@kynver-app/runtime 0.1.122 → 0.1.128

package/dist/server/repo-search.js

@@ -1,224 +1 @@
-// src/repo-search.ts
-var RG_BINARIES = /* @__PURE__ */ new Set(["rg", "ripgrep", "grep"]);
-var RG_OPTS_WITH_VALUE = /* @__PURE__ */ new Set([
-  "-e",
-  "--regexp",
-  "-f",
-  "--file",
-  "-m",
-  "--max-count",
-  "-A",
-  "--after-context",
-  "-B",
-  "--before-context",
-  "-C",
-  "--context",
-  "-g",
-  "--glob",
-  "--iglob"
-]);
-function binaryName(token) {
-  if (!token) return null;
-  const base = token.split("/").pop() ?? token;
-  return base.replace(/\.exe$/i, "").toLowerCase();
-}
-function splitShellWords(input) {
-  if (!input) return [];
-  const words = [];
-  let current = "";
-  let quote;
-  let escaped = false;
-  for (const char of input) {
-    if (escaped) {
-      current += char;
-      escaped = false;
-      continue;
-    }
-    if (char === "\\") {
-      escaped = true;
-      continue;
-    }
-    if (quote) {
-      if (char === quote) quote = void 0;
-      else current += char;
-      continue;
-    }
-    if (char === '"' || char === "'") {
-      quote = char;
-      continue;
-    }
-    if (/\s/.test(char)) {
-      if (current) {
-        words.push(current);
-        current = "";
-      }
-      continue;
-    }
-    current += char;
-  }
-  if (current) words.push(current);
-  return words;
-}
-function isRgArgv(argv) {
-  const bin = binaryName(argv[0]);
-  return Boolean(bin && RG_BINARIES.has(bin));
-}
-function isSingleFileSearchTarget(target) {
-  if (!target || target.includes("/") || target.includes("*")) return false;
-  return /\.(?:json|md|mjs|cjs|js|ts|tsx|yaml|yml)$/iu.test(target);
-}
-function isRgExcludeScopeTarget(target) {
-  if (!target) return false;
-  const t = target.trim();
-  return t.startsWith("!") && !t.includes("/") && !t.endsWith("/**");
-}
-function fixRgGlobToken(token) {
-  if (!token.startsWith("--glob=")) return token;
-  const value = token.slice("--glob=".length);
-  if (value.startsWith("!") && !value.includes("/") && !value.endsWith("/**")) {
-    return `--glob=${value}/**`;
-  }
-  return token;
-}
-function collectRgPositional(argv) {
-  const positional = [];
-  for (let i = 1; i < argv.length; i += 1) {
-    const token = argv[i];
-    if (!token) continue;
-    if (token === "--") {
-      positional.push(...argv.slice(i + 1));
-      break;
-    }
-    if (token.startsWith("-")) {
-      if (token.includes("=")) continue;
-      if (RG_OPTS_WITH_VALUE.has(token)) i += 1;
-      continue;
-    }
-    positional.push(token);
-  }
-  return positional;
-}
-function normalizeRgArgv(argv) {
-  let changed = false;
-  const out = argv.map((token) => {
-    const fixed = fixRgGlobToken(token);
-    if (fixed !== token) changed = true;
-    return fixed;
-  });
-  const positional = collectRgPositional(out);
-  if (positional.length === 2) {
-    const [pattern, target] = positional;
-    if (isSingleFileSearchTarget(target)) {
-      return { argv: [out[0] ?? "rg", "-g", target, pattern, "."], changed: true };
-    }
-  }
-  return { argv: out, changed };
-}
-function normalizeRepoSearchCommand(command) {
-  const trimmed = command.trim();
-  if (!trimmed) return { command: trimmed, changed: false };
-  const joiner = trimmed.includes("&&") ? " && " : trimmed.includes("||") ? " || " : "; ";
-  const stages = trimmed.split(/\s*(?:&&|\|\||;)\s*/u);
-  let changed = false;
-  const normalizedStages = stages.map((stage) => {
