@kody-ade/kody-engine 0.4.645 → 0.4.647

package/dist/bin/kody.js

@@ -15,7 +15,7 @@ var init_package = __esm({
   "package.json"() {
     package_default = {
       name: "@kody-ade/kody-engine",
-      version: "0.4.645",
+      version: "0.4.647",
       description: "kody \u2014 autonomous development engine. Single-session Claude Code agent behind a generic executor + declarative implementation profiles.",
       license: "MIT",
       repository: {
@@ -4606,6 +4606,8 @@ async function runAgent(opts) {
   let tokens = { input: 0, output: 0, cacheRead: 0, cacheCreate: 0 };
   let costUsd = 0;
   let messageCount = 0;
+  let turns = 0;
+  let modelUsage = {};
   let finalText = "";
   let getSubmitted;
   const invokedSubagents = /* @__PURE__ */ new Set();
@@ -4632,6 +4634,8 @@ async function runAgent(opts) {
     tokens = { input: 0, output: 0, cacheRead: 0, cacheCreate: 0 };
     costUsd = 0;
     messageCount = 0;
+    turns = 0;
+    modelUsage = {};
     let sawMutatingTool = false;
     let sawTerminalSuccess = false;
     let sawLoginRequired = false;
@@ -4940,6 +4944,9 @@ async function runAgent(opts) {
             }
           }
         }
+        if (m.type === "result") {
+          tokens = { input: 0, output: 0, cacheRead: 0, cacheCreate: 0 };
+        }
         const usage = m.usage;
         if (usage && typeof usage === "object") {
           const i = Number(usage.input_tokens ?? 0);
@@ -4966,6 +4973,12 @@ async function runAgent(opts) {
         if (m.type === "result") {
           const reportedCost = Number(m.total_cost_usd ?? 0);
           if (Number.isFinite(reportedCost) && reportedCost >= 0) costUsd = reportedCost;
+          const reportedTurns = Number(m.num_turns ?? 0);
+          if (Number.isFinite(reportedTurns) && reportedTurns >= 0) turns = reportedTurns;
+          const reportedModelUsage = m.modelUsage;
+          if (reportedModelUsage && typeof reportedModelUsage === "object" && !Array.isArray(reportedModelUsage)) {
+            modelUsage = structuredClone(reportedModelUsage);
+          }
           if (m.subtype === "success") {
             outcome = "completed";
             outcomeKind = "ok";
@@ -5051,6 +5064,8 @@ async function runAgent(opts) {
     tokens,
     costUsd,
     messageCount,
+    turns,
+    modelUsage,
     invokedSubagents: [...invokedSubagents]
   };
 }
@@ -7360,17 +7375,155 @@ var init_state = __esm({
   }
 });
 
-// src/prompt.ts
+// src/usage.ts
 import * as fs25 from "fs";
+function safeNumber(value) {
+  return typeof value === "number" && Number.isFinite(value) && value >= 0 ? value : 0;
+}
+function tokenBreakdown(tokens) {
+  const input = safeNumber(tokens?.input);
+  const output = safeNumber(tokens?.output);
+  const cacheRead = safeNumber(tokens?.cacheRead);
+  const cacheCreate = safeNumber(tokens?.cacheCreate);
+  return { input, output, cacheRead, cacheCreate, total: input + output + cacheRead + cacheCreate };
+}
+function addTokenBreakdown(left, right) {
+  const input = left.input + right.input;
+  const output = left.output + right.output;
+  const cacheRead = left.cacheRead + right.cacheRead;
+  const cacheCreate = left.cacheCreate + right.cacheCreate;
+  return { input, output, cacheRead, cacheCreate, total: input + output + cacheRead + cacheCreate };
+}
+function createRunUsage(tokens, costUsd, details = {}) {
+  if (!tokens && costUsd === void 0 && details.turns === void 0) return void 0;
+  const normalizedTokens = tokenBreakdown(tokens);
+  const modelUsage = {
+    tokens: normalizedTokens,
+    costUsd: safeNumber(costUsd),
+    agentRuns: 1,
+    turns: safeNumber(details.turns)
+  };
+  const reportedModels = Object.entries(details.modelUsage ?? {});
+  const byModel = reportedModels.length > 0 ? Object.fromEntries(
+    reportedModels.map(([model, usage]) => {
+      const modelTokens = tokenBreakdown({
+        input: usage.inputTokens,
+        output: usage.outputTokens,
+        cacheRead: usage.cacheReadInputTokens,
+        cacheCreate: usage.cacheCreationInputTokens
+      });
+      return [
+        model,
+        {
+          tokens: modelTokens,
+          costUsd: safeNumber(usage.costUSD),
+          agentRuns: 1,
+          turns: reportedModels.length === 1 ? safeNumber(details.turns) : 0
+        }
+      ];
+    })
+  ) : details.model ? { [details.model]: modelUsage } : {};
+  return {
+    version: 1,
+    ...modelUsage,
+    byModel
+  };
+}
+function isModelRunUsage(value) {
+  if (!value || typeof value !== "object" || Array.isArray(value)) return false;
+  const usage = value;
+  if (!usage.tokens || typeof usage.tokens !== "object" || Array.isArray(usage.tokens)) return false;
+  return [
+    usage.tokens.input,
+    usage.tokens.output,
+    usage.tokens.cacheRead,
+    usage.tokens.cacheCreate,
+    usage.tokens.total,
+    usage.costUsd,
+    usage.agentRuns,
+    usage.turns
+  ].every((number) => typeof number === "number" && Number.isFinite(number) && number >= 0);
+}
+function parseRunUsage(value) {
+  if (!value || typeof value !== "object" || Array.isArray(value)) return void 0;
+  const usage = value;
+  if (usage.version !== 1 || !isModelRunUsage(usage)) return void 0;
+  if (!usage.byModel || typeof usage.byModel !== "object" || Array.isArray(usage.byModel)) return void 0;
+  if (!Object.values(usage.byModel).every(isModelRunUsage)) return void 0;
+  return structuredClone(usage);
+}
+function mergeRunUsage(left, right) {
+  if (!left) return right ? structuredClone(right) : void 0;
+  if (!right) return structuredClone(left);
+  const byModel = {};
+  for (const model of /* @__PURE__ */ new Set([...Object.keys(left.byModel), ...Object.keys(right.byModel)])) {
+    const first = left.byModel[model];
+    const second = right.byModel[model];
+    if (!first) {
+      byModel[model] = structuredClone(second);
+    } else if (!second) {
+      byModel[model] = structuredClone(first);
+    } else {
+      byModel[model] = {
+        tokens: addTokenBreakdown(first.tokens, second.tokens),
+        costUsd: first.costUsd + second.costUsd,
+        agentRuns: first.agentRuns + second.agentRuns,
+        turns: first.turns + second.turns
+      };
+    }
+  }
+  return {
+    version: 1,
+    tokens: addTokenBreakdown(left.tokens, right.tokens),
+    costUsd: left.costUsd + right.costUsd,
+    agentRuns: left.agentRuns + right.agentRuns,
+    turns: left.turns + right.turns,
+    byModel
+  };
+}
+function formatRunUsageMarker(subject, usage) {
+  return `KODY_USAGE=${JSON.stringify({ subject, ...usage })}`;
+}
+function appendRunUsageSummary(summaryPath, subject, usage) {
+  if (!summaryPath) return;
+  const tokens = usage.tokens;
+  const lines = [
+    `### Kody usage - ${subject}`,
+    "",
+    `- **Tokens:** ${tokens.input.toLocaleString()} input / ${tokens.cacheRead.toLocaleString()} cache-read / ${tokens.cacheCreate.toLocaleString()} cache-create / ${tokens.output.toLocaleString()} output / ${tokens.total.toLocaleString()} total`,
+    `- **Agent work:** ${usage.agentRuns.toLocaleString()} runs / ${usage.turns.toLocaleString()} turns`,
+    `- **Provider-reported cost:** $${usage.costUsd.toFixed(4)}`,
+    ""
+  ];
+  try {
+    fs25.appendFileSync(summaryPath, `${lines.join("\n")}
+`);
+  } catch {
+  }
+}
+function publishRunUsage(subject, usage) {
+  if (!usage) return;
+  process.stdout.write(`${formatRunUsageMarker(subject, usage)}
+`);
+  appendRunUsageSummary(process.env.GITHUB_STEP_SUMMARY, subject, usage);
+}
+var init_usage = __esm({
+  "src/usage.ts"() {
+    "use strict";
+  }
+});
+
+// src/prompt.ts
+import * as fs26 from "fs";
 import * as path25 from "path";
 function loadProjectConventions(projectDir) {
   const out = [];
   for (const rel of CONVENTION_FILES) {
     const abs = path25.join(projectDir, rel);
-    if (!fs25.existsSync(abs)) continue;
+    if (!fs26.existsSync(abs)) continue;
     let content;
     try {
-      content = fs25.readFileSync(abs, "utf-8");
+      content = fs26.readFileSync(abs, "utf-8");
     } catch {
       continue;
     }
@@ -7621,7 +7774,7 @@ var loadMemoryContext_exports = {};
 __export(loadMemoryContext_exports, {
   loadMemoryContext: () => loadMemoryContext
 });
-import * as fs26 from "fs";
+import * as fs27 from "fs";
 import * as path26 from "path";
 function formatBlockFromBackend(docs) {
   const pages = docs.flatMap((record2) => {
@@ -7645,13 +7798,13 @@ function collectPages(memoryAbs) {
   walkMd(memoryAbs, (file) => {
     let stat;
     try {
-      stat = fs26.statSync(file);
+      stat = fs27.statSync(file);
     } catch {
       return;
     }
     let raw;
     try {
-      raw = fs26.readFileSync(file, "utf-8");
+      raw = fs27.readFileSync(file, "utf-8");
     } catch {
       return;
     }
@@ -7727,7 +7880,7 @@ function walkMd(root, visit) {
     const dir = stack.pop();
     let names;
     try {
-      names = fs26.readdirSync(dir);
+      names = fs27.readdirSync(dir);
     } catch {
       continue;
     }
@@ -7736,7 +7889,7 @@ function walkMd(root, visit) {
       const full = path26.join(dir, name);
       let stat;
       try {
-        stat = fs26.statSync(full);
+        stat = fs27.statSync(full);
       } catch {
         continue;
       }
@@ -7772,7 +7925,7 @@ var init_loadMemoryContext = __esm({
         return;
       }
       const memoryAbs = path26.join(ctx.cwd, MEMORY_DIR_RELATIVE);
-      if (!fs26.existsSync(memoryAbs)) {
+      if (!fs27.existsSync(memoryAbs)) {
         ctx.data.memoryContext = "";
         return;
       }
@@ -7816,11 +7969,11 @@ var init_loadCoverageRules = __esm({
 
