@kynver-app/runtime 0.1.134 → 0.1.139

package/dist/index.js

@@ -1,79 +1,82 @@
-var Oy=Object.defineProperty;var F=(e,r)=>()=>(e&&(r=e(e=0)),r);var Ny=(e,r)=>{for(var t in r)Oy(e,t,{get:r[t],enumerable:!0})};import{existsSync as By,mkdirSync as Wy,readFileSync as ua,readdirSync as SI,statSync as Ku,writeFileSync as Hy}from"node:fs";import ju from"node:path";function fr(e){console.error(e),process.exit(1)}function le(e){return process.platform!=="win32"?e:{windowsHide:!0,...e}}function N(e,r){return e||fr(`missing ${r}`),e}function vt(e){try{return JSON.parse(e)}catch{return null}}function _(e,r){try{return JSON.parse(ua(e,"utf8"))}catch(t){if(arguments.length>1)return r;fr(`failed to read ${e}: ${t.message}`)}}function ce(e,r){Wy(ju.dirname(e),{recursive:!0}),Hy(e,`${JSON.stringify(r,null,2)}
-`)}function R(e){return String(e||"").toLowerCase().replace(/[^a-z0-9._-]+/g,"-").replace(/^-+|-+$/g,"")||"worker"}function Vu(e){return R(`${new Date().toISOString().replace(/[-:]/g,"").replace(/\..+/,"Z")}-${e}`)}function tr(e){return String(e).replace(/\/+$/,"")}function Uo(e){return String(e||"").replace(/\s+/g," ").trim()}function Lo(e){try{return Ku(e).size}catch{return 0}}function Bo(e){try{return Ku(e).mtime.toISOString()}catch{return null}}function Wo(e,r){return By(e)?ua(e,"utf8").split(`
+var _R=Object.defineProperty;var j=(e,r)=>()=>(e&&(r=e(e=0)),r);var xR=(e,r)=>{for(var t in r)_R(e,t,{get:r[t],enumerable:!0})};import{existsSync as NR,mkdirSync as TR,readFileSync as Ia,readdirSync as DO,statSync as yd,writeFileSync as DR}from"node:fs";import Rd from"node:path";function Sr(e){console.error(e),process.exit(1)}function ue(e){return process.platform!=="win32"?e:{windowsHide:!0,...e}}function O(e,r){return e||Sr(`missing ${r}`),e}function It(e){try{return JSON.parse(e)}catch{return null}}function _(e,r){try{return JSON.parse(Ia(e,"utf8"))}catch(t){if(arguments.length>1)return r;Sr(`failed to read ${e}: ${t.message}`)}}function de(e,r){TR(Rd.dirname(e),{recursive:!0}),DR(e,`${JSON.stringify(r,null,2)}
+`)}function R(e){return String(e||"").toLowerCase().replace(/[^a-z0-9._-]+/g,"-").replace(/^-+|-+$/g,"")||"worker"}function bd(e){return R(`${new Date().toISOString().replace(/[-:]/g,"").replace(/\..+/,"Z")}-${e}`)}function sr(e){return String(e).replace(/\/+$/,"")}function zo(e){return String(e||"").replace(/\s+/g," ").trim()}function Xo(e){try{return yd(e).size}catch{return 0}}function Qo(e){try{return yd(e).mtime.toISOString()}catch{return null}}function Zo(e,r){return NR(e)?Ia(e,"utf8").split(`
 `).slice(-r).join(`
-`):""}function Gu(e){return e?ua(ju.resolve(e),"utf8"):""}function Or(e){Atomics.wait(new Int32Array(new SharedArrayBuffer(4)),0,0,e)}function gr(e){return new Promise(r=>setTimeout(r,e))}function $(e){if(!e)return!1;try{return process.kill(e,0),!0}catch{return!1}}function Rn(e,r){try{process.kill(-e,r)}catch{process.kill(e,r)}}function Yu(e){let r=null,t=-1/0;for(let n of e){if(!n)continue;let o=Date.parse(n);Number.isFinite(o)&&o>t&&(t=o,r=n)}return r}function da(e){return Math.max(0,Math.round((Date.now()-e)/1e3))}var w=F(()=>{"use strict"});function pa(e){return Fy.has(e)?!0:$y.some(r=>e.endsWith(r))}function qu(e){return Object.keys(e).filter(pa).sort()}function Ne(e){let r={...e};for(let t of Object.keys(r))pa(t)&&delete r[t];return r}function Ky(e){let r=qu(e);return{forbiddenPresent:r,safe:r.length===0}}function zu(e){return Ne(e)}var Ju,Fy,$y,Nr=F(()=>{"use strict";Ju=["ANTHROPIC_API_KEY","ANALYST_API_KEY","RECRUITER_API_KEY","AUTH_SECRET","NEXTAUTH_SECRET","DATABASE_URL","PRODUCTION_DATABASE_URL","KYNVER_PRODUCTION_DATABASE_URL","REDIS_URL","GOOGLE_CLIENT_SECRET","GITHUB_CLIENT_SECRET","KYNVER_API_KEY","KYNVER_SERVICE_SECRET","KYNVER_RUNTIME_SECRET","KYNVER_CRON_SECRET","OPENCLAW_CRON_SECRET","QSTASH_TOKEN","QSTASH_CURRENT_SIGNING_KEY","QSTASH_NEXT_SIGNING_KEY","TOOL_SECRETS_KEK","TOOL_EXECUTOR_DISPATCH_SECRET","CLOUDFLARE_API_TOKEN","STRIPE_SECRET_KEY","STRIPE_WEBHOOK_SECRET","STRIPE_IDENTITY_WEBHOOK_SECRET","VOYAGE_API_KEY","PERPLEXITY_API_KEY","FRED_API_KEY","FMP_API_KEY","CURSOR_API_KEY"],Fy=new Set(Ju),$y=["_SECRET","_API_KEY"]});import{spawnSync as Qu}from"node:child_process";function ue(e,r,t={}){let n=Qu("git",r,le({cwd:e,encoding:"utf8"}));if(n.status!==0&&!t.allowFailure){let o=`git ${r.join(" ")} failed: ${n.stderr||n.stdout}`;if(t.throwError)throw new Error(o);fr(o)}return n.stdout||""}function Zu(e){ue(e,["rev-parse","--show-toplevel"])}function vn(e){return ue(e,["status","--short"],{allowFailure:!0}).split(`
-`).map(r=>r.trim()).filter(Boolean)}function Q(e,r){try{let t=Qu("git",r,le({cwd:e,encoding:"utf8"}));return{status:t.status,stdout:t.stdout||"",stderr:t.stderr||"",error:t.error?t.error.message:null}}catch(t){return{status:null,stdout:"",stderr:"",error:t.message}}}function Xu(e,r,t){let n=Q(e,["merge-base","--is-ancestor",r,t]);return n.status===0?{isAncestor:!0,error:null}:n.status===1?{isAncestor:!1,error:null}:{isAncestor:null,error:n.error||n.stderr||n.stdout||`git exited ${n.status}`}}function Ho(e,r="origin/main"){let t=typeof r=="string"?{base:r}:r,n=t.baseCommit?.trim()||t.base?.trim()||"origin/main",o=t.baseCommit?.trim()||null;if(!e)return ma(n,"missing worktree path");let s=Q(e,["rev-parse","HEAD"]);if(s.status!==0)return ma(n,s.error||s.stderr||s.stdout||"failed to resolve HEAD");let i;if(o)i=o;else{let f=Q(e,["rev-parse",n]);if(f.status!==0)return ma(n,f.error||f.stderr||f.stdout||`failed to resolve ${n}`,s.stdout.trim());i=f.stdout.trim()}let a=s.stdout.trim();if(a===i)return{checked:!0,base:n,head:a,baseHead:i,baseIsAncestorOfHead:!0,headIsAncestorOfBase:!0,relation:"synced"};let l=Xu(e,i,a),c=Xu(e,a,i),u=l.error||c.error||void 0;if(l.isAncestor==null||c.isAncestor==null)return{checked:!1,base:n,head:a,baseHead:i,baseIsAncestorOfHead:l.isAncestor,headIsAncestorOfBase:c.isAncestor,relation:"unknown",...u?{error:u}:{}};let d=l.isAncestor?"ahead":c.isAncestor?"merged":"diverged";return{checked:!0,base:n,head:a,baseHead:i,baseIsAncestorOfHead:l.isAncestor,headIsAncestorOfBase:c.isAncestor,relation:d,...u?{error:u}:{}}}function ma(e,r,t=null){return{checked:!1,base:e,head:t,baseHead:null,baseIsAncestorOfHead:null,headIsAncestorOfBase:null,relation:"unknown",error:r}}var Ce=F(()=>{"use strict";w();Nr()});import{homedir as fa}from"node:os";import Tr from"node:path";function ed(e){return e==="~"?fa():e.startsWith("~/")||e.startsWith("~\\")?Tr.join(fa(),e.slice(2)):e}function bt(e){return Tr.resolve(ed(e))}function he(e){let r=ed(e),t=Tr.resolve(r),n=Tr.resolve(fa());return t===n?"~":t.startsWith(`${n}${Tr.sep}`)?`~/${Tr.relative(n,t).split(Tr.sep).join("/")}`:t.replace(/\\/g,"/").replace(/^\/home\/[^/]+(?=\/|$)/,"~").replace(/^\/Users\/[^/]+(?=\/|$)/,"~").replace(/^[A-Za-z]:\/home\/[^/]+(?=\/|$)/i,"~").replace(/^[A-Za-z]:\/Users\/[^/]+(?=\/|$)/i,"~")}function Y(e){return he(e)}var nr=F(()=>{"use strict"});import{existsSync as ka,readFileSync as rd}from"node:fs";import{homedir as jy}from"node:os";import hr from"node:path";import{fileURLToPath as Vy}from"node:url";function Yy(e){let r=hr.join(e,"package.json");if(!ka(r))return null;try{let t=JSON.parse(rd(r,"utf8"));return typeof t.name=="string"?t.name.trim():null}catch{return null}}function td(e){return Yy(e)==="kynver"}function ha(e){let r=hr.resolve(e);if(!ka(r))return null;let t=Q(r,["rev-parse","--show-toplevel"]);if(t.status!==0)return null;let n=t.stdout.trim();return n.length?hr.resolve(n):null}function Jy(e=import.meta.url){let r=hr.dirname(Vy(e));for(let t=0;t<8;t+=1){let n=hr.join(r,"package.json");if(ka(n))try{if(JSON.parse(rd(n,"utf8")).name==="@kynver-app/runtime")return r}catch{}let o=hr.dirname(r);if(o===r)break;r=o}return null}function ga(e,r,t,n){if(!t)return;let o=hr.resolve(t);e.has(o)||td(o)&&(e.add(o),r.push({repo:o,source:n}))}function nd(e){let r=e?.cwd??process.cwd(),t=new Set,n=[];ga(t,n,ha(r),"cwd_git");let o=Jy(e?.runtimeModuleUrl??import.meta.url);o&&ga(t,n,ha(o),"runtime_checkout");let s=jy();for(let i of Gy)ga(t,n,bt(hr.join(s,i)),"well_known_path");return n}function kr(e){return nd(e)[0]??null}var Gy,bn=F(()=>{"use strict";Ce();nr();Gy=["Kynver","repos/Kynver","repos/kynver-source-main","code/Kynver","projects/Kynver"]});function wt(e){let r=(e??"").trim().toLowerCase();return r==="ghost"||r==="forge"?r:r.includes("forge")?"forge":r.includes("ghost")||r.includes("openclaw")?"ghost":"forge"}function id(e,r){return e[r]?.trim()||null}function Te(e=process.env,r={}){let t=[],n=r.boxKind?.trim();if(n)return{boxKind:wt(n),source:"config",slugInferenceBlocked:!1,warnings:t};let o=id(e,"KYNVER_BOX_KIND");if(o)return{boxKind:wt(o),source:"env",slugInferenceBlocked:!1,warnings:t};let s=id(e,"KYNVER_AGENT_OS_SLUG");return s&&t.push(`KYNVER_AGENT_OS_SLUG=${s} is a workspace slug, not box identity \u2014 set boxKind via \`kynver setup --box-kind forge|ghost\` or KYNVER_BOX_KIND (defaulting box kind to forge)`),{boxKind:"forge",source:"default",slugInferenceBlocked:!!s,warnings:t}}function je(e={},r=process.env){return Te(r,e).boxKind}var De=F(()=>{"use strict"});import{readFileSync as mR}from"node:fs";import ad from"node:os";function Ct(e){if(e!==void 0){let r=e.match(/^MemAvailable:\s+(\d+)\s*kB/m);return r?Number(r[1])*1024:ad.freemem()}if(process.platform==="linux")try{let t=mR("/proc/meminfo","utf8").match(/^MemAvailable:\s+(\d+)\s*kB/m);if(t)return Number(t[1])*1024}catch{}return ad.freemem()}var jo=F(()=>{"use strict"});import{existsSync as fR,readFileSync as gR,statfsSync as hR}from"node:fs";function dd(){if(process.platform!=="linux")return!1;for(let e of["/proc/sys/kernel/osrelease","/proc/version"])try{if(!fR(e))continue;let r=gR(e,"utf8");if(/microsoft|wsl/i.test(r))return!0}catch{}return!1}function Ea(e={}){if(!(e.forceWsl===void 0?dd():e.forceWsl))return null;let t=e.wslHostMount?.trim()||process.env.KYNVER_WSL_HOST_MOUNT?.trim()||ud,n=e.wslHostFreeWarnBytes??ld,o=e.wslHostFreeCriticalBytes??cd,s=e.statfs??hR,i;try{i=s(t)}catch(g){return{ok:!1,path:t,freeBytes:0,totalBytes:0,usedPercent:100,warnBelowBytes:n,criticalBelowBytes:o,reason:`Windows host disk probe failed at ${t}: ${g.message}`,probeError:g.message}}let a=Number(i.bavail)*Number(i.bsize),l=Number(i.blocks)*Number(i.bsize),c=l>0?(l-a)/l*100:100,u=a<n,d=a<o,f=!u&&!d,m=(a/(1024*1024*1024)).toFixed(1),p=null;return f||(p=`Windows host disk ${t} at ${d?"critical":"warning"}: ${m} GiB free (<${(d?o:n)/1024/1024/1024} GiB); WSL VHDX cannot grow safely. ${pd()}`),{ok:f,path:t,freeBytes:a,totalBytes:l,usedPercent:c,warnBelowBytes:n,criticalBelowBytes:o,reason:p,probeError:null}}function pd(){return"Recovery: 1) free Windows C: (empty Recycle Bin / Storage Sense / clear %TEMP%); 2) shut down WSL (`wsl --shutdown`) then compact the VHDX (`Optimize-VHD` or `diskpart compact vdisk`); 3) clear local node_modules / .next / harness worktrees before restarting workers. Full runbook: docs/runbooks/wsl-disk-pressure.md."}var ld,cd,ud,Pa=F(()=>{"use strict";ld=25*1024*1024*1024,cd=12*1024*1024*1024,ud="/mnt/c"});import{statfsSync as kR}from"node:fs";function Me(e={}){let r=e.diskPath?.trim()||"/",t=e.diskFreeWarnBytes??yR,n=e.diskFreeCriticalBytes??RR,o=e.diskMaxUsedPercent??vR,s=e.diskHardMaxUsedPercent??bR,i=kR(r),a=Number(i.bavail)*Number(i.bsize),l=Number(i.blocks)*Number(i.bsize),c=l>0?(l-a)/l*100:100,u=a<t,d=a<n,f=a<t*2,m=f&&c>o,p=f&&c>s,g=!u&&!d&&!m&&!p,k=e.skipWslHostCheck?null:Ea(e.wslHost),h=g&&(k?k.ok:!0),S=null;return h||(S=[d?`free space below critical ${n} bytes`:null,u?`free space below warning ${t} bytes`:null,p?`used percent above hard cap ${s}%`:null,m?`used percent above cap ${o}%`:null,k&&!k.ok?k.reason:null].filter(Boolean).join("; ")),SR({ok:h,path:r,freeBytes:a,totalBytes:l,usedPercent:c,warnBelowBytes:t,criticalBelowBytes:n,maxUsedPercent:o,hardMaxUsedPercent:s,reason:S,wslHost:k})}function SR(e){let r=process.env.KYNVER_DISPATCH_DISK_GATE_FORCE?.trim().toLowerCase();return r?r==="ok"||r==="open"||r==="none"?e.ok?e:{...e,ok:!0,reason:`disk gate forced open by KYNVER_DISPATCH_DISK_GATE_FORCE (suppressed: ${e.reason??"no reason"})`}:r==="block"||r==="pressured"?{...e,ok:!1,reason:`disk gate forced closed by KYNVER_DISPATCH_DISK_GATE_FORCE${e.reason?` (underlying: ${e.reason})`:""}`}:e:e}var yR,RR,vR,bR,_t=F(()=>{"use strict";Pa();yR=30*1024*1024*1024,RR=15*1024*1024*1024,vR=80,bR=90});import{existsSync as md}from"node:fs";import{homedir as gd}from"node:os";import yr from"node:path";function te(e){let r=yr.resolve(bt(e.trim()));for(;wR.has(yr.basename(r));)r=yr.dirname(r);return r}function de(){let e=process.env.KYNVER_HARNESS_ROOT||process.env.OPUS_HARNESS_ROOT;if(e)return te(e);let r=v().harnessRoot?.trim();if(r)return te(r);let t=yr.join(gd(),".kynver","harness");return md(t)?t:md(fd)?fd:t}function pe(e){return yr.join(te(e),"runs")}function or(e){return yr.join(te(e),"worktrees")}function Mr(){let e=de();return{harnessRoot:e,runsDir:pe(e),worktreesDir:or(e)}}function xt(e,r){return yr.join(e,R(r))}var fd,wR,ke=F(()=>{"use strict";O();nr();w();fd=yr.join(gd(),".openclaw","harness"),wR=new Set(["runs","worktrees"])});import{existsSync as CR,readdirSync as _R,statSync as xR}from"node:fs";import Et from"node:path";function oe(){return Mr()}function U(e){let{runsDir:r}=oe();return _(Et.join(xt(r,R(e)),"run.json"))}function ne(){let{runsDir:e}=oe();return hd(e)}function Vo(e){return hd(pe(e))}function ER(e){try{return xR(e).isDirectory()}catch{return!1}}function hd(e){if(!CR(e))return[];let r=[];for(let t of _R(e,{withFileTypes:!0})){if(t.name==="runs")continue;let n=Et.join(e,t.name);if(!ER(n))continue;let o=_(Et.join(n,"run.json"),void 0);o?.id&&r.push(o)}return r}function ye(e,r){let{runsDir:t}=oe();return _(Et.join(xt(t,R(e)),"workers",R(r),"worker.json"))}function Ue(e){let{runsDir:r}=oe();ce(Et.join(xt(r,e.id),"run.json"),e)}function V(e,r){let{runsDir:t}=oe();ce(Et.join(xt(t,e),"workers",r.name,"worker.json"),r)}function x(e){let{harnessRoot:r}=oe();return Cn(r,e)}function Cn(e,r){return xt(pe(e),R(r))}var L=F(()=>{"use strict";ke();w()});import{existsSync as PR,readdirSync as AR}from"node:fs";import IR from"node:path";function Ee(e){let r=new Set;for(let n of Object.keys(e.workers||{}))r.add(R(n));let t=IR.join(x(e.id),"workers");if(!PR(t))return[...r];for(let n of AR(t,{withFileTypes:!0}))n.isDirectory()&&r.add(R(n.name));return[...r]}var Pt=F(()=>{"use strict";L();w()});function Aa(e){let r=e.trim();if(!r.startsWith("{"))return null;try{let t=JSON.parse(r);if(t&&typeof t=="object"&&!Array.isArray(t))return t}catch{return null}return null}function kd(e){let r=e.trim();if(!r)return null;let t=Aa(r);if(t)return t;let n=[],o=/```(?:json)?\s*([\s\S]*?)```/gi,s;for(;(s=o.exec(r))!==null;){let l=Aa(s[1]??"");l&&n.push(l)}let i=r.indexOf("{"),a=r.lastIndexOf("}");if(i>=0&&a>i){let l=Aa(r.slice(i,a+1));l&&n.push(l)}return n.length>0?n[n.length-1]:null}function yd(e){let r=e.finalResult??e.final_result;if(r!=null)return typeof r=="string"?kd(r)??(r.trim()||null):r;let t=typeof e.summary=="string"?e.summary.trim():"";if(!t)return null;let n=kd(t);return n||t}var Rd=F(()=>{"use strict"});import{existsSync as OR,readFileSync as NR}from"node:fs";function Ia(e){return e==="complete"}function Ur(e){return Ia(e.lastHeartbeatPhase)?e.terminalFinalResult!==void 0&&e.terminalFinalResult!==null?e.terminalFinalResult:e.lastHeartbeatSummary?.trim()||"completed":null}function _e(e){let r={heartbeatCount:0,lastHeartbeatAt:null,lastHeartbeatPhase:null,lastHeartbeatSummary:null,terminalFinalResult:null,heartbeatBlocker:null,timestampAnomalies:[],lastBoxResourceSnapshot:null,lastPrEvidence:[]};if(!OR(e))return r;let t=Date.now()+TR,n=new Date(t).toISOString(),o=NR(e,"utf8").split(`
-`).filter(Boolean);for(let s of o){let i=vt(s);if(!i||typeof i!="object"||Array.isArray(i))continue;let a=i;if(r.heartbeatCount++,a.ts){let l=String(a.ts),c=Date.parse(l);Number.isFinite(c)&&c>t?r.timestampAnomalies.push({kind:"future_heartbeat_timestamp",observedAt:l,clampedTo:n}):r.lastHeartbeatAt=l}a.phase!==void 0&&a.phase!==null&&(r.lastHeartbeatPhase=String(a.phase)),a.summary!==void 0&&a.summary!==null&&(r.lastHeartbeatSummary=String(a.summary)),Ia(r.lastHeartbeatPhase)&&(r.terminalFinalResult=yd(a)),r.heartbeatBlocker=a.blocker?String(a.blocker):null,a.boxResourceSnapshot&&typeof a.boxResourceSnapshot=="object"&&!Array.isArray(a.boxResourceSnapshot)&&(r.lastBoxResourceSnapshot=a.boxResourceSnapshot),Array.isArray(a.prEvidence)&&(r.lastPrEvidence=a.prEvidence.filter(l=>!!l&&typeof l=="object"&&typeof l.prUrl=="string"))}return r}var TR,Lr=F(()=>{"use strict";Rd();w();TR=6e4});function UR(e){return e?(e.split("/").pop()??e).replace(/\.exe$/i,"").toLowerCase():null}function LR(e){if(!e)return[];let r=[],t="",n,o=!1;for(let s of e){if(o){t+=s,o=!1;continue}if(s==="\\"){o=!0;continue}if(n){s===n?n=void 0:t+=s;continue}if(s==='"'||s==="'"){n=s;continue}if(/\s/.test(s)){t&&(r.push(t),t="");continue}t+=s}return t&&r.push(t),r}function BR(e){let r=UR(e[0]);return!!(r&&DR.has(r))}function Go(e){return!e||e.includes("/")||e.includes("*")?!1:/\.(?:json|md|mjs|cjs|js|ts|tsx|yaml|yml)$/iu.test(e)}function Oa(e){if(!e)return!1;let r=e.trim();return r.startsWith("!")&&!r.includes("/")&&!r.endsWith("/**")}function WR(e){if(!e.startsWith("--glob="))return e;let r=e.slice(7);return r.startsWith("!")&&!r.includes("/")&&!r.endsWith("/**")?`--glob=${r}/**`:e}function HR(e){let r=[];for(let t=1;t<e.length;t+=1){let n=e[t];if(n){if(n==="--"){r.push(...e.slice(t+1));break}if(n.startsWith("-")){if(n.includes("="))continue;MR.has(n)&&(t+=1);continue}r.push(n)}}return r}function vd(e){let r=!1,t=e.map(o=>{let s=WR(o);return s!==o&&(r=!0),s}),n=HR(t);if(n.length===2){let[o,s]=n;if(Go(s))return{argv:[t[0]??"rg","-g",s,o,"."],changed:!0}}return{argv:t,changed:r}}function Yo(e){let r=e.trim();if(!r)return{command:r,changed:!1};let t=r.includes("&&")?" && ":r.includes("||")?" || ":"; ",n=r.split(/\s*(?:&&|\|\||;)\s*/u),o=!1,s=n.map(i=>{let a=LR(i.trim());if(!a.length||!BR(a))return i;let l=vd(a);return l.changed?(o=!0,l.argv.join(" ")):i});return o?{command:s.join(t),changed:!0}:{command:r,changed:!1}}function Na(e){if(!e)return{};let r=e.match(/search\s+"(.+)"\s+in\s+([^()]+?)(?:\s*\(|$)/iu);if(r)return{pattern:r[1],target:r[2]?.trim()};let t=e.match(/^search\s+"(.+)"\s+in\s+(.+)$/iu);return t?{pattern:t[1],target:t[2]?.trim()}:{}}function bd(e){let{pattern:r,target:t}=Na(e);return r?Oa(t)?{kind:"rg_exclude_syntax",pattern:r,target:t}:Go(t)?{kind:"bad_scope",pattern:r,target:t}:{kind:"not_repo_search",pattern:r,target:t}:{kind:"not_repo_search"}}function Sd(e){let{pattern:r,target:t}=Na(e);if(!r)return null;if(Oa(t)){let n=`${t.trim()}/**`;return{command:`rg "${r}" -g '${n}' .`,changed:!0}}return t&&Go(t)?{command:`rg -g ${t} "${r}" .`,changed:!0}:null}function wd(e){if(e.kind==="bad_scope"&&e.pattern?.includes("agent-os-land-pr")&&e.target==="package.json")return"Search package.json with a glob from the repo root: `rg -g package.json agent-os-land-pr .` \u2014 or run `node scripts/agent-os-land-pr.mjs <pr-url>` directly.";if(e.kind==="bad_scope"&&e.pattern&&e.target)return`Use \`rg -g '${e.target}' ${e.pattern} .\` from the repo root instead of treating ${e.target} as a folder.`;if(e.kind==="rg_exclude_syntax"&&e.pattern){let r=e.target?`${e.target.trim()}/**`:"!node_modules/**";return`Repo search scope \`${e.target??"!node_modules"}\` is not a valid ripgrep path. Use \`rg "${e.pattern}" -g '${r}' .\` from the repo root (exclude globs need a \`/**\` suffix).`}return e.kind==="no_matches"&&e.pattern?`No matches for "${e.pattern}". Try a broader pattern, drop overly short tokens, or search from the repo root with \`rg "${e.pattern}" .\`.`:null}function Cd(e){let r=e.match(/search\s+"(.+)"\s+in\s+([^()]+?)(?:\s*\(agent\)|\s*failed|$)/iu);return r?`search "${r[1]}" in ${r[2]?.trim()}`:null}function Jo(e){let r=e.meta?.trim()||(e.command?Cd(e.command):null)||null;if(r){let t=bd(r),n=wd(t);if(n)return n;let o=Sd(r);if(o?.changed)return`Repo search used an invalid scope. Retry with: \`${o.command}\`.`}if(e.command&&/\b(rg|ripgrep)\b/i.test(e.command)){let t=Yo(e.command);if(t.changed)return`Ripgrep scope may be invalid. Retry with: \`${t.command}\`.`;if(e.exitCode===1)return"Ripgrep returned no matches (exit 1). Try a broader pattern or search from the repo root."}return null}var DR,MR,Ta=F(()=>{"use strict";DR=new Set(["rg","ripgrep","grep"]),MR=new Set(["-e","--regexp","-f","--file","-m","--max-count","-A","--after-context","-B","--before-context","-C","--context","-g","--glob","--iglob"])});function _n(e,r=200){let t=e.replace(/\s+/g," ").trim();return t.length>r?`${t.slice(0,r-1)}\u2026`:t}function jR(e){let r=e.trim();if(!r)return null;if(r.startsWith("{"))try{return JSON.parse(r)}catch{}let t=r.indexOf("{"),n=r.lastIndexOf("}");if(t>=0&&n>t)try{return JSON.parse(r.slice(t,n+1))}catch{return null}return null}function xn(e){return!!e&&typeof e=="object"&&!Array.isArray(e)}function _d(e){let r=e.metadata;if(!xn(r))return null;let t=r.vulnerabilities;if(!xn(t))return null;let n=s=>typeof t[s]=="number"?t[s]:0,o={info:n("info"),low:n("low"),moderate:n("moderate"),high:n("high"),critical:n("critical"),total:n("total")};return typeof t.total!="number"&&!o.critical&&!o.high&&!o.moderate&&!o.low&&!o.info?null:o}function VR(e){let r=[];e.critical&&r.push(`${e.critical} critical`),e.high&&r.push(`${e.high} high`),e.moderate&&r.push(`${e.moderate} moderate`),e.low&&r.push(`${e.low} low`),e.info&&r.push(`${e.info} info`);let t=r.length?r.join(", "):"see report";return`npm audit: ${e.total} vulnerabilit${e.total===1?"y":"ies"} (${t}) \u2014 remediation required`}function GR(e,r){let t=e.error;if(xn(t)){let s=typeof t.summary=="string"?t.summary.trim():"",i=typeof t.code=="string"?t.code.trim():"";if(s)return i?`${i}: ${s}`:s;if(i)return i}let n=typeof e.message=="string"?e.message.trim():"";if(n)return n;let o=r.trim();return o?_n(o.split(`
-`).find(Boolean)??o,160):"npm audit failed"}function xd(e){let r=`${e.stdout}
-${e.stderr}`.trim(),t=jR(r);if(!t||!xn(t)){let o=_n(r||`exit ${e.exitCode}`,180);return{kind:"command_failure",exitCode:e.exitCode,summary:`npm audit failed (invalid or missing JSON): ${o}`,parseError:"invalid_json"}}if(xn(t.error))return{kind:"command_failure",exitCode:e.exitCode,summary:`npm audit command failed: ${GR(t,e.stderr)}`};let n=_d(t);return n?e.exitCode===0&&n.total===0?{kind:"success",exitCode:0,summary:"npm audit: no vulnerabilities reported",audit:n}:{kind:"audit_findings",exitCode:e.exitCode,summary:VR(n),audit:n}:{kind:"command_failure",exitCode:e.exitCode,summary:"npm audit failed: JSON response missing vulnerability metadata",parseError:"missing_metadata"}}function YR(e){return FR.test(e)}function JR(e){return $R.test(e)}function qR(e){let r=Jo({command:e.command,exitCode:e.exitCode});if(e.exitCode===0)return{kind:"success",exitCode:0,summary:"ripgrep finished (exit 0)"};if(e.exitCode===1){let n=(e.stderr||e.interleaved).trim();if(n&&KR.test(n)){let i=_n(n,160);return{kind:"command_failure",exitCode:1,summary:r??`ripgrep failed (exit 1): ${i}`}}let o=Yo(e.command),s=o.changed&&!r?` Retry with: \`${o.command}\`.`:"";return{kind:"search_no_matches",exitCode:1,summary:r??`ripgrep: no matches (exit 1).${s} Try a broader pattern or search from the repo root.`}}let t=_n(e.interleaved||e.stdout||e.stderr||`exit ${e.exitCode}`,180);return{kind:"command_failure",exitCode:e.exitCode,summary:r??`ripgrep failed (exit ${e.exitCode}): ${t}`}}function qo(e){let r=e.stdout??"",t=e.stderr??"",n=e.interleavedOutput??"";if(YR(e.command)){let i=r.trim()||n.trim()||t.trim();return xd({exitCode:e.exitCode,stdout:i,stderr:t})}if(JR(e.command))return qR({command:e.command,exitCode:e.exitCode,stdout:r,stderr:t,interleaved:n});let o=Jo({command:e.command,exitCode:e.exitCode});if(o&&e.exitCode!==0)return{kind:"command_failure",exitCode:e.exitCode,summary:o};if(e.exitCode===0)return{kind:"success",exitCode:0,summary:"command succeeded (exit 0)"};let s=_n(n||r||t||`exit ${e.exitCode}`,180);return{kind:"command_failure",exitCode:e.exitCode,summary:`command failed (exit ${e.exitCode}): ${s}`}}var FR,$R,KR,Da=F(()=>{"use strict";Ta();FR=/\bnpm\s+audit\b/i,$R=/\b(rg|ripgrep)\b/i,KR=/\b(error|invalid|unknown|panic|not found)\b/i});import{existsSync as zR,readFileSync as XR}from"node:fs";function QR(e){let r=e.timestamp_ms;return e.timestamp||e.ts||(r?new Date(r).toISOString():void 0)}function Ed(e){if(!e)return null;for(let r of Object.keys(e))if(r.endsWith("ToolCall")){let t=r.slice(0,-8);return t.length?t:r}return null}function ZR(e,r){e.finalResult=r.result||r.subtype||r.terminal_reason||"completed",r.is_error&&(e.error=String(r.result||r.api_error_status||"stream result error"))}function Pd(e){if(e.type!=="tool_call"||e.subtype!=="completed")return null;let t=(e.tool_call&&typeof e.tool_call=="object"&&!Array.isArray(e.tool_call)?e.tool_call:null)?.shellToolCall;if(!t||typeof t!="object"||Array.isArray(t))return null;let n=t,o=n.args,s=o&&typeof o=="object"&&!Array.isArray(o)&&typeof o.command=="string"?String(o.command):"",i=n.result;if(!i||typeof i!="object"||Array.isArray(i))return null;let a=i.success??i.failure;if(!a||typeof a!="object"||Array.isArray(a))return null;let l=a,c=typeof l.exitCode=="number"?l.exitCode:0;return{command:s,exitCode:c,stdout:typeof l.stdout=="string"?l.stdout:"",stderr:typeof l.stderr=="string"?l.stderr:"",interleaved:typeof l.interleavedOutput=="string"?l.interleavedOutput:""}}function ev(e,r){r.kind==="success"||r.kind==="search_no_matches"||(e.lastShellOutcome=r)}function At(e){let r={firstEventAt:null,lastEventAt:null,currentTool:null,finalResult:null,error:null,lastShellOutcome:null};if(!zR(e))return r;let t=XR(e,"utf8").split(`
-`).filter(Boolean);for(let n of t){let o=vt(n);if(!o)continue;let s=QR(o);if(s&&(r.firstEventAt||=s,r.lastEventAt=s),o.type==="stream_event"&&o.event&&typeof o.event=="object"&&o.event.type==="content_block_start"){let a=o.event.content_block;a?.type==="tool_use"&&(r.currentTool=String(a.name||"tool"))}if(o.type==="assistant"&&o.message&&typeof o.message=="object"){let a=o.message.content;if(Array.isArray(a)){let l=a.find(c=>c?.type==="tool_use");l&&(r.currentTool=String(l.name||r.currentTool))}}if(o.type==="tool_call"&&o.subtype==="started"){let a=o.tool_call&&typeof o.tool_call=="object"&&!Array.isArray(o.tool_call)?o.tool_call:void 0,l=Ed(a);l&&(r.currentTool=l)}let i=Pd(o);i&&ev(r,qo({command:i.command,exitCode:i.exitCode,stdout:i.stdout,stderr:i.stderr,interleavedOutput:i.interleaved})),o.type==="result"&&ZR(r,o)}return r}function rv(e){return At(e)}function Ad(e){let r=Pd(e);if(!r)return;let t=qo({command:r.command,exitCode:r.exitCode,stdout:r.stdout,stderr:r.stderr,interleavedOutput:r.interleaved}),n=Uo(r.command).slice(0,120);return t.kind==="audit_findings"?`[audit:findings] ${t.summary}${n?` \xB7 ${n}`:""}`:t.kind==="search_no_matches"?`[search:no_matches] ${t.summary}${n?` \xB7 ${n}`:""}`:t.kind==="command_failure"?`[command:failed] ${t.summary}${n?` \xB7 ${n}`:""}`:`[command:ok] exit 0${n?` \xB7 ${n}`:""}`}function Ma(e){if(e.type==="system"&&e.subtype)return`[system:${e.subtype}] ${String(e.status||e.cwd||"")}`.trim();if(e.type==="stream_event"&&e.event&&typeof e.event=="object"){let r=e.event.type;if(r==="content_block_start"){let t=e.event.content_block;if(t?.type==="tool_use")return`[tool:start] ${t.name}`}if(r==="content_block_delta"){let t=e.event.delta;if(t?.partial_json)return`[tool:input] ${t.partial_json}`}return r==="message_stop"?"[message:stop]":r?`[stream:${r}]`:void 0}if(e.type==="assistant"&&e.message&&typeof e.message=="object"){let r=e.message.content;if(Array.isArray(r)){let t=r.find(o=>o?.type==="text");if(t)return`[assistant] ${Uo(String(t.text||""))}`;let n=r.find(o=>o?.type==="tool_use");if(n)return`[tool] ${n.name} ${JSON.stringify(n.input||{})}`}}if(e.type==="user"&&e.tool_use_result){let r=e.tool_use_result;return`[tool:result] stdout=${JSON.stringify(r.stdout||"")} stderr=${JSON.stringify(r.stderr||"")}`}if(e.type==="tool_call"){let r=String(e.subtype||""),t=r==="completed"?Ad(e):void 0;if(t)return t;let n=e.tool_call&&typeof e.tool_call=="object"&&!Array.isArray(e.tool_call)?e.tool_call:void 0,o=Ed(n)??"tool";return`[tool:${r}] ${o}`}if(e.type==="result")return`[result] ${e.subtype||""} ${Uo(String(e.result||""))}`.trim()}var En=F(()=>{"use strict";Da();w()});function nv(e,r=240){let t=e.replace(/\s+/g," ").trim();return t.length>r?`${t.slice(0,r-1)}\u2026`:t}function Id(e){let r=(e??"").trim();if(!r)return null;for(let t of tv)if(t.test.test(r))return{blocked:!0,reason:`${t.label}: ${nv(r)}`};return null}var tv,Od=F(()=>{"use strict";tv=[{test:/\b(?:invalid|unknown|unsupported|unrecognized)\b[^.\n]*\bmodel\b/i,label:"provider rejected the requested model"},{test:/\bmodel\b[^.\n]*\b(?:not\s+(?:found|supported|available|recognized|valid)|is\s+not\s+valid|does\s+not\s+exist)/i,label:"provider rejected the requested model"},{test:/\b(?:did you mean|available models|choose (?:a|one of)|supported models)\b/i,label:"provider rejected the requested model"},{test:/model preflight failed/i,label:"model/provider preflight failed"},{test:/\b(?:command not found|ENOENT|is the .*CLI on PATH|executable not found|no such file or directory)\b/i,label:"provider CLI is missing or not on PATH"},{test:/\bfailed to spawn\b/i,label:"provider failed to spawn the worker process"},{test:/\b(?:not logged in|unauthorized|authentication (?:failed|required)|invalid api key|missing api key|401)\b/i,label:"provider authentication failed"}]});function Nd(e){if(typeof e!="string")return null;let r=e.trim();return r.length?r:null}function ov(e){return e==null?!1:typeof e=="string"?e.trim().length>0:typeof e=="boolean"?e:Array.isArray(e)?e.length>0:typeof e=="object"?Object.keys(e).length>0:!0}function sv(e){return!e?.checked||e.headIsAncestorOfBase!==!1?null:Nd(e.head)}function iv(e,r,t){let n=["exited_with_changes_salvage"];if((e==="uncommitted"||e==="both")&&n.push(`${r} uncommitted change${r===1?"":"s"} with no final result`),(e==="committed_ahead"||e==="both")&&t){let o=t.length>12?t.slice(0,12):t;n.push(`commit ${o} ahead of base with no final result`)}return n.push("review worktree \u2014 commit, open a PR, or run a salvage worker before discarding"),n.join(": ")}function Br(e){if(e.alive||ov(e.finalResult))return null;let r=(e.changedFiles??[]).filter(i=>i.trim()).length,t=Nd(e.headCommit)??sv(e.gitAncestry),n=r>0,o=!!t;if(!n&&!o)return{kind:"none",salvageable:!1,uncommittedCount:0,headCommit:null,attentionReason:"process exited without a final result"};let s=n&&o?"both":n?"uncommitted":"committed_ahead";return{kind:s,salvageable:!0,uncommittedCount:r,headCommit:t,attentionReason:iv(s,r,t)}}var Pn=F(()=>{"use strict"});function An(e){if(typeof e!="string")return null;let r=e.trim();return r.length?r:null}function av(e){return e==null?!1:typeof e=="string"?e.trim().length>0:typeof e=="boolean"?e:Array.isArray(e)?e.length>0:typeof e=="object"?Object.keys(e).length>0:!0}function lv(e){if(An(e.headCommit)||An(e.prUrl)||An(e.artifactBundlePath)||An(e.patchPath))return!0;let r=e.gitAncestry;return!!(r?.checked&&r.headIsAncestorOfBase===!1&&An(r.head))}function Wr(e){return av(e.finalResult)?e.changedFiles.length===0?{blocked:!1}:lv(e)?{blocked:!0,detail:`Worktree has ${e.changedFiles.length} uncommitted change(s); commit or discard before landing`}:{blocked:!0,reason:"dirty_worktree_no_pr",detail:`Worktree has ${e.changedFiles.length} uncommitted change(s) with no commit or PR; commit, open a PR, or discard before landing`}:{blocked:!1}}function Td(e){if(e.blocked)return e.detail??e.reason??"dirty_worktree_no_pr"}var In=F(()=>{"use strict"});function Ua(e){let r=e.trim();if(!r.startsWith("{"))return null;try{let t=JSON.parse(r);if(t&&typeof t=="object"&&!Array.isArray(t))return t}catch{return null}return null}function Dd(e){let r=e.targetPrReconciliation??e.target_pr_reconciliation??e.targetPrs??e.target_prs;return Array.isArray(r)?r.length:0}function It(e){let r=e.trim();if(!r)return null;let t=Ua(r);if(t)return t;let n=[],o=/```(?:json)?\s*([\s\S]*?)```/gi,s;for(;(s=o.exec(r))!==null;){let u=Ua(s[1]??"");u&&n.push(u)}let i=r.indexOf("{"),a=r.lastIndexOf("}");if(i>=0&&a>i){let u=Ua(r.slice(i,a+1));u&&n.push(u)}if(n.length===0)return null;let l=n[n.length-1],c=Dd(l);for(let u of n){let d=Dd(u);d>c&&(l=u,c=d)}return l}var zo=F(()=>{"use strict"});function Ot(e){if(typeof e!="string")return null;let r=e.trim();return r.length?r:null}function cv(e){return e==null?!1:typeof e=="string"?e.trim().length>0:typeof e=="object"?Object.keys(e).length>0:!0}function Hr(e){let r=e.trim().match(/github\.com\/([^/]+\/[^/]+)\/(?:pull|pulls)\/(\d+)/i);return r?`https://github.com/${r[1]}/pull/${r[2]}`:Ot(e)}function Xo(e){let r=e.trim().match(/github\.com\/([^/]+\/[^/]+)\/(?:pull|pulls)\/(\d+)/i);return r?`${r[1].toLowerCase()}/pull/${r[2]}`:e.trim().toLowerCase()}function Md(e){let r=null;if(typeof e=="string"){let o=It(e);o&&(r=o)}else e&&typeof e=="object"&&!Array.isArray(e)&&(r=e);if(!r)return[];let t=r.targetPrReconciliation??r.target_pr_reconciliation;if(!Array.isArray(t))return[];let n=[];for(let o of t){if(!o||typeof o!="object"||Array.isArray(o))continue;let s=o,i=Hr(String(s.prUrl??s.pr_url??"")),a=Ot(s.outcome);!i||a!=="merged"&&a!=="skipped"&&a!=="blocked"||n.push({prUrl:i,outcome:a,mergeCommit:Ot(s.mergeCommit??s.merge_commit),reason:Ot(s.reason)})}return n}function Ud(e,r){let t=[],n=Hr(Ot(e.prUrl)??"");if(n&&t.push(n),r&&typeof r=="object"&&!Array.isArray(r)){let o=r,s=Hr(String(o.prUrl??o.pr_url??""));s&&t.push(s)}return[...new Set(t)]}function La(e){let{contract:r,snapshot:t}=e,n=e.finalResult??t.finalResult;if(!r.landingOnly&&r.targetPrUrls.length===0&&!r.repairEnforceOriginalPr)return{blocked:!1};if(!cv(n))return(r.requiresTargetPrReconciliation??(r.landingOnly||!!r.repairEnforceOriginalPr||r.targetPrUrls.length>0))&&r.targetPrUrls.length>0?{blocked:!0,reason:"missing_target_pr_reconciliation",detail:`Final result required to reconcile target PR(s): ${r.targetPrUrls.join(", ")}`}:{blocked:!1};if(!(r.requiresTargetPrReconciliation??(r.landingOnly||!!r.repairEnforceOriginalPr||r.targetPrUrls.length>0))&&!r.repairEnforceOriginalPr)return{blocked:!1};let s=r.repairEnforceOriginalPr?Hr(Ot(r.targetPrUrl)??"")??(r.targetPrUrls.length===1?Hr(r.targetPrUrls[0]):null):null;if(s){let d=Ud(t,n);if(!(n&&typeof n=="object"&&!Array.isArray(n)&&n.supersedesOriginalTargetPr===!0)){for(let g of d)if(g!==s)return{blocked:!0,reason:"duplicate_repair_pr",detail:`Repair worker opened or attached PR ${g} instead of canonical target ${s}`}}let p=Md(n).find(g=>g.prUrl===s);if(!p||p.outcome!=="merged"&&!(p.reason?.trim()&&(p.outcome==="skipped"||p.outcome==="blocked")))return{blocked:!0,reason:"missing_repair_target_reconciliation",detail:`Repair worker must reconcile target PR ${s}`}}let i=Md(n),a=new Map(i.map(d=>[Xo(d.prUrl),d])),l=new Set(r.targetPrUrls.map(d=>Xo(Hr(d)??d)).filter(Boolean)),c=Ud(t,n);if(r.landingOnly)for(let d of c){if(l.size>0&&!l.has(Xo(d)))return{blocked:!0,reason:"unrelated_implementation_pr",detail:`Landing-only worker attached unrelated PR ${d}`};if(l.size===0)return{blocked:!0,reason:"unrelated_implementation_pr",detail:"Landing-only worker must not open new implementation PRs"}}if(r.targetPrUrls.length===0)return{blocked:!1};let u=[];for(let d of r.targetPrUrls){let f=Xo(Hr(d)??d),m=a.get(f);if(!m){u.push(f);continue}m.outcome!=="merged"&&!m.reason?.trim()&&u.push(f)}return u.length>0?{blocked:!0,reason:u.every(d=>a.has(d))?"incomplete_target_pr_landing":"missing_target_pr_reconciliation",detail:`Target PR reconciliation incomplete: ${u.join(", ")}`}:{blocked:!1}}function Ba(e){if(e.blocked)return e.detail??e.reason}var Wa=F(()=>{"use strict";zo()});function Ld(e){let r=Date.now();if(e.completionBlocker&&!Bd(e.completionBlocker))return{state:"blocked",reason:e.completionBlocker};if(e.finalResult){if(e.localOnly&&pv(e.finalResult))return{state:"done",reason:"local-only worker superseded by merged PR"};let o={finalResult:e.finalResult,changedFiles:e.changedFiles??[],gitAncestry:e.gitAncestry??null,prUrl:e.prUrl??null},s=Wr(o);if(s.blocked){let i=Td(s);return{state:"needs_attention",reason:s.reason?`landing blocked (${s.reason}): ${i}`:`landing blocked: ${i}`}}if(e.landingContract){let i=La({contract:e.landingContract,snapshot:o,finalResult:e.finalResult}),a=Ba(i);if(a)return{state:"needs_attention",reason:i.reason?`landing contract (${i.reason}): ${a}`:`landing contract: ${a}`}}return{state:"done",reason:"final result recorded"}}if(!e.alive){if(dv(e))return{state:"done",reason:"empty abandoned worker record"};let o=Id(e.error);if(o)return{state:"blocked",reason:o.reason};let s=Br({alive:!1,finalResult:null,changedFiles:e.changedFiles,gitAncestry:e.gitAncestry});if(s?.salvageable){let a=e.error?.trim();return{state:"needs_attention",reason:a?`${s.attentionReason} (${a})`:s.attentionReason}}let i=e.error?.trim();return{state:"needs_attention",reason:i?`process exited without a final result: ${i}`:s?.attentionReason??"process exited without a final result"}}if(e.heartbeatBlocker)return{state:"blocked",reason:`worker heartbeat reported blocker: ${e.heartbeatBlocker}`};let t=e.startedAt?Date.parse(e.startedAt):NaN;if(!e.firstEventAt&&e.stdoutBytes===0&&e.heartbeatBytes===0&&Number.isFinite(t)&&r-t>uv)return{state:"needs_attention",reason:`no first stream event ${da(t)}s after start`};let n=e.lastActivityAt?Date.parse(e.lastActivityAt):NaN;return Number.isFinite(n)&&r-n>Nt?{state:"stale",reason:`no log/event/heartbeat activity for ${da(n)}s`}:{state:"ok",reason:"recent activity"}}function Bd(e){let r=e?.trim();return r?/completion acknowledged but board not advanced/i.test(r)&&/task already terminal/i.test(r):!1}function dv(e){return e.finalResult||e.taskId||e.agentOsId||e.stdoutBytes>0||(e.stderrBytes??0)>0||e.heartbeatBytes>0||e.error?.trim()||(e.changedFiles??[]).some(r=>r.trim())?!1:/empty worker dir|marked abandoned/i.test(e.reconcileReason??"")}function pv(e){let r=null;if(typeof e=="string"?r=It(e):e&&typeof e=="object"&&!Array.isArray(e)&&(r=e),!r)return!1;let t=r.targetPrReconciliation??r.target_pr_reconciliation;return Array.isArray(t)?t.some(n=>!n||typeof n!="object"||Array.isArray(n)?!1:String(n.outcome??"").trim()==="merged"):!1}function mv(e,r,t){let n=e.completionSnapshot?.finalResult;return e.completionAckSource==="local-pr-merged-reconcile"&&n!==void 0&&n!==null?n:r||(n??Ur(t))}function T(e,r={}){let t=At(e.stdoutPath),n=_e(e.heartbeatPath),o=typeof e.completionReportedAt=="string"&&e.completionReportedAt.trim().length>0,s=mv(e,t.finalResult,n),i=o?!1:$(e.pid),a=Lo(e.stdoutPath),l=Lo(e.stderrPath),c=Lo(e.heartbeatPath),u=vn(e.worktreePath),d=Ho(e.worktreePath,{base:r.base,baseCommit:r.baseCommit}),f=Yu([t.lastEventAt,n.lastHeartbeatAt,Bo(e.stdoutPath),Bo(e.stderrPath),Bo(e.heartbeatPath)]),m=t.error||!i&&!s&&Wo(e.stderrPath,10).trim()||void 0,p=typeof e.completionBlocker=="string"&&e.completionBlocker.trim()?e.completionBlocker.trim():null,g=Bd(p)?null:p,k=e.repairTargetPrUrl?{landingOnly:!1,targetPrUrls:[e.repairTargetPrUrl],targetPrUrl:e.repairTargetPrUrl,repairEnforceOriginalPr:!0}:null,h=Ld({alive:i,finalResult:s,firstEventAt:t.firstEventAt,stdoutBytes:a,stderrBytes:l,heartbeatBytes:c,lastActivityAt:f,heartbeatBlocker:n.heartbeatBlocker,startedAt:e.startedAt,error:m,changedFiles:u,gitAncestry:d,completionBlocker:g,landingContract:k,prUrl:e.repairTargetPrUrl??e.taskPrUrl??null,localOnly:e.localOnly===!0,taskId:e.taskId??null,agentOsId:e.agentOsId??null,reconcileReason:e.reconcileReason??null}),S=g||h.state==="blocked"?"blocked":o||h.state==="done"?"done":s?"exited":i?"running":"exited";return{runId:e.runId,worker:e.name,pid:e.pid,alive:i,status:S,attention:h,branch:e.branch,worktreePath:e.worktreePath,ownedPaths:e.ownedPaths,stdoutBytes:a,stderrBytes:l,heartbeatBytes:c,firstEventAt:t.firstEventAt,lastEventAt:t.lastEventAt,lastActivityAt:f,currentTool:o?null:t.currentTool,heartbeatCount:n.heartbeatCount,lastHeartbeatAt:n.lastHeartbeatAt,lastHeartbeatPhase:n.lastHeartbeatPhase,lastHeartbeatSummary:n.lastHeartbeatSummary,heartbeatBlocker:n.heartbeatBlocker,timestampAnomalies:n.timestampAnomalies,finalResult:s,error:m,changedFiles:u,gitAncestry:d,instructionPolicyFingerprint:e.instructionPolicyFingerprint??null,instructionPolicyEvidence:e.instructionPolicyEvidence??null,model:e.model??e.orchestrationAudit?.model??null,provider:e.orchestrationAudit?.provider??null,boxKind:e.boxKind??null,boxId:e.boxId??null,runtimeId:e.runtimeId??null,personaSlug:e.personaSlug??null,dispatched:e.dispatched??null,localOnly:e.localOnly??null}}function Z(e){return!!(e.finalResult||e.alive===!1||e.status==="exited"||e.status==="done")}function Fr(e){return e.finalResult?e.attention.state==="needs_attention"||e.attention.state==="blocked":!1}function Tt(e,r){return r.length===0?e:r.some(t=>t.attention==="needs_attention"||t.attention==="stale"||t.attention==="blocked")?"needs_attention":r.every(t=>t.status==="done")?"done":r.some(t=>t.status==="running")?"running":e}var uv,Nt,G=F(()=>{"use strict";Lr();En();Od();Pn();Ce();In();Wa();zo();w();uv=18e4,Nt=6e5});import{readFileSync as fv}from"node:fs";function gv(e){if(!e||process.platform!=="linux")return null;try{return fv(`/proc/${e}/cmdline`,"utf8").replace(/\0/g," ")}catch{return null}}function Wd(e){if(!e.pid||process.platform!=="linux")return!0;let r=gv(e.pid);return r?[e.worktreePath,e.workerDir,e.heartbeatPath].filter(n=>typeof n=="string"&&n.trim().length>0).some(n=>r.includes(n)):!1}function On(e){if(typeof e.completionBlocker=="string"&&e.completionBlocker.trim())return!1;let r=T(e);return r.alive&&!Wd(e)?!1:r.alive&&!r.finalResult&&r.attention.state!=="done"}var Qo=F(()=>{"use strict";G()});import Fd from"node:os";import hv from"node:path";function Hd(e,r){let t=Number(e);return!Number.isFinite(t)||t<=0?r:Math.floor(t)}function kv(e=v(),r,t){let n=Hd(e.perWorkerMemBytes,Nn),o=Hd(e.memReserveBytes,Tn),s=Math.min(1,Math.max(.1,Number(e.memUtilization)>0?Number(e.memUtilization):Dn)),i=es({config:e,configuredMaxWorkersOverride:r,totalMemBytes:t??Fd.totalmem()});return{perWorkerMemBytes:n,memReserveBytes:o,memUtilization:s,configuredMaxWorkers:i.configuredMaxWorkers,autoCap:i.autoCap,workerCapSource:i.workerCapSource}}function Ha(e,r={}){let t=r.perWorkerMemBytes??Nn,n=r.memReserveBytes??Tn,o=r.memUtilization??Dn,s=Math.max(0,Math.floor(e*o)-n),i=Math.max(1,Math.floor(s/t));return Math.min(i,Zo)}function yv(){return Ct()}function Rv(e){let r=0;for(let t of Ee(e)){let n=_(hv.join(x(e.id),"workers",R(t),"worker.json"),void 0);!n||!On(n)||r++}return r}function vv(){let e=0;for(let r of ne())e+=Rv(r);return e}function $r(e){let r=e.config??v(),t=e.totalMemBytes??Fd.totalmem(),{perWorkerMemBytes:n,memReserveBytes:o,memUtilization:s,configuredMaxWorkers:i,autoCap:a,workerCapSource:l}=kv(r,e.configuredMaxWorkersOverride,t),c=je(r),u=e.freeMemBytes??yv(),d=e.activeWorkers??vv(),f=Math.max(0,Math.floor(t*s)-o),m=Math.max(0,Math.floor(f/n)),p=Math.max(0,Math.floor(Math.max(0,u-o)/n)),g=a,h=Math.max(0,Math.min(i??g,m)),S=Math.max(0,h-d),W=Math.min(S,p),b=e.skipDiskGate||process.env.KYNVER_RESOURCE_GATE_SKIP_DISK==="1"?void 0:Me({diskPath:e.diskPath?.trim()||process.env.KYNVER_DISK_GUARD_PATH?.trim()||"/"});b&&!b.ok&&(W=0);let P=null;return W<=0&&(b&&!b.ok?P=b.reason??"disk gate blocked worker admission":d>=h?P=`at worker limit (${d}/${h} running)`:p<=0?P="insufficient free memory \u2014 waiting for workers to finish":P="no worker slots available"),{ok:W>0,totalMemBytes:t,freeMemBytes:u,memReserveBytes:o,perWorkerMemBytes:n,configuredMaxWorkers:i,workerCapSource:l,boxKind:c,autoCap:g,capacityWorkers:m,maxConcurrentWorkers:h,activeWorkers:d,slotsAvailable:W,reason:P,...b?{diskGate:b}:{}}}var Nn,Tn,Dn,Zo,Mn=F(()=>{"use strict";jo();O();De();rs();_t();L();Pt();Qo();w();Nn=500*1024*1024,Tn=4*1024*1024*1024,Dn=.85,Zo=64});function Kr(e,r){let t=Number(e);return!Number.isFinite(t)||t<=0?r:Math.floor(t)}function es(e){let r=e.config??{},t=e.env??process.env,n=Kr(r.perWorkerMemBytes,Nn),o=Kr(r.memReserveBytes,Tn),s=Math.min(1,Math.max(.1,Number(r.memUtilization)>0?Number(r.memUtilization):Dn)),i=Ha(e.totalMemBytes,{perWorkerMemBytes:n,memReserveBytes:o,memUtilization:s});if(e.configuredMaxWorkersOverride!==void 0&&e.configuredMaxWorkersOverride!==null)return{configuredMaxWorkers:Kr(e.configuredMaxWorkersOverride,i),autoCap:i,workerCapSource:"workspace_override"};if(r.maxConcurrentWorkers!==void 0&&r.maxConcurrentWorkers!==null){let c=Kr(r.maxConcurrentWorkers,0)||null;if(c)return{configuredMaxWorkers:Math.min(c,Zo),autoCap:i,workerCapSource:"config"}}let l=(t.KYNVER_MAX_WORKERS_INTENTIONAL==="1"||t.KYNVER_MAX_WORKERS_INTENTIONAL==="true")&&t.KYNVER_MAX_WORKERS&&Kr(t.KYNVER_MAX_WORKERS,0)||null;return l?{configuredMaxWorkers:Math.min(l,Zo),autoCap:i,workerCapSource:"env"}:{configuredMaxWorkers:null,autoCap:i,workerCapSource:"auto"}}function Fa(e={}){let r=e.totalMemBytes??0,t=Ha(r,{perWorkerMemBytes:Kr(e.config?.perWorkerMemBytes,Nn),memReserveBytes:Kr(e.config?.memReserveBytes,Tn),memUtilization:e.config?.memUtilization&&Number(e.config.memUtilization)>0?Number(e.config.memUtilization):Dn}),n=e.diskGateOk??!0,o=n?t:Math.max(1,Math.min(t,4));return{totalMemBytes:r,autoCap:t,recommendedMaxWorkers:o,diskPath:e.diskPath??"/",diskGateOk:n,diskFreeBytes:e.diskFreeBytes??null}}var rs=F(()=>{"use strict";Mn()});var Kd={};Ny(Kd,{runDeviceLogin:()=>$a});import $d from"node:os";function bv(e){let r=(typeof e.apiBaseUrl=="string"?e.apiBaseUrl:void 0)||(typeof e.baseUrl=="string"?e.baseUrl:void 0)||process.env.KYNVER_API_URL||v().apiBaseUrl;return r?tr(String(r)):void 0}async function Sv(e){await new Promise(r=>setTimeout(r,e))}async function $a(e){let r=bv(e);if(!r)return console.error("kynver login (device flow) requires a Kynver URL \u2014 pass --api-base-url https://your-kynver-site, set KYNVER_API_URL, or run `kynver setup` first."),{ok:!1};let t=`${$d.hostname()} (${$d.platform()})`,n;try{let a=await fetch(`${r}/api/auth/device/code`,{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify({clientName:t})});if(!a.ok)return console.error(`Could not start device authorization (${a.status}).`),{ok:!1};n=await a.json()}catch(a){return console.error(`Could not reach ${r}: ${a.message}`),{ok:!1}}let o=n.verification_uri_complete||n.verification_uri;console.log(""),console.log("  Authorize this machine:"),console.log(`    1. Open: ${o}`),console.log(`    2. Confirm the code: ${n.user_code}`),console.log(""),console.log("  Waiting for approval\u2026");let s=Date.now()+n.expires_in*1e3,i=Math.max(1,n.interval)*1e3;for(;Date.now()<s;){await Sv(i);let a;try{a=await(await fetch(`${r}/api/auth/device/token`,{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify({device_code:n.device_code})})).json().catch(()=>({}))}catch{continue}switch(a.status){case"approved":return a.api_key?(Un(a.api_key),console.log("  Approved \u2014 this machine is now linked to your Kynver account."),{ok:!0,apiKey:a.api_key}):{ok:!1};case"slow_down":i+=2e3;break;case"authorization_pending":typeof a.interval=="number"&&(i=Math.max(i,a.interval*1e3));break;case"access_denied":return console.error("  Request was denied in the browser."),{ok:!1};case"expired_token":return console.error("  The code expired before it was approved. Run `kynver login` again."),{ok:!1};default:break}}return console.error("  Timed out waiting for approval. Run `kynver login` again."),{ok:!1}}var Ka=F(()=>{"use strict";O();w()});import{existsSync as Vd,mkdirSync as Gd,readFileSync as Yd,writeFileSync as Jd}from"node:fs";import{homedir as wv,totalmem as Cv}from"node:os";import ja from"node:path";import _v from"node:os";function v(){if(!Vd(ts))return{};try{return JSON.parse(Yd(ts,"utf8"))}catch{return{}}}function Ve(e){Gd(ns,{recursive:!0}),Jd(ts,`${JSON.stringify(Va(e),null,2)}
-`,{mode:384})}function Va(e){return{...e,...e.harnessRoot?.trim()?{harnessRoot:he(e.harnessRoot.trim())}:{},...e.defaultRepo?.trim()?{defaultRepo:he(e.defaultRepo.trim())}:{}}}function Mt(e){return Va(e)}function xv(e,r){let t=Ln(),n=(typeof r.apiBaseUrl=="string"?r.apiBaseUrl:void 0)||e.apiBaseUrl?.trim()||process.env.KYNVER_API_URL?.trim()||process.env.KYNVER_CRON_FIRE_BASE_URL?.trim()||process.env.OPENCLAW_CRON_FIRE_BASE_URL?.trim(),o=(typeof r.agentOsId=="string"?r.agentOsId:void 0)||e.agentOsId?.trim()||process.env.KYNVER_AGENT_OS_ID?.trim()||(t.runnerToken?.trim().startsWith("krc1.")?t.runnerTokenAgentOsId?.trim():void 0),i=(typeof r.repo=="string"?r.repo:r.discoverRepo===!0||r.discoverRepo==="true"?kr()?.repo:void 0)||e.defaultRepo?.trim()||process.env.KYNVER_DEFAULT_REPO?.trim()||process.env.KYNVER_HARNESS_REPO?.trim()||kr()?.repo,a=(typeof r.harnessRoot=="string"?r.harnessRoot:void 0)||e.harnessRoot?.trim()||process.env.KYNVER_HARNESS_ROOT?.trim()||process.env.OPUS_HARNESS_ROOT?.trim();return{...n?{apiBaseUrl:tr(n)}:{},...o?{agentOsId:o}:{},...i?{defaultRepo:i}:{},...a?{harnessRoot:a}:{},...typeof r.agentOsSlug=="string"?{agentOsSlug:r.agentOsSlug}:e.agentOsSlug?{agentOsSlug:e.agentOsSlug}:{}}}function Ev(e,r,t=Cv()){let n=typeof r.maxWorkers=="string"?r.maxWorkers:typeof r.maxConcurrentWorkers=="string"?r.maxConcurrentWorkers:void 0,o=typeof r.boxKind=="string"?r.boxKind:typeof r["box-kind"]=="string"?String(r["box-kind"]):void 0,s=Te(process.env,{...e,...o?{boxKind:wt(o)}:{}}).boxKind,i=Me({diskPath:typeof r.diskPath=="string"?r.diskPath:"/"}),a=Fa({totalMemBytes:t,diskPath:i.path,diskGateOk:i.ok,diskFreeBytes:i.freeBytes,config:e});return n?{maxConcurrentWorkers:Math.max(1,Math.floor(Number(n))),maxConcurrentWorkersSource:"setup-flag",boxKind:s}:e.maxConcurrentWorkers!==void 0&&e.maxConcurrentWorkers!==null?{maxConcurrentWorkers:Math.max(1,Math.floor(Number(e.maxConcurrentWorkers))),maxConcurrentWorkersSource:e.maxConcurrentWorkersSource??"operator",boxKind:s}:{maxConcurrentWorkers:a.recommendedMaxWorkers,maxConcurrentWorkersSource:"setup-auto",boxKind:s}}function Ln(){if(!Vd(Dt))return{};try{return JSON.parse(Yd(Dt,"utf8"))}catch{return{}}}function qd(e){Gd(ns,{recursive:!0}),Jd(Dt,`${JSON.stringify(e,null,2)}
-`,{mode:384})}function ee(){return process.env.KYNVER_API_KEY?process.env.KYNVER_API_KEY:Ln().apiKey}function Un(e){qd({...Ln(),apiKey:e})}function jd(e){let r=process.env.KYNVER_RUNNER_TOKEN?.trim();if(r)return r;let t=Ln();if(t.runnerToken&&!(e&&t.runnerTokenAgentOsId&&t.runnerTokenAgentOsId!==e))return t.runnerToken}function jr(e,r){qd({...Ln(),runnerToken:r,runnerTokenAgentOsId:e})}function B(e){let r=Bn(e);return r||ss("requires --base-url, KYNVER_API_URL, KYNVER_CRON_FIRE_BASE_URL, or ~/.kynver/config.json apiBaseUrl"),r}function Ga(e){return Bn(e)}function Bn(e){let r=e||process.env.KYNVER_API_URL||process.env.KYNVER_CRON_FIRE_BASE_URL||process.env.OPENCLAW_CRON_FIRE_BASE_URL||v().apiBaseUrl;return r?tr(String(r)):void 0}function zd(e,r){let t=e||jd(r)||(r?void 0:jd(v().agentOsId));if(t)return String(t);let n=process.env.KYNVER_RUNTIME_SECRET||process.env.KYNVER_CRON_SECRET||process.env.OPENCLAW_CRON_SECRET;if(n)return console.warn("[kynver] using deployment-level callback secret; run `kynver runner credential --agent-os-id <id>` for a scoped token"),String(n)}function Pv(e,r){let t=zd(e,r);if(t)return t;ss("requires --secret, KYNVER_RUNNER_TOKEN, a scoped runner token (`kynver runner credential`), ~/.kynver/credentials runnerToken, KYNVER_API_KEY with an API base URL to mint one, or (legacy) KYNVER_RUNTIME_SECRET / KYNVER_CRON_SECRET / OPENCLAW_CRON_SECRET")}async function os(e,r,t){let n=zd(e,r);if(n)return{ok:!0,secret:n};let o=ee(),s=Bn(t?.baseUrl);if(o&&r&&s)try{let i=await Vr(r,{baseUrl:s,apiKey:o});return jr(r,i),{ok:!0,secret:i}}catch(i){return{ok:!1,reason:`runner credential mint failed: ${i.message}`}}return{ok:!1,reason:"no runner credential: requires --secret, KYNVER_RUNNER_TOKEN, a scoped runner token (`kynver runner credential`), ~/.kynver/credentials runnerToken, or KYNVER_API_KEY + API base URL to mint one"}}async function K(e,r,t){let n=await os(e,r,t);if(n.ok)return n.secret;ss(n.reason)}async function Xd(e,r){let t=ee(),n=Bn(r?.baseUrl);if(!t||!e||!n)return null;try{let o=await Vr(e,{baseUrl:n,apiKey:t});return jr(e,o),o}catch{return null}}async function Qd(e,r,t){let n=ee(),o=Bn(t?.baseUrl);if(!n)return{ok:!1,reason:"KYNVER_API_KEY is required to refresh a rejected runner token"};if(!r)return{ok:!1,reason:"agentOsId is required to refresh a rejected runner token"};if(!o)return{ok:!1,reason:"KYNVER_API_URL or --base-url is required to refresh a rejected runner token"};try{let s=await Vr(r,{baseUrl:o,apiKey:n});return s&&s!==e?(jr(r,s),{ok:!0,token:s}):{ok:!1,reason:"runner credential refresh returned the rejected token"}}catch(s){return{ok:!1,reason:s.message}}}async function Vr(e,r){let t=r?.apiKey||ee();if(!t)throw new Error("API key required \u2014 run `kynver login` first");let o=`${B(r?.baseUrl)}/api/agent-os/by-id/${encodeURIComponent(e)}/runner-credentials`,s=await fetch(o,{method:"POST",headers:{"Content-Type":"application/json",Authorization:`Bearer ${t}`},body:JSON.stringify({})}),i=await s.text(),a=null;try{a=JSON.parse(i)}catch{a=null}if(!s.ok||!a?.token)throw new Error(`runner credential mint failed (${s.status}): ${a?.error??i.slice(0,200)}`);return a.token}async function Zd(e){let r=(e.agentOsId?String(e.agentOsId):v().agentOsId)||"";r||ss("runner credential requires --agent-os-id or agentOsId in ~/.kynver/config.json");try{let t=await Vr(r,{baseUrl:e.baseUrl?String(e.baseUrl):void 0});jr(r,t),console.log(JSON.stringify({ok:!0,agentOsId:r,credentialsPath:Y(Dt),tokenPrefix:`${t.slice(0,12)}\u2026`,note:"Scoped runner token saved; callbacks use X-Kynver-Runner-Token."},null,2))}catch(t){console.error(t instanceof Error?t.message:String(t)),process.exit(1)}}function ss(e){console.error(e),process.exit(1)}function Wn(e){let r={};for(let t=0;t<e.length;t++){let n=e[t];if(!n.startsWith("--"))continue;let o=n.slice(2).replace(/-([a-z])/g,(i,a)=>a.toUpperCase()),s=e[t+1];!s||s.startsWith("--")?r[o]=!0:(r[o]=s,t++)}return r}async function is(e){let r=v(),t=Me({diskPath:typeof e.diskPath=="string"?e.diskPath:"/"}),n=Fa({totalMemBytes:_v.totalmem(),diskPath:t.path,diskGateOk:t.ok,diskFreeBytes:t.freeBytes,config:r}),o=Ev(r,e),s=Va({...r,...xv(r,e),...o,workerProvider:typeof e.provider=="string"?e.provider:r.workerProvider||"cursor",...e.chatOauth===!0?{chatUseClaudeOauth:!0}:{}});Ve(s);let i=Te(process.env,s),a,l=ee(),c=s.agentOsId;if(l&&c)try{let u=await Vr(c,{baseUrl:typeof e.apiBaseUrl=="string"?e.apiBaseUrl:s.apiBaseUrl,apiKey:l});jr(c,u),a="Scoped runner token minted and saved to ~/.kynver/credentials."}catch{a="Runner token not minted (server offline or master secret unset). Run `kynver runner credential` after deploy."}console.log(JSON.stringify({ok:!0,configPath:Y(ts),config:Mt(s),boxKind:s.boxKind,boxKindSource:i.source,workerCapRecommendation:n,...i.warnings.length?{boxIdentityWarnings:i.warnings}:{},note:a??"boxKind and maxConcurrentWorkers persisted; override with --box-kind and --max-workers. Run `kynver login` + `kynver runner credential` for scoped callbacks."},null,2))}async function ep(e){let r=typeof e.apiKey=="string"?e.apiKey:process.env.KYNVER_API_KEY;if(r){Un(r),console.log(JSON.stringify({ok:!0,credentialsPath:Y(Dt)},null,2));return}let{runDeviceLogin:t}=await Promise.resolve().then(()=>(Ka(),Kd));(await t(e)).ok||process.exit(1),console.log(JSON.stringify({ok:!0,credentialsPath:Y(Dt)},null,2))}var ns,ts,Dt,AN,IN,O=F(()=>{"use strict";bn();nr();w();De();rs();_t();ns=ja.join(wv(),".kynver"),ts=ja.join(ns,"config.json"),Dt=ja.join(ns,"credentials");AN=500*1024*1024,IN=4*1024*1024*1024});import{existsSync as Ty,readFileSync as Dy}from"node:fs";import{dirname as ca,join as Hu}from"node:path";import{fileURLToPath as Wu}from"node:url";function My(e){let r=ca(Wu(e));for(let t=0;t<6;t+=1){if(Ty(Hu(r,"package.json")))return r;let n=ca(r);if(n===r)break;r=n}throw new Error(`package.json not found above ${ca(Wu(e))}`)}function Fu(e=import.meta.url){let r=Hu(My(e),"package.json"),t=JSON.parse(Dy(r,"utf8"));if(typeof t.version!="string"||!t.version.trim())throw new Error(`Missing package.json version at ${r}`);return t.version}var yn=Fu();function Uy(e){return e.some(r=>r==="--version"||r==="-v")}function Ly(e,r){console.log(r?`${r} ${e}`:e),process.exit(0)}function $u(e,r=import.meta.url,t){return Uy(e)?(Ly(Fu(r),t),!0):!1}bn();import{existsSync as od,readFileSync as qy}from"node:fs";import Fo from"node:path";var Ra={"@kynver-app/runtime":"0.1.83","@kynver-app/openclaw-agent-os":"0.1.43","@kynver-app/mcp-agent-os":"0.3.34"},va=Object.keys(Ra),ya={"@kynver-app/runtime":"Kynver runtime","@kynver-app/openclaw-agent-os":"OpenClaw AgentOS plugin","@kynver-app/mcp-agent-os":"AgentOS MCP server"},zy={"@kynver-app/runtime":"packages/kynver-runtime/package.json","@kynver-app/openclaw-agent-os":"packages/kynver-openclaw-agent-os/package.json","@kynver-app/mcp-agent-os":"packages/kynver-mcp-agent-os/package.json"};function sd(e){let r=e.trim().split("-")[0]?.split("+")[0];if(!r)return null;let t=r.split(".");if(t.length<1||t.length>3)return null;let n=t.map(o=>Number.parseInt(o,10));if(n.some(o=>!Number.isFinite(o)||o<0))return null;for(;n.length<3;)n.push(0);return[n[0],n[1],n[2]]}function wn(e,r){let t=sd(e),n=sd(r);if(!t||!n)return 0;for(let o=0;o<3;o+=1){if(t[o]>n[o])return 1;if(t[o]<n[o])return-1}return 0}function ba(e,r){return wn(e,r)>=0}function Xy(e){let r=null;for(let t of e)(!r||wn(t,r)>0)&&(r=t);return r}function Qy(e){try{let r=JSON.parse(qy(e,"utf8"));return typeof r.version=="string"&&r.version.trim()?r.version.trim():null}catch{return null}}function Zy(e,r){let t=[r,process.env.KYNVER_REPO,e].filter(o=>!!o?.trim());for(let o of t){let s=Fo.resolve(o);if(od(Fo.join(s,"packages/kynver-runtime/package.json"))&&od(Fo.join(s,"package.json")))return s}return kr({cwd:e})?.repo??null}function Sa(e={}){let r=e.cwd??process.cwd(),t=Zy(r,e.repoRoot);if(!t)return{};let n={};for(let o of va){let s=Fo.join(t,zy[o]),i=Qy(s);i&&(n[o]={version:i,source:"repo",path:s})}return n}function eR(e){return e==="@kynver-app/runtime"?["npm run kynver:build","npm run kynver"]:[`npm run build -w ${e}`]}function rR(e){let{packageName:r,minimumVersion:t,effectiveVersion:n,effectiveSource:o,repoVersion:s}=e,i=[];return s&&ba(s,t)?(i.push(`Use the monorepo checkout (${s}) instead of a stale npm install: ${eR(r).join("; ")}.`),i.push("Do not publish npm packages or wait on an operator release."),i):(n?i.push(`Upgrade ${r} from ${n} to >= ${t} (npm install -g ${r}@latest or align OpenClaw npm prefix).`):i.push(`Install ${r} >= ${t} before running memory-heavy AgentOS paths.`),r==="@kynver-app/runtime"&&i.push("Repo-source alternative: npm run kynver:build && npm run kynver"),o==="installed"&&s&&i.push(`Repo checkout reports ${s}; rebuild/link repo source if you develop from the monorepo.`),i)}function tR(e){if(e.length===0)return{version:null,source:"unknown"};let r=Xy(e.map(n=>n.version));if(!r)return{version:null,source:"unknown"};let t=e.find(n=>n.version===r)??e[0];return{version:t.version,source:t.source}}function $o(e={}){let r=(i,a)=>i?typeof i=="string"?{version:i,source:a}:i:null,t=va.map(i=>{let a=Ra[i],l=[],c=r(e.installed?.[i],"installed"),u=r(e.repo?.[i],"repo"),d=r(e.self?.[i],"self");c&&l.push(c),u&&l.push(u),d&&l.push(d);let{version:f,source:m}=tR(l),p=u?.version??null,g=f?ba(f,a):!1,k=g?[]:rR({packageName:i,minimumVersion:a,effectiveVersion:f,effectiveSource:m,repoVersion:p}),h=g?`${ya[i]} ${f} meets memory-cost minimum ${a} (${m}).`:`${ya[i]} is below memory-cost minimum ${a}`+(f?` (effective ${f} via ${m})`:" (no version detected)")+".";return{packageName:i,displayName:ya[i],minimumVersion:a,effectiveVersion:f,effectiveSource:m,ok:g,summary:h,remediation:k}}),n=t.filter(i=>!i.ok),o=n.length===0,s=o?"All managed AgentOS packages meet memory-cost minimum versions.":`Memory-cost package guard blocked ${n.length} stale package(s): ${n.map(i=>`${i.packageName} < ${i.minimumVersion}`).join("; ")}.`;return{ok:o,summary:s,packages:t}}var Sn=class extends Error{result;constructor(r){let t=[r.summary,...r.packages.filter(n=>!n.ok).flatMap(n=>[`- ${n.summary}`,...n.remediation.map(o=>`  \u2192 ${o}`)])];super(t.join(`
-`)),this.name="MemoryCostPackageVersionGuardError",this.result=r}};function wa(e={}){let r=$o(e);if(!r.ok)throw new Sn(r);return r}function nR(e){return new Sn(e).message}import{readFile as oR}from"node:fs/promises";import{homedir as sR}from"node:os";import Dr from"node:path";var iR=["@kynver-app/runtime","@kynver-app/openclaw-agent-os","@kynver-app/mcp-agent-os"];function St(e){let r=e?.trim();return r||null}function aR(e){return[...new Set(e.filter(r=>!!r))]}function lR(){let e=sR(),r=St(process.env.KYNVER_OPENCLAW_NPM_ROOT)??St(process.env.OPENCLAW_NPM_ROOT)??Dr.join(e,".openclaw","npm"),t=St(process.env.KYNVER_NPM_GLOBAL_ROOT)??St(process.env.KYNVER_NPM_GLOBAL_MODULES_ROOT)??(St(process.env.NPM_CONFIG_PREFIX)?Dr.join(St(process.env.NPM_CONFIG_PREFIX),"lib","node_modules"):Dr.join(e,".npm-global","lib","node_modules"));return aR([Dr.join(r,"lib","node_modules"),Dr.join(r,"node_modules"),t.endsWith("node_modules")?t:Dr.join(t,"lib","node_modules")])}async function cR(e){try{let r=JSON.parse(await oR(e,"utf8"));return typeof r.version=="string"&&r.version.trim()?r.version.trim():null}catch{return null}}function uR(e){let r=lR(),t=new Set,n=[];for(let o of r){let s=Dr.join(o,e,"package.json");t.has(s)||(t.add(s),n.push(s))}return n}async function Ko(e=new Date().toISOString()){let r={};for(let t of iR){let n=null;for(let o of uR(t)){let s=await cR(o);s&&(!n||wn(s,n.version)>0)&&(n={version:s,path:o})}n&&(r[t]={version:n.version,observedAt:e,path:n.path})}return r}function dR(e){let r={};for(let[t,n]of Object.entries(e))n?.version&&(r[t]={version:n.version,source:"installed",path:n.path});return r}async function Ca(e={}){let[r,t]=await Promise.all([Ko(),Promise.resolve(Sa({cwd:e.cwd,repoRoot:e.repoRoot}))]),n={},o=e.selfPackageName==="@kynver-app/runtime"&&e.selfVersion?e.selfVersion:yn;return n["@kynver-app/runtime"]={version:o,source:"self"},e.selfPackageName&&e.selfVersion&&e.selfPackageName!=="@kynver-app/runtime"&&(n[e.selfPackageName]={version:e.selfVersion,source:"self"}),{installed:dR(r),repo:t,self:n}}async function pR(e={}){let r=await Ca(e);return $o(r)}async function _a(e={}){let r=await Ca(e);return wa(r)}function xa(e,r){return e?e==="daemon"||e==="start"||e==="worker"||e==="monitor"||e==="run"&&(r==="dispatch"||r==="sweep"||r==="reconcile"||r==="unblock")||e==="cron"&&r==="tick":!1}O();function Le(e){let r=String(e).trim();return r.startsWith("krc1.")?{"Content-Type":"application/json","X-Kynver-Runner-Token":r}:{"Content-Type":"application/json","X-Kynver-Cron-Secret":r,"X-OpenClaw-Cron-Secret":r,"X-Kynver-Runtime-Secret":r}}O();function rp(){let e=Number(process.env.KYNVER_CALLBACK_TIMEOUT_MS);return Number.isFinite(e)&&e>0?Math.floor(e):3e4}async function tp(e){let r=new AbortController,t=setTimeout(()=>r.abort(),rp());try{return await e(r.signal)}finally{clearTimeout(t)}}function np(e){return{ok:!1,status:0,response:{error:e instanceof Error?e.message:String(e),timeoutMs:rp()}}}async function Rr(e,r,t){let n;try{n=await tp(s=>fetch(e,{method:"POST",headers:Le(r),body:JSON.stringify(t),signal:s}))}catch(s){return np(s)}let o=null;try{o=await n.json()}catch{o=null}return{ok:n.ok,status:n.status,response:o}}async function q(e,r,t,n){let o=await Rr(e,r,t);if(o.ok||o.status!==401)return o;let s=await Qd(r,n.agentOsId,{baseUrl:n.baseUrl});return s.ok?{...await Rr(e,s.token,t),refreshedAuth:!0}:{...o,authRefreshFailure:s.reason}}async function as(e,r){let t;try{t=await tp(o=>fetch(e,{method:"GET",headers:Le(r),signal:o}))}catch(o){return np(o)}let n=null;try{n=await t.json()}catch{n=null}return{ok:t.ok,status:t.status,response:n}}var op="embedded-1",Av=[{slug:"ghost",displayName:"Ghost",description:"Orchestration persona.",dispatchLane:null,defaultRoleLane:"system"},{slug:"astra",displayName:"Astra",description:"Planning persona.",dispatchLane:"implementation",defaultRoleLane:"plan_author"},{slug:"rhea",displayName:"Rhea",description:"Implementation persona.",dispatchLane:"implementation",defaultRoleLane:"implementer"},{slug:"mnemo",displayName:"Mnemo",description:"Implementation persona.",dispatchLane:"implementation",defaultRoleLane:"implementer"},{slug:"sentinel",displayName:"Sentinel",description:"Review persona.",dispatchLane:"review",defaultRoleLane:"deep_reviewer"},{slug:"pixel",displayName:"Pixel",description:"Implementation persona.",dispatchLane:"implementation",defaultRoleLane:"implementer"},{slug:"schema",displayName:"Schema",description:"Implementation persona.",dispatchLane:"implementation",defaultRoleLane:"implementer"},{slug:"atlas",displayName:"Atlas",description:"Implementation persona.",dispatchLane:"implementation",defaultRoleLane:"runtime_verifier"},{slug:"bridge",displayName:"Bridge",description:"Implementation persona.",dispatchLane:"implementation",defaultRoleLane:"implementer"},{slug:"catalyst",displayName:"Catalyst",description:"Implementation persona.",dispatchLane:"implementation",defaultRoleLane:"implementer"},{slug:"lorentz",displayName:"Lorentz",description:"Review persona.",dispatchLane:"review",defaultRoleLane:"report_reviewer"},{slug:"dalton",displayName:"Dalton",description:"Landing persona.",dispatchLane:"landing",defaultRoleLane:"implementer"}],Iv={"worker.prompt.core_rules":["Structured final result (recommended): record completion as JSON with summary, files, PR URLs, verification, risks, and blockers.","Completion handoff (required): before you stop, summarize the outcome in your last message and append a heartbeat line with phase `complete`. Commit your work cleanly and open a GitHub PR (draft OK) for substantial changes \u2014 never leave uncommitted changes behind without reporting them.","Review-only workers must not open new implementation PRs \u2014 review the existing PR and record a verdict in the final result.","Keep verification targeted to touched paths; avoid full-monorepo verification unless explicitly requested.","Do not run `npm publish`.","If verification fails, append a heartbeat line immediately with the failing command, reason, and next action."].join(`
+`):""}function vd(e){return e?Ia(Rd.resolve(e),"utf8"):""}function Br(e){Atomics.wait(new Int32Array(new SharedArrayBuffer(4)),0,0,e)}function Cr(e){return new Promise(r=>setTimeout(r,e))}function $(e){if(!e)return!1;try{return process.kill(e,0),!0}catch{return!1}}function An(e,r){try{process.kill(-e,r)}catch{process.kill(e,r)}}function Sd(e){let r=null,t=-1/0;for(let n of e){if(!n)continue;let o=Date.parse(n);Number.isFinite(o)&&o>t&&(t=o,r=n)}return r}function Oa(e){return Math.max(0,Math.round((Date.now()-e)/1e3))}var C=j(()=>{"use strict"});function Na(e){return MR.has(e)?!0:UR.some(r=>e.endsWith(r))}function wd(e){return Object.keys(e).filter(Na).sort()}function De(e){let r={...e};for(let t of Object.keys(r))Na(t)&&delete r[t];return r}function WR(e){let r=wd(e);return{forbiddenPresent:r,safe:r.length===0}}function _d(e){return De(e)}var Cd,MR,UR,Hr=j(()=>{"use strict";Cd=["ANTHROPIC_API_KEY","ANALYST_API_KEY","RECRUITER_API_KEY","AUTH_SECRET","NEXTAUTH_SECRET","DATABASE_URL","PRODUCTION_DATABASE_URL","KYNVER_PRODUCTION_DATABASE_URL","REDIS_URL","GOOGLE_CLIENT_SECRET","GITHUB_CLIENT_SECRET","KYNVER_API_KEY","KYNVER_SERVICE_SECRET","KYNVER_RUNTIME_SECRET","KYNVER_CRON_SECRET","OPENCLAW_CRON_SECRET","QSTASH_TOKEN","QSTASH_CURRENT_SIGNING_KEY","QSTASH_NEXT_SIGNING_KEY","TOOL_SECRETS_KEK","TOOL_EXECUTOR_DISPATCH_SECRET","CLOUDFLARE_API_TOKEN","STRIPE_SECRET_KEY","STRIPE_WEBHOOK_SECRET","STRIPE_IDENTITY_WEBHOOK_SECRET","VOYAGE_API_KEY","PERPLEXITY_API_KEY","FRED_API_KEY","FMP_API_KEY","CURSOR_API_KEY"],MR=new Set(Cd),UR=["_SECRET","_API_KEY"]});import{spawnSync as Ed}from"node:child_process";function pe(e,r,t={}){let n=Ed("git",r,ue({cwd:e,encoding:"utf8"}));if(n.status!==0&&!t.allowFailure){let o=`git ${r.join(" ")} failed: ${n.stderr||n.stdout}`;if(t.throwError)throw new Error(o);Sr(o)}return n.stdout||""}function Pd(e){pe(e,["rev-parse","--show-toplevel"])}function In(e){return pe(e,["status","--short"],{allowFailure:!0}).split(`
+`).map(r=>r.trim()).filter(Boolean)}function re(e,r){try{let t=Ed("git",r,ue({cwd:e,encoding:"utf8"}));return{status:t.status,stdout:t.stdout||"",stderr:t.stderr||"",error:t.error?t.error.message:null}}catch(t){return{status:null,stdout:"",stderr:"",error:t.message}}}function xd(e,r,t){let n=re(e,["merge-base","--is-ancestor",r,t]);return n.status===0?{isAncestor:!0,error:null}:n.status===1?{isAncestor:!1,error:null}:{isAncestor:null,error:n.error||n.stderr||n.stdout||`git exited ${n.status}`}}function es(e,r="origin/main"){let t=typeof r=="string"?{base:r}:r,n=t.baseCommit?.trim()||t.base?.trim()||"origin/main",o=t.baseCommit?.trim()||null;if(!e)return Ta(n,"missing worktree path");let s=re(e,["rev-parse","HEAD"]);if(s.status!==0)return Ta(n,s.error||s.stderr||s.stdout||"failed to resolve HEAD");let i;if(o)i=o;else{let f=re(e,["rev-parse",n]);if(f.status!==0)return Ta(n,f.error||f.stderr||f.stdout||`failed to resolve ${n}`,s.stdout.trim());i=f.stdout.trim()}let a=s.stdout.trim();if(a===i)return{checked:!0,base:n,head:a,baseHead:i,baseIsAncestorOfHead:!0,headIsAncestorOfBase:!0,relation:"synced"};let l=xd(e,i,a),c=xd(e,a,i),u=l.error||c.error||void 0;if(l.isAncestor==null||c.isAncestor==null)return{checked:!1,base:n,head:a,baseHead:i,baseIsAncestorOfHead:l.isAncestor,headIsAncestorOfBase:c.isAncestor,relation:"unknown",...u?{error:u}:{}};let d=l.isAncestor?"ahead":c.isAncestor?"merged":"diverged";return{checked:!0,base:n,head:a,baseHead:i,baseIsAncestorOfHead:l.isAncestor,headIsAncestorOfBase:c.isAncestor,relation:d,...u?{error:u}:{}}}function Ta(e,r,t=null){return{checked:!1,base:e,head:t,baseHead:null,baseIsAncestorOfHead:null,headIsAncestorOfBase:null,relation:"unknown",error:r}}var Ee=j(()=>{"use strict";C();Hr()});import{homedir as Da}from"node:os";import Fr from"node:path";function Ad(e){return e==="~"?Da():e.startsWith("~/")||e.startsWith("~\\")?Fr.join(Da(),e.slice(2)):e}function Ot(e){return Fr.resolve(Ad(e))}function Se(e){let r=Ad(e),t=Fr.resolve(r),n=Fr.resolve(Da());return t===n?"~":t.startsWith(`${n}${Fr.sep}`)?`~/${Fr.relative(n,t).split(Fr.sep).join("/")}`:t.replace(/\\/g,"/").replace(/^\/home\/[^/]+(?=\/|$)/,"~").replace(/^\/Users\/[^/]+(?=\/|$)/,"~").replace(/^[A-Za-z]:\/home\/[^/]+(?=\/|$)/i,"~").replace(/^[A-Za-z]:\/Users\/[^/]+(?=\/|$)/i,"~")}function q(e){return Se(e)}var ir=j(()=>{"use strict"});import{existsSync as Wa,readFileSync as Id}from"node:fs";import{homedir as LR}from"node:os";import ar from"node:path";import{fileURLToPath as BR}from"node:url";function FR(e){let r=ar.join(e,"package.json");if(!Wa(r))return null;try{let t=JSON.parse(Id(r,"utf8"));return typeof t.name=="string"?t.name.trim():null}catch{return null}}function Od(e){return FR(e)==="kynver"}function Ua(e){let r=ar.resolve(e);if(!Wa(r))return null;let t=re(r,["rev-parse","--show-toplevel"]);if(t.status!==0)return null;let n=t.stdout.trim();return n.length?ar.resolve(n):null}function $R(e=import.meta.url){let r=ar.dirname(BR(e));for(let t=0;t<8;t+=1){let n=ar.join(r,"package.json");if(Wa(n))try{if(JSON.parse(Id(n,"utf8")).name==="@kynver-app/runtime")return r}catch{}let o=ar.dirname(r);if(o===r)break;r=o}return null}function Ma(e,r,t,n){if(!t)return;let o=ar.resolve(t);e.has(o)||Od(o)&&(e.add(o),r.push({repo:o,source:n}))}function La(e){let r=e?.cwd??process.cwd(),t=new Set,n=[];Ma(t,n,Ua(r),"cwd_git");let o=$R(e?.runtimeModuleUrl??import.meta.url);o&&Ma(t,n,Ua(o),"runtime_checkout");let s=LR();for(let i of HR)Ma(t,n,Ot(ar.join(s,i)),"well_known_path");return n}function $r(e){return La(e)[0]??null}function Nd(e){let r=ar.resolve(e).replace(/\\/g,"/");return r.includes("/.kynver/harness/worktrees/")||r.includes("/.openclaw/harness/worktrees/")||r.includes("/kynver-harness/")||r.includes("/openclaw/harness/worktrees/")}function On(e){let r=La(e);return r.find(n=>!Nd(n.repo))??r[0]??null}var HR,Nn=j(()=>{"use strict";Ee();ir();HR=["Kynver","repos/Kynver","repos/kynver-source-main","code/Kynver","projects/Kynver"]});function Tt(e){let r=(e??"").trim().toLowerCase();return r==="ghost"||r==="forge"?r:r.includes("forge")?"forge":r.includes("ghost")||r.includes("openclaw")?"ghost":"forge"}function Md(e,r){return e[r]?.trim()||null}function Me(e=process.env,r={}){let t=[],n=r.boxKind?.trim();if(n)return{boxKind:Tt(n),source:"config",slugInferenceBlocked:!1,warnings:t};let o=Md(e,"KYNVER_BOX_KIND");if(o)return{boxKind:Tt(o),source:"env",slugInferenceBlocked:!1,warnings:t};let s=Md(e,"KYNVER_AGENT_OS_SLUG");return s&&t.push(`KYNVER_AGENT_OS_SLUG=${s} is a workspace slug, not box identity \u2014 set boxKind via \`kynver setup --box-kind forge|ghost\` or KYNVER_BOX_KIND (defaulting box kind to forge)`),{boxKind:"forge",source:"default",slugInferenceBlocked:!!s,warnings:t}}function Ve(e={},r=process.env){return Me(r,e).boxKind}var Ue=j(()=>{"use strict"});import{readFileSync as ab}from"node:fs";import Ud from"node:os";function Dt(e){if(e!==void 0){let r=e.match(/^MemAvailable:\s+(\d+)\s*kB/m);return r?Number(r[1])*1024:Ud.freemem()}if(process.platform==="linux")try{let t=ab("/proc/meminfo","utf8").match(/^MemAvailable:\s+(\d+)\s*kB/m);if(t)return Number(t[1])*1024}catch{}return Ud.freemem()}var os=j(()=>{"use strict"});import{existsSync as lb,readFileSync as cb,statfsSync as ub}from"node:fs";function ss(){if(process.platform!=="linux")return!1;for(let e of["/proc/sys/kernel/osrelease","/proc/version"])try{if(!lb(e))continue;let r=cb(e,"utf8");if(/microsoft|wsl/i.test(r))return!0}catch{}return!1}function Ja(e={}){if(!(e.forceWsl===void 0?ss():e.forceWsl))return null;let t=e.wslHostMount?.trim()||process.env.KYNVER_WSL_HOST_MOUNT?.trim()||jr,n=e.wslHostFreeWarnBytes??Wd,o=e.wslHostFreeCriticalBytes??Ld,s=e.statfs??ub,i;try{i=s(t)}catch(g){return{ok:!1,path:t,freeBytes:0,totalBytes:0,usedPercent:100,warnBelowBytes:n,criticalBelowBytes:o,reason:`Windows host disk probe failed at ${t}: ${g.message}`,probeError:g.message}}let a=Number(i.bavail)*Number(i.bsize),l=Number(i.blocks)*Number(i.bsize),c=l>0?(l-a)/l*100:100,u=a<n,d=a<o,f=!u&&!d,m=(a/(1024*1024*1024)).toFixed(1),p=null;return f||(p=`Windows host disk ${t} at ${d?"critical":"warning"}: ${m} GiB free (<${(d?o:n)/1024/1024/1024} GiB); WSL VHDX cannot grow safely. ${Bd()}`),{ok:f,path:t,freeBytes:a,totalBytes:l,usedPercent:c,warnBelowBytes:n,criticalBelowBytes:o,reason:p,probeError:null}}function Bd(){return"Recovery: 1) free Windows C: (empty Recycle Bin / Storage Sense / clear %TEMP% and %LOCALAPPDATA%\\Temp\\wsl-crashes); 2) shut down WSL (`wsl --shutdown`) then compact the VHDX (`Optimize-VHD` or `diskpart compact vdisk`); 3) clear local node_modules / .next / harness worktrees before restarting workers; 4) disable recurring dumps via `%USERPROFILE%/.wslconfig` (`maxCrashDumpCount=-1`) or `kynver wsl-crashes --execute`. Full runbook: docs/runbooks/wsl-disk-pressure.md."}var Wd,Ld,jr,is=j(()=>{"use strict";Wd=25*1024*1024*1024,Ld=12*1024*1024*1024,jr="/mnt/c"});import{execFileSync as Hd}from"node:child_process";import{existsSync as ls,readFileSync as Fd,readdirSync as db,statSync as pb}from"node:fs";import qa from"node:path";function as(e,r){let t=process.env[e];if(!t)return r;let n=Number(t);return Number.isFinite(n)?n:r}function za(){let e=process.env.KYNVER_WSL_WIN_USER?.trim();if(e)return e;try{let n=Hd("cmd.exe",["/c","echo","%USERNAME%"],{encoding:"utf8",timeout:5e3,stdio:["ignore","pipe","ignore"]}).trim();if(n&&n!=="%USERNAME%"&&!n.includes("%"))return n}catch{}let r=process.env.USER?.trim()||process.env.LOGNAME?.trim(),t=process.env.KYNVER_WSL_HOST_MOUNT?.trim()||jr;return r&&ls(qa.join(t,"Users",r))?r:null}function jd(e={}){let r=e.crashDumpDir?.trim()||process.env.KYNVER_WSL_CRASH_DUMP_DIR?.trim();if(r)return r;let t=e.hostMount?.trim()||process.env.KYNVER_WSL_HOST_MOUNT?.trim()||jr,n=e.windowsUser??za();return n?`${t.replace(/\\/g,"/").replace(/\/$/,"")}/Users/${n}/AppData/Local/Temp/wsl-crashes`:null}function Vd(e){let r=/^wsl-crash-\d+-(\d+)-(.+)-(\d+)\.dmp$/i.exec(e);if(!r)return{executableHint:null,signal:null,pid:null};let t=Number(r[1]),n=r[2]??"",o=Number(r[3]),s=n.split("_").filter(Boolean);return{executableHint:s.length>0?s[s.length-1]:null,signal:Number.isFinite(o)?o:null,pid:Number.isFinite(t)?t:null}}function Gd(){try{if(ls("/proc/sys/kernel/core_pattern"))return Fd("/proc/sys/kernel/core_pattern","utf8").trim()}catch{}try{return Hd("sysctl",["-n","kernel.core_pattern"],{encoding:"utf8",timeout:2e3,stdio:["ignore","pipe","ignore"]}).trim()||null}catch{return null}}function gb(e){return!!(e&&/wsl-capture-crash/i.test(e))}function Yd(e,r=jr){let t=qa.join(r,"Users",e,".wslconfig");if(!ls(t))return{maxCrashDumpCount:null,crashDumpFolder:null};let n;try{n=Fd(t,"utf8")}catch{return null}let o=null,s=null;for(let i of n.split(/\r?\n/)){let a=i.replace(/#.*$/,"").trim();if(!a||a.startsWith("["))continue;let l=a.indexOf("=");if(l<0)continue;let c=a.slice(0,l).trim().toLowerCase(),u=a.slice(l+1).trim();if(c==="maxcrashdumpcount"){let d=Number(u);o=Number.isFinite(d)?d:null}else c==="crashdumpfolder"&&(s=u.replace(/^["']|["']$/g,"")||null)}return{maxCrashDumpCount:o,crashDumpFolder:s}}function hb(e){if(!ls(e))return[];let r=db(e,{withFileTypes:!0}),t=[];for(let n of r){if(!n.isFile()||!n.name.toLowerCase().endsWith(".dmp"))continue;let o=qa.join(e,n.name);try{let s=pb(o),i=Vd(n.name);t.push({name:n.name,path:o,bytes:s.size,mtimeMs:s.mtimeMs,executableHint:i.executableHint,signal:i.signal,pid:i.pid})}catch{}}return t.sort((n,o)=>o.mtimeMs-n.mtimeMs),t}function lr(e={}){if(!(e.forceWsl===void 0?ss():e.forceWsl))return null;let t=e.hostMount?.trim()||process.env.KYNVER_WSL_HOST_MOUNT?.trim()||jr,n=e.windowsUser??za(),o=e.warnBelowBytes??as("KYNVER_WSL_CRASH_DUMP_WARN_BYTES",$d),s=e.criticalBelowBytes??as("KYNVER_WSL_CRASH_DUMP_CRITICAL_BYTES",Kd),i=e.warnCount??as("KYNVER_WSL_CRASH_DUMP_WARN_COUNT",mb),a=e.criticalCount??as("KYNVER_WSL_CRASH_DUMP_CRITICAL_COUNT",fb),l=(e.readCorePattern??Gd)(),c=gb(l),u=null;n&&(u=(e.readWslConfig??Yd)(n,t));let d=u?.maxCrashDumpCount??null,f=d===-1,m=jd({hostMount:t,windowsUser:n,crashDumpDir:e.crashDumpDir});if(!m)return{ok:!0,path:null,windowsUser:n,dumpCount:0,totalBytes:0,warnBelowBytes:o,criticalBelowBytes:s,warnCount:i,criticalCount:a,dumps:[],executables:[],corePattern:l,wslCaptureEnabled:c,maxCrashDumpCount:d,dumpsDisabledInWslConfig:f,reason:null,probeError:"windows_user_unresolved"};let p;try{p=(e.listDumps??hb)(m)}catch(D){return{ok:!1,path:m,windowsUser:n,dumpCount:0,totalBytes:0,warnBelowBytes:o,criticalBelowBytes:s,warnCount:i,criticalCount:a,dumps:[],executables:[],corePattern:l,wslCaptureEnabled:c,maxCrashDumpCount:d,dumpsDisabledInWslConfig:f,reason:`WSL crash dump probe failed at ${m}: ${D.message}`,probeError:D.message}}let g=p.reduce((D,w)=>D+w.bytes,0),k=p.length,h=[...new Set(p.map(D=>D.executableHint).filter(D=>!!D))],b=g>=s,x=g>=o,M=k>=a,P=k>=i,K=!(b||M||x||P),B=null;if(!K){let D=b||M?"critical":"warning",w=(g/1024**3).toFixed(1),le=h.length>0?h.join(", "):"unknown";B=`WSL crash dumps ${D}: ${k} file(s), ${w} GiB at ${m} (executables: ${le}). `+Jd({wslCaptureEnabled:c,dumpsDisabledInWslConfig:f})}return{ok:K,path:m,windowsUser:n,dumpCount:k,totalBytes:g,warnBelowBytes:o,criticalBelowBytes:s,warnCount:i,criticalCount:a,dumps:p,executables:h,corePattern:l,wslCaptureEnabled:c,maxCrashDumpCount:d,dumpsDisabledInWslConfig:f,reason:B,probeError:null}}function Jd(e={}){let r=["Recovery:","1) run `kynver wsl-crashes --execute` or scripts/cleanup-wsl-crashes.ps1 to prune old .dmp files;"];return e.dumpsDisabledInWslConfig||r.push("2) add `[wsl2]\\nmaxCrashDumpCount=-1` to %USERPROFILE%/.wslconfig then `wsl --shutdown` to disable future dumps;"),e.wslCaptureEnabled&&r.push("3) investigate crashing executables (node OOM/SIGBUS often follows Windows C: pressure \u2014 see docs/runbooks/wsl-disk-pressure.md);"),r.push("full runbook: docs/runbooks/wsl-disk-pressure.md."),r.join(" ")}var $d,Kd,mb,fb,Mt=j(()=>{"use strict";is();$d=5*1024*1024*1024,Kd=10*1024*1024*1024,mb=2,fb=4});import{statfsSync as kb}from"node:fs";function We(e={}){let r=e.diskPath?.trim()||"/",t=e.diskFreeWarnBytes??yb,n=e.diskFreeCriticalBytes??Rb,o=e.diskMaxUsedPercent??bb,s=e.diskHardMaxUsedPercent??vb,i=kb(r),a=Number(i.bavail)*Number(i.bsize),l=Number(i.blocks)*Number(i.bsize),c=l>0?(l-a)/l*100:100,u=a<t,d=a<n,f=a<t*2,m=f&&c>o,p=f&&c>s,g=!u&&!d&&!m&&!p,k=e.skipWslHostCheck?null:Ja(e.wslHost),h=e.skipWslCrashDumpCheck?null:lr(e.wslCrashDumps),b=g&&(k?k.ok:!0)&&(h?h.ok:!0),x=null;return b||(x=[d?`free space below critical ${n} bytes`:null,u?`free space below warning ${t} bytes`:null,p?`used percent above hard cap ${s}%`:null,m?`used percent above cap ${o}%`:null,k&&!k.ok?k.reason:null,h&&!h.ok?h.reason:null].filter(Boolean).join("; ")),Sb({ok:b,path:r,freeBytes:a,totalBytes:l,usedPercent:c,warnBelowBytes:t,criticalBelowBytes:n,maxUsedPercent:o,hardMaxUsedPercent:s,reason:x,wslHost:k,wslCrashDumps:h?{ok:h.ok,path:h.path,dumpCount:h.dumpCount,totalBytes:h.totalBytes,executables:h.executables,wslCaptureEnabled:h.wslCaptureEnabled,dumpsDisabledInWslConfig:h.dumpsDisabledInWslConfig,reason:h.reason,probeError:h.probeError}:null})}function Sb(e){let r=process.env.KYNVER_DISPATCH_DISK_GATE_FORCE?.trim().toLowerCase();return r?r==="ok"||r==="open"||r==="none"?e.ok?e:{...e,ok:!0,reason:`disk gate forced open by KYNVER_DISPATCH_DISK_GATE_FORCE (suppressed: ${e.reason??"no reason"})`}:r==="block"||r==="pressured"?{...e,ok:!1,reason:`disk gate forced closed by KYNVER_DISPATCH_DISK_GATE_FORCE${e.reason?` (underlying: ${e.reason})`:""}`}:e:e}var yb,Rb,bb,vb,Ut=j(()=>{"use strict";Mt();is();yb=30*1024*1024*1024,Rb=15*1024*1024*1024,bb=80,vb=90});import{existsSync as qd}from"node:fs";import{homedir as Xd}from"node:os";import wr from"node:path";function ie(e){let r=wr.resolve(Ot(e.trim()));for(;Cb.has(wr.basename(r));)r=wr.dirname(r);return r}function me(){let e=process.env.KYNVER_HARNESS_ROOT||process.env.OPUS_HARNESS_ROOT;if(e)return ie(e);let r=v().harnessRoot?.trim();if(r)return ie(r);let t=wr.join(Xd(),".kynver","harness");return qd(t)?t:qd(zd)?zd:t}function fe(e){return wr.join(ie(e),"runs")}function cr(e){return wr.join(ie(e),"worktrees")}function Vr(){let e=me();return{harnessRoot:e,runsDir:fe(e),worktreesDir:cr(e)}}function Wt(e,r){return wr.join(e,R(r))}var zd,Cb,Ce=j(()=>{"use strict";I();ir();C();zd=wr.join(Xd(),".openclaw","harness"),Cb=new Set(["runs","worktrees"])});import{existsSync as wb,readdirSync as _b,statSync as xb}from"node:fs";import Lt from"node:path";function te(){return Vr()}function L(e){let{runsDir:r}=te();return _(Lt.join(Wt(r,R(e)),"run.json"))}function J(){let{runsDir:e}=te();return Qd(e)}function cs(e){return Qd(fe(e))}function Eb(e){try{return xb(e).isDirectory()}catch{return!1}}function Qd(e){if(!wb(e))return[];let r=[];for(let t of _b(e,{withFileTypes:!0})){if(t.name==="runs")continue;let n=Lt.join(e,t.name);if(!Eb(n))continue;let o=_(Lt.join(n,"run.json"),void 0);o?.id&&r.push(o)}return r}function we(e,r){let{runsDir:t}=te();return _(Lt.join(Wt(t,R(e)),"workers",R(r),"worker.json"))}function Le(e){let{runsDir:r}=te();de(Lt.join(Wt(r,e.id),"run.json"),e)}function G(e,r){let{runsDir:t}=te();de(Lt.join(Wt(t,e),"workers",r.name,"worker.json"),r)}function E(e){let{harnessRoot:r}=te();return Mn(r,e)}function Mn(e,r){return Wt(fe(e),R(r))}var W=j(()=>{"use strict";Ce();C()});import{existsSync as Pb,readdirSync as Ab}from"node:fs";import Ib from"node:path";function ge(e){let r=new Set;for(let n of Object.keys(e.workers||{}))r.add(R(n));let t=Ib.join(E(e.id),"workers");if(!Pb(t))return[...r];for(let n of Ab(t,{withFileTypes:!0}))n.isDirectory()&&r.add(R(n.name));return[...r]}var Gr=j(()=>{"use strict";W();C()});function Xa(e){let r=e.trim();if(!r.startsWith("{"))return null;try{let t=JSON.parse(r);if(t&&typeof t=="object"&&!Array.isArray(t))return t}catch{return null}return null}function Zd(e){let r=e.trim();if(!r)return null;let t=Xa(r);if(t)return t;let n=[],o=/```(?:json)?\s*([\s\S]*?)```/gi,s;for(;(s=o.exec(r))!==null;){let l=Xa(s[1]??"");l&&n.push(l)}let i=r.indexOf("{"),a=r.lastIndexOf("}");if(i>=0&&a>i){let l=Xa(r.slice(i,a+1));l&&n.push(l)}return n.length>0?n[n.length-1]:null}function ep(e){let r=e.finalResult??e.final_result;if(r!=null)return typeof r=="string"?Zd(r)??(r.trim()||null):r;let t=typeof e.summary=="string"?e.summary.trim():"";if(!t)return null;let n=Zd(t);return n||t}var rp=j(()=>{"use strict"});import{existsSync as Ob,readFileSync as Nb}from"node:fs";function Qa(e){return e==="complete"}function Yr(e){return Qa(e.lastHeartbeatPhase)?e.terminalFinalResult!==void 0&&e.terminalFinalResult!==null?e.terminalFinalResult:e.lastHeartbeatSummary?.trim()||"completed":null}function he(e){let r={heartbeatCount:0,lastHeartbeatAt:null,lastHeartbeatPhase:null,lastHeartbeatSummary:null,terminalFinalResult:null,heartbeatBlocker:null,timestampAnomalies:[],lastBoxResourceSnapshot:null,lastPrEvidence:[]};if(!Ob(e))return r;let t=Date.now()+Tb,n=new Date(t).toISOString(),o=Nb(e,"utf8").split(`
+`).filter(Boolean);for(let s of o){let i=It(s);if(!i||typeof i!="object"||Array.isArray(i))continue;let a=i;if(r.heartbeatCount++,a.ts){let l=String(a.ts),c=Date.parse(l);Number.isFinite(c)&&c>t?r.timestampAnomalies.push({kind:"future_heartbeat_timestamp",observedAt:l,clampedTo:n}):r.lastHeartbeatAt=l}a.phase!==void 0&&a.phase!==null&&(r.lastHeartbeatPhase=String(a.phase)),a.summary!==void 0&&a.summary!==null&&(r.lastHeartbeatSummary=String(a.summary)),Qa(r.lastHeartbeatPhase)&&(r.terminalFinalResult=ep(a)),r.heartbeatBlocker=a.blocker?String(a.blocker):null,a.boxResourceSnapshot&&typeof a.boxResourceSnapshot=="object"&&!Array.isArray(a.boxResourceSnapshot)&&(r.lastBoxResourceSnapshot=a.boxResourceSnapshot),Array.isArray(a.prEvidence)&&(r.lastPrEvidence=a.prEvidence.filter(l=>!!l&&typeof l=="object"&&typeof l.prUrl=="string"))}return r}var Tb,_r=j(()=>{"use strict";rp();C();Tb=6e4});function Mb(e){return e?(e.split("/").pop()??e).replace(/\.exe$/i,"").toLowerCase():null}function Ub(e){if(!e)return[];let r=[],t="",n,o=!1;for(let s of e){if(o){t+=s,o=!1;continue}if(s==="\\"){o=!0;continue}if(n){s===n?n=void 0:t+=s;continue}if(s==='"'||s==="'"){n=s;continue}if(/\s/.test(s)){t&&(r.push(t),t="");continue}t+=s}return t&&r.push(t),r}function Wb(e){let r=Mb(e[0]);return!!(r&&Db.has(r))}function us(e){return!e||e.includes("/")||e.includes("*")?!1:/\.(?:json|md|mjs|cjs|js|ts|tsx|yaml|yml)$/iu.test(e)}function ds(e){if(!e)return!1;let r=e.trim();return r.startsWith("!")&&!r.includes("/")&&!r.endsWith("/**")}function Lb(e){if(!e.startsWith("--glob="))return e;let r=e.slice(7);return r.startsWith("!")&&!r.includes("/")&&!r.endsWith("/**")?`--glob=${r}/**`:e}function Bb(e){let r=[];for(let t=1;t<e.length;t+=1){let n=e[t];if(n){if(n==="--"){r.push(...e.slice(t+1));break}if(n.startsWith("-")){if(n.includes("="))continue;tp.has(n)&&(t+=1);continue}r.push(n)}}return r}function np(e){let r=!1,t=e.map((o,s)=>{let i=Lb(o),a=e[s-1];return a&&tp.has(a)&&o.startsWith("!")&&!o.includes("/")&&!o.endsWith("/**")&&(i=`${o}/**`),i!==o&&(r=!0),i}),n=Bb(t);if(n.length===2){let[o,s]=n;if(ds(s))return{argv:[t[0]??"rg",o,"-g",`${s}/**`,"."],changed:!0};if(us(s))return{argv:[t[0]??"rg","-g",s,o,"."],changed:!0}}return r&&n.length===1?{argv:[...t,"."],changed:!0}:{argv:t,changed:r}}function ps(e){let r=e.trim();if(!r)return{command:r,changed:!1};let t=r.includes("&&")?" && ":r.includes("||")?" || ":"; ",n=r.split(/\s*(?:&&|\|\||;)\s*/u),o=!1,s=n.map(i=>{let a=Ub(i.trim());if(!a.length||!Wb(a))return i;let l=np(a);return l.changed?(o=!0,l.argv.join(" ")):i});return o?{command:s.join(t),changed:!0}:{command:r,changed:!1}}function Za(e){if(!e)return{};let r=e.match(/search\s+"(.+)"\s+in\s+([^()]+?)(?:\s*\(|$)/iu);if(r)return{pattern:r[1],target:r[2]?.trim()};let t=e.match(/^search\s+"(.+)"\s+in\s+(.+)$/iu);return t?{pattern:t[1],target:t[2]?.trim()}:{}}function op(e){let{pattern:r,target:t}=Za(e);return r?ds(t)?{kind:"rg_exclude_syntax",pattern:r,target:t}:us(t)?{kind:"bad_scope",pattern:r,target:t}:{kind:"not_repo_search",pattern:r,target:t}:{kind:"not_repo_search"}}function sp(e){let{pattern:r,target:t}=Za(e);if(!r)return null;if(ds(t)){let n=`${t.trim()}/**`;return{command:`rg "${r}" -g '${n}' .`,changed:!0}}return t&&us(t)?{command:`rg -g ${t} "${r}" .`,changed:!0}:null}function ip(e){if(e.kind==="bad_scope"&&e.pattern?.includes("agent-os-land-pr")&&e.target==="package.json")return"Search package.json with a glob from the repo root: `rg -g package.json agent-os-land-pr .` \u2014 or run `node scripts/agent-os-land-pr.mjs <pr-url>` directly.";if(e.kind==="bad_scope"&&e.pattern&&e.target)return`Use \`rg -g '${e.target}' ${e.pattern} .\` from the repo root instead of treating ${e.target} as a folder.`;if(e.kind==="rg_exclude_syntax"&&e.pattern){let r=e.target?`${e.target.trim()}/**`:"!node_modules/**";return`Repo search scope \`${e.target??"!node_modules"}\` is not a valid ripgrep path. Use \`rg "${e.pattern}" -g '${r}' .\` from the repo root (exclude globs need a \`/**\` suffix).`}return e.kind==="no_matches"&&e.pattern?`No matches for "${e.pattern}". Try a broader pattern, drop overly short tokens, or search from the repo root with \`rg "${e.pattern}" .\`.`:null}function ap(e){let r=e.match(/search\s+"(.+)"\s+in\s+([^()]+?)(?:\s*\(agent\)|\s*failed|$)/iu);return r?`search "${r[1]}" in ${r[2]?.trim()}`:null}function ms(e){let r=e.meta?.trim()||(e.command?ap(e.command):null)||null;if(r){let t=op(r),n=ip(t);if(n)return n;let o=sp(r);if(o?.changed)return`Repo search used an invalid scope. Retry with: \`${o.command}\`.`}if(e.command&&/\b(rg|ripgrep)\b/i.test(e.command)){let t=ps(e.command);if(t.changed)return`Ripgrep scope may be invalid. Retry with: \`${t.command}\`.`;if(e.exitCode===1)return"Ripgrep returned no matches (exit 1). Try a broader pattern or search from the repo root."}return null}var Db,tp,el=j(()=>{"use strict";Db=new Set(["rg","ripgrep","grep"]),tp=new Set(["-e","--regexp","-f","--file","-m","--max-count","-A","--after-context","-B","--before-context","-C","--context","-g","--glob","--iglob"])});function Un(e,r=200){let t=e.replace(/\s+/g," ").trim();return t.length>r?`${t.slice(0,r-1)}\u2026`:t}function Kb(e){let r=e.trim();if(!r)return null;if(r.startsWith("{"))try{return JSON.parse(r)}catch{}let t=r.indexOf("{"),n=r.lastIndexOf("}");if(t>=0&&n>t)try{return JSON.parse(r.slice(t,n+1))}catch{return null}return null}function Wn(e){return!!e&&typeof e=="object"&&!Array.isArray(e)}function lp(e){let r=e.metadata;if(!Wn(r))return null;let t=r.vulnerabilities;if(!Wn(t))return null;let n=s=>typeof t[s]=="number"?t[s]:0,o={info:n("info"),low:n("low"),moderate:n("moderate"),high:n("high"),critical:n("critical"),total:n("total")};return typeof t.total!="number"&&!o.critical&&!o.high&&!o.moderate&&!o.low&&!o.info?null:o}function jb(e){let r=[];e.critical&&r.push(`${e.critical} critical`),e.high&&r.push(`${e.high} high`),e.moderate&&r.push(`${e.moderate} moderate`),e.low&&r.push(`${e.low} low`),e.info&&r.push(`${e.info} info`);let t=r.length?r.join(", "):"see report";return`npm audit: ${e.total} vulnerabilit${e.total===1?"y":"ies"} (${t}) \u2014 remediation required`}function Vb(e,r){let t=e.error;if(Wn(t)){let s=typeof t.summary=="string"?t.summary.trim():"",i=typeof t.code=="string"?t.code.trim():"";if(s)return i?`${i}: ${s}`:s;if(i)return i}let n=typeof e.message=="string"?e.message.trim():"";if(n)return n;let o=r.trim();return o?Un(o.split(`
+`).find(Boolean)??o,160):"npm audit failed"}function cp(e){let r=`${e.stdout}
+${e.stderr}`.trim(),t=Kb(r);if(!t||!Wn(t)){let o=Un(r||`exit ${e.exitCode}`,180);return{kind:"command_failure",exitCode:e.exitCode,summary:`npm audit failed (invalid or missing JSON): ${o}`,parseError:"invalid_json"}}if(Wn(t.error))return{kind:"command_failure",exitCode:e.exitCode,summary:`npm audit command failed: ${Vb(t,e.stderr)}`};let n=lp(t);return n?e.exitCode===0&&n.total===0?{kind:"success",exitCode:0,summary:"npm audit: no vulnerabilities reported",audit:n}:{kind:"audit_findings",exitCode:e.exitCode,summary:jb(n),audit:n}:{kind:"command_failure",exitCode:e.exitCode,summary:"npm audit failed: JSON response missing vulnerability metadata",parseError:"missing_metadata"}}function Gb(e){return Hb.test(e)}function Yb(e){return Fb.test(e)}function Jb(e){let r=ms({command:e.command,exitCode:e.exitCode});if(e.exitCode===0)return{kind:"success",exitCode:0,summary:"ripgrep finished (exit 0)"};if(e.exitCode===1){let n=(e.stderr||e.interleaved).trim();if(n&&$b.test(n)){let i=Un(n,160);return{kind:"command_failure",exitCode:1,summary:r??`ripgrep failed (exit 1): ${i}`}}let o=ps(e.command),s=o.changed&&!r?` Retry with: \`${o.command}\`.`:"";return{kind:"search_no_matches",exitCode:1,summary:r??`ripgrep: no matches (exit 1).${s} Try a broader pattern or search from the repo root.`}}let t=Un(e.interleaved||e.stdout||e.stderr||`exit ${e.exitCode}`,180);return{kind:"command_failure",exitCode:e.exitCode,summary:r??`ripgrep failed (exit ${e.exitCode}): ${t}`}}function fs(e){let r=e.stdout??"",t=e.stderr??"",n=e.interleavedOutput??"";if(Gb(e.command)){let i=r.trim()||n.trim()||t.trim();return cp({exitCode:e.exitCode,stdout:i,stderr:t})}if(Yb(e.command))return Jb({command:e.command,exitCode:e.exitCode,stdout:r,stderr:t,interleaved:n});let o=ms({command:e.command,exitCode:e.exitCode});if(o&&e.exitCode!==0)return{kind:"command_failure",exitCode:e.exitCode,summary:o};if(e.exitCode===0)return{kind:"success",exitCode:0,summary:"command succeeded (exit 0)"};let s=Un(n||r||t||`exit ${e.exitCode}`,180);return{kind:"command_failure",exitCode:e.exitCode,summary:`command failed (exit ${e.exitCode}): ${s}`}}var Hb,Fb,$b,rl=j(()=>{"use strict";el();Hb=/\bnpm\s+audit\b/i,Fb=/\b(rg|ripgrep)\b/i,$b=/\b(error|invalid|unknown|panic|not found)\b/i});import{existsSync as qb,readFileSync as zb}from"node:fs";function Xb(e){let r=e.timestamp_ms;return e.timestamp||e.ts||(r?new Date(r).toISOString():void 0)}function up(e){if(!e)return null;for(let r of Object.keys(e))if(r.endsWith("ToolCall")){let t=r.slice(0,-8);return t.length?t:r}return null}function Qb(e,r){e.finalResult=r.result||r.subtype||r.terminal_reason||"completed",r.is_error&&(e.error=String(r.result||r.api_error_status||"stream result error"))}function dp(e){if(e.type!=="tool_call"||e.subtype!=="completed")return null;let t=(e.tool_call&&typeof e.tool_call=="object"&&!Array.isArray(e.tool_call)?e.tool_call:null)?.shellToolCall;if(!t||typeof t!="object"||Array.isArray(t))return null;let n=t,o=n.args,s=o&&typeof o=="object"&&!Array.isArray(o)&&typeof o.command=="string"?String(o.command):"",i=n.result;if(!i||typeof i!="object"||Array.isArray(i))return null;let a=i.success??i.failure;if(!a||typeof a!="object"||Array.isArray(a))return null;let l=a,c=typeof l.exitCode=="number"?l.exitCode:0;return{command:s,exitCode:c,stdout:typeof l.stdout=="string"?l.stdout:"",stderr:typeof l.stderr=="string"?l.stderr:"",interleaved:typeof l.interleavedOutput=="string"?l.interleavedOutput:""}}function Zb(e,r){r.kind==="success"||r.kind==="search_no_matches"||(e.lastShellOutcome=r)}function Bt(e){let r={firstEventAt:null,lastEventAt:null,currentTool:null,finalResult:null,error:null,lastShellOutcome:null};if(!qb(e))return r;let t=zb(e,"utf8").split(`
