@kynver-app/runtime 0.1.123 → 0.1.128

package/dist/server/memory-cost-enforce.js

@@ -1,480 +1,2 @@
-// src/installed-package-versions.ts
-import { readFile } from "node:fs/promises";
-import { homedir as homedir3 } from "node:os";
-import path4 from "node:path";
-
-// src/memory-cost-package-version-guard.ts
-import { existsSync as existsSync2, readFileSync as readFileSync2 } from "node:fs";
-import path3 from "node:path";
-
-// src/default-repo-discovery.ts
-import { existsSync, readFileSync } from "node:fs";
-import { homedir as homedir2 } from "node:os";
-import path2 from "node:path";
-import { fileURLToPath } from "node:url";
-
-// src/git.ts
-import { spawnSync } from "node:child_process";
-
-// src/util.ts
-function hiddenSpawnOptions(opts) {
-  if (process.platform !== "win32") return opts;
-  return { windowsHide: true, ...opts };
-}
-
-// src/worker-env.ts
-var FORBIDDEN_WORKER_ENV_KEYS = [
-  "ANTHROPIC_API_KEY",
-  "ANALYST_API_KEY",
-  "RECRUITER_API_KEY",
-  "AUTH_SECRET",
-  "NEXTAUTH_SECRET",
-  "DATABASE_URL",
-  "PRODUCTION_DATABASE_URL",
-  "KYNVER_PRODUCTION_DATABASE_URL",
-  "REDIS_URL",
-  "GOOGLE_CLIENT_SECRET",
-  "GITHUB_CLIENT_SECRET",
-  "KYNVER_API_KEY",
-  "KYNVER_SERVICE_SECRET",
-  "KYNVER_RUNTIME_SECRET",
-  "KYNVER_CRON_SECRET",
-  "OPENCLAW_CRON_SECRET",
-  "QSTASH_TOKEN",
-  "QSTASH_CURRENT_SIGNING_KEY",
-  "QSTASH_NEXT_SIGNING_KEY",
-  "TOOL_SECRETS_KEK",
-  "TOOL_EXECUTOR_DISPATCH_SECRET",
-  "CLOUDFLARE_API_TOKEN",
-  "STRIPE_SECRET_KEY",
-  "STRIPE_WEBHOOK_SECRET",
-  "STRIPE_IDENTITY_WEBHOOK_SECRET",
-  "VOYAGE_API_KEY",
-  "PERPLEXITY_API_KEY",
-  "FRED_API_KEY",
-  "FMP_API_KEY",
-  "CURSOR_API_KEY"
-];
-var FORBIDDEN_KEY_SET = new Set(FORBIDDEN_WORKER_ENV_KEYS);
-
-// src/git.ts
-function gitCapture(cwd, args) {
-  try {
-    const res = spawnSync(
-      "git",
-      args,
-      hiddenSpawnOptions({ cwd, encoding: "utf8" })
-    );
-    return {
-      status: res.status,
-      stdout: res.stdout || "",
-      stderr: res.stderr || "",
-      error: res.error ? res.error.message : null
-    };
-  } catch (error) {
-    return {
-      status: null,
-      stdout: "",
-      stderr: "",
-      error: error.message
-    };
-  }
-}
-
-// src/path-values.ts
-import { homedir } from "node:os";
-import path from "node:path";
-function expandHomePath(value) {
-  if (value === "~") return homedir();
-  if (value.startsWith("~/") || value.startsWith("~\\")) {
-    return path.join(homedir(), value.slice(2));
-  }
-  return value;
-}
-function resolveUserPath(value) {
-  return path.resolve(expandHomePath(value));
-}
-
-// src/default-repo-discovery.ts
-var WELL_KNOWN_REPO_DIRS = [
-  "Kynver",
-  "repos/Kynver",
-  "repos/kynver-source-main",
-  "code/Kynver",
-  "projects/Kynver"
-];
-function readPackageName(repoRoot) {
-  const pkgPath = path2.join(repoRoot, "package.json");
-  if (!existsSync(pkgPath)) return null;
-  try {
-    const pkg = JSON.parse(readFileSync(pkgPath, "utf8"));
-    return typeof pkg.name === "string" ? pkg.name.trim() : null;
-  } catch {
-    return null;
-  }
-}
-function isKynverMonorepoRoot(repoRoot) {
-  return readPackageName(repoRoot) === "kynver";
-}
-function gitRepoRoot(startDir) {
-  const resolvedStart = path2.resolve(startDir);
-  if (!existsSync(resolvedStart)) return null;