 // src/container.ts
 import { execFileSync as execFileSync3 } from "child_process";
-import * as fs27 from "fs";
+import * as fs28 from "fs";
 function getProfileInputsForChild(profileName, _cwd) {
   try {
     const profilePath = resolveProfilePath(profileName);
-    if (!fs27.existsSync(profilePath)) return null;
+    if (!fs28.existsSync(profilePath)) return null;
     return loadProfile(profilePath).inputs;
   } catch {
     return null;
@@ -7952,6 +8105,7 @@ async function runContainerLoop(profile, ctx, input) {
           // is off, so children fall back to their own loaders.
           preloadedData: preloadedSnapshot
         });
+        ctx.output.usage = mergeRunUsage(ctx.output.usage, childOut.usage);
         emitEvent(input.cwd, {
           implementation: profile.name,
           kind: "container_child",
@@ -8103,6 +8257,7 @@ var init_container = __esm({
     init_executor();
     init_profile();
     init_state();
+    init_usage();
     CONTAINER_MAX_ITERATIONS = 50;
   }
 });
@@ -8284,7 +8439,7 @@ var init_lifecycleLabels = __esm({
 
 // src/litellm.ts
 import { execFileSync as execFileSync4, spawn as spawn4 } from "child_process";
-import * as fs28 from "fs";
+import * as fs29 from "fs";
 import * as net from "net";
 import * as os4 from "os";
 import * as path27 from "path";
@@ -8396,7 +8551,7 @@ function locateLitellmScript() {
 }
 function resolveLitellmCommand() {
   const imageScript = "/opt/venv/bin/litellm";
-  if (fs28.existsSync(imageScript)) return imageScript;
+  if (fs29.existsSync(imageScript)) return imageScript;
   try {
     execFileSync4("which", ["litellm"], { timeout: 3e3, stdio: "pipe" });
     return "litellm";
@@ -8460,12 +8615,12 @@ async function startLitellmProxy(input) {
     const portMatch = activeUrl.match(/:(\d+)/);
     const port = portMatch ? portMatch[1] : "4000";
     const configPath = path27.join(os4.tmpdir(), `kody-local-litellm-${Date.now()}.yaml`);
-    fs28.writeFileSync(configPath, input.configYaml);
+    fs29.writeFileSync(configPath, input.configYaml);
     const args = ["--config", configPath, "--port", port];
     const nextLogPath = path27.join(os4.tmpdir(), `kody-local-litellm-${Date.now()}.log`);
-    const outFd = fs28.openSync(nextLogPath, "w");
+    const outFd = fs29.openSync(nextLogPath, "w");
     child = spawn4(cmd, args, { stdio: ["ignore", outFd, outFd], detached: true, env: childEnv });
-    fs28.closeSync(outFd);
+    fs29.closeSync(outFd);
     logPath = nextLogPath;
   };
   const waitForHealth = async () => {
@@ -8479,7 +8634,7 @@ async function startLitellmProxy(input) {
   const readLogTail = () => {
     if (!logPath) return "";
     try {
-      return fs28.readFileSync(logPath, "utf-8").slice(-2e3);
+      return fs29.readFileSync(logPath, "utf-8").slice(-2e3);
     } catch {
       return "";
     }
@@ -8563,9 +8718,9 @@ function canListen(port, host) {
 }
 function readDotenvApiKeys(projectDir) {
   const dotenvPath = path27.join(projectDir, ".env");
-  if (!fs28.existsSync(dotenvPath)) return {};
+  if (!fs29.existsSync(dotenvPath)) return {};
   const result = {};
-  for (const rawLine of fs28.readFileSync(dotenvPath, "utf-8").split("\n")) {
+  for (const rawLine of fs29.readFileSync(dotenvPath, "utf-8").split("\n")) {
     const line = rawLine.trim();
     if (!line || line.startsWith("#")) continue;
     const match = line.match(/^([A-Z_][A-Z0-9_]*_API_KEY)=(.*)$/);
@@ -8647,7 +8802,8 @@ function finalizedRunIndexRow(row, result) {
     status: result.status,
     updatedAt: result.updatedAt,
     summary: result.reason ?? row.summary,
-    ...result.output === void 0 ? {} : { output: result.output }
+    ...result.output === void 0 ? {} : { output: result.output },
+    ...result.usage === void 0 ? {} : { usage: result.usage }
   };
 }
 function runIndexRowFromJobContext(input) {
@@ -8696,7 +8852,8 @@ function runIndexRowFromJobContext(input) {
     reasoningEffort: stringValue(input.data.jobReasoningEffort) ?? void 0,
     target: input.data.jobTarget,
     sourceType: "job",
-    output: input.data.capabilityOutput
+    output: input.data.capabilityOutput,
+    usage: input.usage
   });
 }
 function runIndexRowFromGoalEvents(goalId, logPath, events) {
@@ -9239,7 +9396,7 @@ var init_pushWithRetry = __esm({
 // src/commit.ts
 import { execFileSync as execFileSync6 } from "child_process";
 import { isDeepStrictEqual } from "util";
-import * as fs29 from "fs";
+import * as fs30 from "fs";
 import * as path28 from "path";
 function isGitHubYamlPath(filePath) {
   const normalized = filePath.replace(/^\.\/+/, "");
@@ -9284,17 +9441,17 @@ function ensureGitIdentity(cwd) {
 function abortUnfinishedGitOps(cwd) {
   const aborted = [];
   const gitDir = path28.join(cwd ?? process.cwd(), ".git");
-  if (!fs29.existsSync(gitDir)) return aborted;
-  if (fs29.existsSync(path28.join(gitDir, "MERGE_HEAD"))) {
+  if (!fs30.existsSync(gitDir)) return aborted;
+  if (fs30.existsSync(path28.join(gitDir, "MERGE_HEAD"))) {
     if (tryGit(["merge", "--abort"], cwd)) aborted.push("merge");
   }
-  if (fs29.existsSync(path28.join(gitDir, "CHERRY_PICK_HEAD"))) {
+  if (fs30.existsSync(path28.join(gitDir, "CHERRY_PICK_HEAD"))) {
     if (tryGit(["cherry-pick", "--abort"], cwd)) aborted.push("cherry-pick");
   }
-  if (fs29.existsSync(path28.join(gitDir, "REVERT_HEAD"))) {
+  if (fs30.existsSync(path28.join(gitDir, "REVERT_HEAD"))) {
     if (tryGit(["revert", "--abort"], cwd)) aborted.push("revert");
   }
-  if (fs29.existsSync(path28.join(gitDir, "rebase-merge")) || fs29.existsSync(path28.join(gitDir, "rebase-apply"))) {
+  if (fs30.existsSync(path28.join(gitDir, "rebase-merge")) || fs30.existsSync(path28.join(gitDir, "rebase-apply"))) {
     if (tryGit(["rebase", "--abort"], cwd)) aborted.push("rebase");
   }
   try {
@@ -9377,7 +9534,7 @@ function isTrustedConfigActivationChange(filePath, deliveryPathAllowlist, delive
   if (filePath !== "kody.config.json" || !deliveryPathAllowlist.includes(filePath)) return false;
   try {
     const before = JSON.parse(git(["show", "HEAD:kody.config.json"], cwd));
-    const after = JSON.parse(fs29.readFileSync(path28.join(cwd ?? process.cwd(), filePath), "utf-8"));
+    const after = JSON.parse(fs30.readFileSync(path28.join(cwd ?? process.cwd(), filePath), "utf-8"));
     return isSafeConfigChange(before, after, deliveryConfigAllowlist[filePath] ?? []);
   } catch {
     return false;
@@ -9440,7 +9597,7 @@ function commitAndPush(branch, agentMessage, cwd, deliveryPathAllowlist = [], de
     (f) => isForbiddenPath(f, deliveryPathAllowlist) && !isTrustedConfigActivationChange(f, deliveryPathAllowlist, deliveryConfigAllowlist, cwd)
   );
   const omittedFiles = forbiddenFiles.filter(isReportableDeliveryOmission);
-  const mergeHeadExists = fs29.existsSync(path28.join(cwd ?? process.cwd(), ".git", "MERGE_HEAD"));
+  const mergeHeadExists = fs30.existsSync(path28.join(cwd ?? process.cwd(), ".git", "MERGE_HEAD"));
   if (allowedFiles.length === 0 && !mergeHeadExists) {
     return { committed: false, pushed: false, sha: "", message: "", omittedFiles };
   }
@@ -10096,7 +10253,7 @@ var init_state2 = __esm({
 });
 
 // src/goal/runLog.ts
-import * as fs30 from "fs";
+import * as fs31 from "fs";
 function stageGoalRunLogEvent(data, goalId, event, at = nowIso()) {
   const logs = goalRunLogs(data);
   const existing = logs[goalId];
@@ -10438,8 +10595,8 @@ function readGithubEvent() {
   const eventPath = process.env.GITHUB_EVENT_PATH;
   if (!eventPath) return null;
   try {
-    if (!fs30.existsSync(eventPath)) return null;
-    const parsed = JSON.parse(fs30.readFileSync(eventPath, "utf-8"));
+    if (!fs31.existsSync(eventPath)) return null;
+    const parsed = JSON.parse(fs31.readFileSync(eventPath, "utf-8"));
     return recordValue3(parsed);
   } catch {
     return null;
@@ -10549,7 +10706,7 @@ var init_stateStore = __esm({
 });
 
 // src/goal/targetLoopResolution.ts
-import * as fs31 from "fs";
+import * as fs32 from "fs";
 import * as path29 from "path";
 async function resolveActiveGoalLoopTarget(config, cwd, loopGoalId, loopGoal) {
   const targetId = loopGoal.loopTarget?.id.trim() ?? "";
@@ -10631,8 +10788,8 @@ function loadGoalTemplate(cwd, targetId) {
   return readJsonObject2(path29.join(cwd, ".kody-engine", "definitions", "goals", targetId, "state.json"));
 }
 function readJsonObject2(filePath) {
-  if (!fs31.existsSync(filePath)) return null;
-  const parsed = JSON.parse(fs31.readFileSync(filePath, "utf8"));
+  if (!fs32.existsSync(filePath)) return null;
+  const parsed = JSON.parse(fs32.readFileSync(filePath, "utf8"));
   if (!parsed || typeof parsed !== "object" || Array.isArray(parsed)) {
     throw new Error(`goal template ${filePath} must be a JSON object`);
   }
@@ -11007,7 +11164,7 @@ var init_backendStateBackend = __esm({
 });
 