+`).filter(Boolean);for(let n of t){let o=It(n);if(!o)continue;let s=Xb(o);if(s&&(r.firstEventAt||=s,r.lastEventAt=s),o.type==="stream_event"&&o.event&&typeof o.event=="object"&&o.event.type==="content_block_start"){let a=o.event.content_block;a?.type==="tool_use"&&(r.currentTool=String(a.name||"tool"))}if(o.type==="assistant"&&o.message&&typeof o.message=="object"){let a=o.message.content;if(Array.isArray(a)){let l=a.find(c=>c?.type==="tool_use");l&&(r.currentTool=String(l.name||r.currentTool))}}if(o.type==="tool_call"&&o.subtype==="started"){let a=o.tool_call&&typeof o.tool_call=="object"&&!Array.isArray(o.tool_call)?o.tool_call:void 0,l=up(a);l&&(r.currentTool=l)}let i=dp(o);i&&Zb(r,fs({command:i.command,exitCode:i.exitCode,stdout:i.stdout,stderr:i.stderr,interleavedOutput:i.interleaved})),o.type==="result"&&Qb(r,o)}return r}function ev(e){return Bt(e)}function pp(e){let r=dp(e);if(!r)return;let t=fs({command:r.command,exitCode:r.exitCode,stdout:r.stdout,stderr:r.stderr,interleavedOutput:r.interleaved}),n=zo(r.command).slice(0,120);return t.kind==="audit_findings"?`[audit:findings] ${t.summary}${n?` \xB7 ${n}`:""}`:t.kind==="search_no_matches"?`[search:no_matches] ${t.summary}${n?` \xB7 ${n}`:""}`:t.kind==="command_failure"?`[command:failed] ${t.summary}${n?` \xB7 ${n}`:""}`:`[command:ok] exit 0${n?` \xB7 ${n}`:""}`}function tl(e){if(e.type==="system"&&e.subtype)return`[system:${e.subtype}] ${String(e.status||e.cwd||"")}`.trim();if(e.type==="stream_event"&&e.event&&typeof e.event=="object"){let r=e.event.type;if(r==="content_block_start"){let t=e.event.content_block;if(t?.type==="tool_use")return`[tool:start] ${t.name}`}if(r==="content_block_delta"){let t=e.event.delta;if(t?.partial_json)return`[tool:input] ${t.partial_json}`}return r==="message_stop"?"[message:stop]":r?`[stream:${r}]`:void 0}if(e.type==="assistant"&&e.message&&typeof e.message=="object"){let r=e.message.content;if(Array.isArray(r)){let t=r.find(o=>o?.type==="text");if(t)return`[assistant] ${zo(String(t.text||""))}`;let n=r.find(o=>o?.type==="tool_use");if(n)return`[tool] ${n.name} ${JSON.stringify(n.input||{})}`}}if(e.type==="user"&&e.tool_use_result){let r=e.tool_use_result;return`[tool:result] stdout=${JSON.stringify(r.stdout||"")} stderr=${JSON.stringify(r.stderr||"")}`}if(e.type==="tool_call"){let r=String(e.subtype||""),t=r==="completed"?pp(e):void 0;if(t)return t;let n=e.tool_call&&typeof e.tool_call=="object"&&!Array.isArray(e.tool_call)?e.tool_call:void 0,o=up(n)??"tool";return`[tool:${r}] ${o}`}if(e.type==="result")return`[result] ${e.subtype||""} ${zo(String(e.result||""))}`.trim()}var Ln=j(()=>{"use strict";rl();C()});function tv(e,r=240){let t=e.replace(/\s+/g," ").trim();return t.length>r?`${t.slice(0,r-1)}\u2026`:t}function mp(e){let r=(e??"").trim();if(!r)return null;for(let t of rv)if(t.test.test(r))return{blocked:!0,reason:`${t.label}: ${tv(r)}`};return null}var rv,fp=j(()=>{"use strict";rv=[{test:/\b(?:invalid|unknown|unsupported|unrecognized)\b[^.\n]*\bmodel\b/i,label:"provider rejected the requested model"},{test:/\bmodel\b[^.\n]*\b(?:not\s+(?:found|supported|available|recognized|valid)|is\s+not\s+valid|does\s+not\s+exist)/i,label:"provider rejected the requested model"},{test:/\b(?:did you mean|available models|choose (?:a|one of)|supported models)\b/i,label:"provider rejected the requested model"},{test:/model preflight failed/i,label:"model/provider preflight failed"},{test:/\b(?:command not found|ENOENT|is the .*CLI on PATH|executable not found|no such file or directory)\b/i,label:"provider CLI is missing or not on PATH"},{test:/\bfailed to spawn\b/i,label:"provider failed to spawn the worker process"},{test:/\b(?:not logged in|unauthorized|authentication (?:failed|required)|invalid api key|missing api key|401)\b/i,label:"provider authentication failed"}]});function gp(e){if(typeof e!="string")return null;let r=e.trim();return r.length?r:null}function nv(e){return e==null?!1:typeof e=="string"?e.trim().length>0:typeof e=="boolean"?e:Array.isArray(e)?e.length>0:typeof e=="object"?Object.keys(e).length>0:!0}function ov(e){return!e?.checked||e.headIsAncestorOfBase!==!1?null:gp(e.head)}function sv(e,r,t){let n=["exited_with_changes_salvage"];if((e==="uncommitted"||e==="both")&&n.push(`${r} uncommitted change${r===1?"":"s"} with no final result`),(e==="committed_ahead"||e==="both")&&t){let o=t.length>12?t.slice(0,12):t;n.push(`commit ${o} ahead of base with no final result`)}return n.push("review worktree \u2014 commit, open a PR, or run a salvage worker before discarding"),n.join(": ")}function Jr(e){if(e.alive||nv(e.finalResult))return null;let r=(e.changedFiles??[]).filter(i=>i.trim()).length,t=gp(e.headCommit)??ov(e.gitAncestry),n=r>0,o=!!t;if(!n&&!o)return{kind:"none",salvageable:!1,uncommittedCount:0,headCommit:null,attentionReason:"process exited without a final result"};let s=n&&o?"both":n?"uncommitted":"committed_ahead";return{kind:s,salvageable:!0,uncommittedCount:r,headCommit:t,attentionReason:sv(s,r,t)}}var Bn=j(()=>{"use strict"});function Hn(e){if(typeof e!="string")return null;let r=e.trim();return r.length?r:null}function iv(e){return e==null?!1:typeof e=="string"?e.trim().length>0:typeof e=="boolean"?e:Array.isArray(e)?e.length>0:typeof e=="object"?Object.keys(e).length>0:!0}function av(e){if(Hn(e.headCommit)||Hn(e.prUrl)||Hn(e.artifactBundlePath)||Hn(e.patchPath))return!0;let r=e.gitAncestry;return!!(r?.checked&&r.headIsAncestorOfBase===!1&&Hn(r.head))}function qr(e){return iv(e.finalResult)?e.changedFiles.length===0?{blocked:!1}:av(e)?{blocked:!0,detail:`Worktree has ${e.changedFiles.length} uncommitted change(s); commit or discard before landing`}:{blocked:!0,reason:"dirty_worktree_no_pr",detail:`Worktree has ${e.changedFiles.length} uncommitted change(s) with no commit or PR; commit, open a PR, or discard before landing`}:{blocked:!1}}function hp(e){if(e.blocked)return e.detail??e.reason??"dirty_worktree_no_pr"}var Fn=j(()=>{"use strict"});function nl(e){let r=e.trim();if(!r.startsWith("{"))return null;try{let t=JSON.parse(r);if(t&&typeof t=="object"&&!Array.isArray(t))return t}catch{return null}return null}function kp(e){let r=e.targetPrReconciliation??e.target_pr_reconciliation??e.targetPrs??e.target_prs;return Array.isArray(r)?r.length:0}function Ht(e){let r=e.trim();if(!r)return null;let t=nl(r);if(t)return t;let n=[],o=/```(?:json)?\s*([\s\S]*?)```/gi,s;for(;(s=o.exec(r))!==null;){let u=nl(s[1]??"");u&&n.push(u)}let i=r.indexOf("{"),a=r.lastIndexOf("}");if(i>=0&&a>i){let u=nl(r.slice(i,a+1));u&&n.push(u)}if(n.length===0)return null;let l=n[n.length-1],c=kp(l);for(let u of n){let d=kp(u);d>c&&(l=u,c=d)}return l}var gs=j(()=>{"use strict"});function Ft(e){if(typeof e!="string")return null;let r=e.trim();return r.length?r:null}function lv(e){return e==null?!1:typeof e=="string"?e.trim().length>0:typeof e=="object"?Object.keys(e).length>0:!0}function zr(e){let r=e.trim().match(/github\.com\/([^/]+\/[^/]+)\/(?:pull|pulls)\/(\d+)/i);return r?`https://github.com/${r[1]}/pull/${r[2]}`:Ft(e)}function hs(e){let r=e.trim().match(/github\.com\/([^/]+\/[^/]+)\/(?:pull|pulls)\/(\d+)/i);return r?`${r[1].toLowerCase()}/pull/${r[2]}`:e.trim().toLowerCase()}function yp(e){let r=null;if(typeof e=="string"){let o=Ht(e);o&&(r=o)}else e&&typeof e=="object"&&!Array.isArray(e)&&(r=e);if(!r)return[];let t=r.targetPrReconciliation??r.target_pr_reconciliation;if(!Array.isArray(t))return[];let n=[];for(let o of t){if(!o||typeof o!="object"||Array.isArray(o))continue;let s=o,i=zr(String(s.prUrl??s.pr_url??"")),a=Ft(s.outcome);!i||a!=="merged"&&a!=="skipped"&&a!=="blocked"||n.push({prUrl:i,outcome:a,mergeCommit:Ft(s.mergeCommit??s.merge_commit),reason:Ft(s.reason)})}return n}function Rp(e,r){let t=[],n=zr(Ft(e.prUrl)??"");if(n&&t.push(n),r&&typeof r=="object"&&!Array.isArray(r)){let o=r,s=zr(String(o.prUrl??o.pr_url??""));s&&t.push(s)}return[...new Set(t)]}function ol(e){let{contract:r,snapshot:t}=e,n=e.finalResult??t.finalResult;if(!r.landingOnly&&r.targetPrUrls.length===0&&!r.repairEnforceOriginalPr)return{blocked:!1};if(!lv(n))return(r.requiresTargetPrReconciliation??(r.landingOnly||!!r.repairEnforceOriginalPr||r.targetPrUrls.length>0))&&r.targetPrUrls.length>0?{blocked:!0,reason:"missing_target_pr_reconciliation",detail:`Final result required to reconcile target PR(s): ${r.targetPrUrls.join(", ")}`}:{blocked:!1};if(!(r.requiresTargetPrReconciliation??(r.landingOnly||!!r.repairEnforceOriginalPr||r.targetPrUrls.length>0))&&!r.repairEnforceOriginalPr)return{blocked:!1};let s=r.repairEnforceOriginalPr?zr(Ft(r.targetPrUrl)??"")??(r.targetPrUrls.length===1?zr(r.targetPrUrls[0]):null):null;if(s){let d=Rp(t,n);if(!(n&&typeof n=="object"&&!Array.isArray(n)&&n.supersedesOriginalTargetPr===!0)){for(let g of d)if(g!==s)return{blocked:!0,reason:"duplicate_repair_pr",detail:`Repair worker opened or attached PR ${g} instead of canonical target ${s}`}}let p=yp(n).find(g=>g.prUrl===s);if(!p||p.outcome!=="merged"&&!(p.reason?.trim()&&(p.outcome==="skipped"||p.outcome==="blocked")))return{blocked:!0,reason:"missing_repair_target_reconciliation",detail:`Repair worker must reconcile target PR ${s}`}}let i=yp(n),a=new Map(i.map(d=>[hs(d.prUrl),d])),l=new Set(r.targetPrUrls.map(d=>hs(zr(d)??d)).filter(Boolean)),c=Rp(t,n);if(r.landingOnly)for(let d of c){if(l.size>0&&!l.has(hs(d)))return{blocked:!0,reason:"unrelated_implementation_pr",detail:`Landing-only worker attached unrelated PR ${d}`};if(l.size===0)return{blocked:!0,reason:"unrelated_implementation_pr",detail:"Landing-only worker must not open new implementation PRs"}}if(r.targetPrUrls.length===0)return{blocked:!1};let u=[];for(let d of r.targetPrUrls){let f=hs(zr(d)??d),m=a.get(f);if(!m){u.push(f);continue}m.outcome!=="merged"&&!m.reason?.trim()&&u.push(f)}return u.length>0?{blocked:!0,reason:u.every(d=>a.has(d))?"incomplete_target_pr_landing":"missing_target_pr_reconciliation",detail:`Target PR reconciliation incomplete: ${u.join(", ")}`}:{blocked:!1}}function sl(e){if(e.blocked)return e.detail??e.reason}var il=j(()=>{"use strict";gs()});function bp(e){let r=Date.now();if(e.completionBlocker&&!vp(e.completionBlocker))return{state:"blocked",reason:e.completionBlocker};if(e.finalResult){if(e.localOnly&&dv(e.finalResult))return{state:"done",reason:"local-only worker superseded by merged PR"};let o={finalResult:e.finalResult,changedFiles:e.changedFiles??[],gitAncestry:e.gitAncestry??null,prUrl:e.prUrl??null},s=qr(o);if(s.blocked){let i=hp(s);return{state:"needs_attention",reason:s.reason?`landing blocked (${s.reason}): ${i}`:`landing blocked: ${i}`}}if(e.landingContract){let i=ol({contract:e.landingContract,snapshot:o,finalResult:e.finalResult}),a=sl(i);if(a)return{state:"needs_attention",reason:i.reason?`landing contract (${i.reason}): ${a}`:`landing contract: ${a}`}}return{state:"done",reason:"final result recorded"}}if(!e.alive){if(uv(e))return{state:"done",reason:"empty abandoned worker record"};let o=mp(e.error);if(o)return{state:"blocked",reason:o.reason};let s=Jr({alive:!1,finalResult:null,changedFiles:e.changedFiles,gitAncestry:e.gitAncestry});if(s?.salvageable){let a=e.error?.trim();return{state:"needs_attention",reason:a?`${s.attentionReason} (${a})`:s.attentionReason}}let i=e.error?.trim();return{state:"needs_attention",reason:i?`process exited without a final result: ${i}`:s?.attentionReason??"process exited without a final result"}}if(e.heartbeatBlocker)return{state:"blocked",reason:`worker heartbeat reported blocker: ${e.heartbeatBlocker}`};let t=e.startedAt?Date.parse(e.startedAt):NaN;if(!e.firstEventAt&&e.stdoutBytes===0&&e.heartbeatBytes===0&&Number.isFinite(t)&&r-t>cv)return{state:"needs_attention",reason:`no first stream event ${Oa(t)}s after start`};let n=e.lastActivityAt?Date.parse(e.lastActivityAt):NaN;return Number.isFinite(n)&&r-n>$t?{state:"stale",reason:`no log/event/heartbeat activity for ${Oa(n)}s`}:{state:"ok",reason:"recent activity"}}function vp(e){let r=e?.trim();return r?/completion acknowledged but board not advanced/i.test(r)&&/task already terminal/i.test(r):!1}function uv(e){return e.finalResult||e.taskId||e.agentOsId||e.stdoutBytes>0||(e.stderrBytes??0)>0||e.heartbeatBytes>0||e.error?.trim()||(e.changedFiles??[]).some(r=>r.trim())?!1:/empty worker dir|marked abandoned/i.test(e.reconcileReason??"")}function dv(e){let r=null;if(typeof e=="string"?r=Ht(e):e&&typeof e=="object"&&!Array.isArray(e)&&(r=e),!r)return!1;let t=r.targetPrReconciliation??r.target_pr_reconciliation;return Array.isArray(t)?t.some(n=>!n||typeof n!="object"||Array.isArray(n)?!1:String(n.outcome??"").trim()==="merged"):!1}function pv(e,r,t){let n=e.completionSnapshot?.finalResult;return e.completionAckSource==="local-pr-merged-reconcile"&&n!==void 0&&n!==null?n:r||(n??Yr(t))}function N(e,r={}){let t=Bt(e.stdoutPath),n=he(e.heartbeatPath),o=typeof e.completionReportedAt=="string"&&e.completionReportedAt.trim().length>0,s=pv(e,t.finalResult,n),i=o?!1:$(e.pid),a=Xo(e.stdoutPath),l=Xo(e.stderrPath),c=Xo(e.heartbeatPath),u=In(e.worktreePath),d=es(e.worktreePath,{base:r.base,baseCommit:r.baseCommit}),f=Sd([t.lastEventAt,n.lastHeartbeatAt,Qo(e.stdoutPath),Qo(e.stderrPath),Qo(e.heartbeatPath)]),m=t.error||!i&&!s&&Zo(e.stderrPath,10).trim()||void 0,p=typeof e.completionBlocker=="string"&&e.completionBlocker.trim()?e.completionBlocker.trim():null,g=vp(p)?null:p,k=e.repairTargetPrUrl?{landingOnly:!1,targetPrUrls:[e.repairTargetPrUrl],targetPrUrl:e.repairTargetPrUrl,repairEnforceOriginalPr:!0}:null,h=bp({alive:i,finalResult:s,firstEventAt:t.firstEventAt,stdoutBytes:a,stderrBytes:l,heartbeatBytes:c,lastActivityAt:f,heartbeatBlocker:n.heartbeatBlocker,startedAt:e.startedAt,error:m,changedFiles:u,gitAncestry:d,completionBlocker:g,landingContract:k,prUrl:e.repairTargetPrUrl??e.taskPrUrl??null,localOnly:e.localOnly===!0,taskId:e.taskId??null,agentOsId:e.agentOsId??null,reconcileReason:e.reconcileReason??null}),b=g||h.state==="blocked"?"blocked":o||h.state==="done"?"done":s?"exited":i?"running":"exited";return{runId:e.runId,worker:e.name,pid:e.pid,alive:i,status:b,attention:h,branch:e.branch,worktreePath:e.worktreePath,ownedPaths:e.ownedPaths,stdoutBytes:a,stderrBytes:l,heartbeatBytes:c,firstEventAt:t.firstEventAt,lastEventAt:t.lastEventAt,lastActivityAt:f,currentTool:o?null:t.currentTool,heartbeatCount:n.heartbeatCount,lastHeartbeatAt:n.lastHeartbeatAt,lastHeartbeatPhase:n.lastHeartbeatPhase,lastHeartbeatSummary:n.lastHeartbeatSummary,heartbeatBlocker:n.heartbeatBlocker,timestampAnomalies:n.timestampAnomalies,finalResult:s,error:m,changedFiles:u,gitAncestry:d,instructionPolicyFingerprint:e.instructionPolicyFingerprint??null,instructionPolicyEvidence:e.instructionPolicyEvidence??null,model:e.model??e.orchestrationAudit?.model??null,provider:e.orchestrationAudit?.provider??null,boxKind:e.boxKind??null,boxId:e.boxId??null,runtimeId:e.runtimeId??null,personaSlug:e.personaSlug??null,dispatched:e.dispatched??null,localOnly:e.localOnly??null}}function ne(e){return!!(e.finalResult||e.alive===!1||e.status==="exited"||e.status==="done")}function Xr(e){return e.finalResult?e.attention.state==="needs_attention"||e.attention.state==="blocked":!1}function Kt(e,r){return r.length===0?e:r.some(t=>t.attention==="needs_attention"||t.attention==="stale"||t.attention==="blocked")?"needs_attention":r.every(t=>t.status==="done")?"done":r.some(t=>t.status==="running")?"running":e}var cv,$t,Y=j(()=>{"use strict";_r();Ln();fp();Bn();Ee();Fn();il();gs();C();cv=18e4,$t=6e5});import{readFileSync as mv}from"node:fs";function fv(e){if(!e||process.platform!=="linux")return null;try{return mv(`/proc/${e}/cmdline`,"utf8").replace(/\0/g," ")}catch{return null}}function ks(e){if(!e.pid||process.platform!=="linux")return!0;let r=fv(e.pid);return r?[e.worktreePath,e.workerDir,e.heartbeatPath].filter(n=>typeof n=="string"&&n.trim().length>0).some(n=>r.includes(n)):!1}function $n(e){if(typeof e.completionBlocker=="string"&&e.completionBlocker.trim())return!1;let r=N(e);return r.alive&&!ks(e)?!1:r.alive&&!r.finalResult&&r.attention.state!=="done"}var Kn=j(()=>{"use strict";Y()});import Cp from"node:os";import gv from"node:path";function Sp(e,r){let t=Number(e);return!Number.isFinite(t)||t<=0?r:Math.floor(t)}function hv(e=v(),r,t){let n=Sp(e.perWorkerMemBytes,jn),o=Sp(e.memReserveBytes,Vn),s=Math.min(1,Math.max(.1,Number(e.memUtilization)>0?Number(e.memUtilization):Gn)),i=Rs({config:e,configuredMaxWorkersOverride:r,totalMemBytes:t??Cp.totalmem()});return{perWorkerMemBytes:n,memReserveBytes:o,memUtilization:s,configuredMaxWorkers:i.configuredMaxWorkers,autoCap:i.autoCap,workerCapSource:i.workerCapSource}}function al(e,r={}){let t=r.perWorkerMemBytes??jn,n=r.memReserveBytes??Vn,o=r.memUtilization??Gn,s=Math.max(0,Math.floor(e*o)-n),i=Math.max(1,Math.floor(s/t));return Math.min(i,ys)}function kv(){return Dt()}function yv(e){let r=0;for(let t of ge(e)){let n=_(gv.join(E(e.id),"workers",R(t),"worker.json"),void 0);!n||!$n(n)||r++}return r}function Rv(){let e=0;for(let r of J())e+=yv(r);return e}function ur(e){let r=e.config??v(),t=e.totalMemBytes??Cp.totalmem(),{perWorkerMemBytes:n,memReserveBytes:o,memUtilization:s,configuredMaxWorkers:i,autoCap:a,workerCapSource:l}=hv(r,e.configuredMaxWorkersOverride,t),c=Ve(r),u=e.freeMemBytes??kv(),d=e.activeWorkers??Rv(),f=Math.max(0,Math.floor(t*s)-o),m=Math.max(0,Math.floor(f/n)),p=Math.max(0,Math.floor(Math.max(0,u-o)/n)),g=a,h=Math.max(0,Math.min(i??g,m)),b=Math.max(0,h-d),M=Math.min(b,p),T=e.skipDiskGate||process.env.KYNVER_RESOURCE_GATE_SKIP_DISK==="1"?void 0:We({diskPath:e.diskPath?.trim()||process.env.KYNVER_DISK_GUARD_PATH?.trim()||"/"});T&&!T.ok&&(M=0);let K=null;return M<=0&&(T&&!T.ok?K=T.reason??"disk gate blocked worker admission":d>=h?K=`at worker limit (${d}/${h} running)`:p<=0?K="insufficient free memory \u2014 waiting for workers to finish":K="no worker slots available"),{ok:M>0,totalMemBytes:t,freeMemBytes:u,memReserveBytes:o,perWorkerMemBytes:n,configuredMaxWorkers:i,workerCapSource:l,boxKind:c,autoCap:g,capacityWorkers:m,maxConcurrentWorkers:h,activeWorkers:d,slotsAvailable:M,reason:K,...T?{diskGate:T}:{}}}var jn,Vn,Gn,ys,jt=j(()=>{"use strict";os();I();Ue();bs();Ut();W();Gr();Kn();C();jn=500*1024*1024,Vn=4*1024*1024*1024,Gn=.85,ys=64});function Qr(e,r){let t=Number(e);return!Number.isFinite(t)||t<=0?r:Math.floor(t)}function Rs(e){let r=e.config??{},t=e.env??process.env,n=Qr(r.perWorkerMemBytes,jn),o=Qr(r.memReserveBytes,Vn),s=Math.min(1,Math.max(.1,Number(r.memUtilization)>0?Number(r.memUtilization):Gn)),i=al(e.totalMemBytes,{perWorkerMemBytes:n,memReserveBytes:o,memUtilization:s});if(e.configuredMaxWorkersOverride!==void 0&&e.configuredMaxWorkersOverride!==null)return{configuredMaxWorkers:Qr(e.configuredMaxWorkersOverride,i),autoCap:i,workerCapSource:"workspace_override"};if(r.maxConcurrentWorkers!==void 0&&r.maxConcurrentWorkers!==null){let c=Qr(r.maxConcurrentWorkers,0)||null;if(c)return{configuredMaxWorkers:Math.min(c,ys),autoCap:i,workerCapSource:"config"}}let l=(t.KYNVER_MAX_WORKERS_INTENTIONAL==="1"||t.KYNVER_MAX_WORKERS_INTENTIONAL==="true")&&t.KYNVER_MAX_WORKERS&&Qr(t.KYNVER_MAX_WORKERS,0)||null;return l?{configuredMaxWorkers:Math.min(l,ys),autoCap:i,workerCapSource:"env"}:{configuredMaxWorkers:null,autoCap:i,workerCapSource:"auto"}}function ll(e={}){let r=e.totalMemBytes??0,t=al(r,{perWorkerMemBytes:Qr(e.config?.perWorkerMemBytes,jn),memReserveBytes:Qr(e.config?.memReserveBytes,Vn),memUtilization:e.config?.memUtilization&&Number(e.config.memUtilization)>0?Number(e.config.memUtilization):Gn}),n=e.diskGateOk??!0,o=n?t:Math.max(1,Math.min(t,4));return{totalMemBytes:r,autoCap:t,recommendedMaxWorkers:o,diskPath:e.diskPath??"/",diskGateOk:n,diskFreeBytes:e.diskFreeBytes??null}}var bs=j(()=>{"use strict";jt()});var _p={};xR(_p,{runDeviceLogin:()=>cl});import wp from"node:os";function bv(e){let r=(typeof e.apiBaseUrl=="string"?e.apiBaseUrl:void 0)||(typeof e.baseUrl=="string"?e.baseUrl:void 0)||process.env.KYNVER_API_URL||v().apiBaseUrl;return r?sr(String(r)):void 0}async function vv(e){await new Promise(r=>setTimeout(r,e))}async function cl(e){let r=bv(e);if(!r)return console.error("kynver login (device flow) requires a Kynver URL \u2014 pass --api-base-url https://your-kynver-site, set KYNVER_API_URL, or run `kynver setup` first."),{ok:!1};let t=`${wp.hostname()} (${wp.platform()})`,n;try{let a=await fetch(`${r}/api/auth/device/code`,{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify({clientName:t})});if(!a.ok)return console.error(`Could not start device authorization (${a.status}).`),{ok:!1};n=await a.json()}catch(a){return console.error(`Could not reach ${r}: ${a.message}`),{ok:!1}}let o=n.verification_uri_complete||n.verification_uri;console.log(""),console.log("  Authorize this machine:"),console.log(`    1. Open: ${o}`),console.log(`    2. Confirm the code: ${n.user_code}`),console.log(""),console.log("  Waiting for approval\u2026");let s=Date.now()+n.expires_in*1e3,i=Math.max(1,n.interval)*1e3;for(;Date.now()<s;){await vv(i);let a;try{a=await(await fetch(`${r}/api/auth/device/token`,{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify({device_code:n.device_code})})).json().catch(()=>({}))}catch{continue}switch(a.status){case"approved":return a.api_key?(Yn(a.api_key),console.log("  Approved \u2014 this machine is now linked to your Kynver account."),{ok:!0,apiKey:a.api_key}):{ok:!1};case"slow_down":i+=2e3;break;case"authorization_pending":typeof a.interval=="number"&&(i=Math.max(i,a.interval*1e3));break;case"access_denied":return console.error("  Request was denied in the browser."),{ok:!1};case"expired_token":return console.error("  The code expired before it was approved. Run `kynver login` again."),{ok:!1};default:break}}return console.error("  Timed out waiting for approval. Run `kynver login` again."),{ok:!1}}var ul=j(()=>{"use strict";I();C()});import{existsSync as Ep,mkdirSync as Pp,readFileSync as Ap,writeFileSync as Ip}from"node:fs";import{homedir as Sv,totalmem as Cv}from"node:os";import dl from"node:path";import wv from"node:os";function v(){if(!Ep(vs))return{};try{return JSON.parse(Ap(vs,"utf8"))}catch{return{}}}function Ge(e){Pp(Ss,{recursive:!0}),Ip(vs,`${JSON.stringify(pl(e),null,2)}
+`,{mode:384})}function pl(e){return{...e,...e.harnessRoot?.trim()?{harnessRoot:Se(e.harnessRoot.trim())}:{},...e.defaultRepo?.trim()?{defaultRepo:Se(e.defaultRepo.trim())}:{}}}function Gt(e){return pl(e)}function _v(e,r){let t=Jn(),n=(typeof r.apiBaseUrl=="string"?r.apiBaseUrl:void 0)||e.apiBaseUrl?.trim()||process.env.KYNVER_API_URL?.trim()||process.env.KYNVER_CRON_FIRE_BASE_URL?.trim()||process.env.OPENCLAW_CRON_FIRE_BASE_URL?.trim(),o=(typeof r.agentOsId=="string"?r.agentOsId:void 0)||e.agentOsId?.trim()||process.env.KYNVER_AGENT_OS_ID?.trim()||(t.runnerToken?.trim().startsWith("krc1.")?t.runnerTokenAgentOsId?.trim():void 0),i=(typeof r.repo=="string"?r.repo:r.discoverRepo===!0||r.discoverRepo==="true"?$r()?.repo:void 0)||e.defaultRepo?.trim()||process.env.KYNVER_DEFAULT_REPO?.trim()||process.env.KYNVER_HARNESS_REPO?.trim()||On()?.repo,a=(typeof r.harnessRoot=="string"?r.harnessRoot:void 0)||e.harnessRoot?.trim()||process.env.KYNVER_HARNESS_ROOT?.trim()||process.env.OPUS_HARNESS_ROOT?.trim();return{...n?{apiBaseUrl:sr(n)}:{},...o?{agentOsId:o}:{},...i?{defaultRepo:i}:{},...a?{harnessRoot:a}:{},...typeof r.agentOsSlug=="string"?{agentOsSlug:r.agentOsSlug}:e.agentOsSlug?{agentOsSlug:e.agentOsSlug}:{}}}function xv(e,r,t=Cv()){let n=typeof r.maxWorkers=="string"?r.maxWorkers:typeof r.maxConcurrentWorkers=="string"?r.maxConcurrentWorkers:void 0,o=typeof r.boxKind=="string"?r.boxKind:typeof r["box-kind"]=="string"?String(r["box-kind"]):void 0,s=Me(process.env,{...e,...o?{boxKind:Tt(o)}:{}}).boxKind,i=We({diskPath:typeof r.diskPath=="string"?r.diskPath:"/"}),a=ll({totalMemBytes:t,diskPath:i.path,diskGateOk:i.ok,diskFreeBytes:i.freeBytes,config:e});return n?{maxConcurrentWorkers:Math.max(1,Math.floor(Number(n))),maxConcurrentWorkersSource:"setup-flag",boxKind:s}:e.maxConcurrentWorkers!==void 0&&e.maxConcurrentWorkers!==null?{maxConcurrentWorkers:Math.max(1,Math.floor(Number(e.maxConcurrentWorkers))),maxConcurrentWorkersSource:e.maxConcurrentWorkersSource??"operator",boxKind:s}:{maxConcurrentWorkers:a.recommendedMaxWorkers,maxConcurrentWorkersSource:"setup-auto",boxKind:s}}function Jn(){if(!Ep(Vt))return{};try{return JSON.parse(Ap(Vt,"utf8"))}catch{return{}}}function Op(e){Pp(Ss,{recursive:!0}),Ip(Vt,`${JSON.stringify(e,null,2)}
+`,{mode:384})}function oe(){return process.env.KYNVER_API_KEY?process.env.KYNVER_API_KEY:Jn().apiKey}function Yn(e){Op({...Jn(),apiKey:e})}function xp(e){let r=process.env.KYNVER_RUNNER_TOKEN?.trim();if(r)return r;let t=Jn();if(t.runnerToken&&!(e&&t.runnerTokenAgentOsId&&t.runnerTokenAgentOsId!==e))return t.runnerToken}function Zr(e,r){Op({...Jn(),runnerToken:r,runnerTokenAgentOsId:e})}function F(e){let r=qn(e);return r||ws("requires --base-url, KYNVER_API_URL, KYNVER_CRON_FIRE_BASE_URL, or ~/.kynver/config.json apiBaseUrl"),r}function ml(e){return qn(e)}function qn(e){let r=e||process.env.KYNVER_API_URL||process.env.KYNVER_CRON_FIRE_BASE_URL||process.env.OPENCLAW_CRON_FIRE_BASE_URL||v().apiBaseUrl;return r?sr(String(r)):void 0}function Np(e,r){let t=e||xp(r)||(r?void 0:xp(v().agentOsId));if(t)return String(t);let n=process.env.KYNVER_RUNTIME_SECRET||process.env.KYNVER_CRON_SECRET||process.env.OPENCLAW_CRON_SECRET;if(n)return console.warn("[kynver] using deployment-level callback secret; run `kynver runner credential --agent-os-id <id>` for a scoped token"),String(n)}function Ev(e,r){let t=Np(e,r);if(t)return t;ws("requires --secret, KYNVER_RUNNER_TOKEN, a scoped runner token (`kynver runner credential`), ~/.kynver/credentials runnerToken, KYNVER_API_KEY with an API base URL to mint one, or (legacy) KYNVER_RUNTIME_SECRET / KYNVER_CRON_SECRET / OPENCLAW_CRON_SECRET")}async function Cs(e,r,t){let n=Np(e,r);if(n)return{ok:!0,secret:n};let o=oe(),s=qn(t?.baseUrl);if(o&&r&&s)try{let i=await et(r,{baseUrl:s,apiKey:o});return Zr(r,i),{ok:!0,secret:i}}catch(i){return{ok:!1,reason:`runner credential mint failed: ${i.message}`}}return{ok:!1,reason:"no runner credential: requires --secret, KYNVER_RUNNER_TOKEN, a scoped runner token (`kynver runner credential`), ~/.kynver/credentials runnerToken, or KYNVER_API_KEY + API base URL to mint one"}}async function V(e,r,t){let n=await Cs(e,r,t);if(n.ok)return n.secret;ws(n.reason)}async function Tp(e,r){let t=oe(),n=qn(r?.baseUrl);if(!t||!e||!n)return null;try{let o=await et(e,{baseUrl:n,apiKey:t});return Zr(e,o),o}catch{return null}}async function Dp(e,r,t){let n=oe(),o=qn(t?.baseUrl);if(!n)return{ok:!1,reason:"KYNVER_API_KEY is required to refresh a rejected runner token"};if(!r)return{ok:!1,reason:"agentOsId is required to refresh a rejected runner token"};if(!o)return{ok:!1,reason:"KYNVER_API_URL or --base-url is required to refresh a rejected runner token"};try{let s=await et(r,{baseUrl:o,apiKey:n});return s&&s!==e?(Zr(r,s),{ok:!0,token:s}):{ok:!1,reason:"runner credential refresh returned the rejected token"}}catch(s){return{ok:!1,reason:s.message}}}async function et(e,r){let t=r?.apiKey||oe();if(!t)throw new Error("API key required \u2014 run `kynver login` first");let o=`${F(r?.baseUrl)}/api/agent-os/by-id/${encodeURIComponent(e)}/runner-credentials`,s=await fetch(o,{method:"POST",headers:{"Content-Type":"application/json",Authorization:`Bearer ${t}`},body:JSON.stringify({})}),i=await s.text(),a=null;try{a=JSON.parse(i)}catch{a=null}if(!s.ok||!a?.token)throw new Error(`runner credential mint failed (${s.status}): ${a?.error??i.slice(0,200)}`);return a.token}async function Mp(e){let r=(e.agentOsId?String(e.agentOsId):v().agentOsId)||"";r||ws("runner credential requires --agent-os-id or agentOsId in ~/.kynver/config.json");try{let t=await et(r,{baseUrl:e.baseUrl?String(e.baseUrl):void 0});Zr(r,t),console.log(JSON.stringify({ok:!0,agentOsId:r,credentialsPath:q(Vt),tokenPrefix:`${t.slice(0,12)}\u2026`,note:"Scoped runner token saved; callbacks use X-Kynver-Runner-Token."},null,2))}catch(t){console.error(t instanceof Error?t.message:String(t)),process.exit(1)}}function ws(e){console.error(e),process.exit(1)}function zn(e){let r={};for(let t=0;t<e.length;t++){let n=e[t];if(!n.startsWith("--"))continue;let o=n.slice(2).replace(/-([a-z])/g,(i,a)=>a.toUpperCase()),s=e[t+1];!s||s.startsWith("--")?r[o]=!0:(r[o]=s,t++)}return r}async function _s(e){let r=v(),t=We({diskPath:typeof e.diskPath=="string"?e.diskPath:"/"}),n=ll({totalMemBytes:wv.totalmem(),diskPath:t.path,diskGateOk:t.ok,diskFreeBytes:t.freeBytes,config:r}),o=xv(r,e),s=pl({...r,..._v(r,e),...o,workerProvider:typeof e.provider=="string"?e.provider:r.workerProvider||"cursor",...e.chatOauth===!0?{chatUseClaudeOauth:!0}:{}});Ge(s);let i=Me(process.env,s),a,l=oe(),c=s.agentOsId;if(l&&c)try{let u=await et(c,{baseUrl:typeof e.apiBaseUrl=="string"?e.apiBaseUrl:s.apiBaseUrl,apiKey:l});Zr(c,u),a="Scoped runner token minted and saved to ~/.kynver/credentials."}catch{a="Runner token not minted (server offline or master secret unset). Run `kynver runner credential` after deploy."}console.log(JSON.stringify({ok:!0,configPath:q(vs),config:Gt(s),boxKind:s.boxKind,boxKindSource:i.source,workerCapRecommendation:n,...i.warnings.length?{boxIdentityWarnings:i.warnings}:{},note:a??"boxKind and maxConcurrentWorkers persisted; override with --box-kind and --max-workers. Run `kynver login` + `kynver runner credential` for scoped callbacks."},null,2))}async function Up(e){let r=typeof e.apiKey=="string"?e.apiKey:process.env.KYNVER_API_KEY;if(r){Yn(r),console.log(JSON.stringify({ok:!0,credentialsPath:q(Vt)},null,2));return}let{runDeviceLogin:t}=await Promise.resolve().then(()=>(ul(),_p));(await t(e)).ok||process.exit(1),console.log(JSON.stringify({ok:!0,credentialsPath:q(Vt)},null,2))}var Ss,vs,Vt,YT,JT,I=j(()=>{"use strict";Nn();ir();C();Ue();bs();Ut();Ss=dl.join(Sv(),".kynver"),vs=dl.join(Ss,"config.json"),Vt=dl.join(Ss,"credentials");YT=500*1024*1024,JT=4*1024*1024*1024});import{existsSync as ER,readFileSync as PR}from"node:fs";import{dirname as Aa,join as gd}from"node:path";import{fileURLToPath as fd}from"node:url";function AR(e){let r=Aa(fd(e));for(let t=0;t<6;t+=1){if(ER(gd(r,"package.json")))return r;let n=Aa(r);if(n===r)break;r=n}throw new Error(`package.json not found above ${Aa(fd(e))}`)}function hd(e=import.meta.url){let r=gd(AR(e),"package.json"),t=JSON.parse(PR(r,"utf8"));if(typeof t.version!="string"||!t.version.trim())throw new Error(`Missing package.json version at ${r}`);return t.version}var Pn=hd();function IR(e){return e.some(r=>r==="--version"||r==="-v")}function OR(e,r){console.log(r?`${r} ${e}`:e),process.exit(0)}function kd(e,r=import.meta.url,t){return IR(e)?(OR(hd(r),t),!0):!1}Nn();import{existsSync as Td,readFileSync as KR}from"node:fs";import rs from"node:path";var Ha={"@kynver-app/runtime":"0.1.83","@kynver-app/openclaw-agent-os":"0.1.43","@kynver-app/mcp-agent-os":"0.3.34"},Fa=Object.keys(Ha),Ba={"@kynver-app/runtime":"Kynver runtime","@kynver-app/openclaw-agent-os":"OpenClaw AgentOS plugin","@kynver-app/mcp-agent-os":"AgentOS MCP server"},jR={"@kynver-app/runtime":"packages/kynver-runtime/package.json","@kynver-app/openclaw-agent-os":"packages/kynver-openclaw-agent-os/package.json","@kynver-app/mcp-agent-os":"packages/kynver-mcp-agent-os/package.json"};function Dd(e){let r=e.trim().split("-")[0]?.split("+")[0];if(!r)return null;let t=r.split(".");if(t.length<1||t.length>3)return null;let n=t.map(o=>Number.parseInt(o,10));if(n.some(o=>!Number.isFinite(o)||o<0))return null;for(;n.length<3;)n.push(0);return[n[0],n[1],n[2]]}function Dn(e,r){let t=Dd(e),n=Dd(r);if(!t||!n)return 0;for(let o=0;o<3;o+=1){if(t[o]>n[o])return 1;if(t[o]<n[o])return-1}return 0}function $a(e,r){return Dn(e,r)>=0}function VR(e){let r=null;for(let t of e)(!r||Dn(t,r)>0)&&(r=t);return r}function GR(e){try{let r=JSON.parse(KR(e,"utf8"));return typeof r.version=="string"&&r.version.trim()?r.version.trim():null}catch{return null}}function YR(e,r){let t=[r,process.env.KYNVER_REPO,e].filter(o=>!!o?.trim());for(let o of t){let s=rs.resolve(o);if(Td(rs.join(s,"packages/kynver-runtime/package.json"))&&Td(rs.join(s,"package.json")))return s}return $r({cwd:e})?.repo??null}function Ka(e={}){let r=e.cwd??process.cwd(),t=YR(r,e.repoRoot);if(!t)return{};let n={};for(let o of Fa){let s=rs.join(t,jR[o]),i=GR(s);i&&(n[o]={version:i,source:"repo",path:s})}return n}function JR(e){return e==="@kynver-app/runtime"?["npm run kynver:build","npm run kynver"]:[`npm run build -w ${e}`]}function qR(e){let{packageName:r,minimumVersion:t,effectiveVersion:n,effectiveSource:o,repoVersion:s}=e,i=[];return s&&$a(s,t)?(i.push(`Use the monorepo checkout (${s}) instead of a stale npm install: ${JR(r).join("; ")}.`),i.push("Do not publish npm packages or wait on an operator release."),i):(n?i.push(`Upgrade ${r} from ${n} to >= ${t} (npm install -g ${r}@latest or align OpenClaw npm prefix).`):i.push(`Install ${r} >= ${t} before running memory-heavy AgentOS paths.`),r==="@kynver-app/runtime"&&i.push("Repo-source alternative: npm run kynver:build && npm run kynver"),o==="installed"&&s&&i.push(`Repo checkout reports ${s}; rebuild/link repo source if you develop from the monorepo.`),i)}function zR(e){if(e.length===0)return{version:null,source:"unknown"};let r=VR(e.map(n=>n.version));if(!r)return{version:null,source:"unknown"};let t=e.find(n=>n.version===r)??e[0];return{version:t.version,source:t.source}}function ts(e={}){let r=(i,a)=>i?typeof i=="string"?{version:i,source:a}:i:null,t=Fa.map(i=>{let a=Ha[i],l=[],c=r(e.installed?.[i],"installed"),u=r(e.repo?.[i],"repo"),d=r(e.self?.[i],"self");c&&l.push(c),u&&l.push(u),d&&l.push(d);let{version:f,source:m}=zR(l),p=u?.version??null,g=f?$a(f,a):!1,k=g?[]:qR({packageName:i,minimumVersion:a,effectiveVersion:f,effectiveSource:m,repoVersion:p}),h=g?`${Ba[i]} ${f} meets memory-cost minimum ${a} (${m}).`:`${Ba[i]} is below memory-cost minimum ${a}`+(f?` (effective ${f} via ${m})`:" (no version detected)")+".";return{packageName:i,displayName:Ba[i],minimumVersion:a,effectiveVersion:f,effectiveSource:m,ok:g,summary:h,remediation:k}}),n=t.filter(i=>!i.ok),o=n.length===0,s=o?"All managed AgentOS packages meet memory-cost minimum versions.":`Memory-cost package guard blocked ${n.length} stale package(s): ${n.map(i=>`${i.packageName} < ${i.minimumVersion}`).join("; ")}.`;return{ok:o,summary:s,packages:t}}var Tn=class extends Error{result;constructor(r){let t=[r.summary,...r.packages.filter(n=>!n.ok).flatMap(n=>[`- ${n.summary}`,...n.remediation.map(o=>`  \u2192 ${o}`)])];super(t.join(`
+`)),this.name="MemoryCostPackageVersionGuardError",this.result=r}};function ja(e={}){let r=ts(e);if(!r.ok)throw new Tn(r);return r}function XR(e){return new Tn(e).message}import{readFile as QR}from"node:fs/promises";import{homedir as ZR}from"node:os";import Kr from"node:path";var eb=["@kynver-app/runtime","@kynver-app/openclaw-agent-os","@kynver-app/mcp-agent-os"];function Nt(e){let r=e?.trim();return r||null}function rb(e){return[...new Set(e.filter(r=>!!r))]}function tb(){let e=ZR(),r=Nt(process.env.KYNVER_OPENCLAW_NPM_ROOT)??Nt(process.env.OPENCLAW_NPM_ROOT)??Kr.join(e,".openclaw","npm"),t=Nt(process.env.KYNVER_NPM_GLOBAL_ROOT)??Nt(process.env.KYNVER_NPM_GLOBAL_MODULES_ROOT)??(Nt(process.env.NPM_CONFIG_PREFIX)?Kr.join(Nt(process.env.NPM_CONFIG_PREFIX),"lib","node_modules"):Kr.join(e,".npm-global","lib","node_modules"));return rb([Kr.join(r,"lib","node_modules"),Kr.join(r,"node_modules"),t.endsWith("node_modules")?t:Kr.join(t,"lib","node_modules")])}async function nb(e){try{let r=JSON.parse(await QR(e,"utf8"));return typeof r.version=="string"&&r.version.trim()?r.version.trim():null}catch{return null}}function ob(e){let r=tb(),t=new Set,n=[];for(let o of r){let s=Kr.join(o,e,"package.json");t.has(s)||(t.add(s),n.push(s))}return n}async function ns(e=new Date().toISOString()){let r={};for(let t of eb){let n=null;for(let o of ob(t)){let s=await nb(o);s&&(!n||Dn(s,n.version)>0)&&(n={version:s,path:o})}n&&(r[t]={version:n.version,observedAt:e,path:n.path})}return r}function sb(e){let r={};for(let[t,n]of Object.entries(e))n?.version&&(r[t]={version:n.version,source:"installed",path:n.path});return r}async function Va(e={}){let[r,t]=await Promise.all([ns(),Promise.resolve(Ka({cwd:e.cwd,repoRoot:e.repoRoot}))]),n={},o=e.selfPackageName==="@kynver-app/runtime"&&e.selfVersion?e.selfVersion:Pn;return n["@kynver-app/runtime"]={version:o,source:"self"},e.selfPackageName&&e.selfVersion&&e.selfPackageName!=="@kynver-app/runtime"&&(n[e.selfPackageName]={version:e.selfVersion,source:"self"}),{installed:sb(r),repo:t,self:n}}async function ib(e={}){let r=await Va(e);return ts(r)}async function Ga(e={}){let r=await Va(e);return ja(r)}function Ya(e,r){return e?e==="daemon"||e==="start"||e==="worker"||e==="monitor"||e==="run"&&(r==="dispatch"||r==="sweep"||r==="reconcile"||r==="unblock")||e==="cron"&&r==="tick":!1}I();function Be(e){let r=String(e).trim();return r.startsWith("krc1.")?{"Content-Type":"application/json","X-Kynver-Runner-Token":r}:{"Content-Type":"application/json","X-Kynver-Cron-Secret":r,"X-OpenClaw-Cron-Secret":r,"X-Kynver-Runtime-Secret":r}}I();function Wp(e){if(e!==void 0&&Number.isFinite(e)&&e>0)return Math.floor(e);let r=Number(process.env.KYNVER_CALLBACK_TIMEOUT_MS);return Number.isFinite(r)&&r>0?Math.floor(r):3e4}async function Lp(e,r){let t=Wp(r),n=new AbortController,o=setTimeout(()=>n.abort(),t);try{return await e(n.signal)}finally{clearTimeout(o)}}function Bp(e,r){let t=Wp(r);return{ok:!1,status:0,response:{error:e instanceof Error?e.message:String(e),timeoutMs:t}}}async function xr(e,r,t,n){let o;try{o=await Lp(i=>fetch(e,{method:"POST",headers:Be(r),body:JSON.stringify(t),signal:i}),n?.timeoutMs)}catch(i){return Bp(i,n?.timeoutMs)}let s=null;try{s=await o.json()}catch{s=null}return{ok:o.ok,status:o.status,response:s}}async function X(e,r,t,n){let o=await xr(e,r,t,{timeoutMs:n.timeoutMs});if(o.ok||o.status!==401)return o;let s=await Dp(r,n.agentOsId,{baseUrl:n.baseUrl});return s.ok?{...await xr(e,s.token,t,{timeoutMs:n.timeoutMs}),refreshedAuth:!0}:{...o,authRefreshFailure:s.reason}}async function xs(e,r,t){let n;try{n=await Lp(s=>fetch(e,{method:"GET",headers:Be(r),signal:s}),t?.timeoutMs)}catch(s){return Bp(s,t?.timeoutMs)}let o=null;try{o=await n.json()}catch{o=null}return{ok:n.ok,status:n.status,response:o}}function Hp(){let e=Number(process.env.KYNVER_DISPATCH_CALLBACK_TIMEOUT_MS);return Number.isFinite(e)&&e>0?Math.floor(e):12e4}function fl(e){console.error(JSON.stringify({event:"dispatch_progress",ts:new Date().toISOString(),...e}))}function Fp(e){if(!e||typeof e!="object")return!1;let r=e;if(r.timeoutMs!==void 0)return!0;let t=r.error;if(typeof t!="string"||!t.trim())return!1;let n=t.toLowerCase();return n.includes("abort")||n.includes("timeout")}var $p="embedded-1",Pv=[{slug:"ghost",displayName:"Ghost",description:"Orchestration persona.",dispatchLane:null,defaultRoleLane:"system"},{slug:"astra",displayName:"Astra",description:"Planning persona.",dispatchLane:"implementation",defaultRoleLane:"plan_author"},{slug:"rhea",displayName:"Rhea",description:"Implementation persona.",dispatchLane:"implementation",defaultRoleLane:"implementer"},{slug:"mnemo",displayName:"Mnemo",description:"Implementation persona.",dispatchLane:"implementation",defaultRoleLane:"implementer"},{slug:"sentinel",displayName:"Sentinel",description:"Review persona.",dispatchLane:"review",defaultRoleLane:"deep_reviewer"},{slug:"pixel",displayName:"Pixel",description:"Implementation persona.",dispatchLane:"implementation",defaultRoleLane:"implementer"},{slug:"schema",displayName:"Schema",description:"Implementation persona.",dispatchLane:"implementation",defaultRoleLane:"implementer"},{slug:"atlas",displayName:"Atlas",description:"Implementation persona.",dispatchLane:"implementation",defaultRoleLane:"runtime_verifier"},{slug:"bridge",displayName:"Bridge",description:"Implementation persona.",dispatchLane:"implementation",defaultRoleLane:"implementer"},{slug:"catalyst",displayName:"Catalyst",description:"Implementation persona.",dispatchLane:"implementation",defaultRoleLane:"implementer"},{slug:"lorentz",displayName:"Lorentz",description:"Review persona.",dispatchLane:"review",defaultRoleLane:"report_reviewer"},{slug:"dalton",displayName:"Dalton",description:"Landing persona.",dispatchLane:"landing",defaultRoleLane:"implementer"}],Av={"worker.prompt.core_rules":["Structured final result (recommended): record completion as JSON with summary, files, PR URLs, verification, risks, and blockers.","Completion handoff (required): before you stop, summarize the outcome in your last message and append a heartbeat line with phase `complete`. Commit your work cleanly and open a GitHub PR (draft OK) for substantial changes \u2014 never leave uncommitted changes behind without reporting them.","Review-only workers must not open new implementation PRs \u2014 review the existing PR and record a verdict in the final result.","Keep verification targeted to touched paths; avoid full-monorepo verification unless explicitly requested.","Do not run `npm publish`.","If verification fails, append a heartbeat line immediately with the failing command, reason, and next action."].join(`
 `),"worker.prompt.progress.compact":"Plan progress: when planId is set, report progress with `kynver plan progress --plan <planId> --row <rowKey> --role implementer --status in_progress|running|partial|blocked`. Do not mark rows done from the worker CLI.","worker.prompt.progress.full":["Structured plan progress (required when planId is set):","- Report checkpoints with `kynver plan progress --plan <planId> --row <rowKey> --role implementer --status in_progress|running|partial|blocked`.","- When a slice is finished, emit `partial` with evidence (`--evidence pr:<url>`, `--evidence path:<file>`, or `--evidence command:<cmd>`).","- Do not propose or confirm row `done` from the worker CLI."].join(`
 `),"worker.prompt.merge_gate.compact":"Verification cost control: prefer local verification before requesting CI runs; do not push empty commits to re-trigger CI; record verification evidence on the PR.","worker.prompt.merge_gate.full":["Verification cost control:","- Prefer local verification of touched paths before requesting any CI run.","- Do not push empty commits to re-trigger CI.","- Record verification evidence on the PR before requesting review."].join(`
 `),"worker.prompt.plan_artifacts.compact":"Plan artifacts: when authoring or revising plan documents, open a GitHub PR early and iterate from that PR branch; do not leave the canonical plan only in a local worktree.","worker.prompt.plan_artifacts.full":["Plan artifacts (when authoring or revising plan documents):","- Create a feature branch and open a GitHub PR (draft OK) before substantial drafting; commit and push the plan file.","- Iterate on that PR branch and link the PR URL on the related task and progress evidence."].join(`
-`)},Ov={"harness.maxTaskAttempts":4,"harness.dispatchCooldownMs":5e3,"daemon.idleIntervalMs":5*6e4,"daemon.maxIdleStreak":10},Gr={version:op,generatedAt:"1970-01-01T00:00:00.000Z",personas:Av,instructions:Iv,policyThresholds:Ov};var Ut=Gr,sp="embedded";function Nv(){return Ut}function vr(){return Ut.version}function sr(){return sp}function Ya(e,r){Ut=e,sp=r}function Lt(e){let r=Ut.instructions[e];if(typeof r=="string"&&r.trim())return r;let t=Gr.instructions[e];return typeof t=="string"?t:""}function Yr(e,r){let t=Ut.policyThresholds[e];if(typeof t=="number"&&Number.isFinite(t))return t;let n=Gr.policyThresholds[e];return typeof n=="number"&&Number.isFinite(n)?n:r}function ls(e){if(!e)return null;let r=e.trim().toLowerCase();return Ut.personas.find(t=>t.slug===r)??null}var Tv=["implementation","review","landing"],Dv=["plan_author","implementer","report_reviewer","deep_reviewer","runtime_verifier","system"];function Mv(e){return Tv.includes(e)}function Uv(e){return Dv.includes(e)}function ip(e){return{slug:e.slug,displayName:e.displayName,description:e.description,dispatchLane:e.dispatchLane===null||Mv(e.dispatchLane)?e.dispatchLane:null,defaultRoleLane:Uv(e.defaultRoleLane)?e.defaultRoleLane:"implementer"}}var cs=Gr.personas.map(ip),ap=new Map(cs.map(e=>[e.slug,e]));function Ja(e){if(!e)return null;let r=e.trim().toLowerCase(),t=ap.get(r)??null,n=ls(r);if(!n)return t;let o=ip(n);return t?{...o,dispatchLane:t.dispatchLane,defaultRoleLane:t.defaultRoleLane}:o}function lp(e){return Ja(e)?.dispatchLane??null}function us(e){return Ja(e)?.defaultRoleLane??null}function Lv(e){if(!e)return!1;let r=e.trim().toLowerCase();return ap.has(r)||ls(r)!==null}function qa(){return cs.filter(e=>e.dispatchLane==="review").map(e=>e.slug)}function Bv(){return cs.filter(e=>e.dispatchLane==="landing").map(e=>e.slug)}function cp(e){return(e??"").trim().toLowerCase()}function Wv(e){switch(cp(e)){case"implementer":case"repair_implementer":case"plan_author":case"runtime_verifier":return"implementation";case"plan_reviewer":case"report_reviewer":case"deep_reviewer":return"review";default:return null}}function Hv(e){let r=cp(e);if(!r)return;if(r==="implementation"||r==="review"||r==="landing"||r==="any")return r;let t=Wv(r);if(t)return t;if(r==="implement"||r==="repair"||r==="coding")return"implementation";if(r==="land"||r==="merge")return"landing"}function up(e){return Hv(e)??"any"}_t();Mn();L();L();function ds(e,r){let t=e[r];return typeof t=="string"?t.trim():""}function za(e){return e.toLowerCase()}function Fv(e){let r=ds(e,"roleLane");if(r)return r;let t=za(ds(e,"executorRef")),n=za(ds(e,"title")),o=za(ds(e,"personaSlug")),s=`${t} ${n}`;if(s.includes("deep review")||s.includes("security review")||t.includes("deep-reviewer"))return"deep_reviewer";if(s.includes("plan author")||s.includes("plan-author")||n.includes("strategy plan"))return"plan_author";if(s.includes("plan review")||t.includes("plan-reviewer"))return"plan_reviewer";if(s.includes("report review")||s.includes("completion report"))return"report_reviewer";if(s.includes("repair")||n.startsWith("fix ")||t.includes("repair"))return"repair_implementer";if(t.includes("cursor")||t.includes("codex")||t.includes("composer")||n.includes("implement")||n.includes("land:"))return"implementer";let i=us(o);if(i)return o==="lorentz"&&(s.includes("deep")||s.includes("security"))?"deep_reviewer":i;if(s.includes("review"))return"report_reviewer"}function dp(e){let r=Fv(e);return r?{...e,roleLane:r}:e}O();var xe="cursor",$v=new Set(["claude","opus","anthropic"]),Kv=[/\[worker-provider:\s*claude\]/i,/\[use-claude-worker\]/i,/\[operator-worker-provider:\s*claude\]/i];function Xa(e,r){let t=e[r];return typeof t=="string"?t.trim():""}function Ge(e){if(!e?.trim())return!1;let r=e.trim().toLowerCase();return $v.has(r)?!0:r.includes("claude")||r.includes("opus")}function ps(e){if(!e)return!1;let r=e.workerProviderOverride;if(typeof r=="string"&&Ge(r))return!0;let t=Xa(e,"executorRef").toLowerCase();if(t==="provider:claude"||t.startsWith("provider:claude:")||t.includes("claude-worker-override")||t.includes("operator-claude"))return!0;let n=Xa(e,"description");if(Kv.some(s=>s.test(n)))return!0;let o=Xa(e,"title");return!!/\[use-claude-worker\]/i.test(o)}function jv(e,r){return{provider:xe,model:Za,rule:`policy:cursor_default${r}`,requestedModel:e}}function Qa(e){let{routing:r,task:t}=e,n=e.explicitProvider?.trim().toLowerCase();if(e.explicitProviderIsOperatorOverride&&Ge(n))return{...r,provider:"claude",rule:r.rule.startsWith("explicit:")?r.rule:"explicit:operator_provider"};if(ps(t)||r.rule==="explicit:cli"&&Ge(r.provider)||!Ge(r.provider))return r;let o=r.rule&&r.rule!=="default:global"?`:${r.rule.replace(/:/g,"_")}`:"";return jv(r.model,o)}function Hn(e,r=xe){let t=e?.trim();return t?Ge(t)?xe:t==="codex"?"codex":t:r}function Vv(e){let r=[...new Set(e.map(t=>t.trim().toLowerCase()).filter(Boolean))];return r.includes(xe)?[...new Set(r.map(t=>Ge(t)?xe:t))]:r.every(t=>Ge(t))?[xe]:r}var pp={codex:{id:"codex",displayName:"Codex (BYO OAuth / Hermes openai-codex)",costTier:"low",authSources:["oauth_local","api_key_env","subscription_hermes"],supportsLowRiskOrchestration:!0,supportsPrivilegedPlatformActions:!1},cursor:{id:"cursor",displayName:"Cursor / Composer",costTier:"medium",authSources:["oauth_local","api_key_env"],supportsLowRiskOrchestration:!0,supportsPrivilegedPlatformActions:!0},claude:{id:"claude",displayName:"Claude Code",costTier:"high",authSources:["oauth_local"],supportsLowRiskOrchestration:!0,supportsPrivilegedPlatformActions:!0}};function Jr(e){return pp[e]}function el(){return Object.values(pp)}import{existsSync as Yv}from"node:fs";import{homedir as Jv}from"node:os";import gp from"node:path";import{createHash as mp}from"node:crypto";import{statSync as Gv}from"node:fs";import{spawnSync as fp}from"node:child_process";function Ye(e){try{let r=Gv(e),t=`${e}|${r.size}|${r.mtimeMs}`;return mp("sha256").update(t).digest("hex").slice(0,16)}catch{return}}function Bt(e){return mp("sha256").update(`env:${e}`).digest("hex").slice(0,16)}function Pe(e,r){for(let t of r){let n=process.env[t]?.trim();if(n)return n}return e}function Je(e,r,t={}){let n=t.timeoutMs??8e3;try{let o=fp(e,r,{encoding:"utf8",timeout:n,env:{...process.env,CI:"1",NO_COLOR:"1"}});if(o.status===0)return{ok:!0,note:t.okNote??`${e} ${r.join(" ")}: ok`};let s=(o.stderr||o.stdout||"").trim(),i=t.failPrefix??`${e} ${r.join(" ")} failed`;return{ok:!1,note:s?`${i}: ${s.slice(0,200)}`:i}}catch(o){return{ok:!1,note:o instanceof Error?o.message:`${e} probe failed`}}}function ms(e,r,t={}){let n=t.timeoutMs??8e3;try{return fp(e,r,{stdio:"ignore",timeout:n,env:{...process.env,CI:"1",NO_COLOR:"1"}}).status===0?{ok:!0,note:t.okNote??`${e} authenticated`}:{ok:!1,note:t.failNote??`${e} not authenticated`}}catch(o){return{ok:!1,note:o instanceof Error?o.message:`${e} auth probe failed`}}}var qv="codex";function zv(){let e=Jv();return[gp.join(e,".codex","auth.json"),gp.join(e,".config","codex","auth.json")]}function rl(e=new Date().toISOString()){let r=Pe(qv,["KYNVER_CODEX_BIN","CODEX_BIN"]);if(process.env.CODEX_API_KEY?.trim())return{providerId:"codex",ready:!0,authSource:"api_key_env",sessionFingerprint:Bt("CODEX_API_KEY"),checkedAt:e,note:"CODEX_API_KEY present (env binding \u2014 cloud credits path, no token stored in Kynver)"};let t=zv().find(s=>Yv(s)),n=Je(r,["login","status"],{okNote:"codex login status: authenticated",failPrefix:"codex login status"}),o=!!t&&n.ok;return{providerId:"codex",ready:o,authSource:"oauth_local",sessionFingerprint:t?Ye(t):void 0,checkedAt:e,note:o?"Local Codex OAuth session bound on runner":[n.note,t?void 0:"no ~/.codex/auth.json"].filter(Boolean).join("; ")}}import{existsSync as Xv}from"node:fs";import{homedir as Qv}from"node:os";import tl from"node:path";function Zv(){let e=process.env.HERMES_HOME?.trim(),r=e?tl.resolve(e):tl.join(Qv(),".hermes");return tl.join(r,"auth.json")}function Fn(e=new Date().toISOString()){let r=Pe("hermes",["KYNVER_HERMES_BIN","HERMES_BIN"]),t=Je(r,["--version"],{okNote:`${r} CLI available`,failPrefix:`${r} CLI not available`}),n=Zv(),o=Xv(n),s=ms(r,["auth","status","openai-codex"],{okNote:"hermes openai-codex: logged in",failNote:"hermes openai-codex: not logged in"}),i=t.ok&&s.ok;return{path:"hermes_openai_codex",ready:i,authSource:i?"subscription_hermes":"none",sessionFingerprint:o?Ye(n):void 0,checkedAt:e,note:i?"Hermes openai-codex subscription session bound (ChatGPT Codex OAuth)":[t.note,s.note,o?void 0:"no ~/.hermes/auth.json"].filter(Boolean).join("; ")}}function br(e=new Date().toISOString()){let r=rl(e);if(r.ready)return{...r,path:"codex_cli"};let t=Fn(e);return t.ready?{providerId:"codex",ready:!0,authSource:t.authSource,sessionFingerprint:t.sessionFingerprint,checkedAt:t.checkedAt,note:t.note,path:"hermes_openai_codex",hermesOpenAiCodex:t}:{providerId:"codex",ready:!1,authSource:"none",checkedAt:e,path:"none",hermesOpenAiCodex:t,note:[r.note,t.note].filter(Boolean).join("; ")||"Codex CLI and Hermes openai-codex unavailable"}}var hp=["low","medium","high"],kp={oauth_local:0,subscription_hermes:0,runner_token:1,api_key_env:2,none:3};function nl(e,r){let t=Jr(e);return r==="privileged"?t.supportsPrivilegedPlatformActions:r==="low"?t.supportsLowRiskOrchestration:!0}function yp(e,r){let t=Jr(e.providerId),n=Jr(r.providerId),o=hp.indexOf(t.costTier)-hp.indexOf(n.costTier);if(o!==0)return o;let s=kp[e.binding.authSource]-kp[r.binding.authSource];return s!==0?s:e.providerId.localeCompare(r.providerId)}function fs(e){let r=el().map(a=>({providerId:a.id,binding:e.inventory.bindings[a.id]})).filter(a=>a.binding.ready&&nl(a.providerId,e.riskClass));if(r.length===0)return null;let n=[...r].sort(yp)[0],o="codex";if(n.providerId===o)return{providerId:n.providerId,binding:n.binding};let s=e.inventory.bindings[o],i;return nl(o,e.riskClass)?s.ready||(i=s.note??`${o} not bound`):i=`${e.riskClass} orchestration requires privileged-capable provider`,{providerId:n.providerId,binding:n.binding,escalatedFrom:o,escalatedReason:i}}import{existsSync as eb}from"node:fs";import{homedir as rb}from"node:os";import tb from"node:path";var nb="claude";function ob(){let e=rb();return[tb.join(e,".claude",".credentials.json")]}function gs(e=new Date().toISOString()){let r=Pe(nb,["KYNVER_CLAUDE_BIN","CLAUDE_BIN"]);if(process.env.ANTHROPIC_API_KEY?.trim())return{providerId:"claude",ready:!0,authSource:"api_key_env",sessionFingerprint:Bt("ANTHROPIC_API_KEY"),checkedAt:e,note:"ANTHROPIC_API_KEY present (env binding \u2014 cloud credits path, no token stored in Kynver)"};let t=Je(r,["--version"],{okNote:`${r} CLI available`,failPrefix:`${r} CLI not available`}),n=ob().find(i=>eb(i)),o=ms(r,["auth","status"],{okNote:"claude auth status: authenticated",failNote:"claude auth status: not authenticated"}),s=t.ok&&(o.ok||!!n);return{providerId:"claude",ready:s,authSource:"oauth_local",sessionFingerprint:n?Ye(n):void 0,checkedAt:e,note:s?"Local Claude Code OAuth session bound on runner":[t.note,o.note,n?void 0:"no ~/.claude/.credentials.json"].filter(Boolean).join("; ")}}import{existsSync as sb}from"node:fs";import{homedir as ib}from"node:os";import ab from"node:path";var lb="agent";function cb(){let e=ib();return[ab.join(e,".config","cursor","auth.json")]}function hs(e=new Date().toISOString()){let r=Pe(lb,["KYNVER_CURSOR_AGENT_BIN","CURSOR_AGENT_BIN"]);if(process.env.CURSOR_API_KEY?.trim())return{providerId:"cursor",ready:!0,authSource:"api_key_env",sessionFingerprint:Bt("CURSOR_API_KEY"),checkedAt:e,note:"CURSOR_API_KEY present (env binding \u2014 cloud credits path, no token stored in Kynver)"};let t=Je(r,["-v"],{okNote:`${r} CLI available`,failPrefix:`${r} CLI not available`}),n=cb().find(s=>sb(s)),o=!!n&&t.ok;return{providerId:"cursor",ready:o,authSource:"oauth_local",sessionFingerprint:n?Ye(n):void 0,checkedAt:e,note:o?"Local Cursor/Composer OAuth session bound on runner":[t.note,n?void 0:"no ~/.config/cursor/auth.json"].filter(Boolean).join("; ")}}import{existsSync as ub,readFileSync as db}from"node:fs";import{homedir as pb}from"node:os";import ol from"node:path";var mb=["OPENAI_API_KEY","ANTHROPIC_API_KEY","KYNVER_API_KEY","KYNVER_BASE_URL"];function fb(){let e=process.env.HERMES_HOME?.trim(),r=e?ol.resolve(e):ol.join(pb(),".hermes");return ol.join(r,".env")}function gb(e){try{let r=db(e,"utf8"),t=[];for(let n of mb)new RegExp(`^${n}=`,"m").test(r)&&t.push(n);return t}catch{return[]}}function sl(e=new Date().toISOString()){let r=Pe("hermes",["KYNVER_HERMES_BIN","HERMES_BIN"]),t=Je(r,["--version"],{okNote:`${r} CLI available`,failPrefix:`${r} CLI not available`}),n=fb(),o=ub(n),s=o?gb(n):[],a=s.some(c=>c.endsWith("_API_KEY"))?"api_key_env":o?"oauth_local":"none",l=t.ok&&o;return{adapterId:"hermes",cliAvailable:t.ok,profileBound:o,authSource:a,sessionFingerprint:o?Ye(n):void 0,checkedAt:e,note:l?`Hermes profile bound (${s.length?`keys: ${s.join(", ")}`:"no API keys detected"})`:[t.note,o?void 0:"no ~/.hermes/.env"].filter(Boolean).join("; ")}}function il(e={}){let r=e.nowIso?.()??new Date().toISOString(),t=br(r),n={codex:t,cursor:hs(r),claude:gs(r)},o=Object.values(n).filter(s=>s.ready).length;return{generatedAt:r,bindings:n,cloudApiCredits:{anthropicApiKey:!!process.env.ANTHROPIC_API_KEY?.trim(),openaiApiKey:!!process.env.OPENAI_API_KEY?.trim(),codexApiKey:!!process.env.CODEX_API_KEY?.trim()},hermes:sl(r),hermesOpenAiCodex:Fn(r),codexAdapterPath:t.path,readyCount:o}}function hb(e,r){switch(e){case"codex":return br(r);case"cursor":return hs(r);case"claude":return gs(r)}}var kb=[/\bprivileged\b/i,/\bproduction\s+db\b/i,/\bdb:push\b/i,/\bmigration\b/i,/\bdeploy\b/i,/\bsecrets?\b/i,/\bstripe\b/i,/\[require-approval\]/i,/\[operator-only\]/i],yb=[/\borchestration\b/i,/\bplan[- ]?progress\b/i,/\bstatus\s+sync\b/i,/\bheartbeat\b/i,/\bboard[- ]?drain\b/i,/\bmaintenance\b/i,/\[orchestration:\s*low-risk\]/i];function al(e,r){let t=e[r];return typeof t=="string"?t.trim():""}function Rp(e){let r=al(e,"executorRef").toLowerCase(),t=al(e,"title").toLowerCase(),n=al(e,"description").toLowerCase(),o=`${r}
+`)},Iv={"harness.maxTaskAttempts":4,"harness.dispatchCooldownMs":5e3,"daemon.idleIntervalMs":5*6e4,"daemon.maxIdleStreak":10},rt={version:$p,generatedAt:"1970-01-01T00:00:00.000Z",personas:Pv,instructions:Av,policyThresholds:Iv};var Yt=rt,Kp="embedded";function Ov(){return Yt}function Er(){return Yt.version}function dr(){return Kp}function gl(e,r){Yt=e,Kp=r}function Jt(e){let r=Yt.instructions[e];if(typeof r=="string"&&r.trim())return r;let t=rt.instructions[e];return typeof t=="string"?t:""}function tt(e,r){let t=Yt.policyThresholds[e];if(typeof t=="number"&&Number.isFinite(t))return t;let n=rt.policyThresholds[e];return typeof n=="number"&&Number.isFinite(n)?n:r}function Es(e){if(!e)return null;let r=e.trim().toLowerCase();return Yt.personas.find(t=>t.slug===r)??null}var Nv=["implementation","review","landing"],Tv=["plan_author","implementer","report_reviewer","deep_reviewer","runtime_verifier","system"];function Dv(e){return Nv.includes(e)}function Mv(e){return Tv.includes(e)}function jp(e){return{slug:e.slug,displayName:e.displayName,description:e.description,dispatchLane:e.dispatchLane===null||Dv(e.dispatchLane)?e.dispatchLane:null,defaultRoleLane:Mv(e.defaultRoleLane)?e.defaultRoleLane:"implementer"}}var Ps=rt.personas.map(jp),Vp=new Map(Ps.map(e=>[e.slug,e]));function hl(e){if(!e)return null;let r=e.trim().toLowerCase(),t=Vp.get(r)??null,n=Es(r);if(!n)return t;let o=jp(n);return t?{...o,dispatchLane:t.dispatchLane,defaultRoleLane:t.defaultRoleLane}:o}function Gp(e){return hl(e)?.dispatchLane??null}function As(e){return hl(e)?.defaultRoleLane??null}function Uv(e){if(!e)return!1;let r=e.trim().toLowerCase();return Vp.has(r)||Es(r)!==null}function kl(){return Ps.filter(e=>e.dispatchLane==="review").map(e=>e.slug)}function Wv(){return Ps.filter(e=>e.dispatchLane==="landing").map(e=>e.slug)}function Yp(e){return(e??"").trim().toLowerCase()}function Lv(e){switch(Yp(e)){case"implementer":case"repair_implementer":case"plan_author":case"runtime_verifier":return"implementation";case"plan_reviewer":case"report_reviewer":case"deep_reviewer":return"review";default:return null}}function Bv(e){let r=Yp(e);if(!r)return;if(r==="implementation"||r==="review"||r==="landing"||r==="any")return r;let t=Lv(r);if(t)return t;if(r==="implement"||r==="repair"||r==="coding")return"implementation";if(r==="land"||r==="merge")return"landing"}function Jp(e){return Bv(e)??"any"}Ut();jt();W();W();function Is(e,r){let t=e[r];return typeof t=="string"?t.trim():""}function yl(e){return e.toLowerCase()}function Hv(e){let r=Is(e,"roleLane");if(r)return r;let t=yl(Is(e,"executorRef")),n=yl(Is(e,"title")),o=yl(Is(e,"personaSlug")),s=`${t} ${n}`;if(s.includes("deep review")||s.includes("security review")||t.includes("deep-reviewer"))return"deep_reviewer";if(s.includes("plan author")||s.includes("plan-author")||n.includes("strategy plan"))return"plan_author";if(s.includes("plan review")||t.includes("plan-reviewer"))return"plan_reviewer";if(s.includes("report review")||s.includes("completion report"))return"report_reviewer";if(s.includes("repair")||n.startsWith("fix ")||t.includes("repair"))return"repair_implementer";if(t.includes("cursor")||t.includes("codex")||t.includes("composer")||n.includes("implement")||n.includes("land:"))return"implementer";let i=As(o);if(i)return o==="lorentz"&&(s.includes("deep")||s.includes("security"))?"deep_reviewer":i;if(s.includes("review"))return"report_reviewer"}function qp(e){let r=Hv(e);return r?{...e,roleLane:r}:e}I();var Pe="cursor",Fv=new Set(["claude","opus","anthropic"]),$v=[/\[worker-provider:\s*claude\]/i,/\[use-claude-worker\]/i,/\[operator-worker-provider:\s*claude\]/i];function Rl(e,r){let t=e[r];return typeof t=="string"?t.trim():""}function Ye(e){if(!e?.trim())return!1;let r=e.trim().toLowerCase();return Fv.has(r)?!0:r.includes("claude")||r.includes("opus")}function Os(e){if(!e)return!1;let r=e.workerProviderOverride;if(typeof r=="string"&&Ye(r))return!0;let t=Rl(e,"executorRef").toLowerCase();if(t==="provider:claude"||t.startsWith("provider:claude:")||t.includes("claude-worker-override")||t.includes("operator-claude"))return!0;let n=Rl(e,"description");if($v.some(s=>s.test(n)))return!0;let o=Rl(e,"title");return!!/\[use-claude-worker\]/i.test(o)}function Kv(e,r){return{provider:Pe,model:vl,rule:`policy:cursor_default${r}`,requestedModel:e}}function bl(e){let{routing:r,task:t}=e,n=e.explicitProvider?.trim().toLowerCase();if(e.explicitProviderIsOperatorOverride&&Ye(n))return{...r,provider:"claude",rule:r.rule.startsWith("explicit:")?r.rule:"explicit:operator_provider"};if(Os(t)||r.rule==="explicit:cli"&&Ye(r.provider)||!Ye(r.provider))return r;let o=r.rule&&r.rule!=="default:global"?`:${r.rule.replace(/:/g,"_")}`:"";return Kv(r.model,o)}function Xn(e,r=Pe){let t=e?.trim();return t?Ye(t)?Pe:t==="codex"?"codex":t:r}function jv(e){let r=[...new Set(e.map(t=>t.trim().toLowerCase()).filter(Boolean))];return r.includes(Pe)?[...new Set(r.map(t=>Ye(t)?Pe:t))]:r.every(t=>Ye(t))?[Pe]:r}var zp={codex:{id:"codex",displayName:"Codex (BYO OAuth / Hermes openai-codex)",costTier:"low",authSources:["oauth_local","api_key_env","subscription_hermes"],supportsLowRiskOrchestration:!0,supportsPrivilegedPlatformActions:!1},cursor:{id:"cursor",displayName:"Cursor / Composer",costTier:"medium",authSources:["oauth_local","api_key_env"],supportsLowRiskOrchestration:!0,supportsPrivilegedPlatformActions:!0},claude:{id:"claude",displayName:"Claude Code",costTier:"high",authSources:["oauth_local"],supportsLowRiskOrchestration:!0,supportsPrivilegedPlatformActions:!0}};function nt(e){return zp[e]}function Sl(){return Object.values(zp)}import{existsSync as Gv}from"node:fs";import{homedir as Yv}from"node:os";import Zp from"node:path";import{createHash as Xp}from"node:crypto";import{statSync as Vv}from"node:fs";import{spawnSync as Qp}from"node:child_process";function Je(e){try{let r=Vv(e),t=`${e}|${r.size}|${r.mtimeMs}`;return Xp("sha256").update(t).digest("hex").slice(0,16)}catch{return}}function qt(e){return Xp("sha256").update(`env:${e}`).digest("hex").slice(0,16)}function Ae(e,r){for(let t of r){let n=process.env[t]?.trim();if(n)return n}return e}function qe(e,r,t={}){let n=t.timeoutMs??8e3;try{let o=Qp(e,r,{encoding:"utf8",timeout:n,env:{...process.env,CI:"1",NO_COLOR:"1"}});if(o.status===0)return{ok:!0,note:t.okNote??`${e} ${r.join(" ")}: ok`};let s=(o.stderr||o.stdout||"").trim(),i=t.failPrefix??`${e} ${r.join(" ")} failed`;return{ok:!1,note:s?`${i}: ${s.slice(0,200)}`:i}}catch(o){return{ok:!1,note:o instanceof Error?o.message:`${e} probe failed`}}}function Ns(e,r,t={}){let n=t.timeoutMs??8e3;try{return Qp(e,r,{stdio:"ignore",timeout:n,env:{...process.env,CI:"1",NO_COLOR:"1"}}).status===0?{ok:!0,note:t.okNote??`${e} authenticated`}:{ok:!1,note:t.failNote??`${e} not authenticated`}}catch(o){return{ok:!1,note:o instanceof Error?o.message:`${e} auth probe failed`}}}var Jv="codex";function qv(){let e=Yv();return[Zp.join(e,".codex","auth.json"),Zp.join(e,".config","codex","auth.json")]}function Cl(e=new Date().toISOString()){let r=Ae(Jv,["KYNVER_CODEX_BIN","CODEX_BIN"]);if(process.env.CODEX_API_KEY?.trim())return{providerId:"codex",ready:!0,authSource:"api_key_env",sessionFingerprint:qt("CODEX_API_KEY"),checkedAt:e,note:"CODEX_API_KEY present (env binding \u2014 cloud credits path, no token stored in Kynver)"};let t=qv().find(s=>Gv(s)),n=qe(r,["login","status"],{okNote:"codex login status: authenticated",failPrefix:"codex login status"}),o=!!t&&n.ok;return{providerId:"codex",ready:o,authSource:"oauth_local",sessionFingerprint:t?Je(t):void 0,checkedAt:e,note:o?"Local Codex OAuth session bound on runner":[n.note,t?void 0:"no ~/.codex/auth.json"].filter(Boolean).join("; ")}}import{existsSync as zv}from"node:fs";import{homedir as Xv}from"node:os";import wl from"node:path";function Qv(){let e=process.env.HERMES_HOME?.trim(),r=e?wl.resolve(e):wl.join(Xv(),".hermes");return wl.join(r,"auth.json")}function Qn(e=new Date().toISOString()){let r=Ae("hermes",["KYNVER_HERMES_BIN","HERMES_BIN"]),t=qe(r,["--version"],{okNote:`${r} CLI available`,failPrefix:`${r} CLI not available`}),n=Qv(),o=zv(n),s=Ns(r,["auth","status","openai-codex"],{okNote:"hermes openai-codex: logged in",failNote:"hermes openai-codex: not logged in"}),i=t.ok&&s.ok;return{path:"hermes_openai_codex",ready:i,authSource:i?"subscription_hermes":"none",sessionFingerprint:o?Je(n):void 0,checkedAt:e,note:i?"Hermes openai-codex subscription session bound (ChatGPT Codex OAuth)":[t.note,s.note,o?void 0:"no ~/.hermes/auth.json"].filter(Boolean).join("; ")}}function Pr(e=new Date().toISOString()){let r=Cl(e);if(r.ready)return{...r,path:"codex_cli"};let t=Qn(e);return t.ready?{providerId:"codex",ready:!0,authSource:t.authSource,sessionFingerprint:t.sessionFingerprint,checkedAt:t.checkedAt,note:t.note,path:"hermes_openai_codex",hermesOpenAiCodex:t}:{providerId:"codex",ready:!1,authSource:"none",checkedAt:e,path:"none",hermesOpenAiCodex:t,note:[r.note,t.note].filter(Boolean).join("; ")||"Codex CLI and Hermes openai-codex unavailable"}}var em=["low","medium","high"],rm={oauth_local:0,subscription_hermes:0,runner_token:1,api_key_env:2,none:3};function _l(e,r){let t=nt(e);return r==="privileged"?t.supportsPrivilegedPlatformActions:r==="low"?t.supportsLowRiskOrchestration:!0}function tm(e,r){let t=nt(e.providerId),n=nt(r.providerId),o=em.indexOf(t.costTier)-em.indexOf(n.costTier);if(o!==0)return o;let s=rm[e.binding.authSource]-rm[r.binding.authSource];return s!==0?s:e.providerId.localeCompare(r.providerId)}function Ts(e){let r=Sl().map(a=>({providerId:a.id,binding:e.inventory.bindings[a.id]})).filter(a=>a.binding.ready&&_l(a.providerId,e.riskClass));if(r.length===0)return null;let n=[...r].sort(tm)[0],o="codex";if(n.providerId===o)return{providerId:n.providerId,binding:n.binding};let s=e.inventory.bindings[o],i;return _l(o,e.riskClass)?s.ready||(i=s.note??`${o} not bound`):i=`${e.riskClass} orchestration requires privileged-capable provider`,{providerId:n.providerId,binding:n.binding,escalatedFrom:o,escalatedReason:i}}import{existsSync as Zv}from"node:fs";import{homedir as eS}from"node:os";import rS from"node:path";var tS="claude";function nS(){let e=eS();return[rS.join(e,".claude",".credentials.json")]}function Ds(e=new Date().toISOString()){let r=Ae(tS,["KYNVER_CLAUDE_BIN","CLAUDE_BIN"]);if(process.env.ANTHROPIC_API_KEY?.trim())return{providerId:"claude",ready:!0,authSource:"api_key_env",sessionFingerprint:qt("ANTHROPIC_API_KEY"),checkedAt:e,note:"ANTHROPIC_API_KEY present (env binding \u2014 cloud credits path, no token stored in Kynver)"};let t=qe(r,["--version"],{okNote:`${r} CLI available`,failPrefix:`${r} CLI not available`}),n=nS().find(i=>Zv(i)),o=Ns(r,["auth","status"],{okNote:"claude auth status: authenticated",failNote:"claude auth status: not authenticated"}),s=t.ok&&(o.ok||!!n);return{providerId:"claude",ready:s,authSource:"oauth_local",sessionFingerprint:n?Je(n):void 0,checkedAt:e,note:s?"Local Claude Code OAuth session bound on runner":[t.note,o.note,n?void 0:"no ~/.claude/.credentials.json"].filter(Boolean).join("; ")}}import{existsSync as oS}from"node:fs";import{homedir as sS}from"node:os";import iS from"node:path";var aS="agent";function lS(){let e=sS();return[iS.join(e,".config","cursor","auth.json")]}function Ms(e=new Date().toISOString()){let r=Ae(aS,["KYNVER_CURSOR_AGENT_BIN","CURSOR_AGENT_BIN"]);if(process.env.CURSOR_API_KEY?.trim())return{providerId:"cursor",ready:!0,authSource:"api_key_env",sessionFingerprint:qt("CURSOR_API_KEY"),checkedAt:e,note:"CURSOR_API_KEY present (env binding \u2014 cloud credits path, no token stored in Kynver)"};let t=qe(r,["-v"],{okNote:`${r} CLI available`,failPrefix:`${r} CLI not available`}),n=lS().find(s=>oS(s)),o=!!n&&t.ok;return{providerId:"cursor",ready:o,authSource:"oauth_local",sessionFingerprint:n?Je(n):void 0,checkedAt:e,note:o?"Local Cursor/Composer OAuth session bound on runner":[t.note,n?void 0:"no ~/.config/cursor/auth.json"].filter(Boolean).join("; ")}}import{existsSync as cS,readFileSync as uS}from"node:fs";import{homedir as dS}from"node:os";import xl from"node:path";var pS=["OPENAI_API_KEY","ANTHROPIC_API_KEY","KYNVER_API_KEY","KYNVER_BASE_URL"];function mS(){let e=process.env.HERMES_HOME?.trim(),r=e?xl.resolve(e):xl.join(dS(),".hermes");return xl.join(r,".env")}function fS(e){try{let r=uS(e,"utf8"),t=[];for(let n of pS)new RegExp(`^${n}=`,"m").test(r)&&t.push(n);return t}catch{return[]}}function El(e=new Date().toISOString()){let r=Ae("hermes",["KYNVER_HERMES_BIN","HERMES_BIN"]),t=qe(r,["--version"],{okNote:`${r} CLI available`,failPrefix:`${r} CLI not available`}),n=mS(),o=cS(n),s=o?fS(n):[],a=s.some(c=>c.endsWith("_API_KEY"))?"api_key_env":o?"oauth_local":"none",l=t.ok&&o;return{adapterId:"hermes",cliAvailable:t.ok,profileBound:o,authSource:a,sessionFingerprint:o?Je(n):void 0,checkedAt:e,note:l?`Hermes profile bound (${s.length?`keys: ${s.join(", ")}`:"no API keys detected"})`:[t.note,o?void 0:"no ~/.hermes/.env"].filter(Boolean).join("; ")}}function Pl(e={}){let r=e.nowIso?.()??new Date().toISOString(),t=Pr(r),n={codex:t,cursor:Ms(r),claude:Ds(r)},o=Object.values(n).filter(s=>s.ready).length;return{generatedAt:r,bindings:n,cloudApiCredits:{anthropicApiKey:!!process.env.ANTHROPIC_API_KEY?.trim(),openaiApiKey:!!process.env.OPENAI_API_KEY?.trim(),codexApiKey:!!process.env.CODEX_API_KEY?.trim()},hermes:El(r),hermesOpenAiCodex:Qn(r),codexAdapterPath:t.path,readyCount:o}}function gS(e,r){switch(e){case"codex":return Pr(r);case"cursor":return Ms(r);case"claude":return Ds(r)}}var hS=[/\bprivileged\b/i,/\bproduction\s+db\b/i,/\bdb:push\b/i,/\bmigration\b/i,/\bdeploy\b/i,/\bsecrets?\b/i,/\bstripe\b/i,/\[require-approval\]/i,/\[operator-only\]/i],kS=[/\borchestration\b/i,/\bplan[- ]?progress\b/i,/\bstatus\s+sync\b/i,/\bheartbeat\b/i,/\bboard[- ]?drain\b/i,/\bmaintenance\b/i,/\[orchestration:\s*low-risk\]/i];function Al(e,r){let t=e[r];return typeof t=="string"?t.trim():""}function nm(e){let r=Al(e,"executorRef").toLowerCase(),t=Al(e,"title").toLowerCase(),n=Al(e,"description").toLowerCase(),o=`${r}
 ${t}
-${n}`;return kb.some(s=>s.test(o))?"privileged":r.includes("provider:claude")||r.includes("deep_review")||r.includes("security")||r.includes("landing")||r.includes("review")||t.startsWith("land:")||r.includes("implementer")||r.includes("repair")||t.includes("implement")?"elevated":yb.some(s=>s.test(o))?"low":"elevated"}function Rb(e){let r=Jr(e.provider),t=e.escalatedFrom&&e.escalatedReason?`Escalated from ${e.escalatedFrom} (${e.escalatedReason}); using ${r.displayName} (${r.costTier} tier)`:`${r.displayName} selected for ${e.riskClass} orchestration (${r.costTier} tier, auth=${e.authSource})`;return{provider:e.provider,model:e.model,authSource:e.authSource,costTier:r.costTier,riskClass:e.riskClass,costRationale:t,routingRule:e.routingRule,escalatedFrom:e.escalatedFrom,escalatedReason:e.escalatedReason}}function vb(e){let r=e.inventory??il();return e.codexBinding?{...r,bindings:{...r.bindings,codex:e.codexBinding}}:r}function qr(e){let r=Rb({provider:e.providerId,model:e.model,authSource:e.binding.authSource,riskClass:e.riskClass,routingRule:e.routingRule,escalatedFrom:e.escalatedFrom,escalatedReason:e.escalatedReason});return{provider:e.providerId,model:e.model,rule:r.routingRule,audit:r}}function ll(e){let r=e.task??{},t=Rp(r),n=vb({inventory:e.inventory,codexBinding:e.codexBinding??(e.inventory?null:br())}),o=e.preferLowCost===!1?null:e.explicitProvider?.trim().toLowerCase(),s=e.explicitModel?.trim()||void 0,i=xe;if(o==="codex"||o==="provider:codex"){let c=n.bindings.codex;if(!c.ready){let u=fs({inventory:n,riskClass:t});return qr(u?{providerId:u.providerId,binding:u.binding,riskClass:t,routingRule:"orchestration:explicit_codex_unavailable_cost_aware",model:s,escalatedFrom:"codex",escalatedReason:c.note??"codex oauth not bound"}:{providerId:i,binding:n.bindings[i],riskClass:t,routingRule:"orchestration:codex_unavailable_escalate_cursor",model:s,escalatedFrom:"codex",escalatedReason:c.note??"codex oauth not bound"})}return qr({providerId:"codex",binding:c,riskClass:t,routingRule:"orchestration:explicit_codex",model:s})}if(o==="cursor"||o==="provider:cursor"){let c=n.bindings.cursor;if(c.ready)return qr({providerId:"cursor",binding:c,riskClass:t,routingRule:"orchestration:explicit_cursor",model:s})}if(o==="claude"||o==="provider:claude"){let c=n.bindings.claude;if(c.ready)return qr({providerId:"claude",binding:c,riskClass:t,routingRule:"orchestration:explicit_claude",model:s})}let a=fs({inventory:n,riskClass:t});if(a)return qr({providerId:a.providerId,binding:a.binding,riskClass:t,routingRule:`orchestration:cost_aware_${a.providerId}`,model:s,escalatedFrom:a.escalatedFrom,escalatedReason:a.escalatedReason});let l=n.bindings.codex;return qr({providerId:i,binding:n.bindings[i],riskClass:t,routingRule:l.ready?"orchestration:inventory_empty_default_cursor":"orchestration:codex_unavailable_default_cursor",model:s,...l.ready?{}:{escalatedFrom:"codex",escalatedReason:l.note??"codex oauth not bound"}})}Nr();w();import{closeSync as bp,openSync as Sp}from"node:fs";import{spawn as _b}from"node:child_process";var bb=/-(?:thinking(?:-(?:high|medium|low|minimal|max|none))?|high|medium|low|minimal)$/i;function Sb(e){return e.replace(bb,"")}var wb=/^(?:gpt-|gpt5|o1|o3|o4|gemini-|grok-|composer|deepseek|llama|mistral|qwen|command-)/i;function cl(e){return/^claude[-_]/i.test(e)||/^(?:opus|sonnet|haiku)\b/i.test(e)}var Cb=new Set(["cursor"]);function vp(e){let r=e.trim().toLowerCase();return Cb.has(r)?"auto":null}function ks(e,r){let t=(e??"").trim();if(!t)return{ok:!0,model:r,normalized:!1};let o=Sb(t).trim()||r;return wb.test(o)||!cl(o)&&o!==r?{ok:!1,model:t,normalized:!1,requested:t,note:`model "${t}" is not a Claude model \u2014 the "claude" provider drives the Claude CLI, which only accepts claude-* model ids (got "${o}"). Pick a Claude model or switch the worker provider.`}:o!==t?{ok:!0,model:o,normalized:!0,requested:t,note:`normalized model "${t}" \u2192 "${o}" (the Claude CLI rejects reasoning-effort suffixes)`}:{ok:!0,model:o,normalized:!1}}function zr(e,r){let t=(e??"").trim();return t?cl(t)?{ok:!1,model:t,normalized:!1,requested:t,note:`model "${t}" is a Claude model but the worker provider is "codex". Switch the provider or pick a Codex/OpenAI model.`}:{ok:!0,model:t,normalized:!1}:{ok:!0,model:r,normalized:!1}}function ys(e,r){let t=(e??"").trim();if(!t)return{ok:!0,model:r,normalized:!1};let n=vp(t);return n?{ok:!0,model:n,normalized:!0,requested:t,note:`normalized model "${t}" \u2192 "${n}" (Cursor provider alias \u2014 use "auto" or a composer id, not "cursor")`}:cl(t)?{ok:!1,model:t,normalized:!1,requested:t,note:`model "${t}" is a Claude model but the worker provider is "cursor". Switch the provider to "claude" or pick a Cursor model.`}:{ok:!0,model:t,normalized:!1}}var Wt="claude-sonnet-4-6",wp={name:"claude",defaultModel:Wt,preflightModel(e){return ks(e,Wt)},start(e){let r=ks(e.model,Wt);if(!r.ok)throw new Error(`claude provider model preflight failed: ${r.note}`);let t=r.model,n=Sp(e.stdoutPath,"a"),o=Sp(e.stderrPath,"a"),s=["ignore",n,o],i=_b("claude",["--model",t,"-p","--verbose","--permission-mode","bypassPermissions","--output-format","stream-json","--include-partial-messages",e.prompt],le({cwd:e.worktreePath,detached:!0,stdio:s,env:Ne(process.env)}));if(bp(n),bp(o),!i.pid)throw new Error("failed to spawn claude worker process (is the `claude` CLI on PATH?)");return i.unref(),{pid:i.pid,model:t}}};Nr();w();import{closeSync as Ep,existsSync as Pb,openSync as Pp}from"node:fs";import{spawn as Ap}from"node:child_process";Nr();w();import{closeSync as Cp,openSync as _p}from"node:fs";import{spawn as xb}from"node:child_process";var Rs=process.env.KYNVER_CODEX_DEFAULT_MODEL?.trim()||"gpt-5.4";function Eb(){return Ne({...process.env,CI:"1",NO_COLOR:"1",HERMES_ACCEPT_HOOKS:process.env.HERMES_ACCEPT_HOOKS??"1"})}function xp(e,r){let t=process.env.KYNVER_HERMES_CODEX_MAX_TURNS?.trim()||"40";return["chat","-q",r,"--provider","openai-codex","-m",e,"-Q","--accept-hooks","--max-turns",t,"--toolsets","hermes-cli"]}var ul={name:"hermes-codex",defaultModel:Rs,preflightModel(e){return zr(e,Rs)},start(e){let r=zr(e.model,Rs);if(!r.ok)throw new Error(`hermes-codex provider model preflight failed: ${r.note}`);let t=r.model,n=_p(e.stdoutPath,"a"),o=_p(e.stderrPath,"a"),s=["ignore",n,o],i=Pe("hermes",["KYNVER_HERMES_BIN","HERMES_BIN"]),a=xp(t,e.prompt),l=xb(i,a,le({cwd:e.worktreePath,detached:!0,shell:!1,stdio:s,env:Eb()}));if(Cp(n),Cp(o),!l.pid)throw new Error(`failed to spawn Hermes openai-codex worker (is \`${i}\` on PATH? run \`hermes auth status openai-codex\`)`);return l.unref(),{pid:l.pid,model:t}}};function Ab(){return process.env.KYNVER_CODEX_DEFAULT_MODEL?.trim()||"gpt-5.4"}var Sr=Ab();function Ib(){return process.env.KYNVER_CODEX_BIN?.trim()||process.env.CODEX_BIN?.trim()||"codex"}function Ob(){return Ne({...process.env,CI:"1",NO_COLOR:"1"})}function Ip(e,r){return["exec","--sandbox","read-only","--ask-for-approval","never","--model",e,r]}function Nb(e,r,t){if(!(process.platform!=="win32"&&Pb("/usr/bin/script")))return Ap(e,r,t);let o=[e,...r].map(s=>`'${s.replace(/'/g,"'\\''")}'`).join(" ");return Ap("script",["-qfc",o,"/dev/null"],t)}var dl={name:"codex",defaultModel:Sr,preflightModel(e){return zr(e,Sr)},start(e){if(br().path==="hermes_openai_codex")return ul.start(e);let t=zr(e.model,Sr);if(!t.ok)throw new Error(`codex provider model preflight failed: ${t.note}`);let n=t.model,o=Pp(e.stdoutPath,"a"),s=Pp(e.stderrPath,"a"),i=["ignore",o,s],a=Ib(),l=Ip(n,e.prompt),c=Nb(a,l,le({cwd:e.worktreePath,detached:!0,shell:!1,stdio:i,env:Ob()}));if(Ep(o),Ep(s),!c.pid)throw new Error(`failed to spawn Codex worker (is \`${a}\` on PATH? run \`codex login\` or set CODEX_API_KEY)`);return c.unref(),{pid:c.pid,model:n}}};var Tb="claude-sonnet-4-6",Za="composer-2.5";function vs(e,r){let t=e[r];return typeof t=="string"?t.trim():""}function Op(e){return e.toLowerCase()}function ml(e=v()){let r=e.defaultModel?.trim();if(r)return r;let t=process.env.KYNVER_DEFAULT_MODEL?.trim();return t||Tb}function pl(e){let r=(e??"").toLowerCase();return!r||r.includes("composer")||r.includes("cursor")||r.includes("codex")||r.startsWith("gpt-")||r.startsWith("gpt5")?"cursor":/^claude[-_]/i.test(r)||/^(?:opus|sonnet|haiku)\b/i.test(r)?"claude":"cursor"}function Db(e,r){let t=e.trim().toLowerCase(),n=r?.trim();return t==="cursor"?{model:Za,provider:"cursor",rule:n&&n!=="cursor"?"explicit:model_provider_alias_overrode_provider":"explicit:model_provider_alias",requestedModel:e}:t==="claude"||t==="anthropic"?{model:Wt,provider:"claude",rule:n&&n!=="claude"?"explicit:model_provider_alias_overrode_provider":"explicit:model_provider_alias",requestedModel:e}:null}function Np(e,r){return!!(e.includes("deep")&&e.includes("review")||e.includes("security")||e.includes("plan_author")||e.includes("plan-author")||r.includes("deep review")||r.includes("security review")||e.includes("plan")&&!e.includes("review")&&(e.includes("author")||e.includes("strategy")))}function Mb(e){let r=Op(vs(e,"executorRef")),t=vs(e,"title").toLowerCase(),n=vs(e,"priority")||"normal",o=Op(vs(e,"roleLane"));if(r.includes("provider:codex")||r.startsWith("codex:"))return{provider:"codex",model:Sr,rule:"lane:codex_orchestration"};if(r.includes("cursor")||r.includes("composer")||r.includes("copilot")||o==="implementer"||o==="repair_implementer")return{provider:"cursor",rule:"lane:implementation"};if(r.includes("codex"))return{provider:"codex",model:Sr,rule:"lane:codex_orchestration"};if(r.includes("landing")||t.startsWith("land:")||t.includes(" merge"))return{provider:"cursor",rule:"lane:landing"};if(r.includes("review")||/^review[\s:]/.test(t)||o.includes("review"))return Np(r,t)||o==="deep_reviewer"?{provider:"cursor",rule:"lane:deep_review"}:{provider:"cursor",rule:"lane:review"};if(Np(r,t)||o==="plan_author")return{provider:"cursor",rule:"lane:planning"};if(n==="critical")return{provider:"cursor",rule:"priority:critical"};if(n==="high")return{provider:"cursor",rule:"priority:high"};if(n==="low")return{provider:"cursor",rule:"priority:low"};let s=ml();return{model:s,provider:pl(s),rule:"default:global"}}function bs(e){let r;if(e.explicitModel?.trim()){let o=e.explicitModel.trim(),s=Db(o,e.explicitProvider);s?r=s:r={model:o,provider:e.explicitProvider?.trim()||pl(o),rule:"explicit:cli",requestedModel:o}}else if(e.task&&Object.keys(e.task).length>0){let o=Mb(e.task);r={...o,requestedModel:o.model}}else{let o=ml();r={model:o,provider:e.explicitProvider?.trim()||pl(o),rule:"default:global",requestedModel:o}}let t=Qa({routing:r,task:e.task,explicitProvider:e.explicitProvider,explicitProviderIsOperatorOverride:e.explicitProviderIsOperatorOverride});if(!e.task||Object.keys(e.task).length===0||t.rule==="explicit:model_provider_alias"||t.rule==="explicit:model_provider_alias_overrode_provider"||t.rule==="explicit:cli"||Ge(t.provider)&&(e.explicitProviderIsOperatorOverride||ps(e.task)))return t;let n=ll({task:e.task,explicitProvider:e.explicitProvider??t.provider,explicitModel:t.model});return{provider:n.provider,model:n.provider==="codex"?n.model??t.model??Sr:t.model,rule:n.rule,requestedModel:t.requestedModel,orchestrationAudit:n.audit}}function Tp(e,r,t){return e||r||t||ml()||Wt}function Dp(e,r){let t=Number(e);return!Number.isFinite(t)||t<=0?r:Math.floor(t)}function Mp(){return{maxTaskAttempts:Dp(process.env.KYNVER_MAX_TASK_ATTEMPTS,Math.floor(Yr("harness.maxTaskAttempts",4))),dispatchCooldownMs:Dp(process.env.KYNVER_DISPATCH_COOLDOWN_MS,Math.floor(Yr("harness.dispatchCooldownMs",5e3)))}}O();import Wb from"node:path";L();G();w();var fl="kynver-harness:",Up="@runner:";function gl(e){return e?.trim()?e.trim():null}function Ub(e){let r=gl(e);if(!r?.startsWith(fl))return null;let t=r.slice(fl.length),n=t.indexOf(Up);return n>=0?t.slice(0,n).trim()||null:t.trim()||null}function hl(e,r){let t=e.trim(),n=r.trim();return`${fl}${t}${Up}${n}`}function kl(e,r){let t=gl(r);return t?Ub(e)===t:!1}function Ss(e){let r=gl(e.workerLeaseOwner);return r&&kl(r,e.runId)?r:hl(e.runId,e.runnerId)}import Lp from"node:os";De();De();import Lb from"node:os";function Bb(e=process.env){return Te(e).boxKind}function $n(e,r){let t=(r??Lb.hostname()).trim().toLowerCase().replace(/\s+/g,"-")||"unknown-host";return`${e}:${t}`}function wr(e){return e?.trim()?e.trim():null}function qe(e={}){let r=e.env??process.env;return{runnerId:wr(r.KYNVER_RUNTIME_ID)??wr(r.OPENCLAW_RUNTIME_ID)??wr(r.HOSTNAME)??Lp.hostname(),hostname:wr(r.HOSTNAME)??Lp.hostname(),profile:wr(r.KYNVER_RUNNER_PROFILE)??wr(r.OPENCLAW_RUNNER_PROFILE),harnessRepo:wr(r.KYNVER_HARNESS_REPO)??wr(r.KYNVER_DEFAULT_REPO),runId:e.runId??null,instructionBundleVersion:vr()}}function Bp(e,r){return _(Wb.join(x(e),"workers",R(r),"worker.json"),void 0)}async function ws(e,r){let t=U(e),n=String(r.agentOsId||"");if(!n)return{renewed:[],failed:[],skipped:[]};let o=B(r.baseUrl?String(r.baseUrl):void 0),s=await K(r.secret?String(r.secret):void 0,n,{baseUrl:o}),i=Number(r.leaseMs)>0?Math.floor(Number(r.leaseMs)):Cs,a=qe({runId:e}).runnerId,l=[],c=[],u=[];for(let d of Object.keys(t.workers||{})){let f=Bp(e,d);if(!f?.taskId||!f.agentOsId){u.push(d);continue}if(!$(f.pid)){u.push(d);continue}if(T(f).status==="done"){u.push(d);continue}let p=Ss({runId:e,workerLeaseOwner:f.leaseOwner??null,runnerId:a}),g=`${o}/api/agent-os/by-id/${encodeURIComponent(n)}/tasks/${encodeURIComponent(f.taskId)}/renew-lease`,k=await q(g,s,{leaseOwner:p,leaseDurationMs:i,...f.leaseToken?{leaseToken:f.leaseToken}:{}},{agentOsId:n,baseUrl:o});if(k.ok){l.push(d);continue}let h=k.response&&typeof k.response=="object"&&"reason"in k.response?String(k.response.reason??`http ${k.status}`):`http ${k.status}`;c.push({worker:d,reason:h})}return{renewed:l,failed:c,skipped:u}}function Wp(e,r){let t=U(e);for(let n of Object.keys(t.workers||{})){let o=Bp(e,n);if(!(!o||o.taskId!==r||!$(o.pid)||T(o).status==="done"))return!0}return!1}Ce();L();L();import{existsSync as ow,mkdirSync as sw}from"node:fs";import Ft from"node:path";var Hb=/<!--\s*harness-contract:\s*(\{[\s\S]*?\})\s*-->/i,Fb="next-action-fix:";function _s(e){if(typeof e!="string")return null;let r=e.trim();return r.length?r:null}function Hp(e){let r=e.trim().match(/github\.com\/([^/]+\/[^/]+)\/(?:pull|pulls)\/(\d+)/i);return r?`https://github.com/${r[1]}/pull/${r[2]}`:_s(e)}function $b(e){let r=(e.title??"").trim().toLowerCase();if(r.startsWith("fix:")||r.startsWith("repair:"))return!0;let t=(e.executorRef??"").toLowerCase();return!!(t.startsWith(Fb)||t.includes("repair")||t.includes("unblock"))}function Kb(e){let r={repairEnforceOriginalPr:!1,targetPrUrl:null,targetPrBranch:null};if(!e)return r;let t=e.match(Hb);if(!t?.[1])return r;try{let n=JSON.parse(t[1]),o=_s(String(n.targetPrUrl??n.target_pr_url??"")),s=_s(String(n.targetPrBranch??n.target_pr_branch??""));return{repairEnforceOriginalPr:n.repairEnforceOriginalPr===!0||n.repair_enforce_original_pr===!0||!!o,targetPrUrl:o?Hp(o):null,targetPrBranch:s}}catch{return r}}function Fp(e){if(!$b(e))return null;let r=Kb(e.description),t=e.prUrl?Hp(e.prUrl):null,n=r.targetPrUrl??t;return n?{targetPrUrl:n,targetPrBranch:r.targetPrBranch??_s(e.branch)}:null}function $p(e){return["Repair target PR policy:","- Work on the existing target PR branch \u2014 do not open a duplicate repair PR by default.",`- Canonical target PR: ${e.targetPrUrl}`,...e.targetPrBranch?[`- Canonical target branch: \`${e.targetPrBranch}\` (checkout is already on this branch).`]:[],`- Reconcile ${e.targetPrUrl} in structured finalResult.targetPrReconciliation.`,"- Only supersede the original when the branch is inaccessible: set supersedesOriginalTargetPr: true with reason and close/comment on the original PR."]}function yl(e){let r=e.ownedPaths.length?`Owned paths: ${e.ownedPaths.join(", ")}. Do not edit outside these paths without stopping and reporting why.`:"Owned paths: unrestricted for this worker, but keep edits tightly scoped.",t=!!e.model?.toLowerCase().includes("haiku"),n=t?"compact":"full",o=t?e.planId?`Active planId: ${e.planId}`:"No planId on this worker.":e.planId?`Active planId: ${e.planId}${e.taskId?` \xB7 taskId: ${e.taskId}`:""}`:"No planId on this worker \u2014 still emit progress when you touch plan-scoped work.",s=[...Lt(`worker.prompt.progress.${n}`).split(`
-`),o],i=Lt(`worker.prompt.merge_gate.${n}`).split(`
-`),a=Lt(`worker.prompt.plan_artifacts.${n}`).split(`
-`);return["You are running under the Kynver AgentOS runtime.","Immediately state your plan before editing.",r,`Worktree: ${e.worktreePath}`,`Progress heartbeat file: ${e.heartbeatPath}`,"After each major step, append one JSON line to the heartbeat file with fields: ts, phase, summary, changedFiles, blocker.","Final response must include files changed, verification commands, and unresolved risks.",...Lt("worker.prompt.core_rules").split(`
-`),"",...s,"",...i,"",...a,"",...e.contextEnvelopeMarkdown?.trim()?[e.contextEnvelopeMarkdown.trim(),""]:[],...e.personaMarkdown?.trim()?[e.personaMarkdown.trim(),""]:[],...e.instructionPolicyMarkdown?.trim()?["Operating rules (from AgentOS memory policy):",e.instructionPolicyMarkdown.trim(),""]:[],...e.memoryQualityMarkdown?.trim()?[e.memoryQualityMarkdown.trim(),""]:[],...e.repairTargetPrUrl?[...$p({targetPrUrl:e.repairTargetPrUrl,targetPrBranch:e.repairTargetBranch??null}),""]:[],"Task:",e.task].join(`
-`)}w();O();w();Nr();import{closeSync as vl,existsSync as jp,mkdirSync as Jb,openSync as bl,statSync as qb,unlinkSync as Kp}from"node:fs";import{spawn as zb}from"node:child_process";import Xb from"node:os";import ze from"node:path";import{existsSync as Kn,readdirSync as jb}from"node:fs";import Xr from"node:path";var Vb=/^\d{4}\.\d{1,2}\.\d{1,2}-[a-f0-9]+$/i;function Gb(e){let t=e.split("-")[0].split(".");if(t.length!==3)return null;let[n,o,s]=t;return!n||!o||!s?null:+`${n}${o.padStart(2,"0")}${s.padStart(2,"0")}`}function Yb(e){let r=Xr.join(e,"versions");if(!Kn(r))return null;let t=null,n=-1;for(let o of jb(r,{withFileTypes:!0})){if(!o.isDirectory()||!Vb.test(o.name))continue;let s=Gb(o.name);s==null||s<=n||(n=s,t=Xr.join(r,o.name))}return t}function xs(e){let r=e?.trim()||Xr.join(process.env.LOCALAPPDATA||"","cursor-agent"),t=Xr.join(r,"node.exe"),n=Xr.join(r,"index.js");if(Kn(t)&&Kn(n))return{nodeExe:t,indexJs:n,versionDir:r};let o=Yb(r);if(!o)return null;let s=Xr.join(o,"node.exe"),i=Xr.join(o,"index.js");return!Kn(s)||!Kn(i)?null:{nodeExe:s,indexJs:i,versionDir:o}}var Rl="composer-2.5",Qb=15e3,Zb=6e4,eS=3e4;function rS(e,r,t){return{executable:e,prefixArgs:[r],shell:!1,detached:!0,bundledVersionDir:t}}function tS(e){if(process.platform==="win32"){let r=/\.(cmd|bat)$/i.test(e),t=/node\.exe$/i.test(e)&&jp(ze.join(ze.dirname(e),"index.js"));if(r||t||e==="agent"){let o=r?xs(ze.dirname(e)):t?{nodeExe:e,indexJs:ze.join(ze.dirname(e),"index.js"),versionDir:ze.dirname(e)}:xs();if(o)return rS(o.nodeExe,o.indexJs,o.versionDir);throw new Error("Cursor Agent on Windows has no headless bundled node.exe under %LOCALAPPDATA%\\cursor-agent\\versions\\\u2026. Run `agent login` / update Cursor Agent CLI, use `--provider claude`, or set KYNVER_CURSOR_AGENT_ROOT to the cursor-agent folder.")}}return{executable:e,prefixArgs:[],shell:!1,detached:!0}}function nS(){let e=process.env.KYNVER_CURSOR_AGENT_BIN?.trim()||process.env.CURSOR_AGENT_BIN?.trim();if(e)return e;if(process.platform==="win32"){let r=xs(process.env.KYNVER_CURSOR_AGENT_ROOT?.trim()||void 0);if(r)return r.nodeExe;let t=ze.join(process.env.LOCALAPPDATA||"","cursor-agent","agent.cmd");if(jp(t))return t}return"agent"}function oS(e,r){return Ne({...process.env,CI:"1",NO_COLOR:"1",...r.bundledVersionDir?{CURSOR_INVOKED_AS:ze.basename(e)||"agent.cmd"}:{}})}function Vp(e){e<=0||Atomics.wait(new Int32Array(new SharedArrayBuffer(4)),0,0,e)}function Sl(e,r){let t=process.env[e];if(!t)return r;let n=Number(t);return Number.isFinite(n)&&n>=0?Math.floor(n):r}function sS(){let e=process.env.KYNVER_CURSOR_START_LOCK_DIR?.trim()||ze.join(Xb.homedir(),".kynver","locks");return Jb(e,{recursive:!0}),ze.join(e,"cursor-agent-start.lock")}function iS(){if(process.env.KYNVER_CURSOR_START_LOCK==="0")return()=>{};let e=sS(),r=Sl("KYNVER_CURSOR_START_LOCK_TIMEOUT_MS",Zb),t=Sl("KYNVER_CURSOR_START_LOCK_STALE_MS",eS),n=Date.now();for(;;)try{let o=bl(e,"wx");return vl(o),()=>{try{Kp(e)}catch{}}}catch(o){if(o.code!=="EEXIST")throw o;try{if(Date.now()-qb(e).mtimeMs>t){Kp(e);continue}}catch{continue}if(Date.now()-n>r)throw new Error(`timed out waiting for Cursor agent start lock: ${e}`);Vp(250)}}var Gp={name:"cursor",defaultModel:Rl,preflightModel(e){return ys(e,Rl)},start(e){let r=ys(e.model,Rl);if(!r.ok)throw new Error(`cursor provider model preflight failed: ${r.note}`);let t=r.model,n=bl(e.stdoutPath,"a"),o=bl(e.stderrPath,"a"),s=["ignore",n,o],i=nS(),a=tS(i),l=iS(),c;try{c=zb(a.executable,[...a.prefixArgs,"-p","--force","--trust","--workspace",e.worktreePath,"--output-format","stream-json","--stream-partial-output","--model",t,e.prompt],le({cwd:e.worktreePath,detached:a.detached,shell:a.shell,stdio:s,env:oS(i,a)})),Vp(Sl("KYNVER_CURSOR_START_LOCK_HOLD_MS",Qb))}finally{l(),vl(n),vl(o)}if(!c.pid)throw new Error(`failed to spawn Cursor agent worker (is \`${i}\` on PATH? run \`agent login\` or set CURSOR_API_KEY)`);return c.unref(),{pid:c.pid,model:t}}};var Es={claude:wp,codex:dl,cursor:Gp},Yp=null;function Jp(e){if(Yp)return Yp;let r=e?.trim();if(r){let o=Es[r];if(!o)throw new Error(`unknown worker provider "${r}" \u2014 supported: ${Object.keys(Es).join(", ")}`);return o}let t=Hn(v().workerProvider),n=Es[t];if(!n)throw new Error(`unknown worker provider "${t}" \u2014 supported: ${Object.keys(Es).join(", ")}`);return n}w();import{spawn as JS}from"node:child_process";import{existsSync as qS,openSync as zS,closeSync as Im}from"node:fs";import Om from"node:path";import{fileURLToPath as XS}from"node:url";L();function Ps(e){return!!e.completionReportedAt?.trim()}function wl(e,r,t){e.completionReportedAt=t.completionReportedAt,e.completionOutcome=t.completionOutcome,t.completionResponse!==void 0&&(e.completionResponse=t.completionResponse),V(r,e)}function aS(e){if(typeof e!="string")return null;let r=e.trim();return r.length?r:null}function Cl(e){return!!(aS(e.completionBlocker)||e.completionOutcome==="rejected")}function Qr(e){return Ps(e)&&!Cl(e)}L();G();O();import qn from"node:path";function _l(e){return e&&typeof e=="object"&&!Array.isArray(e)?e:null}function jn(e){if(typeof e!="string")return null;let r=e.trim();return r.length?r:null}var lS=new Set(["review_scheduled","review_already_scheduled","skipped_terminal_task","closed","dispatched","dispatch_already_done"]);function qp(e){let r=_l(e);if(!r)return{routeOutcome:null,taskAdvanced:!1,detail:null};let t=jn(r.outcome),n=jn(r.detail)??jn(r.error),o=_l(r.task),s=_l(r.closedTask),i=o?jn(o.status):null,a=s?jn(s.status):null,l=t!==null&&lS.has(t)||i==="awaiting_review"||i==="done"||a==="done";return{routeOutcome:t,taskAdvanced:l,detail:n}}function zp(e){return e.taskAdvanced}L();Pn();var cS="expert-lane-pr-review:",uS="plan-review-task",dS="scheduledjob:";function Xp(e){if(!e)return null;let r=e.trim().toLowerCase();return r.length?r:null}function Qp(e){let r=(e.executorRef??"").toLowerCase();if(r.startsWith(cS)||r===uS||r.startsWith("daemon-review:"))return!0;if(r.startsWith(dS)&&e.parentTaskId){let n=Xp(e.personaSlug);if(n==="lorentz"||n==="dalton")return!0}let t=(e.title??"").toLowerCase();if(t.includes("expert pr review"))return!0;if(e.parentTaskId&&(t.startsWith("review:")||t.includes("review required")||t.includes("runtime review"))){let n=Xp(e.personaSlug);if(n==="lorentz"||n==="dalton")return!0}return!1}var Zp=/^(lane:)?(review|deep_review|planning|landing)(:|$)/i,pS=new Set(qa()),mS=/no commits between/i;function em(e){return!!(e&&mS.test(e))}function me(e){if(typeof e!="string")return null;let r=e.trim();return r.length?r:null}function rm(e){return!e?.checked||e.headIsAncestorOfBase!==!1?null:me(e.head)}function xl(e){if(e==null)return null;let t=(typeof e=="string"?e:typeof e=="object"&&e!==null&&"summary"in e?String(e.summary??""):JSON.stringify(e)).match(/https?:\/\/[^\s)>"]+\/(?:pull|pulls|merge_requests|pull-requests)\/\d+/i);return t?me(t[0]):null}function fS(e,r,t){let n=r.trim();if(!n)return null;let o=t.git(e,["rev-list","--count",`${n}..HEAD`]);if(o.status!==0)return null;let s=Number.parseInt(o.stdout.trim(),10);return Number.isFinite(s)?s:null}function gS(e,r){if(r.changedFiles.length>0)return!1;let t=me(e.personaSlug)?.toLowerCase();if(t&&pS.has(t))return!0;let n=me(e.routingRule)??"";return!!(n&&Zp.test(n))}function hS(e,r){if(e.changedFiles.length>0)return!0;let t=me(r?.baseRef);if(t&&r?.exec&&r.worktreePath){let n=fS(r.worktreePath,t,r.exec);if(n===0)return!1;if(n!==null&&n>0)return!0}return!!(me(e.headCommit)||rm(e.gitAncestry))}function El(e){if(!e.dispatched)return{required:!1,reason:"not_dispatched"};if(Qp({title:e.taskTitle??void 0,personaSlug:e.personaSlug,parentTaskId:e.parentTaskId,executorRef:e.executorRef}))return{required:!1,reason:"expert_review_task"};let r=me(e.routingRule)??"";if(r&&Zp.test(r))return{required:!1,reason:"review_lane"};let t=e.worker??{personaSlug:e.personaSlug,routingRule:e.routingRule};if(gS(t,e.snapshot))return{required:!1,reason:"review_artifact"};if(me(e.patchPath)||me(e.artifactBundlePath))return{required:!1,reason:"patch_or_bundle"};if(me(e.repairTargetPrUrl))return{required:!1,reason:"repair_target_pr"};if(me(e.prUrl)??me(e.taskPrUrl)??me(e.snapshot.prUrl))return{required:!1,reason:"already_has_pr"};let s=e.exec&&e.baseRef?{baseRef:e.baseRef,exec:e.exec,worktreePath:e.snapshot.worktreePath}:void 0;return hS(e.snapshot,s)?{required:!0,snapshot:e.snapshot}:{required:!1,reason:"no_work_product"}}function tm(e,r){return{changedFiles:e.changedFiles,branch:e.branch,worktreePath:e.worktreePath,gitAncestry:e.gitAncestry,finalResult:e.finalResult,headCommit:me(r?.headCommit)??rm(e.gitAncestry),prUrl:me(r?.prUrl)??null}}import{spawnSync as kS}from"node:child_process";function om(e){let r=e.trim();if(!r)return null;let t=r.match(/^git@github\.com:([^/]+\/[^/\s]+?)(?:\.git)?$/i);if(t)return nm(t[1]);let n=r.match(/^ssh:\/\/git@github\.com\/([^/]+\/[^/\s]+?)(?:\.git)?$/i);if(n)return nm(n[1]);try{let o=new URL(r.includes("://")?r:`https://${r}`);if(o.hostname.toLowerCase()!=="github.com")return null;let s=o.pathname.replace(/^\/+|\/+$/g,"").split("/");if(s.length<2)return null;let[i,a]=s;return!i||!a?null:`${i}/${a.replace(/\.git$/i,"")}`}catch{return null}}function nm(e){let r=e.split("/").filter(Boolean);if(r.length<2)return null;let t=r[0],n=r[1].replace(/\.git$/i,"");return t&&n?`${t}/${n}`:null}Ce();function yS(e,r,t){try{let n=kS(e,t,{cwd:r,encoding:"utf8"});return{status:n.status,stdout:(n.stdout||"").trim(),stderr:(n.stderr||"").trim(),error:n.error?n.error.message:null}}catch(n){return{status:null,stdout:"",stderr:"",error:n.message}}}var Is={git:(e,r)=>Q(e,r),gh:(e,r)=>yS("gh",e,r)};function RS(e){return e.split(`
-`).map(r=>r.trim()).find(Boolean)??""}function sm(e,r){let t=r.git(e,["remote","get-url","origin"]);return t.status!==0?null:om(t.stdout)}function Vn(e,r){let t=r.git(e,["rev-parse","HEAD"]);return t.status!==0?null:t.stdout.trim()||null}function As(e,r,t,n){let o=n.gh(e,["pr","list","--repo",r,"--head",t,"--state","open","--json","url","--limit","1"]);if(o.status!==0)return null;try{return JSON.parse(o.stdout)[0]?.url?.trim()||null}catch{return null}}function Os(e){let{worktreePath:r,branch:t,commitMessage:n,hasDirtyFiles:o,exec:s}=e;if(o){let l=s.git(r,["add","-A"]);if(l.status!==0)return{ok:!1,committed:!1,pushed:!1,detail:l.stderr||l.stdout||l.error||"git add failed"};let c=s.git(r,["commit","-m",n]);if(c.status!==0)return{ok:!1,committed:!1,pushed:!1,detail:c.stderr||c.stdout||c.error||"git commit failed"}}let i=s.git(r,["push","-u","origin",t]);if(i.status!==0)return{ok:!1,committed:o,pushed:!1,detail:i.stderr||i.stdout||i.error||"git push failed"};let a=Vn(r,s)??void 0;return{ok:!0,committed:o,pushed:!0,headCommit:a}}function im(e){let r=As(e.worktreePath,e.repo,e.branch,e.exec);if(r)return{ok:!0,prUrl:r,created:!1};let t=e.exec.gh(e.worktreePath,["pr","create","--repo",e.repo,"--base",e.base,"--head",e.branch,"--title",e.title,"--body",e.body,"--draft"]);if(t.status!==0)return{ok:!1,detail:t.stderr||t.stdout||t.error||"gh pr create failed"};let n=vS(t.stdout)??As(e.worktreePath,e.repo,e.branch,e.exec);return n?{ok:!0,prUrl:n,created:!0}:{ok:!1,detail:"gh pr create succeeded but no PR URL was parsed"}}function vS(e){let t=RS(e).match(/https?:\/\/[^\s]+\/pull\/\d+/i);return t?t[0]:null}function bS(e){return e.gh(process.cwd(),["--version"]).status===0}function SS(e,r){return`AgentOS harness: ${e} (${r})`}function wS(e,r,t){return["Automated PR-ready handoff from the Kynver harness runtime.","",e?`AgentOS task: \`${e}\``:"",`Harness worker: \`${r}\` \xB7 run \`${t}\``,"","Opened by orchestrator completion enforcement so production review receives a reviewable artifact."].filter(Boolean).join(`
-`)}function Pl(e){if(e.snapshot.changedFiles.length===0)return{ok:!0,prUrl:e.prUrl,headCommit:e.snapshot.headCommit??Vn(e.snapshot.worktreePath,e.exec)??void 0};let r=Os({worktreePath:e.snapshot.worktreePath,branch:e.snapshot.branch,commitMessage:e.commitMessage,hasDirtyFiles:!0,exec:e.exec});return r.ok?{ok:!0,prUrl:e.prUrl,headCommit:r.headCommit??e.snapshot.headCommit??void 0,committed:r.committed,pushed:r.pushed}:{ok:!1,reason:`PR-ready handoff blocked: ${r.detail??"git commit/push failed"}`,nextAction:"Commit and push the dirty worker changes to the existing PR branch, then rerun `kynver worker complete`."}}function Ns(e,r=Is){let t=e.prUrlHint??xl(e.status.finalResult)??null,n=tm(e.status,{prUrl:t,headCommit:null}),o=e.run.baseCommit?.trim()||e.run.base?.trim()||"origin/main";if(!El({dispatched:e.worker.dispatched,routingRule:e.worker.routingRule,personaSlug:e.worker.personaSlug,prUrl:t,taskTitle:e.worker.taskTitle,executorRef:e.worker.executorRef,parentTaskId:e.worker.parentTaskId,taskPrUrl:e.worker.taskPrUrl,repairTargetPrUrl:e.worker.repairTargetPrUrl,baseRef:o,exec:r,worker:e.worker,snapshot:n}).required)return t?Pl({snapshot:n,prUrl:t,commitMessage:`chore(harness): update PR handoff for ${e.worker.name}`,exec:r}):{ok:!0};if(t)return Pl({snapshot:n,prUrl:t,commitMessage:`chore(harness): update PR handoff for ${e.worker.name}`,exec:r});if(!bS(r)){let k=n.changedFiles.length;return{ok:!1,reason:`PR-ready handoff blocked: ${k?`${k} uncommitted change(s) with no PR URL`:"committed branch with no PR URL"}`,nextAction:"Install and authenticate GitHub CLI (`gh auth login`), then commit, push, and run `gh pr create` (or rerun `kynver worker complete` after the PR exists)."}}let i=sm(n.worktreePath,r);if(!i)return{ok:!1,reason:"PR-ready handoff blocked: could not resolve github.com origin for the worktree",nextAction:"Ensure `origin` points at GitHub, push the branch, open a PR, and rerun `kynver worker complete`."};let a=e.worker.repairTargetPrUrl?.trim();if(a){let k=!1,h=!1,S=n.headCommit??Vn(n.worktreePath,r)??void 0;if(n.changedFiles.length>0){let A=Os({worktreePath:n.worktreePath,branch:n.branch,commitMessage:`fix(harness): repair target PR ${a}`,hasDirtyFiles:!0,exec:r});if(!A.ok)return{ok:!1,reason:`PR-ready handoff blocked: ${A.detail??"git commit/push failed"}`,nextAction:"Commit and push to the target PR branch, then rerun `kynver worker complete`."};k=A.committed,h=A.pushed,S=A.headCommit??S}else{let A=r.git(n.worktreePath,["push","-u","origin",n.branch]);if(A.status!==0&&!/already up to date/i.test(A.stderr||A.stdout))return{ok:!1,reason:`PR-ready handoff blocked: ${A.stderr||A.stdout||"git push failed"}`,nextAction:"Push the target branch to origin, then rerun `kynver worker complete`."};h=A.status===0}return{ok:!0,prUrl:a,headCommit:S,committed:k,pushed:h}}let l=As(n.worktreePath,i,n.branch,r);if(l)return Pl({snapshot:n,prUrl:l,commitMessage:`chore(harness): update PR handoff for ${e.worker.name}`,exec:r});let c=n.changedFiles.length>0,u=!1,d=!1,f=n.headCommit??void 0,m=Os({worktreePath:n.worktreePath,branch:n.branch,commitMessage:`chore(harness): PR-ready handoff for ${e.worker.name}`,hasDirtyFiles:c,exec:r});if(c&&!m.ok)return{ok:!1,reason:`PR-ready handoff blocked: ${m.detail??"git commit/push failed"}`,nextAction:"Commit and push the branch, run `gh pr create`, then rerun `kynver worker complete`."};if(c){if(u=m.committed,d=m.pushed,!m.ok)return{ok:!1,reason:`PR-ready handoff blocked: ${m.detail??"git push failed"}`,nextAction:"Fix git auth or merge conflicts, push the branch, run `gh pr create`, then rerun `kynver worker complete`."}}else{let k=r.git(n.worktreePath,["push","-u","origin",n.branch]);if(k.status!==0&&!/already up to date/i.test(k.stderr||k.stdout))return{ok:!1,reason:`PR-ready handoff blocked: ${k.stderr||k.stdout||k.error||"git push failed"}`,nextAction:"Push the branch to origin, run `gh pr create`, then rerun `kynver worker complete`."};d=k.status===0}f=m.headCommit??f??Vn(n.worktreePath,r)??void 0;let p=e.run.base?.trim()||"main",g=im({worktreePath:n.worktreePath,repo:i,branch:n.branch,base:p.replace(/^origin\//,""),title:SS(e.worker.name,e.worker.runId),body:wS(e.worker.taskId,e.worker.name,e.worker.runId),exec:r});if(!g.ok||!g.prUrl){if(em(g.detail))return{ok:!0,headCommit:f??void 0,committed:u,pushed:d};let k=n.changedFiles.length;return{ok:!1,reason:`PR-ready handoff blocked: ${k?`${k} uncommitted change(s) and no PR URL after handoff attempt`:"no PR URL after handoff attempt"}${g.detail?` (${g.detail})`:""}`,nextAction:"Run `gh pr create` on the worker branch (or fix `gh` auth), attach the PR URL to the task, then rerun `kynver worker complete`."}}return{ok:!0,prUrl:g.prUrl,headCommit:f??void 0,committed:u,pushed:d,created:g.created}}G();En();function Ts(e){return e.filter(r=>{let t=r.trim(),n=t.startsWith("??")?t.slice(2).trim():t.length>3?t.slice(3).trim():t;return n!=="node_modules"&&!n.startsWith("node_modules/")})}function am(e){let r=e.trim();return r.startsWith("??")?r.slice(2).trim():r.length>3&&/^[ MADRCU?!]{2} /.test(r.slice(0,3))?r.slice(3).trim():r}function lm(e){return Array.isArray(e)?e.map(r=>typeof r=="string"?r.trim():"").filter(Boolean):[]}function cm(e){return e&&typeof e=="object"&&!Array.isArray(e)?e:null}function dm(e){let r=cm(e);if(!r)return[];let t=cm(r.worktreeHandoff),n=lm(t?.disposableArtifactsRemoved);return n.length?n:lm(r.disposableArtifactsRemoved)}function um(e){return e.replace(/\\/g,"/").replace(/^\.\//,"").replace(/\/+$/,"")}function pm(e,r){let t=Ts(e);if(t.length===0)return!0;if(r.length===0)return!1;let n=new Set(r.map(o=>um(o)));return t.every(o=>{let s=um(am(o));return n.has(s)})}function Ds(e){if(typeof e!="string")return null;let r=e.trim();return r.length?r:null}function mm(e){return Array.isArray(e)?e.map(r=>typeof r=="string"?r.trim():"").filter(Boolean):[]}function CS(e){return e==null?!1:typeof e=="string"?e.trim().length>0:typeof e=="boolean"?e:Array.isArray(e)?e.length>0:typeof e=="object"?Object.keys(e).length>0:!0}function _S(e){let r=mm(e.disposableArtifactsRemoved),t=dm(e.finalResult);return[...new Set([...r,...t])]}function fm(e){let r=mm(e.changedFiles),t=Ts(r),n=_S(e),o=t.length===0||pm(r,n);return Ds(e.prUrl)?o?{allowed:!0,state:"pr_handoff",materialDirtyCount:0}:{allowed:!1,state:"dirty_worktree",materialDirtyCount:t.length,detail:`Worktree has ${t.length} uncommitted change(s) with a PR attached; commit or discard before completing`}:Ds(e.headCommit)?o?{allowed:!0,state:"commit_handoff",materialDirtyCount:0}:{allowed:!1,state:"dirty_worktree",materialDirtyCount:t.length,detail:`Worktree has ${t.length} uncommitted change(s) on top of a commit; commit or discard before completing`}:Ds(e.artifactBundlePath)||Ds(e.patchPath)?o?{allowed:!0,state:"commit_handoff",materialDirtyCount:0}:{allowed:!1,state:"dirty_worktree",materialDirtyCount:t.length,detail:`Worktree has ${t.length} uncommitted change(s) with a patch/bundle handoff; clean the tree before completing`}:o?{allowed:!0,state:"clean",materialDirtyCount:0}:CS(e.finalResult)?{allowed:!1,state:"dirty_worktree_no_pr",materialDirtyCount:t.length,detail:`Worktree has ${t.length} uncommitted change(s) with no commit or PR; commit, open a PR, discard, or remove one-off files via \`kynver worker discard-disposable\` before completing`}:{allowed:!1,state:"dirty_worktree",materialDirtyCount:t.length,detail:`Worktree has ${t.length} uncommitted change(s) with no final result`}}L();G();w();import xS from"node:path";var ES=new Set(["awaiting_review","blocked","done","needs_input","waiting","scheduled","ready","cancelled","failed"]);function gm(e){return!!(typeof e.completionReportedAt=="string"&&e.completionReportedAt.trim())}function PS(e){if(typeof e=="string"){let r=e.trim();return r.length?r:null}if(e&&typeof e=="object"&&!Array.isArray(e)){let r=e,t=r.summary??r.finalSummary??r.message;if(typeof t=="string"&&t.trim())return t.trim();try{return JSON.stringify(e)}catch{return null}}return null}function AS(e){let r=e.finalResult??null,t=typeof e.lastHeartbeatSummary=="string"?e.lastHeartbeatSummary:PS(r);return{finalResult:r??t??"completed",summary:t}}function Al(e,r,t){if(gm(e)&&e.status==="done"&&e.completionSnapshot!=null)return;let n=new Date().toISOString(),o=AS(r),s=t?.source?.trim();e.completionReportedAt=n,e.completionSnapshot=o,e.status="done",s&&(e.completionAckSource=s),V(e.runId,e)}function IS(e){let r=new Map,n=e.response?.tick?.filteredItems;if(!Array.isArray(n))return r;for(let o of n){if(o.kind!=="task"||typeof o.id!="string")continue;let s=typeof o.taskStatus=="string"?o.taskStatus.trim():"";s&&r.set(o.id,s)}return r}function hm(e,r){let t=IS(r);if(t.size===0)return[];let n=U(e),o=[];for(let s of Object.keys(n.workers||{})){let i=_(xS.join(x(n.id),"workers",R(s),"worker.json"),void 0);if(!i?.taskId||gm(i))continue;let a=t.get(i.taskId);if(!a||a==="running"||!ES.has(a))continue;let l=T(i,{base:n.base,baseCommit:n.baseCommit});Al(i,l,{source:`board-task-${a}`}),o.push({worker:s,taskId:i.taskId,taskStatus:a})}return o}w();w();import Ms from"node:path";var OS=/^[a-z0-9][a-z0-9._-]{0,127}$/i,NS=/^[a-z0-9][a-z0-9._-]{0,63}$/i,Il=new Set(["undefined","null"]),km="usage: kynver worker <action> --run RUN_ID --name WORKER_NAME";function Gn(e){let r=e.trim();if(!OS.test(r))throw new Error(`invalid run id: ${e}`);return r}function ym(e){let r=e.trim();if(!NS.test(r))throw new Error(`invalid worker name: ${e}`);return r}function Ol(e){return typeof e=="string"?e.trim():""}function Be(e){let r=Ol(e.run),t=Ol(e.name);return(!r||Il.has(r))&&fr(`missing --run RUN_ID (${km})`),(!t||Il.has(t))&&fr(`missing --name WORKER_NAME (${km})`),{runId:Gn(r),workerName:ym(t)}}function Us(e){let r=Ol(e.run);return(!r||Il.has(r))&&fr("missing --run RUN_ID (usage: kynver run status --run RUN_ID)"),Gn(r)}function Nl(e){let r=Ms.resolve(e);if(r.includes(".."))throw new Error("repo path must not contain .. segments");return r}function TS(e,r){return r.map(t=>{let n=Ms.resolve(e,t),o=Ms.relative(e,n);if(o.startsWith("..")||Ms.isAbsolute(o))throw new Error(`owned path escapes repo: ${t}`);return n})}function DS(e){return!Number.isFinite(e)||e<=0||e>500?40:Math.floor(e)}async function Rm(e,r,t){let n=await fetch(e,{method:"POST",headers:Le(r),body:JSON.stringify(t)}),o=null;try{o=await n.json()}catch{o=null}return{ok:n.ok,status:n.status,parsed:o}}function MS(e){if(e&&typeof e=="object"){let r=e.error;if(typeof r=="string"&&r.trim())return r.trim()}}function vm(e){return e&&typeof e=="object"&&!Array.isArray(e)?e:null}function Yn(e){if(typeof e!="string")return null;let r=e.trim();return r.length?r:null}function US(e){return e.completionBlocker?`blocked:${e.completionBlocker}`:e.completionOutcome?e.completionOutcome:e.completionReportedAt?"completion_acknowledged":e.finished?"worker_finished":"in_progress"}function LS(e){return e.completionBlocker?"Resolve completion blocker, then rerun `kynver worker complete`.":e.completionOutcome==="review_scheduled"||e.completionOutcome==="review_already_scheduled"?"Await review lane and landing decision in Command Center.":e.completionOutcome==="needs_attention"?"Inspect blocker/attention reason in Command Center and dispatch a repair task.":e.finished&&!e.completionReportedAt?"Post completion acknowledgement to AgentOS (`kynver worker complete`).":null}function Sm(e){let r=e?.trim();return r?/completion acknowledged but board not advanced/i.test(r)&&/task already terminal/i.test(r):!1}function BS(e){return e.prUrl?"pr_handoff":e.headCommit?"commit_handoff":e.changedFiles.length>0?"dirty_worktree":"none"}function Jn(e,r){(e.completionBlocker??void 0)!==(r??void 0)&&(r?e.completionBlocker=r:delete e.completionBlocker,V(e.runId,e))}function WS(e){e.completionBlocker&&(delete e.completionBlocker,V(e.runId,e))}function Ls(e){return e?{base:e.base,baseCommit:e.baseCommit}:{}}function HS(e,r){return{...e,...r.prUrl?{prUrl:r.prUrl}:{},...r.headCommit?{headCommit:r.headCommit}:{}}}async function zn(e){let{runId:r,workerName:t}=Be(e),n=ye(r,t),o=U(n.runId),s=T(n,Ls(o)),i=(e.agentOsId?String(e.agentOsId):n.agentOsId)||"",a=(e.taskId?String(e.taskId):n.taskId)||null;if(!Z(s))return{ok:!0,skipped:!0,reason:"worker-not-finished"};if(n.localOnly)return{ok:!0,skipped:!0,reason:"local-only-worker"};if(!i)return{ok:!1,reason:"missing agentOsId"};let l=e.force===!0||e.force==="true";if(!l&&Qr(n))return{ok:!0,skipped:!0,reason:"completion-already-acknowledged",httpStatus:200};if(!l&&Cl(n)&&WS(n),!(e.skipPrHandoff===!0||e.skipPrHandoff==="true")&&n.dispatched&&a){let E=Ns({worker:n,run:o,status:s});if(!E.ok)return Jn(n,E.reason),{ok:!1,reason:E.reason,nextAction:E.nextAction,completionBlocked:!0};(E.prUrl||E.headCommit)&&(s=T(n,Ls(o)),s=HS(s,E))}let u=s.gitAncestry.headIsAncestorOfBase===!1&&s.gitAncestry.head?s.gitAncestry.head:s.headCommit;if(n.dispatched){let E=fm({changedFiles:s.changedFiles,finalResult:s.finalResult,prUrl:s.prUrl,headCommit:u,disposableArtifactsRemoved:n.disposableArtifactsRemoved});if(!E.allowed){let b=E.detail??`worktree completion blocked (${E.state})`;return Jn(n,b),{ok:!1,reason:b,nextAction:"Clean the worktree (commit, open a PR, or `kynver worker discard-disposable --path <file>`), then rerun `kynver worker complete`.",completionBlocked:!0}}}let d=B(e.baseUrl?String(e.baseUrl):void 0),f=e.secret?String(e.secret):void 0,m=await K(f,i,{baseUrl:d}),p=`${d}/api/agent-os/by-id/${encodeURIComponent(i)}/harness/completion`,g={...s};n.disposableArtifactsRemoved?.length&&(g.disposableArtifactsRemoved=n.disposableArtifactsRemoved);let k={source:"kynver-harness",agentOsId:i,runId:n.runId,workerName:n.name,taskId:a,leaseToken:n.leaseToken??null,startedAt:n.startedAt,finishedAt:s.lastActivityAt||new Date().toISOString(),status:n.leaseToken?{...g,leaseToken:n.leaseToken}:g,workerInjection:{instructionPolicyFingerprint:n.instructionPolicyFingerprint??null,instructionPolicyEvidence:n.instructionPolicyEvidence??null,memoryQualityCapture:n.memoryQualityCapture??null,policyAt:n.instructionPolicyEvidence&&typeof n.instructionPolicyEvidence=="object"&&"policyAt"in n.instructionPolicyEvidence&&typeof n.instructionPolicyEvidence.policyAt=="string"?n.instructionPolicyEvidence.policyAt:null,personaSlug:n.personaSlug??null,personaEvidence:n.personaEvidence??null,contextEnvelopeEvidence:n.contextEnvelopeEvidence??null}},h=await Rm(p,m,k);if((h.status===401||h.status===403)&&!f){let E=await Xd(i,{baseUrl:d});E&&E!==m&&(m=E,h=await Rm(p,m,k))}if(h.ok){let E=qp(h.parsed);if(!zp(E)){let se=`completion acknowledged but board not advanced: ${E.detail??(E.routeOutcome?`harness completion returned ${E.routeOutcome}`:"harness completion did not advance the linked task")}`;Jn(n,se);let $e={completionReportedAt:new Date().toISOString(),completionOutcome:"rejected",completionResponse:h.parsed};return wl(n,n.runId,$e),{ok:!1,httpStatus:h.status,response:h.parsed,reason:se,completionBlocked:!0}}Jn(n,void 0);let b=E.routeOutcome??"acknowledged",P={completionReportedAt:new Date().toISOString(),completionOutcome:"acknowledged",completionResponse:h.parsed};wl(n,n.runId,P),Al(n,s,{source:"harness-completion"});let H=s.prUrl;return{ok:!0,httpStatus:h.status,response:h.parsed,reason:b,...H?{prHandoff:{prUrl:H}}:{}}}let S=h.status===401||h.status===403,A=MS(h.parsed)??(S?"runner token unauthorized":"non-2xx response"),W=S?`completion replay rejected (${h.status}): ${A}`:`completion replay failed (${h.status}): ${A}`;return Jn(n,W),{ok:!1,httpStatus:h.status,response:h.parsed,completionBlocked:!0}}async function Bs(e){try{let{runId:r,workerName:t}=Be(e),n=ye(r,t),o=U(n.runId),s=T(n,Ls(o)),i=(e.agentOsId?String(e.agentOsId):n.agentOsId)||"",a=(e.taskId?String(e.taskId):n.taskId)||null;if(!Z(s)){console.log(JSON.stringify({worker:n.name,runId:n.runId,status:"skipped",reason:"worker-not-finished",workerStatus:s.status,alive:s.alive},null,2));return}if(n.localOnly){console.log(JSON.stringify({worker:n.name,runId:n.runId,status:"skipped",reason:"local-only-worker"},null,2));return}i||(console.error("worker complete requires --agent-os-id (or an agentOsId persisted at worker start)"),process.exit(1));let l=await zn(e);console.log(JSON.stringify({worker:n.name,runId:n.runId,...l.skipped?{status:"skipped"}:{},...l.reason?{reason:l.reason}:{},...l.nextAction?{nextAction:l.nextAction}:{},...l.completionBlocked?{completionBlocked:l.completionBlocked}:{},agentOsId:i,taskId:a,httpStatus:l.httpStatus,response:l.response},null,2)),l.ok||process.exit(1)}catch(r){console.error(`worker complete failed: ${r.message}`),process.exit(1)}}function Dl(e){let{runId:r,workerName:t}=Be(e),n=ye(r,t),o=U(n.runId),s=T(n,Ls(o));ce(qn.join(n.workerDir,"last-status.json"),s),console.log(JSON.stringify(s,null,2))}function FS(e){return{full:`kynver worker list --run ${e} --full`,blocked:`kynver worker list --run ${e} --blocked`,running:`kynver worker list --run ${e} --running`,task:`kynver worker list --run ${e} --task <task-id>`,worker:`kynver worker list --run ${e} --worker <worker>`,runFull:`kynver run status --run ${e} --full`,workerFull:`kynver worker status --run ${e} --name <worker>`,workerTail:`kynver worker tail --run ${e} --name <worker> --lines 80`}}function Tl(e){if(typeof e!="string")return;let r=e.trim();return r.length?r:void 0}function $S(e){let r={};(e.blocked===!0||e.blocked==="true")&&(r.blocked=!0),(e.running===!0||e.running==="true")&&(r.running=!0);let t=Tl(e.task??e.taskId);t&&(r.task=t);let n=Tl(e.worker??e.name);n&&(r.worker=n);let o=Tl(e.status);return o&&(r.status=o),r}function KS(e,r){if(r.blocked){let t=typeof e.attention=="string"?e.attention:"",n=typeof e.status=="string"?e.status:"";if(!(t==="blocked"||t==="needs_attention"||t==="stale"||n==="blocked"))return!1}return!(r.running&&!(e.status==="running"&&e.attention!=="blocked"&&e.attention!=="needs_attention")||typeof r.task=="string"&&e.taskId!==r.task||typeof r.worker=="string"&&e.worker!==r.worker||typeof r.status=="string"&&e.status!==r.status)}function wm(e,r){let t=$S(r);if(Object.keys(t).length===0)return e;let n=e.workers.filter(s=>KS(s,t)),o={...e,workerCount:n.length,needsAttention:n.filter(s=>s.attention&&s.attention!=="ok"&&s.attention!=="done").map(s=>s.worker),workers:n,activeFilters:t};return e.summary&&(o.summary={statusCounts:Cr(n,"status"),attentionCounts:Cr(n,"attention"),lifecycleCounts:Cr(n,"lifecycleStage")}),e.controller&&(o.controller=xm(n)),o}function Cm(e){let r=Us(e),t=e.full===!0||e.full==="true",n=wm(t?Zr(r):Pm(r),e),o=n.workers;console.log(JSON.stringify({runId:n.runId,status:n.status,projection:t?"full":"compact",workerCount:n.workerCount,...n.activeFilters?{activeFilters:n.activeFilters}:{},...t?{}:{resultContract:{projection:"compact",rawWorkerPayloadsOmitted:!0,deepDetailAvailableVia:["--full","worker status","worker tail","run status --full"]},drilldownCommands:FS(r)},needsAttention:n.needsAttention,..."summary"in n?{summary:n.summary}:{},..."controller"in n?{controller:n.controller}:{},workers:o},null,2))}function _m(e){let{run:r,workerName:t,worker:n}=e,o=T(n,{base:r.base,baseCommit:r.baseCommit}),s=o.gitAncestry.headIsAncestorOfBase===!1&&o.gitAncestry.head?o.gitAncestry.head:void 0,i=Br({alive:o.alive,finalResult:o.finalResult,changedFiles:o.changedFiles,gitAncestry:o.gitAncestry,headCommit:s}),a=n.completionBlocker,l=typeof a=="string"&&a?a:void 0,c=Sm(l)?void 0:l,u=c?"blocked":o.status,d=c?"blocked":o.attention.state,f=vm(n.completionResponse),m=vm(f?.task),p=Yn(f?.outcome),g=Yn(f?.status),k=Array.isArray(f?.warnings)?f.warnings.filter(b=>typeof b=="string"&&b.trim().length>0):[],h=Yn(m?.prUrl)??Yn(f?.prUrl),S=Yn(n.completionReportedAt),A=US({finished:Z(o),completionBlocker:c,completionOutcome:p,completionReportedAt:S}),W=LS({completionBlocker:c,completionOutcome:p,completionReportedAt:S,finished:Z(o)}),E=BS({changedFiles:o.changedFiles,headCommit:s,prUrl:h??void 0});return{worker:o.worker,status:u,attention:d,attentionReason:c??o.attention.reason,landingBlocked:o.finalResult?d==="needs_attention"||d==="blocked":!1,exitedWithoutFinalResult:!o.finalResult&&!o.alive,salvageState:i?.salvageable?"review_needed":"none",salvageReason:i?.salvageable?i.attentionReason:void 0,pid:o.pid,alive:o.alive,currentTool:o.currentTool,lastActivityAt:o.lastActivityAt,lastHeartbeatPhase:o.lastHeartbeatPhase,lastHeartbeatSummary:o.lastHeartbeatSummary,heartbeatBlocker:o.heartbeatBlocker,changedFileCount:o.changedFiles.length,changedFiles:o.changedFiles,branch:o.branch,taskId:n.taskId??null,planId:n.planId??null,instructionPolicyFingerprint:typeof n.instructionPolicyFingerprint=="string"?n.instructionPolicyFingerprint:null,instructionPolicyRuleCount:(()=>{let b=n.instructionPolicyEvidence;if(!b||typeof b!="object")return null;let P=b.ruleSlugs;return Array.isArray(P)?P.length:null})(),leaseOwner:n.leaseOwner??null,model:typeof n.model=="string"?n.model:void 0,routingRule:typeof n.routingRule=="string"?n.routingRule:void 0,requestedModel:typeof n.requestedModel=="string"?n.requestedModel:void 0,headCommit:s,prUrl:h,handoffState:E,gitAncestry:o.gitAncestry,finalResult:o.finalResult,lifecycleStage:A,completionReportedAt:S,completionOutcome:n.completionOutcome??null,completionRouteStatus:g,completionRouteOutcome:p,completionWarnings:k,completionBlocker:c??null,checkpoint:{phase:o.lastHeartbeatPhase,summary:o.lastHeartbeatSummary,blocker:o.heartbeatBlocker},lastCommandHint:o.currentTool??o.lastHeartbeatSummary,failureReason:c??o.error??null,nextAction:W,ancestry:o.gitAncestry.relation,ancestryChecked:o.gitAncestry.checked}}function jS(e){let r=typeof e.status=="string"?e.status:"",t=typeof e.completionBlocker=="string"&&e.completionBlocker.trim().length>0?e.completionBlocker:void 0;return t&&!Sm(t)?!1:typeof e.completionReportedAt=="string"&&e.completionReportedAt.trim()||e.completionOutcome==="acknowledged"?!0:r==="done"}function VS(e,r){return{worker:e,status:"done",attention:"done",attentionReason:"metadata terminal worker; full status skipped in compact snapshot",alive:!1,pid:typeof r.pid=="number"?r.pid:void 0,branch:typeof r.branch=="string"?r.branch:void 0,taskId:r.taskId??null,planId:r.planId??null,model:typeof r.model=="string"?r.model:void 0,routingRule:typeof r.routingRule=="string"?r.routingRule:void 0,requestedModel:typeof r.requestedModel=="string"?r.requestedModel:void 0,lifecycleStage:r.completionReportedAt?"completion_acknowledged":"worker_finished",completionReportedAt:typeof r.completionReportedAt=="string"?r.completionReportedAt:null,completionOutcome:r.completionOutcome??null,localOnly:r.localOnly===!0,compactStatus:!0}}function Cr(e,r){let t={};for(let n of e){let o=n[r],s=typeof o=="string"&&o.trim()?o:"unknown";t[s]=(t[s]??0)+1}return t}function bm(e){if(e.attention!=="blocked")return!1;let r=typeof e.attentionReason=="string"?e.attentionReason:"";return r.includes("cli-config.json.tmp")||r.includes("Invalid authentication credentials")||r.includes("provider CLI is missing or not on PATH")||r.includes("unknown command:")}function xm(e){let r=e.filter(bm),t=e.filter(n=>{if(bm(n))return!1;let o=n.attention;return o==="needs_attention"||o==="blocked"||o==="stale"||n.status==="running"});return{actionableCount:t.length,runningCount:e.filter(n=>n.status==="running").length,blockedCount:e.filter(n=>n.attention==="blocked").length,staleCount:e.filter(n=>n.attention==="stale").length,needsAttentionCount:e.filter(n=>n.attention==="needs_attention").length,doneCount:e.filter(n=>n.status==="done").length,systemHealthBlockerCount:r.length,systemHealthBlockers:r.slice(0,10).map(n=>({worker:n.worker,status:n.status,attention:n.attention,attentionReason:n.attentionReason,model:n.model,routingRule:n.routingRule,lastActivityAt:n.lastActivityAt})),actionableWorkers:t.slice(0,25).map(n=>({worker:n.worker,status:n.status,attention:n.attention,attentionReason:n.attentionReason,taskId:n.taskId,planId:n.planId,model:n.model,routingRule:n.routingRule,lastActivityAt:n.lastActivityAt,nextAction:n.nextAction}))}}function Em(e,r,t){let n={runId:e.id,name:e.name,status:Tt(e.status,r),repo:e.repo,workerCount:r.length,needsAttention:r.filter(o=>o.attention&&o.attention!=="ok"&&o.attention!=="done").map(o=>o.worker),workers:r};return t&&(n.summary={statusCounts:Cr(r,"status"),attentionCounts:Cr(r,"attention"),lifecycleCounts:Cr(r,"lifecycleStage")},n.controller=xm(r)),n}function GS(e){return e.status==="done"&&e.attention==="done"}function Zr(e){let r=U(e),n=Object.keys(r.workers||{}).map(s=>{let i=_(qn.join(x(r.id),"workers",R(s),"worker.json"),void 0);return i?_m({run:r,workerName:s,worker:i}):{worker:s,status:"missing",attention:"needs_attention",attentionReason:"worker.json not found"}}),o=Em(r,n,!1);return ce(qn.join(x(r.id),"last-board.json"),o),o}function Pm(e){let r=U(e),n=Object.keys(r.workers||{}).map(i=>{let a=_(qn.join(x(r.id),"workers",R(i),"worker.json"),void 0);return a?jS(a)?VS(i,a):_m({run:r,workerName:i,worker:a}):{worker:i,status:"missing",attention:"needs_attention",attentionReason:"worker.json not found"}}),o=n.filter(i=>!GS(i)),s=Em(r,o,!0);return s.status=Tt(r.status,n),s.summary={...s.summary??{},totalWorkerCount:n.length,shownWorkerCount:o.length,omittedTerminalDoneWorkerCount:n.length-o.length,allStatusCounts:Cr(n,"status"),allAttentionCounts:Cr(n,"attention")},ce(qn.join(x(r.id),"last-board-compact.json"),s),s}async function Am(e,r){let t=String(e.run||""),n=String(e.agentOsId||"");if(!t||!n)return null;let o=Zr(t),s=B(e.baseUrl?String(e.baseUrl):void 0),i=await K(e.secret?String(e.secret):void 0,n,{baseUrl:s}),a=`${s}/api/agent-os/by-id/${encodeURIComponent(n)}/harness/snapshot`,l=await q(a,i,{agentOsId:n,runId:t,source:r,snapshot:o},{agentOsId:n,baseUrl:s});return{ok:l.ok,httpStatus:l.status,response:l.response,authRefreshed:l.refreshedAuth,authRefreshFailure:l.authRefreshFailure}}function YS(e){return{full:`kynver run status --run ${e} --full`,blocked:`kynver status --run ${e} --blocked`,running:`kynver status --run ${e} --running`,task:`kynver status --run ${e} --task <task-id>`,worker:`kynver status --run ${e} --worker <worker>`,workersFull:`kynver worker list --run ${e} --full`,workerFull:`kynver worker status --run ${e} --name <worker>`,workerTail:`kynver worker tail --run ${e} --name <worker> --lines 80`,monitorTick:`kynver monitor status --run ${e} --tick`}}function Ht(e){let r=Us(e),t=e.full===!0||e.full==="true",n=wm(t?Zr(r):Pm(r),e);n.projection=t?"full":"compact",t||(n.resultContract={projection:"compact",rawWorkerPayloadsOmitted:!0,omittedWorkerFields:["finalResult","changedFiles","gitAncestry","completionResponse","stdout/stderr tails"],deepDetailAvailableVia:["--full","worker status","worker tail","monitor status --tick"]},n.drilldownCommands=YS(r)),console.log(JSON.stringify(n,null,2))}function Ml(e){let{runId:r,workerName:t}=Be(e),n=ye(r,t),o=Wo(n.stdoutPath,Number(e.lines||40));if(e.raw===!0||e.raw==="true"){process.stdout.write(o);return}for(let s of o.split(`
