@kynver-app/runtime 0.1.135 → 0.1.140

package/dist/index.js

@@ -1,79 +1,82 @@
-var Ny=Object.defineProperty;var F=(e,r)=>()=>(e&&(r=e(e=0)),r);var Ty=(e,r)=>{for(var t in r)Ny(e,t,{get:r[t],enumerable:!0})};import{existsSync as Wy,mkdirSync as Hy,readFileSync as da,readdirSync as SI,statSync as Ku,writeFileSync as Fy}from"node:fs";import ju from"node:path";function fr(e){console.error(e),process.exit(1)}function le(e){return process.platform!=="win32"?e:{windowsHide:!0,...e}}function N(e,r){return e||fr(`missing ${r}`),e}function vt(e){try{return JSON.parse(e)}catch{return null}}function _(e,r){try{return JSON.parse(da(e,"utf8"))}catch(t){if(arguments.length>1)return r;fr(`failed to read ${e}: ${t.message}`)}}function ce(e,r){Hy(ju.dirname(e),{recursive:!0}),Fy(e,`${JSON.stringify(r,null,2)}
-`)}function R(e){return String(e||"").toLowerCase().replace(/[^a-z0-9._-]+/g,"-").replace(/^-+|-+$/g,"")||"worker"}function Vu(e){return R(`${new Date().toISOString().replace(/[-:]/g,"").replace(/\..+/,"Z")}-${e}`)}function tr(e){return String(e).replace(/\/+$/,"")}function Uo(e){return String(e||"").replace(/\s+/g," ").trim()}function Lo(e){try{return Ku(e).size}catch{return 0}}function Bo(e){try{return Ku(e).mtime.toISOString()}catch{return null}}function Wo(e,r){return Wy(e)?da(e,"utf8").split(`
+var DR=Object.defineProperty;var V=(e,r)=>()=>(e&&(r=e(e=0)),r);var MR=(e,r)=>{for(var t in r)DR(e,t,{get:r[t],enumerable:!0})};import{existsSync as FR,mkdirSync as $R,readFileSync as Wa,readdirSync as JO,statSync as _d,writeFileSync as KR}from"node:fs";import xd from"node:path";function Cr(e){console.error(e),process.exit(1)}function de(e){return process.platform!=="win32"?e:{windowsHide:!0,...e}}function N(e,r){return e||Cr(`missing ${r}`),e}function Tt(e){try{return JSON.parse(e)}catch{return null}}function _(e,r){try{return JSON.parse(Wa(e,"utf8"))}catch(t){if(arguments.length>1)return r;Cr(`failed to read ${e}: ${t.message}`)}}function pe(e,r){$R(xd.dirname(e),{recursive:!0}),KR(e,`${JSON.stringify(r,null,2)}
+`)}function b(e){return String(e||"").toLowerCase().replace(/[^a-z0-9._-]+/g,"-").replace(/^-+|-+$/g,"")||"worker"}function Ed(e){return b(`${new Date().toISOString().replace(/[-:]/g,"").replace(/\..+/,"Z")}-${e}`)}function ir(e){return String(e).replace(/\/+$/,"")}function ts(e){return String(e||"").replace(/\s+/g," ").trim()}function ns(e){try{return _d(e).size}catch{return 0}}function os(e){try{return _d(e).mtime.toISOString()}catch{return null}}function ss(e,r){return FR(e)?Wa(e,"utf8").split(`
 `).slice(-r).join(`
-`):""}function Gu(e){return e?da(ju.resolve(e),"utf8"):""}function Or(e){Atomics.wait(new Int32Array(new SharedArrayBuffer(4)),0,0,e)}function gr(e){return new Promise(r=>setTimeout(r,e))}function $(e){if(!e)return!1;try{return process.kill(e,0),!0}catch{return!1}}function Rn(e,r){try{process.kill(-e,r)}catch{process.kill(e,r)}}function Yu(e){let r=null,t=-1/0;for(let n of e){if(!n)continue;let o=Date.parse(n);Number.isFinite(o)&&o>t&&(t=o,r=n)}return r}function pa(e){return Math.max(0,Math.round((Date.now()-e)/1e3))}var w=F(()=>{"use strict"});function ma(e){return $y.has(e)?!0:Ky.some(r=>e.endsWith(r))}function qu(e){return Object.keys(e).filter(ma).sort()}function Ne(e){let r={...e};for(let t of Object.keys(r))ma(t)&&delete r[t];return r}function jy(e){let r=qu(e);return{forbiddenPresent:r,safe:r.length===0}}function zu(e){return Ne(e)}var Ju,$y,Ky,Nr=F(()=>{"use strict";Ju=["ANTHROPIC_API_KEY","ANALYST_API_KEY","RECRUITER_API_KEY","AUTH_SECRET","NEXTAUTH_SECRET","DATABASE_URL","PRODUCTION_DATABASE_URL","KYNVER_PRODUCTION_DATABASE_URL","REDIS_URL","GOOGLE_CLIENT_SECRET","GITHUB_CLIENT_SECRET","KYNVER_API_KEY","KYNVER_SERVICE_SECRET","KYNVER_RUNTIME_SECRET","KYNVER_CRON_SECRET","OPENCLAW_CRON_SECRET","QSTASH_TOKEN","QSTASH_CURRENT_SIGNING_KEY","QSTASH_NEXT_SIGNING_KEY","TOOL_SECRETS_KEK","TOOL_EXECUTOR_DISPATCH_SECRET","CLOUDFLARE_API_TOKEN","STRIPE_SECRET_KEY","STRIPE_WEBHOOK_SECRET","STRIPE_IDENTITY_WEBHOOK_SECRET","VOYAGE_API_KEY","PERPLEXITY_API_KEY","FRED_API_KEY","FMP_API_KEY","CURSOR_API_KEY"],$y=new Set(Ju),Ky=["_SECRET","_API_KEY"]});import{spawnSync as Qu}from"node:child_process";function ue(e,r,t={}){let n=Qu("git",r,le({cwd:e,encoding:"utf8"}));if(n.status!==0&&!t.allowFailure){let o=`git ${r.join(" ")} failed: ${n.stderr||n.stdout}`;if(t.throwError)throw new Error(o);fr(o)}return n.stdout||""}function Zu(e){ue(e,["rev-parse","--show-toplevel"])}function vn(e){return ue(e,["status","--short"],{allowFailure:!0}).split(`
-`).map(r=>r.trim()).filter(Boolean)}function Q(e,r){try{let t=Qu("git",r,le({cwd:e,encoding:"utf8"}));return{status:t.status,stdout:t.stdout||"",stderr:t.stderr||"",error:t.error?t.error.message:null}}catch(t){return{status:null,stdout:"",stderr:"",error:t.message}}}function Xu(e,r,t){let n=Q(e,["merge-base","--is-ancestor",r,t]);return n.status===0?{isAncestor:!0,error:null}:n.status===1?{isAncestor:!1,error:null}:{isAncestor:null,error:n.error||n.stderr||n.stdout||`git exited ${n.status}`}}function Ho(e,r="origin/main"){let t=typeof r=="string"?{base:r}:r,n=t.baseCommit?.trim()||t.base?.trim()||"origin/main",o=t.baseCommit?.trim()||null;if(!e)return fa(n,"missing worktree path");let s=Q(e,["rev-parse","HEAD"]);if(s.status!==0)return fa(n,s.error||s.stderr||s.stdout||"failed to resolve HEAD");let i;if(o)i=o;else{let f=Q(e,["rev-parse",n]);if(f.status!==0)return fa(n,f.error||f.stderr||f.stdout||`failed to resolve ${n}`,s.stdout.trim());i=f.stdout.trim()}let a=s.stdout.trim();if(a===i)return{checked:!0,base:n,head:a,baseHead:i,baseIsAncestorOfHead:!0,headIsAncestorOfBase:!0,relation:"synced"};let l=Xu(e,i,a),c=Xu(e,a,i),u=l.error||c.error||void 0;if(l.isAncestor==null||c.isAncestor==null)return{checked:!1,base:n,head:a,baseHead:i,baseIsAncestorOfHead:l.isAncestor,headIsAncestorOfBase:c.isAncestor,relation:"unknown",...u?{error:u}:{}};let d=l.isAncestor?"ahead":c.isAncestor?"merged":"diverged";return{checked:!0,base:n,head:a,baseHead:i,baseIsAncestorOfHead:l.isAncestor,headIsAncestorOfBase:c.isAncestor,relation:d,...u?{error:u}:{}}}function fa(e,r,t=null){return{checked:!1,base:e,head:t,baseHead:null,baseIsAncestorOfHead:null,headIsAncestorOfBase:null,relation:"unknown",error:r}}var Ce=F(()=>{"use strict";w();Nr()});import{homedir as ga}from"node:os";import Tr from"node:path";function ed(e){return e==="~"?ga():e.startsWith("~/")||e.startsWith("~\\")?Tr.join(ga(),e.slice(2)):e}function bt(e){return Tr.resolve(ed(e))}function he(e){let r=ed(e),t=Tr.resolve(r),n=Tr.resolve(ga());return t===n?"~":t.startsWith(`${n}${Tr.sep}`)?`~/${Tr.relative(n,t).split(Tr.sep).join("/")}`:t.replace(/\\/g,"/").replace(/^\/home\/[^/]+(?=\/|$)/,"~").replace(/^\/Users\/[^/]+(?=\/|$)/,"~").replace(/^[A-Za-z]:\/home\/[^/]+(?=\/|$)/i,"~").replace(/^[A-Za-z]:\/Users\/[^/]+(?=\/|$)/i,"~")}function Y(e){return he(e)}var nr=F(()=>{"use strict"});import{existsSync as ya,readFileSync as rd}from"node:fs";import{homedir as Vy}from"node:os";import hr from"node:path";import{fileURLToPath as Gy}from"node:url";function Jy(e){let r=hr.join(e,"package.json");if(!ya(r))return null;try{let t=JSON.parse(rd(r,"utf8"));return typeof t.name=="string"?t.name.trim():null}catch{return null}}function td(e){return Jy(e)==="kynver"}function ka(e){let r=hr.resolve(e);if(!ya(r))return null;let t=Q(r,["rev-parse","--show-toplevel"]);if(t.status!==0)return null;let n=t.stdout.trim();return n.length?hr.resolve(n):null}function qy(e=import.meta.url){let r=hr.dirname(Gy(e));for(let t=0;t<8;t+=1){let n=hr.join(r,"package.json");if(ya(n))try{if(JSON.parse(rd(n,"utf8")).name==="@kynver-app/runtime")return r}catch{}let o=hr.dirname(r);if(o===r)break;r=o}return null}function ha(e,r,t,n){if(!t)return;let o=hr.resolve(t);e.has(o)||td(o)&&(e.add(o),r.push({repo:o,source:n}))}function nd(e){let r=e?.cwd??process.cwd(),t=new Set,n=[];ha(t,n,ka(r),"cwd_git");let o=qy(e?.runtimeModuleUrl??import.meta.url);o&&ha(t,n,ka(o),"runtime_checkout");let s=Vy();for(let i of Yy)ha(t,n,bt(hr.join(s,i)),"well_known_path");return n}function kr(e){return nd(e)[0]??null}var Yy,bn=F(()=>{"use strict";Ce();nr();Yy=["Kynver","repos/Kynver","repos/kynver-source-main","code/Kynver","projects/Kynver"]});function wt(e){let r=(e??"").trim().toLowerCase();return r==="ghost"||r==="forge"?r:r.includes("forge")?"forge":r.includes("ghost")||r.includes("openclaw")?"ghost":"forge"}function id(e,r){return e[r]?.trim()||null}function Te(e=process.env,r={}){let t=[],n=r.boxKind?.trim();if(n)return{boxKind:wt(n),source:"config",slugInferenceBlocked:!1,warnings:t};let o=id(e,"KYNVER_BOX_KIND");if(o)return{boxKind:wt(o),source:"env",slugInferenceBlocked:!1,warnings:t};let s=id(e,"KYNVER_AGENT_OS_SLUG");return s&&t.push(`KYNVER_AGENT_OS_SLUG=${s} is a workspace slug, not box identity \u2014 set boxKind via \`kynver setup --box-kind forge|ghost\` or KYNVER_BOX_KIND (defaulting box kind to forge)`),{boxKind:"forge",source:"default",slugInferenceBlocked:!!s,warnings:t}}function je(e={},r=process.env){return Te(r,e).boxKind}var De=F(()=>{"use strict"});import{readFileSync as fR}from"node:fs";import ad from"node:os";function Ct(e){if(e!==void 0){let r=e.match(/^MemAvailable:\s+(\d+)\s*kB/m);return r?Number(r[1])*1024:ad.freemem()}if(process.platform==="linux")try{let t=fR("/proc/meminfo","utf8").match(/^MemAvailable:\s+(\d+)\s*kB/m);if(t)return Number(t[1])*1024}catch{}return ad.freemem()}var jo=F(()=>{"use strict"});import{existsSync as gR,readFileSync as hR,statfsSync as kR}from"node:fs";function dd(){if(process.platform!=="linux")return!1;for(let e of["/proc/sys/kernel/osrelease","/proc/version"])try{if(!gR(e))continue;let r=hR(e,"utf8");if(/microsoft|wsl/i.test(r))return!0}catch{}return!1}function Pa(e={}){if(!(e.forceWsl===void 0?dd():e.forceWsl))return null;let t=e.wslHostMount?.trim()||process.env.KYNVER_WSL_HOST_MOUNT?.trim()||ud,n=e.wslHostFreeWarnBytes??ld,o=e.wslHostFreeCriticalBytes??cd,s=e.statfs??kR,i;try{i=s(t)}catch(g){return{ok:!1,path:t,freeBytes:0,totalBytes:0,usedPercent:100,warnBelowBytes:n,criticalBelowBytes:o,reason:`Windows host disk probe failed at ${t}: ${g.message}`,probeError:g.message}}let a=Number(i.bavail)*Number(i.bsize),l=Number(i.blocks)*Number(i.bsize),c=l>0?(l-a)/l*100:100,u=a<n,d=a<o,f=!u&&!d,m=(a/(1024*1024*1024)).toFixed(1),p=null;return f||(p=`Windows host disk ${t} at ${d?"critical":"warning"}: ${m} GiB free (<${(d?o:n)/1024/1024/1024} GiB); WSL VHDX cannot grow safely. ${pd()}`),{ok:f,path:t,freeBytes:a,totalBytes:l,usedPercent:c,warnBelowBytes:n,criticalBelowBytes:o,reason:p,probeError:null}}function pd(){return"Recovery: 1) free Windows C: (empty Recycle Bin / Storage Sense / clear %TEMP%); 2) shut down WSL (`wsl --shutdown`) then compact the VHDX (`Optimize-VHD` or `diskpart compact vdisk`); 3) clear local node_modules / .next / harness worktrees before restarting workers. Full runbook: docs/runbooks/wsl-disk-pressure.md."}var ld,cd,ud,Aa=F(()=>{"use strict";ld=25*1024*1024*1024,cd=12*1024*1024*1024,ud="/mnt/c"});import{statfsSync as yR}from"node:fs";function Me(e={}){let r=e.diskPath?.trim()||"/",t=e.diskFreeWarnBytes??RR,n=e.diskFreeCriticalBytes??vR,o=e.diskMaxUsedPercent??bR,s=e.diskHardMaxUsedPercent??SR,i=yR(r),a=Number(i.bavail)*Number(i.bsize),l=Number(i.blocks)*Number(i.bsize),c=l>0?(l-a)/l*100:100,u=a<t,d=a<n,f=a<t*2,m=f&&c>o,p=f&&c>s,g=!u&&!d&&!m&&!p,k=e.skipWslHostCheck?null:Pa(e.wslHost),h=g&&(k?k.ok:!0),S=null;return h||(S=[d?`free space below critical ${n} bytes`:null,u?`free space below warning ${t} bytes`:null,p?`used percent above hard cap ${s}%`:null,m?`used percent above cap ${o}%`:null,k&&!k.ok?k.reason:null].filter(Boolean).join("; ")),wR({ok:h,path:r,freeBytes:a,totalBytes:l,usedPercent:c,warnBelowBytes:t,criticalBelowBytes:n,maxUsedPercent:o,hardMaxUsedPercent:s,reason:S,wslHost:k})}function wR(e){let r=process.env.KYNVER_DISPATCH_DISK_GATE_FORCE?.trim().toLowerCase();return r?r==="ok"||r==="open"||r==="none"?e.ok?e:{...e,ok:!0,reason:`disk gate forced open by KYNVER_DISPATCH_DISK_GATE_FORCE (suppressed: ${e.reason??"no reason"})`}:r==="block"||r==="pressured"?{...e,ok:!1,reason:`disk gate forced closed by KYNVER_DISPATCH_DISK_GATE_FORCE${e.reason?` (underlying: ${e.reason})`:""}`}:e:e}var RR,vR,bR,SR,_t=F(()=>{"use strict";Aa();RR=30*1024*1024*1024,vR=15*1024*1024*1024,bR=80,SR=90});import{existsSync as md}from"node:fs";import{homedir as gd}from"node:os";import yr from"node:path";function te(e){let r=yr.resolve(bt(e.trim()));for(;CR.has(yr.basename(r));)r=yr.dirname(r);return r}function de(){let e=process.env.KYNVER_HARNESS_ROOT||process.env.OPUS_HARNESS_ROOT;if(e)return te(e);let r=v().harnessRoot?.trim();if(r)return te(r);let t=yr.join(gd(),".kynver","harness");return md(t)?t:md(fd)?fd:t}function pe(e){return yr.join(te(e),"runs")}function or(e){return yr.join(te(e),"worktrees")}function Mr(){let e=de();return{harnessRoot:e,runsDir:pe(e),worktreesDir:or(e)}}function xt(e,r){return yr.join(e,R(r))}var fd,CR,ke=F(()=>{"use strict";O();nr();w();fd=yr.join(gd(),".openclaw","harness"),CR=new Set(["runs","worktrees"])});import{existsSync as _R,readdirSync as xR,statSync as ER}from"node:fs";import Et from"node:path";function oe(){return Mr()}function U(e){let{runsDir:r}=oe();return _(Et.join(xt(r,R(e)),"run.json"))}function ne(){let{runsDir:e}=oe();return hd(e)}function Vo(e){return hd(pe(e))}function PR(e){try{return ER(e).isDirectory()}catch{return!1}}function hd(e){if(!_R(e))return[];let r=[];for(let t of xR(e,{withFileTypes:!0})){if(t.name==="runs")continue;let n=Et.join(e,t.name);if(!PR(n))continue;let o=_(Et.join(n,"run.json"),void 0);o?.id&&r.push(o)}return r}function ye(e,r){let{runsDir:t}=oe();return _(Et.join(xt(t,R(e)),"workers",R(r),"worker.json"))}function Ue(e){let{runsDir:r}=oe();ce(Et.join(xt(r,e.id),"run.json"),e)}function V(e,r){let{runsDir:t}=oe();ce(Et.join(xt(t,e),"workers",r.name,"worker.json"),r)}function x(e){let{harnessRoot:r}=oe();return Cn(r,e)}function Cn(e,r){return xt(pe(e),R(r))}var L=F(()=>{"use strict";ke();w()});import{existsSync as AR,readdirSync as IR}from"node:fs";import OR from"node:path";function Ee(e){let r=new Set;for(let n of Object.keys(e.workers||{}))r.add(R(n));let t=OR.join(x(e.id),"workers");if(!AR(t))return[...r];for(let n of IR(t,{withFileTypes:!0}))n.isDirectory()&&r.add(R(n.name));return[...r]}var Pt=F(()=>{"use strict";L();w()});function Ia(e){let r=e.trim();if(!r.startsWith("{"))return null;try{let t=JSON.parse(r);if(t&&typeof t=="object"&&!Array.isArray(t))return t}catch{return null}return null}function kd(e){let r=e.trim();if(!r)return null;let t=Ia(r);if(t)return t;let n=[],o=/```(?:json)?\s*([\s\S]*?)```/gi,s;for(;(s=o.exec(r))!==null;){let l=Ia(s[1]??"");l&&n.push(l)}let i=r.indexOf("{"),a=r.lastIndexOf("}");if(i>=0&&a>i){let l=Ia(r.slice(i,a+1));l&&n.push(l)}return n.length>0?n[n.length-1]:null}function yd(e){let r=e.finalResult??e.final_result;if(r!=null)return typeof r=="string"?kd(r)??(r.trim()||null):r;let t=typeof e.summary=="string"?e.summary.trim():"";if(!t)return null;let n=kd(t);return n||t}var Rd=F(()=>{"use strict"});import{existsSync as NR,readFileSync as TR}from"node:fs";function Oa(e){return e==="complete"}function Ur(e){return Oa(e.lastHeartbeatPhase)?e.terminalFinalResult!==void 0&&e.terminalFinalResult!==null?e.terminalFinalResult:e.lastHeartbeatSummary?.trim()||"completed":null}function _e(e){let r={heartbeatCount:0,lastHeartbeatAt:null,lastHeartbeatPhase:null,lastHeartbeatSummary:null,terminalFinalResult:null,heartbeatBlocker:null,timestampAnomalies:[],lastBoxResourceSnapshot:null,lastPrEvidence:[]};if(!NR(e))return r;let t=Date.now()+DR,n=new Date(t).toISOString(),o=TR(e,"utf8").split(`
-`).filter(Boolean);for(let s of o){let i=vt(s);if(!i||typeof i!="object"||Array.isArray(i))continue;let a=i;if(r.heartbeatCount++,a.ts){let l=String(a.ts),c=Date.parse(l);Number.isFinite(c)&&c>t?r.timestampAnomalies.push({kind:"future_heartbeat_timestamp",observedAt:l,clampedTo:n}):r.lastHeartbeatAt=l}a.phase!==void 0&&a.phase!==null&&(r.lastHeartbeatPhase=String(a.phase)),a.summary!==void 0&&a.summary!==null&&(r.lastHeartbeatSummary=String(a.summary)),Oa(r.lastHeartbeatPhase)&&(r.terminalFinalResult=yd(a)),r.heartbeatBlocker=a.blocker?String(a.blocker):null,a.boxResourceSnapshot&&typeof a.boxResourceSnapshot=="object"&&!Array.isArray(a.boxResourceSnapshot)&&(r.lastBoxResourceSnapshot=a.boxResourceSnapshot),Array.isArray(a.prEvidence)&&(r.lastPrEvidence=a.prEvidence.filter(l=>!!l&&typeof l=="object"&&typeof l.prUrl=="string"))}return r}var DR,Lr=F(()=>{"use strict";Rd();w();DR=6e4});function UR(e){return e?(e.split("/").pop()??e).replace(/\.exe$/i,"").toLowerCase():null}function LR(e){if(!e)return[];let r=[],t="",n,o=!1;for(let s of e){if(o){t+=s,o=!1;continue}if(s==="\\"){o=!0;continue}if(n){s===n?n=void 0:t+=s;continue}if(s==='"'||s==="'"){n=s;continue}if(/\s/.test(s)){t&&(r.push(t),t="");continue}t+=s}return t&&r.push(t),r}function BR(e){let r=UR(e[0]);return!!(r&&MR.has(r))}function Go(e){return!e||e.includes("/")||e.includes("*")?!1:/\.(?:json|md|mjs|cjs|js|ts|tsx|yaml|yml)$/iu.test(e)}function Yo(e){if(!e)return!1;let r=e.trim();return r.startsWith("!")&&!r.includes("/")&&!r.endsWith("/**")}function WR(e){if(!e.startsWith("--glob="))return e;let r=e.slice(7);return r.startsWith("!")&&!r.includes("/")&&!r.endsWith("/**")?`--glob=${r}/**`:e}function HR(e){let r=[];for(let t=1;t<e.length;t+=1){let n=e[t];if(n){if(n==="--"){r.push(...e.slice(t+1));break}if(n.startsWith("-")){if(n.includes("="))continue;vd.has(n)&&(t+=1);continue}r.push(n)}}return r}function bd(e){let r=!1,t=e.map((o,s)=>{let i=WR(o),a=e[s-1];return a&&vd.has(a)&&o.startsWith("!")&&!o.includes("/")&&!o.endsWith("/**")&&(i=`${o}/**`),i!==o&&(r=!0),i}),n=HR(t);if(n.length===2){let[o,s]=n;if(Yo(s))return{argv:[t[0]??"rg",o,"-g",`${s}/**`,"."],changed:!0};if(Go(s))return{argv:[t[0]??"rg","-g",s,o,"."],changed:!0}}return r&&n.length===1?{argv:[...t,"."],changed:!0}:{argv:t,changed:r}}function Jo(e){let r=e.trim();if(!r)return{command:r,changed:!1};let t=r.includes("&&")?" && ":r.includes("||")?" || ":"; ",n=r.split(/\s*(?:&&|\|\||;)\s*/u),o=!1,s=n.map(i=>{let a=LR(i.trim());if(!a.length||!BR(a))return i;let l=bd(a);return l.changed?(o=!0,l.argv.join(" ")):i});return o?{command:s.join(t),changed:!0}:{command:r,changed:!1}}function Na(e){if(!e)return{};let r=e.match(/search\s+"(.+)"\s+in\s+([^()]+?)(?:\s*\(|$)/iu);if(r)return{pattern:r[1],target:r[2]?.trim()};let t=e.match(/^search\s+"(.+)"\s+in\s+(.+)$/iu);return t?{pattern:t[1],target:t[2]?.trim()}:{}}function Sd(e){let{pattern:r,target:t}=Na(e);return r?Yo(t)?{kind:"rg_exclude_syntax",pattern:r,target:t}:Go(t)?{kind:"bad_scope",pattern:r,target:t}:{kind:"not_repo_search",pattern:r,target:t}:{kind:"not_repo_search"}}function wd(e){let{pattern:r,target:t}=Na(e);if(!r)return null;if(Yo(t)){let n=`${t.trim()}/**`;return{command:`rg "${r}" -g '${n}' .`,changed:!0}}return t&&Go(t)?{command:`rg -g ${t} "${r}" .`,changed:!0}:null}function Cd(e){if(e.kind==="bad_scope"&&e.pattern?.includes("agent-os-land-pr")&&e.target==="package.json")return"Search package.json with a glob from the repo root: `rg -g package.json agent-os-land-pr .` \u2014 or run `node scripts/agent-os-land-pr.mjs <pr-url>` directly.";if(e.kind==="bad_scope"&&e.pattern&&e.target)return`Use \`rg -g '${e.target}' ${e.pattern} .\` from the repo root instead of treating ${e.target} as a folder.`;if(e.kind==="rg_exclude_syntax"&&e.pattern){let r=e.target?`${e.target.trim()}/**`:"!node_modules/**";return`Repo search scope \`${e.target??"!node_modules"}\` is not a valid ripgrep path. Use \`rg "${e.pattern}" -g '${r}' .\` from the repo root (exclude globs need a \`/**\` suffix).`}return e.kind==="no_matches"&&e.pattern?`No matches for "${e.pattern}". Try a broader pattern, drop overly short tokens, or search from the repo root with \`rg "${e.pattern}" .\`.`:null}function _d(e){let r=e.match(/search\s+"(.+)"\s+in\s+([^()]+?)(?:\s*\(agent\)|\s*failed|$)/iu);return r?`search "${r[1]}" in ${r[2]?.trim()}`:null}function qo(e){let r=e.meta?.trim()||(e.command?_d(e.command):null)||null;if(r){let t=Sd(r),n=Cd(t);if(n)return n;let o=wd(r);if(o?.changed)return`Repo search used an invalid scope. Retry with: \`${o.command}\`.`}if(e.command&&/\b(rg|ripgrep)\b/i.test(e.command)){let t=Jo(e.command);if(t.changed)return`Ripgrep scope may be invalid. Retry with: \`${t.command}\`.`;if(e.exitCode===1)return"Ripgrep returned no matches (exit 1). Try a broader pattern or search from the repo root."}return null}var MR,vd,Ta=F(()=>{"use strict";MR=new Set(["rg","ripgrep","grep"]),vd=new Set(["-e","--regexp","-f","--file","-m","--max-count","-A","--after-context","-B","--before-context","-C","--context","-g","--glob","--iglob"])});function _n(e,r=200){let t=e.replace(/\s+/g," ").trim();return t.length>r?`${t.slice(0,r-1)}\u2026`:t}function jR(e){let r=e.trim();if(!r)return null;if(r.startsWith("{"))try{return JSON.parse(r)}catch{}let t=r.indexOf("{"),n=r.lastIndexOf("}");if(t>=0&&n>t)try{return JSON.parse(r.slice(t,n+1))}catch{return null}return null}function xn(e){return!!e&&typeof e=="object"&&!Array.isArray(e)}function xd(e){let r=e.metadata;if(!xn(r))return null;let t=r.vulnerabilities;if(!xn(t))return null;let n=s=>typeof t[s]=="number"?t[s]:0,o={info:n("info"),low:n("low"),moderate:n("moderate"),high:n("high"),critical:n("critical"),total:n("total")};return typeof t.total!="number"&&!o.critical&&!o.high&&!o.moderate&&!o.low&&!o.info?null:o}function VR(e){let r=[];e.critical&&r.push(`${e.critical} critical`),e.high&&r.push(`${e.high} high`),e.moderate&&r.push(`${e.moderate} moderate`),e.low&&r.push(`${e.low} low`),e.info&&r.push(`${e.info} info`);let t=r.length?r.join(", "):"see report";return`npm audit: ${e.total} vulnerabilit${e.total===1?"y":"ies"} (${t}) \u2014 remediation required`}function GR(e,r){let t=e.error;if(xn(t)){let s=typeof t.summary=="string"?t.summary.trim():"",i=typeof t.code=="string"?t.code.trim():"";if(s)return i?`${i}: ${s}`:s;if(i)return i}let n=typeof e.message=="string"?e.message.trim():"";if(n)return n;let o=r.trim();return o?_n(o.split(`
-`).find(Boolean)??o,160):"npm audit failed"}function Ed(e){let r=`${e.stdout}
-${e.stderr}`.trim(),t=jR(r);if(!t||!xn(t)){let o=_n(r||`exit ${e.exitCode}`,180);return{kind:"command_failure",exitCode:e.exitCode,summary:`npm audit failed (invalid or missing JSON): ${o}`,parseError:"invalid_json"}}if(xn(t.error))return{kind:"command_failure",exitCode:e.exitCode,summary:`npm audit command failed: ${GR(t,e.stderr)}`};let n=xd(t);return n?e.exitCode===0&&n.total===0?{kind:"success",exitCode:0,summary:"npm audit: no vulnerabilities reported",audit:n}:{kind:"audit_findings",exitCode:e.exitCode,summary:VR(n),audit:n}:{kind:"command_failure",exitCode:e.exitCode,summary:"npm audit failed: JSON response missing vulnerability metadata",parseError:"missing_metadata"}}function YR(e){return FR.test(e)}function JR(e){return $R.test(e)}function qR(e){let r=qo({command:e.command,exitCode:e.exitCode});if(e.exitCode===0)return{kind:"success",exitCode:0,summary:"ripgrep finished (exit 0)"};if(e.exitCode===1){let n=(e.stderr||e.interleaved).trim();if(n&&KR.test(n)){let i=_n(n,160);return{kind:"command_failure",exitCode:1,summary:r??`ripgrep failed (exit 1): ${i}`}}let o=Jo(e.command),s=o.changed&&!r?` Retry with: \`${o.command}\`.`:"";return{kind:"search_no_matches",exitCode:1,summary:r??`ripgrep: no matches (exit 1).${s} Try a broader pattern or search from the repo root.`}}let t=_n(e.interleaved||e.stdout||e.stderr||`exit ${e.exitCode}`,180);return{kind:"command_failure",exitCode:e.exitCode,summary:r??`ripgrep failed (exit ${e.exitCode}): ${t}`}}function zo(e){let r=e.stdout??"",t=e.stderr??"",n=e.interleavedOutput??"";if(YR(e.command)){let i=r.trim()||n.trim()||t.trim();return Ed({exitCode:e.exitCode,stdout:i,stderr:t})}if(JR(e.command))return qR({command:e.command,exitCode:e.exitCode,stdout:r,stderr:t,interleaved:n});let o=qo({command:e.command,exitCode:e.exitCode});if(o&&e.exitCode!==0)return{kind:"command_failure",exitCode:e.exitCode,summary:o};if(e.exitCode===0)return{kind:"success",exitCode:0,summary:"command succeeded (exit 0)"};let s=_n(n||r||t||`exit ${e.exitCode}`,180);return{kind:"command_failure",exitCode:e.exitCode,summary:`command failed (exit ${e.exitCode}): ${s}`}}var FR,$R,KR,Da=F(()=>{"use strict";Ta();FR=/\bnpm\s+audit\b/i,$R=/\b(rg|ripgrep)\b/i,KR=/\b(error|invalid|unknown|panic|not found)\b/i});import{existsSync as zR,readFileSync as XR}from"node:fs";function QR(e){let r=e.timestamp_ms;return e.timestamp||e.ts||(r?new Date(r).toISOString():void 0)}function Pd(e){if(!e)return null;for(let r of Object.keys(e))if(r.endsWith("ToolCall")){let t=r.slice(0,-8);return t.length?t:r}return null}function ZR(e,r){e.finalResult=r.result||r.subtype||r.terminal_reason||"completed",r.is_error&&(e.error=String(r.result||r.api_error_status||"stream result error"))}function Ad(e){if(e.type!=="tool_call"||e.subtype!=="completed")return null;let t=(e.tool_call&&typeof e.tool_call=="object"&&!Array.isArray(e.tool_call)?e.tool_call:null)?.shellToolCall;if(!t||typeof t!="object"||Array.isArray(t))return null;let n=t,o=n.args,s=o&&typeof o=="object"&&!Array.isArray(o)&&typeof o.command=="string"?String(o.command):"",i=n.result;if(!i||typeof i!="object"||Array.isArray(i))return null;let a=i.success??i.failure;if(!a||typeof a!="object"||Array.isArray(a))return null;let l=a,c=typeof l.exitCode=="number"?l.exitCode:0;return{command:s,exitCode:c,stdout:typeof l.stdout=="string"?l.stdout:"",stderr:typeof l.stderr=="string"?l.stderr:"",interleaved:typeof l.interleavedOutput=="string"?l.interleavedOutput:""}}function ev(e,r){r.kind==="success"||r.kind==="search_no_matches"||(e.lastShellOutcome=r)}function At(e){let r={firstEventAt:null,lastEventAt:null,currentTool:null,finalResult:null,error:null,lastShellOutcome:null};if(!zR(e))return r;let t=XR(e,"utf8").split(`
-`).filter(Boolean);for(let n of t){let o=vt(n);if(!o)continue;let s=QR(o);if(s&&(r.firstEventAt||=s,r.lastEventAt=s),o.type==="stream_event"&&o.event&&typeof o.event=="object"&&o.event.type==="content_block_start"){let a=o.event.content_block;a?.type==="tool_use"&&(r.currentTool=String(a.name||"tool"))}if(o.type==="assistant"&&o.message&&typeof o.message=="object"){let a=o.message.content;if(Array.isArray(a)){let l=a.find(c=>c?.type==="tool_use");l&&(r.currentTool=String(l.name||r.currentTool))}}if(o.type==="tool_call"&&o.subtype==="started"){let a=o.tool_call&&typeof o.tool_call=="object"&&!Array.isArray(o.tool_call)?o.tool_call:void 0,l=Pd(a);l&&(r.currentTool=l)}let i=Ad(o);i&&ev(r,zo({command:i.command,exitCode:i.exitCode,stdout:i.stdout,stderr:i.stderr,interleavedOutput:i.interleaved})),o.type==="result"&&ZR(r,o)}return r}function rv(e){return At(e)}function Id(e){let r=Ad(e);if(!r)return;let t=zo({command:r.command,exitCode:r.exitCode,stdout:r.stdout,stderr:r.stderr,interleavedOutput:r.interleaved}),n=Uo(r.command).slice(0,120);return t.kind==="audit_findings"?`[audit:findings] ${t.summary}${n?` \xB7 ${n}`:""}`:t.kind==="search_no_matches"?`[search:no_matches] ${t.summary}${n?` \xB7 ${n}`:""}`:t.kind==="command_failure"?`[command:failed] ${t.summary}${n?` \xB7 ${n}`:""}`:`[command:ok] exit 0${n?` \xB7 ${n}`:""}`}function Ma(e){if(e.type==="system"&&e.subtype)return`[system:${e.subtype}] ${String(e.status||e.cwd||"")}`.trim();if(e.type==="stream_event"&&e.event&&typeof e.event=="object"){let r=e.event.type;if(r==="content_block_start"){let t=e.event.content_block;if(t?.type==="tool_use")return`[tool:start] ${t.name}`}if(r==="content_block_delta"){let t=e.event.delta;if(t?.partial_json)return`[tool:input] ${t.partial_json}`}return r==="message_stop"?"[message:stop]":r?`[stream:${r}]`:void 0}if(e.type==="assistant"&&e.message&&typeof e.message=="object"){let r=e.message.content;if(Array.isArray(r)){let t=r.find(o=>o?.type==="text");if(t)return`[assistant] ${Uo(String(t.text||""))}`;let n=r.find(o=>o?.type==="tool_use");if(n)return`[tool] ${n.name} ${JSON.stringify(n.input||{})}`}}if(e.type==="user"&&e.tool_use_result){let r=e.tool_use_result;return`[tool:result] stdout=${JSON.stringify(r.stdout||"")} stderr=${JSON.stringify(r.stderr||"")}`}if(e.type==="tool_call"){let r=String(e.subtype||""),t=r==="completed"?Id(e):void 0;if(t)return t;let n=e.tool_call&&typeof e.tool_call=="object"&&!Array.isArray(e.tool_call)?e.tool_call:void 0,o=Pd(n)??"tool";return`[tool:${r}] ${o}`}if(e.type==="result")return`[result] ${e.subtype||""} ${Uo(String(e.result||""))}`.trim()}var En=F(()=>{"use strict";Da();w()});function nv(e,r=240){let t=e.replace(/\s+/g," ").trim();return t.length>r?`${t.slice(0,r-1)}\u2026`:t}function Od(e){let r=(e??"").trim();if(!r)return null;for(let t of tv)if(t.test.test(r))return{blocked:!0,reason:`${t.label}: ${nv(r)}`};return null}var tv,Nd=F(()=>{"use strict";tv=[{test:/\b(?:invalid|unknown|unsupported|unrecognized)\b[^.\n]*\bmodel\b/i,label:"provider rejected the requested model"},{test:/\bmodel\b[^.\n]*\b(?:not\s+(?:found|supported|available|recognized|valid)|is\s+not\s+valid|does\s+not\s+exist)/i,label:"provider rejected the requested model"},{test:/\b(?:did you mean|available models|choose (?:a|one of)|supported models)\b/i,label:"provider rejected the requested model"},{test:/model preflight failed/i,label:"model/provider preflight failed"},{test:/\b(?:command not found|ENOENT|is the .*CLI on PATH|executable not found|no such file or directory)\b/i,label:"provider CLI is missing or not on PATH"},{test:/\bfailed to spawn\b/i,label:"provider failed to spawn the worker process"},{test:/\b(?:not logged in|unauthorized|authentication (?:failed|required)|invalid api key|missing api key|401)\b/i,label:"provider authentication failed"}]});function Td(e){if(typeof e!="string")return null;let r=e.trim();return r.length?r:null}function ov(e){return e==null?!1:typeof e=="string"?e.trim().length>0:typeof e=="boolean"?e:Array.isArray(e)?e.length>0:typeof e=="object"?Object.keys(e).length>0:!0}function sv(e){return!e?.checked||e.headIsAncestorOfBase!==!1?null:Td(e.head)}function iv(e,r,t){let n=["exited_with_changes_salvage"];if((e==="uncommitted"||e==="both")&&n.push(`${r} uncommitted change${r===1?"":"s"} with no final result`),(e==="committed_ahead"||e==="both")&&t){let o=t.length>12?t.slice(0,12):t;n.push(`commit ${o} ahead of base with no final result`)}return n.push("review worktree \u2014 commit, open a PR, or run a salvage worker before discarding"),n.join(": ")}function Br(e){if(e.alive||ov(e.finalResult))return null;let r=(e.changedFiles??[]).filter(i=>i.trim()).length,t=Td(e.headCommit)??sv(e.gitAncestry),n=r>0,o=!!t;if(!n&&!o)return{kind:"none",salvageable:!1,uncommittedCount:0,headCommit:null,attentionReason:"process exited without a final result"};let s=n&&o?"both":n?"uncommitted":"committed_ahead";return{kind:s,salvageable:!0,uncommittedCount:r,headCommit:t,attentionReason:iv(s,r,t)}}var Pn=F(()=>{"use strict"});function An(e){if(typeof e!="string")return null;let r=e.trim();return r.length?r:null}function av(e){return e==null?!1:typeof e=="string"?e.trim().length>0:typeof e=="boolean"?e:Array.isArray(e)?e.length>0:typeof e=="object"?Object.keys(e).length>0:!0}function lv(e){if(An(e.headCommit)||An(e.prUrl)||An(e.artifactBundlePath)||An(e.patchPath))return!0;let r=e.gitAncestry;return!!(r?.checked&&r.headIsAncestorOfBase===!1&&An(r.head))}function Wr(e){return av(e.finalResult)?e.changedFiles.length===0?{blocked:!1}:lv(e)?{blocked:!0,detail:`Worktree has ${e.changedFiles.length} uncommitted change(s); commit or discard before landing`}:{blocked:!0,reason:"dirty_worktree_no_pr",detail:`Worktree has ${e.changedFiles.length} uncommitted change(s) with no commit or PR; commit, open a PR, or discard before landing`}:{blocked:!1}}function Dd(e){if(e.blocked)return e.detail??e.reason??"dirty_worktree_no_pr"}var In=F(()=>{"use strict"});function Ua(e){let r=e.trim();if(!r.startsWith("{"))return null;try{let t=JSON.parse(r);if(t&&typeof t=="object"&&!Array.isArray(t))return t}catch{return null}return null}function Md(e){let r=e.targetPrReconciliation??e.target_pr_reconciliation??e.targetPrs??e.target_prs;return Array.isArray(r)?r.length:0}function It(e){let r=e.trim();if(!r)return null;let t=Ua(r);if(t)return t;let n=[],o=/```(?:json)?\s*([\s\S]*?)```/gi,s;for(;(s=o.exec(r))!==null;){let u=Ua(s[1]??"");u&&n.push(u)}let i=r.indexOf("{"),a=r.lastIndexOf("}");if(i>=0&&a>i){let u=Ua(r.slice(i,a+1));u&&n.push(u)}if(n.length===0)return null;let l=n[n.length-1],c=Md(l);for(let u of n){let d=Md(u);d>c&&(l=u,c=d)}return l}var Xo=F(()=>{"use strict"});function Ot(e){if(typeof e!="string")return null;let r=e.trim();return r.length?r:null}function cv(e){return e==null?!1:typeof e=="string"?e.trim().length>0:typeof e=="object"?Object.keys(e).length>0:!0}function Hr(e){let r=e.trim().match(/github\.com\/([^/]+\/[^/]+)\/(?:pull|pulls)\/(\d+)/i);return r?`https://github.com/${r[1]}/pull/${r[2]}`:Ot(e)}function Qo(e){let r=e.trim().match(/github\.com\/([^/]+\/[^/]+)\/(?:pull|pulls)\/(\d+)/i);return r?`${r[1].toLowerCase()}/pull/${r[2]}`:e.trim().toLowerCase()}function Ud(e){let r=null;if(typeof e=="string"){let o=It(e);o&&(r=o)}else e&&typeof e=="object"&&!Array.isArray(e)&&(r=e);if(!r)return[];let t=r.targetPrReconciliation??r.target_pr_reconciliation;if(!Array.isArray(t))return[];let n=[];for(let o of t){if(!o||typeof o!="object"||Array.isArray(o))continue;let s=o,i=Hr(String(s.prUrl??s.pr_url??"")),a=Ot(s.outcome);!i||a!=="merged"&&a!=="skipped"&&a!=="blocked"||n.push({prUrl:i,outcome:a,mergeCommit:Ot(s.mergeCommit??s.merge_commit),reason:Ot(s.reason)})}return n}function Ld(e,r){let t=[],n=Hr(Ot(e.prUrl)??"");if(n&&t.push(n),r&&typeof r=="object"&&!Array.isArray(r)){let o=r,s=Hr(String(o.prUrl??o.pr_url??""));s&&t.push(s)}return[...new Set(t)]}function La(e){let{contract:r,snapshot:t}=e,n=e.finalResult??t.finalResult;if(!r.landingOnly&&r.targetPrUrls.length===0&&!r.repairEnforceOriginalPr)return{blocked:!1};if(!cv(n))return(r.requiresTargetPrReconciliation??(r.landingOnly||!!r.repairEnforceOriginalPr||r.targetPrUrls.length>0))&&r.targetPrUrls.length>0?{blocked:!0,reason:"missing_target_pr_reconciliation",detail:`Final result required to reconcile target PR(s): ${r.targetPrUrls.join(", ")}`}:{blocked:!1};if(!(r.requiresTargetPrReconciliation??(r.landingOnly||!!r.repairEnforceOriginalPr||r.targetPrUrls.length>0))&&!r.repairEnforceOriginalPr)return{blocked:!1};let s=r.repairEnforceOriginalPr?Hr(Ot(r.targetPrUrl)??"")??(r.targetPrUrls.length===1?Hr(r.targetPrUrls[0]):null):null;if(s){let d=Ld(t,n);if(!(n&&typeof n=="object"&&!Array.isArray(n)&&n.supersedesOriginalTargetPr===!0)){for(let g of d)if(g!==s)return{blocked:!0,reason:"duplicate_repair_pr",detail:`Repair worker opened or attached PR ${g} instead of canonical target ${s}`}}let p=Ud(n).find(g=>g.prUrl===s);if(!p||p.outcome!=="merged"&&!(p.reason?.trim()&&(p.outcome==="skipped"||p.outcome==="blocked")))return{blocked:!0,reason:"missing_repair_target_reconciliation",detail:`Repair worker must reconcile target PR ${s}`}}let i=Ud(n),a=new Map(i.map(d=>[Qo(d.prUrl),d])),l=new Set(r.targetPrUrls.map(d=>Qo(Hr(d)??d)).filter(Boolean)),c=Ld(t,n);if(r.landingOnly)for(let d of c){if(l.size>0&&!l.has(Qo(d)))return{blocked:!0,reason:"unrelated_implementation_pr",detail:`Landing-only worker attached unrelated PR ${d}`};if(l.size===0)return{blocked:!0,reason:"unrelated_implementation_pr",detail:"Landing-only worker must not open new implementation PRs"}}if(r.targetPrUrls.length===0)return{blocked:!1};let u=[];for(let d of r.targetPrUrls){let f=Qo(Hr(d)??d),m=a.get(f);if(!m){u.push(f);continue}m.outcome!=="merged"&&!m.reason?.trim()&&u.push(f)}return u.length>0?{blocked:!0,reason:u.every(d=>a.has(d))?"incomplete_target_pr_landing":"missing_target_pr_reconciliation",detail:`Target PR reconciliation incomplete: ${u.join(", ")}`}:{blocked:!1}}function Ba(e){if(e.blocked)return e.detail??e.reason}var Wa=F(()=>{"use strict";Xo()});function Bd(e){let r=Date.now();if(e.completionBlocker&&!Wd(e.completionBlocker))return{state:"blocked",reason:e.completionBlocker};if(e.finalResult){if(e.localOnly&&pv(e.finalResult))return{state:"done",reason:"local-only worker superseded by merged PR"};let o={finalResult:e.finalResult,changedFiles:e.changedFiles??[],gitAncestry:e.gitAncestry??null,prUrl:e.prUrl??null},s=Wr(o);if(s.blocked){let i=Dd(s);return{state:"needs_attention",reason:s.reason?`landing blocked (${s.reason}): ${i}`:`landing blocked: ${i}`}}if(e.landingContract){let i=La({contract:e.landingContract,snapshot:o,finalResult:e.finalResult}),a=Ba(i);if(a)return{state:"needs_attention",reason:i.reason?`landing contract (${i.reason}): ${a}`:`landing contract: ${a}`}}return{state:"done",reason:"final result recorded"}}if(!e.alive){if(dv(e))return{state:"done",reason:"empty abandoned worker record"};let o=Od(e.error);if(o)return{state:"blocked",reason:o.reason};let s=Br({alive:!1,finalResult:null,changedFiles:e.changedFiles,gitAncestry:e.gitAncestry});if(s?.salvageable){let a=e.error?.trim();return{state:"needs_attention",reason:a?`${s.attentionReason} (${a})`:s.attentionReason}}let i=e.error?.trim();return{state:"needs_attention",reason:i?`process exited without a final result: ${i}`:s?.attentionReason??"process exited without a final result"}}if(e.heartbeatBlocker)return{state:"blocked",reason:`worker heartbeat reported blocker: ${e.heartbeatBlocker}`};let t=e.startedAt?Date.parse(e.startedAt):NaN;if(!e.firstEventAt&&e.stdoutBytes===0&&e.heartbeatBytes===0&&Number.isFinite(t)&&r-t>uv)return{state:"needs_attention",reason:`no first stream event ${pa(t)}s after start`};let n=e.lastActivityAt?Date.parse(e.lastActivityAt):NaN;return Number.isFinite(n)&&r-n>Nt?{state:"stale",reason:`no log/event/heartbeat activity for ${pa(n)}s`}:{state:"ok",reason:"recent activity"}}function Wd(e){let r=e?.trim();return r?/completion acknowledged but board not advanced/i.test(r)&&/task already terminal/i.test(r):!1}function dv(e){return e.finalResult||e.taskId||e.agentOsId||e.stdoutBytes>0||(e.stderrBytes??0)>0||e.heartbeatBytes>0||e.error?.trim()||(e.changedFiles??[]).some(r=>r.trim())?!1:/empty worker dir|marked abandoned/i.test(e.reconcileReason??"")}function pv(e){let r=null;if(typeof e=="string"?r=It(e):e&&typeof e=="object"&&!Array.isArray(e)&&(r=e),!r)return!1;let t=r.targetPrReconciliation??r.target_pr_reconciliation;return Array.isArray(t)?t.some(n=>!n||typeof n!="object"||Array.isArray(n)?!1:String(n.outcome??"").trim()==="merged"):!1}function mv(e,r,t){let n=e.completionSnapshot?.finalResult;return e.completionAckSource==="local-pr-merged-reconcile"&&n!==void 0&&n!==null?n:r||(n??Ur(t))}function T(e,r={}){let t=At(e.stdoutPath),n=_e(e.heartbeatPath),o=typeof e.completionReportedAt=="string"&&e.completionReportedAt.trim().length>0,s=mv(e,t.finalResult,n),i=o?!1:$(e.pid),a=Lo(e.stdoutPath),l=Lo(e.stderrPath),c=Lo(e.heartbeatPath),u=vn(e.worktreePath),d=Ho(e.worktreePath,{base:r.base,baseCommit:r.baseCommit}),f=Yu([t.lastEventAt,n.lastHeartbeatAt,Bo(e.stdoutPath),Bo(e.stderrPath),Bo(e.heartbeatPath)]),m=t.error||!i&&!s&&Wo(e.stderrPath,10).trim()||void 0,p=typeof e.completionBlocker=="string"&&e.completionBlocker.trim()?e.completionBlocker.trim():null,g=Wd(p)?null:p,k=e.repairTargetPrUrl?{landingOnly:!1,targetPrUrls:[e.repairTargetPrUrl],targetPrUrl:e.repairTargetPrUrl,repairEnforceOriginalPr:!0}:null,h=Bd({alive:i,finalResult:s,firstEventAt:t.firstEventAt,stdoutBytes:a,stderrBytes:l,heartbeatBytes:c,lastActivityAt:f,heartbeatBlocker:n.heartbeatBlocker,startedAt:e.startedAt,error:m,changedFiles:u,gitAncestry:d,completionBlocker:g,landingContract:k,prUrl:e.repairTargetPrUrl??e.taskPrUrl??null,localOnly:e.localOnly===!0,taskId:e.taskId??null,agentOsId:e.agentOsId??null,reconcileReason:e.reconcileReason??null}),S=g||h.state==="blocked"?"blocked":o||h.state==="done"?"done":s?"exited":i?"running":"exited";return{runId:e.runId,worker:e.name,pid:e.pid,alive:i,status:S,attention:h,branch:e.branch,worktreePath:e.worktreePath,ownedPaths:e.ownedPaths,stdoutBytes:a,stderrBytes:l,heartbeatBytes:c,firstEventAt:t.firstEventAt,lastEventAt:t.lastEventAt,lastActivityAt:f,currentTool:o?null:t.currentTool,heartbeatCount:n.heartbeatCount,lastHeartbeatAt:n.lastHeartbeatAt,lastHeartbeatPhase:n.lastHeartbeatPhase,lastHeartbeatSummary:n.lastHeartbeatSummary,heartbeatBlocker:n.heartbeatBlocker,timestampAnomalies:n.timestampAnomalies,finalResult:s,error:m,changedFiles:u,gitAncestry:d,instructionPolicyFingerprint:e.instructionPolicyFingerprint??null,instructionPolicyEvidence:e.instructionPolicyEvidence??null,model:e.model??e.orchestrationAudit?.model??null,provider:e.orchestrationAudit?.provider??null,boxKind:e.boxKind??null,boxId:e.boxId??null,runtimeId:e.runtimeId??null,personaSlug:e.personaSlug??null,dispatched:e.dispatched??null,localOnly:e.localOnly??null}}function Z(e){return!!(e.finalResult||e.alive===!1||e.status==="exited"||e.status==="done")}function Fr(e){return e.finalResult?e.attention.state==="needs_attention"||e.attention.state==="blocked":!1}function Tt(e,r){return r.length===0?e:r.some(t=>t.attention==="needs_attention"||t.attention==="stale"||t.attention==="blocked")?"needs_attention":r.every(t=>t.status==="done")?"done":r.some(t=>t.status==="running")?"running":e}var uv,Nt,G=F(()=>{"use strict";Lr();En();Nd();Pn();Ce();In();Wa();Xo();w();uv=18e4,Nt=6e5});import{readFileSync as fv}from"node:fs";function gv(e){if(!e||process.platform!=="linux")return null;try{return fv(`/proc/${e}/cmdline`,"utf8").replace(/\0/g," ")}catch{return null}}function Hd(e){if(!e.pid||process.platform!=="linux")return!0;let r=gv(e.pid);return r?[e.worktreePath,e.workerDir,e.heartbeatPath].filter(n=>typeof n=="string"&&n.trim().length>0).some(n=>r.includes(n)):!1}function On(e){if(typeof e.completionBlocker=="string"&&e.completionBlocker.trim())return!1;let r=T(e);return r.alive&&!Hd(e)?!1:r.alive&&!r.finalResult&&r.attention.state!=="done"}var Zo=F(()=>{"use strict";G()});import $d from"node:os";import hv from"node:path";function Fd(e,r){let t=Number(e);return!Number.isFinite(t)||t<=0?r:Math.floor(t)}function kv(e=v(),r,t){let n=Fd(e.perWorkerMemBytes,Nn),o=Fd(e.memReserveBytes,Tn),s=Math.min(1,Math.max(.1,Number(e.memUtilization)>0?Number(e.memUtilization):Dn)),i=rs({config:e,configuredMaxWorkersOverride:r,totalMemBytes:t??$d.totalmem()});return{perWorkerMemBytes:n,memReserveBytes:o,memUtilization:s,configuredMaxWorkers:i.configuredMaxWorkers,autoCap:i.autoCap,workerCapSource:i.workerCapSource}}function Ha(e,r={}){let t=r.perWorkerMemBytes??Nn,n=r.memReserveBytes??Tn,o=r.memUtilization??Dn,s=Math.max(0,Math.floor(e*o)-n),i=Math.max(1,Math.floor(s/t));return Math.min(i,es)}function yv(){return Ct()}function Rv(e){let r=0;for(let t of Ee(e)){let n=_(hv.join(x(e.id),"workers",R(t),"worker.json"),void 0);!n||!On(n)||r++}return r}function vv(){let e=0;for(let r of ne())e+=Rv(r);return e}function $r(e){let r=e.config??v(),t=e.totalMemBytes??$d.totalmem(),{perWorkerMemBytes:n,memReserveBytes:o,memUtilization:s,configuredMaxWorkers:i,autoCap:a,workerCapSource:l}=kv(r,e.configuredMaxWorkersOverride,t),c=je(r),u=e.freeMemBytes??yv(),d=e.activeWorkers??vv(),f=Math.max(0,Math.floor(t*s)-o),m=Math.max(0,Math.floor(f/n)),p=Math.max(0,Math.floor(Math.max(0,u-o)/n)),g=a,h=Math.max(0,Math.min(i??g,m)),S=Math.max(0,h-d),W=Math.min(S,p),b=e.skipDiskGate||process.env.KYNVER_RESOURCE_GATE_SKIP_DISK==="1"?void 0:Me({diskPath:e.diskPath?.trim()||process.env.KYNVER_DISK_GUARD_PATH?.trim()||"/"});b&&!b.ok&&(W=0);let P=null;return W<=0&&(b&&!b.ok?P=b.reason??"disk gate blocked worker admission":d>=h?P=`at worker limit (${d}/${h} running)`:p<=0?P="insufficient free memory \u2014 waiting for workers to finish":P="no worker slots available"),{ok:W>0,totalMemBytes:t,freeMemBytes:u,memReserveBytes:o,perWorkerMemBytes:n,configuredMaxWorkers:i,workerCapSource:l,boxKind:c,autoCap:g,capacityWorkers:m,maxConcurrentWorkers:h,activeWorkers:d,slotsAvailable:W,reason:P,...b?{diskGate:b}:{}}}var Nn,Tn,Dn,es,Mn=F(()=>{"use strict";jo();O();De();ts();_t();L();Pt();Zo();w();Nn=500*1024*1024,Tn=4*1024*1024*1024,Dn=.85,es=64});function Kr(e,r){let t=Number(e);return!Number.isFinite(t)||t<=0?r:Math.floor(t)}function rs(e){let r=e.config??{},t=e.env??process.env,n=Kr(r.perWorkerMemBytes,Nn),o=Kr(r.memReserveBytes,Tn),s=Math.min(1,Math.max(.1,Number(r.memUtilization)>0?Number(r.memUtilization):Dn)),i=Ha(e.totalMemBytes,{perWorkerMemBytes:n,memReserveBytes:o,memUtilization:s});if(e.configuredMaxWorkersOverride!==void 0&&e.configuredMaxWorkersOverride!==null)return{configuredMaxWorkers:Kr(e.configuredMaxWorkersOverride,i),autoCap:i,workerCapSource:"workspace_override"};if(r.maxConcurrentWorkers!==void 0&&r.maxConcurrentWorkers!==null){let c=Kr(r.maxConcurrentWorkers,0)||null;if(c)return{configuredMaxWorkers:Math.min(c,es),autoCap:i,workerCapSource:"config"}}let l=(t.KYNVER_MAX_WORKERS_INTENTIONAL==="1"||t.KYNVER_MAX_WORKERS_INTENTIONAL==="true")&&t.KYNVER_MAX_WORKERS&&Kr(t.KYNVER_MAX_WORKERS,0)||null;return l?{configuredMaxWorkers:Math.min(l,es),autoCap:i,workerCapSource:"env"}:{configuredMaxWorkers:null,autoCap:i,workerCapSource:"auto"}}function Fa(e={}){let r=e.totalMemBytes??0,t=Ha(r,{perWorkerMemBytes:Kr(e.config?.perWorkerMemBytes,Nn),memReserveBytes:Kr(e.config?.memReserveBytes,Tn),memUtilization:e.config?.memUtilization&&Number(e.config.memUtilization)>0?Number(e.config.memUtilization):Dn}),n=e.diskGateOk??!0,o=n?t:Math.max(1,Math.min(t,4));return{totalMemBytes:r,autoCap:t,recommendedMaxWorkers:o,diskPath:e.diskPath??"/",diskGateOk:n,diskFreeBytes:e.diskFreeBytes??null}}var ts=F(()=>{"use strict";Mn()});var jd={};Ty(jd,{runDeviceLogin:()=>$a});import Kd from"node:os";function bv(e){let r=(typeof e.apiBaseUrl=="string"?e.apiBaseUrl:void 0)||(typeof e.baseUrl=="string"?e.baseUrl:void 0)||process.env.KYNVER_API_URL||v().apiBaseUrl;return r?tr(String(r)):void 0}async function Sv(e){await new Promise(r=>setTimeout(r,e))}async function $a(e){let r=bv(e);if(!r)return console.error("kynver login (device flow) requires a Kynver URL \u2014 pass --api-base-url https://your-kynver-site, set KYNVER_API_URL, or run `kynver setup` first."),{ok:!1};let t=`${Kd.hostname()} (${Kd.platform()})`,n;try{let a=await fetch(`${r}/api/auth/device/code`,{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify({clientName:t})});if(!a.ok)return console.error(`Could not start device authorization (${a.status}).`),{ok:!1};n=await a.json()}catch(a){return console.error(`Could not reach ${r}: ${a.message}`),{ok:!1}}let o=n.verification_uri_complete||n.verification_uri;console.log(""),console.log("  Authorize this machine:"),console.log(`    1. Open: ${o}`),console.log(`    2. Confirm the code: ${n.user_code}`),console.log(""),console.log("  Waiting for approval\u2026");let s=Date.now()+n.expires_in*1e3,i=Math.max(1,n.interval)*1e3;for(;Date.now()<s;){await Sv(i);let a;try{a=await(await fetch(`${r}/api/auth/device/token`,{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify({device_code:n.device_code})})).json().catch(()=>({}))}catch{continue}switch(a.status){case"approved":return a.api_key?(Un(a.api_key),console.log("  Approved \u2014 this machine is now linked to your Kynver account."),{ok:!0,apiKey:a.api_key}):{ok:!1};case"slow_down":i+=2e3;break;case"authorization_pending":typeof a.interval=="number"&&(i=Math.max(i,a.interval*1e3));break;case"access_denied":return console.error("  Request was denied in the browser."),{ok:!1};case"expired_token":return console.error("  The code expired before it was approved. Run `kynver login` again."),{ok:!1};default:break}}return console.error("  Timed out waiting for approval. Run `kynver login` again."),{ok:!1}}var Ka=F(()=>{"use strict";O();w()});import{existsSync as Gd,mkdirSync as Yd,readFileSync as Jd,writeFileSync as qd}from"node:fs";import{homedir as wv,totalmem as Cv}from"node:os";import ja from"node:path";import _v from"node:os";function v(){if(!Gd(ns))return{};try{return JSON.parse(Jd(ns,"utf8"))}catch{return{}}}function Ve(e){Yd(os,{recursive:!0}),qd(ns,`${JSON.stringify(Va(e),null,2)}
-`,{mode:384})}function Va(e){return{...e,...e.harnessRoot?.trim()?{harnessRoot:he(e.harnessRoot.trim())}:{},...e.defaultRepo?.trim()?{defaultRepo:he(e.defaultRepo.trim())}:{}}}function Mt(e){return Va(e)}function xv(e,r){let t=Ln(),n=(typeof r.apiBaseUrl=="string"?r.apiBaseUrl:void 0)||e.apiBaseUrl?.trim()||process.env.KYNVER_API_URL?.trim()||process.env.KYNVER_CRON_FIRE_BASE_URL?.trim()||process.env.OPENCLAW_CRON_FIRE_BASE_URL?.trim(),o=(typeof r.agentOsId=="string"?r.agentOsId:void 0)||e.agentOsId?.trim()||process.env.KYNVER_AGENT_OS_ID?.trim()||(t.runnerToken?.trim().startsWith("krc1.")?t.runnerTokenAgentOsId?.trim():void 0),i=(typeof r.repo=="string"?r.repo:r.discoverRepo===!0||r.discoverRepo==="true"?kr()?.repo:void 0)||e.defaultRepo?.trim()||process.env.KYNVER_DEFAULT_REPO?.trim()||process.env.KYNVER_HARNESS_REPO?.trim()||kr()?.repo,a=(typeof r.harnessRoot=="string"?r.harnessRoot:void 0)||e.harnessRoot?.trim()||process.env.KYNVER_HARNESS_ROOT?.trim()||process.env.OPUS_HARNESS_ROOT?.trim();return{...n?{apiBaseUrl:tr(n)}:{},...o?{agentOsId:o}:{},...i?{defaultRepo:i}:{},...a?{harnessRoot:a}:{},...typeof r.agentOsSlug=="string"?{agentOsSlug:r.agentOsSlug}:e.agentOsSlug?{agentOsSlug:e.agentOsSlug}:{}}}function Ev(e,r,t=Cv()){let n=typeof r.maxWorkers=="string"?r.maxWorkers:typeof r.maxConcurrentWorkers=="string"?r.maxConcurrentWorkers:void 0,o=typeof r.boxKind=="string"?r.boxKind:typeof r["box-kind"]=="string"?String(r["box-kind"]):void 0,s=Te(process.env,{...e,...o?{boxKind:wt(o)}:{}}).boxKind,i=Me({diskPath:typeof r.diskPath=="string"?r.diskPath:"/"}),a=Fa({totalMemBytes:t,diskPath:i.path,diskGateOk:i.ok,diskFreeBytes:i.freeBytes,config:e});return n?{maxConcurrentWorkers:Math.max(1,Math.floor(Number(n))),maxConcurrentWorkersSource:"setup-flag",boxKind:s}:e.maxConcurrentWorkers!==void 0&&e.maxConcurrentWorkers!==null?{maxConcurrentWorkers:Math.max(1,Math.floor(Number(e.maxConcurrentWorkers))),maxConcurrentWorkersSource:e.maxConcurrentWorkersSource??"operator",boxKind:s}:{maxConcurrentWorkers:a.recommendedMaxWorkers,maxConcurrentWorkersSource:"setup-auto",boxKind:s}}function Ln(){if(!Gd(Dt))return{};try{return JSON.parse(Jd(Dt,"utf8"))}catch{return{}}}function zd(e){Yd(os,{recursive:!0}),qd(Dt,`${JSON.stringify(e,null,2)}
-`,{mode:384})}function ee(){return process.env.KYNVER_API_KEY?process.env.KYNVER_API_KEY:Ln().apiKey}function Un(e){zd({...Ln(),apiKey:e})}function Vd(e){let r=process.env.KYNVER_RUNNER_TOKEN?.trim();if(r)return r;let t=Ln();if(t.runnerToken&&!(e&&t.runnerTokenAgentOsId&&t.runnerTokenAgentOsId!==e))return t.runnerToken}function jr(e,r){zd({...Ln(),runnerToken:r,runnerTokenAgentOsId:e})}function B(e){let r=Bn(e);return r||is("requires --base-url, KYNVER_API_URL, KYNVER_CRON_FIRE_BASE_URL, or ~/.kynver/config.json apiBaseUrl"),r}function Ga(e){return Bn(e)}function Bn(e){let r=e||process.env.KYNVER_API_URL||process.env.KYNVER_CRON_FIRE_BASE_URL||process.env.OPENCLAW_CRON_FIRE_BASE_URL||v().apiBaseUrl;return r?tr(String(r)):void 0}function Xd(e,r){let t=e||Vd(r)||(r?void 0:Vd(v().agentOsId));if(t)return String(t);let n=process.env.KYNVER_RUNTIME_SECRET||process.env.KYNVER_CRON_SECRET||process.env.OPENCLAW_CRON_SECRET;if(n)return console.warn("[kynver] using deployment-level callback secret; run `kynver runner credential --agent-os-id <id>` for a scoped token"),String(n)}function Pv(e,r){let t=Xd(e,r);if(t)return t;is("requires --secret, KYNVER_RUNNER_TOKEN, a scoped runner token (`kynver runner credential`), ~/.kynver/credentials runnerToken, KYNVER_API_KEY with an API base URL to mint one, or (legacy) KYNVER_RUNTIME_SECRET / KYNVER_CRON_SECRET / OPENCLAW_CRON_SECRET")}async function ss(e,r,t){let n=Xd(e,r);if(n)return{ok:!0,secret:n};let o=ee(),s=Bn(t?.baseUrl);if(o&&r&&s)try{let i=await Vr(r,{baseUrl:s,apiKey:o});return jr(r,i),{ok:!0,secret:i}}catch(i){return{ok:!1,reason:`runner credential mint failed: ${i.message}`}}return{ok:!1,reason:"no runner credential: requires --secret, KYNVER_RUNNER_TOKEN, a scoped runner token (`kynver runner credential`), ~/.kynver/credentials runnerToken, or KYNVER_API_KEY + API base URL to mint one"}}async function K(e,r,t){let n=await ss(e,r,t);if(n.ok)return n.secret;is(n.reason)}async function Qd(e,r){let t=ee(),n=Bn(r?.baseUrl);if(!t||!e||!n)return null;try{let o=await Vr(e,{baseUrl:n,apiKey:t});return jr(e,o),o}catch{return null}}async function Zd(e,r,t){let n=ee(),o=Bn(t?.baseUrl);if(!n)return{ok:!1,reason:"KYNVER_API_KEY is required to refresh a rejected runner token"};if(!r)return{ok:!1,reason:"agentOsId is required to refresh a rejected runner token"};if(!o)return{ok:!1,reason:"KYNVER_API_URL or --base-url is required to refresh a rejected runner token"};try{let s=await Vr(r,{baseUrl:o,apiKey:n});return s&&s!==e?(jr(r,s),{ok:!0,token:s}):{ok:!1,reason:"runner credential refresh returned the rejected token"}}catch(s){return{ok:!1,reason:s.message}}}async function Vr(e,r){let t=r?.apiKey||ee();if(!t)throw new Error("API key required \u2014 run `kynver login` first");let o=`${B(r?.baseUrl)}/api/agent-os/by-id/${encodeURIComponent(e)}/runner-credentials`,s=await fetch(o,{method:"POST",headers:{"Content-Type":"application/json",Authorization:`Bearer ${t}`},body:JSON.stringify({})}),i=await s.text(),a=null;try{a=JSON.parse(i)}catch{a=null}if(!s.ok||!a?.token)throw new Error(`runner credential mint failed (${s.status}): ${a?.error??i.slice(0,200)}`);return a.token}async function ep(e){let r=(e.agentOsId?String(e.agentOsId):v().agentOsId)||"";r||is("runner credential requires --agent-os-id or agentOsId in ~/.kynver/config.json");try{let t=await Vr(r,{baseUrl:e.baseUrl?String(e.baseUrl):void 0});jr(r,t),console.log(JSON.stringify({ok:!0,agentOsId:r,credentialsPath:Y(Dt),tokenPrefix:`${t.slice(0,12)}\u2026`,note:"Scoped runner token saved; callbacks use X-Kynver-Runner-Token."},null,2))}catch(t){console.error(t instanceof Error?t.message:String(t)),process.exit(1)}}function is(e){console.error(e),process.exit(1)}function Wn(e){let r={};for(let t=0;t<e.length;t++){let n=e[t];if(!n.startsWith("--"))continue;let o=n.slice(2).replace(/-([a-z])/g,(i,a)=>a.toUpperCase()),s=e[t+1];!s||s.startsWith("--")?r[o]=!0:(r[o]=s,t++)}return r}async function as(e){let r=v(),t=Me({diskPath:typeof e.diskPath=="string"?e.diskPath:"/"}),n=Fa({totalMemBytes:_v.totalmem(),diskPath:t.path,diskGateOk:t.ok,diskFreeBytes:t.freeBytes,config:r}),o=Ev(r,e),s=Va({...r,...xv(r,e),...o,workerProvider:typeof e.provider=="string"?e.provider:r.workerProvider||"cursor",...e.chatOauth===!0?{chatUseClaudeOauth:!0}:{}});Ve(s);let i=Te(process.env,s),a,l=ee(),c=s.agentOsId;if(l&&c)try{let u=await Vr(c,{baseUrl:typeof e.apiBaseUrl=="string"?e.apiBaseUrl:s.apiBaseUrl,apiKey:l});jr(c,u),a="Scoped runner token minted and saved to ~/.kynver/credentials."}catch{a="Runner token not minted (server offline or master secret unset). Run `kynver runner credential` after deploy."}console.log(JSON.stringify({ok:!0,configPath:Y(ns),config:Mt(s),boxKind:s.boxKind,boxKindSource:i.source,workerCapRecommendation:n,...i.warnings.length?{boxIdentityWarnings:i.warnings}:{},note:a??"boxKind and maxConcurrentWorkers persisted; override with --box-kind and --max-workers. Run `kynver login` + `kynver runner credential` for scoped callbacks."},null,2))}async function rp(e){let r=typeof e.apiKey=="string"?e.apiKey:process.env.KYNVER_API_KEY;if(r){Un(r),console.log(JSON.stringify({ok:!0,credentialsPath:Y(Dt)},null,2));return}let{runDeviceLogin:t}=await Promise.resolve().then(()=>(Ka(),jd));(await t(e)).ok||process.exit(1),console.log(JSON.stringify({ok:!0,credentialsPath:Y(Dt)},null,2))}var os,ns,Dt,AN,IN,O=F(()=>{"use strict";bn();nr();w();De();ts();_t();os=ja.join(wv(),".kynver"),ns=ja.join(os,"config.json"),Dt=ja.join(os,"credentials");AN=500*1024*1024,IN=4*1024*1024*1024});import{existsSync as Dy,readFileSync as My}from"node:fs";import{dirname as ua,join as Hu}from"node:path";import{fileURLToPath as Wu}from"node:url";function Uy(e){let r=ua(Wu(e));for(let t=0;t<6;t+=1){if(Dy(Hu(r,"package.json")))return r;let n=ua(r);if(n===r)break;r=n}throw new Error(`package.json not found above ${ua(Wu(e))}`)}function Fu(e=import.meta.url){let r=Hu(Uy(e),"package.json"),t=JSON.parse(My(r,"utf8"));if(typeof t.version!="string"||!t.version.trim())throw new Error(`Missing package.json version at ${r}`);return t.version}var yn=Fu();function Ly(e){return e.some(r=>r==="--version"||r==="-v")}function By(e,r){console.log(r?`${r} ${e}`:e),process.exit(0)}function $u(e,r=import.meta.url,t){return Ly(e)?(By(Fu(r),t),!0):!1}bn();import{existsSync as od,readFileSync as zy}from"node:fs";import Fo from"node:path";var va={"@kynver-app/runtime":"0.1.83","@kynver-app/openclaw-agent-os":"0.1.43","@kynver-app/mcp-agent-os":"0.3.34"},ba=Object.keys(va),Ra={"@kynver-app/runtime":"Kynver runtime","@kynver-app/openclaw-agent-os":"OpenClaw AgentOS plugin","@kynver-app/mcp-agent-os":"AgentOS MCP server"},Xy={"@kynver-app/runtime":"packages/kynver-runtime/package.json","@kynver-app/openclaw-agent-os":"packages/kynver-openclaw-agent-os/package.json","@kynver-app/mcp-agent-os":"packages/kynver-mcp-agent-os/package.json"};function sd(e){let r=e.trim().split("-")[0]?.split("+")[0];if(!r)return null;let t=r.split(".");if(t.length<1||t.length>3)return null;let n=t.map(o=>Number.parseInt(o,10));if(n.some(o=>!Number.isFinite(o)||o<0))return null;for(;n.length<3;)n.push(0);return[n[0],n[1],n[2]]}function wn(e,r){let t=sd(e),n=sd(r);if(!t||!n)return 0;for(let o=0;o<3;o+=1){if(t[o]>n[o])return 1;if(t[o]<n[o])return-1}return 0}function Sa(e,r){return wn(e,r)>=0}function Qy(e){let r=null;for(let t of e)(!r||wn(t,r)>0)&&(r=t);return r}function Zy(e){try{let r=JSON.parse(zy(e,"utf8"));return typeof r.version=="string"&&r.version.trim()?r.version.trim():null}catch{return null}}function eR(e,r){let t=[r,process.env.KYNVER_REPO,e].filter(o=>!!o?.trim());for(let o of t){let s=Fo.resolve(o);if(od(Fo.join(s,"packages/kynver-runtime/package.json"))&&od(Fo.join(s,"package.json")))return s}return kr({cwd:e})?.repo??null}function wa(e={}){let r=e.cwd??process.cwd(),t=eR(r,e.repoRoot);if(!t)return{};let n={};for(let o of ba){let s=Fo.join(t,Xy[o]),i=Zy(s);i&&(n[o]={version:i,source:"repo",path:s})}return n}function rR(e){return e==="@kynver-app/runtime"?["npm run kynver:build","npm run kynver"]:[`npm run build -w ${e}`]}function tR(e){let{packageName:r,minimumVersion:t,effectiveVersion:n,effectiveSource:o,repoVersion:s}=e,i=[];return s&&Sa(s,t)?(i.push(`Use the monorepo checkout (${s}) instead of a stale npm install: ${rR(r).join("; ")}.`),i.push("Do not publish npm packages or wait on an operator release."),i):(n?i.push(`Upgrade ${r} from ${n} to >= ${t} (npm install -g ${r}@latest or align OpenClaw npm prefix).`):i.push(`Install ${r} >= ${t} before running memory-heavy AgentOS paths.`),r==="@kynver-app/runtime"&&i.push("Repo-source alternative: npm run kynver:build && npm run kynver"),o==="installed"&&s&&i.push(`Repo checkout reports ${s}; rebuild/link repo source if you develop from the monorepo.`),i)}function nR(e){if(e.length===0)return{version:null,source:"unknown"};let r=Qy(e.map(n=>n.version));if(!r)return{version:null,source:"unknown"};let t=e.find(n=>n.version===r)??e[0];return{version:t.version,source:t.source}}function $o(e={}){let r=(i,a)=>i?typeof i=="string"?{version:i,source:a}:i:null,t=ba.map(i=>{let a=va[i],l=[],c=r(e.installed?.[i],"installed"),u=r(e.repo?.[i],"repo"),d=r(e.self?.[i],"self");c&&l.push(c),u&&l.push(u),d&&l.push(d);let{version:f,source:m}=nR(l),p=u?.version??null,g=f?Sa(f,a):!1,k=g?[]:tR({packageName:i,minimumVersion:a,effectiveVersion:f,effectiveSource:m,repoVersion:p}),h=g?`${Ra[i]} ${f} meets memory-cost minimum ${a} (${m}).`:`${Ra[i]} is below memory-cost minimum ${a}`+(f?` (effective ${f} via ${m})`:" (no version detected)")+".";return{packageName:i,displayName:Ra[i],minimumVersion:a,effectiveVersion:f,effectiveSource:m,ok:g,summary:h,remediation:k}}),n=t.filter(i=>!i.ok),o=n.length===0,s=o?"All managed AgentOS packages meet memory-cost minimum versions.":`Memory-cost package guard blocked ${n.length} stale package(s): ${n.map(i=>`${i.packageName} < ${i.minimumVersion}`).join("; ")}.`;return{ok:o,summary:s,packages:t}}var Sn=class extends Error{result;constructor(r){let t=[r.summary,...r.packages.filter(n=>!n.ok).flatMap(n=>[`- ${n.summary}`,...n.remediation.map(o=>`  \u2192 ${o}`)])];super(t.join(`
-`)),this.name="MemoryCostPackageVersionGuardError",this.result=r}};function Ca(e={}){let r=$o(e);if(!r.ok)throw new Sn(r);return r}function oR(e){return new Sn(e).message}import{readFile as sR}from"node:fs/promises";import{homedir as iR}from"node:os";import Dr from"node:path";var aR=["@kynver-app/runtime","@kynver-app/openclaw-agent-os","@kynver-app/mcp-agent-os"];function St(e){let r=e?.trim();return r||null}function lR(e){return[...new Set(e.filter(r=>!!r))]}function cR(){let e=iR(),r=St(process.env.KYNVER_OPENCLAW_NPM_ROOT)??St(process.env.OPENCLAW_NPM_ROOT)??Dr.join(e,".openclaw","npm"),t=St(process.env.KYNVER_NPM_GLOBAL_ROOT)??St(process.env.KYNVER_NPM_GLOBAL_MODULES_ROOT)??(St(process.env.NPM_CONFIG_PREFIX)?Dr.join(St(process.env.NPM_CONFIG_PREFIX),"lib","node_modules"):Dr.join(e,".npm-global","lib","node_modules"));return lR([Dr.join(r,"lib","node_modules"),Dr.join(r,"node_modules"),t.endsWith("node_modules")?t:Dr.join(t,"lib","node_modules")])}async function uR(e){try{let r=JSON.parse(await sR(e,"utf8"));return typeof r.version=="string"&&r.version.trim()?r.version.trim():null}catch{return null}}function dR(e){let r=cR(),t=new Set,n=[];for(let o of r){let s=Dr.join(o,e,"package.json");t.has(s)||(t.add(s),n.push(s))}return n}async function Ko(e=new Date().toISOString()){let r={};for(let t of aR){let n=null;for(let o of dR(t)){let s=await uR(o);s&&(!n||wn(s,n.version)>0)&&(n={version:s,path:o})}n&&(r[t]={version:n.version,observedAt:e,path:n.path})}return r}function pR(e){let r={};for(let[t,n]of Object.entries(e))n?.version&&(r[t]={version:n.version,source:"installed",path:n.path});return r}async function _a(e={}){let[r,t]=await Promise.all([Ko(),Promise.resolve(wa({cwd:e.cwd,repoRoot:e.repoRoot}))]),n={},o=e.selfPackageName==="@kynver-app/runtime"&&e.selfVersion?e.selfVersion:yn;return n["@kynver-app/runtime"]={version:o,source:"self"},e.selfPackageName&&e.selfVersion&&e.selfPackageName!=="@kynver-app/runtime"&&(n[e.selfPackageName]={version:e.selfVersion,source:"self"}),{installed:pR(r),repo:t,self:n}}async function mR(e={}){let r=await _a(e);return $o(r)}async function xa(e={}){let r=await _a(e);return Ca(r)}function Ea(e,r){return e?e==="daemon"||e==="start"||e==="worker"||e==="monitor"||e==="run"&&(r==="dispatch"||r==="sweep"||r==="reconcile"||r==="unblock")||e==="cron"&&r==="tick":!1}O();function Le(e){let r=String(e).trim();return r.startsWith("krc1.")?{"Content-Type":"application/json","X-Kynver-Runner-Token":r}:{"Content-Type":"application/json","X-Kynver-Cron-Secret":r,"X-OpenClaw-Cron-Secret":r,"X-Kynver-Runtime-Secret":r}}O();function tp(){let e=Number(process.env.KYNVER_CALLBACK_TIMEOUT_MS);return Number.isFinite(e)&&e>0?Math.floor(e):3e4}async function np(e){let r=new AbortController,t=setTimeout(()=>r.abort(),tp());try{return await e(r.signal)}finally{clearTimeout(t)}}function op(e){return{ok:!1,status:0,response:{error:e instanceof Error?e.message:String(e),timeoutMs:tp()}}}async function Rr(e,r,t){let n;try{n=await np(s=>fetch(e,{method:"POST",headers:Le(r),body:JSON.stringify(t),signal:s}))}catch(s){return op(s)}let o=null;try{o=await n.json()}catch{o=null}return{ok:n.ok,status:n.status,response:o}}async function q(e,r,t,n){let o=await Rr(e,r,t);if(o.ok||o.status!==401)return o;let s=await Zd(r,n.agentOsId,{baseUrl:n.baseUrl});return s.ok?{...await Rr(e,s.token,t),refreshedAuth:!0}:{...o,authRefreshFailure:s.reason}}async function ls(e,r){let t;try{t=await np(o=>fetch(e,{method:"GET",headers:Le(r),signal:o}))}catch(o){return op(o)}let n=null;try{n=await t.json()}catch{n=null}return{ok:t.ok,status:t.status,response:n}}var sp="embedded-1",Av=[{slug:"ghost",displayName:"Ghost",description:"Orchestration persona.",dispatchLane:null,defaultRoleLane:"system"},{slug:"astra",displayName:"Astra",description:"Planning persona.",dispatchLane:"implementation",defaultRoleLane:"plan_author"},{slug:"rhea",displayName:"Rhea",description:"Implementation persona.",dispatchLane:"implementation",defaultRoleLane:"implementer"},{slug:"mnemo",displayName:"Mnemo",description:"Implementation persona.",dispatchLane:"implementation",defaultRoleLane:"implementer"},{slug:"sentinel",displayName:"Sentinel",description:"Review persona.",dispatchLane:"review",defaultRoleLane:"deep_reviewer"},{slug:"pixel",displayName:"Pixel",description:"Implementation persona.",dispatchLane:"implementation",defaultRoleLane:"implementer"},{slug:"schema",displayName:"Schema",description:"Implementation persona.",dispatchLane:"implementation",defaultRoleLane:"implementer"},{slug:"atlas",displayName:"Atlas",description:"Implementation persona.",dispatchLane:"implementation",defaultRoleLane:"runtime_verifier"},{slug:"bridge",displayName:"Bridge",description:"Implementation persona.",dispatchLane:"implementation",defaultRoleLane:"implementer"},{slug:"catalyst",displayName:"Catalyst",description:"Implementation persona.",dispatchLane:"implementation",defaultRoleLane:"implementer"},{slug:"lorentz",displayName:"Lorentz",description:"Review persona.",dispatchLane:"review",defaultRoleLane:"report_reviewer"},{slug:"dalton",displayName:"Dalton",description:"Landing persona.",dispatchLane:"landing",defaultRoleLane:"implementer"}],Iv={"worker.prompt.core_rules":["Structured final result (recommended): record completion as JSON with summary, files, PR URLs, verification, risks, and blockers.","Completion handoff (required): before you stop, summarize the outcome in your last message and append a heartbeat line with phase `complete`. Commit your work cleanly and open a GitHub PR (draft OK) for substantial changes \u2014 never leave uncommitted changes behind without reporting them.","Review-only workers must not open new implementation PRs \u2014 review the existing PR and record a verdict in the final result.","Keep verification targeted to touched paths; avoid full-monorepo verification unless explicitly requested.","Do not run `npm publish`.","If verification fails, append a heartbeat line immediately with the failing command, reason, and next action."].join(`
+`):""}function Pd(e){return e?Wa(xd.resolve(e),"utf8"):""}function Fr(e){Atomics.wait(new Int32Array(new SharedArrayBuffer(4)),0,0,e)}function wr(e){return new Promise(r=>setTimeout(r,e))}function B(e){if(!e)return!1;try{return process.kill(e,0),!0}catch{return!1}}function _r(e,r){try{process.kill(-e,r)}catch{process.kill(e,r)}}function Ad(e){let r=null,t=-1/0;for(let n of e){if(!n)continue;let o=Date.parse(n);Number.isFinite(o)&&o>t&&(t=o,r=n)}return r}function La(e){return Math.max(0,Math.round((Date.now()-e)/1e3))}var C=V(()=>{"use strict"});function Ba(e){return jR.has(e)?!0:VR.some(r=>e.endsWith(r))}function Od(e){return Object.keys(e).filter(Ba).sort()}function De(e){let r={...e};for(let t of Object.keys(r))Ba(t)&&delete r[t];return r}function GR(e){let r=Od(e);return{forbiddenPresent:r,safe:r.length===0}}function Nd(e){return De(e)}var Id,jR,VR,$r=V(()=>{"use strict";Id=["ANTHROPIC_API_KEY","ANALYST_API_KEY","RECRUITER_API_KEY","AUTH_SECRET","NEXTAUTH_SECRET","DATABASE_URL","PRODUCTION_DATABASE_URL","KYNVER_PRODUCTION_DATABASE_URL","REDIS_URL","GOOGLE_CLIENT_SECRET","GITHUB_CLIENT_SECRET","KYNVER_API_KEY","KYNVER_SERVICE_SECRET","KYNVER_RUNTIME_SECRET","KYNVER_CRON_SECRET","OPENCLAW_CRON_SECRET","QSTASH_TOKEN","QSTASH_CURRENT_SIGNING_KEY","QSTASH_NEXT_SIGNING_KEY","TOOL_SECRETS_KEK","TOOL_EXECUTOR_DISPATCH_SECRET","CLOUDFLARE_API_TOKEN","STRIPE_SECRET_KEY","STRIPE_WEBHOOK_SECRET","STRIPE_IDENTITY_WEBHOOK_SECRET","VOYAGE_API_KEY","PERPLEXITY_API_KEY","FRED_API_KEY","FMP_API_KEY","CURSOR_API_KEY"],jR=new Set(Id),VR=["_SECRET","_API_KEY"]});import{spawnSync as Dd}from"node:child_process";function me(e,r,t={}){let n=Dd("git",r,de({cwd:e,encoding:"utf8"}));if(n.status!==0&&!t.allowFailure){let o=`git ${r.join(" ")} failed: ${n.stderr||n.stdout}`;if(t.throwError)throw new Error(o);Cr(o)}return n.stdout||""}function Md(e){me(e,["rev-parse","--show-toplevel"])}function Dn(e){return me(e,["status","--short"],{allowFailure:!0}).split(`
+`).map(r=>r.trim()).filter(Boolean)}function re(e,r){try{let t=Dd("git",r,de({cwd:e,encoding:"utf8"}));return{status:t.status,stdout:t.stdout||"",stderr:t.stderr||"",error:t.error?t.error.message:null}}catch(t){return{status:null,stdout:"",stderr:"",error:t.message}}}function Td(e,r,t){let n=re(e,["merge-base","--is-ancestor",r,t]);return n.status===0?{isAncestor:!0,error:null}:n.status===1?{isAncestor:!1,error:null}:{isAncestor:null,error:n.error||n.stderr||n.stdout||`git exited ${n.status}`}}function is(e,r="origin/main"){let t=typeof r=="string"?{base:r}:r,n=t.baseCommit?.trim()||t.base?.trim()||"origin/main",o=t.baseCommit?.trim()||null;if(!e)return Ha(n,"missing worktree path");let s=re(e,["rev-parse","HEAD"]);if(s.status!==0)return Ha(n,s.error||s.stderr||s.stdout||"failed to resolve HEAD");let i;if(o)i=o;else{let f=re(e,["rev-parse",n]);if(f.status!==0)return Ha(n,f.error||f.stderr||f.stdout||`failed to resolve ${n}`,s.stdout.trim());i=f.stdout.trim()}let a=s.stdout.trim();if(a===i)return{checked:!0,base:n,head:a,baseHead:i,baseIsAncestorOfHead:!0,headIsAncestorOfBase:!0,relation:"synced"};let l=Td(e,i,a),c=Td(e,a,i),u=l.error||c.error||void 0;if(l.isAncestor==null||c.isAncestor==null)return{checked:!1,base:n,head:a,baseHead:i,baseIsAncestorOfHead:l.isAncestor,headIsAncestorOfBase:c.isAncestor,relation:"unknown",...u?{error:u}:{}};let d=l.isAncestor?"ahead":c.isAncestor?"merged":"diverged";return{checked:!0,base:n,head:a,baseHead:i,baseIsAncestorOfHead:l.isAncestor,headIsAncestorOfBase:c.isAncestor,relation:d,...u?{error:u}:{}}}function Ha(e,r,t=null){return{checked:!1,base:e,head:t,baseHead:null,baseIsAncestorOfHead:null,headIsAncestorOfBase:null,relation:"unknown",error:r}}var Ee=V(()=>{"use strict";C();$r()});import{homedir as Fa}from"node:os";import Kr from"node:path";function Ud(e){return e==="~"?Fa():e.startsWith("~/")||e.startsWith("~\\")?Kr.join(Fa(),e.slice(2)):e}function Dt(e){return Kr.resolve(Ud(e))}function we(e){let r=Ud(e),t=Kr.resolve(r),n=Kr.resolve(Fa());return t===n?"~":t.startsWith(`${n}${Kr.sep}`)?`~/${Kr.relative(n,t).split(Kr.sep).join("/")}`:t.replace(/\\/g,"/").replace(/^\/home\/[^/]+(?=\/|$)/,"~").replace(/^\/Users\/[^/]+(?=\/|$)/,"~").replace(/^[A-Za-z]:\/home\/[^/]+(?=\/|$)/i,"~").replace(/^[A-Za-z]:\/Users\/[^/]+(?=\/|$)/i,"~")}function q(e){return we(e)}var ar=V(()=>{"use strict"});import{existsSync as ja,readFileSync as Wd}from"node:fs";import{homedir as YR}from"node:os";import lr from"node:path";import{fileURLToPath as JR}from"node:url";function zR(e){let r=lr.join(e,"package.json");if(!ja(r))return null;try{let t=JSON.parse(Wd(r,"utf8"));return typeof t.name=="string"?t.name.trim():null}catch{return null}}function Ld(e){return zR(e)==="kynver"}function Ka(e){let r=lr.resolve(e);if(!ja(r))return null;let t=re(r,["rev-parse","--show-toplevel"]);if(t.status!==0)return null;let n=t.stdout.trim();return n.length?lr.resolve(n):null}function XR(e=import.meta.url){let r=lr.dirname(JR(e));for(let t=0;t<8;t+=1){let n=lr.join(r,"package.json");if(ja(n))try{if(JSON.parse(Wd(n,"utf8")).name==="@kynver-app/runtime")return r}catch{}let o=lr.dirname(r);if(o===r)break;r=o}return null}function $a(e,r,t,n){if(!t)return;let o=lr.resolve(t);e.has(o)||Ld(o)&&(e.add(o),r.push({repo:o,source:n}))}function Va(e){let r=e?.cwd??process.cwd(),t=new Set,n=[];$a(t,n,Ka(r),"cwd_git");let o=XR(e?.runtimeModuleUrl??import.meta.url);o&&$a(t,n,Ka(o),"runtime_checkout");let s=YR();for(let i of qR)$a(t,n,Dt(lr.join(s,i)),"well_known_path");return n}function jr(e){return Va(e)[0]??null}function Bd(e){let r=lr.resolve(e).replace(/\\/g,"/");return r.includes("/.kynver/harness/worktrees/")||r.includes("/.openclaw/harness/worktrees/")||r.includes("/kynver-harness/")||r.includes("/openclaw/harness/worktrees/")}function Mn(e){let r=Va(e);return r.find(n=>!Bd(n.repo))??r[0]??null}var qR,Un=V(()=>{"use strict";Ee();ar();qR=["Kynver","repos/Kynver","repos/kynver-source-main","code/Kynver","projects/Kynver"]});function Ut(e){let r=(e??"").trim().toLowerCase();return r==="ghost"||r==="forge"?r:r.includes("forge")?"forge":r.includes("ghost")||r.includes("openclaw")?"ghost":"forge"}function $d(e,r){return e[r]?.trim()||null}function Me(e=process.env,r={}){let t=[],n=r.boxKind?.trim();if(n)return{boxKind:Ut(n),source:"config",slugInferenceBlocked:!1,warnings:t};let o=$d(e,"KYNVER_BOX_KIND");if(o)return{boxKind:Ut(o),source:"env",slugInferenceBlocked:!1,warnings:t};let s=$d(e,"KYNVER_AGENT_OS_SLUG");return s&&t.push(`KYNVER_AGENT_OS_SLUG=${s} is a workspace slug, not box identity \u2014 set boxKind via \`kynver setup --box-kind forge|ghost\` or KYNVER_BOX_KIND (defaulting box kind to forge)`),{boxKind:"forge",source:"default",slugInferenceBlocked:!!s,warnings:t}}function Ge(e={},r=process.env){return Me(r,e).boxKind}var Ue=V(()=>{"use strict"});import{readFileSync as hb}from"node:fs";import Kd from"node:os";function Wt(e){if(e!==void 0){let r=e.match(/^MemAvailable:\s+(\d+)\s*kB/m);return r?Number(r[1])*1024:Kd.freemem()}if(process.platform==="linux")try{let t=hb("/proc/meminfo","utf8").match(/^MemAvailable:\s+(\d+)\s*kB/m);if(t)return Number(t[1])*1024}catch{}return Kd.freemem()}var us=V(()=>{"use strict"});import{existsSync as kb,readFileSync as yb,statfsSync as Rb}from"node:fs";function ds(){if(process.platform!=="linux")return!1;for(let e of["/proc/sys/kernel/osrelease","/proc/version"])try{if(!kb(e))continue;let r=yb(e,"utf8");if(/microsoft|wsl/i.test(r))return!0}catch{}return!1}function rl(e={}){if(!(e.forceWsl===void 0?ds():e.forceWsl))return null;let t=e.wslHostMount?.trim()||process.env.KYNVER_WSL_HOST_MOUNT?.trim()||Gr,n=e.wslHostFreeWarnBytes??jd,o=e.wslHostFreeCriticalBytes??Vd,s=e.statfs??Rb,i;try{i=s(t)}catch(h){return{ok:!1,path:t,freeBytes:0,totalBytes:0,usedPercent:100,warnBelowBytes:n,criticalBelowBytes:o,reason:`Windows host disk probe failed at ${t}: ${h.message}`,probeError:h.message}}let a=Number(i.bavail)*Number(i.bsize),l=Number(i.blocks)*Number(i.bsize),c=l>0?(l-a)/l*100:100,u=a<n,d=a<o,f=!u&&!d,m=(a/(1024*1024*1024)).toFixed(1),p=null;return f||(p=`Windows host disk ${t} at ${d?"critical":"warning"}: ${m} GiB free (<${(d?o:n)/1024/1024/1024} GiB); WSL VHDX cannot grow safely. ${Gd()}`),{ok:f,path:t,freeBytes:a,totalBytes:l,usedPercent:c,warnBelowBytes:n,criticalBelowBytes:o,reason:p,probeError:null}}function Gd(){return"Recovery: 1) free Windows C: (empty Recycle Bin / Storage Sense / clear %TEMP% and %LOCALAPPDATA%\\Temp\\wsl-crashes); 2) shut down WSL (`wsl --shutdown`) then compact the VHDX (`Optimize-VHD` or `diskpart compact vdisk`); 3) clear local node_modules / .next / harness worktrees before restarting workers; 4) disable recurring dumps via `%USERPROFILE%/.wslconfig` (`maxCrashDumpCount=-1`) or `kynver wsl-crashes --execute`. Full runbook: docs/runbooks/wsl-disk-pressure.md."}var jd,Vd,Gr,ps=V(()=>{"use strict";jd=25*1024*1024*1024,Vd=12*1024*1024*1024,Gr="/mnt/c"});import{execFileSync as Yd}from"node:child_process";import{existsSync as fs,readFileSync as Jd,readdirSync as bb,statSync as vb}from"node:fs";import tl from"node:path";function ms(e,r){let t=process.env[e];if(!t)return r;let n=Number(t);return Number.isFinite(n)?n:r}function nl(){let e=process.env.KYNVER_WSL_WIN_USER?.trim();if(e)return e;try{let n=Yd("cmd.exe",["/c","echo","%USERNAME%"],{encoding:"utf8",timeout:5e3,stdio:["ignore","pipe","ignore"]}).trim();if(n&&n!=="%USERNAME%"&&!n.includes("%"))return n}catch{}let r=process.env.USER?.trim()||process.env.LOGNAME?.trim(),t=process.env.KYNVER_WSL_HOST_MOUNT?.trim()||Gr;return r&&fs(tl.join(t,"Users",r))?r:null}function Xd(e={}){let r=e.crashDumpDir?.trim()||process.env.KYNVER_WSL_CRASH_DUMP_DIR?.trim();if(r)return r;let t=e.hostMount?.trim()||process.env.KYNVER_WSL_HOST_MOUNT?.trim()||Gr,n=e.windowsUser??nl();return n?`${t.replace(/\\/g,"/").replace(/\/$/,"")}/Users/${n}/AppData/Local/Temp/wsl-crashes`:null}function Qd(e){let r=/^wsl-crash-\d+-(\d+)-(.+)-(\d+)\.dmp$/i.exec(e);if(!r)return{executableHint:null,signal:null,pid:null};let t=Number(r[1]),n=r[2]??"",o=Number(r[3]),s=n.split("_").filter(Boolean);return{executableHint:s.length>0?s[s.length-1]:null,signal:Number.isFinite(o)?o:null,pid:Number.isFinite(t)?t:null}}function Zd(){try{if(fs("/proc/sys/kernel/core_pattern"))return Jd("/proc/sys/kernel/core_pattern","utf8").trim()}catch{}try{return Yd("sysctl",["-n","kernel.core_pattern"],{encoding:"utf8",timeout:2e3,stdio:["ignore","pipe","ignore"]}).trim()||null}catch{return null}}function wb(e){return!!(e&&/wsl-capture-crash/i.test(e))}function ep(e,r=Gr){let t=tl.join(r,"Users",e,".wslconfig");if(!fs(t))return{maxCrashDumpCount:null,crashDumpFolder:null};let n;try{n=Jd(t,"utf8")}catch{return null}let o=null,s=null;for(let i of n.split(/\r?\n/)){let a=i.replace(/#.*$/,"").trim();if(!a||a.startsWith("["))continue;let l=a.indexOf("=");if(l<0)continue;let c=a.slice(0,l).trim().toLowerCase(),u=a.slice(l+1).trim();if(c==="maxcrashdumpcount"){let d=Number(u);o=Number.isFinite(d)?d:null}else c==="crashdumpfolder"&&(s=u.replace(/^["']|["']$/g,"")||null)}return{maxCrashDumpCount:o,crashDumpFolder:s}}function _b(e){if(!fs(e))return[];let r=bb(e,{withFileTypes:!0}),t=[];for(let n of r){if(!n.isFile()||!n.name.toLowerCase().endsWith(".dmp"))continue;let o=tl.join(e,n.name);try{let s=vb(o),i=Qd(n.name);t.push({name:n.name,path:o,bytes:s.size,mtimeMs:s.mtimeMs,executableHint:i.executableHint,signal:i.signal,pid:i.pid})}catch{}}return t.sort((n,o)=>o.mtimeMs-n.mtimeMs),t}function cr(e={}){if(!(e.forceWsl===void 0?ds():e.forceWsl))return null;let t=e.hostMount?.trim()||process.env.KYNVER_WSL_HOST_MOUNT?.trim()||Gr,n=e.windowsUser??nl(),o=e.warnBelowBytes??ms("KYNVER_WSL_CRASH_DUMP_WARN_BYTES",qd),s=e.criticalBelowBytes??ms("KYNVER_WSL_CRASH_DUMP_CRITICAL_BYTES",zd),i=e.warnCount??ms("KYNVER_WSL_CRASH_DUMP_WARN_COUNT",Sb),a=e.criticalCount??ms("KYNVER_WSL_CRASH_DUMP_CRITICAL_COUNT",Cb),l=(e.readCorePattern??Zd)(),c=wb(l),u=null;n&&(u=(e.readWslConfig??ep)(n,t));let d=u?.maxCrashDumpCount??null,f=d===-1,m=Xd({hostMount:t,windowsUser:n,crashDumpDir:e.crashDumpDir});if(!m)return{ok:!0,path:null,windowsUser:n,dumpCount:0,totalBytes:0,warnBelowBytes:o,criticalBelowBytes:s,warnCount:i,criticalCount:a,dumps:[],executables:[],corePattern:l,wslCaptureEnabled:c,maxCrashDumpCount:d,dumpsDisabledInWslConfig:f,reason:null,probeError:"windows_user_unresolved"};let p;try{p=(e.listDumps??_b)(m)}catch(U){return{ok:!1,path:m,windowsUser:n,dumpCount:0,totalBytes:0,warnBelowBytes:o,criticalBelowBytes:s,warnCount:i,criticalCount:a,dumps:[],executables:[],corePattern:l,wslCaptureEnabled:c,maxCrashDumpCount:d,dumpsDisabledInWslConfig:f,reason:`WSL crash dump probe failed at ${m}: ${U.message}`,probeError:U.message}}let h=p.reduce((U,w)=>U+w.bytes,0),k=p.length,g=[...new Set(p.map(U=>U.executableHint).filter(U=>!!U))],R=h>=s,I=h>=o,E=k>=a,P=k>=i,j=!(R||E||I||P),F=null;if(!j){let U=R||E?"critical":"warning",w=(h/1024**3).toFixed(1),le=g.length>0?g.join(", "):"unknown";F=`WSL crash dumps ${U}: ${k} file(s), ${w} GiB at ${m} (executables: ${le}). `+rp({wslCaptureEnabled:c,dumpsDisabledInWslConfig:f})}return{ok:j,path:m,windowsUser:n,dumpCount:k,totalBytes:h,warnBelowBytes:o,criticalBelowBytes:s,warnCount:i,criticalCount:a,dumps:p,executables:g,corePattern:l,wslCaptureEnabled:c,maxCrashDumpCount:d,dumpsDisabledInWslConfig:f,reason:F,probeError:null}}function rp(e={}){let r=["Recovery:","1) run `kynver wsl-crashes --execute` or scripts/cleanup-wsl-crashes.ps1 to prune old .dmp files;"];return e.dumpsDisabledInWslConfig||r.push("2) add `[wsl2]\\nmaxCrashDumpCount=-1` to %USERPROFILE%/.wslconfig then `wsl --shutdown` to disable future dumps;"),e.wslCaptureEnabled&&r.push("3) investigate crashing executables (node OOM/SIGBUS often follows Windows C: pressure \u2014 see docs/runbooks/wsl-disk-pressure.md);"),r.push("full runbook: docs/runbooks/wsl-disk-pressure.md."),r.join(" ")}var qd,zd,Sb,Cb,Lt=V(()=>{"use strict";ps();qd=5*1024*1024*1024,zd=10*1024*1024*1024,Sb=2,Cb=4});import{statfsSync as xb}from"node:fs";function We(e={}){let r=e.diskPath?.trim()||"/",t=e.diskFreeWarnBytes??Eb,n=e.diskFreeCriticalBytes??Pb,o=e.diskMaxUsedPercent??Ab,s=e.diskHardMaxUsedPercent??Ib,i=xb(r),a=Number(i.bavail)*Number(i.bsize),l=Number(i.blocks)*Number(i.bsize),c=l>0?(l-a)/l*100:100,u=a<t,d=a<n,f=a<t*2,m=f&&c>o,p=f&&c>s,h=!u&&!d&&!m&&!p,k=e.skipWslHostCheck?null:rl(e.wslHost),g=e.skipWslCrashDumpCheck?null:cr(e.wslCrashDumps),R=h&&(k?k.ok:!0)&&(g?g.ok:!0),I=null;return R||(I=[d?`free space below critical ${n} bytes`:null,u?`free space below warning ${t} bytes`:null,p?`used percent above hard cap ${s}%`:null,m?`used percent above cap ${o}%`:null,k&&!k.ok?k.reason:null,g&&!g.ok?g.reason:null].filter(Boolean).join("; ")),Ob({ok:R,path:r,freeBytes:a,totalBytes:l,usedPercent:c,warnBelowBytes:t,criticalBelowBytes:n,maxUsedPercent:o,hardMaxUsedPercent:s,reason:I,wslHost:k,wslCrashDumps:g?{ok:g.ok,path:g.path,dumpCount:g.dumpCount,totalBytes:g.totalBytes,executables:g.executables,wslCaptureEnabled:g.wslCaptureEnabled,dumpsDisabledInWslConfig:g.dumpsDisabledInWslConfig,reason:g.reason,probeError:g.probeError}:null})}function Ob(e){let r=process.env.KYNVER_DISPATCH_DISK_GATE_FORCE?.trim().toLowerCase();return r?r==="ok"||r==="open"||r==="none"?e.ok?e:{...e,ok:!0,reason:`disk gate forced open by KYNVER_DISPATCH_DISK_GATE_FORCE (suppressed: ${e.reason??"no reason"})`}:r==="block"||r==="pressured"?{...e,ok:!1,reason:`disk gate forced closed by KYNVER_DISPATCH_DISK_GATE_FORCE${e.reason?` (underlying: ${e.reason})`:""}`}:e:e}var Eb,Pb,Ab,Ib,Bt=V(()=>{"use strict";Lt();ps();Eb=30*1024*1024*1024,Pb=15*1024*1024*1024,Ab=80,Ib=90});import{existsSync as tp}from"node:fs";import{homedir as op}from"node:os";import xr from"node:path";function ie(e){let r=xr.resolve(Dt(e.trim()));for(;Nb.has(xr.basename(r));)r=xr.dirname(r);return r}function fe(){let e=process.env.KYNVER_HARNESS_ROOT||process.env.OPUS_HARNESS_ROOT;if(e)return ie(e);let r=v().harnessRoot?.trim();if(r)return ie(r);let t=xr.join(op(),".kynver","harness");return tp(t)?t:tp(np)?np:t}function ge(e){return xr.join(ie(e),"runs")}function ur(e){return xr.join(ie(e),"worktrees")}function Yr(){let e=fe();return{harnessRoot:e,runsDir:ge(e),worktreesDir:ur(e)}}function Ht(e,r){return xr.join(e,b(r))}var np,Nb,_e=V(()=>{"use strict";O();ar();C();np=xr.join(op(),".openclaw","harness"),Nb=new Set(["runs","worktrees"])});import{existsSync as Tb,readdirSync as Db,statSync as Mb}from"node:fs";import Ft from"node:path";function te(){return Yr()}function L(e){let{runsDir:r}=te();return _(Ft.join(Ht(r,b(e)),"run.json"))}function J(){let{runsDir:e}=te();return sp(e)}function gs(e){return sp(ge(e))}function Ub(e){try{return Mb(e).isDirectory()}catch{return!1}}function sp(e){if(!Tb(e))return[];let r=[];for(let t of Db(e,{withFileTypes:!0})){if(t.name==="runs")continue;let n=Ft.join(e,t.name);if(!Ub(n))continue;let o=_(Ft.join(n,"run.json"),void 0);o?.id&&r.push(o)}return r}function he(e,r){let{runsDir:t}=te();return _(Ft.join(Ht(t,b(e)),"workers",b(r),"worker.json"))}function Le(e){let{runsDir:r}=te();pe(Ft.join(Ht(r,e.id),"run.json"),e)}function H(e,r){let{runsDir:t}=te();pe(Ft.join(Ht(t,e),"workers",r.name,"worker.json"),r)}function x(e){let{harnessRoot:r}=te();return Bn(r,e)}function Bn(e,r){return Ht(ge(e),b(r))}var M=V(()=>{"use strict";_e();C()});import{existsSync as Wb,readdirSync as Lb}from"node:fs";import Bb from"node:path";function ke(e){let r=new Set;for(let n of Object.keys(e.workers||{}))r.add(b(n));let t=Bb.join(x(e.id),"workers");if(!Wb(t))return[...r];for(let n of Lb(t,{withFileTypes:!0}))n.isDirectory()&&r.add(b(n.name));return[...r]}var Jr=V(()=>{"use strict";M();C()});function ol(e){let r=e.trim();if(!r.startsWith("{"))return null;try{let t=JSON.parse(r);if(t&&typeof t=="object"&&!Array.isArray(t))return t}catch{return null}return null}function ip(e){let r=e.trim();if(!r)return null;let t=ol(r);if(t)return t;let n=[],o=/```(?:json)?\s*([\s\S]*?)```/gi,s;for(;(s=o.exec(r))!==null;){let l=ol(s[1]??"");l&&n.push(l)}let i=r.indexOf("{"),a=r.lastIndexOf("}");if(i>=0&&a>i){let l=ol(r.slice(i,a+1));l&&n.push(l)}return n.length>0?n[n.length-1]:null}function ap(e){let r=e.finalResult??e.final_result;if(r!=null)return typeof r=="string"?ip(r)??(r.trim()||null):r;let t=typeof e.summary=="string"?e.summary.trim():"";if(!t)return null;let n=ip(t);return n||t}var lp=V(()=>{"use strict"});import{existsSync as Hb,readFileSync as Fb}from"node:fs";function sl(e){return e==="complete"}function qr(e){return sl(e.lastHeartbeatPhase)?e.terminalFinalResult!==void 0&&e.terminalFinalResult!==null?e.terminalFinalResult:e.lastHeartbeatSummary?.trim()||"completed":null}function ye(e){let r={heartbeatCount:0,lastHeartbeatAt:null,lastHeartbeatPhase:null,lastHeartbeatSummary:null,terminalFinalResult:null,heartbeatBlocker:null,timestampAnomalies:[],lastBoxResourceSnapshot:null,lastPrEvidence:[]};if(!Hb(e))return r;let t=Date.now()+$b,n=new Date(t).toISOString(),o=Fb(e,"utf8").split(`
+`).filter(Boolean);for(let s of o){let i=Tt(s);if(!i||typeof i!="object"||Array.isArray(i))continue;let a=i;if(r.heartbeatCount++,a.ts){let l=String(a.ts),c=Date.parse(l);Number.isFinite(c)&&c>t?r.timestampAnomalies.push({kind:"future_heartbeat_timestamp",observedAt:l,clampedTo:n}):r.lastHeartbeatAt=l}a.phase!==void 0&&a.phase!==null&&(r.lastHeartbeatPhase=String(a.phase)),a.summary!==void 0&&a.summary!==null&&(r.lastHeartbeatSummary=String(a.summary)),sl(r.lastHeartbeatPhase)&&(r.terminalFinalResult=ap(a)),r.heartbeatBlocker=a.blocker?String(a.blocker):null,a.boxResourceSnapshot&&typeof a.boxResourceSnapshot=="object"&&!Array.isArray(a.boxResourceSnapshot)&&(r.lastBoxResourceSnapshot=a.boxResourceSnapshot),Array.isArray(a.prEvidence)&&(r.lastPrEvidence=a.prEvidence.filter(l=>!!l&&typeof l=="object"&&typeof l.prUrl=="string"))}return r}var $b,Er=V(()=>{"use strict";lp();C();$b=6e4});function jb(e){return e?(e.split("/").pop()??e).replace(/\.exe$/i,"").toLowerCase():null}function Vb(e){if(!e)return[];let r=[],t="",n,o=!1;for(let s of e){if(o){t+=s,o=!1;continue}if(s==="\\"){o=!0;continue}if(n){s===n?n=void 0:t+=s;continue}if(s==='"'||s==="'"){n=s;continue}if(/\s/.test(s)){t&&(r.push(t),t="");continue}t+=s}return t&&r.push(t),r}function Gb(e){let r=jb(e[0]);return!!(r&&Kb.has(r))}function hs(e){return!e||e.includes("/")||e.includes("*")?!1:/\.(?:json|md|mjs|cjs|js|ts|tsx|yaml|yml)$/iu.test(e)}function ks(e){if(!e)return!1;let r=e.trim();return r.startsWith("!")&&!r.includes("/")&&!r.endsWith("/**")}function Yb(e){if(!e.startsWith("--glob="))return e;let r=e.slice(7);return r.startsWith("!")&&!r.includes("/")&&!r.endsWith("/**")?`--glob=${r}/**`:e}function Jb(e){let r=[];for(let t=1;t<e.length;t+=1){let n=e[t];if(n){if(n==="--"){r.push(...e.slice(t+1));break}if(n.startsWith("-")){if(n.includes("="))continue;cp.has(n)&&(t+=1);continue}r.push(n)}}return r}function up(e){let r=!1,t=e.map((o,s)=>{let i=Yb(o),a=e[s-1];return a&&cp.has(a)&&o.startsWith("!")&&!o.includes("/")&&!o.endsWith("/**")&&(i=`${o}/**`),i!==o&&(r=!0),i}),n=Jb(t);if(n.length===2){let[o,s]=n;if(ks(s))return{argv:[t[0]??"rg",o,"-g",`${s}/**`,"."],changed:!0};if(hs(s))return{argv:[t[0]??"rg","-g",s,o,"."],changed:!0}}return r&&n.length===1?{argv:[...t,"."],changed:!0}:{argv:t,changed:r}}function ys(e){let r=e.trim();if(!r)return{command:r,changed:!1};let t=r.includes("&&")?" && ":r.includes("||")?" || ":"; ",n=r.split(/\s*(?:&&|\|\||;)\s*/u),o=!1,s=n.map(i=>{let a=Vb(i.trim());if(!a.length||!Gb(a))return i;let l=up(a);return l.changed?(o=!0,l.argv.join(" ")):i});return o?{command:s.join(t),changed:!0}:{command:r,changed:!1}}function il(e){if(!e)return{};let r=e.match(/search\s+"(.+)"\s+in\s+([^()]+?)(?:\s*\(|$)/iu);if(r)return{pattern:r[1],target:r[2]?.trim()};let t=e.match(/^search\s+"(.+)"\s+in\s+(.+)$/iu);return t?{pattern:t[1],target:t[2]?.trim()}:{}}function dp(e){let{pattern:r,target:t}=il(e);return r?ks(t)?{kind:"rg_exclude_syntax",pattern:r,target:t}:hs(t)?{kind:"bad_scope",pattern:r,target:t}:{kind:"not_repo_search",pattern:r,target:t}:{kind:"not_repo_search"}}function pp(e){let{pattern:r,target:t}=il(e);if(!r)return null;if(ks(t)){let n=`${t.trim()}/**`;return{command:`rg "${r}" -g '${n}' .`,changed:!0}}return t&&hs(t)?{command:`rg -g ${t} "${r}" .`,changed:!0}:null}function mp(e){if(e.kind==="bad_scope"&&e.pattern?.includes("agent-os-land-pr")&&e.target==="package.json")return"Search package.json with a glob from the repo root: `rg -g package.json agent-os-land-pr .` \u2014 or run `node scripts/agent-os-land-pr.mjs <pr-url>` directly.";if(e.kind==="bad_scope"&&e.pattern&&e.target)return`Use \`rg -g '${e.target}' ${e.pattern} .\` from the repo root instead of treating ${e.target} as a folder.`;if(e.kind==="rg_exclude_syntax"&&e.pattern){let r=e.target?`${e.target.trim()}/**`:"!node_modules/**";return`Repo search scope \`${e.target??"!node_modules"}\` is not a valid ripgrep path. Use \`rg "${e.pattern}" -g '${r}' .\` from the repo root (exclude globs need a \`/**\` suffix).`}return e.kind==="no_matches"&&e.pattern?`No matches for "${e.pattern}". Try a broader pattern, drop overly short tokens, or search from the repo root with \`rg "${e.pattern}" .\`.`:null}function fp(e){let r=e.match(/search\s+"(.+)"\s+in\s+([^()]+?)(?:\s*\(agent\)|\s*failed|$)/iu);return r?`search "${r[1]}" in ${r[2]?.trim()}`:null}function Rs(e){let r=e.meta?.trim()||(e.command?fp(e.command):null)||null;if(r){let t=dp(r),n=mp(t);if(n)return n;let o=pp(r);if(o?.changed)return`Repo search used an invalid scope. Retry with: \`${o.command}\`.`}if(e.command&&/\b(rg|ripgrep)\b/i.test(e.command)){let t=ys(e.command);if(t.changed)return`Ripgrep scope may be invalid. Retry with: \`${t.command}\`.`;if(e.exitCode===1)return"Ripgrep returned no matches (exit 1). Try a broader pattern or search from the repo root."}return null}var Kb,cp,al=V(()=>{"use strict";Kb=new Set(["rg","ripgrep","grep"]),cp=new Set(["-e","--regexp","-f","--file","-m","--max-count","-A","--after-context","-B","--before-context","-C","--context","-g","--glob","--iglob"])});function Hn(e,r=200){let t=e.replace(/\s+/g," ").trim();return t.length>r?`${t.slice(0,r-1)}\u2026`:t}function Qb(e){let r=e.trim();if(!r)return null;if(r.startsWith("{"))try{return JSON.parse(r)}catch{}let t=r.indexOf("{"),n=r.lastIndexOf("}");if(t>=0&&n>t)try{return JSON.parse(r.slice(t,n+1))}catch{return null}return null}function Fn(e){return!!e&&typeof e=="object"&&!Array.isArray(e)}function gp(e){let r=e.metadata;if(!Fn(r))return null;let t=r.vulnerabilities;if(!Fn(t))return null;let n=s=>typeof t[s]=="number"?t[s]:0,o={info:n("info"),low:n("low"),moderate:n("moderate"),high:n("high"),critical:n("critical"),total:n("total")};return typeof t.total!="number"&&!o.critical&&!o.high&&!o.moderate&&!o.low&&!o.info?null:o}function Zb(e){let r=[];e.critical&&r.push(`${e.critical} critical`),e.high&&r.push(`${e.high} high`),e.moderate&&r.push(`${e.moderate} moderate`),e.low&&r.push(`${e.low} low`),e.info&&r.push(`${e.info} info`);let t=r.length?r.join(", "):"see report";return`npm audit: ${e.total} vulnerabilit${e.total===1?"y":"ies"} (${t}) \u2014 remediation required`}function ev(e,r){let t=e.error;if(Fn(t)){let s=typeof t.summary=="string"?t.summary.trim():"",i=typeof t.code=="string"?t.code.trim():"";if(s)return i?`${i}: ${s}`:s;if(i)return i}let n=typeof e.message=="string"?e.message.trim():"";if(n)return n;let o=r.trim();return o?Hn(o.split(`
+`).find(Boolean)??o,160):"npm audit failed"}function hp(e){let r=`${e.stdout}
+${e.stderr}`.trim(),t=Qb(r);if(!t||!Fn(t)){let o=Hn(r||`exit ${e.exitCode}`,180);return{kind:"command_failure",exitCode:e.exitCode,summary:`npm audit failed (invalid or missing JSON): ${o}`,parseError:"invalid_json"}}if(Fn(t.error))return{kind:"command_failure",exitCode:e.exitCode,summary:`npm audit command failed: ${ev(t,e.stderr)}`};let n=gp(t);return n?e.exitCode===0&&n.total===0?{kind:"success",exitCode:0,summary:"npm audit: no vulnerabilities reported",audit:n}:{kind:"audit_findings",exitCode:e.exitCode,summary:Zb(n),audit:n}:{kind:"command_failure",exitCode:e.exitCode,summary:"npm audit failed: JSON response missing vulnerability metadata",parseError:"missing_metadata"}}function rv(e){return qb.test(e)}function tv(e){return zb.test(e)}function nv(e){let r=Rs({command:e.command,exitCode:e.exitCode});if(e.exitCode===0)return{kind:"success",exitCode:0,summary:"ripgrep finished (exit 0)"};if(e.exitCode===1){let n=(e.stderr||e.interleaved).trim();if(n&&Xb.test(n)){let i=Hn(n,160);return{kind:"command_failure",exitCode:1,summary:r??`ripgrep failed (exit 1): ${i}`}}let o=ys(e.command),s=o.changed&&!r?` Retry with: \`${o.command}\`.`:"";return{kind:"search_no_matches",exitCode:1,summary:r??`ripgrep: no matches (exit 1).${s} Try a broader pattern or search from the repo root.`}}let t=Hn(e.interleaved||e.stdout||e.stderr||`exit ${e.exitCode}`,180);return{kind:"command_failure",exitCode:e.exitCode,summary:r??`ripgrep failed (exit ${e.exitCode}): ${t}`}}function bs(e){let r=e.stdout??"",t=e.stderr??"",n=e.interleavedOutput??"";if(rv(e.command)){let i=r.trim()||n.trim()||t.trim();return hp({exitCode:e.exitCode,stdout:i,stderr:t})}if(tv(e.command))return nv({command:e.command,exitCode:e.exitCode,stdout:r,stderr:t,interleaved:n});let o=Rs({command:e.command,exitCode:e.exitCode});if(o&&e.exitCode!==0)return{kind:"command_failure",exitCode:e.exitCode,summary:o};if(e.exitCode===0)return{kind:"success",exitCode:0,summary:"command succeeded (exit 0)"};let s=Hn(n||r||t||`exit ${e.exitCode}`,180);return{kind:"command_failure",exitCode:e.exitCode,summary:`command failed (exit ${e.exitCode}): ${s}`}}var qb,zb,Xb,ll=V(()=>{"use strict";al();qb=/\bnpm\s+audit\b/i,zb=/\b(rg|ripgrep)\b/i,Xb=/\b(error|invalid|unknown|panic|not found)\b/i});import{existsSync as ov,readFileSync as sv}from"node:fs";function iv(e){let r=e.timestamp_ms;return e.timestamp||e.ts||(r?new Date(r).toISOString():void 0)}function kp(e){if(!e)return null;for(let r of Object.keys(e))if(r.endsWith("ToolCall")){let t=r.slice(0,-8);return t.length?t:r}return null}function av(e,r){e.finalResult=r.result||r.subtype||r.terminal_reason||"completed",r.is_error&&(e.error=String(r.result||r.api_error_status||"stream result error"))}function yp(e){if(e.type!=="tool_call"||e.subtype!=="completed")return null;let t=(e.tool_call&&typeof e.tool_call=="object"&&!Array.isArray(e.tool_call)?e.tool_call:null)?.shellToolCall;if(!t||typeof t!="object"||Array.isArray(t))return null;let n=t,o=n.args,s=o&&typeof o=="object"&&!Array.isArray(o)&&typeof o.command=="string"?String(o.command):"",i=n.result;if(!i||typeof i!="object"||Array.isArray(i))return null;let a=i.success??i.failure;if(!a||typeof a!="object"||Array.isArray(a))return null;let l=a,c=typeof l.exitCode=="number"?l.exitCode:0;return{command:s,exitCode:c,stdout:typeof l.stdout=="string"?l.stdout:"",stderr:typeof l.stderr=="string"?l.stderr:"",interleaved:typeof l.interleavedOutput=="string"?l.interleavedOutput:""}}function lv(e,r){r.kind==="success"||r.kind==="search_no_matches"||(e.lastShellOutcome=r)}function $t(e){let r={firstEventAt:null,lastEventAt:null,currentTool:null,finalResult:null,error:null,lastShellOutcome:null};if(!ov(e))return r;let t=sv(e,"utf8").split(`