 // src/scripts/jobState/localFileBackend.ts
-import * as fs32 from "fs";
+import * as fs33 from "fs";
 import * as path30 from "path";
 function sanitizeKey(s) {
   return s.replace(/[^A-Za-z0-9._-]/g, "-");
@@ -11079,7 +11236,7 @@ var init_localFileBackend = __esm({
 `);
           return;
         }
-        fs32.mkdirSync(this.absDir, { recursive: true });
+        fs33.mkdirSync(this.absDir, { recursive: true });
         const prefix = this.cacheKeyPrefix();
         const probeKey = `${prefix}probe-${Date.now()}`;
         try {
@@ -11108,7 +11265,7 @@ var init_localFileBackend = __esm({
 `);
           return;
         }
-        if (!fs32.existsSync(this.absDir)) {
+        if (!fs33.existsSync(this.absDir)) {
           return;
         }
         const key = `${this.cacheKeyPrefix()}${process.env.GITHUB_RUN_ID ?? "norunid"}-${Date.now()}`;
@@ -11125,10 +11282,10 @@ var init_localFileBackend = __esm({
       load(slug) {
         const relPath = stateFilePath(this.jobsDir, slug);
         const absPath = path30.resolve(this.cwd, relPath);
-        if (!fs32.existsSync(absPath)) {
+        if (!fs33.existsSync(absPath)) {
           return { path: relPath, handle: null, state: initialStateEnvelope("seed"), created: true };
         }
-        const raw = fs32.readFileSync(absPath, "utf-8");
+        const raw = fs33.readFileSync(absPath, "utf-8");
         let parsed;
         try {
           parsed = JSON.parse(raw);
@@ -11146,12 +11303,12 @@ var init_localFileBackend = __esm({
           return false;
         }
         const absPath = path30.resolve(this.cwd, loaded.path);
-        fs32.mkdirSync(path30.dirname(absPath), { recursive: true });
+        fs33.mkdirSync(path30.dirname(absPath), { recursive: true });
         const body = `${JSON.stringify(next, null, 2)}
 `;
         const tmpPath = `${absPath}.${process.pid}.tmp`;
-        fs32.writeFileSync(tmpPath, body, "utf-8");
-        fs32.renameSync(tmpPath, absPath);
+        fs33.writeFileSync(tmpPath, body, "utf-8");
+        fs33.renameSync(tmpPath, absPath);
         return true;
       }
       cacheKeyPrefix() {
@@ -13060,7 +13217,7 @@ var init_classifyByLabel = __esm({
 
 // src/scripts/commitAndPush.ts
 import { createHash as createHash5 } from "crypto";
-import * as fs33 from "fs";
+import * as fs34 from "fs";
 import * as path32 from "path";
 function sentinelPathForStage(cwd, profileName, workflowExecutionKey) {
   const runId = resolveRunId();
@@ -13083,9 +13240,9 @@ var init_commitAndPush = __esm({
       }
       const idempotencyEnabled = process.env.KODY_COMMIT_IDEMPOTENCY !== "0";
       const sentinel = idempotencyEnabled ? sentinelPathForStage(ctx.cwd, profile.name, ctx.data.workflowExecutionKey) : null;
-      if (sentinel && fs33.existsSync(sentinel)) {
+      if (sentinel && fs34.existsSync(sentinel)) {
         try {
-          const replay = JSON.parse(fs33.readFileSync(sentinel, "utf-8"));
+          const replay = JSON.parse(fs34.readFileSync(sentinel, "utf-8"));
           ctx.data.commitResult = replay.commitResult ?? { committed: false, pushed: false };
           if (Array.isArray(replay.changedFiles)) ctx.data.changedFiles = replay.changedFiles;
           if (Array.isArray(replay.deliveryOmissions)) ctx.data.deliveryOmissions = replay.deliveryOmissions;
@@ -13149,8 +13306,8 @@ var init_commitAndPush = __esm({
       const result = ctx.data.commitResult;
       if (sentinel && result?.committed) {
         try {
-          fs33.mkdirSync(path32.dirname(sentinel), { recursive: true });
-          fs33.writeFileSync(
+          fs34.mkdirSync(path32.dirname(sentinel), { recursive: true });
+          fs34.writeFileSync(
             sentinel,
             JSON.stringify(
               {
@@ -13277,7 +13434,7 @@ var init_acceptanceCriteria = __esm({
 });
 
 // src/scripts/composePrompt.ts
-import * as fs34 from "fs";
+import * as fs35 from "fs";
 import * as path33 from "path";
 function fenceUntrusted(value) {
   if (value.trim().length === 0) return value;
@@ -13419,7 +13576,7 @@ var init_composePrompt = __esm({
           break;
         }
         try {
-          template = fs34.readFileSync(c, "utf-8");
+          template = fs35.readFileSync(c, "utf-8");
           templatePath = c;
           break;
         } catch (err) {
@@ -13430,7 +13587,7 @@ var init_composePrompt = __esm({
       if (!templatePath) {
         let dirState;
         try {
-          dirState = `dir contents: [${fs34.readdirSync(profile.dir).join(", ")}]`;
+          dirState = `dir contents: [${fs35.readdirSync(profile.dir).join(", ")}]`;
         } catch (err) {
           dirState = `readdir(${profile.dir}) failed: ${err?.code ?? String(err)}`;
         }
@@ -14168,7 +14325,7 @@ var init_deriveQaScopeFromIssue = __esm({
 
 // src/scripts/diagMcp.ts
 import { execFileSync as execFileSync9 } from "child_process";
-import * as fs35 from "fs";
+import * as fs36 from "fs";
 import * as os5 from "os";
 import * as path34 from "path";
 var diagMcp;
@@ -14180,7 +14337,7 @@ var init_diagMcp = __esm({
       const cacheDir = path34.join(home, ".cache", "ms-playwright");
       let entries = [];
       try {
-        entries = fs35.readdirSync(cacheDir);
+        entries = fs36.readdirSync(cacheDir);
       } catch {
       }
       const hasChromium = entries.some((e) => e.startsWith("chromium"));
@@ -14208,13 +14365,13 @@ var init_diagMcp = __esm({
 });
 
 // src/scripts/frameworkDetectors.ts
-import * as fs36 from "fs";
+import * as fs37 from "fs";
 import * as path35 from "path";
 function detectFrameworks(cwd) {
   const out = [];
   let deps = {};
   try {
-    const pkg = JSON.parse(fs36.readFileSync(path35.join(cwd, "package.json"), "utf-8"));
+    const pkg = JSON.parse(fs37.readFileSync(path35.join(cwd, "package.json"), "utf-8"));
     deps = { ...pkg.dependencies, ...pkg.devDependencies };
   } catch {
     return out;
@@ -14251,7 +14408,7 @@ function detectFrameworks(cwd) {
 }
 function findFile(cwd, candidates) {
   for (const c of candidates) {
-    if (fs36.existsSync(path35.join(cwd, c))) return c;
+    if (fs37.existsSync(path35.join(cwd, c))) return c;
   }
   return null;
 }
@@ -14259,17 +14416,17 @@ function discoverPayloadCollections(cwd) {
   const out = [];
   for (const dir of COLLECTION_DIRS) {
     const full = path35.join(cwd, dir);
-    if (!fs36.existsSync(full)) continue;
+    if (!fs37.existsSync(full)) continue;
     let files;
     try {
-      files = fs36.readdirSync(full).filter((f) => f.endsWith(".ts") || f.endsWith(".tsx"));
+      files = fs37.readdirSync(full).filter((f) => f.endsWith(".ts") || f.endsWith(".tsx"));
     } catch {
       continue;
     }
     for (const file of files) {
       try {
         const filePath = path35.join(full, file);
-        const content = fs36.readFileSync(filePath, "utf-8").slice(0, 1e4);
+        const content = fs37.readFileSync(filePath, "utf-8").slice(0, 1e4);
         const slugMatch = content.match(/slug:\s*['"]([a-z0-9-]+)['"]/);
         if (!slugMatch) continue;
         const slug = slugMatch[1];
@@ -14297,10 +14454,10 @@ function discoverAdminComponents(cwd, collections) {
   const out = [];
   for (const dir of ADMIN_COMPONENT_DIRS) {
     const full = path35.join(cwd, dir);
-    if (!fs36.existsSync(full)) continue;
+    if (!fs37.existsSync(full)) continue;
     let entries;
     try {
-      entries = fs36.readdirSync(full, { withFileTypes: true });
+      entries = fs37.readdirSync(full, { withFileTypes: true });
     } catch {
       continue;
     }
@@ -14310,7 +14467,7 @@ function discoverAdminComponents(cwd, collections) {
       let filePath;
       if (entry.isDirectory()) {
         const indexFile = ["index.tsx", "index.ts", "index.jsx", "index.js"].find(
-          (f) => fs36.existsSync(path35.join(entryPath, f))
+          (f) => fs37.existsSync(path35.join(entryPath, f))
         );
         if (!indexFile) continue;
         name = entry.name;
@@ -14325,7 +14482,7 @@ function discoverAdminComponents(cwd, collections) {
       if (collections) {
         for (const col of collections) {
           try {
-            const colContent = fs36.readFileSync(path35.join(cwd, col.filePath), "utf-8");
+            const colContent = fs37.readFileSync(path35.join(cwd, col.filePath), "utf-8");
             if (colContent.includes(name)) {
               usedInCollection = col.slug;
               break;
@@ -14344,7 +14501,7 @@ function scanApiRoutes(cwd) {
   const appDirs = ["src/app", "app"];
   for (const appDir of appDirs) {
     const apiDir = path35.join(cwd, appDir, "api");
-    if (!fs36.existsSync(apiDir)) continue;
+    if (!fs37.existsSync(apiDir)) continue;
     walkApiRoutes(apiDir, "/api", cwd, out);
     break;
   }
@@ -14353,14 +14510,14 @@ function scanApiRoutes(cwd) {
 function walkApiRoutes(dir, prefix, cwd, out) {
   let entries;
   try {
-    entries = fs36.readdirSync(dir, { withFileTypes: true });
+    entries = fs37.readdirSync(dir, { withFileTypes: true });
   } catch {
     return;
   }
   const routeFile = entries.find((e) => e.isFile() && /^route\.(ts|js|tsx|jsx)$/.test(e.name));
   if (routeFile) {
     try {
-      const content = fs36.readFileSync(path35.join(dir, routeFile.name), "utf-8").slice(0, 5e3);
+      const content = fs37.readFileSync(path35.join(dir, routeFile.name), "utf-8").slice(0, 5e3);
       const methods = HTTP_METHODS.filter(
         (m) => new RegExp(`export\\s+(?:async\\s+)?function\\s+${m}\\b`).test(content)
       );
@@ -14394,9 +14551,9 @@ function scanEnvVars(cwd) {
   const candidates = [".env.example", ".env.local.example", ".env.template"];
   for (const envFile of candidates) {
     const envPath = path35.join(cwd, envFile);
-    if (!fs36.existsSync(envPath)) continue;
+    if (!fs37.existsSync(envPath)) continue;
     try {
-      const content = fs36.readFileSync(envPath, "utf-8");
+      const content = fs37.readFileSync(envPath, "utf-8");
       const vars = [];
       for (const line of content.split("\n")) {
         const trimmed = line.trim();
@@ -14441,7 +14598,7 @@ var init_frameworkDetectors = __esm({
 });
 