-`).filter(Boolean)){let i=vt(s),a=i?Ma(i):s;a&&console.log(a)}}function Ul(e){let{runId:r,workerName:t}=Be(e),n=ye(r,t);if(!$(n.pid)){console.log(JSON.stringify({worker:n.name,pid:n.pid,status:"not_running"},null,2));return}if(Rn(n.pid,"SIGTERM"),Or(1500),$(n.pid)){Rn(n.pid,"SIGKILL"),console.log(JSON.stringify({worker:n.name,pid:n.pid,status:"sigkill_sent"},null,2));return}console.log(JSON.stringify({worker:n.name,pid:n.pid,status:"stopped"},null,2))}w();var QS=5e3,ZS=360*60*1e3,ew=3,rw=5e3;function tw(e){let{runId:r,workerName:t}=Be(e);return{run:r,name:t,agentOsId:e.agentOsId?String(e.agentOsId):void 0,pollMs:Number(e.pollMs)>0?Math.floor(Number(e.pollMs)):void 0,maxTotalMs:Number(e.maxTotalMs)>0?Math.floor(Number(e.maxTotalMs)):void 0,completeAttempts:Number(e.completeAttempts)>0?Math.floor(Number(e.completeAttempts)):void 0,completeBackoffMs:Number(e.completeBackoffMs)>0?Math.floor(Number(e.completeBackoffMs)):void 0,baseUrl:e.baseUrl?String(e.baseUrl):void 0,secret:e.secret?String(e.secret):void 0}}async function et(e){let r=tw(e),t=r.pollMs??QS,n=r.maxTotalMs??ZS,o=r.completeAttempts??ew,s=r.completeBackoffMs??rw,i=ye(r.run,r.name);if(!i.agentOsId||!i.taskId)return{worker:i.name,runId:i.runId,outcome:"missing_link",attempts:0,reason:"worker has no agentOsId/taskId \u2014 nothing to attribute completion to"};if(Qr(i))return{worker:i.name,runId:i.runId,outcome:"completed",httpStatus:200,attempts:0,reason:"completion-already-acknowledged"};let a=Date.now();for(;;){if(i=ye(r.run,r.name),Qr(i))return{worker:i.name,runId:i.runId,outcome:"completed",httpStatus:200,attempts:0,reason:"completion-already-acknowledged"};let u=T(i);if(Z(u)||!$(i.pid))break;if(Date.now()-a>n)return{worker:i.name,runId:i.runId,outcome:"timed_out",attempts:0,reason:`worker did not finish within ${n}ms`};Or(t)}let l,c;for(let u=1;u<=o;u++){let d=await zn({run:r.run,name:r.name,...r.agentOsId?{agentOsId:r.agentOsId}:{},...r.baseUrl?{baseUrl:r.baseUrl}:{},...r.secret?{secret:r.secret}:{}});if(l=d.httpStatus,d.ok)return{worker:i.name,runId:i.runId,outcome:"completed",httpStatus:d.httpStatus,attempts:u};if(d.httpStatus===401||d.httpStatus===403)return c=typeof d.reason=="string"?d.reason:"completion replay refused",{worker:i.name,runId:i.runId,outcome:"blocked",httpStatus:d.httpStatus,attempts:u,reason:c};c=typeof d.reason=="string"?d.reason:"transient failure",u<o&&Or(s)}return{worker:i.name,runId:i.runId,outcome:"blocked",httpStatus:l,attempts:o,reason:c??"completion failed after retries"}}async function Ll(e){try{let r=await et(e);console.log(JSON.stringify(r,null,2)),(r.outcome==="missing_link"||r.outcome==="timed_out")&&process.exit(1),process.exit(0)}catch(r){console.error(`worker auto-complete failed: ${r.message}`),process.exit(1)}}function nw(){return Om.join(XS(new URL(".",import.meta.url)),"cli.js")}function Bl(e){let r=e.cliPath??nw();if(!qS(r))return;let t=Om.join(e.workerDir,"auto-complete.log"),n;try{n=zS(t,"a")}catch{n=void 0}let o=["ignore",n??"ignore",n??"ignore"],s=e.nodeExecutable??process.execPath,i=[r,"worker","auto-complete","--run",e.runId,"--name",e.workerName];e.agentOsId&&i.push("--agent-os-id",e.agentOsId),e.baseUrl&&i.push("--base-url",e.baseUrl),e.secret&&i.push("--secret",e.secret);try{let a=JS(s,i,le({detached:!0,stdio:o,env:process.env}));return n!==void 0&&Im(n),a.unref(),{pid:a.pid,logPath:t,cliPath:r}}catch{if(n!==void 0)try{Im(n)}catch{}return}}Ce();function Nm(e,r,t){ue(e,["fetch","origin",t,"--prune"],{allowFailure:!0});let n=`origin/${t}`,o=Q(e,["worktree","add","-B",t,r,n]);if(o.status===0)return;let s=Q(e,["worktree","add","-b",t,r,"HEAD"]);if(s.status!==0){let i=o.stderr||o.stdout||s.stderr||s.stdout||"git worktree add failed for repair target branch";throw new Error(i)}}De();O();function Ws(e,r){let t=typeof r.name=="string"?r.name.trim():"";if(!t||t==="undefined"||t==="null")throw new Error(`worker name is required and must be a real identifier (got: ${JSON.stringify(r.name)})`);let n=R(t);if(e.workers?.[n])throw new Error(`worker already exists in run ${e.id}: ${n}`);if(!r.task)throw new Error(`missing task text for worker ${n}`);let o=r.routingRule||r.requestedModel?{provider:r.provider||xe,model:r.model,rule:r.routingRule||"explicit:spawn",requestedModel:r.requestedModel??r.model}:bs({explicitModel:r.model,explicitProvider:r.provider,explicitProviderIsOperatorOverride:!!r.provider?.trim()}),s=Jp(o.provider),i=o.model;if(s.preflightModel){let M=s.preflightModel(r.model);if(!M.ok)throw new Error(`model preflight failed for provider "${s.name}": ${M.note??"invalid model/provider combination"}`);M.normalized&&console.error(`[supervisor] ${n}: ${M.note}`),i=M.model}let{worktreesDir:a}=oe(),l=Ft.join(x(e.id),"workers",n);sw(l,{recursive:!0});let c=Ft.join(a,e.id,n),u=r.repairTargetBranch?.trim()||void 0,d=u||r.branch||`agent/${e.id}/${n}`;if(ow(c))throw new Error(`worktree path already exists: ${c}`);ue(e.repo,["fetch","origin","--prune"],{allowFailure:!0}),u?Nm(e.repo,c,u):ue(e.repo,["worktree","add","-b",d,c,e.baseCommit],{throwError:!0});let f=Ft.join(l,"stdout.jsonl"),m=Ft.join(l,"stderr.log"),p=Ft.join(l,"heartbeat.jsonl"),g=yl({task:r.task,ownedPaths:r.ownedPaths||[],worktreePath:c,heartbeatPath:p,planId:r.planId,taskId:r.taskId,instructionPolicyMarkdown:r.instructionPolicyMarkdown,memoryQualityMarkdown:r.memoryQualityPromptMarkdown??r.memoryQualityCapture?.promptMarkdown??null,personaMarkdown:r.personaMarkdown,contextEnvelopeMarkdown:r.contextEnvelopeMarkdown,model:i,repairTargetPrUrl:r.repairTargetPrUrl,repairTargetBranch:r.repairTargetBranch??(u||void 0)}),k=process.env.KYNVER_HARNESS_TASK_ID,h=process.env.KYNVER_HARNESS_AGENT_OS_ID;r.taskId&&(process.env.KYNVER_HARNESS_TASK_ID=String(r.taskId)),r.agentOsId&&(process.env.KYNVER_HARNESS_AGENT_OS_ID=String(r.agentOsId));let S;try{S=s.start({name:n,task:r.task,ownedPaths:r.ownedPaths,model:i,branch:d,worktreePath:c,workerDir:l,stdoutPath:f,stderrPath:m,heartbeatPath:p,prompt:g})}catch(M){throw ue(e.repo,["worktree","remove","--force",c],{allowFailure:!0}),ue(e.repo,["branch","-D",d],{allowFailure:!0}),M}finally{k===void 0?delete process.env.KYNVER_HARNESS_TASK_ID:process.env.KYNVER_HARNESS_TASK_ID=k,h===void 0?delete process.env.KYNVER_HARNESS_AGENT_OS_ID:process.env.KYNVER_HARNESS_AGENT_OS_ID=h}let A=Tp(S.model,i,s.defaultModel),W=v(),E=Te(process.env,W),b=qe().runnerId,P=$n(E.boxKind),H={name:n,runId:e.id,status:"running",pid:S.pid,model:A,branch:d,worktreePath:c,workerDir:l,stdoutPath:f,stderrPath:m,heartbeatPath:p,ownedPaths:r.ownedPaths,...r.agentOsId?{agentOsId:String(r.agentOsId)}:{},...r.taskId?{taskId:String(r.taskId)}:{},...r.planId?{planId:String(r.planId)}:{},...r.instructionPolicyFingerprint?{instructionPolicyFingerprint:String(r.instructionPolicyFingerprint)}:{},...r.instructionPolicyEvidence?{instructionPolicyEvidence:r.instructionPolicyEvidence}:{},...r.memoryQualityCapture?{memoryQualityCapture:r.memoryQualityCapture}:{},...r.personaSlug?{personaSlug:String(r.personaSlug)}:{},...r.personaEvidence?{personaEvidence:r.personaEvidence}:{},...r.contextEnvelopeEvidence?{contextEnvelopeEvidence:r.contextEnvelopeEvidence}:{},...r.leaseOwner?{leaseOwner:String(r.leaseOwner)}:{},...r.leaseToken?{leaseToken:String(r.leaseToken)}:{},...r.dispatched?{dispatched:!0}:{},...!r.agentOsId||!r.taskId?{localOnly:!0}:{},routingRule:o.rule,...o.requestedModel?{requestedModel:o.requestedModel}:{},...o.orchestrationAudit?{orchestrationAudit:o.orchestrationAudit}:{},...r.executorRef?{executorRef:String(r.executorRef)}:{},...r.parentTaskId?{parentTaskId:String(r.parentTaskId)}:{},...r.taskTitle?{taskTitle:String(r.taskTitle)}:{},...r.taskPrUrl?{taskPrUrl:String(r.taskPrUrl)}:{},...r.repairTargetPrUrl?{repairTargetPrUrl:String(r.repairTargetPrUrl)}:{},...r.repairTargetBranch?{repairTargetBranch:String(r.repairTargetBranch)}:{},boxKind:E.boxKind,boxId:P,runtimeId:b,startedAt:new Date().toISOString()};if(V(e.id,H),e.workers={...e.workers||{},[n]:{workerDir:l,statusPath:Ft.join(l,"worker.json")}},e.status="running",Ue(e),H.agentOsId&&H.taskId){let M;try{M=Bl({runId:e.id,workerName:n,workerDir:l,agentOsId:H.agentOsId})}catch(se){let $e=`completion sidecar failed to spawn: ${se.message}`;H.completionBlocker=$e,V(e.id,H)}if(M)M.pid&&(H.completionSidecarPid=M.pid,V(e.id,H));else{let se="completion sidecar failed to spawn (CLI not found or spawn error)";H.completionBlocker=se,H.completionSidecarSpawnFailedAt=new Date().toISOString(),V(e.id,H)}}return H}async function Wl(e){let r=U(String(e.run)),t=typeof e.name=="string"?e.name.trim():"";t||(console.error("worker start failed: --name is required"),process.exit(1));let n=e.task?String(e.task):Gu(e.taskFile?String(e.taskFile):void 0);n||(console.error("missing --task or --task-file"),process.exit(1));let o=!!(e.agentOsId&&e.taskId),s=e.localOnly===!0||e.localOnly==="true";!o&&!s&&(e.agentOsId||e.taskId)&&(console.error("worker start: board-linked workers require both --agent-os-id and --task-id (or pass --local-only for direct runs)"),process.exit(1));let i=e.wait===!0||e.wait==="true",a;try{a=Ws(r,{name:t,task:n,ownedPaths:e.owned?String(e.owned).split(",").map(c=>c.trim()).filter(Boolean):[],model:e.model?String(e.model):void 0,branch:e.branch?String(e.branch):void 0,agentOsId:e.agentOsId?String(e.agentOsId):void 0,taskId:e.taskId?String(e.taskId):void 0,provider:e.provider?String(e.provider):void 0}),console.log(JSON.stringify({runId:r.id,worker:a.name,pid:a.pid,branch:a.branch,worktreePath:a.worktreePath,workerDir:a.workerDir},null,2))}catch(c){console.error(`worker start failed: ${c.message}`),process.exit(1)}if(!i||!a)return;let l=await et({run:String(e.run),name:a.name,...a.agentOsId?{agentOsId:a.agentOsId}:{},...e.baseUrl?{baseUrl:String(e.baseUrl)}:{},...e.secret?{secret:String(e.secret)}:{}});console.error(JSON.stringify({event:"start_wait_outcome",...l})),l.outcome==="timed_out"&&(process.exitCode=1)}L();Qo();w();import iw from"node:path";function aw(e){let r=Array.isArray(e.ownedPaths)?e.ownedPaths.filter(n=>typeof n=="string"):[],t=Array.isArray(e.writeSetPrefixes)?(e.writeSetPrefixes??[]).filter(n=>typeof n=="string"):[];return{...r.length?{ownedPaths:r}:{},...t.length?{writeSetPrefixes:t}:{},...e.allowConcurrentHotspot?{allowConcurrentHotspot:!0}:{}}}function Hs(e){let r=U(e),t=[];for(let n of Object.keys(r.workers||{})){let o=_(iw.join(x(r.id),"workers",R(n),"worker.json"),void 0);!o?.taskId||!On(o)||t.push({runId:r.id,workerName:n,taskId:o.taskId,pid:o.pid,...aw(o)})}return t}w();import{createHash as Tm}from"node:crypto";function ir(e){let r=e.replace(/\r\n/g,`
-`).trimEnd();return Tm("sha256").update(r,"utf8").digest("hex")}function $t(e){if(e==null)return null;let r=e.trim();return r?Tm("sha256").update(r,"utf8").digest("hex"):null}O();var J=class extends Error{kind;httpStatus;constructor(r,t,n){super(t),this.name="PlanPersistError",this.kind=r,this.httpStatus=n}};function Xn(e,r){return e===401||e===403?new J("auth",r,e):e>=500?new J("server",r,e):new J("permanent",r,e)}function Hl(e){let r=e instanceof Error?e.message:String(e);return/ECONNREFUSED|ENOTFOUND|ETIMEDOUT|fetch failed|network/i.test(r)?new J("network",r):new J("tool_interruption",r)}function Dm(e){return e!=="permanent"}function $s(e){let r={"Content-Type":"application/json"};return e&&(r.Authorization=`Bearer ${e}`),r}async function Ks(e){let r=await e.text();try{return JSON.parse(r)}catch{return r}}async function Mm(e,r,t={}){let n=B(t.baseUrl),o=t.apiKey??ee(),s=t.fetchFn??fetch,i=`${n}/api/agent-os/${encodeURIComponent(e)}/plans/${encodeURIComponent(r)}`;try{let a=await s(i,{method:"GET",headers:$s(o)}),l=await Ks(a);if(!a.ok){let c=typeof l=="object"&&l&&"error"in l?String(l.error):`GET plan failed (${a.status})`;throw Xn(a.status,c)}return l}catch(a){throw a instanceof J?a:Hl(a)}}async function Um(e,r={}){let t=B(r.baseUrl),n=r.apiKey??ee(),o=r.fetchFn??fetch,s=e.agentOsSlug;try{if(e.operation==="create"){let f=`${t}/api/agent-os/${encodeURIComponent(s)}/plans`,m={title:e.title,summary:e.summary??null,slug:e.planSlug??null,sourceRefs:Fs(e),initialVersion:{title:e.title,body:e.body,summary:e.summary??null,changeSummary:e.changeSummary??null,author:e.author??null,sourceRefs:Fs(e)}},p=await o(f,{method:"POST",headers:$s(n),body:JSON.stringify(m)}),g=await Ks(p);if(!p.ok){let h=typeof g=="object"&&g&&"error"in g?String(g.error):`create plan failed (${p.status})`;throw Xn(p.status,h)}let k=g;return{planId:k.plan.id,versionId:k.version.id,versionNumber:k.version.versionNumber}}let i=e.planId;if(!i)throw new J("permanent","planId is required for this operation");if(e.operation==="update_metadata"){let f=`${t}/api/agent-os/${encodeURIComponent(s)}/plans/${encodeURIComponent(i)}`,m={title:e.title,summary:e.summary??null,sourceRefs:Fs(e)},p=await o(f,{method:"PATCH",headers:$s(n),body:JSON.stringify(m)}),g=await Ks(p);if(!p.ok){let h=typeof g=="object"&&g&&"error"in g?String(g.error):`update plan failed (${p.status})`;throw Xn(p.status,h)}let k=g;return{planId:k.id,versionId:k.currentVersionId,versionNumber:null}}let a=`${t}/api/agent-os/${encodeURIComponent(s)}/plans/${encodeURIComponent(i)}/versions`,l={title:e.title,body:e.body,summary:e.summary??null,changeSummary:e.changeSummary??null,author:e.author??null,sourceRefs:Fs(e),markCurrent:e.markCurrent!==!1},c=await o(a,{method:"POST",headers:$s(n),body:JSON.stringify(l)}),u=await Ks(c);if(!c.ok){let f=typeof u=="object"&&u&&"error"in u?String(u.error):`add version failed (${c.status})`;throw Xn(c.status,f)}let d=u;return{planId:d.version.planId,versionId:d.version.id,versionNumber:d.version.versionNumber}}catch(i){throw i instanceof J?i:Hl(i)}}function Fs(e){let r={...e.sourceRefs??{}};return e.model&&(r.model=e.model),Object.keys(r).length?r:e.sourceRefs??null}import{createHash as lw}from"node:crypto";function js(e){let r={operation:e.operation,agentOsSlug:e.agentOsSlug,planId:e.planId??null,planSlug:e.planSlug??null,title:e.title.trim(),summaryHash:$t(e.summary),bodyHash:ir(e.body),changeSummary:e.changeSummary?.trim()??null,markCurrent:e.markCurrent??!0};return lw("sha256").update(JSON.stringify(r),"utf8").digest("hex")}import{mkdirSync as Lm}from"node:fs";import{homedir as cw}from"node:os";import Kt from"node:path";function Vs(){let e=process.env.KYNVER_STATE_ROOT;return e?Kt.resolve(e):Kt.join(cw(),".kynver","state")}function Gs(){return Kt.join(Vs(),"plan-outbox")}function uw(){return Kt.join(Vs(),"plan-outbox-archive")}function rt(){let e=Gs(),r=uw();return Lm(e,{recursive:!0}),Lm(r,{recursive:!0}),{outboxDir:e,archiveDir:r}}function Qn(e){if(e.startsWith("/tmp/")||e.startsWith("/var/folders/"))return!0;let r=Kt.resolve(e);return r.startsWith("/tmp/")||r.startsWith(Kt.join("/var","folders"))}import{existsSync as Fl,readFileSync as Wm,renameSync as Bm,readdirSync as dw,writeFileSync as $l,unlinkSync as eL}from"node:fs";import We from"node:path";import{randomUUID as pw}from"node:crypto";var mw=12;function tt(){let{outboxDir:e}=rt(),r=dw(e).filter(n=>n.endsWith(".json")),t=[];for(let n of r){let o=jl(We.join(e,n));o&&o.queueStatus==="queued"&&t.push(o)}return t.sort((n,o)=>n.createdAt.localeCompare(o.createdAt))}function Kl(e){for(let r of tt())if(r.idempotencyKey===e)return r;return null}function jl(e){if(!Fl(e))return null;try{return JSON.parse(Wm(e,"utf8"))}catch{return null}}function Hm(e){let{outboxDir:r}=rt(),t=We.join(r,e.bodyPath);return Wm(t,"utf8")}function Vl(e,r){let{outboxDir:t}=rt(),n=new Date().toISOString(),o=r.existing?.id??pw(),s=r.existing?.bodyPath??`${o}.body.md`,i=We.join(t,`${o}.json`),a=We.join(t,s);r.existing||$l(a,e.body,"utf8");let l={id:o,idempotencyKey:js(e),operation:e.operation,agentOsSlug:e.agentOsSlug,planId:e.planId??r.existing?.planId??null,planSlug:e.planSlug??r.existing?.planSlug??null,title:e.title,summary:e.summary??null,bodyPath:s,bodyHash:ir(e.body),author:e.author??null,model:e.model??null,sourceRefs:e.sourceRefs??null,changeSummary:e.changeSummary??null,markCurrent:e.markCurrent??!0,createdAt:r.existing?.createdAt??n,updatedAt:n,retryCount:(r.existing?.retryCount??0)+(r.existing?1:0),maxRetries:e.maxRetries??r.existing?.maxRetries??mw,lastError:r.lastError,lastFailureKind:r.lastFailureKind,queueStatus:"queued",userStatus:"queued for retry",readbackEvidence:null};return $l(i,`${JSON.stringify(l,null,2)}
-`,{mode:384}),l}function Fm(e){let{outboxDir:r}=rt(),t=We.join(r,`${e.id}.json`);$l(t,`${JSON.stringify(e,null,2)}
-`,{mode:384})}function $m(e){let{outboxDir:r,archiveDir:t}=rt(),n=We.join(r,`${e.id}.json`),o=We.join(r,e.bodyPath),s=We.join(t,`${e.id}.json`),i=We.join(t,e.bodyPath);Fl(n)&&Bm(n,s),Fl(o)&&Bm(o,i)}function Zn(e){let{outboxDir:r}=rt();return{jsonPath:We.join(r,`${e.id}.json`),bodyPath:We.join(r,e.bodyPath)}}function Km(e,r){return{operation:e.operation,agentOsSlug:e.agentOsSlug,planId:e.planId,planSlug:e.planSlug,title:e.title,summary:e.summary,body:r,changeSummary:e.changeSummary??void 0,author:e.author??void 0,model:e.model??void 0,sourceRefs:e.sourceRefs,markCurrent:e.markCurrent??!0,maxRetries:e.maxRetries}}async function jm(e,r,t={}){let n=await Mm(e,r.planId,t),o=n.plan,s=n.currentVersion;if(o.title.trim()!==r.title.trim())throw new J("verification_failed",`title mismatch: expected "${r.title}", got "${o.title}"`);let i=$t(r.summary),a=$t(o.summary);if(i!==a)throw new J("verification_failed","summary mismatch on readback");if(r.versionId&&o.currentVersionId!==r.versionId)throw new J("verification_failed",`currentVersionId mismatch: expected ${r.versionId}, got ${o.currentVersionId}`);if(r.versionNumber!=null&&(!s||s.versionNumber!==r.versionNumber))throw new J("verification_failed",`versionNumber mismatch: expected ${r.versionNumber}, got ${s?.versionNumber??"none"}`);let l=s?.body??"",c=ir(l);if(r.bodyHash&&c!==r.bodyHash)throw new J("verification_failed","body hash mismatch on readback");return{planId:o.id,currentVersionId:o.currentVersionId,versionNumber:s?.versionNumber??null,title:o.title,summary:o.summary,bodyHash:r.bodyHash||c,readAt:new Date().toISOString()}}function Vm(e,r){return{planId:r.planId,title:e.title,summary:e.summary??null,body:e.body,bodyHash:ir(e.body),versionId:r.versionId,versionNumber:r.versionNumber}}var Gm="persisted and read back",fw="queued for retry",Gl="failed and needs action";async function jt(e,r={}){e.bodyPathHint&&Qn(e.bodyPathHint);let t=js(e),n=Kl(t);if(n?.readbackEvidence)return{userStatus:Gm,outboxId:n.id,planId:n.readbackEvidence.planId,readbackEvidence:n.readbackEvidence,idempotencyKey:t};if(e.immediateFailure)return Ym(e,e.immediateFailure.message,e.immediateFailure.kind,n);let o=r.writePlan??Um,s=r.verifyReadback??jm;try{let i=await o(e,r),a={...e,planId:i.planId},l=Vm(a,i),c=await s(e.agentOsSlug,gw(e,l),r);return n&&$m(n),{userStatus:Gm,planId:i.planId,versionId:i.versionId??void 0,readbackEvidence:c,idempotencyKey:t}}catch(i){let a=i instanceof J?i:new J("tool_interruption",i instanceof Error?i.message:String(i));if(!Dm(a.kind)){let l=Vl(e,{lastError:a.message,lastFailureKind:a.kind,existing:n??void 0}),c=Zn(l),u=Jm(l,a.message);return{userStatus:Gl,outboxId:u.id,outboxPath:c.jsonPath,bodyPath:c.bodyPath,lastError:a.message,idempotencyKey:t}}return Ym(e,a.message,a.kind,n)}}function gw(e,r){return e.operation==="update_metadata"?{...r,body:"",bodyHash:""}:r}function Ym(e,r,t,n){let o=Vl(e,{lastError:r,lastFailureKind:t,existing:n??void 0}),s=Zn(o);if(o.retryCount>=o.maxRetries){let i=Jm(o,r);return{userStatus:Gl,outboxId:i.id,outboxPath:s.jsonPath,bodyPath:s.bodyPath,lastError:r,idempotencyKey:o.idempotencyKey}}return{userStatus:fw,outboxId:o.id,outboxPath:s.jsonPath,bodyPath:s.bodyPath,lastError:r,idempotencyKey:o.idempotencyKey}}function Jm(e,r){let t={...e,queueStatus:"failed",userStatus:Gl,lastError:r,updatedAt:new Date().toISOString()};return Fm(t),t}import hw from"node:path";async function Ys(e={},r={}){let t=tt().filter(s=>e.outboxId?s.id===e.outboxId:!0),n=e.max&&e.max>0?t.slice(0,e.max):t,o={processed:0,succeeded:0,stillQueued:0,failed:0,results:[]};for(let s of n){o.processed+=1;let i=Hm(s),a=Km(s,i),l=await jt(a,r);l.userStatus==="persisted and read back"?o.succeeded+=1:l.userStatus==="failed and needs action"?o.failed+=1:o.stillQueued+=1,o.results.push({outboxId:s.id,userStatus:l.userStatus,lastError:l.lastError})}return o}function Yl(e){let r=hw.join(Gs(),`${e}.json`);return jl(r)}function Js(e){let r=Zn(e);return["## Plan persistence risk","",`AgentOS plan write is **not** confirmed (${e.userStatus}).`,`- outboxId: \`${e.id}\``,e.planId?`- planId: \`${e.planId}\``:"- planId: (pending \u2014 create not yet applied)",`- outbox: \`${r.jsonPath}\``,`- body: \`${r.bodyPath}\``,"","Drain when approval/connectivity returns: `kynver plan outbox drain`"].join(`
-`)}function qs(e){let r=e.metadata&&typeof e.metadata=="object"?e.metadata:null,t=typeof e.planPersistenceOutboxId=="string"&&e.planPersistenceOutboxId||(r&&typeof r.planPersistenceOutboxId=="string"?r.planPersistenceOutboxId:void 0);return t?{outboxId:t,jsonPath:typeof e.planPersistenceOutboxPath=="string"?e.planPersistenceOutboxPath:r&&typeof r.planPersistenceOutboxPath=="string"?r.planPersistenceOutboxPath:void 0,bodyPath:typeof e.planPersistenceBodyPath=="string"?e.planPersistenceBodyPath:r&&typeof r.planPersistenceBodyPath=="string"?r.planPersistenceBodyPath:void 0}:null}async function Jl(e){let r=`${e.baseUrl}/api/agent-os/by-id/${encodeURIComponent(e.agentOsId)}/tasks/${encodeURIComponent(e.taskId)}/release`,t;try{t=await q(r,e.secret,{agentOsId:e.agentOsId,leaseOwner:e.leaseOwner,...e.failureDetail?{failureDetail:e.failureDetail}:{}},{agentOsId:e.agentOsId,baseUrl:e.baseUrl})}catch(s){return{released:!1,httpOk:!1,releaseResponse:{ok:!1,error:s.message}}}let n=t.response;return{released:t.ok===!0||n?.ok===!0,httpOk:t.ok===!0,releaseResponse:t.response??t}}import{spawnSync as zm}from"node:child_process";import{spawnSync as kw}from"node:child_process";function qm(){if(process.env.GITHUB_TOKEN?.trim()||process.env.GH_TOKEN?.trim())return{source:"env",configured:!0,reason:"GitHub token already configured in environment"};let e=kw("gh",["auth","token"],{encoding:"utf8",stdio:["ignore","pipe","pipe"]});if(e.status!==0)return{source:"missing",configured:!1,reason:typeof e.stderr=="string"&&e.stderr.trim()?e.stderr.trim():"gh auth token failed; run `gh auth login` on this machine"};let r=typeof e.stdout=="string"?e.stdout.trim():"";return r?(process.env.GH_TOKEN=r,{source:"gh-cli",configured:!0,reason:"Using local GitHub CLI auth for daemon land_pr merge"}):{source:"missing",configured:!1,reason:"gh auth token returned an empty token; run `gh auth login` on this machine"}}var Xm=new Set(["SUCCESS","SKIPPED","NEUTRAL"]),yw=new Set(["CLEAN","HAS_HOOKS"]);function zl(e){return e?.trim()?["--repo",e.trim()]:[]}function Qm(e){let r=/github\.com\/([^/]+)\/([^/]+)\/pull\/\d+/i.exec(e.trim());return r?`${r[1]}/${r[2]}`:null}function Zm(e,r,t){let n=e.gh(r,t);if(n.status!==0)throw new Error(n.stderr||n.stdout||`gh ${t.join(" ")} failed`);return JSON.parse(n.stdout||"{}")}function eo(e){return typeof e.name=="string"&&e.name||typeof e.context=="string"&&e.context||typeof e.workflowName=="string"&&e.workflowName||"unknown check"}function Rw(e){let r=Array.isArray(e)?e:[],t=[],n=[];for(let o of r){let s=o&&typeof o=="object"?o:{},i=typeof s.conclusion=="string"?s.conclusion.toUpperCase():"",a=typeof s.status=="string"?s.status.toUpperCase():"",l=typeof s.state=="string"?s.state.toUpperCase():"";if(!(i&&Xm.has(i))){if(i){n.push(`${eo(s)}=${i}`);continue}if(!(l&&Xm.has(l))){if(l&&l!=="PENDING"&&l!=="EXPECTED"){n.push(`${eo(s)}=${l}`);continue}if(l==="PENDING"||l==="EXPECTED"){t.push(`${eo(s)}=${l}`);continue}if(a&&a!=="COMPLETED"){t.push(`${eo(s)}=${a}`);continue}t.push(`${eo(s)}=PENDING`)}}}return{pending:t,failed:n}}function vw(e){return(Array.isArray(e)?e:[]).some(t=>{let n=t&&typeof t=="object"?t:{},o=typeof n.name=="string"&&n.name||typeof n.context=="string"&&n.context||"",s=typeof n.conclusion=="string"?n.conclusion.toUpperCase():"",i=typeof n.state=="string"?n.state.toUpperCase():"";return/^vercel/i.test(o)&&(s==="SUCCESS"||i==="SUCCESS")})}var bw=/^##\s*(test\s*plan|verification|test\s*evidence|verify)\b/im,Sw=/typecheck|npm run (test|build|typecheck)|vitest|tsc\b|verify-pr-local|local verify|local-verify|tests? (pass|green)|build green|node --test/i,ww=/^docs[(:]/i,Cw=/docs[- ]only|documentation only|no[- ]code change|no code changes|low[- ]risk|plan tracker only|markdown only/i;function _w(e){let r=typeof e.title=="string"?e.title.trim():"",t=typeof e.body=="string"?e.body.trim():"",n=ww.test(r)||Cw.test(t),o=bw.test(t),s=Sw.test(t);return n||o||s||e.vercelCheckSuccess===!0}function xw(e){if(!_w({title:e.title,body:e.body,vercelCheckSuccess:vw(e.statusCheckRollup)}))throw new Error(`PR #${e.number} lacks landing verification evidence \u2014 add ## Test plan / ## Verification with local commands, Vercel preview, or docs/no-code rationale`)}function Ew(e){if(e.state!=="OPEN")throw new Error(`PR #${e.number} is ${e.state}, not OPEN`);if(e.isDraft)throw new Error(`PR #${e.number} is still a draft`);if(!yw.has(e.mergeStateStatus))throw new Error(`PR #${e.number} mergeStateStatus is ${e.mergeStateStatus}`);let r=Rw(e.statusCheckRollup);if(r.failed.length>0)throw new Error(`PR #${e.number} has failing checks: ${r.failed.join(", ")}`);if(r.pending.length>0)throw new Error(`PR #${e.number} has pending checks: ${r.pending.join(", ")}`);xw(e)}function Pw(e){try{return Ew(e),null}catch(r){return r instanceof Error?r.message:String(r)}}function Aw(e,r,t,n){if(!n?.trim())return;let o=encodeURI(`heads/${n}`);e.gh(r,["api","-X","DELETE",`repos/${t}/git/refs/${o}`])}function Iw(e,r,t){if(t?.trim())return t.trim();let n=e.gh(r,["repo","view","--json","nameWithOwner"]);if(n.status!==0)throw new Error(n.stderr||"Could not resolve GitHub repo");let o=JSON.parse(n.stdout||"{}");if(!o.nameWithOwner)throw new Error("Could not resolve GitHub repo");return o.nameWithOwner}function Ow(e,r){if(!r?.trim())return;let t=zm("git",["worktree","list","--porcelain"],{cwd:e,encoding:"utf8"});if(t.status!==0)return;let n=String(t.stdout||"").split(/\r?\n/),o=null,s=null;for(let i of n){if(i.startsWith("worktree ")){o=i.slice(9).trim(),s=null;continue}i.startsWith("branch ")&&o&&(s=i.slice(7).trim(),s.endsWith(`/${r}`)&&zm("git",["worktree","remove","--force",o],{cwd:e,encoding:"utf8"}))}}async function ef(e){let r=e.cwd??process.cwd(),t=e.exec??Is,n=e.prUrl.trim();if(!n)throw new Error("prUrl is required");let o=qm();if(!o.configured)return{prUrl:n,outcome:"blocked",reason:o.reason};let s=Zm(t,r,["pr","view",n,...zl(e.repo),"--json",["number","url","title","body","state","isDraft","mergeStateStatus","statusCheckRollup","headRefName","mergedAt","mergeCommit"].join(",")]);if(s.state==="MERGED"||s.mergedAt)return{prUrl:s.url||n,outcome:"skipped",mergeCommit:s.mergeCommit?.oid??null,reason:`PR #${s.number} is already merged \u2014 land_pr no-op (redelivery)`};let i=Pw(s);if(i)return e.skipNotReady?{prUrl:s.url||n,outcome:"skipped",reason:i}:{prUrl:s.url||n,outcome:"blocked",reason:i};if(e.dryRun)return{prUrl:s.url||n,outcome:"skipped",reason:"dry-run: PR is ready to merge"};let a=String(s.number),l=t.gh(r,["pr","merge",a,...zl(e.repo),"--squash"]);if(l.status!==0){let u=ql(t,r,a,e.repo);return u?{prUrl:u.url||s.url||n,outcome:"skipped",mergeCommit:u.mergeCommit?.oid??null,reason:`PR #${s.number} is already merged \u2014 merged by another lane during land_pr (race)`}:{prUrl:s.url||n,outcome:"blocked",reason:l.stderr||l.stdout||"gh pr merge failed"}}let c=ql(t,r,a,e.repo);c||(c=ql(t,r,a,e.repo));try{let u=Iw(t,r,e.repo);Aw(t,r,u,s.headRefName),Ow(r,s.headRefName)}catch{}return{prUrl:c?.url||s.url||n,outcome:"merged",mergeCommit:c?.mergeCommit?.oid??null,reason:`Daemon land_pr merged PR #${s.number}${c?"":" (post-merge view unavailable \u2014 merge verified by gh exit 0)"}`}}function ql(e,r,t,n){try{let o=Zm(e,r,["pr","view",t,...zl(n),"--json","number,url,mergedAt,mergeCommit,state"]);return o.state==="MERGED"||o.mergedAt?o:null}catch{return null}}O();async function rf(e){let r=await K(e.secret,e.agentOsId,{baseUrl:e.baseUrl}),t=String(e.task.id),n=`${e.baseUrl}/api/agent-os/by-id/${encodeURIComponent(e.agentOsId)}/harness/completion`,o=new Date().toISOString(),s={source:"kynver-harness",agentOsId:e.agentOsId,runId:e.runId,workerName:`land-pr-${t}`,taskId:t,leaseToken:e.task.leaseToken??null,startedAt:o,finishedAt:o,status:{finalResult:e.report,prUrl:e.report.prUrl,summary:e.report.reason,leaseToken:e.task.leaseToken??null},workerInjection:null},i=await q(n,r,s,{agentOsId:e.agentOsId,baseUrl:e.baseUrl});return{ok:i.ok,status:i.status}}function tf(){return["## verify_live completion contract","Finish with a JSON finalResult object:","{",'  "prUrl": "<landed pr>",','  "outcome": "passed" | "failed" | "skipped" | "no_mcp_surface",','  "reason": "<human summary>",','  "mergeCommit": "<sha optional>",','  "liveReadback": "<prod readback string from acceptance.liveReadbackQuery>",','  "mcpCalls": [{ "tool": "<name>", "ok": true, "summary": "..." }]',"}","","Drive the feature MCP tools against live production. Do not mark passed without exercising the MCP surface.","When the subject carries an acceptance snapshot, include liveReadback \u2014 the server oracle rejects passed if the original symptom still appears."].join(`
-`)}var Cs=3600*1e3;function nf(e){let r=e.admissionExhaustion;return!r||typeof r!="object"?null:r}function of(e){let r=e.dispatchSkipDrain;return!r||typeof r!="object"?null:r}function Nw(e){let r=e.harnessWorkerContext;if(!r||typeof r!="object")return null;let t=r,n=typeof t.instructionPolicyMarkdown=="string"?t.instructionPolicyMarkdown:null,o=typeof t.instructionPolicyFingerprint=="string"?t.instructionPolicyFingerprint:null,s=t.instructionPolicyEvidence&&typeof t.instructionPolicyEvidence=="object"?t.instructionPolicyEvidence:null,i=typeof t.personaMarkdown=="string"?t.personaMarkdown:null,a=typeof t.personaEvidence=="object"&&t.personaEvidence&&typeof t.personaEvidence.injectedPersonaSlug=="string"?t.personaEvidence.injectedPersonaSlug:null,l=t.personaEvidence&&typeof t.personaEvidence=="object"?t.personaEvidence:null,c=t.personaInjectionReady===!0,u=typeof t.contextEnvelopeMarkdown=="string"?t.contextEnvelopeMarkdown:null,d=t.contextEnvelopeEvidence&&typeof t.contextEnvelopeEvidence=="object"?t.contextEnvelopeEvidence:null,f=t.contextEnvelopeReady===!0,m=t.memoryQualityCapture&&typeof t.memoryQualityCapture=="object"?t.memoryQualityCapture:null,p=typeof t.memoryQualityPromptMarkdown=="string"?t.memoryQualityPromptMarkdown:typeof m?.promptMarkdown=="string"?m.promptMarkdown:null;return{instructionPolicyMarkdown:n,instructionPolicyFingerprint:o,instructionPolicyEvidence:s,memoryQualityCapture:m,memoryQualityPromptMarkdown:p,personaMarkdown:i,personaSlug:a,personaEvidence:l,personaInjectionReady:c,contextEnvelopeMarkdown:u,contextEnvelopeEvidence:d,contextEnvelopeReady:f}}function Tw(e){if(typeof e!="string")return null;let r=e.trim().toLowerCase();return r.length?r:null}function sf(e,r){let t=[`[AgentOS task ${e.id}] ${e.title}`,"",e.description?String(e.description):"(no description on the board task)","",`Board linkage: agentOsId=${r}, taskId=${e.id}, attempt=${e.attempt}, executor=${e.executor}${e.executorRef?`, executorRef=${e.executorRef}`:""}.`,"This worker was dispatched from the AgentOS board. The harness reports your completion back to the board when you finish."];e.executor==="verify_live"&&t.push("",tf());let n=qs(e);if(n?.outboxId){let o=Yl(n.outboxId);o?t.push("",Js(o)):t.push("","## Plan persistence risk","",`Unconfirmed AgentOS plan write (outboxId=${n.outboxId}).`)}return t.join(`
-`)}function Dw(e){let r=new Set;if(e.targetTaskId)return r.add(String(e.targetTaskId)),r;if(e.targetTaskIds)for(let t of String(e.targetTaskIds).split(",")){let n=t.trim();n&&r.add(n)}return r}async function _r(e){let r=e.pipeline===!0||e.pipeline==="true";try{let hn=function(C){return C.landPrDispatch===!0?!0:C.task?.executor==="land_pr"};var t=hn;let n=U(String(N(String(e.run||""),"--run"))),o=String(N(String(e.agentOsId||""),"--agent-os-id")),s=B(e.baseUrl?String(e.baseUrl):void 0),i=await K(e.secret?String(e.secret):void 0,o,{baseUrl:s}),l=!(e.execute===!0||e.execute==="true"),c=qe({runId:n.id}),u=hl(n.id,c.runnerId),d=e.diskPath?Me({diskPath:String(e.diskPath)}):Me({diskPath:n.repo}),f=$r({runId:n.id}),m=Dw(e),p=m.size>0,g=Number(e.maxStarts)>0?Math.floor(Number(e.maxStarts)):1,k=p?Math.min(g,m.size):g,h=l?k:Math.min(k,f.slotsAvailable);if(!l&&h<=0){let C={runId:n.id,agentOsId:o,dryRun:!1,skipped:!0,reason:f.reason??"no resource slots",resourceGate:f};if(r)return{ok:!0,...C};console.log(JSON.stringify(C,null,2));return}let S=Hs(n.id);if(e.reconcileStaleBlockers===!0||e.reconcileStaleBlockers==="true"){let C=`${s}/api/agent-os/by-id/${encodeURIComponent(o)}/lane-hygiene`;try{await q(C,i,{agentOsId:o,dryRun:!1,includeBoardReconcile:!0},{agentOsId:o,baseUrl:s})}catch(y){console.error(`[dispatch] reconcile-stale-blockers lane-hygiene call failed: ${y.message}`)}}let A=`${s}/api/agent-os/by-id/${encodeURIComponent(o)}/tasks/dispatch-next`,W=C=>({agentOsId:o,dryRun:l,maxStarts:C,leaseOwner:u,leaseDurationMs:Number(e.leaseMs)>0?Math.floor(Number(e.leaseMs)):Cs,runnerDiskGate:d,runnerResourceGate:f,activeHarnessWorkers:S,runnerPresence:c,harnessBoardSnapshot:Zr(n.id),...e.lane?{lane:up(String(e.lane))}:{},...e.executor?{executor:String(e.executor)}:{},...e.diskPath?{diskPath:String(e.diskPath)}:{},...e.targetTaskId?{targetTaskId:String(e.targetTaskId)}:{},...!e.targetTaskId&&e.targetTaskIds?{targetTaskIds:String(e.targetTaskIds).split(",").map(y=>y.trim()).filter(Boolean)}:{}}),E=async C=>{let y=await q(A,i,W(C),{agentOsId:o,baseUrl:s})??{ok:!1,status:0,response:null},I=y.response;return{dispatch:y,result:I?.result}},b=await E(p||l?h:1);if(!b.dispatch.ok||!b.result){let C={runId:n.id,agentOsId:o,action:"dispatch",httpStatus:b.dispatch.status,response:b.dispatch.response,authRefreshed:b.dispatch.refreshedAuth===!0,authRefreshFailure:b.dispatch.authRefreshFailure};if(r)return{ok:!1,...C};console.log(JSON.stringify(C,null,2)),process.exit(1)}let P=b.result;if(l){let C=nf(P),y=of(P),I={runId:n.id,agentOsId:o,dryRun:!0,wouldStart:P.started.map(j=>({taskId:j.task.id,title:j.task.title,reason:j.reason})),skipped:P.skipped.map(j=>({taskId:j.task.id,skipReason:j.skipReason,reason:j.reason})),diskGate:P.diskGate,resourceGate:P.resourceGate,inspected:P.inspected,pagesScanned:P.pagesScanned??null,candidatesExhausted:P.candidatesExhausted??null,capacityIdle:C?.capacityIdle===!0,admissionExhaustion:C,dispatchSkipDrain:y};if(r)return{ok:!0,...I};console.log(JSON.stringify(I,null,2));return}let H=Mp(),M=[],se=[],$e=Number(P.inspected)||0;async function be(C,y,I){let j=await Jl({baseUrl:s,secret:i,agentOsId:o,taskId:String(C.id),leaseOwner:u,failureDetail:y});return M.push({taskId:C.id,started:!1,error:y,released:j.released,releaseResponse:j.releaseResponse,...I}),!1}async function kn(C){let y=C.task,I=String(y.id);if(p&&!m.has(I))return be(y,"exact_target_mismatch: dispatch-next returned a different task than requested",{requestedTargetTaskIds:[...m]});let j=y.prUrl?String(y.prUrl):"";if(!j)return be(y,"land_pr task missing prUrl");try{let Ke=await ef({prUrl:j,repo:Qm(j),cwd:n.repo}),yt=await rf({baseUrl:s,secret:i,agentOsId:o,runId:n.id,task:y,report:Ke});return yt.ok?(M.push({taskId:I,started:!0,landPr:!0,outcome:Ke.outcome,completionStatus:yt.status}),!0):be(y,`land_pr completion POST failed (HTTP ${yt.status})`,{landPr:!0,outcome:Ke.outcome})}catch(Ke){return be(y,Ke.message)}}async function Se(C){let y="duplicate_dispatch_prevented: live local worker already owns this task",I=await Jl({baseUrl:s,secret:i,agentOsId:o,taskId:String(C.id),leaseOwner:u,failureDetail:y});return M.push({taskId:C.id,started:!1,error:y,alreadyRunning:!0,nonFatal:!0,released:I.released,releaseResponse:I.releaseResponse}),!1}async function X(C){let y=C.task,I=Nw(C),j=String(y.id);if(p&&!m.has(j))return be(y,"exact_target_mismatch: dispatch-next returned a different task than requested",{requestedTargetTaskIds:[...m]});let Ke=Tw(y.personaSlug);if(Ke&&(!I?.personaInjectionReady||!I.personaMarkdown))return be(y,`persona_injection_required: missing anchored context-envelope persona block for "${Ke}"`);if(Wp(n.id,j))return Se(y);let yt=Number(y.attempt)||1;if(yt>H.maxTaskAttempts)return be(y,`task attempt ${yt} exceeds KYNVER_MAX_TASK_ATTEMPTS (${H.maxTaskAttempts})`);let Ay=R(`t-${y.id}-a${y.attempt}`),Rt=bs({explicitModel:e.model?String(e.model):void 0,explicitProvider:e.provider?String(e.provider):void 0,explicitProviderIsOperatorOverride:!!e.provider,task:dp(y)});try{let la=y.planId?String(y.planId):void 0,Do=Fp({title:y.title?String(y.title):void 0,description:y.description?String(y.description):null,executorRef:y.executorRef?String(y.executorRef):null,prUrl:y.prUrl?String(y.prUrl):null,branch:y.branch?String(y.branch):null}),Mo=Ws(n,{name:Ay,task:sf(y,o),ownedPaths:e.owned?String(e.owned).split(",").map(Iy=>Iy.trim()).filter(Boolean):[],model:Rt.model,provider:Rt.provider,routingRule:Rt.rule,requestedModel:Rt.requestedModel,agentOsId:o,taskId:String(y.id),planId:la,branch:Do?.targetPrBranch??void 0,executorRef:y.executorRef?String(y.executorRef):void 0,parentTaskId:y.parentTaskId?String(y.parentTaskId):void 0,taskTitle:y.title?String(y.title):void 0,taskPrUrl:Do?.targetPrUrl??(y.prUrl?String(y.prUrl):void 0),repairTargetPrUrl:Do?.targetPrUrl,repairTargetBranch:Do?.targetPrBranch??void 0,instructionPolicyMarkdown:I?.instructionPolicyMarkdown??null,instructionPolicyFingerprint:I?.instructionPolicyFingerprint??null,instructionPolicyEvidence:I?.instructionPolicyEvidence??null,memoryQualityCapture:I?.memoryQualityCapture??null,memoryQualityPromptMarkdown:I?.memoryQualityPromptMarkdown??null,personaMarkdown:I?.personaMarkdown??null,personaSlug:I?.personaSlug??Ke,personaEvidence:I?.personaEvidence??null,contextEnvelopeMarkdown:I?.contextEnvelopeMarkdown??null,contextEnvelopeEvidence:I?.contextEnvelopeEvidence??null,leaseOwner:u,leaseToken:y.leaseToken?String(y.leaseToken):void 0,dispatched:!0});return M.push({taskId:y.id,started:!0,worker:Mo.name,pid:Mo.pid,branch:Mo.branch,model:Mo.model,provider:Rt.provider,routingRule:Rt.rule,instructionPolicyFingerprint:I?.instructionPolicyFingerprint??null,instructionPolicyRuleCount:Array.isArray(I?.instructionPolicyEvidence?.ruleSlugs)?I.instructionPolicyEvidence.ruleSlugs.length:null,personaSlug:I?.personaSlug??Ke,personaOperatingRuleCount:I?.personaEvidence?.operatingRuleCount??null}),I?.instructionPolicyFingerprint&&console.error(`[dispatch] task ${j}: operating-rules policy injected fingerprint=${I.instructionPolicyFingerprint}`),I?.personaSlug&&console.error(`[dispatch] task ${j}: persona context injected slug=${I.personaSlug}`),I?.contextEnvelopeReady&&console.error(`[dispatch] task ${j}: context envelope injected anchor=${I.contextEnvelopeEvidence?.anchorTaskId??j}`),!0}catch(la){return be(y,la.message)}}let D=new Set;async function ie(C){let y=C.task,I=String(y.id);if(D.has(I))return be(y,"dispatch_retry_loop_prevented: task already failed to start this tick");let j=hn(C)?await kn(C):await X(C);return j||D.add(I),j}for(let C of P.started)await ie(C);if(se.push(...P.skipped??[]),p)for(let C of se){let y=String(C.task.id);m.has(y)&&M.push({taskId:y,started:!1,error:`exact_target_not_started:${C.skipReason}`,skipReason:C.skipReason,detail:C.reason??null,requestedTargetTaskIds:[...m]})}for(;!p&&M.length<h;){let C=await E(1);if(!C.dispatch.ok||!C.result){M.push({started:!1,error:"dispatch_next request failed during top-up",httpStatus:C.dispatch.status,response:C.dispatch.response});break}$e+=Number(C.result.inspected)||0,se.push(...C.result.skipped??[]);let y=C.result.started??[];if(y.length===0)break;for(let I of y){if(M.length>=h)break;await ie(I)}}let ge=M.filter(C=>C.started).length,we=nf(P),ae=of(P),To=ge===0&&(we?.capacityIdle===!0||Number(P.resourceGate?.slotsAvailable)>0);if(To&&we?.summary){let C=we.skipReasonCounts?.retry_ceiling_exceeded??0,y=P.overAttemptIdleRecovery??we.overAttemptIdleRecovery,I=y?.attempted===!0?`; over_attempt_recovery minted=${y.minted??0} started=${y.started??0}`:C>0?"; over_attempt_recovery not attempted":"",j=ae?`; dispatch_skip_drain scanned=${ae.scanned??0} advanced=${ae.advanced??0}`:"";console.error(`[dispatch] ${we.summary}${C>0?`; retry_ceiling_exceeded=${C}`:""}${I}${j}`)}let Lu={runId:n.id,agentOsId:o,dryRun:!1,leaseOwner:u,startedCount:ge,capacityIdle:To,admissionExhaustion:we,dispatchSkipDrain:ae,outcomes:M,skipped:se.map(C=>({taskId:C.task.id,skipReason:C.skipReason})),inspected:$e,pagesScanned:P.pagesScanned??null,candidatesExhausted:P.candidatesExhausted??null,diskGate:P.diskGate,resourceGate:P.resourceGate},Bu=C=>!C.started&&C.nonFatal!==!0;if(r)return{ok:!M.some(Bu),...Lu};console.log(JSON.stringify(Lu,null,2)),M.some(Bu)&&process.exit(1)}catch(n){if(r)return{ok:!1,error:n.message};console.error(`run dispatch failed: ${n.message}`),process.exit(1)}}_t();Pa();En();Da();Ta();Lr();O();De();import Mw from"node:os";function ro(e,r={}){let t=(r.boxKind??je(v())).trim().toLowerCase()||"forge",n=r.hostLabel??Mw.hostname();return{boxId:r.boxId??$n(t,n),boxKind:t,displayName:r.displayName??null,hostLabel:n,observedAt:r.observedAt??new Date().toISOString(),totalMemBytes:e.totalMemBytes,freeMemBytes:e.freeMemBytes,activeWorkers:e.activeWorkers,maxConcurrentWorkers:e.maxConcurrentWorkers,autoCap:e.autoCap,slotsAvailable:e.slotsAvailable,harnessRunId:r.harnessRunId??null,queuedTasks:r.queuedTasks??null,reason:e.reason,...r.prEvidence?.length?{prEvidence:r.prEvidence}:{}}}function Uw(e){let r={ts:e.ts??new Date().toISOString(),phase:e.phase,summary:e.summary,changedFiles:e.changedFiles??[],blocker:e.blocker??null};return e.boxResourceSnapshot&&(r.boxResourceSnapshot=e.boxResourceSnapshot),e.prEvidence?.length&&(r.prEvidence=e.prEvidence),`${JSON.stringify(r)}
-`}G();In();function Lw(e){if(e.skipReason==="engagement_required")return!0;let r=e.reason??"";return r.includes("engagement_required")||r.includes("engagement_not_found")||r.includes("engagement_expired")||r.includes("engagement_revoked")}Wa();Pn();import{createHash as af}from"node:crypto";function zs(e){return JSON.stringify(Xl(e))}function Xl(e){if(Array.isArray(e))return e.map(Xl);if(e&&typeof e=="object"){let r={};for(let t of Object.keys(e).sort())r[t]=Xl(e[t]);return r}return e}function Bw(e){return`ib1-${af("sha256").update(zs(e),"utf8").digest("hex").slice(0,16)}`}function Ww(e){return`ib-${af("sha256").update(Buffer.from(e)).digest("hex").slice(0,12)}`}function Xs(e){if(!e)return null;let r=e.trim();if(!r)return null;if(/^[0-9a-fA-F]{64}$/.test(r))return new Uint8Array(r.match(/.{2}/g).map(t=>parseInt(t,16)));try{let t=Buffer.from(r,"base64");if(t.length===32)return new Uint8Array(t)}catch{}return null}function Vt(e){if(!e||typeof e!="object")return!1;let r=e;if(typeof r.signature!="string"||!r.signature||typeof r.publicKeyId!="string"||!r.publicKeyId)return!1;let t=r.bundle;return!(!t||typeof t!="object"||typeof t.version!="string"||!t.version||typeof t.generatedAt!="string"||!Array.isArray(t.personas)||!t.instructions||typeof t.instructions!="object"||!t.policyThresholds||typeof t.policyThresholds!="object")}var lf={"ib-3bab6314f0ba":"53a2040646cd479e1f5f1aea9abf7848ce8b62e32001efb8044dfd90e8ab87ed","ib-26e6c695da06":"bb1700f25b2ee7d7cdcdb9f446f0f44ef2cc22a3096bc161232fb658e7cdaf38"};function Ql(e,r=process.env){let t=Xs(r.KYNVER_INSTRUCTION_BUNDLE_PUBLIC_KEY);if(t)return t;let n=lf[e];return n?Xs(n):null}import{createPublicKey as Hw,verify as Fw}from"node:crypto";var $w=Buffer.from("302a300506032b6570032100","hex");function Kw(e){return Hw({key:Buffer.concat([$w,Buffer.from(e)]),format:"der",type:"spki"})}function cf(e,r){if(!Vt(e))return{ok:!1,reason:"malformed signed bundle payload"};let t;try{t=Buffer.from(e.signature,"base64url")}catch{return{ok:!1,reason:"signature is not base64url"}}if(t.length!==64)return{ok:!1,reason:"signature is not a 64-byte Ed25519 signature"};try{let n=Buffer.from(zs(e.bundle),"utf8");return Fw(null,n,Kw(r),t)?{ok:!0,bundle:e.bundle}:{ok:!1,reason:"Ed25519 signature mismatch"}}catch(n){return{ok:!1,reason:`signature verification failed: ${n.message}`}}}function Zl(e,r=process.env){if(!Vt(e))return{ok:!1,reason:"malformed signed bundle payload"};let t=Ql(e.publicKeyId,r);return t?cf(e,t):{ok:!1,reason:`no verification key for publicKeyId "${e.publicKeyId}" (not pinned; set KYNVER_INSTRUCTION_BUNDLE_PUBLIC_KEY)`}}import{mkdirSync as jw,readFileSync as Vw,renameSync as Gw,writeFileSync as Yw}from"node:fs";import{homedir as Jw}from"node:os";import uf from"node:path";function ec(e){let r=e.replace(/[^A-Za-z0-9_-]/g,"_");return uf.join(Jw(),".kynver",`instruction-bundle-${r}.json`)}function rc(e,r){try{let t=ec(e);jw(uf.dirname(t),{recursive:!0});let n=`${t}.tmp-${process.pid}`;Yw(n,JSON.stringify(r),"utf8"),Gw(n,t)}catch{}}function tc(e){try{let r=Vw(ec(e),"utf8"),t=JSON.parse(r);return Vt(t)?t:null}catch{return null}}var df=15*6e4,qw=1e4,ar={lastAttemptAtMs:0,etag:null,diskCacheTried:!1,routeMissingLogged:!1};function no(e,r){console.error(JSON.stringify({event:e,...r}))}function pf(e,r,t){let n=Zl(e);return n.ok?(Ya(n.bundle,r),r==="server"&&rc(t,e),!0):(no("instruction_bundle_signature_invalid",{agentOsId:t,source:r,publicKeyId:e.publicKeyId,reason:n.reason}),!1)}function to(e){if(ar.diskCacheTried)return!1;ar.diskCacheTried=!0;let r=tc(e);return r?pf(r,"disk",e):!1}async function nc(e){let r=e.nowMs??Date.now(),t=()=>({source:sr(),version:vr(),updated:!1});if(!e.force&&r-ar.lastAttemptAtMs<df)return t();ar.lastAttemptAtMs=r;let n=e.baseUrl?.trim().replace(/\/$/,""),o=e.secret?.trim();if(!n||!o)return sr()==="embedded"&&to(e.agentOsId)?{...t(),updated:!0}:t();let s=e.fetchImpl??fetch,i=new AbortController,a=setTimeout(()=>i.abort(),qw);try{let l=Le(o);delete l["Content-Type"],ar.etag&&sr()==="server"&&(l["If-None-Match"]=ar.etag);let c=await s(`${n}/api/agent-os/by-id/${encodeURIComponent(e.agentOsId)}/runtime/instruction-bundle`,{headers:l,signal:i.signal});if(c.status===304)return t();if(c.status===404)return ar.routeMissingLogged||(ar.routeMissingLogged=!0,no("instruction_bundle_route_missing",{agentOsId:e.agentOsId,baseUrl:n})),sr()==="embedded"&&to(e.agentOsId)?{...t(),updated:!0}:t();if(!c.ok)return no("instruction_bundle_fetch_failed",{agentOsId:e.agentOsId,status:c.status}),sr()==="embedded"&&to(e.agentOsId)?{...t(),updated:!0}:t();let u=await c.json().catch(()=>null);return!u||!pf(u,"server",e.agentOsId)?sr()==="embedded"&&to(e.agentOsId)?{...t(),updated:!0}:t():(ar.etag=c.headers.get("etag"),no("instruction_bundle_loaded",{agentOsId:e.agentOsId,version:vr(),publicKeyId:u.publicKeyId}),{...t(),updated:!0})}catch(l){return no("instruction_bundle_fetch_error",{agentOsId:e.agentOsId,error:l instanceof Error?l.message:String(l)}),sr()==="embedded"&&to(e.agentOsId)?{...t(),updated:!0}:t()}finally{clearTimeout(a)}}var oc="openai-codex",zw=new Set(["upstream_503","connection_refused","connection_reset","sse_no_event","sse_idle_timeout"]),Xw=[/\bsk-[a-zA-Z0-9_-]{8,}\b/g,/\bBearer\s+[a-zA-Z0-9._-]{8,}\b/gi,/\baccess[_-]?token["\s:=]+[a-zA-Z0-9._-]{8,}/gi];function lr(e,r=400){let t=String(e??"").replace(/\s+/g," ").trim();for(let n of Xw)t=t.replace(n,"[redacted]");return t.length>r?`${t.slice(0,r)}\u2026`:t}function Qw(e,r){let t=[];e instanceof Error?(t.push(e.message),t.push(e.name)):typeof e=="string"?t.push(e):e!=null&&t.push(String(e));let n=e,o=r??n?.status_code??n?.statusCode??void 0;return o!=null&&t.push(`http ${o}`),{haystack:t.join(" ").toLowerCase(),statusCode:o}}function ff(e,r){let{haystack:t,statusCode:n}=Qw(e,r),o=e instanceof Error?e.message:typeof e=="string"?e:String(e??"");if(n===402||/billing|credit|payment required|insufficient_quota/.test(t))return{errorClass:"billing",summary:lr(o||"Billing or credits exhausted"),statusCode:n,transient:!1};if(n===401||n===403||/\bunauthorized\b|\bforbidden\b/.test(t))return{errorClass:"auth",summary:lr(o||"Authentication failed"),statusCode:n,transient:!1};if(n===429||/rate limit|too many requests|throttl/.test(t))return{errorClass:"rate_limit",summary:lr(o||"Rate limited"),statusCode:n,transient:!0};if(n===503||/upstream connect error|connection termination|remote connection failure|delayed connect error/.test(t))return{errorClass:"upstream_503",summary:lr(o||"ChatGPT Codex backend returned HTTP 503"),statusCode:n??503,transient:!0};if(/connection refused/.test(t))return{errorClass:"connection_refused",summary:lr(o||"Connection refused by ChatGPT Codex backend"),statusCode:n,transient:!0};if(/no sse events|no bytes within|no stream events|codex stream produced no/.test(t)){let s=/no bytes|ttfb|first byte/.test(t)?"sse_no_event":"sse_idle_timeout";return{errorClass:s,summary:lr(o||(s==="sse_no_event"?"Codex stream opened but sent no events":"Codex stream stalled after the first event")),statusCode:n,transient:!0}}return/connection reset|connection lost|connection closed|disconnect\/reset/.test(t)?{errorClass:"connection_reset",summary:lr(o||"Connection reset while talking to ChatGPT Codex"),statusCode:n,transient:!0}:{errorClass:"unknown",summary:lr(o||"Unknown provider error"),statusCode:n,transient:!1}}function gf(e){let r=e.env??process.env,t=Math.max(1,e.defaultRetries??3),n=String(e.provider??"").toLowerCase(),o=String(e.platform??"").toLowerCase();if(n!==oc||o!=="cron")return t;let s=r.HERMES_CODEX_CRON_API_MAX_RETRIES?.trim();if(!s)return Math.max(t,5);let i=Number.parseInt(s,10);return!Number.isFinite(i)||i<1?Math.max(t,5):Math.max(t,i)}var mf={upstream_503:"ChatGPT Codex backend outage (HTTP 503)",connection_refused:"ChatGPT Codex backend refused the connection",connection_reset:"ChatGPT Codex connection dropped mid-request",sse_no_event:"Codex stream never started (no SSE events)",sse_idle_timeout:"Codex stream stalled (no SSE events after the first byte)",rate_limit:"ChatGPT Codex rate limit",billing:"ChatGPT Codex billing or quota limit",auth:"ChatGPT Codex authentication problem",unknown:"ChatGPT Codex provider error"};function hf(e){let r=e.provider?.trim()||oc,t=e.model?.trim()||"(unknown model)",n=e.jobName?.trim()||"Scheduled Hermes job",o=mf[e.errorClass]??mf.unknown,s=e.degraded?"degraded":"failed";return[`\u26A0\uFE0F ${n} \u2014 AI provider ${s} (not a Kynver harness failure).`,"",`Provider: ${r} (ChatGPT Codex subscription)`,`Model: ${t}`,`What happened: ${o} after ${e.attempts} attempt(s) with backoff.`,`Details: ${e.summary}`,"","This is a ChatGPT/Codex API issue on chatgpt.com \u2014 not AgentOS, not the Kynver runtime, and not your local harness.","The cron job will run again on its next schedule. If it persists, check ChatGPT/Codex status or re-auth with: hermes auth status openai-codex"].join(`
-`)}function kf(e,r){return`\u26A0\uFE0F Cron job '${e}' \u2014 provider degraded
+${n}`;return hS.some(s=>s.test(o))?"privileged":r.includes("provider:claude")||r.includes("deep_review")||r.includes("security")||r.includes("landing")||r.includes("review")||t.startsWith("land:")||r.includes("implementer")||r.includes("repair")||t.includes("implement")?"elevated":kS.some(s=>s.test(o))?"low":"elevated"}function yS(e){let r=nt(e.provider),t=e.escalatedFrom&&e.escalatedReason?`Escalated from ${e.escalatedFrom} (${e.escalatedReason}); using ${r.displayName} (${r.costTier} tier)`:`${r.displayName} selected for ${e.riskClass} orchestration (${r.costTier} tier, auth=${e.authSource})`;return{provider:e.provider,model:e.model,authSource:e.authSource,costTier:r.costTier,riskClass:e.riskClass,costRationale:t,routingRule:e.routingRule,escalatedFrom:e.escalatedFrom,escalatedReason:e.escalatedReason}}function RS(e){let r=e.inventory??Pl();return e.codexBinding?{...r,bindings:{...r.bindings,codex:e.codexBinding}}:r}function ot(e){let r=yS({provider:e.providerId,model:e.model,authSource:e.binding.authSource,riskClass:e.riskClass,routingRule:e.routingRule,escalatedFrom:e.escalatedFrom,escalatedReason:e.escalatedReason});return{provider:e.providerId,model:e.model,rule:r.routingRule,audit:r}}function Il(e){let r=e.task??{},t=nm(r),n=RS({inventory:e.inventory,codexBinding:e.codexBinding??(e.inventory?null:Pr())}),o=e.preferLowCost===!1?null:e.explicitProvider?.trim().toLowerCase(),s=e.explicitModel?.trim()||void 0,i=Pe;if(o==="codex"||o==="provider:codex"){let c=n.bindings.codex;if(!c.ready){let u=Ts({inventory:n,riskClass:t});return ot(u?{providerId:u.providerId,binding:u.binding,riskClass:t,routingRule:"orchestration:explicit_codex_unavailable_cost_aware",model:s,escalatedFrom:"codex",escalatedReason:c.note??"codex oauth not bound"}:{providerId:i,binding:n.bindings[i],riskClass:t,routingRule:"orchestration:codex_unavailable_escalate_cursor",model:s,escalatedFrom:"codex",escalatedReason:c.note??"codex oauth not bound"})}return ot({providerId:"codex",binding:c,riskClass:t,routingRule:"orchestration:explicit_codex",model:s})}if(o==="cursor"||o==="provider:cursor"){let c=n.bindings.cursor;if(c.ready)return ot({providerId:"cursor",binding:c,riskClass:t,routingRule:"orchestration:explicit_cursor",model:s})}if(o==="claude"||o==="provider:claude"){let c=n.bindings.claude;if(c.ready)return ot({providerId:"claude",binding:c,riskClass:t,routingRule:"orchestration:explicit_claude",model:s})}let a=Ts({inventory:n,riskClass:t});if(a)return ot({providerId:a.providerId,binding:a.binding,riskClass:t,routingRule:`orchestration:cost_aware_${a.providerId}`,model:s,escalatedFrom:a.escalatedFrom,escalatedReason:a.escalatedReason});let l=n.bindings.codex;return ot({providerId:i,binding:n.bindings[i],riskClass:t,routingRule:l.ready?"orchestration:inventory_empty_default_cursor":"orchestration:codex_unavailable_default_cursor",model:s,...l.ready?{}:{escalatedFrom:"codex",escalatedReason:l.note??"codex oauth not bound"}})}Hr();C();import{closeSync as sm,openSync as im}from"node:fs";import{spawn as wS}from"node:child_process";var bS=/-(?:thinking(?:-(?:high|medium|low|minimal|max|none))?|high|medium|low|minimal)$/i;function vS(e){return e.replace(bS,"")}var SS=/^(?:gpt-|gpt5|o1|o3|o4|gemini-|grok-|composer|deepseek|llama|mistral|qwen|command-)/i;function Ol(e){return/^claude[-_]/i.test(e)||/^(?:opus|sonnet|haiku)\b/i.test(e)}var CS=new Set(["cursor"]);function om(e){let r=e.trim().toLowerCase();return CS.has(r)?"auto":null}function Us(e,r){let t=(e??"").trim();if(!t)return{ok:!0,model:r,normalized:!1};let o=vS(t).trim()||r;return SS.test(o)||!Ol(o)&&o!==r?{ok:!1,model:t,normalized:!1,requested:t,note:`model "${t}" is not a Claude model \u2014 the "claude" provider drives the Claude CLI, which only accepts claude-* model ids (got "${o}"). Pick a Claude model or switch the worker provider.`}:o!==t?{ok:!0,model:o,normalized:!0,requested:t,note:`normalized model "${t}" \u2192 "${o}" (the Claude CLI rejects reasoning-effort suffixes)`}:{ok:!0,model:o,normalized:!1}}function st(e,r){let t=(e??"").trim();return t?Ol(t)?{ok:!1,model:t,normalized:!1,requested:t,note:`model "${t}" is a Claude model but the worker provider is "codex". Switch the provider or pick a Codex/OpenAI model.`}:{ok:!0,model:t,normalized:!1}:{ok:!0,model:r,normalized:!1}}function Ws(e,r){let t=(e??"").trim();if(!t)return{ok:!0,model:r,normalized:!1};let n=om(t);return n?{ok:!0,model:n,normalized:!0,requested:t,note:`normalized model "${t}" \u2192 "${n}" (Cursor provider alias \u2014 use "auto" or a composer id, not "cursor")`}:Ol(t)?{ok:!1,model:t,normalized:!1,requested:t,note:`model "${t}" is a Claude model but the worker provider is "cursor". Switch the provider to "claude" or pick a Cursor model.`}:{ok:!0,model:t,normalized:!1}}var zt="claude-sonnet-4-6",am={name:"claude",defaultModel:zt,preflightModel(e){return Us(e,zt)},start(e){let r=Us(e.model,zt);if(!r.ok)throw new Error(`claude provider model preflight failed: ${r.note}`);let t=r.model,n=im(e.stdoutPath,"a"),o=im(e.stderrPath,"a"),s=["ignore",n,o],i=wS("claude",["--model",t,"-p","--verbose","--permission-mode","bypassPermissions","--output-format","stream-json","--include-partial-messages",e.prompt],ue({cwd:e.worktreePath,detached:!0,stdio:s,env:De(process.env)}));if(sm(n),sm(o),!i.pid)throw new Error("failed to spawn claude worker process (is the `claude` CLI on PATH?)");return i.unref(),{pid:i.pid,model:t}}};Hr();C();import{closeSync as dm,existsSync as ES,openSync as pm}from"node:fs";import{spawn as mm}from"node:child_process";Hr();C();import{closeSync as lm,openSync as cm}from"node:fs";import{spawn as _S}from"node:child_process";var Ls=process.env.KYNVER_CODEX_DEFAULT_MODEL?.trim()||"gpt-5.4";function xS(){return De({...process.env,CI:"1",NO_COLOR:"1",HERMES_ACCEPT_HOOKS:process.env.HERMES_ACCEPT_HOOKS??"1"})}function um(e,r){let t=process.env.KYNVER_HERMES_CODEX_MAX_TURNS?.trim()||"40";return["chat","-q",r,"--provider","openai-codex","-m",e,"-Q","--accept-hooks","--max-turns",t,"--toolsets","hermes-cli"]}var Nl={name:"hermes-codex",defaultModel:Ls,preflightModel(e){return st(e,Ls)},start(e){let r=st(e.model,Ls);if(!r.ok)throw new Error(`hermes-codex provider model preflight failed: ${r.note}`);let t=r.model,n=cm(e.stdoutPath,"a"),o=cm(e.stderrPath,"a"),s=["ignore",n,o],i=Ae("hermes",["KYNVER_HERMES_BIN","HERMES_BIN"]),a=um(t,e.prompt),l=_S(i,a,ue({cwd:e.worktreePath,detached:!0,shell:!1,stdio:s,env:xS()}));if(lm(n),lm(o),!l.pid)throw new Error(`failed to spawn Hermes openai-codex worker (is \`${i}\` on PATH? run \`hermes auth status openai-codex\`)`);return l.unref(),{pid:l.pid,model:t}}};function PS(){return process.env.KYNVER_CODEX_DEFAULT_MODEL?.trim()||"gpt-5.4"}var Ar=PS();function AS(){return process.env.KYNVER_CODEX_BIN?.trim()||process.env.CODEX_BIN?.trim()||"codex"}function IS(){return De({...process.env,CI:"1",NO_COLOR:"1"})}function fm(e,r){return["exec","--sandbox","read-only","--ask-for-approval","never","--model",e,r]}function OS(e,r,t){if(!(process.platform!=="win32"&&ES("/usr/bin/script")))return mm(e,r,t);let o=[e,...r].map(s=>`'${s.replace(/'/g,"'\\''")}'`).join(" ");return mm("script",["-qfc",o,"/dev/null"],t)}var Tl={name:"codex",defaultModel:Ar,preflightModel(e){return st(e,Ar)},start(e){if(Pr().path==="hermes_openai_codex")return Nl.start(e);let t=st(e.model,Ar);if(!t.ok)throw new Error(`codex provider model preflight failed: ${t.note}`);let n=t.model,o=pm(e.stdoutPath,"a"),s=pm(e.stderrPath,"a"),i=["ignore",o,s],a=AS(),l=fm(n,e.prompt),c=OS(a,l,ue({cwd:e.worktreePath,detached:!0,shell:!1,stdio:i,env:IS()}));if(dm(o),dm(s),!c.pid)throw new Error(`failed to spawn Codex worker (is \`${a}\` on PATH? run \`codex login\` or set CODEX_API_KEY)`);return c.unref(),{pid:c.pid,model:n}}};var NS="claude-sonnet-4-6",vl="composer-2.5";function Bs(e,r){let t=e[r];return typeof t=="string"?t.trim():""}function gm(e){return e.toLowerCase()}function Ml(e=v()){let r=e.defaultModel?.trim();if(r)return r;let t=process.env.KYNVER_DEFAULT_MODEL?.trim();return t||NS}function Dl(e){let r=(e??"").toLowerCase();return!r||r.includes("composer")||r.includes("cursor")||r.includes("codex")||r.startsWith("gpt-")||r.startsWith("gpt5")?"cursor":/^claude[-_]/i.test(r)||/^(?:opus|sonnet|haiku)\b/i.test(r)?"claude":"cursor"}function TS(e,r){let t=e.trim().toLowerCase(),n=r?.trim();return t==="cursor"?{model:vl,provider:"cursor",rule:n&&n!=="cursor"?"explicit:model_provider_alias_overrode_provider":"explicit:model_provider_alias",requestedModel:e}:t==="claude"||t==="anthropic"?{model:zt,provider:"claude",rule:n&&n!=="claude"?"explicit:model_provider_alias_overrode_provider":"explicit:model_provider_alias",requestedModel:e}:null}function hm(e,r){return!!(e.includes("deep")&&e.includes("review")||e.includes("security")||e.includes("plan_author")||e.includes("plan-author")||r.includes("deep review")||r.includes("security review")||e.includes("plan")&&!e.includes("review")&&(e.includes("author")||e.includes("strategy")))}function DS(e){let r=gm(Bs(e,"executorRef")),t=Bs(e,"title").toLowerCase(),n=Bs(e,"priority")||"normal",o=gm(Bs(e,"roleLane"));if(r.includes("provider:codex")||r.startsWith("codex:"))return{provider:"codex",model:Ar,rule:"lane:codex_orchestration"};if(r.includes("cursor")||r.includes("composer")||r.includes("copilot")||o==="implementer"||o==="repair_implementer")return{provider:"cursor",rule:"lane:implementation"};if(r.includes("codex"))return{provider:"codex",model:Ar,rule:"lane:codex_orchestration"};if(r.includes("landing")||t.startsWith("land:")||t.includes(" merge"))return{provider:"cursor",rule:"lane:landing"};if(r.includes("review")||/^review[\s:]/.test(t)||o.includes("review"))return hm(r,t)||o==="deep_reviewer"?{provider:"cursor",rule:"lane:deep_review"}:{provider:"cursor",rule:"lane:review"};if(hm(r,t)||o==="plan_author")return{provider:"cursor",rule:"lane:planning"};if(n==="critical")return{provider:"cursor",rule:"priority:critical"};if(n==="high")return{provider:"cursor",rule:"priority:high"};if(n==="low")return{provider:"cursor",rule:"priority:low"};let s=Ml();return{model:s,provider:Dl(s),rule:"default:global"}}function Hs(e){let r;if(e.explicitModel?.trim()){let o=e.explicitModel.trim(),s=TS(o,e.explicitProvider);s?r=s:r={model:o,provider:e.explicitProvider?.trim()||Dl(o),rule:"explicit:cli",requestedModel:o}}else if(e.task&&Object.keys(e.task).length>0){let o=DS(e.task);r={...o,requestedModel:o.model}}else{let o=Ml();r={model:o,provider:e.explicitProvider?.trim()||Dl(o),rule:"default:global",requestedModel:o}}let t=bl({routing:r,task:e.task,explicitProvider:e.explicitProvider,explicitProviderIsOperatorOverride:e.explicitProviderIsOperatorOverride});if(!e.task||Object.keys(e.task).length===0||t.rule==="explicit:model_provider_alias"||t.rule==="explicit:model_provider_alias_overrode_provider"||t.rule==="explicit:cli"||Ye(t.provider)&&(e.explicitProviderIsOperatorOverride||Os(e.task)))return t;let n=Il({task:e.task,explicitProvider:e.explicitProvider??t.provider,explicitModel:t.model});return{provider:n.provider,model:n.provider==="codex"?n.model??t.model??Ar:t.model,rule:n.rule,requestedModel:t.requestedModel,orchestrationAudit:n.audit}}function km(e,r,t){return e||r||t||Ml()||zt}function ym(e,r){let t=Number(e);return!Number.isFinite(t)||t<=0?r:Math.floor(t)}function Rm(){return{maxTaskAttempts:ym(process.env.KYNVER_MAX_TASK_ATTEMPTS,Math.floor(tt("harness.maxTaskAttempts",4))),dispatchCooldownMs:ym(process.env.KYNVER_DISPATCH_COOLDOWN_MS,Math.floor(tt("harness.dispatchCooldownMs",5e3)))}}I();import LS from"node:path";W();Y();C();var Ul="kynver-harness:",bm="@runner:";function Wl(e){return e?.trim()?e.trim():null}function MS(e){let r=Wl(e);if(!r?.startsWith(Ul))return null;let t=r.slice(Ul.length),n=t.indexOf(bm);return n>=0?t.slice(0,n).trim()||null:t.trim()||null}function Ll(e,r){let t=e.trim(),n=r.trim();return`${Ul}${t}${bm}${n}`}function Bl(e,r){let t=Wl(r);return t?MS(e)===t:!1}function Fs(e){let r=Wl(e.workerLeaseOwner);return r&&Bl(r,e.runId)?r:Ll(e.runId,e.runnerId)}import vm from"node:os";Ue();Ue();import US from"node:os";function WS(e=process.env){return Me(e).boxKind}function Zn(e,r){let t=(r??US.hostname()).trim().toLowerCase().replace(/\s+/g,"-")||"unknown-host";return`${e}:${t}`}function Ir(e){return e?.trim()?e.trim():null}function ze(e={}){let r=e.env??process.env;return{runnerId:Ir(r.KYNVER_RUNTIME_ID)??Ir(r.OPENCLAW_RUNTIME_ID)??Ir(r.HOSTNAME)??vm.hostname(),hostname:Ir(r.HOSTNAME)??vm.hostname(),profile:Ir(r.KYNVER_RUNNER_PROFILE)??Ir(r.OPENCLAW_RUNNER_PROFILE),harnessRepo:Ir(r.KYNVER_HARNESS_REPO)??Ir(r.KYNVER_DEFAULT_REPO),runId:e.runId??null,instructionBundleVersion:Er()}}function Sm(e,r){return _(LS.join(E(e),"workers",R(r),"worker.json"),void 0)}async function $s(e,r){let t=L(e),n=String(r.agentOsId||"");if(!n)return{renewed:[],failed:[],skipped:[]};let o=F(r.baseUrl?String(r.baseUrl):void 0),s=await V(r.secret?String(r.secret):void 0,n,{baseUrl:o}),i=Number(r.leaseMs)>0?Math.floor(Number(r.leaseMs)):Ks,a=ze({runId:e}).runnerId,l=[],c=[],u=[];for(let d of Object.keys(t.workers||{})){let f=Sm(e,d);if(!f?.taskId||!f.agentOsId){u.push(d);continue}if(!$(f.pid)){u.push(d);continue}if(N(f).status==="done"){u.push(d);continue}let p=Fs({runId:e,workerLeaseOwner:f.leaseOwner??null,runnerId:a}),g=`${o}/api/agent-os/by-id/${encodeURIComponent(n)}/tasks/${encodeURIComponent(f.taskId)}/renew-lease`,k=await X(g,s,{leaseOwner:p,leaseDurationMs:i,...f.leaseToken?{leaseToken:f.leaseToken}:{}},{agentOsId:n,baseUrl:o});if(k.ok){l.push(d);continue}let h=k.response&&typeof k.response=="object"&&"reason"in k.response?String(k.response.reason??`http ${k.status}`):`http ${k.status}`;c.push({worker:d,reason:h})}return{renewed:l,failed:c,skipped:u}}function Cm(e,r){let t=L(e);for(let n of Object.keys(t.workers||{})){let o=Sm(e,n);if(!(!o||o.taskId!==r||!$(o.pid)||N(o).status==="done"))return!0}return!1}Ee();W();W();import{existsSync as nw,mkdirSync as ow}from"node:fs";import Xt from"node:path";var BS=/<!--\s*harness-contract:\s*(\{[\s\S]*?\})\s*-->/i,HS="next-action-fix:";function js(e){if(typeof e!="string")return null;let r=e.trim();return r.length?r:null}function wm(e){let r=e.trim().match(/github\.com\/([^/]+\/[^/]+)\/(?:pull|pulls)\/(\d+)/i);return r?`https://github.com/${r[1]}/pull/${r[2]}`:js(e)}function FS(e){let r=(e.title??"").trim().toLowerCase();if(r.startsWith("fix:")||r.startsWith("repair:"))return!0;let t=(e.executorRef??"").toLowerCase();return!!(t.startsWith(HS)||t.includes("repair")||t.includes("unblock"))}function $S(e){let r={repairEnforceOriginalPr:!1,targetPrUrl:null,targetPrBranch:null};if(!e)return r;let t=e.match(BS);if(!t?.[1])return r;try{let n=JSON.parse(t[1]),o=js(String(n.targetPrUrl??n.target_pr_url??"")),s=js(String(n.targetPrBranch??n.target_pr_branch??""));return{repairEnforceOriginalPr:n.repairEnforceOriginalPr===!0||n.repair_enforce_original_pr===!0||!!o,targetPrUrl:o?wm(o):null,targetPrBranch:s}}catch{return r}}function _m(e){if(!FS(e))return null;let r=$S(e.description),t=e.prUrl?wm(e.prUrl):null,n=r.targetPrUrl??t;return n?{targetPrUrl:n,targetPrBranch:r.targetPrBranch??js(e.branch)}:null}function xm(e){return["Repair target PR policy:","- Work on the existing target PR branch \u2014 do not open a duplicate repair PR by default.",`- Canonical target PR: ${e.targetPrUrl}`,...e.targetPrBranch?[`- Canonical target branch: \`${e.targetPrBranch}\` (checkout is already on this branch).`]:[],`- Reconcile ${e.targetPrUrl} in structured finalResult.targetPrReconciliation.`,"- Only supersede the original when the branch is inaccessible: set supersedesOriginalTargetPr: true with reason and close/comment on the original PR."]}function Hl(e){let r=e.ownedPaths.length?`Owned paths: ${e.ownedPaths.join(", ")}. Do not edit outside these paths without stopping and reporting why.`:"Owned paths: unrestricted for this worker, but keep edits tightly scoped.",t=!!e.model?.toLowerCase().includes("haiku"),n=t?"compact":"full",o=t?e.planId?`Active planId: ${e.planId}`:"No planId on this worker.":e.planId?`Active planId: ${e.planId}${e.taskId?` \xB7 taskId: ${e.taskId}`:""}`:"No planId on this worker \u2014 still emit progress when you touch plan-scoped work.",s=[...Jt(`worker.prompt.progress.${n}`).split(`
+`),o],i=Jt(`worker.prompt.merge_gate.${n}`).split(`
+`),a=Jt(`worker.prompt.plan_artifacts.${n}`).split(`
+`);return["You are running under the Kynver AgentOS runtime.","Immediately state your plan before editing.",r,`Worktree: ${e.worktreePath}`,`Progress heartbeat file: ${e.heartbeatPath}`,"After each major step, append one JSON line to the heartbeat file with fields: ts, phase, summary, changedFiles, blocker.","Final response must include files changed, verification commands, and unresolved risks.",...Jt("worker.prompt.core_rules").split(`
+`),"",...s,"",...i,"",...a,"",...e.contextEnvelopeMarkdown?.trim()?[e.contextEnvelopeMarkdown.trim(),""]:[],...e.personaMarkdown?.trim()?[e.personaMarkdown.trim(),""]:[],...e.instructionPolicyMarkdown?.trim()?["Operating rules (from AgentOS memory policy):",e.instructionPolicyMarkdown.trim(),""]:[],...e.memoryQualityMarkdown?.trim()?[e.memoryQualityMarkdown.trim(),""]:[],...e.repairTargetPrUrl?[...xm({targetPrUrl:e.repairTargetPrUrl,targetPrBranch:e.repairTargetBranch??null}),""]:[],"Task:",e.task].join(`
+`)}C();I();C();Hr();import{closeSync as $l,existsSync as Pm,mkdirSync as YS,openSync as Kl,statSync as JS,unlinkSync as Em}from"node:fs";import{spawn as qS}from"node:child_process";import zS from"node:os";import Xe from"node:path";import{existsSync as eo,readdirSync as KS}from"node:fs";import it from"node:path";var jS=/^\d{4}\.\d{1,2}\.\d{1,2}-[a-f0-9]+$/i;function VS(e){let t=e.split("-")[0].split(".");if(t.length!==3)return null;let[n,o,s]=t;return!n||!o||!s?null:+`${n}${o.padStart(2,"0")}${s.padStart(2,"0")}`}function GS(e){let r=it.join(e,"versions");if(!eo(r))return null;let t=null,n=-1;for(let o of KS(r,{withFileTypes:!0})){if(!o.isDirectory()||!jS.test(o.name))continue;let s=VS(o.name);s==null||s<=n||(n=s,t=it.join(r,o.name))}return t}function Vs(e){let r=e?.trim()||it.join(process.env.LOCALAPPDATA||"","cursor-agent"),t=it.join(r,"node.exe"),n=it.join(r,"index.js");if(eo(t)&&eo(n))return{nodeExe:t,indexJs:n,versionDir:r};let o=GS(r);if(!o)return null;let s=it.join(o,"node.exe"),i=it.join(o,"index.js");return!eo(s)||!eo(i)?null:{nodeExe:s,indexJs:i,versionDir:o}}var Fl="composer-2.5",XS=15e3,QS=6e4,ZS=3e4;function eC(e,r,t){return{executable:e,prefixArgs:[r],shell:!1,detached:!0,bundledVersionDir:t}}function rC(e){if(process.platform==="win32"){let r=/\.(cmd|bat)$/i.test(e),t=/node\.exe$/i.test(e)&&Pm(Xe.join(Xe.dirname(e),"index.js"));if(r||t||e==="agent"){let o=r?Vs(Xe.dirname(e)):t?{nodeExe:e,indexJs:Xe.join(Xe.dirname(e),"index.js"),versionDir:Xe.dirname(e)}:Vs();if(o)return eC(o.nodeExe,o.indexJs,o.versionDir);throw new Error("Cursor Agent on Windows has no headless bundled node.exe under %LOCALAPPDATA%\\cursor-agent\\versions\\\u2026. Run `agent login` / update Cursor Agent CLI, use `--provider claude`, or set KYNVER_CURSOR_AGENT_ROOT to the cursor-agent folder.")}}return{executable:e,prefixArgs:[],shell:!1,detached:!0}}function tC(){let e=process.env.KYNVER_CURSOR_AGENT_BIN?.trim()||process.env.CURSOR_AGENT_BIN?.trim();if(e)return e;if(process.platform==="win32"){let r=Vs(process.env.KYNVER_CURSOR_AGENT_ROOT?.trim()||void 0);if(r)return r.nodeExe;let t=Xe.join(process.env.LOCALAPPDATA||"","cursor-agent","agent.cmd");if(Pm(t))return t}return"agent"}function nC(e,r){return De({...process.env,CI:"1",NO_COLOR:"1",...r.bundledVersionDir?{CURSOR_INVOKED_AS:Xe.basename(e)||"agent.cmd"}:{}})}function Am(e){e<=0||Atomics.wait(new Int32Array(new SharedArrayBuffer(4)),0,0,e)}function jl(e,r){let t=process.env[e];if(!t)return r;let n=Number(t);return Number.isFinite(n)&&n>=0?Math.floor(n):r}function oC(){let e=process.env.KYNVER_CURSOR_START_LOCK_DIR?.trim()||Xe.join(zS.homedir(),".kynver","locks");return YS(e,{recursive:!0}),Xe.join(e,"cursor-agent-start.lock")}function sC(){if(process.env.KYNVER_CURSOR_START_LOCK==="0")return()=>{};let e=oC(),r=jl("KYNVER_CURSOR_START_LOCK_TIMEOUT_MS",QS),t=jl("KYNVER_CURSOR_START_LOCK_STALE_MS",ZS),n=Date.now();for(;;)try{let o=Kl(e,"wx");return $l(o),()=>{try{Em(e)}catch{}}}catch(o){if(o.code!=="EEXIST")throw o;try{if(Date.now()-JS(e).mtimeMs>t){Em(e);continue}}catch{continue}if(Date.now()-n>r)throw new Error(`timed out waiting for Cursor agent start lock: ${e}`);Am(250)}}var Im={name:"cursor",defaultModel:Fl,preflightModel(e){return Ws(e,Fl)},start(e){let r=Ws(e.model,Fl);if(!r.ok)throw new Error(`cursor provider model preflight failed: ${r.note}`);let t=r.model,n=Kl(e.stdoutPath,"a"),o=Kl(e.stderrPath,"a"),s=["ignore",n,o],i=tC(),a=rC(i),l=sC(),c;try{c=qS(a.executable,[...a.prefixArgs,"-p","--force","--trust","--workspace",e.worktreePath,"--output-format","stream-json","--stream-partial-output","--model",t,e.prompt],ue({cwd:e.worktreePath,detached:a.detached,shell:a.shell,stdio:s,env:nC(i,a)})),Am(jl("KYNVER_CURSOR_START_LOCK_HOLD_MS",XS))}finally{l(),$l(n),$l(o)}if(!c.pid)throw new Error(`failed to spawn Cursor agent worker (is \`${i}\` on PATH? run \`agent login\` or set CURSOR_API_KEY)`);return c.unref(),{pid:c.pid,model:t}}};var Gs={claude:am,codex:Tl,cursor:Im},Om=null;function Nm(e){if(Om)return Om;let r=e?.trim();if(r){let o=Gs[r];if(!o)throw new Error(`unknown worker provider "${r}" \u2014 supported: ${Object.keys(Gs).join(", ")}`);return o}let t=Xn(v().workerProvider),n=Gs[t];if(!n)throw new Error(`unknown worker provider "${t}" \u2014 supported: ${Object.keys(Gs).join(", ")}`);return n}C();import{spawn as YC}from"node:child_process";import{existsSync as JC,openSync as qC,closeSync as gf}from"node:fs";import hf from"node:path";import{fileURLToPath as zC}from"node:url";W();function Ys(e){return!!e.completionReportedAt?.trim()}function Vl(e,r,t){e.completionReportedAt=t.completionReportedAt,e.completionOutcome=t.completionOutcome,t.completionResponse!==void 0&&(e.completionResponse=t.completionResponse),G(r,e)}function iC(e){if(typeof e!="string")return null;let r=e.trim();return r.length?r:null}function Gl(e){return!!(iC(e.completionBlocker)||e.completionOutcome==="rejected")}function at(e){return Ys(e)&&!Gl(e)}W();Y();I();import io from"node:path";function Yl(e){return e&&typeof e=="object"&&!Array.isArray(e)?e:null}function ro(e){if(typeof e!="string")return null;let r=e.trim();return r.length?r:null}var aC=new Set(["review_scheduled","review_already_scheduled","skipped_terminal_task","closed","dispatched","dispatch_already_done"]);function Tm(e){let r=Yl(e);if(!r)return{routeOutcome:null,taskAdvanced:!1,detail:null};let t=ro(r.outcome),n=ro(r.detail)??ro(r.error),o=Yl(r.task),s=Yl(r.closedTask),i=o?ro(o.status):null,a=s?ro(s.status):null,l=t!==null&&aC.has(t)||i==="awaiting_review"||i==="done"||a==="done";return{routeOutcome:t,taskAdvanced:l,detail:n}}function Dm(e){return e.taskAdvanced}W();Bn();var lC="expert-lane-pr-review:",cC="plan-review-task",uC="scheduledjob:";function Mm(e){if(!e)return null;let r=e.trim().toLowerCase();return r.length?r:null}function Um(e){let r=(e.executorRef??"").toLowerCase();if(r.startsWith(lC)||r===cC||r.startsWith("daemon-review:"))return!0;if(r.startsWith(uC)&&e.parentTaskId){let n=Mm(e.personaSlug);if(n==="lorentz"||n==="dalton")return!0}let t=(e.title??"").toLowerCase();if(t.includes("expert pr review"))return!0;if(e.parentTaskId&&(t.startsWith("review:")||t.includes("review required")||t.includes("runtime review"))){let n=Mm(e.personaSlug);if(n==="lorentz"||n==="dalton")return!0}return!1}var Wm=/^(lane:)?(review|deep_review|planning|landing)(:|$)/i,dC=new Set(kl()),pC=/no commits between/i;function Lm(e){return!!(e&&pC.test(e))}function ke(e){if(typeof e!="string")return null;let r=e.trim();return r.length?r:null}function Bm(e){return!e?.checked||e.headIsAncestorOfBase!==!1?null:ke(e.head)}function Jl(e){if(e==null)return null;let t=(typeof e=="string"?e:typeof e=="object"&&e!==null&&"summary"in e?String(e.summary??""):JSON.stringify(e)).match(/https?:\/\/[^\s)>"]+\/(?:pull|pulls|merge_requests|pull-requests)\/\d+/i);return t?ke(t[0]):null}function mC(e,r,t){let n=r.trim();if(!n)return null;let o=t.git(e,["rev-list","--count",`${n}..HEAD`]);if(o.status!==0)return null;let s=Number.parseInt(o.stdout.trim(),10);return Number.isFinite(s)?s:null}function fC(e,r){if(r.changedFiles.length>0)return!1;let t=ke(e.personaSlug)?.toLowerCase();if(t&&dC.has(t))return!0;let n=ke(e.routingRule)??"";return!!(n&&Wm.test(n))}function gC(e,r){if(e.changedFiles.length>0)return!0;let t=ke(r?.baseRef);if(t&&r?.exec&&r.worktreePath){let n=mC(r.worktreePath,t,r.exec);if(n===0)return!1;if(n!==null&&n>0)return!0}return!!(ke(e.headCommit)||Bm(e.gitAncestry))}function ql(e){if(!e.dispatched)return{required:!1,reason:"not_dispatched"};if(Um({title:e.taskTitle??void 0,personaSlug:e.personaSlug,parentTaskId:e.parentTaskId,executorRef:e.executorRef}))return{required:!1,reason:"expert_review_task"};let r=ke(e.routingRule)??"";if(r&&Wm.test(r))return{required:!1,reason:"review_lane"};let t=e.worker??{personaSlug:e.personaSlug,routingRule:e.routingRule};if(fC(t,e.snapshot))return{required:!1,reason:"review_artifact"};if(ke(e.patchPath)||ke(e.artifactBundlePath))return{required:!1,reason:"patch_or_bundle"};if(ke(e.repairTargetPrUrl))return{required:!1,reason:"repair_target_pr"};if(ke(e.prUrl)??ke(e.taskPrUrl)??ke(e.snapshot.prUrl))return{required:!1,reason:"already_has_pr"};let s=e.exec&&e.baseRef?{baseRef:e.baseRef,exec:e.exec,worktreePath:e.snapshot.worktreePath}:void 0;return gC(e.snapshot,s)?{required:!0,snapshot:e.snapshot}:{required:!1,reason:"no_work_product"}}function Hm(e,r){return{changedFiles:e.changedFiles,branch:e.branch,worktreePath:e.worktreePath,gitAncestry:e.gitAncestry,finalResult:e.finalResult,headCommit:ke(r?.headCommit)??Bm(e.gitAncestry),prUrl:ke(r?.prUrl)??null}}import{spawnSync as hC}from"node:child_process";function $m(e){let r=e.trim();if(!r)return null;let t=r.match(/^git@github\.com:([^/]+\/[^/\s]+?)(?:\.git)?$/i);if(t)return Fm(t[1]);let n=r.match(/^ssh:\/\/git@github\.com\/([^/]+\/[^/\s]+?)(?:\.git)?$/i);if(n)return Fm(n[1]);try{let o=new URL(r.includes("://")?r:`https://${r}`);if(o.hostname.toLowerCase()!=="github.com")return null;let s=o.pathname.replace(/^\/+|\/+$/g,"").split("/");if(s.length<2)return null;let[i,a]=s;return!i||!a?null:`${i}/${a.replace(/\.git$/i,"")}`}catch{return null}}function Fm(e){let r=e.split("/").filter(Boolean);if(r.length<2)return null;let t=r[0],n=r[1].replace(/\.git$/i,"");return t&&n?`${t}/${n}`:null}Ee();function kC(e,r,t){try{let n=hC(e,t,{cwd:r,encoding:"utf8"});return{status:n.status,stdout:(n.stdout||"").trim(),stderr:(n.stderr||"").trim(),error:n.error?n.error.message:null}}catch(n){return{status:null,stdout:"",stderr:"",error:n.message}}}var qs={git:(e,r)=>re(e,r),gh:(e,r)=>kC("gh",e,r)};function yC(e){return e.split(`
+`).map(r=>r.trim()).find(Boolean)??""}function Km(e,r){let t=r.git(e,["remote","get-url","origin"]);return t.status!==0?null:$m(t.stdout)}function to(e,r){let t=r.git(e,["rev-parse","HEAD"]);return t.status!==0?null:t.stdout.trim()||null}function Js(e,r,t,n){let o=n.gh(e,["pr","list","--repo",r,"--head",t,"--state","open","--json","url","--limit","1"]);if(o.status!==0)return null;try{return JSON.parse(o.stdout)[0]?.url?.trim()||null}catch{return null}}function zs(e){let{worktreePath:r,branch:t,commitMessage:n,hasDirtyFiles:o,exec:s}=e;if(o){let l=s.git(r,["add","-A"]);if(l.status!==0)return{ok:!1,committed:!1,pushed:!1,detail:l.stderr||l.stdout||l.error||"git add failed"};let c=s.git(r,["commit","-m",n]);if(c.status!==0)return{ok:!1,committed:!1,pushed:!1,detail:c.stderr||c.stdout||c.error||"git commit failed"}}let i=s.git(r,["push","-u","origin",t]);if(i.status!==0)return{ok:!1,committed:o,pushed:!1,detail:i.stderr||i.stdout||i.error||"git push failed"};let a=to(r,s)??void 0;return{ok:!0,committed:o,pushed:!0,headCommit:a}}function jm(e){let r=Js(e.worktreePath,e.repo,e.branch,e.exec);if(r)return{ok:!0,prUrl:r,created:!1};let t=e.exec.gh(e.worktreePath,["pr","create","--repo",e.repo,"--base",e.base,"--head",e.branch,"--title",e.title,"--body",e.body,"--draft"]);if(t.status!==0)return{ok:!1,detail:t.stderr||t.stdout||t.error||"gh pr create failed"};let n=RC(t.stdout)??Js(e.worktreePath,e.repo,e.branch,e.exec);return n?{ok:!0,prUrl:n,created:!0}:{ok:!1,detail:"gh pr create succeeded but no PR URL was parsed"}}function RC(e){let t=yC(e).match(/https?:\/\/[^\s]+\/pull\/\d+/i);return t?t[0]:null}function bC(e){return e.gh(process.cwd(),["--version"]).status===0}function vC(e,r){return`AgentOS harness: ${e} (${r})`}function SC(e,r,t){return["Automated PR-ready handoff from the Kynver harness runtime.","",e?`AgentOS task: \`${e}\``:"",`Harness worker: \`${r}\` \xB7 run \`${t}\``,"","Opened by orchestrator completion enforcement so production review receives a reviewable artifact."].filter(Boolean).join(`
+`)}function zl(e){if(e.snapshot.changedFiles.length===0)return{ok:!0,prUrl:e.prUrl,headCommit:e.snapshot.headCommit??to(e.snapshot.worktreePath,e.exec)??void 0};let r=zs({worktreePath:e.snapshot.worktreePath,branch:e.snapshot.branch,commitMessage:e.commitMessage,hasDirtyFiles:!0,exec:e.exec});return r.ok?{ok:!0,prUrl:e.prUrl,headCommit:r.headCommit??e.snapshot.headCommit??void 0,committed:r.committed,pushed:r.pushed}:{ok:!1,reason:`PR-ready handoff blocked: ${r.detail??"git commit/push failed"}`,nextAction:"Commit and push the dirty worker changes to the existing PR branch, then rerun `kynver worker complete`."}}function Xs(e,r=qs){let t=e.prUrlHint??Jl(e.status.finalResult)??null,n=Hm(e.status,{prUrl:t,headCommit:null}),o=e.run.baseCommit?.trim()||e.run.base?.trim()||"origin/main";if(!ql({dispatched:e.worker.dispatched,routingRule:e.worker.routingRule,personaSlug:e.worker.personaSlug,prUrl:t,taskTitle:e.worker.taskTitle,executorRef:e.worker.executorRef,parentTaskId:e.worker.parentTaskId,taskPrUrl:e.worker.taskPrUrl,repairTargetPrUrl:e.worker.repairTargetPrUrl,baseRef:o,exec:r,worker:e.worker,snapshot:n}).required)return t?zl({snapshot:n,prUrl:t,commitMessage:`chore(harness): update PR handoff for ${e.worker.name}`,exec:r}):{ok:!0};if(t)return zl({snapshot:n,prUrl:t,commitMessage:`chore(harness): update PR handoff for ${e.worker.name}`,exec:r});if(!bC(r)){let k=n.changedFiles.length;return{ok:!1,reason:`PR-ready handoff blocked: ${k?`${k} uncommitted change(s) with no PR URL`:"committed branch with no PR URL"}`,nextAction:"Install and authenticate GitHub CLI (`gh auth login`), then commit, push, and run `gh pr create` (or rerun `kynver worker complete` after the PR exists)."}}let i=Km(n.worktreePath,r);if(!i)return{ok:!1,reason:"PR-ready handoff blocked: could not resolve github.com origin for the worktree",nextAction:"Ensure `origin` points at GitHub, push the branch, open a PR, and rerun `kynver worker complete`."};let a=e.worker.repairTargetPrUrl?.trim();if(a){let k=!1,h=!1,b=n.headCommit??to(n.worktreePath,r)??void 0;if(n.changedFiles.length>0){let x=zs({worktreePath:n.worktreePath,branch:n.branch,commitMessage:`fix(harness): repair target PR ${a}`,hasDirtyFiles:!0,exec:r});if(!x.ok)return{ok:!1,reason:`PR-ready handoff blocked: ${x.detail??"git commit/push failed"}`,nextAction:"Commit and push to the target PR branch, then rerun `kynver worker complete`."};k=x.committed,h=x.pushed,b=x.headCommit??b}else{let x=r.git(n.worktreePath,["push","-u","origin",n.branch]);if(x.status!==0&&!/already up to date/i.test(x.stderr||x.stdout))return{ok:!1,reason:`PR-ready handoff blocked: ${x.stderr||x.stdout||"git push failed"}`,nextAction:"Push the target branch to origin, then rerun `kynver worker complete`."};h=x.status===0}return{ok:!0,prUrl:a,headCommit:b,committed:k,pushed:h}}let l=Js(n.worktreePath,i,n.branch,r);if(l)return zl({snapshot:n,prUrl:l,commitMessage:`chore(harness): update PR handoff for ${e.worker.name}`,exec:r});let c=n.changedFiles.length>0,u=!1,d=!1,f=n.headCommit??void 0,m=zs({worktreePath:n.worktreePath,branch:n.branch,commitMessage:`chore(harness): PR-ready handoff for ${e.worker.name}`,hasDirtyFiles:c,exec:r});if(c&&!m.ok)return{ok:!1,reason:`PR-ready handoff blocked: ${m.detail??"git commit/push failed"}`,nextAction:"Commit and push the branch, run `gh pr create`, then rerun `kynver worker complete`."};if(c){if(u=m.committed,d=m.pushed,!m.ok)return{ok:!1,reason:`PR-ready handoff blocked: ${m.detail??"git push failed"}`,nextAction:"Fix git auth or merge conflicts, push the branch, run `gh pr create`, then rerun `kynver worker complete`."}}else{let k=r.git(n.worktreePath,["push","-u","origin",n.branch]);if(k.status!==0&&!/already up to date/i.test(k.stderr||k.stdout))return{ok:!1,reason:`PR-ready handoff blocked: ${k.stderr||k.stdout||k.error||"git push failed"}`,nextAction:"Push the branch to origin, run `gh pr create`, then rerun `kynver worker complete`."};d=k.status===0}f=m.headCommit??f??to(n.worktreePath,r)??void 0;let p=e.run.base?.trim()||"main",g=jm({worktreePath:n.worktreePath,repo:i,branch:n.branch,base:p.replace(/^origin\//,""),title:vC(e.worker.name,e.worker.runId),body:SC(e.worker.taskId,e.worker.name,e.worker.runId),exec:r});if(!g.ok||!g.prUrl){if(Lm(g.detail))return{ok:!0,headCommit:f??void 0,committed:u,pushed:d};let k=n.changedFiles.length;return{ok:!1,reason:`PR-ready handoff blocked: ${k?`${k} uncommitted change(s) and no PR URL after handoff attempt`:"no PR URL after handoff attempt"}${g.detail?` (${g.detail})`:""}`,nextAction:"Run `gh pr create` on the worker branch (or fix `gh` auth), attach the PR URL to the task, then rerun `kynver worker complete`."}}return{ok:!0,prUrl:g.prUrl,headCommit:f??void 0,committed:u,pushed:d,created:g.created}}Y();Ln();function Qs(e){return e.filter(r=>{let t=r.trim(),n=t.startsWith("??")?t.slice(2).trim():t.length>3?t.slice(3).trim():t;return n!=="node_modules"&&!n.startsWith("node_modules/")})}function Vm(e){let r=e.trim();return r.startsWith("??")?r.slice(2).trim():r.length>3&&/^[ MADRCU?!]{2} /.test(r.slice(0,3))?r.slice(3).trim():r}function Gm(e){return Array.isArray(e)?e.map(r=>typeof r=="string"?r.trim():"").filter(Boolean):[]}function Ym(e){return e&&typeof e=="object"&&!Array.isArray(e)?e:null}function qm(e){let r=Ym(e);if(!r)return[];let t=Ym(r.worktreeHandoff),n=Gm(t?.disposableArtifactsRemoved);return n.length?n:Gm(r.disposableArtifactsRemoved)}function Jm(e){return e.replace(/\\/g,"/").replace(/^\.\//,"").replace(/\/+$/,"")}function zm(e,r){let t=Qs(e);if(t.length===0)return!0;if(r.length===0)return!1;let n=new Set(r.map(o=>Jm(o)));return t.every(o=>{let s=Jm(Vm(o));return n.has(s)})}function Zs(e){if(typeof e!="string")return null;let r=e.trim();return r.length?r:null}function Xm(e){return Array.isArray(e)?e.map(r=>typeof r=="string"?r.trim():"").filter(Boolean):[]}function CC(e){return e==null?!1:typeof e=="string"?e.trim().length>0:typeof e=="boolean"?e:Array.isArray(e)?e.length>0:typeof e=="object"?Object.keys(e).length>0:!0}function wC(e){let r=Xm(e.disposableArtifactsRemoved),t=qm(e.finalResult);return[...new Set([...r,...t])]}function Qm(e){let r=Xm(e.changedFiles),t=Qs(r),n=wC(e),o=t.length===0||zm(r,n);return Zs(e.prUrl)?o?{allowed:!0,state:"pr_handoff",materialDirtyCount:0}:{allowed:!1,state:"dirty_worktree",materialDirtyCount:t.length,detail:`Worktree has ${t.length} uncommitted change(s) with a PR attached; commit or discard before completing`}:Zs(e.headCommit)?o?{allowed:!0,state:"commit_handoff",materialDirtyCount:0}:{allowed:!1,state:"dirty_worktree",materialDirtyCount:t.length,detail:`Worktree has ${t.length} uncommitted change(s) on top of a commit; commit or discard before completing`}:Zs(e.artifactBundlePath)||Zs(e.patchPath)?o?{allowed:!0,state:"commit_handoff",materialDirtyCount:0}:{allowed:!1,state:"dirty_worktree",materialDirtyCount:t.length,detail:`Worktree has ${t.length} uncommitted change(s) with a patch/bundle handoff; clean the tree before completing`}:o?{allowed:!0,state:"clean",materialDirtyCount:0}:CC(e.finalResult)?{allowed:!1,state:"dirty_worktree_no_pr",materialDirtyCount:t.length,detail:`Worktree has ${t.length} uncommitted change(s) with no commit or PR; commit, open a PR, discard, or remove one-off files via \`kynver worker discard-disposable\` before completing`}:{allowed:!1,state:"dirty_worktree",materialDirtyCount:t.length,detail:`Worktree has ${t.length} uncommitted change(s) with no final result`}}W();Y();C();import _C from"node:path";var xC=new Set(["awaiting_review","blocked","done","needs_input","waiting","scheduled","ready","cancelled","failed"]);function Zm(e){return!!(typeof e.completionReportedAt=="string"&&e.completionReportedAt.trim())}function EC(e){if(typeof e=="string"){let r=e.trim();return r.length?r:null}if(e&&typeof e=="object"&&!Array.isArray(e)){let r=e,t=r.summary??r.finalSummary??r.message;if(typeof t=="string"&&t.trim())return t.trim();try{return JSON.stringify(e)}catch{return null}}return null}function PC(e){let r=e.finalResult??null,t=typeof e.lastHeartbeatSummary=="string"?e.lastHeartbeatSummary:EC(r);return{finalResult:r??t??"completed",summary:t}}function Xl(e,r,t){if(Zm(e)&&e.status==="done"&&e.completionSnapshot!=null)return;let n=new Date().toISOString(),o=PC(r),s=t?.source?.trim();e.completionReportedAt=n,e.completionSnapshot=o,e.status="done",s&&(e.completionAckSource=s),G(e.runId,e)}function AC(e){let r=new Map,n=e.response?.tick?.filteredItems;if(!Array.isArray(n))return r;for(let o of n){if(o.kind!=="task"||typeof o.id!="string")continue;let s=typeof o.taskStatus=="string"?o.taskStatus.trim():"";s&&r.set(o.id,s)}return r}function ef(e,r){let t=AC(r);if(t.size===0)return[];let n=L(e),o=[];for(let s of Object.keys(n.workers||{})){let i=_(_C.join(E(n.id),"workers",R(s),"worker.json"),void 0);if(!i?.taskId||Zm(i))continue;let a=t.get(i.taskId);if(!a||a==="running"||!xC.has(a))continue;let l=N(i,{base:n.base,baseCommit:n.baseCommit});Xl(i,l,{source:`board-task-${a}`}),o.push({worker:s,taskId:i.taskId,taskStatus:a})}return o}C();C();import ei from"node:path";var IC=/^[a-z0-9][a-z0-9._-]{0,127}$/i,OC=/^[a-z0-9][a-z0-9._-]{0,63}$/i,Ql=new Set(["undefined","null"]),rf="usage: kynver worker <action> --run RUN_ID --name WORKER_NAME";function no(e){let r=e.trim();if(!IC.test(r))throw new Error(`invalid run id: ${e}`);return r}function tf(e){let r=e.trim();if(!OC.test(r))throw new Error(`invalid worker name: ${e}`);return r}function Zl(e){return typeof e=="string"?e.trim():""}function He(e){let r=Zl(e.run),t=Zl(e.name);return(!r||Ql.has(r))&&Sr(`missing --run RUN_ID (${rf})`),(!t||Ql.has(t))&&Sr(`missing --name WORKER_NAME (${rf})`),{runId:no(r),workerName:tf(t)}}function ri(e){let r=Zl(e.run);return(!r||Ql.has(r))&&Sr("missing --run RUN_ID (usage: kynver run status --run RUN_ID)"),no(r)}function ec(e){let r=ei.resolve(e);if(r.includes(".."))throw new Error("repo path must not contain .. segments");return r}function NC(e,r){return r.map(t=>{let n=ei.resolve(e,t),o=ei.relative(e,n);if(o.startsWith("..")||ei.isAbsolute(o))throw new Error(`owned path escapes repo: ${t}`);return n})}function TC(e){return!Number.isFinite(e)||e<=0||e>500?40:Math.floor(e)}async function nf(e,r,t){let n=await fetch(e,{method:"POST",headers:Be(r),body:JSON.stringify(t)}),o=null;try{o=await n.json()}catch{o=null}return{ok:n.ok,status:n.status,parsed:o}}function DC(e){if(e&&typeof e=="object"){let r=e.error;if(typeof r=="string"&&r.trim())return r.trim()}}function of(e){return e&&typeof e=="object"&&!Array.isArray(e)?e:null}function oo(e){if(typeof e!="string")return null;let r=e.trim();return r.length?r:null}function MC(e){return e.completionBlocker?`blocked:${e.completionBlocker}`:e.completionOutcome?e.completionOutcome:e.completionReportedAt?"completion_acknowledged":e.finished?"worker_finished":"in_progress"}function UC(e){return e.completionBlocker?"Resolve completion blocker, then rerun `kynver worker complete`.":e.completionOutcome==="review_scheduled"||e.completionOutcome==="review_already_scheduled"?"Await review lane and landing decision in Command Center.":e.completionOutcome==="needs_attention"?"Inspect blocker/attention reason in Command Center and dispatch a repair task.":e.finished&&!e.completionReportedAt?"Post completion acknowledgement to AgentOS (`kynver worker complete`).":null}function af(e){let r=e?.trim();return r?/completion acknowledged but board not advanced/i.test(r)&&/task already terminal/i.test(r):!1}function WC(e){return e.prUrl?"pr_handoff":e.headCommit?"commit_handoff":e.changedFiles.length>0?"dirty_worktree":"none"}function so(e,r){(e.completionBlocker??void 0)!==(r??void 0)&&(r?e.completionBlocker=r:delete e.completionBlocker,G(e.runId,e))}function LC(e){e.completionBlocker&&(delete e.completionBlocker,G(e.runId,e))}function ti(e){return e?{base:e.base,baseCommit:e.baseCommit}:{}}function BC(e,r){return{...e,...r.prUrl?{prUrl:r.prUrl}:{},...r.headCommit?{headCommit:r.headCommit}:{}}}async function ao(e){let{runId:r,workerName:t}=He(e),n=we(r,t),o=L(n.runId),s=N(n,ti(o)),i=(e.agentOsId?String(e.agentOsId):n.agentOsId)||"",a=(e.taskId?String(e.taskId):n.taskId)||null;if(!ne(s))return{ok:!0,skipped:!0,reason:"worker-not-finished"};if(n.localOnly)return{ok:!0,skipped:!0,reason:"local-only-worker"};if(!i)return{ok:!1,reason:"missing agentOsId"};let l=e.force===!0||e.force==="true";if(!l&&at(n))return{ok:!0,skipped:!0,reason:"completion-already-acknowledged",httpStatus:200};if(!l&&Gl(n)&&LC(n),!(e.skipPrHandoff===!0||e.skipPrHandoff==="true")&&n.dispatched&&a){let P=Xs({worker:n,run:o,status:s});if(!P.ok)return so(n,P.reason),{ok:!1,reason:P.reason,nextAction:P.nextAction,completionBlocked:!0};(P.prUrl||P.headCommit)&&(s=N(n,ti(o)),s=BC(s,P))}let u=s.gitAncestry.headIsAncestorOfBase===!1&&s.gitAncestry.head?s.gitAncestry.head:s.headCommit;if(n.dispatched){let P=Qm({changedFiles:s.changedFiles,finalResult:s.finalResult,prUrl:s.prUrl,headCommit:u,disposableArtifactsRemoved:n.disposableArtifactsRemoved});if(!P.allowed){let T=P.detail??`worktree completion blocked (${P.state})`;return so(n,T),{ok:!1,reason:T,nextAction:"Clean the worktree (commit, open a PR, or `kynver worker discard-disposable --path <file>`), then rerun `kynver worker complete`.",completionBlocked:!0}}}let d=F(e.baseUrl?String(e.baseUrl):void 0),f=e.secret?String(e.secret):void 0,m=await V(f,i,{baseUrl:d}),p=`${d}/api/agent-os/by-id/${encodeURIComponent(i)}/harness/completion`,g={...s};n.disposableArtifactsRemoved?.length&&(g.disposableArtifactsRemoved=n.disposableArtifactsRemoved);let k={source:"kynver-harness",agentOsId:i,runId:n.runId,workerName:n.name,taskId:a,leaseToken:n.leaseToken??null,startedAt:n.startedAt,finishedAt:s.lastActivityAt||new Date().toISOString(),status:n.leaseToken?{...g,leaseToken:n.leaseToken}:g,workerInjection:{instructionPolicyFingerprint:n.instructionPolicyFingerprint??null,instructionPolicyEvidence:n.instructionPolicyEvidence??null,memoryQualityCapture:n.memoryQualityCapture??null,policyAt:n.instructionPolicyEvidence&&typeof n.instructionPolicyEvidence=="object"&&"policyAt"in n.instructionPolicyEvidence&&typeof n.instructionPolicyEvidence.policyAt=="string"?n.instructionPolicyEvidence.policyAt:null,personaSlug:n.personaSlug??null,personaEvidence:n.personaEvidence??null,contextEnvelopeEvidence:n.contextEnvelopeEvidence??null}},h=await nf(p,m,k);if((h.status===401||h.status===403)&&!f){let P=await Tp(i,{baseUrl:d});P&&P!==m&&(m=P,h=await nf(p,m,k))}if(h.ok){let P=Tm(h.parsed);if(!Dm(P)){let w=`completion acknowledged but board not advanced: ${P.detail??(P.routeOutcome?`harness completion returned ${P.routeOutcome}`:"harness completion did not advance the linked task")}`;so(n,w);let le={completionReportedAt:new Date().toISOString(),completionOutcome:"rejected",completionResponse:h.parsed};return Vl(n,n.runId,le),{ok:!1,httpStatus:h.status,response:h.parsed,reason:w,completionBlocked:!0}}so(n,void 0);let T=P.routeOutcome??"acknowledged",K={completionReportedAt:new Date().toISOString(),completionOutcome:"acknowledged",completionResponse:h.parsed};Vl(n,n.runId,K),Xl(n,s,{source:"harness-completion"});let B=s.prUrl;return{ok:!0,httpStatus:h.status,response:h.parsed,reason:T,...B?{prHandoff:{prUrl:B}}:{}}}let b=h.status===401||h.status===403,x=DC(h.parsed)??(b?"runner token unauthorized":"non-2xx response"),M=b?`completion replay rejected (${h.status}): ${x}`:`completion replay failed (${h.status}): ${x}`;return so(n,M),{ok:!1,httpStatus:h.status,response:h.parsed,completionBlocked:!0}}async function ni(e){try{let{runId:r,workerName:t}=He(e),n=we(r,t),o=L(n.runId),s=N(n,ti(o)),i=(e.agentOsId?String(e.agentOsId):n.agentOsId)||"",a=(e.taskId?String(e.taskId):n.taskId)||null;if(!ne(s)){console.log(JSON.stringify({worker:n.name,runId:n.runId,status:"skipped",reason:"worker-not-finished",workerStatus:s.status,alive:s.alive},null,2));return}if(n.localOnly){console.log(JSON.stringify({worker:n.name,runId:n.runId,status:"skipped",reason:"local-only-worker"},null,2));return}i||(console.error("worker complete requires --agent-os-id (or an agentOsId persisted at worker start)"),process.exit(1));let l=await ao(e);console.log(JSON.stringify({worker:n.name,runId:n.runId,...l.skipped?{status:"skipped"}:{},...l.reason?{reason:l.reason}:{},...l.nextAction?{nextAction:l.nextAction}:{},...l.completionBlocked?{completionBlocked:l.completionBlocked}:{},agentOsId:i,taskId:a,httpStatus:l.httpStatus,response:l.response},null,2)),l.ok||process.exit(1)}catch(r){console.error(`worker complete failed: ${r.message}`),process.exit(1)}}function tc(e){let{runId:r,workerName:t}=He(e),n=we(r,t),o=L(n.runId),s=N(n,ti(o));de(io.join(n.workerDir,"last-status.json"),s),console.log(JSON.stringify(s,null,2))}function HC(e){return{full:`kynver worker list --run ${e} --full`,blocked:`kynver worker list --run ${e} --blocked`,running:`kynver worker list --run ${e} --running`,task:`kynver worker list --run ${e} --task <task-id>`,worker:`kynver worker list --run ${e} --worker <worker>`,runFull:`kynver run status --run ${e} --full`,workerFull:`kynver worker status --run ${e} --name <worker>`,workerTail:`kynver worker tail --run ${e} --name <worker> --lines 80`}}function rc(e){if(typeof e!="string")return;let r=e.trim();return r.length?r:void 0}function FC(e){let r={};(e.blocked===!0||e.blocked==="true")&&(r.blocked=!0),(e.running===!0||e.running==="true")&&(r.running=!0);let t=rc(e.task??e.taskId);t&&(r.task=t);let n=rc(e.worker??e.name);n&&(r.worker=n);let o=rc(e.status);return o&&(r.status=o),r}function $C(e,r){if(r.blocked){let t=typeof e.attention=="string"?e.attention:"",n=typeof e.status=="string"?e.status:"";if(!(t==="blocked"||t==="needs_attention"||t==="stale"||n==="blocked"))return!1}return!(r.running&&!(e.status==="running"&&e.attention!=="blocked"&&e.attention!=="needs_attention")||typeof r.task=="string"&&e.taskId!==r.task||typeof r.worker=="string"&&e.worker!==r.worker||typeof r.status=="string"&&e.status!==r.status)}function lf(e,r){let t=FC(r);if(Object.keys(t).length===0)return e;let n=e.workers.filter(s=>$C(s,t)),o={...e,workerCount:n.length,needsAttention:n.filter(s=>s.attention&&s.attention!=="ok"&&s.attention!=="done").map(s=>s.worker),workers:n,activeFilters:t};return e.summary&&(o.summary={statusCounts:Or(n,"status"),attentionCounts:Or(n,"attention"),lifecycleCounts:Or(n,"lifecycleStage")}),e.controller&&(o.controller=df(n)),o}function cf(e){let r=ri(e),t=e.full===!0||e.full==="true",n=lf(t?lt(r):mf(r),e),o=n.workers;console.log(JSON.stringify({runId:n.runId,status:n.status,projection:t?"full":"compact",workerCount:n.workerCount,...n.activeFilters?{activeFilters:n.activeFilters}:{},...t?{}:{resultContract:{projection:"compact",rawWorkerPayloadsOmitted:!0,deepDetailAvailableVia:["--full","worker status","worker tail","run status --full"]},drilldownCommands:HC(r)},needsAttention:n.needsAttention,..."summary"in n?{summary:n.summary}:{},..."controller"in n?{controller:n.controller}:{},workers:o},null,2))}function uf(e){let{run:r,workerName:t,worker:n}=e,o=N(n,{base:r.base,baseCommit:r.baseCommit}),s=o.gitAncestry.headIsAncestorOfBase===!1&&o.gitAncestry.head?o.gitAncestry.head:void 0,i=Jr({alive:o.alive,finalResult:o.finalResult,changedFiles:o.changedFiles,gitAncestry:o.gitAncestry,headCommit:s}),a=n.completionBlocker,l=typeof a=="string"&&a?a:void 0,c=af(l)?void 0:l,u=c?"blocked":o.status,d=c?"blocked":o.attention.state,f=of(n.completionResponse),m=of(f?.task),p=oo(f?.outcome),g=oo(f?.status),k=Array.isArray(f?.warnings)?f.warnings.filter(T=>typeof T=="string"&&T.trim().length>0):[],h=oo(m?.prUrl)??oo(f?.prUrl),b=oo(n.completionReportedAt),x=MC({finished:ne(o),completionBlocker:c,completionOutcome:p,completionReportedAt:b}),M=UC({completionBlocker:c,completionOutcome:p,completionReportedAt:b,finished:ne(o)}),P=WC({changedFiles:o.changedFiles,headCommit:s,prUrl:h??void 0});return{worker:o.worker,status:u,attention:d,attentionReason:c??o.attention.reason,landingBlocked:o.finalResult?d==="needs_attention"||d==="blocked":!1,exitedWithoutFinalResult:!o.finalResult&&!o.alive,salvageState:i?.salvageable?"review_needed":"none",salvageReason:i?.salvageable?i.attentionReason:void 0,pid:o.pid,alive:o.alive,currentTool:o.currentTool,lastActivityAt:o.lastActivityAt,lastHeartbeatPhase:o.lastHeartbeatPhase,lastHeartbeatSummary:o.lastHeartbeatSummary,heartbeatBlocker:o.heartbeatBlocker,changedFileCount:o.changedFiles.length,changedFiles:o.changedFiles,branch:o.branch,taskId:n.taskId??null,planId:n.planId??null,instructionPolicyFingerprint:typeof n.instructionPolicyFingerprint=="string"?n.instructionPolicyFingerprint:null,instructionPolicyRuleCount:(()=>{let T=n.instructionPolicyEvidence;if(!T||typeof T!="object")return null;let K=T.ruleSlugs;return Array.isArray(K)?K.length:null})(),leaseOwner:n.leaseOwner??null,model:typeof n.model=="string"?n.model:void 0,routingRule:typeof n.routingRule=="string"?n.routingRule:void 0,requestedModel:typeof n.requestedModel=="string"?n.requestedModel:void 0,headCommit:s,prUrl:h,handoffState:P,gitAncestry:o.gitAncestry,finalResult:o.finalResult,lifecycleStage:x,completionReportedAt:b,completionOutcome:n.completionOutcome??null,completionRouteStatus:g,completionRouteOutcome:p,completionWarnings:k,completionBlocker:c??null,checkpoint:{phase:o.lastHeartbeatPhase,summary:o.lastHeartbeatSummary,blocker:o.heartbeatBlocker},lastCommandHint:o.currentTool??o.lastHeartbeatSummary,failureReason:c??o.error??null,nextAction:M,ancestry:o.gitAncestry.relation,ancestryChecked:o.gitAncestry.checked}}function KC(e){let r=typeof e.status=="string"?e.status:"",t=typeof e.completionBlocker=="string"&&e.completionBlocker.trim().length>0?e.completionBlocker:void 0;return t&&!af(t)?!1:typeof e.completionReportedAt=="string"&&e.completionReportedAt.trim()||e.completionOutcome==="acknowledged"?!0:r==="done"}function jC(e,r){return{worker:e,status:"done",attention:"done",attentionReason:"metadata terminal worker; full status skipped in compact snapshot",alive:!1,pid:typeof r.pid=="number"?r.pid:void 0,branch:typeof r.branch=="string"?r.branch:void 0,taskId:r.taskId??null,planId:r.planId??null,model:typeof r.model=="string"?r.model:void 0,routingRule:typeof r.routingRule=="string"?r.routingRule:void 0,requestedModel:typeof r.requestedModel=="string"?r.requestedModel:void 0,lifecycleStage:r.completionReportedAt?"completion_acknowledged":"worker_finished",completionReportedAt:typeof r.completionReportedAt=="string"?r.completionReportedAt:null,completionOutcome:r.completionOutcome??null,localOnly:r.localOnly===!0,compactStatus:!0}}function Or(e,r){let t={};for(let n of e){let o=n[r],s=typeof o=="string"&&o.trim()?o:"unknown";t[s]=(t[s]??0)+1}return t}function sf(e){if(e.attention!=="blocked")return!1;let r=typeof e.attentionReason=="string"?e.attentionReason:"";return r.includes("cli-config.json.tmp")||r.includes("Invalid authentication credentials")||r.includes("provider CLI is missing or not on PATH")||r.includes("unknown command:")}function df(e){let r=e.filter(sf),t=e.filter(n=>{if(sf(n))return!1;let o=n.attention;return o==="needs_attention"||o==="blocked"||o==="stale"||n.status==="running"});return{actionableCount:t.length,runningCount:e.filter(n=>n.status==="running").length,blockedCount:e.filter(n=>n.attention==="blocked").length,staleCount:e.filter(n=>n.attention==="stale").length,needsAttentionCount:e.filter(n=>n.attention==="needs_attention").length,doneCount:e.filter(n=>n.status==="done").length,systemHealthBlockerCount:r.length,systemHealthBlockers:r.slice(0,10).map(n=>({worker:n.worker,status:n.status,attention:n.attention,attentionReason:n.attentionReason,model:n.model,routingRule:n.routingRule,lastActivityAt:n.lastActivityAt})),actionableWorkers:t.slice(0,25).map(n=>({worker:n.worker,status:n.status,attention:n.attention,attentionReason:n.attentionReason,taskId:n.taskId,planId:n.planId,model:n.model,routingRule:n.routingRule,lastActivityAt:n.lastActivityAt,nextAction:n.nextAction}))}}function pf(e,r,t){let n={runId:e.id,name:e.name,status:Kt(e.status,r),repo:e.repo,workerCount:r.length,needsAttention:r.filter(o=>o.attention&&o.attention!=="ok"&&o.attention!=="done").map(o=>o.worker),workers:r};return t&&(n.summary={statusCounts:Or(r,"status"),attentionCounts:Or(r,"attention"),lifecycleCounts:Or(r,"lifecycleStage")},n.controller=df(r)),n}function VC(e){return e.status==="done"&&e.attention==="done"}function lt(e){let r=L(e),n=Object.keys(r.workers||{}).map(s=>{let i=_(io.join(E(r.id),"workers",R(s),"worker.json"),void 0);return i?uf({run:r,workerName:s,worker:i}):{worker:s,status:"missing",attention:"needs_attention",attentionReason:"worker.json not found"}}),o=pf(r,n,!1);return de(io.join(E(r.id),"last-board.json"),o),o}function mf(e){let r=L(e),n=Object.keys(r.workers||{}).map(i=>{let a=_(io.join(E(r.id),"workers",R(i),"worker.json"),void 0);return a?KC(a)?jC(i,a):uf({run:r,workerName:i,worker:a}):{worker:i,status:"missing",attention:"needs_attention",attentionReason:"worker.json not found"}}),o=n.filter(i=>!VC(i)),s=pf(r,o,!0);return s.status=Kt(r.status,n),s.summary={...s.summary??{},totalWorkerCount:n.length,shownWorkerCount:o.length,omittedTerminalDoneWorkerCount:n.length-o.length,allStatusCounts:Or(n,"status"),allAttentionCounts:Or(n,"attention")},de(io.join(E(r.id),"last-board-compact.json"),s),s}async function ff(e,r){let t=String(e.run||""),n=String(e.agentOsId||"");if(!t||!n)return null;let o=lt(t),s=F(e.baseUrl?String(e.baseUrl):void 0),i=await V(e.secret?String(e.secret):void 0,n,{baseUrl:s}),a=`${s}/api/agent-os/by-id/${encodeURIComponent(n)}/harness/snapshot`,l=await X(a,i,{agentOsId:n,runId:t,source:r,snapshot:o},{agentOsId:n,baseUrl:s});return{ok:l.ok,httpStatus:l.status,response:l.response,authRefreshed:l.refreshedAuth,authRefreshFailure:l.authRefreshFailure}}function GC(e){return{full:`kynver run status --run ${e} --full`,blocked:`kynver status --run ${e} --blocked`,running:`kynver status --run ${e} --running`,task:`kynver status --run ${e} --task <task-id>`,worker:`kynver status --run ${e} --worker <worker>`,workersFull:`kynver worker list --run ${e} --full`,workerFull:`kynver worker status --run ${e} --name <worker>`,workerTail:`kynver worker tail --run ${e} --name <worker> --lines 80`,monitorTick:`kynver monitor status --run ${e} --tick`}}function lo(e){let r=ri(e),t=e.full===!0||e.full==="true",n=lf(t?lt(r):mf(r),e);n.projection=t?"full":"compact",t||(n.resultContract={projection:"compact",rawWorkerPayloadsOmitted:!0,omittedWorkerFields:["finalResult","changedFiles","gitAncestry","completionResponse","stdout/stderr tails"],deepDetailAvailableVia:["--full","worker status","worker tail","monitor status --tick"]},n.drilldownCommands=GC(r)),console.log(JSON.stringify(n,null,2))}function nc(e){let{runId:r,workerName:t}=He(e),n=we(r,t),o=Zo(n.stdoutPath,Number(e.lines||40));if(e.raw===!0||e.raw==="true"){process.stdout.write(o);return}for(let s of o.split(`