+`).filter(Boolean);for(let n of t){let o=Tt(n);if(!o)continue;let s=iv(o);if(s&&(r.firstEventAt||=s,r.lastEventAt=s),o.type==="stream_event"&&o.event&&typeof o.event=="object"&&o.event.type==="content_block_start"){let a=o.event.content_block;a?.type==="tool_use"&&(r.currentTool=String(a.name||"tool"))}if(o.type==="assistant"&&o.message&&typeof o.message=="object"){let a=o.message.content;if(Array.isArray(a)){let l=a.find(c=>c?.type==="tool_use");l&&(r.currentTool=String(l.name||r.currentTool))}}if(o.type==="tool_call"&&o.subtype==="started"){let a=o.tool_call&&typeof o.tool_call=="object"&&!Array.isArray(o.tool_call)?o.tool_call:void 0,l=kp(a);l&&(r.currentTool=l)}let i=yp(o);i&&lv(r,bs({command:i.command,exitCode:i.exitCode,stdout:i.stdout,stderr:i.stderr,interleavedOutput:i.interleaved})),o.type==="result"&&av(r,o)}return r}function cv(e){return $t(e)}function Rp(e){let r=yp(e);if(!r)return;let t=bs({command:r.command,exitCode:r.exitCode,stdout:r.stdout,stderr:r.stderr,interleavedOutput:r.interleaved}),n=ts(r.command).slice(0,120);return t.kind==="audit_findings"?`[audit:findings] ${t.summary}${n?` \xB7 ${n}`:""}`:t.kind==="search_no_matches"?`[search:no_matches] ${t.summary}${n?` \xB7 ${n}`:""}`:t.kind==="command_failure"?`[command:failed] ${t.summary}${n?` \xB7 ${n}`:""}`:`[command:ok] exit 0${n?` \xB7 ${n}`:""}`}function cl(e){if(e.type==="system"&&e.subtype)return`[system:${e.subtype}] ${String(e.status||e.cwd||"")}`.trim();if(e.type==="stream_event"&&e.event&&typeof e.event=="object"){let r=e.event.type;if(r==="content_block_start"){let t=e.event.content_block;if(t?.type==="tool_use")return`[tool:start] ${t.name}`}if(r==="content_block_delta"){let t=e.event.delta;if(t?.partial_json)return`[tool:input] ${t.partial_json}`}return r==="message_stop"?"[message:stop]":r?`[stream:${r}]`:void 0}if(e.type==="assistant"&&e.message&&typeof e.message=="object"){let r=e.message.content;if(Array.isArray(r)){let t=r.find(o=>o?.type==="text");if(t)return`[assistant] ${ts(String(t.text||""))}`;let n=r.find(o=>o?.type==="tool_use");if(n)return`[tool] ${n.name} ${JSON.stringify(n.input||{})}`}}if(e.type==="user"&&e.tool_use_result){let r=e.tool_use_result;return`[tool:result] stdout=${JSON.stringify(r.stdout||"")} stderr=${JSON.stringify(r.stderr||"")}`}if(e.type==="tool_call"){let r=String(e.subtype||""),t=r==="completed"?Rp(e):void 0;if(t)return t;let n=e.tool_call&&typeof e.tool_call=="object"&&!Array.isArray(e.tool_call)?e.tool_call:void 0,o=kp(n)??"tool";return`[tool:${r}] ${o}`}if(e.type==="result")return`[result] ${e.subtype||""} ${ts(String(e.result||""))}`.trim()}var $n=V(()=>{"use strict";ll();C()});function dv(e,r=240){let t=e.replace(/\s+/g," ").trim();return t.length>r?`${t.slice(0,r-1)}\u2026`:t}function bp(e){let r=(e??"").trim();if(!r)return null;for(let t of uv)if(t.test.test(r))return{blocked:!0,reason:`${t.label}: ${dv(r)}`};return null}var uv,vp=V(()=>{"use strict";uv=[{test:/\b(?:invalid|unknown|unsupported|unrecognized)\b[^.\n]*\bmodel\b/i,label:"provider rejected the requested model"},{test:/\bmodel\b[^.\n]*\b(?:not\s+(?:found|supported|available|recognized|valid)|is\s+not\s+valid|does\s+not\s+exist)/i,label:"provider rejected the requested model"},{test:/\b(?:did you mean|available models|choose (?:a|one of)|supported models)\b/i,label:"provider rejected the requested model"},{test:/model preflight failed/i,label:"model/provider preflight failed"},{test:/\b(?:command not found|ENOENT|is the .*CLI on PATH|executable not found|no such file or directory)\b/i,label:"provider CLI is missing or not on PATH"},{test:/\bfailed to spawn\b/i,label:"provider failed to spawn the worker process"},{test:/\b(?:not logged in|unauthorized|authentication (?:failed|required)|invalid api key|missing api key|401)\b/i,label:"provider authentication failed"}]});function Sp(e){if(typeof e!="string")return null;let r=e.trim();return r.length?r:null}function pv(e){return e==null?!1:typeof e=="string"?e.trim().length>0:typeof e=="boolean"?e:Array.isArray(e)?e.length>0:typeof e=="object"?Object.keys(e).length>0:!0}function mv(e){return!e?.checked||e.headIsAncestorOfBase!==!1?null:Sp(e.head)}function fv(e,r,t){let n=["exited_with_changes_salvage"];if((e==="uncommitted"||e==="both")&&n.push(`${r} uncommitted change${r===1?"":"s"} with no final result`),(e==="committed_ahead"||e==="both")&&t){let o=t.length>12?t.slice(0,12):t;n.push(`commit ${o} ahead of base with no final result`)}return n.push("review worktree \u2014 commit, open a PR, or run a salvage worker before discarding"),n.join(": ")}function zr(e){if(e.alive||pv(e.finalResult))return null;let r=(e.changedFiles??[]).filter(i=>i.trim()).length,t=Sp(e.headCommit)??mv(e.gitAncestry),n=r>0,o=!!t;if(!n&&!o)return{kind:"none",salvageable:!1,uncommittedCount:0,headCommit:null,attentionReason:"process exited without a final result"};let s=n&&o?"both":n?"uncommitted":"committed_ahead";return{kind:s,salvageable:!0,uncommittedCount:r,headCommit:t,attentionReason:fv(s,r,t)}}var Kn=V(()=>{"use strict"});function jn(e){if(typeof e!="string")return null;let r=e.trim();return r.length?r:null}function gv(e){return e==null?!1:typeof e=="string"?e.trim().length>0:typeof e=="boolean"?e:Array.isArray(e)?e.length>0:typeof e=="object"?Object.keys(e).length>0:!0}function hv(e){if(jn(e.headCommit)||jn(e.prUrl)||jn(e.artifactBundlePath)||jn(e.patchPath))return!0;let r=e.gitAncestry;return!!(r?.checked&&r.headIsAncestorOfBase===!1&&jn(r.head))}function Xr(e){return gv(e.finalResult)?e.changedFiles.length===0?{blocked:!1}:hv(e)?{blocked:!0,detail:`Worktree has ${e.changedFiles.length} uncommitted change(s); commit or discard before landing`}:{blocked:!0,reason:"dirty_worktree_no_pr",detail:`Worktree has ${e.changedFiles.length} uncommitted change(s) with no commit or PR; commit, open a PR, or discard before landing`}:{blocked:!1}}function Cp(e){if(e.blocked)return e.detail??e.reason??"dirty_worktree_no_pr"}var Vn=V(()=>{"use strict"});function ul(e){let r=e.trim();if(!r.startsWith("{"))return null;try{let t=JSON.parse(r);if(t&&typeof t=="object"&&!Array.isArray(t))return t}catch{return null}return null}function wp(e){let r=e.targetPrReconciliation??e.target_pr_reconciliation??e.targetPrs??e.target_prs;return Array.isArray(r)?r.length:0}function Kt(e){let r=e.trim();if(!r)return null;let t=ul(r);if(t)return t;let n=[],o=/```(?:json)?\s*([\s\S]*?)```/gi,s;for(;(s=o.exec(r))!==null;){let u=ul(s[1]??"");u&&n.push(u)}let i=r.indexOf("{"),a=r.lastIndexOf("}");if(i>=0&&a>i){let u=ul(r.slice(i,a+1));u&&n.push(u)}if(n.length===0)return null;let l=n[n.length-1],c=wp(l);for(let u of n){let d=wp(u);d>c&&(l=u,c=d)}return l}var vs=V(()=>{"use strict"});function jt(e){if(typeof e!="string")return null;let r=e.trim();return r.length?r:null}function kv(e){return e==null?!1:typeof e=="string"?e.trim().length>0:typeof e=="object"?Object.keys(e).length>0:!0}function Qr(e){let r=e.trim().match(/github\.com\/([^/]+\/[^/]+)\/(?:pull|pulls)\/(\d+)/i);return r?`https://github.com/${r[1]}/pull/${r[2]}`:jt(e)}function Ss(e){let r=e.trim().match(/github\.com\/([^/]+\/[^/]+)\/(?:pull|pulls)\/(\d+)/i);return r?`${r[1].toLowerCase()}/pull/${r[2]}`:e.trim().toLowerCase()}function _p(e){let r=null;if(typeof e=="string"){let o=Kt(e);o&&(r=o)}else e&&typeof e=="object"&&!Array.isArray(e)&&(r=e);if(!r)return[];let t=r.targetPrReconciliation??r.target_pr_reconciliation;if(!Array.isArray(t))return[];let n=[];for(let o of t){if(!o||typeof o!="object"||Array.isArray(o))continue;let s=o,i=Qr(String(s.prUrl??s.pr_url??"")),a=jt(s.outcome);!i||a!=="merged"&&a!=="skipped"&&a!=="blocked"||n.push({prUrl:i,outcome:a,mergeCommit:jt(s.mergeCommit??s.merge_commit),reason:jt(s.reason)})}return n}function xp(e,r){let t=[],n=Qr(jt(e.prUrl)??"");if(n&&t.push(n),r&&typeof r=="object"&&!Array.isArray(r)){let o=r,s=Qr(String(o.prUrl??o.pr_url??""));s&&t.push(s)}return[...new Set(t)]}function dl(e){let{contract:r,snapshot:t}=e,n=e.finalResult??t.finalResult;if(!r.landingOnly&&r.targetPrUrls.length===0&&!r.repairEnforceOriginalPr)return{blocked:!1};if(!kv(n))return(r.requiresTargetPrReconciliation??(r.landingOnly||!!r.repairEnforceOriginalPr||r.targetPrUrls.length>0))&&r.targetPrUrls.length>0?{blocked:!0,reason:"missing_target_pr_reconciliation",detail:`Final result required to reconcile target PR(s): ${r.targetPrUrls.join(", ")}`}:{blocked:!1};if(!(r.requiresTargetPrReconciliation??(r.landingOnly||!!r.repairEnforceOriginalPr||r.targetPrUrls.length>0))&&!r.repairEnforceOriginalPr)return{blocked:!1};let s=r.repairEnforceOriginalPr?Qr(jt(r.targetPrUrl)??"")??(r.targetPrUrls.length===1?Qr(r.targetPrUrls[0]):null):null;if(s){let d=xp(t,n);if(!(n&&typeof n=="object"&&!Array.isArray(n)&&n.supersedesOriginalTargetPr===!0)){for(let h of d)if(h!==s)return{blocked:!0,reason:"duplicate_repair_pr",detail:`Repair worker opened or attached PR ${h} instead of canonical target ${s}`}}let p=_p(n).find(h=>h.prUrl===s);if(!p||p.outcome!=="merged"&&!(p.reason?.trim()&&(p.outcome==="skipped"||p.outcome==="blocked")))return{blocked:!0,reason:"missing_repair_target_reconciliation",detail:`Repair worker must reconcile target PR ${s}`}}let i=_p(n),a=new Map(i.map(d=>[Ss(d.prUrl),d])),l=new Set(r.targetPrUrls.map(d=>Ss(Qr(d)??d)).filter(Boolean)),c=xp(t,n);if(r.landingOnly)for(let d of c){if(l.size>0&&!l.has(Ss(d)))return{blocked:!0,reason:"unrelated_implementation_pr",detail:`Landing-only worker attached unrelated PR ${d}`};if(l.size===0)return{blocked:!0,reason:"unrelated_implementation_pr",detail:"Landing-only worker must not open new implementation PRs"}}if(r.targetPrUrls.length===0)return{blocked:!1};let u=[];for(let d of r.targetPrUrls){let f=Ss(Qr(d)??d),m=a.get(f);if(!m){u.push(f);continue}m.outcome!=="merged"&&!m.reason?.trim()&&u.push(f)}return u.length>0?{blocked:!0,reason:u.every(d=>a.has(d))?"incomplete_target_pr_landing":"missing_target_pr_reconciliation",detail:`Target PR reconciliation incomplete: ${u.join(", ")}`}:{blocked:!1}}function pl(e){if(e.blocked)return e.detail??e.reason}var ml=V(()=>{"use strict";vs()});function Ep(e){let r=Date.now();if(e.completionBlocker&&!Pp(e.completionBlocker))return{state:"blocked",reason:e.completionBlocker};if(e.finalResult){if(e.localOnly&&bv(e.finalResult))return{state:"done",reason:"local-only worker superseded by merged PR"};let o={finalResult:e.finalResult,changedFiles:e.changedFiles??[],gitAncestry:e.gitAncestry??null,prUrl:e.prUrl??null},s=Xr(o);if(s.blocked){let i=Cp(s);return{state:"needs_attention",reason:s.reason?`landing blocked (${s.reason}): ${i}`:`landing blocked: ${i}`}}if(e.landingContract){let i=dl({contract:e.landingContract,snapshot:o,finalResult:e.finalResult}),a=pl(i);if(a)return{state:"needs_attention",reason:i.reason?`landing contract (${i.reason}): ${a}`:`landing contract: ${a}`}}return{state:"done",reason:"final result recorded"}}if(!e.alive){if(Rv(e))return{state:"done",reason:"empty abandoned worker record"};let o=bp(e.error);if(o)return{state:"blocked",reason:o.reason};let s=zr({alive:!1,finalResult:null,changedFiles:e.changedFiles,gitAncestry:e.gitAncestry});if(s?.salvageable){let a=e.error?.trim();return{state:"needs_attention",reason:a?`${s.attentionReason} (${a})`:s.attentionReason}}let i=e.error?.trim();return{state:"needs_attention",reason:i?`process exited without a final result: ${i}`:s?.attentionReason??"process exited without a final result"}}if(e.heartbeatBlocker)return{state:"blocked",reason:`worker heartbeat reported blocker: ${e.heartbeatBlocker}`};let t=e.startedAt?Date.parse(e.startedAt):NaN;if(!e.firstEventAt&&e.stdoutBytes===0&&e.heartbeatBytes===0&&Number.isFinite(t)&&r-t>yv)return{state:"needs_attention",reason:`no first stream event ${La(t)}s after start`};let n=e.lastActivityAt?Date.parse(e.lastActivityAt):NaN;return Number.isFinite(n)&&r-n>Vt?{state:"stale",reason:`no log/event/heartbeat activity for ${La(n)}s`}:{state:"ok",reason:"recent activity"}}function Pp(e){let r=e?.trim();return r?/completion acknowledged but board not advanced/i.test(r)&&/task already terminal/i.test(r):!1}function Rv(e){return e.finalResult||e.taskId||e.agentOsId||e.stdoutBytes>0||(e.stderrBytes??0)>0||e.heartbeatBytes>0||e.error?.trim()||(e.changedFiles??[]).some(r=>r.trim())?!1:/empty worker dir|marked abandoned/i.test(e.reconcileReason??"")}function bv(e){let r=null;if(typeof e=="string"?r=Kt(e):e&&typeof e=="object"&&!Array.isArray(e)&&(r=e),!r)return!1;let t=r.targetPrReconciliation??r.target_pr_reconciliation;return Array.isArray(t)?t.some(n=>!n||typeof n!="object"||Array.isArray(n)?!1:String(n.outcome??"").trim()==="merged"):!1}function vv(e,r,t){let n=e.completionSnapshot?.finalResult;return e.completionAckSource==="local-pr-merged-reconcile"&&n!==void 0&&n!==null?n:r||(n??qr(t))}function T(e,r={}){let t=$t(e.stdoutPath),n=ye(e.heartbeatPath),o=typeof e.completionReportedAt=="string"&&e.completionReportedAt.trim().length>0,s=vv(e,t.finalResult,n),i=o?!1:B(e.pid),a=ns(e.stdoutPath),l=ns(e.stderrPath),c=ns(e.heartbeatPath),u=Dn(e.worktreePath),d=is(e.worktreePath,{base:r.base,baseCommit:r.baseCommit}),f=Ad([t.lastEventAt,n.lastHeartbeatAt,os(e.stdoutPath),os(e.stderrPath),os(e.heartbeatPath)]),m=t.error||!i&&!s&&ss(e.stderrPath,10).trim()||void 0,p=typeof e.completionBlocker=="string"&&e.completionBlocker.trim()?e.completionBlocker.trim():null,h=Pp(p)?null:p,k=e.repairTargetPrUrl?{landingOnly:!1,targetPrUrls:[e.repairTargetPrUrl],targetPrUrl:e.repairTargetPrUrl,repairEnforceOriginalPr:!0}:null,g=Ep({alive:i,finalResult:s,firstEventAt:t.firstEventAt,stdoutBytes:a,stderrBytes:l,heartbeatBytes:c,lastActivityAt:f,heartbeatBlocker:n.heartbeatBlocker,startedAt:e.startedAt,error:m,changedFiles:u,gitAncestry:d,completionBlocker:h,landingContract:k,prUrl:e.repairTargetPrUrl??e.taskPrUrl??null,localOnly:e.localOnly===!0,taskId:e.taskId??null,agentOsId:e.agentOsId??null,reconcileReason:e.reconcileReason??null}),R=h||g.state==="blocked"?"blocked":o||g.state==="done"?"done":s?"exited":i?"running":"exited";return{runId:e.runId,worker:e.name,pid:e.pid,alive:i,status:R,attention:g,branch:e.branch,worktreePath:e.worktreePath,ownedPaths:e.ownedPaths,stdoutBytes:a,stderrBytes:l,heartbeatBytes:c,firstEventAt:t.firstEventAt,lastEventAt:t.lastEventAt,lastActivityAt:f,currentTool:o?null:t.currentTool,heartbeatCount:n.heartbeatCount,lastHeartbeatAt:n.lastHeartbeatAt,lastHeartbeatPhase:n.lastHeartbeatPhase,lastHeartbeatSummary:n.lastHeartbeatSummary,heartbeatBlocker:n.heartbeatBlocker,timestampAnomalies:n.timestampAnomalies,finalResult:s,error:m,changedFiles:u,gitAncestry:d,instructionPolicyFingerprint:e.instructionPolicyFingerprint??null,instructionPolicyEvidence:e.instructionPolicyEvidence??null,model:e.model??e.orchestrationAudit?.model??null,provider:e.orchestrationAudit?.provider??null,boxKind:e.boxKind??null,boxId:e.boxId??null,runtimeId:e.runtimeId??null,personaSlug:e.personaSlug??null,dispatched:e.dispatched??null,localOnly:e.localOnly??null}}function ne(e){return!!(e.finalResult||e.alive===!1||e.status==="exited"||e.status==="done")}function Zr(e){return e.finalResult?e.attention.state==="needs_attention"||e.attention.state==="blocked":!1}function Gt(e,r){return r.length===0?e:r.some(t=>t.attention==="needs_attention"||t.attention==="stale"||t.attention==="blocked")?"needs_attention":r.every(t=>t.status==="done")?"done":r.some(t=>t.status==="running")?"running":e}var yv,Vt,Y=V(()=>{"use strict";Er();$n();vp();Kn();Ee();Vn();ml();vs();C();yv=18e4,Vt=6e5});import{readFileSync as Sv}from"node:fs";function Cv(e){if(!e||process.platform!=="linux")return null;try{return Sv(`/proc/${e}/cmdline`,"utf8").replace(/\0/g," ")}catch{return null}}function Cs(e){if(!e.pid||process.platform!=="linux")return!0;let r=Cv(e.pid);return r?[e.worktreePath,e.workerDir,e.heartbeatPath].filter(n=>typeof n=="string"&&n.trim().length>0).some(n=>r.includes(n)):!1}function Gn(e){if(typeof e.completionBlocker=="string"&&e.completionBlocker.trim())return!1;let r=T(e);return r.alive&&!Cs(e)?!1:r.alive&&!r.finalResult&&r.attention.state!=="done"}var Yn=V(()=>{"use strict";Y()});import Ip from"node:os";import wv from"node:path";function Ap(e,r){let t=Number(e);return!Number.isFinite(t)||t<=0?r:Math.floor(t)}function _v(e=v(),r,t){let n=Ap(e.perWorkerMemBytes,Jn),o=Ap(e.memReserveBytes,qn),s=Math.min(1,Math.max(.1,Number(e.memUtilization)>0?Number(e.memUtilization):zn)),i=_s({config:e,configuredMaxWorkersOverride:r,totalMemBytes:t??Ip.totalmem()});return{perWorkerMemBytes:n,memReserveBytes:o,memUtilization:s,configuredMaxWorkers:i.configuredMaxWorkers,autoCap:i.autoCap,workerCapSource:i.workerCapSource}}function fl(e,r={}){let t=r.perWorkerMemBytes??Jn,n=r.memReserveBytes??qn,o=r.memUtilization??zn,s=Math.max(0,Math.floor(e*o)-n),i=Math.max(1,Math.floor(s/t));return Math.min(i,ws)}function xv(){return Wt()}function Ev(e){let r=0;for(let t of ke(e)){let n=_(wv.join(x(e.id),"workers",b(t),"worker.json"),void 0);!n||!Gn(n)||r++}return r}function Pv(){let e=0;for(let r of J())e+=Ev(r);return e}function dr(e){let r=e.config??v(),t=e.totalMemBytes??Ip.totalmem(),{perWorkerMemBytes:n,memReserveBytes:o,memUtilization:s,configuredMaxWorkers:i,autoCap:a,workerCapSource:l}=_v(r,e.configuredMaxWorkersOverride,t),c=Ge(r),u=e.freeMemBytes??xv(),d=e.activeWorkers??Pv(),f=Math.max(0,Math.floor(t*s)-o),m=Math.max(0,Math.floor(f/n)),p=Math.max(0,Math.floor(Math.max(0,u-o)/n)),h=a,g=Math.max(0,Math.min(i??h,m)),R=Math.max(0,g-d),E=Math.min(R,p),D=e.skipDiskGate||process.env.KYNVER_RESOURCE_GATE_SKIP_DISK==="1"?void 0:We({diskPath:e.diskPath?.trim()||process.env.KYNVER_DISK_GUARD_PATH?.trim()||"/"});D&&!D.ok&&(E=0);let j=null;return E<=0&&(D&&!D.ok?j=D.reason??"disk gate blocked worker admission":d>=g?j=`at worker limit (${d}/${g} running)`:p<=0?j="insufficient free memory \u2014 waiting for workers to finish":j="no worker slots available"),{ok:E>0,totalMemBytes:t,freeMemBytes:u,memReserveBytes:o,perWorkerMemBytes:n,configuredMaxWorkers:i,workerCapSource:l,boxKind:c,autoCap:h,capacityWorkers:m,maxConcurrentWorkers:g,activeWorkers:d,slotsAvailable:E,reason:j,...D?{diskGate:D}:{}}}var Jn,qn,zn,ws,Yt=V(()=>{"use strict";us();O();Ue();xs();Bt();M();Jr();Yn();C();Jn=500*1024*1024,qn=4*1024*1024*1024,zn=.85,ws=64});function et(e,r){let t=Number(e);return!Number.isFinite(t)||t<=0?r:Math.floor(t)}function _s(e){let r=e.config??{},t=e.env??process.env,n=et(r.perWorkerMemBytes,Jn),o=et(r.memReserveBytes,qn),s=Math.min(1,Math.max(.1,Number(r.memUtilization)>0?Number(r.memUtilization):zn)),i=fl(e.totalMemBytes,{perWorkerMemBytes:n,memReserveBytes:o,memUtilization:s});if(e.configuredMaxWorkersOverride!==void 0&&e.configuredMaxWorkersOverride!==null)return{configuredMaxWorkers:et(e.configuredMaxWorkersOverride,i),autoCap:i,workerCapSource:"workspace_override"};if(r.maxConcurrentWorkers!==void 0&&r.maxConcurrentWorkers!==null){let c=et(r.maxConcurrentWorkers,0)||null;if(c)return{configuredMaxWorkers:Math.min(c,ws),autoCap:i,workerCapSource:"config"}}let l=(t.KYNVER_MAX_WORKERS_INTENTIONAL==="1"||t.KYNVER_MAX_WORKERS_INTENTIONAL==="true")&&t.KYNVER_MAX_WORKERS&&et(t.KYNVER_MAX_WORKERS,0)||null;return l?{configuredMaxWorkers:Math.min(l,ws),autoCap:i,workerCapSource:"env"}:{configuredMaxWorkers:null,autoCap:i,workerCapSource:"auto"}}function gl(e={}){let r=e.totalMemBytes??0,t=fl(r,{perWorkerMemBytes:et(e.config?.perWorkerMemBytes,Jn),memReserveBytes:et(e.config?.memReserveBytes,qn),memUtilization:e.config?.memUtilization&&Number(e.config.memUtilization)>0?Number(e.config.memUtilization):zn}),n=e.diskGateOk??!0,o=n?t:Math.max(1,Math.min(t,4));return{totalMemBytes:r,autoCap:t,recommendedMaxWorkers:o,diskPath:e.diskPath??"/",diskGateOk:n,diskFreeBytes:e.diskFreeBytes??null}}var xs=V(()=>{"use strict";Yt()});var Np={};MR(Np,{runDeviceLogin:()=>hl});import Op from"node:os";function Av(e){let r=(typeof e.apiBaseUrl=="string"?e.apiBaseUrl:void 0)||(typeof e.baseUrl=="string"?e.baseUrl:void 0)||process.env.KYNVER_API_URL||v().apiBaseUrl;return r?ir(String(r)):void 0}async function Iv(e){await new Promise(r=>setTimeout(r,e))}async function hl(e){let r=Av(e);if(!r)return console.error("kynver login (device flow) requires a Kynver URL \u2014 pass --api-base-url https://your-kynver-site, set KYNVER_API_URL, or run `kynver setup` first."),{ok:!1};let t=`${Op.hostname()} (${Op.platform()})`,n;try{let a=await fetch(`${r}/api/auth/device/code`,{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify({clientName:t})});if(!a.ok)return console.error(`Could not start device authorization (${a.status}).`),{ok:!1};n=await a.json()}catch(a){return console.error(`Could not reach ${r}: ${a.message}`),{ok:!1}}let o=n.verification_uri_complete||n.verification_uri;console.log(""),console.log("  Authorize this machine:"),console.log(`    1. Open: ${o}`),console.log(`    2. Confirm the code: ${n.user_code}`),console.log(""),console.log("  Waiting for approval\u2026");let s=Date.now()+n.expires_in*1e3,i=Math.max(1,n.interval)*1e3;for(;Date.now()<s;){await Iv(i);let a;try{a=await(await fetch(`${r}/api/auth/device/token`,{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify({device_code:n.device_code})})).json().catch(()=>({}))}catch{continue}switch(a.status){case"approved":return a.api_key?(Xn(a.api_key),console.log("  Approved \u2014 this machine is now linked to your Kynver account."),{ok:!0,apiKey:a.api_key}):{ok:!1};case"slow_down":i+=2e3;break;case"authorization_pending":typeof a.interval=="number"&&(i=Math.max(i,a.interval*1e3));break;case"access_denied":return console.error("  Request was denied in the browser."),{ok:!1};case"expired_token":return console.error("  The code expired before it was approved. Run `kynver login` again."),{ok:!1};default:break}}return console.error("  Timed out waiting for approval. Run `kynver login` again."),{ok:!1}}var kl=V(()=>{"use strict";O();C()});import{existsSync as Dp,mkdirSync as Mp,readFileSync as Up,writeFileSync as Wp}from"node:fs";import{homedir as Ov,totalmem as Nv}from"node:os";import yl from"node:path";import Tv from"node:os";function Qn(e){let r=String(e??"").trim();if(!r)return{ok:!1,reason:"missing"};let t=r.toLowerCase();return Mv.has(t)?{ok:!1,value:r,reason:"placeholder"}:Dv.test(r)?{ok:!0,value:r}:{ok:!1,value:r,reason:"not a UUID"}}function As(e){let r=Qn(e),t=r.value??String(e??"").trim(),n=t?`"${t}"`:"<empty>",o=r.reason==="placeholder"?"looks like a placeholder":r.reason??"is invalid";return[`Invalid AgentOS id ${n}: ${o}.`,"AgentOS ids are UUIDs from the AgentOS registry, not slugs or examples (for example, not `aos`).","Fix: run `kynver bootstrap` to relink this runner, or run `kynver setup --agent-os-id <uuid>` / pass `--agent-os-id <uuid>` after copying the id from Command Center.","If this came from stale ~/.kynver/config.json, remove or replace the agentOsId value before starting the daemon."].join(" ")}function v(){if(!Dp(Es))return{};try{return JSON.parse(Up(Es,"utf8"))}catch{return{}}}function Ye(e){Mp(Ps,{recursive:!0}),Wp(Es,`${JSON.stringify(Rl(e),null,2)}
+`,{mode:384})}function Rl(e){return{...e,...e.harnessRoot?.trim()?{harnessRoot:we(e.harnessRoot.trim())}:{},...e.defaultRepo?.trim()?{defaultRepo:we(e.defaultRepo.trim())}:{}}}function qt(e){return Rl(e)}function Uv(e,r){let t=Zn(),n=(typeof r.apiBaseUrl=="string"?r.apiBaseUrl:void 0)||e.apiBaseUrl?.trim()||process.env.KYNVER_API_URL?.trim()||process.env.KYNVER_CRON_FIRE_BASE_URL?.trim()||process.env.OPENCLAW_CRON_FIRE_BASE_URL?.trim(),o=(typeof r.agentOsId=="string"?r.agentOsId:void 0)||e.agentOsId?.trim()||process.env.KYNVER_AGENT_OS_ID?.trim()||(t.runnerToken?.trim().startsWith("krc1.")?t.runnerTokenAgentOsId?.trim():void 0),i=(typeof r.repo=="string"?r.repo:r.discoverRepo===!0||r.discoverRepo==="true"?jr()?.repo:void 0)||e.defaultRepo?.trim()||process.env.KYNVER_DEFAULT_REPO?.trim()||process.env.KYNVER_HARNESS_REPO?.trim()||Mn()?.repo,a=(typeof r.harnessRoot=="string"?r.harnessRoot:void 0)||e.harnessRoot?.trim()||process.env.KYNVER_HARNESS_ROOT?.trim()||process.env.OPUS_HARNESS_ROOT?.trim();return{...n?{apiBaseUrl:ir(n)}:{},...o?{agentOsId:o}:{},...i?{defaultRepo:i}:{},...a?{harnessRoot:a}:{},...typeof r.agentOsSlug=="string"?{agentOsSlug:r.agentOsSlug}:e.agentOsSlug?{agentOsSlug:e.agentOsSlug}:{}}}function Wv(e,r,t=Nv()){let n=typeof r.maxWorkers=="string"?r.maxWorkers:typeof r.maxConcurrentWorkers=="string"?r.maxConcurrentWorkers:void 0,o=typeof r.boxKind=="string"?r.boxKind:typeof r["box-kind"]=="string"?String(r["box-kind"]):void 0,s=Me(process.env,{...e,...o?{boxKind:Ut(o)}:{}}).boxKind,i=We({diskPath:typeof r.diskPath=="string"?r.diskPath:"/"}),a=gl({totalMemBytes:t,diskPath:i.path,diskGateOk:i.ok,diskFreeBytes:i.freeBytes,config:e});return n?{maxConcurrentWorkers:Math.max(1,Math.floor(Number(n))),maxConcurrentWorkersSource:"setup-flag",boxKind:s}:e.maxConcurrentWorkers!==void 0&&e.maxConcurrentWorkers!==null?{maxConcurrentWorkers:Math.max(1,Math.floor(Number(e.maxConcurrentWorkers))),maxConcurrentWorkersSource:e.maxConcurrentWorkersSource??"operator",boxKind:s}:{maxConcurrentWorkers:a.recommendedMaxWorkers,maxConcurrentWorkersSource:"setup-auto",boxKind:s}}function Zn(){if(!Dp(Jt))return{};try{return JSON.parse(Up(Jt,"utf8"))}catch{return{}}}function Lp(e){Mp(Ps,{recursive:!0}),Wp(Jt,`${JSON.stringify(e,null,2)}
+`,{mode:384})}function oe(){return process.env.KYNVER_API_KEY?process.env.KYNVER_API_KEY:Zn().apiKey}function Xn(e){Lp({...Zn(),apiKey:e})}function Tp(e){let r=process.env.KYNVER_RUNNER_TOKEN?.trim();if(r)return r;let t=Zn();if(t.runnerToken&&!(e&&t.runnerTokenAgentOsId&&t.runnerTokenAgentOsId!==e))return t.runnerToken}function rt(e,r){Lp({...Zn(),runnerToken:r,runnerTokenAgentOsId:e})}function K(e){let r=eo(e);return r||ro("requires --base-url, KYNVER_API_URL, KYNVER_CRON_FIRE_BASE_URL, or ~/.kynver/config.json apiBaseUrl"),r}function bl(e){return eo(e)}function eo(e){let r=e||process.env.KYNVER_API_URL||process.env.KYNVER_CRON_FIRE_BASE_URL||process.env.OPENCLAW_CRON_FIRE_BASE_URL||v().apiBaseUrl;return r?ir(String(r)):void 0}function Bp(e,r){let t=e||Tp(r)||(r?void 0:Tp(v().agentOsId));if(t)return String(t);let n=process.env.KYNVER_RUNTIME_SECRET||process.env.KYNVER_CRON_SECRET||process.env.OPENCLAW_CRON_SECRET;if(n)return console.warn("[kynver] using deployment-level callback secret; run `kynver runner credential --agent-os-id <id>` for a scoped token"),String(n)}function Lv(e,r){let t=Bp(e,r);if(t)return t;ro("requires --secret, KYNVER_RUNNER_TOKEN, a scoped runner token (`kynver runner credential`), ~/.kynver/credentials runnerToken, KYNVER_API_KEY with an API base URL to mint one, or (legacy) KYNVER_RUNTIME_SECRET / KYNVER_CRON_SECRET / OPENCLAW_CRON_SECRET")}async function Is(e,r,t){let n=Bp(e,r);if(n)return{ok:!0,secret:n};let o=oe(),s=eo(t?.baseUrl);if(o&&r&&s)try{let i=await tt(r,{baseUrl:s,apiKey:o});return rt(r,i),{ok:!0,secret:i}}catch(i){return{ok:!1,reason:`runner credential mint failed: ${i.message}`}}return{ok:!1,reason:"no runner credential: requires --secret, KYNVER_RUNNER_TOKEN, a scoped runner token (`kynver runner credential`), ~/.kynver/credentials runnerToken, or KYNVER_API_KEY + API base URL to mint one"}}async function G(e,r,t){let n=await Is(e,r,t);if(n.ok)return n.secret;ro(n.reason)}async function Hp(e,r){let t=oe(),n=eo(r?.baseUrl);if(!t||!e||!n)return null;try{let o=await tt(e,{baseUrl:n,apiKey:t});return rt(e,o),o}catch{return null}}async function Fp(e,r,t){let n=oe(),o=eo(t?.baseUrl);if(!n)return{ok:!1,reason:"KYNVER_API_KEY is required to refresh a rejected runner token"};if(!r)return{ok:!1,reason:"agentOsId is required to refresh a rejected runner token"};if(!o)return{ok:!1,reason:"KYNVER_API_URL or --base-url is required to refresh a rejected runner token"};try{let s=await tt(r,{baseUrl:o,apiKey:n});return s&&s!==e?(rt(r,s),{ok:!0,token:s}):{ok:!1,reason:"runner credential refresh returned the rejected token"}}catch(s){return{ok:!1,reason:s.message}}}async function tt(e,r){let t=r?.apiKey||oe();if(!t)throw new Error("API key required \u2014 run `kynver login` first");let o=`${K(r?.baseUrl)}/api/agent-os/by-id/${encodeURIComponent(e)}/runner-credentials`,s=await fetch(o,{method:"POST",headers:{"Content-Type":"application/json",Authorization:`Bearer ${t}`},body:JSON.stringify({})}),i=await s.text(),a=null;try{a=JSON.parse(i)}catch{a=null}if(!s.ok||!a?.token)throw new Error(`runner credential mint failed (${s.status}): ${a?.error??i.slice(0,200)}`);return a.token}async function $p(e){let r=(e.agentOsId?String(e.agentOsId):v().agentOsId)||"";r||ro("runner credential requires --agent-os-id or agentOsId in ~/.kynver/config.json");try{let t=await tt(r,{baseUrl:e.baseUrl?String(e.baseUrl):void 0});rt(r,t),console.log(JSON.stringify({ok:!0,agentOsId:r,credentialsPath:q(Jt),tokenPrefix:`${t.slice(0,12)}\u2026`,note:"Scoped runner token saved; callbacks use X-Kynver-Runner-Token."},null,2))}catch(t){console.error(t instanceof Error?t.message:String(t)),process.exit(1)}}function ro(e){console.error(e),process.exit(1)}function to(e){let r={};for(let t=0;t<e.length;t++){let n=e[t];if(!n.startsWith("--"))continue;let o=n.slice(2).replace(/-([a-z])/g,(i,a)=>a.toUpperCase()),s=e[t+1];!s||s.startsWith("--")?r[o]=!0:(r[o]=s,t++)}return r}async function Os(e){let r=v(),t=We({diskPath:typeof e.diskPath=="string"?e.diskPath:"/"}),n=gl({totalMemBytes:Tv.totalmem(),diskPath:t.path,diskGateOk:t.ok,diskFreeBytes:t.freeBytes,config:r}),o=Wv(r,e),s=Rl({...r,...Uv(r,e),...o,workerProvider:typeof e.provider=="string"?e.provider:r.workerProvider||"cursor",...e.chatOauth===!0?{chatUseClaudeOauth:!0}:{}});s.agentOsId&&!Qn(s.agentOsId).ok&&ro(As(s.agentOsId)),Ye(s);let i=Me(process.env,s),a,l=oe(),c=s.agentOsId;if(l&&c)try{let u=await tt(c,{baseUrl:typeof e.apiBaseUrl=="string"?e.apiBaseUrl:s.apiBaseUrl,apiKey:l});rt(c,u),a="Scoped runner token minted and saved to ~/.kynver/credentials."}catch{a="Runner token not minted (server offline or master secret unset). Run `kynver runner credential` after deploy."}console.log(JSON.stringify({ok:!0,configPath:q(Es),config:qt(s),boxKind:s.boxKind,boxKindSource:i.source,workerCapRecommendation:n,...i.warnings.length?{boxIdentityWarnings:i.warnings}:{},note:a??"boxKind and maxConcurrentWorkers persisted; override with --box-kind and --max-workers. Run `kynver login` + `kynver runner credential` for scoped callbacks."},null,2))}async function Kp(e){let r=typeof e.apiKey=="string"?e.apiKey:process.env.KYNVER_API_KEY;if(r){Xn(r),console.log(JSON.stringify({ok:!0,credentialsPath:q(Jt)},null,2));return}let{runDeviceLogin:t}=await Promise.resolve().then(()=>(kl(),Np));(await t(e)).ok||process.exit(1),console.log(JSON.stringify({ok:!0,credentialsPath:q(Jt)},null,2))}var Ps,Es,Jt,Dv,Mv,aD,lD,O=V(()=>{"use strict";Un();ar();C();Ue();xs();Bt();Ps=yl.join(Ov(),".kynver"),Es=yl.join(Ps,"config.json"),Jt=yl.join(Ps,"credentials"),Dv=/^[0-9a-f]{8}-[0-9a-f]{4}-[1-5][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i,Mv=new Set(["aos","aos-1","agent-os-id","agentosid","agent_os_id","<agent-os-id>","<agentosid>","todo","changeme","change-me","placeholder"]);aD=500*1024*1024,lD=4*1024*1024*1024});import{existsSync as UR,readFileSync as WR}from"node:fs";import{dirname as Ua,join as Sd}from"node:path";import{fileURLToPath as vd}from"node:url";function LR(e){let r=Ua(vd(e));for(let t=0;t<6;t+=1){if(UR(Sd(r,"package.json")))return r;let n=Ua(r);if(n===r)break;r=n}throw new Error(`package.json not found above ${Ua(vd(e))}`)}function Cd(e=import.meta.url){let r=Sd(LR(e),"package.json"),t=JSON.parse(WR(r,"utf8"));if(typeof t.version!="string"||!t.version.trim())throw new Error(`Missing package.json version at ${r}`);return t.version}var Tn=Cd();function BR(e){return e.some(r=>r==="--version"||r==="-v")}function HR(e,r){console.log(r?`${r} ${e}`:e),process.exit(0)}function wd(e,r=import.meta.url,t){return BR(e)?(HR(Cd(r),t),!0):!1}Un();import{existsSync as Hd,readFileSync as QR}from"node:fs";import as from"node:path";var Ya={"@kynver-app/runtime":"0.1.83","@kynver-app/openclaw-agent-os":"0.1.43","@kynver-app/mcp-agent-os":"0.3.34"},Ja=Object.keys(Ya),Ga={"@kynver-app/runtime":"Kynver runtime","@kynver-app/openclaw-agent-os":"OpenClaw AgentOS plugin","@kynver-app/mcp-agent-os":"AgentOS MCP server"},ZR={"@kynver-app/runtime":"packages/kynver-runtime/package.json","@kynver-app/openclaw-agent-os":"packages/kynver-openclaw-agent-os/package.json","@kynver-app/mcp-agent-os":"packages/kynver-mcp-agent-os/package.json"};function Fd(e){let r=e.trim().split("-")[0]?.split("+")[0];if(!r)return null;let t=r.split(".");if(t.length<1||t.length>3)return null;let n=t.map(o=>Number.parseInt(o,10));if(n.some(o=>!Number.isFinite(o)||o<0))return null;for(;n.length<3;)n.push(0);return[n[0],n[1],n[2]]}function Ln(e,r){let t=Fd(e),n=Fd(r);if(!t||!n)return 0;for(let o=0;o<3;o+=1){if(t[o]>n[o])return 1;if(t[o]<n[o])return-1}return 0}function qa(e,r){return Ln(e,r)>=0}function eb(e){let r=null;for(let t of e)(!r||Ln(t,r)>0)&&(r=t);return r}function rb(e){try{let r=JSON.parse(QR(e,"utf8"));return typeof r.version=="string"&&r.version.trim()?r.version.trim():null}catch{return null}}function tb(e,r){let t=[r,process.env.KYNVER_REPO,e].filter(o=>!!o?.trim());for(let o of t){let s=as.resolve(o);if(Hd(as.join(s,"packages/kynver-runtime/package.json"))&&Hd(as.join(s,"package.json")))return s}return jr({cwd:e})?.repo??null}function za(e={}){let r=e.cwd??process.cwd(),t=tb(r,e.repoRoot);if(!t)return{};let n={};for(let o of Ja){let s=as.join(t,ZR[o]),i=rb(s);i&&(n[o]={version:i,source:"repo",path:s})}return n}function nb(e){return e==="@kynver-app/runtime"?["npm run kynver:build","npm run kynver"]:[`npm run build -w ${e}`]}function ob(e){let{packageName:r,minimumVersion:t,effectiveVersion:n,effectiveSource:o,repoVersion:s}=e,i=[];return s&&qa(s,t)?(i.push(`Use the monorepo checkout (${s}) instead of a stale npm install: ${nb(r).join("; ")}.`),i.push("Do not publish npm packages or wait on an operator release."),i):(n?i.push(`Upgrade ${r} from ${n} to >= ${t} (npm install -g ${r}@latest or align OpenClaw npm prefix).`):i.push(`Install ${r} >= ${t} before running memory-heavy AgentOS paths.`),r==="@kynver-app/runtime"&&i.push("Repo-source alternative: npm run kynver:build && npm run kynver"),o==="installed"&&s&&i.push(`Repo checkout reports ${s}; rebuild/link repo source if you develop from the monorepo.`),i)}function sb(e){if(e.length===0)return{version:null,source:"unknown"};let r=eb(e.map(n=>n.version));if(!r)return{version:null,source:"unknown"};let t=e.find(n=>n.version===r)??e[0];return{version:t.version,source:t.source}}function ls(e={}){let r=(i,a)=>i?typeof i=="string"?{version:i,source:a}:i:null,t=Ja.map(i=>{let a=Ya[i],l=[],c=r(e.installed?.[i],"installed"),u=r(e.repo?.[i],"repo"),d=r(e.self?.[i],"self");c&&l.push(c),u&&l.push(u),d&&l.push(d);let{version:f,source:m}=sb(l),p=u?.version??null,h=f?qa(f,a):!1,k=h?[]:ob({packageName:i,minimumVersion:a,effectiveVersion:f,effectiveSource:m,repoVersion:p}),g=h?`${Ga[i]} ${f} meets memory-cost minimum ${a} (${m}).`:`${Ga[i]} is below memory-cost minimum ${a}`+(f?` (effective ${f} via ${m})`:" (no version detected)")+".";return{packageName:i,displayName:Ga[i],minimumVersion:a,effectiveVersion:f,effectiveSource:m,ok:h,summary:g,remediation:k}}),n=t.filter(i=>!i.ok),o=n.length===0,s=o?"All managed AgentOS packages meet memory-cost minimum versions.":`Memory-cost package guard blocked ${n.length} stale package(s): ${n.map(i=>`${i.packageName} < ${i.minimumVersion}`).join("; ")}.`;return{ok:o,summary:s,packages:t}}var Wn=class extends Error{result;constructor(r){let t=[r.summary,...r.packages.filter(n=>!n.ok).flatMap(n=>[`- ${n.summary}`,...n.remediation.map(o=>`  \u2192 ${o}`)])];super(t.join(`
+`)),this.name="MemoryCostPackageVersionGuardError",this.result=r}};function Xa(e={}){let r=ls(e);if(!r.ok)throw new Wn(r);return r}function ib(e){return new Wn(e).message}import{readFile as ab}from"node:fs/promises";import{homedir as lb}from"node:os";import Vr from"node:path";var cb=["@kynver-app/runtime","@kynver-app/openclaw-agent-os","@kynver-app/mcp-agent-os"];function Mt(e){let r=e?.trim();return r||null}function ub(e){return[...new Set(e.filter(r=>!!r))]}function db(){let e=lb(),r=Mt(process.env.KYNVER_OPENCLAW_NPM_ROOT)??Mt(process.env.OPENCLAW_NPM_ROOT)??Vr.join(e,".openclaw","npm"),t=Mt(process.env.KYNVER_NPM_GLOBAL_ROOT)??Mt(process.env.KYNVER_NPM_GLOBAL_MODULES_ROOT)??(Mt(process.env.NPM_CONFIG_PREFIX)?Vr.join(Mt(process.env.NPM_CONFIG_PREFIX),"lib","node_modules"):Vr.join(e,".npm-global","lib","node_modules"));return ub([Vr.join(r,"lib","node_modules"),Vr.join(r,"node_modules"),t.endsWith("node_modules")?t:Vr.join(t,"lib","node_modules")])}async function pb(e){try{let r=JSON.parse(await ab(e,"utf8"));return typeof r.version=="string"&&r.version.trim()?r.version.trim():null}catch{return null}}function mb(e){let r=db(),t=new Set,n=[];for(let o of r){let s=Vr.join(o,e,"package.json");t.has(s)||(t.add(s),n.push(s))}return n}async function cs(e=new Date().toISOString()){let r={};for(let t of cb){let n=null;for(let o of mb(t)){let s=await pb(o);s&&(!n||Ln(s,n.version)>0)&&(n={version:s,path:o})}n&&(r[t]={version:n.version,observedAt:e,path:n.path})}return r}function fb(e){let r={};for(let[t,n]of Object.entries(e))n?.version&&(r[t]={version:n.version,source:"installed",path:n.path});return r}async function Qa(e={}){let[r,t]=await Promise.all([cs(),Promise.resolve(za({cwd:e.cwd,repoRoot:e.repoRoot}))]),n={},o=e.selfPackageName==="@kynver-app/runtime"&&e.selfVersion?e.selfVersion:Tn;return n["@kynver-app/runtime"]={version:o,source:"self"},e.selfPackageName&&e.selfVersion&&e.selfPackageName!=="@kynver-app/runtime"&&(n[e.selfPackageName]={version:e.selfVersion,source:"self"}),{installed:fb(r),repo:t,self:n}}async function gb(e={}){let r=await Qa(e);return ls(r)}async function Za(e={}){let r=await Qa(e);return Xa(r)}function el(e,r){return e?e==="daemon"||e==="start"||e==="worker"||e==="monitor"||e==="run"&&(r==="dispatch"||r==="sweep"||r==="reconcile"||r==="unblock")||e==="cron"&&r==="tick":!1}O();function Be(e){let r=String(e).trim();return r.startsWith("krc1.")?{"Content-Type":"application/json","X-Kynver-Runner-Token":r}:{"Content-Type":"application/json","X-Kynver-Cron-Secret":r,"X-OpenClaw-Cron-Secret":r,"X-Kynver-Runtime-Secret":r}}O();function jp(e){if(e!==void 0&&Number.isFinite(e)&&e>0)return Math.floor(e);let r=Number(process.env.KYNVER_CALLBACK_TIMEOUT_MS);return Number.isFinite(r)&&r>0?Math.floor(r):3e4}async function Vp(e,r){let t=jp(r),n=new AbortController,o=setTimeout(()=>n.abort(),t);try{return await e(n.signal)}finally{clearTimeout(o)}}function Gp(e,r){let t=jp(r);return{ok:!1,status:0,response:{error:e instanceof Error?e.message:String(e),timeoutMs:t}}}async function Pr(e,r,t,n){let o;try{o=await Vp(i=>fetch(e,{method:"POST",headers:Be(r),body:JSON.stringify(t),signal:i}),n?.timeoutMs)}catch(i){return Gp(i,n?.timeoutMs)}let s=null;try{s=await o.json()}catch{s=null}return{ok:o.ok,status:o.status,response:s}}async function X(e,r,t,n){let o=await Pr(e,r,t,{timeoutMs:n.timeoutMs});if(o.ok||o.status!==401)return o;let s=await Fp(r,n.agentOsId,{baseUrl:n.baseUrl});return s.ok?{...await Pr(e,s.token,t,{timeoutMs:n.timeoutMs}),refreshedAuth:!0}:{...o,authRefreshFailure:s.reason}}async function Ns(e,r,t){let n;try{n=await Vp(s=>fetch(e,{method:"GET",headers:Be(r),signal:s}),t?.timeoutMs)}catch(s){return Gp(s,t?.timeoutMs)}let o=null;try{o=await n.json()}catch{o=null}return{ok:n.ok,status:n.status,response:o}}function Yp(){let e=Number(process.env.KYNVER_DISPATCH_CALLBACK_TIMEOUT_MS);return Number.isFinite(e)&&e>0?Math.floor(e):12e4}function vl(e){console.error(JSON.stringify({event:"dispatch_progress",ts:new Date().toISOString(),...e}))}function Jp(e){if(!e||typeof e!="object")return!1;let r=e;if(r.timeoutMs!==void 0)return!0;let t=r.error;if(typeof t!="string"||!t.trim())return!1;let n=t.toLowerCase();return n.includes("abort")||n.includes("timeout")}var qp="embedded-1",Bv=[{slug:"ghost",displayName:"Ghost",description:"Orchestration persona.",dispatchLane:null,defaultRoleLane:"system"},{slug:"astra",displayName:"Astra",description:"Planning persona.",dispatchLane:"implementation",defaultRoleLane:"plan_author"},{slug:"rhea",displayName:"Rhea",description:"Implementation persona.",dispatchLane:"implementation",defaultRoleLane:"implementer"},{slug:"mnemo",displayName:"Mnemo",description:"Implementation persona.",dispatchLane:"implementation",defaultRoleLane:"implementer"},{slug:"sentinel",displayName:"Sentinel",description:"Review persona.",dispatchLane:"review",defaultRoleLane:"deep_reviewer"},{slug:"pixel",displayName:"Pixel",description:"Implementation persona.",dispatchLane:"implementation",defaultRoleLane:"implementer"},{slug:"schema",displayName:"Schema",description:"Implementation persona.",dispatchLane:"implementation",defaultRoleLane:"implementer"},{slug:"atlas",displayName:"Atlas",description:"Implementation persona.",dispatchLane:"implementation",defaultRoleLane:"runtime_verifier"},{slug:"bridge",displayName:"Bridge",description:"Implementation persona.",dispatchLane:"implementation",defaultRoleLane:"implementer"},{slug:"catalyst",displayName:"Catalyst",description:"Implementation persona.",dispatchLane:"implementation",defaultRoleLane:"implementer"},{slug:"lorentz",displayName:"Lorentz",description:"Review persona.",dispatchLane:"review",defaultRoleLane:"report_reviewer"},{slug:"dalton",displayName:"Dalton",description:"Landing persona.",dispatchLane:"landing",defaultRoleLane:"implementer"}],Hv={"worker.prompt.core_rules":["Structured final result (recommended): record completion as JSON with summary, files, PR URLs, verification, risks, and blockers.","Completion handoff (required): before you stop, summarize the outcome in your last message and append a heartbeat line with phase `complete`. Commit your work cleanly and open a GitHub PR (draft OK) for substantial changes \u2014 never leave uncommitted changes behind without reporting them.","Review-only workers must not open new implementation PRs \u2014 review the existing PR and record a verdict in the final result.","Keep verification targeted to touched paths; avoid full-monorepo verification unless explicitly requested.","Do not run `npm publish`.","If verification fails, append a heartbeat line immediately with the failing command, reason, and next action."].join(`
 `),"worker.prompt.progress.compact":"Plan progress: when planId is set, report progress with `kynver plan progress --plan <planId> --row <rowKey> --role implementer --status in_progress|running|partial|blocked`. Do not mark rows done from the worker CLI.","worker.prompt.progress.full":["Structured plan progress (required when planId is set):","- Report checkpoints with `kynver plan progress --plan <planId> --row <rowKey> --role implementer --status in_progress|running|partial|blocked`.","- When a slice is finished, emit `partial` with evidence (`--evidence pr:<url>`, `--evidence path:<file>`, or `--evidence command:<cmd>`).","- Do not propose or confirm row `done` from the worker CLI."].join(`
 `),"worker.prompt.merge_gate.compact":"Verification cost control: prefer local verification before requesting CI runs; do not push empty commits to re-trigger CI; record verification evidence on the PR.","worker.prompt.merge_gate.full":["Verification cost control:","- Prefer local verification of touched paths before requesting any CI run.","- Do not push empty commits to re-trigger CI.","- Record verification evidence on the PR before requesting review."].join(`
 `),"worker.prompt.plan_artifacts.compact":"Plan artifacts: when authoring or revising plan documents, open a GitHub PR early and iterate from that PR branch; do not leave the canonical plan only in a local worktree.","worker.prompt.plan_artifacts.full":["Plan artifacts (when authoring or revising plan documents):","- Create a feature branch and open a GitHub PR (draft OK) before substantial drafting; commit and push the plan file.","- Iterate on that PR branch and link the PR URL on the related task and progress evidence."].join(`
-`)},Ov={"harness.maxTaskAttempts":4,"harness.dispatchCooldownMs":5e3,"daemon.idleIntervalMs":5*6e4,"daemon.maxIdleStreak":10},Gr={version:sp,generatedAt:"1970-01-01T00:00:00.000Z",personas:Av,instructions:Iv,policyThresholds:Ov};var Ut=Gr,ip="embedded";function Nv(){return Ut}function vr(){return Ut.version}function sr(){return ip}function Ya(e,r){Ut=e,ip=r}function Lt(e){let r=Ut.instructions[e];if(typeof r=="string"&&r.trim())return r;let t=Gr.instructions[e];return typeof t=="string"?t:""}function Yr(e,r){let t=Ut.policyThresholds[e];if(typeof t=="number"&&Number.isFinite(t))return t;let n=Gr.policyThresholds[e];return typeof n=="number"&&Number.isFinite(n)?n:r}function cs(e){if(!e)return null;let r=e.trim().toLowerCase();return Ut.personas.find(t=>t.slug===r)??null}var Tv=["implementation","review","landing"],Dv=["plan_author","implementer","report_reviewer","deep_reviewer","runtime_verifier","system"];function Mv(e){return Tv.includes(e)}function Uv(e){return Dv.includes(e)}function ap(e){return{slug:e.slug,displayName:e.displayName,description:e.description,dispatchLane:e.dispatchLane===null||Mv(e.dispatchLane)?e.dispatchLane:null,defaultRoleLane:Uv(e.defaultRoleLane)?e.defaultRoleLane:"implementer"}}var us=Gr.personas.map(ap),lp=new Map(us.map(e=>[e.slug,e]));function Ja(e){if(!e)return null;let r=e.trim().toLowerCase(),t=lp.get(r)??null,n=cs(r);if(!n)return t;let o=ap(n);return t?{...o,dispatchLane:t.dispatchLane,defaultRoleLane:t.defaultRoleLane}:o}function cp(e){return Ja(e)?.dispatchLane??null}function ds(e){return Ja(e)?.defaultRoleLane??null}function Lv(e){if(!e)return!1;let r=e.trim().toLowerCase();return lp.has(r)||cs(r)!==null}function qa(){return us.filter(e=>e.dispatchLane==="review").map(e=>e.slug)}function Bv(){return us.filter(e=>e.dispatchLane==="landing").map(e=>e.slug)}function up(e){return(e??"").trim().toLowerCase()}function Wv(e){switch(up(e)){case"implementer":case"repair_implementer":case"plan_author":case"runtime_verifier":return"implementation";case"plan_reviewer":case"report_reviewer":case"deep_reviewer":return"review";default:return null}}function Hv(e){let r=up(e);if(!r)return;if(r==="implementation"||r==="review"||r==="landing"||r==="any")return r;let t=Wv(r);if(t)return t;if(r==="implement"||r==="repair"||r==="coding")return"implementation";if(r==="land"||r==="merge")return"landing"}function dp(e){return Hv(e)??"any"}_t();Mn();L();L();function ps(e,r){let t=e[r];return typeof t=="string"?t.trim():""}function za(e){return e.toLowerCase()}function Fv(e){let r=ps(e,"roleLane");if(r)return r;let t=za(ps(e,"executorRef")),n=za(ps(e,"title")),o=za(ps(e,"personaSlug")),s=`${t} ${n}`;if(s.includes("deep review")||s.includes("security review")||t.includes("deep-reviewer"))return"deep_reviewer";if(s.includes("plan author")||s.includes("plan-author")||n.includes("strategy plan"))return"plan_author";if(s.includes("plan review")||t.includes("plan-reviewer"))return"plan_reviewer";if(s.includes("report review")||s.includes("completion report"))return"report_reviewer";if(s.includes("repair")||n.startsWith("fix ")||t.includes("repair"))return"repair_implementer";if(t.includes("cursor")||t.includes("codex")||t.includes("composer")||n.includes("implement")||n.includes("land:"))return"implementer";let i=ds(o);if(i)return o==="lorentz"&&(s.includes("deep")||s.includes("security"))?"deep_reviewer":i;if(s.includes("review"))return"report_reviewer"}function pp(e){let r=Fv(e);return r?{...e,roleLane:r}:e}O();var xe="cursor",$v=new Set(["claude","opus","anthropic"]),Kv=[/\[worker-provider:\s*claude\]/i,/\[use-claude-worker\]/i,/\[operator-worker-provider:\s*claude\]/i];function Xa(e,r){let t=e[r];return typeof t=="string"?t.trim():""}function Ge(e){if(!e?.trim())return!1;let r=e.trim().toLowerCase();return $v.has(r)?!0:r.includes("claude")||r.includes("opus")}function ms(e){if(!e)return!1;let r=e.workerProviderOverride;if(typeof r=="string"&&Ge(r))return!0;let t=Xa(e,"executorRef").toLowerCase();if(t==="provider:claude"||t.startsWith("provider:claude:")||t.includes("claude-worker-override")||t.includes("operator-claude"))return!0;let n=Xa(e,"description");if(Kv.some(s=>s.test(n)))return!0;let o=Xa(e,"title");return!!/\[use-claude-worker\]/i.test(o)}function jv(e,r){return{provider:xe,model:Za,rule:`policy:cursor_default${r}`,requestedModel:e}}function Qa(e){let{routing:r,task:t}=e,n=e.explicitProvider?.trim().toLowerCase();if(e.explicitProviderIsOperatorOverride&&Ge(n))return{...r,provider:"claude",rule:r.rule.startsWith("explicit:")?r.rule:"explicit:operator_provider"};if(ms(t)||r.rule==="explicit:cli"&&Ge(r.provider)||!Ge(r.provider))return r;let o=r.rule&&r.rule!=="default:global"?`:${r.rule.replace(/:/g,"_")}`:"";return jv(r.model,o)}function Hn(e,r=xe){let t=e?.trim();return t?Ge(t)?xe:t==="codex"?"codex":t:r}function Vv(e){let r=[...new Set(e.map(t=>t.trim().toLowerCase()).filter(Boolean))];return r.includes(xe)?[...new Set(r.map(t=>Ge(t)?xe:t))]:r.every(t=>Ge(t))?[xe]:r}var mp={codex:{id:"codex",displayName:"Codex (BYO OAuth / Hermes openai-codex)",costTier:"low",authSources:["oauth_local","api_key_env","subscription_hermes"],supportsLowRiskOrchestration:!0,supportsPrivilegedPlatformActions:!1},cursor:{id:"cursor",displayName:"Cursor / Composer",costTier:"medium",authSources:["oauth_local","api_key_env"],supportsLowRiskOrchestration:!0,supportsPrivilegedPlatformActions:!0},claude:{id:"claude",displayName:"Claude Code",costTier:"high",authSources:["oauth_local"],supportsLowRiskOrchestration:!0,supportsPrivilegedPlatformActions:!0}};function Jr(e){return mp[e]}function el(){return Object.values(mp)}import{existsSync as Yv}from"node:fs";import{homedir as Jv}from"node:os";import hp from"node:path";import{createHash as fp}from"node:crypto";import{statSync as Gv}from"node:fs";import{spawnSync as gp}from"node:child_process";function Ye(e){try{let r=Gv(e),t=`${e}|${r.size}|${r.mtimeMs}`;return fp("sha256").update(t).digest("hex").slice(0,16)}catch{return}}function Bt(e){return fp("sha256").update(`env:${e}`).digest("hex").slice(0,16)}function Pe(e,r){for(let t of r){let n=process.env[t]?.trim();if(n)return n}return e}function Je(e,r,t={}){let n=t.timeoutMs??8e3;try{let o=gp(e,r,{encoding:"utf8",timeout:n,env:{...process.env,CI:"1",NO_COLOR:"1"}});if(o.status===0)return{ok:!0,note:t.okNote??`${e} ${r.join(" ")}: ok`};let s=(o.stderr||o.stdout||"").trim(),i=t.failPrefix??`${e} ${r.join(" ")} failed`;return{ok:!1,note:s?`${i}: ${s.slice(0,200)}`:i}}catch(o){return{ok:!1,note:o instanceof Error?o.message:`${e} probe failed`}}}function fs(e,r,t={}){let n=t.timeoutMs??8e3;try{return gp(e,r,{stdio:"ignore",timeout:n,env:{...process.env,CI:"1",NO_COLOR:"1"}}).status===0?{ok:!0,note:t.okNote??`${e} authenticated`}:{ok:!1,note:t.failNote??`${e} not authenticated`}}catch(o){return{ok:!1,note:o instanceof Error?o.message:`${e} auth probe failed`}}}var qv="codex";function zv(){let e=Jv();return[hp.join(e,".codex","auth.json"),hp.join(e,".config","codex","auth.json")]}function rl(e=new Date().toISOString()){let r=Pe(qv,["KYNVER_CODEX_BIN","CODEX_BIN"]);if(process.env.CODEX_API_KEY?.trim())return{providerId:"codex",ready:!0,authSource:"api_key_env",sessionFingerprint:Bt("CODEX_API_KEY"),checkedAt:e,note:"CODEX_API_KEY present (env binding \u2014 cloud credits path, no token stored in Kynver)"};let t=zv().find(s=>Yv(s)),n=Je(r,["login","status"],{okNote:"codex login status: authenticated",failPrefix:"codex login status"}),o=!!t&&n.ok;return{providerId:"codex",ready:o,authSource:"oauth_local",sessionFingerprint:t?Ye(t):void 0,checkedAt:e,note:o?"Local Codex OAuth session bound on runner":[n.note,t?void 0:"no ~/.codex/auth.json"].filter(Boolean).join("; ")}}import{existsSync as Xv}from"node:fs";import{homedir as Qv}from"node:os";import tl from"node:path";function Zv(){let e=process.env.HERMES_HOME?.trim(),r=e?tl.resolve(e):tl.join(Qv(),".hermes");return tl.join(r,"auth.json")}function Fn(e=new Date().toISOString()){let r=Pe("hermes",["KYNVER_HERMES_BIN","HERMES_BIN"]),t=Je(r,["--version"],{okNote:`${r} CLI available`,failPrefix:`${r} CLI not available`}),n=Zv(),o=Xv(n),s=fs(r,["auth","status","openai-codex"],{okNote:"hermes openai-codex: logged in",failNote:"hermes openai-codex: not logged in"}),i=t.ok&&s.ok;return{path:"hermes_openai_codex",ready:i,authSource:i?"subscription_hermes":"none",sessionFingerprint:o?Ye(n):void 0,checkedAt:e,note:i?"Hermes openai-codex subscription session bound (ChatGPT Codex OAuth)":[t.note,s.note,o?void 0:"no ~/.hermes/auth.json"].filter(Boolean).join("; ")}}function br(e=new Date().toISOString()){let r=rl(e);if(r.ready)return{...r,path:"codex_cli"};let t=Fn(e);return t.ready?{providerId:"codex",ready:!0,authSource:t.authSource,sessionFingerprint:t.sessionFingerprint,checkedAt:t.checkedAt,note:t.note,path:"hermes_openai_codex",hermesOpenAiCodex:t}:{providerId:"codex",ready:!1,authSource:"none",checkedAt:e,path:"none",hermesOpenAiCodex:t,note:[r.note,t.note].filter(Boolean).join("; ")||"Codex CLI and Hermes openai-codex unavailable"}}var kp=["low","medium","high"],yp={oauth_local:0,subscription_hermes:0,runner_token:1,api_key_env:2,none:3};function nl(e,r){let t=Jr(e);return r==="privileged"?t.supportsPrivilegedPlatformActions:r==="low"?t.supportsLowRiskOrchestration:!0}function Rp(e,r){let t=Jr(e.providerId),n=Jr(r.providerId),o=kp.indexOf(t.costTier)-kp.indexOf(n.costTier);if(o!==0)return o;let s=yp[e.binding.authSource]-yp[r.binding.authSource];return s!==0?s:e.providerId.localeCompare(r.providerId)}function gs(e){let r=el().map(a=>({providerId:a.id,binding:e.inventory.bindings[a.id]})).filter(a=>a.binding.ready&&nl(a.providerId,e.riskClass));if(r.length===0)return null;let n=[...r].sort(Rp)[0],o="codex";if(n.providerId===o)return{providerId:n.providerId,binding:n.binding};let s=e.inventory.bindings[o],i;return nl(o,e.riskClass)?s.ready||(i=s.note??`${o} not bound`):i=`${e.riskClass} orchestration requires privileged-capable provider`,{providerId:n.providerId,binding:n.binding,escalatedFrom:o,escalatedReason:i}}import{existsSync as eb}from"node:fs";import{homedir as rb}from"node:os";import tb from"node:path";var nb="claude";function ob(){let e=rb();return[tb.join(e,".claude",".credentials.json")]}function hs(e=new Date().toISOString()){let r=Pe(nb,["KYNVER_CLAUDE_BIN","CLAUDE_BIN"]);if(process.env.ANTHROPIC_API_KEY?.trim())return{providerId:"claude",ready:!0,authSource:"api_key_env",sessionFingerprint:Bt("ANTHROPIC_API_KEY"),checkedAt:e,note:"ANTHROPIC_API_KEY present (env binding \u2014 cloud credits path, no token stored in Kynver)"};let t=Je(r,["--version"],{okNote:`${r} CLI available`,failPrefix:`${r} CLI not available`}),n=ob().find(i=>eb(i)),o=fs(r,["auth","status"],{okNote:"claude auth status: authenticated",failNote:"claude auth status: not authenticated"}),s=t.ok&&(o.ok||!!n);return{providerId:"claude",ready:s,authSource:"oauth_local",sessionFingerprint:n?Ye(n):void 0,checkedAt:e,note:s?"Local Claude Code OAuth session bound on runner":[t.note,o.note,n?void 0:"no ~/.claude/.credentials.json"].filter(Boolean).join("; ")}}import{existsSync as sb}from"node:fs";import{homedir as ib}from"node:os";import ab from"node:path";var lb="agent";function cb(){let e=ib();return[ab.join(e,".config","cursor","auth.json")]}function ks(e=new Date().toISOString()){let r=Pe(lb,["KYNVER_CURSOR_AGENT_BIN","CURSOR_AGENT_BIN"]);if(process.env.CURSOR_API_KEY?.trim())return{providerId:"cursor",ready:!0,authSource:"api_key_env",sessionFingerprint:Bt("CURSOR_API_KEY"),checkedAt:e,note:"CURSOR_API_KEY present (env binding \u2014 cloud credits path, no token stored in Kynver)"};let t=Je(r,["-v"],{okNote:`${r} CLI available`,failPrefix:`${r} CLI not available`}),n=cb().find(s=>sb(s)),o=!!n&&t.ok;return{providerId:"cursor",ready:o,authSource:"oauth_local",sessionFingerprint:n?Ye(n):void 0,checkedAt:e,note:o?"Local Cursor/Composer OAuth session bound on runner":[t.note,n?void 0:"no ~/.config/cursor/auth.json"].filter(Boolean).join("; ")}}import{existsSync as ub,readFileSync as db}from"node:fs";import{homedir as pb}from"node:os";import ol from"node:path";var mb=["OPENAI_API_KEY","ANTHROPIC_API_KEY","KYNVER_API_KEY","KYNVER_BASE_URL"];function fb(){let e=process.env.HERMES_HOME?.trim(),r=e?ol.resolve(e):ol.join(pb(),".hermes");return ol.join(r,".env")}function gb(e){try{let r=db(e,"utf8"),t=[];for(let n of mb)new RegExp(`^${n}=`,"m").test(r)&&t.push(n);return t}catch{return[]}}function sl(e=new Date().toISOString()){let r=Pe("hermes",["KYNVER_HERMES_BIN","HERMES_BIN"]),t=Je(r,["--version"],{okNote:`${r} CLI available`,failPrefix:`${r} CLI not available`}),n=fb(),o=ub(n),s=o?gb(n):[],a=s.some(c=>c.endsWith("_API_KEY"))?"api_key_env":o?"oauth_local":"none",l=t.ok&&o;return{adapterId:"hermes",cliAvailable:t.ok,profileBound:o,authSource:a,sessionFingerprint:o?Ye(n):void 0,checkedAt:e,note:l?`Hermes profile bound (${s.length?`keys: ${s.join(", ")}`:"no API keys detected"})`:[t.note,o?void 0:"no ~/.hermes/.env"].filter(Boolean).join("; ")}}function il(e={}){let r=e.nowIso?.()??new Date().toISOString(),t=br(r),n={codex:t,cursor:ks(r),claude:hs(r)},o=Object.values(n).filter(s=>s.ready).length;return{generatedAt:r,bindings:n,cloudApiCredits:{anthropicApiKey:!!process.env.ANTHROPIC_API_KEY?.trim(),openaiApiKey:!!process.env.OPENAI_API_KEY?.trim(),codexApiKey:!!process.env.CODEX_API_KEY?.trim()},hermes:sl(r),hermesOpenAiCodex:Fn(r),codexAdapterPath:t.path,readyCount:o}}function hb(e,r){switch(e){case"codex":return br(r);case"cursor":return ks(r);case"claude":return hs(r)}}var kb=[/\bprivileged\b/i,/\bproduction\s+db\b/i,/\bdb:push\b/i,/\bmigration\b/i,/\bdeploy\b/i,/\bsecrets?\b/i,/\bstripe\b/i,/\[require-approval\]/i,/\[operator-only\]/i],yb=[/\borchestration\b/i,/\bplan[- ]?progress\b/i,/\bstatus\s+sync\b/i,/\bheartbeat\b/i,/\bboard[- ]?drain\b/i,/\bmaintenance\b/i,/\[orchestration:\s*low-risk\]/i];function al(e,r){let t=e[r];return typeof t=="string"?t.trim():""}function vp(e){let r=al(e,"executorRef").toLowerCase(),t=al(e,"title").toLowerCase(),n=al(e,"description").toLowerCase(),o=`${r}
+`)},Fv={"harness.maxTaskAttempts":4,"harness.dispatchCooldownMs":5e3,"daemon.idleIntervalMs":5*6e4,"daemon.maxIdleStreak":10},nt={version:qp,generatedAt:"1970-01-01T00:00:00.000Z",personas:Bv,instructions:Hv,policyThresholds:Fv};var zt=nt,zp="embedded";function $v(){return zt}function Ar(){return zt.version}function pr(){return zp}function Sl(e,r){zt=e,zp=r}function Xt(e){let r=zt.instructions[e];if(typeof r=="string"&&r.trim())return r;let t=nt.instructions[e];return typeof t=="string"?t:""}function ot(e,r){let t=zt.policyThresholds[e];if(typeof t=="number"&&Number.isFinite(t))return t;let n=nt.policyThresholds[e];return typeof n=="number"&&Number.isFinite(n)?n:r}function Ts(e){if(!e)return null;let r=e.trim().toLowerCase();return zt.personas.find(t=>t.slug===r)??null}var Kv=["implementation","review","landing"],jv=["plan_author","implementer","report_reviewer","deep_reviewer","runtime_verifier","system"];function Vv(e){return Kv.includes(e)}function Gv(e){return jv.includes(e)}function Xp(e){return{slug:e.slug,displayName:e.displayName,description:e.description,dispatchLane:e.dispatchLane===null||Vv(e.dispatchLane)?e.dispatchLane:null,defaultRoleLane:Gv(e.defaultRoleLane)?e.defaultRoleLane:"implementer"}}var Ds=nt.personas.map(Xp),Qp=new Map(Ds.map(e=>[e.slug,e]));function Cl(e){if(!e)return null;let r=e.trim().toLowerCase(),t=Qp.get(r)??null,n=Ts(r);if(!n)return t;let o=Xp(n);return t?{...o,dispatchLane:t.dispatchLane,defaultRoleLane:t.defaultRoleLane}:o}function Zp(e){return Cl(e)?.dispatchLane??null}function Ms(e){return Cl(e)?.defaultRoleLane??null}function Yv(e){if(!e)return!1;let r=e.trim().toLowerCase();return Qp.has(r)||Ts(r)!==null}function wl(){return Ds.filter(e=>e.dispatchLane==="review").map(e=>e.slug)}function Jv(){return Ds.filter(e=>e.dispatchLane==="landing").map(e=>e.slug)}function em(e){return(e??"").trim().toLowerCase()}function qv(e){switch(em(e)){case"implementer":case"repair_implementer":case"plan_author":case"runtime_verifier":return"implementation";case"plan_reviewer":case"report_reviewer":case"deep_reviewer":return"review";default:return null}}function zv(e){let r=em(e);if(!r)return;if(r==="implementation"||r==="review"||r==="landing"||r==="any")return r;let t=qv(r);if(t)return t;if(r==="implement"||r==="repair"||r==="coding")return"implementation";if(r==="land"||r==="merge")return"landing"}function rm(e){return zv(e)??"any"}Bt();Yt();M();M();function Us(e,r){let t=e[r];return typeof t=="string"?t.trim():""}function _l(e){return e.toLowerCase()}function Xv(e){let r=Us(e,"roleLane");if(r)return r;let t=_l(Us(e,"executorRef")),n=_l(Us(e,"title")),o=_l(Us(e,"personaSlug")),s=`${t} ${n}`;if(s.includes("deep review")||s.includes("security review")||t.includes("deep-reviewer"))return"deep_reviewer";if(s.includes("plan author")||s.includes("plan-author")||n.includes("strategy plan"))return"plan_author";if(s.includes("plan review")||t.includes("plan-reviewer"))return"plan_reviewer";if(s.includes("report review")||s.includes("completion report"))return"report_reviewer";if(s.includes("repair")||n.startsWith("fix ")||t.includes("repair"))return"repair_implementer";if(t.includes("cursor")||t.includes("codex")||t.includes("composer")||n.includes("implement")||n.includes("land:"))return"implementer";let i=Ms(o);if(i)return o==="lorentz"&&(s.includes("deep")||s.includes("security"))?"deep_reviewer":i;if(s.includes("review"))return"report_reviewer"}function tm(e){let r=Xv(e);return r?{...e,roleLane:r}:e}O();var Pe="cursor",Qv=new Set(["claude","opus","anthropic"]),Zv=[/\[worker-provider:\s*claude\]/i,/\[use-claude-worker\]/i,/\[operator-worker-provider:\s*claude\]/i];function xl(e,r){let t=e[r];return typeof t=="string"?t.trim():""}function Je(e){if(!e?.trim())return!1;let r=e.trim().toLowerCase();return Qv.has(r)?!0:r.includes("claude")||r.includes("opus")}function Ws(e){if(!e)return!1;let r=e.workerProviderOverride;if(typeof r=="string"&&Je(r))return!0;let t=xl(e,"executorRef").toLowerCase();if(t==="provider:claude"||t.startsWith("provider:claude:")||t.includes("claude-worker-override")||t.includes("operator-claude"))return!0;let n=xl(e,"description");if(Zv.some(s=>s.test(n)))return!0;let o=xl(e,"title");return!!/\[use-claude-worker\]/i.test(o)}function eS(e,r){return{provider:Pe,model:Pl,rule:`policy:cursor_default${r}`,requestedModel:e}}function El(e){let{routing:r,task:t}=e,n=e.explicitProvider?.trim().toLowerCase();if(e.explicitProviderIsOperatorOverride&&Je(n))return{...r,provider:"claude",rule:r.rule.startsWith("explicit:")?r.rule:"explicit:operator_provider"};if(Ws(t)||r.rule==="explicit:cli"&&Je(r.provider)||!Je(r.provider))return r;let o=r.rule&&r.rule!=="default:global"?`:${r.rule.replace(/:/g,"_")}`:"";return eS(r.model,o)}function no(e,r=Pe){let t=e?.trim();return t?Je(t)?Pe:t==="codex"?"codex":t:r}function rS(e){let r=[...new Set(e.map(t=>t.trim().toLowerCase()).filter(Boolean))];return r.includes(Pe)?[...new Set(r.map(t=>Je(t)?Pe:t))]:r.every(t=>Je(t))?[Pe]:r}var nm={codex:{id:"codex",displayName:"Codex (BYO OAuth / Hermes openai-codex)",costTier:"low",authSources:["oauth_local","api_key_env","subscription_hermes"],supportsLowRiskOrchestration:!0,supportsPrivilegedPlatformActions:!1},cursor:{id:"cursor",displayName:"Cursor / Composer",costTier:"medium",authSources:["oauth_local","api_key_env"],supportsLowRiskOrchestration:!0,supportsPrivilegedPlatformActions:!0},claude:{id:"claude",displayName:"Claude Code",costTier:"high",authSources:["oauth_local"],supportsLowRiskOrchestration:!0,supportsPrivilegedPlatformActions:!0}};function st(e){return nm[e]}function Al(){return Object.values(nm)}import{existsSync as nS}from"node:fs";import{homedir as oS}from"node:os";import im from"node:path";import{createHash as om}from"node:crypto";import{statSync as tS}from"node:fs";import{spawnSync as sm}from"node:child_process";function qe(e){try{let r=tS(e),t=`${e}|${r.size}|${r.mtimeMs}`;return om("sha256").update(t).digest("hex").slice(0,16)}catch{return}}function Qt(e){return om("sha256").update(`env:${e}`).digest("hex").slice(0,16)}function Ae(e,r){for(let t of r){let n=process.env[t]?.trim();if(n)return n}return e}function ze(e,r,t={}){let n=t.timeoutMs??8e3;try{let o=sm(e,r,{encoding:"utf8",timeout:n,env:{...process.env,CI:"1",NO_COLOR:"1"}});if(o.status===0)return{ok:!0,note:t.okNote??`${e} ${r.join(" ")}: ok`};let s=(o.stderr||o.stdout||"").trim(),i=t.failPrefix??`${e} ${r.join(" ")} failed`;return{ok:!1,note:s?`${i}: ${s.slice(0,200)}`:i}}catch(o){return{ok:!1,note:o instanceof Error?o.message:`${e} probe failed`}}}function Ls(e,r,t={}){let n=t.timeoutMs??8e3;try{return sm(e,r,{stdio:"ignore",timeout:n,env:{...process.env,CI:"1",NO_COLOR:"1"}}).status===0?{ok:!0,note:t.okNote??`${e} authenticated`}:{ok:!1,note:t.failNote??`${e} not authenticated`}}catch(o){return{ok:!1,note:o instanceof Error?o.message:`${e} auth probe failed`}}}var sS="codex";function iS(){let e=oS();return[im.join(e,".codex","auth.json"),im.join(e,".config","codex","auth.json")]}function Il(e=new Date().toISOString()){let r=Ae(sS,["KYNVER_CODEX_BIN","CODEX_BIN"]);if(process.env.CODEX_API_KEY?.trim())return{providerId:"codex",ready:!0,authSource:"api_key_env",sessionFingerprint:Qt("CODEX_API_KEY"),checkedAt:e,note:"CODEX_API_KEY present (env binding \u2014 cloud credits path, no token stored in Kynver)"};let t=iS().find(s=>nS(s)),n=ze(r,["login","status"],{okNote:"codex login status: authenticated",failPrefix:"codex login status"}),o=!!t&&n.ok;return{providerId:"codex",ready:o,authSource:"oauth_local",sessionFingerprint:t?qe(t):void 0,checkedAt:e,note:o?"Local Codex OAuth session bound on runner":[n.note,t?void 0:"no ~/.codex/auth.json"].filter(Boolean).join("; ")}}import{existsSync as aS}from"node:fs";import{homedir as lS}from"node:os";import Ol from"node:path";function cS(){let e=process.env.HERMES_HOME?.trim(),r=e?Ol.resolve(e):Ol.join(lS(),".hermes");return Ol.join(r,"auth.json")}function oo(e=new Date().toISOString()){let r=Ae("hermes",["KYNVER_HERMES_BIN","HERMES_BIN"]),t=ze(r,["--version"],{okNote:`${r} CLI available`,failPrefix:`${r} CLI not available`}),n=cS(),o=aS(n),s=Ls(r,["auth","status","openai-codex"],{okNote:"hermes openai-codex: logged in",failNote:"hermes openai-codex: not logged in"}),i=t.ok&&s.ok;return{path:"hermes_openai_codex",ready:i,authSource:i?"subscription_hermes":"none",sessionFingerprint:o?qe(n):void 0,checkedAt:e,note:i?"Hermes openai-codex subscription session bound (ChatGPT Codex OAuth)":[t.note,s.note,o?void 0:"no ~/.hermes/auth.json"].filter(Boolean).join("; ")}}function Ir(e=new Date().toISOString()){let r=Il(e);if(r.ready)return{...r,path:"codex_cli"};let t=oo(e);return t.ready?{providerId:"codex",ready:!0,authSource:t.authSource,sessionFingerprint:t.sessionFingerprint,checkedAt:t.checkedAt,note:t.note,path:"hermes_openai_codex",hermesOpenAiCodex:t}:{providerId:"codex",ready:!1,authSource:"none",checkedAt:e,path:"none",hermesOpenAiCodex:t,note:[r.note,t.note].filter(Boolean).join("; ")||"Codex CLI and Hermes openai-codex unavailable"}}var am=["low","medium","high"],lm={oauth_local:0,subscription_hermes:0,runner_token:1,api_key_env:2,none:3};function Nl(e,r){let t=st(e);return r==="privileged"?t.supportsPrivilegedPlatformActions:r==="low"?t.supportsLowRiskOrchestration:!0}function cm(e,r){let t=st(e.providerId),n=st(r.providerId),o=am.indexOf(t.costTier)-am.indexOf(n.costTier);if(o!==0)return o;let s=lm[e.binding.authSource]-lm[r.binding.authSource];return s!==0?s:e.providerId.localeCompare(r.providerId)}function Bs(e){let r=Al().map(a=>({providerId:a.id,binding:e.inventory.bindings[a.id]})).filter(a=>a.binding.ready&&Nl(a.providerId,e.riskClass));if(r.length===0)return null;let n=[...r].sort(cm)[0],o="codex";if(n.providerId===o)return{providerId:n.providerId,binding:n.binding};let s=e.inventory.bindings[o],i;return Nl(o,e.riskClass)?s.ready||(i=s.note??`${o} not bound`):i=`${e.riskClass} orchestration requires privileged-capable provider`,{providerId:n.providerId,binding:n.binding,escalatedFrom:o,escalatedReason:i}}import{existsSync as uS}from"node:fs";import{homedir as dS}from"node:os";import pS from"node:path";var mS="claude";function fS(){let e=dS();return[pS.join(e,".claude",".credentials.json")]}function Hs(e=new Date().toISOString()){let r=Ae(mS,["KYNVER_CLAUDE_BIN","CLAUDE_BIN"]);if(process.env.ANTHROPIC_API_KEY?.trim())return{providerId:"claude",ready:!0,authSource:"api_key_env",sessionFingerprint:Qt("ANTHROPIC_API_KEY"),checkedAt:e,note:"ANTHROPIC_API_KEY present (env binding \u2014 cloud credits path, no token stored in Kynver)"};let t=ze(r,["--version"],{okNote:`${r} CLI available`,failPrefix:`${r} CLI not available`}),n=fS().find(i=>uS(i)),o=Ls(r,["auth","status"],{okNote:"claude auth status: authenticated",failNote:"claude auth status: not authenticated"}),s=t.ok&&(o.ok||!!n);return{providerId:"claude",ready:s,authSource:"oauth_local",sessionFingerprint:n?qe(n):void 0,checkedAt:e,note:s?"Local Claude Code OAuth session bound on runner":[t.note,o.note,n?void 0:"no ~/.claude/.credentials.json"].filter(Boolean).join("; ")}}import{existsSync as gS}from"node:fs";import{homedir as hS}from"node:os";import kS from"node:path";var yS="agent";function RS(){let e=hS();return[kS.join(e,".config","cursor","auth.json")]}function Fs(e=new Date().toISOString()){let r=Ae(yS,["KYNVER_CURSOR_AGENT_BIN","CURSOR_AGENT_BIN"]);if(process.env.CURSOR_API_KEY?.trim())return{providerId:"cursor",ready:!0,authSource:"api_key_env",sessionFingerprint:Qt("CURSOR_API_KEY"),checkedAt:e,note:"CURSOR_API_KEY present (env binding \u2014 cloud credits path, no token stored in Kynver)"};let t=ze(r,["-v"],{okNote:`${r} CLI available`,failPrefix:`${r} CLI not available`}),n=RS().find(s=>gS(s)),o=!!n&&t.ok;return{providerId:"cursor",ready:o,authSource:"oauth_local",sessionFingerprint:n?qe(n):void 0,checkedAt:e,note:o?"Local Cursor/Composer OAuth session bound on runner":[t.note,n?void 0:"no ~/.config/cursor/auth.json"].filter(Boolean).join("; ")}}import{existsSync as bS,readFileSync as vS}from"node:fs";import{homedir as SS}from"node:os";import Tl from"node:path";var CS=["OPENAI_API_KEY","ANTHROPIC_API_KEY","KYNVER_API_KEY","KYNVER_BASE_URL"];function wS(){let e=process.env.HERMES_HOME?.trim(),r=e?Tl.resolve(e):Tl.join(SS(),".hermes");return Tl.join(r,".env")}function _S(e){try{let r=vS(e,"utf8"),t=[];for(let n of CS)new RegExp(`^${n}=`,"m").test(r)&&t.push(n);return t}catch{return[]}}function Dl(e=new Date().toISOString()){let r=Ae("hermes",["KYNVER_HERMES_BIN","HERMES_BIN"]),t=ze(r,["--version"],{okNote:`${r} CLI available`,failPrefix:`${r} CLI not available`}),n=wS(),o=bS(n),s=o?_S(n):[],a=s.some(c=>c.endsWith("_API_KEY"))?"api_key_env":o?"oauth_local":"none",l=t.ok&&o;return{adapterId:"hermes",cliAvailable:t.ok,profileBound:o,authSource:a,sessionFingerprint:o?qe(n):void 0,checkedAt:e,note:l?`Hermes profile bound (${s.length?`keys: ${s.join(", ")}`:"no API keys detected"})`:[t.note,o?void 0:"no ~/.hermes/.env"].filter(Boolean).join("; ")}}function Ml(e={}){let r=e.nowIso?.()??new Date().toISOString(),t=Ir(r),n={codex:t,cursor:Fs(r),claude:Hs(r)},o=Object.values(n).filter(s=>s.ready).length;return{generatedAt:r,bindings:n,cloudApiCredits:{anthropicApiKey:!!process.env.ANTHROPIC_API_KEY?.trim(),openaiApiKey:!!process.env.OPENAI_API_KEY?.trim(),codexApiKey:!!process.env.CODEX_API_KEY?.trim()},hermes:Dl(r),hermesOpenAiCodex:oo(r),codexAdapterPath:t.path,readyCount:o}}function xS(e,r){switch(e){case"codex":return Ir(r);case"cursor":return Fs(r);case"claude":return Hs(r)}}var ES=[/\bprivileged\b/i,/\bproduction\s+db\b/i,/\bdb:push\b/i,/\bmigration\b/i,/\bdeploy\b/i,/\bsecrets?\b/i,/\bstripe\b/i,/\[require-approval\]/i,/\[operator-only\]/i],PS=[/\borchestration\b/i,/\bplan[- ]?progress\b/i,/\bstatus\s+sync\b/i,/\bheartbeat\b/i,/\bboard[- ]?drain\b/i,/\bmaintenance\b/i,/\[orchestration:\s*low-risk\]/i];function Ul(e,r){let t=e[r];return typeof t=="string"?t.trim():""}function um(e){let r=Ul(e,"executorRef").toLowerCase(),t=Ul(e,"title").toLowerCase(),n=Ul(e,"description").toLowerCase(),o=`${r}
 ${t}
-${n}`;return kb.some(s=>s.test(o))?"privileged":r.includes("provider:claude")||r.includes("deep_review")||r.includes("security")||r.includes("landing")||r.includes("review")||t.startsWith("land:")||r.includes("implementer")||r.includes("repair")||t.includes("implement")?"elevated":yb.some(s=>s.test(o))?"low":"elevated"}function Rb(e){let r=Jr(e.provider),t=e.escalatedFrom&&e.escalatedReason?`Escalated from ${e.escalatedFrom} (${e.escalatedReason}); using ${r.displayName} (${r.costTier} tier)`:`${r.displayName} selected for ${e.riskClass} orchestration (${r.costTier} tier, auth=${e.authSource})`;return{provider:e.provider,model:e.model,authSource:e.authSource,costTier:r.costTier,riskClass:e.riskClass,costRationale:t,routingRule:e.routingRule,escalatedFrom:e.escalatedFrom,escalatedReason:e.escalatedReason}}function vb(e){let r=e.inventory??il();return e.codexBinding?{...r,bindings:{...r.bindings,codex:e.codexBinding}}:r}function qr(e){let r=Rb({provider:e.providerId,model:e.model,authSource:e.binding.authSource,riskClass:e.riskClass,routingRule:e.routingRule,escalatedFrom:e.escalatedFrom,escalatedReason:e.escalatedReason});return{provider:e.providerId,model:e.model,rule:r.routingRule,audit:r}}function ll(e){let r=e.task??{},t=vp(r),n=vb({inventory:e.inventory,codexBinding:e.codexBinding??(e.inventory?null:br())}),o=e.preferLowCost===!1?null:e.explicitProvider?.trim().toLowerCase(),s=e.explicitModel?.trim()||void 0,i=xe;if(o==="codex"||o==="provider:codex"){let c=n.bindings.codex;if(!c.ready){let u=gs({inventory:n,riskClass:t});return qr(u?{providerId:u.providerId,binding:u.binding,riskClass:t,routingRule:"orchestration:explicit_codex_unavailable_cost_aware",model:s,escalatedFrom:"codex",escalatedReason:c.note??"codex oauth not bound"}:{providerId:i,binding:n.bindings[i],riskClass:t,routingRule:"orchestration:codex_unavailable_escalate_cursor",model:s,escalatedFrom:"codex",escalatedReason:c.note??"codex oauth not bound"})}return qr({providerId:"codex",binding:c,riskClass:t,routingRule:"orchestration:explicit_codex",model:s})}if(o==="cursor"||o==="provider:cursor"){let c=n.bindings.cursor;if(c.ready)return qr({providerId:"cursor",binding:c,riskClass:t,routingRule:"orchestration:explicit_cursor",model:s})}if(o==="claude"||o==="provider:claude"){let c=n.bindings.claude;if(c.ready)return qr({providerId:"claude",binding:c,riskClass:t,routingRule:"orchestration:explicit_claude",model:s})}let a=gs({inventory:n,riskClass:t});if(a)return qr({providerId:a.providerId,binding:a.binding,riskClass:t,routingRule:`orchestration:cost_aware_${a.providerId}`,model:s,escalatedFrom:a.escalatedFrom,escalatedReason:a.escalatedReason});let l=n.bindings.codex;return qr({providerId:i,binding:n.bindings[i],riskClass:t,routingRule:l.ready?"orchestration:inventory_empty_default_cursor":"orchestration:codex_unavailable_default_cursor",model:s,...l.ready?{}:{escalatedFrom:"codex",escalatedReason:l.note??"codex oauth not bound"}})}Nr();w();import{closeSync as Sp,openSync as wp}from"node:fs";import{spawn as _b}from"node:child_process";var bb=/-(?:thinking(?:-(?:high|medium|low|minimal|max|none))?|high|medium|low|minimal)$/i;function Sb(e){return e.replace(bb,"")}var wb=/^(?:gpt-|gpt5|o1|o3|o4|gemini-|grok-|composer|deepseek|llama|mistral|qwen|command-)/i;function cl(e){return/^claude[-_]/i.test(e)||/^(?:opus|sonnet|haiku)\b/i.test(e)}var Cb=new Set(["cursor"]);function bp(e){let r=e.trim().toLowerCase();return Cb.has(r)?"auto":null}function ys(e,r){let t=(e??"").trim();if(!t)return{ok:!0,model:r,normalized:!1};let o=Sb(t).trim()||r;return wb.test(o)||!cl(o)&&o!==r?{ok:!1,model:t,normalized:!1,requested:t,note:`model "${t}" is not a Claude model \u2014 the "claude" provider drives the Claude CLI, which only accepts claude-* model ids (got "${o}"). Pick a Claude model or switch the worker provider.`}:o!==t?{ok:!0,model:o,normalized:!0,requested:t,note:`normalized model "${t}" \u2192 "${o}" (the Claude CLI rejects reasoning-effort suffixes)`}:{ok:!0,model:o,normalized:!1}}function zr(e,r){let t=(e??"").trim();return t?cl(t)?{ok:!1,model:t,normalized:!1,requested:t,note:`model "${t}" is a Claude model but the worker provider is "codex". Switch the provider or pick a Codex/OpenAI model.`}:{ok:!0,model:t,normalized:!1}:{ok:!0,model:r,normalized:!1}}function Rs(e,r){let t=(e??"").trim();if(!t)return{ok:!0,model:r,normalized:!1};let n=bp(t);return n?{ok:!0,model:n,normalized:!0,requested:t,note:`normalized model "${t}" \u2192 "${n}" (Cursor provider alias \u2014 use "auto" or a composer id, not "cursor")`}:cl(t)?{ok:!1,model:t,normalized:!1,requested:t,note:`model "${t}" is a Claude model but the worker provider is "cursor". Switch the provider to "claude" or pick a Cursor model.`}:{ok:!0,model:t,normalized:!1}}var Wt="claude-sonnet-4-6",Cp={name:"claude",defaultModel:Wt,preflightModel(e){return ys(e,Wt)},start(e){let r=ys(e.model,Wt);if(!r.ok)throw new Error(`claude provider model preflight failed: ${r.note}`);let t=r.model,n=wp(e.stdoutPath,"a"),o=wp(e.stderrPath,"a"),s=["ignore",n,o],i=_b("claude",["--model",t,"-p","--verbose","--permission-mode","bypassPermissions","--output-format","stream-json","--include-partial-messages",e.prompt],le({cwd:e.worktreePath,detached:!0,stdio:s,env:Ne(process.env)}));if(Sp(n),Sp(o),!i.pid)throw new Error("failed to spawn claude worker process (is the `claude` CLI on PATH?)");return i.unref(),{pid:i.pid,model:t}}};Nr();w();import{closeSync as Pp,existsSync as Pb,openSync as Ap}from"node:fs";import{spawn as Ip}from"node:child_process";Nr();w();import{closeSync as _p,openSync as xp}from"node:fs";import{spawn as xb}from"node:child_process";var vs=process.env.KYNVER_CODEX_DEFAULT_MODEL?.trim()||"gpt-5.4";function Eb(){return Ne({...process.env,CI:"1",NO_COLOR:"1",HERMES_ACCEPT_HOOKS:process.env.HERMES_ACCEPT_HOOKS??"1"})}function Ep(e,r){let t=process.env.KYNVER_HERMES_CODEX_MAX_TURNS?.trim()||"40";return["chat","-q",r,"--provider","openai-codex","-m",e,"-Q","--accept-hooks","--max-turns",t,"--toolsets","hermes-cli"]}var ul={name:"hermes-codex",defaultModel:vs,preflightModel(e){return zr(e,vs)},start(e){let r=zr(e.model,vs);if(!r.ok)throw new Error(`hermes-codex provider model preflight failed: ${r.note}`);let t=r.model,n=xp(e.stdoutPath,"a"),o=xp(e.stderrPath,"a"),s=["ignore",n,o],i=Pe("hermes",["KYNVER_HERMES_BIN","HERMES_BIN"]),a=Ep(t,e.prompt),l=xb(i,a,le({cwd:e.worktreePath,detached:!0,shell:!1,stdio:s,env:Eb()}));if(_p(n),_p(o),!l.pid)throw new Error(`failed to spawn Hermes openai-codex worker (is \`${i}\` on PATH? run \`hermes auth status openai-codex\`)`);return l.unref(),{pid:l.pid,model:t}}};function Ab(){return process.env.KYNVER_CODEX_DEFAULT_MODEL?.trim()||"gpt-5.4"}var Sr=Ab();function Ib(){return process.env.KYNVER_CODEX_BIN?.trim()||process.env.CODEX_BIN?.trim()||"codex"}function Ob(){return Ne({...process.env,CI:"1",NO_COLOR:"1"})}function Op(e,r){return["exec","--sandbox","read-only","--ask-for-approval","never","--model",e,r]}function Nb(e,r,t){if(!(process.platform!=="win32"&&Pb("/usr/bin/script")))return Ip(e,r,t);let o=[e,...r].map(s=>`'${s.replace(/'/g,"'\\''")}'`).join(" ");return Ip("script",["-qfc",o,"/dev/null"],t)}var dl={name:"codex",defaultModel:Sr,preflightModel(e){return zr(e,Sr)},start(e){if(br().path==="hermes_openai_codex")return ul.start(e);let t=zr(e.model,Sr);if(!t.ok)throw new Error(`codex provider model preflight failed: ${t.note}`);let n=t.model,o=Ap(e.stdoutPath,"a"),s=Ap(e.stderrPath,"a"),i=["ignore",o,s],a=Ib(),l=Op(n,e.prompt),c=Nb(a,l,le({cwd:e.worktreePath,detached:!0,shell:!1,stdio:i,env:Ob()}));if(Pp(o),Pp(s),!c.pid)throw new Error(`failed to spawn Codex worker (is \`${a}\` on PATH? run \`codex login\` or set CODEX_API_KEY)`);return c.unref(),{pid:c.pid,model:n}}};var Tb="claude-sonnet-4-6",Za="composer-2.5";function bs(e,r){let t=e[r];return typeof t=="string"?t.trim():""}function Np(e){return e.toLowerCase()}function ml(e=v()){let r=e.defaultModel?.trim();if(r)return r;let t=process.env.KYNVER_DEFAULT_MODEL?.trim();return t||Tb}function pl(e){let r=(e??"").toLowerCase();return!r||r.includes("composer")||r.includes("cursor")||r.includes("codex")||r.startsWith("gpt-")||r.startsWith("gpt5")?"cursor":/^claude[-_]/i.test(r)||/^(?:opus|sonnet|haiku)\b/i.test(r)?"claude":"cursor"}function Db(e,r){let t=e.trim().toLowerCase(),n=r?.trim();return t==="cursor"?{model:Za,provider:"cursor",rule:n&&n!=="cursor"?"explicit:model_provider_alias_overrode_provider":"explicit:model_provider_alias",requestedModel:e}:t==="claude"||t==="anthropic"?{model:Wt,provider:"claude",rule:n&&n!=="claude"?"explicit:model_provider_alias_overrode_provider":"explicit:model_provider_alias",requestedModel:e}:null}function Tp(e,r){return!!(e.includes("deep")&&e.includes("review")||e.includes("security")||e.includes("plan_author")||e.includes("plan-author")||r.includes("deep review")||r.includes("security review")||e.includes("plan")&&!e.includes("review")&&(e.includes("author")||e.includes("strategy")))}function Mb(e){let r=Np(bs(e,"executorRef")),t=bs(e,"title").toLowerCase(),n=bs(e,"priority")||"normal",o=Np(bs(e,"roleLane"));if(r.includes("provider:codex")||r.startsWith("codex:"))return{provider:"codex",model:Sr,rule:"lane:codex_orchestration"};if(r.includes("cursor")||r.includes("composer")||r.includes("copilot")||o==="implementer"||o==="repair_implementer")return{provider:"cursor",rule:"lane:implementation"};if(r.includes("codex"))return{provider:"codex",model:Sr,rule:"lane:codex_orchestration"};if(r.includes("landing")||t.startsWith("land:")||t.includes(" merge"))return{provider:"cursor",rule:"lane:landing"};if(r.includes("review")||/^review[\s:]/.test(t)||o.includes("review"))return Tp(r,t)||o==="deep_reviewer"?{provider:"cursor",rule:"lane:deep_review"}:{provider:"cursor",rule:"lane:review"};if(Tp(r,t)||o==="plan_author")return{provider:"cursor",rule:"lane:planning"};if(n==="critical")return{provider:"cursor",rule:"priority:critical"};if(n==="high")return{provider:"cursor",rule:"priority:high"};if(n==="low")return{provider:"cursor",rule:"priority:low"};let s=ml();return{model:s,provider:pl(s),rule:"default:global"}}function Ss(e){let r;if(e.explicitModel?.trim()){let o=e.explicitModel.trim(),s=Db(o,e.explicitProvider);s?r=s:r={model:o,provider:e.explicitProvider?.trim()||pl(o),rule:"explicit:cli",requestedModel:o}}else if(e.task&&Object.keys(e.task).length>0){let o=Mb(e.task);r={...o,requestedModel:o.model}}else{let o=ml();r={model:o,provider:e.explicitProvider?.trim()||pl(o),rule:"default:global",requestedModel:o}}let t=Qa({routing:r,task:e.task,explicitProvider:e.explicitProvider,explicitProviderIsOperatorOverride:e.explicitProviderIsOperatorOverride});if(!e.task||Object.keys(e.task).length===0||t.rule==="explicit:model_provider_alias"||t.rule==="explicit:model_provider_alias_overrode_provider"||t.rule==="explicit:cli"||Ge(t.provider)&&(e.explicitProviderIsOperatorOverride||ms(e.task)))return t;let n=ll({task:e.task,explicitProvider:e.explicitProvider??t.provider,explicitModel:t.model});return{provider:n.provider,model:n.provider==="codex"?n.model??t.model??Sr:t.model,rule:n.rule,requestedModel:t.requestedModel,orchestrationAudit:n.audit}}function Dp(e,r,t){return e||r||t||ml()||Wt}function Mp(e,r){let t=Number(e);return!Number.isFinite(t)||t<=0?r:Math.floor(t)}function Up(){return{maxTaskAttempts:Mp(process.env.KYNVER_MAX_TASK_ATTEMPTS,Math.floor(Yr("harness.maxTaskAttempts",4))),dispatchCooldownMs:Mp(process.env.KYNVER_DISPATCH_COOLDOWN_MS,Math.floor(Yr("harness.dispatchCooldownMs",5e3)))}}O();import Wb from"node:path";L();G();w();var fl="kynver-harness:",Lp="@runner:";function gl(e){return e?.trim()?e.trim():null}function Ub(e){let r=gl(e);if(!r?.startsWith(fl))return null;let t=r.slice(fl.length),n=t.indexOf(Lp);return n>=0?t.slice(0,n).trim()||null:t.trim()||null}function hl(e,r){let t=e.trim(),n=r.trim();return`${fl}${t}${Lp}${n}`}function kl(e,r){let t=gl(r);return t?Ub(e)===t:!1}function ws(e){let r=gl(e.workerLeaseOwner);return r&&kl(r,e.runId)?r:hl(e.runId,e.runnerId)}import Bp from"node:os";De();De();import Lb from"node:os";function Bb(e=process.env){return Te(e).boxKind}function $n(e,r){let t=(r??Lb.hostname()).trim().toLowerCase().replace(/\s+/g,"-")||"unknown-host";return`${e}:${t}`}function wr(e){return e?.trim()?e.trim():null}function qe(e={}){let r=e.env??process.env;return{runnerId:wr(r.KYNVER_RUNTIME_ID)??wr(r.OPENCLAW_RUNTIME_ID)??wr(r.HOSTNAME)??Bp.hostname(),hostname:wr(r.HOSTNAME)??Bp.hostname(),profile:wr(r.KYNVER_RUNNER_PROFILE)??wr(r.OPENCLAW_RUNNER_PROFILE),harnessRepo:wr(r.KYNVER_HARNESS_REPO)??wr(r.KYNVER_DEFAULT_REPO),runId:e.runId??null,instructionBundleVersion:vr()}}function Wp(e,r){return _(Wb.join(x(e),"workers",R(r),"worker.json"),void 0)}async function Cs(e,r){let t=U(e),n=String(r.agentOsId||"");if(!n)return{renewed:[],failed:[],skipped:[]};let o=B(r.baseUrl?String(r.baseUrl):void 0),s=await K(r.secret?String(r.secret):void 0,n,{baseUrl:o}),i=Number(r.leaseMs)>0?Math.floor(Number(r.leaseMs)):_s,a=qe({runId:e}).runnerId,l=[],c=[],u=[];for(let d of Object.keys(t.workers||{})){let f=Wp(e,d);if(!f?.taskId||!f.agentOsId){u.push(d);continue}if(!$(f.pid)){u.push(d);continue}if(T(f).status==="done"){u.push(d);continue}let p=ws({runId:e,workerLeaseOwner:f.leaseOwner??null,runnerId:a}),g=`${o}/api/agent-os/by-id/${encodeURIComponent(n)}/tasks/${encodeURIComponent(f.taskId)}/renew-lease`,k=await q(g,s,{leaseOwner:p,leaseDurationMs:i,...f.leaseToken?{leaseToken:f.leaseToken}:{}},{agentOsId:n,baseUrl:o});if(k.ok){l.push(d);continue}let h=k.response&&typeof k.response=="object"&&"reason"in k.response?String(k.response.reason??`http ${k.status}`):`http ${k.status}`;c.push({worker:d,reason:h})}return{renewed:l,failed:c,skipped:u}}function Hp(e,r){let t=U(e);for(let n of Object.keys(t.workers||{})){let o=Wp(e,n);if(!(!o||o.taskId!==r||!$(o.pid)||T(o).status==="done"))return!0}return!1}Ce();L();L();import{existsSync as ow,mkdirSync as sw}from"node:fs";import Ft from"node:path";var Hb=/<!--\s*harness-contract:\s*(\{[\s\S]*?\})\s*-->/i,Fb="next-action-fix:";function xs(e){if(typeof e!="string")return null;let r=e.trim();return r.length?r:null}function Fp(e){let r=e.trim().match(/github\.com\/([^/]+\/[^/]+)\/(?:pull|pulls)\/(\d+)/i);return r?`https://github.com/${r[1]}/pull/${r[2]}`:xs(e)}function $b(e){let r=(e.title??"").trim().toLowerCase();if(r.startsWith("fix:")||r.startsWith("repair:"))return!0;let t=(e.executorRef??"").toLowerCase();return!!(t.startsWith(Fb)||t.includes("repair")||t.includes("unblock"))}function Kb(e){let r={repairEnforceOriginalPr:!1,targetPrUrl:null,targetPrBranch:null};if(!e)return r;let t=e.match(Hb);if(!t?.[1])return r;try{let n=JSON.parse(t[1]),o=xs(String(n.targetPrUrl??n.target_pr_url??"")),s=xs(String(n.targetPrBranch??n.target_pr_branch??""));return{repairEnforceOriginalPr:n.repairEnforceOriginalPr===!0||n.repair_enforce_original_pr===!0||!!o,targetPrUrl:o?Fp(o):null,targetPrBranch:s}}catch{return r}}function $p(e){if(!$b(e))return null;let r=Kb(e.description),t=e.prUrl?Fp(e.prUrl):null,n=r.targetPrUrl??t;return n?{targetPrUrl:n,targetPrBranch:r.targetPrBranch??xs(e.branch)}:null}function Kp(e){return["Repair target PR policy:","- Work on the existing target PR branch \u2014 do not open a duplicate repair PR by default.",`- Canonical target PR: ${e.targetPrUrl}`,...e.targetPrBranch?[`- Canonical target branch: \`${e.targetPrBranch}\` (checkout is already on this branch).`]:[],`- Reconcile ${e.targetPrUrl} in structured finalResult.targetPrReconciliation.`,"- Only supersede the original when the branch is inaccessible: set supersedesOriginalTargetPr: true with reason and close/comment on the original PR."]}function yl(e){let r=e.ownedPaths.length?`Owned paths: ${e.ownedPaths.join(", ")}. Do not edit outside these paths without stopping and reporting why.`:"Owned paths: unrestricted for this worker, but keep edits tightly scoped.",t=!!e.model?.toLowerCase().includes("haiku"),n=t?"compact":"full",o=t?e.planId?`Active planId: ${e.planId}`:"No planId on this worker.":e.planId?`Active planId: ${e.planId}${e.taskId?` \xB7 taskId: ${e.taskId}`:""}`:"No planId on this worker \u2014 still emit progress when you touch plan-scoped work.",s=[...Lt(`worker.prompt.progress.${n}`).split(`
-`),o],i=Lt(`worker.prompt.merge_gate.${n}`).split(`
-`),a=Lt(`worker.prompt.plan_artifacts.${n}`).split(`
-`);return["You are running under the Kynver AgentOS runtime.","Immediately state your plan before editing.",r,`Worktree: ${e.worktreePath}`,`Progress heartbeat file: ${e.heartbeatPath}`,"After each major step, append one JSON line to the heartbeat file with fields: ts, phase, summary, changedFiles, blocker.","Final response must include files changed, verification commands, and unresolved risks.",...Lt("worker.prompt.core_rules").split(`
-`),"",...s,"",...i,"",...a,"",...e.contextEnvelopeMarkdown?.trim()?[e.contextEnvelopeMarkdown.trim(),""]:[],...e.personaMarkdown?.trim()?[e.personaMarkdown.trim(),""]:[],...e.instructionPolicyMarkdown?.trim()?["Operating rules (from AgentOS memory policy):",e.instructionPolicyMarkdown.trim(),""]:[],...e.memoryQualityMarkdown?.trim()?[e.memoryQualityMarkdown.trim(),""]:[],...e.repairTargetPrUrl?[...Kp({targetPrUrl:e.repairTargetPrUrl,targetPrBranch:e.repairTargetBranch??null}),""]:[],"Task:",e.task].join(`
-`)}w();O();w();Nr();import{closeSync as vl,existsSync as Vp,mkdirSync as Jb,openSync as bl,statSync as qb,unlinkSync as jp}from"node:fs";import{spawn as zb}from"node:child_process";import Xb from"node:os";import ze from"node:path";import{existsSync as Kn,readdirSync as jb}from"node:fs";import Xr from"node:path";var Vb=/^\d{4}\.\d{1,2}\.\d{1,2}-[a-f0-9]+$/i;function Gb(e){let t=e.split("-")[0].split(".");if(t.length!==3)return null;let[n,o,s]=t;return!n||!o||!s?null:+`${n}${o.padStart(2,"0")}${s.padStart(2,"0")}`}function Yb(e){let r=Xr.join(e,"versions");if(!Kn(r))return null;let t=null,n=-1;for(let o of jb(r,{withFileTypes:!0})){if(!o.isDirectory()||!Vb.test(o.name))continue;let s=Gb(o.name);s==null||s<=n||(n=s,t=Xr.join(r,o.name))}return t}function Es(e){let r=e?.trim()||Xr.join(process.env.LOCALAPPDATA||"","cursor-agent"),t=Xr.join(r,"node.exe"),n=Xr.join(r,"index.js");if(Kn(t)&&Kn(n))return{nodeExe:t,indexJs:n,versionDir:r};let o=Yb(r);if(!o)return null;let s=Xr.join(o,"node.exe"),i=Xr.join(o,"index.js");return!Kn(s)||!Kn(i)?null:{nodeExe:s,indexJs:i,versionDir:o}}var Rl="composer-2.5",Qb=15e3,Zb=6e4,eS=3e4;function rS(e,r,t){return{executable:e,prefixArgs:[r],shell:!1,detached:!0,bundledVersionDir:t}}function tS(e){if(process.platform==="win32"){let r=/\.(cmd|bat)$/i.test(e),t=/node\.exe$/i.test(e)&&Vp(ze.join(ze.dirname(e),"index.js"));if(r||t||e==="agent"){let o=r?Es(ze.dirname(e)):t?{nodeExe:e,indexJs:ze.join(ze.dirname(e),"index.js"),versionDir:ze.dirname(e)}:Es();if(o)return rS(o.nodeExe,o.indexJs,o.versionDir);throw new Error("Cursor Agent on Windows has no headless bundled node.exe under %LOCALAPPDATA%\\cursor-agent\\versions\\\u2026. Run `agent login` / update Cursor Agent CLI, use `--provider claude`, or set KYNVER_CURSOR_AGENT_ROOT to the cursor-agent folder.")}}return{executable:e,prefixArgs:[],shell:!1,detached:!0}}function nS(){let e=process.env.KYNVER_CURSOR_AGENT_BIN?.trim()||process.env.CURSOR_AGENT_BIN?.trim();if(e)return e;if(process.platform==="win32"){let r=Es(process.env.KYNVER_CURSOR_AGENT_ROOT?.trim()||void 0);if(r)return r.nodeExe;let t=ze.join(process.env.LOCALAPPDATA||"","cursor-agent","agent.cmd");if(Vp(t))return t}return"agent"}function oS(e,r){return Ne({...process.env,CI:"1",NO_COLOR:"1",...r.bundledVersionDir?{CURSOR_INVOKED_AS:ze.basename(e)||"agent.cmd"}:{}})}function Gp(e){e<=0||Atomics.wait(new Int32Array(new SharedArrayBuffer(4)),0,0,e)}function Sl(e,r){let t=process.env[e];if(!t)return r;let n=Number(t);return Number.isFinite(n)&&n>=0?Math.floor(n):r}function sS(){let e=process.env.KYNVER_CURSOR_START_LOCK_DIR?.trim()||ze.join(Xb.homedir(),".kynver","locks");return Jb(e,{recursive:!0}),ze.join(e,"cursor-agent-start.lock")}function iS(){if(process.env.KYNVER_CURSOR_START_LOCK==="0")return()=>{};let e=sS(),r=Sl("KYNVER_CURSOR_START_LOCK_TIMEOUT_MS",Zb),t=Sl("KYNVER_CURSOR_START_LOCK_STALE_MS",eS),n=Date.now();for(;;)try{let o=bl(e,"wx");return vl(o),()=>{try{jp(e)}catch{}}}catch(o){if(o.code!=="EEXIST")throw o;try{if(Date.now()-qb(e).mtimeMs>t){jp(e);continue}}catch{continue}if(Date.now()-n>r)throw new Error(`timed out waiting for Cursor agent start lock: ${e}`);Gp(250)}}var Yp={name:"cursor",defaultModel:Rl,preflightModel(e){return Rs(e,Rl)},start(e){let r=Rs(e.model,Rl);if(!r.ok)throw new Error(`cursor provider model preflight failed: ${r.note}`);let t=r.model,n=bl(e.stdoutPath,"a"),o=bl(e.stderrPath,"a"),s=["ignore",n,o],i=nS(),a=tS(i),l=iS(),c;try{c=zb(a.executable,[...a.prefixArgs,"-p","--force","--trust","--workspace",e.worktreePath,"--output-format","stream-json","--stream-partial-output","--model",t,e.prompt],le({cwd:e.worktreePath,detached:a.detached,shell:a.shell,stdio:s,env:oS(i,a)})),Gp(Sl("KYNVER_CURSOR_START_LOCK_HOLD_MS",Qb))}finally{l(),vl(n),vl(o)}if(!c.pid)throw new Error(`failed to spawn Cursor agent worker (is \`${i}\` on PATH? run \`agent login\` or set CURSOR_API_KEY)`);return c.unref(),{pid:c.pid,model:t}}};var Ps={claude:Cp,codex:dl,cursor:Yp},Jp=null;function qp(e){if(Jp)return Jp;let r=e?.trim();if(r){let o=Ps[r];if(!o)throw new Error(`unknown worker provider "${r}" \u2014 supported: ${Object.keys(Ps).join(", ")}`);return o}let t=Hn(v().workerProvider),n=Ps[t];if(!n)throw new Error(`unknown worker provider "${t}" \u2014 supported: ${Object.keys(Ps).join(", ")}`);return n}w();import{spawn as JS}from"node:child_process";import{existsSync as qS,openSync as zS,closeSync as Om}from"node:fs";import Nm from"node:path";import{fileURLToPath as XS}from"node:url";L();function As(e){return!!e.completionReportedAt?.trim()}function wl(e,r,t){e.completionReportedAt=t.completionReportedAt,e.completionOutcome=t.completionOutcome,t.completionResponse!==void 0&&(e.completionResponse=t.completionResponse),V(r,e)}function aS(e){if(typeof e!="string")return null;let r=e.trim();return r.length?r:null}function Cl(e){return!!(aS(e.completionBlocker)||e.completionOutcome==="rejected")}function Qr(e){return As(e)&&!Cl(e)}L();G();O();import qn from"node:path";function _l(e){return e&&typeof e=="object"&&!Array.isArray(e)?e:null}function jn(e){if(typeof e!="string")return null;let r=e.trim();return r.length?r:null}var lS=new Set(["review_scheduled","review_already_scheduled","skipped_terminal_task","closed","dispatched","dispatch_already_done"]);function zp(e){let r=_l(e);if(!r)return{routeOutcome:null,taskAdvanced:!1,detail:null};let t=jn(r.outcome),n=jn(r.detail)??jn(r.error),o=_l(r.task),s=_l(r.closedTask),i=o?jn(o.status):null,a=s?jn(s.status):null,l=t!==null&&lS.has(t)||i==="awaiting_review"||i==="done"||a==="done";return{routeOutcome:t,taskAdvanced:l,detail:n}}function Xp(e){return e.taskAdvanced}L();Pn();var cS="expert-lane-pr-review:",uS="plan-review-task",dS="scheduledjob:";function Qp(e){if(!e)return null;let r=e.trim().toLowerCase();return r.length?r:null}function Zp(e){let r=(e.executorRef??"").toLowerCase();if(r.startsWith(cS)||r===uS||r.startsWith("daemon-review:"))return!0;if(r.startsWith(dS)&&e.parentTaskId){let n=Qp(e.personaSlug);if(n==="lorentz"||n==="dalton")return!0}let t=(e.title??"").toLowerCase();if(t.includes("expert pr review"))return!0;if(e.parentTaskId&&(t.startsWith("review:")||t.includes("review required")||t.includes("runtime review"))){let n=Qp(e.personaSlug);if(n==="lorentz"||n==="dalton")return!0}return!1}var em=/^(lane:)?(review|deep_review|planning|landing)(:|$)/i,pS=new Set(qa()),mS=/no commits between/i;function rm(e){return!!(e&&mS.test(e))}function me(e){if(typeof e!="string")return null;let r=e.trim();return r.length?r:null}function tm(e){return!e?.checked||e.headIsAncestorOfBase!==!1?null:me(e.head)}function xl(e){if(e==null)return null;let t=(typeof e=="string"?e:typeof e=="object"&&e!==null&&"summary"in e?String(e.summary??""):JSON.stringify(e)).match(/https?:\/\/[^\s)>"]+\/(?:pull|pulls|merge_requests|pull-requests)\/\d+/i);return t?me(t[0]):null}function fS(e,r,t){let n=r.trim();if(!n)return null;let o=t.git(e,["rev-list","--count",`${n}..HEAD`]);if(o.status!==0)return null;let s=Number.parseInt(o.stdout.trim(),10);return Number.isFinite(s)?s:null}function gS(e,r){if(r.changedFiles.length>0)return!1;let t=me(e.personaSlug)?.toLowerCase();if(t&&pS.has(t))return!0;let n=me(e.routingRule)??"";return!!(n&&em.test(n))}function hS(e,r){if(e.changedFiles.length>0)return!0;let t=me(r?.baseRef);if(t&&r?.exec&&r.worktreePath){let n=fS(r.worktreePath,t,r.exec);if(n===0)return!1;if(n!==null&&n>0)return!0}return!!(me(e.headCommit)||tm(e.gitAncestry))}function El(e){if(!e.dispatched)return{required:!1,reason:"not_dispatched"};if(Zp({title:e.taskTitle??void 0,personaSlug:e.personaSlug,parentTaskId:e.parentTaskId,executorRef:e.executorRef}))return{required:!1,reason:"expert_review_task"};let r=me(e.routingRule)??"";if(r&&em.test(r))return{required:!1,reason:"review_lane"};let t=e.worker??{personaSlug:e.personaSlug,routingRule:e.routingRule};if(gS(t,e.snapshot))return{required:!1,reason:"review_artifact"};if(me(e.patchPath)||me(e.artifactBundlePath))return{required:!1,reason:"patch_or_bundle"};if(me(e.repairTargetPrUrl))return{required:!1,reason:"repair_target_pr"};if(me(e.prUrl)??me(e.taskPrUrl)??me(e.snapshot.prUrl))return{required:!1,reason:"already_has_pr"};let s=e.exec&&e.baseRef?{baseRef:e.baseRef,exec:e.exec,worktreePath:e.snapshot.worktreePath}:void 0;return hS(e.snapshot,s)?{required:!0,snapshot:e.snapshot}:{required:!1,reason:"no_work_product"}}function nm(e,r){return{changedFiles:e.changedFiles,branch:e.branch,worktreePath:e.worktreePath,gitAncestry:e.gitAncestry,finalResult:e.finalResult,headCommit:me(r?.headCommit)??tm(e.gitAncestry),prUrl:me(r?.prUrl)??null}}import{spawnSync as kS}from"node:child_process";function sm(e){let r=e.trim();if(!r)return null;let t=r.match(/^git@github\.com:([^/]+\/[^/\s]+?)(?:\.git)?$/i);if(t)return om(t[1]);let n=r.match(/^ssh:\/\/git@github\.com\/([^/]+\/[^/\s]+?)(?:\.git)?$/i);if(n)return om(n[1]);try{let o=new URL(r.includes("://")?r:`https://${r}`);if(o.hostname.toLowerCase()!=="github.com")return null;let s=o.pathname.replace(/^\/+|\/+$/g,"").split("/");if(s.length<2)return null;let[i,a]=s;return!i||!a?null:`${i}/${a.replace(/\.git$/i,"")}`}catch{return null}}function om(e){let r=e.split("/").filter(Boolean);if(r.length<2)return null;let t=r[0],n=r[1].replace(/\.git$/i,"");return t&&n?`${t}/${n}`:null}Ce();function yS(e,r,t){try{let n=kS(e,t,{cwd:r,encoding:"utf8"});return{status:n.status,stdout:(n.stdout||"").trim(),stderr:(n.stderr||"").trim(),error:n.error?n.error.message:null}}catch(n){return{status:null,stdout:"",stderr:"",error:n.message}}}var Os={git:(e,r)=>Q(e,r),gh:(e,r)=>yS("gh",e,r)};function RS(e){return e.split(`
-`).map(r=>r.trim()).find(Boolean)??""}function im(e,r){let t=r.git(e,["remote","get-url","origin"]);return t.status!==0?null:sm(t.stdout)}function Vn(e,r){let t=r.git(e,["rev-parse","HEAD"]);return t.status!==0?null:t.stdout.trim()||null}function Is(e,r,t,n){let o=n.gh(e,["pr","list","--repo",r,"--head",t,"--state","open","--json","url","--limit","1"]);if(o.status!==0)return null;try{return JSON.parse(o.stdout)[0]?.url?.trim()||null}catch{return null}}function Ns(e){let{worktreePath:r,branch:t,commitMessage:n,hasDirtyFiles:o,exec:s}=e;if(o){let l=s.git(r,["add","-A"]);if(l.status!==0)return{ok:!1,committed:!1,pushed:!1,detail:l.stderr||l.stdout||l.error||"git add failed"};let c=s.git(r,["commit","-m",n]);if(c.status!==0)return{ok:!1,committed:!1,pushed:!1,detail:c.stderr||c.stdout||c.error||"git commit failed"}}let i=s.git(r,["push","-u","origin",t]);if(i.status!==0)return{ok:!1,committed:o,pushed:!1,detail:i.stderr||i.stdout||i.error||"git push failed"};let a=Vn(r,s)??void 0;return{ok:!0,committed:o,pushed:!0,headCommit:a}}function am(e){let r=Is(e.worktreePath,e.repo,e.branch,e.exec);if(r)return{ok:!0,prUrl:r,created:!1};let t=e.exec.gh(e.worktreePath,["pr","create","--repo",e.repo,"--base",e.base,"--head",e.branch,"--title",e.title,"--body",e.body,"--draft"]);if(t.status!==0)return{ok:!1,detail:t.stderr||t.stdout||t.error||"gh pr create failed"};let n=vS(t.stdout)??Is(e.worktreePath,e.repo,e.branch,e.exec);return n?{ok:!0,prUrl:n,created:!0}:{ok:!1,detail:"gh pr create succeeded but no PR URL was parsed"}}function vS(e){let t=RS(e).match(/https?:\/\/[^\s]+\/pull\/\d+/i);return t?t[0]:null}function bS(e){return e.gh(process.cwd(),["--version"]).status===0}function SS(e,r){return`AgentOS harness: ${e} (${r})`}function wS(e,r,t){return["Automated PR-ready handoff from the Kynver harness runtime.","",e?`AgentOS task: \`${e}\``:"",`Harness worker: \`${r}\` \xB7 run \`${t}\``,"","Opened by orchestrator completion enforcement so production review receives a reviewable artifact."].filter(Boolean).join(`
-`)}function Pl(e){if(e.snapshot.changedFiles.length===0)return{ok:!0,prUrl:e.prUrl,headCommit:e.snapshot.headCommit??Vn(e.snapshot.worktreePath,e.exec)??void 0};let r=Ns({worktreePath:e.snapshot.worktreePath,branch:e.snapshot.branch,commitMessage:e.commitMessage,hasDirtyFiles:!0,exec:e.exec});return r.ok?{ok:!0,prUrl:e.prUrl,headCommit:r.headCommit??e.snapshot.headCommit??void 0,committed:r.committed,pushed:r.pushed}:{ok:!1,reason:`PR-ready handoff blocked: ${r.detail??"git commit/push failed"}`,nextAction:"Commit and push the dirty worker changes to the existing PR branch, then rerun `kynver worker complete`."}}function Ts(e,r=Os){let t=e.prUrlHint??xl(e.status.finalResult)??null,n=nm(e.status,{prUrl:t,headCommit:null}),o=e.run.baseCommit?.trim()||e.run.base?.trim()||"origin/main";if(!El({dispatched:e.worker.dispatched,routingRule:e.worker.routingRule,personaSlug:e.worker.personaSlug,prUrl:t,taskTitle:e.worker.taskTitle,executorRef:e.worker.executorRef,parentTaskId:e.worker.parentTaskId,taskPrUrl:e.worker.taskPrUrl,repairTargetPrUrl:e.worker.repairTargetPrUrl,baseRef:o,exec:r,worker:e.worker,snapshot:n}).required)return t?Pl({snapshot:n,prUrl:t,commitMessage:`chore(harness): update PR handoff for ${e.worker.name}`,exec:r}):{ok:!0};if(t)return Pl({snapshot:n,prUrl:t,commitMessage:`chore(harness): update PR handoff for ${e.worker.name}`,exec:r});if(!bS(r)){let k=n.changedFiles.length;return{ok:!1,reason:`PR-ready handoff blocked: ${k?`${k} uncommitted change(s) with no PR URL`:"committed branch with no PR URL"}`,nextAction:"Install and authenticate GitHub CLI (`gh auth login`), then commit, push, and run `gh pr create` (or rerun `kynver worker complete` after the PR exists)."}}let i=im(n.worktreePath,r);if(!i)return{ok:!1,reason:"PR-ready handoff blocked: could not resolve github.com origin for the worktree",nextAction:"Ensure `origin` points at GitHub, push the branch, open a PR, and rerun `kynver worker complete`."};let a=e.worker.repairTargetPrUrl?.trim();if(a){let k=!1,h=!1,S=n.headCommit??Vn(n.worktreePath,r)??void 0;if(n.changedFiles.length>0){let A=Ns({worktreePath:n.worktreePath,branch:n.branch,commitMessage:`fix(harness): repair target PR ${a}`,hasDirtyFiles:!0,exec:r});if(!A.ok)return{ok:!1,reason:`PR-ready handoff blocked: ${A.detail??"git commit/push failed"}`,nextAction:"Commit and push to the target PR branch, then rerun `kynver worker complete`."};k=A.committed,h=A.pushed,S=A.headCommit??S}else{let A=r.git(n.worktreePath,["push","-u","origin",n.branch]);if(A.status!==0&&!/already up to date/i.test(A.stderr||A.stdout))return{ok:!1,reason:`PR-ready handoff blocked: ${A.stderr||A.stdout||"git push failed"}`,nextAction:"Push the target branch to origin, then rerun `kynver worker complete`."};h=A.status===0}return{ok:!0,prUrl:a,headCommit:S,committed:k,pushed:h}}let l=Is(n.worktreePath,i,n.branch,r);if(l)return Pl({snapshot:n,prUrl:l,commitMessage:`chore(harness): update PR handoff for ${e.worker.name}`,exec:r});let c=n.changedFiles.length>0,u=!1,d=!1,f=n.headCommit??void 0,m=Ns({worktreePath:n.worktreePath,branch:n.branch,commitMessage:`chore(harness): PR-ready handoff for ${e.worker.name}`,hasDirtyFiles:c,exec:r});if(c&&!m.ok)return{ok:!1,reason:`PR-ready handoff blocked: ${m.detail??"git commit/push failed"}`,nextAction:"Commit and push the branch, run `gh pr create`, then rerun `kynver worker complete`."};if(c){if(u=m.committed,d=m.pushed,!m.ok)return{ok:!1,reason:`PR-ready handoff blocked: ${m.detail??"git push failed"}`,nextAction:"Fix git auth or merge conflicts, push the branch, run `gh pr create`, then rerun `kynver worker complete`."}}else{let k=r.git(n.worktreePath,["push","-u","origin",n.branch]);if(k.status!==0&&!/already up to date/i.test(k.stderr||k.stdout))return{ok:!1,reason:`PR-ready handoff blocked: ${k.stderr||k.stdout||k.error||"git push failed"}`,nextAction:"Push the branch to origin, run `gh pr create`, then rerun `kynver worker complete`."};d=k.status===0}f=m.headCommit??f??Vn(n.worktreePath,r)??void 0;let p=e.run.base?.trim()||"main",g=am({worktreePath:n.worktreePath,repo:i,branch:n.branch,base:p.replace(/^origin\//,""),title:SS(e.worker.name,e.worker.runId),body:wS(e.worker.taskId,e.worker.name,e.worker.runId),exec:r});if(!g.ok||!g.prUrl){if(rm(g.detail))return{ok:!0,headCommit:f??void 0,committed:u,pushed:d};let k=n.changedFiles.length;return{ok:!1,reason:`PR-ready handoff blocked: ${k?`${k} uncommitted change(s) and no PR URL after handoff attempt`:"no PR URL after handoff attempt"}${g.detail?` (${g.detail})`:""}`,nextAction:"Run `gh pr create` on the worker branch (or fix `gh` auth), attach the PR URL to the task, then rerun `kynver worker complete`."}}return{ok:!0,prUrl:g.prUrl,headCommit:f??void 0,committed:u,pushed:d,created:g.created}}G();En();function Ds(e){return e.filter(r=>{let t=r.trim(),n=t.startsWith("??")?t.slice(2).trim():t.length>3?t.slice(3).trim():t;return n!=="node_modules"&&!n.startsWith("node_modules/")})}function lm(e){let r=e.trim();return r.startsWith("??")?r.slice(2).trim():r.length>3&&/^[ MADRCU?!]{2} /.test(r.slice(0,3))?r.slice(3).trim():r}function cm(e){return Array.isArray(e)?e.map(r=>typeof r=="string"?r.trim():"").filter(Boolean):[]}function um(e){return e&&typeof e=="object"&&!Array.isArray(e)?e:null}function pm(e){let r=um(e);if(!r)return[];let t=um(r.worktreeHandoff),n=cm(t?.disposableArtifactsRemoved);return n.length?n:cm(r.disposableArtifactsRemoved)}function dm(e){return e.replace(/\\/g,"/").replace(/^\.\//,"").replace(/\/+$/,"")}function mm(e,r){let t=Ds(e);if(t.length===0)return!0;if(r.length===0)return!1;let n=new Set(r.map(o=>dm(o)));return t.every(o=>{let s=dm(lm(o));return n.has(s)})}function Ms(e){if(typeof e!="string")return null;let r=e.trim();return r.length?r:null}function fm(e){return Array.isArray(e)?e.map(r=>typeof r=="string"?r.trim():"").filter(Boolean):[]}function CS(e){return e==null?!1:typeof e=="string"?e.trim().length>0:typeof e=="boolean"?e:Array.isArray(e)?e.length>0:typeof e=="object"?Object.keys(e).length>0:!0}function _S(e){let r=fm(e.disposableArtifactsRemoved),t=pm(e.finalResult);return[...new Set([...r,...t])]}function gm(e){let r=fm(e.changedFiles),t=Ds(r),n=_S(e),o=t.length===0||mm(r,n);return Ms(e.prUrl)?o?{allowed:!0,state:"pr_handoff",materialDirtyCount:0}:{allowed:!1,state:"dirty_worktree",materialDirtyCount:t.length,detail:`Worktree has ${t.length} uncommitted change(s) with a PR attached; commit or discard before completing`}:Ms(e.headCommit)?o?{allowed:!0,state:"commit_handoff",materialDirtyCount:0}:{allowed:!1,state:"dirty_worktree",materialDirtyCount:t.length,detail:`Worktree has ${t.length} uncommitted change(s) on top of a commit; commit or discard before completing`}:Ms(e.artifactBundlePath)||Ms(e.patchPath)?o?{allowed:!0,state:"commit_handoff",materialDirtyCount:0}:{allowed:!1,state:"dirty_worktree",materialDirtyCount:t.length,detail:`Worktree has ${t.length} uncommitted change(s) with a patch/bundle handoff; clean the tree before completing`}:o?{allowed:!0,state:"clean",materialDirtyCount:0}:CS(e.finalResult)?{allowed:!1,state:"dirty_worktree_no_pr",materialDirtyCount:t.length,detail:`Worktree has ${t.length} uncommitted change(s) with no commit or PR; commit, open a PR, discard, or remove one-off files via \`kynver worker discard-disposable\` before completing`}:{allowed:!1,state:"dirty_worktree",materialDirtyCount:t.length,detail:`Worktree has ${t.length} uncommitted change(s) with no final result`}}L();G();w();import xS from"node:path";var ES=new Set(["awaiting_review","blocked","done","needs_input","waiting","scheduled","ready","cancelled","failed"]);function hm(e){return!!(typeof e.completionReportedAt=="string"&&e.completionReportedAt.trim())}function PS(e){if(typeof e=="string"){let r=e.trim();return r.length?r:null}if(e&&typeof e=="object"&&!Array.isArray(e)){let r=e,t=r.summary??r.finalSummary??r.message;if(typeof t=="string"&&t.trim())return t.trim();try{return JSON.stringify(e)}catch{return null}}return null}function AS(e){let r=e.finalResult??null,t=typeof e.lastHeartbeatSummary=="string"?e.lastHeartbeatSummary:PS(r);return{finalResult:r??t??"completed",summary:t}}function Al(e,r,t){if(hm(e)&&e.status==="done"&&e.completionSnapshot!=null)return;let n=new Date().toISOString(),o=AS(r),s=t?.source?.trim();e.completionReportedAt=n,e.completionSnapshot=o,e.status="done",s&&(e.completionAckSource=s),V(e.runId,e)}function IS(e){let r=new Map,n=e.response?.tick?.filteredItems;if(!Array.isArray(n))return r;for(let o of n){if(o.kind!=="task"||typeof o.id!="string")continue;let s=typeof o.taskStatus=="string"?o.taskStatus.trim():"";s&&r.set(o.id,s)}return r}function km(e,r){let t=IS(r);if(t.size===0)return[];let n=U(e),o=[];for(let s of Object.keys(n.workers||{})){let i=_(xS.join(x(n.id),"workers",R(s),"worker.json"),void 0);if(!i?.taskId||hm(i))continue;let a=t.get(i.taskId);if(!a||a==="running"||!ES.has(a))continue;let l=T(i,{base:n.base,baseCommit:n.baseCommit});Al(i,l,{source:`board-task-${a}`}),o.push({worker:s,taskId:i.taskId,taskStatus:a})}return o}w();w();import Us from"node:path";var OS=/^[a-z0-9][a-z0-9._-]{0,127}$/i,NS=/^[a-z0-9][a-z0-9._-]{0,63}$/i,Il=new Set(["undefined","null"]),ym="usage: kynver worker <action> --run RUN_ID --name WORKER_NAME";function Gn(e){let r=e.trim();if(!OS.test(r))throw new Error(`invalid run id: ${e}`);return r}function Rm(e){let r=e.trim();if(!NS.test(r))throw new Error(`invalid worker name: ${e}`);return r}function Ol(e){return typeof e=="string"?e.trim():""}function Be(e){let r=Ol(e.run),t=Ol(e.name);return(!r||Il.has(r))&&fr(`missing --run RUN_ID (${ym})`),(!t||Il.has(t))&&fr(`missing --name WORKER_NAME (${ym})`),{runId:Gn(r),workerName:Rm(t)}}function Ls(e){let r=Ol(e.run);return(!r||Il.has(r))&&fr("missing --run RUN_ID (usage: kynver run status --run RUN_ID)"),Gn(r)}function Nl(e){let r=Us.resolve(e);if(r.includes(".."))throw new Error("repo path must not contain .. segments");return r}function TS(e,r){return r.map(t=>{let n=Us.resolve(e,t),o=Us.relative(e,n);if(o.startsWith("..")||Us.isAbsolute(o))throw new Error(`owned path escapes repo: ${t}`);return n})}function DS(e){return!Number.isFinite(e)||e<=0||e>500?40:Math.floor(e)}async function vm(e,r,t){let n=await fetch(e,{method:"POST",headers:Le(r),body:JSON.stringify(t)}),o=null;try{o=await n.json()}catch{o=null}return{ok:n.ok,status:n.status,parsed:o}}function MS(e){if(e&&typeof e=="object"){let r=e.error;if(typeof r=="string"&&r.trim())return r.trim()}}function bm(e){return e&&typeof e=="object"&&!Array.isArray(e)?e:null}function Yn(e){if(typeof e!="string")return null;let r=e.trim();return r.length?r:null}function US(e){return e.completionBlocker?`blocked:${e.completionBlocker}`:e.completionOutcome?e.completionOutcome:e.completionReportedAt?"completion_acknowledged":e.finished?"worker_finished":"in_progress"}function LS(e){return e.completionBlocker?"Resolve completion blocker, then rerun `kynver worker complete`.":e.completionOutcome==="review_scheduled"||e.completionOutcome==="review_already_scheduled"?"Await review lane and landing decision in Command Center.":e.completionOutcome==="needs_attention"?"Inspect blocker/attention reason in Command Center and dispatch a repair task.":e.finished&&!e.completionReportedAt?"Post completion acknowledgement to AgentOS (`kynver worker complete`).":null}function wm(e){let r=e?.trim();return r?/completion acknowledged but board not advanced/i.test(r)&&/task already terminal/i.test(r):!1}function BS(e){return e.prUrl?"pr_handoff":e.headCommit?"commit_handoff":e.changedFiles.length>0?"dirty_worktree":"none"}function Jn(e,r){(e.completionBlocker??void 0)!==(r??void 0)&&(r?e.completionBlocker=r:delete e.completionBlocker,V(e.runId,e))}function WS(e){e.completionBlocker&&(delete e.completionBlocker,V(e.runId,e))}function Bs(e){return e?{base:e.base,baseCommit:e.baseCommit}:{}}function HS(e,r){return{...e,...r.prUrl?{prUrl:r.prUrl}:{},...r.headCommit?{headCommit:r.headCommit}:{}}}async function zn(e){let{runId:r,workerName:t}=Be(e),n=ye(r,t),o=U(n.runId),s=T(n,Bs(o)),i=(e.agentOsId?String(e.agentOsId):n.agentOsId)||"",a=(e.taskId?String(e.taskId):n.taskId)||null;if(!Z(s))return{ok:!0,skipped:!0,reason:"worker-not-finished"};if(n.localOnly)return{ok:!0,skipped:!0,reason:"local-only-worker"};if(!i)return{ok:!1,reason:"missing agentOsId"};let l=e.force===!0||e.force==="true";if(!l&&Qr(n))return{ok:!0,skipped:!0,reason:"completion-already-acknowledged",httpStatus:200};if(!l&&Cl(n)&&WS(n),!(e.skipPrHandoff===!0||e.skipPrHandoff==="true")&&n.dispatched&&a){let E=Ts({worker:n,run:o,status:s});if(!E.ok)return Jn(n,E.reason),{ok:!1,reason:E.reason,nextAction:E.nextAction,completionBlocked:!0};(E.prUrl||E.headCommit)&&(s=T(n,Bs(o)),s=HS(s,E))}let u=s.gitAncestry.headIsAncestorOfBase===!1&&s.gitAncestry.head?s.gitAncestry.head:s.headCommit;if(n.dispatched){let E=gm({changedFiles:s.changedFiles,finalResult:s.finalResult,prUrl:s.prUrl,headCommit:u,disposableArtifactsRemoved:n.disposableArtifactsRemoved});if(!E.allowed){let b=E.detail??`worktree completion blocked (${E.state})`;return Jn(n,b),{ok:!1,reason:b,nextAction:"Clean the worktree (commit, open a PR, or `kynver worker discard-disposable --path <file>`), then rerun `kynver worker complete`.",completionBlocked:!0}}}let d=B(e.baseUrl?String(e.baseUrl):void 0),f=e.secret?String(e.secret):void 0,m=await K(f,i,{baseUrl:d}),p=`${d}/api/agent-os/by-id/${encodeURIComponent(i)}/harness/completion`,g={...s};n.disposableArtifactsRemoved?.length&&(g.disposableArtifactsRemoved=n.disposableArtifactsRemoved);let k={source:"kynver-harness",agentOsId:i,runId:n.runId,workerName:n.name,taskId:a,leaseToken:n.leaseToken??null,startedAt:n.startedAt,finishedAt:s.lastActivityAt||new Date().toISOString(),status:n.leaseToken?{...g,leaseToken:n.leaseToken}:g,workerInjection:{instructionPolicyFingerprint:n.instructionPolicyFingerprint??null,instructionPolicyEvidence:n.instructionPolicyEvidence??null,memoryQualityCapture:n.memoryQualityCapture??null,policyAt:n.instructionPolicyEvidence&&typeof n.instructionPolicyEvidence=="object"&&"policyAt"in n.instructionPolicyEvidence&&typeof n.instructionPolicyEvidence.policyAt=="string"?n.instructionPolicyEvidence.policyAt:null,personaSlug:n.personaSlug??null,personaEvidence:n.personaEvidence??null,contextEnvelopeEvidence:n.contextEnvelopeEvidence??null}},h=await vm(p,m,k);if((h.status===401||h.status===403)&&!f){let E=await Qd(i,{baseUrl:d});E&&E!==m&&(m=E,h=await vm(p,m,k))}if(h.ok){let E=zp(h.parsed);if(!Xp(E)){let se=`completion acknowledged but board not advanced: ${E.detail??(E.routeOutcome?`harness completion returned ${E.routeOutcome}`:"harness completion did not advance the linked task")}`;Jn(n,se);let $e={completionReportedAt:new Date().toISOString(),completionOutcome:"rejected",completionResponse:h.parsed};return wl(n,n.runId,$e),{ok:!1,httpStatus:h.status,response:h.parsed,reason:se,completionBlocked:!0}}Jn(n,void 0);let b=E.routeOutcome??"acknowledged",P={completionReportedAt:new Date().toISOString(),completionOutcome:"acknowledged",completionResponse:h.parsed};wl(n,n.runId,P),Al(n,s,{source:"harness-completion"});let H=s.prUrl;return{ok:!0,httpStatus:h.status,response:h.parsed,reason:b,...H?{prHandoff:{prUrl:H}}:{}}}let S=h.status===401||h.status===403,A=MS(h.parsed)??(S?"runner token unauthorized":"non-2xx response"),W=S?`completion replay rejected (${h.status}): ${A}`:`completion replay failed (${h.status}): ${A}`;return Jn(n,W),{ok:!1,httpStatus:h.status,response:h.parsed,completionBlocked:!0}}async function Ws(e){try{let{runId:r,workerName:t}=Be(e),n=ye(r,t),o=U(n.runId),s=T(n,Bs(o)),i=(e.agentOsId?String(e.agentOsId):n.agentOsId)||"",a=(e.taskId?String(e.taskId):n.taskId)||null;if(!Z(s)){console.log(JSON.stringify({worker:n.name,runId:n.runId,status:"skipped",reason:"worker-not-finished",workerStatus:s.status,alive:s.alive},null,2));return}if(n.localOnly){console.log(JSON.stringify({worker:n.name,runId:n.runId,status:"skipped",reason:"local-only-worker"},null,2));return}i||(console.error("worker complete requires --agent-os-id (or an agentOsId persisted at worker start)"),process.exit(1));let l=await zn(e);console.log(JSON.stringify({worker:n.name,runId:n.runId,...l.skipped?{status:"skipped"}:{},...l.reason?{reason:l.reason}:{},...l.nextAction?{nextAction:l.nextAction}:{},...l.completionBlocked?{completionBlocked:l.completionBlocked}:{},agentOsId:i,taskId:a,httpStatus:l.httpStatus,response:l.response},null,2)),l.ok||process.exit(1)}catch(r){console.error(`worker complete failed: ${r.message}`),process.exit(1)}}function Dl(e){let{runId:r,workerName:t}=Be(e),n=ye(r,t),o=U(n.runId),s=T(n,Bs(o));ce(qn.join(n.workerDir,"last-status.json"),s),console.log(JSON.stringify(s,null,2))}function FS(e){return{full:`kynver worker list --run ${e} --full`,blocked:`kynver worker list --run ${e} --blocked`,running:`kynver worker list --run ${e} --running`,task:`kynver worker list --run ${e} --task <task-id>`,worker:`kynver worker list --run ${e} --worker <worker>`,runFull:`kynver run status --run ${e} --full`,workerFull:`kynver worker status --run ${e} --name <worker>`,workerTail:`kynver worker tail --run ${e} --name <worker> --lines 80`}}function Tl(e){if(typeof e!="string")return;let r=e.trim();return r.length?r:void 0}function $S(e){let r={};(e.blocked===!0||e.blocked==="true")&&(r.blocked=!0),(e.running===!0||e.running==="true")&&(r.running=!0);let t=Tl(e.task??e.taskId);t&&(r.task=t);let n=Tl(e.worker??e.name);n&&(r.worker=n);let o=Tl(e.status);return o&&(r.status=o),r}function KS(e,r){if(r.blocked){let t=typeof e.attention=="string"?e.attention:"",n=typeof e.status=="string"?e.status:"";if(!(t==="blocked"||t==="needs_attention"||t==="stale"||n==="blocked"))return!1}return!(r.running&&!(e.status==="running"&&e.attention!=="blocked"&&e.attention!=="needs_attention")||typeof r.task=="string"&&e.taskId!==r.task||typeof r.worker=="string"&&e.worker!==r.worker||typeof r.status=="string"&&e.status!==r.status)}function Cm(e,r){let t=$S(r);if(Object.keys(t).length===0)return e;let n=e.workers.filter(s=>KS(s,t)),o={...e,workerCount:n.length,needsAttention:n.filter(s=>s.attention&&s.attention!=="ok"&&s.attention!=="done").map(s=>s.worker),workers:n,activeFilters:t};return e.summary&&(o.summary={statusCounts:Cr(n,"status"),attentionCounts:Cr(n,"attention"),lifecycleCounts:Cr(n,"lifecycleStage")}),e.controller&&(o.controller=Em(n)),o}function _m(e){let r=Ls(e),t=e.full===!0||e.full==="true",n=Cm(t?Zr(r):Am(r),e),o=n.workers;console.log(JSON.stringify({runId:n.runId,status:n.status,projection:t?"full":"compact",workerCount:n.workerCount,...n.activeFilters?{activeFilters:n.activeFilters}:{},...t?{}:{resultContract:{projection:"compact",rawWorkerPayloadsOmitted:!0,deepDetailAvailableVia:["--full","worker status","worker tail","run status --full"]},drilldownCommands:FS(r)},needsAttention:n.needsAttention,..."summary"in n?{summary:n.summary}:{},..."controller"in n?{controller:n.controller}:{},workers:o},null,2))}function xm(e){let{run:r,workerName:t,worker:n}=e,o=T(n,{base:r.base,baseCommit:r.baseCommit}),s=o.gitAncestry.headIsAncestorOfBase===!1&&o.gitAncestry.head?o.gitAncestry.head:void 0,i=Br({alive:o.alive,finalResult:o.finalResult,changedFiles:o.changedFiles,gitAncestry:o.gitAncestry,headCommit:s}),a=n.completionBlocker,l=typeof a=="string"&&a?a:void 0,c=wm(l)?void 0:l,u=c?"blocked":o.status,d=c?"blocked":o.attention.state,f=bm(n.completionResponse),m=bm(f?.task),p=Yn(f?.outcome),g=Yn(f?.status),k=Array.isArray(f?.warnings)?f.warnings.filter(b=>typeof b=="string"&&b.trim().length>0):[],h=Yn(m?.prUrl)??Yn(f?.prUrl),S=Yn(n.completionReportedAt),A=US({finished:Z(o),completionBlocker:c,completionOutcome:p,completionReportedAt:S}),W=LS({completionBlocker:c,completionOutcome:p,completionReportedAt:S,finished:Z(o)}),E=BS({changedFiles:o.changedFiles,headCommit:s,prUrl:h??void 0});return{worker:o.worker,status:u,attention:d,attentionReason:c??o.attention.reason,landingBlocked:o.finalResult?d==="needs_attention"||d==="blocked":!1,exitedWithoutFinalResult:!o.finalResult&&!o.alive,salvageState:i?.salvageable?"review_needed":"none",salvageReason:i?.salvageable?i.attentionReason:void 0,pid:o.pid,alive:o.alive,currentTool:o.currentTool,lastActivityAt:o.lastActivityAt,lastHeartbeatPhase:o.lastHeartbeatPhase,lastHeartbeatSummary:o.lastHeartbeatSummary,heartbeatBlocker:o.heartbeatBlocker,changedFileCount:o.changedFiles.length,changedFiles:o.changedFiles,branch:o.branch,taskId:n.taskId??null,planId:n.planId??null,instructionPolicyFingerprint:typeof n.instructionPolicyFingerprint=="string"?n.instructionPolicyFingerprint:null,instructionPolicyRuleCount:(()=>{let b=n.instructionPolicyEvidence;if(!b||typeof b!="object")return null;let P=b.ruleSlugs;return Array.isArray(P)?P.length:null})(),leaseOwner:n.leaseOwner??null,model:typeof n.model=="string"?n.model:void 0,routingRule:typeof n.routingRule=="string"?n.routingRule:void 0,requestedModel:typeof n.requestedModel=="string"?n.requestedModel:void 0,headCommit:s,prUrl:h,handoffState:E,gitAncestry:o.gitAncestry,finalResult:o.finalResult,lifecycleStage:A,completionReportedAt:S,completionOutcome:n.completionOutcome??null,completionRouteStatus:g,completionRouteOutcome:p,completionWarnings:k,completionBlocker:c??null,checkpoint:{phase:o.lastHeartbeatPhase,summary:o.lastHeartbeatSummary,blocker:o.heartbeatBlocker},lastCommandHint:o.currentTool??o.lastHeartbeatSummary,failureReason:c??o.error??null,nextAction:W,ancestry:o.gitAncestry.relation,ancestryChecked:o.gitAncestry.checked}}function jS(e){let r=typeof e.status=="string"?e.status:"",t=typeof e.completionBlocker=="string"&&e.completionBlocker.trim().length>0?e.completionBlocker:void 0;return t&&!wm(t)?!1:typeof e.completionReportedAt=="string"&&e.completionReportedAt.trim()||e.completionOutcome==="acknowledged"?!0:r==="done"}function VS(e,r){return{worker:e,status:"done",attention:"done",attentionReason:"metadata terminal worker; full status skipped in compact snapshot",alive:!1,pid:typeof r.pid=="number"?r.pid:void 0,branch:typeof r.branch=="string"?r.branch:void 0,taskId:r.taskId??null,planId:r.planId??null,model:typeof r.model=="string"?r.model:void 0,routingRule:typeof r.routingRule=="string"?r.routingRule:void 0,requestedModel:typeof r.requestedModel=="string"?r.requestedModel:void 0,lifecycleStage:r.completionReportedAt?"completion_acknowledged":"worker_finished",completionReportedAt:typeof r.completionReportedAt=="string"?r.completionReportedAt:null,completionOutcome:r.completionOutcome??null,localOnly:r.localOnly===!0,compactStatus:!0}}function Cr(e,r){let t={};for(let n of e){let o=n[r],s=typeof o=="string"&&o.trim()?o:"unknown";t[s]=(t[s]??0)+1}return t}function Sm(e){if(e.attention!=="blocked")return!1;let r=typeof e.attentionReason=="string"?e.attentionReason:"";return r.includes("cli-config.json.tmp")||r.includes("Invalid authentication credentials")||r.includes("provider CLI is missing or not on PATH")||r.includes("unknown command:")}function Em(e){let r=e.filter(Sm),t=e.filter(n=>{if(Sm(n))return!1;let o=n.attention;return o==="needs_attention"||o==="blocked"||o==="stale"||n.status==="running"});return{actionableCount:t.length,runningCount:e.filter(n=>n.status==="running").length,blockedCount:e.filter(n=>n.attention==="blocked").length,staleCount:e.filter(n=>n.attention==="stale").length,needsAttentionCount:e.filter(n=>n.attention==="needs_attention").length,doneCount:e.filter(n=>n.status==="done").length,systemHealthBlockerCount:r.length,systemHealthBlockers:r.slice(0,10).map(n=>({worker:n.worker,status:n.status,attention:n.attention,attentionReason:n.attentionReason,model:n.model,routingRule:n.routingRule,lastActivityAt:n.lastActivityAt})),actionableWorkers:t.slice(0,25).map(n=>({worker:n.worker,status:n.status,attention:n.attention,attentionReason:n.attentionReason,taskId:n.taskId,planId:n.planId,model:n.model,routingRule:n.routingRule,lastActivityAt:n.lastActivityAt,nextAction:n.nextAction}))}}function Pm(e,r,t){let n={runId:e.id,name:e.name,status:Tt(e.status,r),repo:e.repo,workerCount:r.length,needsAttention:r.filter(o=>o.attention&&o.attention!=="ok"&&o.attention!=="done").map(o=>o.worker),workers:r};return t&&(n.summary={statusCounts:Cr(r,"status"),attentionCounts:Cr(r,"attention"),lifecycleCounts:Cr(r,"lifecycleStage")},n.controller=Em(r)),n}function GS(e){return e.status==="done"&&e.attention==="done"}function Zr(e){let r=U(e),n=Object.keys(r.workers||{}).map(s=>{let i=_(qn.join(x(r.id),"workers",R(s),"worker.json"),void 0);return i?xm({run:r,workerName:s,worker:i}):{worker:s,status:"missing",attention:"needs_attention",attentionReason:"worker.json not found"}}),o=Pm(r,n,!1);return ce(qn.join(x(r.id),"last-board.json"),o),o}function Am(e){let r=U(e),n=Object.keys(r.workers||{}).map(i=>{let a=_(qn.join(x(r.id),"workers",R(i),"worker.json"),void 0);return a?jS(a)?VS(i,a):xm({run:r,workerName:i,worker:a}):{worker:i,status:"missing",attention:"needs_attention",attentionReason:"worker.json not found"}}),o=n.filter(i=>!GS(i)),s=Pm(r,o,!0);return s.status=Tt(r.status,n),s.summary={...s.summary??{},totalWorkerCount:n.length,shownWorkerCount:o.length,omittedTerminalDoneWorkerCount:n.length-o.length,allStatusCounts:Cr(n,"status"),allAttentionCounts:Cr(n,"attention")},ce(qn.join(x(r.id),"last-board-compact.json"),s),s}async function Im(e,r){let t=String(e.run||""),n=String(e.agentOsId||"");if(!t||!n)return null;let o=Zr(t),s=B(e.baseUrl?String(e.baseUrl):void 0),i=await K(e.secret?String(e.secret):void 0,n,{baseUrl:s}),a=`${s}/api/agent-os/by-id/${encodeURIComponent(n)}/harness/snapshot`,l=await q(a,i,{agentOsId:n,runId:t,source:r,snapshot:o},{agentOsId:n,baseUrl:s});return{ok:l.ok,httpStatus:l.status,response:l.response,authRefreshed:l.refreshedAuth,authRefreshFailure:l.authRefreshFailure}}function YS(e){return{full:`kynver run status --run ${e} --full`,blocked:`kynver status --run ${e} --blocked`,running:`kynver status --run ${e} --running`,task:`kynver status --run ${e} --task <task-id>`,worker:`kynver status --run ${e} --worker <worker>`,workersFull:`kynver worker list --run ${e} --full`,workerFull:`kynver worker status --run ${e} --name <worker>`,workerTail:`kynver worker tail --run ${e} --name <worker> --lines 80`,monitorTick:`kynver monitor status --run ${e} --tick`}}function Ht(e){let r=Ls(e),t=e.full===!0||e.full==="true",n=Cm(t?Zr(r):Am(r),e);n.projection=t?"full":"compact",t||(n.resultContract={projection:"compact",rawWorkerPayloadsOmitted:!0,omittedWorkerFields:["finalResult","changedFiles","gitAncestry","completionResponse","stdout/stderr tails"],deepDetailAvailableVia:["--full","worker status","worker tail","monitor status --tick"]},n.drilldownCommands=YS(r)),console.log(JSON.stringify(n,null,2))}function Ml(e){let{runId:r,workerName:t}=Be(e),n=ye(r,t),o=Wo(n.stdoutPath,Number(e.lines||40));if(e.raw===!0||e.raw==="true"){process.stdout.write(o);return}for(let s of o.split(`