-  const probe = gitCapture(resolvedStart, ["rev-parse", "--show-toplevel"]);
-  if (probe.status !== 0) return null;
-  const root = probe.stdout.trim();
-  return root.length ? path2.resolve(root) : null;
-}
-function resolveRuntimePackageRoot(moduleUrl = import.meta.url) {
-  let dir = path2.dirname(fileURLToPath(moduleUrl));
-  for (let depth = 0; depth < 8; depth += 1) {
-    const pkgPath = path2.join(dir, "package.json");
-    if (existsSync(pkgPath)) {
-      try {
-        const pkg = JSON.parse(readFileSync(pkgPath, "utf8"));
-        if (pkg.name === "@kynver-app/runtime") return dir;
-      } catch {
-      }
-    }
-    const parent = path2.dirname(dir);
-    if (parent === dir) break;
-    dir = parent;
-  }
-  return null;
-}
-function pushCandidate(seen, out, repo, source) {
-  if (!repo) return;
-  const resolved = path2.resolve(repo);
-  if (seen.has(resolved)) return;
-  if (!isKynverMonorepoRoot(resolved)) return;
-  seen.add(resolved);
-  out.push({ repo: resolved, source });
-}
-function discoverDefaultRepoCandidates(opts) {
-  const cwd = opts?.cwd ?? process.cwd();
-  const seen = /* @__PURE__ */ new Set();
-  const candidates = [];
-  pushCandidate(seen, candidates, gitRepoRoot(cwd), "cwd_git");
-  const runtimePkgRoot = resolveRuntimePackageRoot(opts?.runtimeModuleUrl ?? import.meta.url);
-  if (runtimePkgRoot) {
-    pushCandidate(seen, candidates, gitRepoRoot(runtimePkgRoot), "runtime_checkout");
-  }
-  const home = homedir2();
-  for (const rel of WELL_KNOWN_REPO_DIRS) {
-    pushCandidate(seen, candidates, resolveUserPath(path2.join(home, rel)), "well_known_path");
-  }
-  return candidates;
-}
-function discoverDefaultRepo(opts) {
-  return discoverDefaultRepoCandidates(opts)[0] ?? null;
-}
-
-// src/memory-cost-package-version-guard.ts
-var MEMORY_COST_PACKAGE_MIN_VERSIONS = {
-  "@kynver-app/runtime": "0.1.83",
-  "@kynver-app/openclaw-agent-os": "0.1.43",
-  "@kynver-app/mcp-agent-os": "0.3.34"
-};
-var MEMORY_COST_MANAGED_PACKAGES = Object.keys(
-  MEMORY_COST_PACKAGE_MIN_VERSIONS
-);
-var DISPLAY_NAMES = {
-  "@kynver-app/runtime": "Kynver runtime",
-  "@kynver-app/openclaw-agent-os": "OpenClaw AgentOS plugin",
-  "@kynver-app/mcp-agent-os": "AgentOS MCP server"
-};
-var REPO_PACKAGE_JSON_RELATIVE = {
-  "@kynver-app/runtime": "packages/kynver-runtime/package.json",
-  "@kynver-app/openclaw-agent-os": "packages/kynver-openclaw-agent-os/package.json",
-  "@kynver-app/mcp-agent-os": "packages/kynver-mcp-agent-os/package.json"
-};
-function parseSemverParts(version) {
-  const core = version.trim().split("-")[0]?.split("+")[0];
-  if (!core) return null;
-  const parts = core.split(".");
-  if (parts.length < 1 || parts.length > 3) return null;
-  const nums = parts.map((p) => Number.parseInt(p, 10));
-  if (nums.some((n) => !Number.isFinite(n) || n < 0)) return null;
-  while (nums.length < 3) nums.push(0);
-  return [nums[0], nums[1], nums[2]];
-}
-function compareSemver(a, b) {
-  const pa = parseSemverParts(a);
-  const pb = parseSemverParts(b);
-  if (!pa || !pb) return 0;
-  for (let i = 0; i < 3; i += 1) {
-    if (pa[i] > pb[i]) return 1;
-    if (pa[i] < pb[i]) return -1;
-  }
-  return 0;
-}
-function semverAtLeast(version, minimum) {
-  return compareSemver(version, minimum) >= 0;
-}
-function maxSemver(versions) {
-  let best = null;
-  for (const version of versions) {