-    const argv = splitShellWords(stage.trim());
-    if (!argv.length || !isRgArgv(argv)) return stage;
-    const normalized = normalizeRgArgv(argv);
-    if (normalized.changed) {
-      changed = true;
-      return normalized.argv.join(" ");
-    }
-    return stage;
-  });
-  if (!changed) return { command: trimmed, changed: false };
-  return { command: normalizedStages.join(joiner), changed: true };
-}
-function extractSearchMeta(meta) {
-  if (!meta) return {};
-  const pipelineMatch = meta.match(/search\s+"(.+)"\s+in\s+([^()]+?)(?:\s*\(|$)/iu);
-  if (pipelineMatch) {
-    return { pattern: pipelineMatch[1], target: pipelineMatch[2]?.trim() };
-  }
-  const match = meta.match(/^search\s+"(.+)"\s+in\s+(.+)$/iu);
-  if (!match) return {};
-  return { pattern: match[1], target: match[2]?.trim() };
-}
-function classifyRepoSearchMeta(meta) {
-  const { pattern, target } = extractSearchMeta(meta);
-  if (!pattern) return { kind: "not_repo_search" };
-  if (isRgExcludeScopeTarget(target)) {
-    return { kind: "rg_exclude_syntax", pattern, target };
-  }
-  if (isSingleFileSearchTarget(target)) {
-    return { kind: "bad_scope", pattern, target };
-  }
-  return { kind: "not_repo_search", pattern, target };
-}
-function metaToNormalizedRgCommand(meta) {
-  const { pattern, target } = extractSearchMeta(meta);
-  if (!pattern) return null;
-  if (isRgExcludeScopeTarget(target)) {
-    const glob = `${target.trim()}/**`;
-    return {
-      command: `rg "${pattern}" -g '${glob}' .`,
-      changed: true
-    };
-  }
-  if (target && isSingleFileSearchTarget(target)) {
-    return {
-      command: `rg -g ${target} "${pattern}" .`,
-      changed: true
-    };
-  }
-  return null;
-}
-function formatRepoSearchGuidance(ctx) {
-  if (ctx.kind === "bad_scope" && ctx.pattern?.includes("agent-os-land-pr") && ctx.target === "package.json") {
-    return "Search package.json with a glob from the repo root: `rg -g package.json agent-os-land-pr .` \u2014 or run `node scripts/agent-os-land-pr.mjs <pr-url>` directly.";
-  }
-  if (ctx.kind === "bad_scope" && ctx.pattern && ctx.target) {
-    return `Use \`rg -g '${ctx.target}' ${ctx.pattern} .\` from the repo root instead of treating ${ctx.target} as a folder.`;
-  }
-  if (ctx.kind === "rg_exclude_syntax" && ctx.pattern) {
-    const glob = ctx.target ? `${ctx.target.trim()}/**` : "!node_modules/**";
-    return `Repo search scope \`${ctx.target ?? "!node_modules"}\` is not a valid ripgrep path. Use \`rg "${ctx.pattern}" -g '${glob}' .\` from the repo root (exclude globs need a \`/**\` suffix).`;
-  }
-  if (ctx.kind === "no_matches" && ctx.pattern) {
-    return `No matches for "${ctx.pattern}". Try a broader pattern, drop overly short tokens, or search from the repo root with \`rg "${ctx.pattern}" .\`.`;
-  }
-  return null;
-}
-function extractSearchMetaFromToolLine(line) {
-  const match = line.match(/search\s+"(.+)"\s+in\s+([^()]+?)(?:\s*\(agent\)|\s*failed|$)/iu);
-  if (!match) return null;
-  return `search "${match[1]}" in ${match[2]?.trim()}`;
-}
-function diagnoseRepoSearchFailure(input) {
-  const meta = input.meta?.trim() || (input.command ? extractSearchMetaFromToolLine(input.command) : null) || null;
-  if (meta) {
-    const ctx = classifyRepoSearchMeta(meta);
-    const guidance = formatRepoSearchGuidance(ctx);
-    if (guidance) return guidance;
-    const normalized = metaToNormalizedRgCommand(meta);