-`).filter(Boolean)){let i=vt(s),a=i?Ma(i):s;a&&console.log(a)}}function Ul(e){let{runId:r,workerName:t}=Be(e),n=ye(r,t);if(!$(n.pid)){console.log(JSON.stringify({worker:n.name,pid:n.pid,status:"not_running"},null,2));return}if(Rn(n.pid,"SIGTERM"),Or(1500),$(n.pid)){Rn(n.pid,"SIGKILL"),console.log(JSON.stringify({worker:n.name,pid:n.pid,status:"sigkill_sent"},null,2));return}console.log(JSON.stringify({worker:n.name,pid:n.pid,status:"stopped"},null,2))}w();var QS=5e3,ZS=360*60*1e3,ew=3,rw=5e3;function tw(e){let{runId:r,workerName:t}=Be(e);return{run:r,name:t,agentOsId:e.agentOsId?String(e.agentOsId):void 0,pollMs:Number(e.pollMs)>0?Math.floor(Number(e.pollMs)):void 0,maxTotalMs:Number(e.maxTotalMs)>0?Math.floor(Number(e.maxTotalMs)):void 0,completeAttempts:Number(e.completeAttempts)>0?Math.floor(Number(e.completeAttempts)):void 0,completeBackoffMs:Number(e.completeBackoffMs)>0?Math.floor(Number(e.completeBackoffMs)):void 0,baseUrl:e.baseUrl?String(e.baseUrl):void 0,secret:e.secret?String(e.secret):void 0}}async function et(e){let r=tw(e),t=r.pollMs??QS,n=r.maxTotalMs??ZS,o=r.completeAttempts??ew,s=r.completeBackoffMs??rw,i=ye(r.run,r.name);if(!i.agentOsId||!i.taskId)return{worker:i.name,runId:i.runId,outcome:"missing_link",attempts:0,reason:"worker has no agentOsId/taskId \u2014 nothing to attribute completion to"};if(Qr(i))return{worker:i.name,runId:i.runId,outcome:"completed",httpStatus:200,attempts:0,reason:"completion-already-acknowledged"};let a=Date.now();for(;;){if(i=ye(r.run,r.name),Qr(i))return{worker:i.name,runId:i.runId,outcome:"completed",httpStatus:200,attempts:0,reason:"completion-already-acknowledged"};let u=T(i);if(Z(u)||!$(i.pid))break;if(Date.now()-a>n)return{worker:i.name,runId:i.runId,outcome:"timed_out",attempts:0,reason:`worker did not finish within ${n}ms`};Or(t)}let l,c;for(let u=1;u<=o;u++){let d=await zn({run:r.run,name:r.name,...r.agentOsId?{agentOsId:r.agentOsId}:{},...r.baseUrl?{baseUrl:r.baseUrl}:{},...r.secret?{secret:r.secret}:{}});if(l=d.httpStatus,d.ok)return{worker:i.name,runId:i.runId,outcome:"completed",httpStatus:d.httpStatus,attempts:u};if(d.httpStatus===401||d.httpStatus===403)return c=typeof d.reason=="string"?d.reason:"completion replay refused",{worker:i.name,runId:i.runId,outcome:"blocked",httpStatus:d.httpStatus,attempts:u,reason:c};c=typeof d.reason=="string"?d.reason:"transient failure",u<o&&Or(s)}return{worker:i.name,runId:i.runId,outcome:"blocked",httpStatus:l,attempts:o,reason:c??"completion failed after retries"}}async function Ll(e){try{let r=await et(e);console.log(JSON.stringify(r,null,2)),(r.outcome==="missing_link"||r.outcome==="timed_out")&&process.exit(1),process.exit(0)}catch(r){console.error(`worker auto-complete failed: ${r.message}`),process.exit(1)}}function nw(){return Nm.join(XS(new URL(".",import.meta.url)),"cli.js")}function Bl(e){let r=e.cliPath??nw();if(!qS(r))return;let t=Nm.join(e.workerDir,"auto-complete.log"),n;try{n=zS(t,"a")}catch{n=void 0}let o=["ignore",n??"ignore",n??"ignore"],s=e.nodeExecutable??process.execPath,i=[r,"worker","auto-complete","--run",e.runId,"--name",e.workerName];e.agentOsId&&i.push("--agent-os-id",e.agentOsId),e.baseUrl&&i.push("--base-url",e.baseUrl),e.secret&&i.push("--secret",e.secret);try{let a=JS(s,i,le({detached:!0,stdio:o,env:process.env}));return n!==void 0&&Om(n),a.unref(),{pid:a.pid,logPath:t,cliPath:r}}catch{if(n!==void 0)try{Om(n)}catch{}return}}Ce();function Tm(e,r,t){ue(e,["fetch","origin",t,"--prune"],{allowFailure:!0});let n=`origin/${t}`,o=Q(e,["worktree","add","-B",t,r,n]);if(o.status===0)return;let s=Q(e,["worktree","add","-b",t,r,"HEAD"]);if(s.status!==0){let i=o.stderr||o.stdout||s.stderr||s.stdout||"git worktree add failed for repair target branch";throw new Error(i)}}De();O();function Hs(e,r){let t=typeof r.name=="string"?r.name.trim():"";if(!t||t==="undefined"||t==="null")throw new Error(`worker name is required and must be a real identifier (got: ${JSON.stringify(r.name)})`);let n=R(t);if(e.workers?.[n])throw new Error(`worker already exists in run ${e.id}: ${n}`);if(!r.task)throw new Error(`missing task text for worker ${n}`);let o=r.routingRule||r.requestedModel?{provider:r.provider||xe,model:r.model,rule:r.routingRule||"explicit:spawn",requestedModel:r.requestedModel??r.model}:Ss({explicitModel:r.model,explicitProvider:r.provider,explicitProviderIsOperatorOverride:!!r.provider?.trim()}),s=qp(o.provider),i=o.model;if(s.preflightModel){let M=s.preflightModel(r.model);if(!M.ok)throw new Error(`model preflight failed for provider "${s.name}": ${M.note??"invalid model/provider combination"}`);M.normalized&&console.error(`[supervisor] ${n}: ${M.note}`),i=M.model}let{worktreesDir:a}=oe(),l=Ft.join(x(e.id),"workers",n);sw(l,{recursive:!0});let c=Ft.join(a,e.id,n),u=r.repairTargetBranch?.trim()||void 0,d=u||r.branch||`agent/${e.id}/${n}`;if(ow(c))throw new Error(`worktree path already exists: ${c}`);ue(e.repo,["fetch","origin","--prune"],{allowFailure:!0}),u?Tm(e.repo,c,u):ue(e.repo,["worktree","add","-b",d,c,e.baseCommit],{throwError:!0});let f=Ft.join(l,"stdout.jsonl"),m=Ft.join(l,"stderr.log"),p=Ft.join(l,"heartbeat.jsonl"),g=yl({task:r.task,ownedPaths:r.ownedPaths||[],worktreePath:c,heartbeatPath:p,planId:r.planId,taskId:r.taskId,instructionPolicyMarkdown:r.instructionPolicyMarkdown,memoryQualityMarkdown:r.memoryQualityPromptMarkdown??r.memoryQualityCapture?.promptMarkdown??null,personaMarkdown:r.personaMarkdown,contextEnvelopeMarkdown:r.contextEnvelopeMarkdown,model:i,repairTargetPrUrl:r.repairTargetPrUrl,repairTargetBranch:r.repairTargetBranch??(u||void 0)}),k=process.env.KYNVER_HARNESS_TASK_ID,h=process.env.KYNVER_HARNESS_AGENT_OS_ID;r.taskId&&(process.env.KYNVER_HARNESS_TASK_ID=String(r.taskId)),r.agentOsId&&(process.env.KYNVER_HARNESS_AGENT_OS_ID=String(r.agentOsId));let S;try{S=s.start({name:n,task:r.task,ownedPaths:r.ownedPaths,model:i,branch:d,worktreePath:c,workerDir:l,stdoutPath:f,stderrPath:m,heartbeatPath:p,prompt:g})}catch(M){throw ue(e.repo,["worktree","remove","--force",c],{allowFailure:!0}),ue(e.repo,["branch","-D",d],{allowFailure:!0}),M}finally{k===void 0?delete process.env.KYNVER_HARNESS_TASK_ID:process.env.KYNVER_HARNESS_TASK_ID=k,h===void 0?delete process.env.KYNVER_HARNESS_AGENT_OS_ID:process.env.KYNVER_HARNESS_AGENT_OS_ID=h}let A=Dp(S.model,i,s.defaultModel),W=v(),E=Te(process.env,W),b=qe().runnerId,P=$n(E.boxKind),H={name:n,runId:e.id,status:"running",pid:S.pid,model:A,branch:d,worktreePath:c,workerDir:l,stdoutPath:f,stderrPath:m,heartbeatPath:p,ownedPaths:r.ownedPaths,...r.agentOsId?{agentOsId:String(r.agentOsId)}:{},...r.taskId?{taskId:String(r.taskId)}:{},...r.planId?{planId:String(r.planId)}:{},...r.instructionPolicyFingerprint?{instructionPolicyFingerprint:String(r.instructionPolicyFingerprint)}:{},...r.instructionPolicyEvidence?{instructionPolicyEvidence:r.instructionPolicyEvidence}:{},...r.memoryQualityCapture?{memoryQualityCapture:r.memoryQualityCapture}:{},...r.personaSlug?{personaSlug:String(r.personaSlug)}:{},...r.personaEvidence?{personaEvidence:r.personaEvidence}:{},...r.contextEnvelopeEvidence?{contextEnvelopeEvidence:r.contextEnvelopeEvidence}:{},...r.leaseOwner?{leaseOwner:String(r.leaseOwner)}:{},...r.leaseToken?{leaseToken:String(r.leaseToken)}:{},...r.dispatched?{dispatched:!0}:{},...!r.agentOsId||!r.taskId?{localOnly:!0}:{},routingRule:o.rule,...o.requestedModel?{requestedModel:o.requestedModel}:{},...o.orchestrationAudit?{orchestrationAudit:o.orchestrationAudit}:{},...r.executorRef?{executorRef:String(r.executorRef)}:{},...r.parentTaskId?{parentTaskId:String(r.parentTaskId)}:{},...r.taskTitle?{taskTitle:String(r.taskTitle)}:{},...r.taskPrUrl?{taskPrUrl:String(r.taskPrUrl)}:{},...r.repairTargetPrUrl?{repairTargetPrUrl:String(r.repairTargetPrUrl)}:{},...r.repairTargetBranch?{repairTargetBranch:String(r.repairTargetBranch)}:{},boxKind:E.boxKind,boxId:P,runtimeId:b,startedAt:new Date().toISOString()};if(V(e.id,H),e.workers={...e.workers||{},[n]:{workerDir:l,statusPath:Ft.join(l,"worker.json")}},e.status="running",Ue(e),H.agentOsId&&H.taskId){let M;try{M=Bl({runId:e.id,workerName:n,workerDir:l,agentOsId:H.agentOsId})}catch(se){let $e=`completion sidecar failed to spawn: ${se.message}`;H.completionBlocker=$e,V(e.id,H)}if(M)M.pid&&(H.completionSidecarPid=M.pid,V(e.id,H));else{let se="completion sidecar failed to spawn (CLI not found or spawn error)";H.completionBlocker=se,H.completionSidecarSpawnFailedAt=new Date().toISOString(),V(e.id,H)}}return H}async function Wl(e){let r=U(String(e.run)),t=typeof e.name=="string"?e.name.trim():"";t||(console.error("worker start failed: --name is required"),process.exit(1));let n=e.task?String(e.task):Gu(e.taskFile?String(e.taskFile):void 0);n||(console.error("missing --task or --task-file"),process.exit(1));let o=!!(e.agentOsId&&e.taskId),s=e.localOnly===!0||e.localOnly==="true";!o&&!s&&(e.agentOsId||e.taskId)&&(console.error("worker start: board-linked workers require both --agent-os-id and --task-id (or pass --local-only for direct runs)"),process.exit(1));let i=e.wait===!0||e.wait==="true",a;try{a=Hs(r,{name:t,task:n,ownedPaths:e.owned?String(e.owned).split(",").map(c=>c.trim()).filter(Boolean):[],model:e.model?String(e.model):void 0,branch:e.branch?String(e.branch):void 0,agentOsId:e.agentOsId?String(e.agentOsId):void 0,taskId:e.taskId?String(e.taskId):void 0,provider:e.provider?String(e.provider):void 0}),console.log(JSON.stringify({runId:r.id,worker:a.name,pid:a.pid,branch:a.branch,worktreePath:a.worktreePath,workerDir:a.workerDir},null,2))}catch(c){console.error(`worker start failed: ${c.message}`),process.exit(1)}if(!i||!a)return;let l=await et({run:String(e.run),name:a.name,...a.agentOsId?{agentOsId:a.agentOsId}:{},...e.baseUrl?{baseUrl:String(e.baseUrl)}:{},...e.secret?{secret:String(e.secret)}:{}});console.error(JSON.stringify({event:"start_wait_outcome",...l})),l.outcome==="timed_out"&&(process.exitCode=1)}L();Zo();w();import iw from"node:path";function aw(e){let r=Array.isArray(e.ownedPaths)?e.ownedPaths.filter(n=>typeof n=="string"):[],t=Array.isArray(e.writeSetPrefixes)?(e.writeSetPrefixes??[]).filter(n=>typeof n=="string"):[];return{...r.length?{ownedPaths:r}:{},...t.length?{writeSetPrefixes:t}:{},...e.allowConcurrentHotspot?{allowConcurrentHotspot:!0}:{}}}function Fs(e){let r=U(e),t=[];for(let n of Object.keys(r.workers||{})){let o=_(iw.join(x(r.id),"workers",R(n),"worker.json"),void 0);!o?.taskId||!On(o)||t.push({runId:r.id,workerName:n,taskId:o.taskId,pid:o.pid,...aw(o)})}return t}w();import{createHash as Dm}from"node:crypto";function ir(e){let r=e.replace(/\r\n/g,`
-`).trimEnd();return Dm("sha256").update(r,"utf8").digest("hex")}function $t(e){if(e==null)return null;let r=e.trim();return r?Dm("sha256").update(r,"utf8").digest("hex"):null}O();var J=class extends Error{kind;httpStatus;constructor(r,t,n){super(t),this.name="PlanPersistError",this.kind=r,this.httpStatus=n}};function Xn(e,r){return e===401||e===403?new J("auth",r,e):e>=500?new J("server",r,e):new J("permanent",r,e)}function Hl(e){let r=e instanceof Error?e.message:String(e);return/ECONNREFUSED|ENOTFOUND|ETIMEDOUT|fetch failed|network/i.test(r)?new J("network",r):new J("tool_interruption",r)}function Mm(e){return e!=="permanent"}function Ks(e){let r={"Content-Type":"application/json"};return e&&(r.Authorization=`Bearer ${e}`),r}async function js(e){let r=await e.text();try{return JSON.parse(r)}catch{return r}}async function Um(e,r,t={}){let n=B(t.baseUrl),o=t.apiKey??ee(),s=t.fetchFn??fetch,i=`${n}/api/agent-os/${encodeURIComponent(e)}/plans/${encodeURIComponent(r)}`;try{let a=await s(i,{method:"GET",headers:Ks(o)}),l=await js(a);if(!a.ok){let c=typeof l=="object"&&l&&"error"in l?String(l.error):`GET plan failed (${a.status})`;throw Xn(a.status,c)}return l}catch(a){throw a instanceof J?a:Hl(a)}}async function Lm(e,r={}){let t=B(r.baseUrl),n=r.apiKey??ee(),o=r.fetchFn??fetch,s=e.agentOsSlug;try{if(e.operation==="create"){let f=`${t}/api/agent-os/${encodeURIComponent(s)}/plans`,m={title:e.title,summary:e.summary??null,slug:e.planSlug??null,sourceRefs:$s(e),initialVersion:{title:e.title,body:e.body,summary:e.summary??null,changeSummary:e.changeSummary??null,author:e.author??null,sourceRefs:$s(e)}},p=await o(f,{method:"POST",headers:Ks(n),body:JSON.stringify(m)}),g=await js(p);if(!p.ok){let h=typeof g=="object"&&g&&"error"in g?String(g.error):`create plan failed (${p.status})`;throw Xn(p.status,h)}let k=g;return{planId:k.plan.id,versionId:k.version.id,versionNumber:k.version.versionNumber}}let i=e.planId;if(!i)throw new J("permanent","planId is required for this operation");if(e.operation==="update_metadata"){let f=`${t}/api/agent-os/${encodeURIComponent(s)}/plans/${encodeURIComponent(i)}`,m={title:e.title,summary:e.summary??null,sourceRefs:$s(e)},p=await o(f,{method:"PATCH",headers:Ks(n),body:JSON.stringify(m)}),g=await js(p);if(!p.ok){let h=typeof g=="object"&&g&&"error"in g?String(g.error):`update plan failed (${p.status})`;throw Xn(p.status,h)}let k=g;return{planId:k.id,versionId:k.currentVersionId,versionNumber:null}}let a=`${t}/api/agent-os/${encodeURIComponent(s)}/plans/${encodeURIComponent(i)}/versions`,l={title:e.title,body:e.body,summary:e.summary??null,changeSummary:e.changeSummary??null,author:e.author??null,sourceRefs:$s(e),markCurrent:e.markCurrent!==!1},c=await o(a,{method:"POST",headers:Ks(n),body:JSON.stringify(l)}),u=await js(c);if(!c.ok){let f=typeof u=="object"&&u&&"error"in u?String(u.error):`add version failed (${c.status})`;throw Xn(c.status,f)}let d=u;return{planId:d.version.planId,versionId:d.version.id,versionNumber:d.version.versionNumber}}catch(i){throw i instanceof J?i:Hl(i)}}function $s(e){let r={...e.sourceRefs??{}};return e.model&&(r.model=e.model),Object.keys(r).length?r:e.sourceRefs??null}import{createHash as lw}from"node:crypto";function Vs(e){let r={operation:e.operation,agentOsSlug:e.agentOsSlug,planId:e.planId??null,planSlug:e.planSlug??null,title:e.title.trim(),summaryHash:$t(e.summary),bodyHash:ir(e.body),changeSummary:e.changeSummary?.trim()??null,markCurrent:e.markCurrent??!0};return lw("sha256").update(JSON.stringify(r),"utf8").digest("hex")}import{mkdirSync as Bm}from"node:fs";import{homedir as cw}from"node:os";import Kt from"node:path";function Gs(){let e=process.env.KYNVER_STATE_ROOT;return e?Kt.resolve(e):Kt.join(cw(),".kynver","state")}function Ys(){return Kt.join(Gs(),"plan-outbox")}function uw(){return Kt.join(Gs(),"plan-outbox-archive")}function rt(){let e=Ys(),r=uw();return Bm(e,{recursive:!0}),Bm(r,{recursive:!0}),{outboxDir:e,archiveDir:r}}function Qn(e){if(e.startsWith("/tmp/")||e.startsWith("/var/folders/"))return!0;let r=Kt.resolve(e);return r.startsWith("/tmp/")||r.startsWith(Kt.join("/var","folders"))}import{existsSync as Fl,readFileSync as Hm,renameSync as Wm,readdirSync as dw,writeFileSync as $l,unlinkSync as eL}from"node:fs";import We from"node:path";import{randomUUID as pw}from"node:crypto";var mw=12;function tt(){let{outboxDir:e}=rt(),r=dw(e).filter(n=>n.endsWith(".json")),t=[];for(let n of r){let o=jl(We.join(e,n));o&&o.queueStatus==="queued"&&t.push(o)}return t.sort((n,o)=>n.createdAt.localeCompare(o.createdAt))}function Kl(e){for(let r of tt())if(r.idempotencyKey===e)return r;return null}function jl(e){if(!Fl(e))return null;try{return JSON.parse(Hm(e,"utf8"))}catch{return null}}function Fm(e){let{outboxDir:r}=rt(),t=We.join(r,e.bodyPath);return Hm(t,"utf8")}function Vl(e,r){let{outboxDir:t}=rt(),n=new Date().toISOString(),o=r.existing?.id??pw(),s=r.existing?.bodyPath??`${o}.body.md`,i=We.join(t,`${o}.json`),a=We.join(t,s);r.existing||$l(a,e.body,"utf8");let l={id:o,idempotencyKey:Vs(e),operation:e.operation,agentOsSlug:e.agentOsSlug,planId:e.planId??r.existing?.planId??null,planSlug:e.planSlug??r.existing?.planSlug??null,title:e.title,summary:e.summary??null,bodyPath:s,bodyHash:ir(e.body),author:e.author??null,model:e.model??null,sourceRefs:e.sourceRefs??null,changeSummary:e.changeSummary??null,markCurrent:e.markCurrent??!0,createdAt:r.existing?.createdAt??n,updatedAt:n,retryCount:(r.existing?.retryCount??0)+(r.existing?1:0),maxRetries:e.maxRetries??r.existing?.maxRetries??mw,lastError:r.lastError,lastFailureKind:r.lastFailureKind,queueStatus:"queued",userStatus:"queued for retry",readbackEvidence:null};return $l(i,`${JSON.stringify(l,null,2)}
-`,{mode:384}),l}function $m(e){let{outboxDir:r}=rt(),t=We.join(r,`${e.id}.json`);$l(t,`${JSON.stringify(e,null,2)}
-`,{mode:384})}function Km(e){let{outboxDir:r,archiveDir:t}=rt(),n=We.join(r,`${e.id}.json`),o=We.join(r,e.bodyPath),s=We.join(t,`${e.id}.json`),i=We.join(t,e.bodyPath);Fl(n)&&Wm(n,s),Fl(o)&&Wm(o,i)}function Zn(e){let{outboxDir:r}=rt();return{jsonPath:We.join(r,`${e.id}.json`),bodyPath:We.join(r,e.bodyPath)}}function jm(e,r){return{operation:e.operation,agentOsSlug:e.agentOsSlug,planId:e.planId,planSlug:e.planSlug,title:e.title,summary:e.summary,body:r,changeSummary:e.changeSummary??void 0,author:e.author??void 0,model:e.model??void 0,sourceRefs:e.sourceRefs,markCurrent:e.markCurrent??!0,maxRetries:e.maxRetries}}async function Vm(e,r,t={}){let n=await Um(e,r.planId,t),o=n.plan,s=n.currentVersion;if(o.title.trim()!==r.title.trim())throw new J("verification_failed",`title mismatch: expected "${r.title}", got "${o.title}"`);let i=$t(r.summary),a=$t(o.summary);if(i!==a)throw new J("verification_failed","summary mismatch on readback");if(r.versionId&&o.currentVersionId!==r.versionId)throw new J("verification_failed",`currentVersionId mismatch: expected ${r.versionId}, got ${o.currentVersionId}`);if(r.versionNumber!=null&&(!s||s.versionNumber!==r.versionNumber))throw new J("verification_failed",`versionNumber mismatch: expected ${r.versionNumber}, got ${s?.versionNumber??"none"}`);let l=s?.body??"",c=ir(l);if(r.bodyHash&&c!==r.bodyHash)throw new J("verification_failed","body hash mismatch on readback");return{planId:o.id,currentVersionId:o.currentVersionId,versionNumber:s?.versionNumber??null,title:o.title,summary:o.summary,bodyHash:r.bodyHash||c,readAt:new Date().toISOString()}}function Gm(e,r){return{planId:r.planId,title:e.title,summary:e.summary??null,body:e.body,bodyHash:ir(e.body),versionId:r.versionId,versionNumber:r.versionNumber}}var Ym="persisted and read back",fw="queued for retry",Gl="failed and needs action";async function jt(e,r={}){e.bodyPathHint&&Qn(e.bodyPathHint);let t=Vs(e),n=Kl(t);if(n?.readbackEvidence)return{userStatus:Ym,outboxId:n.id,planId:n.readbackEvidence.planId,readbackEvidence:n.readbackEvidence,idempotencyKey:t};if(e.immediateFailure)return Jm(e,e.immediateFailure.message,e.immediateFailure.kind,n);let o=r.writePlan??Lm,s=r.verifyReadback??Vm;try{let i=await o(e,r),a={...e,planId:i.planId},l=Gm(a,i),c=await s(e.agentOsSlug,gw(e,l),r);return n&&Km(n),{userStatus:Ym,planId:i.planId,versionId:i.versionId??void 0,readbackEvidence:c,idempotencyKey:t}}catch(i){let a=i instanceof J?i:new J("tool_interruption",i instanceof Error?i.message:String(i));if(!Mm(a.kind)){let l=Vl(e,{lastError:a.message,lastFailureKind:a.kind,existing:n??void 0}),c=Zn(l),u=qm(l,a.message);return{userStatus:Gl,outboxId:u.id,outboxPath:c.jsonPath,bodyPath:c.bodyPath,lastError:a.message,idempotencyKey:t}}return Jm(e,a.message,a.kind,n)}}function gw(e,r){return e.operation==="update_metadata"?{...r,body:"",bodyHash:""}:r}function Jm(e,r,t,n){let o=Vl(e,{lastError:r,lastFailureKind:t,existing:n??void 0}),s=Zn(o);if(o.retryCount>=o.maxRetries){let i=qm(o,r);return{userStatus:Gl,outboxId:i.id,outboxPath:s.jsonPath,bodyPath:s.bodyPath,lastError:r,idempotencyKey:o.idempotencyKey}}return{userStatus:fw,outboxId:o.id,outboxPath:s.jsonPath,bodyPath:s.bodyPath,lastError:r,idempotencyKey:o.idempotencyKey}}function qm(e,r){let t={...e,queueStatus:"failed",userStatus:Gl,lastError:r,updatedAt:new Date().toISOString()};return $m(t),t}import hw from"node:path";async function Js(e={},r={}){let t=tt().filter(s=>e.outboxId?s.id===e.outboxId:!0),n=e.max&&e.max>0?t.slice(0,e.max):t,o={processed:0,succeeded:0,stillQueued:0,failed:0,results:[]};for(let s of n){o.processed+=1;let i=Fm(s),a=jm(s,i),l=await jt(a,r);l.userStatus==="persisted and read back"?o.succeeded+=1:l.userStatus==="failed and needs action"?o.failed+=1:o.stillQueued+=1,o.results.push({outboxId:s.id,userStatus:l.userStatus,lastError:l.lastError})}return o}function Yl(e){let r=hw.join(Ys(),`${e}.json`);return jl(r)}function qs(e){let r=Zn(e);return["## Plan persistence risk","",`AgentOS plan write is **not** confirmed (${e.userStatus}).`,`- outboxId: \`${e.id}\``,e.planId?`- planId: \`${e.planId}\``:"- planId: (pending \u2014 create not yet applied)",`- outbox: \`${r.jsonPath}\``,`- body: \`${r.bodyPath}\``,"","Drain when approval/connectivity returns: `kynver plan outbox drain`"].join(`
-`)}function zs(e){let r=e.metadata&&typeof e.metadata=="object"?e.metadata:null,t=typeof e.planPersistenceOutboxId=="string"&&e.planPersistenceOutboxId||(r&&typeof r.planPersistenceOutboxId=="string"?r.planPersistenceOutboxId:void 0);return t?{outboxId:t,jsonPath:typeof e.planPersistenceOutboxPath=="string"?e.planPersistenceOutboxPath:r&&typeof r.planPersistenceOutboxPath=="string"?r.planPersistenceOutboxPath:void 0,bodyPath:typeof e.planPersistenceBodyPath=="string"?e.planPersistenceBodyPath:r&&typeof r.planPersistenceBodyPath=="string"?r.planPersistenceBodyPath:void 0}:null}async function Jl(e){let r=`${e.baseUrl}/api/agent-os/by-id/${encodeURIComponent(e.agentOsId)}/tasks/${encodeURIComponent(e.taskId)}/release`,t;try{t=await q(r,e.secret,{agentOsId:e.agentOsId,leaseOwner:e.leaseOwner,...e.failureDetail?{failureDetail:e.failureDetail}:{}},{agentOsId:e.agentOsId,baseUrl:e.baseUrl})}catch(s){return{released:!1,httpOk:!1,releaseResponse:{ok:!1,error:s.message}}}let n=t.response;return{released:t.ok===!0||n?.ok===!0,httpOk:t.ok===!0,releaseResponse:t.response??t}}import{spawnSync as Xm}from"node:child_process";import{spawnSync as kw}from"node:child_process";function zm(){if(process.env.GITHUB_TOKEN?.trim()||process.env.GH_TOKEN?.trim())return{source:"env",configured:!0,reason:"GitHub token already configured in environment"};let e=kw("gh",["auth","token"],{encoding:"utf8",stdio:["ignore","pipe","pipe"]});if(e.status!==0)return{source:"missing",configured:!1,reason:typeof e.stderr=="string"&&e.stderr.trim()?e.stderr.trim():"gh auth token failed; run `gh auth login` on this machine"};let r=typeof e.stdout=="string"?e.stdout.trim():"";return r?(process.env.GH_TOKEN=r,{source:"gh-cli",configured:!0,reason:"Using local GitHub CLI auth for daemon land_pr merge"}):{source:"missing",configured:!1,reason:"gh auth token returned an empty token; run `gh auth login` on this machine"}}var Qm=new Set(["SUCCESS","SKIPPED","NEUTRAL"]),yw=new Set(["CLEAN","HAS_HOOKS"]);function zl(e){return e?.trim()?["--repo",e.trim()]:[]}function Zm(e){let r=/github\.com\/([^/]+)\/([^/]+)\/pull\/\d+/i.exec(e.trim());return r?`${r[1]}/${r[2]}`:null}function ef(e,r,t){let n=e.gh(r,t);if(n.status!==0)throw new Error(n.stderr||n.stdout||`gh ${t.join(" ")} failed`);return JSON.parse(n.stdout||"{}")}function eo(e){return typeof e.name=="string"&&e.name||typeof e.context=="string"&&e.context||typeof e.workflowName=="string"&&e.workflowName||"unknown check"}function Rw(e){let r=Array.isArray(e)?e:[],t=[],n=[];for(let o of r){let s=o&&typeof o=="object"?o:{},i=typeof s.conclusion=="string"?s.conclusion.toUpperCase():"",a=typeof s.status=="string"?s.status.toUpperCase():"",l=typeof s.state=="string"?s.state.toUpperCase():"";if(!(i&&Qm.has(i))){if(i){n.push(`${eo(s)}=${i}`);continue}if(!(l&&Qm.has(l))){if(l&&l!=="PENDING"&&l!=="EXPECTED"){n.push(`${eo(s)}=${l}`);continue}if(l==="PENDING"||l==="EXPECTED"){t.push(`${eo(s)}=${l}`);continue}if(a&&a!=="COMPLETED"){t.push(`${eo(s)}=${a}`);continue}t.push(`${eo(s)}=PENDING`)}}}return{pending:t,failed:n}}function vw(e){return(Array.isArray(e)?e:[]).some(t=>{let n=t&&typeof t=="object"?t:{},o=typeof n.name=="string"&&n.name||typeof n.context=="string"&&n.context||"",s=typeof n.conclusion=="string"?n.conclusion.toUpperCase():"",i=typeof n.state=="string"?n.state.toUpperCase():"";return/^vercel/i.test(o)&&(s==="SUCCESS"||i==="SUCCESS")})}var bw=/^##\s*(test\s*plan|verification|test\s*evidence|verify)\b/im,Sw=/typecheck|npm run (test|build|typecheck)|vitest|tsc\b|verify-pr-local|local verify|local-verify|tests? (pass|green)|build green|node --test/i,ww=/^docs[(:]/i,Cw=/docs[- ]only|documentation only|no[- ]code change|no code changes|low[- ]risk|plan tracker only|markdown only/i;function _w(e){let r=typeof e.title=="string"?e.title.trim():"",t=typeof e.body=="string"?e.body.trim():"",n=ww.test(r)||Cw.test(t),o=bw.test(t),s=Sw.test(t);return n||o||s||e.vercelCheckSuccess===!0}function xw(e){if(!_w({title:e.title,body:e.body,vercelCheckSuccess:vw(e.statusCheckRollup)}))throw new Error(`PR #${e.number} lacks landing verification evidence \u2014 add ## Test plan / ## Verification with local commands, Vercel preview, or docs/no-code rationale`)}function Ew(e){if(e.state!=="OPEN")throw new Error(`PR #${e.number} is ${e.state}, not OPEN`);if(e.isDraft)throw new Error(`PR #${e.number} is still a draft`);if(!yw.has(e.mergeStateStatus))throw new Error(`PR #${e.number} mergeStateStatus is ${e.mergeStateStatus}`);let r=Rw(e.statusCheckRollup);if(r.failed.length>0)throw new Error(`PR #${e.number} has failing checks: ${r.failed.join(", ")}`);if(r.pending.length>0)throw new Error(`PR #${e.number} has pending checks: ${r.pending.join(", ")}`);xw(e)}function Pw(e){try{return Ew(e),null}catch(r){return r instanceof Error?r.message:String(r)}}function Aw(e,r,t,n){if(!n?.trim())return;let o=encodeURI(`heads/${n}`);e.gh(r,["api","-X","DELETE",`repos/${t}/git/refs/${o}`])}function Iw(e,r,t){if(t?.trim())return t.trim();let n=e.gh(r,["repo","view","--json","nameWithOwner"]);if(n.status!==0)throw new Error(n.stderr||"Could not resolve GitHub repo");let o=JSON.parse(n.stdout||"{}");if(!o.nameWithOwner)throw new Error("Could not resolve GitHub repo");return o.nameWithOwner}function Ow(e,r){if(!r?.trim())return;let t=Xm("git",["worktree","list","--porcelain"],{cwd:e,encoding:"utf8"});if(t.status!==0)return;let n=String(t.stdout||"").split(/\r?\n/),o=null,s=null;for(let i of n){if(i.startsWith("worktree ")){o=i.slice(9).trim(),s=null;continue}i.startsWith("branch ")&&o&&(s=i.slice(7).trim(),s.endsWith(`/${r}`)&&Xm("git",["worktree","remove","--force",o],{cwd:e,encoding:"utf8"}))}}async function rf(e){let r=e.cwd??process.cwd(),t=e.exec??Os,n=e.prUrl.trim();if(!n)throw new Error("prUrl is required");let o=zm();if(!o.configured)return{prUrl:n,outcome:"blocked",reason:o.reason};let s=ef(t,r,["pr","view",n,...zl(e.repo),"--json",["number","url","title","body","state","isDraft","mergeStateStatus","statusCheckRollup","headRefName","mergedAt","mergeCommit"].join(",")]);if(s.state==="MERGED"||s.mergedAt)return{prUrl:s.url||n,outcome:"skipped",mergeCommit:s.mergeCommit?.oid??null,reason:`PR #${s.number} is already merged \u2014 land_pr no-op (redelivery)`};let i=Pw(s);if(i)return e.skipNotReady?{prUrl:s.url||n,outcome:"skipped",reason:i}:{prUrl:s.url||n,outcome:"blocked",reason:i};if(e.dryRun)return{prUrl:s.url||n,outcome:"skipped",reason:"dry-run: PR is ready to merge"};let a=String(s.number),l=t.gh(r,["pr","merge",a,...zl(e.repo),"--squash"]);if(l.status!==0){let u=ql(t,r,a,e.repo);return u?{prUrl:u.url||s.url||n,outcome:"skipped",mergeCommit:u.mergeCommit?.oid??null,reason:`PR #${s.number} is already merged \u2014 merged by another lane during land_pr (race)`}:{prUrl:s.url||n,outcome:"blocked",reason:l.stderr||l.stdout||"gh pr merge failed"}}let c=ql(t,r,a,e.repo);c||(c=ql(t,r,a,e.repo));try{let u=Iw(t,r,e.repo);Aw(t,r,u,s.headRefName),Ow(r,s.headRefName)}catch{}return{prUrl:c?.url||s.url||n,outcome:"merged",mergeCommit:c?.mergeCommit?.oid??null,reason:`Daemon land_pr merged PR #${s.number}${c?"":" (post-merge view unavailable \u2014 merge verified by gh exit 0)"}`}}function ql(e,r,t,n){try{let o=ef(e,r,["pr","view",t,...zl(n),"--json","number,url,mergedAt,mergeCommit,state"]);return o.state==="MERGED"||o.mergedAt?o:null}catch{return null}}O();async function tf(e){let r=await K(e.secret,e.agentOsId,{baseUrl:e.baseUrl}),t=String(e.task.id),n=`${e.baseUrl}/api/agent-os/by-id/${encodeURIComponent(e.agentOsId)}/harness/completion`,o=new Date().toISOString(),s={source:"kynver-harness",agentOsId:e.agentOsId,runId:e.runId,workerName:`land-pr-${t}`,taskId:t,leaseToken:e.task.leaseToken??null,startedAt:o,finishedAt:o,status:{finalResult:e.report,prUrl:e.report.prUrl,summary:e.report.reason,leaseToken:e.task.leaseToken??null},workerInjection:null},i=await q(n,r,s,{agentOsId:e.agentOsId,baseUrl:e.baseUrl});return{ok:i.ok,status:i.status}}function nf(){return["## verify_live completion contract","Finish with a JSON finalResult object:","{",'  "prUrl": "<landed pr>",','  "outcome": "passed" | "failed" | "skipped" | "no_mcp_surface",','  "reason": "<human summary>",','  "mergeCommit": "<sha optional>",','  "liveReadback": "<prod readback string from acceptance.liveReadbackQuery>",','  "mcpCalls": [{ "tool": "<name>", "ok": true, "summary": "..." }]',"}","","Drive the feature MCP tools against live production. Do not mark passed without exercising the MCP surface.","When the subject carries an acceptance snapshot, include liveReadback \u2014 the server oracle rejects passed if the original symptom still appears."].join(`
-`)}var _s=3600*1e3;function of(e){let r=e.admissionExhaustion;return!r||typeof r!="object"?null:r}function sf(e){let r=e.dispatchSkipDrain;return!r||typeof r!="object"?null:r}function Nw(e){let r=e.harnessWorkerContext;if(!r||typeof r!="object")return null;let t=r,n=typeof t.instructionPolicyMarkdown=="string"?t.instructionPolicyMarkdown:null,o=typeof t.instructionPolicyFingerprint=="string"?t.instructionPolicyFingerprint:null,s=t.instructionPolicyEvidence&&typeof t.instructionPolicyEvidence=="object"?t.instructionPolicyEvidence:null,i=typeof t.personaMarkdown=="string"?t.personaMarkdown:null,a=typeof t.personaEvidence=="object"&&t.personaEvidence&&typeof t.personaEvidence.injectedPersonaSlug=="string"?t.personaEvidence.injectedPersonaSlug:null,l=t.personaEvidence&&typeof t.personaEvidence=="object"?t.personaEvidence:null,c=t.personaInjectionReady===!0,u=typeof t.contextEnvelopeMarkdown=="string"?t.contextEnvelopeMarkdown:null,d=t.contextEnvelopeEvidence&&typeof t.contextEnvelopeEvidence=="object"?t.contextEnvelopeEvidence:null,f=t.contextEnvelopeReady===!0,m=t.memoryQualityCapture&&typeof t.memoryQualityCapture=="object"?t.memoryQualityCapture:null,p=typeof t.memoryQualityPromptMarkdown=="string"?t.memoryQualityPromptMarkdown:typeof m?.promptMarkdown=="string"?m.promptMarkdown:null;return{instructionPolicyMarkdown:n,instructionPolicyFingerprint:o,instructionPolicyEvidence:s,memoryQualityCapture:m,memoryQualityPromptMarkdown:p,personaMarkdown:i,personaSlug:a,personaEvidence:l,personaInjectionReady:c,contextEnvelopeMarkdown:u,contextEnvelopeEvidence:d,contextEnvelopeReady:f}}function Tw(e){if(typeof e!="string")return null;let r=e.trim().toLowerCase();return r.length?r:null}function af(e,r){let t=[`[AgentOS task ${e.id}] ${e.title}`,"",e.description?String(e.description):"(no description on the board task)","",`Board linkage: agentOsId=${r}, taskId=${e.id}, attempt=${e.attempt}, executor=${e.executor}${e.executorRef?`, executorRef=${e.executorRef}`:""}.`,"This worker was dispatched from the AgentOS board. The harness reports your completion back to the board when you finish."];e.executor==="verify_live"&&t.push("",nf());let n=zs(e);if(n?.outboxId){let o=Yl(n.outboxId);o?t.push("",qs(o)):t.push("","## Plan persistence risk","",`Unconfirmed AgentOS plan write (outboxId=${n.outboxId}).`)}return t.join(`
-`)}function Dw(e){let r=new Set;if(e.targetTaskId)return r.add(String(e.targetTaskId)),r;if(e.targetTaskIds)for(let t of String(e.targetTaskIds).split(",")){let n=t.trim();n&&r.add(n)}return r}async function _r(e){let r=e.pipeline===!0||e.pipeline==="true";try{let hn=function(C){return C.landPrDispatch===!0?!0:C.task?.executor==="land_pr"};var t=hn;let n=U(String(N(String(e.run||""),"--run"))),o=String(N(String(e.agentOsId||""),"--agent-os-id")),s=B(e.baseUrl?String(e.baseUrl):void 0),i=await K(e.secret?String(e.secret):void 0,o,{baseUrl:s}),l=!(e.execute===!0||e.execute==="true"),c=qe({runId:n.id}),u=hl(n.id,c.runnerId),d=e.diskPath?Me({diskPath:String(e.diskPath)}):Me({diskPath:n.repo}),f=$r({runId:n.id}),m=Dw(e),p=m.size>0,g=Number(e.maxStarts)>0?Math.floor(Number(e.maxStarts)):1,k=p?Math.min(g,m.size):g,h=l?k:Math.min(k,f.slotsAvailable);if(!l&&h<=0){let C={runId:n.id,agentOsId:o,dryRun:!1,skipped:!0,reason:f.reason??"no resource slots",resourceGate:f};if(r)return{ok:!0,...C};console.log(JSON.stringify(C,null,2));return}let S=Fs(n.id);if(e.reconcileStaleBlockers===!0||e.reconcileStaleBlockers==="true"){let C=`${s}/api/agent-os/by-id/${encodeURIComponent(o)}/lane-hygiene`;try{await q(C,i,{agentOsId:o,dryRun:!1,includeBoardReconcile:!0},{agentOsId:o,baseUrl:s})}catch(y){console.error(`[dispatch] reconcile-stale-blockers lane-hygiene call failed: ${y.message}`)}}let A=`${s}/api/agent-os/by-id/${encodeURIComponent(o)}/tasks/dispatch-next`,W=C=>({agentOsId:o,dryRun:l,maxStarts:C,leaseOwner:u,leaseDurationMs:Number(e.leaseMs)>0?Math.floor(Number(e.leaseMs)):_s,runnerDiskGate:d,runnerResourceGate:f,activeHarnessWorkers:S,runnerPresence:c,harnessBoardSnapshot:Zr(n.id),...e.lane?{lane:dp(String(e.lane))}:{},...e.executor?{executor:String(e.executor)}:{},...e.diskPath?{diskPath:String(e.diskPath)}:{},...e.targetTaskId?{targetTaskId:String(e.targetTaskId)}:{},...!e.targetTaskId&&e.targetTaskIds?{targetTaskIds:String(e.targetTaskIds).split(",").map(y=>y.trim()).filter(Boolean)}:{}}),E=async C=>{let y=await q(A,i,W(C),{agentOsId:o,baseUrl:s})??{ok:!1,status:0,response:null},I=y.response;return{dispatch:y,result:I?.result}},b=await E(p||l?h:1);if(!b.dispatch.ok||!b.result){let C={runId:n.id,agentOsId:o,action:"dispatch",httpStatus:b.dispatch.status,response:b.dispatch.response,authRefreshed:b.dispatch.refreshedAuth===!0,authRefreshFailure:b.dispatch.authRefreshFailure};if(r)return{ok:!1,...C};console.log(JSON.stringify(C,null,2)),process.exit(1)}let P=b.result;if(l){let C=of(P),y=sf(P),I={runId:n.id,agentOsId:o,dryRun:!0,wouldStart:P.started.map(j=>({taskId:j.task.id,title:j.task.title,reason:j.reason})),skipped:P.skipped.map(j=>({taskId:j.task.id,skipReason:j.skipReason,reason:j.reason})),diskGate:P.diskGate,resourceGate:P.resourceGate,inspected:P.inspected,pagesScanned:P.pagesScanned??null,candidatesExhausted:P.candidatesExhausted??null,capacityIdle:C?.capacityIdle===!0,admissionExhaustion:C,dispatchSkipDrain:y};if(r)return{ok:!0,...I};console.log(JSON.stringify(I,null,2));return}let H=Up(),M=[],se=[],$e=Number(P.inspected)||0;async function be(C,y,I){let j=await Jl({baseUrl:s,secret:i,agentOsId:o,taskId:String(C.id),leaseOwner:u,failureDetail:y});return M.push({taskId:C.id,started:!1,error:y,released:j.released,releaseResponse:j.releaseResponse,...I}),!1}async function kn(C){let y=C.task,I=String(y.id);if(p&&!m.has(I))return be(y,"exact_target_mismatch: dispatch-next returned a different task than requested",{requestedTargetTaskIds:[...m]});let j=y.prUrl?String(y.prUrl):"";if(!j)return be(y,"land_pr task missing prUrl");try{let Ke=await rf({prUrl:j,repo:Zm(j),cwd:n.repo}),yt=await tf({baseUrl:s,secret:i,agentOsId:o,runId:n.id,task:y,report:Ke});return yt.ok?(M.push({taskId:I,started:!0,landPr:!0,outcome:Ke.outcome,completionStatus:yt.status}),!0):be(y,`land_pr completion POST failed (HTTP ${yt.status})`,{landPr:!0,outcome:Ke.outcome})}catch(Ke){return be(y,Ke.message)}}async function Se(C){let y="duplicate_dispatch_prevented: live local worker already owns this task",I=await Jl({baseUrl:s,secret:i,agentOsId:o,taskId:String(C.id),leaseOwner:u,failureDetail:y});return M.push({taskId:C.id,started:!1,error:y,alreadyRunning:!0,nonFatal:!0,released:I.released,releaseResponse:I.releaseResponse}),!1}async function X(C){let y=C.task,I=Nw(C),j=String(y.id);if(p&&!m.has(j))return be(y,"exact_target_mismatch: dispatch-next returned a different task than requested",{requestedTargetTaskIds:[...m]});let Ke=Tw(y.personaSlug);if(Ke&&(!I?.personaInjectionReady||!I.personaMarkdown))return be(y,`persona_injection_required: missing anchored context-envelope persona block for "${Ke}"`);if(Hp(n.id,j))return Se(y);let yt=Number(y.attempt)||1;if(yt>H.maxTaskAttempts)return be(y,`task attempt ${yt} exceeds KYNVER_MAX_TASK_ATTEMPTS (${H.maxTaskAttempts})`);let Iy=R(`t-${y.id}-a${y.attempt}`),Rt=Ss({explicitModel:e.model?String(e.model):void 0,explicitProvider:e.provider?String(e.provider):void 0,explicitProviderIsOperatorOverride:!!e.provider,task:pp(y)});try{let ca=y.planId?String(y.planId):void 0,Do=$p({title:y.title?String(y.title):void 0,description:y.description?String(y.description):null,executorRef:y.executorRef?String(y.executorRef):null,prUrl:y.prUrl?String(y.prUrl):null,branch:y.branch?String(y.branch):null}),Mo=Hs(n,{name:Iy,task:af(y,o),ownedPaths:e.owned?String(e.owned).split(",").map(Oy=>Oy.trim()).filter(Boolean):[],model:Rt.model,provider:Rt.provider,routingRule:Rt.rule,requestedModel:Rt.requestedModel,agentOsId:o,taskId:String(y.id),planId:ca,branch:Do?.targetPrBranch??void 0,executorRef:y.executorRef?String(y.executorRef):void 0,parentTaskId:y.parentTaskId?String(y.parentTaskId):void 0,taskTitle:y.title?String(y.title):void 0,taskPrUrl:Do?.targetPrUrl??(y.prUrl?String(y.prUrl):void 0),repairTargetPrUrl:Do?.targetPrUrl,repairTargetBranch:Do?.targetPrBranch??void 0,instructionPolicyMarkdown:I?.instructionPolicyMarkdown??null,instructionPolicyFingerprint:I?.instructionPolicyFingerprint??null,instructionPolicyEvidence:I?.instructionPolicyEvidence??null,memoryQualityCapture:I?.memoryQualityCapture??null,memoryQualityPromptMarkdown:I?.memoryQualityPromptMarkdown??null,personaMarkdown:I?.personaMarkdown??null,personaSlug:I?.personaSlug??Ke,personaEvidence:I?.personaEvidence??null,contextEnvelopeMarkdown:I?.contextEnvelopeMarkdown??null,contextEnvelopeEvidence:I?.contextEnvelopeEvidence??null,leaseOwner:u,leaseToken:y.leaseToken?String(y.leaseToken):void 0,dispatched:!0});return M.push({taskId:y.id,started:!0,worker:Mo.name,pid:Mo.pid,branch:Mo.branch,model:Mo.model,provider:Rt.provider,routingRule:Rt.rule,instructionPolicyFingerprint:I?.instructionPolicyFingerprint??null,instructionPolicyRuleCount:Array.isArray(I?.instructionPolicyEvidence?.ruleSlugs)?I.instructionPolicyEvidence.ruleSlugs.length:null,personaSlug:I?.personaSlug??Ke,personaOperatingRuleCount:I?.personaEvidence?.operatingRuleCount??null}),I?.instructionPolicyFingerprint&&console.error(`[dispatch] task ${j}: operating-rules policy injected fingerprint=${I.instructionPolicyFingerprint}`),I?.personaSlug&&console.error(`[dispatch] task ${j}: persona context injected slug=${I.personaSlug}`),I?.contextEnvelopeReady&&console.error(`[dispatch] task ${j}: context envelope injected anchor=${I.contextEnvelopeEvidence?.anchorTaskId??j}`),!0}catch(ca){return be(y,ca.message)}}let D=new Set;async function ie(C){let y=C.task,I=String(y.id);if(D.has(I))return be(y,"dispatch_retry_loop_prevented: task already failed to start this tick");let j=hn(C)?await kn(C):await X(C);return j||D.add(I),j}for(let C of P.started)await ie(C);if(se.push(...P.skipped??[]),p)for(let C of se){let y=String(C.task.id);m.has(y)&&M.push({taskId:y,started:!1,error:`exact_target_not_started:${C.skipReason}`,skipReason:C.skipReason,detail:C.reason??null,requestedTargetTaskIds:[...m]})}for(;!p&&M.length<h;){let C=await E(1);if(!C.dispatch.ok||!C.result){M.push({started:!1,error:"dispatch_next request failed during top-up",httpStatus:C.dispatch.status,response:C.dispatch.response});break}$e+=Number(C.result.inspected)||0,se.push(...C.result.skipped??[]);let y=C.result.started??[];if(y.length===0)break;for(let I of y){if(M.length>=h)break;await ie(I)}}let ge=M.filter(C=>C.started).length,we=of(P),ae=sf(P),To=ge===0&&(we?.capacityIdle===!0||Number(P.resourceGate?.slotsAvailable)>0);if(To&&we?.summary){let C=we.skipReasonCounts?.retry_ceiling_exceeded??0,y=P.overAttemptIdleRecovery??we.overAttemptIdleRecovery,I=y?.attempted===!0?`; over_attempt_recovery minted=${y.minted??0} started=${y.started??0}`:C>0?"; over_attempt_recovery not attempted":"",j=ae?`; dispatch_skip_drain scanned=${ae.scanned??0} advanced=${ae.advanced??0}`:"";console.error(`[dispatch] ${we.summary}${C>0?`; retry_ceiling_exceeded=${C}`:""}${I}${j}`)}let Lu={runId:n.id,agentOsId:o,dryRun:!1,leaseOwner:u,startedCount:ge,capacityIdle:To,admissionExhaustion:we,dispatchSkipDrain:ae,outcomes:M,skipped:se.map(C=>({taskId:C.task.id,skipReason:C.skipReason})),inspected:$e,pagesScanned:P.pagesScanned??null,candidatesExhausted:P.candidatesExhausted??null,diskGate:P.diskGate,resourceGate:P.resourceGate},Bu=C=>!C.started&&C.nonFatal!==!0;if(r)return{ok:!M.some(Bu),...Lu};console.log(JSON.stringify(Lu,null,2)),M.some(Bu)&&process.exit(1)}catch(n){if(r)return{ok:!1,error:n.message};console.error(`run dispatch failed: ${n.message}`),process.exit(1)}}_t();Aa();En();Da();Ta();Lr();O();De();import Mw from"node:os";function ro(e,r={}){let t=(r.boxKind??je(v())).trim().toLowerCase()||"forge",n=r.hostLabel??Mw.hostname();return{boxId:r.boxId??$n(t,n),boxKind:t,displayName:r.displayName??null,hostLabel:n,observedAt:r.observedAt??new Date().toISOString(),totalMemBytes:e.totalMemBytes,freeMemBytes:e.freeMemBytes,activeWorkers:e.activeWorkers,maxConcurrentWorkers:e.maxConcurrentWorkers,autoCap:e.autoCap,slotsAvailable:e.slotsAvailable,harnessRunId:r.harnessRunId??null,queuedTasks:r.queuedTasks??null,reason:e.reason,...r.prEvidence?.length?{prEvidence:r.prEvidence}:{}}}function Uw(e){let r={ts:e.ts??new Date().toISOString(),phase:e.phase,summary:e.summary,changedFiles:e.changedFiles??[],blocker:e.blocker??null};return e.boxResourceSnapshot&&(r.boxResourceSnapshot=e.boxResourceSnapshot),e.prEvidence?.length&&(r.prEvidence=e.prEvidence),`${JSON.stringify(r)}
-`}G();In();function Lw(e){if(e.skipReason==="engagement_required")return!0;let r=e.reason??"";return r.includes("engagement_required")||r.includes("engagement_not_found")||r.includes("engagement_expired")||r.includes("engagement_revoked")}Wa();Pn();import{createHash as lf}from"node:crypto";function Xs(e){return JSON.stringify(Xl(e))}function Xl(e){if(Array.isArray(e))return e.map(Xl);if(e&&typeof e=="object"){let r={};for(let t of Object.keys(e).sort())r[t]=Xl(e[t]);return r}return e}function Bw(e){return`ib1-${lf("sha256").update(Xs(e),"utf8").digest("hex").slice(0,16)}`}function Ww(e){return`ib-${lf("sha256").update(Buffer.from(e)).digest("hex").slice(0,12)}`}function Qs(e){if(!e)return null;let r=e.trim();if(!r)return null;if(/^[0-9a-fA-F]{64}$/.test(r))return new Uint8Array(r.match(/.{2}/g).map(t=>parseInt(t,16)));try{let t=Buffer.from(r,"base64");if(t.length===32)return new Uint8Array(t)}catch{}return null}function Vt(e){if(!e||typeof e!="object")return!1;let r=e;if(typeof r.signature!="string"||!r.signature||typeof r.publicKeyId!="string"||!r.publicKeyId)return!1;let t=r.bundle;return!(!t||typeof t!="object"||typeof t.version!="string"||!t.version||typeof t.generatedAt!="string"||!Array.isArray(t.personas)||!t.instructions||typeof t.instructions!="object"||!t.policyThresholds||typeof t.policyThresholds!="object")}var cf={"ib-3bab6314f0ba":"53a2040646cd479e1f5f1aea9abf7848ce8b62e32001efb8044dfd90e8ab87ed","ib-26e6c695da06":"bb1700f25b2ee7d7cdcdb9f446f0f44ef2cc22a3096bc161232fb658e7cdaf38"};function Ql(e,r=process.env){let t=Qs(r.KYNVER_INSTRUCTION_BUNDLE_PUBLIC_KEY);if(t)return t;let n=cf[e];return n?Qs(n):null}import{createPublicKey as Hw,verify as Fw}from"node:crypto";var $w=Buffer.from("302a300506032b6570032100","hex");function Kw(e){return Hw({key:Buffer.concat([$w,Buffer.from(e)]),format:"der",type:"spki"})}function uf(e,r){if(!Vt(e))return{ok:!1,reason:"malformed signed bundle payload"};let t;try{t=Buffer.from(e.signature,"base64url")}catch{return{ok:!1,reason:"signature is not base64url"}}if(t.length!==64)return{ok:!1,reason:"signature is not a 64-byte Ed25519 signature"};try{let n=Buffer.from(Xs(e.bundle),"utf8");return Fw(null,n,Kw(r),t)?{ok:!0,bundle:e.bundle}:{ok:!1,reason:"Ed25519 signature mismatch"}}catch(n){return{ok:!1,reason:`signature verification failed: ${n.message}`}}}function Zl(e,r=process.env){if(!Vt(e))return{ok:!1,reason:"malformed signed bundle payload"};let t=Ql(e.publicKeyId,r);return t?uf(e,t):{ok:!1,reason:`no verification key for publicKeyId "${e.publicKeyId}" (not pinned; set KYNVER_INSTRUCTION_BUNDLE_PUBLIC_KEY)`}}import{mkdirSync as jw,readFileSync as Vw,renameSync as Gw,writeFileSync as Yw}from"node:fs";import{homedir as Jw}from"node:os";import df from"node:path";function ec(e){let r=e.replace(/[^A-Za-z0-9_-]/g,"_");return df.join(Jw(),".kynver",`instruction-bundle-${r}.json`)}function rc(e,r){try{let t=ec(e);jw(df.dirname(t),{recursive:!0});let n=`${t}.tmp-${process.pid}`;Yw(n,JSON.stringify(r),"utf8"),Gw(n,t)}catch{}}function tc(e){try{let r=Vw(ec(e),"utf8"),t=JSON.parse(r);return Vt(t)?t:null}catch{return null}}var pf=15*6e4,qw=1e4,ar={lastAttemptAtMs:0,etag:null,diskCacheTried:!1,routeMissingLogged:!1};function no(e,r){console.error(JSON.stringify({event:e,...r}))}function mf(e,r,t){let n=Zl(e);return n.ok?(Ya(n.bundle,r),r==="server"&&rc(t,e),!0):(no("instruction_bundle_signature_invalid",{agentOsId:t,source:r,publicKeyId:e.publicKeyId,reason:n.reason}),!1)}function to(e){if(ar.diskCacheTried)return!1;ar.diskCacheTried=!0;let r=tc(e);return r?mf(r,"disk",e):!1}async function nc(e){let r=e.nowMs??Date.now(),t=()=>({source:sr(),version:vr(),updated:!1});if(!e.force&&r-ar.lastAttemptAtMs<pf)return t();ar.lastAttemptAtMs=r;let n=e.baseUrl?.trim().replace(/\/$/,""),o=e.secret?.trim();if(!n||!o)return sr()==="embedded"&&to(e.agentOsId)?{...t(),updated:!0}:t();let s=e.fetchImpl??fetch,i=new AbortController,a=setTimeout(()=>i.abort(),qw);try{let l=Le(o);delete l["Content-Type"],ar.etag&&sr()==="server"&&(l["If-None-Match"]=ar.etag);let c=await s(`${n}/api/agent-os/by-id/${encodeURIComponent(e.agentOsId)}/runtime/instruction-bundle`,{headers:l,signal:i.signal});if(c.status===304)return t();if(c.status===404)return ar.routeMissingLogged||(ar.routeMissingLogged=!0,no("instruction_bundle_route_missing",{agentOsId:e.agentOsId,baseUrl:n})),sr()==="embedded"&&to(e.agentOsId)?{...t(),updated:!0}:t();if(!c.ok)return no("instruction_bundle_fetch_failed",{agentOsId:e.agentOsId,status:c.status}),sr()==="embedded"&&to(e.agentOsId)?{...t(),updated:!0}:t();let u=await c.json().catch(()=>null);return!u||!mf(u,"server",e.agentOsId)?sr()==="embedded"&&to(e.agentOsId)?{...t(),updated:!0}:t():(ar.etag=c.headers.get("etag"),no("instruction_bundle_loaded",{agentOsId:e.agentOsId,version:vr(),publicKeyId:u.publicKeyId}),{...t(),updated:!0})}catch(l){return no("instruction_bundle_fetch_error",{agentOsId:e.agentOsId,error:l instanceof Error?l.message:String(l)}),sr()==="embedded"&&to(e.agentOsId)?{...t(),updated:!0}:t()}finally{clearTimeout(a)}}var oc="openai-codex",zw=new Set(["upstream_503","connection_refused","connection_reset","sse_no_event","sse_idle_timeout"]),Xw=[/\bsk-[a-zA-Z0-9_-]{8,}\b/g,/\bBearer\s+[a-zA-Z0-9._-]{8,}\b/gi,/\baccess[_-]?token["\s:=]+[a-zA-Z0-9._-]{8,}/gi];function lr(e,r=400){let t=String(e??"").replace(/\s+/g," ").trim();for(let n of Xw)t=t.replace(n,"[redacted]");return t.length>r?`${t.slice(0,r)}\u2026`:t}function Qw(e,r){let t=[];e instanceof Error?(t.push(e.message),t.push(e.name)):typeof e=="string"?t.push(e):e!=null&&t.push(String(e));let n=e,o=r??n?.status_code??n?.statusCode??void 0;return o!=null&&t.push(`http ${o}`),{haystack:t.join(" ").toLowerCase(),statusCode:o}}function gf(e,r){let{haystack:t,statusCode:n}=Qw(e,r),o=e instanceof Error?e.message:typeof e=="string"?e:String(e??"");if(n===402||/billing|credit|payment required|insufficient_quota/.test(t))return{errorClass:"billing",summary:lr(o||"Billing or credits exhausted"),statusCode:n,transient:!1};if(n===401||n===403||/\bunauthorized\b|\bforbidden\b/.test(t))return{errorClass:"auth",summary:lr(o||"Authentication failed"),statusCode:n,transient:!1};if(n===429||/rate limit|too many requests|throttl/.test(t))return{errorClass:"rate_limit",summary:lr(o||"Rate limited"),statusCode:n,transient:!0};if(n===503||/upstream connect error|connection termination|remote connection failure|delayed connect error/.test(t))return{errorClass:"upstream_503",summary:lr(o||"ChatGPT Codex backend returned HTTP 503"),statusCode:n??503,transient:!0};if(/connection refused/.test(t))return{errorClass:"connection_refused",summary:lr(o||"Connection refused by ChatGPT Codex backend"),statusCode:n,transient:!0};if(/no sse events|no bytes within|no stream events|codex stream produced no/.test(t)){let s=/no bytes|ttfb|first byte/.test(t)?"sse_no_event":"sse_idle_timeout";return{errorClass:s,summary:lr(o||(s==="sse_no_event"?"Codex stream opened but sent no events":"Codex stream stalled after the first event")),statusCode:n,transient:!0}}return/connection reset|connection lost|connection closed|disconnect\/reset/.test(t)?{errorClass:"connection_reset",summary:lr(o||"Connection reset while talking to ChatGPT Codex"),statusCode:n,transient:!0}:{errorClass:"unknown",summary:lr(o||"Unknown provider error"),statusCode:n,transient:!1}}function hf(e){let r=e.env??process.env,t=Math.max(1,e.defaultRetries??3),n=String(e.provider??"").toLowerCase(),o=String(e.platform??"").toLowerCase();if(n!==oc||o!=="cron")return t;let s=r.HERMES_CODEX_CRON_API_MAX_RETRIES?.trim();if(!s)return Math.max(t,5);let i=Number.parseInt(s,10);return!Number.isFinite(i)||i<1?Math.max(t,5):Math.max(t,i)}var ff={upstream_503:"ChatGPT Codex backend outage (HTTP 503)",connection_refused:"ChatGPT Codex backend refused the connection",connection_reset:"ChatGPT Codex connection dropped mid-request",sse_no_event:"Codex stream never started (no SSE events)",sse_idle_timeout:"Codex stream stalled (no SSE events after the first byte)",rate_limit:"ChatGPT Codex rate limit",billing:"ChatGPT Codex billing or quota limit",auth:"ChatGPT Codex authentication problem",unknown:"ChatGPT Codex provider error"};function kf(e){let r=e.provider?.trim()||oc,t=e.model?.trim()||"(unknown model)",n=e.jobName?.trim()||"Scheduled Hermes job",o=ff[e.errorClass]??ff.unknown,s=e.degraded?"degraded":"failed";return[`\u26A0\uFE0F ${n} \u2014 AI provider ${s} (not a Kynver harness failure).`,"",`Provider: ${r} (ChatGPT Codex subscription)`,`Model: ${t}`,`What happened: ${o} after ${e.attempts} attempt(s) with backoff.`,`Details: ${e.summary}`,"","This is a ChatGPT/Codex API issue on chatgpt.com \u2014 not AgentOS, not the Kynver runtime, and not your local harness.","The cron job will run again on its next schedule. If it persists, check ChatGPT/Codex status or re-auth with: hermes auth status openai-codex"].join(`
-`)}function yf(e,r){return`\u26A0\uFE0F Cron job '${e}' \u2014 provider degraded
+${n}`;return ES.some(s=>s.test(o))?"privileged":r.includes("provider:claude")||r.includes("deep_review")||r.includes("security")||r.includes("landing")||r.includes("review")||t.startsWith("land:")||r.includes("implementer")||r.includes("repair")||t.includes("implement")?"elevated":PS.some(s=>s.test(o))?"low":"elevated"}function AS(e){let r=st(e.provider),t=e.escalatedFrom&&e.escalatedReason?`Escalated from ${e.escalatedFrom} (${e.escalatedReason}); using ${r.displayName} (${r.costTier} tier)`:`${r.displayName} selected for ${e.riskClass} orchestration (${r.costTier} tier, auth=${e.authSource})`;return{provider:e.provider,model:e.model,authSource:e.authSource,costTier:r.costTier,riskClass:e.riskClass,costRationale:t,routingRule:e.routingRule,escalatedFrom:e.escalatedFrom,escalatedReason:e.escalatedReason}}function IS(e){let r=e.inventory??Ml();return e.codexBinding?{...r,bindings:{...r.bindings,codex:e.codexBinding}}:r}function it(e){let r=AS({provider:e.providerId,model:e.model,authSource:e.binding.authSource,riskClass:e.riskClass,routingRule:e.routingRule,escalatedFrom:e.escalatedFrom,escalatedReason:e.escalatedReason});return{provider:e.providerId,model:e.model,rule:r.routingRule,audit:r}}function Wl(e){let r=e.task??{},t=um(r),n=IS({inventory:e.inventory,codexBinding:e.codexBinding??(e.inventory?null:Ir())}),o=e.preferLowCost===!1?null:e.explicitProvider?.trim().toLowerCase(),s=e.explicitModel?.trim()||void 0,i=Pe;if(o==="codex"||o==="provider:codex"){let c=n.bindings.codex;if(!c.ready){let u=Bs({inventory:n,riskClass:t});return it(u?{providerId:u.providerId,binding:u.binding,riskClass:t,routingRule:"orchestration:explicit_codex_unavailable_cost_aware",model:s,escalatedFrom:"codex",escalatedReason:c.note??"codex oauth not bound"}:{providerId:i,binding:n.bindings[i],riskClass:t,routingRule:"orchestration:codex_unavailable_escalate_cursor",model:s,escalatedFrom:"codex",escalatedReason:c.note??"codex oauth not bound"})}return it({providerId:"codex",binding:c,riskClass:t,routingRule:"orchestration:explicit_codex",model:s})}if(o==="cursor"||o==="provider:cursor"){let c=n.bindings.cursor;if(c.ready)return it({providerId:"cursor",binding:c,riskClass:t,routingRule:"orchestration:explicit_cursor",model:s})}if(o==="claude"||o==="provider:claude"){let c=n.bindings.claude;if(c.ready)return it({providerId:"claude",binding:c,riskClass:t,routingRule:"orchestration:explicit_claude",model:s})}let a=Bs({inventory:n,riskClass:t});if(a)return it({providerId:a.providerId,binding:a.binding,riskClass:t,routingRule:`orchestration:cost_aware_${a.providerId}`,model:s,escalatedFrom:a.escalatedFrom,escalatedReason:a.escalatedReason});let l=n.bindings.codex;return it({providerId:i,binding:n.bindings[i],riskClass:t,routingRule:l.ready?"orchestration:inventory_empty_default_cursor":"orchestration:codex_unavailable_default_cursor",model:s,...l.ready?{}:{escalatedFrom:"codex",escalatedReason:l.note??"codex oauth not bound"}})}$r();C();import{closeSync as pm,openSync as mm}from"node:fs";import{spawn as MS}from"node:child_process";var OS=/-(?:thinking(?:-(?:high|medium|low|minimal|max|none))?|high|medium|low|minimal)$/i;function NS(e){return e.replace(OS,"")}var TS=/^(?:gpt-|gpt5|o1|o3|o4|gemini-|grok-|composer|deepseek|llama|mistral|qwen|command-)/i;function Ll(e){return/^claude[-_]/i.test(e)||/^(?:opus|sonnet|haiku)\b/i.test(e)}var DS=new Set(["cursor"]);function dm(e){let r=e.trim().toLowerCase();return DS.has(r)?"auto":null}function $s(e,r){let t=(e??"").trim();if(!t)return{ok:!0,model:r,normalized:!1};let o=NS(t).trim()||r;return TS.test(o)||!Ll(o)&&o!==r?{ok:!1,model:t,normalized:!1,requested:t,note:`model "${t}" is not a Claude model \u2014 the "claude" provider drives the Claude CLI, which only accepts claude-* model ids (got "${o}"). Pick a Claude model or switch the worker provider.`}:o!==t?{ok:!0,model:o,normalized:!0,requested:t,note:`normalized model "${t}" \u2192 "${o}" (the Claude CLI rejects reasoning-effort suffixes)`}:{ok:!0,model:o,normalized:!1}}function at(e,r){let t=(e??"").trim();return t?Ll(t)?{ok:!1,model:t,normalized:!1,requested:t,note:`model "${t}" is a Claude model but the worker provider is "codex". Switch the provider or pick a Codex/OpenAI model.`}:{ok:!0,model:t,normalized:!1}:{ok:!0,model:r,normalized:!1}}function Ks(e,r){let t=(e??"").trim();if(!t)return{ok:!0,model:r,normalized:!1};let n=dm(t);return n?{ok:!0,model:n,normalized:!0,requested:t,note:`normalized model "${t}" \u2192 "${n}" (Cursor provider alias \u2014 use "auto" or a composer id, not "cursor")`}:Ll(t)?{ok:!1,model:t,normalized:!1,requested:t,note:`model "${t}" is a Claude model but the worker provider is "cursor". Switch the provider to "claude" or pick a Cursor model.`}:{ok:!0,model:t,normalized:!1}}var Zt="claude-sonnet-4-6",fm={name:"claude",defaultModel:Zt,preflightModel(e){return $s(e,Zt)},start(e){let r=$s(e.model,Zt);if(!r.ok)throw new Error(`claude provider model preflight failed: ${r.note}`);let t=r.model,n=mm(e.stdoutPath,"a"),o=mm(e.stderrPath,"a"),s=["ignore",n,o],i=MS("claude",["--model",t,"-p","--verbose","--permission-mode","bypassPermissions","--output-format","stream-json","--include-partial-messages",e.prompt],de({cwd:e.worktreePath,detached:!0,stdio:s,env:De(process.env)}));if(pm(n),pm(o),!i.pid)throw new Error("failed to spawn claude worker process (is the `claude` CLI on PATH?)");return i.unref(),{pid:i.pid,model:t}}};$r();C();import{closeSync as ym,existsSync as LS,openSync as Rm}from"node:fs";import{spawn as bm}from"node:child_process";$r();C();import{closeSync as gm,openSync as hm}from"node:fs";import{spawn as US}from"node:child_process";var js=process.env.KYNVER_CODEX_DEFAULT_MODEL?.trim()||"gpt-5.4";function WS(){return De({...process.env,CI:"1",NO_COLOR:"1",HERMES_ACCEPT_HOOKS:process.env.HERMES_ACCEPT_HOOKS??"1"})}function km(e,r){let t=process.env.KYNVER_HERMES_CODEX_MAX_TURNS?.trim()||"40";return["chat","-q",r,"--provider","openai-codex","-m",e,"-Q","--accept-hooks","--max-turns",t,"--toolsets","hermes-cli"]}var Bl={name:"hermes-codex",defaultModel:js,preflightModel(e){return at(e,js)},start(e){let r=at(e.model,js);if(!r.ok)throw new Error(`hermes-codex provider model preflight failed: ${r.note}`);let t=r.model,n=hm(e.stdoutPath,"a"),o=hm(e.stderrPath,"a"),s=["ignore",n,o],i=Ae("hermes",["KYNVER_HERMES_BIN","HERMES_BIN"]),a=km(t,e.prompt),l=US(i,a,de({cwd:e.worktreePath,detached:!0,shell:!1,stdio:s,env:WS()}));if(gm(n),gm(o),!l.pid)throw new Error(`failed to spawn Hermes openai-codex worker (is \`${i}\` on PATH? run \`hermes auth status openai-codex\`)`);return l.unref(),{pid:l.pid,model:t}}};function BS(){return process.env.KYNVER_CODEX_DEFAULT_MODEL?.trim()||"gpt-5.4"}var Or=BS();function HS(){return process.env.KYNVER_CODEX_BIN?.trim()||process.env.CODEX_BIN?.trim()||"codex"}function FS(){return De({...process.env,CI:"1",NO_COLOR:"1"})}function vm(e,r){return["exec","--sandbox","read-only","--ask-for-approval","never","--model",e,r]}function $S(e,r,t){if(!(process.platform!=="win32"&&LS("/usr/bin/script")))return bm(e,r,t);let o=[e,...r].map(s=>`'${s.replace(/'/g,"'\\''")}'`).join(" ");return bm("script",["-qfc",o,"/dev/null"],t)}var Hl={name:"codex",defaultModel:Or,preflightModel(e){return at(e,Or)},start(e){if(Ir().path==="hermes_openai_codex")return Bl.start(e);let t=at(e.model,Or);if(!t.ok)throw new Error(`codex provider model preflight failed: ${t.note}`);let n=t.model,o=Rm(e.stdoutPath,"a"),s=Rm(e.stderrPath,"a"),i=["ignore",o,s],a=HS(),l=vm(n,e.prompt),c=$S(a,l,de({cwd:e.worktreePath,detached:!0,shell:!1,stdio:i,env:FS()}));if(ym(o),ym(s),!c.pid)throw new Error(`failed to spawn Codex worker (is \`${a}\` on PATH? run \`codex login\` or set CODEX_API_KEY)`);return c.unref(),{pid:c.pid,model:n}}};var KS="claude-sonnet-4-6",Pl="composer-2.5";function Vs(e,r){let t=e[r];return typeof t=="string"?t.trim():""}function Sm(e){return e.toLowerCase()}function $l(e=v()){let r=e.defaultModel?.trim();if(r)return r;let t=process.env.KYNVER_DEFAULT_MODEL?.trim();return t||KS}function Fl(e){let r=(e??"").toLowerCase();return!r||r.includes("composer")||r.includes("cursor")||r.includes("codex")||r.startsWith("gpt-")||r.startsWith("gpt5")?"cursor":/^claude[-_]/i.test(r)||/^(?:opus|sonnet|haiku)\b/i.test(r)?"claude":"cursor"}function jS(e,r){let t=e.trim().toLowerCase(),n=r?.trim();return t==="cursor"?{model:Pl,provider:"cursor",rule:n&&n!=="cursor"?"explicit:model_provider_alias_overrode_provider":"explicit:model_provider_alias",requestedModel:e}:t==="claude"||t==="anthropic"?{model:Zt,provider:"claude",rule:n&&n!=="claude"?"explicit:model_provider_alias_overrode_provider":"explicit:model_provider_alias",requestedModel:e}:null}function Cm(e,r){return!!(e.includes("deep")&&e.includes("review")||e.includes("security")||e.includes("plan_author")||e.includes("plan-author")||r.includes("deep review")||r.includes("security review")||e.includes("plan")&&!e.includes("review")&&(e.includes("author")||e.includes("strategy")))}function VS(e){let r=Sm(Vs(e,"executorRef")),t=Vs(e,"title").toLowerCase(),n=Vs(e,"priority")||"normal",o=Sm(Vs(e,"roleLane"));if(r.includes("provider:codex")||r.startsWith("codex:"))return{provider:"codex",model:Or,rule:"lane:codex_orchestration"};if(r.includes("cursor")||r.includes("composer")||r.includes("copilot")||o==="implementer"||o==="repair_implementer")return{provider:"cursor",rule:"lane:implementation"};if(r.includes("codex"))return{provider:"codex",model:Or,rule:"lane:codex_orchestration"};if(r.includes("landing")||t.startsWith("land:")||t.includes(" merge"))return{provider:"cursor",rule:"lane:landing"};if(r.includes("review")||/^review[\s:]/.test(t)||o.includes("review"))return Cm(r,t)||o==="deep_reviewer"?{provider:"cursor",rule:"lane:deep_review"}:{provider:"cursor",rule:"lane:review"};if(Cm(r,t)||o==="plan_author")return{provider:"cursor",rule:"lane:planning"};if(n==="critical")return{provider:"cursor",rule:"priority:critical"};if(n==="high")return{provider:"cursor",rule:"priority:high"};if(n==="low")return{provider:"cursor",rule:"priority:low"};let s=$l();return{model:s,provider:Fl(s),rule:"default:global"}}function Gs(e){let r;if(e.explicitModel?.trim()){let o=e.explicitModel.trim(),s=jS(o,e.explicitProvider);s?r=s:r={model:o,provider:e.explicitProvider?.trim()||Fl(o),rule:"explicit:cli",requestedModel:o}}else if(e.task&&Object.keys(e.task).length>0){let o=VS(e.task);r={...o,requestedModel:o.model}}else{let o=$l();r={model:o,provider:e.explicitProvider?.trim()||Fl(o),rule:"default:global",requestedModel:o}}let t=El({routing:r,task:e.task,explicitProvider:e.explicitProvider,explicitProviderIsOperatorOverride:e.explicitProviderIsOperatorOverride});if(!e.task||Object.keys(e.task).length===0||t.rule==="explicit:model_provider_alias"||t.rule==="explicit:model_provider_alias_overrode_provider"||t.rule==="explicit:cli"||Je(t.provider)&&(e.explicitProviderIsOperatorOverride||Ws(e.task)))return t;let n=Wl({task:e.task,explicitProvider:e.explicitProvider??t.provider,explicitModel:t.model});return{provider:n.provider,model:n.provider==="codex"?n.model??t.model??Or:t.model,rule:n.rule,requestedModel:t.requestedModel,orchestrationAudit:n.audit}}function wm(e,r,t){return e||r||t||$l()||Zt}function _m(e,r){let t=Number(e);return!Number.isFinite(t)||t<=0?r:Math.floor(t)}function xm(){return{maxTaskAttempts:_m(process.env.KYNVER_MAX_TASK_ATTEMPTS,Math.floor(ot("harness.maxTaskAttempts",4))),dispatchCooldownMs:_m(process.env.KYNVER_DISPATCH_COOLDOWN_MS,Math.floor(ot("harness.dispatchCooldownMs",5e3)))}}O();import qS from"node:path";M();Y();C();var Kl="kynver-harness:",Em="@runner:";function jl(e){return e?.trim()?e.trim():null}function GS(e){let r=jl(e);if(!r?.startsWith(Kl))return null;let t=r.slice(Kl.length),n=t.indexOf(Em);return n>=0?t.slice(0,n).trim()||null:t.trim()||null}function Vl(e,r){let t=e.trim(),n=r.trim();return`${Kl}${t}${Em}${n}`}function Gl(e,r){let t=jl(r);return t?GS(e)===t:!1}function Ys(e){let r=jl(e.workerLeaseOwner);return r&&Gl(r,e.runId)?r:Vl(e.runId,e.runnerId)}import Pm from"node:os";Ue();Ue();import YS from"node:os";function JS(e=process.env){return Me(e).boxKind}function so(e,r){let t=(r??YS.hostname()).trim().toLowerCase().replace(/\s+/g,"-")||"unknown-host";return`${e}:${t}`}function Nr(e){return e?.trim()?e.trim():null}function Xe(e={}){let r=e.env??process.env;return{runnerId:Nr(r.KYNVER_RUNTIME_ID)??Nr(r.OPENCLAW_RUNTIME_ID)??Nr(r.HOSTNAME)??Pm.hostname(),hostname:Nr(r.HOSTNAME)??Pm.hostname(),profile:Nr(r.KYNVER_RUNNER_PROFILE)??Nr(r.OPENCLAW_RUNNER_PROFILE),harnessRepo:Nr(r.KYNVER_HARNESS_REPO)??Nr(r.KYNVER_DEFAULT_REPO),runId:e.runId??null,instructionBundleVersion:Ar()}}O();async function en(e){let r=new Map,t=e.agentOsId?.trim();if(!t||e.taskIds.length===0)return r;let n=K(e.baseUrl);try{let o=await G(e.secret,t,{baseUrl:n}),s=`${n}/api/agent-os/by-id/${encodeURIComponent(t)}/harness/monitor/task-leases`,i=await X(s,o,{taskIds:[...new Set(e.taskIds)]},{agentOsId:t,baseUrl:n});if(!i.ok||!i.response||typeof i.response!="object")return r;let a=i.response.tasks;if(!Array.isArray(a))return r;for(let l of a)l?.taskId&&r.set(l.taskId,l)}catch{}return r}M();async function Js(e){let r=e.worker.leaseOwner?.trim()??null,t=e.worker.leaseToken?.trim()??null;if(t)return{leaseOwner:r,leaseToken:t};let n=e.worker.taskId?.trim();if(!n)return{leaseOwner:r,leaseToken:null};let s=(await en({agentOsId:e.agentOsId,taskIds:[n],baseUrl:e.baseUrl,secret:e.secret})).get(n),i=s?.leaseOwner?.trim()??null,a=s?.leaseToken?.trim()??null;if(!a)return{leaseOwner:r??i,leaseToken:null};let l=r??i;return(!e.worker.leaseToken||e.worker.leaseToken!==a)&&H(e.worker.runId,{...e.worker,...l?{leaseOwner:l}:{},leaseToken:a}),{leaseOwner:l,leaseToken:a}}function Am(e,r){return _(qS.join(x(e),"workers",b(r),"worker.json"),void 0)}async function qs(e,r){let t=L(e),n=String(r.agentOsId||"");if(!n)return{renewed:[],failed:[],skipped:[]};let o=K(r.baseUrl?String(r.baseUrl):void 0),s=await G(r.secret?String(r.secret):void 0,n,{baseUrl:o}),i=Number(r.leaseMs)>0?Math.floor(Number(r.leaseMs)):zs,a=Xe({runId:e}).runnerId,l=[],c=[],u=[];for(let d of Object.keys(t.workers||{})){let f=Am(e,d);if(!f?.taskId||!f.agentOsId){u.push(d);continue}if(!B(f.pid)){u.push(d);continue}if(T(f).status==="done"){u.push(d);continue}let p=Ys({runId:e,workerLeaseOwner:f.leaseOwner??null,runnerId:a}),h=await Js({worker:f,agentOsId:n,baseUrl:o,secret:s}),k=`${o}/api/agent-os/by-id/${encodeURIComponent(n)}/tasks/${encodeURIComponent(f.taskId)}/renew-lease`,g=await X(k,s,{leaseOwner:h.leaseOwner??p,leaseDurationMs:i,...h.leaseToken?{leaseToken:h.leaseToken}:{}},{agentOsId:n,baseUrl:o});if(g.ok){l.push(d);continue}let R=g.response&&typeof g.response=="object"&&"reason"in g.response?String(g.response.reason??`http ${g.status}`):`http ${g.status}`;c.push({worker:d,reason:R})}return{renewed:l,failed:c,skipped:u}}function Im(e,r){let t=L(e);for(let n of Object.keys(t.workers||{})){let o=Am(e,n);if(!(!o||o.taskId!==r||!B(o.pid)||T(o).status==="done"))return!0}return!1}Ee();M();M();import{existsSync as fw,mkdirSync as gw}from"node:fs";import rn from"node:path";var zS=/<!--\s*harness-contract:\s*(\{[\s\S]*?\})\s*-->/i,XS="next-action-fix:";function Xs(e){if(typeof e!="string")return null;let r=e.trim();return r.length?r:null}function Om(e){let r=e.trim().match(/github\.com\/([^/]+\/[^/]+)\/(?:pull|pulls)\/(\d+)/i);return r?`https://github.com/${r[1]}/pull/${r[2]}`:Xs(e)}function QS(e){let r=(e.title??"").trim().toLowerCase();if(r.startsWith("fix:")||r.startsWith("repair:"))return!0;let t=(e.executorRef??"").toLowerCase();return!!(t.startsWith(XS)||t.includes("repair")||t.includes("unblock"))}function ZS(e){let r={repairEnforceOriginalPr:!1,targetPrUrl:null,targetPrBranch:null};if(!e)return r;let t=e.match(zS);if(!t?.[1])return r;try{let n=JSON.parse(t[1]),o=Xs(String(n.targetPrUrl??n.target_pr_url??"")),s=Xs(String(n.targetPrBranch??n.target_pr_branch??""));return{repairEnforceOriginalPr:n.repairEnforceOriginalPr===!0||n.repair_enforce_original_pr===!0||!!o,targetPrUrl:o?Om(o):null,targetPrBranch:s}}catch{return r}}function Nm(e){if(!QS(e))return null;let r=ZS(e.description),t=e.prUrl?Om(e.prUrl):null,n=r.targetPrUrl??t;return n?{targetPrUrl:n,targetPrBranch:r.targetPrBranch??Xs(e.branch)}:null}function Tm(e){return["Repair target PR policy:","- Work on the existing target PR branch \u2014 do not open a duplicate repair PR by default.",`- Canonical target PR: ${e.targetPrUrl}`,...e.targetPrBranch?[`- Canonical target branch: \`${e.targetPrBranch}\` (checkout is already on this branch).`]:[],`- Reconcile ${e.targetPrUrl} in structured finalResult.targetPrReconciliation.`,"- Only supersede the original when the branch is inaccessible: set supersedesOriginalTargetPr: true with reason and close/comment on the original PR."]}function Yl(e){let r=e.ownedPaths.length?`Owned paths: ${e.ownedPaths.join(", ")}. Do not edit outside these paths without stopping and reporting why.`:"Owned paths: unrestricted for this worker, but keep edits tightly scoped.",t=!!e.model?.toLowerCase().includes("haiku"),n=t?"compact":"full",o=t?e.planId?`Active planId: ${e.planId}`:"No planId on this worker.":e.planId?`Active planId: ${e.planId}${e.taskId?` \xB7 taskId: ${e.taskId}`:""}`:"No planId on this worker \u2014 still emit progress when you touch plan-scoped work.",s=[...Xt(`worker.prompt.progress.${n}`).split(`
+`),o],i=Xt(`worker.prompt.merge_gate.${n}`).split(`
+`),a=Xt(`worker.prompt.plan_artifacts.${n}`).split(`
+`);return["You are running under the Kynver AgentOS runtime.","Immediately state your plan before editing.",r,`Worktree: ${e.worktreePath}`,`Progress heartbeat file: ${e.heartbeatPath}`,"After each major step, append one JSON line to the heartbeat file with fields: ts, phase, summary, changedFiles, blocker.","Final response must include files changed, verification commands, and unresolved risks.",...Xt("worker.prompt.core_rules").split(`
+`),"",...s,"",...i,"",...a,"",...e.contextEnvelopeMarkdown?.trim()?[e.contextEnvelopeMarkdown.trim(),""]:[],...e.personaMarkdown?.trim()?[e.personaMarkdown.trim(),""]:[],...e.instructionPolicyMarkdown?.trim()?["Operating rules (from AgentOS memory policy):",e.instructionPolicyMarkdown.trim(),""]:[],...e.memoryQualityMarkdown?.trim()?[e.memoryQualityMarkdown.trim(),""]:[],...e.repairTargetPrUrl?[...Tm({targetPrUrl:e.repairTargetPrUrl,targetPrBranch:e.repairTargetBranch??null}),""]:[],"Task:",e.task].join(`
+`)}C();O();C();$r();import{closeSync as ql,existsSync as Mm,mkdirSync as oC,openSync as zl,statSync as sC,unlinkSync as Dm}from"node:fs";import{spawn as iC}from"node:child_process";import aC from"node:os";import Qe from"node:path";import{existsSync as io,readdirSync as eC}from"node:fs";import lt from"node:path";var rC=/^\d{4}\.\d{1,2}\.\d{1,2}-[a-f0-9]+$/i;function tC(e){let t=e.split("-")[0].split(".");if(t.length!==3)return null;let[n,o,s]=t;return!n||!o||!s?null:+`${n}${o.padStart(2,"0")}${s.padStart(2,"0")}`}function nC(e){let r=lt.join(e,"versions");if(!io(r))return null;let t=null,n=-1;for(let o of eC(r,{withFileTypes:!0})){if(!o.isDirectory()||!rC.test(o.name))continue;let s=tC(o.name);s==null||s<=n||(n=s,t=lt.join(r,o.name))}return t}function Qs(e){let r=e?.trim()||lt.join(process.env.LOCALAPPDATA||"","cursor-agent"),t=lt.join(r,"node.exe"),n=lt.join(r,"index.js");if(io(t)&&io(n))return{nodeExe:t,indexJs:n,versionDir:r};let o=nC(r);if(!o)return null;let s=lt.join(o,"node.exe"),i=lt.join(o,"index.js");return!io(s)||!io(i)?null:{nodeExe:s,indexJs:i,versionDir:o}}var Jl="composer-2.5",lC=15e3,cC=6e4,uC=3e4;function dC(e,r,t){return{executable:e,prefixArgs:[r],shell:!1,detached:!0,bundledVersionDir:t}}function pC(e){if(process.platform==="win32"){let r=/\.(cmd|bat)$/i.test(e),t=/node\.exe$/i.test(e)&&Mm(Qe.join(Qe.dirname(e),"index.js"));if(r||t||e==="agent"){let o=r?Qs(Qe.dirname(e)):t?{nodeExe:e,indexJs:Qe.join(Qe.dirname(e),"index.js"),versionDir:Qe.dirname(e)}:Qs();if(o)return dC(o.nodeExe,o.indexJs,o.versionDir);throw new Error("Cursor Agent on Windows has no headless bundled node.exe under %LOCALAPPDATA%\\cursor-agent\\versions\\\u2026. Run `agent login` / update Cursor Agent CLI, use `--provider claude`, or set KYNVER_CURSOR_AGENT_ROOT to the cursor-agent folder.")}}return{executable:e,prefixArgs:[],shell:!1,detached:!0}}function mC(){let e=process.env.KYNVER_CURSOR_AGENT_BIN?.trim()||process.env.CURSOR_AGENT_BIN?.trim();if(e)return e;if(process.platform==="win32"){let r=Qs(process.env.KYNVER_CURSOR_AGENT_ROOT?.trim()||void 0);if(r)return r.nodeExe;let t=Qe.join(process.env.LOCALAPPDATA||"","cursor-agent","agent.cmd");if(Mm(t))return t}return"agent"}function fC(e,r){return De({...process.env,CI:"1",NO_COLOR:"1",...r.bundledVersionDir?{CURSOR_INVOKED_AS:Qe.basename(e)||"agent.cmd"}:{}})}function Um(e){e<=0||Atomics.wait(new Int32Array(new SharedArrayBuffer(4)),0,0,e)}function Xl(e,r){let t=process.env[e];if(!t)return r;let n=Number(t);return Number.isFinite(n)&&n>=0?Math.floor(n):r}function gC(){let e=process.env.KYNVER_CURSOR_START_LOCK_DIR?.trim()||Qe.join(aC.homedir(),".kynver","locks");return oC(e,{recursive:!0}),Qe.join(e,"cursor-agent-start.lock")}function hC(){if(process.env.KYNVER_CURSOR_START_LOCK==="0")return()=>{};let e=gC(),r=Xl("KYNVER_CURSOR_START_LOCK_TIMEOUT_MS",cC),t=Xl("KYNVER_CURSOR_START_LOCK_STALE_MS",uC),n=Date.now();for(;;)try{let o=zl(e,"wx");return ql(o),()=>{try{Dm(e)}catch{}}}catch(o){if(o.code!=="EEXIST")throw o;try{if(Date.now()-sC(e).mtimeMs>t){Dm(e);continue}}catch{continue}if(Date.now()-n>r)throw new Error(`timed out waiting for Cursor agent start lock: ${e}`);Um(250)}}var Wm={name:"cursor",defaultModel:Jl,preflightModel(e){return Ks(e,Jl)},start(e){let r=Ks(e.model,Jl);if(!r.ok)throw new Error(`cursor provider model preflight failed: ${r.note}`);let t=r.model,n=zl(e.stdoutPath,"a"),o=zl(e.stderrPath,"a"),s=["ignore",n,o],i=mC(),a=pC(i),l=hC(),c;try{c=iC(a.executable,[...a.prefixArgs,"-p","--force","--trust","--workspace",e.worktreePath,"--output-format","stream-json","--stream-partial-output","--model",t,e.prompt],de({cwd:e.worktreePath,detached:a.detached,shell:a.shell,stdio:s,env:fC(i,a)})),Um(Xl("KYNVER_CURSOR_START_LOCK_HOLD_MS",lC))}finally{l(),ql(n),ql(o)}if(!c.pid)throw new Error(`failed to spawn Cursor agent worker (is \`${i}\` on PATH? run \`agent login\` or set CURSOR_API_KEY)`);return c.unref(),{pid:c.pid,model:t}}};var Zs={claude:fm,codex:Hl,cursor:Wm},Lm=null;function Bm(e){if(Lm)return Lm;let r=e?.trim();if(r){let o=Zs[r];if(!o)throw new Error(`unknown worker provider "${r}" \u2014 supported: ${Object.keys(Zs).join(", ")}`);return o}let t=no(v().workerProvider),n=Zs[t];if(!n)throw new Error(`unknown worker provider "${t}" \u2014 supported: ${Object.keys(Zs).join(", ")}`);return n}C();import{spawn as ow}from"node:child_process";import{existsSync as sw,openSync as iw,closeSync as Cf}from"node:fs";import wf from"node:path";import{fileURLToPath as aw}from"node:url";M();function ei(e){return!!e.completionReportedAt?.trim()}function Ql(e,r,t){e.completionReportedAt=t.completionReportedAt,e.completionOutcome=t.completionOutcome,t.completionResponse!==void 0&&(e.completionResponse=t.completionResponse),H(r,e)}function kC(e){if(typeof e!="string")return null;let r=e.trim();return r.length?r:null}function Zl(e){return!!(kC(e.completionBlocker)||e.completionOutcome==="rejected")}function ct(e){return ei(e)&&!Zl(e)}M();Y();O();import mo from"node:path";function ec(e){return e&&typeof e=="object"&&!Array.isArray(e)?e:null}function ao(e){if(typeof e!="string")return null;let r=e.trim();return r.length?r:null}var yC=new Set(["review_scheduled","review_already_scheduled","skipped_terminal_task","closed","dispatched","dispatch_already_done"]);function Hm(e){let r=ec(e);if(!r)return{routeOutcome:null,taskAdvanced:!1,detail:null};let t=ao(r.outcome),n=ao(r.detail)??ao(r.error),o=ec(r.task),s=ec(r.closedTask),i=o?ao(o.status):null,a=s?ao(s.status):null,l=t!==null&&yC.has(t)||i==="awaiting_review"||i==="done"||a==="done";return{routeOutcome:t,taskAdvanced:l,detail:n}}function Fm(e){return e.taskAdvanced}M();Kn();var RC="expert-lane-pr-review:",bC="plan-review-task",vC="scheduledjob:";function $m(e){if(!e)return null;let r=e.trim().toLowerCase();return r.length?r:null}function Km(e){let r=(e.executorRef??"").toLowerCase();if(r.startsWith(RC)||r===bC||r.startsWith("daemon-review:"))return!0;if(r.startsWith(vC)&&e.parentTaskId){let n=$m(e.personaSlug);if(n==="lorentz"||n==="dalton")return!0}let t=(e.title??"").toLowerCase();if(t.includes("expert pr review"))return!0;if(e.parentTaskId&&(t.startsWith("review:")||t.includes("review required")||t.includes("runtime review"))){let n=$m(e.personaSlug);if(n==="lorentz"||n==="dalton")return!0}return!1}var jm=/^(lane:)?(review|deep_review|planning|landing)(:|$)/i,SC=new Set(wl()),CC=/no commits between/i;function Vm(e){return!!(e&&CC.test(e))}function Re(e){if(typeof e!="string")return null;let r=e.trim();return r.length?r:null}function Gm(e){return!e?.checked||e.headIsAncestorOfBase!==!1?null:Re(e.head)}function rc(e){if(e==null)return null;let t=(typeof e=="string"?e:typeof e=="object"&&e!==null&&"summary"in e?String(e.summary??""):JSON.stringify(e)).match(/https?:\/\/[^\s)>"]+\/(?:pull|pulls|merge_requests|pull-requests)\/\d+/i);return t?Re(t[0]):null}function wC(e,r,t){let n=r.trim();if(!n)return null;let o=t.git(e,["rev-list","--count",`${n}..HEAD`]);if(o.status!==0)return null;let s=Number.parseInt(o.stdout.trim(),10);return Number.isFinite(s)?s:null}function _C(e,r){if(r.changedFiles.length>0)return!1;let t=Re(e.personaSlug)?.toLowerCase();if(t&&SC.has(t))return!0;let n=Re(e.routingRule)??"";return!!(n&&jm.test(n))}function xC(e,r){if(e.changedFiles.length>0)return!0;let t=Re(r?.baseRef);if(t&&r?.exec&&r.worktreePath){let n=wC(r.worktreePath,t,r.exec);if(n===0)return!1;if(n!==null&&n>0)return!0}return!!(Re(e.headCommit)||Gm(e.gitAncestry))}function tc(e){if(!e.dispatched)return{required:!1,reason:"not_dispatched"};if(Km({title:e.taskTitle??void 0,personaSlug:e.personaSlug,parentTaskId:e.parentTaskId,executorRef:e.executorRef}))return{required:!1,reason:"expert_review_task"};let r=Re(e.routingRule)??"";if(r&&jm.test(r))return{required:!1,reason:"review_lane"};let t=e.worker??{personaSlug:e.personaSlug,routingRule:e.routingRule};if(_C(t,e.snapshot))return{required:!1,reason:"review_artifact"};if(Re(e.patchPath)||Re(e.artifactBundlePath))return{required:!1,reason:"patch_or_bundle"};if(Re(e.repairTargetPrUrl))return{required:!1,reason:"repair_target_pr"};if(Re(e.prUrl)??Re(e.taskPrUrl)??Re(e.snapshot.prUrl))return{required:!1,reason:"already_has_pr"};let s=e.exec&&e.baseRef?{baseRef:e.baseRef,exec:e.exec,worktreePath:e.snapshot.worktreePath}:void 0;return xC(e.snapshot,s)?{required:!0,snapshot:e.snapshot}:{required:!1,reason:"no_work_product"}}function Ym(e,r){return{changedFiles:e.changedFiles,branch:e.branch,worktreePath:e.worktreePath,gitAncestry:e.gitAncestry,finalResult:e.finalResult,headCommit:Re(r?.headCommit)??Gm(e.gitAncestry),prUrl:Re(r?.prUrl)??null}}import{spawnSync as EC}from"node:child_process";function qm(e){let r=e.trim();if(!r)return null;let t=r.match(/^git@github\.com:([^/]+\/[^/\s]+?)(?:\.git)?$/i);if(t)return Jm(t[1]);let n=r.match(/^ssh:\/\/git@github\.com\/([^/]+\/[^/\s]+?)(?:\.git)?$/i);if(n)return Jm(n[1]);try{let o=new URL(r.includes("://")?r:`https://${r}`);if(o.hostname.toLowerCase()!=="github.com")return null;let s=o.pathname.replace(/^\/+|\/+$/g,"").split("/");if(s.length<2)return null;let[i,a]=s;return!i||!a?null:`${i}/${a.replace(/\.git$/i,"")}`}catch{return null}}function Jm(e){let r=e.split("/").filter(Boolean);if(r.length<2)return null;let t=r[0],n=r[1].replace(/\.git$/i,"");return t&&n?`${t}/${n}`:null}Ee();function PC(e,r,t){try{let n=EC(e,t,{cwd:r,encoding:"utf8"});return{status:n.status,stdout:(n.stdout||"").trim(),stderr:(n.stderr||"").trim(),error:n.error?n.error.message:null}}catch(n){return{status:null,stdout:"",stderr:"",error:n.message}}}var ti={git:(e,r)=>re(e,r),gh:(e,r)=>PC("gh",e,r)};function AC(e){return e.split(`
+`).map(r=>r.trim()).find(Boolean)??""}function zm(e,r){let t=r.git(e,["remote","get-url","origin"]);return t.status!==0?null:qm(t.stdout)}function lo(e,r){let t=r.git(e,["rev-parse","HEAD"]);return t.status!==0?null:t.stdout.trim()||null}function ri(e,r,t,n){let o=n.gh(e,["pr","list","--repo",r,"--head",t,"--state","open","--json","url","--limit","1"]);if(o.status!==0)return null;try{return JSON.parse(o.stdout)[0]?.url?.trim()||null}catch{return null}}function ni(e){let{worktreePath:r,branch:t,commitMessage:n,hasDirtyFiles:o,exec:s}=e;if(o){let l=s.git(r,["add","-A"]);if(l.status!==0)return{ok:!1,committed:!1,pushed:!1,detail:l.stderr||l.stdout||l.error||"git add failed"};let c=s.git(r,["commit","-m",n]);if(c.status!==0)return{ok:!1,committed:!1,pushed:!1,detail:c.stderr||c.stdout||c.error||"git commit failed"}}let i=s.git(r,["push","-u","origin",t]);if(i.status!==0)return{ok:!1,committed:o,pushed:!1,detail:i.stderr||i.stdout||i.error||"git push failed"};let a=lo(r,s)??void 0;return{ok:!0,committed:o,pushed:!0,headCommit:a}}function Xm(e){let r=ri(e.worktreePath,e.repo,e.branch,e.exec);if(r)return{ok:!0,prUrl:r,created:!1};let t=e.exec.gh(e.worktreePath,["pr","create","--repo",e.repo,"--base",e.base,"--head",e.branch,"--title",e.title,"--body",e.body,"--draft"]);if(t.status!==0)return{ok:!1,detail:t.stderr||t.stdout||t.error||"gh pr create failed"};let n=IC(t.stdout)??ri(e.worktreePath,e.repo,e.branch,e.exec);return n?{ok:!0,prUrl:n,created:!0}:{ok:!1,detail:"gh pr create succeeded but no PR URL was parsed"}}function IC(e){let t=AC(e).match(/https?:\/\/[^\s]+\/pull\/\d+/i);return t?t[0]:null}function Qm(e,r,t,n){let o=t.trim();if(!o||!r.trim())return null;let s=n.gh(e,["api",`repos/${r}/commits/${o}/pulls`]);if(s.status!==0||!s.stdout)return null;try{let l=JSON.parse(s.stdout).filter(c=>c.merged_at&&c.html_url?.trim()).sort((c,u)=>(typeof c.number=="number"?c.number:Number.MAX_SAFE_INTEGER)-(typeof u.number=="number"?u.number:Number.MAX_SAFE_INTEGER))[0];return l?.html_url?.trim()?{prUrl:l.html_url.trim(),number:typeof l.number=="number"?l.number:null}:null}catch{return null}}function OC(e){return e.gh(process.cwd(),["--version"]).status===0}function NC(e,r){return`AgentOS harness: ${e} (${r})`}function TC(e,r,t){return["Automated PR-ready handoff from the Kynver harness runtime.","",e?`AgentOS task: \`${e}\``:"",`Harness worker: \`${r}\` \xB7 run \`${t}\``,"","Opened by orchestrator completion enforcement so production review receives a reviewable artifact."].filter(Boolean).join(`
+`)}function nc(e){if(e.snapshot.changedFiles.length===0)return{ok:!0,prUrl:e.prUrl,headCommit:e.snapshot.headCommit??lo(e.snapshot.worktreePath,e.exec)??void 0};let r=ni({worktreePath:e.snapshot.worktreePath,branch:e.snapshot.branch,commitMessage:e.commitMessage,hasDirtyFiles:!0,exec:e.exec});return r.ok?{ok:!0,prUrl:e.prUrl,headCommit:r.headCommit??e.snapshot.headCommit??void 0,committed:r.committed,pushed:r.pushed}:{ok:!1,reason:`PR-ready handoff blocked: ${r.detail??"git commit/push failed"}`,nextAction:"Commit and push the dirty worker changes to the existing PR branch, then rerun `kynver worker complete`."}}function oi(e,r=ti){let t=e.prUrlHint??rc(e.status.finalResult)??null,n=Ym(e.status,{prUrl:t,headCommit:null}),o=e.run.baseCommit?.trim()||e.run.base?.trim()||"origin/main";if(!tc({dispatched:e.worker.dispatched,routingRule:e.worker.routingRule,personaSlug:e.worker.personaSlug,prUrl:t,taskTitle:e.worker.taskTitle,executorRef:e.worker.executorRef,parentTaskId:e.worker.parentTaskId,taskPrUrl:e.worker.taskPrUrl,repairTargetPrUrl:e.worker.repairTargetPrUrl,baseRef:o,exec:r,worker:e.worker,snapshot:n}).required)return t?nc({snapshot:n,prUrl:t,commitMessage:`chore(harness): update PR handoff for ${e.worker.name}`,exec:r}):{ok:!0};if(t)return nc({snapshot:n,prUrl:t,commitMessage:`chore(harness): update PR handoff for ${e.worker.name}`,exec:r});if(!OC(r)){let g=n.changedFiles.length;return{ok:!1,reason:`PR-ready handoff blocked: ${g?`${g} uncommitted change(s) with no PR URL`:"committed branch with no PR URL"}`,nextAction:"Install and authenticate GitHub CLI (`gh auth login`), then commit, push, and run `gh pr create` (or rerun `kynver worker complete` after the PR exists)."}}let i=zm(n.worktreePath,r);if(!i)return{ok:!1,reason:"PR-ready handoff blocked: could not resolve github.com origin for the worktree",nextAction:"Ensure `origin` points at GitHub, push the branch, open a PR, and rerun `kynver worker complete`."};let a=e.worker.repairTargetPrUrl?.trim();if(a){let g=!1,R=!1,I=n.headCommit??lo(n.worktreePath,r)??void 0;if(n.changedFiles.length>0){let E=ni({worktreePath:n.worktreePath,branch:n.branch,commitMessage:`fix(harness): repair target PR ${a}`,hasDirtyFiles:!0,exec:r});if(!E.ok)return{ok:!1,reason:`PR-ready handoff blocked: ${E.detail??"git commit/push failed"}`,nextAction:"Commit and push to the target PR branch, then rerun `kynver worker complete`."};g=E.committed,R=E.pushed,I=E.headCommit??I}else{let E=r.git(n.worktreePath,["push","-u","origin",n.branch]);if(E.status!==0&&!/already up to date/i.test(E.stderr||E.stdout))return{ok:!1,reason:`PR-ready handoff blocked: ${E.stderr||E.stdout||"git push failed"}`,nextAction:"Push the target branch to origin, then rerun `kynver worker complete`."};R=E.status===0}return{ok:!0,prUrl:a,headCommit:I,committed:g,pushed:R}}let l=ri(n.worktreePath,i,n.branch,r);if(l)return nc({snapshot:n,prUrl:l,commitMessage:`chore(harness): update PR handoff for ${e.worker.name}`,exec:r});let c=n.changedFiles.length>0,u=!1,d=!1,f=n.headCommit??void 0,m=ni({worktreePath:n.worktreePath,branch:n.branch,commitMessage:`chore(harness): PR-ready handoff for ${e.worker.name}`,hasDirtyFiles:c,exec:r});if(c&&!m.ok)return{ok:!1,reason:`PR-ready handoff blocked: ${m.detail??"git commit/push failed"}`,nextAction:"Commit and push the branch, run `gh pr create`, then rerun `kynver worker complete`."};if(c){if(u=m.committed,d=m.pushed,!m.ok)return{ok:!1,reason:`PR-ready handoff blocked: ${m.detail??"git push failed"}`,nextAction:"Fix git auth or merge conflicts, push the branch, run `gh pr create`, then rerun `kynver worker complete`."}}else{let g=r.git(n.worktreePath,["push","-u","origin",n.branch]);if(g.status!==0&&!/already up to date/i.test(g.stderr||g.stdout))return{ok:!1,reason:`PR-ready handoff blocked: ${g.stderr||g.stdout||g.error||"git push failed"}`,nextAction:"Push the branch to origin, run `gh pr create`, then rerun `kynver worker complete`."};d=g.status===0}f=m.headCommit??f??lo(n.worktreePath,r)??void 0;let p=f?Qm(n.worktreePath,i,f,r):null;if(p)return{ok:!0,prUrl:p.prUrl,headCommit:f,committed:u,pushed:d,created:!1};let h=e.run.base?.trim()||"main",k=Xm({worktreePath:n.worktreePath,repo:i,branch:n.branch,base:h.replace(/^origin\//,""),title:NC(e.worker.name,e.worker.runId),body:TC(e.worker.taskId,e.worker.name,e.worker.runId),exec:r});if(!k.ok||!k.prUrl){if(Vm(k.detail))return{ok:!0,headCommit:f??void 0,committed:u,pushed:d};let g=n.changedFiles.length;return{ok:!1,reason:`PR-ready handoff blocked: ${g?`${g} uncommitted change(s) and no PR URL after handoff attempt`:"no PR URL after handoff attempt"}${k.detail?` (${k.detail})`:""}`,nextAction:"Run `gh pr create` on the worker branch (or fix `gh` auth), attach the PR URL to the task, then rerun `kynver worker complete`."}}return{ok:!0,prUrl:k.prUrl,headCommit:f??void 0,committed:u,pushed:d,created:k.created}}Y();$n();function si(e){return e.filter(r=>{let t=r.trim(),n=t.startsWith("??")?t.slice(2).trim():t.length>3?t.slice(3).trim():t;return n!=="node_modules"&&!n.startsWith("node_modules/")})}function Zm(e){let r=e.trim();return r.startsWith("??")?r.slice(2).trim():r.length>3&&/^[ MADRCU?!]{2} /.test(r.slice(0,3))?r.slice(3).trim():r}function ef(e){return Array.isArray(e)?e.map(r=>typeof r=="string"?r.trim():"").filter(Boolean):[]}function rf(e){return e&&typeof e=="object"&&!Array.isArray(e)?e:null}function nf(e){let r=rf(e);if(!r)return[];let t=rf(r.worktreeHandoff),n=ef(t?.disposableArtifactsRemoved);return n.length?n:ef(r.disposableArtifactsRemoved)}function tf(e){return e.replace(/\\/g,"/").replace(/^\.\//,"").replace(/\/+$/,"")}function of(e,r){let t=si(e);if(t.length===0)return!0;if(r.length===0)return!1;let n=new Set(r.map(o=>tf(o)));return t.every(o=>{let s=tf(Zm(o));return n.has(s)})}function ii(e){if(typeof e!="string")return null;let r=e.trim();return r.length?r:null}function sf(e){return Array.isArray(e)?e.map(r=>typeof r=="string"?r.trim():"").filter(Boolean):[]}function DC(e){return e==null?!1:typeof e=="string"?e.trim().length>0:typeof e=="boolean"?e:Array.isArray(e)?e.length>0:typeof e=="object"?Object.keys(e).length>0:!0}function MC(e){let r=sf(e.disposableArtifactsRemoved),t=nf(e.finalResult);return[...new Set([...r,...t])]}function af(e){let r=sf(e.changedFiles),t=si(r),n=MC(e),o=t.length===0||of(r,n);return ii(e.prUrl)?o?{allowed:!0,state:"pr_handoff",materialDirtyCount:0}:{allowed:!1,state:"dirty_worktree",materialDirtyCount:t.length,detail:`Worktree has ${t.length} uncommitted change(s) with a PR attached; commit or discard before completing`}:ii(e.headCommit)?o?{allowed:!0,state:"commit_handoff",materialDirtyCount:0}:{allowed:!1,state:"dirty_worktree",materialDirtyCount:t.length,detail:`Worktree has ${t.length} uncommitted change(s) on top of a commit; commit or discard before completing`}:ii(e.artifactBundlePath)||ii(e.patchPath)?o?{allowed:!0,state:"commit_handoff",materialDirtyCount:0}:{allowed:!1,state:"dirty_worktree",materialDirtyCount:t.length,detail:`Worktree has ${t.length} uncommitted change(s) with a patch/bundle handoff; clean the tree before completing`}:o?{allowed:!0,state:"clean",materialDirtyCount:0}:DC(e.finalResult)?{allowed:!1,state:"dirty_worktree_no_pr",materialDirtyCount:t.length,detail:`Worktree has ${t.length} uncommitted change(s) with no commit or PR; commit, open a PR, discard, or remove one-off files via \`kynver worker discard-disposable\` before completing`}:{allowed:!1,state:"dirty_worktree",materialDirtyCount:t.length,detail:`Worktree has ${t.length} uncommitted change(s) with no final result`}}M();Y();C();import UC from"node:path";var WC=new Set(["awaiting_review","blocked","done","needs_input","waiting","scheduled","ready","cancelled","failed"]);function lf(e){return!!(typeof e.completionReportedAt=="string"&&e.completionReportedAt.trim())}function LC(e){if(typeof e=="string"){let r=e.trim();return r.length?r:null}if(e&&typeof e=="object"&&!Array.isArray(e)){let r=e,t=r.summary??r.finalSummary??r.message;if(typeof t=="string"&&t.trim())return t.trim();try{return JSON.stringify(e)}catch{return null}}return null}function BC(e){let r=e.finalResult??null,t=typeof e.lastHeartbeatSummary=="string"?e.lastHeartbeatSummary:LC(r);return{finalResult:r??t??"completed",summary:t}}function oc(e,r,t){if(lf(e)&&e.status==="done"&&e.completionSnapshot!=null)return;let n=new Date().toISOString(),o=BC(r),s=t?.source?.trim();e.completionReportedAt=n,e.completionSnapshot=o,e.status="done",s&&(e.completionAckSource=s),H(e.runId,e)}function HC(e){let r=new Map,n=e.response?.tick?.filteredItems;if(!Array.isArray(n))return r;for(let o of n){if(o.kind!=="task"||typeof o.id!="string")continue;let s=typeof o.taskStatus=="string"?o.taskStatus.trim():"";s&&r.set(o.id,s)}return r}function cf(e,r){let t=HC(r);if(t.size===0)return[];let n=L(e),o=[];for(let s of Object.keys(n.workers||{})){let i=_(UC.join(x(n.id),"workers",b(s),"worker.json"),void 0);if(!i?.taskId||lf(i))continue;let a=t.get(i.taskId);if(!a||a==="running"||!WC.has(a))continue;let l=T(i,{base:n.base,baseCommit:n.baseCommit});oc(i,l,{source:`board-task-${a}`}),o.push({worker:s,taskId:i.taskId,taskStatus:a})}return o}C();C();import ai from"node:path";var FC=/^[a-z0-9][a-z0-9._-]{0,127}$/i,$C=/^[a-z0-9][a-z0-9._-]{0,63}$/i,sc=new Set(["undefined","null"]),uf="usage: kynver worker <action> --run RUN_ID --name WORKER_NAME";function co(e){let r=e.trim();if(!FC.test(r))throw new Error(`invalid run id: ${e}`);return r}function df(e){let r=e.trim();if(!$C.test(r))throw new Error(`invalid worker name: ${e}`);return r}function ic(e){return typeof e=="string"?e.trim():""}function He(e){let r=ic(e.run),t=ic(e.name);return(!r||sc.has(r))&&Cr(`missing --run RUN_ID (${uf})`),(!t||sc.has(t))&&Cr(`missing --name WORKER_NAME (${uf})`),{runId:co(r),workerName:df(t)}}function li(e){let r=ic(e.run);return(!r||sc.has(r))&&Cr("missing --run RUN_ID (usage: kynver run status --run RUN_ID)"),co(r)}function ac(e){let r=ai.resolve(e);if(r.includes(".."))throw new Error("repo path must not contain .. segments");return r}function KC(e,r){return r.map(t=>{let n=ai.resolve(e,t),o=ai.relative(e,n);if(o.startsWith("..")||ai.isAbsolute(o))throw new Error(`owned path escapes repo: ${t}`);return n})}function jC(e){return!Number.isFinite(e)||e<=0||e>500?40:Math.floor(e)}async function pf(e,r,t){let n=await fetch(e,{method:"POST",headers:Be(r),body:JSON.stringify(t)}),o=null;try{o=await n.json()}catch{o=null}return{ok:n.ok,status:n.status,parsed:o}}function VC(e){if(e&&typeof e=="object"){let r=e.error;if(typeof r=="string"&&r.trim())return r.trim()}}function mf(e){return e&&typeof e=="object"&&!Array.isArray(e)?e:null}function uo(e){if(typeof e!="string")return null;let r=e.trim();return r.length?r:null}function GC(e){return e.completionBlocker?`blocked:${e.completionBlocker}`:e.completionOutcome?e.completionOutcome:e.completionReportedAt?"completion_acknowledged":e.finished?"worker_finished":"in_progress"}function YC(e){return e.completionBlocker?"Resolve completion blocker, then rerun `kynver worker complete`.":e.completionOutcome==="review_scheduled"||e.completionOutcome==="review_already_scheduled"?"Await review lane and landing decision in Command Center.":e.completionOutcome==="needs_attention"?"Inspect blocker/attention reason in Command Center and dispatch a repair task.":e.finished&&!e.completionReportedAt?"Post completion acknowledgement to AgentOS (`kynver worker complete`).":null}function gf(e){let r=e?.trim();return r?/completion acknowledged but board not advanced/i.test(r)&&/task already terminal/i.test(r):!1}function JC(e){return e.prUrl?"pr_handoff":e.headCommit?"commit_handoff":e.changedFiles.length>0?"dirty_worktree":"none"}function po(e,r){(e.completionBlocker??void 0)!==(r??void 0)&&(r?e.completionBlocker=r:delete e.completionBlocker,H(e.runId,e))}function qC(e){e.completionBlocker&&(delete e.completionBlocker,H(e.runId,e))}function ci(e){return e?{base:e.base,baseCommit:e.baseCommit}:{}}function zC(e,r){return{...e,...r.prUrl?{prUrl:r.prUrl}:{},...r.headCommit?{headCommit:r.headCommit}:{}}}async function fo(e){let{runId:r,workerName:t}=He(e),n=he(r,t),o=L(n.runId),s=T(n,ci(o)),i=(e.agentOsId?String(e.agentOsId):n.agentOsId)||"",a=(e.taskId?String(e.taskId):n.taskId)||null;if(!ne(s))return{ok:!0,skipped:!0,reason:"worker-not-finished"};if(n.localOnly)return{ok:!0,skipped:!0,reason:"local-only-worker"};if(!i)return{ok:!1,reason:"missing agentOsId"};let l=e.force===!0||e.force==="true";if(!l&&ct(n))return{ok:!0,skipped:!0,reason:"completion-already-acknowledged",httpStatus:200};if(!l&&Zl(n)&&qC(n),!(e.skipPrHandoff===!0||e.skipPrHandoff==="true")&&n.dispatched&&a){let P=oi({worker:n,run:o,status:s});if(!P.ok)return po(n,P.reason),{ok:!1,reason:P.reason,nextAction:P.nextAction,completionBlocked:!0};(P.prUrl||P.headCommit)&&(s=T(n,ci(o)),s=zC(s,P))}let u=s.gitAncestry.headIsAncestorOfBase===!1&&s.gitAncestry.head?s.gitAncestry.head:s.headCommit;if(n.dispatched){let P=af({changedFiles:s.changedFiles,finalResult:s.finalResult,prUrl:s.prUrl,headCommit:u,disposableArtifactsRemoved:n.disposableArtifactsRemoved});if(!P.allowed){let D=P.detail??`worktree completion blocked (${P.state})`;return po(n,D),{ok:!1,reason:D,nextAction:"Clean the worktree (commit, open a PR, or `kynver worker discard-disposable --path <file>`), then rerun `kynver worker complete`.",completionBlocked:!0}}}let d=K(e.baseUrl?String(e.baseUrl):void 0),f=e.secret?String(e.secret):void 0,m=await G(f,i,{baseUrl:d});a&&(await Js({worker:n,agentOsId:i,baseUrl:d,secret:m}),n=he(r,t));let p=`${d}/api/agent-os/by-id/${encodeURIComponent(i)}/harness/completion`,h={...s};n.disposableArtifactsRemoved?.length&&(h.disposableArtifactsRemoved=n.disposableArtifactsRemoved);let k={source:"kynver-harness",agentOsId:i,runId:n.runId,workerName:n.name,taskId:a,leaseToken:n.leaseToken??null,startedAt:n.startedAt,finishedAt:s.lastActivityAt||new Date().toISOString(),status:n.leaseToken?{...h,leaseToken:n.leaseToken}:h,workerInjection:{instructionPolicyFingerprint:n.instructionPolicyFingerprint??null,instructionPolicyEvidence:n.instructionPolicyEvidence??null,memoryQualityCapture:n.memoryQualityCapture??null,policyAt:n.instructionPolicyEvidence&&typeof n.instructionPolicyEvidence=="object"&&"policyAt"in n.instructionPolicyEvidence&&typeof n.instructionPolicyEvidence.policyAt=="string"?n.instructionPolicyEvidence.policyAt:null,personaSlug:n.personaSlug??null,personaEvidence:n.personaEvidence??null,contextEnvelopeEvidence:n.contextEnvelopeEvidence??null}},g=await pf(p,m,k);if((g.status===401||g.status===403)&&!f){let P=await Hp(i,{baseUrl:d});P&&P!==m&&(m=P,g=await pf(p,m,k))}if(g.ok){let P=Hm(g.parsed);if(!Fm(P)){let w=`completion acknowledged but board not advanced: ${P.detail??(P.routeOutcome?`harness completion returned ${P.routeOutcome}`:"harness completion did not advance the linked task")}`;po(n,w);let le={completionReportedAt:new Date().toISOString(),completionOutcome:"rejected",completionResponse:g.parsed};return Ql(n,n.runId,le),{ok:!1,httpStatus:g.status,response:g.parsed,reason:w,completionBlocked:!0}}po(n,void 0);let D=P.routeOutcome??"acknowledged",j={completionReportedAt:new Date().toISOString(),completionOutcome:"acknowledged",completionResponse:g.parsed};Ql(n,n.runId,j),oc(n,s,{source:"harness-completion"});let F=s.prUrl;return{ok:!0,httpStatus:g.status,response:g.parsed,reason:D,...F?{prHandoff:{prUrl:F}}:{}}}let R=g.status===401||g.status===403,I=VC(g.parsed)??(R?"runner token unauthorized":"non-2xx response"),E=R?`completion replay rejected (${g.status}): ${I}`:`completion replay failed (${g.status}): ${I}`;return po(n,E),{ok:!1,httpStatus:g.status,response:g.parsed,completionBlocked:!0}}async function ui(e){try{let{runId:r,workerName:t}=He(e),n=he(r,t),o=L(n.runId),s=T(n,ci(o)),i=(e.agentOsId?String(e.agentOsId):n.agentOsId)||"",a=(e.taskId?String(e.taskId):n.taskId)||null;if(!ne(s)){console.log(JSON.stringify({worker:n.name,runId:n.runId,status:"skipped",reason:"worker-not-finished",workerStatus:s.status,alive:s.alive},null,2));return}if(n.localOnly){console.log(JSON.stringify({worker:n.name,runId:n.runId,status:"skipped",reason:"local-only-worker"},null,2));return}i||(console.error("worker complete requires --agent-os-id (or an agentOsId persisted at worker start)"),process.exit(1));let l=await fo(e);console.log(JSON.stringify({worker:n.name,runId:n.runId,...l.skipped?{status:"skipped"}:{},...l.reason?{reason:l.reason}:{},...l.nextAction?{nextAction:l.nextAction}:{},...l.completionBlocked?{completionBlocked:l.completionBlocked}:{},agentOsId:i,taskId:a,httpStatus:l.httpStatus,response:l.response},null,2)),l.ok||process.exit(1)}catch(r){console.error(`worker complete failed: ${r.message}`),process.exit(1)}}function cc(e){let{runId:r,workerName:t}=He(e),n=he(r,t),o=L(n.runId),s=T(n,ci(o));pe(mo.join(n.workerDir,"last-status.json"),s),console.log(JSON.stringify(s,null,2))}function XC(e){return{full:`kynver worker list --run ${e} --full`,blocked:`kynver worker list --run ${e} --blocked`,running:`kynver worker list --run ${e} --running`,task:`kynver worker list --run ${e} --task <task-id>`,worker:`kynver worker list --run ${e} --worker <worker>`,runFull:`kynver run status --run ${e} --full`,workerFull:`kynver worker status --run ${e} --name <worker>`,workerTail:`kynver worker tail --run ${e} --name <worker> --lines 80`}}function lc(e){if(typeof e!="string")return;let r=e.trim();return r.length?r:void 0}function QC(e){let r={};(e.blocked===!0||e.blocked==="true")&&(r.blocked=!0),(e.running===!0||e.running==="true")&&(r.running=!0);let t=lc(e.task??e.taskId);t&&(r.task=t);let n=lc(e.worker??e.name);n&&(r.worker=n);let o=lc(e.status);return o&&(r.status=o),r}function ZC(e,r){if(r.blocked){let t=typeof e.attention=="string"?e.attention:"",n=typeof e.status=="string"?e.status:"";if(!(t==="blocked"||t==="needs_attention"||t==="stale"||n==="blocked"))return!1}return!(r.running&&!(e.status==="running"&&e.attention!=="blocked"&&e.attention!=="needs_attention")||typeof r.task=="string"&&e.taskId!==r.task||typeof r.worker=="string"&&e.worker!==r.worker||typeof r.status=="string"&&e.status!==r.status)}function hf(e,r){let t=QC(r);if(Object.keys(t).length===0)return e;let n=e.workers.filter(s=>ZC(s,t)),o={...e,workerCount:n.length,needsAttention:n.filter(s=>s.attention&&s.attention!=="ok"&&s.attention!=="done").map(s=>s.worker),workers:n,activeFilters:t};return e.summary&&(o.summary={statusCounts:Tr(n,"status"),attentionCounts:Tr(n,"attention"),lifecycleCounts:Tr(n,"lifecycleStage")}),e.controller&&(o.controller=Rf(n)),o}function kf(e){let r=li(e),t=e.full===!0||e.full==="true",n=hf(t?ut(r):vf(r),e),o=n.workers;console.log(JSON.stringify({runId:n.runId,status:n.status,projection:t?"full":"compact",workerCount:n.workerCount,...n.activeFilters?{activeFilters:n.activeFilters}:{},...t?{}:{resultContract:{projection:"compact",rawWorkerPayloadsOmitted:!0,deepDetailAvailableVia:["--full","worker status","worker tail","run status --full"]},drilldownCommands:XC(r)},needsAttention:n.needsAttention,..."summary"in n?{summary:n.summary}:{},..."controller"in n?{controller:n.controller}:{},workers:o},null,2))}function yf(e){let{run:r,workerName:t,worker:n}=e,o=T(n,{base:r.base,baseCommit:r.baseCommit}),s=o.gitAncestry.headIsAncestorOfBase===!1&&o.gitAncestry.head?o.gitAncestry.head:void 0,i=zr({alive:o.alive,finalResult:o.finalResult,changedFiles:o.changedFiles,gitAncestry:o.gitAncestry,headCommit:s}),a=n.completionBlocker,l=typeof a=="string"&&a?a:void 0,c=gf(l)?void 0:l,u=c?"blocked":o.status,d=c?"blocked":o.attention.state,f=mf(n.completionResponse),m=mf(f?.task),p=uo(f?.outcome),h=uo(f?.status),k=Array.isArray(f?.warnings)?f.warnings.filter(D=>typeof D=="string"&&D.trim().length>0):[],g=uo(m?.prUrl)??uo(f?.prUrl),R=uo(n.completionReportedAt),I=GC({finished:ne(o),completionBlocker:c,completionOutcome:p,completionReportedAt:R}),E=YC({completionBlocker:c,completionOutcome:p,completionReportedAt:R,finished:ne(o)}),P=JC({changedFiles:o.changedFiles,headCommit:s,prUrl:g??void 0});return{worker:o.worker,status:u,attention:d,attentionReason:c??o.attention.reason,landingBlocked:o.finalResult?d==="needs_attention"||d==="blocked":!1,exitedWithoutFinalResult:!o.finalResult&&!o.alive,salvageState:i?.salvageable?"review_needed":"none",salvageReason:i?.salvageable?i.attentionReason:void 0,pid:o.pid,alive:o.alive,currentTool:o.currentTool,lastActivityAt:o.lastActivityAt,lastHeartbeatPhase:o.lastHeartbeatPhase,lastHeartbeatSummary:o.lastHeartbeatSummary,heartbeatBlocker:o.heartbeatBlocker,changedFileCount:o.changedFiles.length,changedFiles:o.changedFiles,branch:o.branch,taskId:n.taskId??null,planId:n.planId??null,instructionPolicyFingerprint:typeof n.instructionPolicyFingerprint=="string"?n.instructionPolicyFingerprint:null,instructionPolicyRuleCount:(()=>{let D=n.instructionPolicyEvidence;if(!D||typeof D!="object")return null;let j=D.ruleSlugs;return Array.isArray(j)?j.length:null})(),leaseOwner:n.leaseOwner??null,model:typeof n.model=="string"?n.model:void 0,routingRule:typeof n.routingRule=="string"?n.routingRule:void 0,requestedModel:typeof n.requestedModel=="string"?n.requestedModel:void 0,headCommit:s,prUrl:g,handoffState:P,gitAncestry:o.gitAncestry,finalResult:o.finalResult,lifecycleStage:I,completionReportedAt:R,completionOutcome:n.completionOutcome??null,completionRouteStatus:h,completionRouteOutcome:p,completionWarnings:k,completionBlocker:c??null,checkpoint:{phase:o.lastHeartbeatPhase,summary:o.lastHeartbeatSummary,blocker:o.heartbeatBlocker},lastCommandHint:o.currentTool??o.lastHeartbeatSummary,failureReason:c??o.error??null,nextAction:E,ancestry:o.gitAncestry.relation,ancestryChecked:o.gitAncestry.checked}}function ew(e){let r=typeof e.status=="string"?e.status:"",t=typeof e.completionBlocker=="string"&&e.completionBlocker.trim().length>0?e.completionBlocker:void 0;return t&&!gf(t)?!1:typeof e.completionReportedAt=="string"&&e.completionReportedAt.trim()||e.completionOutcome==="acknowledged"?!0:r==="done"}function rw(e,r){return{worker:e,status:"done",attention:"done",attentionReason:"metadata terminal worker; full status skipped in compact snapshot",alive:!1,pid:typeof r.pid=="number"?r.pid:void 0,branch:typeof r.branch=="string"?r.branch:void 0,taskId:r.taskId??null,planId:r.planId??null,model:typeof r.model=="string"?r.model:void 0,routingRule:typeof r.routingRule=="string"?r.routingRule:void 0,requestedModel:typeof r.requestedModel=="string"?r.requestedModel:void 0,lifecycleStage:r.completionReportedAt?"completion_acknowledged":"worker_finished",completionReportedAt:typeof r.completionReportedAt=="string"?r.completionReportedAt:null,completionOutcome:r.completionOutcome??null,localOnly:r.localOnly===!0,compactStatus:!0}}function Tr(e,r){let t={};for(let n of e){let o=n[r],s=typeof o=="string"&&o.trim()?o:"unknown";t[s]=(t[s]??0)+1}return t}function ff(e){if(e.attention!=="blocked")return!1;let r=typeof e.attentionReason=="string"?e.attentionReason:"";return r.includes("cli-config.json.tmp")||r.includes("Invalid authentication credentials")||r.includes("provider CLI is missing or not on PATH")||r.includes("unknown command:")}function Rf(e){let r=e.filter(ff),t=e.filter(n=>{if(ff(n))return!1;let o=n.attention;return o==="needs_attention"||o==="blocked"||o==="stale"||n.status==="running"});return{actionableCount:t.length,runningCount:e.filter(n=>n.status==="running").length,blockedCount:e.filter(n=>n.attention==="blocked").length,staleCount:e.filter(n=>n.attention==="stale").length,needsAttentionCount:e.filter(n=>n.attention==="needs_attention").length,doneCount:e.filter(n=>n.status==="done").length,systemHealthBlockerCount:r.length,systemHealthBlockers:r.slice(0,10).map(n=>({worker:n.worker,status:n.status,attention:n.attention,attentionReason:n.attentionReason,model:n.model,routingRule:n.routingRule,lastActivityAt:n.lastActivityAt})),actionableWorkers:t.slice(0,25).map(n=>({worker:n.worker,status:n.status,attention:n.attention,attentionReason:n.attentionReason,taskId:n.taskId,planId:n.planId,model:n.model,routingRule:n.routingRule,lastActivityAt:n.lastActivityAt,nextAction:n.nextAction}))}}function bf(e,r,t){let n={runId:e.id,name:e.name,status:Gt(e.status,r),repo:e.repo,workerCount:r.length,needsAttention:r.filter(o=>o.attention&&o.attention!=="ok"&&o.attention!=="done").map(o=>o.worker),workers:r};return t&&(n.summary={statusCounts:Tr(r,"status"),attentionCounts:Tr(r,"attention"),lifecycleCounts:Tr(r,"lifecycleStage")},n.controller=Rf(r)),n}function tw(e){return e.status==="done"&&e.attention==="done"}function ut(e){let r=L(e),n=Object.keys(r.workers||{}).map(s=>{let i=_(mo.join(x(r.id),"workers",b(s),"worker.json"),void 0);return i?yf({run:r,workerName:s,worker:i}):{worker:s,status:"missing",attention:"needs_attention",attentionReason:"worker.json not found"}}),o=bf(r,n,!1);return pe(mo.join(x(r.id),"last-board.json"),o),o}function vf(e){let r=L(e),n=Object.keys(r.workers||{}).map(i=>{let a=_(mo.join(x(r.id),"workers",b(i),"worker.json"),void 0);return a?ew(a)?rw(i,a):yf({run:r,workerName:i,worker:a}):{worker:i,status:"missing",attention:"needs_attention",attentionReason:"worker.json not found"}}),o=n.filter(i=>!tw(i)),s=bf(r,o,!0);return s.status=Gt(r.status,n),s.summary={...s.summary??{},totalWorkerCount:n.length,shownWorkerCount:o.length,omittedTerminalDoneWorkerCount:n.length-o.length,allStatusCounts:Tr(n,"status"),allAttentionCounts:Tr(n,"attention")},pe(mo.join(x(r.id),"last-board-compact.json"),s),s}async function Sf(e,r){let t=String(e.run||""),n=String(e.agentOsId||"");if(!t||!n)return null;let o=ut(t),s=K(e.baseUrl?String(e.baseUrl):void 0),i=await G(e.secret?String(e.secret):void 0,n,{baseUrl:s}),a=`${s}/api/agent-os/by-id/${encodeURIComponent(n)}/harness/snapshot`,l=await X(a,i,{agentOsId:n,runId:t,source:r,snapshot:o},{agentOsId:n,baseUrl:s});return{ok:l.ok,httpStatus:l.status,response:l.response,authRefreshed:l.refreshedAuth,authRefreshFailure:l.authRefreshFailure}}function nw(e){return{full:`kynver run status --run ${e} --full`,blocked:`kynver status --run ${e} --blocked`,running:`kynver status --run ${e} --running`,task:`kynver status --run ${e} --task <task-id>`,worker:`kynver status --run ${e} --worker <worker>`,workersFull:`kynver worker list --run ${e} --full`,workerFull:`kynver worker status --run ${e} --name <worker>`,workerTail:`kynver worker tail --run ${e} --name <worker> --lines 80`,monitorTick:`kynver monitor status --run ${e} --tick`}}function go(e){let r=li(e),t=e.full===!0||e.full==="true",n=hf(t?ut(r):vf(r),e);n.projection=t?"full":"compact",t||(n.resultContract={projection:"compact",rawWorkerPayloadsOmitted:!0,omittedWorkerFields:["finalResult","changedFiles","gitAncestry","completionResponse","stdout/stderr tails"],deepDetailAvailableVia:["--full","worker status","worker tail","monitor status --tick"]},n.drilldownCommands=nw(r)),console.log(JSON.stringify(n,null,2))}function uc(e){let{runId:r,workerName:t}=He(e),n=he(r,t),o=ss(n.stdoutPath,Number(e.lines||40));if(e.raw===!0||e.raw==="true"){process.stdout.write(o);return}for(let s of o.split(`