+`).filter(Boolean)){let i=It(s),a=i?tl(i):s;a&&console.log(a)}}function oc(e){let{runId:r,workerName:t}=He(e),n=we(r,t);if(!$(n.pid)){console.log(JSON.stringify({worker:n.name,pid:n.pid,status:"not_running"},null,2));return}if(An(n.pid,"SIGTERM"),Br(1500),$(n.pid)){An(n.pid,"SIGKILL"),console.log(JSON.stringify({worker:n.name,pid:n.pid,status:"sigkill_sent"},null,2));return}console.log(JSON.stringify({worker:n.name,pid:n.pid,status:"stopped"},null,2))}C();var XC=5e3,QC=360*60*1e3,ZC=3,ew=5e3;function rw(e){let{runId:r,workerName:t}=He(e);return{run:r,name:t,agentOsId:e.agentOsId?String(e.agentOsId):void 0,pollMs:Number(e.pollMs)>0?Math.floor(Number(e.pollMs)):void 0,maxTotalMs:Number(e.maxTotalMs)>0?Math.floor(Number(e.maxTotalMs)):void 0,completeAttempts:Number(e.completeAttempts)>0?Math.floor(Number(e.completeAttempts)):void 0,completeBackoffMs:Number(e.completeBackoffMs)>0?Math.floor(Number(e.completeBackoffMs)):void 0,baseUrl:e.baseUrl?String(e.baseUrl):void 0,secret:e.secret?String(e.secret):void 0}}async function ct(e){let r=rw(e),t=r.pollMs??XC,n=r.maxTotalMs??QC,o=r.completeAttempts??ZC,s=r.completeBackoffMs??ew,i=we(r.run,r.name);if(!i.agentOsId||!i.taskId)return{worker:i.name,runId:i.runId,outcome:"missing_link",attempts:0,reason:"worker has no agentOsId/taskId \u2014 nothing to attribute completion to"};if(at(i))return{worker:i.name,runId:i.runId,outcome:"completed",httpStatus:200,attempts:0,reason:"completion-already-acknowledged"};let a=Date.now();for(;;){if(i=we(r.run,r.name),at(i))return{worker:i.name,runId:i.runId,outcome:"completed",httpStatus:200,attempts:0,reason:"completion-already-acknowledged"};let u=N(i);if(ne(u)||!$(i.pid))break;if(Date.now()-a>n)return{worker:i.name,runId:i.runId,outcome:"timed_out",attempts:0,reason:`worker did not finish within ${n}ms`};Br(t)}let l,c;for(let u=1;u<=o;u++){let d=await ao({run:r.run,name:r.name,...r.agentOsId?{agentOsId:r.agentOsId}:{},...r.baseUrl?{baseUrl:r.baseUrl}:{},...r.secret?{secret:r.secret}:{}});if(l=d.httpStatus,d.ok)return{worker:i.name,runId:i.runId,outcome:"completed",httpStatus:d.httpStatus,attempts:u};if(d.httpStatus===401||d.httpStatus===403)return c=typeof d.reason=="string"?d.reason:"completion replay refused",{worker:i.name,runId:i.runId,outcome:"blocked",httpStatus:d.httpStatus,attempts:u,reason:c};c=typeof d.reason=="string"?d.reason:"transient failure",u<o&&Br(s)}return{worker:i.name,runId:i.runId,outcome:"blocked",httpStatus:l,attempts:o,reason:c??"completion failed after retries"}}async function sc(e){try{let r=await ct(e);console.log(JSON.stringify(r,null,2)),(r.outcome==="missing_link"||r.outcome==="timed_out")&&process.exit(1),process.exit(0)}catch(r){console.error(`worker auto-complete failed: ${r.message}`),process.exit(1)}}function tw(){return hf.join(zC(new URL(".",import.meta.url)),"cli.js")}function ic(e){let r=e.cliPath??tw();if(!JC(r))return;let t=hf.join(e.workerDir,"auto-complete.log"),n;try{n=qC(t,"a")}catch{n=void 0}let o=["ignore",n??"ignore",n??"ignore"],s=e.nodeExecutable??process.execPath,i=[r,"worker","auto-complete","--run",e.runId,"--name",e.workerName];e.agentOsId&&i.push("--agent-os-id",e.agentOsId),e.baseUrl&&i.push("--base-url",e.baseUrl),e.secret&&i.push("--secret",e.secret);try{let a=YC(s,i,ue({detached:!0,stdio:o,env:process.env}));return n!==void 0&&gf(n),a.unref(),{pid:a.pid,logPath:t,cliPath:r}}catch{if(n!==void 0)try{gf(n)}catch{}return}}Ee();function kf(e,r,t){pe(e,["fetch","origin",t,"--prune"],{allowFailure:!0});let n=`origin/${t}`,o=re(e,["worktree","add","-B",t,r,n]);if(o.status===0)return;let s=re(e,["worktree","add","-b",t,r,"HEAD"]);if(s.status!==0){let i=o.stderr||o.stdout||s.stderr||s.stdout||"git worktree add failed for repair target branch";throw new Error(i)}}Ue();I();function oi(e,r){let t=typeof r.name=="string"?r.name.trim():"";if(!t||t==="undefined"||t==="null")throw new Error(`worker name is required and must be a real identifier (got: ${JSON.stringify(r.name)})`);let n=R(t);if(e.workers?.[n])throw new Error(`worker already exists in run ${e.id}: ${n}`);if(!r.task)throw new Error(`missing task text for worker ${n}`);let o=r.routingRule||r.requestedModel?{provider:r.provider||Pe,model:r.model,rule:r.routingRule||"explicit:spawn",requestedModel:r.requestedModel??r.model}:Hs({explicitModel:r.model,explicitProvider:r.provider,explicitProviderIsOperatorOverride:!!r.provider?.trim()}),s=Nm(o.provider),i=o.model;if(s.preflightModel){let D=s.preflightModel(r.model);if(!D.ok)throw new Error(`model preflight failed for provider "${s.name}": ${D.note??"invalid model/provider combination"}`);D.normalized&&console.error(`[supervisor] ${n}: ${D.note}`),i=D.model}let{worktreesDir:a}=te(),l=Xt.join(E(e.id),"workers",n);ow(l,{recursive:!0});let c=Xt.join(a,e.id,n),u=r.repairTargetBranch?.trim()||void 0,d=u||r.branch||`agent/${e.id}/${n}`;if(nw(c))throw new Error(`worktree path already exists: ${c}`);pe(e.repo,["fetch","origin","--prune"],{allowFailure:!0}),u?kf(e.repo,c,u):pe(e.repo,["worktree","add","-b",d,c,e.baseCommit],{throwError:!0});let f=Xt.join(l,"stdout.jsonl"),m=Xt.join(l,"stderr.log"),p=Xt.join(l,"heartbeat.jsonl"),g=Hl({task:r.task,ownedPaths:r.ownedPaths||[],worktreePath:c,heartbeatPath:p,planId:r.planId,taskId:r.taskId,instructionPolicyMarkdown:r.instructionPolicyMarkdown,memoryQualityMarkdown:r.memoryQualityPromptMarkdown??r.memoryQualityCapture?.promptMarkdown??null,personaMarkdown:r.personaMarkdown,contextEnvelopeMarkdown:r.contextEnvelopeMarkdown,model:i,repairTargetPrUrl:r.repairTargetPrUrl,repairTargetBranch:r.repairTargetBranch??(u||void 0)}),k=process.env.KYNVER_HARNESS_TASK_ID,h=process.env.KYNVER_HARNESS_AGENT_OS_ID;r.taskId&&(process.env.KYNVER_HARNESS_TASK_ID=String(r.taskId)),r.agentOsId&&(process.env.KYNVER_HARNESS_AGENT_OS_ID=String(r.agentOsId));let b;try{b=s.start({name:n,task:r.task,ownedPaths:r.ownedPaths,model:i,branch:d,worktreePath:c,workerDir:l,stdoutPath:f,stderrPath:m,heartbeatPath:p,prompt:g})}catch(D){throw pe(e.repo,["worktree","remove","--force",c],{allowFailure:!0}),pe(e.repo,["branch","-D",d],{allowFailure:!0}),D}finally{k===void 0?delete process.env.KYNVER_HARNESS_TASK_ID:process.env.KYNVER_HARNESS_TASK_ID=k,h===void 0?delete process.env.KYNVER_HARNESS_AGENT_OS_ID:process.env.KYNVER_HARNESS_AGENT_OS_ID=h}let x=km(b.model,i,s.defaultModel),M=v(),P=Me(process.env,M),T=ze().runnerId,K=Zn(P.boxKind),B={name:n,runId:e.id,status:"running",pid:b.pid,model:x,branch:d,worktreePath:c,workerDir:l,stdoutPath:f,stderrPath:m,heartbeatPath:p,ownedPaths:r.ownedPaths,...r.agentOsId?{agentOsId:String(r.agentOsId)}:{},...r.taskId?{taskId:String(r.taskId)}:{},...r.planId?{planId:String(r.planId)}:{},...r.instructionPolicyFingerprint?{instructionPolicyFingerprint:String(r.instructionPolicyFingerprint)}:{},...r.instructionPolicyEvidence?{instructionPolicyEvidence:r.instructionPolicyEvidence}:{},...r.memoryQualityCapture?{memoryQualityCapture:r.memoryQualityCapture}:{},...r.personaSlug?{personaSlug:String(r.personaSlug)}:{},...r.personaEvidence?{personaEvidence:r.personaEvidence}:{},...r.contextEnvelopeEvidence?{contextEnvelopeEvidence:r.contextEnvelopeEvidence}:{},...r.leaseOwner?{leaseOwner:String(r.leaseOwner)}:{},...r.leaseToken?{leaseToken:String(r.leaseToken)}:{},...r.dispatched?{dispatched:!0}:{},...!r.agentOsId||!r.taskId?{localOnly:!0}:{},routingRule:o.rule,...o.requestedModel?{requestedModel:o.requestedModel}:{},...o.orchestrationAudit?{orchestrationAudit:o.orchestrationAudit}:{},...r.executorRef?{executorRef:String(r.executorRef)}:{},...r.parentTaskId?{parentTaskId:String(r.parentTaskId)}:{},...r.taskTitle?{taskTitle:String(r.taskTitle)}:{},...r.taskPrUrl?{taskPrUrl:String(r.taskPrUrl)}:{},...r.repairTargetPrUrl?{repairTargetPrUrl:String(r.repairTargetPrUrl)}:{},...r.repairTargetBranch?{repairTargetBranch:String(r.repairTargetBranch)}:{},boxKind:P.boxKind,boxId:K,runtimeId:T,startedAt:new Date().toISOString()};if(G(e.id,B),e.workers={...e.workers||{},[n]:{workerDir:l,statusPath:Xt.join(l,"worker.json")}},e.status="running",Le(e),B.agentOsId&&B.taskId){let D;try{D=ic({runId:e.id,workerName:n,workerDir:l,agentOsId:B.agentOsId})}catch(w){let le=`completion sidecar failed to spawn: ${w.message}`;B.completionBlocker=le,G(e.id,B)}if(D)D.pid&&(B.completionSidecarPid=D.pid,G(e.id,B));else{let w="completion sidecar failed to spawn (CLI not found or spawn error)";B.completionBlocker=w,B.completionSidecarSpawnFailedAt=new Date().toISOString(),G(e.id,B)}}return B}async function ac(e){let r=L(String(e.run)),t=typeof e.name=="string"?e.name.trim():"";t||(console.error("worker start failed: --name is required"),process.exit(1));let n=e.task?String(e.task):vd(e.taskFile?String(e.taskFile):void 0);n||(console.error("missing --task or --task-file"),process.exit(1));let o=!!(e.agentOsId&&e.taskId),s=e.localOnly===!0||e.localOnly==="true";!o&&!s&&(e.agentOsId||e.taskId)&&(console.error("worker start: board-linked workers require both --agent-os-id and --task-id (or pass --local-only for direct runs)"),process.exit(1));let i=e.wait===!0||e.wait==="true",a;try{a=oi(r,{name:t,task:n,ownedPaths:e.owned?String(e.owned).split(",").map(c=>c.trim()).filter(Boolean):[],model:e.model?String(e.model):void 0,branch:e.branch?String(e.branch):void 0,agentOsId:e.agentOsId?String(e.agentOsId):void 0,taskId:e.taskId?String(e.taskId):void 0,provider:e.provider?String(e.provider):void 0}),console.log(JSON.stringify({runId:r.id,worker:a.name,pid:a.pid,branch:a.branch,worktreePath:a.worktreePath,workerDir:a.workerDir},null,2))}catch(c){console.error(`worker start failed: ${c.message}`),process.exit(1)}if(!i||!a)return;let l=await ct({run:String(e.run),name:a.name,...a.agentOsId?{agentOsId:a.agentOsId}:{},...e.baseUrl?{baseUrl:String(e.baseUrl)}:{},...e.secret?{secret:String(e.secret)}:{}});console.error(JSON.stringify({event:"start_wait_outcome",...l})),l.outcome==="timed_out"&&(process.exitCode=1)}W();Kn();C();import sw from"node:path";function iw(e){let r=Array.isArray(e.ownedPaths)?e.ownedPaths.filter(n=>typeof n=="string"):[],t=Array.isArray(e.writeSetPrefixes)?(e.writeSetPrefixes??[]).filter(n=>typeof n=="string"):[];return{...r.length?{ownedPaths:r}:{},...t.length?{writeSetPrefixes:t}:{},...e.allowConcurrentHotspot?{allowConcurrentHotspot:!0}:{}}}function si(e){let r=L(e),t=[];for(let n of Object.keys(r.workers||{})){let o=_(sw.join(E(r.id),"workers",R(n),"worker.json"),void 0);!o?.taskId||!$n(o)||t.push({runId:r.id,workerName:n,taskId:o.taskId,pid:o.pid,...iw(o)})}return t}C();import{createHash as yf}from"node:crypto";function pr(e){let r=e.replace(/\r\n/g,`
+`).trimEnd();return yf("sha256").update(r,"utf8").digest("hex")}function Qt(e){if(e==null)return null;let r=e.trim();return r?yf("sha256").update(r,"utf8").digest("hex"):null}I();var z=class extends Error{kind;httpStatus;constructor(r,t,n){super(t),this.name="PlanPersistError",this.kind=r,this.httpStatus=n}};function co(e,r){return e===401||e===403?new z("auth",r,e):e>=500?new z("server",r,e):new z("permanent",r,e)}function lc(e){let r=e instanceof Error?e.message:String(e);return/ECONNREFUSED|ENOTFOUND|ETIMEDOUT|fetch failed|network/i.test(r)?new z("network",r):new z("tool_interruption",r)}function Rf(e){return e!=="permanent"}function ai(e){let r={"Content-Type":"application/json"};return e&&(r.Authorization=`Bearer ${e}`),r}async function li(e){let r=await e.text();try{return JSON.parse(r)}catch{return r}}async function bf(e,r,t={}){let n=F(t.baseUrl),o=t.apiKey??oe(),s=t.fetchFn??fetch,i=`${n}/api/agent-os/${encodeURIComponent(e)}/plans/${encodeURIComponent(r)}`;try{let a=await s(i,{method:"GET",headers:ai(o)}),l=await li(a);if(!a.ok){let c=typeof l=="object"&&l&&"error"in l?String(l.error):`GET plan failed (${a.status})`;throw co(a.status,c)}return l}catch(a){throw a instanceof z?a:lc(a)}}async function vf(e,r={}){let t=F(r.baseUrl),n=r.apiKey??oe(),o=r.fetchFn??fetch,s=e.agentOsSlug;try{if(e.operation==="create"){let f=`${t}/api/agent-os/${encodeURIComponent(s)}/plans`,m={title:e.title,summary:e.summary??null,slug:e.planSlug??null,sourceRefs:ii(e),initialVersion:{title:e.title,body:e.body,summary:e.summary??null,changeSummary:e.changeSummary??null,author:e.author??null,sourceRefs:ii(e)}},p=await o(f,{method:"POST",headers:ai(n),body:JSON.stringify(m)}),g=await li(p);if(!p.ok){let h=typeof g=="object"&&g&&"error"in g?String(g.error):`create plan failed (${p.status})`;throw co(p.status,h)}let k=g;return{planId:k.plan.id,versionId:k.version.id,versionNumber:k.version.versionNumber}}let i=e.planId;if(!i)throw new z("permanent","planId is required for this operation");if(e.operation==="update_metadata"){let f=`${t}/api/agent-os/${encodeURIComponent(s)}/plans/${encodeURIComponent(i)}`,m={title:e.title,summary:e.summary??null,sourceRefs:ii(e)},p=await o(f,{method:"PATCH",headers:ai(n),body:JSON.stringify(m)}),g=await li(p);if(!p.ok){let h=typeof g=="object"&&g&&"error"in g?String(g.error):`update plan failed (${p.status})`;throw co(p.status,h)}let k=g;return{planId:k.id,versionId:k.currentVersionId,versionNumber:null}}let a=`${t}/api/agent-os/${encodeURIComponent(s)}/plans/${encodeURIComponent(i)}/versions`,l={title:e.title,body:e.body,summary:e.summary??null,changeSummary:e.changeSummary??null,author:e.author??null,sourceRefs:ii(e),markCurrent:e.markCurrent!==!1},c=await o(a,{method:"POST",headers:ai(n),body:JSON.stringify(l)}),u=await li(c);if(!c.ok){let f=typeof u=="object"&&u&&"error"in u?String(u.error):`add version failed (${c.status})`;throw co(c.status,f)}let d=u;return{planId:d.version.planId,versionId:d.version.id,versionNumber:d.version.versionNumber}}catch(i){throw i instanceof z?i:lc(i)}}function ii(e){let r={...e.sourceRefs??{}};return e.model&&(r.model=e.model),Object.keys(r).length?r:e.sourceRefs??null}import{createHash as aw}from"node:crypto";function ci(e){let r={operation:e.operation,agentOsSlug:e.agentOsSlug,planId:e.planId??null,planSlug:e.planSlug??null,title:e.title.trim(),summaryHash:Qt(e.summary),bodyHash:pr(e.body),changeSummary:e.changeSummary?.trim()??null,markCurrent:e.markCurrent??!0};return aw("sha256").update(JSON.stringify(r),"utf8").digest("hex")}import{mkdirSync as Sf}from"node:fs";import{homedir as lw}from"node:os";import Zt from"node:path";function ui(){let e=process.env.KYNVER_STATE_ROOT;return e?Zt.resolve(e):Zt.join(lw(),".kynver","state")}function di(){return Zt.join(ui(),"plan-outbox")}function cw(){return Zt.join(ui(),"plan-outbox-archive")}function ut(){let e=di(),r=cw();return Sf(e,{recursive:!0}),Sf(r,{recursive:!0}),{outboxDir:e,archiveDir:r}}function uo(e){if(e.startsWith("/tmp/")||e.startsWith("/var/folders/"))return!0;let r=Zt.resolve(e);return r.startsWith("/tmp/")||r.startsWith(Zt.join("/var","folders"))}import{existsSync as cc,readFileSync as wf,renameSync as Cf,readdirSync as uw,writeFileSync as uc,unlinkSync as bL}from"node:fs";import Fe from"node:path";import{randomUUID as dw}from"node:crypto";var pw=12;function dt(){let{outboxDir:e}=ut(),r=uw(e).filter(n=>n.endsWith(".json")),t=[];for(let n of r){let o=pc(Fe.join(e,n));o&&o.queueStatus==="queued"&&t.push(o)}return t.sort((n,o)=>n.createdAt.localeCompare(o.createdAt))}function dc(e){for(let r of dt())if(r.idempotencyKey===e)return r;return null}function pc(e){if(!cc(e))return null;try{return JSON.parse(wf(e,"utf8"))}catch{return null}}function _f(e){let{outboxDir:r}=ut(),t=Fe.join(r,e.bodyPath);return wf(t,"utf8")}function mc(e,r){let{outboxDir:t}=ut(),n=new Date().toISOString(),o=r.existing?.id??dw(),s=r.existing?.bodyPath??`${o}.body.md`,i=Fe.join(t,`${o}.json`),a=Fe.join(t,s);r.existing||uc(a,e.body,"utf8");let l={id:o,idempotencyKey:ci(e),operation:e.operation,agentOsSlug:e.agentOsSlug,planId:e.planId??r.existing?.planId??null,planSlug:e.planSlug??r.existing?.planSlug??null,title:e.title,summary:e.summary??null,bodyPath:s,bodyHash:pr(e.body),author:e.author??null,model:e.model??null,sourceRefs:e.sourceRefs??null,changeSummary:e.changeSummary??null,markCurrent:e.markCurrent??!0,createdAt:r.existing?.createdAt??n,updatedAt:n,retryCount:(r.existing?.retryCount??0)+(r.existing?1:0),maxRetries:e.maxRetries??r.existing?.maxRetries??pw,lastError:r.lastError,lastFailureKind:r.lastFailureKind,queueStatus:"queued",userStatus:"queued for retry",readbackEvidence:null};return uc(i,`${JSON.stringify(l,null,2)}
+`,{mode:384}),l}function xf(e){let{outboxDir:r}=ut(),t=Fe.join(r,`${e.id}.json`);uc(t,`${JSON.stringify(e,null,2)}
+`,{mode:384})}function Ef(e){let{outboxDir:r,archiveDir:t}=ut(),n=Fe.join(r,`${e.id}.json`),o=Fe.join(r,e.bodyPath),s=Fe.join(t,`${e.id}.json`),i=Fe.join(t,e.bodyPath);cc(n)&&Cf(n,s),cc(o)&&Cf(o,i)}function po(e){let{outboxDir:r}=ut();return{jsonPath:Fe.join(r,`${e.id}.json`),bodyPath:Fe.join(r,e.bodyPath)}}function Pf(e,r){return{operation:e.operation,agentOsSlug:e.agentOsSlug,planId:e.planId,planSlug:e.planSlug,title:e.title,summary:e.summary,body:r,changeSummary:e.changeSummary??void 0,author:e.author??void 0,model:e.model??void 0,sourceRefs:e.sourceRefs,markCurrent:e.markCurrent??!0,maxRetries:e.maxRetries}}async function Af(e,r,t={}){let n=await bf(e,r.planId,t),o=n.plan,s=n.currentVersion;if(o.title.trim()!==r.title.trim())throw new z("verification_failed",`title mismatch: expected "${r.title}", got "${o.title}"`);let i=Qt(r.summary),a=Qt(o.summary);if(i!==a)throw new z("verification_failed","summary mismatch on readback");if(r.versionId&&o.currentVersionId!==r.versionId)throw new z("verification_failed",`currentVersionId mismatch: expected ${r.versionId}, got ${o.currentVersionId}`);if(r.versionNumber!=null&&(!s||s.versionNumber!==r.versionNumber))throw new z("verification_failed",`versionNumber mismatch: expected ${r.versionNumber}, got ${s?.versionNumber??"none"}`);let l=s?.body??"",c=pr(l);if(r.bodyHash&&c!==r.bodyHash)throw new z("verification_failed","body hash mismatch on readback");return{planId:o.id,currentVersionId:o.currentVersionId,versionNumber:s?.versionNumber??null,title:o.title,summary:o.summary,bodyHash:r.bodyHash||c,readAt:new Date().toISOString()}}function If(e,r){return{planId:r.planId,title:e.title,summary:e.summary??null,body:e.body,bodyHash:pr(e.body),versionId:r.versionId,versionNumber:r.versionNumber}}var Of="persisted and read back",mw="queued for retry",fc="failed and needs action";async function en(e,r={}){e.bodyPathHint&&uo(e.bodyPathHint);let t=ci(e),n=dc(t);if(n?.readbackEvidence)return{userStatus:Of,outboxId:n.id,planId:n.readbackEvidence.planId,readbackEvidence:n.readbackEvidence,idempotencyKey:t};if(e.immediateFailure)return Nf(e,e.immediateFailure.message,e.immediateFailure.kind,n);let o=r.writePlan??vf,s=r.verifyReadback??Af;try{let i=await o(e,r),a={...e,planId:i.planId},l=If(a,i),c=await s(e.agentOsSlug,fw(e,l),r);return n&&Ef(n),{userStatus:Of,planId:i.planId,versionId:i.versionId??void 0,readbackEvidence:c,idempotencyKey:t}}catch(i){let a=i instanceof z?i:new z("tool_interruption",i instanceof Error?i.message:String(i));if(!Rf(a.kind)){let l=mc(e,{lastError:a.message,lastFailureKind:a.kind,existing:n??void 0}),c=po(l),u=Tf(l,a.message);return{userStatus:fc,outboxId:u.id,outboxPath:c.jsonPath,bodyPath:c.bodyPath,lastError:a.message,idempotencyKey:t}}return Nf(e,a.message,a.kind,n)}}function fw(e,r){return e.operation==="update_metadata"?{...r,body:"",bodyHash:""}:r}function Nf(e,r,t,n){let o=mc(e,{lastError:r,lastFailureKind:t,existing:n??void 0}),s=po(o);if(o.retryCount>=o.maxRetries){let i=Tf(o,r);return{userStatus:fc,outboxId:i.id,outboxPath:s.jsonPath,bodyPath:s.bodyPath,lastError:r,idempotencyKey:o.idempotencyKey}}return{userStatus:mw,outboxId:o.id,outboxPath:s.jsonPath,bodyPath:s.bodyPath,lastError:r,idempotencyKey:o.idempotencyKey}}function Tf(e,r){let t={...e,queueStatus:"failed",userStatus:fc,lastError:r,updatedAt:new Date().toISOString()};return xf(t),t}import gw from"node:path";async function pi(e={},r={}){let t=dt().filter(s=>e.outboxId?s.id===e.outboxId:!0),n=e.max&&e.max>0?t.slice(0,e.max):t,o={processed:0,succeeded:0,stillQueued:0,failed:0,results:[]};for(let s of n){o.processed+=1;let i=_f(s),a=Pf(s,i),l=await en(a,r);l.userStatus==="persisted and read back"?o.succeeded+=1:l.userStatus==="failed and needs action"?o.failed+=1:o.stillQueued+=1,o.results.push({outboxId:s.id,userStatus:l.userStatus,lastError:l.lastError})}return o}function gc(e){let r=gw.join(di(),`${e}.json`);return pc(r)}function mi(e){let r=po(e);return["## Plan persistence risk","",`AgentOS plan write is **not** confirmed (${e.userStatus}).`,`- outboxId: \`${e.id}\``,e.planId?`- planId: \`${e.planId}\``:"- planId: (pending \u2014 create not yet applied)",`- outbox: \`${r.jsonPath}\``,`- body: \`${r.bodyPath}\``,"","Drain when approval/connectivity returns: `kynver plan outbox drain`"].join(`
+`)}function fi(e){let r=e.metadata&&typeof e.metadata=="object"?e.metadata:null,t=typeof e.planPersistenceOutboxId=="string"&&e.planPersistenceOutboxId||(r&&typeof r.planPersistenceOutboxId=="string"?r.planPersistenceOutboxId:void 0);return t?{outboxId:t,jsonPath:typeof e.planPersistenceOutboxPath=="string"?e.planPersistenceOutboxPath:r&&typeof r.planPersistenceOutboxPath=="string"?r.planPersistenceOutboxPath:void 0,bodyPath:typeof e.planPersistenceBodyPath=="string"?e.planPersistenceBodyPath:r&&typeof r.planPersistenceBodyPath=="string"?r.planPersistenceBodyPath:void 0}:null}async function hc(e){let r=`${e.baseUrl}/api/agent-os/by-id/${encodeURIComponent(e.agentOsId)}/tasks/${encodeURIComponent(e.taskId)}/release`,t;try{t=await X(r,e.secret,{agentOsId:e.agentOsId,leaseOwner:e.leaseOwner,...e.failureDetail?{failureDetail:e.failureDetail}:{}},{agentOsId:e.agentOsId,baseUrl:e.baseUrl})}catch(s){return{released:!1,httpOk:!1,releaseResponse:{ok:!1,error:s.message}}}let n=t.response;return{released:t.ok===!0||n?.ok===!0,httpOk:t.ok===!0,releaseResponse:t.response??t}}import{spawnSync as Mf}from"node:child_process";import{spawnSync as hw}from"node:child_process";function Df(){if(process.env.GITHUB_TOKEN?.trim()||process.env.GH_TOKEN?.trim())return{source:"env",configured:!0,reason:"GitHub token already configured in environment"};let e=hw("gh",["auth","token"],{encoding:"utf8",stdio:["ignore","pipe","pipe"]});if(e.status!==0)return{source:"missing",configured:!1,reason:typeof e.stderr=="string"&&e.stderr.trim()?e.stderr.trim():"gh auth token failed; run `gh auth login` on this machine"};let r=typeof e.stdout=="string"?e.stdout.trim():"";return r?(process.env.GH_TOKEN=r,{source:"gh-cli",configured:!0,reason:"Using local GitHub CLI auth for daemon land_pr merge"}):{source:"missing",configured:!1,reason:"gh auth token returned an empty token; run `gh auth login` on this machine"}}var Uf=new Set(["SUCCESS","SKIPPED","NEUTRAL"]),kw=new Set(["CLEAN","HAS_HOOKS"]);function yc(e){return e?.trim()?["--repo",e.trim()]:[]}function Wf(e){let r=/github\.com\/([^/]+)\/([^/]+)\/pull\/\d+/i.exec(e.trim());return r?`${r[1]}/${r[2]}`:null}function Lf(e,r,t){let n=e.gh(r,t);if(n.status!==0)throw new Error(n.stderr||n.stdout||`gh ${t.join(" ")} failed`);return JSON.parse(n.stdout||"{}")}function mo(e){return typeof e.name=="string"&&e.name||typeof e.context=="string"&&e.context||typeof e.workflowName=="string"&&e.workflowName||"unknown check"}function yw(e){let r=Array.isArray(e)?e:[],t=[],n=[];for(let o of r){let s=o&&typeof o=="object"?o:{},i=typeof s.conclusion=="string"?s.conclusion.toUpperCase():"",a=typeof s.status=="string"?s.status.toUpperCase():"",l=typeof s.state=="string"?s.state.toUpperCase():"";if(!(i&&Uf.has(i))){if(i){n.push(`${mo(s)}=${i}`);continue}if(!(l&&Uf.has(l))){if(l&&l!=="PENDING"&&l!=="EXPECTED"){n.push(`${mo(s)}=${l}`);continue}if(l==="PENDING"||l==="EXPECTED"){t.push(`${mo(s)}=${l}`);continue}if(a&&a!=="COMPLETED"){t.push(`${mo(s)}=${a}`);continue}t.push(`${mo(s)}=PENDING`)}}}return{pending:t,failed:n}}function Rw(e){return(Array.isArray(e)?e:[]).some(t=>{let n=t&&typeof t=="object"?t:{},o=typeof n.name=="string"&&n.name||typeof n.context=="string"&&n.context||"",s=typeof n.conclusion=="string"?n.conclusion.toUpperCase():"",i=typeof n.state=="string"?n.state.toUpperCase():"";return/^vercel/i.test(o)&&(s==="SUCCESS"||i==="SUCCESS")})}var bw=/^##\s*(test\s*plan|verification|test\s*evidence|verify)\b/im,vw=/typecheck|npm run (test|build|typecheck)|vitest|tsc\b|verify-pr-local|local verify|local-verify|tests? (pass|green)|build green|node --test/i,Sw=/^docs[(:]/i,Cw=/docs[- ]only|documentation only|no[- ]code change|no code changes|low[- ]risk|plan tracker only|markdown only/i;function ww(e){let r=typeof e.title=="string"?e.title.trim():"",t=typeof e.body=="string"?e.body.trim():"",n=Sw.test(r)||Cw.test(t),o=bw.test(t),s=vw.test(t);return n||o||s||e.vercelCheckSuccess===!0}function _w(e){if(!ww({title:e.title,body:e.body,vercelCheckSuccess:Rw(e.statusCheckRollup)}))throw new Error(`PR #${e.number} lacks landing verification evidence \u2014 add ## Test plan / ## Verification with local commands, Vercel preview, or docs/no-code rationale`)}function xw(e){if(e.state!=="OPEN")throw new Error(`PR #${e.number} is ${e.state}, not OPEN`);if(e.isDraft)throw new Error(`PR #${e.number} is still a draft`);if(!kw.has(e.mergeStateStatus))throw new Error(`PR #${e.number} mergeStateStatus is ${e.mergeStateStatus}`);let r=yw(e.statusCheckRollup);if(r.failed.length>0)throw new Error(`PR #${e.number} has failing checks: ${r.failed.join(", ")}`);if(r.pending.length>0)throw new Error(`PR #${e.number} has pending checks: ${r.pending.join(", ")}`);_w(e)}function Ew(e){try{return xw(e),null}catch(r){return r instanceof Error?r.message:String(r)}}function Pw(e,r,t,n){if(!n?.trim())return;let o=encodeURI(`heads/${n}`);e.gh(r,["api","-X","DELETE",`repos/${t}/git/refs/${o}`])}function Aw(e,r,t){if(t?.trim())return t.trim();let n=e.gh(r,["repo","view","--json","nameWithOwner"]);if(n.status!==0)throw new Error(n.stderr||"Could not resolve GitHub repo");let o=JSON.parse(n.stdout||"{}");if(!o.nameWithOwner)throw new Error("Could not resolve GitHub repo");return o.nameWithOwner}function Iw(e,r){if(!r?.trim())return;let t=Mf("git",["worktree","list","--porcelain"],{cwd:e,encoding:"utf8"});if(t.status!==0)return;let n=String(t.stdout||"").split(/\r?\n/),o=null,s=null;for(let i of n){if(i.startsWith("worktree ")){o=i.slice(9).trim(),s=null;continue}i.startsWith("branch ")&&o&&(s=i.slice(7).trim(),s.endsWith(`/${r}`)&&Mf("git",["worktree","remove","--force",o],{cwd:e,encoding:"utf8"}))}}async function Bf(e){let r=e.cwd??process.cwd(),t=e.exec??qs,n=e.prUrl.trim();if(!n)throw new Error("prUrl is required");let o=Df();if(!o.configured)return{prUrl:n,outcome:"blocked",reason:o.reason};let s=Lf(t,r,["pr","view",n,...yc(e.repo),"--json",["number","url","title","body","state","isDraft","mergeStateStatus","statusCheckRollup","headRefName","mergedAt","mergeCommit"].join(",")]);if(s.state==="MERGED"||s.mergedAt)return{prUrl:s.url||n,outcome:"skipped",mergeCommit:s.mergeCommit?.oid??null,reason:`PR #${s.number} is already merged \u2014 land_pr no-op (redelivery)`};let i=Ew(s);if(i)return e.skipNotReady?{prUrl:s.url||n,outcome:"skipped",reason:i}:{prUrl:s.url||n,outcome:"blocked",reason:i};if(e.dryRun)return{prUrl:s.url||n,outcome:"skipped",reason:"dry-run: PR is ready to merge"};let a=String(s.number),l=t.gh(r,["pr","merge",a,...yc(e.repo),"--squash"]);if(l.status!==0){let u=kc(t,r,a,e.repo);return u?{prUrl:u.url||s.url||n,outcome:"skipped",mergeCommit:u.mergeCommit?.oid??null,reason:`PR #${s.number} is already merged \u2014 merged by another lane during land_pr (race)`}:{prUrl:s.url||n,outcome:"blocked",reason:l.stderr||l.stdout||"gh pr merge failed"}}let c=kc(t,r,a,e.repo);c||(c=kc(t,r,a,e.repo));try{let u=Aw(t,r,e.repo);Pw(t,r,u,s.headRefName),Iw(r,s.headRefName)}catch{}return{prUrl:c?.url||s.url||n,outcome:"merged",mergeCommit:c?.mergeCommit?.oid??null,reason:`Daemon land_pr merged PR #${s.number}${c?"":" (post-merge view unavailable \u2014 merge verified by gh exit 0)"}`}}function kc(e,r,t,n){try{let o=Lf(e,r,["pr","view",t,...yc(n),"--json","number,url,mergedAt,mergeCommit,state"]);return o.state==="MERGED"||o.mergedAt?o:null}catch{return null}}I();async function Hf(e){let r=await V(e.secret,e.agentOsId,{baseUrl:e.baseUrl}),t=String(e.task.id),n=`${e.baseUrl}/api/agent-os/by-id/${encodeURIComponent(e.agentOsId)}/harness/completion`,o=new Date().toISOString(),s={source:"kynver-harness",agentOsId:e.agentOsId,runId:e.runId,workerName:`land-pr-${t}`,taskId:t,leaseToken:e.task.leaseToken??null,startedAt:o,finishedAt:o,status:{finalResult:e.report,prUrl:e.report.prUrl,summary:e.report.reason,leaseToken:e.task.leaseToken??null},workerInjection:null},i=await X(n,r,s,{agentOsId:e.agentOsId,baseUrl:e.baseUrl});return{ok:i.ok,status:i.status}}function Ff(){return["## verify_live completion contract","Finish with a JSON finalResult object:","{",'  "prUrl": "<landed pr>",','  "outcome": "passed" | "failed" | "skipped" | "no_mcp_surface",','  "reason": "<human summary>",','  "mergeCommit": "<sha optional>",','  "liveReadback": "<prod readback string from acceptance.liveReadbackQuery>",','  "mcpCalls": [{ "tool": "<name>", "ok": true, "summary": "..." }]',"}","","Drive the feature MCP tools against live production. Do not mark passed without exercising the MCP surface.","When the subject carries an acceptance snapshot, include liveReadback \u2014 the server oracle rejects passed if the original symptom still appears."].join(`
+`)}var Ks=3600*1e3;function $f(e){let r=e.admissionExhaustion;return!r||typeof r!="object"?null:r}function Kf(e){let r=e.dispatchSkipDrain;return!r||typeof r!="object"?null:r}function Ow(e){let r=e.harnessWorkerContext;if(!r||typeof r!="object")return null;let t=r,n=typeof t.instructionPolicyMarkdown=="string"?t.instructionPolicyMarkdown:null,o=typeof t.instructionPolicyFingerprint=="string"?t.instructionPolicyFingerprint:null,s=t.instructionPolicyEvidence&&typeof t.instructionPolicyEvidence=="object"?t.instructionPolicyEvidence:null,i=typeof t.personaMarkdown=="string"?t.personaMarkdown:null,a=typeof t.personaEvidence=="object"&&t.personaEvidence&&typeof t.personaEvidence.injectedPersonaSlug=="string"?t.personaEvidence.injectedPersonaSlug:null,l=t.personaEvidence&&typeof t.personaEvidence=="object"?t.personaEvidence:null,c=t.personaInjectionReady===!0,u=typeof t.contextEnvelopeMarkdown=="string"?t.contextEnvelopeMarkdown:null,d=t.contextEnvelopeEvidence&&typeof t.contextEnvelopeEvidence=="object"?t.contextEnvelopeEvidence:null,f=t.contextEnvelopeReady===!0,m=t.memoryQualityCapture&&typeof t.memoryQualityCapture=="object"?t.memoryQualityCapture:null,p=typeof t.memoryQualityPromptMarkdown=="string"?t.memoryQualityPromptMarkdown:typeof m?.promptMarkdown=="string"?m.promptMarkdown:null;return{instructionPolicyMarkdown:n,instructionPolicyFingerprint:o,instructionPolicyEvidence:s,memoryQualityCapture:m,memoryQualityPromptMarkdown:p,personaMarkdown:i,personaSlug:a,personaEvidence:l,personaInjectionReady:c,contextEnvelopeMarkdown:u,contextEnvelopeEvidence:d,contextEnvelopeReady:f}}function Nw(e){if(typeof e!="string")return null;let r=e.trim().toLowerCase();return r.length?r:null}function jf(e,r){let t=[`[AgentOS task ${e.id}] ${e.title}`,"",e.description?String(e.description):"(no description on the board task)","",`Board linkage: agentOsId=${r}, taskId=${e.id}, attempt=${e.attempt}, executor=${e.executor}${e.executorRef?`, executorRef=${e.executorRef}`:""}.`,"This worker was dispatched from the AgentOS board. The harness reports your completion back to the board when you finish."];e.executor==="verify_live"&&t.push("",Ff());let n=fi(e);if(n?.outboxId){let o=gc(n.outboxId);o?t.push("",mi(o)):t.push("","## Plan persistence risk","",`Unconfirmed AgentOS plan write (outboxId=${n.outboxId}).`)}return t.join(`
+`)}function Tw(e){let r=new Set;if(e.targetTaskId)return r.add(String(e.targetTaskId)),r;if(e.targetTaskIds)for(let t of String(e.targetTaskIds).split(",")){let n=t.trim();n&&r.add(n)}return r}async function Nr(e){let r=e.pipeline===!0||e.pipeline==="true";try{let Lr=function(){return Z.filter(S=>S.started).length},br=function(S,y){fl({runId:s.id,agentOsId:i,phase:S,startedCount:Lr(),outcomeCount:Z.length,cappedStarts:x,...y})},Re=function(S){return S.landPrDispatch===!0?!0:S.task?.executor==="land_pr"};var t=Lr,n=br,o=Re;let s=L(String(O(String(e.run||""),"--run"))),i=String(O(String(e.agentOsId||""),"--agent-os-id")),a=F(e.baseUrl?String(e.baseUrl):void 0),l=await V(e.secret?String(e.secret):void 0,i,{baseUrl:a}),u=!(e.execute===!0||e.execute==="true"),d=ze({runId:s.id}),f=Ll(s.id,d.runnerId),m=e.diskPath?We({diskPath:String(e.diskPath)}):We({diskPath:s.repo}),p=ur({runId:s.id}),g=Tw(e),k=g.size>0,h=Number(e.maxStarts)>0?Math.floor(Number(e.maxStarts)):1,b=k?Math.min(h,g.size):h,x=u?b:Math.min(b,p.slotsAvailable);if(!u&&x<=0){let S={runId:s.id,agentOsId:i,dryRun:!1,skipped:!0,reason:p.reason??"no resource slots",resourceGate:p};if(r)return{ok:!0,...S};console.log(JSON.stringify(S,null,2));return}let M=si(s.id);if(e.reconcileStaleBlockers===!0||e.reconcileStaleBlockers==="true"){let S=`${a}/api/agent-os/by-id/${encodeURIComponent(i)}/lane-hygiene`;try{await X(S,l,{agentOsId:i,dryRun:!1,includeBoardReconcile:!0},{agentOsId:i,baseUrl:a})}catch(y){console.error(`[dispatch] reconcile-stale-blockers lane-hygiene call failed: ${y.message}`)}}let P=`${a}/api/agent-os/by-id/${encodeURIComponent(i)}/tasks/dispatch-next`,T=S=>({agentOsId:i,dryRun:u,maxStarts:S,leaseOwner:f,leaseDurationMs:Number(e.leaseMs)>0?Math.floor(Number(e.leaseMs)):Ks,runnerDiskGate:m,runnerResourceGate:p,activeHarnessWorkers:M,runnerPresence:d,harnessBoardSnapshot:lt(s.id),...e.lane?{lane:Jp(String(e.lane))}:{},...e.executor?{executor:String(e.executor)}:{},...e.diskPath?{diskPath:String(e.diskPath)}:{},...e.targetTaskId?{targetTaskId:String(e.targetTaskId)}:{},...!e.targetTaskId&&e.targetTaskIds?{targetTaskIds:String(e.targetTaskIds).split(",").map(y=>y.trim()).filter(Boolean)}:{}}),K=Hp(),B=async S=>{let y=await X(P,l,T(S),{agentOsId:i,baseUrl:a,timeoutMs:K})??{ok:!1,status:0,response:null},A=y.response;return{dispatch:y,result:A?.result}},D=await B(k||u?x:1);if(!D.dispatch.ok||!D.result){let S={runId:s.id,agentOsId:i,action:"dispatch",httpStatus:D.dispatch.status,response:D.dispatch.response,authRefreshed:D.dispatch.refreshedAuth===!0,authRefreshFailure:D.dispatch.authRefreshFailure};if(r)return{ok:!1,...S};console.log(JSON.stringify(S,null,2)),process.exit(1)}let w=D.result;if(u){let S=$f(w),y=Kf(w),A={runId:s.id,agentOsId:i,dryRun:!0,wouldStart:w.started.map(H=>({taskId:H.task.id,title:H.task.title,reason:H.reason})),skipped:w.skipped.map(H=>({taskId:H.task.id,skipReason:H.skipReason,reason:H.reason})),diskGate:w.diskGate,resourceGate:w.resourceGate,inspected:w.inspected,pagesScanned:w.pagesScanned??null,candidatesExhausted:w.candidatesExhausted??null,capacityIdle:S?.capacityIdle===!0,admissionExhaustion:S,dispatchSkipDrain:y};if(r)return{ok:!0,...A};console.log(JSON.stringify(A,null,2));return}let le=Rm(),Z=[],nr=[],Et=Number(w.inspected)||0,je=!1;async function xe(S,y,A){let H=await hc({baseUrl:a,secret:l,agentOsId:i,taskId:String(S.id),leaseOwner:f,failureDetail:y}),ae={taskId:S.id,started:!1,error:y,released:H.released,releaseResponse:H.releaseResponse,...A};return Z.push(ae),br("outcome",{lastOutcome:ae}),!1}async function ee(S){let y=S.task,A=String(y.id);if(k&&!g.has(A))return xe(y,"exact_target_mismatch: dispatch-next returned a different task than requested",{requestedTargetTaskIds:[...g]});let H=y.prUrl?String(y.prUrl):"";if(!H)return xe(y,"land_pr task missing prUrl");try{let ae=await Bf({prUrl:H,repo:Wf(H),cwd:s.repo}),Pt=await Hf({baseUrl:a,secret:l,agentOsId:i,runId:s.id,task:y,report:ae});return Pt.ok?(Z.push({taskId:A,started:!0,landPr:!0,outcome:ae.outcome,completionStatus:Pt.status}),!0):xe(y,`land_pr completion POST failed (HTTP ${Pt.status})`,{landPr:!0,outcome:ae.outcome})}catch(ae){return xe(y,ae.message)}}async function U(S){let y="duplicate_dispatch_prevented: live local worker already owns this task",A=await hc({baseUrl:a,secret:l,agentOsId:i,taskId:String(S.id),leaseOwner:f,failureDetail:y}),H={taskId:S.id,started:!1,error:y,alreadyRunning:!0,nonFatal:!0,released:A.released,releaseResponse:A.releaseResponse};return Z.push(H),br("outcome",{lastOutcome:H}),!1}async function be(S){let y=S.task,A=Ow(S),H=String(y.id);if(k&&!g.has(H))return xe(y,"exact_target_mismatch: dispatch-next returned a different task than requested",{requestedTargetTaskIds:[...g]});let ae=Nw(y.personaSlug);if(ae&&(!A?.personaInjectionReady||!A.personaMarkdown))return xe(y,`persona_injection_required: missing anchored context-envelope persona block for "${ae}"`);if(Cm(s.id,H))return U(y);let Pt=Number(y.attempt)||1;if(Pt>le.maxTaskAttempts)return xe(y,`task attempt ${Pt} exceeds KYNVER_MAX_TASK_ATTEMPTS (${le.maxTaskAttempts})`);let CR=R(`t-${y.id}-a${y.attempt}`),At=Hs({explicitModel:e.model?String(e.model):void 0,explicitProvider:e.provider?String(e.provider):void 0,explicitProviderIsOperatorOverride:!!e.provider,task:qp(y)});try{let Pa=y.planId?String(y.planId):void 0,Jo=_m({title:y.title?String(y.title):void 0,description:y.description?String(y.description):null,executorRef:y.executorRef?String(y.executorRef):null,prUrl:y.prUrl?String(y.prUrl):null,branch:y.branch?String(y.branch):null}),qo=oi(s,{name:CR,task:jf(y,i),ownedPaths:e.owned?String(e.owned).split(",").map(wR=>wR.trim()).filter(Boolean):[],model:At.model,provider:At.provider,routingRule:At.rule,requestedModel:At.requestedModel,agentOsId:i,taskId:String(y.id),planId:Pa,branch:Jo?.targetPrBranch??void 0,executorRef:y.executorRef?String(y.executorRef):void 0,parentTaskId:y.parentTaskId?String(y.parentTaskId):void 0,taskTitle:y.title?String(y.title):void 0,taskPrUrl:Jo?.targetPrUrl??(y.prUrl?String(y.prUrl):void 0),repairTargetPrUrl:Jo?.targetPrUrl,repairTargetBranch:Jo?.targetPrBranch??void 0,instructionPolicyMarkdown:A?.instructionPolicyMarkdown??null,instructionPolicyFingerprint:A?.instructionPolicyFingerprint??null,instructionPolicyEvidence:A?.instructionPolicyEvidence??null,memoryQualityCapture:A?.memoryQualityCapture??null,memoryQualityPromptMarkdown:A?.memoryQualityPromptMarkdown??null,personaMarkdown:A?.personaMarkdown??null,personaSlug:A?.personaSlug??ae,personaEvidence:A?.personaEvidence??null,contextEnvelopeMarkdown:A?.contextEnvelopeMarkdown??null,contextEnvelopeEvidence:A?.contextEnvelopeEvidence??null,leaseOwner:f,leaseToken:y.leaseToken?String(y.leaseToken):void 0,dispatched:!0}),md={taskId:y.id,started:!0,worker:qo.name,pid:qo.pid,branch:qo.branch,model:qo.model,provider:At.provider,routingRule:At.rule,instructionPolicyFingerprint:A?.instructionPolicyFingerprint??null,instructionPolicyRuleCount:Array.isArray(A?.instructionPolicyEvidence?.ruleSlugs)?A.instructionPolicyEvidence.ruleSlugs.length:null,personaSlug:A?.personaSlug??ae,personaOperatingRuleCount:A?.personaEvidence?.operatingRuleCount??null};return Z.push(md),br("worker_started",{lastOutcome:md}),A?.instructionPolicyFingerprint&&console.error(`[dispatch] task ${H}: operating-rules policy injected fingerprint=${A.instructionPolicyFingerprint}`),A?.personaSlug&&console.error(`[dispatch] task ${H}: persona context injected slug=${A.personaSlug}`),A?.contextEnvelopeReady&&console.error(`[dispatch] task ${H}: context envelope injected anchor=${A.contextEnvelopeEvidence?.anchorTaskId??H}`),!0}catch(Pa){return xe(y,Pa.message)}}let ve=new Set;async function or(S){let y=S.task,A=String(y.id);if(ve.has(A))return xe(y,"dispatch_retry_loop_prevented: task already failed to start this tick");let H=Re(S)?await ee(S):await be(S);return H||ve.add(A),H}for(let S of w.started)await or(S);if(nr.push(...w.skipped??[]),k)for(let S of nr){let y=String(S.task.id);g.has(y)&&Z.push({taskId:y,started:!1,error:`exact_target_not_started:${S.skipReason}`,skipReason:S.skipReason,detail:S.reason??null,requestedTargetTaskIds:[...g]})}for(;!k&&Z.length<x;){let S=await B(1);if(!S.dispatch.ok||!S.result){let A=Fp(S.dispatch.response),H=Lr();je=A&&H>0;let ae={started:!1,error:"dispatch_next request failed during top-up",httpStatus:S.dispatch.status,response:S.dispatch.response,...je?{nonFatal:!0,partialTopUp:!0}:{}};Z.push(ae),br("top_up_failed",{partialTopUpInterrupted:je,lastOutcome:ae});break}Et+=Number(S.result.inspected)||0,nr.push(...S.result.skipped??[]);let y=S.result.started??[];if(y.length===0)break;for(let A of y){if(Z.length>=x)break;await or(A)}}let ce=Z.filter(S=>S.started).length,vr=$f(w),Yo=Kf(w),cd=ce===0&&(vr?.capacityIdle===!0||Number(w.resourceGate?.slotsAvailable)>0);if(cd&&vr?.summary){let S=vr.skipReasonCounts?.retry_ceiling_exceeded??0,y=w.overAttemptIdleRecovery??vr.overAttemptIdleRecovery,A=y?.attempted===!0?`; over_attempt_recovery minted=${y.minted??0} started=${y.started??0}`:S>0?"; over_attempt_recovery not attempted":"",H=Yo?`; dispatch_skip_drain scanned=${Yo.scanned??0} advanced=${Yo.advanced??0}`:"";console.error(`[dispatch] ${vr.summary}${S>0?`; retry_ceiling_exceeded=${S}`:""}${A}${H}`)}let ud={runId:s.id,agentOsId:i,dryRun:!1,leaseOwner:f,startedCount:ce,capacityIdle:cd,admissionExhaustion:vr,dispatchSkipDrain:Yo,outcomes:Z,skipped:nr.map(S=>({taskId:S.task.id,skipReason:S.skipReason})),inspected:Et,pagesScanned:w.pagesScanned??null,candidatesExhausted:w.candidatesExhausted??null,diskGate:w.diskGate,resourceGate:w.resourceGate,...je?{partialTopUpInterrupted:!0}:{},dispatchCallbackTimeoutMs:K},dd=S=>!S.started&&S.nonFatal!==!0,SR=Z.some(dd),pd=je&&ce>0?!0:!SR;if(fl({runId:s.id,agentOsId:i,phase:"complete",partial:je,startedCount:ce,ok:pd}),r)return{ok:pd,...ud};console.log(JSON.stringify(ud,null,2)),Z.some(dd)&&process.exit(1)}catch(s){if(r)return{ok:!1,error:s.message};console.error(`run dispatch failed: ${s.message}`),process.exit(1)}}Ut();is();Mt();Mt();import{unlinkSync as Dw}from"node:fs";function gi(e){let r=process.env[e];return r==="1"||r==="true"||r==="yes"}function Vf(e,r){let t=process.env[e];if(!t)return r;let n=Number(t);return Number.isFinite(n)?n:r}function Mw(e,r,t){return e.length===0?[]:t?[...e]:e.length<=r?[]:e.slice(r)}function fo(e={}){let r=e.execute===!0||gi("KYNVER_WSL_CRASH_DUMP_EXECUTE")||gi("KYNVER_CLEANUP_EXECUTE"),t=e.purgeAll===!0||gi("KYNVER_WSL_CRASH_DUMP_PURGE_ALL"),n=Math.max(0,e.keepNewest??Vf("KYNVER_WSL_CRASH_DUMP_KEEP_NEWEST",t?0:1)),o=lr({forceWsl:e.forceWsl});if(!o?.path)return{observation:o,execute:r,keepNewest:n,removed:[],removedBytes:0,skipped:o?.probeError?[{path:o.path??"(unresolved)",reason:o.probeError}]:[]};let s=Mw(o.dumps,n,t),i=[],a=[],l=0;for(let c of s){if(!r){a.push({path:c.path,reason:"dry_run"});continue}try{Dw(c.path),i.push({path:c.path,bytes:c.bytes,name:c.name}),l+=c.bytes}catch(u){a.push({path:c.path,reason:u.message})}}return{observation:o,execute:r,keepNewest:n,removed:i,removedBytes:l,skipped:a}}function Rc(e){return e?gi("KYNVER_WSL_CRASH_DUMP_CLEANUP")||!e.ok?!0:e.dumpCount>Vf("KYNVER_WSL_CRASH_DUMP_KEEP_NEWEST",1):!1}Ln();rl();el();_r();I();Ue();import Uw from"node:os";function go(e,r={}){let t=(r.boxKind??Ve(v())).trim().toLowerCase()||"forge",n=r.hostLabel??Uw.hostname();return{boxId:r.boxId??Zn(t,n),boxKind:t,displayName:r.displayName??null,hostLabel:n,observedAt:r.observedAt??new Date().toISOString(),totalMemBytes:e.totalMemBytes,freeMemBytes:e.freeMemBytes,activeWorkers:e.activeWorkers,maxConcurrentWorkers:e.maxConcurrentWorkers,autoCap:e.autoCap,slotsAvailable:e.slotsAvailable,harnessRunId:r.harnessRunId??null,queuedTasks:r.queuedTasks??null,reason:e.reason,...r.prEvidence?.length?{prEvidence:r.prEvidence}:{}}}function Ww(e){let r={ts:e.ts??new Date().toISOString(),phase:e.phase,summary:e.summary,changedFiles:e.changedFiles??[],blocker:e.blocker??null};return e.boxResourceSnapshot&&(r.boxResourceSnapshot=e.boxResourceSnapshot),e.prEvidence?.length&&(r.prEvidence=e.prEvidence),`${JSON.stringify(r)}
+`}Y();Fn();function Lw(e){if(e.skipReason==="engagement_required")return!0;let r=e.reason??"";return r.includes("engagement_required")||r.includes("engagement_not_found")||r.includes("engagement_expired")||r.includes("engagement_revoked")}il();Bn();import{createHash as Gf}from"node:crypto";function hi(e){return JSON.stringify(bc(e))}function bc(e){if(Array.isArray(e))return e.map(bc);if(e&&typeof e=="object"){let r={};for(let t of Object.keys(e).sort())r[t]=bc(e[t]);return r}return e}function Bw(e){return`ib1-${Gf("sha256").update(hi(e),"utf8").digest("hex").slice(0,16)}`}function Hw(e){return`ib-${Gf("sha256").update(Buffer.from(e)).digest("hex").slice(0,12)}`}function ki(e){if(!e)return null;let r=e.trim();if(!r)return null;if(/^[0-9a-fA-F]{64}$/.test(r))return new Uint8Array(r.match(/.{2}/g).map(t=>parseInt(t,16)));try{let t=Buffer.from(r,"base64");if(t.length===32)return new Uint8Array(t)}catch{}return null}function rn(e){if(!e||typeof e!="object")return!1;let r=e;if(typeof r.signature!="string"||!r.signature||typeof r.publicKeyId!="string"||!r.publicKeyId)return!1;let t=r.bundle;return!(!t||typeof t!="object"||typeof t.version!="string"||!t.version||typeof t.generatedAt!="string"||!Array.isArray(t.personas)||!t.instructions||typeof t.instructions!="object"||!t.policyThresholds||typeof t.policyThresholds!="object")}var Yf={"ib-3bab6314f0ba":"53a2040646cd479e1f5f1aea9abf7848ce8b62e32001efb8044dfd90e8ab87ed","ib-26e6c695da06":"bb1700f25b2ee7d7cdcdb9f446f0f44ef2cc22a3096bc161232fb658e7cdaf38"};function vc(e,r=process.env){let t=ki(r.KYNVER_INSTRUCTION_BUNDLE_PUBLIC_KEY);if(t)return t;let n=Yf[e];return n?ki(n):null}import{createPublicKey as Fw,verify as $w}from"node:crypto";var Kw=Buffer.from("302a300506032b6570032100","hex");function jw(e){return Fw({key:Buffer.concat([Kw,Buffer.from(e)]),format:"der",type:"spki"})}function Jf(e,r){if(!rn(e))return{ok:!1,reason:"malformed signed bundle payload"};let t;try{t=Buffer.from(e.signature,"base64url")}catch{return{ok:!1,reason:"signature is not base64url"}}if(t.length!==64)return{ok:!1,reason:"signature is not a 64-byte Ed25519 signature"};try{let n=Buffer.from(hi(e.bundle),"utf8");return $w(null,n,jw(r),t)?{ok:!0,bundle:e.bundle}:{ok:!1,reason:"Ed25519 signature mismatch"}}catch(n){return{ok:!1,reason:`signature verification failed: ${n.message}`}}}function Sc(e,r=process.env){if(!rn(e))return{ok:!1,reason:"malformed signed bundle payload"};let t=vc(e.publicKeyId,r);return t?Jf(e,t):{ok:!1,reason:`no verification key for publicKeyId "${e.publicKeyId}" (not pinned; set KYNVER_INSTRUCTION_BUNDLE_PUBLIC_KEY)`}}import{mkdirSync as Vw,readFileSync as Gw,renameSync as Yw,writeFileSync as Jw}from"node:fs";import{homedir as qw}from"node:os";import qf from"node:path";function Cc(e){let r=e.replace(/[^A-Za-z0-9_-]/g,"_");return qf.join(qw(),".kynver",`instruction-bundle-${r}.json`)}function wc(e,r){try{let t=Cc(e);Vw(qf.dirname(t),{recursive:!0});let n=`${t}.tmp-${process.pid}`;Jw(n,JSON.stringify(r),"utf8"),Yw(n,t)}catch{}}function _c(e){try{let r=Gw(Cc(e),"utf8"),t=JSON.parse(r);return rn(t)?t:null}catch{return null}}var zf=15*6e4,zw=1e4,mr={lastAttemptAtMs:0,etag:null,diskCacheTried:!1,routeMissingLogged:!1};function ko(e,r){console.error(JSON.stringify({event:e,...r}))}function Xf(e,r,t){let n=Sc(e);return n.ok?(gl(n.bundle,r),r==="server"&&wc(t,e),!0):(ko("instruction_bundle_signature_invalid",{agentOsId:t,source:r,publicKeyId:e.publicKeyId,reason:n.reason}),!1)}function ho(e){if(mr.diskCacheTried)return!1;mr.diskCacheTried=!0;let r=_c(e);return r?Xf(r,"disk",e):!1}async function xc(e){let r=e.nowMs??Date.now(),t=()=>({source:dr(),version:Er(),updated:!1});if(!e.force&&r-mr.lastAttemptAtMs<zf)return t();mr.lastAttemptAtMs=r;let n=e.baseUrl?.trim().replace(/\/$/,""),o=e.secret?.trim();if(!n||!o)return dr()==="embedded"&&ho(e.agentOsId)?{...t(),updated:!0}:t();let s=e.fetchImpl??fetch,i=new AbortController,a=setTimeout(()=>i.abort(),zw);try{let l=Be(o);delete l["Content-Type"],mr.etag&&dr()==="server"&&(l["If-None-Match"]=mr.etag);let c=await s(`${n}/api/agent-os/by-id/${encodeURIComponent(e.agentOsId)}/runtime/instruction-bundle`,{headers:l,signal:i.signal});if(c.status===304)return t();if(c.status===404)return mr.routeMissingLogged||(mr.routeMissingLogged=!0,ko("instruction_bundle_route_missing",{agentOsId:e.agentOsId,baseUrl:n})),dr()==="embedded"&&ho(e.agentOsId)?{...t(),updated:!0}:t();if(!c.ok)return ko("instruction_bundle_fetch_failed",{agentOsId:e.agentOsId,status:c.status}),dr()==="embedded"&&ho(e.agentOsId)?{...t(),updated:!0}:t();let u=await c.json().catch(()=>null);return!u||!Xf(u,"server",e.agentOsId)?dr()==="embedded"&&ho(e.agentOsId)?{...t(),updated:!0}:t():(mr.etag=c.headers.get("etag"),ko("instruction_bundle_loaded",{agentOsId:e.agentOsId,version:Er(),publicKeyId:u.publicKeyId}),{...t(),updated:!0})}catch(l){return ko("instruction_bundle_fetch_error",{agentOsId:e.agentOsId,error:l instanceof Error?l.message:String(l)}),dr()==="embedded"&&ho(e.agentOsId)?{...t(),updated:!0}:t()}finally{clearTimeout(a)}}var Ec="openai-codex",Xw=new Set(["upstream_503","connection_refused","connection_reset","sse_no_event","sse_idle_timeout"]),Qw=[/\bsk-[a-zA-Z0-9_-]{8,}\b/g,/\bBearer\s+[a-zA-Z0-9._-]{8,}\b/gi,/\baccess[_-]?token["\s:=]+[a-zA-Z0-9._-]{8,}/gi];function fr(e,r=400){let t=String(e??"").replace(/\s+/g," ").trim();for(let n of Qw)t=t.replace(n,"[redacted]");return t.length>r?`${t.slice(0,r)}\u2026`:t}function Zw(e,r){let t=[];e instanceof Error?(t.push(e.message),t.push(e.name)):typeof e=="string"?t.push(e):e!=null&&t.push(String(e));let n=e,o=r??n?.status_code??n?.statusCode??void 0;return o!=null&&t.push(`http ${o}`),{haystack:t.join(" ").toLowerCase(),statusCode:o}}function Zf(e,r){let{haystack:t,statusCode:n}=Zw(e,r),o=e instanceof Error?e.message:typeof e=="string"?e:String(e??"");if(n===402||/billing|credit|payment required|insufficient_quota/.test(t))return{errorClass:"billing",summary:fr(o||"Billing or credits exhausted"),statusCode:n,transient:!1};if(n===401||n===403||/\bunauthorized\b|\bforbidden\b/.test(t))return{errorClass:"auth",summary:fr(o||"Authentication failed"),statusCode:n,transient:!1};if(n===429||/rate limit|too many requests|throttl/.test(t))return{errorClass:"rate_limit",summary:fr(o||"Rate limited"),statusCode:n,transient:!0};if(n===503||/upstream connect error|connection termination|remote connection failure|delayed connect error/.test(t))return{errorClass:"upstream_503",summary:fr(o||"ChatGPT Codex backend returned HTTP 503"),statusCode:n??503,transient:!0};if(/connection refused/.test(t))return{errorClass:"connection_refused",summary:fr(o||"Connection refused by ChatGPT Codex backend"),statusCode:n,transient:!0};if(/no sse events|no bytes within|no stream events|codex stream produced no/.test(t)){let s=/no bytes|ttfb|first byte/.test(t)?"sse_no_event":"sse_idle_timeout";return{errorClass:s,summary:fr(o||(s==="sse_no_event"?"Codex stream opened but sent no events":"Codex stream stalled after the first event")),statusCode:n,transient:!0}}return/connection reset|connection lost|connection closed|disconnect\/reset/.test(t)?{errorClass:"connection_reset",summary:fr(o||"Connection reset while talking to ChatGPT Codex"),statusCode:n,transient:!0}:{errorClass:"unknown",summary:fr(o||"Unknown provider error"),statusCode:n,transient:!1}}function eg(e){let r=e.env??process.env,t=Math.max(1,e.defaultRetries??3),n=String(e.provider??"").toLowerCase(),o=String(e.platform??"").toLowerCase();if(n!==Ec||o!=="cron")return t;let s=r.HERMES_CODEX_CRON_API_MAX_RETRIES?.trim();if(!s)return Math.max(t,5);let i=Number.parseInt(s,10);return!Number.isFinite(i)||i<1?Math.max(t,5):Math.max(t,i)}var Qf={upstream_503:"ChatGPT Codex backend outage (HTTP 503)",connection_refused:"ChatGPT Codex backend refused the connection",connection_reset:"ChatGPT Codex connection dropped mid-request",sse_no_event:"Codex stream never started (no SSE events)",sse_idle_timeout:"Codex stream stalled (no SSE events after the first byte)",rate_limit:"ChatGPT Codex rate limit",billing:"ChatGPT Codex billing or quota limit",auth:"ChatGPT Codex authentication problem",unknown:"ChatGPT Codex provider error"};function rg(e){let r=e.provider?.trim()||Ec,t=e.model?.trim()||"(unknown model)",n=e.jobName?.trim()||"Scheduled Hermes job",o=Qf[e.errorClass]??Qf.unknown,s=e.degraded?"degraded":"failed";return[`\u26A0\uFE0F ${n} \u2014 AI provider ${s} (not a Kynver harness failure).`,"",`Provider: ${r} (ChatGPT Codex subscription)`,`Model: ${t}`,`What happened: ${o} after ${e.attempts} attempt(s) with backoff.`,`Details: ${e.summary}`,"","This is a ChatGPT/Codex API issue on chatgpt.com \u2014 not AgentOS, not the Kynver runtime, and not your local harness.","The cron job will run again on its next schedule. If it persists, check ChatGPT/Codex status or re-auth with: hermes auth status openai-codex"].join(`
+`)}function tg(e,r){return`\u26A0\uFE0F Cron job '${e}' \u2014 provider degraded
 
-${r}`}function yf(e){let{provider:r,model:t,authSource:n,costTier:o,riskClass:s,costRationale:i,routingRule:a,escalatedFrom:l,escalatedReason:c}=e;return{provider:r,model:t,authSource:n,costTier:o,riskClass:s,costRationale:i,routingRule:a,escalatedFrom:l,escalatedReason:c}}function Zw(e){return yf(e)}var sc=["off","observe","enforce"],eC=["foreground_harness_spawn","shell_platform_dispatch"],rC=["allow_local","observe_bypass","enforce_harness_task"];function tC(e){let r=(e??"off").trim().toLowerCase();return sc.includes(r)?r:"off"}function Qs(e=process.env){return tC(e.KYNVER_ORCHESTRATION_POLICY_MODE)}function ic(e=process.env){let r=e.KYNVER_ORCHESTRATION_ENFORCE_TASKS?.trim().toLowerCase();return r?r==="1"||r==="true"||r==="yes"||r==="on":Qs(e)==="enforce"}import{createHash as nC}from"node:crypto";function oo(e){if(e==null)return null;let r=e.trim();return r.length?r:null}function ac(e){let r=oo(e.sessionId)??"anonymous",t=oo(e.title)??oo(e.action)??"foreground",n=nC("sha256").update([oo(e.planId)??"",oo(e.parentTaskId)??"",t.toLowerCase()].join("|")).digest("hex").slice(0,16);return`hermes-foreground:${r}:${n}`}function oC(e,r){return e==="enforce"&&r?"enforce_harness_task":e==="observe"?"observe_bypass":"allow_local"}function sC(e,r=process.env){let t=Qs(r),n=ic(r),o=oC(t,n),s=o==="enforce_harness_task"?ac({sessionId:e.sessionId,planId:e.planId,parentTaskId:e.parentTaskId,title:e.title,action:e.action}):null,i;return t==="off"?i="Orchestration policy off \u2014 local foreground path allowed.":o==="observe_bypass"?i=`Observe mode: ${e.action} bypass logged; local fallback preserved.`:o==="enforce_harness_task"?i=`Enforce mode: ${e.action} must create linked harness AgentTask (${s}).`:i="Local foreground path allowed.",{mode:t,decision:o,idempotencyKey:s,bypassLogged:o==="observe_bypass",reason:i}}function iC(e,r){let t=e;return r&&(t=t.split(r).join("[REDACTED_SECRET]")),t=t.replace(/kynver_[a-z0-9_]+/gi,"[REDACTED_KYNVER_TOKEN]"),t=t.replace(/sk-[a-zA-Z0-9_-]+/g,"[REDACTED_API_KEY]"),t}Nr();import*as Zs from"node:fs";import{homedir as Rf}from"node:os";import*as Xe from"node:path";function vf(e){return e.startsWith("~/")?Xe.join(Rf(),e.slice(2)):e}function ei(e={}){let r=e.env??process.env,t=e.cwd??process.cwd(),n=e.homeDir??(r.HOME?.trim()||r.USERPROFILE?.trim()||Rf()),o=new Set,s=[],i=c=>{let u=Xe.resolve(vf(c));o.has(u)||(o.add(u),s.push(u))},a=r.KYNVER_ENV_FILE?.trim();a&&i(a);let l=t;for(let c=0;c<12;c+=1){i(Xe.join(l,".env"));let u=Xe.dirname(l);if(u===l)break;l=u}i(Xe.join(n,".kynver",".env"));try{let c=Xe.join(n,".kynver","config.json");if(Zs.existsSync(c)){let d=JSON.parse(Zs.readFileSync(c,"utf8")).defaultRepo?.trim();d&&i(Xe.join(d,".env"))}}catch{}return s}import{execFileSync as aC,spawnSync as lC}from"node:child_process";import*as ri from"node:fs";import*as bf from"node:path";function so(e){if(!e?.trim())return"(not set)";try{let r=new URL(e),t=(r.pathname||"").replace(/^\//,"").split("?")[0]||"(no database name)";return`${r.hostname} / ${t}`}catch{return"(invalid URL)"}}var lc=["KYNVER_PRODUCTION_DATABASE_URL","PRODUCTION_DATABASE_URL"],cc=[...lc];function He(e,r){return e[r]?.trim()||void 0}function Sf(e){if(!ri.existsSync(e))return{};let r={},t=new Set(cc);for(let n of ri.readFileSync(e,"utf8").split(`
-`)){let o=n.match(/^\s*([A-Za-z_][A-Za-z0-9_]*)\s*=\s*(.*)$/);if(!o||!t.has(o[1]))continue;let s=o[1];r[s]=o[2].replace(/^["']|["']$/g,"").trim()}return r}function cC(e){for(let r of lc){let t=He(e,r);if(t)return{ok:!0,databaseUrl:t,source:`env:${r}`,hint:so(t)}}return null}function uC(e,r){for(let t of ei({cwd:e,env:r})){let n=Sf(t);for(let o of cc){let s=n[o]?.trim();if(s)return{ok:!0,databaseUrl:s,source:`env-file:${o}`,hint:`${so(s)} (${bf.basename(t)})`}}}return null}function dC(e){let r=process.platform==="win32"?"neon.cmd":"neon",t=["connection-string",e.branch,"--prisma","-o","json","--no-color","--no-analytics"];e.projectId&&t.push("--project-id",e.projectId),e.databaseName&&t.push("--database-name",e.databaseName),e.roleName&&t.push("--role-name",e.roleName),e.pooled&&t.push("--pooled");let n;try{let o=lC(r,t,{encoding:"utf8",env:process.env,timeout:3e4});if(o.status!==0)return null;n=(o.stdout||"").trim()}catch{try{n=aC("neonctl",t,{encoding:"utf8",env:process.env,timeout:3e4}).trim()}catch{return null}}if(!n)return null;try{let o=JSON.parse(n),s=typeof o.connection_uri=="string"&&o.connection_uri||typeof o.connection_string=="string"&&o.connection_string||typeof o.connectionString=="string"&&o.connectionString;if(s)return s}catch{}return/^postgres(ql)?:\/\//i.test(n)?n:null}function pC(e,r){let t=He(e,"KYNVER_NEON_BRANCH")||He(e,"NEON_BRANCH")||"production",n=r({branch:t,projectId:He(e,"KYNVER_NEON_PROJECT_ID")||He(e,"NEON_PROJECT_ID"),databaseName:He(e,"KYNVER_NEON_DATABASE_NAME")||He(e,"NEON_DATABASE_NAME"),roleName:He(e,"KYNVER_NEON_ROLE_NAME")||He(e,"NEON_ROLE_NAME"),pooled:He(e,"KYNVER_NEON_POOLED")==="1"||He(e,"NEON_POOLED")==="1"});return n?{ok:!0,databaseUrl:n,source:"neon-cli",hint:so(n)}:null}function wf(e={}){let r=e.env??process.env,t=e.cwd??process.cwd(),n=e.neonConnectionString??dC,o=[],s=ei({cwd:t,env:r}),i=pC(r,n);if(o.push("neon-cli"),i)return i;for(let u of lc)o.push(`env:${u}`);let a=cC(r);if(a)return a;for(let u of cc)o.push(`env-file:${u}`);let l=uC(t,r);return l||{ok:!1,reason:"No production database credentials found. Authenticate Neon CLI (`neon auth`), set KYNVER_NEON_* / NEON_* project hints, or provide PRODUCTION_DATABASE_URL / KYNVER_PRODUCTION_DATABASE_URL (process env, KYNVER_ENV_FILE, ~/.kynver/.env, or selective .env keys in the repo / defaultRepo checkout)."+(s.length>0?` Searched env files: ${s.slice(0,6).join(", ")}${s.length>6?"\u2026":""}.`:""),attempted:o}}function mC(e={}){let r=wf(e);if(!r.ok)throw new Error(r.reason);return process.env.DATABASE_URL=r.databaseUrl,console.error(`[kynver-cli] database target: ${r.hint} (source: ${r.source})`),r}Ce();L();import{existsSync as o_,mkdirSync as s_}from"node:fs";import i_ from"node:path";L();Pt();import{existsSync as XC,readFileSync as QC}from"node:fs";import Tf from"node:path";import JC from"node:path";L();Pt();G();w();import fC from"node:path";var gC=new Set(["running","dispatching","pending","queued","needs_attention"]),cr=new Set(["completed","failed","cancelled","done"]);function nt(e){let r=Ee(e);if(r.length===0)return"failed";let t=!1,n=!1,o=!1,s=!1;for(let i of r){let a=_(fC.join(x(e.id),"workers",R(i),"worker.json"),void 0);if(!a)continue;let l=T(a,{base:e.base,baseCommit:e.baseCommit});if(l.alive&&!l.finalResult){t=!0;break}typeof a.completionBlocker=="string"&&a.completionBlocker&&(o=!0),Fr(l)&&(s=!0),l.finalResult&&l.attention.state==="done"&&(n=!0)}return t||o||s?null:n?"completed":"failed"}function io(){let e=[];for(let r of ne()){if(!gC.has(r.status))continue;let t=nt(r);if(!t||t===r.status)continue;let n=r.status;r.status=t,Ue(r),e.push({runId:r.id,from:n,to:t})}return e}L();Pt();G();w();Lr();En();import{existsSync as Er,lstatSync as EC,readdirSync as PC,readlinkSync as AC,renameSync as vc,unlinkSync as IC}from"node:fs";import Qe from"node:path";ke();w();import fe from"node:path";var hC=`${fe.sep}runs${fe.sep}runs${fe.sep}`;function Gt(e){return e.includes(hC)}function kC(e,r){if(!Gt(e))return e;let t=te(r),n=pe(t),o=`${fe.sep}runs${fe.sep}runs${fe.sep}`,s=e.indexOf(o);if(s<0)return e;let i=e.slice(s+o.length);return fe.join(n,i)}function uc(e,r){return fe.join(pe(te(e)),R(r))}function ur(e,r,t){return fe.join(uc(e,r),"workers",R(t))}function Cf(e,r,t){let n=te(e);return fe.join(n,"runs","runs",R(r),"workers",R(t))}function dc(){return["stdout.jsonl","stderr.log","heartbeat.jsonl","last-status.json","auto-complete.log","worker.json"]}function ot(e){return{workerJsonPath:fe.join(e,"worker.json"),stdoutPath:fe.join(e,"stdout.jsonl"),stderrPath:fe.join(e,"stderr.log"),heartbeatPath:fe.join(e,"heartbeat.jsonl"),lastStatusPath:fe.join(e,"last-status.json")}}function pc(e){let r=ot(ur(e.harnessRoot,e.runId,e.workerName)).workerJsonPath;return e.statusPath&&!Gt(e.statusPath)?e.statusPath:r}import{existsSync as xr,mkdirSync as vC,readdirSync as Ef,renameSync as bC,statSync as fc}from"node:fs";import z from"node:path";O();bn();nr();import _f from"node:path";function yC(e){return _f.resolve(bt(e.trim()))}function mc(e,r,t){let n=e?.trim();return n?{repo:yC(n),source:r,persistedInConfig:t}:null}function Re(e={}){let r=e.env??process.env,t=e.config??v(),n=mc(t.defaultRepo,"config",!0);if(n)return n;let o=mc(r.KYNVER_DEFAULT_REPO,"env_default_repo",!1);if(o)return o;let s=mc(r.KYNVER_HARNESS_REPO,"env_harness_repo",!1);if(s)return s;let i=kr({cwd:e.cwd,runtimeModuleUrl:e.runtimeModuleUrl});return i?{repo:i.repo,source:i.source,persistedInConfig:!1}:null}function ti(e,r){let t={...r??v(),defaultRepo:he(_f.resolve(e))};return Ve(t),t}function RC(e){let r=e?.config??v(),t=Re({...e,config:r});if(!t)return{ok:!1,reason:"No Kynver git checkout found. Clone the repo, cd into it, then run `kynver setup --repo /path/to/Kynver` (or export KYNVER_DEFAULT_REPO)."};if(t.persistedInConfig)return{ok:!0,resolved:t,config:r};let n=ti(t.repo,r);return{ok:!0,resolved:{...t,persistedInConfig:!0,source:"config"},config:n}}function Yt(e){return{defaultRepo:Y(e.repo),source:e.source,persistedInConfig:e.persistedInConfig}}Lr();ke();L();w();var Jt=900*1e3,Pf=3600*1e3;function gc(e,r){let t=z.resolve(e),n=z.resolve(pe(r)),o=z.relative(n,t);return o!==".."&&!o.startsWith("..")&&!z.isAbsolute(o)}function hc(e){if(!xr(e))return[];try{return Ef(e,{withFileTypes:!0}).filter(r=>r.isDirectory()&&r.name!=="runs").map(r=>r.name)}catch{return[]}}function kc(e){let r=z.join(e,"workers");if(!xr(r))return[];try{return Ef(r,{withFileTypes:!0}).filter(t=>t.isDirectory()).map(t=>t.name)}catch{return[]}}function Af(e){return z.join(e,"archived-workers")}function SC(e,r){let t=z.join(Af(e),R(r));return xr(t)?`${t}-${Date.now()}`:t}function xf(e,r,t){if(!xr(e))return!1;try{let n=r-fc(e).mtimeMs;return Number.isFinite(n)&&n>=0&&n<t}catch{return!1}}function yc(e,r=Date.now(),t=Jt){if(!xr(e))return!1;let n=ot(e),o=_(n.workerJsonPath,void 0);if(o?.status==="running"&&$(o.pid))return!0;let s=_e(n.heartbeatPath);if(s.lastHeartbeatAt){let i=r-Date.parse(s.lastHeartbeatAt);if(Number.isFinite(i)&&i>=0&&i<t)return!0}return!!(xf(n.stdoutPath,r,t)||xf(n.heartbeatPath,r,t))}function wC(e,r,t){let n=typeof r.completionReportedAt=="string"?Date.parse(r.completionReportedAt):NaN;if(Number.isFinite(n))return t-n;let o=(()=>{let s=r.completionResponse;if(!s||typeof s!="object")return NaN;let i=s.task;if(!i||typeof i!="object")return NaN;let a=i.updatedAt;return typeof a=="string"?Date.parse(a):NaN})();if(Number.isFinite(o))return t-o;try{return t-fc(z.join(e,"worker.json")).mtimeMs}catch{return 0}}function CC(e,r,t,n){if(yc(e,t))return{eligible:!1,reason:"worker has active/recent retention signals"};let o=typeof r.status=="string"?r.status:"";if(typeof r.completionBlocker=="string"&&r.completionBlocker.trim().length>0)return{eligible:!1,reason:"worker has completion blocker"};let i=typeof r.completionReportedAt=="string"||r.completionOutcome==="acknowledged";if(o!=="done"&&!i)return{eligible:!1,reason:`worker status is ${o||"unknown"}`};let a=wC(e,r,t);return!Number.isFinite(a)||a<n?{eligible:!1,reason:"terminal worker is still within archive grace window"}:{eligible:!0,reason:"terminal worker metadata archived"}}function st(e,r=Date.now(),t=Jt){for(let n of kc(e))if(yc(z.join(e,"workers",n),r,t))return!0;return!1}function _C(){return{repo:Re()?.repo??"",base:"origin/main",baseCommit:"unknown"}}function xC(e,r){let t=z.join(pe(e),R(r));if(!xr(t))return null;let n=kc(t);if(n.length===0)return null;let o;try{o=fc(t).birthtime.toISOString()}catch{o=new Date().toISOString()}let s={};for(let a of n){let l=ur(e,r,a);s[a]={workerDir:l,statusPath:z.join(l,"worker.json")}}let i=st(t);return{id:r,name:r,..._C(),status:i?"running":"needs_attention",createdAt:o,workers:s}}function ni(e){let r=te(e??de()),t=pe(r),n=[];for(let o of hc(t)){let s=z.join(t,o,"run.json");if(xr(s)){n.push({runId:o,action:"skipped",reason:"run.json present"});continue}let i=xC(r,o);if(!i){n.push({runId:o,action:"skipped",reason:"no worker dirs on disk"});continue}Ue(i),n.push({runId:o,action:"repaired_run_json",reason:st(z.join(t,o))?"synthesized run.json while worker artifacts still active":"synthesized run.json from orphan worker metadata dirs"})}return{runs:n}}function oi(e,r={}){let t=te(e??de()),n=pe(t),o=r.now??Date.now(),s=r.archiveAgeMs??Pf,i=[];ni(t);for(let a of hc(n)){let l=z.join(n,a),c=z.join(l,"run.json"),u=_(c,void 0);if(!u?.id)continue;let d=new Set([...Object.keys(u.workers||{}),...kc(l)]),f=!1;for(let m of d){let p=z.join(l,"workers",R(m)),g=z.join(p,"worker.json"),k=_(g,void 0);if(!k){let A=z.join(Af(l),R(m));if(xr(A)&&(u.workers[R(m)]||u.workers[m])){delete u.workers[R(m)],delete u.workers[m],f=!0,i.push({runId:u.id,worker:m,action:"archived",reason:"removed stale live index entry for archived worker metadata",archivePath:A});continue}i.push({runId:u.id,worker:m,action:"skipped",reason:"worker.json missing"});continue}let h=CC(p,k,o,s);if(!h.eligible){i.push({runId:u.id,worker:m,action:"skipped",reason:h.reason});continue}let S=SC(l,m);vC(z.dirname(S),{recursive:!0}),bC(p,S),delete u.workers[R(m)],delete u.workers[m],f=!0,i.push({runId:u.id,worker:m,action:"archived",reason:h.reason,archivePath:S})}f&&Ue(u)}return{workers:i}}function Rc(e,r=Date.now()){let t=new Set,n=pe(e);for(let o of hc(n)){let s=z.join(n,o);st(s,r)&&t.add(`${e}\0${o}`)}return t}L();w();function OC(e,r){let t=uc(e,r),n;try{n=EC(t)}catch{return null}if(!n.isSymbolicLink())return null;let o=Qe.resolve(Qe.dirname(t),AC(t));if(st(o)||st(t))return null;let s=`${t}.materialize-${Date.now()}`;return vc(o,s),IC(t),vc(s,t),o}function NC(e){let r=[];for(let t of dc()){let n=Qe.join(e.fromDir,t),o=Qe.join(e.toDir,t);!Er(n)||Er(o)||(vc(n,o),r.push(t))}return r}function If(e,r){let t=ot(r),n=!1;return e.workerDir!==r&&(e.workerDir=r,n=!0),e.stdoutPath!==t.stdoutPath&&(e.stdoutPath=t.stdoutPath,n=!0),e.stderrPath!==t.stderrPath&&(e.stderrPath=t.stderrPath,n=!0),e.heartbeatPath!==t.heartbeatPath&&(e.heartbeatPath=t.heartbeatPath,n=!0),n}function TC(e){let r=typeof e.lastStatus?.status=="string"?e.lastStatus.status:void 0,t=e.lastStatus?.attention&&typeof e.lastStatus.attention=="object"?e.lastStatus.attention.state:void 0;return r==="done"||t==="done"||e.stdoutFinalResult||e.heartbeatFinalResult?"done":r==="blocked"?"blocked":r==="running"?"exited":r??"exited"}function DC(e){let r=ot(e.canonicalDir),t=_(r.lastStatusPath,void 0),n=Er(r.stdoutPath),o=Er(r.heartbeatPath);if(!(n||o||t!=null))return null;let i=n?At(r.stdoutPath):{finalResult:null},a=o?_e(r.heartbeatPath):_e(""),l=Ur(a),c=TC({lastStatus:t,stdoutFinalResult:i.finalResult,heartbeatFinalResult:l}),u={name:e.workerName,runId:e.run.id,status:c,branch:typeof t?.branch=="string"?t.branch:`agent/${e.run.id}/${e.workerName}`,worktreePath:typeof t?.worktreePath=="string"?t.worktreePath:Qe.join(oe().worktreesDir,e.run.id,e.workerName),workerDir:e.canonicalDir,stdoutPath:r.stdoutPath,stderrPath:r.stderrPath,heartbeatPath:r.heartbeatPath,startedAt:typeof t?.startedAt=="string"?t.startedAt:e.run.createdAt,reconciledAt:new Date().toISOString(),reconcileReason:"synthesized worker.json from on-disk artifacts after metadata repair"};return typeof t?.taskId=="string"&&(u.taskId=t.taskId),typeof t?.agentOsId=="string"&&(u.agentOsId=t.agentOsId),typeof t?.planId=="string"&&(u.planId=t.planId),typeof t?.pid=="number"&&(u.pid=t.pid),(i.finalResult||l)&&(u.completionSnapshot={finalResult:i.finalResult??l??"completed",summary:a.lastHeartbeatSummary}),If(u,e.canonicalDir),u}function MC(e,r){let t=!1,n={...e.workers||{}};for(let[o,s]of Object.entries(n)){let i=ur(r,e.id,o),a=Qe.join(i,"worker.json");(Gt(s.workerDir)||Gt(s.statusPath)||s.workerDir!==i||s.statusPath!==a)&&(n[o]={workerDir:i,statusPath:a},t=!0)}return t&&(e.workers=n,Ue(e)),t}function UC(e){let r=[],t=ur(e.harnessRoot,e.run.id,e.workerName),n=Cf(e.harnessRoot,e.run.id,e.workerName),o=ot(t),s=NC({fromDir:n,toDir:t});s.length>0&&r.push({runId:e.run.id,worker:e.workerName,action:"relocated_artifacts",reason:`moved ${s.join(", ")} from nested runs/runs layout`});let i=pc({harnessRoot:e.harnessRoot,runId:e.run.id,workerName:e.workerName,statusPath:e.statusPath}),a=_(i,void 0);if(!a&&Er(o.workerJsonPath)&&(a=_(o.workerJsonPath,void 0)),!a){let l=DC({run:e.run,workerName:e.workerName,canonicalDir:t,harnessRoot:e.harnessRoot});if(l)return V(e.run.id,l),r.push({runId:e.run.id,worker:e.workerName,action:"synthesized_worker_json",reason:l.reconcileReason??"synthesized from artifacts"}),r;let c=Er(t),u=dc().some(d=>Er(Qe.join(t,d)));if(c&&!u){let d={name:e.workerName,runId:e.run.id,status:"exited",branch:`agent/${e.run.id}/${e.workerName}`,worktreePath:Qe.join(oe().worktreesDir,e.run.id,e.workerName),workerDir:t,stdoutPath:o.stdoutPath,stderrPath:o.stderrPath,heartbeatPath:o.heartbeatPath,startedAt:e.run.createdAt,reconciledAt:new Date().toISOString(),reconcileReason:"empty worker dir \u2014 marked abandoned during metadata reconcile"};return V(e.run.id,d),r.push({runId:e.run.id,worker:e.workerName,action:"marked_abandoned",reason:d.reconcileReason??"empty worker dir"}),r}return r.push({runId:e.run.id,worker:e.workerName,action:"skipped",reason:"worker.json missing and no recoverable artifacts"}),r}return If(a,t)?(a.reconciledAt=new Date().toISOString(),a.reconcileReason=a.reconcileReason??"repaired nested runs/runs path fields",V(e.run.id,a),r.push({runId:e.run.id,worker:e.workerName,action:"repaired_worker_paths",reason:a.reconcileReason})):r.push({runId:e.run.id,worker:e.workerName,action:"skipped",reason:"worker metadata already canonical"}),r}function LC(e,r){let t=Qe.join(x(e.id),"workers");if(!Er(t))return[];let n=new Set(Object.keys(e.workers||{})),o=[];for(let s of PC(t,{withFileTypes:!0}))s.isDirectory()&&(n.has(s.name)||o.push(s.name));return o}function si(){let{harnessRoot:e}=oe(),r=ni(e),t=[];for(let n of ne()){let o=OC(e,n.id);o&&t.push({runId:n.id,worker:"*",action:"materialized_run_symlink",reason:`replaced symlink with real run dir (was ${o})`}),MC(n,e)&&t.push({runId:n.id,worker:"*",action:"repaired_run_index",reason:"repaired nested runs/runs workerDir/statusPath entries in run.json"});let s=new Set(Object.keys(n.workers||{}));for(let i of LC(n,e))s.add(i),n.workers={...n.workers||{},[i]:{workerDir:ur(e,n.id,i),statusPath:Qe.join(ur(e,n.id,i),"worker.json")}},Ue(n),t.push({runId:n.id,worker:i,action:"repaired_run_index",reason:"indexed orphan worker dir into run.json"});for(let i of s){let a=n.workers?.[i];t.push(...UC({run:n,workerName:i,harnessRoot:e,statusPath:a?.statusPath}))}}return{workers:t,runMetadataRetention:r}}function BC(){let e=si(),r=e.workers.reduce((n,o)=>(n[o.action]=(n[o.action]??0)+1,n),{}),t=e.runMetadataRetention.runs.reduce((n,o)=>(n[o.action]=(n[o.action]??0)+1,n),{});console.log(JSON.stringify({ok:!0,totals:r,runMetadataRetention:{totals:t,details:e.runMetadataRetention.runs},details:e.workers},null,2))}Lr();zo();G();L();Pt();w();import{execFileSync as Of}from"node:child_process";import Nf from"node:path";function bc(e){let r=e.trim().match(/github\.com\/([^/]+\/[^/]+)\/(?:pull|pulls)\/(\d+)/i);return r?`https://github.com/${r[1]}/pull/${r[2]}`:null}function WC(e){let r=bc(e)?.match(/\/pull\/(\d+)$/);if(!r)return null;let t=Number.parseInt(r[1],10);return Number.isFinite(t)?t:null}function HC(e){if(e==null)return"";if(typeof e=="string")return e;try{return JSON.stringify(e)}catch{return""}}function FC(e){let r=new Set;for(let t of e.matchAll(/github\.com\/[^/\s)>"']+\/[^/\s)>"']+\/(?:pull|pulls)\/(\d+)/gi)){let n=Number.parseInt(t[1],10);Number.isFinite(n)&&r.add(n)}for(let t of e.matchAll(/\bPR\s*#?\s*(\d{2,})\b/gi)){let n=Number.parseInt(t[1],10);Number.isFinite(n)&&r.add(n)}for(let t of e.matchAll(/\bpr[-_]?(\d{2,})\b/gi)){let n=Number.parseInt(t[1],10);Number.isFinite(n)&&r.add(n)}return[...r]}function $C(e){let r=null;if(typeof e=="string"?r=It(e):e&&typeof e=="object"&&!Array.isArray(e)&&(r=e),!r)return[];let t=r.targetPrReconciliation??r.target_pr_reconciliation;if(!Array.isArray(t))return[];let n=[];for(let o of t){if(!o||typeof o!="object"||Array.isArray(o))continue;let s=o,i=bc(String(s.prUrl??s.pr_url??"")),a=String(s.outcome??"").trim();!i||a!=="merged"||n.push({prUrl:i,mergeCommit:typeof s.mergeCommit=="string"?s.mergeCommit:typeof s.merge_commit=="string"?s.merge_commit:null,reason:typeof s.reason=="string"?s.reason:null})}return n}function KC(e){try{let n=Of("git",["config","--get","remote.origin.url"],{cwd:e.repoDir,encoding:"utf8",stdio:["ignore","pipe","ignore"]}).trim().match(/github\.com[:/]([^/]+\/[^/.]+)(?:\.git)?$/i)?.[1];if(!n)return null;let o=Of("gh",["pr","view",String(e.prNumber),"--repo",n,"--json","state,mergedAt,mergeCommit,url"],{cwd:e.repoDir,encoding:"utf8",stdio:["ignore","pipe","ignore"]}),s=JSON.parse(o);return{prUrl:bc(s.url??`https://github.com/${n}/pull/${e.prNumber}`)??`https://github.com/${n}/pull/${e.prNumber}`,state:s.state??"",mergedAt:s.mergedAt??null,mergeCommit:s.mergeCommit?.oid??null}}catch{return null}}function jC(e){let r=_e(e.heartbeatPath);return e.completionSnapshot?.finalResult??Ur(r)}function VC(e){let r=new Map,t=x(e.id);for(let n of Ee(e)){let o=_(Nf.join(t,"workers",R(n),"worker.json"),void 0);if(o)for(let s of $C(jC(o))){let i=WC(s.prUrl);i!=null&&!r.has(i)&&r.set(i,s)}}return r}function GC(e,r){let t=_e(e.heartbeatPath),n=[e.name,e.repairTargetPrUrl,e.taskPrUrl,e.branch,t.lastHeartbeatSummary,HC(r)].filter(Boolean).join(`
-`);return FC(n)}function YC(e){return e.localOnly===!0&&!e.taskId&&!e.agentOsId}function ii(e={}){let r=e.lookupPr??KC,t=[],n=new Map;for(let o of ne()){let s=VC(o),i=x(o.id);for(let a of Ee(o)){let l=Nf.join(i,"workers",R(a),"worker.json"),c=_(l,void 0);if(!c||!YC(c))continue;let u=T(c,{base:o.base,baseCommit:o.baseCommit});if(u.attention.state!=="needs_attention")continue;let d=null;for(let m of GC(c,u.finalResult)){if(d=s.get(m)??null,!d){let p=o.repo||c.worktreePath,g=`${p}#${m}`,k=n.has(g)?n.get(g)??null:r({repoDir:p,prNumber:m});n.has(g)||n.set(g,k),k&&(k.state==="MERGED"||k.mergedAt)&&(d={prUrl:k.prUrl,mergeCommit:k.mergeCommit??null,reason:"GitHub reports PR merged"})}if(d)break}if(!d){t.push({runId:o.id,worker:a,action:"skipped",reason:"no merged PR evidence"});continue}let f=new Date().toISOString();c.status="done",c.completionSnapshot={prUrl:d.prUrl,summary:`Local-only worker superseded by merged PR ${d.prUrl}`,finalResult:{summary:`Local-only repair/salvage worker superseded by merged PR ${d.prUrl}`,targetPrReconciliation:[{prUrl:d.prUrl,outcome:"merged",mergeCommit:d.mergeCommit??null,reason:d.reason??"PR already merged; local-only worker no longer requires attention"}]}},c.completionAckSource="local-pr-merged-reconcile",c.reconciledAt=f,c.reconcileReason="local-only needs_attention superseded by merged PR",V(o.id,c),t.push({runId:o.id,worker:a,action:"marked_done",reason:c.reconcileReason,prUrl:d.prUrl,mergeCommit:d.mergeCommit??null})}}return{workers:t}}var qC=900*1e3;function zC(){return process.env.KYNVER_NO_STALE_CLEANUP==="1"}function qt(){let e=si();if(zC()){let s=ii(),i=oi();return{workers:[],finalizedRuns:io(),metadataReconcile:e,localPrAttentionReconcile:s,terminalWorkerArchive:i}}let r=[],t=Date.now();for(let s of ne())for(let i of Ee(s)){let a=JC.join(x(s.id),"workers",R(i),"worker.json"),l=_(a,void 0);if(!l||l.status!=="running"){r.push({runId:s.id,worker:i,action:"skipped",reason:l?`worker status is ${l.status}`:"worker.json missing"});continue}let c=T(l,{base:s.base,baseCommit:s.baseCommit});if(c.finalResult){if(l.status==="running"){let u=c.attention.state==="blocked"?"blocked":c.attention.state==="done"||c.status==="done"?"done":"exited";l.status=u,l.reconciledAt=new Date().toISOString(),l.reconcileReason="synced finished worker record after terminal stdout/heartbeat",V(s.id,l),r.push({runId:s.id,worker:i,action:"marked_exited",reason:l.reconcileReason})}else r.push({runId:s.id,worker:i,action:"skipped",reason:"final result present"});continue}if(!c.alive){let u=c.attention.state==="blocked"?"blocked":c.status==="done"?"done":"exited";l.status=u,l.reconciledAt=new Date().toISOString(),l.reconcileReason=c.attention.reason,V(s.id,l),r.push({runId:s.id,worker:i,action:"marked_exited",reason:c.attention.reason});continue}if(c.attention.state==="stale"&&l.pid&&$(l.pid)){let u=c.lastHeartbeatAt?Date.parse(c.lastHeartbeatAt):NaN,d=c.lastActivityAt?Date.parse(c.lastActivityAt):NaN,f=!Number.isFinite(u)||t-u>qC,m=Number.isFinite(d)&&t-d>Nt;if(f&&m){Rn(l.pid,"SIGTERM"),l.status="exited",l.reconciledAt=new Date().toISOString(),l.reconcileReason=`reconciled stale worker: ${c.attention.reason}`,V(s.id,l),r.push({runId:s.id,worker:i,action:"killed_stale",reason:c.attention.reason});continue}}r.push({runId:s.id,worker:i,action:"skipped",reason:c.attention.reason})}let n=ii(),o=oi();return{workers:r,finalizedRuns:io(),metadataReconcile:e,localPrAttentionReconcile:n,terminalWorkerArchive:o}}function Sc(){let e=qt(),r=e.workers.filter(l=>l.action==="marked_exited").length,t=e.workers.filter(l=>l.action==="killed_stale").length,n=e.workers.filter(l=>l.action==="skipped").length,o=e.metadataReconcile.workers.reduce((l,c)=>(l[c.action]=(l[c.action]??0)+1,l),{}),s=e.localPrAttentionReconcile.workers.reduce((l,c)=>(l[c.action]=(l[c.action]??0)+1,l),{}),i=e.metadataReconcile.runMetadataRetention.runs.reduce((l,c)=>(l[c.action]=(l[c.action]??0)+1,l),{}),a=e.terminalWorkerArchive.workers.reduce((l,c)=>(l[c.action]=(l[c.action]??0)+1,l),{});console.log(JSON.stringify({ok:!0,workers:{markedExited:r,killedStale:t,skipped:n,total:e.workers.length},metadataReconcile:{totals:o,total:e.metadataReconcile.workers.length,runMetadataRetention:{totals:i,total:e.metadataReconcile.runMetadataRetention.runs.length}},localPrAttentionReconcile:{totals:s,total:e.localPrAttentionReconcile.workers.length},terminalWorkerArchive:{totals:a,total:e.terminalWorkerArchive.workers.length},finalizedRuns:e.finalizedRuns.length,details:{workers:e.workers,metadataReconcile:e.metadataReconcile.workers,localPrAttentionReconcile:e.localPrAttentionReconcile.workers,terminalWorkerArchive:e.terminalWorkerArchive.workers,runMetadataRetention:e.metadataReconcile.runMetadataRetention.runs,finalizedRuns:e.finalizedRuns}},null,2))}G();w();function ZC(e){if(!e||!XC(e))return 0;try{return QC(e,"utf8").trim().length}catch{return 0}}function e_(e,r){let t=Tf.join(x(e.id),"workers",R(r),"worker.json"),n=_(t,void 0);if(!n)return{worker:r,workerStatus:"missing",attention:"needs_attention",attentionReason:"worker.json missing",missingHeartbeat:!0,missingFinalResult:!0,landingBlocked:!1,completionBlocked:!1};let o=T(n,{base:e.base,baseCommit:e.baseCommit}),s=ZC(n.heartbeatPath)===0,i=!o.finalResult&&!o.alive,a=typeof n.completionBlocker=="string"&&n.completionBlocker.length>0;return{worker:r,workerStatus:n.status,attention:o.attention.state,attentionReason:o.attention.reason,missingHeartbeat:s,missingFinalResult:i,landingBlocked:Fr(o),completionBlocked:a}}function r_(e){return e.openWorkerCount>0?"active_workers":e.workers.some(r=>r.completionBlocked)?"completion_blocked":e.workers.some(r=>r.landingBlocked)?"landing_blocked":null}function t_(e){let r={blocked:5,needs_attention:4,stale:3,done:2,ok:1},t="ok",n;for(let o of e){let s=o.attention;(r[s]??0)>=(r[t]??0)&&(t=s,n=o.attentionReason)}return{attention:t,attentionReason:n}}function n_(e){let r=0;for(let t of Ee(e)){let n=Tf.join(x(e.id),"workers",R(t),"worker.json"),o=_(n,void 0);if(!o)continue;let s=T(o,{base:e.base,baseCommit:e.baseCommit});s.alive&&!s.finalResult&&(r+=1)}return r}function ai(){return qt(),ne().map(e=>{let t=Ee(e).map(d=>e_(e,d)),n=t.filter(d=>d.missingHeartbeat).map(d=>d.worker),o=t.filter(d=>d.missingFinalResult).map(d=>d.worker),s=t.filter(d=>d.landingBlocked).map(d=>d.worker),i=t.filter(d=>d.completionBlocked).map(d=>d.worker),{attention:a,attentionReason:l}=t_(t),c=n_(e),u=Tt(e.status,t.map(d=>({attention:d.attention,status:d.workerStatus})));return{id:e.id,name:e.name,status:e.status,effectiveStatus:u,repo:e.repo,createdAt:e.createdAt,openWorkerCount:c,attention:a,attentionReason:l,finalizeBlockedReason:r_({run:e,workers:t,openWorkerCount:c}),evidence:{missingHeartbeatWorkers:n,missingFinalResultWorkers:o,landingBlockedWorkers:s,completionBlockedWorkers:i,workers:t}}})}function wc(){console.log(JSON.stringify(ai(),null,2))}w();function a_(e){let r=typeof e.repo=="string"?e.repo.trim():"";if(r)return r;let t=Re();return t?t.repo:(N("","--repo (or set defaultRepo via `kynver setup` / KYNVER_DEFAULT_REPO)"),"")}function ao(e){let r=Nl(a_(e));Zu(r);let t=e.id?Gn(String(e.id)):Vu(String(e.name||"run")),n=x(t);o_(n)&&l_(`run already exists: ${t}`),s_(n,{recursive:!0});let o=String(e.base||"origin/main"),s=ue(r,["rev-parse",o]).trim(),i={id:t,name:String(e.name||t),repo:r,base:o,baseCommit:s,status:"created",createdAt:new Date().toISOString(),workers:{}};ce(i_.join(n,"run.json"),i);let a={runId:t,runDir:n,repo:r,base:o,baseCommit:s};return console.log(JSON.stringify(a,null,2)),a}function Cc(){wc()}function l_(e){console.error(e),process.exit(1)}w();function Df(e){let r=e.trim();return r?ai().find(n=>n.name===r&&n.status!=="completed")??null:null}function _c(e){let r=String(N(String(e.name||""),"--name")),t=Df(r);console.log(JSON.stringify({runId:t?.id??null,name:r,status:t?.status??null,effectiveStatus:t?.effectiveStatus??null},null,2))}Qo();O();import c_ from"node:path";L();G();w();async function zt(e){let r=e.pipeline===!0||e.pipeline==="true";try{let t=U(String(N(String(e.run||""),"--run"))),n=String(N(String(e.agentOsId||""),"--agent-os-id")),o=B(e.baseUrl?String(e.baseUrl):void 0),s=await K(e.secret?String(e.secret):void 0,n,{baseUrl:o}),i=qe({runId:t.id}).runnerId,a=await Am({run:t.id,agentOsId:n,...e},"run_sweep"),l=[];for(let f of Object.keys(t.workers||{})){let m=_(c_.join(x(t.id),"workers",R(f),"worker.json"),void 0);if(!m||!m.dispatched||!m.taskId)continue;let p=T(m);if(p.alive||p.finalResult||m.completionReportedAt)continue;let g=Ss({runId:t.id,workerLeaseOwner:m.leaseOwner??null,runnerId:i}),k=`${o}/api/agent-os/by-id/${encodeURIComponent(n)}/tasks/${encodeURIComponent(String(m.taskId))}/release`,h;try{h=await q(k,s,{agentOsId:n,leaseOwner:g},{agentOsId:n,baseUrl:o})}catch(S){h={ok:!1,error:S.message}}l.push({worker:f,taskId:m.taskId,pid:m.pid,released:h.ok===!0||h.response?.ok===!0,response:h.response??h})}let c=`${o}/api/agent-os/by-id/${encodeURIComponent(n)}/tasks/reap`,u;try{u=await q(c,s,{agentOsId:n,...Number(e.graceMs)>=0&&e.graceMs!==void 0&&e.graceMs!==!0?{graceMs:Math.floor(Number(e.graceMs))}:{}},{agentOsId:n,baseUrl:o})}catch(f){u={ok:!1,error:f.message}}let d={runId:t.id,agentOsId:n,snapshotPublished:a,releasedLocalOrphans:l,reap:u.response??u};if(r)return{ok:!0,...d};console.log(JSON.stringify(d,null,2))}catch(t){if(r)return{ok:!1,error:t.message};console.error(`run sweep failed: ${t.message}`),process.exit(1)}}O();bn();ke();ke();import{existsSync as h_,readdirSync as Uf,statSync as k_}from"node:fs";import y_ from"node:path";import{execFileSync as u_}from"node:child_process";import{existsSync as Mf,readdirSync as d_,statSync as p_}from"node:fs";import m_ from"node:path";var f_=2500;function g_(e,r=f_){if(!Mf(e))return 0;try{let n=u_("du",["-sb",e],{encoding:"utf8",timeout:r,stdio:["ignore","pipe","ignore"]}).trim().split(/\s+/)[0],o=Number(n);return Number.isFinite(o)&&o>=0?o:null}catch{return null}}function dr(e,r=5e4){if(!Mf(e))return 0;let t=g_(e);if(t!==null)return t;let n=0,o=0,s=[e];for(;s.length>0;){let i=s.pop(),a;try{a=d_(i)}catch{continue}for(let l of a){if(o++>r)return null;let c=m_.join(i,l),u;try{u=p_(c)}catch{continue}u.isDirectory()?s.push(c):n+=u.size}}return n}function xc(e={}){let r=te(e.harnessRoot??de()),t=or(r),n=e.now??Date.now(),o=new Date(n).toISOString();if(!h_(t))return{harnessRoot:r,worktreesDir:t,worktreesBytes:0,runCount:0,workerCount:0,oldestRunAt:null,scannedAt:o};let s=0,i=0,a=0,l=null,c;try{c=Uf(t,{withFileTypes:!0})}catch{return{harnessRoot:r,worktreesDir:t,worktreesBytes:null,runCount:0,workerCount:0,oldestRunAt:null,scannedAt:o}}for(let u of c){if(!u.isDirectory())continue;i+=1;let d=y_.join(t,u.name);try{let f=k_(d);l=l===null?f.mtimeMs:Math.min(l,f.mtimeMs)}catch{}try{for(let f of Uf(d,{withFileTypes:!0}))f.isDirectory()&&(a+=1)}catch{}if(s!==null&&e.perRunEntryCap!==null){let f=e.perRunEntryCap??5e4;if(f<=0)s=null;else{let m=dr(d,f);m===null?s=null:s+=m}}}return{harnessRoot:r,worktreesDir:t,worktreesBytes:s,runCount:i,workerCount:a,oldestRunAt:l===null?null:new Date(l).toISOString(),scannedAt:o}}ke();import Oe from"node:path";In();import di from"node:path";Ce();G();var li=[".next",".turbo","dist","build",".cache","node_modules/.cache"];function Ec(e){let r=e.replace(/\\/g,"/").replace(/\/+$/,"");if(r==="node_modules"||r.startsWith("node_modules/"))return!0;for(let t of li)if(r===t||r.startsWith(`${t}/`))return!0;return!1}function Ae(e){return e.filter(r=>{let t=r.trim(),n=t.startsWith("??")?t.slice(2).trim():t.length>3?t.slice(3).trim():t;return!Ec(n)})}function it(e){if(typeof e=="string")return e.match(/https:\/\/github\.com\/[^\s]+\/pull\/\d+/i)?.[0]??null;if(e&&typeof e=="object"){let r=e;for(let t of["prUrl","pr_url","pullRequestUrl"]){let n=r[t];if(typeof n=="string"&&n.trim())return n.trim()}}return null}function lo(e){let r=e.gitAncestry?.relation;return r==="merged"||r==="synced"?Ae(e.changedFiles).length>0:!!(it(e.finalResult)||r==="ahead"||r==="diverged"||e.changedFiles.length>0&&e.finalResult)}w();function co(e){return e.status||(e.status=T(e.worker,{base:e.run.base,baseCommit:e.run.baseCommit})),e.status}function Pc(e,r){if(e.status)return Ae(e.status.changedFiles).length>0;let t=r?r.porcelain(e.worktreePath):vn(e.worktreePath);return Ae(t).length>0}function R_(e){let r=e.worker.completionSnapshot?.finalResult;return r??(e.worker.taskPrUrl?{prUrl:e.worker.taskPrUrl}:null)}function Ac(e,r){if(e.status)return e.status;let t=e.worker,n=typeof t.completionReportedAt=="string"&&t.completionReportedAt.trim().length>0,o=!!(t.status&&["done","exited","blocked","failed","abandoned"].includes(t.status))||n,s=R_(e);if(o&&!$(t.pid)){let i=r?.gitStatusCache?r.gitStatusCache.porcelain(e.worktreePath):vn(e.worktreePath),a=e.run.baseCommit?.trim()||e.run.base?.trim()||"origin/main",c=r?.gitRevCache?.countAheadOfMain(e.worktreePath,a)===0?{checked:!0,base:a,relation:"synced"}:Ho(e.worktreePath,{base:e.run.base,baseCommit:e.run.baseCommit}),u={runId:e.runId,worker:e.workerName,pid:t.pid,alive:!1,status:t.status??(n?"done":"exited"),attention:{state:n?"done":"stale"},branch:t.branch,worktreePath:e.worktreePath,ownedPaths:t.ownedPaths,stdoutBytes:0,stderrBytes:0,heartbeatBytes:0,firstEventAt:null,lastEventAt:null,lastActivityAt:t.completionReportedAt??null,currentTool:null,heartbeatCount:0,lastHeartbeatAt:null,lastHeartbeatPhase:null,lastHeartbeatSummary:null,heartbeatBlocker:null,changedFiles:i,gitAncestry:c,finalResult:s,completionBlocker:typeof t.completionBlocker=="string"&&t.completionBlocker.trim()||null,prUrl:t.repairTargetPrUrl??t.taskPrUrl??it(s)};return e.status=u,u}return co(e)}G();G();Lr();w();function Ic(e,r=Date.now(),t=Jt){let n=_e(e.heartbeatPath);if(!n.lastHeartbeatAt)return!1;let o=r-Date.parse(n.lastHeartbeatAt);return Number.isFinite(o)&&o>=0&&o<t}function ci(e,r=Date.now(),t=Jt){return $(e.pid)?!0:Ic(e,r,t)}function v_(e,r){return r?r.runTerminalCache.derive(e.run):nt(e.run)}function pr(e,r=Date.now()){return ci(e.worker,r)}function Oc(e,r){return cr.has(e.run.status)?!1:v_(e,r)!==null}function Lf(e,r,t=Date.now()){if(pr(e,t))return!0;if(cr.has(e.run.status)||Oc(e,r))return!1;let n=co(e);return Z(n)?!1:!!pr(e,t)}In();G();function Bf(e,r){if(!(typeof e.worker.completionBlocker=="string"?e.worker.completionBlocker.trim():""))return!1;if(pr(e))return!0;let n=r??co(e);return!!(!Z(n)||lo(n)||Ae(n.changedFiles).length>0||Wr({finalResult:n.finalResult,changedFiles:n.changedFiles,gitAncestry:n.gitAncestry,prUrl:it(n.finalResult)}).blocked)}Ce();w();import{existsSync as Hf,mkdirSync as b_,writeFileSync as Wf}from"node:fs";import ui from"node:path";function Ff(e,r,t){return ui.join(e,"salvage",R(r),R(t))}function $f(e){return Hf(ui.join(Ff(e.harnessRoot,e.runId,e.workerName),"evidence.json"))}function Kf(e){let r=Ff(e.harnessRoot,e.indexed.runId,e.indexed.workerName);b_(r,{recursive:!0});let t=ui.join(r,"salvage.patch"),n=!1;if(Hf(e.indexed.worktreePath)){let s=Q(e.indexed.worktreePath,["diff","HEAD"]),i=Q(e.indexed.worktreePath,["diff","--cached"]),a=[s.stdout,i.stdout].filter(l=>l.trim()).join(`
-`);a.trim()&&(Wf(t,a.endsWith(`
+${r}`}function ng(e){let{provider:r,model:t,authSource:n,costTier:o,riskClass:s,costRationale:i,routingRule:a,escalatedFrom:l,escalatedReason:c}=e;return{provider:r,model:t,authSource:n,costTier:o,riskClass:s,costRationale:i,routingRule:a,escalatedFrom:l,escalatedReason:c}}function e_(e){return ng(e)}var Pc=["off","observe","enforce"],r_=["foreground_harness_spawn","shell_platform_dispatch"],t_=["allow_local","observe_bypass","enforce_harness_task"];function n_(e){let r=(e??"off").trim().toLowerCase();return Pc.includes(r)?r:"off"}function yi(e=process.env){return n_(e.KYNVER_ORCHESTRATION_POLICY_MODE)}function Ac(e=process.env){let r=e.KYNVER_ORCHESTRATION_ENFORCE_TASKS?.trim().toLowerCase();return r?r==="1"||r==="true"||r==="yes"||r==="on":yi(e)==="enforce"}import{createHash as o_}from"node:crypto";function yo(e){if(e==null)return null;let r=e.trim();return r.length?r:null}function Ic(e){let r=yo(e.sessionId)??"anonymous",t=yo(e.title)??yo(e.action)??"foreground",n=o_("sha256").update([yo(e.planId)??"",yo(e.parentTaskId)??"",t.toLowerCase()].join("|")).digest("hex").slice(0,16);return`hermes-foreground:${r}:${n}`}function s_(e,r){return e==="enforce"&&r?"enforce_harness_task":e==="observe"?"observe_bypass":"allow_local"}function i_(e,r=process.env){let t=yi(r),n=Ac(r),o=s_(t,n),s=o==="enforce_harness_task"?Ic({sessionId:e.sessionId,planId:e.planId,parentTaskId:e.parentTaskId,title:e.title,action:e.action}):null,i;return t==="off"?i="Orchestration policy off \u2014 local foreground path allowed.":o==="observe_bypass"?i=`Observe mode: ${e.action} bypass logged; local fallback preserved.`:o==="enforce_harness_task"?i=`Enforce mode: ${e.action} must create linked harness AgentTask (${s}).`:i="Local foreground path allowed.",{mode:t,decision:o,idempotencyKey:s,bypassLogged:o==="observe_bypass",reason:i}}function a_(e,r){let t=e;return r&&(t=t.split(r).join("[REDACTED_SECRET]")),t=t.replace(/kynver_[a-z0-9_]+/gi,"[REDACTED_KYNVER_TOKEN]"),t=t.replace(/sk-[a-zA-Z0-9_-]+/g,"[REDACTED_API_KEY]"),t}Hr();import*as Ri from"node:fs";import{homedir as og}from"node:os";import*as Qe from"node:path";function sg(e){return e.startsWith("~/")?Qe.join(og(),e.slice(2)):e}function bi(e={}){let r=e.env??process.env,t=e.cwd??process.cwd(),n=e.homeDir??(r.HOME?.trim()||r.USERPROFILE?.trim()||og()),o=new Set,s=[],i=c=>{let u=Qe.resolve(sg(c));o.has(u)||(o.add(u),s.push(u))},a=r.KYNVER_ENV_FILE?.trim();a&&i(a);let l=t;for(let c=0;c<12;c+=1){i(Qe.join(l,".env"));let u=Qe.dirname(l);if(u===l)break;l=u}i(Qe.join(n,".kynver",".env"));try{let c=Qe.join(n,".kynver","config.json");if(Ri.existsSync(c)){let d=JSON.parse(Ri.readFileSync(c,"utf8")).defaultRepo?.trim();d&&i(Qe.join(d,".env"))}}catch{}return s}import{execFileSync as l_,spawnSync as c_}from"node:child_process";import*as vi from"node:fs";import*as ig from"node:path";function Ro(e){if(!e?.trim())return"(not set)";try{let r=new URL(e),t=(r.pathname||"").replace(/^\//,"").split("?")[0]||"(no database name)";return`${r.hostname} / ${t}`}catch{return"(invalid URL)"}}var Oc=["KYNVER_PRODUCTION_DATABASE_URL","PRODUCTION_DATABASE_URL"],Nc=[...Oc];function $e(e,r){return e[r]?.trim()||void 0}function ag(e){if(!vi.existsSync(e))return{};let r={},t=new Set(Nc);for(let n of vi.readFileSync(e,"utf8").split(`