-    if (!best || compareSemver(version, best) > 0) best = version;
-  }
-  return best;
-}
-function readPackageJsonVersion(packageJsonPath) {
-  try {
-    const parsed = JSON.parse(readFileSync2(packageJsonPath, "utf8"));
-    return typeof parsed.version === "string" && parsed.version.trim() ? parsed.version.trim() : null;
-  } catch {
-    return null;
-  }
-}
-function resolveRepoRoot(cwd, explicitRepoRoot) {
-  const candidates = [explicitRepoRoot, process.env.KYNVER_REPO, cwd].filter(
-    (value) => Boolean(value?.trim())
-  );
-  for (const candidate of candidates) {
-    const resolved = path3.resolve(candidate);
-    if (existsSync2(path3.join(resolved, "packages/kynver-runtime/package.json")) && existsSync2(path3.join(resolved, "package.json"))) {
-      return resolved;
-    }
-  }
-  const discovered = discoverDefaultRepo({ cwd });
-  return discovered?.repo ?? null;
-}
-function probeRepoPackageVersions(input = {}) {
-  const cwd = input.cwd ?? process.cwd();
-  const repoRoot = resolveRepoRoot(cwd, input.repoRoot);
-  if (!repoRoot) return {};
-  const out = {};
-  for (const packageName of MEMORY_COST_MANAGED_PACKAGES) {
-    const packageJsonPath = path3.join(repoRoot, REPO_PACKAGE_JSON_RELATIVE[packageName]);
-    const version = readPackageJsonVersion(packageJsonPath);
-    if (!version) continue;
-    out[packageName] = { version, source: "repo", path: packageJsonPath };
-  }
-  return out;
-}
-function repoSourceCommands(packageName) {
-  if (packageName === "@kynver-app/runtime") {
-    return ["npm run kynver:build", "npm run kynver"];
-  }
-  return [`npm run build -w ${packageName}`];
-}
-function buildRemediation(input) {
-  const { packageName, minimumVersion, effectiveVersion, effectiveSource, repoVersion } = input;
-  const lines = [];
-  if (repoVersion && semverAtLeast(repoVersion, minimumVersion)) {
-    lines.push(
-      `Use the monorepo checkout (${repoVersion}) instead of a stale npm install: ${repoSourceCommands(packageName).join("; ")}.`
-    );
-    lines.push("Do not publish npm packages or wait on an operator release.");
-    return lines;
-  }
-  if (effectiveVersion) {
-    lines.push(
-      `Upgrade ${packageName} from ${effectiveVersion} to >= ${minimumVersion} (npm install -g ${packageName}@latest or align OpenClaw npm prefix).`
-    );
-  } else {
-    lines.push(`Install ${packageName} >= ${minimumVersion} before running memory-heavy AgentOS paths.`);
-  }
-  if (packageName === "@kynver-app/runtime") {
-    lines.push("Repo-source alternative: npm run kynver:build && npm run kynver");
-  }
-  if (effectiveSource === "installed" && repoVersion) {
-    lines.push(`Repo checkout reports ${repoVersion}; rebuild/link repo source if you develop from the monorepo.`);
-  }
-  return lines;
-}
-function pickEffectiveCandidate(candidates) {
-  if (candidates.length === 0) return { version: null, source: "unknown" };
-  const best = maxSemver(candidates.map((candidate) => candidate.version));
-  if (!best) return { version: null, source: "unknown" };
-  const winner = candidates.find((candidate) => candidate.version === best) ?? candidates[0];
-  return { version: winner.version, source: winner.source };
-}
-function evaluateMemoryCostPackageVersionGuard(input = {}) {
-  const normalize = (value, fallbackSource) => {
-    if (!value) return null;
