ export interface ScriptEntry {
    * Filename of a shell script colocated with the implementation
    * (e.g. "apply-prefer.sh"). Resolved relative to the profile's
    * directory. Invoked via `bash <path> <with-args>` with ctx.args
-   * exposed as env vars (KODY_ARG_<UPPER_NAME>=<value>). A stdout
-   * line `KODY_SKIP_AGENT=true` signals the executor to bypass the
-   * agent. Non-zero exit is treated as a preflight failure.
+   * exposed as env vars (KODY_ARG_<UPPER_NAME>=<value>). Side-channel
+   * markers (KODY_SKIP_AGENT=true, KODY_PR_URL=, KODY_REASON=,
+   * KODY_CAPABILITY_RESULT=, KODY_CAPABILITY_REPORT=) are read from the
+   * file named by $KODY_OUTPUT (preferred — not forgeable by echoed
+   * untrusted text); plain-stdout markers remain a deprecated fallback.
+   * Non-zero exit is treated as a preflight failure.
    */
   shell?: string
   /**

package/dist/plugins/hooks/block-git.json

@@ -7,7 +7,7 @@
         "hooks": [
           {
             "type": "command",
-            "command": "node -e 'let s=\"\";process.stdin.on(\"data\",c=>s+=c).on(\"end\",()=>{try{const d=JSON.parse(s);const cmd=(d.tool_input&&d.tool_input.command)||\"\";if(cmd.split(/[;&|\\n]+/).some(p=>/^(git|gh)(\\s|$)/.test(p.trim()))){process.stderr.write(\"kody blocks git/gh — the wrapper handles VCS; do not run git or gh commands\\n\");process.exit(2)}}catch{}})'"
+            "command": "node -e 'let s=\"\";process.stdin.on(\"data\",c=>s+=c).on(\"end\",()=>{try{const d=JSON.parse(s);const cmd=(d.tool_input&&d.tool_input.command)||\"\";const vcs=t=>/^(?:\\S*\\/)?(git|gh)$/.test(t);const wrap=new Set([\"command\",\"exec\",\"xargs\",\"env\",\"nohup\",\"time\",\"nice\",\"sudo\",\"doas\"]);const seg=cmd.split(/[;&|\\n]+/).some(p=>{const t=p.trim().split(/\\s+/).filter(Boolean);let i=0;while(i<t.length&&(wrap.has(t[i])||/^[A-Za-z_][A-Za-z0-9_]*=/.test(t[i])))i++;return t[i]!==undefined&&vcs(t[i])});const shc=/\\b(?:ba|z|da|k)?sh\\s+[^;|&]*-c\\s*[\"\\x27`]+\\s*(?:\\S*\\/)?(?:git|gh)\\b/.test(cmd);const sub=/[$`]\\(?\\s*(?:\\S*\\/)?(?:git|gh)\\s/.test(cmd);if(seg||shc||sub){process.stderr.write(\"kody blocks git/gh — the wrapper handles VCS; do not run git or gh commands (any invocation form)\\n\");process.exit(2)}}catch{}})'"
           }
         ]
       }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kody-ade/kody-engine",
-  "version": "0.4.372",
+  "version": "0.4.373",
   "description": "kody — autonomous development engine. Single-session Claude Code agent behind a generic executor + declarative implementation profiles.",
   "license": "MIT",
   "type": "module",