-    if (normalized?.changed) {
-      return `Repo search used an invalid scope. Retry with: \`${normalized.command}\`.`;
-    }
-  }
-  if (input.command && /\b(rg|ripgrep)\b/i.test(input.command)) {
-    const normalized = normalizeRepoSearchCommand(input.command);
-    if (normalized.changed) {
-      return `Ripgrep scope may be invalid. Retry with: \`${normalized.command}\`.`;
-    }
-    if (input.exitCode === 1) {
-      return "Ripgrep returned no matches (exit 1). Try a broader pattern or search from the repo root.";
-    }
-  }
-  return null;
-}
-export {
-  classifyRepoSearchMeta,
-  diagnoseRepoSearchFailure,
-  extractSearchMetaFromToolLine,
-  formatRepoSearchGuidance
-};
-//# sourceMappingURL=repo-search.js.map
+var m=new Set(["rg","ripgrep","grep"]),h=new Set(["-e","--regexp","-f","--file","-m","--max-count","-A","--after-context","-B","--before-context","-C","--context","-g","--glob","--iglob"]);function b(e){return e?(e.split("/").pop()??e).replace(/\.exe$/i,"").toLowerCase():null}function R(e){if(!e)return[];let n=[],r="",t,i=!1;for(let o of e){if(i){r+=o,i=!1;continue}if(o==="\\"){i=!0;continue}if(t){o===t?t=void 0:r+=o;continue}if(o==='"'||o==="'"){t=o;continue}if(/\s/.test(o)){r&&(n.push(r),r="");continue}r+=o}return r&&n.push(r),n}function S(e){let n=b(e[0]);return!!(n&&m.has(n))}function c(e){return!e||e.includes("/")||e.includes("*")?!1:/\.(?:json|md|mjs|cjs|js|ts|tsx|yaml|yml)$/iu.test(e)}function l(e){if(!e)return!1;let n=e.trim();return n.startsWith("!")&&!n.includes("/")&&!n.endsWith("/**")}function _(e){if(!e.startsWith("--glob="))return e;let n=e.slice(7);return n.startsWith("!")&&!n.includes("/")&&!n.endsWith("/**")?`--glob=${n}/**`:e}function $(e){let n=[];for(let r=1;r<e.length;r+=1){let t=e[r];if(t){if(t==="--"){n.push(...e.slice(r+1));break}if(t.startsWith("-")){if(t.includes("="))continue;h.has(t)&&(r+=1);continue}n.push(t)}}return n}function x(e){let n=!1,r=e.map(i=>{let o=_(i);return o!==i&&(n=!0),o}),t=$(r);if(t.length===2){let[i,o]=t;if(c(o))return{argv:[r[0]??"rg","-g",o,i,"."],changed:!0}}return{argv:r,changed:n}}function y(e){let n=e.trim();if(!n)return{command:n,changed:!1};let r=n.includes("&&")?" && ":n.includes("||")?" || ":"; ",t=n.split(/\s*(?:&&|\|\||;)\s*/u),i=!1,o=t.map(a=>{let s=R(a.trim());if(!s.length||!S(s))return a;let u=x(s);return u.changed?(i=!0,u.argv.join(" ")):a});return i?{command:o.join(r),changed:!0}:{command:n,changed:!1}}function g(e){if(!e)return{};let n=e.match(/search\s+"(.+)"\s+in\s+([^()]+?)(?:\s*\(|$)/iu);if(n)return{pattern:n[1],target:n[2]?.trim()};let r=e.match(/^search\s+"(.+)"\s+in\s+(.+)$/iu);return r?{pattern:r[1],target:r[2]?.trim()}:{}}function d(e){let{pattern:n,target:r}=g(e);return n?l(r)?{kind:"rg_exclude_syntax",pattern:n,target:r}:c(r)?{kind:"bad_scope",pattern:n,target:r}:{kind:"not_repo_search",pattern:n,target:r}:{kind:"not_repo_search"}}function j(e){let{pattern:n,target:r}=g(e);if(!n)return null;if(l(r)){let t=`${r.trim()}/**`;return{command:`rg "${n}" -g '${t}' .`,changed:!0}}return r&&c(r)?{command:`rg -g ${r} "${n}" .`,changed:!0}:null}function f(e){if(e.kind==="bad_scope"&&e.pattern?.includes("agent-os-land-pr")&&e.target==="package.json")return"Search package.json with a glob from the repo root: `rg -g package.json agent-os-land-pr .` \u2014 or run `node scripts/agent-os-land-pr.mjs <pr-url>` directly.";if(e.kind==="bad_scope"&&e.pattern&&e.target)return`Use \`rg -g '${e.target}' ${e.pattern} .