-    if (typeof value === "string") return { version: value, source: fallbackSource };
-    return value;
-  };
-  const packages = MEMORY_COST_MANAGED_PACKAGES.map((packageName) => {
-    const minimumVersion = MEMORY_COST_PACKAGE_MIN_VERSIONS[packageName];
-    const candidates = [];
-    const installed = normalize(input.installed?.[packageName], "installed");
-    const repo = normalize(input.repo?.[packageName], "repo");
-    const self = normalize(input.self?.[packageName], "self");
-    if (installed) candidates.push(installed);
-    if (repo) candidates.push(repo);
-    if (self) candidates.push(self);
-    const { version: effectiveVersion, source: effectiveSource } = pickEffectiveCandidate(candidates);
-    const repoVersion = repo?.version ?? null;
-    const ok2 = effectiveVersion ? semverAtLeast(effectiveVersion, minimumVersion) : false;
-    const remediation = ok2 ? [] : buildRemediation({
-      packageName,
-      minimumVersion,
-      effectiveVersion,
-      effectiveSource,
-      repoVersion
-    });
-    const summary2 = ok2 ? `${DISPLAY_NAMES[packageName]} ${effectiveVersion} meets memory-cost minimum ${minimumVersion} (${effectiveSource}).` : `${DISPLAY_NAMES[packageName]} is below memory-cost minimum ${minimumVersion}` + (effectiveVersion ? ` (effective ${effectiveVersion} via ${effectiveSource})` : " (no version detected)") + ".";
-    return {
-      packageName,
-      displayName: DISPLAY_NAMES[packageName],
-      minimumVersion,
-      effectiveVersion,
-      effectiveSource,
-      ok: ok2,
-      summary: summary2,
-      remediation
-    };
-  });
-  const violations = packages.filter((row) => !row.ok);
-  const ok = violations.length === 0;
-  const summary = ok ? "All managed AgentOS packages meet memory-cost minimum versions." : `Memory-cost package guard blocked ${violations.length} stale package(s): ${violations.map((row) => `${row.packageName} < ${row.minimumVersion}`).join("; ")}.`;
-  return { ok, summary, packages };
-}
-var MemoryCostPackageVersionGuardError = class extends Error {
-  result;
-  constructor(result) {
-    const lines = [
-      result.summary,
-      ...result.packages.filter((row) => !row.ok).flatMap((row) => [`- ${row.summary}`, ...row.remediation.map((line) => `  \u2192 ${line}`)])
-    ];
-    super(lines.join("\n"));
-    this.name = "MemoryCostPackageVersionGuardError";
-    this.result = result;
-  }
-};
-function assertMemoryCostPackageVersionGuard(input = {}) {
-  const result = evaluateMemoryCostPackageVersionGuard(input);
-  if (!result.ok) throw new MemoryCostPackageVersionGuardError(result);
-  return result;
-}
-
-// src/installed-package-versions.ts
-var MANAGED_PACKAGES = [
-  "@kynver-app/runtime",
-  "@kynver-app/openclaw-agent-os",
-  "@kynver-app/mcp-agent-os"
-];
-function trim(value) {
-  const out = value?.trim();
-  return out ? out : null;
-}
-function unique(values) {
-  return [...new Set(values.filter((value) => Boolean(value)))];
-}
-function moduleRoots() {
-  const home = homedir3();
-  const openClawPrefix = trim(process.env.KYNVER_OPENCLAW_NPM_ROOT) ?? trim(process.env.OPENCLAW_NPM_ROOT) ?? path4.join(home, ".openclaw", "npm");
-  const npmGlobalRoot = trim(process.env.KYNVER_NPM_GLOBAL_ROOT) ?? trim(process.env.KYNVER_NPM_GLOBAL_MODULES_ROOT) ?? (trim(process.env.NPM_CONFIG_PREFIX) ? path4.join(trim(process.env.NPM_CONFIG_PREFIX), "lib", "node_modules") : path4.join(home, ".npm-global", "lib", "node_modules"));