+`)){let o=n.match(/^\s*([A-Za-z_][A-Za-z0-9_]*)\s*=\s*(.*)$/);if(!o||!t.has(o[1]))continue;let s=o[1];r[s]=o[2].replace(/^["']|["']$/g,"").trim()}return r}function u_(e){for(let r of Oc){let t=$e(e,r);if(t)return{ok:!0,databaseUrl:t,source:`env:${r}`,hint:Ro(t)}}return null}function d_(e,r){for(let t of bi({cwd:e,env:r})){let n=ag(t);for(let o of Nc){let s=n[o]?.trim();if(s)return{ok:!0,databaseUrl:s,source:`env-file:${o}`,hint:`${Ro(s)} (${ig.basename(t)})`}}}return null}function p_(e){let r=process.platform==="win32"?"neon.cmd":"neon",t=["connection-string",e.branch,"--prisma","-o","json","--no-color","--no-analytics"];e.projectId&&t.push("--project-id",e.projectId),e.databaseName&&t.push("--database-name",e.databaseName),e.roleName&&t.push("--role-name",e.roleName),e.pooled&&t.push("--pooled");let n;try{let o=c_(r,t,{encoding:"utf8",env:process.env,timeout:3e4});if(o.status!==0)return null;n=(o.stdout||"").trim()}catch{try{n=l_("neonctl",t,{encoding:"utf8",env:process.env,timeout:3e4}).trim()}catch{return null}}if(!n)return null;try{let o=JSON.parse(n),s=typeof o.connection_uri=="string"&&o.connection_uri||typeof o.connection_string=="string"&&o.connection_string||typeof o.connectionString=="string"&&o.connectionString;if(s)return s}catch{}return/^postgres(ql)?:\/\//i.test(n)?n:null}function m_(e,r){let t=$e(e,"KYNVER_NEON_BRANCH")||$e(e,"NEON_BRANCH")||"production",n=r({branch:t,projectId:$e(e,"KYNVER_NEON_PROJECT_ID")||$e(e,"NEON_PROJECT_ID"),databaseName:$e(e,"KYNVER_NEON_DATABASE_NAME")||$e(e,"NEON_DATABASE_NAME"),roleName:$e(e,"KYNVER_NEON_ROLE_NAME")||$e(e,"NEON_ROLE_NAME"),pooled:$e(e,"KYNVER_NEON_POOLED")==="1"||$e(e,"NEON_POOLED")==="1"});return n?{ok:!0,databaseUrl:n,source:"neon-cli",hint:Ro(n)}:null}function lg(e={}){let r=e.env??process.env,t=e.cwd??process.cwd(),n=e.neonConnectionString??p_,o=[],s=bi({cwd:t,env:r}),i=m_(r,n);if(o.push("neon-cli"),i)return i;for(let u of Oc)o.push(`env:${u}`);let a=u_(r);if(a)return a;for(let u of Nc)o.push(`env-file:${u}`);let l=d_(t,r);return l||{ok:!1,reason:"No production database credentials found. Authenticate Neon CLI (`neon auth`), set KYNVER_NEON_* / NEON_* project hints, or provide PRODUCTION_DATABASE_URL / KYNVER_PRODUCTION_DATABASE_URL (process env, KYNVER_ENV_FILE, ~/.kynver/.env, or selective .env keys in the repo / defaultRepo checkout)."+(s.length>0?` Searched env files: ${s.slice(0,6).join(", ")}${s.length>6?"\u2026":""}.`:""),attempted:o}}function f_(e={}){let r=lg(e);if(!r.ok)throw new Error(r.reason);return process.env.DATABASE_URL=r.databaseUrl,console.error(`[kynver-cli] database target: ${r.hint} (source: ${r.source})`),r}Ee();W();import{existsSync as sx,mkdirSync as ix}from"node:fs";import ax from"node:path";W();Gr();import{existsSync as Q_,readFileSync as Z_}from"node:fs";import Rg from"node:path";import q_ from"node:path";W();Gr();Y();C();import g_ from"node:path";var h_=new Set(["running","dispatching","pending","queued","needs_attention"]),gr=new Set(["completed","failed","cancelled","done"]);function pt(e){let r=ge(e);if(r.length===0)return"failed";let t=!1,n=!1,o=!1,s=!1;for(let i of r){let a=_(g_.join(E(e.id),"workers",R(i),"worker.json"),void 0);if(!a)continue;let l=N(a,{base:e.base,baseCommit:e.baseCommit});if(l.alive&&!l.finalResult){t=!0;break}typeof a.completionBlocker=="string"&&a.completionBlocker&&(o=!0),Xr(l)&&(s=!0),l.finalResult&&l.attention.state==="done"&&(n=!0)}return t||o||s?null:n?"completed":"failed"}function bo(){let e=[];for(let r of J()){if(!h_.has(r.status))continue;let t=pt(r);if(!t||t===r.status)continue;let n=r.status;r.status=t,Le(r),e.push({runId:r.id,from:n,to:t})}return e}W();Gr();Y();C();_r();Ln();import{existsSync as Dr,lstatSync as P_,readdirSync as A_,readlinkSync as I_,renameSync as $c,unlinkSync as O_}from"node:fs";import Ze from"node:path";Ce();C();import ye from"node:path";var k_=`${ye.sep}runs${ye.sep}runs${ye.sep}`;function tn(e){return e.includes(k_)}function y_(e,r){if(!tn(e))return e;let t=ie(r),n=fe(t),o=`${ye.sep}runs${ye.sep}runs${ye.sep}`,s=e.indexOf(o);if(s<0)return e;let i=e.slice(s+o.length);return ye.join(n,i)}function Tc(e,r){return ye.join(fe(ie(e)),R(r))}function hr(e,r,t){return ye.join(Tc(e,r),"workers",R(t))}function cg(e,r,t){let n=ie(e);return ye.join(n,"runs","runs",R(r),"workers",R(t))}function Dc(){return["stdout.jsonl","stderr.log","heartbeat.jsonl","last-status.json","auto-complete.log","worker.json"]}function mt(e){return{workerJsonPath:ye.join(e,"worker.json"),stdoutPath:ye.join(e,"stdout.jsonl"),stderrPath:ye.join(e,"stderr.log"),heartbeatPath:ye.join(e,"heartbeat.jsonl"),lastStatusPath:ye.join(e,"last-status.json")}}function Mc(e){let r=mt(hr(e.harnessRoot,e.runId,e.workerName)).workerJsonPath;return e.statusPath&&!tn(e.statusPath)?e.statusPath:r}import{existsSync as Tr,mkdirSync as v_,readdirSync as mg,renameSync as S_,statSync as Uc}from"node:fs";import Q from"node:path";I();Nn();ir();import ug from"node:path";function R_(e){return ug.resolve(Ot(e.trim()))}function nn(e,r,t){let n=e?.trim();return n?{repo:R_(n),source:r,persistedInConfig:t}:null}function dg(e){return e?{repo:e.repo,source:e.source,persistedInConfig:!1}:null}function Ke(e={}){let r=e.env??process.env,t=e.config??v(),n=nn(t.defaultRepo,"config",!0);if(n)return n;let o=nn(r.KYNVER_DEFAULT_REPO,"env_default_repo",!1);if(o)return o;let s=nn(r.KYNVER_HARNESS_REPO,"env_harness_repo",!1);return s||dg($r({cwd:e.cwd,runtimeModuleUrl:e.runtimeModuleUrl}))}function Si(e={}){let r=e.env??process.env,t=e.config??v(),n=nn(t.defaultRepo,"config",!0);if(n)return n;let o=nn(r.KYNVER_DEFAULT_REPO,"env_default_repo",!1);if(o)return o;let s=nn(r.KYNVER_HARNESS_REPO,"env_harness_repo",!1);return s||dg(On({cwd:e.cwd,runtimeModuleUrl:e.runtimeModuleUrl}))}function Ci(e,r){let t={...r??v(),defaultRepo:Se(ug.resolve(e))};return Ge(t),t}function b_(e){let r=e?.config??v(),t=Si({...e,config:r});if(!t)return{ok:!1,reason:"No Kynver git checkout found. Clone the repo, cd into it, then run `kynver setup --repo /path/to/Kynver` (or export KYNVER_DEFAULT_REPO)."};if(t.persistedInConfig)return{ok:!0,resolved:t,config:r};let n=Ci(t.repo,r);return{ok:!0,resolved:{...t,persistedInConfig:!0,source:"config"},config:n}}function on(e){return{defaultRepo:q(e.repo),source:e.source,persistedInConfig:e.persistedInConfig}}_r();Ce();W();C();var sn=900*1e3,fg=3600*1e3;function Wc(e,r){let t=Q.resolve(e),n=Q.resolve(fe(r)),o=Q.relative(n,t);return o!==".."&&!o.startsWith("..")&&!Q.isAbsolute(o)}function Lc(e){if(!Tr(e))return[];try{return mg(e,{withFileTypes:!0}).filter(r=>r.isDirectory()&&r.name!=="runs").map(r=>r.name)}catch{return[]}}function Bc(e){let r=Q.join(e,"workers");if(!Tr(r))return[];try{return mg(r,{withFileTypes:!0}).filter(t=>t.isDirectory()).map(t=>t.name)}catch{return[]}}function gg(e){return Q.join(e,"archived-workers")}function C_(e,r){let t=Q.join(gg(e),R(r));return Tr(t)?`${t}-${Date.now()}`:t}function pg(e,r,t){if(!Tr(e))return!1;try{let n=r-Uc(e).mtimeMs;return Number.isFinite(n)&&n>=0&&n<t}catch{return!1}}function Hc(e,r=Date.now(),t=sn){if(!Tr(e))return!1;let n=mt(e),o=_(n.workerJsonPath,void 0);if(o?.status==="running"&&$(o.pid))return!0;let s=he(n.heartbeatPath);if(s.lastHeartbeatAt){let i=r-Date.parse(s.lastHeartbeatAt);if(Number.isFinite(i)&&i>=0&&i<t)return!0}return!!(pg(n.stdoutPath,r,t)||pg(n.heartbeatPath,r,t))}function w_(e,r,t){let n=typeof r.completionReportedAt=="string"?Date.parse(r.completionReportedAt):NaN;if(Number.isFinite(n))return t-n;let o=(()=>{let s=r.completionResponse;if(!s||typeof s!="object")return NaN;let i=s.task;if(!i||typeof i!="object")return NaN;let a=i.updatedAt;return typeof a=="string"?Date.parse(a):NaN})();if(Number.isFinite(o))return t-o;try{return t-Uc(Q.join(e,"worker.json")).mtimeMs}catch{return 0}}function __(e,r,t,n){if(Hc(e,t))return{eligible:!1,reason:"worker has active/recent retention signals"};let o=typeof r.status=="string"?r.status:"";if(typeof r.completionBlocker=="string"&&r.completionBlocker.trim().length>0)return{eligible:!1,reason:"worker has completion blocker"};let i=typeof r.completionReportedAt=="string"||r.completionOutcome==="acknowledged";if(o!=="done"&&!i)return{eligible:!1,reason:`worker status is ${o||"unknown"}`};let a=w_(e,r,t);return!Number.isFinite(a)||a<n?{eligible:!1,reason:"terminal worker is still within archive grace window"}:{eligible:!0,reason:"terminal worker metadata archived"}}function ft(e,r=Date.now(),t=sn){for(let n of Bc(e))if(Hc(Q.join(e,"workers",n),r,t))return!0;return!1}function x_(){return{repo:Ke()?.repo??"",base:"origin/main",baseCommit:"unknown"}}function E_(e,r){let t=Q.join(fe(e),R(r));if(!Tr(t))return null;let n=Bc(t);if(n.length===0)return null;let o;try{o=Uc(t).birthtime.toISOString()}catch{o=new Date().toISOString()}let s={};for(let a of n){let l=hr(e,r,a);s[a]={workerDir:l,statusPath:Q.join(l,"worker.json")}}let i=ft(t);return{id:r,name:r,...x_(),status:i?"running":"needs_attention",createdAt:o,workers:s}}function wi(e){let r=ie(e??me()),t=fe(r),n=[];for(let o of Lc(t)){let s=Q.join(t,o,"run.json");if(Tr(s)){n.push({runId:o,action:"skipped",reason:"run.json present"});continue}let i=E_(r,o);if(!i){n.push({runId:o,action:"skipped",reason:"no worker dirs on disk"});continue}Le(i),n.push({runId:o,action:"repaired_run_json",reason:ft(Q.join(t,o))?"synthesized run.json while worker artifacts still active":"synthesized run.json from orphan worker metadata dirs"})}return{runs:n}}function _i(e,r={}){let t=ie(e??me()),n=fe(t),o=r.now??Date.now(),s=r.archiveAgeMs??fg,i=[];wi(t);for(let a of Lc(n)){let l=Q.join(n,a),c=Q.join(l,"run.json"),u=_(c,void 0);if(!u?.id)continue;let d=new Set([...Object.keys(u.workers||{}),...Bc(l)]),f=!1;for(let m of d){let p=Q.join(l,"workers",R(m)),g=Q.join(p,"worker.json"),k=_(g,void 0);if(!k){let x=Q.join(gg(l),R(m));if(Tr(x)&&(u.workers[R(m)]||u.workers[m])){delete u.workers[R(m)],delete u.workers[m],f=!0,i.push({runId:u.id,worker:m,action:"archived",reason:"removed stale live index entry for archived worker metadata",archivePath:x});continue}i.push({runId:u.id,worker:m,action:"skipped",reason:"worker.json missing"});continue}let h=__(p,k,o,s);if(!h.eligible){i.push({runId:u.id,worker:m,action:"skipped",reason:h.reason});continue}let b=C_(l,m);v_(Q.dirname(b),{recursive:!0}),S_(p,b),delete u.workers[R(m)],delete u.workers[m],f=!0,i.push({runId:u.id,worker:m,action:"archived",reason:h.reason,archivePath:b})}f&&Le(u)}return{workers:i}}function Fc(e,r=Date.now()){let t=new Set,n=fe(e);for(let o of Lc(n)){let s=Q.join(n,o);ft(s,r)&&t.add(`${e}\0${o}`)}return t}W();C();function N_(e,r){let t=Tc(e,r),n;try{n=P_(t)}catch{return null}if(!n.isSymbolicLink())return null;let o=Ze.resolve(Ze.dirname(t),I_(t));if(ft(o)||ft(t))return null;let s=`${t}.materialize-${Date.now()}`;return $c(o,s),O_(t),$c(s,t),o}function T_(e){let r=[];for(let t of Dc()){let n=Ze.join(e.fromDir,t),o=Ze.join(e.toDir,t);!Dr(n)||Dr(o)||($c(n,o),r.push(t))}return r}function hg(e,r){let t=mt(r),n=!1;return e.workerDir!==r&&(e.workerDir=r,n=!0),e.stdoutPath!==t.stdoutPath&&(e.stdoutPath=t.stdoutPath,n=!0),e.stderrPath!==t.stderrPath&&(e.stderrPath=t.stderrPath,n=!0),e.heartbeatPath!==t.heartbeatPath&&(e.heartbeatPath=t.heartbeatPath,n=!0),n}function D_(e){let r=typeof e.lastStatus?.status=="string"?e.lastStatus.status:void 0,t=e.lastStatus?.attention&&typeof e.lastStatus.attention=="object"?e.lastStatus.attention.state:void 0;return r==="done"||t==="done"||e.stdoutFinalResult||e.heartbeatFinalResult?"done":r==="blocked"?"blocked":r==="running"?"exited":r??"exited"}function M_(e){let r=mt(e.canonicalDir),t=_(r.lastStatusPath,void 0),n=Dr(r.stdoutPath),o=Dr(r.heartbeatPath);if(!(n||o||t!=null))return null;let i=n?Bt(r.stdoutPath):{finalResult:null},a=o?he(r.heartbeatPath):he(""),l=Yr(a),c=D_({lastStatus:t,stdoutFinalResult:i.finalResult,heartbeatFinalResult:l}),u={name:e.workerName,runId:e.run.id,status:c,branch:typeof t?.branch=="string"?t.branch:`agent/${e.run.id}/${e.workerName}`,worktreePath:typeof t?.worktreePath=="string"?t.worktreePath:Ze.join(te().worktreesDir,e.run.id,e.workerName),workerDir:e.canonicalDir,stdoutPath:r.stdoutPath,stderrPath:r.stderrPath,heartbeatPath:r.heartbeatPath,startedAt:typeof t?.startedAt=="string"?t.startedAt:e.run.createdAt,reconciledAt:new Date().toISOString(),reconcileReason:"synthesized worker.json from on-disk artifacts after metadata repair"};return typeof t?.taskId=="string"&&(u.taskId=t.taskId),typeof t?.agentOsId=="string"&&(u.agentOsId=t.agentOsId),typeof t?.planId=="string"&&(u.planId=t.planId),typeof t?.pid=="number"&&(u.pid=t.pid),(i.finalResult||l)&&(u.completionSnapshot={finalResult:i.finalResult??l??"completed",summary:a.lastHeartbeatSummary}),hg(u,e.canonicalDir),u}function U_(e,r){let t=!1,n={...e.workers||{}};for(let[o,s]of Object.entries(n)){let i=hr(r,e.id,o),a=Ze.join(i,"worker.json");(tn(s.workerDir)||tn(s.statusPath)||s.workerDir!==i||s.statusPath!==a)&&(n[o]={workerDir:i,statusPath:a},t=!0)}return t&&(e.workers=n,Le(e)),t}function W_(e){let r=[],t=hr(e.harnessRoot,e.run.id,e.workerName),n=cg(e.harnessRoot,e.run.id,e.workerName),o=mt(t),s=T_({fromDir:n,toDir:t});s.length>0&&r.push({runId:e.run.id,worker:e.workerName,action:"relocated_artifacts",reason:`moved ${s.join(", ")} from nested runs/runs layout`});let i=Mc({harnessRoot:e.harnessRoot,runId:e.run.id,workerName:e.workerName,statusPath:e.statusPath}),a=_(i,void 0);if(!a&&Dr(o.workerJsonPath)&&(a=_(o.workerJsonPath,void 0)),!a){let l=M_({run:e.run,workerName:e.workerName,canonicalDir:t,harnessRoot:e.harnessRoot});if(l)return G(e.run.id,l),r.push({runId:e.run.id,worker:e.workerName,action:"synthesized_worker_json",reason:l.reconcileReason??"synthesized from artifacts"}),r;let c=Dr(t),u=Dc().some(d=>Dr(Ze.join(t,d)));if(c&&!u){let d={name:e.workerName,runId:e.run.id,status:"exited",branch:`agent/${e.run.id}/${e.workerName}`,worktreePath:Ze.join(te().worktreesDir,e.run.id,e.workerName),workerDir:t,stdoutPath:o.stdoutPath,stderrPath:o.stderrPath,heartbeatPath:o.heartbeatPath,startedAt:e.run.createdAt,reconciledAt:new Date().toISOString(),reconcileReason:"empty worker dir \u2014 marked abandoned during metadata reconcile"};return G(e.run.id,d),r.push({runId:e.run.id,worker:e.workerName,action:"marked_abandoned",reason:d.reconcileReason??"empty worker dir"}),r}return r.push({runId:e.run.id,worker:e.workerName,action:"skipped",reason:"worker.json missing and no recoverable artifacts"}),r}return hg(a,t)?(a.reconciledAt=new Date().toISOString(),a.reconcileReason=a.reconcileReason??"repaired nested runs/runs path fields",G(e.run.id,a),r.push({runId:e.run.id,worker:e.workerName,action:"repaired_worker_paths",reason:a.reconcileReason})):r.push({runId:e.run.id,worker:e.workerName,action:"skipped",reason:"worker metadata already canonical"}),r}function L_(e,r){let t=Ze.join(E(e.id),"workers");if(!Dr(t))return[];let n=new Set(Object.keys(e.workers||{})),o=[];for(let s of A_(t,{withFileTypes:!0}))s.isDirectory()&&(n.has(s.name)||o.push(s.name));return o}function xi(){let{harnessRoot:e}=te(),r=wi(e),t=[];for(let n of J()){let o=N_(e,n.id);o&&t.push({runId:n.id,worker:"*",action:"materialized_run_symlink",reason:`replaced symlink with real run dir (was ${o})`}),U_(n,e)&&t.push({runId:n.id,worker:"*",action:"repaired_run_index",reason:"repaired nested runs/runs workerDir/statusPath entries in run.json"});let s=new Set(Object.keys(n.workers||{}));for(let i of L_(n,e))s.add(i),n.workers={...n.workers||{},[i]:{workerDir:hr(e,n.id,i),statusPath:Ze.join(hr(e,n.id,i),"worker.json")}},Le(n),t.push({runId:n.id,worker:i,action:"repaired_run_index",reason:"indexed orphan worker dir into run.json"});for(let i of s){let a=n.workers?.[i];t.push(...W_({run:n,workerName:i,harnessRoot:e,statusPath:a?.statusPath}))}}return{workers:t,runMetadataRetention:r}}function B_(){let e=xi(),r=e.workers.reduce((n,o)=>(n[o.action]=(n[o.action]??0)+1,n),{}),t=e.runMetadataRetention.runs.reduce((n,o)=>(n[o.action]=(n[o.action]??0)+1,n),{});console.log(JSON.stringify({ok:!0,totals:r,runMetadataRetention:{totals:t,details:e.runMetadataRetention.runs},details:e.workers},null,2))}_r();gs();Y();W();Gr();C();import{execFileSync as kg}from"node:child_process";import yg from"node:path";function Kc(e){let r=e.trim().match(/github\.com\/([^/]+\/[^/]+)\/(?:pull|pulls)\/(\d+)/i);return r?`https://github.com/${r[1]}/pull/${r[2]}`:null}function H_(e){let r=Kc(e)?.match(/\/pull\/(\d+)$/);if(!r)return null;let t=Number.parseInt(r[1],10);return Number.isFinite(t)?t:null}function F_(e){if(e==null)return"";if(typeof e=="string")return e;try{return JSON.stringify(e)}catch{return""}}function $_(e){let r=new Set;for(let t of e.matchAll(/github\.com\/[^/\s)>"']+\/[^/\s)>"']+\/(?:pull|pulls)\/(\d+)/gi)){let n=Number.parseInt(t[1],10);Number.isFinite(n)&&r.add(n)}for(let t of e.matchAll(/\bPR\s*#?\s*(\d{2,})\b/gi)){let n=Number.parseInt(t[1],10);Number.isFinite(n)&&r.add(n)}for(let t of e.matchAll(/\bpr[-_]?(\d{2,})\b/gi)){let n=Number.parseInt(t[1],10);Number.isFinite(n)&&r.add(n)}return[...r]}function K_(e){let r=null;if(typeof e=="string"?r=Ht(e):e&&typeof e=="object"&&!Array.isArray(e)&&(r=e),!r)return[];let t=r.targetPrReconciliation??r.target_pr_reconciliation;if(!Array.isArray(t))return[];let n=[];for(let o of t){if(!o||typeof o!="object"||Array.isArray(o))continue;let s=o,i=Kc(String(s.prUrl??s.pr_url??"")),a=String(s.outcome??"").trim();!i||a!=="merged"||n.push({prUrl:i,mergeCommit:typeof s.mergeCommit=="string"?s.mergeCommit:typeof s.merge_commit=="string"?s.merge_commit:null,reason:typeof s.reason=="string"?s.reason:null})}return n}function j_(e){try{let n=kg("git",["config","--get","remote.origin.url"],{cwd:e.repoDir,encoding:"utf8",stdio:["ignore","pipe","ignore"]}).trim().match(/github\.com[:/]([^/]+\/[^/.]+)(?:\.git)?$/i)?.[1];if(!n)return null;let o=kg("gh",["pr","view",String(e.prNumber),"--repo",n,"--json","state,mergedAt,mergeCommit,url"],{cwd:e.repoDir,encoding:"utf8",stdio:["ignore","pipe","ignore"]}),s=JSON.parse(o);return{prUrl:Kc(s.url??`https://github.com/${n}/pull/${e.prNumber}`)??`https://github.com/${n}/pull/${e.prNumber}`,state:s.state??"",mergedAt:s.mergedAt??null,mergeCommit:s.mergeCommit?.oid??null}}catch{return null}}function V_(e){let r=he(e.heartbeatPath);return e.completionSnapshot?.finalResult??Yr(r)}function G_(e){let r=new Map,t=E(e.id);for(let n of ge(e)){let o=_(yg.join(t,"workers",R(n),"worker.json"),void 0);if(o)for(let s of K_(V_(o))){let i=H_(s.prUrl);i!=null&&!r.has(i)&&r.set(i,s)}}return r}function Y_(e,r){let t=he(e.heartbeatPath),n=[e.name,e.repairTargetPrUrl,e.taskPrUrl,e.branch,t.lastHeartbeatSummary,F_(r)].filter(Boolean).join(`
+`);return $_(n)}function J_(e){return e.localOnly===!0&&!e.taskId&&!e.agentOsId}function Ei(e={}){let r=e.lookupPr??j_,t=[],n=new Map;for(let o of J()){let s=G_(o),i=E(o.id);for(let a of ge(o)){let l=yg.join(i,"workers",R(a),"worker.json"),c=_(l,void 0);if(!c||!J_(c))continue;let u=N(c,{base:o.base,baseCommit:o.baseCommit});if(u.attention.state!=="needs_attention")continue;let d=null;for(let m of Y_(c,u.finalResult)){if(d=s.get(m)??null,!d){let p=o.repo||c.worktreePath,g=`${p}#${m}`,k=n.has(g)?n.get(g)??null:r({repoDir:p,prNumber:m});n.has(g)||n.set(g,k),k&&(k.state==="MERGED"||k.mergedAt)&&(d={prUrl:k.prUrl,mergeCommit:k.mergeCommit??null,reason:"GitHub reports PR merged"})}if(d)break}if(!d){t.push({runId:o.id,worker:a,action:"skipped",reason:"no merged PR evidence"});continue}let f=new Date().toISOString();c.status="done",c.completionSnapshot={prUrl:d.prUrl,summary:`Local-only worker superseded by merged PR ${d.prUrl}`,finalResult:{summary:`Local-only repair/salvage worker superseded by merged PR ${d.prUrl}`,targetPrReconciliation:[{prUrl:d.prUrl,outcome:"merged",mergeCommit:d.mergeCommit??null,reason:d.reason??"PR already merged; local-only worker no longer requires attention"}]}},c.completionAckSource="local-pr-merged-reconcile",c.reconciledAt=f,c.reconcileReason="local-only needs_attention superseded by merged PR",G(o.id,c),t.push({runId:o.id,worker:a,action:"marked_done",reason:c.reconcileReason,prUrl:d.prUrl,mergeCommit:d.mergeCommit??null})}}return{workers:t}}var z_=900*1e3;function X_(){return process.env.KYNVER_NO_STALE_CLEANUP==="1"}function an(){let e=xi();if(X_()){let s=Ei(),i=_i();return{workers:[],finalizedRuns:bo(),metadataReconcile:e,localPrAttentionReconcile:s,terminalWorkerArchive:i}}let r=[],t=Date.now();for(let s of J())for(let i of ge(s)){let a=q_.join(E(s.id),"workers",R(i),"worker.json"),l=_(a,void 0);if(!l||l.status!=="running"){r.push({runId:s.id,worker:i,action:"skipped",reason:l?`worker status is ${l.status}`:"worker.json missing"});continue}let c=N(l,{base:s.base,baseCommit:s.baseCommit});if(c.finalResult){if(l.status==="running"){let u=c.attention.state==="blocked"?"blocked":c.attention.state==="done"||c.status==="done"?"done":"exited";l.status=u,l.reconciledAt=new Date().toISOString(),l.reconcileReason="synced finished worker record after terminal stdout/heartbeat",G(s.id,l),r.push({runId:s.id,worker:i,action:"marked_exited",reason:l.reconcileReason})}else r.push({runId:s.id,worker:i,action:"skipped",reason:"final result present"});continue}if(!c.alive){let u=c.attention.state==="blocked"?"blocked":c.status==="done"?"done":"exited";l.status=u,l.reconciledAt=new Date().toISOString(),l.reconcileReason=c.attention.reason,G(s.id,l),r.push({runId:s.id,worker:i,action:"marked_exited",reason:c.attention.reason});continue}if(c.attention.state==="stale"&&l.pid&&$(l.pid)){let u=c.lastHeartbeatAt?Date.parse(c.lastHeartbeatAt):NaN,d=c.lastActivityAt?Date.parse(c.lastActivityAt):NaN,f=!Number.isFinite(u)||t-u>z_,m=Number.isFinite(d)&&t-d>$t;if(f&&m){An(l.pid,"SIGTERM"),l.status="exited",l.reconciledAt=new Date().toISOString(),l.reconcileReason=`reconciled stale worker: ${c.attention.reason}`,G(s.id,l),r.push({runId:s.id,worker:i,action:"killed_stale",reason:c.attention.reason});continue}}r.push({runId:s.id,worker:i,action:"skipped",reason:c.attention.reason})}let n=Ei(),o=_i();return{workers:r,finalizedRuns:bo(),metadataReconcile:e,localPrAttentionReconcile:n,terminalWorkerArchive:o}}function jc(){let e=an(),r=e.workers.filter(l=>l.action==="marked_exited").length,t=e.workers.filter(l=>l.action==="killed_stale").length,n=e.workers.filter(l=>l.action==="skipped").length,o=e.metadataReconcile.workers.reduce((l,c)=>(l[c.action]=(l[c.action]??0)+1,l),{}),s=e.localPrAttentionReconcile.workers.reduce((l,c)=>(l[c.action]=(l[c.action]??0)+1,l),{}),i=e.metadataReconcile.runMetadataRetention.runs.reduce((l,c)=>(l[c.action]=(l[c.action]??0)+1,l),{}),a=e.terminalWorkerArchive.workers.reduce((l,c)=>(l[c.action]=(l[c.action]??0)+1,l),{});console.log(JSON.stringify({ok:!0,workers:{markedExited:r,killedStale:t,skipped:n,total:e.workers.length},metadataReconcile:{totals:o,total:e.metadataReconcile.workers.length,runMetadataRetention:{totals:i,total:e.metadataReconcile.runMetadataRetention.runs.length}},localPrAttentionReconcile:{totals:s,total:e.localPrAttentionReconcile.workers.length},terminalWorkerArchive:{totals:a,total:e.terminalWorkerArchive.workers.length},finalizedRuns:e.finalizedRuns.length,details:{workers:e.workers,metadataReconcile:e.metadataReconcile.workers,localPrAttentionReconcile:e.localPrAttentionReconcile.workers,terminalWorkerArchive:e.terminalWorkerArchive.workers,runMetadataRetention:e.metadataReconcile.runMetadataRetention.runs,finalizedRuns:e.finalizedRuns}},null,2))}Y();C();function ex(e){if(!e||!Q_(e))return 0;try{return Z_(e,"utf8").trim().length}catch{return 0}}function rx(e,r){let t=Rg.join(E(e.id),"workers",R(r),"worker.json"),n=_(t,void 0);if(!n)return{worker:r,workerStatus:"missing",attention:"needs_attention",attentionReason:"worker.json missing",missingHeartbeat:!0,missingFinalResult:!0,landingBlocked:!1,completionBlocked:!1};let o=N(n,{base:e.base,baseCommit:e.baseCommit}),s=ex(n.heartbeatPath)===0,i=!o.finalResult&&!o.alive,a=typeof n.completionBlocker=="string"&&n.completionBlocker.length>0;return{worker:r,workerStatus:n.status,attention:o.attention.state,attentionReason:o.attention.reason,missingHeartbeat:s,missingFinalResult:i,landingBlocked:Xr(o),completionBlocked:a}}function tx(e){return e.openWorkerCount>0?"active_workers":e.workers.some(r=>r.completionBlocked)?"completion_blocked":e.workers.some(r=>r.landingBlocked)?"landing_blocked":null}function nx(e){let r={blocked:5,needs_attention:4,stale:3,done:2,ok:1},t="ok",n;for(let o of e){let s=o.attention;(r[s]??0)>=(r[t]??0)&&(t=s,n=o.attentionReason)}return{attention:t,attentionReason:n}}function ox(e){let r=0;for(let t of ge(e)){let n=Rg.join(E(e.id),"workers",R(t),"worker.json"),o=_(n,void 0);if(!o)continue;let s=N(o,{base:e.base,baseCommit:e.baseCommit});s.alive&&!s.finalResult&&(r+=1)}return r}function ln(){return an(),J().map(e=>{let t=ge(e).map(d=>rx(e,d)),n=t.filter(d=>d.missingHeartbeat).map(d=>d.worker),o=t.filter(d=>d.missingFinalResult).map(d=>d.worker),s=t.filter(d=>d.landingBlocked).map(d=>d.worker),i=t.filter(d=>d.completionBlocked).map(d=>d.worker),{attention:a,attentionReason:l}=nx(t),c=ox(e),u=Kt(e.status,t.map(d=>({attention:d.attention,status:d.workerStatus})));return{id:e.id,name:e.name,status:e.status,effectiveStatus:u,repo:e.repo,createdAt:e.createdAt,openWorkerCount:c,attention:a,attentionReason:l,finalizeBlockedReason:tx({run:e,workers:t,openWorkerCount:c}),evidence:{missingHeartbeatWorkers:n,missingFinalResultWorkers:o,landingBlockedWorkers:s,completionBlockedWorkers:i,workers:t}}})}function Vc(){console.log(JSON.stringify(ln(),null,2))}C();function lx(e){let r=typeof e.repo=="string"?e.repo.trim():"";if(r)return r;let t=Ke();return t?t.repo:(O("","--repo (or set defaultRepo via `kynver setup` / KYNVER_DEFAULT_REPO)"),"")}function vo(e){let r=ec(lx(e));Pd(r);let t=e.id?no(String(e.id)):bd(String(e.name||"run")),n=E(t);sx(n)&&cx(`run already exists: ${t}`),ix(n,{recursive:!0});let o=String(e.base||"origin/main"),s=pe(r,["rev-parse",o]).trim(),i={id:t,name:String(e.name||t),repo:r,base:o,baseCommit:s,status:"created",createdAt:new Date().toISOString(),workers:{}};de(ax.join(n,"run.json"),i);let a={runId:t,runDir:n,repo:r,base:o,baseCommit:s};return console.log(JSON.stringify(a,null,2)),a}function Gc(){Vc()}function cx(e){console.error(e),process.exit(1)}C();function bg(e){let r=e.trim();return r?ln().find(n=>n.name===r&&n.status!=="completed")??null:null}function Yc(e){let r=String(O(String(e.name||""),"--name")),t=bg(r);console.log(JSON.stringify({runId:t?.id??null,name:r,status:t?.status??null,effectiveStatus:t?.effectiveStatus??null},null,2))}Kn();I();import ux from"node:path";W();Y();C();async function cn(e){let r=e.pipeline===!0||e.pipeline==="true";try{let t=L(String(O(String(e.run||""),"--run"))),n=String(O(String(e.agentOsId||""),"--agent-os-id")),o=F(e.baseUrl?String(e.baseUrl):void 0),s=await V(e.secret?String(e.secret):void 0,n,{baseUrl:o}),i=ze({runId:t.id}).runnerId,a=await ff({run:t.id,agentOsId:n,...e},"run_sweep"),l=[];for(let f of Object.keys(t.workers||{})){let m=_(ux.join(E(t.id),"workers",R(f),"worker.json"),void 0);if(!m||!m.dispatched||!m.taskId)continue;let p=N(m);if(p.alive||p.finalResult||m.completionReportedAt)continue;let g=Fs({runId:t.id,workerLeaseOwner:m.leaseOwner??null,runnerId:i}),k=`${o}/api/agent-os/by-id/${encodeURIComponent(n)}/tasks/${encodeURIComponent(String(m.taskId))}/release`,h;try{h=await X(k,s,{agentOsId:n,leaseOwner:g},{agentOsId:n,baseUrl:o})}catch(b){h={ok:!1,error:b.message}}l.push({worker:f,taskId:m.taskId,pid:m.pid,released:h.ok===!0||h.response?.ok===!0,response:h.response??h})}let c=`${o}/api/agent-os/by-id/${encodeURIComponent(n)}/tasks/reap`,u;try{u=await X(c,s,{agentOsId:n,...Number(e.graceMs)>=0&&e.graceMs!==void 0&&e.graceMs!==!0?{graceMs:Math.floor(Number(e.graceMs))}:{}},{agentOsId:n,baseUrl:o})}catch(f){u={ok:!1,error:f.message}}let d={runId:t.id,agentOsId:n,snapshotPublished:a,releasedLocalOrphans:l,reap:u.response??u};if(r)return{ok:!0,...d};console.log(JSON.stringify(d,null,2))}catch(t){if(r)return{ok:!1,error:t.message};console.error(`run sweep failed: ${t.message}`),process.exit(1)}}I();Nn();Ce();Ce();import{existsSync as kx,readdirSync as Sg,statSync as yx}from"node:fs";import Rx from"node:path";import{execFileSync as dx}from"node:child_process";import{existsSync as vg,readdirSync as px,statSync as mx}from"node:fs";import fx from"node:path";var gx=2500;function hx(e,r=gx){if(!vg(e))return 0;try{let n=dx("du",["-sb",e],{encoding:"utf8",timeout:r,stdio:["ignore","pipe","ignore"]}).trim().split(/\s+/)[0],o=Number(n);return Number.isFinite(o)&&o>=0?o:null}catch{return null}}function kr(e,r=5e4){if(!vg(e))return 0;let t=hx(e);if(t!==null)return t;let n=0,o=0,s=[e];for(;s.length>0;){let i=s.pop(),a;try{a=px(i)}catch{continue}for(let l of a){if(o++>r)return null;let c=fx.join(i,l),u;try{u=mx(c)}catch{continue}u.isDirectory()?s.push(c):n+=u.size}}return n}function Jc(e={}){let r=ie(e.harnessRoot??me()),t=cr(r),n=e.now??Date.now(),o=new Date(n).toISOString();if(!kx(t))return{harnessRoot:r,worktreesDir:t,worktreesBytes:0,runCount:0,workerCount:0,oldestRunAt:null,scannedAt:o};let s=0,i=0,a=0,l=null,c;try{c=Sg(t,{withFileTypes:!0})}catch{return{harnessRoot:r,worktreesDir:t,worktreesBytes:null,runCount:0,workerCount:0,oldestRunAt:null,scannedAt:o}}for(let u of c){if(!u.isDirectory())continue;i+=1;let d=Rx.join(t,u.name);try{let f=yx(d);l=l===null?f.mtimeMs:Math.min(l,f.mtimeMs)}catch{}try{for(let f of Sg(d,{withFileTypes:!0}))f.isDirectory()&&(a+=1)}catch{}if(s!==null&&e.perRunEntryCap!==null){let f=e.perRunEntryCap??5e4;if(f<=0)s=null;else{let m=kr(d,f);m===null?s=null:s+=m}}}return{harnessRoot:r,worktreesDir:t,worktreesBytes:s,runCount:i,workerCount:a,oldestRunAt:l===null?null:new Date(l).toISOString(),scannedAt:o}}Ce();import Te from"node:path";Fn();import Oi from"node:path";Ee();Y();var Pi=[".next",".turbo","dist","build",".cache","node_modules/.cache"];function qc(e){let r=e.replace(/\\/g,"/").replace(/\/+$/,"");if(r==="node_modules"||r.startsWith("node_modules/"))return!0;for(let t of Pi)if(r===t||r.startsWith(`${t}/`))return!0;return!1}function Ie(e){return e.filter(r=>{let t=r.trim(),n=t.startsWith("??")?t.slice(2).trim():t.length>3?t.slice(3).trim():t;return!qc(n)})}function gt(e){if(typeof e=="string")return e.match(/https:\/\/github\.com\/[^\s]+\/pull\/\d+/i)?.[0]??null;if(e&&typeof e=="object"){let r=e;for(let t of["prUrl","pr_url","pullRequestUrl"]){let n=r[t];if(typeof n=="string"&&n.trim())return n.trim()}}return null}function So(e){let r=e.gitAncestry?.relation;return r==="merged"||r==="synced"?Ie(e.changedFiles).length>0:!!(gt(e.finalResult)||r==="ahead"||r==="diverged"||e.changedFiles.length>0&&e.finalResult)}C();function Co(e){return e.status||(e.status=N(e.worker,{base:e.run.base,baseCommit:e.run.baseCommit})),e.status}function zc(e,r){if(e.status)return Ie(e.status.changedFiles).length>0;let t=r?r.porcelain(e.worktreePath):In(e.worktreePath);return Ie(t).length>0}function bx(e){let r=e.worker.completionSnapshot?.finalResult;return r??(e.worker.taskPrUrl?{prUrl:e.worker.taskPrUrl}:null)}function Xc(e,r){if(e.status)return e.status;let t=e.worker,n=typeof t.completionReportedAt=="string"&&t.completionReportedAt.trim().length>0,o=!!(t.status&&["done","exited","blocked","failed","abandoned"].includes(t.status))||n,s=bx(e);if(o&&!$(t.pid)){let i=r?.gitStatusCache?r.gitStatusCache.porcelain(e.worktreePath):In(e.worktreePath),a=e.run.baseCommit?.trim()||e.run.base?.trim()||"origin/main",c=r?.gitRevCache?.countAheadOfMain(e.worktreePath,a)===0?{checked:!0,base:a,relation:"synced"}:es(e.worktreePath,{base:e.run.base,baseCommit:e.run.baseCommit}),u={runId:e.runId,worker:e.workerName,pid:t.pid,alive:!1,status:t.status??(n?"done":"exited"),attention:{state:n?"done":"stale"},branch:t.branch,worktreePath:e.worktreePath,ownedPaths:t.ownedPaths,stdoutBytes:0,stderrBytes:0,heartbeatBytes:0,firstEventAt:null,lastEventAt:null,lastActivityAt:t.completionReportedAt??null,currentTool:null,heartbeatCount:0,lastHeartbeatAt:null,lastHeartbeatPhase:null,lastHeartbeatSummary:null,heartbeatBlocker:null,changedFiles:i,gitAncestry:c,finalResult:s,completionBlocker:typeof t.completionBlocker=="string"&&t.completionBlocker.trim()||null,prUrl:t.repairTargetPrUrl??t.taskPrUrl??gt(s)};return e.status=u,u}return Co(e)}Y();Y();_r();C();function Qc(e,r=Date.now(),t=sn){let n=he(e.heartbeatPath);if(!n.lastHeartbeatAt)return!1;let o=r-Date.parse(n.lastHeartbeatAt);return Number.isFinite(o)&&o>=0&&o<t}function Ai(e,r=Date.now(),t=sn){return $(e.pid)?!0:Qc(e,r,t)}function vx(e,r){return r?r.runTerminalCache.derive(e.run):pt(e.run)}function yr(e,r=Date.now()){return Ai(e.worker,r)}function Zc(e,r){return gr.has(e.run.status)?!1:vx(e,r)!==null}function Cg(e,r,t=Date.now()){if(yr(e,t))return!0;if(gr.has(e.run.status)||Zc(e,r))return!1;let n=Co(e);return ne(n)?!1:!!yr(e,t)}Fn();Y();function wg(e,r){if(!(typeof e.worker.completionBlocker=="string"?e.worker.completionBlocker.trim():""))return!1;if(yr(e))return!0;let n=r??Co(e);return!!(!ne(n)||So(n)||Ie(n.changedFiles).length>0||qr({finalResult:n.finalResult,changedFiles:n.changedFiles,gitAncestry:n.gitAncestry,prUrl:gt(n.finalResult)}).blocked)}Ee();C();import{existsSync as xg,mkdirSync as Sx,writeFileSync as _g}from"node:fs";import Ii from"node:path";function Eg(e,r,t){return Ii.join(e,"salvage",R(r),R(t))}function Pg(e){return xg(Ii.join(Eg(e.harnessRoot,e.runId,e.workerName),"evidence.json"))}function Ag(e){let r=Eg(e.harnessRoot,e.indexed.runId,e.indexed.workerName);Sx(r,{recursive:!0});let t=Ii.join(r,"salvage.patch"),n=!1;if(xg(e.indexed.worktreePath)){let s=re(e.indexed.worktreePath,["diff","HEAD"]),i=re(e.indexed.worktreePath,["diff","--cached"]),a=[s.stdout,i.stdout].filter(l=>l.trim()).join(`
+`);a.trim()&&(_g(t,a.endsWith(`
 `)?a:`${a}
-`),n=!0)}let o={capturedAt:new Date(e.now??Date.now()).toISOString(),skipReason:e.skipReason,runId:e.indexed.runId,workerName:e.indexed.workerName,worktreePath:e.indexed.worktreePath,taskId:e.indexed.worker.taskId,agentOsId:e.indexed.worker.agentOsId,branch:e.indexed.worker.branch,completionBlocker:e.indexed.worker.completionBlocker,finalResult:e.status.finalResult,changedFiles:e.status.changedFiles,gitAncestry:e.status.gitAncestry,prUrl:e.status.prUrl??null,...n?{patchPath:t}:{}};return Wf(ui.join(r,"evidence.json"),`${JSON.stringify(o,null,2)}
-`),o}var S_=new Set(["completion_blocked","dirty_worktree","pr_or_unmerged_commits","landing_blocked"]);function w_(e){return!S_.has(e.skipReason)||pr(e.indexed,e.now)?!1:$f({harnessRoot:e.harnessRoot,runId:e.indexed.runId,workerName:e.indexed.workerName})?!0:e.writeSalvageEvidence?(Kf({harnessRoot:e.harnessRoot,indexed:e.indexed,skipReason:e.skipReason,status:e.status,now:e.now}),!0):!1}function C_(e){let{indexed:r,includeOrphans:t,worktreesAgeMs:n,terminalWorktreesAgeMs:o}=e;return r?cr.has(r.run.status)||e.liveness&&Oc(r,e.liveness)||e.liveness&&Z(Ac(r,e.liveness))&&!pr(r)?o:n:t?o:n}function __(e,r){if(e.harnessRoot?.trim())return di.resolve(e.harnessRoot);let t=r.worker.workerDir;if(!t)return null;let n=`${di.sep}runs${di.sep}`,o=t.indexOf(n);return o<0?null:t.slice(0,o+n.length-1)}function jf(e){let{indexed:r,includeOrphans:t,worktreesAgeMs:n,ageMs:o,orphanSafety:s,worktreeRemovalGuard:i}=e,a=e.now??Date.now();if(!r)return t?s??null:"orphan_without_flag";let l=C_(e);if(n<=0&&!t&&l<=0)return"worktrees_disabled";if(l>0&&o<l)return"below_age_threshold";if(pr(r,a))return"active_worker";let c=Ac(r,e.liveness),u=__(e,r),d=p=>u&&w_({indexed:r,harnessRoot:u,skipReason:p,status:c,now:a,writeSalvageEvidence:e.writeSalvageEvidence===!0})?null:p;if(Bf(r,c)){let p=d("completion_blocked");if(p)return p}if(Pc(r,e.liveness?.gitStatusCache)){let p=d("dirty_worktree");if(p)return p}let f=e.liveness?.gitRevCache?.countAheadOfMain(e.worktreePath);if(f!=null&&f>0){let p=d("pr_or_unmerged_commits");if(p)return p}if(Lf(r,e.liveness,a)||!Z(c))return"run_still_active";if(lo(c)){let p=d("pr_or_unmerged_commits");if(p)return p}if(Ae(c.changedFiles).length>0){let p=d("dirty_worktree");if(p)return p}if(Wr({finalResult:c.finalResult,changedFiles:c.changedFiles,gitAncestry:c.gitAncestry,prUrl:it(c.finalResult)}).blocked){let p=d("landing_blocked");if(p)return p}if(i&&e.worktreePath){let p=i({worktreePath:e.worktreePath,indexed:!!r,runId:r?.runId,worker:r?.workerName});if(p)return p.detail?{reason:p.reason,detail:p.detail}:p.reason}return null}function Nc(e){let{indexed:r,nodeModulesAgeMs:t,ageMs:n,worktreePath:o,activeWorktreePaths:s,diskPressure:i}=e;return!i&&n<t?"below_age_threshold":s.has(di.resolve(o))||r&&pr(r)?"active_worker":r&&Pc(r,e.gitStatusCache)?"dirty_worktree":null}function Vf(e){return Nc(e)}var uo=216e5,po=6048e5,pi=216e5,mi=36e5,fi=120;var Gf=new Set(["active_worker","run_still_active","completion_blocked","landing_blocked"]);function Yf(e,r){let t=[],n=new Set,o=(s,i,a)=>{let l=`${s}\0${i}`;n.has(l)||t.length>=24||(n.add(l),t.push({path:s,reason:i,...a?{detail:a}:{}}))};for(let s of r)Gf.has(s.reason)&&o(s.path,s.reason,s.detail);for(let s of e)!s.skipped||!s.skipReason||Gf.has(s.skipReason)&&o(s.path,s.skipReason);return t}import{existsSync as Xf,readdirSync as Qf,statSync as P_}from"node:fs";import Zf from"node:path";L();ke();import Jf from"node:path";w();function E_(e,r){return ci(e,r)}function qf(e,r=Date.now()){let t=new Set,n=new Set;for(let o of e){for(let s of Vo(o)){let i=!1;for(let a of Object.keys(s.workers||{})){let l=_(Jf.join(Cn(o,s.id),"workers",R(a),"worker.json"),void 0);if(!l?.worktreePath)continue;let c=Jf.resolve(l.worktreePath);E_(l,r)&&(i=!0,t.add(c))}i&&n.add(`${o}\0${s.id}`)}for(let s of Rc(o))n.add(s)}return{activeWorktreePaths:t,liveRunKeys:n}}function zf(e,r,t,n){return t?n.has(`${r}\0${t}`):!1}w();function A_(e,r){try{let t=P_(e).mtimeMs;return Math.max(0,r-t)}catch{return 0}}function I_(e,r){let t=Zf.join(e,"runs",r,"run.json");return Xf(t)?_(t,null):null}function eg(e){try{return Qf(e).length===0}catch{return!1}}function rg(e){let{harnessRoot:r,runId:t,runPath:n,ageMs:o,runDirectoriesAgeMs:s,activeGuards:i}=e;if(zf(n,r,t,i.liveRunKeys)||!eg(n))return"run_still_active";let a=I_(r,t);return a&&!cr.has(a.status)&&!nt(a)?"run_still_active":s>0&&o<s?"below_age_threshold":null}function tg(e){if(!Xf(e.worktreesDir))return[];let r=[],t;try{t=Qf(e.worktreesDir,{withFileTypes:!0})}catch{return[]}for(let n of t){if(!n.isDirectory())continue;let o=n.name;if(e.runIdFilter&&o!==e.runIdFilter)continue;let s=Zf.join(e.worktreesDir,o);eg(s)&&r.push({kind:"remove_run_directory",path:s,bytes:null,harnessRoot:e.harnessRoot,runId:o,ageMs:A_(s,e.now)})}return r}Ce();import{existsSync as Dc,rmSync as pg}from"node:fs";import{existsSync as D_,rmSync as M_}from"node:fs";ke();import{lstatSync as O_,readdirSync as N_}from"node:fs";function ng(e){try{let r=O_(e),t=typeof process.getuid=="function"?process.getuid():null,n=typeof process.getgid=="function"?process.getgid():null,o=t!==null&&(r.uid!==t||n!==null&&r.gid!==n);return{uid:r.uid,gid:r.gid,foreign:o}}catch{return null}}function og(e,r=32){let t=ng(e);if(!t)return!1;if(t.foreign)return!0;try{let n=N_(e),o=0;for(let s of n){if(o>=r)break;let i=`${e.replace(/\/$/,"")}/${s}`,a=ng(i);if(o+=1,a?.foreign)return!0}}catch{}return!1}import{spawnSync as T_}from"node:child_process";import ag from"node:path";import Ie from"node:path";function sg(e,r,t,n){let o=Ie.resolve(e),s=`${Ie.sep}${n}`,i=o.endsWith(s)?o:null;if(!i)return"path_outside_harness";let a=Ie.relative(t,i);if(a.startsWith("..")||Ie.isAbsolute(a))return"path_outside_harness";let l=a.split(Ie.sep);return l.length<3||l[l.length-1]!==n||!o.startsWith(Ie.resolve(r))?"path_outside_harness":null}function gi(e,r,t){return sg(e,r,t,"node_modules")}function hi(e,r,t){return sg(e,r,t,".next")}function ki(e,r,t){let n=Ie.resolve(e),o=Ie.relative(t,n);return o.startsWith("..")||Ie.isAbsolute(o)||o.split(Ie.sep).length<3||!n.startsWith(Ie.resolve(r))?"path_outside_harness":null}function ig(e,r,t){let n=Ie.resolve(e);return gi(n,r,t)===null||hi(n,r,t)===null||ki(n,r,t)===null}function cg(){let e=(process.env.KYNVER_CLEANUP_PRIVILEGED??"auto").trim().toLowerCase();return e==="0"||e==="false"||e==="off"||e==="no"?"off":e==="1"||e==="true"||e==="force"||e==="yes"?"force":"auto"}function lg(e){let r=T_("sudo",["-n",...e],{encoding:"utf8",stdio:["ignore","pipe","pipe"]});return{ok:r.status===0,stderr:`${r.stderr??""}${r.stdout??""}`.trim()}}function ug(e,r,t){if(!ig(e,r,t))return{ok:!1,error:"path is not an allowed harness generated cache"};let n=typeof process.getuid=="function"?process.getuid():null,o=typeof process.getgid=="function"?process.getgid():null;if(n===null||o===null)return{ok:!1,error:"privileged reclaim requires POSIX uid/gid"};let s=lg(["chown","-R",`${n}:${o}`,ag.resolve(e)]);if(s.ok)return{ok:!0,method:"chown_then_rm"};let i=lg(["rm","-rf",ag.resolve(e)]);return i.ok?{ok:!0,method:"sudo_rm"}:{ok:!1,error:s.stderr||i.stderr||"sudo -n failed (password required or not permitted)"}}var Tc="Root-owned harness caches require operator reclaim: configure passwordless sudo for chown/rm under ~/.kynver/harness/worktrees, or run `node scripts/reclaim-harness-root-owned-cache.mjs --execute` as the harness owner with sudo available. See docs/runbooks/harness-root-owned-cache-reclaim.md.";function U_(e){let r=e?.code;return r==="EACCES"||r==="EPERM"}function dg(e,r,t={}){if(!D_(e.path))return{executed:!1,skipped:!0,skipReason:"missing_worktree"};if(!r)return{executed:!1,skipped:!0,skipReason:"dry_run"};let n=e.harnessRoot,o=n?or(n):null,i=e.bytes??dr(e.path)??void 0,a=t.removePath??M_,l=t.hasForeignOwnedEntry??og;try{return a(e.path,{recursive:!0,force:!0}),{executed:!0,skipped:!1,bytes:i}}catch(c){if(!U_(c)||!n||!o)return{executed:!1,skipped:!0,skipReason:"remove_failed",error:c.message};let u=l(e.path),d=cg();if(!(d==="force"||d==="auto"&&u))return u?{executed:!1,skipped:!0,skipReason:"foreign_owner",error:`${c.message}; ${Tc}`}:{executed:!1,skipped:!0,skipReason:"remove_failed",error:c.message};let m=ug(e.path,n,o);if(m.ok&&m.method==="sudo_rm")return{executed:!0,skipped:!1,bytes:i,privilegedReclaim:!0};if(m.ok)try{return a(e.path,{recursive:!0,force:!0}),{executed:!0,skipped:!1,bytes:i,privilegedReclaim:!0}}catch(p){return{executed:!1,skipped:!0,skipReason:"foreign_owner",error:`${p.message}; privileged chown succeeded but rm still failed`}}return{executed:!1,skipped:!0,skipReason:"foreign_owner",error:`${c.message}; privileged reclaim failed: ${m.error}; ${Tc}`}}}function Mc(e){let r=e.harnessRoot;return!r||!gc(e.path,r)?null:{...e,executed:!1,skipped:!0,skipReason:"run_metadata_protected"}}function Uc(e,r){let t=Mc(e);if(t)return t;let n=dg(e,r);return{...e,bytes:n.bytes??e.bytes,executed:n.executed,skipped:n.skipped,skipReason:n.skipReason,error:n.error}}function mg(e,r){return Uc(e,r)}function fg(e,r){return Uc(e,r)}function gg(e,r){return Uc(e,r)}function hg(e,r){let t=Mc(e);if(t)return t;if(!Dc(e.path))return{...e,executed:!1,skipped:!0,skipReason:"missing_worktree"};if(!r)return{...e,executed:!1,skipped:!0,skipReason:"dry_run"};try{let n=e.bytes??dr(e.path);return pg(e.path,{recursive:!0,force:!0}),{...e,bytes:n,executed:!0,skipped:!1}}catch(n){return{...e,executed:!1,skipped:!0,skipReason:"remove_failed",error:n.message}}}function kg(e,r){let t=Mc(e);if(t)return t;if(!Dc(e.path))return{...e,executed:!1,skipped:!0,skipReason:"missing_worktree"};if(!r)return{...e,executed:!1,skipped:!0,skipReason:"dry_run"};let n=e.repo;try{let o=e.bytes??dr(e.path);return n&&ue(n,["worktree","remove","--force",e.path],{allowFailure:!0}),Dc(e.path)&&pg(e.path,{recursive:!0,force:!0}),{...e,bytes:o,executed:!0,skipped:!1}}catch(o){return{...e,executed:!1,skipped:!0,skipReason:"remove_failed",error:o.message}}}import{existsSync as yi,readdirSync as Ri,statSync as L_}from"node:fs";import Ze from"node:path";function Lc(e,r){try{let t=L_(e).mtimeMs;return Math.max(0,r-t)}catch{return 0}}function Rg(e,r){let t=Ze.relative(r,e);return t===""||!t.startsWith("..")&&!Ze.isAbsolute(t)}function yg(e,r,t,n){let o=[];for(let s of li){if(s===".next")continue;let i=Ze.join(e,s);if(!yi(i))continue;let a=Ze.resolve(i);t.has(a)||Rg(a,r.harnessRoot)&&(t.add(a),o.push({kind:"remove_build_cache",path:a,bytes:null,runId:n.runId,worker:n.worker,repo:n.repo,ageMs:Lc(a,r.now)}))}return o}function vg(e){let r=[],t=new Set;for(let n of e.index.values())e.runIdFilter&&n.runId!==e.runIdFilter||r.push(...yg(n.worktreePath,e,t,{runId:n.runId,worker:n.workerName,repo:n.run.repo}));if(!e.includeOrphans||!yi(e.worktreesDir))return r;for(let n of Ri(e.worktreesDir,{withFileTypes:!0})){if(!n.isDirectory())continue;let o=Ze.join(e.worktreesDir,n.name);for(let s of Ri(o,{withFileTypes:!0})){if(!s.isDirectory())continue;let i=Ze.join(o,s.name);r.push(...yg(i,e,t,{runId:n.name,worker:s.name}))}}return r}function bg(e){let r=e.worktreesAgeMs>0||e.includeOrphans,t=e.includeOrphans;if(!r&&!t)return[];let n=[],o=new Set;if(r)for(let i of e.index.values()){if(e.runIdFilter&&i.runId!==e.runIdFilter)continue;let a=i.worktreePath;yi(a)&&(o.has(a)||(o.add(a),n.push({kind:"remove_worktree",path:a,bytes:null,runId:i.runId,worker:i.workerName,repo:i.run.repo,ageMs:Lc(a,e.now)})))}if(!t||!yi(e.worktreesDir))return n;let s=new Set;for(let i of e.index.values())s.add(Ze.resolve(i.worktreePath));for(let i of Ri(e.worktreesDir,{withFileTypes:!0})){if(!i.isDirectory()||e.runIdFilter&&i.name!==e.runIdFilter)continue;let a=Ze.join(e.worktreesDir,i.name),l;try{l=Ri(a,{withFileTypes:!0})}catch{continue}for(let c of l){if(!c.isDirectory())continue;let u=Ze.resolve(Ze.join(a,c.name));o.has(u)||s.has(u)||Rg(u,e.harnessRoot)&&(o.add(u),n.push({kind:"remove_worktree",path:u,bytes:null,runId:i.name,worker:c.name,ageMs:Lc(u,e.now)}))}}return n}import{existsSync as Cg,readdirSync as Sg,statSync as B_}from"node:fs";import Xt from"node:path";var W_=[{dirName:"node_modules",kind:"remove_node_modules"},{dirName:".next",kind:"remove_next_cache"}];function H_(e,r){try{let t=B_(e).mtimeMs;return Math.max(0,r-t)}catch{return 0}}function F_(e,r){let t=Xt.relative(r,e);return t===""||!t.startsWith("..")&&!Xt.isAbsolute(t)}function $_(e,r,t,n,o,s){if(!Cg(n))return;let i=Xt.resolve(n);r.has(i)||F_(i,t.harnessRoot)&&(r.add(i),e.push({kind:o,path:i,bytes:null,harnessRoot:t.harnessRoot,runId:s.runId,worker:s.worker,repo:s.repo,ageMs:H_(i,t.now)}))}function wg(e,r,t,n,o){for(let s of W_)$_(e,r,t,Xt.join(n,s.dirName),s.kind,o)}function _g(e){let r=[],t=new Set;for(let n of e.index.values())e.runIdFilter&&n.runId!==e.runIdFilter||wg(r,t,e,n.worktreePath,{runId:n.runId,worker:n.workerName,repo:n.run.repo});if(!e.includeOrphans||!Cg(e.worktreesDir))return r;for(let n of Sg(e.worktreesDir,{withFileTypes:!0})){if(!n.isDirectory()||e.runIdFilter&&n.name!==e.runIdFilter)continue;let o=Xt.join(e.worktreesDir,n.name),s;try{s=Sg(o,{withFileTypes:!0})}catch{continue}for(let i of s){if(!i.isDirectory())continue;let a=Xt.join(o,i.name);wg(r,t,e,a,{runId:n.name,worker:i.name})}}return r}Ce();import{existsSync as xg,statSync as K_}from"node:fs";import er from"node:path";function j_(e,r){try{let t=K_(e).mtimeMs;return Math.max(0,r-t)}catch{return 0}}function V_(e){let r=[],t=null;for(let n of e.split(`
-`)){if(!n.trim())continue;let[o,...s]=n.split(" "),i=s.join(" ");if(o==="worktree"){t&&r.push(t),t={path:i};continue}t&&(o==="branch"&&(t.branch=i),o==="HEAD"&&(t.head=i),o==="bare"&&(t.bare=!0))}return t&&r.push(t),r}function G_(e,r){let t=er.relative(er.resolve(r),er.resolve(e));return t!==""&&!t.startsWith("..")&&!er.isAbsolute(t)}var Y_=200;function Eg(e){if(!e.includeOrphans||!xg(e.worktreesDir))return[];let r=new Set;for(let s of e.index.values())s.run.repo&&r.add(er.resolve(s.run.repo));let t=new Set;for(let s of e.index.values())t.add(er.resolve(s.worktreePath));let n=[],o=new Set;for(let s of r){let i=0,a;try{a=ue(s,["worktree","list","--porcelain"],{allowFailure:!0})}catch{continue}let l=V_(a);for(let c of l){if(i>=Y_)break;let u=er.resolve(c.path);if(u===er.resolve(s)||!G_(u,e.worktreesDir)||t.has(u)||o.has(u)||!xg(u))continue;let f=er.relative(e.worktreesDir,u).split(er.sep),m=f[0],p=f[1]??"unknown";o.add(u),i+=1,n.push({kind:"remove_worktree",path:u,bytes:null,runId:m,worker:p,repo:s,ageMs:j_(u,e.now)})}}return n}L();w();import mo from"node:path";function Pg(e,r){let t=mo.resolve(r),n=new Map;for(let[o,s]of e){let i=s.harnessRoot?mo.resolve(s.harnessRoot):null;i&&i!==t||n.set(o,s)}return n}function Ag(e){let r=new Map;for(let t of Vo(e))for(let n of Object.keys(t.workers||{})){let o=mo.join(Cn(e,t.id),"workers",R(n),"worker.json"),s=_(o,void 0);s?.worktreePath&&r.set(mo.resolve(s.worktreePath),{harnessRoot:e,worktreePath:mo.resolve(s.worktreePath),runId:t.id,workerName:n,run:t,worker:s})}return r}function fo(e){let r=process.env[e];return r==="1"||r==="true"||r==="yes"}function at(e,r){let t=process.env[e];if(!t)return r;let n=Number(t);return Number.isFinite(n)&&n>=0?n:r}function Bc(e={}){let r=e.execute===!0||e.execute!==!1&&fo("KYNVER_CLEANUP_EXECUTE"),t=e.finalizeStaleRuns!==!1&&!fo("KYNVER_CLEANUP_SKIP_FINALIZE"),n=e.nodeModulesAgeMs??at("KYNVER_CLEANUP_NODE_MODULES_AGE_MS",216e5),o=e.scanDependencyCaches??(e.nodeModulesAgeMs!==void 0||process.env.KYNVER_CLEANUP_NODE_MODULES_AGE_MS!=null),s=e.worktreesAgeMs??at("KYNVER_CLEANUP_WORKTREES_AGE_MS",0),i=e.terminalWorktreesAgeMs??at("KYNVER_CLEANUP_TERMINAL_WORKTREES_AGE_MS",216e5),a=e.runDirectoriesAgeMs??at("KYNVER_CLEANUP_RUN_DIRECTORIES_AGE_MS",36e5),l=e.maxActionsPerSweep??at("KYNVER_CLEANUP_MAX_ACTIONS_PER_SWEEP",120),c=e.includeOrphans===!0||fo("KYNVER_CLEANUP_INCLUDE_ORPHANS"),d=fo("KYNVER_CLEANUP_SCOPE_ALL")||process.env.KYNVER_CLEANUP_SCOPE==="all"?e.runIdFilter:e.runIdFilter??(process.env.KYNVER_CLEANUP_RUN_ID||void 0),f=e.accountBytes!==!1&&!fo("KYNVER_CLEANUP_SKIP_BYTE_ACCOUNTING"),m=at("KYNVER_CLEANUP_STORAGE_ENTRY_CAP",2e3),p=e.storagePerRunEntryCap!==void 0?e.storagePerRunEntryCap:f&&m>0?m:null,g=at("KYNVER_CLEANUP_BYTE_ENTRY_CAP",2e3),k=e.byteAccountingEntryCap??(Number.isFinite(g)&&g>0?Math.floor(g):2e3);return{execute:r,finalizeStaleRuns:t,scanDependencyCaches:o,nodeModulesAgeMs:n,worktreesAgeMs:s>0?s:0,terminalWorktreesAgeMs:i>=0?i:0,runDirectoriesAgeMs:a>=0?a:0,maxActionsPerSweep:Number.isFinite(l)&&l>0?Math.floor(l):120,includeOrphans:c,runIdFilter:d?String(d):void 0,accountBytes:f,storagePerRunEntryCap:p,byteAccountingEntryCap:k}}function Ig(e){let r=process.env.KYNVER_CLEANUP_SCOPE==="all",t=Number(process.env.KYNVER_CLEANUP_WORKTREES_AGE_MS),n=r?Number.isFinite(t)&&t>0?t:6048e5:Number.isFinite(t)&&t>0?t:0;return Bc({runIdFilter:r?void 0:e,worktreesAgeMs:n,terminalWorktreesAgeMs:r?216e5:void 0,runDirectoriesAgeMs:r?36e5:void 0,includeOrphans:r?!0:void 0,finalizeStaleRuns:!0,accountBytes:!0,scanDependencyCaches:!0})}Ce();import{existsSync as Og}from"node:fs";import Wc from"node:path";w();var J_=1800*1e3;function Hc(e){let r=e.now??Date.now(),t=e.heartbeatFreshMs??J_;if(!Og(e.worktreePath))return null;if(e.runId&&e.workerName){let c=Wc.join(e.harnessRoot,"runs",e.runId,"workers",e.workerName),u=_(Wc.join(c,"worker.json"),void 0);if(u&&Ic(u,r,t))return"active_worker"}let n=Wc.join(e.worktreePath,".git");if(!Og(n))return null;let o=Q(e.worktreePath,["status","--porcelain"]);if(o.status!==0)return"pr_or_unmerged_commits";let s=o.stdout.split(`
-`).map(c=>c.trim()).filter(c=>c.length>0);if(Ae(s).length>0)return"dirty_worktree";let i=Q(e.worktreePath,["rev-list","--count","@{u}..HEAD"]);if(i.status===0){let c=Number(i.stdout.trim());if(Number.isFinite(c)&&c>0)return"pr_or_unmerged_commits"}let a=Q(e.worktreePath,["rev-list","--count","origin/main..HEAD"]);if(a.status!==0)return i.status!==0?"pr_or_unmerged_commits":null;let l=Number(a.stdout.trim());return Number.isFinite(l)&&l>0?"pr_or_unmerged_commits":null}ke();import{existsSync as q_}from"node:fs";import{homedir as z_}from"node:os";import Ng from"node:path";var X_=["/var/tmp/kynver-harness",Ng.join(z_(),".openclaw","harness")];function Fc(e,r,t){if(!t?.trim())return;let n=te(t.trim());e.has(n)||(e.add(n),r.push(n))}function Q_(e){return e.scanWellKnown!=null?e.scanWellKnown:process.env.VITEST==="true"?!1:process.env.KYNVER_CLEANUP_SCAN_WELL_KNOWN!=="0"&&!["0","false","no"].includes((process.env.KYNVER_CLEANUP_SCAN_WELL_KNOWN??"").toLowerCase())}function Tg(e={}){let r=new Set,t=[];Fc(r,t,e.harnessRoot??de());let n=process.env.KYNVER_CLEANUP_EXTRA_ROOTS?.split(",").map(o=>o.trim()).filter(Boolean);for(let o of n??[])Fc(r,t,o);if(Q_(e))for(let o of X_){let s=Ng.resolve(o);!r.has(s)&&q_(s)&&Fc(r,t,s)}return t}_t();function Z_(e){let r=process.env[e];return r==="1"||r==="true"||r==="yes"}function ex(e,r){let t=process.env[e];if(!t)return r;let n=Number(t);return Number.isFinite(n)?n:r}function Dg(e={}){let r=e.diskPath?.trim()||process.env.KYNVER_DISK_GUARD_PATH?.trim()||"/",t=ex("KYNVER_DISK_GUARD_MAX_USED_PERCENT",75),n=Me({...e,diskPath:r,diskMaxUsedPercent:e.diskMaxUsedPercent??t}),o=!n.ok||n.usedPercent>=t,s=process.env.KYNVER_CLEANUP_DISK_PRESSURE_FORCE?.trim().toLowerCase();return s==="none"||s==="off"||s==="0"?o=!1:(s==="pressured"||s==="on"||s==="1")&&(o=!0),{diskGate:n,pressured:o,maxUsedPercent:t}}function Mg(e,r){if(!r.pressured)return e;let t=e.execute||!Z_("KYNVER_CLEANUP_DRY_RUN_ON_PRESSURE");return{...e,execute:t,nodeModulesAgeMs:0,runIdFilter:void 0,includeOrphans:!0,terminalWorktreesAgeMs:0,runDirectoriesAgeMs:0,worktreesAgeMs:e.worktreesAgeMs>0?e.worktreesAgeMs:6048e5,diskPressure:!0,diskGate:r.diskGate}}function Fe(e,r){if(process.env.KYNVER_CLEANUP_QUIET==="1")return;let t=r?`: ${r}`:"";console.error(`[kynver cleanup] ${e}${t}`)}Ce();var vi=class{aheadOfMain=new Map;countAheadOfMain(r,t="origin/main"){let n=`${r}\0${t}`;if(this.aheadOfMain.has(n))return this.aheadOfMain.get(n)??null;let o=Q(r,["rev-list","--count",`${t}..HEAD`]);if(o.status!==0)return this.aheadOfMain.set(n,null),null;let s=Number(o.stdout.trim()),i=Number.isFinite(s)?s:null;return this.aheadOfMain.set(n,i),i}};import{spawnSync as rx}from"node:child_process";import{existsSync as tx}from"node:fs";import nx from"node:path";var ox=5e3;function sx(e,r){if(!tx(nx.join(e,".git")))return{status:null,stdout:"",stderr:"",error:"not_a_git_repo"};try{let t=rx("git",r,{cwd:e,encoding:"utf8",timeout:ox}),n=t.error?.message?.includes("ETIMEDOUT")===!0;return{status:n?null:t.status,stdout:t.stdout||"",stderr:t.stderr||"",error:n?"git_timeout":t.error?t.error.message:null}}catch(t){return{status:null,stdout:"",stderr:"",error:t.message}}}function Ug(e){let r=sx(e,["status","--short"]);return r.error==="not_a_git_repo"?[]:r.error==="git_timeout"||r.status!==0?null:r.stdout.split(`
-`).map(t=>t.trim()).filter(Boolean)}var bi=class{cache=new Map;porcelain(r){let t=r,n=this.cache.get(t);if(n!==void 0)return n;let o=Ug(t)??[];return this.cache.set(t,o),o}};var Si=class{cache=new Map;derive(r){let t=this.cache.get(r.id);if(t!==void 0)return t;let n=nt(r);return this.cache.set(r.id,n),n}};function ix(e){let r={};for(let t of e)r[t.kind]=(r[t.kind]??0)+1;return r}function Lg(e,r={}){let t=r.maxSampleActions??12,n=r.maxSampleSkips??8;return{harnessRoot:e.harnessRoot,scanRoots:e.scanRoots,dryRun:e.dryRun,execute:e.execute,scannedAt:e.scannedAt,finalizedRuns:e.finalizedRuns.length,actionCount:e.actions.length,actionKinds:ix(e.actions),totals:e.totals,...e.storage?{storage:e.storage}:{},...e.preservedLivePaths?.length?{preservedLivePaths:e.preservedLivePaths}:{},...e.removedRunDirectories!=null?{removedRunDirectories:e.removedRunDirectories}:{},sampleActions:e.actions.slice(0,t).map(o=>({kind:o.kind,path:o.path,...o.skipReason?{skipReason:o.skipReason}:{},...o.bytes!=null?{bytes:o.bytes}:{},...o.runId?{runId:o.runId}:{},...o.worker?{worker:o.worker}:{}})),sampleSkips:e.skips.slice(0,n)}}function ax(e={}){let r=e.harnessRoot?te(e.harnessRoot):de(),t=Tg({harnessRoot:r}),n=e.now??Date.now();return{harnessRoot:r,scanRoots:t,now:n}}function lx(e){return typeof e=="string"?{reason:e}:e}function Qt(e,r,t,n){e.push({path:r,reason:t,...n?{detail:n}:{}})}function wi(e,r,t){return!r||e.bytes!=null?e:{...e,bytes:dr(e.path,t)}}function Bg(e,r){let t={};for(let n of r)t[n.reason]=(t[n.reason]??0)+1;for(let n of e)n.skipReason&&(t[n.skipReason]=(t[n.skipReason]??0)+1);return t}function cx(e,r){return e.kind==="remove_next_cache"?fg(e,r):mg(e,r)}function ux(e,r,t){return e.kind==="remove_next_cache"?hi(e.path,r,t):gi(e.path,r,t)}function dx(e){let r=new Map;for(let t of e)for(let[n,o]of Ag(t))r.set(n,o);return r}function Wg(e,r){return e.runId&&e.worker?Oe.join(r,e.runId,e.worker):Oe.resolve(e.path,"..")}function Ci(e={}){let r=Bc(e),t=Dg();r=Mg(r,t);let n=ax(e);Fe("scan",`${n.scanRoots.length} harness root(s)`);let o=qf(n.scanRoots,n.now),s=r.finalizeStaleRuns?io().map(b=>({runId:b.runId,from:b.from,to:b.to})):[];s.length>0&&Fe("finalize",`${s.length} stale run(s) marked terminal`),Fe("index","building worktree index");let i=dx(n.scanRoots);Fe("index",`${i.size} indexed worktree(s)`);let a={runTerminalCache:new Si,gitStatusCache:new bi,gitRevCache:new vi},l=[],c=[],u=new Set,d=r.maxActionsPerSweep,f=()=>c.length>=d;for(let b of n.scanRoots){if(f())break;Fe("root",b);let P=Oe.join(b,"worktrees"),H=Pg(i,b),M={harnessRoot:b,worktreesDir:P,nodeModulesAgeMs:r.nodeModulesAgeMs,worktreesAgeMs:r.worktreesAgeMs,includeOrphans:r.includeOrphans,runIdFilter:r.runIdFilter,index:H,now:n.now},se=r.scanDependencyCaches?_g(M):[];Fe("dependency",r.scanDependencyCaches?`${se.length} cache candidate(s) at ${b}`:"skipped (worktree-only sweep)");let $e=0;for(let Se of se){if(f())break;$e+=1,$e%50===0&&Fe("dependency",`${$e}/${se.length} evaluated`);let X=Oe.resolve(Se.path);if(u.has(X))continue;u.add(X);let D={...Se,path:X},ie=ux(D,b,P);if(ie){Qt(l,D.path,ie),c.push({...D,executed:!1,skipped:!0,skipReason:ie});continue}let ge=Wg(D,P),we=H.get(Oe.resolve(ge))??null,ae=Nc({indexed:we,includeOrphans:!0,nodeModulesAgeMs:r.nodeModulesAgeMs,ageMs:D.ageMs,worktreePath:ge,activeWorktreePaths:o.activeWorktreePaths,diskPressure:r.diskPressure,gitStatusCache:a.gitStatusCache});if(ae){Qt(l,D.path,ae),c.push({...D,executed:!1,skipped:!0,skipReason:ae});continue}c.push(cx(wi(D,r.accountBytes,r.byteAccountingEntryCap),r.execute))}if(r.scanDependencyCaches)for(let Se of vg(M)){if(f())break;let X=Oe.resolve(Se.path);if(u.has(X))continue;u.add(X);let D={...Se,path:X},ie=ki(D.path,b,P);if(ie){Qt(l,D.path,ie),c.push({...D,executed:!1,skipped:!0,skipReason:ie});continue}let ge=Wg(D,P),we=H.get(Oe.resolve(ge))??null,ae=Vf({indexed:we,includeOrphans:!0,nodeModulesAgeMs:r.nodeModulesAgeMs,ageMs:D.ageMs,worktreePath:ge,activeWorktreePaths:o.activeWorktreePaths,diskPressure:r.diskPressure,gitStatusCache:a.gitStatusCache});if(ae){Qt(l,D.path,ae),c.push({...D,executed:!1,skipped:!0,skipReason:ae});continue}c.push(gg(wi(D,r.accountBytes,r.byteAccountingEntryCap),r.execute))}let be=[...bg(M),...Eg(M)];Fe("worktrees",`${be.length} candidate(s) at ${b}`);let hn=new Set,kn=0;for(let Se of be){if(f())break;kn+=1,kn%50===0&&Fe("worktrees",`${kn}/${be.length} evaluated`);let X=Oe.resolve(Se.path);if(hn.has(X))continue;hn.add(X);let D={...Se,path:X},ie=H.get(Oe.resolve(D.path))??null,ge=ie?null:Hc({worktreePath:D.path,harnessRoot:b,runId:D.runId,workerName:D.worker,now:n.now}),we=jf({indexed:ie,worktreePath:Oe.resolve(D.path),includeOrphans:r.includeOrphans,worktreesAgeMs:r.worktreesAgeMs,terminalWorktreesAgeMs:r.terminalWorktreesAgeMs,ageMs:D.ageMs,orphanSafety:ge,worktreeRemovalGuard:e.worktreeRemovalGuard,liveness:a,now:n.now,harnessRoot:b,writeSalvageEvidence:r.execute});if(we){let{reason:ae,detail:To}=lx(we);Qt(l,D.path,ae,To),c.push({...D,executed:!1,skipped:!0,skipReason:ae});continue}c.push(kg(wi(D,r.accountBytes,r.byteAccountingEntryCap),r.execute))}if(!f()&&r.runDirectoriesAgeMs>=0)for(let Se of tg({harnessRoot:b,worktreesDir:P,runDirectoriesAgeMs:r.runDirectoriesAgeMs,runIdFilter:r.runIdFilter,activeGuards:o,now:n.now})){if(f())break;let X=Oe.resolve(Se.path);if(u.has(X))continue;u.add(X);let D={...Se,path:X},ie=D.runId??Oe.basename(X),ge=rg({harnessRoot:b,runId:ie,runPath:X,ageMs:D.ageMs,runDirectoriesAgeMs:r.runDirectoriesAgeMs,activeGuards:o});if(ge){Qt(l,D.path,ge),c.push({...D,executed:!1,skipped:!0,skipReason:ge});continue}c.push(hg(wi(D,r.accountBytes,r.byteAccountingEntryCap),r.execute))}}let m=0,p=0,g=0,k=0,h=0,S=0;for(let b of c)b.bytes&&(m+=b.bytes),!b.skipped&&!b.executed&&b.bytes&&(g+=b.bytes),b.executed?(h+=1,k+=b.bytes??0,b.kind==="remove_run_directory"&&(p+=1)):b.skipped&&(S+=1,b.skipReason==="dry_run"&&b.bytes&&(g+=b.bytes));let A=r.accountBytes?xc({harnessRoot:n.harnessRoot,now:n.now,perRunEntryCap:r.storagePerRunEntryCap}):void 0;Fe("complete",`${c.length} action(s), ${S} skipped, ${h} removed`);let W=Yf(c,l),E=Lg({harnessRoot:n.harnessRoot,scanRoots:n.scanRoots,dryRun:!r.execute,execute:r.execute,nodeModulesAgeMs:r.nodeModulesAgeMs,worktreesAgeMs:r.worktreesAgeMs,includeOrphans:r.includeOrphans,diskPressure:r.diskPressure,diskGate:r.diskGate?{ok:r.diskGate.ok,path:r.diskGate.path,freeBytes:r.diskGate.freeBytes,usedPercent:r.diskGate.usedPercent,reason:r.diskGate.reason}:void 0,scannedAt:new Date(n.now).toISOString(),finalizedRuns:s,actions:c,skips:l,totals:{candidateBytes:m,reclaimableBytes:g,removedBytes:k,removedPaths:h,skippedPaths:S,skipReasons:Bg(c,l)},...A?{storage:A}:{},...W.length>0?{preservedLivePaths:W}:{},...p>0?{removedRunDirectories:p}:{}});return{harnessRoot:n.harnessRoot,scanRoots:n.scanRoots,dryRun:!r.execute,execute:r.execute,nodeModulesAgeMs:r.nodeModulesAgeMs,worktreesAgeMs:r.worktreesAgeMs,includeOrphans:r.includeOrphans,diskPressure:r.diskPressure,diskGate:r.diskGate?{ok:r.diskGate.ok,path:r.diskGate.path,freeBytes:r.diskGate.freeBytes,usedPercent:r.diskGate.usedPercent,reason:r.diskGate.reason}:void 0,scannedAt:new Date(n.now).toISOString(),finalizedRuns:s,actions:c,skips:l,totals:{candidateBytes:m,reclaimableBytes:g,removedBytes:k,removedPaths:h,skippedPaths:S,skipReasons:Bg(c,l)},...A?{storage:A}:{},...W.length>0?{preservedLivePaths:W}:{},...p>0?{removedRunDirectories:p}:{},compactSummary:E}}function $c(e){let r=Ig(e);return Ci({execute:r.execute,finalizeStaleRuns:r.finalizeStaleRuns,accountBytes:r.accountBytes,nodeModulesAgeMs:r.nodeModulesAgeMs,worktreesAgeMs:r.worktreesAgeMs,includeOrphans:r.includeOrphans,runIdFilter:r.runIdFilter})}function Kc(){return process.env.KYNVER_PIPELINE_CLEANUP!=="0"}O();import{mkdirSync as vy,realpathSync as by}from"node:fs";import{fileURLToPath as iI}from"node:url";O();w();Ka();import px from"node:os";function mx(e){let r=(typeof e.apiBaseUrl=="string"?e.apiBaseUrl:void 0)||(typeof e.baseUrl=="string"?e.baseUrl:void 0)||process.env.KYNVER_API_URL||v().apiBaseUrl;return r?tr(String(r)):void 0}async function fx(e,r){let t=await fetch(`${e}/api/agent-os`,{headers:{Authorization:`Bearer ${r}`}});if(!t.ok)return null;let n=await t.json().catch(()=>null);if(!n?.primarySlug)return null;let o=n.items?.find(s=>s.slug===n.primarySlug);return o?.id&&o.slug?{id:o.id,slug:o.slug}:{id:"",slug:n.primarySlug}}async function _i(e){let r=mx(e);r||(console.error("kynver bootstrap requires a Kynver URL \u2014 pass --api-base-url https://your-kynver-site or set KYNVER_API_URL."),process.exit(1)),ee()||(typeof e.apiKey=="string"?Un(e.apiKey):(await $a({...e,apiBaseUrl:r})).ok||process.exit(1));let t=ee();t||(console.error("No API key after login \u2014 aborting."),process.exit(1));let n=await fx(r,t);n||(console.error("Could not resolve your AgentOS workspace from the account. Confirm this account has AgentOS access, then retry."),process.exit(1));let o={...e,apiBaseUrl:r,agentOsSlug:n.slug,...n.id?{agentOsId:n.id}:{},...typeof e.repo=="string"?{}:{discoverRepo:!0}};await is(o),console.log(""),console.log(`  Bootstrap complete \u2014 ${px.hostname()} is linked to workspace "${n.slug}".`),console.log("  Next: `kynver start` \u2014 brings the agent online and configures local Kynver Cron when needed."),console.log("  Persistent background service (Linux): `kynver cron install --install-systemd` after your first start."),console.log("  (Advanced: `kynver run create --repo /path/to/repo` + `kynver daemon --run <RUN_ID> --agent-os-id <AOS_ID> --execute`.)")}O();import DP from"node:os";O();O();De();rs();import gx from"node:os";function Hg(e,r){console.error(JSON.stringify({event:"daemon_identity",level:e,message:r}))}function Fg(e=v(),r=process.env){let t=Te(r,e),n=es({config:e,totalMemBytes:gx.totalmem(),env:r}),o=[...t.warnings],s=[];if(!e.boxKind?.trim()&&!r.KYNVER_BOX_KIND?.trim()&&o.push("boxKind is not persisted in ~/.kynver/config.json \u2014 run `kynver setup --box-kind forge|ghost` so Command Center attributes snapshots to the correct pool"),t.slugInferenceBlocked){let a=r.KYNVER_DAEMON_STRICT_IDENTITY==="1"||r.KYNVER_DAEMON_STRICT_IDENTITY==="true",l="ambiguous box identity: KYNVER_AGENT_OS_SLUG is set without KYNVER_BOX_KIND or config.boxKind; treating this host as forge";a?s.push(l):o.push(l)}let i=s.length===0;for(let a of o)Hg("warn",a);for(let a of s)Hg("error",a);return{ok:i,box:t,workerCapSource:n.workerCapSource,maxConcurrentWorkers:n.configuredMaxWorkers??n.autoCap,autoCap:n.autoCap,warnings:o,errors:s}}import{mkdirSync as hx,readFileSync as kx,renameSync as yx,writeFileSync as Rx}from"node:fs";import{homedir as vx}from"node:os";import $g from"node:path";function Kg(e){let r=e.replace(/[^A-Za-z0-9_-]/g,"_");return $g.join(vx(),".kynver",`daemon-heartbeat-${r}.json`)}function jg(e){try{let r=Kg(e.agentOsId);hx($g.dirname(r),{recursive:!0});let t={observedAt:(e.now??new Date).toISOString(),pid:process.pid,runId:e.runId,agentOsId:e.agentOsId,...e.instructionBundleVersion?{instructionBundleVersion:e.instructionBundleVersion}:{}},n=`${r}.tmp-${process.pid}`;Rx(n,JSON.stringify(t),"utf8"),yx(n,r)}catch{}}function Vg(e){try{let r=kx(Kg(e),"utf8"),t=JSON.parse(r);return typeof t?.observedAt!="string"?null:t}catch{return null}}function Gg(e,r,t=Date.now()){if(!e)return!1;let n=Date.parse(e.observedAt);return Number.isNaN(n)?!0:t-n>r}function bx(e){let r=process.env[e]?.trim().toLowerCase();return r==="1"||r==="true"||r==="yes"||r==="on"}function Zt(){process.platform==="win32"&&(bx("KYNVER_DAEMON_ALLOW_NATIVE_WINDOWS")||(console.error(JSON.stringify({event:"daemon_start_blocked",reason:"native_windows_console_flash",remedy:"Run the daemon inside WSL: .\\scripts\\start-tier2-wsl.ps1 \u2014 or set KYNVER_DAEMON_ALLOW_NATIVE_WINDOWS=1 to override (flashes visible consoles)."})),process.exit(1)))}O();import{existsSync as Sx}from"node:fs";import{homedir as wx}from"node:os";import Cx from"node:path";function Yg(e,r){let t=process.env[e]?.trim().toLowerCase();return t?t==="0"||t==="false"||t==="no"||t==="off"?!1:t==="1"||t==="true"||t==="yes"||t==="on"?!0:r:r}function go(e,r,t=1){let n=Number(process.env[e]);return!Number.isFinite(n)||n<t?r:Math.floor(n)}function Pr(){let e=process.env.KYNVER_CRON_STORE_PATH?.trim()||process.env.OPENCLAW_CRON_STORE_PATH?.trim();return e||Cx.join(wx(),".kynver","agent-os-cron.json")}function _x(e=Pr()){let r=process.env.KYNVER_CRON_TICK_STATE_PATH?.trim();return r||`${e.replace(/\.json$/i,"")}.tick-state.json`}function xx(){let e=v();return process.env.KYNVER_API_URL?.trim()||e.apiBaseUrl?.trim()||process.env.KYNVER_CRON_FIRE_BASE_URL?.trim()||process.env.OPENCLAW_CRON_FIRE_BASE_URL?.trim()||null}function jc(){return process.env.KYNVER_CRON_SECRET?.trim()||process.env.OPENCLAW_CRON_SECRET?.trim()||process.env.KYNVER_RUNTIME_SECRET?.trim()||null}function mr(){let e=Pr(),r=_x(e),t=xx(),n=jc(),o=!!(t&&n),s=Sx(e),i=o&&(s||Yg("KYNVER_CRON_TICK_FORCE",!1));return{storePath:e,statePath:r,lockPath:`${r}.lock`,fireBaseUrl:t,secret:n,tickEnabled:Yg("KYNVER_CRON_TICK_ENABLED",i),tickIntervalMs:go("KYNVER_CRON_TICK_INTERVAL_MS",6e4,5e3),missedRunPolicy:process.env.KYNVER_CRON_MISSED_RUN_POLICY?.trim().toLowerCase()==="skip"?"skip":"catch_up",maxCatchUpPerTick:go("KYNVER_CRON_MAX_CATCH_UP_PER_TICK",3,0),maxRetries:go("KYNVER_CRON_MAX_RETRIES",3,0),retryBackoffMs:go("KYNVER_CRON_RETRY_BACKOFF_MS",6e4,1e3),inflightLeaseMs:go("KYNVER_CRON_INFLIGHT_LEASE_MS",12e4,5e3)}}function xi(e=mr()){return e.tickEnabled&&!!(e.fireBaseUrl&&e.secret)}function Ex(e){return e.replace(/\/+$/,"")}async function Jg(e){let r=e.fetchFn??fetch,t=e.entry.spec.callbackPath.startsWith("/")?e.entry.spec.callbackPath:`/${e.entry.spec.callbackPath}`,n=`${Ex(e.baseUrl)}${t}`,s={source:"kynver-cron",jobId:e.jobId??e.entry.spec.dedupeKey??null,agentOsId:e.entry.spec.target.agentOsId,kind:e.entry.spec.kind,target:e.entry.spec.target,...e.entry.spec.payload!==void 0&&{payload:e.entry.spec.payload}},i=await r(n,{method:"POST",headers:Le(e.secret),body:JSON.stringify(s)}),a=null;try{a=await i.json()}catch{a=null}return{ok:i.ok,status:i.status,body:a}}w();import{closeSync as Px,existsSync as Vc,openSync as Ax,readFileSync as Ix,unlinkSync as qg,writeFileSync as Ox}from"node:fs";var Nx=10*6e4;function zg(e){if(!Vc(e))return null;try{let r=JSON.parse(Ix(e,"utf8"));if(typeof r.pid=="number"&&typeof r.at=="string")return r}catch{return null}return null}function Tx(e){let r=zg(e);if(!r||!$(r.pid))return!0;let t=Date.parse(r.at);return Number.isNaN(t)?!0:Date.now()-t>Nx}function Xg(e){if(Vc(e)&&!Tx(e)){let r=zg(e);return{acquired:!1,reason:r?`held by pid ${r.pid}`:"held by another process"}}if(Vc(e))try{qg(e)}catch{}try{let r=Ax(e,"wx");return Ox(r,JSON.stringify({pid:process.pid,at:new Date().toISOString()}),"utf8"),Px(r),{acquired:!0}}catch(r){if(r.code==="EEXIST")return{acquired:!1,reason:"concurrent acquire"};throw r}}function Qg(e){try{qg(e)}catch{}}var Dx=/^[\d*/,\-?LW#]+\s+[\d*/,\-?LW#]+\s+[\d*/,\-?LW#]+\s+[\d*/,\-?LW#]+\s+[\d*/,\-?LW#]+$/;function Mx(e){return Dx.test(e.trim())}function Ux(e,r,t){let n=new Set;for(let o of e.split(",")){let s=o.trim();if(!s)continue;if(s==="*"){for(let d=r;d<=t;d++)n.add(d);continue}let i=/^(.+)\/(\d+)$/.exec(s),a=i?i[1]:s,l=i?Math.max(1,Number(i[2])):1;if(a==="*"){for(let d=r;d<=t;d+=l)n.add(d);continue}let c=/^(\d+)-(\d+)$/.exec(a);if(c){let d=Math.max(r,Number(c[1])),f=Math.min(t,Number(c[2]));for(let m=d;m<=f;m+=l)n.add(m);continue}let u=Number(a);Number.isInteger(u)&&u>=r&&u<=t&&n.add(u)}return n}function ho(e,r,t,n){let o=e.trim();return o==="*"?!0:Ux(o,t,n).has(r)}function Lx(e,r){let t=e.trim().split(/\s+/);if(t.length!==5)return!1;let[n,o,s,i,a]=t;return ho(n,r.getUTCMinutes(),0,59)&&ho(o,r.getUTCHours(),0,23)&&ho(s,r.getUTCDate(),1,31)&&ho(i,r.getUTCMonth()+1,1,12)&&ho(a,r.getUTCDay(),0,6)}var Bx=366*24*60;function Wx(e){return new Date(Date.UTC(e.getUTCFullYear(),e.getUTCMonth(),e.getUTCDate(),e.getUTCHours(),e.getUTCMinutes(),0,0))}function Zg(e,r){if(!Mx(e))return null;let t=Wx(r);t=new Date(t.getTime()+6e4);for(let n=0;n<Bx;n++){if(Lx(e,t))return t;t=new Date(t.getTime()+6e4)}return null}function eh(e,r){if(e.scheduleKind==="runAt"&&e.runAt){let t=Date.parse(e.runAt);return Number.isNaN(t)?null:new Date(t).toISOString()}if(e.scheduleKind==="cron"&&e.cron){let t=Zg(e.cron.trim(),r);return t?t.toISOString():null}return null}function Gc(e,r){if(e.scheduleKind!=="cron"||!e.cron?.trim())return null;let t=Zg(e.cron.trim(),r);return t?t.toISOString():null}import{promises as Hx}from"node:fs";async function rh(e){try{return await Hx.readFile(e,"utf8")}catch(r){if(r.code==="ENOENT")return null;throw r}}function Fx(e){if(!e)return[];try{let r=JSON.parse(e);return Array.isArray(r.entries)?r.entries:[]}catch{return[]}}async function lt(e=Pr()){let r=await rh(e);return Fx(r)}async function th(e,r){let{mkdir:t,writeFile:n,rename:o}=await import("node:fs/promises"),{randomBytes:s}=await import("node:crypto"),{dirname:i}=await import("node:path");await t(i(e),{recursive:!0});let a=`${e}.${s(4).toString("hex")}.tmp`,l=JSON.stringify({entries:r},null,2);await n(a,l,"utf8"),await o(a,e)}async function nh(e,r=Pr()){let t=await lt(r),n=t.findIndex(o=>o.providerScheduleId===e.providerScheduleId);n>=0?t[n]=e:t.push(e),await th(r,t)}async function oh(e=Pr()){return await rh(e)!==null?{created:!1}:(await th(e,[]),{created:!0})}import{randomBytes as $x}from"node:crypto";import{promises as ko}from"node:fs";import Kx from"node:path";var Ei={version:1,jobs:{}};async function jx(e){try{return await ko.readFile(e,"utf8")}catch(r){if(r.code==="ENOENT")return null;throw r}}function Vx(e){if(!e)return{...Ei,jobs:{...Ei.jobs}};try{let r=JSON.parse(e);return r?.version!==1||typeof r.jobs!="object"||!r.jobs?{...Ei,jobs:{}}:r}catch{return{...Ei,jobs:{}}}}async function Pi(e){let r=await jx(e);return Vx(r)}async function Gx(e,r){await ko.mkdir(Kx.dirname(e),{recursive:!0});let t=$x(6).toString("hex"),n=`${e}.tmp-${process.pid}-${Date.now()}-${t}`;await ko.writeFile(n,`${JSON.stringify(r,null,2)}
-`,"utf8");try{await ko.rename(n,e)}catch(o){let s=o.code;if(s!=="EPERM"&&s!=="EEXIST"&&s!=="EACCES")throw o;await ko.unlink(n).catch(()=>{})}}async function sh(e,r){await Gx(e,r)}function ih(e,r){let t=e.jobs[r];if(t)return t;let n={providerScheduleId:r,nextFireAt:null,lastFiredAt:null,lastAttemptAt:null,consecutiveFailures:0,completedAt:null,inflightUntil:null};return e.jobs[r]=n,n}function Yx(e,r){if(!e.inflightUntil)return!1;let t=Date.parse(e.inflightUntil);return!Number.isNaN(t)&&t>r}function Jx(e){return!!e.completedAt}function qx(e,r,t,n){if(r.consecutiveFailures===0)return!0;if(e.spec.scheduleKind!=="cron"&&r.consecutiveFailures>t.maxRetries)return!1;if(!r.lastAttemptAt)return!0;let o=Date.parse(r.lastAttemptAt);return Number.isNaN(o)?!0:n-o>=t.retryBackoffMs}function zx(e,r,t){if(r.nextFireAt)return r.nextFireAt;let n=eh(e.spec,t);return r.nextFireAt=n,n}function Xx(e,r,t,n){if(e.paused||Jx(r)||Yx(r,t)||!qx(e,r,n,t))return!1;let o=r.nextFireAt?Date.parse(r.nextFireAt):NaN;return Number.isNaN(o)?!1:t>=o}function Qx(e,r,t){e.spec.scheduleKind==="cron"&&(r.nextFireAt=Gc(e.spec,t))}async function en(e={}){let r=e.env??mr(),t=e.now??new Date,n=t.getTime();if(!r.tickEnabled)return{enabled:!1,skipped:"tick_disabled",scanned:0,due:0,fired:0,skippedJobs:0,errors:0};if(!r.fireBaseUrl||!r.secret)return{enabled:!0,skipped:"missing_fire_credentials",scanned:0,due:0,fired:0,skippedJobs:0,errors:0};let o=Xg(r.lockPath);if(!o.acquired)return{enabled:!0,skipped:o.reason??"lock_not_acquired",scanned:0,due:0,fired:0,skippedJobs:0,errors:0,lockHeld:!0};try{let s=await lt(r.storePath),i=e.agentOsIdFilter?s.filter(m=>m.spec.target.agentOsId===e.agentOsIdFilter):s,a=await Pi(r.statePath),l=[];for(let m of i){let p=ih(a,m.providerScheduleId);zx(m,p,t),Xx(m,p,n,r)&&l.push({entry:m,job:p})}l.sort((m,p)=>{let g=Date.parse(m.job.nextFireAt??"")||0,k=Date.parse(p.job.nextFireAt??"")||0;return g-k});let c=0,u=0,d=0,f=r.maxCatchUpPerTick;for(let{entry:m,job:p}of l){if(r.missedRunPolicy==="skip"&&m.spec.scheduleKind==="cron"){let g=Date.parse(p.nextFireAt??"");if(!Number.isNaN(g)&&g<n-r.tickIntervalMs*2){p.nextFireAt=Gc(m.spec,t),d++;continue}}if(f<=0){d++;continue}p.inflightUntil=new Date(n+r.inflightLeaseMs).toISOString(),p.lastAttemptAt=t.toISOString(),Qx(m,p,t);try{let g=await Jg({entry:m,baseUrl:r.fireBaseUrl,secret:r.secret,fetchFn:e.fetchFn});p.inflightUntil=null,g.ok?(p.lastFiredAt=t.toISOString(),p.consecutiveFailures=0,m.spec.scheduleKind==="runAt"&&(p.completedAt=t.toISOString(),p.nextFireAt=null),c++,f--):(p.consecutiveFailures+=1,u++)}catch{p.inflightUntil=null,p.consecutiveFailures+=1,u++}}return await sh(r.statePath,a),{enabled:!0,scanned:i.length,due:l.length,fired:c,skippedJobs:d,errors:u}}finally{Qg(r.lockPath)}}w();L();import ah from"node:path";var lh="mesh-cron-lease.json";function Ai(e){return _(ah.join(x(e),lh),null)}function ch(e,r){ce(ah.join(x(e),lh),{...r,updatedAt:new Date().toISOString()})}function uh(e){if(!e||typeof e!="object"||Array.isArray(e))return null;let r=e.response;if(!r||typeof r!="object"||Array.isArray(r))return null;let t=r.meshLiveness;if(!t||typeof t!="object"||Array.isArray(t))return null;let n=t.cronLease;if(!n||typeof n!="object"||Array.isArray(n))return null;let o=n;return{leaseToken:typeof o.leaseToken=="string"?o.leaseToken:null,holderBoxId:typeof o.holderBoxId=="string"?o.holderBoxId:null,authorized:o.authorized===!0,updatedAt:new Date().toISOString()}}w();import RE from"node:path";O();var Zx=1;function rn(e){if(!e||typeof e!="object")return 0;let r=e.startedCount;if(typeof r=="number")return r;let t=e.outcomes;return Array.isArray(t)?t.filter(n=>n.started).length:0}function eE(e){let{maxStarts:r,...t}=e;return t}async function Yc(e,r){if(r<=0)return{ok:!0,skipped:!0,reason:"no slots",maxStarts:0,startedCount:0};let t=eE(e);if(t.targetTaskId||t.targetTaskIds){let u=await _r({...t,execute:!0,pipeline:!0,maxStarts:String(r)});return{...typeof u=="object"&&u!==null?u:{},passes:{target:u},startedCount:rn(u)}}let n=Math.min(r,Zx),o=Math.max(0,r-n),s=await _r({...t,execute:!0,pipeline:!0,lane:"review",maxStarts:String(n)}),i=rn(s),a=o+(n-i);if(a<=0)return{...typeof s=="object"&&s!==null?s:{},passes:{review:s},startedCount:i};let l=await _r({...t,execute:!0,pipeline:!0,maxStarts:String(a)}),c=rn(l);return{passes:{review:s,work:l},startedCount:i+c,ok:!0}}function dh(e){if(!e||typeof e!="object")return[];let t=e.response?.dispatch?.exactTargetTaskIds;if(!Array.isArray(t))return[];let n=new Set,o=[];for(let s of t){if(typeof s!="string")continue;let i=s.trim();!i||n.has(i)||(n.add(i),o.push(i))}return o}function rE(e){let t=e.response?.dispatch;return t&&typeof t=="object"?t:null}function yo(e){return typeof e!="number"||!Number.isFinite(e)?null:Math.max(0,Math.floor(e))}function ph(e,r){let t=rE(r),n=yo(t?.recommendedMaxStarts),o=yo(t?.actionableReady),s=yo(t?.queuedTasks),i=yo(t?.boardAdvancedThisTick)??0,a=yo(t?.leaseReapedThisTick)??0,l=i+a,c=o??s,u=e.slotsAvailable;c!==null?u=Math.min(u,c):n!==null&&(u=Math.min(u,n)),c===null&&n!==null&&(u=Math.max(u,Math.min(e.slotsAvailable,n)));let d=t?.underutilized===!0||(c??0)>0&&e.slotsAvailable>0&&e.maxConcurrentWorkers>0&&e.activeWorkers<e.maxConcurrentWorkers;if(e.slotsAvailable>0&&u===0&&(d||l>0)){let m=c??(l>0?l:1);u=Math.min(e.slotsAvailable,Math.max(1,m))}let f=s!==null&&o!==null?Math.max(0,s-o):null;return{maxStarts:Math.max(0,u),underutilized:d,advisedStarts:n,actionableReady:o,queuedTasks:s,nonDispatchableReady:f,boardAdvancedThisTick:i,leaseReapedThisTick:a}}Mn();L();Pn();G();w();G();L();w();import tE from"node:path";O();async function mh(e){let r=B(e.baseUrl),t=await K(e.secret,e.agentOsId,{baseUrl:r}),n=`${r}/api/agent-os/by-id/${encodeURIComponent(e.agentOsId)}/tasks/${encodeURIComponent(e.taskId)}/plan-progress-sync`,o=await q(n,t,{phase:e.phase,taskId:e.taskId,blocker:e.blocker,artifact:e.artifact},{agentOsId:e.agentOsId,baseUrl:r});return{ok:o.ok,status:o.status,response:o.response}}async function fh(e,r){let t=U(e),n=String(r.agentOsId||"");if(!n)return[];let o=[];for(let s of Object.keys(t.workers||{})){let i=_(tE.join(x(t.id),"workers",R(s),"worker.json"),void 0);if(!i?.dispatched||!i.taskId)continue;let a=T(i);if(!a.heartbeatBlocker)continue;if(i.lastSyncedHeartbeatBlocker===a.heartbeatBlocker){o.push({worker:s,phase:"heartbeat_blocker",ok:!0,skipped:!0});continue}let l=await mh({agentOsId:n,taskId:i.taskId,phase:"heartbeat_blocker",blocker:a.heartbeatBlocker,baseUrl:r.baseUrl?String(r.baseUrl):void 0,secret:r.secret?String(r.secret):void 0});l.ok&&(i.lastSyncedHeartbeatBlocker=a.heartbeatBlocker,V(t.id,i)),o.push({worker:s,phase:"heartbeat_blocker",ok:l.ok})}return o}O();De();function nE(e=process.env){let r=v();return je(r,e)!=="forge"}function gh(e,r=process.env){if(nE(r))return e?.maxConcurrentWorkers??void 0}async function hh(e,r){let t=B(r.baseUrl?String(r.baseUrl):void 0),n=await K(r.secret?String(r.secret):void 0,e,{baseUrl:t}),o=`${t}/api/agent-os/by-id/${encodeURIComponent(e)}/runtime`;try{let s=await as(o,n);if(!s.ok)return null;let a=s.response?.preferences?.maxConcurrentWorkers;if(a==null)return{maxConcurrentWorkers:null};let l=Number(a);return!Number.isFinite(l)||l<=0?{maxConcurrentWorkers:null}:{maxConcurrentWorkers:Math.floor(l)}}catch{return null}}O();De();import{spawnSync as oE}from"node:child_process";var sE=1e4,iE=4*1024*1024,kh=(e,r,t)=>{try{let n=oE(e,r,{encoding:"utf8",stdio:["ignore","pipe","pipe"],timeout:t?.timeoutMs??sE,maxBuffer:iE});return{ok:n.status===0,stdout:typeof n.stdout=="string"?n.stdout:"",stderr:typeof n.stderr=="string"?n.stderr:""}}catch(n){return{ok:!1,stdout:"",stderr:n instanceof Error?n.message:String(n)}}};function tn(e,r,t){let n=e(r,t);if(!n.ok||!n.stdout.trim())return null;try{return JSON.parse(n.stdout)}catch{return null}}function yh(e,r,t){return`${e} ${r} ${t}`}function Ro(e){let r=e.lastIndexOf("@");if(r<=0||r===e.length-1)return null;let t=e.slice(0,r),n=e.slice(r+1);return!/^[^/\s]+\/[^/\s]+$/.test(t)||!/^[0-9a-f]{7,40}$/i.test(n)?null:{repo:t,sha:n}}function Rh(e){let r=e.trim().match(/[/:]([^/]+\/[^/]+)\/(?:pull|pulls|merge_requests|pull-requests)\/(\d+)/i);if(!r)return null;let t=Number(r[2]);return!Number.isFinite(t)||t<=0?null:{repo:r[1],number:t}}var aE=8e3,lE=30,cE=100,uE=400;function Jc(e){return process.env.GITHUB_TOKEN?.trim()||process.env.GH_TOKEN?.trim()?!0:e("gh",["auth","token"]).ok}function nn(e){return e&&typeof e=="object"&&!Array.isArray(e)?e:null}function dE(e){return Array.isArray(e)?e.map(r=>nn(r)).filter(r=>r!==null).slice(0,lE).map(r=>({context:r.context??null,state:r.state??null,target_url:r.target_url??null,description:r.description??null})):[]}function vh(e,r,t){let n=tn(e,"gh",["api",`repos/${r}/commits/${t}/status`]);return n?{state:n.state??null,statuses:dE(n.statuses)}:null}var bh={provider:"github",kind:"pr_snapshot",version:"1",isAvailable:Jc,collect(e,r){let t=Rh(e);if(!t)return null;let n=tn(r,"gh",["api",`repos/${t.repo}/pulls/${t.number}`]);if(!n)return null;let o=nn(n.head),s=typeof o?.sha=="string"?o.sha:null,i=nn(n.user),a=nn(nn(o?.repo)?.owner),l=typeof n.body=="string"?n.body.slice(0,aE):null,c=[],u={state:null,statuses:[]};if(s){let m=tn(r,"gh",["api",`repos/${t.repo}/commits/${s}/check-runs?per_page=100`]);Array.isArray(m?.check_runs)&&(c=m.check_runs.map(p=>nn(p)).filter(p=>p!==null).slice(0,cE).map(p=>({name:p.name??null,status:p.status??null,conclusion:p.conclusion??null}))),u=vh(r,t.repo,s)??u}let d=r("gh",["api","--paginate",`repos/${t.repo}/pulls/${t.number}/files?per_page=100`,"--jq",".[].filename"]),f=d.ok?d.stdout.split(`
-`).map(m=>m.trim()).filter(Boolean).slice(0,uE):[];return{pull:{html_url:n.html_url??null,title:n.title??null,body:l,user:{login:i?.login??null},state:n.state??null,draft:n.draft??null,merged:n.merged??null,merged_at:n.merged_at??null,merge_commit_sha:n.merge_commit_sha??null,mergeable:n.mergeable??null,mergeable_state:n.mergeable_state??null,head:{sha:s,ref:o?.ref??null,repo:{owner:{login:a?.login??null}}}},checkRuns:c,combinedStatus:u,changedFiles:f}}},Sh={provider:"github",kind:"commit_status",version:"1",isAvailable:Jc,collect(e,r){let t=Ro(e);return t?vh(r,t.repo,t.sha):null}},wh={provider:"github",kind:"branch_reachability",version:"1",isAvailable:Jc,collect(e,r){let t=Ro(e);if(!t)return null;let n=tn(r,"gh",["api",`repos/${t.repo}`]),o=typeof n?.default_branch=="string"&&n.default_branch.trim()?n.default_branch.trim():null;if(!o)return null;let s=tn(r,"gh",["api",`repos/${t.repo}/compare/${encodeURIComponent(o)}...${t.sha}`]);if(!s)return null;let i=typeof s.status=="string"?s.status:null;return{defaultBranch:o,compareStatus:i,reachable:i==="identical"||i==="behind"}}};var pE=5,mE=/\b(READY|ERROR|BUILDING|QUEUED|CANCELED|INITIALIZING)\b/i,fE=/https:\/\/[^\s]+/,Ch={provider:"vercel",kind:"deployment_status",version:"1",isAvailable(e){return e("vercel",["whoami"]).ok},collect(e,r){let t=Ro(e);if(!t)return null;let n=r("vercel",["list","--prod","--meta",`githubCommitSha=${t.sha}`]);if(!n.ok)return null;let o=[];for(let s of n.stdout.split(`
-`)){let i=s.match(fE)?.[0];if(!i)continue;let a=s.match(mE)?.[1]?.toUpperCase()??null;if(o.push({url:i,state:a}),o.length>=pE)break}return{found:o.length>0,deployments:o}}};var qc=[];function Ii(e){qc.some(r=>r.provider===e.provider&&r.kind===e.kind)||qc.push(e)}function _h(e,r){return qc.find(t=>t.provider===e&&t.kind===r)??null}function xh(){Ii(bh),Ii(Sh),Ii(wh),Ii(Ch)}var gE=8,hE=25e3;function Eh(e,r={}){xh();let t=r.run??kh,n=r.now??(()=>new Date),o=r.maxSubjects??gE,s=Date.now()+(r.deadlineMs??hE),i=new Set,a=e.filter(m=>{let p=yh(m.provider,m.kind,m.subject);return i.has(p)?!1:(i.add(p),!0)}),l=a.length>0?Math.floor(n().getTime()/6e4)%a.length:0,u=a.map((m,p)=>a[(l+p)%a.length]).slice(0,o),d={attempted:0,collected:0,items:[],skipped:[]},f=new Map;for(let m of u){if(Date.now()>s){d.skipped.push({...m,reason:"budget_exhausted"});continue}let p=_h(m.provider,m.kind);if(!p){d.skipped.push({...m,reason:"no_recipe"});continue}let g=`${p.provider} ${p.kind}`,k=f.get(g);if(k===void 0&&(k=p.isAvailable(t),f.set(g,k)),!k){d.skipped.push({...m,reason:"provider_unavailable"});continue}d.attempted+=1;let h=p.collect(m.subject,t);if(h==null){d.skipped.push({...m,reason:"collect_failed"});continue}d.collected+=1,d.items.push({provider:m.provider,kind:m.kind,subject:m.subject,payload:h,observedAt:n().toISOString(),collectorVersion:p.version})}return d}L();w();import kE from"node:path";var yE="provider-evidence-wanted.json";function Ph(e){return kE.join(x(e),yE)}function Ah(e){if(!Array.isArray(e))return[];let r=[];for(let t of e){if(!t||typeof t!="object"||Array.isArray(t))continue;let n=t,o=typeof n.provider=="string"?n.provider.trim():"",s=typeof n.kind=="string"?n.kind.trim():"",i=typeof n.subject=="string"?n.subject.trim():"";!o||!s||!i||r.push({provider:o,kind:s,subject:i})}return r}function Ih(e){let r=_(Ph(e),null);return Ah(r?.wanted)}function Oh(e,r){ce(Ph(e),{savedAt:new Date().toISOString(),wanted:r})}function Nh(e){if(!e||typeof e!="object"||Array.isArray(e))return null;let r=e.providerEvidenceWanted;return Array.isArray(r)?Ah(r):null}async function vE(e,r){let t=U(e),n=[];for(let o of Object.keys(t.workers||{})){let s=_(RE.join(x(t.id),"workers",R(o),"worker.json"),void 0);if(!s?.taskId||s.localOnly)continue;if(Qr(s)){n.push({worker:o,ok:!0,taskId:s.taskId??null,skipped:!0});continue}let i=T(s);if(!Z(i))continue;let a=Br({alive:i.alive,finalResult:i.finalResult,changedFiles:i.changedFiles,gitAncestry:i.gitAncestry});if(!s.dispatched&&!i.finalResult&&!a?.salvageable)continue;let l=await zn({run:e,name:o,agentOsId:String(r.agentOsId||s.agentOsId||""),...r});n.push({worker:o,ok:l.ok,taskId:s.taskId??null})}return n}async function bE(e,r,t,n,o){let s=B(n.baseUrl?String(n.baseUrl):void 0),i=await K(n.secret?String(n.secret):void 0,e,{baseUrl:s}),a=`${s}/api/agent-os/by-id/${encodeURIComponent(e)}/operator/tick`,l=await Ko(),c=Hs(r),u=null;try{let g=Ih(r);u=g.length>0?Eh(g):null}catch{u=null}let d=Ai(r),f=await Rr(a,i,{agentOsId:e,runId:r,ingestHarness:!0,harnessBoardSnapshot:Zr(r),resourceGate:t,boxResourceSnapshot:ro(t,{harnessRunId:r,boxKind:je(v())}),packageVersions:l,...o?{harnessCleanup:o}:{},runnerPresence:qe({runId:r}),activeHarnessWorkers:c,...d?.leaseToken?{meshCronLeaseToken:d.leaseToken}:{},...u&&u.items.length>0?{providerEvidence:u.items}:{}}),m=Nh(f.response);if(m)try{Oh(r,m)}catch{}let p=uh(f);if(p)try{ch(r,p)}catch{}return{ok:f.ok,httpStatus:f.status,response:f.response,...u?{providerEvidence:{attempted:u.attempted,collected:u.collected,skipped:u.skipped.length}}:{}}}async function zc(e){let r=String(N(String(e.run||""),"--run")),t=String(N(String(e.agentOsId||""),"--agent-os-id")),n=e.execute!==!1&&e.execute!=="false";Ht({run:r});let o=await hh(t,e),s=gh(o),i=$r({runId:r,configuredMaxWorkersOverride:s}),a=Kc()?$c(r):void 0,l=await bE(t,r,i,e,a),c=hm(r,l),u=await ws(r,e),d=await vE(r,e),f=$r({runId:r,configuredMaxWorkersOverride:s}),m=qt(),p=await fh(r,e),g=ph(f,l),k=g.maxStarts,h=await zt({run:r,agentOsId:t,pipeline:!0,...e}),S=null,A=0,W=dh(l),E=k;if(n&&E>0&&W.length>0){let P=Math.min(E,W.length),H=await Yc({...e,run:r,agentOsId:t,targetTaskIds:W.join(",")},P),M=rn(H);A+=M,E=Math.max(0,E-M),S={exactTargetTaskIds:W,exact:H,startedCount:A}}if(n&&E>0){let P=await Yc({...e,run:r,agentOsId:t},E),H=rn(P);A+=H,S=S&&typeof S=="object"?{...S,broad:P,startedCount:A}:P}else!n||k<=0?S||(S={ok:!0,skipped:!0,reason:n?f.reason??"no slots or queued work":"execute disabled",maxStarts:0,dispatchAdvice:g,...W.length?{exactTargetTaskIds:W,exactOnly:!0}:{}}):S&&typeof S=="object"&&(S={...S,broadSkipped:!0,startedCount:A});let b=!g.underutilized&&k===0&&d.length===0&&A===0;return{runId:r,agentOsId:t,execute:n,resourceGate:i,dispatchResourceGate:f,leaseRenewal:u,completedWorkers:d,staleReconcile:m,harnessCleanup:a,planProgressSync:p,completionAckSync:c,operatorTick:l,sweep:h,dispatchAdvice:g,dispatch:S,idle:b}}O();import HE from"node:os";import{readFileSync as SE}from"node:fs";import{homedir as wE,platform as CE}from"node:os";import _E from"node:path";import{execFileSync as xE}from"node:child_process";function Th(e,r=Date.now()){try{let t=JSON.parse(e),n=t.claudeAiOauth?.accessToken,o=t.claudeAiOauth?.expiresAt;return typeof n!="string"||!n||typeof o=="number"&&o-r<6e4?null:n}catch{return null}}function EE(){if(CE()==="darwin")try{let e=xE("security",["find-generic-password","-s","Claude Code-credentials","-w"],{encoding:"utf8",stdio:["ignore","pipe","ignore"]});return Th(e.trim())}catch{return null}try{let e=SE(_E.join(wE(),".claude",".credentials.json"),"utf8");return Th(e)}catch{return null}}function Dh(e=process.env,r={}){let t=e.ANTHROPIC_API_KEY?.trim();if(t)return{kind:"api_key",key:t};let n=e.KYNVER_CHAT_USE_CLAUDE_OAUTH;if(r.oauthOptIn===!0||n==="1"||n==="true"||n==="yes"){let s=EE();if(s)return{kind:"oauth",token:s}}return null}var PE="You are Claude Code, Anthropic's official CLI for Claude.";function AE(){return{blocks:[],stopReason:null,inputTokens:0,outputTokens:0}}function IE(e,r){let t=r;switch(t.type){case"message_start":return e.inputTokens=t.message?.usage?.input_tokens??0,"";case"content_block_start":{let n=t.index??e.blocks.length;return e.blocks[n]={type:t.content_block?.type==="tool_use"?"tool_use":"text",text:"",id:t.content_block?.id,name:t.content_block?.name,inputJson:""},""}case"content_block_delta":{let n=e.blocks[t.index??e.blocks.length-1];return n?t.delta?.type==="text_delta"&&t.delta.text?(n.text+=t.delta.text,t.delta.text):(t.delta?.type==="input_json_delta"&&t.delta.partial_json&&(n.inputJson+=t.delta.partial_json),""):""}case"message_delta":return t.delta?.stop_reason&&(e.stopReason=t.delta.stop_reason),typeof t.usage?.output_tokens=="number"&&(e.outputTokens=t.usage.output_tokens),"";default:return""}}function OE(e){let r=[];for(let t of e.blocks)if(t)if(t.type==="tool_use"){let n={};try{n=t.inputJson?JSON.parse(t.inputJson):{}}catch{n={}}r.push({type:"tool_use",id:t.id??"",name:t.name??"",input:n})}else t.text&&r.push({type:"text",text:t.text});return{content:r,stop_reason:e.stopReason??"end_turn",usage:{input_tokens:e.inputTokens,output_tokens:e.outputTokens}}}async function*NE(e){let r=e.getReader(),t=new TextDecoder,n="";try{for(;;){let{done:o,value:s}=await r.read();if(o)break;n+=t.decode(s,{stream:!0});let i;for(;(i=n.indexOf(`
-`))!==-1;){let a=n.slice(0,i).trim();if(n=n.slice(i+1),!a.startsWith("data:"))continue;let l=a.slice(5).trim();if(!(!l||l==="[DONE]"))try{yield JSON.parse(l)}catch{}}}}finally{r.releaseLock()}}function TE(e=process.env){return(e.ANTHROPIC_BASE_URL?.trim()||"https://api.anthropic.com").replace(/\/$/,"")}async function Mh(e){let{creds:r,model:t,payload:n}=e,o={"Content-Type":"application/json","anthropic-version":"2023-06-01"},s=n.system;r.kind==="api_key"?o["x-api-key"]=r.key:(o.Authorization=`Bearer ${r.token}`,o["anthropic-beta"]="oauth-2025-04-20",s=[{type:"text",text:PE},{type:"text",text:n.system}]);let i=await fetch(`${TE()}/v1/messages`,{method:"POST",headers:o,signal:e.signal,body:JSON.stringify({model:t,max_tokens:n.maxTokens,system:s,messages:n.messages,...Array.isArray(n.tools)&&n.tools.length>0?{tools:n.tools}:{},...n.temperature!==void 0?{temperature:n.temperature}:{},stream:!0})});if(!i.ok||!i.body){let l=await i.text().catch(()=>"");throw new Error(`Anthropic stream failed: HTTP ${i.status}${l?` \u2014 ${l.slice(0,300)}`:""}`)}let a=AE();for await(let l of NE(i.body)){let c=IE(a,l);c&&e.onDelta(c)}return OE(a)}var on=class{constructor(r,t=150){this.flushFn=r;this.floorMs=t}buffer="";timer=null;closed=!1;push(r){this.closed||!r||(this.buffer+=r,this.timer||(this.timer=setTimeout(()=>{this.timer=null,this.flushNow()},this.floorMs)))}flushNow(){if(!this.buffer)return;let r=this.buffer;this.buffer="",this.flushFn(r)}close(){this.closed||(this.closed=!0,this.timer&&(clearTimeout(this.timer),this.timer=null),this.flushNow())}};import{spawn as LE}from"node:child_process";var DE=new Set(["run list","run status","worker list","worker status","worker tail","status","cron status","monitor status","monitor list"]),ME=new Set(["run create","run dispatch","run sweep","worker start","worker stop","worker complete","cleanup"]),UE=["--secret","--api-key","--keeper-child"];function Uh(e){if(!Array.isArray(e)||e.length===0||e.some(n=>typeof n!="string"))return{ok:!1,mutating:!1,reason:"argv must be a non-empty string array"};for(let n of e){if(UE.some(o=>n===o||n.startsWith(`${o}=`)))return{ok:!1,mutating:!1,reason:`forbidden flag: ${n}`};if(n.includes(`
-`)||n.includes("\0"))return{ok:!1,mutating:!1,reason:"control characters refused"}}let r=e[0],t=e.length>1&&!e[1].startsWith("--")?`${r} ${e[1]}`:r;return t==="doctor runtime-takeover"?e.includes("--remediate-default-repo")?{ok:!0,mutating:!0}:{ok:!0,mutating:!1}:r==="cleanup"?{ok:!0,mutating:e.includes("--execute")}:DE.has(t)?{ok:!0,mutating:!1}:ME.has(t)?{ok:!0,mutating:!0}:{ok:!1,mutating:!1,reason:`verb not allowlisted: ${t}`}}var BE=10*6e4,WE=5e3,Lh=2e5;async function Bh(e,r,t={}){let n=Uh(e);if(!n.ok)return{exitCode:null,timedOut:!1,refused:n.reason};let o=t.cliEntry??process.argv[1],s=t.timeoutMs??BE,i=new on(r);return new Promise(a=>{let l=0,c=!1,u=LE(process.execPath,[o,...e],{stdio:["ignore","pipe","pipe"],env:process.env}),d=m=>{if(l>=Lh)return;let p=m.toString("utf8").slice(0,Lh-l);l+=p.length,i.push(p)};u.stdout?.on("data",d),u.stderr?.on("data",d);let f=setTimeout(()=>{c=!0,u.kill("SIGTERM"),setTimeout(()=>u.kill("SIGKILL"),WE).unref()},s);u.on("error",m=>{clearTimeout(f),i.push(`spawn failed: ${m.message}`),i.close(),a({exitCode:null,timedOut:!1,refused:void 0})}),u.on("close",m=>{clearTimeout(f),i.close(),a({exitCode:m,timedOut:c})})})}var FE=25e3,$E=32e3,KE=5e3,jE=6e4,Wh=5*6e4,VE=5e3,GE="claude-sonnet-4-6";async function YE(e,r,t){let n=t.KYNVER_RUNTIME_CHAT_BRIDGE_URL?.trim();if(n)return n;if(!e)return null;let o=new AbortController,s=setTimeout(()=>o.abort(),VE);try{let i=await fetch(`${e.replace(/\/$/,"")}/api/runtime/chat-bridge`,{headers:{Authorization:`Bearer ${r}`},signal:o.signal});if(!i.ok)return null;let a=await i.json().catch(()=>null);return typeof a?.bridgeUrl=="string"&&a.bridgeUrl.trim()?a.bridgeUrl.trim():null}catch{return null}finally{clearTimeout(s)}}async function Hh(e=process.env){let r=v(),t=r.agentOsId?.trim(),n=ee();if(!t||!n)return null;let o=await YE(r.apiBaseUrl,n,e);return o?{bridgeUrl:o.replace(/\/$/,""),agentOsId:t,apiKey:n,boxId:HE.hostname(),model:e.KYNVER_CHAT_MODEL?.trim()||r.defaultModel?.trim()||GE,useClaudeOauth:r.chatUseClaudeOauth===!0}:null}async function JE(e,r){let t=new AbortController,n=setTimeout(()=>t.abort(),$E),o=setInterval(()=>{r()&&t.abort()},500);try{let s=await fetch(`${e.bridgeUrl}/runtime-chat/claim`,{method:"POST",headers:{"Content-Type":"application/json",Authorization:`Bearer ${e.apiKey}`},body:JSON.stringify({agentOsId:e.agentOsId,boxId:e.boxId,waitMs:FE}),signal:t.signal});if(s.status===204)return null;if(s.status===401||s.status===403)return"auth_error";if(!s.ok)throw new Error(`claim failed: HTTP ${s.status}`);return(await s.json().catch(()=>null))?.turn??null}catch(s){if(r())return null;throw s}finally{clearTimeout(n),clearInterval(o)}}async function ct(e,r,t){return(await fetch(`${e.bridgeUrl}/runtime-chat/turns/${encodeURIComponent(r)}/events`,{method:"POST",headers:{"Content-Type":"application/json",Authorization:`Bearer ${e.apiKey}`},body:JSON.stringify({agentOsId:e.agentOsId,events:t})})).ok}async function qE(e,r){let t=0,n=Array.isArray(r.payload?.argv)?r.payload.argv:[],o=await Bh(n,s=>{ct(e,r.turnId,[{seq:t++,kind:"delta",text:s}])});o.refused?await ct(e,r.turnId,[{seq:t++,kind:"error",error:`command_refused: ${o.refused}`}]).catch(()=>{}):await ct(e,r.turnId,[{seq:t++,kind:"final",message:{exitCode:o.exitCode,timedOut:o.timedOut}}]).catch(()=>{}),console.error(JSON.stringify({event:"command_turn_done",turnId:r.turnId,argv:n.slice(0,4),exitCode:o.exitCode,timedOut:o.timedOut,refused:o.refused??null}))}async function zE(e,r){let t=0,n=!1,o=new AbortController,s=l=>{n||ct(e,r.turnId,[{seq:t++,kind:"delta",text:l}]).then(c=>{c||(n=!0,o.abort())})},i=new on(s),a=Dh(process.env,{oauthOptIn:e.useClaudeOauth});if(!a){await ct(e,r.turnId,[{seq:0,kind:"error",error:"no_local_credentials"}]).catch(()=>{});return}try{let l=await Mh({creds:a,model:e.model,payload:r.payload,onDelta:c=>i.push(c),signal:o.signal});i.close(),n||await ct(e,r.turnId,[{seq:t++,kind:"final",message:l}]),console.error(JSON.stringify({event:"chat_turn_done",turnId:r.turnId,model:e.model}))}catch(l){i.close(),n||await ct(e,r.turnId,[{seq:t++,kind:"error",error:l instanceof Error?l.message:String(l)}]).catch(()=>{}),console.error(JSON.stringify({event:"chat_turn_error",turnId:r.turnId,error:l instanceof Error?l.message:String(l)}))}}async function Xc(e,r){for(let n=0;n<e&&!r();n+=500)await new Promise(o=>setTimeout(o,Math.min(500,e-n)))}async function Fh(e){let r=await Hh();for(r||console.error(JSON.stringify({event:"chat_claim_loop_waiting",reason:!ee()||!v().agentOsId?.trim()?"machine_not_linked":"bridge_not_discovered (rollout off, discovery route missing/404, or API unreachable)",rediscoverMs:Wh}));!r&&!e.shouldStop();){if(!ee()||!v().agentOsId?.trim()||(await Xc(Wh,e.shouldStop),e.shouldStop()))return;r=await Hh()}if(!(!r||e.shouldStop())){for(console.error(JSON.stringify({event:"chat_claim_loop_start",bridgeUrl:r.bridgeUrl,agentOsId:r.agentOsId,boxId:r.boxId,model:r.model,useClaudeOauth:r.useClaudeOauth}));!e.shouldStop();)try{let t=await JE(r,e.shouldStop);if(t==="auth_error"){console.error(JSON.stringify({event:"chat_claim_auth_error"})),await Xc(jE,e.shouldStop);continue}t&&(t.payload?.kind==="command"?await qE(r,t):await zE(r,t))}catch(t){console.error(JSON.stringify({event:"chat_claim_error",error:t instanceof Error?t.message:String(t)})),await Xc(KE,e.shouldStop)}console.error(JSON.stringify({event:"chat_claim_loop_stop"}))}}var XE=6e4,QE=5*6e4,ZE=10,eP=250;async function Qc(e,r){let t=e;for(;t>0&&!r();){let n=Math.min(eP,t);await gr(n),t-=n}}async function vo(e){Zt();let r=String(N(String(e.run||""),"--run")),t=String(N(String(e.agentOsId||v().agentOsId||""),"--agent-os-id")),n=e.execute!==!1&&e.execute!=="false",o=Number(e.intervalMs)>0?Math.floor(Number(e.intervalMs)):XE,s=!1,i=0;process.on("SIGINT",()=>{s=!0}),process.on("SIGTERM",()=>{s=!0});let a=Fg(v());a.ok||(console.error(JSON.stringify({event:"daemon_start_blocked",runId:r,agentOsId:t,errors:a.errors})),process.exit(1)),console.error(JSON.stringify({event:"daemon_start",runId:r,agentOsId:t,execute:n,intervalMs:o,boxKind:a.box.boxKind,workerCapSource:a.workerCapSource,maxConcurrentWorkers:a.maxConcurrentWorkers}));let l=mr(),c=Fh({shouldStop:()=>s}).catch(d=>{console.error(JSON.stringify({event:"chat_claim_loop_crashed",error:d instanceof Error?d.message:String(d)}))}),u=!1;for(;!s;)try{jg({agentOsId:t,runId:r,instructionBundleVersion:vr()});let d=await os(e.secret?String(e.secret):void 0,t);if(!d.ok){u||(u=!0,console.error(JSON.stringify({event:"daemon_runner_credential_missing",agentOsId:t,reason:d.reason,remedy:`run \`kynver runner credential --agent-os-id ${t}\` (or \`kynver bootstrap\`); ticks resume automatically once the credential exists`}))),await Qc(o,()=>s);continue}u&&(u=!1,console.error(JSON.stringify({event:"daemon_runner_credential_recovered",agentOsId:t}))),await nc({agentOsId:t,baseUrl:Ga(e.baseUrl?String(e.baseUrl):void 0),secret:d.secret});let f=await zc({run:r,agentOsId:t,execute:n,...e});if(console.error(JSON.stringify({event:"daemon_tick",...f})),l.tickEnabled){let k=Ai(r);if(k&&!k.authorized)console.error(JSON.stringify({event:"daemon_cron_tick_skipped",reason:"mesh_cron_lease_not_authorized",holderBoxId:k.holderBoxId}));else{let h=await en({env:l,agentOsIdFilter:t});h.enabled&&(h.fired>0||h.errors>0||h.lockHeld)&&console.error(JSON.stringify({event:"daemon_cron_tick",...h}))}}f.idle?i++:i=0;let m=Math.floor(Yr("daemon.maxIdleStreak",ZE)),p=Math.floor(Yr("daemon.idleIntervalMs",QE)),g=i>=m?p:o;await Qc(g,()=>s)}catch(d){console.error(JSON.stringify({event:"daemon_tick_error",error:d.message})),await Qc(o,()=>s)}await c,console.error(JSON.stringify({event:"daemon_stop",runId:r,agentOsId:t}))}O();import{spawn as rP}from"node:child_process";w();var tP=15*6e4,$h=2*6e4,Kh=1e4,nP=5e3,oP=5*6e4,sP=30*6e4,jh=5e3;function iP(e,r=process.env){let t=typeof e=="string"?Number.parseInt(e,10):NaN;if(Number.isFinite(t)&&t>0)return t;let n=Number.parseInt(r.KYNVER_DAEMON_STALL_MS??"",10);return Number.isFinite(n)&&n>0?n:tP}function Oi(e,r=process.env){if(e.keeperChild===!0||e.keeperChild==="true"||e.noSupervise===!0||e.noSupervise==="true"||e.supervised==="false")return!1;let t=(r.KYNVER_DAEMON_SUPERVISED??"").trim().toLowerCase();return!(t==="0"||t==="false"||t==="no"||t==="off")}function aP(e,r=nP,t=oP){let n=Math.min(Math.max(e,1)-1,10);return Math.min(r*2**n,t)}function lP(e,r,t=sP){return r-e>=t}function ut(e,r={}){console.error(JSON.stringify({event:`daemon_keeper_${e}`,...r}))}function cP(e){let r=[];for(let t=0;t<e.length;t+=1){let n=e[t];if(!(n==="--supervised"||n==="--no-supervise"||n==="--keeper-child")){if(n==="--stall-ms"){t+1<e.length&&!e[t+1].startsWith("--")&&(t+=1);continue}n.startsWith("--stall-ms=")||n.startsWith("--supervised=")||r.push(n)}}return r.push("--keeper-child"),r}async function Ni(e,r=process.argv.slice(2)){let t=String(N(String(e.agentOsId||v().agentOsId||""),"--agent-os-id")),n=iP(e.stallMs),o=cP(r),s=process.argv[1],i=!1,a=null,l=0,c=u=>{i=!0,ut("stop",{signal:u}),a?.pid&&a.kill(u)};for(process.on("SIGINT",()=>c("SIGINT")),process.on("SIGTERM",()=>c("SIGTERM")),ut("start",{agentOsId:t,stallMs:n,childArgv:o});!i;){let u=Date.now(),d=!1,f=null,m=null;for(a=rP(process.execPath,[s,...o],{stdio:"inherit",env:process.env}),ut("child_spawned",{pid:a.pid??null}),a.on("exit",(k,h)=>{d=!0,f=k,m=h});!d&&!i&&(await gr(jh),!(d||i));){if(Date.now()-u<$h)continue;let k=Vg(t),h=k&&k.pid===a.pid?k:null;if(h&&Gg(h,n)){ut("stall_detected",{pid:a.pid??null,lastBeatAt:h.observedAt,stallMs:n}),a.kill("SIGTERM"),await gr(Kh),d||a.kill("SIGKILL");break}if(!h&&Date.now()-u>n+$h){ut("no_heartbeat_detected",{pid:a.pid??null,stallMs:n}),a.kill("SIGTERM"),await gr(Kh),d||a.kill("SIGKILL");break}}for(;!d&&!i;)await gr(jh);if(i)break;let p=Date.now();lP(u,p)&&(l=0),l+=1;let g=aP(l);ut("child_exited",{code:f,signal:m,uptimeMs:p-u,consecutiveFailures:l,respawnInMs:g}),await gr(g)}ut("stopped",{agentOsId:t})}L();import{existsSync as Mi}from"node:fs";async function Ti(e=mr()){let r=await lt(e.storePath).catch(()=>[]),t=await Pi(e.statePath).catch(()=>({version:1,jobs:{}})),n=!!(e.fireBaseUrl&&e.secret),o=xi(e),s="disabled";return o?s="kynver-cron-daemon":process.env.QSTASH_TOKEN?.trim()&&(s="qstash"),{primary:s,env:{storePath:e.storePath,statePath:e.statePath,tickEnabled:e.tickEnabled,fireBaseUrl:e.fireBaseUrl,missedRunPolicy:e.missedRunPolicy,maxCatchUpPerTick:e.maxCatchUpPerTick,maxRetries:e.maxRetries},jobCount:r.length,stateJobCount:Object.keys(t.jobs).length,credentialsReady:n,daemonPrimary:o}}import{homedir as fP}from"node:os";import gP from"node:path";import{existsSync as Vh,mkdirSync as uP,readFileSync as Gh,writeFileSync as dP}from"node:fs";import{homedir as pP}from"node:os";import Yh from"node:path";var Ar=Yh.join(pP(),".kynver",".env");function Zc(e){let r=new Map;for(let t of e.split(/\r?\n/)){let n=t.trim();if(!n||n.startsWith("#"))continue;let o=n.indexOf("=");if(o<=0)continue;let s=n.slice(0,o).trim(),i=n.slice(o+1).trim();(i.startsWith('"')&&i.endsWith('"')||i.startsWith("'")&&i.endsWith("'"))&&(i=i.slice(1,-1)),r.set(s,i)}return r}function mP(e,r=`# Managed by kynver cron install \u2014 safe to edit; re-run install to merge keys.