 // src/scripts/discoverQaContext.ts
-import * as fs37 from "fs";
+import * as fs38 from "fs";
 import * as path36 from "path";
 function runQaDiscovery(cwd) {
   const out = {
@@ -14473,9 +14630,9 @@ function runQaDiscovery(cwd) {
 }
 function detectDevServer(cwd, out) {
   try {
-    const pkg = JSON.parse(fs37.readFileSync(path36.join(cwd, "package.json"), "utf-8"));
+    const pkg = JSON.parse(fs38.readFileSync(path36.join(cwd, "package.json"), "utf-8"));
     const allDeps = { ...pkg.dependencies, ...pkg.devDependencies };
-    const pm = fs37.existsSync(path36.join(cwd, "pnpm-lock.yaml")) ? "pnpm" : fs37.existsSync(path36.join(cwd, "yarn.lock")) ? "yarn" : fs37.existsSync(path36.join(cwd, "bun.lockb")) ? "bun" : "npm";
+    const pm = fs38.existsSync(path36.join(cwd, "pnpm-lock.yaml")) ? "pnpm" : fs38.existsSync(path36.join(cwd, "yarn.lock")) ? "yarn" : fs38.existsSync(path36.join(cwd, "bun.lockb")) ? "bun" : "npm";
     if (pkg.scripts?.dev) out.devCommand = `${pm} dev`;
     if (allDeps.next || allDeps.nuxt) out.devPort = 3e3;
     else if (allDeps.vite) out.devPort = 5173;
@@ -14486,7 +14643,7 @@ function scanFrontendRoutes(cwd, out) {
   const appDirs = ["src/app", "app"];
   for (const appDir of appDirs) {
     const full = path36.join(cwd, appDir);
-    if (!fs37.existsSync(full)) continue;
+    if (!fs38.existsSync(full)) continue;
     walkFrontendRoutes(full, "", out);
     break;
   }
@@ -14494,7 +14651,7 @@ function scanFrontendRoutes(cwd, out) {
 function walkFrontendRoutes(dir, prefix, out) {
   let entries;
   try {
-    entries = fs37.readdirSync(dir, { withFileTypes: true });
+    entries = fs38.readdirSync(dir, { withFileTypes: true });
   } catch {
     return;
   }
@@ -14536,23 +14693,23 @@ function detectAuthFiles(cwd, out) {
     "src/app/api/oauth"
   ];
   for (const c of candidates) {
-    if (fs37.existsSync(path36.join(cwd, c))) out.authFiles.push(c);
+    if (fs38.existsSync(path36.join(cwd, c))) out.authFiles.push(c);
   }
 }
 function detectRoles(cwd, out) {
   const rolePaths = ["src/types", "src/lib", "src/utils", "src/constants", "src/access", "src/collections"];
   for (const rp of rolePaths) {
     const dir = path36.join(cwd, rp);
-    if (!fs37.existsSync(dir)) continue;
+    if (!fs38.existsSync(dir)) continue;
     let files;
     try {
-      files = fs37.readdirSync(dir).filter((f) => f.endsWith(".ts") || f.endsWith(".tsx"));
+      files = fs38.readdirSync(dir).filter((f) => f.endsWith(".ts") || f.endsWith(".tsx"));
     } catch {
       continue;
     }
     for (const f of files) {
       try {
-        const content = fs37.readFileSync(path36.join(dir, f), "utf-8").slice(0, 5e3);
+        const content = fs38.readFileSync(path36.join(dir, f), "utf-8").slice(0, 5e3);
         const roleMatches = content.match(/(?:role|Role|ROLE)\s*[=:]\s*['"](\w+)['"]/g);
         if (roleMatches) {
           for (const m of roleMatches) {
@@ -14813,7 +14970,7 @@ var init_dispatchClassified = __esm({
 });
 
 // src/loopDefinitions.ts
-import * as fs38 from "fs";
+import * as fs39 from "fs";
 import * as path37 from "path";
 function normalizeLoopDefinition(value) {
   if (!value || typeof value !== "object" || Array.isArray(value)) return null;
@@ -14842,9 +14999,9 @@ function readLoopDefinition(cwd, id) {
   const roots = loopRoots(cwd);
   for (const root of roots) {
     const filePath = path37.join(root, "loops", id, "loop.json");
-    if (!fs38.existsSync(filePath)) continue;
+    if (!fs39.existsSync(filePath)) continue;
     try {
-      const loop = normalizeLoopDefinition(JSON.parse(fs38.readFileSync(filePath, "utf8")));
+      const loop = normalizeLoopDefinition(JSON.parse(fs39.readFileSync(filePath, "utf8")));
       if (loop?.id === id) return loop;
       process.stderr.write(`[kody] invalid Loop definition: ${filePath}
 `);
@@ -14864,13 +15021,13 @@ function listLoopDefinitions(cwd) {
   const byId = /* @__PURE__ */ new Map();
   for (const root of roots.reverse()) {
     const loopsDir = path37.join(root, "loops");
-    if (!fs38.existsSync(loopsDir)) continue;
-    for (const id of fs38.readdirSync(loopsDir).sort()) {
+    if (!fs39.existsSync(loopsDir)) continue;
+    for (const id of fs39.readdirSync(loopsDir).sort()) {
       if (!ID.test(id)) continue;
       const filePath = path37.join(loopsDir, id, "loop.json");
-      if (!fs38.existsSync(filePath)) continue;
+      if (!fs39.existsSync(filePath)) continue;
       try {
-        const loop = normalizeLoopDefinition(JSON.parse(fs38.readFileSync(filePath, "utf8")));
+        const loop = normalizeLoopDefinition(JSON.parse(fs39.readFileSync(filePath, "utf8")));
         if (loop?.id === id) byId.set(id, loop);
       } catch {
         process.stderr.write(`[kody] unreadable Loop definition: ${filePath}
@@ -16235,15 +16392,15 @@ var init_fixFlow = __esm({
 });
 
 // src/workflow-template.ts
-import * as fs39 from "fs";
+import * as fs40 from "fs";
 import * as path38 from "path";
 import { fileURLToPath } from "url";
 function loadKodyWorkflowTemplate() {
   const here = path38.dirname(fileURLToPath(import.meta.url));
   const candidates = [path38.resolve(here, "../templates/kody.yml"), path38.resolve(here, "../../templates/kody.yml")];
-  const source = candidates.find((candidate) => fs39.existsSync(candidate));
+  const source = candidates.find((candidate) => fs40.existsSync(candidate));
   if (!source) throw new Error(`Kody workflow template is missing: ${KODY_WORKFLOW_TEMPLATE_PATH}`);
-  return fs39.readFileSync(source, "utf8");
+  return fs40.readFileSync(source, "utf8");
 }
 var KODY_WORKFLOW_TEMPLATE_PATH;
 var init_workflow_template = __esm({
@@ -16255,7 +16412,7 @@ var init_workflow_template = __esm({
 
 // src/scripts/initFlow.ts
 import { execFileSync as execFileSync14 } from "child_process";
-import * as fs40 from "fs";
+import * as fs41 from "fs";
 import * as path39 from "path";
 function schemaUrlFromPkg() {
   const fallback = "https://raw.githubusercontent.com/aharonyaircohen/kody-engine/main/kody.config.schema.json";
@@ -16321,21 +16478,21 @@ function performInit(cwd, force, workflowOnly = false) {
   const configPath = path39.join(cwd, "kody.config.json");
   if (workflowOnly) {
     skipped.push("kody.config.json");
-  } else if (fs40.existsSync(configPath) && !force) {
+  } else if (fs41.existsSync(configPath) && !force) {
     skipped.push("kody.config.json");
   } else {
     const cfg = makeConfig(cwd, ownerRepo, defaultBranch);
-    fs40.writeFileSync(configPath, `${JSON.stringify(cfg, null, 2)}
+    fs41.writeFileSync(configPath, `${JSON.stringify(cfg, null, 2)}
 `);
     wrote.push("kody.config.json");
   }
   const workflowDir = path39.join(cwd, ".github", "workflows");
   const workflowPath = path39.join(workflowDir, "kody.yml");
-  if (fs40.existsSync(workflowPath) && !force) {
+  if (fs41.existsSync(workflowPath) && !force) {
     skipped.push(".github/workflows/kody.yml");
   } else {
-    fs40.mkdirSync(workflowDir, { recursive: true });
-    fs40.writeFileSync(workflowPath, loadKodyWorkflowTemplate());
+    fs41.mkdirSync(workflowDir, { recursive: true });
+    fs41.writeFileSync(workflowPath, loadKodyWorkflowTemplate());
     wrote.push(".github/workflows/kody.yml");
   }
   let labels;
@@ -16388,7 +16545,7 @@ Nothing to do. All files already present. (Use --force to overwrite.)
 });
 
 // src/scripts/loadAgentAdhoc.ts
-import * as fs41 from "fs";
+import * as fs42 from "fs";
 function resolveMessage(messageArg) {
   const fromComment = readCommentBody();
   if (fromComment) return stripDirective(fromComment);
@@ -16396,9 +16553,9 @@ function resolveMessage(messageArg) {
 }
 function readCommentBody() {
   const eventPath = process.env.GITHUB_EVENT_PATH;
-  if (!eventPath || !fs41.existsSync(eventPath)) return "";
+  if (!eventPath || !fs42.existsSync(eventPath)) return "";
   try {
-    const event = JSON.parse(fs41.readFileSync(eventPath, "utf-8"));
+    const event = JSON.parse(fs42.readFileSync(eventPath, "utf-8"));
     return String(event.comment?.body ?? "");
   } catch {
     return "";
@@ -16452,10 +16609,10 @@ var init_loadAgentAdhoc = __esm({
         throw new Error("loadAgentAdhoc: ctx.args.agent must be a non-empty slug");
       }
       const agentPath = resolveAgentFile2(ctx.cwd, agentSlug, agentsDir);
-      if (!fs41.existsSync(agentPath)) {
+      if (!fs42.existsSync(agentPath)) {
         throw new Error(`loadAgentAdhoc: agent identity not found: ${agentPath}`);
       }
-      const { title, body } = parseAgentFile(fs41.readFileSync(agentPath, "utf-8"), agentSlug);
+      const { title, body } = parseAgentFile(fs42.readFileSync(agentPath, "utf-8"), agentSlug);
       const message = resolveMessage(ctx.args.message);
       if (!message) {
         throw new Error(
@@ -16824,7 +16981,7 @@ var init_loadIssueStateComment = __esm({
 });
 