-  return unique([
-    path4.join(openClawPrefix, "lib", "node_modules"),
-    path4.join(openClawPrefix, "node_modules"),
-    npmGlobalRoot.endsWith("node_modules") ? npmGlobalRoot : path4.join(npmGlobalRoot, "lib", "node_modules")
-  ]);
-}
-async function readVersion(packageJsonPath) {
-  try {
-    const parsed = JSON.parse(await readFile(packageJsonPath, "utf8"));
-    return typeof parsed.version === "string" && parsed.version.trim() ? parsed.version.trim() : null;
-  } catch {
-    return null;
-  }
-}
-function installedPackageJsonCandidates(packageName) {
-  const roots = moduleRoots();
-  const seen = /* @__PURE__ */ new Set();
-  const out = [];
-  for (const root of roots) {
-    const candidate = path4.join(root, packageName, "package.json");
-    if (seen.has(candidate)) continue;
-    seen.add(candidate);
-    out.push(candidate);
-  }
-  return out;
-}
-async function collectInstalledPackageVersions(observedAt = (/* @__PURE__ */ new Date()).toISOString()) {
-  const out = {};
-  for (const packageName of MANAGED_PACKAGES) {
-    let best = null;
-    for (const packageJsonPath of installedPackageJsonCandidates(packageName)) {
-      const version = await readVersion(packageJsonPath);
-      if (!version) continue;
-      if (!best || compareSemver(version, best.version) > 0) {
-        best = { version, path: packageJsonPath };
-      }
-    }
-    if (best) {
-      out[packageName] = { version: best.version, observedAt, path: best.path };
-    }
-  }
-  return out;
-}
-
-// src/package-version.ts
-import { existsSync as existsSync3, readFileSync as readFileSync3 } from "node:fs";
-import { dirname, join } from "node:path";
-import { fileURLToPath as fileURLToPath2 } from "node:url";
-function resolvePackageRoot(moduleUrl) {
-  let dir = dirname(fileURLToPath2(moduleUrl));
-  for (let depth = 0; depth < 6; depth += 1) {
-    if (existsSync3(join(dir, "package.json"))) return dir;
-    const parent = dirname(dir);
-    if (parent === dir) break;
-    dir = parent;
-  }
-  throw new Error(`package.json not found above ${dirname(fileURLToPath2(moduleUrl))}`);
-}
-function readOwnPackageVersion(moduleUrl = import.meta.url) {
-  const pkgPath = join(resolvePackageRoot(moduleUrl), "package.json");
-  const pkg = JSON.parse(readFileSync3(pkgPath, "utf8"));
-  if (typeof pkg.version !== "string" || !pkg.version.trim()) {
-    throw new Error(`Missing package.json version at ${pkgPath}`);
-  }
-  return pkg.version;
-}
-var PACKAGE_VERSION = readOwnPackageVersion();
-
-// src/memory-cost-package-version-guard-enforce.ts
-function installedVersionMap(observed) {
-  const out = {};
-  for (const [packageName, row] of Object.entries(observed)) {
-    if (!row?.version) continue;
-    out[packageName] = {
-      version: row.version,
-      source: "installed",
-      path: row.path
-    };
-  }
-  return out;
-}
-async function buildMemoryCostPackageGuardInput(input = {}) {
-  const [installed, repo] = await Promise.all([
-    collectInstalledPackageVersions(),
-    Promise.resolve(probeRepoPackageVersions({ cwd: input.cwd, repoRoot: input.repoRoot }))
-  ]);
-  const self = {};
-  const runtimeSelfVersion = input.selfPackageName === "@kynver-app/runtime" && input.selfVersion ? input.selfVersion : PACKAGE_VERSION;