+`),n=!0)}let o={capturedAt:new Date(e.now??Date.now()).toISOString(),skipReason:e.skipReason,runId:e.indexed.runId,workerName:e.indexed.workerName,worktreePath:e.indexed.worktreePath,taskId:e.indexed.worker.taskId,agentOsId:e.indexed.worker.agentOsId,branch:e.indexed.worker.branch,completionBlocker:e.indexed.worker.completionBlocker,finalResult:e.status.finalResult,changedFiles:e.status.changedFiles,gitAncestry:e.status.gitAncestry,prUrl:e.status.prUrl??null,...n?{patchPath:t}:{}};return _g(Ii.join(r,"evidence.json"),`${JSON.stringify(o,null,2)}
+`),o}var Cx=new Set(["completion_blocked","dirty_worktree","pr_or_unmerged_commits","landing_blocked"]);function wx(e){return!Cx.has(e.skipReason)||yr(e.indexed,e.now)?!1:Pg({harnessRoot:e.harnessRoot,runId:e.indexed.runId,workerName:e.indexed.workerName})?!0:e.writeSalvageEvidence?(Ag({harnessRoot:e.harnessRoot,indexed:e.indexed,skipReason:e.skipReason,status:e.status,now:e.now}),!0):!1}function _x(e){let{indexed:r,includeOrphans:t,worktreesAgeMs:n,terminalWorktreesAgeMs:o}=e;return r?gr.has(r.run.status)||e.liveness&&Zc(r,e.liveness)||e.liveness&&ne(Xc(r,e.liveness))&&!yr(r)?o:n:t?o:n}function xx(e,r){if(e.harnessRoot?.trim())return Oi.resolve(e.harnessRoot);let t=r.worker.workerDir;if(!t)return null;let n=`${Oi.sep}runs${Oi.sep}`,o=t.indexOf(n);return o<0?null:t.slice(0,o+n.length-1)}function Ig(e){let{indexed:r,includeOrphans:t,worktreesAgeMs:n,ageMs:o,orphanSafety:s,worktreeRemovalGuard:i}=e,a=e.now??Date.now();if(!r)return t?s??null:"orphan_without_flag";let l=_x(e);if(n<=0&&!t&&l<=0)return"worktrees_disabled";if(l>0&&o<l)return"below_age_threshold";if(yr(r,a))return"active_worker";let c=Xc(r,e.liveness),u=xx(e,r),d=p=>u&&wx({indexed:r,harnessRoot:u,skipReason:p,status:c,now:a,writeSalvageEvidence:e.writeSalvageEvidence===!0})?null:p;if(wg(r,c)){let p=d("completion_blocked");if(p)return p}if(zc(r,e.liveness?.gitStatusCache)){let p=d("dirty_worktree");if(p)return p}let f=e.liveness?.gitRevCache?.countAheadOfMain(e.worktreePath);if(f!=null&&f>0){let p=d("pr_or_unmerged_commits");if(p)return p}if(Cg(r,e.liveness,a)||!ne(c))return"run_still_active";if(So(c)){let p=d("pr_or_unmerged_commits");if(p)return p}if(Ie(c.changedFiles).length>0){let p=d("dirty_worktree");if(p)return p}if(qr({finalResult:c.finalResult,changedFiles:c.changedFiles,gitAncestry:c.gitAncestry,prUrl:gt(c.finalResult)}).blocked){let p=d("landing_blocked");if(p)return p}if(i&&e.worktreePath){let p=i({worktreePath:e.worktreePath,indexed:!!r,runId:r?.runId,worker:r?.workerName});if(p)return p.detail?{reason:p.reason,detail:p.detail}:p.reason}return null}function eu(e){let{indexed:r,nodeModulesAgeMs:t,ageMs:n,worktreePath:o,activeWorktreePaths:s,diskPressure:i}=e;return!i&&n<t?"below_age_threshold":s.has(Oi.resolve(o))||r&&yr(r)?"active_worker":r&&zc(r,e.gitStatusCache)?"dirty_worktree":null}function Og(e){return eu(e)}var wo=216e5,_o=6048e5,Ni=216e5,Ti=36e5,Di=120;var Ng=new Set(["active_worker","run_still_active","completion_blocked","landing_blocked"]);function Tg(e,r){let t=[],n=new Set,o=(s,i,a)=>{let l=`${s}\0${i}`;n.has(l)||t.length>=24||(n.add(l),t.push({path:s,reason:i,...a?{detail:a}:{}}))};for(let s of r)Ng.has(s.reason)&&o(s.path,s.reason,s.detail);for(let s of e)!s.skipped||!s.skipReason||Ng.has(s.skipReason)&&o(s.path,s.skipReason);return t}import{existsSync as Wg,readdirSync as Lg,statSync as Ax}from"node:fs";import Bg from"node:path";W();Ce();import Dg from"node:path";C();function Px(e,r){return Ai(e,r)}function Mg(e,r=Date.now()){let t=new Set,n=new Set;for(let o of e){for(let s of cs(o)){let i=!1;for(let a of Object.keys(s.workers||{})){let l=_(Dg.join(Mn(o,s.id),"workers",R(a),"worker.json"),void 0);if(!l?.worktreePath)continue;let c=Dg.resolve(l.worktreePath);Px(l,r)&&(i=!0,t.add(c))}i&&n.add(`${o}\0${s.id}`)}for(let s of Fc(o))n.add(s)}return{activeWorktreePaths:t,liveRunKeys:n}}function Ug(e,r,t,n){return t?n.has(`${r}\0${t}`):!1}C();function Ix(e,r){try{let t=Ax(e).mtimeMs;return Math.max(0,r-t)}catch{return 0}}function Ox(e,r){let t=Bg.join(e,"runs",r,"run.json");return Wg(t)?_(t,null):null}function Hg(e){try{return Lg(e).length===0}catch{return!1}}function Fg(e){let{harnessRoot:r,runId:t,runPath:n,ageMs:o,runDirectoriesAgeMs:s,activeGuards:i}=e;if(Ug(n,r,t,i.liveRunKeys)||!Hg(n))return"run_still_active";let a=Ox(r,t);return a&&!gr.has(a.status)&&!pt(a)?"run_still_active":s>0&&o<s?"below_age_threshold":null}function $g(e){if(!Wg(e.worktreesDir))return[];let r=[],t;try{t=Lg(e.worktreesDir,{withFileTypes:!0})}catch{return[]}for(let n of t){if(!n.isDirectory())continue;let o=n.name;if(e.runIdFilter&&o!==e.runIdFilter)continue;let s=Bg.join(e.worktreesDir,o);Hg(s)&&r.push({kind:"remove_run_directory",path:s,bytes:null,harnessRoot:e.harnessRoot,runId:o,ageMs:Ix(s,e.now)})}return r}Ee();import{existsSync as tu,rmSync as Qg}from"node:fs";import{existsSync as Mx,rmSync as Ux}from"node:fs";Ce();import{lstatSync as Nx,readdirSync as Tx}from"node:fs";function Kg(e){try{let r=Nx(e),t=typeof process.getuid=="function"?process.getuid():null,n=typeof process.getgid=="function"?process.getgid():null,o=t!==null&&(r.uid!==t||n!==null&&r.gid!==n);return{uid:r.uid,gid:r.gid,foreign:o}}catch{return null}}function jg(e,r=32){let t=Kg(e);if(!t)return!1;if(t.foreign)return!0;try{let n=Tx(e),o=0;for(let s of n){if(o>=r)break;let i=`${e.replace(/\/$/,"")}/${s}`,a=Kg(i);if(o+=1,a?.foreign)return!0}}catch{}return!1}import{spawnSync as Dx}from"node:child_process";import Yg from"node:path";import Oe from"node:path";function Vg(e,r,t,n){let o=Oe.resolve(e),s=`${Oe.sep}${n}`,i=o.endsWith(s)?o:null;if(!i)return"path_outside_harness";let a=Oe.relative(t,i);if(a.startsWith("..")||Oe.isAbsolute(a))return"path_outside_harness";let l=a.split(Oe.sep);return l.length<3||l[l.length-1]!==n||!o.startsWith(Oe.resolve(r))?"path_outside_harness":null}function Mi(e,r,t){return Vg(e,r,t,"node_modules")}function Ui(e,r,t){return Vg(e,r,t,".next")}function Wi(e,r,t){let n=Oe.resolve(e),o=Oe.relative(t,n);return o.startsWith("..")||Oe.isAbsolute(o)||o.split(Oe.sep).length<3||!n.startsWith(Oe.resolve(r))?"path_outside_harness":null}function Gg(e,r,t){let n=Oe.resolve(e);return Mi(n,r,t)===null||Ui(n,r,t)===null||Wi(n,r,t)===null}function qg(){let e=(process.env.KYNVER_CLEANUP_PRIVILEGED??"auto").trim().toLowerCase();return e==="0"||e==="false"||e==="off"||e==="no"?"off":e==="1"||e==="true"||e==="force"||e==="yes"?"force":"auto"}function Jg(e){let r=Dx("sudo",["-n",...e],{encoding:"utf8",stdio:["ignore","pipe","pipe"]});return{ok:r.status===0,stderr:`${r.stderr??""}${r.stdout??""}`.trim()}}function zg(e,r,t){if(!Gg(e,r,t))return{ok:!1,error:"path is not an allowed harness generated cache"};let n=typeof process.getuid=="function"?process.getuid():null,o=typeof process.getgid=="function"?process.getgid():null;if(n===null||o===null)return{ok:!1,error:"privileged reclaim requires POSIX uid/gid"};let s=Jg(["chown","-R",`${n}:${o}`,Yg.resolve(e)]);if(s.ok)return{ok:!0,method:"chown_then_rm"};let i=Jg(["rm","-rf",Yg.resolve(e)]);return i.ok?{ok:!0,method:"sudo_rm"}:{ok:!1,error:s.stderr||i.stderr||"sudo -n failed (password required or not permitted)"}}var ru="Root-owned harness caches require operator reclaim: configure passwordless sudo for chown/rm under ~/.kynver/harness/worktrees, or run `node scripts/reclaim-harness-root-owned-cache.mjs --execute` as the harness owner with sudo available. See docs/runbooks/harness-root-owned-cache-reclaim.md.";function Wx(e){let r=e?.code;return r==="EACCES"||r==="EPERM"}function Xg(e,r,t={}){if(!Mx(e.path))return{executed:!1,skipped:!0,skipReason:"missing_worktree"};if(!r)return{executed:!1,skipped:!0,skipReason:"dry_run"};let n=e.harnessRoot,o=n?cr(n):null,i=e.bytes??kr(e.path)??void 0,a=t.removePath??Ux,l=t.hasForeignOwnedEntry??jg;try{return a(e.path,{recursive:!0,force:!0}),{executed:!0,skipped:!1,bytes:i}}catch(c){if(!Wx(c)||!n||!o)return{executed:!1,skipped:!0,skipReason:"remove_failed",error:c.message};let u=l(e.path),d=qg();if(!(d==="force"||d==="auto"&&u))return u?{executed:!1,skipped:!0,skipReason:"foreign_owner",error:`${c.message}; ${ru}`}:{executed:!1,skipped:!0,skipReason:"remove_failed",error:c.message};let m=zg(e.path,n,o);if(m.ok&&m.method==="sudo_rm")return{executed:!0,skipped:!1,bytes:i,privilegedReclaim:!0};if(m.ok)try{return a(e.path,{recursive:!0,force:!0}),{executed:!0,skipped:!1,bytes:i,privilegedReclaim:!0}}catch(p){return{executed:!1,skipped:!0,skipReason:"foreign_owner",error:`${p.message}; privileged chown succeeded but rm still failed`}}return{executed:!1,skipped:!0,skipReason:"foreign_owner",error:`${c.message}; privileged reclaim failed: ${m.error}; ${ru}`}}}function nu(e){let r=e.harnessRoot;return!r||!Wc(e.path,r)?null:{...e,executed:!1,skipped:!0,skipReason:"run_metadata_protected"}}function ou(e,r){let t=nu(e);if(t)return t;let n=Xg(e,r);return{...e,bytes:n.bytes??e.bytes,executed:n.executed,skipped:n.skipped,skipReason:n.skipReason,error:n.error}}function Zg(e,r){return ou(e,r)}function eh(e,r){return ou(e,r)}function rh(e,r){return ou(e,r)}function th(e,r){let t=nu(e);if(t)return t;if(!tu(e.path))return{...e,executed:!1,skipped:!0,skipReason:"missing_worktree"};if(!r)return{...e,executed:!1,skipped:!0,skipReason:"dry_run"};try{let n=e.bytes??kr(e.path);return Qg(e.path,{recursive:!0,force:!0}),{...e,bytes:n,executed:!0,skipped:!1}}catch(n){return{...e,executed:!1,skipped:!0,skipReason:"remove_failed",error:n.message}}}function nh(e,r){let t=nu(e);if(t)return t;if(!tu(e.path))return{...e,executed:!1,skipped:!0,skipReason:"missing_worktree"};if(!r)return{...e,executed:!1,skipped:!0,skipReason:"dry_run"};let n=e.repo;try{let o=e.bytes??kr(e.path);return n&&pe(n,["worktree","remove","--force",e.path],{allowFailure:!0}),tu(e.path)&&Qg(e.path,{recursive:!0,force:!0}),{...e,bytes:o,executed:!0,skipped:!1}}catch(o){return{...e,executed:!1,skipped:!0,skipReason:"remove_failed",error:o.message}}}import{existsSync as Li,readdirSync as Bi,statSync as Lx}from"node:fs";import er from"node:path";function su(e,r){try{let t=Lx(e).mtimeMs;return Math.max(0,r-t)}catch{return 0}}function sh(e,r){let t=er.relative(r,e);return t===""||!t.startsWith("..")&&!er.isAbsolute(t)}function oh(e,r,t,n){let o=[];for(let s of Pi){if(s===".next")continue;let i=er.join(e,s);if(!Li(i))continue;let a=er.resolve(i);t.has(a)||sh(a,r.harnessRoot)&&(t.add(a),o.push({kind:"remove_build_cache",path:a,bytes:null,runId:n.runId,worker:n.worker,repo:n.repo,ageMs:su(a,r.now)}))}return o}function ih(e){let r=[],t=new Set;for(let n of e.index.values())e.runIdFilter&&n.runId!==e.runIdFilter||r.push(...oh(n.worktreePath,e,t,{runId:n.runId,worker:n.workerName,repo:n.run.repo}));if(!e.includeOrphans||!Li(e.worktreesDir))return r;for(let n of Bi(e.worktreesDir,{withFileTypes:!0})){if(!n.isDirectory())continue;let o=er.join(e.worktreesDir,n.name);for(let s of Bi(o,{withFileTypes:!0})){if(!s.isDirectory())continue;let i=er.join(o,s.name);r.push(...oh(i,e,t,{runId:n.name,worker:s.name}))}}return r}function ah(e){let r=e.worktreesAgeMs>0||e.includeOrphans,t=e.includeOrphans;if(!r&&!t)return[];let n=[],o=new Set;if(r)for(let i of e.index.values()){if(e.runIdFilter&&i.runId!==e.runIdFilter)continue;let a=i.worktreePath;Li(a)&&(o.has(a)||(o.add(a),n.push({kind:"remove_worktree",path:a,bytes:null,runId:i.runId,worker:i.workerName,repo:i.run.repo,ageMs:su(a,e.now)})))}if(!t||!Li(e.worktreesDir))return n;let s=new Set;for(let i of e.index.values())s.add(er.resolve(i.worktreePath));for(let i of Bi(e.worktreesDir,{withFileTypes:!0})){if(!i.isDirectory()||e.runIdFilter&&i.name!==e.runIdFilter)continue;let a=er.join(e.worktreesDir,i.name),l;try{l=Bi(a,{withFileTypes:!0})}catch{continue}for(let c of l){if(!c.isDirectory())continue;let u=er.resolve(er.join(a,c.name));o.has(u)||s.has(u)||sh(u,e.harnessRoot)&&(o.add(u),n.push({kind:"remove_worktree",path:u,bytes:null,runId:i.name,worker:c.name,ageMs:su(u,e.now)}))}}return n}import{existsSync as uh,readdirSync as lh,statSync as Bx}from"node:fs";import un from"node:path";var Hx=[{dirName:"node_modules",kind:"remove_node_modules"},{dirName:".next",kind:"remove_next_cache"}];function Fx(e,r){try{let t=Bx(e).mtimeMs;return Math.max(0,r-t)}catch{return 0}}function $x(e,r){let t=un.relative(r,e);return t===""||!t.startsWith("..")&&!un.isAbsolute(t)}function Kx(e,r,t,n,o,s){if(!uh(n))return;let i=un.resolve(n);r.has(i)||$x(i,t.harnessRoot)&&(r.add(i),e.push({kind:o,path:i,bytes:null,harnessRoot:t.harnessRoot,runId:s.runId,worker:s.worker,repo:s.repo,ageMs:Fx(i,t.now)}))}function ch(e,r,t,n,o){for(let s of Hx)Kx(e,r,t,un.join(n,s.dirName),s.kind,o)}function dh(e){let r=[],t=new Set;for(let n of e.index.values())e.runIdFilter&&n.runId!==e.runIdFilter||ch(r,t,e,n.worktreePath,{runId:n.runId,worker:n.workerName,repo:n.run.repo});if(!e.includeOrphans||!uh(e.worktreesDir))return r;for(let n of lh(e.worktreesDir,{withFileTypes:!0})){if(!n.isDirectory()||e.runIdFilter&&n.name!==e.runIdFilter)continue;let o=un.join(e.worktreesDir,n.name),s;try{s=lh(o,{withFileTypes:!0})}catch{continue}for(let i of s){if(!i.isDirectory())continue;let a=un.join(o,i.name);ch(r,t,e,a,{runId:n.name,worker:i.name})}}return r}Ee();import{existsSync as ph,statSync as jx}from"node:fs";import rr from"node:path";function Vx(e,r){try{let t=jx(e).mtimeMs;return Math.max(0,r-t)}catch{return 0}}function Gx(e){let r=[],t=null;for(let n of e.split(`
+`)){if(!n.trim())continue;let[o,...s]=n.split(" "),i=s.join(" ");if(o==="worktree"){t&&r.push(t),t={path:i};continue}t&&(o==="branch"&&(t.branch=i),o==="HEAD"&&(t.head=i),o==="bare"&&(t.bare=!0))}return t&&r.push(t),r}function Yx(e,r){let t=rr.relative(rr.resolve(r),rr.resolve(e));return t!==""&&!t.startsWith("..")&&!rr.isAbsolute(t)}var Jx=200;function mh(e){if(!e.includeOrphans||!ph(e.worktreesDir))return[];let r=new Set;for(let s of e.index.values())s.run.repo&&r.add(rr.resolve(s.run.repo));let t=new Set;for(let s of e.index.values())t.add(rr.resolve(s.worktreePath));let n=[],o=new Set;for(let s of r){let i=0,a;try{a=pe(s,["worktree","list","--porcelain"],{allowFailure:!0})}catch{continue}let l=Gx(a);for(let c of l){if(i>=Jx)break;let u=rr.resolve(c.path);if(u===rr.resolve(s)||!Yx(u,e.worktreesDir)||t.has(u)||o.has(u)||!ph(u))continue;let f=rr.relative(e.worktreesDir,u).split(rr.sep),m=f[0],p=f[1]??"unknown";o.add(u),i+=1,n.push({kind:"remove_worktree",path:u,bytes:null,runId:m,worker:p,repo:s,ageMs:Vx(u,e.now)})}}return n}W();C();import xo from"node:path";function fh(e,r){let t=xo.resolve(r),n=new Map;for(let[o,s]of e){let i=s.harnessRoot?xo.resolve(s.harnessRoot):null;i&&i!==t||n.set(o,s)}return n}function gh(e){let r=new Map;for(let t of cs(e))for(let n of Object.keys(t.workers||{})){let o=xo.join(Mn(e,t.id),"workers",R(n),"worker.json"),s=_(o,void 0);s?.worktreePath&&r.set(xo.resolve(s.worktreePath),{harnessRoot:e,worktreePath:xo.resolve(s.worktreePath),runId:t.id,workerName:n,run:t,worker:s})}return r}function Eo(e){let r=process.env[e];return r==="1"||r==="true"||r==="yes"}function ht(e,r){let t=process.env[e];if(!t)return r;let n=Number(t);return Number.isFinite(n)&&n>=0?n:r}function iu(e={}){let r=e.execute===!0||e.execute!==!1&&Eo("KYNVER_CLEANUP_EXECUTE"),t=e.finalizeStaleRuns!==!1&&!Eo("KYNVER_CLEANUP_SKIP_FINALIZE"),n=e.nodeModulesAgeMs??ht("KYNVER_CLEANUP_NODE_MODULES_AGE_MS",216e5),o=e.scanDependencyCaches??(e.nodeModulesAgeMs!==void 0||process.env.KYNVER_CLEANUP_NODE_MODULES_AGE_MS!=null),s=e.worktreesAgeMs??ht("KYNVER_CLEANUP_WORKTREES_AGE_MS",0),i=e.terminalWorktreesAgeMs??ht("KYNVER_CLEANUP_TERMINAL_WORKTREES_AGE_MS",216e5),a=e.runDirectoriesAgeMs??ht("KYNVER_CLEANUP_RUN_DIRECTORIES_AGE_MS",36e5),l=e.maxActionsPerSweep??ht("KYNVER_CLEANUP_MAX_ACTIONS_PER_SWEEP",120),c=e.includeOrphans===!0||Eo("KYNVER_CLEANUP_INCLUDE_ORPHANS"),d=Eo("KYNVER_CLEANUP_SCOPE_ALL")||process.env.KYNVER_CLEANUP_SCOPE==="all"?e.runIdFilter:e.runIdFilter??(process.env.KYNVER_CLEANUP_RUN_ID||void 0),f=e.accountBytes!==!1&&!Eo("KYNVER_CLEANUP_SKIP_BYTE_ACCOUNTING"),m=ht("KYNVER_CLEANUP_STORAGE_ENTRY_CAP",2e3),p=e.storagePerRunEntryCap!==void 0?e.storagePerRunEntryCap:f&&m>0?m:null,g=ht("KYNVER_CLEANUP_BYTE_ENTRY_CAP",2e3),k=e.byteAccountingEntryCap??(Number.isFinite(g)&&g>0?Math.floor(g):2e3);return{execute:r,finalizeStaleRuns:t,scanDependencyCaches:o,nodeModulesAgeMs:n,worktreesAgeMs:s>0?s:0,terminalWorktreesAgeMs:i>=0?i:0,runDirectoriesAgeMs:a>=0?a:0,maxActionsPerSweep:Number.isFinite(l)&&l>0?Math.floor(l):120,includeOrphans:c,runIdFilter:d?String(d):void 0,accountBytes:f,storagePerRunEntryCap:p,byteAccountingEntryCap:k}}function hh(e){let r=process.env.KYNVER_CLEANUP_SCOPE==="all",t=Number(process.env.KYNVER_CLEANUP_WORKTREES_AGE_MS),n=r?Number.isFinite(t)&&t>0?t:6048e5:Number.isFinite(t)&&t>0?t:0;return iu({runIdFilter:r?void 0:e,worktreesAgeMs:n,terminalWorktreesAgeMs:r?216e5:void 0,runDirectoriesAgeMs:r?36e5:void 0,includeOrphans:r?!0:void 0,finalizeStaleRuns:!0,accountBytes:!0,scanDependencyCaches:!0})}Ee();import{existsSync as kh}from"node:fs";import au from"node:path";C();var qx=1800*1e3;function lu(e){let r=e.now??Date.now(),t=e.heartbeatFreshMs??qx;if(!kh(e.worktreePath))return null;if(e.runId&&e.workerName){let c=au.join(e.harnessRoot,"runs",e.runId,"workers",e.workerName),u=_(au.join(c,"worker.json"),void 0);if(u&&Qc(u,r,t))return"active_worker"}let n=au.join(e.worktreePath,".git");if(!kh(n))return null;let o=re(e.worktreePath,["status","--porcelain"]);if(o.status!==0)return"pr_or_unmerged_commits";let s=o.stdout.split(`
+`).map(c=>c.trim()).filter(c=>c.length>0);if(Ie(s).length>0)return"dirty_worktree";let i=re(e.worktreePath,["rev-list","--count","@{u}..HEAD"]);if(i.status===0){let c=Number(i.stdout.trim());if(Number.isFinite(c)&&c>0)return"pr_or_unmerged_commits"}let a=re(e.worktreePath,["rev-list","--count","origin/main..HEAD"]);if(a.status!==0)return i.status!==0?"pr_or_unmerged_commits":null;let l=Number(a.stdout.trim());return Number.isFinite(l)&&l>0?"pr_or_unmerged_commits":null}Ce();import{existsSync as zx}from"node:fs";import{homedir as Xx}from"node:os";import yh from"node:path";var Qx=["/var/tmp/kynver-harness",yh.join(Xx(),".openclaw","harness")];function cu(e,r,t){if(!t?.trim())return;let n=ie(t.trim());e.has(n)||(e.add(n),r.push(n))}function Zx(e){return e.scanWellKnown!=null?e.scanWellKnown:process.env.VITEST==="true"?!1:process.env.KYNVER_CLEANUP_SCAN_WELL_KNOWN!=="0"&&!["0","false","no"].includes((process.env.KYNVER_CLEANUP_SCAN_WELL_KNOWN??"").toLowerCase())}function Rh(e={}){let r=new Set,t=[];cu(r,t,e.harnessRoot??me());let n=process.env.KYNVER_CLEANUP_EXTRA_ROOTS?.split(",").map(o=>o.trim()).filter(Boolean);for(let o of n??[])cu(r,t,o);if(Zx(e))for(let o of Qx){let s=yh.resolve(o);!r.has(s)&&zx(s)&&cu(r,t,s)}return t}Ut();function eE(e){let r=process.env[e];return r==="1"||r==="true"||r==="yes"}function rE(e,r){let t=process.env[e];if(!t)return r;let n=Number(t);return Number.isFinite(n)?n:r}function bh(e={}){let r=e.diskPath?.trim()||process.env.KYNVER_DISK_GUARD_PATH?.trim()||"/",t=rE("KYNVER_DISK_GUARD_MAX_USED_PERCENT",75),n=We({...e,diskPath:r,diskMaxUsedPercent:e.diskMaxUsedPercent??t}),o=!n.ok||n.usedPercent>=t,s=process.env.KYNVER_CLEANUP_DISK_PRESSURE_FORCE?.trim().toLowerCase();return s==="none"||s==="off"||s==="0"?o=!1:(s==="pressured"||s==="on"||s==="1")&&(o=!0),{diskGate:n,pressured:o,maxUsedPercent:t}}function vh(e,r){if(!r.pressured)return e;let t=e.execute||!eE("KYNVER_CLEANUP_DRY_RUN_ON_PRESSURE");return{...e,execute:t,nodeModulesAgeMs:0,runIdFilter:void 0,includeOrphans:!0,terminalWorktreesAgeMs:0,runDirectoriesAgeMs:0,worktreesAgeMs:e.worktreesAgeMs>0?e.worktreesAgeMs:6048e5,diskPressure:!0,diskGate:r.diskGate}}Mt();function Ne(e,r){if(process.env.KYNVER_CLEANUP_QUIET==="1")return;let t=r?`: ${r}`:"";console.error(`[kynver cleanup] ${e}${t}`)}Ee();var Hi=class{aheadOfMain=new Map;countAheadOfMain(r,t="origin/main"){let n=`${r}\0${t}`;if(this.aheadOfMain.has(n))return this.aheadOfMain.get(n)??null;let o=re(r,["rev-list","--count",`${t}..HEAD`]);if(o.status!==0)return this.aheadOfMain.set(n,null),null;let s=Number(o.stdout.trim()),i=Number.isFinite(s)?s:null;return this.aheadOfMain.set(n,i),i}};import{spawnSync as tE}from"node:child_process";import{existsSync as nE}from"node:fs";import oE from"node:path";var sE=5e3;function iE(e,r){if(!nE(oE.join(e,".git")))return{status:null,stdout:"",stderr:"",error:"not_a_git_repo"};try{let t=tE("git",r,{cwd:e,encoding:"utf8",timeout:sE}),n=t.error?.message?.includes("ETIMEDOUT")===!0;return{status:n?null:t.status,stdout:t.stdout||"",stderr:t.stderr||"",error:n?"git_timeout":t.error?t.error.message:null}}catch(t){return{status:null,stdout:"",stderr:"",error:t.message}}}function Sh(e){let r=iE(e,["status","--short"]);return r.error==="not_a_git_repo"?[]:r.error==="git_timeout"||r.status!==0?null:r.stdout.split(`
+`).map(t=>t.trim()).filter(Boolean)}var Fi=class{cache=new Map;porcelain(r){let t=r,n=this.cache.get(t);if(n!==void 0)return n;let o=Sh(t)??[];return this.cache.set(t,o),o}};var $i=class{cache=new Map;derive(r){let t=this.cache.get(r.id);if(t!==void 0)return t;let n=pt(r);return this.cache.set(r.id,n),n}};function aE(e){let r={};for(let t of e)r[t.kind]=(r[t.kind]??0)+1;return r}function Ch(e,r={}){let t=r.maxSampleActions??12,n=r.maxSampleSkips??8;return{harnessRoot:e.harnessRoot,scanRoots:e.scanRoots,dryRun:e.dryRun,execute:e.execute,scannedAt:e.scannedAt,finalizedRuns:e.finalizedRuns.length,actionCount:e.actions.length,actionKinds:aE(e.actions),totals:e.totals,...e.storage?{storage:e.storage}:{},...e.preservedLivePaths?.length?{preservedLivePaths:e.preservedLivePaths}:{},...e.removedRunDirectories!=null?{removedRunDirectories:e.removedRunDirectories}:{},sampleActions:e.actions.slice(0,t).map(o=>({kind:o.kind,path:o.path,...o.skipReason?{skipReason:o.skipReason}:{},...o.bytes!=null?{bytes:o.bytes}:{},...o.runId?{runId:o.runId}:{},...o.worker?{worker:o.worker}:{}})),sampleSkips:e.skips.slice(0,n)}}function lE(e={}){let r=e.harnessRoot?ie(e.harnessRoot):me(),t=Rh({harnessRoot:r}),n=e.now??Date.now();return{harnessRoot:r,scanRoots:t,now:n}}function cE(e){return typeof e=="string"?{reason:e}:e}function dn(e,r,t,n){e.push({path:r,reason:t,...n?{detail:n}:{}})}function Ki(e,r,t){return!r||e.bytes!=null?e:{...e,bytes:kr(e.path,t)}}function wh(e,r){let t={};for(let n of r)t[n.reason]=(t[n.reason]??0)+1;for(let n of e)n.skipReason&&(t[n.skipReason]=(t[n.skipReason]??0)+1);return t}function uE(e,r){return e.kind==="remove_next_cache"?eh(e,r):Zg(e,r)}function dE(e,r,t){return e.kind==="remove_next_cache"?Ui(e.path,r,t):Mi(e.path,r,t)}function pE(e){let r=new Map;for(let t of e)for(let[n,o]of gh(t))r.set(n,o);return r}function _h(e,r){return e.runId&&e.worker?Te.join(r,e.runId,e.worker):Te.resolve(e.path,"..")}function ji(e={}){let r=iu(e),t=bh();r=vh(r,t);let n=lE(e);Ne("scan",`${n.scanRoots.length} harness root(s)`);let o=Mg(n.scanRoots,n.now),s=r.finalizeStaleRuns?bo().map(w=>({runId:w.runId,from:w.from,to:w.to})):[];s.length>0&&Ne("finalize",`${s.length} stale run(s) marked terminal`),Ne("index","building worktree index");let i=pE(n.scanRoots);Ne("index",`${i.size} indexed worktree(s)`);let a={runTerminalCache:new $i,gitStatusCache:new Fi,gitRevCache:new Hi},l=[],c=[],u=new Set,d=r.maxActionsPerSweep,f=()=>c.length>=d;for(let w of n.scanRoots){if(f())break;Ne("root",w);let le=Te.join(w,"worktrees"),Z=fh(i,w),nr={harnessRoot:w,worktreesDir:le,nodeModulesAgeMs:r.nodeModulesAgeMs,worktreesAgeMs:r.worktreesAgeMs,includeOrphans:r.includeOrphans,runIdFilter:r.runIdFilter,index:Z,now:n.now},Et=r.scanDependencyCaches?dh(nr):[];Ne("dependency",r.scanDependencyCaches?`${Et.length} cache candidate(s) at ${w}`:"skipped (worktree-only sweep)");let je=0;for(let Re of Et){if(f())break;je+=1,je%50===0&&Ne("dependency",`${je}/${Et.length} evaluated`);let ee=Te.resolve(Re.path);if(u.has(ee))continue;u.add(ee);let U={...Re,path:ee},be=dE(U,w,le);if(be){dn(l,U.path,be),c.push({...U,executed:!1,skipped:!0,skipReason:be});continue}let ve=_h(U,le),or=Z.get(Te.resolve(ve))??null,ce=eu({indexed:or,includeOrphans:!0,nodeModulesAgeMs:r.nodeModulesAgeMs,ageMs:U.ageMs,worktreePath:ve,activeWorktreePaths:o.activeWorktreePaths,diskPressure:r.diskPressure,gitStatusCache:a.gitStatusCache});if(ce){dn(l,U.path,ce),c.push({...U,executed:!1,skipped:!0,skipReason:ce});continue}c.push(uE(Ki(U,r.accountBytes,r.byteAccountingEntryCap),r.execute))}if(r.scanDependencyCaches)for(let Re of ih(nr)){if(f())break;let ee=Te.resolve(Re.path);if(u.has(ee))continue;u.add(ee);let U={...Re,path:ee},be=Wi(U.path,w,le);if(be){dn(l,U.path,be),c.push({...U,executed:!1,skipped:!0,skipReason:be});continue}let ve=_h(U,le),or=Z.get(Te.resolve(ve))??null,ce=Og({indexed:or,includeOrphans:!0,nodeModulesAgeMs:r.nodeModulesAgeMs,ageMs:U.ageMs,worktreePath:ve,activeWorktreePaths:o.activeWorktreePaths,diskPressure:r.diskPressure,gitStatusCache:a.gitStatusCache});if(ce){dn(l,U.path,ce),c.push({...U,executed:!1,skipped:!0,skipReason:ce});continue}c.push(rh(Ki(U,r.accountBytes,r.byteAccountingEntryCap),r.execute))}let Lr=[...ah(nr),...mh(nr)];Ne("worktrees",`${Lr.length} candidate(s) at ${w}`);let br=new Set,xe=0;for(let Re of Lr){if(f())break;xe+=1,xe%50===0&&Ne("worktrees",`${xe}/${Lr.length} evaluated`);let ee=Te.resolve(Re.path);if(br.has(ee))continue;br.add(ee);let U={...Re,path:ee},be=Z.get(Te.resolve(U.path))??null,ve=be?null:lu({worktreePath:U.path,harnessRoot:w,runId:U.runId,workerName:U.worker,now:n.now}),or=Ig({indexed:be,worktreePath:Te.resolve(U.path),includeOrphans:r.includeOrphans,worktreesAgeMs:r.worktreesAgeMs,terminalWorktreesAgeMs:r.terminalWorktreesAgeMs,ageMs:U.ageMs,orphanSafety:ve,worktreeRemovalGuard:e.worktreeRemovalGuard,liveness:a,now:n.now,harnessRoot:w,writeSalvageEvidence:r.execute});if(or){let{reason:ce,detail:vr}=cE(or);dn(l,U.path,ce,vr),c.push({...U,executed:!1,skipped:!0,skipReason:ce});continue}c.push(nh(Ki(U,r.accountBytes,r.byteAccountingEntryCap),r.execute))}if(!f()&&r.runDirectoriesAgeMs>=0)for(let Re of $g({harnessRoot:w,worktreesDir:le,runDirectoriesAgeMs:r.runDirectoriesAgeMs,runIdFilter:r.runIdFilter,activeGuards:o,now:n.now})){if(f())break;let ee=Te.resolve(Re.path);if(u.has(ee))continue;u.add(ee);let U={...Re,path:ee},be=U.runId??Te.basename(ee),ve=Fg({harnessRoot:w,runId:be,runPath:ee,ageMs:U.ageMs,runDirectoriesAgeMs:r.runDirectoriesAgeMs,activeGuards:o});if(ve){dn(l,U.path,ve),c.push({...U,executed:!1,skipped:!0,skipReason:ve});continue}c.push(th(Ki(U,r.accountBytes,r.byteAccountingEntryCap),r.execute))}}let m=0,p=0,g=0,k=0,h=0,b=0;for(let w of c)w.bytes&&(m+=w.bytes),!w.skipped&&!w.executed&&w.bytes&&(g+=w.bytes),w.executed?(h+=1,k+=w.bytes??0,w.kind==="remove_run_directory"&&(p+=1)):w.skipped&&(b+=1,w.skipReason==="dry_run"&&w.bytes&&(g+=w.bytes));let x=r.accountBytes?Jc({harnessRoot:n.harnessRoot,now:n.now,perRunEntryCap:r.storagePerRunEntryCap}):void 0,M=lr(),P=r.execute&&Rc(M),T=P?fo({execute:!0}):null,K=M?{observed:!0,execute:P,dumpCount:M.dumpCount,totalBytes:M.totalBytes,removedCount:T?.removed.length??0,removedBytes:T?.removedBytes??0,executables:M.executables,path:M.path,reason:M.reason}:void 0;T&&T.removed.length>0&&(k+=T.removedBytes,h+=T.removed.length,Ne("wsl-crashes",`removed ${T.removed.length} dump(s), ${T.removedBytes} bytes`)),Ne("complete",`${c.length} action(s), ${b} skipped, ${h} removed`);let B=Tg(c,l),D=Ch({harnessRoot:n.harnessRoot,scanRoots:n.scanRoots,dryRun:!r.execute,execute:r.execute,nodeModulesAgeMs:r.nodeModulesAgeMs,worktreesAgeMs:r.worktreesAgeMs,includeOrphans:r.includeOrphans,diskPressure:r.diskPressure,diskGate:r.diskGate?{ok:r.diskGate.ok,path:r.diskGate.path,freeBytes:r.diskGate.freeBytes,usedPercent:r.diskGate.usedPercent,reason:r.diskGate.reason}:void 0,scannedAt:new Date(n.now).toISOString(),finalizedRuns:s,actions:c,skips:l,totals:{candidateBytes:m,reclaimableBytes:g,removedBytes:k,removedPaths:h,skippedPaths:b,skipReasons:wh(c,l)},...x?{storage:x}:{},...B.length>0?{preservedLivePaths:B}:{},...p>0?{removedRunDirectories:p}:{},...K?{wslCrashDumps:K}:{}});return{harnessRoot:n.harnessRoot,scanRoots:n.scanRoots,dryRun:!r.execute,execute:r.execute,nodeModulesAgeMs:r.nodeModulesAgeMs,worktreesAgeMs:r.worktreesAgeMs,includeOrphans:r.includeOrphans,diskPressure:r.diskPressure,diskGate:r.diskGate?{ok:r.diskGate.ok,path:r.diskGate.path,freeBytes:r.diskGate.freeBytes,usedPercent:r.diskGate.usedPercent,reason:r.diskGate.reason}:void 0,scannedAt:new Date(n.now).toISOString(),finalizedRuns:s,actions:c,skips:l,totals:{candidateBytes:m,reclaimableBytes:g,removedBytes:k,removedPaths:h,skippedPaths:b,skipReasons:wh(c,l)},...x?{storage:x}:{},...B.length>0?{preservedLivePaths:B}:{},...p>0?{removedRunDirectories:p}:{},...K?{wslCrashDumps:K}:{},compactSummary:D}}function uu(e){let r=hh(e);return ji({execute:r.execute,finalizeStaleRuns:r.finalizeStaleRuns,accountBytes:r.accountBytes,nodeModulesAgeMs:r.nodeModulesAgeMs,worktreesAgeMs:r.worktreesAgeMs,includeOrphans:r.includeOrphans,runIdFilter:r.runIdFilter})}function du(){return process.env.KYNVER_PIPELINE_CLEANUP!=="0"}I();import{mkdirSync as mR,realpathSync as fR}from"node:fs";import{fileURLToPath as yO}from"node:url";I();C();ul();import mE from"node:os";function fE(e){let r=(typeof e.apiBaseUrl=="string"?e.apiBaseUrl:void 0)||(typeof e.baseUrl=="string"?e.baseUrl:void 0)||process.env.KYNVER_API_URL||v().apiBaseUrl;return r?sr(String(r)):void 0}async function gE(e,r){let t=await fetch(`${e}/api/agent-os`,{headers:{Authorization:`Bearer ${r}`}});if(!t.ok)return null;let n=await t.json().catch(()=>null);if(!n?.primarySlug)return null;let o=n.items?.find(s=>s.slug===n.primarySlug);return o?.id&&o.slug?{id:o.id,slug:o.slug}:{id:"",slug:n.primarySlug}}async function Vi(e){let r=fE(e);r||(console.error("kynver bootstrap requires a Kynver URL \u2014 pass --api-base-url https://your-kynver-site or set KYNVER_API_URL."),process.exit(1)),oe()||(typeof e.apiKey=="string"?Yn(e.apiKey):(await cl({...e,apiBaseUrl:r})).ok||process.exit(1));let t=oe();t||(console.error("No API key after login \u2014 aborting."),process.exit(1));let n=await gE(r,t);n||(console.error("Could not resolve your AgentOS workspace from the account. Confirm this account has AgentOS access, then retry."),process.exit(1));let o={...e,apiBaseUrl:r,agentOsSlug:n.slug,...n.id?{agentOsId:n.id}:{},...typeof e.repo=="string"?{}:{discoverRepo:!0}};await _s(o),console.log(""),console.log(`  Bootstrap complete \u2014 ${mE.hostname()} is linked to workspace "${n.slug}".`),console.log("  Next: `kynver start` \u2014 brings the agent online and configures local Kynver Cron when needed."),console.log("  Persistent background service (Linux): `kynver cron install --install-systemd` after your first start."),console.log("  (Advanced: `kynver run create --repo /path/to/repo` + `kynver daemon --run <RUN_ID> --agent-os-id <AOS_ID> --execute`.)")}I();import WA from"node:os";I();ir();I();import hE from"node:path";import{homedir as kE}from"node:os";var pu=hE.join(kE(),".kynver","config.json");function Po(e){let r=v(),t=Si({...e,config:r});if(!t)return{ok:!1,remediated:!1,alreadyPersisted:!1,configPath:q(pu),resolved:null,reason:"No Kynver git checkout found. Clone the repo, cd into it, then run `kynver setup --repo /path/to/Kynver` (or export KYNVER_DEFAULT_REPO).",remediation:"Clone the Kynver monorepo, cd into it, then run `kynver config ensure-default-repo` (or `kynver setup --repo /path/to/Kynver`)."};if(t.persistedInConfig)return{ok:!0,remediated:!1,alreadyPersisted:!0,configPath:q(pu),resolved:on(t),config:Gt(r)};let n=Ci(t.repo,r),o=on({...t,persistedInConfig:!0,source:"config"});return{ok:!0,remediated:!0,alreadyPersisted:!1,configPath:q(pu),resolved:o,config:Gt(n),remediation:"defaultRepo persisted in ~/.kynver/config.json \u2014 `kynver run create` no longer requires --repo."}}function xh(e=!1){let r=Po();if(e){console.log(JSON.stringify(r,null,2)),r.ok||(process.exitCode=1);return}if(!r.ok){console.error(r.reason??"Could not resolve a Kynver git checkout."),r.remediation&&console.error(r.remediation),process.exitCode=1;return}if(r.alreadyPersisted){console.log(`defaultRepo already set (${r.resolved?.defaultRepo??"unknown"}) in ${r.configPath}`);return}console.log(`Persisted defaultRepo ${r.resolved?.defaultRepo??""} in ${r.configPath}. \`kynver run create\` can omit --repo.`)}function Eh(e){return e?e.persistedInConfig?{status:"pass"}:{status:"warn",remediation:"Run `kynver config ensure-default-repo` to persist defaultRepo in ~/.kynver/config.json (or `kynver doctor runtime-takeover --remediate-default-repo`)."}:{status:"warn",remediation:"Run `kynver config ensure-default-repo` from a Kynver checkout (or `kynver setup --repo /path/to/Kynver`)."}}I();Ue();bs();import yE from"node:os";function Ph(e,r){console.error(JSON.stringify({event:"daemon_identity",level:e,message:r}))}function Ah(e=v(),r=process.env){let t=Me(r,e),n=Rs({config:e,totalMemBytes:yE.totalmem(),env:r}),o=[...t.warnings],s=[];if(!e.boxKind?.trim()&&!r.KYNVER_BOX_KIND?.trim()&&o.push("boxKind is not persisted in ~/.kynver/config.json \u2014 run `kynver setup --box-kind forge|ghost` so Command Center attributes snapshots to the correct pool"),t.slugInferenceBlocked){let a=r.KYNVER_DAEMON_STRICT_IDENTITY==="1"||r.KYNVER_DAEMON_STRICT_IDENTITY==="true",l="ambiguous box identity: KYNVER_AGENT_OS_SLUG is set without KYNVER_BOX_KIND or config.boxKind; treating this host as forge";a?s.push(l):o.push(l)}let i=s.length===0;for(let a of o)Ph("warn",a);for(let a of s)Ph("error",a);return{ok:i,box:t,workerCapSource:n.workerCapSource,maxConcurrentWorkers:n.configuredMaxWorkers??n.autoCap,autoCap:n.autoCap,warnings:o,errors:s}}import{mkdirSync as RE,readFileSync as bE,renameSync as vE,writeFileSync as SE}from"node:fs";import{homedir as CE}from"node:os";import Ih from"node:path";function Oh(e){let r=e.replace(/[^A-Za-z0-9_-]/g,"_");return Ih.join(CE(),".kynver",`daemon-heartbeat-${r}.json`)}function Nh(e){try{let r=Oh(e.agentOsId);RE(Ih.dirname(r),{recursive:!0});let t={observedAt:(e.now??new Date).toISOString(),pid:process.pid,runId:e.runId,agentOsId:e.agentOsId,...e.instructionBundleVersion?{instructionBundleVersion:e.instructionBundleVersion}:{}},n=`${r}.tmp-${process.pid}`;SE(n,JSON.stringify(t),"utf8"),vE(n,r)}catch{}}function Th(e){try{let r=bE(Oh(e),"utf8"),t=JSON.parse(r);return typeof t?.observedAt!="string"?null:t}catch{return null}}function Dh(e,r,t=Date.now()){if(!e)return!1;let n=Date.parse(e.observedAt);return Number.isNaN(n)?!0:t-n>r}function wE(e){let r=process.env[e]?.trim().toLowerCase();return r==="1"||r==="true"||r==="yes"||r==="on"}function pn(){process.platform==="win32"&&(wE("KYNVER_DAEMON_ALLOW_NATIVE_WINDOWS")||(console.error(JSON.stringify({event:"daemon_start_blocked",reason:"native_windows_console_flash",remedy:"Run the daemon inside WSL: .\\scripts\\start-tier2-wsl.ps1 \u2014 or set KYNVER_DAEMON_ALLOW_NATIVE_WINDOWS=1 to override (flashes visible consoles)."})),process.exit(1)))}I();import{existsSync as _E}from"node:fs";import{homedir as xE}from"node:os";import EE from"node:path";function Mh(e,r){let t=process.env[e]?.trim().toLowerCase();return t?t==="0"||t==="false"||t==="no"||t==="off"?!1:t==="1"||t==="true"||t==="yes"||t==="on"?!0:r:r}function Ao(e,r,t=1){let n=Number(process.env[e]);return!Number.isFinite(n)||n<t?r:Math.floor(n)}function Mr(){let e=process.env.KYNVER_CRON_STORE_PATH?.trim()||process.env.OPENCLAW_CRON_STORE_PATH?.trim();return e||EE.join(xE(),".kynver","agent-os-cron.json")}function PE(e=Mr()){let r=process.env.KYNVER_CRON_TICK_STATE_PATH?.trim();return r||`${e.replace(/\.json$/i,"")}.tick-state.json`}function AE(){let e=v();return process.env.KYNVER_API_URL?.trim()||e.apiBaseUrl?.trim()||process.env.KYNVER_CRON_FIRE_BASE_URL?.trim()||process.env.OPENCLAW_CRON_FIRE_BASE_URL?.trim()||null}function mu(){return process.env.KYNVER_CRON_SECRET?.trim()||process.env.OPENCLAW_CRON_SECRET?.trim()||process.env.KYNVER_RUNTIME_SECRET?.trim()||null}function Rr(){let e=Mr(),r=PE(e),t=AE(),n=mu(),o=!!(t&&n),s=_E(e),i=o&&(s||Mh("KYNVER_CRON_TICK_FORCE",!1));return{storePath:e,statePath:r,lockPath:`${r}.lock`,fireBaseUrl:t,secret:n,tickEnabled:Mh("KYNVER_CRON_TICK_ENABLED",i),tickIntervalMs:Ao("KYNVER_CRON_TICK_INTERVAL_MS",6e4,5e3),missedRunPolicy:process.env.KYNVER_CRON_MISSED_RUN_POLICY?.trim().toLowerCase()==="skip"?"skip":"catch_up",maxCatchUpPerTick:Ao("KYNVER_CRON_MAX_CATCH_UP_PER_TICK",3,0),maxRetries:Ao("KYNVER_CRON_MAX_RETRIES",3,0),retryBackoffMs:Ao("KYNVER_CRON_RETRY_BACKOFF_MS",6e4,1e3),inflightLeaseMs:Ao("KYNVER_CRON_INFLIGHT_LEASE_MS",12e4,5e3)}}function Gi(e=Rr()){return e.tickEnabled&&!!(e.fireBaseUrl&&e.secret)}function IE(e){return e.replace(/\/+$/,"")}async function Uh(e){let r=e.fetchFn??fetch,t=e.entry.spec.callbackPath.startsWith("/")?e.entry.spec.callbackPath:`/${e.entry.spec.callbackPath}`,n=`${IE(e.baseUrl)}${t}`,s={source:"kynver-cron",jobId:e.jobId??e.entry.spec.dedupeKey??null,agentOsId:e.entry.spec.target.agentOsId,kind:e.entry.spec.kind,target:e.entry.spec.target,...e.entry.spec.payload!==void 0&&{payload:e.entry.spec.payload}},i=await r(n,{method:"POST",headers:Be(e.secret),body:JSON.stringify(s)}),a=null;try{a=await i.json()}catch{a=null}return{ok:i.ok,status:i.status,body:a}}C();import{closeSync as OE,existsSync as fu,openSync as NE,readFileSync as TE,unlinkSync as Wh,writeFileSync as DE}from"node:fs";var ME=10*6e4;function Lh(e){if(!fu(e))return null;try{let r=JSON.parse(TE(e,"utf8"));if(typeof r.pid=="number"&&typeof r.at=="string")return r}catch{return null}return null}function UE(e){let r=Lh(e);if(!r||!$(r.pid))return!0;let t=Date.parse(r.at);return Number.isNaN(t)?!0:Date.now()-t>ME}function Bh(e){if(fu(e)&&!UE(e)){let r=Lh(e);return{acquired:!1,reason:r?`held by pid ${r.pid}`:"held by another process"}}if(fu(e))try{Wh(e)}catch{}try{let r=NE(e,"wx");return DE(r,JSON.stringify({pid:process.pid,at:new Date().toISOString()}),"utf8"),OE(r),{acquired:!0}}catch(r){if(r.code==="EEXIST")return{acquired:!1,reason:"concurrent acquire"};throw r}}function Hh(e){try{Wh(e)}catch{}}var WE=/^[\d*/,\-?LW#]+\s+[\d*/,\-?LW#]+\s+[\d*/,\-?LW#]+\s+[\d*/,\-?LW#]+\s+[\d*/,\-?LW#]+$/;function LE(e){return WE.test(e.trim())}function BE(e,r,t){let n=new Set;for(let o of e.split(",")){let s=o.trim();if(!s)continue;if(s==="*"){for(let d=r;d<=t;d++)n.add(d);continue}let i=/^(.+)\/(\d+)$/.exec(s),a=i?i[1]:s,l=i?Math.max(1,Number(i[2])):1;if(a==="*"){for(let d=r;d<=t;d+=l)n.add(d);continue}let c=/^(\d+)-(\d+)$/.exec(a);if(c){let d=Math.max(r,Number(c[1])),f=Math.min(t,Number(c[2]));for(let m=d;m<=f;m+=l)n.add(m);continue}let u=Number(a);Number.isInteger(u)&&u>=r&&u<=t&&n.add(u)}return n}function Io(e,r,t,n){let o=e.trim();return o==="*"?!0:BE(o,t,n).has(r)}function HE(e,r){let t=e.trim().split(/\s+/);if(t.length!==5)return!1;let[n,o,s,i,a]=t;return Io(n,r.getUTCMinutes(),0,59)&&Io(o,r.getUTCHours(),0,23)&&Io(s,r.getUTCDate(),1,31)&&Io(i,r.getUTCMonth()+1,1,12)&&Io(a,r.getUTCDay(),0,6)}var FE=366*24*60;function $E(e){return new Date(Date.UTC(e.getUTCFullYear(),e.getUTCMonth(),e.getUTCDate(),e.getUTCHours(),e.getUTCMinutes(),0,0))}function Fh(e,r){if(!LE(e))return null;let t=$E(r);t=new Date(t.getTime()+6e4);for(let n=0;n<FE;n++){if(HE(e,t))return t;t=new Date(t.getTime()+6e4)}return null}function $h(e,r){if(e.scheduleKind==="runAt"&&e.runAt){let t=Date.parse(e.runAt);return Number.isNaN(t)?null:new Date(t).toISOString()}if(e.scheduleKind==="cron"&&e.cron){let t=Fh(e.cron.trim(),r);return t?t.toISOString():null}return null}function gu(e,r){if(e.scheduleKind!=="cron"||!e.cron?.trim())return null;let t=Fh(e.cron.trim(),r);return t?t.toISOString():null}import{promises as KE}from"node:fs";async function Kh(e){try{return await KE.readFile(e,"utf8")}catch(r){if(r.code==="ENOENT")return null;throw r}}function jE(e){if(!e)return[];try{let r=JSON.parse(e);return Array.isArray(r.entries)?r.entries:[]}catch{return[]}}async function kt(e=Mr()){let r=await Kh(e);return jE(r)}async function jh(e,r){let{mkdir:t,writeFile:n,rename:o}=await import("node:fs/promises"),{randomBytes:s}=await import("node:crypto"),{dirname:i}=await import("node:path");await t(i(e),{recursive:!0});let a=`${e}.${s(4).toString("hex")}.tmp`,l=JSON.stringify({entries:r},null,2);await n(a,l,"utf8"),await o(a,e)}async function Vh(e,r=Mr()){let t=await kt(r),n=t.findIndex(o=>o.providerScheduleId===e.providerScheduleId);n>=0?t[n]=e:t.push(e),await jh(r,t)}async function Gh(e=Mr()){return await Kh(e)!==null?{created:!1}:(await jh(e,[]),{created:!0})}import{randomBytes as VE}from"node:crypto";import{promises as Oo}from"node:fs";import GE from"node:path";var Yi={version:1,jobs:{}};async function YE(e){try{return await Oo.readFile(e,"utf8")}catch(r){if(r.code==="ENOENT")return null;throw r}}function JE(e){if(!e)return{...Yi,jobs:{...Yi.jobs}};try{let r=JSON.parse(e);return r?.version!==1||typeof r.jobs!="object"||!r.jobs?{...Yi,jobs:{}}:r}catch{return{...Yi,jobs:{}}}}async function Ji(e){let r=await YE(e);return JE(r)}async function qE(e,r){await Oo.mkdir(GE.dirname(e),{recursive:!0});let t=VE(6).toString("hex"),n=`${e}.tmp-${process.pid}-${Date.now()}-${t}`;await Oo.writeFile(n,`${JSON.stringify(r,null,2)}
+`,"utf8");try{await Oo.rename(n,e)}catch(o){let s=o.code;if(s!=="EPERM"&&s!=="EEXIST"&&s!=="EACCES")throw o;await Oo.unlink(n).catch(()=>{})}}async function Yh(e,r){await qE(e,r)}function Jh(e,r){let t=e.jobs[r];if(t)return t;let n={providerScheduleId:r,nextFireAt:null,lastFiredAt:null,lastAttemptAt:null,consecutiveFailures:0,completedAt:null,inflightUntil:null};return e.jobs[r]=n,n}function zE(e,r){if(!e.inflightUntil)return!1;let t=Date.parse(e.inflightUntil);return!Number.isNaN(t)&&t>r}function XE(e){return!!e.completedAt}function QE(e,r,t,n){if(r.consecutiveFailures===0)return!0;if(e.spec.scheduleKind!=="cron"&&r.consecutiveFailures>t.maxRetries)return!1;if(!r.lastAttemptAt)return!0;let o=Date.parse(r.lastAttemptAt);return Number.isNaN(o)?!0:n-o>=t.retryBackoffMs}function ZE(e,r,t){if(r.nextFireAt)return r.nextFireAt;let n=$h(e.spec,t);return r.nextFireAt=n,n}function eP(e,r,t,n){if(e.paused||XE(r)||zE(r,t)||!QE(e,r,n,t))return!1;let o=r.nextFireAt?Date.parse(r.nextFireAt):NaN;return Number.isNaN(o)?!1:t>=o}function rP(e,r,t){e.spec.scheduleKind==="cron"&&(r.nextFireAt=gu(e.spec,t))}async function mn(e={}){let r=e.env??Rr(),t=e.now??new Date,n=t.getTime();if(!r.tickEnabled)return{enabled:!1,skipped:"tick_disabled",scanned:0,due:0,fired:0,skippedJobs:0,errors:0};if(!r.fireBaseUrl||!r.secret)return{enabled:!0,skipped:"missing_fire_credentials",scanned:0,due:0,fired:0,skippedJobs:0,errors:0};let o=Bh(r.lockPath);if(!o.acquired)return{enabled:!0,skipped:o.reason??"lock_not_acquired",scanned:0,due:0,fired:0,skippedJobs:0,errors:0,lockHeld:!0};try{let s=await kt(r.storePath),i=e.agentOsIdFilter?s.filter(m=>m.spec.target.agentOsId===e.agentOsIdFilter):s,a=await Ji(r.statePath),l=[];for(let m of i){let p=Jh(a,m.providerScheduleId);ZE(m,p,t),eP(m,p,n,r)&&l.push({entry:m,job:p})}l.sort((m,p)=>{let g=Date.parse(m.job.nextFireAt??"")||0,k=Date.parse(p.job.nextFireAt??"")||0;return g-k});let c=0,u=0,d=0,f=r.maxCatchUpPerTick;for(let{entry:m,job:p}of l){if(r.missedRunPolicy==="skip"&&m.spec.scheduleKind==="cron"){let g=Date.parse(p.nextFireAt??"");if(!Number.isNaN(g)&&g<n-r.tickIntervalMs*2){p.nextFireAt=gu(m.spec,t),d++;continue}}if(f<=0){d++;continue}p.inflightUntil=new Date(n+r.inflightLeaseMs).toISOString(),p.lastAttemptAt=t.toISOString(),rP(m,p,t);try{let g=await Uh({entry:m,baseUrl:r.fireBaseUrl,secret:r.secret,fetchFn:e.fetchFn});p.inflightUntil=null,g.ok?(p.lastFiredAt=t.toISOString(),p.consecutiveFailures=0,m.spec.scheduleKind==="runAt"&&(p.completedAt=t.toISOString(),p.nextFireAt=null),c++,f--):(p.consecutiveFailures+=1,u++)}catch{p.inflightUntil=null,p.consecutiveFailures+=1,u++}}return await Yh(r.statePath,a),{enabled:!0,scanned:i.length,due:l.length,fired:c,skippedJobs:d,errors:u}}finally{Hh(r.lockPath)}}C();W();import qh from"node:path";var zh="mesh-cron-lease.json";function qi(e){return _(qh.join(E(e),zh),null)}function Xh(e,r){de(qh.join(E(e),zh),{...r,updatedAt:new Date().toISOString()})}function Qh(e){if(!e||typeof e!="object"||Array.isArray(e))return null;let r=e.response;if(!r||typeof r!="object"||Array.isArray(r))return null;let t=r.meshLiveness;if(!t||typeof t!="object"||Array.isArray(t))return null;let n=t.cronLease;if(!n||typeof n!="object"||Array.isArray(n))return null;let o=n;return{leaseToken:typeof o.leaseToken=="string"?o.leaseToken:null,holderBoxId:typeof o.holderBoxId=="string"?o.holderBoxId:null,authorized:o.authorized===!0,updatedAt:new Date().toISOString()}}C();import SP from"node:path";I();var tP=1;function fn(e){if(!e||typeof e!="object")return 0;let r=e.startedCount;if(typeof r=="number")return r;let t=e.outcomes;return Array.isArray(t)?t.filter(n=>n.started).length:0}function nP(e){let{maxStarts:r,...t}=e;return t}async function hu(e,r){if(r<=0)return{ok:!0,skipped:!0,reason:"no slots",maxStarts:0,startedCount:0};let t=nP(e);if(t.targetTaskId||t.targetTaskIds){let u=await Nr({...t,execute:!0,pipeline:!0,maxStarts:String(r)});return{...typeof u=="object"&&u!==null?u:{},passes:{target:u},startedCount:fn(u)}}let n=Math.min(r,tP),o=Math.max(0,r-n),s=await Nr({...t,execute:!0,pipeline:!0,lane:"review",maxStarts:String(n)}),i=fn(s),a=o+(n-i);if(a<=0)return{...typeof s=="object"&&s!==null?s:{},passes:{review:s},startedCount:i};let l=await Nr({...t,execute:!0,pipeline:!0,maxStarts:String(a)}),c=fn(l);return{passes:{review:s,work:l},startedCount:i+c,ok:!0}}function Zh(e){if(!e||typeof e!="object")return[];let t=e.response?.dispatch?.exactTargetTaskIds;if(!Array.isArray(t))return[];let n=new Set,o=[];for(let s of t){if(typeof s!="string")continue;let i=s.trim();!i||n.has(i)||(n.add(i),o.push(i))}return o}function oP(e){let t=e.response?.dispatch;return t&&typeof t=="object"?t:null}function No(e){return typeof e!="number"||!Number.isFinite(e)?null:Math.max(0,Math.floor(e))}function ek(e,r){let t=oP(r),n=No(t?.recommendedMaxStarts),o=No(t?.actionableReady),s=No(t?.queuedTasks),i=No(t?.boardAdvancedThisTick)??0,a=No(t?.leaseReapedThisTick)??0,l=i+a,c=o??s,u=e.slotsAvailable;c!==null?u=Math.min(u,c):n!==null&&(u=Math.min(u,n)),c===null&&n!==null&&(u=Math.max(u,Math.min(e.slotsAvailable,n)));let d=t?.underutilized===!0||(c??0)>0&&e.slotsAvailable>0&&e.maxConcurrentWorkers>0&&e.activeWorkers<e.maxConcurrentWorkers;if(e.slotsAvailable>0&&u===0&&(d||l>0)){let m=c??(l>0?l:1);u=Math.min(e.slotsAvailable,Math.max(1,m))}let f=s!==null&&o!==null?Math.max(0,s-o):null;return{maxStarts:Math.max(0,u),underutilized:d,advisedStarts:n,actionableReady:o,queuedTasks:s,nonDispatchableReady:f,boardAdvancedThisTick:i,leaseReapedThisTick:a}}jt();W();Bn();Y();C();Y();W();C();import sP from"node:path";I();async function rk(e){let r=F(e.baseUrl),t=await V(e.secret,e.agentOsId,{baseUrl:r}),n=`${r}/api/agent-os/by-id/${encodeURIComponent(e.agentOsId)}/tasks/${encodeURIComponent(e.taskId)}/plan-progress-sync`,o=await X(n,t,{phase:e.phase,taskId:e.taskId,blocker:e.blocker,artifact:e.artifact},{agentOsId:e.agentOsId,baseUrl:r});return{ok:o.ok,status:o.status,response:o.response}}async function tk(e,r){let t=L(e),n=String(r.agentOsId||"");if(!n)return[];let o=[];for(let s of Object.keys(t.workers||{})){let i=_(sP.join(E(t.id),"workers",R(s),"worker.json"),void 0);if(!i?.dispatched||!i.taskId)continue;let a=N(i);if(!a.heartbeatBlocker)continue;if(i.lastSyncedHeartbeatBlocker===a.heartbeatBlocker){o.push({worker:s,phase:"heartbeat_blocker",ok:!0,skipped:!0});continue}let l=await rk({agentOsId:n,taskId:i.taskId,phase:"heartbeat_blocker",blocker:a.heartbeatBlocker,baseUrl:r.baseUrl?String(r.baseUrl):void 0,secret:r.secret?String(r.secret):void 0});l.ok&&(i.lastSyncedHeartbeatBlocker=a.heartbeatBlocker,G(t.id,i)),o.push({worker:s,phase:"heartbeat_blocker",ok:l.ok})}return o}I();Ue();function iP(e=process.env){let r=v();return Ve(r,e)!=="forge"}function nk(e,r=process.env){if(iP(r))return e?.maxConcurrentWorkers??void 0}async function ok(e,r){let t=F(r.baseUrl?String(r.baseUrl):void 0),n=await V(r.secret?String(r.secret):void 0,e,{baseUrl:t}),o=`${t}/api/agent-os/by-id/${encodeURIComponent(e)}/runtime`;try{let s=await xs(o,n);if(!s.ok)return null;let a=s.response?.preferences?.maxConcurrentWorkers;if(a==null)return{maxConcurrentWorkers:null};let l=Number(a);return!Number.isFinite(l)||l<=0?{maxConcurrentWorkers:null}:{maxConcurrentWorkers:Math.floor(l)}}catch{return null}}I();Ue();import{spawnSync as aP}from"node:child_process";var lP=1e4,cP=4*1024*1024,sk=(e,r,t)=>{try{let n=aP(e,r,{encoding:"utf8",stdio:["ignore","pipe","pipe"],timeout:t?.timeoutMs??lP,maxBuffer:cP});return{ok:n.status===0,stdout:typeof n.stdout=="string"?n.stdout:"",stderr:typeof n.stderr=="string"?n.stderr:""}}catch(n){return{ok:!1,stdout:"",stderr:n instanceof Error?n.message:String(n)}}};function gn(e,r,t){let n=e(r,t);if(!n.ok||!n.stdout.trim())return null;try{return JSON.parse(n.stdout)}catch{return null}}function ik(e,r,t){return`${e} ${r} ${t}`}function To(e){let r=e.lastIndexOf("@");if(r<=0||r===e.length-1)return null;let t=e.slice(0,r),n=e.slice(r+1);return!/^[^/\s]+\/[^/\s]+$/.test(t)||!/^[0-9a-f]{7,40}$/i.test(n)?null:{repo:t,sha:n}}function ak(e){let r=e.trim().match(/[/:]([^/]+\/[^/]+)\/(?:pull|pulls|merge_requests|pull-requests)\/(\d+)/i);if(!r)return null;let t=Number(r[2]);return!Number.isFinite(t)||t<=0?null:{repo:r[1],number:t}}var uP=8e3,dP=30,pP=100,mP=400;function ku(e){return process.env.GITHUB_TOKEN?.trim()||process.env.GH_TOKEN?.trim()?!0:e("gh",["auth","token"]).ok}function hn(e){return e&&typeof e=="object"&&!Array.isArray(e)?e:null}function fP(e){return Array.isArray(e)?e.map(r=>hn(r)).filter(r=>r!==null).slice(0,dP).map(r=>({context:r.context??null,state:r.state??null,target_url:r.target_url??null,description:r.description??null})):[]}function lk(e,r,t){let n=gn(e,"gh",["api",`repos/${r}/commits/${t}/status`]);return n?{state:n.state??null,statuses:fP(n.statuses)}:null}var ck={provider:"github",kind:"pr_snapshot",version:"1",isAvailable:ku,collect(e,r){let t=ak(e);if(!t)return null;let n=gn(r,"gh",["api",`repos/${t.repo}/pulls/${t.number}`]);if(!n)return null;let o=hn(n.head),s=typeof o?.sha=="string"?o.sha:null,i=hn(n.user),a=hn(hn(o?.repo)?.owner),l=typeof n.body=="string"?n.body.slice(0,uP):null,c=[],u={state:null,statuses:[]};if(s){let m=gn(r,"gh",["api",`repos/${t.repo}/commits/${s}/check-runs?per_page=100`]);Array.isArray(m?.check_runs)&&(c=m.check_runs.map(p=>hn(p)).filter(p=>p!==null).slice(0,pP).map(p=>({name:p.name??null,status:p.status??null,conclusion:p.conclusion??null}))),u=lk(r,t.repo,s)??u}let d=r("gh",["api","--paginate",`repos/${t.repo}/pulls/${t.number}/files?per_page=100`,"--jq",".[].filename"]),f=d.ok?d.stdout.split(`
+`).map(m=>m.trim()).filter(Boolean).slice(0,mP):[];return{pull:{html_url:n.html_url??null,title:n.title??null,body:l,user:{login:i?.login??null},state:n.state??null,draft:n.draft??null,merged:n.merged??null,merged_at:n.merged_at??null,merge_commit_sha:n.merge_commit_sha??null,mergeable:n.mergeable??null,mergeable_state:n.mergeable_state??null,head:{sha:s,ref:o?.ref??null,repo:{owner:{login:a?.login??null}}}},checkRuns:c,combinedStatus:u,changedFiles:f}}},uk={provider:"github",kind:"commit_status",version:"1",isAvailable:ku,collect(e,r){let t=To(e);return t?lk(r,t.repo,t.sha):null}},dk={provider:"github",kind:"branch_reachability",version:"1",isAvailable:ku,collect(e,r){let t=To(e);if(!t)return null;let n=gn(r,"gh",["api",`repos/${t.repo}`]),o=typeof n?.default_branch=="string"&&n.default_branch.trim()?n.default_branch.trim():null;if(!o)return null;let s=gn(r,"gh",["api",`repos/${t.repo}/compare/${encodeURIComponent(o)}...${t.sha}`]);if(!s)return null;let i=typeof s.status=="string"?s.status:null;return{defaultBranch:o,compareStatus:i,reachable:i==="identical"||i==="behind"}}};var gP=5,hP=/\b(READY|ERROR|BUILDING|QUEUED|CANCELED|INITIALIZING)\b/i,kP=/https:\/\/[^\s]+/,pk={provider:"vercel",kind:"deployment_status",version:"1",isAvailable(e){return e("vercel",["whoami"]).ok},collect(e,r){let t=To(e);if(!t)return null;let n=r("vercel",["list","--prod","--meta",`githubCommitSha=${t.sha}`]);if(!n.ok)return null;let o=[];for(let s of n.stdout.split(`
+`)){let i=s.match(kP)?.[0];if(!i)continue;let a=s.match(hP)?.[1]?.toUpperCase()??null;if(o.push({url:i,state:a}),o.length>=gP)break}return{found:o.length>0,deployments:o}}};var yu=[];function zi(e){yu.some(r=>r.provider===e.provider&&r.kind===e.kind)||yu.push(e)}function mk(e,r){return yu.find(t=>t.provider===e&&t.kind===r)??null}function fk(){zi(ck),zi(uk),zi(dk),zi(pk)}var yP=8,RP=25e3;function gk(e,r={}){fk();let t=r.run??sk,n=r.now??(()=>new Date),o=r.maxSubjects??yP,s=Date.now()+(r.deadlineMs??RP),i=new Set,a=e.filter(m=>{let p=ik(m.provider,m.kind,m.subject);return i.has(p)?!1:(i.add(p),!0)}),l=a.length>0?Math.floor(n().getTime()/6e4)%a.length:0,u=a.map((m,p)=>a[(l+p)%a.length]).slice(0,o),d={attempted:0,collected:0,items:[],skipped:[]},f=new Map;for(let m of u){if(Date.now()>s){d.skipped.push({...m,reason:"budget_exhausted"});continue}let p=mk(m.provider,m.kind);if(!p){d.skipped.push({...m,reason:"no_recipe"});continue}let g=`${p.provider} ${p.kind}`,k=f.get(g);if(k===void 0&&(k=p.isAvailable(t),f.set(g,k)),!k){d.skipped.push({...m,reason:"provider_unavailable"});continue}d.attempted+=1;let h=p.collect(m.subject,t);if(h==null){d.skipped.push({...m,reason:"collect_failed"});continue}d.collected+=1,d.items.push({provider:m.provider,kind:m.kind,subject:m.subject,payload:h,observedAt:n().toISOString(),collectorVersion:p.version})}return d}W();C();import bP from"node:path";var vP="provider-evidence-wanted.json";function hk(e){return bP.join(E(e),vP)}function kk(e){if(!Array.isArray(e))return[];let r=[];for(let t of e){if(!t||typeof t!="object"||Array.isArray(t))continue;let n=t,o=typeof n.provider=="string"?n.provider.trim():"",s=typeof n.kind=="string"?n.kind.trim():"",i=typeof n.subject=="string"?n.subject.trim():"";!o||!s||!i||r.push({provider:o,kind:s,subject:i})}return r}function yk(e){let r=_(hk(e),null);return kk(r?.wanted)}function Rk(e,r){de(hk(e),{savedAt:new Date().toISOString(),wanted:r})}function bk(e){if(!e||typeof e!="object"||Array.isArray(e))return null;let r=e.providerEvidenceWanted;return Array.isArray(r)?kk(r):null}async function CP(e,r){let t=L(e),n=[];for(let o of Object.keys(t.workers||{})){let s=_(SP.join(E(t.id),"workers",R(o),"worker.json"),void 0);if(!s?.taskId||s.localOnly)continue;if(at(s)){n.push({worker:o,ok:!0,taskId:s.taskId??null,skipped:!0});continue}let i=N(s);if(!ne(i))continue;let a=Jr({alive:i.alive,finalResult:i.finalResult,changedFiles:i.changedFiles,gitAncestry:i.gitAncestry});if(!s.dispatched&&!i.finalResult&&!a?.salvageable)continue;let l=await ao({run:e,name:o,agentOsId:String(r.agentOsId||s.agentOsId||""),...r});n.push({worker:o,ok:l.ok,taskId:s.taskId??null})}return n}async function wP(e,r,t,n,o){let s=F(n.baseUrl?String(n.baseUrl):void 0),i=await V(n.secret?String(n.secret):void 0,e,{baseUrl:s}),a=`${s}/api/agent-os/by-id/${encodeURIComponent(e)}/operator/tick`,l=await ns(),c=si(r),u=null;try{let g=yk(r);u=g.length>0?gk(g):null}catch{u=null}let d=qi(r),f=await xr(a,i,{agentOsId:e,runId:r,ingestHarness:!0,harnessBoardSnapshot:lt(r),resourceGate:t,boxResourceSnapshot:go(t,{harnessRunId:r,boxKind:Ve(v())}),packageVersions:l,...o?{harnessCleanup:o}:{},runnerPresence:ze({runId:r}),activeHarnessWorkers:c,...d?.leaseToken?{meshCronLeaseToken:d.leaseToken}:{},...u&&u.items.length>0?{providerEvidence:u.items}:{}}),m=bk(f.response);if(m)try{Rk(r,m)}catch{}let p=Qh(f);if(p)try{Xh(r,p)}catch{}return{ok:f.ok,httpStatus:f.status,response:f.response,...u?{providerEvidence:{attempted:u.attempted,collected:u.collected,skipped:u.skipped.length}}:{}}}async function Ru(e){let r=String(O(String(e.run||""),"--run")),t=String(O(String(e.agentOsId||""),"--agent-os-id")),n=e.execute!==!1&&e.execute!=="false";lo({run:r});let o=await ok(t,e),s=nk(o),i=ur({runId:r,configuredMaxWorkersOverride:s}),a=du()?uu(r):void 0,l=await wP(t,r,i,e,a),c=ef(r,l),u=await $s(r,e),d=await CP(r,e),f=ur({runId:r,configuredMaxWorkersOverride:s}),m=an(),p=await tk(r,e),g=ek(f,l),k=g.maxStarts,h=await cn({run:r,agentOsId:t,pipeline:!0,...e}),b=null,x=0,M=Zh(l),P=k;if(n&&P>0&&M.length>0){let K=Math.min(P,M.length),B=await hu({...e,run:r,agentOsId:t,targetTaskIds:M.join(",")},K),D=fn(B);x+=D,P=Math.max(0,P-D),b={exactTargetTaskIds:M,exact:B,startedCount:x}}if(n&&P>0){let K=await hu({...e,run:r,agentOsId:t},P),B=fn(K);x+=B,b=b&&typeof b=="object"?{...b,broad:K,startedCount:x}:K}else!n||k<=0?b||(b={ok:!0,skipped:!0,reason:n?f.reason??"no slots or queued work":"execute disabled",maxStarts:0,dispatchAdvice:g,...M.length?{exactTargetTaskIds:M,exactOnly:!0}:{}}):b&&typeof b=="object"&&(b={...b,broadSkipped:!0,startedCount:x});let T=!g.underutilized&&k===0&&d.length===0&&x===0;return{runId:r,agentOsId:t,execute:n,resourceGate:i,dispatchResourceGate:f,leaseRenewal:u,completedWorkers:d,staleReconcile:m,harnessCleanup:a,planProgressSync:p,completionAckSync:c,operatorTick:l,sweep:h,dispatchAdvice:g,dispatch:b,idle:T}}I();import KP from"node:os";import{readFileSync as _P}from"node:fs";import{homedir as xP,platform as EP}from"node:os";import PP from"node:path";import{execFileSync as AP}from"node:child_process";function vk(e,r=Date.now()){try{let t=JSON.parse(e),n=t.claudeAiOauth?.accessToken,o=t.claudeAiOauth?.expiresAt;return typeof n!="string"||!n||typeof o=="number"&&o-r<6e4?null:n}catch{return null}}function IP(){if(EP()==="darwin")try{let e=AP("security",["find-generic-password","-s","Claude Code-credentials","-w"],{encoding:"utf8",stdio:["ignore","pipe","ignore"]});return vk(e.trim())}catch{return null}try{let e=_P(PP.join(xP(),".claude",".credentials.json"),"utf8");return vk(e)}catch{return null}}function Sk(e=process.env,r={}){let t=e.ANTHROPIC_API_KEY?.trim();if(t)return{kind:"api_key",key:t};let n=e.KYNVER_CHAT_USE_CLAUDE_OAUTH;if(r.oauthOptIn===!0||n==="1"||n==="true"||n==="yes"){let s=IP();if(s)return{kind:"oauth",token:s}}return null}var OP="You are Claude Code, Anthropic's official CLI for Claude.";function NP(){return{blocks:[],stopReason:null,inputTokens:0,outputTokens:0}}function TP(e,r){let t=r;switch(t.type){case"message_start":return e.inputTokens=t.message?.usage?.input_tokens??0,"";case"content_block_start":{let n=t.index??e.blocks.length;return e.blocks[n]={type:t.content_block?.type==="tool_use"?"tool_use":"text",text:"",id:t.content_block?.id,name:t.content_block?.name,inputJson:""},""}case"content_block_delta":{let n=e.blocks[t.index??e.blocks.length-1];return n?t.delta?.type==="text_delta"&&t.delta.text?(n.text+=t.delta.text,t.delta.text):(t.delta?.type==="input_json_delta"&&t.delta.partial_json&&(n.inputJson+=t.delta.partial_json),""):""}case"message_delta":return t.delta?.stop_reason&&(e.stopReason=t.delta.stop_reason),typeof t.usage?.output_tokens=="number"&&(e.outputTokens=t.usage.output_tokens),"";default:return""}}function DP(e){let r=[];for(let t of e.blocks)if(t)if(t.type==="tool_use"){let n={};try{n=t.inputJson?JSON.parse(t.inputJson):{}}catch{n={}}r.push({type:"tool_use",id:t.id??"",name:t.name??"",input:n})}else t.text&&r.push({type:"text",text:t.text});return{content:r,stop_reason:e.stopReason??"end_turn",usage:{input_tokens:e.inputTokens,output_tokens:e.outputTokens}}}async function*MP(e){let r=e.getReader(),t=new TextDecoder,n="";try{for(;;){let{done:o,value:s}=await r.read();if(o)break;n+=t.decode(s,{stream:!0});let i;for(;(i=n.indexOf(`
+`))!==-1;){let a=n.slice(0,i).trim();if(n=n.slice(i+1),!a.startsWith("data:"))continue;let l=a.slice(5).trim();if(!(!l||l==="[DONE]"))try{yield JSON.parse(l)}catch{}}}}finally{r.releaseLock()}}function UP(e=process.env){return(e.ANTHROPIC_BASE_URL?.trim()||"https://api.anthropic.com").replace(/\/$/,"")}async function Ck(e){let{creds:r,model:t,payload:n}=e,o={"Content-Type":"application/json","anthropic-version":"2023-06-01"},s=n.system;r.kind==="api_key"?o["x-api-key"]=r.key:(o.Authorization=`Bearer ${r.token}`,o["anthropic-beta"]="oauth-2025-04-20",s=[{type:"text",text:OP},{type:"text",text:n.system}]);let i=await fetch(`${UP()}/v1/messages`,{method:"POST",headers:o,signal:e.signal,body:JSON.stringify({model:t,max_tokens:n.maxTokens,system:s,messages:n.messages,...Array.isArray(n.tools)&&n.tools.length>0?{tools:n.tools}:{},...n.temperature!==void 0?{temperature:n.temperature}:{},stream:!0})});if(!i.ok||!i.body){let l=await i.text().catch(()=>"");throw new Error(`Anthropic stream failed: HTTP ${i.status}${l?` \u2014 ${l.slice(0,300)}`:""}`)}let a=NP();for await(let l of MP(i.body)){let c=TP(a,l);c&&e.onDelta(c)}return DP(a)}var kn=class{constructor(r,t=150){this.flushFn=r;this.floorMs=t}buffer="";timer=null;closed=!1;push(r){this.closed||!r||(this.buffer+=r,this.timer||(this.timer=setTimeout(()=>{this.timer=null,this.flushNow()},this.floorMs)))}flushNow(){if(!this.buffer)return;let r=this.buffer;this.buffer="",this.flushFn(r)}close(){this.closed||(this.closed=!0,this.timer&&(clearTimeout(this.timer),this.timer=null),this.flushNow())}};import{spawn as HP}from"node:child_process";var WP=new Set(["run list","run status","worker list","worker status","worker tail","status","cron status","monitor status","monitor list"]),LP=new Set(["run create","run dispatch","run sweep","worker start","worker stop","worker complete","cleanup"]),BP=["--secret","--api-key","--keeper-child"];function wk(e){if(!Array.isArray(e)||e.length===0||e.some(n=>typeof n!="string"))return{ok:!1,mutating:!1,reason:"argv must be a non-empty string array"};for(let n of e){if(BP.some(o=>n===o||n.startsWith(`${o}=`)))return{ok:!1,mutating:!1,reason:`forbidden flag: ${n}`};if(n.includes(`
+`)||n.includes("\0"))return{ok:!1,mutating:!1,reason:"control characters refused"}}let r=e[0],t=e.length>1&&!e[1].startsWith("--")?`${r} ${e[1]}`:r;return t==="doctor runtime-takeover"?e.includes("--remediate-default-repo")?{ok:!0,mutating:!0}:{ok:!0,mutating:!1}:r==="cleanup"?{ok:!0,mutating:e.includes("--execute")}:WP.has(t)?{ok:!0,mutating:!1}:LP.has(t)?{ok:!0,mutating:!0}:{ok:!1,mutating:!1,reason:`verb not allowlisted: ${t}`}}var FP=10*6e4,$P=5e3,_k=2e5;async function xk(e,r,t={}){let n=wk(e);if(!n.ok)return{exitCode:null,timedOut:!1,refused:n.reason};let o=t.cliEntry??process.argv[1],s=t.timeoutMs??FP,i=new kn(r);return new Promise(a=>{let l=0,c=!1,u=HP(process.execPath,[o,...e],{stdio:["ignore","pipe","pipe"],env:process.env}),d=m=>{if(l>=_k)return;let p=m.toString("utf8").slice(0,_k-l);l+=p.length,i.push(p)};u.stdout?.on("data",d),u.stderr?.on("data",d);let f=setTimeout(()=>{c=!0,u.kill("SIGTERM"),setTimeout(()=>u.kill("SIGKILL"),$P).unref()},s);u.on("error",m=>{clearTimeout(f),i.push(`spawn failed: ${m.message}`),i.close(),a({exitCode:null,timedOut:!1,refused:void 0})}),u.on("close",m=>{clearTimeout(f),i.close(),a({exitCode:m,timedOut:c})})})}var jP=25e3,VP=32e3,GP=5e3,YP=6e4,Ek=5*6e4,JP=5e3,qP="claude-sonnet-4-6";async function zP(e,r,t){let n=t.KYNVER_RUNTIME_CHAT_BRIDGE_URL?.trim();if(n)return n;if(!e)return null;let o=new AbortController,s=setTimeout(()=>o.abort(),JP);try{let i=await fetch(`${e.replace(/\/$/,"")}/api/runtime/chat-bridge`,{headers:{Authorization:`Bearer ${r}`},signal:o.signal});if(!i.ok)return null;let a=await i.json().catch(()=>null);return typeof a?.bridgeUrl=="string"&&a.bridgeUrl.trim()?a.bridgeUrl.trim():null}catch{return null}finally{clearTimeout(s)}}async function Pk(e=process.env){let r=v(),t=r.agentOsId?.trim(),n=oe();if(!t||!n)return null;let o=await zP(r.apiBaseUrl,n,e);return o?{bridgeUrl:o.replace(/\/$/,""),agentOsId:t,apiKey:n,boxId:KP.hostname(),model:e.KYNVER_CHAT_MODEL?.trim()||r.defaultModel?.trim()||qP,useClaudeOauth:r.chatUseClaudeOauth===!0}:null}async function XP(e,r){let t=new AbortController,n=setTimeout(()=>t.abort(),VP),o=setInterval(()=>{r()&&t.abort()},500);try{let s=await fetch(`${e.bridgeUrl}/runtime-chat/claim`,{method:"POST",headers:{"Content-Type":"application/json",Authorization:`Bearer ${e.apiKey}`},body:JSON.stringify({agentOsId:e.agentOsId,boxId:e.boxId,waitMs:jP}),signal:t.signal});if(s.status===204)return null;if(s.status===401||s.status===403)return"auth_error";if(!s.ok)throw new Error(`claim failed: HTTP ${s.status}`);return(await s.json().catch(()=>null))?.turn??null}catch(s){if(r())return null;throw s}finally{clearTimeout(n),clearInterval(o)}}async function yt(e,r,t){return(await fetch(`${e.bridgeUrl}/runtime-chat/turns/${encodeURIComponent(r)}/events`,{method:"POST",headers:{"Content-Type":"application/json",Authorization:`Bearer ${e.apiKey}`},body:JSON.stringify({agentOsId:e.agentOsId,events:t})})).ok}async function QP(e,r){let t=0,n=Array.isArray(r.payload?.argv)?r.payload.argv:[],o=await xk(n,s=>{yt(e,r.turnId,[{seq:t++,kind:"delta",text:s}])});o.refused?await yt(e,r.turnId,[{seq:t++,kind:"error",error:`command_refused: ${o.refused}`}]).catch(()=>{}):await yt(e,r.turnId,[{seq:t++,kind:"final",message:{exitCode:o.exitCode,timedOut:o.timedOut}}]).catch(()=>{}),console.error(JSON.stringify({event:"command_turn_done",turnId:r.turnId,argv:n.slice(0,4),exitCode:o.exitCode,timedOut:o.timedOut,refused:o.refused??null}))}async function ZP(e,r){let t=0,n=!1,o=new AbortController,s=l=>{n||yt(e,r.turnId,[{seq:t++,kind:"delta",text:l}]).then(c=>{c||(n=!0,o.abort())})},i=new kn(s),a=Sk(process.env,{oauthOptIn:e.useClaudeOauth});if(!a){await yt(e,r.turnId,[{seq:0,kind:"error",error:"no_local_credentials"}]).catch(()=>{});return}try{let l=await Ck({creds:a,model:e.model,payload:r.payload,onDelta:c=>i.push(c),signal:o.signal});i.close(),n||await yt(e,r.turnId,[{seq:t++,kind:"final",message:l}]),console.error(JSON.stringify({event:"chat_turn_done",turnId:r.turnId,model:e.model}))}catch(l){i.close(),n||await yt(e,r.turnId,[{seq:t++,kind:"error",error:l instanceof Error?l.message:String(l)}]).catch(()=>{}),console.error(JSON.stringify({event:"chat_turn_error",turnId:r.turnId,error:l instanceof Error?l.message:String(l)}))}}async function bu(e,r){for(let n=0;n<e&&!r();n+=500)await new Promise(o=>setTimeout(o,Math.min(500,e-n)))}async function Ak(e){let r=await Pk();for(r||console.error(JSON.stringify({event:"chat_claim_loop_waiting",reason:!oe()||!v().agentOsId?.trim()?"machine_not_linked":"bridge_not_discovered (rollout off, discovery route missing/404, or API unreachable)",rediscoverMs:Ek}));!r&&!e.shouldStop();){if(!oe()||!v().agentOsId?.trim()||(await bu(Ek,e.shouldStop),e.shouldStop()))return;r=await Pk()}if(!(!r||e.shouldStop())){for(console.error(JSON.stringify({event:"chat_claim_loop_start",bridgeUrl:r.bridgeUrl,agentOsId:r.agentOsId,boxId:r.boxId,model:r.model,useClaudeOauth:r.useClaudeOauth}));!e.shouldStop();)try{let t=await XP(r,e.shouldStop);if(t==="auth_error"){console.error(JSON.stringify({event:"chat_claim_auth_error"})),await bu(YP,e.shouldStop);continue}t&&(t.payload?.kind==="command"?await QP(r,t):await ZP(r,t))}catch(t){console.error(JSON.stringify({event:"chat_claim_error",error:t instanceof Error?t.message:String(t)})),await bu(GP,e.shouldStop)}console.error(JSON.stringify({event:"chat_claim_loop_stop"}))}}var eA=6e4,rA=5*6e4,tA=10,nA=250;async function vu(e,r){let t=e;for(;t>0&&!r();){let n=Math.min(nA,t);await Cr(n),t-=n}}async function Do(e){pn();let r=String(O(String(e.run||""),"--run")),t=String(O(String(e.agentOsId||v().agentOsId||""),"--agent-os-id")),n=e.execute!==!1&&e.execute!=="false",o=Number(e.intervalMs)>0?Math.floor(Number(e.intervalMs)):eA,s=!1,i=0;process.on("SIGINT",()=>{s=!0}),process.on("SIGTERM",()=>{s=!0});let a=Po();a.remediated&&console.error(JSON.stringify({event:"daemon_default_repo_remediated",defaultRepo:a.resolved?.defaultRepo??null,configPath:a.configPath}));let l=Ah(v());l.ok||(console.error(JSON.stringify({event:"daemon_start_blocked",runId:r,agentOsId:t,errors:l.errors})),process.exit(1)),console.error(JSON.stringify({event:"daemon_start",runId:r,agentOsId:t,execute:n,intervalMs:o,boxKind:l.box.boxKind,workerCapSource:l.workerCapSource,maxConcurrentWorkers:l.maxConcurrentWorkers}));let c=Rr(),u=Ak({shouldStop:()=>s}).catch(f=>{console.error(JSON.stringify({event:"chat_claim_loop_crashed",error:f instanceof Error?f.message:String(f)}))}),d=!1;for(;!s;)try{Nh({agentOsId:t,runId:r,instructionBundleVersion:Er()});let f=await Cs(e.secret?String(e.secret):void 0,t);if(!f.ok){d||(d=!0,console.error(JSON.stringify({event:"daemon_runner_credential_missing",agentOsId:t,reason:f.reason,remedy:`run \`kynver runner credential --agent-os-id ${t}\` (or \`kynver bootstrap\`); ticks resume automatically once the credential exists`}))),await vu(o,()=>s);continue}d&&(d=!1,console.error(JSON.stringify({event:"daemon_runner_credential_recovered",agentOsId:t}))),await xc({agentOsId:t,baseUrl:ml(e.baseUrl?String(e.baseUrl):void 0),secret:f.secret});let m=await Ru({run:r,agentOsId:t,execute:n,...e});if(console.error(JSON.stringify({event:"daemon_tick",...m})),c.tickEnabled){let h=qi(r);if(h&&!h.authorized)console.error(JSON.stringify({event:"daemon_cron_tick_skipped",reason:"mesh_cron_lease_not_authorized",holderBoxId:h.holderBoxId}));else{let b=await mn({env:c,agentOsIdFilter:t});b.enabled&&(b.fired>0||b.errors>0||b.lockHeld)&&console.error(JSON.stringify({event:"daemon_cron_tick",...b}))}}m.idle?i++:i=0;let p=Math.floor(tt("daemon.maxIdleStreak",tA)),g=Math.floor(tt("daemon.idleIntervalMs",rA)),k=i>=p?g:o;await vu(k,()=>s)}catch(f){console.error(JSON.stringify({event:"daemon_tick_error",error:f.message})),await vu(o,()=>s)}await u,console.error(JSON.stringify({event:"daemon_stop",runId:r,agentOsId:t}))}I();import{spawn as oA}from"node:child_process";C();var sA=15*6e4,Ik=2*6e4,Ok=1e4,iA=5e3,aA=5*6e4,lA=30*6e4,Nk=5e3;function cA(e,r=process.env){let t=typeof e=="string"?Number.parseInt(e,10):NaN;if(Number.isFinite(t)&&t>0)return t;let n=Number.parseInt(r.KYNVER_DAEMON_STALL_MS??"",10);return Number.isFinite(n)&&n>0?n:sA}function Xi(e,r=process.env){if(e.keeperChild===!0||e.keeperChild==="true"||e.noSupervise===!0||e.noSupervise==="true"||e.supervised==="false")return!1;let t=(r.KYNVER_DAEMON_SUPERVISED??"").trim().toLowerCase();return!(t==="0"||t==="false"||t==="no"||t==="off")}function uA(e,r=iA,t=aA){let n=Math.min(Math.max(e,1)-1,10);return Math.min(r*2**n,t)}function dA(e,r,t=lA){return r-e>=t}function Rt(e,r={}){console.error(JSON.stringify({event:`daemon_keeper_${e}`,...r}))}function pA(e){let r=[];for(let t=0;t<e.length;t+=1){let n=e[t];if(!(n==="--supervised"||n==="--no-supervise"||n==="--keeper-child")){if(n==="--stall-ms"){t+1<e.length&&!e[t+1].startsWith("--")&&(t+=1);continue}n.startsWith("--stall-ms=")||n.startsWith("--supervised=")||r.push(n)}}return r.push("--keeper-child"),r}async function Qi(e,r=process.argv.slice(2)){let t=String(O(String(e.agentOsId||v().agentOsId||""),"--agent-os-id")),n=cA(e.stallMs),o=pA(r),s=process.argv[1],i=!1,a=null,l=0,c=u=>{i=!0,Rt("stop",{signal:u}),a?.pid&&a.kill(u)};for(process.on("SIGINT",()=>c("SIGINT")),process.on("SIGTERM",()=>c("SIGTERM")),Rt("start",{agentOsId:t,stallMs:n,childArgv:o});!i;){let u=Date.now(),d=!1,f=null,m=null;for(a=oA(process.execPath,[s,...o],{stdio:"inherit",env:process.env}),Rt("child_spawned",{pid:a.pid??null}),a.on("exit",(k,h)=>{d=!0,f=k,m=h});!d&&!i&&(await Cr(Nk),!(d||i));){if(Date.now()-u<Ik)continue;let k=Th(t),h=k&&k.pid===a.pid?k:null;if(h&&Dh(h,n)){Rt("stall_detected",{pid:a.pid??null,lastBeatAt:h.observedAt,stallMs:n}),a.kill("SIGTERM"),await Cr(Ok),d||a.kill("SIGKILL");break}if(!h&&Date.now()-u>n+Ik){Rt("no_heartbeat_detected",{pid:a.pid??null,stallMs:n}),a.kill("SIGTERM"),await Cr(Ok),d||a.kill("SIGKILL");break}}for(;!d&&!i;)await Cr(Nk);if(i)break;let p=Date.now();dA(u,p)&&(l=0),l+=1;let g=uA(l);Rt("child_exited",{code:f,signal:m,uptimeMs:p-u,consecutiveFailures:l,respawnInMs:g}),await Cr(g)}Rt("stopped",{agentOsId:t})}W();import{existsSync as ra}from"node:fs";async function Zi(e=Rr()){let r=await kt(e.storePath).catch(()=>[]),t=await Ji(e.statePath).catch(()=>({version:1,jobs:{}})),n=!!(e.fireBaseUrl&&e.secret),o=Gi(e),s="disabled";return o?s="kynver-cron-daemon":process.env.QSTASH_TOKEN?.trim()&&(s="qstash"),{primary:s,env:{storePath:e.storePath,statePath:e.statePath,tickEnabled:e.tickEnabled,fireBaseUrl:e.fireBaseUrl,missedRunPolicy:e.missedRunPolicy,maxCatchUpPerTick:e.maxCatchUpPerTick,maxRetries:e.maxRetries},jobCount:r.length,stateJobCount:Object.keys(t.jobs).length,credentialsReady:n,daemonPrimary:o}}import{homedir as kA}from"node:os";import yA from"node:path";import{existsSync as Tk,mkdirSync as mA,readFileSync as Dk,writeFileSync as fA}from"node:fs";import{homedir as gA}from"node:os";import Mk from"node:path";var Ur=Mk.join(gA(),".kynver",".env");function Su(e){let r=new Map;for(let t of e.split(/\r?\n/)){let n=t.trim();if(!n||n.startsWith("#"))continue;let o=n.indexOf("=");if(o<=0)continue;let s=n.slice(0,o).trim(),i=n.slice(o+1).trim();(i.startsWith('"')&&i.endsWith('"')||i.startsWith("'")&&i.endsWith("'"))&&(i=i.slice(1,-1)),r.set(s,i)}return r}function hA(e,r=`# Managed by kynver cron install \u2014 safe to edit; re-run install to merge keys.