\` from the repo root instead of treating ${e.target} as a folder.`;if(e.kind==="rg_exclude_syntax"&&e.pattern){let n=e.target?`${e.target.trim()}/**`:"!node_modules/**";return`Repo search scope \`${e.target??"!node_modules"}\` is not a valid ripgrep path. Use \`rg "${e.pattern}" -g '${n}' .\` from the repo root (exclude globs need a \`/**\` suffix).`}return e.kind==="no_matches"&&e.pattern?`No matches for "${e.pattern}". Try a broader pattern, drop overly short tokens, or search from the repo root with \`rg "${e.pattern}" .\`.`:null}function p(e){let n=e.match(/search\s+"(.+)"\s+in\s+([^()]+?)(?:\s*\(agent\)|\s*failed|$)/iu);return n?`search "${n[1]}" in ${n[2]?.trim()}`:null}function k(e){let n=e.meta?.trim()||(e.command?p(e.command):null)||null;if(n){let r=d(n),t=f(r);if(t)return t;let i=j(n);if(i?.changed)return`Repo search used an invalid scope. Retry with: \`${i.command}\`.`}if(e.command&&/\b(rg|ripgrep)\b/i.test(e.command)){let r=y(e.command);if(r.changed)return`Ripgrep scope may be invalid. Retry with: \`${r.command}\`.`;if(e.exitCode===1)return"Ripgrep returned no matches (exit 1). Try a broader pattern or search from the repo root."}return null}export{d as classifyRepoSearchMeta,k as diagnoseRepoSearchFailure,p as extractSearchMetaFromToolLine,f as formatRepoSearchGuidance};

package/dist/server/worker-policy.js

@@ -1,432 +1 @@
-var __getOwnPropNames = Object.getOwnPropertyNames;
-var __esm = (fn, res) => function __init() {
-  return fn && (res = (0, fn[__getOwnPropNames(fn)[0]])(fn = 0)), res;
-};
-
-// src/worker-env.ts
-function isForbiddenWorkerEnvKey(key) {
-  if (FORBIDDEN_KEY_SET.has(key)) return true;
-  return FORBIDDEN_SUFFIXES.some((suffix) => key.endsWith(suffix));
-}
-function listForbiddenWorkerEnvKeys(env) {
-  return Object.keys(env).filter(isForbiddenWorkerEnvKey).sort();
-}
-function scrubWorkerEnv(env) {
-  const next = { ...env };
-  for (const key of Object.keys(next)) {
-    if (isForbiddenWorkerEnvKey(key)) delete next[key];
-  }
-  return next;
-}
-function auditWorkerEnv(env) {
-  const forbiddenPresent = listForbiddenWorkerEnvKeys(env);
-  return { forbiddenPresent, safe: forbiddenPresent.length === 0 };
-}
-var FORBIDDEN_WORKER_ENV_KEYS, FORBIDDEN_KEY_SET, FORBIDDEN_SUFFIXES;
-var init_worker_env = __esm({
-  "src/worker-env.ts"() {
-    "use strict";
-    FORBIDDEN_WORKER_ENV_KEYS = [
-      "ANTHROPIC_API_KEY",
-      "ANALYST_API_KEY",
-      "RECRUITER_API_KEY",
-      "AUTH_SECRET",
-      "NEXTAUTH_SECRET",
-      "DATABASE_URL",
-      "PRODUCTION_DATABASE_URL",
-      "KYNVER_PRODUCTION_DATABASE_URL",
-      "REDIS_URL",
-      "GOOGLE_CLIENT_SECRET",
-      "GITHUB_CLIENT_SECRET",
-      "KYNVER_API_KEY",
-      "KYNVER_SERVICE_SECRET",
-      "KYNVER_RUNTIME_SECRET",
-      "KYNVER_CRON_SECRET",
-      "OPENCLAW_CRON_SECRET",
-      "QSTASH_TOKEN",
-      "QSTASH_CURRENT_SIGNING_KEY",
-      "QSTASH_NEXT_SIGNING_KEY",
-      "TOOL_SECRETS_KEK",
-      "TOOL_EXECUTOR_DISPATCH_SECRET",
-      "CLOUDFLARE_API_TOKEN",
-      "STRIPE_SECRET_KEY",
-      "STRIPE_WEBHOOK_SECRET",
-      "STRIPE_IDENTITY_WEBHOOK_SECRET",
-      "VOYAGE_API_KEY",
-      "PERPLEXITY_API_KEY",
-      "FRED_API_KEY",
-      "FMP_API_KEY",
-      "CURSOR_API_KEY"
-    ];
-    FORBIDDEN_KEY_SET = new Set(FORBIDDEN_WORKER_ENV_KEYS);
-    FORBIDDEN_SUFFIXES = ["_SECRET", "_API_KEY"];
-  }
-});
-
-// src/util.ts
-var init_util = __esm({
-  "src/util.ts"() {
-    "use strict";