-  self["@kynver-app/runtime"] = { version: runtimeSelfVersion, source: "self" };
-  if (input.selfPackageName && input.selfVersion && input.selfPackageName !== "@kynver-app/runtime") {
-    self[input.selfPackageName] = { version: input.selfVersion, source: "self" };
-  }
-  return {
-    installed: installedVersionMap(installed),
-    repo,
-    self
-  };
-}
-async function evaluateMemoryCostPackageGuardAtStartup(input = {}) {
-  const guardInput = await buildMemoryCostPackageGuardInput(input);
-  return evaluateMemoryCostPackageVersionGuard(guardInput);
-}
-async function enforceMemoryCostPackageGuardAtStartup(input = {}) {
-  const guardInput = await buildMemoryCostPackageGuardInput(input);
-  return assertMemoryCostPackageVersionGuard(guardInput);
-}
-export {
-  buildMemoryCostPackageGuardInput,
-  enforceMemoryCostPackageGuardAtStartup,
-  evaluateMemoryCostPackageGuardAtStartup
-};
-//# sourceMappingURL=memory-cost-enforce.js.map
+import{readFile as ge}from"node:fs/promises";import{homedir as de}from"node:os";import l from"node:path";import{existsSync as T,readFileSync as se}from"node:fs";import d from"node:path";import{existsSync as P,readFileSync as I}from"node:fs";import{homedir as Z}from"node:os";import a from"node:path";import{fileURLToPath as q}from"node:url";import{spawnSync as z}from"node:child_process";function M(e){return process.platform!=="win32"?e:{windowsHide:!0,...e}}var X=["ANTHROPIC_API_KEY","ANALYST_API_KEY","RECRUITER_API_KEY","AUTH_SECRET","NEXTAUTH_SECRET","DATABASE_URL","PRODUCTION_DATABASE_URL","KYNVER_PRODUCTION_DATABASE_URL","REDIS_URL","GOOGLE_CLIENT_SECRET","GITHUB_CLIENT_SECRET","KYNVER_API_KEY","KYNVER_SERVICE_SECRET","KYNVER_RUNTIME_SECRET","KYNVER_CRON_SECRET","OPENCLAW_CRON_SECRET","QSTASH_TOKEN","QSTASH_CURRENT_SIGNING_KEY","QSTASH_NEXT_SIGNING_KEY","TOOL_SECRETS_KEK","TOOL_EXECUTOR_DISPATCH_SECRET","CLOUDFLARE_API_TOKEN","STRIPE_SECRET_KEY","STRIPE_WEBHOOK_SECRET","STRIPE_IDENTITY_WEBHOOK_SECRET","VOYAGE_API_KEY","PERPLEXITY_API_KEY","FRED_API_KEY","FMP_API_KEY","CURSOR_API_KEY"],be=new Set(X);function b(e,r){try{let t=z("git",r,M({cwd:e,encoding:"utf8"}));return{status:t.status,stdout:t.stdout||"",stderr:t.stderr||"",error:t.error?t.error.message:null}}catch(t){return{status:null,stdout:"",stderr:"",error:t.message}}}import{homedir as x}from"node:os";import N from"node:path";function Q(e){return e==="~"?x():e.startsWith("~/")||e.startsWith("~\\")?N.join(x(),e.slice(2)):e}function O(e){return N.resolve(Q(e))}var ee=["Kynver","repos/Kynver","repos/kynver-source-main","code/Kynver","projects/Kynver"];function re(e){let r=a.join(e,"package.json");if(!P(r))return null;try{let t=JSON.parse(I(r,"utf8"));return typeof t.name=="string"?t.name.trim():null}catch{return null}}function te(e){return re(e)==="kynver"}function w(e){let r=a.resolve(e);if(!P(r))return null;let t=b(r,["rev-parse","--show-toplevel"]);if(t.status!