 `){let t=[r.trimEnd(),""];for(let[n,o]of[...e.entries()].sort(([s],[i])=>s.localeCompare(i))){let s=o.includes(" ")||o.includes("#")||o.includes('"')?`"${o.replace(/\\/g,"\\\\").replace(/"/g,'\\"')}"`:o;t.push(`${n}=${s}`)}return t.push(""),t.join(`
-`)}function Di(e=Ar){return Vh(e)?Zc(Gh(e,"utf8")):new Map}function Jh(e,r={}){let t=r.filePath??Ar,n=Vh(t)?Gh(t,"utf8"):"",o=Zc(n),s=[],i=[];for(let u of r.removeKeys??[])o.delete(u)&&i.push(u);for(let[u,d]of Object.entries(e)){if(d===void 0)continue;let f=o.get(u);o.set(u,d),f!==d&&s.push(u)}let a=Zc(n),l=a.size!==o.size;if(!l){for(let[u,d]of o)if(a.get(u)!==d){l=!0;break}}let c=mP(o);return l&&(uP(Yh.dirname(t),{recursive:!0}),dP(t,c,{mode:384})),{path:t,changed:l,keysWritten:s,keysRemoved:i}}var Ir="watchdog:board-sweep",hP="*/5 * * * *",kP=["Set KYNVER_SCHEDULER_PROVIDER=kynver-cron on the hosted Kynver deployment (Vercel).","Set KYNVER_CRON_SECRET to the same value written to ~/.kynver/.env by this installer.","Unset KYNVER_CRON_STORE_PATH on Vercel \u2014 the connected box owns the local store.","Keep QSTASH_TOKEN only if other non-watchdog schedules still use QStash (analyst/market jobs)."];function qh(e){let r=e.storePath?.trim()||Pr(),t=e.envFilePath?.trim()||Ar,n=gP.join(fP(),".kynver","config.json"),o=`/api/agent-os/by-id/${e.agentOsId}/scheduler/fire`,s=[];e.apiBaseUrl?.trim()||s.push("apiBaseUrl \u2014 run `kynver setup --api-base-url \u2026`"),e.agentOsId?.trim()||s.push("agentOsId \u2014 run `kynver setup --agent-os-id \u2026`");let i={KYNVER_API_URL:e.apiBaseUrl,KYNVER_CRON_SECRET:e.cronSecret,KYNVER_CRON_STORE_PATH:r,KYNVER_CRON_TICK_ENABLED:"1"},a=["OPENCLAW_CRON_STORE_PATH","OPENCLAW_CRON_SECRET","OPENCLAW_CRON_FIRE_BASE_URL"],l={deploymentSchedulerProvider:"kynver-cron",apiBaseUrl:e.apiBaseUrl,agentOsId:e.agentOsId,...e.defaultDaemonRunId?{defaultDaemonRunId:e.defaultDaemonRunId}:{}};return{envFilePath:t,configPath:n,storePath:r,envUpdates:i,envRemovals:a,configUpdates:l,deploymentSteps:kP,prerequisites:s,systemdSupported:process.platform==="linux",watchdogSpec:{kind:"watchdog",cron:hP,dedupeKey:Ir,callbackPath:o}}}async function sn(e){let r=e.envFilePath??Ar,t=[],n=mr(),o=await Ti(n),s=Di(r);t.push({id:"config_agent_os",ok:!!e.config.agentOsId?.trim(),summary:e.config.agentOsId?`agentOsId configured (${e.config.agentOsId})`:"agentOsId missing in ~/.kynver/config.json",remediation:"Run `kynver setup --agent-os-id <id>`."}),t.push({id:"config_api_base",ok:!!(e.config.apiBaseUrl?.trim()||n.fireBaseUrl),summary:n.fireBaseUrl?`fire base URL resolved (${n.fireBaseUrl})`:"KYNVER_API_URL / apiBaseUrl not configured",remediation:"Run `kynver setup --api-base-url https://\u2026`."}),t.push({id:"deployment_provider",ok:e.config.deploymentSchedulerProvider==="kynver-cron",summary:`deploymentSchedulerProvider=${e.config.deploymentSchedulerProvider??"(unset)"}`,remediation:'Run `kynver cron install` or set deploymentSchedulerProvider to "kynver-cron".'}),t.push({id:"cron_secret",ok:!!n.secret,summary:n.secret?"KYNVER_CRON_SECRET present":"KYNVER_CRON_SECRET missing",remediation:"Run `kynver cron install` to generate and persist the shared secret."}),t.push({id:"env_file",ok:Mi(r)&&!!s.get("KYNVER_CRON_SECRET"),summary:Mi(r)?`~/.kynver/.env present (${s.size} keys)`:"~/.kynver/.env missing",remediation:"Run `kynver cron install` to write ~/.kynver/.env."}),t.push({id:"cron_store",ok:Mi(n.storePath),summary:Mi(n.storePath)?`cron store present (${n.storePath})`:`cron store missing (${n.storePath})`,remediation:"Run `kynver cron install` to initialize the local store."});let a=(await lt(n.storePath).catch(()=>[])).find(u=>u.spec.dedupeKey===Ir);t.push({id:"watchdog_local",ok:!!a,summary:a?`watchdog entry in local store (${a.providerScheduleId})`:"watchdog entry not mirrored in local cron store",remediation:"Run `kynver cron install` (with API access) to register and mirror watchdog."}),t.push({id:"daemon_primary",ok:o.daemonPrimary,summary:o.daemonPrimary?"cron tick enabled with credentials (daemon-primary)":`cron primary=${o.primary}; tickEnabled=${o.env.tickEnabled}`,remediation:"Ensure KYNVER_CRON_TICK_ENABLED=1 and run `kynver daemon` (or enable the systemd user unit)."});let l=s.has("OPENCLAW_CRON_STORE_PATH")||s.has("OPENCLAW_CRON_SECRET")||s.has("OPENCLAW_CRON_FIRE_BASE_URL");return t.push({id:"legacy_openclaw_env",ok:!l,summary:l?"legacy OPENCLAW_CRON_* keys still present in ~/.kynver/.env":"no legacy OPENCLAW_CRON_* keys in env file",remediation:"Re-run `kynver cron install` to retire legacy aliases."}),{ok:t.every(u=>u.ok),checks:t}}O();nr();w();import{existsSync as uk}from"node:fs";import{createHash as yP}from"node:crypto";function zh(e){let r=JSON.stringify({cb:e.callbackPath,cron:e.cron??null,runAt:e.runAt??null,kind:e.kind,target:e.target,dedupeKey:e.dedupeKey??null});return`kc-cron:${yP("sha1").update(r).digest("hex").slice(0,16)}`}async function eu(e,r,t={}){return fetch(e,{...t,headers:{"Content-Type":"application/json",Authorization:`Bearer ${r}`,...t.headers}})}async function Xh(e,r,t,n={}){let o=new URLSearchParams(n),s=`${e}/api/agent-os/by-id/${encodeURIComponent(r)}/scheduler/jobs?${o}`,i=await eu(s,t),a=await i.text(),l=null;try{l=JSON.parse(a)}catch{l=null}if(!i.ok)throw new Error(`list scheduler jobs failed (${i.status}): ${l?.error??a.slice(0,200)}`);return l?.items??[]}async function Qh(e,r,t,n,o={}){let s=`${e}/api/agent-os/by-id/${encodeURIComponent(r)}/scheduler/watchdog/ensure`,i={};n&&(i.cron=n),o.requireProvider&&(i.requireProvider=o.requireProvider);let a=await eu(s,t,{method:"POST",body:JSON.stringify(i)}),l=await a.text(),c=null;try{c=JSON.parse(l)}catch{c=null}if(!a.ok||!c?.job)throw new Error(`ensure watchdog failed (${a.status}): ${c?.error??l.slice(0,200)}`);return{job:c.job,route:c.route??`/api/agent-os/by-id/${r}/scheduler/fire`,dedupeKey:c.dedupeKey??Ir,requestedCron:c.requestedCron??n??"*/5 * * * *",selectedProvider:c.selectedProvider??c.job.provider??null}}async function Zh(e,r,t,n){let o=`${e}/api/agent-os/by-id/${encodeURIComponent(r)}/scheduler/jobs/${encodeURIComponent(t)}/cancel`,s=await eu(o,n,{method:"POST",body:"{}"});if(!s.ok){let i=await s.text();throw new Error(`cancel job ${t} failed (${s.status}): ${i.slice(0,200)}`)}}function ek(e,r,t=Ir){return{kind:"watchdog",scheduleKind:"cron",cron:r,callbackPath:`/api/agent-os/by-id/${e}/scheduler/fire`,payload:{source:"agent-os.watchdog-schedule",agentOsId:e},target:{agentOsId:e},description:"Watchdog board sweep (repair loop)",dedupeKey:t}}function rk(e){return e.filter(r=>r.kind==="watchdog"&&r.dedupeKey===Ir&&r.provider==="qstash"&&r.status!=="cancelled")}function RP(e){return e.find(r=>r.kind==="watchdog"&&r.dedupeKey===Ir&&r.provider==="kynver-cron"&&r.status!=="cancelled")}function tk(e){return RP(e)?{allowed:!0}:{allowed:!1,reason:"Cannot cancel QStash watchdog until hosted KYNVER_SCHEDULER_PROVIDER=kynver-cron is live and a kynver-cron watchdog row exists. Set Vercel env, redeploy, re-run `kynver cron install`, then `--confirm-qstash-removal`."}}import{randomBytes as vP}from"node:crypto";function bP(){return vP(32).toString("base64url")}function nk(e=Ar){let r=jc();if(r)return{secret:r,generated:!1,source:"env"};let n=Di(e).get("KYNVER_CRON_SECRET")?.trim();return n?{secret:n,generated:!1,source:"env-file"}:{secret:bP(),generated:!0,source:"generated"}}import{realpathSync as SP}from"node:fs";function Ui(e=process.argv[1]){let r=process.env.KYNVER_BIN?.trim();if(r)return r;let t=e?.trim();if(!t)return"kynver";try{return SP.native(t)}catch{return t}}function ok(e){return/\s/.test(e)?`"${e.replace(/"/g,'\\"')}"`:e}import{existsSync as CP,mkdirSync as _P,writeFileSync as xP}from"node:fs";import{homedir as EP}from"node:os";import ak from"node:path";import{spawnSync as ik}from"node:child_process";import{spawnSync as wP}from"node:child_process";var ru="1.5G";var bo;function an(){return process.env.KYNVER_BUILD_SKIP_SYSTEMD==="1"||process.env.KYNVER_BUILD_SKIP_SYSTEMD==="true"?!1:bo!==void 0?bo:process.platform!=="linux"?(bo=!1,!1):(bo=wP("systemd-run",["--version"],{encoding:"utf8",stdio:["ignore","ignore","pipe"]}).status===0,bo)}function Li(e){let r=e.memoryMax??process.env.KYNVER_BUILD_SYSTEMD_MEMORY_MAX??ru,t=e.memorySwapMax??process.env.KYNVER_BUILD_SYSTEMD_MEMORY_SWAP_MAX??"2G",n=["systemd-run","--scope","--collect","-p",`MemoryMax=${r}`,"-p",`MemorySwapMax=${t}`];return e.cwd&&n.push("--working-directory",e.cwd),n.push("--",...e.command),n}var tu="kynver-cron-daemon.service";function PP(){return ak.join(EP(),".config","systemd","user")}function AP(e){let r=ok(e.kynverBin?.trim()||Ui());return["[Unit]","Description=Kynver AgentOS daemon (pipeline + cron tick)","After=network-online.target","","[Service]","Type=simple",`EnvironmentFile=${e.envFilePath}`,`ExecStart=${r} daemon --run ${e.runId} --agent-os-id ${e.agentOsId} --execute`,"Restart=on-failure","RestartSec=10","","[Install]","WantedBy=default.target",""].join(`
-`)}function lk(e,r){if(!an())return{supported:!1,unitPath:null,written:!1,enabled:!1,started:!1,note:process.platform==="linux"?"systemd-run not available \u2014 install user service manually or run `kynver daemon` under your supervisor.":"systemd user units are only supported on Linux; use `kynver daemon` manually on macOS/Windows."};let t=PP(),n=ak.join(t,tu),o=AP(e);if(!r)return{supported:!0,unitPath:n,written:!1,enabled:!1,started:!1,note:"Dry-run \u2014 pass --execute to write and enable the user unit."};_P(t,{recursive:!0});let s=CP(n);xP(n,o,"utf8");let i=ik("systemctl",["--user","daemon-reload"],{encoding:"utf8"});if(i.status!==0)return{supported:!0,unitPath:n,written:!0,enabled:!1,started:!1,note:`Wrote ${n} but systemctl --user daemon-reload failed: ${i.stderr||i.stdout}`};let a=ik("systemctl",["--user","enable","--now",tu],{encoding:"utf8"});return{supported:!0,unitPath:n,written:!s||!0,enabled:a.status===0,started:a.status===0,note:a.status===0?`Enabled and started ${tu}`:`Wrote ${n} but enable failed: ${a.stderr||a.stdout}`}}L();function ck(e,r){if(r?.trim())return r.trim();if(e.defaultDaemonRunId?.trim())return e.defaultDaemonRunId.trim();let t=oe().runsDir;return uk(t)?ne().sort((o,s)=>Date.parse(s.createdAt)-Date.parse(o.createdAt))[0]?.id??null:null}async function Bi(e={}){let r=e.execute!==!1,t=v(),n=tr(e.apiBaseUrl?.trim()||t.apiBaseUrl?.trim()||process.env.KYNVER_API_URL?.trim()||""),o=e.agentOsId?.trim()||t.agentOsId?.trim()||process.env.KYNVER_AGENT_OS_ID?.trim()||"",s=nk(),i=qh({config:t,apiBaseUrl:n,agentOsId:o,cronSecret:s.secret,defaultDaemonRunId:e.runId?.trim()||t.defaultDaemonRunId,installSystemd:e.installSystemd===!0}),a=[...i.prerequisites],l={ok:!1,dryRun:!r,plan:i,secretGenerated:s.generated,configPath:Y(i.configPath),storeInitialized:!1,blockers:a};if(a.length)return l;if(r){let c=Jh(i.envUpdates,{filePath:i.envFilePath,removeKeys:i.envRemovals});l.envFile={path:Y(c.path),changed:c.changed,keysWritten:c.keysWritten};let u={...t,...i.configUpdates},d=ck(u,e.runId);d&&(u.defaultDaemonRunId=d),Ve(u),process.env.KYNVER_API_URL=n,process.env.KYNVER_CRON_SECRET=s.secret,process.env.KYNVER_CRON_STORE_PATH=i.storePath,process.env.KYNVER_CRON_TICK_ENABLED="1";let f=await oh(i.storePath);l.storeInitialized=f.created||uk(i.storePath);let m=ee();if(m)try{let p=await Vr(o,{baseUrl:n,apiKey:m});jr(o,p)}catch{}if(!e.skipWatchdog)if(!m)l.watchdog={error:"KYNVER_API_KEY required to register watchdog on server"},a.push("login \u2014 run `kynver login --api-key \u2026` to register watchdog remotely");else try{let p=await Qh(n,o,m,void 0,{requireProvider:"kynver-cron"}),g=ek(o,p.requestedCron,p.dedupeKey),k={providerScheduleId:zh(g),spec:g,registeredAt:new Date().toISOString(),paused:!1};await nh(k,i.storePath),l.watchdog={remoteJobId:p.job.id,provider:p.selectedProvider??p.job.provider,localProviderScheduleId:k.providerScheduleId};let h=await Xh(n,o,m),S=rk(h),A=["Phase 1 (local): `kynver cron install` writes box env/store and may fail remote watchdog until Vercel cutover.","Phase 2 (hosted): set KYNVER_SCHEDULER_PROVIDER=kynver-cron + KYNVER_CRON_SECRET on Vercel, redeploy, re-run install.","Phase 3 (cleanup): `kynver cron install --confirm-qstash-removal` after a kynver-cron watchdog row exists.","Analyst/market QStash schedules are never touched by this installer."],W=[];if(S.length)if(e.confirmQstashRemoval){let E=tk(h);if(!E.allowed)a.push(E.reason);else for(let b of S)await Zh(n,o,b.id,m),W.push(b.id)}else a.push(`${S.length} QStash watchdog job(s) still active \u2014 complete Vercel cutover (KYNVER_SCHEDULER_PROVIDER=kynver-cron + KYNVER_CRON_SECRET), re-run install, then --confirm-qstash-removal`);l.qstashWatchdog={found:S.map(E=>({id:E.id,provider:E.provider,status:E.status})),removed:W,manualSteps:A}}catch(p){l.watchdog={error:p.message},a.push(`watchdog registration failed: ${p.message}`)}if(e.installSystemd){let p=ck({...t,...i.configUpdates},e.runId);if(!p)l.systemd={supported:i.systemdSupported,unitPath:null,written:!1,enabled:!1,started:!1,note:"No harness run found \u2014 run `kynver run create` first or pass --run <runId>."},a.push("harness run \u2014 create a run before installing systemd unit");else{try{U(p)}catch{a.push(`harness run ${p} not found`)}l.systemd=lk({envFilePath:i.envFilePath,agentOsId:o,runId:p,kynverBin:Ui()},r)}}if(!e.skipTestFire&&a.length===0){let p=await en({agentOsIdFilter:o});l.testFire={fired:p.fired,errors:p.errors},p.errors>0&&a.push(`test fire reported ${p.errors} error(s) \u2014 check server KYNVER_CRON_SECRET matches`)}else e.skipTestFire&&(l.testFire={fired:0,errors:0,skipped:!0});l.verify=await sn({config:v(),envFilePath:i.envFilePath}),l.blockers=a,l.ok=a.length===0&&(l.verify?.ok??!1)}else l.ok=a.length===0;return l}var IP=["deployment_provider","cron_secret","env_file","cron_store"];function dk(e){let r=e?.trim().toLowerCase();if(r==="qstash"||r==="kynver-cron"||r==="openclaw-cron")return r;if(r==="openclaw")return"openclaw-cron"}function OP(e){let r=dk(process.env.KYNVER_SCHEDULER_PROVIDER);if(r==="qstash"||r==="openclaw-cron")return!1;if(r==="kynver-cron")return!0;let t=dk(e.deploymentSchedulerProvider);return t==="qstash"||t==="openclaw-cron"?!1:t==="kynver-cron"?!0:!!(e.agentOsId?.trim()&&e.apiBaseUrl?.trim())}async function NP(e){if(!OP(e))return{expectsKynverCron:!1,ready:!0,failedChecks:[]};let t=(await sn({config:e})).checks.filter(n=>IP.includes(n.id)&&!n.ok);return{expectsKynverCron:!0,ready:t.length===0,failedChecks:t}}function TP(e){let r=["Run `kynver cron install` on this box."];for(let t of e)t.remediation&&r.push(`  \u2022 ${t.id}: ${t.remediation}`);return r}function nu(e){return e===!0||e==="true"||e==="1"||e==="yes"||e==="on"}async function pk(e){if(nu(e.args.skipCron))return{action:"skipped"};let r=await NP(e.config);if(!r.expectsKynverCron||r.ready)return{action:"ready"};console.log(""),console.log("  Local Kynver Cron is not ready \u2014 running `kynver cron install`\u2026");let t=nu(e.args.installSystemd)||nu(e.args["install-systemd"]),n=await Bi({execute:!0,skipTestFire:!0,agentOsId:e.agentOsId,runId:e.runId,installSystemd:t});if(n.ok)return console.log("  Kynver Cron configured for this box."),console.log(""),{action:"installed",installOk:!0};console.log(""),console.log("  Cron install did not fully complete (daemon will still start):");for(let o of n.blockers)console.log(`    ! ${o}`);if(n.plan.deploymentSteps.length){console.log(""),console.log("  Hosted deployment (complete on Vercel, then re-run install):");for(let o of n.plan.deploymentSteps)console.log(`    - ${o}`)}for(let o of TP(r.failedChecks))console.log(`  ${o}`);return console.log(""),{action:"guided",installOk:!1,blockers:n.blockers}}function MP(e,r){return e.filter(n=>n.repo===r&&!cr.has(n.status)).sort((n,o)=>(o.createdAt??"").localeCompare(n.createdAt??""))[0]?.id??null}async function mk(e){Zt();let r=v();(!ee()||!r.agentOsId?.trim())&&(console.log("  This machine isn't linked yet \u2014 running bootstrap first."),await _i(e),r=v());let t=(typeof e.agentOsId=="string"?e.agentOsId.trim():"")||r.agentOsId?.trim()||"";t||(console.error("No AgentOS workspace configured \u2014 run `kynver bootstrap` (or pass --agent-os-id)."),process.exit(1)),e.chatOauth===!0&&r.chatUseClaudeOauth!==!0&&(Ve({...r,chatUseClaudeOauth:!0}),r=v(),console.log("  Chat: Claude Code OAuth opt-in saved (delegated turns may use your local subscription)."));let n=(typeof e.repo=="string"?e.repo.trim():"")||r.defaultRepo?.trim()||Re()?.repo||"";n||(console.error("No repo configured \u2014 pass --repo /path/to/repo or run `kynver setup --discover-repo`."),process.exit(1));let o=typeof e.run=="string"&&e.run.trim()?e.run.trim():"";o||(o=MP(ne(),n)??"",o?console.log(`  Reusing run ${o} for ${n}.`):o=ao({...e,repo:n,name:"agent"}).runId),await pk({config:r,agentOsId:t,runId:o,args:e}),console.log(""),console.log(`  ${DP.hostname()} \u2014 agent coming online`),console.log(`    workspace: ${t}`),console.log(`    repo:      ${n}`),console.log(`    run:       ${o}`),console.log("  Ctrl-C stops the agent. (Advanced control: `kynver daemon --help`.)"),console.log("");let s={...e,run:o,agentOsId:t};if(Oi(s)){await Ni(s,UP(o,t,e));return}await vo(s)}function UP(e,r,t){let n=["daemon","--run",e,"--agent-os-id",r];return typeof t.intervalMs=="string"&&t.intervalMs.trim()&&n.push("--interval-ms",t.intervalMs.trim()),(t.execute===!1||t.execute==="false")&&n.push("--execute","false"),typeof t.stallMs=="string"&&t.stallMs.trim()&&n.push("--stall-ms",t.stallMs.trim()),n}L();L();G();import{existsSync as LP,rmSync as BP}from"node:fs";import ou from"node:path";function WP(e){let r=e.replace(/\\/g,"/").replace(/^\.\//,"").trim();if(!r||r.startsWith("/")||r.includes(".."))throw new Error(`unsafe path: ${e}`);return r}function HP(e){return typeof e!="string"||!e.trim()?[]:e.split(",").map(r=>r.trim()).filter(Boolean)}function FP(e){let{runId:r,workerName:t}=Be(e),n=ye(r,t),o=[...HP(e.path),...Array.isArray(e.paths)?e.paths:[]];if(o.length===0)return{ok:!1,removed:[],reason:"requires at least one --path"};let s=ou.resolve(n.worktreePath),i=[];for(let c of o){let u=WP(c),d=ou.resolve(s,u);if(!d.startsWith(s+ou.sep)&&d!==s)return{ok:!1,removed:i,reason:`path escapes worktree: ${c}`};if(!LP(d))return{ok:!1,removed:i,reason:`path not found: ${c}`};BP(d,{recursive:!0,force:!0}),i.push(u)}let a=Array.isArray(n.disposableArtifactsRemoved)?n.disposableArtifactsRemoved.filter(c=>typeof c=="string"):[];n.disposableArtifactsRemoved=[...new Set([...a,...i])],V(n.runId,n);let l=T(n);return{ok:!0,removed:i,...l.changedFiles.length?{reason:"worktree still has other changes"}:{}}}function fk(e){let r=FP(e);console.log(JSON.stringify(r,null,2)),r.ok||process.exit(1)}O();import mA from"node:path";jo();var $P=/--max-old-space-size=(\d+)/;function KP(e,r){let t=Number(e);return!Number.isFinite(t)||t<=0?r:Math.floor(t)}function su(){return KP(process.env.KYNVER_NODE_OLD_SPACE_SIZE_MB,1024)}function Wi(e=process.env){let r={...e};if(process.env.KYNVER_NODE_OLD_SPACE_SIZE_MB==="0")return r;let t=r.NODE_OPTIONS??"";if($P.test(t))return r;let o=`--max-old-space-size=${su()}`;return r.NODE_OPTIONS=t.trim()?`${t.trim()} ${o}`:o,r}function ln(e=su()){return`--max-old-space-size=${e}`}O();import{spawnSync as jP}from"node:child_process";jo();function Hi(e,r){let t=Number(e);return!Number.isFinite(t)||t<=0?r:Math.floor(t)}function hk(e=v()){let r=process.env.KYNVER_BUILD_MEM_BUDGET_BYTES?Hi(process.env.KYNVER_BUILD_MEM_BUDGET_BYTES,1610612736):void 0,t=process.env.KYNVER_BUILD_MEM_RESERVE_BYTES?Hi(process.env.KYNVER_BUILD_MEM_RESERVE_BYTES,2147483648):void 0;return{perBuildBudgetBytes:r??Hi(e.perWorkerMemBytes,1610612736),reserveBytes:t??Hi(e.memReserveBytes,2147483648)}}var Fi=0;function lu(){Fi+=1}function cu(){Fi=Math.max(0,Fi-1)}function dt(e={}){let r={...hk(),...e},t=e.memAvailableBytes??Ct(),n=r.perBuildBudgetBytes+r.reserveBytes,o=t>=n;return{admitted:o,memAvailableBytes:t,requiredBytes:n,activeBuilds:Fi,reason:o?null:`insufficient memory: need ${n} bytes available (budget ${r.perBuildBudgetBytes} + reserve ${r.reserveBytes}), have ${t}`}}function VP(e){e<=0||jP(process.execPath,["-e",`const d=Date.now()+${Math.floor(e)};while(Date.now()<d);`],{stdio:"ignore"})}function uu(e,r=2e3,t={}){let n=Date.now()+Math.max(0,e),o=dt({...t,memAvailableBytes:t.memAvailableBytes?.()});for(;!o.admitted&&Date.now()<n;)VP(Math.min(r,n-Date.now())),o=dt({...t,memAvailableBytes:t.memAvailableBytes?.()});return o}import{spawnSync as dA}from"node:child_process";w();import{closeSync as qP,existsSync as du,mkdirSync as zP,openSync as XP,readdirSync as yk,readFileSync as QP,unlinkSync as pu,writeFileSync as ZP}from"node:fs";import mu from"node:path";import{mkdirSync as GP}from"node:fs";import{tmpdir as YP}from"node:os";import $i from"node:path";function JP(){return!!(process.env.VERCEL||process.env.VERCEL_ENV||process.env.AWS_LAMBDA_FUNCTION_NAME||process.env.AWS_EXECUTION_ENV)}function kk(){let e=process.env.KYNVER_HEAVY_VERIFICATION_STATE_ROOT;return e?$i.resolve(e):JP()?$i.join(YP(),"kynver","state","heavy-verification"):$i.join(Vs(),"heavy-verification")}function So(){return $i.join(kk(),"slots")}function cn(){let e=So();return GP(e,{recursive:!0}),e}var dn=120*6e4,Ki=1;function eA(e,r){let t=Number(e);return!Number.isFinite(t)||t<=0?r:Math.floor(t)}function pn(){let e=process.env.KYNVER_HEAVY_VERIFICATION_SKIP?.trim().toLowerCase();return e==="1"||e==="true"||e==="yes"}function un(){let e=process.env.KYNVER_HEAVY_VERIFICATION_MAX_CONCURRENT;return e?eA(e,Ki):Ki}function rA(e){return`slot-${e}`}function Rk(e,r=So()){return mu.join(r,`${e}.json`)}function fu(e){if(!du(e))return null;try{let r=JSON.parse(QP(e,"utf8"));if(typeof r.slotId=="string"&&typeof r.pid=="number"&&typeof r.acquiredAt=="string"&&typeof r.command=="string")return r}catch{return null}return null}function ji(e,r=dn){if(!e||!$(e.pid))return!0;let t=Date.parse(e.acquiredAt);return Number.isNaN(t)?!0:Date.now()-t>r}function tA(e,r){let t=fu(e);if(ji(t,r))try{pu(e)}catch{}}function nA(e){return zP(e,{recursive:!0}),e}function Co(e={}){let r=nA(e.slotsDir??cn()),t=e.staleMs??dn,n=0;for(let o of yk(r)){if(!o.endsWith(".json"))continue;let s=mu.join(r,o),i=du(s);tA(s,t),i&&!du(s)&&(n+=1)}return n}function gu(e={}){let r=e.slotsDir??cn(),t=e.staleMs??dn;Co({slotsDir:r,staleMs:t});let n=[];for(let o of yk(r)){if(!o.endsWith(".json"))continue;let s=fu(mu.join(r,o));s&&!ji(s,t)&&n.push(s)}return n}function wo(e={}){return gu(e).length}function pt(e,r={}){if(pn())return{admitted:!0,slotId:null,activeSlots:0,maxSlots:un(),reason:null};let t=r.slotsDir??cn(),n=r.staleMs??dn,o=r.maxSlots??un();Co({slotsDir:t,staleMs:n});for(let i=0;i<o;i+=1){let a=rA(i),l=Rk(a,t),c=fu(l);if(c&&ji(c,n))try{pu(l)}catch{}else if(c&&!ji(c,n))continue;let u={slotId:a,pid:process.pid,acquiredAt:new Date().toISOString(),command:e};try{let d=XP(l,"wx");ZP(d,JSON.stringify(u,null,2),"utf8"),qP(d);let f=wo({slotsDir:t,staleMs:n});return{admitted:!0,slotId:a,activeSlots:f,maxSlots:o,reason:null}}catch(d){if(d.code==="EEXIST")continue;throw d}}let s=wo({slotsDir:t,staleMs:n});return{admitted:!1,slotId:null,activeSlots:s,maxSlots:o,reason:`heavy verification at capacity (${s}/${o} slots)`}}function mn(e,r={}){if(!e)return;let t=Rk(e,r.slotsDir??So());try{pu(t)}catch{}}function fn(e,r={}){if(pn())return{admitted:!0,slotId:null,activeSlots:0,maxSlots:un(),reason:null};let t=r.slotsDir??cn(),n=r.staleMs??dn,o=r.maxSlots??un();Co({slotsDir:t,staleMs:n});let s=wo({slotsDir:t,staleMs:n}),i=s<o;return{admitted:i,slotId:null,activeSlots:s,maxSlots:o,reason:i?null:`heavy verification at capacity (${s}/${o} slots); waiting for ${e}`}}import{spawnSync as oA}from"node:child_process";function sA(e){e<=0||oA(process.execPath,["-e",`const d=Date.now()+${Math.floor(e)};while(Date.now()<d);`],{stdio:"ignore"})}function Vi(e,r,t=2e3,n={}){let o=Date.now()+Math.max(0,r),s=pt(e,n);for(;!s.admitted&&Date.now()<o;)sA(Math.min(t,o-Date.now())),s=pt(e,n);return s}var iA=/\b(npm run typecheck|tsc\b[^|&;]*--noEmit|node scripts\/verify-pr-local\.mjs|kynver (harness )?verify)\b/i,aA=/\b(npm run build\b|next build\b)\b/i,lA=/\b(vercel (build|deploy|--prod))\b/i,cA=/\b(openai|anthropic|perplexity|voyage)\b.*\b(api|cli)\b|\b(paid|billable)[-_ ]?compute\b/i;function Gi(e){let r=e.trim();return r?cA.test(r)?{heavy:!0,commandClass:"paid_compute",reason:"paid external compute requires heavy-verification token and operator approval"}:lA.test(r)?{heavy:!0,commandClass:"vercel_verify",reason:"Vercel build/deploy verification requires heavy-verification token"}:aA.test(r)?{heavy:!0,commandClass:"full_build",reason:"full app build requires heavy-verification token"}:iA.test(r)?{heavy:!0,commandClass:"full_typecheck",reason:"full repo typecheck requires heavy-verification token"}:{heavy:!1,commandClass:"allowed",reason:null}:{heavy:!1,commandClass:"allowed",reason:null}}var _o="heavy_verification_token_required";function Yi(e,r={}){let t=Gi(e);if(!t.heavy)return{allowed:!0,outcome:"allowed",commandClass:t.commandClass,reason:"command does not require heavy-verification token",verificationGate:{...fn(e),slotId:null}};if(pn())return{allowed:!0,outcome:"heavy_verification_skipped",commandClass:t.commandClass,reason:"KYNVER_HEAVY_VERIFICATION_SKIP bypasses gate",verificationGate:{...fn(e),slotId:null}};let n=r.waitMs??0,o=n>0?Vi(e,n,r.pollMs):pt(e);return o.admitted?{allowed:!0,outcome:"allowed",commandClass:t.commandClass,reason:t.reason??"heavy-verification token acquired",verificationGate:o}:{allowed:!1,outcome:_o,commandClass:t.commandClass,reason:t.reason??o.reason??_o,verificationGate:o}}ke();import hu from"node:path";function uA(e){let r=or(de()),t=hu.relative(r,hu.resolve(e));return t.length>0&&!t.startsWith("..")&&!hu.isAbsolute(t)}function vk(e){return uA(e)?(typeof process.getuid=="function"?process.getuid():null)===0?{ok:!1,reason:"Refusing build/install as root inside a harness worktree \u2014 generated caches become root-owned and block daemon cleanup. Run kynver daemon and workers as the harness owner (never sudo kynver)."}:{ok:!0}:{ok:!0}}function pA(e){let r=[];for(let[t,n]of Object.entries(e))n!==void 0&&r.push(`${t}=${n}`);return r}function bk(e,r){let t=dA(e[0],e.slice(1),{cwd:r.cwd,env:r.env,encoding:"utf8",stdio:["ignore","pipe","pipe"],shell:r.shell,timeout:r.timeoutMs});return{exitCode:t.status??1,stdout:(t.stdout??"").trim(),stderr:(t.stderr??"").trim()}}function Ji(e){let r=e.waitForAdmissionMs??6e5,t=Yi(e.command,{waitMs:r}),n=t.verificationGate;if(!t.allowed)return{ok:!1,exitCode:1,stdout:"",stderr:t.reason,admitted:!1,wrappedWithSystemd:!1,nodeOptionsFlag:ln(),admission:dt(),verificationGate:n,gateOutcome:t.outcome,command:e.command};let o=n.slotId,s=r>0?uu(r):dt();if(!s.admitted)return mn(o),{ok:!1,exitCode:1,stdout:"",stderr:s.reason??"build admission denied",admitted:!1,wrappedWithSystemd:!1,nodeOptionsFlag:ln(),admission:s,verificationGate:n,command:e.command};let i=vk(e.cwd);if(!i.ok)return mn(o),{ok:!1,exitCode:1,stdout:"",stderr:i.reason,admitted:!0,wrappedWithSystemd:!1,nodeOptionsFlag:ln(),admission:s,verificationGate:n,command:e.command};let a=Wi({...process.env,...e.env}),l=ln(),c=an();lu();try{let u;if(c){let d=Li({cwd:e.cwd,command:["/usr/bin/env",...pA(a),"/bin/bash","-lc",e.command]});u=bk(d,{cwd:e.cwd,env:a,timeoutMs:e.timeoutMs})}else u=bk([e.command],{cwd:e.cwd,env:a,shell:!0,timeoutMs:e.timeoutMs});return{ok:u.exitCode===0,exitCode:u.exitCode,stdout:u.stdout,stderr:u.stderr,admitted:!0,wrappedWithSystemd:c,nodeOptionsFlag:l,admission:s,verificationGate:n,gateOutcome:t.outcome,command:e.command}}finally{cu(),mn(o)}}var qi=["npm run typecheck","npm run test"];function xo(e,r=qi,t={}){let n=[],o=!0;for(let s of r){let i=Ji({cwd:e,command:s,waitForAdmissionMs:t.waitForAdmissionMs,timeoutMs:t.timeoutMs});n.push({command:s,result:i}),i.ok||(o=!1)}return{passed:o,steps:n}}w();function Sk(e){let r=e.indexOf(":");if(r<=0)throw new Error(`invalid --evidence ${e} (expected type:value)`);return{type:e.slice(0,r),value:e.slice(r+1)}}async function wk(e){let r=N(e.plan?String(e.plan):void 0,"plan"),t=(e.agentOsId?String(e.agentOsId):v().agentOsId)||"";t||(console.error("requires --agent-os-id or agentOsId in ~/.kynver/config.json"),process.exit(1));let n=N(e.role?String(e.role):void 0,"role"),o=N(e.status?String(e.status):void 0,"status"),s=[],i=e.evidence;if(Array.isArray(i))for(let A of i)s.push(Sk(String(A)));else typeof i=="string"&&s.push(Sk(i));let a=B(e.baseUrl?String(e.baseUrl):void 0),l=await K(e.secret?String(e.secret):void 0,t,{baseUrl:a}),c=`${a}/api/agent-os/by-id/${encodeURIComponent(t)}/plans/${encodeURIComponent(r)}/progress-events`,u=v(),f=`provider:${Hn(u.workerProvider,xe)}`,p=(e.proposed===!0||e.proposed==="true"?!0:e.proposed===!1||e.proposed==="false"?!1:void 0)??(o!=="done"&&(n==="implementer"||n==="repair_implementer")),g={rowKey:e.row?String(e.row):void 0,rowId:e.rowId?String(e.rowId):void 0,taskId:e.task?String(e.task):void 0,reviewTaskId:e.reviewTask?String(e.reviewTask):void 0,roleLane:n,status:o,note:e.note?String(e.note):void 0,remainingWork:e.remaining?String(e.remaining):void 0,evidence:s.length?s:void 0,executorRef:e.executorRef?String(e.executorRef):f};p!==void 0&&(g.proposed=p);let k=await fetch(c,{method:"POST",headers:Le(l),body:JSON.stringify(g)}),h=await k.text(),S=null;try{S=JSON.parse(h)}catch{S=h}k.ok||(console.error(JSON.stringify({httpStatus:k.status,response:S},null,2)),process.exit(1)),console.log(JSON.stringify(S,null,2))}function fA(e){let r=N(e.worktree?String(e.worktree):void 0,"worktree"),t=mA.resolve(r),n=xo(t),o=e.json===!0||e.json==="true",s={passed:n.passed,worktree:t,steps:n.steps};console.log(o?JSON.stringify(s,null,2):n.passed?"local plan verify passed":"local plan verify failed"),n.passed||process.exit(1)}async function Ck(e){let r=N(e.plan?String(e.plan):void 0,"plan");if(e.local===!0||e.local==="true"){fA(e);return}let n=v().agentOsSlug;n||(console.error("requires agentOsSlug in ~/.kynver/config.json for verify (session route)"),process.exit(1));let o=B(e.baseUrl?String(e.baseUrl):void 0),s=process.env.KYNVER_API_KEY,i={"Content-Type":"application/json"};s&&(i.Authorization=`Bearer ${s}`);let a=`${o}/api/agent-os/${encodeURIComponent(n)}/plans/${encodeURIComponent(r)}/verify`,l=await fetch(a,{method:"POST",headers:i,body:JSON.stringify({worktreePath:e.worktree?String(e.worktree):void 0,taskId:e.task?String(e.task):void 0,humanOverride:e.humanOverride===!0||e.humanOverride==="true"})}),c=await l.text(),u=null;try{u=JSON.parse(c)}catch{u=c}l.ok||(console.error(JSON.stringify({httpStatus:l.status,response:u},null,2)),process.exit(1)),console.log(JSON.stringify(u,null,2))}import gA from"node:path";w();function _k(e){let r=gA.resolve(N(e.worktree?String(e.worktree):void 0,"worktree")),t=e.json===!0||e.json==="true"||e.emitJson===!0||e.emitJson==="true",n=[],o=e.command;if(Array.isArray(o))for(let a of o)n.push(String(a));else typeof o=="string"&&n.push(o);let s=xo(r,n.length?n:qi,{waitForAdmissionMs:e.waitForAdmissionMs?Number(e.waitForAdmissionMs):void 0,timeoutMs:e.timeoutMs?Number(e.timeoutMs):void 0}),i={passed:s.passed,worktree:r,steps:s.steps.map(a=>({command:a.command,ok:a.result.ok,exitCode:a.result.exitCode,admitted:a.result.admitted,wrappedWithSystemd:a.result.wrappedWithSystemd,nodeOptionsFlag:a.result.nodeOptionsFlag,admission:a.result.admission,verificationGate:a.result.verificationGate,stderr:a.result.stderr.slice(0,4e3)}))};if(t)console.log(JSON.stringify(i,null,2));else{console.log(s.passed?"harness verify passed":"harness verify failed");for(let a of i.steps)console.log(`  ${a.ok?"\u2713":"\u2717"} ${a.command} (exit ${a.exitCode}, systemd=${a.wrappedWithSystemd})`),!a.ok&&a.stderr&&console.log(`    ${a.stderr.split(`
-`)[0]}`)}process.exit(s.passed?0:1)}O();import{readFileSync as hA}from"node:fs";w();var kA=["create","add_version","update_metadata"],yA=["approval_guard","auth","network","server","tool_interruption"];function RA(e){let r=e.bodyFile?String(e.bodyFile):void 0;if(r)return{body:hA(r,"utf8"),bodyPathHint:r};let t=e.body?String(e.body):void 0;if(t)return{body:t};throw new Error("requires --body-file PATH or --body TEXT")}async function xk(e){let r=N(e.operation?String(e.operation):void 0,"operation");if(!kA.includes(r))throw new Error(`invalid --operation ${r}`);let t=r,n=v(),o=N(e.slug?String(e.slug):n.agentOsSlug,"slug (or agentOsSlug in ~/.kynver/config.json)"),s=N(e.title?String(e.title):void 0,"title"),{body:i,bodyPathHint:a}=RA(e);a&&Qn(a)&&console.warn(JSON.stringify({warning:"/tmp-only body path is not durable; AgentOS persistence requires outbox or successful API write",bodyPathHint:a}));let l={operation:t,agentOsSlug:o,title:s,body:i,bodyPathHint:a,summary:e.summary?String(e.summary):void 0,planId:e.plan?String(e.plan):void 0,planSlug:e.planSlug?String(e.planSlug):void 0,changeSummary:e.changeSummary?String(e.changeSummary):void 0,author:e.author?String(e.author):void 0,model:e.model?String(e.model):void 0,maxRetries:e.maxRetries?Number(e.maxRetries):void 0,immediateFailure:vA(e)},c=await jt(l);console.log(JSON.stringify(c,null,2)),c.userStatus==="failed and needs action"&&process.exit(1)}function vA(e){let r=e.failureKind?String(e.failureKind):void 0;if(!r)return;if(!yA.includes(r))throw new Error(`invalid --failure-kind ${r}`);let t=e.failureMessage?String(e.failureMessage):`immediate failure (${r})`;return{kind:r,message:t}}async function Ek(){let e=tt();console.log(JSON.stringify({count:e.length,items:e},null,2))}async function Pk(e){let r=e.max?Number(e.max):void 0,t=e.id?String(e.id):void 0,n=await Ys({max:r,outboxId:t});console.log(JSON.stringify(n,null,2)),n.failed>0&&process.exit(1)}function Ak(e){let r=e.execute===!0||e.execute==="true",t=e.skipFinalize===!0||e.skipFinalize==="true",n=e.accountBytes===!0||e.accountBytes==="true",o=e.compact===!0||e.compact==="true",s=e.nodeModulesAgeMs,i=s!=null&&s!=="",a=i?Number(s):void 0,l=e.worktreesAgeMs?Number(e.worktreesAgeMs):0,c=e.includeOrphans===!0||e.includeOrphans==="true",u=e.harnessRoot?String(e.harnessRoot):void 0,d=Ci({execute:r,finalizeStaleRuns:!t,accountBytes:n,scanDependencyCaches:i,nodeModulesAgeMs:a!==void 0&&Number.isFinite(a)?a:i?216e5:void 0,worktreesAgeMs:Number.isFinite(l)?l:0,includeOrphans:c,harnessRoot:u});o&&d.compactSummary?console.log(JSON.stringify(d.compactSummary,null,2)):console.log(JSON.stringify(d,null,2)),r&&d.totals.removedPaths===0&&d.actions.length===0&&(process.exitCode=0)}function Ik(e){let r=e.trim();if(!r.startsWith("{")&&!r.startsWith("["))return null;try{return JSON.parse(r)}catch{return null}}function re(e,r=2400){if(e==null)return;let n=(typeof e=="string"?e:JSON.stringify(e,null,2)).trim();if(n)return n.length<=r?n:`${n.slice(0,r-1).trimEnd()}\u2026`}function zi(e){let r=e.trim();if(!r)return null;let t=Ik(r);if(t!==null)return t;for(let n of r.split(`
-`)){let o=Ik(n);if(o!==null)return o}return null}function Xi(e){let r=[];switch(r.push(`Background auto-complete \xB7 ${e.runId} / ${e.worker}`),e.outcome){case"completed":r.push("Outcome: harness completion posted to AgentOS successfully."),r.push("AgentOS task should close or advance to review per completion routing."),r.push("Next: check Command Center \u2014 no manual complete needed unless the board still shows running.");break;case"blocked":r.push(`Outcome: worker finished but completion was blocked${e.httpStatus?` (HTTP ${e.httpStatus})`:""}.`),e.reason&&r.push(`Blocker: ${e.reason}`),r.push("Next: fix the blocker (auth, landing gate, dirty worktree) and replay completion from Command Center.");break;case"timed_out":r.push(`Outcome: monitor gave up waiting \u2014 ${e.reason??"worker did not finish in time"}.`),r.push("Next: inspect the worker process/logs; stop or unblock the worker, then retry auto-complete.");break;case"missing_link":r.push(`Outcome: cannot complete \u2014 ${e.reason??"worker missing agentOsId/taskId"}.`),r.push("Next: re-dispatch with board linkage or run `kynver worker complete` with --agent-os-id.");break;default:r.push(`Outcome: ${e.outcome}`)}return{primary:r.join(`
-`),diagnostic:re(e)}}function gn(e){let r=[],t=typeof e.monitorId=="string"?e.monitorId:void 0;if(r.push(t?`Harness monitor tick \xB7 ${e.runId} (${t})`:`Harness monitor tick \xB7 ${e.runId}`),!e.workers.length)return r.push("No workers in scope for this poll."),{primary:r.join(`
-`),diagnostic:re(e)};for(let i of e.workers){let a=i.autoComplete.eligible?"eligible for auto-complete":"not auto-completing",l=i.autoComplete.blockers.length>0?` (${i.autoComplete.blockers.slice(0,2).join("; ")})`:"";r.push(`\u2022 ${i.worker}: ${i.workerStatus}, ${i.health}${i.healthReason?` \u2014 ${i.healthReason}`:""}; ${a}${l}`),i.taskStatus&&r.push(`  Board task: ${i.taskStatus}${i.leaseOwner?` (lease: ${i.leaseOwner})`:""}`)}let n=e.autoCompleted?.filter(i=>i.outcome==="completed"&&i.ok)??[],o=e.autoCompleted?.filter(i=>!i.ok&&i.outcome!=="skipped")??[];n.length&&r.push(`Auto-completed: ${n.map(i=>i.worker).join(", ")} \u2014 AgentOS completion should be posted.`),o.length&&r.push(`Auto-complete blocked: ${o.map(i=>`${i.worker}${i.reason?` (${i.reason})`:""}`).join("; ")}`),e.leaseRenewal?.failed?.length&&r.push(`Lease renew failed for: ${e.leaseRenewal.failed.map(i=>i.worker).join(", ")}`);let s=e.workers.length>0&&e.workers.every(i=>i.autoComplete.terminalVerified)&&(e.autoCompleted?.every(i=>i.ok||i.outcome==="skipped")??!0);return r.push(s?"Next: monitor loop should stop \u2014 all workers terminal and handled.":"Next: monitor will poll again until workers are terminal-verified or max time elapses."),{primary:r.join(`
-`),diagnostic:re(e)}}function ku(e){return e!==null&&typeof e=="object"&&!Array.isArray(e)?e:null}function rr(e){return typeof e=="string"&&e.trim()?e.trim():null}function Qi(e){let r=ku(e);if(!r)return{primary:"Harness worker complete finished with no parseable result.",diagnostic:re(e)};let t=rr(r.worker)??"worker",n=rr(r.runId),o=rr(r.status)==="skipped",s=typeof r.httpStatus=="number"?r.httpStatus:null,i=ku(r.response),a=[];if(a.push(`Harness worker complete \xB7 ${t}${n?` (${n})`:""}`),o)return a.push(`Outcome: skipped \u2014 ${rr(r.reason)??"worker not finished yet"}.`),a.push("Next: wait for the worker to exit or post a finalResult, then retry complete."),{primary:a.join(`
-`),diagnostic:re(e)};let l=rr(i?.outcome),c=ku(i?.task),u=rr(c?.status),d=rr(c?.prUrl)??rr(i?.prUrl);if(s&&s>=200&&s<300)a.push("Outcome: completion callback accepted by AgentOS."),l&&a.push(`Routing: ${l.replace(/_/g," ")}`),u&&a.push(`AgentOS task status: ${u}`),d&&a.push(`PR: ${d}`),a.push("Next: check Command Center for review scheduling or blockers.");else{a.push(`Outcome: completion failed${s!=null?` (HTTP ${s})`:""}.`);let f=rr(i?.detail)??rr(i?.error);f&&a.push(`Blocker: ${f}`),a.push("Next: fix the reported blocker and replay completion from the board.")}return{primary:a.join(`
-`),diagnostic:re(e)}}function ve(e){return typeof e=="string"&&e.trim()?e.trim():null}function yu(e){return e!==null&&typeof e=="object"&&!Array.isArray(e)?e:null}function bA(e){let r=yu(e);return r?ve(r.prUrl)??ve(r.pr):null}function Eo(e){let r=yu(e);if(!r)return{primary:"Harness worker status unavailable.",diagnostic:re(e)};let t=ve(r.worker)??ve(r.name)??"worker",n=ve(r.runId),o=ve(r.status)??"unknown",s=r.alive===!0,i=yu(r.attention),a=ve(i?.state)??ve(r.attentionState),l=ve(i?.reason)??ve(r.attentionReason),c=ve(r.taskId),u=ve(r.prUrl)??bA(r.finalResult),d=ve(r.branch),f=ve(r.headCommit),m=[];return m.push(`Harness worker ${t}${n?` (${n})`:""}`),m.push(`Process: ${s?"running":"stopped"} \xB7 harness status: ${o}`),a&&m.push(l?`Attention: ${a} \u2014 ${l}`:`Attention: ${a}`),c&&m.push(`AgentOS task: ${c}`),u&&m.push(`PR: ${u}`),d&&m.push(`Branch: ${d}`),f&&m.push(`Commit: ${f.slice(0,12)}`),o==="done"||o==="exited"?m.push(u?"Outcome: worker finished \u2014 open the PR or check Command Center for review routing.":"Outcome: worker finished \u2014 check Command Center for task status and next action."):a==="blocked"||a==="needs_attention"?m.push("Next: resolve the blocker on the board or wait for the monitor to auto-complete when terminal."):s&&m.push("Next: wait for completion or poll again; background monitor will auto-complete when eligible."),{primary:m.join(`
-`),diagnostic:re(e)}}var SA="\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500 Diagnostic (JSON) \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500";function Ok(e){return e.diagnostic?.trim()?`${e.primary}
+`)}function ea(e=Ur){return Tk(e)?Su(Dk(e,"utf8")):new Map}function Uk(e,r={}){let t=r.filePath??Ur,n=Tk(t)?Dk(t,"utf8"):"",o=Su(n),s=[],i=[];for(let u of r.removeKeys??[])o.delete(u)&&i.push(u);for(let[u,d]of Object.entries(e)){if(d===void 0)continue;let f=o.get(u);o.set(u,d),f!==d&&s.push(u)}let a=Su(n),l=a.size!==o.size;if(!l){for(let[u,d]of o)if(a.get(u)!==d){l=!0;break}}let c=hA(o);return l&&(mA(Mk.dirname(t),{recursive:!0}),fA(t,c,{mode:384})),{path:t,changed:l,keysWritten:s,keysRemoved:i}}var Wr="watchdog:board-sweep",RA="*/5 * * * *",bA=["Set KYNVER_SCHEDULER_PROVIDER=kynver-cron on the hosted Kynver deployment (Vercel).","Set KYNVER_CRON_SECRET to the same value written to ~/.kynver/.env by this installer.","Unset KYNVER_CRON_STORE_PATH on Vercel \u2014 the connected box owns the local store.","Keep QSTASH_TOKEN only if other non-watchdog schedules still use QStash (analyst/market jobs)."];function Wk(e){let r=e.storePath?.trim()||Mr(),t=e.envFilePath?.trim()||Ur,n=yA.join(kA(),".kynver","config.json"),o=`/api/agent-os/by-id/${e.agentOsId}/scheduler/fire`,s=[];e.apiBaseUrl?.trim()||s.push("apiBaseUrl \u2014 run `kynver setup --api-base-url \u2026`"),e.agentOsId?.trim()||s.push("agentOsId \u2014 run `kynver setup --agent-os-id \u2026`");let i={KYNVER_API_URL:e.apiBaseUrl,KYNVER_CRON_SECRET:e.cronSecret,KYNVER_CRON_STORE_PATH:r,KYNVER_CRON_TICK_ENABLED:"1"},a=["OPENCLAW_CRON_STORE_PATH","OPENCLAW_CRON_SECRET","OPENCLAW_CRON_FIRE_BASE_URL"],l={deploymentSchedulerProvider:"kynver-cron",apiBaseUrl:e.apiBaseUrl,agentOsId:e.agentOsId,...e.defaultDaemonRunId?{defaultDaemonRunId:e.defaultDaemonRunId}:{}};return{envFilePath:t,configPath:n,storePath:r,envUpdates:i,envRemovals:a,configUpdates:l,deploymentSteps:bA,prerequisites:s,systemdSupported:process.platform==="linux",watchdogSpec:{kind:"watchdog",cron:RA,dedupeKey:Wr,callbackPath:o}}}async function yn(e){let r=e.envFilePath??Ur,t=[],n=Rr(),o=await Zi(n),s=ea(r);t.push({id:"config_agent_os",ok:!!e.config.agentOsId?.trim(),summary:e.config.agentOsId?`agentOsId configured (${e.config.agentOsId})`:"agentOsId missing in ~/.kynver/config.json",remediation:"Run `kynver setup --agent-os-id <id>`."}),t.push({id:"config_api_base",ok:!!(e.config.apiBaseUrl?.trim()||n.fireBaseUrl),summary:n.fireBaseUrl?`fire base URL resolved (${n.fireBaseUrl})`:"KYNVER_API_URL / apiBaseUrl not configured",remediation:"Run `kynver setup --api-base-url https://\u2026`."}),t.push({id:"deployment_provider",ok:e.config.deploymentSchedulerProvider==="kynver-cron",summary:`deploymentSchedulerProvider=${e.config.deploymentSchedulerProvider??"(unset)"}`,remediation:'Run `kynver cron install` or set deploymentSchedulerProvider to "kynver-cron".'}),t.push({id:"cron_secret",ok:!!n.secret,summary:n.secret?"KYNVER_CRON_SECRET present":"KYNVER_CRON_SECRET missing",remediation:"Run `kynver cron install` to generate and persist the shared secret."}),t.push({id:"env_file",ok:ra(r)&&!!s.get("KYNVER_CRON_SECRET"),summary:ra(r)?`~/.kynver/.env present (${s.size} keys)`:"~/.kynver/.env missing",remediation:"Run `kynver cron install` to write ~/.kynver/.env."}),t.push({id:"cron_store",ok:ra(n.storePath),summary:ra(n.storePath)?`cron store present (${n.storePath})`:`cron store missing (${n.storePath})`,remediation:"Run `kynver cron install` to initialize the local store."});let a=(await kt(n.storePath).catch(()=>[])).find(u=>u.spec.dedupeKey===Wr);t.push({id:"watchdog_local",ok:!!a,summary:a?`watchdog entry in local store (${a.providerScheduleId})`:"watchdog entry not mirrored in local cron store",remediation:"Run `kynver cron install` (with API access) to register and mirror watchdog."}),t.push({id:"daemon_primary",ok:o.daemonPrimary,summary:o.daemonPrimary?"cron tick enabled with credentials (daemon-primary)":`cron primary=${o.primary}; tickEnabled=${o.env.tickEnabled}`,remediation:"Ensure KYNVER_CRON_TICK_ENABLED=1 and run `kynver daemon` (or enable the systemd user unit)."});let l=s.has("OPENCLAW_CRON_STORE_PATH")||s.has("OPENCLAW_CRON_SECRET")||s.has("OPENCLAW_CRON_FIRE_BASE_URL");return t.push({id:"legacy_openclaw_env",ok:!l,summary:l?"legacy OPENCLAW_CRON_* keys still present in ~/.kynver/.env":"no legacy OPENCLAW_CRON_* keys in env file",remediation:"Re-run `kynver cron install` to retire legacy aliases."}),{ok:t.every(u=>u.ok),checks:t}}I();ir();C();import{existsSync as Qk}from"node:fs";import{createHash as vA}from"node:crypto";function Lk(e){let r=JSON.stringify({cb:e.callbackPath,cron:e.cron??null,runAt:e.runAt??null,kind:e.kind,target:e.target,dedupeKey:e.dedupeKey??null});return`kc-cron:${vA("sha1").update(r).digest("hex").slice(0,16)}`}async function Cu(e,r,t={}){return fetch(e,{...t,headers:{"Content-Type":"application/json",Authorization:`Bearer ${r}`,...t.headers}})}async function Bk(e,r,t,n={}){let o=new URLSearchParams(n),s=`${e}/api/agent-os/by-id/${encodeURIComponent(r)}/scheduler/jobs?${o}`,i=await Cu(s,t),a=await i.text(),l=null;try{l=JSON.parse(a)}catch{l=null}if(!i.ok)throw new Error(`list scheduler jobs failed (${i.status}): ${l?.error??a.slice(0,200)}`);return l?.items??[]}async function Hk(e,r,t,n,o={}){let s=`${e}/api/agent-os/by-id/${encodeURIComponent(r)}/scheduler/watchdog/ensure`,i={};n&&(i.cron=n),o.requireProvider&&(i.requireProvider=o.requireProvider);let a=await Cu(s,t,{method:"POST",body:JSON.stringify(i)}),l=await a.text(),c=null;try{c=JSON.parse(l)}catch{c=null}if(!a.ok||!c?.job)throw new Error(`ensure watchdog failed (${a.status}): ${c?.error??l.slice(0,200)}`);return{job:c.job,route:c.route??`/api/agent-os/by-id/${r}/scheduler/fire`,dedupeKey:c.dedupeKey??Wr,requestedCron:c.requestedCron??n??"*/5 * * * *",selectedProvider:c.selectedProvider??c.job.provider??null}}async function Fk(e,r,t,n){let o=`${e}/api/agent-os/by-id/${encodeURIComponent(r)}/scheduler/jobs/${encodeURIComponent(t)}/cancel`,s=await Cu(o,n,{method:"POST",body:"{}"});if(!s.ok){let i=await s.text();throw new Error(`cancel job ${t} failed (${s.status}): ${i.slice(0,200)}`)}}function $k(e,r,t=Wr){return{kind:"watchdog",scheduleKind:"cron",cron:r,callbackPath:`/api/agent-os/by-id/${e}/scheduler/fire`,payload:{source:"agent-os.watchdog-schedule",agentOsId:e},target:{agentOsId:e},description:"Watchdog board sweep (repair loop)",dedupeKey:t}}function Kk(e){return e.filter(r=>r.kind==="watchdog"&&r.dedupeKey===Wr&&r.provider==="qstash"&&r.status!=="cancelled")}function SA(e){return e.find(r=>r.kind==="watchdog"&&r.dedupeKey===Wr&&r.provider==="kynver-cron"&&r.status!=="cancelled")}function jk(e){return SA(e)?{allowed:!0}:{allowed:!1,reason:"Cannot cancel QStash watchdog until hosted KYNVER_SCHEDULER_PROVIDER=kynver-cron is live and a kynver-cron watchdog row exists. Set Vercel env, redeploy, re-run `kynver cron install`, then `--confirm-qstash-removal`."}}import{randomBytes as CA}from"node:crypto";function wA(){return CA(32).toString("base64url")}function Vk(e=Ur){let r=mu();if(r)return{secret:r,generated:!1,source:"env"};let n=ea(e).get("KYNVER_CRON_SECRET")?.trim();return n?{secret:n,generated:!1,source:"env-file"}:{secret:wA(),generated:!0,source:"generated"}}import{realpathSync as _A}from"node:fs";function ta(e=process.argv[1]){let r=process.env.KYNVER_BIN?.trim();if(r)return r;let t=e?.trim();if(!t)return"kynver";try{return _A.native(t)}catch{return t}}function Gk(e){return/\s/.test(e)?`"${e.replace(/"/g,'\\"')}"`:e}import{existsSync as EA,mkdirSync as PA,writeFileSync as AA}from"node:fs";import{homedir as IA}from"node:os";import qk from"node:path";import{spawnSync as Jk}from"node:child_process";import{spawnSync as xA}from"node:child_process";var wu="1.5G";var Mo;function Rn(){return process.env.KYNVER_BUILD_SKIP_SYSTEMD==="1"||process.env.KYNVER_BUILD_SKIP_SYSTEMD==="true"?!1:Mo!==void 0?Mo:process.platform!=="linux"?(Mo=!1,!1):(Mo=xA("systemd-run",["--version"],{encoding:"utf8",stdio:["ignore","ignore","pipe"]}).status===0,Mo)}function na(e){let r=e.memoryMax??process.env.KYNVER_BUILD_SYSTEMD_MEMORY_MAX??wu,t=e.memorySwapMax??process.env.KYNVER_BUILD_SYSTEMD_MEMORY_SWAP_MAX??"2G",n=["systemd-run","--scope","--collect","-p",`MemoryMax=${r}`,"-p",`MemorySwapMax=${t}`];return e.cwd&&n.push("--working-directory",e.cwd),n.push("--",...e.command),n}var _u="kynver-cron-daemon.service";function OA(){return qk.join(IA(),".config","systemd","user")}function NA(e){let r=Gk(e.kynverBin?.trim()||ta());return["[Unit]","Description=Kynver AgentOS daemon (pipeline + cron tick)","After=network-online.target","","[Service]","Type=simple",`EnvironmentFile=${e.envFilePath}`,`ExecStart=${r} daemon --run ${e.runId} --agent-os-id ${e.agentOsId} --execute`,"Restart=on-failure","RestartSec=10","","[Install]","WantedBy=default.target",""].join(`
+`)}function zk(e,r){if(!Rn())return{supported:!1,unitPath:null,written:!1,enabled:!1,started:!1,note:process.platform==="linux"?"systemd-run not available \u2014 install user service manually or run `kynver daemon` under your supervisor.":"systemd user units are only supported on Linux; use `kynver daemon` manually on macOS/Windows."};let t=OA(),n=qk.join(t,_u),o=NA(e);if(!r)return{supported:!0,unitPath:n,written:!1,enabled:!1,started:!1,note:"Dry-run \u2014 pass --execute to write and enable the user unit."};PA(t,{recursive:!0});let s=EA(n);AA(n,o,"utf8");let i=Jk("systemctl",["--user","daemon-reload"],{encoding:"utf8"});if(i.status!==0)return{supported:!0,unitPath:n,written:!0,enabled:!1,started:!1,note:`Wrote ${n} but systemctl --user daemon-reload failed: ${i.stderr||i.stdout}`};let a=Jk("systemctl",["--user","enable","--now",_u],{encoding:"utf8"});return{supported:!0,unitPath:n,written:!s||!0,enabled:a.status===0,started:a.status===0,note:a.status===0?`Enabled and started ${_u}`:`Wrote ${n} but enable failed: ${a.stderr||a.stdout}`}}W();function Xk(e,r){if(r?.trim())return r.trim();if(e.defaultDaemonRunId?.trim())return e.defaultDaemonRunId.trim();let t=te().runsDir;return Qk(t)?J().sort((o,s)=>Date.parse(s.createdAt)-Date.parse(o.createdAt))[0]?.id??null:null}async function oa(e={}){let r=e.execute!==!1,t=v(),n=sr(e.apiBaseUrl?.trim()||t.apiBaseUrl?.trim()||process.env.KYNVER_API_URL?.trim()||""),o=e.agentOsId?.trim()||t.agentOsId?.trim()||process.env.KYNVER_AGENT_OS_ID?.trim()||"",s=Vk(),i=Wk({config:t,apiBaseUrl:n,agentOsId:o,cronSecret:s.secret,defaultDaemonRunId:e.runId?.trim()||t.defaultDaemonRunId,installSystemd:e.installSystemd===!0}),a=[...i.prerequisites],l={ok:!1,dryRun:!r,plan:i,secretGenerated:s.generated,configPath:q(i.configPath),storeInitialized:!1,blockers:a};if(a.length)return l;if(r){let c=Uk(i.envUpdates,{filePath:i.envFilePath,removeKeys:i.envRemovals});l.envFile={path:q(c.path),changed:c.changed,keysWritten:c.keysWritten};let u={...t,...i.configUpdates},d=Xk(u,e.runId);d&&(u.defaultDaemonRunId=d),Ge(u),process.env.KYNVER_API_URL=n,process.env.KYNVER_CRON_SECRET=s.secret,process.env.KYNVER_CRON_STORE_PATH=i.storePath,process.env.KYNVER_CRON_TICK_ENABLED="1";let f=await Gh(i.storePath);l.storeInitialized=f.created||Qk(i.storePath);let m=oe();if(m)try{let p=await et(o,{baseUrl:n,apiKey:m});Zr(o,p)}catch{}if(!e.skipWatchdog)if(!m)l.watchdog={error:"KYNVER_API_KEY required to register watchdog on server"},a.push("login \u2014 run `kynver login --api-key \u2026` to register watchdog remotely");else try{let p=await Hk(n,o,m,void 0,{requireProvider:"kynver-cron"}),g=$k(o,p.requestedCron,p.dedupeKey),k={providerScheduleId:Lk(g),spec:g,registeredAt:new Date().toISOString(),paused:!1};await Vh(k,i.storePath),l.watchdog={remoteJobId:p.job.id,provider:p.selectedProvider??p.job.provider,localProviderScheduleId:k.providerScheduleId};let h=await Bk(n,o,m),b=Kk(h),x=["Phase 1 (local): `kynver cron install` writes box env/store and may fail remote watchdog until Vercel cutover.","Phase 2 (hosted): set KYNVER_SCHEDULER_PROVIDER=kynver-cron + KYNVER_CRON_SECRET on Vercel, redeploy, re-run install.","Phase 3 (cleanup): `kynver cron install --confirm-qstash-removal` after a kynver-cron watchdog row exists.","Analyst/market QStash schedules are never touched by this installer."],M=[];if(b.length)if(e.confirmQstashRemoval){let P=jk(h);if(!P.allowed)a.push(P.reason);else for(let T of b)await Fk(n,o,T.id,m),M.push(T.id)}else a.push(`${b.length} QStash watchdog job(s) still active \u2014 complete Vercel cutover (KYNVER_SCHEDULER_PROVIDER=kynver-cron + KYNVER_CRON_SECRET), re-run install, then --confirm-qstash-removal`);l.qstashWatchdog={found:b.map(P=>({id:P.id,provider:P.provider,status:P.status})),removed:M,manualSteps:x}}catch(p){l.watchdog={error:p.message},a.push(`watchdog registration failed: ${p.message}`)}if(e.installSystemd){let p=Xk({...t,...i.configUpdates},e.runId);if(!p)l.systemd={supported:i.systemdSupported,unitPath:null,written:!1,enabled:!1,started:!1,note:"No harness run found \u2014 run `kynver run create` first or pass --run <runId>."},a.push("harness run \u2014 create a run before installing systemd unit");else{try{L(p)}catch{a.push(`harness run ${p} not found`)}l.systemd=zk({envFilePath:i.envFilePath,agentOsId:o,runId:p,kynverBin:ta()},r)}}if(!e.skipTestFire&&a.length===0){let p=await mn({agentOsIdFilter:o});l.testFire={fired:p.fired,errors:p.errors},p.errors>0&&a.push(`test fire reported ${p.errors} error(s) \u2014 check server KYNVER_CRON_SECRET matches`)}else e.skipTestFire&&(l.testFire={fired:0,errors:0,skipped:!0});l.verify=await yn({config:v(),envFilePath:i.envFilePath}),l.blockers=a,l.ok=a.length===0&&(l.verify?.ok??!1)}else l.ok=a.length===0;return l}var TA=["deployment_provider","cron_secret","env_file","cron_store"];function Zk(e){let r=e?.trim().toLowerCase();if(r==="qstash"||r==="kynver-cron"||r==="openclaw-cron")return r;if(r==="openclaw")return"openclaw-cron"}function DA(e){let r=Zk(process.env.KYNVER_SCHEDULER_PROVIDER);if(r==="qstash"||r==="openclaw-cron")return!1;if(r==="kynver-cron")return!0;let t=Zk(e.deploymentSchedulerProvider);return t==="qstash"||t==="openclaw-cron"?!1:t==="kynver-cron"?!0:!!(e.agentOsId?.trim()&&e.apiBaseUrl?.trim())}async function MA(e){if(!DA(e))return{expectsKynverCron:!1,ready:!0,failedChecks:[]};let t=(await yn({config:e})).checks.filter(n=>TA.includes(n.id)&&!n.ok);return{expectsKynverCron:!0,ready:t.length===0,failedChecks:t}}function UA(e){let r=["Run `kynver cron install` on this box."];for(let t of e)t.remediation&&r.push(`  \u2022 ${t.id}: ${t.remediation}`);return r}function xu(e){return e===!0||e==="true"||e==="1"||e==="yes"||e==="on"}async function ey(e){if(xu(e.args.skipCron))return{action:"skipped"};let r=await MA(e.config);if(!r.expectsKynverCron||r.ready)return{action:"ready"};console.log(""),console.log("  Local Kynver Cron is not ready \u2014 running `kynver cron install`\u2026");let t=xu(e.args.installSystemd)||xu(e.args["install-systemd"]),n=await oa({execute:!0,skipTestFire:!0,agentOsId:e.agentOsId,runId:e.runId,installSystemd:t});if(n.ok)return console.log("  Kynver Cron configured for this box."),console.log(""),{action:"installed",installOk:!0};console.log(""),console.log("  Cron install did not fully complete (daemon will still start):");for(let o of n.blockers)console.log(`    ! ${o}`);if(n.plan.deploymentSteps.length){console.log(""),console.log("  Hosted deployment (complete on Vercel, then re-run install):");for(let o of n.plan.deploymentSteps)console.log(`    - ${o}`)}for(let o of UA(r.failedChecks))console.log(`  ${o}`);return console.log(""),{action:"guided",installOk:!1,blockers:n.blockers}}function LA(e,r){return e.filter(n=>n.repo===r&&!gr.has(n.status)).sort((n,o)=>(o.createdAt??"").localeCompare(n.createdAt??""))[0]?.id??null}async function ry(e){pn();let r=v();(!oe()||!r.agentOsId?.trim())&&(console.log("  This machine isn't linked yet \u2014 running bootstrap first."),await Vi(e),r=v());let t=(typeof e.agentOsId=="string"?e.agentOsId.trim():"")||r.agentOsId?.trim()||"";t||(console.error("No AgentOS workspace configured \u2014 run `kynver bootstrap` (or pass --agent-os-id)."),process.exit(1)),e.chatOauth===!0&&r.chatUseClaudeOauth!==!0&&(Ge({...r,chatUseClaudeOauth:!0}),r=v(),console.log("  Chat: Claude Code OAuth opt-in saved (delegated turns may use your local subscription)."));let n=(typeof e.repo=="string"?e.repo.trim():"")||r.defaultRepo?.trim()||Ke()?.repo||"";n||(console.error("No repo configured \u2014 pass --repo /path/to/repo or run `kynver setup --discover-repo`."),process.exit(1));let o=typeof e.run=="string"&&e.run.trim()?e.run.trim():"";o||(o=LA(J(),n)??"",o?console.log(`  Reusing run ${o} for ${n}.`):o=vo({...e,repo:n,name:"agent"}).runId),await ey({config:r,agentOsId:t,runId:o,args:e}),console.log(""),console.log(`  ${WA.hostname()} \u2014 agent coming online`),console.log(`    workspace: ${t}`),console.log(`    repo:      ${n}`),console.log(`    run:       ${o}`),console.log("  Ctrl-C stops the agent. (Advanced control: `kynver daemon --help`.)"),console.log("");let s={...e,run:o,agentOsId:t};if(Xi(s)){await Qi(s,BA(o,t,e));return}await Do(s)}function BA(e,r,t){let n=["daemon","--run",e,"--agent-os-id",r];return typeof t.intervalMs=="string"&&t.intervalMs.trim()&&n.push("--interval-ms",t.intervalMs.trim()),(t.execute===!1||t.execute==="false")&&n.push("--execute","false"),typeof t.stallMs=="string"&&t.stallMs.trim()&&n.push("--stall-ms",t.stallMs.trim()),n}W();W();Y();import{existsSync as HA,rmSync as FA}from"node:fs";import Eu from"node:path";function $A(e){let r=e.replace(/\\/g,"/").replace(/^\.\//,"").trim();if(!r||r.startsWith("/")||r.includes(".."))throw new Error(`unsafe path: ${e}`);return r}function KA(e){return typeof e!="string"||!e.trim()?[]:e.split(",").map(r=>r.trim()).filter(Boolean)}function jA(e){let{runId:r,workerName:t}=He(e),n=we(r,t),o=[...KA(e.path),...Array.isArray(e.paths)?e.paths:[]];if(o.length===0)return{ok:!1,removed:[],reason:"requires at least one --path"};let s=Eu.resolve(n.worktreePath),i=[];for(let c of o){let u=$A(c),d=Eu.resolve(s,u);if(!d.startsWith(s+Eu.sep)&&d!==s)return{ok:!1,removed:i,reason:`path escapes worktree: ${c}`};if(!HA(d))return{ok:!1,removed:i,reason:`path not found: ${c}`};FA(d,{recursive:!0,force:!0}),i.push(u)}let a=Array.isArray(n.disposableArtifactsRemoved)?n.disposableArtifactsRemoved.filter(c=>typeof c=="string"):[];n.disposableArtifactsRemoved=[...new Set([...a,...i])],G(n.runId,n);let l=N(n);return{ok:!0,removed:i,...l.changedFiles.length?{reason:"worktree still has other changes"}:{}}}function ty(e){let r=jA(e);console.log(JSON.stringify(r,null,2)),r.ok||process.exit(1)}I();import hI from"node:path";os();var VA=/--max-old-space-size=(\d+)/;function GA(e,r){let t=Number(e);return!Number.isFinite(t)||t<=0?r:Math.floor(t)}function Pu(){return GA(process.env.KYNVER_NODE_OLD_SPACE_SIZE_MB,1024)}function sa(e=process.env){let r={...e};if(process.env.KYNVER_NODE_OLD_SPACE_SIZE_MB==="0")return r;let t=r.NODE_OPTIONS??"";if(VA.test(t))return r;let o=`--max-old-space-size=${Pu()}`;return r.NODE_OPTIONS=t.trim()?`${t.trim()} ${o}`:o,r}function bn(e=Pu()){return`--max-old-space-size=${e}`}I();import{spawnSync as YA}from"node:child_process";os();function ia(e,r){let t=Number(e);return!Number.isFinite(t)||t<=0?r:Math.floor(t)}function oy(e=v()){let r=process.env.KYNVER_BUILD_MEM_BUDGET_BYTES?ia(process.env.KYNVER_BUILD_MEM_BUDGET_BYTES,1610612736):void 0,t=process.env.KYNVER_BUILD_MEM_RESERVE_BYTES?ia(process.env.KYNVER_BUILD_MEM_RESERVE_BYTES,2147483648):void 0;return{perBuildBudgetBytes:r??ia(e.perWorkerMemBytes,1610612736),reserveBytes:t??ia(e.memReserveBytes,2147483648)}}var aa=0;function Ou(){aa+=1}function Nu(){aa=Math.max(0,aa-1)}function bt(e={}){let r={...oy(),...e},t=e.memAvailableBytes??Dt(),n=r.perBuildBudgetBytes+r.reserveBytes,o=t>=n;return{admitted:o,memAvailableBytes:t,requiredBytes:n,activeBuilds:aa,reason:o?null:`insufficient memory: need ${n} bytes available (budget ${r.perBuildBudgetBytes} + reserve ${r.reserveBytes}), have ${t}`}}function JA(e){e<=0||YA(process.execPath,["-e",`const d=Date.now()+${Math.floor(e)};while(Date.now()<d);`],{stdio:"ignore"})}function Tu(e,r=2e3,t={}){let n=Date.now()+Math.max(0,e),o=bt({...t,memAvailableBytes:t.memAvailableBytes?.()});for(;!o.admitted&&Date.now()<n;)JA(Math.min(r,n-Date.now())),o=bt({...t,memAvailableBytes:t.memAvailableBytes?.()});return o}import{spawnSync as fI}from"node:child_process";C();import{closeSync as QA,existsSync as Du,mkdirSync as ZA,openSync as eI,readdirSync as iy,readFileSync as rI,unlinkSync as Mu,writeFileSync as tI}from"node:fs";import Uu from"node:path";import{mkdirSync as qA}from"node:fs";import{tmpdir as zA}from"node:os";import la from"node:path";function XA(){return!!(process.env.VERCEL||process.env.VERCEL_ENV||process.env.AWS_LAMBDA_FUNCTION_NAME||process.env.AWS_EXECUTION_ENV)}function sy(){let e=process.env.KYNVER_HEAVY_VERIFICATION_STATE_ROOT;return e?la.resolve(e):XA()?la.join(zA(),"kynver","state","heavy-verification"):la.join(ui(),"heavy-verification")}function Uo(){return la.join(sy(),"slots")}function vn(){let e=Uo();return qA(e,{recursive:!0}),e}var Cn=120*6e4,ca=1;function nI(e,r){let t=Number(e);return!Number.isFinite(t)||t<=0?r:Math.floor(t)}function wn(){let e=process.env.KYNVER_HEAVY_VERIFICATION_SKIP?.trim().toLowerCase();return e==="1"||e==="true"||e==="yes"}function Sn(){let e=process.env.KYNVER_HEAVY_VERIFICATION_MAX_CONCURRENT;return e?nI(e,ca):ca}function oI(e){return`slot-${e}`}function ay(e,r=Uo()){return Uu.join(r,`${e}.json`)}function Wu(e){if(!Du(e))return null;try{let r=JSON.parse(rI(e,"utf8"));if(typeof r.slotId=="string"&&typeof r.pid=="number"&&typeof r.acquiredAt=="string"&&typeof r.command=="string")return r}catch{return null}return null}function ua(e,r=Cn){if(!e||!$(e.pid))return!0;let t=Date.parse(e.acquiredAt);return Number.isNaN(t)?!0:Date.now()-t>r}function sI(e,r){let t=Wu(e);if(ua(t,r))try{Mu(e)}catch{}}function iI(e){return ZA(e,{recursive:!0}),e}function Lo(e={}){let r=iI(e.slotsDir??vn()),t=e.staleMs??Cn,n=0;for(let o of iy(r)){if(!o.endsWith(".json"))continue;let s=Uu.join(r,o),i=Du(s);sI(s,t),i&&!Du(s)&&(n+=1)}return n}function Lu(e={}){let r=e.slotsDir??vn(),t=e.staleMs??Cn;Lo({slotsDir:r,staleMs:t});let n=[];for(let o of iy(r)){if(!o.endsWith(".json"))continue;let s=Wu(Uu.join(r,o));s&&!ua(s,t)&&n.push(s)}return n}function Wo(e={}){return Lu(e).length}function vt(e,r={}){if(wn())return{admitted:!0,slotId:null,activeSlots:0,maxSlots:Sn(),reason:null};let t=r.slotsDir??vn(),n=r.staleMs??Cn,o=r.maxSlots??Sn();Lo({slotsDir:t,staleMs:n});for(let i=0;i<o;i+=1){let a=oI(i),l=ay(a,t),c=Wu(l);if(c&&ua(c,n))try{Mu(l)}catch{}else if(c&&!ua(c,n))continue;let u={slotId:a,pid:process.pid,acquiredAt:new Date().toISOString(),command:e};try{let d=eI(l,"wx");tI(d,JSON.stringify(u,null,2),"utf8"),QA(d);let f=Wo({slotsDir:t,staleMs:n});return{admitted:!0,slotId:a,activeSlots:f,maxSlots:o,reason:null}}catch(d){if(d.code==="EEXIST")continue;throw d}}let s=Wo({slotsDir:t,staleMs:n});return{admitted:!1,slotId:null,activeSlots:s,maxSlots:o,reason:`heavy verification at capacity (${s}/${o} slots)`}}function _n(e,r={}){if(!e)return;let t=ay(e,r.slotsDir??Uo());try{Mu(t)}catch{}}function xn(e,r={}){if(wn())return{admitted:!0,slotId:null,activeSlots:0,maxSlots:Sn(),reason:null};let t=r.slotsDir??vn(),n=r.staleMs??Cn,o=r.maxSlots??Sn();Lo({slotsDir:t,staleMs:n});let s=Wo({slotsDir:t,staleMs:n}),i=s<o;return{admitted:i,slotId:null,activeSlots:s,maxSlots:o,reason:i?null:`heavy verification at capacity (${s}/${o} slots); waiting for ${e}`}}import{spawnSync as aI}from"node:child_process";function lI(e){e<=0||aI(process.execPath,["-e",`const d=Date.now()+${Math.floor(e)};while(Date.now()<d);`],{stdio:"ignore"})}function da(e,r,t=2e3,n={}){let o=Date.now()+Math.max(0,r),s=vt(e,n);for(;!s.admitted&&Date.now()<o;)lI(Math.min(t,o-Date.now())),s=vt(e,n);return s}var cI=/\b(npm run typecheck|tsc\b[^|&;]*--noEmit|node scripts\/verify-pr-local\.mjs|kynver (harness )?verify)\b/i,uI=/\b(npm run build\b|next build\b)\b/i,dI=/\b(vercel (build|deploy|--prod))\b/i,pI=/\b(openai|anthropic|perplexity|voyage)\b.*\b(api|cli)\b|\b(paid|billable)[-_ ]?compute\b/i;function pa(e){let r=e.trim();return r?pI.test(r)?{heavy:!0,commandClass:"paid_compute",reason:"paid external compute requires heavy-verification token and operator approval"}:dI.test(r)?{heavy:!0,commandClass:"vercel_verify",reason:"Vercel build/deploy verification requires heavy-verification token"}:uI.test(r)?{heavy:!0,commandClass:"full_build",reason:"full app build requires heavy-verification token"}:cI.test(r)?{heavy:!0,commandClass:"full_typecheck",reason:"full repo typecheck requires heavy-verification token"}:{heavy:!1,commandClass:"allowed",reason:null}:{heavy:!1,commandClass:"allowed",reason:null}}var Bo="heavy_verification_token_required";function ma(e,r={}){let t=pa(e);if(!t.heavy)return{allowed:!0,outcome:"allowed",commandClass:t.commandClass,reason:"command does not require heavy-verification token",verificationGate:{...xn(e),slotId:null}};if(wn())return{allowed:!0,outcome:"heavy_verification_skipped",commandClass:t.commandClass,reason:"KYNVER_HEAVY_VERIFICATION_SKIP bypasses gate",verificationGate:{...xn(e),slotId:null}};let n=r.waitMs??0,o=n>0?da(e,n,r.pollMs):vt(e);return o.admitted?{allowed:!0,outcome:"allowed",commandClass:t.commandClass,reason:t.reason??"heavy-verification token acquired",verificationGate:o}:{allowed:!1,outcome:Bo,commandClass:t.commandClass,reason:t.reason??o.reason??Bo,verificationGate:o}}Ce();import Bu from"node:path";function mI(e){let r=cr(me()),t=Bu.relative(r,Bu.resolve(e));return t.length>0&&!t.startsWith("..")&&!Bu.isAbsolute(t)}function ly(e){return mI(e)?(typeof process.getuid=="function"?process.getuid():null)===0?{ok:!1,reason:"Refusing build/install as root inside a harness worktree \u2014 generated caches become root-owned and block daemon cleanup. Run kynver daemon and workers as the harness owner (never sudo kynver)."}:{ok:!0}:{ok:!0}}function gI(e){let r=[];for(let[t,n]of Object.entries(e))n!==void 0&&r.push(`${t}=${n}`);return r}function cy(e,r){let t=fI(e[0],e.slice(1),{cwd:r.cwd,env:r.env,encoding:"utf8",stdio:["ignore","pipe","pipe"],shell:r.shell,timeout:r.timeoutMs});return{exitCode:t.status??1,stdout:(t.stdout??"").trim(),stderr:(t.stderr??"").trim()}}function fa(e){let r=e.waitForAdmissionMs??6e5,t=ma(e.command,{waitMs:r}),n=t.verificationGate;if(!t.allowed)return{ok:!1,exitCode:1,stdout:"",stderr:t.reason,admitted:!1,wrappedWithSystemd:!1,nodeOptionsFlag:bn(),admission:bt(),verificationGate:n,gateOutcome:t.outcome,command:e.command};let o=n.slotId,s=r>0?Tu(r):bt();if(!s.admitted)return _n(o),{ok:!1,exitCode:1,stdout:"",stderr:s.reason??"build admission denied",admitted:!1,wrappedWithSystemd:!1,nodeOptionsFlag:bn(),admission:s,verificationGate:n,command:e.command};let i=ly(e.cwd);if(!i.ok)return _n(o),{ok:!1,exitCode:1,stdout:"",stderr:i.reason,admitted:!0,wrappedWithSystemd:!1,nodeOptionsFlag:bn(),admission:s,verificationGate:n,command:e.command};let a=sa({...process.env,...e.env}),l=bn(),c=Rn();Ou();try{let u;if(c){let d=na({cwd:e.cwd,command:["/usr/bin/env",...gI(a),"/bin/bash","-lc",e.command]});u=cy(d,{cwd:e.cwd,env:a,timeoutMs:e.timeoutMs})}else u=cy([e.command],{cwd:e.cwd,env:a,shell:!0,timeoutMs:e.timeoutMs});return{ok:u.exitCode===0,exitCode:u.exitCode,stdout:u.stdout,stderr:u.stderr,admitted:!0,wrappedWithSystemd:c,nodeOptionsFlag:l,admission:s,verificationGate:n,gateOutcome:t.outcome,command:e.command}}finally{Nu(),_n(o)}}var ga=["npm run typecheck","npm run test"];function Ho(e,r=ga,t={}){let n=[],o=!0;for(let s of r){let i=fa({cwd:e,command:s,waitForAdmissionMs:t.waitForAdmissionMs,timeoutMs:t.timeoutMs});n.push({command:s,result:i}),i.ok||(o=!1)}return{passed:o,steps:n}}C();function uy(e){let r=e.indexOf(":");if(r<=0)throw new Error(`invalid --evidence ${e} (expected type:value)`);return{type:e.slice(0,r),value:e.slice(r+1)}}async function dy(e){let r=O(e.plan?String(e.plan):void 0,"plan"),t=(e.agentOsId?String(e.agentOsId):v().agentOsId)||"";t||(console.error("requires --agent-os-id or agentOsId in ~/.kynver/config.json"),process.exit(1));let n=O(e.role?String(e.role):void 0,"role"),o=O(e.status?String(e.status):void 0,"status"),s=[],i=e.evidence;if(Array.isArray(i))for(let x of i)s.push(uy(String(x)));else typeof i=="string"&&s.push(uy(i));let a=F(e.baseUrl?String(e.baseUrl):void 0),l=await V(e.secret?String(e.secret):void 0,t,{baseUrl:a}),c=`${a}/api/agent-os/by-id/${encodeURIComponent(t)}/plans/${encodeURIComponent(r)}/progress-events`,u=v(),f=`provider:${Xn(u.workerProvider,Pe)}`,p=(e.proposed===!0||e.proposed==="true"?!0:e.proposed===!1||e.proposed==="false"?!1:void 0)??(o!=="done"&&(n==="implementer"||n==="repair_implementer")),g={rowKey:e.row?String(e.row):void 0,rowId:e.rowId?String(e.rowId):void 0,taskId:e.task?String(e.task):void 0,reviewTaskId:e.reviewTask?String(e.reviewTask):void 0,roleLane:n,status:o,note:e.note?String(e.note):void 0,remainingWork:e.remaining?String(e.remaining):void 0,evidence:s.length?s:void 0,executorRef:e.executorRef?String(e.executorRef):f};p!==void 0&&(g.proposed=p);let k=await fetch(c,{method:"POST",headers:Be(l),body:JSON.stringify(g)}),h=await k.text(),b=null;try{b=JSON.parse(h)}catch{b=h}k.ok||(console.error(JSON.stringify({httpStatus:k.status,response:b},null,2)),process.exit(1)),console.log(JSON.stringify(b,null,2))}function kI(e){let r=O(e.worktree?String(e.worktree):void 0,"worktree"),t=hI.resolve(r),n=Ho(t),o=e.json===!0||e.json==="true",s={passed:n.passed,worktree:t,steps:n.steps};console.log(o?JSON.stringify(s,null,2):n.passed?"local plan verify passed":"local plan verify failed"),n.passed||process.exit(1)}async function py(e){let r=O(e.plan?String(e.plan):void 0,"plan");if(e.local===!0||e.local==="true"){kI(e);return}let n=v().agentOsSlug;n||(console.error("requires agentOsSlug in ~/.kynver/config.json for verify (session route)"),process.exit(1));let o=F(e.baseUrl?String(e.baseUrl):void 0),s=process.env.KYNVER_API_KEY,i={"Content-Type":"application/json"};s&&(i.Authorization=`Bearer ${s}`);let a=`${o}/api/agent-os/${encodeURIComponent(n)}/plans/${encodeURIComponent(r)}/verify`,l=await fetch(a,{method:"POST",headers:i,body:JSON.stringify({worktreePath:e.worktree?String(e.worktree):void 0,taskId:e.task?String(e.task):void 0,humanOverride:e.humanOverride===!0||e.humanOverride==="true"})}),c=await l.text(),u=null;try{u=JSON.parse(c)}catch{u=c}l.ok||(console.error(JSON.stringify({httpStatus:l.status,response:u},null,2)),process.exit(1)),console.log(JSON.stringify(u,null,2))}import yI from"node:path";C();function my(e){let r=yI.resolve(O(e.worktree?String(e.worktree):void 0,"worktree")),t=e.json===!0||e.json==="true"||e.emitJson===!0||e.emitJson==="true",n=[],o=e.command;if(Array.isArray(o))for(let a of o)n.push(String(a));else typeof o=="string"&&n.push(o);let s=Ho(r,n.length?n:ga,{waitForAdmissionMs:e.waitForAdmissionMs?Number(e.waitForAdmissionMs):void 0,timeoutMs:e.timeoutMs?Number(e.timeoutMs):void 0}),i={passed:s.passed,worktree:r,steps:s.steps.map(a=>({command:a.command,ok:a.result.ok,exitCode:a.result.exitCode,admitted:a.result.admitted,wrappedWithSystemd:a.result.wrappedWithSystemd,nodeOptionsFlag:a.result.nodeOptionsFlag,admission:a.result.admission,verificationGate:a.result.verificationGate,stderr:a.result.stderr.slice(0,4e3)}))};if(t)console.log(JSON.stringify(i,null,2));else{console.log(s.passed?"harness verify passed":"harness verify failed");for(let a of i.steps)console.log(`  ${a.ok?"\u2713":"\u2717"} ${a.command} (exit ${a.exitCode}, systemd=${a.wrappedWithSystemd})`),!a.ok&&a.stderr&&console.log(`    ${a.stderr.split(`
+`)[0]}`)}process.exit(s.passed?0:1)}I();import{readFileSync as RI}from"node:fs";C();var bI=["create","add_version","update_metadata"],vI=["approval_guard","auth","network","server","tool_interruption"];function SI(e){let r=e.bodyFile?String(e.bodyFile):void 0;if(r)return{body:RI(r,"utf8"),bodyPathHint:r};let t=e.body?String(e.body):void 0;if(t)return{body:t};throw new Error("requires --body-file PATH or --body TEXT")}async function fy(e){let r=O(e.operation?String(e.operation):void 0,"operation");if(!bI.includes(r))throw new Error(`invalid --operation ${r}`);let t=r,n=v(),o=O(e.slug?String(e.slug):n.agentOsSlug,"slug (or agentOsSlug in ~/.kynver/config.json)"),s=O(e.title?String(e.title):void 0,"title"),{body:i,bodyPathHint:a}=SI(e);a&&uo(a)&&console.warn(JSON.stringify({warning:"/tmp-only body path is not durable; AgentOS persistence requires outbox or successful API write",bodyPathHint:a}));let l={operation:t,agentOsSlug:o,title:s,body:i,bodyPathHint:a,summary:e.summary?String(e.summary):void 0,planId:e.plan?String(e.plan):void 0,planSlug:e.planSlug?String(e.planSlug):void 0,changeSummary:e.changeSummary?String(e.changeSummary):void 0,author:e.author?String(e.author):void 0,model:e.model?String(e.model):void 0,maxRetries:e.maxRetries?Number(e.maxRetries):void 0,immediateFailure:CI(e)},c=await en(l);console.log(JSON.stringify(c,null,2)),c.userStatus==="failed and needs action"&&process.exit(1)}function CI(e){let r=e.failureKind?String(e.failureKind):void 0;if(!r)return;if(!vI.includes(r))throw new Error(`invalid --failure-kind ${r}`);let t=e.failureMessage?String(e.failureMessage):`immediate failure (${r})`;return{kind:r,message:t}}async function gy(){let e=dt();console.log(JSON.stringify({count:e.length,items:e},null,2))}async function hy(e){let r=e.max?Number(e.max):void 0,t=e.id?String(e.id):void 0,n=await pi({max:r,outboxId:t});console.log(JSON.stringify(n,null,2)),n.failed>0&&process.exit(1)}function ky(e){let r=e.execute===!0||e.execute==="true",t=e.skipFinalize===!0||e.skipFinalize==="true",n=e.accountBytes===!0||e.accountBytes==="true",o=e.compact===!0||e.compact==="true",s=e.nodeModulesAgeMs,i=s!=null&&s!=="",a=i?Number(s):void 0,l=e.worktreesAgeMs?Number(e.worktreesAgeMs):0,c=e.includeOrphans===!0||e.includeOrphans==="true",u=e.harnessRoot?String(e.harnessRoot):void 0,d=ji({execute:r,finalizeStaleRuns:!t,accountBytes:n,scanDependencyCaches:i,nodeModulesAgeMs:a!==void 0&&Number.isFinite(a)?a:i?216e5:void 0,worktreesAgeMs:Number.isFinite(l)?l:0,includeOrphans:c,harnessRoot:u});o&&d.compactSummary?console.log(JSON.stringify(d.compactSummary,null,2)):console.log(JSON.stringify(d,null,2)),r&&d.totals.removedPaths===0&&d.actions.length===0&&(process.exitCode=0)}Mt();function yy(e){let r=e.execute===!0||e.execute==="true",t=e.json===!0||e.json==="true",n=e["purge-all"]===!0||e["purge-all"]==="true",o=e["keep-newest"]?Number(e["keep-newest"]):void 0;if(r||n){let a=fo({execute:r,purgeAll:n,keepNewest:o}),l={...a,observation:a.observation?{...a.observation,dumps:a.observation.dumps.map(c=>({name:c.name,bytes:c.bytes,executableHint:c.executableHint,mtimeMs:c.mtimeMs}))}:null};console.log(JSON.stringify(l,null,t?2:0));return}let s=lr(),i=s?{...s,dumps:s.dumps.map(a=>({name:a.name,bytes:a.bytes,executableHint:a.executableHint,mtimeMs:a.mtimeMs}))}:{skipped:!0,reason:"not_wsl"};console.log(JSON.stringify(i,null,t?2:0))}function Ry(e){let r=e.trim();if(!r.startsWith("{")&&!r.startsWith("["))return null;try{return JSON.parse(r)}catch{return null}}function se(e,r=2400){if(e==null)return;let n=(typeof e=="string"?e:JSON.stringify(e,null,2)).trim();if(n)return n.length<=r?n:`${n.slice(0,r-1).trimEnd()}\u2026`}function ha(e){let r=e.trim();if(!r)return null;let t=Ry(r);if(t!==null)return t;for(let n of r.split(`
+`)){let o=Ry(n);if(o!==null)return o}return null}function ka(e){let r=[];switch(r.push(`Background auto-complete \xB7 ${e.runId} / ${e.worker}`),e.outcome){case"completed":r.push("Outcome: harness completion posted to AgentOS successfully."),r.push("AgentOS task should close or advance to review per completion routing."),r.push("Next: check Command Center \u2014 no manual complete needed unless the board still shows running.");break;case"blocked":r.push(`Outcome: worker finished but completion was blocked${e.httpStatus?` (HTTP ${e.httpStatus})`:""}.`),e.reason&&r.push(`Blocker: ${e.reason}`),r.push("Next: fix the blocker (auth, landing gate, dirty worktree) and replay completion from Command Center.");break;case"timed_out":r.push(`Outcome: monitor gave up waiting \u2014 ${e.reason??"worker did not finish in time"}.`),r.push("Next: inspect the worker process/logs; stop or unblock the worker, then retry auto-complete.");break;case"missing_link":r.push(`Outcome: cannot complete \u2014 ${e.reason??"worker missing agentOsId/taskId"}.`),r.push("Next: re-dispatch with board linkage or run `kynver worker complete` with --agent-os-id.");break;default:r.push(`Outcome: ${e.outcome}`)}return{primary:r.join(`
+`),diagnostic:se(e)}}function En(e){let r=[],t=typeof e.monitorId=="string"?e.monitorId:void 0;if(r.push(t?`Harness monitor tick \xB7 ${e.runId} (${t})`:`Harness monitor tick \xB7 ${e.runId}`),!e.workers.length)return r.push("No workers in scope for this poll."),{primary:r.join(`
+`),diagnostic:se(e)};for(let i of e.workers){let a=i.autoComplete.eligible?"eligible for auto-complete":"not auto-completing",l=i.autoComplete.blockers.length>0?` (${i.autoComplete.blockers.slice(0,2).join("; ")})`:"";r.push(`\u2022 ${i.worker}: ${i.workerStatus}, ${i.health}${i.healthReason?` \u2014 ${i.healthReason}`:""}; ${a}${l}`),i.taskStatus&&r.push(`  Board task: ${i.taskStatus}${i.leaseOwner?` (lease: ${i.leaseOwner})`:""}`)}let n=e.autoCompleted?.filter(i=>i.outcome==="completed"&&i.ok)??[],o=e.autoCompleted?.filter(i=>!i.ok&&i.outcome!=="skipped")??[];n.length&&r.push(`Auto-completed: ${n.map(i=>i.worker).join(", ")} \u2014 AgentOS completion should be posted.`),o.length&&r.push(`Auto-complete blocked: ${o.map(i=>`${i.worker}${i.reason?` (${i.reason})`:""}`).join("; ")}`),e.leaseRenewal?.failed?.length&&r.push(`Lease renew failed for: ${e.leaseRenewal.failed.map(i=>i.worker).join(", ")}`);let s=e.workers.length>0&&e.workers.every(i=>i.autoComplete.terminalVerified)&&(e.autoCompleted?.every(i=>i.ok||i.outcome==="skipped")??!0);return r.push(s?"Next: monitor loop should stop \u2014 all workers terminal and handled.":"Next: monitor will poll again until workers are terminal-verified or max time elapses."),{primary:r.join(`
+`),diagnostic:se(e)}}function Hu(e){return e!==null&&typeof e=="object"&&!Array.isArray(e)?e:null}function tr(e){return typeof e=="string"&&e.trim()?e.trim():null}function ya(e){let r=Hu(e);if(!r)return{primary:"Harness worker complete finished with no parseable result.",diagnostic:se(e)};let t=tr(r.worker)??"worker",n=tr(r.runId),o=tr(r.status)==="skipped",s=typeof r.httpStatus=="number"?r.httpStatus:null,i=Hu(r.response),a=[];if(a.push(`Harness worker complete \xB7 ${t}${n?` (${n})`:""}`),o)return a.push(`Outcome: skipped \u2014 ${tr(r.reason)??"worker not finished yet"}.`),a.push("Next: wait for the worker to exit or post a finalResult, then retry complete."),{primary:a.join(`
+`),diagnostic:se(e)};let l=tr(i?.outcome),c=Hu(i?.task),u=tr(c?.status),d=tr(c?.prUrl)??tr(i?.prUrl);if(s&&s>=200&&s<300)a.push("Outcome: completion callback accepted by AgentOS."),l&&a.push(`Routing: ${l.replace(/_/g," ")}`),u&&a.push(`AgentOS task status: ${u}`),d&&a.push(`PR: ${d}`),a.push("Next: check Command Center for review scheduling or blockers.");else{a.push(`Outcome: completion failed${s!=null?` (HTTP ${s})`:""}.`);let f=tr(i?.detail)??tr(i?.error);f&&a.push(`Blocker: ${f}`),a.push("Next: fix the reported blocker and replay completion from the board.")}return{primary:a.join(`
+`),diagnostic:se(e)}}function _e(e){return typeof e=="string"&&e.trim()?e.trim():null}function Fu(e){return e!==null&&typeof e=="object"&&!Array.isArray(e)?e:null}function wI(e){let r=Fu(e);return r?_e(r.prUrl)??_e(r.pr):null}function Fo(e){let r=Fu(e);if(!r)return{primary:"Harness worker status unavailable.",diagnostic:se(e)};let t=_e(r.worker)??_e(r.name)??"worker",n=_e(r.runId),o=_e(r.status)??"unknown",s=r.alive===!0,i=Fu(r.attention),a=_e(i?.state)??_e(r.attentionState),l=_e(i?.reason)??_e(r.attentionReason),c=_e(r.taskId),u=_e(r.prUrl)??wI(r.finalResult),d=_e(r.branch),f=_e(r.headCommit),m=[];return m.push(`Harness worker ${t}${n?` (${n})`:""}`),m.push(`Process: ${s?"running":"stopped"} \xB7 harness status: ${o}`),a&&m.push(l?`Attention: ${a} \u2014 ${l}`:`Attention: ${a}`),c&&m.push(`AgentOS task: ${c}`),u&&m.push(`PR: ${u}`),d&&m.push(`Branch: ${d}`),f&&m.push(`Commit: ${f.slice(0,12)}`),o==="done"||o==="exited"?m.push(u?"Outcome: worker finished \u2014 open the PR or check Command Center for review routing.":"Outcome: worker finished \u2014 check Command Center for task status and next action."):a==="blocked"||a==="needs_attention"?m.push("Next: resolve the blocker on the board or wait for the monitor to auto-complete when terminal."):s&&m.push("Next: wait for completion or poll again; background monitor will auto-complete when eligible."),{primary:m.join(`
+`),diagnostic:se(e)}}var _I="\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500 Diagnostic (JSON) \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500";function by(e){return e.diagnostic?.trim()?`${e.primary}
 
-${SA}
-${e.diagnostic}`:e.primary}function wA(e){let r=[`Harness ${e.scope} ${e.action} failed.`];e.timedOut?r.push("Reason: command timed out on the runner host."):e.error?r.push(`Reason: ${e.error}`):e.exitCode!=null&&r.push(`Exit code: ${e.exitCode}`);let t=e.stderr.trim();t&&r.push(`Stderr: ${t.split(`
-`).slice(-3).join(" ")}`),r.push("Next: retry on the runner host or inspect harness logs.");let n=zi(e.stdout);return{primary:r.join(`
-`),diagnostic:re(n??{stdout:e.stdout,stderr:e.stderr})}}function Nk(e){if(!e.ok)return wA(e);let r=zi(e.stdout);if(r===null){let t=e.stdout.trim()||e.stderr.trim()||"(no output)";return{primary:`Harness ${e.scope} ${e.action} finished.
-${t.slice(0,800)}`,diagnostic:re({stdout:e.stdout,stderr:e.stderr})}}if(e.scope==="worker"&&e.action==="status")return Eo(r);if(e.scope==="worker"&&e.action==="complete")return Qi(r);if(e.scope==="monitor"&&(e.action==="tick"||e.action==="run-loop"))return gn(r);if(e.scope==="monitor"&&e.action==="auto-complete"){let t=r;if(t.outcome&&t.worker&&t.runId)return Xi(r);if(Array.isArray(t.blockers))return{primary:[`Monitor auto-complete blocked \xB7 ${t.runId??"run"} / ${t.worker??"worker"}`,`Blockers: ${t.blockers.join("; ")}`,"Next: resolve blockers on the runner, then retry auto-complete."].join(`
-`),diagnostic:re(r)}}if(e.scope==="run"&&e.action==="status"){let t=r.workers;return Array.isArray(t)&&t.length===1?Eo(t[0]):{primary:`Harness run status \xB7 ${r.runId??"run"} (${Array.isArray(t)?t.length:0} workers).`,diagnostic:re(r)}}return{primary:`Harness ${e.scope} ${e.action} completed successfully on the runner.`,diagnostic:re(r)}}import EA from"node:path";L();G();w();G();w();function Zi(e){let{worker:r,status:t,taskLease:n}=e,o=n?.leaseOwner??null;if(r.dispatched&&n){if(n.status==="running"&&o&&!kl(o,r.runId))return{health:"orphaned",reason:`task lease held by ${o}, expected harness run ${r.runId}`};if(n.status==="running"&&!t.alive&&!t.finalResult)return{health:"orphaned",reason:"board task running but worker process is not alive"}}if(r.status==="running"&&!t.alive&&!t.finalResult)return{health:"orphaned",reason:"worker.json still running but process is dead"};if(t.attention.state==="stale")return{health:"stale",reason:t.attention.reason};let s=t.lastHeartbeatAt?Date.parse(t.lastHeartbeatAt):NaN;return t.alive&&Number.isFinite(s)&&Date.now()-s>Nt?{health:"stale",reason:`heartbeat older than ${Math.floor(Nt/1e3)}s`}:t.alive&&r.pid&&!$(r.pid)?{health:"orphaned",reason:"pid recorded but process is not alive"}:n?.status==="running"&&!t.alive&&t.finalResult?{health:"healthy",reason:"finished worker awaiting completion replay"}:{health:"healthy",reason:t.attention.reason||"worker within expected lifecycle bounds"}}ke();w();import{existsSync as Tk,mkdirSync as CA,readdirSync as _A,unlinkSync as xA}from"node:fs";import Ru from"node:path";function Dk(){let{harnessRoot:e}=Mr(),r=Ru.join(e,"monitors");return CA(r,{recursive:!0}),r}function mt(e,r){return r?`${R(e)}--${R(r)}`:R(e)}function vu(e){return Ru.join(Dk(),`${e}.json`)}function ft(e){return _(vu(e),void 0)}function gt(e){ce(vu(e.monitorId),e)}function bu(e){let r=vu(e);return Tk(r)?(xA(r),!0):!1}function Mk(){let e=Dk();if(!Tk(e))return[];let r=[];for(let t of _A(e)){if(!t.endsWith(".json"))continue;let n=_(Ru.join(e,t),void 0);n?.monitorId&&r.push({monitorId:n.monitorId,runId:n.runId,workerName:n.workerName,agentOsId:n.agentOsId,pid:n.pid,alive:n.pid?$(n.pid):!1,startedAt:n.startedAt,pollMs:n.pollMs,logPath:n.logPath})}return r.sort((t,n)=>t.startedAt.localeCompare(n.startedAt))}G();function Po(e){let{worker:r,status:t}=e,n=[];r.localOnly&&n.push("local-only worker (no board linkage)"),(!r.agentOsId||!r.taskId)&&n.push("missing agentOsId/taskId linkage"),Ps(r)&&n.push("completion already acknowledged"),r.completionBlocker&&n.push(r.completionBlocker),t.heartbeatBlocker&&t.alive&&n.push(`worker heartbeat blocker: ${t.heartbeatBlocker}`),t.attention.state==="blocked"&&n.push(t.attention.reason||"worker attention blocked"),Fr(t)&&n.push(t.attention.reason||"landing gate blocked");let o=Z(t),s;return o?t.finalResult?s="final_result":t.alive?s="terminal_status":s="process_exited":n.push("worker has not reached a terminal condition"),{eligible:o&&n.length===0,terminalVerified:o,terminalReason:s,blockers:n}}O();async function Uk(e){let r=new Map,t=e.agentOsId?.trim();if(!t||e.taskIds.length===0)return r;let n=B(e.baseUrl);try{let o=await K(e.secret,t,{baseUrl:n}),s=`${n}/api/agent-os/by-id/${encodeURIComponent(t)}/harness/monitor/task-leases`,i=await q(s,o,{taskIds:[...new Set(e.taskIds)]},{agentOsId:t,baseUrl:n});if(!i.ok||!i.response||typeof i.response!="object")return r;let a=i.response.tasks;if(!Array.isArray(a))return r;for(let l of a)l?.taskId&&r.set(l.taskId,l)}catch{}return r}function Lk(e,r){return _(EA.join(x(e),"workers",R(r),"worker.json"),void 0)}function Bk(e,r){let t=U(e),n=Object.keys(t.workers||{});if(!r)return n;let o=R(r);return n.filter(s=>R(s)===o)}function Wk(e,r){let t=U(e.runId),n=T(e,{base:t.base,baseCommit:t.baseCommit}),o=e.taskId?r.get(e.taskId)??null:null,s=Zi({worker:e,status:n,taskLease:o}),i=Po({worker:e,status:n});return{runId:e.runId,worker:e.name,health:s.health,healthReason:s.reason,workerStatus:n.status,attentionState:n.attention.state,attentionReason:n.attention.reason,alive:n.alive,taskId:e.taskId,leaseOwner:o?.leaseOwner??void 0,taskStatus:o?.status,autoComplete:i,status:n}}async function ht(e){let r=String(e.run||"");N(r,"--run");let t=e.name?String(e.name):void 0,n=e.agentOsId?String(e.agentOsId):void 0,o=U(r),s=Bk(r,t),i=[];for(let p of s){let g=Lk(r,p);g&&i.push(g)}let a=n||i.map(p=>p.agentOsId).find(p=>typeof p=="string"&&p.trim())||void 0,l=i.map(p=>p.taskId).filter(p=>!!p),c=await Uk({agentOsId:a,taskIds:l,baseUrl:e.baseUrl?String(e.baseUrl):void 0,secret:e.secret?String(e.secret):void 0}),u=i.map(p=>Wk(p,c)),d;a&&e.renewLeases!==!1&&e.renewLeases!=="false"&&(d=await ws(r,{...e,agentOsId:a}));let f=[];if(e.autoComplete===!0||e.autoComplete==="true")for(let p of u){if(!p.autoComplete.eligible){f.push({worker:p.worker,outcome:"skipped",ok:!1,reason:p.autoComplete.blockers.join("; ")||"not eligible"});continue}let g=await et({run:r,name:p.worker,...a?{agentOsId:a}:{},...e.baseUrl?{baseUrl:String(e.baseUrl)}:{},...e.secret?{secret:String(e.secret)}:{}});f.push({worker:p.worker,outcome:g.outcome,ok:g.outcome==="completed",reason:g.reason})}return{runId:r,agentOsId:a,workers:u,leaseRenewal:d,autoCompleted:f}}function ea(e){let r=String(e.run||"");N(r,"--run");let t=e.name?String(e.name):void 0,n=Bk(r,t),o=[];for(let s of n){let i=Lk(r,s);i&&o.push(Wk(i,new Map))}return{runId:r,workers:o,autoCompleted:[]}}function Ao(){return Mk()}function Su(e){let r=String(e.run||"");N(r,"--run");let t=mt(r,e.name?String(e.name):void 0),n=ft(t);if(!n)return{monitorId:t,stopped:!1};if(n.pid&&$(n.pid))try{process.kill(n.pid,"SIGTERM")}catch{}return n.stoppedAt=new Date().toISOString(),gt(n),bu(t),{monitorId:t,stopped:!0,pid:n.pid}}async function ra(e){let r=String(e.run||""),t=String(e.name||"");N(r,"--run"),N(t,"--name");let n=ye(r,t),o=U(r),s=T(n,{base:o.base,baseCommit:o.baseCommit}),i=Po({worker:n,status:s});if(!i.eligible){console.log(JSON.stringify({runId:r,worker:t,outcome:"blocked",blockers:i.blockers,terminalVerified:i.terminalVerified},null,2)),process.exitCode=1;return}let a=await et({...e,run:r,name:t});console.log(JSON.stringify(a,null,2)),a.outcome!=="completed"&&a.outcome!=="blocked"&&(process.exitCode=1)}w();var PA=5e3,AA=360*60*1e3;async function wu(e){let r=String(e.monitorId||""),t=Number(e.pollMs)>0?Math.floor(Number(e.pollMs)):PA,n=Number(e.maxTotalMs)>0?Math.floor(Number(e.maxTotalMs)):AA,o=Date.now();for(;Date.now()-o<=n;){let s=r?ft(r):void 0;if(s?.stoppedAt)break;let i=await ht({...e,autoComplete:e.autoComplete??!0,renewLeases:e.renewLeases??!0}),a=gn({monitorId:r,phase:"tick",...i});if(console.log(a.primary),a.diagnostic&&console.error(`[monitor diagnostic] ${a.diagnostic}`),i.workers.length>0&&i.workers.every(c=>c.autoComplete.terminalVerified&&(c.autoComplete.eligible||c.autoComplete.blockers.some(u=>u.includes("already acknowledged"))))&&i.autoCompleted.every(c=>c.ok||c.outcome==="skipped")){r&&s&&(s.stoppedAt=new Date().toISOString(),gt(s));break}Or(t)}}w();ke();import{spawn as IA}from"node:child_process";import{closeSync as Hk,existsSync as OA,openSync as NA}from"node:fs";import Fk from"node:path";import{fileURLToPath as TA}from"node:url";function DA(){return Fk.join(TA(new URL(".",import.meta.url)),"cli.js")}function ta(e){let r=e.cliPath??DA();if(!OA(r))return;let t=mt(e.runId,e.workerName),{harnessRoot:n}=Mr(),o=Fk.join(n,"monitors",`${t}.log`),s;try{s=NA(o,"a")}catch{s=void 0}let i=e.nodeExecutable??process.execPath,a=e.pollMs??5e3,l=[r,"monitor","run-loop","--run",e.runId,"--monitor-id",t,"--poll-ms",String(a),"--auto-complete","true","--renew-leases","true"];e.workerName&&l.push("--name",e.workerName),e.agentOsId&&l.push("--agent-os-id",e.agentOsId),e.baseUrl&&l.push("--base-url",e.baseUrl),e.secret&&l.push("--secret",e.secret);let c=["ignore",s??"ignore",s??"ignore"];try{let u=IA(i,l,le({detached:!0,stdio:c,env:process.env}));s!==void 0&&Hk(s),u.unref();let d={monitorId:t,runId:e.runId,workerName:e.workerName,agentOsId:e.agentOsId,pid:u.pid,startedAt:new Date().toISOString(),pollMs:a,logPath:o};return gt(d),{monitorId:t,pid:u.pid,logPath:o,session:d}}catch{if(s!==void 0)try{Hk(s)}catch{}return}}w();async function $k(e){let r=String(e.run||"");N(r,"--run");let t=e.name?String(e.name):void 0,n=mt(r,t),o=ft(n);if(o?.pid&&!o.stoppedAt)return{monitorId:n,session:o,spawned:!1,pid:o.pid};let s=ta({runId:r,workerName:t,agentOsId:e.agentOsId?String(e.agentOsId):void 0,pollMs:Number(e.pollMs)>0?Math.floor(Number(e.pollMs)):void 0,baseUrl:e.baseUrl?String(e.baseUrl):void 0,secret:e.secret?String(e.secret):void 0});if(!s)throw new Error("failed to spawn monitor sidecar (cli.js missing or spawn error)");return{monitorId:n,session:s.session,spawned:!0,pid:s.pid}}async function Kk(e){if(String(e.run||"")){let t=e.tick===!0||e.tick==="true"?await ht({...e,autoComplete:!1}):ea(e);console.log(JSON.stringify(t,null,2));return}console.log(JSON.stringify({monitors:Ao()},null,2))}function jk(e){console.log(JSON.stringify(Su(e),null,2))}function Vk(){console.log(JSON.stringify({monitors:Ao()},null,2))}async function Gk(e){await wu(e)}async function Yk(e){let r=await ht(e);console.log(JSON.stringify(r,null,2))}L();G();w();O();import MA from"node:path";function Io(e,r,t,n,o,s){return{runId:e,worker:r,taskId:t,agentOsId:n,leaseOwner:o,action:"skipped",reason:s}}async function UA(e){let r=B(e.baseUrl?String(e.baseUrl):void 0),t=e.agentOsId?String(e.agentOsId).trim():null,n=e.dryRun===!0||e.dryRun==="true",o=[],s=[],i=[];for(let a of ne())for(let l of Object.keys(a.workers??{})){let c=MA.join(x(a.id),"workers",R(l),"worker.json"),u=_(c,void 0);if(!u){s.push(Io(a.id,l,"","","","worker.json missing"));continue}let d=u.taskId??"",f=u.agentOsId??"",m=u.leaseOwner??"";if(!u.dispatched||!d||!f||!m){s.push(Io(a.id,l,d,f,m,"not a fully-leased dispatched worker"));continue}if(t&&f!==t)continue;if(u.completionReportedAt){s.push(Io(a.id,l,d,f,m,"completion already reported"));continue}let p=T(u);if(p.finalResult){s.push(Io(a.id,l,d,f,m,"has final result \u2014 let pipeline tick complete it"));continue}if(p.alive){s.push(Io(a.id,l,d,f,m,"worker process is still alive"));continue}if(n){o.push({runId:a.id,worker:l,taskId:d,agentOsId:f,leaseOwner:m,action:"released",reason:"dry-run: would release dead dispatched worker lease"});continue}try{let g=await K(e.secret?String(e.secret):void 0,f,{baseUrl:r}),k=`${r}/api/agent-os/by-id/${encodeURIComponent(f)}/tasks/${encodeURIComponent(d)}/release`,h=await q(k,g,{agentOsId:f,leaseOwner:m},{agentOsId:f,baseUrl:r});h.ok===!0||h.response?.ok===!0?o.push({runId:a.id,worker:l,taskId:d,agentOsId:f,leaseOwner:m,action:"released",reason:"dead dispatched worker lease released; task requeued"}):s.push({runId:a.id,worker:l,taskId:d,agentOsId:f,leaseOwner:m,action:"skipped",reason:`release returned ok:false (likely owner mismatch or already released): HTTP ${h.status}`})}catch(g){i.push({runId:a.id,worker:l,taskId:d,agentOsId:f,leaseOwner:m,action:"error",reason:g.message})}}return{dryRun:n,released:o,skipped:s,errors:i}}async function Jk(e){let r=await UA(e),t={ok:r.errors.length===0,dryRun:r.dryRun,released:r.released.length,skipped:r.skipped.length,errors:r.errors.length,details:r};console.log(JSON.stringify(t,null,2)),r.errors.length>0&&process.exit(1)}nr();O();import LA from"node:path";import{homedir as BA}from"node:os";var Cu=LA.join(BA(),".kynver","config.json");function _u(e){let r=v(),t=Re({...e,config:r});if(!t)return{ok:!1,remediated:!1,alreadyPersisted:!1,configPath:Y(Cu),resolved:null,reason:"No Kynver git checkout found. Clone the repo, cd into it, then run `kynver setup --repo /path/to/Kynver` (or export KYNVER_DEFAULT_REPO).",remediation:"Clone the Kynver monorepo, cd into it, then run `kynver config ensure-default-repo` (or `kynver setup --repo /path/to/Kynver`)."};if(t.persistedInConfig)return{ok:!0,remediated:!1,alreadyPersisted:!0,configPath:Y(Cu),resolved:Yt(t),config:Mt(r)};let n=ti(t.repo,r),o=Yt({...t,persistedInConfig:!0,source:"config"});return{ok:!0,remediated:!0,alreadyPersisted:!1,configPath:Y(Cu),resolved:o,config:Mt(n),remediation:"defaultRepo persisted in ~/.kynver/config.json \u2014 `kynver run create` no longer requires --repo."}}function qk(e=!1){let r=_u();if(e){console.log(JSON.stringify(r,null,2)),r.ok||(process.exitCode=1);return}if(!r.ok){console.error(r.reason??"Could not resolve a Kynver git checkout."),r.remediation&&console.error(r.remediation),process.exitCode=1;return}if(r.alreadyPersisted){console.log(`defaultRepo already set (${r.resolved?.defaultRepo??"unknown"}) in ${r.configPath}`);return}console.log(`Persisted defaultRepo ${r.resolved?.defaultRepo??""} in ${r.configPath}. \`kynver run create\` can omit --repo.`)}function zk(e){return e?e.persistedInConfig?{status:"pass"}:{status:"warn",remediation:"Run `kynver config ensure-default-repo` to persist defaultRepo in ~/.kynver/config.json (or `kynver doctor runtime-takeover --remediate-default-repo`)."}:{status:"warn",remediation:"Run `kynver config ensure-default-repo` from a Kynver checkout (or `kynver setup --repo /path/to/Kynver`)."}}import ny from"node:path";nr();O();import{accessSync as WA,constants as HA,existsSync as xu,readFileSync as FA}from"node:fs";import{homedir as na}from"node:os";import oa from"node:path";import{spawnSync as $A}from"node:child_process";ke();function Xk(e,r){try{let t=$A(e,r,{encoding:"utf8"}),n=(t.stdout||"").trim(),o=(t.stderr||"").trim();return{ok:t.status===0,stdout:n,stderr:o,error:t.error?.message}}catch(t){return{ok:!1,stdout:"",stderr:"",error:t.message}}}function Qk(e){let r=e?.trim();if(r)return r.length<=12?`${r}\u2026`:`${r.slice(0,12)}\u2026`}function KA(e){if(!xu(e))return!1;try{return WA(e,HA.W_OK),!0}catch{return!1}}var Zk={packageVersion:()=>yn,commandOnPath:e=>Xk(process.platform==="win32"?"where":"which",[e]),kynverVersion:e=>Xk(e,["--version"]),loadConfig:()=>v(),configFilePath:()=>oa.join(na(),".kynver","config.json"),credentialsFilePath:()=>oa.join(na(),".kynver","credentials"),readCredentials:()=>{let e=oa.join(na(),".kynver","credentials");if(!xu(e))return{hasApiKey:!1};try{let r=JSON.parse(FA(e,"utf8"));return{hasApiKey:!!r.apiKey?.trim(),runnerTokenPrefix:Qk(r.runnerToken),runnerTokenAgentOsId:r.runnerTokenAgentOsId}}catch{return{hasApiKey:!1}}},envSnapshot:()=>({kynverApiUrl:process.env.KYNVER_API_URL?.trim()||void 0,openclawCronFireBaseUrl:process.env.OPENCLAW_CRON_FIRE_BASE_URL?.trim()||void 0,kynverRunnerTokenPrefix:Qk(process.env.KYNVER_RUNNER_TOKEN),kynverRuntimeSecret:!!process.env.KYNVER_RUNTIME_SECRET?.trim(),openclawCronSecret:!!process.env.OPENCLAW_CRON_SECRET?.trim(),kynverHarnessRoot:process.env.KYNVER_HARNESS_ROOT?.trim()||void 0,opusHarnessRoot:process.env.OPUS_HARNESS_ROOT?.trim()||void 0,kynverSchedulerProvider:process.env.KYNVER_SCHEDULER_PROVIDER?.trim()||void 0,openclawCronStorePath:!!(process.env.KYNVER_CRON_STORE_PATH?.trim()||process.env.OPENCLAW_CRON_STORE_PATH?.trim()),kynverCronDaemonPrimary:xi(),qstashTokenPresent:!!process.env.QSTASH_TOKEN?.trim(),kynverHostedDeployment:(()=>{let e=process.env.KYNVER_HOSTED_DEPLOYMENT?.trim().toLowerCase();return e==="1"||e==="true"||e==="yes"})()}),harnessRoot:()=>de(),legacyOpenclawHarnessRoot:()=>oa.join(na(),".openclaw","harness"),pathExists:e=>xu(e),pathWritable:e=>KA(e)};function ey(e,r){return e.kynverSchedulerProvider==="openclaw-cron"||r.deploymentSchedulerProvider==="openclaw-cron"}function jA(e,r){return e.kynverSchedulerProvider==="kynver-cron"||r.deploymentSchedulerProvider==="kynver-cron"}function ry(e){return!!e.openclawCronStorePath}function VA(e,r){return e.kynverSchedulerProvider==="qstash"||r.deploymentSchedulerProvider==="qstash"}function ty(e,r){let t={schedulerProvider:e.kynverSchedulerProvider??null,deploymentSchedulerProvider:r.deploymentSchedulerProvider??null,openclawCronStorePath:!!e.openclawCronStorePath,kynverCronDaemonPrimary:!!e.kynverCronDaemonPrimary},n=!!r.agentOsId?.trim()&&!!r.apiBaseUrl?.trim()&&r.hasScopedRunnerToken;if(VA(e,r)&&!ey(e,r)){let u=e.kynverSchedulerProvider==="qstash"?"KYNVER_SCHEDULER_PROVIDER=qstash on this host":"deploymentSchedulerProvider=qstash in ~/.kynver/config.json";return{id:"hotspot_openclaw_scheduler",label:"Scheduler provider (runtime daemon vs OpenClaw cron)",status:"pass",summary:`AgentOS scheduler cut over to QStash (${u})`,details:t}}if(jA(e,r)&&!ey(e,r)){if(ry(e)&&e.kynverCronDaemonPrimary&&n)return{id:"hotspot_openclaw_scheduler",label:"Scheduler provider (runtime daemon vs OpenClaw cron)",status:"pass",summary:"Kynver Cron local store present; `kynver daemon` owns schedule fires (kynver-cron tick loop)",details:{...t,dispatchPath:"kynver-daemon-cron-tick",kynverCronDaemonPrimary:!0}};let u=e.kynverSchedulerProvider==="kynver-cron"?"KYNVER_SCHEDULER_PROVIDER=kynver-cron on this host":"deploymentSchedulerProvider=kynver-cron in ~/.kynver/config.json";return{id:"hotspot_openclaw_scheduler",label:"Scheduler provider (runtime daemon vs OpenClaw cron)",status:"pass",summary:`AgentOS scheduler owned by Kynver Cron (${u})`,details:t}}if(ry(e)){if(e.kynverCronDaemonPrimary&&n)return{id:"hotspot_openclaw_scheduler",label:"Scheduler provider (runtime daemon vs OpenClaw cron)",status:"pass",summary:"Kynver Cron local store present; `kynver daemon` owns schedule fires (kynver-cron tick loop)",details:{...t,dispatchPath:"kynver-daemon-cron-tick",kynverCronDaemonPrimary:!0}};let u=[];return e.openclawCronStorePath&&u.push("KYNVER_CRON_STORE_PATH or OPENCLAW_CRON_STORE_PATH set (local cron store)"),{id:"hotspot_openclaw_scheduler",label:"Scheduler provider (runtime daemon vs OpenClaw cron)",status:"warn",summary:`Local cron store without daemon tick (${u.join("; ")})`,remediation:"Run `kynver daemon` with KYNVER_CRON_SECRET + KYNVER_API_URL (or KYNVER_CRON_FIRE_BASE_URL) so the daemon-owned cron tick fires schedules. On hosted deploys use QStash (KYNVER_SCHEDULER_PROVIDER=qstash). Legacy OpenClaw cron env aliases still work during cutover.",details:t}}let o=e.kynverSchedulerProvider==="openclaw-cron",s=r.deploymentSchedulerProvider==="openclaw-cron",i=e.kynverSchedulerProvider==="qstash",a=!!e.qstashTokenPresent||!!e.kynverHostedDeployment,l=a&&!n,c=l&&e.kynverSchedulerProvider==="openclaw-cron";return s&&!o?{id:"hotspot_openclaw_scheduler",label:"Scheduler provider (runtime daemon vs OpenClaw cron)",status:"warn",summary:"deploymentSchedulerProvider=openclaw-cron in ~/.kynver/config.json \u2014 migrate to kynver-cron or qstash",remediation:'Run `kynver scheduler attest-cutover` or set deploymentSchedulerProvider to "kynver-cron" or "qstash" in ~/.kynver/config.json.',details:t}:n&&o?{id:"hotspot_openclaw_scheduler",label:"Scheduler provider (runtime daemon vs OpenClaw cron)",status:"warn",summary:"KYNVER_SCHEDULER_PROVIDER=openclaw-cron on this runner \u2014 dispatch is owned by kynver daemon; unset the OpenClaw override",remediation:"Unset KYNVER_SCHEDULER_PROVIDER on user runners (or set kynver-cron). Use `kynver daemon` (pipeline-tick \u2192 operator/tick). On the Kynver server set KYNVER_SCHEDULER_PROVIDER=qstash when QStash is configured.",details:{schedulerProvider:e.kynverSchedulerProvider??null,dispatchPath:"kynver-daemon-pipeline-tick",hostedDeployment:a}}:n?{id:"hotspot_openclaw_scheduler",label:"Scheduler provider (runtime daemon vs OpenClaw cron)",status:"pass",summary:i?"Runner override qstash present; hosted dispatch still owned by kynver daemon pipeline-tick":"Hosted dispatch owned by kynver daemon (pipeline-tick \u2192 operator/tick); no OpenClaw cron on runner",details:{schedulerProvider:e.kynverSchedulerProvider??null,dispatchPath:"kynver-daemon-pipeline-tick",hostedDeployment:a}}:o?{id:"hotspot_openclaw_scheduler",label:"Scheduler provider (runtime daemon vs OpenClaw cron)",status:"warn",summary:"KYNVER_SCHEDULER_PROVIDER=openclaw-cron on this runner \u2014 hosted dispatch still depends on the OpenClaw local-cron adapter",remediation:"Unset KYNVER_SCHEDULER_PROVIDER on user runners (or set kynver-cron). Use `kynver daemon` (pipeline-tick \u2192 operator/tick). On the Kynver server set KYNVER_SCHEDULER_PROVIDER=qstash when QStash is configured.",details:{schedulerProvider:e.kynverSchedulerProvider??null,hostedDeployment:a}}:c?{id:"hotspot_openclaw_scheduler",label:"Scheduler provider (runtime daemon vs OpenClaw cron)",status:"warn",summary:"Hosted deployment has KYNVER_SCHEDULER_PROVIDER=openclaw-cron \u2014 AgentOS scheduled ticks should use QStash or kynver-cron",remediation:"Set QSTASH_TOKEN and KYNVER_SCHEDULER_PROVIDER=qstash on the Kynver server (or kynver-cron for Kynver-owned local scheduling). User runners use `kynver daemon` for dispatch and should not set a scheduler provider.",details:{schedulerProvider:e.kynverSchedulerProvider??null,qstashTokenPresent:e.qstashTokenPresent??!1,hostedDeployment:a}}:l&&e.qstashTokenPresent&&!e.kynverSchedulerProvider?{id:"hotspot_openclaw_scheduler",label:"Scheduler provider (runtime daemon vs OpenClaw cron)",status:"pass",summary:"QSTASH_TOKEN present; hosted scheduler auto-selects qstash (explicit KYNVER_SCHEDULER_PROVIDER=qstash optional)",details:{schedulerProvider:null,qstashTokenPresent:!0,hostedDeployment:a}}:l&&!e.qstashTokenPresent&&!e.kynverSchedulerProvider?{id:"hotspot_openclaw_scheduler",label:"Scheduler provider (runtime daemon vs OpenClaw cron)",status:"warn",summary:"Hosted deployment with no QSTASH_TOKEN and no KYNVER_SCHEDULER_PROVIDER \u2014 kynver-cron is an in-process stub here and will NOT fire; no firing scheduler is configured",remediation:"Set QSTASH_TOKEN + KYNVER_SCHEDULER_PROVIDER=qstash on the Kynver server for hosted AgentOS schedules. Only use kynver-cron when a `kynver daemon` (or local cron store) actually owns firing on this box.",details:{schedulerProvider:null,resolvedFallback:"none",qstashTokenPresent:!1,hostedDeployment:a}}:l&&!e.qstashTokenPresent&&e.kynverSchedulerProvider&&e.kynverSchedulerProvider!=="qstash"&&e.kynverSchedulerProvider!=="kynver-cron"?{id:"hotspot_openclaw_scheduler",label:"Scheduler provider (runtime daemon vs OpenClaw cron)",status:"warn",summary:`Hosted deployment without QSTASH_TOKEN (KYNVER_SCHEDULER_PROVIDER=${e.kynverSchedulerProvider}) \u2014 use qstash or kynver-cron`,remediation:"Set QSTASH_TOKEN and KYNVER_SCHEDULER_PROVIDER=qstash on the Kynver server, or kynver-cron for Kynver-owned local scheduling. User runners use `kynver daemon` for dispatch.",details:{schedulerProvider:e.kynverSchedulerProvider??null,qstashTokenPresent:e.qstashTokenPresent??!1,hostedDeployment:a}}:e.kynverSchedulerProvider?{id:"hotspot_openclaw_scheduler",label:"Scheduler provider (runtime daemon vs OpenClaw cron)",status:"pass",summary:`KYNVER_SCHEDULER_PROVIDER=${e.kynverSchedulerProvider}`,details:{schedulerProvider:e.kynverSchedulerProvider??null}}:{id:"hotspot_openclaw_scheduler",label:"Scheduler provider (runtime daemon vs OpenClaw cron)",status:"pass",summary:"No KYNVER_SCHEDULER_PROVIDER on runner (expected) \u2014 finish runner setup so daemon pipeline-tick owns dispatch",details:{schedulerProvider:null,dispatchPath:"kynver-daemon-pipeline-tick-pending"}}}function GA(e){let r={pass:0,warn:0,fail:0};for(let t of e)for(let n of t.checks)r[n.status]+=1;return r}function YA(e){let r=e.packageVersion(),t=e.commandOnPath("kynver"),n=t.ok&&t.stdout.length>0,o=n?t.stdout.split(/\r?\n/)[0]?.trim():void 0,s=o?Y(o):void 0,i=[{id:"cli_running_version",label:"Running @kynver-app/runtime version",status:"pass",summary:`@kynver-app/runtime ${r}`,details:{version:r}},{id:"cli_on_path",label:"kynver executable on PATH",status:n?"pass":"warn",summary:n?`Found ${s}`:"kynver not found on PATH (invoked via node/npx?)",remediation:n?void 0:"Install globally (`npm i -g @kynver-app/runtime`) or invoke via `npx @kynver-app/runtime`.",details:{path:s}}];if(n&&o){let a=e.kynverVersion(o),l=a.stdout.replace(/^kynver\s+/i,"").trim()||void 0,c=a.ok&&(!l||l===r);i.push({id:"cli_installed_version",label:"Installed kynver CLI version matches running package",status:c?"pass":"warn",summary:a.ok&&l?c?`Installed ${l}`:`Installed ${l} differs from running ${r}`:a.error?`Could not read installed version (${a.error})`:a.stderr||"Could not read installed version",remediation:c?void 0:"Reinstall or rebuild @kynver-app/runtime so PATH kynver matches the harness worktree version.",details:{installedVersion:l,runningVersion:r,path:s}})}return{id:"cli_package",label:"CLI / package",checks:i}}function JA(e){let r=e.configFilePath(),t=Y(r),n=e.pathExists(r),o=e.loadConfig(),s=[{id:"config_file",label:"~/.kynver/config.json present",status:n?"pass":"fail",summary:n?`Found ${t}`:`Missing ${t}`,remediation:n?void 0:"Run `kynver setup --api-base-url <url> --agent-os-id <id> --repo <path>`.",details:{configPath:t}}];if(n){let i=o.apiBaseUrl?.trim(),a=o.agentOsId?.trim(),l=Re({config:o}),c=l?Yt(l):null,u=zk(l);s.push({id:"config_api_base_url",label:"Default API base URL",status:i?"pass":"warn",summary:i??"Not set in config (KYNVER_API_URL / --base-url required per command)",remediation:i?void 0:"Set `apiBaseUrl` via `kynver setup --api-base-url https://\u2026`.",details:{apiBaseUrl:i??null}},{id:"config_agent_os_id",label:"Default AgentOS id",status:a?"pass":"warn",summary:a??"Not set (pass --agent-os-id on daemon/dispatch/worker commands)",remediation:a?void 0:"Set `agentOsId` via `kynver setup --agent-os-id <uuid>`.",details:{agentOsId:a??null,agentOsSlug:o.agentOsSlug??null}},{id:"config_default_repo",label:"Default repo path",status:u.status,summary:l?l.persistedInConfig?`${c.defaultRepo} (config)`:`${c.defaultRepo} (${l.source}, not persisted in ~/.kynver/config.json)`:"Not set in ~/.kynver/config.json (`kynver run create` requires --repo)",remediation:u.remediation,details:{defaultRepo:c?.defaultRepo??null,source:c?.source??null,persistedInConfig:c?.persistedInConfig??!1,harnessRoot:o.harnessRoot?he(o.harnessRoot):null}})}return{id:"user_config",label:"User config (~/.kynver)",checks:s}}function qA(e){let t=e.loadConfig().agentOsId?.trim(),n=e.readCredentials(),o=e.envSnapshot(),s=e.credentialsFilePath(),i=Y(s),a=o.kynverRunnerTokenPrefix,l=n.runnerTokenPrefix,c=n.runnerTokenAgentOsId,u=!!l&&(!t||!c||c===t),d=!!a?.startsWith("krc1.")||u&&l?.startsWith("krc1.");return{id:"runner_token",label:"Runner token readiness",checks:[{id:"runner_token_scoped",label:"Scoped runner token (krc1.*) ready",status:d?"pass":"fail",summary:d?a?"KYNVER_RUNNER_TOKEN is set (scoped prefix shown)":`Saved scoped token for agentOsId ${c??t??"(unknown)"}`:"No scoped runner token for the configured AgentOS workspace",remediation:d?void 0:"Run `kynver login` then `kynver runner credential --agent-os-id <id>` (or `kynver setup` with API key).",details:{source:a?"env":l?"credentials":"none",tokenPrefix:a??(u?l:void 0),agentOsId:t??c??null,credentialsPath:i}},{id:"runner_token_agent_os_match",label:"Saved runner token matches configured agentOsId",status:!l||!t||!c||c===t?"pass":"warn",summary:!l||!c?"No saved token agentOsId to compare":t?c===t?"Saved token scoped to configured agentOsId":`Saved token is for ${c}, config expects ${t}`:"Config agentOsId unset \u2014 token scope not validated against config",remediation:l&&t&&c&&c!==t?"`kynver runner credential --agent-os-id <configured-id>` to mint a workspace-bound token.":void 0,details:{configuredAgentOsId:t??null,savedAgentOsId:c??null}},{id:"runner_api_key_for_refresh",label:"API key available for token refresh",status:n.hasApiKey||process.env.KYNVER_API_KEY?.trim()?"pass":"warn",summary:n.hasApiKey||process.env.KYNVER_API_KEY?"KYNVER API key present for runner credential mint/refresh":"No API key \u2014 401 callback recovery cannot auto-mint a replacement token",remediation:n.hasApiKey||process.env.KYNVER_API_KEY?void 0:"Run `kynver login --api-key \u2026`.",details:{credentialsPath:i,hasApiKey:n.hasApiKey||!!process.env.KYNVER_API_KEY}}]}}function zA(e){let r=e.commandOnPath("vercel"),t=r.ok,n=!!(process.env.GITHUB_TOKEN?.trim()||process.env.GH_TOKEN?.trim()),o=!!process.env.VERCEL_TOKEN?.trim();return{id:"vercel_deploy_evidence",label:"Vercel deploy evidence",checks:[{id:"vercel_global_cli_absent",label:"Global Vercel CLI not installed",status:t?"warn":"pass",summary:t?`Global Vercel CLI found (${r.stdout||"on PATH"}) \u2014 uninstall after operator approval`:"No global Vercel CLI on PATH",remediation:t?"Uninstall global Vercel CLI (`npm uninstall -g vercel`) \u2014 use GitHub commit status or scoped VERCEL_TOKEN + REST API instead.":void 0,details:{path:t&&r.stdout||null}},{id:"github_token_for_vercel_status",label:"GitHub token for Vercel status",status:n?"pass":"warn",summary:n?"GITHUB_TOKEN/GH_TOKEN present for GitHub Vercel StatusContext evidence":"No GITHUB_TOKEN \u2014 merge-gate Vercel evidence requires GitHub commit status API",remediation:n?void 0:"Export GITHUB_TOKEN (or GH_TOKEN) for PR head commit status lookups."},{id:"vercel_api_token_optional",label:"Vercel API token (optional fallback)",status:o?"pass":"warn",summary:o?"VERCEL_TOKEN configured for optional REST API deployment lookup":"VERCEL_TOKEN unset \u2014 GitHub status is the default path; API fallback disabled",remediation:o?void 0:"Set ephemeral/scoped VERCEL_TOKEN only when GitHub status is insufficient; avoid persistent ~/.vercel auth on runner hosts."}]}}function XA(e){let r=e.harnessRoot(),t=ny.join(r,"runs"),n=ny.join(r,"worktrees"),o=he(r),s=he(t),i=he(n),a=e.pathExists(t),l=e.pathExists(n);return{id:"harness_dirs",label:"Harness / daemon directories",checks:[{id:"harness_root",label:"Harness root resolved",status:"pass",summary:o,details:{harnessRoot:o}},{id:"harness_runs_dir",label:"Runs directory ready",status:a&&e.pathWritable(t)?"pass":"warn",summary:a?e.pathWritable(t)?`Writable ${s}`:`Exists but not writable: ${s}`:`Will be created on first run: ${s}`,remediation:a&&!e.pathWritable(t)?`Fix permissions on ${s} or set KYNVER_HARNESS_ROOT to a writable path.`:void 0,details:{runsDir:s,exists:a,writable:e.pathWritable(t)}},{id:"harness_worktrees_dir",label:"Worktrees directory ready",status:l&&e.pathWritable(n)?"pass":"warn",summary:l?e.pathWritable(n)?`Writable ${i}`:`Exists but not writable: ${i}`:`Will be created on first worker: ${i}`,remediation:l&&!e.pathWritable(n)?`Fix permissions on ${i}.`:void 0,details:{worktreesDir:i,exists:l,writable:e.pathWritable(n)}}]}}function QA(e){let r=e.loadConfig(),t=e.envSnapshot(),n=t.kynverApiUrl??r.apiBaseUrl?.trim()??t.openclawCronFireBaseUrl,o=!t.kynverApiUrl&&!r.apiBaseUrl&&!!t.openclawCronFireBaseUrl,s=t.openclawCronSecret||t.kynverRuntimeSecret,i=t.kynverRunnerTokenPrefix?.startsWith("krc1."),l=e.readCredentials().runnerTokenPrefix?.startsWith("krc1.");return{id:"callback_auth",label:"Callback auth / config",checks:[{id:"callback_base_url",label:"Callback base URL configured",status:n?o?"warn":"pass":"fail",summary:n?o?`Using legacy OPENCLAW_CRON_FIRE_BASE_URL (${n})`:n:"No KYNVER_API_URL, config apiBaseUrl, or legacy OpenClaw base URL",remediation:n?o?"Migrate to KYNVER_API_URL or `kynver setup --api-base-url` and drop OPENCLAW_CRON_FIRE_BASE_URL.":void 0:"Set KYNVER_API_URL or run `kynver setup --api-base-url https://\u2026`.",details:{source:t.kynverApiUrl?"KYNVER_API_URL":r.apiBaseUrl?"config.apiBaseUrl":t.openclawCronFireBaseUrl?"OPENCLAW_CRON_FIRE_BASE_URL":"none",baseUrl:n??null}},{id:"callback_auth_mode",label:"Callback auth uses scoped runner token",status:i||l?"pass":s?"warn":"fail",summary:i?"KYNVER_RUNNER_TOKEN scoped token will be sent as X-Kynver-Runner-Token":l?"Saved krc1.* token in ~/.kynver/credentials":s?"Deployment-level KYNVER_RUNTIME_SECRET / OPENCLAW_CRON_SECRET in use (legacy headers)":"No callback secret configured",remediation:i||l?void 0:"Mint a scoped token: `kynver runner credential --agent-os-id <id>`. Avoid shared OPENCLAW_CRON_SECRET on user runners.",details:{mode:i||l?"scoped":s?"legacy_global_secret":"missing",legacyHeadersWhenNotScoped:["X-OpenClaw-Cron-Secret","X-Kynver-Runtime-Secret"]}}]}}function ZA(e){let r=e.envSnapshot(),t=e.loadConfig(),n=e.readCredentials(),o=e.harnessRoot(),s=e.legacyOpenclawHarnessRoot(),i=he(o),a=he(s),l=r.opusHarnessRoot?he(r.opusHarnessRoot):null,c=o===s&&e.pathExists(s),u=t.agentOsId?.trim(),d=r.kynverRunnerTokenPrefix,f=n.runnerTokenPrefix,m=n.runnerTokenAgentOsId,p=!!f&&(!u||!m||m===u),g=!!d?.startsWith("krc1.")||p&&!!f?.startsWith("krc1.");return{id:"openclaw_hotspots",label:"OpenClaw dependency hotspots",checks:[{id:"hotspot_legacy_harness_root",label:"Legacy ~/.openclaw/harness still active",status:c?"warn":"pass",summary:c?`Harness root is legacy ${a}`:r.opusHarnessRoot?`OPUS_HARNESS_ROOT override in use (${l})`:`Using ${i}`,remediation:c?"Set KYNVER_HARNESS_ROOT=~/.kynver/harness (or run setup), migrate artifacts, retire OPUS_HARNESS_ROOT.":r.opusHarnessRoot?"Prefer KYNVER_HARNESS_ROOT over OPUS_HARNESS_ROOT.":void 0,details:{harnessRoot:i,legacyRoot:a,opusHarnessRoot:l}},{id:"hotspot_openclaw_env_secrets",label:"OpenClaw deployment secrets in runner env",status:r.openclawCronSecret||r.openclawCronFireBaseUrl?"warn":"pass",summary:r.openclawCronSecret||r.openclawCronFireBaseUrl?[r.openclawCronSecret?"OPENCLAW_CRON_SECRET set":null,r.openclawCronFireBaseUrl?"OPENCLAW_CRON_FIRE_BASE_URL set":null].filter(Boolean).join("; "):"No OpenClaw cron env overrides on this runner",remediation:r.openclawCronSecret||r.openclawCronFireBaseUrl?"Move to KYNVER_API_URL + scoped runner tokens; unset OpenClaw cron env on user-hosted runners.":void 0},ty(r,{agentOsId:u??null,apiBaseUrl:t.apiBaseUrl?.trim()??r.kynverApiUrl??null,hasScopedRunnerToken:g,deploymentSchedulerProvider:t.deploymentSchedulerProvider==="qstash"||t.deploymentSchedulerProvider==="kynver-cron"||t.deploymentSchedulerProvider==="openclaw-cron"?t.deploymentSchedulerProvider:void 0}),{id:"hotspot_lease_source_names",label:"Harness lease/completion source names",status:"pass",summary:"Runtime uses kynver-harness:* lease owners and completion source kynver-harness (OpenClaw names retired in runtime)",details:{leaseOwnerPattern:"kynver-harness:<runId>",completionSource:"kynver-harness",note:"OpenClaw adapter remains optional in packages/kynver-openclaw-agent-os only"}}]}}function oy(e=Zk){let r=[YA(e),JA(e),qA(e),zA(e),XA(e),QA(e),ZA(e)],t=GA(r),n=t.fail===0,o=n?t.warn>0?`Ready with ${t.warn} warning(s) \u2014 review remediation before retiring OpenClaw as primary runtime agent.`:"Ready \u2014 Kynver runtime can serve as primary runtime agent on this host.":`${t.fail} blocking check(s) \u2014 fix failures before OpenClaw takeover.`;return{command:"doctor runtime-takeover",ready:n,summary:o,counts:t,sections:r}}function sy(e={}){let r;if(e.remediateDefaultRepo===!0){let n=_u();if(!n.ok){console.error(n.reason??"defaultRepo remediation failed"),n.remediation&&console.error(n.remediation),process.exitCode=1;return}n.remediated?r=`Remediated defaultRepo \u2192 ${n.resolved?.defaultRepo??"unknown"}`:r=`defaultRepo already persisted (${n.resolved?.defaultRepo??"unknown"})`}let t=oy();r&&(t.notes=[...t.notes??[],r]),console.log(JSON.stringify(t,null,2)),t.ready||(process.exitCode=1)}O();async function iy(e){let r=v(),t=(e.agentOsId?String(e.agentOsId):r.agentOsId)||"";t||(console.error("requires --agent-os-id or agentOsId in ~/.kynver/config.json"),process.exit(1));let n=B(e.baseUrl?String(e.baseUrl):r.apiBaseUrl),o=await K(e.secret?String(e.secret):void 0,t,{baseUrl:n}),s=new URLSearchParams;if(typeof e.since=="string"&&e.since.trim()&&s.set("since",e.since.trim()),e.limit!=null&&String(e.limit).trim()){let c=Number(e.limit);Number.isFinite(c)&&c>0&&s.set("limit",String(Math.floor(c)))}let i=s.toString()?`?${s.toString()}`:"",a=`${n}/api/agent-os/by-id/${encodeURIComponent(t)}/command-center/dashboard-contract${i}`,l=await as(a,o);l.ok||(console.error(`dashboard-contract GET failed: HTTP ${l.status}`),l.response&&console.error(JSON.stringify(l.response,null,2)),process.exit(1)),console.log(JSON.stringify(l.response,null,2))}nr();var Eu=["Vercel/hosted: set KYNVER_SCHEDULER_PROVIDER=qstash","Vercel/hosted: ensure QSTASH_TOKEN (and QStash signing keys) are configured","Vercel/hosted: unset OPENCLAW_CRON_STORE_PATH if present"],Pu=["User runner: unset KYNVER_SCHEDULER_PROVIDER (scheduling is deployment-owned)","User runner: unset OPENCLAW_CRON_STORE_PATH, OPENCLAW_CRON_SECRET, OPENCLAW_CRON_FIRE_BASE_URL",'User runner: after deployment cutover, run `kynver scheduler attest-cutover` (or set deploymentSchedulerProvider to "qstash" in ~/.kynver/config.json)',"Verify: kynver doctor runtime-takeover \u2014 hotspot_openclaw_scheduler should pass"];function eI(e=process.env){return{kynverSchedulerProvider:e.KYNVER_SCHEDULER_PROVIDER?.trim()||null,kynverCronStorePath:e.KYNVER_CRON_STORE_PATH?.trim()||e.OPENCLAW_CRON_STORE_PATH?.trim()||null,kynverCronSecret:!!(e.KYNVER_CRON_SECRET?.trim()||e.OPENCLAW_CRON_SECRET?.trim()),kynverCronFireBaseUrl:e.KYNVER_CRON_FIRE_BASE_URL?.trim()||e.OPENCLAW_CRON_FIRE_BASE_URL?.trim()||null,openclawCronStorePath:e.OPENCLAW_CRON_STORE_PATH?.trim()||null,openclawCronSecret:!!e.OPENCLAW_CRON_SECRET?.trim(),openclawCronFireBaseUrl:e.OPENCLAW_CRON_FIRE_BASE_URL?.trim()||null}}function Au(e,r=eI()){let t=[];return r.kynverSchedulerProvider==="openclaw-cron"&&t.push("Runner still has KYNVER_SCHEDULER_PROVIDER=openclaw-cron"),r.kynverCronStorePath&&r.kynverSchedulerProvider!=="kynver-cron"&&t.push("Runner has KYNVER_CRON_STORE_PATH but KYNVER_SCHEDULER_PROVIDER is not kynver-cron \u2014 use `kynver daemon` cron tick or unset the store for QStash-only runners"),r.openclawCronStorePath&&!r.kynverCronStorePath&&t.push("Runner still has legacy OPENCLAW_CRON_STORE_PATH (prefer KYNVER_CRON_STORE_PATH)"),e.deploymentSchedulerProvider==="openclaw-cron"&&t.push("~/.kynver/config.json deploymentSchedulerProvider is still openclaw-cron"),{ok:t.length===0,blockers:t,runnerEnv:r,deploymentSchedulerProvider:e.deploymentSchedulerProvider??null,deploymentSteps:[...Eu],runnerSteps:[...Pu]}}function ay(e){return{...e,deploymentSchedulerProvider:"qstash"}}O();import rI from"node:path";import{homedir as tI}from"node:os";var ly=rI.join(tI(),".kynver","config.json");function cy(e=!1){let r=v(),t=Au(r),n={...t,configPath:Y(ly),configAttestationExample:{deploymentSchedulerProvider:"qstash"}};if(e){console.log(JSON.stringify(n,null,2)),t.ok||(process.exitCode=1);return}console.log(`AgentOS scheduler provider cutover checklist
-`),console.log("Deployment (Vercel):");for(let o of Eu)console.log(`  - ${o}`);console.log(`
-User runner:`);for(let o of Pu)console.log(`  - ${o}`);if(console.log(`
+${_I}
+${e.diagnostic}`:e.primary}function xI(e){let r=[`Harness ${e.scope} ${e.action} failed.`];e.timedOut?r.push("Reason: command timed out on the runner host."):e.error?r.push(`Reason: ${e.error}`):e.exitCode!=null&&r.push(`Exit code: ${e.exitCode}`);let t=e.stderr.trim();t&&r.push(`Stderr: ${t.split(`
+`).slice(-3).join(" ")}`),r.push("Next: retry on the runner host or inspect harness logs.");let n=ha(e.stdout);return{primary:r.join(`
+`),diagnostic:se(n??{stdout:e.stdout,stderr:e.stderr})}}function vy(e){if(!e.ok)return xI(e);let r=ha(e.stdout);if(r===null){let t=e.stdout.trim()||e.stderr.trim()||"(no output)";return{primary:`Harness ${e.scope} ${e.action} finished.