-  }
-});
-
-// src/git.ts
-var init_git = __esm({
-  "src/git.ts"() {
-    "use strict";
-    init_util();
-    init_worker_env();
-  }
-});
-
-// src/path-values.ts
-var init_path_values = __esm({
-  "src/path-values.ts"() {
-    "use strict";
-  }
-});
-
-// src/default-repo-discovery.ts
-var init_default_repo_discovery = __esm({
-  "src/default-repo-discovery.ts"() {
-    "use strict";
-    init_git();
-    init_path_values();
-  }
-});
-
-// src/box-identity.ts
-var init_box_identity = __esm({
-  "src/box-identity.ts"() {
-    "use strict";
-  }
-});
-
-// src/bounded-build/meminfo.ts
-var init_meminfo = __esm({
-  "src/bounded-build/meminfo.ts"() {
-    "use strict";
-  }
-});
-
-// src/wsl-host.ts
-var DEFAULT_WSL_HOST_WARN_FREE_BYTES, DEFAULT_WSL_HOST_CRITICAL_FREE_BYTES;
-var init_wsl_host = __esm({
-  "src/wsl-host.ts"() {
-    "use strict";
-    DEFAULT_WSL_HOST_WARN_FREE_BYTES = 25 * 1024 * 1024 * 1024;
-    DEFAULT_WSL_HOST_CRITICAL_FREE_BYTES = 12 * 1024 * 1024 * 1024;
-  }
-});
-
-// src/disk-gate.ts
-var DEFAULT_WARN_FREE_BYTES, DEFAULT_CRITICAL_FREE_BYTES;
-var init_disk_gate = __esm({
-  "src/disk-gate.ts"() {
-    "use strict";
-    init_wsl_host();
-    DEFAULT_WARN_FREE_BYTES = 30 * 1024 * 1024 * 1024;
-    DEFAULT_CRITICAL_FREE_BYTES = 15 * 1024 * 1024 * 1024;
-  }
-});
-
-// src/paths.ts
-import { homedir } from "node:os";
-import path from "node:path";
-var LEGACY_ROOT;
-var init_paths = __esm({
-  "src/paths.ts"() {
-    "use strict";
-    init_config();
-    init_path_values();
-    init_util();
-    LEGACY_ROOT = path.join(homedir(), ".openclaw", "harness");
-  }
-});
-
-// src/run-store.ts
-var init_run_store = __esm({
-  "src/run-store.ts"() {
-    "use strict";
-    init_paths();
-    init_util();
-  }
-});
-
-// src/run-worker-index.ts
-var init_run_worker_index = __esm({
-  "src/run-worker-index.ts"() {
-    "use strict";
-    init_run_store();
-    init_util();
-  }
-});
-
-// src/heartbeat-final-result.ts
-var init_heartbeat_final_result = __esm({
-  "src/heartbeat-final-result.ts"() {
-    "use strict";
-  }
-});
-
-// src/heartbeat.ts
-var init_heartbeat = __esm({
-  "src/heartbeat.ts"() {
-    "use strict";
-    init_heartbeat_final_result();
-    init_util();
-  }
-});
-
-// src/repo-search.ts
-var init_repo_search = __esm({
-  "src/repo-search.ts"() {
-    "use strict";
-  }
-});
-
-// src/shell-command-outcome.ts
-var init_shell_command_outcome = __esm({
-  "src/shell-command-outcome.ts"() {
-    "use strict";
-    init_repo_search();
-  }
-});
-
-// src/stream.ts
-var init_stream = __esm({
-  "src/stream.ts"() {
-    "use strict";
-    init_shell_command_outcome();
-    init_util();
-  }
-});
-
-// src/exit-classify.ts
-var init_exit_classify = __esm({
-  "src/exit-classify.ts"() {
-    "use strict";
-  }
-});
-
-// src/exited-salvage.ts
-var init_exited_salvage = __esm({
-  "src/exited-salvage.ts"() {
-    "use strict";
-  }
-});
-
-// src/landing-gate.ts
-var init_landing_gate = __esm({
-  "src/landing-gate.ts"() {
-    "use strict";
-  }
-});
-
-// src/worker-final-result-embed.ts
-var init_worker_final_result_embed = __esm({
-  "src/worker-final-result-embed.ts"() {
-    "use strict";
-  }
-});
-
-// src/landing-contract-gate.ts
-var init_landing_contract_gate = __esm({
-  "src/landing-contract-gate.ts"() {
-    "use strict";
-    init_worker_final_result_embed();
-  }
-});
-
-// src/status.ts
-var init_status = __esm({
-  "src/status.ts"() {