+`).filter(Boolean)){let i=Tt(s),a=i?cl(i):s;a&&console.log(a)}}function dc(e){let{runId:r,workerName:t}=He(e),n=he(r,t);if(!B(n.pid)){console.log(JSON.stringify({worker:n.name,pid:n.pid,status:"not_running"},null,2));return}if(_r(n.pid,"SIGTERM"),Fr(1500),B(n.pid)){_r(n.pid,"SIGKILL"),console.log(JSON.stringify({worker:n.name,pid:n.pid,status:"sigkill_sent"},null,2));return}console.log(JSON.stringify({worker:n.name,pid:n.pid,status:"stopped"},null,2))}C();var lw=5e3,cw=360*60*1e3,uw=3,dw=5e3;function pw(e){let{runId:r,workerName:t}=He(e);return{run:r,name:t,agentOsId:e.agentOsId?String(e.agentOsId):void 0,pollMs:Number(e.pollMs)>0?Math.floor(Number(e.pollMs)):void 0,maxTotalMs:Number(e.maxTotalMs)>0?Math.floor(Number(e.maxTotalMs)):void 0,completeAttempts:Number(e.completeAttempts)>0?Math.floor(Number(e.completeAttempts)):void 0,completeBackoffMs:Number(e.completeBackoffMs)>0?Math.floor(Number(e.completeBackoffMs)):void 0,baseUrl:e.baseUrl?String(e.baseUrl):void 0,secret:e.secret?String(e.secret):void 0}}async function dt(e){let r=pw(e),t=r.pollMs??lw,n=r.maxTotalMs??cw,o=r.completeAttempts??uw,s=r.completeBackoffMs??dw,i=he(r.run,r.name);if(!i.agentOsId||!i.taskId)return{worker:i.name,runId:i.runId,outcome:"missing_link",attempts:0,reason:"worker has no agentOsId/taskId \u2014 nothing to attribute completion to"};if(ct(i))return{worker:i.name,runId:i.runId,outcome:"completed",httpStatus:200,attempts:0,reason:"completion-already-acknowledged"};let a=Date.now();for(;;){if(i=he(r.run,r.name),ct(i))return{worker:i.name,runId:i.runId,outcome:"completed",httpStatus:200,attempts:0,reason:"completion-already-acknowledged"};let u=T(i);if(ne(u)||!B(i.pid))break;if(Date.now()-a>n)return{worker:i.name,runId:i.runId,outcome:"timed_out",attempts:0,reason:`worker did not finish within ${n}ms`};Fr(t)}let l,c;for(let u=1;u<=o;u++){let d=await fo({run:r.run,name:r.name,...r.agentOsId?{agentOsId:r.agentOsId}:{},...r.baseUrl?{baseUrl:r.baseUrl}:{},...r.secret?{secret:r.secret}:{}});if(l=d.httpStatus,d.ok)return{worker:i.name,runId:i.runId,outcome:"completed",httpStatus:d.httpStatus,attempts:u};if(d.httpStatus===401||d.httpStatus===403)return c=typeof d.reason=="string"?d.reason:"completion replay refused",{worker:i.name,runId:i.runId,outcome:"blocked",httpStatus:d.httpStatus,attempts:u,reason:c};c=typeof d.reason=="string"?d.reason:"transient failure",u<o&&Fr(s)}return{worker:i.name,runId:i.runId,outcome:"blocked",httpStatus:l,attempts:o,reason:c??"completion failed after retries"}}async function pc(e){try{let r=await dt(e);console.log(JSON.stringify(r,null,2)),(r.outcome==="missing_link"||r.outcome==="timed_out")&&process.exit(1),process.exit(0)}catch(r){console.error(`worker auto-complete failed: ${r.message}`),process.exit(1)}}function mw(){return wf.join(aw(new URL(".",import.meta.url)),"cli.js")}function mc(e){let r=e.cliPath??mw();if(!sw(r))return;let t=wf.join(e.workerDir,"auto-complete.log"),n;try{n=iw(t,"a")}catch{n=void 0}let o=["ignore",n??"ignore",n??"ignore"],s=e.nodeExecutable??process.execPath,i=[r,"worker","auto-complete","--run",e.runId,"--name",e.workerName];e.agentOsId&&i.push("--agent-os-id",e.agentOsId),e.baseUrl&&i.push("--base-url",e.baseUrl),e.secret&&i.push("--secret",e.secret);try{let a=ow(s,i,de({detached:!0,stdio:o,env:process.env}));return n!==void 0&&Cf(n),a.unref(),{pid:a.pid,logPath:t,cliPath:r}}catch{if(n!==void 0)try{Cf(n)}catch{}return}}Ee();function _f(e,r,t){me(e,["fetch","origin",t,"--prune"],{allowFailure:!0});let n=`origin/${t}`,o=re(e,["worktree","add","-B",t,r,n]);if(o.status===0)return;let s=re(e,["worktree","add","-b",t,r,"HEAD"]);if(s.status!==0){let i=o.stderr||o.stdout||s.stderr||s.stdout||"git worktree add failed for repair target branch";throw new Error(i)}}Ue();O();function di(e,r){let t=typeof r.name=="string"?r.name.trim():"";if(!t||t==="undefined"||t==="null")throw new Error(`worker name is required and must be a real identifier (got: ${JSON.stringify(r.name)})`);let n=b(t);if(e.workers?.[n])throw new Error(`worker already exists in run ${e.id}: ${n}`);if(!r.task)throw new Error(`missing task text for worker ${n}`);let o=r.routingRule||r.requestedModel?{provider:r.provider||Pe,model:r.model,rule:r.routingRule||"explicit:spawn",requestedModel:r.requestedModel??r.model}:Gs({explicitModel:r.model,explicitProvider:r.provider,explicitProviderIsOperatorOverride:!!r.provider?.trim()}),s=Bm(o.provider),i=o.model;if(s.preflightModel){let U=s.preflightModel(r.model);if(!U.ok)throw new Error(`model preflight failed for provider "${s.name}": ${U.note??"invalid model/provider combination"}`);U.normalized&&console.error(`[supervisor] ${n}: ${U.note}`),i=U.model}let{worktreesDir:a}=te(),l=rn.join(x(e.id),"workers",n);gw(l,{recursive:!0});let c=rn.join(a,e.id,n),u=r.repairTargetBranch?.trim()||void 0,d=u||r.branch||`agent/${e.id}/${n}`;if(fw(c))throw new Error(`worktree path already exists: ${c}`);me(e.repo,["fetch","origin","--prune"],{allowFailure:!0}),u?_f(e.repo,c,u):me(e.repo,["worktree","add","-b",d,c,e.baseCommit],{throwError:!0});let f=rn.join(l,"stdout.jsonl"),m=rn.join(l,"stderr.log"),p=rn.join(l,"heartbeat.jsonl"),h=Yl({task:r.task,ownedPaths:r.ownedPaths||[],worktreePath:c,heartbeatPath:p,planId:r.planId,taskId:r.taskId,instructionPolicyMarkdown:r.instructionPolicyMarkdown,memoryQualityMarkdown:r.memoryQualityPromptMarkdown??r.memoryQualityCapture?.promptMarkdown??null,personaMarkdown:r.personaMarkdown,contextEnvelopeMarkdown:r.contextEnvelopeMarkdown,model:i,repairTargetPrUrl:r.repairTargetPrUrl,repairTargetBranch:r.repairTargetBranch??(u||void 0)}),k=process.env.KYNVER_HARNESS_TASK_ID,g=process.env.KYNVER_HARNESS_AGENT_OS_ID;r.taskId&&(process.env.KYNVER_HARNESS_TASK_ID=String(r.taskId)),r.agentOsId&&(process.env.KYNVER_HARNESS_AGENT_OS_ID=String(r.agentOsId));let R;try{R=s.start({name:n,task:r.task,ownedPaths:r.ownedPaths,model:i,branch:d,worktreePath:c,workerDir:l,stdoutPath:f,stderrPath:m,heartbeatPath:p,prompt:h})}catch(U){throw me(e.repo,["worktree","remove","--force",c],{allowFailure:!0}),me(e.repo,["branch","-D",d],{allowFailure:!0}),U}finally{k===void 0?delete process.env.KYNVER_HARNESS_TASK_ID:process.env.KYNVER_HARNESS_TASK_ID=k,g===void 0?delete process.env.KYNVER_HARNESS_AGENT_OS_ID:process.env.KYNVER_HARNESS_AGENT_OS_ID=g}let I=wm(R.model,i,s.defaultModel),E=v(),P=Me(process.env,E),D=Xe().runnerId,j=so(P.boxKind),F={name:n,runId:e.id,status:"running",pid:R.pid,model:I,branch:d,worktreePath:c,workerDir:l,stdoutPath:f,stderrPath:m,heartbeatPath:p,ownedPaths:r.ownedPaths,...r.agentOsId?{agentOsId:String(r.agentOsId)}:{},...r.taskId?{taskId:String(r.taskId)}:{},...r.planId?{planId:String(r.planId)}:{},...r.instructionPolicyFingerprint?{instructionPolicyFingerprint:String(r.instructionPolicyFingerprint)}:{},...r.instructionPolicyEvidence?{instructionPolicyEvidence:r.instructionPolicyEvidence}:{},...r.memoryQualityCapture?{memoryQualityCapture:r.memoryQualityCapture}:{},...r.personaSlug?{personaSlug:String(r.personaSlug)}:{},...r.personaEvidence?{personaEvidence:r.personaEvidence}:{},...r.contextEnvelopeEvidence?{contextEnvelopeEvidence:r.contextEnvelopeEvidence}:{},...r.leaseOwner?{leaseOwner:String(r.leaseOwner)}:{},...r.leaseToken?{leaseToken:String(r.leaseToken)}:{},...r.dispatched?{dispatched:!0}:{},...!r.agentOsId||!r.taskId?{localOnly:!0}:{},routingRule:o.rule,...o.requestedModel?{requestedModel:o.requestedModel}:{},...o.orchestrationAudit?{orchestrationAudit:o.orchestrationAudit}:{},...r.executorRef?{executorRef:String(r.executorRef)}:{},...r.parentTaskId?{parentTaskId:String(r.parentTaskId)}:{},...r.taskTitle?{taskTitle:String(r.taskTitle)}:{},...r.taskPrUrl?{taskPrUrl:String(r.taskPrUrl)}:{},...r.repairTargetPrUrl?{repairTargetPrUrl:String(r.repairTargetPrUrl)}:{},...r.repairTargetBranch?{repairTargetBranch:String(r.repairTargetBranch)}:{},boxKind:P.boxKind,boxId:j,runtimeId:D,startedAt:new Date().toISOString()};if(H(e.id,F),e.workers={...e.workers||{},[n]:{workerDir:l,statusPath:rn.join(l,"worker.json")}},e.status="running",Le(e),F.agentOsId&&F.taskId){let U;try{U=mc({runId:e.id,workerName:n,workerDir:l,agentOsId:F.agentOsId})}catch(w){let le=`completion sidecar failed to spawn: ${w.message}`;F.completionBlocker=le,H(e.id,F)}if(U)U.pid&&(F.completionSidecarPid=U.pid,H(e.id,F));else{let w="completion sidecar failed to spawn (CLI not found or spawn error)";F.completionBlocker=w,F.completionSidecarSpawnFailedAt=new Date().toISOString(),H(e.id,F)}}return F}async function fc(e){let r=L(String(e.run)),t=typeof e.name=="string"?e.name.trim():"";t||(console.error("worker start failed: --name is required"),process.exit(1));let n=e.task?String(e.task):Pd(e.taskFile?String(e.taskFile):void 0);n||(console.error("missing --task or --task-file"),process.exit(1));let o=!!(e.agentOsId&&e.taskId),s=e.localOnly===!0||e.localOnly==="true";!o&&!s&&(e.agentOsId||e.taskId)&&(console.error("worker start: board-linked workers require both --agent-os-id and --task-id (or pass --local-only for direct runs)"),process.exit(1));let i=e.wait===!0||e.wait==="true",a;try{a=di(r,{name:t,task:n,ownedPaths:e.owned?String(e.owned).split(",").map(c=>c.trim()).filter(Boolean):[],model:e.model?String(e.model):void 0,branch:e.branch?String(e.branch):void 0,agentOsId:e.agentOsId?String(e.agentOsId):void 0,taskId:e.taskId?String(e.taskId):void 0,provider:e.provider?String(e.provider):void 0}),console.log(JSON.stringify({runId:r.id,worker:a.name,pid:a.pid,branch:a.branch,worktreePath:a.worktreePath,workerDir:a.workerDir},null,2))}catch(c){console.error(`worker start failed: ${c.message}`),process.exit(1)}if(!i||!a)return;let l=await dt({run:String(e.run),name:a.name,...a.agentOsId?{agentOsId:a.agentOsId}:{},...e.baseUrl?{baseUrl:String(e.baseUrl)}:{},...e.secret?{secret:String(e.secret)}:{}});console.error(JSON.stringify({event:"start_wait_outcome",...l})),l.outcome==="timed_out"&&(process.exitCode=1)}M();Yn();C();import hw from"node:path";function kw(e){let r=Array.isArray(e.ownedPaths)?e.ownedPaths.filter(n=>typeof n=="string"):[],t=Array.isArray(e.writeSetPrefixes)?(e.writeSetPrefixes??[]).filter(n=>typeof n=="string"):[];return{...r.length?{ownedPaths:r}:{},...t.length?{writeSetPrefixes:t}:{},...e.allowConcurrentHotspot?{allowConcurrentHotspot:!0}:{}}}function pi(e){let r=L(e),t=[];for(let n of Object.keys(r.workers||{})){let o=_(hw.join(x(r.id),"workers",b(n),"worker.json"),void 0);!o?.taskId||!Gn(o)||t.push({runId:r.id,workerName:n,taskId:o.taskId,pid:o.pid,...kw(o)})}return t}C();import{createHash as xf}from"node:crypto";function mr(e){let r=e.replace(/\r\n/g,`
+`).trimEnd();return xf("sha256").update(r,"utf8").digest("hex")}function tn(e){if(e==null)return null;let r=e.trim();return r?xf("sha256").update(r,"utf8").digest("hex"):null}O();var z=class extends Error{kind;httpStatus;constructor(r,t,n){super(t),this.name="PlanPersistError",this.kind=r,this.httpStatus=n}};function ho(e,r){return e===401||e===403?new z("auth",r,e):e>=500?new z("server",r,e):new z("permanent",r,e)}function gc(e){let r=e instanceof Error?e.message:String(e);return/ECONNREFUSED|ENOTFOUND|ETIMEDOUT|fetch failed|network/i.test(r)?new z("network",r):new z("tool_interruption",r)}function Ef(e){return e!=="permanent"}function fi(e){let r={"Content-Type":"application/json"};return e&&(r.Authorization=`Bearer ${e}`),r}async function gi(e){let r=await e.text();try{return JSON.parse(r)}catch{return r}}async function Pf(e,r,t={}){let n=K(t.baseUrl),o=t.apiKey??oe(),s=t.fetchFn??fetch,i=`${n}/api/agent-os/${encodeURIComponent(e)}/plans/${encodeURIComponent(r)}`;try{let a=await s(i,{method:"GET",headers:fi(o)}),l=await gi(a);if(!a.ok){let c=typeof l=="object"&&l&&"error"in l?String(l.error):`GET plan failed (${a.status})`;throw ho(a.status,c)}return l}catch(a){throw a instanceof z?a:gc(a)}}async function Af(e,r={}){let t=K(r.baseUrl),n=r.apiKey??oe(),o=r.fetchFn??fetch,s=e.agentOsSlug;try{if(e.operation==="create"){let f=`${t}/api/agent-os/${encodeURIComponent(s)}/plans`,m={title:e.title,summary:e.summary??null,slug:e.planSlug??null,sourceRefs:mi(e),initialVersion:{title:e.title,body:e.body,summary:e.summary??null,changeSummary:e.changeSummary??null,author:e.author??null,sourceRefs:mi(e)}},p=await o(f,{method:"POST",headers:fi(n),body:JSON.stringify(m)}),h=await gi(p);if(!p.ok){let g=typeof h=="object"&&h&&"error"in h?String(h.error):`create plan failed (${p.status})`;throw ho(p.status,g)}let k=h;return{planId:k.plan.id,versionId:k.version.id,versionNumber:k.version.versionNumber}}let i=e.planId;if(!i)throw new z("permanent","planId is required for this operation");if(e.operation==="update_metadata"){let f=`${t}/api/agent-os/${encodeURIComponent(s)}/plans/${encodeURIComponent(i)}`,m={title:e.title,summary:e.summary??null,sourceRefs:mi(e)},p=await o(f,{method:"PATCH",headers:fi(n),body:JSON.stringify(m)}),h=await gi(p);if(!p.ok){let g=typeof h=="object"&&h&&"error"in h?String(h.error):`update plan failed (${p.status})`;throw ho(p.status,g)}let k=h;return{planId:k.id,versionId:k.currentVersionId,versionNumber:null}}let a=`${t}/api/agent-os/${encodeURIComponent(s)}/plans/${encodeURIComponent(i)}/versions`,l={title:e.title,body:e.body,summary:e.summary??null,changeSummary:e.changeSummary??null,author:e.author??null,sourceRefs:mi(e),markCurrent:e.markCurrent!==!1},c=await o(a,{method:"POST",headers:fi(n),body:JSON.stringify(l)}),u=await gi(c);if(!c.ok){let f=typeof u=="object"&&u&&"error"in u?String(u.error):`add version failed (${c.status})`;throw ho(c.status,f)}let d=u;return{planId:d.version.planId,versionId:d.version.id,versionNumber:d.version.versionNumber}}catch(i){throw i instanceof z?i:gc(i)}}function mi(e){let r={...e.sourceRefs??{}};return e.model&&(r.model=e.model),Object.keys(r).length?r:e.sourceRefs??null}import{createHash as yw}from"node:crypto";function hi(e){let r={operation:e.operation,agentOsSlug:e.agentOsSlug,planId:e.planId??null,planSlug:e.planSlug??null,title:e.title.trim(),summaryHash:tn(e.summary),bodyHash:mr(e.body),changeSummary:e.changeSummary?.trim()??null,markCurrent:e.markCurrent??!0};return yw("sha256").update(JSON.stringify(r),"utf8").digest("hex")}import{mkdirSync as If}from"node:fs";import{homedir as Rw}from"node:os";import nn from"node:path";function ki(){let e=process.env.KYNVER_STATE_ROOT;return e?nn.resolve(e):nn.join(Rw(),".kynver","state")}function yi(){return nn.join(ki(),"plan-outbox")}function bw(){return nn.join(ki(),"plan-outbox-archive")}function pt(){let e=yi(),r=bw();return If(e,{recursive:!0}),If(r,{recursive:!0}),{outboxDir:e,archiveDir:r}}function ko(e){if(e.startsWith("/tmp/")||e.startsWith("/var/folders/"))return!0;let r=nn.resolve(e);return r.startsWith("/tmp/")||r.startsWith(nn.join("/var","folders"))}import{existsSync as hc,readFileSync as Nf,renameSync as Of,readdirSync as vw,writeFileSync as kc,unlinkSync as jL}from"node:fs";import Fe from"node:path";import{randomUUID as Sw}from"node:crypto";var Cw=12;function mt(){let{outboxDir:e}=pt(),r=vw(e).filter(n=>n.endsWith(".json")),t=[];for(let n of r){let o=Rc(Fe.join(e,n));o&&o.queueStatus==="queued"&&t.push(o)}return t.sort((n,o)=>n.createdAt.localeCompare(o.createdAt))}function yc(e){for(let r of mt())if(r.idempotencyKey===e)return r;return null}function Rc(e){if(!hc(e))return null;try{return JSON.parse(Nf(e,"utf8"))}catch{return null}}function Tf(e){let{outboxDir:r}=pt(),t=Fe.join(r,e.bodyPath);return Nf(t,"utf8")}function bc(e,r){let{outboxDir:t}=pt(),n=new Date().toISOString(),o=r.existing?.id??Sw(),s=r.existing?.bodyPath??`${o}.body.md`,i=Fe.join(t,`${o}.json`),a=Fe.join(t,s);r.existing||kc(a,e.body,"utf8");let l={id:o,idempotencyKey:hi(e),operation:e.operation,agentOsSlug:e.agentOsSlug,planId:e.planId??r.existing?.planId??null,planSlug:e.planSlug??r.existing?.planSlug??null,title:e.title,summary:e.summary??null,bodyPath:s,bodyHash:mr(e.body),author:e.author??null,model:e.model??null,sourceRefs:e.sourceRefs??null,changeSummary:e.changeSummary??null,markCurrent:e.markCurrent??!0,createdAt:r.existing?.createdAt??n,updatedAt:n,retryCount:(r.existing?.retryCount??0)+(r.existing?1:0),maxRetries:e.maxRetries??r.existing?.maxRetries??Cw,lastError:r.lastError,lastFailureKind:r.lastFailureKind,queueStatus:"queued",userStatus:"queued for retry",readbackEvidence:null};return kc(i,`${JSON.stringify(l,null,2)}
+`,{mode:384}),l}function Df(e){let{outboxDir:r}=pt(),t=Fe.join(r,`${e.id}.json`);kc(t,`${JSON.stringify(e,null,2)}
+`,{mode:384})}function Mf(e){let{outboxDir:r,archiveDir:t}=pt(),n=Fe.join(r,`${e.id}.json`),o=Fe.join(r,e.bodyPath),s=Fe.join(t,`${e.id}.json`),i=Fe.join(t,e.bodyPath);hc(n)&&Of(n,s),hc(o)&&Of(o,i)}function yo(e){let{outboxDir:r}=pt();return{jsonPath:Fe.join(r,`${e.id}.json`),bodyPath:Fe.join(r,e.bodyPath)}}function Uf(e,r){return{operation:e.operation,agentOsSlug:e.agentOsSlug,planId:e.planId,planSlug:e.planSlug,title:e.title,summary:e.summary,body:r,changeSummary:e.changeSummary??void 0,author:e.author??void 0,model:e.model??void 0,sourceRefs:e.sourceRefs,markCurrent:e.markCurrent??!0,maxRetries:e.maxRetries}}async function Wf(e,r,t={}){let n=await Pf(e,r.planId,t),o=n.plan,s=n.currentVersion;if(o.title.trim()!==r.title.trim())throw new z("verification_failed",`title mismatch: expected "${r.title}", got "${o.title}"`);let i=tn(r.summary),a=tn(o.summary);if(i!==a)throw new z("verification_failed","summary mismatch on readback");if(r.versionId&&o.currentVersionId!==r.versionId)throw new z("verification_failed",`currentVersionId mismatch: expected ${r.versionId}, got ${o.currentVersionId}`);if(r.versionNumber!=null&&(!s||s.versionNumber!==r.versionNumber))throw new z("verification_failed",`versionNumber mismatch: expected ${r.versionNumber}, got ${s?.versionNumber??"none"}`);let l=s?.body??"",c=mr(l);if(r.bodyHash&&c!==r.bodyHash)throw new z("verification_failed","body hash mismatch on readback");return{planId:o.id,currentVersionId:o.currentVersionId,versionNumber:s?.versionNumber??null,title:o.title,summary:o.summary,bodyHash:r.bodyHash||c,readAt:new Date().toISOString()}}function Lf(e,r){return{planId:r.planId,title:e.title,summary:e.summary??null,body:e.body,bodyHash:mr(e.body),versionId:r.versionId,versionNumber:r.versionNumber}}var Bf="persisted and read back",ww="queued for retry",vc="failed and needs action";async function on(e,r={}){e.bodyPathHint&&ko(e.bodyPathHint);let t=hi(e),n=yc(t);if(n?.readbackEvidence)return{userStatus:Bf,outboxId:n.id,planId:n.readbackEvidence.planId,readbackEvidence:n.readbackEvidence,idempotencyKey:t};if(e.immediateFailure)return Hf(e,e.immediateFailure.message,e.immediateFailure.kind,n);let o=r.writePlan??Af,s=r.verifyReadback??Wf;try{let i=await o(e,r),a={...e,planId:i.planId},l=Lf(a,i),c=await s(e.agentOsSlug,_w(e,l),r);return n&&Mf(n),{userStatus:Bf,planId:i.planId,versionId:i.versionId??void 0,readbackEvidence:c,idempotencyKey:t}}catch(i){let a=i instanceof z?i:new z("tool_interruption",i instanceof Error?i.message:String(i));if(!Ef(a.kind)){let l=bc(e,{lastError:a.message,lastFailureKind:a.kind,existing:n??void 0}),c=yo(l),u=Ff(l,a.message);return{userStatus:vc,outboxId:u.id,outboxPath:c.jsonPath,bodyPath:c.bodyPath,lastError:a.message,idempotencyKey:t}}return Hf(e,a.message,a.kind,n)}}function _w(e,r){return e.operation==="update_metadata"?{...r,body:"",bodyHash:""}:r}function Hf(e,r,t,n){let o=bc(e,{lastError:r,lastFailureKind:t,existing:n??void 0}),s=yo(o);if(o.retryCount>=o.maxRetries){let i=Ff(o,r);return{userStatus:vc,outboxId:i.id,outboxPath:s.jsonPath,bodyPath:s.bodyPath,lastError:r,idempotencyKey:o.idempotencyKey}}return{userStatus:ww,outboxId:o.id,outboxPath:s.jsonPath,bodyPath:s.bodyPath,lastError:r,idempotencyKey:o.idempotencyKey}}function Ff(e,r){let t={...e,queueStatus:"failed",userStatus:vc,lastError:r,updatedAt:new Date().toISOString()};return Df(t),t}import xw from"node:path";async function Ri(e={},r={}){let t=mt().filter(s=>e.outboxId?s.id===e.outboxId:!0),n=e.max&&e.max>0?t.slice(0,e.max):t,o={processed:0,succeeded:0,stillQueued:0,failed:0,results:[]};for(let s of n){o.processed+=1;let i=Tf(s),a=Uf(s,i),l=await on(a,r);l.userStatus==="persisted and read back"?o.succeeded+=1:l.userStatus==="failed and needs action"?o.failed+=1:o.stillQueued+=1,o.results.push({outboxId:s.id,userStatus:l.userStatus,lastError:l.lastError})}return o}function Sc(e){let r=xw.join(yi(),`${e}.json`);return Rc(r)}function bi(e){let r=yo(e);return["## Plan persistence risk","",`AgentOS plan write is **not** confirmed (${e.userStatus}).`,`- outboxId: \`${e.id}\``,e.planId?`- planId: \`${e.planId}\``:"- planId: (pending \u2014 create not yet applied)",`- outbox: \`${r.jsonPath}\``,`- body: \`${r.bodyPath}\``,"","Drain when approval/connectivity returns: `kynver plan outbox drain`"].join(`
+`)}function vi(e){let r=e.metadata&&typeof e.metadata=="object"?e.metadata:null,t=typeof e.planPersistenceOutboxId=="string"&&e.planPersistenceOutboxId||(r&&typeof r.planPersistenceOutboxId=="string"?r.planPersistenceOutboxId:void 0);return t?{outboxId:t,jsonPath:typeof e.planPersistenceOutboxPath=="string"?e.planPersistenceOutboxPath:r&&typeof r.planPersistenceOutboxPath=="string"?r.planPersistenceOutboxPath:void 0,bodyPath:typeof e.planPersistenceBodyPath=="string"?e.planPersistenceBodyPath:r&&typeof r.planPersistenceBodyPath=="string"?r.planPersistenceBodyPath:void 0}:null}async function Cc(e){let r=`${e.baseUrl}/api/agent-os/by-id/${encodeURIComponent(e.agentOsId)}/tasks/${encodeURIComponent(e.taskId)}/release`,t;try{t=await X(r,e.secret,{agentOsId:e.agentOsId,leaseOwner:e.leaseOwner,...e.failureDetail?{failureDetail:e.failureDetail}:{}},{agentOsId:e.agentOsId,baseUrl:e.baseUrl})}catch(s){return{released:!1,httpOk:!1,releaseResponse:{ok:!1,error:s.message}}}let n=t.response;return{released:t.ok===!0||n?.ok===!0,httpOk:t.ok===!0,releaseResponse:t.response??t}}import{spawnSync as Kf}from"node:child_process";import{spawnSync as Ew}from"node:child_process";function $f(){if(process.env.GITHUB_TOKEN?.trim()||process.env.GH_TOKEN?.trim())return{source:"env",configured:!0,reason:"GitHub token already configured in environment"};let e=Ew("gh",["auth","token"],{encoding:"utf8",stdio:["ignore","pipe","pipe"]});if(e.status!==0)return{source:"missing",configured:!1,reason:typeof e.stderr=="string"&&e.stderr.trim()?e.stderr.trim():"gh auth token failed; run `gh auth login` on this machine"};let r=typeof e.stdout=="string"?e.stdout.trim():"";return r?(process.env.GH_TOKEN=r,{source:"gh-cli",configured:!0,reason:"Using local GitHub CLI auth for daemon land_pr merge"}):{source:"missing",configured:!1,reason:"gh auth token returned an empty token; run `gh auth login` on this machine"}}var jf=new Set(["SUCCESS","SKIPPED","NEUTRAL"]),Pw=new Set(["CLEAN","HAS_HOOKS"]);function _c(e){return e?.trim()?["--repo",e.trim()]:[]}function Vf(e){let r=/github\.com\/([^/]+)\/([^/]+)\/pull\/\d+/i.exec(e.trim());return r?`${r[1]}/${r[2]}`:null}function Gf(e,r,t){let n=e.gh(r,t);if(n.status!==0)throw new Error(n.stderr||n.stdout||`gh ${t.join(" ")} failed`);return JSON.parse(n.stdout||"{}")}function Ro(e){return typeof e.name=="string"&&e.name||typeof e.context=="string"&&e.context||typeof e.workflowName=="string"&&e.workflowName||"unknown check"}function Aw(e){let r=Array.isArray(e)?e:[],t=[],n=[];for(let o of r){let s=o&&typeof o=="object"?o:{},i=typeof s.conclusion=="string"?s.conclusion.toUpperCase():"",a=typeof s.status=="string"?s.status.toUpperCase():"",l=typeof s.state=="string"?s.state.toUpperCase():"";if(!(i&&jf.has(i))){if(i){n.push(`${Ro(s)}=${i}`);continue}if(!(l&&jf.has(l))){if(l&&l!=="PENDING"&&l!=="EXPECTED"){n.push(`${Ro(s)}=${l}`);continue}if(l==="PENDING"||l==="EXPECTED"){t.push(`${Ro(s)}=${l}`);continue}if(a&&a!=="COMPLETED"){t.push(`${Ro(s)}=${a}`);continue}t.push(`${Ro(s)}=PENDING`)}}}return{pending:t,failed:n}}function Iw(e){return(Array.isArray(e)?e:[]).some(t=>{let n=t&&typeof t=="object"?t:{},o=typeof n.name=="string"&&n.name||typeof n.context=="string"&&n.context||"",s=typeof n.conclusion=="string"?n.conclusion.toUpperCase():"",i=typeof n.state=="string"?n.state.toUpperCase():"";return/^vercel/i.test(o)&&(s==="SUCCESS"||i==="SUCCESS")})}var Ow=/^##\s*(test\s*plan|verification|test\s*evidence|verify)\b/im,Nw=/typecheck|npm run (test|build|typecheck)|vitest|tsc\b|verify-pr-local|local verify|local-verify|tests? (pass|green)|build green|node --test/i,Tw=/^docs[(:]/i,Dw=/docs[- ]only|documentation only|no[- ]code change|no code changes|low[- ]risk|plan tracker only|markdown only/i;function Mw(e){let r=typeof e.title=="string"?e.title.trim():"",t=typeof e.body=="string"?e.body.trim():"",n=Tw.test(r)||Dw.test(t),o=Ow.test(t),s=Nw.test(t);return n||o||s||e.vercelCheckSuccess===!0}function Uw(e){if(!Mw({title:e.title,body:e.body,vercelCheckSuccess:Iw(e.statusCheckRollup)}))throw new Error(`PR #${e.number} lacks landing verification evidence \u2014 add ## Test plan / ## Verification with local commands, Vercel preview, or docs/no-code rationale`)}function Ww(e){if(e.state!=="OPEN")throw new Error(`PR #${e.number} is ${e.state}, not OPEN`);if(e.isDraft)throw new Error(`PR #${e.number} is still a draft`);if(!Pw.has(e.mergeStateStatus))throw new Error(`PR #${e.number} mergeStateStatus is ${e.mergeStateStatus}`);let r=Aw(e.statusCheckRollup);if(r.failed.length>0)throw new Error(`PR #${e.number} has failing checks: ${r.failed.join(", ")}`);if(r.pending.length>0)throw new Error(`PR #${e.number} has pending checks: ${r.pending.join(", ")}`);Uw(e)}function Lw(e){try{return Ww(e),null}catch(r){return r instanceof Error?r.message:String(r)}}function Bw(e,r,t,n){if(!n?.trim())return;let o=encodeURI(`heads/${n}`);e.gh(r,["api","-X","DELETE",`repos/${t}/git/refs/${o}`])}function Hw(e,r,t){if(t?.trim())return t.trim();let n=e.gh(r,["repo","view","--json","nameWithOwner"]);if(n.status!==0)throw new Error(n.stderr||"Could not resolve GitHub repo");let o=JSON.parse(n.stdout||"{}");if(!o.nameWithOwner)throw new Error("Could not resolve GitHub repo");return o.nameWithOwner}function Fw(e,r){if(!r?.trim())return;let t=Kf("git",["worktree","list","--porcelain"],{cwd:e,encoding:"utf8"});if(t.status!==0)return;let n=String(t.stdout||"").split(/\r?\n/),o=null,s=null;for(let i of n){if(i.startsWith("worktree ")){o=i.slice(9).trim(),s=null;continue}i.startsWith("branch ")&&o&&(s=i.slice(7).trim(),s.endsWith(`/${r}`)&&Kf("git",["worktree","remove","--force",o],{cwd:e,encoding:"utf8"}))}}async function Yf(e){let r=e.cwd??process.cwd(),t=e.exec??ti,n=e.prUrl.trim();if(!n)throw new Error("prUrl is required");let o=$f();if(!o.configured)return{prUrl:n,outcome:"blocked",reason:o.reason};let s=Gf(t,r,["pr","view",n,..._c(e.repo),"--json",["number","url","title","body","state","isDraft","mergeStateStatus","statusCheckRollup","headRefName","mergedAt","mergeCommit"].join(",")]);if(s.state==="MERGED"||s.mergedAt)return{prUrl:s.url||n,outcome:"skipped",mergeCommit:s.mergeCommit?.oid??null,reason:`PR #${s.number} is already merged \u2014 land_pr no-op (redelivery)`};let i=Lw(s);if(i)return e.skipNotReady?{prUrl:s.url||n,outcome:"skipped",reason:i}:{prUrl:s.url||n,outcome:"blocked",reason:i};if(e.dryRun)return{prUrl:s.url||n,outcome:"skipped",reason:"dry-run: PR is ready to merge"};let a=String(s.number),l=t.gh(r,["pr","merge",a,..._c(e.repo),"--squash"]);if(l.status!==0){let u=wc(t,r,a,e.repo);return u?{prUrl:u.url||s.url||n,outcome:"skipped",mergeCommit:u.mergeCommit?.oid??null,reason:`PR #${s.number} is already merged \u2014 merged by another lane during land_pr (race)`}:{prUrl:s.url||n,outcome:"blocked",reason:l.stderr||l.stdout||"gh pr merge failed"}}let c=wc(t,r,a,e.repo);c||(c=wc(t,r,a,e.repo));try{let u=Hw(t,r,e.repo);Bw(t,r,u,s.headRefName),Fw(r,s.headRefName)}catch{}return{prUrl:c?.url||s.url||n,outcome:"merged",mergeCommit:c?.mergeCommit?.oid??null,reason:`Daemon land_pr merged PR #${s.number}${c?"":" (post-merge view unavailable \u2014 merge verified by gh exit 0)"}`}}function wc(e,r,t,n){try{let o=Gf(e,r,["pr","view",t,..._c(n),"--json","number,url,mergedAt,mergeCommit,state"]);return o.state==="MERGED"||o.mergedAt?o:null}catch{return null}}O();async function Jf(e){let r=await G(e.secret,e.agentOsId,{baseUrl:e.baseUrl}),t=String(e.task.id),n=`${e.baseUrl}/api/agent-os/by-id/${encodeURIComponent(e.agentOsId)}/harness/completion`,o=new Date().toISOString(),s={source:"kynver-harness",agentOsId:e.agentOsId,runId:e.runId,workerName:`land-pr-${t}`,taskId:t,leaseToken:e.task.leaseToken??null,startedAt:o,finishedAt:o,status:{finalResult:e.report,prUrl:e.report.prUrl,summary:e.report.reason,leaseToken:e.task.leaseToken??null},workerInjection:null},i=await X(n,r,s,{agentOsId:e.agentOsId,baseUrl:e.baseUrl});return{ok:i.ok,status:i.status}}function qf(){return["## verify_live completion contract","Finish with a JSON finalResult object:","{",'  "prUrl": "<landed pr>",','  "outcome": "passed" | "failed" | "skipped" | "no_mcp_surface",','  "reason": "<human summary>",','  "mergeCommit": "<sha optional>",','  "liveReadback": "<prod readback string from acceptance.liveReadbackQuery>",','  "mcpCalls": [{ "tool": "<name>", "ok": true, "summary": "..." }]',"}","","Drive the feature MCP tools against live production. Do not mark passed without exercising the MCP surface.","When the subject carries an acceptance snapshot, include liveReadback \u2014 the server oracle rejects passed if the original symptom still appears."].join(`
+`)}var $w="dispatch_start_readback_failed:";function ft(e){return`${$w} ${e.trim()}`}function Kw(e){return e.branch?.trim()?e.worktreePath?.trim()?e.heartbeatPath?.trim()?e.startedAt?.trim()?null:"missing local worker startedAt":"missing local worker heartbeatPath":"missing local worker worktreePath":"missing local worker branch"}function jw(e){let{snapshot:r,leaseOwner:t,expectedLeaseToken:n,worker:o}=e;if(!r)return{ok:!1,error:ft("task lease snapshot missing after spawn"),detail:{taskId:o.taskId,leaseOwner:t,expectedLeaseToken:n}};if(r.status!=="running")return{ok:!1,error:ft(`AgentOS task status=${r.status} (expected running)`),detail:{taskId:r.taskId,status:r.status,leaseOwner:r.leaseOwner,blocker:r.blocker},snapshot:r};let s=r.leaseOwner?.trim()??"";if(!s||s!==t.trim())return{ok:!1,error:ft(`leaseOwner mismatch (board=${s||"null"}, expected=${t})`),detail:{taskId:r.taskId,boardLeaseOwner:s||null,expectedLeaseOwner:t},snapshot:r};let i=r.leaseToken?.trim()??"";if(!i||i!==n.trim())return{ok:!1,error:ft(`leaseToken mismatch (board=${i||"null"}, expected=${n})`),detail:{taskId:r.taskId,boardLeaseToken:i||null,expectedLeaseToken:n},snapshot:r};let a=Kw(o);return a?{ok:!1,error:ft(a),detail:{taskId:o.taskId,worker:o.name},snapshot:r}:r.heartbeatAt?.trim()?o.executorRef?.trim()&&r.executorRef?.trim()&&o.executorRef.trim()!==r.executorRef.trim()?{ok:!1,error:ft(`executorRef mismatch (board=${r.executorRef}, worker=${o.executorRef})`),detail:{taskId:r.taskId,boardExecutorRef:r.executorRef,workerExecutorRef:o.executorRef},snapshot:r}:{ok:!0,snapshot:r}:{ok:!1,error:ft("AgentOS heartbeatAt missing after claim"),detail:{taskId:r.taskId},snapshot:r}}async function zf(e){let r=await en({agentOsId:e.agentOsId,taskIds:[e.taskId],baseUrl:e.baseUrl,secret:e.secret});return jw({snapshot:r.get(e.taskId)??null,leaseOwner:e.leaseOwner,expectedLeaseToken:e.expectedLeaseToken,worker:e.worker})}C();M();function Xf(e,r,t){r.pid&&B(r.pid)&&(_r(r.pid,"SIGTERM"),B(r.pid)&&_r(r.pid,"SIGKILL"));let n={...r,status:"failed",pid:void 0,completionBlocker:t,dispatchStartReadbackFailed:!0};return H(e,n),n}M();var zs=3600*1e3;function Qf(e){let r=e.admissionExhaustion;return!r||typeof r!="object"?null:r}function Zf(e){let r=e.dispatchSkipDrain;return!r||typeof r!="object"?null:r}function Vw(e){let r=e.harnessWorkerContext;if(!r||typeof r!="object")return null;let t=r,n=typeof t.instructionPolicyMarkdown=="string"?t.instructionPolicyMarkdown:null,o=typeof t.instructionPolicyFingerprint=="string"?t.instructionPolicyFingerprint:null,s=t.instructionPolicyEvidence&&typeof t.instructionPolicyEvidence=="object"?t.instructionPolicyEvidence:null,i=typeof t.personaMarkdown=="string"?t.personaMarkdown:null,a=typeof t.personaEvidence=="object"&&t.personaEvidence&&typeof t.personaEvidence.injectedPersonaSlug=="string"?t.personaEvidence.injectedPersonaSlug:null,l=t.personaEvidence&&typeof t.personaEvidence=="object"?t.personaEvidence:null,c=t.personaInjectionReady===!0,u=typeof t.contextEnvelopeMarkdown=="string"?t.contextEnvelopeMarkdown:null,d=t.contextEnvelopeEvidence&&typeof t.contextEnvelopeEvidence=="object"?t.contextEnvelopeEvidence:null,f=t.contextEnvelopeReady===!0,m=t.memoryQualityCapture&&typeof t.memoryQualityCapture=="object"?t.memoryQualityCapture:null,p=typeof t.memoryQualityPromptMarkdown=="string"?t.memoryQualityPromptMarkdown:typeof m?.promptMarkdown=="string"?m.promptMarkdown:null;return{instructionPolicyMarkdown:n,instructionPolicyFingerprint:o,instructionPolicyEvidence:s,memoryQualityCapture:m,memoryQualityPromptMarkdown:p,personaMarkdown:i,personaSlug:a,personaEvidence:l,personaInjectionReady:c,contextEnvelopeMarkdown:u,contextEnvelopeEvidence:d,contextEnvelopeReady:f}}function Gw(e){if(typeof e!="string")return null;let r=e.trim().toLowerCase();return r.length?r:null}function eg(e,r){let t=[`[AgentOS task ${e.id}] ${e.title}`,"",e.description?String(e.description):"(no description on the board task)","",`Board linkage: agentOsId=${r}, taskId=${e.id}, attempt=${e.attempt}, executor=${e.executor}${e.executorRef?`, executorRef=${e.executorRef}`:""}.`,"This worker was dispatched from the AgentOS board. The harness reports your completion back to the board when you finish."];e.executor==="verify_live"&&t.push("",qf());let n=vi(e);if(n?.outboxId){let o=Sc(n.outboxId);o?t.push("",bi(o)):t.push("","## Plan persistence risk","",`Unconfirmed AgentOS plan write (outboxId=${n.outboxId}).`)}return t.join(`
+`)}function Yw(e){let r=new Set;if(e.targetTaskId)return r.add(String(e.targetTaskId)),r;if(e.targetTaskIds)for(let t of String(e.targetTaskIds).split(",")){let n=t.trim();n&&r.add(n)}return r}async function Dr(e){let r=e.pipeline===!0||e.pipeline==="true";try{let Hr=function(){return Z.filter(S=>S.started).length},vr=function(S,y){vl({runId:s.id,agentOsId:i,phase:S,startedCount:Hr(),outcomeCount:Z.length,cappedStarts:I,...y})},ve=function(S){return S.landPrDispatch===!0?!0:S.task?.executor==="land_pr"};var t=Hr,n=vr,o=ve;let s=L(String(N(String(e.run||""),"--run"))),i=String(N(String(e.agentOsId||""),"--agent-os-id")),a=K(e.baseUrl?String(e.baseUrl):void 0),l=await G(e.secret?String(e.secret):void 0,i,{baseUrl:a}),u=!(e.execute===!0||e.execute==="true"),d=Xe({runId:s.id}),f=Vl(s.id,d.runnerId),m=e.diskPath?We({diskPath:String(e.diskPath)}):We({diskPath:s.repo}),p=dr({runId:s.id}),h=Yw(e),k=h.size>0,g=Number(e.maxStarts)>0?Math.floor(Number(e.maxStarts)):1,R=k?Math.min(g,h.size):g,I=u?R:Math.min(R,p.slotsAvailable);if(!u&&I<=0){let S={runId:s.id,agentOsId:i,dryRun:!1,skipped:!0,reason:p.reason??"no resource slots",resourceGate:p};if(r)return{ok:!0,...S};console.log(JSON.stringify(S,null,2));return}let E=pi(s.id);if(e.reconcileStaleBlockers===!0||e.reconcileStaleBlockers==="true"){let S=`${a}/api/agent-os/by-id/${encodeURIComponent(i)}/lane-hygiene`;try{await X(S,l,{agentOsId:i,dryRun:!1,includeBoardReconcile:!0},{agentOsId:i,baseUrl:a})}catch(y){console.error(`[dispatch] reconcile-stale-blockers lane-hygiene call failed: ${y.message}`)}}let P=`${a}/api/agent-os/by-id/${encodeURIComponent(i)}/tasks/dispatch-next`,D=S=>({agentOsId:i,dryRun:u,maxStarts:S,leaseOwner:f,leaseDurationMs:Number(e.leaseMs)>0?Math.floor(Number(e.leaseMs)):zs,runnerDiskGate:m,runnerResourceGate:p,activeHarnessWorkers:E,runnerPresence:d,harnessBoardSnapshot:ut(s.id),...e.lane?{lane:rm(String(e.lane))}:{},...e.executor?{executor:String(e.executor)}:{},...e.diskPath?{diskPath:String(e.diskPath)}:{},...e.targetTaskId?{targetTaskId:String(e.targetTaskId)}:{},...!e.targetTaskId&&e.targetTaskIds?{targetTaskIds:String(e.targetTaskIds).split(",").map(y=>y.trim()).filter(Boolean)}:{}}),j=Yp(),F=async S=>{let y=await X(P,l,D(S),{agentOsId:i,baseUrl:a,timeoutMs:j})??{ok:!1,status:0,response:null},A=y.response;return{dispatch:y,result:A?.result}},U=await F(k||u?I:1);if(!U.dispatch.ok||!U.result){let S={runId:s.id,agentOsId:i,action:"dispatch",httpStatus:U.dispatch.status,response:U.dispatch.response,authRefreshed:U.dispatch.refreshedAuth===!0,authRefreshFailure:U.dispatch.authRefreshFailure};if(r)return{ok:!1,...S};console.log(JSON.stringify(S,null,2)),process.exit(1)}let w=U.result;if(u){let S=Qf(w),y=Zf(w),A={runId:s.id,agentOsId:i,dryRun:!0,wouldStart:w.started.map($=>({taskId:$.task.id,title:$.task.title,reason:$.reason})),skipped:w.skipped.map($=>({taskId:$.task.id,skipReason:$.skipReason,reason:$.reason})),diskGate:w.diskGate,resourceGate:w.resourceGate,inspected:w.inspected,pagesScanned:w.pagesScanned??null,candidatesExhausted:w.candidatesExhausted??null,capacityIdle:S?.capacityIdle===!0,admissionExhaustion:S,dispatchSkipDrain:y};if(r)return{ok:!0,...A};console.log(JSON.stringify(A,null,2));return}let le=xm(),Z=[],or=[],It=Number(w.inspected)||0,je=!1;async function ce(S,y,A){let $=await Cc({baseUrl:a,secret:l,agentOsId:i,taskId:String(S.id),leaseOwner:f,failureDetail:y}),ae={taskId:S.id,started:!1,error:y,released:$.released,releaseResponse:$.releaseResponse,...A};return Z.push(ae),vr("outcome",{lastOutcome:ae}),!1}async function ee(S){let y=S.task,A=String(y.id);if(k&&!h.has(A))return ce(y,"exact_target_mismatch: dispatch-next returned a different task than requested",{requestedTargetTaskIds:[...h]});let $=y.prUrl?String(y.prUrl):"";if(!$)return ce(y,"land_pr task missing prUrl");try{let ae=await Yf({prUrl:$,repo:Vf($),cwd:s.repo}),Ot=await Jf({baseUrl:a,secret:l,agentOsId:i,runId:s.id,task:y,report:ae});return Ot.ok?(Z.push({taskId:A,started:!0,landPr:!0,outcome:ae.outcome,completionStatus:Ot.status}),!0):ce(y,`land_pr completion POST failed (HTTP ${Ot.status})`,{landPr:!0,outcome:ae.outcome})}catch(ae){return ce(y,ae.message)}}async function W(S){let y="duplicate_dispatch_prevented: live local worker already owns this task",A=await Cc({baseUrl:a,secret:l,agentOsId:i,taskId:String(S.id),leaseOwner:f,failureDetail:y}),$={taskId:S.id,started:!1,error:y,alreadyRunning:!0,nonFatal:!0,released:A.released,releaseResponse:A.releaseResponse};return Z.push($),vr("outcome",{lastOutcome:$}),!1}async function Se(S){let y=S.task,A=Vw(S),$=String(y.id);if(k&&!h.has($))return ce(y,"exact_target_mismatch: dispatch-next returned a different task than requested",{requestedTargetTaskIds:[...h]});let ae=Gw(y.personaSlug);if(ae&&(!A?.personaInjectionReady||!A.personaMarkdown))return ce(y,`persona_injection_required: missing anchored context-envelope persona block for "${ae}"`);if(Im(s.id,$))return W(y);let Ot=Number(y.attempt)||1;if(Ot>le.maxTaskAttempts)return ce(y,`task attempt ${Ot} exceeds KYNVER_MAX_TASK_ATTEMPTS (${le.maxTaskAttempts})`);let Nn=y.leaseToken?String(y.leaseToken).trim():"";if(!Nn)return ce(y,"dispatch_start_failed: claimed task missing leaseToken \u2014 refusing local spawn");let NR=b(`t-${y.id}-a${y.attempt}`),Nt=Gs({explicitModel:e.model?String(e.model):void 0,explicitProvider:e.provider?String(e.provider):void 0,explicitProviderIsOperatorOverride:!!e.provider,task:tm(y)});try{let Ma=y.planId?String(y.planId):void 0,es=Nm({title:y.title?String(y.title):void 0,description:y.description?String(y.description):null,executorRef:y.executorRef?String(y.executorRef):null,prUrl:y.prUrl?String(y.prUrl):null,branch:y.branch?String(y.branch):null}),Ve=di(s,{name:NR,task:eg(y,i),ownedPaths:e.owned?String(e.owned).split(",").map(TR=>TR.trim()).filter(Boolean):[],model:Nt.model,provider:Nt.provider,routingRule:Nt.rule,requestedModel:Nt.requestedModel,agentOsId:i,taskId:String(y.id),planId:Ma,branch:es?.targetPrBranch??void 0,executorRef:y.executorRef?String(y.executorRef):void 0,parentTaskId:y.parentTaskId?String(y.parentTaskId):void 0,taskTitle:y.title?String(y.title):void 0,taskPrUrl:es?.targetPrUrl??(y.prUrl?String(y.prUrl):void 0),repairTargetPrUrl:es?.targetPrUrl,repairTargetBranch:es?.targetPrBranch??void 0,instructionPolicyMarkdown:A?.instructionPolicyMarkdown??null,instructionPolicyFingerprint:A?.instructionPolicyFingerprint??null,instructionPolicyEvidence:A?.instructionPolicyEvidence??null,memoryQualityCapture:A?.memoryQualityCapture??null,memoryQualityPromptMarkdown:A?.memoryQualityPromptMarkdown??null,personaMarkdown:A?.personaMarkdown??null,personaSlug:A?.personaSlug??ae,personaEvidence:A?.personaEvidence??null,contextEnvelopeMarkdown:A?.contextEnvelopeMarkdown??null,contextEnvelopeEvidence:A?.contextEnvelopeEvidence??null,leaseOwner:f,leaseToken:Nn,dispatched:!0}),rs=await zf({agentOsId:i,taskId:String(y.id),leaseOwner:f,expectedLeaseToken:Nn,worker:Ve,baseUrl:a,secret:l});if(!rs.ok)return Xf(s.id,Ve,rs.error??"dispatch_start_readback_failed"),ce(y,rs.error??"dispatch_start_readback_failed",{readback:rs.detail??null});Ve.leaseToken!==Nn&&(Ve.leaseToken=Nn,Ve.leaseOwner=f,H(s.id,Ve));let bd={taskId:y.id,started:!0,worker:Ve.name,pid:Ve.pid,branch:Ve.branch,model:Ve.model,provider:Nt.provider,routingRule:Nt.rule,instructionPolicyFingerprint:A?.instructionPolicyFingerprint??null,instructionPolicyRuleCount:Array.isArray(A?.instructionPolicyEvidence?.ruleSlugs)?A.instructionPolicyEvidence.ruleSlugs.length:null,personaSlug:A?.personaSlug??ae,personaOperatingRuleCount:A?.personaEvidence?.operatingRuleCount??null};return Z.push(bd),vr("worker_started",{lastOutcome:bd}),A?.instructionPolicyFingerprint&&console.error(`[dispatch] task ${$}: operating-rules policy injected fingerprint=${A.instructionPolicyFingerprint}`),A?.personaSlug&&console.error(`[dispatch] task ${$}: persona context injected slug=${A.personaSlug}`),A?.contextEnvelopeReady&&console.error(`[dispatch] task ${$}: context envelope injected anchor=${A.contextEnvelopeEvidence?.anchorTaskId??$}`),!0}catch(Ma){return ce(y,Ma.message)}}let Ce=new Set;async function sr(S){let y=S.task,A=String(y.id);if(Ce.has(A))return ce(y,"dispatch_retry_loop_prevented: task already failed to start this tick");let $=ve(S)?await ee(S):await Se(S);return $||Ce.add(A),$}for(let S of w.started)await sr(S);if(or.push(...w.skipped??[]),k)for(let S of or){let y=String(S.task.id);h.has(y)&&Z.push({taskId:y,started:!1,error:`exact_target_not_started:${S.skipReason}`,skipReason:S.skipReason,detail:S.reason??null,requestedTargetTaskIds:[...h]})}for(;!k&&Z.length<I;){let S=await F(1);if(!S.dispatch.ok||!S.result){let A=Jp(S.dispatch.response),$=Hr();je=A&&$>0;let ae={started:!1,error:"dispatch_next request failed during top-up",httpStatus:S.dispatch.status,response:S.dispatch.response,...je?{nonFatal:!0,partialTopUp:!0}:{}};Z.push(ae),vr("top_up_failed",{partialTopUpInterrupted:je,lastOutcome:ae});break}It+=Number(S.result.inspected)||0,or.push(...S.result.skipped??[]);let y=S.result.started??[];if(y.length===0)break;for(let A of y){if(Z.length>=I)break;await sr(A)}}let ue=Z.filter(S=>S.started).length,Sr=Qf(w),Zo=Zf(w),hd=ue===0&&(Sr?.capacityIdle===!0||Number(w.resourceGate?.slotsAvailable)>0);if(hd&&Sr?.summary){let S=Sr.skipReasonCounts?.retry_ceiling_exceeded??0,y=w.overAttemptIdleRecovery??Sr.overAttemptIdleRecovery,A=y?.attempted===!0?`; over_attempt_recovery minted=${y.minted??0} started=${y.started??0}`:S>0?"; over_attempt_recovery not attempted":"",$=Zo?`; dispatch_skip_drain scanned=${Zo.scanned??0} advanced=${Zo.advanced??0}`:"";console.error(`[dispatch] ${Sr.summary}${S>0?`; retry_ceiling_exceeded=${S}`:""}${A}${$}`)}let kd={runId:s.id,agentOsId:i,dryRun:!1,leaseOwner:f,startedCount:ue,capacityIdle:hd,admissionExhaustion:Sr,dispatchSkipDrain:Zo,outcomes:Z,skipped:or.map(S=>({taskId:S.task.id,skipReason:S.skipReason})),inspected:It,pagesScanned:w.pagesScanned??null,candidatesExhausted:w.candidatesExhausted??null,diskGate:w.diskGate,resourceGate:w.resourceGate,...je?{partialTopUpInterrupted:!0}:{},dispatchCallbackTimeoutMs:j},yd=S=>!S.started&&S.nonFatal!==!0,OR=Z.some(yd),Rd=je&&ue>0?!0:!OR;if(vl({runId:s.id,agentOsId:i,phase:"complete",partial:je,startedCount:ue,ok:Rd}),r)return{ok:Rd,...kd};console.log(JSON.stringify(kd,null,2)),Z.some(yd)&&process.exit(1)}catch(s){if(r)return{ok:!1,error:s.message};console.error(`run dispatch failed: ${s.message}`),process.exit(1)}}Bt();ps();Lt();Lt();import{unlinkSync as Jw}from"node:fs";function Si(e){let r=process.env[e];return r==="1"||r==="true"||r==="yes"}function rg(e,r){let t=process.env[e];if(!t)return r;let n=Number(t);return Number.isFinite(n)?n:r}function qw(e,r,t){return e.length===0?[]:t?[...e]:e.length<=r?[]:e.slice(r)}function bo(e={}){let r=e.execute===!0||Si("KYNVER_WSL_CRASH_DUMP_EXECUTE")||Si("KYNVER_CLEANUP_EXECUTE"),t=e.purgeAll===!0||Si("KYNVER_WSL_CRASH_DUMP_PURGE_ALL"),n=Math.max(0,e.keepNewest??rg("KYNVER_WSL_CRASH_DUMP_KEEP_NEWEST",t?0:1)),o=cr({forceWsl:e.forceWsl});if(!o?.path)return{observation:o,execute:r,keepNewest:n,removed:[],removedBytes:0,skipped:o?.probeError?[{path:o.path??"(unresolved)",reason:o.probeError}]:[]};let s=qw(o.dumps,n,t),i=[],a=[],l=0;for(let c of s){if(!r){a.push({path:c.path,reason:"dry_run"});continue}try{Jw(c.path),i.push({path:c.path,bytes:c.bytes,name:c.name}),l+=c.bytes}catch(u){a.push({path:c.path,reason:u.message})}}return{observation:o,execute:r,keepNewest:n,removed:i,removedBytes:l,skipped:a}}function xc(e){return e?Si("KYNVER_WSL_CRASH_DUMP_CLEANUP")||!e.ok?!0:e.dumpCount>rg("KYNVER_WSL_CRASH_DUMP_KEEP_NEWEST",1):!1}$n();ll();al();Er();O();Ue();import zw from"node:os";function vo(e,r={}){let t=(r.boxKind??Ge(v())).trim().toLowerCase()||"forge",n=r.hostLabel??zw.hostname();return{boxId:r.boxId??so(t,n),boxKind:t,displayName:r.displayName??null,hostLabel:n,observedAt:r.observedAt??new Date().toISOString(),totalMemBytes:e.totalMemBytes,freeMemBytes:e.freeMemBytes,activeWorkers:e.activeWorkers,maxConcurrentWorkers:e.maxConcurrentWorkers,autoCap:e.autoCap,slotsAvailable:e.slotsAvailable,harnessRunId:r.harnessRunId??null,queuedTasks:r.queuedTasks??null,reason:e.reason,...r.prEvidence?.length?{prEvidence:r.prEvidence}:{}}}function Xw(e){let r={ts:e.ts??new Date().toISOString(),phase:e.phase,summary:e.summary,changedFiles:e.changedFiles??[],blocker:e.blocker??null};return e.boxResourceSnapshot&&(r.boxResourceSnapshot=e.boxResourceSnapshot),e.prEvidence?.length&&(r.prEvidence=e.prEvidence),`${JSON.stringify(r)}
+`}Y();Vn();function Qw(e){if(e.skipReason==="engagement_required")return!0;let r=e.reason??"";return r.includes("engagement_required")||r.includes("engagement_not_found")||r.includes("engagement_expired")||r.includes("engagement_revoked")}ml();Kn();import{createHash as tg}from"node:crypto";function Ci(e){return JSON.stringify(Ec(e))}function Ec(e){if(Array.isArray(e))return e.map(Ec);if(e&&typeof e=="object"){let r={};for(let t of Object.keys(e).sort())r[t]=Ec(e[t]);return r}return e}function Zw(e){return`ib1-${tg("sha256").update(Ci(e),"utf8").digest("hex").slice(0,16)}`}function e_(e){return`ib-${tg("sha256").update(Buffer.from(e)).digest("hex").slice(0,12)}`}function wi(e){if(!e)return null;let r=e.trim();if(!r)return null;if(/^[0-9a-fA-F]{64}$/.test(r))return new Uint8Array(r.match(/.{2}/g).map(t=>parseInt(t,16)));try{let t=Buffer.from(r,"base64");if(t.length===32)return new Uint8Array(t)}catch{}return null}function sn(e){if(!e||typeof e!="object")return!1;let r=e;if(typeof r.signature!="string"||!r.signature||typeof r.publicKeyId!="string"||!r.publicKeyId)return!1;let t=r.bundle;return!(!t||typeof t!="object"||typeof t.version!="string"||!t.version||typeof t.generatedAt!="string"||!Array.isArray(t.personas)||!t.instructions||typeof t.instructions!="object"||!t.policyThresholds||typeof t.policyThresholds!="object")}var ng={"ib-3bab6314f0ba":"53a2040646cd479e1f5f1aea9abf7848ce8b62e32001efb8044dfd90e8ab87ed","ib-26e6c695da06":"bb1700f25b2ee7d7cdcdb9f446f0f44ef2cc22a3096bc161232fb658e7cdaf38"};function Pc(e,r=process.env){let t=wi(r.KYNVER_INSTRUCTION_BUNDLE_PUBLIC_KEY);if(t)return t;let n=ng[e];return n?wi(n):null}import{createPublicKey as r_,verify as t_}from"node:crypto";var n_=Buffer.from("302a300506032b6570032100","hex");function o_(e){return r_({key:Buffer.concat([n_,Buffer.from(e)]),format:"der",type:"spki"})}function og(e,r){if(!sn(e))return{ok:!1,reason:"malformed signed bundle payload"};let t;try{t=Buffer.from(e.signature,"base64url")}catch{return{ok:!1,reason:"signature is not base64url"}}if(t.length!==64)return{ok:!1,reason:"signature is not a 64-byte Ed25519 signature"};try{let n=Buffer.from(Ci(e.bundle),"utf8");return t_(null,n,o_(r),t)?{ok:!0,bundle:e.bundle}:{ok:!1,reason:"Ed25519 signature mismatch"}}catch(n){return{ok:!1,reason:`signature verification failed: ${n.message}`}}}function Ac(e,r=process.env){if(!sn(e))return{ok:!1,reason:"malformed signed bundle payload"};let t=Pc(e.publicKeyId,r);return t?og(e,t):{ok:!1,reason:`no verification key for publicKeyId "${e.publicKeyId}" (not pinned; set KYNVER_INSTRUCTION_BUNDLE_PUBLIC_KEY)`}}import{mkdirSync as s_,readFileSync as i_,renameSync as a_,writeFileSync as l_}from"node:fs";import{homedir as c_}from"node:os";import sg from"node:path";function Ic(e){let r=e.replace(/[^A-Za-z0-9_-]/g,"_");return sg.join(c_(),".kynver",`instruction-bundle-${r}.json`)}function Oc(e,r){try{let t=Ic(e);s_(sg.dirname(t),{recursive:!0});let n=`${t}.tmp-${process.pid}`;l_(n,JSON.stringify(r),"utf8"),a_(n,t)}catch{}}function Nc(e){try{let r=i_(Ic(e),"utf8"),t=JSON.parse(r);return sn(t)?t:null}catch{return null}}var ig=15*6e4,u_=1e4,fr={lastAttemptAtMs:0,etag:null,diskCacheTried:!1,routeMissingLogged:!1};function Co(e,r){console.error(JSON.stringify({event:e,...r}))}function ag(e,r,t){let n=Ac(e);return n.ok?(Sl(n.bundle,r),r==="server"&&Oc(t,e),!0):(Co("instruction_bundle_signature_invalid",{agentOsId:t,source:r,publicKeyId:e.publicKeyId,reason:n.reason}),!1)}function So(e){if(fr.diskCacheTried)return!1;fr.diskCacheTried=!0;let r=Nc(e);return r?ag(r,"disk",e):!1}async function Tc(e){let r=e.nowMs??Date.now(),t=()=>({source:pr(),version:Ar(),updated:!1});if(!e.force&&r-fr.lastAttemptAtMs<ig)return t();fr.lastAttemptAtMs=r;let n=e.baseUrl?.trim().replace(/\/$/,""),o=e.secret?.trim();if(!n||!o)return pr()==="embedded"&&So(e.agentOsId)?{...t(),updated:!0}:t();let s=e.fetchImpl??fetch,i=new AbortController,a=setTimeout(()=>i.abort(),u_);try{let l=Be(o);delete l["Content-Type"],fr.etag&&pr()==="server"&&(l["If-None-Match"]=fr.etag);let c=await s(`${n}/api/agent-os/by-id/${encodeURIComponent(e.agentOsId)}/runtime/instruction-bundle`,{headers:l,signal:i.signal});if(c.status===304)return t();if(c.status===404)return fr.routeMissingLogged||(fr.routeMissingLogged=!0,Co("instruction_bundle_route_missing",{agentOsId:e.agentOsId,baseUrl:n})),pr()==="embedded"&&So(e.agentOsId)?{...t(),updated:!0}:t();if(!c.ok)return Co("instruction_bundle_fetch_failed",{agentOsId:e.agentOsId,status:c.status}),pr()==="embedded"&&So(e.agentOsId)?{...t(),updated:!0}:t();let u=await c.json().catch(()=>null);return!u||!ag(u,"server",e.agentOsId)?pr()==="embedded"&&So(e.agentOsId)?{...t(),updated:!0}:t():(fr.etag=c.headers.get("etag"),Co("instruction_bundle_loaded",{agentOsId:e.agentOsId,version:Ar(),publicKeyId:u.publicKeyId}),{...t(),updated:!0})}catch(l){return Co("instruction_bundle_fetch_error",{agentOsId:e.agentOsId,error:l instanceof Error?l.message:String(l)}),pr()==="embedded"&&So(e.agentOsId)?{...t(),updated:!0}:t()}finally{clearTimeout(a)}}var Dc="openai-codex",d_=new Set(["upstream_503","connection_refused","connection_reset","sse_no_event","sse_idle_timeout"]),p_=[/\bsk-[a-zA-Z0-9_-]{8,}\b/g,/\bBearer\s+[a-zA-Z0-9._-]{8,}\b/gi,/\baccess[_-]?token["\s:=]+[a-zA-Z0-9._-]{8,}/gi];function gr(e,r=400){let t=String(e??"").replace(/\s+/g," ").trim();for(let n of p_)t=t.replace(n,"[redacted]");return t.length>r?`${t.slice(0,r)}\u2026`:t}function m_(e,r){let t=[];e instanceof Error?(t.push(e.message),t.push(e.name)):typeof e=="string"?t.push(e):e!=null&&t.push(String(e));let n=e,o=r??n?.status_code??n?.statusCode??void 0;return o!=null&&t.push(`http ${o}`),{haystack:t.join(" ").toLowerCase(),statusCode:o}}function cg(e,r){let{haystack:t,statusCode:n}=m_(e,r),o=e instanceof Error?e.message:typeof e=="string"?e:String(e??"");if(n===402||/billing|credit|payment required|insufficient_quota/.test(t))return{errorClass:"billing",summary:gr(o||"Billing or credits exhausted"),statusCode:n,transient:!1};if(n===401||n===403||/\bunauthorized\b|\bforbidden\b/.test(t))return{errorClass:"auth",summary:gr(o||"Authentication failed"),statusCode:n,transient:!1};if(n===429||/rate limit|too many requests|throttl/.test(t))return{errorClass:"rate_limit",summary:gr(o||"Rate limited"),statusCode:n,transient:!0};if(n===503||/upstream connect error|connection termination|remote connection failure|delayed connect error/.test(t))return{errorClass:"upstream_503",summary:gr(o||"ChatGPT Codex backend returned HTTP 503"),statusCode:n??503,transient:!0};if(/connection refused/.test(t))return{errorClass:"connection_refused",summary:gr(o||"Connection refused by ChatGPT Codex backend"),statusCode:n,transient:!0};if(/no sse events|no bytes within|no stream events|codex stream produced no/.test(t)){let s=/no bytes|ttfb|first byte/.test(t)?"sse_no_event":"sse_idle_timeout";return{errorClass:s,summary:gr(o||(s==="sse_no_event"?"Codex stream opened but sent no events":"Codex stream stalled after the first event")),statusCode:n,transient:!0}}return/connection reset|connection lost|connection closed|disconnect\/reset/.test(t)?{errorClass:"connection_reset",summary:gr(o||"Connection reset while talking to ChatGPT Codex"),statusCode:n,transient:!0}:{errorClass:"unknown",summary:gr(o||"Unknown provider error"),statusCode:n,transient:!1}}function ug(e){let r=e.env??process.env,t=Math.max(1,e.defaultRetries??3),n=String(e.provider??"").toLowerCase(),o=String(e.platform??"").toLowerCase();if(n!==Dc||o!=="cron")return t;let s=r.HERMES_CODEX_CRON_API_MAX_RETRIES?.trim();if(!s)return Math.max(t,5);let i=Number.parseInt(s,10);return!Number.isFinite(i)||i<1?Math.max(t,5):Math.max(t,i)}var lg={upstream_503:"ChatGPT Codex backend outage (HTTP 503)",connection_refused:"ChatGPT Codex backend refused the connection",connection_reset:"ChatGPT Codex connection dropped mid-request",sse_no_event:"Codex stream never started (no SSE events)",sse_idle_timeout:"Codex stream stalled (no SSE events after the first byte)",rate_limit:"ChatGPT Codex rate limit",billing:"ChatGPT Codex billing or quota limit",auth:"ChatGPT Codex authentication problem",unknown:"ChatGPT Codex provider error"};function dg(e){let r=e.provider?.trim()||Dc,t=e.model?.trim()||"(unknown model)",n=e.jobName?.trim()||"Scheduled Hermes job",o=lg[e.errorClass]??lg.unknown,s=e.degraded?"degraded":"failed";return[`\u26A0\uFE0F ${n} \u2014 AI provider ${s} (not a Kynver harness failure).`,"",`Provider: ${r} (ChatGPT Codex subscription)`,`Model: ${t}`,`What happened: ${o} after ${e.attempts} attempt(s) with backoff.`,`Details: ${e.summary}`,"","This is a ChatGPT/Codex API issue on chatgpt.com \u2014 not AgentOS, not the Kynver runtime, and not your local harness.","The cron job will run again on its next schedule. If it persists, check ChatGPT/Codex status or re-auth with: hermes auth status openai-codex"].join(`
+`)}function pg(e,r){return`\u26A0\uFE0F Cron job '${e}' \u2014 provider degraded
 
-${r}`}function Rf(e){let{provider:r,model:t,authSource:n,costTier:o,riskClass:s,costRationale:i,routingRule:a,escalatedFrom:l,escalatedReason:c}=e;return{provider:r,model:t,authSource:n,costTier:o,riskClass:s,costRationale:i,routingRule:a,escalatedFrom:l,escalatedReason:c}}function Zw(e){return Rf(e)}var sc=["off","observe","enforce"],eC=["foreground_harness_spawn","shell_platform_dispatch"],rC=["allow_local","observe_bypass","enforce_harness_task"];function tC(e){let r=(e??"off").trim().toLowerCase();return sc.includes(r)?r:"off"}function Zs(e=process.env){return tC(e.KYNVER_ORCHESTRATION_POLICY_MODE)}function ic(e=process.env){let r=e.KYNVER_ORCHESTRATION_ENFORCE_TASKS?.trim().toLowerCase();return r?r==="1"||r==="true"||r==="yes"||r==="on":Zs(e)==="enforce"}import{createHash as nC}from"node:crypto";function oo(e){if(e==null)return null;let r=e.trim();return r.length?r:null}function ac(e){let r=oo(e.sessionId)??"anonymous",t=oo(e.title)??oo(e.action)??"foreground",n=nC("sha256").update([oo(e.planId)??"",oo(e.parentTaskId)??"",t.toLowerCase()].join("|")).digest("hex").slice(0,16);return`hermes-foreground:${r}:${n}`}function oC(e,r){return e==="enforce"&&r?"enforce_harness_task":e==="observe"?"observe_bypass":"allow_local"}function sC(e,r=process.env){let t=Zs(r),n=ic(r),o=oC(t,n),s=o==="enforce_harness_task"?ac({sessionId:e.sessionId,planId:e.planId,parentTaskId:e.parentTaskId,title:e.title,action:e.action}):null,i;return t==="off"?i="Orchestration policy off \u2014 local foreground path allowed.":o==="observe_bypass"?i=`Observe mode: ${e.action} bypass logged; local fallback preserved.`:o==="enforce_harness_task"?i=`Enforce mode: ${e.action} must create linked harness AgentTask (${s}).`:i="Local foreground path allowed.",{mode:t,decision:o,idempotencyKey:s,bypassLogged:o==="observe_bypass",reason:i}}function iC(e,r){let t=e;return r&&(t=t.split(r).join("[REDACTED_SECRET]")),t=t.replace(/kynver_[a-z0-9_]+/gi,"[REDACTED_KYNVER_TOKEN]"),t=t.replace(/sk-[a-zA-Z0-9_-]+/g,"[REDACTED_API_KEY]"),t}Nr();import*as ei from"node:fs";import{homedir as vf}from"node:os";import*as Xe from"node:path";function bf(e){return e.startsWith("~/")?Xe.join(vf(),e.slice(2)):e}function ri(e={}){let r=e.env??process.env,t=e.cwd??process.cwd(),n=e.homeDir??(r.HOME?.trim()||r.USERPROFILE?.trim()||vf()),o=new Set,s=[],i=c=>{let u=Xe.resolve(bf(c));o.has(u)||(o.add(u),s.push(u))},a=r.KYNVER_ENV_FILE?.trim();a&&i(a);let l=t;for(let c=0;c<12;c+=1){i(Xe.join(l,".env"));let u=Xe.dirname(l);if(u===l)break;l=u}i(Xe.join(n,".kynver",".env"));try{let c=Xe.join(n,".kynver","config.json");if(ei.existsSync(c)){let d=JSON.parse(ei.readFileSync(c,"utf8")).defaultRepo?.trim();d&&i(Xe.join(d,".env"))}}catch{}return s}import{execFileSync as aC,spawnSync as lC}from"node:child_process";import*as ti from"node:fs";import*as Sf from"node:path";function so(e){if(!e?.trim())return"(not set)";try{let r=new URL(e),t=(r.pathname||"").replace(/^\//,"").split("?")[0]||"(no database name)";return`${r.hostname} / ${t}`}catch{return"(invalid URL)"}}var lc=["KYNVER_PRODUCTION_DATABASE_URL","PRODUCTION_DATABASE_URL"],cc=[...lc];function He(e,r){return e[r]?.trim()||void 0}function wf(e){if(!ti.existsSync(e))return{};let r={},t=new Set(cc);for(let n of ti.readFileSync(e,"utf8").split(`
-`)){let o=n.match(/^\s*([A-Za-z_][A-Za-z0-9_]*)\s*=\s*(.*)$/);if(!o||!t.has(o[1]))continue;let s=o[1];r[s]=o[2].replace(/^["']|["']$/g,"").trim()}return r}function cC(e){for(let r of lc){let t=He(e,r);if(t)return{ok:!0,databaseUrl:t,source:`env:${r}`,hint:so(t)}}return null}function uC(e,r){for(let t of ri({cwd:e,env:r})){let n=wf(t);for(let o of cc){let s=n[o]?.trim();if(s)return{ok:!0,databaseUrl:s,source:`env-file:${o}`,hint:`${so(s)} (${Sf.basename(t)})`}}}return null}function dC(e){let r=process.platform==="win32"?"neon.cmd":"neon",t=["connection-string",e.branch,"--prisma","-o","json","--no-color","--no-analytics"];e.projectId&&t.push("--project-id",e.projectId),e.databaseName&&t.push("--database-name",e.databaseName),e.roleName&&t.push("--role-name",e.roleName),e.pooled&&t.push("--pooled");let n;try{let o=lC(r,t,{encoding:"utf8",env:process.env,timeout:3e4});if(o.status!==0)return null;n=(o.stdout||"").trim()}catch{try{n=aC("neonctl",t,{encoding:"utf8",env:process.env,timeout:3e4}).trim()}catch{return null}}if(!n)return null;try{let o=JSON.parse(n),s=typeof o.connection_uri=="string"&&o.connection_uri||typeof o.connection_string=="string"&&o.connection_string||typeof o.connectionString=="string"&&o.connectionString;if(s)return s}catch{}return/^postgres(ql)?:\/\//i.test(n)?n:null}function pC(e,r){let t=He(e,"KYNVER_NEON_BRANCH")||He(e,"NEON_BRANCH")||"production",n=r({branch:t,projectId:He(e,"KYNVER_NEON_PROJECT_ID")||He(e,"NEON_PROJECT_ID"),databaseName:He(e,"KYNVER_NEON_DATABASE_NAME")||He(e,"NEON_DATABASE_NAME"),roleName:He(e,"KYNVER_NEON_ROLE_NAME")||He(e,"NEON_ROLE_NAME"),pooled:He(e,"KYNVER_NEON_POOLED")==="1"||He(e,"NEON_POOLED")==="1"});return n?{ok:!0,databaseUrl:n,source:"neon-cli",hint:so(n)}:null}function Cf(e={}){let r=e.env??process.env,t=e.cwd??process.cwd(),n=e.neonConnectionString??dC,o=[],s=ri({cwd:t,env:r}),i=pC(r,n);if(o.push("neon-cli"),i)return i;for(let u of lc)o.push(`env:${u}`);let a=cC(r);if(a)return a;for(let u of cc)o.push(`env-file:${u}`);let l=uC(t,r);return l||{ok:!1,reason:"No production database credentials found. Authenticate Neon CLI (`neon auth`), set KYNVER_NEON_* / NEON_* project hints, or provide PRODUCTION_DATABASE_URL / KYNVER_PRODUCTION_DATABASE_URL (process env, KYNVER_ENV_FILE, ~/.kynver/.env, or selective .env keys in the repo / defaultRepo checkout)."+(s.length>0?` Searched env files: ${s.slice(0,6).join(", ")}${s.length>6?"\u2026":""}.`:""),attempted:o}}function mC(e={}){let r=Cf(e);if(!r.ok)throw new Error(r.reason);return process.env.DATABASE_URL=r.databaseUrl,console.error(`[kynver-cli] database target: ${r.hint} (source: ${r.source})`),r}Ce();L();import{existsSync as o_,mkdirSync as s_}from"node:fs";import i_ from"node:path";L();Pt();import{existsSync as XC,readFileSync as QC}from"node:fs";import Df from"node:path";import JC from"node:path";L();Pt();G();w();import fC from"node:path";var gC=new Set(["running","dispatching","pending","queued","needs_attention"]),cr=new Set(["completed","failed","cancelled","done"]);function nt(e){let r=Ee(e);if(r.length===0)return"failed";let t=!1,n=!1,o=!1,s=!1;for(let i of r){let a=_(fC.join(x(e.id),"workers",R(i),"worker.json"),void 0);if(!a)continue;let l=T(a,{base:e.base,baseCommit:e.baseCommit});if(l.alive&&!l.finalResult){t=!0;break}typeof a.completionBlocker=="string"&&a.completionBlocker&&(o=!0),Fr(l)&&(s=!0),l.finalResult&&l.attention.state==="done"&&(n=!0)}return t||o||s?null:n?"completed":"failed"}function io(){let e=[];for(let r of ne()){if(!gC.has(r.status))continue;let t=nt(r);if(!t||t===r.status)continue;let n=r.status;r.status=t,Ue(r),e.push({runId:r.id,from:n,to:t})}return e}L();Pt();G();w();Lr();En();import{existsSync as Er,lstatSync as EC,readdirSync as PC,readlinkSync as AC,renameSync as vc,unlinkSync as IC}from"node:fs";import Qe from"node:path";ke();w();import fe from"node:path";var hC=`${fe.sep}runs${fe.sep}runs${fe.sep}`;function Gt(e){return e.includes(hC)}function kC(e,r){if(!Gt(e))return e;let t=te(r),n=pe(t),o=`${fe.sep}runs${fe.sep}runs${fe.sep}`,s=e.indexOf(o);if(s<0)return e;let i=e.slice(s+o.length);return fe.join(n,i)}function uc(e,r){return fe.join(pe(te(e)),R(r))}function ur(e,r,t){return fe.join(uc(e,r),"workers",R(t))}function _f(e,r,t){let n=te(e);return fe.join(n,"runs","runs",R(r),"workers",R(t))}function dc(){return["stdout.jsonl","stderr.log","heartbeat.jsonl","last-status.json","auto-complete.log","worker.json"]}function ot(e){return{workerJsonPath:fe.join(e,"worker.json"),stdoutPath:fe.join(e,"stdout.jsonl"),stderrPath:fe.join(e,"stderr.log"),heartbeatPath:fe.join(e,"heartbeat.jsonl"),lastStatusPath:fe.join(e,"last-status.json")}}function pc(e){let r=ot(ur(e.harnessRoot,e.runId,e.workerName)).workerJsonPath;return e.statusPath&&!Gt(e.statusPath)?e.statusPath:r}import{existsSync as xr,mkdirSync as vC,readdirSync as Pf,renameSync as bC,statSync as fc}from"node:fs";import z from"node:path";O();bn();nr();import xf from"node:path";function yC(e){return xf.resolve(bt(e.trim()))}function mc(e,r,t){let n=e?.trim();return n?{repo:yC(n),source:r,persistedInConfig:t}:null}function Re(e={}){let r=e.env??process.env,t=e.config??v(),n=mc(t.defaultRepo,"config",!0);if(n)return n;let o=mc(r.KYNVER_DEFAULT_REPO,"env_default_repo",!1);if(o)return o;let s=mc(r.KYNVER_HARNESS_REPO,"env_harness_repo",!1);if(s)return s;let i=kr({cwd:e.cwd,runtimeModuleUrl:e.runtimeModuleUrl});return i?{repo:i.repo,source:i.source,persistedInConfig:!1}:null}function ni(e,r){let t={...r??v(),defaultRepo:he(xf.resolve(e))};return Ve(t),t}function RC(e){let r=e?.config??v(),t=Re({...e,config:r});if(!t)return{ok:!1,reason:"No Kynver git checkout found. Clone the repo, cd into it, then run `kynver setup --repo /path/to/Kynver` (or export KYNVER_DEFAULT_REPO)."};if(t.persistedInConfig)return{ok:!0,resolved:t,config:r};let n=ni(t.repo,r);return{ok:!0,resolved:{...t,persistedInConfig:!0,source:"config"},config:n}}function Yt(e){return{defaultRepo:Y(e.repo),source:e.source,persistedInConfig:e.persistedInConfig}}Lr();ke();L();w();var Jt=900*1e3,Af=3600*1e3;function gc(e,r){let t=z.resolve(e),n=z.resolve(pe(r)),o=z.relative(n,t);return o!==".."&&!o.startsWith("..")&&!z.isAbsolute(o)}function hc(e){if(!xr(e))return[];try{return Pf(e,{withFileTypes:!0}).filter(r=>r.isDirectory()&&r.name!=="runs").map(r=>r.name)}catch{return[]}}function kc(e){let r=z.join(e,"workers");if(!xr(r))return[];try{return Pf(r,{withFileTypes:!0}).filter(t=>t.isDirectory()).map(t=>t.name)}catch{return[]}}function If(e){return z.join(e,"archived-workers")}function SC(e,r){let t=z.join(If(e),R(r));return xr(t)?`${t}-${Date.now()}`:t}function Ef(e,r,t){if(!xr(e))return!1;try{let n=r-fc(e).mtimeMs;return Number.isFinite(n)&&n>=0&&n<t}catch{return!1}}function yc(e,r=Date.now(),t=Jt){if(!xr(e))return!1;let n=ot(e),o=_(n.workerJsonPath,void 0);if(o?.status==="running"&&$(o.pid))return!0;let s=_e(n.heartbeatPath);if(s.lastHeartbeatAt){let i=r-Date.parse(s.lastHeartbeatAt);if(Number.isFinite(i)&&i>=0&&i<t)return!0}return!!(Ef(n.stdoutPath,r,t)||Ef(n.heartbeatPath,r,t))}function wC(e,r,t){let n=typeof r.completionReportedAt=="string"?Date.parse(r.completionReportedAt):NaN;if(Number.isFinite(n))return t-n;let o=(()=>{let s=r.completionResponse;if(!s||typeof s!="object")return NaN;let i=s.task;if(!i||typeof i!="object")return NaN;let a=i.updatedAt;return typeof a=="string"?Date.parse(a):NaN})();if(Number.isFinite(o))return t-o;try{return t-fc(z.join(e,"worker.json")).mtimeMs}catch{return 0}}function CC(e,r,t,n){if(yc(e,t))return{eligible:!1,reason:"worker has active/recent retention signals"};let o=typeof r.status=="string"?r.status:"";if(typeof r.completionBlocker=="string"&&r.completionBlocker.trim().length>0)return{eligible:!1,reason:"worker has completion blocker"};let i=typeof r.completionReportedAt=="string"||r.completionOutcome==="acknowledged";if(o!=="done"&&!i)return{eligible:!1,reason:`worker status is ${o||"unknown"}`};let a=wC(e,r,t);return!Number.isFinite(a)||a<n?{eligible:!1,reason:"terminal worker is still within archive grace window"}:{eligible:!0,reason:"terminal worker metadata archived"}}function st(e,r=Date.now(),t=Jt){for(let n of kc(e))if(yc(z.join(e,"workers",n),r,t))return!0;return!1}function _C(){return{repo:Re()?.repo??"",base:"origin/main",baseCommit:"unknown"}}function xC(e,r){let t=z.join(pe(e),R(r));if(!xr(t))return null;let n=kc(t);if(n.length===0)return null;let o;try{o=fc(t).birthtime.toISOString()}catch{o=new Date().toISOString()}let s={};for(let a of n){let l=ur(e,r,a);s[a]={workerDir:l,statusPath:z.join(l,"worker.json")}}let i=st(t);return{id:r,name:r,..._C(),status:i?"running":"needs_attention",createdAt:o,workers:s}}function oi(e){let r=te(e??de()),t=pe(r),n=[];for(let o of hc(t)){let s=z.join(t,o,"run.json");if(xr(s)){n.push({runId:o,action:"skipped",reason:"run.json present"});continue}let i=xC(r,o);if(!i){n.push({runId:o,action:"skipped",reason:"no worker dirs on disk"});continue}Ue(i),n.push({runId:o,action:"repaired_run_json",reason:st(z.join(t,o))?"synthesized run.json while worker artifacts still active":"synthesized run.json from orphan worker metadata dirs"})}return{runs:n}}function si(e,r={}){let t=te(e??de()),n=pe(t),o=r.now??Date.now(),s=r.archiveAgeMs??Af,i=[];oi(t);for(let a of hc(n)){let l=z.join(n,a),c=z.join(l,"run.json"),u=_(c,void 0);if(!u?.id)continue;let d=new Set([...Object.keys(u.workers||{}),...kc(l)]),f=!1;for(let m of d){let p=z.join(l,"workers",R(m)),g=z.join(p,"worker.json"),k=_(g,void 0);if(!k){let A=z.join(If(l),R(m));if(xr(A)&&(u.workers[R(m)]||u.workers[m])){delete u.workers[R(m)],delete u.workers[m],f=!0,i.push({runId:u.id,worker:m,action:"archived",reason:"removed stale live index entry for archived worker metadata",archivePath:A});continue}i.push({runId:u.id,worker:m,action:"skipped",reason:"worker.json missing"});continue}let h=CC(p,k,o,s);if(!h.eligible){i.push({runId:u.id,worker:m,action:"skipped",reason:h.reason});continue}let S=SC(l,m);vC(z.dirname(S),{recursive:!0}),bC(p,S),delete u.workers[R(m)],delete u.workers[m],f=!0,i.push({runId:u.id,worker:m,action:"archived",reason:h.reason,archivePath:S})}f&&Ue(u)}return{workers:i}}function Rc(e,r=Date.now()){let t=new Set,n=pe(e);for(let o of hc(n)){let s=z.join(n,o);st(s,r)&&t.add(`${e}\0${o}`)}return t}L();w();function OC(e,r){let t=uc(e,r),n;try{n=EC(t)}catch{return null}if(!n.isSymbolicLink())return null;let o=Qe.resolve(Qe.dirname(t),AC(t));if(st(o)||st(t))return null;let s=`${t}.materialize-${Date.now()}`;return vc(o,s),IC(t),vc(s,t),o}function NC(e){let r=[];for(let t of dc()){let n=Qe.join(e.fromDir,t),o=Qe.join(e.toDir,t);!Er(n)||Er(o)||(vc(n,o),r.push(t))}return r}function Of(e,r){let t=ot(r),n=!1;return e.workerDir!==r&&(e.workerDir=r,n=!0),e.stdoutPath!==t.stdoutPath&&(e.stdoutPath=t.stdoutPath,n=!0),e.stderrPath!==t.stderrPath&&(e.stderrPath=t.stderrPath,n=!0),e.heartbeatPath!==t.heartbeatPath&&(e.heartbeatPath=t.heartbeatPath,n=!0),n}function TC(e){let r=typeof e.lastStatus?.status=="string"?e.lastStatus.status:void 0,t=e.lastStatus?.attention&&typeof e.lastStatus.attention=="object"?e.lastStatus.attention.state:void 0;return r==="done"||t==="done"||e.stdoutFinalResult||e.heartbeatFinalResult?"done":r==="blocked"?"blocked":r==="running"?"exited":r??"exited"}function DC(e){let r=ot(e.canonicalDir),t=_(r.lastStatusPath,void 0),n=Er(r.stdoutPath),o=Er(r.heartbeatPath);if(!(n||o||t!=null))return null;let i=n?At(r.stdoutPath):{finalResult:null},a=o?_e(r.heartbeatPath):_e(""),l=Ur(a),c=TC({lastStatus:t,stdoutFinalResult:i.finalResult,heartbeatFinalResult:l}),u={name:e.workerName,runId:e.run.id,status:c,branch:typeof t?.branch=="string"?t.branch:`agent/${e.run.id}/${e.workerName}`,worktreePath:typeof t?.worktreePath=="string"?t.worktreePath:Qe.join(oe().worktreesDir,e.run.id,e.workerName),workerDir:e.canonicalDir,stdoutPath:r.stdoutPath,stderrPath:r.stderrPath,heartbeatPath:r.heartbeatPath,startedAt:typeof t?.startedAt=="string"?t.startedAt:e.run.createdAt,reconciledAt:new Date().toISOString(),reconcileReason:"synthesized worker.json from on-disk artifacts after metadata repair"};return typeof t?.taskId=="string"&&(u.taskId=t.taskId),typeof t?.agentOsId=="string"&&(u.agentOsId=t.agentOsId),typeof t?.planId=="string"&&(u.planId=t.planId),typeof t?.pid=="number"&&(u.pid=t.pid),(i.finalResult||l)&&(u.completionSnapshot={finalResult:i.finalResult??l??"completed",summary:a.lastHeartbeatSummary}),Of(u,e.canonicalDir),u}function MC(e,r){let t=!1,n={...e.workers||{}};for(let[o,s]of Object.entries(n)){let i=ur(r,e.id,o),a=Qe.join(i,"worker.json");(Gt(s.workerDir)||Gt(s.statusPath)||s.workerDir!==i||s.statusPath!==a)&&(n[o]={workerDir:i,statusPath:a},t=!0)}return t&&(e.workers=n,Ue(e)),t}function UC(e){let r=[],t=ur(e.harnessRoot,e.run.id,e.workerName),n=_f(e.harnessRoot,e.run.id,e.workerName),o=ot(t),s=NC({fromDir:n,toDir:t});s.length>0&&r.push({runId:e.run.id,worker:e.workerName,action:"relocated_artifacts",reason:`moved ${s.join(", ")} from nested runs/runs layout`});let i=pc({harnessRoot:e.harnessRoot,runId:e.run.id,workerName:e.workerName,statusPath:e.statusPath}),a=_(i,void 0);if(!a&&Er(o.workerJsonPath)&&(a=_(o.workerJsonPath,void 0)),!a){let l=DC({run:e.run,workerName:e.workerName,canonicalDir:t,harnessRoot:e.harnessRoot});if(l)return V(e.run.id,l),r.push({runId:e.run.id,worker:e.workerName,action:"synthesized_worker_json",reason:l.reconcileReason??"synthesized from artifacts"}),r;let c=Er(t),u=dc().some(d=>Er(Qe.join(t,d)));if(c&&!u){let d={name:e.workerName,runId:e.run.id,status:"exited",branch:`agent/${e.run.id}/${e.workerName}`,worktreePath:Qe.join(oe().worktreesDir,e.run.id,e.workerName),workerDir:t,stdoutPath:o.stdoutPath,stderrPath:o.stderrPath,heartbeatPath:o.heartbeatPath,startedAt:e.run.createdAt,reconciledAt:new Date().toISOString(),reconcileReason:"empty worker dir \u2014 marked abandoned during metadata reconcile"};return V(e.run.id,d),r.push({runId:e.run.id,worker:e.workerName,action:"marked_abandoned",reason:d.reconcileReason??"empty worker dir"}),r}return r.push({runId:e.run.id,worker:e.workerName,action:"skipped",reason:"worker.json missing and no recoverable artifacts"}),r}return Of(a,t)?(a.reconciledAt=new Date().toISOString(),a.reconcileReason=a.reconcileReason??"repaired nested runs/runs path fields",V(e.run.id,a),r.push({runId:e.run.id,worker:e.workerName,action:"repaired_worker_paths",reason:a.reconcileReason})):r.push({runId:e.run.id,worker:e.workerName,action:"skipped",reason:"worker metadata already canonical"}),r}function LC(e,r){let t=Qe.join(x(e.id),"workers");if(!Er(t))return[];let n=new Set(Object.keys(e.workers||{})),o=[];for(let s of PC(t,{withFileTypes:!0}))s.isDirectory()&&(n.has(s.name)||o.push(s.name));return o}function ii(){let{harnessRoot:e}=oe(),r=oi(e),t=[];for(let n of ne()){let o=OC(e,n.id);o&&t.push({runId:n.id,worker:"*",action:"materialized_run_symlink",reason:`replaced symlink with real run dir (was ${o})`}),MC(n,e)&&t.push({runId:n.id,worker:"*",action:"repaired_run_index",reason:"repaired nested runs/runs workerDir/statusPath entries in run.json"});let s=new Set(Object.keys(n.workers||{}));for(let i of LC(n,e))s.add(i),n.workers={...n.workers||{},[i]:{workerDir:ur(e,n.id,i),statusPath:Qe.join(ur(e,n.id,i),"worker.json")}},Ue(n),t.push({runId:n.id,worker:i,action:"repaired_run_index",reason:"indexed orphan worker dir into run.json"});for(let i of s){let a=n.workers?.[i];t.push(...UC({run:n,workerName:i,harnessRoot:e,statusPath:a?.statusPath}))}}return{workers:t,runMetadataRetention:r}}function BC(){let e=ii(),r=e.workers.reduce((n,o)=>(n[o.action]=(n[o.action]??0)+1,n),{}),t=e.runMetadataRetention.runs.reduce((n,o)=>(n[o.action]=(n[o.action]??0)+1,n),{});console.log(JSON.stringify({ok:!0,totals:r,runMetadataRetention:{totals:t,details:e.runMetadataRetention.runs},details:e.workers},null,2))}Lr();Xo();G();L();Pt();w();import{execFileSync as Nf}from"node:child_process";import Tf from"node:path";function bc(e){let r=e.trim().match(/github\.com\/([^/]+\/[^/]+)\/(?:pull|pulls)\/(\d+)/i);return r?`https://github.com/${r[1]}/pull/${r[2]}`:null}function WC(e){let r=bc(e)?.match(/\/pull\/(\d+)$/);if(!r)return null;let t=Number.parseInt(r[1],10);return Number.isFinite(t)?t:null}function HC(e){if(e==null)return"";if(typeof e=="string")return e;try{return JSON.stringify(e)}catch{return""}}function FC(e){let r=new Set;for(let t of e.matchAll(/github\.com\/[^/\s)>"']+\/[^/\s)>"']+\/(?:pull|pulls)\/(\d+)/gi)){let n=Number.parseInt(t[1],10);Number.isFinite(n)&&r.add(n)}for(let t of e.matchAll(/\bPR\s*#?\s*(\d{2,})\b/gi)){let n=Number.parseInt(t[1],10);Number.isFinite(n)&&r.add(n)}for(let t of e.matchAll(/\bpr[-_]?(\d{2,})\b/gi)){let n=Number.parseInt(t[1],10);Number.isFinite(n)&&r.add(n)}return[...r]}function $C(e){let r=null;if(typeof e=="string"?r=It(e):e&&typeof e=="object"&&!Array.isArray(e)&&(r=e),!r)return[];let t=r.targetPrReconciliation??r.target_pr_reconciliation;if(!Array.isArray(t))return[];let n=[];for(let o of t){if(!o||typeof o!="object"||Array.isArray(o))continue;let s=o,i=bc(String(s.prUrl??s.pr_url??"")),a=String(s.outcome??"").trim();!i||a!=="merged"||n.push({prUrl:i,mergeCommit:typeof s.mergeCommit=="string"?s.mergeCommit:typeof s.merge_commit=="string"?s.merge_commit:null,reason:typeof s.reason=="string"?s.reason:null})}return n}function KC(e){try{let n=Nf("git",["config","--get","remote.origin.url"],{cwd:e.repoDir,encoding:"utf8",stdio:["ignore","pipe","ignore"]}).trim().match(/github\.com[:/]([^/]+\/[^/.]+)(?:\.git)?$/i)?.[1];if(!n)return null;let o=Nf("gh",["pr","view",String(e.prNumber),"--repo",n,"--json","state,mergedAt,mergeCommit,url"],{cwd:e.repoDir,encoding:"utf8",stdio:["ignore","pipe","ignore"]}),s=JSON.parse(o);return{prUrl:bc(s.url??`https://github.com/${n}/pull/${e.prNumber}`)??`https://github.com/${n}/pull/${e.prNumber}`,state:s.state??"",mergedAt:s.mergedAt??null,mergeCommit:s.mergeCommit?.oid??null}}catch{return null}}function jC(e){let r=_e(e.heartbeatPath);return e.completionSnapshot?.finalResult??Ur(r)}function VC(e){let r=new Map,t=x(e.id);for(let n of Ee(e)){let o=_(Tf.join(t,"workers",R(n),"worker.json"),void 0);if(o)for(let s of $C(jC(o))){let i=WC(s.prUrl);i!=null&&!r.has(i)&&r.set(i,s)}}return r}function GC(e,r){let t=_e(e.heartbeatPath),n=[e.name,e.repairTargetPrUrl,e.taskPrUrl,e.branch,t.lastHeartbeatSummary,HC(r)].filter(Boolean).join(`
-`);return FC(n)}function YC(e){return e.localOnly===!0&&!e.taskId&&!e.agentOsId}function ai(e={}){let r=e.lookupPr??KC,t=[],n=new Map;for(let o of ne()){let s=VC(o),i=x(o.id);for(let a of Ee(o)){let l=Tf.join(i,"workers",R(a),"worker.json"),c=_(l,void 0);if(!c||!YC(c))continue;let u=T(c,{base:o.base,baseCommit:o.baseCommit});if(u.attention.state!=="needs_attention")continue;let d=null;for(let m of GC(c,u.finalResult)){if(d=s.get(m)??null,!d){let p=o.repo||c.worktreePath,g=`${p}#${m}`,k=n.has(g)?n.get(g)??null:r({repoDir:p,prNumber:m});n.has(g)||n.set(g,k),k&&(k.state==="MERGED"||k.mergedAt)&&(d={prUrl:k.prUrl,mergeCommit:k.mergeCommit??null,reason:"GitHub reports PR merged"})}if(d)break}if(!d){t.push({runId:o.id,worker:a,action:"skipped",reason:"no merged PR evidence"});continue}let f=new Date().toISOString();c.status="done",c.completionSnapshot={prUrl:d.prUrl,summary:`Local-only worker superseded by merged PR ${d.prUrl}`,finalResult:{summary:`Local-only repair/salvage worker superseded by merged PR ${d.prUrl}`,targetPrReconciliation:[{prUrl:d.prUrl,outcome:"merged",mergeCommit:d.mergeCommit??null,reason:d.reason??"PR already merged; local-only worker no longer requires attention"}]}},c.completionAckSource="local-pr-merged-reconcile",c.reconciledAt=f,c.reconcileReason="local-only needs_attention superseded by merged PR",V(o.id,c),t.push({runId:o.id,worker:a,action:"marked_done",reason:c.reconcileReason,prUrl:d.prUrl,mergeCommit:d.mergeCommit??null})}}return{workers:t}}var qC=900*1e3;function zC(){return process.env.KYNVER_NO_STALE_CLEANUP==="1"}function qt(){let e=ii();if(zC()){let s=ai(),i=si();return{workers:[],finalizedRuns:io(),metadataReconcile:e,localPrAttentionReconcile:s,terminalWorkerArchive:i}}let r=[],t=Date.now();for(let s of ne())for(let i of Ee(s)){let a=JC.join(x(s.id),"workers",R(i),"worker.json"),l=_(a,void 0);if(!l||l.status!=="running"){r.push({runId:s.id,worker:i,action:"skipped",reason:l?`worker status is ${l.status}`:"worker.json missing"});continue}let c=T(l,{base:s.base,baseCommit:s.baseCommit});if(c.finalResult){if(l.status==="running"){let u=c.attention.state==="blocked"?"blocked":c.attention.state==="done"||c.status==="done"?"done":"exited";l.status=u,l.reconciledAt=new Date().toISOString(),l.reconcileReason="synced finished worker record after terminal stdout/heartbeat",V(s.id,l),r.push({runId:s.id,worker:i,action:"marked_exited",reason:l.reconcileReason})}else r.push({runId:s.id,worker:i,action:"skipped",reason:"final result present"});continue}if(!c.alive){let u=c.attention.state==="blocked"?"blocked":c.status==="done"?"done":"exited";l.status=u,l.reconciledAt=new Date().toISOString(),l.reconcileReason=c.attention.reason,V(s.id,l),r.push({runId:s.id,worker:i,action:"marked_exited",reason:c.attention.reason});continue}if(c.attention.state==="stale"&&l.pid&&$(l.pid)){let u=c.lastHeartbeatAt?Date.parse(c.lastHeartbeatAt):NaN,d=c.lastActivityAt?Date.parse(c.lastActivityAt):NaN,f=!Number.isFinite(u)||t-u>qC,m=Number.isFinite(d)&&t-d>Nt;if(f&&m){Rn(l.pid,"SIGTERM"),l.status="exited",l.reconciledAt=new Date().toISOString(),l.reconcileReason=`reconciled stale worker: ${c.attention.reason}`,V(s.id,l),r.push({runId:s.id,worker:i,action:"killed_stale",reason:c.attention.reason});continue}}r.push({runId:s.id,worker:i,action:"skipped",reason:c.attention.reason})}let n=ai(),o=si();return{workers:r,finalizedRuns:io(),metadataReconcile:e,localPrAttentionReconcile:n,terminalWorkerArchive:o}}function Sc(){let e=qt(),r=e.workers.filter(l=>l.action==="marked_exited").length,t=e.workers.filter(l=>l.action==="killed_stale").length,n=e.workers.filter(l=>l.action==="skipped").length,o=e.metadataReconcile.workers.reduce((l,c)=>(l[c.action]=(l[c.action]??0)+1,l),{}),s=e.localPrAttentionReconcile.workers.reduce((l,c)=>(l[c.action]=(l[c.action]??0)+1,l),{}),i=e.metadataReconcile.runMetadataRetention.runs.reduce((l,c)=>(l[c.action]=(l[c.action]??0)+1,l),{}),a=e.terminalWorkerArchive.workers.reduce((l,c)=>(l[c.action]=(l[c.action]??0)+1,l),{});console.log(JSON.stringify({ok:!0,workers:{markedExited:r,killedStale:t,skipped:n,total:e.workers.length},metadataReconcile:{totals:o,total:e.metadataReconcile.workers.length,runMetadataRetention:{totals:i,total:e.metadataReconcile.runMetadataRetention.runs.length}},localPrAttentionReconcile:{totals:s,total:e.localPrAttentionReconcile.workers.length},terminalWorkerArchive:{totals:a,total:e.terminalWorkerArchive.workers.length},finalizedRuns:e.finalizedRuns.length,details:{workers:e.workers,metadataReconcile:e.metadataReconcile.workers,localPrAttentionReconcile:e.localPrAttentionReconcile.workers,terminalWorkerArchive:e.terminalWorkerArchive.workers,runMetadataRetention:e.metadataReconcile.runMetadataRetention.runs,finalizedRuns:e.finalizedRuns}},null,2))}G();w();function ZC(e){if(!e||!XC(e))return 0;try{return QC(e,"utf8").trim().length}catch{return 0}}function e_(e,r){let t=Df.join(x(e.id),"workers",R(r),"worker.json"),n=_(t,void 0);if(!n)return{worker:r,workerStatus:"missing",attention:"needs_attention",attentionReason:"worker.json missing",missingHeartbeat:!0,missingFinalResult:!0,landingBlocked:!1,completionBlocked:!1};let o=T(n,{base:e.base,baseCommit:e.baseCommit}),s=ZC(n.heartbeatPath)===0,i=!o.finalResult&&!o.alive,a=typeof n.completionBlocker=="string"&&n.completionBlocker.length>0;return{worker:r,workerStatus:n.status,attention:o.attention.state,attentionReason:o.attention.reason,missingHeartbeat:s,missingFinalResult:i,landingBlocked:Fr(o),completionBlocked:a}}function r_(e){return e.openWorkerCount>0?"active_workers":e.workers.some(r=>r.completionBlocked)?"completion_blocked":e.workers.some(r=>r.landingBlocked)?"landing_blocked":null}function t_(e){let r={blocked:5,needs_attention:4,stale:3,done:2,ok:1},t="ok",n;for(let o of e){let s=o.attention;(r[s]??0)>=(r[t]??0)&&(t=s,n=o.attentionReason)}return{attention:t,attentionReason:n}}function n_(e){let r=0;for(let t of Ee(e)){let n=Df.join(x(e.id),"workers",R(t),"worker.json"),o=_(n,void 0);if(!o)continue;let s=T(o,{base:e.base,baseCommit:e.baseCommit});s.alive&&!s.finalResult&&(r+=1)}return r}function li(){return qt(),ne().map(e=>{let t=Ee(e).map(d=>e_(e,d)),n=t.filter(d=>d.missingHeartbeat).map(d=>d.worker),o=t.filter(d=>d.missingFinalResult).map(d=>d.worker),s=t.filter(d=>d.landingBlocked).map(d=>d.worker),i=t.filter(d=>d.completionBlocked).map(d=>d.worker),{attention:a,attentionReason:l}=t_(t),c=n_(e),u=Tt(e.status,t.map(d=>({attention:d.attention,status:d.workerStatus})));return{id:e.id,name:e.name,status:e.status,effectiveStatus:u,repo:e.repo,createdAt:e.createdAt,openWorkerCount:c,attention:a,attentionReason:l,finalizeBlockedReason:r_({run:e,workers:t,openWorkerCount:c}),evidence:{missingHeartbeatWorkers:n,missingFinalResultWorkers:o,landingBlockedWorkers:s,completionBlockedWorkers:i,workers:t}}})}function wc(){console.log(JSON.stringify(li(),null,2))}w();function a_(e){let r=typeof e.repo=="string"?e.repo.trim():"";if(r)return r;let t=Re();return t?t.repo:(N("","--repo (or set defaultRepo via `kynver setup` / KYNVER_DEFAULT_REPO)"),"")}function ao(e){let r=Nl(a_(e));Zu(r);let t=e.id?Gn(String(e.id)):Vu(String(e.name||"run")),n=x(t);o_(n)&&l_(`run already exists: ${t}`),s_(n,{recursive:!0});let o=String(e.base||"origin/main"),s=ue(r,["rev-parse",o]).trim(),i={id:t,name:String(e.name||t),repo:r,base:o,baseCommit:s,status:"created",createdAt:new Date().toISOString(),workers:{}};ce(i_.join(n,"run.json"),i);let a={runId:t,runDir:n,repo:r,base:o,baseCommit:s};return console.log(JSON.stringify(a,null,2)),a}function Cc(){wc()}function l_(e){console.error(e),process.exit(1)}w();function Mf(e){let r=e.trim();return r?li().find(n=>n.name===r&&n.status!=="completed")??null:null}function _c(e){let r=String(N(String(e.name||""),"--name")),t=Mf(r);console.log(JSON.stringify({runId:t?.id??null,name:r,status:t?.status??null,effectiveStatus:t?.effectiveStatus??null},null,2))}Zo();O();import c_ from"node:path";L();G();w();async function zt(e){let r=e.pipeline===!0||e.pipeline==="true";try{let t=U(String(N(String(e.run||""),"--run"))),n=String(N(String(e.agentOsId||""),"--agent-os-id")),o=B(e.baseUrl?String(e.baseUrl):void 0),s=await K(e.secret?String(e.secret):void 0,n,{baseUrl:o}),i=qe({runId:t.id}).runnerId,a=await Im({run:t.id,agentOsId:n,...e},"run_sweep"),l=[];for(let f of Object.keys(t.workers||{})){let m=_(c_.join(x(t.id),"workers",R(f),"worker.json"),void 0);if(!m||!m.dispatched||!m.taskId)continue;let p=T(m);if(p.alive||p.finalResult||m.completionReportedAt)continue;let g=ws({runId:t.id,workerLeaseOwner:m.leaseOwner??null,runnerId:i}),k=`${o}/api/agent-os/by-id/${encodeURIComponent(n)}/tasks/${encodeURIComponent(String(m.taskId))}/release`,h;try{h=await q(k,s,{agentOsId:n,leaseOwner:g},{agentOsId:n,baseUrl:o})}catch(S){h={ok:!1,error:S.message}}l.push({worker:f,taskId:m.taskId,pid:m.pid,released:h.ok===!0||h.response?.ok===!0,response:h.response??h})}let c=`${o}/api/agent-os/by-id/${encodeURIComponent(n)}/tasks/reap`,u;try{u=await q(c,s,{agentOsId:n,...Number(e.graceMs)>=0&&e.graceMs!==void 0&&e.graceMs!==!0?{graceMs:Math.floor(Number(e.graceMs))}:{}},{agentOsId:n,baseUrl:o})}catch(f){u={ok:!1,error:f.message}}let d={runId:t.id,agentOsId:n,snapshotPublished:a,releasedLocalOrphans:l,reap:u.response??u};if(r)return{ok:!0,...d};console.log(JSON.stringify(d,null,2))}catch(t){if(r)return{ok:!1,error:t.message};console.error(`run sweep failed: ${t.message}`),process.exit(1)}}O();bn();ke();ke();import{existsSync as h_,readdirSync as Lf,statSync as k_}from"node:fs";import y_ from"node:path";import{execFileSync as u_}from"node:child_process";import{existsSync as Uf,readdirSync as d_,statSync as p_}from"node:fs";import m_ from"node:path";var f_=2500;function g_(e,r=f_){if(!Uf(e))return 0;try{let n=u_("du",["-sb",e],{encoding:"utf8",timeout:r,stdio:["ignore","pipe","ignore"]}).trim().split(/\s+/)[0],o=Number(n);return Number.isFinite(o)&&o>=0?o:null}catch{return null}}function dr(e,r=5e4){if(!Uf(e))return 0;let t=g_(e);if(t!==null)return t;let n=0,o=0,s=[e];for(;s.length>0;){let i=s.pop(),a;try{a=d_(i)}catch{continue}for(let l of a){if(o++>r)return null;let c=m_.join(i,l),u;try{u=p_(c)}catch{continue}u.isDirectory()?s.push(c):n+=u.size}}return n}function xc(e={}){let r=te(e.harnessRoot??de()),t=or(r),n=e.now??Date.now(),o=new Date(n).toISOString();if(!h_(t))return{harnessRoot:r,worktreesDir:t,worktreesBytes:0,runCount:0,workerCount:0,oldestRunAt:null,scannedAt:o};let s=0,i=0,a=0,l=null,c;try{c=Lf(t,{withFileTypes:!0})}catch{return{harnessRoot:r,worktreesDir:t,worktreesBytes:null,runCount:0,workerCount:0,oldestRunAt:null,scannedAt:o}}for(let u of c){if(!u.isDirectory())continue;i+=1;let d=y_.join(t,u.name);try{let f=k_(d);l=l===null?f.mtimeMs:Math.min(l,f.mtimeMs)}catch{}try{for(let f of Lf(d,{withFileTypes:!0}))f.isDirectory()&&(a+=1)}catch{}if(s!==null&&e.perRunEntryCap!==null){let f=e.perRunEntryCap??5e4;if(f<=0)s=null;else{let m=dr(d,f);m===null?s=null:s+=m}}}return{harnessRoot:r,worktreesDir:t,worktreesBytes:s,runCount:i,workerCount:a,oldestRunAt:l===null?null:new Date(l).toISOString(),scannedAt:o}}ke();import Oe from"node:path";In();import pi from"node:path";Ce();G();var ci=[".next",".turbo","dist","build",".cache","node_modules/.cache"];function Ec(e){let r=e.replace(/\\/g,"/").replace(/\/+$/,"");if(r==="node_modules"||r.startsWith("node_modules/"))return!0;for(let t of ci)if(r===t||r.startsWith(`${t}/`))return!0;return!1}function Ae(e){return e.filter(r=>{let t=r.trim(),n=t.startsWith("??")?t.slice(2).trim():t.length>3?t.slice(3).trim():t;return!Ec(n)})}function it(e){if(typeof e=="string")return e.match(/https:\/\/github\.com\/[^\s]+\/pull\/\d+/i)?.[0]??null;if(e&&typeof e=="object"){let r=e;for(let t of["prUrl","pr_url","pullRequestUrl"]){let n=r[t];if(typeof n=="string"&&n.trim())return n.trim()}}return null}function lo(e){let r=e.gitAncestry?.relation;return r==="merged"||r==="synced"?Ae(e.changedFiles).length>0:!!(it(e.finalResult)||r==="ahead"||r==="diverged"||e.changedFiles.length>0&&e.finalResult)}w();function co(e){return e.status||(e.status=T(e.worker,{base:e.run.base,baseCommit:e.run.baseCommit})),e.status}function Pc(e,r){if(e.status)return Ae(e.status.changedFiles).length>0;let t=r?r.porcelain(e.worktreePath):vn(e.worktreePath);return Ae(t).length>0}function R_(e){let r=e.worker.completionSnapshot?.finalResult;return r??(e.worker.taskPrUrl?{prUrl:e.worker.taskPrUrl}:null)}function Ac(e,r){if(e.status)return e.status;let t=e.worker,n=typeof t.completionReportedAt=="string"&&t.completionReportedAt.trim().length>0,o=!!(t.status&&["done","exited","blocked","failed","abandoned"].includes(t.status))||n,s=R_(e);if(o&&!$(t.pid)){let i=r?.gitStatusCache?r.gitStatusCache.porcelain(e.worktreePath):vn(e.worktreePath),a=e.run.baseCommit?.trim()||e.run.base?.trim()||"origin/main",c=r?.gitRevCache?.countAheadOfMain(e.worktreePath,a)===0?{checked:!0,base:a,relation:"synced"}:Ho(e.worktreePath,{base:e.run.base,baseCommit:e.run.baseCommit}),u={runId:e.runId,worker:e.workerName,pid:t.pid,alive:!1,status:t.status??(n?"done":"exited"),attention:{state:n?"done":"stale"},branch:t.branch,worktreePath:e.worktreePath,ownedPaths:t.ownedPaths,stdoutBytes:0,stderrBytes:0,heartbeatBytes:0,firstEventAt:null,lastEventAt:null,lastActivityAt:t.completionReportedAt??null,currentTool:null,heartbeatCount:0,lastHeartbeatAt:null,lastHeartbeatPhase:null,lastHeartbeatSummary:null,heartbeatBlocker:null,changedFiles:i,gitAncestry:c,finalResult:s,completionBlocker:typeof t.completionBlocker=="string"&&t.completionBlocker.trim()||null,prUrl:t.repairTargetPrUrl??t.taskPrUrl??it(s)};return e.status=u,u}return co(e)}G();G();Lr();w();function Ic(e,r=Date.now(),t=Jt){let n=_e(e.heartbeatPath);if(!n.lastHeartbeatAt)return!1;let o=r-Date.parse(n.lastHeartbeatAt);return Number.isFinite(o)&&o>=0&&o<t}function ui(e,r=Date.now(),t=Jt){return $(e.pid)?!0:Ic(e,r,t)}function v_(e,r){return r?r.runTerminalCache.derive(e.run):nt(e.run)}function pr(e,r=Date.now()){return ui(e.worker,r)}function Oc(e,r){return cr.has(e.run.status)?!1:v_(e,r)!==null}function Bf(e,r,t=Date.now()){if(pr(e,t))return!0;if(cr.has(e.run.status)||Oc(e,r))return!1;let n=co(e);return Z(n)?!1:!!pr(e,t)}In();G();function Wf(e,r){if(!(typeof e.worker.completionBlocker=="string"?e.worker.completionBlocker.trim():""))return!1;if(pr(e))return!0;let n=r??co(e);return!!(!Z(n)||lo(n)||Ae(n.changedFiles).length>0||Wr({finalResult:n.finalResult,changedFiles:n.changedFiles,gitAncestry:n.gitAncestry,prUrl:it(n.finalResult)}).blocked)}Ce();w();import{existsSync as Ff,mkdirSync as b_,writeFileSync as Hf}from"node:fs";import di from"node:path";function $f(e,r,t){return di.join(e,"salvage",R(r),R(t))}function Kf(e){return Ff(di.join($f(e.harnessRoot,e.runId,e.workerName),"evidence.json"))}function jf(e){let r=$f(e.harnessRoot,e.indexed.runId,e.indexed.workerName);b_(r,{recursive:!0});let t=di.join(r,"salvage.patch"),n=!1;if(Ff(e.indexed.worktreePath)){let s=Q(e.indexed.worktreePath,["diff","HEAD"]),i=Q(e.indexed.worktreePath,["diff","--cached"]),a=[s.stdout,i.stdout].filter(l=>l.trim()).join(`
-`);a.trim()&&(Hf(t,a.endsWith(`