+${t.slice(0,800)}`,diagnostic:se({stdout:e.stdout,stderr:e.stderr})}}if(e.scope==="worker"&&e.action==="status")return Fo(r);if(e.scope==="worker"&&e.action==="complete")return ya(r);if(e.scope==="monitor"&&(e.action==="tick"||e.action==="run-loop"))return En(r);if(e.scope==="monitor"&&e.action==="auto-complete"){let t=r;if(t.outcome&&t.worker&&t.runId)return ka(r);if(Array.isArray(t.blockers))return{primary:[`Monitor auto-complete blocked \xB7 ${t.runId??"run"} / ${t.worker??"worker"}`,`Blockers: ${t.blockers.join("; ")}`,"Next: resolve blockers on the runner, then retry auto-complete."].join(`
+`),diagnostic:se(r)}}if(e.scope==="run"&&e.action==="status"){let t=r.workers;return Array.isArray(t)&&t.length===1?Fo(t[0]):{primary:`Harness run status \xB7 ${r.runId??"run"} (${Array.isArray(t)?t.length:0} workers).`,diagnostic:se(r)}}return{primary:`Harness ${e.scope} ${e.action} completed successfully on the runner.`,diagnostic:se(r)}}import II from"node:path";W();Y();C();Y();C();function Ra(e){let{worker:r,status:t,taskLease:n}=e,o=n?.leaseOwner??null;if(r.dispatched&&n){if(n.status==="running"&&o&&!Bl(o,r.runId))return{health:"orphaned",reason:`task lease held by ${o}, expected harness run ${r.runId}`};if(n.status==="running"&&!t.alive&&!t.finalResult)return{health:"orphaned",reason:"board task running but worker process is not alive"}}if(r.status==="running"&&!t.alive&&!t.finalResult)return{health:"orphaned",reason:"worker.json still running but process is dead"};if(t.attention.state==="stale")return{health:"stale",reason:t.attention.reason};let s=t.lastHeartbeatAt?Date.parse(t.lastHeartbeatAt):NaN;return t.alive&&Number.isFinite(s)&&Date.now()-s>$t?{health:"stale",reason:`heartbeat older than ${Math.floor($t/1e3)}s`}:t.alive&&r.pid&&!$(r.pid)?{health:"orphaned",reason:"pid recorded but process is not alive"}:n?.status==="running"&&!t.alive&&t.finalResult?{health:"healthy",reason:"finished worker awaiting completion replay"}:{health:"healthy",reason:t.attention.reason||"worker within expected lifecycle bounds"}}Ce();C();import{existsSync as Sy,mkdirSync as EI,readdirSync as PI,unlinkSync as AI}from"node:fs";import $u from"node:path";function Cy(){let{harnessRoot:e}=Vr(),r=$u.join(e,"monitors");return EI(r,{recursive:!0}),r}function St(e,r){return r?`${R(e)}--${R(r)}`:R(e)}function Ku(e){return $u.join(Cy(),`${e}.json`)}function Ct(e){return _(Ku(e),void 0)}function wt(e){de(Ku(e.monitorId),e)}function ju(e){let r=Ku(e);return Sy(r)?(AI(r),!0):!1}function wy(){let e=Cy();if(!Sy(e))return[];let r=[];for(let t of PI(e)){if(!t.endsWith(".json"))continue;let n=_($u.join(e,t),void 0);n?.monitorId&&r.push({monitorId:n.monitorId,runId:n.runId,workerName:n.workerName,agentOsId:n.agentOsId,pid:n.pid,alive:n.pid?$(n.pid):!1,startedAt:n.startedAt,pollMs:n.pollMs,logPath:n.logPath})}return r.sort((t,n)=>t.startedAt.localeCompare(n.startedAt))}Y();function $o(e){let{worker:r,status:t}=e,n=[];r.localOnly&&n.push("local-only worker (no board linkage)"),(!r.agentOsId||!r.taskId)&&n.push("missing agentOsId/taskId linkage"),Ys(r)&&n.push("completion already acknowledged"),r.completionBlocker&&n.push(r.completionBlocker),t.heartbeatBlocker&&t.alive&&n.push(`worker heartbeat blocker: ${t.heartbeatBlocker}`),t.attention.state==="blocked"&&n.push(t.attention.reason||"worker attention blocked"),Xr(t)&&n.push(t.attention.reason||"landing gate blocked");let o=ne(t),s;return o?t.finalResult?s="final_result":t.alive?s="terminal_status":s="process_exited":n.push("worker has not reached a terminal condition"),{eligible:o&&n.length===0,terminalVerified:o,terminalReason:s,blockers:n}}I();async function _y(e){let r=new Map,t=e.agentOsId?.trim();if(!t||e.taskIds.length===0)return r;let n=F(e.baseUrl);try{let o=await V(e.secret,t,{baseUrl:n}),s=`${n}/api/agent-os/by-id/${encodeURIComponent(t)}/harness/monitor/task-leases`,i=await X(s,o,{taskIds:[...new Set(e.taskIds)]},{agentOsId:t,baseUrl:n});if(!i.ok||!i.response||typeof i.response!="object")return r;let a=i.response.tasks;if(!Array.isArray(a))return r;for(let l of a)l?.taskId&&r.set(l.taskId,l)}catch{}return r}function xy(e,r){return _(II.join(E(e),"workers",R(r),"worker.json"),void 0)}function Ey(e,r){let t=L(e),n=Object.keys(t.workers||{});if(!r)return n;let o=R(r);return n.filter(s=>R(s)===o)}function Py(e,r){let t=L(e.runId),n=N(e,{base:t.base,baseCommit:t.baseCommit}),o=e.taskId?r.get(e.taskId)??null:null,s=Ra({worker:e,status:n,taskLease:o}),i=$o({worker:e,status:n});return{runId:e.runId,worker:e.name,health:s.health,healthReason:s.reason,workerStatus:n.status,attentionState:n.attention.state,attentionReason:n.attention.reason,alive:n.alive,taskId:e.taskId,leaseOwner:o?.leaseOwner??void 0,taskStatus:o?.status,autoComplete:i,status:n}}async function _t(e){let r=String(e.run||"");O(r,"--run");let t=e.name?String(e.name):void 0,n=e.agentOsId?String(e.agentOsId):void 0,o=L(r),s=Ey(r,t),i=[];for(let p of s){let g=xy(r,p);g&&i.push(g)}let a=n||i.map(p=>p.agentOsId).find(p=>typeof p=="string"&&p.trim())||void 0,l=i.map(p=>p.taskId).filter(p=>!!p),c=await _y({agentOsId:a,taskIds:l,baseUrl:e.baseUrl?String(e.baseUrl):void 0,secret:e.secret?String(e.secret):void 0}),u=i.map(p=>Py(p,c)),d;a&&e.renewLeases!==!1&&e.renewLeases!=="false"&&(d=await $s(r,{...e,agentOsId:a}));let f=[];if(e.autoComplete===!0||e.autoComplete==="true")for(let p of u){if(!p.autoComplete.eligible){f.push({worker:p.worker,outcome:"skipped",ok:!1,reason:p.autoComplete.blockers.join("; ")||"not eligible"});continue}let g=await ct({run:r,name:p.worker,...a?{agentOsId:a}:{},...e.baseUrl?{baseUrl:String(e.baseUrl)}:{},...e.secret?{secret:String(e.secret)}:{}});f.push({worker:p.worker,outcome:g.outcome,ok:g.outcome==="completed",reason:g.reason})}return{runId:r,agentOsId:a,workers:u,leaseRenewal:d,autoCompleted:f}}function ba(e){let r=String(e.run||"");O(r,"--run");let t=e.name?String(e.name):void 0,n=Ey(r,t),o=[];for(let s of n){let i=xy(r,s);i&&o.push(Py(i,new Map))}return{runId:r,workers:o,autoCompleted:[]}}function Ko(){return wy()}function Vu(e){let r=String(e.run||"");O(r,"--run");let t=St(r,e.name?String(e.name):void 0),n=Ct(t);if(!n)return{monitorId:t,stopped:!1};if(n.pid&&$(n.pid))try{process.kill(n.pid,"SIGTERM")}catch{}return n.stoppedAt=new Date().toISOString(),wt(n),ju(t),{monitorId:t,stopped:!0,pid:n.pid}}async function va(e){let r=String(e.run||""),t=String(e.name||"");O(r,"--run"),O(t,"--name");let n=we(r,t),o=L(r),s=N(n,{base:o.base,baseCommit:o.baseCommit}),i=$o({worker:n,status:s});if(!i.eligible){console.log(JSON.stringify({runId:r,worker:t,outcome:"blocked",blockers:i.blockers,terminalVerified:i.terminalVerified},null,2)),process.exitCode=1;return}let a=await ct({...e,run:r,name:t});console.log(JSON.stringify(a,null,2)),a.outcome!=="completed"&&a.outcome!=="blocked"&&(process.exitCode=1)}C();var OI=5e3,NI=360*60*1e3;async function Gu(e){let r=String(e.monitorId||""),t=Number(e.pollMs)>0?Math.floor(Number(e.pollMs)):OI,n=Number(e.maxTotalMs)>0?Math.floor(Number(e.maxTotalMs)):NI,o=Date.now();for(;Date.now()-o<=n;){let s=r?Ct(r):void 0;if(s?.stoppedAt)break;let i=await _t({...e,autoComplete:e.autoComplete??!0,renewLeases:e.renewLeases??!0}),a=En({monitorId:r,phase:"tick",...i});if(console.log(a.primary),a.diagnostic&&console.error(`[monitor diagnostic] ${a.diagnostic}`),i.workers.length>0&&i.workers.every(c=>c.autoComplete.terminalVerified&&(c.autoComplete.eligible||c.autoComplete.blockers.some(u=>u.includes("already acknowledged"))))&&i.autoCompleted.every(c=>c.ok||c.outcome==="skipped")){r&&s&&(s.stoppedAt=new Date().toISOString(),wt(s));break}Br(t)}}C();Ce();import{spawn as TI}from"node:child_process";import{closeSync as Ay,existsSync as DI,openSync as MI}from"node:fs";import Iy from"node:path";import{fileURLToPath as UI}from"node:url";function WI(){return Iy.join(UI(new URL(".",import.meta.url)),"cli.js")}function Sa(e){let r=e.cliPath??WI();if(!DI(r))return;let t=St(e.runId,e.workerName),{harnessRoot:n}=Vr(),o=Iy.join(n,"monitors",`${t}.log`),s;try{s=MI(o,"a")}catch{s=void 0}let i=e.nodeExecutable??process.execPath,a=e.pollMs??5e3,l=[r,"monitor","run-loop","--run",e.runId,"--monitor-id",t,"--poll-ms",String(a),"--auto-complete","true","--renew-leases","true"];e.workerName&&l.push("--name",e.workerName),e.agentOsId&&l.push("--agent-os-id",e.agentOsId),e.baseUrl&&l.push("--base-url",e.baseUrl),e.secret&&l.push("--secret",e.secret);let c=["ignore",s??"ignore",s??"ignore"];try{let u=TI(i,l,ue({detached:!0,stdio:c,env:process.env}));s!==void 0&&Ay(s),u.unref();let d={monitorId:t,runId:e.runId,workerName:e.workerName,agentOsId:e.agentOsId,pid:u.pid,startedAt:new Date().toISOString(),pollMs:a,logPath:o};return wt(d),{monitorId:t,pid:u.pid,logPath:o,session:d}}catch{if(s!==void 0)try{Ay(s)}catch{}return}}C();async function Oy(e){let r=String(e.run||"");O(r,"--run");let t=e.name?String(e.name):void 0,n=St(r,t),o=Ct(n);if(o?.pid&&!o.stoppedAt)return{monitorId:n,session:o,spawned:!1,pid:o.pid};let s=Sa({runId:r,workerName:t,agentOsId:e.agentOsId?String(e.agentOsId):void 0,pollMs:Number(e.pollMs)>0?Math.floor(Number(e.pollMs)):void 0,baseUrl:e.baseUrl?String(e.baseUrl):void 0,secret:e.secret?String(e.secret):void 0});if(!s)throw new Error("failed to spawn monitor sidecar (cli.js missing or spawn error)");return{monitorId:n,session:s.session,spawned:!0,pid:s.pid}}async function Ny(e){if(String(e.run||"")){let t=e.tick===!0||e.tick==="true"?await _t({...e,autoComplete:!1}):ba(e);console.log(JSON.stringify(t,null,2));return}console.log(JSON.stringify({monitors:Ko()},null,2))}function Ty(e){console.log(JSON.stringify(Vu(e),null,2))}function Dy(){console.log(JSON.stringify({monitors:Ko()},null,2))}async function My(e){await Gu(e)}async function Uy(e){let r=await _t(e);console.log(JSON.stringify(r,null,2))}W();Y();C();I();import LI from"node:path";function jo(e,r,t,n,o,s){return{runId:e,worker:r,taskId:t,agentOsId:n,leaseOwner:o,action:"skipped",reason:s}}async function BI(e){let r=F(e.baseUrl?String(e.baseUrl):void 0),t=e.agentOsId?String(e.agentOsId).trim():null,n=e.dryRun===!0||e.dryRun==="true",o=[],s=[],i=[];for(let a of J())for(let l of Object.keys(a.workers??{})){let c=LI.join(E(a.id),"workers",R(l),"worker.json"),u=_(c,void 0);if(!u){s.push(jo(a.id,l,"","","","worker.json missing"));continue}let d=u.taskId??"",f=u.agentOsId??"",m=u.leaseOwner??"";if(!u.dispatched||!d||!f||!m){s.push(jo(a.id,l,d,f,m,"not a fully-leased dispatched worker"));continue}if(t&&f!==t)continue;if(u.completionReportedAt){s.push(jo(a.id,l,d,f,m,"completion already reported"));continue}let p=N(u);if(p.finalResult){s.push(jo(a.id,l,d,f,m,"has final result \u2014 let pipeline tick complete it"));continue}if(p.alive){s.push(jo(a.id,l,d,f,m,"worker process is still alive"));continue}if(n){o.push({runId:a.id,worker:l,taskId:d,agentOsId:f,leaseOwner:m,action:"released",reason:"dry-run: would release dead dispatched worker lease"});continue}try{let g=await V(e.secret?String(e.secret):void 0,f,{baseUrl:r}),k=`${r}/api/agent-os/by-id/${encodeURIComponent(f)}/tasks/${encodeURIComponent(d)}/release`,h=await X(k,g,{agentOsId:f,leaseOwner:m},{agentOsId:f,baseUrl:r});h.ok===!0||h.response?.ok===!0?o.push({runId:a.id,worker:l,taskId:d,agentOsId:f,leaseOwner:m,action:"released",reason:"dead dispatched worker lease released; task requeued"}):s.push({runId:a.id,worker:l,taskId:d,agentOsId:f,leaseOwner:m,action:"skipped",reason:`release returned ok:false (likely owner mismatch or already released): HTTP ${h.status}`})}catch(g){i.push({runId:a.id,worker:l,taskId:d,agentOsId:f,leaseOwner:m,action:"error",reason:g.message})}}return{dryRun:n,released:o,skipped:s,errors:i}}async function Wy(e){let r=await BI(e),t={ok:r.errors.length===0,dryRun:r.dryRun,released:r.released.length,skipped:r.skipped.length,errors:r.errors.length,details:r};console.log(JSON.stringify(t,null,2)),r.errors.length>0&&process.exit(1)}import jy from"node:path";ir();I();import{accessSync as HI,constants as FI,existsSync as Yu,readFileSync as $I}from"node:fs";import{homedir as Ca}from"node:os";import wa from"node:path";import{spawnSync as KI}from"node:child_process";Ce();function Ly(e,r){try{let t=KI(e,r,{encoding:"utf8"}),n=(t.stdout||"").trim(),o=(t.stderr||"").trim();return{ok:t.status===0,stdout:n,stderr:o,error:t.error?.message}}catch(t){return{ok:!1,stdout:"",stderr:"",error:t.message}}}function By(e){let r=e?.trim();if(r)return r.length<=12?`${r}\u2026`:`${r.slice(0,12)}\u2026`}function jI(e){if(!Yu(e))return!1;try{return HI(e,FI.W_OK),!0}catch{return!1}}var Hy={packageVersion:()=>Pn,commandOnPath:e=>Ly(process.platform==="win32"?"where":"which",[e]),kynverVersion:e=>Ly(e,["--version"]),loadConfig:()=>v(),configFilePath:()=>wa.join(Ca(),".kynver","config.json"),credentialsFilePath:()=>wa.join(Ca(),".kynver","credentials"),readCredentials:()=>{let e=wa.join(Ca(),".kynver","credentials");if(!Yu(e))return{hasApiKey:!1};try{let r=JSON.parse($I(e,"utf8"));return{hasApiKey:!!r.apiKey?.trim(),runnerTokenPrefix:By(r.runnerToken),runnerTokenAgentOsId:r.runnerTokenAgentOsId}}catch{return{hasApiKey:!1}}},envSnapshot:()=>({kynverApiUrl:process.env.KYNVER_API_URL?.trim()||void 0,openclawCronFireBaseUrl:process.env.OPENCLAW_CRON_FIRE_BASE_URL?.trim()||void 0,kynverRunnerTokenPrefix:By(process.env.KYNVER_RUNNER_TOKEN),kynverRuntimeSecret:!!process.env.KYNVER_RUNTIME_SECRET?.trim(),openclawCronSecret:!!process.env.OPENCLAW_CRON_SECRET?.trim(),kynverHarnessRoot:process.env.KYNVER_HARNESS_ROOT?.trim()||void 0,opusHarnessRoot:process.env.OPUS_HARNESS_ROOT?.trim()||void 0,kynverSchedulerProvider:process.env.KYNVER_SCHEDULER_PROVIDER?.trim()||void 0,openclawCronStorePath:!!(process.env.KYNVER_CRON_STORE_PATH?.trim()||process.env.OPENCLAW_CRON_STORE_PATH?.trim()),kynverCronDaemonPrimary:Gi(),qstashTokenPresent:!!process.env.QSTASH_TOKEN?.trim(),kynverHostedDeployment:(()=>{let e=process.env.KYNVER_HOSTED_DEPLOYMENT?.trim().toLowerCase();return e==="1"||e==="true"||e==="yes"})()}),harnessRoot:()=>me(),legacyOpenclawHarnessRoot:()=>wa.join(Ca(),".openclaw","harness"),pathExists:e=>Yu(e),pathWritable:e=>jI(e)};function Fy(e,r){return e.kynverSchedulerProvider==="openclaw-cron"||r.deploymentSchedulerProvider==="openclaw-cron"}function VI(e,r){return e.kynverSchedulerProvider==="kynver-cron"||r.deploymentSchedulerProvider==="kynver-cron"}function $y(e){return!!e.openclawCronStorePath}function GI(e,r){return e.kynverSchedulerProvider==="qstash"||r.deploymentSchedulerProvider==="qstash"}function Ky(e,r){let t={schedulerProvider:e.kynverSchedulerProvider??null,deploymentSchedulerProvider:r.deploymentSchedulerProvider??null,openclawCronStorePath:!!e.openclawCronStorePath,kynverCronDaemonPrimary:!!e.kynverCronDaemonPrimary},n=!!r.agentOsId?.trim()&&!!r.apiBaseUrl?.trim()&&r.hasScopedRunnerToken;if(GI(e,r)&&!Fy(e,r)){let u=e.kynverSchedulerProvider==="qstash"?"KYNVER_SCHEDULER_PROVIDER=qstash on this host":"deploymentSchedulerProvider=qstash in ~/.kynver/config.json";return{id:"hotspot_openclaw_scheduler",label:"Scheduler provider (runtime daemon vs OpenClaw cron)",status:"pass",summary:`AgentOS scheduler cut over to QStash (${u})`,details:t}}if(VI(e,r)&&!Fy(e,r)){if($y(e)&&e.kynverCronDaemonPrimary&&n)return{id:"hotspot_openclaw_scheduler",label:"Scheduler provider (runtime daemon vs OpenClaw cron)",status:"pass",summary:"Kynver Cron local store present; `kynver daemon` owns schedule fires (kynver-cron tick loop)",details:{...t,dispatchPath:"kynver-daemon-cron-tick",kynverCronDaemonPrimary:!0}};let u=e.kynverSchedulerProvider==="kynver-cron"?"KYNVER_SCHEDULER_PROVIDER=kynver-cron on this host":"deploymentSchedulerProvider=kynver-cron in ~/.kynver/config.json";return{id:"hotspot_openclaw_scheduler",label:"Scheduler provider (runtime daemon vs OpenClaw cron)",status:"pass",summary:`AgentOS scheduler owned by Kynver Cron (${u})`,details:t}}if($y(e)){if(e.kynverCronDaemonPrimary&&n)return{id:"hotspot_openclaw_scheduler",label:"Scheduler provider (runtime daemon vs OpenClaw cron)",status:"pass",summary:"Kynver Cron local store present; `kynver daemon` owns schedule fires (kynver-cron tick loop)",details:{...t,dispatchPath:"kynver-daemon-cron-tick",kynverCronDaemonPrimary:!0}};let u=[];return e.openclawCronStorePath&&u.push("KYNVER_CRON_STORE_PATH or OPENCLAW_CRON_STORE_PATH set (local cron store)"),{id:"hotspot_openclaw_scheduler",label:"Scheduler provider (runtime daemon vs OpenClaw cron)",status:"warn",summary:`Local cron store without daemon tick (${u.join("; ")})`,remediation:"Run `kynver daemon` with KYNVER_CRON_SECRET + KYNVER_API_URL (or KYNVER_CRON_FIRE_BASE_URL) so the daemon-owned cron tick fires schedules. On hosted deploys use QStash (KYNVER_SCHEDULER_PROVIDER=qstash). Legacy OpenClaw cron env aliases still work during cutover.",details:t}}let o=e.kynverSchedulerProvider==="openclaw-cron",s=r.deploymentSchedulerProvider==="openclaw-cron",i=e.kynverSchedulerProvider==="qstash",a=!!e.qstashTokenPresent||!!e.kynverHostedDeployment,l=a&&!n,c=l&&e.kynverSchedulerProvider==="openclaw-cron";return s&&!o?{id:"hotspot_openclaw_scheduler",label:"Scheduler provider (runtime daemon vs OpenClaw cron)",status:"warn",summary:"deploymentSchedulerProvider=openclaw-cron in ~/.kynver/config.json \u2014 migrate to kynver-cron or qstash",remediation:'Run `kynver scheduler attest-cutover` or set deploymentSchedulerProvider to "kynver-cron" or "qstash" in ~/.kynver/config.json.',details:t}:n&&o?{id:"hotspot_openclaw_scheduler",label:"Scheduler provider (runtime daemon vs OpenClaw cron)",status:"warn",summary:"KYNVER_SCHEDULER_PROVIDER=openclaw-cron on this runner \u2014 dispatch is owned by kynver daemon; unset the OpenClaw override",remediation:"Unset KYNVER_SCHEDULER_PROVIDER on user runners (or set kynver-cron). Use `kynver daemon` (pipeline-tick \u2192 operator/tick). On the Kynver server set KYNVER_SCHEDULER_PROVIDER=qstash when QStash is configured.",details:{schedulerProvider:e.kynverSchedulerProvider??null,dispatchPath:"kynver-daemon-pipeline-tick",hostedDeployment:a}}:n?{id:"hotspot_openclaw_scheduler",label:"Scheduler provider (runtime daemon vs OpenClaw cron)",status:"pass",summary:i?"Runner override qstash present; hosted dispatch still owned by kynver daemon pipeline-tick":"Hosted dispatch owned by kynver daemon (pipeline-tick \u2192 operator/tick); no OpenClaw cron on runner",details:{schedulerProvider:e.kynverSchedulerProvider??null,dispatchPath:"kynver-daemon-pipeline-tick",hostedDeployment:a}}:o?{id:"hotspot_openclaw_scheduler",label:"Scheduler provider (runtime daemon vs OpenClaw cron)",status:"warn",summary:"KYNVER_SCHEDULER_PROVIDER=openclaw-cron on this runner \u2014 hosted dispatch still depends on the OpenClaw local-cron adapter",remediation:"Unset KYNVER_SCHEDULER_PROVIDER on user runners (or set kynver-cron). Use `kynver daemon` (pipeline-tick \u2192 operator/tick). On the Kynver server set KYNVER_SCHEDULER_PROVIDER=qstash when QStash is configured.",details:{schedulerProvider:e.kynverSchedulerProvider??null,hostedDeployment:a}}:c?{id:"hotspot_openclaw_scheduler",label:"Scheduler provider (runtime daemon vs OpenClaw cron)",status:"warn",summary:"Hosted deployment has KYNVER_SCHEDULER_PROVIDER=openclaw-cron \u2014 AgentOS scheduled ticks should use QStash or kynver-cron",remediation:"Set QSTASH_TOKEN and KYNVER_SCHEDULER_PROVIDER=qstash on the Kynver server (or kynver-cron for Kynver-owned local scheduling). User runners use `kynver daemon` for dispatch and should not set a scheduler provider.",details:{schedulerProvider:e.kynverSchedulerProvider??null,qstashTokenPresent:e.qstashTokenPresent??!1,hostedDeployment:a}}:l&&e.qstashTokenPresent&&!e.kynverSchedulerProvider?{id:"hotspot_openclaw_scheduler",label:"Scheduler provider (runtime daemon vs OpenClaw cron)",status:"pass",summary:"QSTASH_TOKEN present; hosted scheduler auto-selects qstash (explicit KYNVER_SCHEDULER_PROVIDER=qstash optional)",details:{schedulerProvider:null,qstashTokenPresent:!0,hostedDeployment:a}}:l&&!e.qstashTokenPresent&&!e.kynverSchedulerProvider?{id:"hotspot_openclaw_scheduler",label:"Scheduler provider (runtime daemon vs OpenClaw cron)",status:"warn",summary:"Hosted deployment with no QSTASH_TOKEN and no KYNVER_SCHEDULER_PROVIDER \u2014 kynver-cron is an in-process stub here and will NOT fire; no firing scheduler is configured",remediation:"Set QSTASH_TOKEN + KYNVER_SCHEDULER_PROVIDER=qstash on the Kynver server for hosted AgentOS schedules. Only use kynver-cron when a `kynver daemon` (or local cron store) actually owns firing on this box.",details:{schedulerProvider:null,resolvedFallback:"none",qstashTokenPresent:!1,hostedDeployment:a}}:l&&!e.qstashTokenPresent&&e.kynverSchedulerProvider&&e.kynverSchedulerProvider!=="qstash"&&e.kynverSchedulerProvider!=="kynver-cron"?{id:"hotspot_openclaw_scheduler",label:"Scheduler provider (runtime daemon vs OpenClaw cron)",status:"warn",summary:`Hosted deployment without QSTASH_TOKEN (KYNVER_SCHEDULER_PROVIDER=${e.kynverSchedulerProvider}) \u2014 use qstash or kynver-cron`,remediation:"Set QSTASH_TOKEN and KYNVER_SCHEDULER_PROVIDER=qstash on the Kynver server, or kynver-cron for Kynver-owned local scheduling. User runners use `kynver daemon` for dispatch.",details:{schedulerProvider:e.kynverSchedulerProvider??null,qstashTokenPresent:e.qstashTokenPresent??!1,hostedDeployment:a}}:e.kynverSchedulerProvider?{id:"hotspot_openclaw_scheduler",label:"Scheduler provider (runtime daemon vs OpenClaw cron)",status:"pass",summary:`KYNVER_SCHEDULER_PROVIDER=${e.kynverSchedulerProvider}`,details:{schedulerProvider:e.kynverSchedulerProvider??null}}:{id:"hotspot_openclaw_scheduler",label:"Scheduler provider (runtime daemon vs OpenClaw cron)",status:"pass",summary:"No KYNVER_SCHEDULER_PROVIDER on runner (expected) \u2014 finish runner setup so daemon pipeline-tick owns dispatch",details:{schedulerProvider:null,dispatchPath:"kynver-daemon-pipeline-tick-pending"}}}function YI(e){let r={pass:0,warn:0,fail:0};for(let t of e)for(let n of t.checks)r[n.status]+=1;return r}function JI(e){let r=e.packageVersion(),t=e.commandOnPath("kynver"),n=t.ok&&t.stdout.length>0,o=n?t.stdout.split(/\r?\n/)[0]?.trim():void 0,s=o?q(o):void 0,i=[{id:"cli_running_version",label:"Running @kynver-app/runtime version",status:"pass",summary:`@kynver-app/runtime ${r}`,details:{version:r}},{id:"cli_on_path",label:"kynver executable on PATH",status:n?"pass":"warn",summary:n?`Found ${s}`:"kynver not found on PATH (invoked via node/npx?)",remediation:n?void 0:"Install globally (`npm i -g @kynver-app/runtime`) or invoke via `npx @kynver-app/runtime`.",details:{path:s}}];if(n&&o){let a=e.kynverVersion(o),l=a.stdout.replace(/^kynver\s+/i,"").trim()||void 0,c=a.ok&&(!l||l===r);i.push({id:"cli_installed_version",label:"Installed kynver CLI version matches running package",status:c?"pass":"warn",summary:a.ok&&l?c?`Installed ${l}`:`Installed ${l} differs from running ${r}`:a.error?`Could not read installed version (${a.error})`:a.stderr||"Could not read installed version",remediation:c?void 0:"Reinstall or rebuild @kynver-app/runtime so PATH kynver matches the harness worktree version.",details:{installedVersion:l,runningVersion:r,path:s}})}return{id:"cli_package",label:"CLI / package",checks:i}}function qI(e){let r=e.configFilePath(),t=q(r),n=e.pathExists(r),o=e.loadConfig(),s=[{id:"config_file",label:"~/.kynver/config.json present",status:n?"pass":"fail",summary:n?`Found ${t}`:`Missing ${t}`,remediation:n?void 0:"Run `kynver setup --api-base-url <url> --agent-os-id <id> --repo <path>`.",details:{configPath:t}}];if(n){let i=o.apiBaseUrl?.trim(),a=o.agentOsId?.trim(),l=Ke({config:o}),c=l?on(l):null,u=Eh(l);s.push({id:"config_api_base_url",label:"Default API base URL",status:i?"pass":"warn",summary:i??"Not set in config (KYNVER_API_URL / --base-url required per command)",remediation:i?void 0:"Set `apiBaseUrl` via `kynver setup --api-base-url https://\u2026`.",details:{apiBaseUrl:i??null}},{id:"config_agent_os_id",label:"Default AgentOS id",status:a?"pass":"warn",summary:a??"Not set (pass --agent-os-id on daemon/dispatch/worker commands)",remediation:a?void 0:"Set `agentOsId` via `kynver setup --agent-os-id <uuid>`.",details:{agentOsId:a??null,agentOsSlug:o.agentOsSlug??null}},{id:"config_default_repo",label:"Default repo path",status:u.status,summary:l?l.persistedInConfig?`${c.defaultRepo} (config)`:`${c.defaultRepo} (${l.source}, not persisted in ~/.kynver/config.json)`:"Not set in ~/.kynver/config.json (`kynver run create` requires --repo)",remediation:u.remediation,details:{defaultRepo:c?.defaultRepo??null,source:c?.source??null,persistedInConfig:c?.persistedInConfig??!1,harnessRoot:o.harnessRoot?Se(o.harnessRoot):null}})}return{id:"user_config",label:"User config (~/.kynver)",checks:s}}function zI(e){let t=e.loadConfig().agentOsId?.trim(),n=e.readCredentials(),o=e.envSnapshot(),s=e.credentialsFilePath(),i=q(s),a=o.kynverRunnerTokenPrefix,l=n.runnerTokenPrefix,c=n.runnerTokenAgentOsId,u=!!l&&(!t||!c||c===t),d=!!a?.startsWith("krc1.")||u&&l?.startsWith("krc1.");return{id:"runner_token",label:"Runner token readiness",checks:[{id:"runner_token_scoped",label:"Scoped runner token (krc1.*) ready",status:d?"pass":"fail",summary:d?a?"KYNVER_RUNNER_TOKEN is set (scoped prefix shown)":`Saved scoped token for agentOsId ${c??t??"(unknown)"}`:"No scoped runner token for the configured AgentOS workspace",remediation:d?void 0:"Run `kynver login` then `kynver runner credential --agent-os-id <id>` (or `kynver setup` with API key).",details:{source:a?"env":l?"credentials":"none",tokenPrefix:a??(u?l:void 0),agentOsId:t??c??null,credentialsPath:i}},{id:"runner_token_agent_os_match",label:"Saved runner token matches configured agentOsId",status:!l||!t||!c||c===t?"pass":"warn",summary:!l||!c?"No saved token agentOsId to compare":t?c===t?"Saved token scoped to configured agentOsId":`Saved token is for ${c}, config expects ${t}`:"Config agentOsId unset \u2014 token scope not validated against config",remediation:l&&t&&c&&c!==t?"`kynver runner credential --agent-os-id <configured-id>` to mint a workspace-bound token.":void 0,details:{configuredAgentOsId:t??null,savedAgentOsId:c??null}},{id:"runner_api_key_for_refresh",label:"API key available for token refresh",status:n.hasApiKey||process.env.KYNVER_API_KEY?.trim()?"pass":"warn",summary:n.hasApiKey||process.env.KYNVER_API_KEY?"KYNVER API key present for runner credential mint/refresh":"No API key \u2014 401 callback recovery cannot auto-mint a replacement token",remediation:n.hasApiKey||process.env.KYNVER_API_KEY?void 0:"Run `kynver login --api-key \u2026`.",details:{credentialsPath:i,hasApiKey:n.hasApiKey||!!process.env.KYNVER_API_KEY}}]}}function XI(e){let r=e.commandOnPath("vercel"),t=r.ok,n=!!(process.env.GITHUB_TOKEN?.trim()||process.env.GH_TOKEN?.trim()),o=!!process.env.VERCEL_TOKEN?.trim();return{id:"vercel_deploy_evidence",label:"Vercel deploy evidence",checks:[{id:"vercel_global_cli_absent",label:"Global Vercel CLI not installed",status:t?"warn":"pass",summary:t?`Global Vercel CLI found (${r.stdout||"on PATH"}) \u2014 uninstall after operator approval`:"No global Vercel CLI on PATH",remediation:t?"Uninstall global Vercel CLI (`npm uninstall -g vercel`) \u2014 use GitHub commit status or scoped VERCEL_TOKEN + REST API instead.":void 0,details:{path:t&&r.stdout||null}},{id:"github_token_for_vercel_status",label:"GitHub token for Vercel status",status:n?"pass":"warn",summary:n?"GITHUB_TOKEN/GH_TOKEN present for GitHub Vercel StatusContext evidence":"No GITHUB_TOKEN \u2014 merge-gate Vercel evidence requires GitHub commit status API",remediation:n?void 0:"Export GITHUB_TOKEN (or GH_TOKEN) for PR head commit status lookups."},{id:"vercel_api_token_optional",label:"Vercel API token (optional fallback)",status:o?"pass":"warn",summary:o?"VERCEL_TOKEN configured for optional REST API deployment lookup":"VERCEL_TOKEN unset \u2014 GitHub status is the default path; API fallback disabled",remediation:o?void 0:"Set ephemeral/scoped VERCEL_TOKEN only when GitHub status is insufficient; avoid persistent ~/.vercel auth on runner hosts."}]}}function QI(e){let r=e.harnessRoot(),t=jy.join(r,"runs"),n=jy.join(r,"worktrees"),o=Se(r),s=Se(t),i=Se(n),a=e.pathExists(t),l=e.pathExists(n);return{id:"harness_dirs",label:"Harness / daemon directories",checks:[{id:"harness_root",label:"Harness root resolved",status:"pass",summary:o,details:{harnessRoot:o}},{id:"harness_runs_dir",label:"Runs directory ready",status:a&&e.pathWritable(t)?"pass":"warn",summary:a?e.pathWritable(t)?`Writable ${s}`:`Exists but not writable: ${s}`:`Will be created on first run: ${s}`,remediation:a&&!e.pathWritable(t)?`Fix permissions on ${s} or set KYNVER_HARNESS_ROOT to a writable path.`:void 0,details:{runsDir:s,exists:a,writable:e.pathWritable(t)}},{id:"harness_worktrees_dir",label:"Worktrees directory ready",status:l&&e.pathWritable(n)?"pass":"warn",summary:l?e.pathWritable(n)?`Writable ${i}`:`Exists but not writable: ${i}`:`Will be created on first worker: ${i}`,remediation:l&&!e.pathWritable(n)?`Fix permissions on ${i}.`:void 0,details:{worktreesDir:i,exists:l,writable:e.pathWritable(n)}}]}}function ZI(e){let r=e.loadConfig(),t=e.envSnapshot(),n=t.kynverApiUrl??r.apiBaseUrl?.trim()??t.openclawCronFireBaseUrl,o=!t.kynverApiUrl&&!r.apiBaseUrl&&!!t.openclawCronFireBaseUrl,s=t.openclawCronSecret||t.kynverRuntimeSecret,i=t.kynverRunnerTokenPrefix?.startsWith("krc1."),l=e.readCredentials().runnerTokenPrefix?.startsWith("krc1.");return{id:"callback_auth",label:"Callback auth / config",checks:[{id:"callback_base_url",label:"Callback base URL configured",status:n?o?"warn":"pass":"fail",summary:n?o?`Using legacy OPENCLAW_CRON_FIRE_BASE_URL (${n})`:n:"No KYNVER_API_URL, config apiBaseUrl, or legacy OpenClaw base URL",remediation:n?o?"Migrate to KYNVER_API_URL or `kynver setup --api-base-url` and drop OPENCLAW_CRON_FIRE_BASE_URL.":void 0:"Set KYNVER_API_URL or run `kynver setup --api-base-url https://\u2026`.",details:{source:t.kynverApiUrl?"KYNVER_API_URL":r.apiBaseUrl?"config.apiBaseUrl":t.openclawCronFireBaseUrl?"OPENCLAW_CRON_FIRE_BASE_URL":"none",baseUrl:n??null}},{id:"callback_auth_mode",label:"Callback auth uses scoped runner token",status:i||l?"pass":s?"warn":"fail",summary:i?"KYNVER_RUNNER_TOKEN scoped token will be sent as X-Kynver-Runner-Token":l?"Saved krc1.* token in ~/.kynver/credentials":s?"Deployment-level KYNVER_RUNTIME_SECRET / OPENCLAW_CRON_SECRET in use (legacy headers)":"No callback secret configured",remediation:i||l?void 0:"Mint a scoped token: `kynver runner credential --agent-os-id <id>`. Avoid shared OPENCLAW_CRON_SECRET on user runners.",details:{mode:i||l?"scoped":s?"legacy_global_secret":"missing",legacyHeadersWhenNotScoped:["X-OpenClaw-Cron-Secret","X-Kynver-Runtime-Secret"]}}]}}function eO(e){let r=e.envSnapshot(),t=e.loadConfig(),n=e.readCredentials(),o=e.harnessRoot(),s=e.legacyOpenclawHarnessRoot(),i=Se(o),a=Se(s),l=r.opusHarnessRoot?Se(r.opusHarnessRoot):null,c=o===s&&e.pathExists(s),u=t.agentOsId?.trim(),d=r.kynverRunnerTokenPrefix,f=n.runnerTokenPrefix,m=n.runnerTokenAgentOsId,p=!!f&&(!u||!m||m===u),g=!!d?.startsWith("krc1.")||p&&!!f?.startsWith("krc1.");return{id:"openclaw_hotspots",label:"OpenClaw dependency hotspots",checks:[{id:"hotspot_legacy_harness_root",label:"Legacy ~/.openclaw/harness still active",status:c?"warn":"pass",summary:c?`Harness root is legacy ${a}`:r.opusHarnessRoot?`OPUS_HARNESS_ROOT override in use (${l})`:`Using ${i}`,remediation:c?"Set KYNVER_HARNESS_ROOT=~/.kynver/harness (or run setup), migrate artifacts, retire OPUS_HARNESS_ROOT.":r.opusHarnessRoot?"Prefer KYNVER_HARNESS_ROOT over OPUS_HARNESS_ROOT.":void 0,details:{harnessRoot:i,legacyRoot:a,opusHarnessRoot:l}},{id:"hotspot_openclaw_env_secrets",label:"OpenClaw deployment secrets in runner env",status:r.openclawCronSecret||r.openclawCronFireBaseUrl?"warn":"pass",summary:r.openclawCronSecret||r.openclawCronFireBaseUrl?[r.openclawCronSecret?"OPENCLAW_CRON_SECRET set":null,r.openclawCronFireBaseUrl?"OPENCLAW_CRON_FIRE_BASE_URL set":null].filter(Boolean).join("; "):"No OpenClaw cron env overrides on this runner",remediation:r.openclawCronSecret||r.openclawCronFireBaseUrl?"Move to KYNVER_API_URL + scoped runner tokens; unset OpenClaw cron env on user-hosted runners.":void 0},Ky(r,{agentOsId:u??null,apiBaseUrl:t.apiBaseUrl?.trim()??r.kynverApiUrl??null,hasScopedRunnerToken:g,deploymentSchedulerProvider:t.deploymentSchedulerProvider==="qstash"||t.deploymentSchedulerProvider==="kynver-cron"||t.deploymentSchedulerProvider==="openclaw-cron"?t.deploymentSchedulerProvider:void 0}),{id:"hotspot_lease_source_names",label:"Harness lease/completion source names",status:"pass",summary:"Runtime uses kynver-harness:* lease owners and completion source kynver-harness (OpenClaw names retired in runtime)",details:{leaseOwnerPattern:"kynver-harness:<runId>",completionSource:"kynver-harness",note:"OpenClaw adapter remains optional in packages/kynver-openclaw-agent-os only"}}]}}function Vy(e=Hy){let r=[JI(e),qI(e),zI(e),XI(e),QI(e),ZI(e),eO(e)],t=YI(r),n=t.fail===0,o=n?t.warn>0?`Ready with ${t.warn} warning(s) \u2014 review remediation before retiring OpenClaw as primary runtime agent.`:"Ready \u2014 Kynver runtime can serve as primary runtime agent on this host.":`${t.fail} blocking check(s) \u2014 fix failures before OpenClaw takeover.`;return{command:"doctor runtime-takeover",ready:n,summary:o,counts:t,sections:r}}function Gy(e={}){let r;if(e.remediateDefaultRepo===!0){let n=Po();if(!n.ok){console.error(n.reason??"defaultRepo remediation failed"),n.remediation&&console.error(n.remediation),process.exitCode=1;return}n.remediated?r=`Remediated defaultRepo \u2192 ${n.resolved?.defaultRepo??"unknown"}`:r=`defaultRepo already persisted (${n.resolved?.defaultRepo??"unknown"})`}let t=Vy();r&&(t.notes=[...t.notes??[],r]),console.log(JSON.stringify(t,null,2)),t.ready||(process.exitCode=1)}I();async function Yy(e){let r=v(),t=(e.agentOsId?String(e.agentOsId):r.agentOsId)||"";t||(console.error("requires --agent-os-id or agentOsId in ~/.kynver/config.json"),process.exit(1));let n=F(e.baseUrl?String(e.baseUrl):r.apiBaseUrl),o=await V(e.secret?String(e.secret):void 0,t,{baseUrl:n}),s=new URLSearchParams;if(typeof e.since=="string"&&e.since.trim()&&s.set("since",e.since.trim()),e.limit!=null&&String(e.limit).trim()){let c=Number(e.limit);Number.isFinite(c)&&c>0&&s.set("limit",String(Math.floor(c)))}let i=s.toString()?`?${s.toString()}`:"",a=`${n}/api/agent-os/by-id/${encodeURIComponent(t)}/command-center/dashboard-contract${i}`,l=await xs(a,o);l.ok||(console.error(`dashboard-contract GET failed: HTTP ${l.status}`),l.response&&console.error(JSON.stringify(l.response,null,2)),process.exit(1)),console.log(JSON.stringify(l.response,null,2))}ir();var Ju=["Vercel/hosted: set KYNVER_SCHEDULER_PROVIDER=qstash","Vercel/hosted: ensure QSTASH_TOKEN (and QStash signing keys) are configured","Vercel/hosted: unset OPENCLAW_CRON_STORE_PATH if present"],qu=["User runner: unset KYNVER_SCHEDULER_PROVIDER (scheduling is deployment-owned)","User runner: unset OPENCLAW_CRON_STORE_PATH, OPENCLAW_CRON_SECRET, OPENCLAW_CRON_FIRE_BASE_URL",'User runner: after deployment cutover, run `kynver scheduler attest-cutover` (or set deploymentSchedulerProvider to "qstash" in ~/.kynver/config.json)',"Verify: kynver doctor runtime-takeover \u2014 hotspot_openclaw_scheduler should pass"];function rO(e=process.env){return{kynverSchedulerProvider:e.KYNVER_SCHEDULER_PROVIDER?.trim()||null,kynverCronStorePath:e.KYNVER_CRON_STORE_PATH?.trim()||e.OPENCLAW_CRON_STORE_PATH?.trim()||null,kynverCronSecret:!!(e.KYNVER_CRON_SECRET?.trim()||e.OPENCLAW_CRON_SECRET?.trim()),kynverCronFireBaseUrl:e.KYNVER_CRON_FIRE_BASE_URL?.trim()||e.OPENCLAW_CRON_FIRE_BASE_URL?.trim()||null,openclawCronStorePath:e.OPENCLAW_CRON_STORE_PATH?.trim()||null,openclawCronSecret:!!e.OPENCLAW_CRON_SECRET?.trim(),openclawCronFireBaseUrl:e.OPENCLAW_CRON_FIRE_BASE_URL?.trim()||null}}function zu(e,r=rO()){let t=[];return r.kynverSchedulerProvider==="openclaw-cron"&&t.push("Runner still has KYNVER_SCHEDULER_PROVIDER=openclaw-cron"),r.kynverCronStorePath&&r.kynverSchedulerProvider!=="kynver-cron"&&t.push("Runner has KYNVER_CRON_STORE_PATH but KYNVER_SCHEDULER_PROVIDER is not kynver-cron \u2014 use `kynver daemon` cron tick or unset the store for QStash-only runners"),r.openclawCronStorePath&&!r.kynverCronStorePath&&t.push("Runner still has legacy OPENCLAW_CRON_STORE_PATH (prefer KYNVER_CRON_STORE_PATH)"),e.deploymentSchedulerProvider==="openclaw-cron"&&t.push("~/.kynver/config.json deploymentSchedulerProvider is still openclaw-cron"),{ok:t.length===0,blockers:t,runnerEnv:r,deploymentSchedulerProvider:e.deploymentSchedulerProvider??null,deploymentSteps:[...Ju],runnerSteps:[...qu]}}function Jy(e){return{...e,deploymentSchedulerProvider:"qstash"}}I();import tO from"node:path";import{homedir as nO}from"node:os";var qy=tO.join(nO(),".kynver","config.json");function zy(e=!1){let r=v(),t=zu(r),n={...t,configPath:q(qy),configAttestationExample:{deploymentSchedulerProvider:"qstash"}};if(e){console.log(JSON.stringify(n,null,2)),t.ok||(process.exitCode=1);return}console.log(`AgentOS scheduler provider cutover checklist
+`),console.log("Deployment (Vercel):");for(let o of Ju)console.log(`  - ${o}`);console.log(`
+User runner:`);for(let o of qu)console.log(`  - ${o}`);if(console.log(`
 This host:`),console.log(`  config: ${n.configPath}`),console.log(`  deploymentSchedulerProvider: ${t.deploymentSchedulerProvider??"(unset)"}`),console.log(`  KYNVER_SCHEDULER_PROVIDER: ${t.runnerEnv.kynverSchedulerProvider??"(unset)"}`),console.log(`  KYNVER_CRON_STORE_PATH: ${t.runnerEnv.kynverCronStorePath??"(unset)"}`),console.log(`  OPENCLAW_CRON_STORE_PATH (legacy): ${t.runnerEnv.openclawCronStorePath??"(unset)"}`),t.blockers.length){console.log(`
 Blockers:`);for(let o of t.blockers)console.log(`  ! ${o}`);process.exitCode=1;return}console.log(`
-No local blockers detected on this runner.`)}function uy(e=!1){let r=v(),t=Au(r);if(!t.ok){let s={ok:!1,attested:!1,blockers:t.blockers,remediation:"Clear local OpenClaw scheduler blockers before attesting qstash cutover."};if(e)console.log(JSON.stringify(s,null,2));else{console.error("Cannot attest scheduler cutover \u2014 local blockers remain:");for(let i of t.blockers)console.error(`  ! ${i}`)}process.exitCode=1;return}let n=ay(r);Ve(n);let o={ok:!0,attested:!0,configPath:Y(ly),deploymentSchedulerProvider:"qstash",config:Mt(n),note:"Recorded deploymentSchedulerProvider=qstash in ~/.kynver/config.json. Confirm Vercel has KYNVER_SCHEDULER_PROVIDER=qstash and QSTASH_TOKEN before relying on hosted schedules."};if(e){console.log(JSON.stringify(o,null,2));return}console.log(o.note),console.log(`  config: ${o.configPath}`)}async function dy(e){let r=await Ti();if(e){console.log(JSON.stringify(r,null,2));return}console.log(`Kynver Cron primary: ${r.primary}`),console.log(`  store: ${r.env.storePath} (${r.jobCount} jobs)`),console.log(`  tick state: ${r.env.statePath} (${r.stateJobCount} tracked)`),console.log(`  tick enabled: ${r.env.tickEnabled}`),console.log(`  fire base URL: ${r.env.fireBaseUrl??"(unset)"}`),console.log(`  credentials ready: ${r.credentialsReady}`),console.log(`  daemon-owned primary: ${r.daemonPrimary}`)}async function py(e){let r=typeof e.agentOsId=="string"?e.agentOsId:void 0,t=await en({agentOsIdFilter:r??null});if(e.json===!0){console.log(JSON.stringify(t,null,2));return}console.log(JSON.stringify({event:"kynver_cron_tick",...t}))}O();function nI(e,r){if(e===void 0)return r;if(e===!0)return!0;if(e===!1)return!1;let t=String(e).trim().toLowerCase();return t==="0"||t==="false"||t==="no"||t==="off"?!1:t==="1"||t==="true"||t==="yes"||t==="on"?!0:r}async function my(e){let r=e.dryRun===!0||e["dry-run"]===!0,t=await Bi({execute:r?!1:nI(e.execute,!0),json:e.json===!0,installSystemd:e.installSystemd===!0||e["install-systemd"]===!0,confirmQstashRemoval:e.confirmQstashRemoval===!0||e["confirm-qstash-removal"]===!0,skipWatchdog:e.skipWatchdog===!0||e["skip-watchdog"]===!0,skipTestFire:e.skipTestFire===!0||e["skip-test-fire"]===!0,agentOsId:typeof e.agentOsId=="string"?e.agentOsId:void 0,apiBaseUrl:typeof e.apiBaseUrl=="string"?e.apiBaseUrl:void 0,runId:typeof e.run=="string"?e.run:void 0});if(e.json===!0){console.log(JSON.stringify(t,null,2)),t.ok||(process.exitCode=1);return}if(console.log(t.dryRun?`Kynver Cron install (dry-run)
+No local blockers detected on this runner.`)}function Xy(e=!1){let r=v(),t=zu(r);if(!t.ok){let s={ok:!1,attested:!1,blockers:t.blockers,remediation:"Clear local OpenClaw scheduler blockers before attesting qstash cutover."};if(e)console.log(JSON.stringify(s,null,2));else{console.error("Cannot attest scheduler cutover \u2014 local blockers remain:");for(let i of t.blockers)console.error(`  ! ${i}`)}process.exitCode=1;return}let n=Jy(r);Ge(n);let o={ok:!0,attested:!0,configPath:q(qy),deploymentSchedulerProvider:"qstash",config:Gt(n),note:"Recorded deploymentSchedulerProvider=qstash in ~/.kynver/config.json. Confirm Vercel has KYNVER_SCHEDULER_PROVIDER=qstash and QSTASH_TOKEN before relying on hosted schedules."};if(e){console.log(JSON.stringify(o,null,2));return}console.log(o.note),console.log(`  config: ${o.configPath}`)}async function Qy(e){let r=await Zi();if(e){console.log(JSON.stringify(r,null,2));return}console.log(`Kynver Cron primary: ${r.primary}`),console.log(`  store: ${r.env.storePath} (${r.jobCount} jobs)`),console.log(`  tick state: ${r.env.statePath} (${r.stateJobCount} tracked)`),console.log(`  tick enabled: ${r.env.tickEnabled}`),console.log(`  fire base URL: ${r.env.fireBaseUrl??"(unset)"}`),console.log(`  credentials ready: ${r.credentialsReady}`),console.log(`  daemon-owned primary: ${r.daemonPrimary}`)}async function Zy(e){let r=typeof e.agentOsId=="string"?e.agentOsId:void 0,t=await mn({agentOsIdFilter:r??null});if(e.json===!0){console.log(JSON.stringify(t,null,2));return}console.log(JSON.stringify({event:"kynver_cron_tick",...t}))}I();function oO(e,r){if(e===void 0)return r;if(e===!0)return!0;if(e===!1)return!1;let t=String(e).trim().toLowerCase();return t==="0"||t==="false"||t==="no"||t==="off"?!1:t==="1"||t==="true"||t==="yes"||t==="on"?!0:r}async function eR(e){let r=e.dryRun===!0||e["dry-run"]===!0,t=await oa({execute:r?!1:oO(e.execute,!0),json:e.json===!0,installSystemd:e.installSystemd===!0||e["install-systemd"]===!0,confirmQstashRemoval:e.confirmQstashRemoval===!0||e["confirm-qstash-removal"]===!0,skipWatchdog:e.skipWatchdog===!0||e["skip-watchdog"]===!0,skipTestFire:e.skipTestFire===!0||e["skip-test-fire"]===!0,agentOsId:typeof e.agentOsId=="string"?e.agentOsId:void 0,apiBaseUrl:typeof e.apiBaseUrl=="string"?e.apiBaseUrl:void 0,runId:typeof e.run=="string"?e.run:void 0});if(e.json===!0){console.log(JSON.stringify(t,null,2)),t.ok||(process.exitCode=1);return}if(console.log(t.dryRun?`Kynver Cron install (dry-run)
 `:`Kynver Cron install
 `),console.log(`  config: ${t.configPath}`),console.log(`  env file: ${t.plan.envFilePath}`),console.log(`  store: ${t.plan.storePath}`),t.secretGenerated&&console.log("  generated new KYNVER_CRON_SECRET"),t.envFile&&console.log(`  env merge: ${t.envFile.changed?"updated":"unchanged"} (${t.envFile.keysWritten.join(", ")||"no key changes"})`),t.watchdog?.remoteJobId?console.log(`  watchdog: job ${t.watchdog.remoteJobId} provider=${t.watchdog.provider} local=${t.watchdog.localProviderScheduleId}`):t.watchdog?.error&&console.log(`  watchdog: ERROR ${t.watchdog.error}`),t.qstashWatchdog?.found.length){console.log(`  qstash watchdog leftovers: ${t.qstashWatchdog.found.length}`);for(let n of t.qstashWatchdog.found)console.log(`    - ${n.id} (${n.status})`);t.qstashWatchdog.removed.length&&console.log(`  removed: ${t.qstashWatchdog.removed.join(", ")}`)}t.systemd&&console.log(`  systemd: ${t.systemd.note??(t.systemd.started?"running":"not started")}`),t.testFire&&!t.testFire.skipped&&console.log(`  test fire: fired=${t.testFire.fired} errors=${t.testFire.errors}`),console.log(`
 Hosted deployment (manual):`);for(let n of t.plan.deploymentSteps)console.log(`  - ${n}`);if(t.blockers.length){console.log(`
-Blockers:`);for(let n of t.blockers)console.log(`  ! ${n}`);process.exitCode=1;return}console.log("\nInstall complete \u2014 run `kynver cron verify` to re-check.")}async function fy(e){let r=v(),t=await sn({config:r});if(e.json===!0){console.log(JSON.stringify(t,null,2)),t.ok||(process.exitCode=1);return}console.log(`Kynver Cron verify: ${t.ok?"PASS":"FAIL"}
-`);for(let n of t.checks){let o=n.ok?"ok":"FAIL";console.log(`  [${o}] ${n.id}: ${n.summary}`),!n.ok&&n.remediation&&console.log(`         \u2192 ${n.remediation}`)}t.ok||(process.exitCode=1)}O();import sI from"node:os";O();De();Mn();w();var Oo={slug:"landing-maintainer",originCron:"maintain-8-blocker-and-pr-landing-workers",defaultRepo:"Totalsolutionsync/Kynver",landScript:"scripts/agent-os-land-pr.mjs",landScriptArgs:["--skip-not-ready"]};import{spawnSync as oI}from"node:child_process";import gy from"node:path";function hy(e,r,t){let o=[gy.join(r,Oo.landScript),String(e),...Oo.landScriptArgs];if(!t)return{action:{kind:"land_pr",prNumber:e,reason:"dry-run"},executed:!1,exitCode:0,stdout:`dry-run: node ${o.join(" ")}`,stderr:""};let s=oI("node",o,{cwd:r,encoding:"utf8",timeout:600*1e3});return{action:{kind:"land_pr",prNumber:e,reason:"landing wrapper invoked"},executed:!0,exitCode:s.status,stdout:s.stdout??"",stderr:s.stderr??""}}function ky(e){let r=e.repoPath?String(e.repoPath).trim():"";return r?gy.resolve(r):Re()?.repo??process.cwd()}async function yy(e){let r=String(N(String(e.agentOsId||""),"--agent-os-id")),t=String(e.repo||Oo.defaultRepo).trim(),n=e.fleet===!0||e.fleet==="true",o=e.execute===!0||e.execute==="true",s=e.run?String(e.run):void 0,i=$r({runId:s??"fleet-lane-tick"}),a={...ro(i,{harnessRunId:s,boxKind:je(v()),hostLabel:sI.hostname()}),providerHealthy:i.ok,authorizedForRepair:i.ok,authorizedForLanding:i.ok,systemHealthBlockers:i.ok?[]:[i.reason??"resource_gate_blocked"],actionableWorkers:i.activeWorkers},l=B(e.baseUrl?String(e.baseUrl):void 0),c=await K(e.secret?String(e.secret):void 0,r,{baseUrl:l}),u=`${l}/api/agent-os/by-id/${encodeURIComponent(r)}/fleet-landing-maintainer/tick`,f=(await Rr(u,c,{repo:t,fleet:n,execute:o,runId:s,boxCapacity:a})).response,m=[],p=ky(e),g=Array.isArray(f?.localActions)?f.localActions:[],k=a.boxId;for(let h of g){if(h.kind==="land_pr"&&typeof h.prNumber=="number"){let S=hy(h.prNumber,p,o);if(m.push({action:S.action,executed:S.executed,exitCode:S.exitCode}),o&&S.executed){let A=S.exitCode===0,W=typeof h.prUrl=="string"&&h.prUrl.trim()?h.prUrl.trim():`https://github.com/${t}/pull/${h.prNumber}`;try{await Rr(`${l}/api/agent-os/by-id/${encodeURIComponent(r)}/fleet-landing-maintainer/outcome`,c,{repo:t,prUrl:W,holderBoxId:k,merged:A})}catch{}}continue}m.push({action:h,executed:!1,exitCode:null})}return{repo:t,fleet:n,execute:o,coordinator:f,localOutcomes:m}}async function Ry(e,r){let t=String(r??e.lane??"").trim();t!=="landing-maintainer"&&(console.error(`unknown lane: ${t||"(none)"}`),process.exit(1));let n=await yy(e);if(e.json===!0||e.json==="true"){console.log(JSON.stringify(n,null,2));return}console.log(["fleet landing-maintainer tick",`repo=${n.repo}`,`fleet=${n.fleet}`,`execute=${n.execute}`,`localOutcomes=${n.localOutcomes.length}`].join(" "));for(let o of n.localOutcomes)console.log(`  ${o.action.kind} pr=${o.action.prNumber??"-"} executed=${o.executed}`)}function Iu(e){return e==="help"||e==="--help"||e==="-h"}function Sy(e,r){let t=[e,r].filter(Boolean).join(" ");console.error(`unknown command: ${t||"(none)"}`),sa(1)}function sa(e=0){(e===0?console.log:console.error)(["Usage:","  kynver login [--api-key KEY] [--api-base-url URL]   (omit --api-key to authorize in the browser)","  kynver bootstrap [--api-base-url URL] [--api-key KEY] [--repo PATH]   (login + setup + runner credential in one shot)","  kynver start [--repo PATH] [--api-base-url URL] [--run RUN_ID] [--interval-ms MS] [--chat-oauth]   (bring your agent online: bootstrap if needed + run + daemon; --chat-oauth lets delegated chat turns use your local Claude subscription)","  kynver runner credential [--agent-os-id ID] [--base-url URL]","  kynver setup [--api-base-url URL] [--agent-os-id ID] [--agent-os-slug SLUG] [--box-kind forge|ghost] [--repo PATH] [--discover-repo] [--max-workers N] [--provider claude|cursor] [--chat-oauth]","  kynver daemon --run RUN_ID --agent-os-id AOS_ID [--execute] [--interval-ms MS] [--stall-ms MS] [--no-supervise]","  kynver status --run RUN_ID [--blocked] [--running] [--task TASK_ID] [--worker WORKER] [--full]  # top-level compact run status","  kynver run create [--repo /path/repo] [--name name] [--base origin/main]","  kynver run list","  kynver run resolve --name RUN_NAME","  kynver run status --run RUN_ID [--full]  # defaults to compact shallow map with drill-down commands","  kynver run dispatch --run RUN_ID --agent-os-id AOS_ID [--base-url URL] [--secret SECRET] [--execute] [--lane any|implementation|review|landing] [--target-task-id TASK_ID] [--executor harness] [--max-starts 1] [--lease-ms MS] [--owned path[,path]] [--model claude-opus-4-8] [--disk-path /] [--reconcile-stale-blockers]","  kynver run sweep --run RUN_ID --agent-os-id AOS_ID [--base-url URL] [--secret SECRET] [--grace-ms MS]",'  kynver worker start --run RUN_ID --name worker --task "..." [--owned path[,path]] [--model MODEL] [--provider claude|cursor] [--agent-os-id AOS_ID] [--task-id TASK_ID] [--wait]',"  kynver worker list --run RUN_ID [--full]  # defaults to compact shallow map with drill-down commands","  kynver worker status --run RUN_ID --name worker","  kynver worker tail --run RUN_ID --name worker [--lines 40] [--raw]","  kynver worker stop --run RUN_ID --name worker","  kynver worker complete --run RUN_ID --name worker [--agent-os-id AOS_ID] [--task-id TASK_ID] [--base-url URL] [--secret SECRET]","  kynver worker discard-disposable --run RUN_ID --name worker --path scripts/helper.mjs[,other]","  kynver worker auto-complete --run RUN_ID --name worker [--agent-os-id AOS_ID] [--poll-ms 5000] [--max-total-ms 21600000] [--complete-attempts 3] [--complete-backoff-ms 5000] [--base-url URL] [--secret SECRET]","  kynver run reconcile","  kynver run unblock [--agent-os-id AOS_ID] [--base-url URL] [--secret SECRET] [--dry-run]","  kynver plan progress --plan PLAN_ID --row ROW_KEY --role ROLE --status STATUS [--task TASK_ID] [--note NOTE] [--evidence type:value] [--agent-os-id AOS_ID]","  kynver plan verify --plan PLAN_ID [--worktree PATH] [--task TASK_ID] [--human-override] [--local]","  kynver harness verify --worktree PATH [--command CMD] [--json] [--wait-for-admission-ms MS] [--timeout-ms MS]","  kynver plan persist --operation create|add_version|update_metadata --title TITLE (--body-file PATH | --body TEXT) [--slug SLUG] [--plan PLAN_ID] [--summary TEXT] [--failure-kind approval_guard|auth|network|server|tool_interruption]","  kynver plan outbox list","  kynver plan outbox drain [--max N] [--id OUTBOX_ID]","  kynver cleanup [--execute] [--compact] [--node-modules-age-ms MS] [--worktrees-age-ms MS] [--harness-root PATH] [--include-orphans] [--skip-finalize] [--account-bytes]","    --include-orphans also scans whole worktree directories (<harnessRoot>/worktrees/<runId>/<workerId>/) that no run/worker.json references; orphans pass salvage gates (recent heartbeat, dirty git, ahead of origin/main) before removal.","    Dry-run defaults to fast scan (no byte accounting). Pass --account-bytes for reclaimable byte totals. Pass --compact for a bounded operator summary (no full action list).","  kynver monitor start --run RUN_ID [--name worker] [--agent-os-id AOS_ID] [--poll-ms MS]","  kynver monitor status [--run RUN_ID] [--name worker] [--tick]","  kynver monitor stop --run RUN_ID [--name worker]","  kynver monitor list","  kynver monitor tick --run RUN_ID [--name worker] [--agent-os-id AOS_ID] [--auto-complete] [--renew-leases]","  kynver monitor auto-complete --run RUN_ID --name worker [--agent-os-id AOS_ID] [--base-url URL] [--secret SECRET]","  kynver monitor run-loop --run RUN_ID --monitor-id ID [--name worker] [--agent-os-id AOS_ID] [--poll-ms MS] [--auto-complete] [--renew-leases]","  kynver config ensure-default-repo [--json]","  kynver doctor runtime-takeover [--remediate-default-repo]","  kynver scheduler cutover-check [--json]","  kynver scheduler attest-cutover [--json]","  kynver cron install [--dry-run] [--json] [--install-systemd] [--confirm-qstash-removal] [--skip-watchdog] [--skip-test-fire] [--agent-os-id ID] [--api-base-url URL] [--run RUN_ID]","  kynver cron verify [--json]","  kynver cron status [--json]","  kynver cron tick [--agent-os-id AOS_ID] [--json]","  kynver lane tick landing-maintainer [--fleet] [--repo OWNER/NAME] [--agent-os-id AOS_ID] [--execute] [--json]","  kynver board contract [--agent-os-id ID] [--base-url URL] [--since ISO] [--limit N]"].join(`
-`)),process.exit(e)}async function wy(e=process.argv.slice(2)){if($u(e,import.meta.url,"kynver"))return;if(e.length===0||Iu(e[0]))return sa(0);let r=e.shift(),t,n;if((r==="run"||r==="worker"||r==="plan"||r==="runner"||r==="harness"||r==="monitor"||r==="doctor"||r==="config"||r==="scheduler"||r==="cron"||r==="lane"||r==="board")&&(t=e.shift()),n=e,t&&Iu(t)||n.some(Iu))return sa(0);let o=Wn(n),{runsDir:s,worktreesDir:i}=oe();if(vy(s,{recursive:!0}),vy(i,{recursive:!0}),r==="daemon"&&Zt(),xa(r,t)){let a,l=o.run?String(o.run).trim():"";if(l)try{a=U(l).repo}catch{a=void 0}await _a({repoRoot:a,cwd:a})}if(r==="login")return void await ep(o);if(r==="bootstrap")return void await _i(o);if(r==="start")return void await mk(o);if(r==="status")return Ht(o);if(r==="runner"&&t==="credential")return void await Zd(o);if(r==="setup")return void await is(o);if(r==="daemon")return Oi(o)?void await Ni(o):void await vo(o);if(r==="plan"&&t==="progress")return void await wk(o);if(r==="plan"&&t==="verify")return void await Ck(o);if(r==="harness"&&t==="verify")return _k(o);if(r==="plan"&&t==="persist")return void await xk(o);if(r==="plan"&&t==="outbox"){let a=n.shift();if(a==="list")return void await Ek();if(a==="drain")return void await Pk(Wn(n));Sy("plan",`outbox ${a??""}`.trim())}if(r==="cleanup")return Ak(o);if(r==="config"&&t==="ensure-default-repo")return qk(o.json===!0);if(r==="doctor"&&t==="runtime-takeover")return sy(o);if(r==="scheduler"&&t==="cutover-check")return cy(o.json===!0);if(r==="scheduler"&&t==="attest-cutover")return uy(o.json===!0);if(r==="cron"&&t==="install")return void await my(o);if(r==="cron"&&t==="verify")return void await fy(o);if(r==="cron"&&t==="status")return void await dy(o.json===!0);if(r==="cron"&&t==="tick")return void await py(o);if(r==="lane"&&t==="tick"){let a=n.shift();return void await Ry(Wn(n),a)}if(r==="board"&&t==="contract")return void await iy(o);if(r==="run"&&t==="create")return void ao(o);if(r==="run"&&t==="list")return Cc();if(r==="run"&&t==="resolve")return _c(o);if(r==="run"&&t==="status")return Ht(o);if(r==="run"&&t==="dispatch")return void await _r(o);if(r==="run"&&t==="sweep")return void await zt(o);if(r==="run"&&t==="reconcile")return Sc();if(r==="run"&&t==="unblock")return void await Jk(o);if(r==="worker"&&t==="start")return void await Wl(o);if(r==="worker"&&t==="list")return Cm(o);if(r==="worker"&&t==="status")return Dl(o);if(r==="worker"&&t==="tail")return Ml(o);if(r==="worker"&&t==="stop")return Ul(o);if(r==="worker"&&t==="complete")return void await Bs(o);if(r==="worker"&&t==="discard-disposable")return fk(o);if(r==="worker"&&t==="auto-complete")return void await Ll(o);if(r==="monitor"&&t==="start"){let a=await $k(o);console.log(JSON.stringify(a,null,2));return}if(r==="monitor"&&t==="status")return void await Kk(o);if(r==="monitor"&&t==="stop")return jk(o);if(r==="monitor"&&t==="list")return Vk();if(r==="monitor"&&t==="tick")return void await Yk(o);if(r==="monitor"&&t==="auto-complete")return void await ra(o);if(r==="monitor"&&t==="run-loop")return void await Gk(o);Sy(r,t)}var aI=process.argv[1]&&by.native(process.argv[1])===by.native(iI(import.meta.url));aI&&wy().catch(e=>{console.error(e),process.exit(1)});var lI="https://api.vercel.com";function cI(e){let r=e?.trim();return r||process.env.VERCEL_TOKEN?.trim()||null}function Cy(e){return(e??"").trim().toUpperCase()}function uI(e){if(typeof e!="string"||!e.trim())return null;let r=e.trim();return r.startsWith("http")?r:`https://${r}`}async function Ou(e,r={}){let t=e.trim();if(!t)return{ok:!1,readyState:null,previewUrl:null,error:"missing deployment id or URL"};let n=cI(r.token);if(!n)return{ok:!1,readyState:null,previewUrl:null,error:"VERCEL_TOKEN not configured"};let o=r.teamId?.trim()||process.env.VERCEL_TEAM_ID?.trim(),s=o?`?teamId=${encodeURIComponent(o)}`:"",i=r.fetchImpl??fetch;try{let a=await i(`${lI}/v13/deployments/${encodeURIComponent(t)}${s}`,{headers:{Authorization:`Bearer ${n}`}});if(!a.ok){let u=await a.text();return{ok:!1,readyState:null,previewUrl:null,error:`Vercel API ${a.status}: ${u.slice(0,200)}`}}let l=await a.json();return{ok:!0,readyState:Cy(l.readyState??l.state)||null,previewUrl:uI(l.url),error:null}}catch(a){return{ok:!1,readyState:null,previewUrl:null,error:a instanceof Error?a.message:"Vercel API fetch failed"}}}function Nu(e,r){let t=Cy(e);return t==="READY"?"ready":t==="ERROR"||t==="CANCELED"?"error":t==="BUILDING"||t==="QUEUED"||t==="INITIALIZING"||r?"building":"error"}var _y=/(^|\.)vercel\.app$/i,xy=/^dpl_[a-z0-9]+$/i;function ia(e){let r=e.trim();if(!r||/vercel\.com/i.test(r))return!1;if(xy.test(r))return!0;try{let t=new URL(r.startsWith("http")?r:`https://${r}`);return _y.test(t.hostname)}catch{return!1}}function dI(e){let r=e.trim();if(!r)return null;try{return new URL(r)}catch{return null}}function pI(e){let r=e.pathname.split("/").filter(Boolean);if(r.length<3)return null;let t=r[r.length-1]?.trim();return!t||t==="deployments"?null:t}function mI(e){let r=e.pathname.split("/").filter(Boolean),t=r.indexOf("deployments");return t<0||t>=r.length-1?null:r[t+1]?.trim()||null}function kt(e){let r={kind:"unknown",previewUrl:null,inspectTarget:null,deploymentId:null},t=e.trim();if(!t)return r;if(/^dpl_[a-z0-9]+$/i.test(t))return{kind:"deployment_id",previewUrl:null,inspectTarget:t,deploymentId:t};let n=dI(t);if(!n)return r;if(_y.test(n.hostname)){let o=n.origin;return{kind:"deployment_host",previewUrl:o,inspectTarget:o,deploymentId:null}}if(n.hostname==="vercel.com"||n.hostname.endsWith(".vercel.com")){let o=mI(n)??pI(n);return{kind:"dashboard",previewUrl:null,inspectTarget:o&&xy.test(o)?o:null,deploymentId:o}}return r}function Ey(e){return kt(e).kind==="dashboard"}var fI=/vercel/i;function Tu(e){let r=typeof e=="string"?e.trim().toLowerCase():"";return r==="success"?"success":r==="pending"?"pending":r==="failure"?"failure":r==="error"?"error":"unknown"}function Du(e){let r=typeof e=="string"?e.trim():"";return!!(r&&fI.test(r))}function No(e){let t=(Array.isArray(e)?e:[]).filter(l=>Du(l.context));if(t.length===0)return null;let n=l=>l==="failure"||l==="error"?0:l==="pending"?1:l==="success"?2:1,o=null,s=1/0;for(let l of t){let c=n(Tu(l.state));c<s&&(o=l,s=c)}if(!o)return null;let i=typeof o.target_url=="string"&&o.target_url.trim()?o.target_url.trim():null,a=i?kt(i):null;return{context:String(o.context??"Vercel").trim(),state:Tu(o.state),targetUrl:i,description:typeof o.description=="string"&&o.description.trim()?o.description.trim():null,deploymentId:a?.deploymentId??null,previewUrl:a?.previewUrl??null,dashboardUrl:a?.kind==="dashboard"?i:null}}function gI(e){return e==="success"?"ready":e==="pending"?"building":e==="failure"||e==="error"?"error":"unavailable"}function aa(e){return e.filter(Boolean).join("; ")}function Mu(e){let r=typeof e=="string"?e.trim():"";if(!r)return{target:null,classified:null,reason:"missing target_url"};let t=kt(r);return t.inspectTarget&&ia(t.inspectTarget)?{target:t.inspectTarget,classified:t,reason:null}:t.kind==="dashboard"?{target:null,classified:t,reason:t.deploymentId?"dashboard deployment id is not API-inspectable; trust GitHub Vercel status":"dashboard URL is not valid for Vercel API lookup"}:{target:null,classified:t,reason:"unrecognized Vercel URL"}}function Uu(e,r={}){let t=r.observedAt??new Date().toISOString(),n=No(e);if(!n)return{status:"not_run",previewUrl:null,deploymentUrl:null,summary:"No Vercel GitHub status context on commit",observedAt:t,inspectSkipped:!0,inspectReason:"no_vercel_status_context",githubState:null,vercelContext:null};let o=gI(n.state),s=n.previewUrl??n.dashboardUrl,i=n.previewUrl??n.dashboardUrl;return{status:o,previewUrl:s,deploymentUrl:i,summary:aa([`GitHub ${n.context}=${n.state}`,n.description??"",n.dashboardUrl?"dashboard target_url (API lookup skipped)":""]),observedAt:t,inspectSkipped:!0,inspectReason:n.dashboardUrl&&n.state==="success"?"trusted_github_status_dashboard_url":n.dashboardUrl?"dashboard_url_not_api_inspectable":"github_status_only",githubState:n.state,vercelContext:n.context}}async function Py(e){let r=e.observedAt??new Date().toISOString(),t=Uu(e.statuses??[],{observedAt:r}),n=No(e.statuses??[]);if(!n)return t;if(n.state==="success")return{...t,inspectSkipped:!0,inspectReason:n.dashboardUrl?"trusted_github_status_dashboard_url":"trusted_github_status"};if(!e.allowInspect)return{...t,inspectSkipped:!0,inspectReason:"api_lookup_disabled"};let{target:o,reason:s}=Mu(n.targetUrl);if(!o)return{...t,inspectSkipped:!0,inspectReason:s??"not_api_inspectable",summary:aa([t.summary??"",s??"skipped Vercel API lookup"])};let a=await(e.runInspect??Ou)(o),l=new Date().toISOString();if(!a.ok&&a.error?.includes("VERCEL_TOKEN"))return{status:"unavailable",previewUrl:t.previewUrl,deploymentUrl:t.deploymentUrl,summary:"VERCEL_TOKEN not configured for API fallback",observedAt:l,inspectSkipped:!0,inspectReason:"vercel_token_missing",githubState:n.state,vercelContext:n.context};if(!a.ok)return{status:n.state==="pending"?"building":"error",previewUrl:t.previewUrl,deploymentUrl:o.startsWith("http")?o:t.deploymentUrl,summary:aa([`Vercel API lookup ${o} failed`,a.error??""]),observedAt:l,inspectSkipped:!1,inspectReason:null,githubState:n.state,vercelContext:n.context};let c=Nu(a.readyState,n.state==="pending"),u=a.previewUrl??(o.startsWith("http")?o:t.previewUrl);return{status:c,previewUrl:u,deploymentUrl:u??t.deploymentUrl,summary:aa([`Vercel API ${o}=${a.readyState??"unknown"}`,c==="ready"?"preview ready":""]),observedAt:l,inspectSkipped:!1,inspectReason:null,githubState:n.state,vercelContext:n.context}}export{Sr as CODEX_DEFAULT_MODEL,Cs as DEFAULT_DISPATCH_LEASE_MS,qi as DEFAULT_HARNESS_VERIFY_COMMANDS,Ki as DEFAULT_HEAVY_VERIFICATION_MAX_CONCURRENT,fi as DEFAULT_MAX_ACTIONS_PER_SWEEP,uo as DEFAULT_NODE_MODULES_AGE_MS,mi as DEFAULT_RUN_DIRECTORIES_AGE_MS,pi as DEFAULT_TERMINAL_WORKTREES_AGE_MS,xe as DEFAULT_WORKER_PROVIDER,po as DEFAULT_WORKTREES_AGE_MS,cd as DEFAULT_WSL_HOST_CRITICAL_FREE_BYTES,ud as DEFAULT_WSL_HOST_MOUNT,ld as DEFAULT_WSL_HOST_WARN_FREE_BYTES,Gr as EMBEDDED_INSTRUCTION_BUNDLE,op as EMBEDDED_INSTRUCTION_BUNDLE_VERSION,Ju as FORBIDDEN_WORKER_ENV_KEYS,li as HARNESS_BUILD_CACHE_RELATIVE_PATHS,_o as HEAVY_VERIFICATION_TOKEN_REQUIRED,Rs as HERMES_OPENAI_CODEX_DEFAULT_MODEL,df as INSTRUCTION_BUNDLE_REFRESH_TTL_MS,va as MEMORY_COST_MANAGED_PACKAGES,Ra as MEMORY_COST_PACKAGE_MIN_VERSIONS,Sn as MemoryCostPackageVersionGuardError,oc as OPENAI_CODEX_PROVIDER,eC as ORCHESTRATION_ACTION_KINDS,rC as ORCHESTRATION_POLICY_DECISIONS,sc as ORCHESTRATION_POLICY_MODES,yn as PACKAGE_VERSION,lf as PINNED_INSTRUCTION_BUNDLE_PUBLIC_KEYS,Jt as RUN_METADATA_ACTIVE_SIGNAL_MS,Pf as TERMINAL_WORKER_ARCHIVE_AGE_MS,zw as TRANSIENT_OPENAI_CODEX_ERROR_CLASSES,cs as WORKER_PERSONA_CATALOG,mC as applyProductionDatabaseToProcess,oi as archiveTerminalWorkerMetadata,wa as assertMemoryCostPackageVersionGuard,Po as assessAutoCompleteEligibility,dt as assessBuildAdmission,Br as assessExitedWorkerSalvage,fn as assessHeavyVerificationGate,Hc as assessOrphanWorktreeSafety,El as assessPrHandoffRequirement,Wr as assessWorkerLanding,La as assessWorkerLandingContract,Ky as auditWorkerEnv,et as autoCompleteWorker,Ll as autoCompleteWorkerCli,ro as buildBoxResourceSnapshotFromGate,Ip as buildCodexExecArgv,sf as buildDispatchTaskText,ac as buildForegroundHarnessIdempotencyKey,xp as buildHermesOpenAiCodexChatArgv,Ca as buildMemoryCostPackageGuardInput,il as buildOrchestrationProviderInventory,yl as buildPrompt,ai as buildRunListRows,Li as buildSystemdRunArgv,zs as canonicalJsonStringify,ur as canonicalWorkerDir,Gi as classifyHeavyShellCommand,xd as classifyNpmAuditOutcome,ff as classifyOpenAiCodexError,Rp as classifyOrchestrationRisk,bd as classifyRepoSearchMeta,qo as classifyShellCommandOutcome,kt as classifyVercelUrl,Zi as classifyWorkerHealth,dl as codexProvider,Rc as collectFilesystemLiveRunKeys,Py as collectVercelEvidence,yp as compareProviderCandidates,wn as compareSemver,Bs as completeWorker,Ld as computeAttention,Bw as computeInstructionBundleVersion,T as computeWorkerStatus,wo as countActiveHeavyVerificationSlots,ao as createRun,$n as defaultBoxId,Ww as deriveInstructionBundleKeyId,Tt as deriveRunStatus,Jo as diagnoseRepoSearchFailure,kr as discoverDefaultRepo,nd as discoverDefaultRepoCandidates,ei as discoverProductionDbEnvFilePaths,_r as dispatchRun,Ys as drainPlanOutbox,Qa as enforceCursorWorkerProvider,_a as enforceMemoryCostPackageGuardAtStartup,nc as ensureInstructionBundle,Ns as ensurePrReadyHandoff,pR as evaluateMemoryCostPackageGuardAtStartup,$o as evaluateMemoryCostPackageVersionGuard,sC as evaluateOrchestrationPolicy,Uu as evidenceFromGitHubVercelStatus,vf as expandHomePath,qs as extractPlanOutboxFromTask,xl as extractPrUrlFromText,Na as extractSearchMeta,Cd as extractSearchMetaFromToolLine,Xi as formatAutoCompleteOutcomeNotice,kf as formatCronJobDeliveryFailure,Nk as formatHarnessToolReadable,Uw as formatHeartbeatLine,nR as formatMemoryCostPackageGuardError,gn as formatMonitorTickNotice,hf as formatOpenAiCodexFailureNotice,Js as formatPlanOutboxHandoffBlock,wd as formatRepoSearchGuidance,Yt as formatResolvedDefaultRepo,Qi as formatWorkerCompleteNotice,Eo as formatWorkerStatusNotice,Yi as gateWorkerShellCommand,Nv as getActiveInstructionBundle,sr as getActiveInstructionBundleSource,vr as getActiveInstructionBundleVersion,Mr as getHarnessPaths,ea as getMonitorStatus,Jr as getOrchestrationProviderCapability,us as getPersonaDefaultRoleLane,lp as getPersonaDispatchLane,Ja as getWorkerPersonaCatalogEntry,ha as gitRepoRoot,pe as harnessRunsDir,xc as harnessStorageSnapshot,or as harnessWorktreesDir,Gt as hasNestedRunsSegment,ir as hashPlanBody,ul as hermesCodexProvider,ec as instructionBundleCachePath,On as isActiveHarnessWorker,Ge as isClaudeFamilyProvider,Ey as isDashboardVercelUrl,Lw as isEngagementRequiredSkip,Z as isFinishedWorkerStatus,pa as isForbiddenWorkerEnvKey,Ec as isGeneratedHarnessPath,gc as isHarnessRunMetadataPath,pn as isHeavyVerificationGateSkipped,ia as isInspectableVercelTarget,Lv as isKnownWorkerPersonaSlug,td as isKynverMonorepoRoot,Fr as isLandingBlockedWorkerStatus,ic as isOrchestrationEnforceTasksEnabled,Kc as isPipelineCleanupEnabled,Oa as isRgExcludeScopeTarget,Vt as isSignedInstructionBundleShape,Go as isSingleFileSearchTarget,an as isSystemdRunAvailable,Ia as isTerminalHeartbeatPhase,Du as isVercelStatusContext,dd as isWslHost,Ok as joinHarnessNotice,Ba as landingContractAttentionReason,gu as listActiveHeavyVerificationSlots,qu as listForbiddenWorkerEnvKeys,Ao as listMonitors,el as listOrchestrationProviderCapabilities,tt as listOutboxItems,Cc as listRuns,wc as listRunsCli,tc as loadInstructionBundleCache,v as loadUserConfig,wy as main,Wi as mergeNodeOptionsForBuildCheck,Sd as metaToNormalizedRgCommand,vp as normalizeCursorModelAlias,te as normalizeHarnessRoot,Yo as normalizeRepoSearchCommand,vd as normalizeRgArgv,Me as observeRunnerDiskGate,Ea as observeWslHostDisk,Zw as orchestrationAuditForWorkerJson,Wn as parseArgs,rv as parseClaudeStream,At as parseHarnessStream,_e as parseHeartbeat,Xs as parseRawEd25519Key,ti as persistDefaultRepo,jt as persistPlan,No as pickVercelStatusContext,Rr as postJson,Vv as preferCursorExecutor,ks as preflightClaudeModel,zr as preflightCodexModel,ys as preflightCursorModel,gs as probeClaudeOAuthBinding,rl as probeCodexOAuthBinding,hs as probeCursorOAuthBinding,sl as probeHermesCliAdapter,Fn as probeHermesOpenAiCodexBinding,hb as probeOrchestrationProviderBinding,Sa as probeRepoPackageVersions,nl as providerCapableForRisk,Ct as readMemAvailableBytes,Sf as readProductionDbKeysFromEnvFile,Co as reclaimStaleHeavyVerificationSlots,ii as reconcileLocalOnlyMergedPrAttention,Sc as reconcileRunsCli,qt as reconcileStaleWorkers,si as reconcileWorkerMetadata,BC as reconcileWorkerMetadataCli,iC as redactHarness,lr as redactProviderErrorText,mn as releaseHeavyVerificationSlot,RC as remediateDefaultRepo,ni as repairMissingRunMetadata,kC as repairNestedRunsPath,B as resolveBaseUrl,Bb as resolveBoxKindFromEnv,ls as resolveBundlePersona,Pv as resolveCallbackSecret,K as resolveCallbackSecretWithMint,br as resolveCodexOrchestrationAdapter,Hn as resolveConfiguredWorkerProvider,Re as resolveDefaultRepo,de as resolveHarnessRoot,Df as resolveHarnessRunByName,_c as resolveHarnessRunCli,un as resolveHeavyVerificationMaxConcurrent,Ql as resolveInstructionBundlePublicKey,Lt as resolveInstructionText,gf as resolveOpenAiCodexRetryBudget,Qs as resolveOrchestrationPolicyMode,ll as resolveOrchestrationRouting,Yr as resolvePolicyThreshold,wf as resolveProductionDatabaseUrl,Us as resolveRunTargetArg,Mu as resolveVercelInspectTarget,pc as resolveWorkerJsonPath,Be as resolveWorkerTargetArgs,Ji as runBoundedBuildCheck,vo as runDaemon,st as runDirHasActiveRetentionSignals,Ci as runHarnessCleanup,xo as runHarnessVerifyCommands,ht as runMonitorTick,$c as runPipelineHarnessCleanup,Ht as runStatus,so as safeDatabaseUrlHint,yf as sanitizeOrchestrationAudit,rc as saveInstructionBundleCache,Ve as saveUserConfig,zu as scrubClaudeEnv,Ne as scrubWorkerEnv,fs as selectCheapestCapableProvider,ba as semverAtLeast,Ya as setActiveInstructionBundle,xa as shouldEnforceMemoryCostPackageGuardCli,Bl as spawnCompletionSidecar,ta as spawnMonitorSidecar,Ws as spawnWorkerProcess,Wl as startWorker,Ul as stopWorker,Ma as summarizeEvent,_d as summarizeNpmAuditReport,Ad as summarizeShellToolCallEvent,pd as summarizeWslRecoverySteps,zt as sweepRun,Ml as tailWorker,ps as taskAllowsClaudeWorker,Ur as terminalFinalResultFromHeartbeat,pt as tryAcquireHeavyVerificationSlot,Ga as tryResolveBaseUrl,os as tryResolveCallbackSecretWithMint,sa as usage,TS as validateOwnedPaths,Nl as validateRepo,Gn as validateRunId,DS as validateTailLines,ym as validateWorkerName,cf as verifyInstructionBundleSignatureWithKey,Zl as verifySignedInstructionBundle,Vi as waitForHeavyVerificationSlot,yc as workerDirHasActiveRetentionSignals,Bv as workerPersonaLandingSlugs,qa as workerPersonaReviewSlugs,Dl as workerStatus};
+Blockers:`);for(let n of t.blockers)console.log(`  ! ${n}`);process.exitCode=1;return}console.log("\nInstall complete \u2014 run `kynver cron verify` to re-check.")}async function rR(e){let r=v(),t=await yn({config:r});if(e.json===!0){console.log(JSON.stringify(t,null,2)),t.ok||(process.exitCode=1);return}console.log(`Kynver Cron verify: ${t.ok?"PASS":"FAIL"}
+`);for(let n of t.checks){let o=n.ok?"ok":"FAIL";console.log(`  [${o}] ${n.id}: ${n.summary}`),!n.ok&&n.remediation&&console.log(`         \u2192 ${n.remediation}`)}t.ok||(process.exitCode=1)}I();import iO from"node:os";I();Ue();jt();C();var Vo={slug:"landing-maintainer",originCron:"maintain-8-blocker-and-pr-landing-workers",defaultRepo:"Totalsolutionsync/Kynver",landScript:"scripts/agent-os-land-pr.mjs",landScriptArgs:["--skip-not-ready"]};import{spawnSync as sO}from"node:child_process";import tR from"node:path";function nR(e,r,t){let o=[tR.join(r,Vo.landScript),String(e),...Vo.landScriptArgs];if(!t)return{action:{kind:"land_pr",prNumber:e,reason:"dry-run"},executed:!1,exitCode:0,stdout:`dry-run: node ${o.join(" ")}`,stderr:""};let s=sO("node",o,{cwd:r,encoding:"utf8",timeout:600*1e3});return{action:{kind:"land_pr",prNumber:e,reason:"landing wrapper invoked"},executed:!0,exitCode:s.status,stdout:s.stdout??"",stderr:s.stderr??""}}function oR(e){let r=e.repoPath?String(e.repoPath).trim():"";return r?tR.resolve(r):Ke()?.repo??process.cwd()}async function sR(e){let r=String(O(String(e.agentOsId||""),"--agent-os-id")),t=String(e.repo||Vo.defaultRepo).trim(),n=e.fleet===!0||e.fleet==="true",o=e.execute===!0||e.execute==="true",s=e.run?String(e.run):void 0,i=ur({runId:s??"fleet-lane-tick"}),a={...go(i,{harnessRunId:s,boxKind:Ve(v()),hostLabel:iO.hostname()}),providerHealthy:i.ok,authorizedForRepair:i.ok,authorizedForLanding:i.ok,systemHealthBlockers:i.ok?[]:[i.reason??"resource_gate_blocked"],actionableWorkers:i.activeWorkers},l=F(e.baseUrl?String(e.baseUrl):void 0),c=await V(e.secret?String(e.secret):void 0,r,{baseUrl:l}),u=`${l}/api/agent-os/by-id/${encodeURIComponent(r)}/fleet-landing-maintainer/tick`,f=(await xr(u,c,{repo:t,fleet:n,execute:o,runId:s,boxCapacity:a})).response,m=[],p=oR(e),g=Array.isArray(f?.localActions)?f.localActions:[],k=a.boxId;for(let h of g){if(h.kind==="land_pr"&&typeof h.prNumber=="number"){let b=nR(h.prNumber,p,o);if(m.push({action:b.action,executed:b.executed,exitCode:b.exitCode}),o&&b.executed){let x=b.exitCode===0,M=typeof h.prUrl=="string"&&h.prUrl.trim()?h.prUrl.trim():`https://github.com/${t}/pull/${h.prNumber}`;try{await xr(`${l}/api/agent-os/by-id/${encodeURIComponent(r)}/fleet-landing-maintainer/outcome`,c,{repo:t,prUrl:M,holderBoxId:k,merged:x})}catch{}}continue}m.push({action:h,executed:!1,exitCode:null})}return{repo:t,fleet:n,execute:o,coordinator:f,localOutcomes:m}}async function iR(e,r){let t=String(r??e.lane??"").trim();t!=="landing-maintainer"&&(console.error(`unknown lane: ${t||"(none)"}`),process.exit(1));let n=await sR(e);if(e.json===!0||e.json==="true"){console.log(JSON.stringify(n,null,2));return}console.log(["fleet landing-maintainer tick",`repo=${n.repo}`,`fleet=${n.fleet}`,`execute=${n.execute}`,`localOutcomes=${n.localOutcomes.length}`].join(" "));for(let o of n.localOutcomes)console.log(`  ${o.action.kind} pr=${o.action.prNumber??"-"} executed=${o.executed}`)}I();W();Gr();jt();import uO from"node:path";C();_r();Kn();W();C();import aO from"node:path";function aR(e){let r=e?.trim();return r?/completion acknowledged but board not advanced/i.test(r)&&/task already terminal/i.test(r):!1}function lR(e){let r=typeof e.status=="string"?e.status:"",t=typeof e.completionBlocker=="string"&&e.completionBlocker.trim().length>0?e.completionBlocker:void 0;return t&&!aR(t)?!1:typeof e.completionReportedAt=="string"&&e.completionReportedAt.trim()||e.completionOutcome==="acknowledged"?!0:r==="done"}function Xu(e){return typeof e.completionReportedAt=="string"&&e.completionReportedAt.trim()||!$(e.pid)?!1:ks(e)}function lO(e,r){let t=e.completionBlocker?.trim();if(t&&!aR(t))return{attention:"blocked",attentionReason:t,status:"blocked"};if(r.heartbeatBlocker)return{attention:"blocked",attentionReason:r.heartbeatBlocker,status:"blocked"};if(lR(e))return{attention:"done",attentionReason:"completion acknowledged",status:"done"};let n=Xu(e);return n?{attention:"ok",status:e.status?.trim()||"running"}:e.status==="done"?{attention:"done",status:"done"}:n?{attention:"ok",status:e.status?.trim()||"unknown"}:{attention:"needs_attention",attentionReason:"process not alive",status:"exited"}}function cO(e){return typeof e.completionBlocker=="string"&&e.completionBlocker.trim()||lR(e)?!1:Xu(e)}function Qu(e,r){let t=_(aO.join(E(e.id),"workers",R(r),"worker.json"),void 0);if(!t)return null;let n=he(t.heartbeatPath),{attention:o,attentionReason:s,status:i}=lO(t,n),a=Xu(t),l=cO(t);return{runId:e.id,runName:e.name,worker:r,status:i,attention:o,attentionReason:s,alive:a,isActive:l,taskId:t.taskId?.trim()||null,planId:t.planId?.trim()||null,leaseOwner:t.leaseOwner?.trim()||null,pid:t.pid,model:t.model,currentTask:n.lastHeartbeatSummary,lastHeartbeatPhase:n.lastHeartbeatPhase,lastHeartbeatSummary:n.lastHeartbeatSummary,heartbeatBlocker:n.heartbeatBlocker,completionBlocker:t.completionBlocker?.trim()||null}}function Zu(e,r){let t={};for(let n of e){let o=r(n).trim()||"unknown";t[o]=(t[o]??0)+1}return t}function cR(e){return e.filter(r=>r.attention==="blocked"||r.attention==="needs_attention"||r.attention==="stale").map(r=>({runId:r.runId,worker:r.worker,taskId:r.taskId,reason:r.completionBlocker??r.heartbeatBlocker??r.attentionReason??r.attention}))}function uR(e){return e.filter(r=>r.isActive&&r.taskId).map(r=>r.taskId.trim())}function dO(){let e=[];for(let r of J())for(let t of ge(r)){let n=Qu(r,t);n&&e.push(n)}return e}function pO(e){let r=e.trim().toLowerCase();if(!r)return null;for(let t of J())for(let n of ge(t)){let s=_(uO.join(E(t.id),"workers",R(n),"worker.json"),void 0)?.taskId?.trim();if(s&&(s.toLowerCase()===r||s.toLowerCase().endsWith(r)))return Qu(t,n)}return null}function ed(e){if(e.mode==="full")return{mode:"full",runs:ln()};let r=v(),{harnessRoot:t}=te(),n=J(),o=dO(),s=o.filter(l=>l.isActive).length,i=ur({runId:n[0]?.id??"fleet",activeWorkers:s}),a={generatedAt:new Date().toISOString(),mode:e.mode,harnessRoot:t,agentOsId:r.agentOsId?.trim()||null,resourceGate:i,runCount:n.length,runStatusCounts:Zu(n,l=>l.status),workerCount:o.length,workerStatusCounts:Zu(o,l=>l.status),workerAttentionCounts:Zu(o,l=>l.attention),activeTaskIds:uR(o),blocked:cR(o).slice(0,25),workers:o};if(e.mode==="task"){let l=e.taskId?.trim()??"",c=l?pO(l):null;return{...a,mode:"task",taskId:l,taskFound:!!c,workers:c?[c]:[]}}if(e.mode==="workers"){let l=o.filter(c=>c.alive||c.attention==="blocked"||c.attention==="needs_attention"||c.attention==="stale");return{...a,mode:"workers",workers:l,blocked:cR(l).slice(0,25),activeTaskIds:uR(l)}}return a}function rd(e,r=72){let t=e.trim();return t.length<=r?t:`${t.slice(0,r-1)}\u2026`}function mO(e){let r=[`${e.runId}/${e.worker}`,e.taskId?`task=${e.taskId}`:"task=\u2014",e.leaseOwner?`lease=${e.leaseOwner}`:"lease=\u2014",`${e.status}/${e.attention}`];return e.currentTask&&r.push(`tool=${rd(e.currentTask,48)}`),r.join(" \xB7 ")}function fO(e){let r=e.resourceGate,t=[];if(t.push("Kynver factory status"),t.push(`Slots: ${r.activeWorkers}/${r.maxConcurrentWorkers} active \xB7 ${r.slotsAvailable} available`+(r.reason?` (${r.reason})`:"")),t.push(`Runs: ${e.runCount} \xB7 Workers: ${e.workerCount}`),e.activeTaskIds.length>0&&t.push(`Active tasks: ${e.activeTaskIds.slice(0,12).join(", ")}`),e.blocked.length>0){t.push(`Blocked (${e.blocked.length}):`);for(let n of e.blocked.slice(0,8)){let o=n.taskId?` task=${n.taskId}`:"";t.push(`  \xB7 ${n.runId}/${n.worker}${o}: ${rd(n.reason)}`)}e.blocked.length>8&&t.push(`  \xB7 \u2026and ${e.blocked.length-8} more (use kynver status --workers)`)}else t.push("Blocked: none");return t.push("Drilldown: kynver status --workers | --task <id> | --json | --full"),t.join(`
+`)}function gO(e){let r=e.resourceGate,t=[];if(t.push(`Worker slots ${r.activeWorkers}/${r.maxConcurrentWorkers} \xB7 available ${r.slotsAvailable}`),e.workers.length===0)return t.push("No active or attention workers."),t.join(`
+`);for(let n of e.workers)t.push(mO(n));return t.join(`
+`)}function hO(e){if(!e.taskId)return"missing --task <id>";if(!e.taskFound||e.workers.length===0)return`No harness worker found for task ${e.taskId}`;let r=e.workers[0];return[`task ${e.taskId}`,`${r.runId}/${r.worker}`,r.status,r.attention,r.leaseOwner?`lease=${r.leaseOwner}`:null,r.model?`model=${r.model}`:null,r.currentTask?`tool=${rd(r.currentTask)}`:null,r.completionBlocker??r.heartbeatBlocker??r.attentionReason??null].filter(n=>!!n).join(" \xB7 ")}function dR(e){return e.mode==="workers"?gO(e):e.mode==="task"?hO(e):fO(e)}function kO(e){return e.full===!0||e.full==="true"?"full":e.json===!0||e.json==="true"?"json":e.workers===!0||e.workers==="true"?"workers":typeof e.task=="string"&&e.task.trim()?"task":"compact"}function pR(e){let r=kO(e);if(r==="full"){let n=ed({mode:"full"});console.log(JSON.stringify(n,null,2));return}let t=ed({mode:r,taskId:typeof e.task=="string"?e.task:void 0});if(r==="json"){console.log(JSON.stringify(t,null,2));return}console.log(dR(t))}function td(e){return e==="help"||e==="--help"||e==="-h"}function gR(e,r){let t=[e,r].filter(Boolean).join(" ");console.error(`unknown command: ${t||"(none)"}`),_a(1)}function _a(e=0){(e===0?console.log:console.error)(["Usage:","  kynver login [--api-key KEY] [--api-base-url URL]   (omit --api-key to authorize in the browser)","  kynver bootstrap [--api-base-url URL] [--api-key KEY] [--repo PATH]   (login + setup + runner credential in one shot)","  kynver start [--repo PATH] [--api-base-url URL] [--run RUN_ID] [--interval-ms MS] [--chat-oauth]   (bring your agent online: bootstrap if needed + run + daemon; --chat-oauth lets delegated chat turns use your local Claude subscription)","  kynver runner credential [--agent-os-id ID] [--base-url URL]","  kynver setup [--api-base-url URL] [--agent-os-id ID] [--agent-os-slug SLUG] [--box-kind forge|ghost] [--repo PATH] [--discover-repo] [--max-workers N] [--provider claude|cursor] [--chat-oauth]","  kynver daemon --run RUN_ID --agent-os-id AOS_ID [--execute] [--interval-ms MS] [--stall-ms MS] [--no-supervise]","  kynver status [--compact] [--workers] [--task TASK_ID] [--json] [--full]  # factory-wide harness summary","  kynver run list","  kynver run resolve --name RUN_NAME","  kynver run status --run RUN_ID [--full]  # defaults to compact shallow map with drill-down commands","  kynver run dispatch --run RUN_ID --agent-os-id AOS_ID [--base-url URL] [--secret SECRET] [--execute] [--lane any|implementation|review|landing] [--target-task-id TASK_ID] [--executor harness] [--max-starts 1] [--lease-ms MS] [--owned path[,path]] [--model claude-opus-4-8] [--disk-path /] [--reconcile-stale-blockers]","  kynver run sweep --run RUN_ID --agent-os-id AOS_ID [--base-url URL] [--secret SECRET] [--grace-ms MS]",'  kynver worker start --run RUN_ID --name worker --task "..." [--owned path[,path]] [--model MODEL] [--provider claude|cursor] [--agent-os-id AOS_ID] [--task-id TASK_ID] [--wait]',"  kynver worker list --run RUN_ID [--full]  # defaults to compact shallow map with drill-down commands","  kynver worker status --run RUN_ID --name worker","  kynver worker tail --run RUN_ID --name worker [--lines 40] [--raw]","  kynver worker stop --run RUN_ID --name worker","  kynver worker complete --run RUN_ID --name worker [--agent-os-id AOS_ID] [--task-id TASK_ID] [--base-url URL] [--secret SECRET]","  kynver worker discard-disposable --run RUN_ID --name worker --path scripts/helper.mjs[,other]","  kynver worker auto-complete --run RUN_ID --name worker [--agent-os-id AOS_ID] [--poll-ms 5000] [--max-total-ms 21600000] [--complete-attempts 3] [--complete-backoff-ms 5000] [--base-url URL] [--secret SECRET]","  kynver run reconcile","  kynver run unblock [--agent-os-id AOS_ID] [--base-url URL] [--secret SECRET] [--dry-run]","  kynver plan progress --plan PLAN_ID --row ROW_KEY --role ROLE --status STATUS [--task TASK_ID] [--note NOTE] [--evidence type:value] [--agent-os-id AOS_ID]","  kynver plan verify --plan PLAN_ID [--worktree PATH] [--task TASK_ID] [--human-override] [--local]","  kynver harness verify --worktree PATH [--command CMD] [--json] [--wait-for-admission-ms MS] [--timeout-ms MS]","  kynver plan persist --operation create|add_version|update_metadata --title TITLE (--body-file PATH | --body TEXT) [--slug SLUG] [--plan PLAN_ID] [--summary TEXT] [--failure-kind approval_guard|auth|network|server|tool_interruption]","  kynver plan outbox list","  kynver plan outbox drain [--max N] [--id OUTBOX_ID]","  kynver cleanup [--execute] [--compact] [--node-modules-age-ms MS] [--worktrees-age-ms MS] [--harness-root PATH] [--include-orphans] [--skip-finalize] [--account-bytes]","  kynver wsl-crashes [--json] [--execute] [--purge-all] [--keep-newest N]","    --include-orphans also scans whole worktree directories (<harnessRoot>/worktrees/<runId>/<workerId>/) that no run/worker.json references; orphans pass salvage gates (recent heartbeat, dirty git, ahead of origin/main) before removal.","    Dry-run defaults to fast scan (no byte accounting). Pass --account-bytes for reclaimable byte totals. Pass --compact for a bounded operator summary (no full action list).","  kynver monitor start --run RUN_ID [--name worker] [--agent-os-id AOS_ID] [--poll-ms MS]","  kynver monitor status [--run RUN_ID] [--name worker] [--tick]","  kynver monitor stop --run RUN_ID [--name worker]","  kynver monitor list","  kynver monitor tick --run RUN_ID [--name worker] [--agent-os-id AOS_ID] [--auto-complete] [--renew-leases]","  kynver monitor auto-complete --run RUN_ID --name worker [--agent-os-id AOS_ID] [--base-url URL] [--secret SECRET]","  kynver monitor run-loop --run RUN_ID --monitor-id ID [--name worker] [--agent-os-id AOS_ID] [--poll-ms MS] [--auto-complete] [--renew-leases]","  kynver config ensure-default-repo [--json]","  kynver doctor runtime-takeover [--remediate-default-repo]","  kynver scheduler cutover-check [--json]","  kynver scheduler attest-cutover [--json]","  kynver cron install [--dry-run] [--json] [--install-systemd] [--confirm-qstash-removal] [--skip-watchdog] [--skip-test-fire] [--agent-os-id ID] [--api-base-url URL] [--run RUN_ID]","  kynver cron verify [--json]","  kynver cron status [--json]","  kynver cron tick [--agent-os-id AOS_ID] [--json]","  kynver lane tick landing-maintainer [--fleet] [--repo OWNER/NAME] [--agent-os-id AOS_ID] [--execute] [--json]","  kynver board contract [--agent-os-id ID] [--base-url URL] [--since ISO] [--limit N]"].join(`
+`)),process.exit(e)}async function hR(e=process.argv.slice(2)){if(kd(e,import.meta.url,"kynver"))return;if(e.length===0||td(e[0]))return _a(0);let r=e.shift(),t,n;if((r==="run"||r==="worker"||r==="plan"||r==="runner"||r==="harness"||r==="monitor"||r==="doctor"||r==="config"||r==="scheduler"||r==="cron"||r==="lane"||r==="board")&&(t=e.shift()),n=e,t&&td(t)||n.some(td))return _a(0);let o=zn(n),{runsDir:s,worktreesDir:i}=te();if(mR(s,{recursive:!0}),mR(i,{recursive:!0}),r==="daemon"&&pn(),Ya(r,t)){let a,l=o.run?String(o.run).trim():"";if(l)try{a=L(l).repo}catch{a=void 0}await Ga({repoRoot:a,cwd:a})}if(r==="login")return void await Up(o);if(r==="bootstrap")return void await Vi(o);if(r==="start")return void await ry(o);if(r==="runner"&&t==="credential")return void await Mp(o);if(r==="setup")return void await _s(o);if(r==="status")return pR(o);if(r==="daemon")return Xi(o)?void await Qi(o):void await Do(o);if(r==="plan"&&t==="progress")return void await dy(o);if(r==="plan"&&t==="verify")return void await py(o);if(r==="harness"&&t==="verify")return my(o);if(r==="plan"&&t==="persist")return void await fy(o);if(r==="plan"&&t==="outbox"){let a=n.shift();if(a==="list")return void await gy();if(a==="drain")return void await hy(zn(n));gR("plan",`outbox ${a??""}`.trim())}if(r==="cleanup")return ky(o);if(r==="wsl-crashes")return yy(o);if(r==="config"&&t==="ensure-default-repo")return xh(o.json===!0);if(r==="doctor"&&t==="runtime-takeover")return Gy(o);if(r==="scheduler"&&t==="cutover-check")return zy(o.json===!0);if(r==="scheduler"&&t==="attest-cutover")return Xy(o.json===!0);if(r==="cron"&&t==="install")return void await eR(o);if(r==="cron"&&t==="verify")return void await rR(o);if(r==="cron"&&t==="status")return void await Qy(o.json===!0);if(r==="cron"&&t==="tick")return void await Zy(o);if(r==="lane"&&t==="tick"){let a=n.shift();return void await iR(zn(n),a)}if(r==="board"&&t==="contract")return void await Yy(o);if(r==="run"&&t==="create")return void vo(o);if(r==="run"&&t==="list")return Gc();if(r==="run"&&t==="resolve")return Yc(o);if(r==="run"&&t==="status")return lo(o);if(r==="run"&&t==="dispatch")return void await Nr(o);if(r==="run"&&t==="sweep")return void await cn(o);if(r==="run"&&t==="reconcile")return jc();if(r==="run"&&t==="unblock")return void await Wy(o);if(r==="worker"&&t==="start")return void await ac(o);if(r==="worker"&&t==="list")return cf(o);if(r==="worker"&&t==="status")return tc(o);if(r==="worker"&&t==="tail")return nc(o);if(r==="worker"&&t==="stop")return oc(o);if(r==="worker"&&t==="complete")return void await ni(o);if(r==="worker"&&t==="discard-disposable")return ty(o);if(r==="worker"&&t==="auto-complete")return void await sc(o);if(r==="monitor"&&t==="start"){let a=await Oy(o);console.log(JSON.stringify(a,null,2));return}if(r==="monitor"&&t==="status")return void await Ny(o);if(r==="monitor"&&t==="stop")return Ty(o);if(r==="monitor"&&t==="list")return Dy();if(r==="monitor"&&t==="tick")return void await Uy(o);if(r==="monitor"&&t==="auto-complete")return void await va(o);if(r==="monitor"&&t==="run-loop")return void await My(o);gR(r,t)}var RO=process.argv[1]&&fR.native(process.argv[1])===fR.native(yO(import.meta.url));RO&&hR().catch(e=>{console.error(e),process.exit(1)});var bO="https://api.vercel.com";function vO(e){let r=e?.trim();return r||process.env.VERCEL_TOKEN?.trim()||null}function kR(e){return(e??"").trim().toUpperCase()}function SO(e){if(typeof e!="string"||!e.trim())return null;let r=e.trim();return r.startsWith("http")?r:`https://${r}`}async function nd(e,r={}){let t=e.trim();if(!t)return{ok:!1,readyState:null,previewUrl:null,error:"missing deployment id or URL"};let n=vO(r.token);if(!n)return{ok:!1,readyState:null,previewUrl:null,error:"VERCEL_TOKEN not configured"};let o=r.teamId?.trim()||process.env.VERCEL_TEAM_ID?.trim(),s=o?`?teamId=${encodeURIComponent(o)}`:"",i=r.fetchImpl??fetch;try{let a=await i(`${bO}/v13/deployments/${encodeURIComponent(t)}${s}`,{headers:{Authorization:`Bearer ${n}`}});if(!a.ok){let u=await a.text();return{ok:!1,readyState:null,previewUrl:null,error:`Vercel API ${a.status}: ${u.slice(0,200)}`}}let l=await a.json();return{ok:!0,readyState:kR(l.readyState??l.state)||null,previewUrl:SO(l.url),error:null}}catch(a){return{ok:!1,readyState:null,previewUrl:null,error:a instanceof Error?a.message:"Vercel API fetch failed"}}}function od(e,r){let t=kR(e);return t==="READY"?"ready":t==="ERROR"||t==="CANCELED"?"error":t==="BUILDING"||t==="QUEUED"||t==="INITIALIZING"||r?"building":"error"}var yR=/(^|\.)vercel\.app$/i,RR=/^dpl_[a-z0-9]+$/i;function xa(e){let r=e.trim();if(!r||/vercel\.com/i.test(r))return!1;if(RR.test(r))return!0;try{let t=new URL(r.startsWith("http")?r:`https://${r}`);return yR.test(t.hostname)}catch{return!1}}function CO(e){let r=e.trim();if(!r)return null;try{return new URL(r)}catch{return null}}function wO(e){let r=e.pathname.split("/").filter(Boolean);if(r.length<3)return null;let t=r[r.length-1]?.trim();return!t||t==="deployments"?null:t}function _O(e){let r=e.pathname.split("/").filter(Boolean),t=r.indexOf("deployments");return t<0||t>=r.length-1?null:r[t+1]?.trim()||null}function xt(e){let r={kind:"unknown",previewUrl:null,inspectTarget:null,deploymentId:null},t=e.trim();if(!t)return r;if(/^dpl_[a-z0-9]+$/i.test(t))return{kind:"deployment_id",previewUrl:null,inspectTarget:t,deploymentId:t};let n=CO(t);if(!n)return r;if(yR.test(n.hostname)){let o=n.origin;return{kind:"deployment_host",previewUrl:o,inspectTarget:o,deploymentId:null}}if(n.hostname==="vercel.com"||n.hostname.endsWith(".vercel.com")){let o=_O(n)??wO(n);return{kind:"dashboard",previewUrl:null,inspectTarget:o&&RR.test(o)?o:null,deploymentId:o}}return r}function bR(e){return xt(e).kind==="dashboard"}var xO=/vercel/i;function sd(e){let r=typeof e=="string"?e.trim().toLowerCase():"";return r==="success"?"success":r==="pending"?"pending":r==="failure"?"failure":r==="error"?"error":"unknown"}function id(e){let r=typeof e=="string"?e.trim():"";return!!(r&&xO.test(r))}function Go(e){let t=(Array.isArray(e)?e:[]).filter(l=>id(l.context));if(t.length===0)return null;let n=l=>l==="failure"||l==="error"?0:l==="pending"?1:l==="success"?2:1,o=null,s=1/0;for(let l of t){let c=n(sd(l.state));c<s&&(o=l,s=c)}if(!o)return null;let i=typeof o.target_url=="string"&&o.target_url.trim()?o.target_url.trim():null,a=i?xt(i):null;return{context:String(o.context??"Vercel").trim(),state:sd(o.state),targetUrl:i,description:typeof o.description=="string"&&o.description.trim()?o.description.trim():null,deploymentId:a?.deploymentId??null,previewUrl:a?.previewUrl??null,dashboardUrl:a?.kind==="dashboard"?i:null}}function EO(e){return e==="success"?"ready":e==="pending"?"building":e==="failure"||e==="error"?"error":"unavailable"}function Ea(e){return e.filter(Boolean).join("; ")}function ad(e){let r=typeof e=="string"?e.trim():"";if(!r)return{target:null,classified:null,reason:"missing target_url"};let t=xt(r);return t.inspectTarget&&xa(t.inspectTarget)?{target:t.inspectTarget,classified:t,reason:null}:t.kind==="dashboard"?{target:null,classified:t,reason:t.deploymentId?"dashboard deployment id is not API-inspectable; trust GitHub Vercel status":"dashboard URL is not valid for Vercel API lookup"}:{target:null,classified:t,reason:"unrecognized Vercel URL"}}function ld(e,r={}){let t=r.observedAt??new Date().toISOString(),n=Go(e);if(!n)return{status:"not_run",previewUrl:null,deploymentUrl:null,summary:"No Vercel GitHub status context on commit",observedAt:t,inspectSkipped:!0,inspectReason:"no_vercel_status_context",githubState:null,vercelContext:null};let o=EO(n.state),s=n.previewUrl??n.dashboardUrl,i=n.previewUrl??n.dashboardUrl;return{status:o,previewUrl:s,deploymentUrl:i,summary:Ea([`GitHub ${n.context}=${n.state}`,n.description??"",n.dashboardUrl?"dashboard target_url (API lookup skipped)":""]),observedAt:t,inspectSkipped:!0,inspectReason:n.dashboardUrl&&n.state==="success"?"trusted_github_status_dashboard_url":n.dashboardUrl?"dashboard_url_not_api_inspectable":"github_status_only",githubState:n.state,vercelContext:n.context}}async function vR(e){let r=e.observedAt??new Date().toISOString(),t=ld(e.statuses??[],{observedAt:r}),n=Go(e.statuses??[]);if(!n)return t;if(n.state==="success")return{...t,inspectSkipped:!0,inspectReason:n.dashboardUrl?"trusted_github_status_dashboard_url":"trusted_github_status"};if(!e.allowInspect)return{...t,inspectSkipped:!0,inspectReason:"api_lookup_disabled"};let{target:o,reason:s}=ad(n.targetUrl);if(!o)return{...t,inspectSkipped:!0,inspectReason:s??"not_api_inspectable",summary:Ea([t.summary??"",s??"skipped Vercel API lookup"])};let a=await(e.runInspect??nd)(o),l=new Date().toISOString();if(!a.ok&&a.error?.includes("VERCEL_TOKEN"))return{status:"unavailable",previewUrl:t.previewUrl,deploymentUrl:t.deploymentUrl,summary:"VERCEL_TOKEN not configured for API fallback",observedAt:l,inspectSkipped:!0,inspectReason:"vercel_token_missing",githubState:n.state,vercelContext:n.context};if(!a.ok)return{status:n.state==="pending"?"building":"error",previewUrl:t.previewUrl,deploymentUrl:o.startsWith("http")?o:t.deploymentUrl,summary:Ea([`Vercel API lookup ${o} failed`,a.error??""]),observedAt:l,inspectSkipped:!1,inspectReason:null,githubState:n.state,vercelContext:n.context};let c=od(a.readyState,n.state==="pending"),u=a.previewUrl??(o.startsWith("http")?o:t.previewUrl);return{status:c,previewUrl:u,deploymentUrl:u??t.deploymentUrl,summary:Ea([`Vercel API ${o}=${a.readyState??"unknown"}`,c==="ready"?"preview ready":""]),observedAt:l,inspectSkipped:!1,inspectReason:null,githubState:n.state,vercelContext:n.context}}export{Ar as CODEX_DEFAULT_MODEL,Ks as DEFAULT_DISPATCH_LEASE_MS,ga as DEFAULT_HARNESS_VERIFY_COMMANDS,ca as DEFAULT_HEAVY_VERIFICATION_MAX_CONCURRENT,Di as DEFAULT_MAX_ACTIONS_PER_SWEEP,wo as DEFAULT_NODE_MODULES_AGE_MS,Ti as DEFAULT_RUN_DIRECTORIES_AGE_MS,Ni as DEFAULT_TERMINAL_WORKTREES_AGE_MS,Pe as DEFAULT_WORKER_PROVIDER,_o as DEFAULT_WORKTREES_AGE_MS,Kd as DEFAULT_WSL_CRASH_DUMP_CRITICAL_BYTES,$d as DEFAULT_WSL_CRASH_DUMP_WARN_BYTES,Ld as DEFAULT_WSL_HOST_CRITICAL_FREE_BYTES,jr as DEFAULT_WSL_HOST_MOUNT,Wd as DEFAULT_WSL_HOST_WARN_FREE_BYTES,rt as EMBEDDED_INSTRUCTION_BUNDLE,$p as EMBEDDED_INSTRUCTION_BUNDLE_VERSION,Cd as FORBIDDEN_WORKER_ENV_KEYS,Pi as HARNESS_BUILD_CACHE_RELATIVE_PATHS,Bo as HEAVY_VERIFICATION_TOKEN_REQUIRED,Ls as HERMES_OPENAI_CODEX_DEFAULT_MODEL,zf as INSTRUCTION_BUNDLE_REFRESH_TTL_MS,Fa as MEMORY_COST_MANAGED_PACKAGES,Ha as MEMORY_COST_PACKAGE_MIN_VERSIONS,Tn as MemoryCostPackageVersionGuardError,Ec as OPENAI_CODEX_PROVIDER,r_ as ORCHESTRATION_ACTION_KINDS,t_ as ORCHESTRATION_POLICY_DECISIONS,Pc as ORCHESTRATION_POLICY_MODES,Pn as PACKAGE_VERSION,Yf as PINNED_INSTRUCTION_BUNDLE_PUBLIC_KEYS,sn as RUN_METADATA_ACTIVE_SIGNAL_MS,fg as TERMINAL_WORKER_ARCHIVE_AGE_MS,Xw as TRANSIENT_OPENAI_CODEX_ERROR_CLASSES,Ps as WORKER_PERSONA_CATALOG,f_ as applyProductionDatabaseToProcess,_i as archiveTerminalWorkerMetadata,ja as assertMemoryCostPackageVersionGuard,$o as assessAutoCompleteEligibility,bt as assessBuildAdmission,Jr as assessExitedWorkerSalvage,xn as assessHeavyVerificationGate,lu as assessOrphanWorktreeSafety,ql as assessPrHandoffRequirement,qr as assessWorkerLanding,ol as assessWorkerLandingContract,WR as auditWorkerEnv,ct as autoCompleteWorker,sc as autoCompleteWorkerCli,go as buildBoxResourceSnapshotFromGate,fm as buildCodexExecArgv,jf as buildDispatchTaskText,Ic as buildForegroundHarnessIdempotencyKey,um as buildHermesOpenAiCodexChatArgv,Va as buildMemoryCostPackageGuardInput,Pl as buildOrchestrationProviderInventory,Hl as buildPrompt,ln as buildRunListRows,na as buildSystemdRunArgv,hi as canonicalJsonStringify,hr as canonicalWorkerDir,pa as classifyHeavyShellCommand,cp as classifyNpmAuditOutcome,Zf as classifyOpenAiCodexError,nm as classifyOrchestrationRisk,op as classifyRepoSearchMeta,fs as classifyShellCommandOutcome,xt as classifyVercelUrl,Ra as classifyWorkerHealth,fo as cleanupWslCrashDumps,Tl as codexProvider,Fc as collectFilesystemLiveRunKeys,vR as collectVercelEvidence,tm as compareProviderCandidates,Dn as compareSemver,ni as completeWorker,bp as computeAttention,Bw as computeInstructionBundleVersion,N as computeWorkerStatus,Wo as countActiveHeavyVerificationSlots,vo as createRun,Zn as defaultBoxId,Hw as deriveInstructionBundleKeyId,Kt as deriveRunStatus,ms as diagnoseRepoSearchFailure,$r as discoverDefaultRepo,La as discoverDefaultRepoCandidates,On as discoverDefaultRepoForPersistence,bi as discoverProductionDbEnvFilePaths,Nr as dispatchRun,pi as drainPlanOutbox,bl as enforceCursorWorkerProvider,Ga as enforceMemoryCostPackageGuardAtStartup,xc as ensureInstructionBundle,Xs as ensurePrReadyHandoff,ib as evaluateMemoryCostPackageGuardAtStartup,ts as evaluateMemoryCostPackageVersionGuard,i_ as evaluateOrchestrationPolicy,ld as evidenceFromGitHubVercelStatus,sg as expandHomePath,fi as extractPlanOutboxFromTask,Jl as extractPrUrlFromText,Za as extractSearchMeta,ap as extractSearchMetaFromToolLine,ka as formatAutoCompleteOutcomeNotice,tg as formatCronJobDeliveryFailure,vy as formatHarnessToolReadable,Ww as formatHeartbeatLine,XR as formatMemoryCostPackageGuardError,En as formatMonitorTickNotice,rg as formatOpenAiCodexFailureNotice,mi as formatPlanOutboxHandoffBlock,ip as formatRepoSearchGuidance,on as formatResolvedDefaultRepo,ya as formatWorkerCompleteNotice,Fo as formatWorkerStatusNotice,ma as gateWorkerShellCommand,Ov as getActiveInstructionBundle,dr as getActiveInstructionBundleSource,Er as getActiveInstructionBundleVersion,Vr as getHarnessPaths,ba as getMonitorStatus,nt as getOrchestrationProviderCapability,As as getPersonaDefaultRoleLane,Gp as getPersonaDispatchLane,hl as getWorkerPersonaCatalogEntry,Ua as gitRepoRoot,fe as harnessRunsDir,Jc as harnessStorageSnapshot,cr as harnessWorktreesDir,tn as hasNestedRunsSegment,pr as hashPlanBody,Nl as hermesCodexProvider,Cc as instructionBundleCachePath,$n as isActiveHarnessWorker,Ye as isClaudeFamilyProvider,bR as isDashboardVercelUrl,Lw as isEngagementRequiredSkip,ne as isFinishedWorkerStatus,Na as isForbiddenWorkerEnvKey,qc as isGeneratedHarnessPath,Wc as isHarnessRunMetadataPath,Nd as isHarnessWorktreeRepo,wn as isHeavyVerificationGateSkipped,xa as isInspectableVercelTarget,Uv as isKnownWorkerPersonaSlug,Od as isKynverMonorepoRoot,Xr as isLandingBlockedWorkerStatus,Ac as isOrchestrationEnforceTasksEnabled,du as isPipelineCleanupEnabled,ds as isRgExcludeScopeTarget,rn as isSignedInstructionBundleShape,us as isSingleFileSearchTarget,Rn as isSystemdRunAvailable,Qa as isTerminalHeartbeatPhase,id as isVercelStatusContext,ss as isWslHost,by as joinHarnessNotice,sl as landingContractAttentionReason,Lu as listActiveHeavyVerificationSlots,wd as listForbiddenWorkerEnvKeys,Ko as listMonitors,Sl as listOrchestrationProviderCapabilities,dt as listOutboxItems,Gc as listRuns,Vc as listRunsCli,_c as loadInstructionBundleCache,v as loadUserConfig,hR as main,sa as mergeNodeOptionsForBuildCheck,sp as metaToNormalizedRgCommand,om as normalizeCursorModelAlias,ie as normalizeHarnessRoot,ps as normalizeRepoSearchCommand,np as normalizeRgArgv,We as observeRunnerDiskGate,lr as observeWslCrashDumps,Ja as observeWslHostDisk,e_ as orchestrationAuditForWorkerJson,zn as parseArgs,ev as parseClaudeStream,Bt as parseHarnessStream,he as parseHeartbeat,ki as parseRawEd25519Key,Vd as parseWslCrashDumpFilename,Ci as persistDefaultRepo,en as persistPlan,Go as pickVercelStatusContext,xr as postJson,jv as preferCursorExecutor,Us as preflightClaudeModel,st as preflightCodexModel,Ws as preflightCursorModel,Ds as probeClaudeOAuthBinding,Cl as probeCodexOAuthBinding,Ms as probeCursorOAuthBinding,El as probeHermesCliAdapter,Qn as probeHermesOpenAiCodexBinding,gS as probeOrchestrationProviderBinding,Ka as probeRepoPackageVersions,_l as providerCapableForRisk,Gd as readKernelCorePattern,Dt as readMemAvailableBytes,ag as readProductionDbKeysFromEnvFile,Yd as readWslConfigCrashDumpSettings,Lo as reclaimStaleHeavyVerificationSlots,Ei as reconcileLocalOnlyMergedPrAttention,jc as reconcileRunsCli,an as reconcileStaleWorkers,xi as reconcileWorkerMetadata,B_ as reconcileWorkerMetadataCli,a_ as redactHarness,fr as redactProviderErrorText,_n as releaseHeavyVerificationSlot,b_ as remediateDefaultRepo,wi as repairMissingRunMetadata,y_ as repairNestedRunsPath,F as resolveBaseUrl,WS as resolveBoxKindFromEnv,Es as resolveBundlePersona,Ev as resolveCallbackSecret,V as resolveCallbackSecretWithMint,Pr as resolveCodexOrchestrationAdapter,Xn as resolveConfiguredWorkerProvider,Ke as resolveDefaultRepo,Si as resolveDefaultRepoForPersistence,me as resolveHarnessRoot,bg as resolveHarnessRunByName,Yc as resolveHarnessRunCli,Sn as resolveHeavyVerificationMaxConcurrent,vc as resolveInstructionBundlePublicKey,Jt as resolveInstructionText,eg as resolveOpenAiCodexRetryBudget,yi as resolveOrchestrationPolicyMode,Il as resolveOrchestrationRouting,tt as resolvePolicyThreshold,lg as resolveProductionDatabaseUrl,ri as resolveRunTargetArg,ad as resolveVercelInspectTarget,Mc as resolveWorkerJsonPath,He as resolveWorkerTargetArgs,jd as resolveWslCrashDumpDir,za as resolveWslWindowsUsername,fa as runBoundedBuildCheck,Do as runDaemon,ft as runDirHasActiveRetentionSignals,ji as runHarnessCleanup,Ho as runHarnessVerifyCommands,_t as runMonitorTick,uu as runPipelineHarnessCleanup,lo as runStatus,Ro as safeDatabaseUrlHint,ng as sanitizeOrchestrationAudit,wc as saveInstructionBundleCache,Ge as saveUserConfig,_d as scrubClaudeEnv,De as scrubWorkerEnv,Ts as selectCheapestCapableProvider,$a as semverAtLeast,gl as setActiveInstructionBundle,Rc as shouldAutoCleanupWslCrashDumps,Ya as shouldEnforceMemoryCostPackageGuardCli,ic as spawnCompletionSidecar,Sa as spawnMonitorSidecar,oi as spawnWorkerProcess,ac as startWorker,oc as stopWorker,tl as summarizeEvent,lp as summarizeNpmAuditReport,pp as summarizeShellToolCallEvent,Jd as summarizeWslCrashDumpRecoverySteps,Bd as summarizeWslRecoverySteps,cn as sweepRun,nc as tailWorker,Os as taskAllowsClaudeWorker,Yr as terminalFinalResultFromHeartbeat,vt as tryAcquireHeavyVerificationSlot,ml as tryResolveBaseUrl,Cs as tryResolveCallbackSecretWithMint,_a as usage,NC as validateOwnedPaths,ec as validateRepo,no as validateRunId,TC as validateTailLines,tf as validateWorkerName,Jf as verifyInstructionBundleSignatureWithKey,Sc as verifySignedInstructionBundle,da as waitForHeavyVerificationSlot,Hc as workerDirHasActiveRetentionSignals,Wv as workerPersonaLandingSlugs,kl as workerPersonaReviewSlugs,tc as workerStatus};