-    "use strict";
-    init_heartbeat();
-    init_stream();
-    init_exit_classify();
-    init_exited_salvage();
-    init_git();
-    init_landing_gate();
-    init_landing_contract_gate();
-    init_worker_final_result_embed();
-    init_util();
-  }
-});
-
-// src/harness-worker-active.ts
-var init_harness_worker_active = __esm({
-  "src/harness-worker-active.ts"() {
-    "use strict";
-    init_status();
-  }
-});
-
-// src/resource-gate.ts
-var DEFAULT_PER_WORKER_MEM_BYTES, DEFAULT_MEM_RESERVE_BYTES;
-var init_resource_gate = __esm({
-  "src/resource-gate.ts"() {
-    "use strict";
-    init_meminfo();
-    init_config();
-    init_box_identity();
-    init_worker_cap_source();
-    init_disk_gate();
-    init_run_store();
-    init_run_worker_index();
-    init_harness_worker_active();
-    init_util();
-    DEFAULT_PER_WORKER_MEM_BYTES = 500 * 1024 * 1024;
-    DEFAULT_MEM_RESERVE_BYTES = 4 * 1024 * 1024 * 1024;
-  }
-});
-
-// src/worker-cap-source.ts
-var init_worker_cap_source = __esm({
-  "src/worker-cap-source.ts"() {
-    "use strict";
-    init_resource_gate();
-  }
-});
-
-// src/config.ts
-import { homedir as homedir2, totalmem } from "node:os";
-import path2 from "node:path";
-var CONFIG_DIR, CONFIG_FILE, CREDENTIALS_FILE, SETUP_PER_WORKER_MEM_BYTES, SETUP_MEM_RESERVE_BYTES;
-var init_config = __esm({
-  "src/config.ts"() {
-    "use strict";
-    init_default_repo_discovery();
-    init_path_values();
-    init_util();
-    init_box_identity();
-    init_worker_cap_source();
-    init_disk_gate();
-    CONFIG_DIR = path2.join(homedir2(), ".kynver");
-    CONFIG_FILE = path2.join(CONFIG_DIR, "config.json");
-    CREDENTIALS_FILE = path2.join(CONFIG_DIR, "credentials");
-    SETUP_PER_WORKER_MEM_BYTES = 500 * 1024 * 1024;
-    SETUP_MEM_RESERVE_BYTES = 4 * 1024 * 1024 * 1024;
-  }
-});
-
-// src/server/worker-policy.ts
-init_worker_env();
-
-// src/model-routing.ts
-init_config();
-
-// src/providers/claude.ts
-init_worker_env();
-init_util();
-
-// src/providers/codex.ts
-init_worker_env();
-init_util();
-
-// src/providers/hermes-codex.ts
-init_worker_env();
-init_util();
-var HERMES_OPENAI_CODEX_DEFAULT_MODEL = process.env.KYNVER_CODEX_DEFAULT_MODEL?.trim() || "gpt-5.4";
-
-// src/providers/codex.ts
-function resolveCodexDefaultModel() {
-  return process.env.KYNVER_CODEX_DEFAULT_MODEL?.trim() || "gpt-5.4";
-}
-var CODEX_DEFAULT_MODEL = resolveCodexDefaultModel();
-
-// src/model-routing.ts
-var CURSOR_DEFAULT_MODEL = "composer-2.5";
-
-// src/worker-provider-policy.ts
-var DEFAULT_WORKER_PROVIDER = "cursor";
-var CLAUDE_FAMILY = /* @__PURE__ */ new Set(["claude", "opus", "anthropic"]);
-var TASK_OVERRIDE_MARKERS = [
-  /\[worker-provider:\s*claude\]/i,
-  /\[use-claude-worker\]/i,
-  /\[operator-worker-provider:\s*claude\]/i
-];
-function taskString(task, key) {
-  const v = task[key];
-  return typeof v === "string" ? v.trim() : "";
-}
-function isClaudeFamilyProvider(provider) {
-  if (!provider?.trim()) return false;
-  const normalized = provider.trim().toLowerCase();
-  if (CLAUDE_FAMILY.has(normalized)) return true;
-  return normalized.includes("claude") || normalized.includes("opus");
-}
-function taskAllowsClaudeWorker(task) {
-  if (!task) return false;
-  const override = task.workerProviderOverride;
-  if (typeof override === "string" && isClaudeFamilyProvider(override)) return true;
-  const ref = taskString(task, "executorRef").toLowerCase();