+${r}`}function mg(e){let{provider:r,model:t,authSource:n,costTier:o,riskClass:s,costRationale:i,routingRule:a,escalatedFrom:l,escalatedReason:c}=e;return{provider:r,model:t,authSource:n,costTier:o,riskClass:s,costRationale:i,routingRule:a,escalatedFrom:l,escalatedReason:c}}function f_(e){return mg(e)}var Mc=["off","observe","enforce"],g_=["foreground_harness_spawn","shell_platform_dispatch"],h_=["allow_local","observe_bypass","enforce_harness_task"];function k_(e){let r=(e??"off").trim().toLowerCase();return Mc.includes(r)?r:"off"}function _i(e=process.env){return k_(e.KYNVER_ORCHESTRATION_POLICY_MODE)}function Uc(e=process.env){let r=e.KYNVER_ORCHESTRATION_ENFORCE_TASKS?.trim().toLowerCase();return r?r==="1"||r==="true"||r==="yes"||r==="on":_i(e)==="enforce"}import{createHash as y_}from"node:crypto";function wo(e){if(e==null)return null;let r=e.trim();return r.length?r:null}function Wc(e){let r=wo(e.sessionId)??"anonymous",t=wo(e.title)??wo(e.action)??"foreground",n=y_("sha256").update([wo(e.planId)??"",wo(e.parentTaskId)??"",t.toLowerCase()].join("|")).digest("hex").slice(0,16);return`hermes-foreground:${r}:${n}`}function R_(e,r){return e==="enforce"&&r?"enforce_harness_task":e==="observe"?"observe_bypass":"allow_local"}function b_(e,r=process.env){let t=_i(r),n=Uc(r),o=R_(t,n),s=o==="enforce_harness_task"?Wc({sessionId:e.sessionId,planId:e.planId,parentTaskId:e.parentTaskId,title:e.title,action:e.action}):null,i;return t==="off"?i="Orchestration policy off \u2014 local foreground path allowed.":o==="observe_bypass"?i=`Observe mode: ${e.action} bypass logged; local fallback preserved.`:o==="enforce_harness_task"?i=`Enforce mode: ${e.action} must create linked harness AgentTask (${s}).`:i="Local foreground path allowed.",{mode:t,decision:o,idempotencyKey:s,bypassLogged:o==="observe_bypass",reason:i}}function v_(e,r){let t=e;return r&&(t=t.split(r).join("[REDACTED_SECRET]")),t=t.replace(/kynver_[a-z0-9_]+/gi,"[REDACTED_KYNVER_TOKEN]"),t=t.replace(/sk-[a-zA-Z0-9_-]+/g,"[REDACTED_API_KEY]"),t}$r();import*as xi from"node:fs";import{homedir as fg}from"node:os";import*as Ze from"node:path";function gg(e){return e.startsWith("~/")?Ze.join(fg(),e.slice(2)):e}function Ei(e={}){let r=e.env??process.env,t=e.cwd??process.cwd(),n=e.homeDir??(r.HOME?.trim()||r.USERPROFILE?.trim()||fg()),o=new Set,s=[],i=c=>{let u=Ze.resolve(gg(c));o.has(u)||(o.add(u),s.push(u))},a=r.KYNVER_ENV_FILE?.trim();a&&i(a);let l=t;for(let c=0;c<12;c+=1){i(Ze.join(l,".env"));let u=Ze.dirname(l);if(u===l)break;l=u}i(Ze.join(n,".kynver",".env"));try{let c=Ze.join(n,".kynver","config.json");if(xi.existsSync(c)){let d=JSON.parse(xi.readFileSync(c,"utf8")).defaultRepo?.trim();d&&i(Ze.join(d,".env"))}}catch{}return s}import{execFileSync as S_,spawnSync as C_}from"node:child_process";import*as Pi from"node:fs";import*as hg from"node:path";function _o(e){if(!e?.trim())return"(not set)";try{let r=new URL(e),t=(r.pathname||"").replace(/^\//,"").split("?")[0]||"(no database name)";return`${r.hostname} / ${t}`}catch{return"(invalid URL)"}}var Lc=["KYNVER_PRODUCTION_DATABASE_URL","PRODUCTION_DATABASE_URL"],Bc=[...Lc];function $e(e,r){return e[r]?.trim()||void 0}function kg(e){if(!Pi.existsSync(e))return{};let r={},t=new Set(Bc);for(let n of Pi.readFileSync(e,"utf8").split(`
+`)){let o=n.match(/^\s*([A-Za-z_][A-Za-z0-9_]*)\s*=\s*(.*)$/);if(!o||!t.has(o[1]))continue;let s=o[1];r[s]=o[2].replace(/^["']|["']$/g,"").trim()}return r}function w_(e){for(let r of Lc){let t=$e(e,r);if(t)return{ok:!0,databaseUrl:t,source:`env:${r}`,hint:_o(t)}}return null}function __(e,r){for(let t of Ei({cwd:e,env:r})){let n=kg(t);for(let o of Bc){let s=n[o]?.trim();if(s)return{ok:!0,databaseUrl:s,source:`env-file:${o}`,hint:`${_o(s)} (${hg.basename(t)})`}}}return null}function x_(e){let r=process.platform==="win32"?"neon.cmd":"neon",t=["connection-string",e.branch,"--prisma","-o","json","--no-color","--no-analytics"];e.projectId&&t.push("--project-id",e.projectId),e.databaseName&&t.push("--database-name",e.databaseName),e.roleName&&t.push("--role-name",e.roleName),e.pooled&&t.push("--pooled");let n;try{let o=C_(r,t,{encoding:"utf8",env:process.env,timeout:3e4});if(o.status!==0)return null;n=(o.stdout||"").trim()}catch{try{n=S_("neonctl",t,{encoding:"utf8",env:process.env,timeout:3e4}).trim()}catch{return null}}if(!n)return null;try{let o=JSON.parse(n),s=typeof o.connection_uri=="string"&&o.connection_uri||typeof o.connection_string=="string"&&o.connection_string||typeof o.connectionString=="string"&&o.connectionString;if(s)return s}catch{}return/^postgres(ql)?:\/\//i.test(n)?n:null}function E_(e,r){let t=$e(e,"KYNVER_NEON_BRANCH")||$e(e,"NEON_BRANCH")||"production",n=r({branch:t,projectId:$e(e,"KYNVER_NEON_PROJECT_ID")||$e(e,"NEON_PROJECT_ID"),databaseName:$e(e,"KYNVER_NEON_DATABASE_NAME")||$e(e,"NEON_DATABASE_NAME"),roleName:$e(e,"KYNVER_NEON_ROLE_NAME")||$e(e,"NEON_ROLE_NAME"),pooled:$e(e,"KYNVER_NEON_POOLED")==="1"||$e(e,"NEON_POOLED")==="1"});return n?{ok:!0,databaseUrl:n,source:"neon-cli",hint:_o(n)}:null}function yg(e={}){let r=e.env??process.env,t=e.cwd??process.cwd(),n=e.neonConnectionString??x_,o=[],s=Ei({cwd:t,env:r}),i=E_(r,n);if(o.push("neon-cli"),i)return i;for(let u of Lc)o.push(`env:${u}`);let a=w_(r);if(a)return a;for(let u of Bc)o.push(`env-file:${u}`);let l=__(t,r);return l||{ok:!1,reason:"No production database credentials found. Authenticate Neon CLI (`neon auth`), set KYNVER_NEON_* / NEON_* project hints, or provide PRODUCTION_DATABASE_URL / KYNVER_PRODUCTION_DATABASE_URL (process env, KYNVER_ENV_FILE, ~/.kynver/.env, or selective .env keys in the repo / defaultRepo checkout)."+(s.length>0?` Searched env files: ${s.slice(0,6).join(", ")}${s.length>6?"\u2026":""}.`:""),attempted:o}}function P_(e={}){let r=yg(e);if(!r.ok)throw new Error(r.reason);return process.env.DATABASE_URL=r.databaseUrl,console.error(`[kynver-cli] database target: ${r.hint} (source: ${r.source})`),r}Ee();M();import{existsSync as Rx,mkdirSync as bx}from"node:fs";import vx from"node:path";M();Jr();import{existsSync as px,readFileSync as mx}from"node:fs";import Ag from"node:path";import cx from"node:path";M();Jr();Y();C();import A_ from"node:path";var I_=new Set(["running","dispatching","pending","queued","needs_attention"]),hr=new Set(["completed","failed","cancelled","done"]);function gt(e){let r=ke(e);if(r.length===0)return"failed";let t=!1,n=!1,o=!1,s=!1;for(let i of r){let a=_(A_.join(x(e.id),"workers",b(i),"worker.json"),void 0);if(!a)continue;let l=T(a,{base:e.base,baseCommit:e.baseCommit});if(l.alive&&!l.finalResult){t=!0;break}typeof a.completionBlocker=="string"&&a.completionBlocker&&(o=!0),Zr(l)&&(s=!0),l.finalResult&&l.attention.state==="done"&&(n=!0)}return t||o||s?null:n?"completed":"failed"}function xo(){let e=[];for(let r of J()){if(!I_.has(r.status))continue;let t=gt(r);if(!t||t===r.status)continue;let n=r.status;r.status=t,Le(r),e.push({runId:r.id,from:n,to:t})}return e}M();Jr();Y();C();Er();$n();import{existsSync as Ur,lstatSync as $_,readdirSync as K_,readlinkSync as j_,renameSync as qc,unlinkSync as V_}from"node:fs";import er from"node:path";_e();C();import be from"node:path";var O_=`${be.sep}runs${be.sep}runs${be.sep}`;function an(e){return e.includes(O_)}function N_(e,r){if(!an(e))return e;let t=ie(r),n=ge(t),o=`${be.sep}runs${be.sep}runs${be.sep}`,s=e.indexOf(o);if(s<0)return e;let i=e.slice(s+o.length);return be.join(n,i)}function Hc(e,r){return be.join(ge(ie(e)),b(r))}function kr(e,r,t){return be.join(Hc(e,r),"workers",b(t))}function Rg(e,r,t){let n=ie(e);return be.join(n,"runs","runs",b(r),"workers",b(t))}function Fc(){return["stdout.jsonl","stderr.log","heartbeat.jsonl","last-status.json","auto-complete.log","worker.json"]}function ht(e){return{workerJsonPath:be.join(e,"worker.json"),stdoutPath:be.join(e,"stdout.jsonl"),stderrPath:be.join(e,"stderr.log"),heartbeatPath:be.join(e,"heartbeat.jsonl"),lastStatusPath:be.join(e,"last-status.json")}}function $c(e){let r=ht(kr(e.harnessRoot,e.runId,e.workerName)).workerJsonPath;return e.statusPath&&!an(e.statusPath)?e.statusPath:r}import{existsSync as Mr,mkdirSync as M_,readdirSync as Cg,renameSync as U_,statSync as Kc}from"node:fs";import Q from"node:path";O();Un();ar();import bg from"node:path";function T_(e){return bg.resolve(Dt(e.trim()))}function ln(e,r,t){let n=e?.trim();return n?{repo:T_(n),source:r,persistedInConfig:t}:null}function vg(e){return e?{repo:e.repo,source:e.source,persistedInConfig:!1}:null}function Ke(e={}){let r=e.env??process.env,t=e.config??v(),n=ln(t.defaultRepo,"config",!0);if(n)return n;let o=ln(r.KYNVER_DEFAULT_REPO,"env_default_repo",!1);if(o)return o;let s=ln(r.KYNVER_HARNESS_REPO,"env_harness_repo",!1);return s||vg(jr({cwd:e.cwd,runtimeModuleUrl:e.runtimeModuleUrl}))}function Ai(e={}){let r=e.env??process.env,t=e.config??v(),n=ln(t.defaultRepo,"config",!0);if(n)return n;let o=ln(r.KYNVER_DEFAULT_REPO,"env_default_repo",!1);if(o)return o;let s=ln(r.KYNVER_HARNESS_REPO,"env_harness_repo",!1);return s||vg(Mn({cwd:e.cwd,runtimeModuleUrl:e.runtimeModuleUrl}))}function Ii(e,r){let t={...r??v(),defaultRepo:we(bg.resolve(e))};return Ye(t),t}function D_(e){let r=e?.config??v(),t=Ai({...e,config:r});if(!t)return{ok:!1,reason:"No Kynver git checkout found. Clone the repo, cd into it, then run `kynver setup --repo /path/to/Kynver` (or export KYNVER_DEFAULT_REPO)."};if(t.persistedInConfig)return{ok:!0,resolved:t,config:r};let n=Ii(t.repo,r);return{ok:!0,resolved:{...t,persistedInConfig:!0,source:"config"},config:n}}function cn(e){return{defaultRepo:q(e.repo),source:e.source,persistedInConfig:e.persistedInConfig}}Er();_e();M();C();var un=900*1e3,wg=3600*1e3;function jc(e,r){let t=Q.resolve(e),n=Q.resolve(ge(r)),o=Q.relative(n,t);return o!==".."&&!o.startsWith("..")&&!Q.isAbsolute(o)}function Vc(e){if(!Mr(e))return[];try{return Cg(e,{withFileTypes:!0}).filter(r=>r.isDirectory()&&r.name!=="runs").map(r=>r.name)}catch{return[]}}function Gc(e){let r=Q.join(e,"workers");if(!Mr(r))return[];try{return Cg(r,{withFileTypes:!0}).filter(t=>t.isDirectory()).map(t=>t.name)}catch{return[]}}function _g(e){return Q.join(e,"archived-workers")}function W_(e,r){let t=Q.join(_g(e),b(r));return Mr(t)?`${t}-${Date.now()}`:t}function Sg(e,r,t){if(!Mr(e))return!1;try{let n=r-Kc(e).mtimeMs;return Number.isFinite(n)&&n>=0&&n<t}catch{return!1}}function Yc(e,r=Date.now(),t=un){if(!Mr(e))return!1;let n=ht(e),o=_(n.workerJsonPath,void 0);if(o?.status==="running"&&B(o.pid))return!0;let s=ye(n.heartbeatPath);if(s.lastHeartbeatAt){let i=r-Date.parse(s.lastHeartbeatAt);if(Number.isFinite(i)&&i>=0&&i<t)return!0}return!!(Sg(n.stdoutPath,r,t)||Sg(n.heartbeatPath,r,t))}function L_(e,r,t){let n=typeof r.completionReportedAt=="string"?Date.parse(r.completionReportedAt):NaN;if(Number.isFinite(n))return t-n;let o=(()=>{let s=r.completionResponse;if(!s||typeof s!="object")return NaN;let i=s.task;if(!i||typeof i!="object")return NaN;let a=i.updatedAt;return typeof a=="string"?Date.parse(a):NaN})();if(Number.isFinite(o))return t-o;try{return t-Kc(Q.join(e,"worker.json")).mtimeMs}catch{return 0}}function B_(e,r,t,n){if(Yc(e,t))return{eligible:!1,reason:"worker has active/recent retention signals"};let o=typeof r.status=="string"?r.status:"";if(typeof r.completionBlocker=="string"&&r.completionBlocker.trim().length>0)return{eligible:!1,reason:"worker has completion blocker"};let i=typeof r.completionReportedAt=="string"||r.completionOutcome==="acknowledged";if(o!=="done"&&!i)return{eligible:!1,reason:`worker status is ${o||"unknown"}`};let a=L_(e,r,t);return!Number.isFinite(a)||a<n?{eligible:!1,reason:"terminal worker is still within archive grace window"}:{eligible:!0,reason:"terminal worker metadata archived"}}function kt(e,r=Date.now(),t=un){for(let n of Gc(e))if(Yc(Q.join(e,"workers",n),r,t))return!0;return!1}function H_(){return{repo:Ke()?.repo??"",base:"origin/main",baseCommit:"unknown"}}function F_(e,r){let t=Q.join(ge(e),b(r));if(!Mr(t))return null;let n=Gc(t);if(n.length===0)return null;let o;try{o=Kc(t).birthtime.toISOString()}catch{o=new Date().toISOString()}let s={};for(let a of n){let l=kr(e,r,a);s[a]={workerDir:l,statusPath:Q.join(l,"worker.json")}}let i=kt(t);return{id:r,name:r,...H_(),status:i?"running":"needs_attention",createdAt:o,workers:s}}function Oi(e){let r=ie(e??fe()),t=ge(r),n=[];for(let o of Vc(t)){let s=Q.join(t,o,"run.json");if(Mr(s)){n.push({runId:o,action:"skipped",reason:"run.json present"});continue}let i=F_(r,o);if(!i){n.push({runId:o,action:"skipped",reason:"no worker dirs on disk"});continue}Le(i),n.push({runId:o,action:"repaired_run_json",reason:kt(Q.join(t,o))?"synthesized run.json while worker artifacts still active":"synthesized run.json from orphan worker metadata dirs"})}return{runs:n}}function Ni(e,r={}){let t=ie(e??fe()),n=ge(t),o=r.now??Date.now(),s=r.archiveAgeMs??wg,i=[];Oi(t);for(let a of Vc(n)){let l=Q.join(n,a),c=Q.join(l,"run.json"),u=_(c,void 0);if(!u?.id)continue;let d=new Set([...Object.keys(u.workers||{}),...Gc(l)]),f=!1;for(let m of d){let p=Q.join(l,"workers",b(m)),h=Q.join(p,"worker.json"),k=_(h,void 0);if(!k){let I=Q.join(_g(l),b(m));if(Mr(I)&&(u.workers[b(m)]||u.workers[m])){delete u.workers[b(m)],delete u.workers[m],f=!0,i.push({runId:u.id,worker:m,action:"archived",reason:"removed stale live index entry for archived worker metadata",archivePath:I});continue}i.push({runId:u.id,worker:m,action:"skipped",reason:"worker.json missing"});continue}let g=B_(p,k,o,s);if(!g.eligible){i.push({runId:u.id,worker:m,action:"skipped",reason:g.reason});continue}let R=W_(l,m);M_(Q.dirname(R),{recursive:!0}),U_(p,R),delete u.workers[b(m)],delete u.workers[m],f=!0,i.push({runId:u.id,worker:m,action:"archived",reason:g.reason,archivePath:R})}f&&Le(u)}return{workers:i}}function Jc(e,r=Date.now()){let t=new Set,n=ge(e);for(let o of Vc(n)){let s=Q.join(n,o);kt(s,r)&&t.add(`${e}\0${o}`)}return t}M();C();function G_(e,r){let t=Hc(e,r),n;try{n=$_(t)}catch{return null}if(!n.isSymbolicLink())return null;let o=er.resolve(er.dirname(t),j_(t));if(kt(o)||kt(t))return null;let s=`${t}.materialize-${Date.now()}`;return qc(o,s),V_(t),qc(s,t),o}function Y_(e){let r=[];for(let t of Fc()){let n=er.join(e.fromDir,t),o=er.join(e.toDir,t);!Ur(n)||Ur(o)||(qc(n,o),r.push(t))}return r}function xg(e,r){let t=ht(r),n=!1;return e.workerDir!==r&&(e.workerDir=r,n=!0),e.stdoutPath!==t.stdoutPath&&(e.stdoutPath=t.stdoutPath,n=!0),e.stderrPath!==t.stderrPath&&(e.stderrPath=t.stderrPath,n=!0),e.heartbeatPath!==t.heartbeatPath&&(e.heartbeatPath=t.heartbeatPath,n=!0),n}function J_(e){let r=typeof e.lastStatus?.status=="string"?e.lastStatus.status:void 0,t=e.lastStatus?.attention&&typeof e.lastStatus.attention=="object"?e.lastStatus.attention.state:void 0;return r==="done"||t==="done"||e.stdoutFinalResult||e.heartbeatFinalResult?"done":r==="blocked"?"blocked":r==="running"?"exited":r??"exited"}function q_(e){let r=ht(e.canonicalDir),t=_(r.lastStatusPath,void 0),n=Ur(r.stdoutPath),o=Ur(r.heartbeatPath);if(!(n||o||t!=null))return null;let i=n?$t(r.stdoutPath):{finalResult:null},a=o?ye(r.heartbeatPath):ye(""),l=qr(a),c=J_({lastStatus:t,stdoutFinalResult:i.finalResult,heartbeatFinalResult:l}),u={name:e.workerName,runId:e.run.id,status:c,branch:typeof t?.branch=="string"?t.branch:`agent/${e.run.id}/${e.workerName}`,worktreePath:typeof t?.worktreePath=="string"?t.worktreePath:er.join(te().worktreesDir,e.run.id,e.workerName),workerDir:e.canonicalDir,stdoutPath:r.stdoutPath,stderrPath:r.stderrPath,heartbeatPath:r.heartbeatPath,startedAt:typeof t?.startedAt=="string"?t.startedAt:e.run.createdAt,reconciledAt:new Date().toISOString(),reconcileReason:"synthesized worker.json from on-disk artifacts after metadata repair"};return typeof t?.taskId=="string"&&(u.taskId=t.taskId),typeof t?.agentOsId=="string"&&(u.agentOsId=t.agentOsId),typeof t?.planId=="string"&&(u.planId=t.planId),typeof t?.pid=="number"&&(u.pid=t.pid),(i.finalResult||l)&&(u.completionSnapshot={finalResult:i.finalResult??l??"completed",summary:a.lastHeartbeatSummary}),xg(u,e.canonicalDir),u}function z_(e,r){let t=!1,n={...e.workers||{}};for(let[o,s]of Object.entries(n)){let i=kr(r,e.id,o),a=er.join(i,"worker.json");(an(s.workerDir)||an(s.statusPath)||s.workerDir!==i||s.statusPath!==a)&&(n[o]={workerDir:i,statusPath:a},t=!0)}return t&&(e.workers=n,Le(e)),t}function X_(e){let r=[],t=kr(e.harnessRoot,e.run.id,e.workerName),n=Rg(e.harnessRoot,e.run.id,e.workerName),o=ht(t),s=Y_({fromDir:n,toDir:t});s.length>0&&r.push({runId:e.run.id,worker:e.workerName,action:"relocated_artifacts",reason:`moved ${s.join(", ")} from nested runs/runs layout`});let i=$c({harnessRoot:e.harnessRoot,runId:e.run.id,workerName:e.workerName,statusPath:e.statusPath}),a=_(i,void 0);if(!a&&Ur(o.workerJsonPath)&&(a=_(o.workerJsonPath,void 0)),!a){let l=q_({run:e.run,workerName:e.workerName,canonicalDir:t,harnessRoot:e.harnessRoot});if(l)return H(e.run.id,l),r.push({runId:e.run.id,worker:e.workerName,action:"synthesized_worker_json",reason:l.reconcileReason??"synthesized from artifacts"}),r;let c=Ur(t),u=Fc().some(d=>Ur(er.join(t,d)));if(c&&!u){let d={name:e.workerName,runId:e.run.id,status:"exited",branch:`agent/${e.run.id}/${e.workerName}`,worktreePath:er.join(te().worktreesDir,e.run.id,e.workerName),workerDir:t,stdoutPath:o.stdoutPath,stderrPath:o.stderrPath,heartbeatPath:o.heartbeatPath,startedAt:e.run.createdAt,reconciledAt:new Date().toISOString(),reconcileReason:"empty worker dir \u2014 marked abandoned during metadata reconcile"};return H(e.run.id,d),r.push({runId:e.run.id,worker:e.workerName,action:"marked_abandoned",reason:d.reconcileReason??"empty worker dir"}),r}return r.push({runId:e.run.id,worker:e.workerName,action:"skipped",reason:"worker.json missing and no recoverable artifacts"}),r}return xg(a,t)?(a.reconciledAt=new Date().toISOString(),a.reconcileReason=a.reconcileReason??"repaired nested runs/runs path fields",H(e.run.id,a),r.push({runId:e.run.id,worker:e.workerName,action:"repaired_worker_paths",reason:a.reconcileReason})):r.push({runId:e.run.id,worker:e.workerName,action:"skipped",reason:"worker metadata already canonical"}),r}function Q_(e,r){let t=er.join(x(e.id),"workers");if(!Ur(t))return[];let n=new Set(Object.keys(e.workers||{})),o=[];for(let s of K_(t,{withFileTypes:!0}))s.isDirectory()&&(n.has(s.name)||o.push(s.name));return o}function Ti(){let{harnessRoot:e}=te(),r=Oi(e),t=[];for(let n of J()){let o=G_(e,n.id);o&&t.push({runId:n.id,worker:"*",action:"materialized_run_symlink",reason:`replaced symlink with real run dir (was ${o})`}),z_(n,e)&&t.push({runId:n.id,worker:"*",action:"repaired_run_index",reason:"repaired nested runs/runs workerDir/statusPath entries in run.json"});let s=new Set(Object.keys(n.workers||{}));for(let i of Q_(n,e))s.add(i),n.workers={...n.workers||{},[i]:{workerDir:kr(e,n.id,i),statusPath:er.join(kr(e,n.id,i),"worker.json")}},Le(n),t.push({runId:n.id,worker:i,action:"repaired_run_index",reason:"indexed orphan worker dir into run.json"});for(let i of s){let a=n.workers?.[i];t.push(...X_({run:n,workerName:i,harnessRoot:e,statusPath:a?.statusPath}))}}return{workers:t,runMetadataRetention:r}}function Z_(){let e=Ti(),r=e.workers.reduce((n,o)=>(n[o.action]=(n[o.action]??0)+1,n),{}),t=e.runMetadataRetention.runs.reduce((n,o)=>(n[o.action]=(n[o.action]??0)+1,n),{});console.log(JSON.stringify({ok:!0,totals:r,runMetadataRetention:{totals:t,details:e.runMetadataRetention.runs},details:e.workers},null,2))}Er();vs();Y();M();Jr();C();import{execFileSync as Eg}from"node:child_process";import Pg from"node:path";function zc(e){let r=e.trim().match(/github\.com\/([^/]+\/[^/]+)\/(?:pull|pulls)\/(\d+)/i);return r?`https://github.com/${r[1]}/pull/${r[2]}`:null}function ex(e){let r=zc(e)?.match(/\/pull\/(\d+)$/);if(!r)return null;let t=Number.parseInt(r[1],10);return Number.isFinite(t)?t:null}function rx(e){if(e==null)return"";if(typeof e=="string")return e;try{return JSON.stringify(e)}catch{return""}}function tx(e){let r=new Set;for(let t of e.matchAll(/github\.com\/[^/\s)>"']+\/[^/\s)>"']+\/(?:pull|pulls)\/(\d+)/gi)){let n=Number.parseInt(t[1],10);Number.isFinite(n)&&r.add(n)}for(let t of e.matchAll(/\bPR\s*#?\s*(\d{2,})\b/gi)){let n=Number.parseInt(t[1],10);Number.isFinite(n)&&r.add(n)}for(let t of e.matchAll(/\bpr[-_]?(\d{2,})\b/gi)){let n=Number.parseInt(t[1],10);Number.isFinite(n)&&r.add(n)}return[...r]}function nx(e){let r=null;if(typeof e=="string"?r=Kt(e):e&&typeof e=="object"&&!Array.isArray(e)&&(r=e),!r)return[];let t=r.targetPrReconciliation??r.target_pr_reconciliation;if(!Array.isArray(t))return[];let n=[];for(let o of t){if(!o||typeof o!="object"||Array.isArray(o))continue;let s=o,i=zc(String(s.prUrl??s.pr_url??"")),a=String(s.outcome??"").trim();!i||a!=="merged"||n.push({prUrl:i,mergeCommit:typeof s.mergeCommit=="string"?s.mergeCommit:typeof s.merge_commit=="string"?s.merge_commit:null,reason:typeof s.reason=="string"?s.reason:null})}return n}function ox(e){try{let n=Eg("git",["config","--get","remote.origin.url"],{cwd:e.repoDir,encoding:"utf8",stdio:["ignore","pipe","ignore"]}).trim().match(/github\.com[:/]([^/]+\/[^/.]+)(?:\.git)?$/i)?.[1];if(!n)return null;let o=Eg("gh",["pr","view",String(e.prNumber),"--repo",n,"--json","state,mergedAt,mergeCommit,url"],{cwd:e.repoDir,encoding:"utf8",stdio:["ignore","pipe","ignore"]}),s=JSON.parse(o);return{prUrl:zc(s.url??`https://github.com/${n}/pull/${e.prNumber}`)??`https://github.com/${n}/pull/${e.prNumber}`,state:s.state??"",mergedAt:s.mergedAt??null,mergeCommit:s.mergeCommit?.oid??null}}catch{return null}}function sx(e){let r=ye(e.heartbeatPath);return e.completionSnapshot?.finalResult??qr(r)}function ix(e){let r=new Map,t=x(e.id);for(let n of ke(e)){let o=_(Pg.join(t,"workers",b(n),"worker.json"),void 0);if(o)for(let s of nx(sx(o))){let i=ex(s.prUrl);i!=null&&!r.has(i)&&r.set(i,s)}}return r}function ax(e,r){let t=ye(e.heartbeatPath),n=[e.name,e.repairTargetPrUrl,e.taskPrUrl,e.branch,t.lastHeartbeatSummary,rx(r)].filter(Boolean).join(`
+`);return tx(n)}function lx(e){return e.localOnly===!0&&!e.taskId&&!e.agentOsId}function Di(e={}){let r=e.lookupPr??ox,t=[],n=new Map;for(let o of J()){let s=ix(o),i=x(o.id);for(let a of ke(o)){let l=Pg.join(i,"workers",b(a),"worker.json"),c=_(l,void 0);if(!c||!lx(c))continue;let u=T(c,{base:o.base,baseCommit:o.baseCommit});if(u.attention.state!=="needs_attention")continue;let d=null;for(let m of ax(c,u.finalResult)){if(d=s.get(m)??null,!d){let p=o.repo||c.worktreePath,h=`${p}#${m}`,k=n.has(h)?n.get(h)??null:r({repoDir:p,prNumber:m});n.has(h)||n.set(h,k),k&&(k.state==="MERGED"||k.mergedAt)&&(d={prUrl:k.prUrl,mergeCommit:k.mergeCommit??null,reason:"GitHub reports PR merged"})}if(d)break}if(!d){t.push({runId:o.id,worker:a,action:"skipped",reason:"no merged PR evidence"});continue}let f=new Date().toISOString();c.status="done",c.completionSnapshot={prUrl:d.prUrl,summary:`Local-only worker superseded by merged PR ${d.prUrl}`,finalResult:{summary:`Local-only repair/salvage worker superseded by merged PR ${d.prUrl}`,targetPrReconciliation:[{prUrl:d.prUrl,outcome:"merged",mergeCommit:d.mergeCommit??null,reason:d.reason??"PR already merged; local-only worker no longer requires attention"}]}},c.completionAckSource="local-pr-merged-reconcile",c.reconciledAt=f,c.reconcileReason="local-only needs_attention superseded by merged PR",H(o.id,c),t.push({runId:o.id,worker:a,action:"marked_done",reason:c.reconcileReason,prUrl:d.prUrl,mergeCommit:d.mergeCommit??null})}}return{workers:t}}var ux=900*1e3;function dx(){return process.env.KYNVER_NO_STALE_CLEANUP==="1"}function dn(){let e=Ti();if(dx()){let s=Di(),i=Ni();return{workers:[],finalizedRuns:xo(),metadataReconcile:e,localPrAttentionReconcile:s,terminalWorkerArchive:i}}let r=[],t=Date.now();for(let s of J())for(let i of ke(s)){let a=cx.join(x(s.id),"workers",b(i),"worker.json"),l=_(a,void 0);if(!l||l.status!=="running"){r.push({runId:s.id,worker:i,action:"skipped",reason:l?`worker status is ${l.status}`:"worker.json missing"});continue}let c=T(l,{base:s.base,baseCommit:s.baseCommit});if(c.finalResult){if(l.status==="running"){let u=c.attention.state==="blocked"?"blocked":c.attention.state==="done"||c.status==="done"?"done":"exited";l.status=u,l.reconciledAt=new Date().toISOString(),l.reconcileReason="synced finished worker record after terminal stdout/heartbeat",H(s.id,l),r.push({runId:s.id,worker:i,action:"marked_exited",reason:l.reconcileReason})}else r.push({runId:s.id,worker:i,action:"skipped",reason:"final result present"});continue}if(!c.alive){let u=c.attention.state==="blocked"?"blocked":c.status==="done"?"done":"exited";l.status=u,l.reconciledAt=new Date().toISOString(),l.reconcileReason=c.attention.reason,H(s.id,l),r.push({runId:s.id,worker:i,action:"marked_exited",reason:c.attention.reason});continue}if(c.attention.state==="stale"&&l.pid&&B(l.pid)){let u=c.lastHeartbeatAt?Date.parse(c.lastHeartbeatAt):NaN,d=c.lastActivityAt?Date.parse(c.lastActivityAt):NaN,f=!Number.isFinite(u)||t-u>ux,m=Number.isFinite(d)&&t-d>Vt;if(f&&m){_r(l.pid,"SIGTERM"),l.status="exited",l.reconciledAt=new Date().toISOString(),l.reconcileReason=`reconciled stale worker: ${c.attention.reason}`,H(s.id,l),r.push({runId:s.id,worker:i,action:"killed_stale",reason:c.attention.reason});continue}}r.push({runId:s.id,worker:i,action:"skipped",reason:c.attention.reason})}let n=Di(),o=Ni();return{workers:r,finalizedRuns:xo(),metadataReconcile:e,localPrAttentionReconcile:n,terminalWorkerArchive:o}}function Xc(){let e=dn(),r=e.workers.filter(l=>l.action==="marked_exited").length,t=e.workers.filter(l=>l.action==="killed_stale").length,n=e.workers.filter(l=>l.action==="skipped").length,o=e.metadataReconcile.workers.reduce((l,c)=>(l[c.action]=(l[c.action]??0)+1,l),{}),s=e.localPrAttentionReconcile.workers.reduce((l,c)=>(l[c.action]=(l[c.action]??0)+1,l),{}),i=e.metadataReconcile.runMetadataRetention.runs.reduce((l,c)=>(l[c.action]=(l[c.action]??0)+1,l),{}),a=e.terminalWorkerArchive.workers.reduce((l,c)=>(l[c.action]=(l[c.action]??0)+1,l),{});console.log(JSON.stringify({ok:!0,workers:{markedExited:r,killedStale:t,skipped:n,total:e.workers.length},metadataReconcile:{totals:o,total:e.metadataReconcile.workers.length,runMetadataRetention:{totals:i,total:e.metadataReconcile.runMetadataRetention.runs.length}},localPrAttentionReconcile:{totals:s,total:e.localPrAttentionReconcile.workers.length},terminalWorkerArchive:{totals:a,total:e.terminalWorkerArchive.workers.length},finalizedRuns:e.finalizedRuns.length,details:{workers:e.workers,metadataReconcile:e.metadataReconcile.workers,localPrAttentionReconcile:e.localPrAttentionReconcile.workers,terminalWorkerArchive:e.terminalWorkerArchive.workers,runMetadataRetention:e.metadataReconcile.runMetadataRetention.runs,finalizedRuns:e.finalizedRuns}},null,2))}Y();C();function fx(e){if(!e||!px(e))return 0;try{return mx(e,"utf8").trim().length}catch{return 0}}function gx(e,r){let t=Ag.join(x(e.id),"workers",b(r),"worker.json"),n=_(t,void 0);if(!n)return{worker:r,workerStatus:"missing",attention:"needs_attention",attentionReason:"worker.json missing",missingHeartbeat:!0,missingFinalResult:!0,landingBlocked:!1,completionBlocked:!1};let o=T(n,{base:e.base,baseCommit:e.baseCommit}),s=fx(n.heartbeatPath)===0,i=!o.finalResult&&!o.alive,a=typeof n.completionBlocker=="string"&&n.completionBlocker.length>0;return{worker:r,workerStatus:n.status,attention:o.attention.state,attentionReason:o.attention.reason,missingHeartbeat:s,missingFinalResult:i,landingBlocked:Zr(o),completionBlocked:a}}function hx(e){return e.openWorkerCount>0?"active_workers":e.workers.some(r=>r.completionBlocked)?"completion_blocked":e.workers.some(r=>r.landingBlocked)?"landing_blocked":null}function kx(e){let r={blocked:5,needs_attention:4,stale:3,done:2,ok:1},t="ok",n;for(let o of e){let s=o.attention;(r[s]??0)>=(r[t]??0)&&(t=s,n=o.attentionReason)}return{attention:t,attentionReason:n}}function yx(e){let r=0;for(let t of ke(e)){let n=Ag.join(x(e.id),"workers",b(t),"worker.json"),o=_(n,void 0);if(!o)continue;let s=T(o,{base:e.base,baseCommit:e.baseCommit});s.alive&&!s.finalResult&&(r+=1)}return r}function pn(){return dn(),J().map(e=>{let t=ke(e).map(d=>gx(e,d)),n=t.filter(d=>d.missingHeartbeat).map(d=>d.worker),o=t.filter(d=>d.missingFinalResult).map(d=>d.worker),s=t.filter(d=>d.landingBlocked).map(d=>d.worker),i=t.filter(d=>d.completionBlocked).map(d=>d.worker),{attention:a,attentionReason:l}=kx(t),c=yx(e),u=Gt(e.status,t.map(d=>({attention:d.attention,status:d.workerStatus})));return{id:e.id,name:e.name,status:e.status,effectiveStatus:u,repo:e.repo,createdAt:e.createdAt,openWorkerCount:c,attention:a,attentionReason:l,finalizeBlockedReason:hx({run:e,workers:t,openWorkerCount:c}),evidence:{missingHeartbeatWorkers:n,missingFinalResultWorkers:o,landingBlockedWorkers:s,completionBlockedWorkers:i,workers:t}}})}function Qc(){console.log(JSON.stringify(pn(),null,2))}C();function Sx(e){let r=typeof e.repo=="string"?e.repo.trim():"";if(r)return r;let t=Ke();return t?t.repo:(N("","--repo (or set defaultRepo via `kynver setup` / KYNVER_DEFAULT_REPO)"),"")}function Eo(e){let r=ac(Sx(e));Md(r);let t=e.id?co(String(e.id)):Ed(String(e.name||"run")),n=x(t);Rx(n)&&Cx(`run already exists: ${t}`),bx(n,{recursive:!0});let o=String(e.base||"origin/main"),s=me(r,["rev-parse",o]).trim(),i={id:t,name:String(e.name||t),repo:r,base:o,baseCommit:s,status:"created",createdAt:new Date().toISOString(),workers:{}};pe(vx.join(n,"run.json"),i);let a={runId:t,runDir:n,repo:r,base:o,baseCommit:s};return console.log(JSON.stringify(a,null,2)),a}function Zc(){Qc()}function Cx(e){console.error(e),process.exit(1)}C();function Ig(e){let r=e.trim();return r?pn().find(n=>n.name===r&&n.status!=="completed")??null:null}function eu(e){let r=String(N(String(e.name||""),"--name")),t=Ig(r);console.log(JSON.stringify({runId:t?.id??null,name:r,status:t?.status??null,effectiveStatus:t?.effectiveStatus??null},null,2))}Yn();O();import wx from"node:path";M();Y();C();async function mn(e){let r=e.pipeline===!0||e.pipeline==="true";try{let t=L(String(N(String(e.run||""),"--run"))),n=String(N(String(e.agentOsId||""),"--agent-os-id")),o=K(e.baseUrl?String(e.baseUrl):void 0),s=await G(e.secret?String(e.secret):void 0,n,{baseUrl:o}),i=Xe({runId:t.id}).runnerId,a=await Sf({run:t.id,agentOsId:n,...e},"run_sweep"),l=[];for(let f of Object.keys(t.workers||{})){let m=_(wx.join(x(t.id),"workers",b(f),"worker.json"),void 0);if(!m||!m.dispatched||!m.taskId)continue;let p=T(m);if(p.alive||p.finalResult||m.completionReportedAt)continue;let h=Ys({runId:t.id,workerLeaseOwner:m.leaseOwner??null,runnerId:i}),k=`${o}/api/agent-os/by-id/${encodeURIComponent(n)}/tasks/${encodeURIComponent(String(m.taskId))}/release`,g;try{g=await X(k,s,{agentOsId:n,leaseOwner:h},{agentOsId:n,baseUrl:o})}catch(R){g={ok:!1,error:R.message}}l.push({worker:f,taskId:m.taskId,pid:m.pid,released:g.ok===!0||g.response?.ok===!0,response:g.response??g})}let c=`${o}/api/agent-os/by-id/${encodeURIComponent(n)}/tasks/reap`,u;try{u=await X(c,s,{agentOsId:n,...Number(e.graceMs)>=0&&e.graceMs!==void 0&&e.graceMs!==!0?{graceMs:Math.floor(Number(e.graceMs))}:{}},{agentOsId:n,baseUrl:o})}catch(f){u={ok:!1,error:f.message}}let d={runId:t.id,agentOsId:n,snapshotPublished:a,releasedLocalOrphans:l,reap:u.response??u};if(r)return{ok:!0,...d};console.log(JSON.stringify(d,null,2))}catch(t){if(r)return{ok:!1,error:t.message};console.error(`run sweep failed: ${t.message}`),process.exit(1)}}O();Un();_e();_e();import{existsSync as Ox,readdirSync as Ng,statSync as Nx}from"node:fs";import Tx from"node:path";import{execFileSync as _x}from"node:child_process";import{existsSync as Og,readdirSync as xx,statSync as Ex}from"node:fs";import Px from"node:path";var Ax=2500;function Ix(e,r=Ax){if(!Og(e))return 0;try{let n=_x("du",["-sb",e],{encoding:"utf8",timeout:r,stdio:["ignore","pipe","ignore"]}).trim().split(/\s+/)[0],o=Number(n);return Number.isFinite(o)&&o>=0?o:null}catch{return null}}function yr(e,r=5e4){if(!Og(e))return 0;let t=Ix(e);if(t!==null)return t;let n=0,o=0,s=[e];for(;s.length>0;){let i=s.pop(),a;try{a=xx(i)}catch{continue}for(let l of a){if(o++>r)return null;let c=Px.join(i,l),u;try{u=Ex(c)}catch{continue}u.isDirectory()?s.push(c):n+=u.size}}return n}function ru(e={}){let r=ie(e.harnessRoot??fe()),t=ur(r),n=e.now??Date.now(),o=new Date(n).toISOString();if(!Ox(t))return{harnessRoot:r,worktreesDir:t,worktreesBytes:0,runCount:0,workerCount:0,oldestRunAt:null,scannedAt:o};let s=0,i=0,a=0,l=null,c;try{c=Ng(t,{withFileTypes:!0})}catch{return{harnessRoot:r,worktreesDir:t,worktreesBytes:null,runCount:0,workerCount:0,oldestRunAt:null,scannedAt:o}}for(let u of c){if(!u.isDirectory())continue;i+=1;let d=Tx.join(t,u.name);try{let f=Nx(d);l=l===null?f.mtimeMs:Math.min(l,f.mtimeMs)}catch{}try{for(let f of Ng(d,{withFileTypes:!0}))f.isDirectory()&&(a+=1)}catch{}if(s!==null&&e.perRunEntryCap!==null){let f=e.perRunEntryCap??5e4;if(f<=0)s=null;else{let m=yr(d,f);m===null?s=null:s+=m}}}return{harnessRoot:r,worktreesDir:t,worktreesBytes:s,runCount:i,workerCount:a,oldestRunAt:l===null?null:new Date(l).toISOString(),scannedAt:o}}_e();import Te from"node:path";Vn();import Li from"node:path";Ee();Y();var Mi=[".next",".turbo","dist","build",".cache","node_modules/.cache"];function tu(e){let r=e.replace(/\\/g,"/").replace(/\/+$/,"");if(r==="node_modules"||r.startsWith("node_modules/"))return!0;for(let t of Mi)if(r===t||r.startsWith(`${t}/`))return!0;return!1}function Ie(e){return e.filter(r=>{let t=r.trim(),n=t.startsWith("??")?t.slice(2).trim():t.length>3?t.slice(3).trim():t;return!tu(n)})}function yt(e){if(typeof e=="string")return e.match(/https:\/\/github\.com\/[^\s]+\/pull\/\d+/i)?.[0]??null;if(e&&typeof e=="object"){let r=e;for(let t of["prUrl","pr_url","pullRequestUrl"]){let n=r[t];if(typeof n=="string"&&n.trim())return n.trim()}}return null}function Po(e){let r=e.gitAncestry?.relation;return r==="merged"||r==="synced"?Ie(e.changedFiles).length>0:!!(yt(e.finalResult)||r==="ahead"||r==="diverged"||e.changedFiles.length>0&&e.finalResult)}C();function Ao(e){return e.status||(e.status=T(e.worker,{base:e.run.base,baseCommit:e.run.baseCommit})),e.status}function nu(e,r){if(e.status)return Ie(e.status.changedFiles).length>0;let t=r?r.porcelain(e.worktreePath):Dn(e.worktreePath);return Ie(t).length>0}function Dx(e){let r=e.worker.completionSnapshot?.finalResult;return r??(e.worker.taskPrUrl?{prUrl:e.worker.taskPrUrl}:null)}function ou(e,r){if(e.status)return e.status;let t=e.worker,n=typeof t.completionReportedAt=="string"&&t.completionReportedAt.trim().length>0,o=!!(t.status&&["done","exited","blocked","failed","abandoned"].includes(t.status))||n,s=Dx(e);if(o&&!B(t.pid)){let i=r?.gitStatusCache?r.gitStatusCache.porcelain(e.worktreePath):Dn(e.worktreePath),a=e.run.baseCommit?.trim()||e.run.base?.trim()||"origin/main",c=r?.gitRevCache?.countAheadOfMain(e.worktreePath,a)===0?{checked:!0,base:a,relation:"synced"}:is(e.worktreePath,{base:e.run.base,baseCommit:e.run.baseCommit}),u={runId:e.runId,worker:e.workerName,pid:t.pid,alive:!1,status:t.status??(n?"done":"exited"),attention:{state:n?"done":"stale"},branch:t.branch,worktreePath:e.worktreePath,ownedPaths:t.ownedPaths,stdoutBytes:0,stderrBytes:0,heartbeatBytes:0,firstEventAt:null,lastEventAt:null,lastActivityAt:t.completionReportedAt??null,currentTool:null,heartbeatCount:0,lastHeartbeatAt:null,lastHeartbeatPhase:null,lastHeartbeatSummary:null,heartbeatBlocker:null,changedFiles:i,gitAncestry:c,finalResult:s,completionBlocker:typeof t.completionBlocker=="string"&&t.completionBlocker.trim()||null,prUrl:t.repairTargetPrUrl??t.taskPrUrl??yt(s)};return e.status=u,u}return Ao(e)}Y();Y();Er();C();function su(e,r=Date.now(),t=un){let n=ye(e.heartbeatPath);if(!n.lastHeartbeatAt)return!1;let o=r-Date.parse(n.lastHeartbeatAt);return Number.isFinite(o)&&o>=0&&o<t}function Ui(e,r=Date.now(),t=un){return B(e.pid)?!0:su(e,r,t)}function Mx(e,r){return r?r.runTerminalCache.derive(e.run):gt(e.run)}function Rr(e,r=Date.now()){return Ui(e.worker,r)}function iu(e,r){return hr.has(e.run.status)?!1:Mx(e,r)!==null}function Tg(e,r,t=Date.now()){if(Rr(e,t))return!0;if(hr.has(e.run.status)||iu(e,r))return!1;let n=Ao(e);return ne(n)?!1:!!Rr(e,t)}Vn();Y();function Dg(e,r){if(!(typeof e.worker.completionBlocker=="string"?e.worker.completionBlocker.trim():""))return!1;if(Rr(e))return!0;let n=r??Ao(e);return!!(!ne(n)||Po(n)||Ie(n.changedFiles).length>0||Xr({finalResult:n.finalResult,changedFiles:n.changedFiles,gitAncestry:n.gitAncestry,prUrl:yt(n.finalResult)}).blocked)}Ee();C();import{existsSync as Ug,mkdirSync as Ux,writeFileSync as Mg}from"node:fs";import Wi from"node:path";function Wg(e,r,t){return Wi.join(e,"salvage",b(r),b(t))}function Lg(e){return Ug(Wi.join(Wg(e.harnessRoot,e.runId,e.workerName),"evidence.json"))}function Bg(e){let r=Wg(e.harnessRoot,e.indexed.runId,e.indexed.workerName);Ux(r,{recursive:!0});let t=Wi.join(r,"salvage.patch"),n=!1;if(Ug(e.indexed.worktreePath)){let s=re(e.indexed.worktreePath,["diff","HEAD"]),i=re(e.indexed.worktreePath,["diff","--cached"]),a=[s.stdout,i.stdout].filter(l=>l.trim()).join(`
+`);a.trim()&&(Mg(t,a.endsWith(`
 `)?a:`${a}
-`),n=!0)}let o={capturedAt:new Date(e.now??Date.now()).toISOString(),skipReason:e.skipReason,runId:e.indexed.runId,workerName:e.indexed.workerName,worktreePath:e.indexed.worktreePath,taskId:e.indexed.worker.taskId,agentOsId:e.indexed.worker.agentOsId,branch:e.indexed.worker.branch,completionBlocker:e.indexed.worker.completionBlocker,finalResult:e.status.finalResult,changedFiles:e.status.changedFiles,gitAncestry:e.status.gitAncestry,prUrl:e.status.prUrl??null,...n?{patchPath:t}:{}};return Hf(di.join(r,"evidence.json"),`${JSON.stringify(o,null,2)}
-`),o}var S_=new Set(["completion_blocked","dirty_worktree","pr_or_unmerged_commits","landing_blocked"]);function w_(e){return!S_.has(e.skipReason)||pr(e.indexed,e.now)?!1:Kf({harnessRoot:e.harnessRoot,runId:e.indexed.runId,workerName:e.indexed.workerName})?!0:e.writeSalvageEvidence?(jf({harnessRoot:e.harnessRoot,indexed:e.indexed,skipReason:e.skipReason,status:e.status,now:e.now}),!0):!1}function C_(e){let{indexed:r,includeOrphans:t,worktreesAgeMs:n,terminalWorktreesAgeMs:o}=e;return r?cr.has(r.run.status)||e.liveness&&Oc(r,e.liveness)||e.liveness&&Z(Ac(r,e.liveness))&&!pr(r)?o:n:t?o:n}function __(e,r){if(e.harnessRoot?.trim())return pi.resolve(e.harnessRoot);let t=r.worker.workerDir;if(!t)return null;let n=`${pi.sep}runs${pi.sep}`,o=t.indexOf(n);return o<0?null:t.slice(0,o+n.length-1)}function Vf(e){let{indexed:r,includeOrphans:t,worktreesAgeMs:n,ageMs:o,orphanSafety:s,worktreeRemovalGuard:i}=e,a=e.now??Date.now();if(!r)return t?s??null:"orphan_without_flag";let l=C_(e);if(n<=0&&!t&&l<=0)return"worktrees_disabled";if(l>0&&o<l)return"below_age_threshold";if(pr(r,a))return"active_worker";let c=Ac(r,e.liveness),u=__(e,r),d=p=>u&&w_({indexed:r,harnessRoot:u,skipReason:p,status:c,now:a,writeSalvageEvidence:e.writeSalvageEvidence===!0})?null:p;if(Wf(r,c)){let p=d("completion_blocked");if(p)return p}if(Pc(r,e.liveness?.gitStatusCache)){let p=d("dirty_worktree");if(p)return p}let f=e.liveness?.gitRevCache?.countAheadOfMain(e.worktreePath);if(f!=null&&f>0){let p=d("pr_or_unmerged_commits");if(p)return p}if(Bf(r,e.liveness,a)||!Z(c))return"run_still_active";if(lo(c)){let p=d("pr_or_unmerged_commits");if(p)return p}if(Ae(c.changedFiles).length>0){let p=d("dirty_worktree");if(p)return p}if(Wr({finalResult:c.finalResult,changedFiles:c.changedFiles,gitAncestry:c.gitAncestry,prUrl:it(c.finalResult)}).blocked){let p=d("landing_blocked");if(p)return p}if(i&&e.worktreePath){let p=i({worktreePath:e.worktreePath,indexed:!!r,runId:r?.runId,worker:r?.workerName});if(p)return p.detail?{reason:p.reason,detail:p.detail}:p.reason}return null}function Nc(e){let{indexed:r,nodeModulesAgeMs:t,ageMs:n,worktreePath:o,activeWorktreePaths:s,diskPressure:i}=e;return!i&&n<t?"below_age_threshold":s.has(pi.resolve(o))||r&&pr(r)?"active_worker":r&&Pc(r,e.gitStatusCache)?"dirty_worktree":null}function Gf(e){return Nc(e)}var uo=216e5,po=6048e5,mi=216e5,fi=36e5,gi=120;var Yf=new Set(["active_worker","run_still_active","completion_blocked","landing_blocked"]);function Jf(e,r){let t=[],n=new Set,o=(s,i,a)=>{let l=`${s}\0${i}`;n.has(l)||t.length>=24||(n.add(l),t.push({path:s,reason:i,...a?{detail:a}:{}}))};for(let s of r)Yf.has(s.reason)&&o(s.path,s.reason,s.detail);for(let s of e)!s.skipped||!s.skipReason||Yf.has(s.skipReason)&&o(s.path,s.skipReason);return t}import{existsSync as Qf,readdirSync as Zf,statSync as P_}from"node:fs";import eg from"node:path";L();ke();import qf from"node:path";w();function E_(e,r){return ui(e,r)}function zf(e,r=Date.now()){let t=new Set,n=new Set;for(let o of e){for(let s of Vo(o)){let i=!1;for(let a of Object.keys(s.workers||{})){let l=_(qf.join(Cn(o,s.id),"workers",R(a),"worker.json"),void 0);if(!l?.worktreePath)continue;let c=qf.resolve(l.worktreePath);E_(l,r)&&(i=!0,t.add(c))}i&&n.add(`${o}\0${s.id}`)}for(let s of Rc(o))n.add(s)}return{activeWorktreePaths:t,liveRunKeys:n}}function Xf(e,r,t,n){return t?n.has(`${r}\0${t}`):!1}w();function A_(e,r){try{let t=P_(e).mtimeMs;return Math.max(0,r-t)}catch{return 0}}function I_(e,r){let t=eg.join(e,"runs",r,"run.json");return Qf(t)?_(t,null):null}function rg(e){try{return Zf(e).length===0}catch{return!1}}function tg(e){let{harnessRoot:r,runId:t,runPath:n,ageMs:o,runDirectoriesAgeMs:s,activeGuards:i}=e;if(Xf(n,r,t,i.liveRunKeys)||!rg(n))return"run_still_active";let a=I_(r,t);return a&&!cr.has(a.status)&&!nt(a)?"run_still_active":s>0&&o<s?"below_age_threshold":null}function ng(e){if(!Qf(e.worktreesDir))return[];let r=[],t;try{t=Zf(e.worktreesDir,{withFileTypes:!0})}catch{return[]}for(let n of t){if(!n.isDirectory())continue;let o=n.name;if(e.runIdFilter&&o!==e.runIdFilter)continue;let s=eg.join(e.worktreesDir,o);rg(s)&&r.push({kind:"remove_run_directory",path:s,bytes:null,harnessRoot:e.harnessRoot,runId:o,ageMs:A_(s,e.now)})}return r}Ce();import{existsSync as Dc,rmSync as mg}from"node:fs";import{existsSync as D_,rmSync as M_}from"node:fs";ke();import{lstatSync as O_,readdirSync as N_}from"node:fs";function og(e){try{let r=O_(e),t=typeof process.getuid=="function"?process.getuid():null,n=typeof process.getgid=="function"?process.getgid():null,o=t!==null&&(r.uid!==t||n!==null&&r.gid!==n);return{uid:r.uid,gid:r.gid,foreign:o}}catch{return null}}function sg(e,r=32){let t=og(e);if(!t)return!1;if(t.foreign)return!0;try{let n=N_(e),o=0;for(let s of n){if(o>=r)break;let i=`${e.replace(/\/$/,"")}/${s}`,a=og(i);if(o+=1,a?.foreign)return!0}}catch{}return!1}import{spawnSync as T_}from"node:child_process";import lg from"node:path";import Ie from"node:path";function ig(e,r,t,n){let o=Ie.resolve(e),s=`${Ie.sep}${n}`,i=o.endsWith(s)?o:null;if(!i)return"path_outside_harness";let a=Ie.relative(t,i);if(a.startsWith("..")||Ie.isAbsolute(a))return"path_outside_harness";let l=a.split(Ie.sep);return l.length<3||l[l.length-1]!==n||!o.startsWith(Ie.resolve(r))?"path_outside_harness":null}function hi(e,r,t){return ig(e,r,t,"node_modules")}function ki(e,r,t){return ig(e,r,t,".next")}function yi(e,r,t){let n=Ie.resolve(e),o=Ie.relative(t,n);return o.startsWith("..")||Ie.isAbsolute(o)||o.split(Ie.sep).length<3||!n.startsWith(Ie.resolve(r))?"path_outside_harness":null}function ag(e,r,t){let n=Ie.resolve(e);return hi(n,r,t)===null||ki(n,r,t)===null||yi(n,r,t)===null}function ug(){let e=(process.env.KYNVER_CLEANUP_PRIVILEGED??"auto").trim().toLowerCase();return e==="0"||e==="false"||e==="off"||e==="no"?"off":e==="1"||e==="true"||e==="force"||e==="yes"?"force":"auto"}function cg(e){let r=T_("sudo",["-n",...e],{encoding:"utf8",stdio:["ignore","pipe","pipe"]});return{ok:r.status===0,stderr:`${r.stderr??""}${r.stdout??""}`.trim()}}function dg(e,r,t){if(!ag(e,r,t))return{ok:!1,error:"path is not an allowed harness generated cache"};let n=typeof process.getuid=="function"?process.getuid():null,o=typeof process.getgid=="function"?process.getgid():null;if(n===null||o===null)return{ok:!1,error:"privileged reclaim requires POSIX uid/gid"};let s=cg(["chown","-R",`${n}:${o}`,lg.resolve(e)]);if(s.ok)return{ok:!0,method:"chown_then_rm"};let i=cg(["rm","-rf",lg.resolve(e)]);return i.ok?{ok:!0,method:"sudo_rm"}:{ok:!1,error:s.stderr||i.stderr||"sudo -n failed (password required or not permitted)"}}var Tc="Root-owned harness caches require operator reclaim: configure passwordless sudo for chown/rm under ~/.kynver/harness/worktrees, or run `node scripts/reclaim-harness-root-owned-cache.mjs --execute` as the harness owner with sudo available. See docs/runbooks/harness-root-owned-cache-reclaim.md.";function U_(e){let r=e?.code;return r==="EACCES"||r==="EPERM"}function pg(e,r,t={}){if(!D_(e.path))return{executed:!1,skipped:!0,skipReason:"missing_worktree"};if(!r)return{executed:!1,skipped:!0,skipReason:"dry_run"};let n=e.harnessRoot,o=n?or(n):null,i=e.bytes??dr(e.path)??void 0,a=t.removePath??M_,l=t.hasForeignOwnedEntry??sg;try{return a(e.path,{recursive:!0,force:!0}),{executed:!0,skipped:!1,bytes:i}}catch(c){if(!U_(c)||!n||!o)return{executed:!1,skipped:!0,skipReason:"remove_failed",error:c.message};let u=l(e.path),d=ug();if(!(d==="force"||d==="auto"&&u))return u?{executed:!1,skipped:!0,skipReason:"foreign_owner",error:`${c.message}; ${Tc}`}:{executed:!1,skipped:!0,skipReason:"remove_failed",error:c.message};let m=dg(e.path,n,o);if(m.ok&&m.method==="sudo_rm")return{executed:!0,skipped:!1,bytes:i,privilegedReclaim:!0};if(m.ok)try{return a(e.path,{recursive:!0,force:!0}),{executed:!0,skipped:!1,bytes:i,privilegedReclaim:!0}}catch(p){return{executed:!1,skipped:!0,skipReason:"foreign_owner",error:`${p.message}; privileged chown succeeded but rm still failed`}}return{executed:!1,skipped:!0,skipReason:"foreign_owner",error:`${c.message}; privileged reclaim failed: ${m.error}; ${Tc}`}}}function Mc(e){let r=e.harnessRoot;return!r||!gc(e.path,r)?null:{...e,executed:!1,skipped:!0,skipReason:"run_metadata_protected"}}function Uc(e,r){let t=Mc(e);if(t)return t;let n=pg(e,r);return{...e,bytes:n.bytes??e.bytes,executed:n.executed,skipped:n.skipped,skipReason:n.skipReason,error:n.error}}function fg(e,r){return Uc(e,r)}function gg(e,r){return Uc(e,r)}function hg(e,r){return Uc(e,r)}function kg(e,r){let t=Mc(e);if(t)return t;if(!Dc(e.path))return{...e,executed:!1,skipped:!0,skipReason:"missing_worktree"};if(!r)return{...e,executed:!1,skipped:!0,skipReason:"dry_run"};try{let n=e.bytes??dr(e.path);return mg(e.path,{recursive:!0,force:!0}),{...e,bytes:n,executed:!0,skipped:!1}}catch(n){return{...e,executed:!1,skipped:!0,skipReason:"remove_failed",error:n.message}}}function yg(e,r){let t=Mc(e);if(t)return t;if(!Dc(e.path))return{...e,executed:!1,skipped:!0,skipReason:"missing_worktree"};if(!r)return{...e,executed:!1,skipped:!0,skipReason:"dry_run"};let n=e.repo;try{let o=e.bytes??dr(e.path);return n&&ue(n,["worktree","remove","--force",e.path],{allowFailure:!0}),Dc(e.path)&&mg(e.path,{recursive:!0,force:!0}),{...e,bytes:o,executed:!0,skipped:!1}}catch(o){return{...e,executed:!1,skipped:!0,skipReason:"remove_failed",error:o.message}}}import{existsSync as Ri,readdirSync as vi,statSync as L_}from"node:fs";import Ze from"node:path";function Lc(e,r){try{let t=L_(e).mtimeMs;return Math.max(0,r-t)}catch{return 0}}function vg(e,r){let t=Ze.relative(r,e);return t===""||!t.startsWith("..")&&!Ze.isAbsolute(t)}function Rg(e,r,t,n){let o=[];for(let s of ci){if(s===".next")continue;let i=Ze.join(e,s);if(!Ri(i))continue;let a=Ze.resolve(i);t.has(a)||vg(a,r.harnessRoot)&&(t.add(a),o.push({kind:"remove_build_cache",path:a,bytes:null,runId:n.runId,worker:n.worker,repo:n.repo,ageMs:Lc(a,r.now)}))}return o}function bg(e){let r=[],t=new Set;for(let n of e.index.values())e.runIdFilter&&n.runId!==e.runIdFilter||r.push(...Rg(n.worktreePath,e,t,{runId:n.runId,worker:n.workerName,repo:n.run.repo}));if(!e.includeOrphans||!Ri(e.worktreesDir))return r;for(let n of vi(e.worktreesDir,{withFileTypes:!0})){if(!n.isDirectory())continue;let o=Ze.join(e.worktreesDir,n.name);for(let s of vi(o,{withFileTypes:!0})){if(!s.isDirectory())continue;let i=Ze.join(o,s.name);r.push(...Rg(i,e,t,{runId:n.name,worker:s.name}))}}return r}function Sg(e){let r=e.worktreesAgeMs>0||e.includeOrphans,t=e.includeOrphans;if(!r&&!t)return[];let n=[],o=new Set;if(r)for(let i of e.index.values()){if(e.runIdFilter&&i.runId!==e.runIdFilter)continue;let a=i.worktreePath;Ri(a)&&(o.has(a)||(o.add(a),n.push({kind:"remove_worktree",path:a,bytes:null,runId:i.runId,worker:i.workerName,repo:i.run.repo,ageMs:Lc(a,e.now)})))}if(!t||!Ri(e.worktreesDir))return n;let s=new Set;for(let i of e.index.values())s.add(Ze.resolve(i.worktreePath));for(let i of vi(e.worktreesDir,{withFileTypes:!0})){if(!i.isDirectory()||e.runIdFilter&&i.name!==e.runIdFilter)continue;let a=Ze.join(e.worktreesDir,i.name),l;try{l=vi(a,{withFileTypes:!0})}catch{continue}for(let c of l){if(!c.isDirectory())continue;let u=Ze.resolve(Ze.join(a,c.name));o.has(u)||s.has(u)||vg(u,e.harnessRoot)&&(o.add(u),n.push({kind:"remove_worktree",path:u,bytes:null,runId:i.name,worker:c.name,ageMs:Lc(u,e.now)}))}}return n}import{existsSync as _g,readdirSync as wg,statSync as B_}from"node:fs";import Xt from"node:path";var W_=[{dirName:"node_modules",kind:"remove_node_modules"},{dirName:".next",kind:"remove_next_cache"}];function H_(e,r){try{let t=B_(e).mtimeMs;return Math.max(0,r-t)}catch{return 0}}function F_(e,r){let t=Xt.relative(r,e);return t===""||!t.startsWith("..")&&!Xt.isAbsolute(t)}function $_(e,r,t,n,o,s){if(!_g(n))return;let i=Xt.resolve(n);r.has(i)||F_(i,t.harnessRoot)&&(r.add(i),e.push({kind:o,path:i,bytes:null,harnessRoot:t.harnessRoot,runId:s.runId,worker:s.worker,repo:s.repo,ageMs:H_(i,t.now)}))}function Cg(e,r,t,n,o){for(let s of W_)$_(e,r,t,Xt.join(n,s.dirName),s.kind,o)}function xg(e){let r=[],t=new Set;for(let n of e.index.values())e.runIdFilter&&n.runId!==e.runIdFilter||Cg(r,t,e,n.worktreePath,{runId:n.runId,worker:n.workerName,repo:n.run.repo});if(!e.includeOrphans||!_g(e.worktreesDir))return r;for(let n of wg(e.worktreesDir,{withFileTypes:!0})){if(!n.isDirectory()||e.runIdFilter&&n.name!==e.runIdFilter)continue;let o=Xt.join(e.worktreesDir,n.name),s;try{s=wg(o,{withFileTypes:!0})}catch{continue}for(let i of s){if(!i.isDirectory())continue;let a=Xt.join(o,i.name);Cg(r,t,e,a,{runId:n.name,worker:i.name})}}return r}Ce();import{existsSync as Eg,statSync as K_}from"node:fs";import er from"node:path";function j_(e,r){try{let t=K_(e).mtimeMs;return Math.max(0,r-t)}catch{return 0}}function V_(e){let r=[],t=null;for(let n of e.split(`
-`)){if(!n.trim())continue;let[o,...s]=n.split(" "),i=s.join(" ");if(o==="worktree"){t&&r.push(t),t={path:i};continue}t&&(o==="branch"&&(t.branch=i),o==="HEAD"&&(t.head=i),o==="bare"&&(t.bare=!0))}return t&&r.push(t),r}function G_(e,r){let t=er.relative(er.resolve(r),er.resolve(e));return t!==""&&!t.startsWith("..")&&!er.isAbsolute(t)}var Y_=200;function Pg(e){if(!e.includeOrphans||!Eg(e.worktreesDir))return[];let r=new Set;for(let s of e.index.values())s.run.repo&&r.add(er.resolve(s.run.repo));let t=new Set;for(let s of e.index.values())t.add(er.resolve(s.worktreePath));let n=[],o=new Set;for(let s of r){let i=0,a;try{a=ue(s,["worktree","list","--porcelain"],{allowFailure:!0})}catch{continue}let l=V_(a);for(let c of l){if(i>=Y_)break;let u=er.resolve(c.path);if(u===er.resolve(s)||!G_(u,e.worktreesDir)||t.has(u)||o.has(u)||!Eg(u))continue;let f=er.relative(e.worktreesDir,u).split(er.sep),m=f[0],p=f[1]??"unknown";o.add(u),i+=1,n.push({kind:"remove_worktree",path:u,bytes:null,runId:m,worker:p,repo:s,ageMs:j_(u,e.now)})}}return n}L();w();import mo from"node:path";function Ag(e,r){let t=mo.resolve(r),n=new Map;for(let[o,s]of e){let i=s.harnessRoot?mo.resolve(s.harnessRoot):null;i&&i!==t||n.set(o,s)}return n}function Ig(e){let r=new Map;for(let t of Vo(e))for(let n of Object.keys(t.workers||{})){let o=mo.join(Cn(e,t.id),"workers",R(n),"worker.json"),s=_(o,void 0);s?.worktreePath&&r.set(mo.resolve(s.worktreePath),{harnessRoot:e,worktreePath:mo.resolve(s.worktreePath),runId:t.id,workerName:n,run:t,worker:s})}return r}function fo(e){let r=process.env[e];return r==="1"||r==="true"||r==="yes"}function at(e,r){let t=process.env[e];if(!t)return r;let n=Number(t);return Number.isFinite(n)&&n>=0?n:r}function Bc(e={}){let r=e.execute===!0||e.execute!==!1&&fo("KYNVER_CLEANUP_EXECUTE"),t=e.finalizeStaleRuns!==!1&&!fo("KYNVER_CLEANUP_SKIP_FINALIZE"),n=e.nodeModulesAgeMs??at("KYNVER_CLEANUP_NODE_MODULES_AGE_MS",216e5),o=e.scanDependencyCaches??(e.nodeModulesAgeMs!==void 0||process.env.KYNVER_CLEANUP_NODE_MODULES_AGE_MS!=null),s=e.worktreesAgeMs??at("KYNVER_CLEANUP_WORKTREES_AGE_MS",0),i=e.terminalWorktreesAgeMs??at("KYNVER_CLEANUP_TERMINAL_WORKTREES_AGE_MS",216e5),a=e.runDirectoriesAgeMs??at("KYNVER_CLEANUP_RUN_DIRECTORIES_AGE_MS",36e5),l=e.maxActionsPerSweep??at("KYNVER_CLEANUP_MAX_ACTIONS_PER_SWEEP",120),c=e.includeOrphans===!0||fo("KYNVER_CLEANUP_INCLUDE_ORPHANS"),d=fo("KYNVER_CLEANUP_SCOPE_ALL")||process.env.KYNVER_CLEANUP_SCOPE==="all"?e.runIdFilter:e.runIdFilter??(process.env.KYNVER_CLEANUP_RUN_ID||void 0),f=e.accountBytes!==!1&&!fo("KYNVER_CLEANUP_SKIP_BYTE_ACCOUNTING"),m=at("KYNVER_CLEANUP_STORAGE_ENTRY_CAP",2e3),p=e.storagePerRunEntryCap!==void 0?e.storagePerRunEntryCap:f&&m>0?m:null,g=at("KYNVER_CLEANUP_BYTE_ENTRY_CAP",2e3),k=e.byteAccountingEntryCap??(Number.isFinite(g)&&g>0?Math.floor(g):2e3);return{execute:r,finalizeStaleRuns:t,scanDependencyCaches:o,nodeModulesAgeMs:n,worktreesAgeMs:s>0?s:0,terminalWorktreesAgeMs:i>=0?i:0,runDirectoriesAgeMs:a>=0?a:0,maxActionsPerSweep:Number.isFinite(l)&&l>0?Math.floor(l):120,includeOrphans:c,runIdFilter:d?String(d):void 0,accountBytes:f,storagePerRunEntryCap:p,byteAccountingEntryCap:k}}function Og(e){let r=process.env.KYNVER_CLEANUP_SCOPE==="all",t=Number(process.env.KYNVER_CLEANUP_WORKTREES_AGE_MS),n=r?Number.isFinite(t)&&t>0?t:6048e5:Number.isFinite(t)&&t>0?t:0;return Bc({runIdFilter:r?void 0:e,worktreesAgeMs:n,terminalWorktreesAgeMs:r?216e5:void 0,runDirectoriesAgeMs:r?36e5:void 0,includeOrphans:r?!0:void 0,finalizeStaleRuns:!0,accountBytes:!0,scanDependencyCaches:!0})}Ce();import{existsSync as Ng}from"node:fs";import Wc from"node:path";w();var J_=1800*1e3;function Hc(e){let r=e.now??Date.now(),t=e.heartbeatFreshMs??J_;if(!Ng(e.worktreePath))return null;if(e.runId&&e.workerName){let c=Wc.join(e.harnessRoot,"runs",e.runId,"workers",e.workerName),u=_(Wc.join(c,"worker.json"),void 0);if(u&&Ic(u,r,t))return"active_worker"}let n=Wc.join(e.worktreePath,".git");if(!Ng(n))return null;let o=Q(e.worktreePath,["status","--porcelain"]);if(o.status!==0)return"pr_or_unmerged_commits";let s=o.stdout.split(`
-`).map(c=>c.trim()).filter(c=>c.length>0);if(Ae(s).length>0)return"dirty_worktree";let i=Q(e.worktreePath,["rev-list","--count","@{u}..HEAD"]);if(i.status===0){let c=Number(i.stdout.trim());if(Number.isFinite(c)&&c>0)return"pr_or_unmerged_commits"}let a=Q(e.worktreePath,["rev-list","--count","origin/main..HEAD"]);if(a.status!==0)return i.status!==0?"pr_or_unmerged_commits":null;let l=Number(a.stdout.trim());return Number.isFinite(l)&&l>0?"pr_or_unmerged_commits":null}ke();import{existsSync as q_}from"node:fs";import{homedir as z_}from"node:os";import Tg from"node:path";var X_=["/var/tmp/kynver-harness",Tg.join(z_(),".openclaw","harness")];function Fc(e,r,t){if(!t?.trim())return;let n=te(t.trim());e.has(n)||(e.add(n),r.push(n))}function Q_(e){return e.scanWellKnown!=null?e.scanWellKnown:process.env.VITEST==="true"?!1:process.env.KYNVER_CLEANUP_SCAN_WELL_KNOWN!=="0"&&!["0","false","no"].includes((process.env.KYNVER_CLEANUP_SCAN_WELL_KNOWN??"").toLowerCase())}function Dg(e={}){let r=new Set,t=[];Fc(r,t,e.harnessRoot??de());let n=process.env.KYNVER_CLEANUP_EXTRA_ROOTS?.split(",").map(o=>o.trim()).filter(Boolean);for(let o of n??[])Fc(r,t,o);if(Q_(e))for(let o of X_){let s=Tg.resolve(o);!r.has(s)&&q_(s)&&Fc(r,t,s)}return t}_t();function Z_(e){let r=process.env[e];return r==="1"||r==="true"||r==="yes"}function ex(e,r){let t=process.env[e];if(!t)return r;let n=Number(t);return Number.isFinite(n)?n:r}function Mg(e={}){let r=e.diskPath?.trim()||process.env.KYNVER_DISK_GUARD_PATH?.trim()||"/",t=ex("KYNVER_DISK_GUARD_MAX_USED_PERCENT",75),n=Me({...e,diskPath:r,diskMaxUsedPercent:e.diskMaxUsedPercent??t}),o=!n.ok||n.usedPercent>=t,s=process.env.KYNVER_CLEANUP_DISK_PRESSURE_FORCE?.trim().toLowerCase();return s==="none"||s==="off"||s==="0"?o=!1:(s==="pressured"||s==="on"||s==="1")&&(o=!0),{diskGate:n,pressured:o,maxUsedPercent:t}}function Ug(e,r){if(!r.pressured)return e;let t=e.execute||!Z_("KYNVER_CLEANUP_DRY_RUN_ON_PRESSURE");return{...e,execute:t,nodeModulesAgeMs:0,runIdFilter:void 0,includeOrphans:!0,terminalWorktreesAgeMs:0,runDirectoriesAgeMs:0,worktreesAgeMs:e.worktreesAgeMs>0?e.worktreesAgeMs:6048e5,diskPressure:!0,diskGate:r.diskGate}}function Fe(e,r){if(process.env.KYNVER_CLEANUP_QUIET==="1")return;let t=r?`: ${r}`:"";console.error(`[kynver cleanup] ${e}${t}`)}Ce();var bi=class{aheadOfMain=new Map;countAheadOfMain(r,t="origin/main"){let n=`${r}\0${t}`;if(this.aheadOfMain.has(n))return this.aheadOfMain.get(n)??null;let o=Q(r,["rev-list","--count",`${t}..HEAD`]);if(o.status!==0)return this.aheadOfMain.set(n,null),null;let s=Number(o.stdout.trim()),i=Number.isFinite(s)?s:null;return this.aheadOfMain.set(n,i),i}};import{spawnSync as rx}from"node:child_process";import{existsSync as tx}from"node:fs";import nx from"node:path";var ox=5e3;function sx(e,r){if(!tx(nx.join(e,".git")))return{status:null,stdout:"",stderr:"",error:"not_a_git_repo"};try{let t=rx("git",r,{cwd:e,encoding:"utf8",timeout:ox}),n=t.error?.message?.includes("ETIMEDOUT")===!0;return{status:n?null:t.status,stdout:t.stdout||"",stderr:t.stderr||"",error:n?"git_timeout":t.error?t.error.message:null}}catch(t){return{status:null,stdout:"",stderr:"",error:t.message}}}function Lg(e){let r=sx(e,["status","--short"]);return r.error==="not_a_git_repo"?[]:r.error==="git_timeout"||r.status!==0?null:r.stdout.split(`
-`).map(t=>t.trim()).filter(Boolean)}var Si=class{cache=new Map;porcelain(r){let t=r,n=this.cache.get(t);if(n!==void 0)return n;let o=Lg(t)??[];return this.cache.set(t,o),o}};var wi=class{cache=new Map;derive(r){let t=this.cache.get(r.id);if(t!==void 0)return t;let n=nt(r);return this.cache.set(r.id,n),n}};function ix(e){let r={};for(let t of e)r[t.kind]=(r[t.kind]??0)+1;return r}function Bg(e,r={}){let t=r.maxSampleActions??12,n=r.maxSampleSkips??8;return{harnessRoot:e.harnessRoot,scanRoots:e.scanRoots,dryRun:e.dryRun,execute:e.execute,scannedAt:e.scannedAt,finalizedRuns:e.finalizedRuns.length,actionCount:e.actions.length,actionKinds:ix(e.actions),totals:e.totals,...e.storage?{storage:e.storage}:{},...e.preservedLivePaths?.length?{preservedLivePaths:e.preservedLivePaths}:{},...e.removedRunDirectories!=null?{removedRunDirectories:e.removedRunDirectories}:{},sampleActions:e.actions.slice(0,t).map(o=>({kind:o.kind,path:o.path,...o.skipReason?{skipReason:o.skipReason}:{},...o.bytes!=null?{bytes:o.bytes}:{},...o.runId?{runId:o.runId}:{},...o.worker?{worker:o.worker}:{}})),sampleSkips:e.skips.slice(0,n)}}function ax(e={}){let r=e.harnessRoot?te(e.harnessRoot):de(),t=Dg({harnessRoot:r}),n=e.now??Date.now();return{harnessRoot:r,scanRoots:t,now:n}}function lx(e){return typeof e=="string"?{reason:e}:e}function Qt(e,r,t,n){e.push({path:r,reason:t,...n?{detail:n}:{}})}function Ci(e,r,t){return!r||e.bytes!=null?e:{...e,bytes:dr(e.path,t)}}function Wg(e,r){let t={};for(let n of r)t[n.reason]=(t[n.reason]??0)+1;for(let n of e)n.skipReason&&(t[n.skipReason]=(t[n.skipReason]??0)+1);return t}function cx(e,r){return e.kind==="remove_next_cache"?gg(e,r):fg(e,r)}function ux(e,r,t){return e.kind==="remove_next_cache"?ki(e.path,r,t):hi(e.path,r,t)}function dx(e){let r=new Map;for(let t of e)for(let[n,o]of Ig(t))r.set(n,o);return r}function Hg(e,r){return e.runId&&e.worker?Oe.join(r,e.runId,e.worker):Oe.resolve(e.path,"..")}function _i(e={}){let r=Bc(e),t=Mg();r=Ug(r,t);let n=ax(e);Fe("scan",`${n.scanRoots.length} harness root(s)`);let o=zf(n.scanRoots,n.now),s=r.finalizeStaleRuns?io().map(b=>({runId:b.runId,from:b.from,to:b.to})):[];s.length>0&&Fe("finalize",`${s.length} stale run(s) marked terminal`),Fe("index","building worktree index");let i=dx(n.scanRoots);Fe("index",`${i.size} indexed worktree(s)`);let a={runTerminalCache:new wi,gitStatusCache:new Si,gitRevCache:new bi},l=[],c=[],u=new Set,d=r.maxActionsPerSweep,f=()=>c.length>=d;for(let b of n.scanRoots){if(f())break;Fe("root",b);let P=Oe.join(b,"worktrees"),H=Ag(i,b),M={harnessRoot:b,worktreesDir:P,nodeModulesAgeMs:r.nodeModulesAgeMs,worktreesAgeMs:r.worktreesAgeMs,includeOrphans:r.includeOrphans,runIdFilter:r.runIdFilter,index:H,now:n.now},se=r.scanDependencyCaches?xg(M):[];Fe("dependency",r.scanDependencyCaches?`${se.length} cache candidate(s) at ${b}`:"skipped (worktree-only sweep)");let $e=0;for(let Se of se){if(f())break;$e+=1,$e%50===0&&Fe("dependency",`${$e}/${se.length} evaluated`);let X=Oe.resolve(Se.path);if(u.has(X))continue;u.add(X);let D={...Se,path:X},ie=ux(D,b,P);if(ie){Qt(l,D.path,ie),c.push({...D,executed:!1,skipped:!0,skipReason:ie});continue}let ge=Hg(D,P),we=H.get(Oe.resolve(ge))??null,ae=Nc({indexed:we,includeOrphans:!0,nodeModulesAgeMs:r.nodeModulesAgeMs,ageMs:D.ageMs,worktreePath:ge,activeWorktreePaths:o.activeWorktreePaths,diskPressure:r.diskPressure,gitStatusCache:a.gitStatusCache});if(ae){Qt(l,D.path,ae),c.push({...D,executed:!1,skipped:!0,skipReason:ae});continue}c.push(cx(Ci(D,r.accountBytes,r.byteAccountingEntryCap),r.execute))}if(r.scanDependencyCaches)for(let Se of bg(M)){if(f())break;let X=Oe.resolve(Se.path);if(u.has(X))continue;u.add(X);let D={...Se,path:X},ie=yi(D.path,b,P);if(ie){Qt(l,D.path,ie),c.push({...D,executed:!1,skipped:!0,skipReason:ie});continue}let ge=Hg(D,P),we=H.get(Oe.resolve(ge))??null,ae=Gf({indexed:we,includeOrphans:!0,nodeModulesAgeMs:r.nodeModulesAgeMs,ageMs:D.ageMs,worktreePath:ge,activeWorktreePaths:o.activeWorktreePaths,diskPressure:r.diskPressure,gitStatusCache:a.gitStatusCache});if(ae){Qt(l,D.path,ae),c.push({...D,executed:!1,skipped:!0,skipReason:ae});continue}c.push(hg(Ci(D,r.accountBytes,r.byteAccountingEntryCap),r.execute))}let be=[...Sg(M),...Pg(M)];Fe("worktrees",`${be.length} candidate(s) at ${b}`);let hn=new Set,kn=0;for(let Se of be){if(f())break;kn+=1,kn%50===0&&Fe("worktrees",`${kn}/${be.length} evaluated`);let X=Oe.resolve(Se.path);if(hn.has(X))continue;hn.add(X);let D={...Se,path:X},ie=H.get(Oe.resolve(D.path))??null,ge=ie?null:Hc({worktreePath:D.path,harnessRoot:b,runId:D.runId,workerName:D.worker,now:n.now}),we=Vf({indexed:ie,worktreePath:Oe.resolve(D.path),includeOrphans:r.includeOrphans,worktreesAgeMs:r.worktreesAgeMs,terminalWorktreesAgeMs:r.terminalWorktreesAgeMs,ageMs:D.ageMs,orphanSafety:ge,worktreeRemovalGuard:e.worktreeRemovalGuard,liveness:a,now:n.now,harnessRoot:b,writeSalvageEvidence:r.execute});if(we){let{reason:ae,detail:To}=lx(we);Qt(l,D.path,ae,To),c.push({...D,executed:!1,skipped:!0,skipReason:ae});continue}c.push(yg(Ci(D,r.accountBytes,r.byteAccountingEntryCap),r.execute))}if(!f()&&r.runDirectoriesAgeMs>=0)for(let Se of ng({harnessRoot:b,worktreesDir:P,runDirectoriesAgeMs:r.runDirectoriesAgeMs,runIdFilter:r.runIdFilter,activeGuards:o,now:n.now})){if(f())break;let X=Oe.resolve(Se.path);if(u.has(X))continue;u.add(X);let D={...Se,path:X},ie=D.runId??Oe.basename(X),ge=tg({harnessRoot:b,runId:ie,runPath:X,ageMs:D.ageMs,runDirectoriesAgeMs:r.runDirectoriesAgeMs,activeGuards:o});if(ge){Qt(l,D.path,ge),c.push({...D,executed:!1,skipped:!0,skipReason:ge});continue}c.push(kg(Ci(D,r.accountBytes,r.byteAccountingEntryCap),r.execute))}}let m=0,p=0,g=0,k=0,h=0,S=0;for(let b of c)b.bytes&&(m+=b.bytes),!b.skipped&&!b.executed&&b.bytes&&(g+=b.bytes),b.executed?(h+=1,k+=b.bytes??0,b.kind==="remove_run_directory"&&(p+=1)):b.skipped&&(S+=1,b.skipReason==="dry_run"&&b.bytes&&(g+=b.bytes));let A=r.accountBytes?xc({harnessRoot:n.harnessRoot,now:n.now,perRunEntryCap:r.storagePerRunEntryCap}):void 0;Fe("complete",`${c.length} action(s), ${S} skipped, ${h} removed`);let W=Jf(c,l),E=Bg({harnessRoot:n.harnessRoot,scanRoots:n.scanRoots,dryRun:!r.execute,execute:r.execute,nodeModulesAgeMs:r.nodeModulesAgeMs,worktreesAgeMs:r.worktreesAgeMs,includeOrphans:r.includeOrphans,diskPressure:r.diskPressure,diskGate:r.diskGate?{ok:r.diskGate.ok,path:r.diskGate.path,freeBytes:r.diskGate.freeBytes,usedPercent:r.diskGate.usedPercent,reason:r.diskGate.reason}:void 0,scannedAt:new Date(n.now).toISOString(),finalizedRuns:s,actions:c,skips:l,totals:{candidateBytes:m,reclaimableBytes:g,removedBytes:k,removedPaths:h,skippedPaths:S,skipReasons:Wg(c,l)},...A?{storage:A}:{},...W.length>0?{preservedLivePaths:W}:{},...p>0?{removedRunDirectories:p}:{}});return{harnessRoot:n.harnessRoot,scanRoots:n.scanRoots,dryRun:!r.execute,execute:r.execute,nodeModulesAgeMs:r.nodeModulesAgeMs,worktreesAgeMs:r.worktreesAgeMs,includeOrphans:r.includeOrphans,diskPressure:r.diskPressure,diskGate:r.diskGate?{ok:r.diskGate.ok,path:r.diskGate.path,freeBytes:r.diskGate.freeBytes,usedPercent:r.diskGate.usedPercent,reason:r.diskGate.reason}:void 0,scannedAt:new Date(n.now).toISOString(),finalizedRuns:s,actions:c,skips:l,totals:{candidateBytes:m,reclaimableBytes:g,removedBytes:k,removedPaths:h,skippedPaths:S,skipReasons:Wg(c,l)},...A?{storage:A}:{},...W.length>0?{preservedLivePaths:W}:{},...p>0?{removedRunDirectories:p}:{},compactSummary:E}}function $c(e){let r=Og(e);return _i({execute:r.execute,finalizeStaleRuns:r.finalizeStaleRuns,accountBytes:r.accountBytes,nodeModulesAgeMs:r.nodeModulesAgeMs,worktreesAgeMs:r.worktreesAgeMs,includeOrphans:r.includeOrphans,runIdFilter:r.runIdFilter})}function Kc(){return process.env.KYNVER_PIPELINE_CLEANUP!=="0"}O();import{mkdirSync as by,realpathSync as Sy}from"node:fs";import{fileURLToPath as iI}from"node:url";O();w();Ka();import px from"node:os";function mx(e){let r=(typeof e.apiBaseUrl=="string"?e.apiBaseUrl:void 0)||(typeof e.baseUrl=="string"?e.baseUrl:void 0)||process.env.KYNVER_API_URL||v().apiBaseUrl;return r?tr(String(r)):void 0}async function fx(e,r){let t=await fetch(`${e}/api/agent-os`,{headers:{Authorization:`Bearer ${r}`}});if(!t.ok)return null;let n=await t.json().catch(()=>null);if(!n?.primarySlug)return null;let o=n.items?.find(s=>s.slug===n.primarySlug);return o?.id&&o.slug?{id:o.id,slug:o.slug}:{id:"",slug:n.primarySlug}}async function xi(e){let r=mx(e);r||(console.error("kynver bootstrap requires a Kynver URL \u2014 pass --api-base-url https://your-kynver-site or set KYNVER_API_URL."),process.exit(1)),ee()||(typeof e.apiKey=="string"?Un(e.apiKey):(await $a({...e,apiBaseUrl:r})).ok||process.exit(1));let t=ee();t||(console.error("No API key after login \u2014 aborting."),process.exit(1));let n=await fx(r,t);n||(console.error("Could not resolve your AgentOS workspace from the account. Confirm this account has AgentOS access, then retry."),process.exit(1));let o={...e,apiBaseUrl:r,agentOsSlug:n.slug,...n.id?{agentOsId:n.id}:{},...typeof e.repo=="string"?{}:{discoverRepo:!0}};await as(o),console.log(""),console.log(`  Bootstrap complete \u2014 ${px.hostname()} is linked to workspace "${n.slug}".`),console.log("  Next: `kynver start` \u2014 brings the agent online and configures local Kynver Cron when needed."),console.log("  Persistent background service (Linux): `kynver cron install --install-systemd` after your first start."),console.log("  (Advanced: `kynver run create --repo /path/to/repo` + `kynver daemon --run <RUN_ID> --agent-os-id <AOS_ID> --execute`.)")}O();import DP from"node:os";O();O();De();ts();import gx from"node:os";function Fg(e,r){console.error(JSON.stringify({event:"daemon_identity",level:e,message:r}))}function $g(e=v(),r=process.env){let t=Te(r,e),n=rs({config:e,totalMemBytes:gx.totalmem(),env:r}),o=[...t.warnings],s=[];if(!e.boxKind?.trim()&&!r.KYNVER_BOX_KIND?.trim()&&o.push("boxKind is not persisted in ~/.kynver/config.json \u2014 run `kynver setup --box-kind forge|ghost` so Command Center attributes snapshots to the correct pool"),t.slugInferenceBlocked){let a=r.KYNVER_DAEMON_STRICT_IDENTITY==="1"||r.KYNVER_DAEMON_STRICT_IDENTITY==="true",l="ambiguous box identity: KYNVER_AGENT_OS_SLUG is set without KYNVER_BOX_KIND or config.boxKind; treating this host as forge";a?s.push(l):o.push(l)}let i=s.length===0;for(let a of o)Fg("warn",a);for(let a of s)Fg("error",a);return{ok:i,box:t,workerCapSource:n.workerCapSource,maxConcurrentWorkers:n.configuredMaxWorkers??n.autoCap,autoCap:n.autoCap,warnings:o,errors:s}}import{mkdirSync as hx,readFileSync as kx,renameSync as yx,writeFileSync as Rx}from"node:fs";import{homedir as vx}from"node:os";import Kg from"node:path";function jg(e){let r=e.replace(/[^A-Za-z0-9_-]/g,"_");return Kg.join(vx(),".kynver",`daemon-heartbeat-${r}.json`)}function Vg(e){try{let r=jg(e.agentOsId);hx(Kg.dirname(r),{recursive:!0});let t={observedAt:(e.now??new Date).toISOString(),pid:process.pid,runId:e.runId,agentOsId:e.agentOsId,...e.instructionBundleVersion?{instructionBundleVersion:e.instructionBundleVersion}:{}},n=`${r}.tmp-${process.pid}`;Rx(n,JSON.stringify(t),"utf8"),yx(n,r)}catch{}}function Gg(e){try{let r=kx(jg(e),"utf8"),t=JSON.parse(r);return typeof t?.observedAt!="string"?null:t}catch{return null}}function Yg(e,r,t=Date.now()){if(!e)return!1;let n=Date.parse(e.observedAt);return Number.isNaN(n)?!0:t-n>r}function bx(e){let r=process.env[e]?.trim().toLowerCase();return r==="1"||r==="true"||r==="yes"||r==="on"}function Zt(){process.platform==="win32"&&(bx("KYNVER_DAEMON_ALLOW_NATIVE_WINDOWS")||(console.error(JSON.stringify({event:"daemon_start_blocked",reason:"native_windows_console_flash",remedy:"Run the daemon inside WSL: .\\scripts\\start-tier2-wsl.ps1 \u2014 or set KYNVER_DAEMON_ALLOW_NATIVE_WINDOWS=1 to override (flashes visible consoles)."})),process.exit(1)))}O();import{existsSync as Sx}from"node:fs";import{homedir as wx}from"node:os";import Cx from"node:path";function Jg(e,r){let t=process.env[e]?.trim().toLowerCase();return t?t==="0"||t==="false"||t==="no"||t==="off"?!1:t==="1"||t==="true"||t==="yes"||t==="on"?!0:r:r}function go(e,r,t=1){let n=Number(process.env[e]);return!Number.isFinite(n)||n<t?r:Math.floor(n)}function Pr(){let e=process.env.KYNVER_CRON_STORE_PATH?.trim()||process.env.OPENCLAW_CRON_STORE_PATH?.trim();return e||Cx.join(wx(),".kynver","agent-os-cron.json")}function _x(e=Pr()){let r=process.env.KYNVER_CRON_TICK_STATE_PATH?.trim();return r||`${e.replace(/\.json$/i,"")}.tick-state.json`}function xx(){let e=v();return process.env.KYNVER_API_URL?.trim()||e.apiBaseUrl?.trim()||process.env.KYNVER_CRON_FIRE_BASE_URL?.trim()||process.env.OPENCLAW_CRON_FIRE_BASE_URL?.trim()||null}function jc(){return process.env.KYNVER_CRON_SECRET?.trim()||process.env.OPENCLAW_CRON_SECRET?.trim()||process.env.KYNVER_RUNTIME_SECRET?.trim()||null}function mr(){let e=Pr(),r=_x(e),t=xx(),n=jc(),o=!!(t&&n),s=Sx(e),i=o&&(s||Jg("KYNVER_CRON_TICK_FORCE",!1));return{storePath:e,statePath:r,lockPath:`${r}.lock`,fireBaseUrl:t,secret:n,tickEnabled:Jg("KYNVER_CRON_TICK_ENABLED",i),tickIntervalMs:go("KYNVER_CRON_TICK_INTERVAL_MS",6e4,5e3),missedRunPolicy:process.env.KYNVER_CRON_MISSED_RUN_POLICY?.trim().toLowerCase()==="skip"?"skip":"catch_up",maxCatchUpPerTick:go("KYNVER_CRON_MAX_CATCH_UP_PER_TICK",3,0),maxRetries:go("KYNVER_CRON_MAX_RETRIES",3,0),retryBackoffMs:go("KYNVER_CRON_RETRY_BACKOFF_MS",6e4,1e3),inflightLeaseMs:go("KYNVER_CRON_INFLIGHT_LEASE_MS",12e4,5e3)}}function Ei(e=mr()){return e.tickEnabled&&!!(e.fireBaseUrl&&e.secret)}function Ex(e){return e.replace(/\/+$/,"")}async function qg(e){let r=e.fetchFn??fetch,t=e.entry.spec.callbackPath.startsWith("/")?e.entry.spec.callbackPath:`/${e.entry.spec.callbackPath}`,n=`${Ex(e.baseUrl)}${t}`,s={source:"kynver-cron",jobId:e.jobId??e.entry.spec.dedupeKey??null,agentOsId:e.entry.spec.target.agentOsId,kind:e.entry.spec.kind,target:e.entry.spec.target,...e.entry.spec.payload!==void 0&&{payload:e.entry.spec.payload}},i=await r(n,{method:"POST",headers:Le(e.secret),body:JSON.stringify(s)}),a=null;try{a=await i.json()}catch{a=null}return{ok:i.ok,status:i.status,body:a}}w();import{closeSync as Px,existsSync as Vc,openSync as Ax,readFileSync as Ix,unlinkSync as zg,writeFileSync as Ox}from"node:fs";var Nx=10*6e4;function Xg(e){if(!Vc(e))return null;try{let r=JSON.parse(Ix(e,"utf8"));if(typeof r.pid=="number"&&typeof r.at=="string")return r}catch{return null}return null}function Tx(e){let r=Xg(e);if(!r||!$(r.pid))return!0;let t=Date.parse(r.at);return Number.isNaN(t)?!0:Date.now()-t>Nx}function Qg(e){if(Vc(e)&&!Tx(e)){let r=Xg(e);return{acquired:!1,reason:r?`held by pid ${r.pid}`:"held by another process"}}if(Vc(e))try{zg(e)}catch{}try{let r=Ax(e,"wx");return Ox(r,JSON.stringify({pid:process.pid,at:new Date().toISOString()}),"utf8"),Px(r),{acquired:!0}}catch(r){if(r.code==="EEXIST")return{acquired:!1,reason:"concurrent acquire"};throw r}}function Zg(e){try{zg(e)}catch{}}var Dx=/^[\d*/,\-?LW#]+\s+[\d*/,\-?LW#]+\s+[\d*/,\-?LW#]+\s+[\d*/,\-?LW#]+\s+[\d*/,\-?LW#]+$/;function Mx(e){return Dx.test(e.trim())}function Ux(e,r,t){let n=new Set;for(let o of e.split(",")){let s=o.trim();if(!s)continue;if(s==="*"){for(let d=r;d<=t;d++)n.add(d);continue}let i=/^(.+)\/(\d+)$/.exec(s),a=i?i[1]:s,l=i?Math.max(1,Number(i[2])):1;if(a==="*"){for(let d=r;d<=t;d+=l)n.add(d);continue}let c=/^(\d+)-(\d+)$/.exec(a);if(c){let d=Math.max(r,Number(c[1])),f=Math.min(t,Number(c[2]));for(let m=d;m<=f;m+=l)n.add(m);continue}let u=Number(a);Number.isInteger(u)&&u>=r&&u<=t&&n.add(u)}return n}function ho(e,r,t,n){let o=e.trim();return o==="*"?!0:Ux(o,t,n).has(r)}function Lx(e,r){let t=e.trim().split(/\s+/);if(t.length!==5)return!1;let[n,o,s,i,a]=t;return ho(n,r.getUTCMinutes(),0,59)&&ho(o,r.getUTCHours(),0,23)&&ho(s,r.getUTCDate(),1,31)&&ho(i,r.getUTCMonth()+1,1,12)&&ho(a,r.getUTCDay(),0,6)}var Bx=366*24*60;function Wx(e){return new Date(Date.UTC(e.getUTCFullYear(),e.getUTCMonth(),e.getUTCDate(),e.getUTCHours(),e.getUTCMinutes(),0,0))}function eh(e,r){if(!Mx(e))return null;let t=Wx(r);t=new Date(t.getTime()+6e4);for(let n=0;n<Bx;n++){if(Lx(e,t))return t;t=new Date(t.getTime()+6e4)}return null}function rh(e,r){if(e.scheduleKind==="runAt"&&e.runAt){let t=Date.parse(e.runAt);return Number.isNaN(t)?null:new Date(t).toISOString()}if(e.scheduleKind==="cron"&&e.cron){let t=eh(e.cron.trim(),r);return t?t.toISOString():null}return null}function Gc(e,r){if(e.scheduleKind!=="cron"||!e.cron?.trim())return null;let t=eh(e.cron.trim(),r);return t?t.toISOString():null}import{promises as Hx}from"node:fs";async function th(e){try{return await Hx.readFile(e,"utf8")}catch(r){if(r.code==="ENOENT")return null;throw r}}function Fx(e){if(!e)return[];try{let r=JSON.parse(e);return Array.isArray(r.entries)?r.entries:[]}catch{return[]}}async function lt(e=Pr()){let r=await th(e);return Fx(r)}async function nh(e,r){let{mkdir:t,writeFile:n,rename:o}=await import("node:fs/promises"),{randomBytes:s}=await import("node:crypto"),{dirname:i}=await import("node:path");await t(i(e),{recursive:!0});let a=`${e}.${s(4).toString("hex")}.tmp`,l=JSON.stringify({entries:r},null,2);await n(a,l,"utf8"),await o(a,e)}async function oh(e,r=Pr()){let t=await lt(r),n=t.findIndex(o=>o.providerScheduleId===e.providerScheduleId);n>=0?t[n]=e:t.push(e),await nh(r,t)}async function sh(e=Pr()){return await th(e)!==null?{created:!1}:(await nh(e,[]),{created:!0})}import{randomBytes as $x}from"node:crypto";import{promises as ko}from"node:fs";import Kx from"node:path";var Pi={version:1,jobs:{}};async function jx(e){try{return await ko.readFile(e,"utf8")}catch(r){if(r.code==="ENOENT")return null;throw r}}function Vx(e){if(!e)return{...Pi,jobs:{...Pi.jobs}};try{let r=JSON.parse(e);return r?.version!==1||typeof r.jobs!="object"||!r.jobs?{...Pi,jobs:{}}:r}catch{return{...Pi,jobs:{}}}}async function Ai(e){let r=await jx(e);return Vx(r)}async function Gx(e,r){await ko.mkdir(Kx.dirname(e),{recursive:!0});let t=$x(6).toString("hex"),n=`${e}.tmp-${process.pid}-${Date.now()}-${t}`;await ko.writeFile(n,`${JSON.stringify(r,null,2)}
-`,"utf8");try{await ko.rename(n,e)}catch(o){let s=o.code;if(s!=="EPERM"&&s!=="EEXIST"&&s!=="EACCES")throw o;await ko.unlink(n).catch(()=>{})}}async function ih(e,r){await Gx(e,r)}function ah(e,r){let t=e.jobs[r];if(t)return t;let n={providerScheduleId:r,nextFireAt:null,lastFiredAt:null,lastAttemptAt:null,consecutiveFailures:0,completedAt:null,inflightUntil:null};return e.jobs[r]=n,n}function Yx(e,r){if(!e.inflightUntil)return!1;let t=Date.parse(e.inflightUntil);return!Number.isNaN(t)&&t>r}function Jx(e){return!!e.completedAt}function qx(e,r,t,n){if(r.consecutiveFailures===0)return!0;if(e.spec.scheduleKind!=="cron"&&r.consecutiveFailures>t.maxRetries)return!1;if(!r.lastAttemptAt)return!0;let o=Date.parse(r.lastAttemptAt);return Number.isNaN(o)?!0:n-o>=t.retryBackoffMs}function zx(e,r,t){if(r.nextFireAt)return r.nextFireAt;let n=rh(e.spec,t);return r.nextFireAt=n,n}function Xx(e,r,t,n){if(e.paused||Jx(r)||Yx(r,t)||!qx(e,r,n,t))return!1;let o=r.nextFireAt?Date.parse(r.nextFireAt):NaN;return Number.isNaN(o)?!1:t>=o}function Qx(e,r,t){e.spec.scheduleKind==="cron"&&(r.nextFireAt=Gc(e.spec,t))}async function en(e={}){let r=e.env??mr(),t=e.now??new Date,n=t.getTime();if(!r.tickEnabled)return{enabled:!1,skipped:"tick_disabled",scanned:0,due:0,fired:0,skippedJobs:0,errors:0};if(!r.fireBaseUrl||!r.secret)return{enabled:!0,skipped:"missing_fire_credentials",scanned:0,due:0,fired:0,skippedJobs:0,errors:0};let o=Qg(r.lockPath);if(!o.acquired)return{enabled:!0,skipped:o.reason??"lock_not_acquired",scanned:0,due:0,fired:0,skippedJobs:0,errors:0,lockHeld:!0};try{let s=await lt(r.storePath),i=e.agentOsIdFilter?s.filter(m=>m.spec.target.agentOsId===e.agentOsIdFilter):s,a=await Ai(r.statePath),l=[];for(let m of i){let p=ah(a,m.providerScheduleId);zx(m,p,t),Xx(m,p,n,r)&&l.push({entry:m,job:p})}l.sort((m,p)=>{let g=Date.parse(m.job.nextFireAt??"")||0,k=Date.parse(p.job.nextFireAt??"")||0;return g-k});let c=0,u=0,d=0,f=r.maxCatchUpPerTick;for(let{entry:m,job:p}of l){if(r.missedRunPolicy==="skip"&&m.spec.scheduleKind==="cron"){let g=Date.parse(p.nextFireAt??"");if(!Number.isNaN(g)&&g<n-r.tickIntervalMs*2){p.nextFireAt=Gc(m.spec,t),d++;continue}}if(f<=0){d++;continue}p.inflightUntil=new Date(n+r.inflightLeaseMs).toISOString(),p.lastAttemptAt=t.toISOString(),Qx(m,p,t);try{let g=await qg({entry:m,baseUrl:r.fireBaseUrl,secret:r.secret,fetchFn:e.fetchFn});p.inflightUntil=null,g.ok?(p.lastFiredAt=t.toISOString(),p.consecutiveFailures=0,m.spec.scheduleKind==="runAt"&&(p.completedAt=t.toISOString(),p.nextFireAt=null),c++,f--):(p.consecutiveFailures+=1,u++)}catch{p.inflightUntil=null,p.consecutiveFailures+=1,u++}}return await ih(r.statePath,a),{enabled:!0,scanned:i.length,due:l.length,fired:c,skippedJobs:d,errors:u}}finally{Zg(r.lockPath)}}w();L();import lh from"node:path";var ch="mesh-cron-lease.json";function Ii(e){return _(lh.join(x(e),ch),null)}function uh(e,r){ce(lh.join(x(e),ch),{...r,updatedAt:new Date().toISOString()})}function dh(e){if(!e||typeof e!="object"||Array.isArray(e))return null;let r=e.response;if(!r||typeof r!="object"||Array.isArray(r))return null;let t=r.meshLiveness;if(!t||typeof t!="object"||Array.isArray(t))return null;let n=t.cronLease;if(!n||typeof n!="object"||Array.isArray(n))return null;let o=n;return{leaseToken:typeof o.leaseToken=="string"?o.leaseToken:null,holderBoxId:typeof o.holderBoxId=="string"?o.holderBoxId:null,authorized:o.authorized===!0,updatedAt:new Date().toISOString()}}w();import RE from"node:path";O();var Zx=1;function rn(e){if(!e||typeof e!="object")return 0;let r=e.startedCount;if(typeof r=="number")return r;let t=e.outcomes;return Array.isArray(t)?t.filter(n=>n.started).length:0}function eE(e){let{maxStarts:r,...t}=e;return t}async function Yc(e,r){if(r<=0)return{ok:!0,skipped:!0,reason:"no slots",maxStarts:0,startedCount:0};let t=eE(e);if(t.targetTaskId||t.targetTaskIds){let u=await _r({...t,execute:!0,pipeline:!0,maxStarts:String(r)});return{...typeof u=="object"&&u!==null?u:{},passes:{target:u},startedCount:rn(u)}}let n=Math.min(r,Zx),o=Math.max(0,r-n),s=await _r({...t,execute:!0,pipeline:!0,lane:"review",maxStarts:String(n)}),i=rn(s),a=o+(n-i);if(a<=0)return{...typeof s=="object"&&s!==null?s:{},passes:{review:s},startedCount:i};let l=await _r({...t,execute:!0,pipeline:!0,maxStarts:String(a)}),c=rn(l);return{passes:{review:s,work:l},startedCount:i+c,ok:!0}}function ph(e){if(!e||typeof e!="object")return[];let t=e.response?.dispatch?.exactTargetTaskIds;if(!Array.isArray(t))return[];let n=new Set,o=[];for(let s of t){if(typeof s!="string")continue;let i=s.trim();!i||n.has(i)||(n.add(i),o.push(i))}return o}function rE(e){let t=e.response?.dispatch;return t&&typeof t=="object"?t:null}function yo(e){return typeof e!="number"||!Number.isFinite(e)?null:Math.max(0,Math.floor(e))}function mh(e,r){let t=rE(r),n=yo(t?.recommendedMaxStarts),o=yo(t?.actionableReady),s=yo(t?.queuedTasks),i=yo(t?.boardAdvancedThisTick)??0,a=yo(t?.leaseReapedThisTick)??0,l=i+a,c=o??s,u=e.slotsAvailable;c!==null?u=Math.min(u,c):n!==null&&(u=Math.min(u,n)),c===null&&n!==null&&(u=Math.max(u,Math.min(e.slotsAvailable,n)));let d=t?.underutilized===!0||(c??0)>0&&e.slotsAvailable>0&&e.maxConcurrentWorkers>0&&e.activeWorkers<e.maxConcurrentWorkers;if(e.slotsAvailable>0&&u===0&&(d||l>0)){let m=c??(l>0?l:1);u=Math.min(e.slotsAvailable,Math.max(1,m))}let f=s!==null&&o!==null?Math.max(0,s-o):null;return{maxStarts:Math.max(0,u),underutilized:d,advisedStarts:n,actionableReady:o,queuedTasks:s,nonDispatchableReady:f,boardAdvancedThisTick:i,leaseReapedThisTick:a}}Mn();L();Pn();G();w();G();L();w();import tE from"node:path";O();async function fh(e){let r=B(e.baseUrl),t=await K(e.secret,e.agentOsId,{baseUrl:r}),n=`${r}/api/agent-os/by-id/${encodeURIComponent(e.agentOsId)}/tasks/${encodeURIComponent(e.taskId)}/plan-progress-sync`,o=await q(n,t,{phase:e.phase,taskId:e.taskId,blocker:e.blocker,artifact:e.artifact},{agentOsId:e.agentOsId,baseUrl:r});return{ok:o.ok,status:o.status,response:o.response}}async function gh(e,r){let t=U(e),n=String(r.agentOsId||"");if(!n)return[];let o=[];for(let s of Object.keys(t.workers||{})){let i=_(tE.join(x(t.id),"workers",R(s),"worker.json"),void 0);if(!i?.dispatched||!i.taskId)continue;let a=T(i);if(!a.heartbeatBlocker)continue;if(i.lastSyncedHeartbeatBlocker===a.heartbeatBlocker){o.push({worker:s,phase:"heartbeat_blocker",ok:!0,skipped:!0});continue}let l=await fh({agentOsId:n,taskId:i.taskId,phase:"heartbeat_blocker",blocker:a.heartbeatBlocker,baseUrl:r.baseUrl?String(r.baseUrl):void 0,secret:r.secret?String(r.secret):void 0});l.ok&&(i.lastSyncedHeartbeatBlocker=a.heartbeatBlocker,V(t.id,i)),o.push({worker:s,phase:"heartbeat_blocker",ok:l.ok})}return o}O();De();function nE(e=process.env){let r=v();return je(r,e)!=="forge"}function hh(e,r=process.env){if(nE(r))return e?.maxConcurrentWorkers??void 0}async function kh(e,r){let t=B(r.baseUrl?String(r.baseUrl):void 0),n=await K(r.secret?String(r.secret):void 0,e,{baseUrl:t}),o=`${t}/api/agent-os/by-id/${encodeURIComponent(e)}/runtime`;try{let s=await ls(o,n);if(!s.ok)return null;let a=s.response?.preferences?.maxConcurrentWorkers;if(a==null)return{maxConcurrentWorkers:null};let l=Number(a);return!Number.isFinite(l)||l<=0?{maxConcurrentWorkers:null}:{maxConcurrentWorkers:Math.floor(l)}}catch{return null}}O();De();import{spawnSync as oE}from"node:child_process";var sE=1e4,iE=4*1024*1024,yh=(e,r,t)=>{try{let n=oE(e,r,{encoding:"utf8",stdio:["ignore","pipe","pipe"],timeout:t?.timeoutMs??sE,maxBuffer:iE});return{ok:n.status===0,stdout:typeof n.stdout=="string"?n.stdout:"",stderr:typeof n.stderr=="string"?n.stderr:""}}catch(n){return{ok:!1,stdout:"",stderr:n instanceof Error?n.message:String(n)}}};function tn(e,r,t){let n=e(r,t);if(!n.ok||!n.stdout.trim())return null;try{return JSON.parse(n.stdout)}catch{return null}}function Rh(e,r,t){return`${e} ${r} ${t}`}function Ro(e){let r=e.lastIndexOf("@");if(r<=0||r===e.length-1)return null;let t=e.slice(0,r),n=e.slice(r+1);return!/^[^/\s]+\/[^/\s]+$/.test(t)||!/^[0-9a-f]{7,40}$/i.test(n)?null:{repo:t,sha:n}}function vh(e){let r=e.trim().match(/[/:]([^/]+\/[^/]+)\/(?:pull|pulls|merge_requests|pull-requests)\/(\d+)/i);if(!r)return null;let t=Number(r[2]);return!Number.isFinite(t)||t<=0?null:{repo:r[1],number:t}}var aE=8e3,lE=30,cE=100,uE=400;function Jc(e){return process.env.GITHUB_TOKEN?.trim()||process.env.GH_TOKEN?.trim()?!0:e("gh",["auth","token"]).ok}function nn(e){return e&&typeof e=="object"&&!Array.isArray(e)?e:null}function dE(e){return Array.isArray(e)?e.map(r=>nn(r)).filter(r=>r!==null).slice(0,lE).map(r=>({context:r.context??null,state:r.state??null,target_url:r.target_url??null,description:r.description??null})):[]}function bh(e,r,t){let n=tn(e,"gh",["api",`repos/${r}/commits/${t}/status`]);return n?{state:n.state??null,statuses:dE(n.statuses)}:null}var Sh={provider:"github",kind:"pr_snapshot",version:"1",isAvailable:Jc,collect(e,r){let t=vh(e);if(!t)return null;let n=tn(r,"gh",["api",`repos/${t.repo}/pulls/${t.number}`]);if(!n)return null;let o=nn(n.head),s=typeof o?.sha=="string"?o.sha:null,i=nn(n.user),a=nn(nn(o?.repo)?.owner),l=typeof n.body=="string"?n.body.slice(0,aE):null,c=[],u={state:null,statuses:[]};if(s){let m=tn(r,"gh",["api",`repos/${t.repo}/commits/${s}/check-runs?per_page=100`]);Array.isArray(m?.check_runs)&&(c=m.check_runs.map(p=>nn(p)).filter(p=>p!==null).slice(0,cE).map(p=>({name:p.name??null,status:p.status??null,conclusion:p.conclusion??null}))),u=bh(r,t.repo,s)??u}let d=r("gh",["api","--paginate",`repos/${t.repo}/pulls/${t.number}/files?per_page=100`,"--jq",".[].filename"]),f=d.ok?d.stdout.split(`
-`).map(m=>m.trim()).filter(Boolean).slice(0,uE):[];return{pull:{html_url:n.html_url??null,title:n.title??null,body:l,user:{login:i?.login??null},state:n.state??null,draft:n.draft??null,merged:n.merged??null,merged_at:n.merged_at??null,merge_commit_sha:n.merge_commit_sha??null,mergeable:n.mergeable??null,mergeable_state:n.mergeable_state??null,head:{sha:s,ref:o?.ref??null,repo:{owner:{login:a?.login??null}}}},checkRuns:c,combinedStatus:u,changedFiles:f}}},wh={provider:"github",kind:"commit_status",version:"1",isAvailable:Jc,collect(e,r){let t=Ro(e);return t?bh(r,t.repo,t.sha):null}},Ch={provider:"github",kind:"branch_reachability",version:"1",isAvailable:Jc,collect(e,r){let t=Ro(e);if(!t)return null;let n=tn(r,"gh",["api",`repos/${t.repo}`]),o=typeof n?.default_branch=="string"&&n.default_branch.trim()?n.default_branch.trim():null;if(!o)return null;let s=tn(r,"gh",["api",`repos/${t.repo}/compare/${encodeURIComponent(o)}...${t.sha}`]);if(!s)return null;let i=typeof s.status=="string"?s.status:null;return{defaultBranch:o,compareStatus:i,reachable:i==="identical"||i==="behind"}}};var pE=5,mE=/\b(READY|ERROR|BUILDING|QUEUED|CANCELED|INITIALIZING)\b/i,fE=/https:\/\/[^\s]+/,_h={provider:"vercel",kind:"deployment_status",version:"1",isAvailable(e){return e("vercel",["whoami"]).ok},collect(e,r){let t=Ro(e);if(!t)return null;let n=r("vercel",["list","--prod","--meta",`githubCommitSha=${t.sha}`]);if(!n.ok)return null;let o=[];for(let s of n.stdout.split(`
-`)){let i=s.match(fE)?.[0];if(!i)continue;let a=s.match(mE)?.[1]?.toUpperCase()??null;if(o.push({url:i,state:a}),o.length>=pE)break}return{found:o.length>0,deployments:o}}};var qc=[];function Oi(e){qc.some(r=>r.provider===e.provider&&r.kind===e.kind)||qc.push(e)}function xh(e,r){return qc.find(t=>t.provider===e&&t.kind===r)??null}function Eh(){Oi(Sh),Oi(wh),Oi(Ch),Oi(_h)}var gE=8,hE=25e3;function Ph(e,r={}){Eh();let t=r.run??yh,n=r.now??(()=>new Date),o=r.maxSubjects??gE,s=Date.now()+(r.deadlineMs??hE),i=new Set,a=e.filter(m=>{let p=Rh(m.provider,m.kind,m.subject);return i.has(p)?!1:(i.add(p),!0)}),l=a.length>0?Math.floor(n().getTime()/6e4)%a.length:0,u=a.map((m,p)=>a[(l+p)%a.length]).slice(0,o),d={attempted:0,collected:0,items:[],skipped:[]},f=new Map;for(let m of u){if(Date.now()>s){d.skipped.push({...m,reason:"budget_exhausted"});continue}let p=xh(m.provider,m.kind);if(!p){d.skipped.push({...m,reason:"no_recipe"});continue}let g=`${p.provider} ${p.kind}`,k=f.get(g);if(k===void 0&&(k=p.isAvailable(t),f.set(g,k)),!k){d.skipped.push({...m,reason:"provider_unavailable"});continue}d.attempted+=1;let h=p.collect(m.subject,t);if(h==null){d.skipped.push({...m,reason:"collect_failed"});continue}d.collected+=1,d.items.push({provider:m.provider,kind:m.kind,subject:m.subject,payload:h,observedAt:n().toISOString(),collectorVersion:p.version})}return d}L();w();import kE from"node:path";var yE="provider-evidence-wanted.json";function Ah(e){return kE.join(x(e),yE)}function Ih(e){if(!Array.isArray(e))return[];let r=[];for(let t of e){if(!t||typeof t!="object"||Array.isArray(t))continue;let n=t,o=typeof n.provider=="string"?n.provider.trim():"",s=typeof n.kind=="string"?n.kind.trim():"",i=typeof n.subject=="string"?n.subject.trim():"";!o||!s||!i||r.push({provider:o,kind:s,subject:i})}return r}function Oh(e){let r=_(Ah(e),null);return Ih(r?.wanted)}function Nh(e,r){ce(Ah(e),{savedAt:new Date().toISOString(),wanted:r})}function Th(e){if(!e||typeof e!="object"||Array.isArray(e))return null;let r=e.providerEvidenceWanted;return Array.isArray(r)?Ih(r):null}async function vE(e,r){let t=U(e),n=[];for(let o of Object.keys(t.workers||{})){let s=_(RE.join(x(t.id),"workers",R(o),"worker.json"),void 0);if(!s?.taskId||s.localOnly)continue;if(Qr(s)){n.push({worker:o,ok:!0,taskId:s.taskId??null,skipped:!0});continue}let i=T(s);if(!Z(i))continue;let a=Br({alive:i.alive,finalResult:i.finalResult,changedFiles:i.changedFiles,gitAncestry:i.gitAncestry});if(!s.dispatched&&!i.finalResult&&!a?.salvageable)continue;let l=await zn({run:e,name:o,agentOsId:String(r.agentOsId||s.agentOsId||""),...r});n.push({worker:o,ok:l.ok,taskId:s.taskId??null})}return n}async function bE(e,r,t,n,o){let s=B(n.baseUrl?String(n.baseUrl):void 0),i=await K(n.secret?String(n.secret):void 0,e,{baseUrl:s}),a=`${s}/api/agent-os/by-id/${encodeURIComponent(e)}/operator/tick`,l=await Ko(),c=Fs(r),u=null;try{let g=Oh(r);u=g.length>0?Ph(g):null}catch{u=null}let d=Ii(r),f=await Rr(a,i,{agentOsId:e,runId:r,ingestHarness:!0,harnessBoardSnapshot:Zr(r),resourceGate:t,boxResourceSnapshot:ro(t,{harnessRunId:r,boxKind:je(v())}),packageVersions:l,...o?{harnessCleanup:o}:{},runnerPresence:qe({runId:r}),activeHarnessWorkers:c,...d?.leaseToken?{meshCronLeaseToken:d.leaseToken}:{},...u&&u.items.length>0?{providerEvidence:u.items}:{}}),m=Th(f.response);if(m)try{Nh(r,m)}catch{}let p=dh(f);if(p)try{uh(r,p)}catch{}return{ok:f.ok,httpStatus:f.status,response:f.response,...u?{providerEvidence:{attempted:u.attempted,collected:u.collected,skipped:u.skipped.length}}:{}}}async function zc(e){let r=String(N(String(e.run||""),"--run")),t=String(N(String(e.agentOsId||""),"--agent-os-id")),n=e.execute!==!1&&e.execute!=="false";Ht({run:r});let o=await kh(t,e),s=hh(o),i=$r({runId:r,configuredMaxWorkersOverride:s}),a=Kc()?$c(r):void 0,l=await bE(t,r,i,e,a),c=km(r,l),u=await Cs(r,e),d=await vE(r,e),f=$r({runId:r,configuredMaxWorkersOverride:s}),m=qt(),p=await gh(r,e),g=mh(f,l),k=g.maxStarts,h=await zt({run:r,agentOsId:t,pipeline:!0,...e}),S=null,A=0,W=ph(l),E=k;if(n&&E>0&&W.length>0){let P=Math.min(E,W.length),H=await Yc({...e,run:r,agentOsId:t,targetTaskIds:W.join(",")},P),M=rn(H);A+=M,E=Math.max(0,E-M),S={exactTargetTaskIds:W,exact:H,startedCount:A}}if(n&&E>0){let P=await Yc({...e,run:r,agentOsId:t},E),H=rn(P);A+=H,S=S&&typeof S=="object"?{...S,broad:P,startedCount:A}:P}else!n||k<=0?S||(S={ok:!0,skipped:!0,reason:n?f.reason??"no slots or queued work":"execute disabled",maxStarts:0,dispatchAdvice:g,...W.length?{exactTargetTaskIds:W,exactOnly:!0}:{}}):S&&typeof S=="object"&&(S={...S,broadSkipped:!0,startedCount:A});let b=!g.underutilized&&k===0&&d.length===0&&A===0;return{runId:r,agentOsId:t,execute:n,resourceGate:i,dispatchResourceGate:f,leaseRenewal:u,completedWorkers:d,staleReconcile:m,harnessCleanup:a,planProgressSync:p,completionAckSync:c,operatorTick:l,sweep:h,dispatchAdvice:g,dispatch:S,idle:b}}O();import HE from"node:os";import{readFileSync as SE}from"node:fs";import{homedir as wE,platform as CE}from"node:os";import _E from"node:path";import{execFileSync as xE}from"node:child_process";function Dh(e,r=Date.now()){try{let t=JSON.parse(e),n=t.claudeAiOauth?.accessToken,o=t.claudeAiOauth?.expiresAt;return typeof n!="string"||!n||typeof o=="number"&&o-r<6e4?null:n}catch{return null}}function EE(){if(CE()==="darwin")try{let e=xE("security",["find-generic-password","-s","Claude Code-credentials","-w"],{encoding:"utf8",stdio:["ignore","pipe","ignore"]});return Dh(e.trim())}catch{return null}try{let e=SE(_E.join(wE(),".claude",".credentials.json"),"utf8");return Dh(e)}catch{return null}}function Mh(e=process.env,r={}){let t=e.ANTHROPIC_API_KEY?.trim();if(t)return{kind:"api_key",key:t};let n=e.KYNVER_CHAT_USE_CLAUDE_OAUTH;if(r.oauthOptIn===!0||n==="1"||n==="true"||n==="yes"){let s=EE();if(s)return{kind:"oauth",token:s}}return null}var PE="You are Claude Code, Anthropic's official CLI for Claude.";function AE(){return{blocks:[],stopReason:null,inputTokens:0,outputTokens:0}}function IE(e,r){let t=r;switch(t.type){case"message_start":return e.inputTokens=t.message?.usage?.input_tokens??0,"";case"content_block_start":{let n=t.index??e.blocks.length;return e.blocks[n]={type:t.content_block?.type==="tool_use"?"tool_use":"text",text:"",id:t.content_block?.id,name:t.content_block?.name,inputJson:""},""}case"content_block_delta":{let n=e.blocks[t.index??e.blocks.length-1];return n?t.delta?.type==="text_delta"&&t.delta.text?(n.text+=t.delta.text,t.delta.text):(t.delta?.type==="input_json_delta"&&t.delta.partial_json&&(n.inputJson+=t.delta.partial_json),""):""}case"message_delta":return t.delta?.stop_reason&&(e.stopReason=t.delta.stop_reason),typeof t.usage?.output_tokens=="number"&&(e.outputTokens=t.usage.output_tokens),"";default:return""}}function OE(e){let r=[];for(let t of e.blocks)if(t)if(t.type==="tool_use"){let n={};try{n=t.inputJson?JSON.parse(t.inputJson):{}}catch{n={}}r.push({type:"tool_use",id:t.id??"",name:t.name??"",input:n})}else t.text&&r.push({type:"text",text:t.text});return{content:r,stop_reason:e.stopReason??"end_turn",usage:{input_tokens:e.inputTokens,output_tokens:e.outputTokens}}}async function*NE(e){let r=e.getReader(),t=new TextDecoder,n="";try{for(;;){let{done:o,value:s}=await r.read();if(o)break;n+=t.decode(s,{stream:!0});let i;for(;(i=n.indexOf(`
-`))!==-1;){let a=n.slice(0,i).trim();if(n=n.slice(i+1),!a.startsWith("data:"))continue;let l=a.slice(5).trim();if(!(!l||l==="[DONE]"))try{yield JSON.parse(l)}catch{}}}}finally{r.releaseLock()}}function TE(e=process.env){return(e.ANTHROPIC_BASE_URL?.trim()||"https://api.anthropic.com").replace(/\/$/,"")}async function Uh(e){let{creds:r,model:t,payload:n}=e,o={"Content-Type":"application/json","anthropic-version":"2023-06-01"},s=n.system;r.kind==="api_key"?o["x-api-key"]=r.key:(o.Authorization=`Bearer ${r.token}`,o["anthropic-beta"]="oauth-2025-04-20",s=[{type:"text",text:PE},{type:"text",text:n.system}]);let i=await fetch(`${TE()}/v1/messages`,{method:"POST",headers:o,signal:e.signal,body:JSON.stringify({model:t,max_tokens:n.maxTokens,system:s,messages:n.messages,...Array.isArray(n.tools)&&n.tools.length>0?{tools:n.tools}:{},...n.temperature!==void 0?{temperature:n.temperature}:{},stream:!0})});if(!i.ok||!i.body){let l=await i.text().catch(()=>"");throw new Error(`Anthropic stream failed: HTTP ${i.status}${l?` \u2014 ${l.slice(0,300)}`:""}`)}let a=AE();for await(let l of NE(i.body)){let c=IE(a,l);c&&e.onDelta(c)}return OE(a)}var on=class{constructor(r,t=150){this.flushFn=r;this.floorMs=t}buffer="";timer=null;closed=!1;push(r){this.closed||!r||(this.buffer+=r,this.timer||(this.timer=setTimeout(()=>{this.timer=null,this.flushNow()},this.floorMs)))}flushNow(){if(!this.buffer)return;let r=this.buffer;this.buffer="",this.flushFn(r)}close(){this.closed||(this.closed=!0,this.timer&&(clearTimeout(this.timer),this.timer=null),this.flushNow())}};import{spawn as LE}from"node:child_process";var DE=new Set(["run list","run status","worker list","worker status","worker tail","status","cron status","monitor status","monitor list"]),ME=new Set(["run create","run dispatch","run sweep","worker start","worker stop","worker complete","cleanup"]),UE=["--secret","--api-key","--keeper-child"];function Lh(e){if(!Array.isArray(e)||e.length===0||e.some(n=>typeof n!="string"))return{ok:!1,mutating:!1,reason:"argv must be a non-empty string array"};for(let n of e){if(UE.some(o=>n===o||n.startsWith(`${o}=`)))return{ok:!1,mutating:!1,reason:`forbidden flag: ${n}`};if(n.includes(`
-`)||n.includes("\0"))return{ok:!1,mutating:!1,reason:"control characters refused"}}let r=e[0],t=e.length>1&&!e[1].startsWith("--")?`${r} ${e[1]}`:r;return t==="doctor runtime-takeover"?e.includes("--remediate-default-repo")?{ok:!0,mutating:!0}:{ok:!0,mutating:!1}:r==="cleanup"?{ok:!0,mutating:e.includes("--execute")}:DE.has(t)?{ok:!0,mutating:!1}:ME.has(t)?{ok:!0,mutating:!0}:{ok:!1,mutating:!1,reason:`verb not allowlisted: ${t}`}}var BE=10*6e4,WE=5e3,Bh=2e5;async function Wh(e,r,t={}){let n=Lh(e);if(!n.ok)return{exitCode:null,timedOut:!1,refused:n.reason};let o=t.cliEntry??process.argv[1],s=t.timeoutMs??BE,i=new on(r);return new Promise(a=>{let l=0,c=!1,u=LE(process.execPath,[o,...e],{stdio:["ignore","pipe","pipe"],env:process.env}),d=m=>{if(l>=Bh)return;let p=m.toString("utf8").slice(0,Bh-l);l+=p.length,i.push(p)};u.stdout?.on("data",d),u.stderr?.on("data",d);let f=setTimeout(()=>{c=!0,u.kill("SIGTERM"),setTimeout(()=>u.kill("SIGKILL"),WE).unref()},s);u.on("error",m=>{clearTimeout(f),i.push(`spawn failed: ${m.message}`),i.close(),a({exitCode:null,timedOut:!1,refused:void 0})}),u.on("close",m=>{clearTimeout(f),i.close(),a({exitCode:m,timedOut:c})})})}var FE=25e3,$E=32e3,KE=5e3,jE=6e4,Hh=5*6e4,VE=5e3,GE="claude-sonnet-4-6";async function YE(e,r,t){let n=t.KYNVER_RUNTIME_CHAT_BRIDGE_URL?.trim();if(n)return n;if(!e)return null;let o=new AbortController,s=setTimeout(()=>o.abort(),VE);try{let i=await fetch(`${e.replace(/\/$/,"")}/api/runtime/chat-bridge`,{headers:{Authorization:`Bearer ${r}`},signal:o.signal});if(!i.ok)return null;let a=await i.json().catch(()=>null);return typeof a?.bridgeUrl=="string"&&a.bridgeUrl.trim()?a.bridgeUrl.trim():null}catch{return null}finally{clearTimeout(s)}}async function Fh(e=process.env){let r=v(),t=r.agentOsId?.trim(),n=ee();if(!t||!n)return null;let o=await YE(r.apiBaseUrl,n,e);return o?{bridgeUrl:o.replace(/\/$/,""),agentOsId:t,apiKey:n,boxId:HE.hostname(),model:e.KYNVER_CHAT_MODEL?.trim()||r.defaultModel?.trim()||GE,useClaudeOauth:r.chatUseClaudeOauth===!0}:null}async function JE(e,r){let t=new AbortController,n=setTimeout(()=>t.abort(),$E),o=setInterval(()=>{r()&&t.abort()},500);try{let s=await fetch(`${e.bridgeUrl}/runtime-chat/claim`,{method:"POST",headers:{"Content-Type":"application/json",Authorization:`Bearer ${e.apiKey}`},body:JSON.stringify({agentOsId:e.agentOsId,boxId:e.boxId,waitMs:FE}),signal:t.signal});if(s.status===204)return null;if(s.status===401||s.status===403)return"auth_error";if(!s.ok)throw new Error(`claim failed: HTTP ${s.status}`);return(await s.json().catch(()=>null))?.turn??null}catch(s){if(r())return null;throw s}finally{clearTimeout(n),clearInterval(o)}}async function ct(e,r,t){return(await fetch(`${e.bridgeUrl}/runtime-chat/turns/${encodeURIComponent(r)}/events`,{method:"POST",headers:{"Content-Type":"application/json",Authorization:`Bearer ${e.apiKey}`},body:JSON.stringify({agentOsId:e.agentOsId,events:t})})).ok}async function qE(e,r){let t=0,n=Array.isArray(r.payload?.argv)?r.payload.argv:[],o=await Wh(n,s=>{ct(e,r.turnId,[{seq:t++,kind:"delta",text:s}])});o.refused?await ct(e,r.turnId,[{seq:t++,kind:"error",error:`command_refused: ${o.refused}`}]).catch(()=>{}):await ct(e,r.turnId,[{seq:t++,kind:"final",message:{exitCode:o.exitCode,timedOut:o.timedOut}}]).catch(()=>{}),console.error(JSON.stringify({event:"command_turn_done",turnId:r.turnId,argv:n.slice(0,4),exitCode:o.exitCode,timedOut:o.timedOut,refused:o.refused??null}))}async function zE(e,r){let t=0,n=!1,o=new AbortController,s=l=>{n||ct(e,r.turnId,[{seq:t++,kind:"delta",text:l}]).then(c=>{c||(n=!0,o.abort())})},i=new on(s),a=Mh(process.env,{oauthOptIn:e.useClaudeOauth});if(!a){await ct(e,r.turnId,[{seq:0,kind:"error",error:"no_local_credentials"}]).catch(()=>{});return}try{let l=await Uh({creds:a,model:e.model,payload:r.payload,onDelta:c=>i.push(c),signal:o.signal});i.close(),n||await ct(e,r.turnId,[{seq:t++,kind:"final",message:l}]),console.error(JSON.stringify({event:"chat_turn_done",turnId:r.turnId,model:e.model}))}catch(l){i.close(),n||await ct(e,r.turnId,[{seq:t++,kind:"error",error:l instanceof Error?l.message:String(l)}]).catch(()=>{}),console.error(JSON.stringify({event:"chat_turn_error",turnId:r.turnId,error:l instanceof Error?l.message:String(l)}))}}async function Xc(e,r){for(let n=0;n<e&&!r();n+=500)await new Promise(o=>setTimeout(o,Math.min(500,e-n)))}async function $h(e){let r=await Fh();for(r||console.error(JSON.stringify({event:"chat_claim_loop_waiting",reason:!ee()||!v().agentOsId?.trim()?"machine_not_linked":"bridge_not_discovered (rollout off, discovery route missing/404, or API unreachable)",rediscoverMs:Hh}));!r&&!e.shouldStop();){if(!ee()||!v().agentOsId?.trim()||(await Xc(Hh,e.shouldStop),e.shouldStop()))return;r=await Fh()}if(!(!r||e.shouldStop())){for(console.error(JSON.stringify({event:"chat_claim_loop_start",bridgeUrl:r.bridgeUrl,agentOsId:r.agentOsId,boxId:r.boxId,model:r.model,useClaudeOauth:r.useClaudeOauth}));!e.shouldStop();)try{let t=await JE(r,e.shouldStop);if(t==="auth_error"){console.error(JSON.stringify({event:"chat_claim_auth_error"})),await Xc(jE,e.shouldStop);continue}t&&(t.payload?.kind==="command"?await qE(r,t):await zE(r,t))}catch(t){console.error(JSON.stringify({event:"chat_claim_error",error:t instanceof Error?t.message:String(t)})),await Xc(KE,e.shouldStop)}console.error(JSON.stringify({event:"chat_claim_loop_stop"}))}}var XE=6e4,QE=5*6e4,ZE=10,eP=250;async function Qc(e,r){let t=e;for(;t>0&&!r();){let n=Math.min(eP,t);await gr(n),t-=n}}async function vo(e){Zt();let r=String(N(String(e.run||""),"--run")),t=String(N(String(e.agentOsId||v().agentOsId||""),"--agent-os-id")),n=e.execute!==!1&&e.execute!=="false",o=Number(e.intervalMs)>0?Math.floor(Number(e.intervalMs)):XE,s=!1,i=0;process.on("SIGINT",()=>{s=!0}),process.on("SIGTERM",()=>{s=!0});let a=$g(v());a.ok||(console.error(JSON.stringify({event:"daemon_start_blocked",runId:r,agentOsId:t,errors:a.errors})),process.exit(1)),console.error(JSON.stringify({event:"daemon_start",runId:r,agentOsId:t,execute:n,intervalMs:o,boxKind:a.box.boxKind,workerCapSource:a.workerCapSource,maxConcurrentWorkers:a.maxConcurrentWorkers}));let l=mr(),c=$h({shouldStop:()=>s}).catch(d=>{console.error(JSON.stringify({event:"chat_claim_loop_crashed",error:d instanceof Error?d.message:String(d)}))}),u=!1;for(;!s;)try{Vg({agentOsId:t,runId:r,instructionBundleVersion:vr()});let d=await ss(e.secret?String(e.secret):void 0,t);if(!d.ok){u||(u=!0,console.error(JSON.stringify({event:"daemon_runner_credential_missing",agentOsId:t,reason:d.reason,remedy:`run \`kynver runner credential --agent-os-id ${t}\` (or \`kynver bootstrap\`); ticks resume automatically once the credential exists`}))),await Qc(o,()=>s);continue}u&&(u=!1,console.error(JSON.stringify({event:"daemon_runner_credential_recovered",agentOsId:t}))),await nc({agentOsId:t,baseUrl:Ga(e.baseUrl?String(e.baseUrl):void 0),secret:d.secret});let f=await zc({run:r,agentOsId:t,execute:n,...e});if(console.error(JSON.stringify({event:"daemon_tick",...f})),l.tickEnabled){let k=Ii(r);if(k&&!k.authorized)console.error(JSON.stringify({event:"daemon_cron_tick_skipped",reason:"mesh_cron_lease_not_authorized",holderBoxId:k.holderBoxId}));else{let h=await en({env:l,agentOsIdFilter:t});h.enabled&&(h.fired>0||h.errors>0||h.lockHeld)&&console.error(JSON.stringify({event:"daemon_cron_tick",...h}))}}f.idle?i++:i=0;let m=Math.floor(Yr("daemon.maxIdleStreak",ZE)),p=Math.floor(Yr("daemon.idleIntervalMs",QE)),g=i>=m?p:o;await Qc(g,()=>s)}catch(d){console.error(JSON.stringify({event:"daemon_tick_error",error:d.message})),await Qc(o,()=>s)}await c,console.error(JSON.stringify({event:"daemon_stop",runId:r,agentOsId:t}))}O();import{spawn as rP}from"node:child_process";w();var tP=15*6e4,Kh=2*6e4,jh=1e4,nP=5e3,oP=5*6e4,sP=30*6e4,Vh=5e3;function iP(e,r=process.env){let t=typeof e=="string"?Number.parseInt(e,10):NaN;if(Number.isFinite(t)&&t>0)return t;let n=Number.parseInt(r.KYNVER_DAEMON_STALL_MS??"",10);return Number.isFinite(n)&&n>0?n:tP}function Ni(e,r=process.env){if(e.keeperChild===!0||e.keeperChild==="true"||e.noSupervise===!0||e.noSupervise==="true"||e.supervised==="false")return!1;let t=(r.KYNVER_DAEMON_SUPERVISED??"").trim().toLowerCase();return!(t==="0"||t==="false"||t==="no"||t==="off")}function aP(e,r=nP,t=oP){let n=Math.min(Math.max(e,1)-1,10);return Math.min(r*2**n,t)}function lP(e,r,t=sP){return r-e>=t}function ut(e,r={}){console.error(JSON.stringify({event:`daemon_keeper_${e}`,...r}))}function cP(e){let r=[];for(let t=0;t<e.length;t+=1){let n=e[t];if(!(n==="--supervised"||n==="--no-supervise"||n==="--keeper-child")){if(n==="--stall-ms"){t+1<e.length&&!e[t+1].startsWith("--")&&(t+=1);continue}n.startsWith("--stall-ms=")||n.startsWith("--supervised=")||r.push(n)}}return r.push("--keeper-child"),r}async function Ti(e,r=process.argv.slice(2)){let t=String(N(String(e.agentOsId||v().agentOsId||""),"--agent-os-id")),n=iP(e.stallMs),o=cP(r),s=process.argv[1],i=!1,a=null,l=0,c=u=>{i=!0,ut("stop",{signal:u}),a?.pid&&a.kill(u)};for(process.on("SIGINT",()=>c("SIGINT")),process.on("SIGTERM",()=>c("SIGTERM")),ut("start",{agentOsId:t,stallMs:n,childArgv:o});!i;){let u=Date.now(),d=!1,f=null,m=null;for(a=rP(process.execPath,[s,...o],{stdio:"inherit",env:process.env}),ut("child_spawned",{pid:a.pid??null}),a.on("exit",(k,h)=>{d=!0,f=k,m=h});!d&&!i&&(await gr(Vh),!(d||i));){if(Date.now()-u<Kh)continue;let k=Gg(t),h=k&&k.pid===a.pid?k:null;if(h&&Yg(h,n)){ut("stall_detected",{pid:a.pid??null,lastBeatAt:h.observedAt,stallMs:n}),a.kill("SIGTERM"),await gr(jh),d||a.kill("SIGKILL");break}if(!h&&Date.now()-u>n+Kh){ut("no_heartbeat_detected",{pid:a.pid??null,stallMs:n}),a.kill("SIGTERM"),await gr(jh),d||a.kill("SIGKILL");break}}for(;!d&&!i;)await gr(Vh);if(i)break;let p=Date.now();lP(u,p)&&(l=0),l+=1;let g=aP(l);ut("child_exited",{code:f,signal:m,uptimeMs:p-u,consecutiveFailures:l,respawnInMs:g}),await gr(g)}ut("stopped",{agentOsId:t})}L();import{existsSync as Ui}from"node:fs";async function Di(e=mr()){let r=await lt(e.storePath).catch(()=>[]),t=await Ai(e.statePath).catch(()=>({version:1,jobs:{}})),n=!!(e.fireBaseUrl&&e.secret),o=Ei(e),s="disabled";return o?s="kynver-cron-daemon":process.env.QSTASH_TOKEN?.trim()&&(s="qstash"),{primary:s,env:{storePath:e.storePath,statePath:e.statePath,tickEnabled:e.tickEnabled,fireBaseUrl:e.fireBaseUrl,missedRunPolicy:e.missedRunPolicy,maxCatchUpPerTick:e.maxCatchUpPerTick,maxRetries:e.maxRetries},jobCount:r.length,stateJobCount:Object.keys(t.jobs).length,credentialsReady:n,daemonPrimary:o}}import{homedir as fP}from"node:os";import gP from"node:path";import{existsSync as Gh,mkdirSync as uP,readFileSync as Yh,writeFileSync as dP}from"node:fs";import{homedir as pP}from"node:os";import Jh from"node:path";var Ar=Jh.join(pP(),".kynver",".env");function Zc(e){let r=new Map;for(let t of e.split(/\r?\n/)){let n=t.trim();if(!n||n.startsWith("#"))continue;let o=n.indexOf("=");if(o<=0)continue;let s=n.slice(0,o).trim(),i=n.slice(o+1).trim();(i.startsWith('"')&&i.endsWith('"')||i.startsWith("'")&&i.endsWith("'"))&&(i=i.slice(1,-1)),r.set(s,i)}return r}function mP(e,r=`# Managed by kynver cron install \u2014 safe to edit; re-run install to merge keys.