==0)return null;let n=t.stdout.trim();return n.length?a.resolve(n):null}function ne(e=import.meta.url){let r=a.dirname(q(e));for(let t=0;t<8;t+=1){let n=a.join(r,"package.json");if(P(n))try{if(JSON.parse(I(n,"utf8")).name==="@kynver-app/runtime")return r}catch{}let o=a.dirname(r);if(o===r)break;r=o}return null}function v(e,r,t,n){if(!t)return;let o=a.resolve(t);e.has(o)||te(o)&&(e.add(o),r.push({repo:o,source:n}))}function oe(e){let r=e?.cwd??process.cwd(),t=new Set,n=[];v(t,n,w(r),"cwd_git");let o=ne(e?.runtimeModuleUrl??import.meta.url);o&&v(t,n,w(o),"runtime_checkout");let i=Z();for(let s of ee)v(t,n,O(a.join(i,s)),"well_known_path");return n}function V(e){return oe(e)[0]??null}var D={"@kynver-app/runtime":"0.1.83","@kynver-app/openclaw-agent-os":"0.1.43","@kynver-app/mcp-agent-os":"0.3.34"},K=Object.keys(D),E={"@kynver-app/runtime":"Kynver runtime","@kynver-app/openclaw-agent-os":"OpenClaw AgentOS plugin","@kynver-app/mcp-agent-os":"AgentOS MCP server"},ie={"@kynver-app/runtime":"packages/kynver-runtime/package.json","@kynver-app/openclaw-agent-os":"packages/kynver-openclaw-agent-os/package.json","@kynver-app/mcp-agent-os":"packages/kynver-mcp-agent-os/package.json"};function G(e){let r=e.trim().split("-")[0]?.split("+")[0];if(!r)return null;let t=r.split(".");if(t.length<1||t.length>3)return null;let n=t.map(o=>Number.parseInt(o,10));if(n.some(o=>!Number.isFinite(o)||o<0))return null;for(;n.length<3;)n.push(0);return[n[0],n[1],n[2]]}function f(e,r){let t=G(e),n=G(r);if(!t||!n)return 0;for(let o=0;o<3;o+=1){if(t[o]>n[o])return 1;if(t[o]<n[o])return-1}return 0}function $(e,r){return f(e,r)>=0}function ae(e){let r=null;for(let t of e)(!r||f(t,r)>0)&&(r=t);return r}function ue(e){try{let r=JSON.parse(se(e,"utf8"));return typeof r.version=="string"&&r.version.trim()?r.version.trim():null}catch{return null}}function ce(e,r){let t=[r,process.env.KYNVER_REPO,e].filter(o=>!!o?.trim());for(let o of t){let i=d.resolve(o);if(T(d.join(i,"packages/kynver-runtime/package.json"))&&T(d.join(i,"package.json")))return i}return V({cwd:e})?.repo??null}function j(e={}){let r=e.cwd??process.cwd(),t=ce(r,e.repoRoot);if(!t)return{};let n={};for(let o of K){let i=d.join(t,ie[o]),s=ue(i);s&&(n[o]={version:s,source:"repo",path:i})}return n}function le(e){return e==="@kynver-app/runtime"?["npm run kynver:build","npm run kynver"]:[`npm run build -w ${e}`]}function pe(e){let{packageName:r,minimumVersion:t,effectiveVersion:n,effectiveSource:o,repoVersion:i}=e,s=[];return i&&$(i,t)?(s.push(`Use the monorepo checkout (${i}) instead of a stale npm install: ${le(r).join("; ")}.`),s.push("Do not publish npm packages or wait on an operator release."),s):(n?s.push(`Upgrade ${r} from ${n} to >= ${t} (npm install -g ${r}@latest or align OpenClaw npm prefix).`):s.push(`Install ${r} >= ${t} before running memory-heavy AgentOS paths.`),r==="@kynver-app/runtime"&&s.push("Repo-source alternative: npm run kynver:build && npm run kynver"),o==="installed"&&i&&s.push(`Repo checkout reports ${i}; rebuild/link repo source if you develop from the monorepo.`),s)}function me(e){if(e.length===0)return{version:null,source:"unknown"};let r=ae(e.map(n=>n.version));if(!r)return{version:null,source:"unknown"};let t=e.find(n=>n.version===r)??e[0];return{version:t.version,source:t.source}}function R(e={}){let r=(s,u)=>s?typeof s=="string"?{version:s,source:u}:s:null,t=K.map(s=>{let u=D[s],m=[],_=r(e.installed?.[s],"installed"),y=r(e.repo?.[s],"repo"),A=r(e.self?.[s],"self");_&&m.push(_),y&&m.push(y),A&&m.push(A);let{version:c,source:g}=me(m),B=y?.version??null,k=c?$(c,u):!1,J=k?[]:pe({packageName:s,minimumVersion:u,effectiveVersion:c,effectiveSource:g,repoVersion:B}),W=k?`${E[s]} ${c} meets memory-cost minimum ${u} (${g}).