 // src/scripts/loadJobFromFile.ts
-import * as fs42 from "fs";
+import * as fs43 from "fs";
 import * as path40 from "path";
 function parseJobFile(raw, slug) {
   let stripped = raw;
@@ -16877,12 +17034,12 @@ var init_loadJobFromFile = __esm({
       let agentIdentity = "";
       if (agentSlug) {
         const agentPath = resolveAgentFile2(ctx.cwd, agentSlug, agentsDir);
-        if (!fs42.existsSync(agentPath)) {
+        if (!fs43.existsSync(agentPath)) {
           throw new Error(
             `loadJobFromFile: capability '${slug}' declares agent '${agentSlug}' but ${agentPath} does not exist`
           );
         }
-        const agentRaw = fs42.readFileSync(agentPath, "utf-8");
+        const agentRaw = fs43.readFileSync(agentPath, "utf-8");
         const parsed = parseJobFile(agentRaw, agentSlug);
         agentTitle = parsed.title;
         agentIdentity = parsed.body;
@@ -16962,7 +17119,7 @@ ${truncate2(issue2.body, FINDING_BODY_MAX_BYTES)}`;
 });
 
 // src/scripts/loadLiveAgent.ts
-import * as fs43 from "fs";
+import * as fs44 from "fs";
 function tenant(config) {
   const [envOwner, envRepo] = (process.env.GITHUB_REPOSITORY ?? "").split("/");
   const owner = config.github?.owner?.trim() || envOwner;
@@ -17005,7 +17162,7 @@ var init_loadLiveAgent = __esm({
       const agent = String(ctx.args.agent ?? ctx.data.jobAgent ?? "").trim();
       if (!agent) throw new Error("loadLiveAgent: agent is required");
       const file = resolveAgentFile2(ctx.cwd, agent, agentsRoot(ctx.cwd));
-      const raw = fs43.existsSync(file) ? fs43.readFileSync(file, "utf8") : "";
+      const raw = fs44.existsSync(file) ? fs44.readFileSync(file, "utf8") : "";
       const metadata = frontmatter(raw);
       const assignedIntent = typeof metadata.primaryIntent === "string" ? metadata.primaryIntent : "";
       const requestedIntent = String(ctx.args.intent ?? "").trim();
@@ -17053,13 +17210,13 @@ var init_loadLiveAgent = __esm({
 });
 
 // src/scripts/kodyVariables.ts
-import * as fs44 from "fs";
+import * as fs45 from "fs";
 import * as path41 from "path";
 function readKodyVariables(cwd) {
   const full = path41.join(cwd, KODY_VARIABLES_REL_PATH);
   let raw;
   try {
-    raw = fs44.readFileSync(full, "utf-8");
+    raw = fs45.readFileSync(full, "utf-8");
   } catch {
     return {};
   }
@@ -17084,7 +17241,7 @@ var init_kodyVariables = __esm({
 });
 
 // src/scripts/loadQaContext.ts
-import * as fs45 from "fs";
+import * as fs46 from "fs";
 import * as path42 from "path";
 function parseSlugList(value) {
   const inner = value.startsWith("[") && value.endsWith("]") ? value.slice(1, -1) : value;
@@ -17115,17 +17272,17 @@ function readProfileAgents(raw) {
 }
 function readProfile(cwd) {
   const dir = path42.join(cwd, CONTEXT_DIR_REL_PATH);
-  if (!fs45.existsSync(dir)) return "";
+  if (!fs46.existsSync(dir)) return "";
   let entries;
   try {
-    entries = fs45.readdirSync(dir).filter((f) => f.endsWith(".md")).sort();
+    entries = fs46.readdirSync(dir).filter((f) => f.endsWith(".md")).sort();
   } catch {
     return "";
   }
   const blocks = [];
   for (const file of entries) {
     try {
-      const raw = fs45.readFileSync(path42.join(dir, file), "utf-8");
+      const raw = fs46.readFileSync(path42.join(dir, file), "utf-8");
       const { agent, body } = readProfileAgents(raw);
       if (!agent.includes(QA_AGENT) && !agent.includes(ALL_AGENTS)) continue;
       blocks.push(`## ${file}
@@ -17175,7 +17332,7 @@ var init_loadQaContext = __esm({
 
 // src/scripts/loadSimpleCapability.ts
 import { randomUUID as randomUUID2 } from "crypto";
-import * as fs46 from "fs";
+import * as fs47 from "fs";
 import * as os6 from "os";
 import * as path43 from "path";
 function registerCapabilitySubagents(profile, toolRoot, toolFiles) {
@@ -17190,7 +17347,7 @@ function registerCapabilitySubagents(profile, toolRoot, toolFiles) {
   profile.subagentTemplates = {
     ...profile.subagentTemplates ?? {},
     ...Object.fromEntries(
-      subagentFiles.map(({ name, file }) => [name, fs46.readFileSync(path43.join(toolRoot, file), "utf-8")])
+      subagentFiles.map(({ name, file }) => [name, fs47.readFileSync(path43.join(toolRoot, file), "utf-8")])
     )
   };
   if (!profile.claudeCode.tools.includes("Agent")) {
@@ -17231,10 +17388,10 @@ function scalar(value) {
   return value;
 }
 function listFiles(root) {
-  if (!fs46.existsSync(root)) return [];
+  if (!fs47.existsSync(root)) return [];
   const files = [];
   const visit = (dir) => {
-    for (const entry of fs46.readdirSync(dir, { withFileTypes: true })) {
+    for (const entry of fs47.readdirSync(dir, { withFileTypes: true })) {
       const absolute = path43.join(dir, entry.name);
       if (entry.isSymbolicLink()) continue;
       if (entry.isDirectory()) visit(absolute);
@@ -17327,7 +17484,7 @@ var init_loadSimpleCapability = __esm({
           ...skillFiles.flatMap((file) => [
             `### ${file}`,
             "",
-            fs46.readFileSync(path43.join(skillRoot, file), "utf-8"),
+            fs47.readFileSync(path43.join(skillRoot, file), "utf-8"),
             ""
           ])
         ] : [],
@@ -17367,7 +17524,7 @@ var init_loadSimpleCapability = __esm({
 });
 
 // src/taskContext.ts
-import * as fs47 from "fs";
+import * as fs48 from "fs";
 import * as path44 from "path";
 function buildTaskContext(args) {
   return {
@@ -17384,9 +17541,9 @@ function buildTaskContext(args) {
 function persistTaskContext(cwd, ctx) {
   try {
     const dir = runtimeStatePath(cwd, "agent-runs", ctx.runId);
-    fs47.mkdirSync(dir, { recursive: true });
+    fs48.mkdirSync(dir, { recursive: true });
     const file = path44.join(dir, "task-context.json");
-    fs47.writeFileSync(file, `${JSON.stringify(ctx, null, 2)}
+    fs48.writeFileSync(file, `${JSON.stringify(ctx, null, 2)}
 `);
     return file;
   } catch (err) {
@@ -18309,7 +18466,7 @@ var init_parseReproOutput = __esm({
 });
 
 // src/scripts/parseSimpleCapabilityOutput.ts
-import * as fs48 from "fs";
+import * as fs49 from "fs";
 function acceptAuthoritativeCapabilityOutput(ctx, profile, output) {
   ctx.data.agentDone = true;
   delete ctx.data.agentFailureReason;
@@ -18326,11 +18483,11 @@ function stringList2(value) {
   return Array.isArray(value) ? value.filter((item) => typeof item === "string") : [];
 }
 function readOutputFile(outputPath) {
-  if (!outputPath || !fs48.existsSync(outputPath)) return { found: false };
+  if (!outputPath || !fs49.existsSync(outputPath)) return { found: false };
   try {
-    return { found: true, value: JSON.parse(fs48.readFileSync(outputPath, "utf-8")) };
+    return { found: true, value: JSON.parse(fs49.readFileSync(outputPath, "utf-8")) };
   } finally {
-    fs48.rmSync(outputPath, { force: true });
+    fs49.rmSync(outputPath, { force: true });
   }
 }
 function parseOutput(text2) {
@@ -18992,7 +19149,7 @@ var init_postResearchComment = __esm({
 });
 