+`),n=!0)}let o={capturedAt:new Date(e.now??Date.now()).toISOString(),skipReason:e.skipReason,runId:e.indexed.runId,workerName:e.indexed.workerName,worktreePath:e.indexed.worktreePath,taskId:e.indexed.worker.taskId,agentOsId:e.indexed.worker.agentOsId,branch:e.indexed.worker.branch,completionBlocker:e.indexed.worker.completionBlocker,finalResult:e.status.finalResult,changedFiles:e.status.changedFiles,gitAncestry:e.status.gitAncestry,prUrl:e.status.prUrl??null,...n?{patchPath:t}:{}};return Mg(Wi.join(r,"evidence.json"),`${JSON.stringify(o,null,2)}
+`),o}var Wx=new Set(["completion_blocked","dirty_worktree","pr_or_unmerged_commits","landing_blocked"]);function Lx(e){return!Wx.has(e.skipReason)||Rr(e.indexed,e.now)?!1:Lg({harnessRoot:e.harnessRoot,runId:e.indexed.runId,workerName:e.indexed.workerName})?!0:e.writeSalvageEvidence?(Bg({harnessRoot:e.harnessRoot,indexed:e.indexed,skipReason:e.skipReason,status:e.status,now:e.now}),!0):!1}function Bx(e){let{indexed:r,includeOrphans:t,worktreesAgeMs:n,terminalWorktreesAgeMs:o}=e;return r?hr.has(r.run.status)||e.liveness&&iu(r,e.liveness)||e.liveness&&ne(ou(r,e.liveness))&&!Rr(r)?o:n:t?o:n}function Hx(e,r){if(e.harnessRoot?.trim())return Li.resolve(e.harnessRoot);let t=r.worker.workerDir;if(!t)return null;let n=`${Li.sep}runs${Li.sep}`,o=t.indexOf(n);return o<0?null:t.slice(0,o+n.length-1)}function Hg(e){let{indexed:r,includeOrphans:t,worktreesAgeMs:n,ageMs:o,orphanSafety:s,worktreeRemovalGuard:i}=e,a=e.now??Date.now();if(!r)return t?s??null:"orphan_without_flag";let l=Bx(e);if(n<=0&&!t&&l<=0)return"worktrees_disabled";if(l>0&&o<l)return"below_age_threshold";if(Rr(r,a))return"active_worker";let c=ou(r,e.liveness),u=Hx(e,r),d=p=>u&&Lx({indexed:r,harnessRoot:u,skipReason:p,status:c,now:a,writeSalvageEvidence:e.writeSalvageEvidence===!0})?null:p;if(Dg(r,c)){let p=d("completion_blocked");if(p)return p}if(nu(r,e.liveness?.gitStatusCache)){let p=d("dirty_worktree");if(p)return p}let f=e.liveness?.gitRevCache?.countAheadOfMain(e.worktreePath);if(f!=null&&f>0){let p=d("pr_or_unmerged_commits");if(p)return p}if(Tg(r,e.liveness,a)||!ne(c))return"run_still_active";if(Po(c)){let p=d("pr_or_unmerged_commits");if(p)return p}if(Ie(c.changedFiles).length>0){let p=d("dirty_worktree");if(p)return p}if(Xr({finalResult:c.finalResult,changedFiles:c.changedFiles,gitAncestry:c.gitAncestry,prUrl:yt(c.finalResult)}).blocked){let p=d("landing_blocked");if(p)return p}if(i&&e.worktreePath){let p=i({worktreePath:e.worktreePath,indexed:!!r,runId:r?.runId,worker:r?.workerName});if(p)return p.detail?{reason:p.reason,detail:p.detail}:p.reason}return null}function au(e){let{indexed:r,nodeModulesAgeMs:t,ageMs:n,worktreePath:o,activeWorktreePaths:s,diskPressure:i}=e;return!i&&n<t?"below_age_threshold":s.has(Li.resolve(o))||r&&Rr(r)?"active_worker":r&&nu(r,e.gitStatusCache)?"dirty_worktree":null}function Fg(e){return au(e)}var Io=216e5,Oo=6048e5,Bi=216e5,Hi=36e5,Fi=120;var $g=new Set(["active_worker","run_still_active","completion_blocked","landing_blocked"]);function Kg(e,r){let t=[],n=new Set,o=(s,i,a)=>{let l=`${s}\0${i}`;n.has(l)||t.length>=24||(n.add(l),t.push({path:s,reason:i,...a?{detail:a}:{}}))};for(let s of r)$g.has(s.reason)&&o(s.path,s.reason,s.detail);for(let s of e)!s.skipped||!s.skipReason||$g.has(s.skipReason)&&o(s.path,s.skipReason);return t}import{existsSync as Yg,readdirSync as Jg,statSync as Kx}from"node:fs";import qg from"node:path";M();_e();import jg from"node:path";C();function $x(e,r){return Ui(e,r)}function Vg(e,r=Date.now()){let t=new Set,n=new Set;for(let o of e){for(let s of gs(o)){let i=!1;for(let a of Object.keys(s.workers||{})){let l=_(jg.join(Bn(o,s.id),"workers",b(a),"worker.json"),void 0);if(!l?.worktreePath)continue;let c=jg.resolve(l.worktreePath);$x(l,r)&&(i=!0,t.add(c))}i&&n.add(`${o}\0${s.id}`)}for(let s of Jc(o))n.add(s)}return{activeWorktreePaths:t,liveRunKeys:n}}function Gg(e,r,t,n){return t?n.has(`${r}\0${t}`):!1}C();function jx(e,r){try{let t=Kx(e).mtimeMs;return Math.max(0,r-t)}catch{return 0}}function Vx(e,r){let t=qg.join(e,"runs",r,"run.json");return Yg(t)?_(t,null):null}function zg(e){try{return Jg(e).length===0}catch{return!1}}function Xg(e){let{harnessRoot:r,runId:t,runPath:n,ageMs:o,runDirectoriesAgeMs:s,activeGuards:i}=e;if(Gg(n,r,t,i.liveRunKeys)||!zg(n))return"run_still_active";let a=Vx(r,t);return a&&!hr.has(a.status)&&!gt(a)?"run_still_active":s>0&&o<s?"below_age_threshold":null}function Qg(e){if(!Yg(e.worktreesDir))return[];let r=[],t;try{t=Jg(e.worktreesDir,{withFileTypes:!0})}catch{return[]}for(let n of t){if(!n.isDirectory())continue;let o=n.name;if(e.runIdFilter&&o!==e.runIdFilter)continue;let s=qg.join(e.worktreesDir,o);zg(s)&&r.push({kind:"remove_run_directory",path:s,bytes:null,harnessRoot:e.harnessRoot,runId:o,ageMs:jx(s,e.now)})}return r}Ee();import{existsSync as cu,rmSync as lh}from"node:fs";import{existsSync as qx,rmSync as zx}from"node:fs";_e();import{lstatSync as Gx,readdirSync as Yx}from"node:fs";function Zg(e){try{let r=Gx(e),t=typeof process.getuid=="function"?process.getuid():null,n=typeof process.getgid=="function"?process.getgid():null,o=t!==null&&(r.uid!==t||n!==null&&r.gid!==n);return{uid:r.uid,gid:r.gid,foreign:o}}catch{return null}}function eh(e,r=32){let t=Zg(e);if(!t)return!1;if(t.foreign)return!0;try{let n=Yx(e),o=0;for(let s of n){if(o>=r)break;let i=`${e.replace(/\/$/,"")}/${s}`,a=Zg(i);if(o+=1,a?.foreign)return!0}}catch{}return!1}import{spawnSync as Jx}from"node:child_process";import nh from"node:path";import Oe from"node:path";function rh(e,r,t,n){let o=Oe.resolve(e),s=`${Oe.sep}${n}`,i=o.endsWith(s)?o:null;if(!i)return"path_outside_harness";let a=Oe.relative(t,i);if(a.startsWith("..")||Oe.isAbsolute(a))return"path_outside_harness";let l=a.split(Oe.sep);return l.length<3||l[l.length-1]!==n||!o.startsWith(Oe.resolve(r))?"path_outside_harness":null}function $i(e,r,t){return rh(e,r,t,"node_modules")}function Ki(e,r,t){return rh(e,r,t,".next")}function ji(e,r,t){let n=Oe.resolve(e),o=Oe.relative(t,n);return o.startsWith("..")||Oe.isAbsolute(o)||o.split(Oe.sep).length<3||!n.startsWith(Oe.resolve(r))?"path_outside_harness":null}function th(e,r,t){let n=Oe.resolve(e);return $i(n,r,t)===null||Ki(n,r,t)===null||ji(n,r,t)===null}function sh(){let e=(process.env.KYNVER_CLEANUP_PRIVILEGED??"auto").trim().toLowerCase();return e==="0"||e==="false"||e==="off"||e==="no"?"off":e==="1"||e==="true"||e==="force"||e==="yes"?"force":"auto"}function oh(e){let r=Jx("sudo",["-n",...e],{encoding:"utf8",stdio:["ignore","pipe","pipe"]});return{ok:r.status===0,stderr:`${r.stderr??""}${r.stdout??""}`.trim()}}function ih(e,r,t){if(!th(e,r,t))return{ok:!1,error:"path is not an allowed harness generated cache"};let n=typeof process.getuid=="function"?process.getuid():null,o=typeof process.getgid=="function"?process.getgid():null;if(n===null||o===null)return{ok:!1,error:"privileged reclaim requires POSIX uid/gid"};let s=oh(["chown","-R",`${n}:${o}`,nh.resolve(e)]);if(s.ok)return{ok:!0,method:"chown_then_rm"};let i=oh(["rm","-rf",nh.resolve(e)]);return i.ok?{ok:!0,method:"sudo_rm"}:{ok:!1,error:s.stderr||i.stderr||"sudo -n failed (password required or not permitted)"}}var lu="Root-owned harness caches require operator reclaim: configure passwordless sudo for chown/rm under ~/.kynver/harness/worktrees, or run `node scripts/reclaim-harness-root-owned-cache.mjs --execute` as the harness owner with sudo available. See docs/runbooks/harness-root-owned-cache-reclaim.md.";function Xx(e){let r=e?.code;return r==="EACCES"||r==="EPERM"}function ah(e,r,t={}){if(!qx(e.path))return{executed:!1,skipped:!0,skipReason:"missing_worktree"};if(!r)return{executed:!1,skipped:!0,skipReason:"dry_run"};let n=e.harnessRoot,o=n?ur(n):null,i=e.bytes??yr(e.path)??void 0,a=t.removePath??zx,l=t.hasForeignOwnedEntry??eh;try{return a(e.path,{recursive:!0,force:!0}),{executed:!0,skipped:!1,bytes:i}}catch(c){if(!Xx(c)||!n||!o)return{executed:!1,skipped:!0,skipReason:"remove_failed",error:c.message};let u=l(e.path),d=sh();if(!(d==="force"||d==="auto"&&u))return u?{executed:!1,skipped:!0,skipReason:"foreign_owner",error:`${c.message}; ${lu}`}:{executed:!1,skipped:!0,skipReason:"remove_failed",error:c.message};let m=ih(e.path,n,o);if(m.ok&&m.method==="sudo_rm")return{executed:!0,skipped:!1,bytes:i,privilegedReclaim:!0};if(m.ok)try{return a(e.path,{recursive:!0,force:!0}),{executed:!0,skipped:!1,bytes:i,privilegedReclaim:!0}}catch(p){return{executed:!1,skipped:!0,skipReason:"foreign_owner",error:`${p.message}; privileged chown succeeded but rm still failed`}}return{executed:!1,skipped:!0,skipReason:"foreign_owner",error:`${c.message}; privileged reclaim failed: ${m.error}; ${lu}`}}}function uu(e){let r=e.harnessRoot;return!r||!jc(e.path,r)?null:{...e,executed:!1,skipped:!0,skipReason:"run_metadata_protected"}}function du(e,r){let t=uu(e);if(t)return t;let n=ah(e,r);return{...e,bytes:n.bytes??e.bytes,executed:n.executed,skipped:n.skipped,skipReason:n.skipReason,error:n.error}}function ch(e,r){return du(e,r)}function uh(e,r){return du(e,r)}function dh(e,r){return du(e,r)}function ph(e,r){let t=uu(e);if(t)return t;if(!cu(e.path))return{...e,executed:!1,skipped:!0,skipReason:"missing_worktree"};if(!r)return{...e,executed:!1,skipped:!0,skipReason:"dry_run"};try{let n=e.bytes??yr(e.path);return lh(e.path,{recursive:!0,force:!0}),{...e,bytes:n,executed:!0,skipped:!1}}catch(n){return{...e,executed:!1,skipped:!0,skipReason:"remove_failed",error:n.message}}}function mh(e,r){let t=uu(e);if(t)return t;if(!cu(e.path))return{...e,executed:!1,skipped:!0,skipReason:"missing_worktree"};if(!r)return{...e,executed:!1,skipped:!0,skipReason:"dry_run"};let n=e.repo;try{let o=e.bytes??yr(e.path);return n&&me(n,["worktree","remove","--force",e.path],{allowFailure:!0}),cu(e.path)&&lh(e.path,{recursive:!0,force:!0}),{...e,bytes:o,executed:!0,skipped:!1}}catch(o){return{...e,executed:!1,skipped:!0,skipReason:"remove_failed",error:o.message}}}import{existsSync as Vi,readdirSync as Gi,statSync as Qx}from"node:fs";import rr from"node:path";function pu(e,r){try{let t=Qx(e).mtimeMs;return Math.max(0,r-t)}catch{return 0}}function gh(e,r){let t=rr.relative(r,e);return t===""||!t.startsWith("..")&&!rr.isAbsolute(t)}function fh(e,r,t,n){let o=[];for(let s of Mi){if(s===".next")continue;let i=rr.join(e,s);if(!Vi(i))continue;let a=rr.resolve(i);t.has(a)||gh(a,r.harnessRoot)&&(t.add(a),o.push({kind:"remove_build_cache",path:a,bytes:null,runId:n.runId,worker:n.worker,repo:n.repo,ageMs:pu(a,r.now)}))}return o}function hh(e){let r=[],t=new Set;for(let n of e.index.values())e.runIdFilter&&n.runId!==e.runIdFilter||r.push(...fh(n.worktreePath,e,t,{runId:n.runId,worker:n.workerName,repo:n.run.repo}));if(!e.includeOrphans||!Vi(e.worktreesDir))return r;for(let n of Gi(e.worktreesDir,{withFileTypes:!0})){if(!n.isDirectory())continue;let o=rr.join(e.worktreesDir,n.name);for(let s of Gi(o,{withFileTypes:!0})){if(!s.isDirectory())continue;let i=rr.join(o,s.name);r.push(...fh(i,e,t,{runId:n.name,worker:s.name}))}}return r}function kh(e){let r=e.worktreesAgeMs>0||e.includeOrphans,t=e.includeOrphans;if(!r&&!t)return[];let n=[],o=new Set;if(r)for(let i of e.index.values()){if(e.runIdFilter&&i.runId!==e.runIdFilter)continue;let a=i.worktreePath;Vi(a)&&(o.has(a)||(o.add(a),n.push({kind:"remove_worktree",path:a,bytes:null,runId:i.runId,worker:i.workerName,repo:i.run.repo,ageMs:pu(a,e.now)})))}if(!t||!Vi(e.worktreesDir))return n;let s=new Set;for(let i of e.index.values())s.add(rr.resolve(i.worktreePath));for(let i of Gi(e.worktreesDir,{withFileTypes:!0})){if(!i.isDirectory()||e.runIdFilter&&i.name!==e.runIdFilter)continue;let a=rr.join(e.worktreesDir,i.name),l;try{l=Gi(a,{withFileTypes:!0})}catch{continue}for(let c of l){if(!c.isDirectory())continue;let u=rr.resolve(rr.join(a,c.name));o.has(u)||s.has(u)||gh(u,e.harnessRoot)&&(o.add(u),n.push({kind:"remove_worktree",path:u,bytes:null,runId:i.name,worker:c.name,ageMs:pu(u,e.now)}))}}return n}import{existsSync as bh,readdirSync as yh,statSync as Zx}from"node:fs";import fn from"node:path";var eE=[{dirName:"node_modules",kind:"remove_node_modules"},{dirName:".next",kind:"remove_next_cache"}];function rE(e,r){try{let t=Zx(e).mtimeMs;return Math.max(0,r-t)}catch{return 0}}function tE(e,r){let t=fn.relative(r,e);return t===""||!t.startsWith("..")&&!fn.isAbsolute(t)}function nE(e,r,t,n,o,s){if(!bh(n))return;let i=fn.resolve(n);r.has(i)||tE(i,t.harnessRoot)&&(r.add(i),e.push({kind:o,path:i,bytes:null,harnessRoot:t.harnessRoot,runId:s.runId,worker:s.worker,repo:s.repo,ageMs:rE(i,t.now)}))}function Rh(e,r,t,n,o){for(let s of eE)nE(e,r,t,fn.join(n,s.dirName),s.kind,o)}function vh(e){let r=[],t=new Set;for(let n of e.index.values())e.runIdFilter&&n.runId!==e.runIdFilter||Rh(r,t,e,n.worktreePath,{runId:n.runId,worker:n.workerName,repo:n.run.repo});if(!e.includeOrphans||!bh(e.worktreesDir))return r;for(let n of yh(e.worktreesDir,{withFileTypes:!0})){if(!n.isDirectory()||e.runIdFilter&&n.name!==e.runIdFilter)continue;let o=fn.join(e.worktreesDir,n.name),s;try{s=yh(o,{withFileTypes:!0})}catch{continue}for(let i of s){if(!i.isDirectory())continue;let a=fn.join(o,i.name);Rh(r,t,e,a,{runId:n.name,worker:i.name})}}return r}Ee();import{existsSync as Sh,statSync as oE}from"node:fs";import tr from"node:path";function sE(e,r){try{let t=oE(e).mtimeMs;return Math.max(0,r-t)}catch{return 0}}function iE(e){let r=[],t=null;for(let n of e.split(`
+`)){if(!n.trim())continue;let[o,...s]=n.split(" "),i=s.join(" ");if(o==="worktree"){t&&r.push(t),t={path:i};continue}t&&(o==="branch"&&(t.branch=i),o==="HEAD"&&(t.head=i),o==="bare"&&(t.bare=!0))}return t&&r.push(t),r}function aE(e,r){let t=tr.relative(tr.resolve(r),tr.resolve(e));return t!==""&&!t.startsWith("..")&&!tr.isAbsolute(t)}var lE=200;function Ch(e){if(!e.includeOrphans||!Sh(e.worktreesDir))return[];let r=new Set;for(let s of e.index.values())s.run.repo&&r.add(tr.resolve(s.run.repo));let t=new Set;for(let s of e.index.values())t.add(tr.resolve(s.worktreePath));let n=[],o=new Set;for(let s of r){let i=0,a;try{a=me(s,["worktree","list","--porcelain"],{allowFailure:!0})}catch{continue}let l=iE(a);for(let c of l){if(i>=lE)break;let u=tr.resolve(c.path);if(u===tr.resolve(s)||!aE(u,e.worktreesDir)||t.has(u)||o.has(u)||!Sh(u))continue;let f=tr.relative(e.worktreesDir,u).split(tr.sep),m=f[0],p=f[1]??"unknown";o.add(u),i+=1,n.push({kind:"remove_worktree",path:u,bytes:null,runId:m,worker:p,repo:s,ageMs:sE(u,e.now)})}}return n}M();C();import No from"node:path";function wh(e,r){let t=No.resolve(r),n=new Map;for(let[o,s]of e){let i=s.harnessRoot?No.resolve(s.harnessRoot):null;i&&i!==t||n.set(o,s)}return n}function _h(e){let r=new Map;for(let t of gs(e))for(let n of Object.keys(t.workers||{})){let o=No.join(Bn(e,t.id),"workers",b(n),"worker.json"),s=_(o,void 0);s?.worktreePath&&r.set(No.resolve(s.worktreePath),{harnessRoot:e,worktreePath:No.resolve(s.worktreePath),runId:t.id,workerName:n,run:t,worker:s})}return r}function To(e){let r=process.env[e];return r==="1"||r==="true"||r==="yes"}function Rt(e,r){let t=process.env[e];if(!t)return r;let n=Number(t);return Number.isFinite(n)&&n>=0?n:r}function mu(e={}){let r=e.execute===!0||e.execute!==!1&&To("KYNVER_CLEANUP_EXECUTE"),t=e.finalizeStaleRuns!==!1&&!To("KYNVER_CLEANUP_SKIP_FINALIZE"),n=e.nodeModulesAgeMs??Rt("KYNVER_CLEANUP_NODE_MODULES_AGE_MS",216e5),o=e.scanDependencyCaches??(e.nodeModulesAgeMs!==void 0||process.env.KYNVER_CLEANUP_NODE_MODULES_AGE_MS!=null),s=e.worktreesAgeMs??Rt("KYNVER_CLEANUP_WORKTREES_AGE_MS",0),i=e.terminalWorktreesAgeMs??Rt("KYNVER_CLEANUP_TERMINAL_WORKTREES_AGE_MS",216e5),a=e.runDirectoriesAgeMs??Rt("KYNVER_CLEANUP_RUN_DIRECTORIES_AGE_MS",36e5),l=e.maxActionsPerSweep??Rt("KYNVER_CLEANUP_MAX_ACTIONS_PER_SWEEP",120),c=e.includeOrphans===!0||To("KYNVER_CLEANUP_INCLUDE_ORPHANS"),d=To("KYNVER_CLEANUP_SCOPE_ALL")||process.env.KYNVER_CLEANUP_SCOPE==="all"?e.runIdFilter:e.runIdFilter??(process.env.KYNVER_CLEANUP_RUN_ID||void 0),f=e.accountBytes!==!1&&!To("KYNVER_CLEANUP_SKIP_BYTE_ACCOUNTING"),m=Rt("KYNVER_CLEANUP_STORAGE_ENTRY_CAP",2e3),p=e.storagePerRunEntryCap!==void 0?e.storagePerRunEntryCap:f&&m>0?m:null,h=Rt("KYNVER_CLEANUP_BYTE_ENTRY_CAP",2e3),k=e.byteAccountingEntryCap??(Number.isFinite(h)&&h>0?Math.floor(h):2e3);return{execute:r,finalizeStaleRuns:t,scanDependencyCaches:o,nodeModulesAgeMs:n,worktreesAgeMs:s>0?s:0,terminalWorktreesAgeMs:i>=0?i:0,runDirectoriesAgeMs:a>=0?a:0,maxActionsPerSweep:Number.isFinite(l)&&l>0?Math.floor(l):120,includeOrphans:c,runIdFilter:d?String(d):void 0,accountBytes:f,storagePerRunEntryCap:p,byteAccountingEntryCap:k}}function xh(e){let r=process.env.KYNVER_CLEANUP_SCOPE==="all",t=Number(process.env.KYNVER_CLEANUP_WORKTREES_AGE_MS),n=r?Number.isFinite(t)&&t>0?t:6048e5:Number.isFinite(t)&&t>0?t:0;return mu({runIdFilter:r?void 0:e,worktreesAgeMs:n,terminalWorktreesAgeMs:r?216e5:void 0,runDirectoriesAgeMs:r?36e5:void 0,includeOrphans:r?!0:void 0,finalizeStaleRuns:!0,accountBytes:!0,scanDependencyCaches:!0})}Ee();import{existsSync as Eh}from"node:fs";import fu from"node:path";C();var cE=1800*1e3;function gu(e){let r=e.now??Date.now(),t=e.heartbeatFreshMs??cE;if(!Eh(e.worktreePath))return null;if(e.runId&&e.workerName){let c=fu.join(e.harnessRoot,"runs",e.runId,"workers",e.workerName),u=_(fu.join(c,"worker.json"),void 0);if(u&&su(u,r,t))return"active_worker"}let n=fu.join(e.worktreePath,".git");if(!Eh(n))return null;let o=re(e.worktreePath,["status","--porcelain"]);if(o.status!==0)return"pr_or_unmerged_commits";let s=o.stdout.split(`
+`).map(c=>c.trim()).filter(c=>c.length>0);if(Ie(s).length>0)return"dirty_worktree";let i=re(e.worktreePath,["rev-list","--count","@{u}..HEAD"]);if(i.status===0){let c=Number(i.stdout.trim());if(Number.isFinite(c)&&c>0)return"pr_or_unmerged_commits"}let a=re(e.worktreePath,["rev-list","--count","origin/main..HEAD"]);if(a.status!==0)return i.status!==0?"pr_or_unmerged_commits":null;let l=Number(a.stdout.trim());return Number.isFinite(l)&&l>0?"pr_or_unmerged_commits":null}_e();import{existsSync as uE}from"node:fs";import{homedir as dE}from"node:os";import Ph from"node:path";var pE=["/var/tmp/kynver-harness",Ph.join(dE(),".openclaw","harness")];function hu(e,r,t){if(!t?.trim())return;let n=ie(t.trim());e.has(n)||(e.add(n),r.push(n))}function mE(e){return e.scanWellKnown!=null?e.scanWellKnown:process.env.VITEST==="true"?!1:process.env.KYNVER_CLEANUP_SCAN_WELL_KNOWN!=="0"&&!["0","false","no"].includes((process.env.KYNVER_CLEANUP_SCAN_WELL_KNOWN??"").toLowerCase())}function Ah(e={}){let r=new Set,t=[];hu(r,t,e.harnessRoot??fe());let n=process.env.KYNVER_CLEANUP_EXTRA_ROOTS?.split(",").map(o=>o.trim()).filter(Boolean);for(let o of n??[])hu(r,t,o);if(mE(e))for(let o of pE){let s=Ph.resolve(o);!r.has(s)&&uE(s)&&hu(r,t,s)}return t}Bt();function fE(e){let r=process.env[e];return r==="1"||r==="true"||r==="yes"}function gE(e,r){let t=process.env[e];if(!t)return r;let n=Number(t);return Number.isFinite(n)?n:r}function Ih(e={}){let r=e.diskPath?.trim()||process.env.KYNVER_DISK_GUARD_PATH?.trim()||"/",t=gE("KYNVER_DISK_GUARD_MAX_USED_PERCENT",75),n=We({...e,diskPath:r,diskMaxUsedPercent:e.diskMaxUsedPercent??t}),o=!n.ok||n.usedPercent>=t,s=process.env.KYNVER_CLEANUP_DISK_PRESSURE_FORCE?.trim().toLowerCase();return s==="none"||s==="off"||s==="0"?o=!1:(s==="pressured"||s==="on"||s==="1")&&(o=!0),{diskGate:n,pressured:o,maxUsedPercent:t}}function Oh(e,r){if(!r.pressured)return e;let t=e.execute||!fE("KYNVER_CLEANUP_DRY_RUN_ON_PRESSURE");return{...e,execute:t,nodeModulesAgeMs:0,runIdFilter:void 0,includeOrphans:!0,terminalWorktreesAgeMs:0,runDirectoriesAgeMs:0,worktreesAgeMs:e.worktreesAgeMs>0?e.worktreesAgeMs:6048e5,diskPressure:!0,diskGate:r.diskGate}}Lt();function Ne(e,r){if(process.env.KYNVER_CLEANUP_QUIET==="1")return;let t=r?`: ${r}`:"";console.error(`[kynver cleanup] ${e}${t}`)}Ee();var Yi=class{aheadOfMain=new Map;countAheadOfMain(r,t="origin/main"){let n=`${r}\0${t}`;if(this.aheadOfMain.has(n))return this.aheadOfMain.get(n)??null;let o=re(r,["rev-list","--count",`${t}..HEAD`]);if(o.status!==0)return this.aheadOfMain.set(n,null),null;let s=Number(o.stdout.trim()),i=Number.isFinite(s)?s:null;return this.aheadOfMain.set(n,i),i}};import{spawnSync as hE}from"node:child_process";import{existsSync as kE}from"node:fs";import yE from"node:path";var RE=5e3;function bE(e,r){if(!kE(yE.join(e,".git")))return{status:null,stdout:"",stderr:"",error:"not_a_git_repo"};try{let t=hE("git",r,{cwd:e,encoding:"utf8",timeout:RE}),n=t.error?.message?.includes("ETIMEDOUT")===!0;return{status:n?null:t.status,stdout:t.stdout||"",stderr:t.stderr||"",error:n?"git_timeout":t.error?t.error.message:null}}catch(t){return{status:null,stdout:"",stderr:"",error:t.message}}}function Nh(e){let r=bE(e,["status","--short"]);return r.error==="not_a_git_repo"?[]:r.error==="git_timeout"||r.status!==0?null:r.stdout.split(`
+`).map(t=>t.trim()).filter(Boolean)}var Ji=class{cache=new Map;porcelain(r){let t=r,n=this.cache.get(t);if(n!==void 0)return n;let o=Nh(t)??[];return this.cache.set(t,o),o}};var qi=class{cache=new Map;derive(r){let t=this.cache.get(r.id);if(t!==void 0)return t;let n=gt(r);return this.cache.set(r.id,n),n}};function vE(e){let r={};for(let t of e)r[t.kind]=(r[t.kind]??0)+1;return r}function Th(e,r={}){let t=r.maxSampleActions??12,n=r.maxSampleSkips??8;return{harnessRoot:e.harnessRoot,scanRoots:e.scanRoots,dryRun:e.dryRun,execute:e.execute,scannedAt:e.scannedAt,finalizedRuns:e.finalizedRuns.length,actionCount:e.actions.length,actionKinds:vE(e.actions),totals:e.totals,...e.storage?{storage:e.storage}:{},...e.preservedLivePaths?.length?{preservedLivePaths:e.preservedLivePaths}:{},...e.removedRunDirectories!=null?{removedRunDirectories:e.removedRunDirectories}:{},sampleActions:e.actions.slice(0,t).map(o=>({kind:o.kind,path:o.path,...o.skipReason?{skipReason:o.skipReason}:{},...o.bytes!=null?{bytes:o.bytes}:{},...o.runId?{runId:o.runId}:{},...o.worker?{worker:o.worker}:{}})),sampleSkips:e.skips.slice(0,n)}}function SE(e={}){let r=e.harnessRoot?ie(e.harnessRoot):fe(),t=Ah({harnessRoot:r}),n=e.now??Date.now();return{harnessRoot:r,scanRoots:t,now:n}}function CE(e){return typeof e=="string"?{reason:e}:e}function gn(e,r,t,n){e.push({path:r,reason:t,...n?{detail:n}:{}})}function zi(e,r,t){return!r||e.bytes!=null?e:{...e,bytes:yr(e.path,t)}}function Dh(e,r){let t={};for(let n of r)t[n.reason]=(t[n.reason]??0)+1;for(let n of e)n.skipReason&&(t[n.skipReason]=(t[n.skipReason]??0)+1);return t}function wE(e,r){return e.kind==="remove_next_cache"?uh(e,r):ch(e,r)}function _E(e,r,t){return e.kind==="remove_next_cache"?Ki(e.path,r,t):$i(e.path,r,t)}function xE(e){let r=new Map;for(let t of e)for(let[n,o]of _h(t))r.set(n,o);return r}function Mh(e,r){return e.runId&&e.worker?Te.join(r,e.runId,e.worker):Te.resolve(e.path,"..")}function Xi(e={}){let r=mu(e),t=Ih();r=Oh(r,t);let n=SE(e);Ne("scan",`${n.scanRoots.length} harness root(s)`);let o=Vg(n.scanRoots,n.now),s=r.finalizeStaleRuns?xo().map(w=>({runId:w.runId,from:w.from,to:w.to})):[];s.length>0&&Ne("finalize",`${s.length} stale run(s) marked terminal`),Ne("index","building worktree index");let i=xE(n.scanRoots);Ne("index",`${i.size} indexed worktree(s)`);let a={runTerminalCache:new qi,gitStatusCache:new Ji,gitRevCache:new Yi},l=[],c=[],u=new Set,d=r.maxActionsPerSweep,f=()=>c.length>=d;for(let w of n.scanRoots){if(f())break;Ne("root",w);let le=Te.join(w,"worktrees"),Z=wh(i,w),or={harnessRoot:w,worktreesDir:le,nodeModulesAgeMs:r.nodeModulesAgeMs,worktreesAgeMs:r.worktreesAgeMs,includeOrphans:r.includeOrphans,runIdFilter:r.runIdFilter,index:Z,now:n.now},It=r.scanDependencyCaches?vh(or):[];Ne("dependency",r.scanDependencyCaches?`${It.length} cache candidate(s) at ${w}`:"skipped (worktree-only sweep)");let je=0;for(let ve of It){if(f())break;je+=1,je%50===0&&Ne("dependency",`${je}/${It.length} evaluated`);let ee=Te.resolve(ve.path);if(u.has(ee))continue;u.add(ee);let W={...ve,path:ee},Se=_E(W,w,le);if(Se){gn(l,W.path,Se),c.push({...W,executed:!1,skipped:!0,skipReason:Se});continue}let Ce=Mh(W,le),sr=Z.get(Te.resolve(Ce))??null,ue=au({indexed:sr,includeOrphans:!0,nodeModulesAgeMs:r.nodeModulesAgeMs,ageMs:W.ageMs,worktreePath:Ce,activeWorktreePaths:o.activeWorktreePaths,diskPressure:r.diskPressure,gitStatusCache:a.gitStatusCache});if(ue){gn(l,W.path,ue),c.push({...W,executed:!1,skipped:!0,skipReason:ue});continue}c.push(wE(zi(W,r.accountBytes,r.byteAccountingEntryCap),r.execute))}if(r.scanDependencyCaches)for(let ve of hh(or)){if(f())break;let ee=Te.resolve(ve.path);if(u.has(ee))continue;u.add(ee);let W={...ve,path:ee},Se=ji(W.path,w,le);if(Se){gn(l,W.path,Se),c.push({...W,executed:!1,skipped:!0,skipReason:Se});continue}let Ce=Mh(W,le),sr=Z.get(Te.resolve(Ce))??null,ue=Fg({indexed:sr,includeOrphans:!0,nodeModulesAgeMs:r.nodeModulesAgeMs,ageMs:W.ageMs,worktreePath:Ce,activeWorktreePaths:o.activeWorktreePaths,diskPressure:r.diskPressure,gitStatusCache:a.gitStatusCache});if(ue){gn(l,W.path,ue),c.push({...W,executed:!1,skipped:!0,skipReason:ue});continue}c.push(dh(zi(W,r.accountBytes,r.byteAccountingEntryCap),r.execute))}let Hr=[...kh(or),...Ch(or)];Ne("worktrees",`${Hr.length} candidate(s) at ${w}`);let vr=new Set,ce=0;for(let ve of Hr){if(f())break;ce+=1,ce%50===0&&Ne("worktrees",`${ce}/${Hr.length} evaluated`);let ee=Te.resolve(ve.path);if(vr.has(ee))continue;vr.add(ee);let W={...ve,path:ee},Se=Z.get(Te.resolve(W.path))??null,Ce=Se?null:gu({worktreePath:W.path,harnessRoot:w,runId:W.runId,workerName:W.worker,now:n.now}),sr=Hg({indexed:Se,worktreePath:Te.resolve(W.path),includeOrphans:r.includeOrphans,worktreesAgeMs:r.worktreesAgeMs,terminalWorktreesAgeMs:r.terminalWorktreesAgeMs,ageMs:W.ageMs,orphanSafety:Ce,worktreeRemovalGuard:e.worktreeRemovalGuard,liveness:a,now:n.now,harnessRoot:w,writeSalvageEvidence:r.execute});if(sr){let{reason:ue,detail:Sr}=CE(sr);gn(l,W.path,ue,Sr),c.push({...W,executed:!1,skipped:!0,skipReason:ue});continue}c.push(mh(zi(W,r.accountBytes,r.byteAccountingEntryCap),r.execute))}if(!f()&&r.runDirectoriesAgeMs>=0)for(let ve of Qg({harnessRoot:w,worktreesDir:le,runDirectoriesAgeMs:r.runDirectoriesAgeMs,runIdFilter:r.runIdFilter,activeGuards:o,now:n.now})){if(f())break;let ee=Te.resolve(ve.path);if(u.has(ee))continue;u.add(ee);let W={...ve,path:ee},Se=W.runId??Te.basename(ee),Ce=Xg({harnessRoot:w,runId:Se,runPath:ee,ageMs:W.ageMs,runDirectoriesAgeMs:r.runDirectoriesAgeMs,activeGuards:o});if(Ce){gn(l,W.path,Ce),c.push({...W,executed:!1,skipped:!0,skipReason:Ce});continue}c.push(ph(zi(W,r.accountBytes,r.byteAccountingEntryCap),r.execute))}}let m=0,p=0,h=0,k=0,g=0,R=0;for(let w of c)w.bytes&&(m+=w.bytes),!w.skipped&&!w.executed&&w.bytes&&(h+=w.bytes),w.executed?(g+=1,k+=w.bytes??0,w.kind==="remove_run_directory"&&(p+=1)):w.skipped&&(R+=1,w.skipReason==="dry_run"&&w.bytes&&(h+=w.bytes));let I=r.accountBytes?ru({harnessRoot:n.harnessRoot,now:n.now,perRunEntryCap:r.storagePerRunEntryCap}):void 0,E=cr(),P=r.execute&&xc(E),D=P?bo({execute:!0}):null,j=E?{observed:!0,execute:P,dumpCount:E.dumpCount,totalBytes:E.totalBytes,removedCount:D?.removed.length??0,removedBytes:D?.removedBytes??0,executables:E.executables,path:E.path,reason:E.reason}:void 0;D&&D.removed.length>0&&(k+=D.removedBytes,g+=D.removed.length,Ne("wsl-crashes",`removed ${D.removed.length} dump(s), ${D.removedBytes} bytes`)),Ne("complete",`${c.length} action(s), ${R} skipped, ${g} removed`);let F=Kg(c,l),U=Th({harnessRoot:n.harnessRoot,scanRoots:n.scanRoots,dryRun:!r.execute,execute:r.execute,nodeModulesAgeMs:r.nodeModulesAgeMs,worktreesAgeMs:r.worktreesAgeMs,includeOrphans:r.includeOrphans,diskPressure:r.diskPressure,diskGate:r.diskGate?{ok:r.diskGate.ok,path:r.diskGate.path,freeBytes:r.diskGate.freeBytes,usedPercent:r.diskGate.usedPercent,reason:r.diskGate.reason}:void 0,scannedAt:new Date(n.now).toISOString(),finalizedRuns:s,actions:c,skips:l,totals:{candidateBytes:m,reclaimableBytes:h,removedBytes:k,removedPaths:g,skippedPaths:R,skipReasons:Dh(c,l)},...I?{storage:I}:{},...F.length>0?{preservedLivePaths:F}:{},...p>0?{removedRunDirectories:p}:{},...j?{wslCrashDumps:j}:{}});return{harnessRoot:n.harnessRoot,scanRoots:n.scanRoots,dryRun:!r.execute,execute:r.execute,nodeModulesAgeMs:r.nodeModulesAgeMs,worktreesAgeMs:r.worktreesAgeMs,includeOrphans:r.includeOrphans,diskPressure:r.diskPressure,diskGate:r.diskGate?{ok:r.diskGate.ok,path:r.diskGate.path,freeBytes:r.diskGate.freeBytes,usedPercent:r.diskGate.usedPercent,reason:r.diskGate.reason}:void 0,scannedAt:new Date(n.now).toISOString(),finalizedRuns:s,actions:c,skips:l,totals:{candidateBytes:m,reclaimableBytes:h,removedBytes:k,removedPaths:g,skippedPaths:R,skipReasons:Dh(c,l)},...I?{storage:I}:{},...F.length>0?{preservedLivePaths:F}:{},...p>0?{removedRunDirectories:p}:{},...j?{wslCrashDumps:j}:{},compactSummary:U}}function ku(e){let r=xh(e);return Xi({execute:r.execute,finalizeStaleRuns:r.finalizeStaleRuns,accountBytes:r.accountBytes,nodeModulesAgeMs:r.nodeModulesAgeMs,worktreesAgeMs:r.worktreesAgeMs,includeOrphans:r.includeOrphans,runIdFilter:r.runIdFilter})}function yu(){return process.env.KYNVER_PIPELINE_CLEANUP!=="0"}O();import{mkdirSync as SR,realpathSync as CR}from"node:fs";import{fileURLToPath as NO}from"node:url";O();C();kl();import EE from"node:os";function PE(e){let r=(typeof e.apiBaseUrl=="string"?e.apiBaseUrl:void 0)||(typeof e.baseUrl=="string"?e.baseUrl:void 0)||process.env.KYNVER_API_URL||v().apiBaseUrl;return r?ir(String(r)):void 0}async function AE(e,r){let t=await fetch(`${e}/api/agent-os`,{headers:{Authorization:`Bearer ${r}`}});if(!t.ok)return null;let n=await t.json().catch(()=>null);if(!n?.primarySlug)return null;let o=n.items?.find(s=>s.slug===n.primarySlug);return o?.id&&o.slug?{id:o.id,slug:o.slug}:{id:"",slug:n.primarySlug}}async function Qi(e){let r=PE(e);r||(console.error("kynver bootstrap requires a Kynver URL \u2014 pass --api-base-url https://your-kynver-site or set KYNVER_API_URL."),process.exit(1)),oe()||(typeof e.apiKey=="string"?Xn(e.apiKey):(await hl({...e,apiBaseUrl:r})).ok||process.exit(1));let t=oe();t||(console.error("No API key after login \u2014 aborting."),process.exit(1));let n=await AE(r,t);n||(console.error("Could not resolve your AgentOS workspace from the account. Confirm this account has AgentOS access, then retry."),process.exit(1));let o={...e,apiBaseUrl:r,agentOsSlug:n.slug,...n.id?{agentOsId:n.id}:{},...typeof e.repo=="string"?{}:{discoverRepo:!0}};await Os(o),console.log(""),console.log(`  Bootstrap complete \u2014 ${EE.hostname()} is linked to workspace "${n.slug}".`),console.log("  Next: `kynver start` \u2014 brings the agent online and configures local Kynver Cron when needed."),console.log("  Persistent background service (Linux): `kynver cron install --install-systemd` after your first start."),console.log("  (Advanced: `kynver run create --repo /path/to/repo` + `kynver daemon --run <RUN_ID> --agent-os-id <AOS_ID> --execute`.)")}O();import XA from"node:os";O();ar();O();import IE from"node:path";import{homedir as OE}from"node:os";var Ru=IE.join(OE(),".kynver","config.json");function Do(e){let r=v(),t=Ai({...e,config:r});if(!t)return{ok:!1,remediated:!1,alreadyPersisted:!1,configPath:q(Ru),resolved:null,reason:"No Kynver git checkout found. Clone the repo, cd into it, then run `kynver setup --repo /path/to/Kynver` (or export KYNVER_DEFAULT_REPO).",remediation:"Clone the Kynver monorepo, cd into it, then run `kynver config ensure-default-repo` (or `kynver setup --repo /path/to/Kynver`)."};if(t.persistedInConfig)return{ok:!0,remediated:!1,alreadyPersisted:!0,configPath:q(Ru),resolved:cn(t),config:qt(r)};let n=Ii(t.repo,r),o=cn({...t,persistedInConfig:!0,source:"config"});return{ok:!0,remediated:!0,alreadyPersisted:!1,configPath:q(Ru),resolved:o,config:qt(n),remediation:"defaultRepo persisted in ~/.kynver/config.json \u2014 `kynver run create` no longer requires --repo."}}function Uh(e=!1){let r=Do();if(e){console.log(JSON.stringify(r,null,2)),r.ok||(process.exitCode=1);return}if(!r.ok){console.error(r.reason??"Could not resolve a Kynver git checkout."),r.remediation&&console.error(r.remediation),process.exitCode=1;return}if(r.alreadyPersisted){console.log(`defaultRepo already set (${r.resolved?.defaultRepo??"unknown"}) in ${r.configPath}`);return}console.log(`Persisted defaultRepo ${r.resolved?.defaultRepo??""} in ${r.configPath}. \`kynver run create\` can omit --repo.`)}function Wh(e){return e?e.persistedInConfig?{status:"pass"}:{status:"warn",remediation:"Run `kynver config ensure-default-repo` to persist defaultRepo in ~/.kynver/config.json (or `kynver doctor runtime-takeover --remediate-default-repo`)."}:{status:"warn",remediation:"Run `kynver config ensure-default-repo` from a Kynver checkout (or `kynver setup --repo /path/to/Kynver`)."}}O();Ue();xs();import NE from"node:os";function Lh(e,r){console.error(JSON.stringify({event:"daemon_identity",level:e,message:r}))}function Bh(e=v(),r=process.env){let t=Me(r,e),n=_s({config:e,totalMemBytes:NE.totalmem(),env:r}),o=[...t.warnings],s=[];if(!e.boxKind?.trim()&&!r.KYNVER_BOX_KIND?.trim()&&o.push("boxKind is not persisted in ~/.kynver/config.json \u2014 run `kynver setup --box-kind forge|ghost` so Command Center attributes snapshots to the correct pool"),t.slugInferenceBlocked){let a=r.KYNVER_DAEMON_STRICT_IDENTITY==="1"||r.KYNVER_DAEMON_STRICT_IDENTITY==="true",l="ambiguous box identity: KYNVER_AGENT_OS_SLUG is set without KYNVER_BOX_KIND or config.boxKind; treating this host as forge";a?s.push(l):o.push(l)}let i=s.length===0;for(let a of o)Lh("warn",a);for(let a of s)Lh("error",a);return{ok:i,box:t,workerCapSource:n.workerCapSource,maxConcurrentWorkers:n.configuredMaxWorkers??n.autoCap,autoCap:n.autoCap,warnings:o,errors:s}}import{mkdirSync as TE,readFileSync as DE,renameSync as ME,writeFileSync as UE}from"node:fs";import{homedir as WE}from"node:os";import Hh from"node:path";function Fh(e){let r=e.replace(/[^A-Za-z0-9_-]/g,"_");return Hh.join(WE(),".kynver",`daemon-heartbeat-${r}.json`)}function $h(e){try{let r=Fh(e.agentOsId);TE(Hh.dirname(r),{recursive:!0});let t={observedAt:(e.now??new Date).toISOString(),pid:process.pid,runId:e.runId,agentOsId:e.agentOsId,...e.instructionBundleVersion?{instructionBundleVersion:e.instructionBundleVersion}:{}},n=`${r}.tmp-${process.pid}`;UE(n,JSON.stringify(t),"utf8"),ME(n,r)}catch{}}function Kh(e){try{let r=DE(Fh(e),"utf8"),t=JSON.parse(r);return typeof t?.observedAt!="string"?null:t}catch{return null}}function jh(e,r,t=Date.now()){if(!e)return!1;let n=Date.parse(e.observedAt);return Number.isNaN(n)?!0:t-n>r}function LE(e){let r=process.env[e]?.trim().toLowerCase();return r==="1"||r==="true"||r==="yes"||r==="on"}function hn(){process.platform==="win32"&&(LE("KYNVER_DAEMON_ALLOW_NATIVE_WINDOWS")||(console.error(JSON.stringify({event:"daemon_start_blocked",reason:"native_windows_console_flash",remedy:"Run the daemon inside WSL: .\\scripts\\start-tier2-wsl.ps1 \u2014 or set KYNVER_DAEMON_ALLOW_NATIVE_WINDOWS=1 to override (flashes visible consoles)."})),process.exit(1)))}O();import{existsSync as BE}from"node:fs";import{homedir as HE}from"node:os";import FE from"node:path";function Vh(e,r){let t=process.env[e]?.trim().toLowerCase();return t?t==="0"||t==="false"||t==="no"||t==="off"?!1:t==="1"||t==="true"||t==="yes"||t==="on"?!0:r:r}function Mo(e,r,t=1){let n=Number(process.env[e]);return!Number.isFinite(n)||n<t?r:Math.floor(n)}function Wr(){let e=process.env.KYNVER_CRON_STORE_PATH?.trim()||process.env.OPENCLAW_CRON_STORE_PATH?.trim();return e||FE.join(HE(),".kynver","agent-os-cron.json")}function $E(e=Wr()){let r=process.env.KYNVER_CRON_TICK_STATE_PATH?.trim();return r||`${e.replace(/\.json$/i,"")}.tick-state.json`}function KE(){let e=v();return process.env.KYNVER_API_URL?.trim()||e.apiBaseUrl?.trim()||process.env.KYNVER_CRON_FIRE_BASE_URL?.trim()||process.env.OPENCLAW_CRON_FIRE_BASE_URL?.trim()||null}function bu(){return process.env.KYNVER_CRON_SECRET?.trim()||process.env.OPENCLAW_CRON_SECRET?.trim()||process.env.KYNVER_RUNTIME_SECRET?.trim()||null}function br(){let e=Wr(),r=$E(e),t=KE(),n=bu(),o=!!(t&&n),s=BE(e),i=o&&(s||Vh("KYNVER_CRON_TICK_FORCE",!1));return{storePath:e,statePath:r,lockPath:`${r}.lock`,fireBaseUrl:t,secret:n,tickEnabled:Vh("KYNVER_CRON_TICK_ENABLED",i),tickIntervalMs:Mo("KYNVER_CRON_TICK_INTERVAL_MS",6e4,5e3),missedRunPolicy:process.env.KYNVER_CRON_MISSED_RUN_POLICY?.trim().toLowerCase()==="skip"?"skip":"catch_up",maxCatchUpPerTick:Mo("KYNVER_CRON_MAX_CATCH_UP_PER_TICK",3,0),maxRetries:Mo("KYNVER_CRON_MAX_RETRIES",3,0),retryBackoffMs:Mo("KYNVER_CRON_RETRY_BACKOFF_MS",6e4,1e3),inflightLeaseMs:Mo("KYNVER_CRON_INFLIGHT_LEASE_MS",12e4,5e3)}}function Zi(e=br()){return e.tickEnabled&&!!(e.fireBaseUrl&&e.secret)}function jE(e){return e.replace(/\/+$/,"")}async function Gh(e){let r=e.fetchFn??fetch,t=e.entry.spec.callbackPath.startsWith("/")?e.entry.spec.callbackPath:`/${e.entry.spec.callbackPath}`,n=`${jE(e.baseUrl)}${t}`,s={source:"kynver-cron",jobId:e.jobId??e.entry.spec.dedupeKey??null,agentOsId:e.entry.spec.target.agentOsId,kind:e.entry.spec.kind,target:e.entry.spec.target,...e.entry.spec.payload!==void 0&&{payload:e.entry.spec.payload}},i=await r(n,{method:"POST",headers:Be(e.secret),body:JSON.stringify(s)}),a=null;try{a=await i.json()}catch{a=null}return{ok:i.ok,status:i.status,body:a}}C();import{closeSync as VE,existsSync as vu,openSync as GE,readFileSync as YE,unlinkSync as Yh,writeFileSync as JE}from"node:fs";var qE=10*6e4;function Jh(e){if(!vu(e))return null;try{let r=JSON.parse(YE(e,"utf8"));if(typeof r.pid=="number"&&typeof r.at=="string")return r}catch{return null}return null}function zE(e){let r=Jh(e);if(!r||!B(r.pid))return!0;let t=Date.parse(r.at);return Number.isNaN(t)?!0:Date.now()-t>qE}function qh(e){if(vu(e)&&!zE(e)){let r=Jh(e);return{acquired:!1,reason:r?`held by pid ${r.pid}`:"held by another process"}}if(vu(e))try{Yh(e)}catch{}try{let r=GE(e,"wx");return JE(r,JSON.stringify({pid:process.pid,at:new Date().toISOString()}),"utf8"),VE(r),{acquired:!0}}catch(r){if(r.code==="EEXIST")return{acquired:!1,reason:"concurrent acquire"};throw r}}function zh(e){try{Yh(e)}catch{}}var XE=/^[\d*/,\-?LW#]+\s+[\d*/,\-?LW#]+\s+[\d*/,\-?LW#]+\s+[\d*/,\-?LW#]+\s+[\d*/,\-?LW#]+$/;function QE(e){return XE.test(e.trim())}function ZE(e,r,t){let n=new Set;for(let o of e.split(",")){let s=o.trim();if(!s)continue;if(s==="*"){for(let d=r;d<=t;d++)n.add(d);continue}let i=/^(.+)\/(\d+)$/.exec(s),a=i?i[1]:s,l=i?Math.max(1,Number(i[2])):1;if(a==="*"){for(let d=r;d<=t;d+=l)n.add(d);continue}let c=/^(\d+)-(\d+)$/.exec(a);if(c){let d=Math.max(r,Number(c[1])),f=Math.min(t,Number(c[2]));for(let m=d;m<=f;m+=l)n.add(m);continue}let u=Number(a);Number.isInteger(u)&&u>=r&&u<=t&&n.add(u)}return n}function Uo(e,r,t,n){let o=e.trim();return o==="*"?!0:ZE(o,t,n).has(r)}function eP(e,r){let t=e.trim().split(/\s+/);if(t.length!==5)return!1;let[n,o,s,i,a]=t;return Uo(n,r.getUTCMinutes(),0,59)&&Uo(o,r.getUTCHours(),0,23)&&Uo(s,r.getUTCDate(),1,31)&&Uo(i,r.getUTCMonth()+1,1,12)&&Uo(a,r.getUTCDay(),0,6)}var rP=366*24*60;function tP(e){return new Date(Date.UTC(e.getUTCFullYear(),e.getUTCMonth(),e.getUTCDate(),e.getUTCHours(),e.getUTCMinutes(),0,0))}function Xh(e,r){if(!QE(e))return null;let t=tP(r);t=new Date(t.getTime()+6e4);for(let n=0;n<rP;n++){if(eP(e,t))return t;t=new Date(t.getTime()+6e4)}return null}function Qh(e,r){if(e.scheduleKind==="runAt"&&e.runAt){let t=Date.parse(e.runAt);return Number.isNaN(t)?null:new Date(t).toISOString()}if(e.scheduleKind==="cron"&&e.cron){let t=Xh(e.cron.trim(),r);return t?t.toISOString():null}return null}function Su(e,r){if(e.scheduleKind!=="cron"||!e.cron?.trim())return null;let t=Xh(e.cron.trim(),r);return t?t.toISOString():null}import{promises as nP}from"node:fs";async function Zh(e){try{return await nP.readFile(e,"utf8")}catch(r){if(r.code==="ENOENT")return null;throw r}}function oP(e){if(!e)return[];try{let r=JSON.parse(e);return Array.isArray(r.entries)?r.entries:[]}catch{return[]}}async function bt(e=Wr()){let r=await Zh(e);return oP(r)}async function ek(e,r){let{mkdir:t,writeFile:n,rename:o}=await import("node:fs/promises"),{randomBytes:s}=await import("node:crypto"),{dirname:i}=await import("node:path");await t(i(e),{recursive:!0});let a=`${e}.${s(4).toString("hex")}.tmp`,l=JSON.stringify({entries:r},null,2);await n(a,l,"utf8"),await o(a,e)}async function rk(e,r=Wr()){let t=await bt(r),n=t.findIndex(o=>o.providerScheduleId===e.providerScheduleId);n>=0?t[n]=e:t.push(e),await ek(r,t)}async function tk(e=Wr()){return await Zh(e)!==null?{created:!1}:(await ek(e,[]),{created:!0})}import{randomBytes as sP}from"node:crypto";import{promises as Wo}from"node:fs";import iP from"node:path";var ea={version:1,jobs:{}};async function aP(e){try{return await Wo.readFile(e,"utf8")}catch(r){if(r.code==="ENOENT")return null;throw r}}function lP(e){if(!e)return{...ea,jobs:{...ea.jobs}};try{let r=JSON.parse(e);return r?.version!==1||typeof r.jobs!="object"||!r.jobs?{...ea,jobs:{}}:r}catch{return{...ea,jobs:{}}}}async function ra(e){let r=await aP(e);return lP(r)}async function cP(e,r){await Wo.mkdir(iP.dirname(e),{recursive:!0});let t=sP(6).toString("hex"),n=`${e}.tmp-${process.pid}-${Date.now()}-${t}`;await Wo.writeFile(n,`${JSON.stringify(r,null,2)}
+`,"utf8");try{await Wo.rename(n,e)}catch(o){let s=o.code;if(s!=="EPERM"&&s!=="EEXIST"&&s!=="EACCES")throw o;await Wo.unlink(n).catch(()=>{})}}async function nk(e,r){await cP(e,r)}function ok(e,r){let t=e.jobs[r];if(t)return t;let n={providerScheduleId:r,nextFireAt:null,lastFiredAt:null,lastAttemptAt:null,consecutiveFailures:0,completedAt:null,inflightUntil:null};return e.jobs[r]=n,n}function uP(e,r){if(!e.inflightUntil)return!1;let t=Date.parse(e.inflightUntil);return!Number.isNaN(t)&&t>r}function dP(e){return!!e.completedAt}function pP(e,r,t,n){if(r.consecutiveFailures===0)return!0;if(e.spec.scheduleKind!=="cron"&&r.consecutiveFailures>t.maxRetries)return!1;if(!r.lastAttemptAt)return!0;let o=Date.parse(r.lastAttemptAt);return Number.isNaN(o)?!0:n-o>=t.retryBackoffMs}function mP(e,r,t){if(r.nextFireAt)return r.nextFireAt;let n=Qh(e.spec,t);return r.nextFireAt=n,n}function fP(e,r,t,n){if(e.paused||dP(r)||uP(r,t)||!pP(e,r,n,t))return!1;let o=r.nextFireAt?Date.parse(r.nextFireAt):NaN;return Number.isNaN(o)?!1:t>=o}function gP(e,r,t){e.spec.scheduleKind==="cron"&&(r.nextFireAt=Su(e.spec,t))}async function kn(e={}){let r=e.env??br(),t=e.now??new Date,n=t.getTime();if(!r.tickEnabled)return{enabled:!1,skipped:"tick_disabled",scanned:0,due:0,fired:0,skippedJobs:0,errors:0};if(!r.fireBaseUrl||!r.secret)return{enabled:!0,skipped:"missing_fire_credentials",scanned:0,due:0,fired:0,skippedJobs:0,errors:0};let o=qh(r.lockPath);if(!o.acquired)return{enabled:!0,skipped:o.reason??"lock_not_acquired",scanned:0,due:0,fired:0,skippedJobs:0,errors:0,lockHeld:!0};try{let s=await bt(r.storePath),i=e.agentOsIdFilter?s.filter(m=>m.spec.target.agentOsId===e.agentOsIdFilter):s,a=await ra(r.statePath),l=[];for(let m of i){let p=ok(a,m.providerScheduleId);mP(m,p,t),fP(m,p,n,r)&&l.push({entry:m,job:p})}l.sort((m,p)=>{let h=Date.parse(m.job.nextFireAt??"")||0,k=Date.parse(p.job.nextFireAt??"")||0;return h-k});let c=0,u=0,d=0,f=r.maxCatchUpPerTick;for(let{entry:m,job:p}of l){if(r.missedRunPolicy==="skip"&&m.spec.scheduleKind==="cron"){let h=Date.parse(p.nextFireAt??"");if(!Number.isNaN(h)&&h<n-r.tickIntervalMs*2){p.nextFireAt=Su(m.spec,t),d++;continue}}if(f<=0){d++;continue}p.inflightUntil=new Date(n+r.inflightLeaseMs).toISOString(),p.lastAttemptAt=t.toISOString(),gP(m,p,t);try{let h=await Gh({entry:m,baseUrl:r.fireBaseUrl,secret:r.secret,fetchFn:e.fetchFn});p.inflightUntil=null,h.ok?(p.lastFiredAt=t.toISOString(),p.consecutiveFailures=0,m.spec.scheduleKind==="runAt"&&(p.completedAt=t.toISOString(),p.nextFireAt=null),c++,f--):(p.consecutiveFailures+=1,u++)}catch{p.inflightUntil=null,p.consecutiveFailures+=1,u++}}return await nk(r.statePath,a),{enabled:!0,scanned:i.length,due:l.length,fired:c,skippedJobs:d,errors:u}}finally{zh(r.lockPath)}}C();M();import sk from"node:path";var ik="mesh-cron-lease.json";function ta(e){return _(sk.join(x(e),ik),null)}function ak(e,r){pe(sk.join(x(e),ik),{...r,updatedAt:new Date().toISOString()})}function lk(e){if(!e||typeof e!="object"||Array.isArray(e))return null;let r=e.response;if(!r||typeof r!="object"||Array.isArray(r))return null;let t=r.meshLiveness;if(!t||typeof t!="object"||Array.isArray(t))return null;let n=t.cronLease;if(!n||typeof n!="object"||Array.isArray(n))return null;let o=n;return{leaseToken:typeof o.leaseToken=="string"?o.leaseToken:null,holderBoxId:typeof o.holderBoxId=="string"?o.holderBoxId:null,authorized:o.authorized===!0,updatedAt:new Date().toISOString()}}C();import UP from"node:path";O();var hP=1;function yn(e){if(!e||typeof e!="object")return 0;let r=e.startedCount;if(typeof r=="number")return r;let t=e.outcomes;return Array.isArray(t)?t.filter(n=>n.started).length:0}function kP(e){let{maxStarts:r,...t}=e;return t}async function Cu(e,r){if(r<=0)return{ok:!0,skipped:!0,reason:"no slots",maxStarts:0,startedCount:0};let t=kP(e);if(t.targetTaskId||t.targetTaskIds){let u=await Dr({...t,execute:!0,pipeline:!0,maxStarts:String(r)});return{...typeof u=="object"&&u!==null?u:{},passes:{target:u},startedCount:yn(u)}}let n=Math.min(r,hP),o=Math.max(0,r-n),s=await Dr({...t,execute:!0,pipeline:!0,lane:"review",maxStarts:String(n)}),i=yn(s),a=o+(n-i);if(a<=0)return{...typeof s=="object"&&s!==null?s:{},passes:{review:s},startedCount:i};let l=await Dr({...t,execute:!0,pipeline:!0,maxStarts:String(a)}),c=yn(l);return{passes:{review:s,work:l},startedCount:i+c,ok:!0}}function ck(e){if(!e||typeof e!="object")return[];let t=e.response?.dispatch?.exactTargetTaskIds;if(!Array.isArray(t))return[];let n=new Set,o=[];for(let s of t){if(typeof s!="string")continue;let i=s.trim();!i||n.has(i)||(n.add(i),o.push(i))}return o}function yP(e){let t=e.response?.dispatch;return t&&typeof t=="object"?t:null}function Lo(e){return typeof e!="number"||!Number.isFinite(e)?null:Math.max(0,Math.floor(e))}function uk(e,r){let t=yP(r),n=Lo(t?.recommendedMaxStarts),o=Lo(t?.actionableReady),s=Lo(t?.queuedTasks),i=Lo(t?.boardAdvancedThisTick)??0,a=Lo(t?.leaseReapedThisTick)??0,l=i+a,c=o??s,u=e.slotsAvailable;c!==null?u=Math.min(u,c):n!==null&&(u=Math.min(u,n)),c===null&&n!==null&&(u=Math.max(u,Math.min(e.slotsAvailable,n)));let d=t?.underutilized===!0||(c??0)>0&&e.slotsAvailable>0&&e.maxConcurrentWorkers>0&&e.activeWorkers<e.maxConcurrentWorkers;if(e.slotsAvailable>0&&u===0&&(d||l>0)){let m=c??(l>0?l:1);u=Math.min(e.slotsAvailable,Math.max(1,m))}let f=s!==null&&o!==null?Math.max(0,s-o):null;return{maxStarts:Math.max(0,u),underutilized:d,advisedStarts:n,actionableReady:o,queuedTasks:s,nonDispatchableReady:f,boardAdvancedThisTick:i,leaseReapedThisTick:a}}Yt();M();Kn();Y();C();Y();M();C();import RP from"node:path";O();async function dk(e){let r=K(e.baseUrl),t=await G(e.secret,e.agentOsId,{baseUrl:r}),n=`${r}/api/agent-os/by-id/${encodeURIComponent(e.agentOsId)}/tasks/${encodeURIComponent(e.taskId)}/plan-progress-sync`,o=await X(n,t,{phase:e.phase,taskId:e.taskId,blocker:e.blocker,artifact:e.artifact},{agentOsId:e.agentOsId,baseUrl:r});return{ok:o.ok,status:o.status,response:o.response}}async function pk(e,r){let t=L(e),n=String(r.agentOsId||"");if(!n)return[];let o=[];for(let s of Object.keys(t.workers||{})){let i=_(RP.join(x(t.id),"workers",b(s),"worker.json"),void 0);if(!i?.dispatched||!i.taskId)continue;let a=T(i);if(!a.heartbeatBlocker)continue;if(i.lastSyncedHeartbeatBlocker===a.heartbeatBlocker){o.push({worker:s,phase:"heartbeat_blocker",ok:!0,skipped:!0});continue}let l=await dk({agentOsId:n,taskId:i.taskId,phase:"heartbeat_blocker",blocker:a.heartbeatBlocker,baseUrl:r.baseUrl?String(r.baseUrl):void 0,secret:r.secret?String(r.secret):void 0});l.ok&&(i.lastSyncedHeartbeatBlocker=a.heartbeatBlocker,H(t.id,i)),o.push({worker:s,phase:"heartbeat_blocker",ok:l.ok})}return o}O();Ue();function bP(e=process.env){let r=v();return Ge(r,e)!=="forge"}function mk(e,r=process.env){if(bP(r))return e?.maxConcurrentWorkers??void 0}async function fk(e,r){let t=K(r.baseUrl?String(r.baseUrl):void 0),n=await G(r.secret?String(r.secret):void 0,e,{baseUrl:t}),o=`${t}/api/agent-os/by-id/${encodeURIComponent(e)}/runtime`;try{let s=await Ns(o,n);if(!s.ok)return null;let a=s.response?.preferences?.maxConcurrentWorkers;if(a==null)return{maxConcurrentWorkers:null};let l=Number(a);return!Number.isFinite(l)||l<=0?{maxConcurrentWorkers:null}:{maxConcurrentWorkers:Math.floor(l)}}catch{return null}}O();Ue();import{spawnSync as vP}from"node:child_process";var SP=1e4,CP=4*1024*1024,gk=(e,r,t)=>{try{let n=vP(e,r,{encoding:"utf8",stdio:["ignore","pipe","pipe"],timeout:t?.timeoutMs??SP,maxBuffer:CP});return{ok:n.status===0,stdout:typeof n.stdout=="string"?n.stdout:"",stderr:typeof n.stderr=="string"?n.stderr:""}}catch(n){return{ok:!1,stdout:"",stderr:n instanceof Error?n.message:String(n)}}};function Rn(e,r,t){let n=e(r,t);if(!n.ok||!n.stdout.trim())return null;try{return JSON.parse(n.stdout)}catch{return null}}function hk(e,r,t){return`${e} ${r} ${t}`}function Bo(e){let r=e.lastIndexOf("@");if(r<=0||r===e.length-1)return null;let t=e.slice(0,r),n=e.slice(r+1);return!/^[^/\s]+\/[^/\s]+$/.test(t)||!/^[0-9a-f]{7,40}$/i.test(n)?null:{repo:t,sha:n}}function kk(e){let r=e.trim().match(/[/:]([^/]+\/[^/]+)\/(?:pull|pulls|merge_requests|pull-requests)\/(\d+)/i);if(!r)return null;let t=Number(r[2]);return!Number.isFinite(t)||t<=0?null:{repo:r[1],number:t}}var wP=8e3,_P=30,xP=100,EP=400;function wu(e){return process.env.GITHUB_TOKEN?.trim()||process.env.GH_TOKEN?.trim()?!0:e("gh",["auth","token"]).ok}function bn(e){return e&&typeof e=="object"&&!Array.isArray(e)?e:null}function PP(e){return Array.isArray(e)?e.map(r=>bn(r)).filter(r=>r!==null).slice(0,_P).map(r=>({context:r.context??null,state:r.state??null,target_url:r.target_url??null,description:r.description??null})):[]}function yk(e,r,t){let n=Rn(e,"gh",["api",`repos/${r}/commits/${t}/status`]);return n?{state:n.state??null,statuses:PP(n.statuses)}:null}var Rk={provider:"github",kind:"pr_snapshot",version:"1",isAvailable:wu,collect(e,r){let t=kk(e);if(!t)return null;let n=Rn(r,"gh",["api",`repos/${t.repo}/pulls/${t.number}`]);if(!n)return null;let o=bn(n.head),s=typeof o?.sha=="string"?o.sha:null,i=bn(n.user),a=bn(bn(o?.repo)?.owner),l=typeof n.body=="string"?n.body.slice(0,wP):null,c=[],u={state:null,statuses:[]};if(s){let m=Rn(r,"gh",["api",`repos/${t.repo}/commits/${s}/check-runs?per_page=100`]);Array.isArray(m?.check_runs)&&(c=m.check_runs.map(p=>bn(p)).filter(p=>p!==null).slice(0,xP).map(p=>({name:p.name??null,status:p.status??null,conclusion:p.conclusion??null}))),u=yk(r,t.repo,s)??u}let d=r("gh",["api","--paginate",`repos/${t.repo}/pulls/${t.number}/files?per_page=100`,"--jq",".[].filename"]),f=d.ok?d.stdout.split(`
+`).map(m=>m.trim()).filter(Boolean).slice(0,EP):[];return{pull:{html_url:n.html_url??null,title:n.title??null,body:l,user:{login:i?.login??null},state:n.state??null,draft:n.draft??null,merged:n.merged??null,merged_at:n.merged_at??null,merge_commit_sha:n.merge_commit_sha??null,mergeable:n.mergeable??null,mergeable_state:n.mergeable_state??null,head:{sha:s,ref:o?.ref??null,repo:{owner:{login:a?.login??null}}}},checkRuns:c,combinedStatus:u,changedFiles:f}}},bk={provider:"github",kind:"commit_status",version:"1",isAvailable:wu,collect(e,r){let t=Bo(e);return t?yk(r,t.repo,t.sha):null}},vk={provider:"github",kind:"branch_reachability",version:"1",isAvailable:wu,collect(e,r){let t=Bo(e);if(!t)return null;let n=Rn(r,"gh",["api",`repos/${t.repo}`]),o=typeof n?.default_branch=="string"&&n.default_branch.trim()?n.default_branch.trim():null;if(!o)return null;let s=Rn(r,"gh",["api",`repos/${t.repo}/compare/${encodeURIComponent(o)}...${t.sha}`]);if(!s)return null;let i=typeof s.status=="string"?s.status:null;return{defaultBranch:o,compareStatus:i,reachable:i==="identical"||i==="behind"}}};var AP=5,IP=/\b(READY|ERROR|BUILDING|QUEUED|CANCELED|INITIALIZING)\b/i,OP=/https:\/\/[^\s]+/,Sk={provider:"vercel",kind:"deployment_status",version:"1",isAvailable(e){return e("vercel",["whoami"]).ok},collect(e,r){let t=Bo(e);if(!t)return null;let n=r("vercel",["list","--prod","--meta",`githubCommitSha=${t.sha}`]);if(!n.ok)return null;let o=[];for(let s of n.stdout.split(`
+`)){let i=s.match(OP)?.[0];if(!i)continue;let a=s.match(IP)?.[1]?.toUpperCase()??null;if(o.push({url:i,state:a}),o.length>=AP)break}return{found:o.length>0,deployments:o}}};var _u=[];function na(e){_u.some(r=>r.provider===e.provider&&r.kind===e.kind)||_u.push(e)}function Ck(e,r){return _u.find(t=>t.provider===e&&t.kind===r)??null}function wk(){na(Rk),na(bk),na(vk),na(Sk)}var NP=8,TP=25e3;function _k(e,r={}){wk();let t=r.run??gk,n=r.now??(()=>new Date),o=r.maxSubjects??NP,s=Date.now()+(r.deadlineMs??TP),i=new Set,a=e.filter(m=>{let p=hk(m.provider,m.kind,m.subject);return i.has(p)?!1:(i.add(p),!0)}),l=a.length>0?Math.floor(n().getTime()/6e4)%a.length:0,u=a.map((m,p)=>a[(l+p)%a.length]).slice(0,o),d={attempted:0,collected:0,items:[],skipped:[]},f=new Map;for(let m of u){if(Date.now()>s){d.skipped.push({...m,reason:"budget_exhausted"});continue}let p=Ck(m.provider,m.kind);if(!p){d.skipped.push({...m,reason:"no_recipe"});continue}let h=`${p.provider} ${p.kind}`,k=f.get(h);if(k===void 0&&(k=p.isAvailable(t),f.set(h,k)),!k){d.skipped.push({...m,reason:"provider_unavailable"});continue}d.attempted+=1;let g=p.collect(m.subject,t);if(g==null){d.skipped.push({...m,reason:"collect_failed"});continue}d.collected+=1,d.items.push({provider:m.provider,kind:m.kind,subject:m.subject,payload:g,observedAt:n().toISOString(),collectorVersion:p.version})}return d}M();C();import DP from"node:path";var MP="provider-evidence-wanted.json";function xk(e){return DP.join(x(e),MP)}function Ek(e){if(!Array.isArray(e))return[];let r=[];for(let t of e){if(!t||typeof t!="object"||Array.isArray(t))continue;let n=t,o=typeof n.provider=="string"?n.provider.trim():"",s=typeof n.kind=="string"?n.kind.trim():"",i=typeof n.subject=="string"?n.subject.trim():"";!o||!s||!i||r.push({provider:o,kind:s,subject:i})}return r}function Pk(e){let r=_(xk(e),null);return Ek(r?.wanted)}function Ak(e,r){pe(xk(e),{savedAt:new Date().toISOString(),wanted:r})}function Ik(e){if(!e||typeof e!="object"||Array.isArray(e))return null;let r=e.providerEvidenceWanted;return Array.isArray(r)?Ek(r):null}async function WP(e,r){let t=L(e),n=[];for(let o of Object.keys(t.workers||{})){let s=_(UP.join(x(t.id),"workers",b(o),"worker.json"),void 0);if(!s?.taskId||s.localOnly)continue;if(ct(s)){n.push({worker:o,ok:!0,taskId:s.taskId??null,skipped:!0});continue}let i=T(s);if(!ne(i))continue;let a=zr({alive:i.alive,finalResult:i.finalResult,changedFiles:i.changedFiles,gitAncestry:i.gitAncestry});if(!s.dispatched&&!i.finalResult&&!a?.salvageable)continue;let l=await fo({run:e,name:o,agentOsId:String(r.agentOsId||s.agentOsId||""),...r});n.push({worker:o,ok:l.ok,taskId:s.taskId??null})}return n}async function LP(e,r,t,n,o){let s=K(n.baseUrl?String(n.baseUrl):void 0),i=await G(n.secret?String(n.secret):void 0,e,{baseUrl:s}),a=`${s}/api/agent-os/by-id/${encodeURIComponent(e)}/operator/tick`,l=await cs(),c=pi(r),u=null;try{let h=Pk(r);u=h.length>0?_k(h):null}catch{u=null}let d=ta(r),f=await Pr(a,i,{agentOsId:e,runId:r,ingestHarness:!0,harnessBoardSnapshot:ut(r),resourceGate:t,boxResourceSnapshot:vo(t,{harnessRunId:r,boxKind:Ge(v())}),packageVersions:l,...o?{harnessCleanup:o}:{},runnerPresence:Xe({runId:r}),activeHarnessWorkers:c,...d?.leaseToken?{meshCronLeaseToken:d.leaseToken}:{},...u&&u.items.length>0?{providerEvidence:u.items}:{}}),m=Ik(f.response);if(m)try{Ak(r,m)}catch{}let p=lk(f);if(p)try{ak(r,p)}catch{}return{ok:f.ok,httpStatus:f.status,response:f.response,...u?{providerEvidence:{attempted:u.attempted,collected:u.collected,skipped:u.skipped.length}}:{}}}async function xu(e){let r=String(N(String(e.run||""),"--run")),t=String(N(String(e.agentOsId||""),"--agent-os-id")),n=e.execute!==!1&&e.execute!=="false";go({run:r});let o=await fk(t,e),s=mk(o),i=dr({runId:r,configuredMaxWorkersOverride:s}),a=yu()?ku(r):void 0,l=await LP(t,r,i,e,a),c=cf(r,l),u=await qs(r,e),d=await WP(r,e),f=dr({runId:r,configuredMaxWorkersOverride:s}),m=dn(),p=await pk(r,e),h=uk(f,l),k=h.maxStarts,g=await mn({run:r,agentOsId:t,pipeline:!0,...e}),R=null,I=0,E=ck(l),P=k;if(n&&P>0&&E.length>0){let j=Math.min(P,E.length),F=await Cu({...e,run:r,agentOsId:t,targetTaskIds:E.join(",")},j),U=yn(F);I+=U,P=Math.max(0,P-U),R={exactTargetTaskIds:E,exact:F,startedCount:I}}if(n&&P>0){let j=await Cu({...e,run:r,agentOsId:t},P),F=yn(j);I+=F,R=R&&typeof R=="object"?{...R,broad:j,startedCount:I}:j}else!n||k<=0?R||(R={ok:!0,skipped:!0,reason:n?f.reason??"no slots or queued work":"execute disabled",maxStarts:0,dispatchAdvice:h,...E.length?{exactTargetTaskIds:E,exactOnly:!0}:{}}):R&&typeof R=="object"&&(R={...R,broadSkipped:!0,startedCount:I});let D=!h.underutilized&&k===0&&d.length===0&&I===0;return{runId:r,agentOsId:t,execute:n,resourceGate:i,dispatchResourceGate:f,leaseRenewal:u,completedWorkers:d,staleReconcile:m,harnessCleanup:a,planProgressSync:p,completionAckSync:c,operatorTick:l,sweep:g,dispatchAdvice:h,dispatch:R,idle:D}}O();import nA from"node:os";import{readFileSync as BP}from"node:fs";import{homedir as HP,platform as FP}from"node:os";import $P from"node:path";import{execFileSync as KP}from"node:child_process";function Ok(e,r=Date.now()){try{let t=JSON.parse(e),n=t.claudeAiOauth?.accessToken,o=t.claudeAiOauth?.expiresAt;return typeof n!="string"||!n||typeof o=="number"&&o-r<6e4?null:n}catch{return null}}function jP(){if(FP()==="darwin")try{let e=KP("security",["find-generic-password","-s","Claude Code-credentials","-w"],{encoding:"utf8",stdio:["ignore","pipe","ignore"]});return Ok(e.trim())}catch{return null}try{let e=BP($P.join(HP(),".claude",".credentials.json"),"utf8");return Ok(e)}catch{return null}}function Nk(e=process.env,r={}){let t=e.ANTHROPIC_API_KEY?.trim();if(t)return{kind:"api_key",key:t};let n=e.KYNVER_CHAT_USE_CLAUDE_OAUTH;if(r.oauthOptIn===!0||n==="1"||n==="true"||n==="yes"){let s=jP();if(s)return{kind:"oauth",token:s}}return null}var VP="You are Claude Code, Anthropic's official CLI for Claude.";function GP(){return{blocks:[],stopReason:null,inputTokens:0,outputTokens:0}}function YP(e,r){let t=r;switch(t.type){case"message_start":return e.inputTokens=t.message?.usage?.input_tokens??0,"";case"content_block_start":{let n=t.index??e.blocks.length;return e.blocks[n]={type:t.content_block?.type==="tool_use"?"tool_use":"text",text:"",id:t.content_block?.id,name:t.content_block?.name,inputJson:""},""}case"content_block_delta":{let n=e.blocks[t.index??e.blocks.length-1];return n?t.delta?.type==="text_delta"&&t.delta.text?(n.text+=t.delta.text,t.delta.text):(t.delta?.type==="input_json_delta"&&t.delta.partial_json&&(n.inputJson+=t.delta.partial_json),""):""}case"message_delta":return t.delta?.stop_reason&&(e.stopReason=t.delta.stop_reason),typeof t.usage?.output_tokens=="number"&&(e.outputTokens=t.usage.output_tokens),"";default:return""}}function JP(e){let r=[];for(let t of e.blocks)if(t)if(t.type==="tool_use"){let n={};try{n=t.inputJson?JSON.parse(t.inputJson):{}}catch{n={}}r.push({type:"tool_use",id:t.id??"",name:t.name??"",input:n})}else t.text&&r.push({type:"text",text:t.text});return{content:r,stop_reason:e.stopReason??"end_turn",usage:{input_tokens:e.inputTokens,output_tokens:e.outputTokens}}}async function*qP(e){let r=e.getReader(),t=new TextDecoder,n="";try{for(;;){let{done:o,value:s}=await r.read();if(o)break;n+=t.decode(s,{stream:!0});let i;for(;(i=n.indexOf(`
+`))!==-1;){let a=n.slice(0,i).trim();if(n=n.slice(i+1),!a.startsWith("data:"))continue;let l=a.slice(5).trim();if(!(!l||l==="[DONE]"))try{yield JSON.parse(l)}catch{}}}}finally{r.releaseLock()}}function zP(e=process.env){return(e.ANTHROPIC_BASE_URL?.trim()||"https://api.anthropic.com").replace(/\/$/,"")}async function Tk(e){let{creds:r,model:t,payload:n}=e,o={"Content-Type":"application/json","anthropic-version":"2023-06-01"},s=n.system;r.kind==="api_key"?o["x-api-key"]=r.key:(o.Authorization=`Bearer ${r.token}`,o["anthropic-beta"]="oauth-2025-04-20",s=[{type:"text",text:VP},{type:"text",text:n.system}]);let i=await fetch(`${zP()}/v1/messages`,{method:"POST",headers:o,signal:e.signal,body:JSON.stringify({model:t,max_tokens:n.maxTokens,system:s,messages:n.messages,...Array.isArray(n.tools)&&n.tools.length>0?{tools:n.tools}:{},...n.temperature!==void 0?{temperature:n.temperature}:{},stream:!0})});if(!i.ok||!i.body){let l=await i.text().catch(()=>"");throw new Error(`Anthropic stream failed: HTTP ${i.status}${l?` \u2014 ${l.slice(0,300)}`:""}`)}let a=GP();for await(let l of qP(i.body)){let c=YP(a,l);c&&e.onDelta(c)}return JP(a)}var vn=class{constructor(r,t=150){this.flushFn=r;this.floorMs=t}buffer="";timer=null;closed=!1;push(r){this.closed||!r||(this.buffer+=r,this.timer||(this.timer=setTimeout(()=>{this.timer=null,this.flushNow()},this.floorMs)))}flushNow(){if(!this.buffer)return;let r=this.buffer;this.buffer="",this.flushFn(r)}close(){this.closed||(this.closed=!0,this.timer&&(clearTimeout(this.timer),this.timer=null),this.flushNow())}};import{spawn as eA}from"node:child_process";var XP=new Set(["run list","run status","worker list","worker status","worker tail","status","cron status","monitor status","monitor list"]),QP=new Set(["run create","run dispatch","run sweep","worker start","worker stop","worker complete","cleanup"]),ZP=["--secret","--api-key","--keeper-child"];function Dk(e){if(!Array.isArray(e)||e.length===0||e.some(n=>typeof n!="string"))return{ok:!1,mutating:!1,reason:"argv must be a non-empty string array"};for(let n of e){if(ZP.some(o=>n===o||n.startsWith(`${o}=`)))return{ok:!1,mutating:!1,reason:`forbidden flag: ${n}`};if(n.includes(`
+`)||n.includes("\0"))return{ok:!1,mutating:!1,reason:"control characters refused"}}let r=e[0],t=e.length>1&&!e[1].startsWith("--")?`${r} ${e[1]}`:r;return t==="doctor runtime-takeover"?e.includes("--remediate-default-repo")?{ok:!0,mutating:!0}:{ok:!0,mutating:!1}:r==="cleanup"?{ok:!0,mutating:e.includes("--execute")}:XP.has(t)?{ok:!0,mutating:!1}:QP.has(t)?{ok:!0,mutating:!0}:{ok:!1,mutating:!1,reason:`verb not allowlisted: ${t}`}}var rA=10*6e4,tA=5e3,Mk=2e5;async function Uk(e,r,t={}){let n=Dk(e);if(!n.ok)return{exitCode:null,timedOut:!1,refused:n.reason};let o=t.cliEntry??process.argv[1],s=t.timeoutMs??rA,i=new vn(r);return new Promise(a=>{let l=0,c=!1,u=eA(process.execPath,[o,...e],{stdio:["ignore","pipe","pipe"],env:process.env}),d=m=>{if(l>=Mk)return;let p=m.toString("utf8").slice(0,Mk-l);l+=p.length,i.push(p)};u.stdout?.on("data",d),u.stderr?.on("data",d);let f=setTimeout(()=>{c=!0,u.kill("SIGTERM"),setTimeout(()=>u.kill("SIGKILL"),tA).unref()},s);u.on("error",m=>{clearTimeout(f),i.push(`spawn failed: ${m.message}`),i.close(),a({exitCode:null,timedOut:!1,refused:void 0})}),u.on("close",m=>{clearTimeout(f),i.close(),a({exitCode:m,timedOut:c})})})}var oA=25e3,sA=32e3,iA=5e3,aA=6e4,Wk=5*6e4,lA=5e3,cA="claude-sonnet-4-6";async function uA(e,r,t){let n=t.KYNVER_RUNTIME_CHAT_BRIDGE_URL?.trim();if(n)return n;if(!e)return null;let o=new AbortController,s=setTimeout(()=>o.abort(),lA);try{let i=await fetch(`${e.replace(/\/$/,"")}/api/runtime/chat-bridge`,{headers:{Authorization:`Bearer ${r}`},signal:o.signal});if(!i.ok)return null;let a=await i.json().catch(()=>null);return typeof a?.bridgeUrl=="string"&&a.bridgeUrl.trim()?a.bridgeUrl.trim():null}catch{return null}finally{clearTimeout(s)}}async function Lk(e=process.env){let r=v(),t=r.agentOsId?.trim(),n=oe();if(!t||!n)return null;let o=await uA(r.apiBaseUrl,n,e);return o?{bridgeUrl:o.replace(/\/$/,""),agentOsId:t,apiKey:n,boxId:nA.hostname(),model:e.KYNVER_CHAT_MODEL?.trim()||r.defaultModel?.trim()||cA,useClaudeOauth:r.chatUseClaudeOauth===!0}:null}async function dA(e,r){let t=new AbortController,n=setTimeout(()=>t.abort(),sA),o=setInterval(()=>{r()&&t.abort()},500);try{let s=await fetch(`${e.bridgeUrl}/runtime-chat/claim`,{method:"POST",headers:{"Content-Type":"application/json",Authorization:`Bearer ${e.apiKey}`},body:JSON.stringify({agentOsId:e.agentOsId,boxId:e.boxId,waitMs:oA}),signal:t.signal});if(s.status===204)return null;if(s.status===401||s.status===403)return"auth_error";if(!s.ok)throw new Error(`claim failed: HTTP ${s.status}`);return(await s.json().catch(()=>null))?.turn??null}catch(s){if(r())return null;throw s}finally{clearTimeout(n),clearInterval(o)}}async function vt(e,r,t){return(await fetch(`${e.bridgeUrl}/runtime-chat/turns/${encodeURIComponent(r)}/events`,{method:"POST",headers:{"Content-Type":"application/json",Authorization:`Bearer ${e.apiKey}`},body:JSON.stringify({agentOsId:e.agentOsId,events:t})})).ok}async function pA(e,r){let t=0,n=Array.isArray(r.payload?.argv)?r.payload.argv:[],o=await Uk(n,s=>{vt(e,r.turnId,[{seq:t++,kind:"delta",text:s}])});o.refused?await vt(e,r.turnId,[{seq:t++,kind:"error",error:`command_refused: ${o.refused}`}]).catch(()=>{}):await vt(e,r.turnId,[{seq:t++,kind:"final",message:{exitCode:o.exitCode,timedOut:o.timedOut}}]).catch(()=>{}),console.error(JSON.stringify({event:"command_turn_done",turnId:r.turnId,argv:n.slice(0,4),exitCode:o.exitCode,timedOut:o.timedOut,refused:o.refused??null}))}async function mA(e,r){let t=0,n=!1,o=new AbortController,s=l=>{n||vt(e,r.turnId,[{seq:t++,kind:"delta",text:l}]).then(c=>{c||(n=!0,o.abort())})},i=new vn(s),a=Nk(process.env,{oauthOptIn:e.useClaudeOauth});if(!a){await vt(e,r.turnId,[{seq:0,kind:"error",error:"no_local_credentials"}]).catch(()=>{});return}try{let l=await Tk({creds:a,model:e.model,payload:r.payload,onDelta:c=>i.push(c),signal:o.signal});i.close(),n||await vt(e,r.turnId,[{seq:t++,kind:"final",message:l}]),console.error(JSON.stringify({event:"chat_turn_done",turnId:r.turnId,model:e.model}))}catch(l){i.close(),n||await vt(e,r.turnId,[{seq:t++,kind:"error",error:l instanceof Error?l.message:String(l)}]).catch(()=>{}),console.error(JSON.stringify({event:"chat_turn_error",turnId:r.turnId,error:l instanceof Error?l.message:String(l)}))}}async function Eu(e,r){for(let n=0;n<e&&!r();n+=500)await new Promise(o=>setTimeout(o,Math.min(500,e-n)))}async function Bk(e){let r=await Lk();for(r||console.error(JSON.stringify({event:"chat_claim_loop_waiting",reason:!oe()||!v().agentOsId?.trim()?"machine_not_linked":"bridge_not_discovered (rollout off, discovery route missing/404, or API unreachable)",rediscoverMs:Wk}));!r&&!e.shouldStop();){if(!oe()||!v().agentOsId?.trim()||(await Eu(Wk,e.shouldStop),e.shouldStop()))return;r=await Lk()}if(!(!r||e.shouldStop())){for(console.error(JSON.stringify({event:"chat_claim_loop_start",bridgeUrl:r.bridgeUrl,agentOsId:r.agentOsId,boxId:r.boxId,model:r.model,useClaudeOauth:r.useClaudeOauth}));!e.shouldStop();)try{let t=await dA(r,e.shouldStop);if(t==="auth_error"){console.error(JSON.stringify({event:"chat_claim_auth_error"})),await Eu(aA,e.shouldStop);continue}t&&(t.payload?.kind==="command"?await pA(r,t):await mA(r,t))}catch(t){console.error(JSON.stringify({event:"chat_claim_error",error:t instanceof Error?t.message:String(t)})),await Eu(iA,e.shouldStop)}console.error(JSON.stringify({event:"chat_claim_loop_stop"}))}}var fA=6e4,gA=5*6e4,hA=10,kA=250;async function Pu(e,r){let t=e;for(;t>0&&!r();){let n=Math.min(kA,t);await wr(n),t-=n}}async function Ho(e){hn();let r=String(N(String(e.run||""),"--run")),t=String(N(String(e.agentOsId||v().agentOsId||""),"--agent-os-id")),n=e.execute!==!1&&e.execute!=="false",o=Number(e.intervalMs)>0?Math.floor(Number(e.intervalMs)):fA,s=!1,i=0;process.on("SIGINT",()=>{s=!0}),process.on("SIGTERM",()=>{s=!0});let a=Do();a.remediated&&console.error(JSON.stringify({event:"daemon_default_repo_remediated",defaultRepo:a.resolved?.defaultRepo??null,configPath:a.configPath}));let l=Bh(v());l.ok||(console.error(JSON.stringify({event:"daemon_start_blocked",runId:r,agentOsId:t,errors:l.errors})),process.exit(1)),console.error(JSON.stringify({event:"daemon_start",runId:r,agentOsId:t,execute:n,intervalMs:o,boxKind:l.box.boxKind,workerCapSource:l.workerCapSource,maxConcurrentWorkers:l.maxConcurrentWorkers}));let c=br(),u=Bk({shouldStop:()=>s}).catch(f=>{console.error(JSON.stringify({event:"chat_claim_loop_crashed",error:f instanceof Error?f.message:String(f)}))}),d=!1;for(;!s;)try{$h({agentOsId:t,runId:r,instructionBundleVersion:Ar()});let f=await Is(e.secret?String(e.secret):void 0,t);if(!f.ok){d||(d=!0,console.error(JSON.stringify({event:"daemon_runner_credential_missing",agentOsId:t,reason:f.reason,remedy:`run \`kynver runner credential --agent-os-id ${t}\` (or \`kynver bootstrap\`); ticks resume automatically once the credential exists`}))),await Pu(o,()=>s);continue}d&&(d=!1,console.error(JSON.stringify({event:"daemon_runner_credential_recovered",agentOsId:t}))),await Tc({agentOsId:t,baseUrl:bl(e.baseUrl?String(e.baseUrl):void 0),secret:f.secret});let m=await xu({run:r,agentOsId:t,execute:n,...e});if(console.error(JSON.stringify({event:"daemon_tick",...m})),c.tickEnabled){let g=ta(r);if(g&&!g.authorized)console.error(JSON.stringify({event:"daemon_cron_tick_skipped",reason:"mesh_cron_lease_not_authorized",holderBoxId:g.holderBoxId}));else{let R=await kn({env:c,agentOsIdFilter:t});R.enabled&&(R.fired>0||R.errors>0||R.lockHeld)&&console.error(JSON.stringify({event:"daemon_cron_tick",...R}))}}m.idle?i++:i=0;let p=Math.floor(ot("daemon.maxIdleStreak",hA)),h=Math.floor(ot("daemon.idleIntervalMs",gA)),k=i>=p?h:o;await Pu(k,()=>s)}catch(f){console.error(JSON.stringify({event:"daemon_tick_error",error:f.message})),await Pu(o,()=>s)}await u,console.error(JSON.stringify({event:"daemon_stop",runId:r,agentOsId:t}))}O();import{spawn as yA}from"node:child_process";C();var RA=15*6e4,Hk=2*6e4,Fk=1e4,bA=5e3,vA=5*6e4,SA=30*6e4,$k=5e3;function CA(e,r=process.env){let t=typeof e=="string"?Number.parseInt(e,10):NaN;if(Number.isFinite(t)&&t>0)return t;let n=Number.parseInt(r.KYNVER_DAEMON_STALL_MS??"",10);return Number.isFinite(n)&&n>0?n:RA}function oa(e,r=process.env){if(e.keeperChild===!0||e.keeperChild==="true"||e.noSupervise===!0||e.noSupervise==="true"||e.supervised==="false")return!1;let t=(r.KYNVER_DAEMON_SUPERVISED??"").trim().toLowerCase();return!(t==="0"||t==="false"||t==="no"||t==="off")}function wA(e,r=bA,t=vA){let n=Math.min(Math.max(e,1)-1,10);return Math.min(r*2**n,t)}function _A(e,r,t=SA){return r-e>=t}function St(e,r={}){console.error(JSON.stringify({event:`daemon_keeper_${e}`,...r}))}function xA(e){let r=[];for(let t=0;t<e.length;t+=1){let n=e[t];if(!(n==="--supervised"||n==="--no-supervise"||n==="--keeper-child")){if(n==="--stall-ms"){t+1<e.length&&!e[t+1].startsWith("--")&&(t+=1);continue}n.startsWith("--stall-ms=")||n.startsWith("--supervised=")||r.push(n)}}return r.push("--keeper-child"),r}async function sa(e,r=process.argv.slice(2)){let t=String(N(String(e.agentOsId||v().agentOsId||""),"--agent-os-id")),n=CA(e.stallMs),o=xA(r),s=process.argv[1],i=!1,a=null,l=0,c=u=>{i=!0,St("stop",{signal:u}),a?.pid&&a.kill(u)};for(process.on("SIGINT",()=>c("SIGINT")),process.on("SIGTERM",()=>c("SIGTERM")),St("start",{agentOsId:t,stallMs:n,childArgv:o});!i;){let u=Date.now(),d=!1,f=null,m=null;for(a=yA(process.execPath,[s,...o],{stdio:"inherit",env:process.env}),St("child_spawned",{pid:a.pid??null}),a.on("exit",(k,g)=>{d=!0,f=k,m=g});!d&&!i&&(await wr($k),!(d||i));){if(Date.now()-u<Hk)continue;let k=Kh(t),g=k&&k.pid===a.pid?k:null;if(g&&jh(g,n)){St("stall_detected",{pid:a.pid??null,lastBeatAt:g.observedAt,stallMs:n}),a.kill("SIGTERM"),await wr(Fk),d||a.kill("SIGKILL");break}if(!g&&Date.now()-u>n+Hk){St("no_heartbeat_detected",{pid:a.pid??null,stallMs:n}),a.kill("SIGTERM"),await wr(Fk),d||a.kill("SIGKILL");break}}for(;!d&&!i;)await wr($k);if(i)break;let p=Date.now();_A(u,p)&&(l=0),l+=1;let h=wA(l);St("child_exited",{code:f,signal:m,uptimeMs:p-u,consecutiveFailures:l,respawnInMs:h}),await wr(h)}St("stopped",{agentOsId:t})}M();import{existsSync as la}from"node:fs";async function ia(e=br()){let r=await bt(e.storePath).catch(()=>[]),t=await ra(e.statePath).catch(()=>({version:1,jobs:{}})),n=!!(e.fireBaseUrl&&e.secret),o=Zi(e),s="disabled";return o?s="kynver-cron-daemon":process.env.QSTASH_TOKEN?.trim()&&(s="qstash"),{primary:s,env:{storePath:e.storePath,statePath:e.statePath,tickEnabled:e.tickEnabled,fireBaseUrl:e.fireBaseUrl,missedRunPolicy:e.missedRunPolicy,maxCatchUpPerTick:e.maxCatchUpPerTick,maxRetries:e.maxRetries},jobCount:r.length,stateJobCount:Object.keys(t.jobs).length,credentialsReady:n,daemonPrimary:o}}import{homedir as OA}from"node:os";import NA from"node:path";import{existsSync as Kk,mkdirSync as EA,readFileSync as jk,writeFileSync as PA}from"node:fs";import{homedir as AA}from"node:os";import Vk from"node:path";var Lr=Vk.join(AA(),".kynver",".env");function Au(e){let r=new Map;for(let t of e.split(/\r?\n/)){let n=t.trim();if(!n||n.startsWith("#"))continue;let o=n.indexOf("=");if(o<=0)continue;let s=n.slice(0,o).trim(),i=n.slice(o+1).trim();(i.startsWith('"')&&i.endsWith('"')||i.startsWith("'")&&i.endsWith("'"))&&(i=i.slice(1,-1)),r.set(s,i)}return r}function IA(e,r=`# Managed by kynver cron install \u2014 safe to edit; re-run install to merge keys.