-  if (ref === "provider:claude" || ref.startsWith("provider:claude:")) return true;
-  if (ref.includes("claude-worker-override") || ref.includes("operator-claude")) return true;
-  const description = taskString(task, "description");
-  if (TASK_OVERRIDE_MARKERS.some((re) => re.test(description))) return true;
-  const title = taskString(task, "title");
-  if (/\[use-claude-worker\]/i.test(title)) return true;
-  return false;
-}
-function coerceCursorModel(model, ruleSuffix) {
-  const coerced = {
-    provider: DEFAULT_WORKER_PROVIDER,
-    model: CURSOR_DEFAULT_MODEL,
-    rule: `policy:cursor_default${ruleSuffix}`,
-    requestedModel: model
-  };
-  return coerced;
-}
-function enforceCursorWorkerProvider(input) {
-  const { routing, task } = input;
-  const explicit = input.explicitProvider?.trim().toLowerCase();
-  if (input.explicitProviderIsOperatorOverride && isClaudeFamilyProvider(explicit)) {
-    return {
-      ...routing,
-      provider: "claude",
-      rule: routing.rule.startsWith("explicit:") ? routing.rule : "explicit:operator_provider"
-    };
-  }
-  if (taskAllowsClaudeWorker(task)) {
-    return routing;
-  }
-  if (routing.rule === "explicit:cli" && isClaudeFamilyProvider(routing.provider)) {
-    return routing;
-  }
-  if (!isClaudeFamilyProvider(routing.provider)) {
-    return routing;
-  }
-  const suffix = routing.rule && routing.rule !== "default:global" ? `:${routing.rule.replace(/:/g, "_")}` : "";
-  return coerceCursorModel(routing.model, suffix);
-}
-function resolveConfiguredWorkerProvider(configured, fallback = DEFAULT_WORKER_PROVIDER) {
-  const trimmed = configured?.trim();
-  if (!trimmed) return fallback;
-  if (isClaudeFamilyProvider(trimmed)) return DEFAULT_WORKER_PROVIDER;
-  if (trimmed === "codex") return "codex";
-  return trimmed;
-}
-function preferCursorExecutor(executors) {
-  const unique = [...new Set(executors.map((e) => e.trim().toLowerCase()).filter(Boolean))];
-  if (unique.includes(DEFAULT_WORKER_PROVIDER)) {
-    return [...new Set(unique.map((e) => isClaudeFamilyProvider(e) ? DEFAULT_WORKER_PROVIDER : e))];
-  }
-  if (unique.every((e) => isClaudeFamilyProvider(e))) {
-    return [DEFAULT_WORKER_PROVIDER];
-  }
-  return unique;
-}
-export {
-  DEFAULT_WORKER_PROVIDER,
-  auditWorkerEnv,
-  enforceCursorWorkerProvider,
-  isClaudeFamilyProvider,
-  isForbiddenWorkerEnvKey,
-  listForbiddenWorkerEnvKeys,
-  preferCursorExecutor,
-  resolveConfiguredWorkerProvider,
-  scrubWorkerEnv,
-  taskAllowsClaudeWorker
-};
-//# sourceMappingURL=worker-policy.js.map
+var t=(r,e)=>()=>(r&&(e=r(r=0)),e);function h(r){return ee.has(r)?!0:re.some(e=>r.endsWith(e))}function O(r){return Object.keys(r).filter(h).sort()}function c(r){let e={...r};for(let n of Object.keys(e))h(n)&&delete e[n];return e}function te(r){let e=O(r);return{forbiddenPresent:e,safe:e.length===0}}var Z,ee,re,a=t(()=>{"use strict";Z=["ANTHROPIC_API_KEY","ANALYST_API_KEY","RECRUITER_API_KEY","AUTH_SECRET","NEXTAUTH_SECRET","DATABASE_URL","PRODUCTION_DATABASE_URL","KYNVER_PRODUCTION_DATABASE_URL","REDIS_URL","GOOGLE_CLIENT_SECRET","GITHUB_CLIENT_SECRET","KYNVER_API_KEY","KYNVER_SERVICE_SECRET","KYNVER_RUNTIME_SECRET","KYNVER_CRON_SECRET","OPENCLAW_CRON_SECRET","QSTASH_TOKEN","QSTASH_CURRENT_SIGNING_KEY","QSTASH_NEXT_SIGNING_KEY","TOOL_SECRETS_KEK","TOOL_EXECUTOR_DISPATCH_SECRET","CLOUDFLARE_API_TOKEN","STRIPE_SECRET_KEY","STRIPE_WEBHOOK_SECRET","STRIPE_IDENTITY_WEBHOOK_SECRET","VOYAGE_API_KEY","PERPLEXITY_API_KEY","FRED_API_KEY","FMP_API_KEY","CURSOR_API_KEY"],ee=new