 // src/scripts/prepareBrowserAuth.ts
-import * as fs49 from "fs";
+import * as fs50 from "fs";
 import * as os7 from "os";
 import * as path45 from "path";
 function appendAuthMessage(ctx, message) {
@@ -19038,8 +19195,8 @@ async function githubJson(url, token, checkName) {
   throw new Error(`GitHub ${checkName} check failed`);
 }
 function writeKodyStorageState(input) {
-  const directory = fs49.mkdtempSync(path45.join(os7.tmpdir(), "kody-browser-auth-"));
-  fs49.chmodSync(directory, 448);
+  const directory = fs50.mkdtempSync(path45.join(os7.tmpdir(), "kody-browser-auth-"));
+  fs50.chmodSync(directory, 448);
   const file = path45.join(directory, "storage-state.json");
   const now = Date.now();
   const repoEntry = {
@@ -19071,7 +19228,7 @@ function writeKodyStorageState(input) {
       }
     ]
   };
-  fs49.writeFileSync(file, JSON.stringify(storageState), { mode: 384 });
+  fs50.writeFileSync(file, JSON.stringify(storageState), { mode: 384 });
   return { directory, file, auth };
 }
 function parseSetCookie(value, hostname) {
@@ -19098,10 +19255,10 @@ function parseSetCookie(value, hostname) {
 }
 function writeCookieStorageState(targetUrl, setCookies) {
   const target = new URL(targetUrl);
-  const directory = fs49.mkdtempSync(path45.join(os7.tmpdir(), "kody-browser-auth-"));
-  fs49.chmodSync(directory, 448);
+  const directory = fs50.mkdtempSync(path45.join(os7.tmpdir(), "kody-browser-auth-"));
+  fs50.chmodSync(directory, 448);
   const file = path45.join(directory, "storage-state.json");
-  fs49.writeFileSync(
+  fs50.writeFileSync(
     file,
     JSON.stringify({
       cookies: setCookies.map((cookie) => parseSetCookie(cookie, target.hostname)),
@@ -19122,9 +19279,9 @@ function currentStorageStatePath(args) {
 function browserSessionCookieHeader(profile, targetUrl) {
   const playwright = profile.claudeCode.mcpServers.find((server) => server.name === "playwright");
   const storagePath = currentStorageStatePath(playwright?.args ?? []);
-  if (!storagePath || !fs49.existsSync(storagePath)) return void 0;
+  if (!storagePath || !fs50.existsSync(storagePath)) return void 0;
   const hostname = new URL(targetUrl).hostname;
-  const state = JSON.parse(fs49.readFileSync(storagePath, "utf-8"));
+  const state = JSON.parse(fs50.readFileSync(storagePath, "utf-8"));
   const cookies = (state.cookies ?? []).filter((cookie) => {
     const domain = cookie.domain.replace(/^\./, "");
     return hostname === domain || hostname.endsWith(`.${domain}`);
@@ -19191,9 +19348,9 @@ async function prepareAccountModelSettings(ctx, profile, input) {
   return true;
 }
 function mergeStorageStates(existingPath, nextPath) {
-  if (existingPath === nextPath || !fs49.existsSync(existingPath)) return;
-  const existing = JSON.parse(fs49.readFileSync(existingPath, "utf-8"));
-  const next = JSON.parse(fs49.readFileSync(nextPath, "utf-8"));
+  if (existingPath === nextPath || !fs50.existsSync(existingPath)) return;
+  const existing = JSON.parse(fs50.readFileSync(existingPath, "utf-8"));
+  const next = JSON.parse(fs50.readFileSync(nextPath, "utf-8"));
   const cookies = /* @__PURE__ */ new Map();
   for (const cookie of [...existing.cookies ?? [], ...next.cookies ?? []]) {
     cookies.set(`${cookie.name}\0${cookie.domain}\0${cookie.path}`, cookie);
@@ -19207,7 +19364,7 @@ function mergeStorageStates(existingPath, nextPath) {
     }
     origins.set(entry.origin, { origin: entry.origin, localStorage: [...localStorage.values()] });
   }
-  fs49.writeFileSync(nextPath, JSON.stringify({ cookies: [...cookies.values()], origins: [...origins.values()] }), {
+  fs50.writeFileSync(nextPath, JSON.stringify({ cookies: [...cookies.values()], origins: [...origins.values()] }), {
     mode: 384
   });
 }
@@ -19302,7 +19459,7 @@ async function prepareKodyRepositoryBrowserAuth(ctx, profile, input) {
     configurePlaywright(profile, state.file);
     const authDirectory = state.directory;
     registerRuntimeCleanup(ctx, () => {
-      fs49.rmSync(authDirectory, { recursive: true, force: true });
+      fs50.rmSync(authDirectory, { recursive: true, force: true });
     });
     appendAuthMessage(
       ctx,
@@ -19310,7 +19467,7 @@ async function prepareKodyRepositoryBrowserAuth(ctx, profile, input) {
     );
     return true;
   } catch (error) {
-    if (state) fs49.rmSync(state.directory, { recursive: true, force: true });
+    if (state) fs50.rmSync(state.directory, { recursive: true, force: true });
     const reason = error instanceof Error ? error.message : String(error);
     appendAuthMessage(
       ctx,
@@ -19337,11 +19494,11 @@ async function prepareEmailPasswordBrowserAuth(ctx, profile, input) {
     state = writeCookieStorageState(input.targetUrl, cookies);
     configurePlaywright(profile, state.file);
     const authDirectory = state.directory;
-    registerRuntimeCleanup(ctx, () => fs49.rmSync(authDirectory, { recursive: true, force: true }));
+    registerRuntimeCleanup(ctx, () => fs50.rmSync(authDirectory, { recursive: true, force: true }));
     ctx.data.qaAuthBlock = "Auth: the app is already signed in through an engine-provided browser session. The login credentials are not available to you; never request, reveal, or report them.";
     return true;
   } catch (error) {
-    if (state) fs49.rmSync(state.directory, { recursive: true, force: true });
+    if (state) fs50.rmSync(state.directory, { recursive: true, force: true });
     const reason = error instanceof Error ? error.message : String(error);
     ctx.data.qaAuthBlock = `Auth: the engine could not prepare the app login (${reason}). Note this authenticated surface as a gap.`;
     return false;
@@ -19556,6 +19713,18 @@ function appendPrompt(ctx, section) {
   const prompt = typeof ctx.data.prompt === "string" ? ctx.data.prompt.trim() : "";
   ctx.data.prompt = [prompt, section.trim()].filter(Boolean).join("\n\n");
 }
+function capabilityTargetUrl(ctx) {
+  const input = ctx.data.capabilityInput && typeof ctx.data.capabilityInput === "object" && !Array.isArray(ctx.data.capabilityInput) ? ctx.data.capabilityInput : {};
+  return typeof input.url === "string" ? input.url : typeof input.targetUrl === "string" ? input.targetUrl : typeof input.previewUrl === "string" ? input.previewUrl : "";
+}
+async function isolatedAuthAttempt(ctx, attempt) {
+  const previous = ctx.data.qaAuthBlock;
+  ctx.data.qaAuthBlock = "";
+  const ready = await attempt();
+  const message = String(ctx.data.qaAuthBlock ?? "").trim();
+  ctx.data.qaAuthBlock = previous;
+  return { ready, message };
+}
 var PLAYWRIGHT_SERVER, prepareSimpleCapabilityRuntime;
 var init_prepareSimpleCapabilityRuntime = __esm({
   "src/scripts/prepareSimpleCapabilityRuntime.ts"() {
@@ -19574,21 +19743,29 @@ var init_prepareSimpleCapabilityRuntime = __esm({
         throw new Error("Capability requires the Dashboard user browser session and cannot run in CI");
       }
       configureBrowser(ctx, profile, requirements);
+      const targetUrl = capabilityTargetUrl(ctx);
+      const authAttempts = [];
       if (requirements.qaCredentials) {
         await loadQaContext(ctx, profile);
-        const capabilityInput = ctx.data.capabilityInput && typeof ctx.data.capabilityInput === "object" && !Array.isArray(ctx.data.capabilityInput) ? ctx.data.capabilityInput : {};
-        const targetUrl = typeof capabilityInput.url === "string" ? capabilityInput.url : typeof capabilityInput.targetUrl === "string" ? capabilityInput.targetUrl : "";
-        await prepareEmailPasswordBrowserAuth(ctx, profile, {
-          login: String(ctx.data.qaLogin ?? ""),
-          targetUrl
+        const missingCredentialsMessage = String(ctx.data.qaAuthBlock ?? "").trim();
+        const emailAuth = await isolatedAuthAttempt(
+          ctx,
+          () => prepareEmailPasswordBrowserAuth(ctx, profile, {
+            login: String(ctx.data.qaLogin ?? ""),
+            targetUrl
+          })
+        );
+        authAttempts.push({
+          ready: emailAuth.ready,
+          message: emailAuth.message || missingCredentialsMessage
         });
-        if (requirements.qaAccountCredentials?.length) {
+        if (emailAuth.ready && requirements.qaAccountCredentials?.length) {
           await prepareAccountCredentials(ctx, profile, {
             names: requirements.qaAccountCredentials,
             targetUrl
           });
         }
-        if (requirements.qaAccountModelSettings) {
+        if (emailAuth.ready && requirements.qaAccountModelSettings) {
           await prepareAccountModelSettings(ctx, profile, {
             settings: requirements.qaAccountModelSettings,
             targetUrl
@@ -19596,16 +19773,21 @@ var init_prepareSimpleCapabilityRuntime = __esm({
         }
       }
       if (requirements.githubTestToken) {
-        const capabilityInput = ctx.data.capabilityInput && typeof ctx.data.capabilityInput === "object" && !Array.isArray(ctx.data.capabilityInput) ? ctx.data.capabilityInput : {};
-        const targetUrl = typeof capabilityInput.url === "string" ? capabilityInput.url : typeof capabilityInput.targetUrl === "string" ? capabilityInput.targetUrl : "";
-        await prepareKodyRepositoryBrowserAuth(ctx, profile, {
-          repositoryUrl: `https://github.com/${ctx.config.github.owner}/${ctx.config.github.repo}`,
-          credentialKey: "KODY_TOKEN",
-          methodName: "Kody repository QA login",
-          targetUrl
-        });
+        authAttempts.push(
+          await isolatedAuthAttempt(
+            ctx,
+            () => prepareKodyRepositoryBrowserAuth(ctx, profile, {
+              repositoryUrl: `https://github.com/${ctx.config.github.owner}/${ctx.config.github.repo}`,
+              credentialKey: "E2E_GITHUB_TOKEN",
+              methodName: "Kody repository QA login",
+              targetUrl
+            })
+          )
+        );
       }
       if (requirements.qaCredentials || requirements.githubTestToken) {
+        const successful = authAttempts.filter(({ ready }) => ready);
+        ctx.data.qaAuthBlock = (successful.length ? successful : authAttempts).map(({ message }) => message).filter(Boolean).join("\n\n");
         appendPrompt(
           ctx,
           [
@@ -21283,7 +21465,7 @@ var init_tickShellRunner = __esm({
 });
 
 // src/scripts/runScheduledImplementationTick.ts
-import * as fs50 from "fs";
+import * as fs51 from "fs";
 import * as path48 from "path";
 var runScheduledImplementationTick;
 var init_runScheduledImplementationTick = __esm({
@@ -21312,7 +21494,7 @@ var init_runScheduledImplementationTick = __esm({
         return;
       }
       const shellPath = path48.join(profile.dir, shell);
-      if (!fs50.existsSync(shellPath)) {
+      if (!fs51.existsSync(shellPath)) {
         ctx.output.exitCode = 99;
         ctx.output.reason = `runScheduledImplementationTick: shell not found: ${shell} (looked in ${profile.dir})`;
         return;
@@ -21371,13 +21553,13 @@ var init_runtimeConnections = __esm({
 
 // src/scripts/runSimpleCapabilityScript.ts
 import { spawnSync as spawnSync3 } from "child_process";
-import * as fs51 from "fs";
+import * as fs52 from "fs";
 function formatDuration2(timeoutMs) {
   return timeoutMs % 6e4 === 0 ? `${timeoutMs / 6e4} minutes` : `${timeoutMs}ms`;
 }
 function isRegularFile2(filePath) {
   try {
-    const stat = fs51.lstatSync(filePath);
+    const stat = fs52.lstatSync(filePath);
     return stat.isFile() && !stat.isSymbolicLink();
   } catch {
     return false;
@@ -21469,7 +21651,7 @@ var init_runSimpleCapabilityScript = __esm({
 });
 
 // src/scripts/runTickScript.ts
-import * as fs52 from "fs";
+import * as fs53 from "fs";
 import * as path49 from "path";
 var runTickScript;
 var init_runTickScript = __esm({
@@ -21503,7 +21685,7 @@ var init_runTickScript = __esm({
         return;
       }
       const scriptPath = path49.isAbsolute(tickScript) ? tickScript : path49.join(ctx.cwd, tickScript);
-      if (!fs52.existsSync(scriptPath)) {
+      if (!fs53.existsSync(scriptPath)) {
         ctx.output.exitCode = 99;
         ctx.output.reason = `runTickScript: tickScript not found: ${scriptPath}`;
         return;
@@ -22710,7 +22892,7 @@ var init_warmupMcp = __esm({
 });
 
 // src/scripts/writeAgentRunSummary.ts
-import * as fs53 from "fs";
+import * as fs54 from "fs";
 var writeAgentRunSummary;
 var init_writeAgentRunSummary = __esm({
   "src/scripts/writeAgentRunSummary.ts"() {
@@ -22736,7 +22918,7 @@ var init_writeAgentRunSummary = __esm({
       if (reason) lines.push(`- **Reason:** ${reason}`);
       lines.push("");
       try {
-        fs53.appendFileSync(summaryPath, `${lines.join("\n")}
+        fs54.appendFileSync(summaryPath, `${lines.join("\n")}
 `);
       } catch {
       }
@@ -23078,7 +23260,7 @@ var init_scripts = __esm({
 });
 