`:`${E[s]} is below memory-cost minimum ${u}`+(c?` (effective ${c} via ${g})`:" (no version detected)")+".";return{packageName:s,displayName:E[s],minimumVersion:u,effectiveVersion:c,effectiveSource:g,ok:k,summary:W,remediation:J}}),n=t.filter(s=>!s.ok),o=n.length===0,i=o?"All managed AgentOS packages meet memory-cost minimum versions.":`Memory-cost package guard blocked ${n.length} stale package(s): ${n.map(s=>`${s.packageName} < ${s.minimumVersion}`).join("; ")}.`;return{ok:o,summary:i,packages:t}}var C=class extends Error{result;constructor(r){let t=[r.summary,...r.packages.filter(n=>!n.ok).flatMap(n=>[`- ${n.summary}`,...n.remediation.map(o=>`  \u2192 ${o}`)])];super(t.join(`
+`)),this.name="MemoryCostPackageVersionGuardError",this.result=r}};function Y(e={}){let r=R(e);if(!r.ok)throw new C(r);return r}var fe=["@kynver-app/runtime","@kynver-app/openclaw-agent-os","@kynver-app/mcp-agent-os"];function p(e){let r=e?.trim();return r||null}function ye(e){return[...new Set(e.filter(r=>!!r))]}function ke(){let e=de(),r=p(process.env.KYNVER_OPENCLAW_NPM_ROOT)??p(process.env.OPENCLAW_NPM_ROOT)??l.join(e,".openclaw","npm"),t=p(process.env.KYNVER_NPM_GLOBAL_ROOT)??p(process.env.KYNVER_NPM_GLOBAL_MODULES_ROOT)??(p(process.env.NPM_CONFIG_PREFIX)?l.join(p(process.env.NPM_CONFIG_PREFIX),"lib","node_modules"):l.join(e,".npm-global","lib","node_modules"));return ye([l.join(r,"lib","node_modules"),l.join(r,"node_modules"),t.endsWith("node_modules")?t:l.join(t,"lib","node_modules")])}async function ve(e){try{let r=JSON.parse(await ge(e,"utf8"));return typeof r.version=="string"&&r.version.trim()?r.version.trim():null}catch{return null}}function Pe(e){let r=ke(),t=new Set,n=[];for(let o of r){let i=l.join(o,e,"package.json");t.has(i)||(t.add(i),n.push(i))}return n}async function L(e=new Date().toISOString()){let r={};for(let t of fe){let n=null;for(let o of Pe(t)){let i=await ve(o);i&&(!n||f(i,n.version)>0)&&(n={version:i,path:o})}n&&(r[t]={version:n.version,observedAt:e,path:n.path})}return r}import{existsSync as Ee,readFileSync as Ce}from"node:fs";import{dirname as S,join as U}from"node:path";import{fileURLToPath as F}from"node:url";function Re(e){let r=S(F(e));for(let t=0;t<6;t+=1){if(Ee(U(r,"package.json")))return r;let n=S(r);if(n===r)break;r=n}throw new Error(`package.json not found above ${S(F(e))}`)}function Se(e=import.meta.url){let r=U(Re(e),"package.json"),t=JSON.parse(Ce(r,"utf8"));if(typeof t.version!="string"||!t.version.trim())throw new Error(`Missing package.json version at ${r}`);return t.version}var H=Se();function he(e){let r={};for(let[t,n]of Object.entries(e))n?.version&&(r[t]={version:n.version,source:"installed",path:n.path});return r}async function h(e={}){let[r,t]=await Promise.all([L(),Promise.resolve(j({cwd:e.cwd,repoRoot:e.repoRoot}))]),n={},o=e.selfPackageName==="@kynver-app/runtime"&&e.selfVersion?e.selfVersion:H;return n["@kynver-app/runtime"]={version:o,source:"self"},e.selfPackageName&&e.selfVersion&&e.selfPackageName!=="@kynver-app/runtime"&&(n[e.selfPackageName]={version:e.selfVersion,source:"self"}),{installed:he(r),repo:t,self:n}}async function _e(e={}){let r=await h(e);return R(r)}async function Ae(e={}){let r=await h(e);return Y(r)}export{h as buildMemoryCostPackageGuardInput,Ae as enforceMemoryCostPackageGuardAtStartup,_e as evaluateMemoryCostPackageGuardAtStartup};