Set(Z),re=["_SECRET","_API_KEY"]});var o=t(()=>{"use strict"});var b=t(()=>{"use strict";o();a()});var u=t(()=>{"use strict"});var P=t(()=>{"use strict";b();u()});var k=t(()=>{"use strict"});var w=t(()=>{"use strict"});var De,Le,I=t(()=>{"use strict";De=25*1024*1024*1024,Le=12*1024*1024*1024});var Ye,Ge,R=t(()=>{"use strict";I();Ye=30*1024*1024*1024,Ge=15*1024*1024*1024});import{homedir as oe}from"node:os";import ie from"node:path";var Ze,B=t(()=>{"use strict";d();u();o();Ze=ie.join(oe(),".openclaw","harness")});var x=t(()=>{"use strict";B();o()});var T=t(()=>{"use strict";x();o()});var W=t(()=>{"use strict"});var M=t(()=>{"use strict";W();o()});var K=t(()=>{"use strict"});var U=t(()=>{"use strict";K()});var F=t(()=>{"use strict";U();o()});var D=t(()=>{"use strict"});var L=t(()=>{"use strict"});var $=t(()=>{"use strict"});var _=t(()=>{"use strict"});var H=t(()=>{"use strict";_()});var j=t(()=>{"use strict";M();F();D();L();b();$();H();_();o()});var Y=t(()=>{"use strict";j()});var de,me,G=t(()=>{"use strict";w();d();k();S();R();x();T();Y();o();de=500*1024*1024,me=4*1024*1024*1024});var S=t(()=>{"use strict";G()});import{homedir as fe,totalmem as Ft}from"node:os";import C from"node:path";var V,Vt,zt,Jt,qt,d=t(()=>{"use strict";P();u();o();k();S();R();V=C.join(fe(),".kynver"),Vt=C.join(V,"config.json"),zt=C.join(V,"credentials"),Jt=500*1024*1024,qt=4*1024*1024*1024});a();d();a();o();a();o();a();o();var Yn=process.env.KYNVER_CODEX_DEFAULT_MODEL?.trim()||"gpt-5.4";function be(){return process.env.KYNVER_CODEX_DEFAULT_MODEL?.trim()||"gpt-5.4"}var ke=be();var q="composer-2.5";var s="cursor",Re=new Set(["claude","opus","anthropic"]),ve=[/\[worker-provider:\s*claude\]/i,/\[use-claude-worker\]/i,/\[operator-worker-provider:\s*claude\]/i];function A(r,e){let n=r[e];return typeof n=="string"?n.trim():""}function i(r){if(!r?.trim())return!1;let e=r.trim().toLowerCase();return Re.has(e)?!0:e.includes("claude")||e.includes("opus")}function E(r){if(!r)return!1;let e=r.workerProviderOverride;if(typeof e=="string"&&i(e))return!0;let n=A(r,"executorRef").toLowerCase();if(n==="provider:claude"||n.startsWith("provider:claude:")||n.includes("claude-worker-override")||n.includes("operator-claude"))return!0;let p=A(r,"description");if(ve.some(Q=>Q.test(p)))return!0;let g=A(r,"title");return!!/\[use-claude-worker\]/i.test(g)}function xe(r,e){return{provider:s,model:q,rule:`policy:cursor_default${e}`,requestedModel:r}}function X(r){let{routing:e,task:n}=r,p=r.explicitProvider?.trim().toLowerCase();if(r.explicitProviderIsOperatorOverride&&i(p))return{...e,provider:"claude",rule:e.rule.startsWith("explicit:")?e.rule:"explicit:operator_provider"};if(E(n)||e.rule==="explicit:cli"&&i(e.provider)||!i(e.provider))return e;let g=e.rule&&e.rule!=="default:global"?`:${e.rule.replace(/:/g,"_")}`:"";return xe(e.model,g)}function _e(r,e=s){let n=r?.trim();return n?i(n)?s:n==="codex"?"codex":n:e}function Se(r){let e=[...new Set(r.map(n=>n.trim().toLowerCase()).filter(Boolean))];return e.includes(s)?[...new Set(e.map(n=>i(n)?s:n))]:e.every(n=>i(n))?[s]:e}export{s as DEFAULT_WORKER_PROVIDER,te as auditWorkerEnv,X as enforceCursorWorkerProvider,i as isClaudeFamilyProvider,h as isForbiddenWorkerEnvKey,O as listForbiddenWorkerEnvKeys,Se as preferCursorExecutor,_e as resolveConfiguredWorkerProvider,c as scrubWorkerEnv,E as taskAllowsClaudeWorker};