 // src/stateWorkspace.ts
-import * as fs54 from "fs";
+import * as fs55 from "fs";
 import * as path51 from "path";
 function tenantId(config) {
   const owner = config.github?.owner?.trim() || process.env.GITHUB_REPOSITORY?.split("/")[0]?.trim();
@@ -23087,8 +23269,8 @@ function tenantId(config) {
 }
 function writeRuntimeFile(cwd, relativePath, content) {
   const target = path51.join(cwd, RUNTIME_ROOT, relativePath);
-  fs54.mkdirSync(path51.dirname(target), { recursive: true });
-  fs54.writeFileSync(target, content, "utf8");
+  fs55.mkdirSync(path51.dirname(target), { recursive: true });
+  fs55.writeFileSync(target, content, "utf8");
 }
 function record(value) {
   return value && typeof value === "object" && !Array.isArray(value) ? value : null;
@@ -23157,7 +23339,7 @@ async function hydrateStateWorkspace(config, cwd, backendOverride) {
   if (hydratedWorkspaces.has(key)) return;
   const backend = backendOverride ?? createStateBackendFromEnv();
   const root = path51.join(cwd, RUNTIME_ROOT);
-  fs54.rmSync(root, { recursive: true, force: true });
+  fs55.rmSync(root, { recursive: true, force: true });
   await Promise.all([
     hydratePrefix(backend, tenant2, cwd, "context:"),
     hydratePrefix(backend, tenant2, cwd, "memory:"),
@@ -23244,7 +23426,7 @@ var init_tools = __esm({
 
 // src/executor.ts
 import { spawn as spawn8 } from "child_process";
-import * as fs55 from "fs";
+import * as fs56 from "fs";
 import * as os8 from "os";
 import * as path52 from "path";
 function isMutatingPostflight(scriptName) {
@@ -23342,6 +23524,7 @@ async function runImplementation(profileName, input) {
 `);
     else if (out.exitCode !== 0 && out.reason) process.stdout.write(`PR_URL=FAILED: ${out.reason}
 `);
+    publishRunUsage(`implementation:${profileName}`, out.usage);
     return out;
   };
   const resolved = loadRunnableProfile(profileName, input.cwd);
@@ -23465,14 +23648,16 @@ async function runImplementation(profileName, input) {
           status,
           startedAt: runIndexStartedAt,
           updatedAt: finishedAt,
-          reason: out.reason
+          reason: out.reason,
+          usage: out.usage
         })
       );
       await finalizeStagedRunIndexRowsAsync(config, input.cwd, ctx.data, {
         status,
         updatedAt: finishedAt,
         reason: out.reason,
-        output: ctx.data.capabilityOutput
+        output: ctx.data.capabilityOutput,
+        usage: out.usage
       });
     };
   }
@@ -23700,10 +23885,11 @@ async function runImplementation(profileName, input) {
           reason: err instanceof Error ? err.message : String(err)
         });
       }
-      ctx.output.usage = {
-        tokens: agentResult.tokens ? agentResult.tokens.input + agentResult.tokens.output + agentResult.tokens.cacheRead + agentResult.tokens.cacheCreate : 0,
-        costUsd: agentResult.costUsd ?? 0
-      };
+      ctx.output.usage = createRunUsage(agentResult.tokens, agentResult.costUsd, {
+        model: `${model.provider}/${model.model}`,
+        turns: agentResult.turns,
+        modelUsage: agentResult.modelUsage
+      });
       emitEvent(input.cwd, {
         implementation: profileName,
         kind: "agent_end",
@@ -23825,7 +24011,8 @@ async function runImplementation(profileName, input) {
       } catch (error) {
         return finishAndEnd({
           exitCode: 99,
-          reason: error instanceof Error ? error.message : String(error)
+          reason: error instanceof Error ? error.message : String(error),
+          usage: ctx.output.usage
         });
       }
     }
@@ -23833,6 +24020,7 @@ async function runImplementation(profileName, input) {
       exitCode: ctx.output.exitCode ?? 0,
       prUrl: ctx.output.prUrl,
       reason: ctx.output.reason,
+      usage: ctx.output.usage,
       action: ctx.data.action,
       nextDispatch: ctx.output.nextDispatch,
       nextJob: ctx.output.nextJob,
@@ -23843,7 +24031,7 @@ async function runImplementation(profileName, input) {
     });
   } catch (err) {
     const msg = err instanceof Error ? err.message : String(err);
-    return finishAndEnd({ exitCode: 99, reason: ctx.output.reason ?? msg });
+    return finishAndEnd({ exitCode: 99, reason: ctx.output.reason ?? msg, usage: ctx.output.usage });
   } finally {
     runRuntimeCleanup(ctx);
     clearStampedLifecycleLabels(profile, ctx);
@@ -23896,6 +24084,8 @@ function lastIndexOfScript(entries, names) {
 }
 async function runImplementationChain(profileName, input) {
   let result = await runImplementation(profileName, input);
+  let aggregateUsage = result.usage;
+  let followedHandoff = false;
   let chainConfig = input.config;
   const configForHandoff = () => {
     if (chainConfig || input.skipConfig) return chainConfig;
@@ -23907,6 +24097,7 @@ async function runImplementationChain(profileName, input) {
     ...result.taskState ? { taskState: result.taskState } : {}
   };
   for (let hops = 1; (result.nextDispatch || result.nextJob) && hops <= MAX_CHAIN_HOPS; hops++) {
+    followedHandoff = true;
     if (result.nextJob) {
       const next2 = result.nextJob;
       const after = result.afterNextJob;
@@ -23922,6 +24113,7 @@ async function runImplementationChain(profileName, input) {
         quiet: input.quiet,
         preloadedData: chainData
       });
+      aggregateUsage = mergeRunUsage(aggregateUsage, childResult.usage);
       if (after && childResult.exitCode === 0 && !childResult.nextDispatch && !childResult.nextJob && !childResult.afterNextJob) {
         chainData = {
           ...chainData,
@@ -23947,6 +24139,7 @@ async function runImplementationChain(profileName, input) {
           quiet: input.quiet,
           preloadedData: chainData
         });
+        aggregateUsage = mergeRunUsage(aggregateUsage, result.usage);
         chainData = {
           ...chainData,
           ...result.taskState ? { taskState: result.taskState } : {}
@@ -23981,6 +24174,7 @@ async function runImplementationChain(profileName, input) {
       quiet: input.quiet,
       preloadedData: chainData
     });
+    aggregateUsage = mergeRunUsage(aggregateUsage, result.usage);
     chainData = {
       ...chainData,
       ...result.taskState ? { taskState: result.taskState } : {}
@@ -23991,7 +24185,9 @@ async function runImplementationChain(profileName, input) {
     process.stderr.write(`[kody] in-process hand-off cap (${MAX_CHAIN_HOPS}) reached; not running ${pending}
 `);
   }
-  return result;
+  const output = aggregateUsage ? { ...result, usage: aggregateUsage } : result;
+  if (followedHandoff) publishRunUsage(`chain:${profileName}`, output.usage);
+  return output;
 }
 function handoffToJob(handoff) {
   const capabilityOrAction = handoff.workflow ?? handoff.action ?? handoff.capability;
@@ -24038,7 +24234,7 @@ function resolveProfilePath(profileName, cwd = process.cwd()) {
     // fallback
   ];
   for (const c of candidates) {
-    if (fs55.existsSync(c)) return c;
+    if (fs56.existsSync(c)) return c;
   }
   return candidates[0];
 }
@@ -24154,7 +24350,7 @@ function resolveShellTimeoutMs(entry) {
 async function runShellEntry(entry, ctx, profile) {
   const shellName = entry.shell;
   const shellPath = path52.join(profile.dir, shellName);
-  if (!fs55.existsSync(shellPath)) {
+  if (!fs56.existsSync(shellPath)) {
     ctx.skipAgent = true;
     ctx.output.exitCode = 99;
     ctx.output.reason = `shell script not found: ${shellName} (looked in ${profile.dir})`;
@@ -24228,9 +24424,9 @@ async function runShellEntry(entry, ctx, profile) {
   }
   let sideChannelText = "";
   try {
-    if (fs55.existsSync(outputFile)) {
-      sideChannelText = fs55.readFileSync(outputFile, "utf-8");
-      fs55.rmSync(outputFile, { force: true });
+    if (fs56.existsSync(outputFile)) {
+      sideChannelText = fs56.readFileSync(outputFile, "utf-8");
+      fs56.rmSync(outputFile, { force: true });
     }
   } catch {
   }
@@ -24296,6 +24492,7 @@ var init_executor = __esm({
     init_subagents();
     init_task_artifacts();
     init_tools();
+    init_usage();
     MUTATING_POSTFLIGHTS = /* @__PURE__ */ new Set([
       "commitAndPush",
       "ensurePr",
@@ -24446,6 +24643,7 @@ function parseWorkflowRunState(raw) {
   const artifacts = Array.isArray(state.artifacts) ? state.artifacts.filter(
     (artifact) => !!artifact && typeof artifact === "object" && typeof artifact.label === "string" && (artifact.url === void 0 || typeof artifact.url === "string") && (artifact.path === void 0 || typeof artifact.path === "string")
   ) : [];
+  const usage = parseRunUsage(state.usage);
   return {
     status: state.status,
     ...typeof state.currentStepId === "string" ? { currentStepId: state.currentStepId } : {},
@@ -24458,6 +24656,7 @@ function parseWorkflowRunState(raw) {
     facts: { ...facts },
     evidence: Object.fromEntries(evidenceEntries),
     artifacts: artifacts.map((artifact) => ({ ...artifact })),
+    ...usage ? { usage } : {},
     ...typeof state.blocker === "string" ? { blocker: state.blocker } : {}
   };
 }
@@ -24521,6 +24720,7 @@ var init_workflowRunState = __esm({
   "src/workflowRunState.ts"() {
     "use strict";
     init_state_backend();
+    init_usage();
     SAFE_ID = /^[a-z0-9][a-z0-9_-]{0,79}$/;
   }
 });
@@ -24741,6 +24941,7 @@ async function runJob(job, base) {
           ...parentRow,
           status: result.workflowState?.status === "waiting-approval" ? "waiting" : result.exitCode === 0 ? "success" : "failed",
           summary: result.reason,
+          usage: result.usage,
           updatedAt: (/* @__PURE__ */ new Date()).toISOString()
         });
       }
@@ -24759,6 +24960,7 @@ async function runJob(job, base) {
           ...Object.keys(facts).length > 0 ? { output: facts } : {}
         });
       }
+      publishRunUsage(`workflow:${workflowIdentity}`, result.usage);
       return result;
     } finally {
       await lease?.release().catch((error) => {
@@ -24907,16 +25109,17 @@ async function runCapabilityWorkflow(parent, workflow, capability, base, checkpo
     return { exitCode: 64, reason: resumeBlocker, workflowState: state };
   }
   const result = isGraphWorkflow(workflow) ? await runGraphCapabilityWorkflow(parent, workflow, capability, base, checkpoint) : await runLinearCapabilityWorkflow(parent, workflow, capability, base, checkpoint);
-  if (workflow.report && result.workflowState) {
+  const resultWithUsage = result.workflowState?.usage ? { ...result, usage: result.workflowState.usage } : result;
+  if (workflow.report && resultWithUsage.workflowState) {
     await publishWorkflowReport({
       config: base.config ?? loadConfig(base.cwd),
       publication: workflow.report,
       workflowId: capability.slug,
       workflowTitle: capability.title,
-      state: result.workflowState
+      state: resultWithUsage.workflowState
     });
   }
-  return result;
+  return resultWithUsage;
 }
 async function runLinearCapabilityWorkflow(parent, workflow, capability, base, checkpoint) {
   const state = initialWorkflowState(parent, workflow);
@@ -25045,7 +25248,8 @@ function initialWorkflowState(parent, workflow) {
       ...prior.steps ? { steps: cloneWorkflowSteps(prior.steps) } : {},
       facts: { ...prior.facts },
       evidence: { ...prior.evidence },
-      artifacts: prior.artifacts.map((artifact) => ({ ...artifact }))
+      artifacts: prior.artifacts.map((artifact) => ({ ...artifact })),
+      ...prior.usage ? { usage: structuredClone(prior.usage) } : {}
     };
   }
   const firstStepId = workflow.startAt ?? workflow.steps[0]?.id;
@@ -25065,7 +25269,8 @@ function initialWorkflowState(parent, workflow) {
       ...prior?.facts ?? {}
     },
     evidence: { ...prior?.evidence ?? {} },
-    artifacts: (prior?.artifacts ?? []).map((artifact) => ({ ...artifact }))
+    artifacts: (prior?.artifacts ?? []).map((artifact) => ({ ...artifact })),
+    ...prior?.usage ? { usage: structuredClone(prior.usage) } : {}
   };
 }
 function workflowChainData(parent, capability, base, state) {
@@ -25454,6 +25659,7 @@ function finishWorkflowStep(state, step, result) {
     ...result.capabilityOutput !== void 0 ? { output: result.capabilityOutput } : {},
     completedAt: (/* @__PURE__ */ new Date()).toISOString()
   };
+  state.usage = mergeRunUsage(state.usage, result.usage);
 }
 function usesGenericCapabilityInput(action, cwd) {
   const inputs = getCapabilityActionInputs(action, hydratedCapabilitiesRoot(cwd));
@@ -25689,6 +25895,7 @@ var init_job = __esm({
     init_publishReport();
     init_simpleCapabilityRuntime();
     init_state_backend();
+    init_usage();
     init_workflowDefinitionIdentity();
     init_workflowDefinitions();
     init_workflowRunLease();
@@ -27058,7 +27265,7 @@ async function hydrateDefinitionsFromEnv(cwd = process.cwd(), env = process.env)
 