 `){let t=[r.trimEnd(),""];for(let[n,o]of[...e.entries()].sort(([s],[i])=>s.localeCompare(i))){let s=o.includes(" ")||o.includes("#")||o.includes('"')?`"${o.replace(/\\/g,"\\\\").replace(/"/g,'\\"')}"`:o;t.push(`${n}=${s}`)}return t.push(""),t.join(`
-`)}function Mi(e=Ar){return Gh(e)?Zc(Yh(e,"utf8")):new Map}function qh(e,r={}){let t=r.filePath??Ar,n=Gh(t)?Yh(t,"utf8"):"",o=Zc(n),s=[],i=[];for(let u of r.removeKeys??[])o.delete(u)&&i.push(u);for(let[u,d]of Object.entries(e)){if(d===void 0)continue;let f=o.get(u);o.set(u,d),f!==d&&s.push(u)}let a=Zc(n),l=a.size!==o.size;if(!l){for(let[u,d]of o)if(a.get(u)!==d){l=!0;break}}let c=mP(o);return l&&(uP(Jh.dirname(t),{recursive:!0}),dP(t,c,{mode:384})),{path:t,changed:l,keysWritten:s,keysRemoved:i}}var Ir="watchdog:board-sweep",hP="*/5 * * * *",kP=["Set KYNVER_SCHEDULER_PROVIDER=kynver-cron on the hosted Kynver deployment (Vercel).","Set KYNVER_CRON_SECRET to the same value written to ~/.kynver/.env by this installer.","Unset KYNVER_CRON_STORE_PATH on Vercel \u2014 the connected box owns the local store.","Keep QSTASH_TOKEN only if other non-watchdog schedules still use QStash (analyst/market jobs)."];function zh(e){let r=e.storePath?.trim()||Pr(),t=e.envFilePath?.trim()||Ar,n=gP.join(fP(),".kynver","config.json"),o=`/api/agent-os/by-id/${e.agentOsId}/scheduler/fire`,s=[];e.apiBaseUrl?.trim()||s.push("apiBaseUrl \u2014 run `kynver setup --api-base-url \u2026`"),e.agentOsId?.trim()||s.push("agentOsId \u2014 run `kynver setup --agent-os-id \u2026`");let i={KYNVER_API_URL:e.apiBaseUrl,KYNVER_CRON_SECRET:e.cronSecret,KYNVER_CRON_STORE_PATH:r,KYNVER_CRON_TICK_ENABLED:"1"},a=["OPENCLAW_CRON_STORE_PATH","OPENCLAW_CRON_SECRET","OPENCLAW_CRON_FIRE_BASE_URL"],l={deploymentSchedulerProvider:"kynver-cron",apiBaseUrl:e.apiBaseUrl,agentOsId:e.agentOsId,...e.defaultDaemonRunId?{defaultDaemonRunId:e.defaultDaemonRunId}:{}};return{envFilePath:t,configPath:n,storePath:r,envUpdates:i,envRemovals:a,configUpdates:l,deploymentSteps:kP,prerequisites:s,systemdSupported:process.platform==="linux",watchdogSpec:{kind:"watchdog",cron:hP,dedupeKey:Ir,callbackPath:o}}}async function sn(e){let r=e.envFilePath??Ar,t=[],n=mr(),o=await Di(n),s=Mi(r);t.push({id:"config_agent_os",ok:!!e.config.agentOsId?.trim(),summary:e.config.agentOsId?`agentOsId configured (${e.config.agentOsId})`:"agentOsId missing in ~/.kynver/config.json",remediation:"Run `kynver setup --agent-os-id <id>`."}),t.push({id:"config_api_base",ok:!!(e.config.apiBaseUrl?.trim()||n.fireBaseUrl),summary:n.fireBaseUrl?`fire base URL resolved (${n.fireBaseUrl})`:"KYNVER_API_URL / apiBaseUrl not configured",remediation:"Run `kynver setup --api-base-url https://\u2026`."}),t.push({id:"deployment_provider",ok:e.config.deploymentSchedulerProvider==="kynver-cron",summary:`deploymentSchedulerProvider=${e.config.deploymentSchedulerProvider??"(unset)"}`,remediation:'Run `kynver cron install` or set deploymentSchedulerProvider to "kynver-cron".'}),t.push({id:"cron_secret",ok:!!n.secret,summary:n.secret?"KYNVER_CRON_SECRET present":"KYNVER_CRON_SECRET missing",remediation:"Run `kynver cron install` to generate and persist the shared secret."}),t.push({id:"env_file",ok:Ui(r)&&!!s.get("KYNVER_CRON_SECRET"),summary:Ui(r)?`~/.kynver/.env present (${s.size} keys)`:"~/.kynver/.env missing",remediation:"Run `kynver cron install` to write ~/.kynver/.env."}),t.push({id:"cron_store",ok:Ui(n.storePath),summary:Ui(n.storePath)?`cron store present (${n.storePath})`:`cron store missing (${n.storePath})`,remediation:"Run `kynver cron install` to initialize the local store."});let a=(await lt(n.storePath).catch(()=>[])).find(u=>u.spec.dedupeKey===Ir);t.push({id:"watchdog_local",ok:!!a,summary:a?`watchdog entry in local store (${a.providerScheduleId})`:"watchdog entry not mirrored in local cron store",remediation:"Run `kynver cron install` (with API access) to register and mirror watchdog."}),t.push({id:"daemon_primary",ok:o.daemonPrimary,summary:o.daemonPrimary?"cron tick enabled with credentials (daemon-primary)":`cron primary=${o.primary}; tickEnabled=${o.env.tickEnabled}`,remediation:"Ensure KYNVER_CRON_TICK_ENABLED=1 and run `kynver daemon` (or enable the systemd user unit)."});let l=s.has("OPENCLAW_CRON_STORE_PATH")||s.has("OPENCLAW_CRON_SECRET")||s.has("OPENCLAW_CRON_FIRE_BASE_URL");return t.push({id:"legacy_openclaw_env",ok:!l,summary:l?"legacy OPENCLAW_CRON_* keys still present in ~/.kynver/.env":"no legacy OPENCLAW_CRON_* keys in env file",remediation:"Re-run `kynver cron install` to retire legacy aliases."}),{ok:t.every(u=>u.ok),checks:t}}O();nr();w();import{existsSync as dk}from"node:fs";import{createHash as yP}from"node:crypto";function Xh(e){let r=JSON.stringify({cb:e.callbackPath,cron:e.cron??null,runAt:e.runAt??null,kind:e.kind,target:e.target,dedupeKey:e.dedupeKey??null});return`kc-cron:${yP("sha1").update(r).digest("hex").slice(0,16)}`}async function eu(e,r,t={}){return fetch(e,{...t,headers:{"Content-Type":"application/json",Authorization:`Bearer ${r}`,...t.headers}})}async function Qh(e,r,t,n={}){let o=new URLSearchParams(n),s=`${e}/api/agent-os/by-id/${encodeURIComponent(r)}/scheduler/jobs?${o}`,i=await eu(s,t),a=await i.text(),l=null;try{l=JSON.parse(a)}catch{l=null}if(!i.ok)throw new Error(`list scheduler jobs failed (${i.status}): ${l?.error??a.slice(0,200)}`);return l?.items??[]}async function Zh(e,r,t,n,o={}){let s=`${e}/api/agent-os/by-id/${encodeURIComponent(r)}/scheduler/watchdog/ensure`,i={};n&&(i.cron=n),o.requireProvider&&(i.requireProvider=o.requireProvider);let a=await eu(s,t,{method:"POST",body:JSON.stringify(i)}),l=await a.text(),c=null;try{c=JSON.parse(l)}catch{c=null}if(!a.ok||!c?.job)throw new Error(`ensure watchdog failed (${a.status}): ${c?.error??l.slice(0,200)}`);return{job:c.job,route:c.route??`/api/agent-os/by-id/${r}/scheduler/fire`,dedupeKey:c.dedupeKey??Ir,requestedCron:c.requestedCron??n??"*/5 * * * *",selectedProvider:c.selectedProvider??c.job.provider??null}}async function ek(e,r,t,n){let o=`${e}/api/agent-os/by-id/${encodeURIComponent(r)}/scheduler/jobs/${encodeURIComponent(t)}/cancel`,s=await eu(o,n,{method:"POST",body:"{}"});if(!s.ok){let i=await s.text();throw new Error(`cancel job ${t} failed (${s.status}): ${i.slice(0,200)}`)}}function rk(e,r,t=Ir){return{kind:"watchdog",scheduleKind:"cron",cron:r,callbackPath:`/api/agent-os/by-id/${e}/scheduler/fire`,payload:{source:"agent-os.watchdog-schedule",agentOsId:e},target:{agentOsId:e},description:"Watchdog board sweep (repair loop)",dedupeKey:t}}function tk(e){return e.filter(r=>r.kind==="watchdog"&&r.dedupeKey===Ir&&r.provider==="qstash"&&r.status!=="cancelled")}function RP(e){return e.find(r=>r.kind==="watchdog"&&r.dedupeKey===Ir&&r.provider==="kynver-cron"&&r.status!=="cancelled")}function nk(e){return RP(e)?{allowed:!0}:{allowed:!1,reason:"Cannot cancel QStash watchdog until hosted KYNVER_SCHEDULER_PROVIDER=kynver-cron is live and a kynver-cron watchdog row exists. Set Vercel env, redeploy, re-run `kynver cron install`, then `--confirm-qstash-removal`."}}import{randomBytes as vP}from"node:crypto";function bP(){return vP(32).toString("base64url")}function ok(e=Ar){let r=jc();if(r)return{secret:r,generated:!1,source:"env"};let n=Mi(e).get("KYNVER_CRON_SECRET")?.trim();return n?{secret:n,generated:!1,source:"env-file"}:{secret:bP(),generated:!0,source:"generated"}}import{realpathSync as SP}from"node:fs";function Li(e=process.argv[1]){let r=process.env.KYNVER_BIN?.trim();if(r)return r;let t=e?.trim();if(!t)return"kynver";try{return SP.native(t)}catch{return t}}function sk(e){return/\s/.test(e)?`"${e.replace(/"/g,'\\"')}"`:e}import{existsSync as CP,mkdirSync as _P,writeFileSync as xP}from"node:fs";import{homedir as EP}from"node:os";import lk from"node:path";import{spawnSync as ak}from"node:child_process";import{spawnSync as wP}from"node:child_process";var ru="1.5G";var bo;function an(){return process.env.KYNVER_BUILD_SKIP_SYSTEMD==="1"||process.env.KYNVER_BUILD_SKIP_SYSTEMD==="true"?!1:bo!==void 0?bo:process.platform!=="linux"?(bo=!1,!1):(bo=wP("systemd-run",["--version"],{encoding:"utf8",stdio:["ignore","ignore","pipe"]}).status===0,bo)}function Bi(e){let r=e.memoryMax??process.env.KYNVER_BUILD_SYSTEMD_MEMORY_MAX??ru,t=e.memorySwapMax??process.env.KYNVER_BUILD_SYSTEMD_MEMORY_SWAP_MAX??"2G",n=["systemd-run","--scope","--collect","-p",`MemoryMax=${r}`,"-p",`MemorySwapMax=${t}`];return e.cwd&&n.push("--working-directory",e.cwd),n.push("--",...e.command),n}var tu="kynver-cron-daemon.service";function PP(){return lk.join(EP(),".config","systemd","user")}function AP(e){let r=sk(e.kynverBin?.trim()||Li());return["[Unit]","Description=Kynver AgentOS daemon (pipeline + cron tick)","After=network-online.target","","[Service]","Type=simple",`EnvironmentFile=${e.envFilePath}`,`ExecStart=${r} daemon --run ${e.runId} --agent-os-id ${e.agentOsId} --execute`,"Restart=on-failure","RestartSec=10","","[Install]","WantedBy=default.target",""].join(`
-`)}function ck(e,r){if(!an())return{supported:!1,unitPath:null,written:!1,enabled:!1,started:!1,note:process.platform==="linux"?"systemd-run not available \u2014 install user service manually or run `kynver daemon` under your supervisor.":"systemd user units are only supported on Linux; use `kynver daemon` manually on macOS/Windows."};let t=PP(),n=lk.join(t,tu),o=AP(e);if(!r)return{supported:!0,unitPath:n,written:!1,enabled:!1,started:!1,note:"Dry-run \u2014 pass --execute to write and enable the user unit."};_P(t,{recursive:!0});let s=CP(n);xP(n,o,"utf8");let i=ak("systemctl",["--user","daemon-reload"],{encoding:"utf8"});if(i.status!==0)return{supported:!0,unitPath:n,written:!0,enabled:!1,started:!1,note:`Wrote ${n} but systemctl --user daemon-reload failed: ${i.stderr||i.stdout}`};let a=ak("systemctl",["--user","enable","--now",tu],{encoding:"utf8"});return{supported:!0,unitPath:n,written:!s||!0,enabled:a.status===0,started:a.status===0,note:a.status===0?`Enabled and started ${tu}`:`Wrote ${n} but enable failed: ${a.stderr||a.stdout}`}}L();function uk(e,r){if(r?.trim())return r.trim();if(e.defaultDaemonRunId?.trim())return e.defaultDaemonRunId.trim();let t=oe().runsDir;return dk(t)?ne().sort((o,s)=>Date.parse(s.createdAt)-Date.parse(o.createdAt))[0]?.id??null:null}async function Wi(e={}){let r=e.execute!==!1,t=v(),n=tr(e.apiBaseUrl?.trim()||t.apiBaseUrl?.trim()||process.env.KYNVER_API_URL?.trim()||""),o=e.agentOsId?.trim()||t.agentOsId?.trim()||process.env.KYNVER_AGENT_OS_ID?.trim()||"",s=ok(),i=zh({config:t,apiBaseUrl:n,agentOsId:o,cronSecret:s.secret,defaultDaemonRunId:e.runId?.trim()||t.defaultDaemonRunId,installSystemd:e.installSystemd===!0}),a=[...i.prerequisites],l={ok:!1,dryRun:!r,plan:i,secretGenerated:s.generated,configPath:Y(i.configPath),storeInitialized:!1,blockers:a};if(a.length)return l;if(r){let c=qh(i.envUpdates,{filePath:i.envFilePath,removeKeys:i.envRemovals});l.envFile={path:Y(c.path),changed:c.changed,keysWritten:c.keysWritten};let u={...t,...i.configUpdates},d=uk(u,e.runId);d&&(u.defaultDaemonRunId=d),Ve(u),process.env.KYNVER_API_URL=n,process.env.KYNVER_CRON_SECRET=s.secret,process.env.KYNVER_CRON_STORE_PATH=i.storePath,process.env.KYNVER_CRON_TICK_ENABLED="1";let f=await sh(i.storePath);l.storeInitialized=f.created||dk(i.storePath);let m=ee();if(m)try{let p=await Vr(o,{baseUrl:n,apiKey:m});jr(o,p)}catch{}if(!e.skipWatchdog)if(!m)l.watchdog={error:"KYNVER_API_KEY required to register watchdog on server"},a.push("login \u2014 run `kynver login --api-key \u2026` to register watchdog remotely");else try{let p=await Zh(n,o,m,void 0,{requireProvider:"kynver-cron"}),g=rk(o,p.requestedCron,p.dedupeKey),k={providerScheduleId:Xh(g),spec:g,registeredAt:new Date().toISOString(),paused:!1};await oh(k,i.storePath),l.watchdog={remoteJobId:p.job.id,provider:p.selectedProvider??p.job.provider,localProviderScheduleId:k.providerScheduleId};let h=await Qh(n,o,m),S=tk(h),A=["Phase 1 (local): `kynver cron install` writes box env/store and may fail remote watchdog until Vercel cutover.","Phase 2 (hosted): set KYNVER_SCHEDULER_PROVIDER=kynver-cron + KYNVER_CRON_SECRET on Vercel, redeploy, re-run install.","Phase 3 (cleanup): `kynver cron install --confirm-qstash-removal` after a kynver-cron watchdog row exists.","Analyst/market QStash schedules are never touched by this installer."],W=[];if(S.length)if(e.confirmQstashRemoval){let E=nk(h);if(!E.allowed)a.push(E.reason);else for(let b of S)await ek(n,o,b.id,m),W.push(b.id)}else a.push(`${S.length} QStash watchdog job(s) still active \u2014 complete Vercel cutover (KYNVER_SCHEDULER_PROVIDER=kynver-cron + KYNVER_CRON_SECRET), re-run install, then --confirm-qstash-removal`);l.qstashWatchdog={found:S.map(E=>({id:E.id,provider:E.provider,status:E.status})),removed:W,manualSteps:A}}catch(p){l.watchdog={error:p.message},a.push(`watchdog registration failed: ${p.message}`)}if(e.installSystemd){let p=uk({...t,...i.configUpdates},e.runId);if(!p)l.systemd={supported:i.systemdSupported,unitPath:null,written:!1,enabled:!1,started:!1,note:"No harness run found \u2014 run `kynver run create` first or pass --run <runId>."},a.push("harness run \u2014 create a run before installing systemd unit");else{try{U(p)}catch{a.push(`harness run ${p} not found`)}l.systemd=ck({envFilePath:i.envFilePath,agentOsId:o,runId:p,kynverBin:Li()},r)}}if(!e.skipTestFire&&a.length===0){let p=await en({agentOsIdFilter:o});l.testFire={fired:p.fired,errors:p.errors},p.errors>0&&a.push(`test fire reported ${p.errors} error(s) \u2014 check server KYNVER_CRON_SECRET matches`)}else e.skipTestFire&&(l.testFire={fired:0,errors:0,skipped:!0});l.verify=await sn({config:v(),envFilePath:i.envFilePath}),l.blockers=a,l.ok=a.length===0&&(l.verify?.ok??!1)}else l.ok=a.length===0;return l}var IP=["deployment_provider","cron_secret","env_file","cron_store"];function pk(e){let r=e?.trim().toLowerCase();if(r==="qstash"||r==="kynver-cron"||r==="openclaw-cron")return r;if(r==="openclaw")return"openclaw-cron"}function OP(e){let r=pk(process.env.KYNVER_SCHEDULER_PROVIDER);if(r==="qstash"||r==="openclaw-cron")return!1;if(r==="kynver-cron")return!0;let t=pk(e.deploymentSchedulerProvider);return t==="qstash"||t==="openclaw-cron"?!1:t==="kynver-cron"?!0:!!(e.agentOsId?.trim()&&e.apiBaseUrl?.trim())}async function NP(e){if(!OP(e))return{expectsKynverCron:!1,ready:!0,failedChecks:[]};let t=(await sn({config:e})).checks.filter(n=>IP.includes(n.id)&&!n.ok);return{expectsKynverCron:!0,ready:t.length===0,failedChecks:t}}function TP(e){let r=["Run `kynver cron install` on this box."];for(let t of e)t.remediation&&r.push(`  \u2022 ${t.id}: ${t.remediation}`);return r}function nu(e){return e===!0||e==="true"||e==="1"||e==="yes"||e==="on"}async function mk(e){if(nu(e.args.skipCron))return{action:"skipped"};let r=await NP(e.config);if(!r.expectsKynverCron||r.ready)return{action:"ready"};console.log(""),console.log("  Local Kynver Cron is not ready \u2014 running `kynver cron install`\u2026");let t=nu(e.args.installSystemd)||nu(e.args["install-systemd"]),n=await Wi({execute:!0,skipTestFire:!0,agentOsId:e.agentOsId,runId:e.runId,installSystemd:t});if(n.ok)return console.log("  Kynver Cron configured for this box."),console.log(""),{action:"installed",installOk:!0};console.log(""),console.log("  Cron install did not fully complete (daemon will still start):");for(let o of n.blockers)console.log(`    ! ${o}`);if(n.plan.deploymentSteps.length){console.log(""),console.log("  Hosted deployment (complete on Vercel, then re-run install):");for(let o of n.plan.deploymentSteps)console.log(`    - ${o}`)}for(let o of TP(r.failedChecks))console.log(`  ${o}`);return console.log(""),{action:"guided",installOk:!1,blockers:n.blockers}}function MP(e,r){return e.filter(n=>n.repo===r&&!cr.has(n.status)).sort((n,o)=>(o.createdAt??"").localeCompare(n.createdAt??""))[0]?.id??null}async function fk(e){Zt();let r=v();(!ee()||!r.agentOsId?.trim())&&(console.log("  This machine isn't linked yet \u2014 running bootstrap first."),await xi(e),r=v());let t=(typeof e.agentOsId=="string"?e.agentOsId.trim():"")||r.agentOsId?.trim()||"";t||(console.error("No AgentOS workspace configured \u2014 run `kynver bootstrap` (or pass --agent-os-id)."),process.exit(1)),e.chatOauth===!0&&r.chatUseClaudeOauth!==!0&&(Ve({...r,chatUseClaudeOauth:!0}),r=v(),console.log("  Chat: Claude Code OAuth opt-in saved (delegated turns may use your local subscription)."));let n=(typeof e.repo=="string"?e.repo.trim():"")||r.defaultRepo?.trim()||Re()?.repo||"";n||(console.error("No repo configured \u2014 pass --repo /path/to/repo or run `kynver setup --discover-repo`."),process.exit(1));let o=typeof e.run=="string"&&e.run.trim()?e.run.trim():"";o||(o=MP(ne(),n)??"",o?console.log(`  Reusing run ${o} for ${n}.`):o=ao({...e,repo:n,name:"agent"}).runId),await mk({config:r,agentOsId:t,runId:o,args:e}),console.log(""),console.log(`  ${DP.hostname()} \u2014 agent coming online`),console.log(`    workspace: ${t}`),console.log(`    repo:      ${n}`),console.log(`    run:       ${o}`),console.log("  Ctrl-C stops the agent. (Advanced control: `kynver daemon --help`.)"),console.log("");let s={...e,run:o,agentOsId:t};if(Ni(s)){await Ti(s,UP(o,t,e));return}await vo(s)}function UP(e,r,t){let n=["daemon","--run",e,"--agent-os-id",r];return typeof t.intervalMs=="string"&&t.intervalMs.trim()&&n.push("--interval-ms",t.intervalMs.trim()),(t.execute===!1||t.execute==="false")&&n.push("--execute","false"),typeof t.stallMs=="string"&&t.stallMs.trim()&&n.push("--stall-ms",t.stallMs.trim()),n}L();L();G();import{existsSync as LP,rmSync as BP}from"node:fs";import ou from"node:path";function WP(e){let r=e.replace(/\\/g,"/").replace(/^\.\//,"").trim();if(!r||r.startsWith("/")||r.includes(".."))throw new Error(`unsafe path: ${e}`);return r}function HP(e){return typeof e!="string"||!e.trim()?[]:e.split(",").map(r=>r.trim()).filter(Boolean)}function FP(e){let{runId:r,workerName:t}=Be(e),n=ye(r,t),o=[...HP(e.path),...Array.isArray(e.paths)?e.paths:[]];if(o.length===0)return{ok:!1,removed:[],reason:"requires at least one --path"};let s=ou.resolve(n.worktreePath),i=[];for(let c of o){let u=WP(c),d=ou.resolve(s,u);if(!d.startsWith(s+ou.sep)&&d!==s)return{ok:!1,removed:i,reason:`path escapes worktree: ${c}`};if(!LP(d))return{ok:!1,removed:i,reason:`path not found: ${c}`};BP(d,{recursive:!0,force:!0}),i.push(u)}let a=Array.isArray(n.disposableArtifactsRemoved)?n.disposableArtifactsRemoved.filter(c=>typeof c=="string"):[];n.disposableArtifactsRemoved=[...new Set([...a,...i])],V(n.runId,n);let l=T(n);return{ok:!0,removed:i,...l.changedFiles.length?{reason:"worktree still has other changes"}:{}}}function gk(e){let r=FP(e);console.log(JSON.stringify(r,null,2)),r.ok||process.exit(1)}O();import mA from"node:path";jo();var $P=/--max-old-space-size=(\d+)/;function KP(e,r){let t=Number(e);return!Number.isFinite(t)||t<=0?r:Math.floor(t)}function su(){return KP(process.env.KYNVER_NODE_OLD_SPACE_SIZE_MB,1024)}function Hi(e=process.env){let r={...e};if(process.env.KYNVER_NODE_OLD_SPACE_SIZE_MB==="0")return r;let t=r.NODE_OPTIONS??"";if($P.test(t))return r;let o=`--max-old-space-size=${su()}`;return r.NODE_OPTIONS=t.trim()?`${t.trim()} ${o}`:o,r}function ln(e=su()){return`--max-old-space-size=${e}`}O();import{spawnSync as jP}from"node:child_process";jo();function Fi(e,r){let t=Number(e);return!Number.isFinite(t)||t<=0?r:Math.floor(t)}function kk(e=v()){let r=process.env.KYNVER_BUILD_MEM_BUDGET_BYTES?Fi(process.env.KYNVER_BUILD_MEM_BUDGET_BYTES,1610612736):void 0,t=process.env.KYNVER_BUILD_MEM_RESERVE_BYTES?Fi(process.env.KYNVER_BUILD_MEM_RESERVE_BYTES,2147483648):void 0;return{perBuildBudgetBytes:r??Fi(e.perWorkerMemBytes,1610612736),reserveBytes:t??Fi(e.memReserveBytes,2147483648)}}var $i=0;function lu(){$i+=1}function cu(){$i=Math.max(0,$i-1)}function dt(e={}){let r={...kk(),...e},t=e.memAvailableBytes??Ct(),n=r.perBuildBudgetBytes+r.reserveBytes,o=t>=n;return{admitted:o,memAvailableBytes:t,requiredBytes:n,activeBuilds:$i,reason:o?null:`insufficient memory: need ${n} bytes available (budget ${r.perBuildBudgetBytes} + reserve ${r.reserveBytes}), have ${t}`}}function VP(e){e<=0||jP(process.execPath,["-e",`const d=Date.now()+${Math.floor(e)};while(Date.now()<d);`],{stdio:"ignore"})}function uu(e,r=2e3,t={}){let n=Date.now()+Math.max(0,e),o=dt({...t,memAvailableBytes:t.memAvailableBytes?.()});for(;!o.admitted&&Date.now()<n;)VP(Math.min(r,n-Date.now())),o=dt({...t,memAvailableBytes:t.memAvailableBytes?.()});return o}import{spawnSync as dA}from"node:child_process";w();import{closeSync as qP,existsSync as du,mkdirSync as zP,openSync as XP,readdirSync as Rk,readFileSync as QP,unlinkSync as pu,writeFileSync as ZP}from"node:fs";import mu from"node:path";import{mkdirSync as GP}from"node:fs";import{tmpdir as YP}from"node:os";import Ki from"node:path";function JP(){return!!(process.env.VERCEL||process.env.VERCEL_ENV||process.env.AWS_LAMBDA_FUNCTION_NAME||process.env.AWS_EXECUTION_ENV)}function yk(){let e=process.env.KYNVER_HEAVY_VERIFICATION_STATE_ROOT;return e?Ki.resolve(e):JP()?Ki.join(YP(),"kynver","state","heavy-verification"):Ki.join(Gs(),"heavy-verification")}function So(){return Ki.join(yk(),"slots")}function cn(){let e=So();return GP(e,{recursive:!0}),e}var dn=120*6e4,ji=1;function eA(e,r){let t=Number(e);return!Number.isFinite(t)||t<=0?r:Math.floor(t)}function pn(){let e=process.env.KYNVER_HEAVY_VERIFICATION_SKIP?.trim().toLowerCase();return e==="1"||e==="true"||e==="yes"}function un(){let e=process.env.KYNVER_HEAVY_VERIFICATION_MAX_CONCURRENT;return e?eA(e,ji):ji}function rA(e){return`slot-${e}`}function vk(e,r=So()){return mu.join(r,`${e}.json`)}function fu(e){if(!du(e))return null;try{let r=JSON.parse(QP(e,"utf8"));if(typeof r.slotId=="string"&&typeof r.pid=="number"&&typeof r.acquiredAt=="string"&&typeof r.command=="string")return r}catch{return null}return null}function Vi(e,r=dn){if(!e||!$(e.pid))return!0;let t=Date.parse(e.acquiredAt);return Number.isNaN(t)?!0:Date.now()-t>r}function tA(e,r){let t=fu(e);if(Vi(t,r))try{pu(e)}catch{}}function nA(e){return zP(e,{recursive:!0}),e}function Co(e={}){let r=nA(e.slotsDir??cn()),t=e.staleMs??dn,n=0;for(let o of Rk(r)){if(!o.endsWith(".json"))continue;let s=mu.join(r,o),i=du(s);tA(s,t),i&&!du(s)&&(n+=1)}return n}function gu(e={}){let r=e.slotsDir??cn(),t=e.staleMs??dn;Co({slotsDir:r,staleMs:t});let n=[];for(let o of Rk(r)){if(!o.endsWith(".json"))continue;let s=fu(mu.join(r,o));s&&!Vi(s,t)&&n.push(s)}return n}function wo(e={}){return gu(e).length}function pt(e,r={}){if(pn())return{admitted:!0,slotId:null,activeSlots:0,maxSlots:un(),reason:null};let t=r.slotsDir??cn(),n=r.staleMs??dn,o=r.maxSlots??un();Co({slotsDir:t,staleMs:n});for(let i=0;i<o;i+=1){let a=rA(i),l=vk(a,t),c=fu(l);if(c&&Vi(c,n))try{pu(l)}catch{}else if(c&&!Vi(c,n))continue;let u={slotId:a,pid:process.pid,acquiredAt:new Date().toISOString(),command:e};try{let d=XP(l,"wx");ZP(d,JSON.stringify(u,null,2),"utf8"),qP(d);let f=wo({slotsDir:t,staleMs:n});return{admitted:!0,slotId:a,activeSlots:f,maxSlots:o,reason:null}}catch(d){if(d.code==="EEXIST")continue;throw d}}let s=wo({slotsDir:t,staleMs:n});return{admitted:!1,slotId:null,activeSlots:s,maxSlots:o,reason:`heavy verification at capacity (${s}/${o} slots)`}}function mn(e,r={}){if(!e)return;let t=vk(e,r.slotsDir??So());try{pu(t)}catch{}}function fn(e,r={}){if(pn())return{admitted:!0,slotId:null,activeSlots:0,maxSlots:un(),reason:null};let t=r.slotsDir??cn(),n=r.staleMs??dn,o=r.maxSlots??un();Co({slotsDir:t,staleMs:n});let s=wo({slotsDir:t,staleMs:n}),i=s<o;return{admitted:i,slotId:null,activeSlots:s,maxSlots:o,reason:i?null:`heavy verification at capacity (${s}/${o} slots); waiting for ${e}`}}import{spawnSync as oA}from"node:child_process";function sA(e){e<=0||oA(process.execPath,["-e",`const d=Date.now()+${Math.floor(e)};while(Date.now()<d);`],{stdio:"ignore"})}function Gi(e,r,t=2e3,n={}){let o=Date.now()+Math.max(0,r),s=pt(e,n);for(;!s.admitted&&Date.now()<o;)sA(Math.min(t,o-Date.now())),s=pt(e,n);return s}var iA=/\b(npm run typecheck|tsc\b[^|&;]*--noEmit|node scripts\/verify-pr-local\.mjs|kynver (harness )?verify)\b/i,aA=/\b(npm run build\b|next build\b)\b/i,lA=/\b(vercel (build|deploy|--prod))\b/i,cA=/\b(openai|anthropic|perplexity|voyage)\b.*\b(api|cli)\b|\b(paid|billable)[-_ ]?compute\b/i;function Yi(e){let r=e.trim();return r?cA.test(r)?{heavy:!0,commandClass:"paid_compute",reason:"paid external compute requires heavy-verification token and operator approval"}:lA.test(r)?{heavy:!0,commandClass:"vercel_verify",reason:"Vercel build/deploy verification requires heavy-verification token"}:aA.test(r)?{heavy:!0,commandClass:"full_build",reason:"full app build requires heavy-verification token"}:iA.test(r)?{heavy:!0,commandClass:"full_typecheck",reason:"full repo typecheck requires heavy-verification token"}:{heavy:!1,commandClass:"allowed",reason:null}:{heavy:!1,commandClass:"allowed",reason:null}}var _o="heavy_verification_token_required";function Ji(e,r={}){let t=Yi(e);if(!t.heavy)return{allowed:!0,outcome:"allowed",commandClass:t.commandClass,reason:"command does not require heavy-verification token",verificationGate:{...fn(e),slotId:null}};if(pn())return{allowed:!0,outcome:"heavy_verification_skipped",commandClass:t.commandClass,reason:"KYNVER_HEAVY_VERIFICATION_SKIP bypasses gate",verificationGate:{...fn(e),slotId:null}};let n=r.waitMs??0,o=n>0?Gi(e,n,r.pollMs):pt(e);return o.admitted?{allowed:!0,outcome:"allowed",commandClass:t.commandClass,reason:t.reason??"heavy-verification token acquired",verificationGate:o}:{allowed:!1,outcome:_o,commandClass:t.commandClass,reason:t.reason??o.reason??_o,verificationGate:o}}ke();import hu from"node:path";function uA(e){let r=or(de()),t=hu.relative(r,hu.resolve(e));return t.length>0&&!t.startsWith("..")&&!hu.isAbsolute(t)}function bk(e){return uA(e)?(typeof process.getuid=="function"?process.getuid():null)===0?{ok:!1,reason:"Refusing build/install as root inside a harness worktree \u2014 generated caches become root-owned and block daemon cleanup. Run kynver daemon and workers as the harness owner (never sudo kynver)."}:{ok:!0}:{ok:!0}}function pA(e){let r=[];for(let[t,n]of Object.entries(e))n!==void 0&&r.push(`${t}=${n}`);return r}function Sk(e,r){let t=dA(e[0],e.slice(1),{cwd:r.cwd,env:r.env,encoding:"utf8",stdio:["ignore","pipe","pipe"],shell:r.shell,timeout:r.timeoutMs});return{exitCode:t.status??1,stdout:(t.stdout??"").trim(),stderr:(t.stderr??"").trim()}}function qi(e){let r=e.waitForAdmissionMs??6e5,t=Ji(e.command,{waitMs:r}),n=t.verificationGate;if(!t.allowed)return{ok:!1,exitCode:1,stdout:"",stderr:t.reason,admitted:!1,wrappedWithSystemd:!1,nodeOptionsFlag:ln(),admission:dt(),verificationGate:n,gateOutcome:t.outcome,command:e.command};let o=n.slotId,s=r>0?uu(r):dt();if(!s.admitted)return mn(o),{ok:!1,exitCode:1,stdout:"",stderr:s.reason??"build admission denied",admitted:!1,wrappedWithSystemd:!1,nodeOptionsFlag:ln(),admission:s,verificationGate:n,command:e.command};let i=bk(e.cwd);if(!i.ok)return mn(o),{ok:!1,exitCode:1,stdout:"",stderr:i.reason,admitted:!0,wrappedWithSystemd:!1,nodeOptionsFlag:ln(),admission:s,verificationGate:n,command:e.command};let a=Hi({...process.env,...e.env}),l=ln(),c=an();lu();try{let u;if(c){let d=Bi({cwd:e.cwd,command:["/usr/bin/env",...pA(a),"/bin/bash","-lc",e.command]});u=Sk(d,{cwd:e.cwd,env:a,timeoutMs:e.timeoutMs})}else u=Sk([e.command],{cwd:e.cwd,env:a,shell:!0,timeoutMs:e.timeoutMs});return{ok:u.exitCode===0,exitCode:u.exitCode,stdout:u.stdout,stderr:u.stderr,admitted:!0,wrappedWithSystemd:c,nodeOptionsFlag:l,admission:s,verificationGate:n,gateOutcome:t.outcome,command:e.command}}finally{cu(),mn(o)}}var zi=["npm run typecheck","npm run test"];function xo(e,r=zi,t={}){let n=[],o=!0;for(let s of r){let i=qi({cwd:e,command:s,waitForAdmissionMs:t.waitForAdmissionMs,timeoutMs:t.timeoutMs});n.push({command:s,result:i}),i.ok||(o=!1)}return{passed:o,steps:n}}w();function wk(e){let r=e.indexOf(":");if(r<=0)throw new Error(`invalid --evidence ${e} (expected type:value)`);return{type:e.slice(0,r),value:e.slice(r+1)}}async function Ck(e){let r=N(e.plan?String(e.plan):void 0,"plan"),t=(e.agentOsId?String(e.agentOsId):v().agentOsId)||"";t||(console.error("requires --agent-os-id or agentOsId in ~/.kynver/config.json"),process.exit(1));let n=N(e.role?String(e.role):void 0,"role"),o=N(e.status?String(e.status):void 0,"status"),s=[],i=e.evidence;if(Array.isArray(i))for(let A of i)s.push(wk(String(A)));else typeof i=="string"&&s.push(wk(i));let a=B(e.baseUrl?String(e.baseUrl):void 0),l=await K(e.secret?String(e.secret):void 0,t,{baseUrl:a}),c=`${a}/api/agent-os/by-id/${encodeURIComponent(t)}/plans/${encodeURIComponent(r)}/progress-events`,u=v(),f=`provider:${Hn(u.workerProvider,xe)}`,p=(e.proposed===!0||e.proposed==="true"?!0:e.proposed===!1||e.proposed==="false"?!1:void 0)??(o!=="done"&&(n==="implementer"||n==="repair_implementer")),g={rowKey:e.row?String(e.row):void 0,rowId:e.rowId?String(e.rowId):void 0,taskId:e.task?String(e.task):void 0,reviewTaskId:e.reviewTask?String(e.reviewTask):void 0,roleLane:n,status:o,note:e.note?String(e.note):void 0,remainingWork:e.remaining?String(e.remaining):void 0,evidence:s.length?s:void 0,executorRef:e.executorRef?String(e.executorRef):f};p!==void 0&&(g.proposed=p);let k=await fetch(c,{method:"POST",headers:Le(l),body:JSON.stringify(g)}),h=await k.text(),S=null;try{S=JSON.parse(h)}catch{S=h}k.ok||(console.error(JSON.stringify({httpStatus:k.status,response:S},null,2)),process.exit(1)),console.log(JSON.stringify(S,null,2))}function fA(e){let r=N(e.worktree?String(e.worktree):void 0,"worktree"),t=mA.resolve(r),n=xo(t),o=e.json===!0||e.json==="true",s={passed:n.passed,worktree:t,steps:n.steps};console.log(o?JSON.stringify(s,null,2):n.passed?"local plan verify passed":"local plan verify failed"),n.passed||process.exit(1)}async function _k(e){let r=N(e.plan?String(e.plan):void 0,"plan");if(e.local===!0||e.local==="true"){fA(e);return}let n=v().agentOsSlug;n||(console.error("requires agentOsSlug in ~/.kynver/config.json for verify (session route)"),process.exit(1));let o=B(e.baseUrl?String(e.baseUrl):void 0),s=process.env.KYNVER_API_KEY,i={"Content-Type":"application/json"};s&&(i.Authorization=`Bearer ${s}`);let a=`${o}/api/agent-os/${encodeURIComponent(n)}/plans/${encodeURIComponent(r)}/verify`,l=await fetch(a,{method:"POST",headers:i,body:JSON.stringify({worktreePath:e.worktree?String(e.worktree):void 0,taskId:e.task?String(e.task):void 0,humanOverride:e.humanOverride===!0||e.humanOverride==="true"})}),c=await l.text(),u=null;try{u=JSON.parse(c)}catch{u=c}l.ok||(console.error(JSON.stringify({httpStatus:l.status,response:u},null,2)),process.exit(1)),console.log(JSON.stringify(u,null,2))}import gA from"node:path";w();function xk(e){let r=gA.resolve(N(e.worktree?String(e.worktree):void 0,"worktree")),t=e.json===!0||e.json==="true"||e.emitJson===!0||e.emitJson==="true",n=[],o=e.command;if(Array.isArray(o))for(let a of o)n.push(String(a));else typeof o=="string"&&n.push(o);let s=xo(r,n.length?n:zi,{waitForAdmissionMs:e.waitForAdmissionMs?Number(e.waitForAdmissionMs):void 0,timeoutMs:e.timeoutMs?Number(e.timeoutMs):void 0}),i={passed:s.passed,worktree:r,steps:s.steps.map(a=>({command:a.command,ok:a.result.ok,exitCode:a.result.exitCode,admitted:a.result.admitted,wrappedWithSystemd:a.result.wrappedWithSystemd,nodeOptionsFlag:a.result.nodeOptionsFlag,admission:a.result.admission,verificationGate:a.result.verificationGate,stderr:a.result.stderr.slice(0,4e3)}))};if(t)console.log(JSON.stringify(i,null,2));else{console.log(s.passed?"harness verify passed":"harness verify failed");for(let a of i.steps)console.log(`  ${a.ok?"\u2713":"\u2717"} ${a.command} (exit ${a.exitCode}, systemd=${a.wrappedWithSystemd})`),!a.ok&&a.stderr&&console.log(`    ${a.stderr.split(`
-`)[0]}`)}process.exit(s.passed?0:1)}O();import{readFileSync as hA}from"node:fs";w();var kA=["create","add_version","update_metadata"],yA=["approval_guard","auth","network","server","tool_interruption"];function RA(e){let r=e.bodyFile?String(e.bodyFile):void 0;if(r)return{body:hA(r,"utf8"),bodyPathHint:r};let t=e.body?String(e.body):void 0;if(t)return{body:t};throw new Error("requires --body-file PATH or --body TEXT")}async function Ek(e){let r=N(e.operation?String(e.operation):void 0,"operation");if(!kA.includes(r))throw new Error(`invalid --operation ${r}`);let t=r,n=v(),o=N(e.slug?String(e.slug):n.agentOsSlug,"slug (or agentOsSlug in ~/.kynver/config.json)"),s=N(e.title?String(e.title):void 0,"title"),{body:i,bodyPathHint:a}=RA(e);a&&Qn(a)&&console.warn(JSON.stringify({warning:"/tmp-only body path is not durable; AgentOS persistence requires outbox or successful API write",bodyPathHint:a}));let l={operation:t,agentOsSlug:o,title:s,body:i,bodyPathHint:a,summary:e.summary?String(e.summary):void 0,planId:e.plan?String(e.plan):void 0,planSlug:e.planSlug?String(e.planSlug):void 0,changeSummary:e.changeSummary?String(e.changeSummary):void 0,author:e.author?String(e.author):void 0,model:e.model?String(e.model):void 0,maxRetries:e.maxRetries?Number(e.maxRetries):void 0,immediateFailure:vA(e)},c=await jt(l);console.log(JSON.stringify(c,null,2)),c.userStatus==="failed and needs action"&&process.exit(1)}function vA(e){let r=e.failureKind?String(e.failureKind):void 0;if(!r)return;if(!yA.includes(r))throw new Error(`invalid --failure-kind ${r}`);let t=e.failureMessage?String(e.failureMessage):`immediate failure (${r})`;return{kind:r,message:t}}async function Pk(){let e=tt();console.log(JSON.stringify({count:e.length,items:e},null,2))}async function Ak(e){let r=e.max?Number(e.max):void 0,t=e.id?String(e.id):void 0,n=await Js({max:r,outboxId:t});console.log(JSON.stringify(n,null,2)),n.failed>0&&process.exit(1)}function Ik(e){let r=e.execute===!0||e.execute==="true",t=e.skipFinalize===!0||e.skipFinalize==="true",n=e.accountBytes===!0||e.accountBytes==="true",o=e.compact===!0||e.compact==="true",s=e.nodeModulesAgeMs,i=s!=null&&s!=="",a=i?Number(s):void 0,l=e.worktreesAgeMs?Number(e.worktreesAgeMs):0,c=e.includeOrphans===!0||e.includeOrphans==="true",u=e.harnessRoot?String(e.harnessRoot):void 0,d=_i({execute:r,finalizeStaleRuns:!t,accountBytes:n,scanDependencyCaches:i,nodeModulesAgeMs:a!==void 0&&Number.isFinite(a)?a:i?216e5:void 0,worktreesAgeMs:Number.isFinite(l)?l:0,includeOrphans:c,harnessRoot:u});o&&d.compactSummary?console.log(JSON.stringify(d.compactSummary,null,2)):console.log(JSON.stringify(d,null,2)),r&&d.totals.removedPaths===0&&d.actions.length===0&&(process.exitCode=0)}function Ok(e){let r=e.trim();if(!r.startsWith("{")&&!r.startsWith("["))return null;try{return JSON.parse(r)}catch{return null}}function re(e,r=2400){if(e==null)return;let n=(typeof e=="string"?e:JSON.stringify(e,null,2)).trim();if(n)return n.length<=r?n:`${n.slice(0,r-1).trimEnd()}\u2026`}function Xi(e){let r=e.trim();if(!r)return null;let t=Ok(r);if(t!==null)return t;for(let n of r.split(`
-`)){let o=Ok(n);if(o!==null)return o}return null}function Qi(e){let r=[];switch(r.push(`Background auto-complete \xB7 ${e.runId} / ${e.worker}`),e.outcome){case"completed":r.push("Outcome: harness completion posted to AgentOS successfully."),r.push("AgentOS task should close or advance to review per completion routing."),r.push("Next: check Command Center \u2014 no manual complete needed unless the board still shows running.");break;case"blocked":r.push(`Outcome: worker finished but completion was blocked${e.httpStatus?` (HTTP ${e.httpStatus})`:""}.`),e.reason&&r.push(`Blocker: ${e.reason}`),r.push("Next: fix the blocker (auth, landing gate, dirty worktree) and replay completion from Command Center.");break;case"timed_out":r.push(`Outcome: monitor gave up waiting \u2014 ${e.reason??"worker did not finish in time"}.`),r.push("Next: inspect the worker process/logs; stop or unblock the worker, then retry auto-complete.");break;case"missing_link":r.push(`Outcome: cannot complete \u2014 ${e.reason??"worker missing agentOsId/taskId"}.`),r.push("Next: re-dispatch with board linkage or run `kynver worker complete` with --agent-os-id.");break;default:r.push(`Outcome: ${e.outcome}`)}return{primary:r.join(`
-`),diagnostic:re(e)}}function gn(e){let r=[],t=typeof e.monitorId=="string"?e.monitorId:void 0;if(r.push(t?`Harness monitor tick \xB7 ${e.runId} (${t})`:`Harness monitor tick \xB7 ${e.runId}`),!e.workers.length)return r.push("No workers in scope for this poll."),{primary:r.join(`
-`),diagnostic:re(e)};for(let i of e.workers){let a=i.autoComplete.eligible?"eligible for auto-complete":"not auto-completing",l=i.autoComplete.blockers.length>0?` (${i.autoComplete.blockers.slice(0,2).join("; ")})`:"";r.push(`\u2022 ${i.worker}: ${i.workerStatus}, ${i.health}${i.healthReason?` \u2014 ${i.healthReason}`:""}; ${a}${l}`),i.taskStatus&&r.push(`  Board task: ${i.taskStatus}${i.leaseOwner?` (lease: ${i.leaseOwner})`:""}`)}let n=e.autoCompleted?.filter(i=>i.outcome==="completed"&&i.ok)??[],o=e.autoCompleted?.filter(i=>!i.ok&&i.outcome!=="skipped")??[];n.length&&r.push(`Auto-completed: ${n.map(i=>i.worker).join(", ")} \u2014 AgentOS completion should be posted.`),o.length&&r.push(`Auto-complete blocked: ${o.map(i=>`${i.worker}${i.reason?` (${i.reason})`:""}`).join("; ")}`),e.leaseRenewal?.failed?.length&&r.push(`Lease renew failed for: ${e.leaseRenewal.failed.map(i=>i.worker).join(", ")}`);let s=e.workers.length>0&&e.workers.every(i=>i.autoComplete.terminalVerified)&&(e.autoCompleted?.every(i=>i.ok||i.outcome==="skipped")??!0);return r.push(s?"Next: monitor loop should stop \u2014 all workers terminal and handled.":"Next: monitor will poll again until workers are terminal-verified or max time elapses."),{primary:r.join(`
-`),diagnostic:re(e)}}function ku(e){return e!==null&&typeof e=="object"&&!Array.isArray(e)?e:null}function rr(e){return typeof e=="string"&&e.trim()?e.trim():null}function Zi(e){let r=ku(e);if(!r)return{primary:"Harness worker complete finished with no parseable result.",diagnostic:re(e)};let t=rr(r.worker)??"worker",n=rr(r.runId),o=rr(r.status)==="skipped",s=typeof r.httpStatus=="number"?r.httpStatus:null,i=ku(r.response),a=[];if(a.push(`Harness worker complete \xB7 ${t}${n?` (${n})`:""}`),o)return a.push(`Outcome: skipped \u2014 ${rr(r.reason)??"worker not finished yet"}.`),a.push("Next: wait for the worker to exit or post a finalResult, then retry complete."),{primary:a.join(`
-`),diagnostic:re(e)};let l=rr(i?.outcome),c=ku(i?.task),u=rr(c?.status),d=rr(c?.prUrl)??rr(i?.prUrl);if(s&&s>=200&&s<300)a.push("Outcome: completion callback accepted by AgentOS."),l&&a.push(`Routing: ${l.replace(/_/g," ")}`),u&&a.push(`AgentOS task status: ${u}`),d&&a.push(`PR: ${d}`),a.push("Next: check Command Center for review scheduling or blockers.");else{a.push(`Outcome: completion failed${s!=null?` (HTTP ${s})`:""}.`);let f=rr(i?.detail)??rr(i?.error);f&&a.push(`Blocker: ${f}`),a.push("Next: fix the reported blocker and replay completion from the board.")}return{primary:a.join(`
-`),diagnostic:re(e)}}function ve(e){return typeof e=="string"&&e.trim()?e.trim():null}function yu(e){return e!==null&&typeof e=="object"&&!Array.isArray(e)?e:null}function bA(e){let r=yu(e);return r?ve(r.prUrl)??ve(r.pr):null}function Eo(e){let r=yu(e);if(!r)return{primary:"Harness worker status unavailable.",diagnostic:re(e)};let t=ve(r.worker)??ve(r.name)??"worker",n=ve(r.runId),o=ve(r.status)??"unknown",s=r.alive===!0,i=yu(r.attention),a=ve(i?.state)??ve(r.attentionState),l=ve(i?.reason)??ve(r.attentionReason),c=ve(r.taskId),u=ve(r.prUrl)??bA(r.finalResult),d=ve(r.branch),f=ve(r.headCommit),m=[];return m.push(`Harness worker ${t}${n?` (${n})`:""}`),m.push(`Process: ${s?"running":"stopped"} \xB7 harness status: ${o}`),a&&m.push(l?`Attention: ${a} \u2014 ${l}`:`Attention: ${a}`),c&&m.push(`AgentOS task: ${c}`),u&&m.push(`PR: ${u}`),d&&m.push(`Branch: ${d}`),f&&m.push(`Commit: ${f.slice(0,12)}`),o==="done"||o==="exited"?m.push(u?"Outcome: worker finished \u2014 open the PR or check Command Center for review routing.":"Outcome: worker finished \u2014 check Command Center for task status and next action."):a==="blocked"||a==="needs_attention"?m.push("Next: resolve the blocker on the board or wait for the monitor to auto-complete when terminal."):s&&m.push("Next: wait for completion or poll again; background monitor will auto-complete when eligible."),{primary:m.join(`
-`),diagnostic:re(e)}}var SA="\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500 Diagnostic (JSON) \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500";function Nk(e){return e.diagnostic?.trim()?`${e.primary}
+`)}function aa(e=Lr){return Kk(e)?Au(jk(e,"utf8")):new Map}function Gk(e,r={}){let t=r.filePath??Lr,n=Kk(t)?jk(t,"utf8"):"",o=Au(n),s=[],i=[];for(let u of r.removeKeys??[])o.delete(u)&&i.push(u);for(let[u,d]of Object.entries(e)){if(d===void 0)continue;let f=o.get(u);o.set(u,d),f!==d&&s.push(u)}let a=Au(n),l=a.size!==o.size;if(!l){for(let[u,d]of o)if(a.get(u)!==d){l=!0;break}}let c=IA(o);return l&&(EA(Vk.dirname(t),{recursive:!0}),PA(t,c,{mode:384})),{path:t,changed:l,keysWritten:s,keysRemoved:i}}var Br="watchdog:board-sweep",TA="*/5 * * * *",DA=["Set KYNVER_SCHEDULER_PROVIDER=kynver-cron on the hosted Kynver deployment (Vercel).","Set KYNVER_CRON_SECRET to the same value written to ~/.kynver/.env by this installer.","Unset KYNVER_CRON_STORE_PATH on Vercel \u2014 the connected box owns the local store.","Keep QSTASH_TOKEN only if other non-watchdog schedules still use QStash (analyst/market jobs)."];function Yk(e){let r=e.storePath?.trim()||Wr(),t=e.envFilePath?.trim()||Lr,n=NA.join(OA(),".kynver","config.json"),o=`/api/agent-os/by-id/${e.agentOsId}/scheduler/fire`,s=[];e.apiBaseUrl?.trim()||s.push("apiBaseUrl \u2014 run `kynver setup --api-base-url \u2026`"),e.agentOsId?.trim()||s.push("agentOsId \u2014 run `kynver setup --agent-os-id \u2026`");let i={KYNVER_API_URL:e.apiBaseUrl,KYNVER_CRON_SECRET:e.cronSecret,KYNVER_CRON_STORE_PATH:r,KYNVER_CRON_TICK_ENABLED:"1"},a=["OPENCLAW_CRON_STORE_PATH","OPENCLAW_CRON_SECRET","OPENCLAW_CRON_FIRE_BASE_URL"],l={deploymentSchedulerProvider:"kynver-cron",apiBaseUrl:e.apiBaseUrl,agentOsId:e.agentOsId,...e.defaultDaemonRunId?{defaultDaemonRunId:e.defaultDaemonRunId}:{}};return{envFilePath:t,configPath:n,storePath:r,envUpdates:i,envRemovals:a,configUpdates:l,deploymentSteps:DA,prerequisites:s,systemdSupported:process.platform==="linux",watchdogSpec:{kind:"watchdog",cron:TA,dedupeKey:Br,callbackPath:o}}}async function Sn(e){let r=e.envFilePath??Lr,t=[],n=br(),o=await ia(n),s=aa(r);t.push({id:"config_agent_os",ok:!!e.config.agentOsId?.trim(),summary:e.config.agentOsId?`agentOsId configured (${e.config.agentOsId})`:"agentOsId missing in ~/.kynver/config.json",remediation:"Run `kynver setup --agent-os-id <id>`."}),t.push({id:"config_api_base",ok:!!(e.config.apiBaseUrl?.trim()||n.fireBaseUrl),summary:n.fireBaseUrl?`fire base URL resolved (${n.fireBaseUrl})`:"KYNVER_API_URL / apiBaseUrl not configured",remediation:"Run `kynver setup --api-base-url https://\u2026`."}),t.push({id:"deployment_provider",ok:e.config.deploymentSchedulerProvider==="kynver-cron",summary:`deploymentSchedulerProvider=${e.config.deploymentSchedulerProvider??"(unset)"}`,remediation:'Run `kynver cron install` or set deploymentSchedulerProvider to "kynver-cron".'}),t.push({id:"cron_secret",ok:!!n.secret,summary:n.secret?"KYNVER_CRON_SECRET present":"KYNVER_CRON_SECRET missing",remediation:"Run `kynver cron install` to generate and persist the shared secret."}),t.push({id:"env_file",ok:la(r)&&!!s.get("KYNVER_CRON_SECRET"),summary:la(r)?`~/.kynver/.env present (${s.size} keys)`:"~/.kynver/.env missing",remediation:"Run `kynver cron install` to write ~/.kynver/.env."}),t.push({id:"cron_store",ok:la(n.storePath),summary:la(n.storePath)?`cron store present (${n.storePath})`:`cron store missing (${n.storePath})`,remediation:"Run `kynver cron install` to initialize the local store."});let a=(await bt(n.storePath).catch(()=>[])).find(u=>u.spec.dedupeKey===Br);t.push({id:"watchdog_local",ok:!!a,summary:a?`watchdog entry in local store (${a.providerScheduleId})`:"watchdog entry not mirrored in local cron store",remediation:"Run `kynver cron install` (with API access) to register and mirror watchdog."}),t.push({id:"daemon_primary",ok:o.daemonPrimary,summary:o.daemonPrimary?"cron tick enabled with credentials (daemon-primary)":`cron primary=${o.primary}; tickEnabled=${o.env.tickEnabled}`,remediation:"Ensure KYNVER_CRON_TICK_ENABLED=1 and run `kynver daemon` (or enable the systemd user unit)."});let l=s.has("OPENCLAW_CRON_STORE_PATH")||s.has("OPENCLAW_CRON_SECRET")||s.has("OPENCLAW_CRON_FIRE_BASE_URL");return t.push({id:"legacy_openclaw_env",ok:!l,summary:l?"legacy OPENCLAW_CRON_* keys still present in ~/.kynver/.env":"no legacy OPENCLAW_CRON_* keys in env file",remediation:"Re-run `kynver cron install` to retire legacy aliases."}),{ok:t.every(u=>u.ok),checks:t}}O();ar();C();import{existsSync as ly}from"node:fs";import{createHash as MA}from"node:crypto";function Jk(e){let r=JSON.stringify({cb:e.callbackPath,cron:e.cron??null,runAt:e.runAt??null,kind:e.kind,target:e.target,dedupeKey:e.dedupeKey??null});return`kc-cron:${MA("sha1").update(r).digest("hex").slice(0,16)}`}async function Iu(e,r,t={}){return fetch(e,{...t,headers:{"Content-Type":"application/json",Authorization:`Bearer ${r}`,...t.headers}})}async function qk(e,r,t,n={}){let o=new URLSearchParams(n),s=`${e}/api/agent-os/by-id/${encodeURIComponent(r)}/scheduler/jobs?${o}`,i=await Iu(s,t),a=await i.text(),l=null;try{l=JSON.parse(a)}catch{l=null}if(!i.ok)throw new Error(`list scheduler jobs failed (${i.status}): ${l?.error??a.slice(0,200)}`);return l?.items??[]}async function zk(e,r,t,n,o={}){let s=`${e}/api/agent-os/by-id/${encodeURIComponent(r)}/scheduler/watchdog/ensure`,i={};n&&(i.cron=n),o.requireProvider&&(i.requireProvider=o.requireProvider);let a=await Iu(s,t,{method:"POST",body:JSON.stringify(i)}),l=await a.text(),c=null;try{c=JSON.parse(l)}catch{c=null}if(!a.ok||!c?.job)throw new Error(`ensure watchdog failed (${a.status}): ${c?.error??l.slice(0,200)}`);return{job:c.job,route:c.route??`/api/agent-os/by-id/${r}/scheduler/fire`,dedupeKey:c.dedupeKey??Br,requestedCron:c.requestedCron??n??"*/5 * * * *",selectedProvider:c.selectedProvider??c.job.provider??null}}async function Xk(e,r,t,n){let o=`${e}/api/agent-os/by-id/${encodeURIComponent(r)}/scheduler/jobs/${encodeURIComponent(t)}/cancel`,s=await Iu(o,n,{method:"POST",body:"{}"});if(!s.ok){let i=await s.text();throw new Error(`cancel job ${t} failed (${s.status}): ${i.slice(0,200)}`)}}function Qk(e,r,t=Br){return{kind:"watchdog",scheduleKind:"cron",cron:r,callbackPath:`/api/agent-os/by-id/${e}/scheduler/fire`,payload:{source:"agent-os.watchdog-schedule",agentOsId:e},target:{agentOsId:e},description:"Watchdog board sweep (repair loop)",dedupeKey:t}}function Zk(e){return e.filter(r=>r.kind==="watchdog"&&r.dedupeKey===Br&&r.provider==="qstash"&&r.status!=="cancelled")}function UA(e){return e.find(r=>r.kind==="watchdog"&&r.dedupeKey===Br&&r.provider==="kynver-cron"&&r.status!=="cancelled")}function ey(e){return UA(e)?{allowed:!0}:{allowed:!1,reason:"Cannot cancel QStash watchdog until hosted KYNVER_SCHEDULER_PROVIDER=kynver-cron is live and a kynver-cron watchdog row exists. Set Vercel env, redeploy, re-run `kynver cron install`, then `--confirm-qstash-removal`."}}import{randomBytes as WA}from"node:crypto";function LA(){return WA(32).toString("base64url")}function ry(e=Lr){let r=bu();if(r)return{secret:r,generated:!1,source:"env"};let n=aa(e).get("KYNVER_CRON_SECRET")?.trim();return n?{secret:n,generated:!1,source:"env-file"}:{secret:LA(),generated:!0,source:"generated"}}import{realpathSync as BA}from"node:fs";function ca(e=process.argv[1]){let r=process.env.KYNVER_BIN?.trim();if(r)return r;let t=e?.trim();if(!t)return"kynver";try{return BA.native(t)}catch{return t}}function ty(e){return/\s/.test(e)?`"${e.replace(/"/g,'\\"')}"`:e}import{existsSync as FA,mkdirSync as $A,writeFileSync as KA}from"node:fs";import{homedir as jA}from"node:os";import sy from"node:path";import{spawnSync as oy}from"node:child_process";import{spawnSync as HA}from"node:child_process";var Ou="1.5G";var Fo;function Cn(){return process.env.KYNVER_BUILD_SKIP_SYSTEMD==="1"||process.env.KYNVER_BUILD_SKIP_SYSTEMD==="true"?!1:Fo!==void 0?Fo:process.platform!=="linux"?(Fo=!1,!1):(Fo=HA("systemd-run",["--version"],{encoding:"utf8",stdio:["ignore","ignore","pipe"]}).status===0,Fo)}function ua(e){let r=e.memoryMax??process.env.KYNVER_BUILD_SYSTEMD_MEMORY_MAX??Ou,t=e.memorySwapMax??process.env.KYNVER_BUILD_SYSTEMD_MEMORY_SWAP_MAX??"2G",n=["systemd-run","--scope","--collect","-p",`MemoryMax=${r}`,"-p",`MemorySwapMax=${t}`];return e.cwd&&n.push("--working-directory",e.cwd),n.push("--",...e.command),n}var Nu="kynver-cron-daemon.service";function VA(){return sy.join(jA(),".config","systemd","user")}function GA(e){let r=ty(e.kynverBin?.trim()||ca());return["[Unit]","Description=Kynver AgentOS daemon (pipeline + cron tick)","After=network-online.target","","[Service]","Type=simple",`EnvironmentFile=${e.envFilePath}`,`ExecStart=${r} daemon --run ${e.runId} --agent-os-id ${e.agentOsId} --execute`,"Restart=on-failure","RestartSec=10","","[Install]","WantedBy=default.target",""].join(`
+`)}function iy(e,r){if(!Cn())return{supported:!1,unitPath:null,written:!1,enabled:!1,started:!1,note:process.platform==="linux"?"systemd-run not available \u2014 install user service manually or run `kynver daemon` under your supervisor.":"systemd user units are only supported on Linux; use `kynver daemon` manually on macOS/Windows."};let t=VA(),n=sy.join(t,Nu),o=GA(e);if(!r)return{supported:!0,unitPath:n,written:!1,enabled:!1,started:!1,note:"Dry-run \u2014 pass --execute to write and enable the user unit."};$A(t,{recursive:!0});let s=FA(n);KA(n,o,"utf8");let i=oy("systemctl",["--user","daemon-reload"],{encoding:"utf8"});if(i.status!==0)return{supported:!0,unitPath:n,written:!0,enabled:!1,started:!1,note:`Wrote ${n} but systemctl --user daemon-reload failed: ${i.stderr||i.stdout}`};let a=oy("systemctl",["--user","enable","--now",Nu],{encoding:"utf8"});return{supported:!0,unitPath:n,written:!s||!0,enabled:a.status===0,started:a.status===0,note:a.status===0?`Enabled and started ${Nu}`:`Wrote ${n} but enable failed: ${a.stderr||a.stdout}`}}M();function ay(e,r){if(r?.trim())return r.trim();if(e.defaultDaemonRunId?.trim())return e.defaultDaemonRunId.trim();let t=te().runsDir;return ly(t)?J().sort((o,s)=>Date.parse(s.createdAt)-Date.parse(o.createdAt))[0]?.id??null:null}async function da(e={}){let r=e.execute!==!1,t=v(),n=ir(e.apiBaseUrl?.trim()||t.apiBaseUrl?.trim()||process.env.KYNVER_API_URL?.trim()||""),o=e.agentOsId?.trim()||t.agentOsId?.trim()||process.env.KYNVER_AGENT_OS_ID?.trim()||"",s=ry(),i=Yk({config:t,apiBaseUrl:n,agentOsId:o,cronSecret:s.secret,defaultDaemonRunId:e.runId?.trim()||t.defaultDaemonRunId,installSystemd:e.installSystemd===!0}),a=[...i.prerequisites],l={ok:!1,dryRun:!r,plan:i,secretGenerated:s.generated,configPath:q(i.configPath),storeInitialized:!1,blockers:a};if(a.length)return l;if(r){let c=Gk(i.envUpdates,{filePath:i.envFilePath,removeKeys:i.envRemovals});l.envFile={path:q(c.path),changed:c.changed,keysWritten:c.keysWritten};let u={...t,...i.configUpdates},d=ay(u,e.runId);d&&(u.defaultDaemonRunId=d),Ye(u),process.env.KYNVER_API_URL=n,process.env.KYNVER_CRON_SECRET=s.secret,process.env.KYNVER_CRON_STORE_PATH=i.storePath,process.env.KYNVER_CRON_TICK_ENABLED="1";let f=await tk(i.storePath);l.storeInitialized=f.created||ly(i.storePath);let m=oe();if(m)try{let p=await tt(o,{baseUrl:n,apiKey:m});rt(o,p)}catch{}if(!e.skipWatchdog)if(!m)l.watchdog={error:"KYNVER_API_KEY required to register watchdog on server"},a.push("login \u2014 run `kynver login --api-key \u2026` to register watchdog remotely");else try{let p=await zk(n,o,m,void 0,{requireProvider:"kynver-cron"}),h=Qk(o,p.requestedCron,p.dedupeKey),k={providerScheduleId:Jk(h),spec:h,registeredAt:new Date().toISOString(),paused:!1};await rk(k,i.storePath),l.watchdog={remoteJobId:p.job.id,provider:p.selectedProvider??p.job.provider,localProviderScheduleId:k.providerScheduleId};let g=await qk(n,o,m),R=Zk(g),I=["Phase 1 (local): `kynver cron install` writes box env/store and may fail remote watchdog until Vercel cutover.","Phase 2 (hosted): set KYNVER_SCHEDULER_PROVIDER=kynver-cron + KYNVER_CRON_SECRET on Vercel, redeploy, re-run install.","Phase 3 (cleanup): `kynver cron install --confirm-qstash-removal` after a kynver-cron watchdog row exists.","Analyst/market QStash schedules are never touched by this installer."],E=[];if(R.length)if(e.confirmQstashRemoval){let P=ey(g);if(!P.allowed)a.push(P.reason);else for(let D of R)await Xk(n,o,D.id,m),E.push(D.id)}else a.push(`${R.length} QStash watchdog job(s) still active \u2014 complete Vercel cutover (KYNVER_SCHEDULER_PROVIDER=kynver-cron + KYNVER_CRON_SECRET), re-run install, then --confirm-qstash-removal`);l.qstashWatchdog={found:R.map(P=>({id:P.id,provider:P.provider,status:P.status})),removed:E,manualSteps:I}}catch(p){l.watchdog={error:p.message},a.push(`watchdog registration failed: ${p.message}`)}if(e.installSystemd){let p=ay({...t,...i.configUpdates},e.runId);if(!p)l.systemd={supported:i.systemdSupported,unitPath:null,written:!1,enabled:!1,started:!1,note:"No harness run found \u2014 run `kynver run create` first or pass --run <runId>."},a.push("harness run \u2014 create a run before installing systemd unit");else{try{L(p)}catch{a.push(`harness run ${p} not found`)}l.systemd=iy({envFilePath:i.envFilePath,agentOsId:o,runId:p,kynverBin:ca()},r)}}if(!e.skipTestFire&&a.length===0){let p=await kn({agentOsIdFilter:o});l.testFire={fired:p.fired,errors:p.errors},p.errors>0&&a.push(`test fire reported ${p.errors} error(s) \u2014 check server KYNVER_CRON_SECRET matches`)}else e.skipTestFire&&(l.testFire={fired:0,errors:0,skipped:!0});l.verify=await Sn({config:v(),envFilePath:i.envFilePath}),l.blockers=a,l.ok=a.length===0&&(l.verify?.ok??!1)}else l.ok=a.length===0;return l}var YA=["deployment_provider","cron_secret","env_file","cron_store"];function cy(e){let r=e?.trim().toLowerCase();if(r==="qstash"||r==="kynver-cron"||r==="openclaw-cron")return r;if(r==="openclaw")return"openclaw-cron"}function JA(e){let r=cy(process.env.KYNVER_SCHEDULER_PROVIDER);if(r==="qstash"||r==="openclaw-cron")return!1;if(r==="kynver-cron")return!0;let t=cy(e.deploymentSchedulerProvider);return t==="qstash"||t==="openclaw-cron"?!1:t==="kynver-cron"?!0:!!(e.agentOsId?.trim()&&e.apiBaseUrl?.trim())}async function qA(e){if(!JA(e))return{expectsKynverCron:!1,ready:!0,failedChecks:[]};let t=(await Sn({config:e})).checks.filter(n=>YA.includes(n.id)&&!n.ok);return{expectsKynverCron:!0,ready:t.length===0,failedChecks:t}}function zA(e){let r=["Run `kynver cron install` on this box."];for(let t of e)t.remediation&&r.push(`  \u2022 ${t.id}: ${t.remediation}`);return r}function Tu(e){return e===!0||e==="true"||e==="1"||e==="yes"||e==="on"}async function uy(e){if(Tu(e.args.skipCron))return{action:"skipped"};let r=await qA(e.config);if(!r.expectsKynverCron||r.ready)return{action:"ready"};console.log(""),console.log("  Local Kynver Cron is not ready \u2014 running `kynver cron install`\u2026");let t=Tu(e.args.installSystemd)||Tu(e.args["install-systemd"]),n=await da({execute:!0,skipTestFire:!0,agentOsId:e.agentOsId,runId:e.runId,installSystemd:t});if(n.ok)return console.log("  Kynver Cron configured for this box."),console.log(""),{action:"installed",installOk:!0};console.log(""),console.log("  Cron install did not fully complete (daemon will still start):");for(let o of n.blockers)console.log(`    ! ${o}`);if(n.plan.deploymentSteps.length){console.log(""),console.log("  Hosted deployment (complete on Vercel, then re-run install):");for(let o of n.plan.deploymentSteps)console.log(`    - ${o}`)}for(let o of zA(r.failedChecks))console.log(`  ${o}`);return console.log(""),{action:"guided",installOk:!1,blockers:n.blockers}}function QA(e,r){return e.filter(n=>n.repo===r&&!hr.has(n.status)).sort((n,o)=>(o.createdAt??"").localeCompare(n.createdAt??""))[0]?.id??null}async function dy(e){hn();let r=v();(!oe()||!r.agentOsId?.trim())&&(console.log("  This machine isn't linked yet \u2014 running bootstrap first."),await Qi(e),r=v());let t=(typeof e.agentOsId=="string"?e.agentOsId.trim():"")||r.agentOsId?.trim()||"";t||(console.error("No AgentOS workspace configured \u2014 run `kynver bootstrap` (or pass --agent-os-id)."),process.exit(1)),Qn(t).ok||(console.error(As(t)),process.exit(1)),e.chatOauth===!0&&r.chatUseClaudeOauth!==!0&&(Ye({...r,chatUseClaudeOauth:!0}),r=v(),console.log("  Chat: Claude Code OAuth opt-in saved (delegated turns may use your local subscription)."));let o=(typeof e.repo=="string"?e.repo.trim():"")||r.defaultRepo?.trim()||Ke()?.repo||"";o||(console.error("No repo configured \u2014 pass --repo /path/to/repo or run `kynver setup --discover-repo`."),process.exit(1));let s=typeof e.run=="string"&&e.run.trim()?e.run.trim():"";s||(s=QA(J(),o)??"",s?console.log(`  Reusing run ${s} for ${o}.`):s=Eo({...e,repo:o,name:"agent"}).runId),await uy({config:r,agentOsId:t,runId:s,args:e}),console.log(""),console.log(`  ${XA.hostname()} \u2014 agent coming online`),console.log(`    workspace: ${t}`),console.log(`    repo:      ${o}`),console.log(`    run:       ${s}`),console.log("  Ctrl-C stops the agent. (Advanced control: `kynver daemon --help`.)"),console.log("");let i={...e,run:s,agentOsId:t};if(oa(i)){await sa(i,ZA(s,t,e));return}await Ho(i)}function ZA(e,r,t){if(!Qn(r).ok)throw new Error(As(r));let o=["daemon","--run",e,"--agent-os-id",r];return typeof t.intervalMs=="string"&&t.intervalMs.trim()&&o.push("--interval-ms",t.intervalMs.trim()),(t.execute===!1||t.execute==="false")&&o.push("--execute","false"),typeof t.stallMs=="string"&&t.stallMs.trim()&&o.push("--stall-ms",t.stallMs.trim()),o}M();M();Y();import{existsSync as eI,rmSync as rI}from"node:fs";import Du from"node:path";function tI(e){let r=e.replace(/\\/g,"/").replace(/^\.\//,"").trim();if(!r||r.startsWith("/")||r.includes(".."))throw new Error(`unsafe path: ${e}`);return r}function nI(e){return typeof e!="string"||!e.trim()?[]:e.split(",").map(r=>r.trim()).filter(Boolean)}function oI(e){let{runId:r,workerName:t}=He(e),n=he(r,t),o=[...nI(e.path),...Array.isArray(e.paths)?e.paths:[]];if(o.length===0)return{ok:!1,removed:[],reason:"requires at least one --path"};let s=Du.resolve(n.worktreePath),i=[];for(let c of o){let u=tI(c),d=Du.resolve(s,u);if(!d.startsWith(s+Du.sep)&&d!==s)return{ok:!1,removed:i,reason:`path escapes worktree: ${c}`};if(!eI(d))return{ok:!1,removed:i,reason:`path not found: ${c}`};rI(d,{recursive:!0,force:!0}),i.push(u)}let a=Array.isArray(n.disposableArtifactsRemoved)?n.disposableArtifactsRemoved.filter(c=>typeof c=="string"):[];n.disposableArtifactsRemoved=[...new Set([...a,...i])],H(n.runId,n);let l=T(n);return{ok:!0,removed:i,...l.changedFiles.length?{reason:"worktree still has other changes"}:{}}}function py(e){let r=oI(e);console.log(JSON.stringify(r,null,2)),r.ok||process.exit(1)}O();import II from"node:path";us();var sI=/--max-old-space-size=(\d+)/;function iI(e,r){let t=Number(e);return!Number.isFinite(t)||t<=0?r:Math.floor(t)}function Mu(){return iI(process.env.KYNVER_NODE_OLD_SPACE_SIZE_MB,1024)}function pa(e=process.env){let r={...e};if(process.env.KYNVER_NODE_OLD_SPACE_SIZE_MB==="0")return r;let t=r.NODE_OPTIONS??"";if(sI.test(t))return r;let o=`--max-old-space-size=${Mu()}`;return r.NODE_OPTIONS=t.trim()?`${t.trim()} ${o}`:o,r}function wn(e=Mu()){return`--max-old-space-size=${e}`}O();import{spawnSync as aI}from"node:child_process";us();function ma(e,r){let t=Number(e);return!Number.isFinite(t)||t<=0?r:Math.floor(t)}function fy(e=v()){let r=process.env.KYNVER_BUILD_MEM_BUDGET_BYTES?ma(process.env.KYNVER_BUILD_MEM_BUDGET_BYTES,1610612736):void 0,t=process.env.KYNVER_BUILD_MEM_RESERVE_BYTES?ma(process.env.KYNVER_BUILD_MEM_RESERVE_BYTES,2147483648):void 0;return{perBuildBudgetBytes:r??ma(e.perWorkerMemBytes,1610612736),reserveBytes:t??ma(e.memReserveBytes,2147483648)}}var fa=0;function Lu(){fa+=1}function Bu(){fa=Math.max(0,fa-1)}function Ct(e={}){let r={...fy(),...e},t=e.memAvailableBytes??Wt(),n=r.perBuildBudgetBytes+r.reserveBytes,o=t>=n;return{admitted:o,memAvailableBytes:t,requiredBytes:n,activeBuilds:fa,reason:o?null:`insufficient memory: need ${n} bytes available (budget ${r.perBuildBudgetBytes} + reserve ${r.reserveBytes}), have ${t}`}}function lI(e){e<=0||aI(process.execPath,["-e",`const d=Date.now()+${Math.floor(e)};while(Date.now()<d);`],{stdio:"ignore"})}function Hu(e,r=2e3,t={}){let n=Date.now()+Math.max(0,e),o=Ct({...t,memAvailableBytes:t.memAvailableBytes?.()});for(;!o.admitted&&Date.now()<n;)lI(Math.min(r,n-Date.now())),o=Ct({...t,memAvailableBytes:t.memAvailableBytes?.()});return o}import{spawnSync as PI}from"node:child_process";C();import{closeSync as pI,existsSync as Fu,mkdirSync as mI,openSync as fI,readdirSync as hy,readFileSync as gI,unlinkSync as $u,writeFileSync as hI}from"node:fs";import Ku from"node:path";import{mkdirSync as cI}from"node:fs";import{tmpdir as uI}from"node:os";import ga from"node:path";function dI(){return!!(process.env.VERCEL||process.env.VERCEL_ENV||process.env.AWS_LAMBDA_FUNCTION_NAME||process.env.AWS_EXECUTION_ENV)}function gy(){let e=process.env.KYNVER_HEAVY_VERIFICATION_STATE_ROOT;return e?ga.resolve(e):dI()?ga.join(uI(),"kynver","state","heavy-verification"):ga.join(ki(),"heavy-verification")}function $o(){return ga.join(gy(),"slots")}function _n(){let e=$o();return cI(e,{recursive:!0}),e}var En=120*6e4,ha=1;function kI(e,r){let t=Number(e);return!Number.isFinite(t)||t<=0?r:Math.floor(t)}function Pn(){let e=process.env.KYNVER_HEAVY_VERIFICATION_SKIP?.trim().toLowerCase();return e==="1"||e==="true"||e==="yes"}function xn(){let e=process.env.KYNVER_HEAVY_VERIFICATION_MAX_CONCURRENT;return e?kI(e,ha):ha}function yI(e){return`slot-${e}`}function ky(e,r=$o()){return Ku.join(r,`${e}.json`)}function ju(e){if(!Fu(e))return null;try{let r=JSON.parse(gI(e,"utf8"));if(typeof r.slotId=="string"&&typeof r.pid=="number"&&typeof r.acquiredAt=="string"&&typeof r.command=="string")return r}catch{return null}return null}function ka(e,r=En){if(!e||!B(e.pid))return!0;let t=Date.parse(e.acquiredAt);return Number.isNaN(t)?!0:Date.now()-t>r}function RI(e,r){let t=ju(e);if(ka(t,r))try{$u(e)}catch{}}function bI(e){return mI(e,{recursive:!0}),e}function jo(e={}){let r=bI(e.slotsDir??_n()),t=e.staleMs??En,n=0;for(let o of hy(r)){if(!o.endsWith(".json"))continue;let s=Ku.join(r,o),i=Fu(s);RI(s,t),i&&!Fu(s)&&(n+=1)}return n}function Vu(e={}){let r=e.slotsDir??_n(),t=e.staleMs??En;jo({slotsDir:r,staleMs:t});let n=[];for(let o of hy(r)){if(!o.endsWith(".json"))continue;let s=ju(Ku.join(r,o));s&&!ka(s,t)&&n.push(s)}return n}function Ko(e={}){return Vu(e).length}function wt(e,r={}){if(Pn())return{admitted:!0,slotId:null,activeSlots:0,maxSlots:xn(),reason:null};let t=r.slotsDir??_n(),n=r.staleMs??En,o=r.maxSlots??xn();jo({slotsDir:t,staleMs:n});for(let i=0;i<o;i+=1){let a=yI(i),l=ky(a,t),c=ju(l);if(c&&ka(c,n))try{$u(l)}catch{}else if(c&&!ka(c,n))continue;let u={slotId:a,pid:process.pid,acquiredAt:new Date().toISOString(),command:e};try{let d=fI(l,"wx");hI(d,JSON.stringify(u,null,2),"utf8"),pI(d);let f=Ko({slotsDir:t,staleMs:n});return{admitted:!0,slotId:a,activeSlots:f,maxSlots:o,reason:null}}catch(d){if(d.code==="EEXIST")continue;throw d}}let s=Ko({slotsDir:t,staleMs:n});return{admitted:!1,slotId:null,activeSlots:s,maxSlots:o,reason:`heavy verification at capacity (${s}/${o} slots)`}}function An(e,r={}){if(!e)return;let t=ky(e,r.slotsDir??$o());try{$u(t)}catch{}}function In(e,r={}){if(Pn())return{admitted:!0,slotId:null,activeSlots:0,maxSlots:xn(),reason:null};let t=r.slotsDir??_n(),n=r.staleMs??En,o=r.maxSlots??xn();jo({slotsDir:t,staleMs:n});let s=Ko({slotsDir:t,staleMs:n}),i=s<o;return{admitted:i,slotId:null,activeSlots:s,maxSlots:o,reason:i?null:`heavy verification at capacity (${s}/${o} slots); waiting for ${e}`}}import{spawnSync as vI}from"node:child_process";function SI(e){e<=0||vI(process.execPath,["-e",`const d=Date.now()+${Math.floor(e)};while(Date.now()<d);`],{stdio:"ignore"})}function ya(e,r,t=2e3,n={}){let o=Date.now()+Math.max(0,r),s=wt(e,n);for(;!s.admitted&&Date.now()<o;)SI(Math.min(t,o-Date.now())),s=wt(e,n);return s}var CI=/\b(npm run typecheck|tsc\b[^|&;]*--noEmit|node scripts\/verify-pr-local\.mjs|kynver (harness )?verify)\b/i,wI=/\b(npm run build\b|next build\b)\b/i,_I=/\b(vercel (build|deploy|--prod))\b/i,xI=/\b(openai|anthropic|perplexity|voyage)\b.*\b(api|cli)\b|\b(paid|billable)[-_ ]?compute\b/i;function Ra(e){let r=e.trim();return r?xI.test(r)?{heavy:!0,commandClass:"paid_compute",reason:"paid external compute requires heavy-verification token and operator approval"}:_I.test(r)?{heavy:!0,commandClass:"vercel_verify",reason:"Vercel build/deploy verification requires heavy-verification token"}:wI.test(r)?{heavy:!0,commandClass:"full_build",reason:"full app build requires heavy-verification token"}:CI.test(r)?{heavy:!0,commandClass:"full_typecheck",reason:"full repo typecheck requires heavy-verification token"}:{heavy:!1,commandClass:"allowed",reason:null}:{heavy:!1,commandClass:"allowed",reason:null}}var Vo="heavy_verification_token_required";function ba(e,r={}){let t=Ra(e);if(!t.heavy)return{allowed:!0,outcome:"allowed",commandClass:t.commandClass,reason:"command does not require heavy-verification token",verificationGate:{...In(e),slotId:null}};if(Pn())return{allowed:!0,outcome:"heavy_verification_skipped",commandClass:t.commandClass,reason:"KYNVER_HEAVY_VERIFICATION_SKIP bypasses gate",verificationGate:{...In(e),slotId:null}};let n=r.waitMs??0,o=n>0?ya(e,n,r.pollMs):wt(e);return o.admitted?{allowed:!0,outcome:"allowed",commandClass:t.commandClass,reason:t.reason??"heavy-verification token acquired",verificationGate:o}:{allowed:!1,outcome:Vo,commandClass:t.commandClass,reason:t.reason??o.reason??Vo,verificationGate:o}}_e();import Gu from"node:path";function EI(e){let r=ur(fe()),t=Gu.relative(r,Gu.resolve(e));return t.length>0&&!t.startsWith("..")&&!Gu.isAbsolute(t)}function yy(e){return EI(e)?(typeof process.getuid=="function"?process.getuid():null)===0?{ok:!1,reason:"Refusing build/install as root inside a harness worktree \u2014 generated caches become root-owned and block daemon cleanup. Run kynver daemon and workers as the harness owner (never sudo kynver)."}:{ok:!0}:{ok:!0}}function AI(e){let r=[];for(let[t,n]of Object.entries(e))n!==void 0&&r.push(`${t}=${n}`);return r}function Ry(e,r){let t=PI(e[0],e.slice(1),{cwd:r.cwd,env:r.env,encoding:"utf8",stdio:["ignore","pipe","pipe"],shell:r.shell,timeout:r.timeoutMs});return{exitCode:t.status??1,stdout:(t.stdout??"").trim(),stderr:(t.stderr??"").trim()}}function va(e){let r=e.waitForAdmissionMs??6e5,t=ba(e.command,{waitMs:r}),n=t.verificationGate;if(!t.allowed)return{ok:!1,exitCode:1,stdout:"",stderr:t.reason,admitted:!1,wrappedWithSystemd:!1,nodeOptionsFlag:wn(),admission:Ct(),verificationGate:n,gateOutcome:t.outcome,command:e.command};let o=n.slotId,s=r>0?Hu(r):Ct();if(!s.admitted)return An(o),{ok:!1,exitCode:1,stdout:"",stderr:s.reason??"build admission denied",admitted:!1,wrappedWithSystemd:!1,nodeOptionsFlag:wn(),admission:s,verificationGate:n,command:e.command};let i=yy(e.cwd);if(!i.ok)return An(o),{ok:!1,exitCode:1,stdout:"",stderr:i.reason,admitted:!0,wrappedWithSystemd:!1,nodeOptionsFlag:wn(),admission:s,verificationGate:n,command:e.command};let a=pa({...process.env,...e.env}),l=wn(),c=Cn();Lu();try{let u;if(c){let d=ua({cwd:e.cwd,command:["/usr/bin/env",...AI(a),"/bin/bash","-lc",e.command]});u=Ry(d,{cwd:e.cwd,env:a,timeoutMs:e.timeoutMs})}else u=Ry([e.command],{cwd:e.cwd,env:a,shell:!0,timeoutMs:e.timeoutMs});return{ok:u.exitCode===0,exitCode:u.exitCode,stdout:u.stdout,stderr:u.stderr,admitted:!0,wrappedWithSystemd:c,nodeOptionsFlag:l,admission:s,verificationGate:n,gateOutcome:t.outcome,command:e.command}}finally{Bu(),An(o)}}var Sa=["npm run typecheck","npm run test"];function Go(e,r=Sa,t={}){let n=[],o=!0;for(let s of r){let i=va({cwd:e,command:s,waitForAdmissionMs:t.waitForAdmissionMs,timeoutMs:t.timeoutMs});n.push({command:s,result:i}),i.ok||(o=!1)}return{passed:o,steps:n}}C();function by(e){let r=e.indexOf(":");if(r<=0)throw new Error(`invalid --evidence ${e} (expected type:value)`);return{type:e.slice(0,r),value:e.slice(r+1)}}async function vy(e){let r=N(e.plan?String(e.plan):void 0,"plan"),t=(e.agentOsId?String(e.agentOsId):v().agentOsId)||"";t||(console.error("requires --agent-os-id or agentOsId in ~/.kynver/config.json"),process.exit(1));let n=N(e.role?String(e.role):void 0,"role"),o=N(e.status?String(e.status):void 0,"status"),s=[],i=e.evidence;if(Array.isArray(i))for(let I of i)s.push(by(String(I)));else typeof i=="string"&&s.push(by(i));let a=K(e.baseUrl?String(e.baseUrl):void 0),l=await G(e.secret?String(e.secret):void 0,t,{baseUrl:a}),c=`${a}/api/agent-os/by-id/${encodeURIComponent(t)}/plans/${encodeURIComponent(r)}/progress-events`,u=v(),f=`provider:${no(u.workerProvider,Pe)}`,p=(e.proposed===!0||e.proposed==="true"?!0:e.proposed===!1||e.proposed==="false"?!1:void 0)??(o!=="done"&&(n==="implementer"||n==="repair_implementer")),h={rowKey:e.row?String(e.row):void 0,rowId:e.rowId?String(e.rowId):void 0,taskId:e.task?String(e.task):void 0,reviewTaskId:e.reviewTask?String(e.reviewTask):void 0,roleLane:n,status:o,note:e.note?String(e.note):void 0,remainingWork:e.remaining?String(e.remaining):void 0,evidence:s.length?s:void 0,executorRef:e.executorRef?String(e.executorRef):f};p!==void 0&&(h.proposed=p);let k=await fetch(c,{method:"POST",headers:Be(l),body:JSON.stringify(h)}),g=await k.text(),R=null;try{R=JSON.parse(g)}catch{R=g}k.ok||(console.error(JSON.stringify({httpStatus:k.status,response:R},null,2)),process.exit(1)),console.log(JSON.stringify(R,null,2))}function OI(e){let r=N(e.worktree?String(e.worktree):void 0,"worktree"),t=II.resolve(r),n=Go(t),o=e.json===!0||e.json==="true",s={passed:n.passed,worktree:t,steps:n.steps};console.log(o?JSON.stringify(s,null,2):n.passed?"local plan verify passed":"local plan verify failed"),n.passed||process.exit(1)}async function Sy(e){let r=N(e.plan?String(e.plan):void 0,"plan");if(e.local===!0||e.local==="true"){OI(e);return}let n=v().agentOsSlug;n||(console.error("requires agentOsSlug in ~/.kynver/config.json for verify (session route)"),process.exit(1));let o=K(e.baseUrl?String(e.baseUrl):void 0),s=process.env.KYNVER_API_KEY,i={"Content-Type":"application/json"};s&&(i.Authorization=`Bearer ${s}`);let a=`${o}/api/agent-os/${encodeURIComponent(n)}/plans/${encodeURIComponent(r)}/verify`,l=await fetch(a,{method:"POST",headers:i,body:JSON.stringify({worktreePath:e.worktree?String(e.worktree):void 0,taskId:e.task?String(e.task):void 0,humanOverride:e.humanOverride===!0||e.humanOverride==="true"})}),c=await l.text(),u=null;try{u=JSON.parse(c)}catch{u=c}l.ok||(console.error(JSON.stringify({httpStatus:l.status,response:u},null,2)),process.exit(1)),console.log(JSON.stringify(u,null,2))}import NI from"node:path";C();function Cy(e){let r=NI.resolve(N(e.worktree?String(e.worktree):void 0,"worktree")),t=e.json===!0||e.json==="true"||e.emitJson===!0||e.emitJson==="true",n=[],o=e.command;if(Array.isArray(o))for(let a of o)n.push(String(a));else typeof o=="string"&&n.push(o);let s=Go(r,n.length?n:Sa,{waitForAdmissionMs:e.waitForAdmissionMs?Number(e.waitForAdmissionMs):void 0,timeoutMs:e.timeoutMs?Number(e.timeoutMs):void 0}),i={passed:s.passed,worktree:r,steps:s.steps.map(a=>({command:a.command,ok:a.result.ok,exitCode:a.result.exitCode,admitted:a.result.admitted,wrappedWithSystemd:a.result.wrappedWithSystemd,nodeOptionsFlag:a.result.nodeOptionsFlag,admission:a.result.admission,verificationGate:a.result.verificationGate,stderr:a.result.stderr.slice(0,4e3)}))};if(t)console.log(JSON.stringify(i,null,2));else{console.log(s.passed?"harness verify passed":"harness verify failed");for(let a of i.steps)console.log(`  ${a.ok?"\u2713":"\u2717"} ${a.command} (exit ${a.exitCode}, systemd=${a.wrappedWithSystemd})`),!a.ok&&a.stderr&&console.log(`    ${a.stderr.split(`
+`)[0]}`)}process.exit(s.passed?0:1)}O();import{readFileSync as TI}from"node:fs";C();var DI=["create","add_version","update_metadata"],MI=["approval_guard","auth","network","server","tool_interruption"];function UI(e){let r=e.bodyFile?String(e.bodyFile):void 0;if(r)return{body:TI(r,"utf8"),bodyPathHint:r};let t=e.body?String(e.body):void 0;if(t)return{body:t};throw new Error("requires --body-file PATH or --body TEXT")}async function wy(e){let r=N(e.operation?String(e.operation):void 0,"operation");if(!DI.includes(r))throw new Error(`invalid --operation ${r}`);let t=r,n=v(),o=N(e.slug?String(e.slug):n.agentOsSlug,"slug (or agentOsSlug in ~/.kynver/config.json)"),s=N(e.title?String(e.title):void 0,"title"),{body:i,bodyPathHint:a}=UI(e);a&&ko(a)&&console.warn(JSON.stringify({warning:"/tmp-only body path is not durable; AgentOS persistence requires outbox or successful API write",bodyPathHint:a}));let l={operation:t,agentOsSlug:o,title:s,body:i,bodyPathHint:a,summary:e.summary?String(e.summary):void 0,planId:e.plan?String(e.plan):void 0,planSlug:e.planSlug?String(e.planSlug):void 0,changeSummary:e.changeSummary?String(e.changeSummary):void 0,author:e.author?String(e.author):void 0,model:e.model?String(e.model):void 0,maxRetries:e.maxRetries?Number(e.maxRetries):void 0,immediateFailure:WI(e)},c=await on(l);console.log(JSON.stringify(c,null,2)),c.userStatus==="failed and needs action"&&process.exit(1)}function WI(e){let r=e.failureKind?String(e.failureKind):void 0;if(!r)return;if(!MI.includes(r))throw new Error(`invalid --failure-kind ${r}`);let t=e.failureMessage?String(e.failureMessage):`immediate failure (${r})`;return{kind:r,message:t}}async function _y(){let e=mt();console.log(JSON.stringify({count:e.length,items:e},null,2))}async function xy(e){let r=e.max?Number(e.max):void 0,t=e.id?String(e.id):void 0,n=await Ri({max:r,outboxId:t});console.log(JSON.stringify(n,null,2)),n.failed>0&&process.exit(1)}function Ey(e){let r=e.execute===!0||e.execute==="true",t=e.skipFinalize===!0||e.skipFinalize==="true",n=e.accountBytes===!0||e.accountBytes==="true",o=e.compact===!0||e.compact==="true",s=e.nodeModulesAgeMs,i=s!=null&&s!=="",a=i?Number(s):void 0,l=e.worktreesAgeMs?Number(e.worktreesAgeMs):0,c=e.includeOrphans===!0||e.includeOrphans==="true",u=e.harnessRoot?String(e.harnessRoot):void 0,d=Xi({execute:r,finalizeStaleRuns:!t,accountBytes:n,scanDependencyCaches:i,nodeModulesAgeMs:a!==void 0&&Number.isFinite(a)?a:i?216e5:void 0,worktreesAgeMs:Number.isFinite(l)?l:0,includeOrphans:c,harnessRoot:u});o&&d.compactSummary?console.log(JSON.stringify(d.compactSummary,null,2)):console.log(JSON.stringify(d,null,2)),r&&d.totals.removedPaths===0&&d.actions.length===0&&(process.exitCode=0)}Lt();function Py(e){let r=e.execute===!0||e.execute==="true",t=e.json===!0||e.json==="true",n=e["purge-all"]===!0||e["purge-all"]==="true",o=e["keep-newest"]?Number(e["keep-newest"]):void 0;if(r||n){let a=bo({execute:r,purgeAll:n,keepNewest:o}),l={...a,observation:a.observation?{...a.observation,dumps:a.observation.dumps.map(c=>({name:c.name,bytes:c.bytes,executableHint:c.executableHint,mtimeMs:c.mtimeMs}))}:null};console.log(JSON.stringify(l,null,t?2:0));return}let s=cr(),i=s?{...s,dumps:s.dumps.map(a=>({name:a.name,bytes:a.bytes,executableHint:a.executableHint,mtimeMs:a.mtimeMs}))}:{skipped:!0,reason:"not_wsl"};console.log(JSON.stringify(i,null,t?2:0))}function Ay(e){let r=e.trim();if(!r.startsWith("{")&&!r.startsWith("["))return null;try{return JSON.parse(r)}catch{return null}}function se(e,r=2400){if(e==null)return;let n=(typeof e=="string"?e:JSON.stringify(e,null,2)).trim();if(n)return n.length<=r?n:`${n.slice(0,r-1).trimEnd()}\u2026`}function Ca(e){let r=e.trim();if(!r)return null;let t=Ay(r);if(t!==null)return t;for(let n of r.split(`
+`)){let o=Ay(n);if(o!==null)return o}return null}function wa(e){let r=[];switch(r.push(`Background auto-complete \xB7 ${e.runId} / ${e.worker}`),e.outcome){case"completed":r.push("Outcome: harness completion posted to AgentOS successfully."),r.push("AgentOS task should close or advance to review per completion routing."),r.push("Next: check Command Center \u2014 no manual complete needed unless the board still shows running.");break;case"blocked":r.push(`Outcome: worker finished but completion was blocked${e.httpStatus?` (HTTP ${e.httpStatus})`:""}.`),e.reason&&r.push(`Blocker: ${e.reason}`),r.push("Next: fix the blocker (auth, landing gate, dirty worktree) and replay completion from Command Center.");break;case"timed_out":r.push(`Outcome: monitor gave up waiting \u2014 ${e.reason??"worker did not finish in time"}.`),r.push("Next: inspect the worker process/logs; stop or unblock the worker, then retry auto-complete.");break;case"missing_link":r.push(`Outcome: cannot complete \u2014 ${e.reason??"worker missing agentOsId/taskId"}.`),r.push("Next: re-dispatch with board linkage or run `kynver worker complete` with --agent-os-id.");break;default:r.push(`Outcome: ${e.outcome}`)}return{primary:r.join(`
+`),diagnostic:se(e)}}function On(e){let r=[],t=typeof e.monitorId=="string"?e.monitorId:void 0;if(r.push(t?`Harness monitor tick \xB7 ${e.runId} (${t})`:`Harness monitor tick \xB7 ${e.runId}`),!e.workers.length)return r.push("No workers in scope for this poll."),{primary:r.join(`
+`),diagnostic:se(e)};for(let i of e.workers){let a=i.autoComplete.eligible?"eligible for auto-complete":"not auto-completing",l=i.autoComplete.blockers.length>0?` (${i.autoComplete.blockers.slice(0,2).join("; ")})`:"";r.push(`\u2022 ${i.worker}: ${i.workerStatus}, ${i.health}${i.healthReason?` \u2014 ${i.healthReason}`:""}; ${a}${l}`),i.taskStatus&&r.push(`  Board task: ${i.taskStatus}${i.leaseOwner?` (lease: ${i.leaseOwner})`:""}`)}let n=e.autoCompleted?.filter(i=>i.outcome==="completed"&&i.ok)??[],o=e.autoCompleted?.filter(i=>!i.ok&&i.outcome!=="skipped")??[];n.length&&r.push(`Auto-completed: ${n.map(i=>i.worker).join(", ")} \u2014 AgentOS completion should be posted.`),o.length&&r.push(`Auto-complete blocked: ${o.map(i=>`${i.worker}${i.reason?` (${i.reason})`:""}`).join("; ")}`),e.leaseRenewal?.failed?.length&&r.push(`Lease renew failed for: ${e.leaseRenewal.failed.map(i=>i.worker).join(", ")}`);let s=e.workers.length>0&&e.workers.every(i=>i.autoComplete.terminalVerified)&&(e.autoCompleted?.every(i=>i.ok||i.outcome==="skipped")??!0);return r.push(s?"Next: monitor loop should stop \u2014 all workers terminal and handled.":"Next: monitor will poll again until workers are terminal-verified or max time elapses."),{primary:r.join(`
+`),diagnostic:se(e)}}function Yu(e){return e!==null&&typeof e=="object"&&!Array.isArray(e)?e:null}function nr(e){return typeof e=="string"&&e.trim()?e.trim():null}function _a(e){let r=Yu(e);if(!r)return{primary:"Harness worker complete finished with no parseable result.",diagnostic:se(e)};let t=nr(r.worker)??"worker",n=nr(r.runId),o=nr(r.status)==="skipped",s=typeof r.httpStatus=="number"?r.httpStatus:null,i=Yu(r.response),a=[];if(a.push(`Harness worker complete \xB7 ${t}${n?` (${n})`:""}`),o)return a.push(`Outcome: skipped \u2014 ${nr(r.reason)??"worker not finished yet"}.`),a.push("Next: wait for the worker to exit or post a finalResult, then retry complete."),{primary:a.join(`
+`),diagnostic:se(e)};let l=nr(i?.outcome),c=Yu(i?.task),u=nr(c?.status),d=nr(c?.prUrl)??nr(i?.prUrl);if(s&&s>=200&&s<300)a.push("Outcome: completion callback accepted by AgentOS."),l&&a.push(`Routing: ${l.replace(/_/g," ")}`),u&&a.push(`AgentOS task status: ${u}`),d&&a.push(`PR: ${d}`),a.push("Next: check Command Center for review scheduling or blockers.");else{a.push(`Outcome: completion failed${s!=null?` (HTTP ${s})`:""}.`);let f=nr(i?.detail)??nr(i?.error);f&&a.push(`Blocker: ${f}`),a.push("Next: fix the reported blocker and replay completion from the board.")}return{primary:a.join(`
+`),diagnostic:se(e)}}function xe(e){return typeof e=="string"&&e.trim()?e.trim():null}function Ju(e){return e!==null&&typeof e=="object"&&!Array.isArray(e)?e:null}function LI(e){let r=Ju(e);return r?xe(r.prUrl)??xe(r.pr):null}function Yo(e){let r=Ju(e);if(!r)return{primary:"Harness worker status unavailable.",diagnostic:se(e)};let t=xe(r.worker)??xe(r.name)??"worker",n=xe(r.runId),o=xe(r.status)??"unknown",s=r.alive===!0,i=Ju(r.attention),a=xe(i?.state)??xe(r.attentionState),l=xe(i?.reason)??xe(r.attentionReason),c=xe(r.taskId),u=xe(r.prUrl)??LI(r.finalResult),d=xe(r.branch),f=xe(r.headCommit),m=[];return m.push(`Harness worker ${t}${n?` (${n})`:""}`),m.push(`Process: ${s?"running":"stopped"} \xB7 harness status: ${o}`),a&&m.push(l?`Attention: ${a} \u2014 ${l}`:`Attention: ${a}`),c&&m.push(`AgentOS task: ${c}`),u&&m.push(`PR: ${u}`),d&&m.push(`Branch: ${d}`),f&&m.push(`Commit: ${f.slice(0,12)}`),o==="done"||o==="exited"?m.push(u?"Outcome: worker finished \u2014 open the PR or check Command Center for review routing.":"Outcome: worker finished \u2014 check Command Center for task status and next action."):a==="blocked"||a==="needs_attention"?m.push("Next: resolve the blocker on the board or wait for the monitor to auto-complete when terminal."):s&&m.push("Next: wait for completion or poll again; background monitor will auto-complete when eligible."),{primary:m.join(`
+`),diagnostic:se(e)}}var BI="\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500 Diagnostic (JSON) \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500";function Iy(e){return e.diagnostic?.trim()?`${e.primary}
 
-${SA}
-${e.diagnostic}`:e.primary}function wA(e){let r=[`Harness ${e.scope} ${e.action} failed.`];e.timedOut?r.push("Reason: command timed out on the runner host."):e.error?r.push(`Reason: ${e.error}`):e.exitCode!=null&&r.push(`Exit code: ${e.exitCode}`);let t=e.stderr.trim();t&&r.push(`Stderr: ${t.split(`
-`).slice(-3).join(" ")}`),r.push("Next: retry on the runner host or inspect harness logs.");let n=Xi(e.stdout);return{primary:r.join(`
-`),diagnostic:re(n??{stdout:e.stdout,stderr:e.stderr})}}function Tk(e){if(!e.ok)return wA(e);let r=Xi(e.stdout);if(r===null){let t=e.stdout.trim()||e.stderr.trim()||"(no output)";return{primary:`Harness ${e.scope} ${e.action} finished.
-${t.slice(0,800)}`,diagnostic:re({stdout:e.stdout,stderr:e.stderr})}}if(e.scope==="worker"&&e.action==="status")return Eo(r);if(e.scope==="worker"&&e.action==="complete")return Zi(r);if(e.scope==="monitor"&&(e.action==="tick"||e.action==="run-loop"))return gn(r);if(e.scope==="monitor"&&e.action==="auto-complete"){let t=r;if(t.outcome&&t.worker&&t.runId)return Qi(r);if(Array.isArray(t.blockers))return{primary:[`Monitor auto-complete blocked \xB7 ${t.runId??"run"} / ${t.worker??"worker"}`,`Blockers: ${t.blockers.join("; ")}`,"Next: resolve blockers on the runner, then retry auto-complete."].join(`
-`),diagnostic:re(r)}}if(e.scope==="run"&&e.action==="status"){let t=r.workers;return Array.isArray(t)&&t.length===1?Eo(t[0]):{primary:`Harness run status \xB7 ${r.runId??"run"} (${Array.isArray(t)?t.length:0} workers).`,diagnostic:re(r)}}return{primary:`Harness ${e.scope} ${e.action} completed successfully on the runner.`,diagnostic:re(r)}}import EA from"node:path";L();G();w();G();w();function ea(e){let{worker:r,status:t,taskLease:n}=e,o=n?.leaseOwner??null;if(r.dispatched&&n){if(n.status==="running"&&o&&!kl(o,r.runId))return{health:"orphaned",reason:`task lease held by ${o}, expected harness run ${r.runId}`};if(n.status==="running"&&!t.alive&&!t.finalResult)return{health:"orphaned",reason:"board task running but worker process is not alive"}}if(r.status==="running"&&!t.alive&&!t.finalResult)return{health:"orphaned",reason:"worker.json still running but process is dead"};if(t.attention.state==="stale")return{health:"stale",reason:t.attention.reason};let s=t.lastHeartbeatAt?Date.parse(t.lastHeartbeatAt):NaN;return t.alive&&Number.isFinite(s)&&Date.now()-s>Nt?{health:"stale",reason:`heartbeat older than ${Math.floor(Nt/1e3)}s`}:t.alive&&r.pid&&!$(r.pid)?{health:"orphaned",reason:"pid recorded but process is not alive"}:n?.status==="running"&&!t.alive&&t.finalResult?{health:"healthy",reason:"finished worker awaiting completion replay"}:{health:"healthy",reason:t.attention.reason||"worker within expected lifecycle bounds"}}ke();w();import{existsSync as Dk,mkdirSync as CA,readdirSync as _A,unlinkSync as xA}from"node:fs";import Ru from"node:path";function Mk(){let{harnessRoot:e}=Mr(),r=Ru.join(e,"monitors");return CA(r,{recursive:!0}),r}function mt(e,r){return r?`${R(e)}--${R(r)}`:R(e)}function vu(e){return Ru.join(Mk(),`${e}.json`)}function ft(e){return _(vu(e),void 0)}function gt(e){ce(vu(e.monitorId),e)}function bu(e){let r=vu(e);return Dk(r)?(xA(r),!0):!1}function Uk(){let e=Mk();if(!Dk(e))return[];let r=[];for(let t of _A(e)){if(!t.endsWith(".json"))continue;let n=_(Ru.join(e,t),void 0);n?.monitorId&&r.push({monitorId:n.monitorId,runId:n.runId,workerName:n.workerName,agentOsId:n.agentOsId,pid:n.pid,alive:n.pid?$(n.pid):!1,startedAt:n.startedAt,pollMs:n.pollMs,logPath:n.logPath})}return r.sort((t,n)=>t.startedAt.localeCompare(n.startedAt))}G();function Po(e){let{worker:r,status:t}=e,n=[];r.localOnly&&n.push("local-only worker (no board linkage)"),(!r.agentOsId||!r.taskId)&&n.push("missing agentOsId/taskId linkage"),As(r)&&n.push("completion already acknowledged"),r.completionBlocker&&n.push(r.completionBlocker),t.heartbeatBlocker&&t.alive&&n.push(`worker heartbeat blocker: ${t.heartbeatBlocker}`),t.attention.state==="blocked"&&n.push(t.attention.reason||"worker attention blocked"),Fr(t)&&n.push(t.attention.reason||"landing gate blocked");let o=Z(t),s;return o?t.finalResult?s="final_result":t.alive?s="terminal_status":s="process_exited":n.push("worker has not reached a terminal condition"),{eligible:o&&n.length===0,terminalVerified:o,terminalReason:s,blockers:n}}O();async function Lk(e){let r=new Map,t=e.agentOsId?.trim();if(!t||e.taskIds.length===0)return r;let n=B(e.baseUrl);try{let o=await K(e.secret,t,{baseUrl:n}),s=`${n}/api/agent-os/by-id/${encodeURIComponent(t)}/harness/monitor/task-leases`,i=await q(s,o,{taskIds:[...new Set(e.taskIds)]},{agentOsId:t,baseUrl:n});if(!i.ok||!i.response||typeof i.response!="object")return r;let a=i.response.tasks;if(!Array.isArray(a))return r;for(let l of a)l?.taskId&&r.set(l.taskId,l)}catch{}return r}function Bk(e,r){return _(EA.join(x(e),"workers",R(r),"worker.json"),void 0)}function Wk(e,r){let t=U(e),n=Object.keys(t.workers||{});if(!r)return n;let o=R(r);return n.filter(s=>R(s)===o)}function Hk(e,r){let t=U(e.runId),n=T(e,{base:t.base,baseCommit:t.baseCommit}),o=e.taskId?r.get(e.taskId)??null:null,s=ea({worker:e,status:n,taskLease:o}),i=Po({worker:e,status:n});return{runId:e.runId,worker:e.name,health:s.health,healthReason:s.reason,workerStatus:n.status,attentionState:n.attention.state,attentionReason:n.attention.reason,alive:n.alive,taskId:e.taskId,leaseOwner:o?.leaseOwner??void 0,taskStatus:o?.status,autoComplete:i,status:n}}async function ht(e){let r=String(e.run||"");N(r,"--run");let t=e.name?String(e.name):void 0,n=e.agentOsId?String(e.agentOsId):void 0,o=U(r),s=Wk(r,t),i=[];for(let p of s){let g=Bk(r,p);g&&i.push(g)}let a=n||i.map(p=>p.agentOsId).find(p=>typeof p=="string"&&p.trim())||void 0,l=i.map(p=>p.taskId).filter(p=>!!p),c=await Lk({agentOsId:a,taskIds:l,baseUrl:e.baseUrl?String(e.baseUrl):void 0,secret:e.secret?String(e.secret):void 0}),u=i.map(p=>Hk(p,c)),d;a&&e.renewLeases!==!1&&e.renewLeases!=="false"&&(d=await Cs(r,{...e,agentOsId:a}));let f=[];if(e.autoComplete===!0||e.autoComplete==="true")for(let p of u){if(!p.autoComplete.eligible){f.push({worker:p.worker,outcome:"skipped",ok:!1,reason:p.autoComplete.blockers.join("; ")||"not eligible"});continue}let g=await et({run:r,name:p.worker,...a?{agentOsId:a}:{},...e.baseUrl?{baseUrl:String(e.baseUrl)}:{},...e.secret?{secret:String(e.secret)}:{}});f.push({worker:p.worker,outcome:g.outcome,ok:g.outcome==="completed",reason:g.reason})}return{runId:r,agentOsId:a,workers:u,leaseRenewal:d,autoCompleted:f}}function ra(e){let r=String(e.run||"");N(r,"--run");let t=e.name?String(e.name):void 0,n=Wk(r,t),o=[];for(let s of n){let i=Bk(r,s);i&&o.push(Hk(i,new Map))}return{runId:r,workers:o,autoCompleted:[]}}function Ao(){return Uk()}function Su(e){let r=String(e.run||"");N(r,"--run");let t=mt(r,e.name?String(e.name):void 0),n=ft(t);if(!n)return{monitorId:t,stopped:!1};if(n.pid&&$(n.pid))try{process.kill(n.pid,"SIGTERM")}catch{}return n.stoppedAt=new Date().toISOString(),gt(n),bu(t),{monitorId:t,stopped:!0,pid:n.pid}}async function ta(e){let r=String(e.run||""),t=String(e.name||"");N(r,"--run"),N(t,"--name");let n=ye(r,t),o=U(r),s=T(n,{base:o.base,baseCommit:o.baseCommit}),i=Po({worker:n,status:s});if(!i.eligible){console.log(JSON.stringify({runId:r,worker:t,outcome:"blocked",blockers:i.blockers,terminalVerified:i.terminalVerified},null,2)),process.exitCode=1;return}let a=await et({...e,run:r,name:t});console.log(JSON.stringify(a,null,2)),a.outcome!=="completed"&&a.outcome!=="blocked"&&(process.exitCode=1)}w();var PA=5e3,AA=360*60*1e3;async function wu(e){let r=String(e.monitorId||""),t=Number(e.pollMs)>0?Math.floor(Number(e.pollMs)):PA,n=Number(e.maxTotalMs)>0?Math.floor(Number(e.maxTotalMs)):AA,o=Date.now();for(;Date.now()-o<=n;){let s=r?ft(r):void 0;if(s?.stoppedAt)break;let i=await ht({...e,autoComplete:e.autoComplete??!0,renewLeases:e.renewLeases??!0}),a=gn({monitorId:r,phase:"tick",...i});if(console.log(a.primary),a.diagnostic&&console.error(`[monitor diagnostic] ${a.diagnostic}`),i.workers.length>0&&i.workers.every(c=>c.autoComplete.terminalVerified&&(c.autoComplete.eligible||c.autoComplete.blockers.some(u=>u.includes("already acknowledged"))))&&i.autoCompleted.every(c=>c.ok||c.outcome==="skipped")){r&&s&&(s.stoppedAt=new Date().toISOString(),gt(s));break}Or(t)}}w();ke();import{spawn as IA}from"node:child_process";import{closeSync as Fk,existsSync as OA,openSync as NA}from"node:fs";import $k from"node:path";import{fileURLToPath as TA}from"node:url";function DA(){return $k.join(TA(new URL(".",import.meta.url)),"cli.js")}function na(e){let r=e.cliPath??DA();if(!OA(r))return;let t=mt(e.runId,e.workerName),{harnessRoot:n}=Mr(),o=$k.join(n,"monitors",`${t}.log`),s;try{s=NA(o,"a")}catch{s=void 0}let i=e.nodeExecutable??process.execPath,a=e.pollMs??5e3,l=[r,"monitor","run-loop","--run",e.runId,"--monitor-id",t,"--poll-ms",String(a),"--auto-complete","true","--renew-leases","true"];e.workerName&&l.push("--name",e.workerName),e.agentOsId&&l.push("--agent-os-id",e.agentOsId),e.baseUrl&&l.push("--base-url",e.baseUrl),e.secret&&l.push("--secret",e.secret);let c=["ignore",s??"ignore",s??"ignore"];try{let u=IA(i,l,le({detached:!0,stdio:c,env:process.env}));s!==void 0&&Fk(s),u.unref();let d={monitorId:t,runId:e.runId,workerName:e.workerName,agentOsId:e.agentOsId,pid:u.pid,startedAt:new Date().toISOString(),pollMs:a,logPath:o};return gt(d),{monitorId:t,pid:u.pid,logPath:o,session:d}}catch{if(s!==void 0)try{Fk(s)}catch{}return}}w();async function Kk(e){let r=String(e.run||"");N(r,"--run");let t=e.name?String(e.name):void 0,n=mt(r,t),o=ft(n);if(o?.pid&&!o.stoppedAt)return{monitorId:n,session:o,spawned:!1,pid:o.pid};let s=na({runId:r,workerName:t,agentOsId:e.agentOsId?String(e.agentOsId):void 0,pollMs:Number(e.pollMs)>0?Math.floor(Number(e.pollMs)):void 0,baseUrl:e.baseUrl?String(e.baseUrl):void 0,secret:e.secret?String(e.secret):void 0});if(!s)throw new Error("failed to spawn monitor sidecar (cli.js missing or spawn error)");return{monitorId:n,session:s.session,spawned:!0,pid:s.pid}}async function jk(e){if(String(e.run||"")){let t=e.tick===!0||e.tick==="true"?await ht({...e,autoComplete:!1}):ra(e);console.log(JSON.stringify(t,null,2));return}console.log(JSON.stringify({monitors:Ao()},null,2))}function Vk(e){console.log(JSON.stringify(Su(e),null,2))}function Gk(){console.log(JSON.stringify({monitors:Ao()},null,2))}async function Yk(e){await wu(e)}async function Jk(e){let r=await ht(e);console.log(JSON.stringify(r,null,2))}L();G();w();O();import MA from"node:path";function Io(e,r,t,n,o,s){return{runId:e,worker:r,taskId:t,agentOsId:n,leaseOwner:o,action:"skipped",reason:s}}async function UA(e){let r=B(e.baseUrl?String(e.baseUrl):void 0),t=e.agentOsId?String(e.agentOsId).trim():null,n=e.dryRun===!0||e.dryRun==="true",o=[],s=[],i=[];for(let a of ne())for(let l of Object.keys(a.workers??{})){let c=MA.join(x(a.id),"workers",R(l),"worker.json"),u=_(c,void 0);if(!u){s.push(Io(a.id,l,"","","","worker.json missing"));continue}let d=u.taskId??"",f=u.agentOsId??"",m=u.leaseOwner??"";if(!u.dispatched||!d||!f||!m){s.push(Io(a.id,l,d,f,m,"not a fully-leased dispatched worker"));continue}if(t&&f!==t)continue;if(u.completionReportedAt){s.push(Io(a.id,l,d,f,m,"completion already reported"));continue}let p=T(u);if(p.finalResult){s.push(Io(a.id,l,d,f,m,"has final result \u2014 let pipeline tick complete it"));continue}if(p.alive){s.push(Io(a.id,l,d,f,m,"worker process is still alive"));continue}if(n){o.push({runId:a.id,worker:l,taskId:d,agentOsId:f,leaseOwner:m,action:"released",reason:"dry-run: would release dead dispatched worker lease"});continue}try{let g=await K(e.secret?String(e.secret):void 0,f,{baseUrl:r}),k=`${r}/api/agent-os/by-id/${encodeURIComponent(f)}/tasks/${encodeURIComponent(d)}/release`,h=await q(k,g,{agentOsId:f,leaseOwner:m},{agentOsId:f,baseUrl:r});h.ok===!0||h.response?.ok===!0?o.push({runId:a.id,worker:l,taskId:d,agentOsId:f,leaseOwner:m,action:"released",reason:"dead dispatched worker lease released; task requeued"}):s.push({runId:a.id,worker:l,taskId:d,agentOsId:f,leaseOwner:m,action:"skipped",reason:`release returned ok:false (likely owner mismatch or already released): HTTP ${h.status}`})}catch(g){i.push({runId:a.id,worker:l,taskId:d,agentOsId:f,leaseOwner:m,action:"error",reason:g.message})}}return{dryRun:n,released:o,skipped:s,errors:i}}async function qk(e){let r=await UA(e),t={ok:r.errors.length===0,dryRun:r.dryRun,released:r.released.length,skipped:r.skipped.length,errors:r.errors.length,details:r};console.log(JSON.stringify(t,null,2)),r.errors.length>0&&process.exit(1)}nr();O();import LA from"node:path";import{homedir as BA}from"node:os";var Cu=LA.join(BA(),".kynver","config.json");function _u(e){let r=v(),t=Re({...e,config:r});if(!t)return{ok:!1,remediated:!1,alreadyPersisted:!1,configPath:Y(Cu),resolved:null,reason:"No Kynver git checkout found. Clone the repo, cd into it, then run `kynver setup --repo /path/to/Kynver` (or export KYNVER_DEFAULT_REPO).",remediation:"Clone the Kynver monorepo, cd into it, then run `kynver config ensure-default-repo` (or `kynver setup --repo /path/to/Kynver`)."};if(t.persistedInConfig)return{ok:!0,remediated:!1,alreadyPersisted:!0,configPath:Y(Cu),resolved:Yt(t),config:Mt(r)};let n=ni(t.repo,r),o=Yt({...t,persistedInConfig:!0,source:"config"});return{ok:!0,remediated:!0,alreadyPersisted:!1,configPath:Y(Cu),resolved:o,config:Mt(n),remediation:"defaultRepo persisted in ~/.kynver/config.json \u2014 `kynver run create` no longer requires --repo."}}function zk(e=!1){let r=_u();if(e){console.log(JSON.stringify(r,null,2)),r.ok||(process.exitCode=1);return}if(!r.ok){console.error(r.reason??"Could not resolve a Kynver git checkout."),r.remediation&&console.error(r.remediation),process.exitCode=1;return}if(r.alreadyPersisted){console.log(`defaultRepo already set (${r.resolved?.defaultRepo??"unknown"}) in ${r.configPath}`);return}console.log(`Persisted defaultRepo ${r.resolved?.defaultRepo??""} in ${r.configPath}. \`kynver run create\` can omit --repo.`)}function Xk(e){return e?e.persistedInConfig?{status:"pass"}:{status:"warn",remediation:"Run `kynver config ensure-default-repo` to persist defaultRepo in ~/.kynver/config.json (or `kynver doctor runtime-takeover --remediate-default-repo`)."}:{status:"warn",remediation:"Run `kynver config ensure-default-repo` from a Kynver checkout (or `kynver setup --repo /path/to/Kynver`)."}}import oy from"node:path";nr();O();import{accessSync as WA,constants as HA,existsSync as xu,readFileSync as FA}from"node:fs";import{homedir as oa}from"node:os";import sa from"node:path";import{spawnSync as $A}from"node:child_process";ke();function Qk(e,r){try{let t=$A(e,r,{encoding:"utf8"}),n=(t.stdout||"").trim(),o=(t.stderr||"").trim();return{ok:t.status===0,stdout:n,stderr:o,error:t.error?.message}}catch(t){return{ok:!1,stdout:"",stderr:"",error:t.message}}}function Zk(e){let r=e?.trim();if(r)return r.length<=12?`${r}\u2026`:`${r.slice(0,12)}\u2026`}function KA(e){if(!xu(e))return!1;try{return WA(e,HA.W_OK),!0}catch{return!1}}var ey={packageVersion:()=>yn,commandOnPath:e=>Qk(process.platform==="win32"?"where":"which",[e]),kynverVersion:e=>Qk(e,["--version"]),loadConfig:()=>v(),configFilePath:()=>sa.join(oa(),".kynver","config.json"),credentialsFilePath:()=>sa.join(oa(),".kynver","credentials"),readCredentials:()=>{let e=sa.join(oa(),".kynver","credentials");if(!xu(e))return{hasApiKey:!1};try{let r=JSON.parse(FA(e,"utf8"));return{hasApiKey:!!r.apiKey?.trim(),runnerTokenPrefix:Zk(r.runnerToken),runnerTokenAgentOsId:r.runnerTokenAgentOsId}}catch{return{hasApiKey:!1}}},envSnapshot:()=>({kynverApiUrl:process.env.KYNVER_API_URL?.trim()||void 0,openclawCronFireBaseUrl:process.env.OPENCLAW_CRON_FIRE_BASE_URL?.trim()||void 0,kynverRunnerTokenPrefix:Zk(process.env.KYNVER_RUNNER_TOKEN),kynverRuntimeSecret:!!process.env.KYNVER_RUNTIME_SECRET?.trim(),openclawCronSecret:!!process.env.OPENCLAW_CRON_SECRET?.trim(),kynverHarnessRoot:process.env.KYNVER_HARNESS_ROOT?.trim()||void 0,opusHarnessRoot:process.env.OPUS_HARNESS_ROOT?.trim()||void 0,kynverSchedulerProvider:process.env.KYNVER_SCHEDULER_PROVIDER?.trim()||void 0,openclawCronStorePath:!!(process.env.KYNVER_CRON_STORE_PATH?.trim()||process.env.OPENCLAW_CRON_STORE_PATH?.trim()),kynverCronDaemonPrimary:Ei(),qstashTokenPresent:!!process.env.QSTASH_TOKEN?.trim(),kynverHostedDeployment:(()=>{let e=process.env.KYNVER_HOSTED_DEPLOYMENT?.trim().toLowerCase();return e==="1"||e==="true"||e==="yes"})()}),harnessRoot:()=>de(),legacyOpenclawHarnessRoot:()=>sa.join(oa(),".openclaw","harness"),pathExists:e=>xu(e),pathWritable:e=>KA(e)};function ry(e,r){return e.kynverSchedulerProvider==="openclaw-cron"||r.deploymentSchedulerProvider==="openclaw-cron"}function jA(e,r){return e.kynverSchedulerProvider==="kynver-cron"||r.deploymentSchedulerProvider==="kynver-cron"}function ty(e){return!!e.openclawCronStorePath}function VA(e,r){return e.kynverSchedulerProvider==="qstash"||r.deploymentSchedulerProvider==="qstash"}function ny(e,r){let t={schedulerProvider:e.kynverSchedulerProvider??null,deploymentSchedulerProvider:r.deploymentSchedulerProvider??null,openclawCronStorePath:!!e.openclawCronStorePath,kynverCronDaemonPrimary:!!e.kynverCronDaemonPrimary},n=!!r.agentOsId?.trim()&&!!r.apiBaseUrl?.trim()&&r.hasScopedRunnerToken;if(VA(e,r)&&!ry(e,r)){let u=e.kynverSchedulerProvider==="qstash"?"KYNVER_SCHEDULER_PROVIDER=qstash on this host":"deploymentSchedulerProvider=qstash in ~/.kynver/config.json";return{id:"hotspot_openclaw_scheduler",label:"Scheduler provider (runtime daemon vs OpenClaw cron)",status:"pass",summary:`AgentOS scheduler cut over to QStash (${u})`,details:t}}if(jA(e,r)&&!ry(e,r)){if(ty(e)&&e.kynverCronDaemonPrimary&&n)return{id:"hotspot_openclaw_scheduler",label:"Scheduler provider (runtime daemon vs OpenClaw cron)",status:"pass",summary:"Kynver Cron local store present; `kynver daemon` owns schedule fires (kynver-cron tick loop)",details:{...t,dispatchPath:"kynver-daemon-cron-tick",kynverCronDaemonPrimary:!0}};let u=e.kynverSchedulerProvider==="kynver-cron"?"KYNVER_SCHEDULER_PROVIDER=kynver-cron on this host":"deploymentSchedulerProvider=kynver-cron in ~/.kynver/config.json";return{id:"hotspot_openclaw_scheduler",label:"Scheduler provider (runtime daemon vs OpenClaw cron)",status:"pass",summary:`AgentOS scheduler owned by Kynver Cron (${u})`,details:t}}if(ty(e)){if(e.kynverCronDaemonPrimary&&n)return{id:"hotspot_openclaw_scheduler",label:"Scheduler provider (runtime daemon vs OpenClaw cron)",status:"pass",summary:"Kynver Cron local store present; `kynver daemon` owns schedule fires (kynver-cron tick loop)",details:{...t,dispatchPath:"kynver-daemon-cron-tick",kynverCronDaemonPrimary:!0}};let u=[];return e.openclawCronStorePath&&u.push("KYNVER_CRON_STORE_PATH or OPENCLAW_CRON_STORE_PATH set (local cron store)"),{id:"hotspot_openclaw_scheduler",label:"Scheduler provider (runtime daemon vs OpenClaw cron)",status:"warn",summary:`Local cron store without daemon tick (${u.join("; ")})`,remediation:"Run `kynver daemon` with KYNVER_CRON_SECRET + KYNVER_API_URL (or KYNVER_CRON_FIRE_BASE_URL) so the daemon-owned cron tick fires schedules. On hosted deploys use QStash (KYNVER_SCHEDULER_PROVIDER=qstash). Legacy OpenClaw cron env aliases still work during cutover.",details:t}}let o=e.kynverSchedulerProvider==="openclaw-cron",s=r.deploymentSchedulerProvider==="openclaw-cron",i=e.kynverSchedulerProvider==="qstash",a=!!e.qstashTokenPresent||!!e.kynverHostedDeployment,l=a&&!n,c=l&&e.kynverSchedulerProvider==="openclaw-cron";return s&&!o?{id:"hotspot_openclaw_scheduler",label:"Scheduler provider (runtime daemon vs OpenClaw cron)",status:"warn",summary:"deploymentSchedulerProvider=openclaw-cron in ~/.kynver/config.json \u2014 migrate to kynver-cron or qstash",remediation:'Run `kynver scheduler attest-cutover` or set deploymentSchedulerProvider to "kynver-cron" or "qstash" in ~/.kynver/config.json.',details:t}:n&&o?{id:"hotspot_openclaw_scheduler",label:"Scheduler provider (runtime daemon vs OpenClaw cron)",status:"warn",summary:"KYNVER_SCHEDULER_PROVIDER=openclaw-cron on this runner \u2014 dispatch is owned by kynver daemon; unset the OpenClaw override",remediation:"Unset KYNVER_SCHEDULER_PROVIDER on user runners (or set kynver-cron). Use `kynver daemon` (pipeline-tick \u2192 operator/tick). On the Kynver server set KYNVER_SCHEDULER_PROVIDER=qstash when QStash is configured.",details:{schedulerProvider:e.kynverSchedulerProvider??null,dispatchPath:"kynver-daemon-pipeline-tick",hostedDeployment:a}}:n?{id:"hotspot_openclaw_scheduler",label:"Scheduler provider (runtime daemon vs OpenClaw cron)",status:"pass",summary:i?"Runner override qstash present; hosted dispatch still owned by kynver daemon pipeline-tick":"Hosted dispatch owned by kynver daemon (pipeline-tick \u2192 operator/tick); no OpenClaw cron on runner",details:{schedulerProvider:e.kynverSchedulerProvider??null,dispatchPath:"kynver-daemon-pipeline-tick",hostedDeployment:a}}:o?{id:"hotspot_openclaw_scheduler",label:"Scheduler provider (runtime daemon vs OpenClaw cron)",status:"warn",summary:"KYNVER_SCHEDULER_PROVIDER=openclaw-cron on this runner \u2014 hosted dispatch still depends on the OpenClaw local-cron adapter",remediation:"Unset KYNVER_SCHEDULER_PROVIDER on user runners (or set kynver-cron). Use `kynver daemon` (pipeline-tick \u2192 operator/tick). On the Kynver server set KYNVER_SCHEDULER_PROVIDER=qstash when QStash is configured.",details:{schedulerProvider:e.kynverSchedulerProvider??null,hostedDeployment:a}}:c?{id:"hotspot_openclaw_scheduler",label:"Scheduler provider (runtime daemon vs OpenClaw cron)",status:"warn",summary:"Hosted deployment has KYNVER_SCHEDULER_PROVIDER=openclaw-cron \u2014 AgentOS scheduled ticks should use QStash or kynver-cron",remediation:"Set QSTASH_TOKEN and KYNVER_SCHEDULER_PROVIDER=qstash on the Kynver server (or kynver-cron for Kynver-owned local scheduling). User runners use `kynver daemon` for dispatch and should not set a scheduler provider.",details:{schedulerProvider:e.kynverSchedulerProvider??null,qstashTokenPresent:e.qstashTokenPresent??!1,hostedDeployment:a}}:l&&e.qstashTokenPresent&&!e.kynverSchedulerProvider?{id:"hotspot_openclaw_scheduler",label:"Scheduler provider (runtime daemon vs OpenClaw cron)",status:"pass",summary:"QSTASH_TOKEN present; hosted scheduler auto-selects qstash (explicit KYNVER_SCHEDULER_PROVIDER=qstash optional)",details:{schedulerProvider:null,qstashTokenPresent:!0,hostedDeployment:a}}:l&&!e.qstashTokenPresent&&!e.kynverSchedulerProvider?{id:"hotspot_openclaw_scheduler",label:"Scheduler provider (runtime daemon vs OpenClaw cron)",status:"warn",summary:"Hosted deployment with no QSTASH_TOKEN and no KYNVER_SCHEDULER_PROVIDER \u2014 kynver-cron is an in-process stub here and will NOT fire; no firing scheduler is configured",remediation:"Set QSTASH_TOKEN + KYNVER_SCHEDULER_PROVIDER=qstash on the Kynver server for hosted AgentOS schedules. Only use kynver-cron when a `kynver daemon` (or local cron store) actually owns firing on this box.",details:{schedulerProvider:null,resolvedFallback:"none",qstashTokenPresent:!1,hostedDeployment:a}}:l&&!e.qstashTokenPresent&&e.kynverSchedulerProvider&&e.kynverSchedulerProvider!=="qstash"&&e.kynverSchedulerProvider!=="kynver-cron"?{id:"hotspot_openclaw_scheduler",label:"Scheduler provider (runtime daemon vs OpenClaw cron)",status:"warn",summary:`Hosted deployment without QSTASH_TOKEN (KYNVER_SCHEDULER_PROVIDER=${e.kynverSchedulerProvider}) \u2014 use qstash or kynver-cron`,remediation:"Set QSTASH_TOKEN and KYNVER_SCHEDULER_PROVIDER=qstash on the Kynver server, or kynver-cron for Kynver-owned local scheduling. User runners use `kynver daemon` for dispatch.",details:{schedulerProvider:e.kynverSchedulerProvider??null,qstashTokenPresent:e.qstashTokenPresent??!1,hostedDeployment:a}}:e.kynverSchedulerProvider?{id:"hotspot_openclaw_scheduler",label:"Scheduler provider (runtime daemon vs OpenClaw cron)",status:"pass",summary:`KYNVER_SCHEDULER_PROVIDER=${e.kynverSchedulerProvider}`,details:{schedulerProvider:e.kynverSchedulerProvider??null}}:{id:"hotspot_openclaw_scheduler",label:"Scheduler provider (runtime daemon vs OpenClaw cron)",status:"pass",summary:"No KYNVER_SCHEDULER_PROVIDER on runner (expected) \u2014 finish runner setup so daemon pipeline-tick owns dispatch",details:{schedulerProvider:null,dispatchPath:"kynver-daemon-pipeline-tick-pending"}}}function GA(e){let r={pass:0,warn:0,fail:0};for(let t of e)for(let n of t.checks)r[n.status]+=1;return r}function YA(e){let r=e.packageVersion(),t=e.commandOnPath("kynver"),n=t.ok&&t.stdout.length>0,o=n?t.stdout.split(/\r?\n/)[0]?.trim():void 0,s=o?Y(o):void 0,i=[{id:"cli_running_version",label:"Running @kynver-app/runtime version",status:"pass",summary:`@kynver-app/runtime ${r}`,details:{version:r}},{id:"cli_on_path",label:"kynver executable on PATH",status:n?"pass":"warn",summary:n?`Found ${s}`:"kynver not found on PATH (invoked via node/npx?)",remediation:n?void 0:"Install globally (`npm i -g @kynver-app/runtime`) or invoke via `npx @kynver-app/runtime`.",details:{path:s}}];if(n&&o){let a=e.kynverVersion(o),l=a.stdout.replace(/^kynver\s+/i,"").trim()||void 0,c=a.ok&&(!l||l===r);i.push({id:"cli_installed_version",label:"Installed kynver CLI version matches running package",status:c?"pass":"warn",summary:a.ok&&l?c?`Installed ${l}`:`Installed ${l} differs from running ${r}`:a.error?`Could not read installed version (${a.error})`:a.stderr||"Could not read installed version",remediation:c?void 0:"Reinstall or rebuild @kynver-app/runtime so PATH kynver matches the harness worktree version.",details:{installedVersion:l,runningVersion:r,path:s}})}return{id:"cli_package",label:"CLI / package",checks:i}}function JA(e){let r=e.configFilePath(),t=Y(r),n=e.pathExists(r),o=e.loadConfig(),s=[{id:"config_file",label:"~/.kynver/config.json present",status:n?"pass":"fail",summary:n?`Found ${t}`:`Missing ${t}`,remediation:n?void 0:"Run `kynver setup --api-base-url <url> --agent-os-id <id> --repo <path>`.",details:{configPath:t}}];if(n){let i=o.apiBaseUrl?.trim(),a=o.agentOsId?.trim(),l=Re({config:o}),c=l?Yt(l):null,u=Xk(l);s.push({id:"config_api_base_url",label:"Default API base URL",status:i?"pass":"warn",summary:i??"Not set in config (KYNVER_API_URL / --base-url required per command)",remediation:i?void 0:"Set `apiBaseUrl` via `kynver setup --api-base-url https://\u2026`.",details:{apiBaseUrl:i??null}},{id:"config_agent_os_id",label:"Default AgentOS id",status:a?"pass":"warn",summary:a??"Not set (pass --agent-os-id on daemon/dispatch/worker commands)",remediation:a?void 0:"Set `agentOsId` via `kynver setup --agent-os-id <uuid>`.",details:{agentOsId:a??null,agentOsSlug:o.agentOsSlug??null}},{id:"config_default_repo",label:"Default repo path",status:u.status,summary:l?l.persistedInConfig?`${c.defaultRepo} (config)`:`${c.defaultRepo} (${l.source}, not persisted in ~/.kynver/config.json)`:"Not set in ~/.kynver/config.json (`kynver run create` requires --repo)",remediation:u.remediation,details:{defaultRepo:c?.defaultRepo??null,source:c?.source??null,persistedInConfig:c?.persistedInConfig??!1,harnessRoot:o.harnessRoot?he(o.harnessRoot):null}})}return{id:"user_config",label:"User config (~/.kynver)",checks:s}}function qA(e){let t=e.loadConfig().agentOsId?.trim(),n=e.readCredentials(),o=e.envSnapshot(),s=e.credentialsFilePath(),i=Y(s),a=o.kynverRunnerTokenPrefix,l=n.runnerTokenPrefix,c=n.runnerTokenAgentOsId,u=!!l&&(!t||!c||c===t),d=!!a?.startsWith("krc1.")||u&&l?.startsWith("krc1.");return{id:"runner_token",label:"Runner token readiness",checks:[{id:"runner_token_scoped",label:"Scoped runner token (krc1.*) ready",status:d?"pass":"fail",summary:d?a?"KYNVER_RUNNER_TOKEN is set (scoped prefix shown)":`Saved scoped token for agentOsId ${c??t??"(unknown)"}`:"No scoped runner token for the configured AgentOS workspace",remediation:d?void 0:"Run `kynver login` then `kynver runner credential --agent-os-id <id>` (or `kynver setup` with API key).",details:{source:a?"env":l?"credentials":"none",tokenPrefix:a??(u?l:void 0),agentOsId:t??c??null,credentialsPath:i}},{id:"runner_token_agent_os_match",label:"Saved runner token matches configured agentOsId",status:!l||!t||!c||c===t?"pass":"warn",summary:!l||!c?"No saved token agentOsId to compare":t?c===t?"Saved token scoped to configured agentOsId":`Saved token is for ${c}, config expects ${t}`:"Config agentOsId unset \u2014 token scope not validated against config",remediation:l&&t&&c&&c!==t?"`kynver runner credential --agent-os-id <configured-id>` to mint a workspace-bound token.":void 0,details:{configuredAgentOsId:t??null,savedAgentOsId:c??null}},{id:"runner_api_key_for_refresh",label:"API key available for token refresh",status:n.hasApiKey||process.env.KYNVER_API_KEY?.trim()?"pass":"warn",summary:n.hasApiKey||process.env.KYNVER_API_KEY?"KYNVER API key present for runner credential mint/refresh":"No API key \u2014 401 callback recovery cannot auto-mint a replacement token",remediation:n.hasApiKey||process.env.KYNVER_API_KEY?void 0:"Run `kynver login --api-key \u2026`.",details:{credentialsPath:i,hasApiKey:n.hasApiKey||!!process.env.KYNVER_API_KEY}}]}}function zA(e){let r=e.commandOnPath("vercel"),t=r.ok,n=!!(process.env.GITHUB_TOKEN?.trim()||process.env.GH_TOKEN?.trim()),o=!!process.env.VERCEL_TOKEN?.trim();return{id:"vercel_deploy_evidence",label:"Vercel deploy evidence",checks:[{id:"vercel_global_cli_absent",label:"Global Vercel CLI not installed",status:t?"warn":"pass",summary:t?`Global Vercel CLI found (${r.stdout||"on PATH"}) \u2014 uninstall after operator approval`:"No global Vercel CLI on PATH",remediation:t?"Uninstall global Vercel CLI (`npm uninstall -g vercel`) \u2014 use GitHub commit status or scoped VERCEL_TOKEN + REST API instead.":void 0,details:{path:t&&r.stdout||null}},{id:"github_token_for_vercel_status",label:"GitHub token for Vercel status",status:n?"pass":"warn",summary:n?"GITHUB_TOKEN/GH_TOKEN present for GitHub Vercel StatusContext evidence":"No GITHUB_TOKEN \u2014 merge-gate Vercel evidence requires GitHub commit status API",remediation:n?void 0:"Export GITHUB_TOKEN (or GH_TOKEN) for PR head commit status lookups."},{id:"vercel_api_token_optional",label:"Vercel API token (optional fallback)",status:o?"pass":"warn",summary:o?"VERCEL_TOKEN configured for optional REST API deployment lookup":"VERCEL_TOKEN unset \u2014 GitHub status is the default path; API fallback disabled",remediation:o?void 0:"Set ephemeral/scoped VERCEL_TOKEN only when GitHub status is insufficient; avoid persistent ~/.vercel auth on runner hosts."}]}}function XA(e){let r=e.harnessRoot(),t=oy.join(r,"runs"),n=oy.join(r,"worktrees"),o=he(r),s=he(t),i=he(n),a=e.pathExists(t),l=e.pathExists(n);return{id:"harness_dirs",label:"Harness / daemon directories",checks:[{id:"harness_root",label:"Harness root resolved",status:"pass",summary:o,details:{harnessRoot:o}},{id:"harness_runs_dir",label:"Runs directory ready",status:a&&e.pathWritable(t)?"pass":"warn",summary:a?e.pathWritable(t)?`Writable ${s}`:`Exists but not writable: ${s}`:`Will be created on first run: ${s}`,remediation:a&&!e.pathWritable(t)?`Fix permissions on ${s} or set KYNVER_HARNESS_ROOT to a writable path.`:void 0,details:{runsDir:s,exists:a,writable:e.pathWritable(t)}},{id:"harness_worktrees_dir",label:"Worktrees directory ready",status:l&&e.pathWritable(n)?"pass":"warn",summary:l?e.pathWritable(n)?`Writable ${i}`:`Exists but not writable: ${i}`:`Will be created on first worker: ${i}`,remediation:l&&!e.pathWritable(n)?`Fix permissions on ${i}.`:void 0,details:{worktreesDir:i,exists:l,writable:e.pathWritable(n)}}]}}function QA(e){let r=e.loadConfig(),t=e.envSnapshot(),n=t.kynverApiUrl??r.apiBaseUrl?.trim()??t.openclawCronFireBaseUrl,o=!t.kynverApiUrl&&!r.apiBaseUrl&&!!t.openclawCronFireBaseUrl,s=t.openclawCronSecret||t.kynverRuntimeSecret,i=t.kynverRunnerTokenPrefix?.startsWith("krc1."),l=e.readCredentials().runnerTokenPrefix?.startsWith("krc1.");return{id:"callback_auth",label:"Callback auth / config",checks:[{id:"callback_base_url",label:"Callback base URL configured",status:n?o?"warn":"pass":"fail",summary:n?o?`Using legacy OPENCLAW_CRON_FIRE_BASE_URL (${n})`:n:"No KYNVER_API_URL, config apiBaseUrl, or legacy OpenClaw base URL",remediation:n?o?"Migrate to KYNVER_API_URL or `kynver setup --api-base-url` and drop OPENCLAW_CRON_FIRE_BASE_URL.":void 0:"Set KYNVER_API_URL or run `kynver setup --api-base-url https://\u2026`.",details:{source:t.kynverApiUrl?"KYNVER_API_URL":r.apiBaseUrl?"config.apiBaseUrl":t.openclawCronFireBaseUrl?"OPENCLAW_CRON_FIRE_BASE_URL":"none",baseUrl:n??null}},{id:"callback_auth_mode",label:"Callback auth uses scoped runner token",status:i||l?"pass":s?"warn":"fail",summary:i?"KYNVER_RUNNER_TOKEN scoped token will be sent as X-Kynver-Runner-Token":l?"Saved krc1.* token in ~/.kynver/credentials":s?"Deployment-level KYNVER_RUNTIME_SECRET / OPENCLAW_CRON_SECRET in use (legacy headers)":"No callback secret configured",remediation:i||l?void 0:"Mint a scoped token: `kynver runner credential --agent-os-id <id>`. Avoid shared OPENCLAW_CRON_SECRET on user runners.",details:{mode:i||l?"scoped":s?"legacy_global_secret":"missing",legacyHeadersWhenNotScoped:["X-OpenClaw-Cron-Secret","X-Kynver-Runtime-Secret"]}}]}}function ZA(e){let r=e.envSnapshot(),t=e.loadConfig(),n=e.readCredentials(),o=e.harnessRoot(),s=e.legacyOpenclawHarnessRoot(),i=he(o),a=he(s),l=r.opusHarnessRoot?he(r.opusHarnessRoot):null,c=o===s&&e.pathExists(s),u=t.agentOsId?.trim(),d=r.kynverRunnerTokenPrefix,f=n.runnerTokenPrefix,m=n.runnerTokenAgentOsId,p=!!f&&(!u||!m||m===u),g=!!d?.startsWith("krc1.")||p&&!!f?.startsWith("krc1.");return{id:"openclaw_hotspots",label:"OpenClaw dependency hotspots",checks:[{id:"hotspot_legacy_harness_root",label:"Legacy ~/.openclaw/harness still active",status:c?"warn":"pass",summary:c?`Harness root is legacy ${a}`:r.opusHarnessRoot?`OPUS_HARNESS_ROOT override in use (${l})`:`Using ${i}`,remediation:c?"Set KYNVER_HARNESS_ROOT=~/.kynver/harness (or run setup), migrate artifacts, retire OPUS_HARNESS_ROOT.":r.opusHarnessRoot?"Prefer KYNVER_HARNESS_ROOT over OPUS_HARNESS_ROOT.":void 0,details:{harnessRoot:i,legacyRoot:a,opusHarnessRoot:l}},{id:"hotspot_openclaw_env_secrets",label:"OpenClaw deployment secrets in runner env",status:r.openclawCronSecret||r.openclawCronFireBaseUrl?"warn":"pass",summary:r.openclawCronSecret||r.openclawCronFireBaseUrl?[r.openclawCronSecret?"OPENCLAW_CRON_SECRET set":null,r.openclawCronFireBaseUrl?"OPENCLAW_CRON_FIRE_BASE_URL set":null].filter(Boolean).join("; "):"No OpenClaw cron env overrides on this runner",remediation:r.openclawCronSecret||r.openclawCronFireBaseUrl?"Move to KYNVER_API_URL + scoped runner tokens; unset OpenClaw cron env on user-hosted runners.":void 0},ny(r,{agentOsId:u??null,apiBaseUrl:t.apiBaseUrl?.trim()??r.kynverApiUrl??null,hasScopedRunnerToken:g,deploymentSchedulerProvider:t.deploymentSchedulerProvider==="qstash"||t.deploymentSchedulerProvider==="kynver-cron"||t.deploymentSchedulerProvider==="openclaw-cron"?t.deploymentSchedulerProvider:void 0}),{id:"hotspot_lease_source_names",label:"Harness lease/completion source names",status:"pass",summary:"Runtime uses kynver-harness:* lease owners and completion source kynver-harness (OpenClaw names retired in runtime)",details:{leaseOwnerPattern:"kynver-harness:<runId>",completionSource:"kynver-harness",note:"OpenClaw adapter remains optional in packages/kynver-openclaw-agent-os only"}}]}}function sy(e=ey){let r=[YA(e),JA(e),qA(e),zA(e),XA(e),QA(e),ZA(e)],t=GA(r),n=t.fail===0,o=n?t.warn>0?`Ready with ${t.warn} warning(s) \u2014 review remediation before retiring OpenClaw as primary runtime agent.`:"Ready \u2014 Kynver runtime can serve as primary runtime agent on this host.":`${t.fail} blocking check(s) \u2014 fix failures before OpenClaw takeover.`;return{command:"doctor runtime-takeover",ready:n,summary:o,counts:t,sections:r}}function iy(e={}){let r;if(e.remediateDefaultRepo===!0){let n=_u();if(!n.ok){console.error(n.reason??"defaultRepo remediation failed"),n.remediation&&console.error(n.remediation),process.exitCode=1;return}n.remediated?r=`Remediated defaultRepo \u2192 ${n.resolved?.defaultRepo??"unknown"}`:r=`defaultRepo already persisted (${n.resolved?.defaultRepo??"unknown"})`}let t=sy();r&&(t.notes=[...t.notes??[],r]),console.log(JSON.stringify(t,null,2)),t.ready||(process.exitCode=1)}O();async function ay(e){let r=v(),t=(e.agentOsId?String(e.agentOsId):r.agentOsId)||"";t||(console.error("requires --agent-os-id or agentOsId in ~/.kynver/config.json"),process.exit(1));let n=B(e.baseUrl?String(e.baseUrl):r.apiBaseUrl),o=await K(e.secret?String(e.secret):void 0,t,{baseUrl:n}),s=new URLSearchParams;if(typeof e.since=="string"&&e.since.trim()&&s.set("since",e.since.trim()),e.limit!=null&&String(e.limit).trim()){let c=Number(e.limit);Number.isFinite(c)&&c>0&&s.set("limit",String(Math.floor(c)))}let i=s.toString()?`?${s.toString()}`:"",a=`${n}/api/agent-os/by-id/${encodeURIComponent(t)}/command-center/dashboard-contract${i}`,l=await ls(a,o);l.ok||(console.error(`dashboard-contract GET failed: HTTP ${l.status}`),l.response&&console.error(JSON.stringify(l.response,null,2)),process.exit(1)),console.log(JSON.stringify(l.response,null,2))}nr();var Eu=["Vercel/hosted: set KYNVER_SCHEDULER_PROVIDER=qstash","Vercel/hosted: ensure QSTASH_TOKEN (and QStash signing keys) are configured","Vercel/hosted: unset OPENCLAW_CRON_STORE_PATH if present"],Pu=["User runner: unset KYNVER_SCHEDULER_PROVIDER (scheduling is deployment-owned)","User runner: unset OPENCLAW_CRON_STORE_PATH, OPENCLAW_CRON_SECRET, OPENCLAW_CRON_FIRE_BASE_URL",'User runner: after deployment cutover, run `kynver scheduler attest-cutover` (or set deploymentSchedulerProvider to "qstash" in ~/.kynver/config.json)',"Verify: kynver doctor runtime-takeover \u2014 hotspot_openclaw_scheduler should pass"];function eI(e=process.env){return{kynverSchedulerProvider:e.KYNVER_SCHEDULER_PROVIDER?.trim()||null,kynverCronStorePath:e.KYNVER_CRON_STORE_PATH?.trim()||e.OPENCLAW_CRON_STORE_PATH?.trim()||null,kynverCronSecret:!!(e.KYNVER_CRON_SECRET?.trim()||e.OPENCLAW_CRON_SECRET?.trim()),kynverCronFireBaseUrl:e.KYNVER_CRON_FIRE_BASE_URL?.trim()||e.OPENCLAW_CRON_FIRE_BASE_URL?.trim()||null,openclawCronStorePath:e.OPENCLAW_CRON_STORE_PATH?.trim()||null,openclawCronSecret:!!e.OPENCLAW_CRON_SECRET?.trim(),openclawCronFireBaseUrl:e.OPENCLAW_CRON_FIRE_BASE_URL?.trim()||null}}function Au(e,r=eI()){let t=[];return r.kynverSchedulerProvider==="openclaw-cron"&&t.push("Runner still has KYNVER_SCHEDULER_PROVIDER=openclaw-cron"),r.kynverCronStorePath&&r.kynverSchedulerProvider!=="kynver-cron"&&t.push("Runner has KYNVER_CRON_STORE_PATH but KYNVER_SCHEDULER_PROVIDER is not kynver-cron \u2014 use `kynver daemon` cron tick or unset the store for QStash-only runners"),r.openclawCronStorePath&&!r.kynverCronStorePath&&t.push("Runner still has legacy OPENCLAW_CRON_STORE_PATH (prefer KYNVER_CRON_STORE_PATH)"),e.deploymentSchedulerProvider==="openclaw-cron"&&t.push("~/.kynver/config.json deploymentSchedulerProvider is still openclaw-cron"),{ok:t.length===0,blockers:t,runnerEnv:r,deploymentSchedulerProvider:e.deploymentSchedulerProvider??null,deploymentSteps:[...Eu],runnerSteps:[...Pu]}}function ly(e){return{...e,deploymentSchedulerProvider:"qstash"}}O();import rI from"node:path";import{homedir as tI}from"node:os";var cy=rI.join(tI(),".kynver","config.json");function uy(e=!1){let r=v(),t=Au(r),n={...t,configPath:Y(cy),configAttestationExample:{deploymentSchedulerProvider:"qstash"}};if(e){console.log(JSON.stringify(n,null,2)),t.ok||(process.exitCode=1);return}console.log(`AgentOS scheduler provider cutover checklist
-`),console.log("Deployment (Vercel):");for(let o of Eu)console.log(`  - ${o}`);console.log(`
-User runner:`);for(let o of Pu)console.log(`  - ${o}`);if(console.log(`
+${BI}
+${e.diagnostic}`:e.primary}function HI(e){let r=[`Harness ${e.scope} ${e.action} failed.`];e.timedOut?r.push("Reason: command timed out on the runner host."):e.error?r.push(`Reason: ${e.error}`):e.exitCode!=null&&r.push(`Exit code: ${e.exitCode}`);let t=e.stderr.trim();t&&r.push(`Stderr: ${t.split(`
+`).slice(-3).join(" ")}`),r.push("Next: retry on the runner host or inspect harness logs.");let n=Ca(e.stdout);return{primary:r.join(`
+`),diagnostic:se(n??{stdout:e.stdout,stderr:e.stderr})}}function Oy(e){if(!e.ok)return HI(e);let r=Ca(e.stdout);if(r===null){let t=e.stdout.trim()||e.stderr.trim()||"(no output)";return{primary:`Harness ${e.scope} ${e.action} finished.