 // src/kody-cli.ts
 import { execFileSync as execFileSync24 } from "child_process";
-import * as fs57 from "fs";
+import * as fs58 from "fs";
 import * as path53 from "path";
 
 // src/app-auth.ts
@@ -27591,7 +27798,7 @@ init_loopDefinitions();
 
 // src/mergedPrLifecycle.ts
 init_lifecycleLabels();
-import * as fs56 from "fs";
+import * as fs57 from "fs";
 var DONE3 = {
   label: "kody:done",
   color: "0e8a16",
@@ -27632,8 +27839,8 @@ function finalizeMergedPullRequestEvent(event, cwd, writeLabel = setKodyLabel) {
 }
 function readGitHubEvent(env = process.env) {
   const eventPath = env.GITHUB_EVENT_PATH;
-  if (!eventPath || !fs56.existsSync(eventPath)) return null;
-  return JSON.parse(fs56.readFileSync(eventPath, "utf-8"));
+  if (!eventPath || !fs57.existsSync(eventPath)) return null;
+  return JSON.parse(fs57.readFileSync(eventPath, "utf-8"));
 }
 
 // src/kody-cli.ts
@@ -27861,9 +28068,9 @@ async function resolveAuthToken(env = process.env) {
   return void 0;
 }
 function detectPackageManager(cwd) {
-  if (fs57.existsSync(path53.join(cwd, "pnpm-lock.yaml"))) return "pnpm";
-  if (fs57.existsSync(path53.join(cwd, "yarn.lock"))) return "yarn";
-  if (fs57.existsSync(path53.join(cwd, "bun.lockb"))) return "bun";
+  if (fs58.existsSync(path53.join(cwd, "pnpm-lock.yaml"))) return "pnpm";
+  if (fs58.existsSync(path53.join(cwd, "yarn.lock"))) return "yarn";
+  if (fs58.existsSync(path53.join(cwd, "bun.lockb"))) return "bun";
   return "npm";
 }
 function shouldChainScheduledWatch(match) {
@@ -27904,7 +28111,7 @@ function ensurePackageManagerInstalled(pm, cwd) {
   return shellOut("npm", ["install", "-g", spec], cwd);
 }
 function installDeps(pm, cwd) {
-  if (!fs57.existsSync(path53.join(cwd, "package.json"))) {
+  if (!fs58.existsSync(path53.join(cwd, "package.json"))) {
     process.stdout.write("\u2192 kody: no package.json found \u2014 skipping consumer dependency install\n");
     return 0;
   }
@@ -27970,8 +28177,8 @@ function postFailureTail(issueNumber, cwd, reason) {
   const logPath = lastRunLogPath(cwd);
   let tail = "";
   try {
-    if (fs57.existsSync(logPath)) {
-      const content = fs57.readFileSync(logPath, "utf-8");
+    if (fs58.existsSync(logPath)) {
+      const content = fs58.readFileSync(logPath, "utf-8");
       tail = content.slice(-3e3);
     }
   } catch {
@@ -28088,9 +28295,9 @@ async function runCi(argv) {
       forceRunCliArgs = { goal: envForceMessage };
     }
   }
-  if (!args.issueNumber && !autoFallback && !forceRunAction && !runRequestFanOut && eventName === "workflow_dispatch" && dispatchEventPath && fs57.existsSync(dispatchEventPath)) {
+  if (!args.issueNumber && !autoFallback && !forceRunAction && !runRequestFanOut && eventName === "workflow_dispatch" && dispatchEventPath && fs58.existsSync(dispatchEventPath)) {
     try {
-      const evt = JSON.parse(fs57.readFileSync(dispatchEventPath, "utf-8"));
+      const evt = JSON.parse(fs58.readFileSync(dispatchEventPath, "utf-8"));
       const inputs = objectValue2(evt.inputs);
       const issueInput = parseInt(String(inputs?.issue_number ?? ""), 10);
       const sessionInput = String(inputs?.sessionId ?? "");
@@ -28506,7 +28713,7 @@ init_repoWorkspace();
 
 // src/scripts/brainTurnLog.ts
 init_runtimePaths();
-import * as fs58 from "fs";
+import * as fs59 from "fs";
 import * as path54 from "path";
 import posixPath4 from "path/posix";
 var live = /* @__PURE__ */ new Map();
@@ -28515,8 +28722,8 @@ function brainEventsFilePath(dir, chatId) {
 }
 function lastPersistedSeq(dir, chatId) {
   const p = brainEventsFilePath(dir, chatId);
-  if (!fs58.existsSync(p)) return 0;
-  const lines = fs58.readFileSync(p, "utf-8").split("\n").filter(Boolean);
+  if (!fs59.existsSync(p)) return 0;
+  const lines = fs59.readFileSync(p, "utf-8").split("\n").filter(Boolean);
   if (lines.length === 0) return 0;
   try {
     return JSON.parse(lines[lines.length - 1]).seq || 0;
@@ -28526,9 +28733,9 @@ function lastPersistedSeq(dir, chatId) {
 }
 function readSince(dir, chatId, since) {
   const p = brainEventsFilePath(dir, chatId);
-  if (!fs58.existsSync(p)) return [];
+  if (!fs59.existsSync(p)) return [];
   const out = [];
-  for (const line of fs58.readFileSync(p, "utf-8").split("\n")) {
+  for (const line of fs59.readFileSync(p, "utf-8").split("\n")) {
     if (!line) continue;
     try {
       const rec = JSON.parse(line);
@@ -28554,12 +28761,12 @@ function beginTurn(dir, chatId) {
   };
   live.set(chatId, state);
   const p = brainEventsFilePath(dir, chatId);
-  fs58.mkdirSync(path54.dirname(p), { recursive: true });
+  fs59.mkdirSync(path54.dirname(p), { recursive: true });
   return (event) => {
     state.seq += 1;
     const rec = { seq: state.seq, turn, ts: Date.now(), event };
     try {
-      fs58.appendFileSync(p, `${JSON.stringify(rec)}
+      fs59.appendFileSync(p, `${JSON.stringify(rec)}
 `);
     } catch (err) {
       process.stderr.write(
@@ -28598,7 +28805,7 @@ function endTurnIfUnterminated(dir, chatId, errMessage) {
     event: { type: "error", error: errMessage || "turn ended unexpectedly", chatId }
   };
   try {
-    fs58.appendFileSync(brainEventsFilePath(dir, chatId), `${JSON.stringify(rec)}
+    fs59.appendFileSync(brainEventsFilePath(dir, chatId), `${JSON.stringify(rec)}
 `);
   } catch {
   }
@@ -31262,7 +31469,7 @@ async function poolServe() {
 
 // src/servers/runner-serve.ts
 import { spawn as spawn10 } from "child_process";
-import * as fs59 from "fs";
+import * as fs60 from "fs";
 import { createServer as createServer6 } from "http";
 var DEFAULT_PORT2 = 8080;
 var DEFAULT_WORKDIR = "/workspace/repo";
@@ -31338,8 +31545,8 @@ async function defaultRunJob(job) {
   const workdir = process.env.RUNNER_WORKDIR ?? DEFAULT_WORKDIR;
   const branch = job.ref ?? "main";
   const authUrl = `https://x-access-token:${job.githubToken}@github.com/${job.repo}.git`;
-  fs59.rmSync(workdir, { recursive: true, force: true });
-  fs59.mkdirSync(workdir, { recursive: true });
+  fs60.rmSync(workdir, { recursive: true, force: true });
+  fs60.mkdirSync(workdir, { recursive: true });
   const allSecrets = typeof job.allSecrets === "string" ? job.allSecrets : JSON.stringify(job.allSecrets ?? {});
   const target = job.runRequest.target;
   const interactive = target.type === "chat";