+${t.slice(0,800)}`,diagnostic:se({stdout:e.stdout,stderr:e.stderr})}}if(e.scope==="worker"&&e.action==="status")return Yo(r);if(e.scope==="worker"&&e.action==="complete")return _a(r);if(e.scope==="monitor"&&(e.action==="tick"||e.action==="run-loop"))return On(r);if(e.scope==="monitor"&&e.action==="auto-complete"){let t=r;if(t.outcome&&t.worker&&t.runId)return wa(r);if(Array.isArray(t.blockers))return{primary:[`Monitor auto-complete blocked \xB7 ${t.runId??"run"} / ${t.worker??"worker"}`,`Blockers: ${t.blockers.join("; ")}`,"Next: resolve blockers on the runner, then retry auto-complete."].join(`
+`),diagnostic:se(r)}}if(e.scope==="run"&&e.action==="status"){let t=r.workers;return Array.isArray(t)&&t.length===1?Yo(t[0]):{primary:`Harness run status \xB7 ${r.runId??"run"} (${Array.isArray(t)?t.length:0} workers).`,diagnostic:se(r)}}return{primary:`Harness ${e.scope} ${e.action} completed successfully on the runner.`,diagnostic:se(r)}}import jI from"node:path";M();Y();C();Y();C();function xa(e){let{worker:r,status:t,taskLease:n}=e,o=n?.leaseOwner??null;if(r.dispatched&&n){if(n.status==="running"&&o&&!Gl(o,r.runId))return{health:"orphaned",reason:`task lease held by ${o}, expected harness run ${r.runId}`};let i=r.leaseToken?.trim()??"",a=n.leaseToken?.trim()??"";if(n.status==="running"&&i&&a&&i!==a)return{health:"orphaned",reason:"task leaseToken superseded on board \u2014 completion replay would fail"};if(n.status==="running"&&!t.alive&&!t.finalResult)return{health:"orphaned",reason:"board task running but worker process is not alive"}}if(r.status==="running"&&!t.alive&&!t.finalResult)return{health:"orphaned",reason:"worker.json still running but process is dead"};if(t.attention.state==="stale")return{health:"stale",reason:t.attention.reason};let s=t.lastHeartbeatAt?Date.parse(t.lastHeartbeatAt):NaN;return t.alive&&Number.isFinite(s)&&Date.now()-s>Vt?{health:"stale",reason:`heartbeat older than ${Math.floor(Vt/1e3)}s`}:t.alive&&r.pid&&!B(r.pid)?{health:"orphaned",reason:"pid recorded but process is not alive"}:n?.status==="running"&&!t.alive&&t.finalResult?{health:"healthy",reason:"finished worker awaiting completion replay"}:{health:"healthy",reason:t.attention.reason||"worker within expected lifecycle bounds"}}_e();C();import{existsSync as Ny,mkdirSync as FI,readdirSync as $I,unlinkSync as KI}from"node:fs";import qu from"node:path";function Ty(){let{harnessRoot:e}=Yr(),r=qu.join(e,"monitors");return FI(r,{recursive:!0}),r}function _t(e,r){return r?`${b(e)}--${b(r)}`:b(e)}function zu(e){return qu.join(Ty(),`${e}.json`)}function xt(e){return _(zu(e),void 0)}function Et(e){pe(zu(e.monitorId),e)}function Xu(e){let r=zu(e);return Ny(r)?(KI(r),!0):!1}function Dy(){let e=Ty();if(!Ny(e))return[];let r=[];for(let t of $I(e)){if(!t.endsWith(".json"))continue;let n=_(qu.join(e,t),void 0);n?.monitorId&&r.push({monitorId:n.monitorId,runId:n.runId,workerName:n.workerName,agentOsId:n.agentOsId,pid:n.pid,alive:n.pid?B(n.pid):!1,startedAt:n.startedAt,pollMs:n.pollMs,logPath:n.logPath})}return r.sort((t,n)=>t.startedAt.localeCompare(n.startedAt))}Y();function Jo(e){let{worker:r,status:t}=e,n=[];r.localOnly&&n.push("local-only worker (no board linkage)"),(!r.agentOsId||!r.taskId)&&n.push("missing agentOsId/taskId linkage"),ei(r)&&n.push("completion already acknowledged"),r.completionBlocker&&n.push(r.completionBlocker),t.heartbeatBlocker&&t.alive&&n.push(`worker heartbeat blocker: ${t.heartbeatBlocker}`),t.attention.state==="blocked"&&n.push(t.attention.reason||"worker attention blocked"),Zr(t)&&n.push(t.attention.reason||"landing gate blocked");let o=ne(t),s;return o?t.finalResult?s="final_result":t.alive?s="terminal_status":s="process_exited":n.push("worker has not reached a terminal condition"),{eligible:o&&n.length===0,terminalVerified:o,terminalReason:s,blockers:n}}function My(e,r){return _(jI.join(x(e),"workers",b(r),"worker.json"),void 0)}function Uy(e,r){let t=L(e),n=Object.keys(t.workers||{});if(!r)return n;let o=b(r);return n.filter(s=>b(s)===o)}function Wy(e,r){let t=L(e.runId),n=T(e,{base:t.base,baseCommit:t.baseCommit}),o=e.taskId?r.get(e.taskId)??null:null,s=xa({worker:e,status:n,taskLease:o}),i=Jo({worker:e,status:n});return{runId:e.runId,worker:e.name,health:s.health,healthReason:s.reason,workerStatus:n.status,attentionState:n.attention.state,attentionReason:n.attention.reason,alive:n.alive,taskId:e.taskId,leaseOwner:o?.leaseOwner??void 0,taskStatus:o?.status,autoComplete:i,status:n}}async function Pt(e){let r=String(e.run||"");N(r,"--run");let t=e.name?String(e.name):void 0,n=e.agentOsId?String(e.agentOsId):void 0,o=L(r),s=Uy(r,t),i=[];for(let p of s){let h=My(r,p);h&&i.push(h)}let a=n||i.map(p=>p.agentOsId).find(p=>typeof p=="string"&&p.trim())||void 0,l=i.map(p=>p.taskId).filter(p=>!!p),c=await en({agentOsId:a,taskIds:l,baseUrl:e.baseUrl?String(e.baseUrl):void 0,secret:e.secret?String(e.secret):void 0}),u=i.map(p=>Wy(p,c)),d;a&&e.renewLeases!==!1&&e.renewLeases!=="false"&&(d=await qs(r,{...e,agentOsId:a}));let f=[];if(e.autoComplete===!0||e.autoComplete==="true")for(let p of u){if(!p.autoComplete.eligible){f.push({worker:p.worker,outcome:"skipped",ok:!1,reason:p.autoComplete.blockers.join("; ")||"not eligible"});continue}let h=await dt({run:r,name:p.worker,...a?{agentOsId:a}:{},...e.baseUrl?{baseUrl:String(e.baseUrl)}:{},...e.secret?{secret:String(e.secret)}:{}});f.push({worker:p.worker,outcome:h.outcome,ok:h.outcome==="completed",reason:h.reason})}return{runId:r,agentOsId:a,workers:u,leaseRenewal:d,autoCompleted:f}}function Ea(e){let r=String(e.run||"");N(r,"--run");let t=e.name?String(e.name):void 0,n=Uy(r,t),o=[];for(let s of n){let i=My(r,s);i&&o.push(Wy(i,new Map))}return{runId:r,workers:o,autoCompleted:[]}}function qo(){return Dy()}function Qu(e){let r=String(e.run||"");N(r,"--run");let t=_t(r,e.name?String(e.name):void 0),n=xt(t);if(!n)return{monitorId:t,stopped:!1};if(n.pid&&B(n.pid))try{process.kill(n.pid,"SIGTERM")}catch{}return n.stoppedAt=new Date().toISOString(),Et(n),Xu(t),{monitorId:t,stopped:!0,pid:n.pid}}async function Pa(e){let r=String(e.run||""),t=String(e.name||"");N(r,"--run"),N(t,"--name");let n=he(r,t),o=L(r),s=T(n,{base:o.base,baseCommit:o.baseCommit}),i=Jo({worker:n,status:s});if(!i.eligible){console.log(JSON.stringify({runId:r,worker:t,outcome:"blocked",blockers:i.blockers,terminalVerified:i.terminalVerified},null,2)),process.exitCode=1;return}let a=await dt({...e,run:r,name:t});console.log(JSON.stringify(a,null,2)),a.outcome!=="completed"&&a.outcome!=="blocked"&&(process.exitCode=1)}C();var VI=5e3,GI=360*60*1e3;async function Zu(e){let r=String(e.monitorId||""),t=Number(e.pollMs)>0?Math.floor(Number(e.pollMs)):VI,n=Number(e.maxTotalMs)>0?Math.floor(Number(e.maxTotalMs)):GI,o=Date.now();for(;Date.now()-o<=n;){let s=r?xt(r):void 0;if(s?.stoppedAt)break;let i=await Pt({...e,autoComplete:e.autoComplete??!0,renewLeases:e.renewLeases??!0}),a=On({monitorId:r,phase:"tick",...i});if(console.log(a.primary),a.diagnostic&&console.error(`[monitor diagnostic] ${a.diagnostic}`),i.workers.length>0&&i.workers.every(c=>c.autoComplete.terminalVerified&&(c.autoComplete.eligible||c.autoComplete.blockers.some(u=>u.includes("already acknowledged"))))&&i.autoCompleted.every(c=>c.ok||c.outcome==="skipped")){r&&s&&(s.stoppedAt=new Date().toISOString(),Et(s));break}Fr(t)}}C();_e();import{spawn as YI}from"node:child_process";import{closeSync as Ly,existsSync as JI,openSync as qI}from"node:fs";import By from"node:path";import{fileURLToPath as zI}from"node:url";function XI(){return By.join(zI(new URL(".",import.meta.url)),"cli.js")}function Aa(e){let r=e.cliPath??XI();if(!JI(r))return;let t=_t(e.runId,e.workerName),{harnessRoot:n}=Yr(),o=By.join(n,"monitors",`${t}.log`),s;try{s=qI(o,"a")}catch{s=void 0}let i=e.nodeExecutable??process.execPath,a=e.pollMs??5e3,l=[r,"monitor","run-loop","--run",e.runId,"--monitor-id",t,"--poll-ms",String(a),"--auto-complete","true","--renew-leases","true"];e.workerName&&l.push("--name",e.workerName),e.agentOsId&&l.push("--agent-os-id",e.agentOsId),e.baseUrl&&l.push("--base-url",e.baseUrl),e.secret&&l.push("--secret",e.secret);let c=["ignore",s??"ignore",s??"ignore"];try{let u=YI(i,l,de({detached:!0,stdio:c,env:process.env}));s!==void 0&&Ly(s),u.unref();let d={monitorId:t,runId:e.runId,workerName:e.workerName,agentOsId:e.agentOsId,pid:u.pid,startedAt:new Date().toISOString(),pollMs:a,logPath:o};return Et(d),{monitorId:t,pid:u.pid,logPath:o,session:d}}catch{if(s!==void 0)try{Ly(s)}catch{}return}}C();async function Hy(e){let r=String(e.run||"");N(r,"--run");let t=e.name?String(e.name):void 0,n=_t(r,t),o=xt(n);if(o?.pid&&!o.stoppedAt)return{monitorId:n,session:o,spawned:!1,pid:o.pid};let s=Aa({runId:r,workerName:t,agentOsId:e.agentOsId?String(e.agentOsId):void 0,pollMs:Number(e.pollMs)>0?Math.floor(Number(e.pollMs)):void 0,baseUrl:e.baseUrl?String(e.baseUrl):void 0,secret:e.secret?String(e.secret):void 0});if(!s)throw new Error("failed to spawn monitor sidecar (cli.js missing or spawn error)");return{monitorId:n,session:s.session,spawned:!0,pid:s.pid}}async function Fy(e){if(String(e.run||"")){let t=e.tick===!0||e.tick==="true"?await Pt({...e,autoComplete:!1}):Ea(e);console.log(JSON.stringify(t,null,2));return}console.log(JSON.stringify({monitors:qo()},null,2))}function $y(e){console.log(JSON.stringify(Qu(e),null,2))}function Ky(){console.log(JSON.stringify({monitors:qo()},null,2))}async function jy(e){await Zu(e)}async function Vy(e){let r=await Pt(e);console.log(JSON.stringify(r,null,2))}M();Y();C();O();import QI from"node:path";function zo(e,r,t,n,o,s){return{runId:e,worker:r,taskId:t,agentOsId:n,leaseOwner:o,action:"skipped",reason:s}}async function ZI(e){let r=K(e.baseUrl?String(e.baseUrl):void 0),t=e.agentOsId?String(e.agentOsId).trim():null,n=e.dryRun===!0||e.dryRun==="true",o=[],s=[],i=[];for(let a of J())for(let l of Object.keys(a.workers??{})){let c=QI.join(x(a.id),"workers",b(l),"worker.json"),u=_(c,void 0);if(!u){s.push(zo(a.id,l,"","","","worker.json missing"));continue}let d=u.taskId??"",f=u.agentOsId??"",m=u.leaseOwner??"";if(!u.dispatched||!d||!f||!m){s.push(zo(a.id,l,d,f,m,"not a fully-leased dispatched worker"));continue}if(t&&f!==t)continue;if(u.completionReportedAt){s.push(zo(a.id,l,d,f,m,"completion already reported"));continue}let p=T(u);if(p.finalResult){s.push(zo(a.id,l,d,f,m,"has final result \u2014 let pipeline tick complete it"));continue}if(p.alive){s.push(zo(a.id,l,d,f,m,"worker process is still alive"));continue}if(n){o.push({runId:a.id,worker:l,taskId:d,agentOsId:f,leaseOwner:m,action:"released",reason:"dry-run: would release dead dispatched worker lease"});continue}try{let h=await G(e.secret?String(e.secret):void 0,f,{baseUrl:r}),k=`${r}/api/agent-os/by-id/${encodeURIComponent(f)}/tasks/${encodeURIComponent(d)}/release`,g=await X(k,h,{agentOsId:f,leaseOwner:m},{agentOsId:f,baseUrl:r});g.ok===!0||g.response?.ok===!0?o.push({runId:a.id,worker:l,taskId:d,agentOsId:f,leaseOwner:m,action:"released",reason:"dead dispatched worker lease released; task requeued"}):s.push({runId:a.id,worker:l,taskId:d,agentOsId:f,leaseOwner:m,action:"skipped",reason:`release returned ok:false (likely owner mismatch or already released): HTTP ${g.status}`})}catch(h){i.push({runId:a.id,worker:l,taskId:d,agentOsId:f,leaseOwner:m,action:"error",reason:h.message})}}return{dryRun:n,released:o,skipped:s,errors:i}}async function Gy(e){let r=await ZI(e),t={ok:r.errors.length===0,dryRun:r.dryRun,released:r.released.length,skipped:r.skipped.length,errors:r.errors.length,details:r};console.log(JSON.stringify(t,null,2)),r.errors.length>0&&process.exit(1)}import Zy from"node:path";ar();O();import{accessSync as eO,constants as rO,existsSync as ed,readFileSync as tO}from"node:fs";import{homedir as Ia}from"node:os";import Oa from"node:path";import{spawnSync as nO}from"node:child_process";_e();function Yy(e,r){try{let t=nO(e,r,{encoding:"utf8"}),n=(t.stdout||"").trim(),o=(t.stderr||"").trim();return{ok:t.status===0,stdout:n,stderr:o,error:t.error?.message}}catch(t){return{ok:!1,stdout:"",stderr:"",error:t.message}}}function Jy(e){let r=e?.trim();if(r)return r.length<=12?`${r}\u2026`:`${r.slice(0,12)}\u2026`}function oO(e){if(!ed(e))return!1;try{return eO(e,rO.W_OK),!0}catch{return!1}}var qy={packageVersion:()=>Tn,commandOnPath:e=>Yy(process.platform==="win32"?"where":"which",[e]),kynverVersion:e=>Yy(e,["--version"]),loadConfig:()=>v(),configFilePath:()=>Oa.join(Ia(),".kynver","config.json"),credentialsFilePath:()=>Oa.join(Ia(),".kynver","credentials"),readCredentials:()=>{let e=Oa.join(Ia(),".kynver","credentials");if(!ed(e))return{hasApiKey:!1};try{let r=JSON.parse(tO(e,"utf8"));return{hasApiKey:!!r.apiKey?.trim(),runnerTokenPrefix:Jy(r.runnerToken),runnerTokenAgentOsId:r.runnerTokenAgentOsId}}catch{return{hasApiKey:!1}}},envSnapshot:()=>({kynverApiUrl:process.env.KYNVER_API_URL?.trim()||void 0,openclawCronFireBaseUrl:process.env.OPENCLAW_CRON_FIRE_BASE_URL?.trim()||void 0,kynverRunnerTokenPrefix:Jy(process.env.KYNVER_RUNNER_TOKEN),kynverRuntimeSecret:!!process.env.KYNVER_RUNTIME_SECRET?.trim(),openclawCronSecret:!!process.env.OPENCLAW_CRON_SECRET?.trim(),kynverHarnessRoot:process.env.KYNVER_HARNESS_ROOT?.trim()||void 0,opusHarnessRoot:process.env.OPUS_HARNESS_ROOT?.trim()||void 0,kynverSchedulerProvider:process.env.KYNVER_SCHEDULER_PROVIDER?.trim()||void 0,openclawCronStorePath:!!(process.env.KYNVER_CRON_STORE_PATH?.trim()||process.env.OPENCLAW_CRON_STORE_PATH?.trim()),kynverCronDaemonPrimary:Zi(),qstashTokenPresent:!!process.env.QSTASH_TOKEN?.trim(),kynverHostedDeployment:(()=>{let e=process.env.KYNVER_HOSTED_DEPLOYMENT?.trim().toLowerCase();return e==="1"||e==="true"||e==="yes"})()}),harnessRoot:()=>fe(),legacyOpenclawHarnessRoot:()=>Oa.join(Ia(),".openclaw","harness"),pathExists:e=>ed(e),pathWritable:e=>oO(e)};function zy(e,r){return e.kynverSchedulerProvider==="openclaw-cron"||r.deploymentSchedulerProvider==="openclaw-cron"}function sO(e,r){return e.kynverSchedulerProvider==="kynver-cron"||r.deploymentSchedulerProvider==="kynver-cron"}function Xy(e){return!!e.openclawCronStorePath}function iO(e,r){return e.kynverSchedulerProvider==="qstash"||r.deploymentSchedulerProvider==="qstash"}function Qy(e,r){let t={schedulerProvider:e.kynverSchedulerProvider??null,deploymentSchedulerProvider:r.deploymentSchedulerProvider??null,openclawCronStorePath:!!e.openclawCronStorePath,kynverCronDaemonPrimary:!!e.kynverCronDaemonPrimary},n=!!r.agentOsId?.trim()&&!!r.apiBaseUrl?.trim()&&r.hasScopedRunnerToken;if(iO(e,r)&&!zy(e,r)){let u=e.kynverSchedulerProvider==="qstash"?"KYNVER_SCHEDULER_PROVIDER=qstash on this host":"deploymentSchedulerProvider=qstash in ~/.kynver/config.json";return{id:"hotspot_openclaw_scheduler",label:"Scheduler provider (runtime daemon vs OpenClaw cron)",status:"pass",summary:`AgentOS scheduler cut over to QStash (${u})`,details:t}}if(sO(e,r)&&!zy(e,r)){if(Xy(e)&&e.kynverCronDaemonPrimary&&n)return{id:"hotspot_openclaw_scheduler",label:"Scheduler provider (runtime daemon vs OpenClaw cron)",status:"pass",summary:"Kynver Cron local store present; `kynver daemon` owns schedule fires (kynver-cron tick loop)",details:{...t,dispatchPath:"kynver-daemon-cron-tick",kynverCronDaemonPrimary:!0}};let u=e.kynverSchedulerProvider==="kynver-cron"?"KYNVER_SCHEDULER_PROVIDER=kynver-cron on this host":"deploymentSchedulerProvider=kynver-cron in ~/.kynver/config.json";return{id:"hotspot_openclaw_scheduler",label:"Scheduler provider (runtime daemon vs OpenClaw cron)",status:"pass",summary:`AgentOS scheduler owned by Kynver Cron (${u})`,details:t}}if(Xy(e)){if(e.kynverCronDaemonPrimary&&n)return{id:"hotspot_openclaw_scheduler",label:"Scheduler provider (runtime daemon vs OpenClaw cron)",status:"pass",summary:"Kynver Cron local store present; `kynver daemon` owns schedule fires (kynver-cron tick loop)",details:{...t,dispatchPath:"kynver-daemon-cron-tick",kynverCronDaemonPrimary:!0}};let u=[];return e.openclawCronStorePath&&u.push("KYNVER_CRON_STORE_PATH or OPENCLAW_CRON_STORE_PATH set (local cron store)"),{id:"hotspot_openclaw_scheduler",label:"Scheduler provider (runtime daemon vs OpenClaw cron)",status:"warn",summary:`Local cron store without daemon tick (${u.join("; ")})`,remediation:"Run `kynver daemon` with KYNVER_CRON_SECRET + KYNVER_API_URL (or KYNVER_CRON_FIRE_BASE_URL) so the daemon-owned cron tick fires schedules. On hosted deploys use QStash (KYNVER_SCHEDULER_PROVIDER=qstash). Legacy OpenClaw cron env aliases still work during cutover.",details:t}}let o=e.kynverSchedulerProvider==="openclaw-cron",s=r.deploymentSchedulerProvider==="openclaw-cron",i=e.kynverSchedulerProvider==="qstash",a=!!e.qstashTokenPresent||!!e.kynverHostedDeployment,l=a&&!n,c=l&&e.kynverSchedulerProvider==="openclaw-cron";return s&&!o?{id:"hotspot_openclaw_scheduler",label:"Scheduler provider (runtime daemon vs OpenClaw cron)",status:"warn",summary:"deploymentSchedulerProvider=openclaw-cron in ~/.kynver/config.json \u2014 migrate to kynver-cron or qstash",remediation:'Run `kynver scheduler attest-cutover` or set deploymentSchedulerProvider to "kynver-cron" or "qstash" in ~/.kynver/config.json.',details:t}:n&&o?{id:"hotspot_openclaw_scheduler",label:"Scheduler provider (runtime daemon vs OpenClaw cron)",status:"warn",summary:"KYNVER_SCHEDULER_PROVIDER=openclaw-cron on this runner \u2014 dispatch is owned by kynver daemon; unset the OpenClaw override",remediation:"Unset KYNVER_SCHEDULER_PROVIDER on user runners (or set kynver-cron). Use `kynver daemon` (pipeline-tick \u2192 operator/tick). On the Kynver server set KYNVER_SCHEDULER_PROVIDER=qstash when QStash is configured.",details:{schedulerProvider:e.kynverSchedulerProvider??null,dispatchPath:"kynver-daemon-pipeline-tick",hostedDeployment:a}}:n?{id:"hotspot_openclaw_scheduler",label:"Scheduler provider (runtime daemon vs OpenClaw cron)",status:"pass",summary:i?"Runner override qstash present; hosted dispatch still owned by kynver daemon pipeline-tick":"Hosted dispatch owned by kynver daemon (pipeline-tick \u2192 operator/tick); no OpenClaw cron on runner",details:{schedulerProvider:e.kynverSchedulerProvider??null,dispatchPath:"kynver-daemon-pipeline-tick",hostedDeployment:a}}:o?{id:"hotspot_openclaw_scheduler",label:"Scheduler provider (runtime daemon vs OpenClaw cron)",status:"warn",summary:"KYNVER_SCHEDULER_PROVIDER=openclaw-cron on this runner \u2014 hosted dispatch still depends on the OpenClaw local-cron adapter",remediation:"Unset KYNVER_SCHEDULER_PROVIDER on user runners (or set kynver-cron). Use `kynver daemon` (pipeline-tick \u2192 operator/tick). On the Kynver server set KYNVER_SCHEDULER_PROVIDER=qstash when QStash is configured.",details:{schedulerProvider:e.kynverSchedulerProvider??null,hostedDeployment:a}}:c?{id:"hotspot_openclaw_scheduler",label:"Scheduler provider (runtime daemon vs OpenClaw cron)",status:"warn",summary:"Hosted deployment has KYNVER_SCHEDULER_PROVIDER=openclaw-cron \u2014 AgentOS scheduled ticks should use QStash or kynver-cron",remediation:"Set QSTASH_TOKEN and KYNVER_SCHEDULER_PROVIDER=qstash on the Kynver server (or kynver-cron for Kynver-owned local scheduling). User runners use `kynver daemon` for dispatch and should not set a scheduler provider.",details:{schedulerProvider:e.kynverSchedulerProvider??null,qstashTokenPresent:e.qstashTokenPresent??!1,hostedDeployment:a}}:l&&e.qstashTokenPresent&&!e.kynverSchedulerProvider?{id:"hotspot_openclaw_scheduler",label:"Scheduler provider (runtime daemon vs OpenClaw cron)",status:"pass",summary:"QSTASH_TOKEN present; hosted scheduler auto-selects qstash (explicit KYNVER_SCHEDULER_PROVIDER=qstash optional)",details:{schedulerProvider:null,qstashTokenPresent:!0,hostedDeployment:a}}:l&&!e.qstashTokenPresent&&!e.kynverSchedulerProvider?{id:"hotspot_openclaw_scheduler",label:"Scheduler provider (runtime daemon vs OpenClaw cron)",status:"warn",summary:"Hosted deployment with no QSTASH_TOKEN and no KYNVER_SCHEDULER_PROVIDER \u2014 kynver-cron is an in-process stub here and will NOT fire; no firing scheduler is configured",remediation:"Set QSTASH_TOKEN + KYNVER_SCHEDULER_PROVIDER=qstash on the Kynver server for hosted AgentOS schedules. Only use kynver-cron when a `kynver daemon` (or local cron store) actually owns firing on this box.",details:{schedulerProvider:null,resolvedFallback:"none",qstashTokenPresent:!1,hostedDeployment:a}}:l&&!e.qstashTokenPresent&&e.kynverSchedulerProvider&&e.kynverSchedulerProvider!=="qstash"&&e.kynverSchedulerProvider!=="kynver-cron"?{id:"hotspot_openclaw_scheduler",label:"Scheduler provider (runtime daemon vs OpenClaw cron)",status:"warn",summary:`Hosted deployment without QSTASH_TOKEN (KYNVER_SCHEDULER_PROVIDER=${e.kynverSchedulerProvider}) \u2014 use qstash or kynver-cron`,remediation:"Set QSTASH_TOKEN and KYNVER_SCHEDULER_PROVIDER=qstash on the Kynver server, or kynver-cron for Kynver-owned local scheduling. User runners use `kynver daemon` for dispatch.",details:{schedulerProvider:e.kynverSchedulerProvider??null,qstashTokenPresent:e.qstashTokenPresent??!1,hostedDeployment:a}}:e.kynverSchedulerProvider?{id:"hotspot_openclaw_scheduler",label:"Scheduler provider (runtime daemon vs OpenClaw cron)",status:"pass",summary:`KYNVER_SCHEDULER_PROVIDER=${e.kynverSchedulerProvider}`,details:{schedulerProvider:e.kynverSchedulerProvider??null}}:{id:"hotspot_openclaw_scheduler",label:"Scheduler provider (runtime daemon vs OpenClaw cron)",status:"pass",summary:"No KYNVER_SCHEDULER_PROVIDER on runner (expected) \u2014 finish runner setup so daemon pipeline-tick owns dispatch",details:{schedulerProvider:null,dispatchPath:"kynver-daemon-pipeline-tick-pending"}}}function aO(e){let r={pass:0,warn:0,fail:0};for(let t of e)for(let n of t.checks)r[n.status]+=1;return r}function lO(e){let r=e.packageVersion(),t=e.commandOnPath("kynver"),n=t.ok&&t.stdout.length>0,o=n?t.stdout.split(/\r?\n/)[0]?.trim():void 0,s=o?q(o):void 0,i=[{id:"cli_running_version",label:"Running @kynver-app/runtime version",status:"pass",summary:`@kynver-app/runtime ${r}`,details:{version:r}},{id:"cli_on_path",label:"kynver executable on PATH",status:n?"pass":"warn",summary:n?`Found ${s}`:"kynver not found on PATH (invoked via node/npx?)",remediation:n?void 0:"Install globally (`npm i -g @kynver-app/runtime`) or invoke via `npx @kynver-app/runtime`.",details:{path:s}}];if(n&&o){let a=e.kynverVersion(o),l=a.stdout.replace(/^kynver\s+/i,"").trim()||void 0,c=a.ok&&(!l||l===r);i.push({id:"cli_installed_version",label:"Installed kynver CLI version matches running package",status:c?"pass":"warn",summary:a.ok&&l?c?`Installed ${l}`:`Installed ${l} differs from running ${r}`:a.error?`Could not read installed version (${a.error})`:a.stderr||"Could not read installed version",remediation:c?void 0:"Reinstall or rebuild @kynver-app/runtime so PATH kynver matches the harness worktree version.",details:{installedVersion:l,runningVersion:r,path:s}})}return{id:"cli_package",label:"CLI / package",checks:i}}function cO(e){let r=e.configFilePath(),t=q(r),n=e.pathExists(r),o=e.loadConfig(),s=[{id:"config_file",label:"~/.kynver/config.json present",status:n?"pass":"fail",summary:n?`Found ${t}`:`Missing ${t}`,remediation:n?void 0:"Run `kynver setup --api-base-url <url> --agent-os-id <id> --repo <path>`.",details:{configPath:t}}];if(n){let i=o.apiBaseUrl?.trim(),a=o.agentOsId?.trim(),l=Ke({config:o}),c=l?cn(l):null,u=Wh(l);s.push({id:"config_api_base_url",label:"Default API base URL",status:i?"pass":"warn",summary:i??"Not set in config (KYNVER_API_URL / --base-url required per command)",remediation:i?void 0:"Set `apiBaseUrl` via `kynver setup --api-base-url https://\u2026`.",details:{apiBaseUrl:i??null}},{id:"config_agent_os_id",label:"Default AgentOS id",status:a?"pass":"warn",summary:a??"Not set (pass --agent-os-id on daemon/dispatch/worker commands)",remediation:a?void 0:"Set `agentOsId` via `kynver setup --agent-os-id <uuid>`.",details:{agentOsId:a??null,agentOsSlug:o.agentOsSlug??null}},{id:"config_default_repo",label:"Default repo path",status:u.status,summary:l?l.persistedInConfig?`${c.defaultRepo} (config)`:`${c.defaultRepo} (${l.source}, not persisted in ~/.kynver/config.json)`:"Not set in ~/.kynver/config.json (`kynver run create` requires --repo)",remediation:u.remediation,details:{defaultRepo:c?.defaultRepo??null,source:c?.source??null,persistedInConfig:c?.persistedInConfig??!1,harnessRoot:o.harnessRoot?we(o.harnessRoot):null}})}return{id:"user_config",label:"User config (~/.kynver)",checks:s}}function uO(e){let t=e.loadConfig().agentOsId?.trim(),n=e.readCredentials(),o=e.envSnapshot(),s=e.credentialsFilePath(),i=q(s),a=o.kynverRunnerTokenPrefix,l=n.runnerTokenPrefix,c=n.runnerTokenAgentOsId,u=!!l&&(!t||!c||c===t),d=!!a?.startsWith("krc1.")||u&&l?.startsWith("krc1.");return{id:"runner_token",label:"Runner token readiness",checks:[{id:"runner_token_scoped",label:"Scoped runner token (krc1.*) ready",status:d?"pass":"fail",summary:d?a?"KYNVER_RUNNER_TOKEN is set (scoped prefix shown)":`Saved scoped token for agentOsId ${c??t??"(unknown)"}`:"No scoped runner token for the configured AgentOS workspace",remediation:d?void 0:"Run `kynver login` then `kynver runner credential --agent-os-id <id>` (or `kynver setup` with API key).",details:{source:a?"env":l?"credentials":"none",tokenPrefix:a??(u?l:void 0),agentOsId:t??c??null,credentialsPath:i}},{id:"runner_token_agent_os_match",label:"Saved runner token matches configured agentOsId",status:!l||!t||!c||c===t?"pass":"warn",summary:!l||!c?"No saved token agentOsId to compare":t?c===t?"Saved token scoped to configured agentOsId":`Saved token is for ${c}, config expects ${t}`:"Config agentOsId unset \u2014 token scope not validated against config",remediation:l&&t&&c&&c!==t?"`kynver runner credential --agent-os-id <configured-id>` to mint a workspace-bound token.":void 0,details:{configuredAgentOsId:t??null,savedAgentOsId:c??null}},{id:"runner_api_key_for_refresh",label:"API key available for token refresh",status:n.hasApiKey||process.env.KYNVER_API_KEY?.trim()?"pass":"warn",summary:n.hasApiKey||process.env.KYNVER_API_KEY?"KYNVER API key present for runner credential mint/refresh":"No API key \u2014 401 callback recovery cannot auto-mint a replacement token",remediation:n.hasApiKey||process.env.KYNVER_API_KEY?void 0:"Run `kynver login --api-key \u2026`.",details:{credentialsPath:i,hasApiKey:n.hasApiKey||!!process.env.KYNVER_API_KEY}}]}}function dO(e){let r=e.commandOnPath("vercel"),t=r.ok,n=!!(process.env.GITHUB_TOKEN?.trim()||process.env.GH_TOKEN?.trim()),o=!!process.env.VERCEL_TOKEN?.trim();return{id:"vercel_deploy_evidence",label:"Vercel deploy evidence",checks:[{id:"vercel_global_cli_absent",label:"Global Vercel CLI not installed",status:t?"warn":"pass",summary:t?`Global Vercel CLI found (${r.stdout||"on PATH"}) \u2014 uninstall after operator approval`:"No global Vercel CLI on PATH",remediation:t?"Uninstall global Vercel CLI (`npm uninstall -g vercel`) \u2014 use GitHub commit status or scoped VERCEL_TOKEN + REST API instead.":void 0,details:{path:t&&r.stdout||null}},{id:"github_token_for_vercel_status",label:"GitHub token for Vercel status",status:n?"pass":"warn",summary:n?"GITHUB_TOKEN/GH_TOKEN present for GitHub Vercel StatusContext evidence":"No GITHUB_TOKEN \u2014 merge-gate Vercel evidence requires GitHub commit status API",remediation:n?void 0:"Export GITHUB_TOKEN (or GH_TOKEN) for PR head commit status lookups."},{id:"vercel_api_token_optional",label:"Vercel API token (optional fallback)",status:o?"pass":"warn",summary:o?"VERCEL_TOKEN configured for optional REST API deployment lookup":"VERCEL_TOKEN unset \u2014 GitHub status is the default path; API fallback disabled",remediation:o?void 0:"Set ephemeral/scoped VERCEL_TOKEN only when GitHub status is insufficient; avoid persistent ~/.vercel auth on runner hosts."}]}}function pO(e){let r=e.harnessRoot(),t=Zy.join(r,"runs"),n=Zy.join(r,"worktrees"),o=we(r),s=we(t),i=we(n),a=e.pathExists(t),l=e.pathExists(n);return{id:"harness_dirs",label:"Harness / daemon directories",checks:[{id:"harness_root",label:"Harness root resolved",status:"pass",summary:o,details:{harnessRoot:o}},{id:"harness_runs_dir",label:"Runs directory ready",status:a&&e.pathWritable(t)?"pass":"warn",summary:a?e.pathWritable(t)?`Writable ${s}`:`Exists but not writable: ${s}`:`Will be created on first run: ${s}`,remediation:a&&!e.pathWritable(t)?`Fix permissions on ${s} or set KYNVER_HARNESS_ROOT to a writable path.`:void 0,details:{runsDir:s,exists:a,writable:e.pathWritable(t)}},{id:"harness_worktrees_dir",label:"Worktrees directory ready",status:l&&e.pathWritable(n)?"pass":"warn",summary:l?e.pathWritable(n)?`Writable ${i}`:`Exists but not writable: ${i}`:`Will be created on first worker: ${i}`,remediation:l&&!e.pathWritable(n)?`Fix permissions on ${i}.`:void 0,details:{worktreesDir:i,exists:l,writable:e.pathWritable(n)}}]}}function mO(e){let r=e.loadConfig(),t=e.envSnapshot(),n=t.kynverApiUrl??r.apiBaseUrl?.trim()??t.openclawCronFireBaseUrl,o=!t.kynverApiUrl&&!r.apiBaseUrl&&!!t.openclawCronFireBaseUrl,s=t.openclawCronSecret||t.kynverRuntimeSecret,i=t.kynverRunnerTokenPrefix?.startsWith("krc1."),l=e.readCredentials().runnerTokenPrefix?.startsWith("krc1.");return{id:"callback_auth",label:"Callback auth / config",checks:[{id:"callback_base_url",label:"Callback base URL configured",status:n?o?"warn":"pass":"fail",summary:n?o?`Using legacy OPENCLAW_CRON_FIRE_BASE_URL (${n})`:n:"No KYNVER_API_URL, config apiBaseUrl, or legacy OpenClaw base URL",remediation:n?o?"Migrate to KYNVER_API_URL or `kynver setup --api-base-url` and drop OPENCLAW_CRON_FIRE_BASE_URL.":void 0:"Set KYNVER_API_URL or run `kynver setup --api-base-url https://\u2026`.",details:{source:t.kynverApiUrl?"KYNVER_API_URL":r.apiBaseUrl?"config.apiBaseUrl":t.openclawCronFireBaseUrl?"OPENCLAW_CRON_FIRE_BASE_URL":"none",baseUrl:n??null}},{id:"callback_auth_mode",label:"Callback auth uses scoped runner token",status:i||l?"pass":s?"warn":"fail",summary:i?"KYNVER_RUNNER_TOKEN scoped token will be sent as X-Kynver-Runner-Token":l?"Saved krc1.* token in ~/.kynver/credentials":s?"Deployment-level KYNVER_RUNTIME_SECRET / OPENCLAW_CRON_SECRET in use (legacy headers)":"No callback secret configured",remediation:i||l?void 0:"Mint a scoped token: `kynver runner credential --agent-os-id <id>`. Avoid shared OPENCLAW_CRON_SECRET on user runners.",details:{mode:i||l?"scoped":s?"legacy_global_secret":"missing",legacyHeadersWhenNotScoped:["X-OpenClaw-Cron-Secret","X-Kynver-Runtime-Secret"]}}]}}function fO(e){let r=e.envSnapshot(),t=e.loadConfig(),n=e.readCredentials(),o=e.harnessRoot(),s=e.legacyOpenclawHarnessRoot(),i=we(o),a=we(s),l=r.opusHarnessRoot?we(r.opusHarnessRoot):null,c=o===s&&e.pathExists(s),u=t.agentOsId?.trim(),d=r.kynverRunnerTokenPrefix,f=n.runnerTokenPrefix,m=n.runnerTokenAgentOsId,p=!!f&&(!u||!m||m===u),h=!!d?.startsWith("krc1.")||p&&!!f?.startsWith("krc1.");return{id:"openclaw_hotspots",label:"OpenClaw dependency hotspots",checks:[{id:"hotspot_legacy_harness_root",label:"Legacy ~/.openclaw/harness still active",status:c?"warn":"pass",summary:c?`Harness root is legacy ${a}`:r.opusHarnessRoot?`OPUS_HARNESS_ROOT override in use (${l})`:`Using ${i}`,remediation:c?"Set KYNVER_HARNESS_ROOT=~/.kynver/harness (or run setup), migrate artifacts, retire OPUS_HARNESS_ROOT.":r.opusHarnessRoot?"Prefer KYNVER_HARNESS_ROOT over OPUS_HARNESS_ROOT.":void 0,details:{harnessRoot:i,legacyRoot:a,opusHarnessRoot:l}},{id:"hotspot_openclaw_env_secrets",label:"OpenClaw deployment secrets in runner env",status:r.openclawCronSecret||r.openclawCronFireBaseUrl?"warn":"pass",summary:r.openclawCronSecret||r.openclawCronFireBaseUrl?[r.openclawCronSecret?"OPENCLAW_CRON_SECRET set":null,r.openclawCronFireBaseUrl?"OPENCLAW_CRON_FIRE_BASE_URL set":null].filter(Boolean).join("; "):"No OpenClaw cron env overrides on this runner",remediation:r.openclawCronSecret||r.openclawCronFireBaseUrl?"Move to KYNVER_API_URL + scoped runner tokens; unset OpenClaw cron env on user-hosted runners.":void 0},Qy(r,{agentOsId:u??null,apiBaseUrl:t.apiBaseUrl?.trim()??r.kynverApiUrl??null,hasScopedRunnerToken:h,deploymentSchedulerProvider:t.deploymentSchedulerProvider==="qstash"||t.deploymentSchedulerProvider==="kynver-cron"||t.deploymentSchedulerProvider==="openclaw-cron"?t.deploymentSchedulerProvider:void 0}),{id:"hotspot_lease_source_names",label:"Harness lease/completion source names",status:"pass",summary:"Runtime uses kynver-harness:* lease owners and completion source kynver-harness (OpenClaw names retired in runtime)",details:{leaseOwnerPattern:"kynver-harness:<runId>",completionSource:"kynver-harness",note:"OpenClaw adapter remains optional in packages/kynver-openclaw-agent-os only"}}]}}function eR(e=qy){let r=[lO(e),cO(e),uO(e),dO(e),pO(e),mO(e),fO(e)],t=aO(r),n=t.fail===0,o=n?t.warn>0?`Ready with ${t.warn} warning(s) \u2014 review remediation before retiring OpenClaw as primary runtime agent.`:"Ready \u2014 Kynver runtime can serve as primary runtime agent on this host.":`${t.fail} blocking check(s) \u2014 fix failures before OpenClaw takeover.`;return{command:"doctor runtime-takeover",ready:n,summary:o,counts:t,sections:r}}function rR(e={}){let r;if(e.remediateDefaultRepo===!0){let n=Do();if(!n.ok){console.error(n.reason??"defaultRepo remediation failed"),n.remediation&&console.error(n.remediation),process.exitCode=1;return}n.remediated?r=`Remediated defaultRepo \u2192 ${n.resolved?.defaultRepo??"unknown"}`:r=`defaultRepo already persisted (${n.resolved?.defaultRepo??"unknown"})`}let t=eR();r&&(t.notes=[...t.notes??[],r]),console.log(JSON.stringify(t,null,2)),t.ready||(process.exitCode=1)}O();async function tR(e){let r=v(),t=(e.agentOsId?String(e.agentOsId):r.agentOsId)||"";t||(console.error("requires --agent-os-id or agentOsId in ~/.kynver/config.json"),process.exit(1));let n=K(e.baseUrl?String(e.baseUrl):r.apiBaseUrl),o=await G(e.secret?String(e.secret):void 0,t,{baseUrl:n}),s=new URLSearchParams;if(typeof e.since=="string"&&e.since.trim()&&s.set("since",e.since.trim()),e.limit!=null&&String(e.limit).trim()){let c=Number(e.limit);Number.isFinite(c)&&c>0&&s.set("limit",String(Math.floor(c)))}let i=s.toString()?`?${s.toString()}`:"",a=`${n}/api/agent-os/by-id/${encodeURIComponent(t)}/command-center/dashboard-contract${i}`,l=await Ns(a,o);l.ok||(console.error(`dashboard-contract GET failed: HTTP ${l.status}`),l.response&&console.error(JSON.stringify(l.response,null,2)),process.exit(1)),console.log(JSON.stringify(l.response,null,2))}ar();var rd=["Vercel/hosted: set KYNVER_SCHEDULER_PROVIDER=qstash","Vercel/hosted: ensure QSTASH_TOKEN (and QStash signing keys) are configured","Vercel/hosted: unset OPENCLAW_CRON_STORE_PATH if present"],td=["User runner: unset KYNVER_SCHEDULER_PROVIDER (scheduling is deployment-owned)","User runner: unset OPENCLAW_CRON_STORE_PATH, OPENCLAW_CRON_SECRET, OPENCLAW_CRON_FIRE_BASE_URL",'User runner: after deployment cutover, run `kynver scheduler attest-cutover` (or set deploymentSchedulerProvider to "qstash" in ~/.kynver/config.json)',"Verify: kynver doctor runtime-takeover \u2014 hotspot_openclaw_scheduler should pass"];function gO(e=process.env){return{kynverSchedulerProvider:e.KYNVER_SCHEDULER_PROVIDER?.trim()||null,kynverCronStorePath:e.KYNVER_CRON_STORE_PATH?.trim()||e.OPENCLAW_CRON_STORE_PATH?.trim()||null,kynverCronSecret:!!(e.KYNVER_CRON_SECRET?.trim()||e.OPENCLAW_CRON_SECRET?.trim()),kynverCronFireBaseUrl:e.KYNVER_CRON_FIRE_BASE_URL?.trim()||e.OPENCLAW_CRON_FIRE_BASE_URL?.trim()||null,openclawCronStorePath:e.OPENCLAW_CRON_STORE_PATH?.trim()||null,openclawCronSecret:!!e.OPENCLAW_CRON_SECRET?.trim(),openclawCronFireBaseUrl:e.OPENCLAW_CRON_FIRE_BASE_URL?.trim()||null}}function nd(e,r=gO()){let t=[];return r.kynverSchedulerProvider==="openclaw-cron"&&t.push("Runner still has KYNVER_SCHEDULER_PROVIDER=openclaw-cron"),r.kynverCronStorePath&&r.kynverSchedulerProvider!=="kynver-cron"&&t.push("Runner has KYNVER_CRON_STORE_PATH but KYNVER_SCHEDULER_PROVIDER is not kynver-cron \u2014 use `kynver daemon` cron tick or unset the store for QStash-only runners"),r.openclawCronStorePath&&!r.kynverCronStorePath&&t.push("Runner still has legacy OPENCLAW_CRON_STORE_PATH (prefer KYNVER_CRON_STORE_PATH)"),e.deploymentSchedulerProvider==="openclaw-cron"&&t.push("~/.kynver/config.json deploymentSchedulerProvider is still openclaw-cron"),{ok:t.length===0,blockers:t,runnerEnv:r,deploymentSchedulerProvider:e.deploymentSchedulerProvider??null,deploymentSteps:[...rd],runnerSteps:[...td]}}function nR(e){return{...e,deploymentSchedulerProvider:"qstash"}}O();import hO from"node:path";import{homedir as kO}from"node:os";var oR=hO.join(kO(),".kynver","config.json");function sR(e=!1){let r=v(),t=nd(r),n={...t,configPath:q(oR),configAttestationExample:{deploymentSchedulerProvider:"qstash"}};if(e){console.log(JSON.stringify(n,null,2)),t.ok||(process.exitCode=1);return}console.log(`AgentOS scheduler provider cutover checklist
+`),console.log("Deployment (Vercel):");for(let o of rd)console.log(`  - ${o}`);console.log(`
+User runner:`);for(let o of td)console.log(`  - ${o}`);if(console.log(`
 This host:`),console.log(`  config: ${n.configPath}`),console.log(`  deploymentSchedulerProvider: ${t.deploymentSchedulerProvider??"(unset)"}`),console.log(`  KYNVER_SCHEDULER_PROVIDER: ${t.runnerEnv.kynverSchedulerProvider??"(unset)"}`),console.log(`  KYNVER_CRON_STORE_PATH: ${t.runnerEnv.kynverCronStorePath??"(unset)"}`),console.log(`  OPENCLAW_CRON_STORE_PATH (legacy): ${t.runnerEnv.openclawCronStorePath??"(unset)"}`),t.blockers.length){console.log(`
 Blockers:`);for(let o of t.blockers)console.log(`  ! ${o}`);process.exitCode=1;return}console.log(`
-No local blockers detected on this runner.`)}function dy(e=!1){let r=v(),t=Au(r);if(!t.ok){let s={ok:!1,attested:!1,blockers:t.blockers,remediation:"Clear local OpenClaw scheduler blockers before attesting qstash cutover."};if(e)console.log(JSON.stringify(s,null,2));else{console.error("Cannot attest scheduler cutover \u2014 local blockers remain:");for(let i of t.blockers)console.error(`  ! ${i}`)}process.exitCode=1;return}let n=ly(r);Ve(n);let o={ok:!0,attested:!0,configPath:Y(cy),deploymentSchedulerProvider:"qstash",config:Mt(n),note:"Recorded deploymentSchedulerProvider=qstash in ~/.kynver/config.json. Confirm Vercel has KYNVER_SCHEDULER_PROVIDER=qstash and QSTASH_TOKEN before relying on hosted schedules."};if(e){console.log(JSON.stringify(o,null,2));return}console.log(o.note),console.log(`  config: ${o.configPath}`)}async function py(e){let r=await Di();if(e){console.log(JSON.stringify(r,null,2));return}console.log(`Kynver Cron primary: ${r.primary}`),console.log(`  store: ${r.env.storePath} (${r.jobCount} jobs)`),console.log(`  tick state: ${r.env.statePath} (${r.stateJobCount} tracked)`),console.log(`  tick enabled: ${r.env.tickEnabled}`),console.log(`  fire base URL: ${r.env.fireBaseUrl??"(unset)"}`),console.log(`  credentials ready: ${r.credentialsReady}`),console.log(`  daemon-owned primary: ${r.daemonPrimary}`)}async function my(e){let r=typeof e.agentOsId=="string"?e.agentOsId:void 0,t=await en({agentOsIdFilter:r??null});if(e.json===!0){console.log(JSON.stringify(t,null,2));return}console.log(JSON.stringify({event:"kynver_cron_tick",...t}))}O();function nI(e,r){if(e===void 0)return r;if(e===!0)return!0;if(e===!1)return!1;let t=String(e).trim().toLowerCase();return t==="0"||t==="false"||t==="no"||t==="off"?!1:t==="1"||t==="true"||t==="yes"||t==="on"?!0:r}async function fy(e){let r=e.dryRun===!0||e["dry-run"]===!0,t=await Wi({execute:r?!1:nI(e.execute,!0),json:e.json===!0,installSystemd:e.installSystemd===!0||e["install-systemd"]===!0,confirmQstashRemoval:e.confirmQstashRemoval===!0||e["confirm-qstash-removal"]===!0,skipWatchdog:e.skipWatchdog===!0||e["skip-watchdog"]===!0,skipTestFire:e.skipTestFire===!0||e["skip-test-fire"]===!0,agentOsId:typeof e.agentOsId=="string"?e.agentOsId:void 0,apiBaseUrl:typeof e.apiBaseUrl=="string"?e.apiBaseUrl:void 0,runId:typeof e.run=="string"?e.run:void 0});if(e.json===!0){console.log(JSON.stringify(t,null,2)),t.ok||(process.exitCode=1);return}if(console.log(t.dryRun?`Kynver Cron install (dry-run)
+No local blockers detected on this runner.`)}function iR(e=!1){let r=v(),t=nd(r);if(!t.ok){let s={ok:!1,attested:!1,blockers:t.blockers,remediation:"Clear local OpenClaw scheduler blockers before attesting qstash cutover."};if(e)console.log(JSON.stringify(s,null,2));else{console.error("Cannot attest scheduler cutover \u2014 local blockers remain:");for(let i of t.blockers)console.error(`  ! ${i}`)}process.exitCode=1;return}let n=nR(r);Ye(n);let o={ok:!0,attested:!0,configPath:q(oR),deploymentSchedulerProvider:"qstash",config:qt(n),note:"Recorded deploymentSchedulerProvider=qstash in ~/.kynver/config.json. Confirm Vercel has KYNVER_SCHEDULER_PROVIDER=qstash and QSTASH_TOKEN before relying on hosted schedules."};if(e){console.log(JSON.stringify(o,null,2));return}console.log(o.note),console.log(`  config: ${o.configPath}`)}async function aR(e){let r=await ia();if(e){console.log(JSON.stringify(r,null,2));return}console.log(`Kynver Cron primary: ${r.primary}`),console.log(`  store: ${r.env.storePath} (${r.jobCount} jobs)`),console.log(`  tick state: ${r.env.statePath} (${r.stateJobCount} tracked)`),console.log(`  tick enabled: ${r.env.tickEnabled}`),console.log(`  fire base URL: ${r.env.fireBaseUrl??"(unset)"}`),console.log(`  credentials ready: ${r.credentialsReady}`),console.log(`  daemon-owned primary: ${r.daemonPrimary}`)}async function lR(e){let r=typeof e.agentOsId=="string"?e.agentOsId:void 0,t=await kn({agentOsIdFilter:r??null});if(e.json===!0){console.log(JSON.stringify(t,null,2));return}console.log(JSON.stringify({event:"kynver_cron_tick",...t}))}O();function yO(e,r){if(e===void 0)return r;if(e===!0)return!0;if(e===!1)return!1;let t=String(e).trim().toLowerCase();return t==="0"||t==="false"||t==="no"||t==="off"?!1:t==="1"||t==="true"||t==="yes"||t==="on"?!0:r}async function cR(e){let r=e.dryRun===!0||e["dry-run"]===!0,t=await da({execute:r?!1:yO(e.execute,!0),json:e.json===!0,installSystemd:e.installSystemd===!0||e["install-systemd"]===!0,confirmQstashRemoval:e.confirmQstashRemoval===!0||e["confirm-qstash-removal"]===!0,skipWatchdog:e.skipWatchdog===!0||e["skip-watchdog"]===!0,skipTestFire:e.skipTestFire===!0||e["skip-test-fire"]===!0,agentOsId:typeof e.agentOsId=="string"?e.agentOsId:void 0,apiBaseUrl:typeof e.apiBaseUrl=="string"?e.apiBaseUrl:void 0,runId:typeof e.run=="string"?e.run:void 0});if(e.json===!0){console.log(JSON.stringify(t,null,2)),t.ok||(process.exitCode=1);return}if(console.log(t.dryRun?`Kynver Cron install (dry-run)
 `:`Kynver Cron install
 `),console.log(`  config: ${t.configPath}`),console.log(`  env file: ${t.plan.envFilePath}`),console.log(`  store: ${t.plan.storePath}`),t.secretGenerated&&console.log("  generated new KYNVER_CRON_SECRET"),t.envFile&&console.log(`  env merge: ${t.envFile.changed?"updated":"unchanged"} (${t.envFile.keysWritten.join(", ")||"no key changes"})`),t.watchdog?.remoteJobId?console.log(`  watchdog: job ${t.watchdog.remoteJobId} provider=${t.watchdog.provider} local=${t.watchdog.localProviderScheduleId}`):t.watchdog?.error&&console.log(`  watchdog: ERROR ${t.watchdog.error}`),t.qstashWatchdog?.found.length){console.log(`  qstash watchdog leftovers: ${t.qstashWatchdog.found.length}`);for(let n of t.qstashWatchdog.found)console.log(`    - ${n.id} (${n.status})`);t.qstashWatchdog.removed.length&&console.log(`  removed: ${t.qstashWatchdog.removed.join(", ")}`)}t.systemd&&console.log(`  systemd: ${t.systemd.note??(t.systemd.started?"running":"not started")}`),t.testFire&&!t.testFire.skipped&&console.log(`  test fire: fired=${t.testFire.fired} errors=${t.testFire.errors}`),console.log(`
 Hosted deployment (manual):`);for(let n of t.plan.deploymentSteps)console.log(`  - ${n}`);if(t.blockers.length){console.log(`
-Blockers:`);for(let n of t.blockers)console.log(`  ! ${n}`);process.exitCode=1;return}console.log("\nInstall complete \u2014 run `kynver cron verify` to re-check.")}async function gy(e){let r=v(),t=await sn({config:r});if(e.json===!0){console.log(JSON.stringify(t,null,2)),t.ok||(process.exitCode=1);return}console.log(`Kynver Cron verify: ${t.ok?"PASS":"FAIL"}
-`);for(let n of t.checks){let o=n.ok?"ok":"FAIL";console.log(`  [${o}] ${n.id}: ${n.summary}`),!n.ok&&n.remediation&&console.log(`         \u2192 ${n.remediation}`)}t.ok||(process.exitCode=1)}O();import sI from"node:os";O();De();Mn();w();var Oo={slug:"landing-maintainer",originCron:"maintain-8-blocker-and-pr-landing-workers",defaultRepo:"Totalsolutionsync/Kynver",landScript:"scripts/agent-os-land-pr.mjs",landScriptArgs:["--skip-not-ready"]};import{spawnSync as oI}from"node:child_process";import hy from"node:path";function ky(e,r,t){let o=[hy.join(r,Oo.landScript),String(e),...Oo.landScriptArgs];if(!t)return{action:{kind:"land_pr",prNumber:e,reason:"dry-run"},executed:!1,exitCode:0,stdout:`dry-run: node ${o.join(" ")}`,stderr:""};let s=oI("node",o,{cwd:r,encoding:"utf8",timeout:600*1e3});return{action:{kind:"land_pr",prNumber:e,reason:"landing wrapper invoked"},executed:!0,exitCode:s.status,stdout:s.stdout??"",stderr:s.stderr??""}}function yy(e){let r=e.repoPath?String(e.repoPath).trim():"";return r?hy.resolve(r):Re()?.repo??process.cwd()}async function Ry(e){let r=String(N(String(e.agentOsId||""),"--agent-os-id")),t=String(e.repo||Oo.defaultRepo).trim(),n=e.fleet===!0||e.fleet==="true",o=e.execute===!0||e.execute==="true",s=e.run?String(e.run):void 0,i=$r({runId:s??"fleet-lane-tick"}),a={...ro(i,{harnessRunId:s,boxKind:je(v()),hostLabel:sI.hostname()}),providerHealthy:i.ok,authorizedForRepair:i.ok,authorizedForLanding:i.ok,systemHealthBlockers:i.ok?[]:[i.reason??"resource_gate_blocked"],actionableWorkers:i.activeWorkers},l=B(e.baseUrl?String(e.baseUrl):void 0),c=await K(e.secret?String(e.secret):void 0,r,{baseUrl:l}),u=`${l}/api/agent-os/by-id/${encodeURIComponent(r)}/fleet-landing-maintainer/tick`,f=(await Rr(u,c,{repo:t,fleet:n,execute:o,runId:s,boxCapacity:a})).response,m=[],p=yy(e),g=Array.isArray(f?.localActions)?f.localActions:[],k=a.boxId;for(let h of g){if(h.kind==="land_pr"&&typeof h.prNumber=="number"){let S=ky(h.prNumber,p,o);if(m.push({action:S.action,executed:S.executed,exitCode:S.exitCode}),o&&S.executed){let A=S.exitCode===0,W=typeof h.prUrl=="string"&&h.prUrl.trim()?h.prUrl.trim():`https://github.com/${t}/pull/${h.prNumber}`;try{await Rr(`${l}/api/agent-os/by-id/${encodeURIComponent(r)}/fleet-landing-maintainer/outcome`,c,{repo:t,prUrl:W,holderBoxId:k,merged:A})}catch{}}continue}m.push({action:h,executed:!1,exitCode:null})}return{repo:t,fleet:n,execute:o,coordinator:f,localOutcomes:m}}async function vy(e,r){let t=String(r??e.lane??"").trim();t!=="landing-maintainer"&&(console.error(`unknown lane: ${t||"(none)"}`),process.exit(1));let n=await Ry(e);if(e.json===!0||e.json==="true"){console.log(JSON.stringify(n,null,2));return}console.log(["fleet landing-maintainer tick",`repo=${n.repo}`,`fleet=${n.fleet}`,`execute=${n.execute}`,`localOutcomes=${n.localOutcomes.length}`].join(" "));for(let o of n.localOutcomes)console.log(`  ${o.action.kind} pr=${o.action.prNumber??"-"} executed=${o.executed}`)}function Iu(e){return e==="help"||e==="--help"||e==="-h"}function wy(e,r){let t=[e,r].filter(Boolean).join(" ");console.error(`unknown command: ${t||"(none)"}`),ia(1)}function ia(e=0){(e===0?console.log:console.error)(["Usage:","  kynver login [--api-key KEY] [--api-base-url URL]   (omit --api-key to authorize in the browser)","  kynver bootstrap [--api-base-url URL] [--api-key KEY] [--repo PATH]   (login + setup + runner credential in one shot)","  kynver start [--repo PATH] [--api-base-url URL] [--run RUN_ID] [--interval-ms MS] [--chat-oauth]   (bring your agent online: bootstrap if needed + run + daemon; --chat-oauth lets delegated chat turns use your local Claude subscription)","  kynver runner credential [--agent-os-id ID] [--base-url URL]","  kynver setup [--api-base-url URL] [--agent-os-id ID] [--agent-os-slug SLUG] [--box-kind forge|ghost] [--repo PATH] [--discover-repo] [--max-workers N] [--provider claude|cursor] [--chat-oauth]","  kynver daemon --run RUN_ID --agent-os-id AOS_ID [--execute] [--interval-ms MS] [--stall-ms MS] [--no-supervise]","  kynver status --run RUN_ID [--blocked] [--running] [--task TASK_ID] [--worker WORKER] [--full]  # top-level compact run status","  kynver run create [--repo /path/repo] [--name name] [--base origin/main]","  kynver run list","  kynver run resolve --name RUN_NAME","  kynver run status --run RUN_ID [--full]  # defaults to compact shallow map with drill-down commands","  kynver run dispatch --run RUN_ID --agent-os-id AOS_ID [--base-url URL] [--secret SECRET] [--execute] [--lane any|implementation|review|landing] [--target-task-id TASK_ID] [--executor harness] [--max-starts 1] [--lease-ms MS] [--owned path[,path]] [--model claude-opus-4-8] [--disk-path /] [--reconcile-stale-blockers]","  kynver run sweep --run RUN_ID --agent-os-id AOS_ID [--base-url URL] [--secret SECRET] [--grace-ms MS]",'  kynver worker start --run RUN_ID --name worker --task "..." [--owned path[,path]] [--model MODEL] [--provider claude|cursor] [--agent-os-id AOS_ID] [--task-id TASK_ID] [--wait]',"  kynver worker list --run RUN_ID [--full]  # defaults to compact shallow map with drill-down commands","  kynver worker status --run RUN_ID --name worker","  kynver worker tail --run RUN_ID --name worker [--lines 40] [--raw]","  kynver worker stop --run RUN_ID --name worker","  kynver worker complete --run RUN_ID --name worker [--agent-os-id AOS_ID] [--task-id TASK_ID] [--base-url URL] [--secret SECRET]","  kynver worker discard-disposable --run RUN_ID --name worker --path scripts/helper.mjs[,other]","  kynver worker auto-complete --run RUN_ID --name worker [--agent-os-id AOS_ID] [--poll-ms 5000] [--max-total-ms 21600000] [--complete-attempts 3] [--complete-backoff-ms 5000] [--base-url URL] [--secret SECRET]","  kynver run reconcile","  kynver run unblock [--agent-os-id AOS_ID] [--base-url URL] [--secret SECRET] [--dry-run]","  kynver plan progress --plan PLAN_ID --row ROW_KEY --role ROLE --status STATUS [--task TASK_ID] [--note NOTE] [--evidence type:value] [--agent-os-id AOS_ID]","  kynver plan verify --plan PLAN_ID [--worktree PATH] [--task TASK_ID] [--human-override] [--local]","  kynver harness verify --worktree PATH [--command CMD] [--json] [--wait-for-admission-ms MS] [--timeout-ms MS]","  kynver plan persist --operation create|add_version|update_metadata --title TITLE (--body-file PATH | --body TEXT) [--slug SLUG] [--plan PLAN_ID] [--summary TEXT] [--failure-kind approval_guard|auth|network|server|tool_interruption]","  kynver plan outbox list","  kynver plan outbox drain [--max N] [--id OUTBOX_ID]","  kynver cleanup [--execute] [--compact] [--node-modules-age-ms MS] [--worktrees-age-ms MS] [--harness-root PATH] [--include-orphans] [--skip-finalize] [--account-bytes]","    --include-orphans also scans whole worktree directories (<harnessRoot>/worktrees/<runId>/<workerId>/) that no run/worker.json references; orphans pass salvage gates (recent heartbeat, dirty git, ahead of origin/main) before removal.","    Dry-run defaults to fast scan (no byte accounting). Pass --account-bytes for reclaimable byte totals. Pass --compact for a bounded operator summary (no full action list).","  kynver monitor start --run RUN_ID [--name worker] [--agent-os-id AOS_ID] [--poll-ms MS]","  kynver monitor status [--run RUN_ID] [--name worker] [--tick]","  kynver monitor stop --run RUN_ID [--name worker]","  kynver monitor list","  kynver monitor tick --run RUN_ID [--name worker] [--agent-os-id AOS_ID] [--auto-complete] [--renew-leases]","  kynver monitor auto-complete --run RUN_ID --name worker [--agent-os-id AOS_ID] [--base-url URL] [--secret SECRET]","  kynver monitor run-loop --run RUN_ID --monitor-id ID [--name worker] [--agent-os-id AOS_ID] [--poll-ms MS] [--auto-complete] [--renew-leases]","  kynver config ensure-default-repo [--json]","  kynver doctor runtime-takeover [--remediate-default-repo]","  kynver scheduler cutover-check [--json]","  kynver scheduler attest-cutover [--json]","  kynver cron install [--dry-run] [--json] [--install-systemd] [--confirm-qstash-removal] [--skip-watchdog] [--skip-test-fire] [--agent-os-id ID] [--api-base-url URL] [--run RUN_ID]","  kynver cron verify [--json]","  kynver cron status [--json]","  kynver cron tick [--agent-os-id AOS_ID] [--json]","  kynver lane tick landing-maintainer [--fleet] [--repo OWNER/NAME] [--agent-os-id AOS_ID] [--execute] [--json]","  kynver board contract [--agent-os-id ID] [--base-url URL] [--since ISO] [--limit N]"].join(`
-`)),process.exit(e)}async function Cy(e=process.argv.slice(2)){if($u(e,import.meta.url,"kynver"))return;if(e.length===0||Iu(e[0]))return ia(0);let r=e.shift(),t,n;if((r==="run"||r==="worker"||r==="plan"||r==="runner"||r==="harness"||r==="monitor"||r==="doctor"||r==="config"||r==="scheduler"||r==="cron"||r==="lane"||r==="board")&&(t=e.shift()),n=e,t&&Iu(t)||n.some(Iu))return ia(0);let o=Wn(n),{runsDir:s,worktreesDir:i}=oe();if(by(s,{recursive:!0}),by(i,{recursive:!0}),r==="daemon"&&Zt(),Ea(r,t)){let a,l=o.run?String(o.run).trim():"";if(l)try{a=U(l).repo}catch{a=void 0}await xa({repoRoot:a,cwd:a})}if(r==="login")return void await rp(o);if(r==="bootstrap")return void await xi(o);if(r==="start")return void await fk(o);if(r==="status")return Ht(o);if(r==="runner"&&t==="credential")return void await ep(o);if(r==="setup")return void await as(o);if(r==="daemon")return Ni(o)?void await Ti(o):void await vo(o);if(r==="plan"&&t==="progress")return void await Ck(o);if(r==="plan"&&t==="verify")return void await _k(o);if(r==="harness"&&t==="verify")return xk(o);if(r==="plan"&&t==="persist")return void await Ek(o);if(r==="plan"&&t==="outbox"){let a=n.shift();if(a==="list")return void await Pk();if(a==="drain")return void await Ak(Wn(n));wy("plan",`outbox ${a??""}`.trim())}if(r==="cleanup")return Ik(o);if(r==="config"&&t==="ensure-default-repo")return zk(o.json===!0);if(r==="doctor"&&t==="runtime-takeover")return iy(o);if(r==="scheduler"&&t==="cutover-check")return uy(o.json===!0);if(r==="scheduler"&&t==="attest-cutover")return dy(o.json===!0);if(r==="cron"&&t==="install")return void await fy(o);if(r==="cron"&&t==="verify")return void await gy(o);if(r==="cron"&&t==="status")return void await py(o.json===!0);if(r==="cron"&&t==="tick")return void await my(o);if(r==="lane"&&t==="tick"){let a=n.shift();return void await vy(Wn(n),a)}if(r==="board"&&t==="contract")return void await ay(o);if(r==="run"&&t==="create")return void ao(o);if(r==="run"&&t==="list")return Cc();if(r==="run"&&t==="resolve")return _c(o);if(r==="run"&&t==="status")return Ht(o);if(r==="run"&&t==="dispatch")return void await _r(o);if(r==="run"&&t==="sweep")return void await zt(o);if(r==="run"&&t==="reconcile")return Sc();if(r==="run"&&t==="unblock")return void await qk(o);if(r==="worker"&&t==="start")return void await Wl(o);if(r==="worker"&&t==="list")return _m(o);if(r==="worker"&&t==="status")return Dl(o);if(r==="worker"&&t==="tail")return Ml(o);if(r==="worker"&&t==="stop")return Ul(o);if(r==="worker"&&t==="complete")return void await Ws(o);if(r==="worker"&&t==="discard-disposable")return gk(o);if(r==="worker"&&t==="auto-complete")return void await Ll(o);if(r==="monitor"&&t==="start"){let a=await Kk(o);console.log(JSON.stringify(a,null,2));return}if(r==="monitor"&&t==="status")return void await jk(o);if(r==="monitor"&&t==="stop")return Vk(o);if(r==="monitor"&&t==="list")return Gk();if(r==="monitor"&&t==="tick")return void await Jk(o);if(r==="monitor"&&t==="auto-complete")return void await ta(o);if(r==="monitor"&&t==="run-loop")return void await Yk(o);wy(r,t)}var aI=process.argv[1]&&Sy.native(process.argv[1])===Sy.native(iI(import.meta.url));aI&&Cy().catch(e=>{console.error(e),process.exit(1)});var lI="https://api.vercel.com";function cI(e){let r=e?.trim();return r||process.env.VERCEL_TOKEN?.trim()||null}function _y(e){return(e??"").trim().toUpperCase()}function uI(e){if(typeof e!="string"||!e.trim())return null;let r=e.trim();return r.startsWith("http")?r:`https://${r}`}async function Ou(e,r={}){let t=e.trim();if(!t)return{ok:!1,readyState:null,previewUrl:null,error:"missing deployment id or URL"};let n=cI(r.token);if(!n)return{ok:!1,readyState:null,previewUrl:null,error:"VERCEL_TOKEN not configured"};let o=r.teamId?.trim()||process.env.VERCEL_TEAM_ID?.trim(),s=o?`?teamId=${encodeURIComponent(o)}`:"",i=r.fetchImpl??fetch;try{let a=await i(`${lI}/v13/deployments/${encodeURIComponent(t)}${s}`,{headers:{Authorization:`Bearer ${n}`}});if(!a.ok){let u=await a.text();return{ok:!1,readyState:null,previewUrl:null,error:`Vercel API ${a.status}: ${u.slice(0,200)}`}}let l=await a.json();return{ok:!0,readyState:_y(l.readyState??l.state)||null,previewUrl:uI(l.url),error:null}}catch(a){return{ok:!1,readyState:null,previewUrl:null,error:a instanceof Error?a.message:"Vercel API fetch failed"}}}function Nu(e,r){let t=_y(e);return t==="READY"?"ready":t==="ERROR"||t==="CANCELED"?"error":t==="BUILDING"||t==="QUEUED"||t==="INITIALIZING"||r?"building":"error"}var xy=/(^|\.)vercel\.app$/i,Ey=/^dpl_[a-z0-9]+$/i;function aa(e){let r=e.trim();if(!r||/vercel\.com/i.test(r))return!1;if(Ey.test(r))return!0;try{let t=new URL(r.startsWith("http")?r:`https://${r}`);return xy.test(t.hostname)}catch{return!1}}function dI(e){let r=e.trim();if(!r)return null;try{return new URL(r)}catch{return null}}function pI(e){let r=e.pathname.split("/").filter(Boolean);if(r.length<3)return null;let t=r[r.length-1]?.trim();return!t||t==="deployments"?null:t}function mI(e){let r=e.pathname.split("/").filter(Boolean),t=r.indexOf("deployments");return t<0||t>=r.length-1?null:r[t+1]?.trim()||null}function kt(e){let r={kind:"unknown",previewUrl:null,inspectTarget:null,deploymentId:null},t=e.trim();if(!t)return r;if(/^dpl_[a-z0-9]+$/i.test(t))return{kind:"deployment_id",previewUrl:null,inspectTarget:t,deploymentId:t};let n=dI(t);if(!n)return r;if(xy.test(n.hostname)){let o=n.origin;return{kind:"deployment_host",previewUrl:o,inspectTarget:o,deploymentId:null}}if(n.hostname==="vercel.com"||n.hostname.endsWith(".vercel.com")){let o=mI(n)??pI(n);return{kind:"dashboard",previewUrl:null,inspectTarget:o&&Ey.test(o)?o:null,deploymentId:o}}return r}function Py(e){return kt(e).kind==="dashboard"}var fI=/vercel/i;function Tu(e){let r=typeof e=="string"?e.trim().toLowerCase():"";return r==="success"?"success":r==="pending"?"pending":r==="failure"?"failure":r==="error"?"error":"unknown"}function Du(e){let r=typeof e=="string"?e.trim():"";return!!(r&&fI.test(r))}function No(e){let t=(Array.isArray(e)?e:[]).filter(l=>Du(l.context));if(t.length===0)return null;let n=l=>l==="failure"||l==="error"?0:l==="pending"?1:l==="success"?2:1,o=null,s=1/0;for(let l of t){let c=n(Tu(l.state));c<s&&(o=l,s=c)}if(!o)return null;let i=typeof o.target_url=="string"&&o.target_url.trim()?o.target_url.trim():null,a=i?kt(i):null;return{context:String(o.context??"Vercel").trim(),state:Tu(o.state),targetUrl:i,description:typeof o.description=="string"&&o.description.trim()?o.description.trim():null,deploymentId:a?.deploymentId??null,previewUrl:a?.previewUrl??null,dashboardUrl:a?.kind==="dashboard"?i:null}}function gI(e){return e==="success"?"ready":e==="pending"?"building":e==="failure"||e==="error"?"error":"unavailable"}function la(e){return e.filter(Boolean).join("; ")}function Mu(e){let r=typeof e=="string"?e.trim():"";if(!r)return{target:null,classified:null,reason:"missing target_url"};let t=kt(r);return t.inspectTarget&&aa(t.inspectTarget)?{target:t.inspectTarget,classified:t,reason:null}:t.kind==="dashboard"?{target:null,classified:t,reason:t.deploymentId?"dashboard deployment id is not API-inspectable; trust GitHub Vercel status":"dashboard URL is not valid for Vercel API lookup"}:{target:null,classified:t,reason:"unrecognized Vercel URL"}}function Uu(e,r={}){let t=r.observedAt??new Date().toISOString(),n=No(e);if(!n)return{status:"not_run",previewUrl:null,deploymentUrl:null,summary:"No Vercel GitHub status context on commit",observedAt:t,inspectSkipped:!0,inspectReason:"no_vercel_status_context",githubState:null,vercelContext:null};let o=gI(n.state),s=n.previewUrl??n.dashboardUrl,i=n.previewUrl??n.dashboardUrl;return{status:o,previewUrl:s,deploymentUrl:i,summary:la([`GitHub ${n.context}=${n.state}`,n.description??"",n.dashboardUrl?"dashboard target_url (API lookup skipped)":""]),observedAt:t,inspectSkipped:!0,inspectReason:n.dashboardUrl&&n.state==="success"?"trusted_github_status_dashboard_url":n.dashboardUrl?"dashboard_url_not_api_inspectable":"github_status_only",githubState:n.state,vercelContext:n.context}}async function Ay(e){let r=e.observedAt??new Date().toISOString(),t=Uu(e.statuses??[],{observedAt:r}),n=No(e.statuses??[]);if(!n)return t;if(n.state==="success")return{...t,inspectSkipped:!0,inspectReason:n.dashboardUrl?"trusted_github_status_dashboard_url":"trusted_github_status"};if(!e.allowInspect)return{...t,inspectSkipped:!0,inspectReason:"api_lookup_disabled"};let{target:o,reason:s}=Mu(n.targetUrl);if(!o)return{...t,inspectSkipped:!0,inspectReason:s??"not_api_inspectable",summary:la([t.summary??"",s??"skipped Vercel API lookup"])};let a=await(e.runInspect??Ou)(o),l=new Date().toISOString();if(!a.ok&&a.error?.includes("VERCEL_TOKEN"))return{status:"unavailable",previewUrl:t.previewUrl,deploymentUrl:t.deploymentUrl,summary:"VERCEL_TOKEN not configured for API fallback",observedAt:l,inspectSkipped:!0,inspectReason:"vercel_token_missing",githubState:n.state,vercelContext:n.context};if(!a.ok)return{status:n.state==="pending"?"building":"error",previewUrl:t.previewUrl,deploymentUrl:o.startsWith("http")?o:t.deploymentUrl,summary:la([`Vercel API lookup ${o} failed`,a.error??""]),observedAt:l,inspectSkipped:!1,inspectReason:null,githubState:n.state,vercelContext:n.context};let c=Nu(a.readyState,n.state==="pending"),u=a.previewUrl??(o.startsWith("http")?o:t.previewUrl);return{status:c,previewUrl:u,deploymentUrl:u??t.deploymentUrl,summary:la([`Vercel API ${o}=${a.readyState??"unknown"}`,c==="ready"?"preview ready":""]),observedAt:l,inspectSkipped:!1,inspectReason:null,githubState:n.state,vercelContext:n.context}}export{Sr as CODEX_DEFAULT_MODEL,_s as DEFAULT_DISPATCH_LEASE_MS,zi as DEFAULT_HARNESS_VERIFY_COMMANDS,ji as DEFAULT_HEAVY_VERIFICATION_MAX_CONCURRENT,gi as DEFAULT_MAX_ACTIONS_PER_SWEEP,uo as DEFAULT_NODE_MODULES_AGE_MS,fi as DEFAULT_RUN_DIRECTORIES_AGE_MS,mi as DEFAULT_TERMINAL_WORKTREES_AGE_MS,xe as DEFAULT_WORKER_PROVIDER,po as DEFAULT_WORKTREES_AGE_MS,cd as DEFAULT_WSL_HOST_CRITICAL_FREE_BYTES,ud as DEFAULT_WSL_HOST_MOUNT,ld as DEFAULT_WSL_HOST_WARN_FREE_BYTES,Gr as EMBEDDED_INSTRUCTION_BUNDLE,sp as EMBEDDED_INSTRUCTION_BUNDLE_VERSION,Ju as FORBIDDEN_WORKER_ENV_KEYS,ci as HARNESS_BUILD_CACHE_RELATIVE_PATHS,_o as HEAVY_VERIFICATION_TOKEN_REQUIRED,vs as HERMES_OPENAI_CODEX_DEFAULT_MODEL,pf as INSTRUCTION_BUNDLE_REFRESH_TTL_MS,ba as MEMORY_COST_MANAGED_PACKAGES,va as MEMORY_COST_PACKAGE_MIN_VERSIONS,Sn as MemoryCostPackageVersionGuardError,oc as OPENAI_CODEX_PROVIDER,eC as ORCHESTRATION_ACTION_KINDS,rC as ORCHESTRATION_POLICY_DECISIONS,sc as ORCHESTRATION_POLICY_MODES,yn as PACKAGE_VERSION,cf as PINNED_INSTRUCTION_BUNDLE_PUBLIC_KEYS,Jt as RUN_METADATA_ACTIVE_SIGNAL_MS,Af as TERMINAL_WORKER_ARCHIVE_AGE_MS,zw as TRANSIENT_OPENAI_CODEX_ERROR_CLASSES,us as WORKER_PERSONA_CATALOG,mC as applyProductionDatabaseToProcess,si as archiveTerminalWorkerMetadata,Ca as assertMemoryCostPackageVersionGuard,Po as assessAutoCompleteEligibility,dt as assessBuildAdmission,Br as assessExitedWorkerSalvage,fn as assessHeavyVerificationGate,Hc as assessOrphanWorktreeSafety,El as assessPrHandoffRequirement,Wr as assessWorkerLanding,La as assessWorkerLandingContract,jy as auditWorkerEnv,et as autoCompleteWorker,Ll as autoCompleteWorkerCli,ro as buildBoxResourceSnapshotFromGate,Op as buildCodexExecArgv,af as buildDispatchTaskText,ac as buildForegroundHarnessIdempotencyKey,Ep as buildHermesOpenAiCodexChatArgv,_a as buildMemoryCostPackageGuardInput,il as buildOrchestrationProviderInventory,yl as buildPrompt,li as buildRunListRows,Bi as buildSystemdRunArgv,Xs as canonicalJsonStringify,ur as canonicalWorkerDir,Yi as classifyHeavyShellCommand,Ed as classifyNpmAuditOutcome,gf as classifyOpenAiCodexError,vp as classifyOrchestrationRisk,Sd as classifyRepoSearchMeta,zo as classifyShellCommandOutcome,kt as classifyVercelUrl,ea as classifyWorkerHealth,dl as codexProvider,Rc as collectFilesystemLiveRunKeys,Ay as collectVercelEvidence,Rp as compareProviderCandidates,wn as compareSemver,Ws as completeWorker,Bd as computeAttention,Bw as computeInstructionBundleVersion,T as computeWorkerStatus,wo as countActiveHeavyVerificationSlots,ao as createRun,$n as defaultBoxId,Ww as deriveInstructionBundleKeyId,Tt as deriveRunStatus,qo as diagnoseRepoSearchFailure,kr as discoverDefaultRepo,nd as discoverDefaultRepoCandidates,ri as discoverProductionDbEnvFilePaths,_r as dispatchRun,Js as drainPlanOutbox,Qa as enforceCursorWorkerProvider,xa as enforceMemoryCostPackageGuardAtStartup,nc as ensureInstructionBundle,Ts as ensurePrReadyHandoff,mR as evaluateMemoryCostPackageGuardAtStartup,$o as evaluateMemoryCostPackageVersionGuard,sC as evaluateOrchestrationPolicy,Uu as evidenceFromGitHubVercelStatus,bf as expandHomePath,zs as extractPlanOutboxFromTask,xl as extractPrUrlFromText,Na as extractSearchMeta,_d as extractSearchMetaFromToolLine,Qi as formatAutoCompleteOutcomeNotice,yf as formatCronJobDeliveryFailure,Tk as formatHarnessToolReadable,Uw as formatHeartbeatLine,oR as formatMemoryCostPackageGuardError,gn as formatMonitorTickNotice,kf as formatOpenAiCodexFailureNotice,qs as formatPlanOutboxHandoffBlock,Cd as formatRepoSearchGuidance,Yt as formatResolvedDefaultRepo,Zi as formatWorkerCompleteNotice,Eo as formatWorkerStatusNotice,Ji as gateWorkerShellCommand,Nv as getActiveInstructionBundle,sr as getActiveInstructionBundleSource,vr as getActiveInstructionBundleVersion,Mr as getHarnessPaths,ra as getMonitorStatus,Jr as getOrchestrationProviderCapability,ds as getPersonaDefaultRoleLane,cp as getPersonaDispatchLane,Ja as getWorkerPersonaCatalogEntry,ka as gitRepoRoot,pe as harnessRunsDir,xc as harnessStorageSnapshot,or as harnessWorktreesDir,Gt as hasNestedRunsSegment,ir as hashPlanBody,ul as hermesCodexProvider,ec as instructionBundleCachePath,On as isActiveHarnessWorker,Ge as isClaudeFamilyProvider,Py as isDashboardVercelUrl,Lw as isEngagementRequiredSkip,Z as isFinishedWorkerStatus,ma as isForbiddenWorkerEnvKey,Ec as isGeneratedHarnessPath,gc as isHarnessRunMetadataPath,pn as isHeavyVerificationGateSkipped,aa as isInspectableVercelTarget,Lv as isKnownWorkerPersonaSlug,td as isKynverMonorepoRoot,Fr as isLandingBlockedWorkerStatus,ic as isOrchestrationEnforceTasksEnabled,Kc as isPipelineCleanupEnabled,Yo as isRgExcludeScopeTarget,Vt as isSignedInstructionBundleShape,Go as isSingleFileSearchTarget,an as isSystemdRunAvailable,Oa as isTerminalHeartbeatPhase,Du as isVercelStatusContext,dd as isWslHost,Nk as joinHarnessNotice,Ba as landingContractAttentionReason,gu as listActiveHeavyVerificationSlots,qu as listForbiddenWorkerEnvKeys,Ao as listMonitors,el as listOrchestrationProviderCapabilities,tt as listOutboxItems,Cc as listRuns,wc as listRunsCli,tc as loadInstructionBundleCache,v as loadUserConfig,Cy as main,Hi as mergeNodeOptionsForBuildCheck,wd as metaToNormalizedRgCommand,bp as normalizeCursorModelAlias,te as normalizeHarnessRoot,Jo as normalizeRepoSearchCommand,bd as normalizeRgArgv,Me as observeRunnerDiskGate,Pa as observeWslHostDisk,Zw as orchestrationAuditForWorkerJson,Wn as parseArgs,rv as parseClaudeStream,At as parseHarnessStream,_e as parseHeartbeat,Qs as parseRawEd25519Key,ni as persistDefaultRepo,jt as persistPlan,No as pickVercelStatusContext,Rr as postJson,Vv as preferCursorExecutor,ys as preflightClaudeModel,zr as preflightCodexModel,Rs as preflightCursorModel,hs as probeClaudeOAuthBinding,rl as probeCodexOAuthBinding,ks as probeCursorOAuthBinding,sl as probeHermesCliAdapter,Fn as probeHermesOpenAiCodexBinding,hb as probeOrchestrationProviderBinding,wa as probeRepoPackageVersions,nl as providerCapableForRisk,Ct as readMemAvailableBytes,wf as readProductionDbKeysFromEnvFile,Co as reclaimStaleHeavyVerificationSlots,ai as reconcileLocalOnlyMergedPrAttention,Sc as reconcileRunsCli,qt as reconcileStaleWorkers,ii as reconcileWorkerMetadata,BC as reconcileWorkerMetadataCli,iC as redactHarness,lr as redactProviderErrorText,mn as releaseHeavyVerificationSlot,RC as remediateDefaultRepo,oi as repairMissingRunMetadata,kC as repairNestedRunsPath,B as resolveBaseUrl,Bb as resolveBoxKindFromEnv,cs as resolveBundlePersona,Pv as resolveCallbackSecret,K as resolveCallbackSecretWithMint,br as resolveCodexOrchestrationAdapter,Hn as resolveConfiguredWorkerProvider,Re as resolveDefaultRepo,de as resolveHarnessRoot,Mf as resolveHarnessRunByName,_c as resolveHarnessRunCli,un as resolveHeavyVerificationMaxConcurrent,Ql as resolveInstructionBundlePublicKey,Lt as resolveInstructionText,hf as resolveOpenAiCodexRetryBudget,Zs as resolveOrchestrationPolicyMode,ll as resolveOrchestrationRouting,Yr as resolvePolicyThreshold,Cf as resolveProductionDatabaseUrl,Ls as resolveRunTargetArg,Mu as resolveVercelInspectTarget,pc as resolveWorkerJsonPath,Be as resolveWorkerTargetArgs,qi as runBoundedBuildCheck,vo as runDaemon,st as runDirHasActiveRetentionSignals,_i as runHarnessCleanup,xo as runHarnessVerifyCommands,ht as runMonitorTick,$c as runPipelineHarnessCleanup,Ht as runStatus,so as safeDatabaseUrlHint,Rf as sanitizeOrchestrationAudit,rc as saveInstructionBundleCache,Ve as saveUserConfig,zu as scrubClaudeEnv,Ne as scrubWorkerEnv,gs as selectCheapestCapableProvider,Sa as semverAtLeast,Ya as setActiveInstructionBundle,Ea as shouldEnforceMemoryCostPackageGuardCli,Bl as spawnCompletionSidecar,na as spawnMonitorSidecar,Hs as spawnWorkerProcess,Wl as startWorker,Ul as stopWorker,Ma as summarizeEvent,xd as summarizeNpmAuditReport,Id as summarizeShellToolCallEvent,pd as summarizeWslRecoverySteps,zt as sweepRun,Ml as tailWorker,ms as taskAllowsClaudeWorker,Ur as terminalFinalResultFromHeartbeat,pt as tryAcquireHeavyVerificationSlot,Ga as tryResolveBaseUrl,ss as tryResolveCallbackSecretWithMint,ia as usage,TS as validateOwnedPaths,Nl as validateRepo,Gn as validateRunId,DS as validateTailLines,Rm as validateWorkerName,uf as verifyInstructionBundleSignatureWithKey,Zl as verifySignedInstructionBundle,Gi as waitForHeavyVerificationSlot,yc as workerDirHasActiveRetentionSignals,Bv as workerPersonaLandingSlugs,qa as workerPersonaReviewSlugs,Dl as workerStatus};
+Blockers:`);for(let n of t.blockers)console.log(`  ! ${n}`);process.exitCode=1;return}console.log("\nInstall complete \u2014 run `kynver cron verify` to re-check.")}async function uR(e){let r=v(),t=await Sn({config:r});if(e.json===!0){console.log(JSON.stringify(t,null,2)),t.ok||(process.exitCode=1);return}console.log(`Kynver Cron verify: ${t.ok?"PASS":"FAIL"}
+`);for(let n of t.checks){let o=n.ok?"ok":"FAIL";console.log(`  [${o}] ${n.id}: ${n.summary}`),!n.ok&&n.remediation&&console.log(`         \u2192 ${n.remediation}`)}t.ok||(process.exitCode=1)}O();import bO from"node:os";O();Ue();Yt();C();var Xo={slug:"landing-maintainer",originCron:"maintain-8-blocker-and-pr-landing-workers",defaultRepo:"Totalsolutionsync/Kynver",landScript:"scripts/agent-os-land-pr.mjs",landScriptArgs:["--skip-not-ready"]};import{spawnSync as RO}from"node:child_process";import dR from"node:path";function pR(e,r,t){let o=[dR.join(r,Xo.landScript),String(e),...Xo.landScriptArgs];if(!t)return{action:{kind:"land_pr",prNumber:e,reason:"dry-run"},executed:!1,exitCode:0,stdout:`dry-run: node ${o.join(" ")}`,stderr:""};let s=RO("node",o,{cwd:r,encoding:"utf8",timeout:600*1e3});return{action:{kind:"land_pr",prNumber:e,reason:"landing wrapper invoked"},executed:!0,exitCode:s.status,stdout:s.stdout??"",stderr:s.stderr??""}}function mR(e){let r=e.repoPath?String(e.repoPath).trim():"";return r?dR.resolve(r):Ke()?.repo??process.cwd()}async function fR(e){let r=String(N(String(e.agentOsId||""),"--agent-os-id")),t=String(e.repo||Xo.defaultRepo).trim(),n=e.fleet===!0||e.fleet==="true",o=e.execute===!0||e.execute==="true",s=e.run?String(e.run):void 0,i=dr({runId:s??"fleet-lane-tick"}),a={...vo(i,{harnessRunId:s,boxKind:Ge(v()),hostLabel:bO.hostname()}),providerHealthy:i.ok,authorizedForRepair:i.ok,authorizedForLanding:i.ok,systemHealthBlockers:i.ok?[]:[i.reason??"resource_gate_blocked"],actionableWorkers:i.activeWorkers},l=K(e.baseUrl?String(e.baseUrl):void 0),c=await G(e.secret?String(e.secret):void 0,r,{baseUrl:l}),u=`${l}/api/agent-os/by-id/${encodeURIComponent(r)}/fleet-landing-maintainer/tick`,f=(await Pr(u,c,{repo:t,fleet:n,execute:o,runId:s,boxCapacity:a})).response,m=[],p=mR(e),h=Array.isArray(f?.localActions)?f.localActions:[],k=a.boxId;for(let g of h){if(g.kind==="land_pr"&&typeof g.prNumber=="number"){let R=pR(g.prNumber,p,o);if(m.push({action:R.action,executed:R.executed,exitCode:R.exitCode}),o&&R.executed){let I=R.exitCode===0,E=typeof g.prUrl=="string"&&g.prUrl.trim()?g.prUrl.trim():`https://github.com/${t}/pull/${g.prNumber}`;try{await Pr(`${l}/api/agent-os/by-id/${encodeURIComponent(r)}/fleet-landing-maintainer/outcome`,c,{repo:t,prUrl:E,holderBoxId:k,merged:I})}catch{}}continue}m.push({action:g,executed:!1,exitCode:null})}return{repo:t,fleet:n,execute:o,coordinator:f,localOutcomes:m}}async function gR(e,r){let t=String(r??e.lane??"").trim();t!=="landing-maintainer"&&(console.error(`unknown lane: ${t||"(none)"}`),process.exit(1));let n=await fR(e);if(e.json===!0||e.json==="true"){console.log(JSON.stringify(n,null,2));return}console.log(["fleet landing-maintainer tick",`repo=${n.repo}`,`fleet=${n.fleet}`,`execute=${n.execute}`,`localOutcomes=${n.localOutcomes.length}`].join(" "));for(let o of n.localOutcomes)console.log(`  ${o.action.kind} pr=${o.action.prNumber??"-"} executed=${o.executed}`)}O();M();Jr();Yt();import wO from"node:path";C();Er();Yn();M();C();import vO from"node:path";function hR(e){let r=e?.trim();return r?/completion acknowledged but board not advanced/i.test(r)&&/task already terminal/i.test(r):!1}function kR(e){let r=typeof e.status=="string"?e.status:"",t=typeof e.completionBlocker=="string"&&e.completionBlocker.trim().length>0?e.completionBlocker:void 0;return t&&!hR(t)?!1:typeof e.completionReportedAt=="string"&&e.completionReportedAt.trim()||e.completionOutcome==="acknowledged"?!0:r==="done"}function od(e){return typeof e.completionReportedAt=="string"&&e.completionReportedAt.trim()||!B(e.pid)?!1:Cs(e)}function SO(e,r){let t=e.completionBlocker?.trim();if(t&&!hR(t))return{attention:"blocked",attentionReason:t,status:"blocked"};if(r.heartbeatBlocker)return{attention:"blocked",attentionReason:r.heartbeatBlocker,status:"blocked"};if(kR(e))return{attention:"done",attentionReason:"completion acknowledged",status:"done"};let n=od(e);return n?{attention:"ok",status:e.status?.trim()||"running"}:e.status==="done"?{attention:"done",status:"done"}:n?{attention:"ok",status:e.status?.trim()||"unknown"}:{attention:"needs_attention",attentionReason:"process not alive",status:"exited"}}function CO(e){return typeof e.completionBlocker=="string"&&e.completionBlocker.trim()||kR(e)?!1:od(e)}function sd(e,r){let t=_(vO.join(x(e.id),"workers",b(r),"worker.json"),void 0);if(!t)return null;let n=ye(t.heartbeatPath),{attention:o,attentionReason:s,status:i}=SO(t,n),a=od(t),l=CO(t);return{runId:e.id,runName:e.name,worker:r,status:i,attention:o,attentionReason:s,alive:a,isActive:l,taskId:t.taskId?.trim()||null,planId:t.planId?.trim()||null,leaseOwner:t.leaseOwner?.trim()||null,pid:t.pid,model:t.model,currentTask:n.lastHeartbeatSummary,lastHeartbeatPhase:n.lastHeartbeatPhase,lastHeartbeatSummary:n.lastHeartbeatSummary,heartbeatBlocker:n.heartbeatBlocker,completionBlocker:t.completionBlocker?.trim()||null}}function id(e,r){let t={};for(let n of e){let o=r(n).trim()||"unknown";t[o]=(t[o]??0)+1}return t}function yR(e){return e.filter(r=>r.attention==="blocked"||r.attention==="needs_attention"||r.attention==="stale").map(r=>({runId:r.runId,worker:r.worker,taskId:r.taskId,reason:r.completionBlocker??r.heartbeatBlocker??r.attentionReason??r.attention}))}function RR(e){return e.filter(r=>r.isActive&&r.taskId).map(r=>r.taskId.trim())}function _O(){let e=[];for(let r of J())for(let t of ke(r)){let n=sd(r,t);n&&e.push(n)}return e}function xO(e){let r=e.trim().toLowerCase();if(!r)return null;for(let t of J())for(let n of ke(t)){let s=_(wO.join(x(t.id),"workers",b(n),"worker.json"),void 0)?.taskId?.trim();if(s&&(s.toLowerCase()===r||s.toLowerCase().endsWith(r)))return sd(t,n)}return null}function ad(e){if(e.mode==="full")return{mode:"full",runs:pn()};let r=v(),{harnessRoot:t}=te(),n=J(),o=_O(),s=o.filter(l=>l.isActive).length,i=dr({runId:n[0]?.id??"fleet",activeWorkers:s}),a={generatedAt:new Date().toISOString(),mode:e.mode,harnessRoot:t,agentOsId:r.agentOsId?.trim()||null,resourceGate:i,runCount:n.length,runStatusCounts:id(n,l=>l.status),workerCount:o.length,workerStatusCounts:id(o,l=>l.status),workerAttentionCounts:id(o,l=>l.attention),activeTaskIds:RR(o),blocked:yR(o).slice(0,25),workers:o};if(e.mode==="task"){let l=e.taskId?.trim()??"",c=l?xO(l):null;return{...a,mode:"task",taskId:l,taskFound:!!c,workers:c?[c]:[]}}if(e.mode==="workers"){let l=o.filter(c=>c.alive||c.attention==="blocked"||c.attention==="needs_attention"||c.attention==="stale");return{...a,mode:"workers",workers:l,blocked:yR(l).slice(0,25),activeTaskIds:RR(l)}}return a}function ld(e,r=72){let t=e.trim();return t.length<=r?t:`${t.slice(0,r-1)}\u2026`}function EO(e){let r=[`${e.runId}/${e.worker}`,e.taskId?`task=${e.taskId}`:"task=\u2014",e.leaseOwner?`lease=${e.leaseOwner}`:"lease=\u2014",`${e.status}/${e.attention}`];return e.currentTask&&r.push(`tool=${ld(e.currentTask,48)}`),r.join(" \xB7 ")}function PO(e){let r=e.resourceGate,t=[];if(t.push("Kynver factory status"),t.push(`Slots: ${r.activeWorkers}/${r.maxConcurrentWorkers} active \xB7 ${r.slotsAvailable} available`+(r.reason?` (${r.reason})`:"")),t.push(`Runs: ${e.runCount} \xB7 Workers: ${e.workerCount}`),e.activeTaskIds.length>0&&t.push(`Active tasks: ${e.activeTaskIds.slice(0,12).join(", ")}`),e.blocked.length>0){t.push(`Blocked (${e.blocked.length}):`);for(let n of e.blocked.slice(0,8)){let o=n.taskId?` task=${n.taskId}`:"";t.push(`  \xB7 ${n.runId}/${n.worker}${o}: ${ld(n.reason)}`)}e.blocked.length>8&&t.push(`  \xB7 \u2026and ${e.blocked.length-8} more (use kynver status --workers)`)}else t.push("Blocked: none");return t.push("Drilldown: kynver status --workers | --task <id> | --json | --full"),t.join(`
+`)}function AO(e){let r=e.resourceGate,t=[];if(t.push(`Worker slots ${r.activeWorkers}/${r.maxConcurrentWorkers} \xB7 available ${r.slotsAvailable}`),e.workers.length===0)return t.push("No active or attention workers."),t.join(`
+`);for(let n of e.workers)t.push(EO(n));return t.join(`
+`)}function IO(e){if(!e.taskId)return"missing --task <id>";if(!e.taskFound||e.workers.length===0)return`No harness worker found for task ${e.taskId}`;let r=e.workers[0];return[`task ${e.taskId}`,`${r.runId}/${r.worker}`,r.status,r.attention,r.leaseOwner?`lease=${r.leaseOwner}`:null,r.model?`model=${r.model}`:null,r.currentTask?`tool=${ld(r.currentTask)}`:null,r.completionBlocker??r.heartbeatBlocker??r.attentionReason??null].filter(n=>!!n).join(" \xB7 ")}function bR(e){return e.mode==="workers"?AO(e):e.mode==="task"?IO(e):PO(e)}function OO(e){return e.full===!0||e.full==="true"?"full":e.json===!0||e.json==="true"?"json":e.workers===!0||e.workers==="true"?"workers":typeof e.task=="string"&&e.task.trim()?"task":"compact"}function vR(e){let r=OO(e);if(r==="full"){let n=ad({mode:"full"});console.log(JSON.stringify(n,null,2));return}let t=ad({mode:r,taskId:typeof e.task=="string"?e.task:void 0});if(r==="json"){console.log(JSON.stringify(t,null,2));return}console.log(bR(t))}function cd(e){return e==="help"||e==="--help"||e==="-h"}function wR(e,r){let t=[e,r].filter(Boolean).join(" ");console.error(`unknown command: ${t||"(none)"}`),Na(1)}function Na(e=0){(e===0?console.log:console.error)(["Usage:","  kynver login [--api-key KEY] [--api-base-url URL]   (omit --api-key to authorize in the browser)","  kynver bootstrap [--api-base-url URL] [--api-key KEY] [--repo PATH]   (login + setup + runner credential in one shot)","  kynver start [--repo PATH] [--api-base-url URL] [--run RUN_ID] [--interval-ms MS] [--chat-oauth]   (bring your agent online: bootstrap if needed + run + daemon; --chat-oauth lets delegated chat turns use your local Claude subscription)","  kynver runner credential [--agent-os-id ID] [--base-url URL]","  kynver setup [--api-base-url URL] [--agent-os-id ID] [--agent-os-slug SLUG] [--box-kind forge|ghost] [--repo PATH] [--discover-repo] [--max-workers N] [--provider claude|cursor] [--chat-oauth]","  kynver daemon --run RUN_ID --agent-os-id AOS_ID [--execute] [--interval-ms MS] [--stall-ms MS] [--no-supervise]","  kynver status [--compact] [--workers] [--task TASK_ID] [--json] [--full]  # factory-wide harness summary","  kynver run list","  kynver run resolve --name RUN_NAME","  kynver run status --run RUN_ID [--full]  # defaults to compact shallow map with drill-down commands","  kynver run dispatch --run RUN_ID --agent-os-id AOS_ID [--base-url URL] [--secret SECRET] [--execute] [--lane any|implementation|review|landing] [--target-task-id TASK_ID] [--executor harness] [--max-starts 1] [--lease-ms MS] [--owned path[,path]] [--model claude-opus-4-8] [--disk-path /] [--reconcile-stale-blockers]","  kynver run sweep --run RUN_ID --agent-os-id AOS_ID [--base-url URL] [--secret SECRET] [--grace-ms MS]",'  kynver worker start --run RUN_ID --name worker --task "..." [--owned path[,path]] [--model MODEL] [--provider claude|cursor] [--agent-os-id AOS_ID] [--task-id TASK_ID] [--wait]',"  kynver worker list --run RUN_ID [--full]  # defaults to compact shallow map with drill-down commands","  kynver worker status --run RUN_ID --name worker","  kynver worker tail --run RUN_ID --name worker [--lines 40] [--raw]","  kynver worker stop --run RUN_ID --name worker","  kynver worker complete --run RUN_ID --name worker [--agent-os-id AOS_ID] [--task-id TASK_ID] [--base-url URL] [--secret SECRET]","  kynver worker discard-disposable --run RUN_ID --name worker --path scripts/helper.mjs[,other]","  kynver worker auto-complete --run RUN_ID --name worker [--agent-os-id AOS_ID] [--poll-ms 5000] [--max-total-ms 21600000] [--complete-attempts 3] [--complete-backoff-ms 5000] [--base-url URL] [--secret SECRET]","  kynver run reconcile","  kynver run unblock [--agent-os-id AOS_ID] [--base-url URL] [--secret SECRET] [--dry-run]","  kynver plan progress --plan PLAN_ID --row ROW_KEY --role ROLE --status STATUS [--task TASK_ID] [--note NOTE] [--evidence type:value] [--agent-os-id AOS_ID]","  kynver plan verify --plan PLAN_ID [--worktree PATH] [--task TASK_ID] [--human-override] [--local]","  kynver harness verify --worktree PATH [--command CMD] [--json] [--wait-for-admission-ms MS] [--timeout-ms MS]","  kynver plan persist --operation create|add_version|update_metadata --title TITLE (--body-file PATH | --body TEXT) [--slug SLUG] [--plan PLAN_ID] [--summary TEXT] [--failure-kind approval_guard|auth|network|server|tool_interruption]","  kynver plan outbox list","  kynver plan outbox drain [--max N] [--id OUTBOX_ID]","  kynver cleanup [--execute] [--compact] [--node-modules-age-ms MS] [--worktrees-age-ms MS] [--harness-root PATH] [--include-orphans] [--skip-finalize] [--account-bytes]","  kynver wsl-crashes [--json] [--execute] [--purge-all] [--keep-newest N]","    --include-orphans also scans whole worktree directories (<harnessRoot>/worktrees/<runId>/<workerId>/) that no run/worker.json references; orphans pass salvage gates (recent heartbeat, dirty git, ahead of origin/main) before removal.","    Dry-run defaults to fast scan (no byte accounting). Pass --account-bytes for reclaimable byte totals. Pass --compact for a bounded operator summary (no full action list).","  kynver monitor start --run RUN_ID [--name worker] [--agent-os-id AOS_ID] [--poll-ms MS]","  kynver monitor status [--run RUN_ID] [--name worker] [--tick]","  kynver monitor stop --run RUN_ID [--name worker]","  kynver monitor list","  kynver monitor tick --run RUN_ID [--name worker] [--agent-os-id AOS_ID] [--auto-complete] [--renew-leases]","  kynver monitor auto-complete --run RUN_ID --name worker [--agent-os-id AOS_ID] [--base-url URL] [--secret SECRET]","  kynver monitor run-loop --run RUN_ID --monitor-id ID [--name worker] [--agent-os-id AOS_ID] [--poll-ms MS] [--auto-complete] [--renew-leases]","  kynver config ensure-default-repo [--json]","  kynver doctor runtime-takeover [--remediate-default-repo]","  kynver scheduler cutover-check [--json]","  kynver scheduler attest-cutover [--json]","  kynver cron install [--dry-run] [--json] [--install-systemd] [--confirm-qstash-removal] [--skip-watchdog] [--skip-test-fire] [--agent-os-id ID] [--api-base-url URL] [--run RUN_ID]","  kynver cron verify [--json]","  kynver cron status [--json]","  kynver cron tick [--agent-os-id AOS_ID] [--json]","  kynver lane tick landing-maintainer [--fleet] [--repo OWNER/NAME] [--agent-os-id AOS_ID] [--execute] [--json]","  kynver board contract [--agent-os-id ID] [--base-url URL] [--since ISO] [--limit N]"].join(`
+`)),process.exit(e)}async function _R(e=process.argv.slice(2)){if(wd(e,import.meta.url,"kynver"))return;if(e.length===0||cd(e[0]))return Na(0);let r=e.shift(),t,n;if((r==="run"||r==="worker"||r==="plan"||r==="runner"||r==="harness"||r==="monitor"||r==="doctor"||r==="config"||r==="scheduler"||r==="cron"||r==="lane"||r==="board")&&(t=e.shift()),n=e,t&&cd(t)||n.some(cd))return Na(0);let o=to(n),{runsDir:s,worktreesDir:i}=te();if(SR(s,{recursive:!0}),SR(i,{recursive:!0}),r==="daemon"&&hn(),el(r,t)){let a,l=o.run?String(o.run).trim():"";if(l)try{a=L(l).repo}catch{a=void 0}await Za({repoRoot:a,cwd:a})}if(r==="login")return void await Kp(o);if(r==="bootstrap")return void await Qi(o);if(r==="start")return void await dy(o);if(r==="runner"&&t==="credential")return void await $p(o);if(r==="setup")return void await Os(o);if(r==="status")return vR(o);if(r==="daemon")return oa(o)?void await sa(o):void await Ho(o);if(r==="plan"&&t==="progress")return void await vy(o);if(r==="plan"&&t==="verify")return void await Sy(o);if(r==="harness"&&t==="verify")return Cy(o);if(r==="plan"&&t==="persist")return void await wy(o);if(r==="plan"&&t==="outbox"){let a=n.shift();if(a==="list")return void await _y();if(a==="drain")return void await xy(to(n));wR("plan",`outbox ${a??""}`.trim())}if(r==="cleanup")return Ey(o);if(r==="wsl-crashes")return Py(o);if(r==="config"&&t==="ensure-default-repo")return Uh(o.json===!0);if(r==="doctor"&&t==="runtime-takeover")return rR(o);if(r==="scheduler"&&t==="cutover-check")return sR(o.json===!0);if(r==="scheduler"&&t==="attest-cutover")return iR(o.json===!0);if(r==="cron"&&t==="install")return void await cR(o);if(r==="cron"&&t==="verify")return void await uR(o);if(r==="cron"&&t==="status")return void await aR(o.json===!0);if(r==="cron"&&t==="tick")return void await lR(o);if(r==="lane"&&t==="tick"){let a=n.shift();return void await gR(to(n),a)}if(r==="board"&&t==="contract")return void await tR(o);if(r==="run"&&t==="create")return void Eo(o);if(r==="run"&&t==="list")return Zc();if(r==="run"&&t==="resolve")return eu(o);if(r==="run"&&t==="status")return go(o);if(r==="run"&&t==="dispatch")return void await Dr(o);if(r==="run"&&t==="sweep")return void await mn(o);if(r==="run"&&t==="reconcile")return Xc();if(r==="run"&&t==="unblock")return void await Gy(o);if(r==="worker"&&t==="start")return void await fc(o);if(r==="worker"&&t==="list")return kf(o);if(r==="worker"&&t==="status")return cc(o);if(r==="worker"&&t==="tail")return uc(o);if(r==="worker"&&t==="stop")return dc(o);if(r==="worker"&&t==="complete")return void await ui(o);if(r==="worker"&&t==="discard-disposable")return py(o);if(r==="worker"&&t==="auto-complete")return void await pc(o);if(r==="monitor"&&t==="start"){let a=await Hy(o);console.log(JSON.stringify(a,null,2));return}if(r==="monitor"&&t==="status")return void await Fy(o);if(r==="monitor"&&t==="stop")return $y(o);if(r==="monitor"&&t==="list")return Ky();if(r==="monitor"&&t==="tick")return void await Vy(o);if(r==="monitor"&&t==="auto-complete")return void await Pa(o);if(r==="monitor"&&t==="run-loop")return void await jy(o);wR(r,t)}var TO=process.argv[1]&&CR.native(process.argv[1])===CR.native(NO(import.meta.url));TO&&_R().catch(e=>{console.error(e),process.exit(1)});var DO="https://api.vercel.com";function MO(e){let r=e?.trim();return r||process.env.VERCEL_TOKEN?.trim()||null}function xR(e){return(e??"").trim().toUpperCase()}function UO(e){if(typeof e!="string"||!e.trim())return null;let r=e.trim();return r.startsWith("http")?r:`https://${r}`}async function ud(e,r={}){let t=e.trim();if(!t)return{ok:!1,readyState:null,previewUrl:null,error:"missing deployment id or URL"};let n=MO(r.token);if(!n)return{ok:!1,readyState:null,previewUrl:null,error:"VERCEL_TOKEN not configured"};let o=r.teamId?.trim()||process.env.VERCEL_TEAM_ID?.trim(),s=o?`?teamId=${encodeURIComponent(o)}`:"",i=r.fetchImpl??fetch;try{let a=await i(`${DO}/v13/deployments/${encodeURIComponent(t)}${s}`,{headers:{Authorization:`Bearer ${n}`}});if(!a.ok){let u=await a.text();return{ok:!1,readyState:null,previewUrl:null,error:`Vercel API ${a.status}: ${u.slice(0,200)}`}}let l=await a.json();return{ok:!0,readyState:xR(l.readyState??l.state)||null,previewUrl:UO(l.url),error:null}}catch(a){return{ok:!1,readyState:null,previewUrl:null,error:a instanceof Error?a.message:"Vercel API fetch failed"}}}function dd(e,r){let t=xR(e);return t==="READY"?"ready":t==="ERROR"||t==="CANCELED"?"error":t==="BUILDING"||t==="QUEUED"||t==="INITIALIZING"||r?"building":"error"}var ER=/(^|\.)vercel\.app$/i,PR=/^dpl_[a-z0-9]+$/i;function Ta(e){let r=e.trim();if(!r||/vercel\.com/i.test(r))return!1;if(PR.test(r))return!0;try{let t=new URL(r.startsWith("http")?r:`https://${r}`);return ER.test(t.hostname)}catch{return!1}}function WO(e){let r=e.trim();if(!r)return null;try{return new URL(r)}catch{return null}}function LO(e){let r=e.pathname.split("/").filter(Boolean);if(r.length<3)return null;let t=r[r.length-1]?.trim();return!t||t==="deployments"?null:t}function BO(e){let r=e.pathname.split("/").filter(Boolean),t=r.indexOf("deployments");return t<0||t>=r.length-1?null:r[t+1]?.trim()||null}function At(e){let r={kind:"unknown",previewUrl:null,inspectTarget:null,deploymentId:null},t=e.trim();if(!t)return r;if(/^dpl_[a-z0-9]+$/i.test(t))return{kind:"deployment_id",previewUrl:null,inspectTarget:t,deploymentId:t};let n=WO(t);if(!n)return r;if(ER.test(n.hostname)){let o=n.origin;return{kind:"deployment_host",previewUrl:o,inspectTarget:o,deploymentId:null}}if(n.hostname==="vercel.com"||n.hostname.endsWith(".vercel.com")){let o=BO(n)??LO(n);return{kind:"dashboard",previewUrl:null,inspectTarget:o&&PR.test(o)?o:null,deploymentId:o}}return r}function AR(e){return At(e).kind==="dashboard"}var HO=/vercel/i;function pd(e){let r=typeof e=="string"?e.trim().toLowerCase():"";return r==="success"?"success":r==="pending"?"pending":r==="failure"?"failure":r==="error"?"error":"unknown"}function md(e){let r=typeof e=="string"?e.trim():"";return!!(r&&HO.test(r))}function Qo(e){let t=(Array.isArray(e)?e:[]).filter(l=>md(l.context));if(t.length===0)return null;let n=l=>l==="failure"||l==="error"?0:l==="pending"?1:l==="success"?2:1,o=null,s=1/0;for(let l of t){let c=n(pd(l.state));c<s&&(o=l,s=c)}if(!o)return null;let i=typeof o.target_url=="string"&&o.target_url.trim()?o.target_url.trim():null,a=i?At(i):null;return{context:String(o.context??"Vercel").trim(),state:pd(o.state),targetUrl:i,description:typeof o.description=="string"&&o.description.trim()?o.description.trim():null,deploymentId:a?.deploymentId??null,previewUrl:a?.previewUrl??null,dashboardUrl:a?.kind==="dashboard"?i:null}}function FO(e){return e==="success"?"ready":e==="pending"?"building":e==="failure"||e==="error"?"error":"unavailable"}function Da(e){return e.filter(Boolean).join("; ")}function fd(e){let r=typeof e=="string"?e.trim():"";if(!r)return{target:null,classified:null,reason:"missing target_url"};let t=At(r);return t.inspectTarget&&Ta(t.inspectTarget)?{target:t.inspectTarget,classified:t,reason:null}:t.kind==="dashboard"?{target:null,classified:t,reason:t.deploymentId?"dashboard deployment id is not API-inspectable; trust GitHub Vercel status":"dashboard URL is not valid for Vercel API lookup"}:{target:null,classified:t,reason:"unrecognized Vercel URL"}}function gd(e,r={}){let t=r.observedAt??new Date().toISOString(),n=Qo(e);if(!n)return{status:"not_run",previewUrl:null,deploymentUrl:null,summary:"No Vercel GitHub status context on commit",observedAt:t,inspectSkipped:!0,inspectReason:"no_vercel_status_context",githubState:null,vercelContext:null};let o=FO(n.state),s=n.previewUrl??n.dashboardUrl,i=n.previewUrl??n.dashboardUrl;return{status:o,previewUrl:s,deploymentUrl:i,summary:Da([`GitHub ${n.context}=${n.state}`,n.description??"",n.dashboardUrl?"dashboard target_url (API lookup skipped)":""]),observedAt:t,inspectSkipped:!0,inspectReason:n.dashboardUrl&&n.state==="success"?"trusted_github_status_dashboard_url":n.dashboardUrl?"dashboard_url_not_api_inspectable":"github_status_only",githubState:n.state,vercelContext:n.context}}async function IR(e){let r=e.observedAt??new Date().toISOString(),t=gd(e.statuses??[],{observedAt:r}),n=Qo(e.statuses??[]);if(!n)return t;if(n.state==="success")return{...t,inspectSkipped:!0,inspectReason:n.dashboardUrl?"trusted_github_status_dashboard_url":"trusted_github_status"};if(!e.allowInspect)return{...t,inspectSkipped:!0,inspectReason:"api_lookup_disabled"};let{target:o,reason:s}=fd(n.targetUrl);if(!o)return{...t,inspectSkipped:!0,inspectReason:s??"not_api_inspectable",summary:Da([t.summary??"",s??"skipped Vercel API lookup"])};let a=await(e.runInspect??ud)(o),l=new Date().toISOString();if(!a.ok&&a.error?.includes("VERCEL_TOKEN"))return{status:"unavailable",previewUrl:t.previewUrl,deploymentUrl:t.deploymentUrl,summary:"VERCEL_TOKEN not configured for API fallback",observedAt:l,inspectSkipped:!0,inspectReason:"vercel_token_missing",githubState:n.state,vercelContext:n.context};if(!a.ok)return{status:n.state==="pending"?"building":"error",previewUrl:t.previewUrl,deploymentUrl:o.startsWith("http")?o:t.deploymentUrl,summary:Da([`Vercel API lookup ${o} failed`,a.error??""]),observedAt:l,inspectSkipped:!1,inspectReason:null,githubState:n.state,vercelContext:n.context};let c=dd(a.readyState,n.state==="pending"),u=a.previewUrl??(o.startsWith("http")?o:t.previewUrl);return{status:c,previewUrl:u,deploymentUrl:u??t.deploymentUrl,summary:Da([`Vercel API ${o}=${a.readyState??"unknown"}`,c==="ready"?"preview ready":""]),observedAt:l,inspectSkipped:!1,inspectReason:null,githubState:n.state,vercelContext:n.context}}export{Or as CODEX_DEFAULT_MODEL,zs as DEFAULT_DISPATCH_LEASE_MS,Sa as DEFAULT_HARNESS_VERIFY_COMMANDS,ha as DEFAULT_HEAVY_VERIFICATION_MAX_CONCURRENT,Fi as DEFAULT_MAX_ACTIONS_PER_SWEEP,Io as DEFAULT_NODE_MODULES_AGE_MS,Hi as DEFAULT_RUN_DIRECTORIES_AGE_MS,Bi as DEFAULT_TERMINAL_WORKTREES_AGE_MS,Pe as DEFAULT_WORKER_PROVIDER,Oo as DEFAULT_WORKTREES_AGE_MS,zd as DEFAULT_WSL_CRASH_DUMP_CRITICAL_BYTES,qd as DEFAULT_WSL_CRASH_DUMP_WARN_BYTES,Vd as DEFAULT_WSL_HOST_CRITICAL_FREE_BYTES,Gr as DEFAULT_WSL_HOST_MOUNT,jd as DEFAULT_WSL_HOST_WARN_FREE_BYTES,nt as EMBEDDED_INSTRUCTION_BUNDLE,qp as EMBEDDED_INSTRUCTION_BUNDLE_VERSION,Id as FORBIDDEN_WORKER_ENV_KEYS,Mi as HARNESS_BUILD_CACHE_RELATIVE_PATHS,Vo as HEAVY_VERIFICATION_TOKEN_REQUIRED,js as HERMES_OPENAI_CODEX_DEFAULT_MODEL,ig as INSTRUCTION_BUNDLE_REFRESH_TTL_MS,Ja as MEMORY_COST_MANAGED_PACKAGES,Ya as MEMORY_COST_PACKAGE_MIN_VERSIONS,Wn as MemoryCostPackageVersionGuardError,Dc as OPENAI_CODEX_PROVIDER,g_ as ORCHESTRATION_ACTION_KINDS,h_ as ORCHESTRATION_POLICY_DECISIONS,Mc as ORCHESTRATION_POLICY_MODES,Tn as PACKAGE_VERSION,ng as PINNED_INSTRUCTION_BUNDLE_PUBLIC_KEYS,un as RUN_METADATA_ACTIVE_SIGNAL_MS,wg as TERMINAL_WORKER_ARCHIVE_AGE_MS,d_ as TRANSIENT_OPENAI_CODEX_ERROR_CLASSES,Ds as WORKER_PERSONA_CATALOG,P_ as applyProductionDatabaseToProcess,Ni as archiveTerminalWorkerMetadata,Xa as assertMemoryCostPackageVersionGuard,Jo as assessAutoCompleteEligibility,Ct as assessBuildAdmission,zr as assessExitedWorkerSalvage,In as assessHeavyVerificationGate,gu as assessOrphanWorktreeSafety,tc as assessPrHandoffRequirement,Xr as assessWorkerLanding,dl as assessWorkerLandingContract,GR as auditWorkerEnv,dt as autoCompleteWorker,pc as autoCompleteWorkerCli,vo as buildBoxResourceSnapshotFromGate,vm as buildCodexExecArgv,eg as buildDispatchTaskText,Wc as buildForegroundHarnessIdempotencyKey,km as buildHermesOpenAiCodexChatArgv,Qa as buildMemoryCostPackageGuardInput,Ml as buildOrchestrationProviderInventory,Yl as buildPrompt,pn as buildRunListRows,ua as buildSystemdRunArgv,Ci as canonicalJsonStringify,kr as canonicalWorkerDir,Ra as classifyHeavyShellCommand,hp as classifyNpmAuditOutcome,cg as classifyOpenAiCodexError,um as classifyOrchestrationRisk,dp as classifyRepoSearchMeta,bs as classifyShellCommandOutcome,At as classifyVercelUrl,xa as classifyWorkerHealth,bo as cleanupWslCrashDumps,Hl as codexProvider,Jc as collectFilesystemLiveRunKeys,IR as collectVercelEvidence,cm as compareProviderCandidates,Ln as compareSemver,ui as completeWorker,Ep as computeAttention,Zw as computeInstructionBundleVersion,T as computeWorkerStatus,Ko as countActiveHeavyVerificationSlots,Eo as createRun,so as defaultBoxId,e_ as deriveInstructionBundleKeyId,Gt as deriveRunStatus,Rs as diagnoseRepoSearchFailure,jr as discoverDefaultRepo,Va as discoverDefaultRepoCandidates,Mn as discoverDefaultRepoForPersistence,Ei as discoverProductionDbEnvFilePaths,Dr as dispatchRun,Ri as drainPlanOutbox,El as enforceCursorWorkerProvider,Za as enforceMemoryCostPackageGuardAtStartup,Tc as ensureInstructionBundle,oi as ensurePrReadyHandoff,gb as evaluateMemoryCostPackageGuardAtStartup,ls as evaluateMemoryCostPackageVersionGuard,b_ as evaluateOrchestrationPolicy,gd as evidenceFromGitHubVercelStatus,gg as expandHomePath,vi as extractPlanOutboxFromTask,rc as extractPrUrlFromText,il as extractSearchMeta,fp as extractSearchMetaFromToolLine,wa as formatAutoCompleteOutcomeNotice,pg as formatCronJobDeliveryFailure,Oy as formatHarnessToolReadable,Xw as formatHeartbeatLine,ib as formatMemoryCostPackageGuardError,On as formatMonitorTickNotice,dg as formatOpenAiCodexFailureNotice,bi as formatPlanOutboxHandoffBlock,mp as formatRepoSearchGuidance,cn as formatResolvedDefaultRepo,_a as formatWorkerCompleteNotice,Yo as formatWorkerStatusNotice,ba as gateWorkerShellCommand,$v as getActiveInstructionBundle,pr as getActiveInstructionBundleSource,Ar as getActiveInstructionBundleVersion,Yr as getHarnessPaths,Ea as getMonitorStatus,st as getOrchestrationProviderCapability,Ms as getPersonaDefaultRoleLane,Zp as getPersonaDispatchLane,Cl as getWorkerPersonaCatalogEntry,Ka as gitRepoRoot,ge as harnessRunsDir,ru as harnessStorageSnapshot,ur as harnessWorktreesDir,an as hasNestedRunsSegment,mr as hashPlanBody,Bl as hermesCodexProvider,Ic as instructionBundleCachePath,Gn as isActiveHarnessWorker,Je as isClaudeFamilyProvider,AR as isDashboardVercelUrl,Qw as isEngagementRequiredSkip,ne as isFinishedWorkerStatus,Ba as isForbiddenWorkerEnvKey,tu as isGeneratedHarnessPath,jc as isHarnessRunMetadataPath,Bd as isHarnessWorktreeRepo,Pn as isHeavyVerificationGateSkipped,Ta as isInspectableVercelTarget,Yv as isKnownWorkerPersonaSlug,Ld as isKynverMonorepoRoot,Zr as isLandingBlockedWorkerStatus,Uc as isOrchestrationEnforceTasksEnabled,yu as isPipelineCleanupEnabled,ks as isRgExcludeScopeTarget,sn as isSignedInstructionBundleShape,hs as isSingleFileSearchTarget,Cn as isSystemdRunAvailable,sl as isTerminalHeartbeatPhase,md as isVercelStatusContext,ds as isWslHost,Iy as joinHarnessNotice,pl as landingContractAttentionReason,Vu as listActiveHeavyVerificationSlots,Od as listForbiddenWorkerEnvKeys,qo as listMonitors,Al as listOrchestrationProviderCapabilities,mt as listOutboxItems,Zc as listRuns,Qc as listRunsCli,Nc as loadInstructionBundleCache,v as loadUserConfig,_R as main,pa as mergeNodeOptionsForBuildCheck,pp as metaToNormalizedRgCommand,dm as normalizeCursorModelAlias,ie as normalizeHarnessRoot,ys as normalizeRepoSearchCommand,up as normalizeRgArgv,We as observeRunnerDiskGate,cr as observeWslCrashDumps,rl as observeWslHostDisk,f_ as orchestrationAuditForWorkerJson,to as parseArgs,cv as parseClaudeStream,$t as parseHarnessStream,ye as parseHeartbeat,wi as parseRawEd25519Key,Qd as parseWslCrashDumpFilename,Ii as persistDefaultRepo,on as persistPlan,Qo as pickVercelStatusContext,Pr as postJson,rS as preferCursorExecutor,$s as preflightClaudeModel,at as preflightCodexModel,Ks as preflightCursorModel,Hs as probeClaudeOAuthBinding,Il as probeCodexOAuthBinding,Fs as probeCursorOAuthBinding,Dl as probeHermesCliAdapter,oo as probeHermesOpenAiCodexBinding,xS as probeOrchestrationProviderBinding,za as probeRepoPackageVersions,Nl as providerCapableForRisk,Zd as readKernelCorePattern,Wt as readMemAvailableBytes,kg as readProductionDbKeysFromEnvFile,ep as readWslConfigCrashDumpSettings,jo as reclaimStaleHeavyVerificationSlots,Di as reconcileLocalOnlyMergedPrAttention,Xc as reconcileRunsCli,dn as reconcileStaleWorkers,Ti as reconcileWorkerMetadata,Z_ as reconcileWorkerMetadataCli,v_ as redactHarness,gr as redactProviderErrorText,An as releaseHeavyVerificationSlot,D_ as remediateDefaultRepo,Oi as repairMissingRunMetadata,N_ as repairNestedRunsPath,K as resolveBaseUrl,JS as resolveBoxKindFromEnv,Ts as resolveBundlePersona,Lv as resolveCallbackSecret,G as resolveCallbackSecretWithMint,Ir as resolveCodexOrchestrationAdapter,no as resolveConfiguredWorkerProvider,Ke as resolveDefaultRepo,Ai as resolveDefaultRepoForPersistence,fe as resolveHarnessRoot,Ig as resolveHarnessRunByName,eu as resolveHarnessRunCli,xn as resolveHeavyVerificationMaxConcurrent,Pc as resolveInstructionBundlePublicKey,Xt as resolveInstructionText,ug as resolveOpenAiCodexRetryBudget,_i as resolveOrchestrationPolicyMode,Wl as resolveOrchestrationRouting,ot as resolvePolicyThreshold,yg as resolveProductionDatabaseUrl,li as resolveRunTargetArg,fd as resolveVercelInspectTarget,$c as resolveWorkerJsonPath,He as resolveWorkerTargetArgs,Xd as resolveWslCrashDumpDir,nl as resolveWslWindowsUsername,va as runBoundedBuildCheck,Ho as runDaemon,kt as runDirHasActiveRetentionSignals,Xi as runHarnessCleanup,Go as runHarnessVerifyCommands,Pt as runMonitorTick,ku as runPipelineHarnessCleanup,go as runStatus,_o as safeDatabaseUrlHint,mg as sanitizeOrchestrationAudit,Oc as saveInstructionBundleCache,Ye as saveUserConfig,Nd as scrubClaudeEnv,De as scrubWorkerEnv,Bs as selectCheapestCapableProvider,qa as semverAtLeast,Sl as setActiveInstructionBundle,xc as shouldAutoCleanupWslCrashDumps,el as shouldEnforceMemoryCostPackageGuardCli,mc as spawnCompletionSidecar,Aa as spawnMonitorSidecar,di as spawnWorkerProcess,fc as startWorker,dc as stopWorker,cl as summarizeEvent,gp as summarizeNpmAuditReport,Rp as summarizeShellToolCallEvent,rp as summarizeWslCrashDumpRecoverySteps,Gd as summarizeWslRecoverySteps,mn as sweepRun,uc as tailWorker,Ws as taskAllowsClaudeWorker,qr as terminalFinalResultFromHeartbeat,wt as tryAcquireHeavyVerificationSlot,bl as tryResolveBaseUrl,Is as tryResolveCallbackSecretWithMint,Na as usage,KC as validateOwnedPaths,ac as validateRepo,co as validateRunId,jC as validateTailLines,df as validateWorkerName,og as verifyInstructionBundleSignatureWithKey,Ac as verifySignedInstructionBundle,ya as waitForHeavyVerificationSlot,Yc as workerDirHasActiveRetentionSignals,Jv as workerPersonaLandingSlugs,wl as workerPersonaReviewSlugs,cc as workerStatus};